From 6c2983578c65ef16acdaefaaefd46b50953f2613 Mon Sep 17 00:00:00 2001
From: Rodrigo Porcionato <rodrigoporcionato@gmail.com>
Date: Thu, 27 Aug 2020 11:31:29 -0300
Subject: [PATCH 001/788] Update _index.html

---
 content/pt/_index.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/pt/_index.html b/content/pt/_index.html
index 8f1fbd9658..de5a33edb7 100644
--- a/content/pt/_index.html
+++ b/content/pt/_index.html
@@ -43,12 +43,12 @@ O Kubernetes é Open Source, o que te oferece a liberdade de utilizá-lo em seu
         <br>
         <br>
         <br>
-        <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2019" button id="desktopKCButton">KubeCon em Barcelona on Maio 20-23, 2019</a>
+        <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2019" button id="desktopKCButton">KubeCon em Barcelona em Maio 20-23, 2019</a>
         <br>
         <br>
         <br>
         <br>
-        <a href="https://www.lfasiallc.com/events/kubecon-cloudnativecon-china-2019" button id="desktopKCButton">KubeCon em Shanghai em June 24-26, 2019</a>
+        <a href="https://www.lfasiallc.com/events/kubecon-cloudnativecon-china-2019" button id="desktopKCButton">KubeCon em Shanghai em Junho, 24-26 de 2019</a>
 </div>
 <div id="videoPlayer">
     <iframe data-url="https://www.youtube.com/embed/H06qrNmGqyE?autoplay=1" frameborder="0" allowfullscreen></iframe>
@@ -58,4 +58,4 @@ O Kubernetes é Open Source, o que te oferece a liberdade de utilizá-lo em seu
 
 {{< blocks/kubernetes-features >}}
 
-{{< blocks/case-studies >}}
\ No newline at end of file
+{{< blocks/case-studies >}}

From 9ee52f94c480c2d978e8dc332d39dc45d792ee8a Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 17 Sep 2020 18:37:24 +0900
Subject: [PATCH 002/788] Copy en/docs/contribute/review/reviewing-prs.md.

---
 .../docs/contribute/review/reviewing-prs.md   | 97 +++++++++++++++++++
 1 file changed, 97 insertions(+)
 create mode 100644 content/ja/docs/contribute/review/reviewing-prs.md

diff --git a/content/ja/docs/contribute/review/reviewing-prs.md b/content/ja/docs/contribute/review/reviewing-prs.md
new file mode 100644
index 0000000000..ff6ef9d709
--- /dev/null
+++ b/content/ja/docs/contribute/review/reviewing-prs.md
@@ -0,0 +1,97 @@
+---
+title: Reviewing pull requests
+content_type: concept
+main_menu: true
+weight: 10
+---
+
+<!-- overview -->
+
+Anyone can review a documentation pull request. Visit the [pull requests](https://github.com/kubernetes/website/pulls) section in the Kubernetes website repository to see open pull requests.
+
+Reviewing documentation pull requests is a
+great way to introduce yourself to the Kubernetes community.
+It helps you learn the code base and build trust with other contributors.
+
+Before reviewing, it's a good idea to:
+
+- Read the  [content guide](/docs/contribute/style/content-guide/) and
+  [style guide](/docs/contribute/style/style-guide/) so you can leave informed comments.
+- Understand the different
+  [roles and responsibilities](/docs/contribute/participate/roles-and-responsibilities/)
+  in the Kubernetes documentation community.
+
+<!-- body -->
+
+## Before you begin
+
+Before you start a review:
+
+- Read the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md) and ensure that you abide by it at all times.
+- Be polite, considerate, and helpful.
+- Comment on positive aspects of PRs as well as changes.
+- Be empathetic and mindful of how your review may be received.
+- Assume good intent and ask clarifying questions.
+- Experienced contributors, consider pairing with new contributors whose work requires extensive changes.
+
+## Review process
+
+In general, review pull requests for content and style in English.
+
+1.  Go to
+    [https://github.com/kubernetes/website/pulls](https://github.com/kubernetes/website/pulls).
+    You see a list of every open pull request against the Kubernetes website and
+    docs.
+
+2.  Filter the open PRs using one or all of the following labels:
+    - `cncf-cla: yes` (Recommended): PRs submitted by contributors who have not signed the CLA cannot be merged. See [Sign the CLA](/docs/contribute/new-content/overview/#sign-the-cla) for more information.
+    - `language/en` (Recommended): Filters for english language PRs only.
+    - `size/<size>`: filters for PRs of a certain size. If you're new, start with smaller PRs.
+
+    Additionally, ensure the PR isn't marked as a work in progress. PRs using the `work in progress` label are not ready for review yet.
+
+3.  Once you've selected a PR to review, understand the change by:
+    - Reading the PR description to understand the changes made, and read any linked issues
+    - Reading any comments by other reviewers
+    - Clicking the **Files changed** tab to see the files and lines changed
+    - Previewing the changes in the Netlify preview build by scrolling to the PR's build check section at the bottom of the **Conversation** tab and clicking the **deploy/netlify** line's **Details** link.
+
+4.  Go to the **Files changed** tab to start your review.
+    1. Click on the `+` symbol  beside the line you want to comment on.
+    2. Fill in any comments you have about the line and click either **Add single comment** (if you have only one comment to make) or  **Start a review** (if you have multiple comments to make).
+    3. When finished, click **Review changes** at the top of the page. Here, you can add
+       add a summary of your review (and leave some positive comments for the contributor!),
+      approve the PR, comment or request changes as needed. New contributors should always
+      choose **Comment**.
+
+## Reviewing checklist
+
+When reviewing, use the following as a starting point.
+
+### Language and grammar
+
+- Are there any obvious errors in language or grammar? Is there a better way to phrase something?
+- Are there any complicated or archaic words which could be replaced with a simpler word?
+- Are there any words, terms or phrases in use which could be replaced with a non-discriminatory alternative?
+- Does the word choice and its capitalization follow the [style guide](/docs/contribute/style/style-guide/)?
+- Are there long sentences which could be shorter or less complex?
+- Are there any long paragraphs which might work better as a list or table?
+
+### Content
+
+- Does similar content exist elsewhere on the Kubernetes site?
+- Does the content excessively link to off-site, individual vendor or non-open source documentation?
+
+### Website
+
+- Did this PR change or remove a page title, slug/alias or anchor link? If so, are there broken links as a result of this PR? Is there another option, like changing the page title without changing the slug?
+- Does the PR introduce a new page? If so:
+  - Is the page using the right [page content type](/docs/contribute/style/page-content-types/) and associated Hugo shortcodes?
+  - Does the page appear correctly in the section's side navigation (or at all)?
+  - Should the page appear on the [Docs Home](/docs/home/) listing?
+- Do the changes show up in the Netlify preview? Be particularly vigilant about lists, code blocks, tables, notes and images.
+
+### Other
+
+For small issues with a PR, like typos or whitespace, prefix your comments with `nit:`.  This lets the author know the issue is non-critical.
+

From 45b4e5a39af1ec17cb70674c18e2f92c05ccab9c Mon Sep 17 00:00:00 2001
From: Felipe <femrtnz@users.noreply.github.com>
Date: Wed, 25 Nov 2020 09:07:35 +0000
Subject: [PATCH 003/788] Update content/pt/_index.html

Co-authored-by: bl-ue <54780737+bl-ue@users.noreply.github.com>
---
 content/pt/_index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/_index.html b/content/pt/_index.html
index de5a33edb7..c2374521be 100644
--- a/content/pt/_index.html
+++ b/content/pt/_index.html
@@ -43,7 +43,7 @@ O Kubernetes é Open Source, o que te oferece a liberdade de utilizá-lo em seu
         <br>
         <br>
         <br>
-        <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2019" button id="desktopKCButton">KubeCon em Barcelona em Maio 20-23, 2019</a>
+        <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2019" button id="desktopKCButton">KubeCon em Barcelona em Maio 20-23 de 2019</a>
         <br>
         <br>
         <br>

From 613cb9d4f3d03d15574412ad4013d99aee5c20df Mon Sep 17 00:00:00 2001
From: prankul88 <prankul.mahajan@india.nec.com>
Date: Tue, 8 Dec 2020 14:54:49 +0530
Subject: [PATCH 004/788] Update expose service intro

---
 .../docs/tutorials/kubernetes-basics/expose/expose-intro.html   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/en/docs/tutorials/kubernetes-basics/expose/expose-intro.html
index c610b6e9f4..cad917a4dc 100644
--- a/content/en/docs/tutorials/kubernetes-basics/expose/expose-intro.html
+++ b/content/en/docs/tutorials/kubernetes-basics/expose/expose-intro.html
@@ -37,7 +37,7 @@ weight: 10
 				<li><i>ClusterIP</i> (default) - Exposes the Service on an internal IP in the cluster. This type makes the Service only reachable from within the cluster.</li>
 				<li><i>NodePort</i> - Exposes the Service on the same port of each selected Node in the cluster using NAT. Makes a Service accessible from outside the cluster using <code>&lt;NodeIP&gt;:&lt;NodePort&gt;</code>. Superset of ClusterIP.</li>
 				<li><i>LoadBalancer</i> - Creates an external load balancer in the current cloud (if supported) and assigns a fixed, external IP to the Service. Superset of NodePort.</li>
-				<li><i>ExternalName</i> - Exposes the Service using an arbitrary name (specified by <code>externalName</code> in the spec) by returning a CNAME record with the name. No proxy is used. This type requires v1.7 or higher of <code>kube-dns</code>.</li>
+				<li><i>ExternalName</i> - Maps the Service to the contents of the <code>externalName</code> field (e.g. `foo.bar.example.com`), by returning a <code>CNAME</code> record with its value. No proxying of any kind is set up. This type requires v1.7 or higher of <code>kube-dns</code>, or CoreDNS version 0.0.8 or higher.</li>
 			</ul>
 			<p>More information about the different types of Services can be found in the <a href="/docs/tutorials/services/source-ip/">Using Source IP</a> tutorial. Also see <a href="/docs/concepts/services-networking/connect-applications-service">Connecting Applications with Services</a>.</p>
 			<p>Additionally, note that there are some use cases with Services that involve not defining <code>selector</code> in the spec. A Service created without <code>selector</code> will also not create the corresponding Endpoints object. This allows users to manually map a Service to specific endpoints. Another possibility why there may be no selector is you are strictly using <code>type: ExternalName</code>.</p>

From 968512ada1eae813ab20ffdce76b1e5508c198b1 Mon Sep 17 00:00:00 2001
From: "Anna Jung (VMware)" <antheaj@vmware.com>
Date: Wed, 9 Dec 2020 10:06:23 -0600
Subject: [PATCH 005/788] Tracking commit for v1.21 docs


From dbcd6627cb2597f271938f300ee3b68dfd0b76d9 Mon Sep 17 00:00:00 2001
From: Levent Ogut <levent@ogut.me>
Date: Sun, 20 Dec 2020 17:49:00 +0300
Subject: [PATCH 006/788] update container-lifecycle-hooks.md for third hook
 handler i,.e. TCP

unless I am missing something TCP handler is missing
---
 .../en/docs/concepts/containers/container-lifecycle-hooks.md   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/containers/container-lifecycle-hooks.md b/content/en/docs/concepts/containers/container-lifecycle-hooks.md
index fa74d94221..ae1c902336 100644
--- a/content/en/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/en/docs/concepts/containers/container-lifecycle-hooks.md
@@ -47,10 +47,11 @@ A more detailed description of the termination behavior can be found in
 ### Hook handler implementations
 
 Containers can access a hook by implementing and registering a handler for that hook.
-There are two types of hook handlers that can be implemented for Containers:
+There are three types of hook handlers that can be implemented for Containers:
 
 * Exec - Executes a specific command, such as `pre-stop.sh`, inside the cgroups and namespaces of the Container.
 Resources consumed by the command are counted against the Container.
+* TCP - Opens a TCP connecton against a specific port on the Container.
 * HTTP - Executes an HTTP request against a specific endpoint on the Container.
 
 ### Hook handler execution

From ad85bdb054f45b373e178cd93ae87afdb55809f7 Mon Sep 17 00:00:00 2001
From: Mike Patterson <mpatters72@users.noreply.github.com>
Date: Sun, 20 Dec 2020 11:36:20 -0800
Subject: [PATCH 007/788] Include missing cert export step

Updating the instructions to include missing step of getting issued cert exported from kubernetes, decoded, and ready for kubeconfig setup.
---
 .../access-authn-authz/certificate-signing-requests.md      | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index 6d05d0436a..045b1661aa 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -252,6 +252,12 @@ kubectl get csr/john -o yaml
 
 The certificate value is in Base64-encoded format under `status.certificate`.
 
+Export the issued certificate from the CertificateSigningRequest.
+
+```
+kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > /home/vagrant/work/john.crt
+```
+
 ### Create Role and RoleBinding
 
 With the certificate created. it is time to define the Role and RoleBinding for

From 48d3dbe0d3e95f3b3040b92d86cff291480019a3 Mon Sep 17 00:00:00 2001
From: Giridharaprasad <32255588+gprasath@users.noreply.github.com>
Date: Thu, 24 Dec 2020 23:01:36 +0530
Subject: [PATCH 008/788] Update change-default-storage-class.md

---
 .../tasks/administer-cluster/change-default-storage-class.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/change-default-storage-class.md b/content/en/docs/tasks/administer-cluster/change-default-storage-class.md
index 9c08a2a4ad..bb9d9a6e87 100644
--- a/content/en/docs/tasks/administer-cluster/change-default-storage-class.md
+++ b/content/en/docs/tasks/administer-cluster/change-default-storage-class.md
@@ -70,7 +70,7 @@ for details about addon manager and how to disable individual addons.
 
 1. Mark a StorageClass as default:
 
-      Similarly to the previous step, you need to add/set the annotation
+      Similar to the previous step, you need to add/set the annotation
       `storageclass.kubernetes.io/is-default-class=true`.
 
       ```bash

From e72ec8fbd0463cc4dc885025b02e6348d9e983e3 Mon Sep 17 00:00:00 2001
From: Charly Rippenkroeger <36778983+CharlyRipp@users.noreply.github.com>
Date: Fri, 8 Jan 2021 13:40:07 -0600
Subject: [PATCH 009/788] Update misleading documentation

Update misleading information that HTTPS is required and link to self-documented code to find more edge-case configuration options
---
 .../en/docs/reference/access-authn-authz/authentication.md    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md
index c385a15fda..da1dcfd6f0 100644
--- a/content/en/docs/reference/access-authn-authz/authentication.md
+++ b/content/en/docs/reference/access-authn-authz/authentication.md
@@ -457,7 +457,7 @@ clusters:
   - name: name-of-remote-authn-service
     cluster:
       certificate-authority: /path/to/ca.pem         # CA for verifying the remote service.
-      server: https://authn.example.com/authenticate # URL of remote service to query. Must use 'https'.
+      server: https://authn.example.com/authenticate # URL of remote service to query. 'https' recommended for production.
 
 # users refers to the API server's webhook configuration.
 users:
@@ -475,6 +475,8 @@ contexts:
   name: webhook
 ```
 
+Refer to [Cluster Struct](https://github.com/kubernetes/kubernetes/blob/2b8cac754c88900ea3ad91d6c3f0997b602a3051/staging/src/k8s.io/client-go/tools/clientcmd/api/v1/types.go#L63) for more configuration options.
+
 When a client attempts to authenticate with the API server using a bearer token as discussed [above](#putting-a-bearer-token-in-a-request),
 the authentication webhook POSTs a JSON-serialized `TokenReview` object containing the token to the remote service.
 

From e4ac283321c9eedbd24dfa42a81f18eab717a0b8 Mon Sep 17 00:00:00 2001
From: carlory <baofa.fan@daocloud.io>
Date: Mon, 4 Jan 2021 15:39:01 +0800
Subject: [PATCH 010/788] deprecate kubeadm alpha kubeconfig in 1.21

---
 .../reference/setup-tools/kubeadm/_index.md   |  2 +
 .../generated/kubeadm_alpha_kubelet.md        | 48 ---------
 .../generated/kubeadm_alpha_kubelet_config.md | 48 ---------
 ...adm_alpha_kubelet_config_enable-dynamic.md | 87 ----------------
 .../generated/kubeadm_alpha_selfhosting.md    | 48 ---------
 .../kubeadm_alpha_selfhosting_pivot.md        | 99 -------------------
 ...ha_kubeconfig.md => kubeadm_kubeconfig.md} |  2 -
 ...fig_user.md => kubeadm_kubeconfig_user.md} |  5 +-
 .../setup-tools/kubeadm/kubeadm-alpha.md      | 29 +-----
 .../setup-tools/kubeadm/kubeadm-kubeconfig.md | 21 ++++
 10 files changed, 26 insertions(+), 363 deletions(-)
 delete mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md
 delete mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md
 delete mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md
 delete mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md
 delete mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md
 rename content/en/docs/reference/setup-tools/kubeadm/generated/{kubeadm_alpha_kubeconfig.md => kubeadm_kubeconfig.md} (93%)
 rename content/en/docs/reference/setup-tools/kubeadm/generated/{kubeadm_alpha_kubeconfig_user.md => kubeadm_kubeconfig_user.md} (92%)
 create mode 100644 content/en/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig.md

diff --git a/content/en/docs/reference/setup-tools/kubeadm/_index.md b/content/en/docs/reference/setup-tools/kubeadm/_index.md
index d747c05124..ad84378d1d 100755
--- a/content/en/docs/reference/setup-tools/kubeadm/_index.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/_index.md
@@ -26,5 +26,7 @@ To install kubeadm, see the [installation guide](/docs/setup/production-environm
 * [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config) if you initialized your cluster using kubeadm v1.7.x or lower, to configure your cluster for `kubeadm upgrade`
 * [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token) to manage tokens for `kubeadm join`
 * [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset) to revert any changes made to this host by `kubeadm init` or `kubeadm join`
+* [kubeadm certs](/docs/reference/setup-tools/kubeadm/kubeadm-certs) to manage Kubernetes certificates
+* [kubeadm kubeconfig](/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig) to manage kubeconfig files
 * [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version) to print the kubeadm version
 * [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha) to preview a set of features made available for gathering feedback from the community
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md
deleted file mode 100644
index 055c8ecac5..0000000000
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md
+++ /dev/null
@@ -1,48 +0,0 @@
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
-### Options
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubelet</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
-### Options inherited from parent commands
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md
deleted file mode 100644
index 563d9fe227..0000000000
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md
+++ /dev/null
@@ -1,48 +0,0 @@
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
-### Options
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for config</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
-### Options inherited from parent commands
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md
deleted file mode 100644
index 278def1dd3..0000000000
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md
+++ /dev/null
@@ -1,87 +0,0 @@
-
-### Synopsis
-
-
-Enable or update dynamic kubelet configuration for a Node, against the kubelet-config-1.X ConfigMap in the cluster, where X is the minor version of the desired kubelet version.
-
-WARNING: This feature is still experimental, and disabled by default. Enable only if you know what you are doing, as it may have surprising side-effects at this stage.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha kubelet config enable-dynamic [flags]
-```
-
-### Examples
-
-```
-  # Enable dynamic kubelet configuration for a Node.
-  kubeadm alpha phase kubelet enable-dynamic-config --node-name node-1 --kubelet-version 1.18.0
-  
-  WARNING: This feature is still experimental, and disabled by default. Enable only if you know what you are doing, as it
-  may have surprising side-effects at this stage.
-```
-
-### Options
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for enable-dynamic</td>
-</tr>
-
-<tr>
-<td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
-</tr>
-
-<tr>
-<td colspan="2">--kubelet-version string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The desired version for the kubelet</td>
-</tr>
-
-<tr>
-<td colspan="2">--node-name string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Name of the node that should enable the dynamic kubelet configuration</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
-### Options inherited from parent commands
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md
deleted file mode 100644
index 77646b064b..0000000000
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md
+++ /dev/null
@@ -1,48 +0,0 @@
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
-### Options
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for selfhosting</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
-### Options inherited from parent commands
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md
deleted file mode 100644
index 554b8fe4c6..0000000000
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md
+++ /dev/null
@@ -1,99 +0,0 @@
-
-### Synopsis
-
-
-Convert static Pod files for control plane components into self-hosted DaemonSets configured via the Kubernetes API.
-
-See the documentation for self-hosting limitations.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha selfhosting pivot [flags]
-```
-
-### Examples
-
-```
-  # Convert a static Pod-hosted control plane into a self-hosted one.
-  
-  kubeadm alpha phase self-hosting convert-from-staticpods
-```
-
-### Options
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where certificates are stored</td>
-</tr>
-
-<tr>
-<td colspan="2">--config string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
-</tr>
-
-<tr>
-<td colspan="2">-f, --force</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Pivot the cluster without prompting for confirmation</td>
-</tr>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for pivot</td>
-</tr>
-
-<tr>
-<td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
-</tr>
-
-<tr>
-<td colspan="2">-s, --store-certs-in-secrets</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable storing certs in secrets</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
-### Options inherited from parent commands
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig.md
similarity index 93%
rename from content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig.md
rename to content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig.md
index 67f30bc3f8..67ee58fdd7 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig.md
@@ -4,8 +4,6 @@
 
 Kubeconfig file utilities.
 
-Alpha Disclaimer: this command is currently alpha.
-
 ### Options
 
    <table style="width: 100%; table-layout: fixed;">
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig_user.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig_user.md
similarity index 92%
rename from content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig_user.md
rename to content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig_user.md
index bdb246232f..8ff987503c 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig_user.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig_user.md
@@ -4,17 +4,16 @@
 
 Output a kubeconfig file for an additional user.
 
-Alpha Disclaimer: this command is currently alpha.
 
 ```
-kubeadm alpha kubeconfig user [flags]
+kubeadm kubeconfig user [flags]
 ```
 
 ### Examples
 
 ```
   # Output a kubeconfig file for an additional user named foo using a kubeadm config file bar
-  kubeadm alpha kubeconfig user --client-name=foo --config=bar
+  kubeadm kubeconfig user --client-name=foo --config=bar
 ```
 
 ### Options
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
index eaef0f5140..dd946c9737 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
@@ -9,34 +9,7 @@ weight: 90
  from the community. Please try it out and give us feedback!
 {{< /caution >}}
 
-## kubeadm alpha kubeconfig user {#cmd-phase-kubeconfig}
-
-The `user` subcommand can be used for the creation of kubeconfig files for additional users.
-
-{{< tabs name="tab-kubeconfig" >}}
-{{< tab name="kubeconfig" include="generated/kubeadm_alpha_kubeconfig.md" />}}
-{{< tab name="user" include="generated/kubeadm_alpha_kubeconfig_user.md" />}}
-{{< /tabs >}}
-
-## kubeadm alpha kubelet config {#cmd-phase-kubelet}
-
-Use the following command to enable the DynamicKubeletConfiguration feature.
-
-{{< tabs name="tab-kubelet" >}}
-{{< tab name="kubelet" include="generated/kubeadm_alpha_kubelet.md" />}}
-{{< tab name="enable-dynamic" include="generated/kubeadm_alpha_kubelet_config_enable-dynamic.md" />}}
-{{< /tabs >}}
-
-## kubeadm alpha selfhosting pivot {#cmd-selfhosting}
-
-The subcommand `pivot` can be used to convert a static Pod-hosted control plane into a self-hosted one.
-
-[Documentation](/docs/setup/production-environment/tools/kubeadm/self-hosting/)
-
-{{< tabs name="selfhosting" >}}
-{{< tab name="selfhosting" include="generated/kubeadm_alpha_selfhosting.md" />}}
-{{< tab name="pivot" include="generated/kubeadm_alpha_selfhosting_pivot.md" />}}
-{{< /tabs >}}
+Currently there are no experimental commands under `kubeadm alpha`.
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig.md
new file mode 100644
index 0000000000..f912285f7d
--- /dev/null
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig.md
@@ -0,0 +1,21 @@
+---
+title: kubeadm kubeconfig
+content_type: concept
+weight: 90
+---
+
+`kubeadm kubeconfig` provides utilities for managing kubeconfig files.
+
+## kubeadm kubeconfig {#cmd-kubeconfig}
+
+{{< tabs name="tab-kubeconfig" >}}
+{{< tab name="overview" include="generated/kubeadm_kubeconfig.md" />}}
+{{< /tabs >}}
+
+## kubeadm kubeconfig user {#cmd-kubeconfig-user}
+
+This command can be used to output a kubeconfig file for an additional user.
+
+{{< tabs name="tab-kubeconfig-user" >}}
+{{< tab name="user" include="generated/kubeadm_kubeconfig_user.md" />}}
+{{< /tabs >}}
\ No newline at end of file

From 7347a9d008d593b9b04b2ff251d6e7c4e99f89f2 Mon Sep 17 00:00:00 2001
From: Charly Rippenkroeger <36778983+CharlyRipp@users.noreply.github.com>
Date: Mon, 11 Jan 2021 11:57:32 -0600
Subject: [PATCH 011/788] Remove code reference

Remove reference in favor of https://github.com/kubernetes/website/issues/23889
---
 content/en/docs/reference/access-authn-authz/authentication.md | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md
index da1dcfd6f0..41a4054783 100644
--- a/content/en/docs/reference/access-authn-authz/authentication.md
+++ b/content/en/docs/reference/access-authn-authz/authentication.md
@@ -475,8 +475,6 @@ contexts:
   name: webhook
 ```
 
-Refer to [Cluster Struct](https://github.com/kubernetes/kubernetes/blob/2b8cac754c88900ea3ad91d6c3f0997b602a3051/staging/src/k8s.io/client-go/tools/clientcmd/api/v1/types.go#L63) for more configuration options.
-
 When a client attempts to authenticate with the API server using a bearer token as discussed [above](#putting-a-bearer-token-in-a-request),
 the authentication webhook POSTs a JSON-serialized `TokenReview` object containing the token to the remote service.
 

From dc75539de039b769e97add6144a56493cda20f62 Mon Sep 17 00:00:00 2001
From: flo-oss <florianberck@gmail.com>
Date: Thu, 21 Jan 2021 19:42:24 -0800
Subject: [PATCH 012/788] added German translation for pod overview

---
 .../de/docs/concepts/workloads/pods/_index.md | 372 ++++++++++++++++++
 1 file changed, 372 insertions(+)
 create mode 100644 content/de/docs/concepts/workloads/pods/_index.md

diff --git a/content/de/docs/concepts/workloads/pods/_index.md b/content/de/docs/concepts/workloads/pods/_index.md
new file mode 100644
index 0000000000..d2a2009f8c
--- /dev/null
+++ b/content/de/docs/concepts/workloads/pods/_index.md
@@ -0,0 +1,372 @@
+---
+reviewers:
+- erictune
+title: Pods
+content_type: concept
+weight: 10
+no_list: true
+card:
+ name: concepts
+ weight: 60
+---
+
+<!-- overview -->
+
+_Pods_ sind die kleinsten installierbaren Softwareeinheiten, die in Kubernetes
+erstellt und verwaltet werden können.
+
+Ein _Pod_ (übersetzt Gruppe/Schote, wie z. B. eine Gruppe von Walen oder eine 
+Erbsenschote) ist eine Gruppe von einem oder mehreren 
+{{< glossary_tooltip text="Containern" term_id="container" >}} mit gemeinsam 
+genutzten Speicher- und Netzwerkressourcen und einer Spezifikation für die 
+Ausführung der Container. Die Ressourcen eines Pods befinden sich immer auf dem 
+gleichen (virtuellen) Server, werden gemeinsam geplant und in einem
+gemeinsamen Kontext ausgeführt. Ein Pod modelliert einen anwendungsspezifischen 
+"logischen Server": Er enthält eine oder mehrere containerisierte Anwendungen
+, die
+ relativ stark 
+voneinander abhängen. In Nicht-Cloud-Kontexten sind Anwendungen, die auf
+demselben physischen oder virtuellen Server ausgeführt werden, vergleichbar zu 
+Cloud-Anwendungen, die auf demselben logischen Server ausgeführt werden.
+
+Ein Pod kann neben Anwendungs-Containern auch sogenannte 
+[Initialisierungs-Container](/docs/concepts/workloads/pods/init-containers/)
+enthalten, die beim Starten des Pods ausgeführt werden.
+Es können auch 
+kurzlebige/[ephemere Container](/docs/concepts/workloads/pods/ephemeral-containers/)
+zum Debuggen gestartet werden, wenn dies der Cluster anbietet.
+
+<!-- body -->
+
+## Was ist ein Pod?
+
+{{< note >}}
+Obwohl Kubernetes abgesehen von [Docker](https://www.docker.com/) auch andere
+{{<glossary_tooltip text = "Container-Laufzeitumgebung" 
+term_id = "container-runtime">}} unterstützt, ist Docker am bekanntesten und
+ es ist hilfreich, Pods mit der Terminologie von Docker zu beschreiben.
+{{</ note>}}
+
+Der gemeinsame Kontext eines Pods besteht aus einer Reihe von Linux-Namespaces, 
+Cgroups und möglicherweise andere Aspekten der Isolation, also die gleichen
+Dinge, die einen Dockercontainer isolieren. Innerhalb des Kontexts eines Pods 
+können die einzelnen Anwendungen weitere Unterisolierungen haben. 
+
+Im Sinne von Docker-Konzepten ähnelt ein Pod einer Gruppe von Docker-Containern, 
+die gemeinsame Namespaces und Dateisystem-Volumes nutzen.
+
+## Pods verwenden
+
+Normalerweise müssen keine Pods erzeugt werden, auch keine Singleton-Pods. 
+Stattdessen werden sie mit Workload-Ressourcen wie {{<glossary_tooltip 
+text = "Deployment" term_id = "deployment">}} oder {{<glossary_tooltip 
+text = "Job" term_id = "job">}} erzeugt. Für Pods, die von einem Systemzustand 
+abhängen, erwägen Sie die Nutzung von {{<glossary_tooltip text
+ = "StatefulSet" term_id = "statefulset">}}-Ressourcen.
+
+Pods in einem Kubernetes-Cluster werden hauptsächlich auf zwei Arten verwendet:
+
+* **Pods, die einen einzelnen Container ausführen**. Das 
+"Ein-Container-per-Pod"-Modell ist der häufigste Kubernetes-Anwendungsfall. In 
+diesem Fall können Sie sich einen Pod als einen Behälter vorstellen, der  einen 
+einzelnen Container enthält; Kubernetes verwaltet die Pods anstatt die 
+Container direkt zu verwalten.
+* **Pods, in denen mehrere Container ausgeführt werden, die zusammenarbeiten
+müssen**. Wenn eine Softwareanwendung aus co-lokaliserten Containern besteht, 
+die sich gemeinsame Ressourcen teilen und stark voneinander abhängen, kann ein 
+Pod die Container verkapseln. 
+Diese Container bilden eine einzelne zusammenhängende 
+Serviceeinheit, z. B. ein Container, der Daten in einem gemeinsam genutzten 
+Volume öffentlich verfügbar macht, während ein separater _Sidecar_-Container 
+die Daten aktualisiert. Der Pod fasst die Container, die Speicherressourcen
+und eine kurzlebiges Netzwerk-Identität als eine Einheit zusammen.
+
+{{<note>}}
+Das Gruppieren mehrerer gemeinsam lokalisierter und gemeinsam verwalteter
+Container in einem einzigen Pod ist ein relativ fortgeschrittener 
+Anwendungsfall. Sie sollten diese Architektur nur in bestimmten  Fällen 
+verwenden, wenn Ihre Container stark voneinander abhängen.
+{{</ note>}}
+
+Jeder Pod sollte eine einzelne Instanz einer gegebenen Anwendung ausführen. Wenn 
+Sie Ihre Anwendung horizontal skalieren wollen (also mehr Instanzen auszuführen
+und  dadurch mehr Gesamtressourcen bereitstellen), sollten Sie mehrere Pods 
+verwenden, 
+einen für jede Instanz. In Kubernetes wird dies typischerweise als Replikation
+bezeichnet.
+Replizierte Pods werden normalerweise als eine Gruppe von Workload-Ressource 
+und {{<glossary_tooltip text = "Controller" term_id = "controller">}} erstellt 
+und verwaltet.
+
+Die Seite [Pods und Controller](#pods-and-controllers) beschreibt, wie Kubernetes
+Workload-Ressourcen und deren Controller verwendet, um Anwendungen zu skalieren
+und zu heilen.
+
+### Wie Pods mehrere Container verwalten
+
+Pods unterstützen mehrere kooperierende Prozesse (als Container), die eine 
+zusammenhängende Serviceeinheit bilden. Kubernetes plant und stellt automatisch 
+sicher, dass sich die Container in einem Pod  auf demselben physischen oder 
+virtuellen Server im Cluster befinden. Die Container können Ressourcen und
+Abhängigkeiten gemeinsam nutzen, miteinander kommunizieren und
+ferner koordinieren wann und wie sie beendet werden.
+
+Zum Beispiel könnten Sie einen Container haben, der als Webserver für Dateien in
+einem gemeinsamen Volume arbeitet. Und ein separater "Sidecar" -Container 
+aktualisiert die Daten von einer externen Datenquelle, siehe folgenden 
+Abbildung:
+
+{{< figure src="/images/docs/pod.svg" alt="example pod diagram" width="50%" >}}
+
+Einige Pods haben sowohl {{<glossary_tooltip text = "Initialisierungs-Container" 
+term_id = "init-container">}} als auch {{<glossary_tooltip text = 
+"Anwendungs-Container" term_id = "app-container">}}. 
+Initialisierungs-Container werden gestartet und angehalten bevor die 
+Anwendungs-Container gestartet werden.
+
+Pods stellen standardmäßig zwei Arten von gemeinsam Ressourcen für die 
+enthaltenen Container bereit:
+[Netzwerk](#pod-networking) und [Speicher](#pod-storage)..
+
+
+## Mit Pods arbeiten
+
+Sie werden selten einzelne Pods direkt in Kubernetes erstellen, selbst 
+Singleton-Pods. Das liegt daran, dass Pods als relativ kurzlebige 
+Einweg-Einheiten konzipiert sind. Wann Ein Pod erstellt wird (entweder direkt 
+von Ihnen oder indirekt von einem
+{{<glossary_tooltip text = "Controller" term_id = "controller">}}), wird die 
+Ausführung auf einem {{<glossary_tooltip term_id = "node">}} in Ihrem Cluster 
+geplant. Der Pod bleibt auf diesem (virtuellen) Server, bis entweder der Pod die
+Ausführung beendet hat, das Pod-Objekt gelöscht wird, der Pod aufgrund 
+mangelnder Ressourcen *evakuiert* wird oder oder der Node ausfällt. 
+
+{{<note>}}
+Das Neustarten eines Containers in einem Pod sollte nicht mit dem Neustarten 
+eines Pods verwechselt werden. Ein Pod ist kein Prozess, sondern eine Umgebung 
+zur Ausführung von Containern. Ein Pod bleibt bestehen bis er gelöscht wird.
+{{</ note>}}
+
+Stellen Sie beim Erstellen des Manifests für ein Pod-Objekt sicher, dass der 
+angegebene Name ein gültiger
+[DNS-Subdomain-Name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)
+ist.
+
+### Pods und Controller
+
+Mit Workload-Ressourcen können Sie mehrere Pods erstellen und verwalten. Ein 
+Controller für die Ressource kümmert sich um Replikation, Roll-Out sowie 
+automatische Heilung im Fall von Podfehlern. Wenn beispielsweise ein Node 
+ausfällt, bemerkt ein Controller, dass die Pods auf dem Node nicht mehr laufen 
+und plant die Ausführung eines Ersatzpods auf einem funktionierenden Node.
+Hier sind einige Beispiele für Workload-Ressourcen, die einen oder mehrere Pods 
+verwalten:
+
+* {{< glossary_tooltip text="Deployment" term_id="deployment" >}}
+* {{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}
+* {{< glossary_tooltip text="DaemonSet" term_id="daemonset" >}}
+
+### Podvorlagen
+
+Controller für 
+{{<glossary_tooltip text = "Workload" term_id = "workload">}}-Ressourcen 
+erstellen Pods von einer _Podvorlage_ und verwalten diese Pods für sie.
+
+Podvorlagen sind Spezifikationen zum Erstellen von Pods und sind in 
+Workload-Ressourcen enthalten wie z. B.
+[Deployments](/docs/concepts/workloads/controllers/deployment/),
+[Jobs](/docs/concepts/workloads/controllers/job/), and
+[DaemonSets](/docs/concepts/workloads/controllers/daemonset/).
+
+Jeder Controller für eine Workload-Ressource verwendet die Podvorlage innerhalb 
+des Workload-Objektes, um Pods zu erzeugen. Die Podvorlage ist Bestandteil des 
+gewünschten Zustands der Workload-Ressource, mit der Sie Ihre Anwendung 
+ausgeführt haben.
+
+Das folgende Beispiel ist ein Manifest für einen einfachen Job mit einer 
+`Vorlage`, die einen Container startet. Der Container in diesem Pod druckt 
+eine Nachricht und pausiert dann.
+
+```yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: hello
+spec:
+ template:
+ # This is the pod template
+ spec:
+ containers:
+ - name: hello
+ image: busybox
+ command: ['sh', '-c', 'echo "Hello, Kubernetes!" && sleep 3600']
+ restartPolicy: OnFailure
+ # The pod template ends here
+```
+Das Ändern der Podvorlage oder der Wechsel zu einer neuen Podvorlage hat keine 
+direkten Auswirkungen auf bereits existierende Pods. Wenn Sie die Podvorlage für
+eine Workload-Ressource ändern, dann muss diese Ressource die Ersatz-Pods
+erstellen, welche die aktualisierte Vorlage verwenden. 
+
+Beispielsweise stellt der StatefulSet-Controller sicher, dass für jedes
+StatefulSet-Objekt die ausgeführten Pods mit der aktueller Podvorlage 
+übereinstimmen. Wenn Sie das StatefulSet bearbeiten und die Vorlage ändern, 
+beginnt das StatefulSet mit der Erstellung neuer Pods basierend auf der 
+aktualisierten Vorlage. Schließlich werden alle alten Pods durch neue Pods 
+ersetzt, und das Update ist abgeschlossen.
+
+Jede Workload-Ressource implementiert eigenen Regeln für die Umsetzung von 
+Änderungen der Podvorlage. Wenn Sie mehr über StatefulSet erfahren möchten, 
+lesen Sie
+[Update strategy](/docs/tutorials/stateful-application/basic-stateful-set/#updating-statefulsets) 
+im Tutorial StatefulSet Basics.
+
+
+Auf Nodes beobachtet oder verwaltet das 
+{{< glossary_tooltip term_id="kubelet" text="Kubelet" >}}
+nicht direkt die Details zu Podvorlagen und Updates. Diese Details sind 
+abstrahiert. Die Abstraktion und Trennung von Aufgaben vereinfacht die 
+Systemsemantik und ermöglicht so das Verhalten des Clusters zu ändern ohne 
+vorhandenen Code zu ändern.
+
+## Pod Update und Austausch
+
+Wie im vorherigen Abschnitt erwähnt, erstellt der Controller neue Pods basierend
+auf der aktualisierten Vorlage, wenn die Podvorlage für eine Workload-Ressource
+geändert wird anstatt die vorhandenen Pods zu aktualisieren oder zu patchen.
+
+Kubernetes hindert Sie nicht daran, Pods direkt zu verwalten. Es ist möglich, 
+einige Felder eines laufenden Pods zu aktualisieren. Allerdings haben 
+Pod-Aktualisierungsvorgänge wie zum Beispiel
+[`patch`](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#patch-pod-v1-core), 
+und
+[`replace`](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#replace-pod-v1-core)
+einige Einschränkungen:
+
+- Die meisten Metadaten zu einem Pod sind unveränderlich. Zum Beispiel können 
+  Sie nicht die Felder `namespace`, `name`, `uid`, oder `creationTimestamp` 
+  ändern. Das `generation`-Feld ist eindeutig. Es werden nur Aktualisierungen 
+  akzeptiert, die den Wert des Feldes inkrementieren.
+- Wenn das Feld `metadata.deletionTimestamp` gesetzt ist, kann kein neuer 
+  Eintrag zur Liste `metadata.finalizers` hinzugefügt werden.
+- Pod-Updates dürfen keine Felder ändern, die Ausnahmen sind 
+  `spec.containers [*].image`,
+ `spec.initContainers [*].image`,` spec.activeDeadlineSeconds` oder
+ `spec.tolerations`. Für `spec.tolerations` können Sie nur neue Einträge 
+  hinzufügen.
+- Für `spec.activeDeadlineSeconds` sind nur zwei Änderungen erlaubt:
+
+  1. ungesetztes Feld in eine positive Zahl
+  1. positive Zahl in eine kleinere positive Zahl, die nicht negativ ist
+  
+## Gemeinsame Nutzung von Ressourcen und Kommunikation 
+
+Pods ermöglichen den Datenaustausch und die Kommunikation zwischen den 
+Containern, die im Pod enthalten sind.
+
+### Datenspeicherung in Pods {#pod-storage}
+
+Ein Pod kann eine Reihe von gemeinsam genutzten Speicher-
+{{<glossary_tooltip text = "Volumes" term_id = "volume">}} spezifizieren. Alle 
+Container im Pod können auf die gemeinsamen Volumes zugreifen und dadurch Daten 
+austauschen. Volumes ermöglichen auch, dass Daten ohne Verlust gespeichert 
+werden, falls einer der Container neu gestartet werden muss. 
+Im Kapitel [Datenspeicherung](/docs/concepts/storage/) finden Sie weitere 
+Informationen, wie Kubernetes gemeinsam genutzten Speicher implementiert und Pods
+zur Verfügung stellt.
+
+### Pod-Netzwerk
+
+Jedem Pod wird für jede Adressenfamilie eine eindeutige IP-Adresse zugewiesen. 
+Jeder Container in einem Pod nutzt den gemeinsamen Netzwerk-Namespace, 
+einschließlich der IP-Adresse und der Ports. In einem Pod (und **nur** dann) 
+können die Container, die zum Pod gehören, über `localhost` miteinander 
+kommunizieren. Wenn Container in einem Pod mit Entitäten *außerhalb des Pods* 
+kommunizieren, müssen sie koordinieren, wie die gemeinsam genutzten 
+Netzwerkressourcen (z. B. Ports) verwenden werden. Innerhalb eines Pods teilen 
+sich Container eine IP-Adresse und einen Reihe von Ports und können sich 
+gegenseitig über `localhost` finden. Die Container in einem Pod können auch die 
+üblichen Kommunikationsverfahren zwischen Prozessen nutzen, wie z. B. 
+SystemV-Semaphoren oder POSIX Shared Memory. Container in verschiedenen Pods 
+haben unterschiedliche IP-Adressen und können nicht per IPC ohne 
+[spezielle Konfiguration](/docs/concepts/policy/pod-security-policy/) 
+kommunizieren. Container, die mit einem Container in einem anderen Pod 
+interagieren möchten, müssen IP Netzwerke verwenden.
+
+Für die Container innerhalb eines Pods stimmt der "hostname" mit dem 
+konfigurierten `Namen` des Pods überein. Mehr dazu im Kapitel 
+[Netzwerke](/docs/concepts/cluster-administration/networking/).
+
+## Privilegierter Modus für Container
+
+Jeder Container in einem Pod kann den privilegierten Modus aktivieren, indem 
+das Flag `privileged` im 
+[Sicherheitskontext](/docs/tasks/configure-pod-container/security-context/)
+der Container-Spezifikation verwendet wird.
+Dies ist nützlich für Container, die Verwaltungsfunktionen des Betriebssystems 
+verwenden möchten, z. B. das Manipulieren des Netzwerk-Stacks oder den Zugriff 
+auf Hardware. Prozesse innerhalb eines privilegierten Containers erhalten fast 
+die gleichen Rechte wie sie Prozesse außerhalb eines Containers zur Verfügung 
+stehen.
+
+{{<note>}}
+Ihre 
+{{<glossary_tooltip text = "Container-Umgebung" term_id = "container-runtime">}} 
+muss das Konzept eines privilegierten Containers unterstützen, damit diese 
+Einstellung relevant ist.
+{{</ note>}}
+
+
+## Statische Pods
+
+_Statische Pods_ werden direkt vom Kubelet-Daemon auf einem bestimmten Node 
+verwaltet ohne dass sie vom 
+{{<glossary_tooltip text = "API Server" term_id = "kube-apiserver">}} überwacht 
+werden.
+.
+Die meisten Pods werden von der Control Plane verwaltet (z. B.
+{{< glossary_tooltip text="Deployment" term_id="deployment" >}}). Aber für 
+statische Pods überwacht das Kubelet jeden statischen Pod direkt (und startet 
+ihn neu, wenn er ausfällt).
+
+Statische Pods sind immer an ein {{<glossary_tooltip term_id = "kubelet">}} auf 
+einem bestimmten Node gebunden. Der Hauptanwendungsfall für statische Pods 
+besteht darin, eine selbst gehostete Steuerebene auszuführen. Mit anderen 
+Worten: Das Kubelet dient zur Überwachung der einzelnen 
+[control plane components](/docs/concepts/overview/components/#control-plane-components).
+
+Das Kubelet versucht automatisch auf dem Kubernetes API-Server für jeden 
+statischen Pod einen spiegelbildlichen Pod 
+(im Englischen {{<glossary_tooltip text = "Mirror-Pod" term_id = "mirror-Pod">}}) 
+zu erstellen.
+Das bedeutet, dass die auf einem Node ausgeführten Pods auf dem API-Server 
+sichtbar sind jedoch von dort nicht gesteuert werden können.
+
+## {{% heading "whatsnext" %}}
+
+* Erfahren Sie mehr über den 
+  [Lebenszyklus eines Pods](/docs/concepts/workloads/pods/pod-lifecycle/).
+* Erfahren Sie mehr über [RuntimeClass](/docs/concepts/containers/runtime-class/) 
+  und wie Sie damit verschiedene Pods mit unterschiedlichen 
+  Container-Laufzeitumgebung konfigurieren können.
+* Lesen sie mehr über 
+  [Restriktionen für die Verteilung von Pods](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
+* Lesen sie mehr über sogenannte 
+  [Pod-Disruption-Budgets](/docs/concepts/workloads/pods/disruptions/) 
+  und wie Sie diese verwenden können, um die Verfügbarkeit von Anwendungen bei 
+  Störungen zu verwalten. Die 
+  [Pod](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core)
+  -Objektdefinition beschreibt das Objekt im Detail.
+* [The Distributed System Toolkit: Patterns for Composite Containers](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns) 
+  erläutert allgemeine Layouts für Pods mit mehr als einem Container.
+
+Um den Hintergrund zu verstehen, warum Kubernetes eine gemeinsame Pod-API in 
+andere Ressourcen, wie z. B. 
+{{< glossary_tooltip text="StatefulSets" term_id="statefulset" >}} 
+oder {{< glossary_tooltip text="Deployments" term_id="deployment" >}} einbindet, 
+können sie Artikel zu früheren Technologien lesen, unter anderem: 
+ * [Aurora](https://aurora.apache.org/documentation/latest/reference/configuration/#job-schema)
+ * [Borg](https://research.google.com/pubs/pub43438.html)
+ * [Marathon](https://mesosphere.github.io/marathon/docs/rest-api.html)
+ * [Omega](https://research.google/pubs/pub41684/)
+ * [Tupperware](https://engineering.fb.com/data-center-engineering/tupperware/).
\ No newline at end of file

From f213353b3028d6fc8099b7232346321a5f63ed66 Mon Sep 17 00:00:00 2001
From: flo-oss <florianberck@gmail.com>
Date: Thu, 21 Jan 2021 20:45:13 -0800
Subject: [PATCH 013/788] added German translation for pod overview page

---
 .../de/docs/concepts/workloads/pods/_index.md | 49 ++++++++++---------
 1 file changed, 25 insertions(+), 24 deletions(-)

diff --git a/content/de/docs/concepts/workloads/pods/_index.md b/content/de/docs/concepts/workloads/pods/_index.md
index d2a2009f8c..b1aec877c9 100644
--- a/content/de/docs/concepts/workloads/pods/_index.md
+++ b/content/de/docs/concepts/workloads/pods/_index.md
@@ -12,7 +12,7 @@ card:
 
 <!-- overview -->
 
-_Pods_ sind die kleinsten installierbaren Softwareeinheiten, die in Kubernetes
+_Pods_ sind die kleinsten einsetzbaren Einheiten, die in Kubernetes
 erstellt und verwaltet werden können.
 
 Ein _Pod_ (übersetzt Gruppe/Schote, wie z. B. eine Gruppe von Walen oder eine 
@@ -42,13 +42,13 @@ zum Debuggen gestartet werden, wenn dies der Cluster anbietet.
 
 {{< note >}}
 Obwohl Kubernetes abgesehen von [Docker](https://www.docker.com/) auch andere
-{{<glossary_tooltip text = "Container-Laufzeitumgebung" 
+{{<glossary_tooltip text = "Container-Laufzeitumgebungen" 
 term_id = "container-runtime">}} unterstützt, ist Docker am bekanntesten und
  es ist hilfreich, Pods mit der Terminologie von Docker zu beschreiben.
 {{</ note>}}
 
 Der gemeinsame Kontext eines Pods besteht aus einer Reihe von Linux-Namespaces, 
-Cgroups und möglicherweise andere Aspekten der Isolation, also die gleichen
+Cgroups und möglicherweise anderen Aspekten der Isolation, also die gleichen
 Dinge, die einen Dockercontainer isolieren. Innerhalb des Kontexts eines Pods 
 können die einzelnen Anwendungen weitere Unterisolierungen haben. 
 
@@ -89,18 +89,19 @@ verwenden, wenn Ihre Container stark voneinander abhängen.
 {{</ note>}}
 
 Jeder Pod sollte eine einzelne Instanz einer gegebenen Anwendung ausführen. Wenn 
-Sie Ihre Anwendung horizontal skalieren wollen (also mehr Instanzen auszuführen
+Sie Ihre Anwendung horizontal skalieren wollen (um mehr Instanzen auszuführen
 und  dadurch mehr Gesamtressourcen bereitstellen), sollten Sie mehrere Pods 
 verwenden, 
 einen für jede Instanz. In Kubernetes wird dies typischerweise als Replikation
 bezeichnet.
-Replizierte Pods werden normalerweise als eine Gruppe von Workload-Ressource 
-und {{<glossary_tooltip text = "Controller" term_id = "controller">}} erstellt 
+Replizierte Pods werden normalerweise als eine Gruppe durch eine 
+Workload-Ressource und deren 
+{{<glossary_tooltip text = "Controller" term_id = "controller">}} erstellt 
 und verwaltet.
 
-Die Seite [Pods und Controller](#pods-and-controllers) beschreibt, wie Kubernetes
-Workload-Ressourcen und deren Controller verwendet, um Anwendungen zu skalieren
-und zu heilen.
+Die Seite [Pods und Controller](#pods-and-controllers) beschreibt, wie 
+Kubernetes Workload-Ressourcen und deren Controller verwendet, um Anwendungen 
+zu skalieren und zu heilen.
 
 ### Wie Pods mehrere Container verwalten
 
@@ -121,12 +122,12 @@ Abbildung:
 Einige Pods haben sowohl {{<glossary_tooltip text = "Initialisierungs-Container" 
 term_id = "init-container">}} als auch {{<glossary_tooltip text = 
 "Anwendungs-Container" term_id = "app-container">}}. 
-Initialisierungs-Container werden gestartet und angehalten bevor die 
+Initialisierungs-Container werden gestartet und beendet bevor die 
 Anwendungs-Container gestartet werden.
 
 Pods stellen standardmäßig zwei Arten von gemeinsam Ressourcen für die 
 enthaltenen Container bereit:
-[Netzwerk](#pod-networking) und [Speicher](#pod-storage)..
+[Netzwerk](#pod-networking) und [Speicher](#pod-storage).
 
 
 ## Mit Pods arbeiten
@@ -179,7 +180,7 @@ Workload-Ressourcen enthalten wie z. B.
 [DaemonSets](/docs/concepts/workloads/controllers/daemonset/).
 
 Jeder Controller für eine Workload-Ressource verwendet die Podvorlage innerhalb 
-des Workload-Objektes, um Pods zu erzeugen. Die Podvorlage ist Bestandteil des 
+des Workload-Objektes, um Pods zu erzeugen. Die Podvorlage ist Teil des 
 gewünschten Zustands der Workload-Ressource, mit der Sie Ihre Anwendung 
 ausgeführt haben.
 
@@ -217,8 +218,8 @@ ersetzt, und das Update ist abgeschlossen.
 
 Jede Workload-Ressource implementiert eigenen Regeln für die Umsetzung von 
 Änderungen der Podvorlage. Wenn Sie mehr über StatefulSet erfahren möchten, 
-lesen Sie
-[Update strategy](/docs/tutorials/stateful-application/basic-stateful-set/#updating-statefulsets) 
+lesen Sie die Seite
+[Update-Strategien](/docs/tutorials/stateful-application/basic-stateful-set/#updating-statefulsets) 
 im Tutorial StatefulSet Basics.
 
 
@@ -243,9 +244,9 @@ und
 [`replace`](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#replace-pod-v1-core)
 einige Einschränkungen:
 
-- Die meisten Metadaten zu einem Pod sind unveränderlich. Zum Beispiel können 
+- Die meisten Metadaten zu einem Pod können nicht verändert werden. Zum Beispiel können 
   Sie nicht die Felder `namespace`, `name`, `uid`, oder `creationTimestamp` 
-  ändern. Das `generation`-Feld ist eindeutig. Es werden nur Aktualisierungen 
+  ändern. Das `generation`-Feld muss eindeutig sein. Es werden nur Aktualisierungen 
   akzeptiert, die den Wert des Feldes inkrementieren.
 - Wenn das Feld `metadata.deletionTimestamp` gesetzt ist, kann kein neuer 
   Eintrag zur Liste `metadata.finalizers` hinzugefügt werden.
@@ -272,8 +273,8 @@ Container im Pod können auf die gemeinsamen Volumes zugreifen und dadurch Daten
 austauschen. Volumes ermöglichen auch, dass Daten ohne Verlust gespeichert 
 werden, falls einer der Container neu gestartet werden muss. 
 Im Kapitel [Datenspeicherung](/docs/concepts/storage/) finden Sie weitere 
-Informationen, wie Kubernetes gemeinsam genutzten Speicher implementiert und Pods
-zur Verfügung stellt.
+Informationen, wie Kubernetes gemeinsam genutzten Speicher implementiert und 
+Pods zur Verfügung stellt.
 
 ### Pod-Netzwerk
 
@@ -284,10 +285,10 @@ können die Container, die zum Pod gehören, über `localhost` miteinander
 kommunizieren. Wenn Container in einem Pod mit Entitäten *außerhalb des Pods* 
 kommunizieren, müssen sie koordinieren, wie die gemeinsam genutzten 
 Netzwerkressourcen (z. B. Ports) verwenden werden. Innerhalb eines Pods teilen 
-sich Container eine IP-Adresse und einen Reihe von Ports und können sich 
+sich Container eine IP-Adresse und eine Reihe von Ports und können sich 
 gegenseitig über `localhost` finden. Die Container in einem Pod können auch die 
 üblichen Kommunikationsverfahren zwischen Prozessen nutzen, wie z. B. 
-SystemV-Semaphoren oder POSIX Shared Memory. Container in verschiedenen Pods 
+SystemV-Semaphoren oder "POSIX Shared Memory". Container in verschiedenen Pods 
 haben unterschiedliche IP-Adressen und können nicht per IPC ohne 
 [spezielle Konfiguration](/docs/concepts/policy/pod-security-policy/) 
 kommunizieren. Container, die mit einem Container in einem anderen Pod 
@@ -306,7 +307,7 @@ der Container-Spezifikation verwendet wird.
 Dies ist nützlich für Container, die Verwaltungsfunktionen des Betriebssystems 
 verwenden möchten, z. B. das Manipulieren des Netzwerk-Stacks oder den Zugriff 
 auf Hardware. Prozesse innerhalb eines privilegierten Containers erhalten fast 
-die gleichen Rechte wie sie Prozesse außerhalb eines Containers zur Verfügung 
+die gleichen Rechte wie sie Prozessen außerhalb eines Containers zur Verfügung 
 stehen.
 
 {{<note>}}
@@ -324,7 +325,7 @@ verwaltet ohne dass sie vom
 {{<glossary_tooltip text = "API Server" term_id = "kube-apiserver">}} überwacht 
 werden.
 .
-Die meisten Pods werden von der Control Plane verwaltet (z. B.
+Die meisten Pods werden von der Kontrollebene verwaltet (z. B.
 {{< glossary_tooltip text="Deployment" term_id="deployment" >}}). Aber für 
 statische Pods überwacht das Kubelet jeden statischen Pod direkt (und startet 
 ihn neu, wenn er ausfällt).
@@ -333,7 +334,7 @@ Statische Pods sind immer an ein {{<glossary_tooltip term_id = "kubelet">}} auf
 einem bestimmten Node gebunden. Der Hauptanwendungsfall für statische Pods 
 besteht darin, eine selbst gehostete Steuerebene auszuführen. Mit anderen 
 Worten: Das Kubelet dient zur Überwachung der einzelnen 
-[control plane components](/docs/concepts/overview/components/#control-plane-components).
+[Komponenten der Kontrollebene](/docs/concepts/overview/components/#control-plane-components).
 
 Das Kubelet versucht automatisch auf dem Kubernetes API-Server für jeden 
 statischen Pod einen spiegelbildlichen Pod 
@@ -348,7 +349,7 @@ sichtbar sind jedoch von dort nicht gesteuert werden können.
   [Lebenszyklus eines Pods](/docs/concepts/workloads/pods/pod-lifecycle/).
 * Erfahren Sie mehr über [RuntimeClass](/docs/concepts/containers/runtime-class/) 
   und wie Sie damit verschiedene Pods mit unterschiedlichen 
-  Container-Laufzeitumgebung konfigurieren können.
+  Container-Laufzeitumgebungen konfigurieren können.
 * Lesen sie mehr über 
   [Restriktionen für die Verteilung von Pods](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
 * Lesen sie mehr über sogenannte 

From 90cc7f10d4413ebbb1a33f0624138fb862e9d864 Mon Sep 17 00:00:00 2001
From: flo-oss <florianberck@gmail.com>
Date: Tue, 2 Feb 2021 22:20:15 -0800
Subject: [PATCH 014/788] changes suggested by code reviewer

---
 .../de/docs/concepts/workloads/pods/_index.md | 67 +++++++++----------
 1 file changed, 32 insertions(+), 35 deletions(-)

diff --git a/content/de/docs/concepts/workloads/pods/_index.md b/content/de/docs/concepts/workloads/pods/_index.md
index b1aec877c9..4080f460f9 100644
--- a/content/de/docs/concepts/workloads/pods/_index.md
+++ b/content/de/docs/concepts/workloads/pods/_index.md
@@ -1,6 +1,4 @@
 ---
-reviewers:
-- erictune
 title: Pods
 content_type: concept
 weight: 10
@@ -22,10 +20,9 @@ genutzten Speicher- und Netzwerkressourcen und einer Spezifikation für die
 Ausführung der Container. Die Ressourcen eines Pods befinden sich immer auf dem 
 gleichen (virtuellen) Server, werden gemeinsam geplant und in einem
 gemeinsamen Kontext ausgeführt. Ein Pod modelliert einen anwendungsspezifischen 
-"logischen Server": Er enthält eine oder mehrere containerisierte Anwendungen
-, die
- relativ stark 
-voneinander abhängen. In Nicht-Cloud-Kontexten sind Anwendungen, die auf
+"logischen Server": Er enthält eine oder mehrere containerisierte Anwendungen, 
+die relativ stark voneinander abhängen. 
+In Nicht-Cloud-Kontexten sind Anwendungen, die auf
 demselben physischen oder virtuellen Server ausgeführt werden, vergleichbar zu 
 Cloud-Anwendungen, die auf demselben logischen Server ausgeführt werden.
 
@@ -42,10 +39,10 @@ zum Debuggen gestartet werden, wenn dies der Cluster anbietet.
 
 {{< note >}}
 Obwohl Kubernetes abgesehen von [Docker](https://www.docker.com/) auch andere
-{{<glossary_tooltip text = "Container-Laufzeitumgebungen" 
-term_id = "container-runtime">}} unterstützt, ist Docker am bekanntesten und
+{{<glossary_tooltip text="Container-Laufzeitumgebungen" 
+term_id="container-runtime">}} unterstützt, ist Docker am bekanntesten und
  es ist hilfreich, Pods mit der Terminologie von Docker zu beschreiben.
-{{</ note>}}
+{{< /note >}}
 
 Der gemeinsame Kontext eines Pods besteht aus einer Reihe von Linux-Namespaces, 
 Cgroups und möglicherweise anderen Aspekten der Isolation, also die gleichen
@@ -59,10 +56,10 @@ die gemeinsame Namespaces und Dateisystem-Volumes nutzen.
 
 Normalerweise müssen keine Pods erzeugt werden, auch keine Singleton-Pods. 
 Stattdessen werden sie mit Workload-Ressourcen wie {{<glossary_tooltip 
-text = "Deployment" term_id = "deployment">}} oder {{<glossary_tooltip 
-text = "Job" term_id = "job">}} erzeugt. Für Pods, die von einem Systemzustand 
-abhängen, erwägen Sie die Nutzung von {{<glossary_tooltip text
- = "StatefulSet" term_id = "statefulset">}}-Ressourcen.
+text="Deployment" term_id="deployment">}} oder {{<glossary_tooltip 
+text="Job" term_id="job">}} erzeugt. Für Pods, die von einem Systemzustand 
+abhängen, erwägen Sie die Nutzung von {{<glossary_tooltip 
+text="StatefulSet" term_id="statefulset">}}-Ressourcen.
 
 Pods in einem Kubernetes-Cluster werden hauptsächlich auf zwei Arten verwendet:
 
@@ -81,12 +78,12 @@ Volume öffentlich verfügbar macht, während ein separater _Sidecar_-Container
 die Daten aktualisiert. Der Pod fasst die Container, die Speicherressourcen
 und eine kurzlebiges Netzwerk-Identität als eine Einheit zusammen.
 
-{{<note>}}
+{{< note >}}
 Das Gruppieren mehrerer gemeinsam lokalisierter und gemeinsam verwalteter
 Container in einem einzigen Pod ist ein relativ fortgeschrittener 
 Anwendungsfall. Sie sollten diese Architektur nur in bestimmten  Fällen 
 verwenden, wenn Ihre Container stark voneinander abhängen.
-{{</ note>}}
+{{< /note >}}
 
 Jeder Pod sollte eine einzelne Instanz einer gegebenen Anwendung ausführen. Wenn 
 Sie Ihre Anwendung horizontal skalieren wollen (um mehr Instanzen auszuführen
@@ -96,10 +93,10 @@ einen für jede Instanz. In Kubernetes wird dies typischerweise als Replikation
 bezeichnet.
 Replizierte Pods werden normalerweise als eine Gruppe durch eine 
 Workload-Ressource und deren 
-{{<glossary_tooltip text = "Controller" term_id = "controller">}} erstellt 
+{{<glossary_tooltip text="Controller" term_id="controller">}} erstellt 
 und verwaltet.
 
-Die Seite [Pods und Controller](#pods-and-controllers) beschreibt, wie 
+Der Abschnitt [Pods und Controller](#pods-und-controller) beschreibt, wie 
 Kubernetes Workload-Ressourcen und deren Controller verwendet, um Anwendungen 
 zu skalieren und zu heilen.
 
@@ -117,17 +114,17 @@ einem gemeinsamen Volume arbeitet. Und ein separater "Sidecar" -Container
 aktualisiert die Daten von einer externen Datenquelle, siehe folgenden 
 Abbildung:
 
-{{< figure src="/images/docs/pod.svg" alt="example pod diagram" width="50%" >}}
+{{< figure src="/images/docs/pod.svg" alt="Pod-Beispieldiagramm" width="50%" >}}
 
-Einige Pods haben sowohl {{<glossary_tooltip text = "Initialisierungs-Container" 
-term_id = "init-container">}} als auch {{<glossary_tooltip text = 
-"Anwendungs-Container" term_id = "app-container">}}. 
+Einige Pods haben sowohl {{<glossary_tooltip text="Initialisierungs-Container" 
+term_id="init-container">}} als auch {{<glossary_tooltip 
+text="Anwendungs-Container" term_id="app-container">}}. 
 Initialisierungs-Container werden gestartet und beendet bevor die 
 Anwendungs-Container gestartet werden.
 
 Pods stellen standardmäßig zwei Arten von gemeinsam Ressourcen für die 
 enthaltenen Container bereit:
-[Netzwerk](#pod-networking) und [Speicher](#pod-storage).
+[Netzwerk](#pod-netzwerk) und [Speicher](#datenspeicherung-in-pods).
 
 
 ## Mit Pods arbeiten
@@ -136,17 +133,17 @@ Sie werden selten einzelne Pods direkt in Kubernetes erstellen, selbst
 Singleton-Pods. Das liegt daran, dass Pods als relativ kurzlebige 
 Einweg-Einheiten konzipiert sind. Wann Ein Pod erstellt wird (entweder direkt 
 von Ihnen oder indirekt von einem
-{{<glossary_tooltip text = "Controller" term_id = "controller">}}), wird die 
-Ausführung auf einem {{<glossary_tooltip term_id = "node">}} in Ihrem Cluster 
+{{<glossary_tooltip text="Controller" term_id="controller">}}), wird die 
+Ausführung auf einem {{<glossary_tooltip term_id="node">}} in Ihrem Cluster 
 geplant. Der Pod bleibt auf diesem (virtuellen) Server, bis entweder der Pod die
 Ausführung beendet hat, das Pod-Objekt gelöscht wird, der Pod aufgrund 
 mangelnder Ressourcen *evakuiert* wird oder oder der Node ausfällt. 
 
-{{<note>}}
+{{< note >}}
 Das Neustarten eines Containers in einem Pod sollte nicht mit dem Neustarten 
 eines Pods verwechselt werden. Ein Pod ist kein Prozess, sondern eine Umgebung 
 zur Ausführung von Containern. Ein Pod bleibt bestehen bis er gelöscht wird.
-{{</ note>}}
+{{< /note >}}
 
 Stellen Sie beim Erstellen des Manifests für ein Pod-Objekt sicher, dass der 
 angegebene Name ein gültiger
@@ -170,7 +167,7 @@ verwalten:
 ### Podvorlagen
 
 Controller für 
-{{<glossary_tooltip text = "Workload" term_id = "workload">}}-Ressourcen 
+{{<glossary_tooltip text="Workload" term_id="workload">}}-Ressourcen 
 erstellen Pods von einer _Podvorlage_ und verwalten diese Pods für sie.
 
 Podvorlagen sind Spezifikationen zum Erstellen von Pods und sind in 
@@ -265,10 +262,10 @@ einige Einschränkungen:
 Pods ermöglichen den Datenaustausch und die Kommunikation zwischen den 
 Containern, die im Pod enthalten sind.
 
-### Datenspeicherung in Pods {#pod-storage}
+### Datenspeicherung in Pods
 
 Ein Pod kann eine Reihe von gemeinsam genutzten Speicher-
-{{<glossary_tooltip text = "Volumes" term_id = "volume">}} spezifizieren. Alle 
+{{<glossary_tooltip text="Volumes" term_id="volume">}} spezifizieren. Alle 
 Container im Pod können auf die gemeinsamen Volumes zugreifen und dadurch Daten 
 austauschen. Volumes ermöglichen auch, dass Daten ohne Verlust gespeichert 
 werden, falls einer der Container neu gestartet werden muss. 
@@ -310,19 +307,19 @@ auf Hardware. Prozesse innerhalb eines privilegierten Containers erhalten fast
 die gleichen Rechte wie sie Prozessen außerhalb eines Containers zur Verfügung 
 stehen.
 
-{{<note>}}
+{{< note >}}
 Ihre 
-{{<glossary_tooltip text = "Container-Umgebung" term_id = "container-runtime">}} 
+{{<glossary_tooltip text="Container-Umgebung" term_id="container-runtime">}} 
 muss das Konzept eines privilegierten Containers unterstützen, damit diese 
 Einstellung relevant ist.
-{{</ note>}}
+{{< /note >}}
 
 
 ## Statische Pods
 
 _Statische Pods_ werden direkt vom Kubelet-Daemon auf einem bestimmten Node 
 verwaltet ohne dass sie vom 
-{{<glossary_tooltip text = "API Server" term_id = "kube-apiserver">}} überwacht 
+{{<glossary_tooltip text="API Server" term_id="kube-apiserver">}} überwacht 
 werden.
 .
 Die meisten Pods werden von der Kontrollebene verwaltet (z. B.
@@ -330,7 +327,7 @@ Die meisten Pods werden von der Kontrollebene verwaltet (z. B.
 statische Pods überwacht das Kubelet jeden statischen Pod direkt (und startet 
 ihn neu, wenn er ausfällt).
 
-Statische Pods sind immer an ein {{<glossary_tooltip term_id = "kubelet">}} auf 
+Statische Pods sind immer an ein {{<glossary_tooltip term_id="kubelet">}} auf 
 einem bestimmten Node gebunden. Der Hauptanwendungsfall für statische Pods 
 besteht darin, eine selbst gehostete Steuerebene auszuführen. Mit anderen 
 Worten: Das Kubelet dient zur Überwachung der einzelnen 
@@ -338,7 +335,7 @@ Worten: Das Kubelet dient zur Überwachung der einzelnen
 
 Das Kubelet versucht automatisch auf dem Kubernetes API-Server für jeden 
 statischen Pod einen spiegelbildlichen Pod 
-(im Englischen {{<glossary_tooltip text = "Mirror-Pod" term_id = "mirror-Pod">}}) 
+(im Englischen: {{<glossary_tooltip text="mirror pod" term_id="mirror-pod">}}) 
 zu erstellen.
 Das bedeutet, dass die auf einem Node ausgeführten Pods auf dem API-Server 
 sichtbar sind jedoch von dort nicht gesteuert werden können.

From 99aa654d8be21ab928177a05a70514d586abd030 Mon Sep 17 00:00:00 2001
From: flo-oss <florianberck@gmail.com>
Date: Tue, 2 Feb 2021 22:53:55 -0800
Subject: [PATCH 015/788] changes suggested by code reviewer, part 2

---
 content/de/docs/concepts/workloads/pods/_index.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/de/docs/concepts/workloads/pods/_index.md b/content/de/docs/concepts/workloads/pods/_index.md
index 4080f460f9..837a1f1571 100644
--- a/content/de/docs/concepts/workloads/pods/_index.md
+++ b/content/de/docs/concepts/workloads/pods/_index.md
@@ -192,14 +192,14 @@ metadata:
  name: hello
 spec:
  template:
- # This is the pod template
+ # Dies is the Podvorlage
  spec:
  containers:
  - name: hello
  image: busybox
  command: ['sh', '-c', 'echo "Hello, Kubernetes!" && sleep 3600']
  restartPolicy: OnFailure
- # The pod template ends here
+ # Die Podvorlage endet hier
 ```
 Das Ändern der Podvorlage oder der Wechsel zu einer neuen Podvorlage hat keine 
 direkten Auswirkungen auf bereits existierende Pods. Wenn Sie die Podvorlage für
@@ -248,8 +248,8 @@ einige Einschränkungen:
 - Wenn das Feld `metadata.deletionTimestamp` gesetzt ist, kann kein neuer 
   Eintrag zur Liste `metadata.finalizers` hinzugefügt werden.
 - Pod-Updates dürfen keine Felder ändern, die Ausnahmen sind 
-  `spec.containers [*].image`,
- `spec.initContainers [*].image`,` spec.activeDeadlineSeconds` oder
+  `spec.containers[*].image`,
+ `spec.initContainers[*].image`,` spec.activeDeadlineSeconds` oder
  `spec.tolerations`. Für `spec.tolerations` können Sie nur neue Einträge 
   hinzufügen.
 - Für `spec.activeDeadlineSeconds` sind nur zwei Änderungen erlaubt:

From 0aae93d2952e1a66bca4d5607c0637a9b07cdc2c Mon Sep 17 00:00:00 2001
From: Leonardo Murillo <leonardo@murillodigital.com>
Date: Sat, 6 Feb 2021 23:33:26 +0000
Subject: [PATCH 016/788] [es] Add
 content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md

Signed-off-by: Leonardo Murillo <leonardo@murillodigital.com>
---
 .../tasks/manage-kubernetes-objects/_index.md |    5 +
 .../declarative-config.md                     | 1017 +++++++++++++++++
 .../application/simple_deployment.yaml        |   19 +
 .../application/update_deployment.yaml        |   18 +
 4 files changed, 1059 insertions(+)
 create mode 100644 content/es/docs/tasks/manage-kubernetes-objects/_index.md
 create mode 100644 content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
 create mode 100644 content/es/examples/application/simple_deployment.yaml
 create mode 100644 content/es/examples/application/update_deployment.yaml

diff --git a/content/es/docs/tasks/manage-kubernetes-objects/_index.md b/content/es/docs/tasks/manage-kubernetes-objects/_index.md
new file mode 100644
index 0000000000..5815f0c69e
--- /dev/null
+++ b/content/es/docs/tasks/manage-kubernetes-objects/_index.md
@@ -0,0 +1,5 @@
+---
+title: "Administrar Objetos en Kubernetes"
+description: Interactuando con el API de Kubernetes aplicando paradigmas declarativo e imperativo.
+weight: 25
+---
diff --git a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
new file mode 100644
index 0000000000..0b2a0987d5
--- /dev/null
+++ b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -0,0 +1,1017 @@
+---
+title: Administración declarativa de Objetos en Kubernetes usando Ficheros de Configuración
+content_type: task
+weight: 10
+---
+
+<!-- overview -->
+Objetos en Kubernetes pueden ser creados, actualizados y eliminados utilizando
+ficheros de configuración almacenados en un directorio. Usando el comando
+`kubectl apply` podrá crearlos o actualizarlos de manera recursiva según sea necesario.
+Este método retiene cualquier escritura realizada contra objetos activos en el
+sistema sin unirlos de regreso a los ficheros de configuración. `kubectl diff` le
+permite visualizar de manera previa los cambios que `apply` realizará.
+
+## {{% heading "prerequisites" %}}
+
+
+Instale [`kubectl`](/es/docs/tasks/tools/install-kubectl/).
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+
+<!-- steps -->
+
+## Modos de administración
+
+La herramienta `kubectl` soporta tres modos distintos para la administración de objetos:
+
+* Comandos imperativos
+* Configuración de objetos imperativa
+* Configuración de objetos declarativa
+
+Acceda [Kubernetes Object Management](/docs/concepts/overview/working-with-objects/object-management/)
+para una discusión de las ventajas y desventajas de cada distinto modo de administración.
+
+## Visión general
+
+La configuración de objetos declarativa requiere una comprensión firme de la
+definición y configuración de objetos de Kubernetes. Lea y complete los siguientes
+documentos si aún no lo ha hecho:
+
+* [Managing Kubernetes Objects Using Imperative Commands](/docs/tasks/manage-kubernetes-objects/imperative-command/)
+* [Imperative Management of Kubernetes Objects Using Configuration Files](/docs/tasks/manage-kubernetes-objects/imperative-config/)
+
+{{< comment >}}
+TODO(lmurillo): Update the links above to the spanish versions of these documents once the
+localizations become available
+{{< /comment >}}
+
+A continuación la definición de términos usados en este documento:
+
+- *fichero de configuración de objeto / fichero de configuración*: Un fichero en el
+  que se define la configuración de un objeto de Kubernetes. Este tema demuestra como
+  utilizar ficheros de configuración con `kubectl apply`. Los ficheros de configuración
+  usualmente se almacenan en un sistema de control de versiones, como Git.
+- *configuración activa de objeto / configuración activa*: Los valores de configuración
+  activos de un objeto, según estan siendo observados por el Cluster. Esta configuración
+  se almacena en el sistema de almacenamiento de Kubernetes, usualmente etcd.
+- *escritor de configuración declarativo /  escritor declarativo*: Una persona o
+  componente de software que actualiza a un objeto activo. Los escritores activos a
+  los que se refiere este tema aplican cambios a los ficheros de configuración de objetos
+  y ejecutan `kubectl apply` para aplicarlos.
+
+## Como crear objetos
+
+Utilice `kubectl apply` para crear todos los objetos definidos en los ficheros
+de configuración existentes en un directorio específico, con excepción de aquellos que
+ya existen:
+
+```shell
+kubectl apply -f <directorio>/
+```
+
+Esto definirá la anotación `kubectl.kubernetes.io/last-applied-configuration: '{...}'`
+en cada objeto. Esta anotación contiene  el contenido del fichero de configuración
+utilizado para la creación del objeto.
+
+{{< note >}}
+Agregue la opción `-R` para procesar un directorio de manera recursiva.
+{{< /note >}}
+
+El siguiente es un ejemplo de fichero de configuración para un objeto:
+
+{{< codenew file="application/simple_deployment.yaml" >}}
+
+Ejecute `kubectl diff` para visualizar el objeto que será creado:
+
+```shell
+kubectl diff -f https://k8s.io/examples/application/simple_deployment.yaml
+```
+
+{{< note >}}
+`diff` utiliza [server-side dry-run](/docs/reference/using-api/api-concepts/#dry-run),
+que debe estar habilitado en el `kube-apiserver`.
+
+Dado que `diff` ejecuta una solicitud de `apply` en el servidor en modo de simulacro (dry-run),
+requiere obtener permisos de `PATCH`, `CREATE`, y `UPDATE`.
+Vea [Dry-Run Authorization](/docs/reference/using-api/api-concepts#dry-run-authorization)
+para más detalles.
+
+{{< /note >}}
+
+Cree el objeto usando `kubectl apply`:
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/simple_deployment.yaml
+```
+
+Despliegue la configuración activa usando `kubectl get`:
+
+```shell
+kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yaml
+```
+
+La salida le demostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
+fue escrita a la configuración activa, y es consistente con los contenidos del fichero
+de configuración:
+
+```yaml
+kind: Deployment
+metadata:
+  annotations:
+    # ...
+    # Esta es la representación JSON de simple_deployment.yaml
+    # Fue escrita por kubectl apply cuando el objeto fue creado
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"apps/v1","kind":"Deployment",
+      "metadata":{"annotations":{},"name":"nginx-deployment","namespace":"default"},
+      "spec":{"minReadySeconds":5,"selector":{"matchLabels":{"app":nginx}},"template":{"metadata":{"labels":{"app":"nginx"}},
+      "spec":{"containers":[{"image":"nginx:1.14.2","name":"nginx",
+      "ports":[{"containerPort":80}]}]}}}}
+  # ...
+spec:
+  # ...
+  minReadySeconds: 5
+  selector:
+    matchLabels:
+      # ...
+      app: nginx
+  template:
+    metadata:
+      # ...
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - image: nginx:1.14.2
+        # ...
+        name: nginx
+        ports:
+        - containerPort: 80
+        # ...
+      # ...
+    # ...
+  # ...
+```
+
+## Como actualizar objetos
+
+También puede usar `kubectl apply` para actualizar los objetos definidos en un directorio,
+aún cuando esos objetos ya existan en la configuración activa. Con este enfoque logrará
+lo siguiente:
+
+1. Definir los campos que aparecerán en la configuración activa.
+2. Eliminar aquellos campos eliminados en el fichero de configuración, de la configuración activa.
+
+```shell
+kubectl diff -f <directorio>/
+kubectl apply -f <directorio>/
+```
+
+{{< note >}}
+Agregue la opción `-R` para procesar directorios de manera recursiva.
+{{< /note >}}
+
+Este es un ejemplo de fichero de configuración:
+
+{{< codenew file="application/simple_deployment.yaml" >}}
+
+Cree el objeto usando `kubectl apply`:
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/simple_deployment.yaml
+```
+
+{{< note >}}
+Con el propósito de ilustrar, el comando anterior se refiere a un único fichero
+de configuración en vez de un directorio.
+{{< /note >}}
+
+Despliegue la configuración activa usando `kubectl get`:
+
+```shell
+kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yaml
+```
+
+La salida le demostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
+fue escrita a la configuración activa, y es consistente con los contenidos del fichero
+de configuración:
+
+```yaml
+kind: Deployment
+metadata:
+  annotations:
+    # ...
+    # Esta es la representación JSON de simple_deployment.yaml
+    # Fue escrita por kubectl apply cuando el objeto fue creado
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"apps/v1","kind":"Deployment",
+      "metadata":{"annotations":{},"name":"nginx-deployment","namespace":"default"},
+      "spec":{"minReadySeconds":5,"selector":{"matchLabels":{"app":nginx}},"template":{"metadata":{"labels":{"app":"nginx"}},
+      "spec":{"containers":[{"image":"nginx:1.14.2","name":"nginx",
+      "ports":[{"containerPort":80}]}]}}}}
+  # ...
+spec:
+  # ...
+  minReadySeconds: 5
+  selector:
+    matchLabels:
+      # ...
+      app: nginx
+  template:
+    metadata:
+      # ...
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - image: nginx:1.14.2
+        # ...
+        name: nginx
+        ports:
+        - containerPort: 80
+        # ...
+      # ...
+    # ...
+  # ...
+```
+
+De manera directa, actualice el campo `replicas` en la configuración activa usando `kubectl scale`.
+En este caso no se usa `kubectl apply`:
+
+```shell
+kubectl scale deployment/nginx-deployment --replicas=2
+```
+
+Despliegue la configuración activa usando `kubectl get`:
+
+```shell
+kubectl get deployment nginx-deployment -o yaml
+```
+
+La salida le demuestra que el campo `replicas` ha sido definido en 2, y que la
+anotación `last-applied-configuration` no contiene el campo `replicas`:
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    # ...
+    # note que la anotación no contiene replicas
+    # debido a que el objeto no fue actualizado usando apply
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"apps/v1","kind":"Deployment",
+      "metadata":{"annotations":{},"name":"nginx-deployment","namespace":"default"},
+      "spec":{"minReadySeconds":5,"selector":{"matchLabels":{"app":nginx}},"template":{"metadata":{"labels":{"app":"nginx"}},
+      "spec":{"containers":[{"image":"nginx:1.14.2","name":"nginx",
+      "ports":[{"containerPort":80}]}]}}}}
+  # ...
+spec:
+  replicas: 2 # definido por scale
+  # ...
+  minReadySeconds: 5
+  selector:
+    matchLabels:
+      # ...
+      app: nginx
+  template:
+    metadata:
+      # ...
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - image: nginx:1.14.2
+        # ...
+        name: nginx
+        ports:
+        - containerPort: 80
+      # ...
+```
+
+Actualice el fichero de configuración `simple_deployment.yaml` para cambiar el campo `image`
+de `nginx:1.14.2` a `nginx:1.16.1`, y elimine el campo `minReadySeconds`:
+
+{{< codenew file="application/update_deployment.yaml" >}}
+
+Aplique los cambios realizados al fichero de configuración:
+
+```shell
+kubectl diff -f https://k8s.io/examples/application/update_deployment.yaml
+kubectl apply -f https://k8s.io/examples/application/update_deployment.yaml
+```
+
+Despliegue la configuración activa usando `kubectl get`:
+
+```shell
+kubectl get -f https://k8s.io/examples/application/update_deployment.yaml -o yaml
+```
+
+La salida le mostrará los siguienes cambios hechos a la configuración activa:
+
+* El campo `replicas` retiene el valor de 2 definido por `kubectl scale`.
+  Esto es posible ya que el campo fue omitido en el fichero de configuración.
+* El campo `image` ha sido actualizado de `nginx:1.16.1` a `nginx:1.14.2`.
+* La anotación `last-applied-configuration` ha sido actualizada con la nueva imagen.
+* El campo `minReadySeconds` ha sido despejado.
+* La anotación `last-applied-configuration` ya no contiene el campo `minReadySeconds`
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    # ...
+    # La anotación contiene la imagen acutalizada a nginx 1.11.9,
+    # pero no contiene la actualización de las replicas a 2
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"apps/v1","kind":"Deployment",
+      "metadata":{"annotations":{},"name":"nginx-deployment","namespace":"default"},
+      "spec":{"selector":{"matchLabels":{"app":nginx}},"template":{"metadata":{"labels":{"app":"nginx"}},
+      "spec":{"containers":[{"image":"nginx:1.16.1","name":"nginx",
+      "ports":[{"containerPort":80}]}]}}}}
+    # ...
+spec:
+  replicas: 2 # Definido por `kubectl scale`.  Ignorado por `kubectl apply`.
+  # minReadySeconds fue despejado por `kubectl apply`
+  # ...
+  selector:
+    matchLabels:
+      # ...
+      app: nginx
+  template:
+    metadata:
+      # ...
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - image: nginx:1.16.1 # Definido `kubectl apply`
+        # ...
+        name: nginx
+        ports:
+        - containerPort: 80
+        # ...
+      # ...
+    # ...
+  # ...
+```
+
+{{< warning >}}
+Combinar `kubectl apply`  con los comandos de configuración imperativa de objetos 
+`create` y `replace` no es soportado. Esto debido a que `create`
+y `replace` no retienen la anotación `kubectl.kubernetes.io/last-applied-configuration`
+que `kubectl apply` utiliza para computar los cambios por realizar.
+{{< /warning >}}
+
+## Como eliminar objetos
+
+Hay dos diferentes opciones para eliminar objetos gestionados por `kubectl apply`.
+
+### Manera recomendada: `kubectl delete -f <fichero>`
+
+Eliminar objetos de manera manual utilizando el comando imperativo es la opción
+recomendada, ya que es más explícito en relación a lo que será eliminado, y es
+menos probable que resulte en algo siendo eliminado sin la intención del usuario.
+
+```shell
+kubectl delete -f <fichero>
+```
+
+### Manera alternativa: `kubectl apply -f <directorio/> --prune -l etiqueta=deseada`
+
+Únicamente utilice esta opción si está seguro de saber lo que está haciendo..
+
+{{< warning >}}
+`kubectl apply --prune` se encuenta aún en alpha, y cambios incompatibles con versiones previas
+podrían ser introducidos en futuros lanzamientos.
+{{< /warning >}}
+
+{{< warning >}}
+Sea cuidadoso o cuidadosa al usar este comando, para evitar eliminar objetos
+no intencionalmente.
+{{< /warning >}}
+
+Como una alternativa a `kubectl delete`, usted puede usar `kubectl apply`para identificar objetos por ser
+eliminados, luego de que sus archivos de configuración han sido eliminados del directorio. El commando `apply` con `--prune`
+consulta al servidor de API por todos los objetos que coincidan con un grupo de etiquetas, e intenta parear
+la configuración retornada para los objetos activos contra los objetos según sus ficheros de configuración.
+Si un objeto coincide con la consulta, y no tiene un fichero de configuración en el directorio, pero si
+tiene una anotación `last-applied-configuration`, entonces será eliminado.
+
+{{< comment >}}
+TODO(pwittrock): We need to change the behavior to prevent the user from running apply on subdirectories unintentionally.
+{{< /comment >}}
+
+```shell
+kubectl apply -f <directorio/> --prune -l <etiquetas>
+```
+
+{{< warning >}}
+`apply` con `--prune` debería de ser ejecutado únicamente en contra del directorio
+raíz que contiene los ficheros de configuración. Ejecutarlo en contra de sub-directorios
+podría causar que objetos sean eliminados no intencionalmente, si son retornados en la
+consulta por selección de etiqueta usando `-l <etiquetas>` y no existen en el subdirectorio.
+{{< /warning >}}
+
+## Como visualizar un objeto
+
+Puede usar `kubectl get` con `-o yaml` para ver la configuración de objetos activos:
+
+```shell
+kubectl get -f <fichero|url> -o yaml
+```
+
+## Como son las diferencias calculadas y unidas por apply
+
+{{< caution >}}
+Un *patch*  (parche) es una operación de actualización con alcance a campos específicos 
+de un objeto, y no al objeto completo. Esto permite actualizar únicamente grupos de campos
+específicos en un objeto sin tener que leer el objeto primero.
+{{< /caution >}}
+
+Cuando `kubectl apply` actualiza la configuración activa para un objeto, lo hace enviando
+una solicitud de patch al servidor de API. El patch define actualizaciones para campos
+específicos en la configuración del objeto activo. El comando `kubectl apply` calcula esta solicitud
+de patch usando el fichero de configuración, la configuración activa, y la anotación `last-applied-configuration`
+almacenada en la configuración activa.
+
+### Calculando la unión de un patch
+
+El comando `kubectl apply` escribe los contenidos de la configuración a la anotación
+`kubectl.kubernetes.io/last-applied-configuration`. Esto es usado para identificar aquellos campos
+que han sido eliminados de la configuración y deben ser limpiados. Los siguientes pasos
+son usados para calcular que campos deben ser eliminados o definidos:
+
+1. Calculo de campos por eliminar. Estos son los campos presentes en `last-applied-configuration` pero ausentes en el fichero de configuración.
+2. Calculo de campos por agregar o definir. Estos son los campos presentes en el fichero de configuración, con valores inconsistentes con la configuración activa.
+
+A continuación un ejemplo. Suponga que este es el fichero de configuración para un objeto de tipo Deployment:
+
+{{< codenew file="application/update_deployment.yaml" >}}
+
+También, supognga que esta es la configuración activa para ese mismo objeto de tipo Deployment:
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    # ...
+    # tome nota de que la anotación no contiene un valor para replicas
+    # dado que no fue actualizado usando el comando apply
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"apps/v1","kind":"Deployment",
+      "metadata":{"annotations":{},"name":"nginx-deployment","namespace":"default"},
+      "spec":{"minReadySeconds":5,"selector":{"matchLabels":{"app":nginx}},"template":{"metadata":{"labels":{"app":"nginx"}},
+      "spec":{"containers":[{"image":"nginx:1.14.2","name":"nginx",
+      "ports":[{"containerPort":80}]}]}}}}
+  # ...
+spec:
+  replicas: 2 # definidas por scale
+  # ...
+  minReadySeconds: 5
+  selector:
+    matchLabels:
+      # ...
+      app: nginx
+  template:
+    metadata:
+      # ...
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - image: nginx:1.14.2
+        # ...
+        name: nginx
+        ports:
+        - containerPort: 80
+      # ...
+```
+
+Estos son los cálculos de unión que serían realizados por `kubectl apply`:
+
+1. Calcular los campos por eliminar, leyendo los valores de `last-applied-configuration`
+   y comparándolos con los valores en el fichero de configuración.
+   Limpiar los campos definidos en null de manera explícita en el fichero de configuración
+   sin tomar en cuenta si se encuentran presentes en la anotación `last-applied-configuration`.
+   En este ejemplo, `minReadySeconds` aparece en la anotación
+   `last-applied-configuration` pero no aparece en el fichero de configuración.
+    **Acción:** Limpiar `minReadySeconds` de la configuración activa.
+2. Calcular los campos por ser definidos, al leer los valores del firecho de configuración
+   y compararlos con los valores en la configuración activa. En este ejemplo, el valor `image`
+   en el fichero de configuración, no coincide con el valor en la configuración activa.
+   **Acción:** Definir el campo `image` en la configuración activa.
+3. Definir el valor de la anotación `last-applied-configuration` para que sea consistente
+   con el fichero de configuración.
+4. Unir los resultados de 1, 2 y 3, en una única solicitud de patch para enviar al API server.
+
+Esta es la configuración activa como resultado de esta unión:
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    # ...
+    # La anotación contiene la imágen actualizada a nginx 1.11.9,
+    # pero no contiene la actualización a 2 replicas
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"apps/v1","kind":"Deployment",
+      "metadata":{"annotations":{},"name":"nginx-deployment","namespace":"default"},
+      "spec":{"selector":{"matchLabels":{"app":nginx}},"template":{"metadata":{"labels":{"app":"nginx"}},
+      "spec":{"containers":[{"image":"nginx:1.16.1","name":"nginx",
+      "ports":[{"containerPort":80}]}]}}}}
+    # ...
+spec:
+  selector:
+    matchLabels:
+      # ...
+      app: nginx
+  replicas: 2 # Definido por `kubectl scale`.  Ignorado por `kubectl apply`.
+  # minReadySeconds eliminado por `kubectl apply`
+  # ...
+  template:
+    metadata:
+      # ...
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - image: nginx:1.16.1 # Definido por `kubectl apply`
+        # ...
+        name: nginx
+        ports:
+        - containerPort: 80
+        # ...
+      # ...
+    # ...
+  # ...
+```
+
+### Como se unen los diferentes tipos de campos
+
+La manera en la que los campos en un fichero de configuración son unidos con la
+configuración activa depende del tipo de campo. Existen varios tipos de campos:
+
+- *primitivo*: Campos de cadena de texto (string), enteros (integer), o lógicos (boolean).
+  Por ejemplo, `image` y `replicas` son campos de tipo primitivo. **Acción:** Reemplazarlos.
+
+- *mapa*, también llamados *objeto*:  Campo de tipo mapa o un tipo
+  complejo que contiene sub-campos. Por ejemplo, `labels`,
+  `annotations`,`spec` y `metadata` son todos mapas. **Acción:** Unir los elementos o sub-campos.
+
+- *lista*: Campos que contienen una lista de elementos que pueden ser de tipo primitivo o mapa.
+  Como ejemplos, `containers`, `ports`, y `args` son listas. **Acción:** Varía.
+
+Cuando `kubectl apply` actualiza un campo de tipo mapa o lista, típicamente no reemplaza
+el campo completo, sino actualiza los sub-elementos individuales.
+Por ejemplo, cuando se hace una unión del campo `spec` en un Deployment, el `spec`
+completo no es reemplazado, por el contrario, únicamente los sub-campos de `spec` como
+`replica` son comparados y unidos.
+
+### Uniendo cambios en campos primitivos
+
+Campos primitivos son limpiados o reemplazados.
+
+{{< note >}}
+`-` determina que "no aplica" debido a que el valor no es utilizado.
+{{< /note >}}
+
+| Campo en el fichero de configuración  | Campo en la configuración activa   | Campo en last-applied-configuration | Acción                                                       |
+|---------------------------------------|------------------------------------|-------------------------------------|--------------------------------------------------------------|
+| Si                                    | Si                                 | -                                   | Define el valor en el fichero de configuración como activo.  |
+| Si                                    | No                                 | -                                   | Define el valor a la configuración local.                    |
+| No                                    | -                                  | Si                                  | Elimina de la configuración activa.                          |
+| No                                    | -                                  | No                                  | No hacer nada. Mantiene el valor activo.                     |
+
+### Uniendo cambios en campos de un mapa
+
+Los campos que conjúntamente representan un mapa, son unidos al comparar cada uno de los subcampos o elementos del mapa:
+
+{{< note >}}
+`-` determina que "no aplica" debido a que el valor no es utilizado.
+{{< /note >}}
+
+| Propiedad en fichero de configuración | Propiedad en configuración activa | Campo en last-applied-configuration | Acción                                   |
+|---------------------------------------|-----------------------------------|-------------------------------------|------------------------------------------|
+| Si                                    | Si                                | -                                   | Comparar valores de sub-propiedades.     |
+| Si                                    | No                                | -                                   | Usar configuracón local.                 |
+| No                                    | -                                 | Si                                  | Eliminar de la configuración activa.     |
+| No                                    | -                                 | No                                  | No hacer nada. Mantener el valor activo. |
+
+### Uniendo cambios en campos de tipo lista
+
+El unir cambios en una lista utiliza una de tres posibles estrategias:
+
+* Reemplazar la lista si todos sus elementos son primitivos.
+* Unir elementos individuales en líneas de elementos complejos.
+* Unir una lista de elementos primitivos.
+
+Se define la estrategia elegida con base en cada campo.
+
+#### Reemplazar una lista si todos sus elementos son primitivos
+
+Trata la lista como si fuese un campo primitivo. Reemplaza o elimina la lista completa.
+Esto preserva el orden de los elementos.
+
+
+**Ejemplo:** Usndo `kubectl apply` para actualizar el campo `args` de un Contenedor en un Pod.
+Esto define el valor de `args` en la configuración activa, al valor en el fichero de configuración.
+Cualquier elemento de `args` que haya sido previamente agregado a la configuración activa se perderá.
+El orden de los elementos definidos en `args` en el fichero de configuración, serán conservados
+en la configuración activa.
+
+```yaml
+# valor en last-applied-configuration
+    args: ["a", "b"]
+
+# valores en fichero de configuración
+    args: ["a", "c"]
+
+# configuración activa
+    args: ["a", "b", "d"]
+
+# resultado posterior a la unión
+    args: ["a", "c"]
+```
+
+**Explicación:** La unión utilizó los valores del fichero de configuración para definir los nuevos valores de la lista.
+
+#### Unir elementos individuales en una lista de elementos complejos
+
+Trata la lista como un mapa, y trata cada campo específico de cada elemento como una llave.
+Agrega, elimina o actualiza elementos individuales. Esta operación no conserva orden.
+
+Esta estrategia de unión utiliza una etiqueta especial en cada campo llamada `patchMergeKey`. La etiqueta
+`patchMergeKey` es definida para cada campo en el código fuente de Kubernetes:
+[types.go](https://github.com/kubernetes/api/blob/d04500c8c3dda9c980b668c57abc2ca61efcf5c4/core/v1/types.go#L2747)
+Al unir una lista de mapas, el campo específicado en `patchMergeKey` para el elemento dado
+se utiliza como un mapa de llaves para ese elemento.
+
+**Ejemplo:** Utilice `kubectl apply` para actualizar el campo `containers` de un PodSpec.
+Esto une la lista como si fuese un mapa donde cada elemento utiliza `name` por llave.
+
+```yaml
+# valor en last-applied-configuration
+    containers:
+    - name: nginx
+      image: nginx:1.16
+    - name: nginx-helper-a # llave: nginx-helper-a; será eliminado en resultado
+      image: helper:1.3
+    - name: nginx-helper-b # llave: nginx-helper-b; será conservado
+      image: helper:1.3
+
+# valor en fichero de configuración
+    containers:
+    - name: nginx
+      image: nginx:1.16
+    - name: nginx-helper-b
+      image: helper:1.3
+    - name: nginx-helper-c # llavel: nginx-helper-c; será agregado en el resultado
+      image: helper:1.3
+
+# configuración activa
+    containers:
+    - name: nginx
+      image: nginx:1.16
+    - name: nginx-helper-a
+      image: helper:1.3
+    - name: nginx-helper-b
+      image: helper:1.3
+      args: ["run"] # Campo será conservado
+    - name: nginx-helper-d # llave: nginx-helper-d; será conservado
+      image: helper:1.3
+
+# resultado posterior a la unión
+    containers:
+    - name: nginx
+      image: nginx:1.16
+      # Elemento nginx-helper-a fue eliminado
+    - name: nginx-helper-b
+      image: helper:1.3
+      args: ["run"] # Campo fue conservado
+    - name: nginx-helper-c # Elemento fue agregado
+      image: helper:1.3
+    - name: nginx-helper-d # Elemento fue ignorado
+      image: helper:1.3
+```
+
+**Explicación:**
+
+- El contenedor llamado "nginx-helper-a" fué eliminado al no aparecer ningún
+  contenedor llamado "nginx-helper-a" en el fichero de configuración.
+- El contenedor llamado "nginx-helper-b" mantiene los cambios a  `args`
+  existentes en la configuración activa. `kubectl apply` pudo identificar que
+  el contenedor "nginx-helper-b" en la configuración activa es el mismo
+  "nginx-helper-b" que aparece en el fichero de configuración, aún teniendo diferentes
+  valores en los campos (no existe `args` en el fichero de configuración). Esto sucede
+  debido a que el valor del campo `patchMergeKey` (name) es idéntico en ambos.
+- El contenedor llamado "nginx-helper-c" fue agregado ya que no existe ningún contenedor
+  con ese nombre en la configuración activa, pero si existe uno con ese nombre
+  en el fichero de configuración.
+- El contendor llamado "nginx-helper-d" fue conservado debido a que no aparece
+  ningún elemento con ese nombre en last-applied-configuration.
+
+#### Unir una lista de elementos primitivos
+
+A partir de Kubernetes 1.5, el unir listas de elementos primitivos no es soportado.
+
+{{< note >}}
+La escogencia de estrategia por selecciones para un campo en particular, es controlada
+por la etiqueta `patchStrategy` en [types.go](https://github.com/kubernetes/api/blob/d04500c8c3dda9c980b668c57abc2ca61efcf5c4/core/v1/types.go#L2748)
+Si no se especifica `patchStrategy` para un campo de tipo lista, entonces el campo
+es reemplazado.
+{{< /note >}}
+
+{{< comment >}}
+TODO(pwittrock): Uncomment this for 1.6
+
+- Treat the list as a set of primitives.  Replace or delete individual
+  elements.  Does not preserve ordering.  Does not preserve duplicates.
+
+**Example:** Using apply to update the `finalizers` field of ObjectMeta
+keeps elements added to the live configuration.  Ordering of finalizers
+is lost.
+{{< /comment >}}
+
+## Valores de campo por defecto
+
+El Servidor de API define algunos campos a sus valores por defecto si no son especificados
+al momento de crear un objeto.
+
+Aquí puede ver un fichero de configuración para un Deployment. Este fichero no especifica
+el campo `strategy`:
+
+{{< codenew file="application/simple_deployment.yaml" >}}
+
+Cree un nuevo objeto `kubectl apply`:
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/simple_deployment.yaml
+```
+
+Despliegue la configuración activa usando `kubectl get`:
+
+```shell
+kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yaml
+```
+
+La salida demuestra que el API Server definió varios campos con los valores por defecto
+en la configuración activa. Estos campos no fueron especificados en el fichero de
+configuración.
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+# ...
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  minReadySeconds: 5
+  replicas: 1 # valor por defecto definido por apiserver
+  strategy:
+    rollingUpdate: # valor por defecto definido por apiserver - derivado de strategy.type
+      maxSurge: 1
+      maxUnavailable: 1
+    type: RollingUpdate # valor por defecto definido por apiserver
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - image: nginx:1.14.2
+        imagePullPolicy: IfNotPresent # valor por defecto definido por apiserver
+        name: nginx
+        ports:
+        - containerPort: 80
+          protocol: TCP # valor por defecto definido por apiserver
+        resources: {} # valor por defecto definido por apiserver
+        terminationMessagePath: /dev/termination-log # valor por defecto definido por apiserver
+      dnsPolicy: ClusterFirst # valor por defecto definido por apiserver
+      restartPolicy: Always # valor por defecto definido por apiserver
+      securityContext: {} # valor por defecto definido por apiserver
+      terminationGracePeriodSeconds: 30 # valor por defecto definido por apiserver
+# ...
+```
+
+En una solicitud de patch, los campos definidos a valores por defecto no son re-definidos exceptuando
+cuando hayan sido limpiados de manera explícita como parte de la solicitud de patch. Esto puede
+causar comportamientos no esperados para campos cuyo valor por defecto es basado en los valores
+de otros campos. Cuando el otro campo ha cambiado, el valor por defecto de ellos no será actualizado
+de no ser que sean limpiados de manera explícita.
+
+Por esta razón, se recomienda que algunos campos que reciben un valor por defecto del
+servidor sean definidos de manera explícita en los ficheros de configuración, aun cuando
+el valor definido sea idéntico al valor por defecto. Esto facilita la identificación
+de valores conflictivos que podrían no ser revertidos a valores por defecto por parte
+del servidor.
+
+**Ejemplo:**
+
+```yaml
+# last-applied-configuration
+spec:
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14.2
+        ports:
+        - containerPort: 80
+
+# fichero de configuración
+spec:
+  strategy:
+    type: Recreate # valor actualizado
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14.2
+        ports:
+        - containerPort: 80
+
+# configuración activa
+spec:
+  strategy:
+    type: RollingUpdate # valor por defecto
+    rollingUpdate: # valor por defecto derivado del campo type
+      maxSurge : 1
+      maxUnavailable: 1
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14.2
+        ports:
+        - containerPort: 80
+
+# resultado posterior a la unión - ERROR!
+spec:
+  strategy:
+    type: Recreate # valor actualizado: incompatible con RollingUpdate
+    rollingUpdate: # valor por defecto: incompatible con "type: Recreate"
+      maxSurge : 1
+      maxUnavailable: 1
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14.2
+        ports:
+        - containerPort: 80
+```
+
+**Explicación:**
+
+1. El usuario crea un Deployment sin definir `strategy.type`.
+2. El servidor define `strategy.type` a su valor por defecto de `RollingUpdate` y
+   agrega los valores por defecto a `strategy.rollingUpdate`.
+3. El usuario cambia `strategy.type` a `Recreate`. Los valores de `strategy.rollingUpdate`
+   se mantienen en su configuración por defecto, sin embargo el servidor espera que se limpien.
+   Si los valores de `strategy.rollingUpdate` hubiesen sido definidos inicialmente en el fichero
+   de configuración, hubiese sido más claro que requerían ser eliminados.
+4. Apply fallará debido a que `strategy.rollingUpdate` no fue eliminado. El campo `strategy.rollingupdate`
+   no puede estar definido, si el valor de `strategy.type` es `Recreate`.
+
+Recomendación: Estos campos deberían de ser definidos de manera explícita en el fichero de configuración:
+
+- Etiquetas de Selectors y PodTemplate en cargas de trabajo como Deployment, StatefulSet, Job, DaemonSet,
+  ReplicaSet, y ReplicationController
+- Estrategia de rollout para un Deployment
+
+### Como limpiar campos definidos a valores por defecto por el servidor, o definidos por otros escritores
+
+Campos que no aparecen en el fichero de configuración pueden ser limpiados si se define su valor
+a `null` y luego se aplica el fichero de configuración.
+Para los campos definidos a valores por defecto por el servidor, esto provoca el re establecimiento
+a sus valores por defecto.
+
+## Como cambiar al propietario de un campo entre un fichero de configuración y un escritor imperativo
+
+Estos son los únicos métodos que debe usar para cambiar un campo individual de un objeto:
+
+- Usando `kubectl apply`.
+- Escribiendo de manera directa a la configuración activa sin modificar el fichero de configuración:
+por ejemplo, usando `kubectl scale`.
+
+### Cambiando al propietario de un campo de un escritor imperativo a un fichero de configuración
+
+Añada el campo al fichero de configuración, y no realice nuevas actualizaciones a la configuración
+activa que no sucedan por medio de `kubectl apply`.
+
+### Cambiando al propietario de un fichero de configuración a un escritor imperativo
+
+A partir de Kubernetes 1.5, el cambiar un campo que ha sido definido por medio de un
+fichero de configuración para que sea modificado por un escritor imperativo requiere
+pasos manuales:
+
+- Eliminar el campo del fichero de configuración.
+- Eliminar el campo de la anotación `kubectl.kubernetes.io/last-applied-configuration` en el objeto activo.
+
+## Cambiando los métodos de gestión
+
+Los objetos en Kubernetes deberían de ser gestionados utilizando únicamente un método
+a la vez. El alternar de un método a otro es posible, pero es un proceso manual.
+
+{{< note >}}
+Esta bien el usar eliminación imperativa junto a gestión declarativa.
+{{< /note >}}
+
+{{< comment >}}
+TODO(pwittrock): We need to make using imperative commands with
+declarative object configuration work so that it doesn't write the
+fields to the annotation, and instead.  Then add this bullet point.
+
+- using imperative commands with declarative configuration to manage where each manages different fields.
+{{< /comment >}}
+
+### Migrando de gestión imperativa con comandos a configuración declarativa de objetos
+
+El migrar de gestión imperativa utilizando comandos a la gestión declarativa de objetos
+requiere varios pasos manuales:
+
+1. Exporte el objeto activo a un fichero local de configuración:
+
+     ```shell
+     kubectl get <tipo>/<nombre> -o yaml > <tipo>_<nombre>.yaml
+     ```
+
+1. Elimine de manera manual el campo `status` del fichero de configuración.
+
+    {{< note >}}
+    Este paso es opcional, ya que `kubectl apply` no actualiza el campo `status`
+   aunque este presente en el fichero de configuración.
+    {{< /note >}}
+
+1. Defina la anotación `kubectl.kubernetes.io/last-applied-configuration` en el objeto:
+
+    ```shell
+    kubectl replace --save-config -f <tipo>_<nombre>.yaml
+    ```
+
+1. Modifique el proceso para usar `kubectl apply` para gestionar el objeto de manera exclusiva.
+
+{{< comment >}}
+TODO(pwittrock): Why doesn't export remove the status field?  Seems like it should.
+{{< /comment >}}
+
+### Migrando de gestión imperativa de la configuración de objetos a gestión declarativa
+
+1. Defina la anotación `kubectl.kubernetes.io/last-applied-configuration` en el objeto:
+
+    ```shell
+    kubectl replace --save-config -f <tipo>_<nombre>.yaml
+    ```
+
+1. Modifique el proceso para usar `kubectl apply` para gestionar el objeto de manera exclusiva.
+
+## Definiendo los selectores para el controlador y las etiquetas de PodTemplate
+
+{{< warning >}}
+Actualizar selectores en controladores se desaconseja encarecidamente.
+{{< /warning >}}
+
+La forma recomendada es definir una etiqueta única e inmutable para PodTemplate usada
+únicamente por el selector del controlador sin tener ningún otro significado semántico.
+
+**Ejemplo:**
+
+```yaml
+selector:
+  matchLabels:
+      controller-selector: "apps/v1/deployment/nginx"
+template:
+  metadata:
+    labels:
+      controller-selector: "apps/v1/deployment/nginx"
+```
+
+## {{% heading "whatsnext" %}}
+
+
+* [Managing Kubernetes Objects Using Imperative Commands](/docs/tasks/manage-kubernetes-objects/imperative-command/)
+* [Imperative Management of Kubernetes Objects Using Configuration Files](/docs/tasks/manage-kubernetes-objects/imperative-config/)
+* [Kubectl Command Reference](/docs/reference/generated/kubectl/kubectl-commands/)
+* [Kubernetes API Reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
+
+
diff --git a/content/es/examples/application/simple_deployment.yaml b/content/es/examples/application/simple_deployment.yaml
new file mode 100644
index 0000000000..d9c74af8c5
--- /dev/null
+++ b/content/es/examples/application/simple_deployment.yaml
@@ -0,0 +1,19 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  minReadySeconds: 5
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14.2
+        ports:
+        - containerPort: 80
diff --git a/content/es/examples/application/update_deployment.yaml b/content/es/examples/application/update_deployment.yaml
new file mode 100644
index 0000000000..7230cc4323
--- /dev/null
+++ b/content/es/examples/application/update_deployment.yaml
@@ -0,0 +1,18 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.16.1 # actualice el valor de image
+        ports:
+        - containerPort: 80

From c111b4ac6221ae8674e9b7c2303701a1c30c75f0 Mon Sep 17 00:00:00 2001
From: Tim Hockin <thockin@google.com>
Date: Fri, 29 Jan 2021 15:12:40 -0800
Subject: [PATCH 017/788] Docs for KEP 2200

* Document DenyServiceExternalIPs admission controller
* Re-order other admission controller blocks to be alphabetical
* Document DefaultIngressClass (missing)
---
 .../admission-controllers.md                  | 133 +++++++++++-------
 .../kube-apiserver.md                         |   2 +-
 2 files changed, 82 insertions(+), 53 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md
index 0cdcbf2f36..edb1f5403e 100644
--- a/content/en/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md
@@ -94,7 +94,7 @@ kube-apiserver -h | grep enable-admission-plugins
 In the current version, the default ones are:
 
 ```shell
-NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota
+CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, LimitRanger, MutatingAdmissionWebhook, NamespaceLifecycle, PersistentVolumeClaimResize, Priority, ResourceQuota, RuntimeClass, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook
 ```
 
 ## What does each admission controller do?
@@ -105,6 +105,12 @@ NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority
 
 This admission controller allows all pods into the cluster. It is deprecated because its behavior is the same as if there were no admission controller at all.
 
+### AlwaysDeny {#alwaysdeny}
+
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+
+Rejects all requests. AlwaysDeny is DEPRECATED as it has no real meaning.
+
 ### AlwaysPullImages {#alwayspullimages}
 
 This admission controller modifies every new Pod to force the image pull policy to Always. This is useful in a
@@ -115,12 +121,6 @@ scheduled onto the right node), without any authorization check against the imag
 is enabled, images are always pulled prior to starting containers, which means valid credentials are
 required.
 
-### AlwaysDeny {#alwaysdeny}
-
-{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
-
-Rejects all requests. AlwaysDeny is DEPRECATED as no real meaning.
-
 ### CertificateApproval {#certificateapproval}
 
 This admission controller observes requests to 'approve' CertificateSigningRequest resources and performs additional
@@ -145,6 +145,22 @@ This admission controller observes creation of CertificateSigningRequest resourc
 of `kubernetes.io/kube-apiserver-client`. It rejects any request that specifies a 'group' (or 'organization attribute')
 of `system:masters`.
 
+### DefaultIngressClass {#defaultingressclass}
+
+This admission controller observes creation of `Ingress` objects that do not request any specific
+ingress class and automatically adds a default ingress class to them.  This way, users that do not
+request any special ingress class do not need to care about them at all and they will get the
+default one.
+
+This admission controller does not do anything when no default ingress class is configured. When more than one ingress
+class is marked as default, it rejects any creation of `Ingress` with an error and an administrator
+must revisit their `IngressClass` objects and mark only one as default (with the annotation
+"ingressclass.kubernetes.io/is-default-class").  This admission controller ignores any `Ingress`
+updates; it acts only on creation.
+
+See the [ingress](/docs/concepts/services-networking/ingress/) documentation for more about ingress
+classes and how to mark one as default.
+
 ### DefaultStorageClass {#defaultstorageclass}
 
 This admission controller observes creation of `PersistentVolumeClaim` objects that do not request any specific storage class
@@ -169,19 +185,6 @@ have toleration for taints `node.kubernetes.io/not-ready:NoExecute` or
 `node.kubernetes.io/unreachable:NoExecute`.
 The default value for `default-not-ready-toleration-seconds` and `default-unreachable-toleration-seconds` is 5 minutes.
 
-### DenyExecOnPrivileged {#denyexeconprivileged}
-
-{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
-
-This admission controller will intercept all requests to exec a command in a pod if that pod has a privileged container.
-
-This functionality has been merged into [DenyEscalatingExec](#denyescalatingexec).
-The DenyExecOnPrivileged admission plugin is deprecated and will be removed in v1.18.
-
-Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
-which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods
-is recommended instead.
-
 ### DenyEscalatingExec {#denyescalatingexec}
 
 {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
@@ -190,12 +193,38 @@ This admission controller will deny exec and attach commands to pods that run wi
 allow host access.  This includes pods that run as privileged, have access to the host IPC namespace, and
 have access to the host PID namespace.
 
-The DenyEscalatingExec admission plugin is deprecated and will be removed in v1.18.
+The DenyEscalatingExec admission plugin is deprecated and will be removed in v1.21.
 
 Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
 which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods
 is recommended instead.
 
+### DenyExecOnPrivileged {#denyexeconprivileged}
+
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+
+This admission controller will intercept all requests to exec a command in a pod if that pod has a privileged container.
+
+This functionality has been merged into [DenyEscalatingExec](#denyescalatingexec).
+The DenyExecOnPrivileged admission plugin is deprecated and will be removed in v1.21.
+
+Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
+which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods
+is recommended instead.
+
+### DenyServiceExternalIPs
+
+This admission controller rejects all net-new usage of the `Service` field `externalIPs`.  This
+feature is very powerful (allows network traffic interception) and not well
+controlled by policy.  When enabled, users of the cluster may not create new
+Services which use `externalIPs` and may not add new values to `externalIPs` on
+existing `Service` objects.  Existing uses of `externalIPs` are not affected,
+and users may remove values from `externalIPs` on existing `Service` objects.
+
+Most users do not need this feature at all, and cluster admins should consider disabling it.
+Clusters that do need to use this feature should consider using some custom policy to manage usage
+of it.
+
 ### EventRateLimit {#eventratelimit}
 
 {{< feature-state for_k8s_version="v1.13" state="alpha" >}}
@@ -553,6 +582,37 @@ This admission controller also protects the access to `metadata.ownerReferences[
 of an object, so that only users with "update" permission to the `finalizers`
 subresource of the referenced *owner* can change it.
 
+### PersistentVolumeClaimResize {#persistentvolumeclaimresize}
+
+This admission controller implements additional validations for checking incoming `PersistentVolumeClaim` resize requests.
+
+{{< note >}}
+Support for volume resizing is available as an alpha feature. Admins must set the feature gate `ExpandPersistentVolumes`
+to `true` to enable resizing.
+{{< /note >}}
+
+After enabling the `ExpandPersistentVolumes` feature gate, enabling the `PersistentVolumeClaimResize` admission
+controller is recommended, too. This admission controller prevents resizing of all claims by default unless a claim's `StorageClass`
+ explicitly enables resizing by setting `allowVolumeExpansion` to `true`.
+
+For example: all `PersistentVolumeClaim`s created from the following `StorageClass` support volume expansion:
+
+```yaml
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: gluster-vol-default
+provisioner: kubernetes.io/glusterfs
+parameters:
+  resturl: "http://192.168.10.100:8080"
+  restuser: ""
+  secretNamespace: ""
+  secretName: ""
+allowVolumeExpansion: true
+```
+
+For more information about persistent volume claims, see [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims).
+
 ### PersistentVolumeLabel {#persistentvolumelabel}
 
 {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
@@ -638,37 +698,6 @@ PodNodeSelector allows forcing pods to run on specifically labeled nodes. Also s
 admission plugin, which allows preventing pods from running on specifically tainted nodes.
 {{< /note >}}
 
-### PersistentVolumeClaimResize {#persistentvolumeclaimresize}
-
-This admission controller implements additional validations for checking incoming `PersistentVolumeClaim` resize requests.
-
-{{< note >}}
-Support for volume resizing is available as an alpha feature. Admins must set the feature gate `ExpandPersistentVolumes`
-to `true` to enable resizing.
-{{< /note >}}
-
-After enabling the `ExpandPersistentVolumes` feature gate, enabling the `PersistentVolumeClaimResize` admission
-controller is recommended, too. This admission controller prevents resizing of all claims by default unless a claim's `StorageClass`
- explicitly enables resizing by setting `allowVolumeExpansion` to `true`.
-
-For example: all `PersistentVolumeClaim`s created from the following `StorageClass` support volume expansion:
-
-```yaml
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: gluster-vol-default
-provisioner: kubernetes.io/glusterfs
-parameters:
-  resturl: "http://192.168.10.100:8080"
-  restuser: ""
-  secretNamespace: ""
-  secretName: ""
-allowVolumeExpansion: true
-```
-
-For more information about persistent volume claims, see [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims).
-
 ### PodSecurityPolicy {#podsecuritypolicy}
 
 This admission controller acts on creation and modification of the pod and determines if it should be admitted
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
index 6e87bff44c..73ef70c81b 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
@@ -470,7 +470,7 @@ kube-apiserver [flags]
 <td colspan="2">--enable-admission-plugins stringSlice</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</td>
 </tr>
 
 <tr>

From c1cc1e6b0643c3cb62a3fc1693303860bced1ad7 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Tue, 9 Feb 2021 10:38:40 +0800
Subject: [PATCH 018/788] fix an invalid url

---
 content/ja/docs/concepts/workloads/pods/ephemeral-containers.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
index 0fa45de94b..db69d83fcd 100644
--- a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -42,7 +42,7 @@ weight: 80
 
 エフェメラルコンテナを利用する場合には、他のコンテナ内のプロセスにアクセスできるように、[プロセス名前空間の共有](/ja/docs/tasks/configure-pod-container/share-process-namespace/)を有効にすると便利です。
 
-エフェメラルコンテナを利用してトラブルシューティングを行う例については、[デバッグ用のエフェメラルコンテナを使用してデバッグする](/docs/tasks/debug-application-cluster/debug-running-pod/#debugging-with-ephemeral-debug-container)を参照してください。
+エフェメラルコンテナを利用してトラブルシューティングを行う例については、[デバッグ用のエフェメラルコンテナを使用してデバッグする](/docs/tasks/debug-application-cluster/debug-running-pod/#ephemeral-container)を参照してください。
 
 ## Ephemeral containers API
 

From 72d6fb8cd1733cfdc7631564f284a87af51fee5c Mon Sep 17 00:00:00 2001
From: kakarotbyte <70238071+kakarotbyte@users.noreply.github.com>
Date: Thu, 11 Feb 2021 16:03:49 -0600
Subject: [PATCH 019/788] Update service.md

The VPC CIDR was switched to Subnet CIDR. Reason why This was changed is because exposing entire VPC CIDR in the SG might have been consider as security threat.

 So updating the Document.

Code referenece

https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/legacy-cloud-providers/aws/aws.go#L4008
---
 content/en/docs/concepts/services-networking/service.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index bcbf7d7f75..5fd2703c52 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -958,7 +958,8 @@ groups are modified with the following IP rules:
 
 | Rule | Protocol | Port(s) | IpRange(s) | IpRange Description |
 |------|----------|---------|------------|---------------------|
-| Health Check | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | VPC CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
+| Health Check | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | Subnet CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
+
 | Client Traffic | TCP | NodePort(s) | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/client=\<loadBalancerName\> |
 | MTU Discovery | ICMP | 3,4 | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/mtu=\<loadBalancerName\> |
 

From 507dc0aa20ca08307880a00e2a8322e80ba9bd9c Mon Sep 17 00:00:00 2001
From: wojtekt <wojtekt@google.com>
Date: Fri, 12 Feb 2021 11:41:55 +0100
Subject: [PATCH 020/788] Promote immutable secrets and configmaps to GA

---
 content/en/docs/concepts/configuration/configmap.md          | 4 ++--
 content/en/docs/concepts/configuration/secret.md             | 4 ++--
 .../reference/command-line-tools-reference/feature-gates.md  | 5 +++--
 3 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index 9a134dfc99..d0195e6bd9 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -235,9 +235,9 @@ propagation delay, where the cache propagation delay depends on the chosen cache
 ConfigMaps consumed as environment variables are not updated automatically and require a pod restart. 
 ## Immutable ConfigMaps {#configmap-immutable}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
-The Kubernetes beta feature _Immutable Secrets and ConfigMaps_ provides an option to set
+The Kubernetes feature _Immutable Secrets and ConfigMaps_ provides an option to set
 individual Secrets and ConfigMaps as immutable. For clusters that extensively use ConfigMaps
 (at least tens of thousands of unique ConfigMap to Pod mounts), preventing changes to their
 data has the following advantages:
diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 5a6a0dd092..ab627ce056 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -749,9 +749,9 @@ There are third party solutions for triggering restarts when secrets change.
 
 ## Immutable Secrets {#secret-immutable}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
-The Kubernetes beta feature _Immutable Secrets and ConfigMaps_ provides an option to set
+The Kubernetes feature _Immutable Secrets and ConfigMaps_ provides an option to set
 individual Secrets and ConfigMaps as immutable. For clusters that extensively use Secrets
 (at least tens of thousands of unique Secret to Pod mounts), preventing changes to their
 data has the following advantages:
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index d9754afb56..bc5f066d73 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -124,8 +124,6 @@ different Kubernetes components.
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | Beta | 1.19 | |
 | `IPv6DualStack` | `false` | Alpha | 1.15 | |
-| `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 |
-| `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
 | `KubeletPodResources` | `true` | Alpha | 1.13 | 1.14 |
 | `KubeletPodResources` | `true` | Beta | 1.15 | |
@@ -257,6 +255,9 @@ different Kubernetes components.
 | `HugePages` | `true` | GA | 1.14 | - |
 | `HyperVContainer` | `false` | Alpha | 1.10 | 1.19 |
 | `HyperVContainer` | `false` | Deprecated | 1.20 | - |
+| `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 |
+| `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | 1.20 |
+| `ImmutableEphemeralVolumes` | `true` | GA | 1.21 | |
 | `Initializers` | `false` | Alpha | 1.7 | 1.13 |
 | `Initializers` | - | Deprecated | 1.14 | - |
 | `KubeletConfigFile` | `false` | Alpha | 1.8 | 1.9 |

From ce8395deda2e328b3f3bf595899ce1de8429129e Mon Sep 17 00:00:00 2001
From: Max <78564304+max-cx@users.noreply.github.com>
Date: Fri, 12 Feb 2021 21:22:20 +0100
Subject: [PATCH 021/788] Update nodes.md

minor punctuation changes to improve readability
---
 .../en/docs/concepts/architecture/nodes.md    | 75 ++++++++++---------
 1 file changed, 39 insertions(+), 36 deletions(-)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index de08e48d8c..823dddf710 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -31,7 +31,7 @@ The [components](/docs/concepts/overview/components/#node-components) on a node
 There are two main ways to have Nodes added to the {{< glossary_tooltip text="API server" term_id="kube-apiserver" >}}:
 
 1. The kubelet on a node self-registers to the control plane
-2. You, or another human user, manually add a Node object
+2. You (or another human user) manually add a Node object
 
 After you create a Node object, or the kubelet on a node self-registers, the
 control plane checks whether the new Node object is valid. For example, if you
@@ -52,8 +52,8 @@ try to create a Node from the following JSON manifest:
 
 Kubernetes creates a Node object internally (the representation). Kubernetes checks
 that a kubelet has registered to the API server that matches the `metadata.name`
-field of the Node. If the node is healthy (if all necessary services are running),
-it is eligible to run a Pod. Otherwise, that node is ignored for any cluster activity
+field of the Node. If the node is healthy (i.e. all necessary services are running),
+then it is eligible to run a Pod. Otherwise, that node is ignored for any cluster activity
 until it becomes healthy.
 
 {{< note >}}
@@ -96,14 +96,14 @@ You can create and modify Node objects using
 When you want to create Node objects manually, set the kubelet flag `--register-node=false`.
 
 You can modify Node objects regardless of the setting of `--register-node`.
-For example, you can set labels on an existing Node, or mark it unschedulable.
+For example, you can set labels on an existing Node or mark it unschedulable.
 
 You can use labels on Nodes in conjunction with node selectors on Pods to control
 scheduling. For example, you can constrain a Pod to only be eligible to run on
 a subset of the available nodes.
 
 Marking a node as unschedulable prevents the scheduler from placing new pods onto
-that Node, but does not affect existing Pods on the Node. This is useful as a
+that Node but does not affect existing Pods on the Node. This is useful as a
 preparatory step before a node reboot or other maintenance.
 
 To mark a Node unschedulable, run:
@@ -179,14 +179,14 @@ The node condition is represented as a JSON object. For example, the following s
 ]
 ```
 
-If the Status of the Ready condition remains `Unknown` or `False` for longer than the `pod-eviction-timeout` (an argument passed to the {{< glossary_tooltip text="kube-controller-manager" term_id="kube-controller-manager" >}}), all the Pods on the node are scheduled for deletion by the node controller. The default eviction timeout duration is **five minutes**. In some cases when the node is unreachable, the API server is unable to communicate with the kubelet on the node. The decision to delete the pods cannot be communicated to the kubelet until communication with the API server is re-established. In the meantime, the pods that are scheduled for deletion may continue to run on the partitioned node.
+If the Status of the Ready condition remains `Unknown` or `False` for longer than the `pod-eviction-timeout` (an argument passed to the {{< glossary_tooltip text="kube-controller-manager" term_id="kube-controller-manager" >}}), then all the Pods on the node are scheduled for deletion by the node controller. The default eviction timeout duration is **five minutes**. In some cases when the node is unreachable, the API server is unable to communicate with the kubelet on the node. The decision to delete the pods cannot be communicated to the kubelet until communication with the API server is re-established. In the meantime, the pods that are scheduled for deletion may continue to run on the partitioned node.
 
 The node controller does not force delete pods until it is confirmed that they have stopped
 running in the cluster. You can see the pods that might be running on an unreachable node as
 being in the `Terminating` or `Unknown` state. In cases where Kubernetes cannot deduce from the
 underlying infrastructure if a node has permanently left a cluster, the cluster administrator
-may need to delete the node object by hand.  Deleting the node object from Kubernetes causes
-all the Pod objects running on the node to be deleted from the API server, and frees up their
+may need to delete the node object by hand. Deleting the node object from Kubernetes causes
+all the Pod objects running on the node to be deleted from the API server and frees up their
 names.
 
 The node lifecycle controller automatically creates
@@ -199,7 +199,7 @@ for more details.
 
 ### Capacity and Allocatable {#capacity}
 
-Describes the resources available on the node: CPU, memory and the maximum
+Describes the resources available on the node: CPU, memory, and the maximum
 number of pods that can be scheduled onto the node.
 
 The fields in the capacity block indicate the total amount of resources that a
@@ -225,18 +225,19 @@ CIDR block to the node when it is registered (if CIDR assignment is turned on).
 
 The second is keeping the node controller's internal list of nodes up to date with
 the cloud provider's list of available machines. When running in a cloud
-environment, whenever a node is unhealthy, the node controller asks the cloud
+environment and whenever a node is unhealthy, the node controller asks the cloud
 provider if the VM for that node is still available. If not, the node
 controller deletes the node from its list of nodes.
 
 The third is monitoring the nodes' health. The node controller is
-responsible for updating the NodeReady condition of NodeStatus to
-ConditionUnknown when a node becomes unreachable (i.e. the node controller stops
-receiving heartbeats for some reason, for example due to the node being down), and then later evicting
-all the pods from the node (using graceful termination) if the node continues
-to be unreachable. (The default timeouts are 40s to start reporting
-ConditionUnknown and 5m after that to start evicting pods.) The node controller
-checks the state of each node every `--node-monitor-period` seconds.
+responsible for:
+- Updating the NodeReady condition of NodeStatus to ConditionUnknown when a node
+  becomes unreachable, as the node controller stops receiving heartbeats for some
+  reason such as the node being down.
+- Evicting all the pods from the node using graceful termination if
+  the node continues to be unreachable. The default timeouts are 40s to start
+  reporting ConditionUnknown and 5m after that to start evicting pods.
+The node controller checks the state of each node every `--node-monitor-period` seconds.
 
 #### Heartbeats
 
@@ -252,13 +253,14 @@ of the node heartbeats as the cluster scales.
 The kubelet is responsible for creating and updating the `NodeStatus` and
 a Lease object.
 
-- The kubelet updates the `NodeStatus` either when there is change in status,
+- The kubelet updates the `NodeStatus` either when there is change in status
   or if there has been no update for a configured interval. The default interval
-  for `NodeStatus` updates is 5 minutes (much longer than the 40 second default
-  timeout for unreachable nodes).
+  for `NodeStatus` updates is 5 minutes, which is much longer than the 40 second default
+  timeout for unreachable nodes.
 - The kubelet creates and then updates its Lease object every 10 seconds
   (the default update interval). Lease updates occur independently from the
-  `NodeStatus` updates. If the Lease update fails, the kubelet retries with exponential backoff starting at 200 milliseconds and capped at 7 seconds.
+  `NodeStatus` updates. If the Lease update fails, the kubelet retries with
+  exponential backoff starting at 200 milliseconds and capped at 7 seconds.
 
 #### Reliability
 
@@ -269,23 +271,24 @@ from more than 1 node per 10 seconds.
 The node eviction behavior changes when a node in a given availability zone
 becomes unhealthy. The node controller checks what percentage of nodes in the zone
 are unhealthy (NodeReady condition is ConditionUnknown or ConditionFalse) at
-the same time. If the fraction of unhealthy nodes is at least
-`--unhealthy-zone-threshold` (default 0.55) then the eviction rate is reduced:
-if the cluster is small (i.e. has less than or equal to
-`--large-cluster-size-threshold` nodes - default 50) then evictions are
-stopped, otherwise the eviction rate is reduced to
-`--secondary-node-eviction-rate` (default 0.01) per second. The reason these
-policies are implemented per availability zone is because one availability zone
-might become partitioned from the master while the others remain connected. If
-your cluster does not span multiple cloud provider availability zones, then
-there is only one availability zone (the whole cluster).
+the same time:
+- If the fraction of unhealthy nodes is at least `--unhealthy-zone-threshold` 
+  (default 0.55), then the eviction rate is reduced.
+- If the cluster is small (i.e. has less than or equal to
+  `--large-cluster-size-threshold` nodes - default 50), then evictions are stopped.
+- Otherwise, the eviction rate is reduced to `--secondary-node-eviction-rate`
+  (default 0.01) per second.
+The reason these policies are implemented per availability zone is because one
+availability zone might become partitioned from the master while the others remain
+connected. If your cluster does not span multiple cloud provider availability zones,
+then there is only one availability zone (i.e. the whole cluster).
 
 A key reason for spreading your nodes across availability zones is so that the
 workload can be shifted to healthy zones when one entire zone goes down.
-Therefore, if all nodes in a zone are unhealthy then the node controller evicts at
+Therefore, if all nodes in a zone are unhealthy, then the node controller evicts at
 the normal rate of `--node-eviction-rate`.  The corner case is when all zones are
 completely unhealthy (i.e. there are no healthy nodes in the cluster). In such a
-case, the node controller assumes that there's some problem with master
+case, the node controller assumes that there is some problem with master
 connectivity and stops all evictions until some connectivity is restored.
 
 The node controller is also responsible for evicting pods running on nodes with
@@ -303,8 +306,8 @@ eligible for, effectively removing incoming load balancer traffic from the cordo
 
 ### Node capacity
 
-Node objects track information about the Node's resource capacity (for example: the amount
-of memory available, and the number of CPUs).
+Node objects track information about the Node's resource capacity: for example, the amount
+of memory available and the number of CPUs.
 Nodes that [self register](#self-registration-of-nodes) report their capacity during
 registration. If you [manually](#manual-node-administration) add a Node, then
 you need to set the node's capacity information when you add it.
@@ -338,7 +341,7 @@ for more information.
 If you have enabled the `GracefulNodeShutdown` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/), then the kubelet attempts to detect the node system shutdown and terminates pods running on the node.
 Kubelet ensures that pods follow the normal [pod termination process](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination) during the node shutdown.
 
-When the `GracefulNodeShutdown` feature gate is enabled, kubelet uses [systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/) to delay the node shutdown with a given duration. During a shutdown kubelet terminates pods in two phases:
+When the `GracefulNodeShutdown` feature gate is enabled, kubelet uses [systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/) to delay the node shutdown with a given duration. During a shutdown, kubelet terminates pods in two phases:
 
 1. Terminate regular pods running on the node.
 2. Terminate [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) running on the node.

From 9101931018d5c6f8808a3bd4f7258b131ac75ffa Mon Sep 17 00:00:00 2001
From: Max Leonov <78564304+max-cx@users.noreply.github.com>
Date: Sat, 13 Feb 2021 19:58:37 +0100
Subject: [PATCH 022/788] Update control-plane-node-communication.md

minor edits to improve readability
---
 .../architecture/control-plane-node-communication.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/concepts/architecture/control-plane-node-communication.md b/content/en/docs/concepts/architecture/control-plane-node-communication.md
index 2e7235a89f..9c7f135f29 100644
--- a/content/en/docs/concepts/architecture/control-plane-node-communication.md
+++ b/content/en/docs/concepts/architecture/control-plane-node-communication.md
@@ -11,14 +11,14 @@ aliases:
 
 <!-- overview -->
 
-This document catalogs the communication paths between the control plane (really the apiserver) and the Kubernetes cluster. The intent is to allow users to customize their installation to harden the network configuration such that the cluster can be run on an untrusted network (or on fully public IPs on a cloud provider).
+This document catalogs the communication paths between the control plane (apiserver) and the Kubernetes cluster. The intent is to allow users to customize their installation to harden the network configuration such that the cluster can be run on an untrusted network (or on fully public IPs on a cloud provider).
 
 
 
 <!-- body -->
 
 ## Node to Control Plane
-Kubernetes has a "hub-and-spoke" API pattern. All API usage from nodes (or the pods they run) terminate at the apiserver (none of the other control plane components are designed to expose remote services). The apiserver is configured to listen for remote connections on a secure HTTPS port (typically 443) with one or more forms of client [authentication](/docs/reference/access-authn-authz/authentication/) enabled.
+Kubernetes has a "hub-and-spoke" API pattern. All API usage from nodes (or the pods they run) terminates at the apiserver. None of the other control plane components are designed to expose remote services. The apiserver is configured to listen for remote connections on a secure HTTPS port (typically 443) with one or more forms of client [authentication](/docs/reference/access-authn-authz/authentication/) enabled.
 One or more forms of [authorization](/docs/reference/access-authn-authz/authorization/) should be enabled, especially if [anonymous requests](/docs/reference/access-authn-authz/authentication/#anonymous-requests) or [service account tokens](/docs/reference/access-authn-authz/authentication/#service-account-tokens) are allowed.
 
 Nodes should be provisioned with the public root certificate for the cluster such that they can connect securely to the apiserver along with valid client credentials. A good approach is that the client credentials provided to the kubelet are in the form of a client certificate. See [kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) for automated provisioning of kubelet client certificates.
@@ -42,7 +42,7 @@ The connections from the apiserver to the kubelet are used for:
 * Attaching (through kubectl) to running pods.
 * Providing the kubelet's port-forwarding functionality.
 
-These connections terminate at the kubelet's HTTPS endpoint. By default, the apiserver does not verify the kubelet's serving certificate, which makes the connection subject to man-in-the-middle attacks, and **unsafe** to run over untrusted and/or public networks.
+These connections terminate at the kubelet's HTTPS endpoint. By default, the apiserver does not verify the kubelet's serving certificate, which makes the connection subject to man-in-the-middle attacks and **unsafe** to run over untrusted and/or public networks.
 
 To verify this connection, use the `--kubelet-certificate-authority` flag to provide the apiserver with a root certificate bundle to use to verify the kubelet's serving certificate.
 
@@ -53,20 +53,20 @@ Finally, [Kubelet authentication and/or authorization](/docs/reference/command-l
 
 ### apiserver to nodes, pods, and services
 
-The connections from the apiserver to a node, pod, or service default to plain HTTP connections and are therefore neither authenticated nor encrypted. They can be run over a secure HTTPS connection by prefixing `https:` to the node, pod, or service name in the API URL, but they will not validate the certificate provided by the HTTPS endpoint nor provide client credentials so while the connection will be encrypted, it will not provide any guarantees of integrity. These connections **are not currently safe** to run over untrusted and/or public networks.
+The connections from the apiserver to a node, pod, or service default to plain HTTP connections and are therefore neither authenticated nor encrypted. They can be run over a secure HTTPS connection by prefixing `https:` to the node, pod, or service name in the API URL, but they will not validate the certificate provided by the HTTPS endpoint nor provide client credentials. So while the connection will be encrypted, it will not provide any guarantees of integrity. These connections **are not currently safe** to run over untrusted or public networks.
 
 ### SSH tunnels
 
 Kubernetes supports SSH tunnels to protect the control plane to nodes communication paths. In this configuration, the apiserver initiates an SSH tunnel to each node in the cluster (connecting to the ssh server listening on port 22) and passes all traffic destined for a kubelet, node, pod, or service through the tunnel.
 This tunnel ensures that the traffic is not exposed outside of the network in which the nodes are running.
 
-SSH tunnels are currently deprecated so you shouldn't opt to use them unless you know what you are doing. The Konnectivity service is a replacement for this communication channel.
+SSH tunnels are currently deprecated, so you shouldn't opt to use them unless you know what you are doing. The Konnectivity service is a replacement for this communication channel.
 
 ### Konnectivity service
 
 {{< feature-state for_k8s_version="v1.18" state="beta" >}}
 
-As a replacement to the SSH tunnels, the Konnectivity service provides TCP level proxy for the control plane to cluster communication. The Konnectivity service consists of two parts: the Konnectivity server and the Konnectivity agents, running in the control plane network and the nodes network respectively. The Konnectivity agents initiate connections to the Konnectivity server and maintain the network connections.
+As a replacement to the SSH tunnels, the Konnectivity service provides TCP level proxy for the control plane to cluster communication. The Konnectivity service consists of two parts: the Konnectivity server in the control plane network and the Konnectivity agents in the nodes network. The Konnectivity agents initiate connections to the Konnectivity server and maintain the network connections.
 After enabling the Konnectivity service, all control plane to nodes traffic goes through these connections.
 
 Follow the [Konnectivity service task](/docs/tasks/extend-kubernetes/setup-konnectivity/) to set up the Konnectivity service in your cluster.

From 38b95756c50a3121deb1c4617dda5f395df3e084 Mon Sep 17 00:00:00 2001
From: Leonardo Murillo <leonardo@murillodigital.com>
Date: Sat, 13 Feb 2021 22:59:11 +0000
Subject: [PATCH 023/788] =?UTF-8?q?Ediciones=20posteriores=20a=20revisi?=
 =?UTF-8?q?=C3=B3n?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../declarative-config.md                     | 48 +++++++++----------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
index 0b2a0987d5..d3002931ab 100644
--- a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -31,7 +31,7 @@ La herramienta `kubectl` soporta tres modos distintos para la administración de
 * Configuración de objetos declarativa
 
 Acceda [Kubernetes Object Management](/docs/concepts/overview/working-with-objects/object-management/)
-para una discusión de las ventajas y desventajas de cada distinto modo de administración.
+para una discusión de las ventajas y desventajas de cada modo distinto de administración.
 
 ## Visión general
 
@@ -39,8 +39,8 @@ La configuración de objetos declarativa requiere una comprensión firme de la
 definición y configuración de objetos de Kubernetes. Lea y complete los siguientes
 documentos si aún no lo ha hecho:
 
-* [Managing Kubernetes Objects Using Imperative Commands](/docs/tasks/manage-kubernetes-objects/imperative-command/)
-* [Imperative Management of Kubernetes Objects Using Configuration Files](/docs/tasks/manage-kubernetes-objects/imperative-config/)
+* [Administració n de Objetos de Kubernetes usando comandos imperativos](/docs/tasks/manage-kubernetes-objects/imperative-command/)
+* [Administración imperativa de los Objetos de Kubernetes usando ficheros de Configuración](/docs/tasks/manage-kubernetes-objects/imperative-config/)
 
 {{< comment >}}
 TODO(lmurillo): Update the links above to the spanish versions of these documents once the
@@ -50,13 +50,13 @@ localizations become available
 A continuación la definición de términos usados en este documento:
 
 - *fichero de configuración de objeto / fichero de configuración*: Un fichero en el
-  que se define la configuración de un objeto de Kubernetes. Este tema demuestra como
+  que se define la configuración de un objeto de Kubernetes. Este tema muestra como
   utilizar ficheros de configuración con `kubectl apply`. Los ficheros de configuración
-  usualmente se almacenan en un sistema de control de versiones, como Git.
+  por lo general se almacenan en un sistema de control de versiones, como Git.
 - *configuración activa de objeto / configuración activa*: Los valores de configuración
-  activos de un objeto, según estan siendo observados por el Cluster. Esta configuración
+  activos de un objeto, según estén siendo observados por el Clúster. Esta configuración
   se almacena en el sistema de almacenamiento de Kubernetes, usualmente etcd.
-- *escritor de configuración declarativo /  escritor declarativo*: Una persona o
+- *escritor de configuración declarativo / escritor declarativo*: Una persona o
   componente de software que actualiza a un objeto activo. Los escritores activos a
   los que se refiere este tema aplican cambios a los ficheros de configuración de objetos
   y ejecutan `kubectl apply` para aplicarlos.
@@ -72,7 +72,7 @@ kubectl apply -f <directorio>/
 ```
 
 Esto definirá la anotación `kubectl.kubernetes.io/last-applied-configuration: '{...}'`
-en cada objeto. Esta anotación contiene  el contenido del fichero de configuración
+en cada objeto. Esta anotación contiene el contenido del fichero de configuración
 utilizado para la creación del objeto.
 
 {{< note >}}
@@ -95,7 +95,7 @@ que debe estar habilitado en el `kube-apiserver`.
 
 Dado que `diff` ejecuta una solicitud de `apply` en el servidor en modo de simulacro (dry-run),
 requiere obtener permisos de `PATCH`, `CREATE`, y `UPDATE`.
-Vea [Dry-Run Authorization](/docs/reference/using-api/api-concepts#dry-run-authorization)
+Vea [Autorización Dry-Run](/docs/reference/using-api/api-concepts#dry-run-authorization)
 para más detalles.
 
 {{< /note >}}
@@ -250,7 +250,7 @@ Despliegue la configuración activa usando `kubectl get`:
 kubectl get deployment nginx-deployment -o yaml
 ```
 
-La salida le demuestra que el campo `replicas` ha sido definido en 2, y que la
+La salida le muestra que el campo `replicas` ha sido definido en 2, y que la
 anotación `last-applied-configuration` no contiene el campo `replicas`:
 
 ```yaml
@@ -360,10 +360,10 @@ spec:
 ```
 
 {{< warning >}}
-Combinar `kubectl apply`  con los comandos de configuración imperativa de objetos 
-`create` y `replace` no es soportado. Esto debido a que `create`
+No es soportado combinar `kubectl apply` con los comandos de configuración imperativa de objetos 
+`create` y `replace`. Esto se debe a que `create`
 y `replace` no retienen la anotación `kubectl.kubernetes.io/last-applied-configuration`
-que `kubectl apply` utiliza para computar los cambios por realizar.
+que `kubectl apply` utiliza para calcular los cambios por realizar.
 {{< /warning >}}
 
 ## Como eliminar objetos
@@ -382,11 +382,11 @@ kubectl delete -f <fichero>
 
 ### Manera alternativa: `kubectl apply -f <directorio/> --prune -l etiqueta=deseada`
 
-Únicamente utilice esta opción si está seguro de saber lo que está haciendo..
+Únicamente utilice esta opción si está seguro de saber lo que está haciendo.
 
 {{< warning >}}
-`kubectl apply --prune` se encuenta aún en alpha, y cambios incompatibles con versiones previas
-podrían ser introducidos en futuros lanzamientos.
+`kubectl apply --prune` se encuentra aún en alpha, y cambios incompatibles con versiones previas
+podrían ser introducidos en lanzamientos futuros.
 {{< /warning >}}
 
 {{< warning >}}
@@ -394,10 +394,10 @@ Sea cuidadoso o cuidadosa al usar este comando, para evitar eliminar objetos
 no intencionalmente.
 {{< /warning >}}
 
-Como una alternativa a `kubectl delete`, usted puede usar `kubectl apply`para identificar objetos por ser
+Como una alternativa a `kubectl delete`, puede usar `kubectl apply`para identificar objetos por ser
 eliminados, luego de que sus archivos de configuración han sido eliminados del directorio. El commando `apply` con `--prune`
-consulta al servidor de API por todos los objetos que coincidan con un grupo de etiquetas, e intenta parear
-la configuración retornada para los objetos activos contra los objetos según sus ficheros de configuración.
+consulta a la API del servidor por todos los objetos que coincidan con un grupo de etiquetas, e intenta relacionar
+la configuración obtenida de los objetos activos contra los objetos según sus ficheros de configuración.
 Si un objeto coincide con la consulta, y no tiene un fichero de configuración en el directorio, pero si
 tiene una anotación `last-applied-configuration`, entonces será eliminado.
 
@@ -794,7 +794,7 @@ spec:
           protocol: TCP # valor por defecto definido por apiserver
         resources: {} # valor por defecto definido por apiserver
         terminationMessagePath: /dev/termination-log # valor por defecto definido por apiserver
-      dnsPolicy: ClusterFirst # valor por defecto definido por apiserver
+      dnsPolicy: ClústerFirst # valor por defecto definido por apiserver
       restartPolicy: Always # valor por defecto definido por apiserver
       securityContext: {} # valor por defecto definido por apiserver
       terminationGracePeriodSeconds: 30 # valor por defecto definido por apiserver
@@ -1009,9 +1009,9 @@ template:
 ## {{% heading "whatsnext" %}}
 
 
-* [Managing Kubernetes Objects Using Imperative Commands](/docs/tasks/manage-kubernetes-objects/imperative-command/)
-* [Imperative Management of Kubernetes Objects Using Configuration Files](/docs/tasks/manage-kubernetes-objects/imperative-config/)
-* [Kubectl Command Reference](/docs/reference/generated/kubectl/kubectl-commands/)
-* [Kubernetes API Reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
+* [Administración de Objetos de Kubernetes usando comandos imperativos](/docs/tasks/manage-kubernetes-objects/imperative-command/)
+* [Administración imperativa de los Objetos de Kubernetes usando archivos de configuración](/docs/tasks/manage-kubernetes-objects/imperative-config/)
+* [Referencia del comando Kubectl](/docs/reference/generated/kubectl/kubectl-commands/)
+* [Referencia de la API de Kubernetes](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 
 

From b4cb812a1d216d5a0b8fe189879cd91a329cad8c Mon Sep 17 00:00:00 2001
From: Suhel Khan <ksuhelk@gmail.com>
Date: Mon, 15 Feb 2021 11:14:18 +0530
Subject: [PATCH 024/788] Update horizontal-pod-autoscale.md

With `v2beta2` controller can take replication decision on memory and custom metric utilisation as well.
---
 .../en/docs/tasks/run-application/horizontal-pod-autoscale.md | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
index 763d9ab996..ed99e9bd96 100644
--- a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
+++ b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
@@ -23,9 +23,7 @@ Pod Autoscaling does not apply to objects that can't be scaled, for example, Dae
 
 The Horizontal Pod Autoscaler is implemented as a Kubernetes API resource and a controller.
 The resource determines the behavior of the controller.
-The controller periodically adjusts the number of replicas in a replication controller or deployment
-to match the observed average CPU utilization to the target specified by user.
-
+The controller periodically adjusts the number of replicas in a replication controller or deployment to match the observed metrics such as average CPU utilisation, average memory utilisation or any other custom metric to the target specified by the user.
 
 
 

From c8d58f3d52f09b67d6e291619b4764d250ce975b Mon Sep 17 00:00:00 2001
From: AliRezaTaleghani <shayne.alone@gmail.com>
Date: Tue, 16 Feb 2021 19:48:47 +0100
Subject: [PATCH 025/788] Update cheatsheet.md

adding a custom output to format output by listing Images per Pod in table.
---
 content/en/docs/reference/kubectl/cheatsheet.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md
index 79ca330bd5..4d969fd7dc 100644
--- a/content/en/docs/reference/kubectl/cheatsheet.md
+++ b/content/en/docs/reference/kubectl/cheatsheet.md
@@ -374,6 +374,8 @@ Examples using `-o=custom-columns`:
 ```bash
 # All images running in a cluster
 kubectl get pods -A -o=custom-columns='DATA:spec.containers[*].image'
+# All images running in namespace: default, grouped by Pod
+kubectl get pods --namespace default --output=custom-columns="NAME:.metadata.name,IMAGE:.spec.containers[*].image"
 
  # All images excluding "k8s.gcr.io/coredns:1.6.2"
 kubectl get pods -A -o=custom-columns='DATA:spec.containers[?(@.image!="k8s.gcr.io/coredns:1.6.2")].image'

From c3245e47d7dce41c481f29db126c36aa2e264eb7 Mon Sep 17 00:00:00 2001
From: AliRezaTaleghani <shayne.alone@gmail.com>
Date: Tue, 16 Feb 2021 19:56:24 +0100
Subject: [PATCH 026/788] Update cheatsheet.md

adding blank space between examples
---
 content/en/docs/reference/kubectl/cheatsheet.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md
index 4d969fd7dc..22be0b48ed 100644
--- a/content/en/docs/reference/kubectl/cheatsheet.md
+++ b/content/en/docs/reference/kubectl/cheatsheet.md
@@ -374,6 +374,7 @@ Examples using `-o=custom-columns`:
 ```bash
 # All images running in a cluster
 kubectl get pods -A -o=custom-columns='DATA:spec.containers[*].image'
+
 # All images running in namespace: default, grouped by Pod
 kubectl get pods --namespace default --output=custom-columns="NAME:.metadata.name,IMAGE:.spec.containers[*].image"
 

From 21100c15ee9d493c5fd01d509a1eb9c9546ec2fc Mon Sep 17 00:00:00 2001
From: AliRezaTaleghani <shayne.alone@gmail.com>
Date: Tue, 16 Feb 2021 20:01:07 +0100
Subject: [PATCH 027/788] Update cheatsheet.md

activate CLA
---
 content/en/docs/reference/kubectl/cheatsheet.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md
index 22be0b48ed..1df2567eb9 100644
--- a/content/en/docs/reference/kubectl/cheatsheet.md
+++ b/content/en/docs/reference/kubectl/cheatsheet.md
@@ -375,7 +375,7 @@ Examples using `-o=custom-columns`:
 # All images running in a cluster
 kubectl get pods -A -o=custom-columns='DATA:spec.containers[*].image'
 
-# All images running in namespace: default, grouped by Pod
+# All images running in default namespace, grouped by Pod
 kubectl get pods --namespace default --output=custom-columns="NAME:.metadata.name,IMAGE:.spec.containers[*].image"
 
  # All images excluding "k8s.gcr.io/coredns:1.6.2"

From 5316aaf207c1a73e34e95741905b50a596705232 Mon Sep 17 00:00:00 2001
From: AliRezaTaleghani <shayne.alone@gmail.com>
Date: Tue, 16 Feb 2021 20:09:06 +0100
Subject: [PATCH 028/788] Update cheatsheet.md

fix CLA sign
---
 content/en/docs/reference/kubectl/cheatsheet.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md
index 1df2567eb9..22be0b48ed 100644
--- a/content/en/docs/reference/kubectl/cheatsheet.md
+++ b/content/en/docs/reference/kubectl/cheatsheet.md
@@ -375,7 +375,7 @@ Examples using `-o=custom-columns`:
 # All images running in a cluster
 kubectl get pods -A -o=custom-columns='DATA:spec.containers[*].image'
 
-# All images running in default namespace, grouped by Pod
+# All images running in namespace: default, grouped by Pod
 kubectl get pods --namespace default --output=custom-columns="NAME:.metadata.name,IMAGE:.spec.containers[*].image"
 
  # All images excluding "k8s.gcr.io/coredns:1.6.2"

From f65f808fb2a455af9244ecce9853b091c740202f Mon Sep 17 00:00:00 2001
From: Tim Allclair <timallclair@gmail.com>
Date: Tue, 16 Feb 2021 11:25:43 -0800
Subject: [PATCH 029/788] Mark PSP deprecated in the docs

---
 content/en/docs/concepts/policy/pod-security-policy.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/policy/pod-security-policy.md b/content/en/docs/concepts/policy/pod-security-policy.md
index f355a8f539..f0884c3dea 100644
--- a/content/en/docs/concepts/policy/pod-security-policy.md
+++ b/content/en/docs/concepts/policy/pod-security-policy.md
@@ -9,7 +9,9 @@ weight: 30
 
 <!-- overview -->
 
-{{< feature-state state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
+
+PodSecurityPolicy is deprecated as of Kubernetes v1.21, and will be removed in v1.25.
 
 Pod Security Policies enable fine-grained authorization of pod creation and
 updates.

From 5b127f07612d45ba0a142370e4e58f9e859c3830 Mon Sep 17 00:00:00 2001
From: flo-oss <florianberck@gmail.com>
Date: Tue, 16 Feb 2021 21:07:07 -0800
Subject: [PATCH 030/788] changes suggested by code reviewer (sie -> du, Pod
 Vorlage, ....)

---
 .../de/docs/concepts/workloads/pods/_index.md | 97 +++++++++----------
 1 file changed, 48 insertions(+), 49 deletions(-)

diff --git a/content/de/docs/concepts/workloads/pods/_index.md b/content/de/docs/concepts/workloads/pods/_index.md
index 837a1f1571..e6adce49a6 100644
--- a/content/de/docs/concepts/workloads/pods/_index.md
+++ b/content/de/docs/concepts/workloads/pods/_index.md
@@ -57,15 +57,15 @@ die gemeinsame Namespaces und Dateisystem-Volumes nutzen.
 Normalerweise müssen keine Pods erzeugt werden, auch keine Singleton-Pods. 
 Stattdessen werden sie mit Workload-Ressourcen wie {{<glossary_tooltip 
 text="Deployment" term_id="deployment">}} oder {{<glossary_tooltip 
-text="Job" term_id="job">}} erzeugt. Für Pods, die von einem Systemzustand 
-abhängen, erwägen Sie die Nutzung von {{<glossary_tooltip 
-text="StatefulSet" term_id="statefulset">}}-Ressourcen.
+text="Job" term_id="job">}} erzeugt. Für Pods, die von einem Systemzustand
+abhängen, ist die Nutzung von {{<glossary_tooltip text="StatefulSet" 
+term_id="statefulset">}}-Ressourcen zu erwägen.
 
 Pods in einem Kubernetes-Cluster werden hauptsächlich auf zwei Arten verwendet:
 
 * **Pods, die einen einzelnen Container ausführen**. Das 
 "Ein-Container-per-Pod"-Modell ist der häufigste Kubernetes-Anwendungsfall. In 
-diesem Fall können Sie sich einen Pod als einen Behälter vorstellen, der  einen 
+diesem Fall kannst du dir einen einen Pod als einen Behälter vorstellen, der einen 
 einzelnen Container enthält; Kubernetes verwaltet die Pods anstatt die 
 Container direkt zu verwalten.
 * **Pods, in denen mehrere Container ausgeführt werden, die zusammenarbeiten
@@ -81,16 +81,15 @@ und eine kurzlebiges Netzwerk-Identität als eine Einheit zusammen.
 {{< note >}}
 Das Gruppieren mehrerer gemeinsam lokalisierter und gemeinsam verwalteter
 Container in einem einzigen Pod ist ein relativ fortgeschrittener 
-Anwendungsfall. Sie sollten diese Architektur nur in bestimmten  Fällen 
-verwenden, wenn Ihre Container stark voneinander abhängen.
+Anwendungsfall. Du solltest diese Architektur nur in bestimmten  Fällen 
+verwenden, wenn deine Container stark voneinander abhängen.
 {{< /note >}}
 
 Jeder Pod sollte eine einzelne Instanz einer gegebenen Anwendung ausführen. Wenn 
-Sie Ihre Anwendung horizontal skalieren wollen (um mehr Instanzen auszuführen
-und  dadurch mehr Gesamtressourcen bereitstellen), sollten Sie mehrere Pods 
-verwenden, 
-einen für jede Instanz. In Kubernetes wird dies typischerweise als Replikation
-bezeichnet.
+du deine Anwendung horizontal skalieren willst (um mehr Instanzen auszuführen
+und  dadurch mehr Gesamtressourcen bereitstellen), solltest du mehrere Pods 
+verwenden, einen für jede Instanz. 
+In Kubernetes wird dies typischerweise als Replikation bezeichnet.
 Replizierte Pods werden normalerweise als eine Gruppe durch eine 
 Workload-Ressource und deren 
 {{<glossary_tooltip text="Controller" term_id="controller">}} erstellt 
@@ -109,7 +108,7 @@ virtuellen Server im Cluster befinden. Die Container können Ressourcen und
 Abhängigkeiten gemeinsam nutzen, miteinander kommunizieren und
 ferner koordinieren wann und wie sie beendet werden.
 
-Zum Beispiel könnten Sie einen Container haben, der als Webserver für Dateien in
+Zum Beispiel könntest du einen Container haben, der als Webserver für Dateien in
 einem gemeinsamen Volume arbeitet. Und ein separater "Sidecar" -Container 
 aktualisiert die Daten von einer externen Datenquelle, siehe folgenden 
 Abbildung:
@@ -129,7 +128,7 @@ enthaltenen Container bereit:
 
 ## Mit Pods arbeiten
 
-Sie werden selten einzelne Pods direkt in Kubernetes erstellen, selbst 
+Du wirst selten einzelne Pods direkt in Kubernetes erstellen, selbst 
 Singleton-Pods. Das liegt daran, dass Pods als relativ kurzlebige 
 Einweg-Einheiten konzipiert sind. Wann Ein Pod erstellt wird (entweder direkt 
 von Ihnen oder indirekt von einem
@@ -145,16 +144,16 @@ eines Pods verwechselt werden. Ein Pod ist kein Prozess, sondern eine Umgebung
 zur Ausführung von Containern. Ein Pod bleibt bestehen bis er gelöscht wird.
 {{< /note >}}
 
-Stellen Sie beim Erstellen des Manifests für ein Pod-Objekt sicher, dass der 
+Stelle beim Erstellen des Manifests für ein Pod-Objekt sicher, dass der 
 angegebene Name ein gültiger
 [DNS-Subdomain-Name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)
 ist.
 
 ### Pods und Controller
 
-Mit Workload-Ressourcen können Sie mehrere Pods erstellen und verwalten. Ein 
+Mit Workload-Ressourcen kannst du mehrere Pods erstellen und verwalten. Ein 
 Controller für die Ressource kümmert sich um Replikation, Roll-Out sowie 
-automatische Heilung im Fall von Podfehlern. Wenn beispielsweise ein Node 
+automatische Wiederherstellung im Fall von versagenden Pods. Wenn beispielsweise ein Node 
 ausfällt, bemerkt ein Controller, dass die Pods auf dem Node nicht mehr laufen 
 und plant die Ausführung eines Ersatzpods auf einem funktionierenden Node.
 Hier sind einige Beispiele für Workload-Ressourcen, die einen oder mehrere Pods 
@@ -164,22 +163,22 @@ verwalten:
 * {{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}
 * {{< glossary_tooltip text="DaemonSet" term_id="daemonset" >}}
 
-### Podvorlagen
+### Pod Vorlagen
 
 Controller für 
 {{<glossary_tooltip text="Workload" term_id="workload">}}-Ressourcen 
-erstellen Pods von einer _Podvorlage_ und verwalten diese Pods für sie.
+erstellen Pods von einer _Pod Vorlage_ und verwalten diese Pods für dich.
 
-Podvorlagen sind Spezifikationen zum Erstellen von Pods und sind in 
+Pod Vorlagen sind Spezifikationen zum Erstellen von Pods und sind in 
 Workload-Ressourcen enthalten wie z. B.
 [Deployments](/docs/concepts/workloads/controllers/deployment/),
 [Jobs](/docs/concepts/workloads/controllers/job/), and
 [DaemonSets](/docs/concepts/workloads/controllers/daemonset/).
 
-Jeder Controller für eine Workload-Ressource verwendet die Podvorlage innerhalb 
-des Workload-Objektes, um Pods zu erzeugen. Die Podvorlage ist Teil des 
-gewünschten Zustands der Workload-Ressource, mit der Sie Ihre Anwendung 
-ausgeführt haben.
+Jeder Controller für eine Workload-Ressource verwendet die Pod Vorlage innerhalb 
+des Workload-Objektes, um Pods zu erzeugen. Die Pod Vorlage ist Teil des 
+gewünschten Zustands der Workload-Ressource, mit der du deine Anwendung 
+ausgeführt hast.
 
 Das folgende Beispiel ist ein Manifest für einen einfachen Job mit einer 
 `Vorlage`, die einen Container startet. Der Container in diesem Pod druckt 
@@ -192,37 +191,37 @@ metadata:
  name: hello
 spec:
  template:
- # Dies is the Podvorlage
+ # Dies is the Pod Vorlage
  spec:
  containers:
  - name: hello
  image: busybox
  command: ['sh', '-c', 'echo "Hello, Kubernetes!" && sleep 3600']
  restartPolicy: OnFailure
- # Die Podvorlage endet hier
+ # Die Pod Vorlage endet hier
 ```
-Das Ändern der Podvorlage oder der Wechsel zu einer neuen Podvorlage hat keine 
-direkten Auswirkungen auf bereits existierende Pods. Wenn Sie die Podvorlage für
-eine Workload-Ressource ändern, dann muss diese Ressource die Ersatz-Pods
+Das Ändern der Pod Vorlage oder der Wechsel zu einer neuen Pod Vorlage hat keine 
+direkten Auswirkungen auf bereits existierende Pods. Wenn du die Pod Vorlage für
+eine Workload-Ressource änderst, dann muss diese Ressource die Ersatz-Pods
 erstellen, welche die aktualisierte Vorlage verwenden. 
 
 Beispielsweise stellt der StatefulSet-Controller sicher, dass für jedes
-StatefulSet-Objekt die ausgeführten Pods mit der aktueller Podvorlage 
-übereinstimmen. Wenn Sie das StatefulSet bearbeiten und die Vorlage ändern, 
+StatefulSet-Objekt die ausgeführten Pods mit der aktueller Pod Vorlage 
+übereinstimmen. Wenn du das StatefulSet bearbeitest und die Vorlage änderst, 
 beginnt das StatefulSet mit der Erstellung neuer Pods basierend auf der 
 aktualisierten Vorlage. Schließlich werden alle alten Pods durch neue Pods 
 ersetzt, und das Update ist abgeschlossen.
 
 Jede Workload-Ressource implementiert eigenen Regeln für die Umsetzung von 
-Änderungen der Podvorlage. Wenn Sie mehr über StatefulSet erfahren möchten, 
-lesen Sie die Seite
+Änderungen der Pod Vorlage. Wenn du mehr über StatefulSet erfahren möchtest, 
+dann lese die Seite
 [Update-Strategien](/docs/tutorials/stateful-application/basic-stateful-set/#updating-statefulsets) 
 im Tutorial StatefulSet Basics.
 
 
 Auf Nodes beobachtet oder verwaltet das 
 {{< glossary_tooltip term_id="kubelet" text="Kubelet" >}}
-nicht direkt die Details zu Podvorlagen und Updates. Diese Details sind 
+nicht direkt die Details zu Pod Vorlagen und Updates. Diese Details sind 
 abstrahiert. Die Abstraktion und Trennung von Aufgaben vereinfacht die 
 Systemsemantik und ermöglicht so das Verhalten des Clusters zu ändern ohne 
 vorhandenen Code zu ändern.
@@ -230,10 +229,10 @@ vorhandenen Code zu ändern.
 ## Pod Update und Austausch
 
 Wie im vorherigen Abschnitt erwähnt, erstellt der Controller neue Pods basierend
-auf der aktualisierten Vorlage, wenn die Podvorlage für eine Workload-Ressource
+auf der aktualisierten Vorlage, wenn die Pod Vorlage für eine Workload-Ressource
 geändert wird anstatt die vorhandenen Pods zu aktualisieren oder zu patchen.
 
-Kubernetes hindert Sie nicht daran, Pods direkt zu verwalten. Es ist möglich, 
+Kubernetes hindert dich nicht daran, Pods direkt zu verwalten. Es ist möglich, 
 einige Felder eines laufenden Pods zu aktualisieren. Allerdings haben 
 Pod-Aktualisierungsvorgänge wie zum Beispiel
 [`patch`](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#patch-pod-v1-core), 
@@ -241,8 +240,8 @@ und
 [`replace`](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#replace-pod-v1-core)
 einige Einschränkungen:
 
-- Die meisten Metadaten zu einem Pod können nicht verändert werden. Zum Beispiel können 
-  Sie nicht die Felder `namespace`, `name`, `uid`, oder `creationTimestamp` 
+- Die meisten Metadaten zu einem Pod können nicht verändert werden. Zum Beispiel kannst
+  du nicht die Felder `namespace`, `name`, `uid`, oder `creationTimestamp` 
   ändern. Das `generation`-Feld muss eindeutig sein. Es werden nur Aktualisierungen 
   akzeptiert, die den Wert des Feldes inkrementieren.
 - Wenn das Feld `metadata.deletionTimestamp` gesetzt ist, kann kein neuer 
@@ -250,7 +249,7 @@ einige Einschränkungen:
 - Pod-Updates dürfen keine Felder ändern, die Ausnahmen sind 
   `spec.containers[*].image`,
  `spec.initContainers[*].image`,` spec.activeDeadlineSeconds` oder
- `spec.tolerations`. Für `spec.tolerations` können Sie nur neue Einträge 
+ `spec.tolerations`. Für `spec.tolerations` kannnst du nur neue Einträge 
   hinzufügen.
 - Für `spec.activeDeadlineSeconds` sind nur zwei Änderungen erlaubt:
 
@@ -269,7 +268,7 @@ Ein Pod kann eine Reihe von gemeinsam genutzten Speicher-
 Container im Pod können auf die gemeinsamen Volumes zugreifen und dadurch Daten 
 austauschen. Volumes ermöglichen auch, dass Daten ohne Verlust gespeichert 
 werden, falls einer der Container neu gestartet werden muss. 
-Im Kapitel [Datenspeicherung](/docs/concepts/storage/) finden Sie weitere 
+Im Kapitel [Datenspeicherung](/docs/concepts/storage/) findest du weitere 
 Informationen, wie Kubernetes gemeinsam genutzten Speicher implementiert und 
 Pods zur Verfügung stellt.
 
@@ -321,7 +320,7 @@ _Statische Pods_ werden direkt vom Kubelet-Daemon auf einem bestimmten Node
 verwaltet ohne dass sie vom 
 {{<glossary_tooltip text="API Server" term_id="kube-apiserver">}} überwacht 
 werden.
-.
+
 Die meisten Pods werden von der Kontrollebene verwaltet (z. B.
 {{< glossary_tooltip text="Deployment" term_id="deployment" >}}). Aber für 
 statische Pods überwacht das Kubelet jeden statischen Pod direkt (und startet 
@@ -342,16 +341,16 @@ sichtbar sind jedoch von dort nicht gesteuert werden können.
 
 ## {{% heading "whatsnext" %}}
 
-* Erfahren Sie mehr über den 
+* Lerne den 
   [Lebenszyklus eines Pods](/docs/concepts/workloads/pods/pod-lifecycle/).
-* Erfahren Sie mehr über [RuntimeClass](/docs/concepts/containers/runtime-class/) 
-  und wie Sie damit verschiedene Pods mit unterschiedlichen 
-  Container-Laufzeitumgebungen konfigurieren können.
-* Lesen sie mehr über 
+* Lerne die [RuntimeClass](/docs/concepts/containers/runtime-class/) 
+  und wie du damit verschiedene Pods mit unterschiedlichen 
+  Container-Laufzeitumgebungen konfigurieren kannst.
+* Lese 
   [Restriktionen für die Verteilung von Pods](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
-* Lesen sie mehr über sogenannte 
-  [Pod-Disruption-Budgets](/docs/concepts/workloads/pods/disruptions/) 
-  und wie Sie diese verwenden können, um die Verfügbarkeit von Anwendungen bei 
+* Lese
+  [Pod-Disruption-Budget](/docs/concepts/workloads/pods/disruptions/) 
+  und wie du es verwenden kannst, um die Verfügbarkeit von Anwendungen bei 
   Störungen zu verwalten. Die 
   [Pod](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core)
   -Objektdefinition beschreibt das Objekt im Detail.
@@ -362,7 +361,7 @@ Um den Hintergrund zu verstehen, warum Kubernetes eine gemeinsame Pod-API in
 andere Ressourcen, wie z. B. 
 {{< glossary_tooltip text="StatefulSets" term_id="statefulset" >}} 
 oder {{< glossary_tooltip text="Deployments" term_id="deployment" >}} einbindet, 
-können sie Artikel zu früheren Technologien lesen, unter anderem: 
+kannst du Artikel zu früheren Technologien lesen, unter anderem: 
  * [Aurora](https://aurora.apache.org/documentation/latest/reference/configuration/#job-schema)
  * [Borg](https://research.google.com/pubs/pub43438.html)
  * [Marathon](https://mesosphere.github.io/marathon/docs/rest-api.html)

From 29520dbf08d7171bef0d38fee19b6300176a55f2 Mon Sep 17 00:00:00 2001
From: Kobayashi <kobayashi.da-06@fujitsu.com>
Date: Wed, 17 Feb 2021 17:34:57 +0900
Subject: [PATCH 031/788] Copy file "docs/contribute/perticipate/_index.md" to
 translate

---
 .../ja/docs/contribute/perticipate/_index.md  | 120 ++++++++++++++++++
 1 file changed, 120 insertions(+)
 create mode 100644 content/ja/docs/contribute/perticipate/_index.md

diff --git a/content/ja/docs/contribute/perticipate/_index.md b/content/ja/docs/contribute/perticipate/_index.md
new file mode 100644
index 0000000000..6a86326945
--- /dev/null
+++ b/content/ja/docs/contribute/perticipate/_index.md
@@ -0,0 +1,120 @@
+---
+title: Participating in SIG Docs
+content_type: concept
+weight: 60
+card:
+  name: contribute
+  weight: 60
+---
+
+<!-- overview -->
+
+SIG Docs is one of the
+[special interest groups](https://github.com/kubernetes/community/blob/master/sig-list.md)
+within the Kubernetes project, focused on writing, updating, and maintaining
+the documentation for Kubernetes as a whole. See
+[SIG Docs from the community github repo](https://github.com/kubernetes/community/tree/master/sig-docs)
+for more information about the SIG.
+
+SIG Docs welcomes content and reviews from all contributors. Anyone can open a
+pull request (PR), and anyone is welcome to file issues about content or comment
+on pull requests in progress.
+
+You can also become a [member](/docs/contribute/participate/roles-and-responsibilities/#members),
+[reviewer](/docs/contribute/participate/roles-and-responsibilities/#reviewers), or
+[approver](/docs/contribute/participate/roles-and-responsibilities/#approvers).
+These roles require greater access and entail certain responsibilities for
+approving and committing changes.  See
+[community-membership](https://github.com/kubernetes/community/blob/master/community-membership.md)
+for more information on how membership works within the Kubernetes community.
+
+The rest of this document outlines some unique ways these roles function within
+SIG Docs, which is responsible for maintaining one of the most public-facing
+aspects of Kubernetes -- the Kubernetes website and documentation.
+
+<!-- body -->
+
+## SIG Docs chairperson
+
+Each SIG, including SIG Docs, selects one or more SIG members to act as
+chairpersons. These are points of contact between SIG Docs and other parts of
+the Kubernetes organization. They require extensive knowledge of the structure
+of the Kubernetes project as a whole and how SIG Docs works within it. See
+[Leadership](https://github.com/kubernetes/community/tree/master/sig-docs#leadership)
+for the current list of chairpersons.
+
+## SIG Docs teams and automation
+
+Automation in SIG Docs relies on two different mechanisms:
+GitHub teams and OWNERS files.
+
+### GitHub teams
+
+There are two categories of SIG Docs [teams](https://github.com/orgs/kubernetes/teams?query=sig-docs) on GitHub:
+
+- `@sig-docs-{language}-owners` are approvers and leads
+- `@sig-docs-{language}-reviewers` are reviewers
+
+Each can be referenced with their `@name` in GitHub comments to communicate with
+everyone in that group.
+
+Sometimes Prow and GitHub teams overlap without matching exactly. For
+assignment of issues, pull requests, and to support PR approvals, the
+automation uses information from `OWNERS` files.
+
+### OWNERS files and front-matter
+
+The Kubernetes project uses an automation tool called prow for automation
+related to GitHub issues and pull requests. The
+[Kubernetes website repository](https://github.com/kubernetes/website) uses
+two [prow plugins](https://github.com/kubernetes/test-infra/tree/master/prow/plugins):
+
+- blunderbuss
+- approve
+
+These two plugins use the
+[OWNERS](https://github.com/kubernetes/website/blob/master/OWNERS) and
+[OWNERS_ALIASES](https://github.com/kubernetes/website/blob/master/OWNERS_ALIASES)
+files in the top level of the `kubernetes/website` GitHub repository to control
+how prow works within the repository.
+
+An OWNERS file contains a list of people who are SIG Docs reviewers and
+approvers. OWNERS files can also exist in subdirectories, and can override who
+can act as a reviewer or approver of files in that subdirectory and its
+descendants. For more information about OWNERS files in general, see
+[OWNERS](https://github.com/kubernetes/community/blob/master/contributors/guide/owners.md).
+
+In addition, an individual Markdown file can list reviewers and approvers in its
+front-matter, either by listing individual GitHub usernames or GitHub groups.
+
+The combination of OWNERS files and front-matter in Markdown files determines
+the advice PR owners get from automated systems about who to ask for technical
+and editorial review of their PR.
+
+## How merging works
+
+When a pull request is merged to the branch used to publish content, that content is published to http://kubernetes.io. To ensure that
+the quality of our published content is high, we limit merging pull requests to
+SIG Docs approvers. Here's how it works.
+
+- When a pull request has both the `lgtm` and `approve` labels, has no `hold`
+  labels, and all tests are passing, the pull request merges automatically.
+- Kubernetes organization members and SIG Docs approvers can add comments to
+  prevent automatic merging of a given pull request (by adding a `/hold` comment
+  or withholding a `/lgtm` comment).
+- Any Kubernetes member can add the `lgtm` label by adding a `/lgtm` comment.
+- Only SIG Docs approvers can merge a pull request
+  by adding an `/approve` comment. Some approvers also perform additional
+  specific roles, such as [PR Wrangler](/docs/contribute/participate/pr-wranglers/) or
+  [SIG Docs chairperson](#sig-docs-chairperson).
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+For more information about contributing to the Kubernetes documentation, see:
+
+- [Contributing new content](/docs/contribute/new-content/overview/)
+- [Reviewing content](/docs/contribute/review/reviewing-prs)
+- [Documentation style guide](/docs/contribute/style/)

From 6a166cf5112b1b492ef7de6473a8440a1faf943b Mon Sep 17 00:00:00 2001
From: Mike Patterson <mpatters72@users.noreply.github.com>
Date: Wed, 17 Feb 2021 17:34:31 -0800
Subject: [PATCH 032/788] Update
 content/en/docs/reference/access-authn-authz/certificate-signing-requests.md

Co-authored-by: Irvi Aini <7439590+irvifa@users.noreply.github.com>
---
 .../access-authn-authz/certificate-signing-requests.md         | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index 045b1661aa..cee4342ddf 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -255,7 +255,7 @@ The certificate value is in Base64-encoded format under `status.certificate`.
 Export the issued certificate from the CertificateSigningRequest.
 
 ```
-kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > /home/vagrant/work/john.crt
+kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > certificate.crt
 ```
 
 ### Create Role and RoleBinding
@@ -444,4 +444,3 @@ status:
 * View the source code for the kube-controller-manager built in [approver](https://github.com/kubernetes/kubernetes/blob/32ec6c212ec9415f604ffc1f4c1f29b782968ff1/pkg/controller/certificates/approver/sarapprove.go)
 * For details of X.509 itself, refer to [RFC 5280](https://tools.ietf.org/html/rfc5280#section-3.1) section 3.1
 * For information on the syntax of PKCS#10 certificate signing requests, refer to [RFC 2986](https://tools.ietf.org/html/rfc2986)
-

From 99c69c1bcc887bd6774d43ea6638139742f48d9d Mon Sep 17 00:00:00 2001
From: Kobayashi <kobayashi.da-06@fujitsu.com>
Date: Thu, 18 Feb 2021 14:06:13 +0900
Subject: [PATCH 033/788] Translate docs/contribute/participate/ into Japanese.

---
 .../ja/docs/contribute/participate/_index.md  | 102 +++++++++++++++
 .../ja/docs/contribute/perticipate/_index.md  | 120 ------------------
 2 files changed, 102 insertions(+), 120 deletions(-)
 create mode 100644 content/ja/docs/contribute/participate/_index.md
 delete mode 100644 content/ja/docs/contribute/perticipate/_index.md

diff --git a/content/ja/docs/contribute/participate/_index.md b/content/ja/docs/contribute/participate/_index.md
new file mode 100644
index 0000000000..d1f39eaffa
--- /dev/null
+++ b/content/ja/docs/contribute/participate/_index.md
@@ -0,0 +1,102 @@
+---
+title: SIG Docsへの参加
+content_type: concept
+weight: 60
+card:
+  name: contribute
+  weight: 60
+---
+
+<!-- overview -->
+
+SIG Docsは、Kubernetesプロジェクト内の 
+[special interest groups](https://github.com/kubernetes/community/blob/master/sig-list.md)の1つであり、
+Kubernetes全体のドキュメントの作成、更新、および保守に重点を置いています。 
+SIGの詳細については、[SIG DocsのGithubリポジトリ](https://github.com/kubernetes/community/blob/master/sig-list.md)を参照してください。
+
+SIG Docsは、すべての寄稿者からのコンテンツとレビューを歓迎します。
+誰でもPull Request（PR）を開くことができ、コンテンツに関するissueを提出したり、進行中のPull Requestにコメントしたりできます。
+
+あなたは、[member](/docs/contribute/participate/roles-and-responsibilities/#members)や、
+[reviewer](/docs/contribute/participate/roles-and-responsibilities/#reviewers)、
+[approver](/docs/contribute/participate/roles-and-responsibilities/#approvers)になることもできます。
+これらの役割にはより多くのアクセスが必要であり、変更を承認およびコミットするための特定の責任が伴います。
+Kubernetesコミュニティ内でメンバーシップがどのように機能するかについての詳細は、
+[community-membership](https://github.com/kubernetes/community/blob/master/community-membership.md)
+をご覧ください。
+
+このドキュメントの残りの部分では、kubernetesの中で最も広く公開されている
+Kubernetesのウェブサイトとドキュメントの管理を担当しているSIG Docsの中で、これらの役割がどのように機能するのかを概説します。
+
+
+<!-- body -->
+
+## SIG Docs chairperson
+
+SIG Docsを含む各SIGは、議長として機能する1人以上のSIGメンバーを選択します。
+これらは、SIGDocsとKubernetes organizationの他の部分との連絡先です。
+それらには、Kubernetesプロジェクト全体の構造と、SIG Docsがその中でどのように機能するかについての広範な知識が必要です。
+現在のchairpersonのリストについては、
+[Leadership](https://github.com/kubernetes/community/tree/master/sig-docs#leadership)
+を参照してください。
+
+## SIG Docs teamsと自動化
+
+SIG Docsの自動化は、GitHub teamsとOWNERSファイルの2つの異なるメカニズムに依存しています。
+
+### GitHub teams
+
+GitHubには、SIG Docs 
+[teams](https://github.com/orgs/kubernetes/teams?query=sig-docs)
+の二つのカテゴリがあります。:
+
+- `@sig-docs-{language}-owners`は承認者かつリードです。
+- `@sig-docs-{language}-reviewers` はレビュアーです。
+
+それぞれをGitHubコメントの`@name`で参照して、そのグループの全員とコミュニケーションできます。
+
+ProwチームとGitHub teamsが完全に一致せずに重複する場合があります。
+問題の割り当て、Pull Request、およびPR承認のサポートのために、自動化ではOWNERSファイルからの情報を使用します。
+
+### OWNERSファイルとfront-matter
+
+Kubernetesプロジェクトは、GitHubのissueとPull Requestに関連する自動化のためにprowと呼ばれる自動化ツールを使用します。 
+[Kubernetes Webサイトリポジトリ](https://github.com/kubernetes/website) 
+は、2つの[prowプラグイン](https://github.com/kubernetes/test-infra/tree/master/prow/plugins)を使用します。：
+
+- blunderbuss
+- approve
+
+これらの2つのプラグインは`kubernetes.website`のGithubリポジトリのトップレベルにある
+[OWNERS](https://github.com/kubernetes/website/blob/master/OWNERS)ファイルと、
+[OWNERS_ALIASES](https://github.com/kubernetes/website/blob/master/OWNERS_ALIASES)ファイルを使用して、
+リポジトリ内でのplowの動作を制御します。
+
+OWNERSファイルには、SIG Docsのレビュー担当者および承認者であるユーザーのリストが含まれています。 
+OWNERSファイルはサブディレクトリに存在することもでき、そのサブディレクトリとその子孫のファイルのレビュー担当者または承認者として機能できるユーザーを上書きできます。
+一般的なOWNERSファイルの詳細については、
+[OWNERS](https://github.com/kubernetes/community/blob/master/contributors/guide/owners.md)を参照してください。
+
+さらに、個々のMarkdownファイルは、個々のGitHubユーザー名またはGitHubグループを一覧表示することにより、そのfront-matterでレビュー担当者と承認者を一覧表示できます。
+
+OWNERSファイルとMarkdownファイルのfront-matterの組み合わせにより、PRの技術的および編集上のレビューを誰に依頼するかについてPRの所有者が自動化システムから得るアドバイスが決まります。
+
+## マージの仕組み
+
+Pull Requestがコンテンツの公開に使用されるブランチにマージされると、そのコンテンツは http://kubernetes.io に公開されます。
+公開されたコンテンツの品質を高くするために、Pull RequestのマージはSIG Docsの承認者に限定しています。仕組みは次のとおりです。
+
+- Pull Requestに`lgtm`ラベルと`approve`ラベルの両方があり、`hold`ラベルがなく、すべてのテストに合格すると、Pull Requestは自動的にマージされます。
+- Kubernetes organizationのメンバーとSIG Docsの承認者はコメントを追加して、特定のPull Requestが自動的にマージされないようにすることができます（`/hold`コメントを追加するか、`/lgtm`コメントを保留します）。
+- Kubernetesメンバーは誰でも、`/lgtm`コメントを追加することで`lgtm`ラベルを追加できます。
+- `/approve`コメントを追加してPull Requestをマージできるのは、SIG Docsの承認者だけです。一部の承認者は、[PR Wrangler](/docs/contribute/participate/pr-wranglers/)や[SIG Docsのchairperson](#sig-docs-chairperson)など、追加の特定の役割も実行します。
+
+
+
+## {{% heading "whatsnext" %}}
+
+Kubernetesドキュメントへの貢献の詳細については、以下を参照してください。：
+
+- [Contributing new content](/docs/contribute/new-content/overview/)
+- [Reviewing content](/docs/contribute/review/reviewing-prs)
+- [ドキュメントスタイルの概要](/ja/docs/contribute/style/)
diff --git a/content/ja/docs/contribute/perticipate/_index.md b/content/ja/docs/contribute/perticipate/_index.md
deleted file mode 100644
index 6a86326945..0000000000
--- a/content/ja/docs/contribute/perticipate/_index.md
+++ /dev/null
@@ -1,120 +0,0 @@
----
-title: Participating in SIG Docs
-content_type: concept
-weight: 60
-card:
-  name: contribute
-  weight: 60
----
-
-<!-- overview -->
-
-SIG Docs is one of the
-[special interest groups](https://github.com/kubernetes/community/blob/master/sig-list.md)
-within the Kubernetes project, focused on writing, updating, and maintaining
-the documentation for Kubernetes as a whole. See
-[SIG Docs from the community github repo](https://github.com/kubernetes/community/tree/master/sig-docs)
-for more information about the SIG.
-
-SIG Docs welcomes content and reviews from all contributors. Anyone can open a
-pull request (PR), and anyone is welcome to file issues about content or comment
-on pull requests in progress.
-
-You can also become a [member](/docs/contribute/participate/roles-and-responsibilities/#members),
-[reviewer](/docs/contribute/participate/roles-and-responsibilities/#reviewers), or
-[approver](/docs/contribute/participate/roles-and-responsibilities/#approvers).
-These roles require greater access and entail certain responsibilities for
-approving and committing changes.  See
-[community-membership](https://github.com/kubernetes/community/blob/master/community-membership.md)
-for more information on how membership works within the Kubernetes community.
-
-The rest of this document outlines some unique ways these roles function within
-SIG Docs, which is responsible for maintaining one of the most public-facing
-aspects of Kubernetes -- the Kubernetes website and documentation.
-
-<!-- body -->
-
-## SIG Docs chairperson
-
-Each SIG, including SIG Docs, selects one or more SIG members to act as
-chairpersons. These are points of contact between SIG Docs and other parts of
-the Kubernetes organization. They require extensive knowledge of the structure
-of the Kubernetes project as a whole and how SIG Docs works within it. See
-[Leadership](https://github.com/kubernetes/community/tree/master/sig-docs#leadership)
-for the current list of chairpersons.
-
-## SIG Docs teams and automation
-
-Automation in SIG Docs relies on two different mechanisms:
-GitHub teams and OWNERS files.
-
-### GitHub teams
-
-There are two categories of SIG Docs [teams](https://github.com/orgs/kubernetes/teams?query=sig-docs) on GitHub:
-
-- `@sig-docs-{language}-owners` are approvers and leads
-- `@sig-docs-{language}-reviewers` are reviewers
-
-Each can be referenced with their `@name` in GitHub comments to communicate with
-everyone in that group.
-
-Sometimes Prow and GitHub teams overlap without matching exactly. For
-assignment of issues, pull requests, and to support PR approvals, the
-automation uses information from `OWNERS` files.
-
-### OWNERS files and front-matter
-
-The Kubernetes project uses an automation tool called prow for automation
-related to GitHub issues and pull requests. The
-[Kubernetes website repository](https://github.com/kubernetes/website) uses
-two [prow plugins](https://github.com/kubernetes/test-infra/tree/master/prow/plugins):
-
-- blunderbuss
-- approve
-
-These two plugins use the
-[OWNERS](https://github.com/kubernetes/website/blob/master/OWNERS) and
-[OWNERS_ALIASES](https://github.com/kubernetes/website/blob/master/OWNERS_ALIASES)
-files in the top level of the `kubernetes/website` GitHub repository to control
-how prow works within the repository.
-
-An OWNERS file contains a list of people who are SIG Docs reviewers and
-approvers. OWNERS files can also exist in subdirectories, and can override who
-can act as a reviewer or approver of files in that subdirectory and its
-descendants. For more information about OWNERS files in general, see
-[OWNERS](https://github.com/kubernetes/community/blob/master/contributors/guide/owners.md).
-
-In addition, an individual Markdown file can list reviewers and approvers in its
-front-matter, either by listing individual GitHub usernames or GitHub groups.
-
-The combination of OWNERS files and front-matter in Markdown files determines
-the advice PR owners get from automated systems about who to ask for technical
-and editorial review of their PR.
-
-## How merging works
-
-When a pull request is merged to the branch used to publish content, that content is published to http://kubernetes.io. To ensure that
-the quality of our published content is high, we limit merging pull requests to
-SIG Docs approvers. Here's how it works.
-
-- When a pull request has both the `lgtm` and `approve` labels, has no `hold`
-  labels, and all tests are passing, the pull request merges automatically.
-- Kubernetes organization members and SIG Docs approvers can add comments to
-  prevent automatic merging of a given pull request (by adding a `/hold` comment
-  or withholding a `/lgtm` comment).
-- Any Kubernetes member can add the `lgtm` label by adding a `/lgtm` comment.
-- Only SIG Docs approvers can merge a pull request
-  by adding an `/approve` comment. Some approvers also perform additional
-  specific roles, such as [PR Wrangler](/docs/contribute/participate/pr-wranglers/) or
-  [SIG Docs chairperson](#sig-docs-chairperson).
-
-
-
-## {{% heading "whatsnext" %}}
-
-
-For more information about contributing to the Kubernetes documentation, see:
-
-- [Contributing new content](/docs/contribute/new-content/overview/)
-- [Reviewing content](/docs/contribute/review/reviewing-prs)
-- [Documentation style guide](/docs/contribute/style/)

From f54652f29b303e68705c063eeaded9247d3d6e95 Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Fri, 19 Feb 2021 00:53:42 -0300
Subject: [PATCH 034/788] Propose Yago and Ricardo as pt approvers

---
 OWNERS_ALIASES | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 01894721d1..4883589bfa 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -178,11 +178,15 @@ aliases:
     - jcjesus
     - devlware
     - jhonmike
+    - rikatz
+    - yagonobre
   sig-docs-pt-reviews: # PR reviews for Portugese content
     - femrtnz
     - jcjesus
     - devlware
     - jhonmike
+    - rikatz
+    - yagonobre
   sig-docs-vi-owners: # Admins for Vietnamese content
     - huynguyennovem
     - ngtuna

From fd116f4187c3d3e4a9d89e667d1d59d9072c5b81 Mon Sep 17 00:00:00 2001
From: Kobayashi <kobayashi.da-06@fujitsu.com>
Date: Fri, 19 Feb 2021 14:17:57 +0900
Subject: [PATCH 035/788] =?UTF-8?q?Delete=20unnecessary=20"=20=E3=80=82".?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 content/ja/docs/contribute/participate/_index.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/ja/docs/contribute/participate/_index.md b/content/ja/docs/contribute/participate/_index.md
index d1f39eaffa..9e79bf0b98 100644
--- a/content/ja/docs/contribute/participate/_index.md
+++ b/content/ja/docs/contribute/participate/_index.md
@@ -48,7 +48,7 @@ SIG Docsの自動化は、GitHub teamsとOWNERSファイルの2つの異なる
 
 GitHubには、SIG Docs 
 [teams](https://github.com/orgs/kubernetes/teams?query=sig-docs)
-の二つのカテゴリがあります。:
+の二つのカテゴリがあります:
 
 - `@sig-docs-{language}-owners`は承認者かつリードです。
 - `@sig-docs-{language}-reviewers` はレビュアーです。
@@ -62,7 +62,7 @@ ProwチームとGitHub teamsが完全に一致せずに重複する場合があ
 
 Kubernetesプロジェクトは、GitHubのissueとPull Requestに関連する自動化のためにprowと呼ばれる自動化ツールを使用します。 
 [Kubernetes Webサイトリポジトリ](https://github.com/kubernetes/website) 
-は、2つの[prowプラグイン](https://github.com/kubernetes/test-infra/tree/master/prow/plugins)を使用します。：
+は、2つの[prowプラグイン](https://github.com/kubernetes/test-infra/tree/master/prow/plugins)を使用します：
 
 - blunderbuss
 - approve
@@ -95,7 +95,7 @@ Pull Requestがコンテンツの公開に使用されるブランチにマー
 
 ## {{% heading "whatsnext" %}}
 
-Kubernetesドキュメントへの貢献の詳細については、以下を参照してください。：
+Kubernetesドキュメントへの貢献の詳細については、以下を参照してください：
 
 - [Contributing new content](/docs/contribute/new-content/overview/)
 - [Reviewing content](/docs/contribute/review/reviewing-prs)

From ce2e5f87967615723b599da334e02e6c917df4b5 Mon Sep 17 00:00:00 2001
From: Tim Allclair <timallclair@gmail.com>
Date: Fri, 19 Feb 2021 12:19:07 -0800
Subject: [PATCH 036/788] Add PSP to the deprecation guide

---
 .../docs/reference/using-api/deprecation-guide.md  | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/content/en/docs/reference/using-api/deprecation-guide.md b/content/en/docs/reference/using-api/deprecation-guide.md
index ee8328cbdd..1f3d7a9b49 100755
--- a/content/en/docs/reference/using-api/deprecation-guide.md
+++ b/content/en/docs/reference/using-api/deprecation-guide.md
@@ -49,6 +49,13 @@ RuntimeClass in the **node.k8s.io/v1beta1** API version will no longer be served
 * All existing persisted objects are accessible via the new API
 * No notable changes
 
+#### PodSecurityPolicy {#psp-v125}
+
+PodSecurityPolicy in the **policy/v1beta1** API version will no longer be served in v1.25, and the PodSecurityPolicy admission controller will be removed.
+
+PodSecurityPolicy replacements are still under discussion, but current use can be migrated to
+[3rd-party admission webhooks](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/) now.
+
 ### v1.22
 
 The **v1.22** release will stop serving the following deprecated API versions:
@@ -234,6 +241,13 @@ The **extensions/v1beta1**, **apps/v1beta1**, and **apps/v1beta2** API versions
 * Notable changes:
     * `spec.selector` is now required and immutable after creation; use the existing template labels as the selector for seamless upgrades
 
+#### PodSecurityPolicy {#psp-v116}
+
+The **extensions/v1beta1** API version of PodSecurityPolicy is no longer served as of v1.16.
+
+* Migrate manifests and API client to use the **policy/v1beta1** API version, available since v1.10.
+* Note that the **policy/v1beta1** API version of PodSecurityPolicy will be removed in v1.25.
+
 ## What to do
 
 ### Test with deprecated APIs disabled

From 67a342aae3543374eddbd991b2833bc68b83384e Mon Sep 17 00:00:00 2001
From: Mike Patterson <mpatters72@users.noreply.github.com>
Date: Fri, 19 Feb 2021 13:18:53 -0800
Subject: [PATCH 037/788] Update certificate-signing-requests.md

Maintain original docs `/home/vagrant/work/`working directory to be consistent.
---
 .../access-authn-authz/certificate-signing-requests.md        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index cee4342ddf..18a1afa2d0 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -253,9 +253,10 @@ kubectl get csr/john -o yaml
 The certificate value is in Base64-encoded format under `status.certificate`.
 
 Export the issued certificate from the CertificateSigningRequest.
+This example assumes the key and certificate files are located at "/home/vagrant/work/".
 
 ```
-kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > certificate.crt
+kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > /home/vagrant/work/john.crt
 ```
 
 ### Create Role and RoleBinding
@@ -278,7 +279,6 @@ kubectl create rolebinding developer-binding-john --role=developer --user=john
 ### Add to kubeconfig
 
 The last step is to add this user into the kubeconfig file.
-This example assumes the key and certificate files are located at "/home/vagrant/work/".
 
 First, you need to add new credentials:
 

From 6ea8ce102c3678147f4bc2f830fe87883c5d162f Mon Sep 17 00:00:00 2001
From: Michael Nikitochkin <miry.sof@gmail.com>
Date: Wed, 23 Sep 2020 18:50:02 +0200
Subject: [PATCH 038/788] Use apiversion networking.k8s.io/v1 for ingress for
 JA

There is a warning deprecation message for kubernetes v1.19:

```
Warning: networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress
```

Switched apiversion in the example to `networking.k8s.io/v1`
---
 .../ingress-minikube.md                       | 20 ++++++++++++-------
 1 file changed, 13 insertions(+), 7 deletions(-)

diff --git a/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md b/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md
index 563ce2478e..5870186330 100644
--- a/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md
+++ b/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md
@@ -135,7 +135,7 @@ weight: 100
 1. 以下の内容で`example-ingress.yaml`を作成します。
 
     ```yaml
-    apiVersion: networking.k8s.io/v1beta1
+    apiVersion: networking.k8s.io/v1
     kind: Ingress
     metadata:
       name: example-ingress
@@ -147,9 +147,12 @@ weight: 100
         http:
           paths:
           - path: /
+            pathType: Prefix
             backend:
-              serviceName: web
-              servicePort: 8080
+              service:
+                name: web
+                port:
+                  number: 8080
     ```
 
 1. 次のコマンドを実行して、Ingressリソースを作成します。
@@ -175,8 +178,8 @@ weight: 100
     {{< /note >}}
 
     ```shell
-    NAME              HOSTS              ADDRESS       PORTS     AGE
-    example-ingress   hello-world.info   172.17.0.15   80        38s
+    NAME              CLASS    HOSTS              ADDRESS        PORTS   AGE
+    example-ingress   <none>   hello-world.info   172.17.0.15    80      38s
     ```
 
 1. 次の行を`/etc/hosts`ファイルの最後に書きます。
@@ -241,9 +244,12 @@ weight: 100
 
     ```yaml
           - path: /v2
+            pathType: Prefix
             backend:
-              serviceName: web2
-              servicePort: 8080
+              service:
+                name: web2
+                port:
+                  number: 8080
     ```
 
 1. 次のコマンドで変更を適用します。

From 872e88625dda4d2aa60b7db3afae68bb75e3951b Mon Sep 17 00:00:00 2001
From: Michael Nikitochkin <miry.sof@gmail.com>
Date: Sat, 20 Feb 2021 00:02:59 +0100
Subject: [PATCH 039/788] [ja] Update the examples with source code and sync
 with en version

---
 .../ingress-minikube.md                       | 26 ++-----------------
 .../service/networking/example-ingress.yaml   | 18 +++++++++++++
 2 files changed, 20 insertions(+), 24 deletions(-)
 create mode 100644 content/ja/examples/service/networking/example-ingress.yaml

diff --git a/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md b/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md
index 5870186330..be26708099 100644
--- a/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md
+++ b/content/ja/docs/tasks/access-application-cluster/ingress-minikube.md
@@ -134,31 +134,12 @@ weight: 100
 
 1. 以下の内容で`example-ingress.yaml`を作成します。
 
-    ```yaml
-    apiVersion: networking.k8s.io/v1
-    kind: Ingress
-    metadata:
-      name: example-ingress
-      annotations:
-        nginx.ingress.kubernetes.io/rewrite-target: /$1
-    spec:
-      rules:
-      - host: hello-world.info
-        http:
-          paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: web
-                port:
-                  number: 8080
-    ```
+    {{< codenew file="service/networking/example-ingress.yaml" >}}
 
 1. 次のコマンドを実行して、Ingressリソースを作成します。
 
     ```shell
-    kubectl apply -f example-ingress.yaml
+    kubectl apply -f https://kubernetes.io/examples/service/networking/example-ingress.yaml
     ```
 
     出力は次のようになります。
@@ -306,6 +287,3 @@ weight: 100
 * [Ingress](/ja/docs/concepts/services-networking/ingress/)についてさらに学ぶ。
 * [Ingressコントローラー](/ja/docs/concepts/services-networking/ingress-controllers/)についてさらに学ぶ。
 * [Service](/ja/docs/concepts/services-networking/service/)についてさらに学ぶ。
-
-
-
diff --git a/content/ja/examples/service/networking/example-ingress.yaml b/content/ja/examples/service/networking/example-ingress.yaml
new file mode 100644
index 0000000000..b309d13275
--- /dev/null
+++ b/content/ja/examples/service/networking/example-ingress.yaml
@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: example-ingress
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /$1
+spec:
+  rules:
+    - host: hello-world.info
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: web
+                port:
+                  number: 8080
\ No newline at end of file

From 2d781049659fb1010690cd895532c551786f9659 Mon Sep 17 00:00:00 2001
From: "Yuk, Yongsu" <ysyukr@gmail.com>
Date: Sun, 21 Feb 2021 03:24:39 +0900
Subject: [PATCH 040/788] Update to Outdated files in dev-1.20-ko.5 branch (3)

---
 .../change-default-storage-class.md           |   2 +-
 .../pull-image-private-registry.md            |  16 +-
 .../configure-pod-container/static-pod.md     |   1 +
 .../logging-elasticsearch-kibana.md           | 121 -----
 .../tasks/extend-kubectl/kubectl-plugins.md   |  24 +-
 .../coarse-parallel-processing-work-queue.md  |   2 +-
 .../job/parallel-processing-expansion.md      |   2 +-
 .../run-application/delete-stateful-set.md    |   2 +-
 .../horizontal-pod-autoscale.md               |  22 +-
 ...un-single-instance-stateful-application.md |   6 +
 content/ko/docs/tutorials/_index.md           |   2 +-
 .../ko/docs/tutorials/clusters/apparmor.md    |   3 +-
 .../tutorials/kubernetes-basics/_index.html   |   2 +-
 .../expose/expose-intro.html                  |   6 -
 .../basic-stateful-set.md                     |  11 +-
 .../stateful-application/zookeeper.md         |  55 ++-
 .../guestbook-logs-metrics-with-elk.md        | 457 ------------------
 .../stateless-application/guestbook.md        | 185 +++----
 .../guestbook/frontend-deployment.yaml        |  24 +-
 .../guestbook/frontend-service.yaml           |  10 +-
 .../guestbook/mongo-deployment.yaml           |  31 ++
 .../application/guestbook/mongo-service.yaml  |  14 +
 .../guestbook/redis-master-deployment.yaml    |  29 --
 .../guestbook/redis-master-service.yaml       |  17 -
 .../guestbook/redis-slave-deployment.yaml     |  40 --
 .../guestbook/redis-slave-service.yaml        |  15 -
 26 files changed, 204 insertions(+), 895 deletions(-)
 delete mode 100644 content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
 delete mode 100644 content/ko/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
 create mode 100644 content/ko/examples/application/guestbook/mongo-deployment.yaml
 create mode 100644 content/ko/examples/application/guestbook/mongo-service.yaml
 delete mode 100644 content/ko/examples/application/guestbook/redis-master-deployment.yaml
 delete mode 100644 content/ko/examples/application/guestbook/redis-master-service.yaml
 delete mode 100644 content/ko/examples/application/guestbook/redis-slave-deployment.yaml
 delete mode 100644 content/ko/examples/application/guestbook/redis-slave-service.yaml

diff --git a/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md b/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md
index 8fd7445fb7..08c2e2cef4 100644
--- a/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md
+++ b/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md
@@ -32,7 +32,7 @@ content_type: task
 수도 있다. 이런 경우에, 기본 스토리지 클래스를 변경하거나 완전히 비활성화
 하여 스토리지의 동적 프로비저닝을 방지할 수 있다.
 
-단순하게 기본 스토리지클래스를 삭제하는 경우, 사용자의 클러스터에서 구동중인
+기본 스토리지클래스를 삭제하는 경우, 사용자의 클러스터에서 구동 중인
 애드온 매니저에 의해 자동으로 다시 생성될 수 있으므로 정상적으로 삭제가 되지 않을 수도 있다. 애드온 관리자
 및 개별 애드온을 비활성화 하는 방법에 대한 자세한 내용은 설치 문서를 참조하자.
 
diff --git a/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md b/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md
index 34cb102f83..5a8295aff2 100644
--- a/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md
+++ b/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md
@@ -9,18 +9,13 @@ weight: 100
 이 페이지는 프라이빗 도커 레지스트리나 리포지터리로부터 이미지를 받아오기 위해 시크릿(Secret)을 
 사용하는 파드를 생성하는 방법을 보여준다.
 
-
-
 ## {{% heading "prerequisites" %}}
 
-
 * {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 * 이 실습을 수행하기 위해, 
 [도커 ID](https://docs.docker.com/docker-id/)와 비밀번호가 필요하다.
 
-
-
 <!-- steps -->
 
 ## 도커 로그인
@@ -106,7 +101,8 @@ kubectl create secret docker-registry regcred --docker-server=<your-registry-ser
 
 아래의 각 항목에 대한 설명을 참고한다.
 
-* `<your-registry-server>` 은 프라이빗 도커 저장소의 FQDN 주소이다. (도커허브(DockerHub)의 경우, https://index.docker.io/v1/)
+* `<your-registry-server>` 은 프라이빗 도커 저장소의 FQDN 주소이다.
+  도커허브(DockerHub)는 `https://index.docker.io/v2/` 를 사용한다.
 * `<your-name>` 은 도커 사용자의 계정이다.
 * `<your-pword>` 은 도커 사용자의 비밀번호이다.
 * `<your-email>` 은 도커 사용자의 이메일 주소이다.
@@ -192,7 +188,8 @@ your.private.registry.example.com/janedoe/jdoe-private:v1
 ```
 
 프라이빗 저장소에서 이미지를 받아오기 위하여, 쿠버네티스에서 자격 증명이 필요하다.
-구성 파일의 `imagePullSecrets` 필드를 통해 쿠버네티스가 `regcred` 라는 시크릿으로부터 자격 증명을 가져올 수 있다.
+구성 파일의 `imagePullSecrets` 필드를 통해 쿠버네티스가
+`regcred` 라는 시크릿으로부터 자격 증명을 가져올 수 있다.
 
 시크릿을 사용해서 파드를 생성하고, 파드가 실행되는지 확인하자.
 
@@ -201,16 +198,11 @@ kubectl apply -f my-private-reg-pod.yaml
 kubectl get pod private-reg
 ```
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
 * [시크릿](/ko/docs/concepts/configuration/secret/)에 대해 더 배워 보기.
 * [프라이빗 레지스트리 사용](/ko/docs/concepts/containers/images/#프라이빗-레지스트리-사용)에 대해 더 배워 보기.
 * [서비스 어카운트에 풀 시크릿(pull secret) 추가하기](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account)에 대해 더 배워 보기.
 * [kubectl create secret docker-registry](/docs/reference/generated/kubectl/kubectl-commands/#-em-secret-docker-registry-em-)에 대해 읽어보기.
 * [시크릿](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#secret-v1-core)에 대해 읽어보기.
 * [PodSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core)의 `imagePullSecrets` 필드에 대해 읽어보기.
-
-
diff --git a/content/ko/docs/tasks/configure-pod-container/static-pod.md b/content/ko/docs/tasks/configure-pod-container/static-pod.md
index 41e1f6f7b0..4daf739c2f 100644
--- a/content/ko/docs/tasks/configure-pod-container/static-pod.md
+++ b/content/ko/docs/tasks/configure-pod-container/static-pod.md
@@ -22,6 +22,7 @@ Kubelet 은 각각의 스태틱 파드에 대하여 쿠버네티스 API 서버
 생성하려고 자동으로 시도한다.
 즉, 노드에서 구동되는 파드는 API 서버에 의해서 볼 수 있지만,
 API 서버에서 제어될 수는 없다.
+파드 이름에는 노드 호스트 이름 앞에 하이픈을 붙여 접미사로 추가된다.
 
 {{< note >}}
 만약 클러스터로 구성된 쿠버네티스를 구동하고 있고, 스태틱 파드를 사용하여
diff --git a/content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md b/content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
deleted file mode 100644
index 54a2ae61b0..0000000000
--- a/content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
+++ /dev/null
@@ -1,121 +0,0 @@
----
-content_type: concept
-title: 엘라스틱서치(Elasticsearch) 및 키바나(Kibana)를 사용한 로깅
----
-
-<!-- overview -->
-
-Google 컴퓨트 엔진(Compute Engine, GCE) 플랫폼에서, 기본 로깅 지원은
-[스택드라이버(Stackdriver) 로깅](https://cloud.google.com/logging/)을 대상으로 한다. 이는
-[스택드라이버 로깅으로 로깅하기](/docs/tasks/debug-application-cluster/logging-stackdriver)에 자세히 설명되어 있다.
-
-이 문서에서는 GCE에서 운영할 때 스택드라이버 로깅의 대안으로,
-[엘라스틱서치](https://www.elastic.co/products/elasticsearch)에 로그를 수집하고
-[키바나](https://www.elastic.co/products/kibana)를 사용하여 볼 수 있도록
-클러스터를 설정하는 방법에 대해 설명한다.
-
-{{< note >}}
-Google 쿠버네티스 엔진(Kubernetes Engine)에서 호스팅되는 쿠버네티스 클러스터에는 엘라스틱서치 및 키바나를 자동으로 배포할 수 없다. 수동으로 배포해야 한다.
-{{< /note >}}
-
-
-
-<!-- body -->
-
-클러스터 로깅에 엘라스틱서치, 키바나를 사용하려면 kube-up.sh를 사용하여
-클러스터를 생성할 때 아래와 같이 다음의 환경 변수를
-설정해야 한다.
-
-```shell
-KUBE_LOGGING_DESTINATION=elasticsearch
-```
-
-또한 `KUBE_ENABLE_NODE_LOGGING=true`(GCE 플랫폼의 기본값)인지 확인해야 한다.
-
-이제, 클러스터를 만들 때, 각 노드에서 실행되는 Fluentd 로그 수집 데몬이
-엘라스틱서치를 대상으로 한다는 메시지가 나타난다.
-
-```shell
-cluster/kube-up.sh
-```
-```
-...
-Project: kubernetes-satnam
-Zone: us-central1-b
-... calling kube-up
-Project: kubernetes-satnam
-Zone: us-central1-b
-+++ Staging server tars to Google Storage: gs://kubernetes-staging-e6d0e81793/devel
-+++ kubernetes-server-linux-amd64.tar.gz uploaded (sha1 = 6987c098277871b6d69623141276924ab687f89d)
-+++ kubernetes-salt.tar.gz uploaded (sha1 = bdfc83ed6b60fa9e3bff9004b542cfc643464cd0)
-Looking for already existing resources
-Starting master and configuring firewalls
-Created [https://www.googleapis.com/compute/v1/projects/kubernetes-satnam/zones/us-central1-b/disks/kubernetes-master-pd].
-NAME                 ZONE          SIZE_GB TYPE   STATUS
-kubernetes-master-pd us-central1-b 20      pd-ssd READY
-Created [https://www.googleapis.com/compute/v1/projects/kubernetes-satnam/regions/us-central1/addresses/kubernetes-master-ip].
-+++ Logging using Fluentd to elasticsearch
-```
-
-노드별 Fluentd 파드, 엘라스틱서치 파드 및 키바나 파드는
-클러스터가 활성화된 직후 kube-system 네임스페이스에서 모두 실행되어야
-한다.
-
-```shell
-kubectl get pods --namespace=kube-system
-```
-```
-NAME                                           READY     STATUS    RESTARTS   AGE
-elasticsearch-logging-v1-78nog                 1/1       Running   0          2h
-elasticsearch-logging-v1-nj2nb                 1/1       Running   0          2h
-fluentd-elasticsearch-kubernetes-node-5oq0     1/1       Running   0          2h
-fluentd-elasticsearch-kubernetes-node-6896     1/1       Running   0          2h
-fluentd-elasticsearch-kubernetes-node-l1ds     1/1       Running   0          2h
-fluentd-elasticsearch-kubernetes-node-lz9j     1/1       Running   0          2h
-kibana-logging-v1-bhpo8                        1/1       Running   0          2h
-kube-dns-v3-7r1l9                              3/3       Running   0          2h
-monitoring-heapster-v4-yl332                   1/1       Running   1          2h
-monitoring-influx-grafana-v1-o79xf             2/2       Running   0          2h
-```
-
-`fluentd-elasticsearch` 파드는 각 노드에서 로그를 수집하여
-`elasticsearch-logging` 파드로 전송한다. 이 로그는 `elasticsearch-logging` 이라는
-[서비스](/ko/docs/concepts/services-networking/service/)의 일부이다. 이
-엘라스틱서치 파드는 로그를 저장하고 REST API를 통해 노출한다.
-`kibana-logging` 파드는 엘라스틱서치에 저장된 로그를 읽기 위한 웹 UI를
-제공하며, `kibana-logging` 이라는 서비스의 일부이다.
-
-엘라스틱서치 및 키바나 서비스는 모두 `kube-system` 네임스페이스에
-있으며 공개적으로 접근 가능한 IP 주소를 통해 직접 노출되지 않는다. 이를 위해,
-[클러스터에서 실행 중인 서비스 접근](/ko/docs/tasks/access-application-cluster/access-cluster/#클러스터에서-실행되는-서비스로-액세스)에
-대한 지침을 참고한다.
-
-브라우저에서 `elasticsearch-logging` 서비스에 접근하려고 하면,
-다음과 같은 상태 페이지가 표시된다.
-
-![엘라스틱서치 상태](/images/docs/es-browser.png)
-
-원할 경우, 이제 엘라스틱서치 쿼리를 브라우저에 직접 입력할 수
-있다. 수행 방법에 대한 자세한 내용은 [엘라스틱서치의 문서](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-uri-request.html)를
-참조한다.
-
-또는, 키바나를 사용하여 클러스터의 로그를 볼 수도 있다(다시
-[클러스터에서 실행되는 서비스에 접근하기 위한 지침](/ko/docs/tasks/access-application-cluster/access-cluster/#클러스터에서-실행되는-서비스로-액세스)을 참고).
-키바나 URL을 처음 방문하면 수집된 로그 보기를
-구성하도록 요청하는 페이지가 표시된다. 시계열 값에
-대한 옵션을 선택하고 `@timestamp` 를 선택한다. 다음 페이지에서
-`Discover` 탭을 선택하면 수집된 로그를 볼 수 있다.
-로그를 정기적으로 새로 고치려면 새로 고침 간격을 5초로
-설정할 수 있다.
-
-키바나 뷰어에서 수집된 로그의 일반적인 보기는 다음과 같다.
-
-![키바나 로그](/images/docs/kibana-logs.png)
-
-
-
-## {{% heading "whatsnext" %}}
-
-
-키바나는 로그를 탐색하기 위한 모든 종류의 강력한 옵션을 제공한다! 이를 파헤치는 방법에 대한
-아이디어는 [키바나의 문서](https://www.elastic.co/guide/en/kibana/current/discover.html)를 확인한다.
diff --git a/content/ko/docs/tasks/extend-kubectl/kubectl-plugins.md b/content/ko/docs/tasks/extend-kubectl/kubectl-plugins.md
index f46df1e511..77081a82f3 100644
--- a/content/ko/docs/tasks/extend-kubectl/kubectl-plugins.md
+++ b/content/ko/docs/tasks/extend-kubectl/kubectl-plugins.md
@@ -22,7 +22,7 @@ content_type: task
 
 ## kubectl 플러그인 설치
 
-플러그인은 이름이 `kubectl-` 로 시작되는 독립형 실행 파일이다. 플러그인을 설치하려면, 간단히 실행 파일을 `PATH` 에 지정된 디렉터리로 옮기면 된다.
+플러그인은 이름이 `kubectl-` 로 시작되는 독립형 실행 파일이다. 플러그인을 설치하려면, 실행 파일을 `PATH` 에 지정된 디렉터리로 옮기면 된다.
 
 [Krew](https://krew.dev/)를 사용하여 오픈소스에서 사용 가능한
 kubectl 플러그인을 검색하고 설치할 수도 있다. Krew는 쿠버네티스 SIG CLI 커뮤니티에서 관리하는
@@ -57,9 +57,9 @@ Krew [플러그인 인덱스](https://krew.sigs.k8s.io/plugins/)를 통해 사
 
 플러그인 설치 또는 사전 로딩이 필요하지 않다. 플러그인 실행 파일은
 `kubectl` 바이너리에서 상속된 환경을 받는다.
-플러그인은 이름을 기반으로 구현할 명령 경로를 결정한다. 예를
-들어, 새로운 명령인 `kubectl foo` 를 제공하려는 플러그인은 단순히 이름이
-`kubectl-foo` 이고, `PATH` 의 어딘가에 있다.
+플러그인은 이름을 기반으로 구현할 명령 경로를 결정한다.
+예를 들어, `kubectl-foo` 라는 플러그인은 `kubectl foo` 명령을 제공한다.
+`PATH` 어딘가에 플러그인 실행 파일을 설치해야 한다.
 
 ### 플러그인 예제
 
@@ -85,30 +85,31 @@ echo "I am a plugin named kubectl-foo"
 
 ### 플러그인 사용
 
-위의 플러그인을 사용하려면, 간단히 실행 가능하게 만든다.
+플러그인을 사용하려면, 실행 가능하게 만든다.
 
-```
+```shell
 sudo chmod +x ./kubectl-foo
 ```
 
 그리고 `PATH` 의 어느 곳에나 옮겨 놓는다.
 
-```
+```shell
 sudo mv ./kubectl-foo /usr/local/bin
 ```
 
 이제 플러그인을 `kubectl` 명령으로 호출할 수 있다.
 
-```
+```shell
 kubectl foo
 ```
+
 ```
 I am a plugin named kubectl-foo
 ```
 
 모든 인수와 플래그는 그대로 실행 파일로 전달된다.
 
-```
+```shell
 kubectl foo version
 ```
 ```
@@ -120,6 +121,7 @@ kubectl foo version
 ```bash
 export KUBECONFIG=~/.kube/config
 kubectl foo config
+
 ```
 ```
 /home/<user>/.kube/config
@@ -128,6 +130,7 @@ kubectl foo config
 ```shell
 KUBECONFIG=/etc/kube/config kubectl foo config
 ```
+
 ```
 /etc/kube/config
 ```
@@ -373,11 +376,8 @@ kubectl 플러그인의 배포 패키지를
 컴파일된 패키지를 사용 가능하게 하거나, Krew를 사용하면 설치가
 더 쉬워진다.
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
 * Go로 작성된 플러그인의
   [자세한 예제](https://github.com/kubernetes/sample-cli-plugin)에 대해서는
   샘플 CLI 플러그인 리포지터리를 확인한다.
diff --git a/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md b/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md
index aeaac4803d..fa765a7005 100644
--- a/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md
+++ b/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md
@@ -35,7 +35,7 @@ weight: 30
 
 ## 메시지 대기열 서비스 시작
 
-이 문서의 예시에서는 RabbitMQ를 사용하지만, 다른 AMQP 타입의 메시지 서비스에 적용하는데 문제가 없을 것이다.
+이 예시에서는 RabbitMQ를 사용하지만, 다른 AMQP 유형의 메시지 서비스를 사용하도록 예시를 조정할 수 있다.
 
 실제로 사용할 때는, 클러스터에 메시지 대기열 서비스를 한 번
 구축하고서, 여러 많은 잡이나 오래 동작하는 서비스에 재사용할 수 있다.
diff --git a/content/ko/docs/tasks/job/parallel-processing-expansion.md b/content/ko/docs/tasks/job/parallel-processing-expansion.md
index 341739ba62..ef02dac61b 100644
--- a/content/ko/docs/tasks/job/parallel-processing-expansion.md
+++ b/content/ko/docs/tasks/job/parallel-processing-expansion.md
@@ -12,7 +12,7 @@ weight: 20
 있다.
 
 이 예에는 _apple_, _banana_ 그리고 _cherry_ 세 항목만 있다.
-샘플 잡들은 단순히 문자열을 출력한 다음 일시 정지하는 각 항목을 처리한다.
+샘플 잡들은 문자열을 출력한 다음 일시 정지하는 각 항목을 처리한다.
 
 이 패턴이 보다 실질적인 유스케이스에 어떻게 부합하는지 알아 보려면
 [실제 워크로드에서 잡 사용하기](#실제-워크로드에서-잡-사용하기)를 참고한다.
diff --git a/content/ko/docs/tasks/run-application/delete-stateful-set.md b/content/ko/docs/tasks/run-application/delete-stateful-set.md
index 8bb7ab89f2..1ef9220d65 100644
--- a/content/ko/docs/tasks/run-application/delete-stateful-set.md
+++ b/content/ko/docs/tasks/run-application/delete-stateful-set.md
@@ -60,7 +60,7 @@ PVC를 삭제할 때 데이터 손실될 수 있음에 주의하자.
 
 ### 스테이트풀셋의 완벽한 삭제
 
-연결된 파드를 포함해서 스테이트풀셋의 모든 것을 간단히 삭제하기 위해 다음과 같이 일련의 명령을 실행 한다.
+연결된 파드를 포함해서 스테이트풀셋의 모든 것을 삭제하기 위해 다음과 같이 일련의 명령을 실행한다.
 
 ```shell
 grace=$(kubectl get pods <stateful-set-pod> --template '{{.spec.terminationGracePeriodSeconds}}')
diff --git a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md
index 42172a463e..f762357603 100644
--- a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md
+++ b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md
@@ -190,7 +190,7 @@ Horizontal Pod Autoscaler는 모든 API 리소스와 마찬가지로 `kubectl`
 `kubectl get hpa`로 오토스케일러 목록을 조회할 수 있고, `kubectl describe hpa`로 세부 사항을 확인할 수 있다.
 마지막으로 `kubectl delete hpa`를 사용하여 오토스케일러를 삭제할 수 있다.
 
-또한 Horizontal Pod Autoscaler를 쉽게 생성 할 수 있는 `kubectl autoscale`이라는 특별한 명령이 있다.
+또한 Horizontal Pod Autoscaler를 생성할 수 있는 `kubectl autoscale`이라는 특별한 명령이 있다.
 예를 들어 `kubectl autoscale rs foo --min=2 --max=5 --cpu-percent=80`을
 실행하면 레플리케이션 셋 *foo* 에 대한 오토스케일러가 생성되고, 목표 CPU 사용률은 `80 %`,
 그리고 2와 5 사이의 레플리카 개수로 설정된다.
@@ -220,9 +220,10 @@ v1.6 부터 클러스터 운영자는 `kube-controller-manager` 컴포넌트의
 v1.12부터는 새로운 알고리즘 업데이트가 업스케일 지연에 대한
 필요성을 제거하였다.
 
-- `--horizontal-pod-autoscaler-downscale-delay` : 이 옵션 값은
-  오토스케일러가 현재의 작업이 완료된 후에 다른 다운스케일 작업을
-  수행하기까지 기다려야 하는 시간을 지정하는 지속 시간이다.
+- `--horizontal-pod-autoscaler-downscale-delay` : 다운스케일이
+  안정화되기까지의 시간 간격을 지정한다.
+  Horizontal Pod Autoscaler는 이전의 권장하는 크기를 기억하고,
+  이 시간 간격에서의 가장 큰 크기에서만 작동한다.
   기본값은 5분(`5m0s`)이다.
 
 {{< note >}}
@@ -382,7 +383,12 @@ behavior:
       periodSeconds: 60
 ```
 
-파드 수가 40개를 초과하면 두 번째 폴리시가 스케일링 다운에 사용된다.
+`periodSeconds` 는 폴리시가 참(true)으로 유지되어야 하는 기간을 나타낸다.
+첫 번째 정책은 _(파드들)_ 이 1분 내에 최대 4개의 레플리카를 스케일 다운할 수 있도록 허용한다.
+두 번째 정책은 _비율_ 로 현재 레플리카의 최대 10%를 1분 내에 스케일 다운할 수 있도록 허용한다.
+
+기본적으로 가장 많은 변경을 허용하는 정책이 선택되기에 두 번째 정책은
+파드의 레플리카 수가 40개를 초과하는 경우에만 사용된다. 레플리카가 40개 이하인 경우 첫 번째 정책이 적용된다.
 예를 들어 80개의 레플리카가 있고 대상을 10개의 레플리카로 축소해야 하는
 경우 첫 번째 단계에서 8개의 레플리카가 스케일 다운 된다. 레플리카의 수가 72개일 때
 다음 반복에서 파드의 10%는 7.2 이지만, 숫자는 8로 올림된다. 오토스케일러 컨트롤러의
@@ -390,10 +396,6 @@ behavior:
 미만으로 떨어지면 첫 번째 폴리시 _(파드들)_ 가 적용되고 한번에
 4개의 레플리카가 줄어든다.
 
-`periodSeconds` 는 폴리시가 참(true)으로 유지되어야 하는 기간을 나타낸다.
-첫 번째 정책은 1분 내에 최대 4개의 레플리카를 스케일 다운할 수 있도록 허용한다.
-두 번째 정책은 현재 레플리카의 최대 10%를 1분 내에 스케일 다운할 수 있도록 허용한다.
-
 확장 방향에 대해 `selectPolicy` 필드를 확인하여 폴리시 선택을 변경할 수 있다.
 레플리카의 수를 최소로 변경할 수 있는 폴리시를 선택하는 `최소(Min)`로 값을 설정한다.
 값을 `Disabled` 로 설정하면 해당 방향으로 스케일링이 완전히
@@ -440,7 +442,7 @@ behavior:
       periodSeconds: 15
     selectPolicy: Max
 ```
-안정화 윈도우의 스케일링 다운의 경우 _300_ 초(또는 제공된
+안정화 윈도우의 스케일링 다운의 경우 _300_ 초 (또는 제공된
 경우`--horizontal-pod-autoscaler-downscale-stabilization` 플래그의 값)이다. 스케일링 다운에서는 현재
 실행 중인 레플리카의 100%를 제거할 수 있는 단일 정책만 있으며, 이는 스케일링
 대상을 최소 허용 레플리카로 축소할 수 있음을 의미한다.
diff --git a/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md b/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md
index f3debe8781..cf6c3188b7 100644
--- a/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md
+++ b/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md
@@ -65,6 +65,8 @@ MySQL을 실행하고 퍼시스턴트볼륨클레임을 참조하는 디플로
 
         kubectl describe deployment mysql
 
+    출력은 다음과 유사하다.
+
         Name:                 mysql
         Namespace:            default
         CreationTimestamp:    Tue, 01 Nov 2016 11:18:45 -0700
@@ -105,6 +107,8 @@ MySQL을 실행하고 퍼시스턴트볼륨클레임을 참조하는 디플로
 
         kubectl get pods -l app=mysql
 
+    출력은 다음과 유사하다.
+
         NAME                   READY     STATUS    RESTARTS   AGE
         mysql-63082529-2z3ki   1/1       Running   0          3m
 
@@ -112,6 +116,8 @@ MySQL을 실행하고 퍼시스턴트볼륨클레임을 참조하는 디플로
 
         kubectl describe pvc mysql-pv-claim
 
+    출력은 다음과 유사하다.
+
         Name:         mysql-pv-claim
         Namespace:    default
         StorageClass:
diff --git a/content/ko/docs/tutorials/_index.md b/content/ko/docs/tutorials/_index.md
index a0af5ff5b5..7c1216c5fd 100644
--- a/content/ko/docs/tutorials/_index.md
+++ b/content/ko/docs/tutorials/_index.md
@@ -33,7 +33,7 @@ content_type: concept
 
 * [외부 IP 주소를 노출하여 클러스터의 애플리케이션에 접속하기](/ko/docs/tutorials/stateless-application/expose-external-ip-address/)
 
-* [예시: Redis를 사용한 PHP 방명록 애플리케이션 배포하기](/ko/docs/tutorials/stateless-application/guestbook/)
+* [예시: MongoDB를 사용한 PHP 방명록 애플리케이션 배포하기](/ko/docs/tutorials/stateless-application/guestbook/)
 
 ## 상태 유지가 필요한(stateful) 애플리케이션
 
diff --git a/content/ko/docs/tutorials/clusters/apparmor.md b/content/ko/docs/tutorials/clusters/apparmor.md
index 74008f9961..c28f41a7cc 100644
--- a/content/ko/docs/tutorials/clusters/apparmor.md
+++ b/content/ko/docs/tutorials/clusters/apparmor.md
@@ -168,8 +168,7 @@ k8s-apparmor-example-deny-write (enforce)
 
 *이 예시는 AppArmor를 지원하는 클러스터를 이미 구성하였다고 가정한다.*
 
-먼저 노드에서 사용하려는 프로파일을 적재해야 한다. 사용할 프로파일은 단순히
-파일 쓰기를 거부할 것이다.
+먼저 노드에서 사용하려는 프로파일을 적재해야 한다. 사용할 프로파일은 파일 쓰기를 거부한다.
 
 ```shell
 #include <tunables/global>
diff --git a/content/ko/docs/tutorials/kubernetes-basics/_index.html b/content/ko/docs/tutorials/kubernetes-basics/_index.html
index 4be0e94231..f1ab593581 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/_index.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/_index.html
@@ -41,7 +41,7 @@ card:
     <div class="row">
       <div class="col-md-9">
         <h2>쿠버네티스가 어떤 도움이 될까?</h2>
-        <p>오늘날의 웹서비스에 대해서, 사용자는 애플리케이션이 24/7 가용하기를 바라고, 개발자는 하루에도 몇 번이고 새로운 버전의 애플리케이션을 배포하기를 바란다. 컨테이너화를 통해 소프트웨어를 패키지하면 애플리케이션을 다운타임 없이 쉽고 빠르게 릴리스 및 업데이트할 수 있게 되어서 이런 목표를 달성하는데 도움이 된다. 쿠버네티스는 이렇게 컨테이너화된 애플리케이션을 원하는 곳 어디에든 또 언제든 구동시킬 수 있다는 확신을 갖는데 도움을 주며, 그 애플리케이션이 작동하는데 필요한 자원과 도구를 찾는 것을 도와준다. 쿠버네티스는 구글의 컨테이너 오케스트레이션 부문의 축적된 경험으로 설계되고 커뮤니티로부터 도출된 최고의 아이디어가 결합된 운영 수준의 오픈 소스 플랫폼이다.</p>
+        <p>오늘날의 웹서비스에 대해서, 사용자는 애플리케이션이 24/7 가용하기를 바라고, 개발자는 하루에도 몇 번이고 새로운 버전의 애플리케이션을 배포하기를 바란다. 컨테이너화를 통해 소프트웨어를 패키지하면 애플리케이션을 다운타임 없이 릴리스 및 업데이트할 수 있게 되어서 이런 목표를 달성하는데 도움이 된다. 쿠버네티스는 이렇게 컨테이너화된 애플리케이션을 원하는 곳 어디에든 또 언제든 구동시킬 수 있다는 확신을 갖는데 도움을 주며, 그 애플리케이션이 작동하는데 필요한 자원과 도구를 찾는 것을 도와준다. 쿠버네티스는 구글의 컨테이너 오케스트레이션 부문의 축적된 경험으로 설계되고 커뮤니티로부터 도출된 최고의 아이디어가 결합된 운영 수준의 오픈 소스 플랫폼이다.</p>
       </div>
     </div>
 
diff --git a/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html
index ebc880dbdd..e44e68df85 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html
@@ -64,12 +64,6 @@ weight: 10
 			</div>
 		</div>
 
-		<div class="row">
-			<div class="col-md-8">
-				<p><img src="/docs/tutorials/kubernetes-basics/public/images/module_04_services.svg" width="150%" height="150%"></p>
-			</div>
-		</div>
-
 		<div class="row">
 			<div class="col-md-8">
 				<p>서비스는 파드 셋에 걸쳐서 트래픽을 라우트한다. 여러분의 애플리케이션에 영향을 주지 않으면서 쿠버네티스에서 파드들이 죽게도 하고, 복제가 되게도 해주는 추상적 개념이다. 종속적인 파드들 사이에서의 디스커버리와 라우팅은 (하나의 애플리케이션에서 프로트엔드와 백엔드 컴포넌트와 같은) 쿠버네티스 서비스들에 의해 처리된다.</p>
diff --git a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
index 35eb540724..a2df8806a8 100644
--- a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -921,7 +921,7 @@ web-2     0/1       Terminating   0         3m
 
 `web` 스테이트풀셋이 다시 생성될 때 먼저 `web-0` 시작한다.
 `web-1`은 이미  Running과 Ready 상태이므로 `web-0`이 Running과 Ready 상태로
-전환될 때는 단순히 이 파드에 적용됬다. 스테이트풀셋에`replicas`를 2로 하고
+전환될 때는 이 파드에 적용됬다. 스테이트풀셋에`replicas`를 2로 하고
 `web-0`을 재생성했다면 `web-1`이
 이미 Running과 Ready 상태이고,
 `web-2`은 종료되었을 것이다.
@@ -932,6 +932,7 @@ web-2     0/1       Terminating   0         3m
 ```shell
 for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
 ```
+
 ```
 web-0
 web-1
@@ -957,6 +958,7 @@ kubectl get pods -w -l app=nginx
 ```shell
 kubectl delete statefulset web
 ```
+
 ```
 statefulset.apps "web" deleted
 ```
@@ -966,6 +968,7 @@ statefulset.apps "web" deleted
 ```shell
 kubectl get pods -w -l app=nginx
 ```
+
 ```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     1/1       Running   0          11m
@@ -997,6 +1000,7 @@ web-1     0/1       Terminating   0         29m
 ```shell
 kubectl delete service nginx
 ```
+
 ```
 service "nginx" deleted
 ```
@@ -1006,6 +1010,7 @@ service "nginx" deleted
 ```shell
 kubectl apply -f web.yaml
 ```
+
 ```
 service/nginx created
 statefulset.apps/web created
@@ -1017,6 +1022,7 @@ statefulset.apps/web created
 ```shell
 for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
 ```
+
 ```
 web-0
 web-1
@@ -1031,13 +1037,16 @@ web-1
 ```shell
 kubectl delete service nginx
 ```
+
 ```
 service "nginx" deleted
 ```
+
 그리고 `web` 스테이트풀셋을 삭제한다.
 ```shell
 kubectl delete statefulset web
 ```
+
 ```
 statefulset "web" deleted
 ```
diff --git a/content/ko/docs/tutorials/stateful-application/zookeeper.md b/content/ko/docs/tutorials/stateful-application/zookeeper.md
index b1e6dbe523..3fca0a6749 100644
--- a/content/ko/docs/tutorials/stateful-application/zookeeper.md
+++ b/content/ko/docs/tutorials/stateful-application/zookeeper.md
@@ -15,17 +15,17 @@ weight: 40
 이 튜토리얼을 시작하기 전에
 다음 쿠버네티스 개념에 친숙해야 한다.
 
--   [파드](/ko/docs/concepts/workloads/pods/)
--   [클러스터 DNS](/ko/docs/concepts/services-networking/dns-pod-service/)
--   [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스)
--   [퍼시스턴트볼륨](/ko/docs/concepts/storage/persistent-volumes/)
--   [퍼시스턴트볼륨 프로비저닝](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/staging/persistent-volume-provisioning/)
--   [스테이트풀셋](/ko/docs/concepts/workloads/controllers/statefulset/)
--   [PodDisruptionBudget](/ko/docs/concepts/workloads/pods/disruptions/#파드-disruption-budgets)
--   [파드안티어피니티](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#어피니티-affinity-와-안티-어피니티-anti-affinity)
--   [kubectl CLI](/ko/docs/reference/kubectl/kubectl/)
+- [파드](/ko/docs/concepts/workloads/pods/)
+- [클러스터 DNS](/ko/docs/concepts/services-networking/dns-pod-service/)
+- [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스)
+- [퍼시스턴트볼륨](/ko/docs/concepts/storage/persistent-volumes/)
+- [퍼시스턴트볼륨 프로비저닝](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/staging/persistent-volume-provisioning/)
+- [스테이트풀셋](/ko/docs/concepts/workloads/controllers/statefulset/)
+- [PodDisruptionBudget](/ko/docs/concepts/workloads/pods/disruptions/#파드-disruption-budgets)
+- [파드안티어피니티](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#어피니티-affinity-와-안티-어피니티-anti-affinity)
+- [kubectl CLI](/ko/docs/reference/kubectl/kubectl/)
 
-최소한 4개의 노드가 있는 클러스터가 필요하며, 각 노드는 적어도 2 개의 CPU와 4 GiB 메모리가 필요하다. 이 튜토리얼에서 클러스터 노드를 통제(cordon)하고 비우게(drain) 할 것이다. **이것은 클러스터를 종료하여 노드의 모든 파드를 퇴출(evict)하는 것으로, 모든 파드는 임시로 언스케줄된다는 의미이다.** 이 튜토리얼을 위해 전용 클러스터를 이용하거나, 다른 테넌트에 간섭을 하는 혼란이 발생하지 않도록 해야 합니다.
+반드시 최소한 4개의 노드가 있는 클러스터가 필요하며, 각 노드는 적어도 2 개의 CPU와 4 GiB 메모리가 필요하다. 이 튜토리얼에서 클러스터 노드를 통제(cordon)하고 비우게(drain) 할 것이다. **이것은 클러스터를 종료하여 노드의 모든 파드를 축출(evict)하는 것으로, 모든 파드는 임시로 언스케줄된다는 의미이다.** 이 튜토리얼을 위해 전용 클러스터를 이용하거나, 다른 테넌트에 간섭을 하는 혼란이 발생하지 않도록 해야 합니다.
 
 이 튜토리얼은 클러스터가 동적으로 퍼시스턴트볼륨을 프로비저닝하도록 구성한다고 가정한다.
 그렇게 설정되어 있지 않다면
@@ -37,15 +37,15 @@ weight: 40
 
 이 튜토리얼을 마치면 다음에 대해 알게 된다.
 
--   어떻게 스테이트풀셋을 이용하여 ZooKeeper 앙상블을 배포하는가.
--   어떻게 앙상블을 일관되게 설정하는가.
--   어떻게 ZooKeeper 서버 디플로이먼트를 앙상블 안에서 퍼뜨리는가.
--   어떻게 PodDisruptionBudget을 이용하여 계획된 점검 기간 동안 서비스 가용성을 보장하는가.
+- 어떻게 스테이트풀셋을 이용하여 ZooKeeper 앙상블을 배포하는가.
+- 어떻게 앙상블을 일관되게 설정하는가.
+- 어떻게 ZooKeeper 서버 디플로이먼트를 앙상블 안에서 퍼뜨리는가.
+- 어떻게 PodDisruptionBudget을 이용하여 계획된 점검 기간 동안 서비스 가용성을 보장하는가.
 
 
 <!-- lessoncontent -->
 
-### ZooKeeper 기본 {#zookeeper-basics}
+### ZooKeeper
 
 [아파치 ZooKeeper](https://zookeeper.apache.org/doc/current/)는
 분산 애플리케이션을 위한 분산 오픈 소스 코디네이션 서비스이다.
@@ -438,8 +438,8 @@ datadir-zk-2   Bound     pvc-bee0817e-bcb1-11e6-994f-42010a800002   20Gi       R
 
 ```shell
 volumeMounts:
-        - name: datadir
-          mountPath: /var/lib/zookeeper
+- name: datadir
+  mountPath: /var/lib/zookeeper
 ```
 
 `zk` 스테이트풀셋이 (재)스케줄링될 때 항상 동일한 `퍼시스턴트볼륨`을
@@ -462,6 +462,7 @@ ZooKeeper 앙상블에 서버는 리더 선출과 쿼럼을 구성하기 위한
 ```shell
 kubectl get sts zk -o yaml
 ```
+
 ```
 …
 command:
@@ -551,11 +552,9 @@ kubectl logs zk-0 --tail 20
 2016-12-06 19:34:46,230 [myid:1] - INFO  [Thread-1142:NIOServerCnxn@1008] - Closed socket connection for client /127.0.0.1:52768 (no session established for client)
 ```
 
-쿠버네티스는 더 강력하지만 조금 복잡한 로그 통합을
-[스택드라이버](/docs/tasks/debug-application-cluster/logging-stackdriver/)와
-[Elasticsearch와 Kibana](/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana/)를 지원한다.
-클러스터 수준의 로그 적재(ship)와 통합을 위해서는 로그 순환과 적재를 위해
-[사이드카](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns) 컨테이너를 배포하는 것을 고려한다.
+쿠버네티스는 많은 로그 솔루션과 통합된다. 클러스터와 애플리케이션에
+가장 적합한 로그 솔루션을 선택할 수 있다. 클러스터 수준의
+로그 적재(ship)와 통합을 위해서는 로그 순환과 적재를 위해 [사이드카 컨테이너](/ko/docs/concepts/cluster-administration/logging/#로깅-에이전트와-함께-사이드카-컨테이너-사용)를 배포하는 것을 고려한다.
 
 ### 권한 없는 사용자를 위해 구성하기
 
@@ -623,6 +622,7 @@ drwxr-sr-x 3 zookeeper zookeeper 4096 Dec  5 20:45 /var/lib/zookeeper/data
 ```shell
 kubectl patch sts zk --type='json' -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/resources/requests/cpu", "value":"0.3"}]'
 ```
+
 ```
 statefulset.apps/zk patched
 ```
@@ -632,6 +632,7 @@ statefulset.apps/zk patched
 ```shell
 kubectl rollout status sts/zk
 ```
+
 ```
 waiting for statefulset rolling update to complete 0 pods at revision zk-5db4499664...
 Waiting for 1 pods to be ready...
@@ -872,8 +873,8 @@ kubernetes-node-2g2d
 
 ## 생존 유지
 
-**이 섹션에서는 노드를 통제(cordon)하고 비운다(drain). 공유된 클러스터에서 이 튜토리얼을 진행한다면,
-다른 테넌트에 부정적인 영향을 비치지 않음을 보증해야 한다.**
+이 섹션에서는 노드를 통제(cordon)하고 비운다(drain). 공유된 클러스터에서 이 튜토리얼을 진행한다면,
+다른 테넌트에 부정적인 영향을 비치지 않음을 보증해야 한다.
 
 이전 섹션은 계획되지 않은 노드 실패에서 살아남도록
 어떻게 파드를 확산할 것인가에 대해 알아보았다.
@@ -1008,6 +1009,7 @@ zk-1      0/1       Pending   0         0s
 ```shell
 kubectl drain $(kubectl get pod zk-2 --template {{.spec.nodeName}}) --ignore-daemonsets --force --delete-local-data
 ```
+
 ```
 node "kubernetes-node-i4c4" cordoned
 
@@ -1051,6 +1053,7 @@ numChildren = 0
 ```shell
 kubectl uncordon kubernetes-node-pb41
 ```
+
 ```
 node "kubernetes-node-pb41" uncordoned
 ```
@@ -1060,6 +1063,7 @@ node "kubernetes-node-pb41" uncordoned
 ```shell
 kubectl get pods -w -l app=zk
 ```
+
 ```
 NAME      READY     STATUS    RESTARTS   AGE
 zk-0      1/1       Running   2          1h
@@ -1125,7 +1129,6 @@ drain으로 노드를 통제하고 유지보수를 위해 노드를 오프라인
 
 
 - `kubectl uncordon`은 클러스터 내에 모든 노드를 통제 해제한다.
-- 이 튜토리얼에서 사용한 퍼시스턴트 볼륨을 위한
-  퍼시스턴트 스토리지 미디어를 삭제하자.
+- 반드시 이 튜토리얼에서 사용한 퍼시스턴트 볼륨을 위한 퍼시스턴트 스토리지 미디어를 삭제하자.
   귀하의 환경과 스토리지 구성과 프로비저닝 방법에서 필요한 절차를 따라서
   모든 스토리지가 재확보되도록 하자.
diff --git a/content/ko/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md b/content/ko/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
deleted file mode 100644
index faf5fd5303..0000000000
--- a/content/ko/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
+++ /dev/null
@@ -1,457 +0,0 @@
----
-title: "예제: PHP / Redis 방명록 예제에 로깅과 메트릭 추가"
-content_type: tutorial
-weight: 21
-card:
-  name: tutorials
-  weight: 31
-  title: "예제: PHP / Redis 방명록 예제에 로깅과 메트릭 추가"
----
-
-<!-- overview -->
-이 튜토리얼은 [Redis를 이용한 PHP 방명록](/ko/docs/tutorials/stateless-application/guestbook) 튜토리얼을 기반으로 한다. Elastic의 경량 로그, 메트릭, 네트워크 데이터 오픈소스 배송기인 *Beats* 를 방명록과 동일한 쿠버네티스 클러스터에 배포한다. Beats는 데이터를 수집하고 구문분석하여 Elasticsearch에 색인화하므로, Kibana에서 동작 정보를 결과로 보며 분석할 수 있다. 이 예시는 다음과 같이 구성되어 있다.
-
-* [Redis를 이용한 PHP 방명록](/ko/docs/tutorials/stateless-application/guestbook)을 실행한 인스턴스
-* Elasticsearch와 Kibana
-* Filebeat
-* Metricbeat
-* Packetbeat
-
-## {{% heading "objectives" %}}
-
-* Redis를 이용한 PHP 방명록 시작.
-* kube-state-metrics 설치.
-* 쿠버네티스 시크릿 생성.
-* Beats 배포.
-* 로그와 메트릭의 대시보드 보기.
-
-## {{% heading "prerequisites" %}}
-
-
-{{< include "task-tutorial-prereqs.md" >}}
-{{< version-check >}}
-
-추가로 다음이 필요하다.
-
-* 실행 중인 [Redis를 이용한 PHP 방명록](/ko/docs/tutorials/stateless-application/guestbook) 튜토리얼의 배포본.
-
-* 실행 중인 Elasticsearch와 Kibana 디플로이먼트. [Elastic Cloud의 Elasticsearch 서비스](https://cloud.elastic.co)를 사용하거나,
-  [파일을 내려받아](https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-elastic-stack.html)
-  워크스테이션이나 서버에서 운영하거나, [Elastic의 Helm 차트](https://github.com/elastic/helm-charts)를 이용한다.
-
-
-
-<!-- lessoncontent -->
-
-## Redis를 이용한 PHP 방명록 시작
-
-이 튜토리얼은 [Redis를 이용한 PHP 방명록](/ko/docs/tutorials/stateless-application/guestbook)을 기반으로 한다. 방명록 애플리케이션을 실행 중이라면, 이를 모니터링할 수 있다. 실행되지 않은 경우라면 지침을 따라 방명록을 배포하고 **정리하기** 단계는 수행하지 말자. 방명록을 실행할 때 이 페이지로 돌아오자.
-
-## 클러스터 롤 바인딩 추가
-
-[클러스터 단위 롤 바인딩](/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding)을 생성하여, 클러스터 수준(kube-system 안에)으로 kube-state-metrics와 Beats를 배포할 수 있게 한다.
-
-```shell
-kubectl create clusterrolebinding cluster-admin-binding \
- --clusterrole=cluster-admin --user=<your email associated with the k8s provider account>
-```
-
-## kube-state-metrics 설치
-
-[*kube-state-metrics*](https://github.com/kubernetes/kube-state-metrics)는 쿠버네티스 API 서버를 모니터링하며 오브젝트 상태에 대한 메트릭을 생성하는 간단한 서비스이다. 이런 메트릭을 Metricbeat이 보고한다. 방명록이 실행된 쿠버네티스 클러스터에서 kube-state-metrics을 추가한다.
-
-```shell
-git clone https://github.com/kubernetes/kube-state-metrics.git kube-state-metrics
-kubectl apply -f kube-state-metrics/examples/standard
-```
-
-### kube-state-metrics 실행 여부 확인
-
-```shell
-kubectl get pods --namespace=kube-system -l app.kubernetes.io/name=kube-state-metrics
-```
-
-출력
-
-```
-NAME                                 READY   STATUS    RESTARTS   AGE
-kube-state-metrics-89d656bf8-vdthm   1/1     Running     0          21s
-```
-
-## Elastic의 예제를 GitHub 리포지터리에 클론한다.
-
-```shell
-git clone https://github.com/elastic/examples.git
-```
-
-나머지 커맨드는 `examples/beats-k8s-send-anywhere` 디렉터리의 파일을 참조할 것이라서, 그쪽으로 현재 디렉터리를 변경한다.
-
-```shell
-cd examples/beats-k8s-send-anywhere
-```
-
-## 쿠버네티스 시크릿 만들기
-
-쿠버네티스 {{< glossary_tooltip text="시크릿" term_id="secret" >}}은 암호나 토큰, 키 같이 소량의 민감한 데이터를 포함하는 오브젝트이다. 이러한 정보는 다른 방식으로도 파드 스펙이나 이미지에 넣을 수 있을 것이다. 시크릿 오브젝트에 넣으면 이것이 어떻게 사용되는지 다양하게 제어할 수 있고, 우발적인 노출 사고의 위험이 줄일 수 있다.
-
-{{< note >}}
-여기에는 방식이 나뉘는데, 하나는 *자체 관리(Self managed)* 로 Elasticsearch와 Kibana(Elastic의 Helm 차트를 이용하여 사용자 서버를 구동하는)를 사용하는 경우이고 다른 경우는 Elastic Cloud의 Elasticsearch 서비스의 *관리 서비스(Managed service)* 를 사용하는 방식이다. 이 튜토리얼에서는 사용할 Elasticsearch와 Kibana 시스템의 종류에 따라 시크릿을 만들어야 한다.
-{{< /note >}}
-
-{{< tabs name="tab_with_md" >}}
-{{% tab name="자체 관리(Self Managed)" %}}
-
-### 자체 관리
-
-Elastic Cloud의 Elasticsearch 서비스로 연결한다면 **관리 서비스** 탭으로 전환한다.
-
-### 자격증명(credentials) 설정
-
-자체 관리 Elasticsearch와 Kibana(자체 관리는 사실상 Elastic Cloud의 관리 서비스 Elasticsearch와 다르다) 서비스에 접속할 때에 4개 파일을 수정하여 쿠버네티스 시크릿을 생성한다. 파일은 다음과 같다.
-
-1. `ELASTICSEARCH_HOSTS`
-1. `ELASTICSEARCH_PASSWORD`
-1. `ELASTICSEARCH_USERNAME`
-1. `KIBANA_HOST`
-
-이 정보를 Elasticsearch 클러스터와 Kibana 호스트에 지정한다. 여기 예시(또는 [*이 구성*](https://stackoverflow.com/questions/59892896/how-to-connect-from-minikube-to-elasticsearch-installed-on-host-local-developme/59892897#59892897)을 본다)가 있다.
-
-#### `ELASTICSEARCH_HOSTS`
-
-1. Elastic의 Elasticsearch Helm 차트에서 노드 그룹(nodeGroup).
-
-   ```
-   ["http://elasticsearch-master.default.svc.cluster.local:9200"]
-   ```
-
-1. Mac을 위한 Docker에서 Beats를 운영 중인 Mac에서 운영하는 단일 Elasticsearch 노드.
-
-   ```
-   ["http://host.docker.internal:9200"]
-   ```
-
-1. VM이나 물리 장비에서 운영 중인 두 개의 ELASTICSEARCH 노드.
-
-   ```
-   ["http://host1.example.com:9200", "http://host2.example.com:9200"]
-   ```
-
-`ELASTICSEARCH_HOSTS` 를 수정한다.
-
-```shell
-vi ELASTICSEARCH_HOSTS
-```
-
-#### `ELASTICSEARCH_PASSWORD`
-화이트 스페이스나 인용 부호나 `<` 또는 `>` 도 없는 암호이다.
-
-```
-<사용자시크릿암호>
-```
-
-`ELASTICSEARCH_PASSWORD` 를 수정한다.
-
-```shell
-vi ELASTICSEARCH_PASSWORD
-```
-
-#### `ELASTICSEARCH_USERNAME`
-화이트 스페이스나 인용 부호나 `<` 또는 `>` 도 없는 이름이다.
-
-```
-<Elasticsearch를 위한 수집 사용자 이름>
-```
-
-`ELASTICSEARCH_USERNAME` 을 수정한다.
-
-```shell
-vi ELASTICSEARCH_USERNAME
-```
-
-#### `KIBANA_HOST`
-
-1.Elastic의 Kibana Helm 차트의 인스턴스이다. 하위 도메인 `default`는 기본 네임스페이스를 참조한다. 다른 네임스페이스를 사용하여 Helm 차트를 배포한 경우 하위 도메인이 다릅니다.
-
-   ```
-   "kibana-kibana.default.svc.cluster.local:5601"
-   ```
-
-1. Mac 용 Docker에서 실행하는 Beats가 있는 Mac에서 실행하는 Kibana 인스턴스
-
-   ```
-   "host.docker.internal:5601"
-   ```
-1. 가상머신이나 물리적 하드웨어에서 실행 중인 두 개의 Elasticsearch 노드
-
-   ```
-   "host1.example.com:5601"
-   ```
-
-`KIBANA_HOST` 를 편집한다.
-
-```shell
-vi KIBANA_HOST
-```
-
-### 쿠버네티스 시크릿 만들기
-
-이 커맨드는 방금 편집한 파일을 기반으로 쿠버네티스의 시스템 수준의 네임스페이스(`kube-system`)에 시크릿을 만든다.
-
-```shell
-kubectl create secret generic dynamic-logging \
-  --from-file=./ELASTICSEARCH_HOSTS \
-  --from-file=./ELASTICSEARCH_PASSWORD \
-  --from-file=./ELASTICSEARCH_USERNAME \
-  --from-file=./KIBANA_HOST \
-  --namespace=kube-system
-```
-
-{{% /tab %}}
-{{% tab name="관리 서비스(Managed service)" %}}
-
-## 관리 서비스
-
-이 탭은 Elastic Cloud에서 Elasticsearch 서비스 만에 대한 것으로, 이미 자체 관리 Elasticsearch와 Kibana 배포로 시크릿을 생성했다면, [Beats 배포](#deploy-the-beats)를 계속한다.
-
-### 자격증명(credentials) 설정
-
-Elastic Cloud에서 관리되는 Elastic 서비스에 연결할 때, 쿠버네티스 시크릿을 생성하기 위해 편집할 두 파일이 있다. 파일은 다음과 같다.
-
-1. `ELASTIC_CLOUD_AUTH`
-1. `ELASTIC_CLOUD_ID`
-
-디플로이먼트를 생성할 때에 Elasticsearch 콘솔에서 제공한 정보로 이를 설정한다. 여기 예시들이 있다.
-
-#### `ELASTIC_CLOUD_ID`
-
-```
-devk8s:ABC123def456ghi789jkl123mno456pqr789stu123vwx456yza789bcd012efg345hijj678klm901nop345zEwOTJjMTc5YWQ0YzQ5OThlN2U5MjAwYTg4NTIzZQ==
-```
-
-#### `ELASTIC_CLOUD_AUTH`
-
-사용자 이름, 콜론(`:`) 및 비밀번호인데, 공백 또는 따옴표는 없다.
-
-```
-elastic:VFxJJf9Tjwer90wnfTghsn8w
-```
-
-### 필요 파일 편집하기
-
-```shell
-vi ELASTIC_CLOUD_ID
-vi ELASTIC_CLOUD_AUTH
-```
-
-### 쿠버네티스 시크릿 생성하기
-
-이 커맨드는 방금 편집한 파일을 기반으로 쿠버네티스의 시스템 수준의 네임스페이스(`kube-system`)에 시크릿을 생성한다.
-
-```shell
-kubectl create secret generic dynamic-logging \
-  --from-file=./ELASTIC_CLOUD_ID \
-  --from-file=./ELASTIC_CLOUD_AUTH \
-  --namespace=kube-system
-```
-
-{{% /tab %}}
-{{< /tabs >}}
-
-## Beats 배포하기 {#deploy-the-beats}
-
-각 Beat마다 메니페스트 파일을 제공한다. 이 메니페스트 파일은 앞서 생성한 시크릿을 사용하여, Elasticsearch 및 Kibana 서버에 연결하도록 Beats를 구성한다.
-
-### Filebeat에 대해
-
-Filebeat는 쿠버네티스 노드와 해당 노두에서 실행되는 각 파드에서 실행되는 컨테이너의 로그를 수집한다. Filebeat는 {{< glossary_tooltip text="데몬 셋" term_id="daemonset" >}}으로 배포한다. Filebeat는 쿠버네티스 클러스터에서 실행 중인 애플리케이션을 자동 검색할 수 있다. 시작시에 Filebeat는 기존 컨테이너를 검색하고 이에 적절한 구성을 시작하고 새 시작/종료 이벤트를 감시한다.
-
-아래 내용은 Filebeat가 방명록 애플리케이션과 함께 배포된 Redis 컨테이너에서 Redis 로그를 찾아 구문분석할 수 있게 하는 자동 검색 구성이다. 이 구성은 `filebeat-kubernetes.yaml`파일에 있다.
-
-```yaml
-- condition.contains:
-    kubernetes.labels.app: redis
-  config:
-    - module: redis
-      log:
-        input:
-          type: docker
-          containers.ids:
-            - ${data.kubernetes.container.id}
-      slowlog:
-        enabled: true
-        var.hosts: ["${data.host}:${data.port}"]
-```
-
-이것은 `redis` 컨테이너가 `app` 문자열을 포함하는 레이블로 감지될 때에 Filebeat 모듈 `redis`를 적용하도록 Filebeat를 구성한다. Redis 모듈은 Docker 입력 유형을 사용하여 컨테이너에서 `로그` 스트림을 수집할 수 있다(이 Redis 컨테이너의 STDOUT 스트림과 연관된 쿠버네티스 노드에서 파일 읽기). 또한 이 모듈은 컨테이너 메타 데이터에 제공되는 적절한 파드 호스트와 포트에 연결하여 Redis의 `slowlog` 항목을 수집할 수 있다.
-
-### Filebeat 배포
-
-```shell
-kubectl create -f filebeat-kubernetes.yaml
-```
-
-#### 확인
-
-```shell
-kubectl get pods -n kube-system -l k8s-app=filebeat-dynamic
-```
-
-### Metricbeat에 대해
-
-Metricbeat 자동 검색은 Filebeat와 같은 방식으로 구성된다. 다음은 Redis 컨테이너에 대한 Metricbeat의 자동 검색 구성이다. 이 구성은 `metricbeat-kubernetes.yaml`에 있다.
-
-```yaml
-- condition.equals:
-    kubernetes.labels.tier: backend
-  config:
-    - module: redis
-      metricsets: ["info", "keyspace"]
-      period: 10s
-
-      # Redis hosts
-      hosts: ["${data.host}:${data.port}"]
-```
-
-이것은 컨테이너가 `tier` 레이블이 `backend` 문자열과 같은 레이블로 감지될 때에 Metricbeat 모듈 `redis`를 적용하도록 Metricbeat를 구성한다. `redis` 모듈은 컨테이너 메타데이터에 제공되는 적절한 파드 호스트와 포트에 연결하여 컨테이너에서 `info` 및 `keyspace` 메트릭을 수집할 수 있다.
-
-### Metricbeat 배포
-
-```shell
-kubectl create -f metricbeat-kubernetes.yaml
-```
-
-#### 확인
-
-```shell
-kubectl get pods -n kube-system -l k8s-app=metricbeat
-```
-
-### Packetbeat에 대해
-
-Packetbeat 구성은 Filebeat와 Metricbeat와는 다르다. 컨테이너 레이블과 일치시킬 패턴을 지정하지 않고, 구성은 관련 프로토콜 및 포트 번호를 기반으로 한다. 아래는 포트 번호의 하위 집합이다.
-
-{{< note >}}
-비표준 포트로 서비스를 실행했다면 해당 포트를 `filebeat.yaml`에 적절한 유형에 추가하고, Packetbeat 데몬 셋을 삭제하고 생성한다.
-{{< /note >}}
-
-```yaml
-packetbeat.interfaces.device: any
-
-packetbeat.protocols:
-- type: dns
-  ports: [53]
-  include_authorities: true
-  include_additionals: true
-
-- type: http
-  ports: [80, 8000, 8080, 9200]
-
-- type: mysql
-  ports: [3306]
-
-- type: redis
-  ports: [6379]
-
-packetbeat.flows:
-  timeout: 30s
-  period: 10s
-```
-
-#### Packetbeat 배포하기
-
-```shell
-kubectl create -f packetbeat-kubernetes.yaml
-```
-
-#### 확인하기
-
-```shell
-kubectl get pods -n kube-system -l k8s-app=packetbeat-dynamic
-```
-
-## Kibana에서 보기
-
-브라우저에서 Kibana를 열고, **대시보드** 애플리케이션을 열어보자. 검색창에 kubernetes를 입력하고 쿠버네티스를 위한 Metricbeat 대시보드를 클릭한다. 이 대시보드에는 노드 상태, 배포 등의 보고 내용이 있다.
-
-대시보드 페이지에 Packetbeat를 검색하고 Packetbeat의 개요 페이지를 살펴보자.
-
-마찬가지로 Apache와 Redis를 위한 대시보드를 확인한다. 각 로그와 메트릭에 대한 대시보드가 표시된다. 이 Apache Metricbeat 대시보드는 비어 있다. Apache Filebeat 대시보드를 보고, 맨 아래로 스크롤하여 Apache 오류 로그를 확인한다. Apache에서 보여줄 메트릭이 없는 이유를 알려줄 것이다.
-
-Metricbeat에서 Apache 메트릭을 가져올 수 있게 하려면, mod-status 구성 파일을 포함한 컨피그맵을 추가하고 방명록을 재배포하여 서버 상태를 활성화해야 한다.
-
-
-## 디플로이먼트를 확장하고 모니터링중인 새 파드를 확인하기
-
-기존 디플로이먼트를 확인한다.
-
-```shell
-kubectl get deployments
-```
-
-출력
-
-```
-NAME            READY   UP-TO-DATE   AVAILABLE   AGE
-frontend        3/3     3            3           3h27m
-redis-master    1/1     1            1           3h27m
-redis-slave     2/2     2            2           3h27m
-```
-
-front의 디플로이먼트를 두 개의 파드로 축소한다.
-
-```shell
-kubectl scale --replicas=2 deployment/frontend
-```
-
-출력
-
-```
-deployment.extensions/frontend scaled
-```
-
-frontend의 파드를 최대 3개의 파드로 확장한다.
-
-```shell
-kubectl scale --replicas=3 deployment/frontend
-```
-
-## Kibana에서 변화 확인하기
-
-스크린 캡처를 확인하여, 표시된 필터를 추가하고 해당 열을 뷰에 추가한다. ScalingReplicaSet 항목이 표시되고, 여기에서 이벤트 목록의 맨 위에 풀링되는 이미지, 마운트된 볼륨, 파드 시작 등을 보여준다.
-![Kibana 디스커버리](https://raw.githubusercontent.com/elastic/examples/master/beats-k8s-send-anywhere/scaling-up.png)
-
-## {{% heading "cleanup" %}}
-
-디플로이먼트와 서비스를 삭제하면 실행중인 파드도 삭제된다. 한 커맨드로 여러 개의 리소스를 삭제하기 위해 레이블을 이용한다.
-
-1. 다음 커맨드를 실행하여 모든 파드, 디플로이먼트, 서비스를 삭제한다.
-
-   ```shell
-   kubectl delete deployment -l app=redis
-   kubectl delete service -l app=redis
-   kubectl delete deployment -l app=guestbook
-   kubectl delete service -l app=guestbook
-   kubectl delete -f filebeat-kubernetes.yaml
-   kubectl delete -f metricbeat-kubernetes.yaml
-   kubectl delete -f packetbeat-kubernetes.yaml
-   kubectl delete secret dynamic-logging -n kube-system
-   ```
-
-1. 실행 중인 파드가 없음을 확인하기 위해 파드 목록을 조회한다.
-
-   ```shell
-   kubectl get pods
-   ```
-
-   출력은 다음과 같아야 한다.
-
-   ```
-   No resources found.
-   ```
-
-## {{% heading "whatsnext" %}}
-
-* [리소스 모니터링 도구](/ko/docs/tasks/debug-application-cluster/resource-usage-monitoring/)를 공부한다.
-* [로깅 아키텍처](/ko/docs/concepts/cluster-administration/logging/)를 더 읽어본다.
-* [애플리케이션 검사 및 디버깅](/ko/docs/tasks/debug-application-cluster/)을 더 읽어본다.
-* [애플리케이션 문제 해결](/ko/docs/tasks/debug-application-cluster/resource-usage-monitoring/)을 더 읽어본다.
diff --git a/content/ko/docs/tutorials/stateless-application/guestbook.md b/content/ko/docs/tutorials/stateless-application/guestbook.md
index cce67800a6..c91ecd2e1b 100644
--- a/content/ko/docs/tutorials/stateless-application/guestbook.md
+++ b/content/ko/docs/tutorials/stateless-application/guestbook.md
@@ -1,26 +1,25 @@
 ---
-title: "예시: Redis를 사용한 PHP 방명록 애플리케이션 배포하기"
+title: "예시: MongoDB를 사용한 PHP 방명록 애플리케이션 배포하기"
 content_type: tutorial
 weight: 20
 card:
   name: tutorials
   weight: 30
-  title: "상태를 유지하지 않는 예제: Redis를 사용한 PHP 방명록"
+  title: "상태를 유지하지 않는 예제: MongoDB를 사용한 PHP 방명록"
+min-kubernetes-server-version: v1.14
 ---
 
 <!-- overview -->
-이 튜토리얼에서는 쿠버네티스와 [Docker](https://www.docker.com/)를 사용하여 간단한 멀티 티어 웹 애플리케이션을 빌드하고 배포하는 방법을 보여준다. 이 예제는 다음과 같은 구성으로 이루어져 있다.
+이 튜토리얼에서는 쿠버네티스와 [Docker](https://www.docker.com/)를 사용하여 간단한 _(운영 준비가 아닌)_ 멀티 티어 웹 애플리케이션을 빌드하고 배포하는 방법을 보여준다. 이 예제는 다음과 같은 구성으로 이루어져 있다.
 
-* 방명록을 저장하는 단일 인스턴스 [Redis](https://redis.io/) 마스터
-* 읽기를 제공하는 여러 개의 [복제된 Redis](https://redis.io/topics/replication) 인스턴스
+* 방명록을 저장하는 단일 인스턴스 [MongoDB](https://www.mongodb.com/)
 * 여러 개의 웹 프론트엔드 인스턴스
 
 
 
 ## {{% heading "objectives" %}}
 
-* Redis 마스터를 시작
-* Redis 슬레이브를 시작
+* Mongo 데이터베이스를 시작
 * 방명록 프론트엔드를 시작
 * 프론트엔드 서비스를 노출하고 확인
 * 정리 하기
@@ -37,24 +36,28 @@ card:
 
 <!-- lessoncontent -->
 
-## Redis 마스터를 실행하기
+## Mongo 데이터베이스를 실행
 
-방명록 애플리케이션은 Redis를 사용하여 데이터를 저장한다. Redis 마스터 인스턴스에 데이터를 기록하고 여러 Redis 슬레이브 인스턴스에서 데이터를 읽는다.
+방명록 애플리케이션은 MongoDB를 사용해서 데이터를 저장한다.
 
-### Redis 마스터의 디플로이먼트를 생성하기
+### Mongo 디플로이먼트를 생성하기
 
-아래의 매니페스트 파일은 단일 복제본 Redis 마스터 파드를 실행하는 디플로이먼트 컨트롤러를 지정한다.
+아래의 매니페스트 파일은 단일 복제본 Mongo 파드를 실행하는 디플로이먼트 컨트롤러를 지정한다.
 
-{{< codenew file="application/guestbook/redis-master-deployment.yaml" >}}
+{{< codenew file="application/guestbook/mongo-deployment.yaml" >}}
 
 1. 매니페스트 파일을 다운로드한 디렉터리에서 터미널 창을 시작한다.
-1. `redis-master-deployment.yaml` 파일을 통해 Redis 마스터의 디플로이먼트에 적용한다.
+1. `mongo-deployment.yaml` 파일을 통해 MongoDB 디플로이먼트에 적용한다.
 
       ```shell
-      kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-deployment.yaml
+      kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-deployment.yaml
       ```
+<!--
+컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
+kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.yaml
+-->
 
-1. 파드의 목록을 질의하여 Redis 마스터 파드가 실행 중인지 확인한다.
+1. 파드의 목록을 질의하여 MongoDB 파드가 실행 중인지 확인한다.
 
       ```shell
       kubectl get pods
@@ -64,32 +67,32 @@ card:
 
       ```shell
       NAME                            READY     STATUS    RESTARTS   AGE
-      redis-master-1068406935-3lswp   1/1       Running   0          28s
+      mongo-5cfd459dd4-lrcjb          1/1       Running   0          28s
       ```
 
-1. Redis 마스터 파드에서 로그를 보려면 다음 명령어를 실행한다.
+2. MongoDB 파드에서 로그를 보려면 다음 명령어를 실행한다.
 
      ```shell
-     kubectl logs -f POD-NAME
+     kubectl logs -f deployment/mongo
      ```
 
-{{< note >}}
-POD-NAME을 해당 파드 이름으로 수정해야 한다.
-{{< /note >}}
+### MongoDB 서비스 생성하기
 
-### Redis 마스터 서비스 생성하기
+방명록 애플리케이션에서 데이터를 쓰려면 MongoDB와 통신해야 한다. MongoDB 파드로 트래픽을 프록시하려면 [서비스](/ko/docs/concepts/services-networking/service/)를 적용해야 한다. 서비스는 파드에 접근하기 위한 정책을 정의한다.
 
-방명록 애플리케이션에서 데이터를 쓰려면 Redis 마스터와 통신해야 한다. Redis 마스터 파드로 트래픽을 프록시하려면 [서비스](/ko/docs/concepts/services-networking/service/)를 적용해야 한다. 서비스는 파드에 접근하기 위한 정책을 정의한다.
+{{< codenew file="application/guestbook/mongo-service.yaml" >}}
 
-{{< codenew file="application/guestbook/redis-master-service.yaml" >}}
-
-1. `redis-master-service.yaml` 파일을 통해 Redis 마스터 서비스에 적용한다.
+1. `mongo-service.yaml` 파일을 통해 MongoDB 서비스에 적용한다.
 
       ```shell
-      kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-service.yaml
+      kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
       ```
+<!--
+컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
+kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
+-->
 
-1. 서비스의 목록을 질의하여 Redis 마스터 서비스가 실행 중인지 확인한다.
+1. 서비스의 목록을 질의하여 MongoDB 서비스가 실행 중인지 확인한다.
 
       ```shell
       kubectl get service
@@ -100,77 +103,17 @@ POD-NAME을 해당 파드 이름으로 수정해야 한다.
       ```shell
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP    1m
-      redis-master   ClusterIP   10.0.0.151   <none>        6379/TCP   8s
+      mongo          ClusterIP   10.0.0.151   <none>        6379/TCP   8s
       ```
 
 {{< note >}}
-이 매니페스트 파일은 이전에 정의된 레이블과 일치하는 레이블 집합을 가진 `redis-master`라는 서비스를 생성하므로, 서비스는 네트워크 트래픽을 Redis 마스터 파드로 라우팅한다.
+이 매니페스트 파일은 이전에 정의된 레이블과 일치하는 레이블 집합을 가진 `mongo`라는 서비스를 생성하므로, 서비스는 네트워크 트래픽을 MongoDB 파드로 라우팅한다.
 {{< /note >}}
 
 
-## Redis 슬레이브 실행하기
-
-Redis 마스터는 단일 파드이지만, 복제된 Redis 슬레이브를 추가하여 트래픽 요구 사항을 충족시킬 수 있다.
-
-### Redis 슬레이브의 디플로이먼트 생성하기
-
-디플로이먼트는 매니페스트 파일에 설정된 구성에 따라 확장된다. 이 경우, 디플로이먼트 오브젝트는 두 개의 복제본을 지정한다.
-
-실행 중인 복제본이 없으면, 이 디플로이먼트는 컨테이너 클러스터에 있는 두 개의 복제본을 시작한다. 반대로 두 개 이상의 복제본이 실행 중이면, 두 개의 복제본이 실행될 때까지 축소된다.
-
-{{< codenew file="application/guestbook/redis-slave-deployment.yaml" >}}
-
-1. `redis-slave-deployment.yaml` 파일을 통해 Redis 슬레이브의 디플로이먼트에 적용한다.
-
-      ```shell
-      kubectl apply -f https://k8s.io/examples/application/guestbook/redis-slave-deployment.yaml
-      ```
-
-1. 파드의 목록을 질의하여 Redis 슬레이브 파드가 실행 중인지 확인한다.
-
-      ```shell
-      kubectl get pods
-      ```
-
-      결과는 아래와 같은 형태로 나타난다.
-
-      ```shell
-      NAME                            READY     STATUS              RESTARTS   AGE
-      redis-master-1068406935-3lswp   1/1       Running             0          1m
-      redis-slave-2005841000-fpvqc    0/1       ContainerCreating   0          6s
-      redis-slave-2005841000-phfv9    0/1       ContainerCreating   0          6s
-      ```
-
-### Redis 슬레이브 서비스 생성하기
-
-방명록 애플리케이션은 Redis 슬레이브와 통신하여 데이터를 읽는다. Redis 슬레이브를 확인할 수 있도록 하기 위해 서비스를 설정해야 한다. 서비스는 파드 집합에 투명한 로드 밸런싱을 제공한다.
-
-{{< codenew file="application/guestbook/redis-slave-service.yaml" >}}
-
-1. `redis-slave-service.yaml` 파일을 통해 Redis 슬레이브 서비스에 적용한다.
-
-      ```shell
-      kubectl apply -f https://k8s.io/examples/application/guestbook/redis-slave-service.yaml
-      ```
-
-1. 서비스의 목록을 질의하여 Redis 슬레이브 서비스가 실행 중인지 확인한다.
-
-      ```shell
-      kubectl get services
-      ```
-
-      결과는 아래와 같은 형태로 나타난다.
-
-      ```
-      NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
-      kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP    2m
-      redis-master   ClusterIP   10.0.0.151   <none>        6379/TCP   1m
-      redis-slave    ClusterIP   10.0.0.223   <none>        6379/TCP   6s
-      ```
-
 ## 방명록 프론트엔드를 설정하고 노출하기
 
-방명록 애플리케이션에는 PHP로 작성된 HTTP 요청을 처리하는 웹 프론트엔드가 있다. 쓰기 요청을 위한 `redis-master` 서비스와 읽기 요청을 위한 `redis-slave` 서비스에 연결하도록 설정된다.
+방명록 애플리케이션에는 PHP로 작성된 HTTP 요청을 처리하는 웹 프론트엔드가 있다. 방명록 항목들을 저장하기 위해 `mongo` 서비스에 연결하도록 구성 한다.
 
 ### 방명록 프론트엔드의 디플로이먼트 생성하기
 
@@ -182,6 +125,11 @@ Redis 마스터는 단일 파드이지만, 복제된 Redis 슬레이브를 추
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-deployment.yaml
       ```
 
+<!--
+컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
+kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment.yaml
+-->
+
 1. 파드의 목록을 질의하여 세 개의 프론트엔드 복제본이 실행되고 있는지 확인한다.
 
       ```shell
@@ -199,12 +147,12 @@ Redis 마스터는 단일 파드이지만, 복제된 Redis 슬레이브를 추
 
 ### 프론트엔드 서비스 생성하기
 
-서비스의 기본 유형은 [ClusterIP](/ko/docs/concepts/services-networking/service/#publishing-services-service-types)이기 때문에 적용한 redis-slave 및 redis-master 서비스는 컨테이너 클러스터 내에서만 접근할 수 있다. `ClusterIP`는 서비스가 가리키는 파드 집합에 대한 단일 IP 주소를 제공한다. 이 IP 주소는 클러스터 내에서만 접근할 수 있다.
+서비스의 기본 유형은 [ClusterIP](/ko/docs/concepts/services-networking/service/#publishing-services-service-types)이기 때문에 적용한 `mongo` 서비스는 컨테이너 클러스터 내에서만 접근할 수 있다. `ClusterIP`는 서비스가 가리키는 파드 집합에 대한 단일 IP 주소를 제공한다. 이 IP 주소는 클러스터 내에서만 접근할 수 있다.
 
-게스트가 방명록에 접근할 수 있도록 하려면, 외부에서 볼 수 있도록 프론트엔드 서비스를 구성해야 한다. 그렇게 하면 클라이언트가 컨테이너 클러스터 외부에서 서비스를 요청할 수 있다. Minikube는 `NodePort`를 통해서만 서비스를 노출할 수 있다.
+게스트가 방명록에 접근할 수 있도록 하려면, 외부에서 볼 수 있도록 프론트엔드 서비스를 구성해야 한다. 그렇게 하면 클라이언트가 쿠버네티스 클러스터 외부에서 서비스를 요청할 수 있다. 그러나 쿠버네티스 사용자는 `ClusterIP`를 사용하더라도 `kubectl port-forward`를 사용해서 서비스에 접근할 수 있다.
 
 {{< note >}}
-Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우드 공급자는 외부 로드 밸런서를 지원한다. 클라우드 공급자가 로드 밸런서를 지원하고 이를 사용하려면 `type : NodePort`를 삭제하거나 주석 처리하고 `type : LoadBalancer`의 주석을 제거해야 한다.
+Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우드 공급자는 외부 로드 밸런서를 지원한다. 클라우드 공급자가 로드 밸런서를 지원하고 이를 사용하려면 `type : LoadBalancer`의 주석을 제거해야 한다.
 {{< /note >}}
 
 {{< codenew file="application/guestbook/frontend-service.yaml" >}}
@@ -215,6 +163,11 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-service.yaml
       ```
 
+<!--
+컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
+kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.yaml
+-->
+
 1. 서비스의 목록을 질의하여 프론트엔드 서비스가 실행 중인지 확인한다.
 
       ```shell
@@ -225,29 +178,27 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
 
       ```
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)        AGE
-      frontend       NodePort    10.0.0.112   <none>       80:31323/TCP   6s
+      frontend       ClusterIP   10.0.0.112   <none>       80/TCP   6s
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP        4m
-      redis-master   ClusterIP   10.0.0.151   <none>        6379/TCP       2m
-      redis-slave    ClusterIP   10.0.0.223   <none>        6379/TCP       1m
+      mongo          ClusterIP   10.0.0.151   <none>        6379/TCP       2m
       ```
 
-### `NodePort`를 통해 프론트엔드 서비스 확인하기
+### `kubectl port-forward`를 통해 프론트엔드 서비스 확인하기
 
-애플리케이션을 Minikube 또는 로컬 클러스터에 배포한 경우, 방명록을 보려면 IP 주소를 찾아야 한다.
-
-1. 프론트엔드 서비스의 IP 주소를 얻기 위해 아래 명령어를 실행한다.
+1. 다음 명령어를 실행해서 로컬 머신의 `8080` 포트를 서비스의 `80` 포트로 전달한다.
 
       ```shell
-      minikube service frontend --url
+      kubectl port-forward svc/frontend 8080:80
       ```
 
       결과는 아래와 같은 형태로 나타난다.
 
       ```
-      http://192.168.99.100:31323
+      Forwarding from 127.0.0.1:8080 -> 80
+      Forwarding from [::1]:8080 -> 80
       ```
 
-1. IP 주소를 복사하고, 방명록을 보기 위해 브라우저에서 페이지를 로드한다.
+1. 방명록을 보기위해 브라우저에서 [http://localhost:8080](http://localhost:8080) 페이지를 로드한다.
 
 ### `LoadBalancer`를 통해 프론트엔드 서비스 확인하기
 
@@ -270,7 +221,7 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
 
 ## 웹 프론트엔드 확장하기
 
-서버가 디플로이먼트 컨트롤러를 사용하는 서비스로 정의되어 있기 때문에 확장 또는 축소가 쉽다.
+서버가 디플로이먼트 컨르롤러를 사용하는 서비스로 정의되어 있기에 필요에 따라 확장 또는 축소할 수 있다.
 
 1. 프론트엔드 파드의 수를 확장하기 위해 아래 명령어를 실행한다.
 
@@ -293,9 +244,7 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
       frontend-3823415956-k22zn       1/1       Running   0          54m
       frontend-3823415956-w9gbt       1/1       Running   0          54m
       frontend-3823415956-x2pld       1/1       Running   0          5s
-      redis-master-1068406935-3lswp   1/1       Running   0          56m
-      redis-slave-2005841000-fpvqc    1/1       Running   0          55m
-      redis-slave-2005841000-phfv9    1/1       Running   0          55m
+      mongo-1068406935-3lswp   1/1       Running   0          56m
       ```
 
 1. 프론트엔드 파드의 수를 축소하기 위해 아래 명령어를 실행한다.
@@ -316,9 +265,7 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
       NAME                            READY     STATUS    RESTARTS   AGE
       frontend-3823415956-k22zn       1/1       Running   0          1h
       frontend-3823415956-w9gbt       1/1       Running   0          1h
-      redis-master-1068406935-3lswp   1/1       Running   0          1h
-      redis-slave-2005841000-fpvqc    1/1       Running   0          1h
-      redis-slave-2005841000-phfv9    1/1       Running   0          1h
+      mongo-1068406935-3lswp   1/1       Running   0          1h
       ```
 
 
@@ -330,19 +277,18 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
 1. 모든 파드, 디플로이먼트, 서비스를 삭제하기 위해 아래 명령어를 실행한다.
 
       ```shell
-      kubectl delete deployment -l app=redis
-      kubectl delete service -l app=redis
-      kubectl delete deployment -l app=guestbook
-      kubectl delete service -l app=guestbook
+      kubectl delete deployment -l app.kubernetes.io/name=mongo
+      kubectl delete service -l app.kubernetes.io/name=mongo
+      kubectl delete deployment -l app.kubernetes.io/name=guestbook
+      kubectl delete service -l app.kubernetes.io/name=guestbook
       ```
 
       결과는 아래와 같은 형태로 나타난다.
 
       ```
-      deployment.apps "redis-master" deleted
-      deployment.apps "redis-slave" deleted
-      service "redis-master" deleted
-      service "redis-slave" deleted
+      deployment.apps "mongo" deleted
+      service "mongo" deleted
+      deployment.apps "frontend" deleted
       deployment.apps "frontend" deleted    
       service "frontend" deleted
       ```
@@ -363,7 +309,6 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
 
 ## {{% heading "whatsnext" %}}
 
-* [ELK 로깅과 모니터링](/ko/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk/)을 방명록 애플리케이션에 추가하기
 * [쿠버네티스 기초](/ko/docs/tutorials/kubernetes-basics/) 튜토리얼을 완료
 * [MySQL과 Wordpress을 위한 퍼시스턴트 볼륨](/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume/#visit-your-new-wordpress-blog)을 사용하여 블로그 생성하는데 쿠버네티스 이용하기
 * [애플리케이션 접속](/ko/docs/concepts/services-networking/connect-applications-service/)에 대해 더 알아보기
diff --git a/content/ko/examples/application/guestbook/frontend-deployment.yaml b/content/ko/examples/application/guestbook/frontend-deployment.yaml
index 23d64be644..613c654aa9 100644
--- a/content/ko/examples/application/guestbook/frontend-deployment.yaml
+++ b/content/ko/examples/application/guestbook/frontend-deployment.yaml
@@ -3,22 +3,24 @@ kind: Deployment
 metadata:
   name: frontend
   labels:
-    app: guestbook
+    app.kubernetes.io/name: guestbook
+    app.kubernetes.io/component: frontend
 spec:
   selector:
     matchLabels:
-      app: guestbook
-      tier: frontend
+      app.kubernetes.io/name: guestbook
+      app.kubernetes.io/component: frontend
   replicas: 3
   template:
     metadata:
       labels:
-        app: guestbook
-        tier: frontend
+        app.kubernetes.io/name: guestbook
+        app.kubernetes.io/component: frontend
     spec:
       containers:
-      - name: php-redis
-        image: gcr.io/google-samples/gb-frontend:v4
+      - name: guestbook
+        image: paulczar/gb-frontend:v5
+        # image: gcr.io/google-samples/gb-frontend:v4
         resources:
           requests:
             cpu: 100m
@@ -26,13 +28,5 @@ spec:
         env:
         - name: GET_HOSTS_FROM
           value: dns
-          # Using `GET_HOSTS_FROM=dns` requires your cluster to
-          # provide a dns service. As of Kubernetes 1.3, DNS is a built-in
-          # service launched automatically. However, if the cluster you are using
-          # does not have a built-in DNS service, you can instead
-          # access an environment variable to find the master
-          # service's host. To do so, comment out the 'value: dns' line above, and
-          # uncomment the line below:
-          # value: env
         ports:
         - containerPort: 80
diff --git a/content/ko/examples/application/guestbook/frontend-service.yaml b/content/ko/examples/application/guestbook/frontend-service.yaml
index 6f283f347b..34ad3771d7 100644
--- a/content/ko/examples/application/guestbook/frontend-service.yaml
+++ b/content/ko/examples/application/guestbook/frontend-service.yaml
@@ -3,16 +3,14 @@ kind: Service
 metadata:
   name: frontend
   labels:
-    app: guestbook
-    tier: frontend
+    app.kubernetes.io/name: guestbook
+    app.kubernetes.io/component: frontend
 spec:
-  # comment or delete the following line if you want to use a LoadBalancer
-  type: NodePort 
   # if your cluster supports it, uncomment the following to automatically create
   # an external load-balanced IP for the frontend service.
   # type: LoadBalancer
   ports:
   - port: 80
   selector:
-    app: guestbook
-    tier: frontend
+    app.kubernetes.io/name: guestbook
+    app.kubernetes.io/component: frontend
diff --git a/content/ko/examples/application/guestbook/mongo-deployment.yaml b/content/ko/examples/application/guestbook/mongo-deployment.yaml
new file mode 100644
index 0000000000..04908ce25b
--- /dev/null
+++ b/content/ko/examples/application/guestbook/mongo-deployment.yaml
@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mongo
+  labels:
+    app.kubernetes.io/name: mongo
+    app.kubernetes.io/component: backend
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: mongo
+      app.kubernetes.io/component: backend
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: mongo
+        app.kubernetes.io/component: backend
+    spec:
+      containers:
+      - name: mongo
+        image: mongo:4.2
+        args:
+          - --bind_ip
+          - 0.0.0.0
+        resources:
+          requests:
+            cpu: 100m
+            memory: 100Mi
+        ports:
+        - containerPort: 27017
diff --git a/content/ko/examples/application/guestbook/mongo-service.yaml b/content/ko/examples/application/guestbook/mongo-service.yaml
new file mode 100644
index 0000000000..b9cef607bc
--- /dev/null
+++ b/content/ko/examples/application/guestbook/mongo-service.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongo
+  labels:
+    app.kubernetes.io/name: mongo
+    app.kubernetes.io/component: backend
+spec:
+  ports:
+  - port: 27017
+    targetPort: 27017
+  selector:
+    app.kubernetes.io/name: mongo
+    app.kubernetes.io/component: backend
diff --git a/content/ko/examples/application/guestbook/redis-master-deployment.yaml b/content/ko/examples/application/guestbook/redis-master-deployment.yaml
deleted file mode 100644
index 478216d1ac..0000000000
--- a/content/ko/examples/application/guestbook/redis-master-deployment.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: redis-master
-  labels:
-    app: redis
-spec:
-  selector:
-    matchLabels:
-      app: redis
-      role: master
-      tier: backend
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        app: redis
-        role: master
-        tier: backend
-    spec:
-      containers:
-      - name: master
-        image: k8s.gcr.io/redis:e2e  # or just image: redis
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-        ports:
-        - containerPort: 6379
diff --git a/content/ko/examples/application/guestbook/redis-master-service.yaml b/content/ko/examples/application/guestbook/redis-master-service.yaml
deleted file mode 100644
index 65cef2191c..0000000000
--- a/content/ko/examples/application/guestbook/redis-master-service.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: redis-master
-  labels:
-    app: redis
-    role: master
-    tier: backend
-spec:
-  ports:
-  - name: redis
-    port: 6379
-    targetPort: 6379
-  selector:
-    app: redis
-    role: master
-    tier: backend
diff --git a/content/ko/examples/application/guestbook/redis-slave-deployment.yaml b/content/ko/examples/application/guestbook/redis-slave-deployment.yaml
deleted file mode 100644
index 1a7b04386a..0000000000
--- a/content/ko/examples/application/guestbook/redis-slave-deployment.yaml
+++ /dev/null
@@ -1,40 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: redis-slave
-  labels:
-    app: redis
-spec:
-  selector:
-    matchLabels:
-      app: redis
-      role: slave
-      tier: backend
-  replicas: 2
-  template:
-    metadata:
-      labels:
-        app: redis
-        role: slave
-        tier: backend
-    spec:
-      containers:
-      - name: slave
-        image: gcr.io/google_samples/gb-redisslave:v3
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-        env:
-        - name: GET_HOSTS_FROM
-          value: dns
-          # Using `GET_HOSTS_FROM=dns` requires your cluster to
-          # provide a dns service. As of Kubernetes 1.3, DNS is a built-in
-          # service launched automatically. However, if the cluster you are using
-          # does not have a built-in DNS service, you can instead
-          # access an environment variable to find the master
-          # service's host. To do so, comment out the 'value: dns' line above, and
-          # uncomment the line below:
-          # value: env
-        ports:
-        - containerPort: 6379
diff --git a/content/ko/examples/application/guestbook/redis-slave-service.yaml b/content/ko/examples/application/guestbook/redis-slave-service.yaml
deleted file mode 100644
index 238fd63fb6..0000000000
--- a/content/ko/examples/application/guestbook/redis-slave-service.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: redis-slave
-  labels:
-    app: redis
-    role: slave
-    tier: backend
-spec:
-  ports:
-  - port: 6379
-  selector:
-    app: redis
-    role: slave
-    tier: backend

From 4c3ff2f844c62198f1d070d0098a07e1244e1581 Mon Sep 17 00:00:00 2001
From: spy1233 <spy1233@gmail.com>
Date: Sun, 21 Feb 2021 23:08:41 +0900
Subject: [PATCH 041/788] Fix mistranslation in labels.md

---
 .../docs/concepts/overview/working-with-objects/labels.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/ko/docs/concepts/overview/working-with-objects/labels.md b/content/ko/docs/concepts/overview/working-with-objects/labels.md
index 1e0d86a97b..5d60c9f28f 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/labels.md
@@ -108,7 +108,7 @@ tier != frontend
 후자는 `tier`를 키로 가지고, 값을 `frontend`를 가지는 리소스를 제외한 모든 리소스를 선택하고, `tier`를 키로 가지며, 값을 공백으로 가지는 모든 리소스를 선택한다.
 `environment=production,tier!=frontend` 처럼 쉼표를 통해 한 문장으로 `frontend`를 제외한 `production`을 필터링할 수 있다.
 
-균등-기반 레이블의 요건에 대한 하나의 이용 시나리오는 파드가 노드를 선택하는 기준을 지정하는 것이다.
+일치성 기준 레이블 요건에 대한 하나의 이용 시나리오는 파드가 노드를 선택하는 기준을 지정하는 것이다.
 예를 들어, 아래 샘플 파드는 "`accelerator=nvidia-tesla-p100`" 레이블을 가진 노드를 선택한다.
 
 ```yaml
@@ -154,10 +154,10 @@ _집합성 기준_ 요건은 _일치성 기준_ 요건과 조합해서 사용할
 
 LIST와 WATCH 작업은 쿼리 파라미터를 사용해서 반환되는 오브젝트 집합을 필터링하기 위해 레이블 셀렉터를 지정할 수 있다. 다음의 2가지 요건 모두 허용된다(URL 쿼리 문자열을 그대로 표기함).
 
-  * _불일치 기준_ 요건: `?labelSelector=environment%3Dproduction,tier%3Dfrontend`
+  * _일치성 기준_ 요건: `?labelSelector=environment%3Dproduction,tier%3Dfrontend`
   * _집합성 기준_ 요건: `?labelSelector=environment+in+%28production%2Cqa%29%2Ctier+in+%28frontend%29`
 
-두 가지 레이블 셀렉터 스타일은 모두 REST 클라이언트를 통해 선택된 리소스를 확인하거나 목록을 볼 수 있다. 예를 들어, `kubectl`로 `apiserver`를 대상으로 _불일치 기준_ 으로 하는 셀렉터를 다음과 같이 이용할 수 있다.
+두 가지 레이블 셀렉터 스타일은 모두 REST 클라이언트를 통해 선택된 리소스를 확인하거나 목록을 볼 수 있다. 예를 들어, `kubectl`로 `apiserver`를 대상으로 _일치성 기준_ 으로 하는 셀렉터를 다음과 같이 이용할 수 있다.
 
 ```shell
 kubectl get pods -l environment=production,tier=frontend
@@ -192,7 +192,7 @@ kubectl get pods -l 'environment,environment notin (frontend)'
 
 `services`에서 지정하는 파드 집합은 레이블 셀렉터로 정의한다. 마찬가지로 `replicationcontrollers`가 관리하는 파드의 오브젝트 그룹도 레이블 셀렉터로 정의한다.
 
-서비스와 레플리케이션 컨트롤러의 레이블 셀렉터는 `json` 또는 `yaml` 파일에 매핑된 _균등-기반_ 요구사항의 셀렉터만 지원한다.
+서비스와 레플리케이션 컨트롤러의 레이블 셀렉터는 `json` 또는 `yaml` 파일에 매핑된 _일치성 기준_ 요구사항의 셀렉터만 지원한다.
 
 ```json
 "selector": {

From 9068e7071685a8db58076272f45c2d99b58fbd17 Mon Sep 17 00:00:00 2001
From: Jailton Lopes <jailton@gmail.com>
Date: Sun, 21 Feb 2021 20:18:25 -0300
Subject: [PATCH 042/788] Update
 content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md

Update page port-forward-access-application-cluster.md to use MongoDB
examples instead of Redis examples

Commit 99029b9 removes the Redis examples.

Signed-off-by: Jailton Lopes <jailton@gmail.com>
---
 ...port-forward-access-application-cluster.md | 91 ++++++++++---------
 1 file changed, 49 insertions(+), 42 deletions(-)

diff --git a/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md b/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
index 62ddbdcbbc..0a6d352d2c 100644
--- a/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
+++ b/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
@@ -7,7 +7,7 @@ min-kubernetes-server-version: v1.10
 
 <!-- overview -->
 
-This page shows how to use `kubectl port-forward` to connect to a Redis
+This page shows how to use `kubectl port-forward` to connect to a MongoDB
 server running in a Kubernetes cluster. This type of connection can be useful
 for database debugging.
 
@@ -19,25 +19,25 @@ for database debugging.
 
 * {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-* Install [redis-cli](http://redis.io/topics/rediscli).
+* Install [MongoDB Shell](https://www.mongodb.com/try/download/shell).
 
 
 
 
 <!-- steps -->
 
-## Creating Redis deployment and service
+## Creating MongoDB deployment and service
 
-1. Create a Deployment that runs Redis:
+1. Create a Deployment that runs MongoDB:
 
     ```shell
-    kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-deployment.yaml
+    kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-deployment.yaml
     ```
 
     The output of a successful command verifies that the deployment was created:
 
     ```
-    deployment.apps/redis-master created
+    deployment.apps/mongo created
     ```
 
     View the pod status to check that it is ready:
@@ -49,8 +49,8 @@ for database debugging.
     The output displays the pod created:
 
     ```
-    NAME                            READY     STATUS    RESTARTS   AGE
-    redis-master-765d459796-258hz   1/1       Running   0          50s
+    NAME                     READY   STATUS    RESTARTS   AGE
+    mongo-75f59d57f4-4nd6q   1/1     Running   0          2m4s
     ```
 
     View the Deployment's status:
@@ -62,8 +62,8 @@ for database debugging.
     The output displays that the Deployment was created:
 
     ```
-    NAME         READY   UP-TO-DATE   AVAILABLE   AGE
-    redis-master 1/1     1            1           55s
+    NAME    READY   UP-TO-DATE   AVAILABLE   AGE
+    mongo   1/1     1            1           2m21s
     ```
 
     The Deployment automatically manages a ReplicaSet.
@@ -76,50 +76,50 @@ for database debugging.
     The output displays that the ReplicaSet was created:
 
     ```
-    NAME                      DESIRED   CURRENT   READY     AGE
-    redis-master-765d459796   1         1         1         1m
+    NAME               DESIRED   CURRENT   READY   AGE
+    mongo-75f59d57f4   1         1         1       3m12s
     ```
 
 
-2. Create a Service to expose Redis on the network:
+2. Create a Service to expose MongoDB on the network:
 
     ```shell
-    kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-service.yaml
+    kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
     ```
 
     The output of a successful command verifies that the Service was created:
 
     ```
-    service/redis-master created
+    service/mongo created
     ```
 
     Check the Service created:
 
     ```shell
-    kubectl get service redis-master
+    kubectl get service mongo
     ```
 
     The output displays the service created:
 
     ```
-    NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
-    redis-master   ClusterIP   10.0.0.213   <none>        6379/TCP   27s
+    NAME    TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)     AGE
+    mongo   ClusterIP   10.96.41.183   <none>        27017/TCP   11s
     ```
 
-3. Verify that the Redis server is running in the Pod, and listening on port 6379:
+3. Verify that the MongoDB server is running in the Pod, and listening on port 27017:
 
     ```shell
-    # Change redis-master-765d459796-258hz to the name of the Pod
-    kubectl get pod redis-master-765d459796-258hz --template='{{(index (index .spec.containers 0).ports 0).containerPort}}{{"\n"}}'
+    # Change mongo-75f59d57f4-4nd6q to the name of the Pod
+    kubectl get pod mongo-75f59d57f4-4nd6q --template='{{(index (index .spec.containers 0).ports 0).containerPort}}{{"\n"}}'
     ```
 
-    The output displays the port for Redis in that Pod:
+    The output displays the port for MongoDB in that Pod:
 
     ```
-    6379
+    27017
     ```
 
-    (this is the TCP port allocated to Redis on the internet).
+    (this is the TCP port allocated to MongoDB on the internet).
 
 ## Forward a local port to a port on the Pod
 
@@ -127,39 +127,39 @@ for database debugging.
 
 
     ```shell
-    # Change redis-master-765d459796-258hz to the name of the Pod
-    kubectl port-forward redis-master-765d459796-258hz 7000:6379
+    # Change mongo-75f59d57f4-4nd6q to the name of the Pod
+    kubectl port-forward mongo-75f59d57f4-4nd6q 28015:27017
     ```
 
     which is the same as
 
     ```shell
-    kubectl port-forward pods/redis-master-765d459796-258hz 7000:6379
+    kubectl port-forward pods/mongo-75f59d57f4-4nd6q 28015:27017
     ```
 
     or
 
     ```shell
-    kubectl port-forward deployment/redis-master 7000:6379
+    kubectl port-forward deployment/mongo 28015:27017
     ```
 
     or
 
     ```shell
-    kubectl port-forward replicaset/redis-master 7000:6379
+    kubectl port-forward replicaset/mongo-75f59d57f4 28015:27017
     ```
 
     or
 
     ```shell
-    kubectl port-forward service/redis-master 7000:redis
+    kubectl port-forward service/mongo 28015:27017
     ```
 
     Any of the above commands works. The output is similar to this:
 
     ```
-    Forwarding from 127.0.0.1:7000 -> 6379
-    Forwarding from [::1]:7000 -> 6379
+    Forwarding from 127.0.0.1:28015 -> 27017
+    Forwarding from [::1]:28015 -> 27017
     ```
 
 {{< note >}}
@@ -168,22 +168,22 @@ for database debugging.
 
 {{< /note >}}
 
-2.  Start the Redis command line interface:
+2.  Start the MongoDB command line interface:
 
     ```shell
-    redis-cli -p 7000
+    mongosh --port 28015
     ```
 
-3.  At the Redis command line prompt, enter the `ping` command:
+3.  At the MongoDB command line prompt, enter the `ping` command:
 
     ```
-    ping
+    db.runCommand( { ping: 1 } )
     ```
 
     A successful ping request returns:
 
     ```
-    PONG
+    { ok: 1 }
     ```
 
 ### Optionally let _kubectl_ choose the local port {#let-kubectl-choose-local-port}
@@ -193,15 +193,22 @@ the local port and thus relieve you from having to manage local port conflicts,
 the slightly simpler syntax:
 
 ```shell
-kubectl port-forward deployment/redis-master :6379
+kubectl port-forward deployment/mongo :27017
+```
+
+The output is similar to this:
+
+```
+Forwarding from 127.0.0.1:63753 -> 27017
+Forwarding from [::1]:63753 -> 27017
 ```
 
 The `kubectl` tool finds a local port number that is not in use (avoiding low ports numbers,
 because these might be used by other applications). The output is similar to:
 
 ```
-Forwarding from 127.0.0.1:62162 -> 6379
-Forwarding from [::1]:62162 -> 6379
+Forwarding from 127.0.0.1:63753 -> 27017
+Forwarding from [::1]:63753 -> 27017
 ```
 
 
@@ -209,8 +216,8 @@ Forwarding from [::1]:62162 -> 6379
 
 ## Discussion
 
-Connections made to local port 7000 are forwarded to port 6379 of the Pod that
-is running the Redis server. With this connection in place, you can use your
+Connections made to local port 28015 are forwarded to port 27017 of the Pod that
+is running the MongoDB server. With this connection in place, you can use your
 local workstation to debug the database that is running in the Pod.
 
 {{< note >}}

From a0d509156dc4481f854bdbd319046c7f72f19dcb Mon Sep 17 00:00:00 2001
From: Michael Taufen <mtaufen@google.com>
Date: Sun, 21 Feb 2021 14:59:34 -0800
Subject: [PATCH 043/788] Update ServiceAccountIssuerDiscovery docs for GA

---
 .../command-line-tools-reference/feature-gates.md     |  5 +++--
 .../configure-service-account.md                      | 11 +++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 82eaea8390..2e9db5fce0 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -155,8 +155,6 @@ different Kubernetes components.
 | `SCTPSupport` | `true` | Beta | 1.19 | |
 | `ServerSideApply` | `false` | Alpha | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | Beta | 1.16 | |
-| `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | 1.19 |
-| `ServiceAccountIssuerDiscovery` | `true` | Beta | 1.20 | |
 | `ServiceLBNodePortControl` | `false` | Alpha | 1.20 | |
 | `ServiceNodeExclusion` | `false` | Alpha | 1.8 | 1.18 |
 | `ServiceNodeExclusion` | `true` | Beta | 1.19 | |
@@ -307,6 +305,9 @@ different Kubernetes components.
 | `SCTPSupport` | `false` | Alpha | 1.12 | 1.18 |
 | `SCTPSupport` | `true` | Beta | 1.19 | 1.19 |
 | `SCTPSupport` | `true` | GA | 1.20 | - |
+| `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | 1.19 |
+| `ServiceAccountIssuerDiscovery` | `true` | Beta | 1.20 | 1.20 |
+| `ServiceAccountIssuerDiscovery` | `true` | GA | 1.21 | - |
 | `ServiceAppProtocol` | `false` | Alpha | 1.18 | 1.18 |
 | `ServiceAppProtocol` | `true` | Beta | 1.19 | |
 | `ServiceAppProtocol` | `true` | GA | 1.20 | - |
diff --git a/content/en/docs/tasks/configure-pod-container/configure-service-account.md b/content/en/docs/tasks/configure-pod-container/configure-service-account.md
index d96a5c8270..23a76f3752 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-service-account.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-service-account.md
@@ -323,11 +323,10 @@ The application is responsible for reloading the token when it rotates. Periodic
 
 ## Service Account Issuer Discovery
 
-{{< feature-state for_k8s_version="v1.20" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
-The Service Account Issuer Discovery feature is enabled by enabling the
-`ServiceAccountIssuerDiscovery` [feature gate](/docs/reference/command-line-tools-reference/feature-gates)
-and then enabling the Service Account Token Projection feature as described
+The Service Account Issuer Discovery feature is enabled when the Service Account
+Token Projection feature is enabled, as described
 [above](#service-account-token-volume-projection).
 
 {{< note >}}
@@ -349,8 +348,8 @@ Configuration document at `/.well-known/openid-configuration` and the associated
 JSON Web Key Set (JWKS) at `/openid/v1/jwks`. The OpenID Provider Configuration
 is sometimes referred to as the _discovery document_.
 
-When enabled, the cluster is also configured with a default RBAC ClusterRole
-called `system:service-account-issuer-discovery`. No role bindings are provided
+Clusters include a default RBAC ClusterRole called
+`system:service-account-issuer-discovery`. No role bindings are provided
 by default. Administrators may, for example, choose whether to bind the role to
 `system:authenticated` or `system:unauthenticated` depending on their security
 requirements and which external systems they intend to federate with.

From 2b6074e8edf99244452e846a6a713138fad25f37 Mon Sep 17 00:00:00 2001
From: raghvenders <raghvenders@gmail.com>
Date: Mon, 22 Feb 2021 19:13:26 -0600
Subject: [PATCH 044/788] changes

---
 content/en/docs/reference/_index.md           | 26 ++++++++++++++-----
 .../reference/access-authn-authz/_index.md    |  2 +-
 .../command-line-tools-reference/_index.md    |  2 +-
 content/en/docs/reference/glossary/index.md   |  2 +-
 .../docs/reference/issues-security/_index.md  |  2 +-
 content/en/docs/reference/kubectl/_index.md   |  2 +-
 .../en/docs/reference/setup-tools/_index.md   |  2 +-
 .../reference/{tools.md => tools/_index.md}   | 11 +++-----
 content/en/docs/reference/using-api/_index.md |  3 ++-
 9 files changed, 31 insertions(+), 21 deletions(-)
 rename content/en/docs/reference/{tools.md => tools/_index.md} (78%)

diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 5885618102..01341d4a67 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -6,8 +6,10 @@ linkTitle: "Reference"
 main_menu: true
 weight: 70
 content_type: concept
+no_list: true
 ---
 
+
 <!-- overview -->
 
 This section of the Kubernetes documentation contains references.
@@ -16,11 +18,17 @@ This section of the Kubernetes documentation contains references.
 
 <!-- body -->
 
-## API Reference
+## Standardized Glossary
+
+* [Glossary](/docs/reference/glossary/) -  a comprehensive, standardized list of Kubernetes terminology
+
+
 
 * [Kubernetes API Reference](/docs/reference/kubernetes-api/)
 * [One-page API Reference for Kubernetes {{< param "version" >}}](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 * [Using The Kubernetes API](/docs/reference/using-api/) - overview of the API for Kubernetes.
+* [API access control](/docs/reference/access-authn-authz/) - details on how Kubernetes controls API access
+* [Well-Known Labels, Annotations and Taints](/docs/reference/kubernetes-api/labels-annotations-taints/)
 
 ## API Client Libraries
 
@@ -32,22 +40,28 @@ client libraries:
 - [Kubernetes Python client library](https://github.com/kubernetes-client/python)
 - [Kubernetes Java client library](https://github.com/kubernetes-client/java)
 - [Kubernetes JavaScript client library](https://github.com/kubernetes-client/javascript)
+- [Kubernetes Dotnet client library](https://github.com/kubernetes-client/csharp)
+- [Kubernetes Haskell Client library](https://github.com/kubernetes-client/haskell)
 
-## CLI Reference
+## CLI
 
 * [kubectl](/docs/reference/kubectl/overview/) - Main CLI tool for running commands and managing Kubernetes clusters.
     * [JSONPath](/docs/reference/kubectl/jsonpath/) - Syntax guide for using [JSONPath expressions](https://goessner.net/articles/JsonPath/) with kubectl.
 * [kubeadm](/docs/reference/setup-tools/kubeadm/) - CLI tool to easily provision a secure Kubernetes cluster.
 
-## Components Reference
+## Components
 
 * [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - The primary *node agent* that runs on each node. The kubelet takes a set of PodSpecs and ensures that the described containers are running and healthy.
 * [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) - REST API that validates and configures data for API objects such as  pods, services, replication controllers.
 * [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) - Daemon that embeds the core control loops shipped with Kubernetes.
 * [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - Can do simple TCP/UDP stream forwarding or round-robin TCP/UDP forwarding across a set of back-ends.
-* [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - Scheduler that manages availability, performance, and capacity.
-  * [kube-scheduler Policies](/docs/reference/scheduling/policies)
-  * [kube-scheduler Profiles](/docs/reference/scheduling/config#profiles)
+* [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - Scheduler that manages availability, performance, and capacity.  
+  
+## Scheduling
+
+* [Scheduler Policies](/docs/reference/scheduling/policies)
+* [Scheduler Profiles](/docs/reference/scheduling/config#profiles)
+
 
 ## Design Docs
 
diff --git a/content/en/docs/reference/access-authn-authz/_index.md b/content/en/docs/reference/access-authn-authz/_index.md
index d999e52bf5..86d06488a8 100644
--- a/content/en/docs/reference/access-authn-authz/_index.md
+++ b/content/en/docs/reference/access-authn-authz/_index.md
@@ -1,6 +1,6 @@
 ---
 title: API Access Control
-weight: 20
+weight: 15
 no_list: true
 ---
 
diff --git a/content/en/docs/reference/command-line-tools-reference/_index.md b/content/en/docs/reference/command-line-tools-reference/_index.md
index 6698fe66c0..8f9cf74a0e 100644
--- a/content/en/docs/reference/command-line-tools-reference/_index.md
+++ b/content/en/docs/reference/command-line-tools-reference/_index.md
@@ -1,4 +1,4 @@
 ---
-title: Command line tools reference
+title: Component tools
 weight: 60
 ---
diff --git a/content/en/docs/reference/glossary/index.md b/content/en/docs/reference/glossary/index.md
index 1fb8799a16..29bd54bd21 100755
--- a/content/en/docs/reference/glossary/index.md
+++ b/content/en/docs/reference/glossary/index.md
@@ -2,7 +2,7 @@
 approvers:
 - chenopis
 - abiogenesis-now
-title: Standardized Glossary
+title: Glossary
 layout: glossary
 noedit: true
 default_active_tag: fundamental
diff --git a/content/en/docs/reference/issues-security/_index.md b/content/en/docs/reference/issues-security/_index.md
index 530e98bf61..50c3f29333 100644
--- a/content/en/docs/reference/issues-security/_index.md
+++ b/content/en/docs/reference/issues-security/_index.md
@@ -1,4 +1,4 @@
 ---
 title: Kubernetes Issues and Security
-weight: 10
+weight: 40
 ---
\ No newline at end of file
diff --git a/content/en/docs/reference/kubectl/_index.md b/content/en/docs/reference/kubectl/_index.md
index 7b6c2d720b..ce08a5a97a 100755
--- a/content/en/docs/reference/kubectl/_index.md
+++ b/content/en/docs/reference/kubectl/_index.md
@@ -1,5 +1,5 @@
 ---
-title: "kubectl CLI"
+title: "CLI"
 weight: 60
 ---
 
diff --git a/content/en/docs/reference/setup-tools/_index.md b/content/en/docs/reference/setup-tools/_index.md
index 3988d6485e..c97758fe6e 100644
--- a/content/en/docs/reference/setup-tools/_index.md
+++ b/content/en/docs/reference/setup-tools/_index.md
@@ -1,4 +1,4 @@
 ---
-title: Setup tools reference
+title: Setup tools
 weight: 50
 ---
diff --git a/content/en/docs/reference/tools.md b/content/en/docs/reference/tools/_index.md
similarity index 78%
rename from content/en/docs/reference/tools.md
rename to content/en/docs/reference/tools/_index.md
index 41d8ef4d1c..7194ab83bd 100644
--- a/content/en/docs/reference/tools.md
+++ b/content/en/docs/reference/tools/_index.md
@@ -1,8 +1,10 @@
 ---
+title: Other Tools
 reviewers:
 - janetkuo
-title: Tools
 content_type: concept
+weight: 80
+no_list: true
 ---
 
 <!-- overview -->
@@ -10,13 +12,6 @@ Kubernetes contains several built-in tools to help you work with the Kubernetes
 
 
 <!-- body -->
-## Kubectl
-
-[`kubectl`](/docs/tasks/tools/install-kubectl/) is the command line tool for Kubernetes. It controls the Kubernetes cluster manager.
-
-## Kubeadm
-
-[`kubeadm`](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/) is the command line tool for easily provisioning a secure Kubernetes cluster on top of physical or cloud servers or virtual machines (currently in alpha).
 
 ## Minikube
 
diff --git a/content/en/docs/reference/using-api/_index.md b/content/en/docs/reference/using-api/_index.md
index df9e00758e..2039e33e28 100644
--- a/content/en/docs/reference/using-api/_index.md
+++ b/content/en/docs/reference/using-api/_index.md
@@ -1,11 +1,12 @@
 ---
-title: Kubernetes API Overview
+title: API Overview
 reviewers:
 - erictune
 - lavalamp
 - jbeda
 content_type: concept
 weight: 10
+no_list: true
 card:
   name: reference
   weight: 50

From 363545ef9673242e21eacad2c6259a0be803a33c Mon Sep 17 00:00:00 2001
From: flo-oss <florianberck@gmail.com>
Date: Mon, 22 Feb 2021 21:35:48 -0800
Subject: [PATCH 045/788] Slightly more creative translation to make it sound
 less repetitive and less commanding :-)

---
 content/de/docs/concepts/workloads/pods/_index.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/de/docs/concepts/workloads/pods/_index.md b/content/de/docs/concepts/workloads/pods/_index.md
index e6adce49a6..956190e6c7 100644
--- a/content/de/docs/concepts/workloads/pods/_index.md
+++ b/content/de/docs/concepts/workloads/pods/_index.md
@@ -341,12 +341,12 @@ sichtbar sind jedoch von dort nicht gesteuert werden können.
 
 ## {{% heading "whatsnext" %}}
 
-* Lerne den 
+* Verstehe den 
   [Lebenszyklus eines Pods](/docs/concepts/workloads/pods/pod-lifecycle/).
-* Lerne die [RuntimeClass](/docs/concepts/containers/runtime-class/) 
+* Erfahre mehr über [RuntimeClass](/docs/concepts/containers/runtime-class/) 
   und wie du damit verschiedene Pods mit unterschiedlichen 
   Container-Laufzeitumgebungen konfigurieren kannst.
-* Lese 
+* Mehr zum Thema 
   [Restriktionen für die Verteilung von Pods](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
 * Lese
   [Pod-Disruption-Budget](/docs/concepts/workloads/pods/disruptions/) 

From a12e5510056ee889090395edd6e451e9af891de7 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 17 Sep 2020 18:38:04 +0900
Subject: [PATCH 046/788] Translate en/docs/contribute/review/reviewing-prs
 into Japanese.

---
 .../docs/contribute/review/reviewing-prs.md   | 114 ++++++++----------
 1 file changed, 51 insertions(+), 63 deletions(-)

diff --git a/content/ja/docs/contribute/review/reviewing-prs.md b/content/ja/docs/contribute/review/reviewing-prs.md
index ff6ef9d709..0ecb2951e0 100644
--- a/content/ja/docs/contribute/review/reviewing-prs.md
+++ b/content/ja/docs/contribute/review/reviewing-prs.md
@@ -1,5 +1,5 @@
 ---
-title: Reviewing pull requests
+title: プルリクエストのレビュー
 content_type: concept
 main_menu: true
 weight: 10
@@ -7,91 +7,79 @@ weight: 10
 
 <!-- overview -->
 
-Anyone can review a documentation pull request. Visit the [pull requests](https://github.com/kubernetes/website/pulls) section in the Kubernetes website repository to see open pull requests.
+ドキュメントのプルリクエストは誰でもレビューすることができます。Kubernetesのwebsiteリポジトリで[pull requests](https://github.com/kubernetes/website/pulls)のセクションに移動し、open状態のプルリクエストを確認してください。
 
-Reviewing documentation pull requests is a
-great way to introduce yourself to the Kubernetes community.
-It helps you learn the code base and build trust with other contributors.
+ドキュメントのプルリクエストのレビューは、Kubernetesコミュニティに自分を知ってもらうためのよい方法の1つです。コードベースについて学んだり、他のコントリビューターとの信頼関係を築く助けともなるはずです。
 
-Before reviewing, it's a good idea to:
+レビューを行う前には、以下のことを理解しておくとよいでしょう。
 
-- Read the  [content guide](/docs/contribute/style/content-guide/) and
-  [style guide](/docs/contribute/style/style-guide/) so you can leave informed comments.
-- Understand the different
-  [roles and responsibilities](/docs/contribute/participate/roles-and-responsibilities/)
-  in the Kubernetes documentation community.
+- [コンテンツガイド](/docs/contribute/style/content-guide/)と[スタイルガイド](/docs/contribute/style/style-guide/)を読んで、有益なコメントを残せるようにする。
+- Kubernetesのドキュメントコミュニティにおける[役割と責任](/docs/contribute/participate/roles-and-responsibilities/)の違いを理解する。
 
 <!-- body -->
 
-## Before you begin
+## はじめる前に
 
-Before you start a review:
+レビューを始める前に、以下のことを心に留めてください。
 
-- Read the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md) and ensure that you abide by it at all times.
-- Be polite, considerate, and helpful.
-- Comment on positive aspects of PRs as well as changes.
-- Be empathetic and mindful of how your review may be received.
-- Assume good intent and ask clarifying questions.
-- Experienced contributors, consider pairing with new contributors whose work requires extensive changes.
+- [CNCFの行動規範](https://github.com/cncf/foundation/blob/master/code-of-conduct.md)を読み、いかなる時にも行動規範にしたがって行動するようにする。
+- 礼儀正しく、思いやりを持ち、助け合う気持ちを持つ。
+- 変更点だけでなく、PRのポジティブな側面についてもコメントする。
+- 相手の善意を前提として、疑問点を明確にする質問をする。
+- 経験を積んだコントリビューターの場合、コンテンツに大幅な変更が必要な新規のコントリビューターとペアを組んで作業に取り組むことを考える。
 
-## Review process
+## レビューのプロセス
 
-In general, review pull requests for content and style in English.
+一般に、コンテンツや文体に対するプルリクエストは、英語でレビューを行います。
 
-1.  Go to
-    [https://github.com/kubernetes/website/pulls](https://github.com/kubernetes/website/pulls).
-    You see a list of every open pull request against the Kubernetes website and
-    docs.
+1.  [https://github.com/kubernetes/website/pulls](https://github.com/kubernetes/website/pulls)に移動します。Kubernetesのウェブサイトとドキュメントに対するopen状態のプルリクエスト一覧が表示されます。
 
-2.  Filter the open PRs using one or all of the following labels:
-    - `cncf-cla: yes` (Recommended): PRs submitted by contributors who have not signed the CLA cannot be merged. See [Sign the CLA](/docs/contribute/new-content/overview/#sign-the-cla) for more information.
-    - `language/en` (Recommended): Filters for english language PRs only.
-    - `size/<size>`: filters for PRs of a certain size. If you're new, start with smaller PRs.
+2.  open状態のPRに、以下に示すラベルを1つ以上使って絞り込みます。
 
-    Additionally, ensure the PR isn't marked as a work in progress. PRs using the `work in progress` label are not ready for review yet.
+    - `cncf-cla: yes` (推奨): CLAにサインしていないコントリビューターが提出したPRはマージできません。詳しい情報は、[CLAの署名](/docs/contribute/new-content/overview/#sign-the-cla)を読んでください。
+    - `language/en` (推奨): 英語のPRだけに絞り込みます。
+    - `size/<size>`: 特定の大きさのPRだけに絞り込みます。レビューを始めたばかりの人は、小さなPRから始めてください。
 
-3.  Once you've selected a PR to review, understand the change by:
-    - Reading the PR description to understand the changes made, and read any linked issues
-    - Reading any comments by other reviewers
-    - Clicking the **Files changed** tab to see the files and lines changed
-    - Previewing the changes in the Netlify preview build by scrolling to the PR's build check section at the bottom of the **Conversation** tab and clicking the **deploy/netlify** line's **Details** link.
+    さらに、PRがwork in progressとしてマークされていないことも確認してください。`work in progress`ラベルの付いたPRは、まだレビューの準備ができていない状態です。
 
-4.  Go to the **Files changed** tab to start your review.
-    1. Click on the `+` symbol  beside the line you want to comment on.
-    2. Fill in any comments you have about the line and click either **Add single comment** (if you have only one comment to make) or  **Start a review** (if you have multiple comments to make).
-    3. When finished, click **Review changes** at the top of the page. Here, you can add
-       add a summary of your review (and leave some positive comments for the contributor!),
-      approve the PR, comment or request changes as needed. New contributors should always
-      choose **Comment**.
+3.  レビューするPRを選んだら、以下のことを行い、変更点について理解します。
+    - PRの説明を読み、行われた変更について理解し、関連するissueがあればそれも読みます。
+    - 他のレビュアのコメントがあれば読みます。
+    - **Files changed**タブをクリックし、変更されたファイルと行を確認します。
+    - **Conversation**タブの下にあるPRのbuild checkセクションまでスクロールし、**deploy/netlify**の行の**Details**リンクをクリックして、Netlifyのプレビュービルドで変更点をプレビューします。
 
-## Reviewing checklist
+4.  **Files changed**タブに移動してレビューを始めます。
+    1. コメントしたい場合は行の横の`+`マークをクリックします。
+    2. その行に関するコメントを書き、**Add single comment**(1つのコメントだけを残したい場合)または**Start a review**(複数のコメントを行いたい場合)のいずれかをクリックします。
+    3. コメントをすべて書いたら、ページ上部の**Review changes**をクリックします。ここでは、レビューの要約を追加できます(コントリビューターにポジティブなコメントも書きましょう！)。必要に応じて、PRを承認したり、コメントしたり、変更をリクエストします。新しいコントリビューターの場合は**Comment**だけが行えます。
 
-When reviewing, use the following as a starting point.
+## レビューのチェックリスト
 
-### Language and grammar
+レビューするときは、最初に以下の点を確認してみてください。
 
-- Are there any obvious errors in language or grammar? Is there a better way to phrase something?
-- Are there any complicated or archaic words which could be replaced with a simpler word?
-- Are there any words, terms or phrases in use which could be replaced with a non-discriminatory alternative?
-- Does the word choice and its capitalization follow the [style guide](/docs/contribute/style/style-guide/)?
-- Are there long sentences which could be shorter or less complex?
-- Are there any long paragraphs which might work better as a list or table?
+### 言語と文法
 
-### Content
+- 言語や文法に明らかな間違いはないですか？ もっとよい言い方はないですか？
+- もっと簡単な単語に置き換えられる複雑な単語や古い単語はありませんか？
+- 使われている単語や専門用語や言い回しで差別的ではない別の言葉に置き換えられるものはありませんか？
+- 言葉選びや大文字の使い方は[style guide](/docs/contribute/style/style-guide/)に従っていますか？
+- もっと短くしたり単純な文に書き換えられる長い文はありませんか？
+- 箇条書きやテーブルでもっとわかりやすく表現できる長いパラグラフはありませんか？
 
-- Does similar content exist elsewhere on the Kubernetes site?
-- Does the content excessively link to off-site, individual vendor or non-open source documentation?
+### コンテンツ
 
-### Website
+- 同様のコンテンツがKubernetesのサイト上のどこかに存在しませんか？
+- コンテンツが外部サイト、特定のベンダー、オープンソースではないドキュメントなどに過剰にリンクを張っていませんか？
 
-- Did this PR change or remove a page title, slug/alias or anchor link? If so, are there broken links as a result of this PR? Is there another option, like changing the page title without changing the slug?
-- Does the PR introduce a new page? If so:
-  - Is the page using the right [page content type](/docs/contribute/style/page-content-types/) and associated Hugo shortcodes?
-  - Does the page appear correctly in the section's side navigation (or at all)?
-  - Should the page appear on the [Docs Home](/docs/home/) listing?
-- Do the changes show up in the Netlify preview? Be particularly vigilant about lists, code blocks, tables, notes and images.
+### ウェブサイト
 
-### Other
+- PRはページ名、slug/alias、アンカーリンクの変更や削除をしていますか？ その場合、このPRの変更の結果、リンク切れは発生しませんか？ ページ名を変更してslugはそのままにするなど、他の選択肢はありませんか？
+- PRは新しいページを作成するものですか？ その場合、次の点に注意してください。
+  - ページは正しい[page content type](/docs/contribute/style/page-content-types/)と関係するHugoのshortcodeを使用していますか？
+  - セクションの横のナビゲーション(または全体)にページは正しく表示されますか？
+  - ページは[Docs Home](/docs/home/)に一覧されますか？
+- Netlifyのプレビューで変更は確認できますか？ 特にリスト、コードブロック、テーブル、備考、画像などに注意してください。
 
-For small issues with a PR, like typos or whitespace, prefix your comments with `nit:`.  This lets the author know the issue is non-critical.
+### その他
 
+PRに関して誤字や空白などの小さな問題を指摘する場合は、コメントの前に`nit:`と書いてください。こうすることで、PRの作者は問題が深刻なものではないことが分かります。

From 9548c08e17ddb5f5846ecb66324ae7e2c9111e4c Mon Sep 17 00:00:00 2001
From: chenxuc <chenxuc@cn.ibm.com>
Date: Tue, 23 Feb 2021 18:26:00 +0800
Subject: [PATCH 047/788] List operator tools in alphabetical order

This is to update operator web page to
list operator tools in alphabetical order as well as other
minor improvements.
---
 .../concepts/extend-kubernetes/operator.md    | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/content/en/docs/concepts/extend-kubernetes/operator.md b/content/en/docs/concepts/extend-kubernetes/operator.md
index 64b9ed3eb8..323200ec3a 100644
--- a/content/en/docs/concepts/extend-kubernetes/operator.md
+++ b/content/en/docs/concepts/extend-kubernetes/operator.md
@@ -103,26 +103,27 @@ as well as keeping the existing service in good shape.
 ## Writing your own Operator {#writing-operator}
 
 If there isn't an Operator in the ecosystem that implements the behavior you
-want, you can code your own. In [What's next](#what-s-next) you'll find a few
-links to libraries and tools you can use to write your own cloud native
-Operator.
+want, you can code your own. 
 
 You also implement an Operator (that is, a Controller) using any language / runtime
 that can act as a [client for the Kubernetes API](/docs/reference/using-api/client-libraries/).
 
+Following are a few libraries and tools you can use to write your own cloud native
+Operator.
 
+{{% thirdparty-content %}}
+
+* [kubebuilder](https://book.kubebuilder.io/)
+* [KUDO](https://kudo.dev/) (Kubernetes Universal Declarative Operator)
+* [Metacontroller](https://metacontroller.app/) along with WebHooks that
+  you implement yourself
+* [Operator Framework](https://operatorframework.io)
 
 ## {{% heading "whatsnext" %}}
 
 
 * Learn more about [Custom Resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
 * Find ready-made operators on [OperatorHub.io](https://operatorhub.io/) to suit your use case
-* Use existing tools to write your own operator, eg:
-  * using [KUDO](https://kudo.dev/) (Kubernetes Universal Declarative Operator)
-  * using [kubebuilder](https://book.kubebuilder.io/)
-  * using [Metacontroller](https://metacontroller.app/) along with WebHooks that
-    you implement yourself
-  * using the [Operator Framework](https://operatorframework.io)
 * [Publish](https://operatorhub.io/) your operator for other people to use
 * Read [CoreOS' original article](https://web.archive.org/web/20170129131616/https://coreos.com/blog/introducing-operators.html) that introduced the Operator pattern (this is an archived version of the original article).
 * Read an [article](https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-building-kubernetes-operators-and-stateful-apps) from Google Cloud about best practices for building Operators

From a7c7662fb9d01ba9ff8bf97abee6cb2c4d8abfdc Mon Sep 17 00:00:00 2001
From: Juampy NR <juampynr@users.noreply.github.com>
Date: Wed, 24 Feb 2021 10:06:02 +0100
Subject: [PATCH 048/788] Demonstrate how to use secure communication

---
 .../administer-cluster/configure-upgrade-etcd.md      | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 25cd61a710..66c6c0f94a 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -125,7 +125,16 @@ the URL schema.
 
 Similarly, to configure etcd with secure client communication, specify flags
 `--key-file=k8sclient.key` and `--cert-file=k8sclient.cert`, and use HTTPS as
-the URL schema.
+the URL schema. Here is an example on a client command that uses secure
+communication:
+
+```
+ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 \
+--cert=/etc/kubernetes/pki/etcd/server.crt \
+--key=/etc/kubernetes/pki/etcd/server.key \
+--cacert=/etc/kubernetes/pki/etcd/ca.crt \
+member list
+```
 
 ### Limiting access of etcd clusters
 

From ce8d33face52ab019b44311d0091f9e31e0a85cd Mon Sep 17 00:00:00 2001
From: Juampy NR <juampynr@users.noreply.github.com>
Date: Wed, 24 Feb 2021 10:22:38 +0100
Subject: [PATCH 049/788] Add example to restore snapshot

---
 .../docs/tasks/administer-cluster/configure-upgrade-etcd.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 25cd61a710..863383f177 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -293,6 +293,12 @@ employed to recover the data of a failed cluster.
 Before starting the restore operation, a snapshot file must be present. It can
 either be a snapshot file from a previous backup operation, or from a remaining
 [data directory]( https://etcd.io/docs/current/op-guide/configuration/#--data-dir).
+Here is an example:
+
+```shell
+ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 snapshot restore snapshotdb
+```
+
 For more information and examples on restoring a cluster from a snapshot file, see
 [etcd disaster recovery documentation](https://etcd.io/docs/current/op-guide/recovery/#restoring-a-cluster).
 

From 6d48be986b07a9609b74415e411e935757093c29 Mon Sep 17 00:00:00 2001
From: Aditi Sharma <adi.sky17@gmail.com>
Date: Thu, 25 Feb 2021 17:16:19 +0530
Subject: [PATCH 050/788] Update pod-infra-container-image description

Update kubelet flag  pod-infra-container-image description
---
 .../en/docs/reference/command-line-tools-reference/kubelet.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet.md b/content/en/docs/reference/command-line-tools-reference/kubelet.md
index b569177dda..3f9e9bac44 100644
--- a/content/en/docs/reference/command-line-tools-reference/kubelet.md
+++ b/content/en/docs/reference/command-line-tools-reference/kubelet.md
@@ -917,7 +917,7 @@ WindowsEndpointSliceProxying=true|false (ALPHA - default=false)<br/>
 <td colspan="2">--pod-infra-container-image string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `k8s.gcr.io/pause:3.2`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The image whose network/IPC namespaces containers in each pod will use. This docker-specific flag only works when container-runtime is set to `docker`.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"> Specified image will not be pruned by the image garbage collector. When container-runtime is set to `docker`, all containers in each pod will use the network/ipc namespaces from this image. Other CRI implementations have their own configuration to set this image.</td>
 </tr>
 
 <tr>

From 06f1e784b85dcc0def7f4e683d6bec2c772da847 Mon Sep 17 00:00:00 2001
From: Leonardo Murillo <leonardo@murillodigital.com>
Date: Thu, 25 Feb 2021 14:28:26 +0000
Subject: [PATCH 051/788] =?UTF-8?q?=C3=9Altimos=20cambios=20a=20partir=20d?=
 =?UTF-8?q?e=20revisi=C3=B3n?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../declarative-config.md                     | 157 +++++++++---------
 1 file changed, 78 insertions(+), 79 deletions(-)

diff --git a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
index d3002931ab..05090d3a3f 100644
--- a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -1,15 +1,15 @@
 ---
-title: Administración declarativa de Objetos en Kubernetes usando Ficheros de Configuración
+title: Administración declarativa de Objetos en Kubernetes usando archivos de Configuración
 content_type: task
 weight: 10
 ---
 
 <!-- overview -->
 Objetos en Kubernetes pueden ser creados, actualizados y eliminados utilizando
-ficheros de configuración almacenados en un directorio. Usando el comando
+archivos de configuración almacenados en un directorio. Usando el comando
 `kubectl apply` podrá crearlos o actualizarlos de manera recursiva según sea necesario.
 Este método retiene cualquier escritura realizada contra objetos activos en el
-sistema sin unirlos de regreso a los ficheros de configuración. `kubectl diff` le
+sistema sin unirlos de regreso a los archivos de configuración. `kubectl diff` le
 permite visualizar de manera previa los cambios que `apply` realizará.
 
 ## {{% heading "prerequisites" %}}
@@ -36,11 +36,11 @@ para una discusión de las ventajas y desventajas de cada modo distinto de admin
 ## Visión general
 
 La configuración de objetos declarativa requiere una comprensión firme de la
-definición y configuración de objetos de Kubernetes. Lea y complete los siguientes
-documentos si aún no lo ha hecho:
+definición y configuración de objetos de Kubernetes. Si aún no lo ha hecho, lea 
+y complete los siguientes documentos:
 
-* [Administració n de Objetos de Kubernetes usando comandos imperativos](/docs/tasks/manage-kubernetes-objects/imperative-command/)
-* [Administración imperativa de los Objetos de Kubernetes usando ficheros de Configuración](/docs/tasks/manage-kubernetes-objects/imperative-config/)
+* [Administración de Objetos de Kubernetes usando comandos imperativos](/docs/tasks/manage-kubernetes-objects/imperative-command/)
+* [Administración imperativa de los Objetos de Kubernetes usando archivos de Configuración](/docs/tasks/manage-kubernetes-objects/imperative-config/)
 
 {{< comment >}}
 TODO(lmurillo): Update the links above to the spanish versions of these documents once the
@@ -49,21 +49,21 @@ localizations become available
 
 A continuación la definición de términos usados en este documento:
 
-- *fichero de configuración de objeto / fichero de configuración*: Un fichero en el
+- *archivo de configuración de objeto / archivo de configuración*: Un archivo en el
   que se define la configuración de un objeto de Kubernetes. Este tema muestra como
-  utilizar ficheros de configuración con `kubectl apply`. Los ficheros de configuración
+  utilizar archivos de configuración con `kubectl apply`. Los archivos de configuración
   por lo general se almacenan en un sistema de control de versiones, como Git.
 - *configuración activa de objeto / configuración activa*: Los valores de configuración
   activos de un objeto, según estén siendo observados por el Clúster. Esta configuración
   se almacena en el sistema de almacenamiento de Kubernetes, usualmente etcd.
 - *escritor de configuración declarativo / escritor declarativo*: Una persona o
   componente de software que actualiza a un objeto activo. Los escritores activos a
-  los que se refiere este tema aplican cambios a los ficheros de configuración de objetos
+  los que se refiere este tema aplican cambios a los archivos de configuración de objetos
   y ejecutan `kubectl apply` para aplicarlos.
 
 ## Como crear objetos
 
-Utilice `kubectl apply` para crear todos los objetos definidos en los ficheros
+Utilice `kubectl apply` para crear todos los objetos definidos en los archivos
 de configuración existentes en un directorio específico, con excepción de aquellos que
 ya existen:
 
@@ -72,14 +72,14 @@ kubectl apply -f <directorio>/
 ```
 
 Esto definirá la anotación `kubectl.kubernetes.io/last-applied-configuration: '{...}'`
-en cada objeto. Esta anotación contiene el contenido del fichero de configuración
+en cada objeto. Esta anotación contiene el contenido del archivo de configuración
 utilizado para la creación del objeto.
 
 {{< note >}}
 Agregue la opción `-R` para procesar un directorio de manera recursiva.
 {{< /note >}}
 
-El siguiente es un ejemplo de fichero de configuración para un objeto:
+El siguiente es un ejemplo de archivo de configuración para un objeto:
 
 {{< codenew file="application/simple_deployment.yaml" >}}
 
@@ -113,7 +113,7 @@ kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yam
 ```
 
 La salida le demostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
-fue escrita a la configuración activa, y es consistente con los contenidos del fichero
+fue escrita a la configuración activa, y es consistente con los contenidos del archivo
 de configuración:
 
 ```yaml
@@ -162,7 +162,7 @@ aún cuando esos objetos ya existan en la configuración activa. Con este enfoqu
 lo siguiente:
 
 1. Definir los campos que aparecerán en la configuración activa.
-2. Eliminar aquellos campos eliminados en el fichero de configuración, de la configuración activa.
+2. Eliminar aquellos campos eliminados en el archivo de configuración, de la configuración activa.
 
 ```shell
 kubectl diff -f <directorio>/
@@ -173,7 +173,7 @@ kubectl apply -f <directorio>/
 Agregue la opción `-R` para procesar directorios de manera recursiva.
 {{< /note >}}
 
-Este es un ejemplo de fichero de configuración:
+Este es un ejemplo de archivo de configuración:
 
 {{< codenew file="application/simple_deployment.yaml" >}}
 
@@ -184,7 +184,7 @@ kubectl apply -f https://k8s.io/examples/application/simple_deployment.yaml
 ```
 
 {{< note >}}
-Con el propósito de ilustrar, el comando anterior se refiere a un único fichero
+Con el propósito de ilustrar, el comando anterior se refiere a un único archivo
 de configuración en vez de un directorio.
 {{< /note >}}
 
@@ -195,7 +195,7 @@ kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yam
 ```
 
 La salida le demostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
-fue escrita a la configuración activa, y es consistente con los contenidos del fichero
+fue escrita a la configuración activa, y es consistente con los contenidos del archivo
 de configuración:
 
 ```yaml
@@ -291,12 +291,12 @@ spec:
       # ...
 ```
 
-Actualice el fichero de configuración `simple_deployment.yaml` para cambiar el campo `image`
+Actualice el archivo de configuración `simple_deployment.yaml` para cambiar el campo `image`
 de `nginx:1.14.2` a `nginx:1.16.1`, y elimine el campo `minReadySeconds`:
 
 {{< codenew file="application/update_deployment.yaml" >}}
 
-Aplique los cambios realizados al fichero de configuración:
+Aplique los cambios realizados al archivo de configuración:
 
 ```shell
 kubectl diff -f https://k8s.io/examples/application/update_deployment.yaml
@@ -312,7 +312,7 @@ kubectl get -f https://k8s.io/examples/application/update_deployment.yaml -o yam
 La salida le mostrará los siguienes cambios hechos a la configuración activa:
 
 * El campo `replicas` retiene el valor de 2 definido por `kubectl scale`.
-  Esto es posible ya que el campo fue omitido en el fichero de configuración.
+  Esto es posible ya que el campo fue omitido en el archivo de configuración.
 * El campo `image` ha sido actualizado de `nginx:1.16.1` a `nginx:1.14.2`.
 * La anotación `last-applied-configuration` ha sido actualizada con la nueva imagen.
 * El campo `minReadySeconds` ha sido despejado.
@@ -360,24 +360,24 @@ spec:
 ```
 
 {{< warning >}}
-No es soportado combinar `kubectl apply` con los comandos de configuración imperativa de objetos 
-`create` y `replace`. Esto se debe a que `create`
+No se puede combinar `kubectl apply` con comandos de configuración imperativa de objetos 
+como `create` y `replace`. Esto se debe a que `create`
 y `replace` no retienen la anotación `kubectl.kubernetes.io/last-applied-configuration`
 que `kubectl apply` utiliza para calcular los cambios por realizar.
 {{< /warning >}}
 
 ## Como eliminar objetos
 
-Hay dos diferentes opciones para eliminar objetos gestionados por `kubectl apply`.
+Hay dos opciones diferentes para eliminar objetos gestionados por `kubectl apply`.
 
-### Manera recomendada: `kubectl delete -f <fichero>`
+### Manera recomendada: `kubectl delete -f <archivo>`
 
 Eliminar objetos de manera manual utilizando el comando imperativo es la opción
 recomendada, ya que es más explícito en relación a lo que será eliminado, y es
 menos probable que resulte en algo siendo eliminado sin la intención del usuario.
 
 ```shell
-kubectl delete -f <fichero>
+kubectl delete -f <archivo>
 ```
 
 ### Manera alternativa: `kubectl apply -f <directorio/> --prune -l etiqueta=deseada`
@@ -397,8 +397,8 @@ no intencionalmente.
 Como una alternativa a `kubectl delete`, puede usar `kubectl apply`para identificar objetos por ser
 eliminados, luego de que sus archivos de configuración han sido eliminados del directorio. El commando `apply` con `--prune`
 consulta a la API del servidor por todos los objetos que coincidan con un grupo de etiquetas, e intenta relacionar
-la configuración obtenida de los objetos activos contra los objetos según sus ficheros de configuración.
-Si un objeto coincide con la consulta, y no tiene un fichero de configuración en el directorio, pero si
+la configuración obtenida de los objetos activos contra los objetos según sus archivos de configuración.
+Si un objeto coincide con la consulta, y no tiene un archivo de configuración en el directorio, pero si
 tiene una anotación `last-applied-configuration`, entonces será eliminado.
 
 {{< comment >}}
@@ -411,7 +411,7 @@ kubectl apply -f <directorio/> --prune -l <etiquetas>
 
 {{< warning >}}
 `apply` con `--prune` debería de ser ejecutado únicamente en contra del directorio
-raíz que contiene los ficheros de configuración. Ejecutarlo en contra de sub-directorios
+raíz que contiene los archivos de configuración. Ejecutarlo en contra de sub-directorios
 podría causar que objetos sean eliminados no intencionalmente, si son retornados en la
 consulta por selección de etiqueta usando `-l <etiquetas>` y no existen en el subdirectorio.
 {{< /warning >}}
@@ -421,7 +421,7 @@ consulta por selección de etiqueta usando `-l <etiquetas>` y no existen en el s
 Puede usar `kubectl get` con `-o yaml` para ver la configuración de objetos activos:
 
 ```shell
-kubectl get -f <fichero|url> -o yaml
+kubectl get -f <archivo|url> -o yaml
 ```
 
 ## Como son las diferencias calculadas y unidas por apply
@@ -435,7 +435,7 @@ específicos en un objeto sin tener que leer el objeto primero.
 Cuando `kubectl apply` actualiza la configuración activa para un objeto, lo hace enviando
 una solicitud de patch al servidor de API. El patch define actualizaciones para campos
 específicos en la configuración del objeto activo. El comando `kubectl apply` calcula esta solicitud
-de patch usando el fichero de configuración, la configuración activa, y la anotación `last-applied-configuration`
+de patch usando el archivo de configuración, la configuración activa, y la anotación `last-applied-configuration`
 almacenada en la configuración activa.
 
 ### Calculando la unión de un patch
@@ -445,10 +445,10 @@ El comando `kubectl apply` escribe los contenidos de la configuración a la anot
 que han sido eliminados de la configuración y deben ser limpiados. Los siguientes pasos
 son usados para calcular que campos deben ser eliminados o definidos:
 
-1. Calculo de campos por eliminar. Estos son los campos presentes en `last-applied-configuration` pero ausentes en el fichero de configuración.
-2. Calculo de campos por agregar o definir. Estos son los campos presentes en el fichero de configuración, con valores inconsistentes con la configuración activa.
+1. Calculo de campos por eliminar. Estos son los campos presentes en `last-applied-configuration` pero ausentes en el archivo de configuración.
+2. Calculo de campos por agregar o definir. Estos son los campos presentes en el archivo de configuración, con valores inconsistentes con la configuración activa.
 
-A continuación un ejemplo. Suponga que este es el fichero de configuración para un objeto de tipo Deployment:
+A continuación un ejemplo. Suponga que este es el archivo de configuración para un objeto de tipo Deployment:
 
 {{< codenew file="application/update_deployment.yaml" >}}
 
@@ -495,18 +495,18 @@ spec:
 Estos son los cálculos de unión que serían realizados por `kubectl apply`:
 
 1. Calcular los campos por eliminar, leyendo los valores de `last-applied-configuration`
-   y comparándolos con los valores en el fichero de configuración.
-   Limpiar los campos definidos en null de manera explícita en el fichero de configuración
+   y comparándolos con los valores en el archivo de configuración.
+   Limpiar los campos definidos en null de manera explícita en el archivo de configuración
    sin tomar en cuenta si se encuentran presentes en la anotación `last-applied-configuration`.
    En este ejemplo, `minReadySeconds` aparece en la anotación
-   `last-applied-configuration` pero no aparece en el fichero de configuración.
+   `last-applied-configuration` pero no aparece en el archivo de configuración.
     **Acción:** Limpiar `minReadySeconds` de la configuración activa.
 2. Calcular los campos por ser definidos, al leer los valores del firecho de configuración
    y compararlos con los valores en la configuración activa. En este ejemplo, el valor `image`
-   en el fichero de configuración, no coincide con el valor en la configuración activa.
+   en el archivo de configuración, no coincide con el valor en la configuración activa.
    **Acción:** Definir el campo `image` en la configuración activa.
 3. Definir el valor de la anotación `last-applied-configuration` para que sea consistente
-   con el fichero de configuración.
+   con el archivo de configuración.
 4. Unir los resultados de 1, 2 y 3, en una única solicitud de patch para enviar al API server.
 
 Esta es la configuración activa como resultado de esta unión:
@@ -554,7 +554,7 @@ spec:
 
 ### Como se unen los diferentes tipos de campos
 
-La manera en la que los campos en un fichero de configuración son unidos con la
+La manera en la que los campos en un archivo de configuración son unidos con la
 configuración activa depende del tipo de campo. Existen varios tipos de campos:
 
 - *primitivo*: Campos de cadena de texto (string), enteros (integer), o lógicos (boolean).
@@ -581,9 +581,9 @@ Campos primitivos son limpiados o reemplazados.
 `-` determina que "no aplica" debido a que el valor no es utilizado.
 {{< /note >}}
 
-| Campo en el fichero de configuración  | Campo en la configuración activa   | Campo en last-applied-configuration | Acción                                                       |
+| Campo en el archivo de configuración  | Campo en la configuración activa   | Campo en last-applied-configuration | Acción                                                       |
 |---------------------------------------|------------------------------------|-------------------------------------|--------------------------------------------------------------|
-| Si                                    | Si                                 | -                                   | Define el valor en el fichero de configuración como activo.  |
+| Si                                    | Si                                 | -                                   | Define el valor en el archivo de configuración como activo.  |
 | Si                                    | No                                 | -                                   | Define el valor a la configuración local.                    |
 | No                                    | -                                  | Si                                  | Elimina de la configuración activa.                          |
 | No                                    | -                                  | No                                  | No hacer nada. Mantiene el valor activo.                     |
@@ -596,7 +596,7 @@ Los campos que conjúntamente representan un mapa, son unidos al comparar cada u
 `-` determina que "no aplica" debido a que el valor no es utilizado.
 {{< /note >}}
 
-| Propiedad en fichero de configuración | Propiedad en configuración activa | Campo en last-applied-configuration | Acción                                   |
+| Propiedad en archivo de configuración | Propiedad en configuración activa | Campo en last-applied-configuration | Acción                                   |
 |---------------------------------------|-----------------------------------|-------------------------------------|------------------------------------------|
 | Si                                    | Si                                | -                                   | Comparar valores de sub-propiedades.     |
 | Si                                    | No                                | -                                   | Usar configuracón local.                 |
@@ -620,16 +620,16 @@ Esto preserva el orden de los elementos.
 
 
 **Ejemplo:** Usndo `kubectl apply` para actualizar el campo `args` de un Contenedor en un Pod.
-Esto define el valor de `args` en la configuración activa, al valor en el fichero de configuración.
+Esto define el valor de `args` en la configuración activa, al valor en el archivo de configuración.
 Cualquier elemento de `args` que haya sido previamente agregado a la configuración activa se perderá.
-El orden de los elementos definidos en `args` en el fichero de configuración, serán conservados
+El orden de los elementos definidos en `args` en el archivo de configuración, serán conservados
 en la configuración activa.
 
 ```yaml
 # valor en last-applied-configuration
     args: ["a", "b"]
 
-# valores en fichero de configuración
+# valores en archivo de configuración
     args: ["a", "c"]
 
 # configuración activa
@@ -639,7 +639,7 @@ en la configuración activa.
     args: ["a", "c"]
 ```
 
-**Explicación:** La unión utilizó los valores del fichero de configuración para definir los nuevos valores de la lista.
+**Explicación:** La unión utilizó los valores del archivo de configuración para definir los nuevos valores de la lista.
 
 #### Unir elementos individuales en una lista de elementos complejos
 
@@ -665,7 +665,7 @@ Esto une la lista como si fuese un mapa donde cada elemento utiliza `name` por l
     - name: nginx-helper-b # llave: nginx-helper-b; será conservado
       image: helper:1.3
 
-# valor en fichero de configuración
+# valor en archivo de configuración
     containers:
     - name: nginx
       image: nginx:1.16
@@ -703,16 +703,16 @@ Esto une la lista como si fuese un mapa donde cada elemento utiliza `name` por l
 **Explicación:**
 
 - El contenedor llamado "nginx-helper-a" fué eliminado al no aparecer ningún
-  contenedor llamado "nginx-helper-a" en el fichero de configuración.
+  contenedor llamado "nginx-helper-a" en el archivo de configuración.
 - El contenedor llamado "nginx-helper-b" mantiene los cambios a  `args`
   existentes en la configuración activa. `kubectl apply` pudo identificar que
   el contenedor "nginx-helper-b" en la configuración activa es el mismo
-  "nginx-helper-b" que aparece en el fichero de configuración, aún teniendo diferentes
-  valores en los campos (no existe `args` en el fichero de configuración). Esto sucede
+  "nginx-helper-b" que aparece en el archivo de configuración, aún teniendo diferentes
+  valores en los campos (no existe `args` en el archivo de configuración). Esto sucede
   debido a que el valor del campo `patchMergeKey` (name) es idéntico en ambos.
 - El contenedor llamado "nginx-helper-c" fue agregado ya que no existe ningún contenedor
   con ese nombre en la configuración activa, pero si existe uno con ese nombre
-  en el fichero de configuración.
+  en el archivo de configuración.
 - El contendor llamado "nginx-helper-d" fue conservado debido a que no aparece
   ningún elemento con ese nombre en last-applied-configuration.
 
@@ -721,10 +721,9 @@ Esto une la lista como si fuese un mapa donde cada elemento utiliza `name` por l
 A partir de Kubernetes 1.5, el unir listas de elementos primitivos no es soportado.
 
 {{< note >}}
-La escogencia de estrategia por selecciones para un campo en particular, es controlada
-por la etiqueta `patchStrategy` en [types.go](https://github.com/kubernetes/api/blob/d04500c8c3dda9c980b668c57abc2ca61efcf5c4/core/v1/types.go#L2748)
-Si no se especifica `patchStrategy` para un campo de tipo lista, entonces el campo
-es reemplazado.
+La etiqueta `patchStrategy` en [types.go](https://github.com/kubernetes/api/blob/d04500c8c3dda9c980b668c57abc2ca61efcf5c4/core/v1/types.go#L2748) es la que
+determina cual de las estrategias aplica para cualquier campo en particular.
+Para campos de tipo lista, el campo será reemplazado cuando no exista una especificación de `patchStrategy`.
 {{< /note >}}
 
 {{< comment >}}
@@ -743,7 +742,7 @@ is lost.
 El Servidor de API define algunos campos a sus valores por defecto si no son especificados
 al momento de crear un objeto.
 
-Aquí puede ver un fichero de configuración para un Deployment. Este fichero no especifica
+Aquí puede ver un archivo de configuración para un Deployment. Este archivo no especifica
 el campo `strategy`:
 
 {{< codenew file="application/simple_deployment.yaml" >}}
@@ -760,8 +759,8 @@ Despliegue la configuración activa usando `kubectl get`:
 kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yaml
 ```
 
-La salida demuestra que el API Server definió varios campos con los valores por defecto
-en la configuración activa. Estos campos no fueron especificados en el fichero de
+La salida muestra que el servidor de API definió varios campos con los valores por defecto
+en la configuración activa. Estos campos no fueron especificados en el archivo de
 configuración.
 
 ```yaml
@@ -801,14 +800,14 @@ spec:
 # ...
 ```
 
-En una solicitud de patch, los campos definidos a valores por defecto no son re-definidos exceptuando
-cuando hayan sido limpiados de manera explícita como parte de la solicitud de patch. Esto puede
+En una solicitud de patch, los campos definidos a valores por defecto no son redefinidos a excepción
+de cuando hayan sido limpiados de manera explícita como parte de la solicitud de patch. Esto puede
 causar comportamientos no esperados para campos cuyo valor por defecto es basado en los valores
 de otros campos. Cuando el otro campo ha cambiado, el valor por defecto de ellos no será actualizado
 de no ser que sean limpiados de manera explícita.
 
 Por esta razón, se recomienda que algunos campos que reciben un valor por defecto del
-servidor sean definidos de manera explícita en los ficheros de configuración, aun cuando
+servidor sean definidos de manera explícita en los archivos de configuración, aun cuando
 el valor definido sea idéntico al valor por defecto. Esto facilita la identificación
 de valores conflictivos que podrían no ser revertidos a valores por defecto por parte
 del servidor.
@@ -829,7 +828,7 @@ spec:
         ports:
         - containerPort: 80
 
-# fichero de configuración
+# archivo de configuración
 spec:
   strategy:
     type: Recreate # valor actualizado
@@ -888,12 +887,12 @@ spec:
    agrega los valores por defecto a `strategy.rollingUpdate`.
 3. El usuario cambia `strategy.type` a `Recreate`. Los valores de `strategy.rollingUpdate`
    se mantienen en su configuración por defecto, sin embargo el servidor espera que se limpien.
-   Si los valores de `strategy.rollingUpdate` hubiesen sido definidos inicialmente en el fichero
+   Si los valores de `strategy.rollingUpdate` hubiesen sido definidos inicialmente en el archivo
    de configuración, hubiese sido más claro que requerían ser eliminados.
 4. Apply fallará debido a que `strategy.rollingUpdate` no fue eliminado. El campo `strategy.rollingupdate`
    no puede estar definido, si el valor de `strategy.type` es `Recreate`.
 
-Recomendación: Estos campos deberían de ser definidos de manera explícita en el fichero de configuración:
+Recomendación: Estos campos deberían de ser definidos de manera explícita en el archivo de configuración:
 
 - Etiquetas de Selectors y PodTemplate en cargas de trabajo como Deployment, StatefulSet, Job, DaemonSet,
   ReplicaSet, y ReplicationController
@@ -901,31 +900,31 @@ Recomendación: Estos campos deberían de ser definidos de manera explícita en
 
 ### Como limpiar campos definidos a valores por defecto por el servidor, o definidos por otros escritores
 
-Campos que no aparecen en el fichero de configuración pueden ser limpiados si se define su valor
-a `null` y luego se aplica el fichero de configuración.
-Para los campos definidos a valores por defecto por el servidor, esto provoca el re establecimiento
+Campos que no aparecen en el archivo de configuración pueden ser limpiados si se define su valor
+a `null` y luego se aplica el archivo de configuración.
+Para los campos definidos a valores por defecto por el servidor, esto provoca que se reestablezca
 a sus valores por defecto.
 
-## Como cambiar al propietario de un campo entre un fichero de configuración y un escritor imperativo
+## Como cambiar al propietario de un campo entre un archivo de configuración y un escritor imperativo
 
 Estos son los únicos métodos que debe usar para cambiar un campo individual de un objeto:
 
 - Usando `kubectl apply`.
-- Escribiendo de manera directa a la configuración activa sin modificar el fichero de configuración:
+- Escribiendo de manera directa a la configuración activa sin modificar el archivo de configuración:
 por ejemplo, usando `kubectl scale`.
 
-### Cambiando al propietario de un campo de un escritor imperativo a un fichero de configuración
+### Cambiando al propietario de un campo de un escritor imperativo a un archivo de configuración
 
-Añada el campo al fichero de configuración, y no realice nuevas actualizaciones a la configuración
+Añada el campo al archivo de configuración, y no realice nuevas actualizaciones a la configuración
 activa que no sucedan por medio de `kubectl apply`.
 
-### Cambiando al propietario de un fichero de configuración a un escritor imperativo
+### Cambiando al propietario de un archivo de configuración a un escritor imperativo
 
 A partir de Kubernetes 1.5, el cambiar un campo que ha sido definido por medio de un
-fichero de configuración para que sea modificado por un escritor imperativo requiere
+archivo de configuración para que sea modificado por un escritor imperativo requiere
 pasos manuales:
 
-- Eliminar el campo del fichero de configuración.
+- Eliminar el campo del archivo de configuración.
 - Eliminar el campo de la anotación `kubectl.kubernetes.io/last-applied-configuration` en el objeto activo.
 
 ## Cambiando los métodos de gestión
@@ -950,17 +949,17 @@ fields to the annotation, and instead.  Then add this bullet point.
 El migrar de gestión imperativa utilizando comandos a la gestión declarativa de objetos
 requiere varios pasos manuales:
 
-1. Exporte el objeto activo a un fichero local de configuración:
+1. Exporte el objeto activo a un archivo local de configuración:
 
      ```shell
      kubectl get <tipo>/<nombre> -o yaml > <tipo>_<nombre>.yaml
      ```
 
-1. Elimine de manera manual el campo `status` del fichero de configuración.
+1. Elimine de manera manual el campo `status` del archivo de configuración.
 
     {{< note >}}
     Este paso es opcional, ya que `kubectl apply` no actualiza el campo `status`
-   aunque este presente en el fichero de configuración.
+   aunque este presente en el archivo de configuración.
     {{< /note >}}
 
 1. Defina la anotación `kubectl.kubernetes.io/last-applied-configuration` en el objeto:
@@ -988,7 +987,7 @@ TODO(pwittrock): Why doesn't export remove the status field?  Seems like it shou
 ## Definiendo los selectores para el controlador y las etiquetas de PodTemplate
 
 {{< warning >}}
-Actualizar selectores en controladores se desaconseja encarecidamente.
+Se desaconseja encarecidamente actualizar los selectores en controladores.
 {{< /warning >}}
 
 La forma recomendada es definir una etiqueta única e inmutable para PodTemplate usada

From a799505a5e8c8986908dd2c6e4204106bc6d129f Mon Sep 17 00:00:00 2001
From: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
Date: Thu, 25 Feb 2021 14:37:40 -0300
Subject: [PATCH 052/788] Add netpol endport documentation before release

---
 .../services-networking/network-policies.md   | 43 ++++++++++++++++++-
 1 file changed, 42 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index 2000d838b4..2a829b3ab4 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -221,6 +221,48 @@ When the feature gate is enabled, you can set the `protocol` field of a NetworkP
 You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that supports SCTP protocol NetworkPolicies.
 {{< /note >}}
 
+## Targeting a range of Ports
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+When writing a Network Policy, you can target a range of Ports instead of a single port.
+
+This is achiveable with the usage of the `endPort` field, as the following example:
+
+```yaml
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: multi-port-egress
+  namespace: default
+spec:
+  podSelector:
+    matchLabels:
+      role: db
+  policyTypes:
+  - Egress
+  egress:
+  - to:
+    - ipBlock:
+        cidr: 10.0.0.0/24
+    ports:
+    - protocol: TCP
+      port: 32000
+      endPort: 32768
+```
+
+The above rule will allow a Pod with label `db` on the namespace `default` to communicate with any IP within the range `10.0.0.0/24` if the target port is between the range 32000 and 32768.
+
+The following restrictions apply when using this field:
+* As an alpha feature, this is disabled by default. To enable endPort field at a cluster level, you (or your cluster administrator) will need to enable the `NetworkPolicyEndPort` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for the API server with `--feature-gates=NetworkPolicyEndPort=true,…`.
+* The `endPort` field must be equal than or greater to `port` field.
+* `endPort` can only be defined if `port` is also defined.
+* When using `endPort` field, the `port` field must be numeric.
+
+{{< note >}}
+You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that supports endPort field in NetworkPolicies ports specification.
+{{< /note >}}
+
 ## What you can't do with network policies (at least, not yet)
 
 As of Kubernetes 1.20, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
@@ -232,7 +274,6 @@ As of Kubernetes 1.20, the following functionality does not exist in the Network
 - Creation or management of "Policy requests" that are fulfilled by a third party.
 - Default policies which are applied to all namespaces or pods (there are some third party Kubernetes distributions and projects which can do this).
 - Advanced policy querying and reachability tooling.
-- The ability to target ranges of Ports in a single policy declaration.
 - The ability to log network security events (for example connections that are blocked or accepted).
 - The ability to explicitly deny policies (currently the model for NetworkPolicies are deny by default, with only the ability to add allow rules).
 - The ability to prevent loopback or incoming host traffic (Pods cannot currently block localhost access, nor do they have the ability to block access from their resident node).

From 79113f3f6843489498dfcbf2fd65e87376c2a585 Mon Sep 17 00:00:00 2001
From: Cristian Klein <cristian.klein@elastisys.com>
Date: Fri, 26 Feb 2021 10:32:30 +0100
Subject: [PATCH 053/788] Change to inclusive naming

See https://inclusivenaming.org/ on why "multi-master" should be avoided.
---
 content/en/docs/concepts/overview/components.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/overview/components.md b/content/en/docs/concepts/overview/components.md
index eb17e2dd7e..3d42d83616 100644
--- a/content/en/docs/concepts/overview/components.md
+++ b/content/en/docs/concepts/overview/components.md
@@ -33,7 +33,7 @@ The control plane's components make global decisions about the cluster (for exam
 Control plane components can be run on any machine in the cluster. However,
 for simplicity, set up scripts typically start all control plane components on
 the same machine, and do not run user containers on this machine. See
-[Building High-Availability Clusters](/docs/admin/high-availability/) for an example multi-master-VM setup.
+[Building High-Availability Clusters](/docs/admin/high-availability/) for an example multi-control-plane-VM setup.
 
 ### kube-apiserver
 

From 05e03289a96f94261339df13a8e84624f244acdb Mon Sep 17 00:00:00 2001
From: Abdullah Gharaibeh <ahg@google.com>
Date: Fri, 26 Feb 2021 14:52:47 -0500
Subject: [PATCH 054/788] ttlafterfinish to beta

---
 .../docs/concepts/workloads/controllers/ttlafterfinished.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/concepts/workloads/controllers/ttlafterfinished.md b/content/en/docs/concepts/workloads/controllers/ttlafterfinished.md
index 65527e5ce2..266e72a79f 100644
--- a/content/en/docs/concepts/workloads/controllers/ttlafterfinished.md
+++ b/content/en/docs/concepts/workloads/controllers/ttlafterfinished.md
@@ -8,7 +8,7 @@ weight: 70
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.12" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 The TTL controller provides a TTL (time to live) mechanism to limit the lifetime of resource
 objects that have finished execution. TTL controller only handles
@@ -16,9 +16,9 @@ objects that have finished execution. TTL controller only handles
 and may be expanded to handle other resources that will finish execution,
 such as Pods and custom resources.
 
-Alpha Disclaimer: this feature is currently alpha, and can be enabled with both kube-apiserver and kube-controller-manager
+This feature is currently beta and enabled by default, and can be disabled via 
 [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
-`TTLAfterFinished`.
+`TTLAfterFinished` in both kube-apiserver and kube-controller-manager.
 
 <!-- body -->
 

From c0bb986cd6537034d523e917cfc2728aa56e6a9d Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Fri, 26 Feb 2021 17:34:57 -0300
Subject: [PATCH 055/788] Add review suggestions

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../en/docs/concepts/services-networking/network-policies.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index 2a829b3ab4..d5c14f9465 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -225,7 +225,7 @@ You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin tha
 
 {{< feature-state for_k8s_version="v1.21" state="alpha" >}}
 
-When writing a Network Policy, you can target a range of Ports instead of a single port.
+When writing a NetworkPolicy, you can target a range of ports instead of a single port.
 
 This is achiveable with the usage of the `endPort` field, as the following example:
 
@@ -260,7 +260,8 @@ The following restrictions apply when using this field:
 * When using `endPort` field, the `port` field must be numeric.
 
 {{< note >}}
-You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that supports endPort field in NetworkPolicies ports specification.
+Your cluster must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that
+supports the `endPort` field in NetworkPolicy specifications.
 {{< /note >}}
 
 ## What you can't do with network policies (at least, not yet)

From bc023f265cfe4829e09e74859219dd7fbd65124f Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Sat, 27 Feb 2021 07:03:42 -0500
Subject: [PATCH 056/788] add blog post on using kubectl annotate for human
 service discovery

---
 .../2021-02-27-annotating-k8s-for-humans.md   | 99 +++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
new file mode 100644
index 0000000000..bfc49a431b
--- /dev/null
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -0,0 +1,99 @@
+---
+layout: blog
+title: 'Annotating Kubernetes Services for Humans'
+date: 2021-02-27
+slug: annotating-k8s-for-humans
+---
+
+**Authors:** Richard Li (Ambassador Labs)
+
+Have you ever been asked to troubleshoot a failing Kubernetes service and struggled to find basic information about the service such as the source repository and owner?
+
+One of the problems as Kubernetes applications grow is the proliferation of services. As the number of services grows, developers start to specialize working with specific services. When it comes to troubleshooting, however, developers need to be able to find the source, understand the service and dependencies, and chat with the owning team for any service.
+
+## Human Service Discovery
+
+Troubleshooting always begins with information gathering. While much attention has been paid to centralizing machine data (e.g., logs, metrics), much less attention has been given to the human aspect of service discovery. Who owns a particular service? What Slack channel does the team work on? Where is the source for the service? What issues are currently known and being tracked?
+
+## Kubernetes Annotations
+
+Kubernetes annotations are designed to solve exactly this problem. Oft-overlooked, Kubernetes annotations are designed to add metadata to Kubernetes objects. The Kubernetes documentation says annotations can “attach arbitrary non-identifying metadata to objects.” This means that annotations should be used for attaching metadata that is external to Kubernetes (i.e., metadata that Kubernetes won’t use to identify objects. As such, annotations can contain any type of data. This is a contrast to labels, which are designed for uses internal to Kubernetes. As such, label structure and values are [constrained](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set) so they can be efficiently used by Kubernetes.
+
+
+## Kubernetes Annotations in Action
+
+Here is an example. Imagine you have a Kubernetes service for quoting, called the quote service. You can do the following:
+
+```
+$ kubectl annotate service quote a8r.io/owner=”@sally”
+```
+
+In this example, we’ve just added an annotation called `a8r.io/owner` with the value of @sally. Now, we can use `kubectl describe` to get the information.
+
+```
+$ kubectl describe svc quote
+Name:              quote
+Namespace:         default
+Labels:            <none>
+Annotations:       a8r.io/owner: @sally
+Selector:          app=quote
+Type:              ClusterIP
+IP:                10.109.142.131
+Port:              http  80/TCP
+TargetPort:        8080/TCP
+Endpoints:         <none>
+Session Affinity:  None
+Events:            <none>
+```
+
+If you’re practicing GitOps (and you should be!) you’ll want to code these values directly into your Kubernetes manifest, e.g.,
+
+```
+apiVersion: v1
+kind: Service
+metadata:
+  name: quote
+  annotations:
+    a8r.io/owner: “@sally”
+spec:
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8080
+  selector:
+    app: quote
+```
+
+## A Convention for Annotations
+
+Adopting a common convention for annotations ensures consistency and understandability. Typically, you’ll want to attach the annotation to the service object, as services are the high-level resource that maps most clearly to a team’s responsibility. Namespacing your annotations is also very important. Here is one set of conventions, documented at [a8r.io](https://a8r.io), and reproduced below:
+
+| Annotation                                 | Description                                 |
+| ------------------------------------------ | ------------------------------------------- |
+| `a8r.io/description`                       | Unstructured text description of the service for humans.      |
+| `a8r.io/owner`                             | SSO username (GitHub), email address (linked to GitHub account), or unstructured owner description. |
+| `a8r.io/chat`                              | Slack channel, or link to external chat system |
+| `a8r.io/bugs`                              | Link to external bug tracker |
+| `a8r.io/logs`                              | Link to external log viewer |
+| `a8r.io/documentation`                     | Link to external project documentation |
+| `a8r.io/repository`                        | Link to external VCS repository |
+| `a8r.io/support`                           | Link to external support center |
+| `a8r.io/runbook`                           | Link to external project runbook |
+| `a8r.io/incidents`                         | Link to external incident dashboard |
+| `a8r.io/uptime`                            | Link to external uptime dashboard |
+| `a8r.io/performance`                       | Link to external performance dashboard |
+| `a8r.io/dependencies`                      | Unstructured text describing the service dependencies for humans. |
+
+
+## Visualizing Annotations: Service Catalogs
+
+As the number of microservices and annotations proliferate, using `kubectl describe` can get tedious. Moreover, kubectl describe requires every developer to have some direct access to the Kubernetes cluster. A [service catalog](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog) presents an internal, developer-oriented view of all services. 
+
+Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include Backstage and Ambassador. [Backstage](https://backstage.io/) is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while [Ambassador](https://www.getambassador.io/products/service-catalog) provides a turnkey, cloud-hosted solution that can be set up quickly.
+
+## Annotate Your Services Now and Thank Yourself Later
+Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Typically, something is on fire in production and you wished you had implemented better metrics and also specified which Slack channel the owning team lived in within your organization. 
+
+There's enormous benefits to building an effective “[version 0](https://www.getambassador.io/learn/kubernetes-glossary/version-0/)” of any service: a “[dancing skeleton](https://containerjournal.com/topics/container-management/dancing-skeleton-apis-and-microservices/)” application with a thin slice of complete functionality that can be deployed to production with a minimal yet effective continuous delivery pipeline. 
+
+Adding service annotations should be an essential part of your “version 0” for all of your services. Add them now, and you’ll thank yourself later.

From 94f6f4945eee67fceed6688f66f48b941e9b06a2 Mon Sep 17 00:00:00 2001
From: ishii1648 <ishii1492@gmail.com>
Date: Wed, 17 Feb 2021 10:52:08 +0900
Subject: [PATCH 057/788] Fix the translation about Source IP for Services with
 Type=LoadBalancer

Signed-off-by: ishii1648 <ishiisho0509@gmail.com>
---
 content/ja/docs/tutorials/services/source-ip.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tutorials/services/source-ip.md b/content/ja/docs/tutorials/services/source-ip.md
index 05a54152a3..17317bbeae 100644
--- a/content/ja/docs/tutorials/services/source-ip.md
+++ b/content/ja/docs/tutorials/services/source-ip.md
@@ -272,7 +272,7 @@ graph TD;
 
 ## `Type=LoadBalancer`を使用したServiceでの送信元IP
 
-[`Type=LoadBalancer`](/ja/docs/concepts/services-networking/service/#loadbalancer)を使用したServiceに送られたパケットは、デフォルトでは送信元のNATは行われません。`Ready`状態にあるすべてのスケジュール可能なKubernetesのNodeは、ロードバランサーからのトラフィックを受付可能であるためです。そのため、エンドポイントが存在しないノードにパケットが到達した場合、システムはエンドポイントが*存在する*ノードにパケットをプロシキーします。このとき、(前のセクションで説明したように)パケットの送信元IPがノードのIPに置換されます。
+[`Type=LoadBalancer`](/ja/docs/concepts/services-networking/service/#loadbalancer)を使用したServiceに送られたパケットは、デフォルトで送信元のNATが行われます。`Ready`状態にあるすべてのスケジュール可能なKubernetesのNodeは、ロードバランサーからのトラフィックを受付可能であるためです。そのため、エンドポイントが存在しないノードにパケットが到達した場合、システムはエンドポイントが*存在する*ノードにパケットをプロシキーします。このとき、(前のセクションで説明したように)パケットの送信元IPがノードのIPに置換されます。
 
 ロードバランサー経由でsource-ip-appを公開することで、これをテストできます。
 

From 973ac40ef858964826b2ac19ab494a3c68d1d249 Mon Sep 17 00:00:00 2001
From: Jailton Lopes <jailton@gmail.com>
Date: Sun, 28 Feb 2021 14:46:01 -0300
Subject: [PATCH 058/788] Update
 content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html

- Update create-introl.html to use the "control plane" follow the
  official translation to Portuguese.

Signed-off-by: Jailton Lopes <jailton@gmail.com>
---
 .../create-cluster/cluster-intro.html         | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html b/content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
index 971e84ba40..8301e8890c 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
@@ -29,16 +29,16 @@ weight: 10
             <div class="col-md-8">
                 <h3>Clusters do Kubernetes</h3>
                 <p>
-                <b>O Kubernetes coordena um cluster altamente disponível de computadores conectados para funcionar como uma única unidade.</b>
-                As abstrações no Kubernetes permitem implantar aplicativos em contêineres em um cluster sem amarrá-los especificamente a máquinas individuais.
-                Para fazer uso desse novo modelo de implantação, os aplicativos precisam ser empacotados de uma forma que os desacople dos hosts individuais: eles precisam ser colocados em contêineres. Os aplicativos em contêineres são mais flexíveis e disponíveis do que nos modelos de implantação anteriores, nos quais os aplicativos eram instalados diretamente em máquinas específicas como pacotes profundamente integrados ao host. 
+                <b>O Kubernetes coordena um cluster com alta disponibilidade de computadores conectados para funcionar como uma única unidade.</b>
+                As abstrações no Kubernetes permitem implantar aplicativos em contêineres em um cluster sem amarrá-los especificamente as máquinas individuais.
+                Para fazer uso desse novo modelo de implantação, os aplicativos precisam ser empacotados de uma forma que os desacoplem dos hosts individuais: eles precisam ser empacotados em contêineres. Os aplicativos em contêineres são mais flexíveis e disponíveis do que nos modelos de implantação anteriores, nos quais os aplicativos eram instalados diretamente em máquinas específicas como pacotes profundamente integrados ao host. 
                 <b> O Kubernetes automatiza a distribuição e o agendamento de contêineres de aplicativos em um cluster de maneira mais eficiente. </b> 
                 O Kubernetes é uma plataforma de código aberto e está pronto para produção.
                 </p>
                 <p>Um cluster Kubernetes consiste em dois tipos de recursos:
                     <ul>
-                        <li>O <b>Master</b> coordena o cluster </li>
-                        <li>Os <b>Nodes</b> são os trabalhadores que executam aplicativos</li>
+                        <li>A <b>Camada de gerenciamento <i>(Control Plane)</i></b> coordena o cluster </li>
+                        <li>Os <b>Nós <i>(Nodes)</i></b> são os nós de processamento que executam aplicativos</li>
                     </ul>
                 </p>
             </div>
@@ -75,22 +75,22 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <p><b>O mestre é responsável por gerenciar o cluster. </b> O mestre coordena todas as atividades em seu cluster, como programação de aplicativos, manutenção do estado desejado dos aplicativos, escalonamento de aplicativos e lançamento de novas atualizações.</p>
-                <p><b>Um nó é uma VM ou um computador físico que atua como uma máquina de trabalho em um cluster Kubernetes. </b> Cada nó tem um Kubelet, que é um agente para gerenciar o nó e se comunicar com o mestre do Kubernetes. O nó também deve ter ferramentas para lidar com operações de contêiner, como containerd ou Docker. Um cluster Kubernetes que lida com o tráfego de produção deve ter no mínimo três nós.</p>
+                <p><b>A camada de gerenciamento é responsável por gerenciar o cluster. </b> A camada de gerenciamento coordena todas as atividades em seu cluster, como programação de aplicativos, manutenção do estado desejado dos aplicativos, escalonamento de aplicativos e lançamento de novas atualizações.</p>
+                <p><b>Um nó é uma VM ou um computador físico que atua como um nó de processamento em um cluster Kubernetes. </b> Cada nó tem um Kubelet, que é um agente para gerenciar o nó e se comunicar com a camada de gerenciamento do Kubernetes. O nó também deve ter ferramentas para lidar com operações de contêiner, como containerd ou Docker. Um cluster Kubernetes que lida com o tráfego de produção deve ter no mínimo três nós.</p>
 
             </div>
             <div class="col-md-4">
                 <div class="content__box content__box_fill">
-                    <p><i>Os mestres gerenciam o cluster e os nós que são usados ​​para hospedar os aplicativos em execução.</i></p>
+                    <p><i>As camadas de gerenciamento gerenciam o cluster e os nós que são usados ​​para hospedar os aplicativos em execução.</i></p>
                 </div>
             </div>
         </div>
 
         <div class="row">
             <div class="col-md-8">
-                <p>Ao implantar aplicativos no Kubernetes, você diz ao mestre para iniciar os contêineres de aplicativos. O mestre agenda os contêineres para serem executados nos nós do cluster. <b> Os nós se comunicam com o mestre usando a <a href="/docs/concepts/overview/kubernetes-api/"> API Kubernetes </a> </b>, que o mestre expõe. Os usuários finais também podem usar a API Kubernetes diretamente para interagir com o cluster.</p>
+                <p>Ao implantar aplicativos no Kubernetes, você diz à camada de gerenciamento para iniciar os contêineres de aplicativos. A camada de gerenciamento agenda os contêineres para serem executados nos nós do cluster. <b> Os nós se comunicam com o camada de gerenciamento usando a <a href="/docs/concepts/overview/kubernetes-api/"> API do Kubernetes </a> </b>, que a camada de gerenciamento expõe. Os usuários finais também podem usar a API do Kubernetes diretamente para interagir com o cluster.</p>
 
-                <p>Um cluster Kubernetes pode ser implantado em máquinas físicas ou virtuais. Para começar o desenvolvimento do Kubernetes, você pode usar o Minikube. O Minikube é uma implementação leve do Kubernetes que cria uma VM em sua máquina local e implanta um cluster simples contendo apenas um nó. O Minikube está disponível para sistemas Linux, macOS e Windows. O Minikube CLI fornece operações básicas de inicialização para trabalhar com seu cluster, incluindo iniciar, parar, status e excluir. Para este tutorial, no entanto, você usará um terminal online fornecido com o Minikube pré-instalado.</p>
+                <p>Um cluster Kubernetes pode ser implantado em máquinas físicas ou virtuais. Para começar o desenvolvimento do Kubernetes, você pode usar o Minikube. O Minikube é uma implementação leve do Kubernetes que cria uma VM em sua máquina local e implanta um cluster simples contendo apenas um nó. O Minikube está disponível para sistemas Linux, macOS e Windows. A linha de comando <i>(cli)</i> do Minikube fornece operações básicas de inicialização para trabalhar com seu cluster, incluindo iniciar, parar, status e excluir. Para este tutorial, no entanto, você usará um terminal online fornecido com o Minikube pré-instalado.</p>
 
                 <p>Agora que você sabe o que é Kubernetes, vamos para o tutorial online e iniciar nosso primeiro cluster!</p>
 

From 8bad612482550ca385cdfb37ec4dd2304b0ba79c Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio2020@gmail.com>
Date: Sun, 28 Feb 2021 16:44:36 -0300
Subject: [PATCH 059/788] Add
 content/pt/docs/concepts/containers/container-environment.md

---
 .../containers/container-environment.md       | 59 +++++++++++++++++++
 1 file changed, 59 insertions(+)
 create mode 100644 content/pt/docs/concepts/containers/container-environment.md

diff --git a/content/pt/docs/concepts/containers/container-environment.md b/content/pt/docs/concepts/containers/container-environment.md
new file mode 100644
index 0000000000..2b879eeb12
--- /dev/null
+++ b/content/pt/docs/concepts/containers/container-environment.md
@@ -0,0 +1,59 @@
+---
+reviewers:
+ - femrtnz
+ - jcjesus
+title: Ambiente de contêiner
+content_type: concept
+weight: 20
+---
+
+<!-- overview -->
+
+Essa página descreve os recursos disponíveis para contêineres no ambiente de contêiner.
+
+
+
+<!-- body -->
+
+## Ambiente de contêiner
+
+O ambiente de contêiner do Kubernetes fornece recursos importantes para contêineres: 
+
+* Um sistema de arquivos, que é a combinação de uma [imagem](/docs/concepts/containers/images/) e um ou mais [volumes](/docs/concepts/storage/volumes/).
+* Informação sobre o contêiner propriamente.
+* Informação sobre outros objetos no cluster.
+
+### Informação de contêiner
+
+O _hostname_ de um contêiner é o nome do pod em que o contîner está executando.
+Isso é disponível através do comando `hostname` ou da função [`gethostname`](https://man7.org/linux/man-pages/man2/gethostname.2.html) chamada na libc.
+
+O nome do pod e o namespace sáo disponíveis como variáveis de ambiente atráves do [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/).
+
+Variáveis de ambiente definidas pelo usuário a partir da definição do pod também são disponíveis para o contêiner, assim como qualquer variável de ambiente especificada estáticamente na imagem Docker.
+
+### Informação do cluster
+
+Uma lista de todos os serviços que estáo executando quando um contêiner é criado é disponibilizada para o contêiner como variáveis de ambiente.
+Essas variáveis de ambiente correspondem a sintaxa dos links Docker.
+
+Para um serviço nomeado *foo* que mapeia para um contêiner nomeado *bar*, as seguintes variáveis são definidas:
+
+```shell
+FOO_SERVICE_HOST=<o host em que o serviço está executando>
+FOO_SERVICE_PORT=<a porta em que o serviço está executando>
+```
+
+Serviços possuem endereço IP dedicado e são disponibilizados para o contêiner via DNS,
+se possuirem [DNS addon](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/dns/) habilitado.
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+* Aprenda mais sobre [container lifecycle hooks](/docs/concepts/containers/container-lifecycle-hooks/).
+* Obtenha experiência prática
+  [anexando manipuladores a eventos de ciclo de vida do contêiner](/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/).
+
+

From 82355b4bacf492daf541d7420e48ec06748b81fa Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Sun, 21 Feb 2021 07:57:46 +0900
Subject: [PATCH 060/788] Update outdated files in dev-1.20-ko.5 (2)

---
 .../concepts/security/controlling-access.md   |  2 +-
 content/ko/docs/concepts/security/overview.md |  2 ++
 .../services-networking/dual-stack.md         |  8 +++----
 .../ingress-controllers.md                    | 10 ++++----
 .../concepts/services-networking/service.md   |  8 +++----
 .../concepts/storage/persistent-volumes.md    |  7 +++++-
 .../docs/concepts/storage/storage-classes.md  |  4 ++--
 .../concepts/storage/volume-pvc-datasource.md |  4 +---
 content/ko/docs/concepts/storage/volumes.md   |  6 +++--
 .../workloads/controllers/cron-jobs.md        |  5 ++++
 .../workloads/controllers/daemonset.md        |  4 ++--
 .../workloads/controllers/deployment.md       | 23 ++++++++++++-------
 .../controllers/replicationcontroller.md      |  9 ++++----
 .../workloads/pods/ephemeral-containers.md    |  4 ++--
 .../participate/roles-and-responsibilities.md |  2 +-
 .../access-authn-authz/authorization.md       | 11 ++++++++-
 .../feature-gates.md                          |  4 ++--
 .../ko/docs/reference/kubectl/cheatsheet.md   |  4 ++--
 content/ko/docs/reference/tools.md            |  4 ++--
 .../container-runtimes.md                     |  2 +-
 .../production-environment/tools/kops.md      |  8 +++----
 .../tools/kubeadm/control-plane-flags.md      |  4 +---
 .../windows/intro-windows-in-kubernetes.md    |  4 ++--
 content/ko/docs/setup/release/notes.md        |  4 ++--
 .../access-cluster.md                         |  2 +-
 .../administer-cluster/access-cluster-api.md  |  2 +-
 .../access-cluster-services.md                |  2 +-
 27 files changed, 89 insertions(+), 60 deletions(-)

diff --git a/content/ko/docs/concepts/security/controlling-access.md b/content/ko/docs/concepts/security/controlling-access.md
index 0b4bb6e2cc..3b45be648c 100644
--- a/content/ko/docs/concepts/security/controlling-access.md
+++ b/content/ko/docs/concepts/security/controlling-access.md
@@ -132,7 +132,7 @@ Bob이 `projectCaribou` 네임스페이스에 있는 오브젝트에 쓰기(`cre
 이전의 논의는 (일반적인 경우) API 서버의 보안 포트로 전송되는 요청에 적용된다.
 API 서버는 실제로 다음과 같이 2개의 포트에서 서비스할 수 있다.
 
-기본적으로 쿠버네티스 API 서버는 2개의 포트에서 HTTP 서비스를 한다.
+기본적으로, 쿠버네티스 API 서버는 2개의 포트에서 HTTP 서비스를 한다.
 
   1. `로컬호스트 포트`:
 
diff --git a/content/ko/docs/concepts/security/overview.md b/content/ko/docs/concepts/security/overview.md
index 86240a4116..9cd48a172c 100644
--- a/content/ko/docs/concepts/security/overview.md
+++ b/content/ko/docs/concepts/security/overview.md
@@ -119,6 +119,7 @@ RBAC 인증(쿠버네티스 API에 대한 접근) | https://kubernetes.io/docs/r
 컨테이너 취약점 스캔 및 OS에 종속적인 보안 | 이미지 빌드 단계의 일부로 컨테이너에 알려진 취약점이 있는지 검사해야 한다.
 이미지 서명 및 시행 | 컨테이너 이미지에 서명하여 컨테이너의 내용에 대한 신뢰 시스템을 유지한다.
 권한있는 사용자의 비허용 | 컨테이너를 구성할 때 컨테이너의 목적을 수행하는데 필요한 최소 권한을 가진 사용자를 컨테이너 내에 만드는 방법에 대해서는 설명서를 참조한다.
+더 강력한 격리로 컨테이너 런타임 사용 | 더 강력한 격리를 제공하는 [컨테이너 런타임 클래스](/ko/docs/concepts/containers/runtime-class/)를 선택한다.
 
 ## 코드
 
@@ -151,3 +152,4 @@ TLS를 통한 접근 | 코드가 TCP를 통해 통신해야 한다면, 미리 
 * 컨트롤 플레인을 위한 [전송 데이터 암호화](/docs/tasks/tls/managing-tls-in-a-cluster/)
 * [Rest에서 데이터 암호화](/docs/tasks/administer-cluster/encrypt-data/)
 * [쿠버네티스 시크릿](/ko/docs/concepts/configuration/secret/)
+* [런타임 클래스](/ko/docs/concepts/containers/runtime-class)
diff --git a/content/ko/docs/concepts/services-networking/dual-stack.md b/content/ko/docs/concepts/services-networking/dual-stack.md
index cae986bb5d..dcfb818650 100644
--- a/content/ko/docs/concepts/services-networking/dual-stack.md
+++ b/content/ko/docs/concepts/services-networking/dual-stack.md
@@ -35,7 +35,7 @@ IPv4/IPv6 이중 스택 쿠버네티스 클러스터를 활용하려면 다음
 
    * 쿠버네티스 1.20 이상
      이전 버전과 함께 이중 스택 서비스를 사용하는 방법에 대한 정보
-     쿠버네티스 버전, 쿠버네티스 해당 버전에 대한 
+     쿠버네티스 버전, 쿠버네티스 해당 버전에 대한
      문서 참조
    * 이중 스택 네트워킹을 위한 공급자의 지원(클라우드 공급자 또는 다른 방식으로 쿠버네티스 노드에 라우팅 가능한 IPv4/IPv6 네트워크 인터페이스를 제공할 수 있어야 한다.)
    * 이중 스택(예: Kubenet 또는 Calico)을 지원하는 네트워크 플러그인
@@ -69,9 +69,9 @@ IPv6 CIDR의 예: `fdXY:IJKL:MNOP:15::/64` (이 형식으로 표시되지만, 
 
 클러스터에 이중 스택이 활성화된 경우 IPv4, IPv6 또는 둘 다를 사용할 수 있는 {{< glossary_tooltip text="서비스" term_id="service" >}}를 만들 수 있다.
 
-서비스의 주소 계열은 기본적으로 첫 번째 서비스 클러스터 IP 범위의 주소 계열로 설정된다. (`--service-cluster-ip-range` 플래그를 통해 kube-controller-manager에 구성)
+서비스의 주소 계열은 기본적으로 첫 번째 서비스 클러스터 IP 범위의 주소 계열로 설정된다. (`--service-cluster-ip-range` 플래그를 통해 kube-apiserver에 구성)
 
-서비스를 정의할 때 선택적으로 이중 스택으로 구성할 수 있다. 원하는 동작을 지정하려면 `.spec.ipFamilyPolicy` 필드를 
+서비스를 정의할 때 선택적으로 이중 스택으로 구성할 수 있다. 원하는 동작을 지정하려면 `.spec.ipFamilyPolicy` 필드를
 다음 값 중 하나로 설정한다.
 
 * `SingleStack`: 단일 스택 서비스. 컨트롤 플레인은 첫 번째로 구성된 서비스 클러스터 IP 범위를 사용하여 서비스에 대한 클러스터 IP를 할당한다.
@@ -158,7 +158,7 @@ status:
   loadBalancer: {}
 ```
 
-1. 클러스터에서 이중 스택이 활성화된 경우, 셀렉터가 있는 기존 [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스)는 `.spec.ClusterIP`가 `None`이라도 컨트롤 플레인이 `.spec.ipFamilyPolicy`을 `SingleStack`으로 지정하고 `.spec.ipFamilies`는 첫 번째 서비스 클러스터 IP 범위(kube-controller-manager에 대한 `--service-cluster-ip-range` 플래그를 통해 구성)의 주소 계열으로 지정한다.
+1. 클러스터에서 이중 스택이 활성화된 경우, 셀렉터가 있는 기존 [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스)는 `.spec.ClusterIP`가 `None`이라도 컨트롤 플레인이 `.spec.ipFamilyPolicy`을 `SingleStack`으로 지정하고 `.spec.ipFamilies`는 첫 번째 서비스 클러스터 IP 범위(kube-apiserver에 대한 `--service-cluster-ip-range` 플래그를 통해 구성)의 주소 계열으로 지정한다.
 
 {{< codenew file="service/networking/dual-stack-default-svc.yaml" >}}
 
diff --git a/content/ko/docs/concepts/services-networking/ingress-controllers.md b/content/ko/docs/concepts/services-networking/ingress-controllers.md
index 06340143a0..8554d9a87d 100644
--- a/content/ko/docs/concepts/services-networking/ingress-controllers.md
+++ b/content/ko/docs/concepts/services-networking/ingress-controllers.md
@@ -23,7 +23,7 @@ weight: 40
 
 {{% thirdparty-content %}}
 
-* [AKS 애플리케이션 게이트웨이 인그레스 컨트롤러] (https://azure.github.io/application-gateway-kubernetes-ingress/)는 [Azure 애플리케이션 게이트웨이](https://docs.microsoft.com)를 구성하는 인그레스 컨트롤러다.
+* [AKS 애플리케이션 게이트웨이 인그레스 컨트롤러](https://azure.github.io/application-gateway-kubernetes-ingress/)는 [Azure 애플리케이션 게이트웨이](https://docs.microsoft.com)를 구성하는 인그레스 컨트롤러다.
 * [Ambassador](https://www.getambassador.io/) API 게이트웨이는 [Envoy](https://www.envoyproxy.io) 기반 인그레스
   컨트롤러다.
 * [Apache APISIX 인그레스 컨트롤러](https://github.com/apache/apisix-ingress-controller)는 [Apache APISIX](https://github.com/apache/apisix) 기반의 인그레스 컨트롤러이다.
@@ -31,13 +31,14 @@ weight: 40
 * [Citrix 인그레스 컨트롤러](https://github.com/citrix/citrix-k8s-ingress-controller#readme)는
   Citrix 애플리케이션 딜리버리 컨트롤러에서 작동한다.
 * [Contour](https://projectcontour.io/)는 [Envoy](https://www.envoyproxy.io/) 기반 인그레스 컨트롤러다.
+* [EnRoute](https://getenroute.io/)는 인그레스 컨트롤러로 실행할 수 있는 [Envoy](https://www.envoyproxy.io) 기반 API 게이트웨이다.
 * F5 BIG-IP [쿠버네티스 용 컨테이너 인그레스 서비스](https://clouddocs.f5.com/containers/latest/userguide/kubernetes/)를
   이용하면 인그레스를 사용하여 F5 BIG-IP 가상 서버를 구성할 수 있다.
 * [Gloo](https://gloo.solo.io)는 API 게이트웨이 기능을 제공하는 [Envoy](https://www.envoyproxy.io) 기반의
   오픈소스 인그레스 컨트롤러다.
-* [HAProxy 인그레스](https://haproxy-ingress.github.io/)는 [HAProxy](http://www.haproxy.org/#desc)의
+* [HAProxy 인그레스](https://haproxy-ingress.github.io/)는 [HAProxy](https://www.haproxy.org/#desc)의
   인그레스 컨트롤러다.
-* [쿠버네티스 용 HAProxy 인그레스 컨트롤러](https://github.com/haproxytech/kubernetes-ingress#readme)는 [HAProxy](http://www.haproxy.org/#desc) 용
+* [쿠버네티스 용 HAProxy 인그레스 컨트롤러](https://github.com/haproxytech/kubernetes-ingress#readme)는 [HAProxy](https://www.haproxy.org/#desc) 용
   인그레스 컨트롤러이기도 하다.
 * [Istio 인그레스](https://istio.io/latest/docs/tasks/traffic-management/ingress/kubernetes-ingress/)는 [Istio](https://istio.io/)
   기반 인그레스 컨트롤러다.
@@ -48,8 +49,9 @@ weight: 40
 * [Skipper](https://opensource.zalando.com/skipper/kubernetes/ingress-controller/)는 사용자의 커스텀 프록시를 구축하기 위한 라이브러리로 설계된 쿠버네티스 인그레스와 같은 유스케이스를 포함한 서비스 구성을 위한 HTTP 라우터 및 역방향 프록시다.
 * [Traefik 쿠버네티스 인그레스 제공자](https://doc.traefik.io/traefik/providers/kubernetes-ingress/)는
   [Traefik](https://traefik.io/traefik/) 프록시 용 인그레스 컨트롤러다.
+* [Tyk 오퍼레이터](https://github.com/TykTechnologies/tyk-operator)는 사용자 지정 리소스로 인그레스를 확장하여 API 관리 기능을 인그레스로 가져온다. Tyk 오퍼레이터는 오픈 소스 Tyk 게이트웨이 및 Tyk 클라우드 컨트롤 플레인과 함께 작동한다.
 * [Voyager](https://appscode.com/products/voyager)는
-  [HAProxy](http://www.haproxy.org/#desc)의 인그레스 컨트롤러다.
+  [HAProxy](https://www.haproxy.org/#desc)의 인그레스 컨트롤러다.
 
 ## 여러 인그레스 컨트롤러 사용
 
diff --git a/content/ko/docs/concepts/services-networking/service.md b/content/ko/docs/concepts/services-networking/service.md
index 5d1acf5392..be1f3ecaae 100644
--- a/content/ko/docs/concepts/services-networking/service.md
+++ b/content/ko/docs/concepts/services-networking/service.md
@@ -430,8 +430,8 @@ CoreDNS와 같은, 클러스터-인식 DNS 서버는 새로운 서비스를 위
 예를 들면, 쿠버네티스 네임스페이스 `my-ns`에 `my-service`라는
 서비스가 있는 경우, 컨트롤 플레인과 DNS 서비스가 함께 작동하여
 `my-service.my-ns`에 대한 DNS 레코드를 만든다. `my-ns` 네임 스페이스의 파드들은
-간단히 `my-service`에 대한 이름 조회를 수행하여 찾을 수 있어야 한다
-(`my-service.my-ns` 역시 동작함).
+`my-service`(`my-service.my-ns` 역시 동작함)에 대한 이름 조회를
+수행하여 서비스를 찾을 수 있어야 한다.
 
 다른 네임스페이스의 파드들은 이름을 `my-service.my-ns`으로 사용해야 한다. 이 이름은
 서비스에 할당된 클러스터 IP로 변환된다.
@@ -463,7 +463,7 @@ DNS SRV 쿼리를 수행할 수 있다.
 
 셀렉터를 정의하는 헤드리스 서비스의 경우, 엔드포인트 컨트롤러는
 API에서 `엔드포인트` 레코드를 생성하고, DNS 구성을 수정하여
-`서비스` 를 지원하는 `파드` 를 직접 가리키는 레코드 (주소)를 반환한다.
+`서비스` 를 지원하는 `파드` 를 직접 가리키는 A 레코드(IP 주소)를 반환한다.
 
 ### 셀렉터가 없는 경우
 
@@ -1164,7 +1164,7 @@ IP 주소(예 : 10.0.0.1)를 할당한다. 서비스 포트를 1234라고 가정
 
 이는 서비스 소유자가 충돌 위험 없이 원하는 어떤 포트든 선택할 수 있음을
 의미한다. 클라이언트는 실제로 접근하는 파드를 몰라도, IP와 포트에
-간단히 연결할 수 있다.
+연결할 수 있다.
 
 #### iptables
 
diff --git a/content/ko/docs/concepts/storage/persistent-volumes.md b/content/ko/docs/concepts/storage/persistent-volumes.md
index 9ce1eba6cf..05997eb0f3 100644
--- a/content/ko/docs/concepts/storage/persistent-volumes.md
+++ b/content/ko/docs/concepts/storage/persistent-volumes.md
@@ -487,7 +487,7 @@ PV는 `storageClassName` 속성을
 * VsphereVolume
 * iSCSI
 
-마운트 옵션의 유효성이 검사되지 않으므로 마운트 옵션이 유효하지 않으면 마운트가 실패한다.
+마운트 옵션의 유효성이 검사되지 않는다. 마운트 옵션이 유효하지 않으면, 마운트가 실패한다.
 
 이전에는 `mountOptions` 속성 대신 `volume.beta.kubernetes.io/mount-options` 어노테이션이
 사용되었다. 이 어노테이션은 아직까지는 사용할 수 있지만,
@@ -629,6 +629,11 @@ spec:
 
 퍼시스턴트볼륨 바인딩은 배타적이며, 퍼시스턴트볼륨클레임은 네임스페이스 오브젝트이므로 "다중" 모드(`ROX`, `RWX`)를 사용한 클레임은 하나의 네임스페이스 내에서만 가능하다.
 
+### `hostPath` 유형의 퍼시스턴트볼륨
+
+`hostPath` 퍼시스턴트볼륨은 노드의 파일이나 디렉터리를 사용하여 네트워크 연결 스토리지를 에뮬레이션한다.
+[`hostPath` 유형 볼륨의 예](/ko/docs/tasks/configure-pod-container/configure-persistent-volume-storage/#퍼시스턴트볼륨-생성하기)를 참고한다.
+
 ## 원시 블록 볼륨 지원
 
 {{< feature-state for_k8s_version="v1.18" state="stable" >}}
diff --git a/content/ko/docs/concepts/storage/storage-classes.md b/content/ko/docs/concepts/storage/storage-classes.md
index 8bc6f7b1bf..94577ca182 100644
--- a/content/ko/docs/concepts/storage/storage-classes.md
+++ b/content/ko/docs/concepts/storage/storage-classes.md
@@ -143,8 +143,8 @@ CSI | 1.14 (alpha), 1.16 (beta)
 클래스의 `mountOptions` 필드에 지정된 마운트 옵션을 가진다.
 
 만약 볼륨 플러그인이 마운트 옵션을 지원하지 않는데, 마운트
-옵션을 지정하면 프로비저닝은 실패한다. 마운트 옵션은 클래스 또는 PV 에서
-검증되지 않으므로 PV 마운트가 유효하지 않으면 마운트가 실패하게 된다.
+옵션을 지정하면 프로비저닝은 실패한다. 마운트 옵션은 클래스 또는 PV에서
+검증되지 않는다. PV 마운트가 유효하지 않으면, 마운트가 실패하게 된다.
 
 ### 볼륨 바인딩 모드
 
diff --git a/content/ko/docs/concepts/storage/volume-pvc-datasource.md b/content/ko/docs/concepts/storage/volume-pvc-datasource.md
index e6ff2caa38..e9857885d7 100644
--- a/content/ko/docs/concepts/storage/volume-pvc-datasource.md
+++ b/content/ko/docs/concepts/storage/volume-pvc-datasource.md
@@ -19,7 +19,7 @@ weight: 30
 
 복제는 표준 볼륨처럼 소비할 수 있는 쿠버네티스 볼륨의 복제본으로 정의된다.  유일한 차이점은 프로비저닝할 때 "새" 빈 볼륨을 생성하는 대신에 백엔드 장치가 지정된 볼륨의 정확한 복제본을 생성한다는 것이다.
 
-쿠버네티스 API의 관점에서 복제를 구현하면 새로운 PVC 생성 중에 기존 PVC를 데이터 소스로 지정할 수 있는 기능이 추가된다. 소스 PVC는 바인딩되어있고, 사용가능해야 한다(사용 중이 아니어야함).
+쿠버네티스 API의 관점에서 복제를 구현하면 새로운 PVC 생성 중에 기존 PVC를 데이터 소스로 지정할 수 있는 기능이 추가된다. 소스 PVC는 바인딩되어 있고, 사용 가능해야 한다(사용 중이 아니어야 함).
 
 사용자는 이 기능을 사용할 때 다음 사항을 알고 있어야 한다.
 
@@ -64,5 +64,3 @@ spec:
 ## 사용
 
 새 PVC를 사용할 수 있게 되면, 복제된 PVC는 다른 PVC와 동일하게 소비된다.  또한, 이 시점에서 새롭게 생성된 PVC는 독립된 오브젝트이다.  원본 dataSource PVC와는 무관하게 독립적으로 소비하고, 복제하고, 스냅샷의 생성 또는 삭제를 할 수 있다.  이는 소스가 새롭게 생성된 복제본에 어떤 방식으로든 연결되어 있지 않으며, 새롭게 생성된 복제본에 영향 없이 수정하거나, 삭제할 수도 있는 것을 의미한다.
-
-
diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index 2e37dc0a67..398c2e7e1f 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -103,6 +103,8 @@ spec:
       fsType: ext4
 ```
 
+EBS 볼륨이 파티션된 경우, 선택적 필드인 `partition: "<partition number>"` 를 제공하여 마운트할 파티션을 지정할 수 있다.
+
 #### AWS EBS CSI 마이그레이션
 
 {{< feature-state for_k8s_version="v1.17" state="beta" >}}
@@ -207,8 +209,8 @@ spec:
 Cinder의 `CSIMigration` 기능이 활성화된 경우, 기존 트리 내 플러그인에서
 `cinder.csi.openstack.org` 컨테이너 스토리지 인터페이스(CSI)
 드라이버로 모든 플러그인 작업을 수행한다. 이 기능을 사용하려면, 클러스터에 [오픈스택 Cinder CSI
-드라이버](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/using-cinder-csi-plugin.md)
-를 설치하고 `CSIMigration` 과 `CSIMigrationOpenStack`
+드라이버](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)를
+설치하고 `CSIMigration` 과 `CSIMigrationOpenStack`
 베타 기능을 활성화해야 한다.
 
 ### 컨피그맵(configMap) {#configmap}
diff --git a/content/ko/docs/concepts/workloads/controllers/cron-jobs.md b/content/ko/docs/concepts/workloads/controllers/cron-jobs.md
index ed29659a7e..7756c93cb0 100644
--- a/content/ko/docs/concepts/workloads/controllers/cron-jobs.md
+++ b/content/ko/docs/concepts/workloads/controllers/cron-jobs.md
@@ -89,6 +89,11 @@ kube-controller-manager 컨테이너에 설정된 시간대는
 `concurrencyPolicy` 가 `Allow` 로 설정될 경우, 잡은 항상 적어도 한 번은
 실행될 것이다.
 
+{{< caution >}}
+`startingDeadlineSeconds` 가 10초 미만의 값으로 설정되면, 크론잡이 스케줄되지 않을 수 있다. 이는 크론잡 컨트롤러가 10초마다 항목을 확인하기 때문이다.
+{{< /caution >}}
+
+
 모든 크론잡에 대해 크론잡 {{< glossary_tooltip term_id="controller" text="컨트롤러" >}} 는 마지막 일정부터 지금까지 얼마나 많은 일정이 누락되었는지 확인한다. 만약 100회 이상의 일정이 누락되었다면, 잡을 실행하지 않고 아래와 같은 에러 로그를 남긴다.
 
 ````
diff --git a/content/ko/docs/concepts/workloads/controllers/daemonset.md b/content/ko/docs/concepts/workloads/controllers/daemonset.md
index 589fe7c1dd..d7d583d142 100644
--- a/content/ko/docs/concepts/workloads/controllers/daemonset.md
+++ b/content/ko/docs/concepts/workloads/controllers/daemonset.md
@@ -141,8 +141,8 @@ nodeAffinity:
 | ---------------------------------------- | ---------- | ------- | ------------------------------------------------------------ |
 | `node.kubernetes.io/not-ready`           | NoExecute  | 1.13+   | 네트워크 파티션과 같은 노드 문제가 발생해도 데몬셋 파드는 축출되지 않는다. |
 | `node.kubernetes.io/unreachable`         | NoExecute  | 1.13+   | 네트워크 파티션과 같은 노드 문제가 발생해도 데몬셋 파드는 축출되지 않는다. |
-| `node.kubernetes.io/disk-pressure`       | NoSchedule | 1.8+    | |
-| `node.kubernetes.io/memory-pressure`     | NoSchedule | 1.8+    | |
+| `node.kubernetes.io/disk-pressure`       | NoSchedule | 1.8+    | 데몬셋 파드는 기본 스케줄러에서 디스크-압박(disk-pressure) 속성을 허용한다. |
+| `node.kubernetes.io/memory-pressure`     | NoSchedule | 1.8+    | 데몬셋 파드는 기본 스케줄러에서 메모리-압박(memory-pressure) 속성을 허용한다. |
 | `node.kubernetes.io/unschedulable`       | NoSchedule | 1.12+   | 데몬셋 파드는 기본 스케줄러의 스케줄할 수 없는(unschedulable) 속성을 극복한다. |
 | `node.kubernetes.io/network-unavailable` | NoSchedule | 1.12+   | 호스트 네트워크를 사용하는 데몬셋 파드는 기본 스케줄러에 의해 이용할 수 없는 네트워크(network-unavailable) 속성을 극복한다. |
 
diff --git a/content/ko/docs/concepts/workloads/controllers/deployment.md b/content/ko/docs/concepts/workloads/controllers/deployment.md
index 779fcfbe34..1407bb28f0 100644
--- a/content/ko/docs/concepts/workloads/controllers/deployment.md
+++ b/content/ko/docs/concepts/workloads/controllers/deployment.md
@@ -45,7 +45,7 @@ _디플로이먼트(Deployment)_ 는 {{< glossary_tooltip text="파드" term_id=
 * `.metadata.name` 필드에 따라 `nginx-deployment` 이름으로 디플로이먼트가 생성된다.
 * `.spec.replicas` 필드에 따라 디플로이먼트는 3개의 레플리카 파드를 생성한다.
 * `.spec.selector` 필드는 디플로이먼트가 관리할 파드를 찾는 방법을 정의한다.
-  이 사례에서는 간단하게 파드 템플릿에 정의된 레이블(`app: nginx`)을 선택한다.
+  이 사례에서는 파드 템플릿에 정의된 레이블(`app: nginx`)을 선택한다.
   그러나 파드 템플릿 자체의 규칙이 만족되는 한,
   보다 정교한 선택 규칙의 적용이 가능하다.
 
@@ -169,13 +169,15 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
     ```shell
     kubectl --record deployment.apps/nginx-deployment set image deployment.v1.apps/nginx-deployment nginx=nginx:1.16.1
     ```
-    또는 간단하게 다음의 명령어를 사용한다.
+
+    또는 다음의 명령어를 사용한다.
 
     ```shell
     kubectl set image deployment/nginx-deployment nginx=nginx:1.16.1 --record
     ```
 
-    이와 유사하게 출력된다.
+    다음과 유사하게 출력된다.
+
     ```
     deployment.apps/nginx-deployment image updated
     ```
@@ -186,7 +188,8 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
     kubectl edit deployment.v1.apps/nginx-deployment
     ```
 
-    이와 유사하게 출력된다.
+    다음과 유사하게 출력된다.
+
     ```
     deployment.apps/nginx-deployment edited
     ```
@@ -198,10 +201,13 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
     ```
 
     이와 유사하게 출력된다.
+
     ```
     Waiting for rollout to finish: 2 out of 3 new replicas have been updated...
     ```
+
     또는
+
     ```
     deployment "nginx-deployment" successfully rolled out
     ```
@@ -210,10 +216,11 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
 
 * 롤아웃이 성공하면 `kubectl get deployments` 를 실행해서 디플로이먼트를 볼 수 있다.
     이와 유사하게 출력된다.
-    ```
-    NAME               READY   UP-TO-DATE   AVAILABLE   AGE
-    nginx-deployment   3/3     3            3           36s
-    ```
+
+  ```ini
+  NAME               READY   UP-TO-DATE   AVAILABLE   AGE
+  nginx-deployment   3/3     3            3           36s
+  ```
 
 * `kubectl get rs` 를 실행해서 디플로이먼트가 새 레플리카셋을 생성해서 파드를 업데이트 했는지 볼 수 있고,
 새 레플리카셋을 최대 3개의 레플리카로 스케일 업, 이전 레플리카셋을 0개의 레플리카로 스케일 다운한다.
diff --git a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
index 9c3450851a..ff48730a13 100644
--- a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -180,7 +180,7 @@ delete`](/docs/reference/generated/kubectl/kubectl-commands#delete) 를 사용
 Kubectl은 레플리케이션 컨트롤러를 0으로 스케일하고 레플리케이션 컨트롤러 자체를
 삭제하기 전에 각 파드를 삭제하기를 기다린다. 이 kubectl 명령이 인터럽트되면 다시 시작할 수 있다.
 
-REST API나 go 클라이언트 라이브러리를 사용하는 경우 명시적으로 단계를 수행해야 한다 (레플리카를 0으로 스케일하고 파드의 삭제를 기다린 이후,
+REST API나 Go 클라이언트 라이브러리를 사용하는 경우 명시적으로 단계를 수행해야 한다(레플리카를 0으로 스케일하고 파드의 삭제를 기다린 이후,
 레플리케이션 컨트롤러를 삭제).
 
 ### 레플리케이션 컨트롤러만 삭제
@@ -189,7 +189,7 @@ REST API나 go 클라이언트 라이브러리를 사용하는 경우 명시적
 
 kubectl을 사용하여, [`kubectl delete`](/docs/reference/generated/kubectl/kubectl-commands#delete)에 옵션으로 `--cascade=false`를 지정하라.
 
-REST API나 go 클라이언트 라이브러리를 사용하는 경우 간단히 레플리케이션 컨트롤러 오브젝트를 삭제하라.
+REST API나 Go 클라이언트 라이브러리를 사용하는 경우 레플리케이션 컨트롤러 오브젝트를 삭제하라.
 
 원본이 삭제되면 대체할 새로운 레플리케이션 컨트롤러를 생성하여 교체할 수 있다. 오래된 파드와 새로운 파드의 `.spec.selector` 가 동일하다면,
 새로운 레플리케이션 컨트롤러는 오래된 파드를 채택할 것이다. 그러나 기존 파드를
@@ -208,7 +208,8 @@ REST API나 go 클라이언트 라이브러리를 사용하는 경우 간단히
 
 ### 스케일링
 
-레플리케이션 컨트롤러는 `replicas` 필드를 업데이트함으로써 수동으로 또는 오토 스케일링 제어 에이전트로 레플리카의 수를 쉽게 스케일 업하거나 스케일 다운할 수 있다.
+레플리케이션컨트롤러는 `replicas` 필드를 설정하여 레플리카의 수를 늘리거나 줄인다.
+레플리카를 수동으로 또는 오토 스케일링 제어 에이전트로 관리하도록 레플리케이션컨트롤러를 구성할 수 있다.
 
 ### 롤링 업데이트
 
@@ -239,7 +240,7 @@ REST API나 go 클라이언트 라이브러리를 사용하는 경우 간단히
 
 ## 레플리케이션 컨트롤러의 책임
 
-레플리케이션 컨트롤러는 의도한 수의 파드가 해당 레이블 선택기와 일치하고 동작하는지를 단순히 확인한다. 현재, 종료된 파드만 해당 파드의 수에서 제외된다. 향후 시스템에서 사용할 수 있는 [readiness](https://issue.k8s.io/620) 및 기타 정보가 고려될 수 있으며 교체 정책에 대한 통제를 더 추가 할 수 있고 외부 클라이언트가 임의로 정교한 교체 또는 스케일 다운 정책을 구현하기 위해 사용할 수 있는 이벤트를 내보낼 계획이다.
+레플리케이션 컨트롤러는 의도한 수의 파드가 해당 레이블 셀렉터와 일치하고 동작하는지를 확인한다. 현재, 종료된 파드만 해당 파드의 수에서 제외된다. 향후 시스템에서 사용할 수 있는 [readiness](https://issue.k8s.io/620) 및 기타 정보가 고려될 수 있으며 교체 정책에 대한 통제를 더 추가 할 수 있고 외부 클라이언트가 임의로 정교한 교체 또는 스케일 다운 정책을 구현하기 위해 사용할 수 있는 이벤트를 내보낼 계획이다.
 
 레플리케이션 컨트롤러는 이 좁은 책임에 영원히 제약을 받는다. 그 자체로는 준비성 또는 활성 프로브를 실행하지 않을 것이다. 오토 스케일링을 수행하는 대신, 외부 오토 스케일러 ([#492](https://issue.k8s.io/492)에서 논의된)가 레플리케이션 컨트롤러의 `replicas` 필드를 변경함으로써 제어되도록 의도되었다. 레플리케이션 컨트롤러에 스케줄링 정책 (예를 들어 [spreading](https://issue.k8s.io/367#issuecomment-48428019))을 추가하지 않을 것이다. 오토사이징 및 기타 자동화 된 프로세스를 방해할 수 있으므로 제어된 파드가 현재 지정된 템플릿과 일치하는지 확인해야 한다. 마찬가지로 기한 완료, 순서 종속성, 구성 확장 및 기타 기능은 다른 곳에 속한다. 대량의 파드 생성 메커니즘 ([#170](https://issue.k8s.io/170))까지도 고려해야 한다.
 
diff --git a/content/ko/docs/concepts/workloads/pods/ephemeral-containers.md b/content/ko/docs/concepts/workloads/pods/ephemeral-containers.md
index 27e48b192f..9aa9e9bf51 100644
--- a/content/ko/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/ko/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -76,7 +76,7 @@ API에서 특별한 `ephemeralcontainers` 핸들러를 사용해서 만들어지
 
 임시 컨테이너를 사용해서 문제를 해결하는 예시는
 [임시 디버깅 컨테이너로 디버깅하기]
-(/docs/tasks/debug-application-cluster/debug-running-pod/#debugging-with-ephemeral-debug-container)를 참조한다.
+(/docs/tasks/debug-application-cluster/debug-running-pod/#ephemeral-container)를 참조한다.
 
 ## 임시 컨테이너 API
 
@@ -100,7 +100,7 @@ API에서 특별한 `ephemeralcontainers` 핸들러를 사용해서 만들어지
     "apiVersion": "v1",
     "kind": "EphemeralContainers",
     "metadata": {
-            "name": "example-pod"
+        "name": "example-pod"
     },
     "ephemeralContainers": [{
         "command": [
diff --git a/content/ko/docs/contribute/participate/roles-and-responsibilities.md b/content/ko/docs/contribute/participate/roles-and-responsibilities.md
index 354e9d669f..448502c0c3 100644
--- a/content/ko/docs/contribute/participate/roles-and-responsibilities.md
+++ b/content/ko/docs/contribute/participate/roles-and-responsibilities.md
@@ -51,7 +51,7 @@ GitHub 계정을 가진 누구나 쿠버네티스에 기여할 수 있다. SIG D
 - 풀 리퀘스트에 `/lgtm` 코멘트를 사용하여 LGTM(looks good to me) 레이블을 추가한다.
 
   {{< note >}}
-  `/lgtm` 사용은 자동화를 트리거한다. 만약 구속력 없는 승인을 제공하려면, 단순히 "LGTM" 코멘트를 남기는 것도 좋다!
+  `/lgtm` 사용은 자동화를 트리거한다. 만약 구속력 없는 승인을 제공하려면, "LGTM" 코멘트를 남기는 것도 좋다!
   {{< /note >}}
 
 - `/hold` 코멘트를 사용하여 풀 리퀘스트에 대한 병합을 차단한다.
diff --git a/content/ko/docs/reference/access-authn-authz/authorization.md b/content/ko/docs/reference/access-authn-authz/authorization.md
index b34f68e392..a9370ea74b 100644
--- a/content/ko/docs/reference/access-authn-authz/authorization.md
+++ b/content/ko/docs/reference/access-authn-authz/authorization.md
@@ -99,6 +99,9 @@ DELETE    | delete(개별 리소스), deletecollection(리소스 모음)
 ```bash
 kubectl auth can-i create deployments --namespace dev
 ```
+
+다음과 유사하게 출력된다.
+
 ```
 yes
 ```
@@ -106,6 +109,9 @@ yes
 ```shell
 kubectl auth can-i create deployments --namespace prod
 ```
+
+다음과 유사하게 출력된다.
+
 ```
 no
 ```
@@ -116,6 +122,9 @@ no
 ```bash
 kubectl auth can-i list secrets --namespace dev --as dave
 ```
+
+다음과 유사하게 출력된다.
+
 ```
 no
 ```
@@ -145,7 +154,7 @@ EOF
 ```
 
 생성된 `SelfSubjectAccessReview` 는 다음과 같다.
-```
+```yaml
 apiVersion: authorization.k8s.io/v1
 kind: SelfSubjectAccessReview
 metadata:
diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index 715dbf4801..cece4022ef 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -634,8 +634,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `KubeletCredentialProviders`: 이미지 풀 자격 증명에 대해 kubelet exec 자격 증명 공급자를 활성화한다.
 - `KubeletPluginsWatcher`: kubelet이 [CSI 볼륨 드라이버](/ko/docs/concepts/storage/volumes/#csi)와 같은
   플러그인을 검색할 수 있도록 프로브 기반 플러그인 감시자(watcher) 유틸리티를 사용한다.
-- `KubeletPodResources`: kubelet의 파드 리소스 GPRC 엔드포인트를 활성화한다. 자세한 내용은
-  [장치 모니터링 지원](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md)을
+- `KubeletPodResources`: kubelet의 파드 리소스 gPRC 엔드포인트를 활성화한다. 자세한 내용은
+  [장치 모니터링 지원](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/606-compute-device-assignment/README.md)을
   참고한다.
 - `LegacyNodeRoleBehavior`: 비활성화되면, 서비스 로드 밸런서 및 노드 중단의 레거시 동작은
   `NodeDisruptionExclusion` 과 `ServiceNodeExclusion` 에 의해 제공된 기능별 레이블을 대신하여
diff --git a/content/ko/docs/reference/kubectl/cheatsheet.md b/content/ko/docs/reference/kubectl/cheatsheet.md
index 2ac5f6076c..0020d7b574 100644
--- a/content/ko/docs/reference/kubectl/cheatsheet.md
+++ b/content/ko/docs/reference/kubectl/cheatsheet.md
@@ -191,7 +191,7 @@ JSONPATH='{range .items[*]}{@.metadata.name}:{range @.status.conditions[*]}{@.ty
  && kubectl get nodes -o jsonpath="$JSONPATH" | grep "Ready=True"
 
 # 외부 도구 없이 디코딩된 시크릿 출력
-kubectl get secret ${secret_name} -o go-template='{{range $k,$v := .data}}{{$k}}={{$v|base64decode}}{{"\n"}}{{end}}'
+kubectl get secret my-secret -o go-template='{{range $k,$v := .data}}{{"### "}}{{$k}}{{"\n"}}{{$v|base64decode}}{{"\n\n"}}{{end}}'
 
 # 파드에 의해 현재 사용되고 있는 모든 시크릿 목록 조회
 kubectl get pods -o json | jq '.items[].spec.containers[].env[]?.valueFrom.secretKeyRef.name' | grep -v null | sort | uniq
@@ -334,7 +334,7 @@ kubectl taint nodes foo dedicated=special-user:NoSchedule
 
 ### 리소스 타입
 
-단축명, [API 그룹](/ko/docs/concepts/overview/kubernetes-api/#api-그룹)과 함께 지원되는 모든 리소스 유형들, 그것들의 [네임스페이스](/ko/docs/concepts/overview/working-with-objects/namespaces)와 [종류(Kind)](/ko/docs/concepts/overview/working-with-objects/kubernetes-objects)를 나열:
+단축명, [API 그룹](/ko/docs/concepts/overview/kubernetes-api/#api-그룹과-버전-규칙)과 함께 지원되는 모든 리소스 유형들, 그것들의 [네임스페이스](/ko/docs/concepts/overview/working-with-objects/namespaces)와 [종류(Kind)](/ko/docs/concepts/overview/working-with-objects/kubernetes-objects)를 나열:
 
 ```bash
 kubectl api-resources
diff --git a/content/ko/docs/reference/tools.md b/content/ko/docs/reference/tools.md
index ac0a5fb6c5..97206f3be7 100644
--- a/content/ko/docs/reference/tools.md
+++ b/content/ko/docs/reference/tools.md
@@ -20,9 +20,9 @@ content_type: concept
 
 ## Minikube
 
-[`minikube`](https://minikube.sigs.k8s.io/docs/)는 개발과 테스팅 목적으로 하는
+[`minikube`](https://minikube.sigs.k8s.io/docs/)는 개발과 테스팅 목적으로
 단일 노드 쿠버네티스 클러스터를 로컬 워크스테이션에서
-쉽게 구동시키는 도구이다.
+실행하는 도구이다.
 
 ## 대시보드
 
diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index f51b5f5eef..42c8bd8095 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -420,7 +420,7 @@ CRI-O를 시작한다.
 
 ```shell
 sudo systemctl daemon-reload
-sudo systemctl start crio
+sudo systemctl enable crio --now
 ```
 
 자세한 사항은 [CRI-O 설치 가이드](https://github.com/cri-o/cri-o/blob/master/install.md)를
diff --git a/content/ko/docs/setup/production-environment/tools/kops.md b/content/ko/docs/setup/production-environment/tools/kops.md
index 4ec5386d2f..05fc21f32a 100644
--- a/content/ko/docs/setup/production-environment/tools/kops.md
+++ b/content/ko/docs/setup/production-environment/tools/kops.md
@@ -39,7 +39,7 @@ kops는 자동화된 프로비저닝 시스템인데,
 
 #### 설치
 
-[releases page](https://github.com/kubernetes/kops/releases)에서 kops를 다운로드 한다(소스코드로부터 빌드하는것도 역시 어렵지 않다).
+[releases page](https://github.com/kubernetes/kops/releases)에서 kops를 다운로드 한다(소스 코드로부터 빌드하는 것도 역시 편리하다).
 
 {{< tabs name="kops_installation" >}}
 {{% tab name="macOS" %}}
@@ -51,7 +51,7 @@ curl -LO https://github.com/kubernetes/kops/releases/download/$(curl -s https://
 | grep tag_name | cut -d '"' -f 4)/kops-darwin-amd64
 ```
 
-특정 버전을 다운로드 받는다면 명령의 다음부분을 특정 kops 버전으로 변경한다.
+특정 버전을 다운로드 받는다면 명령의 다음 부분을 특정 kops 버전으로 변경한다.
 
 ```shell
 $(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)
@@ -147,8 +147,8 @@ Route53 hosted zone은 서브도메인도 지원한다. 여러분의 hosted zone
 `dev` NS 레코드를 `example.com`에 생성한다. 만약 이것이 루트 도메인 네임이라면 이 NS 레코드들은
 도메인 등록기관을 통해서 생성해야 한다(예를 들어, `example.com`는 `example.com`를 구매한 곳에서 설정 할 수 있다).
 
-이 단계에서 문제가 되기 쉽다.(문제를 만드는 가장 큰 이유이다!) dig 툴을 실행해서
-클러스터 설정이 정확한지 한번 더 확인 한다.
+route53 도메인 설정을 확인한다(문제를 만드는 가장 큰 이유이다!). dig 툴을 실행해서
+클러스터 설정이 정확한지 한번 더 확인한다.
 
 `dig NS dev.example.com`
 
diff --git a/content/ko/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md b/content/ko/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
index 2e6252bf80..358274d143 100644
--- a/content/ko/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
+++ b/content/ko/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
@@ -76,9 +76,7 @@ kind: ClusterConfiguration
 kubernetesVersion: v1.16.0
 scheduler:
   extraArgs:
-    address: 0.0.0.0
+    bind-address: 0.0.0.0
     config: /home/johndoe/schedconfig.yaml
     kubeconfig: /home/johndoe/kubeconfig.yaml
 ```
-
-
diff --git a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 0ea3dc0ce9..67283774af 100644
--- a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -12,7 +12,7 @@ weight: 65
 
 ## 쿠버네티스의 윈도우 컨테이너
 
-쿠버네티스에서 윈도우 컨테이너 오케스트레이션을 활성화하려면, 기존 리눅스 클러스터에 윈도우 노드를 포함하기만 하면 된다. 쿠버네티스의 {{< glossary_tooltip text="파드" term_id="pod" >}}에서 윈도우 컨테이너를 스케줄링하는 것은 리눅스 기반 컨테이너를 스케줄링하는 것만큼 간단하고 쉽다.
+쿠버네티스에서 윈도우 컨테이너 오케스트레이션을 활성화하려면, 기존 리눅스 클러스터에 윈도우 노드를 포함한다. 쿠버네티스의 {{< glossary_tooltip text="파드" term_id="pod" >}}에서 윈도우 컨테이너를 스케줄링하는 것은 리눅스 기반 컨테이너를 스케줄링하는 것과 유사하다.
 
 윈도우 컨테이너를 실행하려면, 쿠버네티스 클러스터에 리눅스를 실행하는 컨트롤 플레인 노드와 사용자의 워크로드 요구에 따라 윈도우 또는 리눅스를 실행하는 워커가 있는 여러 운영 체제가 포함되어 있어야 한다. 윈도우 서버 2019는 윈도우에서 [쿠버네티스 노드](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/architecture.md#the-kubernetes-node)를 활성화하는 유일한 윈도우 운영 체제이다(kubelet, [컨테이너 런타임](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/deploy-containers/containerd) 및 kube-proxy 포함). 윈도우 배포 채널에 대한 자세한 설명은 [Microsoft 문서](https://docs.microsoft.com/ko-kr/windows-server/get-started-19/servicing-channels-19)를 참고한다.
 
@@ -544,7 +544,7 @@ PodSecurityContext 필드는 윈도우에서 작동하지 않는다. 참조를 
 
 1. `start.ps1`을 시작한 후, flanneld가 "Waiting for the Network to be created"에서 멈춘다.
 
-    이 [조사 중인 이슈](https://github.com/coreos/flannel/issues/1066)에 대한 수많은 보고가 있다. 플란넬 네트워크의 관리 IP가 설정될 때 타이밍 이슈일 가능성이 높다. 해결 방법은 간단히 start.ps1을 다시 시작하거나 다음과 같이 수동으로 다시 시작하는 것이다.
+    이 [이슈](https://github.com/coreos/flannel/issues/1066)에 대한 수많은 보고가 있다. 플란넬 네트워크의 관리 IP가 설정될 때의 타이밍 이슈일 가능성이 높다. 해결 방법은 start.ps1을 다시 시작하거나 다음과 같이 수동으로 다시 시작하는 것이다.
 
     ```powershell
     PS C:> [Environment]::SetEnvironmentVariable("NODE_NAME", "<Windows_Worker_Hostname>")
diff --git a/content/ko/docs/setup/release/notes.md b/content/ko/docs/setup/release/notes.md
index f833d27094..7bcbb39489 100644
--- a/content/ko/docs/setup/release/notes.md
+++ b/content/ko/docs/setup/release/notes.md
@@ -92,7 +92,7 @@ We expect this implementation to progress from alpha to beta and GA in coming re
 
 ### go1.15.5
 
-go1.15.5 has been integrated to Kubernets project as of this release, [including other infrastructure related updates on this effort](https://github.com/kubernetes/kubernetes/pull/95776).
+go1.15.5 has been integrated to Kubernetes project as of this release, [including other infrastructure related updates on this effort](https://github.com/kubernetes/kubernetes/pull/95776).
 
 ### CSI 볼륨 스냅샷(CSI Volume Snapshot)이 안정 기능으로 전환
 
@@ -190,7 +190,7 @@ Currently, cadvisor_stats_provider provides AcceleratorStats but cri_stats_provi
   PodSubnet validates against the corresponding cluster "--node-cidr-mask-size" of the kube-controller-manager, it fail if the values are not compatible.
   kubeadm no longer sets the node-mask automatically on IPv6 deployments, you must check that your IPv6 service subnet mask is compatible with the default node mask /64 or set it accordenly.
   Previously, for IPv6, if the podSubnet had a mask lower than /112, kubeadm calculated a node-mask to be multiple of eight and splitting the available bits to maximise the number used for nodes. ([#95723](https://github.com/kubernetes/kubernetes/pull/95723), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]
-- The deprecated flag --experimental-kustomize is now removed from kubeadm commands. Use --experimental-patches instead, which was introduced in 1.19. Migration infromation available in --help description for --exprimental-patches. ([#94871](https://github.com/kubernetes/kubernetes/pull/94871), [@neolit123](https://github.com/neolit123))
+- The deprecated flag --experimental-kustomize is now removed from kubeadm commands. Use --experimental-patches instead, which was introduced in 1.19. Migration information available in --help description for --experimental-patches. ([#94871](https://github.com/kubernetes/kubernetes/pull/94871), [@neolit123](https://github.com/neolit123))
 - Windows hyper-v container featuregate is deprecated in 1.20 and will be removed in 1.21 ([#95505](https://github.com/kubernetes/kubernetes/pull/95505), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
 - The kube-apiserver ability to serve on an insecure port, deprecated since v1.10, has been removed. The insecure address flags `--address` and `--insecure-bind-address` have no effect in kube-apiserver and will be removed in v1.24. The insecure port flags `--port` and `--insecure-port` may only be set to 0 and will be removed in v1.24. ([#95856](https://github.com/kubernetes/kubernetes/pull/95856), [@knight42](https://github.com/knight42), [SIG API Machinery, Node, Testing])
 - Add dual-stack Services (alpha).  This is a BREAKING CHANGE to an alpha API.
diff --git a/content/ko/docs/tasks/access-application-cluster/access-cluster.md b/content/ko/docs/tasks/access-application-cluster/access-cluster.md
index e78046f0ee..43a6a82343 100644
--- a/content/ko/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/ko/docs/tasks/access-application-cluster/access-cluster.md
@@ -280,7 +280,7 @@ heapster is running at https://104.197.5.247/api/v1/namespaces/kube-system/servi
 
 #### 수작업으로 apiserver proxy URL을 구축
 
-위에서 언급한 것처럼 서비스의 proxy URL을 검색하는데 `kubectl cluster-info` 커맨드를 사용할 수 있다. 서비스 endpoint, 접미사, 매개변수를 포함하는 proxy URL을 생성하려면 단순하게 해당 서비스에
+위에서 언급한 것처럼 서비스의 proxy URL을 검색하는데 `kubectl cluster-info` 커맨드를 사용할 수 있다. 서비스 endpoint, 접미사, 매개변수를 포함하는 proxy URL을 생성하려면 해당 서비스에
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`service_name[:port_name]`*`/proxy` 형식의 proxy URL을 덧붙인다.
 
 당신이 port에 이름을 지정하지 않았다면 URL에 *port_name* 을 지정할 필요는 없다.
diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
index 123c09d2d2..d6e567e674 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
@@ -216,7 +216,7 @@ for i in ret.items:
 
 #### Java 클라이언트 {#java-client}
 
-* [Java 클라이언트](https://github.com/kubernetes-client/java)를 설치하려면, 다음을 실행한다.
+[Java 클라이언트](https://github.com/kubernetes-client/java)를 설치하려면, 다음을 실행한다.
 
 ```shell
 # java 라이브러리를 클론한다
diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-services.md b/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
index f8f707eb33..5dd7a627d0 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
@@ -83,7 +83,7 @@ heapster is running at https://104.197.5.247/api/v1/namespaces/kube-system/servi
 
 #### apiserver 프록시 URL 수동 구성
 
-위에서 언급한 것처럼, `kubectl cluster-info` 명령을 사용하여 서비스의 프록시 URL을 검색한다. 서비스 엔드포인트, 접미사 및 매개 변수를 포함하는 프록시 URL을 작성하려면, 단순히 서비스의 프록시 URL에 추가하면 된다.
+위에서 언급한 것처럼, `kubectl cluster-info` 명령을 사용하여 서비스의 프록시 URL을 검색한다. 서비스 엔드포인트, 접미사 및 매개 변수를 포함하는 프록시 URL을 작성하려면, 서비스의 프록시 URL에 추가하면 된다.
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`[https:]service_name[:port_name]`*`/proxy`
 
 포트에 대한 이름을 지정하지 않은 경우, URL에 *port_name* 을 지정할 필요가 없다.

From c77e38066fcf96eb43f3ade541284e7e90c65b08 Mon Sep 17 00:00:00 2001
From: raghvenders <raghvenders@gmail.com>
Date: Sun, 28 Feb 2021 20:40:16 -0600
Subject: [PATCH 061/788] Review Comments

---
 content/en/docs/reference/_index.md         | 4 ++--
 content/en/docs/reference/kubectl/_index.md | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 01341d4a67..a261b8a947 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -18,7 +18,7 @@ This section of the Kubernetes documentation contains references.
 
 <!-- body -->
 
-## Standardized Glossary
+## API Reference
 
 * [Glossary](/docs/reference/glossary/) -  a comprehensive, standardized list of Kubernetes terminology
 
@@ -30,7 +30,7 @@ This section of the Kubernetes documentation contains references.
 * [API access control](/docs/reference/access-authn-authz/) - details on how Kubernetes controls API access
 * [Well-Known Labels, Annotations and Taints](/docs/reference/kubernetes-api/labels-annotations-taints/)
 
-## API Client Libraries
+## Officially supported client libraries
 
 To call the Kubernetes API from a programming language, you can use
 [client libraries](/docs/reference/using-api/client-libraries/). Officially supported
diff --git a/content/en/docs/reference/kubectl/_index.md b/content/en/docs/reference/kubectl/_index.md
index ce08a5a97a..765adb6fe8 100755
--- a/content/en/docs/reference/kubectl/_index.md
+++ b/content/en/docs/reference/kubectl/_index.md
@@ -1,5 +1,5 @@
 ---
-title: "CLI"
+title: "kubectl"
 weight: 60
 ---
 

From a19a86f9a9018529fb6cf75ac3dc31a893c21fe5 Mon Sep 17 00:00:00 2001
From: debugwish <debugwish@gmail.com>
Date: Mon, 1 Mar 2021 16:20:33 +0800
Subject: [PATCH 062/788] Update connect-applications-service.md

---
 .../services-networking/connect-applications-service.md         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/services-networking/connect-applications-service.md b/content/zh/docs/concepts/services-networking/connect-applications-service.md
index bf54a0f2d0..8baed256d5 100644
--- a/content/zh/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/zh/docs/concepts/services-networking/connect-applications-service.md
@@ -438,7 +438,7 @@ kind: "Secret"
 metadata:
   name: "nginxsecret"
   namespace: "default"
- type: kubernetes.io/tls  
+type: kubernetes.io/tls  
 data:
   tls.crt: "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"
   tls.key: "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"

From 88fd85e27f2fddf1aeba27843405d1abfae9c47d Mon Sep 17 00:00:00 2001
From: Lapi <tyoutugai.7@gmail.com>
Date: Mon, 1 Mar 2021 21:32:04 +0900
Subject: [PATCH 063/788] translate horizontal-pod-autoscale-walkthrough into
 ja

---
 .../horizontal-pod-autoscale-walkthrough.md   | 410 ++++++++++++++++++
 1 file changed, 410 insertions(+)
 create mode 100644 content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md

diff --git a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
new file mode 100644
index 0000000000..e175ec99e7
--- /dev/null
+++ b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -0,0 +1,410 @@
+---
+title: Horizontal Pod Autoscalerウォークスルー
+content_type: task
+weight: 100
+---
+
+<!-- overview -->
+
+Horizontal Pod Autoscalerは、Deployment、ReplicaSetまたはStatefulSetといったレプリケーションコントローラ内のPodの数を、観測されたCPU使用率（もしくはベータサポートの、アプリケーションによって提供されるその他のメトリクス）に基づいて自動的にスケールさせます。
+
+このドキュメントはphp-apacheサーバーに対しHorizontal Pod Autoscalerを有効化するという例に沿ってウォークスルーで説明していきます。Horizontal Pod Autoscalerの動作についてのより詳細な情報を知りたい場合は、[Horizontal Pod Autoscalerユーザーガイド](/docs/tasks/run-application/horizontal-pod-autoscale/)をご覧ください。
+
+## {{% heading "前提条件" %}}
+
+この例ではバージョン1.2以上の動作するKubernetesクラスターおよびkubectlが必要です。
+[Metrics server](https://github.com/kubernetes-sigs/metrics-server)によるモニタリングが[Metrics API](https://github.com/kubernetes/metrics)を通じてクラスター内にデプロイされている必要があります。
+Horizontal Pod Autoscalerはメトリクスを収集するためにこのAPIを利用します。metrics-serverをデプロイする方法を知りたい場合は[metrics-server ドキュメント](https://github.com/kubernetes-sigs/metrics-server#deployment)をご覧ください。
+
+Horizontal Pod Autoscalerで複数のリソースメトリクスを利用するためには、バージョン1.6以上のKubernetesクラスターおよびkubectlが必要です。カスタムメトリクスを使えるようにするためには、あなたのクラスターがカスタムメトリクスAPIを提供するAPIサーバーと通信できる必要があります。
+最後に、Kubernetesオブジェクトと関係のないメトリクスを使うにはバージョン1.10以上のKubernetesクラスターおよびkubectlが必要で、さらにあなたのクラスターが外部メトリクスAPIを提供するAPIサーバーと通信できる必要があります。
+詳細については[Horizontal Pod Autoscaler user guide](/docs/tasks/run-application/horizontal-pod-autoscale/#support-for-custom-metrics)をご覧ください。
+
+<!-- steps -->
+
+## php-apacheの起動と公開
+
+Horizontal Pod Autoscalerのデモンストレーションのために、php-apacheイメージをもとにしたカスタムのDockerイメージを使います。
+このDockerfileは下記のようになっています。
+
+```dockerfile
+FROM php:5-apache
+COPY index.php /var/www/html/index.php
+RUN chmod a+rx index.php
+```
+
+これはCPU負荷の高い演算を行うindex.phpを定義しています。
+
+```php
+<?php
+  $x = 0.0001;
+  for ($i = 0; $i <= 1000000; $i++) {
+    $x += sqrt($x);
+  }
+  echo "OK!";
+?>
+```
+
+まず最初に、イメージを動かすDeploymentを起動し、Serviceとして公開しましょう。
+下記の設定を使います。
+
+{{< codenew file="application/php-apache.yaml" >}}
+
+以下のコマンドを実行してください。
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/php-apache.yaml
+```
+
+```
+deployment.apps/php-apache created
+service/php-apache created
+```
+
+## Horizontal Pod Autoscalerを作成する
+
+サーバーが起動したら、[kubectl autoscale](/docs/reference/generated/kubectl/kubectl-commands#autoscale)を使ってautoscalerを作成しましょう。以下のコマンドで、最初のステップで作成したphp-apache deploymentによって制御されるPodレプリカ数を1から10の間に維持するHorizontal Pod Autoscalerを作成します。
+簡単に言うと、HPAは（Deploymentを通じて）レプリカ数を増減させ、すべてのPodにおける平均CPU使用率を50%（それぞれのPodは`kubectl run`で200 milli-coresを要求しているため、平均CPU使用率100 milli-coresを意味します）に保とうとします。
+このアルゴリズムについての詳細は[こちら](/docs/tasks/run-application/horizontal-pod-autoscale/#algorithm-details)をご覧ください。
+
+```shell
+kubectl autoscale deployment php-apache --cpu-percent=50 --min=1 --max=10
+```
+
+```
+horizontalpodautoscaler.autoscaling/php-apache autoscaled
+```
+
+以下を実行して現在のAutoscalerの状況を確認できます。
+
+```shell
+kubectl get hpa
+```
+
+```
+NAME         REFERENCE                     TARGET    MINPODS   MAXPODS   REPLICAS   AGE
+php-apache   Deployment/php-apache/scale   0% / 50%  1         10        1          18s
+```
+
+現在はサーバーにリクエストを送っていないため、CPU使用率が0%になっていることに注意してください（`TARGET`カラムは対応するDeploymentによって制御される全てのPodの平均値を示しています。）。
+
+## 負荷の増加
+
+Autoscalerがどのように負荷の増加に反応するか見てみましょう。
+コンテナを作成し、クエリの無限ループをphp-apacheサーバーに送ってみます（これは別のターミナルで実行してください）。
+
+```shell
+kubectl run -i --tty load-generator --rm --image=busybox --restart=Never -- /bin/sh -c "while sleep 0.01; do wget -q -O- http://php-apache; done"
+```
+
+数分以内に、下記を実行することでCPU負荷が高まっていることを確認できます。
+
+```shell
+kubectl get hpa
+```
+
+```
+NAME         REFERENCE                     TARGET      MINPODS   MAXPODS   REPLICAS   AGE
+php-apache   Deployment/php-apache/scale   305% / 50%  1         10        1          3m
+```
+
+ここでは、CPU使用率はrequestの305%にまで高まっています。
+結果として、Deploymentはレプリカ数7にリサイズされました。
+
+```shell
+kubectl get deployment php-apache
+```
+
+```
+NAME         READY   UP-TO-DATE   AVAILABLE   AGE
+php-apache   7/7      7           7           19m
+```
+
+{{< note >}}
+レプリカ数が安定するまでは数分かかることがあります。負荷量は何らかの方法で制御されているわけではないので、最終的なレプリカ数はこの例とは異なる場合があります。
+{{< /note >}}
+
+## 負荷の停止
+
+ユーザー負荷を止めてこの例を終わらせましょう。
+
+私たちが`busybox`イメージを使って作成したコンテナ内のターミナルで、`<Ctrl> + C`を入力して負荷生成を終了させます。
+
+そして結果の状態を確認します（数分後）。
+
+```shell
+kubectl get hpa
+```
+
+```
+NAME         REFERENCE                     TARGET       MINPODS   MAXPODS   REPLICAS   AGE
+php-apache   Deployment/php-apache/scale   0% / 50%     1         10        1          11m
+```
+
+```shell
+kubectl get deployment php-apache
+```
+
+```
+NAME         READY   UP-TO-DATE   AVAILABLE   AGE
+php-apache   1/1     1            1           27m
+```
+
+ここでCPU使用率は0に下がり、HPAによってオートスケールされたレプリカ数は1に戻ります。
+
+{{< note >}}
+レプリカのオートスケールには数分かかることがあります。
+{{< /note >}}
+
+<!-- discussion -->
+
+## 複数のメトリクスやカスタムメトリクスを基にオートスケーリングする
+
+`autoscaling/v2beta2` APIバージョンと使うと、`php-apache` Deploymentをオートスケーリングする際に使う追加のメトリクスを導入することが出来ます。
+
+まず、`autoscaling/v2beta2`内のHorizontalPodAutoscalerのYAMLファイルを入手します。
+
+```shell
+kubectl get hpa.v2beta2.autoscaling -o yaml > /tmp/hpa-v2.yaml
+```
+
+`/tmp/hpa-v2.yaml`ファイルをエディタで開くと、以下のようなYAMLファイルが見えるはずです。
+
+```yaml
+apiVersion: autoscaling/v2beta2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: php-apache
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: php-apache
+  minReplicas: 1
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 50
+status:
+  observedGeneration: 1
+  lastScaleTime: <some-time>
+  currentReplicas: 1
+  desiredReplicas: 1
+  currentMetrics:
+  - type: Resource
+    resource:
+      name: cpu
+      current:
+        averageUtilization: 0
+        averageValue: 0
+```
+
+`targetCPUUtilizationPercentage`フィールドは`metrics`と呼ばれる配列に置換されています。
+CPU使用率メトリクスは、Podコンテナで定められたリソースの割合として表されるため、*リソースメトリクス*です。CPU以外のリソースメトリクスを指定することもできます。デフォルトでは、他にメモリだけがリソースメトリクスとしてサポートされています。これらのリソースはクラスター間で名前が変わることはなく、そして`metrics.k8s.io` APIが利用可能である限り常に利用可能です。
+
+さらに`target.type`において`Utilization`の代わりに`AverageValue`を使い、`target.averageUtilization`フィールドの代わりに対応する`target.averageValue`フィールドを設定することで、リソースメトリクスをrequest値に対する割合に代わり、直接的な値に設定することも可能です。
+
+PodメトリクスとObjectメトリクスという2つの異なる種類のメトリクスが存在し、どちらも*カスタムメトリクス*とみなされます。これらのメトリクスはクラスター特有の名前を持ち、利用するにはより発展的なクラスター監視設定が必要となります。
+
+これらの代替メトリクスタイプのうち、最初のものが*Podメトリクス*です。これらのメトリクスはPodを説明し、Podを渡って平均され、レプリカ数を決定するためにターゲット値と比較されます。
+これらはほとんどリソースメトリクス同様に機能しますが、`target`の種類としては`AverageValue`*のみ*をサポートしている点が異なります。
+
+Podメトリクスはmetricブロックを使って以下のように指定されます。
+
+```yaml
+type: Pods
+pods:
+  metric:
+    name: packets-per-second
+  target:
+    type: AverageValue
+    averageValue: 1k
+```
+
+2つ目のメトリクスタイプは*Objectメトリクス*です。これらのメトリクスはPodを説明するかわりに、同一Namespace内の異なったオブジェクトを説明します。このメトリクスはオブジェクトから取得される必要はありません。単に説明するだけです。Objectメトリクスは`target`の種類として`Value`と`AverageValue`をサポートします。`Value`では、ターゲットはAPIから返ってきたメトリクスと直接比較されます。`AverageValue`では、カスタムメトリクスAPIから返ってきた値はターゲットと比較される前にPodの数で除算されます。以下の例は`requests-per-second`メトリクスのYAML表現です。
+
+```yaml
+type: Object
+object:
+  metric:
+    name: requests-per-second
+  describedObject:
+    apiVersion: networking.k8s.io/v1beta1
+    kind: Ingress
+    name: main-route
+  target:
+    type: Value
+    value: 2k
+```
+
+もしこのようなmetricブロックを複数提供した場合、HorizontalPodAutoscalerはこれらのメトリクスを順番に処理します。
+HorizontalPodAutoscalerはそれぞれのメトリクスについて推奨レプリカ数を算出し、その中で最も多いレプリカ数を採用します。
+
+例えば、もしあなたがネットワークトラフィックについてのメトリクスを収集する監視システムを持っているなら、`kubectl edit`を使って指定を次のように更新することができます。
+
+```yaml
+apiVersion: autoscaling/v2beta2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: php-apache
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: php-apache
+  minReplicas: 1
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 50
+  - type: Pods
+    pods:
+      metric:
+        name: packets-per-second
+      target:
+        type: AverageValue
+        averageValue: 1k
+  - type: Object
+    object:
+      metric:
+        name: requests-per-second
+      describedObject:
+        apiVersion: networking.k8s.io/v1beta1
+        kind: Ingress
+        name: main-route
+      target:
+        type: Value
+        value: 10k
+status:
+  observedGeneration: 1
+  lastScaleTime: <some-time>
+  currentReplicas: 1
+  desiredReplicas: 1
+  currentMetrics:
+  - type: Resource
+    resource:
+      name: cpu
+    current:
+      averageUtilization: 0
+      averageValue: 0
+  - type: Object
+    object:
+      metric:
+        name: requests-per-second
+      describedObject:
+        apiVersion: networking.k8s.io/v1beta1
+        kind: Ingress
+        name: main-route
+      current:
+        value: 10k
+```
+
+この時、HorizontalPodAutoscalerはそれぞれのPodがCPU requestの50%を使い、1秒当たり1000パケットを送信し、そしてmain-route
+Ingressの裏にあるすべてのPodが合計で1秒当たり10000パケットを送信する状態を保持しようとします。
+
+### より詳細なメトリクスをもとにオートスケーリングする
+
+多くのメトリクスパイプラインは、名前もしくは _labels_ と呼ばれる追加の記述子の組み合わせによって説明することができます。全てのリソースメトリクス以外のメトリクスタイプ（Pod、Object、そして下で説明されている外部メトリクス）において、メトリクスパイプラインに渡す追加のラベルセレクターを指定することができます。例えば、もしあなたが`http_requests`メトリクスを`verb`ラベルとともに収集しているなら、下記のmetricブロックを指定してGETリクエストにのみ基づいてスケールさせることができます。
+
+```yaml
+type: Object
+object:
+  metric:
+    name: http_requests
+    selector: {matchLabels: {verb: GET}}
+```
+
+このセレクターは完全なKubernetesラベルセレクターと同じ文法を利用します。もし名前とセレクターが複数の系列に一致した場合、この監視パイプラインはどのようにして複数の系列を一つの値にまとめるかを決定します。このセレクターは付加的なもので、ターゲットオブジェクト（`Pods`タイプの場合は対象Pod、`Object`タイプの場合は説明されるオブジェクト）では**ない**オブジェクトを説明するメトリクスを選択することは出来ません。
+
+### Kubernetesオブジェクトと関係ないメトリクスに基づいたオートスケーリング
+
+Kubernetes上で動いているアプリケーションを、Kubernetes Namespaceと直接的な関係がないサービスを説明するメトリクスのようなKubernetesクラスター内のオブジェクトと明確な関係が無いメトリクスを基にオートスケールする必要があるかもしれません。Kubernetes 1.10以降では、このようなユースケースを*外部メトリクス*によって解決できます。
+
+外部メトリクスを使うにはあなたの監視システムについての知識が必要となります。この設定はカスタムメトリクスを使うときのものに似ています。外部メトリクスを使うとあなたの監視システムのあらゆる利用可能なメトリクスに基づいてクラスターをオートスケールできるようになります。上記のように`metric`ブロックで`name`と`selector`を設定し、`Object`のかわりに`External`メトリクスタイプを使います。
+もし複数の時系列が`metricSelector`により一致した場合は、それらの値の合計がHorizontalPodAutoscalerに使われます。
+外部メトリクスは`Value`と`AverageValue`の両方のターゲットタイプをサポートしています。これらの機能は`Object`タイプを利用するときとまったく同じです。
+
+例えばもしあなたのアプリケーションがホストされたキューサービスからのタスクを処理している場合、あなたは下記のセクションをHorizontalPodAutoscalerマニフェストに追記し、未処理のタスク30個あたり1つのワーカーを必要とすることを指定します。
+
+```yaml
+- type: External
+  external:
+    metric:
+      name: queue_messages_ready
+      selector: "queue=worker_tasks"
+    target:
+      type: AverageValue
+      averageValue: 30
+```
+
+可能なら、クラスター管理者がカスタムメトリクスAPIを保護することを簡単にするため、外部メトリクスのかわりにカスタムメトリクスを用いることが望ましいです。外部メトリクスAPIは潜在的に全てのメトリクスへのアクセスを許可するため、クラスター管理者はこれを公開する際には注意が必要です。
+
+## 付録: Horizontal Pod Autoscaler status conditions
+
+`autoscaling/v2beta2`形式のHorizontalPodAutoscalerを使っている場合は、KubernetesによるHorizontalPodAutoscaler上の*status conditions*セットを見ることができます。status conditionsはHorizontalPodAutoscalerがスケール可能かどうか、そして現時点でそれが何らかの方法で制限されているかどうかを示しています。
+
+このconditionsは`status.conditions`フィールドに現れます。HorizontalPodAutoscalerに影響しているconditionsを確認するために、`kubectl describe hpa`を利用できます。
+
+```shell
+kubectl describe hpa cm-test
+```
+
+```
+Name:                           cm-test
+Namespace:                      prom
+Labels:                         <none>
+Annotations:                    <none>
+CreationTimestamp:              Fri, 16 Jun 2017 18:09:22 +0000
+Reference:                      ReplicationController/cm-test
+Metrics:                        ( current / target )
+  "http_requests" on pods:      66m / 500m
+Min replicas:                   1
+Max replicas:                   4
+ReplicationController pods:     1 current / 1 desired
+Conditions:
+  Type                  Status  Reason                  Message
+  ----                  ------  ------                  -------
+  AbleToScale           True    ReadyForNewScale        the last scale time was sufficiently old as to warrant a new scale
+  ScalingActive         True    ValidMetricFound        the HPA was able to successfully calculate a replica count from pods metric http_requests
+  ScalingLimited        False   DesiredWithinRange      the desired replica count is within the acceptable range
+Events:
+```
+
+このHorizontalPodAutoscalerにおいて、いくつかの正常な状態のconditionsを見ることができます。まず最初に、`AbleToScale`は、HPAがスケール状況を取得し、更新させることが出来るかどうかだけでなく、何らかのbackoffに関連した状況がスケーリングを妨げていないかを示しています。2番目に、`ScalingActive`は、HPAが有効化されているかどうか（例えば、レプリカ数のターゲットがゼロでないこと）や、望ましいスケールを算出できるかどうかを示します。もしこれが`False`の場合、大体はメトリクスの取得において問題があることを示しています。最後に、一番最後の状況である`ScalingLimited`は、HorizontalPodAutoscalerの最大値や最小値によって望ましいスケールがキャップされていることを示しています。この指標を見てHorizontalPodAutoscaler上の最大・最小レプリカ数制限を増やす、もしくは減らす検討ができます。
+
+## 付録: 数量
+
+All metrics in the HorizontalPodAutoscaler and metrics APIs are specified using
+a special whole-number notation known in Kubernetes as a
+{{< glossary_tooltip term_id="quantity" text="quantity">}}.  For example,
+the quantity `10500m` would be written as `10.5` in decimal notation.  The metrics APIs
+will return whole numbers without a suffix when possible, and will generally return
+quantities in milli-units otherwise.  This means you might see your metric value fluctuate
+between `1` and `1500m`, or `1` and `1.5` when written in decimal notation.
+全てのHorizontalPodAutoscalerおよびメトリクスAPIにおけるメトリクスは{{< glossary_tooltip term_id="quantity" text="quantity">}}として知られる特殊な整数表記によって指定されます。例えば、`10500m`という数量は10進数表記で`10.5`と書くことができます。メトリクスAPIは可能であれば接尾辞を用いない整数を返し、そうでない場合は基本的にミリ単位での数量を返します。これはメトリクス値が`1`と`1500m`の間で、もしくは10進法表記で書かれた場合は`1`と`1.5`の間で変動するということを意味します。
+
+## 付録: その他の起きうるシナリオ
+
+### Autoscalerを宣言的に作成する
+
+`kubectl autoscale`コマンドを使って命令的にHorizontalPodAutoscalerを作るかわりに、下記のファイルを使って宣言的に作成することができます。
+
+{{< codenew file="application/hpa/php-apache.yaml" >}}
+
+下記のコマンドを実行してAutoscalerを作成します。
+
+```shell
+kubectl create -f https://k8s.io/examples/application/hpa/php-apache.yaml
+```
+
+```
+horizontalpodautoscaler.autoscaling/php-apache created
+```
\ No newline at end of file

From d62fa456251c6f740d80f747592a612e1f2d2f66 Mon Sep 17 00:00:00 2001
From: Lapi <tyoutugai.7@gmail.com>
Date: Mon, 1 Mar 2021 21:33:25 +0900
Subject: [PATCH 064/788] fix translation

---
 .../horizontal-pod-autoscale-walkthrough.md                | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index e175ec99e7..7cf4718f5c 100644
--- a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -382,13 +382,6 @@ Events:
 
 ## 付録: 数量
 
-All metrics in the HorizontalPodAutoscaler and metrics APIs are specified using
-a special whole-number notation known in Kubernetes as a
-{{< glossary_tooltip term_id="quantity" text="quantity">}}.  For example,
-the quantity `10500m` would be written as `10.5` in decimal notation.  The metrics APIs
-will return whole numbers without a suffix when possible, and will generally return
-quantities in milli-units otherwise.  This means you might see your metric value fluctuate
-between `1` and `1500m`, or `1` and `1.5` when written in decimal notation.
 全てのHorizontalPodAutoscalerおよびメトリクスAPIにおけるメトリクスは{{< glossary_tooltip term_id="quantity" text="quantity">}}として知られる特殊な整数表記によって指定されます。例えば、`10500m`という数量は10進数表記で`10.5`と書くことができます。メトリクスAPIは可能であれば接尾辞を用いない整数を返し、そうでない場合は基本的にミリ単位での数量を返します。これはメトリクス値が`1`と`1500m`の間で、もしくは10進法表記で書かれた場合は`1`と`1.5`の間で変動するということを意味します。
 
 ## 付録: その他の起きうるシナリオ

From ecd25dfefb01c707393a579087b39026ab522775 Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Mon, 1 Mar 2021 08:09:13 -0500
Subject: [PATCH 065/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index bfc49a431b..a1969cd9cc 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -17,7 +17,7 @@ Troubleshooting always begins with information gathering. While much attention h
 
 ## Kubernetes Annotations
 
-Kubernetes annotations are designed to solve exactly this problem. Oft-overlooked, Kubernetes annotations are designed to add metadata to Kubernetes objects. The Kubernetes documentation says annotations can “attach arbitrary non-identifying metadata to objects.” This means that annotations should be used for attaching metadata that is external to Kubernetes (i.e., metadata that Kubernetes won’t use to identify objects. As such, annotations can contain any type of data. This is a contrast to labels, which are designed for uses internal to Kubernetes. As such, label structure and values are [constrained](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set) so they can be efficiently used by Kubernetes.
+Kubernetes annotations are designed to solve exactly this problem. Oft-overlooked, Kubernetes annotations are designed to add metadata to Kubernetes objects. The Kubernetes documentation says annotations can “attach arbitrary non-identifying metadata to objects.” This means that annotations should be used for attaching metadata that is external to Kubernetes (i.e., metadata that Kubernetes won’t use to identify objects. As such, annotations can contain any type of data. This is a contrast to labels, which are designed for uses internal to Kubernetes. As such, label structure and values are [constrained](/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set) so they can be efficiently used by Kubernetes.
 
 
 ## Kubernetes Annotations in Action

From eeb8c0b45ec3972d942c32d791d8d68dbbe5c2fc Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Mon, 1 Mar 2021 08:09:20 -0500
Subject: [PATCH 066/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index a1969cd9cc..9a0c166421 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -87,7 +87,7 @@ Adopting a common convention for annotations ensures consistency and understanda
 
 ## Visualizing Annotations: Service Catalogs
 
-As the number of microservices and annotations proliferate, using `kubectl describe` can get tedious. Moreover, kubectl describe requires every developer to have some direct access to the Kubernetes cluster. A [service catalog](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog) presents an internal, developer-oriented view of all services. 
+As the number of microservices and annotations proliferate, running `kubectl describe` can get tedious. Moreover, using `kubectl describe` requires every developer to have some direct access to the Kubernetes cluster. An [service catalog](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog), in the Ambassador meaning of that term, presents an internal, developer-oriented view of all services.
 
 Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include Backstage and Ambassador. [Backstage](https://backstage.io/) is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while [Ambassador](https://www.getambassador.io/products/service-catalog) provides a turnkey, cloud-hosted solution that can be set up quickly.
 

From 69ee6318a5f6d293f2c9a2c3bfd2dfd371af228b Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Mon, 1 Mar 2021 08:10:02 -0500
Subject: [PATCH 067/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index 9a0c166421..ddf0bca364 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -92,7 +92,7 @@ As the number of microservices and annotations proliferate, running `kubectl des
 Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include Backstage and Ambassador. [Backstage](https://backstage.io/) is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while [Ambassador](https://www.getambassador.io/products/service-catalog) provides a turnkey, cloud-hosted solution that can be set up quickly.
 
 ## Annotate Your Services Now and Thank Yourself Later
-Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Typically, something is on fire in production and you wished you had implemented better metrics and also specified which Slack channel the owning team lived in within your organization. 
+Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Don't wait until something is on fire in production to start wishing you had implemented better metrics and also documented how to get in touch with the part of your organization that looks after it.
 
 There's enormous benefits to building an effective “[version 0](https://www.getambassador.io/learn/kubernetes-glossary/version-0/)” of any service: a “[dancing skeleton](https://containerjournal.com/topics/container-management/dancing-skeleton-apis-and-microservices/)” application with a thin slice of complete functionality that can be deployed to production with a minimal yet effective continuous delivery pipeline. 
 

From dc86d666482105fc0edfe4b392c7ab0d5a54ad2a Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Mon, 1 Mar 2021 08:11:11 -0500
Subject: [PATCH 068/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index ddf0bca364..994601a9f3 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -85,7 +85,7 @@ Adopting a common convention for annotations ensures consistency and understanda
 | `a8r.io/dependencies`                      | Unstructured text describing the service dependencies for humans. |
 
 
-## Visualizing Annotations: Service Catalogs
+## Visualizing annotations: service catalogs
 
 As the number of microservices and annotations proliferate, running `kubectl describe` can get tedious. Moreover, using `kubectl describe` requires every developer to have some direct access to the Kubernetes cluster. An [service catalog](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog), in the Ambassador meaning of that term, presents an internal, developer-oriented view of all services.
 

From 3188c43241b6be5484b65dd351417ca36b66ef65 Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Mon, 1 Mar 2021 08:11:17 -0500
Subject: [PATCH 069/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index 994601a9f3..1c05fe2410 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -91,7 +91,7 @@ As the number of microservices and annotations proliferate, running `kubectl des
 
 Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include Backstage and Ambassador. [Backstage](https://backstage.io/) is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while [Ambassador](https://www.getambassador.io/products/service-catalog) provides a turnkey, cloud-hosted solution that can be set up quickly.
 
-## Annotate Your Services Now and Thank Yourself Later
+## Annotate your services now and thank yourself later
 Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Don't wait until something is on fire in production to start wishing you had implemented better metrics and also documented how to get in touch with the part of your organization that looks after it.
 
 There's enormous benefits to building an effective “[version 0](https://www.getambassador.io/learn/kubernetes-glossary/version-0/)” of any service: a “[dancing skeleton](https://containerjournal.com/topics/container-management/dancing-skeleton-apis-and-microservices/)” application with a thin slice of complete functionality that can be deployed to production with a minimal yet effective continuous delivery pipeline. 

From a381d88fe26590491b5e81652afa18b7651caf9f Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Mon, 1 Mar 2021 08:11:26 -0500
Subject: [PATCH 070/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index 1c05fe2410..87af6e8863 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -11,7 +11,7 @@ Have you ever been asked to troubleshoot a failing Kubernetes service and strugg
 
 One of the problems as Kubernetes applications grow is the proliferation of services. As the number of services grows, developers start to specialize working with specific services. When it comes to troubleshooting, however, developers need to be able to find the source, understand the service and dependencies, and chat with the owning team for any service.
 
-## Human Service Discovery
+## Human service discovery
 
 Troubleshooting always begins with information gathering. While much attention has been paid to centralizing machine data (e.g., logs, metrics), much less attention has been given to the human aspect of service discovery. Who owns a particular service? What Slack channel does the team work on? Where is the source for the service? What issues are currently known and being tracked?
 

From 5b3eedc8c2ccbcb149e535aff6a2ce6d1fb47d37 Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Mon, 1 Mar 2021 08:49:44 -0500
Subject: [PATCH 071/788] clarify difference with k8s service catalog

Signed-off-by: Richard Li <richard@datawire.io>
---
 .../blog/_posts/2021-02-27-annotating-k8s-for-humans.md   | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index 87af6e8863..d2c4223713 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -5,7 +5,7 @@ date: 2021-02-27
 slug: annotating-k8s-for-humans
 ---
 
-**Authors:** Richard Li (Ambassador Labs)
+**Author:** Richard Li, Ambassador Labs
 
 Have you ever been asked to troubleshoot a failing Kubernetes service and struggled to find basic information about the service such as the source repository and owner?
 
@@ -15,7 +15,7 @@ One of the problems as Kubernetes applications grow is the proliferation of serv
 
 Troubleshooting always begins with information gathering. While much attention has been paid to centralizing machine data (e.g., logs, metrics), much less attention has been given to the human aspect of service discovery. Who owns a particular service? What Slack channel does the team work on? Where is the source for the service? What issues are currently known and being tracked?
 
-## Kubernetes Annotations
+## Kubernetes annotations
 
 Kubernetes annotations are designed to solve exactly this problem. Oft-overlooked, Kubernetes annotations are designed to add metadata to Kubernetes objects. The Kubernetes documentation says annotations can “attach arbitrary non-identifying metadata to objects.” This means that annotations should be used for attaching metadata that is external to Kubernetes (i.e., metadata that Kubernetes won’t use to identify objects. As such, annotations can contain any type of data. This is a contrast to labels, which are designed for uses internal to Kubernetes. As such, label structure and values are [constrained](/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set) so they can be efficiently used by Kubernetes.
 
@@ -87,9 +87,9 @@ Adopting a common convention for annotations ensures consistency and understanda
 
 ## Visualizing annotations: service catalogs
 
-As the number of microservices and annotations proliferate, running `kubectl describe` can get tedious. Moreover, using `kubectl describe` requires every developer to have some direct access to the Kubernetes cluster. An [service catalog](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog), in the Ambassador meaning of that term, presents an internal, developer-oriented view of all services.
+As the number of microservices and annotations proliferate, running `kubectl describe` can get tedious. Moreover, using `kubectl describe` requires every developer to have some direct access to the Kubernetes cluster. Over the past few years, [service catalogs](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog) have gained greater visibility in the Kubernetes ecosystem. Popularized by tools such as [Shopify's ServicesDB](https://shopify.engineering/scaling-mobile-development-by-treating-apps-as-services) and [Spotify's System Z](https://dzone.com/articles/modeling-microservices-at-spotify-with-petter-mari), service catalogs are internally-facing developer portals that present critical information about microservices. Note that these service catalogs should not be confused with the [Kubernetes Service Catalog project](https://svc-cat.io/). Built on the Open Service Broker API, the Kubernetes Service Catalog enables Kubernetes operators to plug in different services (e.g., databases) to their cluster.
 
-Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include Backstage and Ambassador. [Backstage](https://backstage.io/) is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while [Ambassador](https://www.getambassador.io/products/service-catalog) provides a turnkey, cloud-hosted solution that can be set up quickly.
+Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include [Backstage]((https://backstage.io/) and [Ambassador Service Catalog](https://www.getambassador.io/products/service-catalog). Backstage is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while Ambassador Service Catalog provides a turnkey, cloud-hosted solution that can be set up quickly.
 
 ## Annotate your services now and thank yourself later
 Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Don't wait until something is on fire in production to start wishing you had implemented better metrics and also documented how to get in touch with the part of your organization that looks after it.

From d2239f3d7af89b852c82de04b9dc3378c5a79c51 Mon Sep 17 00:00:00 2001
From: Adrian Ludwin <aludwin@google.com>
Date: Sun, 21 Feb 2021 21:58:15 -0500
Subject: [PATCH 072/788] Better document default imagePullPolicy behaviour

The `imagePullPolicy` field is set automatically based on the image tag
if it's initially omitted, but it is not updated if the image tag later
changes. This can lead to [confusing
behaviour](https://itnext.io/defaults-are-hard-kubernetes-deployment-edition-3b11095792f2).
This change attempts to warn users of this potential pitfall.
---
 .../docs/concepts/configuration/overview.md   |  6 ++---
 content/en/docs/concepts/containers/images.md | 26 +++++++++++++++----
 2 files changed, 24 insertions(+), 8 deletions(-)

diff --git a/content/en/docs/concepts/configuration/overview.md b/content/en/docs/concepts/configuration/overview.md
index fce8a0c7a8..25cfb2e7f1 100644
--- a/content/en/docs/concepts/configuration/overview.md
+++ b/content/en/docs/concepts/configuration/overview.md
@@ -81,9 +81,9 @@ The [imagePullPolicy](/docs/concepts/containers/images/#updating-images) and the
 
 - `imagePullPolicy: Always`: every time the kubelet launches a container, the kubelet queries the container image registry to resolve the name to an image digest. If the kubelet has a container image with that exact digest cached locally, the kubelet uses its cached image; otherwise, the kubelet downloads (pulls) the image with the resolved digest, and uses that image to launch the container.
 
-- `imagePullPolicy` is omitted and either the image tag is `:latest` or it is omitted: `Always` is applied.
+- `imagePullPolicy` is omitted and either the image tag is `:latest` or it is omitted: `imagePullPolicy` is automatically set to `Always`. Note that this will _not_ be updated to `IfNotPresent` if the tag changes value.
 
-- `imagePullPolicy` is omitted and the image tag is present but not `:latest`: `IfNotPresent` is applied.
+- `imagePullPolicy` is omitted and the image tag is present but not `:latest`: `imagePullPolicy` is automatically set to `IfNotPresent`. Note that this will _not_ be updated to `Always` if the tag is later removed or changed to `:latest`.
 
 - `imagePullPolicy: Never`: the image is assumed to exist locally. No attempt is made to pull the image.
 
@@ -96,7 +96,7 @@ You should avoid using the `:latest` tag when deploying containers in production
 {{< /note >}}
 
 {{< note >}}
-The caching semantics of the underlying image provider make even `imagePullPolicy: Always` efficient. With Docker, for example, if the image already exists, the pull attempt is fast because all image layers are cached and no image download is needed.
+The caching semantics of the underlying image provider make even `imagePullPolicy: Always` efficient, as long as the registry is reliably accessible. With Docker, for example, if the image already exists, the pull attempt is fast because all image layers are cached and no image download is needed.
 {{< /note >}}
 
 ## Using kubectl
diff --git a/content/en/docs/concepts/containers/images.md b/content/en/docs/concepts/containers/images.md
index 99698668c4..1166d4106a 100644
--- a/content/en/docs/concepts/containers/images.md
+++ b/content/en/docs/concepts/containers/images.md
@@ -49,16 +49,32 @@ Instead, specify a meaningful tag such as `v1.42.0`.
 
 ## Updating images
 
-The default pull policy is `IfNotPresent` which causes the
-{{< glossary_tooltip text="kubelet" term_id="kubelet" >}} to skip
-pulling an image if it already exists. If you would like to always force a pull,
-you can do one of the following:
+When you first create a {{< glossary_tooltip text="Deployment" term_id="deployment" >}},
+{{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}, Pod, or other
+object that includes a Pod template, then by default the pull policy of all
+containers in that pod will be set to `IfNotPresent` if it is not explicitly
+specified. This policy causes the
+{{< glossary_tooltip text="kubelet" term_id="kubelet" >}} to skip pulling an
+image if it already exists.
+
+If you would like to always force a pull, you can do one of the following:
 
 - set the `imagePullPolicy` of the container to `Always`.
-- omit the `imagePullPolicy` and use `:latest` as the tag for the image to use.
+- omit the `imagePullPolicy` and use `:latest` as the tag for the image to use;
+  Kubernetes will set the policy to `Always`.
 - omit the `imagePullPolicy` and the tag for the image to use.
 - enable the [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) admission controller.
 
+{{< note >}}
+The value of `imagePullPolicy` of the container is always set when the object is
+first _created_, and is not updated if the image's tag later changes.
+
+For example, if you create a Deployment with an image whose tag is _not_
+`:latest`, and later update that Deployment's image to a `:latest` tag, the
+`imagePullPolicy` field will _not_ change to `Always`. You must manually change
+the pull policy of any object after its initial creation.
+{{< /note >}}
+
 When `imagePullPolicy` is defined without a specific value, it is also set to `Always`.
 
 ## Multi-architecture images with image indexes

From 77f868eb1390f0f58d193037134a41ccf99b9515 Mon Sep 17 00:00:00 2001
From: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
Date: Mon, 1 Mar 2021 17:43:31 -0300
Subject: [PATCH 073/788] Add featuregate documentation and correct some doc
 suggestion

---
 .../en/docs/concepts/services-networking/network-policies.md    | 2 +-
 .../reference/command-line-tools-reference/feature-gates.md     | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index d5c14f9465..349fe84fbb 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -257,7 +257,7 @@ The following restrictions apply when using this field:
 * As an alpha feature, this is disabled by default. To enable endPort field at a cluster level, you (or your cluster administrator) will need to enable the `NetworkPolicyEndPort` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for the API server with `--feature-gates=NetworkPolicyEndPort=true,…`.
 * The `endPort` field must be equal than or greater to `port` field.
 * `endPort` can only be defined if `port` is also defined.
-* When using `endPort` field, the `port` field must be numeric.
+* Both ports must be numeric.
 
 {{< note >}}
 Your cluster must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 033b38a112..df65121aff 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -135,6 +135,7 @@ different Kubernetes components.
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
 | `MixedProtocolLBService` | `false` | Alpha | 1.20 | |
+| `NetworkPolicyEndPort` | `false` | Alpha | 1.21 |  |
 | `NodeDisruptionExclusion` | `false` | Alpha | 1.16 | 1.18 |
 | `NodeDisruptionExclusion` | `true` | Beta | 1.19 | |
 | `NonPreemptingPriority` | `false` | Alpha | 1.15 | 1.18 |
@@ -657,6 +658,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   the volume mounter.
 - `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
   For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).
+- `NetworkPolicyEndPort`: Enable use of the field `endPort` in NetworkPolicy objects, allowing the selection of a port range instead of a single port.
 - `NodeDisruptionExclusion`: Enable use of the Node label `node.kubernetes.io/exclude-disruption`
   which prevents nodes from being evacuated during zone failures.
 - `NodeLease`: Enable the new Lease API to report node heartbeats, which could be used as a node health signal.

From 3491bbafc1c32f37261d077fc758cbefe5c450a0 Mon Sep 17 00:00:00 2001
From: HugoPfeffer <hugo.pguima@gmail.com>
Date: Mon, 1 Mar 2021 15:39:33 -0800
Subject: [PATCH 074/788] docs: Add 'Concepts/container/images.md' in pt
 language

---
 content/pt/docs/concepts/container/images.md | 291 +++++++++++++++++++
 1 file changed, 291 insertions(+)
 create mode 100644 content/pt/docs/concepts/container/images.md

diff --git a/content/pt/docs/concepts/container/images.md b/content/pt/docs/concepts/container/images.md
new file mode 100644
index 0000000000..06dbe75cf5
--- /dev/null
+++ b/content/pt/docs/concepts/container/images.md
@@ -0,0 +1,291 @@
+---
+reviewers:
+- femrtnz
+- jcjesus
+- hugopfeffer
+title: Imagens
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+
+Uma imagem de contêiner representa dados binários que encapsulam uma aplicação e todas as suas dependências de software. As imagens de contêiner são pacotes de software executáveis que podem ser executados de forma autônoma e que fazem suposições muito bem definidas sobre seu agente de execução do ambiente.
+
+Normalmente, você cria uma imagem de contêiner da sua aplicação e a envia para um registro antes de fazer referência a ela em um {{< glossary_tooltip text="Pod" term_id="pod" >}}
+
+Esta página fornece um resumo sobre o conceito de imagem de contêiner.  
+
+<!-- body -->
+
+## Nomes das imagens
+
+As imagens de contêiner geralmente recebem um nome como `pause`, `exemplo/meuconteiner`, ou `kube-apiserver`.
+As imagens também podem incluir um hostname de algum registro; por exemplo: `exemplo.registro.ficticio/nomeimagem`,
+e um possível número de porta; por exemplo: `exemplo.registro.ficticio:10443/nomeimagem`.
+
+Se você não especificar um hostname de registro, o Kubernetes presumirá que você se refere ao registro público do Docker.
+
+Após a parte do nome da imagem, você pode adicionar uma _tag_ (como também usar com comandos como
+como `docker` e` podman`).
+As tags permitem identificar diferentes versões da mesma série de imagens.
+
+Tags de imagem consistem em letras maiúsculas e minúsculas, dígitos, sublinhados (`_`),
+pontos (`.`) e travessões (` -`).
+Existem regras adicionais sobre onde você pode colocar o separador
+caracteres (`_`,` -` e `.`) dentro de uma tag de imagem.
+Se você não especificar uma tag, o Kubernetes presumirá que você se refere à tag `latest` (mais recente).
+
+{{< caution >}}
+Você deve evitar usar a tag `latest` quando estiver realizando o deploy de contêineres em produção,
+pois é mais difícil rastrear qual versão da imagem está sendo executada, além de tornar mais difícil o processo de reversão para uma versão funcional.
+
+Em vez disso, especifique uma tag significativa, como `v1.42.0`.
+{{< /caution >}}
+
+## Atualizando imagens
+
+A política de pull padrão é `IfNotPresent` que faz com que o
+{{<glossary_tooltip text = "kubelet" term_id = "kubelet">}} ignore 
+o processo de *pull* da imagem, caso a mesma já exista. Se você prefere sempre forçar o processo de *pull*, 
+você pode fazer como exemplo:
+
+- defina a `imagePullPolicy` do contêiner para` Always`.
+- omita `imagePullPolicy` e use`: latest` como a tag para a imagem a ser usada.
+- omita o `imagePullPolicy` e a tag da imagem a ser usada.
+- habilite o [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) controlador de admissão.
+
+Quando `imagePullPolicy` é definido sem um valor específico, ele também é definido como` Always`.
+
+## Multiarquitetura de imagens com índice de imagens
+
+Além de fornecer o binário das imagens, um registro de contêiner também pode servir um [índice de imagem do contêiner](https://github.com/opencontainers/image-spec/blob/master/image-index.md). Um índice de imagem pode apontar para multiplos [manifestos da imagem](https://github.com/opencontainers/image-spec/blob/master/manifest.md) para versões específicas de arquitetura de um contêiner. A ideia é que você possa ter um nome para uma imagem (por exemplo: `pause`, `exemple/meuconteiner`, `kube-apiserver`) e permitir que diferentes sistemas busquem o binário da imagem correta para a arquitetura de máquina que estão usando.
+
+O próprio Kubernetes normalmente nomeia as imagens de contêiner com o sufixo `- $ (ARCH)`. Para retrocompatibilidade, gere as imagens mais antigas com sufixos. A ideia é gerar a imagem `pause` que tem o manifesto para todas as arquiteturas e `pause-amd64` que é retrocompatível com as configurações anteriores ou arquivos YAML que podem ter codificado as imagens com sufixos.
+
+## Usando um registro privado
+
+Os registros privados podem exigir chaves para acessar as imagens deles.
+As credenciais podem ser fornecidas de várias maneiras:
+  - Configurando nós para autenticação em um registro privado
+     - todos os pods podem ler qualquer registro privado configurado
+     - requer configuração de nó pelo administrador do cluster
+   - Imagens pré-obtidas
+     - todos os pods podem usar qualquer imagem armazenada em cache em um nó
+     - requer acesso root a todos os nós para configurar
+   - Especificando ImagePullSecrets em um Pod
+     - apenas pods que fornecem chaves próprias podem acessar o registro privado
+   - Extensões locais ou específicas do fornecedor
+     - se estiver usando uma configuração de nó personalizado, você (ou seu provedor de nuvem) pode implementar seu mecanismo para autenticar o nó ao registro do contêiner.
+
+Essas opções são explicadas com mais detalhes abaixo.
+
+### Configurando nós para autenticação em um registro privado
+
+Se você executar o Docker em seus nós, poderá configurar o contêiner do Docker
+runtime para autenticação em um registro de contêiner privado.
+
+Essa abordagem é adequada se você puder controlar a configuração do nó.
+
+{{< note >}}
+O Kubernetes padrão é compatível apenas com as seções `auths` e` HttpHeaders` na configuração do Docker.
+Auxiliares de credencial do Docker (`credHelpers` ou` credsStore`) não são suportados.
+{{< /note >}}
+
+Docker armazena chaves de registros privados no arquivo `$HOME/.dockercfg` ou `$HOME/.docker/config.json`. Se você colocar o mesmo arquivo na lista de caminhos de pesquisa abaixo, o kubelet o usa como provedor de credenciais ao obter imagens.
+
+* `{--root-dir:-/var/lib/kubelet}/config.json`
+* `{cwd of kubelet}/config.json`
+* `${HOME}/.docker/config.json`
+* `/.docker/config.json`
+* `{--root-dir:-/var/lib/kubelet}/.dockercfg`
+* `{cwd of kubelet}/.dockercfg`
+* `${HOME}/.dockercfg`
+* `/.dockercfg`
+
+{{< note >}}
+Você talvez tenha que definir `HOME=/root` explicitamente no ambiente do processo kubelet.
+{{< /note >}}
+
+Aqui estão as etapas recomendadas para configurar seus nós para usar um registro privado. Neste
+exemplo, execute-os em seu desktop/laptop:
+
+  1. Execute `docker login [servidor]` para cada conjunto de credenciais que deseja usar. Isso atualiza o `$HOME/.docker/config.json` em seu PC.
+  1. Visualize `$HOME/.docker/config.json` em um editor para garantir que contém apenas as credenciais que você deseja usar.
+  1. Obtenha uma lista de seus nós; por exemplo:
+      - se você quiser os nomes: `nodes=$( kubectl get nodes -o jsonpath='{range.items[*].metadata}{.name} {end}' )`
+      - se você deseja obter os endereços IP: `nodes=$( kubectl get nodes -o jsonpath='{range .items[*].status.addresses[?(@.type=="ExternalIP")]}{.address} {end}' )`
+  1. Copie seu `.docker/config.json` local para uma das listas de caminhos de busca acima.
+      - por exemplo, para testar isso: `for n in $nodes; do scp ~/.docker/config.json root@"$n":/var/lib/kubelet/config.json; done`
+
+{{< note >}}
+Para clusters de produção, use uma ferramenta de gerenciamento de configuração para que você possa aplicar esta
+configuração para todos os nós onde você precisa.
+{{< /note >}}
+
+Verifique se está funcionando criando um pod que usa uma imagem privada; por exemplo:
+
+```shell
+kubectl apply -f - <<EOF
+apiVersion: v1
+kind: Pod
+metadata:
+  name: private-image-test-1
+spec:
+  containers:
+    - name: uses-private-image
+      image: $PRIVATE_IMAGE_NAME
+      imagePullPolicy: Always
+      command: [ "echo", "SUCCESS" ]
+EOF
+```
+```
+pod/private-image-test-1 created
+```
+
+Se tudo estiver funcionando, então, após algum tempo, você pode executar:
+
+```shell
+kubectl logs private-image-test-1
+```
+e veja o resultado do comando:
+```
+SUCCESS
+```
+
+Se você suspeitar que o comando falhou, você pode executar:
+```shell
+kubectl describe pods/private-image-test-1 | grep 'Failed'
+```
+Em caso de falha, a saída é semelhante a:
+```
+  Fri, 26 Jun 2015 15:36:13 -0700    Fri, 26 Jun 2015 15:39:13 -0700    19    {kubelet node-i2hq}    spec.containers{uses-private-image}    failed        Failed to pull image "user/privaterepo:v1": Error: image user/privaterepo:v1 not found
+```
+
+
+Você deve garantir que todos os nós no cluster tenham o mesmo `.docker/config.json`. Caso contrário, os pods serão executados com sucesso em alguns nós e falharão em outros. Por exemplo, se você usar o escalonamento automático de nós, cada modelo de instância precisa incluir o `.docker/config.json` ou montar um drive que o contenha.
+
+Todos os pods terão premissão de leitura às imagens em qualquer registro privado, uma vez privado
+as chaves de registro são adicionadas ao `.docker/config.json`.
+
+### Imagens pré-obtidas
+
+{{< note >}}
+Essa abordagem é adequada se você puder controlar a configuração do nó. Isto
+não funcionará de forma confiável se o seu provedor de nuvem for responsável pelo gerenciamento de nós e os substituir
+automaticamente.
+{{< /note >}}
+
+Por padrão, o kubelet tenta realizar um "pull" para cada imagem do registro especificado.
+No entanto, se a propriedade `imagePullPolicy` do contêiner for definida como` IfNotPresent` ou `Never`,
+em seguida, uma imagem local é usada (preferencial ou exclusivamente, respectivamente).
+
+Se você quiser usar imagens pré-obtidas como um substituto para a autenticação do registro,
+você deve garantir que todos os nós no cluster tenham as mesmas imagens pré-obtidas.
+
+Isso pode ser usado para pré-carregar certas imagens com o intuíto de aumentar a velocidade ou como uma alternativa para autenticação em um registro privado.
+
+Todos os pods terão permissão de leitura a quaisquer imagens pré-obtidas.
+
+### Especificando imagePullSecrets em um pod
+
+{{< note >}}
+Esta é a abordagem recomendada para executar contêineres com base em imagens
+de registros privados.
+{{< /note >}}
+
+O Kubernetes oferece suporte à especificação de chaves de registro de imagem de contêiner em um pod.
+
+#### Criando um segredo com Docker config
+
+Execute o seguinte comando, substituindo as palavras em maiúsculas com os valores apropriados:
+
+```shell
+kubectl create secret docker-registry <name> --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL
+```
+
+Se você já tem um arquivo de credenciais do Docker, em vez de usar o
+comando acima, você pode importar o arquivo de credenciais como um Kubernetes
+{{< glossary_tooltip text="Secrets" term_id="secret" >}}.
+[Criar um segredo com base nas credenciais Docker existentes](/docs/tasks/configure-pod-container/pull-image-private-registry/#registry-secret-existing-credentials) explica como configurar isso.
+
+Isso é particularmente útil se você estiver usando vários registros privados de contêineres, como `kubectl create secret docker-registry` cria um Segredo que
+só funciona com um único registro privado.
+
+{{< note >}}
+Os pods só podem fazer referência a *pull secrets* de imagem em seu próprio namespace,
+portanto, esse processo precisa ser feito uma vez por namespace.
+{{< /note >}}
+
+#### Referenciando um imagePullSecrets em um pod
+
+Agora, você pode criar pods que fazem referência a esse segredo adicionando uma seção `imagePullSecrets`
+na definição de Pod.
+
+Por exemplo:
+
+```shell
+cat <<EOF > pod.yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: foo
+  namespace: awesomeapps
+spec:
+  containers:
+    - name: foo
+      image: janedoe/awesomeapp:v1
+  imagePullSecrets:
+    - name: myregistrykey
+EOF
+cat <<EOF >> ./kustomization.yaml
+resources:
+- pod.yaml
+EOF
+```
+
+Isso precisa ser feito para cada pod que está usando um registro privado.
+
+No entanto, a configuração deste campo pode ser automatizada definindo o imagePullSecrets
+em um recurso de [ServiceAccount](/docs/tasks/configure-pod-container/configure-service-account/).
+
+Verifique [Adicionar ImagePullSecrets a uma conta de serviço](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account) para obter instruções detalhadas.
+
+Você pode usar isso em conjunto com um `.docker / config.json` por nó. As credenciais
+será mesclado.
+
+## Casos de uso
+
+Existem várias soluções para configurar registros privados. Aqui estão alguns
+casos de uso comuns e soluções sugeridas.
+
+1. Cluster executando apenas imagens não proprietárias (por exemplo, código aberto). Não há necessidade de ocultar imagens.
+    - Use imagens públicas no Docker hub.
+      - Nenhuma configuração necessária.
+      - Alguns provedores de nuvem armazenam em cache ou espelham automaticamente imagens públicas, o que melhora a disponibilidade e reduz o tempo para extrair imagens.
+1. Cluster executando algumas imagens proprietárias que devem ser ocultadas para quem está fora da empresa, mas
+    visível para todos os usuários do cluster.
+    - Use um [registro Docker](https://docs.docker.com/registry/) privado hospedado.
+      - Pode ser hospedado no [Docker Hub](https://hub.docker.com/signup) ou em outro lugar.
+      - Configure manualmente .docker/config.json em cada nó conforme descrito acima.
+    - Ou execute um registro privado interno atrás de seu firewall com permissão de leitura.
+      - Nenhuma configuração do Kubernetes é necessária.
+    - Use um serviço de registro de imagem de contêiner que controla o acesso à imagem
+      - Funcionará melhor com o escalonamento automático do cluster do que com a configuração manual de nós.
+    - Ou, em um cluster onde alterar a configuração do nó é inconveniente, use `imagePullSecrets`.
+1. Cluster com imagens proprietárias, algumas das quais requerem controle de acesso mais rígido.
+    - Certifique-se de [controlador de admissão AlwaysPullImages] (/ docs / reference / access-authn-authz / admission-controllers / # alwayspullimages) está ativo. Caso contrário, todos os pods têm potencialmente acesso a todas as imagens.
+    - Mova dados confidenciais para um recurso "secreto", em vez de empacotá-los em uma imagem.
+1. Um cluster multilocatário em que cada locatário precisa de seu próprio registro privado.
+    - Certifique-se de [controlador de admissão AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) está ativo. Caso contrário, todos os Pods de todos os locatários terão potencialmente acesso a todas as imagens.
+    - Execute um registro privado com autorização necessária.
+    - Gere credenciais de registro para cada locatário, coloque em segredo e preencha o segredo para cada namespace de locatário.
+    - O locatário adiciona esse segredo a imagePullSecrets de cada namespace.
+
+
+Se precisar de acesso a vários registros, você pode criar um segredo para cada registro.
+O Kubelet mesclará qualquer `imagePullSecrets` em um único `.docker/config.json` virtual
+
+## {{% heading "whatsnext" %}}
+
+* Read the [OCI Image Manifest Specification](https://github.com/opencontainers/image-spec/blob/master/manifest.md)
\ No newline at end of file

From eb7cbb2845e9182462e83a71bad35fc59558ca32 Mon Sep 17 00:00:00 2001
From: iamhesir <iamhesir@gmail.com>
Date: Tue, 2 Mar 2021 10:25:46 +0800
Subject: [PATCH 075/788] Remove duplicate version-check

---
 .../zh/docs/tasks/administer-cluster/dns-custom-nameservers.md  | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
index 330416050c..34e519e79d 100644
--- a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
+++ b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
@@ -33,8 +33,6 @@ explains how to use `kubeadm` to migrate from `kube-dns`.
 文档[迁移到 CoreDNS](/zh/docs/tasks/administer-cluster/coredns/#migrating-to-coredns)
 解释了如何使用 `kubeadm` 从 `kube-dns` 迁移到 CoreDNS。
 
-{{% version-check %}}
-
 <!-- steps -->
 
 <!-- 

From 999fb1269b0a18cba13fa7677262e56a07ca20b6 Mon Sep 17 00:00:00 2001
From: Lapi <tyoutugai.7@gmail.com>
Date: Tue, 2 Mar 2021 14:04:38 +0900
Subject: [PATCH 076/788] add php-apache.yaml

---
 .../ja/examples/application/php-apache.yaml   | 36 +++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 content/ja/examples/application/php-apache.yaml

diff --git a/content/ja/examples/application/php-apache.yaml b/content/ja/examples/application/php-apache.yaml
new file mode 100644
index 0000000000..e8e1b5aeb4
--- /dev/null
+++ b/content/ja/examples/application/php-apache.yaml
@@ -0,0 +1,36 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: php-apache
+spec:
+  selector:
+    matchLabels:
+      run: php-apache
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        run: php-apache
+    spec:
+      containers:
+      - name: php-apache
+        image: k8s.gcr.io/hpa-example
+        ports:
+        - containerPort: 80
+        resources:
+          limits:
+            cpu: 500m
+          requests:
+            cpu: 200m
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: php-apache
+  labels:
+    run: php-apache
+spec:
+  ports:
+  - port: 80
+  selector:
+    run: php-apache

From a3986feedd5056efe5d58914346080c15023871d Mon Sep 17 00:00:00 2001
From: Kornel Bicskei <48224080+kornelbicskei@users.noreply.github.com>
Date: Mon, 1 Mar 2021 21:05:35 -0800
Subject: [PATCH 077/788] Update documentation for AWS ELB

Add more details on the mechanics of security group annotations as incorrect use could potentially cause an outage.
---
 .../en/docs/concepts/services-networking/service.md | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index b7a7edcd38..55d156060f 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -906,11 +906,18 @@ There are other annotations to manage Classic Elastic Load Balancers that are de
         # value. Defaults to 5, must be between 2 and 60
 
         service.beta.kubernetes.io/aws-load-balancer-security-groups: "sg-53fae93f"
-        # A list of existing security groups to be added to ELB created. Unlike the annotation
-        # service.beta.kubernetes.io/aws-load-balancer-extra-security-groups, this replaces all other security groups previously assigned to the ELB.
+        # A list of existing security groups to be configured on the ELB created. Unlike the annotation
+        # service.beta.kubernetes.io/aws-load-balancer-extra-security-groups, this replaces all other security groups previously assigned to the ELB and also overrides the creation 
+        # of a uniquely generated security group for this ELB.
+        # The first security group ID on this list is used as a source to permit incoming traffic to target worker nodes (service traffic and health checks).
+        # If multiple ELBs are configured with the same security group ID, only a single permit line will be added to the worker node security groups, that means if you delete any
+        # of those ELBs it will remove the single permit line and block access for all ELBs that shared the same security group ID.
+        # This can cause a cross-service outage if not used properly
 
         service.beta.kubernetes.io/aws-load-balancer-extra-security-groups: "sg-53fae93f,sg-42efd82e"
-        # A list of additional security groups to be added to the ELB
+        #  A list of additional security groups to be added to the created ELB, this leaves the uniquely generated security group in place, this ensures that every ELB
+        # has a unique security group ID and a matching permit line to allow traffic to the target worker nodes (service traffic and health checks).
+        # Security groups defined here can be shared between services. 
 
         service.beta.kubernetes.io/aws-load-balancer-target-node-labels: "ingress-gw,gw-name=public-api"
         # A comma separated list of key-value pairs which are used

From 5de7e33eec816bfc3ea35ae464b2160ebd2c37a9 Mon Sep 17 00:00:00 2001
From: Grzegorz Eliszewski <grzegorz@eliszewski.pl>
Date: Tue, 2 Mar 2021 10:35:27 +0100
Subject: [PATCH 078/788] Add information about Parallel Pod Management

Clarify information that Parallel Pod Management works only during scaling.
---
 .../docs/tutorials/stateful-application/basic-stateful-set.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/stateful-application/basic-stateful-set.md b/content/en/docs/tutorials/stateful-application/basic-stateful-set.md
index b8aaaabb5b..a44c4392ca 100644
--- a/content/en/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/en/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -1083,7 +1083,7 @@ above.
 `Parallel` pod management tells the StatefulSet controller to launch or
 terminate all Pods in parallel, and not to wait for Pods to become Running
 and Ready or completely terminated prior to launching or terminating another
-Pod.
+Pod. This option only affects the behavior for scaling operations. Updates are not affected.
 
 {{< codenew file="application/web/web-parallel.yaml" >}}
 

From 2300a732101af99e171b669d5d8bde07b5c28465 Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Tue, 2 Mar 2021 09:01:39 -0500
Subject: [PATCH 079/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index d2c4223713..922debf381 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -25,7 +25,7 @@ Kubernetes annotations are designed to solve exactly this problem. Oft-overlooke
 Here is an example. Imagine you have a Kubernetes service for quoting, called the quote service. You can do the following:
 
 ```
-$ kubectl annotate service quote a8r.io/owner=”@sally”
+kubectl annotate service quote a8r.io/owner=”@sally”
 ```
 
 In this example, we’ve just added an annotation called `a8r.io/owner` with the value of @sally. Now, we can use `kubectl describe` to get the information.

From 48bd9a6a441db79c63a2080f6af7c50a2f15026e Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Tue, 2 Mar 2021 09:10:11 -0500
Subject: [PATCH 080/788] a few more fixes

---
 .../2021-02-27-annotating-k8s-for-humans.md   | 24 +++++++++----------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index d2c4223713..81b14038e5 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -31,7 +31,6 @@ $ kubectl annotate service quote a8r.io/owner=”@sally”
 In this example, we’ve just added an annotation called `a8r.io/owner` with the value of @sally. Now, we can use `kubectl describe` to get the information.
 
 ```
-$ kubectl describe svc quote
 Name:              quote
 Namespace:         default
 Labels:            <none>
@@ -48,7 +47,7 @@ Events:            <none>
 
 If you’re practicing GitOps (and you should be!) you’ll want to code these values directly into your Kubernetes manifest, e.g.,
 
-```
+```yaml
 apiVersion: v1
 kind: Service
 metadata:
@@ -68,20 +67,21 @@ spec:
 
 Adopting a common convention for annotations ensures consistency and understandability. Typically, you’ll want to attach the annotation to the service object, as services are the high-level resource that maps most clearly to a team’s responsibility. Namespacing your annotations is also very important. Here is one set of conventions, documented at [a8r.io](https://a8r.io), and reproduced below:
 
+{{< table caption="Annotation convention for human-readable services">}}
 | Annotation                                 | Description                                 |
 | ------------------------------------------ | ------------------------------------------- |
 | `a8r.io/description`                       | Unstructured text description of the service for humans.      |
 | `a8r.io/owner`                             | SSO username (GitHub), email address (linked to GitHub account), or unstructured owner description. |
-| `a8r.io/chat`                              | Slack channel, or link to external chat system |
-| `a8r.io/bugs`                              | Link to external bug tracker |
-| `a8r.io/logs`                              | Link to external log viewer |
-| `a8r.io/documentation`                     | Link to external project documentation |
-| `a8r.io/repository`                        | Link to external VCS repository |
-| `a8r.io/support`                           | Link to external support center |
-| `a8r.io/runbook`                           | Link to external project runbook |
-| `a8r.io/incidents`                         | Link to external incident dashboard |
-| `a8r.io/uptime`                            | Link to external uptime dashboard |
-| `a8r.io/performance`                       | Link to external performance dashboard |
+| `a8r.io/chat`                              | Slack channel, or link to external chat system. |
+| `a8r.io/bugs`                              | Link to external bug tracker. |
+| `a8r.io/logs`                              | Link to external log viewer. |
+| `a8r.io/documentation`                     | Link to external project documentation. |
+| `a8r.io/repository`                        | Link to external VCS repository. |
+| `a8r.io/support`                           | Link to external support center. |
+| `a8r.io/runbook`                           | Link to external project runbook. |
+| `a8r.io/incidents`                         | Link to external incident dashboard. |
+| `a8r.io/uptime`                            | Link to external uptime dashboard. |
+| `a8r.io/performance`                       | Link to external performance dashboard. |
 | `a8r.io/dependencies`                      | Unstructured text describing the service dependencies for humans. |
 
 

From 8b397cb7aa5f31f1eca17063e133de52d2616c74 Mon Sep 17 00:00:00 2001
From: HugoPfeffer <hugo.pguima@gmail.com>
Date: Tue, 2 Mar 2021 09:01:32 -0800
Subject: [PATCH 081/788] docs: Fix concepts/containers folder name

---
 content/pt/docs/concepts/{container => containers}/images.md | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/pt/docs/concepts/{container => containers}/images.md (100%)

diff --git a/content/pt/docs/concepts/container/images.md b/content/pt/docs/concepts/containers/images.md
similarity index 100%
rename from content/pt/docs/concepts/container/images.md
rename to content/pt/docs/concepts/containers/images.md

From fa2057b7d736e6ca559415079c25d20bad7fe993 Mon Sep 17 00:00:00 2001
From: colstuwjx <colstuwjx@gmail.com>
Date: Wed, 3 Mar 2021 18:07:08 +0800
Subject: [PATCH 082/788] updating docsy theme submodule

---
 themes/docsy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/themes/docsy b/themes/docsy
index 0f6717470e..a7dc77412c 160000
--- a/themes/docsy
+++ b/themes/docsy
@@ -1 +1 @@
-Subproject commit 0f6717470e74b274e9f554a5ebf2465f2123d6a9
+Subproject commit a7dc77412c533fefc71730927350677fed35f576

From 0d3e8f4a71e4202f68b69937c9427fff2ee54095 Mon Sep 17 00:00:00 2001
From: andyzhangx <xiazhang@microsoft.com>
Date: Wed, 3 Mar 2021 13:32:00 +0000
Subject: [PATCH 083/788] Update Azure file feature gates for 1.21 beta

---
 content/en/docs/concepts/storage/volumes.md                   | 4 ++--
 .../reference/command-line-tools-reference/feature-gates.md   | 3 ++-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 8d84a519c0..d7eb7a1679 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -152,14 +152,14 @@ For more details, see the [`azureFile` volume plugin](https://github.com/kuberne
 
 #### azureFile CSI migration
 
-{{< feature-state for_k8s_version="v1.15" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 The `CSIMigration` feature for `azureFile`, when enabled, redirects all plugin operations
 from the existing in-tree plugin to the `file.csi.azure.com` Container
 Storage Interface (CSI) Driver. In order to use this feature, the [Azure File CSI
 Driver](https://github.com/kubernetes-sigs/azurefile-csi-driver)
 must be installed on the cluster and the `CSIMigration` and `CSIMigrationAzureFile`
-alpha features must be enabled.
+features must be enabled.
 
 ### cephfs
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2e9db5fce0..f49861bd79 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -74,7 +74,8 @@ different Kubernetes components.
 | `CSIMigrationAzureDisk` | `false` | Alpha | 1.15 | 1.18 |
 | `CSIMigrationAzureDisk` | `false` | Beta | 1.19 | |
 | `CSIMigrationAzureDiskComplete` | `false` | Alpha | 1.17 | |
-| `CSIMigrationAzureFile` | `false` | Alpha | 1.15 | |
+| `CSIMigrationAzureFile` | `false` | Alpha | 1.15 | 1.19 |
+| `CSIMigrationAzureFile` | `false` | Beta | 1.21 | |
 | `CSIMigrationAzureFileComplete` | `false` | Alpha | 1.17 | |
 | `CSIMigrationGCE` | `false` | Alpha | 1.14 | 1.16 |
 | `CSIMigrationGCE` | `false` | Beta | 1.17 | |

From 3e7055c27fdcb237111e0272823fcdf5a1ff99f9 Mon Sep 17 00:00:00 2001
From: Bridget Kromhout <bridget@kromhout.org>
Date: Wed, 3 Mar 2021 17:52:58 -0600
Subject: [PATCH 084/788] Docs update for enhancement 563, release 1.21.

Signed-off-by: Bridget Kromhout <bridget@kromhout.org>
---
 .../concepts/services-networking/dual-stack.md | 18 ++++++------------
 1 file changed, 6 insertions(+), 12 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/dual-stack.md b/content/en/docs/concepts/services-networking/dual-stack.md
index 20cbcb5f33..5e7c3a757c 100644
--- a/content/en/docs/concepts/services-networking/dual-stack.md
+++ b/content/en/docs/concepts/services-networking/dual-stack.md
@@ -45,34 +45,30 @@ The following prerequisites are needed in order to utilize IPv4/IPv6 dual-stack
    * Provider support for dual-stack networking (Cloud provider or otherwise must be able to provide Kubernetes nodes with routable IPv4/IPv6 network interfaces)
    * A network plugin that supports dual-stack (such as Kubenet or Calico)
 
-## Enable IPv4/IPv6 dual-stack
+## Configure IPv4/IPv6 dual-stack
 
-To enable IPv4/IPv6 dual-stack, enable the `IPv6DualStack` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for the relevant components of your cluster, and set dual-stack cluster network assignments:
+To configure IPv4/IPv6 dual-stack, set dual-stack cluster network assignments:
 
    * kube-apiserver:
-      * `--feature-gates="IPv6DualStack=true"`
       * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
    * kube-controller-manager:
-      * `--feature-gates="IPv6DualStack=true"`
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
       * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
       * `--node-cidr-mask-size-ipv4|--node-cidr-mask-size-ipv6` defaults to /24 for IPv4 and /64 for IPv6
-   * kubelet:
-      * `--feature-gates="IPv6DualStack=true"`
    * kube-proxy:
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
-      * `--feature-gates="IPv6DualStack=true"`
 
 {{< note >}}
 An example of an IPv4 CIDR: `10.244.0.0/16` (though you would supply your own address range)
 
 An example of an IPv6 CIDR: `fdXY:IJKL:MNOP:15::/64` (this shows the format but is not a valid address - see [RFC 4193](https://tools.ietf.org/html/rfc4193))
 
+Starting in 1.21, IPv4/IPv6 dual-stack defaults to true. Disable if necessary on kube-apiserver, kube-controller-manager, kubelet, and kube-proxy with `--feature-gates="IPv6DualStack=false"`.
 {{< /note >}}
 
 ## Services
 
-If your cluster has dual-stack enabled, you can create {{< glossary_tooltip text="Services" term_id="service" >}} which can use IPv4, IPv6, or both. 
+You can create {{< glossary_tooltip text="Services" term_id="service" >}} which can use IPv4, IPv6, or both.
 
 The address family of a Service defaults to the address family of the first service cluster IP range (configured via the `--service-cluster-ip-range` flag to the kube-apiserver).
 
@@ -81,11 +77,9 @@ set the `.spec.ipFamilyPolicy` field to one of the following values:
 
 * `SingleStack`: Single-stack service. The control plane allocates a cluster IP for the Service, using the first configured service cluster IP range.
 * `PreferDualStack`:
-  * Only used if the cluster has dual-stack enabled. Allocates IPv4 and IPv6 cluster IPs for the Service
-  * If the cluster does not have dual-stack enabled, this setting follows the same behavior as `SingleStack`.
+  * Allocates IPv4 and IPv6 cluster IPs for the Service. (If the cluster has `--feature-gates="IPv6DualStack=false"`, this setting follows the same behavior as `SingleStack`.)
 * `RequireDualStack`: Allocates Service `.spec.ClusterIPs` from both IPv4 and IPv6 address ranges.
   * Selects the `.spec.ClusterIP` from the list of `.spec.ClusterIPs` based on the address family of the first element in the `.spec.ipFamilies` array.
-  * The cluster must have dual-stack networking configured.
 
 If you would like to define which IP family to use for single stack or define the order of IP families for dual-stack, you can choose the address families by setting an optional field, `.spec.ipFamilies`, on the Service. 
 
@@ -126,7 +120,7 @@ These examples demonstrate the behavior of various dual-stack Service configurat
 
 #### Dual-stack defaults on existing Services
 
-These examples demonstrate the default behavior when dual-stack is newly enabled on a cluster where Services already exist.
+These examples demonstrate the default behavior when dual-stack is newly enabled on a cluster where Services already exist. (Upgrading an existing cluster to 1.21 will enable dual-stack unless `--feature-gates="IPv6DualStack=false"` is set.)
 
 1. When dual-stack is enabled on a cluster, existing Services (whether `IPv4` or `IPv6`) are configured by the control plane to set `.spec.ipFamilyPolicy` to `SingleStack` and set `.spec.ipFamilies` to the address family of the existing Service. The existing Service cluster IP will be stored in `.spec.ClusterIPs`.
 

From 5f4d941549f967944792bb6ba5bd8b0200ae5202 Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Mon, 22 Feb 2021 22:42:33 +0900
Subject: [PATCH 085/788] Translate
 setup/production-environment/tools/kubeadm/install-kubeadm.md into Korean

---
 .../tools/kubeadm/install-kubeadm.md          | 321 ++++++++++++++++++
 1 file changed, 321 insertions(+)
 create mode 100644 content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md

diff --git a/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
new file mode 100644
index 0000000000..9e28b5b509
--- /dev/null
+++ b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -0,0 +1,321 @@
+---
+title: kubeadm 설치하기
+content_type: task
+weight: 10
+card:
+  name: setup
+  weight: 20
+  title: kubeadm 설정 도구 설치
+---
+
+<!-- overview -->
+
+<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">이 페이지에서는 `kubeadm` 툴박스를 설치하는 방법을 보여준다.
+이 설치 프로세스를 수행한 후 kubeadm으로 클러스터를 만드는 방법에 대한 자세한 내용은 [kubeadm을 사용하여 클러스터 생성하기](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/) 페이지를 참고한다.
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+* 다음 중 하나를 실행하는 하나 이상의 머신이 필요하다.
+  - Ubuntu 16.04+
+  - Debian 9+
+  - CentOS 7+
+  - Red Hat Enterprise Linux (RHEL) 7+
+  - Fedora 25+
+  - HypriotOS v1.0.1+
+  - Flatcar Container Linux (2512.3.0으로 테스트됨)
+* 2 GB 이상의 램을 장착한 머신. (이 보다 작으면 사용자의 앱을 위한 공간이 거의 남지 않음)
+* 2 이상의 CPU.
+* 클러스터의 모든 머신에 걸친 전체 네트워크 연결. (공용 또는 사설 네트워크면 괜찮음)
+* 모든 노드에 대해 고유한 호스트 이름, MAC 주소 및 product_uuid. 자세한 내용은 [여기](#verify-mac-address)를 참고한다.
+* 컴퓨터의 특정 포트들 개방. 자세한 내용은 [여기](#check-required-ports)를 참고한다.
+* 스왑의 비활성화. kubelet이 제대로 작동하게 하려면 **반드시** 스왑을 사용하지 않도록 설정한다.
+
+
+
+<!-- steps -->
+
+## MAC 주소 및 product_uuid가 모든 노드에 대해 고유한지 확인 {#verify-mac-address}
+* 사용자는 `ip link` 또는 `ifconfig -a` 명령을 사용하여 네트워크 인터페이스의 MAC 주소를 확인할 수 있다.
+* product_uuid는 `sudo cat /sys/class/dmi/id/product_uuid` 명령을 사용하여 확인할 수 있다.
+
+일부 가상 머신은 동일한 값을 가질 수 있지만 하드웨어 장치는 고유한 주소를 가질
+가능성이 높다. 쿠버네티스는 이러한 값을 사용하여 클러스터의 노드를 고유하게 식별한다.
+이러한 값이 각 노드에 고유하지 않으면 설치 프로세스가
+[실패](https://github.com/kubernetes/kubeadm/issues/31)할 수 있다.  
+
+## 네트워크 어댑터 확인
+
+네트워크 어댑터가 두 개 이상이고, 쿠버네티스 컴포넌트가 디폴트 라우트(default route)에서 도달할 수 없는
+경우, 쿠버네티스 클러스터 주소가 적절한 어댑터를 통해 이동하도록 IP 경로를 추가하는 것이 좋다.
+
+## iptables가 브리지된 트래픽을 보게 하기
+
+`br_netfilter` 모듈이 로드되었는지 확인한다. `lsmod | grep br_netfilter` 를 실행하면 된다. 명시적으로 로드하려면 `sudo modprobe br_netfilter` 를 실행한다.
+
+리눅스 노드의 iptables가 브리지된 트래픽을 올바르게 보기 위한 요구 사항으로, `sysctl` 구성에서 `net.bridge.bridge-nf-call-iptables` 가 1로 설정되어 있는지 확인해야 한다. 다음은 예시이다.
+
+```bash
+cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
+br_netfilter
+EOF
+
+cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
+net.bridge.bridge-nf-call-ip6tables = 1
+net.bridge.bridge-nf-call-iptables = 1
+EOF
+sudo sysctl --system
+```
+
+자세한 내용은 [네트워크 플러그인 요구 사항](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#네트워크-플러그인-요구-사항) 페이지를 참고한다.
+
+## 필수 포트 확인 {#check-required-ports}
+
+### 컨트롤 플레인 노드
+
+| 프로토콜   | 방향       | 포트 범위    | 목적                      | 사용자                     |
+|----------|-----------|------------|-------------------------|---------------------------|
+| TCP      | 인바운드    | 6443*      | 쿠버네티스 API 서버         | 모두                       |
+| TCP      | 인바운드    | 2379-2380  | etcd 서버 클라이언트 API    | kube-apiserver, etcd      |
+| TCP      | 인바운드    | 10250      | kubelet API             | 자체, 컨트롤 플레인          |
+| TCP      | 인바운드    | 10251      | kube-scheduler          | 자체                      |
+| TCP      | 인바운드    | 10252      | kube-controller-manager | 자체                      |
+
+### 워커 노드
+
+| 프로토콜   | 방향       | 포트 범위      | 목적                   | 사용자                   |
+|----------|-----------|-------------|-----------------------|-------------------------|
+| TCP      | 인바운드    | 10250       | kubelet API           | 자체, 컨트롤 플레인        |
+| TCP      | 인바운드    | 30000-32767 | NodePort 서비스†        | 모두                     |
+
+† [NodePort 서비스](/ko/docs/concepts/services-networking/service/)의 기본 포트 범위.
+
+*로 표시된 모든 포트 번호는 재정의할 수 있으므로, 사용자 지정 포트도
+열려 있는지 확인해야 한다.
+
+etcd 포트가 컨트롤 플레인 노드에 포함되어 있지만, 외부 또는 사용자 지정 포트에서
+자체 etcd 클러스터를 호스팅할 수도 있다.
+
+사용자가 사용하는 파드 네트워크 플러그인(아래 참조)은 특정 포트를 열어야 할 수도
+있다. 이것은 각 파드 네트워크 플러그인마다 다르므로, 필요한 포트에 대한
+플러그인 문서를 참고한다.
+
+## 런타임 설치 {#installing-runtime}
+
+파드에서 컨테이너를 실행하기 위해, 쿠버네티스는
+{{< glossary_tooltip term_id="container-runtime" text="컨테이너 런타임" >}}을 사용한다.
+
+{{< tabs name="container_runtime" >}}
+{{% tab name="리눅스 노드" %}}
+
+기본적으로, 쿠버네티스는
+{{< glossary_tooltip term_id="cri" text="컨테이너 런타임 인터페이스">}}(CRI)를
+사용하여 사용자가 선택한 컨테이너 런타임과 인터페이스한다.
+
+런타임을 지정하지 않으면, kubeadm은 잘 알려진 유닉스 도메인 소켓 목록을 검색하여
+설치된 컨테이너 런타임을 자동으로 감지하려고 한다.
+다음 표에는 컨테이너 런타임 및 관련 소켓 경로가 나열되어 있다.
+
+{{< table caption = "컨테이너 런타임과 소켓 경로" >}}
+| 런타임       | 유닉스 도메인 소켓 경로                |
+|------------|-----------------------------------|
+| 도커        | `/var/run/docker.sock`            |
+| containerd | `/run/containerd/containerd.sock` |
+| CRI-O      | `/var/run/crio/crio.sock`         |
+{{< /table >}}
+
+<br />
+도커와 containerd가 모두 감지되면 도커가 우선시된다. 이것이 필요한 이유는 도커 18.09에서
+도커만 설치한 경우에도 containerd와 함께 제공되므로 둘 다 감지될 수 있기
+때문이다.
+다른 두 개 이상의 런타임이 감지되면, kubeadm은 오류와 함께 종료된다.
+
+kubelet은 빌트인 `dockershim` CRI 구현을 통해 도커와 통합된다.
+
+자세한 내용은 [컨테이너 런타임](/ko/docs/setup/production-environment/container-runtimes/)을
+참고한다.
+{{% /tab %}}
+{{% tab name="다른 운영 체제" %}}
+기본적으로, kubeadm은 컨테이너 런타임으로 {{< glossary_tooltip term_id="docker" >}}를 사용한다.
+kubelet은 빌트인 `dockershim` CRI 구현을 통해 도커와 통합된다.
+
+자세한 내용은 [컨테이너 런타임](/ko/docs/setup/production-environment/container-runtimes/)을
+참고한다.
+{{% /tab %}}
+{{< /tabs >}}
+
+
+## kubeadm, kubelet 및 kubectl 설치
+
+모든 머신에 다음 패키지들을 설치한다.
+
+* `kubeadm`: 클러스터를 부트스트랩하는 명령이다.
+
+* `kubelet`: 클러스터의 모든 머신에서 실행되는 파드와 컨테이너 시작과
+    같은 작업을 수행하는 컴포넌트이다.
+
+* `kubectl`: 클러스터와 통신하기 위한 커맨드 라인 유틸리티이다.
+
+kubeadm은 `kubelet` 또는 `kubectl` 을 설치하거나 관리하지 **않으므로**, kubeadm이
+설치하려는 쿠버네티스 컨트롤 플레인의 버전과 일치하는지
+확인해야 한다. 그렇지 않으면, 예상치 못한 버그 동작으로 이어질 수 있는
+버전 차이(skew)가 발생할 위험이 있다. 그러나, kubelet과 컨트롤 플레인 사이에 _하나의_
+마이너 버전 차이가 지원되지만, kubelet 버전은 API 서버 버전 보다
+높을 수 없다. 예를 들어, 1.7.0 버전의 kubelet은 1.8.0 API 서버와 완전히 호환되어야 하지만,
+그 반대의 경우는 아니다.
+
+`kubectl` 설치에 대한 정보는 [kubectl 설치 및 설정](/ko/docs/tasks/tools/install-kubectl/)을 참고한다.
+
+{{< warning >}}
+이 지침은 모든 시스템 업그레이드에서 모든 쿠버네티스 패키지를 제외한다.
+이는 kubeadm 및 쿠버네티스를
+[업그레이드 하는 데 특별한 주의](/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)가 필요하기 때문이다.
+{{</ warning >}}
+
+버전 차이에 대한 자세한 내용은 다음을 참고한다.
+
+* 쿠버네티스 [버전 및 버전-차이 정책](/docs/setup/release/version-skew-policy/)
+* Kubeadm 관련 [버전 차이 정책](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#version-skew-policy)
+
+{{< tabs name="k8s_install" >}}
+{{% tab name="Ubuntu, Debian 또는 HypriotOS" %}}
+```bash
+sudo apt-get update && sudo apt-get install -y apt-transport-https curl
+curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
+cat <<EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list
+deb https://apt.kubernetes.io/ kubernetes-xenial main
+EOF
+sudo apt-get update
+sudo apt-get install -y kubelet kubeadm kubectl
+sudo apt-mark hold kubelet kubeadm kubectl
+```
+{{% /tab %}}
+{{% tab name="CentOS, RHEL 또는 Fedora" %}}
+```bash
+cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
+[kubernetes]
+name=Kubernetes
+baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-\$basearch
+enabled=1
+gpgcheck=1
+repo_gpgcheck=1
+gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
+exclude=kubelet kubeadm kubectl
+EOF
+
+# permissive 모드로 SELinux 설정(효과적으로 비활성화)
+sudo setenforce 0
+sudo sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
+
+sudo yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
+
+sudo systemctl enable --now kubelet
+```
+
+  **참고:**
+
+  - `setenforce 0` 및 `sed ...` 를 실행하여 permissive 모드로 SELinux를 설정하면 효과적으로 비활성화된다.
+    컨테이너가 호스트 파일시스템(예를 들어, 파드 네트워크에 필요한)에 접근하도록 허용하는 데 필요하다.
+    kubelet에서 SELinux 지원이 개선될 때까지 이 작업을 수행해야 한다.
+
+  - 구성 방법을 알고 있는 경우 SELinux를 활성화된 상태로 둘 수 있지만 kubeadm에서 지원하지 않는 설정이 필요할 수 있다.
+
+{{% /tab %}}
+{{% tab name="Fedora CoreOS 또는 Flatcar Container Linux" %}}
+CNI 플러그인 설치(대부분의 파드 네트워크에 필요)
+
+```bash
+CNI_VERSION="v0.8.2"
+sudo mkdir -p /opt/cni/bin
+curl -L "https://github.com/containernetworking/plugins/releases/download/${CNI_VERSION}/cni-plugins-linux-amd64-${CNI_VERSION}.tgz" | sudo tar -C /opt/cni/bin -xz
+```
+
+명령어 파일을 다운로드할 디렉터리 정의
+
+{{< note >}}
+`DOWNLOAD_DIR` 변수는 쓰기 가능한 디렉터리로 설정되어야 한다.
+Flatcar Container Linux를 실행 중인 경우, `DOWNLOAD_DIR=/opt/bin` 을 설정한다.
+{{< /note >}}
+
+```bash
+DOWNLOAD_DIR=/usr/local/bin
+sudo mkdir -p $DOWNLOAD_DIR
+```
+
+crictl 설치(kubeadm / Kubelet 컨테이너 런타임 인터페이스(CRI)에 필요)
+
+```bash
+CRICTL_VERSION="v1.17.0"
+curl -L "https://github.com/kubernetes-sigs/cri-tools/releases/download/${CRICTL_VERSION}/crictl-${CRICTL_VERSION}-linux-amd64.tar.gz" | sudo tar -C $DOWNLOAD_DIR -xz
+```
+
+`kubeadm`, `kubelet`, `kubectl` 설치 및 `kubelet` systemd 서비스 추가
+
+```bash
+RELEASE="$(curl -sSL https://dl.k8s.io/release/stable.txt)"
+cd $DOWNLOAD_DIR
+sudo curl -L --remote-name-all https://storage.googleapis.com/kubernetes-release/release/${RELEASE}/bin/linux/amd64/{kubeadm,kubelet,kubectl}
+sudo chmod +x {kubeadm,kubelet,kubectl}
+
+RELEASE_VERSION="v0.4.0"
+curl -sSL "https://raw.githubusercontent.com/kubernetes/release/${RELEASE_VERSION}/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service" | sed "s:/usr/bin:${DOWNLOAD_DIR}:g" | sudo tee /etc/systemd/system/kubelet.service
+sudo mkdir -p /etc/systemd/system/kubelet.service.d
+curl -sSL "https://raw.githubusercontent.com/kubernetes/release/${RELEASE_VERSION}/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf" | sed "s:/usr/bin:${DOWNLOAD_DIR}:g" | sudo tee /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
+```
+
+`kubelet` 활성화 및 시작
+
+```bash
+systemctl enable --now kubelet
+```
+
+{{< note >}}
+Flatcar Container Linux 배포판은 `/usr` 디렉터리를 읽기 전용 파일시스템으로 마운트한다.
+클러스터를 부트스트랩하기 전에, 쓰기 가능한 디렉터리를 구성하기 위한 추가 단계를 수행해야 한다.
+쓰기 가능한 디렉터리를 설정하는 방법을 알아 보려면 [Kubeadm 문제 해결 가이드](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/#usr-mounted-read-only/)를 참고한다.
+{{< /note >}}
+{{% /tab %}}
+{{< /tabs >}}
+
+
+kubelet은 이제 kubeadm이 수행할 작업을 알려 줄 때까지 크래시루프(crashloop) 상태로
+기다려야 하므로 몇 초마다 다시 시작된다.
+
+## 컨트롤 플레인 노드에서 kubelet이 사용하는 cgroup 드라이버 구성
+
+도커를 사용할 때, kubeadm은 kubelet 용 cgroup 드라이버를 자동으로 감지하여
+런타임 중에 `/var/lib/kubelet/config.yaml` 파일에 설정한다.
+
+다른 CRI를 사용하는 경우, 다음과 같이 `cgroupDriver` 값을 `kubeadm init` 에 전달해야 한다.
+
+```yaml
+apiVersion: kubelet.config.k8s.io/v1beta1
+kind: KubeletConfiguration
+cgroupDriver: <value>
+```
+
+자세한 내용은 [구성 파일과 함께 kubeadm init 사용](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)을 참고한다.
+
+`cgroupfs` 가 이미 kubelet의 기본값이기 때문에, 사용자의
+CRI cgroup 드라이버가 `cgroupfs` 가 아닌 **경우에만** 위와 같이 설정해야 한다.
+
+{{< note >}}
+`--cgroup-driver` 플래그가 kubelet에 의해 사용 중단되었으므로, `/var/lib/kubelet/kubeadm-flags.env`
+또는 `/etc/default/kubelet`(RPM에 대해서는 `/etc/sysconfig/kubelet`)에 있는 경우, 그것을 제거하고 대신 KubeletConfiguration을
+사용한다(기본적으로 `/var/lib/kubelet/config.yaml` 에 저장됨).
+{{< /note >}}
+
+CRI-O 및 containerd와 같은 다른 컨테이너 런타임에 대한 cgroup 드라이버의
+자동 감지에 대한 작업이 진행 중이다.
+
+
+## 문제 해결
+
+kubeadm에 문제가 있는 경우, [문제 해결 문서](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/)를 참고한다.
+
+## {{% heading "whatsnext" %}}
+
+
+* [kubeadm을 사용하여 클러스터 생성](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)

From d8aa7224dda564c41ef3a758f76ff7d681af6626 Mon Sep 17 00:00:00 2001
From: Bridget Kromhout <bridget@kromhout.org>
Date: Wed, 3 Mar 2021 21:14:07 -0600
Subject: [PATCH 086/788] Update
 content/en/docs/concepts/services-networking/dual-stack.md

Clarifying how to disable the dual-stack feature when necessary.

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 content/en/docs/concepts/services-networking/dual-stack.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/dual-stack.md b/content/en/docs/concepts/services-networking/dual-stack.md
index 5e7c3a757c..86abdf7c1d 100644
--- a/content/en/docs/concepts/services-networking/dual-stack.md
+++ b/content/en/docs/concepts/services-networking/dual-stack.md
@@ -63,7 +63,9 @@ An example of an IPv4 CIDR: `10.244.0.0/16` (though you would supply your own ad
 
 An example of an IPv6 CIDR: `fdXY:IJKL:MNOP:15::/64` (this shows the format but is not a valid address - see [RFC 4193](https://tools.ietf.org/html/rfc4193))
 
-Starting in 1.21, IPv4/IPv6 dual-stack defaults to true. Disable if necessary on kube-apiserver, kube-controller-manager, kubelet, and kube-proxy with `--feature-gates="IPv6DualStack=false"`.
+Starting in 1.21, IPv4/IPv6 dual-stack defaults to true.
+You can disable it when necessary by specifying `--feature-gates="IPv6DualStack=false"`
+on the kube-apiserver, kube-controller-manager, kubelet, and kube-proxy command line.
 {{< /note >}}
 
 ## Services

From 31777fa6b5d5a7def51707e29ae7874a5242bf59 Mon Sep 17 00:00:00 2001
From: Bridget Kromhout <bridget@kromhout.org>
Date: Wed, 3 Mar 2021 21:28:15 -0600
Subject: [PATCH 087/788] Update to indicate dual-stack move to beta in 1.21

Signed-off-by: Bridget Kromhout <bridget@kromhout.org>
---
 content/en/docs/concepts/services-networking/dual-stack.md      | 2 +-
 .../reference/command-line-tools-reference/feature-gates.md     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/dual-stack.md b/content/en/docs/concepts/services-networking/dual-stack.md
index 86abdf7c1d..9bdc756b35 100644
--- a/content/en/docs/concepts/services-networking/dual-stack.md
+++ b/content/en/docs/concepts/services-networking/dual-stack.md
@@ -16,7 +16,7 @@ weight: 70
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.16" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
  IPv4/IPv6 dual-stack enables the allocation of both IPv4 and IPv6 addresses to {{< glossary_tooltip text="Pods" term_id="pod" >}} and {{< glossary_tooltip text="Services" term_id="service" >}}.
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2e9db5fce0..835fb58d76 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -123,7 +123,7 @@ different Kubernetes components.
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | Beta | 1.19 | |
-| `IPv6DualStack` | `false` | Alpha | 1.15 | |
+| `IPv6DualStack` | `true` | Beta | 1.21 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
 | `KubeletPodResources` | `true` | Alpha | 1.13 | 1.14 |
 | `KubeletPodResources` | `true` | Beta | 1.15 | |

From 3ff51d4843607908c6c35ba2bf7268e990953e89 Mon Sep 17 00:00:00 2001
From: Neha Viswanathan <itsnehavis@gmail.com>
Date: Sat, 27 Feb 2021 19:22:17 -0800
Subject: [PATCH 088/788] Update Helm charts repo to ArtifactHub

---
 .../run-application/run-replicated-stateful-application.md      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/run-application/run-replicated-stateful-application.md b/content/en/docs/tasks/run-application/run-replicated-stateful-application.md
index 36e5334f3d..a9b34e691b 100644
--- a/content/en/docs/tasks/run-application/run-replicated-stateful-application.md
+++ b/content/en/docs/tasks/run-application/run-replicated-stateful-application.md
@@ -534,7 +534,7 @@ kubectl delete pvc data-mysql-4
 * Learn more about [debugging a StatefulSet](/docs/tasks/debug-application-cluster/debug-stateful-set/).
 * Learn more about [deleting a StatefulSet](/docs/tasks/run-application/delete-stateful-set/).
 * Learn more about [force deleting StatefulSet Pods](/docs/tasks/run-application/force-delete-stateful-set-pod/).
-* Look in the [Helm Charts repository](https://github.com/kubernetes/charts)
+* Look in the [Helm Charts repository](https://artifacthub.io/)
   for other stateful application examples.
 
 

From 9cc8d0d3298ea6bb9679e611389639843e63f76e Mon Sep 17 00:00:00 2001
From: seokho-son <shsongist@gmail.com>
Date: Wed, 24 Feb 2021 13:35:40 +0900
Subject: [PATCH 089/788] Update outdated files in dev-1.20-ko.5 (1)

---
 content/ko/community/_index.html              |  23 ++-
 .../docs/concepts/architecture/controller.md  |   2 +-
 .../ko/docs/concepts/architecture/nodes.md    |   2 +-
 .../concepts/cluster-administration/_index.md |   4 +-
 .../cluster-administration/logging.md         | 137 +++++++++---------
 .../manage-deployment.md                      |  27 ++--
 .../docs/concepts/configuration/overview.md   |   4 +-
 .../ko/docs/concepts/configuration/secret.md  |  20 +--
 .../containers/container-lifecycle-hooks.md   |  30 ++--
 .../api-extension/custom-resources.md         |   5 +-
 .../compute-storage-net/network-plugins.md    |   6 +-
 .../extend-kubernetes/service-catalog.md      |   9 +-
 .../concepts/overview/what-is-kubernetes.md   |   5 +-
 .../overview/working-with-objects/labels.md   |  17 ++-
 .../working-with-objects/object-management.md |   6 +-
 .../docs/concepts/policy/resource-quotas.md   |  29 +++-
 .../scheduling-eviction/assign-pod-node.md    |   2 +-
 .../scheduler-perf-tuning.md                  |   2 +
 .../policy/priority-class-resourcequota.yaml  |  10 ++
 19 files changed, 199 insertions(+), 141 deletions(-)
 create mode 100644 content/ko/examples/policy/priority-class-resourcequota.yaml

diff --git a/content/ko/community/_index.html b/content/ko/community/_index.html
index 39d17396ff..40bea7b523 100644
--- a/content/ko/community/_index.html
+++ b/content/ko/community/_index.html
@@ -19,6 +19,7 @@ cid: community
 
 <div class="community__navbar">
 
+<a href="#values">커뮤니티 가치</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 <a href="#conduct">행동 강령 </a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 <a href="#videos">비디오</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 <a href="#discuss">토론</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
@@ -41,10 +42,28 @@ cid: community
     <img src="/images/community/kubernetes-community-final-05.jpg" alt="쿠버네티스 컨퍼런스 갤러리" style="width:100%;margin-right:0% important" class="desktop">
   </div>
   <img src="/images/community/kubernetes-community-04-mobile.jpg" alt="쿠버네티스 컨퍼런스 갤러리" style="width:100%;margin-bottom:3%" class="mobile">
-
-<a name="conduct"></a>
+<a name="values"></a>
 </div>
 
+<div><a name="values"></a></div>
+<div class="conduct">
+<div class="conducttext">
+<br class="mobile"><br class="mobile">
+<br class="tablet"><br class="tablet">
+<div class="conducttextnobutton" style="margin-bottom:2%"><h1>커뮤니티 가치</h1>
+쿠버네티스 커뮤니티가 추구하는 가치는 프로젝트의 지속적인 성공의 핵심입니다.<br>
+이러한 원칙은 쿠버네티스 프로젝트의 모든 측면을 이끌어 갑니다.
+<br>
+<a href="/community/values/">
+<br class="mobile"><br class="mobile">
+<span class="fullbutton">
+  더 읽어 보기
+  </span>
+  </a>
+  </div><a name="conduct"></a>
+  </div>
+  </div>
+
 
 
 <div class="conduct">
diff --git a/content/ko/docs/concepts/architecture/controller.md b/content/ko/docs/concepts/architecture/controller.md
index 784ad2ac58..29926d1435 100644
--- a/content/ko/docs/concepts/architecture/controller.md
+++ b/content/ko/docs/concepts/architecture/controller.md
@@ -102,7 +102,7 @@ weight: 30
 온도 조절기 예에서 방이 매우 추우면 다른 컨트롤러가
 서리 방지 히터를 켤 수도 있다. 쿠버네티스 클러스터에서는
 [쿠버네티스 확장](/ko/docs/concepts/extend-kubernetes/)을 통해
-IP 주소 관리 도구, 스토리지 서비스, 클라우드 제공자 APIS 및
+IP 주소 관리 도구, 스토리지 서비스, 클라우드 제공자의 API들 및
 기타 서비스 등과 간접적으로 연동하여 이를 구현한다.
 
 ## 의도한 상태와 현재 상태 {#desired-vs-current}
diff --git a/content/ko/docs/concepts/architecture/nodes.md b/content/ko/docs/concepts/architecture/nodes.md
index c951d60ca8..2bcdd9faaf 100644
--- a/content/ko/docs/concepts/architecture/nodes.md
+++ b/content/ko/docs/concepts/architecture/nodes.md
@@ -10,7 +10,7 @@ weight: 10
 노드는 클러스터에 따라 가상 또는 물리적 머신일 수 있다. 각 노드는
 {{< glossary_tooltip text="컨트롤 플레인" term_id="control-plane" >}}에 의해 관리되며
 {{< glossary_tooltip text="파드" term_id="pod" >}}를
-실행하는데 필요한 서비스를 포함한다.
+실행하는 데 필요한 서비스를 포함한다.
 
 일반적으로 클러스터에는 여러 개의 노드가 있으며, 학습 또는 리소스가 제한되는
 환경에서는 하나만 있을 수도 있다.
diff --git a/content/ko/docs/concepts/cluster-administration/_index.md b/content/ko/docs/concepts/cluster-administration/_index.md
index 1442a5da01..3ec34e9eac 100755
--- a/content/ko/docs/concepts/cluster-administration/_index.md
+++ b/content/ko/docs/concepts/cluster-administration/_index.md
@@ -22,12 +22,12 @@ no_list: true
 
 가이드를 선택하기 전에 고려해야 할 사항은 다음과 같다.
 
- - 컴퓨터에서 쿠버네티스를 그냥 한번 사용해보고 싶은가? 아니면, 고가용 멀티 노드 클러스터를 만들고 싶은가? 사용자의 필요에 따라 가장 적합한 배포판을 선택한다.
+ - 컴퓨터에서 쿠버네티스를 한번 사용해보고 싶은가? 아니면, 고가용 멀티 노드 클러스터를 만들고 싶은가? 사용자의 필요에 따라 가장 적합한 배포판을 선택한다.
  - [구글 쿠버네티스 엔진(Google Kubernetes Engine)](https://cloud.google.com/kubernetes-engine/)과 같은 클라우드 제공자의 **쿠버네티스 클러스터 호스팅** 을 사용할 것인가? 아니면, **자체 클러스터를 호스팅** 할 것인가?
  - 클러스터가 **온-프레미스 환경** 에 있나? 아니면, **클라우드(IaaS)** 에 있나? 쿠버네티스는 하이브리드 클러스터를 직접 지원하지는 않는다. 대신 여러 클러스터를 설정할 수 있다.
  - **온-프레미스 환경에 쿠버네티스** 를 구성하는 경우, 어떤 [네트워킹 모델](/ko/docs/concepts/cluster-administration/networking/)이 가장 적합한 지 고려한다.
  - 쿠버네티스를 **"베어 메탈" 하드웨어** 에서 실행할 것인가? 아니면, **가상 머신(VM)** 에서 실행할 것인가?
- - **단지 클러스터만 실행할 것인가?** 아니면, **쿠버네티스 프로젝트 코드를 적극적으로 개발** 하는 것을 기대하는가? 만약
+ - **클러스터만 실행할 것인가?** 아니면, **쿠버네티스 프로젝트 코드를 적극적으로 개발** 하는 것을 기대하는가? 만약
    후자라면, 활발하게 개발이 진행되고 있는 배포판을 선택한다. 일부 배포판은 바이너리 릴리스만 사용하지만,
    더 다양한 선택을 제공한다.
  - 클러스터를 실행하는 데 필요한 [컴포넌트](/ko/docs/concepts/overview/components/)에 익숙해지자.
diff --git a/content/ko/docs/concepts/cluster-administration/logging.md b/content/ko/docs/concepts/cluster-administration/logging.md
index 48044b0460..695c747a5d 100644
--- a/content/ko/docs/concepts/cluster-administration/logging.md
+++ b/content/ko/docs/concepts/cluster-administration/logging.md
@@ -1,4 +1,7 @@
 ---
+
+
+
 title: 로깅 아키텍처
 content_type: concept
 weight: 60
@@ -6,23 +9,22 @@ weight: 60
 
 <!-- overview -->
 
-애플리케이션 로그는 애플리케이션 내부에서 발생하는 상황을 이해하는 데 도움이 된다. 로그는 문제를 디버깅하고 클러스터 활동을 모니터링하는 데 특히 유용하다. 대부분의 최신 애플리케이션에는 일종의 로깅 메커니즘이 있다. 따라서, 대부분의 컨테이너 엔진은 일종의 로깅을 지원하도록 설계되었다. 컨테이너화된 애플리케이션에 가장 쉽고 가장 널리 사용되는 로깅 방법은 표준 출력과 표준 에러 스트림에 작성하는 것이다.
+애플리케이션 로그는 애플리케이션 내부에서 발생하는 상황을 이해하는 데 도움이 된다. 로그는 문제를 디버깅하고 클러스터 활동을 모니터링하는 데 특히 유용하다. 대부분의 최신 애플리케이션에는 일종의 로깅 메커니즘이 있다. 마찬가지로, 컨테이너 엔진들도 로깅을 지원하도록 설계되었다. 컨테이너화된 애플리케이션에 가장 쉽고 가장 널리 사용되는 로깅 방법은 표준 출력과 표준 에러 스트림에 작성하는 것이다.
 
-그러나, 일반적으로 컨테이너 엔진이나 런타임에서 제공하는 기본 기능은 완전한 로깅 솔루션으로 충분하지 않다. 예를 들어, 컨테이너가 크래시되거나, 파드가 축출되거나, 노드가 종료된 경우에도 여전히 애플리케이션의 로그에 접근하려고 한다. 따라서, 로그는 노드, 파드 또는 컨테이너와는 독립적으로 별도의 스토리지와 라이프사이클을 가져야 한다. 이 개념을 _클러스터-레벨-로깅_ 이라고 한다. 클러스터-레벨 로깅은 로그를 저장하고, 분석하고, 쿼리하기 위해 별도의 백엔드가 필요하다. 쿠버네티스는 로그 데이터를 위한 네이티브 스토리지 솔루션을 제공하지 않지만, 기존의 많은 로깅 솔루션을 쿠버네티스 클러스터에 통합할 수 있다.
+그러나, 일반적으로 컨테이너 엔진이나 런타임에서 제공하는 기본 기능은 완전한 로깅 솔루션으로 충분하지 않다.
+예를 들어, 컨테이너가 크래시되거나, 파드가 축출되거나, 노드가 종료된 경우에도 애플리케이션의 로그에 접근하고 싶을 것이다.
+클러스터에서 로그는 노드, 파드 또는 컨테이너와는 독립적으로 별도의 스토리지와 라이프사이클을 가져야 한다. 이 개념을 _클러스터-레벨-로깅_ 이라고 한다.  
 
 <!-- body -->
 
-클러스터-레벨 로깅 아키텍처는 로깅 백엔드가
-클러스터 내부 또는 외부에 존재한다고 가정하여 설명한다. 클러스터-레벨
-로깅에 관심이 없는 경우에도, 노드에서 로그를 저장하고
-처리하는 방법에 대한 설명이 여전히 유용할 수 있다.
+클러스터-레벨 로깅은 로그를 저장하고, 분석하고, 쿼리하기 위해 별도의 백엔드가 필요하다. 쿠버네티스는
+로그 데이터를 위한 네이티브 스토리지 솔루션을 제공하지 않지만,
+쿠버네티스에 통합될 수 있는 기존의 로깅 솔루션이 많이 있다.
 
 ## 쿠버네티스의 기본 로깅
 
-이 섹션에서는, 쿠버네티스에서 표준 출력 스트림으로 데이터를
-출력하는 기본 로깅의 예시를 볼 수 있다. 이 데모에서는
-일부 텍스트를 초당 한 번씩 표준 출력에 쓰는 컨테이너와 함께
-파드 명세를 사용한다.
+이 예시는 텍스트를 초당 한 번씩 표준 출력에 쓰는
+컨테이너에 대한 `Pod` 명세를 사용한다.
 
 {{< codenew file="debug/counter-pod.yaml" >}}
 
@@ -31,8 +33,10 @@ weight: 60
 ```shell
 kubectl apply -f https://k8s.io/examples/debug/counter-pod.yaml
 ```
+
 출력은 다음과 같다.
-```
+
+```console
 pod/counter created
 ```
 
@@ -41,69 +45,69 @@ pod/counter created
 ```shell
 kubectl logs counter
 ```
+
 출력은 다음과 같다.
-```
+
+```console
 0: Mon Jan  1 00:00:00 UTC 2001
 1: Mon Jan  1 00:00:01 UTC 2001
 2: Mon Jan  1 00:00:02 UTC 2001
 ...
 ```
 
-컨테이너가 크래시된 경우, `kubectl logs` 의 `--previous` 플래그를 사용해서 컨테이너의 이전 인스턴스에 대한 로그를 검색할 수 있다. 파드에 여러 컨테이너가 있는 경우, 명령에 컨테이너 이름을 추가하여 접근하려는 컨테이너 로그를 지정해야 한다. 자세한 내용은 [`kubectl logs` 문서](/docs/reference/generated/kubectl/kubectl-commands#logs)를 참조한다.
+`kubectl logs --previous` 를 사용해서 컨테이너의 이전 인스턴스에 대한 로그를 검색할 수 있다. 파드에 여러 컨테이너가 있는 경우, 명령에 컨테이너 이름을 추가하여 접근하려는 컨테이너 로그를 지정해야 한다. 자세한 내용은 [`kubectl logs` 문서](/docs/reference/generated/kubectl/kubectl-commands#logs)를 참조한다.
 
 ## 노드 레벨에서의 로깅
 
 ![노드 레벨 로깅](/images/docs/user-guide/logging/logging-node-level.png)
 
-컨테이너화된 애플리케이션이 `stdout(표준 출력)` 및 `stderr(표준 에러)` 에 쓰는 모든 것은 컨테이너 엔진에 의해 어딘가에서 처리와 리디렉션 된다. 예를 들어, 도커 컨테이너 엔진은 이 두 스트림을 [로깅 드라이버](https://docs.docker.com/engine/admin/logging/overview)로 리디렉션 한다. 이 드라이버는 쿠버네티스에서 json 형식의 파일에 작성하도록 구성된다.
+컨테이너화된 애플리케이션의 `stdout(표준 출력)` 및 `stderr(표준 에러)` 스트림에 의해 생성된 모든 출력은 컨테이너 엔진이 처리 및 리디렉션 한다.
+예를 들어, 도커 컨테이너 엔진은 이 두 스트림을 [로깅 드라이버](https://docs.docker.com/engine/admin/logging/overview)로 리디렉션 한다. 이 드라이버는 쿠버네티스에서 JSON 형식의 파일에 작성하도록 구성된다.
 
 {{< note >}}
-도커 json 로깅 드라이버는 각 라인을 별도의 메시지로 취급한다. 도커 로깅 드라이버를 사용하는 경우, 멀티-라인 메시지를 직접 지원하지 않는다. 로깅 에이전트 레벨 이상에서 멀티-라인 메시지를 처리해야 한다.
+도커 JSON 로깅 드라이버는 각 라인을 별도의 메시지로 취급한다. 도커 로깅 드라이버를 사용하는 경우, 멀티-라인 메시지를 직접 지원하지 않는다. 로깅 에이전트 레벨 이상에서 멀티-라인 메시지를 처리해야 한다.
 {{< /note >}}
 
 기본적으로, 컨테이너가 다시 시작되면, kubelet은 종료된 컨테이너 하나를 로그와 함께 유지한다. 파드가 노드에서 축출되면, 해당하는 모든 컨테이너도 로그와 함께 축출된다.
 
 노드-레벨 로깅에서 중요한 고려 사항은 로그 로테이션을 구현하여,
 로그가 노드에서 사용 가능한 모든 스토리지를 사용하지 않도록 하는 것이다. 쿠버네티스는
-현재 로그 로테이션에 대한 의무는 없지만, 디플로이먼트 도구로
+로그 로테이션에 대한 의무는 없지만, 디플로이먼트 도구로
 이를 해결하기 위한 솔루션을 설정해야 한다.
 예를 들어, `kube-up.sh` 스크립트에 의해 배포된 쿠버네티스 클러스터에는,
 매시간 실행되도록 구성된 [`logrotate`](https://linux.die.net/man/8/logrotate)
-도구가 있다. 예를 들어, 도커의 `log-opt` 를 사용하여 애플리케이션의 로그를
-자동으로 로테이션을 하도록 컨테이너 런타임을 설정할 수도 있다.
-`kube-up.sh` 스크립트에서, 후자의 접근 방식은 GCP의 COS 이미지에 사용되며,
-전자의 접근 방식은 다른 환경에서 사용된다. 두 경우 모두,
-기본적으로 로그 파일이 10MB를 초과하면 로테이션이 되도록 구성된다.
+도구가 있다. 애플리케이션의 로그를 자동으로
+로테이션하도록 컨테이너 런타임을 설정할 수도 있다.
 
-예를 들어, `kube-up.sh` 가 해당
-[스크립트](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh)에서
-GCP의 COS 이미지 로깅을 설정하는 방법에 대한 자세한 정보를 찾을 수 있다.
+예를 들어, `kube-up.sh` 가 GCP의 COS 이미지 로깅을 설정하는 방법은
+[`configure-helper` 스크립트](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh)를 통해
+자세히 알 수 있다.
 
 기본 로깅 예제에서와 같이 [`kubectl logs`](/docs/reference/generated/kubectl/kubectl-commands#logs)를
 실행하면, 노드의 kubelet이 요청을 처리하고
-로그 파일에서 직접 읽은 다음, 응답의 내용을 반환한다.
+로그 파일에서 직접 읽는다. kubelet은 로그 파일의 내용을 반환한다.
 
 {{< note >}}
-현재, 일부 외부 시스템에서 로테이션을 수행한 경우,
+만약, 일부 외부 시스템이 로테이션을 수행한 경우,
 `kubectl logs` 를 통해 최신 로그 파일의 내용만
 사용할 수 있다. 예를 들어, 10MB 파일이 있으면, `logrotate` 가
-로테이션을 수행하고 두 개의 파일이 생긴다(크기가 10MB인 파일 하나와 비어있는 파일).
-그 후 `kubectl logs` 는 빈 응답을 반환한다.
+로테이션을 수행하고 두 개의 파일이 생긴다. (크기가 10MB인 파일 하나와 비어있는 파일)
+`kubectl logs` 는 이 예시에서는 빈 응답에 해당하는 최신 로그 파일을 반환한다.
 {{< /note >}}
 
-[cosConfigureHelper]: https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh
 ### 시스템 컴포넌트 로그
 
 시스템 컴포넌트에는 컨테이너에서 실행되는 것과 컨테이너에서 실행되지 않는 두 가지 유형이 있다.
 예를 들면 다음과 같다.
 
 * 쿠버네티스 스케줄러와 kube-proxy는 컨테이너에서 실행된다.
-* Kubelet과 컨테이너 런타임(예: 도커)은 컨테이너에서 실행되지 않는다.
+* Kubelet과 컨테이너 런타임은 컨테이너에서 실행되지 않는다.
 
-systemd를 사용하는 시스템에서, kubelet과 컨테이너 런타임은 journald에 작성한다.
-systemd를 사용하지 않으면, `/var/log` 디렉터리의 `.log` 파일에 작성한다.
-컨테이너 내부의 시스템 컴포넌트는 기본 로깅 메커니즘을 무시하고,
-항상 `/var/log` 디렉터리에 기록한다. 그것은 [klog](https://github.com/kubernetes/klog)
+systemd를 사용하는 시스템에서는, kubelet과 컨테이너 런타임은 journald에 작성한다.
+systemd를 사용하지 않으면, kubelet과 컨테이너 런타임은 `/var/log` 디렉터리의
+`.log` 파일에 작성한다. 컨테이너 내부의 시스템 컴포넌트는 기본 로깅 메커니즘을 무시하고,
+항상 `/var/log` 디렉터리에 기록한다.
+시스템 컴포넌트는 [klog](https://github.com/kubernetes/klog)
 로깅 라이브러리를 사용한다. [로깅에 대한 개발 문서](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md)에서
 해당 컴포넌트의 로깅 심각도(severity)에 대한 규칙을 찾을 수 있다.
 
@@ -126,13 +130,14 @@ systemd를 사용하지 않으면, `/var/log` 디렉터리의 `.log` 파일에 
 
 각 노드에 _노드-레벨 로깅 에이전트_ 를 포함시켜 클러스터-레벨 로깅을 구현할 수 있다. 로깅 에이전트는 로그를 노출하거나 로그를 백엔드로 푸시하는 전용 도구이다. 일반적으로, 로깅 에이전트는 해당 노드의 모든 애플리케이션 컨테이너에서 로그 파일이 있는 디렉터리에 접근할 수 있는 컨테이너이다.
 
-로깅 에이전트는 모든 노드에서 실행해야 하므로, 이를 데몬셋 레플리카, 매니페스트 파드 또는 노드의 전용 네이티브 프로세스로 구현하는 것이 일반적이다. 그러나 후자의 두 가지 접근법은 더 이상 사용되지 않으며 절대 권장하지 않는다.
+로깅 에이전트는 모든 노드에서 실행해야 하므로, 에이전트는
+`DaemonSet` 으로 동작시키는 것을 추천한다.
 
-쿠버네티스 클러스터는 노드-레벨 로깅 에이전트를 사용하는 것이 가장 일반적이며 권장되는 방법으로, 이는 노드별 하나의 에이전트만 생성하며, 노드에서 실행되는 애플리케이션을 변경할 필요가 없기 때문이다. 그러나, 노드-레벨 로깅은 _애플리케이션의 표준 출력과 표준 에러에 대해서만 작동한다_ .
+노드-레벨 로깅은 노드별 하나의 에이전트만 생성하며, 노드에서 실행되는 애플리케이션에 대한 변경은 필요로 하지 않는다.
 
-쿠버네티스는 로깅 에이전트를 지정하지 않지만, 쿠버네티스 릴리스에는 두 가지 선택적인 로깅 에이전트(Google 클라우드 플랫폼과 함께 사용하기 위한 [스택드라이버(Stackdriver) 로깅](/docs/tasks/debug-application-cluster/logging-stackdriver/)과 [엘라스틱서치(Elasticsearch)](/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana/))가 패키지로 함께 제공된다. 전용 문서에서 자세한 정보와 지침을 찾을 수 있다. 두 가지 다 사용자 정의 구성이 된 [fluentd](http://www.fluentd.org/)를 에이전트로써 노드에서 사용한다.
+컨테이너는 stdout과 stderr를 동의되지 않은 포맷으로 작성한다. 노드-레벨 에이전트는 이러한 로그를 수집하고 취합을 위해 전달한다.
 
-### 로깅 에이전트와 함께 사이드카 컨테이너 사용
+### 로깅 에이전트와 함께 사이드카 컨테이너 사용 {#sidecar-container-with-logging-agent}
 
 다음 중 한 가지 방법으로 사이드카 컨테이너를 사용할 수 있다.
 
@@ -143,28 +148,27 @@ systemd를 사용하지 않으면, `/var/log` 디렉터리의 `.log` 파일에 
 
 ![스트리밍 컨테이너가 있는 사이드카 컨테이너](/images/docs/user-guide/logging/logging-with-streaming-sidecar.png)
 
-사이드카 컨테이너를 자체 `stdout` 및 `stderr` 스트림으로
-스트리밍하면, 각 노드에서 이미 실행 중인 kubelet과 로깅 에이전트를
-활용할 수 있다. 사이드카 컨테이너는 파일, 소켓
-또는 journald에서 로그를 읽는다. 각 개별 사이드카 컨테이너는 자체 `stdout`
-또는 `stderr` 스트림에 로그를 출력한다.
+사이드카 컨테이너가 자체 `stdout` 및 `stderr` 스트림으로
+쓰도록 하면, 각 노드에서 이미 실행 중인 kubelet과 로깅 에이전트를
+활용할 수 있다. 사이드카 컨테이너는 파일, 소켓 또는 journald에서 로그를 읽는다.
+각 사이드카 컨테이너는 자체 `stdout` 또는 `stderr` 스트림에 로그를 출력한다.
 
 이 방법을 사용하면 애플리케이션의 다른 부분에서 여러 로그 스트림을
 분리할 수 ​​있고, 이 중 일부는 `stdout` 또는 `stderr` 에
 작성하기 위한 지원이 부족할 수 있다. 로그를 리디렉션하는 로직은
-미미하기 때문에, 큰 오버헤드가 거의 없다. 또한,
+최소화되어 있기 때문에, 심각한 오버헤드가 아니다. 또한,
 `stdout` 및 `stderr` 가 kubelet에서 처리되므로, `kubectl logs` 와 같은
 빌트인 도구를 사용할 수 있다.
 
-다음의 예를 고려해보자. 파드는 단일 컨테이너를 실행하고, 컨테이너는
-서로 다른 두 가지 형식을 사용하여, 서로 다른 두 개의 로그 파일에 기록한다. 파드에 대한
+예를 들어, 파드는 단일 컨테이너를 실행하고, 컨테이너는
+서로 다른 두 가지 형식을 사용하여 서로 다른 두 개의 로그 파일에 기록한다. 파드에 대한
 구성 파일은 다음과 같다.
 
 {{< codenew file="admin/logging/two-files-counter-pod.yaml" >}}
 
 두 컴포넌트를 컨테이너의 `stdout` 스트림으로 리디렉션한 경우에도, 동일한 로그
-스트림에 서로 다른 형식의 로그 항목을 갖는 것은
-알아보기 힘들다. 대신, 두 개의 사이드카 컨테이너를 도입할 수 있다. 각 사이드카
+스트림에 서로 다른 형식의 로그 항목을 작성하는 것은
+추천하지 않는다. 대신, 두 개의 사이드카 컨테이너를 생성할 수 있다. 각 사이드카
 컨테이너는 공유 볼륨에서 특정 로그 파일을 테일(tail)한 다음 로그를
 자체 `stdout` 스트림으로 리디렉션할 수 있다.
 
@@ -178,7 +182,10 @@ systemd를 사용하지 않으면, `/var/log` 디렉터리의 `.log` 파일에 
 ```shell
 kubectl logs counter count-log-1
 ```
-```
+
+출력은 다음과 같다.
+
+```console
 0: Mon Jan  1 00:00:00 UTC 2001
 1: Mon Jan  1 00:00:01 UTC 2001
 2: Mon Jan  1 00:00:02 UTC 2001
@@ -188,7 +195,10 @@ kubectl logs counter count-log-1
 ```shell
 kubectl logs counter count-log-2
 ```
-```
+
+출력은 다음과 같다.
+
+```console
 Mon Jan  1 00:00:00 UTC 2001 INFO 0
 Mon Jan  1 00:00:01 UTC 2001 INFO 1
 Mon Jan  1 00:00:02 UTC 2001 INFO 2
@@ -204,11 +214,10 @@ Mon Jan  1 00:00:02 UTC 2001 INFO 2
 `stdout` 으로 스트리밍하면 디스크 사용량은 두 배가 될 수 있다. 단일 파일에
 쓰는 애플리케이션이 있는 경우, 일반적으로 스트리밍
 사이드카 컨테이너 방식을 구현하는 대신 `/dev/stdout` 을 대상으로
-설정하는 것이 더 낫다.
+설정하는 것을 추천한다.
 
 사이드카 컨테이너를 사용하여 애플리케이션 자체에서 로테이션할 수 없는
-로그 파일을 로테이션할 수도 있다. 이 방법의 예로는
-정기적으로 logrotate를 실행하는 작은 컨테이너를 두는 것이다.
+로그 파일을 로테이션할 수도 있다. 이 방법의 예시는 정기적으로 `logrotate` 를 실행하는 작은 컨테이너를 두는 것이다.
 그러나, `stdout` 및 `stderr` 을 직접 사용하고 로테이션과
 유지 정책을 kubelet에 두는 것이 권장된다.
 
@@ -223,21 +232,17 @@ Mon Jan  1 00:00:02 UTC 2001 INFO 2
 {{< note >}}
 사이드카 컨테이너에서 로깅 에이전트를 사용하면
 상당한 리소스 소비로 이어질 수 있다. 게다가, kubelet에 의해
-제어되지 않기 때문에, `kubectl logs` 명령을 사용하여 해당 로그에
+제어되지 않기 때문에, `kubectl logs` 를 사용하여 해당 로그에
 접근할 수 없다.
 {{< /note >}}
 
-예를 들어, 로깅 에이전트로 fluentd를 사용하는 [스택드라이버](/docs/tasks/debug-application-cluster/logging-stackdriver/)를
-사용할 수 있다. 여기에 이 방법을 구현하는 데 사용할 수 있는
-두 가지 구성 파일이 있다. 첫 번째 파일에는
-fluentd를 구성하기 위한 [컨피그맵](/docs/tasks/configure-pod-container/configure-pod-configmap/)이 포함되어 있다.
+여기에 로깅 에이전트가 포함된 사이드카 컨테이너를 구현하는 데 사용할 수 있는 두 가지 구성 파일이 있다. 첫 번째 파일에는
+fluentd를 구성하기 위한 [`ConfigMap`](/docs/tasks/configure-pod-container/configure-pod-configmap/)이 포함되어 있다.
 
 {{< codenew file="admin/logging/fluentd-sidecar-config.yaml" >}}
 
 {{< note >}}
-fluentd의 구성은 이 문서의 범위를 벗어난다.
-fluentd를 구성하는 것에 대한 자세한 내용은,
-[공식 fluentd 문서](https://docs.fluentd.org/)를 참고한다.
+fluentd를 구성하는 것에 대한 자세한 내용은, [fluentd 문서](https://docs.fluentd.org/)를 참고한다.
 {{< /note >}}
 
 두 번째 파일은 fluentd가 실행되는 사이드카 컨테이너가 있는 파드를 설명한다.
@@ -245,16 +250,10 @@ fluentd를 구성하는 것에 대한 자세한 내용은,
 
 {{< codenew file="admin/logging/two-files-counter-pod-agent-sidecar.yaml" >}}
 
-얼마 후 스택드라이버 인터페이스에서 로그 메시지를 찾을 수 있다.
-
-이것은 단지 예시일 뿐이며 실제로 애플리케이션 컨테이너 내의
-모든 소스에서 읽은 fluentd를 로깅 에이전트로 대체할 수 있다는 것을
-기억한다.
+이 예시 구성에서, 사용자는 애플리케이션 컨테이너 내의 모든 소스을 읽는 fluentd를 다른 로깅 에이전트로 대체할 수 있다.
 
 ### 애플리케이션에서 직접 로그 노출
 
 ![애플리케이션에서 직접 로그 노출](/images/docs/user-guide/logging/logging-from-application.png)
 
-모든 애플리케이션에서 직접 로그를 노출하거나 푸시하여 클러스터-레벨 로깅을
-구현할 수 있다. 그러나, 이러한 로깅 메커니즘의 구현은
-쿠버네티스의 범위를 벗어난다.
+모든 애플리케이션에서 직접 로그를 노출하거나 푸시하는 클러스터-로깅은 쿠버네티스의 범위를 벗어난다.
diff --git a/content/ko/docs/concepts/cluster-administration/manage-deployment.md b/content/ko/docs/concepts/cluster-administration/manage-deployment.md
index be5befdbd3..9893c76548 100644
--- a/content/ko/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/ko/docs/concepts/cluster-administration/manage-deployment.md
@@ -1,4 +1,6 @@
 ---
+
+
 title: 리소스 관리
 content_type: concept
 weight: 40
@@ -43,7 +45,7 @@ kubectl apply -f https://k8s.io/examples/application/nginx/
 
 `kubectl` 은 접미사가 `.yaml`, `.yml` 또는 `.json` 인 파일을 읽는다.
 
-동일한 마이크로서비스 또는 애플리케이션 티어(tier)와 관련된 리소스를 동일한 파일에 배치하고, 애플리케이션과 연관된 모든 파일을 동일한 디렉터리에 그룹화하는 것이 좋다. 애플리케이션의 티어가 DNS를 사용하여 서로 바인딩되면, 스택의 모든 컴포넌트를 일괄로 배포할 수 있다.
+동일한 마이크로서비스 또는 애플리케이션 티어(tier)와 관련된 리소스를 동일한 파일에 배치하고, 애플리케이션과 연관된 모든 파일을 동일한 디렉터리에 그룹화하는 것이 좋다. 애플리케이션의 티어가 DNS를 사용하여 서로 바인딩되면, 스택의 모든 컴포넌트를 함께 배포할 수 있다.
 
 URL을 구성 소스로 지정할 수도 있다. 이는 github에 체크인된 구성 파일에서 직접 배포하는 데 편리하다.
 
@@ -68,7 +70,7 @@ deployment.apps "my-nginx" deleted
 service "my-nginx-svc" deleted
 ```
 
-두 개의 리소스만 있는 경우, 리소스/이름 구문을 사용하여 커맨드 라인에서 둘다 모두 쉽게 지정할 수도 있다.
+두 개의 리소스가 있는 경우, 리소스/이름 구문을 사용하여 커맨드 라인에서 둘다 모두 지정할 수도 있다.
 
 ```shell
 kubectl delete deployments/my-nginx services/my-nginx-svc
@@ -85,10 +87,11 @@ deployment.apps "my-nginx" deleted
 service "my-nginx-svc" deleted
 ```
 
-`kubectl` 은 입력을 받아들이는 것과 동일한 구문으로 리소스 이름을 출력하므로, `$()` 또는 `xargs` 를 사용하여 작업을 쉽게 연결할 수 있다.
+`kubectl` 은 입력을 받아들이는 것과 동일한 구문으로 리소스 이름을 출력하므로, `$()` 또는 `xargs` 를 사용하여 작업을 연결할 수 있다.
 
 ```shell
 kubectl get $(kubectl create -f docs/concepts/cluster-administration/nginx/ -o name | grep service)
+kubectl create -f docs/concepts/cluster-administration/nginx/ -o name | grep service | xargs -i kubectl get {}
 ```
 
 ```shell
@@ -262,7 +265,7 @@ guestbook-redis-slave-qgazl   1/1       Running   0          3m
 ## 레이블 업데이트
 
 새로운 리소스를 만들기 전에 기존 파드 및 기타 리소스의 레이블을 다시 지정해야 하는 경우가 있다. 이것은 `kubectl label` 로 수행할 수 있다.
-예를 들어, 모든 nginx 파드에 프론트엔드 티어로 레이블을 지정하려면, 간단히 다음과 같이 실행한다.
+예를 들어, 모든 nginx 파드에 프론트엔드 티어로 레이블을 지정하려면, 다음과 같이 실행한다.
 
 ```shell
 kubectl label pods -l app=nginx tier=fe
@@ -299,6 +302,7 @@ my-nginx-2035384211-u3t6x   1/1       Running   0          23m       fe
 kubectl annotate pods my-nginx-v4-9gw19 description='my frontend running nginx'
 kubectl get pods my-nginx-v4-9gw19 -o yaml
 ```
+
 ```shell
 apiVersion: v1
 kind: pod
@@ -312,11 +316,12 @@ metadata:
 
 ## 애플리케이션 스케일링
 
-애플리케이션의 로드가 증가하거나 축소되면, `kubectl` 을 사용하여 쉽게 스케일링할 수 있다. 예를 들어, nginx 레플리카 수를 3에서 1로 줄이려면, 다음을 수행한다.
+애플리케이션의 로드가 증가하거나 축소되면, `kubectl` 을 사용하여 애플리케이션을 스케일링한다. 예를 들어, nginx 레플리카 수를 3에서 1로 줄이려면, 다음을 수행한다.
 
 ```shell
 kubectl scale deployment/my-nginx --replicas=1
 ```
+
 ```shell
 deployment.apps/my-nginx scaled
 ```
@@ -326,6 +331,7 @@ deployment.apps/my-nginx scaled
 ```shell
 kubectl get pods -l app=nginx
 ```
+
 ```shell
 NAME                        READY     STATUS    RESTARTS   AGE
 my-nginx-2035384211-j5fhi   1/1       Running   0          30m
@@ -336,6 +342,7 @@ my-nginx-2035384211-j5fhi   1/1       Running   0          30m
 ```shell
 kubectl autoscale deployment/my-nginx --min=1 --max=3
 ```
+
 ```shell
 horizontalpodautoscaler.autoscaling/my-nginx autoscaled
 ```
@@ -404,11 +411,12 @@ JSON 병합 패치 그리고 전략적 병합 패치를 지원한다.
 
 ## 파괴적(disruptive) 업데이트
 
-경우에 따라, 한 번 초기화하면 업데이트할 수 없는 리소스 필드를 업데이트해야 하거나, 디플로이먼트에서 생성된 손상된 파드를 고치는 등의 재귀적 변경을 즉시 원할 수도 있다. 이러한 필드를 변경하려면, `replace --force` 를 사용하여 리소스를 삭제하고 다시 만든다. 이 경우, 원래 구성 파일을 간단히 수정할 수 있다.
+경우에 따라, 한 번 초기화하면 업데이트할 수 없는 리소스 필드를 업데이트해야 하거나, 디플로이먼트에서 생성된 손상된 파드를 고치는 등의 재귀적 변경을 즉시 원할 수도 있다. 이러한 필드를 변경하려면, `replace --force` 를 사용하여 리소스를 삭제하고 다시 만든다. 이 경우, 원래 구성 파일을 수정할 수 있다.
 
 ```shell
 kubectl replace -f https://k8s.io/examples/application/nginx/nginx-deployment.yaml --force
 ```
+
 ```shell
 deployment.apps/my-nginx deleted
 deployment.apps/my-nginx replaced
@@ -425,19 +433,22 @@ nginx 1.14.2 버전을 실행한다고 가정해 보겠다.
 ```shell
 kubectl create deployment my-nginx --image=nginx:1.14.2
 ```
+
 ```shell
 deployment.apps/my-nginx created
 ```
 
 3개의 레플리카를 포함한다(이전과 새 개정판이 공존할 수 있음).
+
 ```shell
 kubectl scale deployment my-nginx --current-replicas=1 --replicas=3
 ```
+
 ```
 deployment.apps/my-nginx scaled
 ```
 
-1.16.1 버전으로 업데이트하려면, 위에서 배운 kubectl 명령을 사용하여 `.spec.template.spec.containers[0].image` 를 `nginx:1.14.2` 에서 `nginx:1.16.1` 로 간단히 변경한다.
+1.16.1 버전으로 업데이트하려면, 위에서 배운 kubectl 명령을 사용하여 `.spec.template.spec.containers[0].image` 를 `nginx:1.14.2` 에서 `nginx:1.16.1` 로 변경한다.
 
 ```shell
 kubectl edit deployment/my-nginx
@@ -452,5 +463,3 @@ kubectl edit deployment/my-nginx
 
 - [애플리케이션 검사 및 디버깅에 `kubectl` 을 사용하는 방법](/docs/tasks/debug-application-cluster/debug-application-introspection/)에 대해 알아본다.
 - [구성 모범 사례 및 팁](/ko/docs/concepts/configuration/overview/)을 참고한다.
-
-
diff --git a/content/ko/docs/concepts/configuration/overview.md b/content/ko/docs/concepts/configuration/overview.md
index 6bcec1d6c0..def34dd231 100644
--- a/content/ko/docs/concepts/configuration/overview.md
+++ b/content/ko/docs/concepts/configuration/overview.md
@@ -59,13 +59,13 @@ DNS 서버는 새로운 `서비스`를 위한 쿠버네티스 API를 Watch하며
 
 - `hostPort`와 같은 이유로, `hostNetwork`를 사용하는 것을 피한다.
 
-- `kube-proxy` 로드 밸런싱이 필요하지 않을 때, 쉬운 서비스 발견을 위해 [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스)(`ClusterIP`의 값을 `None`으로 가지는)를 사용한다.
+- `kube-proxy` 로드 밸런싱이 필요하지 않을 때, 서비스 발견을 위해 [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스)(`ClusterIP`의 값을 `None`으로 가지는)를 사용한다.
 
 ## 레이블 사용하기
 
 - `{ app: myapp, tier: frontend, phase: test, deployment: v3 }`처럼 애플리케이션이나 디플로이먼트의 __속성에 대한 의미__ 를 식별하는 [레이블](/ko/docs/concepts/overview/working-with-objects/labels/)을 정의해 사용한다. 다른 리소스를 위해 적절한 파드를 선택하는 용도로 이러한 레이블을 이용할 수 있다. 예를 들어, 모든 `tier: frontend` 파드를 선택하거나, `app: myapp`의 모든 `phase: test` 컴포넌트를 선택하는 서비스를 생각해 볼 수 있다. 이 접근 방법의 예시는 [방명록](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/guestbook/) 앱을 참고한다.
 
-릴리스에 특정되는 레이블을 서비스의 셀렉터에서 생략함으로써 여러 개의 디플로이먼트에 걸치는 서비스를 생성할 수 있다. [디플로이먼트](/ko/docs/concepts/workloads/controllers/deployment/)는 생성되어 있는 서비스를 다운타임 없이 수정하기 쉽도록 만든다.
+릴리스에 특정되는 레이블을 서비스의 셀렉터에서 생략함으로써 여러 개의 디플로이먼트에 걸치는 서비스를 생성할 수 있다. 동작 중인 서비스를 다운타임 없이 갱신하려면, [디플로이먼트](/ko/docs/concepts/workloads/controllers/deployment/)를 사용한다.
 
 오브젝트의 의도한 상태는 디플로이먼트에 의해 기술되며, 만약 그 스펙에 대한 변화가 _적용될_ 경우, 디플로이먼트 컨트롤러는 일정한 비율로 실제 상태를 의도한 상태로 변화시킨다.
 
diff --git a/content/ko/docs/concepts/configuration/secret.md b/content/ko/docs/concepts/configuration/secret.md
index 073eb2ff4a..4637c1a63d 100644
--- a/content/ko/docs/concepts/configuration/secret.md
+++ b/content/ko/docs/concepts/configuration/secret.md
@@ -1,4 +1,6 @@
 ---
+
+
 title: 시크릿(Secret)
 content_type: concept
 feature:
@@ -24,8 +26,8 @@ weight: 30
 
 {{< caution >}}
 쿠버네티스 시크릿은 기본적으로 암호화되지 않은 base64 인코딩 문자열로 저장된다.
-기본적으로 API 액세스 권한이 있는 모든 사용자 또는 쿠버네티스의 기본 데이터 저장소 etcd에 
-액세스할 수 있는 모든 사용자가 일반 텍스트로 검색 할 수 있다. 
+기본적으로 API 액세스 권한이 있는 모든 사용자 또는 쿠버네티스의 기본 데이터 저장소 etcd에
+액세스할 수 있는 모든 사용자가 일반 텍스트로 검색할 수 있다.
 시크릿을 안전하게 사용하려면 (최소한) 다음과 같이 하는 것이 좋다.
 
 1. 시크릿에 대한 [암호화 활성화](/docs/tasks/administer-cluster/encrypt-data/).
@@ -280,9 +282,9 @@ API 서버는 요구되는 키가 시크릿 구성에서 제공되고 있는지
 검증도 한다.
 
 {{< caution >}}
-SSH 개인 키는 자체적으로 SSH 클라이언트와 호스트 서버간에 신뢰할 수있는 통신을 
-설정하지 않는다. ConfigMap에 추가된 `known_hosts` 파일과 같은 
-"중간자(man in the middle)" 공격을 완화하려면 신뢰를 설정하는 
+SSH 개인 키는 자체적으로 SSH 클라이언트와 호스트 서버 간에 신뢰할 수 있는 통신을
+설정하지 않는다. 컨피그맵(ConfigMap)에 추가된 `known_hosts` 파일과 같은
+"중간자(man in the middle)" 공격을 완화하려면 신뢰를 설정하는
 2차 수단이 필요하다.
 {{< /caution >}}
 
@@ -667,7 +669,7 @@ kubelet은 마운트된 시크릿이 모든 주기적인 동기화에서 최신
 그러나, kubelet은 시크릿의 현재 값을 가져 오기 위해 로컬 캐시를 사용한다.
 캐시의 유형은 [KubeletConfiguration 구조체](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go)의
 `ConfigMapAndSecretChangeDetectionStrategy` 필드를 사용하여 구성할 수 있다.
-시크릿은 watch(기본값), ttl 기반 또는 단순히 API 서버로 모든 요청을 직접
+시크릿은 watch(기본값), ttl 기반 또는 API 서버로 모든 요청을 직접
 리디렉션하여 전파할 수 있다.
 결과적으로, 시크릿이 업데이트된 순간부터 새로운 키가 파드에 투영되는
 순간까지의 총 지연 시간은 kubelet 동기화 시간 + 캐시
@@ -799,11 +801,6 @@ immutable: true
 해당 프로세스에 대한 자세한 설명은
 [서비스 어카운트에 ImagePullSecrets 추가하기](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account)를 참고한다.
 
-### 수동으로 생성된 시크릿의 자동 마운트
-
-수동으로 생성된 시크릿(예: GitHub 계정에 접근하기 위한 토큰이 포함된 시크릿)은
-시크릿의 서비스 어카운트를 기반한 파드에 자동으로 연결될 수 있다.
-
 ## 상세 내용
 
 ### 제약 사항
@@ -1249,4 +1246,3 @@ API 서버에서 kubelet으로의 통신은 SSL/TLS로 보호된다.
 - [`kubectl` 을 사용한 시크릿 관리](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)하는 방법 배우기
 - [구성 파일을 사용한 시크릿 관리](/docs/tasks/configmap-secret/managing-secret-using-config-file/)하는 방법 배우기
 - [kustomize를 사용한 시크릿 관리](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)하는 방법 배우기
-
diff --git a/content/ko/docs/concepts/containers/container-lifecycle-hooks.md b/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
index d4bdc17403..d9a1137024 100644
--- a/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
@@ -1,4 +1,7 @@
 ---
+
+
+
 title: 컨테이너 라이프사이클 훅(Hook)
 content_type: concept
 weight: 30
@@ -33,10 +36,13 @@ Angular와 같이, 컴포넌트 라이프사이클 훅을 가진 많은 프로
 
 `PreStop`
 
-이 훅은 API 요청이나 활성 프로브(liveness probe) 실패, 선점, 자원 경합 등의 관리 이벤트로 인해 컨테이너가 종료되기 직전에 호출된다. 컨테이너가 이미 terminated 또는 completed 상태인 경우에는 preStop 훅 요청이 실패한다.
-그것은 동기적인 동작을 의미하는, 차단(blocking)을 수행하고 있으므로,
-컨테이너를 중지하기 위한 신호가 전송되기 전에 완료되어야 한다.
-파라미터는 핸들러에 전달되지 않는다.
+이 훅은 API 요청이나 활성 프로브(liveness probe) 실패, 선점, 자원 경합
+등의 관리 이벤트로 인해 컨테이너가 종료되기 직전에 호출된다. 컨테이너가 이미
+terminated 또는 completed 상태인 경우에는 `PreStop` 훅 요청이 실패하며,
+훅은 컨테이너를 중지하기 위한 TERM 신호가 보내지기 이전에 완료되어야 한다. 파드의 그레이스 종료
+기간(termination grace period)의 초읽기는 `PreStop` 훅이 실행되기 전에 시작되어,
+핸들러의 결과에 상관없이 컨테이너가 파드의 그레이스 종료 기간 내에 결국 종료되도록 한다.
+어떠한 파라미터도 핸들러에게 전달되지 않는다.
 
 종료 동작에 더 자세한 대한 설명은
 [파드의 종료](/ko/docs/concepts/workloads/pods/pod-lifecycle/#파드의-종료)에서 찾을 수 있다.
@@ -62,17 +68,13 @@ Angular와 같이, 컴포넌트 라이프사이클 훅을 가진 많은 프로
 그러나, 만약 해당 훅이 너무 오래 동작하거나 어딘가에 걸려 있다면,
 컨테이너는 `running` 상태에 이르지 못한다.
 
-`PreStop` 훅은 컨테이너 중지 신호에서 비동기적으로
-실행되지 않는다. 훅은 신호를 보내기 전에 실행을
-완료해야 한다.
-실행 중에 `PreStop` 훅이 중단되면,
+`PreStop` 훅은 컨테이너 중지 신호에서 비동기적으로 실행되지 않는다. 훅은
+TERM 신호를 보내기 전에 실행을 완료해야 한다. 실행 중에 `PreStop` 훅이 중단되면,
 파드의 단계는 `Terminating` 이며 `terminationGracePeriodSeconds` 가
-만료된 후 파드가 종료될 때까지 남아 있다.
-이 유예 기간은 `PreStop` 훅이 실행되고 컨테이너가
-정상적으로 중지되는 데 걸리는 총 시간에 적용된다.
-예를 들어, `terminationGracePeriodSeconds` 가 60이고, 훅이
-완료되는 데 55초가 걸리고, 컨테이너가 신호를 수신한 후
-정상적으로 중지하는 데 10초가 걸리면, `terminationGracePeriodSeconds` 이후
+만료된 후 파드가 종료될 때까지 남아 있다. 이 유예 기간은 `PreStop` 훅이
+실행되고 컨테이너가 정상적으로 중지되는 데 걸리는 총 시간에 적용된다. 예를 들어,
+`terminationGracePeriodSeconds` 가 60이고, 훅이 완료되는 데 55초가 걸리고,
+컨테이너가 신호를 수신한 후 정상적으로 중지하는 데 10초가 걸리면, `terminationGracePeriodSeconds` 이후
 컨테이너가 정상적으로 중지되기 전에 종료된다. 이 두 가지 일이 발생하는 데
 걸리는 총 시간(55+10)보다 적다.
 
diff --git a/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md b/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
index 68e529549b..d549060108 100644
--- a/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
+++ b/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
@@ -1,5 +1,8 @@
 ---
 title: 커스텀 리소스
+
+
+
 content_type: concept
 weight: 10
 ---
@@ -117,7 +120,7 @@ _선언_ 하거나 지정할 수 있게 해주며 쿠버네티스 오브젝트
 
 쿠버네티스는 다양한 사용자의 요구를 충족시키기 위해 이 두 가지 옵션을 제공하므로 사용의 용이성이나 유연성이 저하되지 않는다.
 
-애그리게이트 API는 기본 API 서버 뒤에 있는 하위 API 서버이며 프록시 역할을 한다. 이 배치를 [API 애그리게이션](/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)(AA)이라고 한다. 사용자에게는 쿠버네티스 API가 확장된 것과 같다.
+애그리게이트 API는 기본 API 서버 뒤에 있는 하위 API 서버이며 프록시 역할을 한다. 이 배치를 [API 애그리게이션](/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)(AA)이라고 한다. 사용자에게는 쿠버네티스 API가 확장된 것으로 나타난다.
 
 CRD를 사용하면 다른 API 서버를 추가하지 않고도 새로운 타입의 리소스를 생성할 수 있다. CRD를 사용하기 위해 API 애그리게이션을 이해할 필요는 없다.
 
diff --git a/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md b/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
index 7542ac0add..359284b357 100644
--- a/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
+++ b/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
@@ -1,4 +1,8 @@
 ---
+
+
+
+
 title: 네트워크 플러그인
 content_type: concept
 weight: 10
@@ -20,7 +24,7 @@ weight: 10
 kubelet에는 단일 기본 네트워크 플러그인과 전체 클러스터에 공통된 기본 네트워크가 있다. 플러그인은 시작할 때 플러그인을 검색하고, 찾은 것을 기억하며, 파드 라이프사이클에서 적절한 시간에 선택한 플러그인을 실행한다(CRI는 자체 CNI 플러그인을 관리하므로 도커에만 해당됨). 플러그인 사용 시 명심해야 할 두 가지 Kubelet 커맨드라인 파라미터가 있다.
 
 * `cni-bin-dir`: Kubelet은 시작할 때 플러그인에 대해 이 디렉터리를 검사한다.
-* `network-plugin`: `cni-bin-dir` 에서 사용할 네트워크 플러그인. 플러그인 디렉터리에서 검색한 플러그인이 보고된 이름과 일치해야 한다. CNI 플러그인의 경우, 이는 단순히 "cni"이다.
+* `network-plugin`: `cni-bin-dir` 에서 사용할 네트워크 플러그인. 플러그인 디렉터리에서 검색한 플러그인이 보고된 이름과 일치해야 한다. CNI 플러그인의 경우, 이는 "cni"이다.
 
 ## 네트워크 플러그인 요구 사항
 
diff --git a/content/ko/docs/concepts/extend-kubernetes/service-catalog.md b/content/ko/docs/concepts/extend-kubernetes/service-catalog.md
index 3ac6a2df7d..cc387c2f02 100644
--- a/content/ko/docs/concepts/extend-kubernetes/service-catalog.md
+++ b/content/ko/docs/concepts/extend-kubernetes/service-catalog.md
@@ -1,5 +1,7 @@
 ---
 title: 서비스 카탈로그
+
+
 content_type: concept
 weight: 40
 ---
@@ -24,7 +26,7 @@ weight: 40
 
 클러스터 운영자는 서비스 카탈로그를 설정하고 이를 이용하여 클라우드 공급자의 서비스 브로커와 통신하여 메시지 큐 서비스의 인스턴스를 프로비저닝하고 쿠버네티스 클러스터 내의 애플리케이션에서 사용할 수 있게 한다.
 따라서 애플리케이션 개발자는 메시지 큐의 세부 구현 또는 관리에 신경 쓸 필요가 없다.
-애플리케이션은 그것을 서비스로 간단하게 사용할 수 있다.
+애플리케이션은 메시지 큐에 서비스로 접속할 수 있다.
 
 ## 아키텍처
 
@@ -229,8 +231,3 @@ spec:
 * [샘플 서비스 브로커](https://github.com/openservicebrokerapi/servicebroker/blob/master/gettingStarted.md#sample-service-brokers) 살펴보기
 * [kubernetes-sigs/service-catalog](https://github.com/kubernetes-sigs/service-catalog) 프로젝트 탐색
 * [svc-cat.io](https://svc-cat.io/docs/) 살펴보기
-
-
-
-
-
diff --git a/content/ko/docs/concepts/overview/what-is-kubernetes.md b/content/ko/docs/concepts/overview/what-is-kubernetes.md
index 449cae4393..4086e27cda 100644
--- a/content/ko/docs/concepts/overview/what-is-kubernetes.md
+++ b/content/ko/docs/concepts/overview/what-is-kubernetes.md
@@ -1,4 +1,7 @@
 ---
+
+
+
 title: 쿠버네티스란 무엇인가?
 description: >
   쿠버네티스는 컨테이너화된 워크로드와 서비스를 관리하기 위한 이식할 수 있고, 확장 가능한 오픈소스 플랫폼으로, 선언적 구성과 자동화를 모두 지원한다. 쿠버네티스는 크고 빠르게 성장하는 생태계를 가지고 있다. 쿠버네티스 서비스, 지원 그리고 도구들은 광범위하게 제공된다.
@@ -40,7 +43,7 @@ sitemap:
 컨테이너는 다음과 같은 추가적인 혜택을 제공하기 때문에 인기가 있다.
 
 * 기민한 애플리케이션 생성과 배포: VM 이미지를 사용하는 것에 비해 컨테이너 이미지 생성이 보다 쉽고 효율적임.
-* 지속적인 개발, 통합 및 배포: 안정적이고 주기적으로 컨테이너 이미지를 빌드해서 배포할 수 있고 (이미지의 불변성 덕에) 빠르고 쉽게 롤백할 수 있다.
+* 지속적인 개발, 통합 및 배포: 안정적이고 주기적으로 컨테이너 이미지를 빌드해서 배포할 수 있고 (이미지의 불변성 덕에) 빠르고 효율적으로 롤백할 수 있다.
 * 개발과 운영의 관심사 분리: 배포 시점이 아닌 빌드/릴리스 시점에 애플리케이션 컨테이너 이미지를 만들기 때문에, 애플리케이션이 인프라스트럭처에서 분리된다.
 * 가시성은 OS 수준의 정보와 메트릭에 머무르지 않고, 애플리케이션의 헬스와 그 밖의 시그널을 볼 수 있다.
 * 개발, 테스팅 및 운영 환경에 걸친 일관성: 랩탑에서도 클라우드에서와 동일하게 구동된다.
diff --git a/content/ko/docs/concepts/overview/working-with-objects/labels.md b/content/ko/docs/concepts/overview/working-with-objects/labels.md
index 5d60c9f28f..12f02ccee4 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/labels.md
@@ -1,4 +1,6 @@
 ---
+
+
 title: 레이블과 셀렉터
 content_type: concept
 weight: 40
@@ -40,7 +42,7 @@ _레이블_ 은 파드와 같은 오브젝트에 첨부된 키와 값의 쌍이
    * `"partition" : "customerA"`, `"partition" : "customerB"`
    * `"track" : "daily"`, `"track" : "weekly"`
 
-레이블 예시는 일반적으로 사용하는 상황에 해당한다. 당신의 규약에 따라 자유롭게 개발할 수 있다. 오브젝트에 붙여진 레이블 키는 고유해야 한다는 것을 기억해야 한다.
+이 예시는 일반적으로 사용하는 레이블이며, 사용자는 자신만의 규칙(convention)에 따라 자유롭게 개발할 수 있다. 오브젝트에 붙여진 레이블 키는 고유해야 한다는 것을 기억해야 한다.
 
 ## 구문과 캐릭터 셋
 
@@ -90,14 +92,13 @@ API는 현재 _일치성 기준_ 과 _집합성 기준_ 이라는 두 종류의
 {{< /note >}}
 
 {{< caution >}}
-일치성 기준과 집합성 기준 조건 모두에 대해 논리적인 _OR_ (`||`) 연산자가 없다.
-필터 구문이 적절히 구성되어있는지 확인해야 한다.
+일치성 기준과 집합성 기준 조건 모두에 대해 논리적인 _OR_ (`||`) 연산자가 없다. 필터 구문이 적절히 구성되어있는지 확인해야 한다.
 {{< /caution >}}
 
 ### _일치성 기준_ 요건
 
 _일치성 기준_ 또는 _불일치 기준_ 의 요구사항으로 레이블의 키와 값의 필터링을 허용한다. 일치하는 오브젝트는 추가 레이블을 가질 수 있지만, 레이블의 명시된 제약 조건을 모두 만족해야 한다.
-`=`,`==`,`!=` 이 3가지 연산자만 허용한다. 처음 두 개의 연산자의 _일치성_(그리고 단순히 동의어일 뿐임), 나머지는 _불일치_ 를 의미한다. 예를 들면,
+`=`,`==`,`!=` 이 세 가지 연산자만 허용한다. 처음 두 개의 연산자의 _일치성_(그리고 동의어), 나머지는 _불일치_ 를 의미한다. 예를 들면,
 
 ```
 environment = production
@@ -109,7 +110,8 @@ tier != frontend
 `environment=production,tier!=frontend` 처럼 쉼표를 통해 한 문장으로 `frontend`를 제외한 `production`을 필터링할 수 있다.
 
 일치성 기준 레이블 요건에 대한 하나의 이용 시나리오는 파드가 노드를 선택하는 기준을 지정하는 것이다.
-예를 들어, 아래 샘플 파드는 "`accelerator=nvidia-tesla-p100`" 레이블을 가진 노드를 선택한다.
+예를 들어, 아래 샘플 파드는 "`accelerator=nvidia-tesla-p100`"
+레이블을 가진 노드를 선택한다.
 
 ```yaml
 apiVersion: v1
@@ -148,11 +150,12 @@ _집합성 기준_ 레이블 셀렉터는 일반적으로 `environment=productio
 
 _집합성 기준_ 요건은 _일치성 기준_ 요건과 조합해서 사용할 수 있다. 예를 들어 `partition in (customerA, customerB),environment!=qa`
 
+
 ## API
 
 ### LIST와 WATCH 필터링
 
-LIST와 WATCH 작업은 쿼리 파라미터를 사용해서 반환되는 오브젝트 집합을 필터링하기 위해 레이블 셀렉터를 지정할 수 있다. 다음의 2가지 요건 모두 허용된다(URL 쿼리 문자열을 그대로 표기함).
+LIST와 WATCH 작업은 쿼리 파라미터를 사용해서 반환되는 오브젝트 집합을 필터링하기 위해 레이블 셀렉터를 지정할 수 있다. 다음의 두 가지 요건 모두 허용된다(URL 쿼리 문자열을 그대로 표기함).
 
   * _일치성 기준_ 요건: `?labelSelector=environment%3Dproduction,tier%3Dfrontend`
   * _집합성 기준_ 요건: `?labelSelector=environment+in+%28production%2Cqa%29%2Ctier+in+%28frontend%29`
@@ -208,7 +211,6 @@ selector:
 
 `json` 또는 `yaml` 서식에서 셀렉터는 `component=redis` 또는 `component in (redis)` 모두 같은 것이다.
 
-
 #### 세트-기반 요건을 지원하는 리소스
 
 [`Job`](/ko/docs/concepts/workloads/controllers/job/),
@@ -232,4 +234,3 @@ selector:
 
 레이블을 통해 선택하는 사용 사례 중 하나는 파드를 스케줄 할 수 있는 노드 셋을 제한하는 것이다.
 자세한 내용은 [노드 선택](/ko/docs/concepts/scheduling-eviction/assign-pod-node/) 문서를 참조한다.
-
diff --git a/content/ko/docs/concepts/overview/working-with-objects/object-management.md b/content/ko/docs/concepts/overview/working-with-objects/object-management.md
index 4c1570c458..575def2256 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/object-management.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/object-management.md
@@ -32,7 +32,7 @@ weight: 15
 지정한다.
 
 이것은 클러스터에서 일회성 작업을 개시시키거나 동작시키기 위한
-가장 단순한 방법이다. 이 기법은 활성 오브젝트를 대상으로 직접적인
+추천 방법이다. 이 기법은 활성 오브젝트를 대상으로 직접적인
 영향을 미치기 때문에, 이전 구성에 대한 이력을 제공해 주지 않는다.
 
 ### 예시
@@ -47,7 +47,7 @@ kubectl create deployment nginx --image nginx
 
 오브젝트 구성에 비해 장점은 다음과 같다.
 
-- 커맨드는 간단해서 배우기 쉽고, 기억하기 쉽다.
+- 커맨드는 하나의 동작을 나타내는 단어로 표현된다.
 - 커맨드는 클러스터를 수정하기 위해 단 하나의 단계만을 필요로 한다.
 
 오브젝트 구성에 비해 단점은 다음과 같다.
@@ -125,7 +125,7 @@ kubectl replace -f nginx.yaml
 선언형 오브젝트 구성을 사용할 경우, 사용자는 로컬에 보관된 오브젝트
 구성 파일을 대상으로 작동시키지만, 사용자는 파일에서 수행 할
 작업을 정의하지 않는다. 생성, 업데이트, 그리고 삭제 작업은
-`kubectl`에 의해 오브젝트 마다 자동으로 감지된다. 이를 통해 다른 오브젝트에 대해 
+`kubectl`에 의해 오브젝트마다 자동으로 감지된다. 이를 통해 다른 오브젝트에 대해
 다른 조작이 필요할 수 있는 디렉터리에서 작업할 수 있다.
 
 {{< note >}}
diff --git a/content/ko/docs/concepts/policy/resource-quotas.md b/content/ko/docs/concepts/policy/resource-quotas.md
index a6e6208d76..ff1f4a75c8 100644
--- a/content/ko/docs/concepts/policy/resource-quotas.md
+++ b/content/ko/docs/concepts/policy/resource-quotas.md
@@ -1,4 +1,6 @@
 ---
+
+
 title: 리소스 쿼터
 content_type: concept
 weight: 20
@@ -608,17 +610,28 @@ plugins:
         values: ["cluster-services"]
 ```
 
-이제 "cluster-services" 파드는 `scopeSelector`와 일치하는 쿼터 오브젝트가 있는 네임스페이스에서만 허용된다.
-예를 들면 다음과 같다.
+그리고, `kube-system` 네임스페이스에 리소스 쿼터 오브젝트를 생성한다.
 
-```yaml
-    scopeSelector:
-      matchExpressions:
-      - scopeName: PriorityClass
-        operator: In
-        values: ["cluster-services"]
+{{< codenew file="policy/priority-class-resourcequota.yaml" >}}
+
+```shell
+$ kubectl apply -f https://k8s.io/examples/policy/priority-class-resourcequota.yaml -n kube-system
 ```
 
+```
+resourcequota/pods-cluster-services created
+```
+
+이 경우, 파드 생성은 다음의 조건을 만족해야 허용될 것이다.
+
+1.  파드의 `priorityClassName` 가 명시되지 않음.
+1.  파드의 `priorityClassName` 가 `cluster-services` 이외의 다른 값으로 명시됨.
+1.  파드의 `priorityClassName` 가 `cluster-services` 로 설정되고, 파드가 `kube-system`
+   네임스페이스에 생성되었으며 리소스 쿼터 검증을 통과함.
+
+파드 생성 요청은 `priorityClassName` 가 `cluster-services` 로 명시되고
+`kube-system` 이외의 다른 네임스페이스에 생성되는 경우, 거절된다.
+
 ## {{% heading "whatsnext" %}}
 
 - 자세한 내용은 [리소스쿼터 디자인 문서](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_resource_quota.md)를 참고한다.
diff --git a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
index ebbc00f91e..f9e739d7a1 100644
--- a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -261,7 +261,7 @@ PodSpec에 지정된 NodeAffinity도 적용된다.
 `topologyKey` 의 빈 값을 허용하지 않는다.
 2. 파드 안티-어피니티에서도 `requiredDuringSchedulingIgnoredDuringExecution` 와 `preferredDuringSchedulingIgnoredDuringExecution` 는
 `topologyKey` 의 빈 값을 허용하지 않는다.
-3. `requiredDuringSchedulingIgnoredDuringExecution` 파드 안티-어피니티에서 `topologyKey` 를 `kubernetes.io/hostname` 로 제한하기 위해 어드미션 컨트롤러 `LimitPodHardAntiAffinityTopology` 가 도입되었다. 사용자 지정 토폴로지를 사용할 수 있도록 하려면, 어드미션 컨트롤러를 수정하거나 아니면 간단히 이를 비활성화해야 한다.
+3. `requiredDuringSchedulingIgnoredDuringExecution` 파드 안티-어피니티에서 `topologyKey` 를 `kubernetes.io/hostname` 로 제한하기 위해 어드미션 컨트롤러 `LimitPodHardAntiAffinityTopology` 가 도입되었다. 사용자 지정 토폴로지를 사용할 수 있도록 하려면, 어드미션 컨트롤러를 수정하거나 아니면 이를 비활성화해야 한다.
 4. 위의 경우를 제외하고, `topologyKey` 는 적법한 어느 레이블-키도 가능하다.
 
 `labelSelector` 와 `topologyKey` 외에도 `labelSelector` 와 일치해야 하는 네임스페이스 목록 `namespaces` 를
diff --git a/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index 4ed5c58a63..03eec40fae 100644
--- a/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -1,4 +1,6 @@
 ---
+
+
 title: 스케줄러 성능 튜닝
 content_type: concept
 weight: 80
diff --git a/content/ko/examples/policy/priority-class-resourcequota.yaml b/content/ko/examples/policy/priority-class-resourcequota.yaml
new file mode 100644
index 0000000000..7350d00c8f
--- /dev/null
+++ b/content/ko/examples/policy/priority-class-resourcequota.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: pods-cluster-services
+spec:
+  scopeSelector:
+    matchExpressions:
+      - operator : In
+        scopeName: PriorityClass
+        values: ["cluster-services"]
\ No newline at end of file

From f5aaf40e889404ba3d88c5c518b58714cd51432c Mon Sep 17 00:00:00 2001
From: Patrick Ohly <patrick.ohly@intel.com>
Date: Tue, 2 Mar 2021 13:47:27 +0100
Subject: [PATCH 090/788] storage capacity: beta

After the promotion to beta in 1.21, enabling the feature is easier
and mostly just depends on the CSI driver deployment.
---
 .../docs/concepts/storage/storage-capacity.md | 33 +++----------------
 .../feature-gates.md                          |  3 +-
 2 files changed, 7 insertions(+), 29 deletions(-)

diff --git a/content/en/docs/concepts/storage/storage-capacity.md b/content/en/docs/concepts/storage/storage-capacity.md
index d5993d4f59..13ae8ab722 100644
--- a/content/en/docs/concepts/storage/storage-capacity.md
+++ b/content/en/docs/concepts/storage/storage-capacity.md
@@ -17,6 +17,7 @@ which a pod runs: network-attached storage might not be accessible by
 all nodes, or storage is local to a node to begin with.
 
 {{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 This page describes how Kubernetes keeps track of storage capacity and
 how the scheduler uses that information to schedule Pods onto nodes
@@ -103,34 +104,10 @@ to handle this automatically.
 
 ## Enabling storage capacity tracking
 
-Storage capacity tracking is an *alpha feature* and only enabled when
-the `CSIStorageCapacity` [feature
-gate](/docs/reference/command-line-tools-reference/feature-gates/) and
-the `storage.k8s.io/v1alpha1` {{< glossary_tooltip text="API group" term_id="api-group" >}} are enabled. For details on
-that, see the `--feature-gates` and `--runtime-config` [kube-apiserver
-parameters](/docs/reference/command-line-tools-reference/kube-apiserver/).
-
-A quick check
-whether a Kubernetes cluster supports the feature is to list
-CSIStorageCapacity objects with:
-```shell
-kubectl get csistoragecapacities --all-namespaces
-```
-
-If your cluster supports CSIStorageCapacity, the response is either a list of CSIStorageCapacity objects or:
-```
-No resources found
-```
-
-If not supported, this error is printed instead:
-```
-error: the server doesn't have a resource type "csistoragecapacities"
-```
-
-In addition to enabling the feature in the cluster, a CSI
-driver also has to
-support it. Please refer to the driver's documentation for
-details.
+Storage capacity tracking is a beta feature and enabled by default in
+a Kubernetes cluster since Kubernetes 1.21. In addition to having the
+feature enabled in the cluster, a CSI driver also has to support
+it. Please refer to the driver's documentation for details.
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2e9db5fce0..91062f3895 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -85,7 +85,8 @@ different Kubernetes components.
 | `CSIMigrationvSphere` | `false` | Beta | 1.19 | |
 | `CSIMigrationvSphereComplete` | `false` | Beta | 1.19 | |
 | `CSIServiceAccountToken` | `false` | Alpha | 1.20 | |
-| `CSIStorageCapacity` | `false` | Alpha | 1.19 | |
+| `CSIStorageCapacity` | `false` | Alpha | 1.19 | 1.20 |
+| `CSIStorageCapacity` | `true` | Beta | 1.21 | |
 | `CSIVolumeFSGroupPolicy` | `false` | Alpha | 1.19 | 1.19 |
 | `CSIVolumeFSGroupPolicy` | `true` | Beta | 1.20 | |
 | `ConfigurableFSGroupPolicy` | `false` | Alpha | 1.18 | 1.19 |

From d7ea10e92c03d3c85ff7d7620b33882bf69346c3 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 4 Mar 2021 19:19:25 +0900
Subject: [PATCH 091/788] Add a missing translation

---
 content/ja/docs/contribute/review/reviewing-prs.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/ja/docs/contribute/review/reviewing-prs.md b/content/ja/docs/contribute/review/reviewing-prs.md
index 0ecb2951e0..b2f6936908 100644
--- a/content/ja/docs/contribute/review/reviewing-prs.md
+++ b/content/ja/docs/contribute/review/reviewing-prs.md
@@ -25,6 +25,7 @@ weight: 10
 - [CNCFの行動規範](https://github.com/cncf/foundation/blob/master/code-of-conduct.md)を読み、いかなる時にも行動規範にしたがって行動するようにする。
 - 礼儀正しく、思いやりを持ち、助け合う気持ちを持つ。
 - 変更点だけでなく、PRのポジティブな側面についてもコメントする。
+- 相手の気持に共感して、自分のレビューが相手にどのように受け取られるのかをよく意識する。
 - 相手の善意を前提として、疑問点を明確にする質問をする。
 - 経験を積んだコントリビューターの場合、コンテンツに大幅な変更が必要な新規のコントリビューターとペアを組んで作業に取り組むことを考える。
 

From b349b61088926655d10d8d8f5b1b20dced406c1d Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 4 Mar 2021 19:21:36 +0900
Subject: [PATCH 092/788] Fix a typo

---
 content/ja/docs/contribute/review/reviewing-prs.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/review/reviewing-prs.md b/content/ja/docs/contribute/review/reviewing-prs.md
index b2f6936908..6659d46354 100644
--- a/content/ja/docs/contribute/review/reviewing-prs.md
+++ b/content/ja/docs/contribute/review/reviewing-prs.md
@@ -25,7 +25,7 @@ weight: 10
 - [CNCFの行動規範](https://github.com/cncf/foundation/blob/master/code-of-conduct.md)を読み、いかなる時にも行動規範にしたがって行動するようにする。
 - 礼儀正しく、思いやりを持ち、助け合う気持ちを持つ。
 - 変更点だけでなく、PRのポジティブな側面についてもコメントする。
-- 相手の気持に共感して、自分のレビューが相手にどのように受け取られるのかをよく意識する。
+- 相手の気持ちに共感して、自分のレビューが相手にどのように受け取られるのかをよく意識する。
 - 相手の善意を前提として、疑問点を明確にする質問をする。
 - 経験を積んだコントリビューターの場合、コンテンツに大幅な変更が必要な新規のコントリビューターとペアを組んで作業に取り組むことを考える。
 

From bb9f8ebd77ed329fbf0c64517d60b24326dc8d44 Mon Sep 17 00:00:00 2001
From: Bridget Kromhout <bridget@kromhout.org>
Date: Thu, 4 Mar 2021 08:02:59 -0600
Subject: [PATCH 093/788] Restoring alpha details with end date

Signed-off-by: Bridget Kromhout <bridget@kromhout.org>
---
 .../docs/reference/command-line-tools-reference/feature-gates.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 835fb58d76..65a37a8a3f 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -123,6 +123,7 @@ different Kubernetes components.
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | Beta | 1.19 | |
+| `IPv6DualStack` | `false` | Alpha | 1.15 | 1.20 |
 | `IPv6DualStack` | `true` | Beta | 1.21 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
 | `KubeletPodResources` | `true` | Alpha | 1.13 | 1.14 |

From 21b1e83147332372935e606adba9c6bc5bec5cdd Mon Sep 17 00:00:00 2001
From: Joe Marty <josephmarty@gmail.com>
Date: Thu, 4 Mar 2021 09:54:52 -0600
Subject: [PATCH 094/788] Clarify sources of voluntary disruptions

See issue #22391
---
 content/en/docs/concepts/workloads/pods/disruptions.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/workloads/pods/disruptions.md b/content/en/docs/concepts/workloads/pods/disruptions.md
index d0a8bbf5a9..04c35e0322 100644
--- a/content/en/docs/concepts/workloads/pods/disruptions.md
+++ b/content/en/docs/concepts/workloads/pods/disruptions.md
@@ -80,12 +80,14 @@ Here are some ways to mitigate involuntary disruptions:
   [multi-zone cluster](/docs/setup/multiple-zones).)
 
 The frequency of voluntary disruptions varies.  On a basic Kubernetes cluster, there are
-no voluntary disruptions at all.  However, your cluster administrator or hosting provider
+no automated voluntary disruptions (only user-triggered ones).  However, your cluster administrator or hosting provider
 may run some additional services which cause voluntary disruptions. For example,
 rolling out node software updates can cause voluntary disruptions. Also, some implementations
 of cluster (node) autoscaling may cause voluntary disruptions to defragment and compact nodes.
 Your cluster administrator or hosting provider should have documented what level of voluntary
-disruptions, if any, to expect.
+disruptions, if any, to expect. Certain configuration options, such as
+[using PriorityClasses](https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/)
+in your pod spec can also cause voluntary (and involuntary) disruptions.
 
 
 ## Pod disruption budgets

From 5829a5d9584640b727b9420967a0189c6862e5b3 Mon Sep 17 00:00:00 2001
From: Richard Li <richard@datawire.io>
Date: Thu, 4 Mar 2021 14:48:45 -0500
Subject: [PATCH 095/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

Co-authored-by: Kaitlyn Barnard <kaitlynbarnard10@gmail.com>
---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index a9a65c9dae..b81c13a7f0 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -89,7 +89,7 @@ Adopting a common convention for annotations ensures consistency and understanda
 
 As the number of microservices and annotations proliferate, running `kubectl describe` can get tedious. Moreover, using `kubectl describe` requires every developer to have some direct access to the Kubernetes cluster. Over the past few years, [service catalogs](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog) have gained greater visibility in the Kubernetes ecosystem. Popularized by tools such as [Shopify's ServicesDB](https://shopify.engineering/scaling-mobile-development-by-treating-apps-as-services) and [Spotify's System Z](https://dzone.com/articles/modeling-microservices-at-spotify-with-petter-mari), service catalogs are internally-facing developer portals that present critical information about microservices. Note that these service catalogs should not be confused with the [Kubernetes Service Catalog project](https://svc-cat.io/). Built on the Open Service Broker API, the Kubernetes Service Catalog enables Kubernetes operators to plug in different services (e.g., databases) to their cluster.
 
-Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include [Backstage]((https://backstage.io/) and [Ambassador Service Catalog](https://www.getambassador.io/products/service-catalog). Backstage is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while Ambassador Service Catalog provides a turnkey, cloud-hosted solution that can be set up quickly.
+Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include [Backstage](https://backstage.io/) and [Ambassador Service Catalog](https://www.getambassador.io/products/service-catalog). Backstage is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while Ambassador Service Catalog provides a turnkey, cloud-hosted solution that can be set up quickly.
 
 ## Annotate your services now and thank yourself later
 Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Don't wait until something is on fire in production to start wishing you had implemented better metrics and also documented how to get in touch with the part of your organization that looks after it.

From d717167e8bc9d571e3b2650941ab2d1f0893d9bd Mon Sep 17 00:00:00 2001
From: Alan Cha <ac3805@columbia.edu>
Date: Thu, 4 Mar 2021 17:14:41 -0500
Subject: [PATCH 096/788] Fix GitHub capitalization

---
 .../docs/concepts/cluster-administration/manage-deployment.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/cluster-administration/manage-deployment.md b/content/en/docs/concepts/cluster-administration/manage-deployment.md
index fa31fbd35f..40320e4285 100644
--- a/content/en/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/en/docs/concepts/cluster-administration/manage-deployment.md
@@ -47,7 +47,7 @@ kubectl apply -f https://k8s.io/examples/application/nginx/
 
 It is a recommended practice to put resources related to the same microservice or application tier into the same file, and to group all of the files associated with your application in the same directory. If the tiers of your application bind to each other using DNS, you can deploy all of the components of your stack together.
 
-A URL can also be specified as a configuration source, which is handy for deploying directly from configuration files checked into github:
+A URL can also be specified as a configuration source, which is handy for deploying directly from configuration files checked into GitHub:
 
 ```shell
 kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/application/nginx/nginx-deployment.yaml

From 235509450a5e88d83a69b789ecce434548729e9d Mon Sep 17 00:00:00 2001
From: "Lubomir I. Ivanov" <lubomirivanov@vmware.com>
Date: Tue, 2 Mar 2021 00:34:50 +0200
Subject: [PATCH 097/788] kubeadm: add a new page

- Add the new page "Configuring a cgroup driver"
The page includes details on how to configure the cgroup driver
using kubeadm. It also includes a migration guide for users to
move to the "systemd" driver.
- Link to the new page from install-kubeadm.md and container-runtimes.md
---
 .../container-runtimes.md                     |   7 +-
 .../tools/kubeadm/install-kubeadm.md          |  34 ++---
 .../kubeadm/configure-cgroup-driver.md        | 127 ++++++++++++++++++
 3 files changed, 142 insertions(+), 26 deletions(-)
 create mode 100644 content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index 5aa4ac894e..3f022d191f 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -48,7 +48,7 @@ Changing the settings such that your container runtime and kubelet use `systemd`
 stabilized the system. To configure this for Docker, set `native.cgroupdriver=systemd`.
 
 {{< caution >}}
-Changing the cgroup driver of a Node that has joined a cluster is strongly *not* recommended.  
+Changing the cgroup driver of a Node that has joined a cluster is a sensitive operation.
 If the kubelet has created Pods using the semantics of one cgroup driver, changing the container
 runtime to another cgroup driver can cause errors when trying to re-create the Pod sandbox
 for such existing Pods. Restarting the kubelet may not solve such errors.
@@ -57,6 +57,11 @@ If you have automation that makes it feasible, replace the node with another usi
 configuration, or reinstall it using automation.
 {{< /caution >}}
 
+### Migrating to the `systemd` driver in kubeadm managed clusters
+
+Follow this [Migration guide](/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
+if you wish to migrate to the `systemd` cgroup driver in existing kubeadm managed clusters.
+
 ## Container runtimes
 
 {{% thirdparty-content %}}
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 394820324d..74d6a79dca 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -233,7 +233,7 @@ sudo mkdir -p /opt/cni/bin
 curl -L "https://github.com/containernetworking/plugins/releases/download/${CNI_VERSION}/cni-plugins-linux-amd64-${CNI_VERSION}.tgz" | sudo tar -C /opt/cni/bin -xz
 ```
 
-Define the directory to download command files  
+Define the directory to download command files
 
 {{< note >}}
 The `DOWNLOAD_DIR` variable must be set to a writable directory.
@@ -284,33 +284,17 @@ See the [Kubeadm Troubleshooting guide](/docs/setup/production-environment/tools
 The kubelet is now restarting every few seconds, as it waits in a crashloop for
 kubeadm to tell it what to do.
 
-## Configure cgroup driver used by kubelet on control-plane node
+## Configuring a cgroup driver
 
-When using Docker, kubeadm will automatically detect the cgroup driver for the kubelet
-and set it in the `/var/lib/kubelet/config.yaml` file during runtime.
+Both the container runtime and the kubelet have a property called
+["cgroup driver"](/docs/setup/production-environment/container-runtimes/), which is important
+for the management of cgroups on Linux machines.
 
-If you are using a different CRI, you must pass your `cgroupDriver` value to `kubeadm init`, like so:
-
-```yaml
-apiVersion: kubelet.config.k8s.io/v1beta1
-kind: KubeletConfiguration
-cgroupDriver: <value>
-```
-
-For further details, please read [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
-
-Please mind, that you **only** have to do that if the cgroup driver of your CRI
-is not `cgroupfs`, because that is the default value in the kubelet already.
-
-{{< note >}}
-Since `--cgroup-driver` flag has been deprecated by the kubelet, if you have that in `/var/lib/kubelet/kubeadm-flags.env`
-or `/etc/default/kubelet`(`/etc/sysconfig/kubelet` for RPMs), please remove it and use the KubeletConfiguration instead
-(stored in `/var/lib/kubelet/config.yaml` by default).
-{{< /note >}}
-
-The automatic detection of cgroup driver for other container runtimes
-like CRI-O and containerd is work in progress.
+{{< warning >}}
+Matching the container runtime and kubelet cgroup drivers is required or otherwise the kubelet process will fail.
+{{< warning >}}
 
+See [Configuring a cgroup driver](/tasks/administer-cluster/kubeadm/configure-cgroup-driver) for more details.
 
 ## Troubleshooting
 
diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md b/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
new file mode 100644
index 0000000000..02fdc958fa
--- /dev/null
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
@@ -0,0 +1,127 @@
+---
+title: Configuring a cgroup driver
+content_type: task
+weight: 10
+---
+
+<!-- overview -->
+
+This page explains how to configure the kubelet cgroup driver to match the container
+runtime cgroup driver for kubeadm clusters.
+
+## {{% heading "prerequisites" %}}
+
+You should be familiar with the Kubernetes
+[container runtime requirements](/docs/setup/production-environment/container-runtimes).
+
+<!-- steps -->
+
+## Configuring the container runtime cgroup driver
+
+The [Container runtimes](/docs/setup/production-environment/container-runtimes) page
+explains that the `systemd` driver is recommended for kubeadm based setups instead
+of the `cgroupfs` driver, because kubeadm manages the kubelet as a systemd service.
+
+The page also provides details on how to setup a number of different container runtimes with the
+`systemd` driver by default.
+
+## Configuring the kubelet cgroup driver
+
+kubeadm allows you to pass a `KubeletConfiguration` structure during `kubeadm init`.
+This `KubeletConfiguration` can include the `cgroupDriver` field which controls the cgroup
+driver of the kubelet.
+
+{{< note >}}
+
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
+
+If the user is not setting the `cgroupDriver` field under `KubeletConfiguration`,
+`kubeadm init` will default it to `systemd`.
+{{< /note >}}
+
+A minimal example of configuring the field explicitly:
+
+```yaml
+# kubeadm-config.yaml
+kind: ClusterConfiguration
+apiVersion: kubeadm.k8s.io/v1beta2
+kubernetesVersion: v1.21
+---
+kind: KubeletConfiguration
+apiVersion: kubelet.config.k8s.io/v1beta1
+cgroupDriver: systemd
+```
+
+Such a configuration file can then be passed to the kubeadm command:
+
+```shell
+kubeadm init --config kubeadm-config.yaml
+```
+
+{{< note >}}
+Kubeadm uses the same `KubeletConfiguration` for all nodes in the cluster.
+The `KubeletConfiguration` is stored in a [ConfigMap](docs/concepts/configuration/configmap)
+object under the `kube-system` namespace.
+
+Executing the sub commands `init`, `join` and `upgrade` would result in kubeadm
+writing the `KubeletConfiguration` as a file under `/var/lib/kubelet/config.yaml`
+and passing it to the local node kubelet.
+{{< /note >}}
+
+## Using the `cgroupfs` driver
+
+As this guide explains using the `cgroupfs` driver with kubeadm is not recommended.
+
+To continue using `cgroupfs` and to prevent `kubeadm upgrade` from modifying the
+`KubeletConfiguration` cgroup driver on existing setups, you must be explicit
+about its value. This applies to a case where you do not wish future versions
+of kubeadm to apply the `systemd` driver by default.
+
+See the below section on "Modify the kubelet ConfigMap" for details on
+how to be explicit about the value.
+
+If you wish to configure a container runtime to use the `cgroupfs` driver,
+you must refer to the documentation of the container runtime of your choice.
+
+## Migrating to the `systemd` driver
+
+To change the cgroup driver of an existing kubeadm cluster to `systemd` in-place,
+a similar procedure to a kubelet upgrade is required. This must include both
+steps outlined below.
+
+{{< note >}}
+Alternatively, it is possible to replace the old nodes in the cluster with new ones
+that use the `systemd` driver. This requires executing only the first step below
+before joining the new nodes and ensuring the workloads can safely move to the new
+nodes before deleting the old nodes.
+{{< /note >}}
+
+### Modify the kubelet ConfigMap
+
+- Find the kubelet ConfigMap name using `kubectl get cm -n kube-system | grep kubelet-config`.
+- Call `kubectl edit cm kubelet-config-x.yy -n kube-system` (replace `x.yy` with
+the Kubernetes version).
+- Either modify the existing `cgroupDriver` value or add a new field that looks like this:
+
+  ```yaml
+  cgroupDriver: systemd
+  ```
+  This field must be present under the `kubelet:` section of the ConfigMap.
+
+### Update the cgroup driver on all nodes
+
+For each node in the cluster:
+
+- [Drain the node](/docs/tasks/administer-cluster/safely-drain-node) using `kubectl drain <node-name> --ignore-daemonsets`
+- Stop the kubelet using `systemctl stop kubelet`
+- Stop the container runtime
+- Modify the container runtime cgroup driver to `systemd`
+- Set `cgroupDriver: systemd` in `/var/lib/kubelet/config.yaml`
+- Start the container runtime
+- Start the kubelet using `systemctl start kubelet`
+- [Uncordon the node](/docs/tasks/administer-cluster/safely-drain-node) using `kubectl uncordon <node-name>`
+
+Execute these steps on nodes one at a time to ensure workloads
+have sufficient time to schedule on different nodes.
+
+Once the process is complete ensure that all nodes and workloads are healthy.

From 7d5cd3207028a2dfebc37577aaa4952123ded825 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 4 Mar 2021 23:01:53 +0000
Subject: [PATCH 098/788] Tidy documentation on NetworkPolicy endPort field

---
 .../docs/concepts/services-networking/network-policies.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index 349fe84fbb..32421a0beb 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -227,7 +227,7 @@ You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin tha
 
 When writing a NetworkPolicy, you can target a range of ports instead of a single port.
 
-This is achiveable with the usage of the `endPort` field, as the following example:
+This is achievable with the usage of the `endPort` field, as the following example:
 
 ```yaml
 apiVersion: networking.k8s.io/v1
@@ -251,11 +251,11 @@ spec:
       endPort: 32768
 ```
 
-The above rule will allow a Pod with label `db` on the namespace `default` to communicate with any IP within the range `10.0.0.0/24` if the target port is between the range 32000 and 32768.
+The above rule allows any Pod with label `db` on the namespace `default` to communicate with any IP within the range `10.0.0.0/24` over TCP, provided that the target port is between the range 32000 and 32768.
 
 The following restrictions apply when using this field:
-* As an alpha feature, this is disabled by default. To enable endPort field at a cluster level, you (or your cluster administrator) will need to enable the `NetworkPolicyEndPort` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for the API server with `--feature-gates=NetworkPolicyEndPort=true,…`.
-* The `endPort` field must be equal than or greater to `port` field.
+* As an alpha feature, this is disabled by default. To enable the `endPort` field at a cluster level, you (or your cluster administrator) need to enable the `NetworkPolicyEndPort` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for the API server with `--feature-gates=NetworkPolicyEndPort=true,…`.
+* The `endPort` field must be equal than or greater to the `port` field.
 * `endPort` can only be defined if `port` is also defined.
 * Both ports must be numeric.
 

From bb52543a98e3a755de48ed9b61ca06bba559b48f Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Fri, 5 Mar 2021 09:45:11 +0800
Subject: [PATCH 099/788] Add a missing feature gate entry

The `EnableAggregatedDiscoveryTimeout` (deprecated) is not listed in the
second table. This PR adds it back.
---
 .../docs/reference/command-line-tools-reference/feature-gates.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 033b38a112..229ac94099 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -242,6 +242,7 @@ different Kubernetes components.
 | `DynamicProvisioningScheduling` | - | Deprecated| 1.12 | - |
 | `DynamicVolumeProvisioning` | `true` | Alpha | 1.3 | 1.7 |
 | `DynamicVolumeProvisioning` | `true` | GA | 1.8 | - |
+| `EnableAggregatedDiscoveryTimeout` | `true` | Deprecated | 1.16 | - |
 | `EnableEquivalenceClassCache` | `false` | Alpha | 1.8 | 1.14 |
 | `EnableEquivalenceClassCache` | - | Deprecated | 1.15 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | Alpha | 1.5 | 1.12 |

From 6c44ad9f2dd412a29f24bdd8ad4fb6ab65fb1f67 Mon Sep 17 00:00:00 2001
From: HugoPfeffer <hugo.pguima@gmail.com>
Date: Thu, 4 Mar 2021 20:34:46 -0800
Subject: [PATCH 100/788] docs: Update /pt/docs/concepts/containers/images.md

Fix typos
Update the file according to devlware's suggestion
---
 content/pt/docs/concepts/containers/images.md | 23 +++++++++----------
 1 file changed, 11 insertions(+), 12 deletions(-)

diff --git a/content/pt/docs/concepts/containers/images.md b/content/pt/docs/concepts/containers/images.md
index 06dbe75cf5..eb85c5ed4b 100644
--- a/content/pt/docs/concepts/containers/images.md
+++ b/content/pt/docs/concepts/containers/images.md
@@ -26,14 +26,13 @@ e um possível número de porta; por exemplo: `exemplo.registro.ficticio:10443/n
 
 Se você não especificar um hostname de registro, o Kubernetes presumirá que você se refere ao registro público do Docker.
 
-Após a parte do nome da imagem, você pode adicionar uma _tag_ (como também usar com comandos como
-como `docker` e` podman`).
+Após a parte do nome da imagem, você pode adicionar uma _tag_ (como também usar com comandos como `docker` e` podman`).
 As tags permitem identificar diferentes versões da mesma série de imagens.
 
 Tags de imagem consistem em letras maiúsculas e minúsculas, dígitos, sublinhados (`_`),
 pontos (`.`) e travessões (` -`).
 Existem regras adicionais sobre onde você pode colocar o separador
-caracteres (`_`,` -` e `.`) dentro de uma tag de imagem.
+caracteres (`_`,`-` e `.`) dentro de uma tag de imagem.
 Se você não especificar uma tag, o Kubernetes presumirá que você se refere à tag `latest` (mais recente).
 
 {{< caution >}}
@@ -45,7 +44,7 @@ Em vez disso, especifique uma tag significativa, como `v1.42.0`.
 
 ## Atualizando imagens
 
-A política de pull padrão é `IfNotPresent` que faz com que o
+A política padrão de pull é `IfNotPresent` a qual faz com que o
 {{<glossary_tooltip text = "kubelet" term_id = "kubelet">}} ignore 
 o processo de *pull* da imagem, caso a mesma já exista. Se você prefere sempre forçar o processo de *pull*, 
 você pode fazer como exemplo:
@@ -59,9 +58,9 @@ Quando `imagePullPolicy` é definido sem um valor específico, ele também é de
 
 ## Multiarquitetura de imagens com índice de imagens
 
-Além de fornecer o binário das imagens, um registro de contêiner também pode servir um [índice de imagem do contêiner](https://github.com/opencontainers/image-spec/blob/master/image-index.md). Um índice de imagem pode apontar para multiplos [manifestos da imagem](https://github.com/opencontainers/image-spec/blob/master/manifest.md) para versões específicas de arquitetura de um contêiner. A ideia é que você possa ter um nome para uma imagem (por exemplo: `pause`, `exemple/meuconteiner`, `kube-apiserver`) e permitir que diferentes sistemas busquem o binário da imagem correta para a arquitetura de máquina que estão usando.
+Além de fornecer o binário das imagens, um registro de contêiner também pode servir um [índice de imagem do contêiner](https://github.com/opencontainers/image-spec/blob/master/image-index.md). Um índice de imagem pode apontar para múltiplos [manifestos da imagem](https://github.com/opencontainers/image-spec/blob/master/manifest.md) para versões específicas de arquitetura de um contêiner. A ideia é que você possa ter um nome para uma imagem (por exemplo: `pause`, `exemple/meuconteiner`, `kube-apiserver`) e permitir que diferentes sistemas busquem o binário da imagem correta para a arquitetura de máquina que estão usando.
 
-O próprio Kubernetes normalmente nomeia as imagens de contêiner com o sufixo `- $ (ARCH)`. Para retrocompatibilidade, gere as imagens mais antigas com sufixos. A ideia é gerar a imagem `pause` que tem o manifesto para todas as arquiteturas e `pause-amd64` que é retrocompatível com as configurações anteriores ou arquivos YAML que podem ter codificado as imagens com sufixos.
+O próprio Kubernetes normalmente nomeia as imagens de contêiner com o sufixo `-$(ARCH)`. Para retrocompatibilidade, gere as imagens mais antigas com sufixos. A ideia é gerar a imagem `pause` que tem o manifesto para todas as arquiteturas e `pause-amd64` que é retrocompatível com as configurações anteriores ou arquivos YAML que podem ter codificado as imagens com sufixos.
 
 ## Usando um registro privado
 
@@ -165,8 +164,8 @@ Em caso de falha, a saída é semelhante a:
 
 Você deve garantir que todos os nós no cluster tenham o mesmo `.docker/config.json`. Caso contrário, os pods serão executados com sucesso em alguns nós e falharão em outros. Por exemplo, se você usar o escalonamento automático de nós, cada modelo de instância precisa incluir o `.docker/config.json` ou montar um drive que o contenha.
 
-Todos os pods terão premissão de leitura às imagens em qualquer registro privado, uma vez privado
-as chaves de registro são adicionadas ao `.docker/config.json`.
+Todos os pods terão premissão de leitura às imagens em qualquer registro privado, uma vez que
+as chaves privadas do registro são adicionadas ao `.docker/config.json`.
 
 ### Imagens pré-obtidas
 
@@ -252,7 +251,7 @@ em um recurso de [ServiceAccount](/docs/tasks/configure-pod-container/configure-
 Verifique [Adicionar ImagePullSecrets a uma conta de serviço](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account) para obter instruções detalhadas.
 
 Você pode usar isso em conjunto com um `.docker / config.json` por nó. As credenciais
-será mesclado.
+serão mescladas.
 
 ## Casos de uso
 
@@ -274,10 +273,10 @@ casos de uso comuns e soluções sugeridas.
       - Funcionará melhor com o escalonamento automático do cluster do que com a configuração manual de nós.
     - Ou, em um cluster onde alterar a configuração do nó é inconveniente, use `imagePullSecrets`.
 1. Cluster com imagens proprietárias, algumas das quais requerem controle de acesso mais rígido.
-    - Certifique-se de [controlador de admissão AlwaysPullImages] (/ docs / reference / access-authn-authz / admission-controllers / # alwayspullimages) está ativo. Caso contrário, todos os pods têm potencialmente acesso a todas as imagens.
+    - Certifique-se de que o [controlador de admissão AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) está ativo. Caso contrário, todos os pods têm potencialmente acesso a todas as imagens.
     - Mova dados confidenciais para um recurso "secreto", em vez de empacotá-los em uma imagem.
 1. Um cluster multilocatário em que cada locatário precisa de seu próprio registro privado.
-    - Certifique-se de [controlador de admissão AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) está ativo. Caso contrário, todos os Pods de todos os locatários terão potencialmente acesso a todas as imagens.
+    - Certifique-se de que o [controlador de admissão AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) está ativo. Caso contrário, todos os Pods de todos os locatários terão potencialmente acesso a todas as imagens.
     - Execute um registro privado com autorização necessária.
     - Gere credenciais de registro para cada locatário, coloque em segredo e preencha o segredo para cada namespace de locatário.
     - O locatário adiciona esse segredo a imagePullSecrets de cada namespace.
@@ -288,4 +287,4 @@ O Kubelet mesclará qualquer `imagePullSecrets` em um único `.docker/config.jso
 
 ## {{% heading "whatsnext" %}}
 
-* Read the [OCI Image Manifest Specification](https://github.com/opencontainers/image-spec/blob/master/manifest.md)
\ No newline at end of file
+* Leia a [OCI Image Manifest Specification](https://github.com/opencontainers/image-spec/blob/master/manifest.md)
\ No newline at end of file

From 99e46a58b4c78db96ba52620e7a9a0912dd90665 Mon Sep 17 00:00:00 2001
From: Bridget Kromhout <bridget@kromhout.org>
Date: Fri, 5 Mar 2021 03:49:15 -0600
Subject: [PATCH 101/788] Clarifying dual-stack as default in 1.21.

Signed-off-by: Bridget Kromhout <bridget@kromhout.org>
---
 .../en/docs/concepts/services-networking/dual-stack.md | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/dual-stack.md b/content/en/docs/concepts/services-networking/dual-stack.md
index 9bdc756b35..1fcaea4219 100644
--- a/content/en/docs/concepts/services-networking/dual-stack.md
+++ b/content/en/docs/concepts/services-networking/dual-stack.md
@@ -18,9 +18,9 @@ weight: 70
 
 {{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
- IPv4/IPv6 dual-stack enables the allocation of both IPv4 and IPv6 addresses to {{< glossary_tooltip text="Pods" term_id="pod" >}} and {{< glossary_tooltip text="Services" term_id="service" >}}.
+IPv4/IPv6 dual-stack networking enables the allocation of both IPv4 and IPv6 addresses to {{< glossary_tooltip text="Pods" term_id="pod" >}} and {{< glossary_tooltip text="Services" term_id="service" >}}.
 
-If you enable IPv4/IPv6 dual-stack networking for your Kubernetes cluster, the cluster will support the simultaneous assignment of both IPv4 and IPv6 addresses.
+IPv4/IPv6 dual-stack networking is enabled by default for your Kubernetes cluster starting in 1.21, allowing the simultaneous assignment of both IPv4 and IPv6 addresses.
 
 
 
@@ -28,7 +28,7 @@ If you enable IPv4/IPv6 dual-stack networking for your Kubernetes cluster, the c
 
 ## Supported Features
 
-Enabling IPv4/IPv6 dual-stack on your Kubernetes cluster provides the following features:
+IPv4/IPv6 dual-stack on your Kubernetes cluster provides the following features:
 
    * Dual-stack Pod networking (a single IPv4 and IPv6 address assignment per Pod)
    * IPv4 and IPv6 enabled Services
@@ -47,6 +47,8 @@ The following prerequisites are needed in order to utilize IPv4/IPv6 dual-stack
 
 ## Configure IPv4/IPv6 dual-stack
 
+To use IPv4/IPv6 dual-stack, ensure the `IPv6DualStack` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled for the relevant components of your cluster. (Starting in 1.21, IPv4/IPv6 dual-stack defaults to enabled.)
+
 To configure IPv4/IPv6 dual-stack, set dual-stack cluster network assignments:
 
    * kube-apiserver:
@@ -63,7 +65,7 @@ An example of an IPv4 CIDR: `10.244.0.0/16` (though you would supply your own ad
 
 An example of an IPv6 CIDR: `fdXY:IJKL:MNOP:15::/64` (this shows the format but is not a valid address - see [RFC 4193](https://tools.ietf.org/html/rfc4193))
 
-Starting in 1.21, IPv4/IPv6 dual-stack defaults to true.
+Starting in 1.21, IPv4/IPv6 dual-stack defaults to enabled.
 You can disable it when necessary by specifying `--feature-gates="IPv6DualStack=false"`
 on the kube-apiserver, kube-controller-manager, kubelet, and kube-proxy command line.
 {{< /note >}}

From b3ac1021a91c2db84a71527cb759820fa14281f7 Mon Sep 17 00:00:00 2001
From: timyinshi <shiguangyin@inspur.com>
Date: Fri, 5 Mar 2021 22:29:24 +0800
Subject: [PATCH 102/788] modify the error chinese word

Signed-off-by: timyinshi <shiguangyin@inspur.com>
---
 content/zh/docs/concepts/workloads/controllers/job.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/controllers/job.md b/content/zh/docs/concepts/workloads/controllers/job.md
index 06853f27b7..6180d3bd28 100644
--- a/content/zh/docs/concepts/workloads/controllers/job.md
+++ b/content/zh/docs/concepts/workloads/controllers/job.md
@@ -169,7 +169,7 @@ A Job also needs a [`.spec` section](https://git.k8s.io/community/contributors/d
 ## 编写 Job 规约
 
 与 Kubernetes 中其他资源的配置类似，Job 也需要 `apiVersion`、`kind` 和 `metadata` 字段。
-Job 的名字必须时合法的 [DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)。
+Job 的名字必须是合法的 [DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)。
 
 Job 配置还需要一个[`.spec` 节](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)。
 
@@ -565,7 +565,7 @@ more information, see the documentation for
 [TTL controller](/docs/concepts/workloads/controllers/ttlafterfinished/) for
 finished resources.
 -->
-Job `pi-with-ttl` 在结束 100 秒之后，可以成为被自动删除的标的。
+Job `pi-with-ttl` 在结束 100 秒之后，可以成为被自动删除的对象。
 
 如果该字段设置为 `0`，Job 在结束之后立即成为可被自动删除的对象。
 如果该字段没有设置，Job 不会在结束之后被 TTL 控制器自动清除。

From e7a25a823cc8e537ee0518bb214a38e1493cea5c Mon Sep 17 00:00:00 2001
From: Kenichi Omichi <ken-oomichi@wx.jp.nec.com>
Date: Fri, 5 Mar 2021 22:44:47 +0000
Subject: [PATCH 103/788] Replace redirect links of kubeadm

/docs/reference/setup-tools/kubeadm/kubeadm/ is redirected to
/docs/reference/setup-tools/kubeadm/
This replaces the redirect links of kubeadm with the direct links.
---
 .../2018-08-03-make-kubernetes-production-grade-anywhere.md | 2 +-
 .../2018-12-03-kubernetes-1-13-release-announcement.md      | 2 +-
 content/en/docs/setup/best-practices/certificates.md        | 6 +++---
 .../tools/kubeadm/create-cluster-kubeadm.md                 | 2 +-
 .../en/docs/setup/production-environment/tools/kubespray.md | 2 +-
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/content/en/blog/_posts/2018-08-03-make-kubernetes-production-grade-anywhere.md b/content/en/blog/_posts/2018-08-03-make-kubernetes-production-grade-anywhere.md
index 024506a2de..a28196d568 100644
--- a/content/en/blog/_posts/2018-08-03-make-kubernetes-production-grade-anywhere.md
+++ b/content/en/blog/_posts/2018-08-03-make-kubernetes-production-grade-anywhere.md
@@ -176,7 +176,7 @@ Cluster-distributed stateful services (e.g., Cassandra) can benefit from splitti
 
 [Logs](/docs/concepts/cluster-administration/logging/) and [metrics](/docs/tasks/debug-application-cluster/resource-usage-monitoring/) (if collected and persistently retained) are valuable to diagnose outages, but given the variety of technologies available it will not be addressed in this blog. If Internet connectivity is available, it may be desirable to retain logs and metrics externally at a central location.
 
-Your production deployment should utilize an automated installation, configuration and update tool (e.g., [Ansible](https://github.com/kubernetes-incubator/kubespray), [BOSH](https://github.com/cloudfoundry-incubator/kubo-deployment), [Chef](https://github.com/chef-cookbooks/kubernetes), [Juju](/docs/getting-started-guides/ubuntu/installation/), [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), [Puppet](https://forge.puppet.com/puppetlabs/kubernetes), etc.). A manual process will have repeatability issues, be labor intensive, error prone, and difficult to scale. [Certified distributions](https://www.cncf.io/certification/software-conformance/#logos) are likely to include a facility for retaining configuration settings across updates, but if you implement your own install and config toolchain, then retention, backup and recovery of the configuration artifacts is essential. Consider keeping your deployment components and settings under a version control system such as Git.
+Your production deployment should utilize an automated installation, configuration and update tool (e.g., [Ansible](https://github.com/kubernetes-incubator/kubespray), [BOSH](https://github.com/cloudfoundry-incubator/kubo-deployment), [Chef](https://github.com/chef-cookbooks/kubernetes), [Juju](/docs/getting-started-guides/ubuntu/installation/), [kubeadm](/docs/reference/setup-tools/kubeadm/), [Puppet](https://forge.puppet.com/puppetlabs/kubernetes), etc.). A manual process will have repeatability issues, be labor intensive, error prone, and difficult to scale. [Certified distributions](https://www.cncf.io/certification/software-conformance/#logos) are likely to include a facility for retaining configuration settings across updates, but if you implement your own install and config toolchain, then retention, backup and recovery of the configuration artifacts is essential. Consider keeping your deployment components and settings under a version control system such as Git.
 
 ## Outage recovery
 
diff --git a/content/en/blog/_posts/2018-12-03-kubernetes-1-13-release-announcement.md b/content/en/blog/_posts/2018-12-03-kubernetes-1-13-release-announcement.md
index 247bfa2c8d..8aba0dc232 100644
--- a/content/en/blog/_posts/2018-12-03-kubernetes-1-13-release-announcement.md
+++ b/content/en/blog/_posts/2018-12-03-kubernetes-1-13-release-announcement.md
@@ -17,7 +17,7 @@ Let’s dive into the key features of this release:
 
 ## Simplified Kubernetes Cluster Management with kubeadm in GA
 
-Most people who have gotten hands-on with Kubernetes have at some point been hands-on with kubeadm. It's an essential tool for managing the cluster lifecycle, from creation to configuration to upgrade; and now kubeadm is officially GA. [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) handles the bootstrapping of production clusters on existing hardware and configuring the core Kubernetes components in a best-practice-manner to providing a secure yet easy joining flow for new nodes and supporting easy upgrades. What’s notable about this GA release are the now graduated advanced features, specifically around pluggability and configurability. The scope of kubeadm is to be a toolbox for both admins and automated, higher-level system and this release is a significant step in that direction.
+Most people who have gotten hands-on with Kubernetes have at some point been hands-on with kubeadm. It's an essential tool for managing the cluster lifecycle, from creation to configuration to upgrade; and now kubeadm is officially GA. [kubeadm](/docs/reference/setup-tools/kubeadm/) handles the bootstrapping of production clusters on existing hardware and configuring the core Kubernetes components in a best-practice-manner to providing a secure yet easy joining flow for new nodes and supporting easy upgrades. What’s notable about this GA release are the now graduated advanced features, specifically around pluggability and configurability. The scope of kubeadm is to be a toolbox for both admins and automated, higher-level system and this release is a significant step in that direction.
 
 ## Container Storage Interface (CSI) Goes GA
 
diff --git a/content/en/docs/setup/best-practices/certificates.md b/content/en/docs/setup/best-practices/certificates.md
index a065462baf..1648cc4e9e 100644
--- a/content/en/docs/setup/best-practices/certificates.md
+++ b/content/en/docs/setup/best-practices/certificates.md
@@ -9,7 +9,7 @@ weight: 40
 <!-- overview -->
 
 Kubernetes requires PKI certificates for authentication over TLS.
-If you install Kubernetes with [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), the certificates that your cluster requires are automatically generated.
+If you install Kubernetes with [kubeadm](/docs/reference/setup-tools/kubeadm/), the certificates that your cluster requires are automatically generated.
 You can also generate your own certificates -- for example, to keep your private keys more secure by not storing them on the API server.
 This page explains the certificates that your cluster requires.
 
@@ -74,7 +74,7 @@ Required certificates:
 | kube-apiserver-kubelet-client | kubernetes-ca             | system:masters | client                                 |                                             |
 | front-proxy-client            | kubernetes-front-proxy-ca |                | client                                 |                                             |
 
-[1]: any other IP or DNS name you contact your cluster on (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)
+[1]: any other IP or DNS name you contact your cluster on (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/)
 the load balancer stable IP and/or DNS name, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
 `kubernetes.default.svc.cluster`, `kubernetes.default.svc.cluster.local`)
 
@@ -100,7 +100,7 @@ For kubeadm users only:
 
 ### Certificate paths
 
-Certificates should be placed in a recommended path (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)).
+Certificates should be placed in a recommended path (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/)).
 Paths should be specified using the given argument regardless of location.
 
 | Default CN                   | recommended key path         | recommended cert path       | command        | key argument                 | cert argument                             |
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index 6516a18825..a9b37e8167 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -137,7 +137,7 @@ is not supported by kubeadm.
 
 ### More information
 
-For more information about `kubeadm init` arguments, see the [kubeadm reference guide](/docs/reference/setup-tools/kubeadm/kubeadm/).
+For more information about `kubeadm init` arguments, see the [kubeadm reference guide](/docs/reference/setup-tools/kubeadm/).
 
 To configure `kubeadm init` with a configuration file see [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
 
diff --git a/content/en/docs/setup/production-environment/tools/kubespray.md b/content/en/docs/setup/production-environment/tools/kubespray.md
index ac635101a0..4fac65ab88 100644
--- a/content/en/docs/setup/production-environment/tools/kubespray.md
+++ b/content/en/docs/setup/production-environment/tools/kubespray.md
@@ -23,7 +23,7 @@ Kubespray is a composition of [Ansible](https://docs.ansible.com/) playbooks, [i
 * continuous integration tests
 
 To choose a tool which best fits your use case, read [this comparison](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md) to
-[kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) and [kops](/docs/setup/production-environment/tools/kops/).
+[kubeadm](/docs/reference/setup-tools/kubeadm/) and [kops](/docs/setup/production-environment/tools/kops/).
 
 <!-- body -->
 

From 6c60620ad437d1be284a194e2e950f2890a1c636 Mon Sep 17 00:00:00 2001
From: Sergey Kanzhelev <S.Kanzhelev@live.com>
Date: Sat, 6 Mar 2021 06:42:10 +0000
Subject: [PATCH 104/788] added note about the name being an identifier

---
 .../en/docs/concepts/overview/working-with-objects/names.md   | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/content/en/docs/concepts/overview/working-with-objects/names.md b/content/en/docs/concepts/overview/working-with-objects/names.md
index bc89d1c30a..a74b59c71a 100644
--- a/content/en/docs/concepts/overview/working-with-objects/names.md
+++ b/content/en/docs/concepts/overview/working-with-objects/names.md
@@ -24,6 +24,10 @@ For non-unique user-provided attributes, Kubernetes provides [labels](/docs/conc
 
 {{< glossary_definition term_id="name" length="all" >}}
 
+{{< note >}}
+In cases when objects represent a physical entity (like Node represent a physical host), when host is re-created under the same name without deleting and re-creating a Node, Kubernetes will treat it as a same thing, which may lead to inconsistencies.
+{{< /note >}}
+
 Below are three types of commonly used name constraints for resources.
 
 ### DNS Subdomain Names

From 7a5da05b9569fe130fcc54c03e3c01b8029b4d5c Mon Sep 17 00:00:00 2001
From: Sergey Kanzhelev <S.Kanzhelev@live.com>
Date: Sat, 6 Mar 2021 07:15:20 +0000
Subject: [PATCH 105/788] add inconistency message to Nodes page as well

---
 content/en/docs/concepts/architecture/nodes.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index 7bd4b355b6..cd2c2291c5 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -66,6 +66,15 @@ delete the Node object to stop that health checking.
 The name of a Node object must be a valid
 [DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
 
+{{< note >}}
+The [name](/docs/concepts/overview/working-with-objects/names#names) identifies a Node. Two Nodes
+cannot have the same name at the same time. Kubernetes also assumes that a resource with the same
+name is the same object. In case of a Node, it is implicitly assumed that an instance using the
+same name will have the same state (e.g. network settings, root disk contents). This may lead to
+inconsistencies if instance was altered without the change of a name or deleting and re-creating the
+Node object from API server.
+{{< /note >}}
+
 ### Self-registration of Nodes
 
 When the kubelet flag `--register-node` is true (the default), the kubelet will attempt to

From 3d384aca2da39f5fb7649cd975c6e75ee8a4d7a5 Mon Sep 17 00:00:00 2001
From: Naoki Oketani <okepy.naoki@gmail.com>
Date: Sat, 6 Mar 2021 18:30:21 +0900
Subject: [PATCH 106/788] Translate
 docs/tasks/configmap-secret/managing-secret-using-kubectl/ into Japanese

---
 .../ja/docs/tasks/configmap-secret/_index.md  |   6 +
 .../managing-secret-using-kubectl.md          | 146 ++++++++++++++++++
 2 files changed, 152 insertions(+)
 create mode 100755 content/ja/docs/tasks/configmap-secret/_index.md
 create mode 100644 content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md

diff --git a/content/ja/docs/tasks/configmap-secret/_index.md b/content/ja/docs/tasks/configmap-secret/_index.md
new file mode 100755
index 0000000000..18a8018ce5
--- /dev/null
+++ b/content/ja/docs/tasks/configmap-secret/_index.md
@@ -0,0 +1,6 @@
+---
+title: "Secretの管理"
+weight: 28
+description: Secretを使用した機密設定データの管理
+---
+
diff --git a/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
new file mode 100644
index 0000000000..fb8c89c1e3
--- /dev/null
+++ b/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -0,0 +1,146 @@
+---
+title: kubectlを使用してSecretを管理する
+content_type: task
+weight: 10
+description: kubectlコマンドラインを使用してSecretを作成する
+---
+
+<!-- overview -->
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+## Secretを作成する
+
+`Secret`はデータベースにアクセスするためにPodが必要とするユーザー資格情報を含めることができます。
+たとえば、データベース接続文字列はユーザー名とパスワードで構成されます。
+ユーザー名はローカルマシンの`./username.txt`に、パスワードは`./password.txt`に保存します。
+
+```shell
+echo -n 'admin' > ./username.txt
+echo -n '1f2d1e2e67df' > ./password.txt
+```
+
+上記の2つのコマンドの`-n`フラグは、生成されたファイルにテキスト末尾の余分な改行文字が含まれないようにします。
+`kubectl`がファイルを読み取り、内容をbase64文字列にエンコードすると、余分な改行文字もエンコードされるため、これは重要です。
+
+`kubectl create secret`コマンドはこれらのファイルをSecretにパッケージ化し、APIサーバー上にオブジェクトを作成します。
+
+```shell
+kubectl create secret generic db-user-pass \
+  --from-file=./username.txt \
+  --from-file=./password.txt
+```
+
+出力は次のようになります:
+
+```
+secret/db-user-pass created
+```
+
+ファイル名がデフォルトのキー名になります。オプションで`--from-file=[key=]source`を使用してキー名を設定できます。たとえば:
+
+```shell
+kubectl create secret generic db-user-pass \
+  --from-file=username=./username.txt \
+  --from-file=password=./password.txt
+```
+
+`--from-file`に指定したファイルに含まれるパスワードの特殊文字をエスケープする必要はありません。
+
+また、`--from-literal=<key>=<value>`タグを使用してSecretデータを提供することもできます。
+このタグは、複数のキーと値のペアを提供するために複数回指定することができます。
+`$`、`\`、`*`、`=`、`!`などの特殊文字は[シェル](https://en.wikipedia.org/wiki/Shell_(computing))によって解釈されるため、エスケープを必要とすることに注意してください。
+ほとんどのシェルでは、パスワードをエスケープする最も簡単な方法は、シングルクォート(`'`)で囲むことです。
+たとえば、実際のパスワードが`S!B\*d$zDsb=`の場合、次のようにコマンドを実行します:
+
+```shell
+kubectl create secret generic dev-db-secret \
+  --from-literal=username=devuser \
+  --from-literal=password='S!B\*d$zDsb='
+```
+
+## Secretを検証する
+
+Secretが作成されたことを確認できます:
+
+```shell
+kubectl get secrets
+```
+
+出力は次のようになります:
+
+```
+NAME                  TYPE                                  DATA      AGE
+db-user-pass          Opaque                                2         51s
+```
+
+`Secret`の説明を参照できます:
+
+```shell
+kubectl describe secrets/db-user-pass
+```
+
+出力は次のようになります:
+
+```
+Name:            db-user-pass
+Namespace:       default
+Labels:          <none>
+Annotations:     <none>
+
+Type:            Opaque
+
+Data
+====
+password:    12 bytes
+username:    5 bytes
+```
+
+`kubectl get`と`kubectl describe`コマンドはデフォルトでは`Secret`の内容を表示しません。
+これは、`Secret`が不用意に他人にさらされたり、ターミナルログに保存されたりしないようにするためです。
+
+## Secretをデコードする  {#decoding-secret}
+
+先ほど作成したSecretの内容を見るには、以下のコマンドを実行します:
+
+```shell
+kubectl get secret db-user-pass -o jsonpath='{.data}'
+```
+
+出力は次のようになります:
+
+```json
+{"password.txt":"MWYyZDFlMmU2N2Rm","username.txt":"YWRtaW4="}
+```
+
+`password.txt`のデータをデコードします:
+
+```shell
+echo 'MWYyZDFlMmU2N2Rm' | base64 --decode
+```
+
+出力は次のようになります:
+
+```
+1f2d1e2e67df
+```
+
+## クリーンアップ
+
+作成したSecretを削除するには次のコマンドを実行します:
+
+```shell
+kubectl delete secret db-user-pass
+```
+
+<!-- discussion -->
+
+## {{% heading "whatsnext" %}}
+
+- [Secretのコンセプト](/ja/docs/concepts/configuration/secret/)を読む
+- [設定ファイルを使用してSecretを管理する](/docs/tasks/configmap-secret/managing-secret-using-config-file/)方法を知る
+- [kustomizeを使用してSecretを管理する](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)方法を知る

From 5e6da7d39712f0ead6cd36ca128e80ba28be9534 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Wed, 3 Mar 2021 16:25:18 +0800
Subject: [PATCH 107/788] [zh] translate task certificates

---
 .../tasks/administer-cluster/certificates.md  | 366 ++++++++++++++++++
 1 file changed, 366 insertions(+)
 create mode 100644 content/zh/docs/tasks/administer-cluster/certificates.md

diff --git a/content/zh/docs/tasks/administer-cluster/certificates.md b/content/zh/docs/tasks/administer-cluster/certificates.md
new file mode 100644
index 0000000000..a61ad671c0
--- /dev/null
+++ b/content/zh/docs/tasks/administer-cluster/certificates.md
@@ -0,0 +1,366 @@
+---
+title: 证书
+content_type: task
+weight: 20
+---
+<!-- 
+---
+title: Certificates
+content_type: task
+weight: 20
+---
+-->
+
+<!-- overview -->
+
+<!-- 
+When using client certificate authentication, you can generate certificates
+manually through `easyrsa`, `openssl` or `cfssl`.
+-->
+在使用客户端证书认证的场景下，你可以通过 `easyrsa`、`openssl` 或 `cfssl` 等工具以手工方式生成证书。
+
+<!-- body -->
+
+### easyrsa
+
+<!-- 
+**easyrsa** can manually generate certificates for your cluster.
+-->
+**easyrsa** 支持以手工方式为你的集群生成证书。
+
+<!-- 
+1.  Download, unpack, and initialize the patched version of easyrsa3.
+-->
+1.  下载、解压、初始化打过补丁的 easyrsa3。
+
+        curl -LO https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz
+        tar xzf easy-rsa.tar.gz
+        cd easy-rsa-master/easyrsa3
+        ./easyrsa init-pki
+
+    <!-- 
+    1.  Generate a new certificate authority (CA). `--batch` sets automatic mode;
+    `--req-cn` specifies the Common Name (CN) for the CA's new root certificate.
+    -->
+1.  生成新的证书颁发机构（CA）。参数 `--batch` 用于设置自动模式；
+    参数 `--req-cn` 用于设置新的根证书的通用名称（CN）。
+
+        ./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass
+
+    <!-- 
+    1.  Generate server certificate and key.
+    The argument `--subject-alt-name` sets the possible IPs and DNS names the API server will
+    be accessed with. The `MASTER_CLUSTER_IP` is usually the first IP from the service CIDR
+    that is specified as the `--service-cluster-ip-range` argument for both the API server and
+    the controller manager component. The argument `--days` is used to set the number of days
+    after which the certificate expires.
+    The sample below also assumes that you are using `cluster.local` as the default
+    DNS domain name.
+    -->
+1.  生成服务器证书和秘钥。
+    参数 `--subject-alt-name` 设置 API 服务器的 IP 和 DNS 名称。
+    `MASTER_CLUSTER_IP` 用于 API 服务器和控制管理器，通常取 CIDR 的第一个 IP，由 `--service-cluster-ip-range` 的参数提供。
+    参数 `--days` 用于设置证书的过期时间。
+    下面的示例假定你的默认 DNS 域名为 `cluster.local`。
+
+        ./easyrsa --subject-alt-name="IP:${MASTER_IP},"\
+        "IP:${MASTER_CLUSTER_IP},"\
+        "DNS:kubernetes,"\
+        "DNS:kubernetes.default,"\
+        "DNS:kubernetes.default.svc,"\
+        "DNS:kubernetes.default.svc.cluster,"\
+        "DNS:kubernetes.default.svc.cluster.local" \
+        --days=10000 \
+        build-server-full server nopass
+
+    <!-- 
+    1.  Copy `pki/ca.crt`, `pki/issued/server.crt`, and `pki/private/server.key` to your directory.
+    1.  Fill in and add the following parameters into the API server start parameters:
+    -->
+1.  拷贝文件 `pki/ca.crt`、`pki/issued/server.crt` 和 `pki/private/server.key` 到你的目录中。
+1.  在 API 服务器的启动参数中添加以下参数：
+
+        --client-ca-file=/yourdirectory/ca.crt
+        --tls-cert-file=/yourdirectory/server.crt
+        --tls-private-key-file=/yourdirectory/server.key
+
+### openssl
+
+<!-- 
+**openssl** can manually generate certificates for your cluster.
+-->
+**openssl** 支持以手工方式为你的集群生成证书。
+
+<!-- 
+1.  Generate a ca.key with 2048bit:
+-->
+1.  生成一个 2048 位的 ca.key 文件
+
+        openssl genrsa -out ca.key 2048
+
+    <!-- 
+    1.  According to the ca.key generate a ca.crt (use -days to set the certificate effective time):
+    -->
+1.  在 ca.key 文件的基础上，生成 ca.crt 文件（用参数 -days 设置证书有效期）
+
+        openssl req -x509 -new -nodes -key ca.key -subj "/CN=${MASTER_IP}" -days 10000 -out ca.crt
+
+    <!-- 
+    1.  Generate a server.key with 2048bit:
+    -->
+1.  生成一个 2048 位的 server.key 文件：
+
+        openssl genrsa -out server.key 2048
+
+    <!-- 
+    1.  Create a config file for generating a Certificate Signing Request (CSR).
+    Be sure to substitute the values marked with angle brackets (e.g. `<MASTER_IP>`)
+    with real values before saving this to a file (e.g. `csr.conf`).
+    Note that the value for `MASTER_CLUSTER_IP` is the service cluster IP for the
+    API server as described in previous subsection.
+    The sample below also assumes that you are using `cluster.local` as the default
+    DNS domain name.
+    -->
+1.  创建一个用于生成证书签名请求（CSR）的配置文件。
+    保存文件（例如：`csr.conf`）前，记得用真实值替换掉尖括号中的值（例如：`<MASTER_IP>`）。
+    注意：`MASTER_CLUSTER_IP` 就像前一小节所述，它的值是 API 服务器的服务集群 IP。
+    下面的例子假定你的默认 DNS 域名为 `cluster.local`。
+
+        [ req ]
+        default_bits = 2048
+        prompt = no
+        default_md = sha256
+        req_extensions = req_ext
+        distinguished_name = dn
+
+        [ dn ]
+        C = <country>
+        ST = <state>
+        L = <city>
+        O = <organization>
+        OU = <organization unit>
+        CN = <MASTER_IP>
+
+        [ req_ext ]
+        subjectAltName = @alt_names
+
+        [ alt_names ]
+        DNS.1 = kubernetes
+        DNS.2 = kubernetes.default
+        DNS.3 = kubernetes.default.svc
+        DNS.4 = kubernetes.default.svc.cluster
+        DNS.5 = kubernetes.default.svc.cluster.local
+        IP.1 = <MASTER_IP>
+        IP.2 = <MASTER_CLUSTER_IP>
+
+        [ v3_ext ]
+        authorityKeyIdentifier=keyid,issuer:always
+        basicConstraints=CA:FALSE
+        keyUsage=keyEncipherment,dataEncipherment
+        extendedKeyUsage=serverAuth,clientAuth
+        subjectAltName=@alt_names
+
+    <!-- 
+    1.  Generate the certificate signing request based on the config file:
+    -->
+1.  基于上面的配置文件生成证书签名请求：
+
+        openssl req -new -key server.key -out server.csr -config csr.conf
+
+    <!-- 
+    1.  Generate the server certificate using the ca.key, ca.crt and server.csr:
+    -->
+1.  基于 ca.key、ca.key 和 server.csr 等三个文件生成服务端证书：
+
+        openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
+        -CAcreateserial -out server.crt -days 10000 \
+        -extensions v3_ext -extfile csr.conf
+
+    <!-- 
+    1.  View the certificate:
+    -->
+1.  查看证书：
+
+        openssl x509  -noout -text -in ./server.crt
+
+<!-- 
+Finally, add the same parameters into the API server start parameters.
+-->
+最后，为 API 服务器添加相同的启动参数。
+
+### cfssl
+
+<!-- 
+**cfssl** is another tool for certificate generation.
+-->
+**cfssl** 是另一个用于生成证书的工具。
+
+<!-- 
+1.  Download, unpack and prepare the command line tools as shown below.
+    Note that you may need to adapt the sample commands based on the hardware
+    architecture and cfssl version you are using.
+-->
+1.  下载、解压并准备如下所示的命令行工具。
+    注意：你可能需要根据所用的硬件体系架构和 cfssl 版本调整示例命令。
+
+        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl_1.5.0_linux_amd64 -o cfssl
+        chmod +x cfssl
+        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssljson_1.5.0_linux_amd64 -o cfssljson
+        chmod +x cfssljson
+        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl-certinfo_1.5.0_linux_amd64 -o cfssl-certinfo
+        chmod +x cfssl-certinfo
+
+    <!-- 
+    1.  Create a directory to hold the artifacts and initialize cfssl:
+    -->
+1.  创建一个目录，用它保存所生成的构件和初始化 cfssl：
+
+        mkdir cert
+        cd cert
+        ../cfssl print-defaults config > config.json
+        ../cfssl print-defaults csr > csr.json
+
+    <!-- 
+    1.  Create a JSON config file for generating the CA file, for example, `ca-config.json`:
+    -->
+1.  创建一个 JSON 配置文件来生成 CA 文件，例如：`ca-config.json`：
+
+        {
+          "signing": {
+            "default": {
+              "expiry": "8760h"
+            },
+            "profiles": {
+              "kubernetes": {
+                "usages": [
+                  "signing",
+                  "key encipherment",
+                  "server auth",
+                  "client auth"
+                ],
+                "expiry": "8760h"
+              }
+            }
+          }
+        }
+
+    <!-- 
+    1.  Create a JSON config file for CA certificate signing request (CSR), for example,
+    `ca-csr.json`. Be sure to replace the values marked with angle brackets with
+    real values you want to use.
+    -->
+1.  创建一个 JSON 配置文件，用于 CA 证书签名请求（CSR），例如：`ca-csr.json`。
+    确认用你需要的值替换掉尖括号中的值。
+
+        {
+          "CN": "kubernetes",
+          "key": {
+            "algo": "rsa",
+            "size": 2048
+          },
+          "names":[{
+            "C": "<country>",
+            "ST": "<state>",
+            "L": "<city>",
+            "O": "<organization>",
+            "OU": "<organization unit>"
+          }]
+        }
+
+    <!-- 
+    1.  Generate CA key (`ca-key.pem`) and certificate (`ca.pem`):
+    -->
+1.  生成 CA 秘钥文件（`ca-key.pem`）和证书文件（`ca.pem`）：
+
+        ../cfssl gencert -initca ca-csr.json | ../cfssljson -bare ca
+
+    <!-- 
+    1.  Create a JSON config file for generating keys and certificates for the API
+    server, for example, `server-csr.json`. Be sure to replace the values in angle brackets with
+    real values you want to use. The `MASTER_CLUSTER_IP` is the service cluster
+    IP for the API server as described in previous subsection.
+    The sample below also assumes that you are using `cluster.local` as the default
+    DNS domain name.
+    -->
+1.  创建一个 JSON 配置文件，用来为 API 服务器生成秘钥和证书，例如：`server-csr.json`。
+    确认用你需要的值替换掉尖括号中的值。`MASTER_CLUSTER_IP` 是为 API 服务器 指定的服务集群 IP，就像前面小节描述的那样。
+    以下示例假定你的默认 DSN 域名为`cluster.local`。
+
+        {
+          "CN": "kubernetes",
+          "hosts": [
+            "127.0.0.1",
+            "<MASTER_IP>",
+            "<MASTER_CLUSTER_IP>",
+            "kubernetes",
+            "kubernetes.default",
+            "kubernetes.default.svc",
+            "kubernetes.default.svc.cluster",
+            "kubernetes.default.svc.cluster.local"
+          ],
+          "key": {
+            "algo": "rsa",
+            "size": 2048
+          },
+          "names": [{
+            "C": "<country>",
+            "ST": "<state>",
+            "L": "<city>",
+            "O": "<organization>",
+            "OU": "<organization unit>"
+          }]
+        }
+
+    <!-- 
+    1.  Generate the key and certificate for the API server, which are by default
+    saved into file `server-key.pem` and `server.pem` respectively:
+    -->
+1.  为 API 服务器生成秘钥和证书，默认会分别存储为`server-key.pem` 和 `server.pem` 两个文件。
+
+        ../cfssl gencert -ca=ca.pem -ca-key=ca-key.pem \
+        --config=ca-config.json -profile=kubernetes \
+        server-csr.json | ../cfssljson -bare server
+
+<!-- 
+## Distributing Self-Signed CA Certificate
+-->
+## 分发自签名的 CA 证书
+
+<!-- 
+A client node may refuse to recognize a self-signed CA certificate as valid.
+For a non-production deployment, or for a deployment that runs behind a company
+firewall, you can distribute a self-signed CA certificate to all clients and
+refresh the local list for valid certificates.
+
+On each client, perform the following operations:
+-->
+客户端节点可能不认可自签名 CA 证书的有效性。
+对于非生产环境，或者运行在公司防火墙后的环境，你可以分发自签名的 CA 证书到所有客户节点，并刷新本地列表以使证书生效。
+
+在每一个客户节点，执行以下操作：
+
+```bash
+sudo cp ca.crt /usr/local/share/ca-certificates/kubernetes.crt
+sudo update-ca-certificates
+```
+
+```
+Updating certificates in /etc/ssl/certs...
+1 added, 0 removed; done.
+Running hooks in /etc/ca-certificates/update.d....
+done.
+```
+
+<!-- 
+## Certificates API
+-->
+## 证书 API {#certificates-api}
+
+<!-- 
+You can use the `certificates.k8s.io` API to provision
+x509 certificates to use for authentication as documented
+[here](/docs/tasks/tls/managing-tls-in-a-cluster).
+-->
+你可以通过 `certificates.k8s.io` API 提供 x509 证书，用来做身份验证，
+如[本](/zh/docs/tasks/tls/managing-tls-in-a-cluster)文档所述。
+

From cffd9c7f3926c2823a73947c0b4695303c0164bc Mon Sep 17 00:00:00 2001
From: joao brito junior <juniorjbn@gmail.com>
Date: Sat, 6 Mar 2021 13:49:42 -0300
Subject: [PATCH 108/788] Add Dont Panic blog post in pt language (#26758)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Add Dont Panic blog post in pt language

Add Dont Panic blog post in pt language.

Partial fix for kubernetes #13939

* Update content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update 2020-12-02-dont-panic-kubernetes-and-docker.md

typo  `:%s/\<kubernetes\>/Kubernetes/gc` and  `:%s/é/e`

* Update 2020-12-02-dont-panic-kubernetes-and-docker.md

removendo depreciação e arrumando typos

* remove enterprise name

* Update content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

Update content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

Update 2020-12-02-dont-panic-kubernetes-and-docker.md

typo  `:%s/\<kubernetes\>/Kubernetes/gc` and  `:%s/é/e`

Update 2020-12-02-dont-panic-kubernetes-and-docker.md

removendo depreciação e arrumando typos

remove enterprise name

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 ...-12-02-dont-panic-kubernetes-and-docker.md | 45 +++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md

diff --git a/content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md b/content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
new file mode 100644
index 0000000000..ada16762a0
--- /dev/null
+++ b/content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
@@ -0,0 +1,45 @@
+---
+layout: blog
+title: "Não entre em pânico: Kubernetes e Docker"
+date: 2020-12-02
+slug: dont-panic-kubernetes-and-docker
+---
+
+**Autores / Autoras**: Jorge Castro, Duffie Cooley, Kat Cosgrove, Justin Garrison, Noah Kantrowitz, Bob Killen, Rey Lejano, Dan “POP” Papandrea, Jeffrey Sica, Davanum “Dims” Srinivas
+
+**Tradução:** João Brito
+
+Kubernetes está [deixando de usar Docker](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#deprecation) como seu agente de execução após a versão v1.20.
+
+**Não entre em pânico. Não é tão dramático quanto parece.**
+
+TL;DR Docker como um agente de execução primário está sendo deixado de lado em favor de agentes de execução que utilizam a Interface de Agente de Execução de Containers (Container Runtime Interface "CRI") criada para o Kubernetes. As imagens criadas com o Docker continuarão a funcionar em seu cluster com os agentes atuais, como sempre estiveram.
+
+Se você é um usuário final de Kubernetes, quase nada mudará para você. Isso não significa a morte do Docker, e isso não significa que você não pode, ou não deva, usar ferramentas Docker em desenvolvimento mais. Docker ainda é uma ferramenta útil para a construção de containers, e as imagens resultantes de executar `docker build` ainda rodarão em seu cluster Kubernetes.
+
+Se você está usando um Kubernetes gerenciado como GKE, EKS, ou AKS (que usa como [padrão containerd](https://github.com/Azure/AKS/releases/tag/2020-11-16)) você precisará ter certeza que seus nós estão usando um agente de execução de container suportado antes que o suporte ao Docker seja removido nas versões futuras do Kubernetes. Se você tem mudanças em seus nós, talvez você precise atualizá-los baseado em seu ambiente e necessidades do agente de execução.
+
+Se você está rodando seus próprios clusters, você também precisa fazer mudanças para evitar quebras em seu cluster. Na versão v1.20, você terá o aviso de alerta da perda de suporte ao Docker. Quando o suporte ao agente de execução do Docker for removido em uma versão futura (atualmente planejado para a versão 1.22 no final de 2021) do Kubernetes ele não será mais suportado e você precisará trocar para um dos outros agentes de execução de container compatível, como o containerd ou CRI-O. Mas tenha certeza que esse agente de execução escolhido tenha suporte às configurações do daemon do Docker usadas atualmente (Ex.: logs)
+
+## Então porque a confusão e toda essa turma surtando? 
+
+Estamos falando aqui de dois ambientes diferentes, e isso está criando essa confusão. Dentro do seu cluster Kubernetes, existe uma coisa chamada de agente de execução de container que é responsável por baixar e executar as imagens de seu container. Docker é a escolha popular para esse agente de execução (outras escolhas comuns incluem containerd e CRI-O), mas Docker não foi projetado para ser embutido no Kubernetes, e isso causa problemas.
+
+Se liga, o que chamamos de "Docker" não é exatamente uma coisa - é uma stack tecnológica inteira, e uma parte disso é chamado de "containerd", que é o agente de execução de container de alto-nível por si só. Docker é legal e útil porque ele possui muitas melhorias de experiência do usuário e isso o torna realmente fácil para humanos interagirem com ele enquanto estão desenvolvendo, mas essas melhorias para o usuário não são necessárias para o Kubernetes, pois ele não é humano.
+
+Como resultado dessa camada de abstração amigável aos humanos, seu cluster Kubernetes precisa usar outra ferramenta chamada Dockershim para ter o que ele realmente precisa, que é o containerd. Isso não é muito bom, porque adiciona outra coisa a ser mantida e que pode quebrar. O que está atualmente acontecendo aqui é que o Dockershim está sendo removido do Kubelet assim que que a versão v1.23 for lançada, que remove o suporte ao Docker como agente de execução de container como resultado. Você deve estar pensando, mas se o containerd está incluso na stack do Docker, porque o Kubernetes precisa do Dockershim?
+
+Docker não é compatível com CRI, a [Container Runtime Interface](https://kubernetes.io/blog/2016/12/container-runtime-interface-cri-in-kubernetes/) (interface do agente de execução de container). Se fosse, nós não precisaríamos do shim, e isso não seria nenhum problema. Mas isso não é o fim do mundo, e você não precisa entrar em pânico - você só precisa mudar seu agente de execução de container do Docker para um outro suportado.
+
+Uma coisa a ser notada: Se você está contando com o socket do Docker (`/var/run/docker.sock`) como parte do seu fluxo de trabalho em seu cluster hoje, mover para um agente de execução diferente acaba com sua habilidade de usá-lo. Esse modelo é conhecido como Docker em Docker. Existem diversas opções por aí para esse caso específico como o [kaniko](https://github.com/GoogleContainerTools/kaniko), [img](https://github.com/genuinetools/img), e [buildah](https://github.com/containers/buildah). 
+
+## O que essa mudança representa para os desenvolvedores?  Ainda escrevemos Dockerfiles? Ainda vamos fazer build com Docker?
+
+Essa mudança aborda um ambiente diferente do que a maioria das pessoas usa para interagir com Docker. A instalação do Docker que você está usando em desenvolvimento não tem relação com o agente de execução de Docker dentro de seu cluster Kubernetes. É confuso, dá pra entender. 
+Como desenvolvedor, Docker ainda é útil para você em todas as formas que era antes dessa mudança ser anunciada. A imagem que o Docker cria não é uma imagem específica para Docker e sim uma imagem que segue o padrão OCI ([Open Container Initiative](https://opencontainers.org/)).
+
+Qualquer imagem compatível com OCI, independente da ferramenta usada para construí-la será vista da mesma forma pelo Kubernetes. Ambos [containerd](https://containerd.io/) e [CRI-O](https://cri-o.io/) sabem como baixar e executá-las. Esse é o porque temos um padrão para containers.
+
+Então, essa mudança está chegando. Isso irá causar problemas para alguns, mas nada catastrófico, no geral é uma boa coisa. Dependendo de como você interage com o Kubernetes, isso tornará as coisas mais fáceis. Se isso ainda é confuso para você, tudo bem, tem muita coisa rolando aqui; Kubernetes tem um monte de partes móveis, e ninguém é 100% especialista nisso. Nós encorajamos toda e qualquer tipo de questão independente do nível de experiência ou de complexidade! Nosso objetivo é ter certeza que todos estão entendendo o máximo possível as mudanças que estão chegando. Esperamos que isso tenha respondido a maioria de suas questões e acalmado algumas ansiedades! ❤️
+
+Procurando mais respostas? Dê uma olhada em nosso apanhado de [questões quanto ao desuso do Dockershim](/blog/2020/12/02/dockershim-faq/).

From de87f4501b91374e4b5396c0d7344fde1b0caa2f Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio2020@gmail.com>
Date: Sat, 6 Mar 2021 20:01:19 -0300
Subject: [PATCH 109/788] Add
 content/pt/docs/concepts/containers/container-environment.md

---
 .../concepts/containers/container-environment.md | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/pt/docs/concepts/containers/container-environment.md b/content/pt/docs/concepts/containers/container-environment.md
index 2b879eeb12..8670f0fdc4 100644
--- a/content/pt/docs/concepts/containers/container-environment.md
+++ b/content/pt/docs/concepts/containers/container-environment.md
@@ -2,7 +2,7 @@
 reviewers:
  - femrtnz
  - jcjesus
-title: Ambiente de contêiner
+title: Ambiente de Contêiner
 content_type: concept
 weight: 20
 ---
@@ -25,17 +25,17 @@ O ambiente de contêiner do Kubernetes fornece recursos importantes para contêi
 
 ### Informação de contêiner
 
-O _hostname_ de um contêiner é o nome do pod em que o contîner está executando.
-Isso é disponível através do comando `hostname` ou da função [`gethostname`](https://man7.org/linux/man-pages/man2/gethostname.2.html) chamada na libc.
+O _hostname_ de um contêiner é o nome do Pod em que o contêiner está executando.
+Isso é disponibilizado através do comando `hostname` ou da função [`gethostname`](https://man7.org/linux/man-pages/man2/gethostname.2.html) chamada na libc.
 
-O nome do pod e o namespace sáo disponíveis como variáveis de ambiente atráves do [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/).
+O nome do Pod e o Namespace são disponibilizados como variáveis de ambiente através do [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/).
 
-Variáveis de ambiente definidas pelo usuário a partir da definição do pod também são disponíveis para o contêiner, assim como qualquer variável de ambiente especificada estáticamente na imagem Docker.
+Variáveis de ambiente definidas pelo usuário a partir da definição do Pod também são disponíveis para o contêiner, assim como qualquer variável de ambiente especificada estáticamente na imagem Docker.
 
 ### Informação do cluster
 
-Uma lista de todos os serviços que estáo executando quando um contêiner é criado é disponibilizada para o contêiner como variáveis de ambiente.
-Essas variáveis de ambiente correspondem a sintaxa dos links Docker.
+Uma lista de todos os serviços que estão executando quando um contêiner é criado é disponibilizada para o contêiner como variáveis de ambiente.
+Essas variáveis de ambiente correspondem a sintaxe dos links Docker.
 
 Para um serviço nomeado *foo* que mapeia para um contêiner nomeado *bar*, as seguintes variáveis são definidas:
 
@@ -45,7 +45,7 @@ FOO_SERVICE_PORT=<a porta em que o serviço está executando>
 ```
 
 Serviços possuem endereço IP dedicado e são disponibilizados para o contêiner via DNS,
-se possuirem [DNS addon](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/dns/) habilitado.
+se possuírem [DNS addon](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/dns/) habilitado.
 
 
 

From 7bc3a7d809c5c46b0451bc11447d59d029e2b324 Mon Sep 17 00:00:00 2001
From: colstuwjx <colstuwjx@gmail.com>
Date: Sun, 7 Mar 2021 09:11:49 +0800
Subject: [PATCH 110/788] feat: add print directive allows print sections.

---
 config.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.toml b/config.toml
index d77c315331..04329284d8 100644
--- a/config.toml
+++ b/config.toml
@@ -91,7 +91,7 @@ blog = "/:section/:year/:month/:day/:slug/"
 [outputs]
 home = [ "HTML", "RSS", "HEADERS" ]
 page = [ "HTML"]
-section = [ "HTML"]
+section = [ "HTML", "print" ]
 
 # Add a "text/netlify" media type for auto-generating the _headers file
 [mediaTypes]

From ed5fd4a7e7d522ea2d9f2c93f326f48ff59547d1 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Sun, 7 Mar 2021 15:30:32 +0800
Subject: [PATCH 111/788] [zh] Sync setup pages for
 manage-kubernetes-objects\kustomization.md

* Sync with english version in 'chore: fix an invalid location.hash (#26835)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../zh/docs/tasks/manage-kubernetes-objects/kustomization.md  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
index e3093d64d9..07cda09588 100644
--- a/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -13,10 +13,10 @@ weight: 20
 <!--
 [Kustomize](https://github.com/kubernetes-sigs/kustomize) is a standalone tool
 to customize Kubernetes objects
-through a [kustomization file](https://kubernetes-sigs.github.io/kustomize/api-reference/glossary/#kustomization).
+through a [kustomization file](https://kubectl.docs.kubernetes.io/references/kustomize/glossary/#kustomization).
 -->
 [Kustomize](https://github.com/kubernetes-sigs/kustomize) 是一个独立的工具，用来通过
-[kustomization 文件](https://kubernetes-sigs.github.io/kustomize/api-reference/glossary/#kustomization)
+[kustomization 文件](https://kubectl.docs.kubernetes.io/references/kustomize/glossary/#kustomization)
 定制 Kubernetes 对象。
 
 <!--

From 5dba292da3b2056255510fd9a41eae471b1a0672 Mon Sep 17 00:00:00 2001
From: vazmin <chwingwong@outlook.com>
Date: Sun, 7 Mar 2021 17:21:54 +0800
Subject: [PATCH 112/788] Fix CSI spec URL

---
 content/zh/docs/concepts/storage/volumes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/storage/volumes.md b/content/zh/docs/concepts/storage/volumes.md
index 4c49adb4b2..66e8d34718 100644
--- a/content/zh/docs/concepts/storage/volumes.md
+++ b/content/zh/docs/concepts/storage/volumes.md
@@ -2087,7 +2087,7 @@ persistent volume:
 -->
 - `volumeHandle`：唯一标识卷的字符串值。
   该值必须与 CSI 驱动在 `CreateVolumeResponse` 的 `volume_id` 字段中返回的值相对应；
-  接口定义在 [CSI spec](https://github.com/container-storageinterface/spec/blob/master/spec.md#createvolume) 中。
+  接口定义在 [CSI spec](https://github.com/container-storage-interface/spec/blob/master/spec.md#createvolume) 中。
   在所有对 CSI 卷驱动程序的调用中，引用该 CSI 卷时都使用此值作为 `volume_id` 参数。
 
 <!--

From e5a17756a4057c17b438fe745c516dea67b533a5 Mon Sep 17 00:00:00 2001
From: Nikhita Raghunath <nikitaraghunath@gmail.com>
Date: Sun, 7 Mar 2021 15:01:32 +0530
Subject: [PATCH 113/788] Remove feature-state tag for categories for CRDs

The Categories field for CRDs was documented as beta in 1.10 in #7439
mainly because CRDs were in beta back then.

The `feature-state` tag for this section was added in #2754, however
this section doesn't need a `feature-state` tag because the field is not
gated by any feature gate:

https://github.com/kubernetes/kubernetes/blob/90851a0fb5bbb6f02b3c22715f9f91609f8ee438/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/types.go#L247-L251

It is now safe to remove the feature-state tag. Moreover, CRDs are now
GA so the beta state is not accurate.
---
 .../custom-resources/custom-resource-definitions.md             | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
index de9ab8181c..62251eb222 100644
--- a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
+++ b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
@@ -1129,8 +1129,6 @@ resources that have the scale subresource enabled.
 
 ### Categories
 
-{{< feature-state state="beta" for_k8s_version="v1.10" >}}
-
 Categories is a list of grouped resources the custom resource belongs to (eg. `all`).
 You can use `kubectl get <category-name>` to list the resources belonging to the category.
 

From 1e77a684c2c0b622d2a19f976a16654dca9c6b2f Mon Sep 17 00:00:00 2001
From: Andy Zhang <xiazhang@microsoft.com>
Date: Sun, 7 Mar 2021 21:28:40 +0800
Subject: [PATCH 114/788] Update content/en/docs/concepts/storage/volumes.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/docs/concepts/storage/volumes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index d7eb7a1679..664ba515f9 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -159,7 +159,7 @@ from the existing in-tree plugin to the `file.csi.azure.com` Container
 Storage Interface (CSI) Driver. In order to use this feature, the [Azure File CSI
 Driver](https://github.com/kubernetes-sigs/azurefile-csi-driver)
 must be installed on the cluster and the `CSIMigration` and `CSIMigrationAzureFile`
-features must be enabled.
+[feature gates](/docs/reference/command-line-tools-reference/feature-gates/) must be enabled.
 
 ### cephfs
 

From ce4d342369f3c61ed5a73751f586c3cad26c8f55 Mon Sep 17 00:00:00 2001
From: Soichiro KAWAMURA <mail@w-st.com>
Date: Sun, 7 Mar 2021 23:00:31 +0900
Subject: [PATCH 115/788] add Japanese translation of
 pod-priority-preemption.md

---
 .../configuration/pod-priority-preemption.md  | 241 ++++++++++++++++++
 1 file changed, 241 insertions(+)
 create mode 100644 content/ja/docs/concepts/configuration/pod-priority-preemption.md

diff --git a/content/ja/docs/concepts/configuration/pod-priority-preemption.md b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
new file mode 100644
index 0000000000..eb2ee65956
--- /dev/null
+++ b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
@@ -0,0 +1,241 @@
+---
+title: Podの優先度とプリエンプション
+content_type: concept
+weight: 70
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.14" state="stable" >}}
+
+[Pod](/docs/concepts/workloads/pods/)は _priority_（優先度）を持つことができます。 
+優先度は他のPodに対する相対的なPodの重要度を示します。
+もしPodをスケジューリングできないときには、スケジューラーはそのPodをスケジューリングできるようにするため、優先度の低いPodをプリエンプトする（追い出す）ことを試みます。
+
+
+
+<!-- body -->
+
+
+{{< warning >}}
+クラスターの全てのユーザーが信用されていない場合、悪意のあるユーザーが可能な範囲で最も高い優先度のPodを作成することが可能です。これは他のPodが追い出されたりスケジューリングできない状態を招きます。
+管理者はResourceQuotaを使用して、ユーザーがPodを高い優先度で作成することを防ぐことができます。
+
+詳細は[デフォルトで優先度クラスの消費を制限する](/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+を参照してください。
+{{< /warning >}}
+
+## 優先度とプリエンプションを使う方法
+
+優先度とプリエンプションを使うには、
+
+1.  1つまたは複数の[PriorityClass](#priorityclass)を追加します
+
+1.  追加したPriorityClassを[`priorityClassName`](#pod-priority)に設定したPodを作成します。
+    もちろんPodを直接作る必要はありません。
+    一般的には`priorityClassName`をDeploymentのようなコレクションオブジェクトのPodテンプレートに追加します。
+
+これらの手順のより詳しい情報については、この先を読み進めてください。
+
+{{< note >}}
+Kubernetesには最初から既に2つのPriorityClassが設定された状態になっています。
+`system-cluster-critical`と`system-node-critical`です。
+これらは汎用のクラスであり、[重要なコンポーネントが常に最初にスケジュールされることを保証する](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/)ために使われます。
+{{< /note >}}
+
+## PriorityClass
+
+PriorityClassはnamespaceによらないオブジェクトで、優先度クラスの名称から優先度を表す整数値への対応を定義します。
+PriorityClassオブジェクトのメタデータの`name`フィールドにて名称を指定します。
+値は`value`フィールドで指定し、必須です。
+値が大きいほど、高い優先度を示します。
+PriorityClassオブジェクトの名称は[DNSサブドメイン名](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)として適切であり、かつ`system-`から始まらないことが必要です。
+
+PriorityClassオブジェクトは10億以下の任意の32ビットの整数値を持つことができます。
+それよりも大きな値は通常はプリエンプトや追い出すべきではない重要なシステム用のPodのために予約されています。
+クラスターの管理者は割り当てたい優先度に対して、PriorityClassオブジェクトを1つずつ作成すべきです。
+
+PriorityClassは任意でフィールド`globalDefault`と`description`を設定可能です。
+`globalDefault`フィールドは`priorityClassName`が指定されないPodはこのPriorityClassを使うべきであることを示します。`globalDefault`が設定されたPriorityClassはシステムで一つのみ存在可能です。`globalDefault`が設定されたPriorityClassが存在しない場合は、`priorityClassName`が設定されていないPodの優先度は0に設定されます。
+
+`description`フィールドは任意の文字列です。クラスターの利用者に対して、PriorityClassをどのような時に使うべきか示すことを意図しています。
+
+### PodPriorityと既存のクラスターに関する注意
+
+-   もし既存のクラスターをこの機能がない状態でアップグレードすると、既存のPodの優先度は実質的に0になります。
+
+-   `globalDefault`が`true`に設定されたPriorityClassを追加しても、既存のPodの優先度は変わりません。PriorityClassのそのような値は、PriorityClassが追加された以後に作成されたPodのみに適用されます。
+
+-   PriorityClassを削除した場合、既存のPodは削除されたPriorityClassの名称を引き続き使用しますが、削除されたPriorityClassの名称を使うPodをそれ以上作成することはできなくなります。
+
+### PriorityClassの例
+
+```yaml
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: high-priority
+value: 1000000
+globalDefault: false
+description: "この優先度クラスはXYZサービスのPodに対してのみ使用すべきです。"
+```
+
+## 非プリエンプトのPriorityClass {#non-preempting-priority-class}
+
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+
+`PreemptionPolicy: Never`と設定されたPodは、スケジューリングのキューにおいて他の優先度の低いPodよりも優先されますが、他のPodをプリエンプトすることはありません。
+スケジューリングされるのを待つ非プリエンプトのPodは、リソースが十分に利用可能になるまでスケジューリングキューに残ります。
+非プリエンプトのPodは、他のPodと同様に、スケジューラーのバックオフの対象になります。これは、スケジューラーがPodをスケジューリングしようと試みたものの失敗した場合、低い頻度で再試行するようにして、より優先度の低いPodが先にスケジューリングされることを許します。
+
+非プリエンプトのPodは、他の優先度の高いPodにプリエンプトされる可能性はあります。
+
+`PreemptionPolicy`はデフォルトでは`PreemptLowerPriority`に設定されており、これが設定されているPodは優先度の低いPodをプリエンプトすることを許容します。これは既存のデフォルトの挙動です。
+`PreemptionPolicy`を`Never`に設定すると、これが設定されたPodはプリエンプトを行わないようになります。
+
+ユースケースの例として、データサイエンスの処理を挙げます。
+ユーザーは他の処理よりも優先度を高くしたいジョブを追加できますが、そのとき既存の実行中のPodの処理結果をプリエンプトによって捨てさせたくはありません。
+`PreemptionPolicy: Never`が設定された優先度の高いジョブは、他の既にキューイングされたPodよりも先に、クラスターのリソースが「自然に」開放されたときにスケジューリングされます。
+
+### 非プリエンプトのPriorityClassの例
+
+```yaml
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: high-priority-nonpreempting
+value: 1000000
+preemptionPolicy: Never
+globalDefault: false
+description: "この優先度クラスは他のPodをプリエンプトさせません。"
+```
+
+## Podの優先度
+
+一つ以上のPriorityClassがあれば、仕様にPriorityClassを指定したPodを作成することができるようになります。優先度のアドミッションコントローラーは`priorityClassName`フィールドを使用し、優先度の整数値を設定します。PriorityClassが見つからない場合、そのPodの作成は拒否されます。
+
+下記のYAMLは上記の例で作成したPriorityClassを使用するPodの設定の例を示します。優先度のアドミッションコントローラーは仕様を確認し、このPodの優先度は1000000であると設定します。
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: nginx
+  labels:
+    env: test
+spec:
+  containers:
+  - name: nginx
+    image: nginx
+    imagePullPolicy: IfNotPresent
+  priorityClassName: high-priority
+```
+
+### スケジューリング順序におけるPodの優先度の効果
+
+Podの優先度が有効な場合、スケジューラーは待機状態のPodをそれらの優先度順に並べ、スケジューリングキューにおいてより優先度の低いPodよりも前に来るようにします。その結果、その条件を満たしたときには優先度の高いPodは優先度の低いPodより早くスケジューリングされます。優先度の高いPodがスケジューリングできない場合は、スケジューラーは他の優先度の低いPodのスケジューリングも試みます。
+
+## プリエンプション
+
+Podが作成されると、スケジューリング待ちのキューに入り待機状態になります。スケジューラーはキューからPodを取り出し、ノードへのスケジューリングを試みます。Podに指定された条件を全て満たすノードが見つからない場合は、待機状態のPodのためにプリエンプションロジックが発動します。待機状態のPodをPと呼ぶことにしましょう。プリエンプションロジックはPよりも優先度の低いPodを一つ以上追い出せばPをスケジューリングできるようになるノードを探します。そのようなノードがあれば、優先度の低いPodはノードから追い出されます。Podが追い出された後に、Pはノードへスケジューリング可能になります。
+
+### ユーザーへ開示される情報
+
+Pod PがノードNのPodをプリエンプトした場合、ノードNの名称がPのステータスの`nominatedNodeName`フィールドに設定されます。このフィールドはスケジューラーがPod Pのために予約しているリソースの追跡を助け、ユーザーにクラスターにおけるプリエンプトに関する情報を与えます。
+
+Pod Pは「指名したノード」へスケジューリングされる必要はないことに注意してください。Podがプリエンプトされると、そのPodは猶予期間を得ます。スケジューラーがPodの終了を待つ間に他のノードが利用可能になると、スケジューラーは他のノードをPod Pのスケジューリング先にします。この結果、Podの`nominatedNodeName`と`nodeName`は必ずしも一致しません。また、スケジューラーがノードNのPodをプリエンプトさせた後に、Pod Pよりも優先度の高いPodが来た場合、スケジューラーはノードNをその新しい優先度の高いPodへ与えます。このような場合は、スケジューラーはPod Pの`nominatedNodeName`を消去します。これによって、スケジューラーはPod Pが他のノードのPodをプリエンプトさせられるようにします。
+
+### プリエンプトの制限
+
+#### プリエンプトされるPodの正常終了
+
+Podがプリエンプトされると、[猶予期間](/ja/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)が与えられます。
+
+Podは作業を完了し、終了するために十分な時間が与えられます。仮にそうでない場合、強制終了されます。この猶予期間によって、スケジューラーがPodをプリエンプトした時刻と、待機状態のPod Pがノード Nにスケジュール可能になるまでの時刻の間に間が開きます。この間、スケジューラーは他の待機状態のPodをスケジュールしようと試みます。プリエンプトされたPodが終了したら、スケジューラーは待ち行列にあるPodをスケジューリングしようと試みます。そのため、Podがプリエンプトされる時刻と、Pがスケジュールされた時刻には間が開くことが一般的です。この間を最小にするには、優先度の低いPodの猶予期間を0または小さい値にする方法があります。
+
+#### PodDisruptionBudgetは対応するが、保証されない
+
+[PodDisruptionBudget](/docs/concepts/workloads/pods/disruptions/) (PDB)は、アプリケーションのオーナーが冗長化されたアプリケーションのPodが意図的に中断される数の上限を設定できるようにするものです。KubernetesはPodをプリエンプトする際にPDBに対応しますが、PDBはベストエフォートで考慮します。スケジューラーはプリエンプトさせたとしてもPDBに違反しないPodを探します。そのようなPodが見つからない場合でもプリエンプションは実行され、PDBに反しますが優先度の低いPodが追い出されます。
+
+#### 優先度の低いPodにおけるPod間のアフィニティ
+
+次の条件が真の場合のみ、ノードはプリエンプションの候補に入ります。
+「待機状態のPodよりも優先度の低いPodをノードから全て追い出したら、待機状態のPodをノードへスケジュールできるか」
+
+{{< note >}}
+プリエンプションは必ずしも優先度の低いPodを全て追い出しません。
+優先度の低いPodを全て追い出さなくても待機状態のPodがスケジューリングできる場合、一部のPodのみ追い出されます。
+このような場合であったとしても、上記の条件は真である必要があります。偽であれば、そのノードはプリエンプションの対象とはされません。
+{{< /note >}}
+
+待機状態のPodが、優先度の低いPodとの間でPod間のアフィニティを持つ場合、Pod間のアフィニティはそれらの優先度の低いPodがなければ満たされません。この場合、スケジューラーはノードのどのPodもプリエンプトしようとはせず、代わりに他のノードを探します。スケジューラーは適切なノードを探せる場合と探せない場合があります。この場合、待機状態のPodがスケジューリングされる保証はありません。
+
+この問題に対して推奨される解決策は、優先度が同一または高いPodに対してのみPod間のアフィニティを作成することです。
+
+#### 複数ノードに対するプリエンプション
+
+Pod PがノードNにスケジューリングできるよう、ノードNがプリエンプションの対象となったとします。
+他のノードのPodがプリエンプトされた場合のみPが実行可能になることもあります。下記に例を示します。
+
+*   Pod PをノードNに配置することを検討します。
+*   Pod QはノードNと同じゾーンにある別のノードで実行中です。
+*   Pod Pはゾーンに対するQへのアンチアフィニティを持ちます (`topologyKey: topology.kubernetes.io/zone`)。
+*   Pod Pと、ゾーン内の他のPodに対しては他のアンチアフィニティはない状態です。
+*   Pod PをノードNへスケジューリングするには、Pod Qをプリエンプトすることが考えられますが、スケジューラーは複数ノードにわたるプリエンプションは行いません。そのため、Pod PはノードNへはスケジューリングできないとみなされます。
+
+Pod Qがそのノードから追い出されると、Podアンチアフィニティに違反しなくなるので、Pod PはノードNへスケジューリング可能になります。
+
+複数ノードに対するプリエンプションに関しては、十分な需要があり、合理的な性能を持つアルゴリズムを見つけられた場合に、追加することを検討する可能性があります。
+
+## トラブルシューティング
+
+Podの優先度とプリエンプションは望まない副作用をもたらす可能性があります。
+いくつかの起こりうる問題と、その対策について示します。
+
+### Podが不必要にプリエンプトされる
+
+プリエンプションは、リソースが不足している場合に優先度の高い待機状態のPodのためにクラスターの既存のPodを追い出します。
+誤って高い優先度をPodに割り当てると、意図しない高い優先度のPodはクラスター内でプリエンプションを引き起こす可能性があります。Podの優先度はPodの仕様の`priorityClassName`フィールドにて指定されます。優先度を示す整数値へと変換された後、`podSpec`の`priority`へ設定されます。
+
+この問題に対処するには、Podの`priorityClassName`をより低い優先度に変更するか、このフィールドを未設定にすることができます。`priorityClassName`が未設定の場合、デフォルトでは優先度は0とされます。
+
+Podがプリエンプトされたとき、プリエンプトされたPodのイベントが記録されます。
+プリエンプションはPodに必要なリソースがクラスターにない場合のみ起こるべきです。
+このような場合、プリエンプションはプリエンプトされるPodよりも待機状態のPodの優先度が高い場合のみ発生します。
+プリエンプションは待機状態のPodがない場合や待機状態のPodがプリエンプト対象のPod以下の優先度を持つ場合には決して発生しません。そのような状況でプリエンプションが発生した場合、問題を報告してください。
+
+### Podはプリエンプトされたが、プリエンプトさせたPodがスケジューリングされない
+
+Podがプリエンプトされると、それらのPodが要求した猶予期間が与えられます。そのデフォルトは30秒です。
+Podがその期間内に終了しない場合、強制終了されます。プリエンプトされたPodがなくなれば、プリエンプトさせたPodはスケジューリング可能です。
+
+プリエンプトさせたPodがプリエンプトされたPodの終了を待っている間に、より優先度の高いPodが同じノードに対して作成されることもあります。この場合、スケジューラーはプリエンプトさせたPodの代わりに優先度の高いPodをスケジューリングします。
+
+これは予期された挙動です。優先度の高いPodは優先度の低いPodに取って代わります。
+
+### 優先度の高いPodが優先度の低いPodより先にプリエンプトされる
+
+スケジューラーは待機状態のPodが実行可能なノードを探します。ノードが見つからない場合、スケジューラーは任意のノードから優先度の低いPodを追い出し、待機状態のPodのためのリソースを確保しようとします。
+仮に優先度の低いPodが動いているノードが待機状態のPodを動かすために適切ではない場合、スケジューラーは他のノードで動いているPodと比べると、優先度の高いPodが動いているノードをプリエンプションの対象に選ぶことがあります。この場合もプリエンプトされるPodはプリエンプトを起こしたPodよりも優先度が低い必要があります。
+
+複数のノードがプリエンプションの対象にできる場合、スケジューラーは優先度が最も低いPodのあるノードを選ぼうとします。しかし、そのようなPodがPodDisruptionBudgetを持っており、プリエンプトするとPDBに反する場合はスケジューラーは優先度の高いPodのあるノードを選ぶこともあります。
+
+複数のノードがプリエンプションの対象として利用可能で、上記の状況に当てはまらない場合、スケジューラーは優先度の最も低いノードを選択します。
+
+## Podの優先度とQoSの相互作用 {#interactions-of-pod-priority-and-qos}
+
+Podの優先度と{{< glossary_tooltip text="QoSクラス" term_id="qos-class" >}}は直交する機能で、わずかに相互作用がありますが、デフォルトではQoSクラスによる優先度の設定の制約はありません。スケジューラーのプリエンプションのロジックはプリエンプションの対象を決めるときにQoSクラスは考慮しません。
+プリエンプションはPodの優先度を考慮し、優先度が最も低いものを候補とします。より優先度の高いPodは優先度の低いPodを追い出すだけではプリエンプトを起こしたPodのスケジューリングに不十分な場合と、`PodDisruptionBudget`により優先度の低いPodが保護されている場合のみ対象になります。
+
+QoSとPodの優先度の両方を考慮するコンポーネントは[リソース不足によりkubeletがPodを追い出す](/docs/tasks/administer-cluster/out-of-resource/)のみです。
+kubeletは追い出すPodの順位付けを次の順で行います。枯渇したリソースを要求以上に使用しているか、優先度、枯渇したリソースの消費量の複数のPodの要求に対する相対値。
+詳細は[エンドユーザーのPodの追い出し](/docs/tasks/administer-cluster/out-of-resource/#evicting-end-user-pods)を参照してください。
+
+
+kubeletによるリソース不足時のPodの追い出しでは、リソースの消費が要求を超えないPodは追い出されません。優先度の低いPodのリソースの利用量がその要求を超えていなければ、追い出されることはありません。より優先度が高く、要求を超えてリソースを使用しているPodが追い出されます。
+
+
+## {{% heading "whatsnext" %}}
+
+* PriorityClassと関連付けてResourceQuotaを使用することに関して [デフォルトで優先度クラスの消費を制限する](/ja/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+

From aabfd4d0a78958ffddd19cbad52660de830a882c Mon Sep 17 00:00:00 2001
From: Hugo Pfeffer <hugo.pguima@gmail.com>
Date: Sun, 7 Mar 2021 13:14:49 -0300
Subject: [PATCH 116/788] Update content/pt/docs/concepts/containers/images.md

femrtnz's suggestion

Co-authored-by: Felipe <felipemartinez+github@improbable.io>
---
 content/pt/docs/concepts/containers/images.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/pt/docs/concepts/containers/images.md b/content/pt/docs/concepts/containers/images.md
index eb85c5ed4b..74e7566088 100644
--- a/content/pt/docs/concepts/containers/images.md
+++ b/content/pt/docs/concepts/containers/images.md
@@ -47,7 +47,7 @@ Em vez disso, especifique uma tag significativa, como `v1.42.0`.
 A política padrão de pull é `IfNotPresent` a qual faz com que o
 {{<glossary_tooltip text = "kubelet" term_id = "kubelet">}} ignore 
 o processo de *pull* da imagem, caso a mesma já exista. Se você prefere sempre forçar o processo de *pull*, 
-você pode fazer como exemplo:
+você pode seguir uma da opções abaixo:
 
 - defina a `imagePullPolicy` do contêiner para` Always`.
 - omita `imagePullPolicy` e use`: latest` como a tag para a imagem a ser usada.
@@ -287,4 +287,4 @@ O Kubelet mesclará qualquer `imagePullSecrets` em um único `.docker/config.jso
 
 ## {{% heading "whatsnext" %}}
 
-* Leia a [OCI Image Manifest Specification](https://github.com/opencontainers/image-spec/blob/master/manifest.md)
\ No newline at end of file
+* Leia a [OCI Image Manifest Specification](https://github.com/opencontainers/image-spec/blob/master/manifest.md)

From 52d347b53ecb6efba85305a555df9275ed9f0402 Mon Sep 17 00:00:00 2001
From: Hugo Pfeffer <hugo.pguima@gmail.com>
Date: Sun, 7 Mar 2021 15:15:41 -0300
Subject: [PATCH 117/788] Update images.md

fixed typo at line 50
---
 content/pt/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/concepts/containers/images.md b/content/pt/docs/concepts/containers/images.md
index 74e7566088..01b45cb439 100644
--- a/content/pt/docs/concepts/containers/images.md
+++ b/content/pt/docs/concepts/containers/images.md
@@ -47,7 +47,7 @@ Em vez disso, especifique uma tag significativa, como `v1.42.0`.
 A política padrão de pull é `IfNotPresent` a qual faz com que o
 {{<glossary_tooltip text = "kubelet" term_id = "kubelet">}} ignore 
 o processo de *pull* da imagem, caso a mesma já exista. Se você prefere sempre forçar o processo de *pull*, 
-você pode seguir uma da opções abaixo:
+você pode seguir uma das opções abaixo:
 
 - defina a `imagePullPolicy` do contêiner para` Always`.
 - omita `imagePullPolicy` e use`: latest` como a tag para a imagem a ser usada.

From fb0fe10d2040ab9248a3c890a355297fd06520ce Mon Sep 17 00:00:00 2001
From: Felipe <felipemartinez+github@improbable.io>
Date: Sun, 7 Mar 2021 21:44:21 +0000
Subject: [PATCH 118/788] Update content/pt/docs/concepts/containers/images.md

Co-authored-by: Diego W. Antunes <devlware@gmail.com>
---
 content/pt/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/concepts/containers/images.md b/content/pt/docs/concepts/containers/images.md
index 01b45cb439..67c21e70f4 100644
--- a/content/pt/docs/concepts/containers/images.md
+++ b/content/pt/docs/concepts/containers/images.md
@@ -81,7 +81,7 @@ Essas opções são explicadas com mais detalhes abaixo.
 
 ### Configurando nós para autenticação em um registro privado
 
-Se você executar o Docker em seus nós, poderá configurar o contêiner do Docker
+Se você executar o Docker em seus nós, poderá configurar o contêiner runtime do Docker
 runtime para autenticação em um registro de contêiner privado.
 
 Essa abordagem é adequada se você puder controlar a configuração do nó.

From 86da7892dbb8234327c8c763bdf23c1b1d4ecc02 Mon Sep 17 00:00:00 2001
From: Felipe <felipemartinez+github@improbable.io>
Date: Sun, 7 Mar 2021 21:44:59 +0000
Subject: [PATCH 119/788] Update content/pt/docs/concepts/containers/images.md

Co-authored-by: Diego W. Antunes <devlware@gmail.com>
---
 content/pt/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/concepts/containers/images.md b/content/pt/docs/concepts/containers/images.md
index 67c21e70f4..27222cf5a8 100644
--- a/content/pt/docs/concepts/containers/images.md
+++ b/content/pt/docs/concepts/containers/images.md
@@ -82,7 +82,7 @@ Essas opções são explicadas com mais detalhes abaixo.
 ### Configurando nós para autenticação em um registro privado
 
 Se você executar o Docker em seus nós, poderá configurar o contêiner runtime do Docker
-runtime para autenticação em um registro de contêiner privado.
+para autenticação em um registro de contêiner privado.
 
 Essa abordagem é adequada se você puder controlar a configuração do nó.
 

From d2d6f7f3345b573f1abe5e4435fa61f9cb185d9c Mon Sep 17 00:00:00 2001
From: Felipe <felipemartinez+github@improbable.io>
Date: Sun, 7 Mar 2021 21:45:11 +0000
Subject: [PATCH 120/788] Update content/pt/docs/concepts/containers/images.md

Co-authored-by: Diego W. Antunes <devlware@gmail.com>
---
 content/pt/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/concepts/containers/images.md b/content/pt/docs/concepts/containers/images.md
index 27222cf5a8..6f8b81dd7c 100644
--- a/content/pt/docs/concepts/containers/images.md
+++ b/content/pt/docs/concepts/containers/images.md
@@ -119,7 +119,7 @@ exemplo, execute-os em seu desktop/laptop:
 
 {{< note >}}
 Para clusters de produção, use uma ferramenta de gerenciamento de configuração para que você possa aplicar esta
-configuração para todos os nós onde você precisa.
+configuração em todos os nós que você precisar.
 {{< /note >}}
 
 Verifique se está funcionando criando um pod que usa uma imagem privada; por exemplo:

From 07c5dbcbca062313c3603c396470269d97be20dd Mon Sep 17 00:00:00 2001
From: Abdullah Gharaibeh <ahg@google.com>
Date: Wed, 3 Mar 2021 12:12:42 -0500
Subject: [PATCH 121/788] Docs for pod affinity namespace selector and pod
 affinity corss-namespace quota scope.

---
 .../docs/concepts/policy/resource-quotas.md   | 58 +++++++++++++++++++
 .../scheduling-eviction/assign-pod-node.md    | 12 ++++
 .../feature-gates.md                          |  3 +
 3 files changed, 73 insertions(+)

diff --git a/content/en/docs/concepts/policy/resource-quotas.md b/content/en/docs/concepts/policy/resource-quotas.md
index bc5eca8754..034458b8e9 100644
--- a/content/en/docs/concepts/policy/resource-quotas.md
+++ b/content/en/docs/concepts/policy/resource-quotas.md
@@ -189,6 +189,7 @@ Resources specified on the quota outside of the allowed set results in a validat
 | `BestEffort` | Match pods that have best effort quality of service. |
 | `NotBestEffort` | Match pods that do not have best effort quality of service. |
 | `PriorityClass` | Match pods that references the specified [priority class](/docs/concepts/configuration/pod-priority-preemption). |
+| `CrossNamespacePodAffinity` | Match pods that have cross-namespace pod [(anti)affinity terms](/docs/concepts/scheduling-eviction/assign-pod-node). |
 
 The `BestEffort` scope restricts a quota to tracking the following resource:
 
@@ -429,6 +430,63 @@ memory      0     20Gi
 pods        0     10
 ```
 
+### Cross-namespace Pod Affinity Quota
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+Operators can use `CrossNamespacePodAffinity` quota scope to limit which namespaces are allowed to
+have pods with affinity terms that cross namespaces. Specifically, it controls which pods are allowed
+to set `namespaces` or `namespaceSelector` fields in pod affinity terms.
+
+Preventing users from using cross-namespace affinity terms might be desired since a pod
+with anti-affinity constraints can block pods from all other namespaces 
+from getting scheduled in a failure domain. 
+
+Using this scope operators can prevent certain namespaces (`foo-ns` in the example below) 
+from having pods that use cross-namespace pod affinity by creating a resource quota object in
+that namespace with `CrossNamespaceAffinity` scope and hard limit of 0:
+
+```yaml
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: disable-cross-namespace-affinity
+  namespace: foo-ns
+spec:
+  hard:
+    pods: "0"
+  scopeSelector:
+    matchExpressions:
+    - scopeName: CrossNamespaceAffinity
+```
+
+If operators want to disallow using `namespaces` and `namespaceSelector` by default, and 
+only allow it for specific namespaces, they could configure `CrossNamespaceAffinity` 
+as a limited resource by setting the kube-apiserver flag --admission-control-config-file
+to the path of the following configuration file:
+
+```yaml
+apiVersion: apiserver.config.k8s.io/v1
+kind: AdmissionConfiguration
+plugins:
+- name: "ResourceQuota"
+  configuration:
+    apiVersion: apiserver.config.k8s.io/v1
+    kind: ResourceQuotaConfiguration
+    limitedResources:
+    - resource: pods
+      matchScopes:
+      - scopeName: CrossNamespaceAffinity
+```
+
+With the above configuration, pods can use `namespaces` and `namespaceSelector` in pod affinity only
+if the namespace where they are created have a resource quota object with 
+`CrossNamespaceAffinity` scope and a hard limit greater than or equal to the number of pods using those fields.
+
+This feature is alpha and disabled by default. You can enable it by setting the
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+`PodAffinityNamespaceSelector` in both kube-apiserver and kube-scheduler.
+
 ## Requests compared to Limits {#requests-vs-limits}
 
 When allocating compute resources, each container may specify a request and a limit value for either CPU or memory.
diff --git a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
index b6b2bd79a8..8b13ed3b45 100644
--- a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -271,6 +271,18 @@ If omitted or empty, it defaults to the namespace of the pod where the affinity/
 All `matchExpressions` associated with `requiredDuringSchedulingIgnoredDuringExecution` affinity and anti-affinity
 must be satisfied for the pod to be scheduled onto a node.
 
+#### Namespace selector
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+Users can also select matching namespaces using `namespaceSelector`, which is a label query over the set of namespaces.
+The affinity term is applied to the union of the namespaces selected by `namespaceSelector` and the ones listed in the `namespaces` field.
+Note that an empty `namespaceSelector` ({}) matches all namespaces, while a null or empty `namespaces` list and 
+null `namespaceSelector` means "this pod's namespace".
+
+This feature is alpha and disabled by default. You can enable it by setting the
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+`PodAffinityNamespaceSelector` in both kube-apiserver and kube-scheduler.
+
 #### More Practical Use-cases
 
 Interpod Affinity and AntiAffinity can be even more useful when they are used with higher
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2e9db5fce0..82224cf6c6 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -139,6 +139,7 @@ different Kubernetes components.
 | `NonPreemptingPriority` | `true` | Beta | 1.19 | |
 | `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 |
 | `PodDisruptionBudget` | `true` | Beta | 1.5 | |
+| `PodAffinityNamespaceSelector` | `false` | Alpha | 1.21 | |
 | `PodOverhead` | `false` | Alpha | 1.16 | 1.17 |
 | `PodOverhead` | `true` | Beta | 1.18 |  |
 | `ProcMountType` | `false` | Alpha | 1.12 | |
@@ -668,6 +669,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `PersistentLocalVolumes`: Enable the usage of `local` volume type in Pods.
   Pod affinity has to be specified if requesting a `local` volume.
 - `PodDisruptionBudget`: Enable the [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) feature.
+- `PodAffinityNamespaceSelector`: Enable the [Pod Affinity Namespace Selector](/docs/concepts/scheduling-eviction/assign-pod-node/#namespace-selector)
+  and [CrossNamespacePodAffinity](/docs/concepts/policy/resource-quotas/#cross-namespace-pod-affinity-quota) quota scope features.
 - `PodOverhead`: Enable the [PodOverhead](/docs/concepts/scheduling-eviction/pod-overhead/)
   feature to account for pod overheads.
 - `PodPriority`: Enable the descheduling and preemption of Pods based on their

From 07d23cd0e5739b65143a4a3cd1884667784582c3 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Date: Mon, 8 Mar 2021 13:53:27 +0900
Subject: [PATCH 122/788] Fix typo (form -> from)

in content/en/docs/setup/production-environment/container-runtimes.md
---
 .../en/docs/setup/production-environment/container-runtimes.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index e59b497302..ccd1d9beb6 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -242,7 +242,7 @@ cd $Env:ProgramFiles\containerd\
 # - cni bin_dir and conf_dir locations
 Get-Content config.toml
 
-# (Optional - but highly recommended) Exclude containerd form Windows Defender Scans
+# (Optional - but highly recommended) Exclude containerd from Windows Defender Scans
 Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe" 
 ```
 

From c4ded15afe73c233e000db2d13cb343b27f63856 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Date: Mon, 8 Mar 2021 14:21:34 +0900
Subject: [PATCH 123/788] Fix broken anchor

in content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
---
 .../windows/intro-windows-in-kubernetes.md                    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 57f867d0db..3998b48501 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -237,7 +237,7 @@ Overlay (VXLAN) networks on Windows do not support dual-stack networking today.
 
 Windows is only supported as a worker node in the Kubernetes architecture and component matrix. This means that a Kubernetes cluster must always include Linux master nodes, zero or more Linux worker nodes, and zero or more Windows worker nodes.
 
-#### Compute {compute-limitations}
+#### Compute {#compute-limitations}
 
 ##### Resource management and process isolation
 
@@ -297,7 +297,7 @@ As a result, the following storage functionality is not supported on Windows nod
 * NFS based storage/volume support
 * Expanding the mounted volume (resizefs)
 
-#### Networking {networking-limitations}
+#### Networking {#networking-limitations}
 
 Windows Container Networking differs in some important ways from Linux networking. The [Microsoft documentation for Windows Container Networking](https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/architecture) contains additional details and background.
 

From 4af3585b05b7e13c8703962c2ddf3dc4fd30a2a7 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Date: Mon, 8 Mar 2021 15:56:59 +0900
Subject: [PATCH 124/788] Fix typo (Linux -> macOS)

---
 content/en/docs/tasks/tools/install-kubectl-macos.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/tools/install-kubectl-macos.md b/content/en/docs/tasks/tools/install-kubectl-macos.md
index 605745c630..b4fa864985 100644
--- a/content/en/docs/tasks/tools/install-kubectl-macos.md
+++ b/content/en/docs/tasks/tools/install-kubectl-macos.md
@@ -23,7 +23,7 @@ The following methods exist for installing kubectl on macOS:
 - [Install kubectl binary with curl on macOS](#install-kubectl-binary-with-curl-on-macos)
 - [Install with Homebrew on macOS](#install-with-homebrew-on-macos)
 - [Install with Macports on macOS](#install-with-macports-on-macos)
-- [Install on Linux as part of the Google Cloud SDK](#install-on-linux-as-part-of-the-google-cloud-sdk)
+- [Install on macOS as part of the Google Cloud SDK](#install-on-macos-as-part-of-the-google-cloud-sdk)
 
 ### Install kubectl binary with curl on macOS
 
@@ -157,4 +157,4 @@ Below are the procedures to set up autocompletion for Bash and Zsh.
 
 ## {{% heading "whatsnext" %}}
 
-{{< include "included/kubectl-whats-next.md" >}}
\ No newline at end of file
+{{< include "included/kubectl-whats-next.md" >}}

From c009ad84311c44556f4ec72aac6adec228a57615 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Date: Mon, 8 Mar 2021 16:17:09 +0900
Subject: [PATCH 125/788] Update href to the anchor in the same page

---
 content/en/docs/tutorials/hello-minikube.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/hello-minikube.md b/content/en/docs/tutorials/hello-minikube.md
index 4bd6a9a82c..ea447f0997 100644
--- a/content/en/docs/tutorials/hello-minikube.md
+++ b/content/en/docs/tutorials/hello-minikube.md
@@ -62,7 +62,7 @@ If you installed minikube locally, run `minikube start`.
 {{< note >}}
 The `dashboard` command enables the dashboard add-on and opens the proxy in the default web browser. You can create Kubernetes resources on the dashboard such as Deployment and Service.
 
-If you are running in an environment as root, see [Open Dashboard with URL](/docs/tutorials/hello-minikube#open-dashboard-with-url).
+If you are running in an environment as root, see [Open Dashboard with URL](#open-dashboard-with-url).
 
 To stop the proxy, run `Ctrl+C` to exit the process. The dashboard remains running.
 {{< /note >}}

From c4fddf906cdaf35835e2286e219efb0589620a68 Mon Sep 17 00:00:00 2001
From: Henry Liu <henry.liu@daocloud.io>
Date: Mon, 8 Mar 2021 16:13:22 +0800
Subject: [PATCH 126/788] [zh] add
 docs/tasks/run-application/access-api-from-pod.md zh version

---
 .../run-application/access-api-from-pod.md    | 188 ++++++++++++++++++
 1 file changed, 188 insertions(+)
 create mode 100644 content/zh/docs/tasks/run-application/access-api-from-pod.md

diff --git a/content/zh/docs/tasks/run-application/access-api-from-pod.md b/content/zh/docs/tasks/run-application/access-api-from-pod.md
new file mode 100644
index 0000000000..ffcf869a42
--- /dev/null
+++ b/content/zh/docs/tasks/run-application/access-api-from-pod.md
@@ -0,0 +1,188 @@
+---
+title: 从 Pod 中访问 Kubernetes API
+content_type: task
+weight: 120
+---
+
+<!--
+title: Accessing the Kubernetes API from a Pod
+content_type: task
+weight: 120
+-->
+
+<!-- overview -->
+
+<!--
+This guide demonstrates how to access the Kubernetes API from within a pod.
+-->
+本指南演示了如何从 Pod 中访问 Kubernetes API。
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+<!--
+## Accessing the API from within a Pod
+
+When accessing the API from within a Pod, locating and authenticating
+to the API server are slightly different to the external client case.
+-->
+### 从 Pod 中访问 API   {#accessing-the-api-from-within-a-pod}
+
+从 Pod 内部访问 API 时，定位 API 服务器和向服务器认证身份的操作
+与外部客户端场景不同。
+
+<!--
+The easiest way to use the Kubernetes API from a Pod is to use
+one of the official [client libraries](/docs/reference/using-api/client-libraries/). These
+libraries can automatically discover the API server and authenticate.
+-->
+从 Pod 使用 Kubernetes API 的最简单的方法就是使用官方的
+[客户端库](/zh/docs/reference/using-api/client-libraries/)。
+这些库可以自动发现 API 服务器并进行身份验证。
+
+<!--
+### Using Official Client Libraries
+
+From within a Pod, the recommended ways to connect to the Kubernetes API are:
+
+  - For a Go client, use the official [Go client library](https://github.com/kubernetes/client-go/).
+    The `rest.InClusterConfig()` function handles API host discovery and authentication automatically.
+    See [an example here](https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go).
+
+  - For a Python client, use the official [Python client library](https://github.com/kubernetes-client/python/).
+    The `config.load_incluster_config()` function handles API host discovery and authentication automatically.
+    See [an example here](https://github.com/kubernetes-client/python/blob/master/examples/in_cluster_config.py).
+
+  - There are a number of other libraries available, please refer to the [Client Libraries](/docs/reference/using-api/client-libraries/) page.
+
+In each case, the service account credentials of the Pod are used to communicate
+securely with the API server.
+-->
+#### 使用官方客户端库   {#using-official-client-libraries}
+
+从一个 Pod 内部连接到 Kubernetes API 的推荐方式为：
+
+- 对于 Go 语言客户端，使用官方的 [Go 客户端库](https://github.com/kubernetes/client-go/)。
+  函数 `rest.InClusterConfig()` 自动处理 API 主机发现和身份认证。
+  参见[这里的一个例子](https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go)。
+
+- 对于 Python 客户端，使用官方的 [Python 客户端库](https://github.com/kubernetes-client/python/)。
+  函数 `config.load_incluster_config()` 自动处理 API 主机的发现和身份认证。
+  参见[这里的一个例子](https://github.com/kubernetes-client/python/blob/master/examples/in_cluster_config.py)。
+
+- 还有一些其他可用的客户端库，请参阅[客户端库](/zh/docs/reference/using-api/client-libraries/)页面。
+
+在以上场景中，客户端库都使用 Pod 的服务账号凭据来与 API 服务器安全地通信。
+
+<!--
+### Directly accessing the REST API
+
+While running in a Pod, the Kubernetes apiserver is accessible via a Service named
+`kubernetes` in the `default` namespace. Therefore, Pods can use the
+`kubernetes.default.svc` hostname to query the API server. Official client libraries
+do this automatically.
+-->
+#### 直接访问 REST API   {#directly-accessing-the-rest-api}
+
+在运行在 Pod 中时，可以通过 `default` 命名空间中的名为 `kubernetes` 的服务访问
+Kubernetes API 服务器。也就是说，Pod 可以使用 `kubernetes.default.svc` 主机名
+来查询 API 服务器。官方客户端库自动完成这个工作。
+
+<!--
+The recommended way to authenticate to the API server is with a
+[service account](/docs/tasks/configure-pod-container/configure-service-account/) credential. By default, a Pod
+is associated with a service account, and a credential (token) for that
+service account is placed into the filesystem tree of each container in that Pod,
+at `/var/run/secrets/kubernetes.io/serviceaccount/token`.
+-->
+向 API 服务器进行身份认证的推荐做法是使用
+[服务账号](/zh/docs/tasks/configure-pod-container/configure-service-account/)凭据。
+默认情况下，每个 Pod 与一个服务账号关联，该服务账户的凭证（令牌）放置在此 Pod 中
+每个容器的文件系统树中的 `/var/run/secrets/kubernetes.io/serviceaccount/token` 处。
+
+<!--
+If available, a certificate bundle is placed into the filesystem tree of each
+container at `/var/run/secrets/kubernetes.io/serviceaccount/ca.crt`, and should be
+used to verify the serving certificate of the API server.
+-->
+如果由证书包可用，则凭证包被放入每个容器的文件系统树中的
+`/var/run/secrets/kubernetes.io/serviceaccount/ca.crt` 处，
+且将被用于验证 API 服务器的服务证书。
+
+<!--
+Finally, the default namespace to be used for namespaced API operations is placed in a file
+at `/var/run/secrets/kubernetes.io/serviceaccount/namespace` in each container.
+-->
+最后，用于命名空间域 API 操作的默认命名空间放置在每个容器中的
+`/var/run/secrets/kubernetes.io/serviceaccount/namespace` 文件中。
+
+<!--
+### Using kubectl proxy
+
+If you would like to query the API without an official client library, you can run `kubectl proxy`
+as the [command](/docs/tasks/inject-data-application/define-command-argument-container/)
+of a new sidecar container in the Pod. This way, `kubectl proxy` will authenticate
+to the API and expose it on the `localhost` interface of the Pod, so that other containers
+in the Pod can use it directly.
+-->
+#### 使用 kubectl proxy   {#use-kubectl-proxy}
+
+如果你希望不实用官方客户端库就完成 API 查询，可以将 `kubectl proxy` 作为
+[command](/zh/docs/tasks/inject-data-application/define-command-argument-container/)
+在 Pod 启动一个边车（Sidecar）容器。这样，`kubectl proxy` 自动完成对 API
+的身份认证，并将其暴露到 Pod 的 `localhost` 接口，从而 Pod 中的其他容器可以
+直接使用 API。
+
+<!--
+### Without using a proxy
+
+It is possible to avoid using the kubectl proxy by passing the authentication token
+directly to the API server.  The internal certificate secures the connection.
+-->
+### 不使用代理   {#without-using-a-proxy}
+
+通过将认证令牌直接发送到 API 服务器，也可以避免运行 kubectl proxy 命令。
+内部的证书机制能够为链接提供保护。
+
+```shell
+# 指向内部 API 服务器的主机名
+APISERVER=https://kubernetes.default.svc
+
+# 服务账号令牌的路径
+SERVICEACCOUNT=/var/run/secrets/kubernetes.io/serviceaccount
+
+# 读取 Pod 的名字空间
+NAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)
+
+# 读取服务账号的持有者令牌
+TOKEN=$(cat ${SERVICEACCOUNT}/token)
+
+# 引用内部证书机构（CA）
+CACERT=${SERVICEACCOUNT}/ca.crt
+
+# 使用令牌访问 API
+curl --cacert ${CACERT} --header "Authorization: Bearer ${TOKEN}" -X GET ${APISERVER}/api
+```
+
+<!--
+The output will be similar to this:
+-->
+输出类似于：
+
+```json
+{
+  "kind": "APIVersions",
+  "versions": [
+    "v1"
+  ],
+  "serverAddressByClientCIDRs": [
+    {
+      "clientCIDR": "0.0.0.0/0",
+      "serverAddress": "10.0.1.149:443"
+    }
+  ]
+}
+```

From c148e61ba85dee2648a6f3b40418f12c89be2e31 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 8 Mar 2021 17:33:18 +0900
Subject: [PATCH 127/788] Reflect some changes to dev-1.20-ko.6

---
 content/ko/docs/concepts/architecture/controller.md             | 2 +-
 .../docs/tutorials/stateful-application/basic-stateful-set.md   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ko/docs/concepts/architecture/controller.md b/content/ko/docs/concepts/architecture/controller.md
index 29926d1435..e516dd9cc5 100644
--- a/content/ko/docs/concepts/architecture/controller.md
+++ b/content/ko/docs/concepts/architecture/controller.md
@@ -102,7 +102,7 @@ weight: 30
 온도 조절기 예에서 방이 매우 추우면 다른 컨트롤러가
 서리 방지 히터를 켤 수도 있다. 쿠버네티스 클러스터에서는
 [쿠버네티스 확장](/ko/docs/concepts/extend-kubernetes/)을 통해
-IP 주소 관리 도구, 스토리지 서비스, 클라우드 제공자의 API들 및
+IP 주소 관리 도구, 스토리지 서비스, 클라우드 제공자의 API 및
 기타 서비스 등과 간접적으로 연동하여 이를 구현한다.
 
 ## 의도한 상태와 현재 상태 {#desired-vs-current}
diff --git a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
index a2df8806a8..a17ae9f320 100644
--- a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -921,7 +921,7 @@ web-2     0/1       Terminating   0         3m
 
 `web` 스테이트풀셋이 다시 생성될 때 먼저 `web-0` 시작한다.
 `web-1`은 이미  Running과 Ready 상태이므로 `web-0`이 Running과 Ready 상태로
-전환될 때는 이 파드에 적용됬다. 스테이트풀셋에`replicas`를 2로 하고
+전환될 때는 이 파드에 적용됐다. 스테이트풀셋에 `replicas`를 2로 하고
 `web-0`을 재생성했다면 `web-1`이
 이미 Running과 Ready 상태이고,
 `web-2`은 종료되었을 것이다.

From ddcdd0687e02fd3e6ae02443e94c2a4ecc8e56f3 Mon Sep 17 00:00:00 2001
From: Iceber Gu <wei.cai-nat@daocloud.io>
Date: Mon, 8 Mar 2021 10:42:43 +0800
Subject: [PATCH 128/788] [zh] fix using-api/_index.md

Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
---
 content/zh/docs/reference/using-api/_index.md | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/reference/using-api/_index.md b/content/zh/docs/reference/using-api/_index.md
index 88b6bce641..303f2152ac 100644
--- a/content/zh/docs/reference/using-api/_index.md
+++ b/content/zh/docs/reference/using-api/_index.md
@@ -1,6 +1,10 @@
 ---
-title: 使用 Kubernetes API
+title: API 概述
 weight: 10
+no_list: true
+card:
+   name: reference
+   weight: 50
 ---
 
 <!-- overview -->
@@ -68,7 +72,7 @@ can find more information about the criteria for each level in the
 [API Changes documentation](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#alpha-beta-and-stable-versions).
 -->
 不同的 API 版本代表着不同的稳定性和支持级别。
-你可以在 [API 变更文档]https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#alpha-beta-and-stable-versions)
+你可以在 [API 变更文档](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#alpha-beta-and-stable-versions)
 中查看到更多的不同级别的判定标准。
 
 <!--
@@ -188,7 +192,7 @@ part is omitted, it is treated as if `=true` is specified. For example:
  - to disable `batch/v1`, set `--runtime-config=batch/v1=false`
  - to enable `batch/v2alpha1`, set `--runtime-config=batch/v2alpha1`
 -->
-##　启用或禁用 API 组   {#enabling-or-disabling}
+## 启用或禁用 API 组   {#enabling-or-disabling}
 资源和 API 组是在默认情况下被启用的。
 你可以通过在 API 服务器上设置 `--runtime-config` 参数来启用或禁用它们。
 `--runtime-config` 参数接受逗号分隔的 `<key>[=<value>]` 对，

From 21382af32e8468abb3ceb469e369f4595f9cdb0f Mon Sep 17 00:00:00 2001
From: Terry Moschou <tmoschou@gmail.com>
Date: Mon, 8 Mar 2021 21:15:28 +1030
Subject: [PATCH 129/788] Update Ubuntu/Debian installation instructions to use
 Signed-By option (#26906)

The use of `apt-key` to install has also been removed as it is now deprecated
and will be last available in Debian 11 and Ubuntu 22.04.

Also updates the Docker repository setup instructions in container-runtimes.md,
to now refer to the respective instructions at https://docs.docker.com/engine/install/
which has already made the move to use the signed-by option.
---
 .../container-runtimes.md                     | 382 ++++++++----------
 .../tools/kubeadm/install-kubeadm.md          |  38 +-
 .../docs/tasks/tools/install-kubectl-linux.md |  36 +-
 3 files changed, 219 insertions(+), 237 deletions(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index ccd1d9beb6..d255780222 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -89,134 +89,102 @@ EOF
 sudo sysctl --system
 ```
 
-Install containerd:
+Install `containerd`:
 
 {{< tabs name="tab-cri-containerd-installation" >}}
 {{% tab name="Ubuntu 16.04" %}}
 
-```shell
-# (Install containerd)
-## Set up the repository
-### Install packages to allow apt to use a repository over HTTPS
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
+1. Setup the [Docker Engine repository for Ubuntu](https://docs.docker.com/engine/install/ubuntu/#set-up-the-repository)
 
-```shell
-## Add Docker's official GPG key
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
+2. Install `containerd`:
 
-```shell
-## Add Docker apt repository.
-sudo add-apt-repository \
-    "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-    $(lsb_release -cs) \
-    stable"
-```
+   ```shell
+   sudo apt-get update && sudo apt-get install -y containerd.io
+   ```
 
-```shell
-## Install containerd
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
+3. Configure `containerd`:
 
-```shell
-# Configure containerd
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
+   ```shell
+   sudo mkdir -p /etc/containerd
+   containerd config default | sudo tee /etc/containerd/config.toml
+   ```
+
+4. Restart `containerd`:
+
+   ```shell
+   sudo systemctl restart containerd
+   ```
 
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
 {{% /tab %}}
 {{% tab name="Ubuntu 18.04/20.04" %}}
 
-```shell
-# (Install containerd)
-sudo apt-get update && sudo apt-get install -y containerd
-```
+1. Install `containerd`:
 
-```shell
-# Configure containerd
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
+   ```shell
+   sudo apt-get update && sudo apt-get install -y containerd
+   ```
+
+2. Configure `containerd`:
+
+   ```shell
+   sudo mkdir -p /etc/containerd
+   containerd config default | sudo tee /etc/containerd/config.toml
+   ```
+
+3. Restart `containerd`:
+
+   ```shell
+   sudo systemctl restart containerd
+   ```
 
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
 {{% /tab %}}
 {{% tab name="Debian 9+" %}}
 
-```shell
-# (Install containerd)
-## Set up the repository
-### Install packages to allow apt to use a repository over HTTPS
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
+1. Setup the [Docker Engine repository for Debian](https://docs.docker.com/engine/install/debian/#set-up-the-repository)
 
-```shell
-## Add Docker's official GPG key
-curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
+2. Install `containerd`:
 
-```shell
-## Add Docker apt repository.
-sudo add-apt-repository \
-   "deb [arch=amd64] https://download.docker.com/linux/debian \
-   $(lsb_release -cs) \
-   stable"
-```
+   ```shell
+   sudo apt-get update && sudo apt-get install -y containerd.io
+   ```
 
-```shell
-## Install containerd
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
+3. Configure `containerd`:
 
-```shell
-# Set default containerd configuration
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
+   ```shell
+   sudo mkdir -p /etc/containerd
+   containerd config default | sudo tee /etc/containerd/config.toml
+   ```
+
+4. Restart `containerd`:
+
+   ```shell
+   sudo systemctl restart containerd
+   ```
 
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
 {{% /tab %}}
 {{% tab name="CentOS/RHEL 7.4+" %}}
 
-```shell
-# (Install containerd)
-## Set up the repository
-### Install required packages
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
+1. Setup the [Docker Engine repository for CentOS/RHEL](https://docs.docker.com/engine/install/centos/#set-up-the-repository)
 
-```shell
-## Add docker repository
-sudo yum-config-manager \
-    --add-repo \
-    https://download.docker.com/linux/centos/docker-ce.repo
-```
+2. Install `containerd`:
 
-```shell
-## Install containerd
-sudo yum update -y && sudo yum install -y containerd.io
-```
+   ```shell
+   sudo yum update -y && sudo yum install -y containerd.io
+   ```
 
-```shell
-## Configure containerd
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
+3. Configure `containerd`:
+
+   ```shell
+   sudo mkdir -p /etc/containerd
+   containerd config default | sudo tee /etc/containerd/config.toml
+   ```
+
+4. Restart `containerd`:
+
+   ```shell
+   sudo systemctl restart containerd
+   ```
 
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}
 
@@ -224,33 +192,35 @@ sudo systemctl restart containerd
 Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), and then run the following commands:
 <br />
 
-```powershell
-# (Install containerd)
-# Download containerd
-curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.gz
-tar.exe xvf .\containerd-windows-amd64.tar.gz
-```
+1. Download `containerd`:
 
-```powershell
-# Extract and configure
-Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
-cd $Env:ProgramFiles\containerd\
-.\containerd.exe config default | Out-File config.toml -Encoding ascii
+   ```powershell
+   curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.gz
+   tar.exe xvf .\containerd-windows-amd64.tar.gz
+   ```
 
-# Review the configuration. Depending on setup you may want to adjust:
-# - the sandbox_image (Kubernetes pause image)
-# - cni bin_dir and conf_dir locations
-Get-Content config.toml
+2. Extract and configure:
 
-# (Optional - but highly recommended) Exclude containerd from Windows Defender Scans
-Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe" 
-```
+   ```powershell
+   Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
+   cd $Env:ProgramFiles\containerd\
+   .\containerd.exe config default | Out-File config.toml -Encoding ascii
 
-```powershell
-# Start containerd
-.\containerd.exe --register-service
-Start-Service containerd
-```
+   # Review the configuration. Depending on setup you may want to adjust:
+   # - the sandbox_image (Kubernetes pause image)
+   # - cni bin_dir and conf_dir locations
+   Get-Content config.toml
+
+   # (Optional - but highly recommended) Exclude containerd from Windows Defender Scans
+   Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe"
+   ```
+
+3. Start `containerd`:
+
+   ```powershell
+   .\containerd.exe --register-service
+   Start-Service containerd
+   ```
 
 {{% /tab %}}
 {{< /tabs >}}
@@ -465,120 +435,92 @@ Use the following commands to install Docker on your system:
 {{< tabs name="tab-cri-docker-installation" >}}
 {{% tab name="Ubuntu 16.04+" %}}
 
-```shell
-# (Install Docker CE)
-## Set up the repository:
-### Install packages to allow apt to use a repository over HTTPS
-sudo apt-get update && sudo apt-get install -y \
-  apt-transport-https ca-certificates curl software-properties-common gnupg2
-```
+1. Setup the [Docker Engine repository for Ubuntu](https://docs.docker.com/engine/install/ubuntu/#set-up-the-repository)
 
-```shell
-# Add Docker's official GPG key:
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
+2. Install Docker CE:
 
-```shell
-# Add the Docker apt repository:
-sudo add-apt-repository \
-  "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-  $(lsb_release -cs) \
-  stable"
-```
+   ```shell
+   sudo apt-get update && sudo apt-get install -y \
+     containerd.io=1.2.13-2 \
+     docker-ce=5:19.03.11~3-0~ubuntu-$(lsb_release -cs) \
+     docker-ce-cli=5:19.03.11~3-0~ubuntu-$(lsb_release -cs)
+   ```
 
-```shell
-# Install Docker CE
-sudo apt-get update && sudo apt-get install -y \
-  containerd.io=1.2.13-2 \
-  docker-ce=5:19.03.11~3-0~ubuntu-$(lsb_release -cs) \
-  docker-ce-cli=5:19.03.11~3-0~ubuntu-$(lsb_release -cs)
-```
+3. Set up the Docker daemon:
 
-```shell
-## Create /etc/docker
-sudo mkdir /etc/docker
-```
+   ```shell
+   sudo mkdir /etc/docker
+   cat <<EOF | sudo tee /etc/docker/daemon.json
+   {
+     "exec-opts": ["native.cgroupdriver=systemd"],
+     "log-driver": "json-file",
+     "log-opts": {
+       "max-size": "100m"
+     },
+     "storage-driver": "overlay2"
+   }
+   EOF
+   ```
 
-```shell
-# Set up the Docker daemon
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2"
-}
-EOF
-```
+4. Create `/etc/systemd/system/docker.service.d`:
 
-```shell
-# Create /etc/systemd/system/docker.service.d
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
+   ```shell
+   sudo mkdir -p /etc/systemd/system/docker.service.d
+   ```
+
+5. Restart Docker:
+
+   ```shell
+   sudo systemctl daemon-reload
+   sudo systemctl restart docker
+   ```
 
-```shell
-# Restart Docker
-sudo systemctl daemon-reload
-sudo systemctl restart docker
-```
 {{% /tab %}}
 {{% tab name="CentOS/RHEL 7.4+" %}}
 
-```shell
-# (Install Docker CE)
-## Set up the repository
-### Install required packages
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
+1. Setup the [Docker Engine repository for CentOS/RHEL](https://docs.docker.com/engine/install/centos/#set-up-the-repository)
 
-```shell
-## Add the Docker repository
-sudo yum-config-manager --add-repo \
-  https://download.docker.com/linux/centos/docker-ce.repo
-```
+2. Install Docker CE:
 
-```shell
-# Install Docker CE
-sudo yum update -y && sudo yum install -y \
-  containerd.io-1.2.13 \
-  docker-ce-19.03.11 \
-  docker-ce-cli-19.03.11
-```
+   ```shell
+   sudo yum update -y && sudo yum install -y \
+     containerd.io-1.2.13 \
+     docker-ce-19.03.11 \
+     docker-ce-cli-19.03.11
+   ```
 
-```shell
-## Create /etc/docker
-sudo mkdir /etc/docker
-```
+3. Set up the Docker daemon:
 
-```shell
-# Set up the Docker daemon
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2",
-  "storage-opts": [
-    "overlay2.override_kernel_check=true"
-  ]
-}
-EOF
-```
+   ```shell
+   sudo mkdir /etc/docker
+   cat <<EOF | sudo tee /etc/docker/daemon.json
+   {
+     "exec-opts": ["native.cgroupdriver=systemd"],
+     "log-driver": "json-file",
+     "log-opts": {
+       "max-size": "100m"
+     },
+     "storage-driver": "overlay2",
+     "storage-opts": [
+       "overlay2.override_kernel_check=true"
+     ]
+   }
+   EOF
+   ```
 
-```shell
-# Create /etc/systemd/system/docker.service.d
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
+4. Create `/etc/systemd/system/docker.service.d`:
+
+   ```shell
+   sudo mkdir -p /etc/systemd/system/docker.service.d
+   ```
+
+5. Restart Docker:
+
+   ```shell
+   sudo systemctl daemon-reload
+   sudo systemctl restart docker
+   ```
 
-```shell
-# Restart Docker
-sudo systemctl daemon-reload
-sudo systemctl restart docker
-```
 {{% /tab %}}
 {{< /tabs >}}
 
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 3f6e991eac..86186d1713 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -175,16 +175,34 @@ For more information on version skews, see:
 
 {{< tabs name="k8s_install" >}}
 {{% tab name="Debian-based distributions" %}}
-```bash
-sudo apt-get update && sudo apt-get install -y apt-transport-https curl
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-cat <<EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list
-deb https://apt.kubernetes.io/ kubernetes-xenial main
-EOF
-sudo apt-get update
-sudo apt-get install -y kubelet kubeadm kubectl
-sudo apt-mark hold kubelet kubeadm kubectl
-```
+
+1. Update the `apt` package index and install packages needed to use the Kubernetes `apt` repository:
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y apt-transport-https ca-certificates wget
+   ```
+
+2. Download the Google Cloud public signing key:
+
+   ```shell
+   sudo wget -O /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   ```
+
+3. Add the Kubernetes `apt` repository:
+
+   ```shell
+   echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
+   ```
+
+4. Update `apt` package index, install `kubelet`, `kubeadm` and `kubectl`, and pin their version:
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y kubelet kubeadm kubectl
+   sudo apt-mark hold kubelet kubeadm kubectl
+   ```
+
 {{% /tab %}}
 {{% tab name="Red Hat-based distributions" %}}
 ```bash
diff --git a/content/en/docs/tasks/tools/install-kubectl-linux.md b/content/en/docs/tasks/tools/install-kubectl-linux.md
index 12a8d641d8..e18adbe1b3 100644
--- a/content/en/docs/tasks/tools/install-kubectl-linux.md
+++ b/content/en/docs/tasks/tools/install-kubectl-linux.md
@@ -100,13 +100,35 @@ For example, to download version {{< param "fullversion" >}} on Linux, type:
 ### Install using native package management
 
 {{< tabs name="kubectl_install" >}}
-{{< tab name="Ubuntu, Debian or HypriotOS" codelang="bash" >}}
-sudo apt-get update && sudo apt-get install -y apt-transport-https gnupg2 curl
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
-sudo apt-get update
-sudo apt-get install -y kubectl
-{{< /tab >}}
+{{% tab name="Ubuntu, Debian or HypriotOS" %}}
+
+1. Update the `apt` package index and install packages needed to use the Kubernetes `apt` repository:
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y apt-transport-https ca-certificates wget
+   ```
+
+2. Download the Google Cloud public signing key:
+
+   ```shell
+   sudo wget -O /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   ```
+
+3. Add the Kubernetes `apt` repository:
+
+   ```shell
+   echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
+   ```
+
+4. Update `apt` package index with the new repository and install `kubectl`:
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y kubectl
+   ```
+
+{{% /tab %}}
 
 {{< tab name="CentOS, RHEL or Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
 [kubernetes]

From 5f7439095e986d7583de856868b2c834d99c2789 Mon Sep 17 00:00:00 2001
From: Kappie37 <44774200+Kappie37@users.noreply.github.com>
Date: Mon, 8 Mar 2021 13:53:16 +0100
Subject: [PATCH 130/788] Update access-cluster-api.md

Update not working link to the correct one about Accessing the API from within a Pod
---
 content/en/docs/tasks/administer-cluster/access-cluster-api.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/access-cluster-api.md b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
index 191ec0c2fe..bc9bbd101d 100644
--- a/content/en/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
@@ -192,7 +192,7 @@ func main() {
 }
 ```
 
-If the application is deployed as a Pod in the cluster, see [Accessing the API from within a Pod](#accessing-the-api-from-within-a-pod).
+If the application is deployed as a Pod in the cluster, see [Accessing the API from within a Pod](https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/#accessing-the-api-from-a-pod).
 
 #### Python client
 

From 5fcc8b29614f7f72b563a61d9d75dac70c7e5c75 Mon Sep 17 00:00:00 2001
From: Sandeep Rajan <srajan@infoblox.com>
Date: Thu, 4 Mar 2021 12:06:09 -0500
Subject: [PATCH 131/788] remove mentions of kube-dns in kubeadm docs

---
 .../kubeadm/implementation-details.md         |  8 +++---
 .../setup-tools/kubeadm/kubeadm-config.md     |  4 ---
 .../setup-tools/kubeadm/kubeadm-init-phase.md | 19 --------------
 .../setup-tools/kubeadm/kubeadm-init.md       |  4 +--
 .../setup-tools/kubeadm/kubeadm-upgrade.md    |  2 --
 .../tools/kubeadm/troubleshooting-kubeadm.md  |  2 +-
 .../docs/tasks/administer-cluster/coredns.md  | 26 +++----------------
 .../dns-custom-nameservers.md                 | 14 ++--------
 .../kubeadm/kubeadm-upgrade.md                |  2 +-
 9 files changed, 12 insertions(+), 69 deletions(-)

diff --git a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
index 5a321ec670..026e24f2ed 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
@@ -436,12 +436,12 @@ A ServiceAccount for `kube-proxy` is created in the `kube-system` namespace; the
 
 #### DNS
 
-- In Kubernetes version 1.18 kube-dns usage with kubeadm is deprecated and will be removed in a future release
+- In Kubernetes version 1.21 kube-dns usage with kubeadm has been removed
 - The CoreDNS service is named `kube-dns`. This is done to prevent any interruption
-in service when the user is switching the cluster DNS from kube-dns to CoreDNS or vice-versa
+in service when the user is switching the cluster DNS from kube-dns to CoreDNS
 the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
-- A ServiceAccount for CoreDNS/kube-dns is created in the `kube-system` namespace.
-- The `kube-dns` ServiceAccount is bound to the privileges in the `system:kube-dns` ClusterRole
+- A ServiceAccount for CoreDNS is created in the `kube-system` namespace.
+- The `coredns` ServiceAccount is bound to the privileges in the `system:coredns` ClusterRole
 
 ## kubeadm join phases internal design
 
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
index 23dff658e9..93f89c594b 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
@@ -20,10 +20,6 @@ For more information navigate to
 [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)
 or [Using kubeadm join with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-join/#config-file).
 
-In Kubernetes v1.13.0 and later to list/pull kube-dns images instead of the CoreDNS image
-the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
-has to be used.
-
 <!-- body -->
 ## kubeadm config view {#cmd-config-view}
 
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md
index 21ab7a863d..2b6939bac6 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md
@@ -143,25 +143,6 @@ install them selectively.
 {{< tab name="kube-proxy" include="generated/kubeadm_init_phase_addon_kube-proxy.md" />}}
 {{< /tabs >}}
 
-To use kube-dns instead of CoreDNS you have to pass a configuration file:
-
-```bash
-# for installing a DNS addon only
-kubeadm init phase addon coredns --config=someconfig.yaml
-```
-
-The file has to contain a [`dns`](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2#DNS) field in[`ClusterConfiguration`](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2#ClusterConfiguration)
-and also a type for the addon - `kube-dns` (default value is `CoreDNS`).
-
-```yaml
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: ClusterConfiguration
-dns:
-  type: "kube-dns"
-```
-
-Please note that kube-dns usage with kubeadm is deprecated as of v1.18 and will be removed in a future release.
-
 For more details on each field in the `v1beta2` configuration you can navigate to our
 [API reference pages.] (https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)
 
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
index 3d4b977102..eb5fb20943 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
@@ -66,12 +66,10 @@ following steps:
 
 1. Installs a DNS server (CoreDNS) and the kube-proxy addon components via the API server.
    In Kubernetes version 1.11 and later CoreDNS is the default DNS server.
-   To install kube-dns instead of CoreDNS, the DNS addon has to be configured in the kubeadm `ClusterConfiguration`.
-   For more information about the configuration see the section `Using kubeadm init with a configuration file` below.
    Please note that although the DNS server is deployed, it will not be scheduled until CNI is installed.
 
    {{< warning >}}
-   kube-dns usage with kubeadm is deprecated as of v1.18 and will be removed in a future release.
+   kube-dns usage with kubeadm is deprecated as of v1.18 and is removed in v1.21.
    {{< /warning >}}
 
 ### Using init phases with kubeadm {#init-phases}
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md
index 5796e7aec7..6a2c5f782f 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md
@@ -20,8 +20,6 @@ For older versions of kubeadm, please refer to older documentation sets of the K
 
 You can use `kubeadm upgrade diff` to see the changes that would be applied to static pod manifests.
 
-To use kube-dns with upgrades in Kubernetes v1.13.0 and later please follow [this guide](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon).
-
 In Kubernetes v1.15.0 and later, `kubeadm upgrade apply` and `kubeadm upgrade node` will also
 automatically renew the kubeadm managed certificates on this node, including those stored in kubeconfig files.
 To opt-out, it is possible to pass the flag `--certificate-renewal=false`. For more details about certificate
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
index 28ef3d3038..aff03fb1ab 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
@@ -149,7 +149,7 @@ Right after `kubeadm init` there should not be any pods in these states.
   MountFlags can interfere with volumes mounted by Kubernetes, and put the Pods in `CrashLoopBackOff` state.
   The error happens when Kubernetes does not find `var/run/secrets/kubernetes.io/serviceaccount` files.
 
-## `coredns` (or `kube-dns`) is stuck in the `Pending` state
+## `coredns` is stuck in the `Pending` state
 
 This is **expected** and part of the design. kubeadm is network provider-agnostic, so the admin
 should [install the pod network add-on](/docs/concepts/cluster-administration/addons/)
diff --git a/content/en/docs/tasks/administer-cluster/coredns.md b/content/en/docs/tasks/administer-cluster/coredns.md
index 32d4f7d7ec..54163058c8 100644
--- a/content/en/docs/tasks/administer-cluster/coredns.md
+++ b/content/en/docs/tasks/administer-cluster/coredns.md
@@ -36,7 +36,7 @@ For manual deployment or replacement of kube-dns, see the documentation at the
 
 In Kubernetes version 1.10 and later, you can also move to CoreDNS when you use `kubeadm` to upgrade
 a cluster that is using `kube-dns`. In this case, `kubeadm` will generate the CoreDNS configuration
-("Corefile") based upon the `kube-dns` ConfigMap, preserving configurations for federation,
+("Corefile") based upon the `kube-dns` ConfigMap, preserving configurations for
 stub domains, and upstream name server.
 
 If you are moving from kube-dns to CoreDNS, make sure to set the `CoreDNS` feature gate to `true`
@@ -46,8 +46,7 @@ kubeadm upgrade apply v1.11.0 --feature-gates=CoreDNS=true
 ```
 
 In Kubernetes version 1.13 and later the `CoreDNS` feature gate is removed and CoreDNS
-is used by default. Follow the guide outlined [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase#cmd-phase-addon) if you want
-your upgraded cluster to use kube-dns.
+is used by default.
 
 In versions prior to 1.11 the Corefile will be **overwritten** by the one created during upgrade.
 **You should save your existing ConfigMap if you have customized it.** You may re-apply your
@@ -56,26 +55,7 @@ customizations after the new ConfigMap is up and running.
 If you are running CoreDNS in Kubernetes version 1.11 and later, during upgrade,
 your existing Corefile will be retained.
 
-
-### Installing kube-dns instead of CoreDNS with kubeadm
-
-{{< note >}}
-In Kubernetes 1.11, CoreDNS has graduated to General Availability (GA)
-and is installed by default.
-{{< /note >}}
-
-{{< warning >}}
-In Kubernetes 1.18, kube-dns usage with kubeadm has been deprecated and will be removed in a future version.
-{{< /warning >}}
-
-To install kube-dns on versions prior to 1.13, set the `CoreDNS` feature gate
-value to `false`:
-
-```
-kubeadm init --feature-gates=CoreDNS=false
-```
-
-For versions 1.13 and later, follow the guide outlined [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase#cmd-phase-addon).
+In Kubernetes version 1.21, support for `kube-dns` is removed from kubeadm.
 
 ## Upgrading CoreDNS
 
diff --git a/content/en/docs/tasks/administer-cluster/dns-custom-nameservers.md b/content/en/docs/tasks/administer-cluster/dns-custom-nameservers.md
index 06de85b305..308b066651 100644
--- a/content/en/docs/tasks/administer-cluster/dns-custom-nameservers.md
+++ b/content/en/docs/tasks/administer-cluster/dns-custom-nameservers.md
@@ -34,7 +34,7 @@ As of Kubernetes v1.12, CoreDNS is the recommended DNS Server, replacing kube-dn
 originally used kube-dns, you may still have `kube-dns` deployed rather than CoreDNS.
 
 {{< note >}}
-Both the CoreDNS and kube-dns Service are named `kube-dns` in the `metadata.name` field.  
+The CoreDNS Service is named `kube-dns` in the `metadata.name` field.  
 This is so that there is greater interoperability with workloads that relied on the legacy `kube-dns` Service name to resolve addresses internal to the cluster. Using a Service named `kube-dns` abstracts away the implementation detail of which DNS provider is running behind that common name.
 {{< /note >}}
 
@@ -179,17 +179,14 @@ During translation, all FQDN nameservers will be omitted from the CoreDNS config
 
 CoreDNS supports the features of kube-dns and more.
 A ConfigMap created for kube-dns to support `StubDomains`and `upstreamNameservers` translates to the `forward` plugin in CoreDNS.
-Similarly, the `Federations` plugin in kube-dns translates to the `federation` plugin in CoreDNS.
 
 ### Example
 
-This example ConfigMap for kube-dns specifies federations, stubdomains and upstreamnameservers:
+This example ConfigMap for kube-dns specifies stubdomains and upstreamnameservers:
 
 ```yaml
 apiVersion: v1
 data:
-  federations: |
-    {"foo" : "foo.feddomain.com"}
   stubDomains: |
     {"abc.com" : ["1.2.3.4"], "my.cluster.local" : ["2.3.4.5"]}
   upstreamNameservers: |
@@ -199,13 +196,6 @@ kind: ConfigMap
 
 The equivalent configuration in CoreDNS creates a Corefile:
 
-* For federations:
-```
-federation cluster.local {
-    foo foo.feddomain.com
-}
-```
-
 * For stubDomains:
 ```yaml
 abc.com:53 {
diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
index 5af9d27b82..45466a6b5c 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
@@ -328,7 +328,7 @@ and post-upgrade manifest file for a certain component, a backup file for it wil
 - Makes sure the control plane images are available or available to pull to the machine.
 - Generates replacements and/or uses user supplied overwrites if component configs require version upgrades.
 - Upgrades the control plane components or rollbacks if any of them fails to come up.
-- Applies the new `kube-dns` and `kube-proxy` manifests and makes sure that all necessary RBAC rules are created.
+- Applies the new `CoreDNS` and `kube-proxy` manifests and makes sure that all necessary RBAC rules are created.
 - Creates new certificate and key files of the API server and backs up old files if they're about to expire in 180 days.
 
 `kubeadm upgrade node` does the following on additional control plane nodes:

From 3e9a73f7c28d76280c76d74dc3e58213715b99b4 Mon Sep 17 00:00:00 2001
From: Sandeep Rajan <srajan@infoblox.com>
Date: Fri, 5 Mar 2021 12:12:27 -0500
Subject: [PATCH 132/788] move kube-dns remove statement to the end

---
 .../reference/setup-tools/kubeadm/implementation-details.md   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
index 026e24f2ed..420f6edcac 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
@@ -436,13 +436,15 @@ A ServiceAccount for `kube-proxy` is created in the `kube-system` namespace; the
 
 #### DNS
 
-- In Kubernetes version 1.21 kube-dns usage with kubeadm has been removed
 - The CoreDNS service is named `kube-dns`. This is done to prevent any interruption
 in service when the user is switching the cluster DNS from kube-dns to CoreDNS
 the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
 - A ServiceAccount for CoreDNS is created in the `kube-system` namespace.
 - The `coredns` ServiceAccount is bound to the privileges in the `system:coredns` ClusterRole
 
+- In Kubernetes version 1.21, support for using `kube-dns` with kubeadm is removed.
+You can use CoreDNS with kubeadm even when the related Service is named `kube-dns`.
+
 ## kubeadm join phases internal design
 
 Similarly to `kubeadm init`, also `kubeadm join` internal workflow consists of a sequence of atomic work tasks to perform.

From b9576494e91fa4ed8d44f3df23db8031e06ea1f5 Mon Sep 17 00:00:00 2001
From: Sandeep Rajan <srajan@infoblox.com>
Date: Mon, 8 Mar 2021 11:56:53 -0500
Subject: [PATCH 133/788] nit in tense

---
 .../reference/setup-tools/kubeadm/implementation-details.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
index 420f6edcac..670082a3fd 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
@@ -442,7 +442,7 @@ the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubea
 - A ServiceAccount for CoreDNS is created in the `kube-system` namespace.
 - The `coredns` ServiceAccount is bound to the privileges in the `system:coredns` ClusterRole
 
-- In Kubernetes version 1.21, support for using `kube-dns` with kubeadm is removed.
+- In Kubernetes version 1.21, support for using `kube-dns` with kubeadm was removed.
 You can use CoreDNS with kubeadm even when the related Service is named `kube-dns`.
 
 ## kubeadm join phases internal design

From dd2153d2dbde9b20560332252fdd1428229de372 Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Mon, 8 Mar 2021 18:59:39 +0100
Subject: [PATCH 134/788] Use consistent pluralization for API groupings in
 reference

---
 .../policies-resources/_index.md              |  4 --
 .../kubernetes-api/policy-resources/_index.md |  4 ++
 .../limit-range-v1.md                         | 26 ++++-----
 .../network-policy-v1.md                      | 26 ++++-----
 .../pod-disruption-budget-v1beta1.md          | 38 ++++++-------
 .../pod-security-policy-v1beta1.md            | 28 +++++-----
 .../resource-quota-v1.md                      | 42 +++++++--------
 .../service-resources/_index.md               |  4 ++
 .../endpoint-slice-v1beta1.md                 | 24 ++++-----
 .../endpoints-v1.md                           | 24 ++++-----
 .../ingress-class-v1.md                       | 24 ++++-----
 .../ingress-v1.md                             | 38 ++++++-------
 .../service-v1.md                             | 38 ++++++-------
 .../services-resources/_index.md              |  4 --
 .../workload-resources/_index.md              |  4 ++
 .../container.md                              |  0
 .../controller-revision-v1.md                 | 24 ++++-----
 .../cron-job-v1beta1.md                       | 40 +++++++-------
 .../cron-job-v2alpha1.md                      | 40 +++++++-------
 .../daemon-set-v1.md                          | 40 +++++++-------
 .../deployment-v1.md                          | 40 +++++++-------
 .../ephemeral-container.md                    |  0
 .../horizontal-pod-autoscaler-v1.md           | 38 ++++++-------
 .../horizontal-pod-autoscaler-v2beta2.md      | 38 ++++++-------
 .../job-v1.md                                 | 40 +++++++-------
 .../pod-template-v1.md                        | 32 +++++------
 .../pod-v1.md                                 | 54 +++++++++----------
 .../priority-class-v1.md                      | 22 ++++----
 .../replica-set-v1.md                         | 40 +++++++-------
 .../replication-controller-v1.md              | 40 +++++++-------
 .../stateful-set-v1.md                        | 40 +++++++-------
 .../workloads-resources/_index.md             |  4 --
 32 files changed, 430 insertions(+), 430 deletions(-)
 delete mode 100644 content/en/docs/reference/kubernetes-api/policies-resources/_index.md
 create mode 100644 content/en/docs/reference/kubernetes-api/policy-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/limit-range-v1.md (90%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/network-policy-v1.md (93%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/pod-disruption-budget-v1beta1.md (86%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/pod-security-policy-v1beta1.md (91%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/resource-quota-v1.md (86%)
 create mode 100644 content/en/docs/reference/kubernetes-api/service-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/endpoint-slice-v1beta1.md (92%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/endpoints-v1.md (92%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/ingress-class-v1.md (87%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/ingress-v1.md (93%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/service-v1.md (94%)
 delete mode 100644 content/en/docs/reference/kubernetes-api/services-resources/_index.md
 create mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/container.md (100%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/controller-revision-v1.md (89%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/cron-job-v1beta1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/cron-job-v2alpha1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/daemon-set-v1.md (90%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/deployment-v1.md (90%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/ephemeral-container.md (100%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/horizontal-pod-autoscaler-v1.md (85%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/horizontal-pod-autoscaler-v2beta2.md (94%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/job-v1.md (91%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/pod-template-v1.md (86%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/pod-v1.md (94%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/priority-class-v1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/replica-set-v1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/replication-controller-v1.md (86%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/stateful-set-v1.md (89%)
 delete mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/_index.md

diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/_index.md b/content/en/docs/reference/kubernetes-api/policies-resources/_index.md
deleted file mode 100644
index 251e411647..0000000000
--- a/content/en/docs/reference/kubernetes-api/policies-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Policies Resources"
-weight: 6
----
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/_index.md b/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
new file mode 100644
index 0000000000..06a9e27fee
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Policy Resources"
+weight: 6
+---
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
similarity index 90%
rename from content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
index d73c4d3630..00982c5ab8 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
@@ -30,7 +30,7 @@ LimitRange sets resource usage limits for each kind of resource in a Namespace.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeSpec" >}}">LimitRangeSpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeSpec" >}}">LimitRangeSpec</a>)
 
   Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -95,7 +95,7 @@ LimitRangeList is a list of LimitRange items.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>), required
 
   Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
 
@@ -142,7 +142,7 @@ GET /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
 401: Unauthorized
 
@@ -215,7 +215,7 @@ GET /api/v1/namespaces/{namespace}/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
 
 401: Unauthorized
 
@@ -283,7 +283,7 @@ GET /api/v1/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
 
 401: Unauthorized
 
@@ -302,7 +302,7 @@ POST /api/v1/namespaces/{namespace}/limitranges
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
+- **body**: <a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
 
   
 
@@ -326,11 +326,11 @@ POST /api/v1/namespaces/{namespace}/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
+201 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Accepted
 
 401: Unauthorized
 
@@ -354,7 +354,7 @@ PUT /api/v1/namespaces/{namespace}/limitranges/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
+- **body**: <a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
 
   
 
@@ -378,9 +378,9 @@ PUT /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
+201 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
 
 401: Unauthorized
 
@@ -433,7 +433,7 @@ PATCH /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
similarity index 93%
rename from content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
index 798a3dc891..78e4868d94 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
@@ -30,7 +30,7 @@ NetworkPolicy describes what network traffic is allowed for a set of Pods
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicySpec" >}}">NetworkPolicySpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicySpec" >}}">NetworkPolicySpec</a>)
 
   Specification of the desired behavior for this NetworkPolicy.
 
@@ -190,7 +190,7 @@ NetworkPolicyList is a list of NetworkPolicy objects.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>), required
 
   Items is a list of schema objects.
 
@@ -237,7 +237,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
 401: Unauthorized
 
@@ -310,7 +310,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -378,7 +378,7 @@ GET /apis/networking.k8s.io/v1/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -397,7 +397,7 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
 
   
 
@@ -421,11 +421,11 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Accepted
 
 401: Unauthorized
 
@@ -449,7 +449,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
 
   
 
@@ -473,9 +473,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
 
 401: Unauthorized
 
@@ -528,7 +528,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md b/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1beta1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1beta1.md
index 47b9d83a7e..9120b19468 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1beta1.md
@@ -29,11 +29,11 @@ PodDisruptionBudget is an object to define the max disruption that can be caused
 - **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
 
-- **spec** (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetSpec" >}}">PodDisruptionBudgetSpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetSpec" >}}">PodDisruptionBudgetSpec</a>)
 
   Specification of the desired behavior of the PodDisruptionBudget.
 
-- **status** (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetStatus" >}}">PodDisruptionBudgetStatus</a>)
+- **status** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetStatus" >}}">PodDisruptionBudgetStatus</a>)
 
   Most recently observed status of the PodDisruptionBudget.
 
@@ -121,7 +121,7 @@ PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
 
-- **items** ([]<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>), required
 
 
 
@@ -167,7 +167,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -200,7 +200,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -273,7 +273,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
 
 401: Unauthorized
 
@@ -341,7 +341,7 @@ GET /apis/policy/v1beta1/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
 
 401: Unauthorized
 
@@ -360,7 +360,7 @@ POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -384,11 +384,11 @@ POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Accepted
 
 401: Unauthorized
 
@@ -412,7 +412,7 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -436,9 +436,9 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
 401: Unauthorized
 
@@ -462,7 +462,7 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -486,9 +486,9 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
 401: Unauthorized
 
@@ -541,7 +541,7 @@ PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -594,7 +594,7 @@ PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/st
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md b/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
similarity index 91%
rename from content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
index 1d2eac8837..59444cbbcf 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
@@ -30,7 +30,7 @@ PodSecurityPolicy governs the ability to make requests that affect the Security
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicySpec" >}}">PodSecurityPolicySpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicySpec" >}}">PodSecurityPolicySpec</a>)
 
   spec defines the policy enforced.
 
@@ -331,7 +331,7 @@ PodSecurityPolicyList is a list of PodSecurityPolicy objects.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>), required
 
   items is a list of schema objects.
 
@@ -373,7 +373,7 @@ GET /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
 401: Unauthorized
 
@@ -441,7 +441,7 @@ GET /apis/policy/v1beta1/podsecuritypolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicyList" >}}">PodSecurityPolicyList</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicyList" >}}">PodSecurityPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -455,7 +455,7 @@ POST /apis/policy/v1beta1/podsecuritypolicies
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
 
   
 
@@ -479,11 +479,11 @@ POST /apis/policy/v1beta1/podsecuritypolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
 
 401: Unauthorized
 
@@ -502,7 +502,7 @@ PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
   name of the PodSecurityPolicy
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
 
   
 
@@ -526,9 +526,9 @@ PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
 
 401: Unauthorized
 
@@ -576,7 +576,7 @@ PATCH /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
 401: Unauthorized
 
@@ -624,9 +624,9 @@ DELETE /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-202 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
index 66b0451d2d..93b8cbc9e8 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
@@ -30,11 +30,11 @@ ResourceQuota sets aggregate quota restrictions enforced per namespace
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaSpec" >}}">ResourceQuotaSpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaSpec" >}}">ResourceQuotaSpec</a>)
 
   Spec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaStatus" >}}">ResourceQuotaStatus</a>)
+- **status** (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaStatus" >}}">ResourceQuotaStatus</a>)
 
   Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -120,7 +120,7 @@ ResourceQuotaList is a list of ResourceQuota items.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>), required
 
   Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/
 
@@ -167,7 +167,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -200,7 +200,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -273,7 +273,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
 
 401: Unauthorized
 
@@ -341,7 +341,7 @@ GET /api/v1/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
 
 401: Unauthorized
 
@@ -360,7 +360,7 @@ POST /api/v1/namespaces/{namespace}/resourcequotas
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -384,11 +384,11 @@ POST /api/v1/namespaces/{namespace}/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
 
 401: Unauthorized
 
@@ -412,7 +412,7 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -436,9 +436,9 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
 401: Unauthorized
 
@@ -462,7 +462,7 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -486,9 +486,9 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
 401: Unauthorized
 
@@ -541,7 +541,7 @@ PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -594,7 +594,7 @@ PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -647,9 +647,9 @@ DELETE /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-202 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/_index.md b/content/en/docs/reference/kubernetes-api/service-resources/_index.md
new file mode 100644
index 0000000000..0ab511b5a4
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/service-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Service Resources"
+weight: 2
+---
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md b/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1beta1.md
similarity index 92%
rename from content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1beta1.md
index bb8c7213bb..1ad467b022 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1beta1.md
@@ -136,7 +136,7 @@ EndpointSliceList represents a list of endpoint slices
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>), required
 
   List of endpoint slices
 
@@ -183,7 +183,7 @@ GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
 401: Unauthorized
 
@@ -256,7 +256,7 @@ GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
 
 401: Unauthorized
 
@@ -324,7 +324,7 @@ GET /apis/discovery.k8s.io/v1beta1/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
 
 401: Unauthorized
 
@@ -343,7 +343,7 @@ POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
 
   
 
@@ -367,11 +367,11 @@ POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
 
-202 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Accepted
+202 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Accepted
 
 401: Unauthorized
 
@@ -395,7 +395,7 @@ PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
 
   
 
@@ -419,9 +419,9 @@ PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
 
 401: Unauthorized
 
@@ -474,7 +474,7 @@ PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
similarity index 92%
rename from content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
index b0c73533f8..ce5c582b30 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
@@ -144,7 +144,7 @@ EndpointsList is a list of endpoints.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>), required
 
   List of endpoints.
 
@@ -191,7 +191,7 @@ GET /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
 401: Unauthorized
 
@@ -264,7 +264,7 @@ GET /api/v1/namespaces/{namespace}/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
 
 401: Unauthorized
 
@@ -332,7 +332,7 @@ GET /api/v1/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
 
 401: Unauthorized
 
@@ -351,7 +351,7 @@ POST /api/v1/namespaces/{namespace}/endpoints
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
 
   
 
@@ -375,11 +375,11 @@ POST /api/v1/namespaces/{namespace}/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
 
-202 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Accepted
+202 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Accepted
 
 401: Unauthorized
 
@@ -403,7 +403,7 @@ PUT /api/v1/namespaces/{namespace}/endpoints/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
 
   
 
@@ -427,9 +427,9 @@ PUT /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
 
 401: Unauthorized
 
@@ -482,7 +482,7 @@ PATCH /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
similarity index 87%
rename from content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
index 121c9551eb..92ad085310 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
@@ -30,7 +30,7 @@ IngressClass represents the class of the Ingress, referenced by the Ingress Spec
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClassSpec" >}}">IngressClassSpec</a>)
+- **spec** (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClassSpec" >}}">IngressClassSpec</a>)
 
   Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -72,7 +72,7 @@ IngressClassList is a collection of IngressClasses.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>), required
 
   Items is the list of IngressClasses.
 
@@ -114,7 +114,7 @@ GET /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
 401: Unauthorized
 
@@ -182,7 +182,7 @@ GET /apis/networking.k8s.io/v1/ingressclasses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClassList" >}}">IngressClassList</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClassList" >}}">IngressClassList</a>): OK
 
 401: Unauthorized
 
@@ -196,7 +196,7 @@ POST /apis/networking.k8s.io/v1/ingressclasses
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
 
   
 
@@ -220,11 +220,11 @@ POST /apis/networking.k8s.io/v1/ingressclasses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
 
-202 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Accepted
+202 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Accepted
 
 401: Unauthorized
 
@@ -243,7 +243,7 @@ PUT /apis/networking.k8s.io/v1/ingressclasses/{name}
   name of the IngressClass
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
 
   
 
@@ -267,9 +267,9 @@ PUT /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
 
 401: Unauthorized
 
@@ -317,7 +317,7 @@ PATCH /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
similarity index 93%
rename from content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
index 003ad959ea..72a0383f96 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
@@ -30,11 +30,11 @@ Ingress is a collection of rules that allow inbound connections to reach the end
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../services-resources/ingress-v1#IngressSpec" >}}">IngressSpec</a>)
+- **spec** (<a href="{{< ref "../service-resources/ingress-v1#IngressSpec" >}}">IngressSpec</a>)
 
   Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../services-resources/ingress-v1#IngressStatus" >}}">IngressStatus</a>)
+- **status** (<a href="{{< ref "../service-resources/ingress-v1#IngressStatus" >}}">IngressStatus</a>)
 
   Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -274,7 +274,7 @@ IngressList is a collection of Ingress.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>), required
 
   Items is the list of Ingress.
 
@@ -321,7 +321,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -354,7 +354,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -427,7 +427,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
 
 401: Unauthorized
 
@@ -495,7 +495,7 @@ GET /apis/networking.k8s.io/v1/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
 
 401: Unauthorized
 
@@ -514,7 +514,7 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -538,11 +538,11 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
-202 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Accepted
+202 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Accepted
 
 401: Unauthorized
 
@@ -566,7 +566,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -590,9 +590,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
 401: Unauthorized
 
@@ -616,7 +616,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -640,9 +640,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
 401: Unauthorized
 
@@ -695,7 +695,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -748,7 +748,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/service-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
similarity index 94%
rename from content/en/docs/reference/kubernetes-api/services-resources/service-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
index bfb2c819bd..3ed9e93d96 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/service-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
@@ -30,11 +30,11 @@ Service is a named abstraction of software service (for example, mysql) consisti
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../services-resources/service-v1#ServiceSpec" >}}">ServiceSpec</a>)
+- **spec** (<a href="{{< ref "../service-resources/service-v1#ServiceSpec" >}}">ServiceSpec</a>)
 
   Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../services-resources/service-v1#ServiceStatus" >}}">ServiceStatus</a>)
+- **status** (<a href="{{< ref "../service-resources/service-v1#ServiceStatus" >}}">ServiceStatus</a>)
 
   Most recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -290,7 +290,7 @@ ServiceList holds a list of services.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>), required
 
   List of services
 
@@ -337,7 +337,7 @@ GET /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -370,7 +370,7 @@ GET /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -443,7 +443,7 @@ GET /api/v1/namespaces/{namespace}/services
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
 
 401: Unauthorized
 
@@ -511,7 +511,7 @@ GET /api/v1/services
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
 
 401: Unauthorized
 
@@ -530,7 +530,7 @@ POST /api/v1/namespaces/{namespace}/services
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -554,11 +554,11 @@ POST /api/v1/namespaces/{namespace}/services
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
 
-202 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Accepted
+202 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Accepted
 
 401: Unauthorized
 
@@ -582,7 +582,7 @@ PUT /api/v1/namespaces/{namespace}/services/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -606,9 +606,9 @@ PUT /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
 
 401: Unauthorized
 
@@ -632,7 +632,7 @@ PUT /api/v1/namespaces/{namespace}/services/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -656,9 +656,9 @@ PUT /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
 
 401: Unauthorized
 
@@ -711,7 +711,7 @@ PATCH /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -764,7 +764,7 @@ PATCH /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/_index.md b/content/en/docs/reference/kubernetes-api/services-resources/_index.md
deleted file mode 100644
index 1c4c64040d..0000000000
--- a/content/en/docs/reference/kubernetes-api/services-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Services Resources"
-weight: 2
----
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/_index.md b/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
new file mode 100644
index 0000000000..85d1bfa44f
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Workload Resources"
+weight: 1
+---
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/container.md b/content/en/docs/reference/kubernetes-api/workload-resources/container.md
similarity index 100%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/container.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/container.md
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
index 950e9d729c..5caea2a5d9 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
@@ -88,7 +88,7 @@ ControllerRevisionList is a resource containing a list of ControllerRevision obj
 
   More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>), required
 
   Items is the list of ControllerRevisions
 
@@ -135,7 +135,7 @@ GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
 401: Unauthorized
 
@@ -208,7 +208,7 @@ GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
 
 401: Unauthorized
 
@@ -276,7 +276,7 @@ GET /apis/apps/v1/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
 
 401: Unauthorized
 
@@ -295,7 +295,7 @@ POST /apis/apps/v1/namespaces/{namespace}/controllerrevisions
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
+- **body**: <a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
 
   
 
@@ -319,11 +319,11 @@ POST /apis/apps/v1/namespaces/{namespace}/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
+201 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Accepted
 
 401: Unauthorized
 
@@ -347,7 +347,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
+- **body**: <a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
 
   
 
@@ -371,9 +371,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
+201 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
 
 401: Unauthorized
 
@@ -426,7 +426,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1beta1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1beta1.md
index 22a0135bf8..c99aa57998 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1beta1.md
@@ -30,11 +30,11 @@ CronJob represents the configuration of a single cron job.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobSpec" >}}">CronJobSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobSpec" >}}">CronJobSpec</a>)
 
   Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobStatus" >}}">CronJobStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobStatus" >}}">CronJobStatus</a>)
 
   Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -59,7 +59,7 @@ CronJobSpec describes how the job execution will look like and when it will actu
 
     Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-  - **jobTemplate.spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+  - **jobTemplate.spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
 
     Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -128,7 +128,7 @@ CronJobList is a collection of cron jobs.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>), required
 
   items is the list of CronJobs.
 
@@ -175,7 +175,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -208,7 +208,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -281,7 +281,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -349,7 +349,7 @@ GET /apis/batch/v1beta1/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -368,7 +368,7 @@ POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -392,11 +392,11 @@ POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Accepted
 
 401: Unauthorized
 
@@ -420,7 +420,7 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -444,9 +444,9 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -470,7 +470,7 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -494,9 +494,9 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -549,7 +549,7 @@ PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -602,7 +602,7 @@ PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v2alpha1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v2alpha1.md
index c7c2ba7a81..fc6a933131 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v2alpha1.md
@@ -30,11 +30,11 @@ CronJob represents the configuration of a single cron job.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobSpec" >}}">CronJobSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobSpec" >}}">CronJobSpec</a>)
 
   Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobStatus" >}}">CronJobStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobStatus" >}}">CronJobStatus</a>)
 
   Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -59,7 +59,7 @@ CronJobSpec describes how the job execution will look like and when it will actu
 
     Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-  - **jobTemplate.spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+  - **jobTemplate.spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
 
     Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -128,7 +128,7 @@ CronJobList is a collection of cron jobs.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>), required
 
   items is the list of CronJobs.
 
@@ -175,7 +175,7 @@ GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -208,7 +208,7 @@ GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -281,7 +281,7 @@ GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -349,7 +349,7 @@ GET /apis/batch/v2alpha1/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -368,7 +368,7 @@ POST /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -392,11 +392,11 @@ POST /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Accepted
 
 401: Unauthorized
 
@@ -420,7 +420,7 @@ PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -444,9 +444,9 @@ PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -470,7 +470,7 @@ PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -494,9 +494,9 @@ PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -549,7 +549,7 @@ PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -602,7 +602,7 @@ PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
similarity index 90%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
index 95ae869be1..169d361c2a 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
@@ -30,11 +30,11 @@ DaemonSet represents the configuration of a daemon set.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetSpec" >}}">DaemonSetSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetSpec" >}}">DaemonSetSpec</a>)
 
   The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetStatus" >}}">DaemonSetStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetStatus" >}}">DaemonSetStatus</a>)
 
   The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ DaemonSetSpec is the specification of a daemon set.
 
   A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -187,7 +187,7 @@ DaemonSetList is a collection of daemon sets.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>), required
 
   A list of daemon sets.
 
@@ -234,7 +234,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -267,7 +267,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -340,7 +340,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
 
 401: Unauthorized
 
@@ -408,7 +408,7 @@ GET /apis/apps/v1/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
 
 401: Unauthorized
 
@@ -427,7 +427,7 @@ POST /apis/apps/v1/namespaces/{namespace}/daemonsets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -451,11 +451,11 @@ POST /apis/apps/v1/namespaces/{namespace}/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Accepted
 
 401: Unauthorized
 
@@ -479,7 +479,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -503,9 +503,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
 401: Unauthorized
 
@@ -529,7 +529,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -553,9 +553,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
 401: Unauthorized
 
@@ -608,7 +608,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -661,7 +661,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
similarity index 90%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
index 7e5b39c929..052a54bcc8 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
@@ -30,11 +30,11 @@ Deployment enables declarative updates for Pods and ReplicaSets.
 
   Standard object metadata.
 
-- **spec** (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentSpec" >}}">DeploymentSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentSpec" >}}">DeploymentSpec</a>)
 
   Specification of the desired behavior of the Deployment.
 
-- **status** (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentStatus" >}}">DeploymentStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentStatus" >}}">DeploymentStatus</a>)
 
   Most recently observed status of the Deployment.
 
@@ -52,7 +52,7 @@ DeploymentSpec is the specification of the desired behavior of the Deployment.
 
   Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template's labels.
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   Template describes the pods that will be created.
 
@@ -207,7 +207,7 @@ DeploymentList is a list of Deployments.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>), required
 
   Items is the list of Deployments.
 
@@ -254,7 +254,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -287,7 +287,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -360,7 +360,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
 
 401: Unauthorized
 
@@ -428,7 +428,7 @@ GET /apis/apps/v1/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
 
 401: Unauthorized
 
@@ -447,7 +447,7 @@ POST /apis/apps/v1/namespaces/{namespace}/deployments
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -471,11 +471,11 @@ POST /apis/apps/v1/namespaces/{namespace}/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Accepted
 
 401: Unauthorized
 
@@ -499,7 +499,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -523,9 +523,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
 401: Unauthorized
 
@@ -549,7 +549,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -573,9 +573,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
 401: Unauthorized
 
@@ -628,7 +628,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -681,7 +681,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md b/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-container.md
similarity index 100%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-container.md
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
similarity index 85%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
index 5bb2f6e175..8ed1581cbe 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
@@ -30,11 +30,11 @@ configuration of a horizontal pod autoscaler.
 
   Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
 
   behaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
 
-- **status** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
 
   current information about the autoscaler.
 
@@ -132,7 +132,7 @@ list of horizontal pod autoscaler objects.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
 
   list of horizontal pod autoscaler objects.
 
@@ -179,7 +179,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -212,7 +212,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -285,7 +285,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -353,7 +353,7 @@ GET /apis/autoscaling/v1/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -372,7 +372,7 @@ POST /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -396,11 +396,11 @@ POST /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
 
 401: Unauthorized
 
@@ -424,7 +424,7 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -448,9 +448,9 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -474,7 +474,7 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -498,9 +498,9 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -553,7 +553,7 @@ PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -606,7 +606,7 @@ PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
similarity index 94%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
index 56fd55d24b..2f8f15d505 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
@@ -30,11 +30,11 @@ HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, wh
 
   metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
 
   spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
 
-- **status** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
 
   status is the current information about the autoscaler.
 
@@ -684,7 +684,7 @@ HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.
 
   metadata is the standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
 
   items is the list of horizontal pod autoscaler objects.
 
@@ -731,7 +731,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -764,7 +764,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -837,7 +837,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -905,7 +905,7 @@ GET /apis/autoscaling/v2beta2/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -924,7 +924,7 @@ POST /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -948,11 +948,11 @@ POST /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
 
 401: Unauthorized
 
@@ -976,7 +976,7 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -1000,9 +1000,9 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -1026,7 +1026,7 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -1050,9 +1050,9 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -1105,7 +1105,7 @@ PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -1158,7 +1158,7 @@ PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
similarity index 91%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
index 3deab1c4be..f01c257e45 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
@@ -30,11 +30,11 @@ Job represents the configuration of a single job.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
 
   Specification of the desired behavior of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/job-v1#JobStatus" >}}">JobStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/job-v1#JobStatus" >}}">JobStatus</a>)
 
   Current status of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -53,7 +53,7 @@ JobSpec describes how the job execution will look like.
 ### Replicas
 
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   Describes the pod that will be created when executing a job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
 
@@ -184,7 +184,7 @@ JobList is a collection of jobs.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>), required
 
   items is the list of Jobs.
 
@@ -231,7 +231,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -264,7 +264,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -337,7 +337,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#JobList" >}}">JobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#JobList" >}}">JobList</a>): OK
 
 401: Unauthorized
 
@@ -405,7 +405,7 @@ GET /apis/batch/v1/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#JobList" >}}">JobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#JobList" >}}">JobList</a>): OK
 
 401: Unauthorized
 
@@ -424,7 +424,7 @@ POST /apis/batch/v1/namespaces/{namespace}/jobs
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -448,11 +448,11 @@ POST /apis/batch/v1/namespaces/{namespace}/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Accepted
 
 401: Unauthorized
 
@@ -476,7 +476,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -500,9 +500,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
 
 401: Unauthorized
 
@@ -526,7 +526,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -550,9 +550,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
 
 401: Unauthorized
 
@@ -605,7 +605,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -658,7 +658,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
index fec34df19f..663ab6bea4 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
@@ -30,7 +30,7 @@ PodTemplate describes a template for creating copies of a predefined pod.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template defines the pods that will be created from this pod template. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -48,7 +48,7 @@ PodTemplateSpec describes the data a pod should have when created from a templat
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
 
   Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -72,7 +72,7 @@ PodTemplateList is a list of PodTemplates.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>), required
 
   List of pod templates
 
@@ -119,7 +119,7 @@ GET /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
 401: Unauthorized
 
@@ -192,7 +192,7 @@ GET /api/v1/namespaces/{namespace}/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
 
 401: Unauthorized
 
@@ -260,7 +260,7 @@ GET /api/v1/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
 
 401: Unauthorized
 
@@ -279,7 +279,7 @@ POST /api/v1/namespaces/{namespace}/podtemplates
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
+- **body**: <a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
 
   
 
@@ -303,11 +303,11 @@ POST /api/v1/namespaces/{namespace}/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
+201 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
 
 401: Unauthorized
 
@@ -331,7 +331,7 @@ PUT /api/v1/namespaces/{namespace}/podtemplates/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
+- **body**: <a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
 
   
 
@@ -355,9 +355,9 @@ PUT /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
+201 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
 
 401: Unauthorized
 
@@ -410,7 +410,7 @@ PATCH /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
 401: Unauthorized
 
@@ -463,9 +463,9 @@ DELETE /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-202 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
similarity index 94%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
index 584c338172..4be3289e9f 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
@@ -30,11 +30,11 @@ Pod is a collection of containers that can run on a host. This resource is creat
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
 
   Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/pod-v1#PodStatus" >}}">PodStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/pod-v1#PodStatus" >}}">PodStatus</a>)
 
   Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -53,13 +53,13 @@ PodSpec is a description of a pod.
 ### Containers
 
 
-- **containers** ([]<a href="{{< ref "../workloads-resources/container#Container" >}}">Container</a>), required
+- **containers** ([]<a href="{{< ref "../workload-resources/container#Container" >}}">Container</a>), required
 
   *Patch strategy: merge on key `name`*
   
   List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.
 
-- **initContainers** ([]<a href="{{< ref "../workloads-resources/container#Container" >}}">Container</a>)
+- **initContainers** ([]<a href="{{< ref "../workload-resources/container#Container" >}}">Container</a>)
 
   *Patch strategy: merge on key `name`*
   
@@ -430,7 +430,7 @@ PodSpec is a description of a pod.
 ### Alpha level
 
 
-- **ephemeralContainers** ([]<a href="{{< ref "../workloads-resources/ephemeral-container#EphemeralContainer" >}}">EphemeralContainer</a>)
+- **ephemeralContainers** ([]<a href="{{< ref "../workload-resources/ephemeral-container#EphemeralContainer" >}}">EphemeralContainer</a>)
 
   *Patch strategy: merge on key `name`*
   
@@ -547,15 +547,15 @@ PodStatus represents information about the status of a pod. Status may trail the
 
   The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md
 
-- **initContainerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
+- **initContainerStatuses** ([]<a href="{{< ref "../workload-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
 
   The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
 
-- **containerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
+- **containerStatuses** ([]<a href="{{< ref "../workload-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
 
   The list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
 
-- **ephemeralContainerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
+- **ephemeralContainerStatuses** ([]<a href="{{< ref "../workload-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
 
   Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.
 
@@ -579,7 +579,7 @@ PodList is a list of Pods.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>), required
 
   List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md
 
@@ -626,7 +626,7 @@ GET /api/v1/namespaces/{namespace}/pods/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
 401: Unauthorized
 
@@ -732,7 +732,7 @@ GET /api/v1/namespaces/{namespace}/pods/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
 401: Unauthorized
 
@@ -805,7 +805,7 @@ GET /api/v1/namespaces/{namespace}/pods
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#PodList" >}}">PodList</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#PodList" >}}">PodList</a>): OK
 
 401: Unauthorized
 
@@ -873,7 +873,7 @@ GET /api/v1/pods
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#PodList" >}}">PodList</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#PodList" >}}">PodList</a>): OK
 
 401: Unauthorized
 
@@ -892,7 +892,7 @@ POST /api/v1/namespaces/{namespace}/pods
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
+- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
 
   
 
@@ -916,11 +916,11 @@ POST /api/v1/namespaces/{namespace}/pods
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
+201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
 
 401: Unauthorized
 
@@ -944,7 +944,7 @@ PUT /api/v1/namespaces/{namespace}/pods/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
+- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
 
   
 
@@ -968,9 +968,9 @@ PUT /api/v1/namespaces/{namespace}/pods/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
+201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
 
 401: Unauthorized
 
@@ -994,7 +994,7 @@ PUT /api/v1/namespaces/{namespace}/pods/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
+- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
 
   
 
@@ -1018,9 +1018,9 @@ PUT /api/v1/namespaces/{namespace}/pods/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
+201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
 
 401: Unauthorized
 
@@ -1073,7 +1073,7 @@ PATCH /api/v1/namespaces/{namespace}/pods/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
 401: Unauthorized
 
@@ -1126,7 +1126,7 @@ PATCH /api/v1/namespaces/{namespace}/pods/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
 401: Unauthorized
 
@@ -1179,9 +1179,9 @@ DELETE /api/v1/namespaces/{namespace}/pods/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
 
-202 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
index 30b40e6840..28087807c1 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
@@ -66,7 +66,7 @@ PriorityClassList is a collection of priority classes.
 
   Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>), required
 
   items is the list of PriorityClasses
 
@@ -108,7 +108,7 @@ GET /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
 401: Unauthorized
 
@@ -176,7 +176,7 @@ GET /apis/scheduling.k8s.io/v1/priorityclasses
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClassList" >}}">PriorityClassList</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClassList" >}}">PriorityClassList</a>): OK
 
 401: Unauthorized
 
@@ -190,7 +190,7 @@ POST /apis/scheduling.k8s.io/v1/priorityclasses
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
+- **body**: <a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
 
   
 
@@ -214,11 +214,11 @@ POST /apis/scheduling.k8s.io/v1/priorityclasses
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
+201 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Accepted
 
 401: Unauthorized
 
@@ -237,7 +237,7 @@ PUT /apis/scheduling.k8s.io/v1/priorityclasses/{name}
   name of the PriorityClass
 
 
-- **body**: <a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
+- **body**: <a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
 
   
 
@@ -261,9 +261,9 @@ PUT /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
+201 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
 
 401: Unauthorized
 
@@ -311,7 +311,7 @@ PATCH /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
index 429a1bd5a2..708b0fd966 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
@@ -30,11 +30,11 @@ ReplicaSet ensures that a specified number of pod replicas are running at any gi
 
   If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetSpec" >}}">ReplicaSetSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetSpec" >}}">ReplicaSetSpec</a>)
 
   Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetStatus" >}}">ReplicaSetStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetStatus" >}}">ReplicaSetStatus</a>)
 
   Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ ReplicaSetSpec is the specification of a ReplicaSet.
 
   Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -146,7 +146,7 @@ ReplicaSetList is a collection of ReplicaSets.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>), required
 
   List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller
 
@@ -193,7 +193,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -226,7 +226,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -299,7 +299,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
 
 401: Unauthorized
 
@@ -367,7 +367,7 @@ GET /apis/apps/v1/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
 
 401: Unauthorized
 
@@ -386,7 +386,7 @@ POST /apis/apps/v1/namespaces/{namespace}/replicasets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -410,11 +410,11 @@ POST /apis/apps/v1/namespaces/{namespace}/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Accepted
 
 401: Unauthorized
 
@@ -438,7 +438,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -462,9 +462,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
 401: Unauthorized
 
@@ -488,7 +488,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -512,9 +512,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
 401: Unauthorized
 
@@ -567,7 +567,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -620,7 +620,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
index 2970b6670c..1f7962ee96 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
@@ -30,11 +30,11 @@ ReplicationController represents the configuration of a replication controller.
 
   If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerSpec" >}}">ReplicationControllerSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerSpec" >}}">ReplicationControllerSpec</a>)
 
   Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerStatus" >}}">ReplicationControllerStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerStatus" >}}">ReplicationControllerStatus</a>)
 
   Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ ReplicationControllerSpec is the specification of a replication controller.
 
   Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -146,7 +146,7 @@ ReplicationControllerList is a collection of replication controllers.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>), required
 
   List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller
 
@@ -193,7 +193,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -226,7 +226,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -299,7 +299,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
 
 401: Unauthorized
 
@@ -367,7 +367,7 @@ GET /api/v1/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
 
 401: Unauthorized
 
@@ -386,7 +386,7 @@ POST /api/v1/namespaces/{namespace}/replicationcontrollers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -410,11 +410,11 @@ POST /api/v1/namespaces/{namespace}/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Accepted
 
 401: Unauthorized
 
@@ -438,7 +438,7 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -462,9 +462,9 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
 401: Unauthorized
 
@@ -488,7 +488,7 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -512,9 +512,9 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
 401: Unauthorized
 
@@ -567,7 +567,7 @@ PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -620,7 +620,7 @@ PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
index 1a55fa4c1d..17ea7755f2 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
@@ -32,11 +32,11 @@ The StatefulSet guarantees that a given network identity will always map to the
 - **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
 
-- **spec** (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetSpec" >}}">StatefulSetSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetSpec" >}}">StatefulSetSpec</a>)
 
   Spec defines the desired identities of pods in this set.
 
-- **status** (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetStatus" >}}">StatefulSetStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetStatus" >}}">StatefulSetStatus</a>)
 
   Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.
 
@@ -58,7 +58,7 @@ A StatefulSetSpec is the specification of a StatefulSet.
 
   selector is a label query over pods that should match the replica count. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.
 
@@ -193,7 +193,7 @@ StatefulSetList is a collection of StatefulSets.
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
 
-- **items** ([]<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>), required
 
 
 
@@ -239,7 +239,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -272,7 +272,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -345,7 +345,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
 
 401: Unauthorized
 
@@ -413,7 +413,7 @@ GET /apis/apps/v1/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
 
 401: Unauthorized
 
@@ -432,7 +432,7 @@ POST /apis/apps/v1/namespaces/{namespace}/statefulsets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -456,11 +456,11 @@ POST /apis/apps/v1/namespaces/{namespace}/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Accepted
 
 401: Unauthorized
 
@@ -484,7 +484,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -508,9 +508,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
 401: Unauthorized
 
@@ -534,7 +534,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -558,9 +558,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
 401: Unauthorized
 
@@ -613,7 +613,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -666,7 +666,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md b/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
deleted file mode 100644
index 1b5aab3fba..0000000000
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Workloads Resources"
-weight: 1
----

From 2edc0b8e5963862917d3543e48c3aaf36eb81048 Mon Sep 17 00:00:00 2001
From: k-wall <kwall@apache.org>
Date: Mon, 8 Mar 2021 19:45:15 +0000
Subject: [PATCH 135/788] Document behaviour when optionally referenced
 configmap appears after the pod starts

---
 .../configure-pod-container/configure-pod-configmap.md    | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md
index 40987152e8..6432b10c93 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -624,9 +624,15 @@ Like before, all previous files in the `/etc/config/` directory will be deleted.
 You can project keys to specific paths and specific permissions on a per-file
 basis. The [Secrets](/docs/concepts/configuration/secret/#using-secrets-as-files-from-a-pod) user guide explains the syntax.
 
+### Optional References
+
+A ConfigMap reference may be marked "optional".  If the ConfigMap is non-existent, the mounted volume will be empty. If the ConfigMap exists, but the referenced key is non-existent the path will be absent beneath the mount point.
+
 ### Mounted ConfigMaps are updated automatically
 
-When a ConfigMap already being consumed in a volume is updated, projected keys are eventually updated as well. Kubelet is checking whether the mounted ConfigMap is fresh on every periodic sync. However, it is using its local ttl-based cache for getting the current value of the ConfigMap. As a result, the total delay from the moment when the ConfigMap is updated to the moment when new keys are projected to the pod can be as long as kubelet sync period (1 minute by default) + ttl of ConfigMaps cache (1 minute by default) in kubelet. You can trigger an immediate refresh by updating one of the pod's annotations.
+When a mounted ConfigMap is updated, the projected content is eventually updated too.  This applies in the case where an optionally referenced ConfigMap comes into existence after a pod has started.
+
+Kubelet is checking whether the mounted ConfigMap is fresh on every periodic sync. However, it is using its local ttl-based cache for getting the current value of the ConfigMap. As a result, the total delay from the moment when the ConfigMap is updated to the moment when new keys are projected to the pod can be as long as kubelet sync period (1 minute by default) + ttl of ConfigMaps cache (1 minute by default) in kubelet. You can trigger an immediate refresh by updating one of the pod's annotations.
 
 {{< note >}}
 A container using a ConfigMap as a [subPath](/docs/concepts/storage/volumes/#using-subpath) volume will not receive ConfigMap updates.

From f2464dcc5fdcd666c3594f058647a9c669997008 Mon Sep 17 00:00:00 2001
From: Clayton Coleman <ccoleman@redhat.com>
Date: Tue, 2 Mar 2021 12:14:39 -0500
Subject: [PATCH 136/788] Mark scheduler pod resource metrics as beta

They will be part of 1.21 as beta stability.
---
 .../en/docs/concepts/cluster-administration/system-metrics.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/cluster-administration/system-metrics.md b/content/en/docs/concepts/cluster-administration/system-metrics.md
index 3c7e137ded..073e0c7236 100644
--- a/content/en/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/en/docs/concepts/cluster-administration/system-metrics.md
@@ -134,7 +134,7 @@ cloudprovider_gce_api_request_duration_seconds { request = "list_disk"}
 
 ### kube-scheduler metrics
 
-{{< feature-state for_k8s_version="v1.20" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 The scheduler exposes optional metrics that reports the requested resources and the desired limits of all running pods. These metrics can be used to build capacity planning dashboards, assess current or historical scheduling limits, quickly identify workloads that cannot schedule due to lack of resources, and compare actual usage to the pod's request.
 

From da4074fa1f6831fa985d29a547e6f0ffaea55d01 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Tue, 9 Mar 2021 00:38:42 +0200
Subject: [PATCH 137/788] [zh] remove feature-state tag for categories for CRDs

---
 .../custom-resources/custom-resource-definitions.md             | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
index c428192679..daa4f8829e 100644
--- a/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
+++ b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
@@ -1788,8 +1788,6 @@ resources that have the scale subresource enabled.
 -->
 ### 分类   {#categories}
 
-{{< feature-state state="beta" for_k8s_version="v1.10" >}}
-
 <!--
 Categories is a list of grouped resources the custom resource belongs to (eg. `all`).
 You can use `kubectl get <category-name>` to list the resources belonging to the category.

From 5bb9d6a6c8a12da3a226ec99eefd831dbc4a8ea5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Miguel=20=C3=81ngel=20Garc=C3=ADa?=
 <magmax@users.noreply.github.com>
Date: Mon, 8 Mar 2021 23:59:00 +0100
Subject: [PATCH 138/788] [es] Add
 content/es/docs/concepts/containers/runtime-class.md (#26662)

* RuntimeClass translated to Spanish

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Remove forgotten text

* Apply suggestions from code review

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Apply suggestions from code review

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/containers/runtime-class.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

Co-authored-by: Victor Morales <chipahuac@hotmail.com>
Co-authored-by: Rael Garcia <rael@rael.io>
---
 .../docs/concepts/containers/runtime-class.md | 205 ++++++++++++++++++
 1 file changed, 205 insertions(+)
 create mode 100644 content/es/docs/concepts/containers/runtime-class.md

diff --git a/content/es/docs/concepts/containers/runtime-class.md b/content/es/docs/concepts/containers/runtime-class.md
new file mode 100644
index 0000000000..8c53cde87d
--- /dev/null
+++ b/content/es/docs/concepts/containers/runtime-class.md
@@ -0,0 +1,205 @@
+---
+reviewers:
+title: RuntimeClass
+content_type: concept
+weight: 20
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.20" state="stable" >}}
+
+Esta página describe el recurso RuntimeClass y el mecanismo de selección del
+motor de ejecución.
+
+RuntimeClass es una característica que permite seleccionar la configuración del
+motor de ejecución para los contenedores. La configuración del motor de ejecución para
+los contenedores se utiliza para ejecutar los contenedores de un Pod.
+
+
+
+
+<!-- body -->
+
+## Motivación
+
+Se puede seleccionar un RuntimeClass diferente entre diferentes Pods para
+proporcionar equilibrio entre rendimiento y seguridad. Por ejemplo, si parte de
+la carga de trabajo requiere un alto nivel de garantía de seguridad, se podrían
+planificar esos Pods para ejecutarse en un motor de ejecución que use
+virtualización de hardware. Así se beneficiaría con un mayor aislamiento del motor
+de ejecución alternativo, con el coste de alguna sobrecarga adicional.
+
+También se puede utilizar el RuntimeClass para ejecutar distintos Pods con el
+mismo motor de ejecución pero con distintos parámetros.
+
+## Configuración
+
+1. Configurar la implementación del CRI en los nodos (depende del motor de
+   ejecución)
+2. Crear los recursos RuntimeClass correspondientes.
+
+### 1. Configurar la implementación del CRI en los nodos
+
+La configuración disponible utilizando RuntimeClass dependen de la
+implementación de la Interfaz del Motor de ejecución de Containers (CRI). Véase
+la sección [Configuración del CRI](#cri-configuration) para más
+información sobre cómo configurar la implementación del CRI.
+
+{{< note >}}
+RuntimeClass por defecto asume una configuración de nodos homogénea para todo el
+clúster (lo que significa que todos los nodos están configurados de la misma
+forma para el motor de ejecución de los contenedores). Para soportar configuraciones
+heterogéneas de nodos, véase [Planificación](#scheduling) más abajo.
+{{< /note >}}
+
+Las configuraciones tienen un nombre de `handler` (manipulador) correspondiente, referenciado
+por la RuntimeClass. El `handler` debe ser una etiqueta DNS 1123 válida
+(alfanumérico + caracter `-`).
+
+### 2. Crear los recursos RuntimeClass correspondientes.
+
+Cada configuración establecida en el paso 1 tiene un nombre de `handler`, que
+identifica a dicha configuración. Para cada `handler`, hay que crear un objeto
+RuntimeClass correspondiente.
+
+Actualmente el recurso RuntimeClass sólo tiene dos campos significativos: el
+nombre del RuntimeClass (`metadata.name`) y el `handler`. La
+definición del objeto se parece a ésta:
+
+```yaml
+apiVersion: node.k8s.io/v1  # La RuntimeClass se define en el grupo node.k8s.io
+kind: RuntimeClass
+metadata:
+  name: myclass  # Nombre por el que se referenciará la RuntimeClass
+  # no contiene espacio de nombres
+handler: myconfiguration  # El nombre de la configuración CRI correspondiente
+```
+
+El nombre de un objeto RuntimeClass debe ser un [nombre de subdominio
+DNS](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)
+válido.
+
+{{< note >}}
+Se recomienda que las operaciones de escritura de la RuntimeClass
+(creación/modificación/parcheo/elimiación) se restrinjan al administrador del
+clúster. Habitualmente es el valor por defecto. Véase [Visión general de la
+Autorización](/docs/reference/access-authn-authz/authorization/) para más
+detalles.
+{{< /note >}}
+
+## Uso
+
+Una vez se han configurado las RuntimeClasses para el clúster, el utilizarlas es
+muy sencillo. Solo se especifica un `runtimeClassName` en la especificación del Pod.
+Por ejemplo:
+
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: mypod
+spec:
+  runtimeClassName: myclass
+  # ...
+```
+
+Así se informa a Kubelet del nombre de la RuntimeClass a utilizar para
+este pod. Si dicha RuntimeClass no existe, o el CRI no puede ejecutar el
+`handler` correspondiente, el pod entrará en la
+[fase](/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase) final `Failed`.
+Se puede buscar por el correspondiente
+[evento](/docs/tasks/debug-application-cluster/debug-application-introspection/)
+con el mensaje de error.
+
+Si no se especifica ninguna `runtimeClassName`, se usará el RuntimeHandler por
+defecto, lo que equivale al comportamiento cuando la opción RuntimeClass está
+deshabilitada.
+
+### Configuración del CRI
+
+Para más detalles sobre cómo configurar los motores de ejecución del CRI, véase
+[instalación del CRI](/docs/setup/production-environment/container-runtimes/).
+
+#### dockershim
+
+El CRI dockershim incorporado por Kubernetes no soporta manejadores del motor de
+ejecución.
+
+#### {{< glossary_tooltip term_id="containerd" >}}
+
+Los `handlers` del motor de ejecución se configuran mediante la configuración
+de containerd en `/etc/containerd/config.toml`. Los `handlers` válidos se
+configuran en la sección de motores de ejecución:
+
+```
+[plugins.cri.containerd.runtimes.${HANDLER_NAME}]
+```
+
+Véase la configuración de containerd para más detalles:
+https://github.com/containerd/cri/blob/master/docs/config.md
+
+#### {{< glossary_tooltip term_id="cri-o" >}}
+
+Los `handlers` del motor de ejecución se configuran a través de la
+configuración del CRI-O en `/etc/crio/crio.conf`. Los manejadores válidos se
+configuran en la [tabla
+crio.runtime](https://github.com/cri-o/cri-o/blob/master/docs/crio.conf.5.md#crioruntime-table)
+
+```
+[crio.runtime.runtimes.${HANDLER_NAME}]
+  runtime_path = "${PATH_TO_BINARY}"
+```
+
+Véase la [documentación de la
+configuración](https://raw.githubusercontent.com/cri-o/cri-o/9f11d1d/docs/crio.conf.5.md)
+de CRI-O para más detalles.
+
+## Planificación
+
+{{< feature-state for_k8s_version="v1.16" state="beta" >}}
+
+Especificando el campo `scheduling` en una RuntimeClass se pueden establecer
+restricciones para asegurar que los Pods ejecutándose con dicha RuntimeClass se
+planifican en los nodos que la soportan.
+
+Para asegurar que los pods sean asignados en nodos que soportan una RuntimeClass
+determinada, ese conjunto de nodos debe tener una etiqueta común que se
+selecciona en el campo `runtimeclass.scheduling.nodeSelector`. El nodeSelector
+de la RuntimeClass se combina con el nodeSelector del pod durante la admisión,
+haciéndose efectiva la intersección del conjunto de nodos seleccionados por
+ambos. Si hay conflicto, el pod se rechazará.
+
+Si los nodos soportados se marcan para evitar que los pods con otra RuntimeClass
+se ejecuten en el nodo, se pueden añadir `tolerations` al RuntimeClass. Igual
+que con el `nodeSelector`, las tolerancias se mezclan con las tolerancias del
+pod durante la admisión, haciéndose efectiva la unión del conjunto de nodos
+tolerados por ambos.
+
+Para saber más sobre configurar el selector de nodos y las tolerancias, véase
+[Asignando Pods a Nodos](/docs/concepts/scheduling-eviction/assign-pod-node/).
+
+### Sobrecarga del Pod
+
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+
+Se pueden especificar recursos de _sobrecarga_ adicional que se asocian a los
+Pods que estén ejecutándose. Declarar la sobrecarga permite al clúster (incluido
+el planificador) contabilizarlo al tomar decisiones sobre los Pods y los
+recursos. Para utilizar la sobrecarga de pods, se debe haber habilitado la
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+PodOverhead (lo está por defecto).
+
+La sobrecarga de pods se define en la RuntimeClass a través del los campos de
+`overhead`. Con estos campos se puede especificar la sobrecarga de los pods en
+ejecución que utilizan esta RuntimeClass para asegurar que estas sobrecargas se
+cuentan en Kubernetes.
+
+## {{% heading "whatsnext" %}}
+
+
+- [Diseño de RuntimeClass](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/585-runtime-class/README.md)
+- [Diseño de programación de RuntimeClass](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/585-runtime-class/README.md#runtimeclass-scheduling)
+- Leer sobre el concepto de [Pod Overhead](/docs/concepts/scheduling-eviction/pod-overhead/)
+- [Diseño de capacidad de PodOverhead](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/20190226-pod-overhead.md)

From 285986acda7ea7e9b680831165ff53fc2e182843 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Tue, 9 Mar 2021 09:07:30 +0800
Subject: [PATCH 139/788] Fix section order under scheduling-eviction

---
 content/en/docs/concepts/scheduling-eviction/assign-pod-node.md | 2 +-
 .../docs/concepts/scheduling-eviction/resource-bin-packing.md   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
index b6b2bd79a8..f0437a9b8b 100644
--- a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -5,7 +5,7 @@ reviewers:
 - bsalamat
 title: Assigning Pods to Nodes
 content_type: concept
-weight: 50
+weight: 20
 ---
 
 
diff --git a/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md b/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md
index a327f1de24..94bfaa1280 100644
--- a/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md
+++ b/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md
@@ -5,7 +5,7 @@ reviewers:
 - ahg-g
 title: Resource Bin Packing for Extended Resources
 content_type: concept
-weight: 50
+weight: 30
 ---
 
 <!-- overview -->

From b1686cc43a55986c3c460ecf62715a50c632c3ba Mon Sep 17 00:00:00 2001
From: Terry Moschou <tmoschou@gmail.com>
Date: Tue, 9 Mar 2021 11:47:15 +1030
Subject: [PATCH 140/788] Switch to curl, remove code formatting on the product
 names, use OS family name on tabs

---
 .../container-runtimes.md                     | 32 +++++++++----------
 .../tools/kubeadm/install-kubeadm.md          |  6 ++--
 .../docs/tasks/tools/install-kubectl-linux.md | 11 ++++---
 3 files changed, 25 insertions(+), 24 deletions(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index d255780222..a59ebbddaf 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -63,7 +63,7 @@ configuration, or reinstall it using automation.
 
 ### containerd
 
-This section contains the necessary steps to use `containerd` as CRI runtime.
+This section contains the necessary steps to use containerd as CRI runtime.
 
 Use the following commands to install Containerd on your system:
 
@@ -89,27 +89,27 @@ EOF
 sudo sysctl --system
 ```
 
-Install `containerd`:
+Install containerd:
 
 {{< tabs name="tab-cri-containerd-installation" >}}
 {{% tab name="Ubuntu 16.04" %}}
 
 1. Setup the [Docker Engine repository for Ubuntu](https://docs.docker.com/engine/install/ubuntu/#set-up-the-repository)
 
-2. Install `containerd`:
+2. Install containerd:
 
    ```shell
    sudo apt-get update && sudo apt-get install -y containerd.io
    ```
 
-3. Configure `containerd`:
+3. Configure containerd:
 
    ```shell
    sudo mkdir -p /etc/containerd
    containerd config default | sudo tee /etc/containerd/config.toml
    ```
 
-4. Restart `containerd`:
+4. Restart containerd:
 
    ```shell
    sudo systemctl restart containerd
@@ -118,20 +118,20 @@ Install `containerd`:
 {{% /tab %}}
 {{% tab name="Ubuntu 18.04/20.04" %}}
 
-1. Install `containerd`:
+1. Install containerd:
 
    ```shell
    sudo apt-get update && sudo apt-get install -y containerd
    ```
 
-2. Configure `containerd`:
+2. Configure containerd:
 
    ```shell
    sudo mkdir -p /etc/containerd
    containerd config default | sudo tee /etc/containerd/config.toml
    ```
 
-3. Restart `containerd`:
+3. Restart containerd:
 
    ```shell
    sudo systemctl restart containerd
@@ -142,20 +142,20 @@ Install `containerd`:
 
 1. Setup the [Docker Engine repository for Debian](https://docs.docker.com/engine/install/debian/#set-up-the-repository)
 
-2. Install `containerd`:
+2. Install containerd:
 
    ```shell
    sudo apt-get update && sudo apt-get install -y containerd.io
    ```
 
-3. Configure `containerd`:
+3. Configure containerd:
 
    ```shell
    sudo mkdir -p /etc/containerd
    containerd config default | sudo tee /etc/containerd/config.toml
    ```
 
-4. Restart `containerd`:
+4. Restart containerd:
 
    ```shell
    sudo systemctl restart containerd
@@ -166,20 +166,20 @@ Install `containerd`:
 
 1. Setup the [Docker Engine repository for CentOS/RHEL](https://docs.docker.com/engine/install/centos/#set-up-the-repository)
 
-2. Install `containerd`:
+2. Install containerd:
 
    ```shell
    sudo yum update -y && sudo yum install -y containerd.io
    ```
 
-3. Configure `containerd`:
+3. Configure containerd:
 
    ```shell
    sudo mkdir -p /etc/containerd
    containerd config default | sudo tee /etc/containerd/config.toml
    ```
 
-4. Restart `containerd`:
+4. Restart containerd:
 
    ```shell
    sudo systemctl restart containerd
@@ -192,7 +192,7 @@ Install `containerd`:
 Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), and then run the following commands:
 <br />
 
-1. Download `containerd`:
+1. Download containerd:
 
    ```powershell
    curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.gz
@@ -215,7 +215,7 @@ Start a Powershell session, set `$Version` to the desired version (ex: `$Version
    Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe"
    ```
 
-3. Start `containerd`:
+3. Start containerd:
 
    ```powershell
    .\containerd.exe --register-service
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 86186d1713..7d74a862f9 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -180,13 +180,13 @@ For more information on version skews, see:
 
    ```shell
    sudo apt-get update
-   sudo apt-get install -y apt-transport-https ca-certificates wget
+   sudo apt-get install -y apt-transport-https ca-certificates curl
    ```
 
 2. Download the Google Cloud public signing key:
 
    ```shell
-   sudo wget -O /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
    ```
 
 3. Add the Kubernetes `apt` repository:
@@ -195,7 +195,7 @@ For more information on version skews, see:
    echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
    ```
 
-4. Update `apt` package index, install `kubelet`, `kubeadm` and `kubectl`, and pin their version:
+4. Update `apt` package index, install kubelet, kubeadm and kubectl, and pin their version:
 
    ```shell
    sudo apt-get update
diff --git a/content/en/docs/tasks/tools/install-kubectl-linux.md b/content/en/docs/tasks/tools/install-kubectl-linux.md
index e18adbe1b3..243dbf4e0d 100644
--- a/content/en/docs/tasks/tools/install-kubectl-linux.md
+++ b/content/en/docs/tasks/tools/install-kubectl-linux.md
@@ -100,19 +100,19 @@ For example, to download version {{< param "fullversion" >}} on Linux, type:
 ### Install using native package management
 
 {{< tabs name="kubectl_install" >}}
-{{% tab name="Ubuntu, Debian or HypriotOS" %}}
+{{% tab name="Debian-based distributions" %}}
 
 1. Update the `apt` package index and install packages needed to use the Kubernetes `apt` repository:
 
    ```shell
    sudo apt-get update
-   sudo apt-get install -y apt-transport-https ca-certificates wget
+   sudo apt-get install -y apt-transport-https ca-certificates curl
    ```
 
 2. Download the Google Cloud public signing key:
 
    ```shell
-   sudo wget -O /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
    ```
 
 3. Add the Kubernetes `apt` repository:
@@ -121,7 +121,7 @@ For example, to download version {{< param "fullversion" >}} on Linux, type:
    echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
    ```
 
-4. Update `apt` package index with the new repository and install `kubectl`:
+4. Update `apt` package index with the new repository and install kubectl:
 
    ```shell
    sudo apt-get update
@@ -130,7 +130,8 @@ For example, to download version {{< param "fullversion" >}} on Linux, type:
 
 {{% /tab %}}
 
-{{< tab name="CentOS, RHEL or Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
+{{< tab name="Red Hat-based distributions" codelang="bash" >}}
+cat <<EOF > /etc/yum.repos.d/kubernetes.repo
 [kubernetes]
 name=Kubernetes
 baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64

From 71ca12a77deabb2bf68ce2366e52f3399191828b Mon Sep 17 00:00:00 2001
From: Henry Liu <henry.liu@daocloud.io>
Date: Tue, 9 Mar 2021 09:23:12 +0800
Subject: [PATCH 141/788] fix typo and some translation error

---
 .../zh/docs/tasks/run-application/access-api-from-pod.md    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/run-application/access-api-from-pod.md b/content/zh/docs/tasks/run-application/access-api-from-pod.md
index ffcf869a42..8bbe8d3ac4 100644
--- a/content/zh/docs/tasks/run-application/access-api-from-pod.md
+++ b/content/zh/docs/tasks/run-application/access-api-from-pod.md
@@ -108,7 +108,7 @@ If available, a certificate bundle is placed into the filesystem tree of each
 container at `/var/run/secrets/kubernetes.io/serviceaccount/ca.crt`, and should be
 used to verify the serving certificate of the API server.
 -->
-如果由证书包可用，则凭证包被放入每个容器的文件系统树中的
+如果证书包可用，则凭证包被放入每个容器的文件系统树中的
 `/var/run/secrets/kubernetes.io/serviceaccount/ca.crt` 处，
 且将被用于验证 API 服务器的服务证书。
 
@@ -130,9 +130,9 @@ in the Pod can use it directly.
 -->
 #### 使用 kubectl proxy   {#use-kubectl-proxy}
 
-如果你希望不实用官方客户端库就完成 API 查询，可以将 `kubectl proxy` 作为
+如果你希望不使用官方客户端库就完成 API 查询，可以将 `kubectl proxy` 作为
 [command](/zh/docs/tasks/inject-data-application/define-command-argument-container/)
-在 Pod 启动一个边车（Sidecar）容器。这样，`kubectl proxy` 自动完成对 API
+在 Pod 中启动一个边车（Sidecar）容器。这样，`kubectl proxy` 自动完成对 API
 的身份认证，并将其暴露到 Pod 的 `localhost` 接口，从而 Pod 中的其他容器可以
 直接使用 API。
 

From 7fdd756f8e8e0c456dade654f7f973e854012d5e Mon Sep 17 00:00:00 2001
From: REN Xiaolei <julyclyde@gmail.com>
Date: Tue, 9 Mar 2021 09:31:00 +0800
Subject: [PATCH 142/788] fix Chinese translation about reserved-cpus (#26927)

* fix Chinese translation about reserved-cpus

* fix translation about take precedence
---
 .../tasks/administer-cluster/reserve-compute-resources.md  | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md b/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
index 7a93c9c932..381697d352 100644
--- a/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
+++ b/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
@@ -256,12 +256,11 @@ If the Kubelet **does not** have `--system-reserved-cgroup` and `--kube-reserved
 the explicit cpuset provided by `reserved-cpus` will take precedence over the CPUs
 defined by `--kube-reserved` and `--system-reserved` options.
 -->
-`reserved-cpus` 旨在为操作系统守护程序和 kubernetes 系统守护程序定义一个显式 CPU
-集合。`reserved-cpus` 适用于不打算针对 cpuset 资源为操作系统守护程序和 kubernetes
+`reserved-cpus` 旨在为操作系统守护程序和 kubernetes 系统守护程序保留一组明确指定编号的
+CPU。`reserved-cpus` 适用于不打算针对 cpuset 资源为操作系统守护程序和 kubernetes
 系统守护程序定义独立的顶级 cgroups 的系统。
 如果 Kubelet **没有** 指定参数 `--system-reserved-cgroup` 和 `--kube-reserved-cgroup`，
-则 `reserved-cpus` 提供的显式 cpuset 将优先于 `--kube-reserved` 和 `--system-reserved`
-选项定义的 cpuset。
+则 `reserved-cpus` 的设置将优先于 `--kube-reserved` 和 `--system-reserved` 选项。
 
 <!--
 This option is specifically designed for Telco/NFV use cases where uncontrolled

From 32f22e68fd28f6dbae3bda0a28e64ff059a1e0e1 Mon Sep 17 00:00:00 2001
From: seokho-son <shsongist@gmail.com>
Date: Tue, 9 Mar 2021 11:58:06 +0900
Subject: [PATCH 143/788] Update outdated files in dev-1.20-ko.6 (p1)

---
 .../concepts/cluster-administration/_index.md |   6 +-
 .../cluster-administration/certificates.md    | 243 +----------------
 .../containers/container-environment.md       |  16 +-
 .../api-extension/apiserver-aggregation.md    |   6 +-
 .../concepts/extend-kubernetes/operator.md    |   2 +-
 .../overview/working-with-objects/labels.md   |   5 +
 .../docs/concepts/policy/resource-quotas.md   |   2 +-
 .../services-networking/dns-pod-service.md    |  59 ++++-
 .../tasks/administer-cluster/certificates.md  | 250 ++++++++++++++++++
 9 files changed, 321 insertions(+), 268 deletions(-)
 create mode 100644 content/ko/docs/tasks/administer-cluster/certificates.md

diff --git a/content/ko/docs/concepts/cluster-administration/_index.md b/content/ko/docs/concepts/cluster-administration/_index.md
index 3ec34e9eac..9870704596 100755
--- a/content/ko/docs/concepts/cluster-administration/_index.md
+++ b/content/ko/docs/concepts/cluster-administration/_index.md
@@ -1,5 +1,8 @@
 ---
 title: 클러스터 관리
+
+
+
 weight: 100
 content_type: concept
 description: >
@@ -11,6 +14,7 @@ no_list: true
 클러스터 관리 개요는 쿠버네티스 클러스터를 생성하거나 관리하는 모든 사람들을 위한 것이다.
 핵심 쿠버네티스 [개념](/ko/docs/concepts/)에 어느 정도 익숙하다고 가정한다.
 
+
 <!-- body -->
 ## 클러스터 계획
 
@@ -41,7 +45,7 @@ no_list: true
 
 ## 클러스터 보안
 
-* [인증서](/ko/docs/concepts/cluster-administration/certificates/)는 다른 툴 체인을 사용하여 인증서를 생성하는 단계를 설명한다.
+* [인증서 생성](/ko/docs/tasks/administer-cluster/certificates/)는 다른 툴 체인을 사용하여 인증서를 생성하는 단계를 설명한다.
 
 * [쿠버네티스 컨테이너 환경](/ko/docs/concepts/containers/container-environment/)은 쿠버네티스 노드에서 Kubelet으로 관리하는 컨테이너에 대한 환경을 설명한다.
 
diff --git a/content/ko/docs/concepts/cluster-administration/certificates.md b/content/ko/docs/concepts/cluster-administration/certificates.md
index 7b71b9c344..5acb75ea80 100644
--- a/content/ko/docs/concepts/cluster-administration/certificates.md
+++ b/content/ko/docs/concepts/cluster-administration/certificates.md
@@ -4,247 +4,6 @@ content_type: concept
 weight: 20
 ---
 
-
 <!-- overview -->
 
-클라이언트 인증서로 인증을 사용하는 경우 `easyrsa`, `openssl` 또는 `cfssl`
-을 통해 인증서를 수동으로 생성할 수 있다.
-
-
-
-
-<!-- body -->
-
-### easyrsa
-
-**easyrsa** 는 클러스터 인증서를 수동으로 생성할 수 있다.
-
-1.  easyrsa3의 패치 버전을 다운로드하여 압축을 풀고, 초기화한다.
-
-        curl -LO https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz
-        tar xzf easy-rsa.tar.gz
-        cd easy-rsa-master/easyrsa3
-        ./easyrsa init-pki
-1.  새로운 인증 기관(CA)을 생성한다. `--batch` 는 자동 모드를 설정한다.
-    `--req-cn` 는 CA의 새 루트 인증서에 대한 일반 이름(Common Name (CN))을 지정한다.
-
-        ./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass
-1.  서버 인증서와 키를 생성한다.
-    `--subject-alt-name` 인수는 API 서버에 접근이 가능한 IP와 DNS
-    이름을 설정한다. `MASTER_CLUSTER_IP` 는 일반적으로 API 서버와
-    컨트롤러 관리자 컴포넌트에 대해 `--service-cluster-ip-range` 인수로
-    지정된 서비스 CIDR의 첫 번째 IP이다. `--days` 인수는 인증서가 만료되는
-    일 수를 설정하는데 사용된다.
-    또한, 아래 샘플은 기본 DNS 이름으로 `cluster.local` 을
-    사용한다고 가정한다.
-
-        ./easyrsa --subject-alt-name="IP:${MASTER_IP},"\
-        "IP:${MASTER_CLUSTER_IP},"\
-        "DNS:kubernetes,"\
-        "DNS:kubernetes.default,"\
-        "DNS:kubernetes.default.svc,"\
-        "DNS:kubernetes.default.svc.cluster,"\
-        "DNS:kubernetes.default.svc.cluster.local" \
-        --days=10000 \
-        build-server-full server nopass
-1.  `pki/ca.crt`, `pki/issued/server.crt` 그리고 `pki/private/server.key` 를 디렉터리에 복사한다.
-1.  API 서버 시작 파라미터에 다음 파라미터를 채우고 추가한다.
-
-        --client-ca-file=/yourdirectory/ca.crt
-        --tls-cert-file=/yourdirectory/server.crt
-        --tls-private-key-file=/yourdirectory/server.key
-
-### openssl
-
-**openssl** 은 클러스터 인증서를 수동으로 생성할 수 있다.
-
-1.  ca.key를 2048bit로 생성한다.
-
-        openssl genrsa -out ca.key 2048
-1.  ca.key에 따라 ca.crt를 생성한다(인증서 유효 기간을 사용하려면 -days를 사용한다).
-
-        openssl req -x509 -new -nodes -key ca.key -subj "/CN=${MASTER_IP}" -days 10000 -out ca.crt
-1.  server.key를 2048bit로 생성한다.
-
-        openssl genrsa -out server.key 2048
-1.  인증서 서명 요청(Certificate Signing Request (CSR))을 생성하기 위한 설정 파일을 생성한다.
-    파일에 저장하기 전에 꺾쇠 괄호(예: `<MASTER_IP>`)로
-    표시된 값을 실제 값으로 대체한다(예: `csr.conf`).
-    `MASTER_CLUSTER_IP` 의 값은 이전 하위 섹션에서
-    설명한 대로 API 서버의 서비스 클러스터 IP이다.
-    또한, 아래 샘플에서는 `cluster.local` 을 기본 DNS 도메인
-    이름으로 사용하고 있다고 가정한다.
-
-        [ req ]
-        default_bits = 2048
-        prompt = no
-        default_md = sha256
-        req_extensions = req_ext
-        distinguished_name = dn
-
-        [ dn ]
-        C = <국가(country)>
-        ST = <도(state)>
-        L = <시(city)>
-        O = <조직(organization)>
-        OU = <조직 단위(organization unit)>
-        CN = <MASTER_IP>
-
-        [ req_ext ]
-        subjectAltName = @alt_names
-
-        [ alt_names ]
-        DNS.1 = kubernetes
-        DNS.2 = kubernetes.default
-        DNS.3 = kubernetes.default.svc
-        DNS.4 = kubernetes.default.svc.cluster
-        DNS.5 = kubernetes.default.svc.cluster.local
-        IP.1 = <MASTER_IP>
-        IP.2 = <MASTER_CLUSTER_IP>
-
-        [ v3_ext ]
-        authorityKeyIdentifier=keyid,issuer:always
-        basicConstraints=CA:FALSE
-        keyUsage=keyEncipherment,dataEncipherment
-        extendedKeyUsage=serverAuth,clientAuth
-        subjectAltName=@alt_names
-1.  설정 파일을 기반으로 인증서 서명 요청을 생성한다.
-
-        openssl req -new -key server.key -out server.csr -config csr.conf
-1.  ca.key, ca.crt 그리고 server.csr을 사용해서 서버 인증서를 생성한다.
-
-        openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
-        -CAcreateserial -out server.crt -days 10000 \
-        -extensions v3_ext -extfile csr.conf
-1.  인증서를 본다.
-
-        openssl x509  -noout -text -in ./server.crt
-
-마지막으로, API 서버 시작 파라미터에 동일한 파라미터를 추가한다.
-
-### cfssl
-
-**cfssl** 은 인증서 생성을 위한 또 다른 도구이다.
-
-1.  아래에 표시된 대로 커맨드 라인 도구를 다운로드하여 압축을 풀고 준비한다.
-    사용 중인 하드웨어 아키텍처 및 cfssl 버전에 따라 샘플
-    명령을 조정해야 할 수도 있다.
-
-        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl_1.5.0_linux_amd64 -o cfssl
-        chmod +x cfssl
-        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssljson_1.5.0_linux_amd64 -o cfssljson
-        chmod +x cfssljson
-        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl-certinfo_1.5.0_linux_amd64 -o cfssl-certinfo
-        chmod +x cfssl-certinfo
-1.  아티팩트(artifact)를 보유할 디렉터리를 생성하고 cfssl을 초기화한다.
-
-        mkdir cert
-        cd cert
-        ../cfssl print-defaults config > config.json
-        ../cfssl print-defaults csr > csr.json
-1.  CA 파일을 생성하기 위한 JSON 설정 파일을 `ca-config.json` 예시와 같이 생성한다.
-
-        {
-          "signing": {
-            "default": {
-              "expiry": "8760h"
-            },
-            "profiles": {
-              "kubernetes": {
-                "usages": [
-                  "signing",
-                  "key encipherment",
-                  "server auth",
-                  "client auth"
-                ],
-                "expiry": "8760h"
-              }
-            }
-          }
-        }
-1.  CA 인증서 서명 요청(CSR)을 위한 JSON 설정 파일을
-    `ca-csr.json` 예시와 같이 생성한다. 꺾쇠 괄호로 표시된
-    값을 사용하려는 실제 값으로 변경한다.
-
-        {
-          "CN": "kubernetes",
-          "key": {
-            "algo": "rsa",
-            "size": 2048
-          },
-          "names":[{
-            "C": "<국가(country)>",
-            "ST": "<도(state)>",
-            "L": "<시(city)>",
-            "O": "<조직(organization)>",
-            "OU": "<조직 단위(organization unit)>"
-          }]
-        }
-1.  CA 키(`ca-key.pem`)와 인증서(`ca.pem`)을 생성한다.
-
-        ../cfssl gencert -initca ca-csr.json | ../cfssljson -bare ca
-1.  API 서버의 키와 인증서를 생성하기 위한 JSON 구성파일을
-    `server-csr.json` 예시와 같이 생성한다. 꺾쇠 괄호 안의 값을
-    사용하려는 실제 값으로 변경한다. `MASTER_CLUSTER_IP` 는
-    이전 하위 섹션에서 설명한 API 서버의 클러스터 IP이다.
-    아래 샘플은 기본 DNS 도메인 이름으로 `cluster.local` 을
-    사용한다고 가정한다.
-
-        {
-          "CN": "kubernetes",
-          "hosts": [
-            "127.0.0.1",
-            "<MASTER_IP>",
-            "<MASTER_CLUSTER_IP>",
-            "kubernetes",
-            "kubernetes.default",
-            "kubernetes.default.svc",
-            "kubernetes.default.svc.cluster",
-            "kubernetes.default.svc.cluster.local"
-          ],
-          "key": {
-            "algo": "rsa",
-            "size": 2048
-          },
-          "names": [{
-            "C": "<국가(country)>",
-            "ST": "<도(state)>",
-            "L": "<시(city)>",
-            "O": "<조직(organization)>",
-            "OU": "<조직 단위(organization unit)>"
-          }]
-        }
-1.  API 서버 키와 인증서를 생성하면, 기본적으로
-    `server-key.pem` 과 `server.pem` 파일에 각각 저장된다.
-
-        ../cfssl gencert -ca=ca.pem -ca-key=ca-key.pem \
-        --config=ca-config.json -profile=kubernetes \
-        server-csr.json | ../cfssljson -bare server
-
-
-## 자체 서명된 CA 인증서의 배포
-
-클라이언트 노드는 자체 서명된 CA 인증서를 유효한 것으로 인식하지 않을 수 있다.
-비-프로덕션 디플로이먼트 또는 회사 방화벽 뒤에서 실행되는
-디플로이먼트의 경우, 자체 서명된 CA 인증서를 모든 클라이언트에
-배포하고 유효한 인증서의 로컬 목록을 새로 고칠 수 있다.
-
-각 클라이언트에서, 다음 작업을 수행한다.
-
-```bash
-sudo cp ca.crt /usr/local/share/ca-certificates/kubernetes.crt
-sudo update-ca-certificates
-```
-
-```
-Updating certificates in /etc/ssl/certs...
-1 added, 0 removed; done.
-Running hooks in /etc/ca-certificates/update.d....
-done.
-```
-
-## 인증서 API
-
-`certificates.k8s.io` API를 사용해서
-[여기](/docs/tasks/tls/managing-tls-in-a-cluster)에
-설명된 대로 인증에 사용할 x509 인증서를 프로비전 할 수 있다.
+클러스터를 위한 인증서를 생성하기 위해서는, [인증서](/ko/docs/tasks/administer-cluster/certificates/)를 참고한다.
diff --git a/content/ko/docs/concepts/containers/container-environment.md b/content/ko/docs/concepts/containers/container-environment.md
index c6cb09965a..58c106fdce 100644
--- a/content/ko/docs/concepts/containers/container-environment.md
+++ b/content/ko/docs/concepts/containers/container-environment.md
@@ -1,4 +1,7 @@
 ---
+
+
+
 title: 컨테이너 환경 변수
 content_type: concept
 weight: 20
@@ -24,11 +27,11 @@ weight: 20
 ### 컨테이너 정보
 
 컨테이너의 *호스트네임* 은 컨테이너가 동작 중인 파드의 이름과 같다.
-그것은 `hostname` 커맨드 또는 libc의 
-[`gethostname`](https://man7.org/linux/man-pages/man2/gethostname.2.html) 
+그것은 `hostname` 커맨드 또는 libc의
+[`gethostname`](https://man7.org/linux/man-pages/man2/gethostname.2.html)
 함수 호출을 통해서 구할 수 있다.
 
-파드 이름과 네임스페이스는 
+파드 이름과 네임스페이스는
 [다운워드(Downward) API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/)를 통해 환경 변수로 구할 수 있다.
 
 Docker 이미지에 정적으로 명시된 환경 변수와 마찬가지로,
@@ -36,11 +39,12 @@ Docker 이미지에 정적으로 명시된 환경 변수와 마찬가지로,
 
 ### 클러스터 정보
 
-컨테이너가 생성될 때 실행 중이던 모든 서비스의 목록은 환경 변수로 해당 컨테이너에서 사용할 수 
+컨테이너가 생성될 때 실행 중이던 모든 서비스의 목록은 환경 변수로 해당 컨테이너에서 사용할 수
 있다.
+이 목록은 새로운 컨테이너의 파드 및 쿠버네티스 컨트롤 플레인 서비스와 동일한 네임스페이스 내에 있는 서비스로 한정된다.
 이러한 환경 변수는 Docker 링크 구문과 일치한다.
 
-*bar* 라는 이름의 컨테이너에 매핑되는 *foo* 라는 이름의 서비스에 대해서는, 
+*bar* 라는 이름의 컨테이너에 매핑되는 *foo* 라는 이름의 서비스에 대해서는,
 다음의 형태로 변수가 정의된다.
 
 ```shell
@@ -58,5 +62,3 @@ FOO_SERVICE_PORT=<서비스가 동작 중인 포트>
 * [컨테이너 라이프사이클 훅(hooks)](/ko/docs/concepts/containers/container-lifecycle-hooks/)에 대해 더 배워 보기.
 * [컨테이너 라이프사이클 이벤트에 핸들러 부착](/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/)
   실제 경험 얻기.
-
-
diff --git a/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md b/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
index 7e8a10e8b1..a2326c71dd 100644
--- a/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
+++ b/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
@@ -1,5 +1,9 @@
 ---
 title: 애그리게이션 레이어(aggregation layer)로 쿠버네티스 API 확장하기
+
+
+
+
 content_type: concept
 weight: 10
 ---
@@ -25,8 +29,6 @@ Extension-apiserver는 kube-apiserver로 오가는 연결의 레이턴시가 낮
 kube-apiserver로 부터의 디스커버리 요청은 왕복 레이턴시가 5초 이내여야 한다.
 
 extention API server가 레이턴시 요구 사항을 달성할 수 없는 경우 이를 충족할 수 있도록 변경하는 것을 고려한다.
-`EnableAggregatedDiscoveryTimeout=false` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 설정해서 타임아웃
-제한을 비활성화 할 수 있다. 이 사용 중단(deprecated)된 기능 게이트는 향후 릴리스에서 제거될 예정이다.
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/ko/docs/concepts/extend-kubernetes/operator.md b/content/ko/docs/concepts/extend-kubernetes/operator.md
index f6c80d8067..57a4f3d9d2 100644
--- a/content/ko/docs/concepts/extend-kubernetes/operator.md
+++ b/content/ko/docs/concepts/extend-kubernetes/operator.md
@@ -124,5 +124,5 @@ kubectl edit SampleDB/example-database # 일부 설정을 수동으로 변경하
     사용하여 직접 구현하기
   * [오퍼레이터 프레임워크](https://operatorframework.io) 사용하기
 * 다른 사람들이 사용할 수 있도록 자신의 오퍼레이터를 [게시](https://operatorhub.io/)하기
-* 오퍼레이터 패턴을 소개한 [CoreOS 원본 기사](https://coreos.com/blog/introducing-operators.html) 읽기
+* 오퍼레이터 패턴을 소개한 [CoreOS 원본 글](https://web.archive.org/web/20170129131616/https://coreos.com/blog/introducing-operators.html) 읽기 (이 링크는 원본 글에 대한 보관 버전임)
 * 오퍼레이터 구축을 위한 모범 사례에 대한 구글 클라우드(Google Cloud)의 [기사](https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-building-kubernetes-operators-and-stateful-apps) 읽기
diff --git a/content/ko/docs/concepts/overview/working-with-objects/labels.md b/content/ko/docs/concepts/overview/working-with-objects/labels.md
index 12f02ccee4..2044cf5135 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/labels.md
@@ -52,6 +52,11 @@ _레이블_ 은 키와 값의 쌍이다. 유효한 레이블 키에는 슬래시
 
 `kubernetes.io/`와 `k8s.io/` 접두사는 쿠버네티스의 핵심 컴포넌트로 예약되어있다.
 
+유효한 레이블 값은 다음과 같다.
+* 63 자 이하 여야 하고(공백이면 안 됨),
+* 시작과 끝은 알파벳과 숫자(`[a-z0-9A-Z]`)이며,
+* 알파벳과 숫자, 대시(`-`), 밑줄(`_`), 점(`.`)를 중간에 포함할 수 있다.
+
 유효한 레이블 값은 63자 미만 또는 공백이며 시작과 끝은 알파벳과 숫자(`[a-z0-9A-Z]`)이며, 대시(`-`), 밑줄(`_`), 점(`.`)과 함께 사용할 수 있다.
 
 다음의 예시는 파드에 `environment: production` 과 `app: nginx` 2개의 레이블이 있는 구성 파일이다.
diff --git a/content/ko/docs/concepts/policy/resource-quotas.md b/content/ko/docs/concepts/policy/resource-quotas.md
index ff1f4a75c8..df23da5d57 100644
--- a/content/ko/docs/concepts/policy/resource-quotas.md
+++ b/content/ko/docs/concepts/policy/resource-quotas.md
@@ -58,7 +58,7 @@ weight: 20
 ## 리소스 쿼터 활성화
 
 많은 쿠버네티스 배포판에 기본적으로 리소스 쿼터 지원이 활성화되어 있다.
-API 서버 `--enable-admission-plugins=` 플래그의 인수 중 하나로
+{{< glossary_tooltip text="API 서버" term_id="kube-apiserver" >}} `--enable-admission-plugins=` 플래그의 인수 중 하나로
 `ResourceQuota`가 있는 경우 활성화된다.
 
 해당 네임스페이스에 리소스쿼터가 있는 경우 특정 네임스페이스에
diff --git a/content/ko/docs/concepts/services-networking/dns-pod-service.md b/content/ko/docs/concepts/services-networking/dns-pod-service.md
index fc1074a86c..006ffba99c 100644
--- a/content/ko/docs/concepts/services-networking/dns-pod-service.md
+++ b/content/ko/docs/concepts/services-networking/dns-pod-service.md
@@ -1,11 +1,14 @@
 ---
+
+
+
 title: 서비스 및 파드용 DNS
 content_type: concept
 weight: 20
 ---
 <!-- overview -->
-이 페이지는 쿠버네티스의 DNS 지원에 대한 개요를 설명한다.
-
+쿠버네티스는 파드와 서비스를 위한 DNS 레코드를 생성한다. 사용자는 IP 주소 대신에
+일관된 DNS 네임을 통해서 서비스에 접속할 수 있다.
 
 <!-- body -->
 
@@ -15,23 +18,51 @@ weight: 20
 개별 컨테이너들이 DNS 네임을 해석할 때
 DNS 서비스의 IP를 사용하도록 kubelets를 구성한다.
 
-### DNS 네임이 할당되는 것들
-
 클러스터 내의 모든 서비스(DNS 서버 자신도 포함하여)에는 DNS 네임이 할당된다.
 기본적으로 클라이언트 파드의 DNS 검색 리스트는 파드 자체의 네임스페이스와
 클러스터의 기본 도메인을 포함한다.
-이 예시는 다음과 같다.
 
-쿠버네티스 네임스페이스 `bar`에 `foo`라는 서비스가 있다. 네임스페이스 `bar`에서 running 상태인 파드는
-단순하게 `foo`를 조회하는 DNS 쿼리를 통해서 서비스 `foo`를 찾을 수 있다.
-네임스페이스 `quux`에서 실행 중인 파드는
-`foo.bar`를 조회하는 DNS 쿼리를 통해서 이 서비스를 찾을 수 있다.
+### 서비스의 네임스페이스
 
-다음 절에서는 쿠버네티스 DNS에서 지원하는 레코드 유형과 레이아웃을 자세히 설명한다.
-이 외에 동작하는 레이아웃, 네임 또는 쿼리는 구현 세부 정보로 간주하며
-경고 없이 변경될 수 있다.
-최신 업데이트에 대한 자세한 설명은 다음 링크를 통해 참조할 수 있다.
-[쿠버네티스 DNS 기반 서비스 디스커버리](https://github.com/kubernetes/dns/blob/master/docs/specification.md).
+DNS 쿼리는 그것을 생성하는 파드의 네임스페이스에 따라 다른 결과를 반환할 수
+있다. 네임스페이스를 지정하지 않은 DNS 쿼리는 파드의 네임스페이스에
+국한된다. DNS 쿼리에 네임스페이스를 명시하여 다른 네임스페이스에 있는 서비스에 접속한다.
+
+예를 들어, `test` 네임스페이스에 있는 파드를 생각해보자. `data` 서비스는
+`prod` 네임스페이스에 있다.
+
+이 경우, `data` 에 대한 쿼리는 파드의 `test` 네임스페이스를 사용하기 때문에 결과를 반환하지 않을 것이다.
+
+`data.prod` 로 쿼리하면 의도한 결과를 반환할 것이다. 왜냐하면
+네임스페이스가 명시되어 있기 때문이다.
+
+DNS 쿼리는 파드의 `/etc/resolv.conf` 를 사용하여 확장될 수 있을 것이다. Kubelet은
+각 파드에 대해서 파일을 설정한다. 예를 들어, `data` 만을 위한 쿼리는
+`data.test.cluster.local` 로 확장된다. `search` 옵션의 값은
+쿼리를 확장하기 위해서 사용된다. DNS 쿼리에 대해 더 자세히 알고 싶은 경우,
+[`resolv.conf` 설명 페이지.](https://www.man7.org/linux/man-pages/man5/resolv.conf.5.html)를 참고한다.
+
+```
+nameserver 10.32.0.10
+search <namespace>.svc.cluster.local svc.cluster.local cluster.local
+options ndots:5
+```
+
+요약하면, _test_ 네임스페이스에 있는 파드는 `data.prod` 또는
+`data.prod.cluster.local` 중 하나를 통해 성공적으로 해석될 수 있다.
+
+### DNS 레코드
+
+어떤 오브젝트가 DNS 레코드를 가지는가?
+
+1. 서비스
+2. 파드
+
+다음 섹션은 지원되는 DNS 레코드의 종류 및 레이아웃에 대한 상세
+내용이다. 혹시 동작시킬 필요가 있는 다른 레이아웃, 네임, 또는 쿼리는
+구현 세부 사항으로 간주되며 경고 없이 변경될 수 있다.
+최신 명세 확인을 위해서는,
+[쿠버네티스 DNS-기반 서비스 디스커버리](https://github.com/kubernetes/dns/blob/master/docs/specification.md)를 본다.
 
 ## 서비스
 
diff --git a/content/ko/docs/tasks/administer-cluster/certificates.md b/content/ko/docs/tasks/administer-cluster/certificates.md
new file mode 100644
index 0000000000..8c8f6a148b
--- /dev/null
+++ b/content/ko/docs/tasks/administer-cluster/certificates.md
@@ -0,0 +1,250 @@
+---
+title: 인증서
+content_type: task
+weight: 20
+---
+
+
+<!-- overview -->
+
+클라이언트 인증서로 인증을 사용하는 경우 `easyrsa`, `openssl` 또는 `cfssl`
+을 통해 인증서를 수동으로 생성할 수 있다.
+
+
+
+
+<!-- body -->
+
+### easyrsa
+
+**easyrsa** 는 클러스터 인증서를 수동으로 생성할 수 있다.
+
+1.  easyrsa3의 패치 버전을 다운로드하여 압축을 풀고, 초기화한다.
+
+        curl -LO https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz
+        tar xzf easy-rsa.tar.gz
+        cd easy-rsa-master/easyrsa3
+        ./easyrsa init-pki
+1.  새로운 인증 기관(CA)을 생성한다. `--batch` 는 자동 모드를 설정한다.
+    `--req-cn` 는 CA의 새 루트 인증서에 대한 일반 이름(Common Name (CN))을 지정한다.
+
+        ./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass
+1.  서버 인증서와 키를 생성한다.
+    `--subject-alt-name` 인수는 API 서버에 접근이 가능한 IP와 DNS
+    이름을 설정한다. `MASTER_CLUSTER_IP` 는 일반적으로 API 서버와
+    컨트롤러 관리자 컴포넌트에 대해 `--service-cluster-ip-range` 인수로
+    지정된 서비스 CIDR의 첫 번째 IP이다. `--days` 인수는 인증서가 만료되는
+    일 수를 설정하는데 사용된다.
+    또한, 아래 샘플은 기본 DNS 이름으로 `cluster.local` 을
+    사용한다고 가정한다.
+
+        ./easyrsa --subject-alt-name="IP:${MASTER_IP},"\
+        "IP:${MASTER_CLUSTER_IP},"\
+        "DNS:kubernetes,"\
+        "DNS:kubernetes.default,"\
+        "DNS:kubernetes.default.svc,"\
+        "DNS:kubernetes.default.svc.cluster,"\
+        "DNS:kubernetes.default.svc.cluster.local" \
+        --days=10000 \
+        build-server-full server nopass
+1.  `pki/ca.crt`, `pki/issued/server.crt` 그리고 `pki/private/server.key` 를 디렉터리에 복사한다.
+1.  API 서버 시작 파라미터에 다음 파라미터를 채우고 추가한다.
+
+        --client-ca-file=/yourdirectory/ca.crt
+        --tls-cert-file=/yourdirectory/server.crt
+        --tls-private-key-file=/yourdirectory/server.key
+
+### openssl
+
+**openssl** 은 클러스터 인증서를 수동으로 생성할 수 있다.
+
+1.  ca.key를 2048bit로 생성한다.
+
+        openssl genrsa -out ca.key 2048
+1.  ca.key에 따라 ca.crt를 생성한다(인증서 유효 기간을 사용하려면 -days를 사용한다).
+
+        openssl req -x509 -new -nodes -key ca.key -subj "/CN=${MASTER_IP}" -days 10000 -out ca.crt
+1.  server.key를 2048bit로 생성한다.
+
+        openssl genrsa -out server.key 2048
+1.  인증서 서명 요청(Certificate Signing Request (CSR))을 생성하기 위한 설정 파일을 생성한다.
+    파일에 저장하기 전에 꺾쇠 괄호(예: `<MASTER_IP>`)로
+    표시된 값을 실제 값으로 대체한다(예: `csr.conf`).
+    `MASTER_CLUSTER_IP` 의 값은 이전 하위 섹션에서
+    설명한 대로 API 서버의 서비스 클러스터 IP이다.
+    또한, 아래 샘플에서는 `cluster.local` 을 기본 DNS 도메인
+    이름으로 사용하고 있다고 가정한다.
+
+        [ req ]
+        default_bits = 2048
+        prompt = no
+        default_md = sha256
+        req_extensions = req_ext
+        distinguished_name = dn
+
+        [ dn ]
+        C = <국가(country)>
+        ST = <도(state)>
+        L = <시(city)>
+        O = <조직(organization)>
+        OU = <조직 단위(organization unit)>
+        CN = <MASTER_IP>
+
+        [ req_ext ]
+        subjectAltName = @alt_names
+
+        [ alt_names ]
+        DNS.1 = kubernetes
+        DNS.2 = kubernetes.default
+        DNS.3 = kubernetes.default.svc
+        DNS.4 = kubernetes.default.svc.cluster
+        DNS.5 = kubernetes.default.svc.cluster.local
+        IP.1 = <MASTER_IP>
+        IP.2 = <MASTER_CLUSTER_IP>
+
+        [ v3_ext ]
+        authorityKeyIdentifier=keyid,issuer:always
+        basicConstraints=CA:FALSE
+        keyUsage=keyEncipherment,dataEncipherment
+        extendedKeyUsage=serverAuth,clientAuth
+        subjectAltName=@alt_names
+1.  설정 파일을 기반으로 인증서 서명 요청을 생성한다.
+
+        openssl req -new -key server.key -out server.csr -config csr.conf
+1.  ca.key, ca.crt 그리고 server.csr을 사용해서 서버 인증서를 생성한다.
+
+        openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
+        -CAcreateserial -out server.crt -days 10000 \
+        -extensions v3_ext -extfile csr.conf
+1.  인증서를 본다.
+
+        openssl x509  -noout -text -in ./server.crt
+
+마지막으로, API 서버 시작 파라미터에 동일한 파라미터를 추가한다.
+
+### cfssl
+
+**cfssl** 은 인증서 생성을 위한 또 다른 도구이다.
+
+1.  아래에 표시된 대로 커맨드 라인 도구를 다운로드하여 압축을 풀고 준비한다.
+    사용 중인 하드웨어 아키텍처 및 cfssl 버전에 따라 샘플
+    명령을 조정해야 할 수도 있다.
+
+        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl_1.5.0_linux_amd64 -o cfssl
+        chmod +x cfssl
+        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssljson_1.5.0_linux_amd64 -o cfssljson
+        chmod +x cfssljson
+        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl-certinfo_1.5.0_linux_amd64 -o cfssl-certinfo
+        chmod +x cfssl-certinfo
+1.  아티팩트(artifact)를 보유할 디렉터리를 생성하고 cfssl을 초기화한다.
+
+        mkdir cert
+        cd cert
+        ../cfssl print-defaults config > config.json
+        ../cfssl print-defaults csr > csr.json
+1.  CA 파일을 생성하기 위한 JSON 설정 파일을 `ca-config.json` 예시와 같이 생성한다.
+
+        {
+          "signing": {
+            "default": {
+              "expiry": "8760h"
+            },
+            "profiles": {
+              "kubernetes": {
+                "usages": [
+                  "signing",
+                  "key encipherment",
+                  "server auth",
+                  "client auth"
+                ],
+                "expiry": "8760h"
+              }
+            }
+          }
+        }
+1.  CA 인증서 서명 요청(CSR)을 위한 JSON 설정 파일을
+    `ca-csr.json` 예시와 같이 생성한다. 꺾쇠 괄호로 표시된
+    값을 사용하려는 실제 값으로 변경한다.
+
+        {
+          "CN": "kubernetes",
+          "key": {
+            "algo": "rsa",
+            "size": 2048
+          },
+          "names":[{
+            "C": "<국가(country)>",
+            "ST": "<도(state)>",
+            "L": "<시(city)>",
+            "O": "<조직(organization)>",
+            "OU": "<조직 단위(organization unit)>"
+          }]
+        }
+1.  CA 키(`ca-key.pem`)와 인증서(`ca.pem`)을 생성한다.
+
+        ../cfssl gencert -initca ca-csr.json | ../cfssljson -bare ca
+1.  API 서버의 키와 인증서를 생성하기 위한 JSON 구성파일을
+    `server-csr.json` 예시와 같이 생성한다. 꺾쇠 괄호 안의 값을
+    사용하려는 실제 값으로 변경한다. `MASTER_CLUSTER_IP` 는
+    이전 하위 섹션에서 설명한 API 서버의 클러스터 IP이다.
+    아래 샘플은 기본 DNS 도메인 이름으로 `cluster.local` 을
+    사용한다고 가정한다.
+
+        {
+          "CN": "kubernetes",
+          "hosts": [
+            "127.0.0.1",
+            "<MASTER_IP>",
+            "<MASTER_CLUSTER_IP>",
+            "kubernetes",
+            "kubernetes.default",
+            "kubernetes.default.svc",
+            "kubernetes.default.svc.cluster",
+            "kubernetes.default.svc.cluster.local"
+          ],
+          "key": {
+            "algo": "rsa",
+            "size": 2048
+          },
+          "names": [{
+            "C": "<국가(country)>",
+            "ST": "<도(state)>",
+            "L": "<시(city)>",
+            "O": "<조직(organization)>",
+            "OU": "<조직 단위(organization unit)>"
+          }]
+        }
+1.  API 서버 키와 인증서를 생성하면, 기본적으로
+    `server-key.pem` 과 `server.pem` 파일에 각각 저장된다.
+
+        ../cfssl gencert -ca=ca.pem -ca-key=ca-key.pem \
+        --config=ca-config.json -profile=kubernetes \
+        server-csr.json | ../cfssljson -bare server
+
+
+## 자체 서명된 CA 인증서의 배포
+
+클라이언트 노드는 자체 서명된 CA 인증서를 유효한 것으로 인식하지 않을 수 있다.
+비-프로덕션 디플로이먼트 또는 회사 방화벽 뒤에서 실행되는
+디플로이먼트의 경우, 자체 서명된 CA 인증서를 모든 클라이언트에
+배포하고 유효한 인증서의 로컬 목록을 새로 고칠 수 있다.
+
+각 클라이언트에서, 다음 작업을 수행한다.
+
+```bash
+sudo cp ca.crt /usr/local/share/ca-certificates/kubernetes.crt
+sudo update-ca-certificates
+```
+
+```
+Updating certificates in /etc/ssl/certs...
+1 added, 0 removed; done.
+Running hooks in /etc/ca-certificates/update.d....
+done.
+```
+
+## 인증서 API
+
+`certificates.k8s.io` API를 사용해서
+[여기](/docs/tasks/tls/managing-tls-in-a-cluster)에
+설명된 대로 인증에 사용할 x509 인증서를 프로비전 할 수 있다.

From cf19c5d74b5d86d0630915c5d927fe5329c065be Mon Sep 17 00:00:00 2001
From: CKchen0726 <chenchangkuan@huawei.com>
Date: Tue, 9 Mar 2021 12:30:35 +0800
Subject: [PATCH 144/788] modify some links in Kustomize Feature List

---
 .../tasks/manage-kubernetes-objects/kustomization.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
index 7c59052ffa..eb6d638603 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -815,14 +815,14 @@ deployment.apps "dev-my-nginx" deleted
 | commonLabels          | map[string]string                                                                                            | labels to add to all resources and selectors                                       |
 | commonAnnotations     | map[string]string                                                                                            | annotations to add to all resources                                                |
 | resources             | []string                                                                                                     | each entry in this list must resolve to an existing resource configuration file    |
-| configmapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L99)  | Each entry in this list generates a ConfigMap                                      |
-| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L106)     | Each entry in this list generates a Secret                                         |
-| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L109) | Modify behaviors of all ConfigMap and Secret generator                             |
+| configMapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/configmapargs.go#L7)    | Each entry in this list generates a ConfigMap                                      |
+| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/secretargs.go#L7)          | Each entry in this list generates a Secret                                         |
+| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/generatoroptions.go#L7) | Modify behaviors of all ConfigMap and Secret generator                             |
 | bases                 | []string                                                                                                     | Each entry in this list should resolve to a directory containing a kustomization.yaml file |
 | patchesStrategicMerge | []string                                                                                                     | Each entry in this list should resolve a strategic merge patch of a Kubernetes object |
-| patchesJson6902       | [][Json6902](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/patchjson6902.go#L8)             | Each entry in this list should resolve to a Kubernetes object and a Json Patch     |
-| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L31)                       | Each entry is to capture text from one resource's field                            |
-| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go#L23)                   | Each entry is to modify the name, tags and/or digest for one image without creating patches |
+| patchesJson6902       | [][Patch](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/patch.go#L10)                   | Each entry in this list should resolve to a Kubernetes object and a Json Patch     |
+| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L19)                       | Each entry is to capture text from one resource's field                            |
+| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/image.go#L8)                    | Each entry is to modify the name, tags and/or digest for one image without creating patches |
 | configurations        | []string                                                                                                     | Each entry in this list should resolve to a file containing [Kustomize transformer configurations](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs) |
 | crds                  | []string                                                                                                     | Each entry in this list should resolve to an OpenAPI definition file for Kubernetes types |
 

From b4c11fecce7c0ed2463a127b19722276d86355ca Mon Sep 17 00:00:00 2001
From: Lapi <35304342+dragoneena12@users.noreply.github.com>
Date: Tue, 9 Mar 2021 13:48:44 +0900
Subject: [PATCH 145/788] Update
 content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md

Co-authored-by: Kei Ak <kakts.git@gmail.com>
---
 .../run-application/horizontal-pod-autoscale-walkthrough.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index 7cf4718f5c..68c75cfab2 100644
--- a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -13,7 +13,7 @@ Horizontal Pod Autoscalerは、Deployment、ReplicaSetまたはStatefulSetとい
 ## {{% heading "前提条件" %}}
 
 この例ではバージョン1.2以上の動作するKubernetesクラスターおよびkubectlが必要です。
-[Metrics server](https://github.com/kubernetes-sigs/metrics-server)によるモニタリングが[Metrics API](https://github.com/kubernetes/metrics)を通じてクラスター内にデプロイされている必要があります。
+[Metrics API](https://github.com/kubernetes/metrics)を介してメトリクスを提供するために、[Metrics server](https://github.com/kubernetes-sigs/metrics-server)によるモニタリングがクラスター内にデプロイされている必要があります。
 Horizontal Pod Autoscalerはメトリクスを収集するためにこのAPIを利用します。metrics-serverをデプロイする方法を知りたい場合は[metrics-server ドキュメント](https://github.com/kubernetes-sigs/metrics-server#deployment)をご覧ください。
 
 Horizontal Pod Autoscalerで複数のリソースメトリクスを利用するためには、バージョン1.6以上のKubernetesクラスターおよびkubectlが必要です。カスタムメトリクスを使えるようにするためには、あなたのクラスターがカスタムメトリクスAPIを提供するAPIサーバーと通信できる必要があります。
@@ -400,4 +400,4 @@ kubectl create -f https://k8s.io/examples/application/hpa/php-apache.yaml
 
 ```
 horizontalpodautoscaler.autoscaling/php-apache created
-```
\ No newline at end of file
+```

From 94eca67736bf018052e9a9de1e01b3a17d0ce2e6 Mon Sep 17 00:00:00 2001
From: Lapi <35304342+dragoneena12@users.noreply.github.com>
Date: Tue, 9 Mar 2021 13:49:43 +0900
Subject: [PATCH 146/788] Update
 content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md

Co-authored-by: Kei Ak <kakts.git@gmail.com>
---
 .../run-application/horizontal-pod-autoscale-walkthrough.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index 68c75cfab2..445742e1d6 100644
--- a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -326,7 +326,7 @@ object:
 
 ### Kubernetesオブジェクトと関係ないメトリクスに基づいたオートスケーリング
 
-Kubernetes上で動いているアプリケーションを、Kubernetes Namespaceと直接的な関係がないサービスを説明するメトリクスのようなKubernetesクラスター内のオブジェクトと明確な関係が無いメトリクスを基にオートスケールする必要があるかもしれません。Kubernetes 1.10以降では、このようなユースケースを*外部メトリクス*によって解決できます。
+Kubernetes上で動いているアプリケーションを、Kubernetes Namespaceと直接的な関係がないサービスを説明するメトリクスのような、Kubernetesクラスター内のオブジェクトと明確な関係が無いメトリクスを基にオートスケールする必要があるかもしれません。Kubernetes 1.10以降では、このようなユースケースを*外部メトリクス*によって解決できます。
 
 外部メトリクスを使うにはあなたの監視システムについての知識が必要となります。この設定はカスタムメトリクスを使うときのものに似ています。外部メトリクスを使うとあなたの監視システムのあらゆる利用可能なメトリクスに基づいてクラスターをオートスケールできるようになります。上記のように`metric`ブロックで`name`と`selector`を設定し、`Object`のかわりに`External`メトリクスタイプを使います。
 もし複数の時系列が`metricSelector`により一致した場合は、それらの値の合計がHorizontalPodAutoscalerに使われます。

From 52315175f12fa1bcbafeee33b9c7667dc4d327bd Mon Sep 17 00:00:00 2001
From: s-kawamura-w664 <s-kawamura_p@nec.com>
Date: Thu, 4 Mar 2021 07:53:35 +0000
Subject: [PATCH 147/788] delete some dirty code from several files in ja

---
 .../concepts/cluster-administration/manage-deployment.md  | 2 +-
 content/ja/docs/concepts/overview/what-is-kubernetes.md   | 2 +-
 content/ja/docs/concepts/policy/resource-quotas.md        | 2 +-
 content/ja/docs/concepts/security/overview.md             | 2 +-
 .../configure-access-multiple-clusters.md                 | 8 ++++----
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/ja/docs/concepts/cluster-administration/manage-deployment.md b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
index 90f96547d5..cb9c7c0fc3 100644
--- a/content/ja/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
@@ -237,7 +237,7 @@ guestbook-redis-slave-qgazl   1/1       Running   0          3m
      image: gb-frontend:v3
 ```
 
-そして2つの異なるPodのセットを上書きしないようにするため、`track`ラベルに異なる値を持つ(例: `canary`)ようなguestbookフロントエンドの新しいリリースを作成できます。
+そして2つの異なるPodのセットを上書きしないようにするため、`track`ラベルに異なる値を持つ(例: `canary`)ようなguestbookフロントエンドの新しいリリースを作成できます。
 
 ```yaml
      name: frontend-canary
diff --git a/content/ja/docs/concepts/overview/what-is-kubernetes.md b/content/ja/docs/concepts/overview/what-is-kubernetes.md
index 3ca8fa78fe..dab17c9b1b 100644
--- a/content/ja/docs/concepts/overview/what-is-kubernetes.md
+++ b/content/ja/docs/concepts/overview/what-is-kubernetes.md
@@ -17,7 +17,7 @@ card:
 <!-- body -->
 Kubernetesは、宣言的な構成管理と自動化を促進し、コンテナ化されたワークロードやサービスを管理するための、ポータブルで拡張性のあるオープンソースのプラットフォームです。Kubernetesは巨大で急速に成長しているエコシステムを備えており、それらのサービス、サポート、ツールは幅広い形で利用可能です。
 
-Kubernetesの名称は、ギリシャ語に由来し、操舵手やパイロットを意味しています。Googleは2014年にKubernetesプロジェクトをオープンソース化しました。Kubernetesは、本番環境で大規模なワークロードを稼働させた[Googleの15年以上の経験](/blog/2015/04/borg-predecessor-to-kubernetes/)と、コミュニティからの最高のアイディアや実践を組み合わせています。
+Kubernetesの名称は、ギリシャ語に由来し、操舵手やパイロットを意味しています。Googleは2014年にKubernetesプロジェクトをオープンソース化しました。Kubernetesは、本番環境で大規模なワークロードを稼働させた[Googleの15年以上の経験](/blog/2015/04/borg-predecessor-to-kubernetes/)と、コミュニティからの最高のアイディアや実践を組み合わせています。
 
 ## 過去を振り返ってみると
 
diff --git a/content/ja/docs/concepts/policy/resource-quotas.md b/content/ja/docs/concepts/policy/resource-quotas.md
index e7368a8f94..7b00056fcf 100644
--- a/content/ja/docs/concepts/policy/resource-quotas.md
+++ b/content/ja/docs/concepts/policy/resource-quotas.md
@@ -22,7 +22,7 @@ weight: 10
 - 異なる名前空間で異なるチームが存在するとき。現時点ではこれは自主的なものですが、将来的にはACLsを介してリソースクォータの設定を強制するように計画されています。
 - 管理者は各名前空間で1つの`ResourceQuota`を作成します。
 - ユーザーが名前空間内でリソース(Pod、Serviceなど)を作成し、クォータシステムが`ResourceQuota`によって定義されたハードリソースリミットを超えないことを保証するために、リソースの使用量をトラッキングします。
-- リソースの作成や更新がクォータの制約に違反しているとき、そのリクエストはHTTPステータスコード`403 FORBIDDEN`で失敗し、違反した制約を説明するメッセージが表示されます。
+- リソースの作成や更新がクォータの制約に違反しているとき、そのリクエストはHTTPステータスコード`403 FORBIDDEN`で失敗し、違反した制約を説明するメッセージが表示されます。
 - `cpu`や`memory`といったコンピューターリソースに対するクォータが名前空間内で有効になっているとき、ユーザーはそれらの値に対する`requests`や`limits`を設定する必要があります。設定しないとクォータシステムがPodの作成を拒否します。 ヒント: コンピュートリソースの要求を設定しないPodに対してデフォルト値を強制するために、`LimitRanger`アドミッションコントローラーを使用してください。この問題を解決する例は[walkthrough](/docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/)で参照できます。
 
 `ResourceQuota`のオブジェクト名は、有効な[DNSサブドメイン名](/ja/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)である必要があります.
diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index b50a4ea1a5..0157b28f78 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -77,7 +77,7 @@ Kubernetesを保護する為には２つの懸念事項があります。
 
 ### クラスター内のコンポーネント(アプリケーション) {#cluster-applications}
 
-アプリケーションを対象にした攻撃に応じて、セキュリティの特定側面に焦点をあてたい場合があります。例:他のリソースとの連携で重要なサービス(サービスA)と、リソース枯渇攻撃に対して脆弱な別のワークロード(サービスB)が実行されている場合、サービスBのリソースを制限していないとサービスAが危険にさらされるリスクが高くなります。次の表はセキュリティの懸念事項とKubernetesで実行されるワークロードを保護するための推奨事項を示しています。
+アプリケーションを対象にした攻撃に応じて、セキュリティの特定側面に焦点をあてたい場合があります。例:他のリソースとの連携で重要なサービス(サービスA)と、リソース枯渇攻撃に対して脆弱な別のワークロード(サービスB)が実行されている場合、サービスBのリソースを制限していないとサービスAが危険にさらされるリスクが高くなります。次の表はセキュリティの懸念事項とKubernetesで実行されるワークロードを保護するための推奨事項を示しています。
 
 
 ワークロードセキュリティに関する懸念事項 | 推奨事項 |
diff --git a/content/ja/docs/tasks/access-application-cluster/configure-access-multiple-clusters.md b/content/ja/docs/tasks/access-application-cluster/configure-access-multiple-clusters.md
index b2ebc16d18..d5f6b72296 100644
--- a/content/ja/docs/tasks/access-application-cluster/configure-access-multiple-clusters.md
+++ b/content/ja/docs/tasks/access-application-cluster/configure-access-multiple-clusters.md
@@ -31,9 +31,9 @@ card:
 
 ## クラスター、ユーザー、コンテキストを設定する
 
-例として、開発用のクラスターが一つ、実験用のクラスターが一つ、計二つのクラスターが存在する場合を考えます。`development`と呼ばれる開発用のクラスター内では、フロントエンドの開発者は`frontend`というnamespace内で、ストレージの開発者は`storage`というnamespace内で作業をします。`scratch`と呼ばれる実験用のクラスター内では、開発者はデフォルトのnamespaceで作業をするか、状況に応じて追加のnamespaceを作成します。開発用のクラスターは証明書を通しての認証を必要とします。実験用のクラスターはユーザーネームとパスワードを通しての認証を必要とします。
+例として、開発用のクラスターが一つ、実験用のクラスターが一つ、計二つのクラスターが存在する場合を考えます。`development`と呼ばれる開発用のクラスター内では、フロントエンドの開発者は`frontend`というnamespace内で、ストレージの開発者は`storage`というnamespace内で作業をします。`scratch`と呼ばれる実験用のクラスター内では、開発者はデフォルトのnamespaceで作業をするか、状況に応じて追加のnamespaceを作成します。開発用のクラスターは証明書を通しての認証を必要とします。実験用のクラスターはユーザーネームとパスワードを通しての認証を必要とします。
 
-`config-exercise`というディレクトリを作成してください。`config-exercise`ディレクトリ内に、以下を含む`config-demo`というファイルを作成してください:
+`config-exercise`というディレクトリを作成してください。`config-exercise`ディレクトリ内に、以下を含む`config-demo`というファイルを作成してください:
 
 ```shell
 apiVersion: v1
@@ -61,7 +61,7 @@ contexts:
 
 設定ファイルには、クラスター、ユーザー、コンテキストの情報が含まれています。上記の`config-demo`設定ファイルには、二つのクラスター、二人のユーザー、三つのコンテキストの情報が含まれています。
 
-`config-exercise`ディレクトリに移動してください。クラスター情報を設定ファイルに追加するために、以下のコマンドを実行してください:
+`config-exercise`ディレクトリに移動してください。クラスター情報を設定ファイルに追加するために、以下のコマンドを実行してください:
 
 ```shell
 kubectl config --kubeconfig=config-demo set-cluster development --server=https://1.2.3.4 --certificate-authority=fake-ca-file
@@ -89,7 +89,7 @@ kubectl config --kubeconfig=config-demo set-context dev-storage --cluster=develo
 kubectl config --kubeconfig=config-demo set-context exp-scratch --cluster=scratch --namespace=default --user=experimenter
 ```
 
-追加した情報を確認するために、`config-demo`ファイルを開いてください。`config-demo`ファイルを開く代わりに、`config view`のコマンドを使うこともできます。
+追加した情報を確認するために、`config-demo`ファイルを開いてください。`config-demo`ファイルを開く代わりに、`config view`のコマンドを使うこともできます。
 
 ```shell
 kubectl config --kubeconfig=config-demo view

From e317531fad108a8e0444f5df96b3d2a87d9710a8 Mon Sep 17 00:00:00 2001
From: Kappie37 <44774200+Kappie37@users.noreply.github.com>
Date: Tue, 9 Mar 2021 09:57:28 +0100
Subject: [PATCH 148/788] Update
 content/en/docs/tasks/administer-cluster/access-cluster-api.md

remove unnecessary 'https://kubernetes.io' from a link

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 content/en/docs/tasks/administer-cluster/access-cluster-api.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/access-cluster-api.md b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
index bc9bbd101d..0275cadabf 100644
--- a/content/en/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
@@ -192,7 +192,7 @@ func main() {
 }
 ```
 
-If the application is deployed as a Pod in the cluster, see [Accessing the API from within a Pod](https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/#accessing-the-api-from-a-pod).
+If the application is deployed as a Pod in the cluster, see [Accessing the API from within a Pod](/docs/tasks/access-application-cluster/access-cluster/#accessing-the-api-from-a-pod).
 
 #### Python client
 

From f8e39f247768137cf07e2286f7f7df1f9dd1c21c Mon Sep 17 00:00:00 2001
From: Sebastian Florek <sebastian.florek@kubermatic.com>
Date: Mon, 22 Feb 2021 15:22:12 +0100
Subject: [PATCH 149/788] Add the blog post about the Kubernetes Dashboard
 evolution"

---
 .../along-the-way-ui.png                      | Bin 0 -> 193956 bytes
 .../current-ui.png                            | Bin 0 -> 656592 bytes
 .../first-ui.png                              | Bin 0 -> 60664 bytes
 .../index.md                                  |  69 ++++++++++++++++++
 4 files changed, 69 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/along-the-way-ui.png
 create mode 100644 content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/current-ui.png
 create mode 100644 content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/first-ui.png
 create mode 100644 content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/along-the-way-ui.png b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/along-the-way-ui.png
new file mode 100644
index 0000000000000000000000000000000000000000..c105d47ae42f4addd5d49bfcda07d96bf86fa6e2
GIT binary patch
literal 193956
zcmcG#bzfB5`#%gKC<vkgQUan#cQ*n8(jXumL)XxqN{57W4P64#(jg!NLrQmdch|lA
zdd~U$p1|!N_)^C`d#$~$>w4D?R*;jx!XUyxLPElleE;qP64HG!BqS8dhiKq$aHfS?
z!Eg8NMI@CUf?pmF4THd+2_3}L9F(k$9h@O{Mo1=B)=(n`djmToBP)ATYll6QW<l^F
z>OUV6wKIY^m|0uBR5pVeA=y}4(Z6J6eQD|F@RF68m4*H#3kNR?J1;Zmy+GR~B&3%}
zlJA6-T~fAZoMS$&{5U_@qp@ZhA|!Cz3;IMYmK{WWs$<Qb^vf#qLM%G@U39|qG_G|f
zOKy_sHhLA(D=9_f9H~8{fQ(+uwwUU8B`@z3h+e{HVG@P5+oE<2-aVRro;||n{etd$
z5`<2BI>h9DPedO6`4Ob_<<=EDokM_c9dmQ@6;-;T##bX1vpCb%%Z9)=|9y(7mdQ}z
z*LS+(-F*8AbuaPLBL&=#2Q|2xOV8`E6B-T_qx`p&lt&WN&J_Irx$?t<Hz)oWA=DTS
zjKdd`F)s}sxIMg5IUP&BzJU>3ZOXv0j#(i=@t?=)#>@Kq3qzkZ)KLqM#$des@7_FE
zyYO@JIwP&D7)e$PdXShd$YZfq2#p!!%S}Z?3fypp?v+Sq$V=d_VV>F{61^I%{0A|7
z)w`p6wBoWkDUCS(E)lGgTQJQ+;n&v3^{Ih&|JR;hh}X%v^2;4dTDHjA)k_6?KL-WR
zw63$uW|+9c=)|uGxyGf7b&VwaTP(;Z&rOw*8XsgAiT~ez{rS;xT6<qi8Sm1;!Tt(W
zIN;1~;V6H*nDe|%Q}MaA42~?RE<CW{ZHEYK3yxZ&|AkCeWn9(ZaP*MEJDKFQ#Uulo
z%D?;ikX+79!O&0_TQ&T^R@@q!ytyk^oACArbDsq9(C{z%B6&sRC0iN?XdatULPWR3
z)j=)Z=}1z~EqA*`=(E8{mH+OkHzg)Ls3V6tzc92Aen~hnCi*+C+{ihAOHgY6b`qC^
zrBIfYS1U=RS|3K&aZV`oOTy|W;_b!RB8C0OHxsY_pS?1*5%GOha8E#5YuZyW@@eCA
zjW+F-xlC%((}gx!GyM*A%Avep?WiW_=R=x`A0|cv3%@C(<k=tnLc&j5>Byl`9!YMv
zh4^^)gheAJ->ZcEdmL=d`5?kyTT8ok@ck0FhoyfPme;YjN$+*2{SXkPxIlCn?l$xH
z{4jY?b5cEGN!?F+=4C~~i?@*?@VonD?LGoMfBPG!i<{Gz>NqN)b`|u0kIABtzt^kB
zo1=JE0!*E6OfDuG_`p^93K0|^M)SIVm%{K&1iyVj<~t?aF8adetP%qDr`As9(-k9@
zVp^$MCHak+`0IZkNYEY9W-#~qycHv5>Z*}RY|B~d_mv$y$;C9zm-n^{I9mcH$Me=(
zF%sf>cg=mN@+8jF;<p}NDl?L;+{I)){rABA^7i4x4#}s*+*$z#?XVw}h1Oiq-G1nk
zDl+PHv3x3n9e10btHlS)Sy+y)34VL+qzP&AzZ*r~lrqUrooRt_!@D&s&cM0Xr|;Qy
z9QmTTOZ|plOOW@cioreVpCtHxHRm!yqILDQTWO4MqY#rtQ;Fous)Un6HydbF|1F5A
zk#mn`aWviJ0SrYk^zf#);++GQk4~&h7o`PfSOWFipLupuuENCxI~{8u6|o;p$q3GL
zEDw1S<jOh@FRBi0UV!s2Q{}(p0!x>qA30_t9#=?R2{^z&sjG7_5&Q5l^S@Qg2}4P7
zH%4d0#`DU}RFmFkx?)Ej1zugua`5!%!WQv|HiJ3oy9+Has#A!UlWdU>@6mR#JQH@1
z&G0OSGg<fM6|r`g=!BJeY-Qwr^R2JHX#egy+(F-TP><3JS8SSl8CANjScJ1*@ascb
zv1;)D_N!sC!6Vl?IDG7TshMiG^jh&$BBXnlUMb+pW&V)47CH8l>H-zlirp0|`Jpdu
zfLVoyMN)@O;aXKkp`>w&R(RfA@L{je=zc${t&=LTDedw0{9;+jiv0w&P{_SDx4Mf7
z)x%CKQ+l;IJH6GnzcPyk(=EP=civ50#&~=Xs^^JciEy6ZtU#gKe!(S+S$ci&`1(9o
zODj!(g!I2ts{A`Q@l_pKBVVn}28QNo)eBsjLiU;)1j@9%VnVn06_2-HglX$5rge6K
z@1dF=cM}?MmQJifQW%x+qOa-lMgwr%P|jQhm71+q=CL%Km-8y;dlvS!PFkO4-!Ptz
zBuwAdn~%mAYrJUtoG+;!+cIzEh0#WIHJMJheZZ?ujv>b5x_0@>W+R;zLwyJy^^5G^
zJL|}hWfQZzM=LPNCmc{vm(?%B7SL-wSG2a_oVi{g;?;@nQN++~bHj92;b4E6e?@Aj
zzCYaaaPHC`>!8xV;O*Wsd=AA>zEpmj;ZL0{p3-!fxTu$oR!11G4tUOYM|k+}U?P3n
zOBW4+ul_ldi_)30zOP(`V|Cszb`@eieis4rgiMq+&r%q?Ft<;_|FAJ4EFol>qZJ`-
z*5k5IT1H{rnP=xF&$S8Rd3v=aYp%h=^)uX4T^SY4$rkp35by3=$Ps%T-qv~JAr#}E
zb#V(qiEuZxvT;rew~JWwLrLlbgooxs29Ws~{T)W(mFe~weS5pq^Q#E*dpahj{t&Dm
zkklzg3DFiBtPQpFgF?-t3-|@O2WgHiYLeBCV{Yn#g=5jm6&9=d`iJFLT;r?XRRr<0
zQ6e;3cFb=p+EBzE(0r0`z9+HC!YHf+L;7H)(Ei=Nhq7wkWA}_2*H2l*3r`kWiz}f7
zE30)_v#;L0U*%zCVxeLSUp0RZSH#<|#XA(G6)v%#9)&;MXSdu_`W-<KnE9z=<;#NJ
z7H<5k4R%BnQua4FaV4+!j=P$4XRSG+<0YKo>UaA5w0}F#bqD&D%B7RT)5n#)LUoR^
ze}*H;p=N>%`ars@g@jxDIzd1$Jd0gjVEVj8$IbC~8T5RLPtlUNiFX3s#=}!82=x2w
zemX~o&M^fd;{y^5b|0_UfgAp5Z`Xv@(j%LARYLw-W52X(RZ`@V){8bz(CY7P5m@ZN
zqd4iR@-}AW@(ezUL+ON5a2S~K4}G`n*EO<_7T~zep07iU+Cb|k;OcDC?2hK=qnb5L
zyN>MYw??#WeLU|ae)`eMT7xy4`ge6jANU;DWW)J)QJi-gPfS(^DK;#Rh;fg<Y4O1O
z#Z1m0UgDNh4!>haO(BJ}S7BCpu8+s3tgOM&kw5NrGF!MtS?dr{g6}^K!IhVburbzM
zbJr;6>1Er4*BrGz5p}Oacfn;1=)JNS;=hsma_Ms9o`$bndub`O_W0!KA&nu{xRSx)
zn!4i0SmRO#D(2J9FrH;pj>$EimI`Z~XR8)UmY^#i?jJcOtY#cM-dtVWeI)8YJ3OEq
zlxrzC9l2U!Es@MHQ$)*L8JJv>MwY3R5g;9?j8?UcILuR5bW$b=JNsu;9883f&M!O|
zTip*eJL%C%;$QXHbpfa4*1=lvXe{>}@#qA~_Wpn@uh-{Q5{AH3eP>cBbZ+3v^~JQ)
z_FE?85-HEt#l{~rQgpKVG|7Cq0RUr(AD`~`porBRi>g1HncQeN)_b~R2SYD~wuOh#
z&)v9_tXx$zoa=n~b7vCn`2LWvg3GM<0SZ>mt!_5Vy_MYTw<a@vqbNL7Qk{AGGZuE>
znRVBdV=^^*Q>QD%WDR~-%X>M@uTfxz0Sk2i6~e-|WaC>`OEArVA7A`I(IOImczslE
zsin|v9aPeqdKu;CuTHf@bM=%x3CKDHub&&ms)G?U`-Zo<jv+#*=gVP<e=uC{t<~Ec
z_cFQPh0Ks3{1Rz$=(r0peDRFdfo@dsQ!0srTYSy9HZ-!2Td3K~<I{9{m%L6<2Qzk9
zmIWWoTKB23vNv|@4@x5yO5wEDNGnD!TMN>=GdDjTI#@Hsk|eSA4;l=<D@r!b0YBMS
zP|-GW6;yyL*OKD{Y|TnN(}d}b2EN1k!j@2u=?5+rDjbJ7?whdV^%1WwWfa=|b{wx7
zdzn-T7R2He6nLwxb=}{6LO&ZLzWD0zqYR3cRnc?sHnC#$l#B|QjIMU+^iJY@6oMPT
zA%($yDj{<^M#i_*x~I6ISd>Lw+T3U8{3F<C;@Sd|QdiSnUDBEHGW*#n-)E#Lr`vqm
z%KjlD@2V>Lw(480p_=X8Wa($uW4~SsMzp%NdGHGfISsQIVkJY}VbwPRlipsvAAJQ)
zR#GJMTqnvq<~6;Gp)B@`L)0|C6MxVnN_0b?NNbqVYB|e&Dv?LGU0FwZG@7HXy=mxe
zN;K^(8B~VCU&PqG-`G4>);w$3^YEe%4`S8)@>c@~O+m!D*P~XV!YUJ2E1ei4O|}FH
z%w~6Ym|E8&U4%+S37nsP{fV)IH?}A5rX{tr&xbm+YPrYE1!;jf$shPH?fgPCa8PT&
z<C@9~I6qy1jBa<9o_#`qRXzF{?Yv@dtc%^8_S9&%KsoxznP&82HHRD*_10O#k5D@0
zr<~XO6|T8X14A-wt~BE1U~h?1DD^|LX>WA`?Ley8FRW0=i*BdE3(^MG9@jQckDcq6
zWY+za3DAG=+_|07{G)?=$EHgPDg*-^ZS5wPY7I0;fR%W}#VSCrmgmkmL(v=<?R;K!
zSLI3?g?kd#q48jO^2b4C4LGyK#yJ~~Y@bCG?>Ac5+0^4&5<j<kUtuI4@a^?=*oj_F
z>;xt9(@*cZatmg&4L-|7JpQh$;Tju_{JS}{a0DuUzgc3TNxBu_DQPo*03^-oKRx`p
zNkW*KMEEAoA>2%3zv}_ITkN`)M{e3y$Aj@oI%!%9rIbPz<4=JFZlMyX_V-@Rdr(<>
z#pszja{+K|(8Wx~)MKpyuW)ZhoTYxt;2k_1KO0TB-j030G}w`gx>qb?dtoYs!dt&S
zv7n$}Xrs!N^}uC98@fNF`YNn>n)46BL36aXpWV=bV;=99pay^3`<(gnCO!cDQaKfd
zV{o}BdIkEb*R_bi-MP2F3~z6Dg}wf8I|GKjas#P<U4DBrK3UgfFa`asAeDIDD=clL
z{W?7KkiR^{_8v{h(coZC+vgxLcqu^a=K>gDUVmxRM+S{5TsNa&);ucsu^bcJ=SA3c
zx|HK^X6}NTgxwZ~KP0yGMOa<FBy{>!5`UBTQ9ZlAPpOom+8dZZfUT1?!A75RX>nKc
z^`?|ZG-ag@M7?4oRWmM2S!x|kuAF#?Kuyc`SXy4p|CzNMK00|4`Vh4oZuzCR%fD|F
z@E$%;4k0d}2d#%gvCwuGi~Tr7IX^hb?}i8!f;Uw)p=<qAR&AX7hTxG1kyRr^F*?D2
zq$|d88*t7A`B{8;xuxK29HjqqH1WJybb3(c+ju8l^0cl|0r5iNr}4#+Ly@TEYoAtR
zc=7hvF$5!yR>-zrms^<x><MW~zk-%QOIpC3v*0(W*TU*92bfd*yLuaCT;+iB`p4<Z
zoSg#B{0Kgyr{v92?6!xOA?rjQP^lom(<W3c4x{5YC)AB9H+X2xWz4f=OAyS^=f(1D
zfI4Rg0B#o9)mkgs2sWCo$|#7!@;WuQtWmbULdz#&p^+a94ZI(e90OT%^&uM3Q1|3G
zD#F}9Y`3_c*uBk^_RIDfIahkQgLJ@U&4}d-;%+t>!qpu6jPPQb-rI7%5A`p?78+-$
ze=de?7<UwgYHrV3D}0!bAs=anH8(t?3AK5<GN|Y^d%-QqZxqd9>9oyu4#(j@GSuX$
z{)^5Rhm=$ZW{29GOVE|nO%9jvH@_9JU2N7OGx84g?=<uMJoOA*RZ!~Rx0`zdvGOWP
zBEbvv(n-lWm>XNMGuGu2jPQZ{Y#5=rWv825ZnwJP4=aI@8EzwCrv~63C!ZO*x;Yg|
zdbh{nu9$)?`(%%HwO@yfTd*aY%Mii_h1`pH<mIVJ>d!-acT%`Xxz>1B{$%Nad+kZ}
z1L{Kd&PU()ZPXK3Q26CW{qJ3w)9YNkgde|=>?2)Y`P|)h-Z<}Acs*bD;uMtFKAB^T
z3ZW@c3g2*tEDnkT?e9`(P>!WBz2ttE&%342bH2O)f|0ql<2UG(m<NM`@@?PgVm=aG
zdx^&Yki%hewK2}D%KL=nVv3LDwvocM$33H9e?E2rUWL)oRylw3gXTH(J=vKcG)MN&
zp!bwYc^1szUjCi)mm<;+$V5bu+0eJQd75Q?`Cg=en!XV#;>ev+9!)YN&NQkogxTSX
zeco+nOudtPT3BV2(9DUrJfsK1P`nLsG8%`6JV=<#;Evh1y_Mno02WbAR*x^GsfbH3
zG}qfHs3Y@8Cy5M9{AhctPo5l<-!RYlG04-TC?JC+6^~R@)^&=Ge7Ee9c9asb^idk6
zCm9Rjl_@3*di?~|#lOqmimJeJ8zZJ8r!3PlwWtz4rW7tX3Kzw`)UVh2ad18c!!dm(
ziALp<gg>}nld@V2w1mg+WNsU|TR4{Pd0d4skEQIaf%Sj1>{if#C^)`*r}4L&3{>Hw
z1~}LsEhXCp<<WZ`xy5wxu8}R&70)};gfR_b52{clUv-Xf_OCBNHdfi2y*Nbpq4o#w
z$>PHgaik~s4~*{<=Y4OP!S^TN>jaWOyQ{Tq2<eWaRr0gNJMF|am^>->>f(zr*wWhJ
z0CFxv&{1C(Ze6ZT$M8#M8LSGU>Xt4N!Z@g;{m`$MjeK?a;oQ;QC7KX`GEUG7S)^|>
z3R}OBEiTpau&jQU{7N<onAwxL2KJshR^J@WLH^@2qGBTA`R&i7UR(mLx!US^JD={o
zzH<3PNsVIBux}c}4JTKlDm<n+-@KzRI_h$_wfvbQEcqE80}=cq0j<uUwYj_2Kz!14
zXOkq@%?`l0_-GkA_#Fl(Q4*bY(+R>J&53Yjn$=BS1f%hMH3!09Ji4~>z*oLG<vGu4
z_bE<Jn9nN=PrlmxFb&I@A-A?cUq!A@B{2Nu@JAwkHyCxJ*8yQ*_gbGYB|Dka?55~N
zKhRQzyd&d!eOV)!4Sj_kn(`?G%9ryvDOZnl3EG5ZISGRdDlmES!5Y#Z{>;DCS)`$Q
zy%dKKj<fD9z2M%})(pzC#2gY=iGlY7`$Xad(RL{w@MZKGpN?tfZw7aV|K@n;hK(v9
zavP^qT(HSNKP5h-QF46bu8fOosi&vv9IC0wxgDYAchlF%EOUM|WeXs9?ddjBBj2W$
zkYFbkj^(C4XGI*<MMr~L1^tV^WbfV7`rJgjw{Ehp5#9B9yIa-H)v<lf2_GB(d9{WK
z3!2_dAHBe2J@=Ud6H^nuiFYHSG}Q`J(MrzQ62AanfLTkN09q~<wr*NC>T3@GjT_pR
z>a{UY>TAA*C-Adz$*G9$ub#14?lw`s>wkuC(ZxzXnXo!(i!6TZRN*0=RD_;&<&Joi
z&(Fdo#cKfsI~jsS1Lq$tWF}(7mmJ0{vdLGB=tEh)eN~?7nUbLgqV$-Ls`l6>DyI-%
z(B1H?U@s`5O3yc>Pqqu3yqfAK)7{JZT=U!$k8I0XlyU^E4!X^r{(&S@a*qNSci3~o
z_YacC46fZJ?+y8!@MX9^fF)DjM_?6vFP`OvLVQ3YD1Nb(_rt?qdxTQR^IKDye;Z<y
z@{jl?1v)56EZWuUUM8UC;;!UZc8}0t6v~jUw$JRJHfa|hk%7UKRQjHn6Oj5(5*gVF
zR9xwY(RW=rf)K?gc2z$t$Lpx1<=(b$eb}#o1*Ojo{r1CKS6N)lMMvh0G5HqEyF%i~
zQi#YNuY$$Cr+?(;?65Ez`+TcQ&hLHe;#i3|fzYpRKXRSjChlKnY2TqAOGeMV)2ftY
zAK9VMGHSP!L-lFaAhW6l`cur#j!F2dB#pv5!7(hRTFAz$<@ZY%c-{IV-@&c6W9{g_
z`uRhr^yomPX)H=ibOccL24fDX7dvmPVv;=K0PL1<vh5=DFyO#za)q~W^}YPlzsF_r
zW1a}iqVMsOeH#8l4-(?8iVpfQQ(3dv0fHyUpw$?Ee{Zw3{KS*5Zd})zH8bMDkWWOl
z5w(@tG)l?{;}T6M=?-i&AhiEDgQKComuMfbOukd2i6*A*$X!N8f$olL4jORYfofvc
z5zR4PHM9%aBK2+Lpu~|sI=tpL`T8|jl>e6!r*(;q)CX4eWW1?C%#GdEqzV-J$;eDb
zt3UEoGFf5n4~*MI{xHCjx~q(sp~+GA)-<$;VpMolp6%HEfTzEwv;Z@eb5@r)&-p#8
zLB;o0)AAtrtsBl%6#}~;hNB40ojn(|Ihhm?3s&3wv;3(Mz?hSsLXLL(tvSXy(L;`D
zZJ+KJSkA>m%Qm{s$#uMJv>A1(MMg`5^S0q%B8ngtHU>$(_2rfm(SOA7R1`F@CoY%C
z{w~vUXo!|i54qoP=(<`8k;aRZJi~94c5th7W+`Y6WEA5amm?ZvSVKGD*lxCS57-k>
zl0JDVoZO`m?fHY!Q%dW;CkDp=ju7I<=lIzOHhc9b6+YJEt?k7gFVZG2ub_@Qk`{i;
zAVL&ev6e0KRE`XrZ8b#8WyNbptGoq!x_8mf%K~2Zz-QF^$QItLtBk7~MMBBn=h1qs
z{%DPOV=xYI3VZQ!c~-0Gfrk`b^QXYV0yc!k{Gc#u)sDq%^~(MdO^A}TT1=LriV5JW
z<rRZ^COIttXZ-1<Yt_rPABC`C7yvna`G?!}@4^p|wd&Y{=Tr?mazDM7wj_2^Nn9tY
z>{e3zwD=;=b<04v-@-O6T|S4o$WFuA*}z|v)}q2iiHO+6N+$(C0LP_!)9mCw;o4}A
z#`0Xep-D3jQg}ouAP2i0l3*ek>Z#&)R~xPmA=>L;6L3K?&iyv;;R7H%OtWxw!tnip
zO5Wz<Xf~@EpINs%K7m^+jHj*2Z4wy|$Xl;qNra}KM~9V<xw_s2=jhXDmU>8W38_RO
zh7B#Q*O9SbaeJQ#wZv|0&p2pj@OnBWhF$OSN=b!m`>z50S)~=_E9jYK!WUk?BzWq;
zUnz5xj|1?t_G0=a5?dU_xt?|bqD|+?=x?IMmxOJ(jK&<svCF6`9#*kxUHY<S0USAm
z_jLSOP(qN#?SC#e36cD)f-IWpP{LL%w4zSmUu`kanqvkyoB?z`{BCM7ys|Z5GQqyg
z-9m=cwJE%#DYZYx<U+lPqu0lA1CIGMB;bu@J?@5!R^UfIMcnmK9jX@!oiB`ZX0saQ
zBtJ{3uVm=HD3OL->*amhELt%e#6qskNgn$3LAY;y$@r}*mxWX^=QE5;W$}}v{gz4G
z4V)OzJ4@@>rL}wXU6{Ch>$%7zbQFx<n&1~oRs2#4d}R}7l!dhWTB_9C;5l8jF@eDE
zwpf!Zb)``Ugr1mfm-#cZ&_N6oS;y2wYpo~xy9E?~x+)8^!IXlIk=;vu#gx3ofhlHB
ziNC-F`7N)-(QX$zu%&G7Rv=!7A|xllRWM&rHNlOL$?><N4oP1HZ^iu#b1#x_Z%&?X
zIU8TBrkN8_ojJ9swIF!!1|FR_&<_(#bo8#@l3EFJbpq4M<1A6biL(cxbH$AKv2-tm
zt+P87g_7hEJNS!P!*IKo<_Ev$HrKVX|5RYbr7KXnUIHX^@Ke{ExZ7SsKdG<5XrT^w
zuSkaTYML1$(T?cu8h8J>oY6dXxD30f6rxAzV1{x3tXxu4Jbq^ZSWW>o^(WgH^MJE4
zO7*5Uvh+qAUK1sr3G>$rg1q<}TJCb6PWURq)L#J1bi;$p-n$`iczsP^ubShs9H0f<
zu?1VYFY8OIjU00CBo+1ES!2Js;LSySG@3_kt%g`3v)6B^qJGSs_*A0YlDN%|ciD?n
zY1-FOlc^`-;Dm;}$zJ8LisKJU^Y>&Lx~b%eRU2T&i@o-wpGbiNBN8-=Ty$Z6Myjja
zoR%|SO9BFsnv9=U-bXR7nBW!=!FJ`6U%=+-sMt`ZmEX`c55tozCcv2w99seMHFdHR
zU!u^?A$u_?@%(fKDXCYVV8+)56~4h9_1MLb0l_AB$Aso45`!fxD(zwl-6hbRzYxwZ
ze8t~PsJ>Kq`Mtc)j%fVxajB7Y+`Gx#O!%+zg|U*6qcu5ynHP(1?2Hn|o>K;K9@`U6
z&a^|7M3hGpr_VZw7HN_ljpTY~d3+nU$4&NU!PzXTI37WL-2fgp(6&D4FsT0{CsqDX
z6%0DMcDFS*5H2Pon+H5g$4h8{+gZ{C)`fBt6hF(*c>jUPx9PTT1xNbq7NF<t^$0tw
zB<EuQ-cd9;P&sB8{pI5MB07&(Z0Z}{t1bF2T1>#u5~`S6{7uel0Tsf3e0CJ?tPg~w
z$pl31j5?aLv%T-)eWT|^d=5?1=~8pyj8b%%Rok|=4aYh@e;UHwAu~>(i_3*?)`MpS
zuPGCYWJmpY3O~p`58_r6`#qY-^&Pkx=O=|vo4mCjy9(oVJ0+FfdWmm88VFAZ#D<SH
zrTVnZz0TF$HB)`n2O@Iww0mZ^ge$Rv7NJV%PcSjn1{%R1rRfVYfUN|>z3SpWifFs-
z?G4^VbC!4~%mYnP0XM;;F5+w~yY%zp3tne!ToILw%)aH5h{qg1%QArE-OW|68Z6g;
z%2>6-7L+5D#<V<-!S2bo2~gS6={I4}a#G*728;J;#mz@mT=P3Pj&D>is@QJGjfy~f
z%ul7gegpD^3W=rK>&fFZ|B9mwT-VLT=ippc7^F=YVtT_!Ue7Bgx+KNxdT>O9@cI@Z
z!$KS|+l<>sF{L@v#*Hg;QTzKtfshRN!HTyPBBx-sl^xdCN!VsQ5r=8fm1G=AKb5lT
zvmnSwuwVehv-(0=s~adsKs$9<=f7Eijce4iD?&v84wnm90AFtFZz76*d_e>Tv`Qo5
z%Nqoow+(AW{g#ERFAV1%kns|Lh?F0u4#eX_Q8{%Wc8dq+3Et`I{RKU@L)(QMk~vTv
z7pA^XjEqgZJe}bfzGB2F#_6$+&+Br3=fITutd`gbNM`F-P+y}tIu7Jzg_cX9bXRR?
z<+Hiw2MRpsfwwaP9b_S?;%3^;Dl)C<gFJNjogyyqEwZj^)vGw#Qc)O8Ok;3O`Rzm*
zja1Mgn$#p@MR5jUDrn#6m;FcJ##y<jp<Fq&p5{S)VuFHd$+?@QXj$4J4yg@vX^GO&
z*NeJx*rHQa;1nr*YKX+SD1%aQXMe+RMMjl%yvOz6)pH>5F<0g#m!SxF)R6l^CTbl0
zhumFk>h%T!h9$LShpHBC9BC$-zuV3kkyq_-xY)U6w`cqJ`;IR3Sl_KzkY;mQv6Pnt
z0__CQ49huZk1(54(o%wfDOoQy13gtPpqKE`V*Y6hUuOG~dgS|p%BzN56}oA$`Zm{c
zs3o!tKKB)^&^VBg){@7Q&rGX5zczA;LA8jmhAu_Qugpr@tq%>f(~<pBZ#o&bkgxXl
z#ktB!X4{_hrgn?rfGjckW@=##*(LSu7O^6T<R~R6Hj17{v!plBc2CiL0N29QR>==f
zpr1`Kvy6)-bD+Fpi+|&~(a4?qJ>5(WYpQ^R@Rpwr&PNyB%jzCQn2gPpLsP<vNa761
z)Ju?Ko5Wx3IA1DKGr)c(X6r>RP}d6ACXBO&lG3AJDckwd0-mQ<m2<I1a>z0G2YFU(
za~E+*ux|{n#;Wp-mCPTfPSntKKRQ~xK7kROl;!FU@1jr+Wczol#Hj4#GbhIwLMNhE
zvSiKZi9Zk$Yb)g!v8k6bw(s4NEVPAfz@ZGpqj5%RN=fal2(1rz{x?rU{fUS8Z^dKq
zrsS_H{yKoazGbThhuZo!0Jv+sMViO6IXOtbB!6V*hRsE0C4(b9X@~_%Jf7{!ZNC<{
z8Ma41XoS%moE8T0av5Y4h$|ktsT31!NsQtCm0ApJRPl9_pJh@@EHPDN6*1VaCOvp1
zSMUGL<eXq|M)r3eYeRf;iQHqmK0PLj?(*%)IXj9BMyqIi<wVd(fFd9w2s|!<X?B*k
zoq52ZVL4SM4%DC+*3fbZXkMr=jTZFhU<s8IBZ>}i+W_9*vQnZ=Qamx`{kNaz`h#rK
zA+z|WbSYdt5|W?8rB%Vu38t`g`bd;A(cc!c;AQ8F0ehsaWfvEr+5afh3`3fehi)!~
zZCrZo6^u|iI!r+Jr+TXkfPdBu(&f#!zxy9JIbOQ-X{72~_fmxxywF;vh;4Bd);(xP
z)Tsu{)St1*@8F`sG57a>kML0c#7-+TItiDd3(esbKRwysKdA-QL4K$@@Ce{Q@7|b{
zGjaECA!#nODxdCOM<(?;I=QEex>_Xl;mIg>V<2&x&qZPMwZ4XDG}E!Ehn0VFKbGB)
z-%GM0>4PJ0@gRyOg0BTx2X(j}I{q$$yyj$Ivp_f0suQ6%BXO=6E|nJ>Baf?;pDf^)
z_<)y}7F<j+$1Nh5S7ya-M#6EqF^VT5=<o1+(QGTB1xv*-4&7-ZQf5lF?&G6>s90Y<
z062V1okFW{wbEHvvv1VQj(&fVF6uSpz2F!oRP_R<vX}%v{bkYLj040Z76CjE;E?kI
zvmSIiFDH9O>1xCG*-+rsyjfQI7OLK(mSlJuLh-Gwi_1sQUsAL&#ksDeEN!Ka))zDx
zk5a}k*Dt}!KMQRZ2nFGfk3XaoW>5oLq6LV5v$|vaY)jR^bx>pC8oS9%YLqZccbUN$
zOIup|B1jry$4)<G=DdFyi2mGKj*HRi*<s<dyKT^rd)>ESjq5$3Et>D_3b^ZIh<3cJ
zo8!Ih)-}bToD}?iYmXQ`UD3Bo7D_&tyQ_=dcX(#kgdoas1N?z*raZBv`<8tIGu^;`
zy51alNbKxchxb`|1U=H@s}6Iuq{96a#1=q()AqKJSoN4**ZL&x;aO`w1wVmc0dhJC
znOfh=IDnAR)<05i;~C=6264b^MUHKrRUNOXe8R1Mf3HOPAZu+aiGNr^AP-{=w!0+3
zwOZ~N(GsCsWU@8eZ;k$6@G9*~0WH{9pj0U5p17vx@(S>6>YuWpyePO=i;O4cUzaeF
zjc#7}csF!NBr|73UBJpeuUX}-<F7?N?{8+dEAlq?L@tE!+Wg*^uf*3DY|@K=?G<4+
z<B*mCUV+^;#z1z%yg(8sO&W5ZfrM+Uq}Tf;ppuDrg#i%%eUx^B+l)Qgi5P@1GMS4w
z7~k;a7bXkOXgM&A@-)UL)3kYL**kqIZg*Q^eVe<&zUX@0yKd`^0700GzS!FIpI|T5
zl$`Xh4FAnWnQB&H1y_1b->_ItA#SZ0q+8%-3^x2zRTQyhl13V{s!9uoie8jhCx?Y*
zPfsg91Vr_WcUX$M?I(p-iR43grI$z<_Fqlr4{Qp5&2HD74Oje-&a%PI#7BqHa4ei6
zLpMPjht*x3>$*MS=H+aHOd3B#oy#qs#oga=PTqTlAmU`y&hTh%A)5^$RW*E)u3ZcV
z;hoM$1=qI5F-BAw5kdbXS%Q?NVjwz<f<rWB>UBJAb+EMJ`(l;fIk7^JK&XnJgRLvV
zx@RRf7`bY%`)~n%Y<p6+?~aFyYRn*AYTqmg&{`dy#q#}>$Mw0W?vDv9r%V7nu>r-*
z7zUSX`i_2~@~6_wW@bP>ZaEe;*dSN-zZ4ae{DlJg1>UT7;_}7C0n;zL%EkNl#eS*}
z9+y-Yc${rApXm_gmKPU~q>>1iwDv~(47by#raWDEJFIU0QHXvWvUFb@a|m9ZPHBFy
zF6#=QmeFeYGD}3sHw-0-^BPO#Pk5R`Kx+ez+26|ddqUMtOh%blMj<)Me;Y++yZDW2
zF}(_F@4M{5;uSjY^L39KpC`2~25Fl<PrU*hoR8p(_Z@BXZfOm;d-Z@wB+tJxY)qJ|
zWLHtg?hBckX61PYQR7=ZkT`KZ8bOd3Y{~%B0N$kGit%qEG3AB&5M|=mPo4O^=m=co
zyxJbRy^f6uVH4md=q3^@gW*9DF^Ks?;sNZkrrpPp2J`5gmD@a%lFaHoOHp1R<BmhY
z>)td*vCne;yv}l1Sr+?KT$x3&@PdEM{EG^x<yAEO-YYrBkb-+16QWDpDW&NTxuu`n
zc)9sKc6HSf;QTq-s16*HiNz@KyX%*I*Bp{g$}jE)YXZ=P+;dXd-0Ib<D^}hDe!2o|
z=k-~gwf3{c9-XiJ#kZ9Id=0rAefN9)>@C4PND$N0_>w1L_SF*yF_5!efdz6OmKy<n
z4}-@W^!%6l4BgeR6d9}%&4p2fuvOv<{n-Lsp*s@+N84bLe}Xc<@ION}^&|y?xxGRP
z_}-91m;H=GUR1hN42>VBhPF*Rc?HcdjVcawx%H&QX8z31_|uFHfm#B@%{MRqjr8cg
z49WCy64B7cu+@_58Zyz?UtOfAP^AF$r&k+4;GlMjv3w{B=t9og1e9OP&L`+jVpIsI
zjy?WelHa)<j~RKb!|3XUvp)S)6lBm$hmmZj<9k}d&-Z~IVQDid5}hT7*A3i-&W4ek
z|Bxh5;@s1cy-Ef792Z;L1S*ctt7XwyjA|kxb;Y1r<3ZAaef~t%x=%9YgF`2}qh&M`
zBL90><bI~B+3XrnI}ubc0uGmm?QOO&06YQ)6|;~<=u^~dD}NABlEQEpjWs&&n=|Km
z@>TGE-)p*?{Xh)KK^6i81=X+vw*2JK%opEflRA>(WP#oLU~3RK`#uG{8~XJBW%1%*
zF(W47h6$X~oOu%psTnVe7S5=l&v45a^20Q@OSo7lNdMhXksyQL7cVp;#iKa~vSX_M
z?PX6EmxrLzKF|K!Htv&k(RvGs>-TZy|K;$0c^8P@@Zolszrpz5<&?r_pJU1WTM7@!
zn=FU>-I4yg&XcqU|GK!KJ{Mysg#W8kk(4M3>i_3LQTN6EUC~2Zsi^dS+ZPD4N<PE=
z-(Ap1`uuOZxZg-By!&qzc@+OYf7u4q@#Rz%@tvk(jDeMXWq*Woa=&?hs(`YxvVwxb
z+p%J8O#xMHZ4x6RBhw`DyW5+A6V7@l^c5+fcpZ;1+tR)7Ze1E@``zFFvqJ-Zkjd?m
zYHG~FnqwTUIh@64(`cEe-Q@{f)}(jm9YSjLPS9v1gm9uvz{XG>8+4N0+}vD)zpoF*
z=X!gw=6bbLjWDi&vQ!#dPOYxQ>#lAVmaHPE(tfe`emqleaAB#QwtM6}=gD>8a_#qJ
ztAd(=VI`bzcRn}SDl;>4@rX41pCQ2xNni$gsiwF6CvPUXD5xh9<uAzrN*e4qqcYQh
zSE;V6gvIr{yqBjtp&d(R<-N0w?iU;K-cl6L$c2Q`f^n!gyMMbZg>ktYBB&C19ciN}
zWz9n~{?35|GN#n>_a?$)FSp|{To2my6POLmd_c<eTbMc+KOtCJoLv#cp0imvd38WO
zHcf)hxA+dQhhY(OM!u&=LKTZ+)Rtl=dJ~P<ACMqpv6|-AVpLsP19#?fpikeeKmYS{
z&CG5ULDJu~+#THRg;85G$TFuFCJW7IewszIeL7^W^Qwe8y-MN4X1Pk1W}Rr9Ghy`W
z6#EM$|2Axk2|aZ{bkcv=G4$Dz8;q|Ltrz&XjSD{L$fcF__A=F7<Ch4}c+*$*Rw*L~
z!=vp!_camrOhsF@&}yTChTv(u%4n&pvr$OL+?QvPYDgg001{;FIc)$$)d-2wgbhU6
z+8Nrc?C+h<vmHw|r!9Hj(oebG;-YG4Z1oSetgV|Olebx3T2hDDY4wXORTR_qddWwe
z@;UCWG3=n|sq1lETUitgE)qQUPQ@1LYq|Pvp}YN{4k#ZXnZL6nutP#aX~2X1`59$-
zWrf2lwbxj^()4KnB;AZC^f|+;L>aKF${#;|(9sEpPGJ%-r!xfn&EWr{X(>-Z@3d78
zAd7!Dxti!~P&A&3_EzboP&P|;eX>28>$*ZZSK`~7n;8N!sMHUaqU&_{SxI*W5WeIq
z^s~!9E|~~cOU1u}9f<N{?ku#-F!LqW(;~Xbei4oi^#YGHg17H|tN!dJ?od4Cw+KxT
zD98dD;xfGuP#7(VZ!d&XY73*kY%i_E*`w5G2ck7O*e5mjgb)6J^}+B1XfVk<(JZI-
zx5hRn%KGQQ-~b@k{Ls~NdQpOD_^BjmonU+}@QMw93i#(mfQytR>p7GCBkvIot2`u~
zYN=``A`n#}ob3+lIB8FPPa08#Zp|Qn=v^Wfl#?WPoFy6Bp%bb{V1rQi0=Zh_Bo65A
zoisziJ)tI+_=fq6J!?m^0B}&(mGh6Xi0y;lFp#=tgx9$Y?d4JE8kk~Zn_wTZ?=}}s
z&JV<If(+LmweV1sK?om6GAmV>CEhXVm4irnZ}GX}BMw>elk3}GiUJWg3x6|+lEKSC
z6hsJQBecn?UFJ&yCuKn_7Win2H~fF{6GG#MYUR1TbF;x^`kDcNYk(R5+r?`tz*$I+
z6{_eXtgSumCH$~Nvjr`e;S2DXDb`X~my&Eh8yk3S+;AU_QYe0Uz}OFYi$C@?&v+w_
zUA`Hot<use<%!|q6Q*xpdS8PLlvU$*bQTUZxXm=J2+z>2bI4H2lPl8r5h9z+IZ&ut
z0`EWFnd(^WO{QUFgs&YbDk=)Qy7Ks<VVO@GU!Cr}%Tm1d5^8imv$C_Cs`^$^VzSl;
z1HJGGCfdeyEgLE->iv74ji)|>qo=7U4gP~|tyWBYe1-F#4jLxG+rY;p;ci%gds_!C
z>*Hkx6<^}x2m*v19XUYz93CD0prs`PK0-}P%WJGOnv|3Tw>Wg+cUb@Z8FW7!Of=2u
z*>d{L&CT%&6YSX7SX?~3fp1Dw^xfvRSH5Goq3zU6OxD|6gH4|9ypEgixL*inU_t+H
zQ2mOJHk;VaX9nJf^c6o=vjoK1G0uN$sNodi<Iecl_Vlgw67d=kmjEU(i_dy`$aQm;
z(_sW;c@XRe8bqZf?{m|9+TnMYV1y?&QM6z!`A$2f;#B4rRQ$PS_}%&syn~otYn_P0
z(enGQ!eN<Ov2_XUZ1(!}b4d$)s{R{e2(h_7##9)wfvQT1J(~Oa6e4l>4I5{PSAw3b
zdR!Tb=Q3J2>{+Rid>jv*5{ORaG6BKCphj}Ol^HVAM-N<7oi~>mS2g|1bJ9^DPt^fz
zY7pCfB0o_yncAKsx+X%R;y;;>xP+-2)63e8j3ZU2;{V#aIK0)IVTP;@-UsnG=<_E$
z)T!mJ=Ek^>lDow(Y&{3R+yg?3u_7MT>lGVE+vM1(im)|KdNoyJ1st{w<@}{lY%d`+
zP(dtCu)qf;7(<MzufIAqrJ1&(dsI?bj05Gph0Iu7SaChF1fu@j{v)M&IZf|fJ!?;m
z@T~E~pBUYKOC38neLX9ZR!L7xqiVl$Kt`PMnvJXVNl=pqrJ|ixa|tHfdaFww4poRA
z@#IP?t!pnXCi2*tXFkuma$VP2wybWRT^<ob2eI@T(`@XLsoMUL6H4on_hoJp&)bv}
zfQYg<or^N74P_5EX}QGp<gHCI%$(qCsO3g<XtIs}jDhq`4_E4mw(YgyYbT?M9UdO8
zj}+o}$1|C<1z>5pEcl1v><$ioaN3<l_@U#Njun$IHJ!go=CU>hqb6($ob@ml{=OR9
zrHB3^VI4o{LnDN46XtGDtLb$b2*eaip~Tfwy>H^RT2Zk1--4o9vMryW_dahUbJ?w3
zt2vu>|5jZ5XIhJ^s5IT(?Aagna*>@7Ic<-(I5%HufBde|uA-{lE{ZKMY_33&D8p(1
z$4qtGq;cAr^v|SLixU$TMn0QyCX3hga;^9oW|l;+RTD{->f)nP_%XvwLo_M6YxtW|
zE%=^|fh>t=Ps=Ielg*Lq>op;hi^G-tf{;vVFa$nzGu9WiJBWdpT8-^%d4UsL`_&#Z
zOInL5PB6R|XWjRVettsEmsoxJ7t()@F81DQCkNJO7N_ySX6AjSp3no(NU1R`FgM-S
zzn2x$PTN9)r2CFZjuNz|%&sq*?uiKEO$C5B$vHy$<l50G=BuX`=HASuwB(SFvnpj`
zExj;cmtIcNj6kXd&o`ox6w=ornd-^~znhNg`1869Y;`H^(PEFrSD@{M=hD*8Mg5V(
zNsb)*$VNR5-MG60Hl(9~h_6%KstF_*BmGD@|6b=0crF_)uark<hN-_ZyR2I~_GrQ~
zE%?ItnE2VpXb@wrmzt=4H?(meS?7IX?gzw8!hw!nbx+M^eBF2IZN{LR$~O?^2-<E-
z+G<ZPej{YzuWP+XD~nlmxzA7Ad?8K>0?^|>`=op&bPLve9cg&+%%+_Y18mWct8?kw
zK%tu^wfd_1^Xxg0QSUFh+uj~JeYv|a5diPQIY6CFyPyf2K*~2r;3SQ2?cVFC(XUL4
zEV<yYpyhWp5!^XqcOqjx2h0P2n8OOy&5IqbLyc_`_RQ))AaC|)$1eLinpvgHr??~H
zFzK8P2}av`$B_d+(rT;58EvJ~gUyK3RtLEWaJV0Tz)h&;Z3i#+;J%1cjP08&qUq({
zkdr7(zw)sdn%GYl_AR9k{jOR4EchLfca!-DEoPhEa_83+&(nz-Eyh34>(y7&Y2zh$
z*f<c)4wjPdzgq2sb!$7%v`dhA{z^1SMZlbA5vomxcy*3j@Jh3xnv2zBfJdOV{QW|A
z{A?zD*{UTvm}G(}-~f|2Zr3~Stu6$T8ShN~NO7KZo%X)FSzcWwJ#u5{Uc~l3M~UD+
ze0XwllHz@P;jyJTw-`cK{C0?))bm)8)a!hKatxi>`_^N(@l2-*It2#@{bKg4sbj`@
zPBu-@GeOXkSLk{H8_Xi>>DekMCv@_cbJG#Y$6_r>0LN=jCoO6ZyXX*xto#SRaFkV5
zxrlYm%xHwpTd)%Z+&N8BY|+l9?XjI_9P#sDPDDp*{cEZ2yO60WXh(ziUxfkb(1-Sp
zgXO1D7K-w4QbXgbi^K>ZFIttx+XuQSeqwO{vNXvQSAM>vsmO2TUy?$cE!{?Z0IYfe
ze1B@1Vf7!c|K#NvWfxk%3WE1z_P)ziI7SG=OF=bAvO?{5xP`<d5+8D=GMW7u{81iZ
zp%Ry!1e^eVRr5Yj{<Pc9d#3g5SEc1>ya|s+RCPh?_-7qTZ2RzL$Xc*^*wMRgqCamc
z=*omv5`p#}Wg}&l%On}a(<G5DOZ|4tiMLwbk@ci{hb8Ich&$<QESKlWj~dIEh~PX|
zMHQ--PQ4Rez>&zMG%s_ouR{oe*gGJvgwrE`EMrijnrAPr+&|({C9i+(ZpB<*G!}IY
zK;0T*up&OC)8c?f%w;iKh()11jW!)L2JcsRRk!|FyH6zj*%BBj>`4VSD+x#-Y(A|*
z)APKERaS-Icl(N=U#xMG$0?W#Ak^y?U#Z^IE;*L_dT*+lNiZ#9XR2CBMMX?b?(u|W
z9O$zI&2#;c<f7E{^x4_je%M0Sk#%*v_dX*5HsE?>+@Qk*(22-UN^{J!;QR9Y2lpKv
z9jCpncBXARNc`I5mWvx2QqpdZ^Lk)>@g`}Wae-uBHMY%d;P`mTB(nN1E-q%pg~Y_h
z9;|0Yl<T)+^zp2{@Y?q!d%^a}?za!>BbSYwc$-=+{=?4KGBDmBW%6B_VxcbkEe~7)
z`AJ|mdj<d$Y6|_=4l?f-Q&qJ`eS8;iuBL$m8oPsbeET6;t};+zf9eNMRcpY7EY<7M
ztgEYwK*)<<=mH^6O+#Zwf985TAmO?Ob58owTLoS1PwP+Oupr<t$Bhs;Ra@fF_P#mc
zKmINHr|DlDtqoO}^grK&{iQyEM>V+c$2LcofwaK<m(1RQKf@-ba#0}R86JNpOiq<f
z>hAwF*OMti+UUEa<F8Ecf?T3!GUIRXrsY6ZV_%f4*+*#qV4-g)cr60RBx|*`EI`s{
zq1}O8jAGu@*8uyZWW+d$*okm^(%R<MhD`O#0o&CQ1<0P%oR@y^GvMvxTIb|8qv19}
z*A=(uX8rTZEHJmII}qX2bKb|sT(HneczNOkT@-kIm%ufO&Cs$NUC<*+vnhjL`e&An
zxV3!r_Vemu=JJSS0DLTGEFuw;VV;(8*0MN~YANn@@z<qYJ|{G*C9*8pfme4G&T|Kf
zGtNzSx@$d&f<!0xo;^grpXvOhk)YJJrL0W!MT1<*@>;TNid#jW@t#$PcfBNMeT3l|
zW%A58jogbRA3iwhP~nEyC%<*EXCflnO7gYdm_!5=pQ+(uX=_WLkAjR>Q}$?H_nryN
z?X9_wEOttg#`-G>Trbx?yb717vG7=XT^_JHmB=~VJ~{Zrdhg-a#G(&Qw5{v6a+Fw3
z@JBhL>;&6_&oi9sy4orPw)sen_YNMaoS=C!5+fUFJWqpduBckGSLi!O61EvAt+gtK
z3YA#4o2e!UPK${dZE>WuL_{PLg&3Nc3^jXucXfAvD=5g!&kuSn5pJ{i3*FAn4pagK
z4NY)n<|{C=1;R=A#KDWrDk>^~@GYKQArOdQYwPw9JOIlh<KsKVnofWCX%Kr}ov!fB
zT|C|zD_J`k(_I7ocvm5G`HwUJD7NfFQAU{YASvzjRr4L6#aM9;C^fR{`3I^+e1mdh
zjyj$vDt&1}{hntt9oH8}I2avrpms{UP73)imZPsvO1zC`8(dA30*bfjH7Xyfs3dY(
z>+pY3!1WjOykz#ecA53Mf<7kYC%_hygYmYP8+E^zlw9~KL7L&bH+wL)yu7@>!sML@
zN`Gi{H10S2^3qLaD7&<jd0~15{99~^hkru@KPwv>3#O>Z{|QP#5w$^9j+YFKT3X**
zE9pg^77ocZ-Qy;aa<&g-G|Dj@|DlHTjLwSa>V;XtbEYB-X#(NJ-?+CBMOJ^FcscS<
zla$eKxj()rUv!9xt@q8Row=>5<<a|$Dp)-UA^LpJkgD(<R%jA@yc8u*8zLMW7+Wve
zP|x;$VuKn=9_mh6hm(8H0nR+%%K-Ir42^1ee8|dvSh2m$`)up2j+^C^EwwTB#C$1B
zm55C=-#f2*)MO0N%SoJ%Kh1>jTi$OIk#ZA4dYhOT>j%w*yXAdYQ1t0u{wOTwQrlmy
zm6Pbq$GE;M+&D%wIC?%ED$loIwdIqM>0Y#KY+)<ZK=%J!t5N+?DwybbFEUP^_D1Et
z*+;wWR8v!q;Pv^^4)Nbb(<CBFc;e4_-yeOW*x^l(`!@^VsvKwi=+J-4LzVvUQJH;g
zyp^cRyq3Wjd349O{fk6WC(_{k$yFqscpqb>^BzO4-ABl&MlEm@^1e}Ge(qk;fI0a1
zE2{qQRt9TdAJ&@f`dtl|>qC~(wfJ&6ve+w=49``<Rkl*{2Wp`)p~Hp4%NN}B-!k57
zXb|~6z%~Z+7&KZI&r1iVy;)f(lpz$K3BGioS22;mVt@wNr*TI(323sh(5b4Ym}oS#
zw66pNPSMKgL&tR7v9!ksxvaDT>s}!F`}-Rj8{6$p^PKL^Op)Uvy1VQ3$p@;cIK3{q
zb^kQ+08GNx2(RPUhet>Cjzukcks%=%$|@`NX;)ezF9)qgi`1_-Rht)oXNa!Xh3A@a
z!{h+cfFQLlFjL8=X6NMi>oLCv`V&!@eiG&9w@BR~42jArD*h0H<IRy!bR0^D@rbsC
z^-^y!MFLJs0x-0Uy5k0_t#xx{5=G{kJP%y>|15(>DHrLz?BC-m|7niV8sce|KlJqe
znx>4*qj2So>)z%Or^`!<>Mn1g)bKG!gR&rFC4I+ZMtXmDnmp~6wYu|(!D2_P!DHp`
zePg$Uf~UO=c*z(`r8FM4#qm#3gR=zd^mPbi2S(1^IFq007F26nC56?)>s>D!KbjM@
z$`Gs@ZYrp*5!d_*w&!&Z?=WZhvcC3nM>&CgT=-(+VTm>R{*L<%32&tC<%s{co#%d;
z&s%~J+g}+;6Ja&!trKXllDpHzTGK~~-0c4Sz5A>M-e-OOHJqPI+l8)ck&_F4mB>@;
zvp^G~+u1x}#RT>|N3BtHKv#2mmRUI$A3#WU-d3Ci3I8ZT(^K{}EoZ@rItJ5jf41+*
z)>&YUcllbu6;v0auF$4(CSCBcahOfHgF(@kwjG0M86pqcV_Az%L#P=+eXhcX?RP4A
z(?}0WtRL@>jv}!I^6}x4KK5e(9k+Z<%@4b)t%q#Q*xofE2x8lz#?{d`+v+OMH6e>7
zHksGlZ~!NM!S4c;#nw~-cLkMLAYQ`xc5$fW{<P7XtFxiW$u7`F0k?~ZiTRZ_)RY-&
zq<*|N*L(!GAVPWYIJ>Sc$)F=#+ups}YDS70x0M;QyrKdJqe>^Nc#EBrGb$$L9Z+fW
zN{-wbT^e-?3JSQrZ~1F$Ymwf)ddg`z{xjLSNm5J<_4C_LrtF;Y+k+bPJD{6J7^!FH
z<t^E1-{3pfgR`>V`8s01i>_qf`tH>F8uY`A($dJMuf>@iH<bghhy$iPS47nQPexu`
z%4lj|c7P3-Q4ii$*bFZ^Xs^w^x)S)<;Oq2yGYQLKrgcXF2Ls$x5u5jzUuYT=o_<Sb
z4!>Nit=Qx3Dz%`fM12F7CSPF1s-_y-qnAjdzNsp*pf+Eqv%Hu*VxUZtl~j{bQCX-`
zWSpJCTL#CEWNBLU#)(v4iF7jwGvN3~g_G{X`rP!b=LH3&#q7W0S1;e!T2{VA_|ph*
zCW{2<=6Hw0g4-W^#N!P+@ZiF+Z1k!-#77MC#t8<;`Vx@Cu^Z>t^JD`xuUfGg_j1i>
z!NGiq_^wyc9+$+}S;l6Yp4FY>%(V6!mtW5Rh@ouYL%fBqZTp_0t!dfWT2dpqhVS!4
z1ks*lMA(-@?V5<OokzCT!D}HyHS~0x1)a>2YHl@bNf^#w9FO|KUn-)kM%XVkEPL@P
z8YsBE^6Ag9+gFa+bbBp$m~;HjFKdL?-~mN|9TXCp_&TMbrYX!swVJhT9MLr+93?>8
z?z#Pf{{~U?8HI}n_p@4=N<_#1N84M*b-6B4!xo}|2uevx2nZrbHwpqGEz$zg-Q7wz
zA|)*y3P?97-6;)HBHi83+&j)W&-?j#zwDoG`Nw_5%$hZ`77bf-Es&SB;I0D!`^2F4
zvxCKlu&`%Pr{m({#seKrY5);{jo)ad-|%sCo`^M<Z^L_CWjHK$NAY>AY;1j1_U1Nf
z`e(;`)lfVEjc^#yu~=I4h`tt0O0maWK)s{Tz`(%Imtv##<S_zk#l*xU;@E@VUq$`+
z@uNphPW9f9s>ww8lbJ(XzNkty<99O$Cr3kNwM{|ySR5|S4o0i&8J!Q-b$9-B@$Pi8
zAm9-oYJ72VvGG{mU*NHP&x~k^LO^b%c>PDLD>-I@|HnwJIhJtV1h?_EVtP(<3lSg9
z`r0{c5A49xN5N?w8F?dY=|WE}E8<^AZU`*Ww7H(8Mi#w#{l?CF=(F(A5^X9PqusQM
z5OrqHQaK4)Q-wcj{GYP0WjQXn%nxyHd)JzoG#lPCW#H0ZQI#FFYSYGJ3#JzBSq`d5
zyP8e6DSbP=H{r*~JvSn0-o*`@2iTUjv64ULyq>l$f1@%t=ERfGp?aXMA1yS$g(9}w
zQF)&CEu}H4gU?1JGljW*@jS%gv!=3)8#Nx*ZddWlH+qO>JfY2K5oTX*6y?rpCBH@)
zapo0t4HVO}8a{YNYqWK~en02RRqOn75h=-6V*5GQ>J{qkB+=PPFtBeZKTn~qbKlS+
z!RiQ*TpD|Yr}sLUl041-IfGNCVFV73qqg`v{Gk%doS|v!ff_33LCl4V@ZTA}6p)<Y
zRuA;{ejh6_&d$!(Jl<W};wHF68tO|f<ns-f(3j%kKnGFt@Wgp|csP8Rw%}~->Pm+)
zC7eduu9C5%a8^zU;!A!-uA`&l=`4QTG;pN|&f?wsDYv^a9D0vM@6BF`T~$I*P|)G4
z`h=Ul4PJueujPZu+_kkSk!tt}h9^yu%SYuRy(Uq2AZ-Cg0_US$-x|KVYl9=4Tw01Z
zz?yGZ88~UCe|oqTM9LTY^!`)mV|`J`on>@CLhs=}dBnxV#e2M%njm%YcQ1~NjK!zw
z)066*7P=my*YR*#Oy<OQTof6`9QaZyoBnJwiE~`H7}M-FP%O(JbRl?EO?Mz^w^Ltv
ziSes>YF3%gaQdAPmFgP4)-A$>S$;xFbaNB5mrMRPaP?Dur;Q!{sX6zOF%%W{!XHL;
z(3N|KeWsJsA^J@A?Nf6e)sBW$e!_J7Sf89`?tS<hEt<rmbBlmdse7|pUB9sMO+hQ%
zi=BVDXy=8OZ94fIOz#3=%-1OFWI-~nzuxL3d;01--xbNPE_l%Db4ITIW~zC3W8H=6
z>3x%}X4K0=Q9g?aX4+%DD*_qT!PKf9lq05SQ{^1~zoNZ7*=|wSDGzm`&TEo>S|+F2
zo7G;M8tu6^uX9v-pE1w8A^9OM=UzMI8~&SSPPDUjRrh!um;gfS0tUb4`K&pZC|af!
zDq3pk#Lkucx^AfLvc7!LhGpN1)Ex^Z6G$vE9xjA#Vf~DSZ#L!N;9xwTGhWpsLO14B
z<Z3quX?A{kf^m=8OUM^<s~(+kbA0MNs=i(j4wiM(FgG!#)4{r=vhqEE_WHe_pOJ_J
zMMOpQ_xB3|-kS548jq&8t9S#kBe&s6NvYk}k+_6};0(if9{Z36-`gw@yS!Rb`)GZ_
zI3<|x_;2=$GbXQa+fP`c!u}tgxdGn~wEm^jReb?%h$R5;{Q$17C$RoSj`V3O;Z^TH
zdzXug4S4}mQP`hwv(=RU<>M6-!i=WE+{^oFr8@c_RcFx49t`y_<~2mho*#K<cqJXZ
zL7S=`?wOkSGdKM(0d|Z~Rr2_tKg*PLR0W&7DRcWMrWRAqKF?dTK8KH-a9jefXP4R8
zizWGneiBA-SsAKw8RPRo7rx}EfO6aQq}7@4{<L-KL!H00u?yv1hrC`f;U&m$XAG`L
zt<rFtwpt*(<#wirZnn_0vTjE^!7<v9_5*W0e)`WI!)3SAH<XlU#7cOpoW#l5gTKQ@
z)vwQw-4td}AD<ARHG1OyH87^(?)aQ_wh6=So&Ej$p%ZomAsM<q%%j+}%O1YwAc#l^
z@wT2i4@%<aU}~TL-gd*6E)`=%e_{X0y4ORYuFK&E_9zeeu#+Lz#QzLo!M#4u)hZ^>
zC2!1BIP&ZmSETIeSK77t4b68IscI6{O<yo<=OL2BW;}5@wD{$?Kmu?%xMN-mNIH^4
z#aFKcot(IdILxRBFrZ^Hk^E`7-Wwfh4nL%)*B;1_gwsMv$_o(zq4H>Pv>N@e6Y%b@
zNvX=qH*Fm3K(Uqpa2Vmb^WD#k&$q}f3WQ!*KlE+*fzW!uu_2`OCpKe+dYok78n!hq
z_B0@dKvM{x%)gJny@3e>DdM1ID~p4oHjI2Ku;`aQMMvmArlozmyV$onQs9ZN;S#pt
zesKcW`cVf3F=i3KazaAFJA(IwWgYeg72#z<vN)tpi{!*1N*<=l3cNvEPBpI#{<fl`
zlDU-6QX0QL^D-e-p1Y0ITlOrWlW0zB`9q`b3qC1ts?hd6qlDB!e-!+I@Yno2U4eRX
zo6a~cW+g%iz8zd^1+Hb@3<?{!9`Hsj%N_lx`2ewsOdz^5NwK70>#1MifGn%L<_j{O
zKz+v;<}__zadL%Fs?jfY%4sEPOj@$C_Z~FlGwVlGHRMpCj1s1v@Qk>!*8iHr&cL*s
zImp6Cvru;&kG=J=rXcpw<RimF|MZ*>f8=;_^;794HfcSV8s4~E6ct2<4y~dm6BRtL
z$h>8}%~4dNlUba<f72~gkh5K0lymgw$eF&%w{+h4O{I^jn#WA|-du$4&iZ$j#Ml9K
z>CCT>xQ@|F&ResbP6&(!59C=?i)7|Jqv7akZk!Fd+?6HB<GH;WpFNPxYyKfYi}FY?
zY=B`N+k`IdM1GxkVW#`$W1j<S8)KA*afI}FU$d!~AD~t*C|v`^OS6T(uL`G_S!A|Q
zLVV8P(P!Rz(^M_`A;@EgCwzmMRxL`m8O@F6N@ep7t=b<upX~T0ZBR)sz!81sXh)5?
zyg3)zD0y4>wY)AgNT_IN<TNyTpmTC3qq}(L<P3v|J!q~a^ePkd?l7BP4)pgQLK<tW
zJMF03oZN7WW^|cB4<hFJ2#6e#q$6}gpik&>GCoy1vqYw>tn9MDGd1H+llXSDP#1Zx
z9{2Md#jp5QK#>)?ojFA@s5T>g6Fdf$=YY6MN=mAM;)S5cY%%>5PE_(?0WLni9CQ<*
zcX_cZebESQnRh)4sgPsKemMnJRw|`0%h2LzxHiLm2sU@|M37OscyvD$0%>C5ej=$z
z$0w3rQHwxCP?b$`4v3cd&6$SNKOA+*wY7<|sUpdSgwU#-9o0_~9$?k$iuG=>-h0{d
z7dlT_*sOeAd+;vFT)mY8M=L=UO1Z(d!rCdN>4k!$gxhC|xG(mzV3QKh)UUJSR(I1M
zcx@z3>kYMb*UczK1}2Pws{xtIkhGlYonX`Jq?s>sq?_hec}-qe(VzaF(XsKw+>?2{
zU`uzplA5j5YuI&L_&u3Gydag)j2#{48d}|jf>W7b*fU2$@eA_1s?G&n(ghNA!3%Xs
zqw{mo`BqlBCUl)dYkJ#nX>y+hHnWF!>JX_%-_h{E`@W&zxE#0i_WcFj$)naGhb7dQ
zgrN=D$Pt4FekiJ;-Ft-=Ilev$cZFqN>^!8Z7<3pJplN8{sEc`@V^gaUm$ONBLC<C<
zU5RVL?wx*NvE}lxQK86^C&HMnHZDA8E3Qtm!NcpAFSP4mYw-=4dUQWI@hco9)`kwg
zyL<+vBL!|p`&4*6`!m*RZ^V`Zt!sdC2$$h>=)+({r*_;_Cy<}Bqdna>HY8AsAl%{>
z;5VFxGk7T=AfUCoJENc=?1^^shuGM$rJd%Wdkx$39R;H%7^J-A0}FtDu^^)kNDFky
zN%MJ+uQfAaP=wt8=6Dt<wqkf4w<Qe^0A@L^7PK6~m`gkSs3e>%2&XICN0`2z8?GD9
zX&D)XE=N{w=Q~MrdrpR?rcLu!2%B-fzHuI+UgOlH0sk8rl4+NA+rA4h4|*a^W@V{{
zgn;by&QFgJ00%7yZG!8->CvJ=hh+{<`81qmlKk3ZI`f)6g;mMusAh=g0Nrk}v9WEP
z(FWARUk#0owU_$Sx2*MxMh(o&5b&7qGEd(b$HAy+6#h3C98k}OE4Wt?;UHQ-k10>i
zknK!D9!-f?YvVhR_aQRnL!{N-ezOR=%|<znH|A8DM)$(2>5p@@V>$QNSmOkpIC`3B
z5_0<2<kj*NPtIb0`=}cx9GK$FtK>-^jDH=~diFvEe>^1D!)D&t^@uOV?QVCp<l5<Z
z&DhD9uJog*RojOoQClInrnN5e*&_kGYn40aN98h)z7z@9m<1Wee$}W;1X>SvMySs1
zjN4URULIGq%na5C`bF`NqvN2fT3E<TM@Pr$cFGy08<vzL4K<I8aJ2YA4WQ-_Qoi<Y
znhms%AFqF_fudbbU0uq}jUVcA$xr<KLqp9Ol5wyydeFiQB4i6_Z+{8xRcv$p6V?d3
z%Df`u;m0AwT=i|?G+QTUIQaN1ma~lx3}GD!0E28-hAfwVKAbS)5Ed2&3IL`Vl<VC1
zfYzz7UZB2)=c6g3uHIeidXfd(hIF<_xFg)ojtc;@#m2?O@YtKx^V_N|K!8{sD+z>8
z#t|l`q49+%@kFN;>*n*nrrh{Z+zQkD%SurQqBf?N%+uXzy%oF{Ll%aLt<qlB9p9~z
z`H;HRYCH59d)CQ?Ho4U|+tpDeu4_oMvP-n9@R5z0sQjRr_pK;hO@iwIDR1OB`_3zk
zxll6<n*$4sV)qMp?Ej_)j&n!x19JJpwdQ_3j{1!|t8n<|;%Cv)+rwq))q1b@nCB;3
zyKy5F<aw(?G5kB4%Q?+0E$>rkhhL9BmyKBAPF!(J$jNyn^H&<4l`|T;fnOx@=7Nq$
zaN?2B&RQ17CW?vddP`Xy4Sxc^CFOr6_*{6E6;`MAUPXMt&%vG5`}jXYdVC){GyguJ
z@C~1bQYHU)(9enL=6~MdMjxfv|BMHciv3OW{x$2j`{K?&)-ZrNQ$+voclY}5bl_qb
z)qe*E|9|+XQaDB!4c`mDhE_8CwcLOGr_3wE&_GgB5<t==iGfqUII925HEzuSMuGu>
z@ikhQlqnh$4QMs^??9x>*uwyi3`5!(i;+rRj4+G;4mKu<1f(=xC<5Jm2kY-HB)sJ=
z=SyGB|2`}h-@8X`^#6X8-~amsThlX>;CRaM6;nV_zV|iC9%abe<ycAe$)6&Hin_lD
zII?S%JRhNZV57&ONmXt4v2Qa+q0AVp#&fTswYPk6oV`;bd7a+Q+iwx?Kyv@XZ1AK;
zrtvL+M4Bpix21MwZQF%${$51CP)}%ie5Jotm`m~TPza^Jnti*-bXTlQwznf>fpQsV
zi2dH_dV<2S-WY*E@4ef?-Ry*?%O!fp3nR+B9f3V(TT8|4s1oNZxp<GzYwhe`Rd>zK
zExbu>(@-qyCoKHLR*ws>`MGrJs7qgIXgTb_p`N)$X_o!(sVr|xZcWsdRsTisJ?~*T
z3BIRymL_(H5^xxl=p-)lc4Q6c#93tFt1}kq-D9qrKyi28TdQBF&CZ<9ffcbM@&B+a
zcTY9KK|O~^;@22nqnYPPrUMnu5_N|Mi7zD(<4_G`+Q(k|&rs_fSK6A3f~&-jV%LN1
z*T?Ir^^I;RtluoyllfGs=jnc8Mdx_0jNN6iebddZ)=u#bmmyunQd#MaiL#7r_Kv4M
zA$Y|6xWLIsHo}(+tBql=wbr<!gyzaDK)SFJ{+(&Yexvx?iGdfu0*U-B(io?IPb9?;
z-~Nv7m$EU;js9ze&u-ZVS?|;cuv#2SM94cg@bY%}<Oa@AM4`}HFq|o^2y%rRubpNb
zzpmvRcHUbnyU2`N3lO;A9{brn_u9c?xyxL&-q`$GFh^m+%B20tmfeaiNymiEXjERQ
zeNlHG?t%M^z_87E-gc~NpV>dh_%N+9UFf#efT;x0Y}%|uL;#DdAogbEV}7$(iySHa
zi!Iv0Til}$36DnE19nzP&^|{cg;<sTdiz2E^)U}IcdGTS3C@7m<r>!Of4E<4+2+%X
z^lBj-FjZ*%Hy6~$qO&Vwf_T1PQeM9nF*GV_m6Bgd($1t+Y)H195dHa$Qz6%SIzmb^
zRjN=lT{@$A({0}&!GB*ni`!gA_8!XT>_K3hZ<ML&zII3DFB80PQjkj#q$Urm{eC#I
zTwwAWr+TWKo63TT=QF*+mvtt=^~5}Gq5a8fNdKcGCTMx%dq#a&4z2GO8w%Ohp3*0U
z-=7s8jAbms86f7woo`f5u=trKossaqg78RLB{RXY!7Ilp;VO-G%ZBa4-Htxm&Y@O`
zb<S6rr#3)PdIH*h<w7U=#RgMR)DZL2?{wp!N5$b`CPEe8));g(1+fD&*zdlBa;7>D
zE2fRz=b%Vixgcqfl>lRX?x`#TX1t$8iirN77aZPP1!dm0GqDi~{#IXAXi`*hbc}bq
z`dfRJxqGV=Dm5+3UuLepj)22gt4w%S$aekD7>~r0lh2PNIE|i|eGZQm@jRo^9^T2j
zY1aQ(BDen*r|jMI>Q|W=zrN4CYU_D*Z=!{KApf6WG<&Dag<m9AVCW&wuntxqLp6Rg
z+ciqOjxrSG!qVVnr>mJHDcmEk%QG7r6wMAE*et4#VZ9w4x^yvhN+p#zpj^Y@mC>wV
zBrEUT=9$3jCjF|~)A@n#msFRH+qW>5j2ATOB4TCSQ<kfLkWHEEcGY6N|KLB6hZW+{
zlK$;&N?cQsi_Rfq>6hfe-=l-MKsY@Y|K2z+191p@Qmg(cjYbuZ{}0zyrSHb79`LX4
zuve<A3l$dH9!OF-%e(C<5el0Hk5PNpU1(E6<#}-~;#9xIS{hSb$@P6D?&?og!gAu5
zr}2`cv$NvXt~h%`vtQ1y3E=_zfRLrN_U_Cl(jp^o@S2$z>SfV8Jh)OPPA9LPo7pBZ
zpzo7}ZvNz9SmnL*Lr?D8IF1K)IDZUbQr!CduR9$3;vT7QM`ml($fLfR&i~{h@y&Rv
z^7a!<!SNhzuknlEarQoL6H$Ld_I9-Nl1A(bB~I`pjcfx&PK!q(uwCZ|u5Pex{)>15
z8e`Ap;>2k05K(W9{kh*!dL8b2QxBQsk1OhLhMTuZp4Ia9wEWVREhWQDrTdU*lFB3s
z=273<Xx$z1y-jhkah?_dLE1+@*u0?UP~n_{nzYjF5$2;1zA#)`V50gVqjcm9H%RGl
z5-lliMz_z#To7x&C^|OFkooA32bKC*Z}XDM)lfNI33pUO{>ZnDT1!5c7|l&mOWPWk
zWO{AU8$A3yiCrwER!`eo|4oPGP04<`KeDa4FDXAP_3GYUQN40H#i6oUi9;H@q^Tr;
zT5{`pz8U6reI+}P{{p8jR`n6Y10GX#<AO;N!Kj%|1S8{8!nzR$2iKGp2`R7&4+k$^
z{#YxoHE$tOm2}&(Vu{1_p<PY4Y<a}!%3>PNslWLr>V8k2nb76)eKP?&)m5U43&$#N
zMGln3INdpOy%XAH)69&%>8{*or4cP6OsDHaOIdUiPllSNd4p5+ZDErr8Ts}J%Y?|k
zgk#^04p_wN$v2)m*eLzDuIOkH>x+Fx{F5#2>n|d$!NmKS-NHws_;O3plUvLeJ>y-!
z(+qie$Hnaeg0%;^&CPCY{>r<5=4=R^z5IsV%#K0Gc$@jbuZM|(7_FGC)543Xh@3-2
zlxq1}FI<aaimAMnDJQoc@@=eRYzIci6=WAIy`Bq*f1ZlBvhRB|E%T{xies}QKaJVx
z9i^s56pHvzX;_qw_6*K#*CLbG2^@}do|kxTiyp4Tvb!D1Fx%a#byK|a!>_66iz@I^
z7A>6kl<35}F9*3zc48t;shn}BZ(Dv0H%c{ESml!6<CcDG`1?0k0yYXJ(nH`AgEmTp
zy*<iND2Ivx+9wyo#M@PC$9JwbcnQ=@wSO!z-R=5$xcZvRyGH9^6WLfhM|7C0K+T{U
z67pZht8>bYnXn-$60K}~DJ!;>{R!{u7}0E9G{@XQmWyRbG(^E}j=1U?%GTzqn%!le
zP8YPZ(;kS;DF2gF%5{@pJTFtyAk<ScB=F5(GR<PCWi{7L_z}2rb;NWtwI`Fw@EZ&N
ztGBzCP(v?D6YcG<JG{;DojF^*Io|cMbgL&cO(tGnRQ5a5qy*{eZ}*Gj_g6D1zW%!V
zC-3I^iqQ@XdXPo<67-ID-xf$Bp7J%UKct|Ux{$kSZhG5lL+AEU3?U#JJK~V(gPhYO
z;fFz_(|*2}Q_)CVW}+8Ht$FLijF5m2_n1I_@vXQc)zHkrc)7mTY->PX1Zn7Yd-Emr
z%=){xsaUkjS$=UPvDG)#JvP;{R{o^OfqFPpbB=jgbm~zs8G}?Zlc<oq7Kx4T^`5UL
z^If@@@p`tktZgPS8@w(YQoY-Eu7?LCoL+>cHD+G#BKVVLp3%&xZZ;cAKL#mGELNQR
zb@acp0MhB()j!Zz#=m869`cE~=zXN&mp9y}#h0!bZ%1DlbFdV8cV5FIbs@I(@bt{n
z?PWkhmeDFVMn~DsnE;!`rj7}>q{_$Oqq)h&>&VVzt03*fiAmw)L7e>hP%<ga=K`Xq
zZb4ubr1GoXpD^L077bilw3s%d>IA@3rzVDX^Ucs+y;{}Md0#W<Q>8iZg9$Q(*nZZj
zgC%pragzdREPrR)XI`GE3+=1!Dt+ypGkJ&S<F~rXcIKKMLdQT$t|LN8X?r>2(&ujm
zmA;JKVuJG81MjFY0w(iYzS!;)2QoXS{iizEO2#4JR3ITb+MI|Tshg@9sFzMO{=Fa`
z2Xhk@+Ft|3nxtMo7}9ih*8fm+>w3d67l8ni<#OZqH#{t&mA$v1cl7Zanecm<^|*de
z(85#A&W4vZ!QU(l7-3K5urlNshgO0@gU5JFCBY|WOR^j^&l3X)qUFYgSJ}qQ1&>-c
z#}5SpKOP;WW@9i~P~q^dMP|%cKm0^Z%z1CgCTUpf>>MlDl=^O9f&`r%b&$ehq~6@j
zs5)5V1f$l+n=)}%pC{flyT02$%SLZP7lC0nYm-&%{b)?^5AMO#h*9C1%%kb!{x=$e
zxj0=JOwMV6VcwXlv4V1O{)Y95sRflJ!WDLS5e|2Z${@+D$NeU6$S+LiZA@k%>FJy3
zGo!|^YR-f%9GH_pAGUWy?@nd&Kn|_N!8MKtO;Xj5QH1@^zGk$&l~X22QiX^wEqFh9
z6ek1Imf5&Ge5dRB%05cIX=b!i6{Fp)jkr}!i=@CkAsm#K0VFz^Igm0*)}7<fG^*(R
z-9`x?w|LuWICQc;!g)&0&TvyJbY6D^PPtp6!~K|3iGS*4FRUy4X<-zoQo;{;NP;ii
zp$%s%CSJHTKVIWv7wb!P;GOcJQg~_WhU_E-y}a(!)(c<r-5Mzrl&n1I)d~7u!(=(%
z4EXxD&E2rlN|)LbPVxYQy-wulH9-T~lte^jgw1>7*8)JHtq{YHqMDtTP%~~WsA5PB
z68<bBC`Qp{Be{Za^yV7H@NkA*6iPZxDhxqvUFE^k@E&Q6_^J~LBSf*+QyX42xJkG0
zc5cW5PgWAJsAwjn9Vd3*1ni|qGAb{nJ;**?P#j>AL@yJ1kfI7L1~@0FJQE2)f^A~*
z_hQZU)eJx79EU8>w&hY?)5Ai?g4Wfa&;Gv>uh@hOnh*}pGi39V@sz4(vqJ>7b4X~(
zW~!_UpC9)m&hHz?KdYdQLJ|FvTEI>17RlGbP0bzCMyJ1wLAP>;(I@BWOByx}R-}z@
zhM8!l*H+1%LJjGJ>2n!LsGR2P=a6Bsf24Fyg|{Ez+>@Q2&J)j|kLM)PU247*dkfg^
z=BwE6vYxrTu5VW(A6i4VUwkWa3mrYnkg0O;vOEq@?!<Q9&7~o!RF$c026sY~ve44(
z3J3!`l5Lc-GiogU<kTRY9hvWDSLJ05YQGV_w2$^%d&y*ijiCz5xf;=3x2K5X%~}T$
z!gGg#1FznOIz@HSN7$!sNA-oQmZrkVAeyK)+Y1~m@%#4dkxiP4t-CEDna8JlYGrZB
z3??Z=c!qAcC4m8HhGGRR%c_!q4aC-s^XdC>{DPT|lgd=T*%l_frP_Cp)IP{d%Bimj
zpD4a28D)NZ+t*&z(K10WcB<LW%}y`G;)&bmtI=m;<8=R^*d!6Mm$V;~bfG0avDJsW
zpc+q{7f^U+;dNl=y*Sm8xEWk$l|09r*NUyGmLABjTK6b-e5y50VRig)MNPLM@8QVf
z;)1F$LDkk-fhmJOYirL$a5$A%yM&TD(dCHWk)2k&x1L;`R`>5}_TI6dzxwkQ69f7j
zp{R__ms>_A!;_Q6Iq$~r#VsV;^yv)*c<X#;3q3B6S!G9&ui36iB`PrKV6L!m%Rdv5
zyCms3E>dwPgG|lLU}`;dbJO{Ct(9-+y#}>ap1-<I4Uya%YZ!%k8h%wRRgSCOX+-L5
z|CmgX^WQQPOCH>%iuBbx=Cmk$56LlxqgmKe{VQksKwe|!l_1)0ErCM6ZghC;bWvkZ
zQViO=?%nM_qvJ0NFeGHPdD5T4XVd#riN@)|{|3Fi?~A?B!>w7IZRW@8<Aqu+Xm6x1
zxZVQ;Iitv>GP&o6Hu){foZW)w^~Xt$I-8*3?CE0qcysnjj3gV%($0LnKuPC^tp!C+
z=6;oWR|hE6g;Le1jAX}gcoJ<cd|$0+sJ^O3!<0<U<6_r(zM^9r1F<K=aK<)!nC<1Y
z`;?<1@-;td9*~OQO&tEjTdD7FW|!AAs7**dvg7Ay5Elw;JE;;nwG^h$H$h`6&rdj-
z%gaCf_74x>5<5|txKK`ksvQ^~Z_J8dBM<y#<B`|2oqd4S*-3(W@zx2Re!{y}Pa=w`
z^ptaKYhfm<$yoKuC7n!l4cb{N+TR)Dy^?{RnJJ6Wy0<GYySvmyZtzcjPn^Skgig0|
zOHelOyv9`L%}{nIp@OgJgdZRq3fVx0d2$sGlAh6_?HjgT)c4xxP`Ee*PPQxLVfba}
zLsQgtNRvt2m_(vWt-rfVslQwacdTSGXHSTb+=xA|pla5fEsvW1w~OaqI{7bUH&#^p
z(&dIZ7pWS|8&+Oro3ksG)y)-@Tzgb1|C~vJV5lc#ZQCZ32nWS#fX(LWuQ5U(Dt@1r
zY8^=0CuFl6F5t%=?!|Q}MdK(-iobFMoFwK+@;rFt>|g!yES?VqX=c6W051eLlM%9%
zUBM5RHe<v{fu7-Xplb(w$BO#cZrf8c(BAHv<LvEQ#5{3I7X5{90nkjgP<+ByPa*o2
z{;1REs^%%FcT58hUi&Jh_lOY<ylWMYCp7w{Mp_cJv44%+nYKum3gA$nq-@Jg$+jqG
zZika`dKfz<p*~LRH@tsC^sarxY@lsU+_;2bf){T>3|qZ0ROJc2l+|_gI2*59&>WUe
zZ6)bpVl7RJMtS%ihML$%)%o*>>NX94id60fO#7tbAs`xt(jslS`4v}BgVxRU9o|E8
zksAgbCCj_@i7?bvrbMiJwOqnHQznSetzOS-VgC|}>@$<zx%@)9w7??3SLWyJQHg1M
zR)qrtrEDN>m8Z#L^svM<=8|y1uamYXO884|kr1>2*S;*@hdl4DGTL5O-P?KeXI--5
z70!qYQzx9G>N*}jH?hzCcbE(f*b1`IYWTfQp8XS|`Tfn>c4O=y8&l&~DU~vOM_;*u
z(Owk3D!-IqHkTZuem=K{cfJwF0PCmu{QcF*Z?porMd`c>E+r2}3iMT{w6=eLq^8EO
zVfq}M&>$}hL>%@YgI=f&i{a*;y-Eu%SGj9YoUW=T?~%)079XCaaLvp@DgF7x`(2j<
z^MA!WpF$Up525`Qo|J1@{Bl9GhwX{whpWEV=QC4Rxd{F3J9{(=DMGI7zAOn_mE}^)
z+<}7d-ls2?<Fxp$%$2pg!ZmA;VrOO)^P9RyyHl}!_DkfZv<i>jehSE;g<1ocur(&h
zc|93<2ZyL=;5Lv_`M}*MEp6nP)5rGra<W5_K5Y^TN5_*;Auwh0NA~pWZVliQIqK;W
z;YP}e;Bfmbe*^x^wI%g;+Nct5ho}|Jm$^5_Cuq*2BkGsU&2MX#W#j0KE6L1OEE}(}
zBNYINFEUm#vvKkB`_JUZuUygQ^=;T!Z)+=WZkjL(?c}>Z7jL^ygZ`5D)Yg`$PHC(W
zRaetz*H&iA=-Y)(M1pSv5Hi=Q?nTU}jUi+P(2d)H>0K}doD8D}7C*I&g}q2{HDNY5
z1Ec2r;9sg1;!MBHb9t>V+HgpUvL7}6VdmIrskl^b>=9>E7p(uweBN{WMqCHQTji{P
z`mA%zTGpPHZyns91Fn<>TZPZcJ2*Rk&~^HdWj14-&CAr(5N&>-xsgWt+}<%BEp#gU
zxw=pDm$)mBCb7O}(0!u*t!w0B{XRN|^37K4UFC=D=S#^rZU=Vgs`T}c>4jzQ^E5Sc
zY)I<0%rF`6d(#TsjdSW#_k+HlqeW%3K;2Y(K*F<9l2`YB^|&>`*PdCwNy>c6p6FN?
z%;qcvMN&Nz!zpQ`vp6r*vvD%Rzx8%FanFy!a1zx9+acQW7BSxu5J)}daWJV3mG$;7
zVa~v?+#X;|+xEp}FcBcG>c+#9s;ckAmLiQ=)3%t3W3l}+qs)()*gtCjsNULG<(|gx
zRR!8BA7<r``etzwHO8Brc|3WmDskmyA=W+vSSz*1<o>m4z=?7)opy7Pn9P-hHR@|{
zLPI2eUUEk=lXY5Pey2DEN3Qd*Owo^2>*_QIdG$%+=@N#5laiW09lyz?_yrn7r#e-S
zOY#3@q#2qDzZ!on?=1lq4p_0*Nx>5ss+oJwQ!AUGn34HOK|dNLvqM>Wn)RcCIy`5G
zJ0tl+c*e)1bX(f$Be-Z$rnfeyS#O6<%`H3+?jF5<wZV)39{aJLk;7wEO-h0S&R4iF
z^}iUG-V{x3dMk!l;LDs{)^1l}Q>I#RAc2gldT2>*A5~kf%!k~txV$FCtcssUQ6u}^
z?2Bo~Cc9E)FivZk*Y~-!?fbk8L2pN*OnfneiRGqF1ki~Xb-`gMm|(&LqoEe*Azjx|
zxKw=SUo+6N@1<q*eJ<?&ZWuZ!*w!<&$$2-)_!CfsG+69Q;mJ+t6Q$_F3?cF@8ML^2
zL*I-iS2j^8@u0TtW+z}RCWP_L#VK)07ErlV>ppW0d}iw@W?K_tCb&^N!nJII8^vN<
zu=XcyjN4?OaM~hL>U9}GuWFT2=e`Fl;`V^-73@F{lVEcEE71eC*MoDf*9@4Xom63x
zz<^;p_gQ^GOxlU|TBle^lTfZ5L~P)Ke8dD*RXpGuFvbtR$sPE-E}^#ii&HIgt``Tg
z*Rk&Ci%OHm&SaK8^cJIyZ^Sk{fG&8=Etcb-38{V^F#~p`Hl`GF_|1P{F7z2DUPk*+
zNb`O;mF4&s19@R3F>RL={M!#8|Nr!*T(yL-L*>Xvzs%aX-4Ors&zph0h1|wnRk^eW
z26qCGW&!^J4g2_iDE>y#-*<`r+qDv$xN%SGKdqeqC*7K~1n66*ntA@`Yd11v!o=B1
zs@cDh<_39VZiZ6Sga2*05obUAuL;Nh`=-(V)zEWY7Q${|x^dl;z^89%ZpPx10jpD>
z>I1KGygq{n3(g>2Wsc$mn6TbFUdac6x48ii0|P_#>2^mvJef}^<#Xvf!6G-Wd)~Z&
z;kan`r2G~z#c+h_AsBh&FpWzwPL_GWFXVc~yFrs8tW|UpgWT(Iq?dpBy35G^##9e|
zesz6k3`-1`HFb{D6I5o&@TrUQ0~lZXW-(JA`Ylq>FOR_I$MN3EXq~$Nh!LnMDd#H7
zZ2xrLL#Cs?Di>K)O%B&2yk%;IsVG`n+WP_m7nNo3t+0bdlxtnMK-k!<S9JMv4&B3t
z4}UK#uz=D9CO2hq=6&{&i5M6vM|?e`GI#V?)ohY0Dq;}LFpMO8LP5uy*etnQ=A%h)
zdeq|%Du~U^hTHBxyRZfQLcOJ3X|)KhC(HODs(g?YfOh`FW_jAYpi8xKly}|=hi;l5
z)@&*WuESnj%OCClNe&Fq{4J#?bJ;{@kdZmP>gwvy%Ip*(aLj-?V^$6hIgs<y;#4Mo
zR-RCSS4y7zw7(4f)N!Xq^XI~{H+&nus#Qgup1Q2so!};!D=WCX$V#Dw0WM-p(bKIL
zRD!I8F!9hNgbTCG9rJ?n@}QTPu>k!u=;KKC^_B7d8gLJoG;3M2qX~M8E%=6PfOT#|
zOkSR++Mdz%*Zjthj=Fi1Bq#h}5lilb1pWmpI0iDbUWT!1W{Q4^o%2?*N=kmiD=44K
z%RkM|Y9S^h`>UhjSOG9dFPMyV$*zhdx?^zWOedE5$6GA5VM|WpgzK46x=m9ZYwpoJ
zCpGsg^Gix1;Y2aP=-fXI|9h+kGMRN7WA4L7u|DH#)HrCGW#f1GiIys*XmJFGZR4eA
zq%!6B@h1htUQoHMkLP<f%zR(6X%-MFyHK-*N4tXCz%)D1XUeXc+4Dq_<$SdA?2H)W
zIy}P7o<Una{<X;&3!6ipv2(YO=M*C*rH?PV(a9T27M~=yf_!!q+zN=;P2R%f!`4hy
zbl`IeVor;9h{{n;&NC+mgOJrPhDE>Gcg=jNHUX3`PwZBekP+eB+y@UHc*7h>*vF6c
zF#pf#xJ{K|$PCW~YC@umO9rvjCkGq)gE{hu1R*}Y6UJ9!m^3|HIw%@%!3fjpWL30U
zm7Oen3dp}<d=x(AV^kELd!nxL>O@623|oMgLThX5Tad%Rzf+x)PcUJyn@zM1<*LGP
z%L6{X1jB)hCr-PIkA*^DbYmz_O&rEd!(MoGc1j@AtT6D9PuPgo7Y<_cz=#MOBV*$^
zfiE!I3g3yC--V!~u(iEi3!WRq=l6fTNAqnknXE*_J$*w%BKhhyt!-^$H$)@`e#0ms
zTs9xjb+SsPg4PXr=!68<j?le<l)}P~85z{nlCjUJ?r6dX;o#v>+ek?c{08$A<VEns
z`UeK!{%NiZ<p#ktEvP%L6s(lPoEWH&g_#JbU{(gy707|O8EJmGqi_V&?=ZWS0%r_V
zaeckLSnfSs2~x<D!xDjJ&2p~!2^jD2lHSHbuR%omF#3TgI;1kgk(myVW4Q2>S!`|W
zz-+G}4CAn{go}k!7dY)1tyk}KJAB5waZL%vcVPM+6ht4x!hXbaSrc$tfVEZQR1e6U
zGHPo{B?mypr_&wJrK79s8j&e`W9#NHr6Be@m=S*)OAY7cGpqxM=WLFvVc2B{;v<V;
zKh=8ei5a}6Apn;icKC0p9fU_17><IGPQ9K)7!#d^DbATlMfD$lP1X?q>5LJAUE8R;
zaH|$VK?Yg+)5Vd92!g`ji+!n&R7)}5!9@8);SPCYCSvo0L^cq|==|_NiRZNRfH62w
ziX)2Gxo25<E5zJ3eh`G`4o;LyjBxX7_6cEN4<14@mO75zR0}3SVJImSWD13b1Jvq{
z^SBTY+q$~ezL_^LA$~zwFcJ^%43ov|=D#|P^J{#17PMiAu<Y38#+E-erti&bSGE{Q
zRa8`vpEfWun*D)F*0``!pxJOe(f!;JnHUB8o6935#`uUf0;~&=!B`lpDzchy_o~l@
zX(G+Gj}MR`pp*5g(AZc)L?%f{M05m_uj4S{4VnbF0B|{e{(KE;N&-G7R`IAuFcQx`
zb1(-pJq|EQdynbuB}5hu*$6R5v0ms#Mse@&pE$ttA=9lq>*b!HNJPXvs^&G`FkATT
z+h!_vC+PzM46E(mVsLg4NqLm+*8aHp4h(Hi?;Mq{m5zVnv431;w}vbes03KR+2|7T
z9&qDgK#dOC0Ys<-^GGmW2<8lzr{QKG`VbgcDti0l3Os~zh1CNXc-(rp3PVjWQVXKW
z)|!J~;tC3Qu*Lj6d<Vo+$3tZ=q@^=+asu$x9o{Dk`C5S<1foqt)kbYc2V-5Qb|@dU
zoQD_IaBj=#z6B?-L?Um@_O_KmzIvDEZGOLw`Q=UCq@ET;@ed~if-Iy=3z(3SO5&F^
zHl}y0BfFG2fS3S?ZTzaajOgfL1vOz4;r_wN-aI)&E_!==`yq!Sy~0;Nck%QbI?zJE
zJ@A3R#{$RtNa4BP%3EbTx4NXN^~yla2A>(L3J3@@yGsMa0&el}tu7SA<>g@%nG`&z
z(7)^R@7zlS@igKA0QoK(!pwYoB%<_2K2%utlYl!vn8H-=_KPEvr0d@<AYr+>@_~i|
z=CyF-<;A3>Lx&}?1REDCrG$j8Cd=Fai46>lLD=vTOm-M4uwIY?6_--AgJt!HEl|3O
zT3fS#1xUuXZ&<>zBekwPusxt6$B*t12IB!xi&ew<+B$=QeMrO*t3e4A78e%?H?TE~
z5&+M9mTX@M#Iz7Hf$r7OB3MRvHdGJ~g;9zwPFC5UT6gBDRrRt4qmnw@KOcPv@pcL(
zOt(xEV3|M@fb1HJ)2_iKv$``oaKLGSM{n)vi8i(gq<Zkca#+p2si6%b);1h3CKxn>
zKnwZAftM7?9yvKzwA`Jot*pu~&QB0U0()FAXg`pY2ruciC6OFJY;<5#9w~jh&+pVY
zZ&jev_VMtXo{ny$#+gIoupWO_a|E>RhoD4jgE3v@atm_(p2ViYM|$1yVi3OJ88~43
z;NS=*%eagS-muJdl7KobCg$j3q-x_ZD`$6WE{TVwjVfkW{lyDf@~7{f8oas|A&i3Z
zs66WneP9-=Y<2*OFt#$vd*QGQV^kDxT!koVl52vvOE*7!@Y-dL;XgP)othxizHvqC
za^k^ClQ@g@dX4^ig!8&}w<9K>^S%yD2qVc1kk%0Gz&A}HWPZ?Yl>iXX$eJCTK!7Hs
z9o_O8#5vwxUIuceIgHaHsn}#>WVu@~N(sW72h`MHhHGy;zP#rIFV4!!>LtV!^b^md
zMFTssG#D9%SSTYa`@Ui3b9FUwbcgrA($9AIVG!>W*EKXW_y+{cLYfEb3^a7~0+n2l
zVMEMMj@<dnWrjPc&j67bf_9_8Y?AxVojZOZAsL{0?*EKG%M0tN3&D^!AjKB%8Y=2Q
zjk7%=hgncgPCUPB?B~z-L$MP?Qo|Y>pMxutC=5(O27<KBZL|1UaugEP^z_?M&|{W!
zUb%V|2@HmYhK)^4vUP5*v8;v^30R7Y5I@Q%%|I~*NcQmL<SrQ*nAbUj!A-)@OhkCN
zkc32#XcaXt@5Eg7!tdXg7DQ0NqywGPJ~cOoE<HURu;0<GvjhjYL|;d6aB#fJ$~gS}
z{l|X3a(8!^pbn2(5tYS>Wiu8L6T2yJen<%_bQN{J1SwyDhnWMi;E)F+w!9hszTV!+
z!z(2{LJ+1d!JEO5rNR8JQw`pP#ETdAX=(jn`1)gFqSTu=@uhwqE=k^4b<MYMar%~Q
zSWU+w$lOoE7*tCQYF;gLba(6Zr3ljo2s$`$*4Ea-Vyj2aDZYLU7##8t*orvu;$vgK
zZ_)|_KS4!W7{df7pDQ)$(gp^!Zf<VK&-Vwg!Jj~2pPECbS9I?kfB?teS7hZQv$AMI
zFNw1yNVOoL&Blh+d4Cmg0$H@-Hmh8s=C)g<<r4Nf6u`#Do`Cppczm2Pys~w0&@w)*
zTE&&K{&aI^=S!Hu!0<4B)nv$|8AM>TvT@0`Z>NRLeZYMWvC2Dw3Zw;a!$U?!8alcF
zo{j3FA;aR?Sxhp1*mgL|a?YU`*RO(j6mqJe>6e@wI#X6t)2|BjkD~)&Sk>v8K+aBU
zYk;<U{PM;iBMK3c03f5^#K559<Wv$LQX#pNEj2-ig=Nv_Do>-CTkDpn5&G`kr8Snn
z94_qER3PCz1vP44U*GQPs2tJRLoY1FSs%23?-l6wU}$)By3?avpyiFX=3_1Pqts;7
zqtD>?`N;+i1;v$jU^r9&I90=S70%wS6Ca$Gfj?S_(sy#vEOkxTi2wpn+`s?MdA&k(
zCHM^h1RneK>c!GQp+g}dkb4MMwdJg3wDt5zqsPDgqP_<+yX?hgld+&?ay#7;g#;Ab
zrjr8yQ*mz(%`z8m5Ct9GOL6{lYZ!O)@VH{S=vo3m2Np<OUHuvg3LGjhDie_(R533F
z*)0<R24XG)j$?8%GT#9t9d36pIxc5tQlb9PZEtHMXJicZ^Sc3W%bUm&BeD9cMpZoa
z9uCfPS=m0}DYEc3<a{GWOPZRRq&@Qa_o>gTJM~zQhk`2%dle1~`Q|Y`c<l9a<G8xI
zJ|PSSMY|en>-@$>Xi^f{ZN6QZ;3-tN08*K$u>0X{jT#rniXguOjXDC0A1N1lwU9bX
zWc1u1&l|Z_@k?1k0)vFd4nbn@PKKe1x6AU?-HM!+CO~=vzuFYd+}vDCON-O$x8IPE
z9&-%DGx)hSELn25_c=Lmw?o}?a*PHhTwGj=H_UW(9~>PWjmfMU!D)d)&U8FJp13=a
zPyFS}0QUCA;o<0kOzF9`wOqEJbjfcqrvIG<pr<bwU&A+<i0jg;Jzl0q_5wDypr8Oi
z%G~^XdRGme;G5XPLkCm3H+u)gfXSf*NJ&kF!%xG+^kH+;f|;3_DXt5wrUsU%7#VMu
zjpwczL#RO@YSE~~+qd@tx>G`igHZH^9c@=+#;$6#)RYLWFbJ)aE?>RwaBAF_f&%jU
zpWJbG?%w6H{u6{pU|BT@V%qk(vut&S#ouk=hlhvLu+sVYjNlljl&cVPXNyL^KnXti
zlLR%g1cuU0O-(8wG4cxxoNM&ItMV2So8|GY;hV?NcCI0zp)E5O;EJ)Zr3~eKua)&0
zU^(;Jqw8^9BJdq=5wd=UKn)A*C{Y2Gc!#Z!T^Pg~(7kcF95SKaCjCjuK^P1%w!m^u
z1Wv2u>(@A<A;dHANe~UxEk;h~m&Z!zHQbIK03sr1U<ii$3piKe`SWYH`42y{Uh>NF
z9yHQDSf3>2dlry_MMU)Ffy@M83lLsXaC66kO@b8wEvVdiw=X{osE0FbFqnf&9q!*1
z#{oMb3}~fqW$*d(=e=Na2PKPNmmVb-R}5Sr_{$3;BRVix(hsh@7c64KO+v4jm-h8*
zP;ajcOwS`b^YG!4J(qys8^%};^KO74hu|K%IFw5S?+=IYZHda#cv(I>NiHk`LLive
zokc-ihlYj*XggXIi<O!ABVg_jSTP?!&%~IhFv0(TnYo{`?8Bk%{QNvIk6n;RFd;S;
zmdxByaWN}WJOTcEAuf*WJ(=6#dvA37{$wFkI(mA@+<`6Zw#z@0p-M$6Ik?zxI$AqA
zC@CpD!N=*vm1BX5@86$NP*RT8IF}7QEO5VY14jo)KtE<I-m($`qC<x6UC#D~!LvbD
zMFmmu^IF+}c}Xv*T|pky$WS&RXkzjRQjW=Jq4)Y^)j*yakCwJJGT#q`PX-jYBPQ&~
z4mmiKN8ML|Tj}Li4@#!<#h0g1fCs>!hn$UVa83{IaA0fe3xE`U{{DT;YNEoz$pcGJ
zl&3}ElvI*Of(HPcAUJ(+EFmLiJaDiE-2CTH|L12{O$qqFL(O#a)~$2^x+;kuA!Q>H
zI@ke(ReJbPtRs=pYcnl}4qzncm|lU#&&{p2MIgNG`DCT7e@MuX6NR<4wSQ>nFrg%J
zlOV<dKLU3YQa+U0pHf9b?+_Dru9ZzmK|lcq23j<zA|Akx0eZ3c-HHug->@&myVNLR
z(u@YO;_u%&^$iVhl&GkwXRRs#GkuCG2GE%YBA0erCd&pn`A7)35NV;b#!o1nU0ahB
z6ubgq1w^CPU_>K9eYb4VjtKUzFE2kiIoZqGJ1jC%SWl1ItSk=Tigtk#Y<mN&8e|H9
zJqWf3TnuS9{KJRu@I~Ez5IM_M!Dk><1=K{vOHB*tH*O$x@5hgKU<q#AxB*M!4-pJb
z?@N$!C2-r$0-ymKs1F}LypzhLBqzTtARvI?YtZ8tC_O@i*QKVaM{B3S@HuyhiN7-7
zYXGA(zLo(6x=L@KQHj<5s`AJ1@S8VpUhWl9^zro#kBIP6&!^$$Cj2t^65t6)K;Q$g
z$jCzBRiN^Kkb?yo0xtUK=qS{~SK!Awq8QrR5g#Z#xQMXSpi=>eWH>Av*dz!RCMARB
zf`Wn&fhd7`fSrNQ6M{nsk6fi7O72yDCxA}*>*Fk^kw4~KNhOdbKz@twN}l&|nJPGX
zd(yUQQt1)i>FKG_n!ioe<fksZ)3Y<iin9KBE6t+O&8@BMFxpo)EFIzcVftRx(3n!G
z^Bnxra4)!7L*n<17pRRJ5c6a~9%Es_gcpdSp`iiBIbg^`3U*SThVI$AImUI_^&P03
za%JZP3>pnuou9t3_0WNpgai(76VPyx$td&n+oTdUHpQZj0C@+Ea@h{B;^Qh)X#)^+
zrr30g%k|HzQ&NG#1;!<Mufx5^neWpEmL88y=RCHqsA+SmQLh~reDeU(bX~bqxO#qF
zS~p6C<FPC3VE`a951=-%aB+n-HOaw+k%pOh+k@V_)qJ5uTs9)`F`mU@FF7C&!RW_o
zenCOMfx~ryVhF6?e5a?U3Fr5m&KT8`bS<xtHx5$$qd{qu*DX*w1e^jpQ$KG7`Q=HB
z#DrA`!$;$#>mU~DMkqAbV^*omyYlik(a>gxRL#@j61v;$0bBl$!}RPj9DBG}FJHba
zeq+|(;I3^|H3>eWvI+_r3|$PVWnNhBc>n87eM_wH(mw|1&<^nVU$^Ut5C7|SP4s`c
zT?_rM+qKyXpZfZGflAE3TTe)Lp^gVQJ9itB|MK{5_5nFL%VcW*G1?dOn~MAWU$IN$
zt^ak&E+_wAmuwEI1~RqF$iXu!Bl?TGtzWad=o`d#w}MD9u(Y|oEto${Dc1a#S?aYH
zDe~lvY|U`mN>qU3gq(ir<=>G^i{?~An%d_V9UXm5^sg^wW`Qil8x}Z-aL%GT_Cyth
z-^{_U+8ZAyf>U=h=&we}#CM(JAgtL~@Hv1y&CLA#4K6rm6pdb@V*0BOVR<$D`4>Sy
z0X{fq0NdaBl`pT_RpAl;-ALgeMI64*f95#v>b3_RGQ4)LrBcqv5`3fj+y0~sFcK-G
z;j=2TVY9M18*cZqHLomcupDnpiUpCMSs6Sf*6@>~pqs$QHfa?gR#fUPTTL2l@S81s
zZXv!0U;y_;smgc?yy2Q5?i=y0+f{KnY~Ba@MH7_MkkP&lxdNg@xEi0^WKw2kX1Vj=
zB?O6w_iT4y!fxCYv6@3D6wurU4#~>P1LJk?iPkl^?>u}?yVHY;8jz8G<7*`4<Un#j
zglr%(Jp>0XH%lT**YJ1>c>0oMc|ET~26^{xsxr_=ogOXOa8poFz-_OXb%io4icupZ
zIvSsxoLsTMZkVQMv=dBa+TbI^Q$>OeCM((AzkiSa=t~YA*o(R=7wX)EEQ!D7Fj8Sn
z0}cY@5JxkU++rcx@}D1S12NhJT#z_KuiWuqf+rq8uOj>?VBI3Uu32DKU5=MBA*88U
zR6)IoIMN}v2XuLGpKVr0wzj4H%JW`;#%n9nF1tZn@vG7g#C8Pqx!~)SUGfHSC;)%t
z-a^qi@Ku=w5M6#%+zjI02i6in04(s#%{S=Be7p3t!8uGvM+b4afs#7Uih*$zI5T}<
zlP18UuWtMVEEOJrFsyv$RH4o}x>BQTJXp$p>-`G;SahF(&f(_FC4AoQbYcMj_Yk^R
z^g2Hg>N1v`*B#i-4gXwuRhpX{G`{wysE2<};Ns}^U22KXqM@V&7(OajZ~NXR`vZ*E
z{U=YhQb<&RK5~I=c`hmn>cHoK5&(XBd3hm+28^b}0kkoeuYs=yQV@ZM8bqx-5K1sH
z^?-jwNQgM75<T)a01P5xM__BLfR2Ob`Wcvb*HZff6r{7#Yp*;hKu!vp)xbZb5C4|S
zBUvT9Ep7heCnn7+;K^K(XXa<hP6T*LQC9%IRNaaJDE0%UT)6`~CGiC(XhEq6`v2dM
zL^FzuBj98GftSW6B@IcTMTkwn&IlhA%WjGmU*%SNe!Nm_Iv#~e=JIXG6(0|88)W~1
zz-`E6N|C^c?gosRrCRnF_J#>=I2hR?Y$Tg8UP~xh<}=Uhh)^38*PvG&FEd{Nu2H)`
zO|1HO`3vv?n@#u{4ioQGAK^hiAn3>2Y54n3(w>fvIppU6sCfDM4nPBo)M5HPA>~Vu
zi$lTqTv#|PHa3S36rk|qE<YfTG7$zN4u?Q<T0?#o2_g1x)42lOwxn#iOfZYX6BH7v
z0C(F80H07}SJ7?s9YGle{?c=>dvBr60QB($9vS>deSTQ1E0_W64W)j6jyyg8#i?~+
zVc}wbIy!)BFyKYlU_h78fe?VJlLGAs6{hwjn?jqVSNx}&LaTN>KnUbo-U2U!X(-<C
zA%P=&4ZbNOGzkzk9he7r(L5Zc(3Twlk$O-x2a)jL#dZ0Nnq+_=73zb_pNCfrdp}<m
zN!?13GXO#kjCoO^s-z9@NTIb^{(1A=*RNmEuM2}03p6_*BH;th_y%;4xC3fq@KY;@
zd1eGqLLiU{v8e=pWE<j0U$vt(u>6w3!cAmqe2^$+Im*BiA0W3dq)Gw^I+@Z*e;^4i
zK(TZQSQaoPn!#2o8#Ms}(ifa62P>ymS54qDH@8R9FM$X0($W&rZ$<2Zprm6stOkMr
z{#gX@3MlxY=J$YdH3+(<by+ztEiIp@mYU3fL25EIPaptQG#lKB?r8eqiF&k@nN-{Y
zr<8!-g%j?+&d4`Sn~h%yQ1!e6%sbe654<Wmfkrf(s^tTR<nI+v+mHwbIo%Kn9E2=K
zIArMd5%W68i2rtkD(Lzx!bYeb2!Opr;wX?Znm@B->%^YA1HX?!%!viHF*v;m0ycwH
z*9BfkB?kVmb+nMg0*<jjlYQqqm_UT!2%jIye@qK?4s<3`a_FS_kEoz~J5-tg<Tc{;
z98ARVC)t-&3obd-BF(8RI*=bA0`?W^imSVy*^;`STEfYxAxvNde2X}?fF>C}{FOG9
ze@+f?HAry+EKOKgSZ9(z60~s~B6uKR0__Tq@zY5i?~&4X=+KpX$NGLS<sPb@p9x^Q
z#7v)wU~_LTchAvM`(qd+f|a3}2H&>sZfd9<!T%7Gg!?(j#0|md>DRAcUOqnkfNzly
z4h2+6MFD&j;M1*Pt%5`-fy>3OVN#@rbBp|9fQ5y-goH1lUWBq^aK8eSs{ko)+`Op?
z*9FoLA-l;7=$-Vg>|H|Gedt*bvKci(MFK#boRu{K$l}l?dbna&Kf?))=B-D5+W<n~
zL-LqeS?PeQ_TuGB3N9{Xdh6AZC(xCGU$<w<x3Bu@RXvnp@OvlH%_b|0q3jaTrh(8L
z6odik1#ow<LEkL?g7dfuJ5-0yz`7FXv|{tAUvmI7o1k)fAt~7e*U@~6{}CQKP(kSc
z-AQ#j+S^BfFM#?8BJu~I3LP8{A0!X~sKJJE9Z}&QA8hon^zZ_3LKr33s_3Rbd={(U
zFQzBDR*pED1TIblA+oi=VU1xoC4{0=SQe+!W~n}0nm;=d;b*pgw*f=%3oZiFD=Xr_
za1(Ib&>~$GFpc<PR}BI51H3qOc!iO(>CfpgEMkUK!b@3MY`_Z1P%6L;ffX%&+68tK
zpCbjFc4-C9cJIQ89L%#tnm!Qw5F2hd(nvK0Jp_kYe;VG96C@r($%8~HKqFvK2ecT{
z=Y^av1rB5RW36()PXNX04vh_m)2$Xjwulj7-PxKsWSU>vKc${Ny#$3`8r-z8b|VD3
zfDup-!ILX+L&k~?5yd^6Jyf{t0A`W<0VcB2h^Z$W8;Glnhyyd!$YZt8FaVLe7KrG<
z)C0~>JM1`uR1ky4%a<=-LU?J|4@)4)1}bfhb8}xw%HkwKTLuzIUI}^5xWFKwpQGIY
zX$UUSq9?x>+-lXJ{RluU1F|lpR*lh{_#BTAP?yJ(lVdgg{W63TE?~V8>;FqgB7)}U
z=3*Q8!!+nH8wzRVD$rAk1R+NnD3)0p?k90wK|~xOu)$?R+N98pg#AMJc|b>cMKN$^
zez_i~E&t3;y+y+Szr?_-OuIw{*ey<COvF+hhCO_t+yjOIo;&oz2P_~IWaV*zqk^pi
zJKv9X$w_cJ@B+QTYS-Ad?i13l(rUa>X}8v%TlVWE5T{6w4T4G5&?0Qr;1|Ur@Pq(!
z98oB@EX+7}t$X-HpFMjYRd5EsKV=r&vim$pV`5^E?+mMe>^z_&jwu%w#_CPM+&y4;
zwPqXrzp9pD0{@tk!)nlbDXuFc61*#rZZ;gNt+RtE?Xq#GZ?kgRp<&t#q(%yfJM0nA
zf3Sf-x&x5g{1a#1pCy~B!7Birm>Q^Kz~cLrf`SMvYjNLQr<z1a;?S7b`m$dKp$ZO~
z!FXw|T|;bCRK_IJRRn_osDzeZx+ELW0=yTeI}k#Q$Cvh;&LR2_#}>^l0EuvfFsg7O
zN~AD^Wf5vBSEWP?Trz;gBNLV_&Sn9ko{FDeeH^)Gmk&EM&QsLJJv=>ux}XsdAmbbs
z8L4(;fzAyTH@8Y$X<v!4BH)zvj}OEb2Qqtb!M>cB^E*WBl4{bfShiHih%g{=BXa=p
zPXw|a{s5T?45>)RTN)dof=oyGusoD24mlZ8#CHSMD_A5Xk~%t6(5t%ys8R+<Aux|F
z9yVc)$<nB+-H(-*e*oVDP!9BL5Vz(MLxro?F{V>P`Lz~%lYtE4Kiidqev0GtdsHJn
zRHvF+k*BG#gGTdR98--(CEKe-J?h&wRB>I+|A(eC56iJ@ySQ2AA|Zq*L?J_l4528B
zXqHNnR7%Md$t)$QL{uV$q!OhPk`O|QWJq&ThJ;k8zTft|-yiRBJn!>R_kCS^?{l4N
zt#fVm1Zfnul%#@uH@mt&{{Y^N<?sKzfP8x3HzdACAZSd@;nn3;Af}&R--n3e1aO>4
zOwIaZ4-sMnJQsizs{k!ODEuCW%u<J?_t5UwJeCGEZ)>VN0n56Ub3piphzaoq$jeSG
zxN`CGWgD2PNzO%~L{6Z|J>u`qftt3XSZr`Q?MUFjNz&1wSpVWJ62hoppT!9_s;h__
zxuY<-zt96Y8B)=hw|z+}NPO^czk9RF%Yi2P`WZm0iwd(=(o2Xlkj6a%9bBaBth(EQ
zXPynDsQd9_H5KM2DeJ;Igp&JdPrVub0bvE;!wIB=Qv9bjeTkNqmap97ap`{pw*B~!
z3n><xd(GxiZ}ycpiYZVa!)p9^?mZ9`;G;*YNRis{>&;pb?32Fr2tdcZioOgImesD_
z(pWC1c7)Q3GB&7ZR^Qt6GiP?8+?hFVEiD|?=3u7&aFf$VkItDp_io=IX{dHA8$Q3f
zT*I$l9NE(;*ZQWW+8mm2I-lPq`|$xSV-7<2q@?s8G9=tbv2RXJPL@+L<dDJYpE|I&
zu)L6tb{byUG<bxQACZxc-l+^kUR#*rLK-bfP#4H6J_qQ@!p$?kZOD(}s+#ne_ylw*
zz@1&#(0<F_4+sbjUg#$`GqFJp))o>D`3Ak+ni@ZL<&9%BJSTAEWVejvYt~`<5I3h3
zxqnht&UzRn{1C5iY#I~3^LO={^&{s`{&$Fup@*?8y}SQjR+cDse%(Bv=|He+$eW=l
z=>uIwT~5V&kf^mcyE0F<2S9?8^!t;EId&Ukb3&(`t3Q3GwRRKUp?2US$YKM-{PXt*
z&2)cxZYT9OKfv?kVntD1k*(gOZHbqWrizzdf9Le#{LVtR7rL-+*SHY|W;F41%%VDy
zb0)ZbT>AF<`fU7nWfK~HEkk3?qYH>V`<lCpZZ~}xD7b2tXA_l0a5Cgu?%RADE?L*r
zRdvSZ&u75bcv_4?{JvCGEdYqUNnF>buCA_d$B(CG8`ctVhHK@r*0`MEe(G~s@rhsh
z^yvd=dL_F#zsu$xo!Y}<anOq{&h(in^nqW*sC)PBl~h$_v1lE}ZmRk6#Y3~e%bvha
z3fzZ?Lov<G&HB<&T3>x@ifhJvDeWa8F(<yD;9;*1uBmMDS4KL#_OzDpaI2LUUO;c}
z%C5X&XK@rU>E^9lXnE;Yo%du|rPwX~Xw4U2B#@BYm~rFQQhX7H#gPKK;&jKAQWMd%
zQU#Oy)Sd_DrOmQjSpPkX?O(sp))^@H<430LwN(&V6@g3G;1!hWf@cokZkoZr<wIIa
zL|`{HCAFl9nkJk!*mG1lD)>bkwd=P`4-=+@9hB$A;j_Zv=m#js$9aj1)(U!%%8l&@
z2^o|i)u&H+T_LA#V?%oD(?#QM&1X@<MO$HR5l27arF|g;kqPwJ-{NR!Y%KQ^{TGMi
z-s7LFxmQGR1b0#o+|BGY`^m1h?Y+Fbtgsmh-GCMY>_!a*Z*6~BSJm&+zI`1)pHsL0
za*U17&dNFn0nXJ9ozd)6-k$sM;|DG?JK&+X0WEH7LU6<=Ip6;Ok>B*lcS<)1_X+5l
zLQ_t1fBs`E5?Y@$sT`+{AC09+eR68D(7OP&9}{dgtoJ?n<5S$IuCNtQCkBT1VWG)q
z5)LhK4H0jrx*&dt?x{&l?~hB#z`o1~)4Q-T5dFUTb;9rsU(I*}Xo)myetv#aHeEaQ
z-YMRt{O^xBTI?+>As<*p5F72Sri9FNid?;VH9|FKKmc8>?{yP=5*YIuOte2#sa%h|
zjG&33%(3|PV9L7hOJVzB=@)`uI29npOc3tZzfBxAcI=bYLtI>32%2^QP|HrT+Z8d2
z#p5?R47r-^eGUJB+_nlS<ujJhnVjRP<ws_yYprg{yPA@oxY&ufD$auQEGDp<L))mD
zb&=^tIyzmahaLH!o8;V!YJ31x8b4QJ;>G!jXJy@sK%P8>RzX?0$GO~xluLCZAN-`k
z`NT$?V0EXBS)$$9Td#gtZmD-o5BF>l_OO@VbN?3R<OFeeu@*3q>^foLehA3F^4sK=
zx4S}8CJ27W<voHW&3S2M<$bVq^or!TDT9*9HAWwM&XFLFe~5gPaM5Op%s{$MK^V1b
z*DjdVdO<JD8XT~L3lg4$P74GL2_qJCLR-==&kcTIqguLQYVcGSdA{`;mgXe;ml84g
zkMU$}GToFetf^`5PvlFuP7gyZhCL5f-=@kPAL$XpZY8m!V*+_Qi%zIamOV*xo@k%%
zjWO5m*1=ADnHO<p;k<kI=h7qt#0c?LsR66_u3~@i)9OG12=6B>Z+X&%$c-2=;^^_?
z58gSa>*5@s7Zb7!QQ;fjtxp!`A!_M_{@r(Qe;*g796;ZLr^>(^n&fcwMRkSGxZ6XA
z4xN*xNYrB(&t^PkKY@!8@kj-ep-jE43&CeW0JXSt0vb>>Il!p#8$T>|O8au%EMA{_
zDAMh46YX+`df8fJqdEcV>OjxIkB^OBF315K9fC{%BP&0u!6!M@rL2SKDeOO=;~}tW
z1n5Azps_2%CuW20`8Mxf8&qvc(IW$2KX6%q;8CeG$VUUFI0jFdxrSFEl$X?vYaw{(
zF2S-#E}VAnx;JANxC!EI_^er{(@C`Mx8r?FON#)jY~ox5OqA_^2M~vKlFilh53;8M
z0_F<bLV_||0WIo#dTX;EQr0#%CE@iF{G7l+c$j+2$vqqBd{cw|3x{M@c6Q8zQT+(9
zB;rfhx$#PzXEokQ-FH)TVI)x&3$()f6DOoPkVw34E>T!N1Z<4ghR;qDJ850s{1v9Q
zSj%oUmiY+VEG_uf3KP5wi`-^|Pat_!Zpiye{-eItP~h-UjzDL_Ij9Qhpyem$o1Q+~
zD5ftho1NXotZyYX=JFs{LqmaHP?zX+Pm8=kPOUn?^bcsA368JFqwyrkU9m^L2exiN
z?GP<miFvz%ZVFz1wk;iws2-DlNx93`v#z{o)(@b1+_dWcq1|SQqaK<T!R84IKWef;
zz57h>h^;?&we2_P*X2u>7Ce98I3+MFOc&h>$HH5$(C}W(s7#YTObj2#)_d~gRzSS@
z|9b%z59)dF)wN%XGR}6xvL+JEsB)r-q!0{HwUI#oTU%FlUwnVB*45+tZ>2a0=2y5|
zlGZ7Jv+~+?1|dMu93?+3k7YrPT=(v}GK=y>oCEA<-!Vp#GBR422lb`*gL=PVIT2S~
zipwV9R;h7A@v@}#{8;a<EM;5oNk#Yg{j)Us!s$FM#oxbwyPMCTZ3DA9LpSH{k=Ht>
zA47>}5l+NBO)r*3WlM~{y!`xP(U)_G-fnH#URGYd4y&{8#&YNj{1)N@7tu}s&t(Lb
z^t&PGd;~Y~BY@dR=8^n;xP8-*0GlZx|15CNLivp%-<Lc-^~RFD^t5Q5CfvWsnF{6A
zyr<wXP9m}Gp!o%bKp7Hy9<yISP|$t$JeIM$Xe8%yKPL2Illb{9@vT;xHEY&e30-a!
znC3b{!1H+rx@+K}!p!AFE+B2unf2whwK;-krza5Y$@6MAOk-l`fI7W1Bgd?M`=|2q
z@(D^d)Jey;iHGnlL!LK%O{+zDd2)JY2)}##=iw73_yc+*>F$MoK(D%BDT?6)P7=C^
z>V%aG7fP^FGOfl7diQ8Z$o7mgUV0bON~ZPxPmPHih;yNTe?cE@B`;BM1AKMi<3J#1
zOAGU}xQ3J+O!<Xt-NzBHsMtwUUr-5Rtq6ES@NirBD;_&2VM}gNe|j>`Brfs8Qzl%V
z^hb&6{qrGjalc5gcrvXMt{_a}8(YvmHX>pVY=0nG=y-N;X4t^o(POO$nI3rJ#KDMB
z^R={InT=zrp;xbwQ>GkWAh&HFU;26M3N_*7!YktC=T`-(fV9Ii%Y<ltow#nfZ!^O2
zHE!&QEltC}Ed0T+k8L1MsP{kU-Gs-G+Qjp`Y?81CbA&h#OtKKXi7_0cT<eutTJj@j
zHob%8E3f`!PI6_|zWdgt;jMp1f;Rj6YH@Cko4&*hf_FaW+8TBi56KmA-`BT3W%SEx
zw|_Vf(=$FAzu@3t+2K=ncz85%J&}65VvZ`gneH2?B7x*1!Z<*A)PE`f{+`nfik4er
zmHZBORlLhz{*<^V)UVud$<yfDCmR~L`01+A#QxnyfVd#XaEurjD#**vo#6ztB&dA^
z(b!G)YiLEt8ehUKjCoEU4|X5G^G&`!-G`^lF?+$YwFOgy{WP^_OK#S%9N8%|U5~5(
z`Fst!Y3`?B(Hc+#oA0Zua1xa9kD}d1r0%A7wz+C{t7&-x%2Npcdsm)-n+j6mL!F7W
zwR|_3u}ppRH#BrO+;|yHZ{|Oi^FKr8TiqmTr~0qgtHuA`t_IN{_@nnFHMp{)lhPZ1
z&>5)7h3R5%N{{@4bnKdu)mQT@3Oz}#Ujlv&k8}QaU~iGu%r!dEL_dsXe-<~JC?-|m
zo~Oladaqxb(8P#~rYzHUnjLRo0bXS(2-=93hP4wyT|D{%_nSDL1a*jXf>}0sirW+w
zm7Z`&hK50}KH^BTrG4$tp~F&IMHFt7l`C0S6TBn7v4C)?>p<F2(eFKY@UJUs`<*gS
z4vd-X@JgYw>$VF21rMJ*u@PMksET${73mR*|Gw~MgIBIz?S0{e>FRyrs1%A;w|*+~
z4God3KNj6eJHA!{8xi#Lcqmcfl}AK`i`9%TaEPfeUr2R+LkkJ@MA|C`i<HmvJwca(
zmIS2M@mvIH%z|)AUa_J{jK_`Ko3SA`@;#>$P7w>YKR?#2UHbzjypF~p3|Nm26Tahn
z7o(UUt})Cvi4~A3An<_kiF9dR6V0rwUuO=fZQpIy@B1j`EQEVluoPUf$RFS?(W}r=
z!14_l(KD;6RMM8td}ch;wQR=;_ggVvZ#F3#E>UYzfP0k79&4!*rnlu$ZDmuOO-N07
zm%2qlVQ*ZX_R_}`=Mya9bJ-s35VqVg5JmasG*Ij$hgXL=_O5OEWW*+eITeHn)}+`I
zO6uyNQ1RhNVR)7gQ9tkvLC%`_#TI<p1~|qX)C0^nZ0gitjwlX!(W|PQSme+MtsOx9
z773tuCVXWlmvO)H_mtOv{`{F}|B|hvBv^EQzPPw_@Zi{>ZH!Oo8z#MKDi}Q7O%%87
zD?9Do&E+1#s6=DKwZ0gWxIX4?OY<M-H(`6l`lJ^+^=!wHfMgxM9}<Nv=d!RPus!_x
zu9ns;6<PhPWHFKegN$Uk?#)#N_F&Sl5gmEzph!OXg3X(!Ah`%Rh7*TzqKMcwlUyqv
z%FYYhUSFfh+nyfQ6E+VO8N?^tSHKJK2;blLdPL4Re=QPb|4xTDFpK!X)v8?B!vbZQ
z%AJMF@!T4*h&7U7r9Bx19}}dQ3E}AP-@Oy;(p(e-nyunmljXzi)#~c6xiuGYo)U{a
zvc@m&LA-79JAo=V8*euMdY5$k4`I)l^j9YV^>B;72Rm$Cjg|VYjcRkL?`Dwp@l<ma
zG2Dm9(B>nT&Qf{`7MGYB8tR=^f5dS_=x!9BT*%aWrro9S?KOab$HwI`7V=BWlFO0}
zny2-FA;o?y%u^W0nsW_PxmWpUaPZdLb@Py5{6xR(X`jDwiRW#d$4OfH($Lf9t1C~1
zck9+|xUzEWt7$o9H7`EZ8><_`F5rbQfA`Phup|f5#FUVDyHulLI}gRj$6vp+>)&u@
zN`m>oK7aQ~s!h6OfqOB2v9qLcSgzgW$)>UY{r8qf3o$KB&cxT2U}AI6t1%xNh210|
z%kYdT;x~8=4F1=}OaF7@Ado~{x-`P7?+G*vz6h4~apT5y@%qnjQ6jcQiel<}C!857
zC%PrSQ_hfb(Vrfsx9DvQF2Mf(&40EL{Lw!nN8B(9G3wx|@%=9@zwoSY?FAg3*kD*s
z6Z*&bYEDyQHj1;Z|0Fv}>hPcZKX4n+x#8TI3RQ~LAoX(JZ|npB7k%tuj-S6ZzyF3p
zs3j&!V}Uj?dA(+nJ;x_Ry#}nDW;Xnm3v-qTyU0_`Nro~7XB^7kjr;d;_DSx#Z@mio
z5d6oin~&a>CWi%Z-;m~+2t@zWBGNT<<8NaQ6Jta$<gGCcn`oO+M}>Z!<e$t&6Kn>&
zk9poKPAN*<NWz1S3oe}c=fj}33pgUciV*(*mte9#5%0`mjW7rcu}O?-@gQh@B3^w5
zwo*;RT-fOy-?hQoJMt|Krfe2X?!SlV@)WOzn1OkF?BN(X&3|qEyX&`X+sPXT0sy%E
zRfzTA3|RW%!WhZ-5FGB;!c@=K2FoGe0f{DXr<}(y?}02w?RSusL4xxIf^&MUdwr!;
zGrJWgM(`c@B_TfzFWyR#`G2>M*T98{3z%r{m2Qw6G-&bMxqD>H!78-*Fg|<PoEzfQ
znrXx-PLfhm`k!{LRO!dS6mo8V96P8c^Ju5o=%6QiwKsqZs2rq5;q%38#~*1U&Ni+q
z0T#n}SSOjSdz%=Y)#FCQsF&ysugdWk*k@giy$vFZ#L34dwfBp@q(c=%U&2TaJR}U4
z*$ko3gbinwhQkThB)|xt=eX_mSviJ7Fr5TYT3FZ{ob1KOufRqUMf@$CY_M%v#l_*A
zLoZFNi*WSe?&TxGz79oq7$cnD+!`q+FV|6G+IVs$SPC7V08pdGj2X_^JL45^fq%}#
z4;>ubpN7}oLpeXZA5#L*a#-&>bn4W5z<}r=tdD2;5|CB&;rx3#S1T;oQwQNTh74T*
z!Vz~Rs5Gh5lzivr3?%4oT8I0)<X+9s2*)lh_^qb?Wxt0DOVZ>E?)fKc&YpHk{^J)H
zAn9qAuWgHyt#8A{uEXMn&>4#ReJDmHZqpB8db|DSYdQbRge{{;euoVH!R1iTQQb-k
zd;CP{5yoAbvGkIigL`(yKWt6=DpX(IJ2Ziqj{~*}WX4I113_p3ToEFM5@7a3PXV;h
zTDnvc!qtk+Ci=A{vzw)%fasp^gykK<Q75<+N-7n!eO0@@;>Kj=RroDn=6SGv%+^YZ
z_r9n5hOdgA7~CNd0z*SD&%6zBeSS&!Gt_K|TVZnG?a^XGMeuZy@tQFCm|n4Ji<Scq
zwlvvkrT94R?!WtX*5cR#)YyPTVK|p`+a+cW;kyKgKz8o5>qWH<%@;<2qi}u{s%m5w
zp~zhi!&}Yg6JSu>N=}bLS0FxPMn(p|<(r^vxH8<&{qK%VQvm0MsT-Sku+bMU-hm>d
zcu>7BcKa|%uwTG?(Y``bIi*(0C@v1314;!rwF3&Z*};(DWs6&<7@S<nf)j)04Ap4?
zuLJ<*R)CIYu3ULue(R4yj{1+ozgqjfi~H@N&R~+b&IQHj#E$MR&0<8Q>=YduS|3lR
z%K-_O0hf%6Y0-NRk}B&|={EhO>YA=_iB%|%!W}MLAT+%~Lx31#AAtp!Wls9S@y7ZI
ze)_?z;TC907#5Z-UoP$h0ZZ(lF&DNVniUwW(hcJsUX5jzHydk-KsW;i3|M?>QWqLe
zHK##P3-mGLw|q74)N{~6+DM1O!b_I`goln>Vj8^0jGVa2QLG+0Zp;(QYU0|S;!AOi
z$z}Kf9A3p+=5WXGH%7OfDGc%eFVm4!MV+vahXq1OI?YqHukUP<wpp22{0~6MN?|CW
zpQ9TM0aAVE@k#aVyGgSa_dG5h*tfFW+tA&N{<_~Bf(1Yf2(CT7?EvlO@v)|Nd5hW$
z7oJ%XK1*=zczCcpInaL#^MgRUtz3kCh<N~XcHz$uSGme<V*i)Zg_I-G<^{w$6{h&J
zMg_SDcXl5TCOiUgkyWtUKVKJBx(XHc2W$2Pilty-aqhsQ|8HO(In0MeiBcgB&f%Ij
zw$$peJ3Ny=y?~Aqv^#T95ty{nvnSjSFL0KXPDpjMIk9%Rt#an)@#oHzR8=mx=se10
zx69V*n>)9SoGVf18LBsuBAH?yH~WUtT=R{1z95w@yZ~0zPQI46N3yJD8gNwHn#ff`
z7`$Y59h7tT5>6c<jy$-yJ3E0HXtolYdJ+|`6D~J@To|#7aXA-zGz=EEioqb>vl{<A
z#(11?QL|Z-26{68gdA5rA*s?@Q1as8`TDNG3km7j_S?(lOa2WK(TMx`w_)+Ha=#2}
zBkc7!rBrR7^k-mvHw{0QLp&DimXG0+5ApaZ#W5hRU^Xi$@l`82Lx=VEPjRbgl+w4U
z90BWMlbMf+sf_>`g3X2Yb^G+H2fLK}4}?;i`YA3AyNVdS662+~J6`a)zYH?mm})LK
zJrsTnIryu93S5H@wY0)1m8riDXx+3rC186x?Jr3;%vHp!H+xo?wYQ;SB%Lv2KQ(eX
zOx;k@28>+!pHrP~atK-e&<DKg=JQpbcQ99Y6XO6P{Vp8L4_^*&soyK_l>gN9hpExp
zINS9f%zjmT9abE=<YW^1xWun6ii$%I{0w$;e_5OHbd$5<%aK2OEvgv4FJ;QYIrF_@
zGOOLJr-V>l(=QKuG}p@^<lPrr0JD$)Fh+2mw-5cJyKCbZe*?b*DZOzKAOkSN7e7-*
zM&?6;*+Smr=Cm-*t?eCbTkHHhX*i>T@~hn-PA$GCWaF7(#uFl`F6E6Mc62;Nc;JMG
zqJMYXE9}%IJn_UG!!cq|MIlA(@*)pSG0WgE6eDBjQ<)wSqV@B6y;iB7Oe_};Y&y||
z_3x$>IyE@AytAJq+ofB#7cED;yw0$^{{l_evCv$aXjb5m3VeVs9`n?Mq;c6OCTkm1
zyf~0pqlek+_DyDNB%C4KfJZLa*4<FHxpYE8c!CFpb)BKc*A@p9%d*cB_0ojI_4GoV
zvW{$7SdJ?me>RI=<;~SfXZO>h6Q&Qn53LZ)!30lE+i$Ek%6j8l6Boyh&g-}NtX#W!
z)s{E<b$?xA6O98_o__i)G;Bvo)w~-cHm@?za&go7xKCr`Eu*<!r<fV)Fn?c)ccD|V
zOn?9ANplOQVsJxIU?$1Cu+aQV9g7QIKdH^5AY3yHzLi9zk7hE7O)Hyy>Gz*M4lhjN
z_K_y>WwXN}jTkJwP)AcY)kq_a@qC&2Tg<$KXY(h^nKejGqUQF#ZQ*s_I^)acKC))l
z<`vkeijm?M)dWaC^Nzrl<ime-N+!r-H=b77B)Kt{5Oecj`eZk?LiGJ(VwrejI5#=#
z2Vi|Q1j$&-+o34Ab&yI+;S+g-QI(->#Rp*s5Jmqg$GTs>H9#l@Nl74LL78JQjif-l
zjJIq}o-sNJUZjFEkc~23xPT}VOAQS8awQ-w!T3XgS^nHOG;X%Ba#wxF(Y7CYO+1<E
zp{RL0!g6eUg!Lw~rs9OwgxQ|6b2hmj*&W-d%;9LSGm>Sk%MJUcy;o@~H7rh*-sY)o
z;DK;SH3_bm(bmRD9s)5Fp(WRmk-7}4=X+#Ngd~r_ln5fSrtld$?2MZpOjA)>x7ETz
zjz`bVEV+8bRC&~>h23_B=Ga~nLn;5we&Uu9zE4Oq`aZL1Y|n1pP+OTBa?c1_-v;=}
zMy$fU%OCt=4rs-jCj8dwllAqb8H5411-w<S@~fc~p-vxXu4R4xki8jm@Mcs4kbKwY
z^qND<>P?>#h|MrB-P6<W%yHa-wzj<`CGU7i4Tl+!CoMw6QDCAF4A=U}A=G8z{9veE
z)Ka>6c<lBi_=ND4n%;05EzWArSz(2cd$iHBSN`xl5J+@vm>4_E$u>;J1P{=}Hy7kk
z-s8h1w_b*C$87T`|FrmxdSyU6`Ksmm)0Vp&sB_4gxcX0bN0oQ^7Xu{Art6297)rR*
zzj2(RZ8G*A(S*`$x+9NltU+-EjP>c?-wV!9O!b1?8G@TLXV>N*ChsS>Fik|=Pa5cA
zXh^SJFX4ovZx4l^o`xZ5l2fj-C9w)6snVL`*1H1Z^~J^K{#}ff^gLRz=?laSBTGvr
z)RgX^*%6*QFr;haw^iViYB!OXAx7k1M&nwNqb~yUr9k#487{pPb^bg~3)5t$!AL4J
z58MDFMg|`Paq*UB@h4f;$FBD-0!)g)6l8<kJzc>@axYY&S#Sl(#Yaa*&R=8^Q}9WE
z20{`pUmn|L{iWrbn(PtT0ZPVyddznFD9Jf|4y)VS-r4yt3@M{fP>oGZ<dQsvdrUI?
zD@^prEt+8M{@6<eeSc|Z{u<#v<8{ub4=XJ#6=V~|^d!=m`^{DcDg_<IL0S4Alh1Tn
z?r9u)qv1<90fpo(><m?*dTV_vZl8$w9codN7+-UzL_9hGiMU4ym!fbR(~E&Jo-wkZ
za-;A{$_-Y4n0_(6xpe}IC241tr$f4Xq}S6mt6RP{-Aw=CacPk8tRXRlM$bMCv=}*U
z(#fLHw{pj*=9o&j#Hsx$c;X^6_hsDg2c=c>-t3nwxPV3|*h5Oo0y;t{=8>#hP{enn
znisftuqL5mSYtB5Jt|yQF!t)_U*Vs!*jn0=c@`m3pscukc^g!jeL`3<gb)xh3L*S`
z`Gct{Do2C}R$%EF1{2M=`rWgwSw-6x80*J+G@g9%V$8Y`lD+44**(eq<KPZbQjw#s
zFVa^rDOIwM+^TWvjD#0g;EaxtXy>gX6}kV^^X^@S`Ti_g5?<@KW5Bc#XSFnD=9pdX
zc#uquUneI{{F7YV(C{E@<KIRX=z*2a$HbJHc$D;@@V_aqS{)|IimRKkmSIp*6+Aa{
z|C}*m3ya6lhElv2%Pt0}q_@IDi}_C2AB5~lH_rsyQ@*6~U)|GN%esjFhe`t*J3~wq
z0DuL_%!-zmXh$Vn96HsXw)i`vm(+e!1`)*`6I=u9g2PxmVK(1FRAkpw^Y5=sXp&&>
zXskB!>did*cG%79*jQJlS@{0F&=g@&aehfAnfdBO2`k}WnAuA3b_7$Lc=WH(5D37E
zUda5LxC|KrU*20DD1Q6?1WvsHMAHa|C4a>lDHjAAz`gMV!3de^#fxi320jej=FDzY
z7t9`c9#**E?Iy{-w4Z#-y<VRD1io8YWu?NGja<nsqhkILNA2j7g+*PdAU2pSgpq)D
zxj1ju_3PJ@<WJh`6wH`5?Y-*^Pes5y1kI#{D>w%Nq`u!efBtX-*bR>->^P*H^s1k0
z<->W6pVQWrEc`8XzInW__4>NOUutVBa$??FDkMz}y8M0Y5%ZaMpUcd1N#2wm;?&kk
zW>xv_uCt0(>SZ0bcg)}7^x^lj<Gp`9sQLI($9GvvR><9!<F;164{A1USNi6X=Gj4B
zf8V{u?YBkQ77qSYYpfA{a$ooMzM&NlFU#F9`bv0!=b~xPI1b9O07imoWj<IWXLHEU
z;}wDOuN}~{n8!iXx#yre@836%o2deBr)8B$HMhv#)*9|@uF|@EUa+SA2sO16bkOBB
zHSQ}?8-O+RF@ums27Wc}^Z0aduo$h%e{!pBs%vG}2@@um-`?@2%rDn2@tZ04n|%P1
zioS<~)_mnkhu9}-(p5R(RbXQz>w7i+8~b$77&>CaK9DpG6ZtP$Z{D2bq<X;;mhRe7
z*7pGWkBy2>&{ZkO8>nB7w+f%09gHzV4_+arjw27<3=12KBbx)2SS9~QHo~_`t$)ra
z#b~qP40|J$$64Ic!KoD&7bollOw|q#d<2y>|H2EAR#sg!!do7ICd_}hDCi+5AjoHn
z`r3T{@}>Iu+4ihhWIwbPJfFSTh{vByN^dOdW^Qhd_-UiuR!cEZYS5s=K0e*3)ChDU
z7bDS3*)=s39Da6L^oC8FXoXcUe)}_a3x5r&{eUZqE?>ib9Bn2HAT&t#InYjKvB%MI
zB9=u%gF)~!KE4DmcAE{GH$Q+yg5F|s{oBu<HZ<iI^X)lOk6gGg5+L#V-8(_$<7Q^e
zcq9TpG!)v1_hQ9)k{tk?d_fT>K=H0{oz_eJTN}Ec2d`eqKqB#II4QN_3znOjuB*eD
zAVy%(@I<#w1tPqK$zc%)1zqYN;SCXKS9Eh44}H$2mtG+u16diA)Vbf?*{_49x$eVD
z;SH$OUd_4^bQyJp0==T}n!{s_&ZLGgqTo}!mG8>wLZrjBXIlcPX_%wTE=X)v#?!}|
zVV~Dd-T%pN1gtGk&_6VEM}g-g*&g7P8{<y<@RTUQI#P2d`;WgqQ0f1@0M-RsQq86k
zWh=*K81+{Q{?$BbmQVBNBfolW=wj7$r?UIH3H#zzcHFNB3mp9-XhO`Nu^)b(+F0-)
z##YMci_+@a0m=^NQ_D(sRF&QBHl%Mven#FQmDlT98ht)44mdq}i1gKu>-xE0H*77<
zN*l0EK~W`g!0U}#*-ZxR-@m)Kt!dQ)pY=+c<kzKY^|W~I@>6ZF;<bkdTQ{eTnef;<
z=+udGAqn6NG31TjGoOY0wQ;LZq8NIwK)VkxudX$Qz{c2rjyu~t8zX-)vL_sK@DFCk
z#{Z4+$F9T0l0(D{6u6}2<?0j1kGp;=(LmX=)}LHran2~_)6-VxQS<d9VJFzR*BD9=
zhRwjhJ_s>s%2FGlq0Cb@?8eYwVzBe#*~rL!k&z>!ukN~bZ6f4D+Bl1r78TJjik2s-
zyYd25JpADY=bkOWI>dO~LD~odrM}b&7}+aCJgLu|Iq>EZ#LyCYE#c6T3CuenI(Lyl
z<@ox_?DwrDe%Lv<P<VfA?E0{DslZ1gnmt!q2flIClI*a~lJ&<D!Eyjcc}z!vuAAoR
zkdQbjFQ$nbuay^Uy17E?)_nc>G5PWmdl=?5F?lGafw06ed=|a2m_eXHg9rO(S1!Bp
zl!=OY%miX@&{v*t{p!_as?%a)h7^Ps)Q9J9(L;BLHS!4yd*35VOIi~MvNR^YzU%#n
zQOitC4{4oCb!h*Zc%WlCQ5C~o)5NzC%pBiBLusvfX6(-N0&=Qb-wVGlTwjkoBX%Z@
zOM}M*TNWgJxJ%{ZzGvM1#pu8$E+EP+464~Mp+SDOV)NDof85`0ziR!hYp2OW_ANf@
zzbtf5hC$f8#Ol9_7GJ-s#!cCB`>jLNs%=f>@&Q+U-MSeCT3Sb_D0~UY?7QRl@{V$P
zs!yzwMy<L3_`S7mSai6EHGm6-RsMM}{W5tq2^&i1VtcDQC|Bjj6?q3gezfzs@_x1t
zCkCJ>t0q6Dc8q>SPNOddd5)WZb`egFh*3qqCa*9sxJLsJJbjaWSRY9cEH7K6T`;4G
z^|*PJf0tGpLKSd(mNV3p(Ad)<V&{B)k!1wM#YzbW{Xb>?V8HC1>evl!smeWyE(nPl
z#qj0mWABwQ^;={5#dFc>JktB2&DDWNPMWKvuhI<uH1Z0145Ur#SqL%c6=n^)ieMF%
zB%Y|aq~@nbJg=4KFYu7x9}_c%cY7&03<J5K^&A}?`!l{ZWy%y#S{O$(plI2JGaH6$
zq{eAi@x}}K?VsziD1U1Qjg;t%$`W(;Hc$B)Irr!&Z!vD)r%&by%bkzl{_MNRZ}?PP
zTVL2K@Xu`7UcLM}rEReoV^ib+WDxctwg#wC2o$(ZziL~4HIbg+V|!$++{iTbKi3=9
z*StIy)a!Dj=N!-OitQKqsjR8ajk5DKYqQLI`P7r!0$O%AOWD01_tfz~ip@;3TMKQD
zcD>d1S=7gMpH(hspQ|aA)JzGso#P;R$kFNK+OQRlWjaUvyT+chJ>Avp&uD$~K)vDZ
z1~e%?JO6QltmcmQefM=5<zGDFVB}4m3b%mMf0y;S{k3bH=K|%p@f#=P&sn;<W9og|
zfNQ>^`bx^4xtm?t5Ry1*u34Oaw{@L<YDo<-o_4ma(#yv;{K5_G%3ROy_WEG&BN5y!
z+WqmR`O_1Z4m;7M`xl!<CcC;i_Zu+0=vmCQ*f!%7Hp*>0pA;UDG&{&ezVz3VfXgQ9
z>_F6yo;-=faXEGRbXT;oL4yWKbnO~o;Y5Cb_%E2cWyTEQjE4lm&E@Oo*9(p7VrAM=
zChLTvp`;|7rUAPL8>E}xXF5Vsat^f-5rd-82l@nCh86+`s(>g#MlmoqF-d#4!g7(h
z`5=C-==!K|TIa-c9~}#gm<FL!Ldsz;E?YN)l`MV+CRqC<5l_Xuu6=zo9W%;aNllFo
zGg&=+?<2-UJuh~!oWcavV^%R$4DMaBcketa{muZsWkYV=yop=*=#iBM2J`vVR6g^Y
zTm2Cn-G6<4M4hdxuTQ!-=qL`C9Xr%1>J(;?t%VU~YVm)v<mj<uk6r3*J|qJU;vRoP
z+_Xxa#k^i^uB+Gw^aNR%KVa2QZd_-gV9z6)GR{*pf#=Y-^rkSHQOJ4lWC8pZXnRZ>
z{~NihKBY8nToq+h@G6noeWJf`MvDv`#+aC;XozySy;$)a))82hL7twTMsen&W4pgs
zf~Q|_b}7C#quT6^JZ3^jN04kquRm#iL9F=#2r)T1If&Zp&-yvQ8t}!T)`E0g389z>
z?<{moypk&}q%gFJNZO9aBHr}z<BIP?Lc_we7cU-x2FLl1KMT1$Zxi30<RX8!@U#u3
z?I<Clw`3kQ05b!fJ8R?U&TCxaE_^149;0iRHWhQs*tYCwIf1JsFzyUlC7{({(W`zL
z9hkU&*|Oevf%&7nTsobElquQS+0&S0ME{yPb*dy&#`x7TJq9!k;5ZZVlCTJ}t5-v0
z*435bSkKDIskPYBtK@)xZ(ye&>VZSTNdt!a_3M`~qJbG(58e8^9agcim_#hPM<#T$
z!{wrywv_Dbtt#7FLlQcS`MA?}tj1fdUcE6#X5v>J>1qCqDK(}oN?dmSp5B@ThvFiO
zf-bZ<(dKwBvu9`SXnfRlHwrVke>bz+==|odi`UCM{hWIB;Lf(qvOn96KUH$#nwgQO
z<%2s5dkkK2@uAYBx|S_#x_`3COtHw%T&0>>aB$2c<tb8c{x+N_3$^a!b6X`U^6uiG
zqQkk}`}}_UV}tQP?Vl;foUAg86%2Tosu!Q%oww3)>(%g?^<B>NHJj*@KDx3|Vdk$X
z?PQ~N#cJKz@wET>N?Fstx}(=O2SrxMM&})pHV$4_bG9V5?pb51adAaMc>dL2S+0ql
z@H@MoTS&XYjXHPk-`?E$am<sOf7TDk>A8RBDp{L${SV6z*=czs)@-Qi!u^B#zrXcc
zVXpMq+wmim8XLMql`Z+UGQm1()_na6`T;>Czz)!ZV-OU<I_y-WI2B#l25b{JQV=?P
z@7rv~3d<>cCf`2#^5sZs1qSQoH%4-E_C##@$Vd9o1_-wN7-7VwbE7u(X1EG6jfob}
zg)j>1>aIcf5%wX}PWF}9Ml>M>7Ta~bt;Bz&NQrjyM0S*V1@688=o4B&*0M;}V_Aqf
zM@UggO@GE(4&i`W*ryjqRkv|B=ZI`c`k1xk1BlOQphT$QT{bx%U;FOk`j`7M(_#Hn
zQc{L`%d=!Fu}3j7J|swIe}<KqAW<j5bIV})@W8-KD45YnEAbxC#R)Zr3P(SUGv_G|
zK+0vt)2F`JGp{oIY<Au8kwArK-1msvUKvQv<e4&!xLSmY4xVA;uAPHBi-(8fdtsIS
z4|&Tz12)#z7@|bYH8YddiRvAuw}6Qu#Iwx%_xID-Uj^66dHmGpiyJ%SwP5)54-DM<
z#?cmWlJS!RumJ?~KHwi2$x}9tGv~<L4ZVb9pNXC`TTHBLOEcf{0o!z?u-(8*c||OQ
z#Xu&l0E&zX(m^bzHLXNDyLGPbt=V0pmT5EfxvQqI?wzvfI@Ob}@kH}bV%1`G6$2+Q
z(RjwJ|IK&fUB+zUqIA(}Q77^ubF;D*$U1Yzp!jK~8f!>;LGnPv^X^}5^AwC4?s*Yh
zN8bb7gTFcpFh!^F6)pwBu83yUkIBaq`vRwBo9j;RA9Fgtxw5Lg02OFNXz6r9+Pb<?
zI74EMvccrrDuaxdDg}jd6Eg&;xZqt|8UjG%o{E4D(fuIk2LrrlC4mk|_`#6S!@T98
z{)BykUe!i*05d;gh5*ZboBW0#>W-jDz}9B5GHPmSB+&-BFIQ`+fw=hJ%s8#soJ}V!
zwr~HFes7;1E$4s%+Q{fcY-U-FFZuY<D=jT8KjwqV(d<g-oCAW<#n5XOy~W6h6cCl-
z9Y1vUCgz{l9Z1u-v-q!KM~#$mMaEzmsrxm{ZWO2{RxVZ4Tx|Wj*9+~ji!UenUAQ%}
zw%5+^VNVYZm1tKxc$?q0&Q<xQNs6gc2P8Zj;XC8=xDAbJ%B}CspPczM<#6p9KXVIZ
zb-Q}o?uyx~t9#fcx@YHH^;xX`_Qmm8UmVAu)HK>*{P;$AcJ<3;x`A4*s$Ca9X}KCK
z>Djkc*3R#imQ}-O<yz-)QOg%iUVrM9#efMuSLzq`-Cmyf#Qo(VmDrb@L`_?_Oe-)_
zm>4oF`QE+!b_3%5T<+et(0igVcw_q54-Yj5`~A9d-)>J%!?AL^kyo}}9%#S+&h4qn
zwd=<XQ(bt!<l);f2Y1iX*-=>GIMZA^M{=@#)SOhKie(4<FZ_PjJQ};{<w=vEvpMev
zE?KgKBj^Z?6F9>z>8)915sW(hY|=h+&MJ`;?6`ita4MS+8VGBP53i?Pl9`x&!;NDC
z4GzI7HVY=+Z+K}`Arx5-Ft+BYuKUH{2&WtZ)`;cTX#mAkgu1$VBY#k+8Dek){Za&0
z@EbUcgpvF7>C?=(9TPGlo(lYeS!MTqqSSu_3ratHI51Q~gqcAzsNy<c`VAtcg6$_#
z2C$Y%&6qJ`)}PN4#bn4W_sL(se&sayh66;z6c^FuOwW30H;FE2^hqmD*(-!J@Og;-
ze87<a<8hULA%cGaCABFLhb-dP!lVi%h7<~Dn1u@$mWV<MLjme19ArN6SBRB@fdUhB
zUa(++S+bKLqNA>3$Pr!-Mu?D0R-AIo4{oS&n~uOgX5~a+f{0eZnJhl6fcV6AiG+Au
z7eqdgay0~GlP$(5FoFO_?$hZQTY3cDxpQZ_<>`K7O_-r<$LIa9zn{fWb#-&qx5D`~
zW{eN*5Rjqn=g)g~lV06Wd1^Zm-;|QEF;EmCW4C>Lk6yiciCNxDhA|REq<kyM@C@nK
z1QUT8OE;NY{2{dEk_h~$&QlPV!h^1Oit69)v=4Y4%JB&A72GJXXBRyc>=eUe(>0|)
zO$<48-M<I2b+xmzumB3ZO9azEn@7NF!0?RcePIBWKO_&$L}OFkfMPIh%hy4;b*y17
z+gvtJ4WJVeu39(}rT6pV;zJ==cU#0~aqfy}2aX_S@1OC}M{N8+8}u)CddD}7mil<l
zVJEVi%6!I&Wkocb2x7yAz7f_y5dW|&sqXbk&Nu5iF(DAe(b({GU*uV-4sF-2txErS
zui)9Uuf4SI|Goef4CC3LoA}()Uv_!nff9?zUd0l7Gwx6$A^VO$ajU)GT=z^<YQB&6
zM2$F&CpA-iBx)sQ$^McW_j%{;l+dZwtszq<uc|y6)LmlGt_(-3NB#<9XWmFGQoX&c
z@3wp$t@gf;{C%dkB&Y9j%9!%k;Y{Y>lTp|0F54`P?D1@K{y3W@z1*y7F10(-a{gRG
zi1I;|j}OO8o_PLX*s(m-n?5~O?2IjWcP?ns57!FU54A}r!oI9Yneq6I+nGJjVqbPY
z{Cwz%E-A0Gw_XWU-o83!>=EY}nXMOndMFPx_89}Tva1*|a%TMR$|4(?+<_Uoqch*=
z9f&ovTDrZ**CVQbXZAIy){L_mIH5VcO{9TDqTS_4;}w&EH+p*hhZN<y>W!#*Uj0<Y
ze~8iLzlJG0npAP_WwCA8<WlsKGwj#G)d9}ijc3?HT-3nyZVvkwIj01YRG6j_SKGWz
zc3wi|5?N08I67Z44ilCTv^r%)R|rt*1P$oe*fUO4B^VDjh5!+GNdzs!59pvF93`R=
zhJJn?Z#f(CQeP>ECAoL+UTLQkG*dxXs@ix-E6(D)5osk**Mdf&<m{ij``o$VdU|>!
z;9TRji4_*6{WRgpkB~l@#jcO)7simtv+&tD*fU0G#uau!SQS0WP4b!n^4%|PmhaW0
zM<sc8>Wn+j+4QVlXbKEp{%rGwUqN`u2mZ7m>qA2qqlg1HVtxz@K|9;ut)ED17ZW!y
zrW}jRqAy_^(;<i&O9d9kt@cln)sA%thEX_^Ye$*C)DX%yj5^`CV#Nv{Ln#f({;&@;
z5h<}Q)3^T`J5n#yim{)(sr6spoe)bNg928W`sA$%e6jfSmK)C|jUVGVi>?LK2!)2;
z(0+F7--(tx>N;``iF_Zsr2OdT_1i`U$FHnQ?dhwP$*iz))Ipld9ux?WrXArhyc<3<
zwskzlP*kr5+A{>aR!Zs>og2R2B`z)rn(iw-cn{~!os%~FSW>bJ%9=BR*F-4f09;I8
zzvk!nCT((+(C7fX!up2$^+wM088gZ&D(>-;0jk%vRLQxmynZD)+4+ie+=|rJW>cU9
zI(8Oc$D8vW;3qydJ=?D(wb_Gx<lD9Tb*b30CU4P;HyfPVD;JtQzqW44@g8OmUankz
zXq?x`JJWWpX@6qE#irWP6McG)i<ob`%=yo=DbIQ+dPyG-Y5aCjwL{6Hmdz>C3g0LN
z`s!Tq3YGY_ti)>g@M-UMnM!Lvi_>#3O}*AVf3n7~j%#cKu6DPPIc3sVU%PJZO0$>&
z`A?5uRhk&PL)l}&OP!RRZ7Ni+6g-S;O5WvbHfQZcnP~<(yGz5?zjnK_r^-m?`Pu!a
z*sF=oXCGu}4OPf`=w17GRLrHF!(28VP53st-`$WH{n1J($5x$52-)*xLCnYAmlM7z
z@jT*py>a}&i(zgfTtMwTcf&Tsjyqr$d!C+`VR<H&=72nT;5?;Mp!P0}Gt&!gRGFw(
z{?&EQuE4<Mu|Z!>o%nL<c67cy(gV9eUmC<0lxK}ZJnYMf(9pxTZZ-E9*%x+S5MB(P
z<h!QC*KO!O*<Sj@ILi-!SOsjvY!IrPNA~D(c;x|{Y`3vSJ0Ueu<sFM|o}@#aA)`rq
z&#bO+AaMSh?ug5^iws&x_xSDGm8m)GV@SLV-YGU?1&lmk@D=;MTP}hl1v@~xE)0~`
zko;JjJ{v7-?z!Bf2ny@gjTSLS=#y&w($QkjIX=4GNPE0HHdW8*gsfixS*+LS4XS@Y
z_J)RrMtTLLPp6^^lN}zcj|Xn68MO>z&fyRd*>O!ssT8UQtV4|MUO#8tnDsmEL$R9o
zPt+Beol}*9x+a<F5=9m1HYe5mNLtzq+AHG8+&#A!RGlyQ+iawBvsi*8VX%ns3j-9E
zDFq`&k~P5Zhn$Aq79j@WW#!8WM>TDGS9zn$CaKEs1_P$M+3ii*l0N?uOeOZ)$WdS6
zWDzuf^y{P9p>40UVq>c$E#(-!xVxidw_T{6@zegTPyO&$6FnN-ENbhf?+xjtHOC4D
z?#Z<A2bJdK_b}@`yK{P{iKfc&z3bfcms+eTD}TRczTZZtqpAt2XMg*>8oEb9E6__v
zU-|e&>Gb5{C(93o?Cox;Hm%j8tYO348NPF#UNc?pCsp%hXq$64-sPnRo$AxYeRJ5w
zvY5Sn6CKW%)lblCOnJ1;<M8nFt>H@^t!ZZ;G-u+Hj!!+L2dQ5;cj(}rd)?dTmWN)B
zo@mtK$|wOxH_QsO^6vlU@drk(=lFeO6L4f$;3Is9$-$8wJ9X00A2|8$LoV~_PqTps
z)oi{rufL?C!Y%WlsqSlcD=RDIgfr(2Tue;*(*~3QV+6AS&_QP<f|Zo?zvr7{))_||
zy!w9NV)QJ1!%gMe|N4qSap|u3(rt(7b>s(r{J1q!J4l>O+i=1zMpMRfm}mdB9yj}8
zt<}oq3!;{d_OP8KOMlIn$IH7rCJ!Cj#@M)EhF+f=EBG!PfVNLhnNDpgIQ$~)_~M(z
zOsb6}ErRXfQ1is&PQBJ+6%`eRszt6bP7r|cLmO2r8Oqnkj2$~)a^E|d>t9ctXpo(+
zf9zf`0*Q%vART2u|3VRmhUWwX_L|@k7`_KZMW?Z_PWo8!0DFIHcc;Xmn`aa*IUlQf
zvOCHW4Sn0lk5$_<IQmpIwDv9O5Him3_^cNLHtle&>0{v9*V)Z;?}pk9w+H?ie8hf1
z_w&WeZJiXo+Wd5Sm6kEzUrSH*!{IIRrI&W^w>)w6i=D#i?Qe!H9qcjeVTZ#HLjIgE
zuN@q+-0}QPoqIVecP~~fsZ?4ptl!ov*LoDi9gk_FdiL#(m&KW`53?`LuTb6nQawBL
z)r_-O3ZDdx9nMlX{LwzU<d<yE*7K`dJ}mo{wQj(>?4Gk5rr&mLtJQF2b<qRszp|qx
zJ4o1HzFe?0-#h3}-;;|U5OlDQvV`kNh!Hox-R<`J?OXZ*b|O1&g_4GQ^AtK3F-0Dv
zqo8{j-C5hlCi4E~Jwwkd9W^2_bq3bBZmH&aP@DGAm3xL3UKwk{)`fa4tIHY^pS04~
z>R;OQ%9S{RMv|#Kg4|;|;A=1oY)F?E2cwon-^11fnaf>Aqbe_WM=))TB3l!u^UQtw
z_Tduk5EFM9+=}R=A?cLzSV^KC2}D(J8^XURdL4TI{23=VZ{DmGZ4eN)-c(zeYl6`G
z7*VVH^^1R*2j$?NUVGrY*1oi&+7dG)CH#IOFzWg9=Vr~n(~k9e&kYZpclP6Vzjz!b
zBKHK0g2z?JTtN!PC0*5%i<K1I*SDmN@}}qN<g2x@_}IBPsfo^NuJg|>B}Zcc%bIo}
zcGIlM=VK;!iUAN@;QtHCMK}zEJsMljg^WvXqQurNp<s~W??S)K)HnUNtEI$nxIy7q
z70L@XZsGXjsR}h<>myCYhabz{byOReeNZDP!8<6+_-e`Xc1k^hQr@Jjnl!-FWk*M!
zBV!}3)O_gE(YdqpjmAyuu8hmpQpkL&p;bJ7;DIgCdgBfqDrj3`HzxCuk=ESvhbWw#
z&OMBZ>7;Vrc=m|+Fc}3K*{L3;enq2}MfGd?UC?#0?Z-l${fj&KKQ#>2eC?s*^K9vt
zH)r#Gc5J#5@Y8*MuN6sm&MfSae!9SQ!qZ)*`vSU7JUFgq{7L5=yX!Y~Y;p?}cJy1m
zzi5<o%<<ClOLz2!FO5ofS#kF1vDXeZJL(-e`fDhe*N(sc&^u^5RUz}mi$F#QF_quJ
zaB>&w33VEln;tP`Yn?pI1pFEUA2@v7!q&3@mZ-|i#F~m*vy4HNxsn~IeW>7TKz(rU
zXHd6geLokchg*6!*T?0+ko1T15cz5d05DQC7EHP=adf;q;xz;aE#ue-)#+QlE{3pz
zL^-DT8H*GpR8RHmU$VP+XC0Zz;7^Lw63idy;dvfvIDkkkbpP|3cX-DAt{FYkC~x!I
zI|TB2p0IiWQ&QcB1|5$*x%Fja(aXzS=WMEekF7wv4M>wr#QkJtEjKgs)`?=6OW3J5
zqE3Yz3FqgNAH4&=(AKS6nQ!>yp1l6m<pKDu#AiV;gX!VZhztmZIeVO3tOdI!X6|C*
zZ%16bC=s>n5ILYgeJ+jb-8ge*G*>MYt$xGC_LhgVR-4(`*w~n_yiiY12&W_)VSX5`
z((*og49^MRdEL2K#g~lYDr95%DO0Xz7zKS*fDRLAnLoN>q<=$OPF&J-0%6d!t4;rB
zym0&YT*F(=fe<Xt3AEqoy3?7R6Q~IGqDW0@F<G&^RED@1JH*qQzzm|>^sxP-Ec(P^
z^*A^R;Z7B#JQs(RxJu4O^{jys%7*ZfBdBo{6z}|_EJpH3=781&8jx9%Fy8&T^?mQ4
z6=y%pJTt7t+;T&S1??ok3L=kIq!z%M{XQM_s3`xtQSjRS`nnN~U-P!eggf|}9Urpd
zi1wrj@eS%mgDf*vq~F~C>f)`a%|jgPhJL-i>EQI@9+1~LJzOf5xwnnk93)km=j8MM
zUVyUryYIF2s*IFo{Yecy=Gfjfb&gX)m%ZBe>TmSEe%*d|N6R3#o0Uw*ydT{UdtE)Z
zKfZTci5^Sq3_Q2b`g{9W_!8sNN~Mv*i@hX%_KclTWvH_E(cZyq!JKsCzIm@#>S+co
zO#SuC($?dB#ZSAKRbRfUZXOhSFIR8qwLAMBb$>t4>2Ggq=i%oz^--7|7H4g~WV?g*
z$}yhnq`U5~2&qFeeGU^x&p{?dfBY&Hsa2;lb94PkyhV@t6zb@~`htM$2-c!oBBkuu
zV~-oDsR?$u@?uT}Yq17eC{py<#Kgp+8s+49#6uyK1YF9V<Wv}p1_Z-O$vh4#95<MK
zHd$Eh0av34@UkKSmK9#dl=nf@;nfZfi`ZGf#44)70{B*J@znJD<$kmEP`X9FBhlbc
zS#9zamID=l0+^&OJ)703QzsFxg<kuVW|1APFnMy{wQJXs2zUSi7cU1stWXSU*ZABZ
zTMYy<;mQ)1c_n1Y&5Jg;irZ4OFoHOSNwRx+QA+#);cF9ye=xEF@$VeC1X6BzQFkpV
zX$_OcB3y-_i^B1hcON}EB%FDm$q9^)LcH)y{2!P_EyH$_fgK=|?n#*D5$U3UpiJNi
zUa6$PURrzzTsYA`g0UZ@+_)jgEHUT?ulDJSF-9<4j;nyLqB<<A{@`%V2L9zS(I*eV
zT8DgmVm5^p_KKOaB^#<0(v@kezsk?5;*T)4hCj{fzIR`d0{;5V8<(c<YtYM?dsya{
zN1ZuIBnp4xPEL*=h!|Rsp8Ds^S$m7cP#BgaF*gHqCdRSB*0EoN%V)7-xkz`Vl@J}b
zTXo)kK{OM+a)rEEaSj9gA*96JQTyj+Tv?Tgny<vW6GLN++G2rvO#iK%_ntu^*DWu%
zCX5c!fq!f{p3@cP3lrr2PV2a>=Id?QbK6g<uFmaMXH@pk`OdR_VTb?Pk8oeUKL3%{
zx_R4cf0;i_+ptJVzRi@b1AET&@RF$YN~@MxI=Iqhis=%wxI?#B$v#?8;d<VGqW1K=
z?Ot}6Y_!x!!L>q7`Orx%N5gjOPbuXN)F8)oh=sE4ps5!$75i*R>^n8Y@yzANi#HDG
zxY8`z<w{d?rLnX0v=GOVWVf03`^xJM9L>(mt7v_(tme~Nt=oq(`z6`*J6YFotWV+m
z`_b9cZ*+9{w&_Hmv31$=j)TAKHE5iC>DARsKjpWtPTD&4(Z|<U&3<0YJ9JOsllGJG
z%gk5Z&DPY&I)15jNnL8))|EHxOO_qj-L`a!ok4x8$#uE7$mk1u9)75=$_>A9d1TD<
zduJB<8d@c|8gnFS=XZCSkK_pX5y8DO%cgELGLnI=6$4|WonnxjMn=tlf+UlsE^G*n
zSjKbMV%c!~tQrwrBMkXe8Zin+?BxD&nz}Z37`$Ph3F`*-4C>@SGy>|F7?q|?FiWym
z_=4Z(fuL+&T=0|L8JBPW291PH0?KAlX#rgnTiQQ7oD8U5EE5D}?LJ>IQ;6G9NPWPc
z9BA+%;k>~YBDg5uLVaZmEnGL7T?%PPzqde3tCOIB_V1VK-Fpwf&vD8Ra&@5p@s@Tf
zLAd$L^cf3yfvU~q{@sO>2+C00fyuALi*pt^Kd*fQGz5ZuZrT=SECEO^t5C)g9SZcm
z&z#1sgveL;OHEYgO$vFMx8)SnDSsI@Sfm?JUvQTR>4%KNE8m(f3S}Q*8WmT?@anFb
zi^ssBxzOL$+fiH~Peslae0!wbaFp$Jmyyzuqe@}K5b?^YtF?t+kZW3?V9|PDS2Ts>
z-(#mA!$VASY;be4Ar3EZD}s>jrOh4k$8E!GAig8idkMFf;JwEajw#yQdnYv!&YT-i
z7Fk%Fb_+AF-Lzr&Bw646sg*-~xibq}DN;X)Fe~Eq&%;QF%}N&|!itmYdyn*%$160K
zlhx+o(E~L%`d+Fv2FQ%SR?G+E&?4WZGYr2>Ut7wrkgpNK#W_wB#VYyKEQei%Cs)cy
z#IgB%NzXy(o5%JR0bol#o({oj$r;HIoR?0NxX%p*ay%(L&>3WGDbAj4c_Y3(?g5>K
zqEnY__}Tac4icFQ*2Xnk#w(@6WGZ8O2aP$>ngU(3SV^B5z^I)6194xBa6Is91?;86
zu$i@9^(1;}CArOvq@T^TV>n^By!>6+`j>4Wr9@~Rznh%ahl7*F1sd?gg5<09IW)i^
zy+QnT(kpNx5@W?`XgprK8=*y*P*GPNExO!EUs|jc=BgCb)cSEiiD64FrqX@K6^Cnp
z82r*zYuDnln#oN459QeoB4CGcw@=bT&bpUc@mA;5Z!F`f3eAMiO=%H{QuLlOf5bS5
zFml79q6vtBN~{_e7<Lv$!&9fc>A0v^@j)&2l`TYcy5bV%r*k%^#K?EqlDX1HzVf&0
z2f5(v?GtMAM;|WiX`g!PetVgT3a(vsn!>}otykUqt@T5++TF26#Re5>ua`>4EUGAq
z8)`M_(8J0twddu%t)}c<Tx6xW1IlBhplVc=V|`9d@(nR;BdM97*XP-%WLDe5%I~u)
z6fIut^tjzuZF);==!IOno1bnMJ9eM1pV;{Kw`W1ao22!vQnv?h(qA31qIhfJNApiJ
z4t`=D6NA+XcmJFDpFTOo&0DeJ-5<rMQZwPWM+w0Ezstb&_2Xs~UGQb`&*XKJWLp!9
zYr{6gq=)_f8l*Px;Hh8E^=i(QugItr_rSszFrc(~L0=EreR1zFO(OWb_4dWCT%z$W
zAP3waq8uQ;IM<jqAG<9we?JfvCz;@SAUAi@^D%rhV47=WqVFhgF0%?@jg^;{?nW|!
z5<*}-hE9T`$E?<QC~yNOig1kJTofujm(F+x-|EXjX2Ok!$~lwurBktyh`XpjDG#j1
zU%{{;avFg_m^Rpt5e7=z2o~gAY<p>cf(Y3FT!A9y@Dro<$B9@{geoq<p_f2i7t_iM
zBR*L6h&AH+smIFBwKX+LhteAah(X+|BPD0`Bw1EU6`5iRqegv%VqG~q>a*dmn{R&T
z_U_vI_0DyF1}6_6`px9y>cxkHw=U@*by06kYG0dng-`YyG<vSie;0K&La9UBuY0$r
z^&PY2>5w{AkC<_@lC6!J77SQlWdBF)ck7C2IR`%eiTzop)f!iOZN<8@v#D=_-(Q@a
ztfW==tf{c3src#C_wffVBTp0a)MT+GQ)gyj&4|{WGV@DbdCsU`zww$&<F(pVt<va|
z+^g_N_h~YhC2MxXNgx8F8}<)vm+wDj_TO*qsWGd8QV>#NypY?%GTZl3Uz%-@c0fo-
z3<hAYV{=`r@ZY4&hz2%|U_uE=FYb=p5)VcNAhv?p$Pz+xVjH$yA%BRs)5yRt9F|CA
zfQl0I4O`b}?Y$56Ors=#Xw8~+^z=l0LD}xka&1c3h->H{{(rdgqJa_tO8qC=b`SUX
zb@Jz}e$vv|i!#{AoOI`Y&UnXVxHL&(pc1Z>B^}JjF$(J6Y;Sq8$OKK2eA5G?LThis
zIQ}!WB)wuIxxx>?r!A)<BzEn6yxXwX<-3{B_AYt0!*x;6;5bdm4i-M{z9;o3=8mfA
zc`nKN{^QwwPA-N**1GWG{iisSgzw4oVvUN8Q}4rxG;I`63&Qm*jt~Nw<>2kt%?&+u
z>M<h-1h?-x_R9Fb`4S24xKmQPRJ3{1^ugkRGfqRt`0u9YA+wKQVITtdXopBP40H1{
zgs;24Uf3o4l}@gtOC`AQB)2yN;5xzdl|vzR9A?hhN*UX4u2Mx7#PM12yav#31;_Bz
z88Z;8H5tPC^!XFh=Pqt;Bjn2(j(OmM12oW1SVAO<)GO+g2)>8hJ@)kiDB`xq47$-w
zfHd=og)cK}Z22w1H+<{XOp5P(l@sJ1R5KnT?g&#<Ja3^dZf3*#@|^ep=xm;`XV|+Q
z42=+^v2e6K-W$sO5ivVWZJw^HqNy)TAEeW3=a;f9IRZxDJ{!qBRq`{{D4d+OL_JFM
z=&=Ub6^858Xi3@boiJmFd~z{YwY0gJ35;B9^`pIWGc)&!XlQ@~Q@g{4?H0cWm?N|)
zY{6oBUfC>h=**deQJqHz>7L6KPaKU~mqR?tzz$}bCRscVm{9a6Rf4_Tmrt*q?3uNY
zOZE=jx^+u)ehMDpnbnK-Y8TAvIcu!kmEfTTLyf}Cb#=5K>)uCevinkWYQW01-|Rvb
zB<QznoAy*J3<rRceUj|njBm*o&#$`wxOuK`iCte!{>xgae*Lm&9E4l`$dMz|IWNpF
z>;~1s!a`v?B5Iw0#J6*$#i$t1{Ian$4gD&_dvQ+Eik)3L>UFa75a5Xz&H)vG4zaI^
zZKD;nESFRs!II+H6>2#q`7$!8MI-<x7rt>VY$yOGnFueGdyYT+H`>zJldSP7al7}N
z-kn8&85s@aO<vu<Wf|%{6oH8Nyt}1_g(s}OBK`C8=O-+3X7sUME|ObFKBF+lAy<k4
zAYie$NRC%_Bj#eCbGd>i<jcy)*>WClb$2hiB9Bns2Z^ptO}IJ{Ex{<Hxe=a|v)ndq
zidFMnCfNaWq0+P+9)~)^Zo$9zoEs#fV@0SrVTB;-glpGU11CXM<G9;4SucZzGl(J}
z=Df8dUNgz_h+qTTIu9~{A8ni)wG2QkT$vOmX30Bf9GxHJ@P~WEy@6;nhJ2}oWxzKZ
z9*PJwM#*EyK*)e1qK&81;Am|z1k`Y|{?&@)o6VLA)1N+gaDcH6ZHtNg>xRoCocA6H
z4t#saIKrazq}N)LosQFnoc?_@;*$K62-DsR!BdJ4zg=x83sQ;ywzzTP>zFSCuMQNe
zB?M)j?|Am=)$iAb=kl(W4b+gla_w50^V|oq9641>O-&!6p^9z6Ish7r70x^Q7fMHt
z9T*<g&8KR;ui9hZ(;31vLeDCaR@m<CMP%g!auL?06M92-=WbAT?X3p6XV0EN><fvN
zX&|EOfqM`IsAEu~=axm+EdDe;#53GdU^qrxL}yM3ujZ0K{s{O;+z*X<p@#)E%Hu^|
z-c$y<SaQ4FhTP;-6j`f~Yc_yW+Ft+Dr^USASeZ4<^k&i|o3OZr?}N62>o=~FLl5;;
z<NG0H06!df5Z&FahimGf&Ye4RK7GCTUN+A6CDsxF2CzAB(%j`dbe-3}gfDoFEUO1c
z24@3JapzUQt(9R^3+isqC(FLM?T3gRWhp{EGE^b*IpL<(hvi@3qj7GmW*{zLPW-ay
zrO{)3riuMXBQ7QZ*;e#A=gEl@u?y<IKb~70JiaaR%uoqosuE<GU>g7rrvO6Yt`{sC
z!@FqV;1zjL!UQJ%B5zBK)zNW_)JN{gxx3PL(>%tGzP^(<o~9w$LD=@#SYx|{H|RWH
z_w8I)iIle~s%Zs|wwuGWb+o(gH{5^hQ?`E>)z1c-Q{LSuudVPiJFBJmw|VYvmP+2Y
zm+C`f?|OkE7U+KbVYx=(5qe0EdAgPU*v?uw6m;g!10{?1Ch|C-TGGmY`3;)3=itH4
zv{pyo$^nJ}WoHw`AfUL{2bf0%S(JN*5P>QVkATLZ_>OMxXi|=UeIh8R4$zZJ!YA2Y
zO51LUD#BtAS5SA;7dP9ZOo?JpeT}4Dv2KZ{_hzpz9lTPC;7mrHmnz>D>?qFeKn`!6
zEOE;zyzC5-Hcxoz7U|uzNVeBfpDpaAFD<3%Pgf+gKezVy0-0EKO55`qYqTCa8Cw8v
zq7(gI8`5<!Mh9KrxaA+4&*vAB;^O8K?&v{#yho{EKwtaaX+(j3{rbsm|2(0(ske;G
z1Hhc+h3YC8-X@UifXVj9q!pI+gYOahoDniT?@m%3G-NNFN-sE^3Xcg@WCNcgyc#qU
z^lM{(yQ5}_u40ni(U%3_0AaeJopOFN^}SB!hS^&~npZi`SJgOh>+NYtzoWBjB*msb
z$TS#K5lq6WNwTqJyuf6Qr%GpieSIg-z2_a|IW%IFu+l>TiVW+>M`zwRDw3qiSX#9G
zo3N$JPq)1F+WTo_BXxisiqNO57$&p~8l}9o$UCndZ-qez&?Y_hfA{7M7BVVaClqa8
zEs>OjCF|eHZ-k--MRCyjborYU=zMX?&9Ph@Iby`Uxh6(RK}_iFgQgELijDD;-PrIc
zeXpzrI?7T|6m)l_f$a9}+tF>ES4fMXbM`K8{Tr&dxYk4%k>IaPxRG~+-hQrA;`U52
zZvp^-Bk2L;A!$Ygt*R1DHS71s;i3iQp3|pKpO$S8%&x3I71F}tj?RwN_M4giu*m|O
z^TVb3_kYM{cdkAq9BdS{)yy(tZSyA+R~ST2d;BsbA;M4VTq!UBo2^MA4O4&aLo@8&
zbkKUG;#F{+WmhC?U`@oRh!@pp5NbWDldLPlb#&Ks+CO(yeXj)T`&~JKuzC<~Wv{vF
zW$>z^(K=Dz&)XiIoKy2D{LPl_&X*YdpM86jcfd$f-`9c<V3rbEBI)&Q#pW_Ck6gP+
zv|rQruQ``%=byJR?O~-WJX^|!(mk4y`1&IvBRimVz}Rsbz8{?AxqgI>?;$wamD>;u
z#I4wL=i>4O3T?skc&6O)$d_QEroF+yaB(-5I#Ix4NS9H@sG{;$lTS}x&s_yv9ThXZ
zL0rzkc_jL^ah4VrMryAVz5~J*IK%s$neHm;xS$TPlW|D-EiBJ{UT`)jUByWM9_NRr
zw$qlr;vf+#b>wh~JvI-jzkYRE73}_H#7!-$i=zX##ZdS+w*1|OJTW4p^0)Q{dbd48
znS5||d4irMh|Who6`Nf)Y`BAH2>oo9xPtI+UiU|c3V<OMYiCQ-T6_|^^dC{p9X0Nt
zEn$0OFT*#S{OMV6dN0rzDS|=U@p#^}4d{i1YQrijcCn9`d-mw!xyzR?k2-c7UXy0w
z+pk}@&uw<_BJ>5zvxpsl5L+>*LCbonZ?NnCk@cnlJ+9sRcV^10GHo*<WM~Uf#xf;}
zN+b!PhzymKlqqGV5)u)W5+$i5Bq4+(Nk|fsDJ4=ppOt<8{x6;v_rCY0zQc8$*LkjW
ztYb)OWw-0S{l6XRU=`AY^*^3~fqh+q`$RL`kmu*IzkD80C-mxb0@M04&fp62F&RX!
zP4{d(%e`%fUANw7hnoMxdf{dQ832Sgg`eXcO(g_ASI^1G2@{zGDwC=g%x<Q`{>;4N
z?^Qg)P=sn!kY3;|2J0R`MbHri;iYY@`}*CxhJyT|JjbLe27w@7sHexZ<ytc3)R>ph
zGxim`F8hH5ne;_510aS!=fhyzDF8~Mg_YSq3m!u<1hA5%2PhIbEH-1&5C^Jhm;3r9
zB_-=Wg!l^?n)+ZoGEdqQNR#Xm4O-|{bmjgXIg*Yb2X*W8$jK{NiXoGBVmZl87AIS9
zs*BG)6E^jR<P9Oz&>&MF(hQ6}n<c!~$$dtU9RxY%@kZck0GC-)rU60-%tB|Tko9H)
zXENodj5FYx!<^)Eq`Z82_2uImao&sx=q|+_1!x|60BX`dNXnra%nHA^S_euPLf}<k
zFdCLuydEt*c*~S@4Baj~afm)xsbdkUz?|g2<>9?^paHh5hZtpuuNY*~$O2z~f5`{M
zjeD3x2=Op-G#spc(Lc2xj+dPF`-xPAg+n_BsL_R;l5VJu=v@*2NHQKfK7ML!u|nBD
ze(~ZHb+145F6evzzx#aQdy8w7g~Ii{p)~Lz$S2$%au_7Wl{~uEp<0$CH}_zqJeVgv
zb-5OrYW4Of$E~wX;VhGxhp^6u1ndNa)g)R#?5>Dg^kVXwot+)L8p&cO9wr;y$b@lv
zIX)iHmCC3w>~{YN`-*#qh;9<0K7zIY8Mr^!*YMZG#T`S=>ztdgXV$QK+3%?Y$FlFB
zU!XI{M*}r`_Uy<D-@bnrCBD$$5k$jSvW-pf8!eu6@r-vdI&j-Q(dgWs8uyiV?C+i)
z*0_FSkCtP!rwmk7UH-3Llg3_+M*K5YPv??X=%$T(TYnAhs@~^rs~?-Z-?Y+G4)Z)X
zKB`-tapPQauZ}FO+`RH#QHLo@w_U4B(1@DqgxJQ$=Kj4GYexSRUucvSxP(!kzH}~V
zHlW@~<~3Y~Lv*|{_rlr;M<CGaXl^I+Ghm^2qAmb+77Yn10DuI^d~l}F#Q^_=-!2(s
z@snrQ?#}Ql+XoJbP~#dkX$57haAX)Qp`yeC!1-zLC4A#xC?CMm9VG%YU{=IGo4`Ak
z=1gRcDR$o0FzN*dp-n&yE?(KRuG!CXp(n_JL=A<1$gJlt#n6viu_MoZ3D2PKRrlh^
zILQk#|5+xlLe?CJt4K7db468&Z0O<c{AR;m)P6qP@8ugnLq3h4kz4@s>CdQdH@8^0
zHoWQ0wzavdZxW7&t3%=v!8H#K$LqxZqL=+}{uOE$`>_#`i3Br@;e=vj4HKIv9qPff
zMMEB81F?b#(^Pt45sc$e10_|HOhW!IO@iM}^is(k&7L7%8iNNLZ5X40p$^D02c!Pn
zmj&O>vw`A+F%J5XWt2ZXE6J?rw8Ao^&b&c|UWW!Sm`;h?iOOO<#)Bf`VyJhseZ5Bf
z3T<NyUJpF-<d|FGZQ-0``Eq?xrxl@F@d|=Hf?EaQWy{#N`GJR?+Tr2R6#cXej2jw>
z-k4eYBRE1Up55Vy<8nRSc6ZiAw;%6~BtD$fEWiN{5%nbl(c}x|SuPTqx{x*Q#K*B)
z%3KrmJ*EGEk?&ngIuBp92~1dYLX#$a%~>)$aO_$<IQT&vbO03h@7?=)=A@x?BO+HH
zYUg-s*(S0;?%clpwaMu!<jT7+?@lXRE&4Ru>~oRL(!<4R1S|$QWKZ@QkT7GcaDzGw
z!M-&h;0_lF%X)$Nx#&T$@6TSoB+i&dJqS9^F4i+T7-Km+wb0CH$1AHrN8`E%Vyjv#
zx;)`(V}Ht==0v!<*zM4kXv2D!+{Y}J`&g0}A)r1D#K1(z<hP}fG7Z>xYG>}{#50-u
zcx(E|%Y}Y(ojDl7Ph^ktO7?6T)N0(5KH=e{Yx4{aDKHqSNrQRcCg7z><8Jji1Vm0y
zh(A_=-(34g9~X#-23d>AhL(BO7mlu3x&<#o$_pqDyGDM#ycu7ItG_??YuYfS{dNb!
z(>m?P)i!kS70ZEIN2Z-!s}UXqfBn^~WMdPTZkXN%v4+J6i)l1xp}aO`XoV4aqoTAx
z8H6oK2S_BNfpj(Si7C~K0_|rvHd^!dim`SgOpDi_-R<*{La~oWt8R}f0_XmZ3m`VF
zMg@~@&ur|FHB)&je8MJP7O6yM+Q%g(B=Y_|Qa2ma`WuE9t&Tr+=%a}to*2!yKUx1b
z)_174xY?Qwjmq{($q)T(@1_3LC29YFzs9t-%C*Txww6(5(JgEnlZ50vYW3CH7oD)H
zn^<X@M5;Y$Wn|(jeCmDsjPmA<7-(X0=l=a(BS%&qO*bcG7YO5eN&3Apwa<32+F(<s
zMubRN*p7ROan^rIPclm_uuwS(euq=>4Q~2fdMTN2i9dG65TbJE{?HQKV4-1pDzHJ@
zi-Ct%{rxOkLc9L=Sw<~7VxWer7VgLM*EtnN@WQo1S+-9Wv*aiG`bpN2Gw?Yj4igF=
zb$haU!^5eXH73T9yX>VIom)Z+VxX3(7nfh=!dE_IaN6!;0yd|8IldTj&I_HFSgw-i
zmt9;-`{5C!Y7JT!&()Wb3#!fpO2DW|^VPR~Ljkh$R=CbPmr<SZ5$wFDk-K}1-RHQj
z;riP$8h5iDMSK~LIJC9zzpl_eu<P1wor8HC{|+`3LmSQ&d87HF2P9y&B4TQuu_sd@
zJ@y<z20Vv+v_pZu5R4WqIC1G1hPwS#`>Xn7lqXpZq~MS$8LEr}+d@#+Jt_HCHPuyg
zAp5C{KtO)M{b3CFZJ7ko@7%dlvw1IKwyA_N&Wv8Attn3a7&$5cUOm8}QJ54IdP_#_
zrZHm3C~7*0=j+~W9>9{ArHMfxw7v<pwjcG9N3kYEM+gKAA9CQD7H6}8sRg<Ke!B7|
z_q+2bIc}U@u1_n9L5o7rbh$ak8H5H4aGun?st@%leGnjpm^#c_7RVG(uugPCy0VjB
zb|@ggZp|*|ZoM@I-XR0yi8F_Wz!cI4aJIDDd|lxh2CB~h)+yoeJvjhu!+?%l^15V7
zi64uM6_Nkp&L(&x+zu^y%6WOjzS~HHky$5D(!(Kr81Sse5MUW=62mVHL|S$1m<~3h
zc(k+kcdRMTbBuF?$*aL%3+4S~FcZjru!jyDK0Jj|mT_@Drw>M<lDQ^U_HZt|!^0({
zl!`_Cj5z>Y%jXe{OO1eNB7+}ikz%6Ai03AJ>44Ghy3B0kyAAI&VMK1ny}9;@)9hlx
zSI*`JcqJc(i%gB=fAGWy$3&ryApu}^Z+YwG4)%57xDhGzAV6pJ2&^InOc0kY4nom0
zZR=<s`q%|r$(oXu`7`qATZEvcaYt`TY8<wi=awd?X6X%KyBKN->k#6X<PFZbwS^0X
zepx)acsH>uLhCw1d8<q!#nv5fE?>!;20vR`%*p1!IYvQovO#+k+jnT-+UvOdD@Geg
zn<Tf5*XqdkW3x}QiCO0Mn{?$vNJSaLFQD9GJ}TvoOm)yMdt?Umgrp~wW43Hb&JX|)
z>Vgoqc-knPWReQ29OZ*=c^)=?2M^xFp)9t9+*3)uf`6blX3RAeopN?4+s^ERS+*gt
z>mFbHX&KcvG4JyMg4flXZ!fr#dG2gDK_pMk?Z5z#$b*Q~(e`3nXKWli;Ac?@f0<{G
zUDcJxj)1)EI6ZpxO6~n{{)H;aY_{+bl^fpNY=Z7P9R|#&(s(?%DZ|cYd8ZXzFI=6!
zR@*JQk^1hmUzcWH2;yXTR#NWM!OulYWd$HrV9W}HyCoR`Lkv~)upJDF*`rc)3Vzh%
zU%xf!8icpzSkisuNK)mEmaQk4n=f(Y%8R0BCd;{qCg_}E;)0V^icZo(pz@I7LM$Z;
z{k3UPM4HUgIRuDFQn_Gdv9mzHnHAQ|p=7U_$2hMJG+mMqDU1ujrgrbPp_O1Gc}%ng
zbq+OR0brTr-%xYVQwXdiaZ%8OD61MO@K8twUFo*2OucbEma9&E#o@4s@|@1<$Ih5Y
zoG`^ORw50d`CJ?}Lz03e85}(E$*oK#CzM*9MFNPf82AgO)|8IV#XX5V`9XY*tPtLm
zXHJ42@liG8x==fgkMe&O#{*I`KXv>oc7*eDB7t56Q6nPG=em^@-$k@Wl-nFEN(#(&
zoXfJzgn>Zf(!=(-q)E_)4PN<j6sb_tNIB+dkhKpPL<GEC04~_#biWJmtZ2AHP0p%H
z|H<z_-HcveY9quf9^f=~Q9LByBI+o+qe$&_1=xeLX2AG1Ry3!s@Cbz4h)EHY(0g11
zOyGA<pRb~~04u;JXU+CdMA!wvLW^PR<t&om32GLW&w|)F5|j|TAX?(yCG(qE0wue!
zLGi&JYhiKpso#I$>+D+HIZcpB4I)vDq{wqq&y6KskFKwQQ0e6OhQ7hEw3>v~iYsF%
zqn7|>N|zgxV?YZb6SfSc1G2%3yq9GSx1&AzEa*iac`9)+5ObEYD~f>v_6i(ai!fyO
zt=kgwcKUDeJEhSUGg`?zfgzab$GaBFb_-|vR^e)yh>_qV30@E~DHEEV&H9*m4tyI}
zLh=)s9e&4UPc~P`A`nQ#_n5OU!qm>U*n=g&NZT!X3R|kADe!RIsC9TfyU}>UE;XqZ
zhDu}tMf6v8H_@GnBc*{sQ~IGghOgRTpI2QPR3o#7WyKIU94MDdcA<srIehrDGbQZ1
zyC^wJiAXpgq$YqY#&(jQO-$+IBmPtZ0{hSvz*l-+#54r+&LF@<_6?8Bw!g)(^7bC4
ze5e*75UcN5#vwg`PDUO@yi6%|Jd=~%eIHMxBC!~)thWI9et!b}BvXvOZsV`Qw#Nwj
z#gu<4WJ#eSv4*kXT2@T3hb&T8*FWaDhSR4PF%IN<I`AOUatI|vjF_SHhDs$~$dgr@
zUXQ>|%p)nR1?t2oSd6sb`f|^=N}L?!*khpQDRnmL8Oh|?bP<wanvuK2;EHwm9-Z=b
z0xB?=lP6`}$5}z1CmCA{;31eFM6cIB>Q!<23RX&$bB3B&X5Etcap+L!ykaL5Vp2XZ
zFhmH^6itv62rzjVz0(2RDlQW{>cLoMi$5_BUk+MZ{;vmKZgeQ~)()O-Vj|x!VA#se
zAjd_VXjVJ~B6`*{BKE$~#l_-nMi}`R=69UxwW0DH`9M}09J25^#rXd{lLaP}QU^fo
z0aBN!H%>FSX{7*LVnZ$^hzx!Nw}$~Oq14k~u?g_5Y1S8H&BI9$D|Bd5bMoTA#~etw
z8ba8t?EY*(vO!4FGh$cN08`WZ<HajJywtw~o}KLDtu?EiVY0>Vf+SOuJ@AOS>7RVG
zWFC|b;&j=r*(RHKTTJ|$Ey0N^!Cq1T8X7hSemcoLoYQQ#_nZ!$_oVeUsUQy}n4__%
z=@>{}gQzm38DY%^5EdnBKs1dsC6SN6t7x8wS@-M3587IaU-Ox>2QGdEHgq3EEp=0!
zdXl3+L6-RXNPX#RF5wobTk*OcyUTTqL!1<FY`V!A@C!S|2g5bZO{&24Wc~zp^pH=e
z0FZbc=hcggadN|6pgFHqz=(pD-2qHMLg{55$4R~Fx3)G6FZ5d{)El(G@RJpO!!~vZ
zx1OUx>FCA<--!_TPVH(J8>>JWE9^e5efINLjER%0f7ixTgP)MwA-9WupfDzqryYm(
z0AdH3Xemf&pCnPq*o)czs`n4ON!3MJl0spLUB?UD!R9=LF9YlBlZgof0?IBiduOOk
zhL0Fh6SKi)Ro-OQ3x~8$l83}jF1|T5_&L<*jDxS)#C&5)CQ<R0uHW=nB5aV|;1~^i
z>AV>XbZO3cp#pOy>K&)`m839n`Cii0TWVNL)rHi<J(YY(g^R~0LHcv9D$52o=IC9`
zwhLi?cS`<o?(ZBmW4*6w#3D-?5Kn7e0=D8bUv8L(fiK%b*uPVE(UyYGt&Uf3_N#Ta
zR&8h3L?y*QI5OY|Bg7M*gmimHO5G++o4#G?UU|eZW){(B%K|zq*?;WVZca)<DaB)i
zT3n_=@U;zD>iv?gE5h#uX`xHQquEc*E_RNbB149JkDmT27o1m@;MJ>D<#Ulz#O4pD
z(yD)SW6M8Oc9H}EF_`&!gW*+LS2@)=0ZaEke+4H1=ubDri0P<$vm&w{By?7H<_BFu
zv4E8AT7&{?N%;8P9A&m1h6gR+2tO(6K*w#sivGo`x6^gK?3Wjhz((8g(|gT`cc^%|
zOPsC|W%9NZf@^5&UawVq&pN72p>En{c;E%5KQo28f~$bE4>($Yb=XzTxG-JdOlDNi
z$5(IF1{<bOTl@Kid14LBpd}nl&?_qzC9-`RC$?q2-HZ2tn*}z2^P-qWicdD_p(_Gu
zoG$P$fNgmD<U`h$d<)3zzU%?`<Er}TjZ|x^K4OIV$e#!bz%NCxk&^$l{nItFR;ee@
zE8O7g46JlJ(9*qU?U5!`JmvsL#Y%w+C@7&T^!nOpDq-p1%_x>I(xv|X&|CP9oSYfY
zKeHi`4rK+0iji7tm^LgksRazr#262r>61DRkF(jp@BifivsKbJ$ZsHmZaYgM_V{rH
zO3>xYKbhC-#4Q7iE0y4YHf^xwT<e<)s^{Q_gqUQzZw#`3Sxo1V2J_He7#I<*4gs!v
z_cuqkY7i~-)p-<T&EKw;fO|m-TS>Y*p5IIBNHgq(A%3{({wysey>1)FDCufV6cxq6
zSxy^Du#!2v7B_?Bg(>5g)`T*P;<sE~uVg5-0-47Jiks#<sxx>U-qOG`ua;DSQqD3F
zgZZ|dl<9)&gg(h&JybSr75+Xus3s}+{W3fbI`7#IALu+j>nlc(p92&|^+?!X3^(tk
zdyN~<G`lEUCT(uNz?AUcYl2`Mcn4Q3`t%N_DlwkO!8p+FwO6`7Uy+Z(VaeYryO=09
zz-9Z+qVG+f@30H11z}>9;`{O-9j6_X;|HNFzZ?5SA|GknWdb6xvOMh4L{X5?M24-o
zv;heA`*XV}2%b}5s>q?u$N^J)as}t~O?_-NXjS$+Cy~5Vf2pb7gT+KE&Tv+>@S34|
zn`mtMSmsij#73P55YH+&<`54O?84>`m4xzagL<A<6Lx*TDT&|1pZ~XVgRPl$>PseB
ztOg@f;FaM;_j;=OFbFx5l@(5*<B*uww(4s~{6o<V@Pz6HZ5Y)Vw>{_`Fy;XGlB>!I
zFnq`aZ^it6A2(F3_bLg})7OV<j`k+v-%potra5qD3wY;{A+6(b=Pffm?A`vm#$so?
zNt3*^>ZNxffa-<4lkfZl0SvQ?MRCIE7x}|YuVES!)%Xvmk2oW7pk29T6C=sSf<?G=
zd63Fd<mi#GY<!5PSzEtZ{AwF-qpq$Pm0dh@WLk+M={1{Dt>fPx-xC_JXii;_u99&p
zAJ||0Wg`~8oMriKoEbbc?V@{B%7nIUCo-O970HzD1p(m-5*!9I#5CcA1gwb=Mo!|0
zh^EZ<CAdgN_AA~`3(|GNpE&W7AuC)Me>BXa>060lq<n_NxbR|m%8eV$Y^*{Czu?Oi
zlF12m*LqMpscSj)Mt|A$fMa+4`xD#W6Ypid=LpRaw^d@dj;@Hc&zsXR*R9(Rmnywi
zGn7c}T1{%BR?0m-TBuo6XOItMtDUJWa1}TGgy@hbBz9fDZPSjPtu|$U5P(-xb7p1#
ze*MyW-+l;mL37Ja@b%6VbG%ys479%-OkN^1DJsyM%MK?^6YGi-z4$dyW-KJ8hYS~-
zK3KQQG*e6_85rCIV~1cd;5@-_ZqG~MR017DSSCGR68;*PTD%27o??qHfmiVXpAP{a
zXA1|uzS#bYhCat755G02#q%Yg?Gh*pC}1*THd!TlG-qsA-8D1}D|MKbig`M#kDURB
z6Nxh(P%jqO@pRJ>N4zUHDcv7sY$C4MF)(&IBa0-F^0d;NnsGR_z4_)Wg>Jcd>MWEv
zcZ?U6Y4-@|KF;gx^R0$`bGZ(*CvLaCpmCAX!+Sflte{2}oFbVtPE(4B7!Vwg{eqK=
zBPZxWB&P_a#;iFqk`SM09{=!g-%D*(R6<k|Do=uFWELf_Of1owWumk4yu^1w$oX?L
zoy~<cw{MLGR6>n}y#WSw`h(a;UA{bA5>im?Fp`uU3{Gz$-f?CL-T_?M?caY74!m07
z37?d43|sov=`F93FG?TF6Wg945938Vc}0>lh>~6ES~f5Il$vo|J$Iq2l8{QUo0cXf
z(#){^*kC=;w8OveBgU^}r3n3qURZnKm~NbO|Kkra_LXTH$C%KjxOgNQwcJF}e}D+n
zTlc)=B2f}CjXv4TJdd4-p0y`O-CTRh3jzFq*Bsc@2p0JDdUK1Vu=TOE1K)qd4eX5l
zi-@oYuA^Uv<F|?Xr^yk3YlVVfqY_xegG04TJl-Li0j@+otzsi9N|pZR(OZNtEdz_Q
zrUOtlqytk;<9whI5RVV>hlPlE`ECP?@#DwGqev1XcVZ$~zKkYs%TIGtooTk4G;gl<
zHw&n>vNChlMfAuto-=7SV^nt$^x2!ESjeOt#Vc%!WSsJvqLmf_zmtfpB#+GN#{mU|
z??u6O3np;Jh>nlD^!2{6B*;yuMH0e3h@8ab&-Na%PuKw((wP36jspkWwBj=Oon6;o
zUlaHj-FG~9;ZECht3eiPTRrw^@3(ryt&pb&ePRH@cYQcZ6S<O;igx}V2CE`s9%H0T
zGCYvnDMl;TK0H^J4vrB-L2BFiJ-L@CVPRe{fg-^bre^MvNlQ3fNYfTxBqR0KJn&e!
z(1iIr-XGdw7gEO#1Xl6MPd5vYr6sAkQP~9LPM5RW6M#1mVtt^*iXZ_(eL4NnYK}wb
zi8xXevf1@SU^iT+@}4-(@rZMJNb^YF{OU}*<y)D$2y<JsdmKq1t9XI<QQ7}mG}e)s
zikap5tyK6IP<M~&++x^^RrREhj$N+EXPP-(M-MVQ&(a0I!QZacYcU8r=@qX;SHbOw
zT`(Fzm!0)j(_Pf8BEevNHy+dR`<tSoGo4a!vXqo_`5#vh<QsWM&~gD5!6xYL=lB&f
zaymb|zw5Wuwp6IYINL<Xqrdx~u&l`<hy#2UQHR!%_>xPxULX}9tdNk%7nG@*ZLDps
z_pV)ql$!<gmo_{VBHV^|*0NKlk~S9^8gaTUi`8QeK%@@91e5OkH5=tQ=%BTH68;&<
zHPs`*o2){P!-AE@+IQQ6u<*NV@#KncQN1nIJTQO^TWGxMp4r|siD`aOgl6w^)3nPh
z)~{lQbbppfmSX6Rvq$I>tS{V-7)I6RyCyLYq?jIv51MUjKa0^214nG?BJR&&e}rcI
ze6u4!PQ%UDmn=P#TLREv#3YN0P5UkmP&}6OhbQKB;ieEw3SpC{6!!R!Uk~zERT$XK
zH)<T)eJ<XnEDx<0XU3%#QNBE{=al*r>_Bz`8Mv{Z9{YBg;*A%9+5sN~nwn%}(O$C}
z=Z@4@$%Q~Nj%3xeuNeaysF%l3OLN~4p}JX?^NTC|+HSsnJg=0UH1d^wT*o8#O+Wnp
z_|5rz&T=pl9M1X3$DdxxE>5+NW5q_fnLcvVd-!%w(Q^`BX3Q7^Qb`f6`^qc=i)KlM
zvA%G;k0PZZJ1ZMz^X>KYj9fpiVpallNL7F=0b_B7jjV-b1AS`4G=js`c@3s{L<P3r
zzKrAIo=wc9SE@cC#*WbWXGcDrlDuSir`e@0NxnmtF-qVP5~L(%0zZHHM`Rc8t*sH0
zypMRVQCZn0Yal80idPi7-CU=R5Kr>vQ7Z)UeB`f=ub@AcST9Meholqw)L`76wDDNw
zp&VTj@ksK_hT5ruN`a(x;t63lJcKik^r8TsGlu?{)A*a&-h53?yJL@*-hB0{OJd%}
z2i;c&|DJW_I&(t@H^pYnLRe_R$)!*PFXDvV*<q;oWtdbxoO1Hf>}9tCM?WquW4bJ9
z?69_W19#!m4g@Np!<7R+g|&PWr6xye2hx|OSiMzWG$eqv5mDaJl2S7(9n^}fB4FI+
zV?fi{a~`OKwQ%gkC1fv7WyB1CDwe8juXj9^-*o6r4>VyHDQ*thf!y>ayJu-~*B5&c
z@Kl=&`DB754?h{sB)H6l?S&T#8~VL%cxcNnMMc{o;8-vEJEYV<P@4zW)%|XDhyAVo
zjzZ7%8oF>(P|I;gw~vaTjFP#k#=*Bb|NScy%>-$|YX6*nSorT`A!p?^`oBN%N<NDH
zuBlU(|NThgZq=)YRPK})s{NyLQ;lc-mte^sWcQN({J)?5|GjorUL7jAc6^a<&ODQS
zyp8knS_SI^Td=~}r5bKNk&xI!e%q)-V4_gsoBqxij7(I*R0iDKn)zX^JV#YkgF6(O
zj*)lD9vI-J-`Hp&0W&<&mQisDiQUOT#rO^ruaBR%$p@VfyO%2ytp9f(NT1QZ+c^bF
zM}qg(IgOVWc{8y0R#S}3b@YsAlUlcI^+qwQ-F`LsBo0acH-%nwduK~C2Ji>2os?HS
zH&X74g#@kUubSmFY|CYhNte88|7O_VzZuney06V4BjpAJsKz|{Gg>9Bz<7O<<*3dX
zi{C%;T^I7(d~iwWuS;$tc9;1=9%1%<w|&>4`4+Wz$HMUMi-c=02aCCy&p&Ly1&dZh
zVG=KMYkz;I`&Zk$gOG|8M8m&0ICqtHpqz8K2Y^etw%_2io(xxE7}19fv>UCYsOU`U
zt~0xR#;=jME@%-#p~)lQzarP46K$@5h(tU_J^qfXh?P<8^;KE8&WS7ipm1F0hY#YG
z!*-x4kZ8qPBsK&p(5TXTnqqNfoamAjZ_y$yyL9|&lkzIt(YkFPj}C)nAT)_xi&z-v
zZ2e0;N<ps6o4>R99~WQ=LjrtJ{lv$kfs!izI*0gVT1QHvS4{Le{K>Y(_u3U@VJL)!
z%Qn6oLA22vLCdvd&McG{p|eqNP)rKKjd=SYa0KE6kIWWZ*^$}&fz@%V#@C|aO75EB
z|4>ygjGe;))3bZ`x-mHsvF2=$*R7!WNduK#+zY?~+a)GKt6UnkgrNwvi|Yi0N#V>e
z89L&MxoqkR)aquxoaN<Wa>Sj{YS3PEFsas1cPGq+Ez~qIPvn^y34gf&KnU#q2-A;e
z&v&uND{&-+eb0RxS+2lltm}+KOWdP)2=PGcubOV2tD&wAh-l5nZ_y&^Vnljj@cHvI
zMm}If`uxjrM6?`qR0QNrf~dCc-1%H!%;-zLn0x2hOTnh1V)CKgh<}>XzH(^L|Jx<s
zA8o9>6^bqp4iBFEma6J$x0P|ZSk(5wZyFA#LTzquQ_cl`?_z1s7%gd{#~nRVn;`s;
ziOC39h(dAUQ;1&#&jjEb^Xcz>z0JQ3vcwGH?^X>sn58(2$$&WR(S*K>u`i`wlv(J$
zeJ8SlgnvY(-yLX^%q%s-qh6UGZUU^be{!X$ULku)wjfrY!b?Z`&%R9XbSpkQ4>J%}
z0L8n7k||WXR&b{nLxd|&kZPKWPe{}Bxa>8O2naY)_{F^@(eZ_D&7U<g!R6c$FXC0&
zm+5)`MR~o2YqnfV6TBO}q{Ro1>T$&0%7B|S9-?!FN!JmXDNy?cIdn2H$w_n?2*(F4
zZx_m2p)nQGr?000V8E}*an0Gq6i=)UmJ!cE&%&h@s|ec5Z?gN*7}kYzg*B78T|YRe
zeAv~@n0XOObP?nQ!yKLSFolwt;Rfv`D+RXb8enHZlCA$ecJ+y$ukT<OpNJ^xZDPuU
z%M+-F1QEPmYbD;vOg8G0`3Pl&zAU+_WaSH&;z)K|K~Iyb%LXz4%R${uvm=*~O%bvL
zI{;0KP}MCgUg!mNk$dk|>>+$4i<v-A+(D#{?eT<R(!ayYOX2mUT>F!#MZxc+D-iPu
zrV<7`m9fLVp<7x&%7vsZ_P4mamr9Oh`T#-5gM?{&(o%$=!N$#nlon0&9WoTBH?m7-
z-Ack84RgRqCykX?f2lEeKxE{Pa40g8->{}pB3>5RL^qjivX8hzka_-a8}O=sbya2M
zqCH28okj8eB;3SDY)LuvscJaT)Ng)-R+Y0{cYGh5;qi7`42CYR%{myw!OtveURj$p
z4JECJX^rep___*KwQ-{^LK9uPZR2@R31@9ef6O5-tP*CD8YLCiKP)80aI{EKWOfQn
z>5RAygLz@AJ}mzNAa6yZu(RD@PhRpH<A#~Q^l0>{3+8MPw33cMv@3sJ)l_w%R3~#J
zV@dc@rsHrvpydhmLNdYlZAp22{UhETZNhMXa53r-$ro3D6l-TO>`3+pQgdl}Tp0}u
z20mT)*A`}(_#;Y_DGhV=V!A&*0^{BLOcAJMYOz-yUeK?tVx9ct$&;z-7yH$ohdO%=
zWDE&Y>Ik!Tksv_)TlVm{NBKO^Ya0HE!g`P(6$(u_^AdtnvdbNq3DAQ&s}&aD&@kl6
z(Q(!_OfDgLJp1{@+5PDqr1GZJzBsHDcPVR@%^#lG(hu`xf&fyaz+kyKIXRM8`d`9?
z0zWQ7a_OBE{u_V^Q-DUE=Zi29C*R#^boQcg1ih6g4Bp4$>)^=w$+{3k9}O8I`7J=h
z6-c1Kyz&~vnVmR)z9o2<{pI|IOk!E@ji_0mPINPHzxPqHm6?@*<(Jav*`+#EmK9HQ
zana`6*Be8#Pnr%#?ukyBaED`X^OXrLE1W7Cl)WWS74bf7e?qCF4ri)FSNPmfCRV&E
zN75-oz4GOl?;(>t-7J=)tv2{n!5*Yus0l*)kr+2}0i$j1cVOR~1bCz%r#Jb#vd-aG
z$@B)rj<}BSbo0n_$GIHCIK5B7(xM$y-~x$bBI1LF@EiQ;H1`3s?qgW1z_;fRkc-Ai
zpZI=F&)Rz*`M1IZ1I1=SY+&F?(agOstrCK*(0yo#4frgupx#PvOzS50{d`aHnxVuH
zCrvo$r&ygbxW#|H#qhwquK?_I&UCrjsA;=v^tRKjt-GV=T|g2umyFXMUTAq(w$X(L
zU3#ghfm+;@sybml`2lj~GlO1MrXTJyN>nGHJL{QRhR<qSXdsYb{rX+8`=;ZT9L%(W
zZ@)f|6DKp7!{5`)c*q32WHxT=aAgI?%*n}l{++Xfjh`%gXsth&74J#Q;#7ybLqq4x
z?oM-B-!W0l3Mdb}gQ-`9xLF%VtTs(Ngk{eE_U$4-`R#^hGCk)@4>q=SOwP{WKDu>|
zjP3%9x+~KmiHZ#mm#_u?JjIh2LmA)4`v%{QgP9#mX?x0bU@|#uX{y9Pqs+xE+KECL
z>)+?@5P=v=F|UowSQS3H=B3=BZd(S{4#?WW0Rr}i7$AfqG4tRIyY`{`$^U0_ymV#7
z3ayUpZ3Tc#|JehAD&Lno$qBU{Uu42^A<OTF?7W?|T)8NSCtV<3K9pEH#6wyWtXkn>
ze)A%bUHa-do%U<e`O`n<J0=bcU3EIG06V0Elu}fe`q0TV)Mvi6sER*$d=md5iG*^l
zv%^cq5Q7Z?Ga<K#tGnB_P@#^1pxNb)?iiJwF7!(1E<$Akn&}SMBZ6#h!-{ywJ2D0p
zdV%-_@iB$!gFD#8m9MIgR?b%;?D1@t;!)kUDnV67dgtL7NfpBlz<a4Hvl&_TkQ+Eg
z3p7W)UtVc3c+14vs&iIgZOzj($ufiOkq!7AK+{`dHVTmNrBE&!8;@ga!}CwK#cn{~
zdWMY#NkvN2%A;7PUc*6@6Kue2SkiP#7YX{gta#S#^z;HMkdXPw8|Bag%4*A{7_l<Q
z$J_hC@Z9t+Cifn;ZrytI*s;wxX!+ihS8uR~>djL+m@N<`{IVA1DlLkOO4Ir`*q$O|
zbVwj!#{05k#IA&AqiIL2ov_IdkY9lO?=FX8n$$e(Q~e^_bnNI8+=sfga*@xU3+{YY
znRkOzO7!=N`7zPa7ms^U2Sd$bE1=Q71+51or+mn6R*(odDt~&G>zSAY>C&?bXNg{y
zJFlA@0}atG9qtLc1m`t%o#<8-a5D|7GQ{Sa6Lok|dA+)IA@uh|N~dRZG2d!P(m7eZ
zH{&OtFyU~a$`R>2=Y#C}GQnrhm|&zVRC9nRsw$oakO@u{geCPP{GG=~GH1CmYADV1
zj3^JWiTP)Hio?^U9^P?3RO+Ze^b}JoU|h4lF+C`_s3U0J7<NOK0r&v04Y;%u)--Jv
z5Qef|KESFRKqmoqpYI$*C&8v4^wXL3wH=^QfK0JPXUWw$o^=%1eKZN%dPZU=J~z%j
z@(I>G%_*j`ZN|gHR$`TBe%uinKE=`Tl9o>Yqs^(f9L6an@W^vMQ6FUa32ZE6Q{IW6
zqvzlxleMa6^x*PzR#ytLC80XaN#27YEMFvc@hlU5K&)m&x!^oXygk4xxd0avddVRS
zEnRM+iHZ2v!oP=>qIB%;Qzl8!K;Enx&UF&<4s7qwS1aum5Uq1xB%K0;sm>X@a6)R1
zvXkLN8ljRLo3or59$C4v2TGX;BffK+;W|Ut@H9U|dI(fK-bfkSPbSfs4NA7x-qbRE
zAzzxs`h@Mk`7w<uXcEUI%*o>*;lgM`<REpi@KOM4DLRDy%PF|5f$>P#8HiukQ@n^8
zO||~}r;)klac$wZ@Lod7;m3glpe-?6p;O{3T^#lk$(})=wlCYhfZyyrmrEavWE2qg
z^jL5osf3U+Fk`umRe>S?Bu;tj{IzEFg04kH3N^?yq+1)%@;7Wl(%(p3NIXe3S6&k~
zha58)wKHORO9AX_a}m<85Hc8AE6BuEjKgUbJTh~dv%Sbz6o^T26WUfWU6a$A3IHdm
zD?c7j6~Y7@Mrhpc@%t3uON`c-V6f8G5NJy$;`-El9k&Hez;N+<;Gm|wU-9vc_riY&
z1!jr<qTE~$ii?+34=^=o$uv)p**JCKb%d3;b5X@z7>^&>e>i=DJQIrK>%&~hp;rMN
z=9t(8<|gSzJW2F*La-5XAx+8tLx*mQX5#kku4wz2-|%FRdjEzARu}oSqQzlsiNn$B
zZ_XF3?gmg`A&P48mFezaCdo*vC&LDU0;F3u<G)iX1zP3zDeIhg=pWoF_%>^q*Thui
zaCnu>Kk7rYlp)lzWnreynnc&J(8;Tkv;wX)@bD05HYMFqY#yb)lpPr2Ed8|<n^ayg
zPcMLF;;mSR92gE$Fm5niardLYmNlSNzdIrmMp;7beeIYiG!<c7m=?U{YKmtsZKoAf
zkh^z9E;9<^2EF8jTpMN^bgCC^vp(+hIO*Nql%kRGtB7}~`8bO?zfbTBq8~wjykd0X
zy5d`~Ib?;woaq4v8WIDWy7Z$GiiMa+^kw!hhOg+bkf8#YIM<Sjf9%LEFb>fm*v?ca
zdi!=S58nVxo5lzqyMKT5ib`~9u)$~}Miy_rVtD2xH4tQrHB8sJ_po(NV0i{9VRh!T
zVMGN_hl&IiUc|-)dieQDsiFK2_>;;&26ilNxk+F<X?wbmzO;vnyc!(~=}J(@fWMJ!
zEqihK!t|;ZoCa`G#MFls{DhX6+2GRa{*)Kr;2!-_j+=(ah|Yw)&6CL<nJ9N;8oaY3
z-w(kHmx!&~I(Ck*R5>zI3cfugBa5!)<g{10RAWLNC_fn-e6dQHINW^b1mNZvyH}0a
zzO?FF1*zy$Jxrx1wHSu_YPjk+i&S7|!HX`1LCo-1I{C=?LEL+l7@wnOLyLlP*Cpn$
zK@6}v;hA3erb|slBlwC8+Uh}>4({XoyjuJK$hFhzaX07rOp~%`oy!S%_G`8C)+?Ph
z{S?F?DrAM3#gyubUqO}5=X4V-G$P+GH(5Wbv;0U#{;%>#>tv0!l}qdZez{%`5~5U6
zocP2K5_EWn>|!0eTleDoczdQ5j3`*IEpgwgR-Kok0&FqwFIfHDcT!dMhqWdhRvTwo
z-R_bb`EmSmlg`&NvR)RtE{*)S(Q>JK^`D&h->!pO)R+X6omQ`O>{b-1z9R5ToXNgj
z4jTTgkB8lEn$S-Fq*2}OQUqQ;HwoF2gNbIlrXW=o8fJ(}_Jb(dW`!4O9(`lL2#u2^
z>6H1rEthBe_ZwbY-5brk{k1)WfsBH0OEq^rnMKC7v9Txgf}TC!Mo2RbaSZUP?a{FA
zH$xyp@RUzF{TJ`-SBp?LHas)4-=Mx*E?=QU72djS_Fv?#`0eM3h^Y7|>wN~?ROwo$
z7IC)7=m~O+>?zN_R$?+ST7S#s`YH{~@7u)GpYZqk>=)ej7U=Juw3E~3&N*PW3xxl1
zEnd9B@ksc+*R^P|!vN_^<crHc&Q0Avu(nnGi(Bmfd#!8#&S9Rs;Q#wU;|0@d#a-bl
z=Dy?3jyoD?8I|pQ_U^%_wLfz8|1jthNBCzmlpC0sEVi}m_CUC0F%S4U*t6H4So@~c
zLH)EVcLu9Jd!c1v+14^uNqf-8orjvL)%{cVVez6LyITf-giYm`*a<#J-n>@9w*c*6
z(JE}dK7;?1w+nSN>)Gc`dBU$=1#PQ0R3tCY$T2)O)ZcpIV3)vSGiqkM>F;pS$1Y80
z^3R7S>>D-Jjvw3xM2^`HXI`1h*~ES*Nor*ro|Yu6)LuTf#E7x2;<E3bZga$WN&3h?
zN55(Qy5y={c5h)-GnaZ7#$I@lRiRPsP%wIFtK4y(J<t#tD>tZR_J@5w*Vy4c+o+fp
zTGitF*|F)W$`0%2xki_^F?OHQEBmm|l&r&9Cr)l$>SpsZ;QqW_Uv3=tzvk8QhCd)4
z<b6TJ-?0b5i#eOvvG$5)y^F4|H_Cf^Sn-)53k#Zhf6{B4rEf5!=}ebt3l<gcGq#)1
z_=J)2R)hxu3-rDEp>{zu+&`ywO;@Dz%t0KK=%l|E+o5y3ug_mS<7VV#^XLst3e0x*
ze&y#rIWTNR*!^G+pZ7+|+w1FZX{i8=3A-Ak-^<RA8CXU})L(^}mnK+0p2s!O7gfL{
z030-?&h@`r@a-#w2&hc*>(%j+JcBa{0O5~;U($O`zmwS8sYS*)m-66x-4|3ZXqvE~
zWqP?rkHk?&jM685EB2bdLup6ilXE9Rzy6BS+Bov{q8qPgboU&n`*6sLWql3f?q=2-
z*LcvKS=)+?ZD$_3a{1sXZT)J;#KP#<#C|EMM^zT@ysCM~w8`lhjh~-9yT7^7Y-i%I
z`Y9%=bLUpf9FeFw%3xBHUc+BMcAu!RXUYzfUfpNU4{<AVHu1izG9^OMW^|_osycoO
zIwmDMQbMeq!nV{mU9rJ`you6TF>nz3V;N1t9rt<p5-}{={HY=+1Hrre-tpW}P8@iU
zR2sHFRw>bMQI!6L%r7S-t}&subYC`Of{5@M(fyu3e_rXXF^Cl{1ii$Dmu2h@{5kx(
zsU^`BVu%Qi+0U&rc*oMEq2=2$7)c_LM%e)N0aeR-NMO}-x4r^Q=az6TO+0<%sv$)$
zB{P89`}gmC?9=!aQ&as#i{1_$(IcBtg#@X=|J4s^l<!@)T*bZju3IsqRaI3~V917<
zoPE0ZPJfI%Do3`4K^C%(`7ej%%@1qA8x4VHeKP{W!x>;Jpb>I(2t20`elJe4{vnZ^
zw5_{zaX0xB$$&p%UZU#ulsaR8_W&Wn){kwq=gorZ@?VSm7teq4JHI;rN><T;&vuSo
z0za;`e&L?xaO!>Ipih6cEJ+--!Q9YvV}Sq8nVm<yoZ7M1L6g_l^S7MU+5GBc=szPq
zq`p0Ka^pphkGH+box7DDJaYbcdgbUN_rq5A%-x)|{_~muhr62%x2pTa{+e3o+h@_+
zgl{e;p{x4@4>>cpFgbbT?D#Bw`yDqnEbOsEQRnBKOCwEmt5WYqmucNCQFPJidGq(+
zt2ObP4HQxf6<@84iE-IpZ|bJq{+*j9p6Xh#HT2{80N`iP%~Mqil4gredHAa1`uA2J
zfc8xTOB*%1=>EOJ^QiKqzD0p(0D=76`%C9e(PE=c%79Bvl~gf5VFis8^c&Q~-8mWt
z=9R}=cuao(ARJT)kain2b!T)lAe57FSM$xTd3#{Gpd)ME-Mel*V$H)Ov{E8E!5$C*
z3J~(8i9@MVWCd<C;Jo%B8Q@2EVPZiK0*3hp#uh_S%@Cb3l?f^p<-va6bIEkq5{wAY
z*kt3i@NkwccTt*xs5{%=9S)}{!kefyeLL1bE=EQACME*>i;$lt*lpUeR}jI;m)ey1
z;m5C0=t{(7e@RAXCgJ!Q4o2WSd|^iz7I5?l+e@Jb8Ter<E;u6Z7L#9qJ)to{(pdMh
zOh5<P2C=lGpF+PPR-e`7amj%{tCui)6LyY3dNQ5jQ+*GvoFAx>Jt+I^2bWNM)|xjj
zztebhZfw<*#8Zjyb=GgFD1R8&HrD=-d%H~gBe#xsY`Ea@kyY#GJ>Qjs^nX3l|3B`3
zVmDN2#Q)eku6O;$NoHZ54JMpdaI9lAp}~ZfM#?kBHc*~0c80sRb=r56Iw6XEJjcB6
z)w51rkNS@fOg;DI^OrrEN)yLT9GjF~dUN9EavP*MOP0JW?Hlx|ddv2?ItGWn-RM1~
zj_YuXK`X;{9U8RnQB_^j0X6zhKQsDu??rNssnS-hU!FgLrZuu~y?SY9qo}x5Zfn}C
zPaP7IJTQN=N{GRRu1$R|SkK?LsN#F}kgFDE+bsLdSneOD8j_@1cDkmg(2?ctF`;me
z&l(R3B{CpN%y08ujwK(a#{iBWkEWuge2rMCBHJ87s3aQi^0=Uy<$pQ_d*znMz(Bm0
ziFu=dpfYc}?lZM278KV}GQvPox$3_-Kqv+*%Z3nwsjq3G6ZiYKQV{(h=mgF}4^|E~
zPI6gCoVAfM-NSV{9rN>6b%xqLv4T@0>Gco>s(M+!<uwHfR`n_L_D^E*3a1CGBkK7g
zoiTch1p$*O4CX~2LK7z{Mw%J2%`EdfSSHeKmf}M(!`S%7inu&|;7v#jzMcC`ZY@)^
zzt-*Zo>tz-UnSvV<hqT4q=SDLgXN<?oxtd&3uRe}T9X1<s9kt`)j?@16vQR--V@||
z5U6`5+%VzWq!q-!{XKsg2(GC7&rLGd4*Yz$l|B^6xEHIHgj9|AkPs{(^IP~PSVZ>;
z?xUC+9miI7TdzjzNxQpqhb5(6)34X6!M^E^ZZ~cYZPT~3VpgzQeC4yCxS(>A+#VLU
z>|F}Ww$(kd)6CTCqV3+rK_fkK`m|pAocZJ|{r%k@e~h|2;)SB#;vt<UU$<@Dq*?1$
z8KKqzGrPS~>(;O3BIO;8Rr`L~5MsF1c)P(Clb&&t^o_bg$TbT1;(9{W<4WuH+oxV%
zuFNa{d7-SFYPNA~*p}c;S^ZmEf6F>?FKkutjNh3<>qaZ}d~;)HyBcNvQTxYj+_5ty
z(&~xQgoZxvFIM{wT=)AqqqD%#cU?BxwK4bj(|X5{GoE96A0H7j*3d5ThH?8dbFVLI
z>D5^EQINyN#Pn=O%Yj!HMs(M{-@dT#3=6fH%l*fCc(rV%IzDxcpZ4M@pN2%&J)t^(
zWS~(~twe)IK|i0{sy0z--OnN_?d*&h9}|0PM~-nmAL>0#amJsbFU_<)JdJl)9f<lT
zR%gW!Ma2cG->z7Xv)r*WxZ=0X`k;L(!_E6F7_2z^es?ZG<%Zes_bytLquMAaVubsZ
zX67FA9ks(+MHXIauIgz}_rih>4cFqTv!~Z5-8ZM_C3$PKihk2ZzjJ)wL#j<&PP@;0
zWB1d&F*9RkJ**D2x9pqXS$_<!fbcpdCV938hm{tcfWX$UhByox_`YQL3?!bCf6X>l
z2FDt$DNw;pm~qn>@@f#`drWT4A<4L!F^@joA))HzE-NbOfHyJ+gYfH<8hrR?0)t{D
zB}~f@j_mXG)gvY%q2Ad(iu^8u53mgiEfvS<^EBGBl!pfzvJNQ%ivC?O4A<*rGaS3G
z`5zbHas8N_Pe0e=NW%$5tBS}BALB%8(|&~|#cQ>Jc)ll21lmBHz&JyW_rld!IZoum
zsQRR?{Kk+*ylMaamuS$bbjSVr+av6-^<4RH2g;n#*J^K9$4fpZt(w-6s(ZUs^tv&{
z0NkI_JDY&A8I_q-J>nQ{5<csC!8b{e{yX{S(lRQAeZwXE9Z1&-d1OZZZ^JLW&3<>b
z=)1^Ve}7NVCK}%XG?N+}VF{tN4mX@zY-4BFwmQ{EF}goYiHwKv6B#*e3<>Y@`d?5x
zFQTNe+x0b!(COTw<1l-P(iQRPCh!dL$q~9f6xXX$oJOUmr9czlclr=lZ8a!#;Y^Nh
zuJY|@1E`>;XH9h6x%NSo<AGbiMnSY=`?K%OnsxB^@`Iy?5nHoy;e1n5zu!9<`N`eC
zZ&ScY3sH}$Tx93DKq*{F?_enS_|P1he*|n7T!S+2@BFB`b^beJh`~TTp(RMdL!Rb+
zSZhpK=j?o0ySYn}rSQlC42mw^+P4_fAlKzuM_g*C!_=>A2sG@?&F3;gAA9B2$0<q3
zgSezpo!dSM&CkB%*>wi+hN9by{XHoP@#+ELZq=cK%hTVV0j{{=zz(4sO+P<1f}zpJ
z8{$O)E(b12tj<t3Grz^WHS=7~0-@?PZ+<l*^>i)mka`s@8c#(2s^L$5cByzblnaLO
z4hUYqAHAVxfa>h;$ve#%dvkA35r&E#6J*UW%cS2Uip58kVtF!!Mb3qV+g~|RCR0d(
zMDxRhI>1P-de;Q}oQjtv$??x~qlus!!;$;*02arVM6Z0M3+yVa7LjSbW^%9)fK{g9
zC@hYa1)4?987ka*NEB2d84Uuz%$acV(Vu>L=3`spd}3AcHJ=-?Q@_BZO`n15pZ4tA
zy5ny9F{T>!9;Xz$H)|B!W}RzvaU1=rQQmbYdbsS2xZQu+yeWwlj%Ks&7%M+pb2H`b
zbf5PRuU!kB8~M+jZ$k=WtX<-?28a5rwE8w>kkgJ`N4p1%NSSVaR@rZ|!JkmCCk34?
zEVp`D?b{bO=fk6Wp;Lza(hB(2MS1n>LygS0J?y$~!La&k>^8LVRG2z!WW^7E;||%6
zV;q7G95%UlrPR6p$||dZ*~car9J+n0N@L1A#q0VW+wGfLUt4#k;gui#2exUevU=3~
z?@j8O?rY`d8GmByj-UgbuEadi-!V_Eu-)>>>q;M2ome|%NY{RY+?VxzRkPsCy%Sc0
z6)%R_S-l7}U028b^`Y%%s%_T{%Js=sx~{g*aB{<A?UzP&wLF?&c7D0f=JiuoDEr<$
z)U<Bd*^lQ({ArY*())@*RrI0py{`;^p=h&tOx!K~TR-Bgt7q<<qVu`1FvI8e?Qd_s
zjoUl<^)^4XZLgFk?EUbhzU|zEBXREM_XQN`)oEQ2dqsQr&i8v~9(enr^$sH?#SyMI
zHk)lzKhZ($rOG%T?K5h+6W3fBRl1;6K)mIm1~)cOXt-8ujr*RNn+-jt+1wh|tLK@-
z3nLc&n6uP$ZbqilmX=*kjNPxS`e#v(0qH(nuXz}>a9XGIX5SId+rvK;77p~Dl<_^d
zPs=vvMnn}p@GnlEos@Uy#+mNt54&Z%_RmOvnDc9t+lIzEbKAwomjx*;X`r!o&CUG%
zcl!E;b_h%Tx};P6I^k6xtbJ$Bjz8;VSnucB3tbyu-4K~{%lhI`p9l;UrXAjL-RgCS
zzvT^>C6Gr%xV~_Y&S}M#GAu+@x)`6;kEiO%oCiTqvm^KQ*#w<lI5a~1>GeA)t-#1h
zAZCC{k&KKgdopv=%2qO%7J58j?L@jfx&U3k#3Ela%M<Q3)iOqau@U@esn`bti_h4)
z3yzj0@<MEdz0(V6CAKgwTLtQP0TUvT>8%@Ai8u~H<4-B4>yH&8JSKa30}`kBs>47r
z4>VvmmberA@pk|^EZ53BzhFGAi>v9YPfTF>rZ>T`P5NzTEc6|LXEe$gHe^1y%z&AV
z%`d+Ru~t)F;?pya%n!(<58-pOm8!qa)ya>6_v0aA{6Z+Y9qt9y>dr2skD+Ein>Km>
zP0(`*9F_^Y0#N5-q~ao}w4IyGU{nlo+3h&$7z;?K0eyF9+LiL>cJN#3prOF&fQ??v
z13@P-cfL(=DMmUF(8JEZ?+B#<L&!<{Z;H5>&3(RGnTlB8f?NVXd-I~CmP?j4l%EXU
z%AF$31T<IB%?=VCQSOSk!Kmb~#qB-HSR49;aa9CHQyEYUqWUhNE?o_ah}0j$Go``B
zYUx8zgsK6yUcP*H;co2bg#|vR-=B`t@}nBuU6^om#YVNsGL_nBy4bVpLxhncg&#ZC
z<JIiB4-jFBD0g1M+I%)jp-w=Df^Z_EVVS8j>eusI%qD-GQ%x9O3SX|2isW}8t_6T-
zA_~OPNhY?O*fi*&@5;qN0ZTxdQK8V#_Gcwb*)K9((K^Qee7Qlc6#V7M`vptKJfQ%#
zL48-h`J}kK2E>P4g?^tAj&WN{21Eu&w01Fm5iKHkX5YR$+F~smUXdQO`@W4>uKz(*
zMYTckR67gc+PfqjV*$zXv~>B<%jB6h{Q{%tB81vzY1x__Z!+=0MiJi-IJl=E%ltFS
zc`q>dV5n{v=M3OP5axr-;<l%F<SakU3X!`HS59)9@jI1<x`OT&NPGeF!HpO8;C}>n
z@n4u?e8cHge{ejo#vXuC5E}R}qmvEcVw_~4r&9kc-ZC?iH@bn#XJy1;6^%uiIRA2p
zB0@yLLZ!xVEbPmBAw$Bdq>>TcKBI1ly2f1E^852tpe`)qzrwi4#FB<KCq%KQ7(hUI
z$Khr>GeNwU(c`|0&9<BwbVk&(czSBBe7O@onVQ;Z&jv(d$%JzW>w8v|B~!--bLPXt
zgGD6cEMU5g!Ay}0d50pI7OhOK(gH#j_1VU%-`^gNZ&61#-wt;ai5?TBGj<RdDYw*v
z%(w1($-%(DNZp@>)E<0K=yqR5<V7&^U(cs<OsqP5VfSTasuOtzX>oWn(T*Kn)?#eS
zb4@N(MEBR*ox8iz?P;uy*=K`<17;gHY+cwZP5qA=?ae()&Gt{0wwz;>exsApdY8h?
zjh>T6Y*%b?!eVR>w+7D~Zr@i5QhpSgu$$8Sp{;A;>yYN{{j+N<n)@3BWY%;WdAP@;
z3uirysyx3<`TD@Pqmp0Fr0{b+G%Ut%+;Q)wo?iWc`tL@!8XKzjw)oYjD@mue*sNRo
zBqBJq#N@X6UazM6+Br>ZJTy3V>Cn24{`bx`Z5wNS?@INmb{cUvZkQ}~jeTkO^R!y`
z$nI&Sy)0|aZK-HHVBpJ+-eY@z{qWqldZk`pe)Yw}8xsl+YoB&AH<;zMZK8d1HQjNW
zBd(>LO`jc?cIR?#<iBBIOEOvwTj{!_VEZ)3&mU~Ynp!<*q4lEkp`rbca<;4Fc5=Ov
zu+wtDu8WZ?L!a0z`O<1w)Bugs6E)k^8+l~k;;mmcI-T#86>{rGAB_X+H%x94-86Ii
z@0&g<x&OFcIJfgu2W|Uet6TY|6-#5AB~H!vZIt5GB=c*oWpAIS2aSdqrbm{zhQ~x)
z%edpX?bY&LgDum~rF4F$apA)9n9Yqg9BZv<JS3@U@`yvtowm*}R@1C1ZvC?2(iXji
zJzCWtez<t?r^>BdufnZ~<If+SuyKmx*AD|1*FQ4hx6`14a&_0M=XSbH%rj_b#p_O7
zo#5l-=l4DJ_YnP8A2$rvesR8d?~#sk11=|?-MVFXC&x24Mp6;vC|h10dGNW(MOvr@
z)zPgzr!6s4{e5ZZx2&ke%O|hNJQ+5<Z{E6RoAbi<&d&OI+53$7UW-1>hdm2a9Q&y5
znT{_H?W!BxXNJYQm^tCgU1w!G)^rUDfV-*5c$034=duSqM`GT&hRP#5oyjy`c6WZH
zX*y>Q)_>v$!G7iiV?fO2_;GM1HJEj<3XEVbh!1AgtUm}O$M`L#kD6>~XoFx;<Wt}v
zq!5U67^5<o$WmLzkk56srh0??8oEC<a95^#!GLPijx%FzO?Zw|aho%QCBZv1W6mxI
zIr8)aK&S_JNlsF>XMq&fmOS?b4eP`s3+DX*81@&$QegipY(QdJC?D~pelszn#~_hG
z=yYeGtbQwI!fmDXfMxXcSKo|7gU7G%5qpoSGBd0jC&8*k4_ec!(H9t4LP%%l)P%yy
z_$d_)oOl6*na8Ms%=Dv6p|tnwZ+=6VV-RB5d!QQ#u{$;bFo(Yx7i*gpIww}0b0pO!
z23}ECF=Vn<M~1Bw8ldP^aoZ63kM5tZ;{hu7^iLOCXsBttmp;vx$fblqil*%p3R9`i
zA>|-Xp7~+IN!NV{liJBp9!)3=CXNB_ffylh$$LPUP&Wx@M%?emRC7N#8YXTj^we<Z
z;4N&YdY=JwBo515+VM;f-aigWAFBDmBfWGx?u?5#<RsCusQ(#@#=k}uocfcEW16_O
zzF3<%js8he2m+m6P6i@`1Ss)?=y==q)5jy-+WJXe+1&}PU~vIk(U;40B=S+5h8Wb}
z1PW^hJ5Pl29E$?%L!=(3qQ@D6pI_1!+7vi$;v<3C3WLroQ0-(TvhTL)(q#|4tkBR&
zoigvzF5k*ug|hD+{#EHDt%+NgM18nS!-q|FYNp)6KSnS_$<Ud#D>=?oGw10|VO9uj
zbQ+bJxa}YU6LKmSqckc(r-%b)5D{>)N3*Pm2!8_>`v%qKDb6O=9#g&X4h|RQ=hDAU
zo_uFSUME>-@D!Gz5tf69giolfN4b?^Iu_iAW)U9IWG3IjbfuY+Br8h7T9*?5wop|q
z)}0PVZ3u!rU+<%Z)-%^v$&>OfBWOB{o;VN%PG(+v6OunaoWioF?}SWlP35uih*)xo
zwNZFKF$%+K#fsDSN#tC!lKC(%#Hr^6Br5TRq1h8tH}NJDc-b_+d>q;f!G@vEl~PUM
zhVuJrlzGhQgm`&iDH+pvBr+&Xzz~E9##o!*mWe(w67#oS^&=Dl*n>mv9pqt2_hTsk
zIq9b*zENL#&vwUS2`ps@TmkUSe6!v9Cr>~bh0#Bg=8=1Y#9e$iM4$`wK>-fg@+7N0
z+~-S(R~DsPW6v4ajfYZY!~K6@|I>WHyqW=TE>n2x=u~+hTsOjFM~!07$=zXi0F19Y
z=Q#A8hQEgQ@x3cE%xVJL?YrGE>E-cd1~aWat=s*|oHY7T&ztRTeCoJl&Gdo|E$e$s
zcXGR%*)K>f``FxNzj7`uf7ShyV(jFPg9omxS=vL*Amx3vY4A9W>TY2jqY6Dbj}7m5
z>txdA_NA6}ju^lAVYlQ>c9Nm-5S@GOqmH_mxcPXbRo1`Y7`J)gQ~$x$hC#oM<#ZiX
zRz1Ty#cf@m`7fSE1TTCWd3|=%?%r==X0NYq6Vz+`DU*!Dfrh)^I{&H&YaCnMBCqAW
z9&5hmxL%u9)mhs*CAQt#x~eC~{0Z`FqP6{oQ?mb~v++AD@4Kn?8@xd6(&_k$zByxq
zv}_C-0uu&wc+}zWlP4##o4m-@X?)W1+VQq~7xz&gIdnvJW2;!NKNqt+vic8+UfDAL
z`c-YctxKP6ydBy3EI*xdXWa73+d4eDs^K)Zk!HWR5tDR2#{{2GR9@|~D14&bvRUIN
zdg+}qRZ+4zIcDwqunoN$f1TZ>->{4Sc2k^j*4wYku-wV%--Dj~8x^^5#u81Jz^Hn=
zK6Sho>ZJ7S@VnFNf{z7V((Zfy&b{?Fr!3zR^`|mn?(kLjQk;@=KV&`LV%g(i-#cUc
z_4PYs{m9EuKcQy2(rLfr3!k2S!>#tVj9TdY#p+G<l{4=Dth!LT_eg%y<_|BQygzHV
z)2}MP{!&Qg^IQ4G=M$$-dvV{z<5}YYu?yEm<d&S;(58o{Lh_e2tva6Tru*ixlUpzI
z>peU|uYU<>trv9rO?>%6Z_7b!O|sqMZV~F48q)L}M;(2r8&x%fG(WK)a<BR6F2!-w
z)!*I-C?*e0EP;p2-dF$?{x~{bx<?__euw?`d%#;3Gh6RT7{&@>Sh2Cng)?yP;sCU+
zVm(sZ8SZnFK9TmoPh;K`HXo=@DTo^%Erqgc<`ktm&~hiX^EhUj`u-F?G-NXQX~Ghw
z*x0BcC!~i$V>=1=552fY^ceq%IZiW}Qh33JAt`0ThsOBi=+LFPzn<aRB%LuQDIPo>
zNPN$Y8we?J5mVF`tJ4Q;${1J<f4qF|pPzJ=aPYUXX;HNb6%z$SzSO8|S5wg5hf68H
z3-xH$06XS!H`((*yWYVy6Cxh^K$Q3!NM)xx#3{}jqJ~3Cvtd?40xqMFdf+mRCml6y
z{jpuu)$gu++`n;MI>r;wNZV!^vLlG)tF$}3YTZ>#cVn<|6H{(lKy`!eHDRJ8=cuMt
zTpN4#dk`X_u9I8yVG!2ThG~F*wrSsfGVX&<HmzTxyRxwRhj`cD<oL0vnmB!?f_D@u
zFO)KNc}+&O0Fq*~$=D<#z8#?6VmygI4nOAWn@YO}*4kTFxB5zU*rTPPmPrZfTV^5i
z1((Dc4B5GmggADNV5?W>s?#mbYw>|@PyYoGn@$NT@YF!<b)ggs<i#-JLpo<Nb#ovu
zE?p<|Vdj>NtZ2N&Mn}XSoGNAe)4AP4Q6Ka^=In_pnSyi=SJub480hOaWW$vN<To^O
z6P5KiW}n3@X#qh#{QX?}p=OxGDQP>g4?`rIF~IR|-bPVx<1ToOZ<_*wo>c&y7S!?M
zvnIN2lh9FsHbh)Cvwa$Ihn>G~pRX%kt9##&v<uV74%`@{v}Y(@R&xW-BM=d2!rUi;
z8cb|7vhJSbw#g0Q^NMp^{jskx+jxVdNkrus!LU|kjR~;8ngq0@g3_ZLfG6lTzjEsS
zn=GcwOu!hN4dx-MNrSaO5#{;3H?z=NoCViFcl*topyVl1)Md}kpZIN#MTIE;0Qf;p
z&jYo<nEwE&a&hd$^$Jy*Y0A6wPbSz@=R)RPva53S1&gU3FMCb4W)?;sk1{7V8H`ki
zUwUP98Mr+?I&$a-!(Yi=2I$_6{;~MqJu3{8e^)*9p3|^q<)8)+>W*vL?aI2$x#3%H
z7bT8f@;0MKzu1<2dr#`JHnsk~;2{BKZQJ%x9Q5VFr0x;^m*y^h>a%ouuFcBX^Cq63
z{C38rj^=}93(Gxwe(ALK+cICSYwkbpxx=1>%yU_d5B1yOvEX47+doamZnBEm)V;EP
zy-hk3UpQaURoe3Xf}YXwn<rL%@Bg`l!iO}SgU?hP7hhig%cpx;>G+)1X{(bik5XK4
zz5Bcl9V=YtwQq6%PSHD4HGBKTZ>r(I?ltTA?OKHE&`LvtL)%8Aq}<lnyQ6tlMSR@S
zp`ID{-(+YX{!urwO|wt;*Oq=XOI`G~V#w`(2JT(@wk)UK)&@J)E?fRKvdffqBj%qr
zo7yAp;$Vk~6Mg27ZaHSx3FDWB`hlA=Pj>BhCZdn0LGb+L2OP_qE!BJG{$yHueVwqh
zQCk}MYzcbWwyCzqt)c5ajd*jt(DZzLrGLXhie_KEdGyQFN%y}Szu7y&uQ<e1B`_#|
zOHNnohk@Gj?RP|-0HfTvPDe-gZg$5{uD{d6oVz+X#jJ97Qi}Ze(L6DCM@r--g^n|i
z?o8IKU*g*`F(Z1tOS2Vf^Hsfrzw*Q}3P_iwV{H7mSF+diJzsF85zQJ@@$vh6!mX_X
z2RkIlWE{L*!!vCX^O{$vHS-PmN2UJtjI^Ak|1#oXDsVgc9=iYr+TsZZlsHZ2Gfxa<
zZs3}>f7spxtOFQNwrg8!cK;}H?l607Lj>W``T1fz3lmf)Nc~@n#yq>!^dR(AmKLBP
zY&a6mU_4{SsyhQ?shpTpvHy1>7AofVFJ{9JZDYgBwsdW*a<8HoOK~h-Wri=d5y+|F
z_upFi#!;Isg-;+Y*t#3Nyt@O<w-rniRwl1V4LJL%Yy7LX)iMv+wv9p3z<$#l){l;#
z4K@WQN!(UALCQ)&P?u}vj@CN<A^`47Db+7uByP%prgi@$aS&cxnJod&638QVR`5^L
z)#tXXpS<Lb)gUXTP@GSrvu$G$fQNr`d!Xix_hWMO-LxO+ZW??mHgGALiHS0Kf&UDj
zcfX%s!;0sHC=M3lQZJ&Rv6~w{!kDi9*vq!67KKlhVZH*2n7bt(JY%DSIC8PM`C=Oz
zW7@W?l9sMt;xb=(K)t1}fqD8zceKuFg^FAGKIZk|&0JtIA(D&a%FgWh+--_@96Ext
zY^hS^G~)OR4VZ<`Ka^8YJ+>B?Jrj(6v^h_YB)Swff~Z&Pp>aS4vBpT}cC@Rxs$y`T
z-@cucl~3KW>=R`MbPV45@e07;UP@1dFHhDedCtiHg|`+{j<2LVlG$#jfI-w<T7!G=
zBgWBB@9T*Nzq2QsDu%~3O6QyysU4y<p{y<7Fty>sa%36fY&X^3Cv(KyS6BS{cdt<o
zpB1*+G%nVs(02FOCEP^vTS9D;>|$~%AmUb=2YdDLnlRU}!I9N2f%l#bsuvl$cx~>Z
z7e}2nl`03m4KT?VbULryXZy9oIvAx)9I0#l>F$Lh<p~PmbIw{`=z6x7V?fuF4dcx6
zH~WU{{M7MN+@_>i6I%V46V&HKpVzC>8&^0M&O0`<FmB4A8NCeF<h*RuJkC?Ueq6Fq
z{gUF2p(<<2=Pq;VcRSj%&!*yw@nc+1ZM)pK&757E`dmvH)*$oZrDMA)=eZ`|xxOKN
zYW%qq`vzBSzA$HkTJvaQ-OlaT)^&;8lz#Gf=IW=f!(X@A`f{%2-NyqQUH%>VIQBv-
zqaX1<4)#!7wWPP^x`K<#pA}i>*fjc5v;5@THf{F2_{YHaVWz6@lA}{Ll_ofPb$@@c
z?$(g2sRt*1Z!k?K=4HdAO_>9F+)=cgyx@as?^3^m57i!x+1{|>P8W}w6&Hgl7j4Q6
z>FQlqttzL%WsP0Up6nh`_BcYdFmb!v^FtMmn*+z^bZ&m^tF@Nb+7-rwGjF6?J#2EQ
zsk`^Y??I|PHszk|dPniPTK@cQJ16a*0AzruSDp)SdZuOPCgrFdXfk;}<g$;i2Tb1o
zyGB9$e_$2u?>+v^k&XUqTz(a1uhFQ<`R?4zJ}&o5NH)jhy5Q$z7)iG;Y#v%GvCj;{
z6{@yG`T4+XI#S6;OC!2A1X)+sLxA+-hQ{yy*#PG7JHPxUP(uCGN}bZw&aGRIV*!cq
zZ#brSc)Fee@Ys00)pV$5XR}vpGtmq*@cUwXC;F3F5c^b{PMzGc?ybQpEMcaj&1fXq
zHQ9%nb-~O>Dgncz&Z)+&8(v=fplNwq7=;{}CWAHA)EbU$`Nz1wy7xE-hi|=_Z1SD<
zGV0wHG62e+U$KlLB^Iw+M08&L(*?_bP`{u4`U3nSaSfI!A{lxzevC3L>#MFEJHpZB
z@YC-O-&Z^4rEj(lDjtC-W77Uv*NxGhTlii6ROVu&95QZ(iIFl1FUaRY?Tz^59(c~7
z>$?`!xzKN7QTX=s!f}3uieuMZ|5=S3-Z|-IvfG~lLBoz_XrCXocQJr^*6;0DbY6B?
zh$d=t&&g6>2_QtldVbN4f$8rdu46GT5n?d*k<le8E+*bFlZ^>D#E`4{48K-p0`U>b
zR}0JfIVEX#O3d5+Xz8dWdn**OwLA&m?NIe@r&;kvOTRw*m3`m-G{126kgJBZ!T-1b
zlkIvhc+#Q$OWWZ|#pS1`?$Vh3L$!W=-Q2471*W@uWE^vP`90TUg;VN;edoLG`!N2-
z|Hsywfc3bBYv1PC5;A2db3#bwlqrPJB+_6g5t0x^G7lMxBq~H{P!UN&8KWXf(lUf3
zN@$cw-|wom_xHZX@$Tc;d#^?7-}8T-`?>GyI?wYu&x)QIkGI(jKaug`+2z<(9{rl!
zs(#o(;q?2Io-6+GF+4wE)3rfHQ`ZJJx@@rEdH9_8)2D8=HRwM5@%=WPL%YY!{q!qt
z!ZW{7FZ|Dbz2?wzba=vn@RZkSK_5PtDY{0C{?)t9z_z7VB3F&`Y&U1c`r;4gbv47n
zb6z+t8Lj!lO7me<<jO-IHxx}xnzz$q@h{6;S+gIsjhP#J^K7T_b<R(DpQtl)eucB5
z`&SKpyD!W9mL~M<_vdP+ZC0DMeTskRcQ|EVTKe0h!nXYQi6LgNcRQ9n{F6Q{=yl~3
zgH3g(44iyQcea7goq%D1YwebP%-Y)BuKnqcnjQK!OYOQ~<bbJ@Du-TvmKEGBFwn*L
z{*;R@SB^axRyM%QXtIyd8NGpHcO~!lUOK!&BeNo^i{JH6A2h6-{1r;#7oX|gWSi24
zLgu;N3D3ac0(WlG$=l}FHm5sJv_5eTA_YOo4ST*P;33FG#=F4tJ>7f2r+9Dbik5)4
zYgda-h9O^m#P;!}r=nn|z%^fJ*r!Q7@-)y+z`+P<LR3)?CPA^K(7?kBsO~_?i&<!U
z+qS(6O$Y~b7D6w7Jpzp21x?pnVvqsLFwiaQz$M@Eu5UI_6g)@>MI>Y00VsfO$}emk
zJ8{B<rv+u9%hry{ZC%3Ti}>X&y7YrCa?Xj$?~!wZy|csClx0XZ=e$o`!}ZUbi)SrD
z0md}P$I!1`8ve+mDv_}mz@lG!dm?AqetU~b6Ex2YFU@_3ox$%y1|b;6%-kQH8u;K;
zzxDH4v}~EnEelpDKB^OkMg{4_5Xi}0|8$kc6833!&O!5*KYbj%`K$zdW7YKM4RjB%
z+U2#c`{>bT7Fwqc6t_^fZI*`!fe9;%sD0x=OW70`C;nNi#NYwu#G#u9C2NQuEaxUe
zvJ=M6RA>M-g*{B(Cbz_U_i$hmt|w|h*vdfFW(0xUvx~O$+Ss{$`(02xIsj&g8R7H2
z!KgT;tA;mEy8OB6wgfg7;l$+p1hT5P>H8#5U*N1M9IR^X#N?Gu%g|!_(4j+dv#qw-
zcN`6j!R36vZY#>rX@HtmFCSj#$$iQ#(QLNs7skv<Y2mA%CoZ;ULRs>2pv06=2H|A~
z_8h0SF7{)mBdUAWMm)>P`{byk9=We5?7`6WCFYaH-?O_I&{}iA+nD2t-eWhv=-A_Y
zTe}v4wtoJmUzapIIjP5m9x>|%ud$d|e~sG}56>^1FK*x8qy6@APFwfqr7j2?zB}bi
zTkSRb)2+O|%<C4_d}hDT(_==eu2a1dVLPs8GtCPTci$Vnbb4CYcKoF5>{S~rv`zOU
zpEC*An&WIaXXW}}n|(c2XuS)lNWCAUTCt;BOrG%t&x$53O?pNTm~|C`A^*Fhd#`d^
zm)VL|mH#eWQ#|kL{jDk$<_oS58?xx>zAmHR2S$zBt~w#zY_x{s4eQ+B|LPj3#LfON
z>CCy|mLU^w7uG##G$*{Zp@!?qd6wTiy6heDy?t?2pHs5~GMlYkzDPxTLQemJ9$Bkj
z>KkN*WV>DqRrGtYUVmGimHGLP)DP=D9$of9{c7@`>zTTR9S4r@Q#bP5VXGbs*Z796
zpR;w6*|DED=IBH(j^1H52|ebA(u#w}+F2=&R<8H-a;!&moZnZiuR+V(-nE&(`g3%>
z19qQZZoC)XY?!59_fc;S81$VTUzt&~@>UwXBua1L;z^%;NA3R+hd5mW#bE~)xVT);
zj&O+$De-}ov#P3QevKrs3rqS_%l_lptB67>wCz;#;2EElRE)0$!SiF(Axy#7RrEZ~
z{?dE?>9dK9L+|9=5h1Gx)564*sh`S>mBg@xs+J;x8cZV)y&t4Mo%Pi0$fGslkw+(5
z^?EpqR#Nv+;9gTXRdx9p)FcCE)wqCeF*;JpqO+K-l*xZ7Vn;C=o;~}pT@Uk4{C2{f
z1uhA(pT%W98S`Dt0ek7mG!hh|a3-9$W~YG6@w#4pJJUqlKs`olR0rmP094{F-q3Tz
zyJbdNF{E?)dPlF!<)F*r@xQHL-9VY5r2>d8h=_~W`?<7wT`#>wjNl8+pKr@MXwAeQ
zzWT`Sp3iN>B(FhYA10+?t}!u~zVmsG>AvE%H4-zO-?TDn13ss2vLB|@QmAX*E(ZH2
zx_(QtFhZRGB?4+DQ(<8FAm9WErcw2v`cj{+8Q-PB_|p_ASTh20eeJu2?Q4o_V}LTW
zdR&IF+eYkBK-^RN^@zsKH~MLR$rq+m39FttZQ30?b1?gl_p27?ImRz7t|%BCMA`u1
zBwuB7PBBOM%h)x2Il9Ly>Y}T~v`<*?$cxAA34Vf<$Ez+{8EHfO&+95p7_-|dW7w}>
z8!bPPjZq$UiE9`gxAeNdgz0kz8EGRLoqXJ=V#f(FtLvHxxJBhx!O(fe)hD>|()PjI
zwkF|`A?(}SEHRAL`CHLb{+A6kfh`@D8Y1D`<rilmiIGB)O68aA-~6bNe_hp4qp~8O
zP~n_KWm4VLpuudTiB{jT1GN{sHAJd_;iZJq4o%g%%Vr#5rt&iRUpIThz@{t1uG*BH
z$=G}<?uL5Mg_GM<_w1*^A5^~i_L1aM=bp~nFh2L~afhBBLH*;8EEv{&f9&I=&kY-<
z%(u&l?!Iu+Zg<Vdvw6Suoy@y6+&*)G>8{;5&TaM<{XOBKnoy$L!Nb^Scd!0Hr~yV3
z>z9RnQE0F<J7H?J(-O;HQOC2(M~8F^%w2HR+tsI=<*h+SKdn<w?Go(jT7Se<%^_7M
z7Y#pueNVGz4(ObG7wye!v`eA=g~SyKds=2jIeBj%ajWgMlF>sEH+B5C{~iF8lFzT}
znZ0;sU~T&HTK4^cD<Ai|x9n2KhW}=a80_YAU|@*-qC2|f-HNsZus;+TH}V{M?M&d_
z+*iIWP9B-{GidS+&pV&$tDj5vk5O`KG|S>jXiA6E#&f1VDqXO?-_g;V8qe96_VlX%
z)`rO|R*d=FM}0=GVad~Hdfa<z+2NG;{GJI$-`l61-gVG$_Z{GO7~whTubu2ye60MW
z{@}*^hh>is>^QFb;`{1FL)>R{QFNc#Q(;l-FBx}Iq6RwoyF?yVxSZgBwwvR=UJbTR
z+Zo_!H+lJ&%(p48m8Xw9me*T*Lh`K{tq@jqP)rY6wsLGEzb)hY8ee=GtB`hCYsQ~z
zd*b36J&W;MRqx-hogOA*y6pG08kg9se#7BD?1Haf4cueraqG;2Y=c%t@dK7Dux%c5
zWtc_CMQyh+Xd@U}WDmGa3ZHn|3o(cSQ;cGSOah)mt~XUrFJ$edVW`dpKBbH0r9Ok?
zzeOjF20seTWW1OSkxWzvsJI8rrXmk)4B3}z^IO>6)c_Plz+@8kjozE#@5T7xi0KRO
za}W0(#4yxIB5-6s53?zaJw6Ll!V?Ld!@+kU+X?TO<c;8-KjO{WwlW)xprr?tBx<H8
zU~z#a6KuPQ-6ZwWbIq$>8IlH_$NusOPS7~Sa3>1!BLv$};7#LWq6WwSGA(uDIlUve
zKQ>}tmM@G|ju@Y!S^;5J2feUCk|Czr%F1xNizQU#5kM}w8Nd(hOz!nOq~-XweAvmy
zuh(T-$R{xD@$1I1Ven}q(DE-9UKV2xxz6R8>Nw6GxV=DyYz~~iPT@0vb=edMH__Pw
zOMf8AI1n*CSj~PalM~{d2q}FtO>ecc!)tNJ<TGRr`iVA`&xTwt)1`z?ASPv^;!Wgh
zPJ$8!pi2M+Jeg(Ta~aIGhU*hs1>>+eg~~ef%o#rkP)%biTE57%Abuu1v-ry}bqbBk
zh}nf86IYTJj4$T_V2Mq1F`p;{w+w0nuQ1bVk=uWyE~O))(9vMS3)oXRGlo@s`qI1_
z(NFg#^$=kVz?b5K1R(N2Upw4wDatqrSjKAwh1w&ab@4Cc$)9IBSL^rJ%i_==)+DD+
zrNXj`4|2OT1veDYl$s<bz^I7p2r4xR^@W`dVD*WS5eul8{N0d#xg1JW4-Byh;b9`o
zUI3@vWLpByWC}1hA=lfKbV#rDxpT*;q#7Rk2mHMTge;yjV8PvS%aLJcR<ZxOlq7B%
z(TGf{ho*I$3);TBo68=K${#d->7?Z#GeGE*htreM;>FD8cLF93QquP0@}ChZ@YeOG
z1>>S{yaEFe^I6f*c{7}47Ln4z=Ac@l+`VM|s0}d~=MGk5rY2@YuoQAZ*7KI&?IjCY
z<~gYUjf{<JtYoMooiR@u^vi!+>NH!7+i&0iDtX=<wH}_Hh6~SP!@iA&CTaBILIH2f
zW%gyJ8JO(Mv!!Y`8`H!e=xwd31foPGP=wB4Fhl$q+j_!<%38xGcy_ya>WxU-z!)!!
zECwN$8PJf%Hr~xm^l9?dutlJJ5&nXM%An92558W|v<R$9t?~@pBAI5<MNXaP-Nw8+
z@?2EP1k?JDIokVL<sTY2x;av#R*g50oAbw{ulL7Ag&xu8+MOG+sz9r_Yu@lYwJCk`
zkFUw;lE1^s=d@N<!!}VZx^`9?@}=Rn89g%2x`voDPH=BS*OtpaJH)p8r%TD~eB;mQ
z4`$rWA3b2Q$3J?vjIT7ld{Z;*?D^@7>yJr$^HFj7+LbFl?!9%pK_}N%XH_eA?0cx-
zQ8ndemz450T|*bnaO;0yd1bdJM|9iR{Ij#$;~Af$&yTi#pto1$?9{|_M)h{Q33Sjj
z4X|*n|LlxX>FBLj%UbSexcBRmAC3d80?dvcdlu6u{q%{*P2;!Zdnjo*_KIp|4Pk0D
zEX}(taOK$gTuYac-^L$nSQ$M6m2t!EPdd!cxjuPvN+XZ@iCSH>zw}NCSa>Hv0om}W
zb*ooAZw_eQ>-^L{W0Uu7Nq{IWHQO3$V0Pkp+G33+S3+!6&QI+zG;`nhz8ayYyrzcj
z>2-Hq%L8CokL?QfHfs%K>X&V;*fCvaM|sOl$J#*e?wzpLsjP)vdDn(pOIHjsnGk&?
zB5aDnf@*_S9I!@_Ck}qp9Kl>l%++B-17=;cTYV;@$y$5sN#}QtopQta<AxAZlhkWt
zF5KJkE9u3u2EYmLi|(9hizND5*uI^^%UURUsa*+Ml@Q$FQA*jOAx*B#d>(emu0dVT
z(1MUQ5ewadcHda!6QSR7?F@~2^>~VZzE%4$=D|a?Q0lbI=XB(A!%1}=_ia))AA3S+
zNdBy@AIlT|&KNYXAm8M6&wC#VtP+cFoa<8ZuDnv?+iPdPdFxyqueZ~f>9Wjn%B+m3
zD|fc-rrmGhuzgoX6`EDs_0kJHtZ_+$VPd8)PD4-vT?598O%`n(`d+*nrgHqCssZFC
z<4Ho7#f!kRmte@KQ)#*-?t_vXmw_4J`)qQH*%<BaeJkE#3%w@uYcvAN_^sA&rIj!+
z=Jhs}CI~T@og2sQO{U;gvs8fHnf_W|@@xyrTt?BG;<VMLU%#d(5rA?-Xb;$H#7sEa
z>_4-6lfHGZYwL-zDkdz<DG7rGnTQIh8`~L9OAm<x<-kEhIeFOpRZmaXC2_}^OJQuW
z&X0z%am2#6)@_YGe){yDJ$g)dJOF#&8Tdd@w|2*NAIyMMBVJ+|y90x0i_!)}1C-D|
zKjJ7BjbxtD*Z^5jabx%-W>ip$q(gJCuv5w1$?%S26S=Y?%ahS65}Vu!5<!YDn&<o-
z;$z669d4-Xh&?2F3kbr?R!?<ks@bu{X2Qh^@J^qDBBPx77mTLO9uH`s?GZrrE-oz~
zhV<ORmS2CR>fQsdn*c%~XtPa6zkj+^6YNFqFhe(xvpCO7JP$=gRsJ%(6P})_&kgOO
zy{Y4oNB1VS8VmKohA82(NF!lCq)6a-8yXp*KO<e_C;*4W#ozm9p8q}n@lBg~eXzzK
z7Oj1<`qqHt8z^eo>4H1?sVmlmB<axi$9^(wTb=#|Lox9Np{(aAiGml~zCZVp?%kUt
zH4pswZSWB`#*by0RyxZQ7H`3OggK0B?{{@J&g??}1LQMx#tdVNOeln*L)+p$&FKKM
z$N_=lmW<O;jPZEFvQPQjM{oLiV9y>rIMcCw<k~UV*7fX#Qnw+a#F9G8H#4+Q<6klo
z9&mn7z-$dEGG+!69)_}6q&i)z6GlWxSHk^8ioW}eecsl_-6ZqFbYMw~inmq+&8~>=
zjD$Er(TjT=F@D_R2Ak{^5R2si31Jt4lt9vi0cJRu1qS5{fIPvRQ<62T*!GG;-wQ!3
z2LsXsK2L%wAXw<AkEngdSL3M2708{X*TK=p^Tf&v@E?><gs8S(w>s?E(wA5QalG{$
zKD@o2C#zU6FuOi6xU*o|qGxH@4N@BT_9=%e9ZcAR-{OvpiH9xo=w6M+uVQ)gR?E=e
z+_}Nc27C5eojfoGGcxJ`(Nu^x9A1o!(unnqsA~V@<3}<F>D-y}-$?IyPGSdV7CuK`
z*Nl~uF+pR@7<{&-Gxq!Z(z7L(R}<JGf(hQ!y3bF4%`J>%W8qZ>p%>W|zaS024oTi)
z^>YJ_-z?_C$J5c8EKj5?kO(3FHM_MD%AqI{sbaJxtTVGiltv?hSI4qe83Ut?BF=Jd
z_kZS&qCVx0<<o)RZuyJ1l}?Yem~FQgj8oK={3|j@!07wpaYH9Ql;&P%{S6l8j6Ozz
z-{Xr@HuI~;<c(Y#9*|jJ(*37nwfcw$$zGF>+0YJ~B!@Ygro?w1AL~0fecYwX#}nOL
zd=V|VJNlfN)UZJxC;x|Q{7&6H9b39!y0?3;-|a8w?W;PYs%_fj@u*KHJ2<A~o>sjT
zfBCU<u1<X9*FT<{k{*9rVdHJ<7<*j1-=kZVz6E{r#{A6njn}YlIC9DuuT!%;N7*`g
zH!tjL8(!aA+33@vQKpj%*1Xx>|9I2i?xc)V)jMR_G)celAnRvyyM_N<q3Z6K<?$)?
z{;#A#)wj%3M*206ed74jH_39Gdw}`VeP7Ji1z+$@N*enr_HTaq*tU9}Pn;vxWaLeF
zHQlopRN(2q>(6Am-P-7&&fVBK?s8^5WNygueE|Kpu%1h*RT8qNId2LoDSKRU;EXBR
zVuyQuxv_3QEB|>}FW23&EnVdQEB@q~1J1cCjk4C6?i!E``55}bJ3tl2?hXN*@|vIu
zKX299{A<PLGm8hDZnS^w&996=$<!?UhRN;f8N8cS8lTudhiv$<fI9VoluGaac=_eo
ztvQqW$!kNrWy;vtHs+tBt6t4k%ni`6-5an$|4>{m+%b#-a}%rJg4p{2mL2b>wX$mA
zJ<z>Qmzb`3Z&!V{dE>Fp+c#;t;w1Z!_05~FvX~lN^uefYqb3UPviI`Hs}|R9(8M8^
zEw4JZ>5?sV>PBdR3rI6!4%rLH;32ZTjo-(bt9L+M6v&%w8t0yO&pxIE8sqG<rN&{0
zF<mT1n_t3(KgC2b%;J8XY6B5d$k6!h#P#{l_YzU_XXmi%8uBe|pLEH%4?HW|A;Vr}
zF`2pUQ>PZ)E=u`6^i<!?F55D8&oOlf9Hk7OxU!{vj^Eqw4H|gVsavmt+7$45^KApU
zW*h!7^W(R5Tr=u+IwuCni*Gkp4h}J=>wH8$dW7@%2Ahh4MK&TPeYhv#X43<_OXU1u
zQs3-M2PL@q?#sGS(KmL#W!>NV``>AINwHtwRR6>^%l&iG-<&f1q&}v))fR<`O%{*d
zzi>v}kaikb4VoyZ)Ty|j%X5qL**bLG7PtDjUyQ1o_PJWOUW1A}{G5!9+-_P{AL_ig
zm)@O1C*sP@!pp5XTp606(`w$as;FUpt-|MQG+EriLe)LsA{&mRWg#!r$#(s;_C}O<
z_E5LH?S;x0^Pj3U^V_+hS1ZpR-BnJv9`;#tbifRQ(wSc$zx%X(S^M-B2NVXsX{n%+
zkcE};$Sw!B3~r;6&~BVUgBe7+ZTICFtBm9B)ccdcNDPo6qkgmrn8cN(wz%S=&SzhE
zJa@X;W~IK<W}R-Wd9Oj@Q<bQ?e#@QuOzm*7MN>X_=NZ*zXcxSb+bK-0*Wg-<2ICWI
z82M_0nlD@X3)~vIg{ZcXUuCLvC~^DU_p^K6YRvk&L#=T+>(8OVVO(R)g*2!b(_~K%
zxl4)NlQlehVTyLxW}g1D_WZRw=qmH%=hM$**wug0ogb?G^z*G1bpPj{|Mw58_3AlS
z{J;J*V5)rK|NhgOe|V>(H%^i7QhNdadrSI0vn*^TKbH__*v-0KlLls0jT!CProtf>
z;bijvf5e|DO=~ZC3iqNWt>-{5JyrKM3X}exIl8Y$b?RHc!~)~UL)C8K8~^?NwnS^e
z$*V(*lx9q+@6&m<()01yj8^u#KVEOtwEF$_PIcd*(58pS;gBYy_T0?cKDJf)hScR%
ze}B9w$g_X-)%xW%|3gy_t-1d5dZtU{y6o`x*CT(f>*v1hzN8Q=7(BIJjfXn9KIbr#
z|8RoahY!d|zb9d16<2p+Du@}DK1c2qkRypLpjS<3_b>t%7$$Xydt<s$^@9dB)?2pJ
zX}Z70_GeH33B^ZuDwy~OEo0xBHtu7i+2!*#YWeeVwa!2FYb@ZCAUm&_M}&=Sv3loG
z{UdE^TxmWyihWSPG$WIC*ab%K?jA9i)Y|p!|L1ST06t(^$p)=rhfVd<H1(V1H><H0
zN}j2f)wFx)mE~uy?g*;M%HZ@paNy>@cVkae8W@}O*3!CRn2c8)xz&u?;y!+yK*>#;
zHmQ|a5;x8qG8Ww(J63o<_~ID*qpYlI`u7?uAOZ$zu69~n`>07ku#q>4o58|~gxhrE
z$h>pQlmKod;*#>*hzSCT{51dJipoP!DePPkK49IF0~GNd6$KTQX@xe*Ezk@xT>znx
z@i#<g3kMr(k1sN-_*#3LqxH8DYoJzW_F2h(_(@@boVPbHeMJ*1*cOhGqPSq#p!u!y
zc+jJfJ4`4sz84(!!^HC%sF*A&ck+$Ts!ogji9who8xtP64@30cz1i+Ji=~o0QuPrv
zKBdmc)Ug+lk=-Uuo>~n;9S@Pjo4xqb+|tabs3=YYEQCmR+xcv114&t?(_l<iZ~F9!
zCML8g^|z1?%iIDFebJ@4zz=EXW%vuoVTjL-St0nVBDn-k$4o?~oRyS98@J((B5fCu
zk5e2bV+d{(P`}_(bIYH{#@|wv<Z29LP=g2*e#}LGmJF3+yhn#XFccHcT2-a#ns(3k
zRR4~z4tu_O?7DnKdLbcE#dmHCPNo#^3FsNG@yv=!O8WoQW{Q$AK5AV_J7l0R#_(0!
z+T}N`)>YS=m~V<6DZ24sz1D3lf}~L*LI>3$nL}Ji_@eS8fTVzwI3n+$n<CuRny)LS
zhOdFeH<9U%xJUyD5w7V#^P}hrd*e|~mqIThj=or1BosOgW%3jGV@I9MS`K|wqOd-Z
zSj?HeBe&jPbcVi1z^f~$WJTH_k+vMA2=6~Y6W#x^wr0MNAYycndlPdOqWc&0PNba3
zK_gw)$GzE)W43r{<B{o_?ah1#M`X>k8}8DKp4NNv{7djx#bcCjoW|7TPpwENki<_2
zjm8q&ak`bt2b=%V0!#&2!+d6B9S8-tWl8_VPndeX4r$gs!Wk}Fa53Q_c!2Lx?pBNa
zIK{PiUSjP+$Av9H&4>%1E@ZN}X8_VQOt6nR!WyRZ=rqznMXWWM!;neVO}Ms;h70(y
zC~f+n)mSm!+`K0=6b-(ivGKV>%cy|Gvz8H4p|S|2o&ZD)d>V0UZ0*Pfy`e;lOM4{&
z2{Idiu7mLveuJnvC8?8i(~8PU!#JmvGF10?N&P3*cJcs)p!WS9a)Hs90qv*9E;`S<
zM=yXOmAcEDnng3gxM58k!l!xRbN&_`a{D3hr>ExxB46+g=}w7EOlSkTL!omRW}(kN
z$FJwrfaR4x03|z5+mhg;a+fwtyfyvTc^p2xB|udyDcPo!M%eG?wH-2q5flr1Ey_t|
z4&N0NB%=f<`+AU^8c7{Z^6Kx5Cu|)iXQb&uy4poqSs63INBm-8sqy2(t5CW=%|hR@
zF?E1z6WJiZXwUJmB?*8h!wgKwtd`e1az0~-W*>(r=zMy=VLCNi#l2y(WLqk@BhUk(
zXlUdDnIC~N+s;K`woAMaceeqqL=<WxH~cvLSDP*zM80fWgtoRegNbkYD~J}lgf_M0
z!@fa|5L7k)%b$s2<@Bak@7P!PuP0+si1}q@fyj_Bi9|gN3Fi>hO>gbmD{nu%SgI)j
zQg(KsrXE@D^?KC7Kau0?B4fp(00u`#69ZsSyr@;**{eNXMb&xy>p_jVUiW*^<APE#
zr)%CFQlAVcic8s=@OTiRB`Y|==W9z76NbM&F&|W^Ln0-G;JX_Z_Gp71BIO;&g33ax
zEEBHeROa%sjmay<m%PTMth`wlJO-I5zILr5;QA%wUSz0=R)-lKYP)&h-$?Za@w?rY
z-^7oaGthDIx{+N-MXU}VP<upn53Tn|0!=#5P)mdt$bTb5`Z5E>(9joM?c~wvvhT6G
zxZKQKs_Fl;t_~);EEQ2dFbG;3BH$sr0AToq*TuJP-D1;a<Jz8>^DJ{EKHgY5s;UN?
zpFa_gO{^sE;;SU+Hp81B&-trX^&Bu@#&>rkMqA&_NazbZ1O%@3X4~A_Lq4g-dwyLG
z=r^`^63|1B5v23*uFr~A=hGhnyioij-)N07DkXGjy})*&b!PDV#j9Kfb{=ctOL{IS
z2+NAO_P?keq;3~aVA}Ynnl1IyWyP{D1oGOuh13asRd{QGK|0q-rqyFCA=pm>IqbYF
z-8xYn!nsu6gt*{47QwmXXZ7G%mcap3*&m2wicigT^c(SNa_zN;P8Ap2%$68vn#I^Z
zhUrLRE^QVz8-HWqROmL=iwQ1kNPJvD?SZF;u*F9HtL)}P5@r!3ta$13Ue3Uz1EY|S
zj0~!fIBA}62Mbb=5JC&Yz#p&7u{c*z9Hiq*ioUaGT1?2m<&QQNf7GLK&WoO9+nilk
zRFq7#3z{w|PT|!n#4lK~@(9yJ+XHeT!+yW$jW7Uteqr7bzy@MYK4*k=z)u@=2WFk&
zC1rr{b5Ij*&T+L{llj00O_}h&_V0FbBiuJ=`LA)>5F&Ag>><JcA;_s($EF~rq)nT$
z!+7A|U9Vof4S*Dq4hi`Hj>NHmJa@Ncg`zM=+;v0<DL_u+@irl&cmdQdtM}|OC6*l*
zXEexOi6J(`2~RlgM<M5%H%~@2PGBnV`OQ-73V1kz^6@l3zrt2n5r;|{<v8-_-1>N#
z^1u0D-Edt4;RE?eG2EAImks+F9w6PIF23$%E@Qzo*=E?T@NDN6Q4dHkDn187jsXrq
zZhXw}6Q5OJ4G}kw-FR;Q-S;Z&#|-T$bm;KY+x@cAfd|cgn%1t0>EoaE%AVK6U}sig
zdGnd8euX6kZRAL>e7=Fxn~<%v@BNlr73AcsG3Yu!X=b{2+^gwXny1#-Tso>BUQ|{#
zHgDvUOpS^~K984h1J%Ebt|{bpjI2p&F*)(7Feo_qvt6r+<_+uCt!tQKQu9mA=NK+E
zX<`rvh2uQ<R^3i5c1{2HOs(Ddo;9__u90HkoqnA^RN7pc`*CQ8n#by0<AiQPu-1*>
zO63p#TJu*W?Q8zZbVmc0wh7kC6%`dzA3SUcXOGi!-&2=syf&}(IQKM^8lS54Qr3##
zP?zZ4J=D)cEi?4&{$EH{ubN_T)QKQMz>qzI`xu+(&a}zwh7hAe8a!j(iiU(o^2_e!
z)<y<TpJ|oZ*hj6#{<C{T`!DNNi3WOf_e#w#RQT}yu(?f5-7o*=_2K`iI{BA9ojo7r
zI$9JCsks%k_hWSst^;9X8~yKpv8Vsc>ulCFzmasPUA>0Y__fyj!Rm?sr-!KhRIxt&
z??>;oe6%*YvC0mG4inQgjZGRptu{68iYKS8!QhU)%GGN=E>yktyK*j`e7q|(bZYqL
zP(1_1I$*(=hab^XA5rsZ0r?)^$T3^aPq31FXXa&ebFXNQTX|w)V=F7Gv2$zh+$0l~
zngr$lt262`Z$NttXnPH={h81fK3@m!2rllW;^@kdA|K~dTze*kwvcNH)$&g6UDu;v
zNBWnesfIOQ#kiAvE8}IMp=4P`mJhzyJ7Ag8Kf5PJ)!v3lUh-Qfd3`F{a4z@Tx(9_$
z$+l{>->yN;CtgXK87)Nyf?U*sxi^wYyoFL9x%RUH1spY$rTaq5BfQ~8K{Ld`uMYSB
z2a1rP>%YBDzO_<5LmpLVLhbF$Gs;>fFQv3Rh{6Nz*q{`ecYSR?hGWhJ2NM;34LYEc
zhIJFMcQc-NYY8ie%}}4Zc<a#do-&SwVP*1l3;lHK%G%;FxJ`}wY@kKb?mTu%CVIQD
zhuvpb?7l?Ozz{=OdR^~b`)prtk)K}u250lL!NGgj!RSu~i)3pOgpI*mwo9geo69AU
zEX^}|N3sB_N3c(xEiDC|gr&nqh))UI#95aO5zjiyf|Q33>Ckct3Z_F}uy0e;@L9Oc
zjy&?1kq1ffgOfnPBR_(shLWc8DirQB%>%)~!OarShN{u|VQ|E$H;%vOUyuV?Ik<uS
z;@E$?(5Y?f*5h$#%FG_7-xD;J%~eysr<Rs4SKXq~-sqaRu|3Oo%S)W;7j^mpgIm0X
z9LUWugN=+FgtgZ4dE{3-vQAU}go~HVBuQxKk|mPoi@vM6GBbWDZXP>d@nsee+aX#a
zt_Z$I1XJSCfyfHdNN8d<HvWY|d^aex=$j>XMru1uX_#A=GwHR{tCgZQruEq5>KaSw
zA^>)iX3groyZQ6&U9w=I0~~)FFM(Z>N}Vfd)4KKTuIpdlroME>>6CJQ!Oq{F|Mg59
zQk*@UAw#g5=ge>9+w`hfPEb!BIevUkfU2|))ULkp!4vECta;`iPIO-%LD@Nzc`FKt
zKAgz#%y^wPPmpO9J3BQYn)y@m$%`SCpK{iYUGsrrTAFZF>0$z9x%rn3(~BFZ>HEL-
z$Fh)?RXBIdFtWu}9vjW54MmI4v4;&Zojp52RMjOV<d?i%AgSyO{DN{*CpX-3_x(HS
zLb)mQW+E(k2KfHpSaD=z0l?{}WAp8AQ<klnAwYn?mJh9%R1{PMBRTG9d3no>uMIj8
z<N+y&9E5MR1mh0O31v8+6S58mnJt+?ET0m7LlMG^)?_u&k?T#J8vOD6f0b-TUr9eK
z5Wy><wUY57u~<aC>YX|v;j5Cr%@oHS_jdhNVI}b+kh1ak4BMHzS;+XmiK+#iMhFQ!
z&`aFEdb5p<Cou_r>n1fBZx#@S<W<dIb+g?TxkZHBfFcx_{E4QOgU?dr^<sjtK?1^-
zq}qxpJyYBX(r&qKgsB-m{1`>aMd%J8Fz_nJxagttp}Ra{LRj{98oG-?y1EK{H|n9(
z-`ctcr70b0kXcU5_}j=sVtGOzUFIWDK2VBD&|MwriDkHwZfZ7jL{-OYa}*7{^u%ua
z%~Q<-l3R@IMT5f4o>9rj-6aU(Bos@sp@bfR*r9Z@ra7g(RK}c*jswl2ST2d)fJH>T
zKNT>cP6gwub7SngI`rA%z~sFnUFjOB1Njm%ODHC3xWK)4IGUXFqogFgU_Z?rBL`Fk
zy@w4mv3js#I2QlGhsJ_BVN<#0$Gh?DnoXND8ToznY!fdr{HIQBgYR2>HwA^+Aq#Y=
zWU!D^Ud*mZ87)_XXFh<ycv?nSrKj0M1g{i>1^%bjpj)CkYI?I>_zMCP0o>!GBs?Xi
zHg%s^ZxGW09+bp7VdcmDVRMtg4PkTm;!sPtW_BW^Y#Rj95295RI(L@vmtToGe{buL
zcyq3UmWkp{CgEXeW&D<{MQS({T6p=RI_~h*AEXF}f6J`CZc7Gt<VM^j3za^3Ll^KH
zr#Op9o#OR`mcn#1+)t_px9y@?xTVqh7LB%>9<EKU+_QXZ&E6+TEAiD;t3c>BaJT1O
zUE$+j*ApE(&5ewT5xbM%b9yq=BR3G(3gfKl><-u-vooxzEL{d*C5}g8b0g;fZz?@p
z!tywlJ;RenX)r}E#@Q@35cmPaFPQz2w~Heg1We7GgOo|Uuvr<gVxa_D#Ea~GE|7uW
zA$U4`|In6s6&QMT@9D~iUKRF%j|34b`L?gN=rP%=Xx0u>eD+tIAA-1D1mJA<>TfDM
zAYdeN7g7l}S68j)9&8z!J_D(Fv(qv6-_U;zx>?$WUxvk~xC+VG?VLGtcD`CS+K)Zs
zbEkG7PPD=T4uytVCVwK5z{_iA&@$fT&6QvJl0ia;SgFAti)j+aI$I2+5#%r9*qN7g
z#IR6JZFJs-q@XgEl?<Jd!p4_9e0X+<$|D3wQ=xh#O?M0pC!HZL%2wjwdD%f6i&^jx
z5iB0*i10_HuU)HGZ%FOQY~Hj62l+<jIT+3f3`F`?x@WOB6%CX4zlxg?^*194snGNj
z!NJOUoR|4!+$_XIMEU?^2gui^ptDlD;3eUAyrPmXGW=vqqz|a)w-FDx<g&BA^C(GL
z1Cm9GEGcM!J_pe;rJ+-H?L-%fs8HNx>9r-s1PDi59Bx*9!=ec^Q$&W9YyB^mp_fN@
zI2f7lxA^MK+%zI%26i|%%9}A~Mu|R~tcQzI#|1`V3t#vL4W<U)o$h7Fp+l{J1yzO*
zFTatf_g|&-VC2F(JDQqqWGNW5rZ=T?edoxG0Z)h%aSAiLlnv6u!Pl|DisBJXfKW~7
z1ccwBY5Ia1oOHNzmKy~<VA~d58ZZhC)*0F#*~B>+POW*xrVX?SdI}&o!Nf$qABfLh
z&<Ac9k_v|8Ct_d=18#$21N$nOXoutt&diZyJPE!+>d+fN6$>3WocmM&g&EsMfHaVo
zZGW?DPK#Z|dT!`JnEa$Q53pS;PBq+b$>5g1XE~1@>&Lzzz95M?V&cjEjIl{7i%xaG
z0P*9J7OwIN^AI}nU$7gnElK&q7kh@REAmc6UQSMq(ZVqcYYY7dMcpG>w%sSS`{Xc^
zo%QCq0%H@2er7iy?Vz2y?d7aGY9@*GpRA4VH-FW<ec2)nl!Kg`B0fMoLK0kGUq?y$
z7^UHHk_pkz;e_uubPMUO?g7Tfz0NFCVl=7;=Mx^1Y+=%;auP1)&_zsAxb3&mvyQ3!
z{->Jy--C@h;l#<-{H<e6{AQEYfseX|z(mA#$!gGO`}=JxSDq=peOSXi;NAD{Rv|Wz
zmy|fy*RUz*pZuia@*11nz5{_iDX9E`pbxP?*~n6voY}==LI>x)Vt?L=>ub6b^m?o|
z5`l_XGI!IcR+n6kH4I-Gc3oWFuRe-43r7r^A3afh4o3u+E4~e4j*MM9sqTWMQpmb3
zf8*wTf04)a+VUx2+TkxWFlwoVPAGFW>8~F~y^7$1PiNN;bBLubhL@)u_?7IVmiO-x
zFbyVj1$V%h^TIyIK>m?C)SJ3no{w=;X-Ul6vPX#b*FXDTe@+UjU-f1{$J(c-?o~2t
zS_gjN9Xcc+NFS%w2Ryg@_s!gEs`tl0JY-?wc$-sXUif~`G}Zp0cF|^mum0-@9Oe68
z`$Vp7O(Zy!RIhP{_kq<2hPBqfFqQ+y^L=g08Cu)2&a*vr>!b0Ub-rEecr5tumnHq*
z-KK2HHQ#{dwWS`X<$wRO<63vU{&hG(r<<6t&|G?u(Hx-a(m|!>`@FBAVwN9F&b?zF
zQ&6`xEs?>c%iDVZsii5+laKf?K)U$Vk7t{-qmfL`^&GcHp~H9sMVzQ<B)5-W^0bDf
zstE$o=e%OU!OPM{Dr9OMd9))wK3>uh2qC$9B(6Kn-1%iEIMlE0;6<Tl^IY9qI<U_E
zwVge!A@|bzc+HKmC|p?c9n4Msr%NPsDWZHZ0mxqM2Gl?T*9@d0G6-~*^z+n=Zo5c^
zK9ty#u8~iD{j_$WsdZKmHbZoj{rY`bwQ?0pOALpo6yl@(3l0P=ds$ds5YUL!=cD5i
z=2_dFkb}<Ny7sqvxo&ujaSzBctx<J&Vc@xQ7hQil(JE(~rFxOVJ8{~yq;}2;h%(1e
zz${|Uz}t1cw-F>5iqF9q^<Mw*%4xJ8!YSedA}g+@PN_FZ9?mt7+H1FH<<rzVnWg>^
z^}}B$m0%4e&7}zl9T1VdwaI>w%VfJQpN`Nhqg{46u8W`3&$mK$$LDG*|5`OeZqf*i
z^o(v>$f{9?Z`Du7TB{}shUe5`SG7*J3!!SEq4~*2pYgswVTC1EReiO2ZNEO&MpGY?
zVdOkKUbgf5i^ivGx^4vRb&4ZT`pBb?!y+zcT3x;I$hz2Ueb%5qHp#wKoB2W3%Ti6!
zg8Q4t2<BRqS2bonr9MMG2}?Cm!d_j)b<oP)UNG{z%U}1TE>>rs1+U6pbm{Y{qO2UP
z-$Tobiq7CXk~g+npCci6QeWj1;eN%!ugo)`JULb3YU9@bWRPJw_8gz4xz2i0<~Mrd
zpBmtXJxe*RrW6V8QUfG=BQZjRTu<ikk=Q}e730w~m|i3DOLOl3A|O1*f?RG^Bm4V=
zE3OQ7*ZhA_!k?9Kv`bXQLRE4=72j(+>*AvO&8kd)GNyw>>JeS4P(qwCxzJ{!^Fx_&
z5o307h(R|r0S}Yo=&k9vD=YWy+xH74^A}tR(df6LD7R&`iHx!9=t&$>zbLk8mc>V9
z6H!`~R}U%cJb|H^!gfvMSZ7(J<n&stClvy$;3Hr~9#<R0W{=a&cFMPAhggbZh+`bV
zP}Fm)<R?!)ffI^Jlf)E*LUQ%)(>2B-H<1uA5qWVSNnbnnrc3m#LyiCGBDyWHe4&^s
zdb#+J9KWdAd`7JDztxSr;fo9F(<}Ailw=>}IDJS3le12X8K?v_fRp&NFF>=Ps=}dG
zYVa0Iiz(hBAx6L^ADR-t+}ZVn2`(t|{psNIQf_pF_u|XlD|9NMXCI1ZD2*T#k}QH0
z-%&@nmS@QEsH?clVXPyS-o16L5?SpV@<YyxEyUjwm}tTPR{nHAns#A+%uM&T&AZ=Q
zHz8e<m$BWL$hbG(!bb1B_H}pt?h&=y<`^a?Zy@%Oc9u~LaM9gC%UBBF@}J9|nxW)$
za&n5j-b~nP6qlPw=@5_|2UqMi8~esCh_t+U0$0l)k#1G{=$@n(7MpA-M&G5NXERe0
z){``ASO8ia(y#@f6&F5Ee~EM!hDxv=dc3+|9RebV-+>&LlwBhD6WO;c4yt`gNm-T|
z(G}Q2h8^fgvCGHzNDvarMuxn^iiVr^o*dJRRlyPph~Zc&;Sl!;S@}#nJ5H@StNdCr
z9l2yl(B`w&7!ok2`Vz4@GaZY7z(i(BAzX|F!k_Tb?LtGNnA5uTr+7L|+5;eqrC9k<
zn||O58$EfRN5Pyc%L|541_>zK>1HDa)wkW&NvvE6$3(X%{PvS4FY3?c(|9j<Mt4~#
z_vp(7k-<^ctJ_jTvg`0=lCg6czQE?fyYs9C3seY4z~jw#&8fF81p^Tv?t^B=*+(=8
zRCti&aO2`9C!h+=F7v5$&XmKi3i>d&!e9dafO|K$5QKsPv=c8X!H;5Zvj{qy=WZHw
zA2w`0ox;(hlU!UXv(0AF=J27|?UkNNeFGFB{NyIo|EAWz=@QRi&19OZ1P}>s@d-_*
zO5eVD+mc<hx`BoDx9DPJVuDeLSoJ1?2oP3xSh;lrm2_J$Ee0Sai0+GrorsnSr0TwI
zcpj#vXX()DxIBFiFKEkUaTF9G{Q3dmTg20;HyE^t@>6Ulu=r?%UPy+Eiy2c`Jp5$Y
zy7>dzi#QdC0c$$Qf}wP|umv&}&lrxp$gO)$e#*N?M+PP!{<=`8Vt6qd&o*gbl@2hV
zasbI^9Wm)+zk_+9nyf!q&`3}eR+<nZFgT5A0x_QJOe?}^^rNT<AozS*qAjdE7R?95
zH7am=hdL~l$?zixG0w9u(gNiK9IWCmg$3ggYsgfefuh*j()=Z{aF;PkQwIwaTpo*v
z?E7pqgRhf>Z3~QCcfd`$TuD_0CNZ^7YT^6n$6Q*XR%1&QkSL6#4`6p$o&UUF`S)z>
zfa`+Miua2c-{Ks?gnuVAw48_^fK<<NK@c`Wp-h|o3;_b-_(X;T+sZxAuRa-|Dney?
zy+4EW$5zT?BxV+kNeft~DLI|0p8by&z(CP|<F`@VXkj(!OC-+Q#g#%PT(w`n_hM_k
zVDLqU_jmT47#<v|Cia&MUSYXcps~L=@^aP+A&!B6o-s2MHr7`y3@Hnjb_qy@*ZrPM
z3UbD${$|IW$BxHfQy=@7`SE>aqoe`7X>H_oKU(UzJq5dhmWlNlo2jIGJf+6ockAKK
zUAywDb$9_K>;)i;m{K(M<I*)*ro@8myhVJ@Op0Cl%8?}(=d%(bw>0r>dJI}Me{spr
zpNWZyyCI`%bJjry5JJz3w)6U{4LLkxhSsX~4|twv2v)ql_N;#snFXgEm4sg|PHa1G
zu!PZVxC;WwZjOE+@ZbSNG7mj^V)(S-&6Qu3l_K2T{HJIN1^A%Rs*XTIRDJaSmPWdC
zF#si%e>=Bm1Q7MPtP``|zUWyPg1e0gO)~Em*v@<KM(w<-SmX3lQwxACt<19?+)?O4
z{{2pN_Nn@f{~_&U0-K$7;pBAm)tF2gSH2V{O8EGyL2jn4l(qNQxDVcZy?QkLGU0JG
zH<dO;nL+aFmaFm?Nyz}TD)86e@HG{I#z3TWTvnXC+D+Y!PxI&i8a-)Yg%xGX3XC%2
zemOHE_L-A@(2XDUSffmw{eUs&kciv&x3#{xa!s9Y52hsfKhKta1c^CM!zj7np6ePn
zZk*#V5-}Rc$LVECjPY5-b`Ak)kN0z*XKV~hBH&%FyYqtw57=P)-`Lu}Uq4bgW6V#i
zoH1j+c7*T&5Cq!4KDL#(G71K%I1v8y)zbR2EoV*K8^QAP@^+Ign3=t8`*uPtfrR3t
zlErxx<DE_Tqvn?D^y%~I#t0pe3#`iaXa6Zi{~d*44=u0R`zyy79E6Nba-CJLetlBI
z8$8+64g7^EiKEROGA_(335~uouwe8R+G59?(4}rW73w|l6+j$)rNBH4PgiZ4&q>R;
zx4%b|YPXBSI4;TEYL;0*W3R8@n`~YnQKVh?&)(0>^kxx^t(Z^P1JF0f0<tW$VER>B
z=KK){E|3d$ZuO8k(HSN;Jm~7`n!GYQ*HN|y22a4~5HUHg{JDZH3ycmCTIZ@^sNj;4
zaG>l89Sn5=DRw?x&)nR%+ZHYp*)o%YyMa4+vUH&SLwjD*fVn_)z-(}ReiHCaN)^6i
zr3Ri+&;@|)H0!dfk~tme%InUkfqcp%Yw5a0on)ic?a=1^in`CvZ=R!Qo~C(#^W;O(
z29dVI)#;~$S*wg11(HL2)ks{!Gr#N4Jf*D<+AUKpJ$p{9)?)hzw7q&Pd<<{`)hO4b
zrWX2o*f8`8m}UbXpY5<Vo_8@8Y)G<5aSk<1tYB}uXRT4hcwxTIrYbah*328o!)~J(
zd%G4vCT)`zz5V5^6sp@`EN#F^%JTOFEc;jY@sY<6MX9OsP=Ip)M}TJ10rwpjgL;;z
zov1X`oiqu&Ac1OnCZGl30N*pKf&5^G@u;_p?d%)XI1kRn{?@N0h=}!pqA5BTKmja0
z@qlwteWW&xbFC%bA<OIl8K*fB<ou@ej|sapncfn;<=E<{d%)4=b$lPAIRNYjR=daR
znna<s;ggT8T8kdkcJIMe?6so+%t&8@l>#LY{bF%a|6J`=+iyF}iyES+8~bkkumJ;F
zaH4U+mJue7SwCkt>Hc>Bd;;g@;S(o9tvYl6>;Z_k$H(iiY;p(_cpo0~7LDH$w1q&a
zl=*kq*ivIHslymfk)s;Y^3vR;%oDLs$$Tnse<PL`&rkLP00-2i>~f4@+H%~oC@-za
zn<)x6I>fANt9vpu#37ba@Y;$T5biJQX%pd82|im=U<Kw~a{x2>oSDo}sLc2}H_R$@
z8Y5~durC=vadTz;i!_Wo4SCh{pMNkV0ij8yD3^aBc^O`%ND}Wqzp6}i`#X_7MO|%T
z^o3g)9LN-GpExaZID=#sGQnq~H}CXCNFvaCyw&dAzhA`R=*@|Y7@MuyGCG2a9ar@k
zz9T)D?d4BHLyL30t=NoDeSY&Dr$y#E1q{pkIyeSfA+eo3rR~}gm&H0_T!3iNSKHO>
zd%aBR{K@+}VphKdgjCKEt<t9xMGeP>B{92zv%iSLo=!tqNBl{kOMurPG2k+-VwERK
zz#4|lcc@V%4jd9evUBUWeQA6gogY)JH@7WAd_-MIdwzEPv9=@n^t+<A<C;BC54+kl
zae#wD6|Y^6?4>7m!9AkVU`BUw%&W35t?0!@=Ur#Yru5Eo>JzE5K+Rg#iZ*y55CC=p
zIEU|HGKSv>9RIic#&arRR)i>3_!$T$o(eLna+eK*;(WBm3=O2rL=(ihbBLpd>tlTg
zN?!HA27?DYyc;8(<txh>%QHscW9-%>=2c-kCl3Qf-C6UhxYwmQM;Wtb6m$|@W!Z^N
zL==G>y52kyWMF9c!Q}b3)MT-ICh8mD^v1zej*i6*n@83a{FN<9%6w`>hP5Ldve1+;
zOPa)CRhq(X_=x@B!I<wi7+A}rdKLo*;C#pnZGZMHgvDWv2mifc<u=D@qLt5<c>r{r
z0x-NcEgTFDJxvutsnEd2FQV_P8p+Y`$aWn0WE3zlC-UIUe?(^@H4<BqSXEyzkM*Pk
zYd!La-h!A{HzNktNB~k_wX^2oNIS`p`fh0!BqxWdAu0e)tfeO=bIfr)K@2&8+FxQi
zovD!VkQHK8`F7DwNOMX8af3!G>G))~$?m&nI#ic$&=S+m0cKbBFi2L6ct;klR3{SM
zL8)=`?Md=?X#YRIymZ!bR)1Wq0B;U+&$RzmES9y#d%{vE%6|}r)J>A+{hdE`ngaxj
zIH`1Z6-V8^N^?L*o{LynQDqf_16+1^KS8$XLE?PK1|o(dXc5SQm*&v5@*zDEN<x+D
zU#V_V@iH!QA0G-9TtVhRE4L~yX(c6}32$dQN?m5AgfY5#{rPR5)IT&*i$Dbgv*uOk
zhR>|My*i306%7r!Z*=HN($xWj^6qW_>rChC_%5NYI7(yckwVY^i;kr1v_54b!{$%j
z9-1KqhFT2JZWud*2O(+SgIuPm`^Nqp=~}4?KVJ}Mt>J@&T=ajTHm>fW@1q*(z79P(
zVM_PiQLQeGbsp2X&F~+tAAbJvEgm|>@!;&Q10I~!i?-^1FVL3I1@<>K#)XxoU#x9x
z7DDRNZ31Ih)0m2@G>vKgh^=nrG*OpmOE*`%Z%p5}lU-S`9fu`J_Yj3bmvs`8CWi5>
zF`*Tfl~($1p;|fmiu14=DJMr9A~7Qhluo`TboMV`l(OdQncEu0*MO27NZU6hT~o$f
zKmj`rU(u1B)fVNW^xa?%o=jmrTM8*O`TMnESOXa-r)ob}?fKCu?ibCO49Tf=$w5vq
zfr-ir&e{r41L?En(&V^fGpy9~1~e!lo*eOML*HLJ9q9=e2sFt)B$NyR9yfbCY;V+3
z1Zg#~l%PoRtr-7ijPu{H!qvJWSA(FHSyv+UlAW7BoI}ka>Nb9lrOpe8acgjHG~!Jp
z%^cv+_2-+!D4S$SfkHT9%SI=6h~Edd^)NYkG0hsCT=<=$`_z>=Iijou9ZhtO?~ADA
z?ov$+tg}!Fr?9SJxOQb8a0WTpfYd?K09jItz<;D$mQSTCG6}J7HepZLtaMFkzAW5}
z`93|=)&HS-@K(22%J@IGyD;0Vnmz$|4_AvF?2{rz<|r&QnOjK@C`tu1m1|HhP_HI(
z@=n7bw{)4BL!ai~A##FvEuM#&e&41uoD)I@^5lz>lh~wX%Z$j3C70(#R+}ur$pVv0
z0GE*Xt2}z@bLk49MtV_@amTWkyBtW&5gCvKr-Qd1r*y-dNC*_FcN)!#fVitiZ32{9
zG?D|gY15*l*Yd@`ypA18VIrz`EzlI1=%fPF)X$M{`t7Z>-_a-Dwu?@~Yw+KgRkIc?
z3fSywK`<kwh<FdMiGW&&?i(Zde%|XYu|-P%%(^KZpuB~OJBn#U`0iPV&*6+;yH!^S
zsmRU!l37mEF2*tv=g416w}D2RW2ByK{_ZN4wVZsS^QCGYz5d$_j;<RIXgPcGik+R6
zd%a@~WSZo92uat1!KXt**RF`WZBg8%yNS`L)s+oOex};q_h@&nL!eQ<+Wjx915Pg(
zV)o;5g~8BkeOynL=RWIm$Z%k=QX@UH))Rau+FVxWZJ}KB_ix_`5v266oLhJv4;2@E
zq{e-yOnD10FH7$O9e+=!`qwOapVL-f@7}#D>PB$ICFplhCW$E<aBA7IHpnmm|623!
znDWR90{)VMK<+h1Br0J_sGn*to7vi#unJO_Co!XOj@_{Gh84nd-cEh|#^|eZDSUfj
z(*W2ap08DX7zno)fdya_R6QJVU(BaDHj2<T3}u<uVg37zUKgr8!WpzfSWCKaS=89F
zb=2B0m?Pk#cF^Vim+$(FyPK6W{N&^PT}F9=tz2YhMXo`+aHBFm%;oy9)7AN=PDjp#
zhW<^>dZqTe-K7*(r#PQb;D`;{f2mWS{g%*ymCo3!Gt_5>v|D6%Iv^5vsd~KVk|gTj
za9Wz#ZNs~|6fxpY#24tzHzG!8YuvZ%)2)Kss{hj0`iV;{VYU1eNdsHn9{BXtHGB_M
zjGR7njbi-I`?fgR3=Y9E_T)_%OgZU9EhFV2@?tFe*^DMC$I<qPtcrmm8#VwjTBHR^
zgSd1l{k;0^vdOk_FGu}AA-FGSnHXodB$r2x+Y07CKcd>N@m;DP6zO`RF8=pa<a>@t
zV%9@VBfqWt=1kg=^GA;<rOP+Wn`3FyPEnCDo^$I>`eTHW!p0epd5dO^?)L|eQ0CyP
zHia%zLOw))d^CCL$c@V2`s6&HMksCBsWH5=lraEYG*RlmH21I3?;4J>hklH4XI9%J
zRskFDJGKvrzHr&<FtVi6m@fYaxJnmzGw84!$~^jw;n|F(AaRDEMmbn!c58()1?q+P
z^A~iZGVIFKc5N=dd5{6JrJ4{<b#MrHuvF8K9jSlXufPlKlTIx=(Z|pBUSLc2k4HaU
ze3wvfNtMRF#m<ROe%)UaqCU;Mx3#zR<w35>&07ul82ci%Xm-x-CZ$bp9K8##*jVj%
z!V6qQ5vIH=Gh=mtm|gw*o%wHpgpqgD_boBq&555Lw|-R}q6i;Cn6nl28}SbnCl&l>
z#&)DDZrIRypu9tD(@Ej+tXa$W(YJj@tFVHDGM7_bO5&G9NKhYgh$J28&cqb0;-OkX
zxNILP#0+Pe!WyZpnZ1tdrcJWDw9@)fht7&F%sJyV6G&|H4+^?$Cg;nm|63)75+E_Y
z;43d|hp``|@KY`nk|E^KSYSL}F6TE_%DLv(2QJ)S^#0cGZ#=MWl|^HJ2L*y54=}%W
z@paKau~b8zbJsDF<>`lU`LQwG;LZYg8bC20^72f-&HYUc2_BQio9t?pYS{-JA;r+=
z8`-A11|5-L(y>x1F(@*f6NikMK}iFbYbq^6lg^I%qWNuh@ouiA29dcuWdRZq{#^L6
z(XqSZP}O?}00tIoDiL+HD|5R&>xS*!Eo}BR(cv#=sOVs5Xx@#WIl~WcRJX|t)9GL}
z@b{TBD?$(OjVM4+0czmI7`gmdVvY#mMw~Xd+BGc0?Az;Q8a^mrO;;#A$kGKTw&8V@
zxg3GXKx^tC$(Kwn#0I6gAls~H%f&jT;Tkxw^DxBcSV$Er(-%7PNp8Eps9&Z<B+rSR
z>2g};(I{oBh)H>v#xbBiJGLL*v7L$hijS|>T|cBv=I-h374-&9v%PbyX-d|Z^JxZ4
zOpLO;FC7}6-QvTBzpE|nez&=O>$bPuQ~<?<TvZp7EX5hyZ@(+sml;c26nSC$bUJOn
zn57{g7$YlQ=RI!Tu8s-v>`UJ5tioDc&N6@B@${wz1?D5VwR^L_V~brS5x)&XQwANG
zeAeLmv^5bwt&lgmg)~`dqpYZ2IyUy{Z~$=~1aIXzu9c-lb|w*_p_|_h8l!w_Y{N(m
z-K51h;$#1Yaw`7G-%;aczc`bdYBUV`hZ;rP*E&S60+K?@>iFSa)5z1)sr#uM=}O;&
zXmO15>d;a@BV4Dd%En?Yttl~fmeE>I-tOkW1?`gC+3nDj?1Qy~d;GA))kS`8{%xG;
zOlU?>%2G^-OC6&<cNlb@KtETbSqyHh3uwL<y9uObNV&#tv5t9#3*i=1r?9LQp8yJF
z5KaPIG?%~FPa)Bf&XB#HA_7GEL0CtZtfJtrHz$HdFc;|W|IOsyAIFAX03PHoJb-4;
zTn&0f&CP(^;nNRIjE@<t&{T>vE6?wpW#>QeQ1$O`)fH>A&v)>0I=@V5)hf4>&vf<&
z-J9q5egw31#}1VllbftAO8U1mGih$_0S@W<BU-m<Q_~HD$<qqXo%>K~{<!sn9Qq_6
z387+Rijf10goy4?Ct*vSK;tY2H9Jjt%2_Oi<LDijk)%vKOsh9&jeI7%3#<~`U!x~i
z-nrsg1j4ywXKHJ{6oRUVCbm9N2YYcs+0ZG_M5llG$N?<(jE1BgtCWl3Zv$!Ha-X<L
zAT+u*VJn!O0|sVOW18w-K}VE)9@GqLuz^6WmFswE(=SIv+!c8`)gg@=vLbG{TXtyI
z4*urc_p_m)zN6PA6;$9$NV6rd#BHFo3U+l`?HBc%3P3`i4KUZTMx6wXww*JIw~d>y
zm__3<Zn}Y@D6nY+E2N`t{EW?W2$V`>YMQl1>-Oy*P|{7Mj*`4Zrc@f8Mh^sV#YR|a
z)|;&tg`IKrKPHpeb|id(E^QcxmP^<>oeuX0s;WMnU$43ye_(mP^wpJR6Y;E|tw<j_
znWk_ej3_7m(F>2lM2;sE278|%&!5x7BCf<&oiq5T`XPMfs-nlwRyl;Z-3*4UXz;s%
z(P!0<CE40}L3>Viba^#<z=P>WrkTtQHJlsJx~pBnit81F;_e1|towK3+|#YytQwl^
zyrMN?>zw+x|BiUk(q`|(p63%LmN~TT({tn-rB1)P-KoyL6nnzBrQ*A3ewoj!*B1_d
z=v*2F+mG0lvFCG5jwyH_4p7Za3*LF{c~Vd>a|R?D{ZhA@JFojUxm<dkHbf!wT@Y;T
z?>eUa7Kpd>0Nv(7MT#s6es0*XjOBLjZ|rRmy}?+O0OLbtawBCmY@(qNXD|9yC#S2X
zeJ`UA7cO10wS+PfI~$^x$PywIJ>rh?c$$A_NMOmKqKmhRjfWAdEH6x^1$rW5!2n^L
zV%XFir<IpMJ5Bw?kmSG-4sveIpMnHbv>0nXrF2I~jW+b=NmGRCx6F}M{G!3wKtChK
zFF+ci;b&<$(r}(uZ3ee39gEwa9Ay$Yp=y3{&<H^-1Fy1!v~Mpooy?I@U#<P*qdM|9
z?TrLV^16Y=XU3cau%VIKbMT-@yOG5S1c=uDL=gN+D-lkMsoLJX-4U8`RvVjSZ0|q`
zw-_Aq2Gc_D-2VVwa!Eq(!p`L$#M{4>Scg$ee*&poh>4zLjlqs`KK7&ylff=N4dlLH
z;Ku&6Z%P8o$w?%>fOHC=*N6~`lGa*KV~X)6_u$3yvle@h*9x`#YSLXFl^Ik#(&kox
z5dgZ2Q=p7qB3(b5mUByq;_M};W$$^W++FESs}oT_PB92~`!n?NSU=-5l^verCN%GT
zX3Zegw0(vVJ>CTdAN_4)te~jac~1}12A58&ywshfP^z{-;c%ZFi#`wR)$5#XR<DyQ
zhsNuae|zZJU_#rE-}0Q_IY+VW1X<_#es|9PzH$C0E1YCV1x@8qla2}By?Ag(_4&ho
zEIH!>eSa$6ztM2te-l0`_g%c&{AMUdOMB1kP5Czb<j~%>53e8A&G#{`)XblFZB<3t
z+UW~3t~xGpHJgyR#04|3b#afoj9#AOuq4+luUXd}75hGGdMSHuw_TwXb@A}^Gj{pA
zmk&NRT}v}wL2uW&Mk91Od~<P_s**gy{===@_04lSw0qV!YfI$#kJbnMJXR?h_MN1E
zchCH`yDaREz1)27&av!)U6L*?)J)#dD0p^Q#HKXQ7P^6L5-+dhcizpOa_{ubKbvjZ
z`&djFxI#b1;m7_1hL>jyv}#?ruF0xyp;H14yX&Q`%N@NDSfQ)m%%A7?^@ti^WMD9!
z*AO-o)q;gdujBnmthnit@hwlSs|!PTyf@3W_LR>aDug3Iu2)j)2shR^eQ$&D<2-wz
zv%Sq9OaE3|cE4i)%*a0mCbR?}l4tZVoxA<|=<@S*zt$$(R2Y$z95E!eG6zVH$)0$&
z!s5%?(Qw*=8v-lSJ4n0|c?n%%PWK)-(D3wy3;WT9w^dedHS+8*8f5Z8&tAE5l(&%o
z{w_$eym?@f#N^1F8;L*g#DLn;oM|p=!#R<l?B9-k(>U!nRzB>&vJB~qt>=MwKjk{e
z1^Q=;w|56h$O&hk)kcsmMk9i5V%m_oRjgs&K53my=JbHuG**lIQs%-2g4STtF&p`Z
zIbpq3RJNd0?XK5`L*?_@(af6iwC*1L8=7H<t{9-|z<jlXTsk$X`|PE|Pco`-8a6v=
zGX}!5r`-!WckW$bAp(#*6h3{ZwIOI2ujx3(=|Y?LBm&U;i(eR$C<sWcG{UDqqk5{U
zHo=e<oE@2XeKtI-(M9DdvA7#{p??54_yQvNVMH2V6Ky#i=ko}QlW3%oYD^~P0Ph28
zBFTc~psbT;otd00k#9F{+^BQ(vmYR^<dBfzL~TwF$dPFmeS#$-{V~1fQp}z3PiFeY
zGV(kHwU^dnZYsuD5H2IOn~zsuFPDV7q>?j+A>xK9^WkLaBx~SS{Eja=r*cCaVj58h
zO>}Z9Usnx7)RQ2ls|vd413`YmJ(ZAe#a&Z-erl(RRbtw5J>90QTz@Ns9lCHUsOrd_
zBXiSMH63`z?Be^<M!PO_nXor@$L{$$Df55c*g1J!RokzrhRJg)jrx7B>c6LsvWKm<
z+U+Ilb!>Jwur2BOyroG|(!)9v>Z?UAJ?D2t<5yLWpq52>-+I;WZPTVz%D@E+HV%4F
z8XP;O{M3Orb#=b2+okmPW~@=i>z2d6g}uwl?Y*gLMU&QB)eiby9#Z*uLQt!s^R@-a
z8#}&kfscQtsfEX6?f=aPc$ZhzPILeBcNdepBwrnR?QDk}m&$<aDI+I)zR#T4{_UUg
zdY%os*X?2St)%Z&r?Ty(j{8y?R}Z=LH>O$suHbPBBmI`2H(frq)z4yGtDV80-dC=^
zSrL)hHGBK+>UF${VHtlzwvQwCQC0OFQ_a%Be<enfA<v6wNcvZno2Q6GjK|Fh7Lqo!
zFLWU7jGz#Vt4wEuuV5y{e&6kEzdLYTPk{f_Oj=0>A$peafrh|)|M+jNTvp5A_UhlC
zkw8gpaxj_{N~taBEU1tQ?Z&!Ac*%SOHr*ih75z`_`I~Xr=2w)LA*;eZ=IorXus@xz
zU$L9w>^zEcs;9d8OufgikXDLFLkwmC73@<}ybihr=2-lb*(2$`!8A@#kyTL=nzVLQ
zUs(+ZPEoHGxEdRVj>GH}v1E{l@X%fd;kQO89}641JO9a}_YNw_j$WBi2dWdM>Zjhk
zUZ|cqQ~%n(8#lz>8dv6e>qWC68HIUjw||=!wdSrZpwSv}E}Vmo;oVL1Z*&;gzBvbZ
zZ=mG{z5xqpn_q`kSIsleY`bajca`~1>|^t*cqu}h+BA1jKdoEXzGMIWo7R_(Nea)c
zb7AcDV?KViZQgfYz4KVaKW>9OGACz#Nc&|xXRF_`WcOtqB7459POZv0oZJ7r%fpdI
z6CxVMP5gBJN;7Ng(VEXJyi^^>Cf@8+Xq@=u?3~SSt#0qozE!%^W}N4{u<+bXKa|_L
ztqSU^e%)@h{;`G2T^dG)-x&95WY;RA7SAIB`#k(!JZSes+m)MQl2f+7+0^m*+fgBN
zW21c|W4xZJTh4lQ?bR5^&ynuSqbDfpUYHZs*Y4i--OI-X8sY~2S23n~A554~h!?El
z{W0#qzofrUBTF&UWtk+S5;IvAt>C*oA6fP#tOOvq@PqRIzW1cq|3OFo`JG+ubg~KT
z4aUKqy)I$m%O)|G5L9TtE;^fi0coXSViw)xY>xTkUd-efOe+iQ{FuYo8T3}-%!cjj
z5wrZ!EK{3f$yI+HC#QJ(8$q9={Zd1`jrxo&Fa^w+B8H*1*tCzorzOUx6{$}#Ir0Y1
ztQ&}t-A`l?3w{;nilQI25q`lU>-6$6X|vYcJRGU&+G+Z~t&U`8eEew|_a;}CMYwD1
zi}+Ld<-fypH#bBlzv$kc`EL$%mJJ(-f&CoG1E&!#wZD#)=AJmUNblH7kLc}pitqGa
zwW&1*-UF_5`d;RG=-B&#L*{gJF3+=_7q!0WoZaoVtS}lr=1Jj#1+No2SGH;0;73|)
zOy6YAXRoMcJ`s=0O#K!uicbEjz2v<^P|N6PD%~efpU|~se*Zt=xt)7&9&0|{a&LW|
zK^`w!Ub*-Dg{nbIPqwZ?e*FGi_15iG(n7Z${CBHb;Gr*_=0xr5_2H~$m!vBmCJXw$
zoTWR>_t-@<wI`omWo>>rVdka!);`0=JYGBPxxt7@kKZ0?U%bD~x@{R>byfyi9zXGM
zWY=wVM(O_J)aBCbxoWLH^i8|I_28Zb873B;^|tNT8Z+jgS@6ZANex5v4rYER=-s1^
zZlAqfrwn}F(%^{6yM(1qPs4ruRdjw1y1zJYh3~^l>6i9)(-~yj*t*lzu2)s`G`cDk
zWL3uP9H;D|u3t9o=z|2OM%uq(k9M6Bp5fkONm$Bnoug^zB6ivC{+0Q1xApg?&CL!>
zJ$1EFu5<pgq=c9;Nm*_Wrk$Mpug>H2k8Ul!<M;IUO|y^bZx`R!g$0~+EmUt$z#g;k
z$zd69J#U|$7TAMAnL`Rt<~CbV3fosi=mCLc2Y1Bf@q*(Dl_vG5QEcJ9u<#j5(0%6&
z*H#^%Kqug?<2hk<KZ+d0rZV&bL|Qj5>Eo8V_0f>_PSq-z;T7;&CV}wt<kvtJI+TB%
z$IeLq7=*wBrw}n=0W_i~Ma-$UERT+smDsjhw}WQkOXw>ArST3-#XNN6`fmaqiSU-J
z!8+&yA*7mfHqQRjqnF+X_TnJGXo~a8E@gJ&Pc$G|{Byt}R@2DTf6_$UBk6Uqc4X9y
z%H69;AJff$sENcc2rUf%)V4#1^@%5T$KB{7^sP|ebtDH7m-*MBM_)(K2=mUg7MhZ(
zcosXepwcKH5O#c;vp)51_27srPdjg2KENT4()%8&KKpeeB4#P-CF`yEJtOi(Tk9r0
z&TBT-i@5G<Xt<%x_cG^0?W5<<HZ-`CqCb?EK(F^K&*wu!TI}h(#ldKCi_;H3F38bt
zZgH~Ho@Uow?ysGA!l!U|c!P>PAH84xS~{^``tC+g`x%&q@0q>SbHksTJ=Fd`+TJ^w
z>;C^ACqz+3MwA&cBMnkE6-mg5j7lVBR5CL%vYHAhD`iB8$X+3$h!WW&Aqh!ld~c7g
z>-wC}?~mX4o%22C*LnZ(z9L?)=j$=<_uKt8&dXd@{kX9~Nb#`b;1uPuvwgB!B=*V;
zoTXDUENf;sJ{KGrXt1nzyOK~oa56`z8xHR_iGCjs<}k>_H0EU|mEDZmPpy06-rV^8
zh*Nh17_fPSwrQz#GtKqquigD4i|>7#sQ$0>_6di#aG#lu(c6Il?c&JLQ+KO_lp=rr
zI^okH`*eQoo5~%#Ef$__RB~kVwpcah5^b{bFmzOnif)SIjcCq`xxE`!mnypls{7MP
z+H;N26+KBjU8XnCeOY*kL4cdZnNBV+HSnC&?ae8V)ix-gz@StVljUW)VOr69NHG7&
zg5j$e0ov$!7oMeJ+2UI!qT4Qo9y$EYcH7vxa32+c_NH!E!RjN`2c&d$1zJTGYO7}W
zLj^oadk)i01q<-(Gx&OHs?R9XAidSjdM2gl8*>x@N;tu4L7#aq{7w{(V^9Za94s^s
zFzV<Dg7k-0TF=y!5OlCF3|D_<4<lrK;Rken$|#_T!3L^H6yrvAuIO>eJODLg4fPyk
z!!V5qLW%hD{AX40Z-<-Whv5%GB9(uQwK4jVfhB7Hsr>Rk>+($Bp|vO437r3Qe!i`C
zLx3%u;Y|oiGh3-e6Yc}z$^*0C5P?uwD`MDE2r>x~+=5cwkKcs91ZzhN5G(O)M_dNL
z4iY;DFbw9iM34zG{UnACR8GM8;yk{IA|Vg<S^^j(fi4%1or-Mf-iKZf9oFEKMt~a%
z-(-W^xVU_t=Jev#5*4k1fdSG*O*1}O9USkEytKUJ4v#7SO)Z#}W&qSq8ICRsILEGm
zc%Cbt-G|QjzpiM1lFe{<WBv8`Gtc)}?N~p0Yt2(Wy4<ynHRYa54{-^IZjYK=`a0~c
zH2z2Iu<4FNGIt6K?{4O7cYmv;lO21&bJ5`Ja}S{_zevf4+~LE^G_;q>cIJ%i-SF<)
z+0>z<Gj?5mtsK&kd)(}u`DX0WMMdx4FK(&JStr~f+pMoIJiQ>crJ3I@xoh~qG2hVd
zs<fAkxaRwml6F2lPG9=kgfeB)&!1A%;+NwY<qQ^-0M}bP-)&Ynlj8m?(j%{R--_m%
z9EJ};3(ViMRGBLH-`qQX`t`5LL@z7uyesP8!{08oa=d>^W24BVZ16nv6+MfTkHxE3
z6WY0{SsAQnkFwPyv4oWsEB|p?cb9g)e@rN6HXtHeTnoVtZ=W~z)XCM{pmSu~aczDB
zSAxLv(6I<zW3_|6p^~HQrm`OqF7sW<`thWndXTUV<<n=XswwQc=1){ZR@r{kq5AYq
zJ+zC3mdz;I@#Vwqk(zYMg&G1v7EMpQ%Ua{ov$a*TE;t@#RY_q(CoMbwbjE3WenUVL
zkPO)<LNh^D0wM$U`Hbb?$D9I2>y0@4Zws!0ei@`7%<9Ad3WLTVpsAl^z-}CP9bJ!@
z26LO1EkHIx{<g5NSc3MCEO;m)Eqwl5CNgIb%n1GigJA`9IT}pVNt;J&>_M8n3A{?|
z)f-HQo6w_z6D16rT$4zkNfFeSF$aK#tF!YVyvWGJjf@N}+=tkfmSV(Z2~7-j>nUho
zNm4_ERt<WfDln=Vx?Ot@V-F%UatElcn0VaAD2~Ls0IGV8b{oTyChk9*&*gP=+6gV#
z>7}>I3b8eykb?;^TqxI_9W#n3$snK)h`wmH6LA%i!#whek6AGSJ)b5S%<t)tdT{66
zfpFHi>f;K%r&<;?pV&MRc*By&*MdSO%u_1aP+j~w+kTtmWm(l~i<ujunIdJQHmvOF
zZx_041|H`Me!6UNCH?T%S%yuoFAj^{)nc{19Q{p(`@zV;>leiO6j$%sQZz4(mI^je
zA?x)n%sn$_c0Hxq8qlgg^`UI7@b4M^<?^%KCn?2vzJINX?2T;`7=IGD;j>Fm9Fuyt
z?yzL&I^#>0w2oh|SbsSddBbKV#%t|Q!{+oGanDyCRJ}}1v3_^+;?G0hQ@@>+wxv;5
zQD#5QU|K1eQQLbc;mC0+Z;M7oSMC=V`|d?>@GvBJ+wbzDxT7K_JTq<eaTCq=y=O~L
z<pzt_52@dbjb52Nkj3`=v-P*2^s`KlY})k1tK>bYbovJ}BRw9xmTO9?6THxuYglN(
z?=3d)c-NEaF;Y_Nxw>yiGn$H5usP$|-#E7QjltPuv87p8Lxug}44j4Qzq3%g(J!UP
zAH6^C5EU(?B&U(_P1}lFzqPP3(RatGS}a+feO=OKqU!)qv?iZ-n<Gx$w7}3&MD&A(
zhXq%G<v<)hNV<&O<z!XMg*fLVd-H9f2U0#<z-)_!oqe^O@lJC?5nv@)2jpbNaOffm
zlD9UO@~&0lDo65_@mX<*N<a#Q-s+rloF8A`&`=UX<GR&U9;H0+bcUum(ppFcP19|t
zp}{En3x`88o1`zwCXLAm3h#ZehBGU0qSOpumRWs^XP;Za3`p`Yz|O)cdHVDh`z`gr
z)yQ-TgfNsNfG%NFi<W;pz9$MtCpGn|UzGJtTf>gXoEh89{>x1H?rmX-kv!k2vDYtV
zz8i(Vy6cuQySI^!*|=W2gGKCn>+t?Sx1cUFSDh2RqT(q{o$gl>cr#hYE~dXN>bAKV
z|AMlyb)~(7vi0Soq9<R@Y2W9{Fy-qVsrYf*<Yi^R*q`3=SdJTycO4s-ksK=yqkm_G
zCEJ`}wC41e&r>aHb_P3@D_mBKE#paP>}1nZ7b;@hryjAxr^~{>?xY?olT>J?+#P!j
zR{m{TgX}cSyh)XZ#GRz8Tr~95!}~|}Y_evP32S@!era~$pv)Kcy}@gZ1`ARhIilXa
z+jjB!udR1a1#~9giCpNn(;vvY^7E4DfyNHq)<FL=8NVE?_$m&lhnt<Eju6;+S~(+a
zd3(KN_F&S6==Zg^Qcn!`omLLLdSkJE-XXux6fbP8R#8jRaOP8$H7BrO+$MD|HO4D7
z;Zugsac++OME|GlAjjp~Z6a40#!6%WkGKx)?ORF>mYg(Bo4qNR9@u_ED@irO2;`WQ
z%|}=@z)s0JmTdmGxgc-o=Tt$@M=_X1;id!y7=9ck%$^wLKsE%5m1vS8erp{;50I7y
zkSzsNnw^e4U0Z_PCj0u+z~nMiZ{NEny|o?)^SxPu;(-?Cvt3V}sVl8YPLQ^j=MTFc
zllx4j@mZFZfPByLcZud<ZV97Qf*OK)=eK<gd?#h5$3z*N!RC4NkGj@7mfjx{TZOg9
z+1Cu5V{$KuVl;X<{grMNK+ihaPj4$N!edvcDIc_c_}LPyM9pR?b>~uGqs!)&q#qxA
z=%`yGoFlBy%%501Eb~FuwkEB?=uO}4rv~)}@;eiKRm9&H=TY)X%`)AjaLn!~?%-2>
z*RW-!z+!bqu#UJc;MOa-k)>NRQd?KK3$bKy*~Z36`c22NnK|`2)%gTVvm86$H!Nf@
zHo?r*r!7>}zDYfuIdxNFzxvH}#p)5)3UPB@3_WkQ?^({?it~4-X4w_I1$+c}?iw=k
zWUh}I{WhMXWv~GPlv`k*py={>>fIXxBMS84$DOYMeFS~>3#P*u7^3IEZU(bKq_aT#
zfQH_)PaBfu9r8VYumphq0cMGl(4E={E(lX<Fxi#EptAhW?}z#~7huJF8ZC8x!Z4P~
zT)O^WeE0Rbv*LVw${`8Gt?>Ir;Y7^i`dD8*e*D-`(=yY9m6_(wr#l%Y-X{uW__O7o
zJ=>Sdl9&25!U4HQ;T3*y^tvHpxC-J9dEI3E?d_zYqRy(mY%wt*JEP$y(b@RPnf@;A
zLZQ1)sybb1Xif?H!|z{BF6?Z$rgky8+HI7&#Q8_mvB;Qa>T>QZzU&{o^P#m(pZDB9
zndF#r6`=TAqv$QsyG=i>s6F2kXRpSTpi<q+X|%>~y1+P5C1AD5H8sxNs#MFVyI-u_
zV+&jNpso0#ca(^772Phe=FdGfcZ7_JuZt*O4rKhrbv3oG{??QDsDs1m3M-$jlHZTu
z;Li&;5)5V<kh=IQ=0?j}6VW|pHg`}vs8btxWvEjQ2<$o-{`SrEZoj3NKe?Z+8>8gt
zej6JeR}m4Y8@-^fFQ!)<Ic@Sr^yN{z$Tjr3-QOuvR@?z*0avni7t;KBU(91tm&z=C
zQY>Qajs5;c>80bsF;QTBkRy~>3OPJf=~|H?dLzrS7=)~dQyGH+4ss<Z*2sJX9u2Am
z=9mHCtI|4oI|2dY#+V=dq~nmN2;$&s0$MTC95=TzkI>S9^Z@+6Czy&lEQ_$Qu>qGL
zUKII`!1v)~p$g3~sKZ2R0uN1cLkx_Kc~0vz;<9mN1uH}Lt!*9}0kF#YUb?LmYyDh>
z0Th@iUQmxYU@a7Gix&yby<vN(;7CE|@cPe{!{t7WA2!7aXGt*Tr6yOKy}EvQ$1wmK
zHj5GF!&a+K*|PO~OV$W&|1PtsMU0MKw|U!ghh1ZFdv2Cr?p>qrE^?Q9Ubn<+?+l%*
zni$YuD%Dt>J3Vmsu=Qs7G3{oQcO}!MAuHc6SUj|u$*n$c)?_jx<i)(pY0kzk9rJeQ
z_PiV0b7=V!YlN2a<7=owIo`@d9oKa<JD?V}V9K7g<HAA-H)jgxsNXIQTm1uS7uRJ*
z@X38}6!0^U=+@OTx=Ll@@^bpOtFX6L@ym<)u6ZAi>WgL1+z#{>wQw7axs^%beC|>0
z>Bu=3&pm8LoG%P*=96X4?@k#G3p1~M1{gzBsg2Qi!x!<NCU%?}!fS%4pVCThev^wT
z<PzIk{>n@%om(6n8Jpxgmj<FP){Dhl%S+GSJ7M0in(N4uy2BU^0K*2)1+2m(!7SYO
znb##64u%IHN3^6Q2BhzXWZtgz;A!83PY<EN2uW5|Wjy}JZZsP-Vf^zPiD^I>PCyjE
z&I9zXmSOY(34|mh5Gr0;xte>p*JV!E-R?|g!9;-$WH^+ir}9jZyU`EfrCwu0;Gt@$
z43#6T)%Bi0ZAu7JI45+?%&rS+l9fji_E6b!>#;&jGX!rN5?=yA7Y2~>vFr6%9W_nP
zldGqI8(z&;khv1k0KkiZ@o}$13m41-TQ;b&jOdlq9-5WByx7IR_t<4OwnRReq$*ZL
z?ZxN&MR#nwCd6=QTD-6s&-BG$a3D_xLx7ov!9hdn`4EYP#sIZ&ECpMGRks*_S9R*n
zygkNr;<PL8#Y3Cl9@A639UuHzV9<(bV{a|T4K2Qk<0n*kdD)*8RvbMPIyKEADi(p;
zcl*<LsR!u==eXE%Z?$Eki#k$bS>5h=W%QGo<<LtzW}Y9TRj+ml$61(a``!x9Hc-vl
za9^>V(SF^nu?fkawvLvOOS<)g6Ku?VlKKu2Q@iM#9Zm9%)JD+#WYbJd@2}vDj-1JJ
zc%8Q9avsC@_jlhc8$Nr~`3b&ZeIQ6m*?~lvhUv21`dba&bv5TPEq6AF&d$GZD-Br_
z7W#fH;fX=AV-ANoORWC{{Sb@el}lG`wwoq1&d`#=lySNHp_I4inWi=Li4;QCGP9Q_
z1r)#i-uS&c1Z(B<d6(m@(|wgyc@R;dk%1_sQ`<laVG-b`PR-5|vO<1M+NTwH2oOk;
z7-@;gxEV(WCaegDJK0xpHPrYu+9J2nq$t9Q&_vgdwmk)B1X_<T?D3VnkUG4Fs)7iD
z;qi$T3fr}k@HxUX17mZpd}UFI2pONBpahAA2+0Y75OHTj92%{S2@?FbZfYf+!gLX~
zGS|RZ<N}=-E_4{NZnt{fm7}r}dreR?;)?CQE;-0sgFc@}_8g5#Bnjul7D4F2R5JI`
zNbBz|i}Am8E^2Hl-WTLxjEiu-t$g{iTF1|+slxGP8;79n!F-lyWR@eZOES!zqR{x7
zs8xP6M2w4O_rUcj2Aj@^E$S2kSGLT#e`(se*3Ma>TVL)Wk~rFQ^wqd~RwT0@93SXA
zn0%wU$kcDiF8Nc`Jxw&DLW){y$0XTy7r$+^GWr&fDjjW&0`n0IzoMy{|D^Z<`g?|T
z-xW^sr?ji2mcOVE6=$Q0S>~VLAL7r+{_~Ka-xUoMBrGn?ySH9CA0y>*`=fHo+$q*5
zttV%Won@Lj;K}~*?e8t@7sG@)UY`wFV|YpM!~RE_=xWDoT)x>2R&a{%30%KaqHbDk
z*IgZ0!a`eqrrox!-QDc2$*HCb>79ED64hFEoM(-WIV-$Q;9~%-ypPW#v#%9r>9g~8
zIoMm?ygMA5<aU?KRxj*_*UJuTZzZci?KtiT5nWjWjZ@~5-@+a&&pZ#LaJ(bTq0v#7
zGtIdt=4`FOj|7MN57@I!bM4M7y3hg@dlZ=!I+v<cCT;I>Q0bh|mL|?MN2T7nGiD_{
zdl4j#q218X5RVEF*N47ZNv}FP7mw`lahBUmcoQHVpp#CMEIpIoNwlzVJ|f0&#+MmP
zA_@M3bPfzwwiJ!`mm?Pe#DzVuSj3M5{Q3cW2Q9?VU%c2}?xTctxfSXI;Fgx3j$qOh
z2DNB2R-wjD5h*F8(J2rGIWKS4<`uYafp-QAs4&wEVXzgTMJ2;wt)u}IQK5`C4t;?h
zkht%lRu=msA}&6NHhc)?xELR`00+WwI|LClWCUA%64NMh6oT4-SCjl}5K|`1D>g%p
zg`hULRJrV}g*JOV&prYLAVL;k7;pi%&Lb7eYjM02(e_8XUBta@*O8xK>QrHk!@~Rv
z_rn%JO%^EF*(h)aXI^*$#r|L&BJ41{MFQUATZ;8i$Kl*9?e~(vO9UD01b_<QQN-U0
z-U+~~wQnpug!eS+YZCqr5_ckM@Tl${+ns;?<`8?1?TYy<$e%Di8}HPSF8CmdhXte=
zUfks80P=D<RJJASIP25r#*;m9v-e+K;2L`QbL`voTc3h%t-hkZGPj%>P#(D>e@x6`
zytlc=Td=iX#-TJ$NpHTqmL)5ZS<{7Q+M|4v-Nl=-q36mNSN=?x{^-ry+*H*H@5Bhh
z-MApS+)&N*^z`Jno_G(hX*kjWXV!6Yn#}ldGw6_0w3+4ER|1+X_VL^F?<yK`MCjff
z>+^8!*733Qxhy6oM$#Lb?ebtsIP)NGI~o$in;g;5puw9h9gqKTE(tS#XxWJ1T?PYu
zu8G+*A>c5OK)tf%g>yx&6FLwT0q}ffmzRUd6Sx4bpS_T9R1LiyKK?E6qX15`lG7{!
zbRUk2FC4n%7iK4JAuS7i69}tBQxA6ni}AAjwLnks5uPjYf>c&Ou(uKSA-QuQl)Wja
ziLwj-@Cd-c<zHoH`3#SZ$J|qg)M9qUSx-5JWtnW8`Y^w}^n<g<uJ1EZ8`S$cw$|+W
zJYg4b-R{=WDy#01!Her^OWA5!?yW4x47#W82^U18-p{O#J2nKS1e@2_+UNOYz)i-`
zoiU$x*Wu%H;@UgUwbXul`Si`@g4h}+lSoIc6}t|H!!OhAHpS}HV!{v+YHB!66;=Kl
z9&UuQ4zjGF-QfP;ybhUiZb^!m2X83uwn(}<G}E>6AT-3dL-=1yFbo*BpL|7)&koY6
zLAaY(K`ux5^R4@3;`X_R6J9Y&lI=EcH=-&P*T^uhhd74h;<}GK3cB|a%e4WbOp>dB
z$5^}+(z^;o1E5!zZsbq2XAfGcvSO@=v54rh4QR^0e*G#>7FpGoJ~Q;Wv1uTE)_VE(
zJjSQSc|OmLrJG#6;+iE7JT^8SckQplc>6GU7>=t)E2}KI|Ke)-5h4Tl!b4=9^pOos
zW+Y&U02kZgJVFdfnW(RVVlf5M(GJ)mV9>%yrjyX>5d&u!6&QWalxTqGCs8)uiHpMm
zl_oAD;2;v-I;t=OF*cwuL~4%&VJL!;Wi^Zqo&;Y9<jZ515fRqP(y)?A*_Az@nxKBF
z8DD(!Py8>K8hCt16`LTB#7nb5DTS4FM{Jel-v4|7P^aS@6Hj^#Y#V12F>=PJ$XHP}
zTAK`B!9GrGwk0%ea5KPWCQf{i(Orx|RzM7372>XnZC)@O=h<}=3UE->X%W7|4-+jI
zJ43di20B~TUh{117ox}nl?=O!xSwKH1u4s?!vW7R<^^+`=)Qo@i^p?-#|nWM&Mki^
z3o*eL#IXs7GpJ0AGH!#?Li|lYDnP?Yq_jlUj;i3EJ$~-7a&HBKRD!z-vWN_X{4g7&
zuK=)5m~Mn|2WGMro&ruuu+f7pCSquX1qF$HA`Ud1=~*&)ZyfST-YfjH+y_Fob}i^~
z1LwyK0V;|DFwP@>72!v-Ah*)gw8LH$p*0WE(<*)&YtkHjYCs6SFf^<XRSXIU=n60E
zl71tj%v*8q_t81G_qDmV>~4ve6`qYq7>HXvJNfRt<Ho3+jeoI=M=ZP8)Um~DN#-n}
zo^U$?0xkg&{JwVbnBB0BTBJ1@k)KLgU6-SM_Ux!+p%K)Y7`C13XoJ1p4;1t(R0J!A
z<cmg1N(x?pl>l5f$~wg8ONxMDfx;XvFe%@U8X3LDtpYbW<-GB)LqpqPEJUJuF+52W
zk%7ey5t(6O-m|-~*X4U3cHm>E6M+KW0rL+M7jO$Lfv8~$Plk8PQ2OP-tjBI^HSy=f
zXI*~=Js+{M0QvSk_{@L^+{QBU-F_4fOLKK|oIj+c1^FHoCO(EOLP#)$fQgv<;a%C<
zitu{<Vs<Q<x)$EpU!-_s-xM`cLN@@B1h_X10}x^Ya^l4wy`f36*O1c!zB+F5w>Und
z;h2PVSJ-j<>$UWF7!<y)tqlTefOy-Gi6X%FA1}wDg(GgtU{>i<Q<y{&K_ICj!Q_QX
zV-m`?DWcWGYir=yixmtuN&nE01{xV6uEk8L-u-xn5z$X#GwI;&BQ_%>YXpi{!1$|f
zM@PTG5{{TMg-9IOJ@%StElely!$IT1_0bwAk3OjuA4~x>+Qf|p9KSO}LUj7H+3$|n
zJ(pHHIy&aR$p?dL-#)X^!SQPiwt2}bnO~k>Ebh~af&>U^`>S9qz?>-McuUl#BEi$T
zn?_m_I5hL_wmW-lP>P?A_8OkOQ1)xz>$O`F`3ACPx3<WJKM58rY8%r@k&mVOy}s=1
zkgI~*<YZfN^4(m}iHY$bq|GoZE%-Xf{ZHb?RNa<aUB9(F!FtAK!j~TMB$k0?0mqdF
zOwC|nSd_dQ842!S!w_K_&WW-Nwfd|;V(S6hhzlU>VfJ;;upUlDB27;OH6=`P0sz^)
zfYGsCd^VP24t%MGAfr5ti;~0(g3;!{v+18SyRwCE;x{+%@q1@e1zQYq;M=}W;L6(O
zUVq$k(rNfo|0^1dAr2r;Bzm8_4AKyR^Ah)1B4LFDFXCr6N4bxAk7$(V)|BLA64OE`
zxj&$br&b}^=|pE%zZ;hm5$Bfw8FwU<Qg}0<cV!Yj68CnXCX84Y^(`qD5hrGZxZ&e8
z+@EdU1>N>5A~>(B>%*a*0*MF-oW^bgqZ)GCE#Oh>|5or`k^{;DZMmMi509LaFEn4|
z{3kZB`T4T&*x$E2H|Q|@r*ZEDJV9%qR93@v1)(}IG{RYW6K|Ph6JQ2U#zYwNz(hb4
z7WXo6>m<o>o)e`9aBfGW2B+6R+zf>pKod8xWdPMVPxQpLS$Gn^U3f&LoL|Ihg$jk3
zblz(sLDYD3<ZL6yS+ng<3`%dID>9pE$8#h*7eSS$O_I^dmHh5FN7RfUTs{Y@3fBW^
z-0rb-VTV|QB}qKLNc)X7Jq;By4#l-{@vvp@7Q2o4D&8n2MlhojTZAEZ!p0v93kz_S
zdWY|x$Dw^623?(dEVZF4j1cN6EiH9C4wyDzuT1z+CTcJRN#+jRUeIE`^WkV~SXW+@
z$Ojrz<)lp&XSj4gR||qmH`o+&Qd0WA_Kp8^OFCZq<3OzIC9G^Gt10b|X~TDqD4xW)
z7-lnlp?h-M4xyre`0<5Ia3T9khi)xM7QlISjrp76Lzvp+s6w7KxnXgQ5k5OuU@%uV
zbC&1Mksz99Y`SfW=cDf3yNwVM5S{7h>8lX=_@$1SXs8?G6dGVxdT%W^Zo~mx=ruTl
zV9KBic_`tmLdAe4fJ}I`>Sl)~)kE+~&kVBYnhS-4Xh?a6&J%-W{L`Y$-yd39paxAs
zwdv;WPD$L5(A!4X6GsgkEzo}*HTp*NPxb@qcLVCRdaRs#UC!Uo7pT~iy^OnV1fnL0
zMb()|DFwEvAWCxF>pO7lgQ6E{4Na^zN&}FH3_FNq8$~GLsBGLwr;O7P1a7@V8(gSF
zQ$YOLNrtHKPe>wdpui<+cOq!VDmV$VB19n}CV_(N9xP6xQo@4(jjzq<?9s=~BBHdA
z9SB3Jh-)(kc0of$RlEalK*sH&p2I5?5#5p5v}vcU?iRIk#=nBbxO+h6>~SCF2BJU`
zTOn<(#n2LqMtmX`E0YM-L7~c#c-%G?5*n)C@obww`{k^($4{P6W3Gz2fVhg`gN?yF
zl*nR9)F1ExW0P;K4*AAh{skph_f1qP@v1O6ENpx!++|>>n%=@P&g-><5j7r0w`|B!
z(zx8y?_{=JsX+ckws`by^UNF-NFOkTXw}Jdytjr+8NoK4p&hL+Axb1kETk!GI9K*y
zcUt<g?p+rLn?Owc*AjCzSc=@=>$(lA9ApOc14KiNjd>cMVe8j^;~-GFh+(bmdkQDT
zF!)pwMh%$0p%8VzV9^A2{b=yW$QG6)Ao;;!1$N7LUk734Mh04j+?@nZ<w22xegY0#
zgkRn{`{>Q-M4TZGqrAq4uwwfA`yJ9JqrBtc0CMuhXVym*8h8O`k++-kr#17sWr5RG
zG|gyIhFu_|QigjQmerGzlFhh|$b<&~8*<j;WjOB&hM@IC1t<_~aCtpg86dL3Kz8DH
zkMUCjI3+pZ+y_(#Pf|Be&*C+z6d>Z&dlm5LoyM|%8?O|PZX4Vq9aIXWVDA#3LU@6u
zi3umUlQWa5`bk<@MMVWy$dKWM(V5F@cB0I|HXIxu9~XWFLa~rgV%lu_A&Ej~3D{d8
z6u0$e78a^*dMo4=I?VY<MJ9HI@!kufuwrZ}b)K1T8QEYGiL=#k|82Lq-ii%rq?X?c
zgn)&()qzD!2%iAHNgV>{Ng5@t&^{!^8WM#lX73H-Lxo^G;nv;{OKUVoMAPgLAq}vb
z{2DTc2QQS=>-mnBXvG*SfT+8}NF*ZSE;&IkXh+mE5uB@CV<36BAafzdm(<J!;Fm<G
zXo2Sh`-tsW9*L-v|IG%1;GCFLK@%{Hx(iMjJHU%328I}EF;icKpCb6Q0ytO#u!eA2
z6TGdyUK>p+G!SR7xdBL^M<U)J;GX#8jc!JvHUy`<FQX~(MymQ@p`j!z4b?Qln3&+o
zi4}#R?}4PN8ZchK^+l$v^~zV^CW%?=RTPam?$b7SCjcr=Kndd@Dvuv%4S7F|P+$bD
z0@^ALAqmuLzB{xAiEtIj?iZBKLy%SD?jkCb_t{nlBBd-F(fUG@O2VRmI6(P1_-Pq>
z={<1VhmMd0(BRx;VrK_RM<7JF1;t(Y`9^FDiLfB<0eFH2)XYwq&PAKY^GwGhcs`32
z9;0rt-C0l3Dbz<mZ169B!kVpM=5UgJGkz&bWmpuY-f<cxAO0p4CgdW(@(iK&&$RS5
z!Wg)yY%BI^=6&ykwlQYvN8xi9OPl=xAfy_Iy|sCP`9lyD3}7+2gm|Gr1|zOb=!lT|
zRdYCC>i6&c;ZGXYs^!_WVz7x4+ekDm0lP<!m05#$r)*w-AStA*A?v%xQEGT@y#)q<
z{Y5eW&=XCf)FRe(xWJv{HiQ0m6?H4I+4#OSQ~+g1`}vofSVF`#S%6Ssc_!#To&5b9
z1ZHCv?rp9<YHDiP$0Qtj_+5&*Awg1BR?eF^f|<=woP{<jRQyE4<Zc{2*k8o>-Y!qf
zz99!uNXzynH`}V>tHv$2zQX~+lgR>*!H<TX$QU7U<lniIRWn@f(pLr?dJa<Wp>l)1
zLT_}a5JGLDR>E{&@2LTy=3!{Fs!`<=)(3HY7zJ$ryzWN;M~L8O3HeLDJ7i#16${er
zS`bTshdo7;$+680P%sryPeI5mgQ+nHzVp~{pOJvl_x8pzewGP*{NbH>0?G<vWC_{T
zMT{QMnQ_WGY$k01>LHLK3DCwzN1AB($-zD^TG2}$7TLr2@hI<%_tX;S73kdGL!o5T
z7^4Z@9649P7Rdbl;DNR<3Qbk_!WZ8?unkd`ZzKIB6!ZjG1_Z~x&8*G`S&>@)888sV
zFYmq>`ywZ24x5NTgkV1MVtXk84ICmV8>g}<8cQZn7Cvel`z!OpOND0G8trW8XzZKQ
z1P>&JbGhf*Zj#X$*;cUQNY;rBHO=^I<BAr<8ho595S(ij{J@5cxIG9vn@Es*;5AzQ
z9D+h?r}4o-bjOx?>5&+uL0W-hPkh~yy55&ZK|DptEji(WxSEN}9F9}4GRbuhXe2^<
z7}kUm>|w|03c~Q-$kTujYK6sGkCaW9uv+0n05TuS9pu_$fQLI?2uKC^oQP)4Y6I+w
zRbOAm9yS!JCx{`x5S+a<8z_for)wtKaBvxj878s5LUsQW@RdmKm~j}&K<KRi0@d1I
zG=~!%t`c$wg6siQjd=gS)3z&740julR$Q96wUVxH5Y)VQt_kH6UL<O@w33vHLZ(aK
z+qV;sdmyZ+W^i8tG>x!F4+*>!#8G_d!r|dHI*fVnI7NYW7+e(~6lc(!0l_3GyA^xZ
zqdnsQ**5D-s~(_8IQex`O9WNvJr?0lZ%w;SRbdiX+scU9Chm8Zns4MZ7CIF99G9_J
z;C*aM*f&5+sjnz5At4CF3dV1CTTB7-ydQOT5HhEPcFo@+E9;_?3e&-Z2P<F*o)pH$
z!Ep%`n0%TIj4Q|8_G^;a)nmA05dj<A2=Dm(8M6d}*#AH{faLnX-FIo+(Z>ou3Me1i
zEqb}F)5LHeqb}mtfZCm8P?A#w!ialU!$m?#y-%`4$e;z0Ec8y9bGM+31J|qtD;`R|
z0C*|D@vRb+8l+`LS$e-g?TW#@G|8TeSB!<NWHv6ilG0MF+jZci;hsg>TE;VKFDycA
ztnHq^&y(;881@`Pzf2;0Bqi4YOh>XF7{dggBmNIS`L;t!o`1D5g5(&%f@BL0YK#N<
zVMaAgym^rt2?VbZ_hW=TkN|YRNf;m3?{XrNU(!K+NMR(Jed3s_pwRv9%`z-Y`wEBS
z9s_wN`hP^EkrG2T$}7VtJ%;!U6T=hKO(-{rojhJ8u~NaLsULS4)IGqY<^YS}!o(!t
zJv@>Sy<P#jG1<ScV?ahagelc%Y10|1Xi})kBpM=KRc3L(iUTy0TKo)7G=D3zJ}W8r
zy9&(~4hwIPkJXvtDBP&Wip-g+hK8}5(@s-lBnE}C8VY!FU*m?xU;#H9xerm^(ZuvN
zB#Pv~MhvwP#A)QS2MJsJ)YYo~6M&>}=&PJ9hUo_dDUqPH!onm})ULEwLc+qRR9=B?
zmt1lekbfP)j}c#Ibmise^MsD~?AbFhpNaADcf>arDAutOx9o7?99T7>^2bx7iBbKD
zLu3>yKWU-{rcgx9265{V*h~R0MCRai%xH`3Wl_9?57LA~330=Zh)HCe+bY1hfK%_W
zz6QsZm?0C!h(rTP0V0OKNZ-@AjZn(d%S-b>_bD3bLU7i$WTZ7hTI&Xlb%Z^ds$*~*
zB~Jxa05%X7wwi`UAj{zbJPv#{jn#5BBM+>#$uSR-4|wmdz%=vxoF=&qGebAT`hYe_
z7_<bA0cS}4&C7Fb>+!;176Ey^TDTz2tQwTW!8mFXMF`&v=FSOoxkS$n&@cxFCi-Zw
zAW7qbf{dszYHpoFg#`V!7V~G2P*B|Rq9jp71*RG<NK8HnC<34`;$td~ix(JwpElW#
z#B%tpp*SX+0LneoWG?_>2x=}g7}!ra4Ng62B0Qv<r=a%OjIJMx6|Gy!ISYQq_3MpR
zYeR2FN*lCe;P;YqM0GDtUwS!XUzCzK$3qMH)_y428KDmCAnyMF(Z%_BTqBri{xhZ$
z#oRzvmbfq#j(ZMNhiHjQaxi{h4@*!``Eje&7dGTv-~X7bd{8W}5!eLt2x3}@lN@Fy
zq(a<Pwi|dd)&+XKgE05GcqOW^gP@KoDp&O{kO>t;z1aNbquvD<GtKQ$){33XMNtOc
zKVqB?!Lt(Zh1Qn<i3SJjyXNUvGF?zMA;|P&mZhbM(2k7^=w*~S_rczp*ug<@)1G_w
zZi^9`5KLBamY`ek(crxsX3T1i<@<iTXBYg7WP98mziw-9?ZpBXJG&3&2jpnP@dD%9
zo$!qu3ZWo-%n;Gw?wA`NgPkBL0b5K+C{nriABr>8wV09-vvT5@!F7Xx82KMpfeD8G
zPX(wt8pET)4{^d0E5t<DbYpC?{5!wAFv1i>Boa|XwjKb&#8x{T76@D2fou@F@(<XG
zq*}l+=O7%rO<fOm$ANGLh#{uL=#B+6S<q}^X$Rqs1UnJh9!SK&ig=-AkNSidu#@7B
zI0Wv0OsXP0&?5UbU^{@vNd1k^4H$wRFamr~86~sWwb(;4X#K4*v&7&WbL&F*M@P$8
zhyGkv0(?nOQqt1P$!)|jh2tFFpPS8#oGEpy?;%OX&)*+;MdZ*ts(-=U9?;V*u+mS+
zM5EN=9l^*kqO}%%0Vd(ANudVsb{zK@${C$)P81`~GZ;`{jbm_y)YdvIq<b3vI6S7|
zVfYZNVB&2Kg%-GW*2qo?wRM398z50tybn0>XgqG7gnEzIZV~Ax#*p%{H*0x3wWq4W
z1w-&!?&4y`H8MFn3xzBaTY~?wK`)tnMUOHDwB=ghcWi?nVIfMmCei>b2=q}CP7p2F
zBO{$1i;c|XiUeR8o%dI9;8tJ->sd^7_~}+*U%j$<VICD#RRc%@q%)GtoSVyv+X@Tu
z_##$6#Jc&?jo*Yn7<&D9U<Nqn1iJWw3y(X~qPrbZfOWUZ=lSorm{3q~U#e{G)%Y|D
z8*8kxg?=2fKymI(HUp1<=T0hD^mPdRwwV<G?Q#{Wbu!-O2m|k*pD{6pBrI#^^Ji<@
zE?+PwwuS(0Yj7&2niuZ|-mGQXkmO#?VR<y__Jy<FC1YodZ42PXf_sQa-s*SfNT5r$
zu;;8ebYYDxj+**20AGNh?4~IB)pE$8JY5v}fOocr;et3Rs$gBE22_(Q6PVh<E5A6f
zu=uuMNKTH-M<l*ZVej~p^{G+f68-p7n&F|RW{F1W<YvPMJpjjO3@%t$S;6lx>R|@n
zK=N5qp^qrmNN;V)vQ#2>KU!b($XJgAJA*@#fE!lwPe4s1>Iu6W8w55!qV}$s;{XmR
zayNsq>Ll7tkseL7QE)wPA1?uNLyBdhDN1D9vSkZitwGsiSEOH|+fBQ%gqq;gn{Xju
zH|ry`lC&2L#Uci%K<#;l`8sLqfhz<j9t8Oloz}(0xErCNr*NO(>LK+WYzR<zx*QrK
zh!v`Pqw0I;y->f8?0#7Q7#Hf(Kmn~ae#)p95#7v*6Bh*nY$Ne@He#8gk&pc+M(CLR
zm%})j$u~tuM`Ig<xkduEx*JcDI{tGBA02i)tw|)neH>|e$YDc&)x~}X(>fsG#1stI
zJ3`NiPXgGEqld8M=Ky+kQ9nchH;p7-#1s&D6WqaIT`s<eE)(VnH@h8NH+&|}v%s*R
zcJ0S*#Zv~bnzrwdAK&E1qer%*__HSUB`O?Pd+=dQfub3B>6*1`e@g6JVjN`F05R98
zmXFSlWeSeos>HesC6U9yPOKxGdJt=)Uc$$VUuf}0!GcwTVRe;ZQlgm_`bBu8lR-zs
z&*SFvJ+1v?V_~poz({6)lIHVsx071!R^m(dGTusToTgpQOe?#q<Eo>I_zw<#{>}ZX
zhjgi__1>h`g-&0xULSio#<S~y>#)<;3tgAbY(BF;TJMb0Ym>_w%#<{Rj8{+4-F|2W
zm)$QqMSH!BS|@I4x4jqUtBWnMY^s`8zHB&?pZ@Si+7Yj^ct(7J!MOV$m6mej9k?NM
z0D0h3=nsAR=O8pk>x2JZWX&5J89@+thx5(INOlYd`$2kK(Kqbw1(=A>`J5{fFV(%g
z6aZtpyjfh>m)^S8ztWea<@GLn%3s*$ogFxda^V{MJJ2tjfcr3$1~Z6jc+!-<-YGAy
za3+cf?ApbaBXLgj3tAfRp8!ry-2Hvr((;z&(f|js(T&_@?x7jGIoS5Zi(?W9+HgC_
z+<0kpW<l{*{H7;N)Q^s^s~$bNVHxvUD<nx^JhvHEcJV7qXK;7GePs6+zYphk$Is5c
zv$+({=OJD7vul{~<u8ROLCxT>u(5m*7ufK4|GXO?BfCXak97$d<{xE5XjGJe`d}JE
z%;*D_u9=UxH_m9(em*S|xYS7R_dZ4KA)-()Jg$>bVLI{R^MZ3er7xOUV*2yPCWN9?
z)@gaHe3>3u1MfRHc;%cZQjWy$hntDZkI8w}lHujWuHJ&C;`i;oK4r7<u8-^&HXXVB
z=CmqwA>rW*6K;0-or~IzY}Ayv2{|IT)%>ZNZU@^|+!oY)C~k@a7`HnW?nQv#fuGOs
z$7VxiLQ~$G)%|pjWzrHnRL*WSd-v`g%G!_m0YHmyD)adQlR(XPq*K_fcI2XzpFhps
zhWdJGk6*Tu#r*AtLIpm+R_LfzWrP9jklt?Y&+_dJ!NBy;MXb(|7)(+6BZ|U#awf}%
z8$Kf>(gcGYqOb|$isz#P{8HTuqXM!pww{B7Hq3-7(H4Ns!)RzoB<3JP!?tqakhK^*
zde)*{1(J!6JT#Hak0=&wLe0dme9%s#3alEQK3m%`Hk0`1QGdzSEAbo%&p;Uk6VNsJ
z-7cFzu2hw=*tUD{%PH!x-!w;-@tTQ=EU}G2Vce#ZY-m`6iX*SB(wC0e+&*0JQAWnP
zm7h{8ez?!wN-fBGL`{imxA@0rJNeijew<;I6W=DT4DUUtqjSw7>wvYj5XxtN$lxbU
z*G=cla2Uu(H4XbW4OgK{MAx@oLl4gKz<1bBVB*^5^h8~DeVh<;vv0uC&JF)@0U*r7
zL4rxxk-h^;3(OWCqe4sQd}I?76Qz-&M%)33tt;AYoOl6%2F{9B4SS$Zc@7yhP@Dlw
z#DXlcYF*2wxhYDgGk7t0EkVXC9rddFz+||%xF!K^@WUd#7p0ff*e(oBPXS&eWSf3x
zdE)!<v8`<olA{`P*X}@|_UA^6xVgCrn}f8m=s_@*VOX4<sFf|BKYV5SVXrz?lj5IW
zM}aTUB91RS^7R5{YH$Pj^5sjy%a<g^h8+DAzv4DRaN2-A-3=}6BDWQ8EO_erp{iJ?
z7|)2}xE+Z{1WZkd^H>XP388buataUi@#RB>2Do_O53_|NSC9!i5S<#_#<@@VqtsG9
z^n-p<+vNRw2SH3tf4{*I-`v%8J^s)4GaE4*g?f+5z{qF-=g~y|{WRoa&6cltE%nhV
zRk)Tfnv?GN;E^LiP-g)Qdf(G?6T_9Qr#F@N67$KRE59+YF*SYg=~3<2%qiSTrj$MP
z^;$^vr9m&#X39P`<3Y?N=Z2(wLU{j-9H?t*Isl#+j)QDiDqxns2@I6dXM^hM&fBjs
zaQay;|BS*`s|G8AlH!QsydcRlD5e?DLvGS@5HFBlvjJD*$hU8*7?GiDX+4uR@=oHI
zl2!k!Kwzl8y%V*N<w)axns)Kv=Nj3_%AdHYBdYWTHd7F4JqDmUJ28p9fiihB%0fVt
zRA|v?5a<lF4z|T2PwGA2Bg1~`VeisvdwY8vZB>V)N}nWM)(Q_GKL8(x8)l1y0tHlv
zg_OupT6U$}tVxoI)}H&}T22I@#B2Llo*f%pPbXWmyxGubx9Z>KkTeZIojGV+zQBf~
zJ~=PZ9N$CE%)X~7kQ>pFX)c)tOPbGwY>guVQ@psqA3q#$H-Z<x8NPg}yRUuw_RZU0
zWBBG2T+k{p7?~QgTrqukcM&$BCvZVBQBxj1d>BNoDzN4jl6q^=4!;_k8Gz7K5^G!m
zM+X;i2`F1=&BFFsg?Y!K{^Gg^pec|wL`<XSDjB^gN-b`oOYBoxnO3@U`!<E4VRL(X
zFg`Ey=jJEz%19C}nZnNfnee%#%t!IKIT+^(DFNYlw8jL^kAtZ5=}nT`#-{KH4CzA=
z&a|{VTi(WV=<wkhytYvE(tE#@5`F}kaS}?&9KMq#tBoXSquFPHk9EOFk$lXd!|G8D
z@E}BSQhK)7jXLb+Z{y(0eCR&!?{m*Fs=H_Ve8b0vcS^znMWKG?s%3D<yKTMa$;ff1
zZ+;@7rU|N%*2qnyD9z)cR>3`N8Wi5=EvV_&J8{6+m;(*&FAuMHdQT0#zS+foCpnbd
zXl>Qx%cxgT9t>x_nC)J6p+2W8MLIQ6WODw>$ml4-m*t%0&Ex5fZ`D#oH6*nn%9wf;
zzJN4M3|{>OHTegPSvAD(+wFdMQYKn8u5)4*#&GuW!#q(<<vdw!VR3Ohz>Pr?v1=mk
z(H}p4Bz%@J*ElC>!}+eK+<&-v@p4>>`)7zcpE6d57MD_K)*t%~T`R-4o=P<68t(ey
zM%|l^ACz&wr_d_gnlndYc9C;#pGjn1)3a8)KtWBfo23#BUh;G_G?qtw#_0Sg^jH_y
zSx_sfAu`OnoEL+?Ki(GG)WZdjWqcZo8_>a!%vo}~h^o45t}-7}i${b5Po;xw)Wbb$
zZTqF=_T$St?@Jp;20PeR?j3iY?)P+^#^A3Z5-6hpm-gSi_JEHLUY6RUTZ=+b%uyX9
z|3>8RkKBiGd2@|G$VdwigPT<33$}m1Km(tO3c6-CVI1+VUbVYl1EpiNB)h3l;zNX`
zPkNN%yz4XOXdY@Fn}LrhLogFFb92J$1Ulw!=hG(F+QwQtBGc09`PMXZVCnnuDW`mZ
z1Ml<aVt8=Ocv0ll2?!*rgzkBPUrPS`^NRlY|Nbog0{{F!{Pk$&EJbi|*|QUxf|2`+
z+-bsmkV4JOY|h9K%G68(O+`XimG?5@e;RrTBK0#o>|PK{<48XkPVHYwp&7oBkNmpC
zbD`a5f=7}crHLWt7I}FyJZsHq_CIC@U*#$@c{N2g<Y_(hOG_h*rfImiN9|Gi!EiyW
z36=0CV+yR~o4BZt*+v9AxTU4Nf{iMl3|(CgLw@Hw`R(NOIv<uMAJo3`-X`BVz5y&;
zm*T8hX*|1NTc#7b0r-$Y6D!7MWG<b!JvDztBH<AESH|3Ux6W!uS!u2+_jxe-XKshn
zTG<A?$7aLY$P#?1*ks#vFGXGhLwNs|^r-ETGKs`Ysl-AGTt#R3ZlTK_FtE#!P-CqL
z6AKV)kh!ABiw^<c`(=3AqZIuwN2wxtX3a^b{=Nv=D%Q2QE>K4fKmUAwuAkAztu*LE
zR%Yfla{Ur4*2BZ&HZr>r?Meq4h@XyYfBY(wNIesi5O7N#6%}!z3ah~cPO9J?n$$^L
zP~32i!bUu(rA0)TIJpbLen?!}Q8N4Y!CV^r#VJtqsGA{A{qOa}b&ZkNyEN#c1v&J{
z0Z9C%kAa$qjZbv&D3UCl_Tn{S;ME7#{~nOtNJk1_*wSfJd{YqU|0KSEAUmL=QEKQ-
z!kI5IIr(d1?OUuu{4uwGOFqsxoDYkCaFO$y(B(*MVWLC8l<kMzen;ggutr8^7H-%2
zjnUG30f3??t>nayR_05v=eV*hR)<(8&+gq-JuzE_qk@T=eDkyGeToR|HBwVEY*iei
ziJF!D^QFrxW+G2K)Q^~Spc{3=pqhdLW-t}t#Xa}_<AJgzZnoXX*w_j~V(?ga%BF5O
z@<~X1r|-RmmKy`HQz-6_<(yulu2+pg*%Umxh|xHT&ZSpg*jacp^nX`-R(3XX`C|8k
z6YOTJ0HSvM#4LIvR8`fte3q<GQoR~=9#~nPSRo;e@FIp)HuCV;;9_}AB(%NgvN#4i
z*WqDDg)!z;1c!j7%%~au9MK$P_(ojrVg2DyIK)osCQJygDpP>CxeueZDS+ZsBkPPl
zwzi%G0*#x@zuC4LgJu%X!4EYA#ruyR11w>tOp<}gU<0>0D@rBIok<oN2FAG1CyBAb
z%*@POqiY#eaW~J;j&29p<w2!oDnh{niz+YS4eF#xWOwxAqEb6^W@|@hCmAQ$?}bkn
zAo)IkmBR{|3JMCOw1jEMRMyHu7LFi}8SjsuKEWCY2DPfJo*P&Y7y>7;kd6-1xj)|c
z=)yWU$dhbttsdQ>?)(9vHK;R*XFX6j-=6PxP@h%~Ps7R_8+#Bq1o4c!00+f>z+kZV
ztj_YD5htZR#e39hpskUd6cyaL7{#qsVbVo~OG0JP=n>a+(snORtSn0{|4LD!9C=qy
zM)M#QX5M(3nYq4vu14y8ON$@Y*C4w5{Xo!2g#q!&YGp@d!rvz@iw_<?Bql_pGyu7?
z3NHtn{_kBm9IJ(_4JJBjvbrRxUQf)D@i}f)LNEd*NkM^^(c$99$0sVf222Q?*MEL=
zjyj*hOpl~F5~2x#FbM&S^e*Ftibo6$on2fo;jXaDvuhC2RK;ytR9uXB*0M<jxNzfm
zWWO(p!%YEY07U$Q$W(a|`KI~(dtW?ZNC&n+e@iOhPnqUnyeL)+#$R@VPfSvQi5W9c
z-3>;WW@{+WB$FbNfS1;LsCURM|LI-f7QTx{3G=T<X=!P_Kjd%^Vu7k0Iz&$jnv73%
z_|T_FB?U^>9PGL?GvXgU3<JQp2r@7Z9XGJkbdMbi2A;);AB74_#K2I&aX6B^P${2z
z`i_nc`1ko@k)h?H1PukRA|oS%f~ke`024I;SaL3myUcd(N=Z+r@9yp<XCN&22ydK}
z0a%MwpofJ7(sS6=iX7BqEilVe<hE1S3$VxvY8wmeohVP8jUeazh@Dk39rHRm@CmLZ
zioo&~*Cm<zViJfCkQNI?U!Po8@Gb^INAgmUrv}JT#l$4~B?)=y>gu{3_6J2C1qG@6
zNTY&Jken%#cmlsVHIs^qH`UbC;BZg}9{+M549&os!-o8jBZQ$Vylo>5;T41p7ueX?
zc>DWp`n;T2v{MubKs7@X6Hr~E)Bu;!H2F<njAJi;I<9DNjH>CSN_<I$2jlvtJF&4h
z;KsJe+}xa_Ya&UJ_wU}xd#%kZz{P|Lnxs9U=N>><#{rN&Nl*pAYOHh*T%O=@Tw!9V
z!;i(_*N-w7($PUu7XvOKoLq#Y3hdpxiIn<oZf^0}*q<QQBWip1mqHXMn0Y;T@IW<3
zNO9$gAD@|i8{u&QHaiK~$^AW-gh}QXX{yMuiUM%gDhgca_(#4yXScx>8uK=B;YD|H
z9cpx4sO1JZjgkUK<0-^Hlkz`CC*|b?pB^h}K)wcyX+A~L(!b%l@jA@m&EM<TIgeC8
zRDN$xlL_M_SOf!r@(3AXwro}*BjF5o2FChRRlLhgAouWhaxq*}{Gi;JB(fIc*D%Z~
z;nTa8bbP?0uV1^in$*x<pW09;nPz}r!T-Smm-C0wfH$X$`lijr^jOI*zcS(3TZOqB
zAqSFb-<0+t5Elw%>;W`ks}f`n5{fLiqcETLp53%hr&3;0#pVUVs{^PN{BWltJ7?8Z
z3bSodFZW?Bk2(X7hf$^Za+vVn&AUp@>ss(?Y858ZnZs}j$ULbqa5H@3;RSUP#e}@P
zyfjn@$o&x5zMUC+kbHPY<%x|5p*rEy1h{z&vyHN!5n1FM#yETAg*P4t@Chdj+jH~s
z&NduDeEqj?c3>#S$nG6%sK?9{_^XB2j3L=(82@`726Yuu`&xov%y@cu5Uwbm^w*Nb
z>o;!H08}9{IvLOH_?VOp4cP$KExrq<^tg4|sr1BZ;z@!7P8tqp)2mOC4Hulb%Lav@
zFUG0<ILihI8h~DrdDEtJh20>lBkp4zVeB^J)J6;Y82g_LM0gOda@!>@o`aJ!gf#W2
zyU`-4;KCvBz>}1eEhrg}yn_)*a7`Eo35uGFUzz7cH%f;~5#nSXT#Asn=7c$Dri-iv
zfFFeR+6tE~Keu@!)XjmIZui4k_BG&gwN>m8qhfkeNyd(VCE$T|_UcVI(VZQ$?<!#4
zwQJWLW=rdUw&izD<z;!T!yG|?w3*mBkFjAvoT^cn?ZTA_V20f71RuaIQ%3+ia5}hF
zhm|kSWZ_f;q(+X~RaYx$ZteJY&yuSA{k9~L6h1m~Ib$jujDs=A*#Iuz)qk-CU;(6Q
z#r=ZCLSnEmFkw@k$i0n3KE<QQLE^%sgxngKQ>_k7L?|fj%5TS&)uk4U@lCW3-?6hi
zC;4?pynk*W?I*ccP-nwvmkf9CSus<1__JZNc;)N|VgyEEZkvUnVPH{_{JzNws$sA3
zMCf8@d8@%$d4Bp$xMCIoV}k@W=iWJbQ~kvtiA$0d23#HTt*x!5k4#mVFcZZkLbArm
zIR#q1@8|Qc@#)_nX7hO50QE2$BBtZyFF_1}a~Xkvs^gb`ZCygmi>4E2LnW!4z@YpV
z-gAWPl*DvRU8$r8yv)tJzD~KJ+mrJ6b0W+ntfs|L<p{dqs0Nz+&KsEUVEmNv`x-#A
zwlNKIjL}~-iA25M+|#ojZO6lRh(mjlF?_KwH!(w{@>DV|mD|>w_;|qO=-6HPJ8%Ev
z?WeUuI>&KMbma2jXDai(pD1WdN)wCG8FsfU#!qe-^27h$*{B^u`rl;r;8ex%G<uoD
zrgN@^W(07--ox`$lQGBky`pGYzIaJ)GpZUKG^mK83=V0ee2A6ZL7KPV5v_k35bSH6
zlxfmtP=(d7gpb3h9gRy;_Ioib5<$&V^ld5!(MMz!tCBDLvi{o+?$l#dOMd#k4_vn_
z+s;#epVRW>^}A?<F#fSOqh&6&@Tob@PL34jnIIKrfujC3eiWpMtmEU;)IYeLuwL+N
zLjsLL{_DZ;n&(<~O@fM(F}VJprCLFjssZ{Oi3VKjcqa(v4ox(hIN2Np*E?Ldf|}@N
zP|W{rIPnqHkbjU1+vw%@?{Jfk6M6}A^9=bp|NL2}C6TK|-U<HvKiW$2zW({+AMOCS
z1;5X9b~Sq`_Wj?NdR3%7RfSap1FR7Y{BvJMQfy@UuWhA7nmjsp008Fa&!3NXiDbC`
zw@SyaR(5vK4{kh_Z8qHh?_V*Sd&=vb&M^Gv=L&FLagGuD`_RcNV*a2`J{<h9)ot-A
ztNYs@lecgp;jVSzky*}v|5f5uZS)^##WQE+{`r0!e0x-^AN<ezRQ>;cpZ~k7{$FqZ
z|NgH>Gru&N@vu2$wVWvg#=uE)f88qeel5kpz|t3;frkSft{>Ue*Xeq|ta$6+TL>#)
zQxDs^(DO^rXyaMk7bG}nDtNXDd=loDdgmK5y84);0O$c<w1cjPdnhFe+-LglIX%j>
z)%{}d@Oo9AVgRRxy2%RXPhEq)c2On#_K6=CPBtFfP*(o&n%pLTwtqiVXD_qngoE#Y
zHLu>6EvWiX?C~lmPs7bmXZn3y3!nc<rF|*Q+*>BTs{iXbx%j{P15b5?H&aWu`aCNW
zuc*p`nZUtsy4>ea3V2VsaD3t&sZ7+gxqf*2ug{8n>63FGeZC+1{vv)kRqXxXQA##x
z&VaCv{d$z~mVr_Us$17cn-4zN`rj-0V-}H67pVPKnorb7)!pB3@XRWH6=oC4G@beE
z^lE?nr!U3z>upwV=@gPrb2V)mk^8XCYK)ojX6#yAfKS#%ICZ-1Fql~y9C1!-*ZaQT
z#GiM(d+qst0htY#?<;%?a4U8WwA}UYdhfQ)bl0su&2-}ZY_gS{!pe11w<}_wu6%oS
ze6Pp*uev7~IUYs%b_?;`XAp?ge$ltm&3>(J(r5pE1GZGT(c0+=mq$xac;%U&2WhtJ
zJv-rbm9{@}`GcaJ&f=8PgzKPfEbqzvlty8}KQ^r0&6d_a7rm*saPO)OEeuTecm2Dc
zcAhYwPB?fe<@)*qj-5S^?yS76oBQ&7lh0D!no_|NLw-)$jXPDPX4q}bOKSpU^Y@(m
zL_ha6w!dTd`h36m<x=|Ern&8kt-eE-UNPCTU3hu4GP26yyTtN=tudEm_MfIXR@xev
z$i<s{CVH~(JbmIbmJV*2Pv6HYGg+i8OeZQF%h*Fi#OW*lVnoc$>kNz~MG{x>e=s&+
z8<|RToA|&JbABCPqcH!jN3)||lx&XU&Xr@vQ`O;gUz(oV9<|O1|Fw}hy(-`0Y;9+;
zS;3`n&MGURREp3vFFEhmxA<MwG%231z3rpz$w_tMn+TPB?ArCMbE>afNA-0rCJqE>
zRJXAQSp9PHnxIm<9GtC{>KJ)pDVO(#B&E8^;-|g;9Uxcx)2KDlj?hfLW>4AuM_tb#
zcdy|+**V>AR$mjTf#a?w+a;1`M;Q$~nm-C}kym~7y{jxwE$8k`-NBEK=L#6d7=QKQ
zn;wZ(q(oSVh)F9oJ)=?gdv#b~|GE#et2G*<S6j)@J>N)^>yj>#KFcquLhGOD8u*1@
ze#ygHaGy7u+T&x!0skB$wtU56DtD|>mQoeC-!Dtj`D*rVx_<w*T}Af?iTisx=(?5s
zc$2m+P0kr!-zX6Hkzq~C7`67Boe5t87$Z`aD1bogxe8NIDu0#sDj#H8jQ+!7!z%50
zeNB4)p6qW{TSM*s)E(M!!XSM88a;W28<Fi-|J`i1Oa=J8Q(HW#cq<bE1Sy!=nVXH6
zL$=EwyZ%ToXm`*m6UuA*Lzv$Cs0-}Tp`}!=Rr+K|5o33kKh(GN%2~bZWO*<P_jM~M
zw3~dd{8Z(zab^`hyZiBHUL|U>-@kGFzY}@gX=5Rg@Qqtes>IEgNIEM?eG*pPO1bUU
z#h%L#_Ohi?2xhzPzD~g>qpf~CilO|<)t=%%cybc44wYTmHXmcxCoDZ-!~>Xn))5qX
z7k(!{YHyXXP^L%YBKzkFu1-7G<CUzmCFom16!p$L@yP|lktgpZ)?vc>&C7Rf^=F}A
zfdsKt`qvJo$`93kUO%50-!P=t-1@lUJQLFfegWZEzM7n?<+{ZbC1?BcdF7vv2h-9E
zKiIyd!7a)1zx$w@&mq_#_=4#E_9~5-@q2o$UnZvA4n<v0^kLODmuqIAV4^v3<pJd?
z-y`cindZ#Q1QRGSx*tVv74uCr<t<yRby+&;uQqmb3!QJPz=<DnJM;%H)76QY?rn<C
z`|lc*E#D*{!g7uy+bxGiQE75)wpj1tt1KFc2Yanc3SMsNR#+?igiCr$v8<;WlW+9n
z!*n~sL=^gK#W!&~Eqcg)yC~}B8AV@wsHAl7n$=1a)t@z-3s}F)eXCqpC0pWccznny
zgJYc}uzTMpaxU@zZUnA6hv3m2t9(6^qc03R<J}up>h?{F`{0rHm8Y3>J>`8joT1vd
zT|LOBSbWv~Zl#n@4B3a~ezS;M^o&#-FE(qp>{p2~e>LjDX}_N4w-e<y$B|1(ug9Ev
z-%6Jhc86GIjlWKQ#lsMCug@u6L}~Ou%F)VjQJd3(zj~YhJMvdw6X#;xK1!p0O#S}4
zsGdUWVDncy7(1lJ-oU(n+vdy}6+KFSi;5P`lgGBpGE|*XeIcvPT;N(nqi4kIv(O&$
z`Xz-<-kab&&AH#<bZ&pdEavN&TQv7?UE}8FurYj4aLFr$erPL|$W!2l9%B(p<(*re
zJ0-5^k81y)m*B7sh;!7ZqM=pTnTq9WOLgY-uQF56)%kX&Bz#DEHF)$S{f3h-=%l|j
zl`CmbdX$KDaF=r1B|a07*iV_$Qp^}D`0FgyGZEj;w&KILjIVwcsbCitc-!8&Cg|Tv
zVf9PA$$y`?K#@ro)BmhpG*7EF{{1dnT>=jOyQYQy|NLuU3f(h2RR7*s&AYayrlna-
zsQgd8bS_5mzl;C>tz`SZuUY<A;S>JDgVFcz8y>OQ+8|?k{5ZNCU>l9aacIx+zt88d
zy|XF4wnZ>;nE?Cbk8^ZUQPE_r(lTj~i4X`;2_0v+fmFNpxYOq4<=w~R>~FvH>heZO
zW||8N41eEev$eh<8~zCp(PGyLfI?oM&YnA`W^XSEFhHWA?c_c6U+w^`|JHj&s%S3t
zjvl2#bM?46Rnpjy4P6hqJNB@oCKq5h823Y8f*@`5R2?1=w}I<|{{j)<@nfnS3Haxt
zj9rCB71MC1LNiQ%kZ>1hk;VAAymnCK+&OX7-aw@ATYwbh))oWkyI9DCR`}~zo8Uw`
zP+gF~1-Km}&hg7J3ZCrYg8aL8|F+w#iZKeRd-5kyTqStX?LRI6fO%S?ZUTTO4baTK
zuyg!1<Z;^(H0SK>9B_VcdfsWWPX*K~+Xi6#7<mVgZagK07NJE!i6W@!N4|d#s2xNw
zGKT0obU~5<bew>1z#~JfYX#6zkP<0=*`yNsGrbFiGNM<06b!DHe2&bgU>KefD^lnx
zG(c~}$km@f98gYV{We7a5{cIVTbSVU#xuuQ%<2DIW6psv06O`l?oK<*t5;q1eOZ#6
zyc*3K7$8P<AGvV9Vdz1mix9AqsM1MTcwll%@OfQU8jOKJ<9PaX4P-BFi2HjE=5Jlj
zb@0l_beGKe;r4zfGV&Vi3la(oIVt*PJhCB+%FWLo#Mq<8>XyPaf-eB|2Rxs?`^Hu#
zx`Y=mHefCV5Qq`E-vOX>pw$FH>8zE5g9CsgbuF#>UHj71jT!%&k{Jg}G!Vv$si`Sp
zyHk`NwIXV0WM06cMoo{^-V5y|9uT0NQ;;{HHzaZc{7!-?;ia4#yUDd{Eyl=!=rzIp
z1!DvD1x^i;`2gkE(X-x16bYKFm+4QRs$9Oji#&CV7G9mo=G(Dj18|Q6;1gkA<o-c6
z5lI8DtFKqZrvo?={9k~1c-N0a)<O|P2~89d=g&E-hh%R1?~KWWB?zY3zDQ<)zZV7M
zPqg5E0MwvYVN&%IsARZ}$<#CRVs@go>G7I1huaPHRb@Uw5dk{YgZW%&w;wlS(WXg;
z1qb_zgks)9;fn#4N>-Z{#031E<lRv?!D&H~9$e`RmxGh@Ku!9b<eZR(Hg`o4zm*T-
zs_}rc6{JZfe@52o8M47w8aOGSzrcneRTULV2zw#P&dRv-V*#u#4Fi84EM<_+7bNRF
z_~RX?($mE7ErObBO?Vi*0TI*xkb(dcdldEw6i~T_y?nV_`{C{z8RQo|`llmI6hDt?
z33w6}$UVH!S3wCCIQBV>L;l{=3K;hz&kYN-A1SM&vh8@uWxwRGZTqL^a~ow;z`Fu`
zVA-y+A8!?kZ!*q+KoRgHXwxf6wQA0fPXdm{pJoasiTmz53Zh>xSVwCM1K=7&@Fali
z13Eg5?rjZ#>2MZdLa{zUws??4zk%O>(CAGRTt;q!;`Y6}*qA;O1N-lt`HYw@fT%J;
z^Fr~TVIH{d7-3)-vzWUmR204aXu!zkN?z_{Di-E-4rytshK3oJhYFXxmGH@8z$C@6
zI-A~Wf95WnnnWGSEzb&**n*y_LJ<I68ZarsA)Gm@o0$ecFR`FtBW$~1CG_2u8_$Cv
zVr6AKBv!1aDmfW;9D;mOQWH6^K~#e}PXfBXtz<NWht%BB5sD`cYUMe5Pboopc`keu
zwvLXqurYGW)TRpk^#NE=N}DH>@loKci2s5b3>j$bKkuid5m>&eAK2x`%Ut~3ba;!0
z53d8aTF=;+78no)=Xy#kJ0}6%J$m+x;l_;{w&%}(41J^-PW|HZmC~RCQ3oTf4Gaw*
zB_+{d1Ibp?tm~G8_aa0dP%QXiW`cbO^;f_W55`slm?c#LWd?|OiTi-(C^oV#jvZ_W
zfL1t90H|UN@oWC(hf(LHn_~w6jhdTtgR+y?ba2vb^`2NAaz51NVmt_9oKtZ(wz#Pz
z2&WhRfn{eFO~j<64&dMima)x^*%SvR&NM=;!rCxi*07`jWcfF|{T2_=(3b{Xs!2@?
z1ypJOKnu_^Scm_IvF{G&x^Me0(Nri2Wfzh}c2>zsGLn>pBr`KB8I@#{N@cGigk&cv
zM3R+|9f~3=d;ebV>%Oo1`S*7m&vPI5eO<-(`}w@bdA`;OtuY-7OGd`7jg*3L?U1*&
zhFC6PKLOL8(zFRL2e|-7I46P8=+O$m81&RAjlYKMrUxb1|8Okk8b8P4fkg5afG<2=
z{AidjZa#gw*V+)bBR&jLS4`p-xNftP;}ZXfj7`_Pv;N`Qxcy(Cb%B|IgNth&aj2>o
zDPXQ2A}7gDJbAJ>B<bmJ^-qUOFltEH_fcYNLhZ?S-~f<Fa^1ibij)CJGjInP;k<_u
z?(Ne-b93`|SY?9nFv`A{d_B<&wg;%~w(C91o^s&PiR2vf=r1-7TG`qvW0hlona79G
zc--{8cwyip2I6UE@^W)Y3=<9>aM(Y0)jdmop9Go)UM1)gc7mJ0ro`GIvu0p1+y!+Q
z(DbylyN)4+n0fXAHz7VGx7rgs9f2e2vC{s8Nyab*kn@D21bs9#JWLR6s!iS*;wjLf
z5$hD!02?kgl6aSv#s?ncuDg;=>9RB73y+S?&Osao4(OQ^6%I1crTAHddd4Qr>p!&d
zcFU$8`p_`m+Is?8GMe8T9WudGAiQA<F(_g-N@jOpX&J;^K9!Y9<QZesw)EI=aReMW
z2uNTziGXeoxfYB3Q8G82<3?&t!FNAd3ta+E<c4mO!(_@i$MBZhMDYklc7~}6IQZg=
zD2NIm#rj9Y^K~%!9gJlQ%X=tpqAJnRY1Ub^;d~uyvtk=}i1x*RzP7eEC?=xV<_J9y
z;LtWXbw=ms<MLB4a3sJ%P4XznXmQ9YLqfI@|Kl9|9RI-Q2!g;@CgDN~T1%&og&{b=
zsI$<XI-v8;?Ok$YAnMKT)k*b~9Yn?nZ9d{hZ{sBxW)E6fS(U@|govLTir$>W?2NN;
zgOetf8un>fuN{;u3HkXm0hEe!Qg)LMt}wxSc^t!uV37)i8XQ+Ox!a+nDubGgY!oC~
zq>HWB(Xq#fM{Fq^0EXf9X9VMSNY8Fsx$&zZff&1uvd>{uB?#ASuT@W?14U{z>}G|1
zmy6o)mtfx@{$T8dci>&XT;;C$h#!xU!j!o7SbA_MT4}R^|6$&}I~&<$MD0g}^H_HD
zijreDJQAvI69vWd=e)Rmr;0~ExXWD(9TNoKNH}$n$MQBdqx<46Y&D6i|5A9L@>t<h
z_7og~5UgQ$K!OE6(4)Ch$+3ibE`DRfVw@awc2NC+KUygZq=tAZGLo4TiU8gr-9>rP
z;K`2<V-I%~?wTY>E5Wxy-mZkx9iIvpO$aDbd0I*=*Vpx%3ZOg%`_<UihOT-e#F*pq
z^G6_R!DM0--IP$o=8E(pAquzW*0DE}+wh~w=?>d2l8!_~M83m92ma<(qd7K%#Elt#
zQfq)3!0m~u4~BJi)K!Rl;8Bl8eSz`;Rz^JEci=(nQ5TFn<&%iTtX@uT?)4B8u5t4U
z!j7|FnzP4B#r2E1p*N0pY8ADC!?N-!(90l>E*!u12*Ae>Q%GPmb#$np9RUZ5QHC-<
zC`la$8jxJjdrvS58Q+=lWRr5H#&w~mnwOS_-`#N947Q@+g#|Zg@IVORckISE*^XH(
zMBD?Au#vr|_C#<k&Kh$|ONupnjyP__$XKgQ&v`dnT3La6kMB|h!N&M<*BoknXjefB
z-+6Cz6h;A%&8<9|j-&Q)dlT_8yir&-B&%R#`47Z$_#;qOATk0kwsveX>LG|VyZ}<K
zBckQRjnMwSK1epHiMjMRN<QdmznXQ-%s7)|LA+tThKj+-gjcT!&c-3i3Wc^0Rsd=#
zQcdHjU_=GjL2|S<G&fVBiq_P;iR_?*T?Sh8XLNN*g@LXFhyBw>J87f0C#Uh@l(e+8
zyoaR46M6ggo{)!UWM)23FM|}eIK^@Ard&C-%@o`<xK%|=Rf0bI#lcW$K`|cwF8n`9
z(9--6Hiop%Q|ga%@gwUm?d@*e%sY0~j5sHusK*iZ=UT$BbFr3zK?oWhEG%{|uB3X&
zR8)5;V9E19Oewy`;ouZBRM4ql9Up}S;AS^76Do4qIE}@FTWDyMaXo)rfd-qrcXVl?
zRY@@i;-vN=sD2YFH{7HUS<J<+26g%2-h@X9%0>Iui!K&T9)9cZAG6olw~>N~Y)B~u
z-U=doX}j(RE%-=qvC*Ni!|{dxB)Vn9<YX!?q^G65L|!SZWXJCB<qbf583hPHFuaMl
zBOx`1CYIdYtnTB-Mk*?PI`qO>eq3331C*rreBS6i;QL@B0e5G8@2r5;0FR6yjs!?i
zFh1>z`W<E1&4`c|EGW#A^7zX1ij5R|;oJjf1rx<L7<W;)?LAQjhEDVB*}HH#zcbE`
zM<GUJ6mG&wi1;{r$sO@ISnCQZnkFFk(Fxyn4ts+XC=`#oAgafm7w0j<1S1;+;9rh;
zRIMsOAp%yXb(pGQaRpbe5$<l}>G(og6vm}|FD&d9I8uCP>=1IkOCTo+-wDUjKZP<h
z07xY{4ub?*3~>3lD8OmmCcHWL+6^ypl)@8@OCL%Ba#_!P(tVp)%hU}W6e@!^2DU1q
zi*<GCIA5WDVCUo8jN=5YDB(|03(~T%z_L7na4PI*7P!tgZ_1~phl-c1YuMcI(Zy^!
z{VFRf@9ls1il2<vMVPstm=9dw^mr<y2QoIsB&6HeS}??svkk`)YQkRFtIlBp%_&_o
z<CoexI}aW_Nc5|wrlxVlxp+(EczrjzXQ$yAB26iJ?c8__C;jK5ii}K)Sx0%{+Fghe
zp(Mw*B5^#UrK{*S1aLzoqG3L2+jSq3iU0I|#54d8J~Y$bDE86BkW2l|8)+PDq#56p
za@3Y~)?tgy(6k$vIM^a;+Ut)te)&RC(9vbvqK0n(V_x^YNV-AH4Cko%yYu(k(|UTF
zb#(H2{Mj*On2@hP8SwLoZhPAviJOGhZsJ0zPhxrCQz0P~SZQQA!=FSXHFzbc+})v*
zBKn=hWt3vXJ~Fdtk1;s-*aQ}UoRAn~(2A~IL&Oxg?s9v|k&{YJZzA1ZiNj%h8TaS&
z^mKeRHqAW6^~g1Xw9b89BCq8jv%<RC_>BQ;O0<@+PmN*dBnhNYm$i(!;Y7u#a-#Gn
zvLI-=39pUcsAmdN7)&6U%~u)1vIW{W>^ri2(K!$e4)}TdfzM1!Ak2?hSnNkN1;_|V
zFL(b-{sU%Fgoa=RA|;~jfnjrARF;o&4FC)xW+2jjaLt>sv53;2yjhAj5LlAzb240o
z3={_H0acMQehM}U(!P9fLm$m*O+wK_?8fLq&~e%g#<&<`x8YtWgG(b<ZJ(kR^k54?
zxOdE(L{SMik97y5tVZ(#$1_e`5{&sgD{D;H_hDw{cOQtNp$a3V<ry84-?HXAlt!=x
z(7+iNOiWHV@1Qaw>kr9FL=A*DMjkz=(sHDF5gY?D4LD8M#l?3)E)C}{1$p5J2)J0Y
z`LC-qYKP-60TOu}Is=@|ZxCLCchz)Q?si<<_v-7o*Z=W+qT+^*5I%JKkBS$xwCGS_
z2SY^z+ycr-1X8TQCf{x6;*Bqb<Q`<4hTw*@+T{*NjN@1ss))Xvdf9R!MFe00O((RY
z<jb}zs<G3)L*)<kIGKvdar`d9&1~P!b7ScCEeP-pny1WO|Ap*@J;1nhSDtCk`9--F
zHXR)pg%;GRWM&ujb##cm5)I5dkJ+vbC^S)NlY<Doo&pLP;C#e$fHzBe%v;q&%!xhK
zB<&%~MwFJwuj7I|>mM;fdH;kF4k*&7{0Z8JQUT%zM;8|^F)`<cp7%8C>nM-?Dv&6J
zX!pC>-oj9<NxZaji1G52Fdk56C)SF*&3&9zz?Ks8@^%vS6dpOY8JT-b1|_3#0g6W4
z^Jok3(S#u8!Efk?aP2*oJ*h=eW*pO^huDfVK!woyBL5Z$AUP=^?CgaVh5$DB>#|GZ
z$4S|bp9u<n!?ry)A=rVAVk=abs91o&t;ORfSqcy&!Xt6m1o=3d8R?6T#f%ASh}@%&
zjQ8UWKt=W*6#&um03V#aQ6`7YkCE&6TB!VRE*L=?f*4KTnx9|PHDN{1XI%raEP3bH
z6kkSv@$B6TJtA89<LQhSp|FHI-g18yYGX2<9L7?pnCs<DTaRJ107-4!BVl*6*lHJ)
zK&Z0&VNCFOZ*)^V#T)<0z7h7a#m0QSj6$dcfo|p2<H!+%dDjOJ!J3AAnw90#J^kOS
z^Q%p6WBXy{0!7IhdgDBVk?BMo+up;nZ3Aw8L3ou%GB2Sf0*H#$o#r7<w)8(YTTM+K
zh5P&YC2SrP0`O#$!vL&3bQ5{?AB((Ne>;*(h$8SqqQ?sM6~KnOGcz;yvXQejeZq-m
zw8~uMuKRlLo>Tbix7m$g)<v((bT94@YFUJn5CsgJ%K#oNEG&SUm*Lz(>#%0ZSpfwX
zUPq#{E<cc1ys(ClR6vC&^8ke=Ju9UFHcB*pSO`Slg9uiC%5^c2*ELhW`MxR+{0zf+
z(aPiWg}odl0xko;#OE11mKIS;hM{f4i=_Cqe2@wGZ5Sts+bs3UOY#Z<I~nrb#Eo$q
zx=u<|BfzJDV8ZK&X~y?wx<tPfb=j;b{KbC+o-*Y2!)>{y<W@2c%zj*Oh5aF<+3Fap
z4GV;V4nj>hJ&tcSU7s@Dg{iE1EvZ;|fPNwG+<5*`V`C!;9wWQ0Ne&}GfHzPRZ5laN
z1Q7gAY+p}3TAdsn<DWm@NIZlnh<OA2f`Sxq#*xz(V6-`lE)*sZZUSjW|B2ssNi6EP
zY!a3gj())9(Vi*_tsmky;qEXTBIljq>Vj^D>g*uZ*p%*>Gw;v@LM`j$WRb^J=QO&@
zZ9H+dQ_MV(7f}!+b;fY7blSM61p6E9`}>{d>(Q}h&m=ssa-6S36)Xb42xT*RCvyvn
zV+dBdKBf<t9j-lc&5(Yfey~YaST|AlmU>D#TI_77vzK6DI*zC5yuECPuhk*fTTuCE
zqKbtS&hoq&9ynls6vnnC(~o9iFu5Jl;XG!NXk3ogE&xq*A}}hfA7x8RJ}kRKu89a}
zhPEl&Wz0ZCOpKFuBQpMornTqP{k<2zDuzM)h^3{8qMcapa6eZ<lpGcjA<3R%%7P96
z<tf6+8k2KzM<n28!eM}6&-_5i{xR<qGwj`TWcJCCJ=^fTa3o?3Hor*`e+@2O^x(t-
z0Ob;1LREi}Wj&F1lZ0olxpFpQIzZ)Tj5#p7t|kmkxHjO8!`=zGzeSCAsrX>NL&>+*
z#pQ{`<zJ(t+a%*i9xJ-TOckZ_qqIv~H>yXxVT1@26w?~Fo;dude-x^!sz}{<{U_cJ
zM8ohjZjJA=4TCwcQ21seVi1oX4*_ov1j1eu7KrSCQllETK5v(1eh<*Zg$uhoZNzbU
zCmp1Tt%txApd&H-5=A|cM-mJY5_rfXJzkMxgJWaaJ{DatBo>-fiZ{D=d`Fu}M%tsc
z9=g`+1|R_Ycpbte-s7pFIY4t1PbDOvJg#sB=d#DEGkZ@AU87LfjY~^2x3-4qgY>}Y
zkMMt}hv*<K1bEkr-7`4C{{;^S{x#f|q&J3UAILNlm99Jti!iSeIsnL_5#Uk@<e=eJ
z*zlukX?Hkp0I?g~?2g=#mX?U+h<cTSCmacQ8WY;_vkKbuibUR)H;4sBI*7l29dK-4
zhWB!CYY<9062k>^D@qme$zT>4hm75z#VQi=LWn^dpb7_MNlH&*s06;T{>=B<!O31A
zGHY&LEOxfo<q2pH?+O2UZuL*sb@wyVMRODN5i*OcuU_uGM?1r^woM`I_C}}lyt5tc
zEmk90trx6pvvh`a0$pLEpxdcvm7aK7SHErV9TrY@T6FguTTXCyn9Tf)?qRbJ3EC7$
zJ2SZKHh=$f^kmE!&X0lULFt~sjuZ_xq_f3-@sNg#QR?%NhyC+K`=Xhc-%hf=EoOz_
zj|jhUZt&==T49DdkgL-=I*O?D5SI=l`Uxt=Q9p6TvPEMhC8gq^;PD3UI<zSXt!10*
z)$J2#A|#^|dGWUrEtmlbk8FOr;4bTo#6nfofVZnSQek@`!%J`GUn>a-c<SrTm6nzt
z#i^sC^Wv<PZyc_xqquAg#_YTNB;8xW#@^QThUkp#jTViHiD40%66~~*P|?-YJc=xy
z@bGY)D87hIetD&aA@lW6nqPl%&sgia2l5;3x%KUi(J5*%id|*Ivbzi@(N&st*|&CV
zRvTktF%g<k&ht$y%PZVa>eol?-oJhF<cafSP@pi3E|aKeP<DQRIX6qr=5PcqaSlf6
z)4IAY74a&#_3&Xk9h*)q_}^+BmdT8`q{jU~_R3TkoVeO(iP72sSRv&F%CJcUkmW$F
ziW_8BrYHLsHL{-fYbO)G38u;yj=mnAN-Sv*iyl?^FoV(#M=wtHCIouQs1zgZ2c0ts
zt(DTxLPk2O4x6|0rXKBO0|NtN7Yq8vEhJ#^z`-*$))R;G1rl`Pv2_K2$t3GuXb?2!
zj&=AB!<m`Tk{17_L|6pbu;}0*PDb5NU=r3)p1y4>y-bq8kO6JVGzipr;J-pHj+km2
zL_N{lH=a9xz8d+tRWvxDws~{HV4$PJ6*AaU``yyo`WZeNl2C=fmLQhsGt$bYm`;X>
zi00OsViY{<siyW3t6qyUQvKU*xX#thpED}T!4JnclH*uZXv~9LGt<%nfYrsJNl~I~
z#tcNQg49Oyy+~0*P(#T_uP5mIemXRw?BiOmh*HSDNT2Rl7?3=)+_FL9FS4`4u%m<!
z7mVX<TCK8t%U>~3(ci*cEdEGL#M}VTfGDZEF5UdlYey<QP+yE9=Cnv2PRz^<AxU7!
z-*EUDt~)d=DlWc*h2>zIlf0ksz{g8{ljoq_M(@H-zgaO_1?v}vGrWKFnL{pj(e@;#
z@WxVOonhEI852RE&?XV^JS5y3zVQ+D_=;4s!x6u_OQaA~YmAz8VWpwH{S&D|+O95a
zvXf|_V`WaVU`Dc(k>E!t!tw2J7L$lO++kemA?4+^W!eYjI~d!?MFQR%(WW$2!=a9Q
zgl@46V(O2GSAi9A!IP0Sa$j9EBG<sjt0GfHw#ynPV1lL}@z~f&OuZ|Iv!M)zteg2v
znZ$60UFqL5#=}TG<kD3ZhbLZPB&a}LemJUj;VsSqG*-lvm7AZ>+M2!J{j`CWR)V3*
zT2lNY=bp8+hb_B4)^-v8>f#2GVAwTqSJF-x&I#B^JTO60A=+!q6TAr)d~h-w8x(-l
zN>@-wNHPd&pgdY~v5W4qP>ol?L??CS>?V6Rr2k@=vmh$c4}k8cF57^QLrV&tbtuQu
zT^Ai9oQmi$Zog+|4fREAh?4$8nAXr2SHfR4)$cx6%((K_XLZE!$R<jPg%uD3BG^>u
z2QpTqNC{55Gmm^``=Rq0XW_)C1RzWj6AiL-<D8xGwvdO@h-tH9&B>VY<}%g|vJbm-
zDxm`rI3)JVNKgd{SD{bx9-y0Q`W?i0cgL<>Rfq~Xho7?jUP|J>S^zS5zTH$#|39IL
zl?YvrjQj*dhU5!E%x*5Fd>%dwRItjOtqCK=BzGTgqZ&^`ODFs&`#b!XdDzV+T&3X*
zLFu%gpZ{r5(RmtXXUCP(=g*&TcVE)V(XG=N{4_gxX6tVHK7IT5R|4)_F*CbXz3=fj
zGSY`b!Euta7MWipS8Uo*5x`J+@2`haLRj$oaov$DG%yipDm_a{j+1KS5EBW51k-Jh
z^%&jZY4jV_CSSZNz{|w<lpy{z5yRARr$GU71lPckS2;OM*hgr}iOqh&@d~16TUyR8
zJE0!&3k@9vY?1_o7yfvJBkn=dKGiD-6Ko>yfm|we@W>kIbx}ScI09V-VEqk9v6Cp-
zeNsV_-Ur3@D;Tqg7r}ETCk_lE2@IdZc^Uyw1eGe#9)J%dl4lKxS;mVYohrgl@p#X(
zh?w6qxG9ObnF1GIlK@DpgQ=kv)ST!O!EQLmTM#M~;22uH1kGR1Zv_FHMQJe)0D#2p
zm%@e)CnuSR1Y$88ap4}Hz5`OrKe<)z@jR}yKi?8GY!@!#rbNF6Jm}NQOXa|{jSzx~
z-tZQtFhHv@byVj`+f`FE2!xa+4;+95IJH|xZ-TI>nONFGFCg+~c9D#vAUNn%vHl5H
zNb-9($j!Z{v$6tJ(NOB;g--f2PVwo$((+-gwyR>0hm<3K3YcW*O4lh3jg<KKqdjJ5
zKLH^K9eOiPfru+fgv(yWHbh5w6Ukeo??~juY9eo;?0Mf;ZF(Q<Sz7A#WDEvz*Wq_N
z7bD*KC;8p8tVdFKH{)^PncoE$hhftJ&6dr+72xK>qNAg^ShY#8F18&2l+xG|V?oA3
zB%6|26ci0Ym(L&CzL><etU_}i3m^t)UT8tL8_6I*8Hqa(>3omy<+x@Lxk3<ks2xZQ
zpX`nc?6gKev_Sfzb}NK$2ut4tsrBgFfntz1f`)lv;_KifR4JI*UT1%$E%qely3~<9
z^IOA9_44H;&lP8}^<GGpQALUnBcuoC+vGUZMHQv$n|1&$0QQC18F?4=Vtd9?UcI`H
zo5bTPEK9(I0kcm}B#A`@g9}6io<EMOgoInDggsQN>@HwiW3<LaIg2kM2vXXN`EDq9
z7ijd@X}{yv$6p6)k8U;W_h{WqoE1O=an<55zyIWk3JMlP<BS9xcm&uvjSnjw@G&qX
zNr0F5QxK+n!L^U)&>(V3BLP<oo8^N?kCJJ^aJY}OWTdA9CppXZ00Il&Z7hkPxl@`>
z0I9&m7fwIe^c;8K-Me?4UFt+m5vu8N%}#r1^vS?9ek;l#9G!FM8eTp)lkAR>JMtVb
zreLx9NpM^>H#Y)`hBlTUL~U1FW<`s;)X^=F{EiW4+;%|fcmv9?{IE7g1b3F=d0=s)
zV@==CET2FNK8LVRlk;Fvd8DKk-$ZUYK)Vs#Ju=p!S4tKH@Z-R`<ELPodlaJ-2dqqz
zMnOhAMb;{+p<i*~Rs9Lc$#-$Ape_L7g3M=~kio&1n!F0u))@vWhb1K=utELYHV8Zp
zL|u*ZWopcMt}pZL+gM!g_%>6wi+jf|yXv*##Vu20gLkGI<auv&57z}~aO{PqL+a(F
zT<8uIwSYj82yvu6pV4`SU#rRMSkW7M35PsNtmSC#rQNuX;V2xu_~=_Ib_f}Eg;#_E
z68!zt2or;>K}t%BGPS?teLI;b{2g4>C)CvT!rGOk>?DFzmF<|6L&8kxs*tJxtHe$x
zCnqd-#L9GMGDIL7V73EPo(Es|%W*X;{H75K*;_}C_V8GX?Z$zEYv}j#R<n~Wt*yh0
zH=LcFD_m0Z^B<8Z2XRY3czUF22CgD8xe~A^sUV@8`5t)atr5(DodD^0bguEax3#pD
z3L*aZ&HO-={*945bfAuw9rDpz>K5Za`XABR5L51SM)PF!^{NH^vi<ceJC94X45p@8
z`YP@THS6Lk$&`>{sULKDapg$6p}Mo2#1~oK#nu8`yztK^;SxXvm&m&rI=%t$Gp1m=
z7wn?St0$J0u5tDNrm5I7vebLdnr&ph$=;JQq&`)`hILHVu@GrP1XqJ4wq@J8Ql4v`
z4$>icqha|Ek}YsJ(uP)*Zx!#f>+by1C=yHt7on&{;;w%pZwv$dd5o&rx^*kKxm0bd
zm(SBkPT_kfhKgXb4Urg5q#ZmU=`D48$MU5)*&mb(e;i-bD{4L5_E<8uURZzsib9Lb
zm*Ie%rU`e0D!t^S<)0?A-drQzue>}ELqu}AyWJ;Gkx3=+FjpdnMNLU*J?@oJJC-)*
z!MGjs>UUZtTjtBN+hyA)Q~H+__QYx1cS?7A{IbI-NzE+chYFU>x4dz5{(+>NBx{x4
ztV)Lk@CRU+h-A#2<YuRMiCY9b4Z=bGYORao;go(*U#<4Dv(aid^?F>fN3UHIh7?e)
zH{VA>mx+x`R;Y92xkD@Om*ayv7D^Qa&7)$+It7xuCodWQDtbSro8WFGDWlDnGDDw*
z%pTyhx5LnxxUV9uW>KgqfuN9#X;47T-ijbX_DH+lL%t!2AVO&|of=b~7f7Zt;Bffe
zT~hqk;6H)rRVdpqL1|{RE1kyTFmv#N*~sKPiS&u{T9JhK0JSi-1LxhtII9Rplubqu
zjrC{%V8QLYV0E6K0aD0sh!2Le>0W|k-)+u<eDZC^z?57Dys-ph_)nNiA)64QbGmeg
zw(lxD-Gu{@Rv}MnoyA_mM#q)BPL>T-7!GYDT#mdlLuE~zhmpxZVopGd0=IoBhGt?b
z!vTwj7y5Aqt=<-t;Z4Kuap2(mf^-Vkd`TB6;6R?BX2Cz{MLN#YmoGKzdD|cu%PL*L
zeBLMo#enlBahb4j+bRsG05L<I<aWt`Lx6rzH^PkL4sGHCd~YTOt~(ND(N<Kiq;j|`
z+sgVUaQ?OL%=O8?q(F)*GGtzh9yhHkNDBDxOz~~e*X5uJ#zV%OPb6TRHZV{JKY}b+
zoEzTYxk*$lAbg}CDmRIEv?N+(7Tv`s5;?_%!w<a=$;yB2_`3{E2Sz3IrKM+bA`Bko
zR=3;mK@cUdA2tX20xu@yU~yNK4*NO3NuTJEP59IZoU1tDP~7!At^JZInRI|H40r=i
z2kJgF>u4w#)_4s4L~`poO<i5zrr&!p5-Cxjrq{^~XC$I+p@SkL+IZ<9Wg}D9>Ica+
z<NZEf!~beQ2dY+F?VbqzCiSPnXZKyPOwXS^`+3HekE4$7{(jDXKEfSZp6bELwT|aP
z`->ItV}3ba1i243QljL!gsKaSEHn+D&_d!HCZbPJ_NWC|iakU8?Ne1Er^=xzMK43W
z^ClwFyrIv<CCvmL3F0Mx^8+9-6}6^jIVyZ0n#6Y|zt#SJnUict3b${v1uj63=P2z>
z@T<s_7TldgDgqoNR5A!dVVaOJ3boU>(IO~L*Wf0?WC(7+@Fdh4iNAkA4iG^A+{lS$
z3HV`au>Rk+E;97#^OT$Y_Z#-@Ra906Plz`#65AvatjYUyb!2uCnFrjs)9U%jZ~<%&
zQX+z8M}P0~wH2ip9xt$TFm&W_UGRdI7F0J_7*g-Hfuh2l2#7skx9yuS+;=TmhHOG5
zS!k_H4#zy6Hn=0fyeZ&6Ul;EgEemw1j^`e5NuN}Ms!uj9ln896-7xvbp<)4V9Gum?
zM~{?{Aj#Q|E);MUs^A7ON;6bmKxc^?8)X`bRP<PXznnY-A+~oSFM%_#&xv;6pIQlZ
zEMmXtj=SN41>7I_!66|39<3P<lPuT2uY13k*dvh9VB%^4d~wAJN2uZ81|4&PmmZ%{
z(BjKe=UbtuEpjl-&u!)p8XNbDYxsm{5W~oQhqlB4XPGu)(4m(&pKVMPDl>!O18Xr<
z2%80y7eAnYgvps$;)%r?${Kub5=yBNyGO`M3uhTt8CIZxM1b?$kFWn-6&&iQ(>5Wd
zaXm`YLjcv+JWo@_XEHeqT`5UMO-aFI5U#_bYjB3Sj^wo#{!WfU6Mv(426-J&7=q0i
z7FAn=0tnnSZveEu?#0GgX=&RLNzpL^I22V5i_plMp0PnPlMggT5Tj6{u(&_1nauw^
zpqO|Jj7I<P7YQ5N-_BkYWSm-qeAgrdTc6{9<h+*dR1=O5ZnQBrSR3CwVRl9#MYopD
zJZgd)#{z1KZDys&)WlIo4mKce8~w~9|GB?VZ~~x~Y&*qXA*uYo?a;W1Ua=Pm1Wywa
zZ{zK<wjPO0&IUjQmaqzqbm6bWz;-G%^=E)rQS*O-LRu)|>Fe8t<0_g8|6O56PT*=R
z=yccuz@ynd3tht|A9+$_P_xM{(a&U-fS({Oo0EjTvfq|lU+L-o^U(d&8K~FS`+pA9
z<o()vZ#T}=?f?EO98Xjy?$-bJ7vLtiz4sX1f6gr|CH;HQIsbP_$@^`&PpSCt|JZ1M
z>@XF@E#a;W|NFy!O?783Ui3&_WdFZE)L#AY&A%`HP9gh=Q~$p|JLdPc|DGaZP$}r>
z)H{lYd`em0_B-pT&NQo25&d!g`4+X$0TUwAfBsw%WE5mPGRQhn^fENMUPL6C;}BoZ
zqZ;b%WvL5Or5<`~vKB@@r)Q+`7|(||3hn!H=(W|L%eiQsf4^LX79f*Oo7sp_CEq^@
zXY<`?#<L!U(-*lk(L1m>%~NZ0KDfNz&U%UWZo7k@xI#>FY^(<)DOkKQUmn#AR`xox
zIz_DEpwLrUm3r<oZuQ=|#^R>#7CV8@z6pt1ELY`!cHF$DJbjrakJV*2$EjzsKg<gb
z-i}ng`0?2IOKa!7%*?eMx(fHW;(g4ux_YE(44OlSquBk|i}*xWQ3ovTb=qS)&~?3Y
zOffp@e;-+L?;X`^A3rd=?9a-3@wB1j!98d9^P7Ed*S_g~72vXGc<xf?#>|l2?+bs)
zD(rs2sHtvWUvFsm+Ibw=z)1p4FJ7CUE!~=#m&VF0KeBFrTCzRww>zs6x7W)1J>dCw
z1=Ou&X7;^(kpG&snL*R(nFXr}%UhSTzO5}~FiE(~5+_k=9G@pusuo@GOlVm}sM5(H
z>k##YH#?V-o{g)y9N%b9@xM>2wP)kE^G$jV$;Izwy$;4n6lnIPOZOUmbScu28<x2-
z-+tp}uU3&-2$KTMwIRC4x|$yk^L%N&e=6wxOo?HAf*bFI&UUMpVP@6ulAmZKFS2Yl
zKlW)U@6Xn+tfJoBhBd}l9aq)8JUA+f6#w0Cdp@Yns@r6E_Nuw`Km2RH_H5C~^FIY-
z23}QHp3C%ODa*4@Vq^_J8T3BD;b8*0zl^lU!Lf%Kj<if<UlYy_2u|-)vb$V%?l1pE
zKe2OCy)tuc!&yHsR=LSKFldiv$qoH2RV@w5uEs{{lmFiXtFX7Cmb{*HWhYx6!!>(H
zThB<rN1GZw{D<Sst+YRW;F}dNur#PMwUxAK_FZ2%F>!j*fkEP|u&DD!@qIy;)f{cr
z+*jL-DD>_b+e+Hzy%^9QWMGz8&%I3FKrinn_`jRx?XKYb1i?6|f>$j$zJXUu3i)g(
zA6HEA)G}&Zd3lR-R$yi1Ts?#Bbzf~NUttw|r|dGFvWDk-Y*ZPmK4_Jk5UXU(p}`k!
z9_?D{$c`0_J#FcIa62`fyu0oH4u<HLkM2e7%e3Zq88K2jBkP^y_Od-MYUHiz?L9rz
zeA65o0%Hudf3;Wd6Y^l%8Sd-w@I_cWgGtmZ`^l~jdoSVIG?d62|M!X2^)`m<#CE-y
zc$gS#RC!lp%ec>^)uST?Y^}qaI4Y{|$NP~=2}NF0wE58=cH77Cw*`7i?}z>8ALHLu
zTtE8ntHmEIWRLmMD;#^%_f_)YKQ>YsD`%+#Zb_Wn^IPcml-iL02Xo2rLx=wF7*dE~
zrPmS-S5@8@sJd%Hv2E9%{ITT5Ccm07B-0un%zmoytU<0suIYw`nPpb0qyO*QXneYM
z{@>BYHS{&!kLOo!hPCa)?6jAe*|Iu?WqjA+(VJ06bXki36ranzL05j*cVf`q%T#Yg
zL~VWQBHzEi->)gD$ui(;@o>><&0^7Hpw#^9nc;2gIDMNM#(mshWa!r%l3Usrnst4T
z?z`smUH?6_@hv6N)KApf&F$$dSdum9SYUn|KXxO_cJ^CDo&$qGY2Xc>&XW)KrwPB_
z_rKqiqlu0mqB$@kKuYUD@d-uMrj)Spu+UGeFOe?pJ-<>k9mhjYyXo47PU*bS{R_#{
zKku%H8;LM#<Xh2+Y}M=J%diQbQs6q9^HuQQPhvk~dG)FZ3aFTW!tv41$Q&5DzOd{`
z=4xWh5sFZPx(PBOuX4&_tmec9#j`pu`us&TzHfEYFkfE!;XcZIZCAaG>m!zFslwsF
zV#dxZg6qC)h`!qD=o@(^)-}s#WCH~wy&!Y^g~+ftLxvhfsuuMdG1|RJPORO0juW3^
z_J8B&DVSt^LG#M9fbFp^m(+)Mzut-&TUXiSRHwd5uBb^c4WBdjNsu}C<BHRs_mdk$
z`9?U>nB|}HF!KI#Tj28O(Z%R40H$A7#Uj*D<B?QrfK+woO7#VH5qA$<JD4f395j7A
zcfzd%`X3U=-fZ~{aJ0T-BSZ;@bLNW@fqMYfFSsF%(f}bl`f|t2ZET=x6NR{r4wy6;
zwqMQZt@|Z!J<rTEh2@LP=7FeK-PSPr2>@oyM+>etA?W5vtSulQ{7qEipoHE*PZw&%
zmYSAk{GaCa0sa}FO^nAIqXWMcj%cZk7<>dTgp_nQN)5Clum@d%sR|Gl>%_F^DX38I
zBeV|G6H-{2p(*AT7M^6hKnb<*egT2xXU|BrOZr_mw}tce#s}}v4hk1^u-Iof90sC>
z*E;erU;Qj_Kp4!R@K_~X__ag4eN$4`oodoWu1BexFUzKSxOy&3s{InW74(hTbLD+~
zs#Ejd(1WYrSGiXWQ|Jw*sYJT<drfL&<qGs!YsL*2RJW~vvUuXah7k?{K8fFt=engm
zgEhq6esy%ImD(uNFc-dI&O68<GV;UVn&GK?%Bx*v3Ebi5qU6(+uS}R8TJ^A|u-K&h
z_IY})?_5o3q=oZcl>pJcnN<FBy?rjieGwwxl;+N;ESk1Gma~2Kl+*76b*sT14|PgK
zC?r2Z-byCH2u8He6d4KnwOt*!yW8eFSjMkxaxrP?>7?aE`-YGNCX`6m!LShYzxvas
zva#7FFnGxMx?xk;dsnzi#y*<RBg?Zr8i33dEKLzO`}m?Ww7Fq`#jpTAK+6v-3P~ws
zI;%aXKn%aBP#@C<*@om~Gq}NU3K7r|m@g62KpgI5*)hnaqeI>~RAUJE@k6)cfC<9|
zTLQ42h&lmq_b~_|(IjJBvJdn_q0kqxWiO+IBqMMM0H&%67a*CY>_gJC^qt$Tj8LFa
zpFr0%-f)~I3=9Y~qerL%a4JmVA7q1GL?`L>HU1+2`MDay6?vQ*$c)a-%^gP+jvZq4
zusggerip5WB!ST@a`5p5K!pdVK|Pth4(4UAAS%O@d%#C{cv7_6k3`wL0~qkyc|;Xo
zcnzkM1;u1Ve+}=Rc|F44<zk#FeX+mzZ&~;u!GtPGdioaKj4Bq#b>r&QQk^oRHm8%c
zHIi=}y)aPrI!1QEQFO9@QzPTn&BwL|-4&i)*FDtuB<Fd!p<0NfspeB*%Hx8wO=sPY
zxsJ}5eA&MBD)01ULsYH1!JmQ3lg1&1GNvV6^4?q(IR!jT2b=HIq))U`)qXzz_0w~T
z142C}krMiRE~Q@-1S!4VaEI7faNqB*3zqs7nG7+S>riS62{+Tx!E+@ecdrjbm;vQ8
z0*sJSVn`+sz%7-4ZIQB^r}z}gkO>S8o5W;+!%&x@k0gnO8Zy)LkUL3d7Qg8GY<2Z&
zg=OAfq$(<z+yXEYRGH5a73cnU6B>;xka1A&77N02CF5R+2ot=KI$~W?W-Ra<$&?R_
zk#MvuUPJIcOaa1v*1pYI_1>o7S`~{6R5*1I5dnoUXXy+(mupT(h*0qA&oC$h__I9#
zo4;6#gdhe#+mX@q?b}D9CxQ`cu5@)#&TZ<~F+k<3h{3A`epv-5y@RSWMx6(U4L|rx
zBf)Q%;*KZKl5d4UO3DEB7IzOg7hlH;#hH(3=HP+K(L@$ONkwc4Xz8+6WF+)KA0lyz
z01E^cg)E;eITFXWf)sc`tm?$Xrwq}!<M}YVZ)rfh^!LMjm_@88+Q4I_XTJW2l!o4s
z(AqG})u|Y&OYkOI@(uH~YK>*Cb`KBi8=Uz2`7u+62mjmn&<$JIOhzk<DCMn%Th2(P
zozpD}`90sHF?2jf>dYhS31gS%6$(sqj!BO@sV^6c#TW!9S{wX*b?OJ37{AH2h&YCV
zPaixo&Z$`s&w0Ph{;F)DbF+eRUHM=BDHYp}Ada1nY^T47HmkVjmL<!qjf~-=>QW0D
zvR2eG8upay__S_r9kUc4h5PHq@}I}8pPbsvtl7H9_>@1*W8I|qbpLy9Xn|p;&mK0q
z86^<>%u26gQ~fX5vr0S9%_n}VnF?#%Tb0*SXHcr7lz5A2*M~-#+B=Cy^>fSoy3dL|
zT(Da_V|-Ofp6|`Xvn^hl{S$`!8o5fW+d{sI`J5~5P=27zC0C<R;J72IW=ZXr?Y{Q3
zmzP4>bbP|*84_Pu2mg^~G}3UoC*;BZbf2S5MuZ?Bc);b*3z11{<b@F26*gfeh>oG^
zfcwWE^xyqQkJjgIwLcFzCqQvxZAQ#2g3W$+6^jQX;!au*1cGR=s>V{&R6!-;t%2Tt
z1t<YF3Wzp(0bMkY85Qdbyj@wa!rCL?3p@?DR1X8k0js745CEJqykt-p=q{I-M=C+z
zL1rdMvl8tESWN;aLKQzYe&^zzE;2v~18Ffy2p$BC``A@FM@24eu+;YtI)p$JyB8NS
z@K`kC9WrB+^CZO*IJFRT4%mSAL1JRwElKK@gdY|WnzjY89V6s^hMDjou0GO=L*oR*
zG#(c|;qD0eW@xAZ**bRf*ReTqXam5DV#xy&f)DEvqzi|U@(;Z}?%{m^T*$Y<z$RiM
z#y0`-kEFs4xmSddvlgbwTY>F`YuFSKreIJJNa^1?Oy=e+e6RvffiD8M6-Z1qhFHNu
zxo~5%k30xa!vBFB3cWO#^Xr#6G1-A_gnYWwxx;$o5wvLdGxm*&yM!=(2B;#CwVwbP
zOmMV7)Atyjpu7tR*A2mAu!9YR3~HuVOaKQ%yui?IVK6DzZBEe8WJ)f?Bw-jG3>2_E
zFV%vX3>O49PYM{M4a_|s%K~MCzjLitw3TpHiM(XY8Lp$@(p@Z6%P0ixkHjp^AueT1
za0a7%)~;KxiBI1;98SvnXyd_tJM0?3KfS=7xf!W}Idj%2s;4~I9B?(Qjox0j%s7|U
z%Kuq)hhs(YPO4O@H-gJll}>EF;@^K}i-t~oUNE!U&`D?Qb$(@^?hnITWhW>V_2jYf
zf;+NKpJ)4#<YXg2bHT{@UoF6H<I6@iKPqjmZk_n*yUiw+em5QcysLMVO!Kk3Gp~$<
z_Ro1U*L!{W^w{u*f2i2^Su1{ihY4S+?ToQz9E@LFdz;QW6hASyPj_8ru2tVzpwXXy
zz<9o~kTL(^{Q1`(PO?AMI!*U(1WM$FyKR&=(kPaG#?=;jFi!}rmmP^txO_%@{luKe
ztNU-44@U$G^0t0XW093!36VRHe!kbs^Wn|v=L(dPe-3iIFr|8sJ@TI0%rCU%M&Uvq
zugv%kYn_j(Lcc{%io_=he0)K5@QnCf6@T%Uj$0Ua@@8zizq&~8W)>y+m9a1HnfmCP
zBe5qpbUe4(Ht}O|+h--8iDh-$<;S48P}Bi1J9?p=%rv}?vG!B(DsZfj;~eYU2o;Hl
zxHuVhN0tR{FK9c!sbLk-$Sn!Nk`DtZLH2-10_wmYg_s4!?f?=fgpfGF1F8*woYnRF
zS`ya|gj^mR39<g+Bq1Tbr<$H;WRNMYWHkb7qp;rJPLc)i#$gd5k$&XwpehH392Wm^
z6O^=E!1OrdnITbvtQtSY?4?=XBJ?nv*j+$vK@wm#8svabe{9I5+6^lnkwKgtE~tva
z-Umm4zt582@#RYyzHxO;4V3TD8#ouofN3UixIz$61ItDnZ9zv7^z-vb@P#FO9b$}s
z00|txlq`bofxBdN`^5npMh%chfNZ!;Cr}xYNWuHCMReH=B9H(3qYE~T-kd;ri4g^K
zBgAcRT}a|;|Ij}H)iCJJEjU{Cp>{%lWQXgRK<EjysPFr|FsP645o5F0R+ndUFw<~(
z43lGsk6;}6{R?lTh1S8*L1wA10cz~%s-2vd7Y;rgBBM0h4T@Ss*o0r5oE+l2V{l-A
zOwoh9ma9FlW8_Kgfb)C5|L906Fj2h@LzkK^MS;U3VYy@sI>gI+gn9cMk67T@Vs^<G
zP-ZyiNO1C*RZsU;;!+2LLac&pTh@CMCOtCJP3i9A&4BoS!0<@svBZ37!I1`R`|tS&
z2SG}TMU4P#sqp5EOxEhq+dc7ZdO34YPI;B5z}<DrKBs*nE!814rrqI_j6Ij7H*e0-
ztsStnTDdFt!?xhht$}ss(fW@R#;yv7F7x?ch&4Al_txizt;#zS^Wu%6?uV?)ufB~6
zr=vc`{+w>KvN*ld{muLGWw{e3CbzIPfA$vW&2`+^X7HMeDlpZ0zHG#RwPc@vSV>0V
z8$Oznwz3NcE`Hv#vo`o~g`kBUy||n~z0T#tB8$`1X9I87X9=xt;i<I=HnTaIcp=UI
zi0`L$S>nGvq_vn%D1GLBZl%S=THv|kmxWXMy)Uxsj%%?GMfGLQFobhI{`AS(p!?#;
zfOu2Cil2oP$5nd^*L8fmRhMy;^xLI><KN8n_u%K(lK$owIu>tS$$oIWmcw+FGwgPz
zX{4S`?DF$)>kSm<xjWy*2=N6p?~^q!95r@iJHYm0TC<t<N8^S2D$>E__9CZ<j1rmJ
z#21tsEIzxq>?RaHei?W>0>iTgXBYP$I%I}1fVisfpc`2k_mv~zv4<hdgX#%BZZfKy
zjDjYDAT*(5oD4EMz3efukcc0!B?c#dXQia^L4Slb@Q^6;K*bPs2WaLxq+=7Z7lMe-
zQR0Z*tioi+U+sAZKtPi4bU3$?lFtTmT`SUeW6*liXdbjN(my9E*@DRFp!%~Z9uY&6
zjVgf*hK1+w-h&6;aHjQ7(C*r`ODKpWeJE-XV~bAnHY+(0JlK+CG6$-UhmRg%9>&t0
z)!Ee*HZoik9)F;<o*4Tzi5=^Jlx#!;bd44!rtx8c;~@c1SB7*DlcfhWycTvq-SZuk
z9oRDzEeV>ui8Q^JwGh)n=m&@bFXOQ-)vqqm;Jo_)UC4wh(F|kS=M`wKF-VY1V*u4J
z09NBOFnP3UePA$uK#;i(L>L#IS4x~`Bzay$pZkJ2)cv(&jQSgd%WK^6@!q6-gcZXS
zocrIyz(H&p5MKLll)z07X?v+X<Y7&ay>072dr!^~jG6UX8T5LEq=CybC5Ug((V1p9
zI)}3muR1w7d0Sv$RaI5NmgL8e9=(Eo9&N*@I@@XI{KyEA`)k*kNDR+&cXeJD5Acle
z+^@a8W0xtzVE&n=h|&mfr>W`b!w>VL)y-0Jo6bXfhKd7DPO?T&X1gm<i1Dz}A4~c$
zJ907S_Ctyl*9kVJuUBZZmd8as7praC&Xs6+y)`?nF;E{}|84a0#D-;Q&ABz##Op=`
z*(q|j)--<KyIoO`v0Y$jCsk0T?V)iE1@GfO1GA*n_LyH*u-zgi{O$AlWa^xWU-BEm
zXV_(g+r<Wd9*4CoYiE=qhrlP5RaVnambd39m^TUC%|CBKPxXM#Ln-1lLpb(@r;KPw
zcbh3amD{%<eKCmuFaB$+_7a~a{POls)g8_;FNtdO;5Xrp`c_y~m3}hj&KbY#{Suvg
z#p$=rd-TUrc$hiwzL#E2^-g4w-D4BpTf(m|)TvZR?cbE%H|<@M<ggmNY3h?m_I2Bv
zW(<-9t#C15(YTzh+ADTQH`w3QD1^$JBBENUaw_kYNsjVZdh?6%$!ej`Zs|TeJ=b2^
z6ojT%Dm0b){xos+x%_u=nM|*Qu!nZDj|3Dfa32nmVJjds7rIB5F-+$>I>t&PK@?G>
zyhLkNH8wkJQAsAyVtKo1y&)PryWTRc*eCKAM4Yfh-Ii|wxQ7=8D|2hZqX0vF{m)QI
zlfNF2h%&PZ|DzswlsjjXQiIsT_@s4?t`ZL=7E{wc-Qze8pJNc491(R8u_GkuPlV03
zk*M+n&5e)=d$jbHhEAW?h&ZgcI=T&t3f!ecE&-zxA?WnoCq6)Xc%J5|^Im9rqikNE
z$kMrnnlpj-lfBtKA757=ZOwxWfwA+iAX^|P3DUgdX<8xlmIj}SzrBlq5^l?IZbH|^
z&CPumlh$MKX``Y2?jI_j=cC`8kT$ewjLWxx02FIU$d%UW3vhhc@#I48L6gYRGPmX%
zMt<9tE{l=*!J);pE)sq%T0Nqtq(<YfqkSO91B7=7=>GYlsKYhwS=0^{ah~YkHhwwh
zbWd)+cyND}fu`Tsez5m&b2+PCVA;whtBtKdgcZ28_t9_u568-~?YK-cX*uI*ZI{Iy
z^0Th9T@$P8ov2|ma~-f7&=>N(u&e7+{%h+g_20EynhcHHp%`6fz-l<@TFfEb6TUs%
z;q=<Dx|ScOQ*E^@92N?%86>R~mS^;BF_-A<iQV|&+)irWodS80N1H`L&aysD-mjqI
z-FuxuhBo1*tin%|CqbJF)C2p&T=eFedv^N;+7#DBFx&2BwA`Yw=lPbuvow3GBZS`l
zND%Y9e*MMDLh0%y>4J+1_VHpB!fcXr{Rd7-&kvg<zSwL~diPjk;T2W>9qYeM<-6!m
zohxpts@KzDj^SHj$AZ7+da5<#)yoY(&lUbn<Q?$*V{-10ux@ZjujAJb);2bk;QVp7
z2nY-erDqM~ci03zdDiFJb~WGct0kiNTZe-se&@DbrL(?}aTe{n@v)MZ<z@^>V8LmF
z!?r<88b^F?)Yk86!SzyxNDtq3h*9K}RG(s?L@}_U%(n}ckf0=N*oXs24P(I!-6yD^
z^n)7O(e)PNN<p>Bks+$@y**}%TF@ypnhkF}iEsz+L(0Qe5`GlcJ%(^a_Vi4gx-&)`
zE|lKK$oLL|S1nIq>=dd&U>KlpiBpTzu?&X{K7-3<f>{Wi;RID_sqdDr9^!L!E7GBZ
zvk1-li#Z;zFxG%rXqD(KVL1^#`G~(4G_sWOnomC+gaEjq{Q5NYyUOs!!KJ9LT0J`z
zB{S<=emYEi<O)SX(i0StR57A^fsCDmRCrU@Q<?iY`<}489oTHRh}IUEt#b&KBE8Sl
z6WcL$O8K=b*+1FlbmZz!-3SRg&vkw-$)|H=Vq|G--)hYr)*WkHO{Te|^B06lo)3jN
z297zOo>n*#m7KpXbLzL{rE>;9sFD+p7JPlMTRT0~`WS8c{MR>ww<Jwt=T9A$+D0iD
z5%2QIe^Aa^aUDOm&)Y8k&qd1}4|WHh@P87<Ezo{+&%IcqAG;o0E*i|^9@0DG_H=jl
zllGy&y_N2}dtXNG{3~3`-}UE1uVvKfbL&1=Wk*o27vxp#u;Zo*x~nbs0|7$g_|gq%
z-|?=!=4%XLF-nA?G12dLk^F7;m;(s3$ZFj^agLWBCa-(<*j={O!`ds<S5^<@fO!Ku
zK^K7+{KBwID1sq(PfSaD`vQRoO(Kw>)<y2XbXCMPwOxhuRfzK)a~%c942Wk~J?AcA
z{MkR_xq*0Uz-3sD`}jCY_Jl33?<(MO7mGU8!&A116l)5J%*azPr!kPR&ec3|CYS{4
zwi|RkDO?~=f>!kt#I!f_Q=j6Brjeav2M_QJ-8}}H341QN%5?ldkxSN=*UELErais<
zRK4}Zd3mCJ_DD8syDB@7{dsuW0hlS#+9QVlfN&BxEsL+`BdX1s{s==R2I+C<XuiTG
zG{35<N4PvBdxdv<8ylI-s4!eLjF)3L<NYRY<X~cumb80Y`467K$wm#?GSmFtE%UB+
zAG|-e2@XD4OLw#8#zoI|SwZi$pOvUqwQL%ys(ANSFrqCKymp5E(HP|+YSjxD@9zi?
z>l6#DX<b~Ns*@GviB6qZUrA$Ld|Xd!*N^lPPa6aq>*uabT6^D^t4Zw7K|T$S@88pe
z8iRf<kBo;Gny-so|6a3WF*wwwxLD7EMkp=bI^tgY*_+L#cNwGBMm@`TK6LAKlG(8}
zSK9^$m-7TNckix^yeP|%=`a~}pf9Azz${xYW2wq(iDc`Uq3>HzL^e8_eWjp&xegKn
zm(zxLt4jcK%w9_k2BXOI*fuSQG%l$6pHs2d8NgLTY?Y)-0kp8r+U4T~7+<4m@ptb(
ze5inEH|%wIg@#?0Av;2lhuNtS<X#0enoAGSMsroy*W)r32DG_ttOAD&cAOIOs&M!A
zp<N@$0|8P8g2lVPhhQ2_{Or7)M=(TOehY`m(Q{RdO_=vDCQAro95o5GAZiw^I5;VU
zuo#v+y%aL|F!@YmYgTLe>iSc0vMe}*s`?vSx2~?LFeyS{1O-ZNRP_KB4V2T0l+|w`
z$|d77URpNu#X^j}&Fs>4h@&hCzV9;HscvCKpx!4!{Vz5KVLcLcKWU9I)D6s!ZHj4y
zI~&hVdZuuhfZSiXeiql4IpiiwBSRaFeuUMqa&$9?){OO`jjC)Kj*}g_7x6N4;$ji+
zVq(*y{l>xvOt=fS&YIh&Ds<52kI=l#=*%*+d0M%fsi~@rXSa0F=;bR{<qkx)FjSl?
z=%}g}2>jq4eg1>e@e8!i-X|nlSVwUG_Fu0wn>}8+c^B7>3%?>Q6Z7|1d>XOlk?vKq
z0>Jr3Or>7!fdSXEG!6xo=3lX<Umi<p?%JCY=x;t;(9yv5)vi!<+t>Bio&0y?XkF@i
z#~Y;l+>m+4GtJX<@tM!UqXqn*?qi(TAbQqj@;<F~gEw#6ex(Ix(TT<*;+Gfns?`pk
zKD*;blkp*s*AXXz#c4ObFI*9OWHaON`#bO795s>rH2Se=Mf$MmIZ=ZPLwhA#KH6pl
zaUE>@=xfy#^!xG^&C!D6f$Dj{CJ)1rLaa9>-!8h&gc0(@;fD%t{sX$1Phq2?<5G%_
z4PhYxgupd>p_94<;gI84cMR0#5YCnhcjaAchwE{^Ys^y_Lq|Z@5WgBG(d<yvD*SQ(
zWS!$|g*_rA$h>)gZLs7JrySJB#DCy8+(HII!!Aw6sKVBp1YsYN1RxJDg9!&BQD1|a
zLA8_6UjyiXNdj#Mu2Bpr)W%_EpKY0aZmKM!cgq~EGK3`5k|F4jNJ7>Q1=$J)?g_)k
zBJlbbCxX7_C*xK>qqh1CCK7XTpfO~<_O0HB{Y@ysvu;8Myq=no1k1!BF%yKw7qfMc
zClb69AMh8I6I5`uC=iLfnGEOhdvDaBeRroKg3rjr&X-+Qq;a_df{@IDbYu9gqkC~@
z_UHTiPR^l5m?KXI)2DCdi~N9ZvxEi;YlJLCUa5Ix|6!*tViiw976w0~F%q#B?qvYZ
zfbO5b%J7_@YI21UjL;YaenKq_8fH23iYsFZq^sIo`f4S@(Wk^+@L8m!qE_cZSK)+)
zWsRvuNhVd7B~tRCzvPa2m+De3RvOD=2H&PAZfV{u)mWAa&Ak4wO)+OvYSk=<e%I_!
zek5ng3Dq}YspUyeCbbUe)~8jOP!?#En`nMivnk#z&iq|h+jxKK#_<$gW-PkIw1yvN
ziZ01hGc--q(>|cJX5aVzos^;tL~V0}7xz~v?=G~~+fyLh^iG2<XUApjad%<SvED~E
z6MwzNL?#<fozRzkk>Oe8Z7b40m9{jTDH5b~?oC@w|Ef*zO5EPVP89{(drIak4r~eR
z1Rl9-=eg^>F8iNWu+1xQe@Yzxb!f*tO2ER=UbolJBA#1p?)_`tdEIHxiJs5vFX!+s
zjcM#CS}t1exuhcV+h55t>iE+Nro!QNlh52#Ih$;v7;3yqzI{9tXUTrB`)JOEeY8u?
zAsjm1F1p3v^clY2irTK?CuFxg$Jp{`>hE0f!O!#7sui>`+SNvac7O){V#kmXtK&<P
z^-bxzhhXKa)z*;t01ruW>qg0_)79|77a_`F{=*?pViE#i^<l($$IhKj@_AYcQ8fa^
zK^9HPWFBQC{B_W)!2{9h(&I7sV?1q(7Q7B*a>zVpJYsR^9|LC%Kmi7nSl7Ny%eU=t
zuVWPV6EZ3eu1PYq3YtC)#ynz`oD%|Q3_FxeF@;%NDK2%WSd;_EIOvTZ*p$NL#wW9$
zU=tzpHohanviDVu0EWPL!|Nb&iVUryXrGyd9D5uD=;^FmfaVy5O@m}v=6(KPDJQ>t
zd2hE(;jtcNR5#$mUc_2s<jP@^8bZikd|5E$BxN-Ppg1B!CNax{E3uZ0pCThp>9mje
z`iu?u2;aHs9OpFW!s{-dn#Kp*9qBFeTL=mYA%F}x*G~7z+D^CO41J*L5EViLtnBP8
zCf?=vpnCw%xf1?@kBF~B5DPV=--HqbT}YtJyy9Y4fQ5D-0;8Ai?v&ryh%iWgps}~q
zEov~BdFOdfU#Z=9mk+d`=$<+M+IGLLK;d@7hSpKZocC%yxo;nehWGw04oNRDza}#5
zRT8`Q_d50D3$KrAUe@sseJHWc+o40uHSpv!*Q~fV{10L;(rqjoI4t)}XYEx6pOvm!
zN_plC*5E+53xZK^nZ*Az&%N%fUpam(k$-a$6Ze9%@MX~hch2y(_wEy|J6g)hP$KcG
zdx(9*kay6S?T5dor1EMx&bp6qF@BkAoHOU=raI;AJwqE+<DTm#f`i@hgoxJJ9pCTY
z5(`p#ZgmzTTdICh9H{Q0+$Z*Uev|u-Uu%GNYv~URCU&1ay)CNJx%K^;VD<1^O0J9A
z!BwKWL)V|_@V<JGMzf2SQ?y&9)Q0=-tJ;x(I9AJT*?FHebdppH&aCskcJL_=Ggo`s
zE8lOg>NSq1t7fU~Xx_@fy6UneYgs7VfQkEU`>?W>k;<Vh`L?edXIdz~U0^YBjSbJe
zQ%4g3Q7-Wp3zSTK@$0(_!wa<R%m8pO<_0qRq@p4s9d|&eDgn9SkxR|U*au@RoNRs0
z#l((?WFcrdlx?kmLV=kVzEnmDz@C7|MuH?PZTYAj-1=~Gz5^OdVi0~izJi}_S-!%i
zfZ)X>Z^AH|%KI3G5FUf}9~al!_R|?CiinL4b{!-wq57$m8hcX?!wP4>f`9*@b20H<
zk~}2S9B};gAoJ?d;-5$yfePWpi>I)eBOVl=xD2QPh&+FZV;k%H9Puq6%4U*w6$Fkg
zZOowxzX+UeCvenrCSN?r$Hz&(nFLIfEaSQ)zY|;=N;U{v#+!8w?EwHhK<S1{hZq)7
z?zqvN%xbN{rGYWgO)2KnuF`~g#N7m{kO_uf;Mzbbae+;-|AIt;aCsn#(bxNc1B1`%
z&6{XE?MPtjjU_i+7G_3HLeM`gwSq6**JliKsWLBpB51szJ(Am_YAb!-{d6FX3UGr`
z(G0CN1-Ml|BOw~f3FC(NV|0stT{dR8(IFJR4PF#bWx8(G%0JlvTL)L(P1Hxr@GJ_1
zsc@=Pe9=pEPJ4FHvbbxh{X%Y9=Iesy(~7AA?Wdc+_$2O5J6NEr6`+@v%d0wak~56T
z|4(&WeZ>57*ua^{JM4Rhu9q4Z9E$iXJs2VU;F{^%NsqUoHwtSEo3jk#FmXx8Ed=Jc
zKt!ws)=fDey>RAF+i?(~U3tf#l<)FD%ngNVoLF*7N)Ez2;lx5*Sqd}=$f7Flz(FR0
z0`@8VSFSg1JOCmDdvMyGM@@zHmtCAc)gojAv0r7d!(&RWh*e9FGMh)P{;{8*z(taO
z0SPh@JOke$*vd|dU_5YGI&UN6Xge+KQ5XTcgf+t@5#)f;>(A}fkSv3^wTe@Qv_%3W
z_Xlqlp>X%1Spqw7;9x9&&0!P?099F}SLXVgZ49;Okqcdh*Y*jL0NqPz){kpGVD1w%
z=7yL|*6C1l5Wjbow*W&k|8$o`k<ByODT#+c>^SC)iHhNIqOfYis@^v?MwD&oZz3+{
zm<BISra;P#ItVD)aReh_QDlg$;qQ!wvK|qey~zC%v2K4zLIhPC2GYDa8GL<y%V`YO
zj@TMs)1eO1-{xKUu2c5f^`}3%%+EM2DkWY0RwHT^cSLl4o941dW}VxW;TLVzmxk_B
z$g=HLkpB_<pjxvnH^%7$jHFuhK6s+*o=t|y;U)qVI{_RnP-HOu%;V4!O^+*v9=oI-
ziI-)+ZC@_@Dtk6%IjSw#F67KlrO_MKVOJtB<9r+-_LqF?3qZUvPM%v(@E$Ic9gOF$
zKgucZ{f<J<7^?s{bpPOB70wRCSen9wI(kF~DUwT=PWryr4ujw|@Wla^6OSn30$P_r
zs5f#F(=}exC#nHp;2%-ED!zQn0C4&rztzDDO0dO`PfeL1=75rtavblW@8?e+L`Yn@
zLdbBOD(`V=1F$m%U-kIvDi}5NWrvoaiRuSf%>`Bq?uN%(G9hchG^|>5(dI2Ln2yAR
z^mr}?V-rq78&kYU+)l8P!IZcMd5zK1*U`n%lYdYj8{X>txwiHh8g6qDW+)N*JlS0m
zkjhLj7BB^_NcxBX1__=KAsY80BC1i=>RWvfu{{In04__*EH-+21y|QO(LY+X@Z}?V
z)CX;QzeCaZI0SYZ*j|JmUDWZibTgNE^6d&|l|xAOpYg*hd#LTN@7=4E%Vd9?QsI01
zdWHB=DuwukMg5p*o2lWKuiZF)+eyr!=9x#bNFh`P=Iyy8go9YENyHeXg5}YRGBagA
zQ|s*C(1lDlk5)a)FQx1DZg=D=l@oX9u?mF356n3!1n^4ecw+|KfJ>4y4g<pCzl?xd
zC<lc?el`I~@9!m<f~1bm!6^lQJaRkTp|JthL0s4fUcfrD@2{L7Yb8mUW>$OU^Jg_M
zJ97}L9Z(D853w3Ka&3T`&>2X-Adyfv(SryAV<B&mU?kWKS#SPs293`JiCHpyQqfW_
znR+8$c*f*c5uFa{uw!B_UW$S0A_q4OR(6#)jjZ3^6T}p<%fR&((tN(W^|*l}xe`?u
ziIGEwqkMWZ$Upq60j&KLlsG!3a^X8YV*xQk=ybxThfT)qAr6A@3j@8q@8KO$6r9-%
zhh#RUtyyOEfTqOo592(&dGzI-PU@Hq01)j(c)Ut*C&%xvM+RmhYMMskl=fZpe86|&
zL#|Zv#6XN~H|<)wgn_vmspfPU=`EV9y<c+mGH&d-f$XfnU5B`NdHw2TYoE{!{i_97
z3<8nc>O6}ngp|E^&xlR&%E`rH-grleG~j3)zS)4+`3htleqcH_6?6?99><>`rvtdb
z9KIGnjc7Tq*dDLd80?8+-y+rf3NZ0N8pbPbrD<x)?dj=>D4*G>NGFTP+NcP`JDKK$
zA8?Dok2rdCjdIAIwW?ODq*}e&^*S8XQ@zZaj3cDZB@`QWR(dqUBB*oR%4F_qQN2G-
z@6%ZZGH+K`Zs6Uaj5W{GgAZ(!)n@;R?eK_zt3rBI`X6tDtQ4I2q=Cb0)BU!JJ*k~#
zP~uSj5fLRorC9Jhoa-O$(`U^%dtt;&{1fewJiUtoRw~a<Uv%WowMwnzq+MZMQ5zNt
zE_^4^-8C(6qUc27!@yl<o1cs1ZnS>?RN%p{U9B`3LzPUj9AAS%PE9*r<*VG;vX_R2
zhFrZpZ#}Gv4`5pT?ePLQ)PwXglJP7@uUO_qLW2Nv-8q}cfh|9O{D46C(^mTia}i1^
zDw1!D?}d_<Xk5tWoo1k*pwLV`1C0>HGo}O#N_BN}BS|Q*N^YX2{sHvHzV!i}rAFJ=
zQAG1T#X?iLuYkG-D9hAP^A_H%vLY5=D8Ij2N2x<4FYquXW+e7@agcfn7Zw9a{BkHN
zoUD^7!v7z*8WkBC5Es{@IIMi)z5=#32^odKmP<gOZn+p~-JVMm%B&t!T2Np18jLy~
zAznoyg<=#u`jx&&4F?(YGa32CTKzb;vDJP=*}hFc$AFMcAWvEcJW?BTsgqhhe$3}$
zavRp{?pc<-=2E|}<6&^ul|wPtl_-Lr9!qc8{(E<IVMxC#ZXQlX&W+>|vVT1fJ_q5W
zdr$lfc=cGOE%zM%6Sd^cREH9BD-jNtH9pm1E^->-So}3451ZknPt=E3QQA3e)DOEA
z9`9V~#wXRwU`TIP1#4)C5w<?PB4yJ%nVCP4&JAsg1P%&(egaG6+V;dkwQBfS79Pp|
zpFedtjt>6*T@7v|Em}_odMbjGTq?U0xLy$oP+U#;!#RMl$O)yFp@fRUwkM>tRF36{
zBT0D@eQj9Q6T0^Vm@h#*xb{)i+VzT`7)AacY407+^}qK4w-aR)DN2$ev#f>?MMl{p
zJDEv#LZp%uNffeI_9}ZtX^F}vkwUWfCfv{W@0{QHo%>vW-H-cvoa?$CC+qwDeBa~s
zdcK}x!+WP4)qQX4Otzb<Uf_N8>riZ<`i?xAH7C|2kLvHq&{=ni>`F=6JH=U6?TbCs
zYAIhLko2g285snmKqYkvQb7$34RIB|L9imZ6fl?F>ZN%(Adb^<q&*bjxY<y_LW72N
z1GHthxan$1;4vW-Npmgb%hKQg7s3LPU;AbouzIjK1W;hZrQ|eL9^sXt?jjEZAKxzO
z4^2aNS@pD9rqmi@4%0HzUgtH0W8hz}FtaE-saG+n;br>J29*TWqRWDRf@I<)gL^2C
zq-FDz4Bk#|vQ+0{$mY>He<qOqTFj}mrur<ya{ECP`rbHqvvC)~wvQ`Y+7i4jCY+gx
zplV_?#}cXd0nRJL)DVPX04-x-vy$<3PejjD!-D_yg=E^Xqt`}u5nd*~4sD*M3rh$*
zs!P6uF3N*8GF>On2XLk*m~D>(11nH}KVna*7pIWY-=7%w?^l1v_YwPj*wmP4JGIQ-
ztY`iVNW6P^Sik3y=gpg|aPB&lylkI90e$T=t&)<`2{9~zg9jN;0CflHE+m9eIV|I%
zNI3U8rLZG5)F&k+CH;o7Y)#2ygx?LZcuQ(nT??E5@8mt+ah5_1EA}4lDatGjuwj5U
zRjrrC-yy;4IMHB7U+_&Z7;i8siGvV|z^mQQ&+m_t7Lgo3qmKQ`>P=>CG-X59#$S7b
zf^o0hRzD`;HS$Tjc#U&fNwmd_7aHa=-rnBW-c{$+bYL+Bja+AECn^dk11YGfe`CP_
zNGoYkP*8wV+3e;maDO2@m_H~_dJOh~3>hT9Kl`+$b}MZt)mmNCl@<#jEuq{Vd+F1s
z;khcOpy0q?U0vNx3Q6nsuljB8p`SFZqKD1*Yh2>(IV}1QfiSYkZ6)sD@Q5I`Z{;S5
z_gNdI|9R;lw7YhlC0h~{T__1b4tx$~0Xh=W?<l*jEk#L>?KINChv_6J43ntG0wW^M
zf@Y3_n>eI`pR*Qjrde71P+43+!$Zm)R7)`J{|JxYOC6=hFh*H5H#dht6tP%?p<f~z
zI<oGtH{cr5_l1+r@(j+o@u{g_C@o=jc@rNuxq{%~(GQ`4>H5vY%mjjeyvC3wZ(NLY
zEG%E3QU(<WSr`6bWzc)Sd5u6=Pnr1FW;x@COD7&JWb%eu9eZg%2ZuN2$7c_y<r#1b
z2|dBRONxm`OJT?f%F@dyrS$i59p3b>543`a*-4!NTh~GuUDgdwS7v_#yBs*qI{87r
zPhrBokYa0Q8TjdBkXxOQEik;R6Wg7F@)+<-FHn428uPxEtUajqji83WJ&ZL59fS$E
zQzNm*Zr!>?h6%8{sD%Yv>C2ZeHX*l(5ki^cDlK_2Q~XJ|UnnkrA(!M`L&IY{6g*K9
zQE%8U!WEQS&z25b%L{+z#^H$`Td%{eaRpAFZ(y85gvw~yuVx*=fikQ93OBtGdKD}<
zLF@KH$}1;;p9Renq%WUqJ(kuo*pFEkF0KTu^q%Z<d~g>l_s~B;an<XYp8pBHzs?x=
z-@iWSBZYz<>lD9d+s>Vk6+94K3wt)$<e(B6VXn>Y>BXR_0KTN^UdP$d7NKp0AbWgv
zHc8TR!@7+dwfYE*gzZZ_a>{SGGl^K8?{|DvF%5GWtcwG@yjyZw&msZ?&*|-(H}UmX
z8}Pf&^MI=zv=|AU1h_6j7PYJP?1`pqGcz%Pr4GQo4BE}y;Zn!(!`^Qs;l79UHZs|0
zB7h77RnzbOKY#v|_ig~W1qGsvg+=mWX>Qwa#8JE32oqVecI~ZtBU8L0w5Mu#MJC!{
zvv0!z23t(8{*?8x`S)Y)ksI*e|2eW>MeX#zPcCvfga=ai{PWe@wrX1?>Hht|$ah)G
z|FhTdJ1WkB9Qv<A`>+37c<_IJI~_gUKVR=mWWUY!pFe$@wf%_@4#WJ#zh4ablI{0P
zsN2=r-2Zt|_^d|Qz2C$(I&u8-yCi8dkI1Re|IhE=N0~wS&mZ`|uRiSC2#jL?`i@4^
zY@U79_E)aOYaXL#?2Ys?IYwp2wk>gdpL(~qrfQ2*OXgE{x#T9{h823<?H`-dnJy_L
zi%R9)$UP*IJZw$T^7KDXszMr#@h3BfE7!V<Rg|AsQuFxusef>}Q4nPoEgZBh-{INu
zFWt%!ZwI9Aw|F<G{<tZ^vgK0DmbaWc4<+X&KeD{em@18UA0ej8&obWidUPc`$g+IK
z8#}UNS7T^`-}^?VBX=&J{m+B$WK%qr-Kyg_7FKq51B2bdp^I0i#~wMhOyzOK$Jl<+
zel^<Muq)ftwl?fN-Sq>#k<wr3H#)uZs)(Kx9Lh@^3l|RRspp#tyn7*!X4BmT_CB_I
zjT_>Msx}8woMRpK^HVnLv{>OWUp=3F-&ubtZNQtA!o%aAPn~f*ZU22cZ9~0=mPe1q
z)R;G^EIx|yk15)F+gab8EpPRm%WG=ogs-(`#yslgInWS#Cbj#7x7E&}oW#J+%Ka@G
zQn#w_d`jR*R#$$`tvKZK_+o3-!80P4Tm2;yN(QXxl!BrjvYgxT>v84qd$S!H3kufV
zr++_N;t4<JJ!eywMPJ0j?kZ&R+=k=Zj*DZeJ2O+2ZnORo`)AeZ-8p5a!ls)wKS*D_
zy?%EQ-to!3bEzjNS~k$eZ<#lKD*s7i;~9b7^Fz-gem-5=9Qsf%JHo3lm2OoE-_G?p
zRwV;Y@+REeKG$+Ge_cE7EcBc12VeV0(9NvWE?dTuF81#M)gjUnlUK$K6kAu)hXcAQ
z%^vsDMn16n(@;QlpXG&f+Gg1!m9%@XJjMRAHt!ryR?b(psQ#7A`*=&@S__qZ`aLg8
z6;y0FzgU{yZd||p-50Y-Bd7C<_4V<q-Nkgr?-??>X~>w+&uFX7#a$4+e0H(&TBsdY
zCgqi1#q#I%|1jfmT)J|vb8j^D<}qvEC<XIq^aZmV|Jhy2AC56FD(bbfzIec7t}-+v
z!13aTeHg>LlA^XjO)Q`JkB(0qGNnv<x^mVY<a|=8c|%~2X}NIFey=u{1L^#;%%b{9
zVzldGGyiM*TT_U<du`LKej_K*z>Zlu+slxL!$N05bk_SGj+FMH%=Czy|JunFTc8g6
zul@S}`E1DS9}=Vv@!X|AeV}Ahc=g>ocMRe`==Pqwd1e(;(9=IM{~Qo^zS*6N+bWXe
zmqqRIj&Wld>oJK?HeI^yN$WRlqVd~Uw!tuLgK*DyvwuU9+#aDoiiiJw!nrqD2vz*f
zeK9b{WwvrW+}(WE$nLzda#e=fMgGpx`4b=KKU&FsmrANsd@y+Qp>^H&)4%`w0Bt$v
z*F=BtMaWn)zs+IC9_1T~i#v1P=<Q{--z%-c`6A@GxQm!)8OvLaMe)}o*)8hV{_By@
z@}<hC3hv7GWE3fTRq<o{MTb_t>x*pH>1xui-{n!;zD-o=bcSln>4N|InPgAcQG_3{
zIUpt$iJGuBRRf_7#Uo3F12OkLn;MUd6uHeTnrqS19yGSoc{+~?|N0~G9&R3us-HK=
z(8qk`G0x^%w~$<WDRU*9_lbQWYt~n<0!gnr)`y;de|S=+Xa)&lX!$Gy2AQ=0A($==
zS{~a)P5NYFtH@JLB40QuVf<4x;$AcmQyKM1?CiW9<$;oZpM080%I*{=r56`Q*C;YZ
znavG!wr_Q%da?S2R-16an#Z3$+4y{Qt-UL+T5G}HwNL0oM|F6!pQG^1@s<jYg7A4a
zwN2Fr)^*306t9xHasO=9F^>J3p~@1%b+JrS-@<6*k48|+nMXSJvByaX>FpS5yYaQE
z<j3~M8b9MauJ1Em=~U~^@+g7@CV1fvE9t5!7|-6hbLVGouh!+I?6zS7djf{-LP>sk
ziB=v+9VzXgvcf3%j+Ym_cQv@{tU9X@8D|Ur1ZB0K%sxb0j2K^faUQCQz1-YXHa0ed
z@JmTqeBeVd`cbr|wQ#V1AY<%Tz^}IxkSoazNl|Y^S5h&0?!Y$O#{f2#v%dtOk_3PJ
z81ieDmzP0Zpkrdv>2dOjBhiWIX`oY0vwsQKUCf`)0n1}yVF_uM&<_6i`7;b$5Wap(
z$Gv}}3e3y!0RVnJbKwFj1Tycds}<Zf;O5gahTkA6)&!Yv1GTYh;a_sKE2qsYhuA>t
z@r5k*q8aLNmZU4G{&J?={q&2BIec8>n>z;=%M;a1IJUmo<}y}J6KM0%ymQ&>Y>7J)
zSO0)Q)Yn~<(MuP)diRM$m45Io(P91?ebM~Ahp+5M`)1^6|5l#sN%niHyrnLdQDPl6
z$I~m6j0bB}d3$~JO2_2HH>&OCyeYH4?x18%qxaI-L~@Y?rS`4Q8`Dd3pWUP$-_YUO
zPUDAUL5F$1-|1ZM8(0s|rkso$X!0{sB`%|=HAkZN%Spx8(bCes!rTYerpg&^w!6gL
zp2Ei}0*@NjK|cnU7o=Q>R%wsNpTo*btcRKWN+CS}##9n~{eXH4^m98=oq6@(5qASe
zkj&5|@I5Nxx$zHs0!(*m2d8Ldv7q5)JAC-X`^8*<vxJPaolj2|-G*iEFy?;Ld&JKo
zCj|XYW?lYDCPo;f!~}QyH|$>sEga@r`R&Ky<y1OVuRyY1qz^9HQ*YX2gq}JVB)O`5
zK>-0|;;@t0qqHW_bjD_9%|U_FNTfoO90vH2ZtGSuCaAUGG9XYlNz=fe{e<QKSvASo
zGypCjH3fNqSltpK5`eRElato)fGdSXA!HlznrT42U%fhsaLLmcxbPQeU~Ah>=jvSX
z%T<eHotuu+Oxr|FjU!|?=gW;$6coupWqKOQzh={av^raMGhAUFV5s6)5|4E-F=v;%
zI2!u$e5B^8;N3d!zfv1-nxZHT8(DqfT1BR@X4k&F6OEs@`7u?j6;9U3W8BRx#9f-5
z`zZFBtG)oI>NY)r(ww**X={TYY&jrs{<D&|)u*|{N25;RMddjh158{+;Ws)ymT>#n
zeoR;$NEONNsA3UVRPKA^b6jrYtyTM#T?5eTYop6TZVg5#Xyk}HCX&cNW)IfI__=sC
z4QV7i`o&M+IBPK5vc0MenPBkVBNShJ_{=%2pMc4`z~aWDEuR-|xq08EW0~Mxh3!uI
z9)wZN+IznKStd*7U*&%$sE7eq<ngO);6H#GHHp>>ee%tuBy+!+6kveR5BG&V%VvSg
z7$BSpP@Q~YWQCzUKLnN9Ll!Z4ED-Gdk(du&P@jFo`XetHCOzPY2w-|g#JzY$;}a99
z&(DEa3_KB;022`KkO>1oP9hwF!q@{rbNg@I>dA6}^v!v3xIl&e-4gw978V^5I%C$E
ztj@T?#?Qrd5&m=pnLvlv-QTZmTH@huNJ2Dq@+{wBedC-WK_Y}90sv<M!v*6*JNQ~3
zk~Lw9&<SU#7A`;Il?xm=9Zd1Wzyl!=?qvM14-WulO#edKin>JYwF6osi^6l>ne$(7
zb2XSgf5P_gwYTlJkTLq@;Wg(gZI?%4DpUTb4T%=`i(VW#*;Pdo_A%9#vq@3$#o6c4
zVe$Rcx81l5gm9XCG>=@jm`X9TB<LC()m>q!WpQ4qo0_T6<Y?sZFTFA<rI)8op5I+H
zT5niI8Byu@vp1z8=CN$G)5RAD?<}O<r)*+fz4I8KVx&Wt?ZJr84)$}oo^!GpB}*55
zKc(a-T2UwW8qTk8?aBVeK>h5i%P%LTu+vXiCPa02e$D++F%Y@kHE+Up^o`;ENV}K@
z*>!Wta-Z#0O@cSgXw-4)>2_A0-%Y8I|8#6tbK6jo(?&7+^<RFM91R|Mwg1$8>EE(p
zo_CEBPF+?sJAR)+wcD2KS@gBoRROOprIs=c+0_Esk&{9}MYUF5!VMqD8GKHyV7S5^
zlpByYao~M!bZS;Q>$^2z+4TT`@Cm?CiS%!e9?`PPu?Y(^pzTA?2uoOx(mj-zKmlbz
zV+S*+1Y9=Q*I`1Jy2_402a>GL1$bB4^;QH1zaTupnENNz7QP?fqH6S%5ZCeZFuKHq
z3MUN*h#7#U?8aT!<A{-gK{RxP%d2mCdv7G57a<ekw-C-zUi+!o<Jcwmp(Kz?dTz6s
zLT`z>BN3B7$G+OtfTeK<_BABYU^Q|G3+L7UB!VrRg9s{wv+ilEWDKcLKhSR7O1$d-
z-Dfi~$>T`+&d82zz6{O5vSYj;J_E)=EQJFmk$@7hF#$2Z6?^anlTKhWva<I?zaqUD
z_c@TIiZ^fMl$3hWID^Iq0xQnqMCdO^IL_hmLUW6}6LPePh~(>ShrbB1pn#MNu!ev@
zcKz(o=;;hiLgOOw!S5~_!4Qn08G1@GdVyN*xYN)*nfO?hc$v++jy^(7V2=twK1Uj_
ziUdw#ypjO**ecxHgjt(-HWUDYW>L(&>Ygr~!XMh&!ZA5VIiVeUPFm%t)6fpcW0Ju2
zvTAo8_f`*NuS1mpdo?NC+W1`=&5PM^ZAPi$3>r}Tj{xAK@gQ-L6gb~^Y-L&~`!ZiB
ztS_@U9mtL#5t3z5#hbQ8i-Ep1;6;3eeb6&0&0kyvRJg#?7R%x;duGZ8zKz)J@HE>+
z-is~cvQlQk8Aty#SL27KN1e@XuqZMP9kn#J35;A6y<VGhbzZ10-HkE6_qV_=YW}<J
z^S#@ml$seGx*mAaoLS#Bm?EY5Gk#Rze0I^gBn8PeQcF#xOQ%=)RS2U1<9AbimGMG{
zI^no%ja^ruf_G}^+#`N>o5>3we{a<sI@Im>`bhcHd82YK2L8K0jn(ZAw7k1FYyXjt
z^X1XzOYCg7v&0YC4n(Ydtg%;MuI5dKrsSZE>kTo32cK20{_N>V@S0=NcyitpuiLgr
zzQFyNH)H%LuVHUjlBcG~aKWJ!3CYsQa<*A}Z-vgZJ?Gq}A8!iTJlRa2<Lt1>A)4}Z
zQh@VCMZWL4eXZB3ByZfO(!P7hLs&3+j3e{L=Vw0po8s&40cbU^3Er?wq#6Y5Msg+|
z|5|x|N5~XhzU5!328sQc$1>4y#^8z}8x-R}1iaSN_!CV&axAKQE`l9}O$bH_YJ`e@
z$2ip#xU&e6d0l)R1`Mx3P}MH9-HZFA3(g~d2?L`}gyJ-yN^2S@Tdh;(b}TkFb`|W_
zh&4D#5N4Nic6P>ee<K;>!_r&|zsz!2?4?T2@86o08(@Y8Xa~CgP@RDw+aeNBG&y-H
zsiDY|mMf@gNlXn8Fm^q!PVUL1MF$I0OqH>|=^3@e)rEi=VyhrHxCXS0?;hc}RNa>6
zdq>L8Ac{~Xo@8W`;n^xuA`^R3z>rULt&6<KKn|S9T4>lX{_m#tfwVk=4A6J&8e+M7
z7?>Ou^_nLe<U4LGUV*$De)1&P2ET?GZtjpqD&kZL6}`rXxB9E6=P<-jBpx!36ORse
z*BgAtLj)rPn-Wz4P{`pM?irfZxVp$}I_vZ6l(m1BmcFn4LN$0+KRG%19*St(Z5ktM
zgpv4*!xHZ!p-tGj{V66X!J=6)LPz(@sd~i_D@k&Rl7TJiub_NX@I;$_sU>qa#IQvs
z%5Sk_f#j`DSY0ttjFDA8@W>+ZVm&_cSaCtCrF;ce<Z*_;=;24QWWHIFA6=Zu5Nu^r
zzJBWwmA;+wX%+hHv)U+8**A#nt~AbI=`NbCu{$yA>~*E0^v%;B*TnUi9i=6W-p}kT
zooL_=`l9pL;ORsAATJ^7E6K+1e$ldcaD<@$IqUptV}=Y{e|pZJGUc$I@s?+swO7yI
zp8ImGT<3gV!`o*Y-HVpCuXTCH*KuC6a?p@*tfO*OF4HD$mGdQS6;w2H^$DR-f3}A9
zSNqPPg%Z<c-XU1)?Op65@N0M%OWF6w-Zrxp$sx~=(TgvX37s5&oxF;vr6n+U_}6FC
z1jh4Pj}L8SiIGgY<uKplsj*@ASA9xpv(V=^tN1NV);qBj99}T6NtF2Q-<o>px(40g
zjLr`GB#sW21V*p*`vsz}2-TIp<d|Nm4_4ea-uSX3*SBGOAVm7a_aEWbyi?A7>d(wX
z15CXhoA1IoLGziZZ%*vp7j$heX0)j4+_TOd{#wQ9)Ai*O>Q*pj@59IR_|<`5%P)DV
zd$O-p<rmq8@>G+89|c(hwg%h*Acz$p@)EQ-ebcV=(njFG{8{|5@*Ae?@cKpzwF^16
zB-QH-l4z7&J6(+0KwLs`6@h3&WQ={m?3bjTli@9d_eY_d1pk3mZYw6aiSQV}&2jir
zJ-bQKz=Z@`JB&~nRNI;?g^x#$WLxvy`4-RVBWm0YW#B#pFUHr&CMiZb!=D}DrX-jM
zUi4X6Hbu-G*%t%R4RHFX_J<VkRO2Ep`!k_{02yL>Ntly_qlgO790VzN91`Pm<Q;(W
zvrZ=dMSV>W$YrQ`i7#YXS(zIo%%rD*w`aA!VRC8>n|AOf3W^J_Z?7l!7jX;)T`Uwy
zokl`TK$(fRIYv(4ww<)KJtXmGY%PEJ9{~&|y5U*F&dckEXput~-%^kp2}TirHBWA1
ztFbjwn$|StWfT_fNNduGePy9Na{*(hgtj1tu`*>CQD6!Q+as19pQ7L=PYyZ!K1<Z;
z@CN4^pJ1Q;n+tG7DcF>}S#rIhq(*XLWz&dGkPy>3FP#HufAD<0FlQ*P@09X5^W8n{
zMRJ{oWeKy?mdhr|TE<tlP*|LKAh|hdspNih%kp6j`t{+%Rpu@)m0RCDEUo}I4;?KY
z4IDN%p*znDWN_$_q@$nsJU<fM?b+qhGovL-q4-LxxBA|wjIB^_^5Se~N2go+sPTx;
zODgZ73p1ImrTN3cpQs%YhRwsX72+AR>?G1PZ-q!o?Y|`hm6_J^2F53q>2vSSE;@_p
z>-N=M-e0jsXzGf&3F&-m?CPEy^tZL9<!yA|Dpq@W|84iC+)L@kJ=9d1CAYJZDB~s9
z2i{TS?wtSdB=?xKz@SIYp(#cFt>JyE$9(JRW<~bxvEeLAoqhd5jqQMXb@5BH;{4j~
z%THvFcbh;G%Fl9qlkd4st0<~@e_ty@rM&CODvuX*mR(9X1|%pGovbW>&i-OccUo`b
zUti3-C;gyI+FiO?XBF+D?JqSeP8quLY(Bn8>D0XO;pd(l`e8xhUIX>*uL?vzVIRH_
zeKNR}-tOowH()$uj^%j#7)lk;K}@g;2}LF3dk1z=HU5|CBtkE6m;3}14E5I3LVY&^
zo*_s&(Z$Evh#@3Fga~a;GN3$=ozTX>Fe_M93xAH;+8vyqEl>|`B$Io{+PFdGP^0@D
z9#GwrIwf-+C5=_FB*qvhP0`uLppzyHGR)B?-Z2`2#XxLHK{pyPcJCbLTeRn+Qq`P3
zO)URMI)%~q61_j6;zB)wfi$)U5=XsoDZxG=bto-5dJnkm?Be1qoJ&^Dpx&f?GMM9*
z3j`PhxytNHwPh@E?!d5Y0^_X`@2P2+Y>@djD4%dwf*HvB9(yn*#4z3@Ejpwl`2Loq
z`KvkhMS7LldY!j3hI$7KtdJE&42lV2hG>QM(KMcF$iE?1aPIVC<l;@Ie1t(U38{d?
z@4b8X3KQ|9pdT>CR>$-62chr}uUav8LnW=uzEkI~TsxKg2Bu;bmmZ{I#^7-Z08lPy
zc{1Np2Uy}o@U)PLH^8S?hPsjHiR*56wp1}}lxAlyo%W!PJ{o-ef&Yx#+jN7RzFkeB
zN*mp(+^a|S#dE&VKlN*-uPq?JWu;{{wA55U#Jq_vYt^Y&8td0s>R7+{G{1%sH%pZ6
zSnuN)HeV|59HF+j2i}=~*5@g1$&OR!JmDHESj5N9eq4k%T1r<_t;e#1GDD~9V~4?6
z1HD%_LvqHapB!qXXY&+VHy^y=Aazpf&K0@UPUe?57Qg>~Ex6XLebHermgfEtvn<Y6
zokF4#f6Pq3(Mp_fte5ugR+ql^Iy713mgbgs!M^3@!U%aE2dYw>HehaUE{G!vlKkt^
z2lYM91&Hj}4C4j+BekwC%i7;PL)j4c%(sJQbq}RjsyY`SG|kJG#G+6kz&aG=K;~4U
zVxhf8(=6TSu%BdF(?piXk}pETiv6{5VUWuI>+@K>p2>2S!R%=MY3;EVhu3Xw%;4@=
zf0aa;u9!3#Hyx+WrBU?LQ!`CEL$hS%OV)dMw>&Zp1;NN43$7#tFLG@{v=@eaB-DqT
z!Te=&w^3>l#}BC43^`Qw25+a$pTG}64}33(TZ@=2KPfpW20keU&lj*7G&aOk-IWD=
zHx6d~WR=rTN<foDP>IWK9!h2cH)dub*xgo;a`WcWk?7eL&n8P#9OomW>Y(4^I<tNr
zbB~>FfMH-+TZMl6az1U|v)?^!hKc%1PCVrv$F_-_yKr{#a65~;C|~Ql^vE1%(?M>=
zE%#QPo|D$o2xtmBP)*4v9V;0Vd}jk=b5U)as$G+`WF+5uxzrsulMiNGyjm*O9{p0z
zNuA50`Q!(jCJ|qp;+kaHg=!Da{#ZR?bo@pX*Q|Omqnb&e%jBTc=HvHIr8qrI5Vb9)
z7jTG7R^J+J#o75#SM1)Fl9`+#y)B-vUjf#_u0RB&0EAzJg-vX-f)p-i4njho(B0sb
zMi?{Tk_D6gQ(Rm;uaUdc{>c{JqOnAc49$j87Y9twr7_3FloW-tvZ`tqpX25WBH<wO
z-Mo2IXVdK_6IP_U$JAL^bd(mA*m9r5^@Ri|5I<rX`bh#U!SHYsU4)LV6fz6a{*uh{
zsv)oNTLlG2um!;lve!O^T&PushCh6*`Ktv;P1#xDMW~>F^@=>S&Y!Qupc+ME7mhsK
zZL1Ts_hMp<P65&*Milnd;93$9=AIjKdso5R2yhm$Z34;T3+(O;yBDoR!d(FKv?Avj
zd8mtRj2#T?B$K((aad)#Ilk+ux6HeGU{EbXbK8y`vgodr7cO+(4G+}XpHi6Dk>Pf=
zk9$_Yx1nOO<j02?;X`E&&epz#e$)QxXVU61Sa9~3T|C<+vgPp`$GZIe&+4VpTMlx@
z1<L!z9_M=+syMIUM`sgHDWN3n_eS_Z;RmWn8T%{_?u1iUGucnYoqZ`WV7u#FK||qk
zw6}CwWy9NQ2FBR^d~rfCj{~~9PWnV%w-M|bj+KhPd!RGKuraqX{pV=H`yW&@`$gN`
z`2@IG4-TEncDS4#^_7{kyYa%Iu|_o|l3ogQwGwrHyK$<iHs291qgFpneL7m&n+91N
z2M?ySzjL~ps864|9d8(AL{T^^!b#!o4xp6TpGQv=viEeoqQHNTL1LyxTTBFEHPgVm
zcw19L111xa>cDy)3Dv>WzRp6Z=Qc&29QZ!rp_HjB+VsrKzC6`v^q;q@cY{~ty(LoI
zJq#5WPyksB{zDHLtsz+##77RWxfA2nvYqn_3n0(GLDqWp`c}-TJr$EmEJzCg%kmm;
zq*bBGgIA7n(JD0~quA^D&*3;<64Kk-3my$o)srJaQ1CH$ASK=kQvJ1Z+QGyrE1Rdq
zS(yk9kcve>Ll_CR=jEgQzjJvMcn<!P^e;dku`0>iLZhK}1^MsA#dnl2Lr3=IGc4h}
z`j9kAA4i{|JLTRI^T86AeUF-QG!!U(NGNokp3$mHn?7o?adPI9@x<?sBbTo6ANVTx
z6w|ECw%7HS_e=e0d=}ww@hWFu<JP3?h+WmTg-KOgW;7ZEWU9Z3ZFg<Aj4{onUN8IE
zexh21dG?x!!IUuHvtW7eH&4#f)30Yw5o&lQo%^unNN8Vs`_1SipRK;1vN+@gEvqi>
zqfU~FMc1t6_uK#1lX@rmQomG*=38tz5B!rThu3f7;oCW+=+({^dQFR7#VVkvThp^7
zlACU4y4gtI1f5v;sm`MH^A^HeZNx^rHPse997EE8&wz{QOUhR?%}hcTg#C%)9tz-Z
z1vdUbW6*Ykxm;)-pK=A9QHVte4G1T(5{`6m*T|utU*dFX5c?6J7YDo#0E+=xMW-u9
z?H#W-CYRhs`1&~LNxIbd%nYpP$6-lAz%00wyS|Kq0|SYL2#AVO1br1=VuW)FQ?+dj
z8b{vyY+SbvSyPZc*qeK!`S(E$R5<wP<fXA^JY#CxYX=)swyj>hnnyeP4k+{ZPUx?Z
zIu-@Qa2wilFgu<Km{O9~1Vk*j=K{=r18X>&g;i;aN%5$Dh-d&t3|r~wBoPyVISIRf
zKp@^jjL_vQ^dFc|<?8TatOS~*!S!KbFi5LW!c{l1qe=rN_Z&?FW!5|>diGGih%XKa
zUei@NF@Cz}DmjB;Wb_705QOYYMdD9PS80U6v;En#brKR1AQ-`$4iYWWToL8e?rZHT
znXl#yFOQL-s?=4mMZv#9d1Ggo)NZRbu_l+|l4L=$wcGWfHv4J@dhxmGwd~Rtt&(22
z<*x`Dv@Xc!tzlcWHk|sclE+eN+eYWK!V<rYzDI%%ExbAL!1ex+RA}i%#@A&DbZhe{
z@BZkKmU-y=(U;O<SEjTI>u~Agw+CD!_)>T4jfn&+=9Sndg--3_P}{I*)TnU6#h-DT
zcy+JgXz$kTF$c=eC%)AYS2JldVisK1tyEa)J>#92kfPL3#uxJzP3`GbTnv94E34X8
zxG&awmN{C^n7cN56ok&*$O<am%2>CT$xMt+xhGvPq&urObJ0AdYt)*aE64{>N)EjG
zh+GXYCLAT{K-Bz+rDB46=3l<`-<2K@u0h}gVcf%aj$|nVvH)i&Fg#qhO}`}e`_&eG
z65Qp@;(8C1epvI*qx{(+?&cg>q_Ull50tFEr|yoy?~i~jfIyF-ZougWp44mov|b1Z
zNgY5Cendu~90!}u7&NMoT}*Z_30eeCI^Z6Lg-IRa5L|mzO<`5BfoY1=(n-*-CZ`&d
zw$al5jG7*R43GoBGt>!okj5k`MN>bC8ijoK7exJz8&`w%*awE5m-bU@8IT~&!POtR
z^wh!L{wQ7$wt;=plJ$?WNG(J6AY#)87Cm}27hp^nV46bR0wd0Jy>O&vo6n7PG7PBb
zCl5)zNR6vuT!wPx#`3&5S*!#$$1p7QrH7%%k}&eNP*{t{02sxVK7`i~gb6*m8Qczg
znn&9T_-Rgzoy==nDdD8rtUvOonESh8;kf$j`4YWM?yzqQ6`RY`>|TEPIMCd?l?$}H
zE*MRu1?2zv^Jk#_a5B~FtJA=elMMRbZ}3~Kl)=I6pY?Wc2tRfIquqa8e{0P|w7zNa
zE=&AspqC-yJ|+IC?7B!mS%B8J414+nA%{4ZC&4lvn`r_}l@+!Y2sP3TB*`QMS}>)&
z`=RUgdG)e^<#JtJ<rO>EfsL0ec4nN4=Zid?px_`D<;q}Iayz=f=lVC-F=Z{K2MZFa
z1G^v9o>Z`U+AK!p`)2*J0oON?=6DT-WR0y?nEDU3$>*pa7ix-cl5L#SYAAj|9lkr4
z=|11*&6|fT-nJ#Py?DWLwf~uL<w<Ynwc?B>cTaD))Sjm(Z>ZIoPu0A-k~?72xSC+h
z%YfJ4UncKKE;FemQx`qMQ#lrq*Y!iFPHe%StJ69r_~6a@!?8?V`<B}kgZJk$73Rf8
zVGeWSqX+%vD-GwB#8xEAY165_`e?VDWA3ZfjL-krgeDD(47iN9ecn+wclQ*-a&chY
zkVJuN4upLzli!BF7-&Ky+ydP?gf`olnFke(Y?@LT;C(ZakB=0VhaBJ^XK4Du4H}CF
z>Zwn=)sYqnc!%Kf{{H?Y88{fBOTq~cc(oQEoBcaY@b7tb^PgdIx(Zafn>dz{{f!J@
zA}dE?sNJthI^r^?vbLKNvqX^lA0l=6;tMiNhHvpJY*ZdTD;ru<rG4by$6*Q|JN(=@
zc7ivU*d;BK7=eI%2&@u>N9+v}RDzmM!zJBR8*0IN6yEl4Qt-8NVL}JB=Dv2?{u~}Y
zhwh@zG7m)_sOwnom<=#%2jgFIFSmSIDoEv|r1tj2YlW+pAG;h{yxTD`tQhoBY}wLt
zYa>ex)H>wdAaw@kILcn6@S>*0WFrx-RRkbT*A@f@ijm6)>w*US7eWms|L_-lOiU<|
zI*d!j*~NvJBu}<G)O;73_Cb7euqlbBvXAaj4ohixVSFZLDn|^hH15=*8fH$hA2{L3
z>qP<O{pJ>Yhxzy(f>;RFY1Pu@ug~|Qat?|z23Q8w!R&*JL1>{sF2$qki{dNf5q*Za
z21BBXCjI)5>Ygvu#bbBR2C`4NilMDXOk}b7KKNJeJ9@NG>PL5XH-@4`U9$@^u*W3l
z9l+i_1TO%);m+N=aV>-Vt}2Ei!@qDI5H?EXmoLEHYs3`PcS@_k0|2MNbAUjA54hat
zpewGdsWC^{1`>67`HFC>Vdq5auoE8fJ6y`G__g5L5*`Rx%LZqHO#wiEffS?$bFiaV
z2k3P&f?vIQ<r{S-o98hkP~=Boj0%wJYKti+cPS*8t~ZvZwWxO;Rqp%&6!N~0k5p2_
z-f98J$;>b~u)?VaPhh%TyY!3}#;6d$8O(3^1uN77GSQ&d5xBBR7SHT-RztrDUL^^s
z>g(&{rd;#=6M@8PI=Gj#S`t;R9o@A{;zk4vJ5Y^~c4sSVz!Tq~S6Lf!-h6t(tM>He
zWf8^sf!|`yskx=sXG<Pf2(IxP_|5z40EHIePOlmX7kvEjE%ZM~ULtx4x+CL+?q~~l
zX(ODNrAVE^s4c$95?_CY4;@<P@+vC<;Pf!4b-^eYYwSJ9xuCj|`7uh*@2mZQ#}W<#
znxrZ~rLri1Fy!W9w7Pmc5}NVnkW-No0wwxW;mg}mqZaaw-m<mJ<{>C7F^a<w0-R%f
zV6@=#q8}O`8?#jsTR{2IH8`kXVZn(f@&*MKX6<#LwR5#eVA@6w3v3d6D^6{wWR1u~
zABLy5Z?A#7`YSwJE-R3cwM$D&=fDLA5KPjiiH|PKLV*83Ns?>Tica)*(DgZ|SP-1a
zF(MP+>9Ml72d5B2Gc=mSLyV|;P`f|HZ@efFN@j6zr#3-L4u-Gce7M^-u!cb2flT?j
zi%V1JP_r*ir9V)vrR$e$*AB)+27mOe82z+s@j#`g%4HL&kWJ4R62^z?Y`9GxsD~(K
zbidH_Km03rFB>Zxg;phGvY=|C2RMTpaT67lF<9m#uL+KLit7-a4(${r(oIQ)b#wJv
z#Hk5jkP0!<IGQHH0!RI(-tY9UnFIll4q3M!B@Y40F5>Ml2R&W8wm0Fy5Z?{Vu7qql
z+Qri9ypSVExF=|6r-oV|+my}!))~#W-HB7~13{>M1)On)eJRdP!g)`Ma`nMkLmY20
z4RHased$M;7(@lB*Ju17%A5rAVFJ_{EuF8rD)d<G)UP0RJ&lC{xpB7_qrnAe^9Y+B
zeHb*7k(6EqR8&;N{GHIVQT&3Oe+W&#PJ#7j2q`E)k^xKM4_pi`0?<COG}WLXp245y
zJw+Tr30hLUfY?+tVo)}!X9fo#=L)vIK-3Qh%`)I@Ai#gx%mNOY->8RP-W5yTiBk#?
zP;reG;1S#$miswX_g#~{#d7P@fUvK(uJ{8<hxwGesN+g991qPFA{)jVHCRIF*LBw8
z3?#m7K*Bqr!88Wd9Q=;43Mzi2m9BgniNc0rZGTQeCO>|R^;lU3q$tF+1;?3?W#c_O
zG>xL~I3qAl*o?ZL^rC(;r?ABF4P;C);(8LV(hTrHDV*kU8EUzz4M2E`F(je7;4k-`
z6O(q*S65ZN-D;JHs{jXnjA{z;f`l#wb=TU2R&jI{7je0c96yH>4cwwIfT2Jkxvzlk
zh4i?7mh23$d?+d7aP(m477!BR%`S(d`hiURVl)Q+WF7#ISl9;x8o_M68{&t}EGM4g
zu*ciSawGJ4HvkeyYT}wzfyM^IYfMY!U?x@c18P)!<PW2x4U57qqxHf(03MXf_JT>9
zn&MSc#%5+RXUdsPlhfoAxI%*1<y3>T<y&<8+yiCiPLC~%jc#M4{jl-6IBU+)#|nO*
zROGmr7LJ&xhRFRf^j$fXlv(`hDJw-&_uybPX5N?zkRxoYAeNJ`A!Gy9N6eIP|L0y(
zgF%(L^|u)+Bm>8{45IKTyB>-L2^Pzcz}CAzhVz~C#~X9=^CVrH>Fd5u9lSDfyde#D
zb{-+<UaeM6Eo_uHJ3zqUDTu^{2i`sS_*|D=@vuP7AU6`GKd5jZe!;=O&dM57)nCuM
zoeJ{xL_8-#;J-;kK90w^8$*3znL!GFJha7F)f6Z!ejyl{oEAM%1JTDE?vgzPt9T3~
zyA7;y@!{wq%nnQyuUZD)W|qXX3h3cQ@Y3J!+`NG}VUP#?(S%J%D7V?{YI@yRcG8!}
zc99?I_{;Vf?q2Yj{x~Sde>Ul@%I&60(oz*Mhks^F9(XTt_lDh4VOGEU>3Qkcz|%VA
zWX)3CR-Q$emzkNF7e_c(5apgddoa2_@HnNO?Jfj<@Q$NAbzbbm2?#Ee4>d{_+O6NX
zaT4m+NgOTcRTR)>lQ#`*1;F-%_F}9bAn5SweTPx&QI`pJczBmu)U|_bmjg{9L|F1z
z@5gYz64eMS3HqiN<O}AJ-%J`9lnPgAu5Q}01+Xf)ba@NfyQqKT<cm=3mCiW^G2GFk
zPw@#qcby(su^BDvj^~`*_|U`bx`-G%`?FJhtS_|!;wtwhMcwRCrctSx{Bw{Ca*1O!
zGy!WRCF$PUbHyd!W0gJA&&#=ctGsK?jEG>l#KrAwn}lf}^)9(~Ru6qSu{ebP`E;$U
zX4VJ|$#O-8#M0C@^k&3L2pVU@q2JrA4+XMAc~N2PFLoEXf%wbK2ks<~M~G%TOK?$l
zFc_ZXGA{Nvvgt6$PS<{NRH0TDWVi~s&F7w(eh*&Px8}=_n14Nb)<yyU4{L2TZR5K}
z2Lzs(YH#=w<&zsH;yLyqw$6e`Yks&*Zb4@Q&q~A@e?nvCq3Lu7Xa=$%E`mpd0gUVH
z$T_rGUye=6fE`L2O{i<Tu|#nW0!dT^ESaX)fhYvDYh(z6e;e^Q0Z<w!!y&jb1H4)i
zmWD+i6q};G&(nQc>7b?gNVLm9(cWSYoJ9ppt_^%R><11kl=I)V<zw=DFYzE<M8EFV
zJ;}SQ#rqvg0{Qp;wVYTfv?5+Bi+@_2z4gGyXls+ctYw~#x`r6H1zhHmH%)AO45xDv
z)&iao*2Y^9-C$Kg=Bg+txfsf!gX%)%C!<1-xkeSi6C7&9K7iP#VfsD*#_eE6@)(vy
zfPq8|>`5<)sS3H|p5orq7JNvU3TP68AUjg$>R<wOvV3L92Ic!ZjIq37iH6P@ydJ=R
zX`heZnpkS?9<K#t44VxE$J!7$wtRVko2ZU(Q=!pN5j|a)dGGLFI$L~dw$$ijVkFnn
zOQ)z)sHxDS5c#6reu#~2O;W@C7G0OSGEjh`G*4(1y))Pb@&FM%p}(BmxSb4DG4LYQ
z1bpP@+{Agd`$|~gs73!Qh<eBvh5$IDvcU)y6x7Z!+X6CH94biQC-`KEZ7vZxp}!6a
z&U#9D991~BSX7e%l7$KV544H1k;j8DLcRma5eCXNy2*Hfpou|X#t+YdI8enP`iA;y
zn{{#j0S}S;ta|*XmH*cIe31-fhgyl^NzDPZ*C<HfAB?oe)ZH`6n0c9K{{~pJ`~h7V
zYH^5_?pp;&(87l=HFY_ijq}Gf^mVpipQXwJh6dDQgu5*$7>wKA2;}ZHd)HZ{=VocF
zJ9J}@BjkWsNxM&sy;^H-`bfRh3~vq>7$HT0VEr6U|HSD^zg8T2Yy3MxSz*_v2iz7b
zMk!&IkD`U@9~s4DvTgw%8W2!0$%Oqww-G9D5OXRdcwjtCDpas7mj;C|)!%`5mUwjo
z3qexlza2K}0hl>ZYtUx$<Hz1u2xS9pMXV}pP*Cg=02c?)?bjDrSy^wwfQ48_1j2v6
zrgtAVw=YpkK7HC3E&bjykEH3Mjlput0(pesHc(}DPtFs^y`HKd3=8CQUO`|7@1b+D
zvJ^NWGewv`;#Q7|A{swuq@7r_7n00`(x0=sbn5eCZ)lK(gpl372w|0VojUua8pv5q
z79a}>r9VGbmiDZ`x1b0WBCPnH1O*{r^U#W8F)D0K-?1v^fZzb&1~H8kiQov>kikAy
z1F^uty-bWhy4WUYo}n5h^9>$EwPSS<&k<1b$T@;Dd1IA%G6@}V0peK%HUJ4J#VSGp
zPO|JFL|cW8!YV8r1TN56lEl*e+FE56mtS<mv{_<#oCdfQbaNmdvRofJJfNJ)XZ$x8
zpe1W`^bBS+z$t&hdXJ5ZE48YO%cp{DcqkXq8%zzig`ftXixUWeGd@;AFOI(?n9Bqu
zMsB||c>h@xx01r&ijSBR+lV_lOyKqaS5Q^migIek{5sYn<i2R%u?iMR>L{p+#PR`x
z2{Z?2yfeS`bHEG^N@sF~ty`xqrW^n6Vkg>~IDEb+#9ID@Gw>mfd8obUF)Era`y#*&
zNm#%T2F!;bj0K`~1O_XB0|D3~*Rsh6kn@T_LPCO7TfQGE`o)|x>Kglx90>vLk7zKZ
ze@)M008RvD6MLCf#08_fp3Pdko|>8siaGKCh@0X5{gFplyT+Z*=UFlUMi@6w#DR__
zsf2R+&r(6#FsaC~(RK2zAif|5A^18dGLFq>Pux~+`)6O1nE`WP^1;8gyjVmPTmDC+
zxAz~p6j@|P*#EP`{^~vM{*OrS(f|JT|LETSTA`=@OCp4yx0XGw9elZjhJ5Ys|7b<>
z2@2-?kIt`2&bmN1V_5N@Z-ac{N?>a0KUy>Vf{HC?=yfm$`}?Es{6DYGG4K28za^c)
z#~5hDrQfF?X5FjbSj@#G^3Ly^U2Ke=ro@!Rrn<1hatpo&T9WVBM924Ti`(>yRsWCa
zO{Jh0%QNCq!e)+vGjVOnn-Cf(ZFk|3<2nf0^rp<$SU34Tka{i>BeU>JwX~4Izudz-
zP-Fd`i|=a&1GJ5wJ>)CQFWIYS^v|pA9lJWN*->R6zfo=N2+gphpmDoPi;BvzzAwK8
zs}J08+Qs($v48J1#%e}xS>w2r7c3r>)*l|lP&YPt87NEK$X%+qmLEA}YxYyQT}b%7
zz@g+V9-I2lK6>xiA)@Ewy=S;Q`)jeEd#0MRMri)(kL}yPhP8RN87MOg$I9lv_?jK5
zG4pcB!E|e)U_*y`bm!jheU{d49n%`DZMtuzs<$_bQr8}Pc33S?rcw5Xc$H!GP&>ma
z`s!x+nq%tx)bI57W$n|`KQ-vs?fHb`atU(<!-4;Z%515r-+k8npyG5~V6N0k@X9&4
zDUl;dAw>s|gl=7`cF_nu6=l`jM)SPBEM)Bnk37Rh@jSEab-R4R-3)iO?dtziV7pWQ
zlV73mbK%IfOo7Q+-8C1-lf^|uX(n^J4{=|){&8&k1uZ?!CpB5N^}3ZZA0*A_d6UA6
z4lk|Itrw0tTxY&cTi$e|XvBx}!*fA?4?QEMwi{`+Czt2hRp?eywi$HrEJW$9(XD;c
zeur<h-~HMR&6U?PY^!wNYWAu$ADemc<;Km6@9rv$uX)tN{re`j@BU_e_Q8ESX}|i2
z-{Q5nB0pi?kbLs)k!Zge&-80U=4q3h@3OZP48*Hku=1N0Y|(np(lX9;S*cK@P{ZcR
zHOWHCe>Mi+O`1@))+(;Wtn~cReR|BYf~R<9y{?||4tCi;c=Y$@1a&7?!{5rG4t6Ol
z_HHa?`BuHx2dyjeZaE4Icg2o%JS$QhQ|Xtn?@=A<tyHw-VtL5DeiuLYPlamDi@8Qq
zlvY)duXmrfk*K7Z5fX5J*JO4yIr%945pS_$yJmik8MSV>m>au!)5xozKWFY3n%O>k
zW!~AH?U$atA|GJ&PWRjeImra|{G2oSkAENkSdx%-uSMF{(1Ip#Du9Ql?UR$%aWC<-
z9TjX8QbGUqmI8g`UsxGGo}|##|8R5S8y!O^y_WBp>408t<NH@QezaYSkLyz7=VR?w
zagUf{n7Gth!;@<zqtfI{J#dtPW~cmWL0>H-kNGp^SzmQa9jdV|qUGW;&3-I!%r}H;
zJCqn{RnmETDJuNV{6{C)xix6xUP}p-@6tt|ZZw`|7NDGv-e8(}$9K!-O}A~kx2jG2
zx4ifN96kSR!oQA=|DWfcqgJ*Zvfoq0>7_w`ladN#7Yf`EDdT;|alfI#-v<(oo>(0%
zcFv2l-?Sf>-8DTE@<Py@<5=@9dHn<n_AN$<hq_L6_0zZ9f9<!iK`d5OCURWf@znq8
zr-hm5$17Q!%tn7DT;+cuV$AE48j<(l-IY$0RymQ#Z*M<c5iBZc{r+I|Sd^K{XDIh9
zx_tgVTFDt}2nFJJmBH_!r>DyO7hfEAzZ$eU;KyTzQ2rTrNq-vG=X0+vnrLLEjQsae
z8=>a+%&gFjZ#i$=@azwP-QF#Bb%VO?+gWrMcFaF?W4XMt!_}|sK=J;6eyBniW;Zzw
zy^4StNH`O!a*MogX&wI6)IQE8G||fw2L<y#y&8F8sKX(29Pj^up;**=I=}w57=E1;
zvm<x4H0=u2Plz+*sCY_l)XBK>n<;CWi~HwejRy;1gUOUyFW+XQ-u{pTN=aYl@(n%;
zVHph#_I@S_TMFSWOZVoB(Zx6P2h6YWy8Ui(_^}>$4Lk5b(7YODb*~OI0;wJeJNj_Z
zO&k~ThcMyG${InqYXvbe)5*24Yg)8#l?=!&6_Ux?<@edR<k|GTHEcUtt=ab^xSx*V
z^)KgJ<`!l7E-7VE(c|>F=C`WLpe{G}HBm{8!%XZt2X;C?H>Ax7%o<LAVsk`v&e<=r
zMs?reoqRUER|_>J6ikM!z3yG$RWV|6)H=weZV}*Ot3&t3b;HDk@>gjSVT@Ild8n_u
zR&)c|F%WqD`ZY*QI)foKz1?7qfc<SO5NesRN9q`)el;~5a7_Yn6W~L#TGAKc@pv}9
z9R+RY3=BH7{h2p!K(O2&kLxE`@G+p@U`LCC+@0H=o>{WdP=mlx4k#3b=WAPOgHwgh
zK5--+N+y0U56@6~FT%YMNC8<HfNJ;>{8~S}4?R2(Rn#V+uCihffLu$<5G{=$z)4V}
zKu7Vd`y8?cfu#Yjb{IK>6vaH9gPfc(F!V(QqFi9Dk9Oco+cmU8sEbew5f$aOZToJ7
z<J!)=4VQ=I+47YpSzSWf<KxSe`38b@h%bV_VpF-4Z!G5l`WQt1<wVibg3BzXnb`_D
z5`0G=UMf)R&NRDL$CkQYiSK%#+Zpl6*-z$fS>wWiyj{~NZe<-`QpFVSIv#E)E{odN
zYEbsIFGe@GK=U@6byijLDVD$iOS#nRBmS?3*ZZn<7P$8W_5@e{nZ3+i(je9+#HEvQ
zdNlX|%S+ySk6tlx^Q!SmulCh{-ShI(5&QK#y7>>_{<3xZ_Pa9i;0Y01hWqzBK@>Cx
zA`9P=8_Y`v@E!J88Z;y>IjHc<2D11g5;-YJZ?^nr9<3yJJ1}4eG>h50Zrk^5e6_$?
zcLIKeQ$~=gV7Snw3iw6Br-`^&po%B%8(_qz%A=k|PZf*jBixY$5MmOz;~@a)&?M-_
zUjdiI0W~cOK{+6RkR?j6X=ohe<?R8=L|!)lDFWF>AyZMlngRMjxakw0C3ZQqNW}ON
z*2oz;d8zqJpdAzMxE!>8m@#1)fIeV=h$-@SdPYCNHIRV5n`mgvn^HCU9L=KzN#g;L
z8<9*v9-s)VWU8CHw941qOWTMfkAq{QTp*g=+$(Lt5JCo{2h(hu1?7dnx3&X~2Z52I
z*&@R=6tEa2s}8%8bGoO&G7n8OcJZxSEnhxg%FtAR{0W5WHB~leTbk#qOxH`#Fbo;D
z2AGEAT01HW*=%<9ydL($Q)#+$>iANP`%Ja@iPmwsfv5Z)@r9*agEPgl_v^-g{k$-x
zbC0@ZV){VuyjGc1)h;f6cfG1NOKV+{4Qm-Z#I$eC-gq7uHP|!lU11Rx)4O;@v17hN
zerd;Uj}c3m>+sCY+UXMqMmXqL`~I@oSAgpc=Fu0>Rb$UKfFqICkp(z@jIatZxHp_`
z+0I2;USgUHPZHu0=liZgf&b-OfV)I@0IU`Q#LhL?g0W4O<imii(DH}RW;rX=f8gy$
z{GFeIcmy;6(xYw95)%dR(PIv8(0%QF8{AU3vr46a09oeh-^8+mZ`3*>LqaB&W$BVc
z7^3MRFD6|E1{}bwV>rzj{S5Q1b`mNHKJeaVU7H@9I1hG<27{V5fgxv7)#g*c$HBrP
z7ELg7aU5v8513uRY3Mu=z?Llxq~$!^XKHFn(x{O9bAm-F$bDwsjU<l1Z13Zqm=rST
zB7_y3!krkX5*8%JxkzUHOYH~`9Gxq*B%+M{#EA&f$fDKC!9<PxdVt;gFyI4baN@^r
zQt0!kz`<yTsFM{zKmi7V=KAT#4>xcfad<ogvfCtY$ajnrK}4bsPJx#`miArU_c@?c
zv`>Gz@t0C%>Ziq$j$SVf{yFcTyZDZO%35Du&z-_pZ>nBy>#8nb??(URW3FtyL+UGq
z<oTgAk1VDAX|e}+luw<n?eCpbFg+oD&#zY1ZtWQrb$bPRpDUCHUY`Dbh<ESr3Gq~}
z2(B?Y`k2=-k1KhnJ7-RwzIXSjE$>!k<pT}^HQsT_^x6yp_U`OWP4jKn3K_C}8BVYS
z9ghvG{zALjc9Gs`*Ni}})~aEq;H0LGR^FTEHn#J$cKr-)K2YJA>hI%R%BB5IKqN^%
zS({BjUBUW=|DEFFQ{Nh*l~VL$E8~7Ta^G2Jd2dTgTtnp2y!I~2qWuEdYXbH%#Yu6S
zuPZ9$!hhHFmb$5O>g6HcTdTF4?%igW16m1DDa}bJ?&K5|f1~y8LX#bXiyK%XIr4pd
zCzF`2zcj$;j)H;$$3G<;WAS0a^Ay%v_*XDiF_2TmArG2(u4dYPcn!gK2*?n$Joxo<
zqZg{P&&tdDtc=709R;@y+kqtRz`Y$)E6~ex;JYcpjA<1xFyK^VA^}4r@KgfgJT?*I
zMI1^lNQ8aFz6n}gEW;f~ZCPO!*99}_lwm$f#u&IOVJJZaAuE~DAA2XqyZt5VQ`9&}
zvL>z`;u}ePt#I^0-xyz2GKND2U?aJihMY=PN_OtveGaHP3@$<L1B(>CY*>Jco`>)P
zaTv{)_o9rzmvFCg0xp5<0eTKMx6+l7habA3_xA+?vQkSet%AYUDGd$031r?u9gBfJ
zGK{;R6MOsq{Q|#hh9)=QGVBnHq=6e`JxNivi{Rqp14y`)fuTp@?ve^Dhj6YDd-`mi
zNzmv~=kZh%4kN}>0+1A9QVueM39xABjr;*CX@#o5WA8IS5|@Skq<&zBKqP@+BEt3y
z_7(i;trKGI{fl!h7f8q!xc@a~j=>!QDH}J5Efjdj4rS$lR0zh7Gi9ljNSI84RAJ(?
zQ9C$ovkyTphK8&RT>JNfZM?d$Cs^0wd$BNJL@;NGy9bb{I#dJT$r0aLjMx>E(t_C1
zY<Ei1X$Q61TT*c)WqrHKwEIBhrjic^{o{iB@30?ASfSq_%yLI*X8d&&jkDdf?~@`W
zn%62S^PPP(Q)h=<w7aJT?cGcBpFa>NsTwghFjy{puzGlnMN9I8w2}4wipM#=MOoKa
zXQz)vstVa8_!+l~CyFsC-qZHfy2~%}RXe-Mt1XR9u4nb*q!Efly9kynCDTtE6ND6M
zjUBimI3FE+QT5bs>q_aqJ7pQ?+)CbktkPH1GYHyq?btEfit4Ek`zQqDOtvpLy9anZ
z(A(p>`%Y-yQ_G(V!fDE{M^t6+omjFP%-y=1nc3OHYfF;u{?f2J4B=`<RUzA*c2CAM
z$*v1!-#Td7YG3>2OpSCPZHlyt(c<1Cqgl^YEVXP`L{2BRoI9{QpLF4Yd81UTNBtXx
zJ=ZI_o*c~KKJ9(kWn_f*n-Hf*yi-9{+YjxpZm&Go$R@L&8Jz3=d4cI|Ur|^OGZ1pP
zJ1;Y>BMG6n3?M;x6a5l%yfd(4#5He<f1uyKeS#!QW}7Mi<@(^iCn-1g378p#H;%!o
zA5S&$1gOjgR($nqxkvd*MR&j%mQFBCP9`-3U}1r;8j6{{ez7B&z7lE+5&jW(OLg@-
zAmV^^brym}Okh^qf=NT%QyuXCp}4><60-XG2tXHvbE8m>c%~K5t*~NNj4@}5;|Y+|
zaX#Gn^vRcIGgTgmVgOtSQa*7$NNRxJ*$9n&a8M9J;?83J&24%I^njlLQMuDxlP#cN
zB=H1zmjp}${Q%n*EeE*{k!y@O04knokDAf)l^ZZ9KvW6wTlf?uMw~rJWE(C);`m0Q
zJ-}N`YLEjIPp;K}QQO8*k4D1&?-Az2jGQ!K7=(wD+&`$V;C1p9#1B-lU_N+bFOm^8
zZgb*!ob_^s3Fglb<Dy<75GB$nSq~keMN%KE=str@;@>umQ3gtJm#MllI}!S}C;uVj
zSXcktdIX1O&7ueIF2>?PAlvJsN7n(lty`Fcklm!7s&q9G9~yBC4imYeb7`^FN<@h1
zv$iDh+0B8+Ffsl`v6yO=gQ6S9GdM@0pr~Byh>^vt(Pc2B;0xst<N^SE)0Xsfb1g_r
z0GH|6s_X|ilrhX}R=hy^C3+P9@Jh&qkP*5meCS1qH>#%>zGaQOXos?CH}kCg(D4ht
zv1P$dE2qS{yZ6XZ9s8+tp)X&5o<A@f`RV!gH)C7|;$J6Mr=+RADC9NIi#7-}xN@OK
zO4z4Cu*atJgh<-G{DT|bx9|3;V+{!CP0NjlOZ}=x$zs^k;^3k_G&14Jl1eGDG|)9U
zO?`Ko(!`cguvJ<-@rJ3<`-1HqJ9geuq@oU~pb?GuGu+I&>~iMNv3CN3WqA|JG@7pY
zhwN=ePr4Qe9k!R*d#d>9&JNK>C*$vYNShdE65XievU4(oR;T5N?V*MbpY{j;$e&HH
z@utn$5V_qaJ&9RG<Iqm_2o{Etw1xNOtwSa~){IItn||k0n^9J~eVS|b`JBSK60D&I
zFOwQJs?S@mKG@A9e^2|3`QR0vZ+$W5RQn>sBg9)ppY->1E=x{XSa*eNW9iVf?n#T@
zE#%h{U-v3$aL7vRmr>&t$tlZAT^0{RE*a`R&1<ZBwy}bOve3TU4Glpr_m3k$d`T2t
zzvIH_g3C(-E0J)Iot))476ol!l`NOz62X4&1hK*#8A|XAAYlF&h{l9Zht?5S6_QIx
z%Bg_+f+O}5I5x!Vf(X_D5YtP)zW8F!5ZXJW?Knd)xD(FDu%Af>XP&S<adiq{GJvpI
z%$j<z`yVhLd5F;;VN!KCcW)uZUCPgjdBl(9sJ7+l@NV#o{pQQs`3?0Jv5`gEa#)x=
zW(Gh+rbd56lU;<v0jhft!NA(mtO^5@V?4{S=@T=<J8szB?L-h5dKpvHAf=#CkbF#X
z%z)u%l+#N1CM41vmJ>%X>2Q8&kgl1wa(!fSo=n;yQEY5fht0qohIP)Mv5^>B;-rwx
zV~jso@;zt)RS6y&tZv64k;#T@DyrcMj1H7=rVu7mzaz<JS5a4g3vw<T{s<+?2pipT
z=xYEj$HzDViA6Mc7$lq<GjNjKi5Li5$k@R3w!bQ#d->64vq_t7!C6ljG++`aV!It*
z(3H2;*4~NT7mraw&|L>&&;2<}8bq-^@JWLt>7-T87dsxr(bSEco1z%)O&5)gxnDj^
zP2B~fX58$PuoW+=;t5D?UQ3(;NQMiO@IV+-^o{*_A{>vIuA37vn9*)e%gh6cvp*9r
z?wMa}c||dEnD3{35zcZCzuc>tT^)I^hn>iYOv07?{E&Sxz7Q6uC7tlrZsB5#%ISTH
zQ{ht8#k_Kq=ekCJtVB))HuOiS{N^;Hj`$cIzPwXAD74@@OSh(fngHvXN0+N#4iy<s
z>rl`%#{{u&cD+CLQ=vR2|0w-(L9=4p-3=o{W(R87=`5QkLs-lb-Lz%QV*P*hO?+-G
z3A$fCv+1qLBiRS_bs3@F32jw5r=&hJNqGukpm|eef=2gXHkVsL)5kG`TT?cSH&43^
zKUVWH6Q3KeH=9YJrDLbtlVUt=&Ec-gyh-G8W##nvI~h@NZRsrjJ=v-zD#`awg`Q(N
z>w5lql}t<GhUNM<4-~oSwkP*?gs*M2ADjAEsKRl$b6I(7yyNLV`F^7VW@h6xicWi`
z)hT`2o5gR&imeS`zjvSFLYooI&LZ(4J_c<S?XvHZ(V7P~I8mGoj5)V<?Y@N#<Ks-s
zPDj>7mY-bSKaLIuOAcU0=j1%`K)u|YZiMz99GSVewvz6LqC}<(6(jiie>?1B19x)6
z6sr^CcM$To-Ygj@_JyB7C=eF-i>Fy>1+rsWb{6x}r9n6F9l@Sk)g!!(knS-CCn>NG
z|8n+41ziI+AHQh>#goxJ8Vr(8*i%#=oh@{lcM~VorJr8{W@98^00gHAurn~KBKMm?
z79&`u7D7RM&fLp0t}lBd9>T067F^ifHwl9rH#Lc|#B`TXNx@<zb2nUEd;CAB4L{g}
zn*Ibt0gl7pntp&qR;D{l>+_?*LI}J`Y=*9t6`#j3=sL6Qx@Cyy(L<#cPU|<pFoVnZ
zR>&p?XbK6H6$b(xGjla)2_R7_<S~9Z;^X7~YnH>xd}JRZ)C^>!U~&wG+6xImISmb5
zZ|5LDMggDYblu$4l;lSfT_<W${!6Lvfgq6{7nr~`5ari1(u0x&hxkZ1p%4w^8xtSL
z&6ctsVg`KcD5ZYXhW9bMs$uWUtrcMM0~D4l^9?GQ)Bq>T+dS1s*bHUh){Nn##BoDH
za$q()mpa=MSYyr3zQ!+UlsbY-^j(EJRmvWN=;bX7lg(Fb#;1Iej%m6*xKq2%V08Al
zXZYs#`>xMjnB7>KJF*`zXH)(j%gry-Z_1wI&gS|RTvhmzYh~$u*QoA|`wx`(YJ!t#
ztpaN!4mV}U(PYQjXNFI;z7t5L6w?jkdU<8ohT})b<IZOdawi%k?(O`c^Z%4|<?&Fi
zZMZ`SNhuMD;;U>ap%U8c6)A&|q%4i?i0qP1DCIcBIJPE)(@;`Mc8M?)(%4$0nvlp^
zBZKdH&gswjg?Zoid7tOLulrg!1L;m14ivAl6E9BC&u~<A`9nYWaopKH+p&3?YDZqu
zRRj+A|6okHo!TGre0F9|rOG8+-|2+Rp6|XlXrq}enIEP$b5@D}{Qkh3=epEFNIR9u
ztF+ELXz%U1+`mrT{_AMr#MYGes<D1<XXH3Su2(S|=YbstfJkU&$RPsm{&YevTQlWQ
z(w210V&TwvG&icp<DOrwoyE7JvP;3@FI#NdsE=Tkz991nA>OFXFhTxj>Q~o(+urGK
z_Iyjd6NN7gXE+oN;20YKe{ZUbi^E40F}~zwK>zrGOP?-%b-0y#6VBk^e`;skdzCQ-
z7&BC_Z<nwW^--_s@PDK_vjMiml0HbM(A1$UCC1nbpU}!-5({rrxMu?q7{{`{4`L*&
ziuNHPgXkviw$z<hjaRtC47>gDyRe{Ckj^?nQN6(F7r1%h*I6+!F>b32IJk&8rJ>@j
z>g`(x+cvavq))~-uDHEw5MT;1v;fVINRb&Lb=K3pfPx6!2Fq_QRl9Wc;(eTKvbY|+
zWaX4uMZE;y`@*lGO=phtGoyXI-aH=B7LG9%Ymdka*B^1%z5Vgay?O29hq_!PyWQka
zX@z@oB;o=BD_;GT;^Y22V>`BBNm}4>11tAbbE|l9_~R|yUvW`;y{(t0?B2jO_6bSK
z>&=4dEN%$x;<^{HlEv#iv_BZWs*%ay<pfoyP3g!6XXx7}(kx2&Gr9gZC1i39ESS+f
z>E4Yo^_g3PPOWK}44a~!%JNBHmTc|ZcU8FjwAIsoetMQuoArBs{H%>QpPhRGsFk3n
zp+|<6ny?jiB9BBXE%w%}X8QU;Q`t~U3Nq`#oJde$8Pg*>;Cz~sDRksQUf1w+jAvNJ
z5sG+*nURgn-wU%K0}OQ+$?q2WBX-fEm7^y5`z*1Ij!Rf*NyW}D`jS#_PN4u&n98bd
z)*OFV*z_s7V`xfX;$_RZubp?L0hVErfuV-GetKqtO%zs;-pMzslMG)Ft9ST4Hin|h
zFndMxGmD||n2W5LKLsAB5GQ2v<OmN4t9ouWg+*n9LC#;}RWb=3%p$gdZHCz<%+?7x
z5{_v^z(dlWi0GK-K0KnsS9GHvMu~0hDGN-UV1D3?RB%3CL*X!f>3#XLen)VVpd*U_
zC*w~P^h2q;ipX-1zu~+lZDhi5nI(LTSS}0)PpQ}_>{KeWiFo-(K_b3Qu3Azi&kncm
zDEhr`|H5glxY(vWhYhpa$2_`ROEuY6!5e=l?3KNkrPR`=NtfuV2z-BW$=;urN3B&i
zZ!o!aLm_ma@$-^pZOff#Zheh4pGpKWJFG_26p~tBox9^yTfCXUZ1<3j{Yag^d@SLX
z?=ks|3)0M^M{>8$hA5Xj7M0t%cYj`zl8A4_M9&!rNKW@SyndWZ-4lCVN7hcXG(}^>
zbqCc$#$un7n?lQ8Ua$zezJ#{*E7Nsu*RiW7`Yj{kHu?l#|D{}QPQpyW7k-B8Ahs`b
z?5O}+v#fSEz}bxtLSJ;U;eifkHNY9DYaVIkuw)_5<s6TcsB}<U7X3+dk9>oy0j33n
zgo+!R4O+^4gYG&}C`JBwy4S`=5)%^mrG1<Zo|9OB&<S&<hb}=3RolCr;W}kD02c*5
zfGnPaqsLXZu-%Pl0}$%as{3;+xthy|j*MjUp%5GDD(vHP73Z#qjEWLNj0q~&m@E$O
zA((Ou`jt&~+Vwo~kq5)p8LJ7wL|Lyq93jDmxi!Eb4$$$rIGjiQe%doYtdWmE04}U5
zAI{jRh5ISkAP~sweWVVdwy4mH0>_<5cpGR$=l1pNiOC{qFX}kUNH<Q>*;g!w8S)cT
zz-q+L4Q9VvPLz>kG5eJbV=;<BFrRC-r6>GMm~_-kh#D1qC%A*MMQ<=(_t0FB(y<+f
z>-*0ycUw}YTAotwyG5-qBt@)i=9-wHfMK$ELr9XI$_<AsuP3yr^oicpddJz0xyji*
zdD~^aUUqYPQ`6Y1u_+`jq`zeMWc2n*7$(Ui&(`v8u)U*WY~f<f<+B`)a(|-OQ{yV_
z@j0<^Gd1Xg(?HQgd58Gj-MUIcrFsiX)s9rzzh4uvIM0a9`A++d`z&;sb8t||9lkhG
zud|-o$~DK<*A-+M3Cs6+oll6jt5Vf*NUB_u6dllbF6d2Zy^t3jd(i!jFCyzRt(c5m
z^f5V+j8v%^Y+Eh06F*M}+zBmaKDX<$^|7zhs#*(_3qENGQLKUNaTnA8M{btoGL+!5
zw4de-X#}9Dk9fS+IVUAHsHj{=ML}}o7W~rjV8O_`2X*I(VKCva{D=*afyG#$4%C*5
zkJILm8|<EzwHfPHl<=?TKR&?|N8cZXvW0NGTG#eqpkWk8lMqIs0ggYdySrN{Z~U$Z
zAdkiT{4g?Ef&K}H8BlUWk42a^4^0PKQgR9kT4Y;BpzH+75DLv3#DAE0pkV`->QCSW
z*?_G5zd6EXiJ0R5!@yK76ASpsyU~L}b=-KIciMh~H9!K5&CQJ{6j01&aDJj`nG(pr
zB?I00Dba65Ndn}u9nSbf(+Os1j9K0RnsfMlU7+LO5fb_wiQrtQMpw5SreO#sI{@<N
z8WgJpF3DlfV;q;=F+?J9(39mqAjdK+aUcohF$5RXv*cYAcz$}8OMhc*ma?~y#a@pY
zfHILIU~&L@p?A*oJ(e^dMmOOK;tg+`=K@q^9xA(dhY$e)`29hMl7gt8m`YlilICNG
z))xCcF7)J(PksZl_(ezCSwEfLQH#|hC+j$mJ}LS*bgPK)N{c9{%T1gs^S7wIq%n2Y
z^J6~!8+Uk8{Sq%|X-&$MD?+Mq(rf(0!bhZy4R6NXIhoX6mAS$ol6RA?g5i*4n?wE7
ztdlfriH1oXtNj7BM3|Bk`0a-rPps6sQQ5kDI!%52hPu@2js&}c-#09j)U<eyUp!%i
zcZ*re2{~}K?>=`~N4m3>$Ck(@(a7w0$AJ~1sN!n7L-r4KbEZ!GlT@BwVCEZtd{7?4
zg0F4M#j+TEd>Ufc%T%xM`W_6NxuLGDrNz~%^kLsJ-k(VO>?T7mcr-pNC~8(>>Joq5
zM9so&mkehYefh&Efm#0X=hmwo>}(7t^>u^(r*8BxjC(h{P5iFnL<qFqP|}fBmORFd
zX6eRo_9W5^*|4b<0Cz$B0@E?{u#7zbLXvGnOpKs)A#$;nmX?D`wVTqlFaacy%ji6t
zNKb*&3diSC86f!2b%i9<pcM`oEsX|}GyzR%d}3l9q?)_@2A7-bPA66`9|D+%{g9Vr
z8DV#Z!x5dpe8{Lg0`%JUf&?2Lhl9uyMQ%5OO9XL9W7Yb1wrm1Mhe_U6tU;o$g1&CA
zheyF4VJ|?HfcHqKDnYV`a*{Edhi*<xM&<>g7mZQ0LEC|0eFwhMLzh!!E8h7u$dKc{
z=yU_gLIUDPhFaj{{c!y^z75>U3}6G0^O@lo!9a{m%iy<5hcd;Q`Ve$JVq`<Px%BIF
zFkV6orp8^>=JYCeDkv;ANq|42yo$<F3I)}KD3G}?U{+?kw%#PIIljS$W_7p~!iKN0
zx=O)>z#KpgNZUXzY(b-fNN-ZM3*@tyFjT6A09d)wA5tEY(dmBXjf3~gwJrgfN>SxE
zy>$&NxSAeYN>nrb?FR>rQ6j#le&bCKmvo`<-FDActL;HE$3c{=y}W0AU7h_gdW2#2
zxVg4PS}_I~>4A5Y)23YxX|KE{y2a2!`J`l-^Nu}qZc61$$c)=}BZ;-kx4DV5l!dKs
zI@Ofid)IW8c)^yW)q?y|4apKu^BX<f-qq}_T%u|ltKY1^`y0PVP>#BoSV_RrTc_pa
z&p&%qY_jcEm+9rdHK#l*^y(DyjSYFcyqrHiy^yEY-Mm)lg_wv&fwf+}N}{XRVt(+J
z>#jJ!MJ~rPCgRdjzG$ONBj1($C^v8aY1PC((R{|kEK*Bknp>Kmvgi-}f!vM7Qe(er
zzE}>ueZBXenUbzzW&KEMsbZ<lqK`?e3FlPFB_cXua(c%HpPfmR?0(;JrE1^py1|!9
zslP%_?UT~h)H>>7-KZE3v(L7Y!;6N)eYO=_%bkjlYS}2Fn=0)S%#41E7k#4f?mm4Z
zH$mao+)g#Yw1b(RG4Z#{@_4r`E7^bM3axWGR&rWwTfc3urpA#kM;cY8EOuBnU#W`l
z^YqdWiM%k0G7yp)1dCWnot9X)&dkzs6}Smt%P&VD1lZRAm!Q)YL$D87%%-M7U}t86
z&N;6b48`?9jA^-^Kx<L09z;_QA}iv8h#>)hp}G1ssAw1rk|nnPzyVkc1Bb?-miV0v
zPk)@8!5dUkz2tO##y6nWub^fLuX_Z<8)I9?hdpGJ1N7Gws65`=snoQX;ow_c!=)I_
za659S8d9TGvtHP*6@~6PY*H}Ef|QSB>!6g0zj5OLE(5RfDhQay>2fgS1ohb*GdnC?
zV02_+u+6dNBGudj3RcKRp#p__7dI{$a6B?2$fV7?k9`gb(jiv9L~!N%lQyMrz6A=v
zaeYE&P*6zB{{T`6XgdoOXh1x;UIf^H&@P5FA*5OkzRD5C2pSYwp-KmH6m;Or;zmMW
z=Z38ey*E)T;j)RU1R2ZV=aK+Js7mVhR0RNK3DhCJn7^0518f%!zVX|w9fekF!|fhX
z4NOhhio3JnJ&HepMiAX3h{rRqelr93#+^kg`wXgFToXRV<HLxAL~~$J$dxD;UjPhq
z7AA&C4J)tJ??=ozHnzea`kf>G@+M+Pe39F^Q_>`XJL_z)wb|t%;)9^c6@t~!t6_Hy
zDKL2cO9&+o?|o%?ctHuK(u#_L8D;@ieIPWrb&owyNy35o<9lB#<N!o=3e*&x6#Zuj
zl10eJ7^ikuh3&@2s9yxKizeFG064U~-ZrA$fPrg`o5rte2k2+9oCs)(1_gR%06yZ?
zMqPh_s1CauqPE$rs)~8|XhHBH=vwg~dl!yNFO3pjR+Y~%MJ5UMFUUOUtjGW5JVJC-
z1j{G{StT{+AlVX%O@cXr<O2Uxy@8;tHzPz(kLQ<weVQ6B0h)9-Y-`uWMPo2==C})9
z1tOD#9=WK{K>;;7PJmc$d8d~bhD%^Ypg0lO>CT+ZH#pi#;aT8GEHhnG?V{rw@S<Lx
z9@2SzavL@F(4cOFYq{<<3wNCbA<aX46?)>a3YoiG16ZGw>ALK5TV7XIP5jaOUHBT)
zbjCw7iW+lGiOOE%__}Z2_se`XBYDT^!<53IamL?E#q5@q%?x~VT3u<A{JE^xv^g-0
zJy-R%%Zf6_v7FK#s)$I-zw5-g{M7Num(iF1Fqr?PNaE{<Z)?MuLL^JIk;3(dG?JS}
z{Go>R9(20VRW3ZUET0jBHnw%lPxUB89FhkNI{m{7HrLp*^z6pdkrDM{@$C(6zAhue
z{lzgOCs}&u6pt^~9I-!UeDdn_{GcVp8EQc?JHmZK`-9#E>dSO%hoGF^YbF@3qnsrJ
zHy~~Ez5mX)G&Nb_$x~Ph#7hWGC$K~#@U3v?35N#9Wp=w8iq{I{_7IzEVEmW@kVzld
z?MU1iN>#iSn4RF9f);8VK%f|0Z6Fqd(JyM^ZRfvQqJ0L9-?@3UL-^cz9EI>nA~|G!
z+GL<yI`a4pL)V|c`ZU^e{OKMnO~gLpmr+s$nIry_s6Zb=NC6NYkWV_COrY(8M`$Z?
zSfV6hJU9+Y31O2#AApqz1m7WuExwRAR&9;R9z-q>*^(4AV3pqroUsQHuSIyxeI}+A
zs2zZqxU~Ge4{#t3@d<&sNMXqAUNSrbwutZWFFcQC-t&zXJaMizv%!bE1W>a4RV+K7
z{h;;hvqPsUx`z$SXc=c_+S!~{eKXdKOZ(g%ZJJMUvpe=s|0l=8epqZNafPFMK*U~j
z=)8EL?eU=dIlnG&=N0e7xKMxD8_GvC{XS}_DW++)gu;0Gn3{^br8DX*{~e6mn}vwU
z6Y8J0s70`c60csOQd()Qvz}*z=7*mF)0c-^BSWMAXHxcs_qPOv6K%8qc+qvce8ulg
zdmef7^3fc1w;WIM&D<?K8z>LojF4`FXa<0=iD$Pr5+yYzxnveU_TeezUNWRoBolrp
zHw_WlO96fm-3rPPQVYU5M5qQdm}l@VBLyF}Ey5Cn%9LoV(KmchTRaEtQyj|u8<6fY
z!+n1BEzBqPKa1`_{WLzq$^r&WDoWB*39D6HMEVfXjuD|Q3QU6hAsHCL>b>Bf5uZqG
z$v~&a(D!Z!g$&YZn-RVdc$+mL7-}B`On9#IHPb0@JZEAERD(S~5JOM$w80vyfPjhA
zO(+W!z&b$rWP*;3SmREAWs!JrqAo___#V<HQRb^GU#~p3bFGTa{fnf2)9$>(U?PT<
ztI1G``dd2IkQg|CGuUWTwHOmjP$RxyO8$<L^-)8%I~Il$9#Z!R`-U&}`UlwRYz1Rp
zH>&wp-U@E12-_H-RXLg9ay|Ypj$K;yIPlyR)Kw=F-7}ix;%%&>=X)!Hf)9X!_7=ln
z0N+Vyg~o{Y1GZYy%p)0(S{_1Zw!gn)HZ`qBIv2`w;D?vm-9BS1MN$}vF(>O@03sYn
zS{Z(V+am)Nyd3Bfa5EJIbrUZ%YTPU+YQe6;abbi!xsrGO(*O2!VXaJNty583iT6p2
zj^~~YVBdgVvNZQ=`nxNb>%i*(k%$*Rd~n3v85IX{ZXv&SGu@@!X%7+zr$ocnVcHF2
zBX9|=-&{bKOr~XUV_b$|#GP{~SS`n_te)c;q4I^$p2&x=f!n}W6tF75G{+(v(n{c%
znf{pxZ5EE|UwLZ^V-S0Z`-vX-M?n)mnqHz#L=aVa`nPa<nlnb*^;m(*hXvH^pY(~I
o(CMol-d8{NVmqr-ByvH(;bXr1BH^Z;i}26Hz)b(%e#cAy2S0Ge+W-In

literal 0
HcmV?d00001

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/current-ui.png b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/current-ui.png
new file mode 100644
index 0000000000000000000000000000000000000000..36e5a28b5ddcb0edd8ef0ece52599fae8fa79f09
GIT binary patch
literal 656592
zcmeEuXIN9~wzUmu3Mc|fM>ilHrGpd!QR&j9BfSQJ&;x=LMT&*qkrHY^O6Y{5AiWbH
zw20KuA@uUCz&_{R?_9a}d!Fz7ynlT5CV{oq`_6aHF~%Hoy;oI!dYy=x=)#2y*PlO=
zRl9J3O#8wGqALVffuF2v2p3(rz<A-g>|+gg!=-Wj$jCwT@w%m#C9#5DeIqx4e;8w`
zTK>D#yITIusk;%E1Qk1Yf?}=mzkSMn(;N~gb&KMLtZC#;V&EJ1l~fnZiBSh9V=vuY
zEi5hOl15&-T5KOAPk&0P#5%9mw6CBgK(bGsJSnIkle%#6%D?R&KVFJ=jQUK9+R@fb
zZ!TOSVEi}z^G4~7Bc9-;f8QSj?k%9~0-DIAwnmZU-?#u5uMlV(lm5FN`*a1Rbco4d
zWJB%kzyEF9gnM9MLAU>nJM_N``o9bMzY+RxN_YQz<o}sN>rHNCXJ@NEe(cxQ)~2DS
z=cTisK@OxZ#xcCRckkX}U??0I(D>2Z9CY9k$MFAEAAEo`J0(O%apSBa*5|$<)EcgK
z<4GgZYPcT^<hR}X#?q9c;6>Sb{|JX$Pyavarj^*G0FKh6GK;LU3RxOoe|&VHsjHit
zk?~h16w2}NVew$IbPMpQlrZ7Iz`%VT9+e+Ie#k$2rW#B_rwj3n8XRQj;!-!)q(~Dj
zsH47i?#<MPydiuL{ytnwTDs=d*RS~+Y1jUzRSHN23L{g6)wMgPh0#xye0KqwVux>6
z4aUe7NoRA>Pd~ZfmrBKZkyy-i>Em8-%6PRKXmCB=I8Y|=NdSB4B72X>c^7$uxHRjw
zysY+_P-l(mqv!vC5Ux}LxAM47>Kf_UtvHhHuD3AQ_Y41ecdyYzwBsW1V**h><H~M&
zc6O~N=H@+nyo~3=nS7$}&EK;PoIVf!ij+Bb$<99TBfAM8nE=WUX?IUgHCgVZ2B&!;
zjicK_z_U#$G3u<8;BOKGA&IfCsEIhYluGpw$;!%RLv(F=!Xy0tCsg$21c;1X&{L(q
zAEM|!8E3E$7fH-3TrB(~ywVQYmNNADIr6~x{KupwHp_zg`Ja1Be}7<dU#dd-HaEMv
z^yw2b4qx$~=>Zj0^3vnZmn!hMDa`szsvPoS=k8Jg8}KJ=7yEHb^55k?E>@`ue>~LB
zpU<Ai%Kkh=z~Mv3MoLOyfupw`|GnJCB3te9xIcnsC*$0C*+|g{4t~IM&O@f!6OzGt
z;6n)`XPa~0wM*$PHd4gv*pg?dGUQLeVhMGDpbg+GO(MO<_XKz0H5Eo3lB0bgPaE9M
zH1M2V+TXX3SNfbwU%0pmY>~Ur*DL?SGp7N|>z|<MOqE;Yu9*|<tDbdFR5q{s#sksm
z0Cz7XX-etW7(NT!Rs5RRaJx)8m$*O-+>>zP+0vsOVWN<81Ew?*I2v5c3f2Gp$`h2r
zfbU5jJbf1OE;N!*>)ktEqd^0ZuiDqWlt`=ba3^S#C`>PrTSVXmRdT$QZ>@w`8azv`
zte_gU6@D5hQmR1IrA?+voABad@B*IyjD$jk^aZM@taAaWE`ZkqwbG%c=Pu&e2f7-m
zoxvQjjCkbP#>dVzj{@2G4X?W~5oaj^!Lck!UQr)-b`N?~1ko}Gdk9^uB!JutrHaNZ
z3AG6(#hW|Mxd%V^UqEQ;>DteR{I}<zC;G~$U4^u>3<WjlrZnYfUrSKsX-w?`VHoTK
zp%a<`3WA^N4T9(cPBc+kvFUBr^EO^e9f*t~$#d@LG=t&tm5QGr6^v|NHLw}w|1ogw
zFqN0%Gzw-<*Lk+ne-yXQYec|Vk9G{48ow8M?H|AUuVk&h3fSDCg8T3P+h=?ub)T>_
z&M`2WMANEfK7cczujS3R(}yfAl`5j$w_ot+lK>v7NB1o7(#l*f9G!cxuBZWfD`nG1
zdEPSoeJ>67$hOf$!D1R|>wPzi$sQ#neLBq%rOBt)6u;;x2b@4%EnFf6s^OAozvy{?
zu^xScQ6Ie~+)sSoH~zk6upXmb6NN7Bn$kCm9V^NOk4_KJl`pt!US}b1#%0ATYG>EH
z;-qPfJ8=KHs;3z#wG5zgR$LzYr+MO!Upf1pIbI{TKGVa8YS;#%aF_pdvJg*FY9I7#
z?NqUn?vBf;GZB}SmF4E-tXJE!pDiv~{%J|kf!wCTt-e04j@^Xyj74SOcH@sZO^TNQ
zAcNQP>Tmz~u1{|X_YXmhlujT=tZ`s=_I=h&sQ~uatN7T^{(Lqtn&^uKZBJY0aWH?Z
z;G;lJ4Q*}mBC=hG@`uxF7I5O?UN6pX1sC^}<Y#fu1^><;dR~w@-o_))77iVDIXkT9
zeeF%X$t{8eM?CUe<3@_bLa9LZfpVk}hZfIC-P`4MBk@urjGN{av$(N9&H)YWys9h~
z#^rv3vz2II#NE}~2LA`Rb>U(<%hS5Az}DpFZQzt60O%Ymek`0}hx5J$WZ!#alxU(G
zH*SQ4hr{0&oTRChP}23WCbV7Ru9#glu(#hvfGz7$^o}lxS^C4uth98tw$-`0^1yap
zTn)Z@h8L}_`vDaUMePh#0Rn2uk>Kp~Hhml2@;h%qdiroMu#|WC-XHh+pTE{4ddcJl
zjEv$=&d==oboaA+2P2k{$&I;`y>_jRczjbZ>)w6j30T!hI>W}sM#I2h{O)Gzi?g^U
zDaS>=_}FHa<mr9k5Cps+h+}D@Rxd#a)VFPq(sZBy81mtRory<lYpcBc^WGOv=`sz)
zy>b+gun=MW1b?4%W9^WVQNIBs`gc5^_Y|f6_2HKX_swK7>rgK;-v$nfI%W@T`#P7Y
zyjMGLy<w9=n`v70bfHw@+u{UME`{73T7#e`71Ay)r2xd=8vA^=Q%9}mZn5?Hr~S1C
zZaBRAu*qR2X0Y^`q;D0c0aZ%0mDoFV&B2FEH^T7iJS@vRU9T6AHjJ)vMA1^+ahi7c
zq$HD$OQ{6Frld`hrM`Lx{NEcRT(Yyb1&ZVG+FOa;Rs7LP)8I@nrjJ>{G6@0?m)N&b
zm|+X}=Pvxq(*c_TY+krn?YW5(xS|z7q~_3KYap|yuTq?S{k{DbOf&IK3Wla>0@696
zS&G5M$##V@7lTUp%FeQ)XGDipl8=5OHv?s1Xynf(ktMBFj^9lbirM~z+Pui+?%xXt
zjKZbxQQ*)tMX2<E?|rei@7B}G&&0@=y?$z5FGJb2nv#JqOtQeV1aQQD43skD7}B<C
z@3OHU)yxbN%PYNCD1W)c6#F}4K+2W82kttjW!t()RIpbkEk-&t+-wJ<k^2iXdV}!d
z@`vWrUDuVv0VH_Gk`)DTf~+9890iYZ3|w5a;d)u4V><*}w_T5rJie0T+kh7mLR9ck
z48fwnd`?njyaHqjf`%uiKhMc;xYc$XzCv%Lny;-ToHAEuWA)X6{)@|Sb5FDwdqMVK
zjk&q!Li#HTP5xC{Pba$on5g*k>7W*l2Qd2p(*W-ZX*08oBdNAM-;q26ygFvvii5R`
zA5Ryzrf-6eQ{A!M?`=0W%dDS9Q9=yA26BA3e6#f9IFnqV62=PCPdl8GlS4Q^=QXvu
zU0q7GgeI~r*IL|vxyL=tqR*77_ZGJ#ev}kAD8eQBoEk>~bzk6Wi9M5kT4|}q=4|Jn
zisbQdKE>(~0HAIQDZhXJzSAbS?cAsJqXJ0AT2|@1^TG^>I`lo>MIL-`>hRv7vxQm)
z<>a`8H_M$2zP+t#`Ejvw)q@YYmqn#Ze0=xK#gazFSW=g-nwl~(z>Jf(tS?c*mvZ}N
zNSCozV?flX^Ef~&+vT?!MCbT#wa9;Ynza~$elGufjmsdtXduJ;mTgy`bOaNzB|}X1
z>n3u6qc9m=L|)^x&g8x+D_!q{QObPdOO%&9fNb<kY4nsg6rJLvg76q8+!4#h<rl%R
zCW?-3OCH4GXOwZE!+14jK0QJ!MmcFPM}Z0;09M_};-l4;5%7~D14+BdmEr=$q`bo8
zGI3tsfo%iZuyQzD3!jv}=eX9Z%&VK8u8l`kTH62S=g$Moc^|?>7p;DL4>;j*Ib82<
zZ~wB_t#55@-S+e68uZTMAB!g0HgHk{j&AZjJ|`-1_0lTnO?63IR;6Zyi<MlS29{-Q
zb;dltu1IyTY(jp2$44W;r5&%8T8Og&aaB4)YdC;|(@-;4va=QY(`Rz`T9Qza!-Lg0
z^;98k3Xv!QG_h|rx6I2sFFJLr3@Qh!=8QaaD=WuxlD=L30-oE|K-sRs*au5ln)l1|
z_*|4vt_%(hWQRE76^!fVU@T{<^V_fA`wU)ww|4wS(3USqXQr`_+J3~KptiD%T7*&X
zyIi;94XOGBTx!P(Do@}7QCbrhh-i9Pkri6H;AM5Qb;9=_&5QZYUA;U$4^mr~H?c?~
zOfB<jZhn48j{eD)ecLTOs({5IvHWSlivjJ?J{den;X=Ra$F!*O!k{FdATAfbyvI|u
z%nGIG1TdT`d|_NKy~}d-+n)ihBS7&k9b7uM%mN=cQryqW9`rKOn6KLl9@|i?&PeJy
zdXoRk^xhP4s+2jnfZi)zXHz@+YLRBQQW#xq_N2k*?Au@9WI@_LgE_u`msJSq*%BgI
zn3)NrkNFwE+EJBL`<eW%y*ce=O4_%iv@|*;W%?hqqOGyB4-JIxKPP|6f|~Ggc>c-I
zKsTE&TxFnWdYZq+s73*iJj%mf(3`<ZVsiu|iZD%blnZg7@9*07F*i4tDo?8BkM$e*
z=INwnuqMN67{GC5I`@i&VmHDlw`@||YC4=9s6N9q%t`lo>q`Blcu#S=@k0|%+zDXB
z@gth9v$A5*?bB;LBI>sAwVk^f7pKwDB}GN5n{x<QiqBzh&S8KpOmk;toU5!?i+E;k
z4pXqV85J`pqVesU5>WnNhl7J{R+DuF#g!cZaDxB20Wt&t)uLHhw)3M~S8XcM8edaO
z(-w1ALR9*sGQyW??DK?DS*;L44&<YswU-i=n_7zI%&r#AA^cQj=IGy?Oj)RG4YsVR
zjAwN`sd-h4^>{xcCzleL+8+_2*$sOE7fo=}vRyz@=#~z73cn@PshHmQs~r-g*6@);
z``x>DA4ND#U>F9;)NTY1s851RLe005eVjh1$U>oV$S!99EE&u)pe>k2<c9cMn6i<(
zv^*{(Av1S9-|N>*b)LL{y>gRZ_{u_W)$(VJn2&*$F}K(_?#ZY7z{-~r9*PSh>T?X-
zF4HHH7sd$<jsMQe%>|Sgw@uRT0B~TuWqnWel28|WPi_J1@jYPw<YQgQ2<UMLjpota
z&?`VJ66E7JWRr+KdT%bJzl%<6iI|FtCU0_#x7Ddg8uH`o*Sq2ZwpsEDG(K#-NAK?O
zn=}gejo&gEh~KN+&AG#;@p5FXL<T4}#m-Ix+yY8KqGxAg@ADgbyKjOLgvPb}_^~j0
zvP1Kur8?+t(2Y+sIb<;7xDfw8RRVi`fKdt7U5q^+_Nx+HJ7~HHbqt&#wYd7DVsw;I
z%OQ7QxtnSj*|>P9#Ms<~%(77}yq%|ce@@PLrB6+KTlo_+4Y}PqltT@O`FzwydtFXX
z?Iuy}RkH!@y5&Z*Fd8j4xI`ih*e>2+wy$5mYUpdF^Q{i2%YR_HVv5g#=~~ZmK&~f?
z;CVVnVOYGjvlOx2;U$9)(8Ngb*Y%lo)^3Z#x0qQgSaRHLkmHP_KjaqQ;)`;KvP%yR
z4(8@qi~jf#bNzXRKaXyty)~f2=<3F9-#FU^%>81MrmK4IK2;W%lte||8hfsrCO9!Q
z0tvn12giZ?5y$J=!?j-J$&lF;<pk@2`QH5>JXd$i8ioo_<Uk!Ms~S7|G%Pu$E#W?8
zR4Y+K`Fqms5{Eq!orW#6=_OASImi=xcG)>O2fmh5{mg%PB;dGaoFr&wRl)Z%o&il1
z9ee+e!0rvuy(9l)5jjPFJ^MJ!cTAl>s-H6{KIc^=ee{!1$7+JwXTv_z=fJxz*S4T+
zb6y~adK3u(qKFtkU-RWWw{&cH*`+;QUd1af(-~g8!$b!&_NP#+Z;UUXs9Je{6ir!N
z*Tc}9wXlKi3cjB}Bvo`1W;{wiz^7c2B@CUcsm|5tpZ&ehUpEI@NhSCCK8pKg=~V7U
zic8GT#r((s2tgK7>Ia}r0N)xtEf8C&XgZ$x{+>MQ%NO#2SYTySo6Q^v0@6-HUO?Yu
zZ^K*{?vewUbHPj)AoZQ?OI-U9vmL$BTnWqeiQu6TQEX{{{GdgJR`Nli$Y`xI)ZWwD
zdLf?o^;ZCqKT<CL`c=AHa#JNLI(oD%mMo}MXq*=INTTzDBVJ0y{Xg-<o*)4DSv7s=
z9{5{c$JN~bn^gPD0jFTdAY?Eh&jsbY$DUX0UOd_4s8ru*O5V?(YUzSezW?2mhpljs
zd1r3X_;pz3C!-$8$8O;&aE<L`ktezpSu2w$uj+?i?qc^D_#$u5?M<$E+1?wTAYE__
zoS(Ns`Gt5We885MZ$OG`LEb@KG_g|}(4tbUosL!{K1N=Dv=~@-e+v34c&*yaM4_L>
zVDtF>vBxRRZU?daM;oDk4Gs;BrsOWGU#2G_hmjFH8707paDJaN=&tx1;c&93e4wt*
z<Loe@T{q@?vWzu=qAEcHLlg0ICKoXH3_DEn%LHHV2h{Z5e5I`s%aldQRRjo>{?ru?
ztJ%o4D7yoTN=X(e-pRW64=;cWGc#Bcnlg+)bO~>A7OERmZty{hUj^1C0+fJ>SjhmW
zSfk~jl(zQvfp4a)nORw$%Pj^M$rl~hrXEvJQL>A&$mLk)*i1^4v`P`UEiX+XR6IO9
z;8n}0@*Uym!$WV1-*fGulc6Hw_nM~l#c`TJ%hADhPHL(Yofue6S2y0s8G7@NdIb6|
zAhA{C|F!vlZ{&a4R|0d~xd&m{^K8K*M;@b^WU;|5mYH%3Ws+GOEbQJS^W|HMk9G`m
zl8;qB%{XMKDE3=JUU5d9?4snAAYJ>Fhi81G%W{JYd@CbRT2!BjCClN{s;7t%$oGX^
zTm?ug-|!fMA2Bn>#W6HF;WBY+qLJblWET&+o&5V-=W{+1tC?A+cGE`)-_OUM;Bk|n
zwl?{8Yz@U0vwm7pshpl`HDVpC{6Qlo^uCu{a@(xSdo_9KjP@cNHBzaw)eWiMIAZ}Y
z2DMF-8at~*2}2|1{)zZijsa$IU4y=RQT+n)G6&6`(`&nR)~k7|dG^Z=qnhRkZ>^CX
zdja$>l%03VzIf&V*bTltZeVfPN_b=Ax3*EsfRJsexn-H_+@O`4VH9dRXeX?nQ2f<E
ziEUH-o~T1VvIWCoF8wSN+|At!=Dzbnv;Z`ol2A2PuqQdeJ``jCJ2+Tqogm#v9B3L<
z^4U}_iH1!JHnVQ8NjRuDKU_WrK?3c4Z$(wEm`{H(NAYwz?|_r;M@SU`!Xl6*QdEgK
z2+G#4Vhqjn2?Fx|ks6xGRqhM%AnPF9h$SbweyB<bydTgAwl>;%Mo{y^Y3Z;O{+yTg
zLAEoN$9ttABy`0}g$JLWF7~x^?}!e*#V4_9{q-Y6;hnbAtIt8nK2@JT>-$;=rCnk;
z0R;|0uu*O8Nxl{lp`imfk-_<CGIaO*cb0>(GG}NsWGjt?R(MK~v9}a__@1@(igRr0
zvzEM!3>}s3L~E}cnc#5I)x%Bfeof`J6yc_)u5MMcp=XZxR%%t1Zc3qUCJ)k^iF~$a
zcQG+4ldt=cLXxPPt7qQpipCx^)V3EzT<W#s0Clnm9j|6cbAB48CM~^tc(Vi3oc3q(
zB?;(9^;+k~wp1z>m(ywm+;=vej?4|m5onSD@D9bY%S5Y^BrlIDB+yf=GEkuE_pv^O
z_K<FJ+gHhQ?O<1>l+6N=-ANjC*fHjDyFF`*+&ot7VdSS*1(5dZ<p6xTj)PA{49{+R
zbxRyM_IO@s*usq3x+C0aJYHCbB^#(^=(WI|b^VpZa$UL;9~De$ns`AvC#ywkCr^fw
z;Dy!Drx^76<-xp!P4qio9*&`&>0isiYcUY@tekG$NvjdMS6ic{;c$su9B8sVy4*8h
zxWTNCUdQ|4Y5ruq|1n+RK*h7p#Kc(_)k*aWjs0KxT-4wgrro(oo<a51YL=`Dj@6uH
zhlSozG?QX|s1Od@QOA5WIm!>_jJ>=W!Nb|t#s$W#EKo<1=h=2YcM%hE18e0M_Kb2x
z>6VoB*~dz$L*hK@9&n9k{(L7%r%{(6bEH%T)<U?Cdz*Y!L6bF~?43lq3slbkmNjrz
zZb}9{B2lqjS*-;P-b=o$rkG$cw$s67;}j9=G|@cn?yZFa=g(PRKS~nA0$JJ5Sa{2}
zF6MZxiS%Lc{Z4ELU-vLuxA=}e-Rti+;Dur?^Qn=Mx5_(M)~o=+4uAV)mT)x7Zmuh7
z@SEw=!C(o2GKs8JAU&dzEs_!v@`i_X%+1WQ)uGC8SK30UP@!8pM5cgreR9PgEnzE1
z52SZe@!dCV9MnE?6$`U^OTlADdJjfOzDsVb$!sqIz;J(g)nTW+vItf_RUm{tissrD
zArYO?xK8~@=f#WT;Fh@N4JT*p5Dn<Qq-5c9NpgPPeShM?dt#`}#66#*iC;hVw^7%l
zhwAe;1KuOqxMAoR|G>aN&+P@M9aiZ=z}|s>b$tMaRYmL7tIr`JAzS-39&OG9hie0s
zgf{cz)l3B6ALuuPHU#j;PKvl!si~`jX9f|j)P<Sv)d>De8OBK*WH?pgJJm<@xx!>X
zAW--UN<wFaH+fE?p{u0s$8OEXq4`gPt&T7|3nA~;psuJ~K1|Zh+M?27=yRSu1+R8A
zK1+?s@A0ATngl<6FS*YSx5u|+h#}OD9F!y@j(D2`Pn|!$a&st?I{`<SOFK^;H{n+g
zw@a31JmZVLWwlgqHZCGDn3L4lrz>8ap~?mj6$i88ey{$?d<FeV2eS~MXiK*4bg=a#
z<c08?o8_{I4v1}%RzpOuovaun4YF~`3jo0Mc#koA=Dp{AD*^q6fNT09wdmIT@Xo!P
zZ+bqXiL|&n(0h`G=>34cW~`CXi>zSETe|i`S}U;E%ltM{{m(^?0~m!#UKzXQCnx@{
z5$Zfx8R~1B>a;X&{%g+hnhJI$MLWM-!tMI-nnqm?oK(9)+5|YW?$!Lp)2@k_UxPDM
zwy;%e1(uJ$C3nioiyuWkX0*feNB0yG%I$8ZoGcBxcf>xRe&k-HF5>LCF&!Z}gwNnT
zwV`3F-a{KeE9q0?xiydec66OaaDLovvJ8)}qS|w3rQp-Or=$Lq9fOJMo=Jb<0qxtR
z)96%f63|D3NXH68+JdAI37|^N*&YvP*v5vF_*OaovQnunQn`Fgv`j=P$bOto%yqu3
z^290LNKrB0lL7T~WJF}q=lhNAwI_K5vj<CjDxFUIbq<#z!n?Y(?CcV^mqs(~QFU%M
zD@derY2aNE!vsNxfv<rel+nY-*IMXN+Bpjg@G1Yd_}jMAZj&N|A~U7^{JW9r%Y`CA
z9PZS<TICK^uf}-n8$Ohz_)f6tFflPb7I$)r{M2iRzrE~C=*f#FU?FJJ4@VP)L*fL(
zg*To(k(0G)kLJqFw<93WSw-b?&HN{{@gJ$003W~|jV2Uvm;VS{PL(PkyZ4B4SkVg}
zqo{~<Gd7<VJ|FC<8)C?wxcipCPmafzR|N&RR=(Q;wieBF3(XvX>>Fe{cnD6ajqFQ{
zKTH?cA%&5C-pTpI$VOX?CSuWPxWdV4pq+(EE=dmW6_#yyuvTwS?_Y?~V8}OK6d-YO
z^zN3gj?nKnv`i)gdD&!&MBaGUE??m<l6Z`1Au7GsEuh(~9$P<J5LM+9jlpNT-AECN
zS~gX48R>D42&fAp5Ek6}8K7|;Gq-240wR!xFlb*_8t63DZ(@q?Ur9~W5q~YyAKc*J
znJdLn&QF`YZhlfLDj*|XEh_nB+cA(s(Vf$X##MmUyF}Ds(<2F@7hh#o;k#b|6?e#l
zs9e0GwWxO0&+!I9kPPBDh$42iVRNn<Ia+30%iS{Hn=WAXlPtz51+pDS$*D6{R>#H*
zUerKceCFF?n?p{-^yW?7;f4YPJE(o}lQ24f+~wDM)~gv@zBGhE2l;orDuOsV+<(2E
znVlJlncLuKUWhdfUw5mt!}{!^@oV`Ho_NuWh=@>29=8D?xGO5gXDe;UXFafm&2?$`
z`FO-5wWkb_(kk#OjDY8L7DqG>a#53Gc{#~v_N8c!uP=1lZFM4Z@5HB*p1((gLjhq|
zDpy#y^?7?4Wt(StNytY4P5tA$@QHM8MTHIzV%J|@LBW3JCOJ9y=r`MT-53CRE3eTA
z>JzT7kCvL3h`O!h!wjmeJL7pumzqeI!CrLEp>m;*x^ub#WNh8V!GrRNF@`1AdM+Fi
zw+tUIaqF7^T3TDFy04~&#=McUp(ad*aUe1Q^umr4@%`Fd_ig7t*-adQ?uj4Wx$U7h
zQkc^iwO#9GX7=2E`-^hnu&U(CR>G(ETz#$;{QJ|#HU|6U`YBN7*3>IUljg0_i$}|4
zcRP(<?yRC9m9r;CK~-*!zE_bkuDaEBKZ7`8p^xL6ZmMvx4@jPv9zEaaFSIR0A1#uM
z6prY^Fv*TSo?EHOuRV81uQ9XA?w1Na$rOk`wn&@M*Zi%qI+E~kP*SXGd$btT#*cl8
zc}#{(?o}2FfBsE8t~j?%V7?xD@mPNt2xw^PMU~(~rTzwbSkFMi-jBR?Fj61mmHn;S
z+UvN~CDVPFuaodGFT{f=$jYHQ+5e$pN(9gSAr21t!;x2T(H4sz^FL61iHi*3j)AiQ
zX0Z)|6ryO5)m!VGpc}1KuCo4<$r`eZv_OXIDctj^vhHU=?Pxl8CX1t#y@p;|=IE6>
z04T_1;nx=b#>w#xVt?u_>5_R#Nr`|}4<j=(Gn<f*wn8-LClUUazDL04+Mb>=L@{ie
z0AN5(3gPo~GTHTq?^SmojeHBbB~QkVeJm`pxQrWW=DOXROc1>IS4d){7%x%!GwC$A
z<26BsLhtD}Q5br!;~i~HM{E~}c<(My3wpbkz!!6)IIt653QP9aBxW>{oV!FiZTQAG
z3io~y7wEtT=&7fy>sa3PULi^pHOubnOZ4S_0LE4D4)v0yK^0-NY|=u54-%FXFJu{B
zyYwT*Fza4~Xxlc{@A3h5<HPlfceFzp3iI<}4#8!vozz@MYY6yG$F4)=a{0DXSQEv~
zn>YE_g^<-i<tO5KbdbNXiSd{Ctfsb=fB`w8Qbvpz3UwS-y94gUPNwsdXggA|o3INc
z@9-4X$R}015bkg_AO11D7U7Vw#ebyRfBmmBWSk^Wfr+}yb=<e}c1KH2Z1MY*ad1@G
zg$o?Zfu?bl?F!goRF~yoK?mPMY0pC;YwF?tJrln$3=9xg5>Da@<E!quN*I(I#OA+l
zl0M0|dj`aBQ_!sHo64*X;cOM5n3sl+T8iGzMc=Y+{(LE>3R3b)0F$*Xfya5cn0AC~
zTVxin-BTBMZ8nZSZV)S@ewpD^Ergd-JU|m+gCBFL3@JSZp^4fNIX$a}E&_M>7$5gH
zd(@efX;t{&LH783lYjoMsMB?Mh+Q08caRWN?f4GR;SHROk~i8Hljj%Q<1VkqTn{S=
zWQlbGlpdS?geUCx-MBDp7aB^DV`KqP*35+rJ7hv!wQE>Q_7_a!qmDAMLb+~EwxO;=
zo0z?%5g|iT!!N%!_E*Mi!YU^P23Z8S)ev{$GCo}nEqD9!lqJJP2NA@Y5HJ2}sAV01
z&eD1CDj$c?+VZ^DI(|@bt7dVqU2)KM*tZBTppAFr{QMiLZ0iTA6f(!7o;Yjm++8p<
zYcQz0t`w*R%IO*S@Y$fvJ%M5M9+?Bqd4TN2hKsEf`HH;$B|G!`cSX@Es$2!2eB}tA
z#T=;3)_gBq<`Xu?g9zIZ#|NI8gNl*f=9P-kcY1$xWZoV<a_M#l1r-$(1wxEdc1*cL
zwnr>=i;Vq_GW8rPe{2WX7`4zi90ct#ItpKj2P_7h4MfdsxE=*HtjJ~IsqVL$mDH-r
z4)i|I`vI50=Mi(A{mo&MBd7|;j@xlE$NEadk&%(}c|3@Ltkt@*Kw6LLt0eUK{Xy5j
z?C^CIsLZ`rY#ZrNGow}h_$n690?6x57(_QIZFXAIqQ3w;2S*t|_-1Bia!WI0Ss0u8
zu}#~{p3_+55=iA}e0f_^h(!Cg@a`=@7ksCn9wx&i7baoUvb8V`Z!i9Qv$kZOt_(D3
zxXi~l2<`p`7ZC;GZ!&Mp1*1`p?ObIzKAyj~z0+*yloKwxZv`6rvjtFU80XgzRA`m`
z<3Yk59BCb#?)9?feFT-&cm!-t;_`#|>F{@h&O*?uUvrA=r&qK;lv)+|qABS<r@J6E
zmtCBc$L}0ABj@yTU635XrHG%{j&Bq_y{ydhJldX;C$^adL!9IQn4Og})zFCSw4Yyf
z&8uj`7FDwjn3I}~kp7zFgGzy5PQGN54+0uWu`9W1N(t(2j?;DPcSJ$PGR1Q0X@qAA
zFqmNrfZNv*rZF>E2P&GJOwvK|JH=I1qnLh?0{$@#0KJd_=w-ve|LVTW``#~KP$MK+
zURApH^c!gFLEiNfq220Ivbx?G6Nqx|{IAEJ$46@ACfD4;Y@shMQ%e&qwu2^K7PRth
z8j#GmDMSp>^iwCRtqcc?Ih*c7U$ZTalsPa6)hS9=Z|0VnYnP!!;x|@C!Ir<+I2)3J
z?R~qs`uqoBLWU}7mo4(OmEFV#ezVmygq-9)71bH(QZ_%sLKQwuK46<5Jxi5oSE|2$
zS^Ij8zLg+NCL$=kh-(R8p4l@4RN!u`;}vIs>CF%6jWg68u2iq`du`i!ZMuzvW4N9*
z=o3?M53r_qzdCR(G^};$6hKzwSBTWR?~J?U)zpk_PgJ~~HY2e=5S<V#ii*8^iR<o^
zO1(5M9>?uSpk*FpThRyu=;@eqx9BqB0ae%_;A34yCXba`f0^w(icufOfMPSk>BRO2
z4fP7lE`|FH!<8m|5t=x2LI-jMMt*Q2ZJFqibyN^>vLjirzod>r&h8LX8H|yI{DvL3
za75d#PSnE70c<|>#FS@S-oc;BiIiSrrQ!1adP_<v1hw<9fefpyjwVW$CWnJiSweFN
z2asvsZ?+H>#Vt|FmP-K4HmGtPtS}1S(K%`LJ(P)x0!x~P)vZZm7r~(_kQcZANETHA
z6vGs$9r5javiRYYEPkGw@KE*09O|||c-XcT@T}G?VpGJ(Xt6x7SV+<!wOjCj!QsXo
zCIe6TuR#n9&<O)fSD<fsiClXfHxiQ)ot-u0`=deJ6uXN}V+g+i#5VxBY2OT&rpr&$
z=ZH-iV|6!oVB25M+)d!%+n7RJ`^Z@JGmK{BW1<NOG~yUT4|V!*JoeJyAvH;}itpyf
zXdi=Ip!t;8c75><^ria4<w7h13>{1xZ9Br0(}5LtZtE5K0}}tr44XdMkC3g(dWgw>
zSaV?@Fv=KDohi1FqQl)GQ8QIjua=<{v0L|O*{amy)M4>gH-m$U-?fukXf5hONY*8;
z_>yF;CW`nCM<ENhWlv&xN2;GwK(M~<O6G)I*S^nL(EHMj-UaPK6*;BzbG#y=Go<%J
zd8SC&Ob$eS`~7nz{0M%_u$&KoA^cRoQ|CYv?M!$T0?r-#LAh|+9CQ;VSz~+`5Ow;J
z+$OAjM*?_V76)3lvGD@7TcftuRdVYVvJxVrqGtN!o;(Ru{OMoW@g=i!66{R}5?;PD
z>tBziTw^w78uq6M)x`D20De4{l;SmeXL(|rESd_i+S9NoY01lnsGtU~TzCX@$3jA=
z{g3ytV#+|k`4~?^!$*zL{{ENjM=M^~YWc3*GBdu9Yhf<#Ztl#wO&F$jCJ62^M@C1(
zY+==1nJa+jy=<kO=QK;t(ns!9KUT-Z=XBwIlqh&*Ne$8@gfVNpvB=XRn6KRYK%a>f
z3gxbtzZ;=xDY0H5zWd%0FR$^BMs5Ns9RD+Cj>A8f|M3zg@-3&f<>sd>aTmIB(@;^E
zc!;j|-q`Pk(EcjFHmlk*en;JRbX}tbxtZ>_Bz9}GY6I<UKY{Tc64PlOFHsLQtR3Gw
zv@Z(njCmbk_D{Rg5G(UO2C?ZKR|wFGYi;lQ7h0ID=3lS3IT0v2+Eu*1?{6v=KBG9*
zG+Hp@X=(m`Xf;>WxryS~<z*GO1Xr)?a32bNje{(iWZ%+U7E{noll;|sbTOVXGsY)j
zR**OKwNV2lY;82;p?FPdPvGw}U1I#pccIn%p{Rc61kUNM0c7P>832Zpy*))BOScdB
zV|>-qCTn%3O5Q^~iH~E^x1{?j&{BbbiNOF?JxlL&XXhTdnn1o$eoI6U)N`dyBmq%D
z5m}wZ1qPBbs7tBO8j{Wh(aQH$W_v3oe5N4l0oV!XK2#m7R4;2Pi(@tDJbr(okC_V-
znkZtBO5`>14;RT=S?B^L7WyueKAO^4t(Xp1PmzEOq(3Fi%+giBYzR&`jtO-T`ZaMG
z1Ce+8Ek&sM-;sA4gn}y-)*OEBhc5vdMAcSbdt~AmSr>AkPN0DZRP(@S5;ShZLrFyg
zZ55iZstjv7swDVv+|k|L9>Y}vI0%hu54L(e(!0wcdy5J@){_#G{?r&0pvDb`m5;pw
zAp`E!?lpTakA6#k&Q2b0CQXhh%xa{7r9659e204(@@?Ol%cyE#+f!dZk!8}Qq`Q6k
zHq23Rb%Gjvj7N_Gd~cS9?0;$%27Cgtok?k|BHo|UCGKa8R#$?K&~H@GM4fjk2(@*N
zjho)~C-iIS<pI8G3~cwOB!h;-d(6wBAv#Ti)jRJ$>24r<NVy0Bv)?AarSrHLP`&eQ
z+()5NVd&c-xQ4o?YnZ0I|4wN<&?dK@{aht8hqLxneVQQcz7;)Wv)M(2?amSF0KuA>
zu1_?3_qMj~Z$^QGxj8rzQutqCv!bb~a^k-91FeV1a;DLV9RbJsMU#`P(K-{^Vi?`0
zDOd00=4qXl{)YVz%E}rsE_2X8F;_Jm-E_dDh5sUU2gLB@YkN?0btr3OBgLbF4?<tY
zJp{PXv{%2rc9$_t1Om<7W-d4Fz0y_s-G>e;kb!PCKr}}Dd_S1|WtzXVa83$ef#E(8
z6IswHF8ws5r{m{w32Pc5K8v)`cj<jX&2ROwb|p(Gf#0%=)@#?_G(9dZj+)o_O}ON-
zJ1{ZhwbYGrKcc=LMJ84MBsJ$vpz(Dr-Y<Z6)lN8=<MtdLs5Y|@aolD-`PW~6&DXq0
zA1DVQSR`M}dNq7?qs-0zxo0`-+;u0d0h-td?R{JSl))#vlLqmHFl)Z|o*tFH%O~?Z
zsKq1eJWE(;hvJcEqX1m8+xJM|r~*>G+|BacxW3*m8Ws8;SJqREIY5m!XFEMKy|$NL
z=YsriJ>(O+Um}AKoRx)adhy7Z80g+fvLz2vqoVP;x<llMc35H9q)*<D4->CZL4&|#
zgRy1^&Q0}S+7k8#091t6UB;Q<|L`$R)=~iQX3x!BKT!Xoh?%dK>yD$HFN&ze6X;tX
z<_76kNXyCwd`(Zce;6}~Fw)!B)X@?>sE`%s@7+v$0=mB3Rsg4HZ7ZS_?x_$bhp!#X
zk=g+5Gmyc^WcLbLIx-7f3Ng^sWZt~eHLI@$va!T|Kwc(S<8-44K@&}owCg1wcH@Z$
ziU$Dcr;rjm1L&WPVI@SRHhEYtzw$kI>YYM{PGos?ZE#|2YG8lF2c*E<_q-1&JH#N<
z-;gWPz*G&;M6L25<{18F8f?)Ki>AW<tvx}jSn|>75fXiXA|(#@n2obs%rEKsED|}g
zyCG<ZxGE2L4jnnBxQ&@&-%@n^g=@U7post{f~WPi-SY7Im-dO))`gsOFWQ2xB+)$e
zxh}X@rHBi{t()F{vd(};$Y)NCmHnZ-(74kFHMM*|i5-%Ff1s=@P@)kU&9Ya7j(LAL
za=SFa8O^Di0Wcn84h!j9K)U#`JvYMu$>6Eeu|IGIT2ipe6;Y5<CFG>~I?dL~uP56(
zim8o1d(#KgWbk7)EJ!T4u`!ZpA`6~Qj~R0>nlBDD&)3&s7k#mKf<8M*8hUvHrTk^x
z9g&2&f9W?AW@i1V^(sYki%~!AI=84g&O-l3W?}W(&pC@u!=nt#S8T4?Wj>u=D`{2h
zbMy5JT!mZK^HxR=`wcq(Jnl+z49uE=c?%mQ?08DHEOttY2udgQf3=_MbDPo5EA892
z>{dsKi~X1%MD^Ez>9$sb^#Rncc!Pq1nOuYSFx-INuM<5>e3f}5S$DF;wzMkaX`Xg@
zmFiU$ZJ=ExxSTr>O{WRp4yL05<zWiCYRs7dTCJ*FZUwkWHml}s;gPl~4q=KqO|Z9v
z!1BrNnG4WkxT+-;*xuiGi0{$y<w1h;o|AetL@|V$W^peyXj<5xOW$O(%f>)N92scS
z@#cyWO^lsak|SQu>v#2NBDQR!+bXtG7@?LXffazT*RJ{G7`}Y*YR^>I8c1h%(E9@~
z+pnvV`SAin9WsdU#EC{C68cBkPw73r8_v{hcB$*emmv<p%cGjhsOpo8`875AvkNmQ
zxP5=nbs7y-)v4097J9FISk)qXoD`c;GYyMgpfw{I|E2JY#0~WM#yx)rUvpJPhAhq#
z8lIwmnbLcto<%3EDogjpr%xfF?*?*Yf~<zu&~^O1ENw9Ty*P=N-x?*5FXoI=O+9zu
z{5w?15UssEwi=G!e|P~r;KfNL#ar#`+M~xc4&%uEsoI?-`!U`bIp)9IkHrqC@+6Te
zl1CY#r7qy5zL&LLJKqMu*Ff)pn)f@w!HMRhSsS+zT+zt8u5Dtj0CALb<OMM?NlS+8
zvlUL~WM}t;ww##oxHUYXY7OwLs0Ii$_P6A*gD>Xrf$2brB~K#-=Q1rI_5PQ<M8L>+
z16I%duQJeo#3mpJ;VRzZWlF`O#tnQvJzrIO<12NEGTXsT0K7Why3q!9@TrnYvEN=c
z`Tgle-}=+$`TXf$1Cp#-Nql$h<}h@H{=amWy9$S>64<c~F%-Ip{&ERLy|-S?i|ZJ5
znK-22_D5oE-UcETV|4#2JO5115k1w^DWOf>x!masV12=r+@9tXc7sbKF#6=LKo8Z{
z>C-<gn+wVG1^FHKlX`g`$B?RQR6U<C(9E@V)_;3pk)x}ENgcWsUV_IF`zCN!f5pMZ
zp#Q6ehHjp}6LKo3y1A@B`{KmqdyjxBM`X3;l3llM;>)M4Vn4}y_a)L(xYQw&1Wg13
z;Cd&Hu4Z<Qyix{_7eGz@REf2-84dvPM^Ct=4?N=_DHL{*M^xm6Z%yMtEu--oe}EL(
z8P=i(u-5FsN~v}Kk|v9CVs>I;;v3A$Sf%=E-2n{lFm3}nh}Ls>0W>j__5oD&hBOqI
zOORqQZqR2<c7N4li*x;R0haJiV;^q4V)t)D`3BRQ6Yo9%;?@1FWu%JA;q+>*D?txm
zAt{4TRkwYRb6|7B<=)<2>XW=Y@u1s-dfw$GZzl|Dekwa}q&84Lbje=E0NwuiOe&)y
z1QHW#$`AA`#~)HsP%OkjEk-6W<IspM8c5wTCdSD71wP5Zk>OWho`8C%ecb`|v%4GF
z&Qq5PaFw7{Z28d;{dZ%4ZD{y-&R)~253cO%=i@i|C0h=G8I>!qBFeuXPXM4TH#Qb%
zi8SstHIDr$<y~S2+$d5a*5?jOUATw<oRVuF3Pz%UzP+GH33bK6;9V|V+vUX7Pj`9&
zZ|`H7h!2`A8gsmOptr*wMY;?=nrR*!@?}8hdIWo>udsO8iq21xRyyK2e{6izx>w2k
zB>vm?z31KGqv~>5HotzFQA7<{t>>z7>A(Dnt!C%XwoJ58vVI1AO%<*>86Nc}D9ir_
zbui!IapfaO5lj|PEx`?`vSHM*slNlB9eKU{M(@oxIc<@XqF`@d&~I|h*EOa(VYGfp
zXWYr8n5Da8N6ffEKGtvA{VkI|x{Siy)BSN8@pSA(LTYgFj@0{R3Nh%@Tm`vE1+V0e
zl*EA=7fOI_5+xQbF6Sf?w*G8&N=hgfw_4;^F8@|c>a9e-af_%|4d_iaZGhOfW`^Xs
z^fiafdK&+x140icp5hvmGd+d(ilU1AeGjJ@MoTOs3PyX<WCUym?xzf81IBlS816Ep
z$kA5+xWpaQBZK|krwp2pACFJk%SF%^Fv$c7W6jNLB(8@y5-^f!oz7hV>=m0Z2Tk$m
z^F2B6^Vwg2s&J5FgqU{O7MZ)x%=|;^xZz+`J+sNrYcu}T>7;-C(ki#-(@Drd0eS2D
zBi}Tj{gQ)g%J*Dwj!TJC`q;pFqL&5~Ytbl#Nn4om<Xf6@k2Y%=eycTO)GEzlA<*>f
z^w={8T(%=d2ZI5GZ5>O-2cEr+<;zF0WIt_BCP7QKdPWUbSYwUx`lF|3gz1eMDFp3D
zv!8$v_MpY@$4B7(JC>qhVmnihYabmv(UVHAtYYxU;I3VALZwXV70c4py|g^od{FCU
zJFrLPK4!z0;yxy^(o1ESZCD#_qW8x^ksb@&m>Hi!r|kL0xHEx}7I0Fv)Yc)-l=CM_
zBseQ?x#7or;;SueEV<~(`UAd=;x^qQFOSM(L$&O-(JZ|Rz~`wKE0b+xLIX3VWC1Yu
zo;f&}khX9ES%zHmS%=5C&S+r{5kqwGE;Wkdqzp^Hw&Dq&^5XwkrJZ!VUk8}uOjjnR
z;VEu_X!25$0lssq(b%6-ab89pi6+qI#XtI+c8=?I#71T%8;CQ&Na2owEmXHKQ50a6
zO_v&4(h4u?O-&hc@Mdhr8wgy6O}{~X>bt@8sP({w$;+%YOrAu}YryGO7vmCeP}$V2
zsnXw!j#@;GM{z&tTB0e$FU%2>Z3&dpyLDQvx5G{Fw2dHT`+!he%>NHj&KI&ckh3`a
zEgi)?R_#`(RcKgH(k-F)`Zai`<JYfO<6f(^+Z);j;HdrWWeof{^bTLCX$uL;YsH^7
zKeU`{g=-dYErS0s5rjPeP1Zq1i#<x<_LEs(WdhmRxjz$LUFu0o7j;?6CZQ9(&%x0?
z<MngHyuH-!r3`@z#On&Duy3&vK`%#%rC1=XaP%`pMGZ3-oI}dVOF`J}_cJ=wsxWj%
z@j{=ZWoIcqS*%chUtiQX-_z&MTSZ;6r6#?P%GB#krg{BANZ)kk)jC@c@(L$yQc^*(
zhzL73+aS=)EZu~rB<^SPEZy##QmF9Hk(`@}F*}}k;X4>s4ZV5uSCkj8HqDUlG=CN$
zd7-+E&G_mA0_~~ltAAt*|1Y+2fNn$&V8;XjugA3EBu3>R58OJb-|dM+q}(D;i&O6#
zfa<wO;a6GMMmg+R*0tq{vvPKvAg+N|rw-nZT^8-Rz)uPE#!p_V=bm`AZq8b@%`Q#f
z#P)o5@%nVuxT#`&f;7@5Rp~7-MU5a_uRX0eb!HBK%zxdTc&WCsO$0APf-J4h@6^d>
zF~_Q@Yk;V3HlJ^7AcR95wFEqKa|Q($+dahQK_tPG0!XZseEF7DXC2odB{zCy<5q{G
zomQw}4OeGo2()QUMMb{<`3P8rt^nbE-GLX&UB{y$wvns9f3zyToHXm$Rr(fa;gC%6
zHc)RuGrbaRQ#&E{g*jz4r$iVXzyE5`3vj43kFD-kZorR^yBhi{43pw}&0?QUAA67c
z9)}}sYQOEw+F1IOslPVeZ7vNu2p@#s50<JpGv{^(Gx+FKR)TkGfV5}@v{<;uSZEs}
z^L$53MPl7&qO^0pc2<<l%k5EFBPEuoHggM$MInT>yAyV6q2HWjJf4G%?fDlLCAEX?
z<)lU5lcOC^fC?=Y8hEe&5Z(LzC8<s44ya;@Y8GfK*Af3c?6+I@>bihpg+Jj-EAQ(x
z68bD=etF8N`5Cex9&Z$-mNE9B2|hH%BTHF${jYLO*OjrfKu|3+dFj;hqAN~&DQ>5@
zflgc$0j(fPF>{U?S);dk9aC|3zN6J!Z<R$fp~<fC1tEoKqO3y{s4fR`Kz)hw5mtQm
zmjX`fIY0pe^Lo~&V=Dipa;GW-FV1oO^JK#*$t~ak>N+O>A}$73hA|cRn_EX0k$inw
z9cSK%UCKMZ^BAHQ89pR-w<FyK?(yk5pODd8n#phjO^EP!A-M`=v1`K@AxG)Het6vz
zkvYde07MBQ3+YD-feO83gxH+xYHQ2JK(kBbv?WT7B#*px5MG|8l!uvLYL~L;G^ux<
zHKhgBz5M36w?ntI%5#vVsGcG|kCa<R3Mli8CtK&~85k^YzmKWoU*ghlC<RZB-R06*
z_N*{dRnAYYNL#UvS>aX@Qgp+gDWKmLI@+a%{bQ!0oebZiWwG^n*Ypm*HaXFHeZVd7
zo(CzvxxS8WzZuzE3TLCCqPqNQ*90Jgj~-*w_x4@gGTT31vR0d{fI_CM>9JTv0@>-Z
z*Hl)<Z7G91hQ2j-Th(;r)NQS|2YY-TP>%`?VVpchwe#q$D|p=P1AzJYINab6*i68L
zU=p&Ebd;HxNQ)x>0W`?LOW#^XjZS`j;Mv;86p9tR^O$_(SCgInOb>3?>vtJ{Y1M6I
zY=knEj7HB5F<kLF9cX$#f$p;=xqL1tlnExW2H1`=cKX*Zmlis=pNEqv>p>$!CZYt4
z#;0R)0USE|MRGp~bc$Bs;C4#L`j15x8A?Eo7z6;M%i_m0`RC8Ai`M~%F4xKYJ^SIJ
z3H#VILOE(tyI8=Fgk;uf;I~`!1$=M1wKkb3A5ly5g|Sa_Z1?WT03cBogDfbCYX8|W
zP{^updQd{>yg!#8x4nPHuqS*+%4}xj3l6u)%coa-et!~m`(7#k9DICd7w}+1L3PKY
zL)s}4EjAemjyd~&j|8Tld#!yBqzcn?RSw4ne*No@Ih2VTh|PCAj7{gh4TgXi=YY1n
zL#S;<=hkAFqO0+BPLkbK?4#R?U1506C$5J-kM;zpA%zE<YslnJ88mXN@MnnN>Rue1
zk$Ujpfgp4+fx~4p|1x`C4tAvAwG?0|D`1g)T~ArWdx|Y{i1~Su&I%#?rqBJ<8U6;L
z2ew%BH5MI{S*1An=h<HI=F`SkjjmD`5OgMf&bcU#A+glb)Xaeo?No|xThF8-M2vla
z&>D?1T7Ec|MN;b}8ks`Lkb~lue*p~*V)d>&@CZa*IBRGxRbdMd0N2rXar)XNR*6pa
zdSP8~T>Di6FdYS$3B#vh_Ri0IJC49ATyAc0Z}*xGeu#vPN201qbQ4@PZL!frNxn`s
zI92i6b&lD(r4ReXTokaWR@9d5(8kvEFTiBdT+m9T$ASG3O>~5C{=&&T$v=q9xX~*5
zfOYi!Y&(~x?zU2;;8L!}bgKWUxnxYnfeq7Q-+1G*@3Gww6~FCE$rXe_f0y}5oKyHg
zMqL3w|JzomGZVRAY)=INGh8-5s)%Zf8+9v!B{9l$r?Yc_?zCS?EY7<MSe!;gG5IA+
zPdaxdqByi|8vOAL_mqkn0|?0@N9P%*;r1xAM%uRa+F<E%$ENF|8$a(E>=%m~7QW2@
zm~lYn*~=-`e7$ZIO(i7l?FsV;X#;*u07Ix{+>MNl%!qVl1Hk8$AVGs3Da-FE;N3s$
z-0T|i)f$<ZP_OHj*`WRa&fjx0Y&<;O+s<AV!6b00z<2M0Qr^~LS62@J1Is7^lp-JU
zAu>KWt)oNH>*p7Qz1knA-2LFV0M(nk*uij)P9(*68vvlfhk0vTzix`}q#ei{`B8U%
z=lkMvl)WaL!Epae^YU-Xq4_?1Cru5sXVzgk)nAwpbaFSpkfkCHr}YLt;a2+VA13C$
zhiN38cS<C|G7t5c*xBVjeF78np7=6XtzsYf&ce>dAA_L6@oxerC4E(?k`psFuMXLB
zl7~B@$GxJAw5A7wMU0QOjYQc*(i~`UQ<6_HZ7y@W{9Z-=9!Gx<Bgqv%oRTz%hJ8@U
zt9}f;9x1zORA8xIUM$=^pMDFp*i&8o@lt<_El1ndn!mJB@NbQY7)LxKQR-8Jhd_Xd
z@DRlN@i$b{nih&7mM)K#RYdao0E2Vh(O`^ijw4?GF~s>psWCXGP^LHr#2%3TI{i57
zHrK9cP?edih=AL4{-uJ^MG5_;HnT@zUVB0m`{N(FE^=s%I&(S?_Q;MuVrfO%L;}3&
z^o2U6Jro>TR_nihDDwb@gKXc;dcVu?;z{3=T7_r+B9A;aT3Ky>eq?&6((dXO*A&g*
zz2*l8O~S_Xk;W-$GQp#Z<+jMK>8gW=6GbDB6oJ__PTY)bv?HEE`^-18i^QFq>4JYu
zP5{@s4<sMljL<o1F%Yi1Ky~#$aXlV*MB6}woxW?_a6lw};**o?If?c5)Ckz>0UU?R
zsI@iE)dCNmZ?7PMJ}0mIat$_Vf49e(tcsWUy#IJjo7Zl3>eUfBBSV7kv%>tfRn?QT
zai(O_M`!lk3P}xdoFg|pU#tk^e+O{traT)-G!8VnuFyO10YjpFm0hQy)EuAzk=R?J
zJzV0tB_IXOw(f?T;VAc|+RD+mRbK*Gg#eDNg`4TDtmV#P6Z_wUSQV#+^KaL>>&3UI
zl<>^fjos9J2soXmkrA^PfIrk-Yc(9wn+h;ZKOU_{aRg=xRK1>MLbNQi1vK>wG35#8
zy#C}lt+JrB@;J}_1&N>P>16lHAuvk=I6oxfSe2o`ySM}d2I+tOhShjbV}b36Oi2NG
zp#qpPGBfwK%odA_A1;qqBef<6lyId>rRDXm=!EJxUntGRE8c&<JEN{3p}Ox1C;#L}
z%Kw6X&LlFwSt3BS*MGctZVR2U#~awnc#u_DVAGv^RY{ghl<|g1pEq<3Jbhs#w~!UL
z6hq$kbg)@3_IDo1_!q#uAeA6D4eO0iZwl=y77jC(CyQ7~i~A3{_O8_yLawOq0b>S$
zTK3|_3;5em0f9a)6^4Npn)btDdv;^AHt8~Q-+;maC0=dxmA;C5eA%m$Q0w-P*yH}f
zZdKU;GZIHFZEe&s!@KsFx5u-o`#*MOb5h5!Z{1GAzgZyi6(G+lCC9D8!=u*mMfDrx
zfl;{%Lp{JxO|?ta_igbL2|aY~LnTG}{zEQc8g766RuS4hk>$;FnDvSzO&DgM=G_$A
zLUZX(<3T1cl<>aXq^f3>?bfg6mw38mgGZ2hJyu+G`^}GCqMj+Z4>+2JaGfKe{7-ST
zmk3I&&t9cM7HdDxW^A&%)-PbUyH@Wa&2jEQpa*6-jGh17RKe+;r=x$g$pThk#)12B
zH;Q_;sC_pKfT2JAy4-Qv2P&cAJp&KesGa5YO9b2eRoVq0kJIFH^~K(Ye56l`%~JPj
z;m?aO&ciu{uReVEu#d9H7`E!By)X+UvC)1UWz>utxtEMk(F9)Nf!a@S)yT=tAKf-|
z^8P>Uy>(cW>()5D#X?Z92x&w`x;w>9C?X);9nwhWh>EDB(k&nzL-&A$prmvRAt22#
z<dDOB_o(~4zq4Q5XM6O!zPR=udI1kSv+mV(uNCI*CbNDW+*U?(&SGmZwM{QCQf5Zl
zA~RA1``W?1S4RChyfhI#!d<p+wOpad<B&Fm$kPKyr>Y#XH~05aHS;Tb3vUb*Uq1sX
zZY6Z*wTHREZCmL3^aey448zBHE9Jztvl6>kbcnBSb_?^#-{U}MT2IqehIb8Pt9>Jk
z!`N8gXw^wXF6u4Y1H;WvJPfMomoGe9*?x4s)uSl~2|CNZ6puywZE|}jJ6l=GhI-4}
zx51r{-ZdwpT{~FGS(2Wy<432Q+MgW@_GsWdd;A>k(J%LLPlVmUPI0qi`a04Dr|ib)
zapnO2E$uU8-28U&9}la4d`Un*)B+MQNcvrh;uhC{LM%(|2_lsevNgY>EaQq7MD~$&
zciu@!7cY=Ls#texy}dbCe>wQ3aJF8xP3@Iiml&2in?16kwA54lW=R%n$6ZCaJm9|A
zYyY%SZu?|fGGJKMC7~0{p4%$X-dpuIYH99Vy^y~G;@R58*cYJlWJO55t`}lu=mF+<
zR9m0^auGK3e!nZ38t=&ta=j0$FBgXTc&;SX#8nB-z&hq%+B6U?EcQ{$jE8E`T@Wm|
zuNDsKCqs*l9nX{_H)P_&tVIfpfh-|9vil=+oNkcJe5&0UZc9=dFo#=$OJ}?S)Y-4o
zplr2JW#AUVz3;XJm2x{n+HwQBbgIVs8*f+1g>!i2jcStUcMpnQrInyZJ-Z(PyT1-u
zTx{b*aQj?y+N)JlEoRwnT#8Q6N%mT9upik(^dlwpnypbKLy%2^O+;UCS8-%0k;#2q
zZWob^U@%PzJ4Z!<(<lcZ{~;STYXTamB30IP`#JP|^p7KT!@gGvz_|+ik=Ix5pZuOX
z0`Aou?}&C*nC>enJu#Vlc_VRecyFAPXB02W&bJ8j8B?(&p6_jE>rqcsEiSr(G=x=T
zH5z3OzQ;W?e<8i==#=B_M0H7z_Zk^lFGbO%68@^;i;(e%?BulN_333YA$CO<?SzZZ
zt`b!8N{DLLJp-*ULlVSooArC|+zst(^ge<vsMZ>W9=1Xw>ywqSmAuHD?!0QoGe|X(
zXP_Lq21aLek{4%|+K7m$s3pc*F&Rn_-6_Yx4sgPb>i9CIsG;ta0QS3O?DbDj(*LwI
z3lc>aNvP9rJU(%<#$NOH|EY}p`&V{MV2A?w(La#0jaeFXi_%t!=UdU+j97LQyk#aI
zQWyC0lCkO8-;FP6D;|+l3^56SCI=-KN?p|OrHQqg6ii9RP2OI+Ovj)6{$YyY*^`v|
zZ#fvx7ouLh3B3zd*%U3)tW<)9-0hyv%iF6Eb$jU1DKfh+T5E)!m_kcD{Ot(NG2F8>
z;{W>Mwem6d!kz6lgjNEV{=^WhU&YL@tF0w!K>gCXnKH2rbTlf^X|brl;wG=4yA*-4
zt8>s5b%PJ^bSWp3G-cc-M{1LEc_Gh~Ra7Le^$fi6uc@FtKnx(@XEwuw+nz_lTyJZ;
zNNbI3yiKd$^I*$*UhAzZ#~jn=@-P8Lb#T)x$D*U@#U{*G%b(ElS<g7H2$gFwSI71O
zD!rJZ#MVoDe>vK>Vr|EB1BGf|y!-|1X&MDaYIMZoR5EZ7_Bip({SG`eJJD1B=c)eZ
zcofH;FooSD>HD7(|LfVeFRrusAca4k8yGDSD1>)N4<^-zGW+(739|%Ynky;YA%)e-
zAVGF3U*ddzh&DOz>|`-pNmELvV_+pAbkO0p=W2t4p@TH*!D?Jzinr~ej~L9#;7)e-
zGeWN#fe5tsh9zIWO4Al=6!jS=uZgo?-t+0(NiKgmiGR8v_9W`BmA%b;nfPP>oj`wp
zt3ZHLPt=m+Z}EQ+?~i9+59jRr_9aP)l$Ny3V5Zrf+-Fs+aV1O<JhOVoyjP9onPDX?
zF>pU*U64e3CiL0*-6*P)2o+e0(w&&C7BK(j95f^285qKfb6|TgNJ))0lr7$}+OuoR
z$$b{vnLy%is?ualSlm4AVl|j_Lf3sV$F=8(Q$ZFFxwKBTX|KbG<8HO<{Q4e2tiG>e
z(IpuyXrVH%l|^^se>X0@{qQ#*#QE#t;~Eoq@IKzh-yzoT#{sd-jja6t7n^=NX_TFh
zLro2X_nP`_{vQ86(!ywd^69B@qY7JnSvAobw7A)bC&a^QxdW+O(PP26Di6&Ho+8W+
z%v9nO;u$b@tH`M*I=^v6oA#83Or8++(ldFlbf;LD>$?P{Nq_1DB~llZ+CVcb*k))(
zsNsz3sHoCZODH*hu;|9lj5=yB&$^>%qfx`Y@raYJ{g4&!g9>ZE8&(eYj(!m-@#m+)
zTBK{QHW>;55|VQH+}nvK%40WW;W_tbsr!1IJFh_k_EcjT_u-Gv(kOJ}SoY6Ojt=Am
zZ&JP+zu6hDdPz^r!L%)YY%37N4fw@2E$^(w5CMDCh!<kKTQ&oa*y5Ckpu=XjDYk-3
zII?MVM3}1VeBZ3AsHnXBu#svsvH~kDUp<iPbfYotS8a?G6Xc`P7$b@tFEFSg==@Zd
z=n8M+cT61SpKoz0NLsIWe16RNZ81Nl@scmYD+OQBvmp5e_7+7fX<4MTc+Sy?)13QC
z*$%qH4-)nmob$n4GFD&@l|vt$s~>wK{MklJu2StN$zRcPK-QYcd9FOm?BdTw!fgh&
z@pH^unmQBbg2r>-OD)b=ahFY}m?(|AEEbV78lg7sv?ZusVjF^S5*)<F40_p2Z`&6B
zuFBkM=i69XSy`F5-3GZIxQ9tk`ThM~X~F9xMsK?h`v)SM8yjK02UbtNuv<W?c&6uu
zPy|mjmi<z%C@|I*)f3&GS02Pa{8&pF;8>L5>r{t7{&H5IZsO~3JKsCkE&vJ~N2d>L
zHr>~=2ox)excjhfl!W=2Z_(~O5qA#{y2MTf^@g%PdI2I)w+e*5sOtO+IH_x0$h%>m
zRKWLP#b5Q^^?4&hhr<;G`)!a*O?ko@@I4^{G<bXE0v4<{ghWI{iW);C`YS!nm6ID#
z?#SOg@<iO6DN5z74cNYLxc053)@xq~_cjkmaIm+Fir36l@QUB@!&;CzcD~O=PxaFu
zPS%36XY<&JU(6g%^{;4CaK|yB%nPxj2Rin>!~?H&`q-&qq;1?sRtm_+V*b7IOTHpk
zlJLNwk*``ItO`pet>umdI&m5pz>N@-HZ9CdVfs*PT&D-fnC_J;`3~oOfr0ew^*w-$
zUQn-oZ_MeN#kSMmR6do|e&N9hRFn#(i#9tn-&r&<cx-I!)R3R#7v=TV6&zo>c1ovg
z6RW&+zXD=VEoejeCky*cbq$6C{q3BZS8=%R`=$}%#2JBx8e3Rcc(j%l<QaD`9pU;p
zGtXX44;3w`sMANX_OYjjYk5&C<O_B0gni*z#Z9e9@O_o$R}-?da5pybaOyYR6fduL
zy{`56@W)^2yp8_`7=+LdzXP7Vu`O@uJ{8KB7d)Pepdwk_&3aLO@YrF}gl!q$bq;|D
z^b{3iwbXj@<$Ym~zR(7b7zOyjM~C*S2sul-wBP!Mg+Fn^6bp^ELG`;_>BAp?A*sIS
zv3nN)gQ%*i0&h<81}~UJgyf4~U0KWHc-e89OZI%C-Jq=HlnGnHc?i0?M&D1HmwZUu
z=1xENsW0S>V*VmQ#;b+$fHYRnuM#vk)^SPx@Q+Qs4%)9SRvF44%2MBs;H*odGJ$tW
z?ON#btgM>Xk5_97hpavyV+!D_!g7T8>tn}mPp6EZf1Q6EeCpEquht-6cG&XX;S54*
z23U3Kw2i>wkH3EG)RmA*pwxIysmmNFD=S|-sAPhAit6Di%N)e)+XGz;@Xn2g<;?rV
zYFtNf=Ffgr&GY=WSyv7dQt=9WT(#?41lhsg=LniyoXpc|GL}Vsa$gX3?e-VDp0S%N
zizPG5H!?e=w|@trQ?!80!eO~L4#)RbGVcT9A5dFC^hG|z7rtPxw~i_5H=kbIubQTp
zLcsU@pE&5t-@eYlIu1@AM1R3YA%+0G3^q00-^BNet)5bWI$_0k3@g6yLIb1E>pQEg
z<L=)fynfp;&S+q31dQ5dxV~f5zbTqjI>1AY?gsQ<0kk@fWro7zs-#D7GD!eUhDzHJ
zU86mryWYPYb|Qe+4@?S5I$%UcpZplkQr!2c1Ag@!I6gncSD@drlBgFLN=}R$A5_nZ
zurV?+I`6m>gU=9;IrgAJTX?;V>*aoIu`?(QonnE}#|D<l#p2iQuzrW@*oTh2!sL3n
zHxy^&<-}QOmFa!w7r!!>6qeE#WuAV+f)M@3-rkFpl$45kdenh|fjGp@K|OE)=p2d6
zBcgt&9yJ1iP*hVRaR9ANcJWvAlTuQ++}%BVneVvrS$&6Fr07DPFe<C5Nb2b1>ic#*
zyma$Bzlaq>{a1LnYEf?ji>$xE%^rQMvZ~4mF<c^A7=K5uNDb%MwQ%t@$Znh%#2ciV
z?__zwng7C`|HUJp)$_pG>2~+ienABTi3|=gugwT)e0;nF@jY+iF!_gX2TuW01_sM=
z7&V=)!!v5Oxb~OW{GyHzp}Y_0#j|+|Pvun3{{=jM{}DS4Xm`JVI2-=`w|r%Q7EO==
z&?r;0|BeX#1*r~s1Zu}-hy3^ul>8?+uUi7~HyPD^_eDqkr{DgMxTq(J`{{Rl)eL__
zbseU+zk>o?HM<kv<C-4=*r$*fuvkArh2n?)?0dfq80^x2MC#vSnSU7U2iO7Yhx}Rw
zyI4=Owj+G%zfxQOi#fzK@Qgutwi`<HggMM4nCNS4`IG#6k0oS&X^Hs>6RxVvrhtO*
z|N7MLh|V{Ybtn^F*YatLV9|O}j|J2kN+k6wl+rzhkfCZf2hmf?gS+yKS1*2bu72|L
zxM8W{Gt_r=qS;zoF8&gH;+}nm3nsK2`4xDiQRv5Ju_|FN=zffgzk_e!_8dKwU_YvB
z#5J&P@FI#a=)d5O|NUWL)zIm`;-~-p7vKAd35bxAa^TtgzeM6dF_`O@ARafY1SCHS
zZJ?7s%dcP2G=bOgOA!ALgZ(HP|6#E2iQeIg<sS|9gNEQA2K$G>4zY#*n8+X0)c=^s
zL%8TKMC%_0`~MMxDXPUkuN{S5Lk;H&&a~$|Gm9x&{rqBVdo*i#u4DQX;`Li5UE!-^
z9<Dcg2TUicFcnv8Fm@iFMsD1J{(QnmpB^+3EFBv&hHSp~N^cUQ7GQBs)Z#H@kk6TW
zzF0dz+#2B`hkDTLgz@Nr2Ej!I%FNr@JRuJIi!ke{N<#mihv1?36Fc9F36C_Cm?md}
z+XH=z7^QX4M)I4D9|riOU0B5yT)Kr<_NU0Eq8=~4z*Q|Zp33kaNQ;(49PY&YNDL5l
z*5?*^-pcz;|7*vr-bikVSgYJZn7wJQcGY$AH2Sa<C75bhwFR%{AZga?y2yeULU{98
zvw3bjyR<sS*Gm$Po>LMj*d9(RR?NT_seTfm3#=f)9H7a5sh)_D>l~qW4b6h3G=b{e
ze7m%his|p+*a~Y`WF9$P$y$6`p5TQo?Lr!|g<a+g1Hs+}JP|BN#_?p8pAX-C&J%%T
zuT)_4=?T2Z1a77v{@2bj@2s`f?5C~Cr)ru7lT+xa1D%LgcfA%3LAMMcd9fXW(%QZU
z9osCESDikDkyJ9gd(&ipg-@%cN}=!PS>*K-Z2d&h;kJmjL9m93ee?14%b^Ucu98Z&
zajqr~peN$YOLguPMjLeFNR(*FcIudwD1or0lkvLI6Em`(B@33S`S{1LS(n#`wcKDh
zQg!w|w~|Y^YxmooW}YUFlLJKIuby0?s5X{!oRzwJ3#7)EYh1_9KJvF6B6Sh&r6P)c
z<}Ys^(2~1bVBo-;S8g=*%&M81ljY#xIFDp!?e^nR*UD6vL6;zb*P=nL?|Rh-)z6(#
zV!9lS3AQX;oujUrTGq3E&J$bMP*XO$zu=0TI3w9vgG!Mr$mAlShgoP+ln;bOjjLZ;
z<TIHH>nv;X3o<7y64Yf+7ZhDdn=A>19V~t5m=(UeSMxe8e|FSNP15M5q~q4-sZ1x>
z>bBCTJ(4bdb+Bcb7D<g>+m&EJtBFpIXlWXimtKotgM4^92pub8h=49$;+#ETi#cyA
zmf_tiLe>tE4)|IQ_(8T8qiw7GqZi=c%--AIPu&>?MR%OooW(JZ509cmV9DltVxHw(
z9XqCryt2EfS8l7XMzdcuiR>!NGuM=Y#Uv{qdGJ#>cVct%QdqS~nD|apN38f~6HDpH
zt!_gq3k9gCFH)>DL88cJ<Jm<PEd94&n}S2yqIu=HEH!)jdm)0v)VwSm{HE?*=-A~^
zie_q6YM#D#i)=Mn0ye^ysHncxprh&UD(Ejly*i;nlNb1Msr!Xa8Eua+6d86cwahLx
z>kv9M?UY^IS}Fn!`F_hV6)>nI?jW___0#jD8w7;frR-_)lo@Eh+JyiI8!Gn`H7iL1
zt1Yk>N7=_PLlLgqggS6xwiEw`i2q8Jyza%egK0`T*Lj-`s5QY76ZE(pM5$MI9R{Ri
zJ)C2iYSy5ZQ~1;gD%^SLeAFl7N-FJ;+36jiku78U=6)>FGB_JK!f(6`bIE=V+M<*k
zYprEP353#Z^UR=xwfCi}k%61=5qQzjgZ0%s{!Km27fpmDdF<U!Zk0Dg+a`*dI$6n=
z*VB6RHI-1C2V}KOzV&;F8ZM?KL6%$T6g$n}-3%IWv0z4varr+T-)s%y$MjFq_=%XR
zyxU@pQ{%Qlr)gKuRP)@7sI;AbWNt-@TQb)^Gc|2Syk*|o&hfP=;HS`Zff?x6N962O
zt<?Lkh5-rRP2eKpEBHT8-4x5BzAqN6U2Fb61$|eKsKT?+Qdg5it+uvcZs$eXm}_gd
z)6KDpx$P$Y-Eb$#t&=B@R8Jt&o2HR01o)(ZJ#KpAXI;b!Qz3JxCroj6k`Bx<DgvfX
z0leA<%f&6*Te35fChz7R5hbuJ)7K&buIgE`>>IuMu##;_B59h<kYKYAm~wK5&22G&
zf4=YLQ6>U07i(^7D%_!r%=e9KPz`nN@wIT6{ZjbNJ%N}S(!VMSekYswr&N~Db5H_d
z@1i92+Z=bZ^YWZ5za+_&Yw@A!B?**rbAeC?#-5e^;^=Qd6>k_0dPkI^j8@h?MJL0}
za)a`$YRm(v^{Q!R+A^+Jx@^2#oScsstA|xC+}Z!!gP)w2=9(L{?CCirjac1&u{>z)
zY*LL0Jj3DPzAB7uG3=WqI3{HU8e4{pfOXGe;<BG4YA^8A>5S^*0MZZdNFec8R#o}@
za%s_n(7BQAAe}2s*<>;vw7YpF=!qD&og>K$<RRaaIJaD>?_D=N#1z}wd|;Nt>Tb3Y
zWkx-=or2n48YSOruJKN+EMN0_XK+cc3Ji+gu6rA$NKJ9{uX<Ge9(yU^fJE=@*Qcu7
z@y)8;q?o;Ryt+6sXl0k`z2O-}HZ*l4>$B*d7Y(O7_9Hh}se@fE&Xi9inl;lxgi_6G
zT5F0pY{1lL3~auHX!R`-{);ATtD9vfIqvWLo9{2JCN%hO4Ua|p(*cEM9bb{`f<Y(m
z6uh>lQJ`@v-;AO21&cSQCzG{!8`-=EE>%n}`Eg_$aZlj=;h<%tT~VJ987OYFO<ZQI
zgzQW<xq=~*l3P@sg+h0C4D|>*#hgtk9NzaP&-z0xo=Ydr$I_q5-QH2br&Eg4P;^Dj
zmJGQrrk{Mo%PMkTmBL=!x=UMHr<_&QW)A<Y-OpQd{lYJ5-Y-vA{a!y-4ZT4XZJM$Q
zByj`@=5IIbC+??lMT`szE{Ke~Emv=6yQxS{vDKIujjSr@xz=MX5XOCBDS7tsQHrtk
z7%-q=?rAbd8QM`++j;Nlfk(sfYo3#q<dX^GHkS$qCi*=;b>;D+nOJ-a8hn|o=3Cxr
ziS}V#IRi`TY(c3Dd3HlprtiqN*a$evw_bK^4-WXDOm3T8^LFlgl#xXtBRwb>HJMt~
z*T@G{qH<5!GEkGtBkJWY-AO%$AB55fwH(gR*?o%6PT6C-bphi%Rz2voEDjB|^S>!7
zdiEj5!c8NZpY{xo-Tqy_`ze#~19b9v+9h~XO?ob4CfW)XJyB1zyk~6|w^>qvuO`#K
zH$;S=TvM71nNJw=w4xNWUu>Rvr`yRyVD8%EW@*%(2AX-U@O_$Ce6c6!8dUebw#G(L
z`Sj;AjcY1EyAUnnH9W;vD_^e*DxZTdCKjm)X-RYLnAa0|7dqZ(vmjl$Jtnl=Be%L&
zBGRyIYd2S?AA7~_O{K+eQy<LSr=Dc*GS|2@jeu6!Z0Vf6S6aMHm_1nqu-}UnI6n%J
zXj>Q0mG$<k9yQi~)xY;QjUOCzB;>OsDT=a9+xcF#jXy^ZtE|a*C7rnN{M`U=U}5F6
zy$IH4O*d}*mJZ3}p>j<wf&?)U^EFNE^%1r2)RAi%4z1<Y!|JFJP>sYuKAqxH$Ugq8
zYBOTCow6`J?M%hFEddu(d;Yqo?G>(@6_$8YF5KD%W{WcYRC49@pV*&#hRtR<^>5r!
zoV&q!KxCE^w5(mDfc*5E?{b1?wc&?_`XW7@BKE9T8!u|Lw=gbh)eFe94a_<Oog{Sk
zz{+6>rX@GxiHf_7OdYrIheujdZEE}qBbR!O{eA;cgqNwoEe+AVa~`*>7uaG2=0Dyq
z_)OX3Us{@Vm0Vg^_^efat`{N6F}t>_a;xbx2?uIhnhF=n5|s804q(BKP0cl9WPS)8
zk^!&R1?JJ@kY1`pn1>MtHh@qfQG-EU+e%S9+iteJ)NEo!Yzq3)4MfhRLB@!#CrtYT
zPX3p<LR|7;sl-jSi!C#*RwgbJNO^C$o1UM6q`Hkg=&Bqv@>UsHNzy=XY4J@@HY8fI
zEU3uaiW2Z!I>mYSZn$nOrf&wf&(aZS777Y_?BP&o|Dca~h$4>)zzGHRnA1?cH-XUm
zmbK?{m{0Ixs8_Me%w$L~^wMU;Q+%93%!bNK%8hn3I#HLDYvJViqr9cFQ!0ttlmjqZ
z&^p=~cCh&>7^UaY5u-l-a<SHBiD_{vw7HXXGvO(DRIBuo%WhVE3gsC!nX%Dm!B<<-
z7rsQ7&RPARrwPYCo(Iu1(M+_C-lZ*Xckiw^z3qdUZMaC*lnR7TA2M(=-u{3kceRL#
z_;)XBNzC?^&iHw=YA5$4n6wiH26&QxzrHImG@kYSv7g7s;Bjoz<`IibIf3*VPH*A4
zl)Wn>pH_gk=m5M$_$bm>X_6_uot12$CpP$Kho;Eq(e+@<03(7trb@`?<BOB<*|xx^
zl|CPRzs03YWPIAVzjM-PSQe{!n2G9o+31nJ?Eu+@JCq-WQ%<REZ#wxW8$NuKKa0pL
zQJ7L;S^XTd?43}TbhdWK$feruhSQxy!TgU^c~(Kqs?LO`s<*p<$NkaEA|=mMe~FL^
z_|LZYDOqZNLHo`1TcBg+>QF?%c(0c%$?qT>>T2BDucQ;T@7c9xb?&+3V3atkMiS_;
zk(r?GY26dz;u5Pt<l<$a+l8h+$l@B?UK>vKNUU;D^4zSEliae%=3M>Mhwr~!^2L%b
z;>!+>S(*X#rUe-%f}@jCJPE0G!5RrBp<VXpb=UsIP4HXlH=X*#)g`1|L<x4)^{zL4
zV)sXNX!i~fC%*i~G1hFb)t{&Lbq4I2`+{`JqVdOuNNt5O^2~j(fwFGlwMqv%NSjy{
zU<1$j{r9Im6ZN8u=F5gBQ6{l|qbtFpB{VY~%m*@%MV}qd#v8J#(q_nyPLV*z^ePiF
zM+A5^xLKy$cW|z<cLvS18dhctq(DcOMYILh4#D_~Cws=nNXNbMy{as|P`-To=-%>u
z7?-pshD6@6*{`;D1hb!%O+xI;W`#C<Agb$as(1GBcdtqOMOO4rk3uy-Kd|xgnDdg?
zx1_<-Cs%UJ7XmLpt%BM|D`<<Z*5Q?T8``wR>r#Y;csfEpX=Kw0NnC5VWSc<cug7QI
zILe|oMBc1hVKX@E5-%p^9IK?UVYQPr#*cb2(X3{CxyG?2&OA=_9A+arZEn~?Nr*fz
zpUWxWn)ZYeJ$I890W(4M-13KJOR);)LGLTq)2r>>DLm$S`FAQKwvCiJ&o;E&X@utK
zaKGv7BoN*Ms-!vCd82l#PieNXRacqIiY=klODHHI>F22rZkK>emx5M!v|V*B-^U>#
ziEi;zh_&ue(|6}i_7V&!!XrGj-4~l&KdlBy@ZZpJx~99{UCF=Icu7%>t9PeTi1!`e
z@;JAlNl}_=qdcn?`{a77Eu3_G$89gaQ?FKDM|-EHiMG>wy?L1*(VE-UFK`xz1LzeS
zO-_2^js<)p^&(O7X6;H=LHAwvf}#mLA*E*ESiD+!;Stf{-*Sc4FgrVyg@k&?&{DV}
zs|sUtKE`hIL(x>eSK7tp&5fBUtV27+bh1fUXnVXPmZYjPm&`D#ecA}arAjg?=8oAd
zpVQ%big*_&W)a*u1}k`SH$V3fEAS^C`A>+|Z$5_2`_K)r4Hvv{>C)OuD77GI7k2Ks
zMm>jVHo;FxviYq40$BWB<=}l!kdLZ1nXk0AS?E}wd8c<~-3P)-ZU6RC_T@bajf;E<
zyz~bXzC1VkW$KTpmKdkNm<+cBh!pj-IE>raAOn=tyAlo)2OUqDt~e~2Qv$UiGb6Uc
zb7u8r3i;FCmz~mAXz?xijE%Z-TA~DUFLOQ~e)YtV!uhVfx&&tz{Wu3#kO&w=B9N%w
zb%EYHEpyKM!8NK%XT{SkF4qGD7V4b}9^6FodRYHW|LU(Wb6W>U7O9gt=M$zYsWtj{
zojli#iu}%88zh!g(qg?^Ud^C6Tm&a0Lqc?J#;wgHB^?PC>AQfeEZshesSD-lS7{WH
zot1X#drwQ)V6DG$&~#bbKzfnXx?JL3bNp<Fe{GCfiCj<a$qhjFFt*~R2FM)Q+L*4t
z#bkeQ=cNaj7&v?~R%}%G^MMPvzQs0{>xu>{lVWX^2VO$|oeNlhFE0M-sVigw)7X^3
z6?#>hmZ8kxw&X~)afh?lN6dDj$0Tfk2b+~<EWif5`&qs(FNFo$9q{os>0tV5+689r
zW(Ra8atfg+Ho7n}YzH=yw#+qYndT6qb9wnG*c6F`$+gLD7oH|^R5m<KmQ!CzT6E0G
zL}|aG#HDeyRkVoRBJ1SJ`p&b*Vx@wD?oUxj5$OGAO2MoI_1k?I=jM~5<HA{J(%*mN
zK!@hUeeRK9^SqQXcP8*UBlZ_yi<2p~(Nt{e3IfUX7ns~9cabIU3a548EKcyD^%wQ$
z+>3TxccQb)EE7Tr;)$vGlWEBoIBz~8d-Z%+$iaRKcrQZ;@~3ScBR4kfJA}+Gj@F{h
zv<&B6{DQpl<Pb8HwqsCHR$c9C)M%^VWVLNBwSA_Sp2CGlR-1sGz;H#5>tUDOGC^vJ
zkPZ1f7?R7w>olFvvzo>=(<IsnU8XK76aW|U3Y`aCUgZa#%u`qR>@lBfy$XR;xK+8E
zu>XP}O9dNbg)z<<kEqE>V(T&BAB>ThTUBz6_8_#=u{kumk}j4l{sn3bJo2!YQ&urf
z&SW70wUVIeMfclgkB!PhM@?1VF>Pf9KFy3CEWSz&QHN6o?`L{|NfSgr4`MfHy{8p{
zsWSZht8mZCq=G&t<x-ulzmoMoC62!Pxilg`X1aSU!w<d1@Po|iqYOIRWlZ2izoc*Q
zAEX^B|KBC$7h?T`w11HHJ=y<9JimvTzmTbakoFJKzRMo}SkM2WO8*bi{y&d2d&QPV
zfAj+UTVVQ+`|<z0`yoDKMtHzkYtZm?usD;YvZ|6UvRz6vk?q@M?C&bGzwPW_D-w5*
zl{NN8$Bxgyhli6>jAS<)w|-}hypYEpU1fp%6>-T!@mg^QB_-p8ee{~Ai;K$@NFfaN
zvUSUssr<jNM~9s`R7bykf#;>0`*fBkZ!F6(#w!px)(N~&SPAMocgBD4Tvu?iRl)L}
ztdhkwkOi6$bF0G(I&l~zKlolSghdpmQ+WN3aX&ZDZ0M`CTZQ$i5SBzvl|zOp{cWQD
z4_4o(yaqM8ywsBG+O)Z(3)lV&j{cvQ{gKOSkq0mR*jrh1HZMeb#}hLip;yBAb>`3y
zAOBAP-J{PpeD~r#H*`FNBrBwH4BXHE1z3I~@mfrqmZ*>M)vtKlS($hcwD*>1*Zu5i
zv8bid!3OPpwtc@OXzx7*f_9x&qC5WuulzyYe-XU<D#&!`pjBCZ0SW#=+J8fle>m;G
z5ZM2hB5egTRE1oLTgC)WvC%$%aZW>KN$%sl+g-`d>A9+wwlD5UYUy0xwC(~6H<ePP
za<ddYB4P?8+GUnPZtUkdY|V1hyS&;9>Q-G79_Y&!N$lJ!qDl;1+&yrptpU>m#a~<i
z!un1};N*9gdWrx0w7|dfEsY7-Cl^w<9NTl~`jNwSIsJ{Fg-n8>(K7aG9X{XPTJoJy
zw||T_JPdXj4V))TZ*ul#ioXm~{6+u0;Rka<?~Q~ze3HI;_QHjfXU}lqVqIN|l^$CO
z0lZW8_V$V~+?mr03u$1x((nPtu<L&T`eDbx{_MaFeE5NzgQ{o!aWLoJX?;e{*UyiB
z{t6WpRZ9r%V{ILsQ0^eZ!*{rS@1=hQpHD44C@YPx8#&@#D0fE0u&7TUg{9s;N>861
zkA76}i*QN<c;wbuz^<p%!_u^U=H|?GD$b{6WXwrF`ZP1c$i`+{QCTVaY9|VetNtr!
zf8;5R0Tz`;dd*-jhSS`~8xCr0)ho#f?h6d*&K0&uU7bn_!|Y9&*(5w7CPAL%T7_Z=
z##^V_wXT%Nh0jGLOM9m_p9M~pe3{NkfLj?%)(>`+XJutw+gyDaTeU|QANk=|K?>-e
zgY)6CHZ3#r9Y~z0bpo@V4-S^vqdMai4${(u)Vy&2@asw3_qzxCbSfPcNjl>B;P^xg
zla6oe#?f!D$?f0u+S}kr-*IYHC1SYOn0cR^Hv{TqIWTPD<>}>gWiCo->HuHTTC1#k
zQqsRI_lYhHr8gJ>7>wxr`L*|tiKr+#aMf4V*F&?j7a^0?RyaR`=)Y7lGC|mr8K81B
z7Wz|*+{BEU0@YHQ0ujrWtM$GX@U)VlgVxGT#?>}1XD6?55BboVSp8D49bHn=pBOE@
zoM`7O7L5VRpQJuYDJyRn!94i*)J#6S+APSc`~1t8Q~Wlu4DkfsjT_P`HC7tyRPa*d
zYqqBZB~=4sNK|+4htPIZ=Sf1v=DYDr3t6gpZ@l(UL&IS4J@i6dI#@lt0QoEgmTSq+
zU?j@xODqQ*!Bz{%=P@qh_cZeIoe*Od;v0X7qaTsmdokjLxN2ZUpW>LdfYV|>3mhHJ
zta973|G>~CGF4VI<<lqqBA9CKa14h>X(}rxr^FGBq8MwidaF05!U0o&d;~C>i9y);
zVui5Ub(Olx#V9F9qo}2?Z<AUl^xZFGYM(Hg5axQK0Dp_FoJ`gIjZinUSytV!Di6(d
z^wLm~dzvdpl@QETK>2?68xHsu1{JHDb#KTMWBy6p3E8zyy+@3zwjH`VPM}u)VERRU
zL&F8w7MEGa+;CrZX^ey~-Uktc-Z=cR51<;6J-x*J#M{}Aj^keyO!V{ftFEp-D6kFm
z{e_3Q9AZ^ZRD+%&_uB9Bn}Ow`P2v++HM%_$#UKfSCAPLMQ2WK2L|!?Vd$mzNy4<RQ
zQ8`1OZ+Q&t#(41gSx3B3cE<bb(`*XjZtFAQv9Vg!<3Wm$oi&r9P9_J_ipq-l#?>jo
zl|AHIC)MlO1STeFu>TJ^K9DLK$!xj3y*-F?ne3ZP?|OcbY4u0r_U7gpLDXV-{<EE}
ze6qwutm+D5H8po3TV*z*-7o3<oKS7lEySOo+7%C&Ec<f^nwuLN=RQBbAm}+4Vm*3U
z^2K$fv^y5?%5Y*fP2(W>>)I0lPC>V|HyuC=Ww%E&MLw8rNd=39gtXy9I7Y!>rj~<x
zjm0z`rGV$4s#=cgDV1E+cAJ1z5gpk1v^L!__eDe*WyhtnXK6@CNc@~GV)gznl2U#)
zECIl#gETdZK2G_ATB!6KB7&uTi)ys$e$&RhGiTx%vYfl|La_)WYANZyQhE$By)z*c
zaKnzx6LM0qD2(Z6+~X%t!rKSZ<g~oDSDT&1P~)|bTHUOTWDPO*CH}x26gj1^>&N~G
zAr~9O@Lp_#op0Ua6Z6><dNJ#yw0Puv)~^!vh|>X6ixBSabFpaVzqLU&QAq{tN)hR~
z($=xf%_a_*i`ROWDm*Kf4<zHUHsiy&FzFG&tedkuTG@hY`V8&3IHuG5DCqul3z4bA
zh@J1sik%!OpXy^#jPO{6$HrVH>u42|!%SNT1bs?*tj0^rz`%fD_Bj}Of055>ME&64
zNQC{ZGioa+lxn5pJVl<|kza*jFq?ZF=L2Y?0!+{{k=QQmwoc4qb>j$O!g(J_r-OYr
z_~Lq}7&KR_Z1|w+n}*R)%QQUBwes3H^PXlAilhj+JX*ETUy?o386TRFUt3!{!={}9
zgf-U5zJX}+ZU`I1+j_i$smsncQz<RO1)30%M9yois;~b#H`n0tu4b8YE}}N@qc7c!
zX6BMAXN2<ON+(49naSnpcq);NiMPRk;LD>uAK7a1j|p9Ql5gF77s%AxZgl(mm%E>*
zeC|S`3mS+5s(4V=$IP#wNXN1V@=Cx0514*VJ(F7Adt3**jYfdIjkcT_u;aNmQz`al
zC|REVF*jE?Hv!EU?_cJA{N{57_e!kY@u{{F3*~{lcp>X%K5z3{H+Z606CnYC>inzD
zDCSnxoZjpb%V;DCn;)ZG40om1Ug?7q+p!3pO6NZML@%3~;7cN!)L!gw>%m4P0XH{~
z`GG)kmZalS><uqevaQ$2I>*nbsaHHmjp1|aDMTexN6z_@=yAi(gN}0G&9#WANhL+H
z#coRd_V^sPJ!(k<F<R8jxfL+vpq$;WCskzDey@x*o`pw>-8UE-j8y|JsKKO*>30*9
zqs?SBn#e3km{i-G^?*Vt+%q=vV`@BO%3jZ8QM;B^-(Y)x=+)JTRqNrBfsY0auU6>w
z_1x#X!AMO>p*T95@<$w>cJPQcMjTAq3joL3IXI|9Fl$i$a*k!xo>-R`?Rs`jFE*X<
zU@E5@80HFxnGD(Vpi*bL(*{E?h+0Cq{B~0IOKNj^dalY^0CHrhz$yj27q)sf7c8Me
zV^CdK7LMC`lvh(VmszKx?+YSp>j9{qTC6HdiT9{r(Tu-ALvN{$2i(IG_#*r_fD5CN
zZ)fnXu`$EED>;UHRcI5@(;PQ7z@lYMi&L;=;&?ZT`_|?{U)hMG;RIeHWH(dF6CJLh
zmu{ouC1je@ohD~#sa5Kjsaexkzr<Hh=!`_m0Uy7#^u*?ZW=E;<jy$7YO?56CBj>&8
z*6<Qvbz#@L#}ZZ3?nGNbMJio-0_J<#Yi3w9&9~L`;E(7795A-qkz|6#&!(Ay0DN;&
zqS4YpCq6WHcA~sjCnbrP?hP(+Jt9F-3mZo>WwHTnUW91vx*()YTNGKAr+cdCj9Zn8
zrJK9^@PSa~1Rij9@o;hNin-ChNQHlm0%TMt@PH^PuV1r`Y1XTGkjio=$uhDdhRZS{
z7iL@Qy|AvU=d>`W2$rlBlz8p#&^Rr3ONP?R^?JZOVy7Ttj_N~&CPlE$7y+fxDrb&8
zQL^oV%B?wrB!V-i6elE(x0iOCw3tsX@RV+qPvEI!srKazIecDNu!sgcSzkQQWmR_;
zurueP=+2UZ)BJGXa?AxhwQ?6^0*?Ph)w$``QVuEh#yUFb_D@evUhvvo6%Qm6=#F!#
zOMaK7Tv3Sdny5dHS8>rWh!5wyp;*IHg1&sV13Ve^3e&*bk*r4e3@hs>PT9bc$3cl9
zu~k(=&X@zQJ})$n^>FbAD}Ty7g(PhON)h))?LE7X93q>&N~VbN0wbsGk2l~RS<0Ck
zz_49+TIh8a?cgPaT<j1A<RpXbq|LPNtb4QoqrSjnZoY?n11_eJBHMO*f2E0~4*}!M
zB_vog&66Z%KKPxc%yLEuW!Tl>nC8DNBw|v@(-vq?;E^4zbS&-b&rnn<n&~Kc!oIz?
zXNjr1Iisy3=+ZqhRMfsj*BsQ^+}wOuz&Ye`mmBTpLKbmafO|DMsfFCK@ltYXK5bf?
z8_gZ@n>(-TR>y24Ch)##oM@x-F?2RMo=46%U2#E<^#S+CalZbz4&JG*(K&PLu|mlU
z^Z|SW>ea@Xj5RBdSaqv23?=bm5u=qZ18?O;OW+WAe{QjB*X1G+=kofKM|UkpqBu+w
z&qZ~mc?qfHs4IGVYsBq!hbnBcPvGfP)u!ZXm6~tm#Y4Q6N-Q#EUM7R)%DVV_zsw4J
zvOjet+wS<$Ovevq7bz&L)-8H73fybA5)zouIrA<DlUFM$s^As@!zVl6wI*e)cnZYx
zdyn+@mfyM%NX6B^1l?;|+;y6gf_s4dr9}J9L#{~U-e>1_H$sEkYxK&jR9;?|q|zv_
zk3hgx@;~VvIbXo{QlY#atQ_00KxmrI=VQ?Fz+e}^YtO}m^ld@kJ`;3Ww3z(NU^)s`
zm2rCwD+f{v^`Fj`nQQO_WdqBByM0-@qs-(7eFGLlS>dDkjrBy29tACIs_6x~w0rKX
zXL~<>YB89fwD!4uPv+n*a23+Qnq@zST+IpzX#(ofzDvMwH8SM3Ubr|~=_Gq!d$hMw
z&ayp`Pfrc{grO+XrP_eZo&=jj5f^{hP{QydvCn_-=IwN8hJ2Ye=Emf>(&WodeeQ_Y
z5*bJ2x>P!qzy`i@E05FdW5j(s>$BF#brNRfhTYA!8mLr2@jfZ=YHtsh*(T<WkB{r^
z5mLQSb6W^wSQyPtA1ZTi?_^Y|+@Ql(yRMNH=B-(AJ1;NKd6E8NUcUP#BaijSU=FpA
zcQqOB?xG0l_X-E&GT)=5@_h?^JT7CNa0t22(Gp8#J{X0UAt7)b#qsE(ChNGI>yPnR
z4ZgQ=1?EAj;M~(y=XFy-*A@LovbE#2wPT1;>CAhn4~k*G@3HArW@KcT`#Au|MJ8Ub
z<dJ-Qcd$RnP!sW))4jg<B%v4cKoTX3S)));I~M1cvF>k2W{<zpDX(ABDC*6XHB);1
zAe>RN)+Qd|_5Nd$#X!yDp@F?o-55c)LImt~Ul!JN8!9vCF+G0bL=4hev!oZm2p_{n
z$)ChJnzHw&^OLalX{hY0&-Ur1FB9p7EpI4v3^~wggMNZV&7<2yOi`N+wY!=uS|x?#
z)I^sUFgY4+sHcJBy@U2sR>*=*+v-}y^q}EVq&|NB`zVf-2o{|z)_B1fBkCti6#RDL
z;d&Y7r4W$^VVc#O5u?LF^+Z&s`5os%RCBjKl#V^l_a6-1To{!`pFC}Mz($kM0!-0$
zVd0Spid6v5V{gqGZQz}2HkqN;N}o7g;jZ`^P5yd6n^l|k`dmg!Bnvt8ZBx6Ja<RE$
zk?n`ccNU{rCe<a85)EO3P8LPBE3a?tT5Lzo?7d96v9`KiL{854<Wq07SQuCb>qnq=
zU8^*%hKlDN4={5;&f7L4pxO*6Y^YG61Q77DaIUxG%+>=*DNj9DeMiTpp0a}tvP#sa
zDa^I_T!NNNVdpj&Kl}aB3!u({^gI5*-u~9dwHxL2ec5U%G`3Vld0Jb`WZNIooh`vd
zi?bg3Am*Iuh)(gL_SWa!+umJR>7q%!9p182`-ngMshYZaRKw~ifXcelO6hli(!TCM
zVAeoX4TFWV>InK-D*d{Mkmgghcp?5Dxe%5c$4*ECCF!)baY>d&T;}~%A{OQMce5=v
z7h;5LYf`;H0JG3r0~<nlV-6NZXGLUzL7i2(yaHW$`YQGI{q|u!E1tbA<bZ6rF85+B
z8OJ?a7`k+HIP{u#dX3j^6k-uF`UX@g?*sF1F`gDUw2VYT<+REejG6*WwSWba@+n|5
zf)FNPb3zPC*IIY~mCkC{%U4j*b-zU~ANSEAHIWCdRcezvf!S-}bZ(pL+MRoR#1#J6
z?s!TauBq$U(*`3A6R(Zj7c$e^hCz-7=wmssyO#?t0o5%+Z$ZiVvX;rAv50SpG!{!f
z>k;*AH7F+>wFHO82{;I1)Xt`NZ$Aa9dDhMo0M_*OXe}nML=4I?YsafiOGEQ^El_ae
z*zsTJ)e&Gd#UuMk;`SJeck*Hy1mpRuv1CFvag;K?52hVA=FZ9PNgq9#<q@0^Q3?|3
zB3o7rvf_1NnLQiB<hFwg5;rA!-+YK2t}+W2V0C_2-|&=aztSZ8#YG0g*diS`uV%5n
zj{s!qnjE)#oBFy)ft@chT}}x~g^Vf*&sOeg{GjxCe*V5?EQeR6yCc#Rh2_hw$9}-;
z%L4KBbPJXK>R^ROFfdw7bfgAd^}Y)u1&>oPH`pI{@f)w`qmiu!rVvD=UVr(i@ed6R
zH~DNvKKcRYVJ6^G#41qQ%Oe#j6bD0XH6s-cmZMF2;j}kTXu(ITTvRd*C0i*^#PfsY
zn{0m65X0kYdD;c>LIv~yM!-#$2h|moD;OVQa3znF3gR*jS^RkV*VSuYWr`P`R@+9!
z+HR~$Q)}i~wUw`0^p+Ql@_298{T4_mGTePIRXClckn~6gQJ5;*x0XvB;S7O5c6N6y
zz{>In6bK>a7GI`>F{&_X?WN$VmAh|dC9v(qNwDeh4#WtXWa&bcno$Yr<&VxuD3m<7
zip`G{b^?L<u#Icj87=DN&Z1Xw+sDVp)H;`}uf%fpZdFkt2D9?8T>S#rIt_E*v~EvI
zN@CQesf{<Q+23)R++KCX6jK3o#8bjcdI-hZ%6e5YHB~Ng8Gjs3g!E&zm}rXE0U_kL
zg7DIK?m04hunY5dKYHRk{nORw$+G5qYRlRu5K~N3u`){^VtBGy+8+JIdaxh0ho8Fe
zu7EW!KzYuGYnCwIt3`W@g9<`fj~2{5Jf`WC4!;*FPFPrYGMs8>Q*C#tNB#oLSF^;z
za$#fscIdT0jjijzl6~k$ulbYpL(MuYkI`BU)!dYNe-jw`riW9_L78&d5za^O?Foy%
zMR}<LUoFAn#=t;|8JpKim$WJR)jR*bN)_4k=4Oxp1!;jwr}-Re61KaJ)xl7xDyCXh
zz+uMGJ-!hSs#BE~%V#V4s)9o972rz{zX>v?e0P8Ak7uGk(H?tcQeGb~<Pz2(7W?7l
z*W{R1wJ<h71`^R$^G$!APaUc9C==aXIchyx*>}(E7^UMvx60_ao3y;hW>_lnQ{Ce%
z<$^~;ybJIyi{YH;Q9)oL6p^|j?I;#_S+;(iL_}o`5|(~zT#g;C>$a&P7c1I8eBR)R
zBx&%u(tOM(+NvEoI=YQ%lAAoXW7_dzkg;yPR11|&_p-7C$ia?lCuB)IWEb3H2Bi<p
z-SG@1X==!B^zDf2Hl>lQN>WT}(1Kntsb2|+nlm`%!rpemb318dWMtE(ld9A`g=IUq
zD53xqdSckUt0NA!Qvy~327?vHQ?>X?tOs<Xxy-zui9LSerwuAFii%yqjveKp6%`eX
zvJpAKPG_!tcct?WySVoXzesgD>jucC;fXrkE^BBAAA)OvxK}BL`~E@ZGzKL&kf+lF
zK(g{6z{OPnX@R(ybs#%}Uc1HG+S*}kwz?p&5aL<B(bXQy2f|4PH#av157g2vGRuq7
z($b5K&o8`q@#0>8j>hN3#dPJ&dsp44%ubM6`aXH`9@oW{BG_PVc9vcZEU)4aarlL$
zV42I>KApcEIf<kA@?|9j+3x$J!~y!p^{5lC_$k>Ld^JhJj6T3dAjWGu<2oAXU^qvQ
zV){2gfY>|zv2})GXPqSfIAdz#Y)d$kp!a^1n<L#>M)?F`hL?}H=zh|>z*K@2keFSf
zd>{H7G=hSfYI#o>7#Vk8S`D<ftLW;EJ#cdJy0Xr3>TAlCkj@S`6<&PaaRR-~1M(ne
z=M|ON#v!)Pu6GiG8TEv!L2F)!p*O~3)^AZ(gOVeQZuR?-nhAZ^m7k8<_t!z~dw+c<
zXZskwc9pXnpY7Pb7CqPt{8(5-1k+FP)yUW}+kxyu;K2;}=<{+T;@Y7%nGZg{pRlvL
zb0?rF=u!&2tiifuzQ;@fl(w)Yz|UxFc`P?^0Bpsc2I12gavo>?<#DjRW@0r9T&j2V
zil+R@%Am{(fZ<zR$;3x)b#-->J_Px1F^Jvb($vHREuDHDSb#Z1+e?cj<G!2^@>;;a
zj>Bx5MwSZnOPMx~$7b#!$7`iX*0uH4NxP-}opr~#w?~TddW%vwhrtGViY;5P$zsK|
z@06Nrbxm8)PnI99NP@nvH|C1|;><^;Fnz+8FV~~w9Ua3!S%*HQ-4!co*W@ff?V15(
zcS<1vyi{0o;{#FEZ;$C4F1#OFVO}TU+xO<al3(oL#v)X6Z=Fn5CpS`0b*ONfA_)Cp
zP+>HP=&ce|*NX_Ud*5&BAQ1G1Q9%VK@PY>-hkmkI!siVx=;gS`V)5-gpPrw`#S_dL
z;xdczaCUMS*hB9MoUV=*zMp)+@6hz1fB!gMmd5(b^90O7Up5)fq@}Ff7L`aiFf^Dq
z<N%^AP269L)o;|14|@yD?dJ4HHfE3I?$m70{r&U8&A{GpFZt81qP8%fZUPiv<41u_
z*qZE+grUTahMQhvi+hPYbbvE;&-~wntqY`RL>V58!f<&nkZ)lw`d%sk3+!~}hAhXq
z?rBwTmafgTMt&N^E`8tYXEDX}$cv>2ZZ4qB+OddIyIEd8wQ1t~qaMhgEHn)Rkn}5(
z{+i$3<2rdvHBUVW0WXc&W7Q}O0}dK}odYv^RT?o=Bs6xgM#PlmzDaf}h*HcZj#Zc6
z7A1uDV7rV1D-nF4*W>>lkO(LR-vCjK+UtlDC<5u&OGts`@mlDF9zhRc#ZId>JGKfj
z-lh1m6aswnOxc0F)u6x^0lgu0kD0x6s+>d1pti}TB&^yW$3#3FSGy&BeV-2ZqX=<B
zY9S8`P1>_SVABE;*-3l0O%$}WraBc5raw<iB;7noaGjrDonAiSV<0(S7@gVO5}TfW
z)yQ5DPJuWN9RWLL+?qBiFJ@heUTN^8+()~t!*pT05eH8Q442yN_#I{fK<2v#1iRA+
z1RZASNJ|V)>^>SD4!j&c0(*R$vFc1ZX#%D>^N@N8HuwzBa$jesnkYuB_FVbI!a~fO
zip~U)?4G(h&V%NS525tdMuBLP)`)f#5|qyt4C;yU^lI}&s$7_^T=_lnro=^J;w(qd
z%Jb@Kwx_43@@xGgMAsGAZ+WDW{-j<N7cU)uoQel?M~MDw#j*H<i|pRTm`%)6t)TvF
z7iyFDA$7~;k*qqs<s3$BC<$Nx>nd5wf)BPshWgh>$67!(Wpq#}{qFo;rc#^p)X9DH
z?p9e~Fp|UjbFF!o1loSL_$DecOH~P!N2VtyU+E(@khKFJE;P3vn6_(~gRTcW(al*x
z47G4m%`PFSzK7iHatRQK%kA4FU*cZXuR&1?4dEQ85(d?vXF);zEs5UU2_jXLf)`m-
z??7RwN>CM9%<qqKSx=K2&i9UQ(4?z=ZJImGsF?f&eErY}UFkGjZs3(%(izS|uP3I*
zqF33Q!zFP&ApiMx!u$8Q)+6PLTD;Z|%Ka!R9%P!fYhvpc>asswA$^+&L~!NmH=`|H
zNJ0vf<0XR=gb7V@F<EvK_0F@r^|;=;uof#m@AtM(=$JLuQifE^Y(&CcXD(G0#CoGu
zEFro^rQ|n$J44R<VgS_^%@qTJRUL&Jh9obUT&Vi8^~A>XPa0{1itv*ecd)xSKc8JL
zfm;!{ek?tuR-;mY;R}neUe%tMX^)NJaYzG_jojcfKc>ZP-m5O~;IoX~9cAM;rfqQ(
z%65`Vw*o#LrTdLGiJp=1wm%6=_r%SU@ng12_1G*M%`*@}$*+0Co#w7XAQ-=4{Kx+x
zv-+PrSf8+KU`f;MD*F!qFDhLe@1lC8@pIJDm`Osl=erkKy0EA5jlB#?j)L1^LkD*|
zbt@s5ngF|}C*=#yUsbO4K3Y{ECG)o6b&Ba;E3_ty(<GrNn@fVquygA*O}wAqgV_&s
z^78V&+IU^_J?V&g5>HQbZ>ED;MS1yP`=V9(qk_AMTf4(epcg}TJdoO~!=!CI)l#i>
z1VktUpP!G<HwBVMpsuyYWP%vOc@JbkCO}^X*3Fk-)hTW>cp^sXbH-a^-w`p)b39Sd
zgk(YgH2ZQ>{tIL@pG%(3Z;v=^GtCl90-pyw`-tr(+gA@6U9mxKghWQFRj=o1mfVJy
zT9qzx;ZPUOwq>qpO++B+Z45x_r8SbJ2b6x9r<+8MpCDGkrl+tiJGw?EpOC(jlAC4K
znVy(<iG#@!;QYxdeh4?{c6&7=$@A?!!ag{)NO(F(4@U_RzE9AxhL@DZUAcT&;-=qe
zUbx}OGoC^gVfFPA)?Q7)8{;4Yd)^M)?8x@?bior^$E6VsjY8v+9D`##o?_N9AmdzI
zT)Sd;RmE-oDmK|?6%2GY=(f4&xbZ9%6+WP=G~aEqWJ8-|=WCY0kXh}v&M2LyT}r(`
z?&0L%P!#BLF;9O#V;ooY*<Q+l`x&w<*VV~Y?^9svhLw7)?&1L2Fq#hH^T^_3zR$>L
zPYmMeP}3RmB@2IIrnIML$cGRUSb5>RpPY&w>NZhMF_l{%AruUz7D|ieO4G7v4Tru4
zJ+#B^9-v*)i)UX}wrZ7y+j4A#_{8d`=RrZL3JM|KQG5e7LEH62mq7se?o(}zkdZ>B
znQXQyVi-8}JhSB<TY0>;!^X1;xl(c}8444p_Op#!e=<e(Rt)Utt`}QuxA^v=6*gSZ
ziz7K6Kw+R!fjLR7>0Ryp`Te=}c#+l|4je+=EX_Vt4X7ztk5&&YS;A``<KW=5ZG8+m
z8%TxD-J#O^4V2SBGOay&bAU_=ZV83u-Ak2i&Ne(o%dA(a48pt8w$a5=mvCN$-jQQc
zW}sHhrkZ7iZ!I%-i}_1mM~v|OR}yS~>QCt}F0Z_PAN{5O<P0@$FDLYzutNG>9a(e9
zrAJ;KTNa>T9Kpc?N=L`YN#hp>a(kX`F1A%t2smV!WcQx}X$`)dJrji9CQ!6ai@eUp
zAdlXQ%GF}t`j})S?dIXp-0Cs+k+wZisChX6TL&+GhrZVB=9)231;e(?xz3{PyDp<q
zaNQ!Px&CW1UW<LUeU*YMKPd()#-M$9#dwsYO7g24<>Pm88|!5g5b{ZvS@dADCfwtZ
zY+7kLLN1MP$XeqmIgEGAkXnhRlZxlW@pX}9LJU4JW6m|X*kObt2=4?PKRp~;j=Y*J
z=)CX-8z;MFf#CEECFfwbUPX&6wj`X&0-7BP{F-cQqV+Q#a_|Ew0LI7*2u??$keS9*
zYF6Jyy+7ME_oLXsT*D<j#AN68=KHFGIgQ_k%#DQ7%Xd?!%g6EvOrDY$1R0bd3K5I`
zi%h!O@BB&R?Z(RMNTnwHj*69*gU*Wk?_YPaI4EanOM=AbEyr5>$5a8oJqLwuZ0b7s
zxLDNsG2_m>Qp7MlKQc3veiL1sX<A!W7F_9!JP3ghoxb@e@A5~#y%z-HH-_0f0fw)X
zV$jqF32~6?7VUYh85o1jG$POk=smK7X?8Bpy1sTD<kq6u!CO%fO+OaHv{8_6Nuxne
zTUWwpRolS=k7cIk&KfZ?<Gsw8OTzEF`(G;>fdZ0Xb!53%H=9C!NDQx~=_L|A?W9{p
zri|+O3ds)5BzgKzMB1W6b?VaZYBq`LB|QQ~)p<K8KyKriTi11F1Ym0m*#xse<jne~
zx96th&!0)R<Gw#q#j~)tNlnA&;^JTqyb^47lrx;m;H>>kzDayFTzveVvJ@%J85>Y8
z0S@5Qs5=Of1M>Y&2K)Q_gDepRW$4d#2hqI42Lain*pc798eEx6I36y@{#RGUV*FUt
zGxB4&tt~u)_ojBXy^o1m&fKBI7qkdM!lAX;b`cMZbMJLuU*8xn&~T%MS{h=>$NI}p
z?2TBgsXe(BGL_PuUH>ok-a0Jmw0#?2bumCek&wo95orMlX;DN)I)+9-x}{rGL~>BN
zrMo*vT1n}ik#2?_7+~gikFnqHv-{}#zU%(;JC6PDdE5i#bH{a^*Lj}TbstN-e3?=h
ztx?PlEM!aY<aC4aWPHf`FqQ}h<futhwNj?h&Jw7TN%cNGtY~07AzIXdD6*%bSQgki
zOMBxU0O*D$P;DeL@CA0AE%hcIuW?qKoSftm#}8nfgA3#Cih&!zC~w~;M+@7gsfBz+
z+>_Bbf;%LDa-%d)yVf)+UvnSdWiBdxc0Qt+$<Ze!@&EOl{TY$mn*<OnWu55h^cRjN
zSmD>HlOz>YmDxI2Oc`CC)kKwYHYD#l6R<~QOf~y!7(1+uCnkimagV{xN0q$sNe92x
zn57%uSDTK!JX!)M1_11p*`P}N<@QN;%S@W}Nl6@qJF*KXT;kDy;>+h-oPZDW!i5V!
zxhybXx^k`Ibb$5TzGZ_`oTy_Lt9!Nq%Pau>@I;(fVe<K@QukH|?-!b7FSvd$Qvu6F
zBUonEyg54;tjF*m!{g{AVL3o6;^X`JvVhsTjkifISLe2`^j7XN_s7P`sh_t?s)9C)
zPtU)?H7}COIQ9qJtKrQP2kcr^pn#G^$i}28GRj60x})pz?G}60G#eTkwpTM=8)`(&
zw=K;=wB^S?z5un$BF?G7JpsZ|IO~3odG~9U2=#Ky>5`*Qx1O`QB1cPOYTVsBH=x{_
zi7uV$IJ1(Xt365Hc}mKx9z;M<2PxmR-wM6SSodz7+C}n7X}hl4hcRo7TE4pQvJg0`
zKtOghMHKo^y=2Mxf}eP$+8{X@O9N*7u|p%)c=}0zxLlqe$foX6yK!BvSxP7u_y|Xy
z-TL`<i&)S&Q-6~&>+2b#r#RgaBM9*!qPZcf08$_+le*IFlSEu&Pi8tY2Q5ZhTu1Y<
ze40QLD%dgTh?K{f3hZHrNr6;@F*_W}xoPCuZatQV@mkd-c8kQt!jADZF4YE7>B=x_
z-hN_|k7-)22Ho)!)L4GtOq7_)i}=_=^OEJo3*+qtE4Ic{9-EncgaqX5ACU*UQ9A>s
z{kX%*I?b1(lfSd<;p->^;d3<TiX9<~pPZWd?TXzMhk}=!*MOZywmrgZK4^8$ja1v|
z)<BlBW5s+5?h;beU#tdEWlgJ^^%ms@+hezM`=!B<h=_<rce$VBM^Dq!U&wn0`S!Ok
z-F?&=w5nd{R_P2^=nhv&Z1BF}I`^<RSAB;vORi9_<|+#$=i{!0MrU2#1fmBBP^4~4
zDI>cM*@JCyg5?u?7h9obE!)UW2kg^dO3e`UOb6gMH~nZd_{%c@uL}+fF!C>1E=`_*
z<ZG9%be;}b=ugcCu`p&Kp2nNy&bMsXbdLL;xfi&Hi_pIGPU0){(~EByI#Iw0FCD`*
z!sV?Kp2Lhi++tQrc{PF2*VEe`VWeZMO6ZK?U7Y91?u;(#j)3H<mr}#E6dFlsA37o7
z!f^u53hB>e7xxOM@hj~(;iWj};_egF7RnUTSo_n<m|_Rex&oT~-ToJ9?%u8AUt@Xa
z#Zw@E1DItp7T#&70X$M+3{rzm%0V;)y*U)z9d&&0jN}BB9639sl#xN~b0W})WXgvD
zTsRuon~Ntv!o^t|9w1H&;EGhK)q|sh_KBnXx6dU>LEaRp+1VY##}`QR2D)30TE#ti
z9@BAE;52z)jR>-3A>;n$1psxTmkuFS*4X6a95v`U34<miD3aN<@>;+(@$gA*w03>H
zG6>t*uH>}N=ntKpZ1DZKGZ22K^|v^*O|6q*eW7+F#kcWD1Q+ytL5NPh*cxQg_;SY~
zk(@y)ym#4tiGQ5nXN7372jrl$DAn^=>=)6?i{$t7D4*@S@4U*(%W(vl;=TFFM7TR#
z>bej;sE2W}-VeBj<yxV5QOKK5W)+qPEv85Vk&=hV?G*-4X!`J3e|mR}EmE{Q$Dbo|
zQXbr@t=*LYDV&UDk!v6oVG1l`;YR~5`vzfb8tnDLf*147JLcOj^U3)VGf)eRSJ>Rv
z!CF<M=6zwR^~|b4y(@C$^fnb{Kjr{je3H*>!OvK)jo*}xy$+APqTdp*)U!Ns=l0cr
zDX>xNk976(x8^(hUN`!%&hG;ZL%r5~nf<3%iVL?=Q99RKzrn!lcR5kq_N)uWHLR)a
zLg^4~cOLnoiuzv){ejyrsZBZScYe&6d@`V|Om{^gWwEBP!zW406kf+Jwm|t#&<9K@
zq{a`JS=H!L;ABr+Sq|!MTR8A7NFS~VdTUl0t7U8X1Z|>FP)7uS2sxUC;$!6&JgrpA
z4r{&5x?=AD)m&n~WoWB89{l_(urA84J3_MnM*R$><lVaq{`G^LM`$9PneygUAtB91
zpL3-hJt=D3q^zpfdaB2Y%_73twe$u_0D}&AJcJvrI0eMwn-awGP`+6c1X~=ic%-f4
z?Bukb{<Dezeef#)fZb@n7IeW$zw%naa}pr=eyEPF!$%%tWx)D0mG0D9?zC(%+Zn-e
ztNSYm2*=RY!j*wiM@(%CWJ<%%NZmy%_!Qf0djg_&mmgd>ysxP^yfi@Wxr|m-3za$!
zrGXm$hVHm(d+a$XSZ0!h|J8-_I`3{Zlj|rAWDRt1-o4cHsav$Tqo>M3aQ6M{EA`G1
z>}pAXa#TYjkO-Z%wL!6$z%9`Ss(~-{oANU6nUmr;(Fh@ZDIa&iBSHOe*SaO0j_Bc=
z#;?44IOkV{keUJ0C;Y<e{Czd$cV(QA;wKONM){XK-4OM-DtpKd=ia7T_X7BuSXjsS
z-mAM%3@<!-&m)wsdL3{yl!7iLfTif10|Y>}TJhZG?oMgU7HDCK<~9mSO8%`=gic4)
zex?6DK)+@EqIm!}ygqS?(7684Ief?O<jJgCjdvX;kK@4U#b$ETb;G_i(3evX*9Z;@
zk1g8HKSsX4R#KM2qcEXRzvbFYuS7AE8Lwxl>BQ)oc5+gZ`7LtTQQ44XZ9H-}`~v-j
z17Bn{lS<MHxKnaaZ_0iB%)nQ#J~o}XxUx&dr&)jLhHcAP8d0*xL5}ve5WwyLR|*A^
zugtL1)MBLMg90Mo6Z`9J+V}-g72a<v@pmZ(A#spGXfIz?{4AEyKYiz^^9jhsl-nce
z4pf~wZvi7>wYL5Xu7_xy!)MXKsUmeylwNFg)X|zBvsb7eeN(?GwQKK|dum%4>G|_-
zA4YL8vEEPuNl(q=4)&2)H6hI`5@}W5H4TO+l4;bLM>(vH>#Ct<Av(%YT-|D;vF9MC
ziHL^Qb#JeB$?xuOw#D#40jF)yA1mytvh1<nOnhDUY}Qd5i_2PNk;62|u&EXryc(l@
zAd^lJaEzL3X=-k_(ixT5w#roBq&vIRpXz^jSTqdAfR~sE*l)g=s3m977Kg*N{Q?3M
z)-x4BA63BwO82ZEhvqjvXhJ<KyC&tCH$Ia)dfN{)#R2>FXraE(vmn~Seif%lJmqYa
ziAhJvpJjl9d+|X3@}kZ!^IuecdOZAxaa<DV&t=tQXm#Yo#BXfioeRxZl^@6+vVLGY
z+ZHxjXYa3ATIf%VPjcOq*0Dm|&aULDY;=l0d6&lSM4dh(P9!k5<pqbvdi~R_qw7|d
zZ)p4g--X_x8h%DRCGz_91xite98gU~&p6YaHSW!c!Y5;W%qQ~u%$utoe4O=iCnX75
zKrI}=*>Hu|QWa@jq2&p#$pC<xAkzKr%zEO_HPru!#{H87@n=@|m*aqxuN}-kX#TBd
zHI8<3bMwiAc@S`-1zp2ac@ybo7;hwUwl?4q#9|UXfLBYo!g}&o6siKCUT@HXmSlA|
zs9>dj&&$(CCT?aeesC~86sR;JH-5ikJKw3eFnd0IMJGo|4e%QBzz0v91GAodX7~`R
z4JdG$F11=iHeByYk;llBZX9d35yT@-Whj%7S5WZr&b$oB@SCK}OQ2rpr~)K6PJ0TZ
z;vIGm@n!ooy_{~?8Pnd^*EdP=^M>PKP-3zCQDQM#FU{NsR8N+(rIi(({VIII#OG@o
zQ$VC64?s&mT%YYFZyXa{RcdBG*I_~-Ito3&Rjz>fa4EAh0kX{Hp33=-_}pYk!Wf=T
zjha-q{Vhg;x!zQNN<PB?wGf^dn1J0%<U-_aA3_t%_|5QWKaRSLEamKxQ4h_Md$<U-
zV)Zej5I7|+#&H9tg^JHo?qd%<$iJ7YEHV|kv$k!!nLr1T427h`UDLiaY2Yb;>9lM+
z{{iT{W}|ZlCi_oT#|tNNxY2OS5w3dsfCHUkm(n2Wo95)79*wJcJ;PI~-fahtk)jv!
zmyDcN1Nn$!`BpX!EJlhXV08S!j}~46l#L_9*o+&So12*k{C@KE9mAEfRDT><%*Ep^
zM7y`e#m&74fCd1;HNs$1Wa7}Gg)mRki@5rGwmpKBjO?nTBcDOnOlClQ{1aPS*9^8M
z(DOK2YF0%|mi9j5n!(0SSOm2D3c=M1o9UPAn*3HV9KgT>w6E#gtK7S9T~TXHtgK4q
zmT-l=)iK^v01b|zKCQ*?T6K5-`gddXH{s|3$=)<nG?aOJsq}zpV?CDQPdD!8{_h(Y
zKqeosK{qe|B#HX1y!-sQOzI$WleiyI)BfCV_aDc>YlZ^|Mw>8wnOA=wQ~bq4Bj!g2
z;H`v?sLwy=#X2uWzmFsB4v~=;|3MoReQ**kqx1}QPkuFL{47EC`KH{%0G8}`tl->>
zpFFDnu`4OYxN3EK$JXg5tqlM1jsG6ke~;_G$MxUn`X##ZtHoKbjwaXx?hSCP_W^>I
zQZbso{tt#Rs3b^aut^uxnifuWjJs)jm%K|SI3Xc_bG9?RW`7F+#4W3i!^cFz_M0hr
zI@N}PcY5B50UNDo(TV-Xm_8mI%;9LA?a-B&2;cw6W<Qr0-{ga|O=MG!>uV4F5OTw`
z=`?UQi@+&dwpUW)k##IYL{J~q$q%#&sKB9}<(9y*+vdY1YQS<2T@ic1BE<FJs`!5d
z)}Q&^6av66bH8S3tlTPF(Pvj3lzok_Me6F*VH*$w;Azygc)|>F?9GX*M*rMQlXy3r
zcfrXgPQao6u+p|ezSadLU%E7)lyXmg0#IpyQyF;baYW*>UzD2$y3nEpv8PgH;sktI
zgezyk3RF6_cKu^n)NAG%fF{J2_TV%QRNOjY+Z4OMrJSp7Uro`#t}|Gi`d|t8tjp>+
zr(3e+r(5o;E`DGKuAC2bq7FY>(*F;j`JE59BG$?0mIemU_RHp1(A(}h?g&rO`krFL
zE+tf+miZAN^#?%XOUGz%u#}%~B?klo0kS&_uy`Eo9;MmNcV%i;&f`jWJ|xbw0+ep8
zGX#q88fRSNda85`Z~YEv9Waa;aw-D+!~qKMK6dM$j>U<($^fsC0_GVW&YSY<vH1sa
z=O7h;zYL-k&f+$bVPWQa04OPyH6dqUevST>eDlMK$#Q#yD69-Q&Y({?eMJPc+l^0*
zD@`q?TcicWgZ|JsFz~?Iy1)`%kqAb=usFhNaMk0D(4Q4l|JS+qVtn}28jq2K6%0}G
z-kj&ohEfZ%)6pgTDyakf`d;1yV`yA2Vn}-Tdr+V3V(97L+C_1hPNd}uIIcYE+8TLV
zztmq@yzc?HIgv}(#mt6s3N^C9m<zP&%<27ogTiIA;kR{zxmspsxFG{BsFh4Qk4URb
z?p>b83)gu}M*HvM&9}v#fvAE$5s`i4w_v&S_)Jia@E+i^ZSS0z$m0Ml$?vV|l-tYI
zuWfG{NNE8R@C}<b5<ms8!OvL%Ck&YMAa;s~wq)4~p5%?*T~7F<I{$0NKX<*)?{NTs
z#HSgHOS->EQ}LB4LvppXZ0FUU<4?sHZl?HF(RgS)2z#(9Xcrt46O+4gOH9m7U(bg{
zv%>n8GIOmlIqiAZ*bBke&DMm%ICS7#S}WGxpjKT5vun=8+jSl8XQ|{?g%Ag|Q-fC@
z#|v)lEY-YTxFaiiRFc*m%?A38q_p%L3JJhas?x_JT!6oQ&xJ{!ZQoJZGW5-}$f>lP
z&fnbKb#PN<{+S^5r=P{(tn&QM65K`|9|b3>Mzh9BOtKRjeFSgz*0EZOJ-zU|T;&7O
z*|s>z?r`?pckjfsU>;f=LphnrlF;F+8OqsZRXa|S&YLqmh5D^LZo_g%RW`}F-KU9%
zYf*fFYKio3CWKt44CIL}HBRJ8Z8vW1qCtBsDdAeBRIIjhwP2Hp-4`7nf&QOUgw%4g
z<jm2xUBIB1s&karfJ%?HKx)@wwdru}EQ2}+vk^S*bFA&#HmiWZ%Nyl@C5=08E}#&o
z<;G(tI<EUwOe4QGqwSBDnC0^=^}kL44MF+ZxgRdV6u~9Sh3QW7@i>fENE$ZW`3LhS
zHXft~nNjE=n#Fy0F}-XFdeS3jP1uDWw~P*AVqd%Ss*}DB<SE;|8%Sx^ztHo!D~g<y
zG}XaE-E6<epsY;99RWe05PSz<pa==Gk}Atkj{M8B6df3|p}fVYsb)K1lG7O5m%5Cr
z;1{@?X(Qz-#DN>bqVv?`nQz^}ITXZC?hj-sahj2_W8{I)>G5Dwnb}a{G`7%@<CC`Z
zKK7j`Q^e^j3K!-5g3Y*JoVolWc<fP2+`YB?;#VTxv`qvozZy^bJwnrSjp2oy@oA>3
zfy)7x-?SYjlpb|Ec9q%^&OaV<&YfS3LOLQ#2el7McQ+2>5$Xt3&@FNu%_Mi1x8)Ot
z%MI><G+0eCmDg=j9JP^nDk*P*gtu1qGJs^6c;rLpacPxr;`al1hJ1451~iIiD)Hjq
zm>>T1PeU>H48Ys$N<E(MKh<;2Ox;pjZO^Y^CKO&NU@l|T$h}7YsPw9|UhlG1)01{K
zNK!8_PbW!i>5vE2?xLxBfP}zBBkhSj8lK`?EuLmN`v~oWz4ii+gb3oayHBq7{2cGK
zKFm7=-FaCNjFZD5@B{>^Eaz;6ATymB{TfL9e5gt+`>w_(tn2mX>%cmAkd!yMTz2`{
z1?%RuU7I@_t=RgREKzd^1oH)cc_ou~-sCN$5n9pi!s$9N{?%>x$ozZ@6k3Z~iFTKn
z#FvG-@`kIMW)cs<FjdP_{v37hsk;~Y(#J7ozuss32L|pIya#V|E4{9As%S8PXj1sl
zcsP-2gy*V|oDV*JQrpd0FAD!6V;!}Y1N^37T|0YqOWYMn6{p;(%lL|L55Z_&i|_$9
zk3*zlddpHaA6s8*CSw9gIl@81;V`psS}#PJcmD%QsYX{~5+9=DY!K_Ijm=rYJ8|-E
z_eGg&C>P+0_SeaW|1Jm_&ETr;pWC?~qSs0zV6fUJl)C@GU~L?!7icJoPI>aF{!}Zc
zB;7?StE$ZN-jq?!aeo=l`^TK#|J(mTp8(oPviLbXYd2mljHSz}9K?DYO_lVyLJAE=
zOvCVg7211u!lp^r$M76f5VLp5spl<z{s5|jdpe&_Ga=4%p+_?Lwoh(RxAR#Df3_8(
zVgtQgv~do$x;va~HiVDNZX|;RnjmW<;;{4S3C+Dy9C7Y>9qa@9Ga=CA3G}kjPWgmo
zbp;B;>Af64&H0-Qf1RZ7GOua>HHW3~n^mjDR(5dbdE?=NN!fUfb3gw`v>3hT=MQFt
z3h#Pu_?#f>Fs1Wox?r<73sL&|#fPh1g3~D%T@2543oYmHCwE7YYMXtzM|6$kFDKlj
zRzN5H?oH?<K4bhx?z`j8M!a<gbWYbjh6?q)QKga*>>E@57mK#6>UJD%m<_TXXhvye
zZFTY?nnum?UJqD}IUG4zHb9R^!hA341o?ARU5j@{FFwilY?S6}t~*#mh0H^4{{u1L
zeFUgyn7dm0Gp$;YWuwg56CgcRAiYkpSU7i$7&Y@18?`D(v5`JMNfcxdp~Y^ds3!If
zOq$V0Sh^b7%kpnD@nai~k!oiTWu`afHu@ONOCnr#%n_N2xR0kCrD6W&1;BsKQOEz1
zu#TS!vFb^60k{D&*Xwvq%5^)Uc~}IoP&I4-aOtXiU{^-3HxeZurNunn5nL^}J?`FJ
zJFCsOBf1-9qz5$djrX^SS^)kd*y*bN)WE-y62cs(Px^m*mj4_B|JS2}^w`h4E(x-!
zFIlIjR>sjLOa9$#`@zhDooy5X%I480B8UL4WGDAF1c5yZc(pmCX#Xme(T?MY!BB<m
z%zOO&;y*UFTLdd^UQmB>WPTL%Lm&1^P1T>GeUGNQzA!cHvYgva1My+=pz4FWatQKG
zrbZ-pRxKMQNCsB11c~kruh`-T+^fGZ8)gMN;vG~^c6P{;Prl1JO~;*W9sx$yG!PWd
zuT>jZ1o1CrRLu0YGsn$V+QR%<*kMWMF$L-&S2qUx9h0;HhAdO|`cu^ZUtj!##rV(v
zw8=)VnMk>1Ylwu~^htYms#8xK4PO#^e9t>KziMi;;?v=lXO8POC+FT9DSX_@s1`iB
zbwkTyK>Wz>88uF=9&<d@QsMAER<n;PPrCK|<OpgMA99KRk=UT8#N=rmk9~s@lYye^
zyPh6sHP+hg-VxM?{8}=>)r#A@l>pgtPR{yzZ;<)aEavmIL>a}trWrMY9Zj{s;7Tp*
z6Ugk4tF4>u96E-CE(vfJOA20AK{&Q%YdS?y=7R`o0WN%1#_i_8;c$qo#B@ubR7o74
zmA3h~W#isqad**l^YhEhvBr%5#1TT_ju58=o#&yAc}YFmn~a>W=2{RaogNZdJ&dOo
zv>UCnKE#}&4M5nhsP1X2RfuOfEi&BJ|M<>JEk?^>gy-csI@)%&a?M02ZtDpJXP_G$
zeX>TaGQzo#Z9&v{!#+4pPJ4+yMP_Ml8qR4uZKSFigel_>9U?ukR7Tq(wdc)0CN`>U
zd`yOhua6iZYo|tRri=8A;%sGN;Rmhfy_2|r$~kN?q=kR%)D>i%pu=dUEk(86BWRwM
z{xDl(vd0nHdn<KSC+^TCr*u$#WIyrt$yQ+3E9!2(P3}jTZtWd3W=`|@;NI9My{~rq
z#Xs@nfPXoNL#ADb*$8do6Q|BzD|sNgj<8AZ8iB6E&`a5uL@hPP?fP^G=4A!;XBIp$
zcno<8Vb<Qjh<(Qgfw^kf868$SQR9BVznBt|45q$r)Ssej8h~g~0AF-hm;I=&PlavM
zdsV|I1N@=PKx=Q@b)hLok|?Iv#c46(vBo+Ns`Wfs4d(>*_X@!5Onqpj;|Q1pE7nvt
zW&xRkr++!b6WA8#PqzxO#|~QkSn@7;CTybkk>jEU?y0@$NVT5%4(|3+7J*?9L>H=t
zv<nUWOQ+(>5q<<+qA)pZ@NJ?%mb|K}^&=4I17yZ995Z_56OK^!>Q!1Q%Ys`qyv_;%
zl_>ZnQ4cp27-(qYbU3sfa1&5s6#LKn_&1KKmk@ZDZ|_X;llD$NNu+kV^5_$!<;2wJ
zvemT<F2R(_;JwTNSN+Wy{>@j7z(+(us?Fm4i_rS|mBQW!EMXanpmkG1e>AagHw=D2
zVYC~_eXz?`4gjfR^F}Le^+yqf>kR<nkph!Gi+uk3JP@wD&%fLhc);!$NJ|5F0u~!|
zo$H#fevn93?}q4pe_!F^Tnt2A7Vn=(VlZ%c68I%UbX?h95>gOPw~A`aNn&UO%t?(<
z%jB@-;lgpa|MBCaWm=-~G1qkyuk0;l=T9AC=35r3k?gi{$<=gJ=_nCl6`fj>C=rbH
zC$EiReQX4c=fMO@uXI3#MKK+<SUVN2+gLO`9q%f_J8s>`Y~qGqWaM=E`1X=VJDb6h
z6&SO5wqhaa-bn%$WbJ`vti1}t3H^alN=YO4e#pYe)(d{ji;H@TsS)gb60avj4pzyH
zwihp^$GJVI+0(n<c!EfT|K-`*-&Is~y`T83qf_qNY`nd-ak$kT#wmRG>dF)dW`W^s
z8Y&;e8UCp?ql`>eD>iI4N^m0%glMou^I6gE0JoEucDuvIMk`$_BlgfJr=s^kVN0}G
zQ&BrRgk>nxG#z_{^qdZn75T8{KJv0%qP<k3g{z%iV_;6L7LS0e$%oGEypHFN^4t&@
z2yFcE?X6Pup2ymF<Synw9)?lqsj`nT-S3XQ$z8X%QoN@;-7+#BM!q1ITc7byygpHR
z5$J5yOq}%pz#7quy}b%br2dq&y1#Mb{`&fb*Eo1)<NZYFrSpINZ-3)Y<U&BUF;!61
z`3K4yv8Q5dpum~2d~o*FKL8j`pU=R()6SEb$?=cu1HB{o)F*rlCx8C!T--wUr+|PF
z-QQ3CH&*?xp*UC&d}?J3@ri%tEgMq>Kpjh)F8u@VsDp#?9{1?XxU}!F3x5ar{pHy6
zFaacZm1jrdrxOxx>1SlXr>><nJ^jnS^LLK4S2UQ~AQuvi{%7{#2_w)b92ND%{?706
zmxCoH4f1cseQEc9W*`0ybAR&y{u}20E+O=9nEShd;NLL!mvH!hi81~SbN`09|Kke$
z{|U{hX1w#n9_WbwFq9}Mz6IRffO#TX_Ci7YzG8pL<-elNZ-0`JecXRqAPul5Lb-s=
zps}snFMH@eOO<;bhOysLwP_~J?up5Qg}y`C&bN#K{Q*~>EfT#oDNZZgH;j>NSIO10
zIlO{NrPhi7w^Et(TJ5n9FH^GGG9`bo^7L&h1_kAbh6(t~Q9R3;eBVd;UR9UnTqd5_
zsI`*h$py|Ae<k}Ny8Z*vH+*js-n@ZvT1e~xK4jDFoTa4mk)oa+<J>NGX924i$z!Gx
zC52=9cZY4e0pVzz(v6RcC5J*@Q!&AQB4d%;TMtWr@H}M()p1gbJIo$#HY2g2LlnjF
zQA1Ij>_7NzYw%gmEJp$sZ^KTREKjZ`J266wOp?}FiN^&}%8N(Fs(QYa+WxW7b;F0L
z5hHee($ih9uOyrF8HNq!ntH#!a<@qzi!xR@iuLgHvsW+AGgaIH;I=>&Ka^1M9->{a
zOcfq`>*5cvxazORC8$FDuvX5kWc7046;i6*np0{0=YD`2S%33tcBfIS5a*!{otnfi
zN9>my*O*S{?0|k3{WdDAri)NfTF{KmwC%KHQk#URoL8B~&l(JW2Lv_B6YMnwAKekf
z-9do%67`s<adz7o@SNHi(t+MOak6RVLrAdzXrhH0#naFQQepX9Ma#DZ=T|D$qRomd
zX<fE^7C!1`Cyb@;f+PJtS8OBjo<t)4q9@f2<MZbtG<d_cTozY~e@GF&YryMm|Gn-2
za}c>TF^=2+l)wkg*wn#P1Yx7y<Z;qGqrrT-b5!g`!hI)xQ~<su_G)(ivJObF4vGk8
zJ{61Jlsn5MuiW<yB3b~8iQkH>L}G?54_32nNR`dh>5sh1#vUDgCW7;P5Du;@J>Vsc
z_Kp}n4hLkBS<UWJ_DH3NCt5Lfba|VSBFNgCQn&xivE%+;V$M{rJyZ+mRn$$IRTFg^
zn?Dhref@*9CMJSs=y_n_cC@pin&shsj6l@Jk6FE2)28`ukMaJjr(S;a54QMxM)h(3
zu`ky=JItGf#NK|DXQ(Nm>!#qrXpup?)BeB^89Mwa80Od#14c*;=(w(yCWFS6!tp2V
z$|jHLJoa=Sx*}^Mg<TzTs^Knxg;`d0SxjxW0A2x|7Dt3T`OcEW4U19M>@C0~3t~hJ
z9;Db(Sry&Kk-!F{T~XYOz^6k3-k>mX5M3@YxyX`JAf7rMBZ#VwL=TPuRhnCWWHvnT
z9G^KkI4=1GTKMUEfV?W+V#%w}o1|Q%MYv4|0+CKPr?1MMw`HluUKf3UY$b!4B<zfR
z6}Cx(bjODa3$4m)i??v>9g#5FxY9mkT0=4I4*G<;ed$2bDtfuqG&@%%$#Ua>!g>;q
zbE-?Qc#Dq+##1)@q+QiC)1?r-B;CG^Z6p$HI>l|+6hOf}wG2im@(gKmtLGKV+^`(4
zP_V@bM(a}eq3~Cs7}s3{oyRMkBhy*qij^YR%ty_bAME2h;>*{K*2ecX+p%|QQ^WmI
z!_~9S7X@493Ai$apAImE-;r333iK>}!fGa5937qYqr1MB@NTLkhzV#bvX;t?qzW1D
z(x|Mc6Fhg-1`qV1q8C;@55|Zg4@7I|1Rmeh^jzgpyDq-*=J+q4m9LqPx08XAG8?ph
zWYRa4Q;cp2fr@I+9o{@bH-AWvCj(3#hm9rH9p!5j?;#+#3#i^Z(6x!_W^%^RjA9@X
z*{s?RwGs-hT>_RSXo&0r1$f#{JZeMh`lCnGF2lOB>>cUN3ouQ0drdC8dzC2O?Ov(r
zrwBS#!|^|qZk)=ZpB%^+H0??av1T<b=<5<}B?UY%46~D;eZ!ThMz1)KuWd<%EN>n3
z8a8RWuDl-5vdtyq+{}|V$g`O!9cpPNKgVio1tzNcQ~8|p-x)NEDRl<MlVPA;kO{Ov
zMGtD4sG;t2QT*kIo16x1p<JuITh?=GMv(ow>=((zARU;>(I25;doVgO)>n4}RbG*1
zpMS6TyzwLH4`8PkgZigst2*D2Vwi90(hvuj3-JhV5}zPpcXN=tuU$gLRB4~!Zur8f
zw$2}3%VS>62A@OD)#|KC{LJ?46Ner~31K@PVDz>G40A*PK~EKTPc0+|1#C>Wa%?Xd
z#oMdI0-=D*UIe?{H*Di0!wFv1!XI-48pS1>p$uZtaaqxAS<yXN2Jf?>g!b3qBf(M}
zfdpujj&U57Wfjxzgd>bg|6U?KxsF|rICAyr2_iq1{3_;fHNz<JS`hb`W)iQ(Ce;M-
zS|LPeU8g=UTb#Y;Kb<>hDqj&%f7_>}r`0aMr30J4lmLFJYuR&6d@P94U6xFS({g2a
zxO@ywkgFl2IXUS=>(@xQKP|ot#)1mP)1u6Cs+O`uO%5r+g1jyJ)ekm13#=)xNOFSV
zp?xJEOiS(WAN}Yx;*8?s32wX2DfX2l1;K-}e$PmMWevsN3oVb2(pE1*o9^oLkBI)p
zC-Z&SAvb;8zwvVreCTT5KpGDgng0>Yy%>&K8)UPr+7E9CW9QHJ)U=-s8$po}TR%kU
z>sPOqLqV@k>k(>#oNvPEcH-KL2<;%=<vfi&5u>iy;p}DFjnV9U!&btZ+aDKtwq5`|
zO{baVqK>b2dYt-chKjkW<!RI@T2*7PD3@u37Kl7w<+-krS`2A$z}=A({Mc~}r~T3x
z!<{nla@j&3Do539wG_vX2T5^M{vPjkxRE1+FXm*nB*<`_aII!Kh=0H7BEGw(&A`A$
zbr6ky{oy{R!wR>}9EA}{*Evcd{wg|G%}Lh{Ywx7z6VPRxQvRV%Wc^)ag~4!v_|b*r
zyAtzVf)JCF9F+Xm*{dHLCtBh=0;`K`iMml7bE#}t%ebQswf)QmZ&w)5hV}f}%3pE7
z4!QD<+I6OO$1K~sO3g>Ow4D}b_mCh)O47N9(ohLFS&!Qfy<gcX9nztL9j%hdTV<ve
zRb{3)Tl5?bc^BdY-<3+W+WR3+D}}9k!#Y+Vt{Og`?;FmqU8`b-YDfS~#ftAWW#xQ7
zrUHkOSa?lm*f{);BX~fl1z`12xc=F1UV#64FPCE9dDg|#6vOtfDu{{6SBT@Q06Gto
zEC+WnOeR%%6$UX^nvbX9`;kfjjwP9o{liK8fykq!7c4agYl4M4;Tndu>A!flCb%&l
z2zg=-hm9N075(x87|WWM6*06dxg`p|@^+vDJb+GAM9^VJC(rjecHO68-?mGHB@ebc
zy5fpYd&zF2nPIeUtE+!F?Y7T~DsbdXhusg+2YOCd9XSz%fBn<*X^x@8VOjb6w|<GS
z?9W>l4n%gA!@FA4l<M}T{Ef%b>?aRG%Mn3f^n?LIk-v#-m5(FVb#7#%u;(sSSVar4
zeqE|YR+%}l?!>f|gR54D_tvgLe9=|bo*lOR2B(&*U~_D{eEVFn965<i-VfZPfRMdX
zjndv|Am9k)51BKB9TB|(a-zy<fou5*o|vtK!i|?yBr@MDTg1vxWY3kmfz+>QScG>y
z=3{Awv}~mv))FP@0tso#vOcB))$#R;pOw?zR}%)wxZ$DxT!ZD%P22`Q@k;8v$D}&x
zgGVrR;Jh_8l+EXB00PfzXfxiAj5n-{#}S@b_rtBeZoR0~h@jL5c&x08D2(D-x67QY
zeBa9-BwVqbKlZc_>?r_HLp`Rsbe?VqfO{hMMpIU7T|!X6lQQjt#hho!uX%E~TdomG
zQUCtJm8logu8&(~MP@_!Q8in|-Awe4ChXOlfqkSH*(Z7^nNu<4XE2I$2&~n)Dml0{
zNO4HU*bjAzfF0dC=+FF&B}yi2Q4{#bes%8_5p+rDNq-nOHA&R`{CM6M>jPb@OTWBi
zD+tnT5L9T0On{&zOjwZ5Y2hP3I&y7f9z^7c-4RBNz{(sKkk$D)9Y!i`9S+}$9$v;A
zM$nxg$WrK~n=y#cri?gCp=r6puI1pb@4EfUqI@i`BZeB|GJUS6yc<eJ>McM*)X)Fv
z-E*MY=CNp|7g>9Mv%n3=ezCy07T?);a%4XwfnR<vkpQPJo};{x(Poi-`{^%U>g4yR
zUMt+M$6wrfhPS2P6^l%=Z!a}F8fE`hOa8aA<ZT}Q!<da*H_R(E`|}a>V^VS@-Ea5W
zsh6^(HxA0;7n%Os4}A;a1q;7!)_n#z-Qpl%_d-97m6^otz^kNVoHk~CXSJEwK4F%1
zuzpZc3_oV4nS6vu5#cl)_*qlmaot{_IB`-t)ZGK@xqj<vdAo??$}p#8<!bBGXT7s6
zRC!SFvZ8^{AC{v^;Lhtur8Q?|=c%VzY&?2dIGxb$v7l20ipggcQ=9EYjmdWr7X?=;
z^mq549-;ix6Wq8C4x2(`n+;dTA_VIqv|TtI5cWeW<2@75!1~)SA1C<xuz*nuHZ~id
ziY}j~b6dZ4Xjm*=jCQqKrEFxmeht-t#eO1Ba3?E=3kVT7MRMxjjmmO$TqYaRc64Vg
zUMcdn^}%cqZM<(JB42afda}mWIpLB!^kM1H!Jloar<InYB%f7N_ltwC6Mu(DXzvsM
z+=9N|v@{=SQbEB7yP#jZG*6S%&N3WXp{*tl_qV3UtYB=1e4OOZZ=C*qC420+ROCCs
zJ~$NMdyz3n@G}4}#d}~3D=MCYt03p@Pn09>#$aKs(?<4roc}c<e+k^jjx&7QL?Uyr
ziSS6Fn+^*l?t=$|8dfw!LWlQ!S=={2wAySH#7tM2VTg;3y7R0_nj1;uou)SU7oMKT
z;+%T*&0Cryt=vEw^fd?#(4oe+3MXGug;&BQPMm5nh&bCB1g>62R(E=W2QgKdMNBEO
zq><1DC5$pm$R^HPpY)--dmzpCVF}xB?LEb}Jr`ru5_y1xUT}n8C^qb5jvY0bkDCsk
zEWg|M@?5dLp#7-GRoQq=g9BW&5Af_@?FXxUS(*B#-kn%$Hz@JYy`z=>N?W@zBg8_@
zR+smNk~2Ls05Oj)oDQYRyAFz_a?2PAYx{^FopL!oJh(HeR<%z4$|Qc+L)cD7)jn!6
z?*{?VgTkvOUmqWm(PAq<u>Q1v_Jn>*(`z5>CDQ^d=2VkCA6&JfcRA#0v$m@P+r_Mp
zAkwKi&xTElV)tb`A~~;Q>j-J;_GeU2?dd~vTV7r1f?12jT2J|^#f%a{R6T3$r?<LA
z+Vgf6$+2y4KRN9vP^PH@t$#&nnb%^fIfBtJ!P6H2j15q#ajXHu%fiHRNkg#zDMj;M
z%SPf!0_CU|-Pj|8M0K!RerMV17LuIi7Sr2no6hk~kQ}U4>nOA56M{oS7A3aPd5-`9
zZ}1LIYk9Ge<k-%j)?<C^%Rf4q_R^1*1d(J7q)S8jbU4e%VYV3=K{WzEZ`i(}Lk=u&
z=V3RfvcJocc}0`GKlls;JDk9g>_U24YPt_7t09jt+v)tJLyIHx+t2%UV=NW+5;2#3
zXenD0ti?+#sy%dnzj*cGtGsIa54fc5H09em{q_Xm`ygaNpG;3J{w;z`MCp*Wpqb*>
zB)%&c#05Nym#YV>k+M)_6}42&iS3UTbst(rDiM~25<=+VX<+ZehwP!3^Yy{&E+ag>
zk-aaU`8~i_<)2N#(%mgYc-TzqShZ!X)$|2@MwtnU?`|dE4J1R)q?oOgD9($=WxZq}
z;lUAI0iedY#Am4~wE6Kl!!!PG?#8T*nXCsOdXJJ`8x7b7RqY)#qh_K*?amKyvKajt
z5=3aI_S4rGQasl4=mat6<){Wyq08T0P_WjflJv;W%oit8`5YwjrmdlQ*~VS(c%A6I
z2e_Jj_o#AXS|2G~ZJ6-Q@W^!~<C>-}7)V<vanM<e)~Z?|E61){4P0_x^<mi-*a@w$
z-&;3-2o>FUY>tURgbLQ#=(o1iP3!_o)|gSk-f}@qad#<co}7@<l$Q^kZ*DofO1!*V
z6e~2SQ!ecwf_JTBueD=k%a?IG0Nn5>caNn-BfXGL-t2I9`$kefM-j(0N1NtZNYlr9
zaw8vzS?}-gXtYe(WpO~5iqYZ>4Z36jKX5?4%{w#WuBf0rce_Gd+pvNETg3Y>>$LPt
z3_ir^&7w5TlmjMGyJ(<nCZN6t$ZC$|n@7Q-M{i*n-^|IoI~CJVs2BM;X6|R4pzM&O
zalYeFBiS9#`RJ3x$b7$J@zre7B^Z~<lbqV!(OGzXIl_agodf3PYukMLWLg~`n~IkG
z0GGudSnZE6nQ7be&dX+m;db%#|0FWt81@y7vvt_rhx$+xL$r_PpR_v6O!_o~pz?U0
zz4p+L|L_$Zvb3y$^qW1h`Yuw$=q{qTE6aKi;fk6VHf?7s+OinSqwAKA40f+Wx3Nqg
zZlR45pd#qVOKu++W_MrD8P`ACFI*{V598MX#zjCS6d%aW7BVLIfx*ZT#-dj6n&FCx
zmmB*=2?ni<HQP^0)Ep=9k&S0?!0`dFNcby^mHuFXPaj?jMoHgyj$)j|caAzU{ey^`
zL2%qz=QE$2UI0)KDqY%tI%t(PzZPwpIMgfp3_O&YKK1lyx3h~6aK~_$`3W5Hl!(c`
z$k@Uz=*aFST6Iv!>GVFh0aa%dPvKcRiC#G%6kH`~w5rX0_)5Ho2OaP35IeZMouLEs
zP=S>-l45}AsdX;KoEl`et~^IX<f)|Tva#^<9$!PqHEJnO`fOg4H}3hl*52gWPM3Gb
z-OC$zBm*c(;{=hKhI8bgD3YYHaT418^n9d}1RdN!r*Pl%+9KTV!G@e~l0MFNtPi~@
z0KDvR6-Qly`V;m;Ed8+c!>y?{7LS$X(dB&T2@lUlzRN^3T>K}A(45A}Sm*iH`{}U?
zQ*QW>g^JEW&ed9!M~RDtLW%iEQHL-;0CrwF;$VC*N8(!ae>v3Ow!>bF9vSmylS{OL
zbd&31%dKzt?XSR4j{F-KkkthxDtEU43t&KJ?}@s2dXBnov`|@vo>sm$L0G*XKAf#l
zP7DF14@Z(k%%HbE?s%P|wR@CPvDvmUwZ+i{tdGp{poN6!)v{$xq4f$byQSE;VMdHb
z3c<+4I|+5}`f=g8dV``^is@D;lqw&_E*Q~36;CV3uAW;gvs()`rkBUE&RI3KCmW($
z^T8wrVc$_FDrl*x$@SQJQgiX?GZ3HekqgyHLND<=xidKmVpMpiG#Flz3?!Bf3}7Gw
zLB$J%6RnIb@H$}OhpRCpb=du^?5P^eJXu`=NUDWf?A3RVPM(|E`4BRlcfr#i3<)%v
zucjNia#G99CULDmmro+0Pqw?R+-!*51$C1<Tt|0**yBK^=k2ZMPQcWk+*c+lkXkgh
zRxKGZ;Q&3yH%zY`BgE7)?rOzbF0tAg<eArGJ4FCuum{dH1xu+j`vGg%uk2N0^`Nc2
z26)NZA6`23{WK}2b^dFX6!HdejBGFmSgF+t8m`7zs92VcSyi*i2=AxhSKmuKjXTv{
z>FeI}S07%JcWiiZ2G`F)cATtj*%;Rav|Wob5S`&*_Ww;&7jw98Gr2$C3>ul|z1uLe
zqsvq8o)a?5r}F{^^K=VEI?C^{P8io=*_b}?6iX=`fkjT1MfS0*PDkoP{k_PwNO06-
z3HD2ci6t<-Ca}>}f=adlR=}ZywMxdIo9K)OKByT*+19ieD{T{D99vtE0m3;ev&qm8
zv@rU0(JyPGdFKCRZE)svFu5xAp+CvXk2qr7v+<lh;%L`jCeGp7Mk9KYePiJY^bV}J
z+YgW)Br@q9K_YXJ3j+rMs;-?p_^s)kd-N*W&a=c5Zu_$lHucU&)A2pY1h>v+isL&h
z6zmN490Z8q6fR;5!eLJs&J|j$kCaZh07DPtx1C*Wy6DpKN)Xu*lrHB(vL;t`mO_aC
zrKZp|LAP#qRI9_7l}=jMMOh)*=O@p;0%tFRzkD$*rX@3d$4?jquYMRar0vY$uvVk^
zM~*RAa@+2aEL^-Rdh+hdM6SlT-4@$GWc@2#d2<&bEO51MTQ90GHK+=lVHsekHU<s7
z-bW(4!`S9`1nk$gSnWWWRh^#<UDUQ5lXnaZn1%}GHC2L2cCiVEN}HdbYzD8mL-e%!
zDjT8vzsU&9_L~Qhf<QlWA2_<=4I5RzMV9{(be8<Y;Cu|T2H^R&8H1|<&%a;$zhyr?
zgA=wII1WiXfZKNCgQ#c_pqFnBf=RHr=D1SH?GKD}M(#O<EtG|(Ay)@1bz;udB?$7R
z)nYwxB2F})8CiC2or{Hbp1QjyYQpjJl?O$XekadR07zVrZ1<{iRGPFudMCnfFn8?E
z^ONV8Ekpq`xDt(nwPbASP0ZOj3c4{kX$4p4!A!^b30!gF3CpSu&c1v|49tlhXY7Z5
z|7*DX_9q$3$DIKpi`c)A7aS3Fo$v?Hwu(L&g`=?SCz<S^pO^0~8P0|JTi%Z<iqlHq
z$8gz`|NlOFlE;gq?tKpRrt)Ch*rt}EzrPnx#qhp-g73wDKjGW9{sp7_y9@swr2jY+
zUjJU_e<RWlAlkn{_21O?A7J2*+V+2E=STNJ^VV85atg?bzBsO&lE;*UO`|M;R7EwB
zY`{+X`vsfWr+FO5(c4{J9c{*@nK;L~^Ft2}*H>oJ{AAqMwlgy3f{K?cDc6C!NwVeD
zg)2pJ-n|9`%8)>Z)lmuXf~Y>i9TkYPLG&^vYLr`U^hnYvt8*wDgVDAnmJ<SlYDRIY
zz>T60`Wgd(3&S?iB3&kq(uexVy~Hj`vz!Y6mFa}#L6jC>OVaw<b_<t(1PUAB#=I!D
zQr(?Ixo$bHT5sWFqIcQBO0jIL`|ilVlG&$sUJPrAM&0o?Gp{98vWddJPqy02f2nO5
zorxgVtO7R{lA&O#ip!yS1Awriv~KJ5#7E|3BZfB9fqa;iI{N}A{O#2-zIeCI4-KDy
zC8A-WH&v?CGHsjNwecKZ6JVURb48TC>p2V8{IY<mPZES3?|$AFGT(PozyNWCLbOVN
z>Zcs;VixAkJMuW>()CAT<|RFM2`q|1<=o1La8sQ1kb($d_NI%a6>!FxO81)GQ8U0J
z9*}nB7Bt}F3T&li7p8|vPQQqc&TxSdAf`L=O8bC;1X{=`^3gRwUjok`L@7I8QC64-
zbn+=0+fMm1-p$vp%^L7&`!9I>3sm>2`bxiq)cCN3mbXMc`=sME=?xmV>SYZNL3eGk
z`@yckXg&;s-T;*wcE*E8vj#7Sf9e&Ew4A(p@*E|}DO#sTrIuOS+=6a<>%$IX7TG`e
z7vH^M`2uvM){5u5KK~N$e!HL=+whrdF`C2!qV=Y15e2{XBWkcoq-95yz+f>=5@`*f
zdua9k9q@QTG;iSd3k|81&vgc#yUkh1JqNyV>)Uo~<NJ)<aPW)uz&x>BtKKY!k9!%C
zz*9R6dXy8tekV-7Fa5&&&7e0p`9I&)U{9}R22EY?N+EEI4Ml?Yt10?(LH9iGn0fK=
zqvz-JK#lyl163a?Oa>Zx9ipnBLYwzWEXK;leVJ(Tg3(%LxutFWM?lWd1LJmayV``?
z{W&*$Rj0#^R$N;iLl-Dwv54mvzVE3Z3&VXO8?#SaUNN|$cHo6xTo3)oYM86Yge|_|
zH7g4xuu8va=~04_LV9Vvf!{IzdyV6NF0{lg>1a+|`HXJ;ecnwG=Uum3_*el>pw!#6
z^=BoQnJnm;wQ%Y_;IRFQyG5#-GVO=7_&{W;!!c}8ys3?(YZcQ$xE6PEf!E-$xWu}y
zRldfQJB=8|Sm^DoPs+nQj%ak`mcDrb8gv0O*ot@||AWu;{`{Hv&$Bf3ZO%dNp?Dou
zhK<1p5@pNcJ8=*lcb;9KE<YJN1Igf>CmsNF7cozq<@Yq@8HF!A_mlnMOC+DST-6OI
z%+}su1GvGb<`ZXVm={Wrm3;)mUA^@{aGU5!mrWqHNAD~HD%V~q%0U!#%i6zrMvdNG
zr2_MP*n8%|Dv(#N6iH2jNB5fNkq!60ACF4eaD`f_J63ts(}objKO3s}+flaV{pA>w
zxZ;}MG!v_$rBvJ}@uddcs;K@WHT(~-43_*7WZq9J>OcH^r5|w;t5P?R$_VfDU*a}=
zcxK?t#j8!A%T+tmt_pSqD#V4Wbu+3b9LAd2%EuMbR%O9L(zx#oKnnY01c5ipO@0B@
zbWt_{&|;)@1dt57Dy9GV_x@b(^aK40$3fj;?V7~T&Z{y7VUhqxcQM;~01Bk1&iw#?
z8T=(&v&3rhU^{N+TKavbw48bHbvt${E}i|d9f!Ye(&nvCI3k)~Qdz1V-z{h)^xx_d
z%x@be5<Rp|dHZ~7b`|(2fbk%$sW1VQqXJb^ek@Z!^<~~30W;h$@tUhnR$F`1F}(q8
zwL<5SFsug<_XKf0t&(6GR}$z)F6<ImZW1|IxwxELt{pbdr~Ghhe^?*d3=TCFo%^=@
zpwVc~V41~O4l;;Fu!X&Pg&62m*-v0NPJj`p#z0k!4ZMl>xktVboNWmgl`^on=CR=E
z%RtcmOp2ZWmtPOCe>w~H3J5U0%5H8Q+!MoT*=cF2SujgDVkaR!VJV=zjW6xD??fK@
zV1m!<jHhsi)p8OaXSs9(e<NPqaz0GN0T9K^w%>x8_)*DAC81BX;L%^Jx_!d{>YH2`
z3<_qn{3O%7YB6m@T}fSX44l$r-Nu)sL2P)pQ+A4ydUG|(hmDg1r+}=~(XgtB#a&q4
z+-w|8NbjzWG#f23@%2!g09Tmts!S}-DA*m)Tbon8R;88z68L-ZRs}eHU-Ty}#|hH>
zI<zTHo1}uMQ$0jQ4vs6pXawvs`Z1{y+HHfB{%t|PY6t?Pw9rn!BCfC52;1wT4Mf`_
z`+7lS4fh;)D>@@#@NzkDta@uR<`NOo3h{gFP5Ow}BCr_LfHwIN1F#T8g5BxCb;v)A
z;bn7;?>%Hd%*4f~J|`5oMhOy8roFs3ZgfJt^ITNN5fGI8Kqw`R_boAujrZ?2TAa@)
zB1oC1&!v!!zQIJmd%ycVnTGl6Ttu2tl2inHA@Df1p5q%opWuNu8Poz%?zh_Y#G*GX
zLLkwujL4eRNOWtcgGV+&jL*(3YkNrYoeNq}LGXpSn!>!G5dFNpd)|29SO@dwP}_EJ
zGK97S(NM9emt+);&nI|l8*)pHZg0jQ4%6<?iSlVqg7F0b0P9tLG#cgK0oj41ZfM8a
zn@D7je(ZWEFI-8b_ij>&7lVbIy6XKH-IIjWmxzS7<qWh8sSLY>QRC*^$_BGIIz85|
z_x{MqMDH*#5s5z>Oqk$bE$PD_=n};q@^62<&0@X_GP@+A&b?S#pMb@LTVu&{HVl$y
zUeWbk2HHRIb6WMbvmt;ifT4hzww*k9b-i9I1h&$s(MsES;^liLG)v&`<+zazlrr_(
zQp@s-lAj1z7Ei6<EJ?+5MG+9pW(2GWoD6k-9`Jshxy4GTqKuj`%p~r{PBk#18%<t{
z(0p=V6W~Syi;zJ)#aa?mIW<7R$)xa9lH|y#-LGFbaq_I{LbL|{yL-!#60-r^U9Z4z
z6CpT9a`Iy~B%f6^DI-P9m&&TfCh_+DW9JW$Fi&3rTpA{OC>K|h0my2xdLYz9dP^y(
zfO(!Yz~nz8ewz!JOR+~NBeR<3+qapQ1am3CRPfpd^;EO9c8PW{6R4OAui`KF(1J|N
zi_O0furSH#gBEv&XNqmv2`#P-XBh7sp?6rOpTvJJ+^KvGcLxiXE`14iLbz}j?4cPC
zr<7OfHS{3~kehe{E;lJ$==EsYyO+DbnzArA|B~epfj!cp_B`BRK(p4JNoMz90T`7L
z2SJ!Ef|-tM0!&d9$V2K)kW!wMQXZyc&?mid-x+|v-)dJ=lHSa%WF!Z*!EbCTwl#oP
zADljUJ>ZKWg&B_C3Fp;IEzh|2J#6^y4Z~+{u}6CxT)=2u{2q4gEJ|8z8%uuEu~XD?
z#?j*VYhWnRutoU<ek(H=j3fF?_SUBXwcFL3Z7llT!YEemS%3_(4j!hI7EXdGK`6O_
z%?|GFJL-%%87cOy+xiDnlPAM=;s(ciiI$}DiO5S?XuwQ<j6wwtq|=!kRXRo8Fj2@U
z>3u-T3!;j#Z^26v<Ja+FOW_g}dBEF(*=rS5F?$7Yh^r<@YVrW>0-rEq6Nk6?ChQbT
z(GTknO%P%dILqq$yr}r;tWaf$R%r)95{%peLH)frDGoY?<rNEPSd=Q06>Mhf9A&jx
zD1DFAbte9ztq2LTwR~xBAiM1apmPeJAh1TJ(T{=H3hd<VrV?ndbt&hF7cH127%b5D
zV?6yHXq|)X0a@gVg_AR|Hc548jP4D9nIX7tohwIlrHh@c2)8Y1Ujf0Dg4<+y^5{-l
zPytx%rp5HeH1u9giF1VCRMBzYS&_c-0k*B7)N7BdMZs5c1yZF(okDoiYk@<<pexmZ
z${Y+8*%{OzaOai+pV=*PU``DpssS3z(^|!4!Pl`MtgEg$0bf%+@Xn{2&Q=aFeJ>fU
zw*xj_v6mxRVK>WP16=Hjf?!0KRL;dTq{&2a(UTSmqoxI*dkiSh@6ln_eHO+mZ6}Ap
zQ4=`=MrV`sxVD^13sCLg(q%JOJ8MX;M5^`EUWTLKI+MOM20{oKxCM9O2k!v#UClBf
zHUG6oKODT2jvH`Ov{Mh{p)d+b{4^XKZBGTWDzsO?M;i?GDV%NwG5o@Zt2=_a4KJQF
zGW6~Yf}q6Z4q?=s%uJ8>!#SW1j=66<0no%qKRW~9<jgx2t_dRUNs>_7FkxbYE{-fP
zpZ*T4mDV-XIlR|BWu7Tl3k-)X9e?_YyIY7Gq^=4seb{Q*Sdu3eV-N%o1?KgjbDz2e
z{xAnez!h)(lus`=+mfLol)|pNthUU;<R<aGs(su#E^Jj!&%wOAUib^U)hULZn87TK
z664pkpDqhSQo)0$2upy6vxH%k-$Uj?UnCH5+IV99FM!OyPz(-qPs7BL{nU&U=?k^s
z)mhRFfP>`VcjLFopadK>1=k0wDD#4kpHQd(4Fho2H}ERO!$1ZsdI$zO1-krN={#%h
zd`|0QE6Oz~=ad&$*;5Z5Qd#-=oKNBNO{q#fanrJ9qs3fbZBYT<5>xV;u~s;B?{4;u
zLA#uqK&@GCmXtsNrtQmkA|zoYJu3iu`APGRq*$|BTzX)IWWtQ6gb<9eDzSK;6=3)?
zc>MgOUIJ`#+t_SbEX)G54sF&kW$v!kxCnCqm}6qWnoHmSqONr^lM=l*`3+EmHpF02
zFf0vhztieLtgIQt<S1hg+C~me%%Fl|%+xFx8W#wdf%K-r`FK}$0@rJp=j)Axf~;Kt
zSrG3q0}a>=!t{GB06*SnWX+b$pwZ%|tt5PtKop<@*e^VdAM65PUgPTH%iiJnKuj{o
z$*V&z-Mf6USqfc<4TES$;Z>1`ZFi(pK{Rb7e5;sP>1jB$aDT68hiv@{Q$-?plbI77
zTve0Qu%fxe)~)8}yM3M<ilVb&BrEaaSNtOSd2`8C%2~ld>*XN3=XKn1+(y#3wDZO;
zaKpz}1B-e@MVMW8^NDRxVJ{DZYU#nR)aG^jbFbqIapR4QW1bPdvBGz{#!M=VBK4k6
z0G~UurBXs0HyEh6{-LmyR>N}rt}|$RN_*%FAV6``u!1!v`10+d0&LQo!DoGxHj8qv
zKo5c>ur6l{HZT461TV&Le2~iwd*Q=pd)27tNzE_z8P=ZTIR515B=p#claH;8G6Oel
z!KrSE-M+m)mAXwdwQO3^fJ0794-+#|&RsKkuIS8Qac>C#UEfYVa!u=704`o;$Vz|o
z5~A&#YQ2&YBI5@tkKA#QK5mbNM4xac4Vls5F!*_;n$Yr%tF`vCyJJ=y=5LtYy-Mm=
zfYp%ArlQ8$d)qt|UZV^j^Yjy7uI0=D9Zq0W4>WA}sS=gv3H0}ZwF$Sv#<}~)$xM+^
z?+?;aMyt1$c4{iTS%kogemyDoL%=R_&}v%)$3-)M`U;bs={)HmBQY5Rlb!qsQA4%;
zvWhXJ2il?d$bHeipM)%4{Cpb=N8O$tj+$VQ38WF^RWC7?=U34NzV$P*m$$&S7ko^W
zir`8oD+@<0rY9JxG)t)`NQpLaXp4Y<6*MccNl{BBURd;5YxZo?sS!sP;v&+65{jEo
z9+QR3)r6Ag1-FFGr6h?30A7V&=H_fD@zKNR8=2$w&AmtI>pLLG=ev0Rf9$<=RMma6
zHZCn7A&P;dQi6ga2ugQ{D7^tu6a@+C?odQPBviUYrMnxYloXKMfFK>xu-Wj=2JiDe
z=e!R*=RWJK-|wGiEthK{xcSCsX0EyBnwg`!m1_w^8mu(5S7F~ASF3zG2?iMxzvI-S
z1z#`IYJ5x9Br!QQGH<A~i7hpBW)YBCy$3Wjj3S8mS!pL<DTSYoiS=B6vHR`h!Wg*J
z<{Bwgda>WCa4RLQRMNL(m#+i*C5kQV;0$C%bNR+{k6>Cr{t4wMLWpJZ_Qfxc{m3Y}
zOkK3stx2wVZy)*=oJ3lOx_&?cNYs8C6iWeUSpOK!&AhC}tVegJ=B_CV{FX>7TWa#j
z?(VYiv1+-&va?oLNlC3F@VjmjmTmc1z41Kl@5dRs9v+pKJqzxZZRIH@>;T=MVGwIK
z<Y2S{^NTEmOwY?lHu^_QoAJq;cAisGwGcPfxg!U`xiZ_jeAHZB>&N@t@2wcw6=-Q)
zo*N09wiyGHnJ$1jz+GWs%f@XyOgjH+#Y+o|IDgq0BO99=uvvA|1xyqJ#c2%1c>ymw
zh0fu0*hx0wCqJ?*u{s3b^R$6wpKeK6%{i$p^mMdt19U|Ce0q=+$AVN5s1kmnRa@W~
zo*W})ucxs?Jhy3q#mDtP4Cy^my@@b@8I;dXQdDGxh;`nslDMU1;6r&n{k8f@)!^yX
z+1_iYSI)OCnqN*|an%1*nssG4p+as~L?~T2#ocE#*?L11(kmD|NViw%woiR5$cdMK
znlnP*)nPAo_9fA6r342gsOo7tsqJ!|QiH==xB=^Bh-;~Yob8{K&J|FS=34W)I@$tf
zRw#yEIfg;|J_|r(y@bVToGS(LnaC6o|C1JQUSp8lEHF9@Q2aQaU?`~uM$`yGf@}%l
zWSk3f`iwrpNtL~$$z^T6pIY)A|2f!HQLWPcmEd%KPc?4PE=ZiQPgaM^cznK$FfcIJ
z*epJA$I(j4@tgt-yl%GU2ie)IA9{~u<JCT?Mtk+1#9Q8!?{I!P%)KAOM$@GGl;u8S
z0RMw-Snbd`*<qXCUfp%uzQE<PMU~iaM$(Yk>PzUcSFB9SDrdP`#hbwVBLf;QC4B9<
z!*%=V3yxQ@2`X=EG`4qxTDyCrf5%wO3r=XmOyBz2pH2%mV10VG)#a|ArQNOz>;+DM
zESS_j-64FZCs>tCP)z-~zyGdv3ou7UJ&mwGSwdPG<-GhXF+ne}=cYf(;DZ+dSrbqW
zGaYW`=4wyrhM{-!BHUN5@Y?$IL|m+=R}b34BT`3f&mS-*!f=;Cpt*KMTz2HF&0;!p
zzJ(8@19BeNcxeQkt5`M@IS$JY+XY$IM``2YJaAz#>Zw5%E9At|sf;*O1e08-MQ`c%
z#bwYJe<7T&2<rKy#vV~+xei1AX!!koW9rp_)@8JsXvt5-rC7QGV!C#B9O>V-bnAYT
zHVfuJ`MI7BEhL!Y5!uZsozKa%A=7x&lM%f#)md-eU+%b?vnCk5t2HG+ir((gcMDq@
zZ!XQFlwtMGjAT(S@<iz+<D0+&*3AL_t}H^>@EF3Od$SUiw&OmC19@!JW4!PDr`H8t
z^|4O3^i1kiI;nU&9rYZN7Z;*VMig5nVA1XPqna<QEZ9P0)=u9~r-L@jc<5lyK46}g
zyW&Fk+QO$!mu!G!Z{30izY_gNA9iOT8J5OgEBij69U#-ITW1~`N=h)5gn$NQQW7i-
z=7@UB^&n?R1h^fV#uz~-=a1!j>yWl<`-QH!(ToEdb4oCDoOP&%68QED5P-91CL<jo
zshle`->IPl4au10MpJ*kMcJT)mxNTn83VUu^K*_szM<Frhz=gFjmu8nW56h_gL?@#
zb-J=*$}eO)i2kWDBfMowc6FIo=Or&ulMuFL;YnlCh-4_f&|1us<=9QOiLO+;T#meM
z8Ukwu`g`n&HQESjO}>8^=`f==Kte8&4xp;4LTNXK-w&sb1z`ZSnr`upz)^uy`s`BT
zUjP=Hy3Lu!a)5PlL~tUCRIHJggGVdK%1ryOM+i1;__9CZ2lm2Z%5z@+VMB2BjsmK;
z&|Dw2?oY|y1e2n%rwV#*KBvscvK*J2f)!-)bk;%nkZ`CLTRw=m`o-zWF5*M{u}bt>
z<f^pS294ypK@bi9!`*q>42#XB2kpf+93?DnkkowXO%|!4EU{bQXpZ14?4Rn(PX$<d
z&eiXeo5t!wS|Z=>a@E4;J0kxu!~Z`m(pY4x(t9|{d8~8&DxrqVHcvIp{*H&DL|g^v
zGtet9Y4#u#yweF(Z`M~)v0B)IJc8GbbE~2T`#cXql%*Lx{AL;VSL17GkZ&<N2Fr+_
z!DPB|zt*7&NA9xR0(}Z>+1c4xx-*v%q7(Cwtrlj|3D{>r6k~VoUp}3IA^rR-7?|Qe
zqZLI7O`)Ohz>8J!5Fx#ABk8E-(Ybe5(JHEsq|fbkhiDhogfPh`Nj#_McCXwRC5}Kd
zlh6ZWQ<^06ss_KkJOjR4a>VpUmMFCW_DpyB2@+O|ljb8t{C4x9031KlZN{<_pJW}T
zz&DWF+XFfVG^pKKB+L?I1i*^*QVWNXTc+lg(9XvFi?D$k?c`ib2~E-rus-EAn0~LR
zVieykAU}<EGn||wdCd#llqX&7?)k7s3A^dVI8I-@;j)#dabGvLq%xILs_n`v!^RLi
z?$g?`yGjc`vc=&Vm{4nTR=;1Q9$&Y>8$6exTUyY}M8!RtiA#~uR_0)p8bo-Ridq$z
zS?}w$s|T2aNF7mDgoD%jp%oW}8cMU)lHrW~pB%V~{oaqgNH~;k@*KnHHPQJIqV)l*
zAVXL*Vsaa5i?L%sELx5?F_8%@y4#2}p-nH&pO&&LstIG)NP=vR!+d=aKlK-|6j9v9
z-(|RuFl1P+POF{ew@t&)nUhm%r!v}-WKZ;#+GP%g)1K<Y5#RBzwD9r3A@HYdlY7+e
zB?=ZV`{)|t;ME=Om&v~xFxE@rUh+1>dh5!1(fWd-ro1dfG*I4k<E(41jG*Mg*op<>
z=6A9nuIE00g6H)Rp)6=orADp8mBI=@-C1P04|`FM?6acf+Nt;6?2lrN!KAs;pjs*m
zJEd``KFwdv)Xc8QKml}qfj_}72XAs^3)txAdJEgFGW83mIrT#CefBS2xwRgEp$y!&
z=F(N+O-`08NAWRaman~|7O=n4vNIi1TtP3oZVy9^j~nTdTmnY@&Ez(o&Oj|CaN^8h
z`B{<eD!Z_uxAGf4MTSbgv6{&?;bn2(W3K>Q+=%~XA$UOGB7X(0c&Oqr@185}FT7rK
zZT~0jyxpfpi01un#klP_U@)-e>|ibB08%rgEfU_AXRQ*lF4tm2ETUGv0%4Ou0C5Re
zgVhg~bA3GR!z2@hWqcYPg*%3=F}hq2zdmwthGJMdZv>wl{Rk12;qcD;6Xq_fV2)6~
zZGvz|QR1BBxH`=R3xaVA#c>Webg;qfgNQR2<ro;{H!3cSQA)jCR0pH<MA7~vpmQG1
zsni0W_Lj#a953;HXPf)|`oLZlm^vGN(`NcdB>_c7mSH2s6oA*7Y{|MhIR6t?$U>|6
zluD1%g`U-^PHD)HjP%2UEqq|b$w!UM82Qr`J6k4=!3<t$dga<T?dG4jrR>gHlipkG
zF*irDJS_4Y(#H|wesk~l=;ws$qdQIRSU5?L2kE62`!VooSe9+jgOogkS&?cc6*#Dp
zyq{1^>C(_|g#J>)9>NFEQQDC_4&2O+@60-?NMKt}0q=moN$-jGqq(g7wfUA1Gt3pS
zb77nwv=QgI>F703=5Tw(v=`d(6~Cjbu3`Sa2mkG=6$>Be1Crm}L7O_S^XB8;WOt04
zgno{^)ES0k_?4xIm>(lVj>~sR(T`kQ<X=_{*4*+x&B+1OJ4tADatw-rK`=PU1H1Yp
z37=-EZMw_zisB^Lrsx_8Yd}4p^ySIg&JR4sV~i4V>6_uXiG+eg1aN-+<EZr^C*?0e
zbPG#wX{9=Nzux(vQvLHX58$0}Xt(WK1;crSgzd2pdfr|!@Pv&6$OX-9ANGJVS8J%e
z5-0n;qfn#k_`7#t6pfz*GFa^3y+ri!*n~F%#)^2chzX<dj(3tVF*$q3KW6yo#}08%
zswvz?@Mj|GK5W0CSQorRLf%90C3^h}HlYT9B`<kR_a-tZYfKW#gt3L?BY&|1lT;CK
zj<;n;cO4&Q51%zEea);G^5Fw(sgfTl%{IQULi9~FDG0~<ofR%lQ-h_2Xq3Jinn}|C
z<kR8>@IexE4P;4^Ls8oN{zIw2k*zHd5^A(baWf9ypuay__gsD0)9HiP{8In|yulo(
zG&l`V)Kz&5<x>^YU*95ol6S!0B*XG{*Zz&oiP#4)A-kJ)0iwegz%{*0O!S_lo3Nbf
zU}_iCo=8|u898B`;6^v_0-t3PNg(|cdY`Q)gI`R5ykS8V+2d|aJ^#}NS=b}=7!|m*
z(y1&Di{ZDaiZxg@GNMji(!4S`Q*=<YerAZZ#$~=c8(9$~TO>wqGPXD(ZaKcBPpgrn
zXcq*gE#8r$OebOTTz?g&D8-I7gm;xZ&A#`U(Q!GvZUNU$0`tK|KQW<waczxAa3g`>
z1@>iddU-p8Q;0GeazeWz&mBLVFg7*BRyL^h+Y8NcwSo72SlK9**)C4wc$7ux!RFF9
zhv-p{ipJVay?Fv3UotulOs3y9*j~#<^(2lUVt{O9(jy)ITc7E)+lj~Sp39M9E8n;r
ztJt)14D}XhWMD(js|%7y>M_<WTROqn@yw0Ak?0<eXrv#v#d%0y@vd}QJjg@B;>>u8
zqn`oy=^xdU`H}Vp!i7O1@nDy%AVQRBMbwH!)*=+pv@R&sfBjxWLxqC@y0&eqi5U?i
z@OvSSUPj$?d8AuQK%uPwXW?lmhi=~kHx-;=fC1!f<b#>fSMU4Ee{cY}V;yvBoho{_
z_k&Z>UNV3ZuwRTz0-zQrg!=Ry9<~;cmFRrm%g3m=S%<H;#t5>5%|HEE3BEH9=LiNS
zV9?|xL{VF^aG)>GBmLT+G~<w%TM}-!p<&Ul;AD02eZasivBI2NT-Xy7=gzT%hCQhB
zLa+rM+NtQ?vCwPWe`x_e6P40LBLP?o-8Eu6a8YKRvU~a0jbfiIwmnpL^xl`|a1JKv
zAnM-^lD{r#jU`8DH@vv4{Y(h)NSgssop&}~7~FeRG{arTq8iA?$DgyrSX6g=NjVO)
zwo%Z~T!w7c=HvX_upDd|HXACt2rkTSs($qIi)27D9;A|bFrI!BSd+P}!BV@39zCba
z!!yzBU+U^K%@v+<2yZWX0TeqQx3;r`GIxMnLU-CY*d1jM<xYi438DSfURW2!_q3)W
zO*`KhhOb+r?4nDJVqLnEdu#p3O3SM2(J>z0>_v2w?M{4^YV|#Q;Fun{`!1hz9X)aH
zcmRXV!HDshyvXh@S|wa$ol?x9l|T71xTCkD&Me;Skavp%M{f4oc%vFlY7(po=J*QB
zdtZT*Dses~Q{)+Q5tf(-H``!v;w7yd#z$0&L>g`69uPD7e*TA-+$fvl&D6^M@*wtF
z{0PwyZMQ~gOEiB!y7P(yNtp5@sK^B#JIhsP_8wqGLM)#4+Wa89;ydoAA6+Ng7-S)B
zic_@z4vXMo^Xq32Tk8v)@bLx09cahFLc35A&v`W5tIoXBHUQV<AFu5eEHL3Z@T%*!
zJ*oqU!p}_9=Z7>A2QGLePdVcB_TeS+KPMp?49&vK`0K{+rRmgk&qspWYJ?g`E3=nr
zd`W2y1%G@ruZp?u;@iq=z+#qJbPkXQxg%C5m_gk<S>}wv1(&;maPe3kWt+bub6`qF
zX+|av^9ZR%8!3!Ny0aqcCQbND@jS@aLWn5YiUJ%U-RCfmCp<b9D+k>OVK7VM`*_I3
z+wWyyoDGh#6xn-_&r~PRL(0eq%*dJ%)NH~g<4;Ss^ZH%VE#Yoi6GpGxo>3GG9Ho`Y
zdiqle5Y0<;IqgXu08~+?a2B<+^S9P3=loAyW`hLCu2>2gGwNI=UHN?n6ffwf1#=Y@
zzN9p47(kY}2{XF{NxyuHx^Ww``a1Yp*nin!^^ac;x179!RtdQ{Z6{Xb85j@k(U#Ej
z5t$DMIU#-&u7_`aLjX)PU8mg9CSr}>c9s<?8wzdQ?@nf1dGg~52Ji^RVB--rKxQxw
z$-lo<zy;~RP$*GXWh6Se!MZ)G8w8<k7I>zJ+H2erwHobL9HM`EpIVP2HC3+N#2`zR
zPV@5BZ~)o0pP#}5<LFU($KA-}T>)u!2gqvp`t6XNc1VIuox+Sq&mc-iO(LHc`TLIW
z@6!A(sGrtj2`2Z3zOZH}luudCz|w{Gal1h`Th~U9m|JZw)86>uxZJXL4qkjVe4Y5s
zexxC;y8%7;Wt$;aJJShvm0|=gUL_!H@LipeL=Mlg>XzC>V0q!=J@s2u2jx#$#e6zM
zGbK{Giu{l3{l!SM*%xNBh5h4n(<2FXqs^I~$K(?j(aGq7smu`Vn;tKk7P1L`?h_Xf
z)#xn$A)Q*>m7yJfT6as~9~56j&zjGf1dBa+l7?1;br}-hKyrB6$c{t5;u0XcFiaM<
zib-Lp?hPYWvR=?WddlHA%mQ<Rg!+5vkC9xmI4O8$T)@nnz!#EJepx77^<0N->E~hk
zgT>jDLU@g^>-uba_6>hu=}Dd2&S4PH#8%t`tsr{0Ro=(!R%<q3$nUtCEEm>f)X!@+
zkk!2b`}xueTOk;9BPm7><W?Z!%7|gVr<3FISyDQxq0$UR_!sjRHrZh0SbRMWQk%EU
z!UvdEojj6>9D`c?M#vzeZhv&LdU2Zb6bVC{;H8Oss^E>LK4Gx$F6e45*-U@`eM4xl
z8B8Rvd40$eTkQBAijGD3Z{6Ji-jNAn5aEu=DwMHg8bg?L`#x&rzMnj^O=<2_NEMn{
zP1zzTehlKanOhPnpXz$BfP-ahVVj^DkHtxn3c4$I-O;5e`J;IiPQjH{Kj%HRx1xQ;
zCTa7n+FPy3hKeU&P;nWx%;sl0?kJ(&GoV^N3nHp@++6_}Jy@A+f66tpJ^2EcP3@E6
zptSz9_#sg7BjKO(#olxS$b{>+!!L1YfVu$5Ww6b6cD03nZ6fy4?j5#sOX>zSl%8*9
z$?w4V!hOc=aRggdjQ*lGJL?!slrV(kj^jNff#HC1TaC!wE1pV_8S)8V$}~R@>Xw%v
zps2p@N^t=(0->{jbfakfF_bO3v53tj=`!eqUCUq&VEwp>%WWxG4|*c6r8`rfbFRP8
z?y)%8nJIB}1*!H_q`(S&0LtTpAo(vLd~*-HzKX!lI$7@BJ%w*(hsyisUsrsVnCQKQ
ziQ=DMoVJ_FrQK>jg1ye$`RG~rO&8Q$A;)Stp6DYVa9~>Z?KnUx8U~4?BcBt0RdN_)
zjVrkzEz$<n@>sU3jjoeZ>GPYD12@H(R;ohQzM(~QJegx(9319Eh6{)Q22B-=@(pe)
z5dyeVDZBrM$~^<?=Mb$P88<?7{Uk^}=8p&N0Nb*4%&`ZpF__trfOUjQeYgy11m|ll
z8&Z8Pw;kt*<V_&NWnNP82!yB7e(H3ohm5V*x$r^rsm8b0Qksq8k7_Iy_)Qfxf@Efr
zLOr;xQfCMoZBuy%XBJXsz07YjLk@t0B=w&Rv)-II$7{CoBXgyo5GLKX&6J0oU{QKj
zL0x_0jehM}>w&<85t^GCEt2b>mdBeXmU>~_0xat)?jFi?0zE^B!1C8?9CW+jw^a+C
zXhopy26ejHe4yG>m1s)ih3{W<8VD1#UacH=US09zP|5tyAy6Z__C(EF%^)+mA9pZX
zHx(beQr$y>a-Z>}5BI9Hz>~gxn^`&B1C7$E#AvN-7y1{jNow<2lhWK|6s8g8XuQoB
zA?8DyeSO$DS!s8zKhtvg*KY1mnlqFqo|_$kX=Tcmlc<ICm!b9kr@}zw;7Fr(WrWCW
zXETLb$XUi!&_<if=o=ffjDN5ZUbjSV**M*o?`(G&)S)|4ZvQ*MrdTN8letp2-;VWt
zl^149)9+uou6a3bue=^(R}mpPb!qaq)Kijdm0Y?Y>Q^W$!wA^5w5dRBH*bEW+c5|_
zRJ9{OhdI=Dq&p$ffq;xUD{c8#vyoujq<}`r$ot4|+A$8F0w-$|wJTn3wm52bUNxT&
zgrZIuotwbJbey>f@nS3a7y$?ST5EDQ;g9}DunU#xKYFuIR$8&Cr%hV2igj^c5+!S%
ztX;cdIYy3NPZm<i^b1%y65^zleb49QMb$cX`+M;7FC#eh=Xp+wik}7mbr;Pqv0J_j
z<%Q<<MCo*T><KT{KHu(5(6^<#@iOHB6)uh8f7=6SudA}#bODU4Y=Ci#Ml=#nIiHp%
z*KVqW|GXK^>vF&TXOOTNdc7WshK7(pcY9Ew7jP#==SUbG$v>CtLB1wQMl$7=iYT>J
zyly@;yLvaEAbr;qihfu@Pbb}$L)kT2?nifJ=;~moN{s4_q@k@=nyO<Y9mD@R;t-IA
z0%`eUoMO(8cKDW&i&GN_`XQ+jRR7?K66K6egdC8`y5x`pg@t?UI0iK^D0KHyp%W*r
zt^~yp7CUc-oMcm}dd7jDTmK_fgA<aV=hBs{@f!dXooJNfAmPt;(v|j#zG;&~E8+$j
zcADRejj)_JeiTk?e#V+|?F`N5JPSNQ;yVze$WqkPwY5-bTd*g!-NGGYtoE~;Q#dG4
zgXh$*f^oJ<LH=uFLe^6b4W6xiUdPmm9ald=O0R$K{(aqd-<Nd&4FyAsr;brE<R=Dm
zH_VU~y6~anPf?(;am20TXZzR*G}V;lOW#S8BKLw!qk8Tuj5lv;zgLc(&yFp(ThQBV
zb=$eGUkUN*G1N1p>A3Sm*Bw^3!((PT7LTpFsMbr)dyoXS0up2cq_SolkIHiN6{+3G
z&zyf4_@WFLHDME|3O)`p$@>NZWi`;29iJ(Sn&+RfU!`_mmOo`p3JLkdDETKI5&nb8
zCvTusFm$Kq8?*>GQPItNL4wRitx?(9`h~7up^HoO{qJ9%dmsWs3Z8jb$wqKQD@3ow
zuc{lbhinQLVv~X*^1PznBR1GIoJY%S%`x5_5kY3u68fZf-fj~E??^<>a6O9q8pG54
za|o8Vgfs$ny_&)+xPUCxFz)_f*7Yrl=|!EhTZ0MFj!86sqo>1inqy-9%h&Kco9hUF
zKG?`I=r)SY*j5PV(7I&xuyw6yp-R*%NxpDCp&C!nsq7;0AjR0KCu#IeS)?m^jvRMg
z$}@i`*QoION3Bldhl|1Ss$<#pN%#HM)}n6qW$NX=mr#si1PlQKJ#Qr%uE_Khs`0NU
ztByD2%yv?)NtZmozMdFlIL2@8l$RccPeOaiwBL^2L*Q9u${oog9(AW>*hYxhtTq-6
z+Wj`7$ry1jTnDr|GvcJr^u|lMdZ0&VkVCgb(=T%L_KJtIi;O<mTknJqDYQh8-2cAl
zXfJ_7Uxs(%u@jXwbb^~~f`Z!9Ob?ln=w~p1>^O1a#08K66PE~15Q8djBENO(J%wP^
zDdZ?SLbNs$wmeQRS1BRZm%AQ1qZ(`uey{WvC_Dw>P-~Qr+3K(oq+RHXgA3N2B|+~;
z#)jm;sTwC^O;GXCJ!!XCmVM2v#jqH74=Beqd2wv$e9ph?XEf(0B`N73c$yOQBrnhL
z%0aCMvGtzp$BaDIz&gJdt$RNn;UH(14Ik9(VmZk>sy3mLXYb97+pz!}z8v@_Z7OP5
zupi%^dBo>c!B<s2*;@)^P&4$9;FvZg#$X_0k|+(8=JD8TL{tUjp9InNWC6qnhv;X1
z?o+5Y-t4$nKYBoM==JRsg;!YUE$wu>xjsewW3;oDEQ2eKzb>{e;!eo9Y^}bg6?7^_
zOhBydF(tXVF}ti5g1q<usbA#jx_fW=Va~;yH(P#52hv_P?HiKA?vdE7r(?fY{#?7+
zD7D9)F&V~k=n{>6yYDALy)o~^9zbur&F5gUVc{m8U9m7&m?>fYgWkz@VNI*@L8>~J
z?SOsI!q5A2)ERN%fpN#oc{%kGywm#0O-)Y)Qr%Gf5<oST8?^OhWt?3&x00@{GFBm4
z;D(adO`DjI8+2~7Ih)kvRG4JSLxMs^ZiGl~sZ&{43vz$A7jg)M4-sVuXkr?mL;rY+
z@jYMmNgc5j23MCyLT|jzY%L^Qz5hj~;7PAoiP%b2W9Y@(X~Mv6DuPhXF9|6BmgYPc
z!O79Nm#h^W-*FItF_(L7;~0)Q-jyX=EFxf@)P!}mbE|7x?`d87pH(JQQ#e*BAgxDP
zpW-o0>KLx5yu+8m)n2*GK1AA!=P0=Pk2&6dq1mbwurTyMf-Q>=`-hM7%Adb{=_}iE
zLO5Ah!)jwHG*mzh7l*5{7Q_pTyPEoz<spq|&Wk*g5l3@Jm_*aUHo&BOS{zN~x<E}m
zf)Ks~e%&?|7!r<os)9JDun|^Ai$zc-zTz?I#_e*BLj^$<F(3OlDUGGeZxsY@XZbcD
z4g2&2PLhr|?1^$UeN&z%KiY_rG$CH-GAYLhP|W>AL{+RvuX{n*p6N+|7{-O18yBgl
zq0Gw$r>_PQEp|vB*7^(78=#u5@aBrBKY#g=i*dvsy@9Hy2kPwq{mY#J`~AXwiVX5P
zF+yg9LFbp39b?5(>NBh7xPzyz8TH!Tq&UaU6O;DPkK~w>iMIgy>$PtD0V8&ermCG?
zvuATdrOHcV-%RvpXfxW9O*B5P8QN?re+kIBkJ9KUHBv6kK)L(`3w}A)qd#+r_}91G
zjMixW!ZJbQ(36+76<W5pQk@0NW1Kgt-R25-O^410QL;Zo3q4$6#UudTtu!}nLJFnI
z<`PPvwEA)PYiGAn7@J1;gV-UtLOW1g=@dleJz4#9l2cD?M_@NaA?k{#dZzYxhk79O
z4a0`T5p^1uVC$(-$)))uSz8*r%nfaRKX{ww{S{u{KU%Sq-yd(H<TCkk3{^pViZdJ#
zxPQg1tstaZCC|cYOtv_S?QEZ^>5t@cmUP2r+ZjcyQro%E5+yRj>6;%^^FJXfZNC}2
z-MbSyxKn3`e0}<-{cT6`<~N_<F^e?dVag!bk77YgZZ$*y83LNiyGgGFOr+)`)!V3L
z$K-F3ym@E}Cb^B$OQK-i7S)bzdSnjN{I*|BbTDPQ)rBj9nri9V`N5T4b(`<0^x_Ew
zSCG3CEz!$;bS@?>AdX<CawVUQyw06>7m8&$u4u<tGbpDNl1|}vtO1qyV65Slp7^=%
z=@62-4VXwY+ias>u39L<N4Tv01i5e4P<IY+y+K|^eR@EyCxJn!|L|MxcY{JagCjjl
zMvhS{tpi|tL(m-Rk>x)|f-^Nv*B5j?B)5ZdhjJCjF5W+jq|G3orA?d<dwiuV@oS8r
z4rGR7uXWas184HcEz{`{5I5`mf?Ek;fIj>yzK;PU)SKx^)lk-RoMLLfYR?YSXmV+X
z>`o4zbAlek(XzsMm+4wmU_w0p7E1<~)h~s!^DCaG2ia%g2}kvS^5JuzIjkRl-Rids
zGd>+=40dXKhzV@mNX#aO%1ia{n^Rh6MA0qwRBhbbjcWJT@WMjmxu9&@=>woO<cm?9
z?|d}yPMsJ9b_1qAMkKZH)1*AkDGmfH6k@{AsC86X2K0b*Wa#p@myZ?s|75}~A)7H3
z*4B@T^DVg!RM%W~Y^o?3FkLH-#HKnuvGaqD#6xXaUQm#bE3uwRb1{@|FYg7&S=Vch
zo@fIu^)j(ODb-G#Q$xwGJVl~^VyAy>S61y0<k8duw^a9Khkm>{G+TSmV+RdALVgr0
zwzS+>OqZC~vJwh0n(nfi`dk(y9L}p(x*Dg~`S9Bqx^cGxs}BgB0dH1^<OlK*CY9(d
z6NemaHB_!CzpYHQr%xIZOjfh(QM~mN<j|)GPB&MrT(k0RXgPiQ7*%eE3}f)Z*N%Nm
zUSpK1A)jN|D1mdVDXchO_T3HnQ_nYdf}6!7aR^o-E-qA>yDU&s3`1a9AIN(8ItlWV
ziV2|RE_bD>zk-4uDpw8UI6#ByZmA{T!z*q1s+F6phu$JAu!Zq+>*&UgGzY5)l+qbq
zb*Zw|@Kr734to3>?JmB~q*2TAHjqn#9WyMFiopire%d`w#K{|Duai46Y)ocQUtUHw
ze1F`Dm~Z6-YjnSeEqfJF-8&D!*K)Lu@P^Y`8l`iRACKj)uNT3Qu5SK1etUKh6~8<G
zJ<A<fvlkWl7l7;Rwg;7<K`enp&5ctorG9<Wv0xrryD@Hy)dWoX70%sm;*3d?h$%js
zA?q|M^*BF!>oO?l5S2_p!mW+|ZgG^PtV5iaYC5#d)mR$Co&zKz(P?;dHIavIt1>Ww
z;Y5qM$y<KA4AAhMzzPyYT3Z73H&eN~Vk!dcaX2J-zC02ahFfkO|4+(||E!XzVZOT+
zpOi%+(BP{`rg7AguQ0g;zhcHUbUuB0M+?Ghn)?F(IF`j=^Y`D6+e(D^GEsqBEKuBi
zKJ5aDD0`W{K3}5bOP+0plTP6tq+^f>WvwajAjDt9&~-+vV6vb#X6J4oGLT~!5@pT4
z3(@~wP-`%<C!!no_6kf-OL6H!tLAsOXbxT=lWga4TO1Z`-|a%1k_Z83>eFRyZJh@V
zp4}CSaUM*8#N2h&*_oM6+ZX`?#7LjEZ50J-(|;bJ;N+iSxVu+l6}|NOZVlxML#05m
zrFQxZerF6?Uq{#tu4~CKtf{*dWIv&RQkEw@%;HYECIv?cT74m6=UWj^)2%<A5odtQ
zZ@2Kf50znF#$hGA)v#sO&}OjIC;WWjsSi81*>{!e=6!~`%OfjiJK}C#2r96-mV%g4
z?e+@LE^sdXrt~mV3oYAQX&$?}2{20rYM5!UHWyMgU)8Mn_LE7w<<T))gRbv}Q{Z=}
zHLW10z_WsKQs~!r7n)6G-?Vcr%@wAb5Rg(a>Xr=3xhg-)w<;3z@+BFsJ$p@XtH8XK
z_M=*^@9HKo;7q3lW!sNGIT6(kPe3)b;_>|h;fb{Cs|?6foR!pd#>s5pAcF0&q2$Hz
zJE`adb`18G6!kjqAnc~la78wFG9Bzdj?%+XVZ8nDnFZeMhn}t*Co~JqqA@&tMmLbE
z?ZPK>afe_Q@mXH8sKJjQPHBXe_OH{7<p=Y4!`F%a@OUpSKz}E&v9d6<JFPp~i~POI
zqW)BWY2m6vkY0JRczvLrQ``HlRNEibyJ*WMr7luNgh79Vz8u=IRdcSutY1m$C9NrX
z7LzVe=R9aJT>rW9HrKYJz-fY6QnE2CUOX+xsO8<|)#;u>*O;ql@u{vvztvnT6?bNP
zjr2S1TV+boDTZL<wy&Y_lFmgyIp&j2Pwi;p4XY%b2;Q_->6d3Or1x(}Zq0q5rYRSF
zcirp>y02VXd8((fa@9&KExMMnFVBSYg7nL!$w=nd2<NgltDBvz0vB?H-_5Aj>lf94
z&rdd+>s#Y-L9ItX<w$nOxv-lA4@2{^VSBSPhP_RQea@5xvcj`mhR-JBsn&;a*M$^7
zBD4}@b;EJxQ9^|ab2g%g?2tF)t&Rzu@ieB}Iu{TOJGO|oMcCkrUO^{AA1~B0(@(Oh
z&_Crr?qSz?%?6D46-04O4ETd^zy2}K2pgnAY{0@4%p5y+T>-*q^3l-y4gW9n`wI@*
zpZ>#xshdG=MNqLR^+_%LUcO$1vx8Q#asKM^V!XKFy*qcv?I?RIOd?LQE@s&%LLsU?
zh%Q3)GhN{{=puD~T}C{@yt$EC^Gexx&%!=V&8*-j{n@ofyXqO544D;6IjiVDxo>xC
zi>YBth~&KrVM9}H#XsI%ZNh7+Gx=8H#B2c$p~i;&JYs5T%cPs<Pd@FmV)_T1c2B_D
zCCrAyGg9~bgldB3t(l77@IQcMN_LACf+C_H$9-UL`~+6-=ssQ?uu_Gh0Uz(Ir?$);
zDM0--j4*}g&E3b>Wr^zQ>SREOIa{F&Is)UaPvbV1Kp`Cg*=wnDil5oa;@+$M&(8KA
za)?D1j4`>PmD3hLKX>Wz{A+R#Ci!p~=&zb({-fMblzELf=kC6<91nmWQ#DI1z-Iwj
zr>rjwGRxQjS}Uyt5S8Vok{gEn!7e(d_7A_|zx?WF$FTm?@@Vi+WDHY_K^OLkw>M4S
z*`&<tmNrE7=6V&SHf)i!tCktc&b$M0AU8wl-5qCjG!!6ZSAJdYZiRFq5WSHY%Ar;B
z=_fVrNcwC2CxdJxGr}e=T_vXcXL%g+bkiL=-{+VOYR{~<_N2W6J&<geKcxg6*LTb9
zT_p^Hncaf2pUg8GApH2~PjP6{zfMTN$PsAAK)fEVMfWZ2yre&F{=*LeaL5?n9~mKf
z{_$J6!s*E$*@=_q45Q@pjl0sSk`g3eG(j`Q1s3I)P-wqW=uXr6smcj@u^g!O$;Jwm
zPt_*59ei-<@4CB#>hl<VPKij7=f!KH!cllDqG%|cGyz5O;Ils^R4S-X$H7=SO|q@q
zHSEK*F`0IyyE~}#BWTbCYR40TnS_JLM2}hF&0X{?0%Ju`?<O&4c}#O)y!Bv&aEp=r
zh+g^t;RtG{j0;Nd4D*HV4vS3np%rH)3Vlh#K71hTZjIJ=Qe?aHX{?Z7yjj>l*zmMW
zk=T=2GSv!&v#Eoa1iE;6LPr=yq)}u!?mzbR)!?VwMHU9VOXJsLU9`*WUs*rtY1!KO
z7E_*NUg@fI=JVyhv;ek)l+6+HsTw-km3EWgW&83M=$ZT}^Ih#o-&i2X=Pi7^H8EPK
zT5;Z)itSP2-lD782|by1Z@nmEGecNn>}wXZ<FUa9S@7c?)hMEw9_YN|0dgUE=;@W%
z<^6#v#JAJq9|A<7HvA0p@UhQ|-}}yhV7MAuES-f7Z9ZY*eggV+33HR;=ohChhhWr>
z{g+mMGF*AkbP`^KLYszh(GC>wm>ibIMD?5T4t~7@jen)4)5K83KuT?I+?SjUx0~x_
zcUT_Jb=5Dr>tQ|rqk3yIy%70|l!hO_9p@Ds`Rk?wtco!vhWY&kE(8unV=^;F`XfYJ
zy6rVVO^|)v>*8PSKU)m_A?0f(-y2?WJ^Y@&_9cLhGqa+vDPw}VBN$-pRC{j9%2ZeL
zmh1dBo+=2NBd*uNWD4?`{^J?L0ao*0&rU6UIhXVBoAJy~W<~wri?>to^VRo{dpPE}
zGktRj@ps2(hX#&2-5I*)R3faPLJ7@PfuWrGLUCJ%6kfqa-Puc?zEX@3z5j}fwm9_x
zM4@$GzBtAWKwUfM-e;ml*bsg9IqPC0OKih%wbwX^k+25yp&HteZ=wNAr>@BAAxXao
z<6ot>)T<z^gLXZgzCzOru^jql`DtX0=?I${EQiZ2WOFc;Rpz?eZ=Y6rFX+3H?|82`
z(@_hL_-39dyL|Yif{b&&TVx(1N7UblBSwfgc}yM(HwZgGm-Oa)ML|Q5va)@qby8@F
zxpCj6(6pYk{VHDsM`k56U2F8r(p$6hG(wgVK&#I!Ie@l=;vNm0+g;sKX5~<J6Nj<J
z2<20pTGJygjMvqh!Y-P+Wcb$aE*O%hhVA9oqlB=^+P-_>;$y-mz+i(Siy1KYn&Z(F
zm3XlP^Q6c91?d<H=`l&*(1BtZ5Wbk62F||2lwd0b$D92P*NK%{ttx2W{PvFL0kkeJ
zRpF4i+nmG2l=d*k8On@Jzyb<7!W(D42o37iGu?{*CpXtW%NNF{4p1EEG_Vr!6p;0d
z2!?0l0PIHU6Qz?~N(*w_kV2(hG^MukJJ@)$NFL{S$1XOC6DRJwbSG+<PYtF7G0KO3
zO=h7IAm=gg#IV=jKi;n2X#p@x7eIAQO1tp!jOE~8pu~uv0;LD(x*3{Qqo@Xmb*5G!
z-JVYo7o<tG@@=DGcD|P_e@VN*y$y@!@2(7OrP)8H$Psc(^cy;@Qz%!v)mq}bBi9_x
zWhNFXJ!s*_&RBQz<OtEtR_L~U$usYQbY|aDH=a<<oWGqwrfaN~>slVlX2UL1eG8^q
zoW7{NacidMt5!}!Je@%2w4lo7p4^NCP|*Oswb|Pw+zkCn4vaViBvFcRG#;XP!*^t%
z<P<_h5H0y%*tmcEG8Y%fU_<{?e;LCM(95hI*~Jv#%WFOHh?`)52X+VpHne{Gf%H+k
z1!P#5hCu;`r3O&(n#e3n;vWpR9{#0rn5n;kh_^#lgfP^WCy+Ix?N^>r^I23e-4Tt9
zzG@XN&>!bfPZLEq(8D?N-9b(}@5x0it_LBt!rSzzLc0pUIz7<Uz&P)s2dU`AXe*#<
zk>G!T5aUVZ1hO?8lIFg3lfjag0aX0mJAxU&A%6!joZ}3TphD;?(ydCwVXR$x3<RN}
zKE$UQa+2le77}<(*WQI>c;HLYx=3K`2x-@w!kz?#KP@Rnd2{Yd59S@E>ziK0SntbH
zS1<e})fW*=ihX&i8HgJ*xl?pXuZIMkw1rdTBb2DPpRnc|_hh>cRhnlya~lOx3%d?%
zRfwl3Ep<OD^wLa+DghQQg)(f#uFL(Ubg*yUOV#-HUQCn1@r=7o3T<Qu$Yl3lrH2gp
zUnnyk5+6jwcuRCYkvi+v#!sQtZ*Q*ZI+kxfjI!edLeIJEuEzir0c{1LzN=4il3iWl
z)MdT%Z*vT@Q$fMRXZI^0&m5@)$=X=1{?_pBgh{t{JXuB4K1>Z=&G+S|-kx`og}hUG
zwGK*RkzeXD52;yrQ=%`=Y@Ex?rXM2g%r%mPGgqD8l<_}SjhczOTP>Dj*~Qifih}>@
zVh9hm>b-jga^EjR;qAp5N`<$CTcA!j<hhX({uR{N(p0lO0f5>g;yrLcRry*B8unhs
zI4ONnPiMwJ`Tiv`Ve0T5^j72h$wv_-Q~@f*a+FhDDVflc`DL76x=5^Idvknn9T^cb
zSn9Mg<@4*?gOxYgA=gc{BTO>E*m`q^h;&#nWPZ@lWP3dn;~PR7Uq9#$n6lj7cp9+~
z`$<Owl!}*ub3HZj1Ll=ov@z)^n6?H$F+}ydpl54ADT-Cx?^r<v%D!6cBf6ERC2XQK
zk|on_-q3{`yhK??PO`Mlf8fWVTsu09&ytS5o4&p<$j)POC&=m;@SnLS*)7=(6X0xe
zx%|2mf%-H)EQ<4BdaQ8`1LXtBK!eI?^{^!rWEZ7~%$ZLng=QU}6m>8vZ{(^3Mt?nQ
z3+~>cbgY>3u!rj|!bl8Ch{n)jP&S6XjiWo{MF1QA3UXl#j>AtAb2++Or!3s~Sw12y
z*cS%6)Ei|+)l%Bd58dxVK?747y?5z?5`)9?FJjgo48aB%s@9knRK`ogUS#;&?z;g~
zbaI)rf@wNwT9tYbb!ZyqD3X<~bjMG(0lehE09+_;G>MZ5jvaq9Qq+ne!Gw40?_}te
zGxz2^2m^^>6J|`zC$lzExI^;mST&S2Qu4Kj-@wt0eVN*A>3#TnaN>Z;BhHKNbB7^6
z*j7$u-0dL8@KNK<;ja><17(0OAB*(58gfaC>vf5Y{@y2vU4lgEndoEE!_U9R5sV)=
zSw&8fOa#cM=Bwi2*Fm0zyB`XlU%mtC!X18_Pb&-k^{O;{kASQ17JN?Fsk<kczl(QN
z<EVPT*1vcNj0g-`BBV2TqzyaixdZb&54Avd5&AzS*l>yJPJNw)57d7ffEawx`Q_0K
zr(XfdVbEx|`Ri`L0IY<>pK7PvyBLe3<Qe3oYJGbu>i?3K{lk~^W_x8MF1LL!fph4i
zqo?@mNu-ONsHIH!67;&zm(1=JBFjD-G)mW=Pj&1+i4Dvzr{l>un1$K%vh)TRshQl5
zNijQ~5u*6qB&I$8bnsu>`#8|E@+|i(N@=dYdG(x|d<y|xsHnIvReR~?@-JEBP<dKK
z=w*F9$F*rD5WrneFt^6W+!g&cgm!P_8~y`nyZvtrbL=xt0sD;8;Xf_mxnC%is9`e<
z*njWdw;&o_8SUUc)bfvD3++dvy1x~TWHfyO_L)_WD@5>&r4a8h6u}_}xayC$=lfgU
zo-j4|>OKl3m%^C#Gx^ScajG}S_Y|ln{+4N<H=yK_+Q0f5RxsW(PajhqdN)U~==Ri!
z4@Qq_TzSAeNpR>x7GXTPPxUdTiGA5u9gCd780iHL#S8zmy!aoMI4r)G(kM{xqqu*t
zn1AxPpW*J)9M8Pf8qVxj)sH4ZR%K9^{P?hU10UslbT0rr2O;TyKLEVSB076v|IQ6g
zf)5EO;(qxbSN>1$%bjfB%%A=(GpA5zxWDf|=mRjub3Eex!J2`+N3;mcH_)}rf&Vrh
z%nSLq@nHCXe;d!gjpx6eXZ$<z{5$d>82<l=JXIP+V$*jn*4k_QD@;Y7gO{O)icM0C
zP*P2jVXzytiCAR;p=>u@QzbSOEIN`5g<sqJD_H;G55xBTnv&B#xRQ7SpyBxSkz=P1
z1wmCuF~R(-2jltwc{GQsBoac<2iW~fgmPYIc##aUblsa6h645q>vm&m;9731yF?o>
zs_2e8TA`cpP#gw5kf-+96qQ!KIfgxiLT&&~QR0X9HN@cv>B1gN#tnH!{&!fLf8*qT
z<Kz*df8*r;QIg4+LsZ#YsqZSd9NE>+5}U?x5xm@a!Ia27FJ)H(PRefU*fpWU4fg~_
z6K&{!_U|N6M@QHMQ2pkXOJlOBpQFeG89{4Bq&1^RCCn0;keI$!!SAdIMXXaf1&@#J
zxkwLhU>btS1v3sK<l#E$T`_5+Kk|c^8znFeyvdS>Up%h!pNiAb9<%QoPnWtun)xEJ
zJ}^u@z27?xmXwM~$%^ki4u(^ZfYrru`yHNui5$UP0MXr}&sBXad?XBhG5?EvTJsO-
zQ{w|ucaL6u3@fYQHX1RvYxv$j@Q@M_T*!dvUY6|h?(d{w-WHUgs})mtx7TAS!v+4C
z@$JWi#KSMtE_jbkj%WTm2`mG`2hvIM*YEd;i;w^~QL+y|O|l*uMXG2R_mayGgnuXX
zKdNB>DiI8!Ne9zGk*(3ML8I1G>q8_9?Y=H+?`3~Z7~ZzdTSeRXk;!+b^^U<{3ks{n
zI7EfB7SZX8=Rr0_^oSc;mBOL3tnuURN|1lAHv=)s2+gr~MS4{Ku<dq0lW3ke{8=4k
ztiU`h3jI11&ELHV`Vpe+Y~cp?9W;|8+A)Z~=i_o{K<t?Zcq~PyCoFtO+Rr7sRl4R_
zO^`+yzs)s#)l28X2&&KJo1ZRZXLC9KP}$thZ5611i82Yt&fZj@<-B#?`#iVLUY1IT
z3B@&+uKl564q}r!_d>D%>Az{wE2lFo)UHOJ|4R!1qg+0!C+A?qZWFql$?`1Ar#SX%
z{K<h(g{tIejpEUn?#f(HookC1S50|HQfxh?8WoYLU8)YPlQRpaocBlbxL+12!hV5u
zC{)7qkN_{GI{L!C64p8Y_p?#(L;;`<0-9B|(AM;Z^G2{uJw^c0Q)>GP3UxA1W{;oc
zcMNsTwn<&pg*gR=3p<(PF;4T@P7|~lD%tlWAFqwdtIqzeA0KPneNA}3z7hJT(zdAD
z7SRBvV4MqT>&r{3reBJYX~<NyOb*aYhf5Qm4%g+kYlzayHG~;UYvuPVgc+f-LKc5a
zaSt?s!T_q1jk(P~4thoVUQK~=kBc+=Tkz03^-6|?&tF=@lK$mZ-Z0sPN=|V8SqnRr
zyJ+RU0yCyqx3#ycTCGDaNp`V9YwJ)B`79qAOd0DkPZ47Q;`GM@S@ASkR~!fU*hNH}
zp}UkxIU~we=PC>}0=wCDS}^HJ(hg&@U94TxElm>f@DpbhzrANQb~%{1vNX$e{czWO
zdq1w6`<ribg)$?qn&5_&Vc|mFZa+@QwTVgtf<Vr{v_)Gyx+T_@vvs?&AP`PNg0c>z
z^p`h@PcBYwLQ__9qt(l_R(7?FOU**M2IyH=H>mZc=i1I`_m&z3sa0;i;FN<_(Ekr_
zCJXB3A8+Trw@HCP6wPHm#4bZ!HzcZW;8t%gFObrOr)lLn<UL*frP%oHV&bX;re4zj
zW?}Z`%X2)T-y*MTRYqLaQ7W-sV21H2;m~~Qt>V7#jn8BFYndpUFBmP<!R)t1>0ZxM
zsSEWw%inbUkb4N}6su}i4Ahj|Mg`J5sOw+YC^Ly2Dj%;U+c9z3-F(NRPVN~F!i_w=
z-j3w4$yXP;c~V-V!k}$a6ZEsIJxklmies~HuW_tr+$qlao~o}O<MKYnu;m?(H`O1f
zb`j&$niQ@n9e$i%?>jX>1%Jyqz;U|bHYDIsZpAXAR1OW&G3Ab^vYAOtms^9*2=TRt
zEg?qdxU*bIxe@VlpNTLc30*7JwP%JcQN0yCQ15>*8O)GlKZ2dP?v^NjdW!dM98Ckc
z7}b9CE%E}Iy2y(qB7Q$x`lqBWyq`1ddm(Z7Z?WM=HR3b(sz@@4_^avsHm-9#XK!v_
zj<uT`%75|otziF_>r~FTYO=A~%mg$l`k!*WgHcS(yz4Y-aU_u|vYrZg(p#ogvAra(
zRcZSYQ<I-p1_$<FsK$rkPW(m81NY$9g=56;;(M0vuv6sj{(KLqeEwV27TheN#6;eP
z{#rjBo>;f|w|NU~)iY`?j_cuM!W)^Zy5E!R#*<H7PK%{1wr{Ubi$(jK7SK%zoE<2x
z{e=3g(LWBmsj^)$f=sub4B0?buGT8ZfG<0(xy{*Gmw1$cSv!2}CAJ;Zby|}fa^Bq5
zlm9bR>yEnxUN_dEcXR~%IVZf7q`K3;U8Vn4(WQ!Q00semPep~QUCXfWe%BQnibkzz
zt#+sBb3!Gnz_sG(PhZ34sK$!U`EnGa@=zJAUEuTQuh=NrHDirHpi1hxUXGa~xHSm<
z5}m&;FKK4qqwR59YE*sPQ<A^xkU!n^;CD!JcPpI|O60v#%oDVL@vP=Yy>j3B{J$g_
zF7wpKjvpc07j>RTz)L);f8-e5p;30Y08_=7Du}Z$zWBH7=q@D;Q&A_PY%uRZ<lCl0
z$+>%6ZsINudbF;!QU>;w%-#I?CGeG<R6v$%kGt>LTqAivZF38|TQi&vo5`miEWcOm
zHu^KsqZbLiQke08-DyaAXhtZg6t<g>5<snVLWc>%OfK1b<p`;lF}bcoYvU2Bl|$Fo
z%7x$YDu=Kr&v)$7n%hQbf$lO^F=k8O0Y=y#G5oMk;J6<hAxgtO+=<{)=wr%7&pAiY
zfqyILR;m3cH#z<Gnp1&psYYytYJwqQ@zbC0DW6@LtGqq8;J7}=F6gvs`*^b{j9s<h
zjx5Z)*H3GG5y8p;6BvBQzP`PU*`(`W*C7EjZp_mbKB=cNFQ2-EDc<*)^7*k(`fV;v
zM0`<v*Kl9*MPp`)a&zg4#IcRvKh<4G^nYYK1??RdSaLC=N^edJKr6&$VQclAOfgGS
z^YardhWD-WF1_Jxt?2oKj<G}IsW7KsB#9WRk5laKzYnjY4Ul4}szK5d=Ie}qCrV&t
z)PO8j?j=iVWBUc^(Xs?g%kZN{Rg4T$aGGZ0*Exs$adz9Io`t?dr#UXMYov$6;G!aD
zOjGCxVIV!;`gPE3vb+fA2;+LtRN_nty}sXK%<uW}Z&1}05#Cw?-5Ay<mHol7SjPdn
zA0q7B3xfYs=uV!x2xCsU<|^qLeq2o)hpXby_|@=Ad~1!4UQyp(biQPUBQ{;H$U+n&
z%$1M0^!rhwO~38Z!ysNJlkO+9J-p_9cc4{_ohoMWTlJZ#!9+h0U;Iec0}0N94yOhA
zm@<d*p<S5z#$~uj-&^94E8QU0W!#k{ojC-Gs$zPH4=@}76UgBhA8N%=jWpXU7MuA!
zFLa{#J9L|UMh(bjZevF6zyz1q(9|ZowKC;pHU-^rOEVvDhX{$|I}BG7Fsgm}E}D-)
zB{y7W-yn(|)j$Z!^6@r-D;fs=Fzl{(Du?`v$pe+j4JK$I5FLzc+J_)~xMeg_TQeO@
z7dI@hf)7W(kR~haCEJ}@US{DIK5>l)j;Q-nnewpzBdRM)3ID4rS_A^{U7CaO&t60h
z-oX4KIp^aGc7N-5|C^Zl9}!dkW_AB}SY0!39+zKV&)$IPfYdjwWuUcy8OB9~!oCy*
zOa}tzbIkNDWA^LU)nWK5E39eD>e7Q?jAOh2=9&ZB6Fvfq0Ns&7aV8%QZq){_!x+BD
zcQjWcU0^l<OWpb*2?fTWyp{GPUt+vHdHWwMB7u>)yy~P~5{1EaQZR;fEPoINdCLLb
z#IBftVF`xY8^6KFpA0g=%+!MJ+t)D1%-(bX1|VQsfnlkQvLTFHQI7_(zbveB#HkRb
zJVeDXyqjysd{;fxsLwTCG+0Vf`_wHRZON<jFYq-y>G_|zd)9qmjZ6@|Me&q{mE$;N
z^%+S#9)I^|9@Wo0J(!=dQt*&p<x6L|zf)(e;CSX?u<S#0W@eOCO?S$)b?m5<zg6ta
z(mTDOt?AT>48p<HiU~7{A9REt$e8AWjwM9l6pMw1eqg|&p#PVDJhmC*hUz6Ug6Ue)
z#IPAfFn{nOk68M6O2!rvb8>PP!l(k=nXu4MO_)FPZBRq0NJUMJ(iyO@UKVB<L&psu
zwak<nhV?+kSO|M@Ix&DAh6-x^+E_=rAxU8r;@1hcjas@V;M1?eu%*<rw1GK+2FmlF
zm5vhzA35|-m8+773+rRy`df2T!R#M`@6zpG;^BY$1iL%ZohTM#81O+{`1AR7Z{ViR
z)Lsrw<}97%(y4SU4+{(H#f-m|rhY16G48h28T+K}+3~efB)SErXg-8lZHPzbF~j+y
zEt@Wi4pw>Kn8I34^*eV?Is=0Ka#wJ@1klnPOap02vx7ahKcKIND>foL9Dl-wbBriH
z`}W?`JnT}38L(F48OdJFE{8Ty-jT^7`|rFlF&UBapy!Bq@_Dh0SGY3nm_PRvjueXp
zjGU_KfadSw)yeh?MIDeF_GcN?+LlhkBFFZ5m^(LY0uvQ;p(Xx-;sY2Id>wjG;@+2)
z4Fn3V{TQ6iES<jzb3}T+HlBcvq}Q7<ui2jrmG#2NG+LRnuBd)wA5#Q^!kMmE3~S&S
z;{2iS?Fb>`70j)L$-Mesd28;;ZogmX|M+k#(UTpfUD>6BCbd*|b-``d32sSeF&|{{
zeXvj^h9?Z>FSo_mj}o%8v*$u*$eda!@P3i7C~R@nZM)tr52U|%bPEH;oiO$w^dmCM
z0LRh?yJ)va;$J*_8B6SGaap$B^BO7))k6D^{qVnu;Oz=ATl$C<5f@AS`SfR3vBrq5
z`sy5!=hQ3v0fX(R5sxJ$eJCj@=WM&&&@=jT=a3sxi}}!<-3zNTbKZ}3Tbh7IxeF#>
zZ<ZVPWa^to=-O&6uEO-Z{y>4H2A2#!MEnsmA&$R}!a>(W5#zq45+Yajzje@H_ErHL
zF&$ai=cWTiPh&Nl2cFjB>0|a`J%K@^TDM_dcM=TtY=K#n#^C%H_42_hG#;f2zod1K
zhTnEz!m)vpX!zGp3fa9Qe9(2v(2rmo+sC>W2vHwg)W3FVSQM<@xZhE4;L}Gq#;E>$
zI{g>iVD`E*W>}X5O}Z~x?LK(T9tC#221BrW#~NRog8PR{7IH2shekOV50oX+mo<@^
zkWd57ap#;Jz+7ynKc>uE362rrSu8(&ewbN<-3Kq?e)kKxGb))8C+6w$FTC8I4?HP`
zJ?)|}M&x60+VbU}Pba^R-9UNoSmBXysSI)wOSUk7bs5TkVR$E1urWJhuyp5!B0dR)
zCSem4dlC_@iT-i!hh4YIQNj=FS6{K8tkG@Y3EB6|A_0W-8qcl{U~5tpi*YwJP$rB^
z9DWHR22AdV_!=r6vnMbYDHnVx{%+UD+bkPFJ;)Ox8C8QK*gF&({m7k%n5d8@>V<Fn
z{g(7*zl=xhrtr>B;aOPfRZe5wCThFVE`8dbYKLQ2cz0R&8_6upC`1O{_;tqZ+{MLf
zyFG5`2=u&NC9$h3+vUrb7rD1}cieW@-TI+d-%L_c(snkxerxYj-F7D2W@C4zVm*-;
zv<uC2haYd0I<KRe%-vA^!|O#kIb3_6SSvb#Z?U^OY=3g=8XZ!igL+_><9Ade9m)Da
z9%{W0%|EwO{%f2CYuzdpwb_Lpn09p?$9(A&g>q>@(@wa?{=|HVs1-z7wDJrrljylp
zShQ{qEDNniwF)lmeRH5+aM!lAd~n%Z&xyqy;Zf@O$AilZyDJ?juEBcAyY?ay2I#`3
zTbF8wH70V4^&Z&GK<5m{a-s0}1u4V9PH5Ih1Gfz)(*(97)#>F!Cv6Ta#lzQkgH5p4
zOcu0?U`Sc%SctqQCrte8P~sc${*n9P8{rwbPl}G4{A;P16*<D_DP?s8;t32!Ye3ed
zh2F;A-OAiGcH3;$pKTK-%fArFcRuC*#TI?+-R;)hC%a3WyZ2xQbUw4<yD@VE^`?s+
zuuHUc&3t#w9Kyvl{;^<j%bVe&+f0k~!aMCdXyoo7_$L{DXun!6yuv;ndgNtv)Tn>@
zn=fup+NJc~h&DFd`mEhR?~?XgN^by-n%#-E-4!ZzOL5qgtwNVgyPDYuXO_h3?0vcO
z%QeWVva%TY(;mJn*t++8kF6uTB4Tj|mSL)Dt02;<brZhnZjdxtoJz(dSs7x_{))XW
zk~8(SNCEETed7VT21;(eMFklz97{YBQp^`^*V=}wBDY53Ub(k$1hYTN5&?GK<1F$1
zcj-0YyT@Yi3C4)1s3(nltyC87m+UI0E=QQ|E>(_1h~fQTQ=E-HVu?5J-^ZBcylEME
z#Xu~p4tn#}9BW6Qt2!NM!RmF)`q&xh(CzM2e9QG2aOG+0W!RQEt5)i`YJ860_Q~QZ
z)B@xBc(>1Md?4wn5j<7wiSLB@-Ed_Vm@C7Ae;}aZr=otejhd*6OLD_EBRJM!@_)bg
zk3Z}I4}uzeP=dZ}Sy%(*=(mV2S$ZAtC*1R7n4hy}PTK##y}LV$`3*-1UgBEYdLTr-
z@Gwv4tL8ua+J}qWe3%C!B77~%YY$!ViL?EO&(2|lv)rF}osh4(8Zd_^6Wshm0E9@>
zVmLFsP=WKxysTUD{U%I>U$y=dItbiueNESeRfmJq6JOunhp?`{m=6unUxA#<ZCwp!
z|L$u%LJMx+OYpB3hPeWF_y?SqG$f?lJ7}xBDjmW&g*f<AJbPES_q~7o;i@aD)}#=(
z+cO!5<i?18|7xCQ489C8m};E>^K$|xI`%&h^To<B%ssk$NnzhC#XN6p%=3PDY5&Ie
zKKh#d{@aL)J=-FRL17G043z)jQne_+z0KW<#2q-|QXfd;#gtJp%~m=du4Ah+k16UI
z#rz-k-U6!1t?M2a5RgM&5u~IPMNmNz=`>JOKt(zQL_)ed#X?X}2}w~wQo2(S1O%k}
z(A{xp{_DZK<#)YTzw!OY_`PG?cZ`FGJp0*u?X~8bb1vJxzAU+5*lGn%D!M`)2^Y8S
zyT}XjSgTmXf%bYwb_0yHp^sDUAj}fK9!)v%3SL+9?#~bX`N3+MYtf>;T_X5+ENfgQ
z0vf(*U$^v^6+*t5X!ps%aAE%)Ymz<jClbhv^W&tjTi}-rH+A0J++0jwce-e`DDqQy
zuk8s>xg*O)VK@MT$m&{Tu_m^{GFbfhGPG^|fQ_5+9y&;s1Z40^wUALFFgE6}f)iY}
zNb*@31H-nt?BQOGi;Js7hAW15=C!Z!f_<fExXi_iR}jDCG=rx1?MY?OD%Y0EM61D3
zN~0IDlg+X0L!~`a3V4gG&OKyHd|sW+U8*Gkd&GHzj>><ox^Ub@%<k)h{%((O-rW)6
zzASTbj{R1~_AK$-rDT2r?Xz35+)CGwbAVIr@y**8!a;rtdNW#lFdmUeKtCoh!!1~P
zQT_g|=f^OC990cG>5sq799Ie7=7s9P74;>~GoFPrm?@+m>|$Ti4Wnqap$;j!_~y-<
zq76%9S?k0PA1*3qnna|5XM*`lFjHy<qJdjADE5s&qF?1O32rp$6&wYEvsr!zWG`RV
z5e9>*93il7g33g8yzxGJ{Ud!%dLQ`Z1-@O8|D98F`q{;ztG?`uI&LaO#_Pi=Tv`!d
zgG@kC-N&=GR%t@And@{D#eB)<${s)jHS%%TlLVe;Fl4UH5S$Eh4mQCADVXN5GB#C0
z+BH53aBe#EvV+O@?U#95^qC9b|M;;oxa3){tV7%xgF!bLV5+N|KM_SNl|7X=>BteQ
zP_zs2Qm2JUa3*8m<7vKxKTpKc-+L%-ji!u3KTK0tPBg*SXNN%no|$K>Zh#MkFMHqa
zH?4`TDiI6R16sH=0!yb~Ef~}+COY0oQ*{+9Z`~UZ)=M2#EqyOd6&Fq`d1du<8O4mB
z)^&NY1evz2v*v<ko~wNdZI>aC9V=R;tLD5oN7wMDfIN4Y`+o??_nj_@z&1Mv>slq^
zX!XM<@qYDImD&2W<Uuv?qPLJEaHGvPM!cYDcwq3yp<{X<Uc;Em`_=K1@o!`v;E{ZL
ziEQ3D$QQ1ST{8)vo(#irf3QxSxr_63;@9{3yX)!3{YY~e;7B>KOv^FL-{eu3+vjRX
zQ1iAvQv~@wbfE9ogA%Tb+-cZ!N4M9soMd~5I_9oY#6jMNa+;M63;EtH%q+i6_w<+B
zSM(92_9pheE*o2^Bxm5b!}0z4kNm8Q^Vh#8G3<464c2nxKKp;~;4hPx|Mw1lpN;;%
zbMOPPsO(@Dzz)q|@~k(Z%Z)L0$0Lpd7^xA)TY`m#n$evLs#BYR3itn?fhu`$)ajU7
zn*KusbU9|!er<wyM?;?E*|Y9EnW;t{tzckuMaXV03H-ZC34I&LL$)}cBX;=9n#e^3
zi-d+?XpDL7xf6urKt}ngVCUtrA1(;ox32ChlzD*EDagO`yWAA{!oN&plO`RIp@+dj
z_UQ*<NX?LGecxrMWMOhn22{4K$k1g!7T$p^(k{Z!@idTF`nSc-eaUBTRq%KfkmPo)
z*6He&ihs={Io)4;yycbyyXhX(yp8+&$`7@DDs0Q~GsxZer>Fekg!K6K8&I~LcYw0Z
zs=9IQfFN{J?ECIZEKp~Y@1--ZJY3`~vCGmQamsBkxHP;Wygc;Ok)FqPMw=EeP3~(o
zjKTqNPco6Bm+?4K(dvqSEh1e*U6IStq~^4!F7SoscmKnOhx+0Debi@=)Kwp;b>e^O
zm36up^6=POiQBV^yHeJA?r<PDVmkC&DtCsQ(_EbDK4vqeVF1%`xWT`goe1;19<sbP
zARWX57$UqnRdUV|#-okJya-K(>iR9d|3mVJ$R1bu{vLlQi5o2TPg40k5t{|y?ym)3
z15)-X|I}UX>k$z(Bu}o+V&<8cvQ}m6qy-anQeVD&iJmp;$Zi2&!ZASdQ^2^pp323K
zy)uZq0x?>Oy8z`9A?1N2aw*=3QUf!zs~_^{kG}ut|L}Mp-@XiJYBAr%FCe1Kd8CNp
zK3(XHO~kUKi?;e*QT62n{7{vCh6=Jq?&-_S@|<lzV49!o>SAMO$5|?Z*(k<fSNG0f
zi1wIa5*X&<tvvwD4$$O4ik&+L=jjeS%0>1%=lAz|j4WF-(Lc$fnFtUZwwvy2Z4$i~
z5QBD_J!lcE8xK~Y<o=RWew(Pdmfiz+W@DX?lXW=EwGGRC?(3=hl1OhBh*bOez4j0R
zMisQkcAq@}wsAF>^<8=P>{&WYvoru}j03JYJVnSPLU{9rK!QLJX@&PCk>zKQn8yD7
znD!6rh5zm6bO?#JH-dS@ss=Dw*g<on3mKKA1vZX0af6!E+IvJ9F1eE<HS6DkGA18{
zG2;Ihk7|3e<=Q>KyOhC%(n`PtY^E0gu7xpK^Kp(V3sz-JUVZ7D4Y+~GnH>A6XL9e$
z$mHY?F#BW2Se9ze0s^J8=x-Q4+Ju!E6#=|IP03+pudx^IVLbV7x9gWJ`9rnc*B~vP
zYFGfR-j#Jsficoogc(e2Fm)@CZwhAVB|#g`B*Sx}V8aQixl`Z7ur(uRG+g4l_t6iZ
zQTN-@!Y%q6>kaQ6<(j}GOfrZ&1&pyi+`fIAIe|*L#cgSJJbO}&_P{#&F7+|}`XL*s
z*DpT-b{bb9h7tdw7`Cn23dr}3F#06+<xA9U>xb-dfW*Tz(t>I*wVJyiu(3K@A}xBd
zXfJGgoK1l9Z@2yFf*6J@H}$<`6srSa!U9~BU*n1^wctl&tEQT0(ANWLH=5iNdqb_7
zuNUUHtar^4tlJHHqRt$%81fv5B3xPVRMB+a_kIaMZo`wH9V64cnq}t=h4VK!D6&ES
zYYd0yN5U42FAY!1%xunI>6pY5$9=5oLoZZG%#kAxv*5;oQ;`nFp<BZqKYSSI$FaD6
z{AjoQY0pI1D9e&gm|13k_6om?QR4m3vYeF761U4Twi>=dxHHcXm|?eUZmjw<$(Kpr
z`$T>qL!jYWv&h?9d(OE;MDf;n=N~ik98!Fv2vF~Pi>Ha+Dol2ArU<gZ)iGqSTmEL~
z<tGo1TJ@acS#CYL{#2Jjp2huvDNAr$HqnQ{NAfBSfV@i{%dou9-uJhks88JvmH(RZ
z6{iUG`(LV@=aZC_9E0{`8em#@_}5#K-@v86!@;47yQvvkWNT>BD!BdG7pwEsVD^o`
zaFk!MwD?J}&Hc0q{r$xKlwjs*JG)b%?!oiG-5Z0>>rGCWrNMNoaSlV!wge`UQuEgj
z2+kV5=IVPvlqK$DrcJS#D7s!lnum|bFYh7Kg+$>^pwV2~efAU8Z0`Y!H+@d)cpX+d
z<#q}nuTO?gsnceO&&Bn`MZF@|&8}^FKFuH$o5@D)f0w<by-~+kI3u^`CG<h%le6OQ
zs4)HQrwYK?avyL4>aE`s3(OXwwwEv2Mu9OYbM$H@RnFQ%8y9}%6TUh)g|+BeXt^-X
z;$L-|k5z90P79TT<NGIkR-LwkZ}5E|{-YY{NApK5nOCtYMXm?+8V$oF@?jd_v1_6m
zl^8Xp+-AFlF^cH}X&lEBWLAh2T|dTfJ4m%6bx*PoynYB3#^&BCqcE#rPtb=oM0VO=
zexecB{IjF$<`wMs^zm4FPjh3q0j?BE;k_rCKqm1rD-pIdrm}|@J4>7{W*{FTM?2S@
z-fi$hqk>j~pmk7vfB<Qn?9GRl)soVYtaFDL2EMY|4Fu}O!TjYw9HapW%mu4fy%#M2
zNk3W2Ug1jseOu8Wn5t%ImfZNqYxskSC?3UyepJFjzWrnxHK`C4o%L*dM(cS$<IX|F
z_KkpN&_Y_zddZeF8q%B|4^<N9hkNbE<Ds)upYF6uYtWhO8R9U*v)Sd0HuHS<PSU(!
zZgtv6T>-o<$D6f$(qL9C|A(yo%pd7ft`<nLyYm-a6lJ0DD_!|1@A=tTvwQCe7{WBc
zqPG)SjeLVo$Q>Nou4l9~ztZ9&%$sjiwt7P$zcq{l8n*dMRmP>iZiC*xqtYFpW^jE7
zP3YFUOiHD}k<06xks>R*`n1DzWjuYPiU-4Q51qT~rE!6cxwd!ot<w#MFXpUg6QslY
z@6f;DvzQJO8_SIf<{zO)N#6%(K0W2wF?X&&I6gW_&$>$|acxZ3KE4ZVTZ8SIIvR)T
zFYSIVPQBSr6^($#ctp+QmIQSsNVj*e!c`QmaRV9}Tfc2+i2g{6=bMT;S$A}XZ+)@X
zJrX*zZ6MQ(hha*`uD2eAAu?)H^Dsq38L}BJ!t){go1`1`EYiVb@}k?$ASx$ifejes
z6w`Mvrn%td`~Rc`a%M;i0K7pe**<1@1t6rUa+-*mJRzq%;5a|YjKd?_)!S~g@K|Ic
ztCb6eZ#EAUq?WyhhFP9IeF$IOM81K3l<MSu`Q~iU4vuyhaO^J$y>n3gRk4)F+TGKG
z;Wsy<#~<%_WaxV!ZT_J{hteqzzTEjtZ)~Bk1L^jr|C~#I;d7t!k^&T@moHx~8U(NQ
zS1_VrD??5JBarOY>*>L=6g`Vna4^w!kszA&pJav;7^xph{k3F}P5erNAuUEEU^^Yp
z!pqokFPLlMkPA~!XlpVO9cRiL(X&o#%WalC=ZJ#5DJa5PkJm9IWi%!b=Ubmhxw^3K
zRe<Vz^3cgq>4K(iXeZ0;Qq7%1$?OT4A4rT_>z%Spp9-z_z8y=E7O8S@md+|pBJ^qv
znwdeb2-z*9);@jP%+s2df;pCJP%VOak_Ul4(A;>bN{*e4?REf(&c`IwGYDvj;w;sc
z>?}xvPW)37benXks2Z@uyep&Gw43sPf`;ys>3N20SwI^duj1*dbXa*Pul5QQrCwn!
zx82Som8IQJtt{PdLwp4|QmHBBeP!J8YVOYKg@vv~gFGtEAyxL>p6K2?9Q2w#>x*yY
zz&!q3yn*&zTCP^Lm6mF^#14zugI2Q#Gqm%as}`phX3i42S0~a5wbDBbX~x1d;DHr&
zhiOmP`4#OOmWitUC?nDMxVeCH<B#H%<4@js<Sc>#ijmNJA)eh%HiLPXxbwl}yPqHb
z9AoxEjFBlf?~o+m^p6t5`R^U0uNeo~!8W*4fO7aC4|FC)SO;Oy9`r2Re3_0PAsl0q
zw}Els*N18%YAIj5)F2P{iE*Vz{`pV>y{}9TJ3J)EFBIF26`~q-F-C(6a{nWMQt@oe
zwFJKUM1nxVVI}(G-*R=j%Imdf4%k~B=0t2(57~J&#p@nCsJy>1AGSfgjkvQbvlb?N
z`YqWFUXo4=JE(31m-$hiXzO#aySchnOlA|u1GLr;37mHB&4}^0<QuO?!{7nhHe+YZ
z2DYo4eWsK4?A5?tk>#q!@cUVV73H)~UKi!TzcXgLE(Djc6Lf1A);XN1=~hC{a-;z%
zQ{tT0k&juR_<3NbMm!kIez;wO^^7~-w_*GXaCFoP@Zd#EwX4{f4Wf1us;H)~#Ejp?
zrjpaOe0wxm_b)fRmWLE3!_a!HSrf{Mw!w3C&?`p>WsQ0E)&`AZlU(PrLR?40C6S#C
zspj`^;2*?H+;78<yFg-k#Vu^T<Ouu0gT(KEIpy7$Xg!JU6?R;1U45+f(kigK<WTa=
z<yg1L7cAQ*@RRHKEs63QQ>=~c^=d0t1f5`Fh*gJmB5{5OWQ2~wW5p5a&vREtNBMfs
z1@jJ{T4~J4Zh^tHbo~!Lv$<XK5Zv|rFT!2L9a@r)5O}bNGH@M;Sete1L#^x^OiGzL
z$NKF@M)_@LuWdMlg%+)s^Nk$<WN>?{NS9X$e0ryNF-BJAh6<CU(sTo){v2&8a#u^4
zAE)-jo=hN9PtS_GtHOkQ(!t}%H#AqI&JsVQ_eTD#2$x{nm(3gbjzWq*Cf>VXL1|@y
z<*@?j%D7@TpcEQ^cmFYdn7U&Xx7DO0M&5ov*(kqdKyY5$lQ>rNGZ$cLt*O&yHyKlI
zo>2%fy@k_M8WM`<ycjwMr(60^!OrvSIg35r$i-@#p;gcjA52Um*nEiB*>_iMuI=j+
zth+yv=DGS%+y#W~WCbgV5o&pM-0B{?&lFZdp`1zlyN>tgkRAT&X_0Gbfinq_<T4<l
zg^YQB(S%06nd;Q-_e@_?Yi@w}a|fK{uC=Dd0G`?8z;y4x_in__deTjv)<2~Me1`cp
zw`}48MSY2*2I+10Sy)&gb2E=s&X^FEZ@+A3@+pT-Sg5RHuqk}LF=en+%vCL{yOW6e
zO5!2qt4|ZCs2#5N5c4#Lhy>8sh2ra0CS7=XYEn*KQBlwOe26|rL8?jETXhlB$PTNw
zA-T0&J&t0V;dTd7!W2(#!Q99urajjD{Cx0O38~0Y%yA1y5C%jsT(8gU3(?lm(UDV9
zqFDtPXP*H`Ef#xZeSs1ZXpgk>QJ+`&3-bCyJh*Ryvrt=zfORV&N3I5FAF~}7T672O
z7$z)7p@PUX?RE3%V4U?JARhxV`SUPpp;k8_PKE!P0G-5Q56kjMaRr#|p2zX<b-F@0
zizb4sq|?04Wot$XZTN+4?XqU}GS9Kjz;w20K)pqrf9z`e<%PnzVTc~`w@UK+P{Zz4
z5dR7kQc5A_>KZ55l(ds}4$FrLJ6>Nu%i*cIy=&j64ShTzX)?Hw8%sV;K@%#SWMEb`
z4oMBe&`DK?={E>e1*yr)S{gc8D&$fuqW;O3BBa)BFuI0I+*8%3^>PBIb{Sb)u5C)1
zUftdyPkO6n%~~nZ%fAG_IC;GvHNoKfewP$MBg$_l(O6UUF+&@kXh(xJ0jrtveZjP)
zBK@@c@YP3Q07hQ!;zP#?!IvtUP3|4;)EK;)ibG3Q0~M2NGmZiii@m>3A~cO>kgi0|
zM0Q2GQAf~xIxFZ7dU|@$U5fzS>l?IX7#l;jl6Fa2C{4zgD?wln)HFwpe*4pYM!xWG
zkyxAbghW1#LYEFyh+sryB=ce`05*@+?Dj9V=Rto=7bct8{L@7HUqG;}?<m?!3MnQ0
zwcn>tuaU-$W%e%cuOL*c_JqN$>LQVfTq{GpT?zn)8&>y<w67Wn3<PK`@UIWQ2u)Qs
z&gWZPcIUc^s5{(!1_jsrtJVu{4B!CaPso0ubrkfj38~Hs*+&<bD<zz@AFDdqzP9)j
zrCIBN`m-96Yv2L%$U7FGXE<RckXiJ!yTq#vi77yC-nQO0%aNH$*Fo#nffF!4+SJyX
zW-#7iT|jy8nL5mACc%3MU@>amsy93Kj7!8GZ{?qx42F(FSTSsPd0DKx?EdcSJ+E(B
zLH?%<!%DEvtR|S@%J<quB3dJv$*n|l93@<b>QT!9G=2BKOO{$bzxHDZp+393iGkp1
zjl0!G9tLl8ez>kFbg5iA4nUf~UEpX?cS_AFCVoE$X}(p7x8K;k{g;k(6^!Cv8k6u5
zrg0F~9+I)|DSr_M<x=3JF{pyx3uGt{%t8)ioT#kpjvo@nhasFDoNQ=cUB~QgF|QUR
zuNM?vIg?}a`sU4HnNyqM1DR+*0~dpGX+`rFS`E0wJ$ibs<P1gL87n5_NQE)5^+O9L
zCH+VflVNR0VxTj1T&*M9l2BL#sO9>pd+~P#Y=$L@pBa{Xg_JQVrT~(=MZ%a$yu7lx
zSpKYHNPMrq-l*CUukfn)iDBqYf-!b1cqy1oTJ+z;s{fe$__gvso`9x#pzAPubOrXV
z8@E81-AgdUpSP+!{C2Bz%(8^f`(%J0aJxo3pL$iPFFrtY5rMnFM<Z;Ec3+79QZ7tp
zv>NVz+*X9olT0dN(>3ruPz#2PmN_`fXSvz)b`4}ES7JJ{@JZ>f=!QBz%3?Tz%<Lc>
ztgfb8ncf$sFgtLN`FB-OQ6=~4DQ_Ab06_?i+(G@<?9J18&6|e%UB&h8&Lo(GTipyD
zmhEv(DZ0}35Ip0dFKw$BcJcv2fS@5lHtv^8`g4@~x499(jsR~EQ*kn~nhBLpbmZug
zL`x;0*KN*0bHzOyq^1YV9UOKj^2H#`9Y(L8LfQS)=LZCVG|NqSunFLwX!b--jJuH~
zhpvaS<<h7Xj4YeDoD7f`t<cE3(>a}&6VN2h0FbJhO;6ozkH|hr@1*@))l?_d{6y=v
zlOIccd_%~BDnlI?6hW?`RJizAK}p#O!(cODru|lfF0kIWDrb58+Kis^yc!_pdYe7%
zFP*y2dFQ|FG;3F<e^NB<IQfu0Q*$8I11n410W;y6bObt+w~;#QPXdWAWS}1hx=oFm
z%(3}g?bmvB_Zxup_w{bfA#>x!EF`czd~@eIkmPeH?owMnbevr2N*Sn9md$|@GOIS<
zx`a4zEfYD1ZI^o!U(EubGP{ByyoZdW@y_kJ-O*_3&UeX~^G#!dV#;If2zwv;g|%{?
zwm{ub#a@G6(T{a!u_UC9fwbEcVc6p?)7QT>0(U^c*aeZLwpafqg*K@X!+&FUh*DY#
zS?VP5&k~EzyB68T|9+{hpbOlX@3<0v4Io`B&}3<o41IWZ2U6aa_>4|{;44=+tbw#A
z!;9XIb<qK|QjMUMTHKOs7P$!uz~=iND9}~!^H12ar^OK^Ebm(db|6!XOFOSV-DNfu
zVO3u%p$G)H-C@<lA#0b|bi5w>H`huq>{`mS=!Q~yY{PLqYnMuU**)Q9Dn!C#4ibZp
zY7dkEw8%WG!eACC+?IbstN$Tl*Ef`xDZ{sSskQq1`^CENQga!W`7#x~U3tI`8iKvP
zoSE{brmp}^EFWo%r*+!ShB|@-<>v3-l>eAk{Ar;izKU92o&nfmPPrHOC!{wXkO+(=
zb*v}fS&3K%)Qn*L<ylxiH>PK?3EA&Rgyw37?p#u=K`tm)=+*v3<@ayvmC*4-=QRUb
zK^v3jNf7KC3!I&i9+rC|lC)b*WDT~0njU1kY8Cb4Y*)645K?#sAT)!K?;qwL?6~}a
z`V-kfBeFj2Gv4jRKyn*;LD!{)m$av*0a14sW5Ez^BqRd78!Y0SpLVU5xs@QAZ3yWw
z7b2>J-{~}dT$S*ZC3N%AIPlrEVRm0KWZI|kiD-_N!RS_sm`9Ptn^@+icIxLa|Nesf
zM&@LY3-7@SymWL?(B3~6bhP}@A=T{alZW!=E+Qcw$+#Dh=g!<@l>W3!u{OnWV}l2#
zs>Vh~M=yjUSrq&t*MT61h|?WS*$Ds1!T7-x@~eO)JP2}bk1m?yH;7&Va|z$GNyXfo
zPfr}EFO|eT0LC3&v{O`6<n*xUxwWqqHm1P@M@eQA#Pay4s6DHDWOrB~;TDZBL4MlJ
z*7qoWrNb0#8=wf|H?K~I9Z^X@aZhA@5zXNhYFbL&n5tLTPWdeRmjJGRSRCyFZcr@2
zkV3j0mY<~Cl~{@S%P$f2)1pI>8*UNf1N(#O`Ry=(6FL%bMpg!R3d+|cuoXc8aHbbe
z>}Rgc>&FM#{X`X@b5()>brK0l&SoS6gw-CKxZUTEW}ZnN3)Prm>anmVCGXu-m^L9l
zUikF%3Cm`*xbWe2A|9j*Ed$9%xG1xtDAW&{c`hbb>FD&KHa~IMOzQ+!yn}x98TNc7
zAkDVy{Y%Ou(@K2zfo!M-QMc)B&{(v>4mJZ@_Q{wqdp>xu9a11noKy&Z5vF}=Kv6e@
z!a-20l!*3-_BIRyf%bW%LZd|#X`8Cd&k51yKKl0&7OYDu=Yv6dX9QS1k&p%?m#%`H
zc`6%q^8&W_3-h-FNN=i+P-6Z}M=>7p+7t|$aAiz*{=kj=$BSk``RV7}tSS`D^X7)h
z9mayvU~1`=sp&U6)eS{fyGgkSv((o+&=2g_7T=1budl6`Z`>Dc+>9||zgvsXDa^l3
zyt`YTccmV&o=_RBeJU}8HL)RGFduJ>YbgRn;}Hfg`qN@XfD&KA;X|<ezpsdXkhlbZ
z-zQ0}tRM8n#xicu)*Ck^sLEKh=sa!#N%SrU6*V;@t<t*$!ky-)^*VEHkLkSgN81B|
zKONw&U$+_qZ1M^~tp}r+Lkf$o`1DDDFnEP|+;%&M^cJj;<^Gj74G|S*Aw)Ks9cq>h
zmjNZ!_Ys`A37I6W`pROjPdrrdz!^C2D^)CW;lghYfUATlLE%(_@PQBlJ|3|6zjDUD
z1l@lLHx+lbfFsxkxj2RUOQmph+<c@3##6%|2aflzXP5z6ANT-q9C^<_8uyE`**~70
z#rO*!w?&KYCddN3(jpAPva??veo>Vt)|Qu$*@IdsB6T8j!e&DWZ$fa02>AEXYUB(5
zeoeqNw4&WP&CwFZ%0nWc)TYC`zC{Yz9xA_fdyF>*@R?s_ly08yzu`@JNaY%U>_qtv
z^9}NC!N&R24(%}F9>@)$4T<U^zbF@L7H9({iIl+jQAm7((m=r}Y!mlnaZ`Z+`1vnW
zAdsy!HYaJiBjlKY8`{<UqX!^fdF`?riU`DgqSEb7Dx3uEz!m`X<MisD*Y13g9FAPD
zIH0Hei^}C+wjebp4Lb@pCb~lBV!_O+$P0mcQ>ujp*zbbZjN<G-RXnswrp2`SarPnw
z3+t~fSk{faK`7j!>9y-BNGGbgBI9JqHp`Nq3+IPkUp~(cVr=5A)48V^)d7B~lz)(>
zjGrYwK2y<DD@gwC+m9fOeW*R&7@;eZvpQpW)XdX?MKQ+`jeN4T*vv#{0`(^hfQpIm
z(=<w%@5!30L)|(N_{MarnJ4eXD#!Czr_8Dk+}jN<F8ASEKU5O|Kka{)sPCa`Uxd3e
zz&;-uycPl=xh^3MciYMgj7zR7GKU{C$=~Ed->jHD$NJ4Dpomh*R_e?VT_NG^naPb2
zLH?|WX~4x?K^OoP;D?%RJ9y(Fm;!kyxw8bmiWa+em=3b98!`q-d(1p(JSa<;D$#Gq
z^obvxNRV-_xx(w=bk!#M6N31S2$mbb)w1!%MbJr)4+3c@OMR-Ngp!9-z_jNCLcva|
z0iwtFtGDziw8pu$BTb26Z9TF(4UtrQla&4CR`{Gp{9EM1Ll=4;>Hr@G6Vvh5@LP>t
z111=O$W7Gto4#8dE4ML?du@ltGE?8S7wAA458s931ZJLVWM&?hpkYk*!HG3OH;F;~
zo(Zb6o`ET9O$OTw{_ypsC<O3ex}tITA*}QMX1d2ZrOa;&udqoZkX=gRI|PhS<dZHQ
z$8!yH70N8}d#-O}rJ%3e{Hd?}haCMx4tKlzLuBSD_+h0rVP$mM#Ui)+;xf#cH5~r%
zY+#+g61tRz;3Tuzm-_klsJKmfPQKnVu-A8`%6Hyaw}N`<2E#dA0&PU(Q9AzD1_Ze=
z3?H?5KMKeFLAS)T+GtWzj)O;(^zPj|N6JYy`AkG~-(Bn}*1_GRqQ%o;ap_l8u-z?k
znCB0Hbk~efZf{b8NU>yRq}$eo)5wD#{Obq*ht3O+k{RSaa{)H72E>KoucceC1kINN
zY5?yN4XA;x^Jv`*9|WF*u1wQw(2B;ztL8KU3)>K|y6%19k?76hjPg%~{C~j-J#>{X
zT+oEtIhm)^rUY~xxz#xQ))R)uy-0}do<My~s_u{4&dCKAM+VmSlkFdEKm0LxI2mMK
z4JY59$)hUpsu=P*gh^8*28Q-6XA{u*`EZ$uCZW~fU?UcCroX80$kI^;IsqVn3*bcD
z8pLg|U~2*uz_=UXp(I3M0{7aZHiGCw(MWEAKJ^Q83*WWI#ko3Z_kzwIH6Njc0Hh0H
zE^2A!iCnLGFG48mp-vMp7vy0gkbR7_J}^I(*c36)lC3)-g;!wKF9}k&7U7*EZ5fF`
z+A2fpROrXNTq@_CaoMat<bG*_i7W&nM8v@-A-WC9N?qMBN2>vskv^2s%>`H?(h&r9
zBicR93{DRKfPOTW`9kbMa7d(d{<nl({jhj@oIYjaJRJy0esDg=&5Ho@g1O#L95Fdv
zX_1kUtzrHYBsY;Aq46uTO<0KL^y|SPKzJ9c-DTab3GL(ebTT0--H1#BjIQx4CwjrG
z?^m4-kb33~Pv>DeQ<~JBI}jhe1k&We*woacz6Zya^N{0F8OSvb!?_b$Zt;z{Z1Ucu
ze(Bx-6m)L9t%;3|&8;|WV|6glD<ANBSvk2NT3$&~Mj+YllLMakl%LFnUjdE_wXupL
zpb<bwnUHO8`o7K)ZUB>WoCr7jSx<Xa+x~|LKrpoL`HagZCam=R)%Zac;2#vC-5I5T
z#a}P>AP6iDHp(uCh^f=H^xoR7pwA332n7Nt_H;3{6T*IDzsn%fiP%5>qIwi^3$T^C
zm$$w=nhs<3&Lx^vKLz3cRd;;Sbi||;C=Uxt^=pRKpmf1qs|Kz{D-cCWq|d#<3PZXF
zufN|t_^-J~Yy4qwg3STFLnKA8B9J%TyPtu&>4fl&V!-a9t+entYWyyY{QI_2tbLs%
zNYAj(I8=uUA@x`UAz#cYIJUa+?=!pxY_p-mJLsB`CNdf^9Q*ISPk)nfEXTjPT17)E
zWM?siwNu5!wZp3II?(WDYm`u@3lR!<spIdS7zv#JrAY!Zye6LbRO7Br@NqQ)Y$gR_
zwI@UF**AAM@~^?$*PVI@?4V|vV}=2B(>oY!kR{N#{oN%1if0n_Ke2`Q8{N2B4tGA-
zHvr4q>8eyJn%?fRoSYK0_AJMmYr(2;>nPlFA(oAbSqCL8i;%Rt^x)546KE_pK9wM)
z<u%c$Nr@Y-$a8I5yDR@fY8TR_KL5Bo6NeQk)j7Xks{gkZiiyEbbu9Wyag@n1?3jE2
z#eaMUGo5M@@<v5BJ8yq$X7*p-XmS?~+{?$V)r5x+fw5=0s`J`>``JCd7(k}q*++3J
zk!6W{U#VCT0~~-}&zlk|*{97jPGn}Dxe`iGalx~UH9eQ%gx0>v`;FJcXg0WSA56qQ
z%o^ClYmiIjKF59UP$E9Fe3`)$ZZ(h>dOxigb%mcqqwBpBlybd8Gj@#dlS&nP-vG6i
zUiGV#(yU@3#JckpXiNiW>8y?QP1oK-<{$v-pG}z;T$sw>Y8@XP&6?pEbEs@Hf%v{a
z`M()vAPK~0J_`-l<ATQMq5Z9`Gog?^+WMrPA_V8h3x>8L+p@$vcgNSdfiu|-<xW!Z
z1YgW)gH(7(nm3Oy?$^fpgg($5Jl$Jx>Q(<dBOc2vvJzUp`K7h}^P+tyTkn+8J52J?
zrWUqBu<&ZVano1eC()^@k%Am@b4`Im|Mct^yA4ostE$f;wrSwg%Q@!)z1tj6E{s1h
ze@_tq3?xL*{wUh)YX7Z9fww%&p6TB^iNL~`R89Ly@$YBVZ%dDd*4UH(3+rN&K2gOE
zSLU&%(dOC99|cV-Dt$<{2Wg(?FH+6?IjaEHY!xwORug+-?iFA!lOSM986u7|+s0ms
zU`IECOFke-(%*eLYPI=iG#iI+(3<MuvFyg9FsF8(JB&|fYTJkU&HZ*3oU2MK2^IP*
z@z>#34joS*GcWw@F<>i)qXR0CQ)Tk?R28R$fWhgh?UUN5iCL%-6`}3Qg`YDxiBz#*
zaH<TD$&{sh4tUT4yWD8;Of>61Ia*TdgK9rQYWxGB1087whbdQ8(>D}>1#?G0&?hkc
zn!JScXbLnF72)RF-EdJh6RA&%Hsv-*BKR5V`Y-K6&=-U8gKpmxSU3W$F;P)ZPcIFB
z94M9fYvaakKvCFHAE%br3dX~`evyLk4~6`;0&e|T-;7Vj?!PGYhQ|hBSE~yaj$0%m
zZh~Pz$2C6_BJeFC%}9o=;Yoj7OcPP0e>9`~`$i#xUFdUJ$C`7OcYvoRvDM#tP5n($
zQEcqpD%b}ilTZ$dtAJ^?<NnkPa;znLaPMHKy^+jO`vpS)ilkYIcye1{3Brv^!C6AP
z%(q61m9-MNLQMY0E2Qb_gxsM1gB<WWq!|nNpX6MB-soJq?^7WT+}Jtsv<J2v;>lb;
zq(H*<1nC58cz?^XaR7b_XmUvm8sh?YnUyio1hW;YLRRS_^&j-J!!;4^S;BAUo79bY
z+D(qL-hId}-wHdxJsYlC1z`0Z_lXGS+`Kk+eV@hlqtdoNti><Op~ynVKjFY~a&lKI
z9vwtD{raS4#y6gDYPuo3V8AR9-zjJ{lK)dK+W*mfaSCJDK}(I9Zw1$-5EwHc2LK!*
z+I<n`)OwG9Bsx!0m7}ke)|kixHIb%Kge}l}m#fG9?Ymo>{%Ydiuc&{-U+phgR=z9o
zub`V~PMX_ZLW#L^9@t($2E2+eInjwZQ_QX^fXVJ}dfgKPca?NPR>Ex+roa6pskIOJ
zvlr70@SSn*!nG0YSp}oxCZom7Qw8`f&^Y+pPmjP+yJhbe<ze@zVaFCT%tXg5jfJ9O
zVBS<QA$SSK<|b5J!Iwg0;tJpQFZn^4_#cA&O(z51m||Fqv8BPV#D#EZ?z91Aat!PX
zyz@C9;%<_$GeAG}^ZJ~~12ft{6+J_5VQb5mSC#w14t?M>1b3ES3QXU$GB9k<tUcvJ
ze|@5=Niz{q*Kp)ozyRPl|4BblUj%#Q!T!ll3gbiEopkcms|9E8B3{g070I1g4-ja?
z_xsSu4-zZ)<`)y61W4}&n*ScVz<a4{b$h3qUgLfw!dwG?Ii@G>_FBC#eI_1kOfESL
zKYQFtu<wZm$oHUcam>76ibEySglDN3K!mZelxh+YEQ(+8@|p4t{qmE^r5wPy{1`}$
z;vV;OZdnHUGK_Y2*gj`@_Uzg5C_kxWV~1W^goem>1DQ}_HPKF8Zw-V9@MQdLxLJL*
zXXijC-J}{cS5grq`JVmSd{foh<N%n)$AJ&S{l>PilXHhLx~&aigg^J@AYucGYV6vI
zygE<jf&;g{is4(jOZtdS)$4`@<CeD3#ul{LApX8Qr=AnRN9GeM@!Eq69~CTcu^%!r
z%v+gz1^C!xS5-rg;l^}EL5o~d=IW}s`G#o5wU%Oj>k-5FigyTYElnZt_{WhWksvW=
z5{ywc%6db2P-({w{_^7bm`gY@#i1NL^&9Z2TEWwNheIsrI~E|iP8loNyv9{8`sr{7
zh;a8LtTq*_H-O0gI%1&BZP2Iyc+1*yQ$fPQ#dPB?Bl3MxsUQcOxLgO`{NWk)&6-{(
zZ%3Yee2AK915``y`KHaEW}yV{M{GAiKeTUg6(FRf1l1fo25I2FB2>oocBc(t$I3PO
zC1L5C-^GyrseSqvEr#i-$HuL?VNOA5%Qvr98J5)$j+dU{Q34&~?gTn##ba5;sX5PE
z;{v(d&kHU$`-}@bR-@Utp>K<aaanl*WfP{|QND(?eYPRfREw7Pny(P&nwUAm>_>~2
zn;bv}YDuwNdIEDWi+n4gyK|Kze=!nK+bEJ|gJJ)57|SeH1?X-(bbqF?wEJ<G5fTw6
z65{^^PW{_XM<uxYX#ih@a2@>)F+GH4&rKE+%&BtVt^}@h)oofIUU=99CujVH$XZO^
z%sci0JN{w$V_9xF*2tWl2?fjupc*wfYd{O*O2)PJ<|tS-i>hcx1S*R|PkrJ5`c(AE
z14DH~@Hq+$0tMH^;4s2g$qfB8bBK9d%bBwFZF`uWyz`--d$}KuzR4`#Y#B2+n0E~a
zkK}HqU9JvjvU#LK4b8)x*qRILb6&J~j3(T%=1NoP5R%;mv(fXi4HbtZk$|zpk>@X8
z`{pc+dU{7;ymc^t?ViARX0H!v2R<$$u`yu;;}|9ZRgCB}2_Jf~`zx_5JJoD7hsM$L
zB$$x~_UJZC-o108DAY0J)z$oItipe3QdJ5sqH#b7sz7E2-AZ?Q?dITRbCzUCymNq?
zgwXQ|NgRQZ1s!FptV86=d46QjB)Qtiv420o)+Ja2XlJFubeFAf&w=mEse5#ReCvpj
zDZ~1dSJ9wUb4`}{U`-y_y#xq5+TEzgCs`j=-_V~3P}L!`U+_`&UdhUa*B3E}xgg3=
zCoy6lM*jWi`Ge|_@GJ6J#kos_ae8O!D(|bW51(D>^NU}23bP%!2|Hq899sIq_&g%t
zo+g@p2(y(k)g7*iOndCQsAAZpW*x$PeHk-)+gO5I-FD!v*LbL2-4Viev$pG2wI@r)
z%H-n5)Hf{cHSQE_gxVVdnjm%_pajDz<<S`{RqJ-A;3}upX^nBv^_RTo?X3(_Cz3#>
z6BS~CKHPJREW@zn!4e@8A{^v;&%4_{n|4B)lqRcy&QFK?k@9CQ0DUuokgprKoIrPB
z?x)s<i7AMR{Cev~RU7ZCLNHcAn)gUsQpt1DsR^c-KI^a@3~`Ms%=^rCj&H2O6iFo@
z%mZ`~Smfyekt$7s-gZx{isnpTdAiN?6?0p}JS0b_zjH?`3@Q|LFoB!@YI0TjB)Dzt
z;<re8cJ{HH{Y`S&b5D3pGbZ<)e=p6z)n#o~)d-MiO8boCj%tsYkZWH*0_SR<Qp)@g
zb^U=12L?|SrmkC!hC;mXiT9qF^OMRvgji)X$NkBl?dpL|PdmhVj6xU8Xg96!xNN?0
zYYPS*lH3<1Blwz_Xq;WpT(vr`F^HMeo$&Ubu<ReIU8pJHVh&}>Pc{Uu`1_!ZhaET#
zR{Jv23Rah@i+V(CHA9I7H&*kc`e=T`S)NbZsO}7Ok+|?|bYpbO@Px-n?`>{|Z12kU
zhL`nVClhQ-7TA3Uo0&1vEwU_<(S9q|No{!oPD6fHxA%;0H<P2Iw{1IuZqHJ?Ay8%$
zDB@=kIlL~?H7xrgMUJK8@}R+TJT=3I4&7Lc(2GYYtM8k<NMgG7o)0}Ieb14N4HsL5
ziR}pUZ>(Ez4>93xk!S6!gty}9f&x0<Gth<xWpBW%l>wg`*-V%#cL9iw=Xx1M9oSvY
zoH??JuOfDX)P=ol3d;nST6jwWV+npCh4!M0>n>_x4YYazX#i_X7tSH9y&o$6@GV<1
z-G~^r$oqEV?A@)1VWQm2q9{VUB95Kl8+*_ln~F+<4(L-6Meg`@0A(xoRB725)q~Dv
zSlW4+JVeO;nEwEvg5ns;Bahz-d&NI{5*jLX=FFLhLPT${UnK$}p}yZ^fMRN4m@`WI
zsMD$q_#Es8U5*>#7obFjlTavwEA^NZkCh6&wo1Sm-UA-mk<cZIabDWy#XiLce$t|j
z8vrw0072XN3be(RyITD5Hr-2D$WzV{lz;O;cd20o?ksn^6XEvx7c110X1b|KZ;`Kw
zEx0c*pz!VLR2KPl<DgMT913loXOX_*yho7fmgU3dL6M2=wK7w|F%(L&OZLg$^T8kP
zg)r<4!m*azCF1mCebm_b=@Fd@nLN9Kr!c_Jx1yhoEL6b4R-BmOA=_o<#HQH28tXuT
zvl!_+^U~_P<xBMf*X8`Ar@Wci(u}z#-EOx_qvm14Cq)q6AO`N(y1<PkhMr_~>orT+
z7goC@EppCN^v#6v&&w}&FA}^|h<QNc8?P8EcWW3U5-NN?<CwwA8Fux2!L{)MXSO4g
zLSYW#d3NnP=O)rAQ^!k435hH2I5m4YhYFpAbm}?nNJ9lzz`Og!^I^i{CzZmu7?(?x
zV}~0Ds`fJ#os?I-{7iH?Fi@D^aap4Ouz_5x)%70N;i)2}OVeaqP@-6@j4D`#6t{V9
z&I8jutM!@ZWQri)bNz;wCr|a9AtusT1kJE)fN{avBR1J+#$3v9n{0~0s68DdTW5d8
zew1&6xK;~l_M1B;Js1STo<S-kn`dXq9jf?DlH#SpE9U7GuC5nUY}JnUR=Z#%`^|kv
zy%?Ym^$cwGJt<e(2CrFMOvjez)YwK8MFo^Z*Sk9pshnPAsCIA7v(L~gx;v+^@#fCX
z*jLXY3yJqhhekm@9dq>3rAx<U?wVv`zcp@7ia?e04*|7MkNOFTi|M%+6dZygn+Hvp
z>Dyy>7zg>Zg+ZH@@x=}pP%7t%r6QKN&xL)cp{s0{`2p?4ug7ix{b>hl2-dZGDNw!L
zs#4T0K~c=6;<~e5o>ckhQh`Vq$Clrk=cnHu)hpi0Z`xxM+D=WCq`id721szmfq}%(
z1~k~i8>)*udAw<izd4rqMjUl)JRo`QTqSt{Z)Wk?81ri|35jhL3{av0x+qjxoNf#@
z{s8&v(4hGs${+J)m@9h21<TWIyNy^?=8Mt~Im+ofPS2Loj@DMTqzor)A1kfexe-i@
zcWd;j39j1f);t4wiiMyc?rSBb=WX8=;@rIy<{S#dEX8m`@E?oH;;4R6aVY29+QM+C
zQ2lKF#G6L{ltHKG$vPD;Ioq)c_8#=US{<Y)%C)|>v{NlyvqWMCK}nJV%Wp)R8&4cI
zUgdT4t-}xlFJswWA(qbXzQqYtigNNm>wVoOp!vJpm0{3y?-2|p3dItCorfLZzvn6H
zOXT~yzMF@<@E#EZ=Tu@B{yG2pNvy|P$cJ^lc?HO~Z21yF{qD!DkP-Slhzs*}WWthX
zjXqdypqOJ7PZQiX?S1-QU!S%e$R3BlV3}ijFZ=yIT0Ir6Ol*#2ZH=uA<^z=xpt+?i
zGXp*CQ5{K>^+&I^L}!|LmQXkdGni5@@|yLXcJ)@eS{We5E}yWc5!34<^1RI`=e#Gb
z3e&~GUM^wemyrnb{S=fpfBOJe<dX~OksZF5P+Av6&?q}0WJ9f=nh4Nh`WWgrAD9zg
z`qMSg8#o~Rx|nw_8Z{vNl1#1}=F6*ukLov}p4m;P7eL%XId&E}i*&T{aR@Rw|5hp;
zAS&%+zjw}(SEVQ}6J$tH-o^!fy4_BDOmJ^(6<k^zx{@;9H0h+2YoQm)+2ypxO-xr4
z208pC!*-Fp75Wa-!H}yjo;eMYMDcSQ)W9)n806!~J8_(W{_1`s8^#Gn=WA%uWeAP8
z?<&VDaks7y7SsUG^SHh6l84=VW@58LaW~3uuT(h8ot-;r*F)|3>qgQH_A@a>yzZCS
z3b$go%O1EEIj!CImEPSY@CY&7mqGjc?>N~Quab3Sy4WVvkUU?2XakntYF>bZRpa><
zH0mmfZ&m<}dOu|Ni12%#@T@9#m<?DHtqMFfH_g(BjB+B)+!}D2<D0eJyd%Htlz_Y1
z9bO6n{@QDXV}t~m;<c?aZljP~*Ftfm2NxB~5g3R_QlA4|Uq~oj&ud8f`#vv(qeI`D
zH~c(Uc9=@M7F0vnEUM6#0W07$j?Mt(3eJ|G1P<aPOuZ(TmI0>7Lo0`<=g%*KnU45{
zMMor#p&Smw4x$mXNm{P-ItttF-oXhpf2m_s?u8oY3&xjU*EU#`Nl@YI;WOo(V=Z(P
z7ks>3c&N6k?BU?Onc2O@QI{cP=6T-gZC_e1x+7+zMHBk;&T$`X!K;N@*93jCz<a?C
z<*L%qZliXf%z)UYcQ2jY4i{283yuTwYOgCL;+3*SP5b;0IY|~bu^8=iP(`T|Qi!0+
zcrWEk&#nbc)+ty=Rg*gz^$*HB8C4a$ip;<GM*aON{o6_NReD{+yL8TMLn2xeP3U#v
z3H6?JV)*Ht4(Rp9Roc|i{TCbt-mP`EPbz^kqghVJo7-fG7@v<J@ybdXO1?Q$6Gw>u
zN~UBQr2MJon0*m+>vl7H(h72}ZzGxNnWL_s@3e1lpIA}O_|SKYTwJqYafGZPYe8wA
zPedicVQJ>5Q}GG?mPp*Spf%dO938^E^;Uz3%$V7MS|CRq4?9aJkA&I!4C@IrV+m1f
zdS38@2Yz~k5)8Gk2TQ%)_ct_A)-llAF#7A}9J8(kh$&VWGt}a@yta<1pBvblx>1NF
zc~<$nfc2P6fvRHGkzE2##WN-AmDF5A{aGBIGsE^9lMN*38**}E4hw<0*ZOC4*oF>f
zbV_nag-JCvWIb|PO)RL5A|M~C;K-LLm}lU0q0G;|34+JVUi=IkRe{H$P?K>k$hX+v
zVO9~}CwV#?>||mmN$3SdRrxJZ6z)R#vFB-*xw-t(jU0U_4=Io>d)EyJn!s(o1^0>~
zgw?pLw;^oMKzad`^NOS5A^eutfOK6SE{0Q=v~3Hn0(^^hJq~iI{XT|%4Ui_dYjC@T
zBl+Z)^YG`~6aKa(!xhbo59U)|aqK~(8dLkr%lAn=2?vMPm^V}HU7?|&3449yqh(y#
zF29VTd<(;c!w_lxtY3g-F~zC7R1pLG#MDPTtR_3-OFa>93f~I=931kd<~rqgbrDzE
z7X}ulEgv9GC=A|)cEOg}%vm5%Y}xTQA5iixJOkcucT<)g#*$A`;EFG#m?_z&X1AmR
z2kJDdSK~pYnp@;=8wPpgU)1JxWcQalcC@C=Eowcjx5jLAlg_pFG&OWBb)y7CI!}5B
zA1x=h?!VnXH<oESB7jFpCv0}~MA-g=DiK!R2I5m5nDpx};6m&#HwTi3h4G+$y*1JP
z#VHOkjbgBXkhV_Mk6AZrOW1Y2J(Z92)kM#mJFoR<C3sI4SCWL<w2tOa0BtH?P%QZ9
zbxFYgp4szTlem(g&Kk6>OxC&MxQpW4P<P1eeJYq5Re6r#m9$_>u+JKPLHOusBQXoN
zUe8vgWSdvZxsVkOr?)Bfl@C0`ogID?bE(04H@&0(^Xh=WK@1SEg6XMgwyMt!*FAo8
zK;6jd-Qupz3s?!Zf#g+$n0IX)mH<Kv#mzE5Upx}J)8PF*spWL!V!5o?&}oV-aBbl}
zC1)`492%n1V{>6Y@lwO02Pc7S*RI{?aZNl=Q{0tuD5QvdsudNpC4nr)t@ajarnrU0
z-8~eA6wDVm>`bx1#r)CzsI8gedqz%j973aN>yA9|-y(nWMBdOFxE1Y`PCeL;M%|Cz
znV0FpuF!PkYmK52mj3FA*%>q{CMKpH@+|BZIiSA|0_)4=bpSh`=h$}IjmBH7uiD~X
zM%xHjPeg%KF=i210hiGzVepTRE%gJQqLdxXt-WQ9OgM~RK2M`k)O<NTGrQ1*q;q&j
zj^W7l!&94g?HCTjbhdH`(azJZ?r3)>9{3M#i771MG8xfR`)laYP<CkhV~_vc7i{S1
zeMC$Pcrea8t?OT2K6@%+*P)XK?rLEtXuP`UQ9^M_WSy7gF$cr#rRtQ8voK7T+tG1I
zW=P-$ac+(!dsYYid<V!rhbM9-WSzU5R>o6xMptmn27=G6bu~N<s}8y3;?XPeL{<|n
z(&Ju2;^r4G5x&-ObGV~yOdy6O-2TelD63zNBH^fsC-MsGQ%!eM6sUTUq-yp)7k@ZX
zJFeE6W1YA>UQoU2o~y<&EgqCuK%##E%98Ab>`~NfN5lH3sZJgI^J^coNGZw?M$m3V
zJ|3)kniXS?@;0v)3K_ot+wP%z0+R<!Os^zi<4`WL5>XX(y@*#kuN7*e;;Fbe!aO3v
zxJ?UPLX<FdafB|2%is}8nM%bqW}R@LTE3tu`hq(i361tr?r&t98}S0N5eHH3H*AV}
zVahry3ybGV`NVrgvmegfQaG_S)9tSQ-^VE=3lHytQh3h3kmcI|_D!<>>2D`Z96xYQ
zGTG_af+r;4!q>I<bRerMIIa#{vXLDx&IO9QqXN59uDn47@tN;s*|)C_CM4^!d11*@
zacXSIgIY-cuol3<J4}ieCt#vCY(Eo{hgcUiOdt=~HRJG>!N%|<?7oo|c#4Y|4#BGd
zlx414sNPzLY7;6>spP<X-ZR(hEvmS)Xqgpn-e$ZYy9I9j9b9fvHlYWry&)w#&;Wyu
z-TcY8x8p9-m$}g6dA}aTc0WCLM^5D~^@+3PWgogR4;h?SFH~740&1Xri^(d6!iDtN
zqeCOVWeFw0=FKs#$33Xyc7xPG^@#ETg?9(Ys@$*xv^2%`;JZzkvx^kWn6r!8l5A5u
zLHX&%hHD$r2p2vZJB#WtcFe4)GsEWpkqDunUQxk(saKfk5;Q1vRy_#jUi)c91L_nJ
zUh(+gv%yeDIY+1EKwZ7pW%oVz&QAFjrP?<gnh(Zehw5H%wag?)=!HqN=wk8uW#im4
z9rklF!~S>)NsevDXpV*#+zw;lBvYGWaN-r);GHF%|4_fY&_?K}(1%YIN@lT8Nu514
z=^Q&W+LZX>JZ)oaL0x0Q)Ay>`0p&_)%<SO%+K~q1+E#7@ahY3FqL}$1u|y6<$y-L&
zL!;~*1qbFZ(|*ne=ORYhjPoNph1^?(xF@LXjEX&E=(sYA0rH4G`<`*1gq=~(iIJ8R
z`3RR=+rv1SH*eCdY_M%aFUdq@UfSaKKwE+23ySjl8xcnU5Qf46CkD<77Yp!Ju+K$3
z{s=q##b!KrD)}$>V3;ysJ@we_poB+8Z=;?}jJ2fb!H^!=L^UC#X&yrdR}!5ju!!dX
zxrogqx)vbfEDW+TNvvhec-xBsZma|iwu9IKtnf?UWpn#;t*UWB#KAYh<;le-!j4K5
zcqX`cp>S~Iop)PTz5-<E%QFSI@B0KSO`kJ|%bkwg1lOG5^37EfPv}i}U74AvD?Myh
z&l+^h@sz9Vi}NAkggXx;1t@bi=ey&_7<JH=v8ibG-XNYEy4lS(QLk60SFhz0Q*ahX
zK7daPFHaD|Lg8H3HYwAVGkNGj3*Qtx^6>nd#M))c(c9k2N}1v|krMalA~2nfj~f$}
z&+5K^La<h!a2(%mHol>6-tN{;B~|5E?bL1%NPc+GUvYdmu!tga*0E=CI@PTIw&0)&
zR30PkS%mXL9l=37#w1r1ZyAsyZ<O&ek{Jn<`1yl~K%@?wzGAE=JL{pA5WKHj84xj4
z2Yi?3Fl3<JuDDoyX3G%tLWY1Ar=R>AIkR!@^r>t}>Lo2V&Pq$mli%XaQ+HbOgj^=}
z!%L_MUg^FM8GGx)u&=YD|2BI<IIU5p*m(N`e}CC)xzO(lnqV!#%tCvQ@Y0iQ0N*|O
z1x0L<ben=y3ra<^CR{AldQxqqCISZrVy6}kgYlg|kO@!1-S-S=G(qn!KrnvG3f}0?
zdh&r&a1=}!dJeyUF6#p@PB)zwLZhC4V0O8M4H;iF^AP!iZ?*>&*XCxK61#zICaHN~
z1W=$K13e&!6qY`hO`yANJB7v?`4Ho`Tv_9pNa`%FaiOnyUs!kp$Z!s4Xe8}o7?0Xp
z6{L8B-Ov%EN(07%Y!l?t!e{){10vTC5vz3Hs`Wt*zU-=Mj!47}Z`#MvV+J2S43)o?
z7`#=|Dx2s;Y%6HQJ*6wUKN3rx^GJ`_wnLaYE%RH`vpe&}aqx+m^KbF!)hC@8tbL`m
zPbow5IO{!Xm7;B#nrn7;Iz`wB2;;hHb9g9N&mbDmO%^sn?Bhs^y$1;l-17PB%LaBZ
zGH+;gX_gJ?yXv6}U2U0RPlZrXzLtPSMH-AmRO)dPSIsnW4YlbZXazev*NcGKNu9@g
zDI4>kfBOa$%aS}3WaZ9N+RU9SFrn*+ty2${0_-ASK5>wFiIIYHo4m`7)wfUs=mBv5
z=8<;<6-V9<59u@fNV$sl<>3B4JtrCiC=_R7*|G4%nKgP70?zwte}x{ylK^T$U7ij2
z=>GEMmgb$?O>kFIz5D$kalXsx5DL5e8Fn@;epimIIfXD-@ADx%{unyXA`0FQ(6^<C
z5?R%V#&Pdj+M-e<tF)E#!WP)ym$y2Ke~Y(h;US+klP0PCHkS?x17JH!02s$SkJ(!~
z!f&o>xQ0IcMXKtffK?-DJSXOYCo4%pVFBsb#umpU#~hTv$g8*4MpB1uFNO+RvK>_5
z6q&Oh6`0_x%F?NjlZ_C^tuXOSZHU#YBp1_PN~Pw~>wD_+ax(@A8BkW84|&>SY`3yY
z-yYNPyq_C;)n@r<M{ArOtDu3YbAgjZ|7Cg4eC4Sb!64!5LCb~|359-RHq(p@xlgUv
z-}raqY8PVTFfR_Z<nX{Sga^D%Awk^r*79-*=MoPnY1>I%W>ZHh2LjI&lsqRhosgaX
zg46PT$JJ@6)+{ZF(ACbibfFVrJO{U7Z{9N=$acy)oSXFO<Q+;|Y^mU5-piQDu)!Rd
zL0$vNV1spedHLLXfyo^xEY9i+(%TXU!L*bp<TzXz(cl_w0V52_3?ra72mV8Q&*D}l
z(vFspKN8+pHRpE{+{SUm7iVLq6JQJ<KyX<vPjuwUIA1*Un>luj0SwQ!rC2FR0}JW%
zGOZD^?<t{pevY6xcF!)@P9`|N>ojccl}(5Q&kE@~IIju+IEv!t*jj4#P7aOg?tLiu
zzFf<9|Ni}R5Oiz6n)MnKQIc+}XwOKC{iuW~uo(H^PKw7<*X<rLPjr`uq>$oD*7I^!
z0DF!&i2h{w3_(2mtnDk>J^j?_mV*$^oup&Q^88W#zHRfi%aw{puk@Y1!#B&=zSBb5
zi-c{p#E0lbi@95k`zn43ib|>QZE$SeP^VExeb+Nrc8|xHeq2I5nP$dN#UgddkmKf8
zt1cE%#T6#qT9wd4ql6|$rNRcrJn}48@aq9DWxi8P?mN<ur?#e+?_j&!=DZQLo?v}k
zb$O|sZyqC3y>Vyz_U)BY`>H2dJlQ=Ygq<hogr*mJ=fE5-I&r0Q!`@CvcUt!r%C&H_
zLKXv%RKutgaP%RV<t~RMU^#N4_pQ$hz+8|LZ<#up6DE1iEBoy|FFsvqUdsR|e}4GN
zWPv(`2i8_FokLORL-K*}Q0D{F(B@nMYWCyYK|CCbD&+KD`{)E0nzd4)@r)b6Yl7Ya
zJfRqq+{`>A^PL2;#&#TXBC1O^ONb984Hz$lGAD5Wq!9(qWi`x%TlS{R2rR)nlzORZ
zq4xWr^#zgOOxj(7PqaFU!6IjwhrGV<gxxnW;_F64c0!@{o>9O-qxOvIYN?+tq!_C^
z_UIDy0MN693@LrpMDo0#0~@NhJzx{{hEL;U5rvKGFeod<bgM%z4<{(4-KNqurgLF`
zZFb)8g4Hhq`iT+>HA5X7j>exkd#T%gZtM)ZT;6YzLUg_+z25WJFfYO`W|{S)s)XQw
zsi%E$Jl^i&ANwuHFGz`zp49EAzKqCLlIFA(a{cDaS15U!%wkuZm6%Z>O!OkrVT}MW
z&9{Z?q&4_$8L?sOE0rQ;qw^oMp3*;?A8m}8?37eKt~!~QAzF_xTjUZ{BJ!n`bMEn5
z4__I1T_^4Rj7L8HVt1(1fFjLCyZOn|rBSGBBA4PvtQ%KS=#(6~g!A;8-iM5=d`jI}
zj}nI}3|r+87Vf<5&aSO<^<pe#M$FuZiuJDRt#m4<X`MVCv(qhW*v$aY1TYQROMqzK
z(3ZH%G^sOqtfeAN!8k=N)PiEJ&EcvL0r@w44vR@{Ti+B<gY9b#K&uTN%$?8PxX_ri
z*via-LR)Ui9bBmDAh?~AE)P&a@K!r$RL^*9!0sOkeKP33S#8mU?-;D^M{5B$0+*2z
zWV6p9-MLT|#H|PXN!t$&;HP>G;MSuSLoz|UrjdF}05wBDfc7WuKn`=uiO*bs-|fa@
z;RHnH8xuK`w}l=;N%?r7I!s#dRvWKPu4!e!VGA&pR(w=MwV{1lsAQys6h}@Su+e3Z
zJp(UrrUw}!6pIF;)H4!3+PSIKWKc0iPnNtrcW`H!tIMb263#nP;Dt+<VckEdjg{$!
zd!KF_cBUH+vvL`>79QmZGsbOb6v<6PCc;JdPA@mAJIh$|Ca0&ElYgwsfJQl(W@l-d
z)ZF$VwH^ysHX=AQH7M0$b$ucd*8F8P5x$Mps*PEeimhZ4y5BZcW8Fb1+2Q21S`A(m
zCg<!^eJ7!nd`Znl%~3m`@I{z2y;80sO{VzzOoCd<qil=upcir7{a1Lgk8fZ6STFEo
zZks_m1wkU~hoy6&E&hQ^T8LsffwxS|<~2;dypVAy<hXi#SL&_Sj7gb7u?d@9Gd1q1
z<7=1(V^ZNcvZ~+$(Y3t!Jj}Hz_o9&0#5k3}^_g0!w8A5+Xs<3ON4rbl5;yelWa5Qq
zk`Kj2q=WfADGzOXKEM3oS$&4OiI-6?dd8IR&df0Ap6jF6&qu8KY?vgAE=}Vi5G3QH
z9a~f)Y%**PtAZHrGGi#2);YWV;P)DN9r~%L2ag_6-sZ?t1AErvMU1FmqSrbMB2I$W
z+cPhS?QQHA4Y<v}Pc5o5N%QzTm$czXJ0E7<__bcc%ZIIbI&iJe0o67pk-B(lc{K47
zg5v6uoZBzx12{qSlmlmYgkei^L|9vzfkZo#px%c)G)J^=T4c@olR~-LjQb19Rh2ey
z-MVixHhxcF;{W6A&Eui|*Y|O2Bh-kHl(9x6l{VYhDpGdRVyR?pv1W-emTXC~l$7kU
zRHVp~3{i-(M)t8q_I;Q!{O*_Py`0Z^pU?Te&*%L9(Ze)a=JkBu%XMA%b?fkk6UB^a
z`TU5Nn-P+SQ{2G&B-iHB!%zNr^l&PFJbI;^yMhLk*lzP2=6~tG>qUBxulhy?A2b}x
zy(|GW({OB$mR(_9SKzDp?*5)LwK-ym=MOTXjLUXhIPqW?ky&JO?GxeyKdZ<WA}6`*
z{n?o<_3dw4J!Ii!>3`rY@qm)9a@t42zF_J-DZi`5w|kZ7$EGBpDC|>4Pmj3~B%YR1
zAB^!z81Lv#L%+5&S^~4Gc<johFv0Mluu8epVLWp8A0B*jG?m(YU$UZ<uD=Q`A-2KT
zr-^)tbZw;Tm6}*rj&@k`!K)n+t>aH%)!QxxCnC+|l>#h--`B!fp(28IyiW1!@pj!b
zt;fUpJuidt9rx^V`fFIY8WT{M+<}U!O+wa90rQD3o?RgEDWq%M6W3tzN;Cza|M6i5
z`ON{>uQaFY4$o4l<i^k2<(jQp9Qy{Uo6{Z4XDk+niDmS;j_;Y*Dgp|x-Sa2cy50=g
z@~#UwAGReTJSz5xYuA@!lJ&-g7iARWt{IDs^C@`fRcevaJxj22oT-4$Ek~4B2B~3E
zze`)5m9=B=MbLD0LmGSkzQ;?zbY@)M7&{z>Ulu|JhM%088SpBpoZ5T2WmnPaN-;mC
ziD5tE9+$K3u$s@hB4`t%M%kOxDLm@|;MHAoQU~s&gVHE-514>Gf#n-qOg&)G152Q?
z)4_FSKTJx^%ME?%1s#FQS>UF84#(qHWWeo030GIQ&&UjSUF>!P4*^Unq3lT2c!b)7
z^xK&rBxE|9dc6DMtM@6wJX!yRo_SAe%NEfST3V;fA9cNPHR^vTZ?zt^Ip_%OZS!ME
zrgMFCS!@cDLdVzRRDMF!N3?6y^+3kMKA*(RZN6>|#(t5mxb`g;`Az+OT=Rg8XGDa*
zM;Qz3qb70kI_*kIy>#h2AmcG!4YxKFsN_c7-nG59EaW7?`u#d%fwLON?r;1c{b@eL
z-{B;1;y43=XYV-OHXVoUNW(xGh<BfZ4s`S_DZudp(>sWMhF7v!El$7jQZR98vk*7-
zDo}9<$FG*s=brDCaCf=5ThiEPHb&8I_ooNgw_j&U$n6)&<@D%*^^q9gyRcq*!<MZZ
zFftLAwXqh}>-jEiAvK>q8+qSyr>7THrZGm^${Jh*oQb6?7n@GMb`$}UTTXk67r!}v
z7NZy|t7&BH!00eUxosoW_%yp%?@Ifj?$cqfuk~d0{orRRUIJ{ed6G|&yAvD<#Onbk
zwV5K8J#hh$wH1>0)Jo+2`^R9a>0oHG91Z#gNQ8_y&4FdEAR?voM(BZ)N)8UcJ9>{&
zpQzd_ifWz%*Jw@+0X`W=Vd_#H{uEolJqf?N8HnHrgs2%%$L$AC8@g%?bXs6<{iI|S
zR=^zrr=?T)w6rvRC}(d)<v@G1AL_t7me2}%2#*Dj8~;GR{|?ptCup8=$2+d)d#rr~
zrdZDvEPZ>V%3JdwEr3mj-w4jr$Mg+rrN;kkj7yWe7Wq|aWm5NiyHA&u(8>W=_K4lU
z9T~1aw$M&fKiRrHaW;S<u2BjT$;_KJ8tvg~<mR0J;?H6;62;wIS8Q!JG@(7iK<y3W
z*zfR;p*_#ZDsEC{?6GUt(Yo9CJH@7U!}<0F?~n!tnBayG{j~ZzkfFUZ1~OA&;j8u5
z12>#~Xg~eTt%hGkD{rSBuT#X_;@+tJ^@Y1M02n2uHrwUhymw$p+YtUDt_M80j)W;p
zGvtAENGbMN?a8w_7a3DO$8q|K*(bnj4HeaOO`(T6mBu@|Oj3?nzP69)?p{8KbDyHY
zQO5HbebKyFUm!;cK4!o0ldF#2WqPva{%+kDjQ!__%eT9BA4j7-ZcYHtUSII&;I)MC
z^1z|_{iv+-o`p6|$Iene@K&@3Vq#Y!%|F!N4Gh$UO<|w3I0$QSO@#zafyy*j4whBz
zu*br#X@-=ag<;6;3J!{UL}R#+n!%QpLpygK_f(i#@^o&}Je1)G!!FTau3?x^3wb>m
z<_0n*wI9nGjxju|Q(TQ*$GRoq-9-1>H#(nSX5{%CGL;xyw!w2xb1(GNdglY0o15t@
z4!h3?gR<^8j^I9PX$!lT$dBYowluPN89YC0xMaC)4CBWOyr}SJ^hu3~3jl}w@p=E&
zdjBU#j?>jcSH3F2&?@bC+pDztQu%8i`t87ODG~l_F`_|mG}YFQCi7n$&EGJa+efLO
zY?@~P*qF>)Xnx2450|HOoBYq_43aU(YJMbR>vK#K{L2(Pm77Wk;r?DUnx!AIn?-J>
zoYS%{CfWC~B0lc(@*IbW!{9wc;nnfcM!0tSa@qU4M_Nr>74Au%YuT@jRV%SJTO8yz
z{1El=o@Rg4ej2IaOBw>Mp0jrvAr2i4jvz9gUQT#VhN8cN{c60Zsbid{*8$t+1V9vu
z>*Whi0%0f^FBO?-P<Tt+sN@!O(HaI=hJdxycM6ayCs&|vj{;S0M60i-ha|S<=jRS(
z0=F?7SI$wbNS)J1=1M>qXzV|@hlP9h{yHV4pwod8v2w0=Ox*`L87;TSyX}DmL&uiN
zLk80{A02~M*Faoxrb-AALRNAfvaY>jb(=NuFB$7!TsG4w{%+CsN@!%)e?i$Zj_!t`
z8|Bb56JK-uz?b!`b%pHp5iz1W2v0KL-`v8XR#jktU~RAIe@Q|A+!z1;><S~MyN8lH
zHkEQZ%dypBemhyewc9^+FTcx)Y|*-#jg>vhbZ7wYgnwX=2cpZ#rjzGCe0{{=>?=!6
zpVHzQ7C*>R_{FlG*@-<MjogQPH1-85wziq=g*#Sre$lkDOqU%w&&>R~H(tm})<lk1
zaB(!jmL*wkvN*Eab5@h{zNq6~exKPP#{osHIQipH@9LRBV2^ot@TzSlAEgx<KUt(#
zGzV9D?k5gO+o5!^mbf+d>jPXv)BedfL_M9~KG}Izd;iA5(vUthpM1I!i~O}}-qHa@
zka-?~E<mr}&M?zpr^&IP>&GEz__BJ?BBI%Ub}xVG{yrqFxJ}MBj6-i#w4Lc2Xi@)g
zFMdxd2!ryANy!U@*WWOT{X7qw6QMtDd5XCD*g#|aWE0@LYLTMaPaYn){4n4iyEm#M
zi?DLTFm|W@69D%8m^WXA;I`lC+er;AttX(B$oiUuhX~pX*fM8;>-!8df|t(}@R5c@
zf1o&;d>L7qCqKB#`;4vu%A)cnaZD~<*IUm-*aPYRkpp{Yn~VymdGGhha56<k#Of6-
zdTxoBA*@menRm?T60zDV)Jc33JiL>zVKoJWz<OrNeey$i>ZsWqewBoGhK<4X7SSeL
zL$<?mRQ$?pyz_M5QMf_-4AXU#f4q0O9}^WGt_+3V0r$7vhmBNwzMG#{i(lxKG5-hQ
zvd?6lXZ$w`XgnQ;b-fdl;k4`5Jzeg+1@fikl@F5+YhMu66P2ekyA1i_1HaWtsHA$X
zeL<MaYW0@uVgARDx72+oxeIEAEJ=d)L`QyDoaaoniU3P2J$*wU8lwem)NOgy6#Hs1
zka_Z)qWcT2u|4C@?0hhZ?*EbO7#9GX`x-6t+8y$yI|}5SN_FN3L>dBwaZ-68x+&Vs
z>v$(^OhkmrA=oMCU}X>gV{?~xi1s^3ZZ~pAz>0b&f9;?7K#!bv(+sD~`wV}u3`I(d
z2)H)gU-=y{kteX|CA|kKY<IY*8xGhs-s}b?0i6SOWzn274!uw|;@cC3B?s}j4{YL`
zjMT;^!ugM?b$g_0t{3r%?%YW}d&Urzwr#BTjE@*!KaeLfbNRoN*+OJK$Z}<`JM?hO
z7EXIu$G+}*@qS?Ml%1{^uiu5Fl+eEW{5B_3q<l^vT*qi!cFf_#-TlzAvDJJ?@Rs;0
zc5QvcI^#r!i)~vr+cWaMmsD;9d7a6#KgjF8=MCnd`FQ(t6kbg$2t|YJ^$yrcog$yy
zG#jBu)Bj-K7z3i;{1<c-^pC7kYq9L#5rVg?0{_`XxA~`}=#~xyQ-ckvKELWpxI?+l
z-y7-PvHqDp<C55hPC}|y{}_4qeH-}X4{N){EtlP0huxtSs~&q0bK?H4#O7v$yyPwA
z9AFd{E!usHQ^NXNZOq6UpzOnI2KDe@;%nlwb<6M`+vapS3(%_k&<ED_vU6}8<p~41
z|JWa+#~-lI|3vPuv+t^uX|Xy?gCxQcj7Q{^Dnf^>>%GAVUKPTv;6z|22=`%t=-}qp
zFQ(r{+@njB;$+-&XJ`5G{|y*L3J5wRvz-4oYJ+rzim){8CO}jSWB|2MBCW2F+G}q9
z;6osSpNDM2-&cJfgPRLKTh#-m(&r@BO)@!w$mf9W_spkRFAro#>{x;JvJuEP!(5m^
zivauWTRQCWdka88Ir8dDmn||0(+>LA>49f}xgBCqA?}AYhRSg1jJ_kQlAS>i^pt?!
zc326&SdMA#Vbv>uahTcIW3V@E^R`5onaqX4wcZZs+b3Y4no$Rq{mD?S4FtFT>TO|!
zAs1xI5gO(mZXhf%xp;yHfVks3I_QCoe^YUPA8=w3CtsuJjLTetB`qMOh{Rk$-}Kqu
zA@VwkcHN3(^`*=FC!=x=O>2V91>ag^T-m@>;QM^$tkyPr#u~l0t!(y;=LYj)4-=X1
zr@lPEPh@`m@v@8qs0em(zW*KZuFbPZpbPVvK7C17$sgv!Gjr+zh7aKX-n(;l%eJuh
z(`Eh0%7Zxf4@?f#5=gM)TB{lU$za8=V27MO?zN)u-%+yP{9TNPTqA#C-wI6jpWV41
zHi&GMw!AGlFCr-!YU<X@cy9p=(NrQMuT($V96Uq!8OB!A9{@<346Y738XC-0P&e$i
zZ5CtHAPOnE^}=2-L`&EJonQt~U5T;fw9K#+M0cx)JRcb_3mZs@%=^Oe7r9#1;_BZ=
z<{zFs)Z-Zm*2CKJXD-1&C38V(CEURbDESkMx5SpxFk-hD@4Z;T1Q##-R%Iy@eQ_yS
z5w;Jd>Qr`%fz~&><di-jPMLZO0rbXYrnu)%K=)yoI<^5-;QN+*R&%>O<5P_`-i`Ef
z3nP~gTxVTAXZW$i{(+cH{A-cpJRILoB;Chd0Og@}M??y1fy(jbmr{USE!dokhytB?
z@Yw|rfrIquM8rOr#W9ljgU&7MYI(qh;7XYp4Dfx;U>ycymT$JMo={g8I|xh0ar+sp
zh|~FqK0)5;W<d%kAZ<Sj6!OhK3OPTpBHz*d5PKk)3Cr5u{WrQvA(h`tsI^?B^8hpu
zjUW(g?jdzLh0)O(dyMDlW*l0srvhWdUcPP-gi+q)UDIwberOG=5)za461@eOKJ2~L
zc^KTME)7d-8(ak@Nj)Fb;(=cMJ_hS{LnceBnuA(L733=)h2DeJ=P~g8+_evw&#Tr;
zGlK>I0mx75>FaZ{y*upo^7Nwcz5vN9PzZj!FDapQ<G<G{&4yjxce@zy1m~g0uHuV@
zU(8{r;(jpV=3EAs`$UN1XG3q<N2k+msf@Y+PxW83knpLyAsGp?r&8q))cg63aX)KB
zfP8R4KOvtZOg{>3xJU_15dD~#%Of{|=Sm7!53d@~qQR?gra$mj4?5mU-#DE>9*W0n
zfdw|S8wdUS_MPqpg9h%x(jKvaH<KkNW{2uTCo1;bfeNw_#6-g-l!=;T`gkiSISjsn
zkxmn_%x`x2vtI`5W%Uy$Bxq#eP3r&*CFq!d^MVEpYNtSu4D_-(O{dBocVi@j?mXkh
z3i<$~SO*xT0sNO{E6l6tCvzhoJUA_gdCYwK_;IbBCZ5=}fbl=ui~oepgV<J}0#-li
zpsT1j@4t5Z^#lX}FH!}WkgmA{RIw6<TZ5c!b|Qhz>wl}_{<FYleBpEml)>rmmwMG8
zT6IBK1^V_x=BejfO<-+CMbC7K;GJ?7pSpNOZF%?m+{%21?Y+TSHv+Yz^gBE(&9bc*
z2Z^(N+yR%f3IkxIO6O9Jdjg^hej?X8m2xU>7_>xJK^A}i60usgv(OEelITKfwd;Ma
zQY<?9EsT|Yl=_a^AyRFR$cRAt_;U*I_tx(};O14P+h1bAT1UU%M*fLW&c&mYTBVN;
zX*3`9TKrJI)r$)MVOnC3<=S74NMZ+~klb&&_Rslu<Yb%Z5aH)qSuBRk0WmX|OHE2!
z)+WFZ_U3bT5s{HBG@F@2>Y-EI3VexSw(0hHHs;NlH1I!9-|}BLX17}JQ#2=vMt5@p
zPso=9_p2K#eb=#b?NHtS?`F%Sryl@<8iv_Rr06)~D|R!jg6I!yeEbd4geHN~HL0_j
zpp?UWUN7P{^M3)iOmw^I-m3xCjbQ?a>U5xe$64|Zg6a`!?p<qBe*b4RHxn&_CahHp
zYmM(WLqE~m+vHqsLyVFG*{5BwnWfviecF6OWwR1l1-^QEdc#oVJ%R8WgCupZD@drQ
zI5JxS2Z(JGav0YAcMik64b%s|?~R_Hy@v>C{(rj&ItLQGy%_iGJdP+y{}G@0C5-wS
z-b=r3WuD?496?qfvY!`x`xmGKRO9<1{xqTSt-S<T83YOEoC0Hf;H5n4<=G+cvoN3E
z)`ZY;w8mu!h3tbBU=fsI1Hcb;<n>)f=m8N5`2*`Vwl)<mkm$2j`|wX8@3cf%yTmIS
zfwf!f9i4Wq^@pXLSGc}joPl?4{`l=Ykan+1xgw#kO42!qDu;R8(qHqq|9B+Qx9TVn
zVA3z;U(BBTXOJj>g(sk>KV`n%(|Nr8-pH4yR(#<>$k+pf_T0@}K7HD>e3kNxU5eJz
zW}Q(F9;o}!gx4Ic7;hYO)O~-6TjcHu92A9QVYXGR3-Qw)DdgpEbvqV(4`|Q0C1huj
z2TA(J?i3^)5&ESCK=Xx(rj;anshuU9*xECR);abhjGb=x%no-4YJ)S?qQ?^(Z;LX`
z=5EDnk_cnoiUX=IqdVv)2!(Y*pH1RTXp@}H))g)viMy1na5!2qj&OUZjwW@;I6C6(
z@d8EbB1L=Lz%*}(wy=mu?@Ge=l~Qt`S@fc8YCkz>lp}+(KWuvFHL4S%L0-m$4)J>7
z6UMxYw1=*uhY3LeC8x5bj(HGCsEHn>)$lm7RW8akLiB4I_efp&e0B9G2WfV1?w))F
zCH$ND)xnFeixzH@>{b^>?dGi2FkS6awveo*TbJy5Z=0`4g;|aXGW|B2qf-D}P=cir
zEfoYw|Hd$p7mPsGBeR=-k=uSCab<rJD>_}xe!FmXR_W-?uX&fbp<sL3JiTeU@l>g|
zMDYsup?fDz3dh-PXOgq<bUB7D*=T8Dq3c_d>bYm*@Z{|kfiim9kF_85IC6Ln(or9O
zQA}~gV(R&PnGc&_WVGqYz6-?Sm0qtviuXc7p#qz3QpdQPhjS72#Aofiz-{o(xm;9B
zPjpPiz9B~2h|!Qcl(fhj2@1n+6?x}Fa70(@Lj=VsU#(*8%kJ@?J{Intc6us!%+}4z
z<t6omf}&Uax0MYGK9ocCe2!8~S}kapmisc88IK-U?wI$+O+8)Exx;R}-WvUIB8*^Z
z(U81d8hQxJpdZ6c1-X^!_Ab9BqOJgu3%%meKAqAC_|Q*BR4*t2?y@^4m6gWmg>dA!
z5B&148&pkcM8YYkMn{uH461z+1FfuhxDYLkk^K?NrjvmG-m40y@s>C&_{wGn(Cr!n
z>NFszuG#kc9POS~E`T~i*^-=@rw)JP?xFf|O{xpKCY>7}vv_v5Z>hCV4#(IkN_6#@
z>%}HMGkX<8x_;7GG?R0@zGsO%L_&#;8ky$CC|z?E9Kj3B*9VWP@>iltGTl4l<gtgt
z72D0G$mJnQFJJnGSZ%;0;O{C849v?6sFohR7S=JnTpmx~*MSe1yp(yhS0Ro#tG9B4
zt%v+|*3;lLwWfB4bA*1*b%7k!gBqTEw(?;<ko)R7y0(D@HwV1^;>tEJ95b0sYz7;;
z(0h_XBo%loGU0mZsoXcnb~6-j^5jWs-Kz1{xianGYv{s7{BTdx%<{@;cFX`tIySWT
zF(XciV*dm;wVWNk-4hs4Y3CnINYu44RL-xYr$p=Zjg_GpFTbU36(}RSD6eV3E;m(^
zVS1Q-RfS7Jyj#Dc?VnV2f54!JNnikhNP2&w_WzVLf(P@*0p~rf3r*UJhHu)Vzgc$`
z9dMVAYdmr^_OQ;{B?%8?uelfECw<@jmgn|?qqW7!=PzEg-^;Xd2qsHDUp75`r`E0d
z<6NSG^=o>p^+En!l-iT=<N=p{cdayuDdjYBp?f(B!AN;hl|0ran00UQGwf6f<~vkK
zx0}cRR=M6yPj%;~BpDb4C9a4}^uU+Jgi89)oY>(eti092g-eyYit@_72+)Mxj;P-G
zV_=Futt3JC*YUon1y$n3&-*qnvagXIPuA-Ezete4RQ-+5=!N#V6jsLC%}iySF2b2d
zAJG~qNgg4(RCBzTZsSoX&<=9V6>?<6d9R!uF{6d6pKFY+=euc)r}xU+auc235km2K
zJ*r%f3NUf|3eh&V6XQFzJ-&UqrC-^je#!GeB`O!CFkZ%)unYDv)40ncq5F;Ez?<Fh
z!CpZZ2erjJ;rS)&>fEqQ@0k5sMZDs7T%8x_rs#Wpsx{#CnW4~&KxD~8cM=9jC>8sI
zbCch{_beZnHJYK|S;%*Z@2JZ9c<H*;tqo<U0+qdf3_mh#n;6<F5aGMl3hrCTr)RKH
zEWr#u&;Na5s(upK52VKU*GKa7A5BGIU{9Tg`N7WfrJVP1QR)^>F1h^&ZMNCcx$u`d
z^;OrMSarholM?6}8bu4Nr6Y~A_C-B7y^%a5#wLlAZ0(^5m#RtgJmBJXgxcD);x1}g
zj;dMdC8uPyHWXo<WXDwL3e#id3i@sKH@Oz$Dy^4hDQuGXM0|Ce-4?H?n3%+Yq4&D=
z*_X&iXUS!)BIWQX<`m*7o{SyzS=tRa#TR-6>38iA2~6?*)Pffa=ie(9o2ljFX-R>@
z^V&!B@NFnBD<bLp&6^CxibtlY&xGsZOSXLtYRKO7Y2~T<h+6S{_U0D8g!tLI?9Lw9
zBvmfZH?p$-7{s?smj5wa`J=VbgAZ9p2C3-&oxG+@0DG5VlJ|+<o4G$+``?^R&i`pB
zy*l^P=g&`IH}Xw{GlONcLR8>u(!jwW^K70t0{$a}610%wXOft<=QE2HybH(IH-@oS
zM-B@RYP8q;Ff5PeZuC;LSb3PiwRbj2b1@-}&r<)Og@xtbgMP(R%I6en=Y6V17i=Ze
ziu22_Fyhwlz8HWePlPPTK1-0I)swqe>G8Jt`pT4Y9ZrVO6M!z(+Pi*Sd32t?sZy?@
z9Mv_c8B?+=&pu`nJupXMnPGW*s2qi>JKjqQHp88%sLSTdKBqt!xfVbDP?4Zbp-w61
zubzn^u-7T{d4(#e(2OhVE2j1O`MxScU7erGuQjtdO#zwAEgtF*@TAXWky&)(&%T1+
z5kBf5W7QNIMnOc{^p~Tl`;pO9!#%RoFq(SjPWThL0+kfzW1?Wq(9p0q!r-q)Q~#v@
zfq7UPp5q$8F#XU9oj0lZozL*Seia6@)byX6)IIOtcL%{Yp|yT4di$=!Q*T<M)32K}
zgC~xp`qfP8MP`T6$8WC}vYNia6CJ|N;TPGHh}WSN9mVv7x#jRvbUt$!NA+J?sgg=R
zBo%QH<7TB5Py(@_kZ;Sl56(VW!TJrK{Rf^Ho(j3xqAt^1lqN~7<RA}L_=ZCJ2z^!{
zE$GMU`55HmU!XnRAaI$YSuw@e4l%MDyWy*JOTQ11p0Q$<mayXvPlt@sX4SmPNb}2B
zBCdUjWb=71Q_uPY1?wU{o>uyDl=ekIT^_H<dVNeE6*6g{TdQj8(&|V}idwr>qvVFn
z@Q&?cqvhd7K5IjRw0T^=_xX8HmPDPEJ#v#yS0A2C`f(mz75M0c&6)*4Fm+(3kOq^z
zf6ze4*-J1=yu;$idfF_ua8KP3KvA1hZi@-P^NNrX4~OS<>-Hv5cwQCk$3)<QB?+2W
z1cSIL=cev)<j<|z;vfir?yd_4>@c`2zVBEpu(K^9w|^%DPd6R>2}fV{3AP5Q|9*R-
zQcdrsJy^~?MCKYr4Fiso)ZK#7A<dT-Zz|dQXz>e>q`mTw$M-Bp-Mg2{)h~RbtKLkX
zTC+oOTI<pJ0cOpDV^r4?suO1Cr2Hd-0+DRqG%uR=cChtOfvV?@Lb@Y-VJH&vR6cHG
z>v_6lFY0cOuXn~zy@3potUz2+ubaJ~J5EbNSxusiSEcviMs7q6O!pzRJex1S|3s4;
zzG;5tW5~f*^j=^1;Afri#D&sH^s?Pl;eoI4g8j-0@-3G8=43%VAteJJN;y!4(V=eb
zOiLUkZ<(Zq5G*Vk>{hPK6e(ol>7jllNloK=*DjMB1_@xe9|3Gy#>M~Dnmhv11sf+^
zrmA~;6%-z~=i6x)t0xJoflfUgX2}qdj4mi+5MW&-_|6L*r47zAm-HvnVIoC#b3+P{
z+7EBmMN9s(0Jer2%~2rAA+yzg(ZByJZdw2#{f)?daGCPcA4`Rn7btsR=u$6dzrBy3
z1i+)}nj@@f5<o~d-)Y9|^9P;uCB!%8Io&$r3-7fK-J2E8eC!?S=h{<YWi>Zth2q{D
z?I3cuBQkxT|H|i9MI(MC9_&Kd(LwoZ&3MgLdavE!TCv@`fp5+jZS0j)d$K!5o(We*
zEsdcluaNns;OC|1-uEB%sCQRTuRD(kVt>nr+&z@n!I{BDHsjokA!xuZ)T6NVe6e`b
z4cYi5Tq(tmPmvX~Sa^@St`8@h?%g!Mmw?t93S0Ia59{e)eEYB`ZRzdSab<0fs!95h
zv^WZVd0PQqsNu2t`t^mb_KUsGFk|H}Tw;(4le}q7Yf~{k#i_OJ=S73%3^d^DC7`{|
z4!FFEB$tuqU{lX&gphZvuo3WCL}*SP>|bg|);z}kPWiN_)dlvX<~j{&aoRVg9N+IY
zMU;<RDA!*EMh6ikj7Y4L@&psRs0Uk&pM}yh4;Xn@?j^`O2Hc-?e)^cPP+^_x{r>G6
zO%})Q@^y-)xNy~;k!PXKH!ChEkDr|AJ6davF3LiA;l05q<IAA<uwNWGVRSh)HoIu|
z^hGv7q?uN<ANJCzU-gDpNZrD@DBO6tcFAqxb;w4OvlpJ!1ui6v--z;1{9HTLyTVUg
z5_ZE+Maos5*iAba+)7e2pMFM*E2HGbtuQ1jxD}gTC){Zzr@vWAR2a@!T^f}mNi9*^
zWY~nc+x?!bd`duj?IX$+byyXDtHa8B=A-TXF9sa_q4KzWS@|cr=}ngkG9!QE@4JC`
zEe<)c{|<oq^{}Wu14jKC)Hm7~_rdexFNb33j~vcFUYoyT#_|3#rNfTUu;EZ=0^R&r
zTO^EDSlNDn8B`nC9wpuh-)4a6=Mx7u{<W|tp}3%vgksxhlINZ67sC@XpkbeJycOgW
zG?=;JI7OpH{`V+BQ~4T}>z$^?(auGECrEoe)XI+859`zXDB~B`L@~*mOIYK@nI_OT
zs7y=5g@LYH=j?L&c9WnZU^`o}&6SQx=E6iPQz>fv+LpU4=DLIhy7xA;Dp=v7YQqnl
zY2X|)ei9;*<?f#q)$Tsm->DIGBp^v_kjk>u)Nq_ix&;IE!5e|W1-E+EqliVK&EizA
z$Z_Ti{RWU3E^Ya1K@NhQ{~g-^086!F4=cl{@F^cykER0AX8!@d>}U{^81%wsWOZ1I
zEgkAdGo7Kd+qg{gnrSXiC%ddwpd&X{E(J9y_F%B)<C%(DxkyxV&s2FExeDh5&fZ60
z79;$j>Pq=!@w~|rvBscPaDkQ#34TiJt7jO$Vz_8^2y%FdMpN6dU!jpO85d9jTQ}y#
z;9_g^*=!Umt~VxrjK1A3ZlSbJ4SNmkL*xGT_}Nj_VnrzcgX;PAzeZuCc90@l`!~3V
z6LDv2=G#tJj17`d7WCa|*Nf{cEiKpyb?)+}mVVHW6!F;;0u<%gd?(k+j7ydln@A++
z!ifit>*Io4S6{t+X>HAm>1s^aTG&OS#&wX6{YNMo`pWrv>#tB`0J9O0fCJcjkD9r5
zU5_Tmg3QGXf|0Ydl5KPf)B{y7IR7Qo^S4Uk>Gptf&c?>Zbnu0HVhJibA8-pvdIzf%
zAHnIj+KQs>)2F4+dSM$K$gU7Pz^sKgLQNjrvi$7+j+?j-lMOAE7^d|1uhy?$Z=3eX
zIt{)0?2B2}Nb%{rqH(h~FE`^A#^d8z+)(Gc+ZvL0l$@JIw`LEU5|(5KW|yis?ZZ1R
z=c0^PAD3Wfw||Z1E8fi`7umn^Y-mZiJUVf!cV&MWRk>+apcQuw9i=od?*`f24ZmwG
ziIZ30*+Gt=D$i2OPRoaotR!2l%#N*-o>2*T;Dq!qTBh-=iyH~rq6O@0X<m|mE>IjU
zRJ=s?97v-n<mk#Ips7!9kfYlI1ze#Zn+LqecJ2pW6jYZZ5qsb#Hs_O$Xpsyq)kapq
zu3lyEuhQ=s?|%Epw&fWQ_2k_?kyOawKNUBBnW6tqcL);_y$Lse`W&46gkW|Xw#yp$
zcNDuzAGq4yyniEIMH*e9J)>*f_P)@^+S7LSC<EBzj1}m%X*w-`+0{#(U~kszCq3Ww
zY=sBQz+Lxk;^Z|hG(oLZ5nq~}Amw>;k`4Vh`ROZ81;F$$v8@WLR1Eg(s{Exqg{i(a
zVW|o9skxV<GWR>^J=yF{KGvovm1-aF7VhXVa&9^FX2c=4aegO;4zU`bBaa@<{VdS}
zo*OobOJ6ATn4D89CsK=*F?5gy787b(YoG0!p}eZ@pB5LspXFHLQF7+YnW%BnP-z>{
zFN<7?Wxdu<Z=Cob@rS{c0JbvAzU5ado|FV1v2OTYZNVP=s>1d0c0*h~OhAk@rk<FS
zR=yP-wRS(iec_+dd_Ob9-)I?q3t!9gxi2p|aN5Jlnr1L{7ZjS#o9XtLOa<on=^n(t
z33$dBD_=H;4Cqwc%)`{iQ@CDl%E?LGy0YQgGs~wN5uC_&y#;%at6Q#|Vv1Qod?B`=
zYJ8y-^=K5QJ751brql34s!QBaTpo$6pHi|p;kL6G6PXU<yrdKr9!HDWZxW_5ALr<)
z&Y!2gVO-e>aHH4Q=(8C;Jge3G^uCuw<YlJhw}%Z99rk03`MgXWZL+ziM_x$@flkTu
z#p>I_0+)#sR>LRw3xaqMw3L6quR}G90TPo5w=@nrgQ6R7cvF4vZo+fyuq=M((mT{!
z5@Ryoo;eG3Ud(}~W|CirZY6uutwAJo;=6xGtZgB~h~+sSJvMMW_ruLp;JWo;xnxrO
zdcEQl2xrOxkN@&ItVu=5IC#^)Aa8#D^q(eHYx5v!NGQNAp+s+(R!D+zM}5#ni0$30
zJ09US(J9ks56;8<d>p;~KjnQ7ti0Kvjr5h+rl4v!=JNC?Q(<5Zo%mv?1X}`)ln&GO
zMTLTw`((-X@oXMtAxgejr5@{%%XuqYa{{s}XFp-aCDN6=FbVN-quIWpi=H1j@;Ick
zR%MtEd*F5t`@LF9rZRSzK}SM{7d}n`SaNE0YDk}ta6vI5B4RCKovd?;|3Fo)q|kTN
z)ty*g-rCJ)k8@lh56oI*j<PG}tKf&`54FcP@I|2$vBJjju_f5)i!)dDofpb9lCq^5
zS(~+VaFb>&tgKMkCuHDnI@2n3+D3@rb;;7Qf%pa<!nLU%aZBv8^76XhX~U;*YZ|io
z!E`qDT31oV%^tV@4InOm^WS|$&unV?BOppjupO3>kzvqhTFrr(fLt%?4RNEa*gRG?
z@!d%8Xy?_Z`^I(J*v!aVjBO!X;3Pj=CmSb0%?vZa(f6JoQp&*fH;IHSGB*>Ol->z-
z`|#FrU2MV%iqrljm9kTbhesL1Ivf(Y)KBIv{!9rLlUDGflfe?n*+VOp*W)S2-S=um
zh`O2Vn<y{9%DCb*_>)$}FhLRWrk$AmU6?k9aukpj6u-D3ryl%11A1rC>5Iw=t!ioU
z+QO#zwm>Di@XE+mfW%_oDB4qvAgtx1w7*_-w2F@xY0*y0t^@z8WynIB(2)$iI<I)#
zvPfHbH}p00*ua(KVG`y{;c5=r%gDQPq8LkDA&ya%%a~skDij#vF>pxm{p51$b7)Nz
z$9}dZgY}$RztscINIf7c8<6(WbIB3ZDfh{?z{T0BZP})ia2W30U0ub0jcNa#rtx&^
zf*%^20JCH<$A)_dilJaExf>ko!3mG82cap9)avTb#TQhM&u1Q=D)VPrY}MWV@>TF#
zVpooP4*y)M0n8BwE!5#s&R{X^e&0r4^wRf;C>%dtu-j(FZ?k7*+Ij9`p@S1Z(m>H=
zVR@+(r8&-D++B|1srx?W*DipS;b|2K9aoWTpQC)C`b=`%DIr+P+u00NW78Li^O>I+
zZ3aW4X8_8HKiBJ5G9=;^)=y&6X3s~hH5v!L5TYJ$A2V|-Lz%QHFDL`=G#s*)YY3K>
zjR|tN=4W097`Z;^>ioo94sib?=2E006o<t<gdRTItKZ~2Vq78)`<|Vpm2IPA*Rl*~
za{rIBj7oLx;Pgir^AcxT26OSCN=4|>)4ix<XBY$1pX`47-IYKwsb)VqTwn++#Ix@H
z#3R}h3{4D<n<n|pntghbpM@zVaMjIdxs1`zg}y9V5_b$Ie_K>qzx%+__IZLm<5*Vw
zvhm%R-sB|D7jpO%%oTibO>%p1+n`|nA>b=9R@q>bs=RmykeARp(ULjVJfT-PZm(ZR
z2)75m9rrsR^%*s6mkrSJOSC7H5$n*yld&rS-w@-hKFWdap1EQ|=1{8A)JiF7eJ6%l
zoLDjMgCmld!1r>2&1;Q~dO@A`Forlvm~9>6zapGKK2Q+9eqO(hD$oghD%5dxR3FF(
ziHpAqfNO!-_I<w!06`<@42!qU9J$nzBCK}m6xZ~TGAf1C)LH1Hs%r*f$s4c;<wV5h
zcONp4hqMP|+5g863CuVIEx<+fXR8v$@tQuPy=!B<s+?qdhMJ4Z!5r>lrX!Lc*E9IO
zVNt=W%^jNiRwC1FBfXY&ji?mK+Q3V>sH?5?-RsXuuG0;%inLc~bXNE_3YI~WC+|@F
zN+?1kquI|>V}4nq=Eaow=R`SW%tt^h-|}q<dGNNn8X-5)o(fE4r2);2rqNR?2}9JK
zCXyEyo<h0xVPo%9`5DDU_i7-`^)}8ilI5Nf5?$+2gd2EuC69U+nAh5O4<7PH;Jp#h
zYpH-x=gr@{LTsE_{)lBQE?4_BVkDF=$Gz)Hixr<Xp>oYGciKS6A?w#uNO}edrO?;3
z*ex7n@S8dPN1HQLkuio0n6B16jt(|%U+d7#{(gs^`>FHwFD<|y1Y3U+W-Qo*L?wF1
z08}L~u8($?moMAzDSDtgmnPonK(030e0tZUSd|>hIy7ZQmFz#tYn<{e`6h$W9d!Dt
zR`cree8cHoRdRAW+;4BsY2b@3;hVjvnaA<UH*^X?Kh!*kCYJ72j`SsdqxmHi^BXsc
z+QVZLrPd%7S`DLdAJ-uC?u#F0BjPAR`6#S!$b;)&P>W_$MJZ|6;Q~bs+f^Q(@5)vF
zXDe<mBs|65Opp=)2F%$w-U&B#x8}VYW4|{>iyS^-zNn=%e>qAQtArPwKQy<o?3g@X
z-wGCpuU7g6T9`CeWBP%Rywc@c{)O4oFmKL4o<ZZ(r71v0)Qry+xr}Q-vP}ke>0N!f
zca=O5S2Nc5znsST+lXS+$#dP)BcN3lTvu~W29zLb;6I(izWG9*jt|&@OT`T?SdXOy
z;Qiz>WfJ|siHNIC_MX&C^{AAm{gaYMU*yVBrpu)v2S2^*clGeBnfKwY+fjxJoIv@1
zv6>Jaq{kk1H48v57#k%yyglYo-?8!bP#>}HOwz!mPE3++_6bT!na&I7KS1$YpnbVm
z8wGKw8TXL8`F@LbMaUT0a@WO;WTmMx&X~B==V6880!-BsS7n2^WAL4=mDEaWboloz
zHVUj{qR|T#Es4fCHiEO)OEmp8lI|<=m#T5g7kln3Gyecm((`|v_yna4#M0A9cA|M4
zrk*o$VRxkLfh%9{LP|ykb9aNBax-D=(0ly-L;qI?y(L${Yx(e}SeeL$iLT3%Dq86v
zdDKOm>^7r(`qhxe+$B4(lMldFw<)hj#o61ja>*#ETYc|!izByB?qUK=kYJ249++m}
z_DfJWj8`BI(M@n`*cVon%hmPWNEy1ZjY;Rmx=FT4J-NNf2um{cWsibFD?-1LP%iPV
zK|>p=-*yv|G@%S4DBkqs7qru3pFnS&4C~}u+{1M>N#Sr0-=bG3c1n)7Jl%Mpakkid
zRKVg=io{oSc15Y_P`b&cvsrb^ogXJRt$i7;t8a?uxH-vyqzB}031l@3@GY52T46Av
zL%>4K_+EO_tcWneqbOP~dhVZc!5jeF(`O<BROvN~E3roG@)~Ejrj2{B6V7{#3Q&n(
zv*BheT)rX#2A9v$FX6X<zfJ2`jg6r2(5+tC0}7AqoO|0q+L07Ny#T+MnM=rkZsVwk
zM>+iR?~2*&89nCn9?BA#Pu&x|^(VZ&%eAKgN9wZTdvTWy=o^jK1;J4)M)psS)_SJ<
zKk^|Kv6<dY;2KGn@_k7p4Ua~S*X`);4d=#8C2bqdPFr#4G3LYQtmft77koqss18+o
zwJXN>Si%aKo_1!sFa5>)R|P9-t7N-V1S)e$WTLo|Bh)<#t(66Y)uGa3Do|r446WRy
z?^#d2dz<3-fnvT+Y6Q(7wo`^@61BA_OeKUI8QC1d`y*SwAMnDT_9&&iYMTw+PM8Jt
znc`g*obsyw{n1xa<!WAd7dGF4zHZ^6`1tX3vm6)Ppw|Yk?1gWot{0y#M}MRcW(4HU
zm9-hK??gD31}rWHyS08RM6GplYf;O;fG6u+u*y$pH>d=%@)0xr6edOu#N<ZAur_WA
z9!T=#<NA!oi7B_*I3QztI7`}O!Y602*W(?1*7>k35lv2e{|IqQZ8vz74SB*DbXhv=
zd1EXr1(1#J3tNB{>c2BWQ1to_hHXw)J?4g$VWw>(<4IV|aqw!p4)8Q5g~E6b-C3)3
z?U~r(nYY;cUypaM>YuJiW1{=qe)^>84gp%M^_<_NS|<j&M7K0e5NMpoxDB1@cHqJe
zPkTFAq(ck@f@8=B$>-NfUFYuaC~>mFEUIg0+_DqcA5X;>D3qc;?PdeeFkgw223s`)
zW$cny=-Rwq>1Of81U0;n5hL$<hRwy1Jwx`xx_}lpDB!bLLoY3EB<1fA7OoOA*mmDn
zfSYPZ(rtPK6yo?DRmNIvnV;Ton*@GS&-e%;ZY#r?;g26{76*-jIb#LK`|LLpvPCQ8
z(F_%T=5%cx{!EBmY=$x?9>c^M_@ZWR0>&^iHdPBIKlM&<e+hzzX82i8bX|c;Mrw%d
z5g-u7tui<OrfF_GDk%t%Oys_#o5267m!uzsY;3D{EQ*cDys4TyuL^!t^J5S@_&*3P
zC2{fmMq-|hmim2=0}!s|E5-yb9A`Sr59PvQzj>ZWupy3|j@lPy&L?{#pvCK(ZU|d}
zf@9Y^!sn4vC+>Z?5~84Go^;`>B_TpWcX2YmcG0)1c=zdD&JFtL!m#GbkYu7?%cw&Y
z%CsVOTc-dY3AKTwMle%0+u{<=ipgzJ4G1koQCn#j6MAJ0s^-m>*qC%2muAj(SQPg}
zt6-<7K8p><k5Pm29ii;nu&7o1m=HA!=&zU8;Ls^-N|Z$R$4xUn7YufDd)7OfeDm6{
zCeq3Bn?8jGie;v360K~u_O3GOb2Lqs&X~R0ngs!yw$Q1=M!x`hU4-j+$Ee^u%mzjR
z=FSUaZFIEY@~sT|1YwaKJC3z&5a!Na%PcTQ_<v7$c+3nO2Rb*B8F3sL=^+q)2$_-o
zf>Nu>mmO%l`89taU0L1I>H)6Py`=Q-98;*~zBAp`cU*JzIUXn4HP3z04-3g4xO?tt
zrys$aVzybY8k3|Or5(=;nO4rKQCLjzi>t*#E^Oq8en0vZ)z#wGRe9{dSWqa%Z?;Y}
z06iec*i$we9yg@gqDWQzKH{#hQzjk_-8y->%4uq5k%qecOHTp%rf1a|`4IRS5~>9A
zfb6}{t4<*fotiKk7;0fKQkkIapL0C|{WQl+*{C6vS3rrEd}tfaYZno~7z2E=g1w>{
zTNW|#=FNS>W?z~KAAru#S-$)8p`gl7$?qHi$C#0m+0UIMP0aGIZHqmiHLYhvtZYjA
zK47Mu*>t64j7#JA@%4{q5~T<!@vGNOao1Y26z=WR|E3pBKZIh;g(Re+{2f+bslW)9
zWDA(Ztua>)xW-dXQqONA)tKl%5><b0Q2vIV)4wmz;<P91<}yeC^ZJm9g8q#^#McPe
zC8s*Na6_zZR76qR`BU2&DIa5mEo^IRtB`BYStz!S%nm_>grrA3+E_DtUHr>K>*sqC
z$z};9R+ODx(PflRdXD?rp%qbfS%ZqBv^AhAYvyySEu9jGaotf#RqmkfEl>|lS3%x3
zbd=z$n;I#h6lK6St~@kfdOG)vK%x9vt3O6?fHsj{KYVJ1xJ;opLx;Y9rHo;kY<dWf
z43UfGD}Wp~vc@0kWxS+Nc^cQegxG@+$Sci+YM52-;hrn=r}#ag&{L)YTd=k_^bdfN
z)}fVTH+b`hl2$^Cy#bu+cM1inKTu>Q90A+x$YRs%_sy{z7TUVsI-BKt7(NM8oMuo^
zw6IO5DQ3Dtc}?0WQz(CZ_-i=KybWFH)rdLw?7rOU_Zh(uFy~^^o>?7lHOu&%*D6kP
z?0I`$4zVTWT5*(Y;J4a`sVdJqUiiqmuui0us)41JO-~7KWRkG5c&KRXWsSy}CbkU#
zD@Y^!+fz2}Bj47mt&@x@lLGob73QKEVNMKjZ%kzR;nI$g4xX0Vya&;w>IZLI57ms&
zzDJfYyO43@4g;u6H^pd5gV6k+i%q{>gx~vr$51T_=v28Z>*6#4)s_zPX45H6f^Moe
zEZ)6Y%eMG|42g;OO7+H;5G!}9%Fd<G`kra>FuESUZ(sWDnxk>TaaOk$5(aM&Nr6ju
zqx2baQE8(>Qi4NAA1M#BwEH!Yd6#%Vbh@bZLK!HrsqzPxtLnM8FI_I=V|i+qrR2T)
zNt!<0CU+;UA0=mk!WK!rFj(FafF9)e{NbsU1HRr7_j$1nU!}eItbE95UfjY3C9~TI
zt$ia4fC|>h6owM>(G2wT1VKvS@k@HzFN6x}$?2@Xtl2{eQiWLfTixO<Kp-vVmB9aF
zyTReFP94wl>oW)|d0*=h|54b=leE{oQU~N-l25MSU-S`~o1SPT`m=DQs}#Q+K5!!e
zkEgI~_TP3fuk%BO^t1j{87J$S_!Wcnt@ER;X);bjx?pdfl+cnI!$4$?ev*Co=~qOn
zQyd3QebHP}rq4>o8dF0adK;8@F6kr?mItNw!z|@|Oc@Ib&1XRGe>g!&7)iguHyT1%
z3RLEDZwrfnZs*@y0dW5yyjSC?v2#Bte@qlkJlYBg+;Df%G$iA!xKzyzVBH|j-Q@;Z
z*r=}Y2_$fvdm-24p)elh`J)CIXyEu%n55B#k>+98dn;tFc4YPe%o*G=f=qB_u{N12
z(#gZ%O$H;Kt&i4(Rg!ne)EiAQ!%J$^L`~J1idY8f^)CcZfMt1G>8(2OOb1m~<KNEG
zL?)@PuF6S=u)K-9FRaMAg;peZi;nJkai(=TbxM2A3-9F9sFzMi2nq_4@fHi>rxU*=
z7MPyy9VaO6%WprlG<0~AtLWHEM>&Pnq33ZEk2PPtm6J9(P@5kg82C75WMpJAU&Zx0
zA>L6Z+4CBDfe%BC?_TA_+Ox@^BF#PTN@F9uOQM3xVzXCu6bDV>nZBw=1#x>+Eb?1<
z?ztee7qbUj#fzCIo)L8QU*ONiS&mX!C~U#D1Jy&M_(Z}pN^4^T?g@Hp^>>T|E<tr>
zk$f*ZI(DFR**|58SK)!Y_yoqSre)>K!ZHs<=gHBk$I;r`=!Bl)Yh6}h@$OFc;0IIN
zP0;SGc5OG7BO3LJX6E!{rx))>J$e+P#`s0-?)o}#>V0wgI`{_ny}EI|`!cxaDTWlL
z9Xcae@U9@o+@>W&Du}LgwbXCFV{`f(*9Vn}Z4X>Vt2PN*!06HUg}tr@Z71G4o;!RX
z{L+_9LK7#Kk$Aj4scZkYJ95u0ubz;VSox~U1~sz|Po+0q9%AZqG!%xunGu&UhQk*?
z`461k(;&B1Dya!fc*IK%HMV5!*HiL&2;Hu7XgkcQY(+?aWEL|WarLl8wx9g=QWYW@
zURsk?>mWmJ&B)HV1IW&(4RGmxe`yqZ>D>vime_&YNo$mD(g9w)_3ydOPQG!S<dV9D
z<~?}Q^BPPgKbJdnxrKGl(pkfg-3$<hLZ!Ce;v9GDH$3ES^5)|zuXr!1c~te`4qs)r
zqslo++vlS7R^6^;?SO9SI^&r2>anS3HN6P|?(Ru2dO?{xM8=r=yDj(_(Y&s~&*3>c
zVtVOO?_Qwm)jrR!C*hVqZyN1UXSjMlnw}boqjF#}UZU%Ju+;uhoLCDV>u~(`R@Crn
z<^sNx&#fkev953Bc^~ef301Wa?S66M{Zv_2e=_xZNgyM`PB;gPWKMDo55{>>s}P+Y
zpAoP4(h+}Uk^ftCtk%w1i2}UvUP8qz?jBBQ^^)Cc#pHGqhZ{SugS*2A6o1SV;ujxM
zm)+OPJo}BH1wP0JNz3B|LW8#A)kM*FH{W-?FBapBGFIkhr67!=^WARFiJV|C`da8D
zsz4fhHBeob)|-4xxBtW7(7h6Nk<T$^e6}8Adj)mDGH>{k$cd+82^R~W59e9baE-W}
zHIlXg%~voj?5lLy+&=66c52xP@tl<Y)KSx&DqVE_Rm59Kn`evWYRb?Zt6FTMXKv1d
zW{vXz*rWSBxP$@o9)+n=`Y+4{F5_pn?zg_XIQ~4pJL%4Lxt86?;bDMqmT+wTe;k89
zpNs)S&E~nLX8R{c>-U$gWA^o?f;DJlNfdPOP4^S0SR=AWU*DLwg;v4P#8s8NOP8N7
z>uz+b`ZFboQ+ZFP2tuz_oCYUD>lRJS%An1e(r^(;r5s^nLe;6PF5a*<ql!1}?^|Lr
z{T^l1-i&)OxoC|qn%ps<vUvU(o7w8Zy(^U37OMOEHXKEx!aAMeJ+1s<F+CsEh4KpA
z*6$ZP?L(neu#PkbN$4Kz*B-?W6yk?@n~2u<>O~_xy<Kxdr?=fk&wNlT50uY8H>W+=
zznPqNX~fkedv%`QGIVCP>tb=%=*qq<sj=qDtXYoM6K4&K^GBd>S3b5{OKN(^6|8Kw
z?SWaue!{6&=q;GBu~oM?sja;WrBmBQKcJ4!UQSJ=49_&t7^%;t3vt9Di&Ca97|I*_
zgkEiYcIKYKlE@2|&y$GPH9NsX&RI;;<4Vzcp%f{IDk|hVXIEnl*LP>H@)!_AwT~=}
zH$7UJ{$eCpwuGZJzN#beUt5u|YvOyXq0e_i-LnfOb=w!qcUY*eW-ihfsAOIioAINY
zM-rT4*P>+(;81-b!5pHEuqP^$a~>3hiQu3U(u0_u%fbqo5mD@dFWp`!fpn6^|2mMY
zJ?$BU1};G%Gkkv)NRSf*qf9YV$oiz?W*ViOwyiE85k?$p`-UD|@1ikEe|oX)UbnZz
zuCpCF&r$+3@6a9F<9?@UJ!arE|DBKhn^0=gCni~W%XX;wIAWZ?G98p*E=9={8Mzvm
z3Uqr<rt4>pNd)KYE8LVDgJVv2_yBus(i6S6!kC6m4NAeSCGl9|%NLtv2L!jWfTa6n
zCXMIaRL}SQTe16VYdA=oz7B{bsP5jsw{FN;c5pMD8Yi1!DJQ$p&694(D$VyFt}tem
zo}u<*%yi?O>NpEsu+vA*7LFv_hLt}43Z?<WW~<Ahg^tF}ug4vnVcoZ(N5i>Or;aVF
zY_P+|Ydd=_(|rRQ6&uRytIad@ssIBn9KbHCGZ+yAwlOgr>4uGIi6G%LIA@CO2C<q=
z>na7GM2{suNd8_WbSK5n(dn|`-5LUpQkQ$ZMtfj>2?-}@<>&GQqiYN=n0dKB&CQKE
zOp`LyW)<9{CA)O#;p|8!^U!C^v-^*vF5=1GMahHF_=Xill0Hnfe-9E0ONot*-C9HK
zuv-<`(f{q+H$7!#AN9&IWnKdH)VAn4YI^dWEZwIM_pQv-%)|aLyV;?uaxM>-jJgBo
zCmdBoL1-Vn`2AJh=#jRk9jEi-z1me)sdd+E+lytk<CmugNR-R+gppkHumUW#_`1Xa
zxyAFgxZ1sjG=kTsE9>u$a<ob;T<`w?Gq5+mx6kjVy`5f61>@ITbBYVue9}~QBt1F(
zddKT#SY*GoP6&ikyIa3$J__>N^$^xaU2T7z3dWnKJZcwRsyH6-g$17GxHg+g(a5mM
zHZ|lcu<vLu#JzE&73k@Iaw;%CGjHWfd%|5BW-(-i-eAB~4H2p(b~9KFeQ)=hv6r@8
zeS4`<`dXU^3iHkS&0u))-uS4)K21>7HQR$R(4WKKpO5%mWN2h&ZD{1LlI_|ZX~9+9
zjD{7Anq)n|z}~zTQoEBfSQGtd{kdFgWwmV%N8Y(!zFmRv0Py%*z1UK!G#D3Uz6D@h
z8+b4C-g32_<LtCG?%PC2J07nttWq4Y^>Tc4v{@7Tqk2V6GVh7qv&@g=F}jgxYs|tN
zT3)Rv%qUJIuw>@Sm1@IbyRelf-4Bn6yhE`|>{Z2k%u8jH9(tGPM2W?72S4>%e{nJL
z+q80E=w_Cs_ZM;ZJe4Rf(s0cK^mF-Y5O&RWwW~&TUPF^HyyW<Y6LlYPM6Y0}$C=%g
ziMSL3Zi{m5wL@n4r{-wMX=eCj+|+f69<{0KPnkpx8L3w;2Rv>K8^jKTP-JSQsx$B+
zg6WDXOYTcWs4bWjW5TSwnQ&6@(kUwuBqATej!8(S5}do#9*5cOym&Xq(2)N}n9TWh
z)?Z?I$!h2J#w7okQ9Qoq9HZb1a&p+Pookl}U0?s9xXtbp@1xVfY>2ZY40TXm7ANaZ
zr+njlAJtF;>pVQaAKaq8C-`m5oH_^5G>PWAP^1wow+zHQJV}^r(@!l%pL}@IZyh?z
z@lNbrdfSO@vqm>4&+{{*@-!d4o~w`A>Fjc4@S0YAwl?N0!OJA{PA4^=&@gU3!A3Z@
zlN5;YQsS6=n|<qZ@#^#Zu4Db8oraRzl5Bi7?ig-(%B}gBEY`JWP8L=LoBKOXs}2mA
zdWLJse!moQAjrB8M{10ewz@T!AIhgm>NNUNzF7Mqbo+@{rk={MZn+8U1OrYT<{~(|
zt-d9(QS{x-aq;d8XGWR}o$mF-dG@V;=(dXMqYPp^l}1Yzefb_7&e15+g&lnTJ31}s
zHjea#B?^@94KT&iZy*d>O0S|s6_1n$pbsh9b-cc};zH`mwH^E@ZZX_6<oR%=g4MQr
znJ7*WVKH)>0Ey{G)ySROHX2nuGJ1@6Sh!-_Rix=Z+27GS+>p;Ps(88Ogylm+%=3fu
z-?%qfeRhkrgs^ze(Wz^xLxI%zo_?J-zjfg}f8s|dEOaI|5}CzYo9W+NL26Q|f2>J=
zFC36El^@x1HSlB0)t_t9Ki|e@l)LMtV8!#Jxl{&Yft=T#*;O>|=7t|zO+7-j<i>O7
zczk1DX&^+4wTbG-%gyS=%Y3N?+{V*wTnb5N4H)*$YPb}qNAh^nP_H)h)Sv4ow)L?)
z7R6eFSJJMGmG5P*MD|u4y~21tc(A%<p(<iFFR=W3!g8^^&Ah-l5dC1xqL?sM%I-_n
z=$9k(q@ee`7hn5#vf{#<6+g=24L`S9qn8!SU0<4@V}_)<N7X#)=?{o3ppJPmw)=Hb
zTJ3ZAh6FwDp2l2iRcosp8WkxCV^gjzRw*7>h<RQKz3`1ag-tCK_ZVu9tylDBZjL&;
zfdd~oW_dI3NuB#>UV6+eu5QpdQ9=Eo-M6JwLhLDx$6<i(J_+ReS)7JFL+o`^;igzy
zd@C9Xd&f-MjF^0~e9mUlPB*?e4MwT1oiZ)Uve@)Dulr``KOf?f+JsiQEy+{xuDH<2
zX6|`1JKw@gO?HA+9KJ;5VJPpx`nzR*)*xnCPck7d$T@#IV->tVk8x7FfO2iCQ{`j9
zt5@y)wH23c?*5K<cxOIa-di|pmIgWUl)9BSEdy;-y2cdFvrkg-YU&fN^~-OI;;*V~
z#TqZU%1)<5vfsCZAeejOi+FfIQ=Aw1yCoTs2_*O!#SmJf8lp1vzX$NzWllLk)l{bt
zuEx4)u>&U?l(>6k%hppyS#AY%sF=CKlxO0^JB!q>flDks>GmsmUwl|7aoU$#vpCz9
zi)Z5pNTa2!<{q}+P8O|}cyNpmtf$#W8eXNvJbCS6UCQaUueXndY)I>9fc;v55^V?y
z7vi{2tEl3067hR-j0RZf=2nmM_ctM_f$<-Erazz0zf~*?w;;8V^Jkf%pd;Xjm$*sj
zSV|r1K<ssd);PoiC36~K_%g#yBEDlT=!jqiscd7KKEvK}l+65|B%542vtVobZQB?z
z1B<0jDeGVrO@;R%cCxu-CZ+U|Tu<l%zl~>eqSP@RSd!HurIwt6VqtghoKl8yOTGd#
zU$h>@LMW)Me?eVR?R8InDayU|_%xNjylt_lI_UDpg&R9ZmzRp}O$sd*-RqTl`7wOF
zQgUaT+C#3yWzR!0M8Dh{1=*J{)62)aJ`no)erW+%Ki?mp*K1jtmB-YP28RY&tp7jS
z-aH)Yw*MavX(Sm$c7s$(mKHlBWQ*);gp#skjk1gxOtSB!vX`}litNUkCD~;+_I+Q+
zF#OKZbzS#;AJ6ysKKFASzw4jtIGFj2uK9e<^L)Qw@7I!=<NR>XX=jNq{YU9CnF&|5
zPWT_iR)anW_;t8qqFn1xVl>%Yz4sA*P$yN>Hu$YWT-x(>HJ-Rv69kHHwtpPC_bp_(
zWKZDwl7SgYUWvms24^Ck6)zapfOQp3{8h+D5Y$$5z-*nB-rMY&uGE2fhP<S%7}+;5
zE3TOjhrh#^cm%#_I~NYWE$y+HR=$t8yS0Pq8b0$qerA2LtF2uRB-L9_$dVEuR4G65
z%A?e!Qm=n9#w1O*dd2F0GP%?#V)rWqIkX<#ZVsXs3i8rkZ0}e4<F}Xjkt>Mtz|ERq
z!9WbFsI?rZ0{0UsazWW9qq%dv?2YC9n^oRF1m64llH#A$o?wyLRzJh*h{RUj*eTp)
zu#vSCI_7!9yz0CQZp^>SpU<E(A?|U!koTZsc!uY48CIL$W)N@q6ay1+NCm!Ph68!d
z+{jfK5a4oG$V_mDR*6j(D!oqOy4V-Ey}yIm9N6F8>^wD<AKU{&$+1hgUi%v8&&R|u
z1Ts0gE0m!4tvFOyeDK+hAcmEA0E6!ljY#iaL|wLRwDZ|;aIK5%o=S@*POs}Y>9%(>
zlfMO6Y|TA|hq8FFvb#@47T688-LRWKS1{eB@zY~{>!m|I`n-jzE`+X{VZ?obpT%Ri
z@KI$KN4)yQWan#ZKhQ&AOuP?fOSgaI5#y$MzR4d%watN044yo!24N3M<GL8wklBTX
zN|{ezoo@Zy4a{){DlH`W?|pf3w(_9Vo!TtNOasjCvkj!H)HQDs#aq13fiI7qjpcSM
zi1HDZ0%k7%+rjZS7v`&(yjHOZsz@u~=>>et!Z+XeBz#pTo-b}*^1#bY<2cvr_(~c+
zI4fnE7L-=a)I?4oE}A8fVLXsGv_bx$XMr`;M%P4}TfgsNAH_T-VH?(S<FbGNS7sO2
z2wK4_whQLi&WW+8=6nBCh++VpuwB)$Kj!!u*o<L+*5k}kUXu#Pf@|L~JLYo^peMIS
zIh(`zTLTu(i}x;+H*z^B(p+DLJ)rCxl8M`^nkXRKfr<e83YmHUL_{}OSK7;YMs#rm
z)z*`4KfrTl!ylF%QjuGTG0C4}=6JK@(I|ncg(UTkifNh%HkFuOOA&MrWr^&XlJm^J
zk1Q<RJ-0pfB{$uhkH>93@;3&C>uaVoNxc>_+VQ(kd8;J$-qzrH1fuoh(>dQ$f;o<x
zyLlCgMPc11R}D;D8Kem<U&mLP9sNMnkf9DDQTm?$QWfkh28mDDtNEj4Fp&;f2s;nF
zmoe9|?!N!q)fdl4jMV{Y#lz1c*SIK5KnxR(TTYAC$Y6lYSH1WdFWU7cGx@^7GN`gD
zKF|K7WZXb}t#@ZNmQwb`OvL#QaCnB`-k^K2CSMAIRE5cZZPccmkth%yJK2>Xquy)!
z{GJ~HSju8t)WbO*y*=+xap!TO*S9wpIH(+_s(d!PyV`X7P{4Mpu6nN=NGw7}?rz(E
zD$L5s3Aua2)+S@HV&-{sQ&YApW}fbfhXvQ^G9!o^8)$Uoo>R|<W0O4ARZ0&>JnIZH
zlLlf(ybis((BS`F1HNZcMLk|b!f5u;_w;2?hx%l<(-RBM`&SjQ63xe%O^~|`H#X)n
z`K-R64w0p6_|(mjveL@uVXPVx-@`?}W<gDS%qV9a_njVbuvYFRQA;l7Q_jE_Um06<
z)R2#txmhVsJrmo=&a@s)k=45*QDmSou=-PU-1Ee9p{jGpG7F$9Ze8pj|JacHT17s$
zveb0zn4~O;9&zA26bQ~xGIyMrD=Vh_5cuc@Co}OrZRGOrwweL4G+DrL@<U&!GcS<^
zV8cZAZ=m9T7H~)1(BH)wL5N?#u?ElO693$fn_+jBJkOESXBm-@81$6~pUtyXcHed9
zdG+utExN<dn;Jfts&p%uChrQbZ<BZcGhQ_tb@$de<lNok(PbMQ96VbPQjrHZ&QZ$Q
z@J(+O&pit=e2xEE*%lEPtf7lAz3{N|#N-__TGl05Mb7{mCpb_IKP=QJfVd9G$eW3Q
zgK*6p5g`U&$5qL;a1=o%&~<B(spfZe&xHd89ibow-xwiPiL{&zHaAf&M!ph;e{k_K
z)cz9ghOFHrS(3f&$-BdK!b{dO!ns2Givvu7o0f!cau+T+&8RmI)fLAAuxc(!XNM#=
zVw6PXf>Z;DYaKrWDw&!rV+a0BI=T*rvO`tY%3<>px=&wGvATKoUu*tp#~Zc^_$pd$
zU)$(Vz4Q@n?8api1Dz|L+Y~ozUVR$8g~z2VFF2G3a=ei!yqzuXhFNI3NQ+5p84QZ$
zn@fvUKa1*x<gNmXx%R+Bi6DY!qNe~q!a}R?_7-N96u<bjt<K?aWD5qYBWayDf4)5J
z;kX;A#HOOe?&T8er4+`b4&rSYv2A9>5v`JWMQ^^}UPa#V*)l_xB;mJzZ9G`5VqEwY
z&6iYjMzWdp6l3SAvCGYBKgN5v1TpI$+!16{oSY2U!<&$)X?<RqJr~EW3*fO${=mSy
zJ(Y}l)yc(wH$X$`BuGFwe9P-zgB2)yc+9KZqfmLHGpE1%FiQ19TAm4PoP=`C(XaU!
z&AIn(V)9bv-l(E+jq;aR<c_rPldK{#iwQ;psO>IldS;#zvOfWGMrJ1kF1{^Y+MmK+
z;CTmk^ouh^_<Rp%=Ub0ILf@&`mFX~G%onRJIYqw)lu*S{NnXq1YtIpqi_fdcH=Bpt
zd+>Fmr%yPpiZ~oBbk88z>+V0Hf*F-Q48%2h$x8LTAD~)0Pp@eLu!H8)LH>Mc&EI-H
z8t8x-uXZf^x;S8sfMdym<liv%|Ew2}(1qQj2Iwe`{6BH~|6F3g96`;E7-X0xcz%?!
z&{pzM3)9_Fmuy3qDUfg7W58Z}f?PX=sK5VG$+Z^r3_x5}PvzKRCY;5`&}^sbv`)hk
z1Tqb+&&0El<4V2JBH}o2gQWTkN+dW=rJZIaVTAc?aD1v@U)m)aN<W2!4C<1q3##Bn
z)!m>5Kd23^DmZ)nmBaDqk6Jl7d<rGd&z#daIyXblOg~5OmIkiCaHS`~M^nL=ShB%b
zCpz^eK;U1?zq)^O@ikTGr2B;=hkBDrsdIh)sv7+1XToe%N@5>`PsQH;bnbD@Q(${=
z<<}dxVmZ6A5X^!=somxhG1UF~T(F>&#+mP-XOdT#B*W~PMREq7*fV(~GK)D>QI4Za
z9g623y#<c+J<F`HC-A)~aTl$_1MYiXK<tk74A13|QeHf)i`M8!sYZX42B4fw2kIF?
z$%H4V<CAeACmHqT45RO}l>r4GbIr-G=GCNk3mkoLp3AlybNiKEKleW!U+JYcgh8p@
z%sU^lz#rTyoSJ4dJj`>yzQ!ug^b55Gy`D&NB5U6Zp~ybSu2J@EiO!5*YN%@*o1$CI
zFkVfKXdm`OW&-rhCS2y}cPb)6F<ulmQ!dA7iujC^G(Gq7wvfrY^>4GGem52$vBR%g
z&g+(reUG1?)Uadu-fMlrR>=H)#*$#%z1trRKGDfI41DpUh8z0pc0+Q79=6}~K<zqz
zK73cNnza!qQOt#$I2H0s33k5nfpT*Y)F24+>09la>l~So3+nWHLWqfxz2(f2nM9>K
zZ|Am7v(k&T9~}Z(RSeVx1Bv1@#0}n*<o|V$bo4;}P5k#&9t0$otAbfl2C(952Zu}D
z_+@>Oa$S3c^u;@8pazX?ZD&sLJ134kv%d1gziqA;jTN1U^V+qvr9R<v;5-kYqmIfb
zy3fs*AYc%!JP+ljrHqRSs0={A?%<dN>hxf36{pXJPqcSrwY?hG*OdJ$>4Sw)!yM27
zbOD|wecbVCUa&gxr}BfFXI9xqq^v;igC2J@WW!EOAx}=AbN155$6rJ3!)KEn4>JVS
z?2BL?G+!0%i<CAso)M3amEPS_y<o*V6m-N=jnlX39PMXKk={GqZJTWu^`2vLAX`cg
zR@t{@)x8>@9fDqmD{1BF%+wk2L@Q|2bo_3`dsX#*;9%q10Q+m2bh(ycd@kYyZOB&^
zkq5`6#jKrUO<)ObGSXKqUe>>#Yx;%UJ<sm>#P)~m@b4a}gKYdFTr5yAgzeHnF4SZ!
z6{OJM3zX^)*j|jhe+)>xiDw)J3Idb7rmgP^p^!CRIwuWY3n8T{aQjck-SS!zl|V0*
z^4+4r6Q7LTek~L-P<1Tf{=G3ugjPq6laJ9W+(eH;9~QM2I`GY!{}~Wc^Ltg=-wQ1h
z^qgTYU4Hwqer0FKQ*ij%o>@KiauoxyC(Ety2;gn|S^KhM(w`%DP3n6%tCC>FYB`Qj
z!N51$ty30+Ss*i*?IAn?nAm&Erjo?N4J;;T6EuGN>x05*NEd#K0i^Nevfp#;P;hZN
zJm@ZUW&L4!Q;s*K6mSt^B<t?(?{BnSDqI9e^@p=2F`a16uOUEXKrVa*c&GngFa5i7
z?SPQO8ldNe7jrJuH^5M80Q7UK*sfQHR1!@W=HgD*-?jmJtoiY_QWF6jX9FoA>uyX<
zeLbmjWL)?*=MTzCfl<y!{#{(==ZJ5^k2-2rvcemkd~VU}^0HmXtUU=!dy@haW221E
zr)^Sbny;;e2rn|iDQ1I>LrE>IFNNTEpI3sx6u6ob5fH_cNm3LuK?2kB=TxXCkRc*w
z$!Zk~cuRJX17JWFaYg0}wO3%!?)fBa71-0+MF7xx9{jV&;FtFtn=TQ{`20WN)zkHm
z@vooPKDMKFr#$8d%ZiZaW}bDuT&c|T^<BT|ad43L-r>E0nS1?s$L2%6!^$9HrlNS3
zXaAr>mus)-x$O$OO{>zG%DsB*mJi>Mhz(DLh(l5zYO5hx(_cMtUU%F5=}hOWv65b&
zf1&tfgnah>S`(1<Ey*l;FZ%^w2;0@67vkj=i}xhn8yB(s7zQZo^<xMAKaI0MPAs<_
zVCyD0Aj}VoK*`|G;bE0{W2#OPB=SX<CGc(ol&{OGe|^Wc#o{MOQS}C9%@{M(#GTE?
z?(A^~hEd8qkU;oek&1DOS@b^Xu=q2R(3z`SkxEwc^z4;Fe;g3wD|j%=Pi4}tKdi`C
z<|(8!7%kX4+>hn}<5&;N)*qXDNz!`MJqtrm=lW-oG68iTXh1q;Ni2y6x{<AB{uOQF
zqt|lcA9?in$*>D$pG+&>f>2XE?C@tSN$xS3hW%$70wBSd`oXU_JpCanUrRl|lRvgA
zP2&b#>Ub2Lvsj{skT`MHt_EYHUJJVvu90;(O&9mA5S4UpD)w;+beutBV(<K>#`ad*
ziA_IY##6)T*@tM1-rgJBn&=1Xx|Pz^>1{V5xH1dOwNKeFhiYZ(_fHdEt91kNQ%)?s
zd3ehHxk}_1E{fNBat#OG%LZen{66ub;l~8opndq^T&~%hSC~~Umh(_E!8QHLTT%o5
zp-aF-pup<IkbPb&OZFt$fWI_>tj*TyE_2C-w8SLohN^ZhR{XUT-Prc%SwKx0)H&qa
zk*tB-IkSOiE#CG%$R3x{DP4HnROxkNbkd91kADBNAC0(7YvS{j>6#U11qM;lXjj)5
zd1I|wg~2)Lh7<SC*K5VQd(4lMj20p_B$r&qSzSKL4nH;XinYfq=|`@hqhasv*KUn&
zfrlYOYG3G1JU*Zg)iHj)8|<TZf7tQ_K#r|G&#7mKGgH44FDkn6`YPe-+s#q*_|wZ{
zl;LV`<ig?C6ecBCw#d6d8V}14c9_-S%Dux>kUbSxFz3rR<W{>?;Ij6>Ddf+#R_;!J
zk%Ge&dh1s49jVgMnp1&hIH{be!@w1ymsK)i+db6%%H7Qqr_1IptnIy)Z0LMZwoHfm
zc+3E|8LcrJb-)<El<MpmD3k3b)HI&%(9sXZxXEB|75k&>dvM73=x67}=`&B%o~-mN
zutnC`NQSiKf)4iAr+ccvp@96;{wmo<Ujotif3ssgoUb7Gg<o~J=1nc)^tYRdp6?^5
z31m-~{WDdoC&)K_dn&Cvsq{gRfvJ1FNlRMp9yh@!k0{69`>5E>8;<=kE_9rlz3%YY
zd<x`hTtwGY8bIJ@1+x#Vk0AUY-`(=gj5H#gxLeA}_6QcR?tcCejx*hC+E9!-$yF?{
zE~sx+HVk^Jj<4=%Rp4ME6qeQ_|1M&c>$W|R098RQ5qxeFgk(fVe@;~6IJ@FB#gyq?
zBL*if_!m42-23h*#=D&I)7*JTLzVd=`R4iN2^Y9Hj`S?NaV=HsmR2Y)_Gk6vs;s^=
zeLgL1ce0Xt=BXuFZIt;<v-OSjF?8KROjMN6mdvgO7%59lH@=tw5srokbv;&-`#)as
zcP|y>KC(CS`sx!VwXVFeQA2*psxIHSZbk(vtyV<E`e?237rK;Lzp9;dWV&3!;P}Lb
zKCD;{;hx#%=9^nN&GKU^6zVaP;{NiE?no!OK>&oZ+vSPCDIE`LnY47?vyeXG+4@#N
zjnU-({JHS<?n}_%2@`QgPU)@9>nDZTuOgWE5d_!B>HeAIOpFQA4=2e%xduuBO(4+z
z@be<ajkVd$IhSEqc?Aiuow9Yemsmiwk~Ufw?rbp5(*(|cLxTDZ*iF=F*j5^<Hn2ZW
zz?FgKD)QXRF5lga`U5JFS+|;#uNGWE5gvOT3)~OxIrXO(*!Bvnb+u$BW%!^^7zvQk
z$&oOC-IVJyAF(6^9KC4lO6J!#c-cUm%>F8RmQh`LOLu)2ad{x*+9e{d#fItlf4~p5
zNz$GHFbTj#QuAj0+(Zm#2mAo|<v%7(2taL$_-(lQKlEIG{VIQ1{z7@oL&B5JI66na
zP3z!<)SGrh;Jv7_nL)N?h$EDtb`?|kC6QfXHOTk;c_NISue#IR5NJhv`I0~w`PBu!
z=)p0WFdePO?4W>)u7wzF)vo$9(1tezZ*ykLw7+9v@UML!<`3Nt{n1lc=GaGZLCG_s
zM{sVH9mlDInkWtM8g+K7fQLY%zC+$i-@0_$6pD!G7XWyBUc6hv^ywX_^LN`Zd4NEG
z^5F?oDzAEj)jnM5rdd0&>>Wd&y_zbxDjNme3%aCzmex^Z8%Pz_QeCj{(%H15-BS5C
zgDq?6lE&iB061KqfH9BN$WY0H@B^|F?W$kRM4pC2TkMIIUiqUtp|Wdixa5nx9r&}D
zl`YYcTj6SnchkG~c2+XOmIgZj=n#O_N9~_<o$XfHzXt;|n6FPYB^@#opRw>8A0P{F
zpJu)hF=AF}vcLVuW~hZYw#Nq;n3z)nSzlI)C6`l-zM9fu+q~@HiP)mNH!pt^p~j#7
zMT9cbF(-UK&6;J<#=%V>!rKd#c*xY`q;5azF8~o*ys7Q6mTvUutxGina(9YR;<Jv@
zh8WfkA9?p%HwiSh=qBe)VDEL^-~{ge#@Xmi8Qh1DR`ry_;g6F%lLRnw{sMIlr~{+h
zi4rbC3$-%~zi4|UM|8dURuz`2@5H}WIGA5>m~900rZWf8ed}vkB3Gru0B{jmop{vM
zMyw#(0E@vPMJeOXNBzSuU#<n+YUUL!O5H7EC??G;nflIJ4=19a#3CeiAA~O`STuyt
zV$A^Fx7o7MW?*~*agzL+0ss#_JhuU*<_*hcdXOPnsO$*5@jJS0zB?S)0iD4OkbfJQ
z3&vTSV4Oh27OtgJrX)}jg@dFQXae;VaZ?NX`v?gT_0hwtd-fH;#f8=WXFR+T5Cj{4
z+c5sc4*XA);RwhBrk7_-Z+}6G%&DFPT%-bpR?QR<a;oAQ$wRAKq3i37W1QnX&7r50
zmpW=G9y}{ah>2_9JGQ_I7z8N!6)W8{E2I*M>Ljc_2ix-wv-kReK24lJ0<nE5&*dz^
z9+TWw&FMT(wjWMuC<7UH)TG`7C^arCRa3Ko4492>bAFZy*a29Yy65P#sukqg_v%R|
z*kovUs-tEO*{5*mKI1a%VYd=Trn@O{B3`&Kr19g8M*Em#N1rR-06OQu+pGPCJ=EUG
z49vbVrG=inSo!FV4D^c7gMArBZFA9e+-mXt0Z{IU8(0%<x{P2A{252T<It1W#>6iG
zWJP)^kYG=qySk8v={(6k5HFr<SQ14X-><zv7kawN#ETgw6iI#$d+#*S5Ui4ov-`f;
zVD)_>yz8l8<t?uVj%Zwpy*g`h-scsa>yJALJHvc%XBxs=!Ac>>2k_8bj@#*R&(p#p
z372DpD@~}B%#}$Upm&ngx-z9NA1o8+@;mqihV5XezzpmWM#^7c9*b406|Gk)lrTX&
z!X1;Rxa<%}x&Sdj(0<z8)cO45McGQm)#tM`<Q9W~YM6-KlR6`n4-nvNgS@9L*e-H|
zQ8Kmi6;luAY4A4`RA1?mT*==)=YRUWDAt6hQ}3lQF?G&GONL#s8h_<*R9<4UUH<3#
z#_8@!2rP{`T!Rto`kViBZe!=+7^VLH=XYZkT^#BD7d6gK0s7d;jlEcdtoyajuSw(;
z0pt<@4<o-2UP;K?Eb`ovXf+1s0GnC|I7P09D+I@Bh9^n$bwiQa+Zn96nP8~XS-!h5
z*JoiIj0FT+v8*pWsr~_*RA?MxNy4Txjg7k+D`@oPwSDP<N93dS(dtbA=je&S;WvHM
zi2Sw>VOKTB@P?A2NKnNKb;^J=7nc$D8Oyt_H{H(@#fCg%eC)ux`L7-SUwqfUe)acg
zJ<sjLad9(+#nS7Aazvi*Yl}?<ZMO-hkDz6CZDaC$m`Eh)FQF!*E@JPn(5~6`t{t+z
z(>)l$g<xIDqdG3K1Zozi8J4RW_Csdl%PaK>mjK@}4twu2=OcRvk>eVQY*^)jzm|Hl
zZP^2;v9b88ciw9{8J5c|xq2Se>7lVrB^-NFrXg)k@V<T-rFUALXptXY`5U;|<jsRi
zBM`u>4S_P`4K9_!86$$NV#-ZnfSNc#wj(>{7y*!zib~3zbF;~d6-b5&bjBMXZuZ;~
z#Y@-vBS^fQcwA9od;a(~hk%p=<rg;VBulk`+7GaGN%hQrjuebEo|VuE2O2cZB=42k
zh*O(_TPtSsAF-8D4@&b@FO5<<Jxz!`Y&oibc!Y!wF7i2&s~?Wm?ac);U$4vkb4YR~
zMUy$IYSf3T*HrZ<V8$hXvrnH|sZd=JG!xji1DJr<W>cmwr;fYK1^(fKUQB1;J#{*F
z%*HQc5M^!gk&2HvAlblAPK3{Ol1#OuF(XbFT~|8LEK}2+Ann4whD~g#yqEE{P=MaY
z19bzFXK##>I4V4}K!cy1b46}{a9;1@<t(_@_cJbA!o9k<<$zjhhO|c`--pCswMuQM
z(dLYNvol`1_pZw0gki$)64iAK#>DCTz3sRkKyla}9*<1hTd8Ph@m$26yzy+Pn6lv;
z>519CWj7*gu5V?hhC8@0zzY1e?x`2*(`&m4xfS+VZZtoq20uRqirSXz1%#Pog`~x;
zw}QVq@B6dsk1>f-RfLV)E!9OdxC7#m=WOvr_!(#+qk!Q}RYpM(lyM>6LSm9edNjER
ztj7c;y92|H2s2aZtu%p*Fe)D=;dy<h+(UdXX0{1zjG%i}cvCX+(=0!NT4I)SLu#JP
zU^H<;mS^7`v`a3_?iEe3(ehZkA!UavZo^W`p`uthsKy)aFl#`9oXcgt_Iku~=iX;%
zt>A(4?iA>a1TPc5#{5Dal=RE2u2AvZ7dk1z8_`50{d7n#&wz4HK>zjAcjy1)0_2N|
z93Xo13_40?l8is~V3B+L6{|I;3Lex4QDX9pzGlcBCN^yyx75f3NKcx9*~b!~Ce_Q{
z%m6F_kW2ORD3>Z-lzo(PuBX>#8Pw8xmn-G~trlp2pB@ET&8Y%V4PWp{wbh%iTjA4Y
zIuIax4g5O)xQb!^oj$&kG&cfnw-9xGl+sm;&&!&`KsouFYZEg_BDJyn7vnuYcZnEZ
z7%sid<i%p#Uf1^&xCy#Ugo*}*?^A8OwarZh=!6!CP|JB77Gp&8k22hLm2YnQk(qVw
zc32kK;b0C~+es&yuRo@Eo+q*52Xio5E9W{W{A%lCCS0_Ua7088jH&u-`Fh?(EE?2?
z(yLoWLTn+jW~1nw?UYExR88?oIeqajgknS_)2O*K1X$=OV0f|tNn_q5bEC{m-I+#S
z;7bK6!u?=>|2u8EA<b8bt#gCR7k_v;1{Z&RA_*u+MPl?9Dv>?trju~xx4pD$es^Qm
zhjz!|a<TYGyQxw4(=RJm%U{;|Ayr--o*#QKzFVodYY!Y)tO+CyVJ3*q<nC-c)#jf+
ze>U$P4ya2U5%M(SgFj<G)i8(!OxCHh{~X;lm~MTKWHd47@Z+KYHI0g!?#pZC-^@vN
z3CPIYYbIPBtp*@-;(F3+6<{g!=nEcPif(|#D@I?ubK7v_Vlwh&E{j;c+}ry_Lvq1q
z1+tuEUY=lDeGw1Nq$a4e2^YUDJv3w#<{!!=3srx6rSm*x&J323-vj+}*hQzt8Om|(
z1qbRu#z~A2oiPbnH)C#9gE?<)sJwqC=u7Bcg$s}4pFZ1J*6Umv{_1aExqAWcwl)8P
z1yeLmMlv6O)dup0pD;ca=Qowu;>g^xZI<!41>1q*{U5I|8m4(ga#7%4yuE_euvlS|
z-<WQ_lXZAnbXYAK=AnE{{c@4~fnD>taNRQ0{rg<QZiMz1BdcLl1h@IQ%%A&b&YqBw
zBk=>BP3k-GiH7h@kbNnS=>KRS_!dMe3OkGpMWGQ+geo#<0Ar-v0&wlQlMEm3tW=H}
zCera=9{!ICj(^o?f2XY>w;gDGeHHzvHNnVk9L#%V$c90kFf}t1JoEND_oZK9zPkMx
z#Qu9`!GyN1MK*zrre^8O`eFGmcBDo){H_tRpX%*ft0b846NIU5%(YJ;+YF4srO7L6
zx~n8x*zeo0zyNZcaWC%!k$Kp{p?hxWtt*uokhXV+8XAXf1h04apYT=Bq4L)3!G(Gp
z=NdjujGjAGx%?u#jQV@jmps%sr>s464IDmuo8fsoz^dSD??MB3<3aWigd_9hjzjFS
z#nL=%)7<$^NLM-YPRBEL*v<-mpWLiy-8FiQY%}f#oSsqV1|98A7paKv?)gi-D+rmy
zMo0nFbD#kX4T54~1Kr^d`jm5k<irzry*z>mENW8%B>pezoW>`h>o6`_NdensZ}DTq
zsz;`JqE$~rvaWKO>w<>M&b{Xy#DfCSX5A*S_k=|fNea@K8~6D+a;s#Afmdc4<idys
zAeUNXSc4uRlubNHF@!~r{A@l@UzFyr>~b&74j$e{mF<{5#kjfE)QDo!Oe<QmolS{T
z)a4{09}$og?1u&ORngG$B@qe2X4l8XuZL|i05LIrm#xDg!bO>o1yCE89qAqI_+Ovq
z5=^D*kv-ORf;3Lv__ty#NGX%*+a;)xZ=n~|n9LL&|FXfY(vtonX6s(I6s<aDH&Bq?
z)~g4-DVDu)l9Zx~tV8CI@Ui}`Zc+%@{$r^FF|XAF=OfZ8p#*`3oX*gCuN2)j^YJQ3
zx{zywZ&3YwBmI#wVH8ZptQY&7x>I#BFYn0^x^-Nz(x@{>?VQs<^I+8Z;JJ*2JVrAO
zuf?k@61s<jeKs2nK`#|e*^Y^>ReD;l#XIO{@$K&sdrOODCi$Q7Fq8C<!1*cw=3ZN9
zZ8bZ%!x5g@d;mk@NbVp()MbISjvuzvbwLpf&92@<p)2QoKilE(wh}uDrsEU*wf<dc
zP0*g%J4Qy#(js;&{HW(fvHRihX{J((MMD;$(I`rq7zqRJ#bf0304DHrK38l82O{oz
z#{EMOPP{;_Spt++a{zoev%AWqbq|&iK;V7JeY75F|AF=BH&A#FWXPX}!H3lPD!n`<
zrebugK%)m{;$U%N*g)_guJY+jYk}L^_yE+K-iYX`?zR$dViS`rsGrgkKqjqne3mKs
zw9l%i$7Y}+U=&eD*G|!y)6WWK9;{Kua|iU#bsG$X6hgXD_ejbHP?o^R38b47pk~Qy
zlvNUwHFoibvxk?rQRUq3y!1T&wago`>W5Yadj>ryd%rRBfOph%D<>Zy+VlJumy@@)
zHJ8!D4F-kCW~=1=Wkv^k2X{|z`1VfQkl@;PLR9Vj!?mSyxNZq@O^iJh3@YwXQ!^D}
zP`XC2vS~)S)O?Buz*hm!u+>$$SA@eeQuzn0%nTu9mR#;5RXX?IQnLmIxree{+);gv
zjdmgkq?o_GFum(0YaIfRj|NSrtM|I6j<7VsZ!Aq2fvA^#joDu?qo?$rn|&XCHu0{j
zv1M^hj1mWJ6YyS9EkhDwSw!t_`?EPK54627!w*$@l@-fM;AbtakiXmz2c8Of^t@N-
zEuVDeyqR)dC!YnWqO&_#<T*e{BaR#jg<cF?yWvWG!cU+7Zb828_Q3j`o|W|Ubl>^5
zsV6|tRN-so&h2BS+1AuVD{-~r#<1~+{XoGPpsJa}9PUEh%S|OF+vNcoaKBUo&2)Ty
zV|!`RS)9Ljp_D$ztkV*;TjN);wnuR7XSYuEUMJR0_O#*8A1AuL!aV?)wcQxhp~r5~
zqn|9L({F9-Dgkcz9(a@Y@WB>iq>moV-hbx7tk~>SwFYUO++#W#(h6P{!7d3PT6%mq
z4Lq8e_h)O;RHAR;VW|B`77?|>GWNn`a_y`vFr64Gwq&f>bImoZx`0#|c&pD;w}Wqf
zo!vc#ilkWL6FAG)?>;8qyj3{Qh+%DPi|IF}*8W-w>rDS9UFF|BZ-m7+J?(jL{*iM;
zZ}7IJ8GH0_-VlUth3#TIY&*|vFNmTqfTNBIrj25MSZK-ucl1tyEy>!TI5`<RvJ6u?
zKcJKiFb5YS?O#F_)ox#2(HM<$#e|F+;W!--qj($K=(Y!W4$YEm7>uosE%erdc18%o
zv2o33Mi^Hqft}!rBZD{21D%*#Wh__H9~{?9smP13K;<}Eed~y(BU^t_HMUvzj0qQ6
zP#E`btCT7*nE@J;6R3mTnHvuqY1Zn2#VPQFQ{Qry;pkl5?9%80`ITmQh<u%GB3{E{
zO7;&7*XeAH4Gop=mAcRdg2{tI5f)iiB7eux576a^4xhJ5K|-kx2;c5{%<0@}MZ|GD
zu{T1DT>=c~x(qyWkhLq>zm&ST>8Tlm{T^@DC#PUS@Q(pkUUg-EU2-1fN|}ZsY`Bu-
zNf}o_=VagmK)gE(f1%bFV9J_;8QyyT4mu=w9}#gC?l=rRQ6jxcxhBk?<G&qwfLA$*
z@IIL91=O;!=NLCWGb=j$U^b=$$^sXn4<WlawFv}66n?(+q3bwJqL}4b0hCN+e66@?
z%)H$9vn)z-Q?#4fUp~!R%Sq<v&eLL4gw7%OyOPNX>WoB*U3}plXD0HY@nPfVb6_rn
zMEsr$HF_&)dh<Q>R^jC)+MjZ&63ek6oFLFkoPcs%seCQ!z>x^p=35^aF#GGLTvtZ!
zElL9Lt#p6=$3iUhSu+Q57E){bzbo8i{}!6|z)sX|;1;8)TdMMAGhbf&o5xAk%bI6Q
zeDX2}3vDlUf^skszq67ICyRWl$fpU!7z~0K3qS1zzL*T>DN$3ch-6C^;`kvKy2uYv
zs)mTet!P7Q>hE9Ag29#7WxMJqtJp%Ow%$oMe(+~Y_%3Tx4qB2N=h0$`CogunO<{-#
zBiIY56|~a;F5>&z3l77lXC*idc(1G;uFAGHuYM<_&`Q}>DQdeX^M1wrEZFddIuH5)
z*FID9j3`x~az@X4vUCuh61uIatu1G1X*ucS**NB+j6q6j0`+7Y+G}>OBu1jpPNk%z
zgjqT~Ik)CFzo&BwNx1<!GrtGie7|i~l!@+tF+WNy8mJ{^5}wvEPJ9o24+0TOOz&b2
z5B7)x{Ld>nMqjglCF)i)MA9-GygzG9_@5Dz5F6%}nMm-IaBt1`{1{5TP+S9a3|S7?
zO73A0?R&=&fj7C;`sM?%^Q%ndA{NkF`Jt{|U_Ma!o?XJ~?u(kS2hIQuO<wu7RQxQ_
zEQ9Uh2WxOf-Dy<Fh}pZz_xQ$#K+Z>|_oGt<Ap^UX&AUvp@#_BQp>n#fcL-czI!;4l
z>G|l?h?A^7@a>Qvv98k#QpjFE%#K?HAduk6o|)k|Ih9vsAE9U{PSh_!A<;js__O!U
zT~3A-K}MuZIWpP54HaeO_~+nhsL0)m&sI+&hIu}+^&?FxO&<UTKLfn6#B}_Ci=LXc
zwpz-*s5r0nh~V!|ytnJaM}6Q{M5-X|opaBT@DdXN>!}DmsGhh$t>oUbgCmqw@Ha}z
zyt;YP(T_^#q{0hg0@K5zJIM-8EhKPx4mMmP_R2(qAb{YhB-)&qaRM>QouGuPLjp_a
z3b&@?tn|vnC=Hu#=s&Z{-2FZR31;vuU<1dv`kb0~{1dpHvmNi}5}%LITH{I{ZA}0C
z*M_*q>a0L>9pdM>RdcvKU&SZ+GB{Xal?1|d1c+^h-2%W|t~irF8kiOFz;1+!QTQ}S
z2qGf%q3*eF(avIqT?-0er~|X=$np+do!;<B?|~Qr^0<?0BRMcQ5Qym|!=*I4N<gBY
z`U5ldc0rYL)cBfDs;+4=2xj`IE%W6Q8=G3IY>R20M#!1|X9ph=91M?d*<Pif%cBW*
zKh4~$g^>BAz`ZK#OyCosKGSx64K(p%w>%>zAq`h<aa&%UJq6$eLB=@xuHB0<#AEBE
z;?c3iMaCh!H1rt_ikdIHbK)}zss<+RmM3CZe&4v8K2L};mmmQRAde)<fj2DQgUv}+
zZT)UPQ;yL6n&U){p>pfTn$>xsz7#MU1Eos5-1a_*iIkS;eMS$oy*iCaSYVK#G&2we
zvTN)p`!^(kv)io6pcc^i-r@2@0+5Cy@eDip-*O=ULBw%DC3%s~)U`+N26EqR&G!i~
zL@`s6*`17@-e|W7mwp8YvyZ<jWy3YQ+Mr-cCe<jG=FzW}n-*YXFV01M;dyDoWb5<j
zlH-nV!~FLxRP7Bqdnqo=#IiGsL<wM0QCoOc4{*%2DTyUeuNO-bSDe|l54!1eAH{&Y
z8c94MKs!dRIs)9^LKr^0j-Vv5b@DixTj=M)+5<#{tC!p@;8oxNvM!gZrw@25y#lw*
zahxCF%2Ft&W=b|0CLm27!{71`)w~j51iAk~Q>N4X@Wc4-+7_J|Cdl0RqLOyz%E7(*
z4TC9!>#S<b5QnHZyLtgcg&-?Ne>R^M5cS<J=*=sA+X|OzYk*Id4cBd`{eDu!Ow<VK
zyy?_-#@hDw_P^j{$}Z!-31+(Y{xq=COc^2GIxPw0+Iqs%Rxau<BHzYp{dIt~O*UvM
zW8&fr?n6#oUIb40`Z<PNHz_@LmW5F>jFC7$o+rfd&%fVGTS-bVD7o~oZH4Fx_tZ{_
z#3WV3Z*dnub)GJ{OS}Mv%ZQN15MAL~1HnV_|Jy*IJC}b41)|f_KpI6*-R|yg_t(c7
zcfUP(gBt?c5THvG_5w<o@&1g@6<fcIyMaf~@7sS<+=MG`h^_9*Nbxfo$kTP3sp%Oj
z-Q&;3cQ$8h`TG5WgPZ1Dz?V&IloSdmz+@JH?bJ!3yP<do+r8d`0PoP*>Pb`D1oT0}
z!GVE)<%_!4oW8HG!j+j}g;^Q3innOKLMPB^3uoBzbUdaccg^Ymaj@95pbQmO2+_wj
zELAU0sD40Q-o}7NX<=n!7hK8)+XCaK(KR1q5D@rqvrS5U!}Uyf*Z3<V#lwJuz?uvw
zVtBrafKJ<ur-4K(agW1Wn<7rN2&$AI1qG;ec%}i-3s|5q!^E?aXZD!zH5*<`FrFb9
z&6wLk!E^iSpz`s+{ZaW0G#H3E{dv!uh*lzcr!j<W<I+jMq6S2kTMrsZ9oXDhpgIBA
z`+ulfCQr*z8>JFA<36hY7_tA~aT3YTu;Zjjxev&JVE@0eB;+)Hi{;wGfb;_8m<r;g
z9V#M1-yTLu((<V4ZLUV_F_C?aE<SfJT>5jcW=l*apUoI}j7jY7k0lr4KSJ7G)~T+P
z*SsGA1Bl@*r7oaP<~&{&ZgzE)%abrOT4ydqk2V3kr8-Dfzu18jrf$X15jDBx>=^)6
zZW_T`KR;}_{S{h%^-10G!~|Xq8emcEH^KoN2EIdVdqwB6WDpK_KTGSL2uneId5_fJ
zPTfbI#t)`qQj17f$D9Vn0zLur-^YV9pj!yxeAHs5OWNJ<LTGMhtW4&EUI3`o1b)~X
zK&&U)uHOevYv_sz3rm;~=3(B!3CF-0<GlpU+w6k{X+uLpi(V8Fqb=8uhK^aK|FSTx
zAXcj$bKe}W>O=rB4|7neKJW~vQND+<t1b-|<#i#I6aGQ8aA9B>i%AA@o!cNvIM*pt
z;9hC_WK(oD5XAhtuGpNT=bdbU#DI1WbJd`H-@e>2^l*zYZ>cjC3{%R#q;!q(gfqhX
z(mkgpKnf0Z(D*2?(NyF1gd#VKU#*9x4CLzLGLA2;$ul3^O#{$A2sjR?e>)8>gp+?C
zLwPn>cfO;iAXh+ywLxJIdt`9t4iy@cUuo+WclJ62RTkrzLAPK7j!<&%y4F2LBZ7BO
z!)bE)w39Fwa02G9z$Gf-K%-8Dy-xvH6ch4d^cewXuin=s5+ufi*7jevO`La@Xy<s6
zfDK-W1N9o1*{gvKo+!Qge9lYamA3ykuzPJD<2gdUBMQU+&DJ`KXlwmecoO2X(3_VD
zh2y;8`>XN;6`s#y>&hjRh+Yegz-u8`u<|vKjfG6!k)<}uB(5uB#{B;_aQ}PCnX+#H
zkSK7PP+UVq&v@>>xggU9pa}*5GM6tiKM2n`av#U#{vifPQQ!upXw#HS)L<<ik)Q9)
zp~k@z*F_F{$Yjo@)5S|e8QC>QFH1ob4)i|We}bKJjA&Sh)uCY1JI?<Vdg96Ps79?S
z+E8sRp_|ms5u#_M_%eC=k=?xHq_WO5)sQAVE*gpeI;QH$sNm>Ae^JEh^^l<VO`lb?
zIGHGfJR7Jk#A#Eo>6!?xxkiVtz!KDXxmA2Lg_Q5!usIQ}dRg%o?3Z__+mO9;sfkgZ
z{}qy&R2qdFcUp={N6}YUdD*CSR@BqGKc60@6n^uY&=T?Mg`@eOd)*tNo$N2^ho9VP
zBFz-X`2__v)ZFf)Nt-T%J@5-<#v@b}gZ6uiFC`#DEXOyyALi)SJ^T8J0N6Y~n%itc
zOt^$4F2tW2rEI$V`Yi#Bh(g1fCP6uKZ9d%|7-VZ_T3!<eqMZ<r>_J9wsr4H*;=cRd
zbbcGOG_H3qM4thdX2q3yfl4UX@_*nItv+p8K@KRup0t35PV(I?Ez_y1EDR(PxF_Kp
zkzXkMf@>cU`I|b2RE>T|YiLPUe=l6|2IWh6@WKE(ZJX2lT&kf^3FCxM+FE1*FS(rT
z)r6-s*NM-r`Aq>ak6$y7VT&bjZ!7~LcOIR9KX#~6rPv3>U;!QZvkXO@ZxaD7Lz^ny
zSc;l*dYinqA-2Q=S<XEF^P*4!{|9T*%33ROqb;t%866y4fG&_m-i(d<BJmH?Q27VW
zh%!aZI6Goq>`F8DI#6lx2ggLVO)zYD^^eFjN*n@|F0q%^(eG9p#a}dv>Xm<OYN4R`
z@NOm{p9DwJe^U+oojJ$9)3;)=!aSxO)IgBZ%uNe+kLD&WP_A2$Mp6Wgr?AC!shFCs
z(Z|!1zkpV!7~a>(kqW*OM2hgzuY-%RP1e@j(3ToSQ^H6|XhX<gY5g}@A`SBcd;NCy
z5bKmtQ%Yyy^b99))QAXUW=b*=EpO5SNVeiCt}4EFhC!Baw18AeMYw&Nfbxb>c}ON7
zswh-)B!KRR@Ut-NI3Wl@!1CtAle(ofP4F=mq_pJnTtQZEUpxGCDoKkyHwbOXrv>!E
zUf&~;wA{C%hY2!&1|0DKf+p9=wR}E$<w)YlRJoDoD~So03W-huD7-JxU2A#*rlZ<b
z^h?ymazQWDuCZ1zM9~W=l#%5|aC1esoN)BxAy=zj2AAHfqkl+JEJt}uP4?`6`J=BZ
z?e%{-J;m7m_*lkoQmk1{ll0*e>hK^YIXU^mVniEB#!)R+&XJep$p)>_iy)I<?dOm_
zU<}k01MGJ+`muDonKog9fm}W{pSdms@1Q{dsk67ZS=NFwx!r#KAkg8@F%v##DDcvR
z?2c~Smx{Onx49eRrtsuk76AYBQ7KwloV>ZDr}mMcNM5QYI-CHn5*2+fU?}&&rP4za
z6+^jC4uFmUG_6{0BzA_85FN5WZX&2;Axl_;k0S3Xq8O;i$*;66Y@9qg0(RM`FU;&w
zB==sFs@jiAIN$_*a@*DG2|vdi-vQGFER|m^eP9eQFnJl8BHd^W9UB))>`IN1_-0MS
zIv{;5NE`Kwzt0VpyvS33-me^xOzf9az<%-5Ya)JeAB1-PZ$huXWrmSzVqAFu3}SU|
z*PB*&2p8J)TuyiA{z^u49bes9VGWAy&TrE4o_Qfg!PPLw4QQ}LC4vz3UX@^lr!<FA
zeItHi9bkNJl(0#C@@=lh>PdBfistGIDn7hgT0)$p??B@Vec&&w9{?7C^C_?h{Gm3w
z-Z!<p-%)cHKuVC{8|lG{m5!k~>RQBjo?N3J-Gfvj{h-&fxRnO}<N|aH%4C3$5seK3
z8*p?2oRK>%w!qhkV-={=hU`VBicOBz*Q3UIclO)a(qOOu_1lw4?v?1n1o)rd=tJTP
zVBX3Xq*o3lt^mb`hfl!@Fe2CaDl<x%-Ep<w1grr4>h48ov7C*Ing}CU0eV8hdte2y
zut)zScl3M6poRoTLR7C11F#j3pk#<{BXjhd6joE91|KL_Ke++^g!^foNKgc4YhK-z
z0v~8vt2+s{FIR^DSOCBc5<k!EoNMaiTr8JssKWp4xa002{gg0FAwq75&K5V^eog_u
z51a|=Q-#D$*t%ge@<HqVs9*Dfd5evFQtQoO9yHhIF(KP+e2Fi8xoEprcGjCGf9=a3
z>ZxS%EaXwMo?Msc^H_ai35#lhE&aHA$c-2^mj%0811^4it=H!8oxB<8J7#*EyPuow
zfe{En0`Fl6wUOBL3)n}>e1`;1oCC-ML12~fNZfi2p|s=E0O9x|o)05L5BKItsVlvE
z%aqwq3JU2lxO6Z9`ofp{bwZwTKUs^JSlVVA0%ib=6KA#}b#4R{J3n+HfQE<qrF`86
zD+54yzwNY*IlgwQY@1n&>Y6Gb0HZdK!!wtuyGoY8LAv?mcP-_eY5cGA;HbzQ>AbJR
z8*vS^mdbBpR4k7d%W1EtKLM-_?F*LL%;2<*L0lRHUeqxvZ*&#GX?xzR`5Ex7w$#25
zOFK%b(i9h!2tGeBMCCC!s5|L0c*ww|+!md0zzr>Uaj6L`yO_q;E*HS1{P%BP12^>i
zwF`+SiJ7@A|K`t>YX`t`VwDR9t+!3{;)s*~{lz96CMV}gsyJXpb3^sbHO$CcR})Sb
z*L;AnMD;ESpw<%6v|@5f<rEGH4^2i{ks8@>T3TX7#pf@@QAF|R<-vBZjC6oF4<{ph
zSybyVy#U3}l5Wm<lR8fIIM*yI9(G-*CgVW%c=S`6uihqZSK&-P_eJJ_e7_W`a7#UN
z8U3?CX|HP!R!L7uPkwyzo%j87z(pwp3SNF-=>{YAgdp)Nm@@csA%wO+e8C`oC7IG4
zVcr)&t7gBk=H!)Omb{Kj(b5g+0)`>C4+FMmILSn6BBU~FFMUF_Z10|V$$1r!BQp~P
z;;7xKaOQhBt188E4rob&z+iaznk)?FmXxQ~1p=}o`1}XSrVT7jFxQ_Pcl4`+3jKis
z9?($M{~5u~sY48={19#-PjZiFrj>Q_pBPa&+qvs~1_+hUbZa6}O_<A#_a-5;8m;oF
z%O`)L$;m(o3N08Yw5SZsDIosPpjeSL%qNK$Q2kQ-HO{$E22g?`3t9r5-UINA66*bk
z(v3Ude#jC)mWK-AGgxfjeP55EbC5>CHg&Q#9-0_%+Gu;Wb1{-Q%}wn9e)kdyypcV5
z!b{Y*iFNN(yI|9N9Pe!fDflhn%d3n5RYpS%O(o&NzD=k0B{s<c7n_TQDl$W%Zi}vA
z9hkPjU-)ue?&6l%tgjYmyrlFECdx!f+vc!JC;*DEhdus|ylRJ_w(_nNBdP}RXiYJ-
znF7A_ZM(ZfaOZMH7qnRF_qPu*DXcyDXB=z32KdewyI7QbNrj2DM;2G2FUJ4V<nymz
z{XNp7o-vZ-+0VDa1&(8K_)#?U1CJP(q+2&eaJh{6F-C<OwAG&=pC^)|a8^3<&SlcV
z0=!mNZWwm?qJhmLMSdmTkw#gF2^iU(=VXj!tb1A6G-s<P16*2D_Bize^4x~-c-t*p
zqgih}`Z$?S%E=OM<aYOA^OoR;IdCLpqRUOqD)vNiacL+vDPwveE=DHUWdWRxF@X+F
zKL@Y#eLT_NwTbN!3`np+xf%ZQ;#{xyeH>kKaNBkFOSacphO=+l8M{%QV63&pr>T33
z<tjo6`XJ1VhILD_X|4CZ7qG-Q_nK`&e%I@BB7w}TNb#N4x@X0tqeOJ6jMCm`)5DU=
zh8>OS*Px<vpTc&)7p-AF<`F>sKeHCFdpZRAS*5GkT~ZQ%@ulJ`YZiBlKLkx!*l{^7
zfR(!2|3Su|sf8{6EBkF#z99?OAgZ#T2b4OuYwp{0;SC$f$Wy%UfV$Z{y1kI?#6NI1
zBMb)tJl+*`UUhaV&Mc$Cb4OnVF%@e-cev2^*#fU7*9yrYT?3l4`I$TAOfcaQvG0#1
zH+lJjX|SlZ+t1+1jCg=`QGM(13LuXLn%p^PALM0dL>HGYc?Ya%E*!|n+NtINCh}P7
zA&g0+#v&5C0<;e|;EpnNvhn4g!4&Gt05EDL2UXg&2BoCD=?O-9`V?v9a??qGn62*h
zL&SSe%|cZ|pi-tAxT=U#lFKm5Zz#RC@H}G$p^|Vf8sRg9=obe7UE32+#ww}%pIMUa
z+-GUC&4*GoP3)dNBA)M6IT>>#$2lhm6hN$(xYVQvW3~50_%Dfy?sz9oXiV4rUQSJ7
zAzrD+ewP>zOF&ui(4D+$j*ke8-R`^j5A0=tm$k0?+4fgXYOfh8Q9swj$TD+#X|QXw
z8cmFq29>k}zfM}S2XSIM4`YoYF=+JA;-N@^L_;oJya<6Sw`0Z9C@w&cH_bUm^)AF3
zMlHe%KvPe{_oN2m?g~y8MshHji)fpPCh9}4?Nx2aNgzPwmqV@Kr@$@n6Nmw>sD9&!
z?`Kg^@Z)x4hBtm9e+LNjX*c~t&7<ER3x}4+f*BKWlPb*Ot#Xm0Rcj@j0fie=e&o8j
zvp9ft-e04?^1*s?%e{V!@8|{Eyav8$QDUu`8hMvTjw4U0#ew))n3c|odzW0TP8ZAF
zp?-KI_@69*u`&FS=vGBS{GK5%Ld629j%2-5|A?&j-q8a;ULS1Tnjl{Ad}ZV^vx(PM
zj|+I{wE=vykR-m{c$pk9!Px3rmLkdIRxuS4z?XJRQ~5Z|%?l1hXdH^%mUV&{R@oLS
z$o4lfd54#wFMMS?7<c#a&6Bfniz{)${Bmq;mcI?UH2o`&*A)h0QjRUj-bJNEQY4*!
zM~dV8%wa={r}Kk$HYiAE$=oI<4?X`2NF=`8o=By*(0il8jE=8+5LJ;91%NU$=zMSE
ziXhFzi=ze-U46`&cDuUmLKQfzd^oycz=am@N1rvd?VPi;ByF8`lmIR$g^)4%v=AaB
z7SY2|Ge(o>B{fPJ$l><;i~lko$)JAr&n#mbq719hgIknW6GlY&!)>y$5CC!5-c4o$
zM9Kg5$6n%_KR%dK0VTJG%O~4h0Hf)B-b@3?igf8OVFSR${b1<P2`X@odkb&*02f#9
ziu4>2EwTMKv;=SagCy(Um&Ez^t%;Ids)7|fzWn*JKJ)Y-ixTEwuMBKJ86W;4d%6k^
zcSjlu8TpCWMK=XW0PJ(H$hN4*1v7z&TwsYN>&w=iSE~rVB9F%2$3E}4X+zHWItvN(
zNeD1`Y~1eqw^ub4{QS5LqtPOkpaBp6xTnb@pgV>hTG*1ahfZ>$NCwa?&x{%YjXp<O
zY|^BtNeZR6Y`nXB=f>>^3D2C52`*=*heRuoiqJ9iep0`P0F%?xFdV#f$^|r!^H5T%
zk^rj*rnOVPVACUO+fd+s`+DYwQ%O6xTmI&}x1_@a)1Q4JPH+S`XmsD-JeuB-=>045
zFslgcN!`X0ixlMAL~GMa(buv=K<RwDGG>XYSgtuu?eaO$&_oGZN`f!>+NJ1b3P-=R
zN!9*V(9ozgr(FZ#E|+$-zW^HarO2yuYT(klH8BqXJa+q`n#37!=_{f0%%F6pV~%bG
zRbJY8HI)<K(p%rth=~TJFaFKXSNr`Ekumjc(EdFUpO$<1(I78F|I^*{Y0kzeZ=EBA
z*p<<1-9mody~5C4zcZ*0Fa_#%%)pSdn$wU(zx8&VWh9_}$kM7U`$IeDxzK3bn=iF<
zoR~JjPi*}o)L^b^@L<|}ofO#C>A}=s0h_T+=R<YCD4YKT>sVFJ_f^@u(l-#Jr<@BQ
z{x@L7GVSQ5_uas8GkYqcko3#t27XHVK=XCq@8rHYDYr|&d=*hqH&IAZ*z%1yVIz|r
zhF~x^tJrlf8GMVChh7MurQz`>g9|w-)NFYQ(WfaJ@tp8-s)4A$SBV~WbM1^^m?uN!
zC*MsF1Hg=Q_irv5n`3yoquif;%_2~wkna_Ik4(8qJh)R7hlx_!|1eqqtNuFDq5M5x
zvP}LwmQpZW_W;|L6(IKLUE2c|K16P46Z>&bSUz#8A{@^e)i4qGiR)29?&oi;@CC{=
z4JatHZVDKL85#)<6Wz)7vLRO?_03_WP_|cSyu)*^4liEr%&zmkG>dR}SY{Da+D(L0
z|Dea~re{P4Y!*%*RXav6Ym=2c#~yC`D=sTPKfnms^8*K^0?2YaZp5GLtC-tafX#S1
zQo!8!ct?>Sp%19IkSaUXW}_GVSGl})_^cd+i$np-XJ@a@jsGLjlMKLMGdqzwIPY!F
z_b3tbbMRz?p*8?hzR?gutm4Zj=|Dn6qZI(4>lU^Gc0rjgzT|Ts@O|p^Fg6E&$V;|q
zFn^|3d6S+5@Bm2<8D%5!B>69l@Bfwqk8AHM;l1g22dipdaw1dnGBX<zH|Da{W6%W}
zl9rw`3rPCK$kW7j<c{(4j*IcEVD8AwH{W!(L@j+{{q{4&VLe~J6U}u*z-=QVEq{~a
zW9S#L!V`n<0fZt2yh9@<{i#a;YJ1d-^soBlsQ~QDXsXJI*;$K6;Pe<ef#G$i6Dhp0
zM`i@F%*Y~Y9|Gu<V*I0$KHNbzi)7(Yo+&)@ggg;(cl$X(=5TrV@uO%N;2DRAkW^=a
zuX?c+k%KQ2=_ur$c17;QQLo}Nv+GtFPW%s)*txJ#cNy93XqEjUR!gF+8G8$eu%pSc
zpTuAg`(No*B=Vs7&}2;UMt}q4zfj%&t=_}@o^hps;kPHuKi^#Uf3`eiWZ3{hS39bF
z$mY6rG#CW!9-v7JFPT>{06u+$6o<pEM<#VAnM=sl(yI6;535KDa$i~J5))GAYCa2j
z)ZRie5nAM><D>MbfOn%*mSk9Zva)#1<phAPb`w$x^?OinlpJnQ7xw9S&_UC$gEvrp
zL*0i*FBd>^34VU40EQ;Q0l<F2LA*>>1nKm;iF#;@qR-ob`FRF5Uh-|aN(`<zb?TG?
zJ1=iL`nA)c`5}R<_ppY07y@RSU!bJ<oR7<!r?(q7EZ?4GsGgL9y*!dEZu)rv{Rblm
z+u=-?F`rfCc^BC>!?2-d1$7>f=gb0y9724NYycgzU3K-;<3fHgf~c1N11h%Da9@@D
z11KZm)qD>QjTGmbB)ecg;>7-cx=j5o@DVui=Cr*$%}QJfn_x-ks|>wUI8{m{RY$1`
zqyqLvW*hG$;^t)<sKKgx1wOcvP3Un>l?^hCJYaOEfH;{4@HZ`@N|vHs<^v?4-{cUW
z_T!J=u!T%K2DVN|l*3yO@@c8nCpd+@&QBYTa^o)!;{5|M0%Kp7@Sn|x&K`Dk9`@>E
zcHhX-?%mY7%o||L#X-<%fqLR0p#}khmjRR>dWsT2CLd6Gh$<YX9ikhJ7q;mvK1qbf
zEVMdc<E1GnPG@MF1Sjy!y%3)7ke3C*0#;W}oF^a$lGaY*<J!!C+x6b4pq1Jp=`w6`
zNM=r!U`gs*x6=bs0Ip-s(t{r-EnvlF|A)P=j;eay+Le-0KuML7Mmm&cA>ANKcPk<w
z-HoVphlJ9hGy>A0bVy4hi|%GESa9E^?sN9tcb~KO`NsXmy?=arFvb>^!1DLLbI#{^
zW<_&0`k%jQJ5$sCc7gsr63J1ap%G^d-AO=+@+|t9s^_PsQku{D&4k7?K}0`V3C$Gq
zll&1m5dR&K<54kNW8_(%(DpzISdW8@9M@C9+&xERcNQo_WHuOR1MEE$S>U$+kljs0
zRD`>Eyoc{y*voh07bp6f)Io5`3M>p%sn`W8F@tozMOXp{^A#V$5!<vkreM4nBdqSc
zI{WIvnKVMh13}abl?sB|FJXbvm&GaY_A$#KDJiJqb(j|hs9y++c<@@yc%BOCSlwYb
zr{Zy{aCqX}RAFe4RJViw6%XeO@cUk;OJ9Ny#`>AQ0*f*oNRSs5yEs^<azUK7Qw1>`
zU>xJ`6&2%NoJf$T%nOYiDSScTOvva=$~-WR@(r`&tZBWWg5HWKPelaG2VgNo9HSgU
zJ{&ggA)MaI2J6{z3e0MndNb#U;VehI*E75&3J|_m-}utPoA&O#BhoAA7|@pW!zh;A
zn^a|bRJCwS<et~+^^yOFL5H{!@hjx~u(NCRU{yP^@EEzt3K{=bc`yVl!;qZa8<skm
zsr8lp+~=C0dhfBc;8|LQsCg7O4hEWuxeRio*7L*OFK}XJ7FvV(uk((t=a}XL!jOui
zSA--D(G{XsjfnFva#b7$hKK8ol`rwU=FNQs9upou>^sSmx{E_Z{CfSmLDG*!8@F!;
zG}!6sn6_eu;)AY$T~Q+5(u<R7(R<s3uW>F25Dyj@lt3L!ozGxEC#`#9+w-$(NQ^zA
zZ-E!Gu>3rkZwk_pgv4*%z{F)n+^$yO>rP<Kw(lZR8sC=gT-sN#UmE*Se(JaqLI|pF
zj{5gKk%g!G#NcXu!4z1KU?R%0`Jj-mzmDA6^X9I@xs$-xpP4g#aw(nPa>S}{{gK{K
z{J+;5{v#DbTq@+eAq%FQ(1X$mrMfHipgM9lBK`iZLiekCGgV*`?kW#~fMo@;O?dx9
z4RjYC%6b2+IC%YAP5=pWCYWBpu8FtX<zG4$w%fQV`j`ld=ye=Ly(r|MN*k$LR$}dX
zl?<)Yq*EcQ*E4itU%x)*eD`xkb9SC|P*4!mj=$4T)z@22t+DMvcTkXr(zxu$F$L{q
ze5#FlQ6(r(qeI(mC`Q<=OvC75j#7xv*|mV}m(&(cYr(0<56a+~CkuO^rQ<pb_Y4ZX
zWN>SnR-GT&W2o9Bok5d0wMutFolm*vm69U`Rxw3&uLj}|BK2qKD-WD%kh*9ts^8nh
zs$+Mr*cj08I26n?c_!D6R;0SX6Z-RXq#^#|^S_BM9mu6>HSmQMRbN0!?}xb~Wz7HE
zdySaJJ~AM)`o%xzE5#|2j2~ap0Gny%_F)BvZlhZBS1)pvs0=#8)87fCD({^lo(L&d
zvh=rVKHM(j4)ec{w-$`Au0d8=nr63y(kfjIGKfIF8u{?@Spb!=CL1*=po*q|D_j6_
zq7VhT$$&6sg}>40t0(yiCmGDw-t<F1z}UR4v;TVIUMRk_$K1sm-Y5Rva`ugFqR1R_
z&pMwr!XKv{^l;uiF?x8hfALL-(Dg>)MTF0GJ)M*by$`ebs|=|wgKIe1YFVGvo;=i+
zpixu1BhJE1pDp$A_4Nlj1h8zi(TXl-zPJwk^Wy#+{jOV6NkaWSsY%P^`vS!Y2|_&m
z_G!n<to`3a8C3<V9K}vi+BqR~)oP-d6v0R2PIkeKaa(K@1C4>_SC=qd4#Xf-@Kd#z
zhxE5!Ek^6E+HKD?W_`{-eNv>_a`FOuA(2;;-ybvY<T0HXD)NKi87i;l%X`KK>FEB1
zZ)?Quq)YkzmvBnolAlrXYGU;<k;n|_-6n|*m<?FMX}<CKJ61AFo4@^z2ly&~rWW~q
zhafFgb{P1(c7|wezDqdnD`E~{`R3aie@ejtz5DnSkBi<0<MC<^NMI(j@Q*bI%E|Sm
zGq}qP>dkZNCbLL#r0#Z|V{0wp7}~HiB1hCr_#N3XL6^yP!I;5^A)PVNU090j!hUC_
zsgxh2dgSEff*p;#?J|XTRwCJ6y^`w!weroWdrjr8_hh24U#Alw7UYCfM^On2n#qZa
zXXs>oIh#}VZqny!Z{faW>}{7TEX%|is~AUR)Ucqf*mq3tGD8|gMKCz1%3c#gnb(-B
zCoUU&Lmk!8j!~rg0c0%;(&M6Pn46Q62N#@it3Eu7$9wV^LMM*7gvr-s*$t(kr`N7r
zo|4DkEo#h0gC`6$UfUL)a`y(W2*CJ9X4}t<uDyH)JJYl&;w^L#Q!dt52YV4Mhx~kW
z&=twrvuaR>Sg<26{rC_YM}J&Ia8EEz7WEpfm_yLZcdR2pkBe0AcwQ4qTEe*|p<RIc
zRqx%S6B=jkUSgUTWsgWRYQ*z*q&CdJle}V{&o1c@q&6SY(Fx8J>x-IU;1W)@G+7ib
zI4l}61+Qz#EU`C@CE1Zb+KBZ~3jAoRz-u*^z|Zn89VUHO<L?m2peS#D&ihp;dI=}^
zn~5SaUtl%XDjW15Q#zkQ>V|9+6-rhOm~NiHaW4)W&xce<sq0l-N6(Ap?X*;X+Fned
zZ^l=y3gMV=xn&jG>PNui-W%RGXn=0?Ud=;;NiiZ$b5u4QUrS-7eJ;<RITJfCowr>z
zP72c!jP$XFov!%`k_*L@d)sXz&_nK_tu~!qdvi9=b*nQzP&{h*pcMu#LhG!-xf!L7
zVz@H{tUax9L|MYSgM&3Tl(zy*@Sw{4D$1RYFkv&17Woi=FgX#@Lsi;MB_L1}tr^L&
zn*Ri~_}U8itqa?13HA;cn*t-@5(Y2DFJ8$l2I%&uzp2&4TUy5Mksj!8I~Q?*^L_0P
zJ{LXMkK6s~xA<_QE4SX`B048`E4M}*TY{D$)O1kK&s6u9F^QoXBW-AW#gztIG8Fk(
z|K$;lBaeuzOHKbJIHDHP(wHYj1YEJ%p9p%1<%2kA7>EAmiHYZ5lZGNq_}6jwT}$R<
z?t~3VZp(rz5y4ihh}w+x%et7`=?hzpH;rd)hmLQaiR^inoKOq#$#gNqMZNCqgc^#s
zgjv8_O~@-6OUg|n6fD$!s|B#Ke?6-uxqsf{leQ;=gG0x{sM|%ykS~RGBz7Lf;e)!{
z%fYG|l2}T{$cFLb@Msb9A_6=@3Y&ppQdaNN(KHFZ4(E#DjNt8RQ3p%CITz>M?mu(M
z^CpOT|6Wlp7Tx?_3w)l_Pb;@kL_5i!;wul{D#7|`x!3pGzV_G~L-=eac#p)@(pMTF
z`R+G!I8Yp^FIM)dPIN42M@{TmAmHYl=+>3n+s7KeuS`riGwq%oL_yqi!@!76PI(XK
z(}J8Z5^NqMrM_Vag24*Xi{DdGWO(@)%*I?8WlX$3LIHL$FlN=l&(KTkAGWvSa-ACG
z$A_OUFvzC1`>0#sT>VdPQeXb%$X4E=^%5Tp`2Eq}HG2VnH`j3aCCZ<^{7-jiR}_F9
z6P*H4Itb6I5kDB;>!KqF^_|v3i7CRx{aoHndlA8mxnY)2?y~*vGjzE5!+{GY#L(Ws
z0iTUQ#aPrXpL{1V3@WcC?yr-zq~Q)qJu-@KhGYtdB<2U`uFjX>Wst<w664R1GLU|=
z+O>8Ubh2X+fs&Hk86rhzU2|cftSfd^G{nKB7ZFJntUhQ6bWBW5rC(8zQ&Q1fB%FM{
zRblF2Up8W5AF--{>SUJ>X&$^y&!$x0$PKBEp#tv%eN!Ofn=Fl!9W&&uAuR-=68-QY
zJs4~ok9WKU{_V#U3DFtwQ!VzIhwR3^;xQ9HA`rFTj|hZyud8)d&KF(w#|P^5w>7AQ
znAp`SAbe~+^(Fg1!p0w-_Oa97Jd7H=-+8mIrrj(tVw|Y)H7&2%7U>qN&6pJlDmmK$
zeYr)c<>`BT&TZZ$Yj4jDqoN^LKL~CRScyzb%yXUyJw&)cRJ;T5w1h(_?!80nrp5P5
z%#Dx;NhD;A!5zgf8jf&P`7$orMbD~c>TSmenJXGVxu2v5!ca6-6NHE7p(?u@30EyL
zy2v^+><8ej_8YLT5>RQ*X!0^eIFyx%Fp%cu5)$gMP%XqYj`;W;1;_*wRpvo{#G9IL
z0tF($&U)f%H2VPxh^H%KzIg4~bcIp~o9tlMZNsTIXfYw4BmD_l46k6#*=Lu^qZlgj
z2lU<r-bW?;!Ug<_b!>2B%+CmO2^*ab#AgP)>vrkDKTVBY;`;MQ{m)0fwGO`F_^#NM
z-v{!4zWmR4??9oL7z;gnlHo$vOPtXjugTzNgwE;^q^{c~XU|Q-Wt#I8^&)}`-0EP8
zP2muDscXDobrfD{IW2?!Lrj+;DiSKA_J{o$-mGa(e4@MV7yhW=^7+%r7U;AoQcN)=
z;NXf_&|*D#vO3(H?f7`rH}(6_5V-A&C{6>p<X=)~D;9=^c)*Q&#D1HKauj9pI_l(e
zn^={+T&^z>?l)_r!7mv!{-`sYUfkm{5dIc#YsL2nZNh=`*8SRK!Rl-@lEdW(m<j7r
z2ORGj@hxaMBg~Me30>NX`%-x{^#9KTE&fQ!*4a+MXmuA$18?sl(Z1<>K*|)koctYH
zX5h!S)!^M6Opz%m)^}G$Ff3@<Khw@^>)Ji$ax*cB&dO26tQwTKZ~V^8(o)VuJj0UF
zVktOr6qm%7HM_5?>yZ#=?gPxR!FQUNa;hQslBlNK472dI?2Z#=czBNUF#K10@QdOx
zlai7OYL@jC`<zo)+_ipO-;%@>!Rmqlmj@6hJ1NX=>$Y0t7cwN2oj<<y2@tHFY<!Xw
zM#spgki>1S1*v{S30;E9F6dxFD<;&l^=j;!KXonax%|Ab334&`N<Z+a7;4mQ09QKf
zpy~(ICAPDou&vr{Gthn5l~fPftnJ~ex!s+N>F;IG(b@oRb?=b)*XZ-drJWiBPW$h8
znPtJm-$&ACb$T~&hkQ=vG4H-O0RzXn<QP-woYsaPEWAuhZB7XS&4}Whl&|cTk}SJ+
z+o`r!+EgHjN9U*85T^}o%T)R}7R{ry<7P}Mtgc>=Co7ce{S?%?gtItovM0{`s8*Q9
z(4@-VJN#-yU4WZE#pZCv`7qI*3o~MI(ZjKXB!&mk&VV?L=L0L+{GB;TazQ;g@WioH
z1DdI+F(1}YStov6RwjzFvJr;d)m3mz?2DMO54FE(TS+)(qs=COgJfkQ>T$X++Yj*b
zzSp#lVp>#M^Vyt<o6#x=vwoX=E)&J0CVK}Jj_QWxBAd!S;?B<DL_|=JUg<=tsZM<G
zTE#H0oU9`F{(K)cK1R)fMu6OapNpXyXas#pjLgjW(Xp`|XLD-a;{ZwB9GOya2)cfm
z{s++Yx5<<b#s7tM$s~cZzx?WRUc9UkSS)2f`K&4*`$5Ay(84(gCbUK}$b7!e*Gp_7
zC$v-lSB~ct5RGQ9s|0AtEPv*g{=q}$^e_n-=mmU|S19Bhf>uhyf>}&6tU%wj8EkLy
zGi4Rv{@gZG{LOgA$}Miosf?pr>0tR#BtX6xBF{h*qJ1ZQf@{PZVYf0pFo$go3<{Xc
z2F;Ue+kR-6U0~@0#esXNXcM=l7UE%zM9OvR2PIcX-WQh`a{557Fxh*8k)y*V_8_Kj
z+?{_pbtv*Y$GdsZ_I`sUmz!EfJG7<zlHV$1bQLosqa<<4^j<U=VUsg!w8}TwNNRG;
z!TBQ{1D&kZO-CabRoEUx>s&1a&clPB6qe<-kJg<_me3zWlcb$QSsr!3JBn{J5)l-%
zrcZ&JFoeejDrLij4j0mT6xAuSb2If!5OdN9Uk{yUV+R$y{e3H(?shCblvcKF3kbHD
zkc#0)a*B#(r_I?%51lpQiHJyW9DU_(tz){ZVOCIaF4Nzom%1L3m|Euf+8mY`lgb9e
z!03XGm<lSKmqKmhAo1U1<?YMXwoNahg%D3`1Ox{2mXH98bH(Tfz%miBYCDbk8IGE+
zA+Lc<Wa9HPCNPmdnn5Yq6<g13F|Nz_0Ia}>y?X0j-Zs}0oD0V*NZ>{MR|nhxh~|IH
zLvOoVM;x%wZaS_F%Qb)otiwDu-H)-L1F8!jayEBY_wjhiyPo8`-PdqxYfzO>fJrYV
znuas)PRUTZNg8<WN^NsFJ7CnQAm^KMO5X)DAXmprGc#S=_NYTm&#T>PJr5rW++EcH
z;S1NHgy-NL#pn0^4Hx?^{oyH5a{;LvCFO4|xoTuE_rk~xJwCBBdo3?7vc!b6Wl2^t
zF{;4@>mmE;j1XezGOlx)l44uNc?Hel_3qs9xPBPtt<FBtikCHcc&zCrnxe!cM6wzh
zA9ZTqJ2O}!=HwB1J<?@m!z?<|(t_*3SoIfyI*<t`+5R0UW<$FBT9DRQL{gHr8dFeo
zRMdPIf_C@Zi!O^QRzVBt8s@e6yN}+mES6U$k{?!--4qy3vw#sz?qP2RpZR;rsVE$~
zhMlY+3EJ`4Mhbane}4jS4<l(IPKdU%<xUqQ<w{7;h2J%Tw;WKtIoN)4ZVwn2!Ylu$
zmw-2C!@2leic>UAA%OLe*>M_^#{lVpoa=l2Ph==NhlQlUw2A}#UMZI8UK(E_sEX6P
z!2p&)uyNv$kEG5hI01}I=q_!iWC7zgaRi$?uLgoE5a7P+G5AOE;Savy7mCz+rWC6H
z^w>B;72yXFvY(Avk?v;Y&vE`AV!~#W_afLLq5yX8jhKetyesd1urlujMRw(a4lrG7
z&r&*uh9#T`$a%Hn)|9{;GnmXuni9ap#4_GXyh9P*?BSFxA6F6E3VcTS=3_Z!<x%eN
zT>@rS(Iy&;4YOQDb~3%&MyrvrkEGR%?VIOtP!6I@SP3m?^YinI+Wh#4D;HQDn@q^9
zy<6t+Q0f>>E$!Fl@O;*b;_<W+bAEic@3c41@x}vO^!xyp>#nx1z17y{iY`|Rtzkk#
zfc0l%1_+_QMMIrQ$O{m<Iad__?PX=+RDELGaq8D%KW9mKs{%TDhA(_qNYg0=p`=8z
zR`Rc{G<m8eE-jp{Sc?0wz)#7hZeOD4D|8c6E>uTK8_UXcyp4rFaQ=Yswbh&Tpb@T{
zG~I{c4WDh)SzUly;ZeT*^x;^7;HRf!@1sPt)1<}LN1thZi%(|a_#sMtr3Z(;vbQ*5
zD$$hOfy~o(BM%3f17^EMgP@<k?KrcG5u@~#NoYQh&;%{ag;^S@JkjC&Yya?1VitOa
zWN0M+&Qbg^P>2i`3j^sM!~~b&?*$-|lO(kUb{2vg`H@?+dj7>NvxAkd_n)66v!u8!
zC2@nUF5l();~9^^V#7w7#?xdL^!og6OeTjQwn_6|mBrx<@BS}UX%y3VwoG68zb-{3
zxTtQjK4xQxI6}C3U91XmZ~&%fPj??sJ#!Fhg^>$4HiVzDF<81g<q97qvY1in2)_Zs
zmYO#cQwJm~K-S&;^19{Nj0z4t3y%VuNneMor8i(^M8F?dXvDjF^mTxkUG9Cr%D^F<
zg*J(AQ<)B?;HuY0`oZsS+%hRgkaV9#0Ro5t!-!5p*-u6Pn5)00vctLtY`VfR8|9Rz
zE$%oDKuT~sKxq0A;gPS#3<HZVviOOUmt<#}g#js4yAFs7>^2{tX5WX>^d%hn(EEv;
z;UMI4UXF@9;j^8g0|i_$)3weDA0{fHDdo3hr5C%5^?K_b8l;NqUq0dxbkzj&^kL2j
z{A};UaEgiU*TgKtP9LpL1z4-BS@p(0nTHs)95r5S#lS67n8_mB!iTQ>lwhKeSEpkS
zI%1-7i7*Yh5zc7=={P39@?h5Mpc*y?%>U{DiReWDBg4Ju0;aCTL?iD5>%Y4XKLkuW
zLm*&Q7o(W`8-4SKi%D5GYRRHoRw1mX1>{TQqYON*xNc7#b~I_54aQ?|TMg%#L<oTe
z+is_uRoNgd#O<)u^Om300i(yb#p#;STh(F%k;Y}`)j_F-bNJIIApF3onr(`Z=oeHQ
zHo!#(_$>!yrC^u3_2$=~$rPpzm&`JgENS_ro3^5b;Fpl03w>*b`k#rQo1~r(@Fk?i
zvB}B3vfA@_zukZ8w)e*JflvI{583q0_qhChPmhEJ?Gu0(M<NDLLK4}^uK^u-4{a;C
zhVh}gBIlur8^xPrTAx)4go73@F2xThD0?x0asxG_6Yzs>e99PHm72D*IRkIsRR!bw
z@3OLU<!DI4%S1Ni-6c;^ww0bdZl`DXG?-@Q#uSYa6LN+sr=$><)h4-wnb3s>E{tDR
zPL`|*^4j1c6qxYKjKN}#VmPcTR?Y-@i<=}Xjl<A*HJOY<n**OKCbI-`$_C0A#H9Nu
zQ+gacXtZoLnp-lc&zkl1D|qfj_ri9xDDK_|jyrpgiSIm$oXAbP69O^NS(9N8t3hRW
z47un0zQ=uCsd2Z-2wHNDb`d1LnVp2)ekwjF_yDVL(kCj<fz|6#piU~ky{V4}j66{;
zl__Ij7npWp7*zx!?bGk)+cN)6R0D(+^X@CgKzX$Xf;f@K6u2YU=c$f^a(jU4pno>j
zx80d*-kWmh$NmzJdV|k;rtX_i<0@bsq-`kRq8RZ-$p{NNZ;<igm5R=l)QAhnDaont
z<GyFxd{3bT6S)8EIjIt*o12?|XG7vaT5|Hu!&9kKH^q8UkX`83Y3l)sxf_rXQZ}ps
z*jE+mPfku#1dC%aU|rU2I&IeQ{luFWE#T6mNg;0Z;6EseK#SwU2*QYtOUgDF;^yW)
zX@Cx%n#|v(D6zXCSmOP1>-347XK7xeDoBG!(}PprLp$i~>3ReZ?48??w>J{RMDzwg
zfuO3&+cb^BA-reTR76bPP>O`W_eB_Fv9ZD3jKlmU@Xh~7Pv>Tj^z|evy*u~=#eU~k
zvn5QBstD{h<5(sd92R{&CXq_73m^1&+4nL3keuEI{0K#M{8oY3Y?~7wuPLJ9krdUR
zySv%9ND6>;=C8@&b7-`Sps-gxu6;NmM{3H~c>3a;QAOmg+;q7^!qY6TV7%sxn|s?L
zwJtFj+l|G2wI|;dpbf^Y(9rTe9GIY=GS--$ac}a-V9_&OnO#@UGuIl}l0kU5lRd#@
zmeU!p1VN(k9ki_*P$(~@1d`Uupo3dRevSLfp~QRrS`9&$t@mWC+GUc!H9QEF0Rw2w
zzk;+;;5=w^84M={a#|!%^8cx{{DaZ_GqX}%3<Sx)Bj@xvaT=>d@8`ani2|xI<s>bv
zD-pa0=Vym6!93N(rqF4=I#3P*ycE;nA)v5CM8VT~#$fiu9+;6;=+JO+?jf+0X!<$@
z0=AmnWp~>sZSMl3w6dQsd|7jO*h@Tm?pcvV$2fUpUw)(~d~op&yTq#7qH^q}4@b+p
zSkK6`(sCo901SsaL)VqzT|lVVc+ZNIF7os5fkv|8%BI(_c5RrSs9LCbi#57Xe{_2L
z9R28O?%NX8GH#xF3)<3##$)g2X&2O97E6?sXb$c=H`g%}W+0Jh0O{-|hjDs+I`n4p
zKNsje2s#W9Iz$`1NE4}5N2ElhQSQTE!M5$rCA`IkSVd^{uj}2Rf_X<$cUfnZs16Pd
z(V>KNiYSv7)ir*0IPd7{iuLyw?>E`YlH7B7hwwc}h)bn^-2aXu;pJ!O2E=|5L4mjl
zgJBdHq9JZYZ8Vy|mg+n;Eoj|f(b35?=ByN2khVI{zRu407rEq-pDGLFYwQ>O!|~e|
zP<|v1nvJ_QJk=RtX5YA-9KobI^OKiR_Fx%b0bVwRkW1H|3M4LA214iIysgm=mNFO^
zcr1j`Xxh$Xy|SLFzVB59LcP-!X>L}%5;1qj+WY$UU`X(wZBvu1fr0+|)MZPLs|@k%
zr;>fbryDP4XvrNg6ybuWq3}I0JGZc!*Jeuc#TAM>hyDB#S4GdyPi^-`-`IAxF}8aw
zzz14Qp?$T&FR-$&J{Cr<Bhk+>FVxuUOR34Or|V}#x=K?lK)T8D$-Z7fZ#dgiSRMWF
z22L#0Wn_6{b|6=UO1s3!uj27naZWk;DrCSU0?DO6xwikr<o{Kf@kq9Ty9Zwxf^a;1
z31p#|!lF+F;|ri>{NYyPh4&!>j1~&8DKkxCIanW45p-Ik1LW?}vgrBAf&q`Kr?f{l
zp!fczjEPONjzdaoJpQFiIFnuZAf%$Pkt`9N&Q35VH_8OzJD0V3_^7Ex`%rYumJgZ4
z4jCGFr$Nn@T}fj+wq?$_=52RB_DFNOkcMRLq!HjEGE*BAYa7h%joD1@v7O7vpI16I
zC4UP&xH8(`a47b^3v+`YJt=?Ykel0Dux;)9LD5BM=WK&uWaHCA(<Mr9=j7w=NFfkC
zi3h9Vu-GIg+2AV>K~A4GRv$BScaoS)Z!xbA6GKoco^y>0DQAt3P*SLZ`=@s6z|G*5
zs&qtLKWA8*iG8+2hMNC&G5aw7ilO+0v`#_0b=FHHRn!m#>RUmLO#YMng2o7>mC!o!
zFGCT?Ap5rCN08+wTRnZUuJOdtM#9M~2!|LN(=VD3qas=}o|Ks9<z1dLBXz#*v-1ut
zJ!tcoiZUvSe5V&9#eGLTnu^Z`N04*nl5Lbk3zudh48A^iY!mT7JiwtZ>X?*0)_yUZ
z-FY3KggthPPj7o<_mql{Nkrim$VTe;3#X&YHkpBh7N@qz7YcMmPEEVAp{pZwzoPSR
ziJ3oq>gP(UnkgOT>H($ce+s}C1$st}Ki-{0(%{F*EK|?hDYyZA2R`{t9Lxg&KU@T2
z&7pWQ#HZm38K;<+0hm@p?lk;hu+GilP@B&IgK;6z<3cHNM7Jc9THH5vv0kNr7O_<)
zE2;?Tfv`ffyy3G+@r$(GGVu|tRNA6to(EM90_&Kg`0uH-ASK>Lh$eWmihz-N<c5#w
zh3@SknNoL}y0fo&8V!$F@zdyoT`Br`e{kJqwc?j`Tn;%0HS5YwX3Ks0W_!c=DE;nd
zrR~t&(ujiD;4AeiTU$diB_4NL%r_^oogYh_09f1=bOMHH#>Wyx82j1!62e|kc}Id}
z6;cI{J``M`D0q~wwowh{@yHs#>&U=|#Clvl&}=+joz%41-h9QA0{j~D!wuo;#Ao9r
z_q|~-OSwBSbWZDO42)^6CS0w7V4#~y$v)HNlzx5$uM<TZ#?m#cSFf<uYW8;5w!Kb|
z+|o(IRRLvYb2hvp*75=C_T9VLFRzL7FX6b%I_1_0IOKeqi6LZ^1M36O)*PPHI+t0E
z$RD0g!M3|#q<VA5<Ay#6^^Z2+GD5kn(%lP&!Q8m<^0^y3tVjtcg#AEod1}8eM$;hm
z-MO-|ay%IPN?Pk}V^d^3`AOX_!jwfLa*a_PTt$J;#nLELfe>W&+?N4l>fXL02$dd3
z-&n#)OnFrAerPhbHk2E|s#PM!UOk5jWF^g(2F+?l!K7HCtx7k_-_q{CrAB^b;eY!y
zQJ&g>kyhJ1iIZ6_xI)SSgW?e<2cEM-5ZE!N2ST>q#%(aDnHhM~M!5I-=!g4!c>>#Y
z`@=<Toa#+(VDe_^l>7RJwKG5jRn|rdbI-THyfsh6;n+;6T+gkiBL#8rUP%Xx{b9?{
zf8@e`=^nqO#(sTD&5i!uNqFd|S;{VyTQ<^G&Dw_uawpcblw~U{o*TCgmueb}$R$x~
zS>T@A1bs$mL2dED=#zwVuhWi;(IPfy`BOX!XmhZ%LRj+M5nD{WjRe9oGWKy5PuqFS
zL9pYIW~}Uc&GUs9G_#s{s`nXGydHp|_{)g%fFRuL)2m|%vR0ZF@!TP<W<6wX_EUsw
z<KG;XJA>GCNrbjXR)@@uz&N>6ITZ*kpX2(H2m=T<Wb%rTiUBV076W$|psCv1d8Z;L
zJCDK2g=bMGhzh5|DVJGQ7%0a!*`@TpKnzx0T#}RDtInScyLr~!yo-cO2yBZhDoQET
zDoV+ZHtZ7BrywR-dSCM&4m4|E%EbpG&r7Ta#G%_3d2X3Z*R-l^QjsE_{<P?mPVZXK
zU7xRS%-(orpTz&%B-W&*JNmby{liKB^HX03)c-AI=s{<A<JRbKfx3do_q+$0S%ANN
zrab;kY6u3{x=DtM9BCo*5&qvxdWeBw$bc_$5D8sgR)}Fxik<gAoCfu@NP6*LtSpqs
zXlmf&2TSi5n<bq4RLPkC{GI>eO|?;={78n(QES@(JJsQR_Fcrjvt40v!=dlFT~3Fo
zX?qu8MA%hV>ktw)vl)+V4<Db?4^_}UAsdd}2~M$-we{j``^5ze<<*h%V)<9?jkQMa
zc%P2;c=Q03X0hxjxR>xORoHQy^9HZ$OE|NhLy&g)vTR`p`yFRDvfE7rD7UXK;S|@M
zm0i)x?rr$37T_kom_9xOMo0oX;Qo(f;N$oc<xdmzh6}Q-XB$N3YS?ruqxojj=*_!g
zv8{^iW_RZ8``<RN>G)hAs`S8iDSwO<`XEdh2&>DqmrKX<Wo#sIpCbWyxLPXhIE=^-
z_$_y(Jd2*h+h8gxhw~~Pg&@`prftn4$qnZYNfx!^Wv4&4lHVH*H97Jeah7XnyzoF7
zh7zxL(O8+e0u1cU&Q?hm<u>xQG>8@nr4Z6EaGl4<*R3jI)vM-YA~STrNZA4F?mIxB
z%kK-i-x`QbXa=TQN2jH+vuM0m-H!p>kBANbSAD=A!qD$N9eC;clXpZK%@KLSvJ<)r
z)LH6fT0P&6u~l8xZ%dDfq5Y<<y;jE}Xt1PT-MCjc0x~Cb?c^Sz<UV!n<S5EeC##Wz
znM|Jx6#M6=&T1bfUhM%=!0psU^sV}N0K8sd?CBz`GiGEKh$)23tg-Y8B;8)eGldPc
z^)BFP#p{mDGCnF~kfCsjg?n@_^$sp&Xjqj(S|sozq7*o46|WN#E+UR+Vy?9YyKOhZ
z*DLMi!)|sp&G&CkVxaYf^*zh;F4n0m=z*BwL`5d%DPAR@yul-#Mt&R!7t&b50R@wh
z49ltOUOA!iab^dJTvjftAh0{XE$ILgL0J+Eo%7FZH+7smtG1>W!-ck^hlhz^?!9B&
zc49u?$~~&!n>C#ep~*%17{>^gS<!FxmQ{}Y(3`V!DGtz}e2#*J!NDPV0Re4<$di^B
zZuq<4;aMZ6{<+&-Uf$~}y5?Ic0(+ykY+V;%iv{ZTYxz#(pWk32vkJbGAP~%bM6L6A
zf;}fv4CKN!Zd&Qk$Tv2h@;m4+KtAs7Z5-p1o%un~2sJnpz5I{N_`kGBv3zWh3d|qI
zzu||hq(UWFIJk~X4D~}U^d>$&V|kdP$SjSr@B&1{7@!z*f)+TU*k}mQb41GS^|;OX
zVVX@<Ki>m?T^8`DY>?twO9r)dujBvP2|Si;`swu*Il)t{<)$wo8Q0CN1Z1FS#WB00
z{^U9+h-2Qh>V3nzn@qdW)uZ;}^3l#-_mJ66liyll6uvOE*D0x!$i?>%4(RJ{cJ;<q
zF{9R;Ua3CAY9qgc73ToB%@5Y#yR36$6w%63+!xs`=*+rz+B0UD(BLwg-LURH?X<Vy
z(C^{X?(2|U@#wHdIrY=t=dM-@!qNLSi7az7R9+RbMPMyrNBJWVI*LBQtyaNaEc<2*
zQunJ2XRmlY$Gx~0-TKRC+)pX?R>n)E@FpvsWb!_p((=MIeO273%?QARdiwFkH(IBs
zV`@HC)+6#WNjz2KY!e?FI-X8(E*vHeHb?~1v|ssT`L>SxSu)(FB`Y_}BZBfgqjMYS
z4a9^1WE@bwF3ofW6)^ew_j)yIYh%S6`^)_afr04T>LeTntjKZ8aAC_naskkU)mn|F
za{G4%`{x$z*Kr-tWi_*O{<^}idbfpbgcYExx#{uPgbYkXp!qSXqJo!$q=y&~_b9mM
ztk-ephbs4bP0Y+EJep0rpiMg-BnXKGh;#4~(*uDtX=DZy`U}_*>8t#+Fi;$enZe=M
z<_5P}Nl!Xo|F(9$O}&!MmQy)5<qoNT63ZEgq1LBvZv-pv2ROXG(luY}?~f_~2ws`j
zsk2j0{4)qCmm`)%(avVoY?l<N!P~xPUo(PwJhl-gU)#2N50wiG73n;$k~`khYzmlz
z!Kc3IjusmlZq)3sl7()JeyGjTEO-Px4#32h-@KXI0j9xzXqY`(w^b`O`D`*)y)de~
znCfDYzpd$AsbfVku{iOnM!X$w)BN*m;<c$Ui-y~q6IC4c2mpj0EcGQVj4b)%a$LD>
zzNd-=@pci&@)Og3A(?RBX|Z`wDjyH3tUJHTP_gBum(nU(SmbaUxE@ct(7HS{c=fAN
z=->E#`TI?vvNYSZ?q#YxvT!oA7I$-^QX!f5Nk&>Nm}toDwr3`%qLQ$&VO_IcR2%Ci
z<X^liPOa+KLo9l_!L$0UJomT)aK&ygn5RA+=(a9$5%`L~N)V7C>d!u;34f-njOj{2
zrm~}(qk+k`{xHYoeglF#vt5{`e!H%GJT4%K<s{8+uE`s=-%nBIu#ETZV%z(0zvP{S
z`NEg0YujPE9}Dgav7qy4Cc;~YYPM%QM&<)vOtH8eY;7K|+Sb4rkP5-!r0wKIEWpBr
zjZS=;CEu&hhE&Wa6gay4k3-(b%q6;zvc_8UCcC9ik2!viyHN~VMD>mkf#<=W9Zk8}
zgLRf`wv0<SNHm2na`IM?QW~F@ii|!%&+|D~W-w<o?N4LS#0IQh{jAO{5UWYAK(pAO
z%oAq6O}rb9@eqTh?r7qv)C?7k<5Pnde|;h?G(ZN=DxqX;VFZ@bBDSz$-!FRlK9mYF
zb2{8$`V!nLjW_lD*x&>>HQc~h_U>>Bp<(kJr8f+0_`Py1mY`htUAO7KIrE<{Io|%6
zSC)^`!J`yrGW6aJ0_LK*)RU&)_Sm>%;MA<+HZ9sZiE<Ay4i1jl>R`lTl3WaQzaPTE
z<@_$0CDhw4Rxz2MD~r)!cSKXI_9%aioUn&@1OFH}lFsj+sX9}%w>!X2X;o;=Y|32)
zfCdU1bj!?2^(M0wWc3&n-Q_<Wue|GfZc^lH>h8SGP^jUixBdYs;@52KbuYeVDUN-p
z@_|r|+?5k)`YU1}S0$L&#4qW8iGj`7WH|H&4>aB9eAi$P0FPKM(=S+S)|dYU(fysn
z8VK?Q6@-pPKZ%JD9@5nTx6}c;eAm1pW0VEuE?*&|*3^3*v=Ch0Lkv=rw*f`IV?Tq-
zQAcgs9v*i`y`Tf+Mi@W@nVI#0uQCE?9tIZ%)776$j`GYtnQib=YxMRyJO-NtvcNZl
zFSMZj1yKQ>nEF>)vv}Zee_vmGJC%oGj&jmQea3X+CBw_WD`qr!15WaW$C3mrM9h}A
z_gw5!%Tc_c4Z!<xm1-~X<)dxJV&!zoK|&6Ly;9!C<Ep8q$u<6n`^d!6@w7*=XPI>p
z{F8VPPTA(zEZyzf_bqzeb=_y3b!GJ^$q^+}PRG-0<lwIJZ#AM}4rlbP7T2)?4UOHo
zarD__*M3Z{td5S3?DP5NAIOsdi9F@fkHblj$WvZfIUKo0L9Ixy=JE84G5X&<@P82@
zN|4}yc_TPv?iCPJseAYvhiB?N7D3WC(rTnY4tT?bl*?2=*7!X>{j)!x{qiPwYPK54
zx(gyE&7I-l;p_b?UO>QD|G+oGwZNzto5nY@A|eWCm9A|Av&&(F1O>iC5Mvq{<1_XK
zt*!))?Rx247WRbxcn-~UiMyJvC(W4V-`lX)^vKY7As1(FRc0%m@NE0O4PU|mDFCZo
z+7{q+KPVESV(@=79H>h|Zf{?U<j^RJ1!`FrSP`>0!LC2-@<FF6UYCN5ZLSV**+Peu
zWEQPm@f6J>t=m9&$Ywo%9EF5?wy_`$e@7v~i{?fg3+Bj+9|*@656R5~a6-}kD)b=<
zUEMXLK#i9Ssz5P`$uR%g5UBlJf4KnvENRxjVm0PgkKrQ<p~bxG&YT82=cj|^9(+z`
zcgGy#mU9$$({A<Xy)z9yDl_?v<8=0&o=PF$#nq6{MZ8Nm&igNdsoWlItxOAL)sYp{
zw7e;|kON8QkZDsmOL2z?8oY3uQ3Me>HPG9N+uUc={V|=Mo<6&cAKVr-_NTMT6b|PY
zq#Z!$h<82PF+T2$T~60*SM*$avN~E{Yd!f<sZS`^4-WeAkM<^R*#@@JKXSmB4Y@d3
zh#0KgA3?_L!=Z=$!YpI6b`rAB=YHPM-?-6V-$j(`FD;S0XAlrfmX)`t3x5{0{us#!
zIDWzn|A1jvn}G5~u!v7XrY}uMg&p**&uJI;Cf-Jz9zAGuS#|#)3~?(v9yeOTaZ>rf
z_CuGpohnlY!g<KlGMI%jxOcXXjA`Bx+CR|cl6EY_1S-4AXJiz$KlWZ5<X_x-@WAXl
z7O+1%DV9xlbh~_GvPvZ!WE5x`1-LX_pReI^J9ZE_%>>G+$blWRuk|mI0Ni>&E0eda
z@U&<LNG~1QhwE<JrLf#*(I9iBnl5D9s6XR<`hn*7=<dJ?{Ed@Zy}MJp9so$brxaB)
z1w~_rpVrNGB0WO%Jtis=%sNDl^R~T|1jy+gP>LhtdeJpd0{e8u&GheFHGT$Ua+d-M
z<ZQe<oOpkHn1A-bcg25Uc-b(*FA*_Z_>lMEJ$aAhNZ1U%yX<-aq@y>OQ#tn1`1?Z@
z1;Cc-T^>*Gi6i|Xyv}*L%6?Fek+{aAHe|9Zd8BZ}<rlCRIu*KdX=`g*cgD>!{<wDA
zXNp?A;L)zP!OzGP0uMd?etzWplo}7nK$?d5H|>k3gdFqe=;(+9Y`(`Vn12t%=5|{P
z87$Hl+O`G3Q560-N^iEZP%!tG)Gt+p=$)t>%sG^r*_H=GLU5fveYb~M!|a`UH2_dL
z(6l7tdC_F+?11fQ02{H&SFimjXuDE>+!ey1$h>>AJDxp`UDJ?WBKT?y3fgv5Ru-Mp
z8SsqR(oPZa>V+C{wqqBn(4-64GF868Ci)@8U_U8~1_@7JB9G<AsnNm&!KD{A)3K}Q
zKfFdFGHNp9wekP8hI0v<{0TZJMb1KV_%B((%g_7IbPefrtE_h^r`Ja(v)sxpqT|!p
zPw_VroMt^~RaBDckZOkD<&YIkpL&fu8t+|CQr_6a!uFT)`@ziqY{&H(i7qOKP#}#<
zdL8db;CHrRtGGvO4<70~0TBEQl#rF}Adc&Dutre~i*)F7({$QB&Oo&pH7T!cjwn)q
zlNRCC0i@#gp)y2&kVRc>_VnfzWDe-ltZU{Yd6k5)H}^VQFt)ofaY+kI*GCE&6(IUs
zcdyx*6h+o}R1FJ^m}>d@TCO;%Gk#uNzxxz=c!Q@dbjO3PhZtGnR<qKATX)=6e!M<w
zs9dONct<0T8stp(ItR14pG_#tnC?s!*YCbK<_Uk|Ia5<+d2Dm2->Xw;)-mu-Z2|hw
z>@?k{3-}54hq;PJW%@^}_5#_`SGQq|=~}&~ddF8NX~2sO@@Sx-Qoa3PV@8Rj?xF#H
z>+%)-q8e!({b8N#RANKV+c6Bv2L?~Stn*}p4C_q)SpYIdIx>KCQR;~C)L+I+@E5`#
z{cv}FBE7_ps(#P^JVO8PA^asN>aXOR)l{iz@YHx_?R)Kd!Ic|Yk09IA$91^t9|)Iv
zlW40BKGk%<I5|%a_Bn=KIH?~`7nolo#GHN8%-_Uqmngb$x8|U%yDk{IxG1-uqx3rU
zVxosHOaJs}X2FP?6Po5B?-~9j>`liyh|=J{nS~TUmFKV*+B*}2sqnh6F(q5{P{y=t
z?6U{kxn-DEmzL99(t46ba$oKS4Luc`1oA5L0=CB`m0CA6?{%*+eQx+X*IEgZzf_L(
z?sb-#)7$&q_{`HUx(-IXp-24`KSGe=2aV@U@?XOZS!x?3a*@M){+|SAf}f1%cGed_
zHk0^li$LTreQ!{y<_!=$jiu?lSK~Qa)^ZqM7gswu=$8Tu0rr|Yu5rU^mg^e7fvPw2
zrLAco0>~`JJsEnP;xnpk*;&1-($%G2Xx6r4yjJCnIPHFkDNQV}1(x|iU#u6$fci0y
z#$zy+2p@#v*!k8Mon;XacIR|l_Bz!UAU^^yk0F$=w#MJKZWGgg=wP+DW6lpPBn98}
z<r|N~=<<FWYQ9;=O!(%iWqQndQR9q<-ai0R6#}lyg%%hMg@YSwh79trIT|BDO&=+b
z&ZSnA<15ie6oTly937pVQNhw8)D9N?N6A`qX^iQfWxO^Mk1k)Oq{&UOmoI$`*3QTz
zF={<;M*+p4o-bgZPo6KB&7W>}f<2cZdYKj<bhsaP5UdWb-eCrM5mtV5Fw&Fx)*=s#
z-Df8C?;M!u&jU06FC195Y?#)|i%E_~*_u6>ZfwR!F<=|V=+}|5vN9;hU?gOQ3(6z;
zUQgR4QUN=oMs8bvS56hSB^UQ+DIrp45Zg(Hi>*n<xNwNU9nB)vSFc`qFI;X7HuQl>
zox@LU^R>$@WRJ0rN;tKf94ss?<QMO#XMq%EbYvvKM#W16UcjqqfUfPWK!!?3eHV{@
zW2#2N`MgF#nSUN#uJ{r2N<LX+yU6jz1busUmMj>Gn`Qm2%)9>-yf<?oaH2}{vjeEL
za_II$EnksEa;Sn9{$F*(Kfd^{^gHs^AJHHH*}HWg<BQ+ldC~@0KP%Q;<-$Cbf8m0c
zsDLU+qTJz-`*Stm4_M$n_z}Rmu08n=pzkm1+Ks*mOZoNV2r!V{eW;HNqW{MG_C@yx
zKLVg<8c_ZEpQ7jQ^mq3Jei1xs9B?lQF!Ji?{sv?RO+^5J15_lL^`E1nHU%rF!>^z&
zMube};HbLE{S7FFavci*D>*sAm$JyzoDuoo2^il2X-4)yzf2hJSpJn%_G2OdO`Ak-
z_oDxBf`9%gLEsPGO%U~y#s8~Y_xrE6;r>kJ5OCy2_5XHz9#8{4kV$Nj{;xSTl2&7(
zfZl~wYMTE%(%m*tqfL+bb$c?9IO>6Km%`t{QITQ<Kk0<ze-5O?>$0Rp8Gqd#Nk5?W
zWn79&_=`OL&rt10{nKDy{*S@_nH~It?*5O#{<($zfrR~!!T#HL^&9{HbAuJmz<zJo
zXaLr*ay$VG;$HRF{H_NtIyIFI<f7t-R3Q4wqA+MAY-6_35R6A<h9C}Npi4_#uNc#q
za#Nj?hrwFyxk>_%TdYcOEe4RN`vNh05kyW^r2>lEHH8U|Z{D?vB})ZEZo5Iq=eTvx
zIuhh<z=F>3l;>Y=fcBJYd!|T;1r{M?Ix;aasp{N&JRpWd5A9>(Q&rC<85+;_Lckt7
zwdm+*^7O(<zfbEWF53p$l~!@4)&qpF;ffuQfa?GPI<jXAnZvlA8Bq~ZSK_vBA*Y}a
z1D2?&F9w^23ot<2@jwr6Dw^A4(3rLdaG^Y?%~Maa9xpNOI3C+XuW}s!<WyMj6d+#9
zeARdUcM`xrH*#LKIag=|kPr(#L6JHx06(iQ?m|zhvjc1;L4ybjXqi;|XsxY2dWy>=
zf$SqZOxyX@N0_yTHbbmfbZh55$f^=>t_-}Bcy&`c24!tkMHD7!7qJilG05IEx*dB!
zxS=C>W)qF4t*yP+c!5x<H=U=r2}9Y=XBh2nn5g~gyc32tfp6$_7zh7kGySQ6ZJr}g
zH+Lm+Cg5{39Yst2Lw}J*_C}$R+tJUe?e<zp4L#p=WkjRS)OROv6yxf&@7fh!UA}d{
zE+j+Af8f0~j{q1M9UzJ}IhegYWLE(G|9Q~YgXXtdfEZJ{$-(*9eQO1eyqXVa-|ezK
zW=}sB3e=sIF6$S0yhzxJ26#A;1UZWB50%=8T#<UNVw1R&J8mKI^TQX+f+t_d%{Ofu
z5e&K?tsi(5%!lT##i}@t8GkD?k4{Kf#?rR8FXIKvyT6uxqR6Vnb2b1aLTaW-Wc@Nt
zdgyj4Dk@`FpLXnW$zcvZAmcd!yMomP0(UoPjnA%R)VvF@HF+**LD1_x5lLtlsKP0S
zd73HotWkzcbC`Ykz>Nkrvv$g<+#dUtF|fumj|x;p(E{Y3;LtCk2{11CUD47{B@Zba
z$tLkF)70Mc#~+C@tj?XjpAUt_#%ose@kwE}5juR9$4QLQ9Gv?8m@Bl+N$G3zY<Wfs
z9Moci&YnA8`dz;22irElq<0$D=!|AufjSzR5|Io3CFh{Zs@NqJZB%Q{3)@TK?$c36
znwZh{#4NO#Zv!)>OMRy2)1YsZc$ED4wB&OM%y3J0wV&Pd18nWwqQ5+!5dpxYWOO8%
zYd29?BlW87-qr1Xxn*U%2c|@`6EZ4aA){g?Z`k}eIcy>~I{=y>RzX43LikPIo)`F3
zTgN(D75wf8kL8q<*qo`ROu<k%dTx)i-S%v-)4J&S)x$4ZJ9mA~J+skx-Jnr2(21wT
zS6!2UPNBM0x3ApTsFEhE&E9ZgBJ)5@00vg1GL4?2YDtVmleE$x>cDzptLwf$<c3PJ
zi3+3Fc%ViqMmbeb;EM++YX{Zs6693dOMYZ?pWD&|9F{sJZ5uyi>;W-a?t@O{nKUki
z1-SiL!WU=zpS{~rM}aR8+#0~=gS-_c7j(>96Fa=Bm2w2i;9i(L`p)39K4Y`C16&7g
z*Up%M#|JVT#U1yZW=sUTwG1Y0my*xn5Kq4_p(9rv-jvtETn^s3tI@kTkpKFQz{d6U
zL}Oq(1ofdeGEZJ0lYrIF7tjgmm2eWp>K#|rkbOU~`6wiE@w|z*o?T|T^<arw4Buyw
z${Y7CVx{QS6G30d%sS}!V&SaXx$3GyAz+{Nd|SchBgI+vS7dK!o!kDfN*>iG;E$js
zcI!mb`vFe`fnAb65tJ;rO8Qcv<ji-UQ+v`d$*hrq1Y*SP%iR3oUJ67s@zGbXb$t7j
z3C?Cjd4s8hO&=~Ars`y*3+F7A{g~a#w)`!g#5|ECUo_0liU0cKpiLDpa$DMO%SE~r
zAV*F|k@)o|5zxo3{&snZe`)@aaR#2oMyZxvOCWaF+aW7Ll{fd;-nx|(xuNWG%LN;~
z!5SAZ<vy$3ZYbn|(>&*q!({nBl&hkN$ZbGbpdhnFwmXH++e!^fQgEj2w-KrknTG8`
zbJN`A)zsATB(V0w&YJB9Wo~YI>+nfB@<0L$(fV*J5nGohRkv=e?Mv2jP>&~ae;F9y
z2of+oZvkymEFdrM!Gu-8fA0~+6y+qoOIkEZiNedkCxRy)v8wH!j>Bz|6b3#BryE=*
zlCSuS8{k%r+m8gT2$a2+oomdNu_Q2h=1)P^V#I<M3z>3n4!~T0Eo4-u*o6;@0I!FB
z6S~T2%D+{;kV3h&_MBnW$Pd2P&0#+9_Wq2p5$1TN4E{)tD10STfAQv8uhK9Iq9PG<
zTWA*J1;@&A>kHu=j4G!&*Br*rKPVx_kUigm!mo&W6Db`_n{eLIxz^OC&x+SZ(~Qjb
zztWXk!Wr*<3;H%@7LdI^l@h{&_(naxz8G;Qq^wOMB_N$P)A}C8gEhSDW}_d;6=buI
z0E`xW0^|A;`q4UONW`s1)3-PwY@Bb+`546X<heD)+HVLB5R?p%h487)7!!~M<Y4hw
z^hAOZGfXemQ%M|FNn4P=TSIT5!DkWPX+j$WJK;>m#9JwM5A-ihBl{&&nQK#%^IAC?
z&oagnh)N!Qj8jqMyafZ%#cXS;2HAyVLJ>uu#4`8Ih{@l#Q<EuERpT3@v0nfrlf=+_
z9vX}+3{@r3F@GD!IByW{hk;%_oKY9l-MH2Kj6yZOng2_{o16EnnSi;Z$#;YDnxpRl
z4Fi)ncIaCZm4%wYpf2W-l2}<nNTRUYXJXA2cE8u@lY%D!fiA&Mi)wOYy%wJqT|yY0
zp$1R{f_1(H;p<f1C(TbkUQ)8`O*Rk2bHyX8?*XO!vhAMW`F^!1aadMX*GxDlBC>&h
zRVRAr<O*5^%|QzV4$EbGBhMfg+TkaoeMX#GVj?*n1MfEHBCbvF@XdObA2S*{1OYqL
zKjc&owp)*-RSK5<IN#EV&yN|?v{74)Zl&M@e23ZxoxA$<s=I^lt}f$8)<5%~MN48S
zVWX(|y$yOf*$p}y=}t)WKBEY)_*jAWEZA;sQue53UCZwcQUI{|$ztv^q6${{352h5
z`E$Do-*|G<R2g_HpD1XU=u@%`lZ`KdMg@2-vtCu?!mcHfZ6Tx_8jWvC_`4oaG#w+2
zgxd$LHaX4p`zxt0qDC6{0oKz2oq|U1$0x4L$39e!!ey@(3nSLDSUka7NCxFJBl?%w
z)`IO$WizK$ZYk_KcHqyi5h$OE#9K?$Yx4IKZZ=$EH0{zNf7;vKG!+602bf!NPsgjV
z9l}`aTfW{8E=AZaF$X0}o4VEI3kC{~5-8-%Pj#D7lrWPk<`STWnP(u3dOu?YtGw^y
z(#GU$(Gy`c`?y5AAk^d4JZ0DOm4`kt5A9ymohL(7CG9C*Jrn^9>0U=k3s<jA5B5q@
zG~qbVa;fy=xLOJxPdQ-VB1+|mTiB|mXuv{y2i#|}$9L5+dwRdTNY$A3t!Z|(t?a)h
zL-i2!?@4^0A8i&~Y1-{+U3-IUD#WO=XW9PE9%U|pa7d0qvv(~+d=9vk7?A58@OZ|0
z`J-SnFd^5YZ<gj~C%bFHS8|N5iJ&q_8~LN(%v~AQ11OQ)p@)n9%QUxaQ$5$)2xUt2
zE0@5|z*hfeG;~%g&_YojqKAtn$a#rO#JwV_mPrdAjTW1KS@#{NFq^?ki2hLknj_fG
z*>patYbz%${o)h)<@SN+uTn2K$*4N?r#^vv`e|KAOzEu_@UG^Z1|-`joyPPT$9pkQ
zDDHzKyp*G_M9tk*j2N~#op60wP@k6>ZIkKrV8{up4a42Uo@|efBzt`;90yaAEKCc<
zf=ad<3lvX8D$l3A^2Ou1Qlhm=)Nkzs6?#4lqU1Ou-Qntx4E$(wJ**W#8b;6@@o=|w
z7F5NAXmE#*J57%ogWU9tJw*W5TvBA@+q8ZI7vry@<dz?N-CN<Ij)BV7=)=#D#Z-4%
zRr`(nqp=xCZPw>F?tdeFt&41G9p9(8%st;{jZvuBVtFbg*>>HQh~2E-Rx9D-Oage?
zFYlq9(vh}xr(aX&UuDDrL(Aj{otlKS0jefOt21pz?{Me)A}+r2xTc2#^gh)?R>>V7
z3!UsWw^%8ne#D1@UxCD~1wr5f{uV2jBSK=%=1$o$(1JjAdgZmi<GLxER#*u2MBj=^
zX|UK5j<teJj!I^QAiDfxYlYy^c)Y3<OI@AetSZ^VCxL~nQKRvr?>3EmEFE-yf>ipo
z78GR3FN#8`?k~|S6>DVx#7c{=qHbCELtkPxaYr~WhloB6rAREX`<6zf)Q|7iMPe=N
zEA;@Y;l+etoQ#H^;wXx#6`8~5@yqZ`kotE$)B+oCG(rdm+F!e2B5T3JS3=r4A5m<C
z<Z%@RaBbQzcI8`^Z}(Yu(O6J8?kK%i2B!K=<<|NYvogH-idoZMzSz^Cec`WLxLEgc
zLg8~@fcwLUS1=%tA0PJ}iYEoZ`0}WB&MjxrX^GfNMemXSik)ijzrC=B5IXG~d%g>W
z1-3A1v?sq0xI2rnov&qNW6!CL$+}T>k5gO-^-Z}kTD8~<Qo(ibEB&f7&L2-zm)^9z
z$z>8a1$tow72bZgD8QQwxp%7t%wpKkcbOMDe!AEdr&eQczGnAWNsfuyzrO0b&SM$V
zbB?9hM$ld{bI363xgVwn_CK#Vj}!Fh%wF$8O!I35pCJvl>!-o;+27gzO$3v{LK^IC
z@jWgY<t8g4<0?H~rdxNd=l~BS<=s)>)@<6ECllVS@@NBfL3Oynj7rILpo90|3+Rzn
zVGFM$5orx=*6HB#Jh58^*geX!!bKGVIEz2FqJ}RFm7$5+sHJwAnEU(N4A1+lST}eq
zLMO1vQ=_!BT-Ne)3u-Te-@qQCCHrE|)^1w#1mrN%6#(0-S9w0ygtAR7(h%su;3y-e
z=jrnJz9qpGRsv7b^KU|`nD~_MNwAY|DvsVJaCjW{Ii;f*?eY}@R`{5RksW$?O2;-?
z-e+YB&J!^#vm&F}d9;v6ARHP%xpt?t1_G7uZWNi}M|I&J=`)nR97>K1^mte2FK|V$
z%=o%5%9H7UNkPR#&iiTJ@Fzi?>G|CsKo*<91%~(CRP`!eCEtu|W+=Hp8J5NHGZ5OE
zn%*p$6qb{e4x?;$=jAFSt6FU<eipki$m?HRgX%nWzada`&W3NXbUFBzO?9(w<H~z9
z!Lrhj8#8f6GytP>U=RK;_TDlq>b6}MS5XiVP)TV-K%|jwK{^Gb8<Fmo5)ekDySt^k
zL0TGy?vA0mW8dTRJZryut#^6s|A+nQzdp%<I`f-*?yJu0yw1xIMAHQ(%TxsH)oI|7
z9>rt`lGu35cFS+flRlv$l(lGT;*%x(<S^X6O!Zh`lVIAM>rBt9bC1E*!wOAu?1@V+
zR&&0*?MSl%p^Fn|zI@<I!WR=hC~SQ5+?S~jwwOVm{s;AH^1gNL@7hu#h5o@x?X^Z{
zQuVzlXvpT!s{k~QXV0ggL`*4Vf9JF#_9gbTv}Q@dRh$GyW=4dQmJ7p`3n$e``3x)^
zzfs@h-xEFzXq-<iYf*cwBxQ`j)xH!!INEN$GsO(pYBI5Tf?_L=u&wF9&O^WheDTJh
zZ#d`S0X~kr-FT@%P%Mh)09aLB{;G>;t9=qaD*><plYHQ9Xf$dRwm*IUBE_5+AVM=f
z&Tt3C<vPG<^VK(yt>`U&>`7+6E*pM3>{#MDt5n4~UuQYF%W16LMisw?TuJ}a7frf7
zoVG>Ee^W2fZx<1(u>K_0Vb)vB?|~jm1u+$&_!|qEG47|*ZUZ`j-U$Y;^mvC!t!-#%
zBBM{e18f+Qa1Xyrf$fG!msi|nQ-GxPF%Oes^U1@S`b15@2~fyWe(&rmIda!kJi246
zKlq86p-Dn3;E(|wnAPEhfzJqEz6}%9#m5tX4e~aaQvkovd`>&w0`QHD$Bz-pEA23a
z{xV0ZmfzIk_2{tYlz-!l3||3G`}pbiL4OVp(BA{o)|d0_*ol$wODsh@@PeUR$^z`~
z>YBjQ0dd4Q`363PRBf{+4jMN13j)SH?g5l~FM)@|4g5k*D+OUjHQuNH1o;jir=9NX
zVcUFrTD5R<eL3=u$Yh_2a}7`<U4Vj<X4ZRm1Z6nES>3Yf!E1X<!!inq<U_<Tat8j>
zc6^Ih9s7JYXM(7qr0Vt)`r>5HMQn+T3sW1(KN%H~j6upU;<|-mNcM#yGm1e4!k@f_
zanyLRLEZW5*EgymOLHGz^U;D?c6VUdZ+o#o4uw3TgKfx$bs1Q}@TC~>Yrgl3GvZZ@
zhYPDnG|M6o7VP&arFc%=k51Z_Ew4K~o!|zUJUszG9|DJIE9?C>9Gn*Y?H7K;G*a8<
zH_BJ$&j-e3DmEx<S2<0dQWL_lvXRapLO-yW`N!k?E(o((3zh**65;1K8nz)MyQDxT
z;<v`lOSl|>F%H9=Hb+k!lL}M`3D+I4Kp#RpFbElBErBzl)<a3x3uhZ>O{x}PhjpZ1
zX?vmpp{Z1+E`gaZ+#a2uPPE;VSac{~S5Bcdz%cxpX%AWImQ+9K0M(I&VQ|0?<n4;y
zpk_!9e(<xj{q_-`ZW>gY*tDw4ENv~9kror_)Hd#a*=1H|7$x<gVE84-6ArCU3<`c$
z*gCr6-Ar0$43f%zHUJqeMR<j6)e83%G<EVr$i~n^5s0Iq1i+jgmN%eQ_Rpk$o`Sby
z_Wo`HaXx*RwT)#S(`D83vnwvoOP?gj9`A9S)Hn}A@H23s*JBtew9S&gG${CUtrLL@
z-Cl-ECipWGJ+ipIZK}Zv;X*zvEUY{dc$Fd!<eQN~tvN24b~KP|u{A9>n-Ml|lc827
zDUM0%fFSj}4>zxX^XnmZh>OMX%A&30#6}ic*_*n0_m(88?7+`o!wQ<8Po0jrJye2N
zu2I2$&3%{8v;B5NfWkE-+wKB<*GIxU?;enmH%_}8_SU?x$D{{GXW`H0dST0=)VU0j
zbB|~}-q*};)%wHFvlr^<7ve29V4`E_@Oje1*NlzN%s8EkEJTgO=X`w6?;?87)Y!?d
zUmvTDk4Z-BTBmrS5%hD%$4S8@Up+f5UikmR1Fw<<9T_^5pHuikB+=ELGi@^tDfP$6
z%FAEdq)!NQ^4s*;+hKimCkX^P&0pSrq8@j+@MgT@kJoU%iVw2J_wDyjG?oIM@pDV>
zHUZiy#`X2~MxYQyR+3xIXItA<<-Tak!?rItp7KijfZ&Nd-Nm^7&`WSMkPZ%|W#T?m
zUVrTBcC{}u(coIEx*T{Zh%WC%#Th>A@m&aJDcN@axnwvaBRiu~(R8<3nPG~3;R)(V
zAPalL?cD8kQnFVye8OUYKlAa8<AW}AP_U&;1H5D-ymI!l#Pew7CbwIDzZ<(TVK&0N
zw{DL!n;ze}tDmwWil6OP65l%ryIBsC*$AvxzDfo9d+QEhdTWM0nDm~1$WHYdkzJ1n
zv1>X-DldrW8>NNSp5-k*g^Z!c{G-c^^7ga)Sk0Zy@s_ykg9~8%DFU>hb2R*9cYZp)
z4u+Ef64Hson1DMUe?H}q6U*aV!E8A2^Chx^`iwExyv8XAeIIr?l(bySRl}9jgi*2J
zMWMFr^$1l{-{7{xknKZYHUV~G`^cGsWs{aEt4Q6J=(|6&hXyO!oiR7C>xkou(u7C|
zr%hWXaK8T3P60*K4;O(w7A0*p)tB*C^XaHK-_bmvPj^}>${^BJW-!?<r-}?7pORk~
zAv*v~7341ajh3p;`An^uLu*6fbl!PT(ZHLTwv<ou{<fZhaDX(LyhUplDJH!$`I7<f
zYv;XoMt~&ZO?sKwmr-%vZ~hdMpCWTl4=pqHEH2dxXd9Q@X>oKeT6MUudQ_+aJ;f))
zuq~1#D;8^~F07N=;@FDQ1abqdQ)_1T+^GZ2VNb+~jo7c{D2%iZ#sk7mYQ<FVJ0}`8
zR7QT1oal4h8ZS2H#cc)x+4YBQAh_?*EckD88S%XnhwvYUXM1J$zVhs~Ll%LE`m?NO
z%M@8tO<z4hCCn?nHAr+4j%79bvHGG#HXA^H){DNB*b_&hBBSJOotT70F=(qg0B=(=
z%Y-~wR@AVZG|I}6I^2qrc@L4n^fX*XayJEI2d=QG%EAle!*&-oR%Rh|`2&Pi(x#91
z@3xbj^e*K&1)rfFZc4?!vG7C#As!QVhXhauGL+Btk|e%3j00q$J=}CYAPb+<lKaq-
ziShT~ZM(jSaP;3T(IX%*_`tPHTk?qViD?l=z%5*!4+)t$d8*dIq8y*X9<@V2_dZP(
zF`rwVYI2ZR3s4n#_z(ezKulWR@tGpScGNB@cNOUc>~_h|CtEoMAz)Yxp#4GxNP3XV
zo!UZCN}rn}9!A>|l2&Vx_EMl{KDnEwlF$PJSD2c4wGiRqh>}*0_ph}?=Ynas%Wd)(
zP0KIVzY(%Moxf*lCp};4YDtWMwf^oH)m{%t{!DG3SqQ?f&WMcc_uy%An*K}eSTt#D
z1U<$x5bFyNdu0305Vy8;p8Jy|B-)LtYy<<yLmte(<oRoRZu?-+07c8yAKp*KHReH|
z;)w2`^~Hm5r*#FPbI4k;LqTjR1dTHp0dob6(A$LDKYWE!yobC1zJ-X-#~V3~j8#4}
zSS~Gq?D+sCnvoq1<MEI{ne81l+t+}|mjo9)(p_oWnW_Ci^!9>?-7-1$D<>e7H?BT9
z2{ewTSFY`vQqkK(^|E}}(Egah@L3)impWpT?H3NoQ$T!NQ34G0R;I@u#SiUkX{p%7
z_$c-&7Y%=)*|$652=aV=(C2u{Vs+|RIf;frA^9Zz?r=WtD`_by)J}C$<pf<hO@4JL
zC}}w7is%rjs#%rnA;P3XKhJ4=vmf`@iy0!K&+DYeZl=01%Zm7D`d#H?nz<DAIv)2B
zlXY%zf2n(z8TC7JOTH4=9(t973RD<8x^OEp(8G|kXbFuu`YXyh=INlWcq!{o(9Mk4
zCeczx;TdV%QNu?#(CYYi@i>EAHG)`S<9li)$#(fdV6bUc#*fjY+hx`bHF_+yzg9Aa
zsfN<EasLfD-<coxtO`Dxd7hhRCtqUQFo4L{(M#H|2XAe_nh)ez9zbg~dk)}+W<F5g
zcs%#@ZMsjG_<4g0%(JF4aa=EB^e<977txowfuZ6N0f8Y;HO{X9dNpqh7gLQ+_To!y
zn%t!@`cj4HoM?G@&$G9YdONzL?R>ZKR`KwLff&8^e%cNL<NYDh>EdhU^(Ur@p<<uk
zNk9yHioXpjdj(!Zry|%NR9G~xc9(z=8qb<rQ4L8V^J+}k)tBmKM+0wc=hK}JhgI8m
zeRRghU(wP^bu1GxOJ@SJMfbEPU?ubLczM%N8jUA8c=vFJk@(JC8&V`xymU#-z1asC
zJU!J#g;5Mr=oq#?DdM9$JijzvoBcF;{^@vkZq9^PHx%3aH_SuT`a4aH4o`co^mm#%
z0N2)L#`roo7|UPumi4m0Zk@a3XQ4$A!70La752kB*e1GnOX|tcxLzgiN5;piFEiK1
z)g5~kb_!&ljtSvXq6pAbc86lWfcF-E3{ed9E!-sHBn&Bk4fGuWEx0|Rdr}Lw#&e9z
zUg*5RwL3Mrzx0c~5GP<qW12spIVrOb8}lv>bBs<EOg1RC$29`(=4adV@cc){qT@UU
zx2Ai9bMqf@+M%mR@j*h1xXOEkl0Pk!+5HGb=M&9zE#;ALe?2DTR48gGblp#CEP3Gb
z2$y{?YG*;&<T)dpGdlmtMAcFPDOXeE`7MZSo$o~mu?E!da<yo8(BB`Pi;iEz-;!>Q
zexg0O*sD!AF{u6JqFO4B^@n*ozX!`8Af{jpH_z`jTox#E4t+qPPCao@seSKnv=WMM
z27!-bp*|rS52&NjV`Ohv6MosiEtn%O32lB!C;<QSjumRAATubqmXS;#wtn<o@9$qa
zE50%lO|Z4jMTK<kfN4tES4GNMz#j<pJj9_<CK+#P1GtNGm&KLe$0XrwfW6e3N)S_E
zNUL$iTPK>q=(^&`LxJUNSf*Ekkk{f3u$R()ji{PQc*0opcO_SY@o@Cy`zLt9*pkz7
zpO7K*OYt3Ne*F7OS?e-o{+ELtoYu>tGhq#LXEDiwBt^>Ff!?bW_+e`OpT46x_TRB7
z>$rX(f9WL&)qz1XW~CUl5$BTMdcBbQIlUObHY+=~;NJbEHT_;!z||9DVk72@4BMe!
z_X)2UQAXXy0&I%T;4!bRQdn1V;xnDe(j%94L{Z9kOMxPh(SuWM&UMyIg04CqS`Vae
z;bNTcjPu@#xJnK-nX~I#<;i7;hg9boifFt2*p1gEtiEgq(T%~v88Fv`Qo(q}oZDsZ
zr7Oq?N4S|T<8?8Z`3XR$kXWWRB(%}qn+h*F)2p6mt-A{7@EFTifjTtq>m0rk#sR|P
z%Y0Vm)n{||Q)WWS{YiXUV5TRzq2(5rnuWG11)<{&de*bwQ{vjH1)p60W)ks}!G|G5
z9}5dP-!p$)q9O~Qf!8n4Mjx-=2G@yp6!t}fL<<O4PE^}usm=$@#1-RnW3!~`_$QD&
zwUjI(gxO)V<v$>u--Ay;fhOdK$DL$B+%Le>(U#mf0ir~qU`i=lkMTLOpMLQk_Far6
zD{cykrY{J!Oi{FIifqH=?H!neS3F;57KmyySuJL#U!9!%swt1=9=`grRJ{It^^x-Q
zF8+Kh4~PwVGqE$ncZGT9jnQA(6t$pDf7-qqINr~F=zsBu(0%<~n{#q`^e9uq`fyIz
z#sDk)V|VR>UZF-x3HmP*9yr=F%QUC^JfIV)2DU6L!fL<c`5p~=19s)sA+!RjSAMm?
zOI!ZW?TZ{V)9)B&gm_2IkhUtmFcFv`YLO9wL7|jks+tHM@;30y0{Q<~Ksx2NPaH8r
zwm&CfSioMO9nkgtflP0C3Q0*UuX-6g)!0{4HRy8*#>ncoX)j55FJ2aa#*}yW7>FaV
zUvbo5(?GX8G2z3D>TJGgU<5{|cI;5lpetJt$hSx<P8O)-{9P_Fr2WO2`_H%kH%<GX
zi@H9<4XkS(rt>sJ(BsBj>W)<5zEIC^AfGw>!sAA<J|9H+m`KOP<Cbw^CicqwnKS5u
zY?qJSi}lq$oue+OYF2pedD07$<x8IH#hd!dcnhGsyj3~vJ``+gRlWEp9xKp$RwXgw
z?5^n{J6R))L#;J#4@HpNr#;K(>^^G9#e4F|Fn0m=s6I&FJ`lMcy+3xWqJW0ykVc~o
zT6m$?{lf)_o|DBR6o{!b2&Kqef09#-s8P-+1OYf6wLF8r793DC*5n60afQpf_#t)I
zCsU6YSHJ3*_LYH>7VKq_%T=VMp9EXtsAiSf1Luk+&{&_o{VA->5X4Fw4XiygT0ZFJ
zagRs>i%FyrfKta^62hq<T`w;)u|`|8XWLv)XAIH@A0{>d!@F%(#b*MA8wcneKWJCL
zO{+Mi)sfC+q3=(Byy)}05EJ-Il30u**6N?RnqELYeEa4tE@3|MSEgT|wtuZ(@{jHq
zTE1?R-j;3wL6Z*NvWJsUSiTffb8x<3NPY|%0@8$>HJFG=fSddy5VdSGE)AvHHW(j8
zAWuZd$ycM5@yz$G7eIuSQJ2Zi=x)3g?)6YVS?!4-1EY8LPj!K;a2RM2|Ja>%J=K7#
z`$@cOsm%w(2xm^3ufmY0J#?T6A-H7kUC9@Q@7LMVi9SAvu|i4FMv_mqt(2=M#laE;
zR1B`sam==uJQGZ%P|P>Jd|rT0pCKTjy*f3)tyab$Vl=dGL1lBaBI0(G1v(X(J(y4C
z6?O^*@wxm}R>H(oTUC+RZz_z2gfmR$W@-Ub{XQPQmk+!e76{^`BqeQn`CI@`_S=1g
z%SFjLd<`Iktf>hE6F(IshoNQD7u0OL{=nMQcAMZZ`yNpz(?_|IaBs)gLH7QfhBbJx
zuX0(@>AuLEU**A{cNg&_A)+#qv}SI59XMuJaFvcE$@qs$!uV))KYJYvB0(!<JTkBj
zARe5c*`@+Ib={zDIv!XMwUB@?J*RqR2GQPSxY<y<^!zS*T8-o<ljp_;hP3mP!)^bb
zdrIc=&^9YHjLaeE;Ev~%9Js3&59-m}??>OBk`3PnmC>%x#;(K6p=VgbLybcOil2OE
z^IngNeOCh;j9R{4ePIs*Vy>F5#~-k+0a}G(pW4=(jm~@avzDQ2c>hh<fmh*O2FY^T
zQhDb|&!!?@J*473^o64k;hH4Hj*DgxQ>@@ICB#n5>d^^zNI@1EOQ!$1lkz)1%Ne^d
zC$<^JfJUr2ZBC#9`(lt@LG{1dP3W19G&S~Evn2ZN`_U@~jTngh988vOWqJ7*fc4T+
zgE+*;?{xB3qHrejct{2A@ku&KqGYZjm0@V#_|9`ddYDn4Xvy0aH4=O9J*H!z$D&|h
zNH39mS**F3ofgO>{Yc(+9Mt=-!}895daNR<wWDMrKQ$rr-1n{Am;6hEoo3|VzwW{4
zL%xsyQ4PS5leE}(2@#JsMyTzra?_qCJOpGDTQ{2|vTee*@G;*qi@DkTavCoPA}U_C
z28YxmY3#4#NWNgqG)p%KVqFM|<qc=sS=;SN7SsDDgfv?i>hn9_+RBv~0^jn@1xG}X
z!>geSyjmLD^#Rf?_A0AXU=$^Q7v%R_eA}ezzTVxe&ZbUX>)f8Vpfw)g>Qz7O3Huts
z*1YiS6(0aZg@J_E0fPOrVj25ldL~9YB%&GHpUVZ_C^(Po?V9e3IrC3=i8)C`(H+~T
z>++icNeJT*5_=&QI|py&%`eCq4C8nCEDHd^3x~!2{GQDHa4w*N<ZJvQaYZxG_cN~K
z9;zat584jMv*_aU);BnsI7`Sn=K+ct1_qfQVJDQEO;spAM_Sul>5j_vK&Ycu;XFfF
zetBK>h_y8?E*qhXc-_}G^p}!jlyJR{^*8;gCWmI{{zM+X<kGH0BqB$Cz!xb%JWYtM
z3|GjCP7V0WfSTvN8!*7}bw5S7pQZ2wc7w31wezUhyk&y&{ZI7)^H*oRY;%qdMom_5
z=3S+_u9|B2`!xMX`AIlS1b`FaF^?#O-lftKn!~FaB2E%Mf=)A-as^?0L*v<KW$~7c
z173$Hu>lz07Ui>HA4>zKIP550_Y|I=>Bry|E=7ylP^@bw-Fe)y`r|_`b~l|Pj_@3{
zWE?T5u$D@~kU7r;yo;4eKlLgQ=lI6GJd=0{{yA}_2-jmj{cT{3XGC{bvWKMTZM&Gk
zU+l+nITX}g9dvtsZhfR2KAQcWjHR+=c)wJ641M7wM7TstJd0a9NP^~2unGY1IC<9v
z)VuuqaMN<J2pEnonc2IG|5~RQl>Pcrf?6*dnrsK`Oy_Q%c&t*zy!1!@ovayXNDee1
z^Y!R8N8k7K^--W$|56<o?GSKB?{$yOK5Dcxo7p6DxfRjlR!J0iSf%nmC>kVO#nTZC
z1(Rz-1NbU3dOMe3b*6$Qe_|0*4@%LhVShBEU@V)3c{~Nh3R0b55EyN*<-ph0!w`t}
z(g{RqP8ISScF6Qr-k1-U;tnu~{oSw5qKfMHkFf<zpl|(v;?XlpX_9f0DF8fV0E}+K
z(}VL~Uf@?aHUQpm^=j2Euxt@Q5Q+I)0^;SesXNMTf@Vj+QasJWrc~WrGHoDfCfDF{
z{^EVPgQac}ir4-E;udz0H_1c$DD%sCR0^VV`{AaP(T(K284cd)s@4N;dD}gGPwrD7
zyYNFOE}8~VHmj9&{m$y+X%LA3dx?Yxkx9Pkg>$&bLzA(Bi16_6qNV4r__SZ(V)vrq
zF^dBFSD)@!rTx!61H>oxA9Wp5%{j-H5L^LaYgw0B7BR&|5(syJL177d`wC{$aalqL
zvILOD)_II9ysB6{tOI($VDPXu_(kB`QaIJa-I5ahBL$QFma+#2g1w`#>nGKRqagun
zzL*G?$wl(g9u&NsVtmrODJ@o+urCg!0M!we8f|YCrD>)Om<U3{BS9-R<x*ZXl1?J@
zi)YLxpkW7GM~#;4IlHmDK3WT-ROY3qD>qHQF>uxMyZt8RYwtg$^s!R4mY_nAqYM)4
zBFB2Vk+ZmVssw!=KTn;cGi)I#qNUwP;F;zPfUeKyf(F%X|E%j5iT5)BOSj@5JiduK
z-+l0)n7pCA@j*cQILpbnnkl2y+_KbGeMa24v)^|4JH4$z+##CmafWAY&lq1}KY7oI
z^Xryl$%4(f+H7}aww~+Mt?zKJh|A{FYR?*1t+PR2%<iz1r0P!f5j38QJt}bPGMS~o
zh(?M)oDZFFU%e)D4Q=I$X!z7w4Q8^lQc=pXxuPR0XR>1<F-Bf3AhAL-7IQzA^Yq7&
zgR#L@N8S-jign=b#bPjGJ<hYntan%5_=4hNQK7HX-If#VC#jrOb!Wwi_|O3dL*{B8
ziSJi7vE#glF0t+Gmc&#Xggv}QCZ4^xF94`k^wIJvq*bHWXGe~&kfKSbx}GgS_WQVY
zKVIuoS-I=@ch_td#2u3^7b`HK(bfx3#*P`~vIskU6Lhs-iEmWOb&@#AV!1Up3*cR`
zO{lOuG`*;$3P7fD%@$1r@1@#j^&!CZGUIY!fIWk|Eq!un53nR!KgF4irt%V7Wosp~
zG(_Q*NTKswtg<!6^xkZ0-Qoc((>k#^IKes5{pLJ?V)%#8Zbma|Ib6kVuom;8q?@jr
z=qh5YRolr|FvkhcFDfuV0qT_n6%;wpJa_^D;-<{3pk3{M!Pa;#weR7TapJsN@4yWX
zV?r<++LC>s2>um$7=K^P8%j-}9=Ek%3M{Rg=$q1+*)J35FY)%2X+7J{eZhPuG<kFU
z*B|K7ucJe$6*dfu2=Cp0_=IHO?t_;~>tEiMOPEm%C{U`wP!FjPwsatbin+8@`1TuD
zQsg}3+&m8oQ$iDM6E@OAnPNtxsP@$6E)>%#d$Ul+L9bU&k*%E6j14taW^>NEn|9MQ
zbs&TjsAE+Dg{R4$Tv|o-K2%Z|;{FkHkOEXnFGJ>+<dFEA_^iOw;k$FP)gWapl`gi$
zxB<#nNjy$<W$C*E&AskawR#s(;x+6V-`rheh=u}Ije=cXvrStH?%$JFi!N{DJbVU$
zy3*HM4h~4&nCXl}ZqlrMng{j73yG@`y3wru_RyF^i6q{A;6Yd~FgGJzh{TZyGAQvg
znj9q}!56~>#W0o^W8=03q)*xjRo9t_K*8?@HS=|#JJx|r882(#E}rx-l5_cym^<Fo
zKGc5#rfWQ_8+?)<Y6Yk1l;StV$wR{epcd8}uS7dFDrW4bL_2OmGxoktE3naqRm$~w
zZ;dj&vK40Sc%|QZGrh*EWDsH<n6zq|Rlm7Pg$5F9KS4B(mjJbnD$el8%OR^F3l~r1
z!bGf%+Ef%R7{G3%TB%5pJO06g2Fo0byvbDPDq^V^QXo)0Bq+#8g4pVbUBtbLIGV`b
z%}Ma~V1fxlY&8?I<T`DtpeAH1cvzv->`^x~Fbxy+A>~;1@b+F{v<VWGN7JMlrE0*T
zl*qD2X<nG%(FO>*j(w2eBPLw<ZNQxc<c*d2PQCTha~a}e-7U%K;&H>3Je^oSNFPng
zZr_tia4uhU_~F*$6Xe6)sspwiw3%4Ke1KTjTw@;^mbtQ+SgCxYDlptdS>sr@HMx6z
z;f4&yq**WZ2ve3x(Y#;oq0XEsa1zZs&s}P!XQiy>gWm?kNXIad<70%0*NElsEz4UO
zI@Z0HC=96>waYOMlp^Othd-wq+*V63L(NQ#-Bk~FM>DqNrP)kCFD7vx5Oej}vS&bZ
zr+D!@^{Q`eQw1v)q)glSbo+MO!rf%Bs-F8n_T*A<J0%v;s9b?bN`Kb$#fWU-<dQ7z
zW@v#}mPwuw%{aiaK0xRK9`GIy%a_7(G=qqEet1-Fu`ZLN0nVv2oHneom|)9W{83D=
zV<@`5jsme;f<Sx*<(dUnXAW8sgMe655>#uP9}QtoxBB6||C8#y+QQ8@xgkMx9%ksS
z(*<qyQXtol2(B@A`Vltlk|IIa?#9ube#~5EMA887PQ9GvwUj;l$?3lg*Nm}CkS}xj
z(TM%9A^Kgo-Tn&sviykSQDkOCEx&w%X^w|CC(I|q)@Gckn?~N$LHuj*vlr>sV;T-^
zK;Lm}o;QM5h?|GBXz$~B^F8oA(Yv2_tE@?Ny^1bL#ug{V*Q}8ZNi=>x=>t8^^usgy
zVxK6^!S=N$p5u+P_@~zrlj%koIM76}IDk{egXZ{Ez{IZGY3<@?6g%<Ku&lW8$|>_&
zQ^gz`R~Z)C`WWsY6;HTrDkp+%&{pRwQ3heq<csi-H@g|}aUK$z>F*w?nU#OYpP_Tn
zN`DJ~NR70YwAb92i1Qh5b#j(Icgj`8aFd6Kb&4J+z9xh~cZ<rl$&<bXhi+q*Tt(XC
zMe%yP>_-TF{Ty<1YV-M?fFQZ+C~)(2rYC$i`$1c`!#Xj~jxgztMo%@E%_hsn4buWj
zE+`Xh<p=;p-06}%JVL0U{4w+aEH*Y4F#tLz4eK;kv#7TlEjT)r6^~TVqFOualxOII
z$!7bor{e-dVX$rY#u}q}nH)QU+d<SlF2fx)0$}r8aS?sgP!4`DJ5l;oBL6y0E}%H)
zggyPMFzvNej_|I}<nVvkD&X~e?97$p0DL_^grG;4M{r(plBLz45KbF-`1q_RALpK?
zi3IgcUWFxHy#z}9jhx#Sz3k~roY%byT4FLBoPaS~sscmKG087iJV^*|h>MpHQ4k~$
zUs_e?)HUkMh+3U)s<z#J`FR@);?uCj)m3dv-cJ~+FX3*Xwi)YOe&e_XA~DOjSb;3+
z`vD(g9K(%i>hi|&2Ki$>Ru^V)y}c=s3QD?O?*q=nr?rpXp?y<OsjoTdCNr@1kh+Mv
z)|7eGSW|}MF|5R@7`9XL-|_dxOlz)}1eTf8Y(O%@{=w1ODN#2J!p^)L)83Mfq@I40
zc;p%}_HsX?u?fJ`CUE-1@s730wRGhXo{@=W)Q{1A(Z5ampD=uyRnChpF_abG;02v~
zN7d8}dO4-VZm`=xxh{@^$y%A}jHU1c%rx%SlnhtiMcKxmP#5~^EdxG3Ag%mb&8o)3
z1u&<}S>-+_o<=oZk;{<&nv8|?3mO|-sL>tcWQE2L&E<GA0dX{%b0KkK<+-W_?)&8Q
zR<D#JHPgEEtfPDaeZgxpi`~MJMFN@k<5@=>qR1;lw?-~ML2(-f3F6OZT_r_BP02*^
z%-sC!Jr}@t4U=KiZT&XgmJDq~H*&ssV?s>fwB8Y}P8vmQ7C^!O<<8xEBcvqN0(Px$
zsSikHr9rS2y0#S*{v6r?@&J4|2|Kcv!>$f95mRk^)7E1Fw0{G5T`xYeMFZNY^+cY4
z&(IO)OfVdoGGIf@46CqR+5)`WxRF{gJ@K7QFY^?Jc))zd6H(R>ZpNVTGmg{F7)}|T
zz$ld$>&~iJ&Iz{>6rD_J4$y_!;VlQ7lgQXpO}yK1k<sr&F<R;f3bK{At|_(y8gacF
z>G&E$@*B{$gm4dT4NO{Y4hEhGN}hxl`sY&5Wr&@(ir1$qEkX|An+aysoq>R{P>l!o
z40l9e$gay8mrA{lIcwob^fDD%Cll&DQ5h#Os~$bM5T8JZwK<}6<002}nY?{`K^aus
z3Ur1HIxK4}BhAxg*eKJj0XF!l<8unoUUi+&uCX2ZQ1i2zISB#{OaL@+-b<SFxGXt*
z=;;SiFB{DyHw74b`flt|_^ARs{%&2G|NL@y;&NCgEHO1c@EDbCn!&vB`h*kG59Z-R
z?QU)llWzUPnJM%UrOC;c#Trpy&aZ<q@)v_SS%xfZFY=|4L&dpT@vL7<C5OdJbOTK-
z<txby{~jtvnG4g*z{KzmH#u2}T|c72aMSRX6r>>n5|34%K?GJek51)DtNWlXNs4I>
zf@WP31VHfnXc1%F?KoFU-yMfV0XjF7f!uQNBuG4oi}_Q@q;al(Y1CGa`s5s@RkkzQ
zSSUMlg`{31mD3)5S#f;7ph-dt%L;U0jg(f&@t*wWgd0U^-%cpU?A-0m>DKNS0DbXY
z&PcOy)5OgG$l0zqy%JAqVX0`$V1uRG9EGc=l(9#dPp|}B^eseEpc$#GLGx|sW<c;+
zgNBeB8Rh?u`a0EtpXp|Z*3f9r>&-e@PET&O&H7Fb8D8aZTn;JPkt-Qet88wI-dl-x
zE??&Q!1w7eFto0flsuXK<*dY*?9f~ibzYIcXj1rvtURB9X1|Ag>%lV!d0|5O&H53C
zRA(%gKqv4}7KmcL^FwpLyzfWA-l7<B{{-$f!kf(1{Ni*ssdfOw{s+Uu#797<wjKDr
z1RhlO<FpL7eg!B?8uJcWVFuL7uqUV3B%QWeIxZ_3I4X(QNSm9)EcWnHzWj3s6FpYc
zV=5f;dy;cPIq92)-u-={n-Z?kIrMKVGUD0G(k&WO4k3}PI!5i=E969GSda=Lz4v=&
zKl()oV)<6Hi;L+%4^}<>{-d1qL$C*_Vy9;Flipq*(4tyIEi;I>61Fl`(bNr|jEU+O
z+@K#fE$#iT_kAd!n@l9Ir`;`Mf6@KsFzL<7#l_phCqckXYO73E#<#blKWBQ0-Xm4P
zNN*+DxuofKzGC{=6%R?>@l5Rkm2V|nzQlweXPG7BqvoP4donaS5)hm^z`$MNHAVWS
zb58nxJFJqlFoS0?neUKKM1tsokzDE5W|mql@)HvNFZ@^!MGIsfydC&D{V;r}Gm=g+
z3m<~QmYbO%fgmF%=PdwN6EDTDM<Jh?j!z_r5$BAV0o6*$7%ZI?m4wa~JIfE<NW(j9
zMuBo>-l`dya+pbyO==6ELm_mT*j=G!qB1tpG6lVARHr_{Kp~pGn<$YEGd*-mj!HQ*
zPETI$JJf%X%G?_zuG1XMO7uiJt*1a<%p7SL$7n{iGuv%gRL<C!vkz6sc?N*h3nSg}
zli`VO#h_uZM*CQw=a_k0fu)tSoQxdpY(L07o+Hc84yJ1_@@i#TGV!GJh^iKL9Xf{u
zgRubujNN|DJD4*KDv>z(jAc^bkbqI=nhux<Q7MVGZ7Pt38WbJX(vW|KXH|GEKU`Qk
za(NalL5^<V%k+rcH7Wx?N!*<t@4}5rYFb{of%&;CiyGT#Ma6eP@w(CuBIl2B(v29f
zRCoD|9DE)55+7SKC)lny%tBoJm%M26&~U{MGdB*L68X3|lYvln(E>}ilT(=*(yA0_
zqLrv`2XqdI*@D!N3m-E$OAclOX*b2ge^t#4Z26mr=HfuGzC8TLx5j!LR))PckVrQo
z;K7_U7A$_0B_3(0UNkh=G=hM`)0cs7ZDgFBU;|rCl3=q(8-uc^uf$96z28KpmH^fp
z3b)>*obpwcfXLRAB1sXRDDxnjs>rL^ise{mBDW+IvmTJF8}9-0$4gB{9ifx$t5%Zu
z9pLE?K#e(>3&l6w<U*p`t~5^+xE$+~CxA-D!FGEU+%ATau!-*t+<cdq^8_ZY;eNA#
z?yfw&V0#lKZZs!VBla;$!(QccxV^HV=3=m++>7&J3l&v4K0{6iF|qDLb&#pG=izO>
zG3>OP<Zc7eR2f<}eRx{eni_v?)Z3_rZ)21#bDkMzZaj)=D8Xw>ieCJR63vJ&b}DOn
z;9O8*F*wqw6I9k`IFsXwR)(95*xn~>BWqz%${>g|p0&}J+*j}}`Ka{?Pss|5@2nmy
za5{Y##EXg|av75)h;-Rg)8s|TNdUjwkdQzhlDO`MQQU%=6B3!>fC?6RE62lLwo;_8
z5pLK}FA5aB)1e~-bZ&+|5YE-xDS&}i0W9!`gQ<o{)#xyh)j-mDQjqCi7Pq35CyW6M
z?vBUClVJ4}&c$S`^CzM*b?#u-O=%M<co<Eu0BJ&QSZ3$&pxkE+;Tp>r^F3*q0D4;Q
zx6LqtHBc52w?NS8`=oJjp%u^v{m@WzNog@GD2Cgn^Y>lAVkx17(mNHuvg1wyD|D*2
z&*<xQNO<1rgLxDq1~e)RQ*o00y%zMbA7LdYnIEyemyx|=ydP)6J{^Qx)dBdcZAA_u
zsQRh%9kO1#f2Vnw22-Z@0~2H8MX-P;0QlPS(c<95Z202O)q_rKqqzf2$Prf*U2<j<
zJwWjE?QKLws9=uph+8^yzC?UGt{r*B%*UfbPMGVRcVVP@(Z>P04@+RDV2)i~mXr5x
zEwkgwFp!KC8V&6iypR@0CV-woL)mg&598)~%vJlRhTKtJZ9j#8&36W3^iYfli7<t9
z){Mt1RGFaXlXogB)2IXUrQgi2)Xb|tnJfmLssj<<H25+|NUcrh;s~Zvae723w}W8?
zEl#8pXS3J4<T;%V(+{8z(7G_YZ9;c@0+Jpz^QHH=%7epF*G5QjdcZQ%cMF*x(qFG;
zj<YDn+FUJ@vIBJILc_R^f7rIpWdTL&7lM0nz_!)Sz!O=W<d5R%!IK|UBUjnT(eHLj
z5a5;2tg&T~wWYB1FQ^_kiFT)>L2c2Z5J#dSZF!T-ImN`94wNT12?}^~!BjG1!%2Ce
zekpXW3`XG6xv0)rk~PJ=2F8)rENOkcY+(Jvs)y<|4eZRvJiF>OoQuJ#gYWw@rZ%Tj
zKyBSyznYjex5@oj{0E}Uf0WhRR%m&|r91CKve?r{vv}8saWpvBd3M)+8a0A%44(b?
z3Dy+c08UgZz*&^Gwb=A4>1C`O0S&jbm;i>@1n$+kjB8$w7HuIp_&r#BQ$lH+xhd4i
z9nd1`ikx&gy>`&0W$NJEnnGIEe(@N})LTy%ku?u2ETf>8!@XaSyK5$CRTIU~^h!gJ
z4g}RX$EARYssd{XqA==ke8|Uv_=f9If5E0k@}=;u01f9clU(+)V_ZK^H4azaZ8LR{
zJYYhG8*hIipnqHn74Khyp1;F$k0N?83Thi```V2S@LtIDu519?Guj6;jySZ3yu4i7
zqKS)^@NyNbNsK#R+fShlaD50~i5Z(EptuSIACql4Jd~LB;!Mb{Euc<pG}v?*$tEra
zx9evW+rgY)X>^Mg4z&mg`{TavD^RpcIQi~%)6<XU$9<$HULZR{tP?=?R|ZZC&%irG
zHV^2*_#82um0l7yl*r@ES|w;yWD6)>rS8WO!#d&8P`OV{fKns`RvmRWizV$3`wXAQ
zL`pm-<x&%~2TK&BE2cV=nT?u5v6Ea5#6}slw3@#wINV&Fx7p>_9dzkyeUr8lH4|m~
zmcINvpgbk5JqvGf;JsN~sTK@3k=aP@XnTqcbe@LSQ(=ci&5x*=m9xl`AV(_EtY)e%
z0J)qv0jn72;#VD_Yx18%V%`{h>U;*>ZFavNb7wif4%HnPa8QTbrLz&~3J|=w0T{m~
zYf*7|Hz3u<wiTA%2vhc3qfRoR<r9u^7swF&AT!Rl+Zlk?8|_$#OH|5lcb7X5{Fupl
zwrv6rNEMX>J`Yf^-)$UOY`HXKOl6;}{2)c^%ixnRACEV|3rJ}BaLK6DyG?yMO}Z^8
zzXqk9kog^n3<%;SZr6U9!C&NNHuCaRRf5-IyI7J4k-Qwz9Xj=QAR>I9JiV)M9c_kx
zeG(`*S!;XvVWU>;I+_r+db9ej0Gv$xiT!ZRHX&q~IJ~b#UQ2bO7Un<p6<R!!Xk~eG
zoFwC5(w34jhtpe4Hv%<V)~N<BL*)N@P}nN_tM$;-tJ4};`89MYi<}!g+UHrrP_qw*
z)+_BzxPBD@x**F4kdW33Tsq(r{D%twNGb#Kf{v4lDc56~s8*tLPGH2}p4FT_pmWPV
z13b_3nW*VC@Fo{CU=@`3$zFMiAjH1w5=%~U@(mi*T^UUbm9i6qDwd^ziOV;K13^^P
z0w(UBc|oAcyZ_Mk#obOU&i6&zuYaR8@YwNRe&8Q@xC}4Hwf`!|5r4z6|Lz~&@#uRI
z3~`eLuh>0k$oE(7hYxbU0mN)Yv48W*|GZZ+vIpG3_>ce#00sa5yaPOI{^xN1<A?t_
zrT@80@J`6TUXA~;xc@(Tjp)*A^*TqZ9<bBpQc1p)1e;DB(@6ETMvbj65ULSA-Qm%l
z(2wf9$uN2Z_vWC>ZtdL_H}&Gbxc2|;WBzi$ul_%|_~@|fyqp|g5b@gqlPhjy5%7<M
zl6YNH0hPH|Raze&D3m!tfQjtuhyLfA`>)TU3c|))G1`g3QB7fM?@{b>-v2(v+`Wg2
zvYbLJZ~Z{Ta^zu8G$WZrUJ)}nxiWzHcA<IACGa;Icnsb()+6H&QSFY0;<I0%1XY|I
z$xsbgek9Rmp!279?S1y^cWa~fQBIc`sjR#_#!!|!CJOd&S=Wa1(K^xfMLs5A=vhP@
zt02Qa8#4__wP%{w|32Y={lLGin1AKL0l=>gUfWf^suo~*_ZI&@8TY^b4^BV+-!<Mk
zjfh^v&YI`>q25NBQ88Hgq-drSMW><5e|s~SX3(#wQ5f+QxCnkTZ~_ER|8(lF>EWjy
zp_EfA^jBj4ua4zk-y43QD)$ctf+k4AsDWq%*DRn#I)a6}O9>8h0Xl+^cAQZSHlHBe
zr?AY+x(IkL*c|jGac`k#<91^+x=|Vqy;F3<Q?sCraR#bGHJ)Mt9X+a1P+<9k@dk&7
z^jvR2&1#GZYF50oRH;8aG@%9wx>x8AQbf=i7Q`&``0tN5x%45pCZ&SpN}^&|1@#vj
z?7K>h{$Q?Ygro2C=?)>+R*~M-RaB!tmZCB#TgO5hjwY@_f|GD@y$sJAI^q0=&*qbJ
zvVwrjcCB2LoGEn*%7Pt6!-09$8J`GHWGBBt0f|jan#J7jJm=p($fN}PaVNVoZEOE;
zAGqbEQuN6Jq`2i|stqg)h~;h&4#dN1tUjy+gV}o&n~H+o^3uFiaE_0z{Lb07M)8WG
z+6TcQ)oCBlxoPc*d81b6VuQT}bY?)}UdiE?EdkFU^dA8Tjw0On4`+K{^*#J)RjnM<
z>RxwZsY)8W{i8u(1B3Vk5i2Nav7c%$1-RKGIZ%S=#hFzGoFA@r=(%62^~AE|vh(#i
zyKKob0?n^aNEJ{NcvsTuj8v=tnTToqcE!GX<uo2(bLZN=Q8jaBVPV+^iq4gj7hNiY
zpqY{eT*->U2MGLlW8poCH$@8Mf4ZmQ_ndIUhsA4a6mmn<b#l&VB>y9S`maAEtK0*P
zkF6)2SelMI)#LVY`F>3>K5c%mYtF2A=kulzyk7<bEPpGP-SxD^Q*>VCywm($7fLtK
z`eLQd-u}R0cj5+Uc*USBDpSHxHLC^39yC#Ez*f}&6s+4?eKAVUT`x}pKKP&)%AbNo
zSiY5%QeBzo#Ehw8QE+$J=yt7YMx6Hz{sDP0g4LTs{_yGelMmn@Pr)goM(yu<<qzLy
zf)EMdP!PVTZYIakA}~mFQ{AuPylwVdoG)~*@3V@0Mw8bt`J)X6I6A&j6jy1pOI84=
zWZaKX(mh!29ITZ|Qa0Hx*8}U3QAefNE^)fR0D$gbs?h#{1brJHWj)sB_37t9hc+y@
z)|E;GokpZDVBe0Yj5T|s=z+~1Z7?7p6nI2muHSh~U)sZTT#=EPNiq9*GiiUab?gN>
zrn1@cFI-krWya2Tdc+Muyce%Dowv)+=Ic*&e-))Lem=revGy9J0rD+@a50y`4}H<R
zJmysk7rF_8Xk2yDT(d4q0adpR&ZV4OyCo+61S~%~KY<lz%r&6${>Xy`cc;lNzz=p+
z%7y)V1O3Ypn;^pr9Fy%$Xr73*cgA2T&3|%#|N5PHtRnw*EH9O+u1dNW%jBi$gx9)E
z3VZ?XlRIljShU-)e}&R-aQOLj18XVKom3nHD?R<;TGDB5)pDwzE}&YMj}E&3{8Dvv
z(5(l6r5u*)jobqNFlqJ__U+2XS}rt>v*g7C(9wBU$8)Z=zfKl}xtZ>zmvI-tIDf6s
z{aj+Jx?`u!h%&)ioWN$w%4**mr(MM$@qPTwwBM2*;9izTCcH6_j(3_gvH~30(TUxs
zWWufeeLQRx6Q8C&OJ&L=5oIOW8&BJJ)7q`NgTB^MS8hRHD07*x*tVn?0Uoskg%U2W
z%e$?c^1>0-bn;FtMOC8=WzZH-(__o~9n)@-Kwls2!JiyN1P(mDcI6Jwqyk33lLu!1
zN9Ou}p71)&KbCmI>*iv59zpxPW8~NSw8aJ_qHo|<v0N&1Z4b*Yf~#j{Ta6*Z%Mr-4
zbEca>9!5=5z4uha?F|r$sXt3fYfy`~JC9ImpS|2t%LTF&@dQfh_9|ABdNP3l<)f;(
z($?MvT8@lz&0hu1*WxVNZ!Wj-sTTP4R?3ECf_87`Az({e0vFrKq+XCCFl;=HlM}Ap
zyfB5-iK?d|&p6<cNrOUBk_Ex9clSmL+wn~DRMZQ=0f7M?EI?>75i6w?ggY8kQ1;Fb
z{NWRm$U6Pbx$4AcX#X$E-X1jI(trUnTDR^+vzRFEk8gnJ>2m9S%XTvB&<Hmrm5%8M
zCH1FS@wU48cBT~*tBj4G-d>##ikRdt`GV!`vs+r=1j3|wIfU~slD<By-7OYTx0xw4
z$+wxY8w~_<+8>AHUU-xRD9|<RHM4K_y!mbiK5bEld2Kt~p<B7#-bK(2lVbG^0*<bO
z*u8F)^=9uEvEDT*>#t1mN(%xv<!OiA`Zi7~qZZDjTbH^wPS#*eQ3Jax5UJbWI;4LG
zHko#pm}Wzfi0g<!`ovrlco9ksRQ|~V&)T0BZ<TcGcUQcu76>Am(Hlr^k{EGAfkWE=
zkMfyN>U4yS3>+<g4Tp(pMNjW$kH}}J=`T@$Kal`Sjtgg(=xG~ABDJXcBsx)ds!wOv
z`7E_rx53)7?+NzfDeUebw+Yaiv(!6jXjpzU2X>&38|UWh{Td)Gp0@7pc%7T~3_{={
z%WZjk-DW50bnB&C;^~W_1<>K=^6?HA&kfp7Z%*AyPXox6&aS=C+nbPxWYx_9VjPrP
zP|qr7?W?fUuvq{O27<G;>+tigRcA(&{%({cMTkFL-FoW!V44W)E!gw={Y^i6ebrWf
zKMxx?#t@0)b1=i<ptrx+7EqAJTrDuyK;7>DoY>%a?7SIAH_oi0SF;ivGCXkv3Yq_J
z4_OBsvX?QC$SYnWs_iJtk;mt5Z#YiaZAEwAYf(1(`9;-En(H{c>Iy31H$>NX&^7Ly
z<Z3d)aTBe#2#Aoh(wBQ_un_ZcEvD*bU&<tc4k8Da1lDOVjcPTX0>R9hvpeP4U!kq|
zHLK+|p>H)wMTxT(;C$n)43u+zpDg=UaAAk*>8zUiPFrIm0T>mgZjec6)nlDxkPr^;
zg1Z@*RsW~L%JD6U7?l+6%Vs|~L1OU|=+Cuf>ao(%#XV!2w!Yj3$C|+HWF6KWMWHnA
z7$&utW<=bEU)UH)TRFyi`3d=%YN$FXE%*e~Y}Ky+kHZhhYZqd;9L%RJuaB*IKPa_>
zWN{-vS)9c3)b(^sTwpJQQBQZVRmtyIKGkEkn_kQ0d~W8tmL2vL<NJ`N+sX(ox1(jk
z@*^4EYg>P!df^1Ken8Dse9oE9emymJZGN@h!Phyv+tA&&4_4|J6gF1fT<rf!bALT*
zLQ~z`j&Ck2=~guHDNg^g{G$`tvAj58)&DW9_H_NZ2%)R3BoIOzRd-b=HlADsk~@k9
z6Bshwq&qh=yCtv;-{-NX@6TkmBVQ_=HRFu-F2;z%@8?^s+s~4K1qLE|f2jCYU3Y=X
zR2Nk!b$D7j8i*EMIG{Xmp=S9*y8W=shkql@dHa}6_k6ZK4a`<dc)f)->PM<jTxMN~
z@VjTG{h?y`!moe-02(y05K4{N9CvRIw4~a39Oeieu2$I?%{GQrLx`C^igND_w7jpH
zaBJ;qfrs*5PEMlF%OT_1UZ~yD1;L7L!w!uYm2;m>DiVf$KvqQt-;S>ATK>Ur>Slu8
z?dcr*L0sD@D!Gz!m8H&OqJc(bi$(;rZxVF%d3mnU3_1d)#S>t^shTRx%ZM1Bf5z3T
z>v(|lhYd`fPp==m$&?8K+C#j#rTY|dt<j8etrANe9Z9!GhOA~inQ_9m5f^M+)dF~;
z3}Ds+yK=@8o*>F9B{SesT{jvIriwO7*?j8#zL1+o&`noM!}O;BeqU9EgvW7ND{PL6
zLP>Oq{gE%$OQr09e7@2Mbl%**+7$mj{~Y+juX(}9WoqpWtxCt|*{xpNVP8oPGbUF#
zTPW^m>&%LO2G8`h5RjNJwHvkrx!^9zOwrmK@Zv(oEq3eurao_V7VlrQ`dXdoK(Mpw
zuex#>9rxxJFMUF(;YGi2K4+@(ZgyHwU}@j^dzH(5z*1{9=h{_JoPmm4T$@-Q0d>}i
zZY*rj4m<@3YOHWnA$_&L##Y01h1!zW>0E#0%(8^m_hK3DkosAtC=I>k?DtX?Ie!&-
z?&@*s{J)bML%C#I208IWdC`KsYAjwHFC;WmYp36~{a@>ezkg$x_|uu#<;feq1Qn1d
z5V4Y03tanLyoqx#&5`<V{}V`6GwwOTI(l5Ky~A-Af`Yi^{D%fe1$AeRM|0WC!6rIY
z(~?2qHYa@3Djn`4NPi?@@j($h4X~PZLn0XXxD~{C;jWusK57ik5wu8J*F$o#D(zM$
z)>^3xugJ_Bk4H_N;{cy>zt(vtzkC}UWIEdX-D^df(HZBt>%{}=0>hG-oMu2ceimm@
zBUZcv2E25^onoyq9i!7&oYuN|{rPB1Wt4Rzm)Z5=D4NIFKCOE!3V6J|!QmV$(6t^>
zshD1V1av~bgW<#Ss%`9-AaVAnxp#~v9Q%gS*ciK&6XePMe@MjvDuW%pw~;$o?;Hfr
zH{mu6j<4nC#T&Kr`BKh5U02kH%NfLPPCKyxqx)%^BH{bTE$#S0zDPu$vzriXmQdNg
zfl;0`cK0qMVqw6P)r~6L!3El(y_u)P3?!Pa+s7s7JGq55OwybSUv;l3liWCkgEZ5c
zR%F<3&Z<r}a!by&)ZMQgugk~2cVg33tuL~#&wH8BPRUw(D;RASnmz@@wEhjYvRxqD
z^44W<_EIIGV5YVM2>lWQ$tJ%PFC?7Gq4?Iv`YprqRzMK~&H`qs`40acyb~R-_8sk~
z-;_tvvsE{XQ|E`H(#Za<UykoXwbK=V@e{y~Q-x6UcBY;7J1LXi0Yh(l-QrU|+n(q9
zhXduO#Bp>!SUxkn=ztfg@OCUdm_7D``$UPNVDZoSS0c&9H$5KI`IsOuwh8^=f`0ia
z_h>oi_YuqG3FmR=MaPrWy8}Bd9#u6NL0$sVyt=(3A|pSz>@GS~I;@SFy~^f4jA`O)
zT}}e^3`U*iua3L*RK>llQ`l=PY}Eqdi@~8B!%CXYhe?A#?LxH_PXcUMB@6Ng9N9GG
z+Zcl+zY*cUyz(n)uB|5kR#IR!YyI|ge+z~FQ(=@OGb7+q>y3;k<__gS+-@&HIcXd~
z;s5INO_+HDJpIAXpH;T@_GV$RYB_E!z-qA$qXtp|W$e+((<eVf;2%^91vBv^v|$N{
zUKJC?*jN|Lk}__$pzGzcjC}(uR9WhuvHY$O|GNV=RG0^<2H%u46L7Bqm<2eH?}Bz_
z(j>+TCX~N1p9txCU!3D@_N&_j3^G<NFT6y1`=<+hKbA7M(hZ*FFGQ`~yl^`SOTr{$
z`S>gNtgW!m4{V-o7`M6tL+5Rsl!;Hk_C|~1Sv0OKTs9DGPHuombzq@sgNl_V0AZFw
zyXk@w945%)Dl8Y89nVrAi@{##T_8bPi6}k=sY+p7-0xDNxKGuj9i(I?gc=#!R0)IN
zya4@>$$kcw+qMDsG(f@WR-X_C^lW{n%<IVm!HD?cm0l1ZsWdk%ed`)X+~Ic++eli?
zf=VccJVF`H)i*Lam!Pj^ce@!%5<aN9Jw<O@<GVdyb$zjs!}GV}@Y*z@sTNRO*Rp6N
zY^>d^Y+LCTD;NN}ew<>|k)K8Ke&0eSk7n)kBX{wlV7E1>#V`LLzQ9wyGm=qdR|S7f
zS3A{zAAA0;)yrh(N5(Y$#^xN~Afn@8QlD(%bkkO<+iJWh_FR5+yu><^RDF>hQoOo8
zNbB$4_NTAeR?~y~M9==)@}ndmBe-=iLZ}C_S-Zf7kTl`8X$~7*pmuJzI^(+QT0F5D
zhm&=?o>#i)iPBg2fu7u0*=gm&BB&RBu(-nS?y|g$2&jPK64Xia*W*k3{88wul1DiU
z>sDjOZTjms%1VouALSf8g%IMMPP;nfugIl-1qDNXX+cK^FBTZp`ozjJb5%1G$khsm
z+*E*un{)fw{*sB*+}}=Ic|*ogN=m8@Osk+4tN|`YAb#Pk9jiO=<n6#8=E$F>%<<u3
zXkDA$+E3V3!a*3}sfa|T0f5$InAc*#8%+Ef9?ZB@5dzlUZGPB7z0KZ?&L?@%tlMcc
zF|zQ&tQ<s!y<pN}fh69EAsfs;Ug`}TQL$dW7>+ly&Zjeuo7<J}XuJ+kwxiufxucB{
zt{R6;Yz=YX1<L_M*{IKP9mC^%^6dizeJlwEmZbi7wg&>{Q;$G6C=LEAt}8R35QAI+
zo~%aM4QSeSW?237KpOqQ<*+l&zB8`32uL_awuEpOUUfV=m3sTrL#6&7cfZK=Pa2%I
zd3JfWU%aAJk^NyU-(4yY*z~YULC*3cs`pJH5Mpc)G0ZIE;K-JmyN!rxNhd}5hGZ-=
zRUr4`p5wy#8ot>sDTD}*@3O5rKQdVxR9%d~cuI83%OXPIYha`7St2RnVNv+Lc+yEI
zxr%bxt5tgCCxF!TJ)GI#LWH<2Z=zJMsm|$rsi98fHx&9WX#a2lQW~HGwr793_MEBw
zg2+$hN)F65YJ`LIqXK5(7-NJYJRl1Jv7}UkAR-lA?=n+ZW8nIb>Sa1#Y5B|i-|*_c
zw}9j~4{eu$PYP2fCH$5{cI0un3)npe5Zu$As%ZB85!DU@afYJZ8>H4-mtAK#$cq>>
z1JB~lU_ow}AR-oipd|k=uIpFW%Gg2p+XSs<%g59SDG40Z_piaqHJsc4f{A4Vy}tuA
zS#ISek#j4{*mcdUK3)BCDEm^Gyx*bb)n&KcWFzoqRa>DFi?O+d-vL;GxtW=TZF;jp
z4<CcVO;gmWpFPgfFRVG}s@jRoB_mgRMXP3BZ?{!8)MvG>17WG=>&*vjnq31KMZ@mU
z#Bg4K=T}UBwSyxJKW{Hl>8`L1I<c_n1KmNqg$IOL5T-k`lG^iP-sqi7SHCaSe#@#w
z`oGwF%eX4j?G1R;L1sX)2qjIV5v3#*L=YrIIu%3&>25^Dpp}va0qK@51pxs8r8bSU
zG)TwZ`&~CW=RfECW;`=`zP#@{-$XXgexCce?-kd&*0p{Q2mU*b1)I{v4WL;Vr~bha
z!WZS)zO0HdA&Ppoa;L>leS$&b%_o{SMc@rQc(9Xa9(y_3Z@AR&#(CEl$G%xAS|H#P
z0kB;%J@dvdWA8!^z-VkGZhJ`GKjfSC-xMnZV3l6lfm!OOQx?N-Rlq2O<vKYk!YF{7
zh=kwSLZqZ=-FB1fSV;WO!~nK?KRG78m0aXHSu&mMhbaV^4JMh=bngLbgYsc-SPP3a
z%Cn-~w@Z;o)IDWkQ6u$)WkI<9U4jK&+$O=3r|WTVh_~vC$YT8ADP1B4rZRk;C(xEI
zK*$C4smKppClo(*<vvr0@sm5R<Nn#_C^lr|Y|^*lj_4y>=RC%rnb#^s``YWxH4f{p
zmrAmke*2ksed-rRQ7QHpH3>LWB**3Y@5HgxRt$>G&$^1Us0HBgw)3^8Xl`Mqzjd!}
zN(Ur<J<wdfDCeaY^!QVAyp24;V=}dikn8A~1Red8=R+sa?`L>3(DLLnVndM#)zI-4
zVGjagL$!ETK?f^e7p#&8l(_Qi)>H4JB?>($$9I^KRW<bT^;-J|^_;G69_ELyp4J{9
zx);#g2Q^Nsnmf36@e4Ve|GDG-Z|%>Gk$w6FwM|;}4dqWPJAE}i@rKH%Dr?$bCY4LF
zg{Hk~CMMl^Jf4dyKrZHGW3%Z8%0E8+UoLI6%dO&0Tt#1NFx)jCjcyZjKE?VOW_@F+
zZ`?hNXml*1w7uu>sUgXsfOJpwt~;uX+>Sz6DPxuh+Gn}pb?6%J^R`RT%lXO07?-9+
z{NYyG`le{zUpYC?CFxG<ZA^RP-Yw_kZ`GLpc>B3+5)BtZo!EVo)|RGd1XU40)m0CV
z(vS*w&!f^(@t{}mAx$0gsjpO=rFbg4vz${Joo%-XazB-rqM=ypZ#-WcW9IOyxCtXY
zoO-<Q89c{J!f$*y@W9*KXp;o;Uo`qwwEpLh{(mp|%V%y8LS3V4TQB{$;E+E(nE!dJ
zZgszc?>&24{aZWz8;9UOe${mz2nROj@-KZeF!<J%`~96qTWp8oX=7K=U;TssT&sWE
zA8s~?8cp-w_~~C??0>t!zaPKEaHxX>=H#9D-#jYK&&QQ-5n6?z#QER9=o|O&r@vx4
z2^G_kRO5fP+@CJdAMdGuw%qq_=YO``cb?pTw%k8k?!RuGe;n(7U7|lR=>Is@|BU(m
zVtDb-miuSR{XQE1qqy{+^x==K&L6GSzaP8*zoid#7ovbb;RIl<lH+3N?P}<&(;j`A
zj2O#5p6^UELb?;OF7CX-Z@!V1e=~QsXd`m<Gr4*|Vca)~uYdXNopVGq+803e(Gy9!
z_&>PipOY^`s(gCKQMhrr|H(4AF#(G-=G~qDPWSz*PaRzcNh!mb!@yB`#-V!=bsea;
zAfXfdSYrg$0s0c^t9|x7Fawn~_M)#3kXpG4b6=*HmoLgAU7mI|$7!QZHqD|7*Qt7;
zK>@dekR0Qmw*WQF8?zf}1v-nLI?vF{MpCnv&55w|-(Kqg^6iAtncStoUk_wEFfYy0
z-A*mMxj5TjUYpktCCrXnYsw#-zT~e1<R%WMH;)j_M;F9<Of5Q*(gg5J(@>QWQMHZA
zLGrJC*dnO{*Z@N?7{GfEd;(f8_r+o~a#D@ygY)~G&fu0ZT*WekN_AJ6Ds|r^r(Dc8
z>8<NZm;6qL`TJ#k&#|?1KCpBhjv0bOO};{*X$H;1wu2pXn}<R9&qwVxV!&@Mj+H;c
z?%|E@V}0@S_Wrfy{J{_6v`INV8Kwms>G&n<`B&H#{e>6K0<kJ%gT(A!IgJ9x99`RT
zG1ZDd_iOT@QV!Qv<B={I{9HezFT7@sh}Z2l?Vt)%uwFC?Ys@wA(sZE0-F!isr>e<i
z-TxW4wPD0sLX`PM>a{e}8q}q$-v?AC+OcqFrL5_AGVX4p9NvZ09Np3-Oa|r#C})|s
zk0;bX!B1TuH{&?9uUueu6G^K?*fZ{{5~B#GqtLXw4nLf&OiGBLEuPL2X93c$-bHP$
z?+xsKw~}vj0A|s<m;v;HW8&T(sF43Ux6h`A1{IUrL-84|Smv_4?sN_qtevga0wwu%
za<(+bTF@*C(GTzY#QhsnzAf2ug7IVxS+HjNCkxaA(6j1_r-05G#&$=Tc&Yo)I6uk%
z?e$tRLFiP-`f!m76B@psj~d3`&c7EeH#I9pY-vI|oainp?o^eNC%ik1$0BrK4x)G7
zN~)y`DI!0q_A&hr4BELe5WHhJ<1zx=o0N@NJZ_eE?&Ce(%H7;v`qhF5c(h!dVY1ng
zZu!uaPue)O+bR9n_WVJf@<PF|c98X2{UGZ?ISJfQ?UI$g0K3)K{af!Y#YMN4tod`d
zQL(XC=M8@-6^sl<-`mp|RJt-#JTzBH(x8Rt5H4#e3p$nF+|YG=^UX-G79~%=)m3g&
zs9<s|hnNF9V`U0zHv%-;y)GMr%T2fszPg?nPA3dUn|xtP2M=4x$Gd|i#O!6qNd!Jc
z4{nr}<%w^OG`TkRnHDa!o39Rtzv-GxJ<ue8Rk#U4l^r^c^d+ASLBKY*VCvTzIy#J&
zv*NPLz1=)sIj)Pb2MZ?*=i9se2V4DRee`R*>qq0K<EP2%+{dCQV7uCwYx|s?Sv`2>
z=H-&LCY~W%+g>unz{;BOmldXo70<Xbx-XjY-~H})`I})yWUG%Un^?GWwX2*#ysuBd
z_cw1~bbIZfz3K#qjya5b<lY`=6`}2%#At;b3^OS)&zd<PD@bNQ6F)*BjJMw$)E8!z
zF$4~sHl6EHbVAkY%b{<4-aQw?B;z;`UtR;#pEXh%ZOgFJ1w+f-*#;Ea4yseGueNng
zdb05fHwsOrPA%n^Z}hHy@O72HU06J`ZtS%1=vcM^u;*<x%$M3aCs9vUa>}MY)d4MM
zE@<A?(6E8BN!AFt`kOb8Gj6t23oTquEnELIwX_2yA0AR~sy=-X;58T{j#Ih3?DqoM
z*)q<Xmr-FeWuf)VkWTAFihf3ZuR{u|apqunu>GuAL(1i9DWx^E3zY@9qRDK7F>Sjm
z)SF8gn9$kX|AXbW5<t{_FN4BbGFnFqqtx7X*Zqe`mC9#@9BX2I1)i4Dtn@5oO@KO4
z2D<>hgm-KzCkOM8*2Qk~v+`J5_j4}s4BD0#G7Y0#0U85iW06$iPD5|`>a{JG6wL?c
zYxG-W`9=bGM>~clTJ1sFNyp!tyY9to>8y+S8kzEqj3#VV)6keOmL*Hnxt0u=AqObJ
zU0t|^PZ%*AXMP6E%T$5ka*uA+(}g0TNb{n`vPmec?d-=_J9OcgbWR4S966yPG15m!
z>m|+8`%=cyv}nG1_4P{mO2|M}@EbQm=OC}^zj2VX`km_2vMPP}+tro>m9-xC_gX7+
z8|O4|d$OBmiA7k4{V(Dp8Y#4Yhg4zzx?T=H2<=zNIqi6CAO1}PPj7%UzC{~PKAB!@
zvb_Efzkw~7e?XOu*?nTa#6r8K{`50wE?3Hk873+(8>sHk!)Q(#ZG7CZ=TX1#>NRex
zPk$d7Dy{QbBc@WUxJ%I7b##0m;^tJ3K7!Fjd}T%0<*Ie?4z!L=tV&d8vo96?%PLG5
zm&`v~#qDw38)k|dQ86hTq14R7dpLV8Xgg!QKfzR^i1i^5vRLlXT`^jRIx^kK2q%l>
z_2<NmzBx^N%#OX#PQi=yI-|QWo#z?2bJwlxQl|fwwETq~daeewq`fQ1Q?zgwwCU!e
z-RSPmR{D(}?4bUVvz9CmS4Ym_vblPCh4Z=XY#)cgXMR;I=weqho{T(*(Q=ed8+o|v
z(0=}z)wT}jCPCd;Z*C7z>up!XOR<+7gi*M*m&5pS+e;eCH%B`3@_ThK5w<8uY7boj
z)=0Hsr7~l2TGAkN#?UBVkVvBcjSHaRY@PS+r9lf2dq_M$OCh<P4;hmVdyJ-Tey^?X
zhgi(5_I1TCa&A8q%D6c}r<>f(%`T?Giad2wGB|8b?H)WQOKFg#Rw=7m=rB=yeNbUB
z$Mn#l+~hu&Ze#Ng1Qf{7w5y6q{$h@m=BYspAijk@S3DLq6%6@wo2J;d^l#u+hJX>{
z30<pt3nw86)Ye!b9^pQd0)kB4HLUslS{gUOZq27?W0_0}a2V_T{Be@%rp3k@E>(eu
zGIrBg{2L{}zwnB`WF2o4P<T<DmiCmH`XwHRTz!+;e1(*&FC50gK5|xRV6y&9qO9p?
zya@5yhf)~AecPyXiF>I%1US0_xDMU<1Yto+U!l(uX?!a}bJvWD#$PP4@qlvQ>ZCSq
zKN@2z@Oe%Y#V0zY&BMRIbS*DM<+XRw_&eLoKb#2WJQQ<&$Ifb3*LhFt3094QQ<0SX
z+>uV7Ywd>j?4j^iiSs~#hcI@H{e$brSM->S?SJ{<{@m9Mt8W<uj8ZL`%-OZLg3q7p
zbCfuP!mk;?Iykr54gqJTHt)%PqSWF(2fZ2Vp*EpVKCUu+=`5MQ=+swB$yqq#ir?tp
zGJ)qeW|dPn-sLn^86FeAIg6n#b%5Q?<%k^+Z;6F!t8{u!I1$nhoGQjda_H3sq^^qv
zYfutW+g&^BnY`6F^Fv#8+xD~M=)``^g%f)_qmWMqM%Aa15z;uBX_$SevQ~R}?e*P*
zf)=@mH_L6>RRirUzcspKul&ohv1qG}JvvslPZ&SKKG{2oPBTz1fxV!YvqlUdj&zMt
zc&V24@Y{l+#{PEI8E=fXF9((JGwE4~<u8YB$}F!Vf(kPbtQ{lr@_}yDs=EBBlEm9_
zri?!<a+!bHmC127S06Rz<X|w^_4N+xmEK9?*`7j6#F3~PCT<eqXDf3aexlmzywWf1
z!;ibqSFdT?n`^$wQFEhZrBlDZV5*LJQZxVY4=xz`^Y`XkX-bfBpvHA*+{+rBi1kRb
zn;Uot)=Eg~mS0^t9y<%oRlXkGCWZ05Y2cAj#)b}S)yVAE9@Mrjm|yoXte^KN>f$R{
z3sTovY7^IAuw9$*;eZ%#YDv^rU_X@+I0SbQBvq1H+}PFGjoY#FO-e>-WT^}IWZisC
zn?@~=V_P<FVa>k)^!MAWj#C`MUXvNcY+*K?WXjb-8#7_0WwU*bLz$vwS{h??xYb*!
zAO)Hm<P06jx>2ReUR)TBGi*h}%_`U3$#fub;c)7BKWHKA<;;ZI*wpHwC(d*zOq}|O
zH2+-my}=4k_9U);sz1q6=I}YTV*^S)8~9hkyLlPo-icm#V*km^OZ@S@_t8%oMGrj<
zxgqhu>&TgtHzMl}5`{25J#v+#KUQSGk=o~UP}VvweZzcteLA;BaoTX!p%;_O?kLzK
zST>`d8!SAt@^|X(EH2wC$cTDc2*}d?9?ZJp?9F>~F{3vvp!cr|<nm~>VaA5QQtKnT
zfx@xRH_zq|5GBp;#%NNEMcJC9M-BN13)$eiX|E)h^xByM6W8qR4#dcv!d<CZ^pavP
zX4$~zz0R*bln@n(?Sod&Pw%sIH;sJ-bNc)3Ax|HhDb}56P3pu(mO4PXr~MQQeY)l1
z3rnHEGC7ltQ8zBNhCvla^182YtWM=L4MIcpTVk)(sK*C%0~M7T8Zstvnii8Xx=Yg-
zcJ6)<$R8QghFMZtzTG?b_!wxrMzoa=r5Ee=+e~No@0qlb@H!|Yu;J{@)&7WWW0o$>
z*7!jA=DJkLdL6U*G#6&Lx?rqqLpLMOnAmB%!nb-6{$k|h7Rq#3Bj#0vy59g1=!$Au
z@qc<{2N@x8XhX?;=1q{f{gAL?U_L9jqQG1IM4avbg|@||)}*T^Q;?A_SgpXB0~=Pc
z!=!Sz`Wt@;_`NB)>e@DdA3XR9Tl@xexUO99c2m|q@Q}vEPAj5yG;yYP2!zB_GN)Pd
zd&xJZF^tM%pegAc3$&pRu@@CP(xosv1|LwFzDvtFY!`@<;cI0-;~)_<E$h1dt+wX>
zic7ILxT)nDvaVlxSGnsxGwCCn&yP<I-~E-APUxr&2&8J%-z&25){mkIDaDz67SC#y
zWDcCjT`@?gj>zwi)N~yWG|!r^rW$Koo5pCzYL~lk04)&o+zu5wsvBjAX;@BMe~6bF
zd$zoU>0BBdAmZsW6Aj1AhEJ^vuJqD5<{GOHcr**J&-4q+&z+yoZjs@yDx2;W_dVvz
zl!FD~>4UcY=Hf{|J%YUD4QdtX^%Y<W(so&sH%^caBS+i0gww$)$<JLWO<jCeNdFB?
z^im#u#@KQFJ)j$`JbUVHhgJ8iWw?4D^X22SF=$Ix=x#On2wkC9E2CI)8<)bkJo|vE
zUE{MM2JAHA9_O~L)zu=9+{yHd$}{Cl)4zir{@i{3afJEmIR(R^R5|~<<oB6b*2hko
z?nLBiSs@&+3wApH7T8zBHA19N75y}>90w|sj-y)k)46Mr)<l-8pN4#6Wg@z=aO(|3
zB$N`b2|%;U9L9NMWKATeyn)Pcf9`Dz+btoOf@bW58&9~Bfy+kpdvWNxATkVQ!a^o8
z->DxZ2F<9tVCcL>`fq?bs3nX_Jn?i=?RFa3ZYpjTyUS#VH*~F!z~dnUDVFWl^*+Je
zAK{#MN=BEQb05SI3*t)?+x@D^(lZ&B@ccGJKcW8Yq0CBOhBLz-q2b|itmEQaLtDYQ
zR|WGg%9Zb_hJ6WS7}TS0JQH!yZ0B<M5r=lJVJ`!bECa4TJ6&<C?H6U0H^mTXh4Uth
zuh=<tWZvq1A>Cs!`BBBZip(;{VWDCEL!oXBLN#rs8;fTjJ1_Uz?rZ9r+q#8lBe%gL
zL}D>S<K@<q?cNTqYV<*>hDoRI-M8EScQ?iF!R<EnYv7dT7c$DL*~@X{i1<sIF1LBI
zp^U*ShA;g>LB-L&KzP5bB(v?Tk<K<ZOz2(vZiYegmYCD#2l4rdl#J2z+0rH<bBy2$
z+u$Lp$gQgfu*xZAR)hn07{E}^^`(jHKV%ij54ar?#*zx-c#j!klCJ7*hwZFz?;-mM
zD-EG*=XL?oXrXT@k#7PW!Njp3Ki77x`o$Mh`x%ZAGw4v9#F;jR-|8@PPt1RJy5I*+
z)K6|zmp_hayL!WTAR)uHbQ(AUjqWUQdhIYUrz=gVK!mI7=_P;q>ad}Hulzo0Iy$Gh
z^QncSp;^~Gy`L*i0-l-Ynso6D7ulAN_ha{~AoIY#3lZd}<V>WiZ_DuY`2G9&yZcY&
zGJy+pq}^=XWQ3LSCsvktO;kZf-m*KNW$XJgj}ynqxhpigBH}J1paPfEiatw9o%YP#
z((3%aINt4q$VcIp7d2B>d6_a1Q%={fWQtf5t0ZzwchBN@_a*&in?}zcc4s2R#+kV<
zZo5^ubGOdg&ZV&!9_b%?9ihkPu)b$>s^5iNNl+;eAyV3#F6VFaLE{S-(M^)TgAg`=
zAiv87c16WGFi>|qJ~;hl8qwcf+25bCa}DIH&;m2q4|!yemSIw&=Fw|0d}*oeFHOrg
z$|pFFSbn8t8~U6hQj*Yv2CFA7QG$+2o0|*lS%6QqhKoI8{JzEh@>i#{x6{dDIVajS
zu7cm^F>FgFLmP2js$4nvs76fD)P4J{Rd=Ig@Y_!2;UfR4B2_hK5OQ;m-R;^LJJYKJ
zeuS*)X20**;`~X}A%79PR?and(qy^CGwfK_N8GU8?k5XvUH#SmqjEP3D!dM5onN>q
z_2`b?57{bzdRNkV?pud7UdMioqgW!hS5=bTY>K2ohAZmkyGOfuZk5@wbtM1LmXhCo
z;G}e;J2Q%?U}Xb0lGrqIUpQ~{;uV8ypAmj}19CY(dsJ*eapU3zA`M-_Ip5NP`EP-r
z;t@FkjTjiY{=~&&J9+YReDWvJ0ue=qi7!limKX@PgWh}R8~sUU@ZYYFcDvl=a|L&6
zzBV1Jq!K_#(B6I9{09y~^x<s-L<Ag37rsP!tqSlXm-X1YupcmC3K4hA+>>)!4}4wb
z-Ef}@mC_tPLTb(QLl1kytnzCqgjo4pK}E$9_m2Sai9Ya3l84ft{dS{z=w~l^@gG^w
zYNB716SLIy2ftk8+!2&zU6KDrPt1RhulwK{<g?h^Fa4^SZ-^lh8Km3x(+}L|;rq;X
zzkE4jZdGcqmO7=S<XcUQ-+57@{b05C`hP8Ro|7hnAFtXrmi&N?I@k6qtR<h6;MaHF
zCU*{ea}Vj&zmw+v=DB_|C&a4oup&EosK0E^Of$5vG)!ZEpv2}j!2r1)-;BrEuNP6I
zho9>htiK+r|Gb62w8Dm|aEK_2t?6aH><`kTaLv6ZtbcoszjTp*|M06p*25at=lit3
zHrq>;z*n5W?fdDkn4UlTj7Y)VhhKN_KL+U^gY;c{9c|Np4ATEA4O0As>KFibNV`dZ
zr!Y`Sjj=1wm|xqUhQ~z1Y4L-2p%6erWYVFWAsIrq4Tq4JBOp8eVJ<KP4$5o!8A<gV
zrr#YADS+X9y+h=S{b6YbH)%Mti~}M6N6XXQW8{7$cwg$X7G>lxT;OCC$mNAh4kf3g
zdw{6hJLM>@-1*8q!qm`0UMpP=eYhNEA72q<hof5eSd=R*f<#ga20hT=4t;!@X7Td&
zL$V3qVRpYnQVfh>dpVrxn|TCfBLx^=Tn^c<jUSu5)n1}%R63%R)y$OAT0qtWa+shd
zL8gt{s7Ja*&mk4&GTBYPh0l4)L>E0^j<biUM<(djhs{jN)<%Kgl*U{o=}H9??Wtg9
zqO=kZjRGBq&V^P;XPfgxACh>Zp?}J=F#Jra$E<R9V4gZD88|(aC4xigevz~AutG5S
zCH)z%xz6P%q0&~J2}}kZ<NNC{h2gO=l+IqWDb0TGbF<8&*d<5&BWw__^RDHLJ2e~(
zLYUQcy}6!4SF3q5V*<I=PdR*Z0)Q%+p9^N|R4B3%Jd6{%C1?FC=qxfP=XUQ)OdlY6
zoB@wA4|)Y7$D4SEym&{S=`sa6<FPBTAV6Wigr>A1*&HTgM;PgH<NPkM5zylI@?<Y7
zXtwcue%H*MAf+t2f~*gO{SThHb`Hj*@)NLM16>DSm?K>S+d|EZY755tukqL)*|<|Y
z@SLL;Q$jHjpkqH(xM9L!J<%$u@9^q8VU;4_v{LM)R`J#p*6t@C?Dm`yr;e14ZI~&p
zc~3~E)_V1{5IX#=hutQq)6D>HsfpH!IS(V;9-|o+^1ZF}xvW}f(i`toW+jtxF_4tr
z00qr*3C4RTvkb@Zkq;0N+bEL**3$wUl^Pn`9s%hR=+Q<4%`U=8t2e@fphGnQg@#{o
z{wNS7Vfx1zS=|QH*kEm!vokRIMuTU(w7bx9Y;9V}@q3RWc{Icm1doa{i)Tu-YYqw;
zDsWGMj>A6ZjR-2&UcKO3J&9MG*4mWko1bx*e{jd@c44&jt(SW&GYVGR2+5Z@#~eyP
z5`odAWMF-Dg+lucDkXSxcil?gc)#^hf;7+q%?*0817uDc(j9J9u-OZmv3%AO3I*4Z
zUNMXkXU>pGQA!&Gggqm(7ae4PN2RnPK-x^)pI$n7WXDmB>#t3u6dy99US_?WyI@ux
zC!fvKK{Q^D1qO~i5!sJUCptJ_3r1Nja@&+VVRGqFRPK@Y#6#`*5Sm6h<KSS@vQW%W
z2TF|x7~jVwQd_(|@}b-nFUCQp`@Lzh99qNeG0Bd(2;$AdTGktd?xy5?^nu;i8_06`
ztuI?*>LP4Agg}+%NiP*{@k|!fwiQ=KLg=>q$20w{B?4&UVttV7CYFr}W;J<@HiQKi
zgZkD6TOJS^PtUqS*ZLLc-?!){p%W625tx6oU%}JwH!eUA7AAAnfC|J|r_FgD()7%0
z?kRj4F;^30&{WxBX{ecGc!7ZpK6LOijCiSmvV%4g=`hqLe2CdgGFu1TnOQo<&VR4X
zAh(4a)U%dE7*y`eE6hu?+pK1KPVDS;xLwFx>;yuWo7qx18_taa%<C|rD#ThCSP!eK
zvA)@dAB<8N?S(l~E-bmN@_Oykgo3Vcn5O#Ra8n}G92(P4(aUU}3gx;@3#wP=oi?Uz
zJF$!2RpViW^-Sa4p01noHB;>#%-qnny>=B5uwF=qDH(Jt48+#@54AK2d4~u$KC*6C
zJ=uP{orNkRTb{FDHbDk9;N%5Qa;hpM&XWsxL#BaYaM$GsJ}#HdfrnF6As9{5(p#;G
zSM)@SWYJD0z7);(koovs!R3x)Q2GpSK^6(k_t1y{atpn~()y68ORWVA=X&GAKciyO
z?a5ZeFnidMZ<i}foMMTKc(!r<KJ&ZM&YqWvb%4bcW+|p9*;lSiV%U9n2Omi${LA4f
z&%)b5w1cy=p=R!qjEcVp!TwH;AH99+tqje-J+`NY15RJsi)=IZD?mCyoH?cZN*9`;
zMWM9;q9~_L^Kk3-kogMBroiTL$HuefgS80(>&pXd5&Tt&P{y0^wHpoLO;yj|D(OtZ
z@nI%8JC(^h{Ax!whLGAyuE%UhTCa}IRU_k|1s>a3y76FF14($<X&a-L{kBn4U6(+%
z58KFJuFwthwZzJEnmm3zKp#+K+cRH-3OE5&*>b~A?jH6CMkSwUb;25$$f-K2QR78R
zGZxvx)0}@lnB}3>B)NXLwGGhLCOm5o+&lyxF0pWXo1jLFD;~EsY3a_@Oc5d#hKz7<
zE%UIugY1iu;y{9Iltp(QluZ!*qz7AfmzsPjomg2VlV2`yfCxy#uHlxAXYCI}f<G;M
ztx?770!}KcO-X$uw-l-_&%v<RW5ECZ4~~c{%uC5?S?(TDTG%9JuMSc-6~v^3El1(s
zq^GG@p(3G4H&nH1{0QkhimWF`CrI}wGjyJEXWmsd<a6soi7L`QlfU&k&R57MK3J7L
zV*;jukW;0WYo#|n^cVI(!yWAhh)zaY$%i}Q2<)f9{g!rE2bU`qw4<^Y#YOMNYBnuY
zq3_Vo$gVu#F%e<E-1%W+ar0iXtoOlv4{0sT+;!8lswp`p;)7%1by=3~q1^K7ZNDn4
zn7IR-$p>4!pyzHFr@?+;I<g(OhQzGU_(~9#jqC+hj>~dC7~-3F<GvDmFY2?|@A8rw
zp+X&G3qo*_p0K~mMW#rr{YVB9?oFeaG~CND`ZyA6R5D-vAzQEBsHd(D%7CQfna)?x
z7}A{bC&w;&J%Rzw$Etm3sGt(4*RGu$R@Vcu)jDF<^eJ%nTD6pjZp}^=SR3{)<kO=W
zWWUX7V8Yls2&UC1>1sl?ev~u0bQrfcYhK4uZs5L348@g(bbkg~c-2CaFdcizoXBX{
zy7WfT>z!0@AVv#53(_%XVemSSvSv91AM@*z8RF}vL@|<j-NyM1k#3w#aA~1#%;0ru
z8h#ru(9URV;}r`u1?o=$#GsbO%ns!Bl!plz<C?6*PE5DV1G80G!(0rRsp3tbET^<C
z^a7PuBMccRc-=}fn`1S6)AisYBPKT*c>3RknL6~(K=fF+0l|bNK)-B-7+c^5I>98R
zLX0@A{f*STE<-Z4et6BDIZ6u1n5bAba4{SCFY^obkE@2l0H5VZ$tD9pYqQ4~r_CMm
zzAe}D?+C>24UW`v@N`u-FmR-3rkDHpwOp~eJs$E5=b&)wL8h#c6|IQdTxj}W5>+|`
zh2q8uy5=<X#VKoz)B>GKyUB+9!PcuXTb2IaVuSY$S+1D$LKi7`hu7T7rwjFgF?BPm
zz3X-r$e+@d%JOr~fV)p^@OwyGmrlm63#|n*H2BpAgO$a$zRZMLfmmD}3@~=-ch2sI
zi)^C0_*CBQ$(|A)f%Rudn(df3-gl+X^GwsH19Yy7SK62F08@_2q=b=YSls`lzVX$M
zqD)x!BHrab{is9;Nq51Rv`?6oDUIHF(^48~j5@nxM0mTF?ov-FtvC(MG{4m&MJ27X
zk<QDV1<rG6h4;)fi)i<{(s3ppcKuSGfBg$OAy%vQ4{2=Psyh+kRrLZDCEeog+=J<-
z{I*DwtO;jAwnssNaJ-)HWyCs=qwiT5w`{{%Ju6j8Q`4(Rs2qj^=71D)o4v<@O@zjx
zUP+LNu$X*t$~{=ifzcKZr|%JjnOwGW<)1EwDid9j&@-tZlQ$D3I>JB{$}quB!znvJ
zD5hspN!HwtMT6ytl@e3qN((=M`m{S4{M&HZelSSg<nir{(!Ay(#`}X{{~kkppsdD2
zU=}9?T7&CEle9J+*E`)dASfM~Xpk+ai1ihs96!sT1@2E{;LMd06C(YCT!soW@@kVV
z8`Ht=N~CJ?d#f_9S4t{o5KW>m^{HyiNQbU(L!Yo%Jgo1NyOJJ~M0p)WPY=J8iQv;4
zI4Cv(91`E@ybb(y!>X~*i0^o3+m68y{m3LM4@gp7!+`)7_<&!b>&f@ljtrl{rlrig
zP9~jy<NdiSy~uZU*-q^(#vA+I>d3rasJSS(ky@}e>)JF!XMMS;U@^P?^Mp(&Cx^}I
zEYInLxx4v&5qqUra}|^l><TK@8$zoV*nK=;U_4s}HYKBsawD&oxj5)9ReB*C{(b+U
zQpXzO{N0T+!bm>5V92L)mdu@bQD7p`ZgoJotam-N%z5Z#A0EF~y@(r)d^UJEZ8<=E
zRT$rY3nl?8xz+%I_3;7WcP`}%Gmbh@FyJ<97Q50*agr8a!}IuS-CWoRlA@(s#Wl2@
zv*VegpMq;fX)a4YyprFivoPgC$?Tnk4EC$%2NGunh%UW=P~!>Cg)}hCwCt?BnMm!^
zieK1D7n^%Vq}U3NZ%|nQZ*(MG(|#ndGiLFr9^3|+g+0cWaQMz=l8+!8ss5y5ujEcL
zg_oY=?^hI+H5F&vrk@TFjVy7o4-i3+=?&dID7{%IqT#c;1v5vv?J=YD8UwIA9<e@r
zOtW%Mda@Qoc?AOxsF(zJqcosBK}*g|Y<~W!=|d9NpRWWeA`yL-kI{ZRmi2O@qRiY;
z;0L%w7{-{0LgL7d1+`{}Q67z$<kS?)0ucup;J-!5H@S+<08a53sZd8B_OtI5{$ARK
z0uO{rZN}oGmO?G%IKK78vx2njL+XxKF@ipPd_^mtAo%P!Y8uz?iWdycz;L2aUNh=*
z=U9BjzUHOD>pL?_IfO#FOe5RaY192GcGmIz5?pr4zP^Fmo4suHC^5}e;SS~==uhi6
zgpxIcriXc#H`g)O5aKsatw`6v7BMQTtuDj~t(xh??Fczh4<g>Q!I~DAZ0tJ@$X3h1
z*lp*lE9u3XT*Y~aE|YokVXz^O<MLF;jaYKkQ=*|Q5B=%&tv#Afx-)w@jE_vIS9%7A
z5$>)dDTv>Zk+3p;02mArO%ZM3$e@oZM$_MC4hK8N0pfx^`{6o=090Yj9ll4xx23_~
zvt;#=AL|S$pr!=|sIC+k4NK{yJVA%WM^|Dmj-<o9H(`>q!+!Eh@^3|n92rz8c}%Do
z&s~R!$Uatnz=ocWub_ZQZ?v+4OA0flcJo3+yFo!VuI%bsjWBK>%%y0u_FtzvYjLBm
zwRy~=F@nDa3`U487F?Yt(7l7z#A61C#&fPv@~7q6U5et8zb5KQ&N>Kwx@kG~Mxtmk
z9%fEg0i8v0RJR*s1Le2<lGG2h>gv$j>4$`ItGXr7h5{1=KFLqF(5B}!^64!*&R0>0
ztJ&5*-A<>LXB5(qv$}9KyKnP8b6k@J8uOl{e^juBQR4ZhGyOd!zE`8h!YyT%y%L@-
z+f8+3*=xp?vNJ*Sz)ChMr`V2ymbg1lpPvQ--7|qT-=+si$A=a}vJ<Be(vx3~WnJMb
zWryv8?U@7}|ALC2d=#>NOUJr;;Qu=vGws$Oe9(bVvq`9%oPB)l^1`L-`r~Jv;V4K=
zOFOuNfH<pOnfBPtsMhZ+bIM))`95=NKtyQ0{fm2dY<JO8LnvEIKu<c0NRN+o9hd4f
znGSKAjR~#<ogGZe@1fp-+wku672syES(_cG2ksXBjJXcbE0gu|%BPy8hU)4GZ>&J$
z%ZFQ~lj&f5qWgs$r$ewVpOX@*&Vr}t3Z_Uu1$GUEs!AD%z&2Y&QbI<z3G{C!+?p`{
z9h-69+USSGE3p!jypvvMvTv7egzpoqUsD=6R!p}q7Vo%sX@MO_voz7>sqKnA(XL^f
z+p|{_2B7*(ncpzVt0EU69sPV(5vfEGi=urDjaV!)f=jK`;(T$qx5s>k=OJX=lLZ!f
zG@Wb@<*k+%(un+2985BvaBmGTp4v8PxARHUz)-Qopk6>K<Cj<Z4vz2LhymTcp=$5?
zVi(9NYoI|foPs`JT@s^ZH{f1UM4@GOo!V*cb$ni42{?IP7v$u(6C;d4!cr3?*K(Ev
z-I<-BlLW|b!4htJtLk$>`xN$}X^5{fY-fzNtFwmlQk%VV-22C^wtSgd3e5|F6G6LP
zc0lx&GkKyOyn0|mq1`1dP|;K}=@nZ6<n@3!wfP0D-ebN3r{xcd*KUQY0F^}9o)sj{
z?{{&$sjlDx!63_xW77t;r-gy^nSnA=`Df>An?VxXs04yZK_#HVo?eOf^TcnC2_GvY
z4}^)h+epP$C<3e}@Q`aghVYi1Czw>>>2|3)W@09d0Tg@!OC}hJL_1c?zg4~hlTS^v
z^`{_$uTR+km}(STEdN$0@%u>Inb&^yXmp9Q<gL5AZ!h2#8Y$8l<LbdRrJp4Qgr>6W
z7N3ZJzDvFyZm+bsX8P(CoO=qw0Nzi^ok!ElmWw{we2P)c6{#enmkvG1zd6FL8Ya4j
zpC!F$v}<a`Wo*&Ayx&fDc|$70%hQ{ukC(>@QleNbCypYkF7^~#!`YUhsWNBgFpC+S
zJM=ALg67lu$gJlks7x;`j8ffDd_Zz&e+^CdnGA<}J9j^CFew&$=(7P~>1-qc2Lr-Y
zGd~d+iU9A0P=av9GkA~C>fu?_OY7I1-f`3nC&yJzh`H?=KV`kXbN%_#3QBH(czY(%
zz-(H_sV9z_N<WDftwEez18lem9$&yac}WE3UY+JSO>hK_+N6a&R#H~uL!&;i*I5<i
za&|i8@8z_T7&Hc8bh9T|xr=J*^YU5+qE{kBAn?1>0!AkcV@gC@07StB5oQl%2sR$Z
z%0>y<8$TeS38gUdGkIb5VDYK~7`{W$N5GihPi0!dv6F=QSxVI1{qp4}>cuED0|*#N
z17Ft23a#BpEuJaT`z(ZAY%vEuXrP+zeAehlZ#SfN1%OG_8HYwz<{5Wa1Gq#Dbi(kI
zBct3J*UzgaTv84OaHC9i7XSRIh?s}4c9q-JOrUH}`4j70T9H3|f#|`Os`1}PY{}Ek
z@d+ylXq<mlakq01pr_TjYCx;b@2?&K0(ly6J{vL^PJM(U?4>J3{UX(9ABBe973!6K
zQ$aRPjU!8)FWT4;-C5%L&;G(8Pig3T3aTD(OiyO$qG1*sy4tl=MR2SM0YlUh#Pi;8
zn2!&x;t*V@Bw-50C!LHUwe7c7){}ZyjPF@sf1|_-#-(&^bQOtF>MR0Iv}{>#oL}X#
zVI7*np@5oh+>$90e;pt)Xd8dOiJ;$~7&AXMx#BEmmf!?YLBpTv%+gkpd(DLjbwpTA
zwzJyKF2WQNU0*@&m7?L-cnA>RfOx(d(Z>A)G9bo%aX3By)`z2xngEwt@Qk7=PFh|U
z)2s{8Wr^3nR!P;GxpO`Q+2TMdCcmyAFvP&gojSJ)#wD2NBB%n#Drabs30-i%&x|~f
zIZTuuURnS)A#@6+t6lGBoVpH<8&YS2BXQU6lj>YiK%Rg6oRfY0jZ+tsgVW=iWW`1h
zoeBEcI5Rw7HZESh!gxr?Z~JkG&5jV5^Z*ano)A|bCb~{n0ug>ydhrY;1RiON4Z^@i
zC$1>E^|bAT#u4{0*zY^e77xZS>$wH>EWk2wq7n9z)87epshDlAx<}@5@shsj&nyb1
zg+ONE(L65b0+Qq$!2X<y?)6|!R~ex8neIG8OUZXU<;>i~?ZM2-J-z@pvypsiK2h9W
zBpt?^d?(s{H;>W2$<!Q~_M4DYnNT_14mV#PS1lH&r6Ol$DR-J`zloW$#(T2)Xq_k%
zD}*h>0XTJn4^6hs$tVZ4@Rkhi*UJ=|X6H358`@N{q<gc58u^vGYyh}?1THCEp%g`g
z%^F$`<MDP5Z{{Qjg*@xlu<Tw#vb-_PWm^m2MsQN@Y6Y1L|MW{V8QEel81$Re*#7bw
zgWcUG#l~z-F{o59Q#?CL(ve^qC%a8dEPgl!mjg{B4|c5$nYuEKpR@6$75w}jp8gO>
z>#O$V0(^P|B5L*V(Ex!=;EzpC-Ep3mKdo^c<~w!9tb0g;se#eozQ=rcj{=$;jNw#0
zky9smWPs>|=ze)WQ9KUIJjo~jQzZ-|4p*LqY|sO?hjLe52~qjxXDNi;*ysC8IqdYP
z1Gl3CNa(wis}ct<)V}vl{zaJ~^a7Dc0TiuthTlF3OfLnt=9BGbyYfx7ulv;ij-$Y5
z_L#_Bg@P-I4Zd(C)1c+Wlk~t9{El+$vU;2=yGLCVZZSdSW{BQskfif>)jQmn_A@Z6
z#3bI{Myz;WBb91^NYS+Dy<<3Z0;T4CmMk<cU;Uh-Qgl~T{@8;(zLiBZPun1XOE+(6
z;He2<ys8tHhF@(TNBQFn>+<dbca~eQL2wIE89Ja``>sf^#Bl`>V{;Ab5wgz76`|EA
z6)2f~e!#-65wjW&D#ZKm)vfNF`8+CQ_0|sri6c9wJ=qF59mqFqW<}c7wIWcolU}$U
zTA=evPc<+QkOtgYb9r|{f-!voV?@e{wr~sGpN{4_@WKYQAU1@^rf0ps-1x+vCfiT%
zkD%I8NmWAT{jCr^e$E{#NJ5Sg>yoZKo^>dDSBDAeS{q0t0p47&Evq+(>-S1NL49|Q
zQ(5BaT6`>^rTVGFMiDwpMCf6Em6epi$MFS_x)85Bs!J49AY2UN+7(8saz*0OHZsP<
z=ZP>wnmKEIB88%v6QyyhVC4?Lt$Bjjr@nFXSP3-ujpVXJ<#M^yP6dh_tV3X>ldaxC
zF;k9n73>Km<D<ie$ZZ*KTZ|tn0*niR6bzO#iigrqWweVONP#VZ$E`rcm&W$pf?-dA
zIjBZ66ZbGIcBU*|zw)h#9>0gL{=Fa?T}Qw~q{KjZ`ISgpHnDP|T9a6NcT|4Y=@&8)
zq2Bnnx|KS?N@;Zw^`%fNIvHgrVpF~q&EDIoN4Vla$XT*9b03MF*G(Oxxu_1&-@;6T
zbb*MWog5~8ek$i!EZE`B*G=fK+u$a(hq7v-7`Sdi90H{~$JDaAy25oj=@3dp#&5%o
zp1=2eR@K$Xe`!dT#Fxgli?Pqi(g|vkGo87}9>oHf5~OCBbho{GAu%?4ISI9(q8Pfw
z#y~5~INSX4#`@&c`fXD$-<u6#?AiL2ui$A_nh6Xg3q)$~++AOqthxW|f#<+=G>1ie
z<4&RVth)}-A8z2g_m`vrI^{S7<4zhhi@`?eKn2;;v}}zY2f^Z4TLhruN#%|w_I%0!
zsFA~@r{FGa)MDqg7HOV_lrWMC_Ny#YNlX=Fbzzrdj_gfx)*B!a-kcLn`UqaN`VACV
zH2uVg%0QB1#lrgP-Zv1tYTxWe^mY_`8_YISG7-};OvK%QJH3ZvJU#>&T#{88@iC2<
zTl*PV1|w|y9)taRQ4#G<&Z>4HRJpb(G%0HBSLH;e$>&Q75N~isA&+^{hgx;ig$GK5
zYWXHKU^=goSIG5^^-9u_ll?iS`R|+J-@}q*g=oKP?$5Uouqe=!B7USsoS>%QTwTHH
zbI<IvsV_g*aeOWutKTL5Ovu?`DoZ^~V{auFMw9O0=1R9;lfaPIL8tl#Rl2n9mye5Q
z$`V>%=b_?@Cf_uLKCt@3EhY>Qu$PJh^C!Szq+%sJI46)ZX<EXFG!x`~M%<a>JYXW_
z%^rt^=+uTRP|wD)moUt#r?fbz<E_V7N{$emy}Z8auL7<l=hS2FG@HjL6usSD+;qsi
zIz&Hcy?XL?I^{tOv<mMkvNl_uE>F@hU%PYAY&^bmb}Yj6e7ITjC3{Pm0V4kCOlQ<v
z(7D9ZZ_m>XjfP_DP6rWKAeDVi`d8&=Fiy@WtBTy7aH_>^9Ey`QC|5$mGmM8IX(3}y
zFVN}Bd*K%kf5~ObntK+%xe$BfmI&Vsgn0%#97jPd@4`FbibwJ=Gsrkwbk02pisCG$
zGfhGpMx0Qa!#JIPz>MNwus~PdD=-r)uMYdmX3KdDjsSDwoscl8yo}J=u-)KeJRP}p
z?TO$w+X$)Uk`0J7CAR%Co>SKo1dx=0*Xw(PV@2a&dLZUXXf~m^Ss*fB8yD>k$(Nw~
zPj8{9uV5JY6|D~{63PHCV4%sFG(nm^2T6vw!ycsTQ6VVn#u~wA?E&>>=v8xCkc`^%
zotuc<>s8Os%%lzHz|Ks$!!9z{7%q)7RqZQnNH5%hH4s4vlTFX{hqqb_pwDNLonxTa
zc4+-}hBqj0+*pu4vTLZ{fgixy!l@-N#dNNnqfIDm&B09a+$M*bDh$5MH*f;6YyF3O
zo_BZ2%e_wIU>9pyYOkMYG%gTXe=tdZJN?Pn@_ehTF0!k7s#gjsP~Uiyx^am5)eRDw
z!B<cRR#etHAr#KZu~Wn15}U+e!H};nG27;`J4XX~`l;!lZ`E;T2@*xJUJ_veC6gXr
zdYMpCs29=73NI<xxS|-EqNXIk{Sq2G@WF5_!eV;au$z0iC&k#P<io}J#{0HIk85b_
zY3@i*S9>|@JrSnc3X)H#M!x_AMi8nj$^r}T&J<1;K@OvvQM&9wsv)<Puj~<AlnYTW
zswClmgD|3Az-robzzKlPg)*vSN2T-wo@f;Qbi|F2_ASXRiojM37&P^{SpSNH9)tt}
zpWhzaD&}>uzXf9<Q9EB3W(P*f|D>!BD(7a{6KOEK47cerm<O<WBst-g2RKW<4ErwM
zm+X3hRzJBQRO_NQCF&JB=59i|r(MEW63P~Py$9V6K~iTF4sI_{#{P;sGig)@8lS_s
z3r!NSU!Va=l2N&mcTzwrSEp!5;Db*zj6=bxVfz)2hmHX&d#Au1n8O&8AR_sc#hCB(
zW!H9<zdimN7ohCt(Gw~$x6W-NUJ#4oB2Pbsf6(^gq17{JJ}<5c8>&&}OCU`>HTC#p
zEKE1Ex7LPAV5;x)JMP(hlE!rQMk?gIate^m9m(Zidvjp0&vB-<2z7$)D#QAm9@D%6
zE^ZEz*QzJbK1-~^km64(=mVUcVix{5m69G{V0{>S*}}BAUay_!302_7Aiy*_vD<O+
z18=tYie!Ygow<V1m8ok6@w*jJVcU&~BJmO+eRrJr7_=2gct75eptFN<%1?^hp=vvI
z%0V^$x8klz>FS^-N?L9lAr{kvX@bzz(;Z}p0|~L3>knyyiX+Q9T>#N1n67~W1|>pu
zw0a>Fs^XhW^)FU}N-qM7!Q8NzmXOlVL#7pcs8yjv2ety^Plm{wO%~sHc3zADN)_Jo
zRYIQecf0_Y91DfWmg>nef+1^)Y-b~<t!tx`z`%$DO@}$W34jvn9XofuZM)<g@0^jU
z@DTP`P4;E^_u}(oLTzE)K(M*4c|(n+lFVZ?NCeZou~pv(a?99uWl5nu$WfuZDXUdp
zN^v={V2f?=EwA*4zD$l_`@(@#InI(h?rYt@3=l1hDNm~<nDWqa1C}z=Ii|BYnNbC;
z6$_)!?(UP}TMOWwnyakGzUV>>ll3T9ErIp7$L!q*kow0ah^xo0j5|Mv7~CF9+nRe@
zU}Ng-R2M2Q16?plJ}is9oSLR<I;^eO^zD23{{5P*=hw;moV#ZNO9j>ft`3D;HnFw=
z9mr{)e#D29)n2p_JY%F@@0VWf7<#YsP)v$DlG8v3$}Up}mnw+u^YdUj#Ofql@r9@}
zO&*{PA4s`S3LK$&wo=Y&Z^w9rOwrGR19ASxLKxAyWZoh$lrN}&<d+WQg6iGC8YrQn
zF&bw#(*;?wB*7ul-phnZEw2H7A?ZnY<&H=}>CV8Q(Zgv<T_;FW%dKlmfhu*JoSTSb
zZC+9XWXKf2*?G&Ak!<Epy6#7kmyr7+`u?Dvui)~dFq0xiV2CKryab;lu{$697jpRN
zzA!@}h=`ZL^v+XbD8erbU_kn;3Ph3oZ<hhXM{fgYO!YyXdXPaO6r38UDuv7Au72_#
zMfBp6f!7AEu>is?i%KrAr)(v26?G4qinUJ%489lL(?CplDR2ydDk>DxML<0XxQ_>S
zcvSG%cnAZ|^n5Z8a34Q)WDRLd2iE=V?E(jH+jdKKIkMM8VzERj&m8g3$$<>ln||@-
z<@3Krxvm?qT%DE80^XSzAH!Lm5h&z%W#F)SsHg6O-ALfri}9mLVHGEYz|F5h2`@*~
zPtW~m08f^c-F%L$us5ClyGLM|UDH!xxFw$Fg)7#Y)2Nl9T}5|y|4$_nHvQ3X%h2&j
z@6H?`AQ6Q#NjMivTI46m_Yzl4Wg0+5I|r<|suy7<q4y-N|H^njIx+4Z9-wR11IekP
zo9yMA7R!gCvrof3Y+jiAX4zIpbTiSz%)Qk#^eW7-%E^LwmjdDr?Y>1os7iQK@5;pk
zP$t>91Ym~`s&iKFMI-{?=8@Ph$wR@0%E(Vss!3<v>q-d}YXNg9>M0|Jum`j~`nIhB
z6ND8J51`vC-K-Ikqf<}-f<pVT&()HaYM@rb#KoNa9tLsPeRLzVSVFW;o*pw%t&PH8
zl~v>*g9!yI02J06ZpXw%02A?mn6^+P3LzwLd;TewPy-Mr8hVB~4aoT?(13_L74W<n
zQuG3_aHF|W-&xioB1I|}Zd}AEN|5JOFeL|`MC4l-wT_5qK)&T-)Hq^{=5pvDrqfLA
zk%!d#u^THHX62GQcaUa;-z8|4wU39Q2U6<jnI?smB4T2y<ssNZN^mZ&2o-2GAoH<r
zNInYi&q;6Uv!^k$O~QEU@t@YA>hX-H9i|V_BKRSsh3&Y;kwg9VV-bbR20f7T6*Xtx
zeK`tY%?S*fJ2grn3r~5G;$9-wO#?Gcq&8?b)SbWqWkS~zMtc_HeO)(?vH#3O6WR~f
za$zEF$HMqWr!7BVzTBxlmTWcEfdEZj44xM8xNM;Jxx@wm<Z))cB2o@{HGpZPYyta8
z36Y@~CrIAO1FS#X2VWNhxY(1s+#YpMe0~lpC1jsp0$FI*S@E>S5&IMQ&!0x70n;L`
zLa4=YDB!A0ZQG>*R>T&G>5ijCONolDf1YXn(XZSnp|K<8qG?p^*A~#gUt3?IqC)wN
zQ|CWW67HeZnAq!ByVMWqn)!e`MNsWilKZnzP9Aw0C~zv0>4n)Hh$2dRxPgD;1A;VT
zz2#uKb;crW8;kP}SCBRTq(?I)8?$r#@CH)YH0%S+4<c~FEU@>ZxuxST!Vo~ig1NrF
zIF1zbhI?fRCt%ciMDcPxd-)qUgyG6#0}ttZwvK|!)z$Mv=b`d{`Pp7HL#r<rA$D*g
z!iw9$^4h_LEnkzIAY8?i<H(={{D^b*`Duu(bM%{h%CXa?_OGeEsd#(<z<dJ(apgPJ
zIRUp<s9T1S&EBNTaOC!S1DZU_)|R0yjQC2YF$IUyT7H%+Q*K_cfZ!{rxE=0F0Jvca
znM+_bDWJE#eli0xMk3Bj+jdpeLnf;fvj$lpc|wGZTKc8hS5GB*qzJz2)ok0&r2<_`
zyZZ#LqA^YIej!9L7$5=@Zv(W(!gucRm90<}F>?2e1SwO%=V<lXFA;vA;=CnivZ0!D
zQ_ncza>&z^7C^z!`PG4f5PKUN0sG=q=b4+0;UQ3nx}6}p1h{BJN;&YGn-3${4aTE#
zn3h=mf(McjyY*a|ADFW%FfM8c1+|lB2((dUF`gP(T!~5MnII;}59r&0$0ffYd1RZI
z9*SQo4oJ>S0%4yNP)(P(Irpb}5GFs_e%vECJ2K2_&gIpeZCUS5*AKTL=?-0RS<GDh
z_E49N5C+QB6C=;ymwAX;4atV;49rnH8TAHP1Y{|-B9yhAxzG%ulG{jT#0dV_9uw&>
zk%YR^L$C?@*UqaXylyUlTD+4<59#6@fJYZ0gQ^RcatLZZqgWERQhSlgSRol_*(69&
zLv49EY4SuR8LC`$p!3}4%J^{z{)R1gEGb7pSTF(2Qe2Agf@$v$ELLiEf9I?8^hcB>
z1D-VZFXxltgj`DnnG3v<(|a`X4cnMZ;6Ws9dDD1k3L?R&YxP1nCjc?4lEDV)FJ^D{
zi4V6)5!T4^4&0yebK+}_68RZePfG{kT_@opAs3Z+I3X2;Sozg_D?OG&uzMS*xZ&ub
zx)9W-fQ%Y+Hi!jyJb>!-a1e({SU0<^gFEG$z2j);e|H~=;NpAvX+VhvSyG?d8GOaI
za-<(FT#bSY$|ebUb_qZkCJU$&K@<GmJRqbaztLCbyrBX#Fr>NhM1;6`0Q<B_+>jHB
ze{kd)+x^zrR1pXQ-sCaT!a>>ND)4@DPJv>gs}S)ZgDNVRf=1)>4aBm&*$^72rrkAU
zCFo8_x<^~Zul)f1<+mjs!HBg)oF*|FjF3e3#Up99Q1fKSZAU<}V>up7%RDm6eNGDv
z5(9_y0wDuWYU~HB4!SUyKPM-QeM084F9S)TEMpOpLrNkqV04sA68|F3RsFk(Xm{bQ
zp12;I_T-Bvd%c~D6+Btnc|sae$Q;%B(gVpz<@)l1$T;7_f*_5?^Rg9C;Zl(E6RmAz
zEBJU9Y08D@vV1}|7quk#B2?6L6U{zE)W9B8T$I0;5b2QoP81h-<b~)mVnC1w$YpQB
zfH`DF5uH#;m1m@n4g$|9=*EbjkqzhN;Ip04FkukY+tDanATq&Ea1Rl<=7FrB$gNPg
z(haz)yCUlIc*mE7&)!ZgKSC;x)Z;XY2@E3cQsdS!<w1w!pU}St!lHZ(;dltb%tt$4
zq?)<k=mTSKvEvXEB@2O8+?{~z$QJv^xCh_ke!!?DXTcg8mYjX@RmJ#S`8nxb$`XW`
zE$62O^&lR|YUG<F{rM?LRD$TIDk*!y&-Ih1mdq!T63Ct8@K6f&0pzf>XN?t>kaG@!
zxM}M7jbWm|*gs0Zf>`;TOA!7@ECIS4PQVg}CzqFjQ)J|Ypl5X$buRR1m;*>BlEsi+
z<RC=2j!HOJdK;x)AVd%Xla4S`k!(5Q?k_%k6Nv>7Nn0$TB9k>IkX0m(`~*mV{p%)~
z4?m+6{#_A7-Xo1zz=^!Tkp$V7gKJ2Bc{ptr5bRHw4DAq0MrJ5G2~yh+Ke6AocZBt&
zUVV_Nir9RnUp5p_H;~9Fkj_Hf-AL7*4!m;Pp&OzX#Q5^D!*?#OA?nklEO#gW8W$)W
zmpf2NrUkWsUKmGgS#Jm;Fc9w(6PPXn(P{4%E{{c>5K0>6Rd+We$Utt(wFa10fiyeu
zprs_4n+EBMjmqX77!?iwom)|MwL_H1h=B=lL8qWIhAfZK-p>V`fH#zjpI2~$7qFtX
z?J>8vM#Hv%W7?R$G~RNO)@5~|2MeX3n4ZdYu|Q;gC6?r0iG^NO)kCKMp!zEMFe7=t
zd0<BzBan}Csb>O_Tv4EhtE##px6%Xtx6p9B4<RfwyaxEIw?sa(9s20EoC+*6RbEjw
z<@M6UI4;sX>I}Dzj3}%l(tw=jK;=VmhvhnE#=S8RLnHZEM6N$CT83MnRQ*M?Ha8F|
z4tyGN?c@DHq?vL`@5P`RWx&ShbaYzJK|9_)kR>H8PmS8@{rM+%>DQO1sQ~D_mM-aF
z0*f|j;f)&92-HbkqXJWVz~oA7I}B7e`}6JJE5oZ24!ju_nPLOhFB{+-qg&{~bUB)Q
z4w{ZF{c@lZp)Ru;XqI_`ZH1lBCu8f@Fb*k?x3ADT1L{UWJs`;VZlDpJV+QZ6I&j+f
zb>((#KBImZl&b<0{GLMwu+XYqdl9)<1e|pW<wAWI%(=T}8Sq9}5_MstJaI7vRO4nI
zR9KM6&!_<(Dj}d4*D?j5iqz8OE+haXM&!$o!NM^4(v;41)13TVHcb1y0H-l~rCMH!
zRdGh6xm*glZeUcNd~%mTJ`B;YE7mB8xWJ3NqqoO{U3(&O@~Lgt2FwP2@!q8MJLO|C
zJD>?%Wh$@r?w7#WZ4er*1onLAQQEr39W#QauK{+Z3hJd#&BqLWN7(&auzv15+!B$F
z{MWfyiAnII;Y4Ey&u<_2`elD7tWV_I23WFw(#bEON;D;s6?hP)^R>VJJFW=&Oh?ee
zzWw;%>#HD72fN}vY0UYZ;ShQUax~CCuTZ1O@!O5o!CqH56z}sR>*<Ze19bBn-+U1d
za1()Rl0J_k`GNIRDM5YyeH*vG4B@->m;!i0Z-lr1^dtBAi}Kvwui2VsF05shgCncY
zcfFb~Ssm$dNaGIEZ?V4t%-oWYdodGk|0BXa$p>I9t%DrCY9=JdAV*!m_~J*j3COe2
z#@S`U`(@)?8-UHJQqXttJCFF*xoEorX_9phndNUc3Q{K`fmbFT{lI#*s=y)QvYEWR
z#Zv{0=mK2xh~&iI&#?cs^W3V`K|f-!v|Q<nSVoW?e1+8Jv7i1ZFaOtH{g;2-HzU}y
z?aOEWF-ZRyq`!^-{I<Q${bP`};(~t+(*IWt5{}MsW!niw`;|SL;;MYjo{uERi0>Y5
zzjpq@zSfS%rPW%QwqnvcoR0~LvnWWju05v7+Dmq%*>n5R!~!cnt$uvSeAC<PfNeo~
zH&-m1IuDHYC2U4ES*{2!(66`z|DUIEyNkT0S<uC=&ge8!9@=T*@$^Tc1r&WT+%RkT
zDiY+*49?!HwBbkQ{+vcmlYYh{^viv@ZAZ6#Enw%52qdY(eI2=-FEj8pS>c0dw)sl)
zga2Ed-^|Tl{vT3faFSw<u4!L_BT`5Bu?k22)87e*|I;Xf?oilQpUcn;x9G9BtoBvY
z>ANl~Aq7jRcA4_)+vx=P-XrR^GQB^LXheTRacg+|ldo@Q7wO(~Kew>w$A2W=ev5LA
zLp@es-wq1B7&J_Cenh_NGP<wF#n0)#<{GciZ6AzxL${rL-Gc2mF2Hw&IOp2o9^ZDQ
zUFH3<ar}H<bpgLCkkwzt*7yew)K6|lp?o|4G*K=|K7dV=Pcn!lWRvmA^9!F(UiI1E
zqThfkzsz`%=IcV)KpOcr9V^fJw|DRVMT;HOu=v~$lR3WTC0_ef)C)uwro;3udlP-t
zi~PO^;?8)L-|y{B6v!k7Dgd!JYM<6d?LQ%T-1YPb1BY|_6uv${r}b;8?M5&}-&0-e
zZQrXg0q4W5;RwjlSSFIkB1ZF}W8z+q092_Nt`!!K=(5&<hGg&3<<656fNOdkZ!d2J
z85%K@8TQ%-di4R`Fj?vvHsU2Zk#5rDkVn<t-}#@%^Y1K!Dm&Z@vB|*GD$k*?*Y}2M
z=uTDz^e}?7c*L#dL~~A)F3x17v?2m#b$sh%3Prrb#xw|L+h*jN=htUEqB1Qqz}_SC
zC)ba%zqkmaS6U4dnnFvjFh@bT^>QdL2fa-AK`6sLj<7M=$Ex=7QC%RjX{#L{oS5iD
zWRfTNjhuhrlwZTbrf4@+_{a)`Lef3LtLFsPKgDu5cfI8Dah+Kks|i%rq=AAz^V}Mb
z^{bKkV3-zV?Ku|ZXc8fc9Wk|iV?P#Ep437Xf(xTeKXvQ<tJRHu9C_5@Wd23KTf(Zn
zd3vcI(wSd)!jZEV4k+n;c>8zdICuWQK7MNg2H3sC6_9M-78#+lJ9n)bmYz{gR$%Pg
zY~n}showB$cRTxcQIZnc3NSPUAkrZepV+EhRy3gl|1{`J3z@!g*_hRS7O%Ic5w<^l
zZccPhl{Ak=RQtL~S-hhL^lC@u0ZHyKEg(^?g}_7P2<7QNk~Yr?zUf>Ztoz$#8U^7W
zc!&-wc!)5QXUo3;2iQ||&spA`t_#wULcoFb(p1ayQaz)85m@F6nj6ClxF^4;y$u+0
zgZAJVp8f!)g#U-V_m0Q9{r|?>iAu5wEfFDPuS!v5W$#e-O!i78*-BPck<DrEnZ3{K
zO$gchG*9l=ySVQAcYl6=d_PzJ-hXsG9=XE%d>_Ya9IxX!woUSCL3KWSs~B#aHsGcx
z8m`)8N*y;JU3c*6&d3<S#e)2bFW<y3$2GbmOrJRW1xqQ}c@g@{q<x-gaJ5g~zz5!S
z-6%ne3G(=O!7?zET5`9Z%gy&V0$X3249U{My%+vsUtP?Ci3QQ<E`p`8sI=;i(|vU8
zTJg?wGF%Zl#I=l1Ow?49s*_>2FcJ}b3$O4-SzNHHmlO);6D4Q+I0QF-VC7<1b!zW7
zf8t<|D}BWDRHu?yVZAh4H7|d0R6H66xrwpYFjrblJ9VmlvC6=m{?F?pxS{rn30{X>
zE6zb9LDn$wH(?!$TuS?6^m;R&wPwpyhH#l_7}lW6HrNnRct_$#QM?>|^Ig|Eb79=h
zYWy>SL!r=da~bj70*zg%jHgQ<^!rkjZvmPGhWA-D7!O`V5TZ~aM#QJCzTN}yX4N4w
zG1@>&1J!cQ)|6h1OsrTSzs}WHH0Nt+@P%&F_)!M$*aXB$jQQjZN$wWGPp=pBB4zP}
zwT|BcwP!}LK!%(ed)-H2B*Jgc_`npu7FZHQYct(`kbJ8e3eHC;bmf0h&4GMO#%FEp
zO~c2TB$rBY210@2mVSDT3JJ3s8Qgh2l!UT#FM_ws?R*oW;B}gY8j-WDk@$2EpzG1b
zz0YTEJgfF3UczoHvD$YeB*@20KKCPJrX)o9+g{37STjuAH0(+uj;V2^q!kZpQmh<?
zyPN#&sJ#afE~`tmW93KrszxC_3YnD=cdJ>+Pxt9a@e^#%uDJgkqH|Of;#@5i%Z>u&
zDZ`NI&ZPU2p=|ZrS4V>L;}y;jDEHp9Nb|eE!GK&;_Mq;(*8iTaC6}sVRiYYU9tv=5
z?+dJ#4T{=Z_~<IHop%s~&m*@NIC9>I!W<^yOK>q${ZZ5TVOJg&)7<{ap`_XXBDe-A
zr}<1W=l&vs>5&L_ySIx-Q;kI6OEh<lr&o@KPDX0Z%z`Yx#_Igq<LRyPJtsmR3NA?}
z$zuAgS$1?4c72c%frOV@z@5@;exk#Af?VR`NFyZM@X|bgFg?(}P)cgHIz_nWy!zfz
zX8^=pEV_DKBund}a7gvL@>_Xxc&&JEMY=3iBlcrsZC)&5IoSMRy4L62>MN@f9gbj4
zSpEHr@JhJU8xH=R#VZ!(wXYvfI$)-WPtxo-G|%*B-b?>BKFI6?7u=IZeZ`w+Er72z
zL77%tvR-A9H}uI+=s93|7Q!uoV=UOnE^>L`M{Dga)i#ZJIYpywmQ+;!&rz@CH~Lp8
zG#u+`SusT!h_YGSmV_qlOKlS)u{R_giJJ}^-wI!GZh<vNxKmeX;uloW?pxc8Njz5l
zALTh8QU!-<h7<vy<OQB<EF9?9_(JFL1<YN3=VufYY*zh6|DR=qBZT+@i?@Lyg=KXL
zy!|#X0xht&lRvx67!4P-Mkz(ZwKTPxlM!KQ3txaYEmM1ea5CIVA!#`Ol+aJSM-Sex
z3^=y?EImd?Zq}HA-u-hI!aEdaj~w&#g*p_S6|AtYzW2Yor2iska4Ntst){``Ntw%l
zmEM3|EmfihT5#{~i}|)^sWG4*=)N?~m==f9v~9f)$N;aOlMtiTkoG>(IciB9rPT;u
z!1fuv$01U(J59DI|6;1+`rI^)Gr&XVH&6y{j8~7GJAVf!*`09}o3EK|ILON}$@Tg~
zb*m^<D9g(yCihK%f}(0xO0E}fJ#F8;4sHpxthE=y41wcnQ#+S87_=3R6AOuJNTpU;
zVD@tB;_mjmmuk^)=1_qm=L0&mORboX0g~P}!*+BWrk7Vo(Uaj}UHlPe=R>UXE8+$e
z;Wwvfs9nCLQ(k_D6|Nfdf55H&Yy2TiJuD)?QoKGQiWD9Gxk$UMsr=DQQ-f52R{b>?
zu7XEUhA0)W$M9<_suB%5THY5M0za<Io#ME9`{ETS3{QXN(*KRjJW&!X-`!Ek;&YL<
ztd8SLOYu?np^kDHV%(`6Z<>}az2$cT#6VhtMvT4VZm*u*-NPz*280Wxdv}mtyVuzS
z6!|W`1#!pUf#My;E%c(QPAOYoM$NhRS-nw-L&-<O0GvzQ*^OHDXuwE%uCxfbM2z4v
zDx|!_Y|l}GELoGH%V_nsSs7IT`s$#$n}tqojfTT)WV}m1i1H~E<@(y}tyn*b<mW->
z>=&|tNd<gGrQVwvaeyWrpK(~e9$!@=FfZl9H3ATn^})WM<Yl_4D)qO$?;JgeVokUN
zKbGS-E`q;ep6_A;vdA8k4&@oA)ijsgE5J*mAuOedqI-I&)dgH)MF)9v#)4E`@B({2
zZZp8QdNCJY)R^vNM`JB}2t=#E3}NNigR2xTigrA~ZX)cliKV4wOto*>Nw=%aSLe&B
zsQt)TFULuR1);S%&E1ezuU9XUz~hi_peV$t&Ll_<#M8JmSuW7cZ{Ha{?aTJ8(X?YB
zLGl>R(;!%mrat`6e-%c5nr&Am=;^=scSs42ya9fUjcgX}52KExoNrlZPzd_OVft}8
z*tTHDja1W9DBCEQp9?yF;LNv=1vq0Lo9sGwt6N~A&<~w8Wb^N)fob4bs<UDmQBWT)
zv@Lz+XG!wg!t{f%jig~QwjX<m*w-J2=GS(8yj|B)1<;RUNi{$6cCU{)w<cN5{G8k?
z##)D4H`FH@Nqpk;3D&gZ0Kiev&jLVD-=7pd+d?SfZ<>GC&tbu%-?W5-17pQCa86Op
zPJY>Pw7SoWrSK-&3(K-LPj!;2gVoLnBBH8s&8%!&<CgySi@jU~Di*8nU7BRqU%I}2
z995+L+=72^z%mi-vFPS9<Rrz`ahZVrJq}O)iZ9<XcPu3;-MBXsu_IgdE_?pDYS%_!
zqzarGb)rrB2a&UuQE~jxY&%^G|JZ6r4%d)9pB4J5r0KL%PMo=$WW-sYF@SK-+4Nj8
z_znvEJ%yNsb;oGTJ#*1O2Kf(GPD0L(v#r*7az4q!s$6O=>ik=am5DR%*7Fzq1a|Lz
zWYH9~n+JHEhb6#V&|8XU6cIZ5=-U~Tgt`!FCTg^lS|A!E1?nyFSAP)<nicR^VOszO
z)55!rHd=l0;gIVrNNfA6Z^x?q#oQpB2M+bdXFEB(?K)`u9+ZAATMprWW;h)?f9Cp^
zNj#P+T2l3p>E|m<gJT~|2bWK?I!$-<eA&b#TADyI9NPX-`E#<flDKf#+ClBbQnlR{
z_+EA{Rh7|*M>s50;s>zIr}1;rs*ON_eg}#_krXqjHbXuL;s?D0AR5DP%P!?a%c-}F
zj=-~EeY*HVu8dHUpLK22dGu+8PzFAupK9SS1z3|BERRi(;L<p5$YdMzb4sZ@%nxxQ
zjT|r6vn_9W`6M|u?$6df(}^n{-(N1&`1nB##kJ6C%nD4utBe6~|L<RNmG|mI{!|U+
z@*BJq=iyssrNRR*8kt(Bz6-AmKAyo-?CIDxggu3!;=PB4a0m|%mtztSy5SKY>BvT|
z@SYpd8kqx;2&q(cUMsPo7)HMVgZ6;K#2zstxoazLOdo};>d2wgc%=3i)AIQvotNu7
z3gn@^E-@oKbK(s3c{qbS%26+Mw42T9j!YDQW?cBP#R3n`xjJWPd3wv-75>$XYQM5_
z%0tzR!;R~8fzJ@-T<`OIydk!CdtH}Q!`yk*eyO?xxN^T6{}mt0RyWcraRE3m?6Fy?
zEZ<*;MWl9~%>X02v6WR#?ERggw9=qS+6|y({W34#Wd%OyPe%{ZenOV~G-m*LZd+(~
zqY~R;<x+ShNALHMx5rig92lr;#?q3os1dd6KJrUW%fH+?`)LN{m5eIAwrK}X^{w)4
zEg~ZjpKXLHW&>#3Qb)l<At_&6VupLBrl#3F7VaIJUMvMyO$*j?9cNSol(dB_h!xIq
z8rS*%Y8@-(KTMn~^`g>;tLB-aT0x6|(^zWW82(&eY@acNrG0+I;QA10e57?B@4^Dq
zN|AY%vU~F%ue0iGt!|VNGmZk<u#WQX2R>Tz$H;&~zs<a;!!|z3PIqTT(`J%#52IRC
z>$E-;##;uIWdyY<oE4Y2f*f;!XK-C}4<Mk|p7nn<0AWV+?<e+rr=jJYKw92n0U3h7
zX?cy2miMaj@+rD1fTo6hGU=(4L6kVpL^^f)zlHNiHNMbpb`7ijfP>k9wb6P<&cTT(
z8!-NxXcxq_SZs|6xJPgMyZr1{CTMHtJEp$dItPA!7f5I-mS6FKR(#Y)Fs=5efPGcn
z`zzg3MPGiKW;yXMe-}<<ReZ~Mn&Q??UaQ#<-aRz96t$zduM7_yCqSh?{|+ak>Y{~W
z!V=B-KsxUy<7@KWLEL%vPii10!|XMYeknggXKWaZ$LSKZO(;1w_dv%I!$vTjvAoeZ
zJpT@=ypU#IjvHgjkkFuJ@%47Sdx?)@+e}bYhmVjWGgV<O5#_%)6@Na5oQlt5I21KP
zC!Z~s(yV)dz@gdVEY;Z_A>?>I8;qm(;LWX+Dch~Y_|b+&7IF2hAC-R568*WVx74&Y
zm&aw|b$#R{YOS!c{5y45HXDY)Q;61!v^Es1>gcMp)yu&VZ*dbmuP%o_8DCn|@v8>d
zbd=fjtJ8`~R*OJ2ucmU@Rz(gckvw#dwpbYyQQ`b~rRHuDC24JE6gOturN(|;*$crq
zA)9OMkQX&RKN(%*s>7kWhQr+?s6~J@a_!nG1!qsH_nOOBo|#WM3NPmhyd0g}yO;jr
z<vj6%ElPiNi+X*CGH<X?fTO=pqg=E1$GAqx=&+x_CqtLo2pf_9+@e}#y>MzcAqDVj
z!s={{)JApXzxt;I2TZQO%}<<0x%VrH&sWc;J7t9kny6%=nBA#J(ERI;rCVH_Y9sY@
z)DZc_Y#bVh-0m`CnkPxo?0F#G`CTt4$mpgnibs*k<yQcOX7r^~e{4<3WGS^pLt^}d
zYIn^WMsErZhHJZv!iFhW%&-uHLP~y(K-sSfywTW50a@_tE|Eeks_W5zk~Kqwx!b*s
z`;F=<Uok>5ipbaxyx16EJV^;%mLDamh%?e<zMz9b0Se51J?_{n1C5Pv?4;!~PYRQo
z*6Od;4Dfo6@8dG=xryo1i?Z6q1T!eJ?Jj}xS7_!lys160khd@yr9~#A^%Vcdb<lqu
z@K61a?z%5|MA%(q`zS`LId^@?p;mRFxTvdlzdajH^CJ_uws~ahpOgL?<;t9mOqTVW
z<5<d8rsL@7n}<Ro;|+m%w)uC1B_lp?T=lKOn?G7cet}l(W1Z|?&0EG7y!kq(DY$R)
zC|tJHu3IFK0rA<6o`QmcR_$7<$5EiXqt%t7+?rw$(~*xD41!si$tLEh4oFeVIE$}>
z`bvjV+M3;!^M~<_c!$8ijC(A5SeVMRcq;Cx?VV92O{g<Nic@bGSGPCDxaUJ+WMhZT
z$9yb$iObxzt}?3~^Z+@^<fwF*q$QMD4R&m{qxso)H`9t%SdsU>G<rWnVsLnyrh83l
zY4M65QJYzr0nWJ|<kBX0^=wGg|M(i|KYL?iJ0zWEpY$N*Q_bn&L8Np)Ep>KpSM8p>
z;GgyiC{;DPbG!b$!+$cl^s?o`5DT1k!vhMf=hnKB(QJgCchv<Zo1yDgD625eC9Pq<
zfGEOmCp=!h4y>&N3IGt?9V2%afV*xnT~8O=vgW*&qwn&=6`IYy^BmWFL1*#)u#{kP
z`yQa7{lr;H>8(%;wOH^8>#9e4ta!{Y`f-r+Z#S`9*yV}Kn%MuIAvo6A+Zejfg;lQ_
zw11d8|Lx4{6ZrM*dUagGRd=YIHAU~h(RH#v*SRT-i-kw?a*x)kjZO@VuM#(dnbj#G
zc&Ukiz9bP5CTN7Q?_S-pMBmR7XO_(2+ucAdeUI@&Wei^dWqU3S7xihC^?p-7FXr9U
z1xVq^MP}1Zfs*-m(WDyh#F-0k$`2!RBvBftN7I(0Ha|ZSN;MHOWCBs8RlgG};YiIj
z;?6%p?qNBJ-9#@nFqX*bp!#&tgZ(ud7GsaQPwXy)Aw*-r#`Pg5E($J#3;kxpjwRbM
z0A}fh!^kB*%)`LH$!C^ubJP=FnCt_m{InV#y@<fcSuDOF5j5A~jt?DSvbeNV>jeB}
zln0IT#-+~rp!vL->fl`xPGmRs=;U$Q-KB`M-wNg4@pE~k5hZA47;at>rM<{C{B>*C
zX~D^2+8~}*$ZX2oEv=0DTm=560R0y@KrTT#L!>2ipj@=(Er=pLkexRq_g^o}Ysqez
zKS^4UMe|c4-kZxSKlZRJzJk+ra)<7Ys_oxMT(`pl#o4#ttca=8W-)yPA(u`hj@3}2
z{6wkk>8(uL&;c=b-EiyCHal}>OKC0xfrUXm?V{A%HgYLStjMG;f9mbb${Vq(>kK~T
zZa@&NMHOY&$*wEA2+}c^jV>q1#+yDbC1zB(clq4ds;pGK>_XBPl2hHNTI#UEq166o
z7M0Chq8{gIaetPI(W!kw#yl3a7b23hKsv!!PxBW!+)0R|7FhCzsr`h4xVW`PrG)6t
z5Q@T?%%|UUE;4?v9W6k^Vc79tSA&0}9BWalx%a8|NvF9Rz}i7KYt*x2ZKB!c-M#Wk
zpv6H21TW;DWHv(<qHGt(=4^&RU{B>IIr`+0W0|sWwQ4;dmh|V^?7z;YNZjAPgIshz
zXueg$JN}h$Y|v(?zMGAJ?Iv8aI8Ng04-49_InzS>6j+GCsG5yCyf1~RvJ6xvGSHBW
zWR(;g{|FAR)QQ2r@?PZMjRx+Mz_qQlxv=<_dsvTiud2i`$uvlhOKt8?Mz{3Av0!<;
zTi;<TRIf&8&&uX`p~M-*-?|LnQw&P`!fu&RjMe(6jzzqOSc)F=5^#W7yheJBL!8JO
z#S$?8$1MSvtiEbDGba}X=zdO2uO%8L)AI!k@<~;2X#FtBHI6LHL3(zaLDWMdZ@!nO
zJWa*QmJ6)VpNSyHU&G8d7h;w=!=}NZc8Or9b^N=e-4X8dW7qDIz%^Fbg3V+;%Ei;2
z#_p=mupzkc)gdF*&{E;)zk%X~X~Owpf~$qS5=PF^{jr15Hfh0Kd@C@aq>>WAKI%wO
z=hN)(tUT0pODSH`y$1FPDQMJ5s<*r`cRPis3QXJYs0g1_&=fBOohDLd@7H~KelX|B
z(&)eUx(j5e+?|9Za|b)%R8MAxnIhDSw6IsPq@#e7y1#z^iW}+Z2QTJFMzfGxtCO9E
z-T}cOu8&URhTy9I>y_hpDH^pf`Gl%;bz&O(JdGQU{_QHF(J}`^i=4e*G5BLrwN$~@
zdvGc{9|16R_l*^0y_z3prOK0J@e$7UJ6M#<JxNK)K1+iK(Apz6)B`0l<o{}K{wZMe
zH;`IHThhSq5zIgAvQT3C^UF!(M7qiFp!kBzcxQJN3|P~$3cu}bYyO_8!rXhpKoJ@+
z?!5}H(GTJ*KFi~clLee`2l%TaLuY#6AU8*HE|l##hp)z?5-pK(jp=vU>zMSVI{T<3
zywvdaw}ulept(t^X?rILTN~v}!latp#9lkwn>CiinD(w4xK`-Rdly0BBG=Cd$U;_v
zFx$H4j`aEwE_)7OHy>kHBM~yxKDL{my3Mrou*^Bph|pz=2ih{Se})pyJwuzz76({>
zKc^OcodNsCW(yZT>O@N+$=zo@rHUY{4x_zCIpVXmXSfE5fa>YP$UGCoAH}_1=_h3J
zeK0sIj1n!d{Rj>r^d}rQpCL7Fn1W@_TKNU2b0a7G(hR~czkPX2U%GV)Q*%y~ilx}>
zS-U)F?gjqZSXF?e%GlNx21}1B!}K|hP$;TdSs^1n->or%L}!>a$*Z|kp0TR|9>$}q
z-h_89B~u4m&yaX*PeY3@8KEJdcF95usU1Brel-Dpdwk@%>C>&H!tTG?#?!g6-t3(E
zX1A{0{(S-W6tkP~SCHPf&<R#ZYt&xABf0S|%4PRDNmCe2r%~6V((h$)q+{Lkx}(pQ
zXs$hacYI}1G>3vidnPr{w=GuOY$Pz2%PATI#B`d*;Iwxzti0cwIUap*!$9$)eRt0X
zNKiZ_hxc5P;nt|C%0sBC!p#fuj6oDCOr-ZDO!z@`9N`_yrD+I&txH*A<@ijLt;_~6
z>)?h|_bY~<j!v&+<?0sgU5dDg36W~Cz-Z7Kl8H0!<-qh0tao~Yw#THVvqu9QO|8#R
ziqwCg?N;4OI)mJN0jtgrcf65qo6gzHS70ka&Q|1d`RKMsKo^hc=sF8Qx^&@-ME$m}
zQz!Q3O{Bk35ME5LM#fOA_Jn@}Y4!$<M}JmT8AseuDCjQ)cJqHZ_s?Z4IB$<D+g|<%
zo-Tb=&{#d5w2YTPe@cHhn&qXc8;g)&#*lNrj-Sx`({Gj5$T*)qxX`ovvLg}bLsy|O
z%Xx;&!3ZZYH~?IV$rWb(o6f}x2RfI_v(+}Rl)*I?qBO)ng_gP;Zu9MUtLZQ{8Wh)9
z;o5oBmv5H@N{RU4h!@NC7Q<M4BF&qOQm2rqH`EM2<kD0Q?&YE4H}s^M^e4z=XghK|
zxjnGdU3N7sl^@Yg<t{Z+d<D-6LJg)z{$fOU8@weQK1&}5$*S}2Hd7zyZfltw??_f;
z5!@SXOn4kC_N7Zdvxx{~GgwC7F-NpB%ztl*7%L#PkLy&p0vAH1u+yW<Y84**OPmmr
zM!SGhuH|$WMVem@tQI)FGkYm&OqFzH@V%HNbJ^RDXicyfI}$bgvX}8DjQq!tapM<Z
zca#;u<ZqF@IV+ih=i{^L2@R*t(Mv-@KHgw(^Do|se;}MvGN1Q*inLaO{D>KN%R_Y3
zzzie?R<PB0djh$Qzqfr9{|1Fuw&xL2rD9tdIFZpKScIJgm)F|U9}`;>9**^t_F`I>
z{Dt9MW^-ea=L{4bYXk%_kChepo1%k*e8w;Or~iD$i#o{F&}<jI_g@^Uh&~~Q*BH+I
zIafL@60)bPEdK^>)P#(%mAAi8{CUpLFOezE&4iKv1}5}>h2w1!q-a-2$g=%;fBwk+
zTTRXW8{hH!Fj>7TGpIbX51{-2t3QDAfBoYB>eT|*Xnp@1q`x8`dTK6bpEmKY!o(lB
zD9R2&P&CMo%|sqJcRsxEZ(8eb$kd2i{K`ItkQ_|aE*<5%|L`w9_h-bem542WYX54g
z0%7#z59$6*TN;Wy7a`z#|2)@iSLCs8iXHtM=wk{zmw%3Gy!n3oP(e6N(Hs0b72-cj
z;+c!&!G8!Mo+a>CZ5O;l|HZZVe?-M4wQmypHwHuo@QC;Sl4$f5DRE5KeD+tz7<mh+
zeDS7#ktwCkAy#l(+8*q$&Iu$s%Ozya|4nv#3ZE5tMt^*7Z+}L-T8U73z5nrk{^vXO
z_BG_Ws?=o;Jb#}ckL}%d`+xo;{v-Y`8o_fto$I>3PcwQT3PH&$*7u+Ds{ip<T%!^2
zl>S0m=kML^stpjyFFnJ5OII@|+<$`mVEKFZ{g8&&-vp!q1mFX&hfw>G1-Yn-yoH&T
z#J{nQCJKjWd6ji*f7kfC!s@V@%YOVDwi+%t{@%UxI&8m<r&mKZ)r<+}Uu<@N59GNl
z6g&2xiwLm=ITCa0Z_rS6D)3y&MOL``Iw5UHm+Sk1^Dj2$XMF_U+IK*D{M>{56_a=9
z&|iG?b5IeF{duO_?*aTP{q--&vnuc^+qB#Ed46>Y@D_RtEvFGZzki!Ljzbsu<;M-5
z{ndGjc<P-VAfo-7N^uwYtaU%)_5%hN{KxN(*oXQ2>xTr;2jYPAXn>ew|GADMw$bJE
zXZ~ihX9A+?ZkK69#Xdy+1vGD8W4@mGx33abn!XQK$P=@x0#|s*UopsEu}p{l{rVik
z0mdWOKI8HKwMGB0E&7-F=>NYha@D3!f3g`JQt(3ekt!RXE^`D`R&a|)Xrr@FulQum
z!1#&|W_fdICi6I}%VtGLiMGrQrCjb4Oc9|$9n?IXG1^m^G6hcy5|ol0jpYmP$}!2a
zG6W|P$y+jru7x+q<h%$>h?M0p3{0fxv`i9pdpzDop}JoKk&rlk>BqMD9eRq_2btkw
z|M3YHm2(AIaaA3??b>~5?K*vF?AkR0y{wi)DIx58-62^&x;LywibINQotspPFHW#1
z6OBzik}~R*Nbc~&eb#V)Jd;>EIg>d0`KDNgyjyCtVRdS>eXOBO$@83q9Qif))1085
zqtKD6K*tc2?BCUMz+*xJ_JQj_udGf(O5#%EEc{6s2ocoNZPLuVNW!c^gcp3n`?wcr
z&8z!(ABH^?cbn9+FFLF93&k<3oTEkeUN;PG@|dQ59{s4EO(x^%RDyKoqmN9XgyUjC
zzTxM2WODCKB?M;4cQhmt<TT28sXR-%-~3Z*4c-tFL*TM{{>AkUr9agIUdIgS;y~4w
z&mZQ<8Wba?viBr^{_kxP<TO0mEX#ZNNVUR~hS8~|vFQ4xmC=Ea?3-N9YHYOEm_AXA
zkx2NAG*0M#Y-Em2zSsUdC;Co7UxrC<U+ZVJ!351*(+(Czmg$eFp)xrP{}9$L@*Q)e
zY4LS>OnZ<7%O{9847PrT_-_k83gKnF_6Q3kk?rf(S~hrU&>K9?kz9H!lBKROTnTba
z6kR>Mxycz4w^HPVD7s9~`Ai#=`b?XWt{HXom$%;9FV@fiony5b*&$=KklSH%5Zn2H
zBOMY*S>Ul3&O_@QE<jrv!NH-hGrTMj&0yE!8`dGzS|F2%+xpdbttal$n!ZY@^Q{|-
zEEFI6d2<=_B#hNjm}`D!|I}&M(d$17JVpx^6eNIiQvrM}>5#sO{WBo0I;8wB0b%~|
zh7Is`3XM&@RTqW5Rd2GEs&42w^6k}b=zjZ3mgjh<Pv`0L%D7mDdo!N>HD`$_sxaeu
zUU9?}_u6s$s}*7y^`7?{{?icBUp+kRj(4i>)<4Tf&UDjgD20q;s-JAFJ&$#|He+cH
zt)ugcW$c5?!#w&6IgRq(3aVT_6Ki2Ll52T;bMfEK%A`K-j85k_`segRf5^4UW^_cz
z+gB?<q&D3nM!T-+J*#a))e$ngL17}WFfP<hkhx5UK}idJ3Qi+E)7a_vc0A7){`kx>
za`w#{vF{fSxD>L+u{FKCf5}MiiPWW0l*)c*?++t~AG*lZkuJ^+^^6-LXd23x2_LVK
zmD=hbc4ILM74@MqYL^sSzc`lYt0z93eVk!1E0<_6tCXSq^WzQmI{A=)2EU(g9(SbK
zRqtOPsVH7)y1!rf>TbAJHwM-CFA3``z8P6+Uaxd<Ffg9}+Qg9QpJbq3bZ543u%$I_
ziMh3~l{v#GKtU$=h2*7X)BPa`tRxfd&1aZwvQQkE4J|pg2U_31zGt=H3bM1-wglvG
zbN=0rp3JHoKI)8|UJ;BOzEljH9wOs;gO63UH4ajy>)rDZR14oD!|1<;wIGY7<PJlJ
zypu4<yq>OI?TKJ=m-VLFXfup^mmh?SUw~1uH%uk(OG<{)E27kv=`31+S?0<C-MqOb
zH1baxahlXQS>Co#5eiTE`rffD^C5Mig5hZW2W6=q!+3qw0=roiyIOsDyV?Y`LhT?q
z)T4i%hU3(RV6oP^+d?JfL@dXCz+F^5HqjJCc(lfu@MtL&(b3wozBaY^EkSL04<g)e
z8BjTJ8c{iz40B?7N+skHm7aNZXg&VtC%z&K;nh=d6u`JF_12|DFC?&N_jJ(UnJ!9P
zFc1fvQR1wLSdb4UFzkME6-{D7&s7z(9Lo-RSt~-t1ipVFK8Oh3(%UHqQ|-#)Z0Ie^
z<KP_FBX<Xj%n4nQ87&B9>g?`pQr<EJqDBlr>fQ&8vG5q53$Hom=?aaSc6xmfOzmoL
zcFbB9$u?#dH%7ZhT4%b=*yB*fH@?m&H0wlxX8K@WAFXwArZ^|_o#y?>an+_<++H7f
z5C6Ee+7x@d;0XlQ<MxBR=vqPiOK3Uym(W)7hU2Q@(zkVCJe%dqoc-T?RI5w*=85Od
z3-K+;S1IW69Q?rO>%SxMmb1PicJRl>iw@G(1$P4SqVJDz6_p6vG6M7bgp=k792885
zn;ALll|<eCX?=H?A(Ol+qU7h2`NMB6{{$^!J`3C(lDWb)Gu>-q&hZD}dy>kKYAt(u
zjaIq?{y$L;RSxx$V{8wf^o^1)jfa10b!quw>oDO@R;I0WEl}~Pp~2%!;|mHU64}XZ
zyckp)uVG-S%+oI212~hbG0CD+zPU9TLdb#>Z+~5$=p1*BToQL=+gbU=SL{;Ew_L{R
zwDih{O03KZ2i8!KH&37R<a`@*-$JIDv8;}f#{W)67jN2(3~UT<d|@@8_1~}``0<N<
z+Us-zL&<qI0X3~o`B}wW(+et2>-t5VEv@#+5z)`5#HN@YGyb!&ni=3tG&h7%3|JDn
zjTw``2peHmj^+$2hy%tx2#^-+dM)oDTu2@`J!|-RZ*7|6G96v~?HYC*z&F4F{Zi4o
z)Ee~hk>&V!F5YOpGoGbcyQD0;ybLS2H%<^oq<8wZeo^V~$y4dqS90#xPS+Mcm`*<R
zeYsGn>dfLuGqmjR`Cx2c9uiekb5eM#`lPU+$9gUPiOl22&Kk7wo*i0y$!*(>$q>fs
zs(wBqdoYUiOe-&TTNxW0iK=lI7V^q_>qH`i4hsw<>jl?t2J?Uq<1ykn>N*PyOgd3X
zCefz7D#}x7`ulI-b}p{1sdnQ+_~f<R9qI%~0ka^A<BxSv`l@)-@z-}UPDfh+Q>lHV
zmtmVWD>9iat)<QYyTJPZD)3zG^J*Lox}kBQJx<CGPzXf7J^+B0Jjbxh8xXl9zw%F9
zxqWdPcFxn`$i$FCu1$m?`HS(txGZlMBYy<V)Fz0Pycv0u9=HFJb3*HDI-z?|j#%v*
zT2lv`yqWID_Tog=V8?qWnxWs3`lpCY;W={IITo}30vFgY{IM*LS2pdz{X0wmbcyFK
zmZ<$TkgH>?nN~j$_5Jk0&w`dve`<8Yw#UpBcaI#S{3wK-X@)qHLrqJ5qmcIb=o<=$
zn$pg`dqoT;(PAwM%4IAEVr%E>?j1%;JRL>tC<IJiW3w@n6M>3?G%K^%-mlX^Osc>g
zJMD|W0$BoFJV1}`en5>xv_*Ry0>+Y{aImzA<gwIMb7|&405sj)@<2#K_#k0L-W?l_
z!7P3Rz^xrUK3F9atC9mcX00chg-mCALbz;9Go?nW_kzGY>kigSdkjfZAi9mmucQ?#
zUr_+=8}9=GWQjIYJPx_ug4xU0Q?bbXwE|&C##8Inu+96$0%KmbON#gnx|L_1S19mR
zYjI#aFrDij6wlbU_a+-pNOA0Mq-xbC6CZk)G8QV8tq3;+!{z&9mHzCKi{i)PT0%+8
z&f0QqIbt=6g`CZU<kX8B`M*A#;ePHXX;BsFE;7fk`^s#olrkmqPtV&U=Q_?9Bs#1W
zRV@nJa{a9nMU38VW}>jJ++H;Bg&BTH#xmB*aA4kHlV(XA6#JPPf>vkEMF!11_gU1L
zlI50F%6ZR53Or`}*@@xea2)oMG0%20r{!gwAK;+%4gooW=)T4n{~&V_KXcKjXM$43
zsBW^3><PiSj{yi(uB7V{X3(t67VE>s_003kG~WTJT@djD1dOsMf=#8+8>w*17{fGc
zgTHhlCcrZO9>4+Hr#0m$B|<+?!nPhvX=IeWMmOD&Sfo686KL!RweeEcx+sWALGaVD
zpRD3z7xdbWa|yMpPNX++6*roviZGfbJt;TLJ|{?V5Ux1)HU!mf&A)0ioF|MhoSoS=
zZ|#vx-fxX^UzYQ|7W7sub!3d(o~UHHS#%vw?8iq=s<9rYvtBJlRBF<~6z=<n3h5ii
zw$AMB<lT0I&`(bkBI)HI%`tbA=SouV<!w#;opZu^k_~4r7rB!hC`<r-Ju<B4LXw+M
z+~hmF;Q?=W`afLqv^9kyfbSqkiZ1d;>CgQ?0k4NH%8A-)Mz_lgu75Y5T^QQ@-k}1x
z{P)}m!tP2kZj<*8umFXQc3^XH3-P%-Lt#v+zPB2`W=|yd8ldLq$1wYNIRlB-qV-0L
zU2q9AP#vfw)&<*V%gGjrMl)GTd4SR<DXaxMaCOSK9Qi+_7l`7@rM#}y_O}aq(8W0t
zRR*;%HzhXbgdSI!kn_o!zCh&O$$N1+I5{s=kDdRZ+2Dg-t)<0DJl=5Fz5Ra+S1g8=
z=MS7(65Hb%T|(Q}Ru!;k5M6Q=2~4gH-KHX~&D++wh3ZehNo{(3FkU`R=g(&(R?M@A
zwRI{lT54Sv#x?zMnmUmldb0-S0fpwVMGBX9N0aBMavHkoeo)C!9F(=jQ%Gj*HJc9=
z;L0d)^N|9|GctGXicl3F{D;~&J+7!heA0@a9tg4V8z7)JhA5*0n3Wmf5E)zE-o~^h
zuQSRd$t8NfxBWTdK2|f6Cf;QUBEi*HKo*rG%|v1ZSN$yCjYzxs&1}P&wnSNk1{axI
z&7-CTIs)&*!oq^o?{J8{dH3_@PofU<noGAYdLc=<Rrh+}A=kU4zl4mWS3|qF=A&3Y
zf1l*k8o^Uj(?N4*D!A(_rkadMnTi|~ixaqz7hJ<K$;FqQY}rRCKK<E=b%w6^piWCF
zI77v9dMdbcM%vN-2;E%YCCP!k5Ts;HS$#j?sYzEIFD1iT6|*i5+D^^bXfN+*dTki4
zFsJ3eVN6k5I~&VT6J<C@NtL`nY?7RPL&3o$;~;<MzzdDG9i)UVS7X~G=NL{3$Z*{y
zC=^CuAcbI>VR-+5Ei{a)2YlY590MwFR1nv2`1M|NYy+jvE;8D{$m|ynlB~+;-{3tO
zi>g0w&?8#Jo0`xg7}IU#4Km1mb0vzU*N|5Tt{bc_yE|+1GoX&318pI4`<$RwuuRbp
zGUp6I%*qtaVO)Nh;|-}+O`gPzB9K<P`QlFiOJ4xSnD@=3Qs03@0-;i-wsJAYTBYst
z2EL`%S5aIhH%qb}|M-mCUlnS_S4)t?D<WCnrd)91{sAn4Q=xo)#3zuE7wbsF%<Eu4
z`{zZJ*WlgI$h{i5u>PFCYkhM=x1q|1<^ei|SYI_yD|~R|EBEG0luT~6klgzm%EbLk
zttT<RyKl2Ijw~89iyFl|*A{3b`x6dlWy@ON0i-=l64iE@x4Va~PjQ$pX;QAfjY^L5
zU?-0q<LAn-Fuk7`JbBHt%~S<CH%btQ(b5@bOCQbvSVPq6_8iM8HLK<vi{_keR8B)A
zOYym2wHI2;TknCu=qI$<LD7Fr;{kZznCY~A^+0&tJz%gAtra68Q@GlvSsn@$n-rxb
z7nxk+-UNVrJs+rQTorad?ST+Gpjbv*j9r6Dx9$=yag6MSYQ|+$(Zn<uz;gv)5i~7;
zoy2yFfXiBMH`x*qX3ts%KLd#wj;>PMrD!sN=W>re-MaqimJtb1;l0?NHC#1942Uw(
zg<EO7zd(w_v~Y6*G3xHN;~KE7TwAIW#veDz0ziM1^VW5+m3lu57FPZDfp;D~pi*%Z
z$y@+#^lYOQ7isRx32-{kfv~GdZYZ5&vhJnLg@2np-#0Mu8+QZtGe3VrHRr)aAik3;
zLc}BeO_Yn|0xd{#7Vz;rjmE_I37Gm+3T@R@X6TPpaF2hKjj?b3G;>1>r0zX{%n>IW
z2bTaumyjK$&(7oqJL-H$=~LZew(*ku)p$itg9{N}LFG<settSL7cOu#;#_7_;WOgc
z-!jujO7V;6x~~4%PTzj@Cur$SkCZhv_~>nw5^-TCTSs$W%&5DUo47|1#?#np8>^?D
z-B)vb2_t?oerKgs@(t7C<+Y-v!IbOw?Ng_2ptvCit{Q~Oa`>igx^rh@Tw7D_#=Pjs
zK2Sk<n)-6`TBh|3r_l)1oRs1dbhj_QMlOgJCyXB$u<JIxn~(_mTIfyA$4oAgo~r|n
z06pMy{~?%BK8a{pD*WR@><Yf1t&nNSX3z$vpLO$X!A~#@?wdg&jIW6zg)EiMp9MhR
zs#3SXUTG0r@%|0;1cVZ&x9Bc*LBHR6y<;;F+oiDLPP69IRWwHutl=nA3~n>^x->3Z
z%Gt)fY*N7pop^ZnxdQ@)cNDfNTg#<aMH#EvG;`D&VFfpDSsSdW+Ey0&0*vr1fJ}+C
z5v~pyzww63QR?$|&hnWK-vIln;1@$y-RcO|uRgJh2<4xErLh?#_7mKZ&O|4PM!O&o
z>;NeqTFrc*l28*Ok_|1b3+?DG{m6v1dcDYcozm%zu^L|=zzcKiu3-8%>7kD#JyoRM
zpRG*OX`e<{L4AJRh_|)@aC`l)d8se(<>|jq>wgP&%n34A7~~TCTRPynQTh#XRQuAL
z4N};gVo%zlqhh*QfFxJ2U@Yen;ptwkIc@EMQnm3sF`j#!8ZTGuPjdg<g9Ckuajty;
z$@KQ(wWX;?e+C>+UCZ<9hik`Z1ZeiA*R@IHlB<|#&BtBoszOgjTxiZUEshnt$#Re>
zvTz(ZN4;z_&Cs@54~CoBoO92D@$Y&>vRd?0HPt-J3##!tw{AoY(PTAtIVtXIqe|~U
zev#S1IO-_O7I^r`w7VaIlOmi#nv3$p<~%OGAuO_%h@1k)pjG>Vb$dn3PeQ-iSDSd3
z#Xi2XY!ToBWr%?3mEQQMnpV+WiwK=;5Mhs;+0?$O(WkklME=3wwpGX?h5CHDVL$7z
zGbx8rw`8OWuo_O%I1`!l<@y{je0%kPw1!~lu7fwLlhBTN$&A#ko)B|4Z~<TrV$vjW
z(r^*r5#2|as*E`TL5djBa9QrNBUL-6BjP7{oIQmaJW~6zxo4W#ACKS}sg{F%8>yl?
zR+YP|LFZZi-BHU5C-sSaemkwy9vIr)i}yX5nxz?C$p<(;a81-x$u%;%1quuyLN3lK
zIw=$=Y2Nrp;nrJI^=qm2#t-uEBEt!LE0_0NOpZSPpQLc+d`P<a<JFz<xqOobQOXXf
zu~8;-%LreK(Ju99navZ`loiwamqIC|i%#4#dFEa>pvo{+nC=f-p0MM3Z%!52u445@
zU3b$=YLri_cN}9jw0RWnP?rd2&pEHYwv_!AlwSA9>sov-x-E>iXqjV7NGgBHIId#d
zLbgPGW^3yF7mG&`uXVznTeZLLIH>>rU!ec2`|eY}m}#2S&nlTT!!vq%_}VzZMd?E@
zyTd)iO8E94L585`UCMg35#TT_63n4p^^W_=uyx|@V4*sRD3yb;T(SbwTQDF8rjR^>
zm9xYC!J;|i@haJ+P=EN2C`ly5`1*p&LlrDG85oN_eH6vX)VtGWIyf4qT1dAiU@=;y
zl;LRi8;d*7SB8}zjE}VARLRzVzhi?11tg$_T7j7!G{voRAG~C9)a=$cTBiWR)$2LF
zG>jJVL*V^Vsgxk%p@fb?^Kkj{k1qaH@<0PgYKNkv=*2YA(G!k=#hBr=QqM+~xuC6L
zU@n>rnt4#K4+b0eBObBa=t)FJhXy3_-*IiNdeH4+l?;8;N~y^t!Z^g85ZJfH^5PZW
zcVoT_6hNi+SOAHTJnJ%A1k?O<8|l-(k5tBh!bsw7Ewz&z!|E3&_p=rgp?cMlV5h8!
zzrhd*7VsM&t}p8(>Pt-s5-BQU_U$}8&%{h`C}-Y^h|2)F2SG}@@ze+Xo&<}XrMfFC
ztAk(|!S?KVv?SHuGd-0J3Ih7O$aM9)t_m&;nNK}Z+mPkoYYe+f+}75nZ*s(A@A>M-
zLibwh@fqR$sWi^hz}utSi&<sG<SqnkLGs%{2Gv`F;RbxsFh@c<>?gv<OT+jDsqNS6
zZKV?`-nJQ(dEUPKbYw>u{cdiCW8^?rqK?5eqs);;YHf~u@7MNSg--RJYM62rZ9u<R
zZKq0eUbIt?dpampzDHF@aKBqEzjn&j*EV3|#qJ(#IdeuxjU7;Yh~8647QZQF<Nh(B
zT3AavSZLDGppc?OP&D6mnK*LsfDDONl8u-20L;2nj$JC6vi{u5z}ln{To>M@D%&65
z+?Q9SiW6LHCxrthku2>5d~x*Jy$AO$-?(hyxHF}P=qK@avlK4AvQ3;cb3L1^p_%#g
zVYW$$Q4(sK#*tnUT!#3aww-n?F4#1+CR)P&`Tj+x)^;gYBcs;T<gx4VN>LxgDuoxV
zh8VIqt@rZTnIf!>ydgU-UTf}~2)J;003HcZJ|Y2z!08A?0_8L%4+D5=Ci9O`*==aG
zmbvWxEa>dcHO#MAs<rXirm?4&I#dB2ZnR~*u=Y;AMg6YLu!Cl}eV;+S3p#?2i-Mzv
zlcT$iRcHCwxf{yG+<oB4<G4K+@-&R4Y?t>FNB>5d<ZoNUQ9<!ZC32McPZ?3ssBV{S
zaiApG_yQT^fz>c<9OzkUIQxwQ{-Y*!UBCHkY1P*Hc~m~@dfsQYldiAMZHNytTNsuI
zi9}>_;AwN~>;qJeafZQwEX*fY34eCmJY&e&>(5P#^7X}b@A{>37ivG3H3wG48O0a6
zxN5z-Z}QU{du7T*N}6s+%O9K?_E`M+91Qt8*Q;&Q7c5zyjW{yTApY>Xs$ZW;c5=tV
zyeP@KHbFVAZ;MZVUtR57&nx7V{A%OAtsz>1Xrwvk){$y8<gih2c)oC@C4XkY=BlD4
z+DTyaqpZ|mLZB0N?d31Wx=Zz?h|&Q|DTV(eEjI9V=|Hlgn)y&cy&odp#lO~+mADD)
z#Euks#<yo^2%a?rHOn>v-akgNnWEm(gHxxJGHh}SIDIJ^+rdXmeW3?Vra3q&F0TS*
zGUfD}e-44ZmSYlJ_knCw$KL6~rAFh&zp9#Eb-)+c(Ml_MeCc@dTgI!81h-e)p}A&^
z269Ym?%e$5^!!?zxCQ9m(4sY;PsLhTuB*zLD4bDL61brCEM|yh-E#$vH9?<0Oi-dR
zAF;Du;fANvZ(nv&I3;lpJep|sC~wjC?g9wk6O2tvJFtPjR>7AkZqVjge#MktBr#!)
zpC9-ITos%A=)sQWWp4;h^S_`6?C$d*sDfF)=#h=r>VL>J1*!6#{qeR(j<uarN_Uju
z=iAId+SxY!)KjiLg!yT^OBVJeS7Ou>pHp(Zgu(BQ5N7^ZOWfAp*hW8_HSM<PjW5|#
zesZ|)Z(MS4JKvini&4i>&boR&^NrZ0yH^{6IKJo`8_YUCquJT@vz(aZ)X8<wn}6O?
zkhWrL%RfJ`tu7cfx$a%d<%FKR{PNHdoQprM9L7`%zIxW9e`MCZ;L^F<hYlY*ce{N0
zNN}2FS5;bk^6;{O0)F6z@r|2bMU1RcdR3+#$LCm(yzxc88-9c&QT}smk}fJDKGA4$
z`p2d@UEHsLaC+1a!5P`a%w(&1ilnHl!pGOdN1R1f{`^k(F6VPU2Hw#4hu#ej`*96^
zXZ$H?wQrXgDRRJ;4o>_z-I`Kzx`efU-Je~LHkH11KPy{=nbV=7yL|a>L8czN5WDA1
z<6e@@A0-xp*HPx{+cGEZzgE5GwOjtW+0~0j8q@r~XB5|q#3?Q}RV7qsZMt1_uyFky
z2d0IJPk%m~XF|{8I!Zd}g+c0$bq+Wb#%tfl4IBH}5~0dxy&wY(R&$ikEAZ$l(FE?{
z<F}{DUo3vV6e}4a5-TPc2UL#`lV}pfd_L*1J3m$?(Tx23YLn=Q_PPGN9GeA=Gqb~J
z<Gwg`zB5!9RI+NvC~g@wf5L39WmO%xE*Uihu<NB5DU_K~rE2E2?0}7ALy~Mavptlr
zK+e?lJ$GAeFUF@$Au=Ma9_{fJ^4Urj^2r*5-oc}|8AB7r9*2&|9HU2-&mr%gMCrn=
zk4U6af&hUFACJWItamS$d`=6ja7dS2=)7^BKnqzRSf<<Qc<D4}F?{7^n^`oNG_I^m
zf4=^5`v|)Nx^*#)ZswOzD_SF8=m-;mx#s65HBI*M3aU8?165eb?0diW1pLR5{-)mG
zT?tJ-MIo$RoqHCyrM@SlZ7Ir%eJD-0K%)asIdZ9(U0{C`9Xd>db1yPX>8k+2&UQM!
zE%`F@;T8#V@ry5C2EZry;orHVzvVu?iRstnblSqm2b&HO1}djT3UD~}$z?6jSxzL?
zc(K&*v=GLMPc43_bMfApStWOS^Cl$isJxoi01U5Q)SY90TQ3`*2nXwonn-xnKokDH
zPRSLjlV{egfH#Te(qvJ}eh|ngWLB!N+Iu(0WU$Y1u)vaZjq03odbDlpwiTv{e8tMR
znpiRdx4V{IsH>x%Cd7?=wD7#F+Q|H-R1{y@&-#Ec+1cJ4aX4t1S6k~1f%&ikwABi!
zq(%%zm|2g)`1$!&u=e;=eR-gu#?NWkxGTjDZxF-|3eD%kb<w+3j%m87eGGE>>7v!d
z-i|9j>&IF;vhN%^d=lCBcf1}lKqQ{;vDGTN7NL~D!b~M{{BRjwN4@ktsuj)-+4aEX
z?SV({_9G653<*{IBiGBFx&61AeD=RAb6jCTEuKJ}&Y-eY)AdgI!VzNJkJ5g@eaQ_v
z#8^Qt!heGAZMoleo_>X=U-r*npO;r3zZ}K&coWdUY)Q`1qO2Y}?{szP^>;!f4<HNw
z;MJkYYad>Uc3;IaH@#f{<}_>_l5?N)UmYj;MtKQpB}2(pnf8%1E~7Y5;Gi|^$?MB&
ze`UAQR4QJk5f|SW=w%sBA)jp67}Pv5SvD*5Ih@Dx6S9Ke=u@5$DcwZzM77A~On2(|
z2qab$!$b)s5q4!|sL;wQsciApW*_}MEuybCHAOReF)L?@Z^+d-3YCuHinzX3;n4J!
zk-K#3R>zGSi&1+!qN2VRSZf~|Teu}0XWiwte*{`ievR}HoUc!u?TB{6)3%!FNer-G
zpNj`G`fJleh3)n97cIs_-l*yfsH=_mZc2r5UYF?0Htd=`)BI^I1EpS)6epo6JCUM1
zM#UwcbZ)$kz%J_frI)uCairBQ*>-(;M1XU`m9SgVu))KP!fC?&$%EhvOw8Y}^k*3c
z<b7F=t2bGCa0-9_O@?1Ccka2)IOWaXgU_c!Re$8q*ZFWS;NrJCL`ikj_LpYpY*fwO
zbe(vXG!wx~B}cE9P|0?MYJVltlgdNO(1vZE<n}h5H<I7#hvn0w{8wYAgR?v-CKFJv
zrk3fPZi@U#;jnZANRp*|aBC?HR&Yn8`5tVtqlY~iHx6-}6Q<_3y)6~YWF)B$gJ`GC
zwajCczuJp}nKcW)!hSc}sCzFK!RsU9OZG+PifD+_WQ*o!pd>;xUZJJ#s1KlPM*BtW
zh=U{*hvvzo{ECk2vK@IgEbMQu(>N!<0i=eah|7zS41YGrVfi8XZcWa5H@47x<P|jL
z*H<QSi5U%-CN=X%-zDc)z&LSjBgQYEA1J0txpV!E^gqof`-<(dG*U<ks6Cia=RUEd
zCEHepu8@9&?ww2oa&p`HOt;ZkjgLx+VQli}*RAPdfuy(0Mk<aiq;61z3%O_nvuIiy
zdG~lS4is96uS_<#7i8(ljgGimZG69!=f(I{DoO)9O|6YgDK5QyX^Etx@SLlJ$6l#F
z>53BX*y@S@)^dB7geWAk%tND5w)@q4g7bgs9S--ym)P_Gg?8nFbQ<d}`wwUSd|iQ*
zY`s%%Z9}`bv+`=`MIti!ya3*AW5PF~0c`u<xgq;x7hfFi+F#7!2u-66sQ5^$iHozc
zkAH}lUmxIDGemuA@MkNrIq{5Wf5mTKBtcT9s*?OmOF{*8^3l78TsMB_&h0Vqdu|Bk
z3uX*65n7P`cGqpRiFwvfNN#J7no9^e+dRzdb|;`bTJ;S3lL9yGzx#hN-0M=!@U<9k
zARb2(Zq9urXM6hn{TQ9v+!08po0-q-OAH9veKnl65>(fzGiv6WM{#S8!FBNW{=vdf
z%eAR~MLno;+1F*8qJ%=(6*)8<TZu*0s);#G1`_%>uJl*SmtTYs_I`EZ`0@nnB)!_#
zce%#>kv|5_`2CAvNWoz@{!FnywckbIONATZET!Vnu^}Ft`EXUN4kPNx3x3P#j}y&a
zyHB**<I=8McBL%&hS7?Xz!hLiYJtI<Lq}Q&AnRCmeRy;ZN5Pee)W%?TNouV+w(^_U
z?IF%{2?1Zy3n$E?+13ROU+bSD*pIr|s}OaP$;8DOnKWmIa_B7oyxJYw^xa?|isD~R
zSaajDvbd+z$M{L;qxKH3B@auC(>V8ymA?2VkVXl6>}>O{p+dg!@F^S}zYj5FOCbAU
zX`yNk(lh&dAZEVY`|W-nzQa;p;PJWaxbflgf>WwD2=82ed7B8ngZr1YZM=g`bI8*B
zP#LeF)LY9X>!VGkpe;keuP^<ypTx}Y=dad@nL$3Aq&7?9=I$?FzVsEF6g`f6M6MG~
zP9xFHCve$|v?Ebbs$J;Qh#_GDG!{F{UJU%Q%-?!^j+_>`bYe^;Z`VO!N52ApFI>P$
zrP_;_W19#pvBEgbtj9rFb4S!o7%xPK((M|vdg0U3mQPG!nE7q_OP4O8axI9#&*X_~
zU!G6OkKsZS)iVw@wx?IpN_QSN59{le4j(i$60f(`vQ6hyRwgwuG}0~MJUXjU*m}C@
zzJh>FXUO9mlkIjBGk$R{35fx8VQD_wpC89Iux{nr#)JkrZ^mx!=AR<$M6@YP2Asw)
zbNyRD9UnBLR<t-Cv*H)VY0%%rgt8d8j`F9IqNbIK9Qcp5=X5p7Lm7-_NOf{K+NH-z
zmU5DieM)}I`_m}p*7dd?ZoIpq`wa^tPC89)1;e@5@lY`Zh+_oy1M%ur^UW>!GwR%8
zG2P8l3D={pJRx_TN0%fypDAKgpUw{Q@VI@@2}d3YMya=bC1&S%QvG7E)T%x5p%S+t
zBvD-pkqJ~P*Gh-t+mBOD?1y9a>+9|BI8Z0`gZgAVo|{(4G(Kd*;Z}hXdsby=anW30
z^|pngi16Ez<lMQw>N@j<`N1TmFU2$1SWTAp_VLSJ=gAZ!`f^r5J8xp<Pbk)1#<fAE
zr{9!!_~O|T$)i)6W4<)1kN*?W?kj@EmB7e$=xUqtPn;o7!kCp1GhytaoRfUba%@T_
zeISCL3>LoVqRY~~AC_FpC$J`oj%*$Bg0x$>P%8V{-l{oQ#Puz<42#M(*uzFO@#UH+
z22SoV*_+!ec_&m8Yb42v$_j;3r_$FX%8uCY7EHca{`t_-S2=6)SM?{3=I$^~Q@OcM
zET7Vn<?QZQPBhDU5?zn39xPE+Z2rX4?r65$VPM#kAd`(2z>e%}u7KR_^H+nTj41P!
z2?-}&Jzr*x;wQcV(iU#3Q|*i}1U%L9@aVB~=8=c0iNo{ap1!$#6DLI|Px+{yb4nCS
zbiSbATzbImf{xw}mh1wCr_L3UT7-=I%c}GMGP4`WYiWLxCqlEV<W&1>c=4?3c)wy|
z_YOgyi{OPT$BgNuFIzI7aTurSq+feAr%m_dpuoN@Z)0lYFs(jq!k;@#ahT^OE-bXE
zjE~uzNmSmK$bz)&g=<<*_y4tdHk8#1CB?o{zLtc(n%d{@l@lBxQZ%n(+YPJgVU6K1
z{w3W_30YDGEuWO~{kt?43?%#VwO;EsZPcyVx%*OaJo)}ZA9ouwC%gGvs%XgQ`>$u6
zX40C#;qFM=cJ3_S#l8Rx+saCw1E#Hip_nk$<)Rnk?~aRN{M#NV?ItX*$iJA|;xGZ1
zU$W!piXo4$w?rhZs#WWs<y)VX2c6C65>iDAH@J09RC-^5%7sy?VoWgQ^|6w5!$v<L
z15m1Itx41@bB&XX+FhXNOpCWN>MnHV^t{?()N}hdE|GK(jf;NW=R2qhTsJSGR==>k
zd|di__wN1Ly?b2UNM(7cR=x-$&amAPz-v7lQmR^{fH%=>>4Tm5_PQZbK=gyNr8kd{
z_Qg}`OT>ydw<7sB<4Ks*^v|w<xXDcE4du}bY@k(!d+O9feKA3Z+mpD^5W9MbiQ#Z7
zl_#+AVR~+yIlb5QP5FaLI?m}PWqI}GvN#CyW8w`z;VAU`2>OudiBR~x+l8uPu>P?@
zub=!`_w>N>@fk&qCqw2w!{@N!FH=8UR64dx_kFYX1jVW$ORP9{fz<ou>w~Vkiq0Gp
zwL($)wD_9i9=Wt22^1SYS6ZJYbyc&8#I)1b+qa$BbPsC6@s?GA11x|j1bhWS<Ad{i
zgg*w3<sCVKqofQ0ub>feuZDAG%&)V=DEOE|xAPROL@4G9kcx?8=A!RMC7L8FEcv#6
zHIVh861oE%bFVIDe<+_P^|vuosRpufS3}BL%T?hk84U9DY2bhwwgT6D5|)!_KLTN>
zyWVdtC!1tI6JgYw5AZmsBRC>UZW3W!MSYz4$@zEHUX$rK?p6oe7t1B;OL)JcNV{eH
zgQ5JKA`Ibcr`B|v2QnoRTC2TC*T63FYDW`e6s6l8xGMY^m_c^z@UdCC+ZM;SQ^^Ug
zoJ%<(q_Lrltq|;}nbCU{__COaUYgnJ>=~w>$5KP<`A4&^(C){?V%(u^Ei*%yeIDz<
zSA9nN?&zN~yp5AGRH89BdAciYayL`z`#sOwM~>j@)~BwAVPs=P8K1cQvkZ*sx@h||
z>iimEzBIQR@FAiWk7j=5CC3F-3=#W@(qDRcSa!aw{gds>h-2JbTJfEi6>N@kbB&;g
z=3sg;{J-eB?r^N%s2>qg8QElKkFsS;q(ZVsW+5Xhdp=aiDiYa6*(-ZLO0=x(ElT#@
z^F3dWe(!a?*Y*CVE05>?-uJoB`JB)BobyFKR9=xXIauqQp;)__Eb?%#VO{nhDJ#YO
zZ7w7LIY?R}8h^F^Fds&ySPu`Bb`0Ead8INxP^vSyF;7lPN@^Y^@tJ&q?*wtFX;xI^
zGz^s!px=;j+EXaGT;;lu-k;)aR=2s|q{5~C_OVh5ZFo5L`Nc?j@;qIClFh<jpGqy(
zX?XQ3&~&TSi=t4Dr&o5+`bRX(hq;GUEYwLSN$4b9skvV#W&cZFD{DnQOr+x(cjA=`
zX@#G^+1II$j?~^tkcc(y8gCKpF7+ZJ|B}$We(;M$$pv`Pco`+${6dR)HySDHm)iMz
zYy*2RHmkGm^m(m9lLp;YDX)#(Q|G1%&d&BWb9}h{#_XDl-|mGNUIP(1ZZ(?3E9CjK
zqRf)h<Bo%xS@JJglvE>kJFu{D5?SET|K?tN%{X=srQAH3IhbNBCVtI{&<R!KF_V4w
zfK4u6cIW8U;WHA)!eK9*%>Zt}b%!9D0dpHiNT@zIygXHqIGxl$g^NW<uvX9`zfa>@
zZgTH2fViX2Y7<kfe`Z}jm^sP)m{jO8T>1K&Qfz7$O4~*izLM?VJiAYe`yWT41qW-|
z9mB+De;V$YK~xxA*%4B>o#m{&lC6-6xJ-6&-fxZ9g4r?J5Pc+{ZNMuWuDGsc9&GR0
zJBLBO$ps@h=)*}en|}TJWwB7X@>?B7gtc5sE?7%+UFb8dlXjmf{BZ9pY39;+;^x}4
z#+7xQ3V{)?0s=CQ)O%mY4}(e|6#7cJ-|jE|ds{)_@yCw`w-p*y$T{!m!dqq?CE8%%
z%hXm!+KmM1q?O5*jFJbPRl~i}PZh&5)KYqY7m}KubRC4eiW>$Z7g1n2dJ)qw`}@!1
za^#!rUS!3>q2qO!`bKj0?C$l|!-MV)k0?6qr)cg?$;>+3QOy^R-uNGz`w491f<1g}
zLTVyIcPmFFA9ED$Y)jue_GiQ`gS9V=OzSD>vzS~(Q4+*<ed*oFQ8*YE2}^!Xf^l7F
zN^Gylxz56i6G--7N0oee0)f?s_K~8C+*z&L2~!7;iu}}*4_V9<k1sWTiR|ynkm>lt
z%>&t>k9+uAhLDX&vs+-}5HHDsqoX(J=%U9imf2S5w&`*p*9fL@(bbK+A!GE@o7<+$
z_R7-W;>L9@6bFLxV;dhD*5?aawt3c~1Jrey40>{J#9S%8%MlEOgEuQ!A47ux4>mrl
z-dIkj&Dzc{&Z@VEY#uzPWYK)s(=TtOkUh-N@8=%8cyIh4EyZxUkYR&_=aarZ;{IcU
z#xU+5KNy`cE2FX6ANXjuzHVDSz@PPVIzB7ob4fj?7H=Panppc_@?+$HQ;BAurN}&t
zD!Ssay~r4ge`|+K2S0506Q|$<2P+M&HtoxourB?FGZYzDh8pkPExM(E6X3sy_#H2E
zBr<Fwsaf**JX_|ajy0n0)%o%m3Acy5x+S{svei`X6_D;_-(Q^^_;9~?+vt0bosf4U
ze!@Kpzc^REe3N?=BqVQuO`L8D$1liL%GPB1mM9)7FE3vsKpzO4SuJ8Li|Z_&IEh@B
z1m>=;6B$o;t$iUx;ozS7ll?yV4exndC4f#x$LxTZiDf>wUL`-IKR(>Y%qv`K`r=bo
zLz^k$aH+2{8lm|9&`#G{oK%;`KxPyp8GgOPjZd**y}wnAaZERQlwXe%pzel}R9a{G
z95mgCNi1$f-92rAf!K_fuoDyT!z7CJmB1u=^az>d7<FNt#JSvy?KRC%;Q&pG<9(fq
z>m)IJ8j640k~_;s^POt#$&C9-JVFI5eoWz?uBOzfD8{GcH|ml(+>1^ZzT6|E@&1-F
zO<*hV6+B4hWFz(U6jn9i<GbST5BzTRSRU?KY-$EGpjZioe&`wo5|*nslx#;!Qk?u3
z6r>>f44Nke|C9mXzd!MV2Xjqy)lCkUN4x$^`0CS^H9z}Bavs~4+`Vp$#j}2!n7qxP
zt6)`t`kzUtn*50<rTK6#u`F4Vtb#GFpDeXPe$4)H?}Cr+-Br=<lhn^}q^X$y0fKt`
zJ;y(BryL^s_<L@d`9RvP>lYqOjKxj}-tB7+ZF(iIaoMc`Q9Dx04K+!1ZFBZ8osPGk
z=~#Zh1dtv8h$;@3g3q{au44zti4mSxB&71VI+0^mVY0*s+k{W?nvA3{1U=v^lRf|D
z^cBzDrz*^Bw{X1qZ!>yWt8o65i}@h=XZLFyc=00}z~%yeFm><NLv>*IDeh8z#2hg?
z2>WJv?(Of?K988j<B2Ryt#IZpKEJ4?@6+d<X)UEbY=k<`d%OqkJeT$d`>jR&Dw_AF
z#%K}hsHwYCJv9A#!LK(3IoccFl3m~ZORD;AfeDBhT>7{kiqK6Tf3QM?2n85l!Ar;K
zFr!&f_Hg9w1qt7t4ZFdYmnWpS4rCo;c(yC7yK=L@GfHqRo}OrWu*mP#lGqeMTX2S2
zpijDfu-twY3XYR0!NIgu9;>gyHp9N_)&qUV!O9u~Z^1A>a2$vq@WoO-fklW=sq&$6
z9QZgz=pW}pyEeA=7%3QCaK<U)q87=8+Xhdt{kt8Ra65wdcpiADfXnFRpvK4S*-gT*
z?Uj@3hF8A+yi7`mjUuB`-{p1j%JN~nYVz>-vrBJe54Tx__6F6w#ZF%J;sTGQ_St*T
zS94)tMt96*RQ2Q3zwmeoi~uJrImC_`n1BQxGE?R;M#P-0E-T|6ACeisT~swNf!Lf5
zyY=P5Q<2Ivj-Eb@pWyp!nc5}1aM$^}5Nud{tp?{G-aQQgSG6yg0)L3aMCM2BF_rI(
z8^%vEb*VN(dT6iIIhs`vr-rpX+g3%zR#^UPwD{~zjhe<!moRJV(@y=I-WtEZ$~D-u
z*oEfIH>r)8k19=692)KRM3ImjpFgWU9BIh=G;?BtwN@kbeZtz$;^T~lUUw83i2-8a
zKfdC8ob>vSBCb!=nhgl5YMg^AihQFWcI$)D-69~lMRAQP|H_@^A5yRUdC#pFuLa|y
zWYO7hJM*dp8t>l+6V*1lV0QJ$3o$xkE2%N)>=KRkWPhqA6+KZ)j4yu_&hYY-vSrJ>
z<>I6`S&klij0a^y(yO&Q{C;QQi;?BU$>+A<C0m~4rW9qeQO@RhU0o=$@K^YUE*}z7
z{bd^wmsBSdSDGuMK1%|4eG@Rr)=daw2T>OE$A^p`40enCu{9kZrxv|XznL?!xM%}|
zrRD6gPGBb!yi|$NIv?uV!9vZjRKh*~FS0Vj<M4hUer$RZ9;eJuBtQ}KINGQdyt3(*
z2g5E);}0GKKD~;1yZNU*Ogl}h%$<|S>nGi@HRLicDQ%HxUFgs>JruWzc^*8$2lk@7
z`HF+uDP>Zs&-lqt^1_GD75-68%LEP&188wjjR-Tp?79XKaTC1nSRFa<zcoFDb1MAx
zmP7zsgi_aQLrLq<r=+Er(HjSwzwoV<o7T4#&9ReA5Xq1H*b<UKD;WwYGOEHO4AC81
zi-F1Xt3TN?rPa03jGj0=jD_hfRNbC$t8kf_aQ=N#!DOPYC0lIgtXfsO$O*(cPE-YH
z_#Vp2#I$Js{A46_Ov<2Sk;S%iqxV!{_aAF$M@bSFzK8A3t>pXfoQx277t2U}3P@~H
zq{c-Pq~eyt8%`|CXo~W{HOMw<wLUGHj(cpUy7I8>i?2|ObO_mpDW`yW$X&c-zD`&A
zdh_A!Kes;MZ{0DO$?@qL-)5^z3@G}yL7~`$qQ3cTf;;Yx3Qt#JU?JWYXNMgrDIXNX
z_j7r;-B!dH<q5151b$kUoS{ocg5J+3>~=VNjBx#B7zO_=1V<I@2vuxpffJxImUccR
zYkwKH;g!fX^O!S=Xr(q+bX8<+TN0#Zn1w5!hs0G##*^h3Nn`eM?&77H(2$w^?t5Oi
zDkb=RvL^0%8#6|Kd1)1H1Y=GFryL#kF1ma5dq_jLN!lFT-;~esQHxr_Z3d&#Sm!x0
ze_oCYm`KLE?mssw!6SRC{=mV<c?S;|;MA{7b7XR;F~ENEOS!_YnTfBXij<_a+v@Ai
z-NXM8?w^LM_&fU@-<uY?B$lt3a-oSO7=^2mlv#NoI@nOS`{LSJiN`m>j+ay_JE|7+
z;CFnboSp0nY<8;7pZ7FF73KUHCbq{$ay<ZD9Xi_U|EDwh687DFUf4XpP<FdING-DN
z9yBS_J|4mRF~%`L@SR&>uTUhH0A4kO!;Xz033>T7>VM@Fo{RADo4j}pjAPePOaKeo
zHEif!(<(EWTtxYbr|66Z*yWLt7X5<+tYFWl@VAt}Qv4EMWBf0wk>F8shZ2MBo@CMR
zbkGUxhXgfR`T0#{RFf7q@&9V1^*B3i3~zpo`i>V&$2H$Xa!b;5h9K(XocC3Cf_o#!
zZ(-bvzZckrLtBV8J}W}kE0d?oVB;&0r&eHZo;)_xBO)-u$SCS6;~2INQFv#jAT2gM
z9u^}p5BB0c?t+GES8#7u9TOY=e{dm(_6@;rHwDLXp)581h^rW*LiK1=J(%nvkN6s-
zKwMabPPlJvbz`tYn<#n<bB*z7P|3x3Hb1Ji<)RCsN#9ijNa;AswsOtfEew|mWVgl~
z2OS55B|JVZPCdlUzcQi^xQf<B+(ow&2_W#JjdRDuH>=1K*b4+T`@0<BGP}{$Ee~L?
zj7X=V);Yr~>Z@ZF&8hyKaPEoSUya{7h*0T(%2neTYBBe0sZ4e?<btqev$Z|ZcXxco
z=l-&t%{f*ULCa#t+brvkTlHfuM_GpFv;*0#6kTw9tlE4_`<@mBnQ~7gaHNTkp%&v8
zun3ahq9>;D5X6C%W@&~)huDG=FZ<Wy(?$=&bBrZ}Pcz1UbZD2(mOMBf`i2@(j3MHw
z=YLLz^X){?@;(SSzK3<hz!wr~H7THdz`_>{I!G}N*_c3xc2qTGLI3Y}PAXa~oN*GX
zJ>82fGeW0Xj-MC*x$NKr``NS>V>~O@_v=sLcGbM0s<?dRzR!)t<<Dd&gA*1<Q2^f)
z0Ru2W0-h6=KZa}Ki9?5Y4?G@b&f`_f4k4>vfK}TQE)l&Qp|~%JL&}bp31e#wH^Q6;
zSk}J79o*?ie>Z@*Ud=DmF(-aK_rw!&Qf?&~oEmOf6z-y@01f5@7YIt?x|ECk4tj<s
zONujLeLPi{=pT1qapqLv=ot*87rJ&#mfIsN7VWbzl<ZGf;fqIC6=fOY5G?;AM{VKw
zj-wFoVe&$m1WV>WYhbXv$Av>2td@GSCqpQ}-fWBwLOyH{+8)8)NY%08B6ww9HmI~A
z`#t7@nmjLI-5Swt#1M-`A`8)8g`wc>>kCcn`GU2W$B{*wqu9&`t$rmhN-Zei%_7jw
z(<Uk|IDT|9?mgLJN?iUL=37pn6cD<d#Oje8Alt-*B__VBEMpD`%<@JlV|)e5gc7`5
z;V9PcNdHZo9eSD!bxRR<ds#(5#0B^@(RnqeD5sBEucPlD2mbiSFv?#Txq!}hg9(nF
zrxH6a<5B02JnqB<#@9?H8Yt24UF|Q+((GuYOfhK0gaLJGQMfmDcUzudH&=J>#T~;2
zPHxWiuj+dHgr&}^^7k+n=YI`$*tFvbQ*J8d*pNay%s66v&Vg9`vvAd84`@OO|L(j0
z4)S6f!ZX|EAD$-bo6j?boI^2EOr@lK*m1bc7`%Am&QVxhDg{7mOeiRgt$cnecGY8@
zw@>6jU^|%X(esd!O-ZIjO80Gf1k78(A)rXya}1@z?Jf&liWWT1YULQ)Ev$)J`abaB
z3!F_R<IEq+Elqw|@Irsm?ssnb7l_2jpCUwJ;1S4fWNw#fUY*ehc0P~bgt0m>jiK_l
z7mpoB-))G5B8EcpifA)z^GNU9WIrFfqD*`|ESv=jsu$ooAJ<`>`R8Tyz$?efQJ=&5
zm&;>d<&q4lF6CV37h&gR`0h}`wd^6yK-$eR_m_{s0l`N3@8dM_B;_U>tCkp#DbN+b
z8WP<CfADwdyExa3)ii#=0DII41aqJX(QEh>oZ$3C-&g^JLO@3a$v=bZfV=0gwgSY9
zH09P*qouW<H>&NgDZ+6?pz*eidJ;TnJuNRO9-AFj5yK>#EZPWce7@93Arx5-9KX8p
zEzQLOwn26i=4;@np7vT7EVzsiIN|=pz#p{NQTDZ;HC!Xg$fBnRoAgSLpy1SpOb4&-
zZ$@8p%mt`0o6^7o!P~^h$EiFGg7;j7bz_*U34m;3DmRONS5^kO7i#Ud0{u_oQUv*>
zHJNr^h@<9Y8ngWel3G=x<}gpV6bL4A1XZMo<8(6L&HMqMcT)f95sQL<2NkK^ratJg
zc<RAMdbqz2?)$m{CEjFvvr(MjV{{sd?_KW}%~gN+{@PonGxkVYJNUMTdhz?NM7Dkp
zLC@*n>zHpU%z_2mRyjPru!aDo9fK1m0L4M@Hn=5pOfz6rBQ$?Lw-O8*)Ha##XVBW;
z>_D9j=m&SufzAEQRp%X#+QllF3z+DE?+R|Y!58m&{V?3fK_A=@hNBzF1)IsE1Dlyg
zdd?B70aDw6F!en4Y_Go1$>V$EpfvXPQ?-`s)OUX|UD)n(Muy7Y7Z=}u(@Sx6jk<Si
zM?`QTe_b_vs)!~+oXAN54Mr1Z<N|tQoj&?5aB1V<MX=rQvGLux3U?Rxxrz%SGlr4K
zNO8VzrTvoBt7WXvYuCgu->Yj3CcWMpj8EdAWHNa5(;EJ+savKMrrIEzi=9AZ+bPIm
zd=>74E#K1BHgPV4+?Pkd{Ad&R_?HI1e)6<%IGI%M+kF@<n1)HPX8cu3s&v()5-M+@
zCn4}1{qh{(ywlbBbdD^<cOfDUkwD^|f*7|9=0If8|7+Yvlv}g<6-FbyY6<p<t2=#X
zKvi@=&XK^CL-CR-+wj4MT{kle4B|yMfpOc_xId0S--VwlFJk`M^%`_XXS0@%g2uk<
zFU@hhH|$XFkWbz65iiN@r6d3Hs*QA+7zbm-uEfA5>4!I$cRo$qog?PE%q9m%po}h7
z?#;M!zc&oeGv{{Io=8aCrQ?IH0n@>*Kc(RBUk<$fFJ9#)IrMAfW=>W`{Uhu4)ZlLn
z5rEGD72M&7_Nwvj1IRRo=jA1Ehzlza+B7xt<{2%4i^cBg$BsgF3=9X)_bg1@vL~!@
zY75+{Xe8eFH1ZTeEb>@NghO>c2Bjl*xmrPP;#brFpvB=BaTwk)UVokQ`)d@Q#=!4q
zM=nS9Ee@Y?eKv%!sa2l@((V-14aBx<d$@}_>XN5PRCs!BW<_VH&JnL2XR}uDBqTyN
zRo=?6B6wWi_Rcl*Rj@60e8poi0&!t19M>G;M`RgsPthf(l4SJa3E)fubYQ@T)LZT(
zf!kWcmopd!z`qz`zXU>xp(L<ti*>sEKVCTT&o7DM4ybt<Fg!dMXz3Ax6;$Jwa2aSY
zl=!ys{UU{<La+wbdH2;ozMXr!-~3zJ8V>-X2Kd#U6dyz<YIWzB<j6in4`HmhPaf>4
zOqVS{0c{TW#r>8d9!`KfY`<L54_3@#WS8J7Gr9LB{~%dXFqsUwX6@x&$9~reJfaBc
zG4X;{BstH8`RW65a688K7FVH21Mq;i)%)n1T*;|c|KQD3K8m{gi5;kx>#`;a^W|Oh
z?>7F!hjiF!^?S0laE#sia*j_@^&hsJ@wprB+<h)T{VN3~JP{#AgGHf2QuqelwO23`
zF1c<;CC<d+?_YrM6Wn@D|6J!y;M5vOzXP|Xt8X%22@a^d<5k29;Eoxm|8qb-jEZ0z
zU?AxK5V$NIautLzS0UK=I5C#E1=i?*x@gy&sr`E9TwBx{<`<R>O}00>J*NXBlHJmS
z@(>1h_RmetrJT_9uHx6<S+n_*Fu&;V0SrH}rt0@obUiqrv4^rJP?-oC^u;Uyu~1lW
z$M>5~K#eobeY;#+xM_Ex)`#V*`DL(6U4vBFl`j4DFW1R$C5#TBNH1Wv+ZRfsb4s@F
z<r&ei?vphqZh^moNc8}<-|VNc%@mH1fbS+)#bC>;WM64MD6JdC1}0Q!I`A^oF%e@q
zM<PZ>|9;0@-+HuP=0X(7g9>hdt#0oUI~TGv`-N8<Mj-2Hjfy&r{JK9Sass#tPi4_;
z@EnC-<w@AEeUS^2lKT1>L*QUTk?9G#0+5F*iPg?cHJ^<(d)L#kV&MEku+J`VzOTIa
zl--f6>X_o81LxnWcT+$PeE~t|934l0hmi_5``p9yQd6&h%Pvlej2yVh{9D1=YsOSB
zE2D)lOD{TIBT|<%xu}n)N{m=3KIPq?v#;qp(#?Eca(P^Lz<w@_`9(K?H30_Ls4-H2
zV-9(u{mlQb163xaqTYD36I5{PC)FdkpS!2eeA7~qx@s`M@4$>9e9+%vuWQeIbHMLY
zfGD6s@eJeM_So9ZdrpM!9thUAG=mt=<SdGhoMyVV7f+vs>MiD=8U3+=eAhX=uW^zJ
zO9KzlW}>=?=7v5w)n+cdX*o%YQ+$jyvEV}LnvmdQp-vzO_{7w$5Pw|6!WynIv0?%P
z@e(4VsImNd9aL*bJ*8`G=^pz#1wOD=6#DJQc};Gw`$V4YWSHAy2`L*!(UwfW!!=}7
z`ax%<g!Y);a!5oEt*1<ftDO?#<0pkUzKLTYOq<*Ehqj_OP8;Jc#BTp1icSi$Ty#UI
zsQj0LgS@r%(b*Qfi$8vUIYQFF2qIQ;id2Qzp%CnzuBIaWsec0E=FdN~!2Bsj6E!6K
zIu8faU>Ot8RXHiVb93t?-|vm>yd(nluFIGd^<Xf~T$A-~=94s5A<P4Nvp}XHnjiKI
z%EAB?9+U=?A6;J^?0UN40)dmW-16l<!nhMqd;5$V#eOsY!pYc7sE<)ZzFa!Kv2|$F
z`TCrZUEcM<CmJIRi6nMNNpz4WMh%-ci7Qmv$HAW<y=69fnfiFwxCt}IW9t5C0f1k;
zF}Gm-hdAUc)UyD?on|;GD2XkC2xiYxgb-umoGjxqJni+G3sNKw*|NnxKEj8K#!2z?
z9w0_cz%CeCO|^)jn)#1|7^6d3?Cw}WkV}dtehqT&xA1iA|8j+Mr0$MW-1;u=v4H~2
z<ZzM0WJ^C@T-O@)2${aYfY}&Z-lds1ZT+?HL}jh0v1mTHfa$aYK9A4oeY1YlQ9hr1
zYWeuK6~Tc>vZbBGjvxbijwLoGo!G$utni^m2QkJ>aOOB*M<nuTF0+hD{3{Y~J;YW7
z>o+(Z_Ekg2{*S#`PTXmXQ%0qO3QP4Fy$^{)GP+OFr8{E3aFya!*wKEIk{uU|Uz<qK
zz=Jv9pULcz_n~zqihyz~=KGYdO4H^wjQ&7lW2qaW641nPuj)hM|6~!K!dzZC7DRBT
zXH9wy%?o#;;<Ew^4jm^fQHhUR`6%af*BAq#8NB`|ew&?n{OQAynu`-s6E~72D?wcM
z=J|8Y8_{gx+s*Eg-><;26t?OUpT<T}Y%PCm%XT->P5orz3&0`{T{Z5r*5z|(iAiIS
z^)CVwzfs4@!aRn9TK~K|^L3ZrO`hvFcum9?8erSF=IN9!+YMXa1i}EH9u<?6k@+)?
zJb>L);3yE`>!Z4>dvkWgHa^LDog9i01JHJU0pHf!#Q%n+CmAv3@aRBMc)FSY@@ZyB
z5?fV{lEgkEIFmACdD0`du@oZ<Rq2E6zYOpK#{M+UpBZWe(DcN`%G#LbE3^>~Uch_e
zTPA*=%Gf}jO?FXrw1|<6d3k#XC1RwY<q+ZZdsOo?{rbejYbyGqZAYQO8=Om&5@a!P
zL0M}2ZP$qm*BbZ@gngZM;}L3p{s{HGH-GA@v~bCxxBE{#bKrs<UZMl_oMtmjzrW;j
z(O3F&O#pM9704?*C*qB0maFOr2Tz_k&b=1!5s5p4bi3MS`VV{p%yCALS2)dPTQ4m9
z5I1YizZAms+#Px7k%(mcK15c75RjOp_ca>CD=i-hlq<uq3117`zwwQDZ9M?-c>Z6A
z@x_2Q?bAfWLs+k$LoC~pH!%SUOsg=Q|0%py{>c1zn806PP=Gf4Z#MjI%>4<LOPK$y
zx!CSvA)~TqT2%hjoDLo?PWJE0S>fz{#-RJxu3#Q)k9%oh+>xfxn}!v?0x$-;g;>kq
zk9`sow;ig`)utN4!Oo4U#uh7AA-9<eI<KOngky`u&_TWnsH0oACC|vrEdRGHr8AtC
z#E4oNq~`Zq6R$BbF&R-u%1J`r5%AYyO&0wCd$!H4hp@i(Z%N4)$Q){T3bUsMv!B1q
zja9l2Asn#<Y$*7OE!n_q=RP?Tts*x~rq%PV_%T!%$8-H9`hy*}mZejy!uq@O*!Vb+
z=-Bz@EX6F!|FuaPRCxVE?a%7=I4X6lGe`s(awd4M{r#D1=c-=vx%V%>9ywLU>j<u8
zB~*#WXH^H7sEm^?fh}?#*4jc5=0H-IfR30SblKPw7o3AOEbeR1$XstWL@m=0g%;ec
zRxGz4)qa2LwdVUXK}NMjw?*@fdtVn@s_57ofuKXDELSgv%f;IM+;`oFNT#U55zjPs
z8_|7c%`B+yOz%(!SzOnLD8`Fo*RbsTrqs->@=R!iCd%<>4~X$AfQIzv$HHPXp+z}m
z6+h@VpNJ6=-!&cNp+OyS3l+Q$+XLiM9T`v0B@?+-6P*R{A%;u;BkHEiS%dsXS)HfY
zPv{*Tj+pk?JCXvM?S{OFmdHj@P(?jytQ4=*$y>u+Uk(h6VY=_ho}v8k$Q<O@9RBoZ
zb@z2E%Z!N8-g_O*hh&Rzd(}Q$MgFVchf?e}1mZnfUy0Ebyzz?X^@n@k-y2ps^>6&z
z0D)+pZr!a&$(>Btv-#ARRbMVsQ`4QcCxnw|c<-fF&s_g-{O`UZ^DBNLD>770ldX9m
zZ>j3$uTvDx(dmR9w0k1rWUh@oIB4>_WAN&gj{GDEm+{8aNuY_}Uj3^B%4@9(2h(@T
z=Xd3LXhk1#xJ7(%@mcFoDs|o8G%_D9wu~&Z8-~WY6dfz8%-*Kb9a$0*k}EztCB1~)
zLth6u3ZF}Pxk3|;Zqi4`Wp%>_$D23g@!eT3aoIlIdCI?;NfZt{>5lt!GWQKVt^p4J
ziPxB2R0Sk7@#^Jc;-xHfp`mb>)XV)swHMS!<N_ljwv;7NPn^r@NdeJl2+sRBRWh5|
zPetb~>(L=p7=I*&)8s3xW$$;Ho&m=U&^s!DSp?+>l>@tjrZEJlf;mv3)J++(?6(M-
ze_v&We;a`3*y@SxASsLjGtMocQ4aeP^7GxJt@bxKN}QnFy5cgQeZ^(w8%LE%Y|fo0
zD+9G&<<tv3^D+rUDbAny+K*+ddrN<GjJwl`*s8B-)eUtHl-sBDyF!bEb$@oL!Tz|7
zg5#447f`Zh7MUx~1}aCJ*}Y`Cdg?60b}~)v-iI)})ik3zu6&1IA906`GgHO2dTjek
z><_U9Def(=O-i|N8Hzqsa35$%+sL}}ghMGJosxIi>JCjPq`6SCDL}sptzMfuXlNjm
z1y<uZ2P&LsO=tR6<i-Ee2Y9?)Q|`P|MF<DQKu?#7h~QKFLog5pg@e<x*q`~gxvcRt
z?B&vR6P4ab&4XVVQZrZ0F<v8=qj0~SPm6vzo^NzzzEX^PQuWqp$T*lx(@gA&=HIxj
zUvC<3h?n-j9OiYn@8|Sy-H}5_B6JChhz4{H0$#%*9v#%EHZc6v3S$ytdji@hI6=xW
za_%$x#I=^i!ET#1_pCccuPxjC4-mDeo|V~7*y~qZVntqmRaN4M^)6TV20qQ!uB|c<
zx9|U;C!DSAQYz)U!v9VsL1d&Z$oKH>{qHYbOZ(l%{B`KDGb-fg=HPmGR+^qHCwQxw
ztEs$7$)gGFdv^o3vn%A?-7Dxl$432#rKo*xWZlVdovkZ&W=U)R3_6pESTazbSS8fE
z?PHGzDFaf)yZ2re{T7>lasCZ7V3k=tdJJV9ZE~cofI?F8TlOy!N=$%yi0IuCo;?MY
z<(mKgrShZVj(;akGVN_889IqEjBkdpDt#EJFK87KX=&<?*=2A3_N{&G9ot2sx|CpQ
zTLhyR@Ff@rJdCa^X`-C{6I&Sv!b`-3LFHj+@a|3i{a={M!+*6JrXxuO-6I19Ug=A2
zBi{F0qxxfp=LZkFi_(-zO+RhwU$Rf0-H)B=>QEAtDSPtqy-I?RTPvN^MxVKLcU5Wc
zGe*g~Wx40*!z6Dx?hJV#3VQ*1?pOT1HYzj;%WJcv#z|F=T)0Ih<i>wS#&*H$B!6ra
z|MktD5w>m|bo()-P9tp_*Z<zS+d5vtug<{vVps4u!R05Qqs+EU_WW5YjdYcyGF{cG
zx<&ou=~J$~g8H>}otwh<mg+}KhI7;yTxLf;3C9&Y<EA?AeZ?(bWPd5pC|gHIE4$`-
zJL%xTYH%<<^|gz89)Etk)_@3jkSLJ(_icszZGM@rctz-3nb^$rBDFwW|1R(|oY<YK
zq8&CKGi>+qcQBkW@oh*FvHn;(;n*V5r;VG}F{gHT9@C%0yz>1_1+v9zxQe~=xvIhj
zUIXD9m|(7}XfpFnZ>G>8{r)%;@p09`>|O9ArFCAFc%t9az8jN`M-=|pUGOaKz0n=S
z_#*HV&fv3X`%6fqlFOkltq3S8)cbHhRJa<3=_ogyTy)ES5=xl^Z4l?8mUzh7DReI3
zG(}M7nO+Twr&=KE2=+Ym-ur6XovZa-@Qawfh9MK%kM@Q@;fHg(lX!}kpIo~stpg1{
zW<o<Hj%n7t-W}@)WhrhI1KS@e0(2-w6a$YNo+3oYjW-s$L2jsW2<WeA!1eIJnB0*C
znV+FCBlKYW0>97B+PB2*QEV}h@elVi0qg$xKq7>#Oe*F$pH8so&8=+SP7M|)X6O_J
z-D_u$X}mJ1Q`=TwWHG_vfu_U0sPFQ(k2Z`RpYDMB)@LuB%~U)U02rt^Y&@W$<;AbQ
zIj#Y@V(&&=xLx`}WxY4%W?5*G|30EBKGYj@eE%WqgSBbMn{Th#sxN$Ew?NDu#fX$c
zo{yeLkMxg4QpAhbpUT0Vgmq4RWM$)VgN`!udI{UO5eBJmiIYi2wO#PmMYE(8Bp`ZE
zJ%^^2^xaSjEtqXLu~)X<nV~klF@G4JV)-@d8oZjYb78m|Y17QM?PmvJ-dfO|eB=7}
zG6(pb9bn}_uLvJM&4!6^H=w^Px5%)@y@Rf^BFx?=a$cb6a+8G9?_fkv`lls9=gkv>
z&+ft7@HWC7=nijTGRoENwzW6(+St!VG@dH)Lg0fmqEyU6x1mdGpnQ=sNpd*@5tA}s
z3;pKaer3i5^iT)8#t*u`#mw})E8bRzZh-D8JBd{n5T?d}2;1HMJWIx%iww@C;!b;y
z1@3(zwn+g^?^NYVTYL(&-MKyAFG3Z&0`#|~-Ir1$E=Xk4_S$E<FOL)O>RuYr9p}m?
z1~nn5{$FbhIk!m_<yRLagA`R{kZSWu$3m;iU*DTaS4!b!T+*xa=h;=KdW|<Z0iki}
ztt{&@7>Q28VA!CC!&P|!xZz&;w-YxXb?t?F*&o*VT=Ctj_;9Z!+w5~_!tB`e{anAg
zp-RJH=|iWiWL{(GR?~s92Wi&`DdSQief@IdYnPvH4@85&EfLRmUrQ;HUaNJevL)c0
z<Ni5n^JWX18vC$SXiI8N9NoGg>f0N>=_}!YrmJ4s-%NOdyHF=;KT?x*67Sqp<kg^;
zf^K}|T$+8n)qs+oJb5x*P_N3R6p=W&7`iMm-}1epIjla7w5sW_fJzbi9yH5+19cPB
z60X3>8)+dOWyQ3cipi25KkDr(y!pWjM`;C5Vr!qD^0G=)OzJl&EeuA;cs8ValSZF)
zrM~&dO+e-s4Z&3+kD`d#<SzJ@p1ZWnN6fB+T59+2{2li}(FNi62suq0B)clmEu1$`
z<&A-%g-No_)3ri>n)&T0MX`2uAbUAjFPpGE>8zzu(EiHxOj6ttEDtbDZF^IMG>|gt
zF#13SpAAWP6xVe>oLodBVN(#P)ZuZ*@K?}TTFnesUgtgQ?i`!ejMcX->&?GDfr(}G
z<QrXJc`EI*n{ED=Z}Q}vdO_~yH3}9Et*Vmva(9jSff83A$$Nd()`NT>F8ME~t`CVj
z3z=<IU-6o}6}G%fM3wp~Z;-=oprk`Obm#d$k-6gT-tPKrcfCCW_!R!8I2iWOEm7;q
zt&{&HXke69{LW%H6@A8{V4HLf|0~~^d(o%XXCHu=eo{=)F>v8-mDN#qiSRS(Gk}DQ
zJl3^VebS~BlEt1W4NY&YKeJ!^9j(UZ?x!HU>(F$jJI{c>NBSxrQBTF8l;p_U``qE)
zi?vkqb^ER{r`8!#1M!F&w{p!hRA>5g%I~~Wy)aQ+@r*lncR@lpQ>WK<G_QGZrn}lL
ztge3F^|qSS^5bpaKt+C=Z(UiFvj*i4IhA^NCTF>{jBbNR>K+fbxV(@-dhy0oCoW+N
z-b!z-UY>NV=j+e%Z;g;Pm%iomYh4;@pQpuLzLAByyT$3<W1YDlCgU@Ci=0=Vr=hf>
z(*)inYrW^hvf3OKDU;uAQy*Hs*n2Z}CfuSR!47GgVrbdx^PX3A#GP<^<J^31pwe6^
zOgwCKS1vFp^Y*Wgu+#R2X=wEGhQO8$q*eN2DCL6<_LN4dYU9I$nXY#^Va#k&Rc@Uh
zw^z+UP@bRUxxR2dtuVM_seQ5D=F6Czex0pem@gvxN6Q7S_f14r+tC|eWoeSQCOvNB
zmQfMV@gDkvG{@frnF(!{R0OD}GUuBK7%4}{8G=h4vyf%1z!5R(%fEp)au&m(d$Seh
zyW2~-7;~nCx1ljX(cJ)$JEFTmjX_zQZfI5wiI)CJNV|E?%=wWI&IFAx41$7GcjUo`
zY)S17c@mQ2RDPMzyWBF+h-!Cn`)&<!Fe0)WqFunx<sMN|8{YI=5PEmqJo^giR7M0`
z#13I_*_wGShA<Leg<n5c#VN^|zXZcJvbDo!EH;`xeKYpmU%dLm5_I*><lIx>Zyjee
zGj-Jor47jDX=fJ6bb|9VU=V=M?i#f6M^D5Q=$FP@`0YF>v3H4_W%4mkCI22fTgnzb
zaX}E?6RBVR3y+#eD3b27e41iJaB*$<Eg0=^iGI9(x8WcYiw842puna#pVK}+ad~p3
zdxd<N;$%gq$3cz9OuO`l%qON-L|+9B*^k!cHPickDIMX~DbR))t7$Fu@U}j!&36OK
zO>0wWk=Cs>+X9JcMhj#*Qv<a@o}1I>SNSso@zx&of0*2b?#t^_I(-iII|H*cef7pQ
zD&>nq@7mkjsqENP;$RBKPV=B!M^u~Ea^+uAg3o*2Us6#tG7l5CJ;%nFJaeuFx$oYE
z*YG)8wuub>{_^_jSsFzOi|d&cA1z^^Ah!eQAgiKjWS-1nF3h2*kdCk)a$Jn;XlJ@Q
z^lcTwXo+hJjooM&Z|g=&ylC&#<wd34Jv8cM_Kx=-swX@P^!GkzYjJ6?eOOYwlMfR0
zS(xE+`W#7Vh5WbYnx3_Kg4Dk1{A&MoRjWEYq+z`ar>87>4+m$Cb!la!9Qt&pKEIqJ
zlPQAqt`ukH9>-f;qGldx%RG({OkDuw2PHaZQ7|o0+!+g=x7$QT3>)t`&5szoEv3|-
zXwLzMHJ!s-O`zr;b4L;2-mqFne~xI2#yN7Li7f3_YY98vqila!71*Q^BBIUeg76aU
zYx?dkyi;Oa>`_Oc#GwrR-OFn#^kz^}5^FyYuA?|&N^^*G6-Fk2wo9UNk!>x#LcR;H
zY1Fn`pG7f3=w!9$dbV|~?x%H?P4IzQ39j=lqdu?KRyR_*OK(~xNjW#!N_fl&3EPrw
zr<OYo-!*J-?;GLxc$={#^`JnLGloN59$b+6I;D}rI<@4ZxNka{sll_o>oEVclKzS)
zO<0PUa(IG}V`(^8D9faGrE}##sa5}tQe#i${^I)}n)l6l4IRJ;8gE;aOtqIR^!>Hx
zv06JIZ2X9vqOZm!;ZFMXH;<+}Ih7*5VB;xY4$(Jkp!$C4!B9!ojaaU{yumW-ja)q>
zaTSkT?jKkmO(^*E@nibofsRd2u6BXj$mLO+;j+9D@8WmcSJXyofPT;l5bYfGJIs^E
zU8x?}KTwJTxKL-c|298F-Oyw(A_?Ixa$5N7_udk;y>#9O$UxbhWjsn}+1r{lv+YV0
zYkb@d+|jfN-Mtg02N~a`%=33)cwl$ATLBf(RQ<-ztmj1d<Tr;lsVjhEPOZ((a=9<B
z<P=!{#Onz4^<MuIYki<t{AE|dK%|&hc3R-w{UI3*=`C4ke7h_oIOID}r2;v^>3rou
z5xWwrU)aUNKO!x&dT#Px>|-xGwM;H22L0vF$T{ikTCz2Bvf=%j(}P+$LOugR7bM*o
z2NoNXnv%(M+{Z&cSoiFmMdavw2Y=r-MPA6U*Uk;5$XB;DAA8PZL7Nub5Opo(!T96T
z`67e9BX0tp5LEi+8<$7)6c|_@7#7{RC~Q9>PekMAX4`LjP`9_%sg}RqSAOWfy&L~>
zwkykFxPk<Vi*AthJRyImICR^pL4I;n5OZs8kdN<pu{E5qdd><tG;2s?D}LV%6Xh*Y
zPhs1tJTo?3z#w(#8u>g;ekHA0yc>^?9J3rk^i6>vnRqD#d}d0a00)xk_!Hq;<R+(y
ztd6YzI&%hwgEVkl%5!88F4$Y7es3bgXnB-hdg1eI{c;vgqFxQnpCge{-$5w;1B&uR
z@6gZ^ofg}exr7rhj&gmRaP;_+eOH`wqg?R_>ofm)1efzan3RJ;CES*Ray3im@``}v
zmZd+*JhRX4Zw#qv)heD{{VQGT^<dy7=j1FP3#+YQk`A+j`SL)|nUF8`p`!Hh2Ohl-
zdr$sR59Jo}{6p?@N!%$hv-h#1xv+aX<7%GB{J?{$!l@t{=|k@j7!hvjYgF%hQYGnN
z@sp#YR60Ycn7=yObf1VejT}!5m;`#iH4^7r6A6=%bTTBoFm>dWi<FfwCcl*&_<M98
z-oU7A{YuYLr0axc)cyKlQ4oU@IhL5m%%hUGr~jqE^SkSd1*&(eJiUpo`Na8+<3+E3
z%PDAjZG4Dzvb)IHviC1gmm(7q$f%)_sm<o>ep-8lS-+h%POW_1j_%1-{@9uRl|Ogw
z_S6kcKc*9{Sx;Qgkm&tTP_JFw8xNhe^j*d!?#d-1fTA>`b&NztxiNDR7Iq+2KKS{G
zNP29?<8N~9HyB}2a&Wr8sZ3Wr6fak|^v3;f3J202o}YDaeoaJLW-Il6@p^aYk2TX*
zd9&n~sNF#N0KeivEA2Iwb9)=rv(8AiWMorkKsoPQ=dt=8dPo<!sLamL7)1Q}E;Vnx
zx}2+~S?p@(eBgJmt%SRJXj8L@Mp=EvLmIT6{rO()YwR~rrL{R~+@(=vHGjCbsz$x(
zA>W%cPQc%tmBU}ZHDqg4>ghsV-|NN)&Y#M!7lJYSo2>02Lc}t#nXfXMoJ4U0XS>(x
zI&j{x<5UMJGd6yoa_YS=wfe?R&!FC5o>3TrVUxc=Neiz(02otWGIv(iXkQNT*ZYMG
zEw7JChEOj<22!O-alxRXJqgEg@@bGC6rCpf5vNzJn5SOV^#BW_Ekb`lep4&lw7{x!
zIq+5Z3v@0b4z<Y(ib=~#mezE>c}8Q049XZas*Q+_9;X^<ZW9?ezwB11@f;Mp?s`CO
z8Jz+?orf7d7|Qcl^kXo1Q;xXj;x{RJ3q@I&e*}&Cjg+YfT6q8Vtp7a`Y199V9GRBF
z%*_1A?@d5H-u|bE3y~XRYe}kh`ej}4M)@BMqV~h@nKwu6>*_QhI_P@!Cf7pMX)=&K
zZG<-K#iyWzd1#MwfY}`3v=TjgL+;OOr)>%<%^)D`tI&#OyS7laxGFk6aiR4MR%bLF
z=*qeRo=xx3o901#Zs=~zcbwqPf36vg^eJvFvr8?Z>xpJZPp7JXI;CIjS-L#|j6tT!
z8~Oac8g;{8fa<jhT5nFqk#lKxjkncrZPrzIXj~(BTGiv-J7WA&)ZVD~uR5U)6;bD5
zg-0mF7Lp0qecNC1r8b=d-t`uF`a4_E{ipK>{|ymvy<5F`dr|sw&P4{8E7P<?rSpHV
z_m|z>g}3-_Y<0f-@hiW7Og}T9{_w|hXF4P8^TQ$g?bY9|wUoY-xw9i%$1|ZOEo*ny
z)XNv7%zp1fl0E%Z;J#TSWt!<rQESb-Z0KW6SY&-CChL8T_(05C*Hr1_5AhqXybWQf
zO9aKw;cJ5Do?K9e0>clH1%PuseY&&N1)22|2w09a<`3<#Sj*fL8Xx}hkxM=FsbQ_B
z*0$4Mr_%ar@MH}z=LSOi7iKC&xo|*WTNUT`=C+n6PM2M#fw>gzFxu(K1?k+ydgFqZ
zOj%tu*PMZ#Y^D3u2~&wustH{y$j^jJB4YLCdyiz%udp>D+cYxHhuTp~$bk@L9hYs=
zE>nA(nXuRqBZxJ*23e)HA-S16S{&*_NyV@3Asmy~U6aOf$C+~P_|8sN87Ln<M~_h&
zWa-pS89yXRy&ZR4UDd^H;@`bJ9IKFA|3@Aa63@6R(i9RTusc^o)r%!x{H?1z&PCrs
zPMKT5)%Y03-GB=}8h5jRs9@wa<pD1*q~Di(xwrkZ;3Z69E#6L+@>(<8wruHby4q1Z
z`6JvVZkj>Wnf$u$%I8=v<2M2Q3#!0*)4PfeDER1(ZuPrc)v6{{!GtS^0H$Uwn4A?f
zMO(Y_Y{Yi?J-zQ*ht)N*@pwj<+oUWE$mCaVAYP1=R|J*mqlG>>B$kgJF6^H5{QW}7
z&<?RrfC!#b4S0`WHkb2IrlalFfmgRrR@wH!ajHqqTNg6XY}1a$n)LcN9PYl*v)jMF
zCAaL&Ev!e{48tr0#NiK=h=0&+7}l|>tI7XJV#(ilFwfei<Ebj)Hg~C-es?wf=etnv
z+jS2nbk<v*kx$M7*A}ZD{CnX$$DP|H4)-pH-FbJ@=1=*HYXaldkQi(^ey2bZz&CtF
zzVyZ<kE<o9>RJ5u$@4WbKDx}$2(PZhKEC-+3otPv<@Jrj$kY&z=z{jELvnM+@`{g%
zYJaoz*Jm!9B?x+zRXv)qs*`c*;wW`5z8@w6S%!Mr&U(w{B44ih|1%)YK6{w$eT95e
z7<H*b19p-$dH&na&#LKQ5LBi?KYtPs*_0M+a*V0i8Tlz%2N&|NX--Ci*{$NLN*=uV
z@UC@cPvPrPAs_7u#%5Q34=2o@7g1F@_2VN=A^2RV^M6&dO*U`H#Rz@{uzrXe5oVMl
zsdunXN_41%K5qAD<a7AFc3F#l=UK#oGd(lT5MuCynnEwv9KLy#uDx)JVPCH|etYUz
z;;W7H`e<nfh!H!KfgL8+*4?A@hA83C9uMV$26w7jm1<Yd?HC<0Qqpl!-C~PUqlfKi
zmKQ}6?3v&PU;DttGm)Gc&9GF10Xpg>9!`H-^Q^nGXWx0QYr=q>ch_GqE7Acnuon`d
zfAny)Or-=NqHn+Z7PEdQsVaMKZ`Dyc@q#hP9^!T1R0N;|V02u#mtWZQ>PXyW>yer#
z+f_DyRpVih&Eza+=ld+VPl_F9yw>NkraRxqFZu{r=3CcnnI&#2b?q(|bXpp2YQrcF
zGJel`J<X35lo5bBZ059bBn##T%U-8k<ITUFCGRmmQad<58niVTeC5lmN`e)PSei62
zF4$63lip4rbXKs7yA4BcmOi<S=5?npPn0@NG`as>vT%H&_P13l<DC8Hir%-Uh>cCd
zrK(-COh28<H)C|$q5dpm-IJfE&)=g7#lZ9TDGV~8oT2elOTKrjXfZ)0UfBK(44%`W
zY)$H%>wi%%A#BqvLfGi8Z^-1a^7|XKAj@m4R#GBzxFea?ICk1c={uuKU*29fMBrlq
z4yJU+a%k|35L1lc1|>k*PitaA>{dj*H&l925I`iF^Iy>}De9aDeDWGD6z!ft(ayeO
z3jgS%&_A&A<HGyRo~DB*)(vy=3(HVaLP<1gpiC=`G&kEPlU@JK<dFvE_i<auYp7s{
z{S|cXz8!hHmBd+)aqMVx(*29!_8$CqZv+ut5D?S{7xXQj*PvuB%>I2_vQ#z5NX@G$
zcz15u8F*}j*9Sg5qqSSk%#iMyQSmX!Bis!Cd{cNQlw8dolhV*+>p4%(ya}RzwxQ>Z
zjL?7%)6QVGQ5T=t{o#{-V&+e0dh#gE>$U)hcQ<l<CO>1zqBh|P34(r|(>sJOHoNw0
z3SK2PxvQkMmjy#>lvX`*d?a||MBBXWr+dGzJ*sqaJZS35)Ymd7vlWp!ynl!VrHoE*
zyWVkv$d~T7+0~NQrtE`@Df!s?e2=sE{)Yof3|U6CJEu27^5kG$z`X*)B~j6{pz1fV
z_?WK07zy$n1WLMDF!aX;DqE+{(q#hA+GyQbq`|(vFxd8kC94-k^i(;rFgKVkKtuVX
zKA55BJ5Zwh;OBd-Vhek#p4>?AQCh-wJMjXRDqFPS8t(|yBj{e#vm4eS8c=&5>I=}G
zM_219f6dM1%p<BFAQqHkUK%t%ugPdP!ua)-&{3v6#|TA$b2$oO_+m<9<x%jTXLn8i
z=5l~C2^rG0HUHZ*X6pPVC9W8|h5+Q;-1u{}Ww)+5Q<lkdG#(Xd{rx!$*UK+>db*nn
z5icRKZ2IVq2C;&}b_c1%A}Wfb1P5PN5s(<j<FVx!IUq-;Bl~_UN)Ewfc)X7wVl{oV
zsDv>m@>%(M#rpiBRwg1jx>-^BRq9rV<LA1a>fhfC)U%seKV-ck2TOr<yASgaqLjC>
z;8j7phMLqLPyRRX3p6xDjehmMwIa5CsrIk<oymzVNi&GK2an9OGYv?>+?wmzAzF~R
zoz}^|J+dylpI=-5rO+Ozzs|Rg(QGs_j(5Tg?)?rXp%Hd^ynQgVO{fWPK@zi1%lwQV
zaXce$Z~!Ko{u|Xq7xs}3oKx_o4hL}V@YV(=`Fe|;dp$fZvp@T7doeXKmJw;iHz<<D
zbAp3ZPn52>&0Ew(6aa@;lkPJp@}fSr|HA`#Z&J45yJt2kVVkpE`R^D+Y%dM!=2d*W
zK%BM|v|L>SqYd+nO7Fl}L`OZCFA^}xYZ#a6CV#dyMWz5=!o=Qns|aTDJk$M=A_^WS
zSv@3(K_qn09hz1+ETY7nCvpD1m-`7KzUN3U5c(VTr-QiMhKwFvaRsDN7w`1i_wAY;
z3ftM#u<J+tbm#?$DD!mzjUaVE<aai;!3apfXG66L?o0)Sr{HOPLsZmQWbU)CJ!uBL
ztxm9*95<uAC9K(&qxAXUbCCz%od?c1^6M01mO)R(`ojJT%h&%v3^I!{w~(L_8Nmpm
zM`Q$J62j%<<vHF7<$nC+N!HrLMU@wT;2tdOZPQP)La6LI-I^qx2Di!j&o}!Y<+MVc
zdK&LlU4$VT%XeKafGh22-dst5Lq!z7D6^FSlbk25DKL>DtK#F2*Me)V<zM`M&<M=k
zogb;x2&Lo~@H5(37m$L<iDBzTB~yZ>`^GQA<*q)>-Z!xS?5PG~j%$EuMPN!TF`c+C
zbAyY)=CGUf?SlONe2u@YGomIYVMRprl8oj)3v~=(K?BbBTFmO~$+lo7f^)7TIYbqh
z^L3u(eP(!$wujMRxt-wXm5sm3$Rs@PeeGRWq{h3wQ|&Ul{>41fV{MmM$2=_+rQV0G
zK*HjM>P-%C7LE~ik~O1md?Z#^*;Ep&haQJa&VpA{*uSe+Yms;3VD#`a)#$m;<Zn;e
zNz&CHkLT+hG$=pJm46bwVMp9l>$NaciPI}m2EaB$FhljhNR3+By8XbKFicw!Zn#_w
zqfx3xNo{WhvO*&Yld|_CMf6W>Q=Q1Ht^6-<uN{SxdYp5TBC5EZlbgMdejIl{B!Zb#
zii6Uc7=AeUrZw^Cx-Xxm6I)K8U(lgN)T`(MY_A~icjF$5o3n|xkVFmCfwtJRzT4_C
zO(iGrPzuObs@pz_Dw%FTak(tA=px<+iZBjHJ=Xg){s~knC>RxP^GPU6Ak9eU^t;kw
zXfI^KP8PeHsIe5cd2JLnt{J%i{q?$4;+>>Zr^$6H9QUh|xpp7-*O>hJs1JEM9Mt|n
z^|x1?c6EyjS9g$fZe#uhQL|t5Mm5za4g*x#f^JG$N#C<KOelY-@nZLIpCJ+BGGf4G
z5Iv{lCf#QA1T9Sjow!+@2>sG%=_Vyq-6fkmsc@;dq;xvEEmzCtizu+;mOCERcBTdO
z=d0Fw#vgQ?>D6^4|J(<PoMi69-2Qyu{ZsK*d_2Rp-S%X>HnA>fb@MuS6SBU%eG-e6
zkrzK8nCzWf!)-EkIR&|NWqwj?*=#agEcIt(B<ac|*VGlBUB^?u{hUjx#GjGz;`7a(
z3({utY+qTOEhk5u5A?p5GK#yU)cWnN<gKo#y1FjBta3?q^p@TzJZpbOCr-%m?U@S#
zeMN2wB6jzG^cATd@=`5+fss_Kb_0+2_6tIa>YP3kIQ?ESZQfC{^kZuizOnT|ZO+ZA
zC!_e!Hqf4uv3(9tcCTIxbHO{uKr#`uW$s6H$Ofq#SJTonyk1rcw~u%e_ZpXeMOaR@
zCh)J%^hWBe*0jmQF5F!_`^(*aNbJGzm4m|xwhfc;@=u=M{g)h?cc?pMUSvhHOB~p`
z_vZT)Y!=B3)b!t|)2|y^<}`1AeA(e+QsmT>mAKE&qbMd)8bFX09-VCcMLq_%&gcYj
z<KW>*?7PL@6X3aCcH$FxluFY{{60nh2gPL%$U~S@U!KsgjIn0_jM!Bf#h9e+?8Xa8
z>@srrX|U&o7}#2Bu59G%Un|Q^_rLWhnS!8O1;wXj9JQRMq$?=?;fRlDzmYn-b|B!g
zTD$wmoAJ3J7R)Et30vR9{pj2s<whWW_{4|fxGz!#YeB_bBLP|<p_y)z&7G3?_ErC1
z1lDUE>QAaak%v*iJ5*w*Q*Jpo=IB+Id5c&+tYIS9^t)6w>W}qvb>1lIii>sgPWn@B
zDjT!I)cwsIotu?To2NL34ugY(pR?Z}tEc4WxW2(4Nw!-0*!TM3{$|scIQ2BT*;7Q+
zTz9M8BF}ej$*pk3a5e2++HE!Vb3Q{^aj0Ic=+Y0OsELAV*F_j(6|zfvefYAYTg68x
zdcCqxi5GJc^bH=`GIes39`R0lm%FtyE5@|5HVaaN4V6o_6N+u$+h|3^>PBQF4LzR>
z)4p{$oS5oJyR+C|b@>xF1+O0I-=OjHGlPG=$6ibytCgk-6xx^@W=Hb)5HFa1r!=&C
z6~9Kx@E4FvcXmReE^qS~Ro$}g$tKU(0R7ta-7>r1V-0~T+k4x0(!Zqfm0ChwZbiRX
z$ILpV+~I{LOt&2=F1BcS3FW=dxw|fHi%~!xG>@LA4ItJpkC+>Bv>*Gj<fe3^SvASb
zjP}!osz-Ai@cz4q?I8xgg;-#<*{ORwKOsX-Il_}|roN;-9Jag<!R7Mdu9HlEp^^Rf
zIlW>!za&YQcp;xZ$!QV{P1UY2=v(0`tB7I4r6f_ee8alEa+asupUAPXvB%E_IA)wm
zRxyO5tzp8?<a8LHe89P4qaz%e27R=JHRv}#qkq46)bQ$GVWSHyF885*))_1bd<Xin
ztFd2@*{1DR#~d1sS9IM^N<Djb13s9DK6t_XZs`*)Z!G2MBa@n9S^E1maOL+{6Y0KR
z#}1jwyY~c_3>!36=L7cjtZT@=jqSyXSqI5A9Qj{qlChD;YJL5n89QJ{*Pb@Q#hK$r
zJK*kaUV4u$_>>!>+ULvZOe-I8m4-etG5yRimf_S)O;tz~XMuBg33<|$I*UEoy{Z(E
z>!4Pl^FxN?|Df)CXTRtrlV~q_C_mA3XS4rybBf>adgzZNK_!qaOm2AwsV3cPtY$Hv
zxj7ZIcDOY`l%-yJ<42X}`s_`s+MPRlMa{o^hwH!g8v9Ov8QkIk(cWH(qefzWxkqt~
zcj?~9?-51*8peWhE6!=bd(R2Txx}RZMufnH0m(OeH<!+{Wf}q73NkLu>o>^w`T7F`
zqV_j@4~N}WJXdulB+GsN^54mH_=RIWKU}Sot+Ty|cNoru$1m!khrBgwcVi)%Y4J=H
zWai?@ZX%gXZ|bOL0c>5YUl{n~UiRp<Kt#h?x5W|iG@zXMLa1|1yoU$ju1d-5EM27*
z*h->GXuVr?J*leg1_*HOwJi*<eEx`gIZ%9{wp&gyoPOR(&5S7T620}{0k22ZUS|}q
zjYvpX4I>!f3lMZRH|}~j$e%uYHhkO5>=U`-8CtgUO@741J%ykqdX@+;5!3c9mJdsA
zI_RshOOV{LQg6;64V|6-MbO0flKBZiQ;k}aL`P-^;hi^ku8BL2KhC{dtVq$C!VtYv
zcM^})vel3;fxV=?Z*#7{IHXD07T7Nng~kVZHC8WJ6u-Z+zg`9@X1L{<;-%G9X9+j#
z3N|o^-bCFe{=+yUGFPsiO1}G`yyPpW$jL~kUR0yj`1%xISaTc={X<7!CkD;;2|Fpu
z{tspU9glSz{*U9iqO3AP)81Rk$X3bTdkawrDYCgLDV4oSp`ys%WL=fAl9G%FWo6Io
z^gYfO-S_?eecqqn_woIw#}${?>pYM17|&y#j6@&aj4wv3p-5CE#bVMijdwZbHp`+7
z&|2xjM{Sf<ao6c+!?W%f=<EPTk{rigbAbO;ZBph*-gda4;3oeHsa4d)dJ>6vp@?Fg
zv_nns9N_q;pd}}_UVx{el8EdhDOb+cQqDZB41dDY?g>nL;0Wa1;*12%>nKg!&&0Cx
zsKf_W^d8L~*bD`6yxTv!IX!z;bnFe)zBpmC;>2u|3egX4UfPqPiwVN!To-$awF;A*
zJ91+n3RG`8I@!HDR3xpv?%Q|ro5sUo^gk#MibVhM-^7vS7z;Q0GF!N>cL@3%Pji1y
zl?Ty##hTxn>l}juRvRH#T>9lcc><HN4sr+bP{}UpJoLQ%>muA`V(b4cj>?+SSY+3p
zMY0Lbl-5T{=fmFF+_<V79t$_0R_cY>wX`HjoU>WkabMQiD7uyMpp?eTD-#TkmbRy;
z@1EUX;@oj-xvy@o4dw9)dAh-(iWK$hH}^1FFAcks*ag|mzRA)|Qi1VOPlN{FX-7(!
zm8i9S_(B59i_bF7d-<|A$Mc;{bhc^HOZw}fG28_AkRhLfL!fF-_tkK`sx2-#^<oHm
zM9C>03Q3>xSlP{I!J3X~7nn)CkZ&k`%8K+SC&9-gFHj$ijj~a~-%@wv49a_8q;c;d
zwSodWejjsoLTFLNA9dE_Y)=ia^ivEmTb@<)i|dD*zt^@V(M5?!fnrju&rLGEe4<vt
zRM#n+c<mB%hm0W`_NsC|&_~AUCeU_}Ob1$u+w=Cl;8BtTxdT3Sc~d&oYQu^BDnYXi
z)|Yne<B%X5+<h-}&p`nY$a||qF6?Ij<)!(*4WsR-jGz-R5z*>ehogT*npEnlc}0CN
z^w+5WTIK<H3+DAVEBF~ESwFRj(kTuYMSH2Hqx{pt{KCyW;jN6a;N>yvg#RuWE$g>m
z%+M_aASrp`u=8E!*VB;BXaBQXe!8!k|9byH4t;Lz@YS~K@Dky)y0lgPyap=yY>&Ec
zK|k|{V2)(p=Gp4L@KvJqJxSu~b3fh=X0HY;yZYp;W?c&Gl1Ya@BfO(p?9cOj9U4=2
zAZ(zi{`;xWw4gtMg|00R$^)p#qqQDMsn>sa^tQEC*eWA!t@OfYuCc!Kq9f8?0w0P1
zIwcV8+^zaWjh->Zt)r^Ke{rswNl95*{lnyP;H^f}yy@M1OXq3oBdG_grM%{2KZ_o|
zakHuP;&NYS42>fPlnBms9F+CH+LfOeWWBr}F4<8^c5YYsT6}So{PAb8ceNotmq!}j
z-8($!|E*yaZZhQXA7J4%$<V2CeEQ_c(D#Rm;jIZU?ae69^sr;gTZ;Ym?LT$rZc4=R
z8LGVtUsot~?cuuqdbecqSl`o7%0n`BbE9=Xv>r(6!ey$HCK7Jn*?g9|9S4U?Y&QMJ
zV5;=s0@)q~kxj<KGa+-ID&6GAdh)CvN=8LRiQ3Of7oPpS=6#9*hKTW=4OmkPA*a`K
zN&a{pZbgjiDSN6BaacOFwl-y`DX!<KAGJ&kz&vk$Y8`Ex@y6A*-|e)&$e*%-CW#}Y
zRcWRN)Hswj-M7bL9PQL#bk8tn;y_`6(e>Nih}yvOYY9I&_t}3e`#fn)N)M_khvdxh
zNtOWXao34MDp=zTAsLslF?;`tmB`oR#+Z_G#0PS1?i+Q9N41hy@wPApekfgyLD(@E
zn(WIZ&i403oxt&txx1ZAch$QSj-xdGSTNC;-MxYzyzKZv&D}lUp6ccDn_h<iKqAVU
zYZJG6t9;ZwhMRa56;E&)zA$hNmG>Nv1@=uA6VaK6izOCAH<^2fAVOs;GdeRP3`PG}
z*G?@hr_80@F8Z<Oxt(%E)4iZSaj6y+9FAI-AL`*QQa+Wuv{7#Hdz6{%ebgy%Aq6kM
zXf@Rg$<_nE!vH!4-#s`SwXv#sd(2CZinu&rBL0Y+$7#LiTAU#ip@|Qke)nC>s~ze;
zEWrWyb7`)Zc};X^)(?bbWJrhOd5DOJ9E!Y;_dz9rAa?|F!XnW@4!1u4+nbeFBxvmN
z>tKD1Z=_}B&ThCR&AD}UQ`2fsD!=~&WFzzh2b<w^KV9V*EPduguOtTA#T@TUUqf9R
z+WV(A)P+Lf2Zmg%_7BKRdU}YThG8JYl2i-6m?yZRHqh~?C%V9r*ZN{>4SZ4I2!7)8
z@~xl;E46otw@1Or@aj1JY%bjFveI@{blC%MO;wDMwXl79H)QBew4H1f#dnMysBiJR
zORt67|6n?r2g9CBP6zw#W4J(kfh7_LwkB=IJ!LG*(oQF`>%7ISyT=0v*N&R7@+j|}
z(@rwdl)Pj7)}7>z#H~eYm1l&uqJGtdr=Me1>6+2ATS;MFg_Ttk{rLTX(_8Jygxfnt
z&stFczeU3be$VR`=;_tO4!Ozvj3W{4S?6EC7n{j7`~)q`<QHC^TVOwm>D6DvHD8x<
zs$|48s$XX`OaM2{N>xN3&gE%4H9nH@%>E)BHmb-5xf&)#!uBD-xwzh>k0lH3IoCim
z41ThSVYEx+qNb<kggV$*Bt*BzW@fnY`0lr@5&Z^d$<LEt6R}_=IWKc9IE3WT<TRiB
zrr+1s2cu!)%ufy-iBndly5pxFsXa5omc$I=vvg@^7YN4>fUhGVnC*s!wbj7Kg%iD(
z{yiLz3W|n!-TuehGg3N<t(f~28Kzbno!1MZUcz2<%F6n(vn@;8=5-4c`+B3dhQ%D;
z4;EoWc*iii%~7<iY}T~v3Zih5k(2`QSWWm(cK6l!a}`j-V@~4O6sub3&@ygB$>e1X
z5PbSDEfG-`smq4n^Y*@0H})bm`38V5(`4EF3_@{*aUt6Sj3dxCB##~jHX;Wed;a&t
zVLaLI38~CKXSvI4XGM?!EG1n1#@&2OyW_aDz}!~u?G|_baO;%bRJBB;B7qJVCh@fj
zHBGmkZDMTWhU9j%)7t`giiz6+MtG{=0omvUzhfsgQGhivoX2gA2r|)U;p1yMYV#fL
zRc%xgVPR3Y`-(g;FtE`#{B1IgP5CuPi`!wr!o;ulhDWLHFI%;BUP9wNVEjvb^|h)$
z=b3M8t!K6z*eYUQ5fP3wO(A%}o&2LW)^|V<#2f9CZmjC>r~oj4n6rq)%CE5W{q$y3
z_u1Q9voaK9@MVsBqE+RE6?YNoBlSkku6WvBWm;#<I$!qx!)DA`q@>KC7jtYym~Xrk
z)SL0$)`QGYITwBWg5I5!l-e|icg>~Dosi3B2iQ5Wcuj-aU3s9rg_L*0dH>auvuH@w
zz)?JVx_ori*u1xZ9DYky2V~w$gU@b+eD>k#$iwip)Of=8BIV(N&0k;m!khq>9K`Q@
zS`%}!f`Uh%Dg@(s6YYV;^kef^yic77TCkqrR6bKm2P75jacE3CrMJ7`tKJ}|@z*2q
z?<3MMDuRXRyKyKWjhxtk9zMNzlr9tpkR;XPY9_S)VqdudE*>#y2CK-gA^)+!u>P9V
zGZJ7?ei3sGU*wxw5Yx{S;lrW?`FG(!nv1WUhQQZf*$3*ok=?ZtRooRI-D2KTKn2@~
z6u{H$kyhzXc*#9+kO8aDVTn9~KbSSDR=>&~vq0)hqhf#@OBM(6_f3CpR>eP$y3cxh
zYd)F65fG2rlVEw`kmbQB^8r>&NWx>`wH-J$3P53FOL`B_;IyY)1pS@}IU5{JhaBJ|
zVzu>iQ8~kMC0h|(U~?GI_D0<Kz!+QVeOP<TA*~8z)2K*JzBG&<G!|YJ*;$IZ;b|Fo
z5_xs@29}e7okgNA!}amJ0fniL`}6uA`%L6P7=CtM);8*uv^#5RG9Q4{F!se3SmWbW
z3WZft6C@Z6Zq#F}1E<m6wpolNwHQ=ZtgG<b3vBtDZQ?#lgaeu{(xJ06KZ`K_<ae6c
zz-KSblq!rT1Ox~^U9VeM#b8nu4e&=Z7AqXMfRB?lR(~2%>EnC&2O_5{ng6$Q(e3=}
zcg>G_Z#A9~IpWNhW+I*J%&uJz&IC0i5*K5`R`}w)bta7o6DVo4D-EQC#?pvE+^9(1
z-Cpm^xN(|r9qC^dp~qWXsX$mp{|}&Q*g<raWbKHrHP;!}OA?f==)FwzKkq+{zAHpK
z@=2ByyIL*vIgnL$UF!=p?E=vLCUpkcFzAdk(;nx#d^M-k`iK499XK<xVgYkw2e11X
zhAnj16ruq}JbvL!QzG-Iuj4VVPiKH+UyHvwhb%Senx0`88!q|Xg-u0LU<P*h`PrFI
ziSPl8K>p?B2212P{p|8|+L~jafLyQh?JjDDdILYEnxjV(I@CJO=z=sQ6YhJYsHIvn
zY~d%M01QWDS~@6unEn4pKU&aAUR}L5G-cY7ULt^a-Cxk%;dN^?yZT=1=dU&~`%O-^
zae45C0cDWZ-pv55$1ix^k^`mkPwsDTKI@iA#ldlk=)doAd+oUB0$b;$mehBRCtf?J
z`6@;Rj7A>=h-=x~?!N;9tN1``<arbw#66?%zvPu(EGhM7u^b%{u?(w7o{hB6iL0{O
zH@LV!u!4i1fwwAlQRW=GjXvV+i$^Y?a}lRb+<bFntk@=Yk0_@SoV9|z(*jZ3Gc5`p
z?A)nEG;Kb;J2$`f-u?3r8dCf^EPTLn_6Fg`Kth_-9-7>LY5~~ueAtd3#aQ7u(ihL}
zJ$C`;7aW@;@$ljjq-x?XK0m+3PK!vH%T+(q6C*L3+LJ)?XCu?$k^zWu6IoS!MfrQa
zqbDm~@?ghExC#poaBTem+QA=I-Y79hhCQT{_)z$Hp{($Y@vpW<$c>U?Al<{u&i{IJ
zRg$6<>!8+AO?|tfRp{O-6{q%u;SMPThuH4v2;6fN9g1^P56CbvjKxCs1M0vkD|#s~
z%#Wo4cts`mzy!_gBM?7-?8WeK(8MIbE#5@;1*vBv33G>^4}I!?>BA#+7Hzqe^a!7<
zDwFE|$-fxqqZ%-^(bO{&;#iQ!Yz=;1WP$SU67Zixhv)FErd-Uls9e{AW@X`<8z+Z0
zt8skccA@ZTl1<6Y=dn!lY-*(5NF^|x<;=L{!h2Ms$v*JNwnX+a0Firc5X0M<kwotP
z>2e!PH^2hiai*>ABpBX-wk%i8rcca7ml)uiS><`HfAS5|hfB1Hn++3fqKOn*OXG*S
z5sv7f1AEd^6A7&z96|)2M2Rh%>4GP-){g75*7|GjBgpRt6og(0nih<hR&>YCLYBDC
zeChFxyu>HU1qNfDh)|C#lJ;;91*l4m_-Q8j@?xEugv&tO*@uErGz$NI6w!wrIylj8
zC*z3)z(*%(F1c}o+TAp@d!~B0*;(1bs`Vtih(L}Lb|8-;iKul9F=)UBK@&!RJudbs
zv?(hfzJ4H{T!;>YioBg^KH5dHruDisH7ffMu}(dMr!DlIrCr#$54$@_fuCsbgMJ*o
zwR!2*8?!H(1%3N~DVMW7dv4F{o9MVSj<Bi>iWIhX(?Zi2eDvwMTzdKpK?C-en5inT
z#mf+x1V$0)q@_Jc;KbWWXsH2XR2Ii8A*uTU>7f(4<Y}#rC0Iv0?BNVraJzt>(hj^g
zeDvYP1noU-SI~H5?2*MP)9<$sQ+gW?M9}c3op--wylju^5q1!j5Q|UsaEbM~r5ouQ
z*zv+DOkOZHaW0rQE)NyleHa?&EI@(;!3xC?_7`+RW#K=1n{Wj!T1!pg@1mn&(b?^L
zJQN9@_zD_pwVuJtmO;UBXwf0W4kK>7d80nBP9BWHS{)!9CP~$kV>bjExPSy)5V<WF
z%{lvBB1I)HeXxaG83qU_5VCO0RU4&OE`I!w<yVM}8V48WX+i+cbt4VkES?tyv4~b*
z_6|qi$JlR0X?Xkz3$~^ia1vkpbxgt?3L_No(O;j9%?9Ny-ZOAAAr%HhF;N3viFexF
z$TCo<kX8M?a3DqAa+^2QaCzs1go@Pe=If~qVHo>g8xFn^Fh><N_7n%Q<45LRWJ}E_
z{X=S&<7s!ZNmE9@$aYgAY@;9ugAT<LnD_p9@jpoYSyWy1zLkH5ho>$zrd5}T%O$?c
zI(vcUUqGOvhL?s$#2hj79ooNoT7VN6TD|1DJ+-^)!0Vhl(O37^Hr8_rFhFhoITEe7
z`$CErip<63X|b-W{9Hnac~taOW4{S56*Md+m;$)OQo$CRKcw&k_gpwR3U{_d2N@d|
z$dL7#HSSx<&v9n)!N}N8dZgA}@8nwhua=R?7x#dE#TQCi$z^AUPV+{}rL-<NZnZ?O
zle<TB)l{>?h^`fF03cO+V8{|IyknXQng%ey1fyCgVPs8YJ<Tkh&^a0u%cab<ZsS;r
zEX@0TCKlyIGATu+K18?S$iQgc1A~6iO!F}*k08X$0A?LQT9Y2%+8M;^7AW4u?^l5K
zFu;rN&bis>{3XeoPv#P4Fz6T(i@fl~_oX$ylk>LxHI5(7y1puHJAO5w<W8CtwzmkR
z=-9J~K{ACY1jxn&T1hTNbTv=9ga$XGrQQz<+2Rux8)WIb3Y>?sD-}{s%{13F2);a~
z1J$ox7O9TmYN9Vy5?iuRD;kKEHMng{AyR&T1G|CLEnDoCnxZhF`ptei_sbf+)?3(K
ztU`04=Q)Rj+iG7<AH`nNM{|Dt64k29DBq0BJE5;A#Mjf|movK;uiaSp<ac!`^I?pV
z8SJ1$JbhI;Nq-8!r$?3AQ(n}dYZzai4&PpHq%EvBEirsI&Fp=`(;ln1!B1uWrSbqb
zcHkUHZ=`8)`=unio#C;?#Na#^5V+{3z7Q^q+?~m&xF8lGU~gTPW%F}GKc)^_^+x5O
zoh^`fJZolo{(QqW(1s0j6?udsYt@x*mj{}zO7VUy1ES65)b6d6f4~(pDX@M!O*76Y
z)FTtqkA%};6ccZ$@<2!Zeel=(&$PZHE$0AUPDnJtP8`<eMGyP1lveJ0NxtDRd^NM!
zEkAcyUjj$U!<C<2C&C-Edg<+pCrC9wLo%#&DNP6_QxkfC&eeh+0ug&l;SMjmMm?}I
z&(f!kga3EnCj46Co8C4%UsRaG$kVv5tJp28-TP0=kZhe3u^tNqap_X$R0>JN_cQaI
zD~i=vx-5gSY-%1Xba6^Hjy?4Wd@`8i6U$_S6&p&aGHz3P0P`OXkans6jgk3rYL>z;
z;liGndGWZV)d%0V^7z10Ab8JgS%GW7i_G8i;B**TuoB4`q5CY?Yacm$np8nnOC_0b
z>n3B`jQY2jW$G-9ql+01Y`!%)xb#gUXAe)GG@^5O(R8JMbZtmg)boOA%64o{StKRU
zm}BRibZ|I);G;>65=TY>$n0@fxpZ{)z<1Z-zgK>WioM|Y=;0P*y4XsDzzihFOa|iK
zM>Ia9opBOS7~3KgWYQj59PNO5$T-l_<`vRIsImZtr}fP`%nw>u=3pH`J8(ke?ShMG
z{?h01cd|^kiVuQSeklq!jOh0!0luq(cgncE-^*rMl#oymu@tg>muCX#xbLF$6mW#Q
zaCr`a8V;8ux^_KcQ({D(p<QPtYOaQ(zJ~%$x<$NSmT<;17BNSp&A!&`C5K-S+frEg
zJLTGI?Ax*3L#GN{p%s0L1SoI{0aKSlylCTc3~=po*w9bCSM{d(=n4j#T*BLkGSv~v
z`z?Faw#H#`l6=?*Fk<qld=_1z8~Y2n>ea~^iMkhRT?$KjHR#o!ZbiZV@mK)H!|TT{
zHzsmjZ(U%4wcg?f?&u@M7EMg8V+IOPtt{aO-M+4sWv$HWpfp=U-MtX^5z5asDK}^`
zGP=5J9D|nbiog*RDguDCdcZX(wQN>F?$m4r;e~al+8ZkAbr~vbcF}vfmE3hYpOMBx
z4mUX%U?ai7PjJnpf$Vu26FKKSW6y~pJD$TnKC+;kNtLE@6F1JFat=GrXUHNRSHppw
z2mw2D_OU}GIj#V<NtnP`1OEBPqqW5`KT71U)(Xnp0<|wG?otKnO3BW@{L5<tP+N3%
zf20YR#?pO&^eW?{P&@}Fw|~FWmvFYfb>4@G13fp9SEStP@WHO*@83t(VeY$*fz7~1
zl&Hfm3#F{50$F4LDxDa0B~nO2`l9z=md$d-8(>Ui^8kcS<0%K&M!2gEoLZ+{nJm=m
zK-8+e*p7gm|2nn2Tpyig6ijDZ<+c>WN6S>7_#g8Z=4iGQHPGo_!`Gz+)Sfas^BR$_
zmE=&kx1kZ^YRjlkBoYyuXA0+44w}-)wf?){)K{~{!=bg3RQzA9n&Tik*<5nE`^MTX
z!-TV}-{Nv2UL!UID+Wl(C;l|-ast^FscM#ez@j1+_~pOXjKm_Zt8FS>GKBcalNptF
z7d7c$+|q-;#{VJCH8c?jq)NZJHPiwwssUu=0V`|*#bG!tRD!hs2zhVVOTmLZ38E4_
zpU_M1kXoeFC~tgTG37Yih897c|3cwwM}+#~pKm2jzC-DWAbfPr86nM?(c%f&yvN>d
z#UA0g^oR>Wgd$-ghqu~*Z^+x|n|^i4KRAVOytFpuC&RkDw=eo2o<v%&@=BPD=l-tC
zzqEbEBiz3o%zzL-9evl_ii!`L{!w(47~dZQY?t&{g%T|USR~8qW))iJ1ewdXTKyN{
z7tU61%^4O^w6UvgP51v)$aR_xo175*0#_Na$vS*fOt(a4yf76OF3?36qAz9Xb#rKz
z%AowD+EypIF)+h4`MeD9g{jTxAbUE;@~xa+HjmFbz#E6eA4OwIllr47{8!2|$!tm>
zfA)Rn{JVl~FCly{{1Rv@$3Oe*xZlc&8`#NFtLWH#zfTWe(WXH>8Vk-#w!Jwo>ZX~!
zMTnhoP%RVgTUK$ohU{Jq!^+RNnt7x1{Qo%R3=At*ru;9+Uo8(g#v%3vDJ(PP9Lv@S
zrFHc$gy-4Ynv!(IAlR=?ZrBlU(riBAA<nIdzn6U}U-UbTN;2#>di3pfg&%ePefYmi
zhe+EOBbJR>?}L8d9WPEi2M0;VJoT!M*g=}MQ&Vi2dtreJXpq|**SR?mK#2Y<<i9<9
z+842Q2=Ui|UVVp|jlON<ZIet$(*6>oEfrv6rLdJO<l+8!(KqORp-%;%&`3{Eyf)wZ
zG7`J%Aj5O2#(^*Xj3y>)Tu6IxsJw>9aw2HjSQ;5S0*2`021%;_mcldG54=6j_)N}_
zc>GU?Qb+GCo%AE)h$nxLwrep9@TWYyv8|@bKuwPf!>^EG$?COqLI?Yvo~N@ccTz5>
ztvB^F`hftO4wrFYxA+4hQHBe<FCefIPnU5#6+bDtkidDFomULm2?y&OGs6iN?WS1U
z851$tc}&OT2ZQbq_(-e=?}$K4w<{(-!}1muta6l*3Ii{&6Go)uLxrNAPUHUcR`4lG
z_kDbXU!ze_xP+(BZi#w-L6pyma~MNiX{RCbtJdxfPW2?<r7l-Sc56iXb-3_!Q?TNt
z;r!;iNyz*HZW?&4Y|i1VU?e=<V1&`mi)Ll?ond3&*oDe8_2e+{q7|dgd`-I>*-lir
zJXRt8w^F!D5b&Jaog!v5ehqlMM#oVbLV`BsIJezM)x*;P47-!0_o!bABb{6uy_#8m
zHJ|N^4jSz@U}2+v`>Y<<!r(0SO%`hH-~|z3NWc7K0elxKq|c7Nl}vb7ZJs{TCGm~o
z^=HH+Z%I0qlLh1MB$Ro_r(rSc0SbJ|pDuxtcO`RgJ0>%?07OlMn!JH;v`n;6mvUth
zcIDB30;8mfocSdH&{|||izIJf5AFd%yC+5N*jhA;%{gS15Pl%Y;)Ort#xf{75>ObG
zM^L29#{9yA%9=JY4B!VVG@*RK`+LuUwpO6{roIRlBG=iUb+++EYudu=Pc>Z+WRZa9
zk!b{$)D~y;v_ZxLyMre<fEaEa<~rNV)deF14NoHTTl~pL$=@(7^u|brL)Jr8tPO}D
zjRFVZ$0}j_ZX_f0F8sm(Jjyg}t`ggVHNtli5#1p_t*qP(l?04`l$5^3OJAK1n>#Vc
z4jIH~E={Mog@pvTYxKnCF}Zr|WEA{igR@2~HUW4V<>w8vMOis1JO>e*xsp;gSt{>h
znEZK$m<er!S_f4Ep!hf71#oQ=w`>CoFP`bxo8iHG&CzD>I??{jDX!$KMf-pBz44DX
z)=FCZpi61wcj>!huWp9{#DwtKm)TN6C6z>MJ}#%aT5ug>RsfiO`^3-F@`4l6gS&pY
zGm5B}-K!^R2b>e|PZ0+kkt$ACSJ&g$xM4-$Z{I?;UBtvH&;V8kNpjQH0t7yEEP;M6
zt|qP-P<saeRNQDKqE~yo3z(io5pOKIKkfwQ8P+Z2t{{W_VLA+6j-F+Fsc{c+mLKl%
z8>=WW<>m7IH=d&%-Jy`t&xrMxIRE%<5r-_MG^|Mt4(M11p19n;-@NGgJETy`SLOJA
z4{N-&?;B(fD3<QQgcYs`_1kAOy|)6;iz%F*h<danX(CE=Tt0I9S}-pT-C#~><Uac5
zKz^i{v(a|G1F8}s=nYkgJbXH~>k}R;)3sqn%BHY7V8qDwgZ49@Q{HUF^Z##qc*WS<
zw3_6f(j}{u41wM(iXn~t-~>$;`#u=j5|^F$_fu+(_oT}L@{gI13&5HlRnAm?bu+XW
zsch-SFf6oLLd@93Sq0(&8gxAIQVL%3vYmCeZh*473QA}ooT-(~CR)M3AlBmL6<yc<
za8b@DkclVW<*;8~US9tP4HoY!g56B^%6fDv4)o@z_}Cl!F{-7X0YWNh#jc+ANN>S!
zk03e<lH+p_e$EXCgG?YYdP8In!|q02t9Is|VKqXiSe#x`-0L2(W2@cgNmcCj1HwKW
zO~MDYO)D{3ng@xb94IDiMQu%bL|9hS<2l7V=mTtywT&)vFN%+*fv3nsBWdXHk~qC(
zI;snNX?P9fJAJIO&k(NQd&*oJLmE_Whlh)cc|qwu$5xKFqrIFMDR|JNfGa%j`g`tM
z8E#?%fA5y-IelRq>3P2ViWO?!q+v46EC~D}8|{db&YO&Cf_*_Pw8B2v*Ms8^MA5$J
zNH;d>9WupoHOZ5QXyD6)K%Da%2h}gM^iv6v2QkOTTf?U3m33NEMyD)83W1aZIi7uc
ztVvx2k7}qn2KEB?aU&HA?pV39%cpmdfUUhx+gzS|tS7Fn8d1ju-QpbDAP|iUg)QS~
zq|4(|yN97N)8qRF2^lXf+qq-`!4n=M#hQDhI1WKJ7{*gd1mwRCkhUY7gj>I%_(XfR
zmJ^C~JOs}kzkes(Q{nHqx%+~z{fm+q4w%KRK;Xa&lV6QJb7CTq?%vkbV|)-yFnWBa
z9S$oOOs1D%m?v6fAntO9P^9?f&@p34dT`I;aYbf(;~B(~E|^LyVf&TbZ&J0&e?hLA
zS%%ab39=Qp<0%@`Lv4nKc73Va^1tv0;1Fj;;dxrXogXuM+MQ6W)uj4V<NFyHlOyWc
zWPk9OQ|xE%g`r0FoSx#SY1#hxP$plV`=3l*O9>U19fy~uc#7V<yA7oi+!Y?fOFx;2
zkw24-gn<8QXfHMO{VTTNHy&B-MRz`>h7h_2-nIRTVlZo0i-L{7uE;c`<dk2tNm5ll
zdy5J>D*-cBUX9#9`l6ML(sCvFuF0>=QE?Vgcz_KnUh%P8lXTu<fzFvUEGjqPjK5^9
z86Vipy(+b5sdEbfe#3DF#pc~FZtiKvVbe@ukA}o>uyI<Eps&48*;u&SjlGt&b<-)@
zjZ=jKVO3>Y7r1rzZtO>?)`kMR`e==prVAtUuU5!@%*><=nN<px2mXdSvbJvBcQ9T>
zNY*dJ^hp}Dh1@wx`Q|V)j8jELVZL_!OR(<$1f6fOe;oa|E_&31f)5=W15Wm`LG&l3
z?75&ACn7CGgWx?V7@De@2H*i)G$!$T(F*9t9=IHC&zOozBYxxkSRD2Pu~~d3|FKFf
zVi>#x5`jN}cRjYNAy(6x?OJdrAfW*$>Y$4vI^o<j@Y=Eftpil`88j;i-hYg3>-})h
zPg>|M?1O{uO4H3vTb;ji@7(W~p5f`x?-n(yIHLk%C^-FWQXk4*)e_%WjJbP2PJ>O@
z!abX8PY!pAu*rbhdGoxZH?`>aX@6uqKGX7`(Ek2REg2*5ykl$fuNThH1p(aNx*f5#
zL3s|7#}q@s3a@c3fivvZR??KnTBn964Blle%pdam4>JIZx7;>_U)}^Z5L;8BM~mhr
zcB1l86+hBHdi!G?k{|(Y9rmD0rn2^#!}D;b8qyB^WXBJEIcdbyJ61{DWoi!ZJm2G+
z!q6w9PPSUS;+`@>fLV~hZymJYqLr*EiUSlf#qU2B(r~T5LV42k+!OYJ2cTUoE*EaR
zsD&;sxboO@=>Ac=Gp2tQ&hYA_DpXZL7Xq&#zhNw@Zmn5rx!SJ|^-}`YDbi$Sm&#v5
zyU7p~8mPwqs-LM<zjCFRPQX9~-4A``cS_K7Oh%8cUh#Qd)g&RyYe#qDa2z5cB8{@9
zuq4t9qy@i7smZ<|i|v_vwh=fQ=5$UMC9nq!QtclI6fR_Hf7;5yu$)1d4ji_h9DwPb
zyXvFsXd-3suPyl-Zae#@NcuQsgOREvmx(@_bmV@Wn_aQ<p9ZAbA;~sa?bL)<@B4ku
zGCAXV;u6YF{Pulz@*Vxg<p%9@^16@doG_*lQ3YGerAP}<*M)V~{=xggsm$)uhByuy
z3=)K0@qPuJ&n1_+mBoZ>dr!kv=*c$cX6_wipSj00yyBY@_&Z&@zecMwS@P1!@FQ}Q
z2kLZ&J}IZeJkKAaqodJXP@gxna(mF@_qbSNihL~{IoTztBLi^Vvn{2(h}>P~O^IEk
z7B&8+Uemp-5^lY*W+l$*Hz^PPn7lxFxT`j(_K3WfhTd~k!M9<uT&wfLF-RkQkYfJ;
zXl;07bwMx7SFFCXN%mLl`{ZMtbE5*Lg(_={V}oBVFHM@B@LkM!cw!$bC@Zg_6lmN}
z8236C74>KA^K(m6zJ2vU1165`%RibmAIcrOI8ImLGkCN3{3ku!<sp^hu25c<rWV(f
zUTunCPsZO+ARqaL-|{p2o<57WZ5e1}sEW=&)8_?F%kdk#2Nf}lkQxE}9N?=7k-6Cv
z_}GVF)DHY^lHC3c<3g{h<vScJi1t@#%4Iwgh|}%`IjSbCWx@?y(B2@A@45PfBlX+9
zNR|O4w<|XuX(|nwtqRu(8y*rs+)qqR4Vs)5WF;JF@`8zW7bPTi1^m1X7oaO(-l(TE
zoIB=FZocc3*+EI0V7n;_Ve$CBfFFB}S0);0#`<ehvQ4X{thm1K+^tr|B+KbJ-mX;y
zwR1(3hdx?+&Ga$OOgyT*5|u9(Fi2@Ca+BvqN9LeO&r@Y>R44QvirPoI#hg1;GuzVb
zHUs6CckW)Qznucob6+ap=8c;--}%=lp3iXUDHT)Hd>Wrz{o1z1mGZ^`IhPFo^%jY_
zWGG_^LzTM80{UDe-)^rr)c)DzhdXYs@P7CW)!9EB$J^s*BjlN8DuyVH8=%|1>MXqw
z=WA3X0r##z_WRO;ilq-;UxGbtHqSCPF9wHzK^IP0Er`SC^Dxo&1)|?&-m8PeNr5Tt
z03tzF9CDNHL+^EY#Z%?rQi|YUBi!yYIk8aa;$(R2ErvWLp<M2L(sy-4cs=Wx>Q%Xd
zzTeM%;ms_i;A46-0~%3AD9h{7gB%`Y_q;esPE7UJTE8&Jrd}9|aPD|^o?2lDF{Z<w
z+qZ71h}=0O=G^pJm_hx)@k`uirn`%joecBh&o70XI%(hX@|P{;DG@naDr5I0o5}Cw
zs3QC3ug$~B11<rzL_0aMuQJysL?6oih;@kk^2!$5I5{E14g(w2kN=6wGHU#+ouI84
zy6K0C8a;lmc_!G_G37?SYqjn>|Ap_}bYL)$kdzeWBM=l4mK-ou90r=tV2r~vgJ*U^
zem(7VAAZ~KSGb1jQNJ6hcmEFi7Say}znv2}juHI!iS5z{+WlSgqh6UyeTPMm_hCln
z@>5!wkHJqZ>jCeUzg0nK^(#}!DaiS*NZ^L!nkAD?3TqhoaVpIvo;x37VC1n>?F7xA
z4n!^9Vg9W5Z!Lg}w30b8>kKYxYI-mImUCtLQ}KwEMlRWXR7is2W9S?f3W5I3n=<|R
z_>Gs&33k6H1kF^SRf5yJG<&}JgZ0o<vMdMmV$^qXX+Pr9wD#fTnue>$hwht++12!w
z{x)yhDCy(?1wX%@EZdgn#(ctKCEqTfXryKMX#{jkO+u~z(W=MLLLYs?*~sU6$h+_j
zDrTvnTR}l9ukvYT)S!kOm6y)LR0L5Te+3O8>A-GI5(@h0BF9#&fRrL?f7)hIt5glN
z;~ZSIU!$x~*;(Y60Ln>nbK|cKmha5AG&d`AWq+$48wtJfO%Gw56;!>4=M9sRM^{6G
z4XSasA9wk*jlB|*Yvo~bRkl0#cqtu^iOQks*^>_)V~$z8>hITvve&7$KCFzy098ov
zJxbe4Ptsx0EAWdd+_2!d6N;43(wVHDPi+5SMaGI$5)ttYFfdT*_LBz;Ont8YF=SxM
z37tJgP3ro7uMiiU=gco2l=RsgTQmEjQGl7%4<t3+6>5iqdUrAr`y;)Wl3$d0Yc{~v
z3hMJf64ya34On7)Q{z`$*4|{LTi*uZeRUN4)thn`zQ23-k=_V~LuT5C!~zw^+XIZC
z?C`+==%cmfVqX0t)^5v2yAO)_UU^uun~Et?ZMa!l&XH1cWw`7cGAb*6p<Yw=jnQwz
z<(H|b60FWv56T=qc#zkS&+zWS8u!T|-p0hEc2(cWnFALK?0DW>XO81Hhy*PqEhp>u
z!Q#S7@8wJJsIm8@=h);*FMnPQAG3Ciap>IHNy}`NTZ66d25xdT*W6v0{E}syKES?e
zD_3^)&!*%~QrG^MoX~m_(H+#hG=*BKcwIZdm~cu-eN7*op)&S<Ja?yXqxoF8<H?E6
zgeOXO-pZsr1eGQdHZWlGf68C};^ft~jh|Pxvkl;BuZDbWRIeD{_OycqWS1Wu|8r+S
zBoBu4|NKuY!9W<{{g=z>Z#JTG1<s*CfvI;1?VYdFTaM-N|1H`}v#{CJzB7EUdnQe0
zhc?^5O_2Lu!k}&$F$0~iy48Ennf=`Jm^++W24c84E&qi*HH)xua%wo;;_=IP?Qf{d
z9CGFtLQdSasB%{XyDDfcXgz)028O()dnR>U3Y6?OIRIEtiJTq-O3Bi`Kho@Bz^m2W
zu2XcSuKld6N@0>6GP+O7q02&Y7uV#sAP8jOe#lBM{a&_TZ1789iw~+k`NAOQkYo8t
zkgH+n(Wv)xh0z6=WgpEl$Yg6a_TT5$0u7bvb#`x$ygBSaOwzb{J=C^?L(Jkk)Y?Z2
zx4t<#!F(jw#{Vp8aBKeXC|vB_Y$%R|JgxjJ%oMn?+6`?DW+krd$`MDRQUc9{FKlcu
z%4(#@U1!(wfKHf+h2eF#$Q#YK^U?T^d=vz8>6Otlwz65vRB9U@VjG@FL)8x~r3B^G
z2db4-nu=QxO#!0zTbB4?sOO}V7;?vMQ&g3?L_<LfC0ruFk{U;77?oC?d1qPj;=V0%
zbci2PXso)%Us?YV;Em>!L8Z{^56{>{Ijt{Wc(i<O+r~$ZJ+Fxr;@;1OPUt-6?4=rq
zws^lfvtJKwb9h1KoR{8CWiQS23#WWYWWB>6c=uo;we-)w&3bab26kNU*1CD*z@6to
zqMGmS9vb#`9ZP6V_q}(B*3Vlp#`r;FY^MIBk)X|u6RVf|Q^ND&{C|*<QBvMLX7Tvq
zdYS!V;?cQev8BoWvb@0s)II=HcptrU>siw@t#y4g=*-Rj0Rb(>AT1}D={z#L|8TvG
zd5u5G*ru0urdf%Z24&e{T7Ct!Q2qmNgct-Zct%?v#VOxmh=Jxc=_jHVuij5nLju$Q
z6?cVMrgIshrYZeh$-j-_JTg#WvAe3x>FHf<l{SYHItsU{@-Bkqby`js2OI#m_MYv7
zv;&5#)>;m74R#3bKs8Vw)mXAevP55S)}~uzJ<~^Zu#v%pjP!lOkK7*iSCH%>(uN$(
ztIx0Nv{h`{-?TRNkn|C6r#`;-5pQe5YBI)3trjD+IQmLkTP=v56+(OLs?%yhq03mC
z<aGwDjdN3?c%YuySiOi#GrDA9<u<e0op`}>Fy*yvD1AR;YYk(E`K}wGl}8*$KQPjo
zJrB1FIQfSDCKV&wK5h;76VD3Vx7A3vqs778eCVD@gLV~KpYJCh2D~uJf=*#4j#deO
zEsvr1_p^`Cn)$CSUV!L|7jH-19J6FciPN_;h4zhXLDp3~mq+|ZK(Dn*M4t?y;C3zt
zk;>$dl<fLH;cL}p?<aRFW@EzAbrF9?rYiKOj*AMUNuR`&J1HrY*W-YWx)8Vww|wq^
z*!~heT>rKGJFlCw^T~jltZ)}oTv_y`!oO@)+rwe;eGHm*KUnD{Cq=q~%Fg7@I_lGW
zU$3j$g*|l{vIws#|AWT<LRO}xv6<RG@yqY-MvZ;mO!DvxB7ODat+h)1(o{^z!pHCI
zX_pg(=HEV1YRi0M9`4xBC}swuCteLp=29AaS1Mn<ztCNc$K?iQZ(h0=D`ehL&>IK(
z_9ZgJFu~J)?n#JN*;q$)CFKE06=>WTbULKf`AGVz5d_^lc;BHuq|j2gelBzIi_tJ4
zQa#Jat!c75rK#nxM4Hl_c-lmE<tLYZ|NhNkoZBlj)q)_X0zH7kj5gJA9o^J*e3a;~
zHm!g4cNwm^F;r<c%Qk+xA}yl#>=M(6CWw6tc>c~E?oB8xY(afqF1K1>bI@_WQ6UQU
z=_sd;4H}-a%F}M=y@mAx66*<kykzEfzu;FAoqX$c(sC63yt?S!!H6&IR%@<*yQ^Z~
zHAhUJ(4p>BwtHzH4l3~qp#%@nD8IT!QM;qKWK=4`Z4f}c0Pv8Okx>v}P`pcbA?E|d
z`n`;{yGZXImRAI%s1~?!spPnGTiu*R%h!_hM-<l?!Waa(p#LNxr6VsP;ZW^>cWHf3
zwfz7~XKnZQCif7UQ=v^a$Oakb?w#EWI8;-w-1e<nG_O8ay%cnh_fq*zeHByIM9r^X
zvT73S>ciho8kbEMi3WXo!m+IFg8!5?(V16C_omxDr1I)a)3w!wVcQ`RUfsg9BPaa3
zhQE_TZw&2$13&*yNMkm|$V0K&{oM9KJEAfN&#cqP57Ejx(i<3}p{9o5G%@Jir=TH_
z5Ci`y{J`x|KAvEx92kN;Ht0LI`rbDGOCeCb!btNujF41dA;Ndcd8^l~1niXi4+CF#
zc=R+wyg$`;-6ZfZDxNnZhnA$~QvG5Qlt6p+j6)(FQU)s1sYi}RC_R+r-UJ~&Fw)~z
z6D46*HND~s1GXE6E_@z>0OGvC{kHJdkeeMbt@{PsPu%Njt=aI{2Y%Db=GK>@7H2=b
z4r!~f+pYYbhFw_|G_Ga1n}Ei&dq~%-d&~`%B~Ecwn@&ZE+HU=;cj)*mBu!7$S#5y)
zG{I#*mcD)6?j(b+C`Latf@A!n?);}G>BJ)|GqUcbic6E-oTqM5{x2-tm~1uw>(|qN
zU4Yizbg^%>@1FXr6aP0aN+&>vz1x4BW!sC2o0sF0-}C1`F2IgA@4S!sBRge1K2d!&
zuDHTp^FFUHyACSH2o64l@INVbNXuMTz;2rBg3d6SR3rD`GhS0Y0aGgn8`G_Y65wV9
zjswFB6_?YM%W{|ZKFK>C!>j+i>H5w?fvXqGhFVklFHqV^Doiqej0g*h4!ykVZMLlc
zVxoP^1F^oM&(E~tW;cHyN%`aSRzj~rjsDU(xD`W835?J$`9A{C93nLAAfV<{{`&4%
zN&^f;W}JI>myy53S$?0eSCWKzqj7VBw4D6+H>&f#cNlnowpA-XdHQr1<{AmfrhEii
ze{V?=Z-kqCY=4xCTChq=n&_pg4ga4UdopN3V8ZpG?mr+r<NoH^)y>8TEc*-^<$nbc
zu~YiWOBRwO+aO|}qR()`vXS$@o@&OC&4(@#l9W_9IRyBjJ>B5+{Bt$o-OcsCIj<A2
zyx>n>NHSuT@;`;()3^Q|<7LSI%Wfl+SU4c>nq4JrdxKpqJe9??WKH?`8ydK%g{M_c
zU)q8C)TAQOKT{Plwx=pQWF>z$+L>d?uW9A0ySC>5i){ZiCny!K?3w<&6pa+|FLR^e
zkEEOPzq1daK~kAbU1bg>FKB6KSPvd^h`p}7NgEUtlmL+HI<r$}hLGR#v}YZ~#AoBR
zrHTFAHFK+E%y(nR2J4&K$BuCvKYrX{1`XgO9}cRUTbA*eZ%D3Q|8d^!Yq{<r+0Ku1
z6)!zg;wlzK>)Snp&YI+vor5vH;k8=HQkoBH=EKYxE3b@2Ths>1HXgXW$5_N-q~#HR
zg7BZITQTkKA;G~r0PSdaXfq%}y#Uulu_RnCLJenlwKQ%@H^G4Kwi!Yf93)L^yPHM|
zk40P5gINSc{)^<rMw^jW?}$ux;PXrXjJDAKG!lT29ksX4KmpU2q1iYJjQ(b1H|)ux
z<+)uxzHkV`@`3I`I@yk5Cp_*ih|Gk#p=8kEt6tUI?pZ%Xx2xv=4en^K?ru6WO*7Hu
z>r{#gI|Mo+W1rbkQfKH_#veJc(NEk1qhQsC)#5lr{JbiBCZ0`hPD$K{aU>R%UM&Up
zj@~$1FI>q1m&}CMTEp0#CV4|GHsRj&GZ(){QjdMkOQGY_(P8`WFzVi6iFcGbBD*-U
z*DqX$KxRXMxTvUJQ(T}Zm)Fz%R*}ZmewrR6!?C}2Q#B+;vD@vEx-#9SbaQX51gY&d
zuo-N<*i*~-wEpfTHEO>{1uVyllZ(NuTq|@;*twgksmZN2YQ`w{ij4V_(`2UWpKnU;
zq$M9}J{)77*B6imj&}Ik9eRE)Kv{ZeI<FG*P>bv#F<(VKgBLv9S`Q<kkGlbldY}Ia
zx7z?1;!n@<ka3*!0ky_qhek<wOS1ha7O*OApm~0-S%SlSX_D;S`$y7cE32!V72Fi)
z*tW|wGL<>;#pYH9nMa%ugtuTAhz@Qx5I~XUSZIpMzT(FVWfruk5oQ8&j;PHEGcEPl
z9kRuAx7HT51t*?itqAyX9NsN1KC8^_^|fGabd>wN#DAyk=;t0W#F#+@N^V~H0e8Jb
zAt-1hyvT{-beV@;M{GCp1GC}<?MK5IRnLg-q7eAw8)8?kFd30!UM6MR%bY(T5IHy5
zCY&IB^FZC^%3S@Iwxt#cyPI^9ex;g8rSsE2KS65xP<?_WW3Em1BQfV^i(_B-KYeXV
z$YWVx5Q>HL#5+?*8AloB^`~~DA4L7@D#NwW6bGw|Ur)m*R@!^=t{cQYPYts;0xV7c
zwgB?0f3vcq{OJ9$ZYq@+ZNUY3_esaYj+f94Bt0=Jee{GzA-JDFKvocfoAQ9itKhQX
z)T|u|#8;+dJdykJPutW>RMgt}0abLeP#d$HN{XhX57^D{Psm{G5AllJQRLZzMPLQ(
z)Cb{%k0@WB`{=nVKMEG8eG_3#fGIVmH5=-tzu!1@7hKFjo!nXmb|NR2nPeGv;^6v^
zfh)>`p__l(+K=%(R>0%*YHXFrCcY_?GYI@#G_{jdg!?&$p8uK{lyRn%^&b9WoIZTm
zt<Gl}MrTAxwYGct=bn15CHmuA)NQ^aFs1eNZpuhc=Z-p4;}-_JnQ-aS;#j9O+#JX(
ze8%2Bt=RdqSzup2>xgp!xHl=sJ17rsgu9s3%JoHtK(tTIB&A00@kx?>FBh$E!962Q
zQ$4!R-ua6p{@ZPhuJ+0=M2fhV(c`mauv^&p<}Ro)UL&8?)D7^{9!99e1(BBuBk$;0
zOKI@Ofl!x$g=QV#LoS5YP<JYfu_mpfC-u)Nwx|x+_y3W+vkF4*Qg6i6N2q^Y90PwL
zkC>R4!+HN;=%3a{C-`5zdKE3p(=hCKkCh7C=vc^v!YoOphkIq*Pb9{Kz-*7Wef1H|
zUz|JBAl@(Z<=lpQ&e09l`3;}OhhkYna2w3V#>T^EbIbif(!FiF?IU5v`2FNRzco=W
zJYW=CZ=WAnmBlf~55yCTb;(%5CmUr*vOI72qvCS6uz7K8v;O)9|L_u|Mcg3w{gV%(
zR@*-uz-GoA#E1nouiLzMiDcf(SM9^M@?8}F7|F#ToPSE9@m2>2^eGb0pa9tRqsrny
zj&0IiBk#oH%G|z1Q$$5QqcRcM#ZNrkzzVp|X-w@CoB|;Loq`YxTzXQ&>-4QJ6518K
zjbO399SJ|tDOsX4U%LJf<j)<zI*6OcdZQm#BfvPb83iaP4K0|rY)}=s6r3oh(|FrC
zD9eDhq)P>UBkmM`EptA=mLy3{75);sbIK*6wz_jT;o1D3&V=Px0ROl^`-<@?Xnj=^
zvV6%?=B9jKFY^ChN??pQ?M2_&@l!kSH;7lB@yuZNgo5-zWeUjq6*NxAc{CH{klcmf
z7?6t%BKe*CrC0Jx6lE{Rz4bMUVNVbypfsdauAzE-$ium{8kbu@lN#;!m6&F*fr7|u
z|9xPO8gOgAo<xI^A0G0k%@A1o=Ft$#8v{t~OU?lq6r9gMY5KUAs)8@bKnPHZ402*G
zcJ$MEZYRROLY>2xY2h!dD7y%y0n!-Y|EJ{g3aTeZssrKqT!qa1uZ1(V#4s|?F!&X@
z)v!YmF{W?+?)ZP#H!S;!Pjmd+NIVa*b85T%Ybhz#g~{Mh0e`&&svFFR{OUFZT7IqY
z8-kX^X;N4*IA<sTuA>YZOsYDK78Q5z82yfo4Eaxi4J?ioagQqo&<@~+*JSxCTOaM%
z2{le4Ca;{^U1Dz_8$yponEtOeWayfL03K9h1<cwQtj);if!PF>N97#-A!(%so~~eE
z;AXUtrBr>;yHPCLM12cQEb1dC&gLgbDCP7V7KNgWR-|uQ*Jv4$KDq-Q6RP`!3T>o%
zw%bth%V5Kk-{cFGci>|obiz99C4<UBGB|WjY@Fz3x@3|bo$>ZHj?yUK{qk{*do%l-
zyRN9AF3E?83p%0v;4fSK!v)(J8fY<sBSWpBgyTq%4sqfkwBvyD*Kc>&!)^)ZNH_%t
zElaG9#{5^o@|w$TVK-Xjfo*w})$0PK!wgWqdM)IEB9?NeB5|tvY$E=scjgUcm)U-z
zUHm`WF8H<IUuO+EVRiPgEDSKjFkA$<aIc?Mq51_1)G&nFUoV2_r)p+xwVUlAl11f)
zj{TWmnQ(Cc2_NYuOhyTqqAU>?nanUV&*A0|BD{yrVmvsBT4+CfW4{V#o(X3j+cbw7
zSW<Hp3YZLs8{$+vDbhsIc5W-E#Ivkke!a^D`#b8$m#2~%UfKn*;DeP(4rCALT3vgt
z0BPWCNCTVldPi@KPB1{F#!igsOdyp?;5y~<6zn2uMPaOkcaxaF!9Q{+SVcA0eF)D%
zJigIkD&8x3eam-HXj!CcUe*rG{-+HV>PAJ}KoI_C++U$v&eOg%M1MQ6BXclT8<LgR
zjl{4h8kipZP4)-PFW75eUk|P)hSeT5!&S2C2>yOk_`q+UE9pGCWFa*iV#)1eoTwdR
z0ull4-@@WZz4btaB)4;7GmL<DR*>?Ob0Z={;inkc>Y<4VWy~2WruCLfO%({VefaNN
zkrhOW{eL?2Uv`T{w>;nbdMihvbHYv6RNlYh-@n4|KT{U#Ml~6{n<#=5<O*7U#1scA
z?uOW_HWvI-g!~Ovw=VCEhVGs;G`E6Rckm$bd&HHi&rTyuh>nQ@L6MU!EcC=o)aOgC
zrV6Y$G7BMfZUlV{&^D%i_doC+H9tc5@(QXc-fn78u?X&OZ$1naEK=m{{1#?4Op?}E
zLIj>ZK!opzdD+-&nRQ7K`s{XLeRlgu9ys!{rZ6zO+MYhSRpVy}i}RW~0(VRXqk2Yn
z<p@U_5mcfyVoHl*8VIckpoAoact|YuN{T|+Z}xLv`=#g5FN$e@Qk!UTF)*h7%K@o9
z5WAY9g(xZ&sCaeISysQFnIRsf$BzttZT=x2=yi_Q89n$M@q_qmzJ<Qc)AxOOuzGct
zVO+H%RXmw|K-ByWncKnpVBxc7CYA#^1dn;vWv=W#u6b1QRmDb-wapVLg5E6?4cGyL
zGwIlQ)HZR^T>Cpv5Ln?SEBse>O(SlJ4hB4*K6v>%w;z{w2WIm~wrlS7SB^(uWB?Q4
zV*<lqC~%}O_sFNqkhcT<e2w(VLt3t5r9oNRuMA*_D(Nkir1?GePN4<cgD+XO+XxkL
zM4y3iZ9vh;@K7@t820TM8+*k_iZB$5&3>qm>e@EiNIz(3+OkG^fUZvK4d=!pZ9tt}
z$dD<<sOXyGmm@wz;vJ2h%;iJiSdww<Os*`|6vdy4ykB5V;<wm=8TKRnN4GTqtO1g2
zeOpPkNQK%HZ|r+tlI+;ZqTcx8Yj~!_Tlqg()c4Ht340g%LUyA`64_{yL=}q&&sD~Q
zCizeId)aQqq_U9q8fRpKA^5X5K=NcBt7#BNgQgD|N}AiQ4<y}26bzY8+#<i**~UCP
zqP#ryp@96SAeL7Uchj$?$=DjvgP_2E07w6mfd_t{i?Jt!HEyehyZ$vXi>|$f|5>eZ
zPfc9H^P8`*a$qA=4s1ntAm(}0V#A-C`>)#bV=S75$ok?Dt1zrK4Xrj)-G$f!iQ9xx
z_Fr*3jCA`=P4;saiQ|)hYdv6ol&e`yhmQ3CZh@jCA;BZ$+Ex|k|DK;ttXR7|CXxao
z=LaI^OQsPZXz^8M;iZ)lHiauVSRa3Hy;QAbx&QQTqB5k%7?`Qn6$YOAx1=%F#=hP?
z?}F@`3F>U@m>@d{MW~~oCcgXFd4X^MJCr}EJG3Qn)cH9GgY`(!b}HDkylv6@GhniZ
zFa0$97797yB5tZqO~$eO|4SA5S6@u8I$pAWJCdd@9Ue29lAHIhoZ9@!ysqb=!|qM3
zQn2GXy`Dz>bvZidpNx@7Svbh-KtPfL^E^-p*icH52_Tau4C<N^EGaZz9EqQVl1(kJ
zYXs*liv6eSr-dZ&w_}Pym-NRG!$>*cf2b^);yk00`Tp%ct!V%0jEIJzPw)A$D!kcL
zLcDyLddYI%cE-i#RR0ORf-e34WQadl-;Nz%GW@Q{q6El5h2}7oslveMkL$x@0_g&g
zWW1Q{ub2UeYo>RsgZKyo!2M3)nV`}C&s>0|(=6LVsgM!_n0x_<&-2YHtf+#JnM9+v
z(kUdKcWn{D(jl@VyuYJ{G!wXes9-`H`m!q64Yks^CxExekO^VK2t`GH<iurzuss81
zWedoQvie&BGH!VM%T@^py~woKYMFzGbe{4&*yKq6W6Am91nYEeb@!LO9jdo9FlFn{
z1s-e4ry{_FD>?&tZOp17%eMl$h)T~4pxzGeeb~4D=b~$`x~Y{;wOq6!8AG0O<G%9w
zMSs-<Da&~#TQN9+;NWP0J8>@jN&s<b5yVx(p29>|9=KrL__aU)6^eq{Nq9aT9b7#2
zPezfJfppBsG~BwHm<A_A0oLvuAA^|z*5xzuxSgRTycl~<6^aJBITh^(?p7M`SY3^l
zqladiHmdoL#$Za;mXe#c)Z9l@O>b6wpY5W6j%)ql`SnLx;<@Nn*&RfkB+0YQ0@6(_
zUcZTqFoN+2gHm2)&}RWZloo|ekXmPnj8wqq(hn_`@Na22Qo4pj&Apmmvz2n_u&UyL
z2MVZxzVvgbh538FDWG)fZ+;uUV71K?=PbK3OY^SdutmTBPoEW1c5AY1rveaE)6UD>
zy2F`B5J9zbJ-lDfprS)TC_028RjTOj9F>Z{b%(rEgcytinxO2`C^wxBfWvJxbm<qy
zTq-K5OOXloZ{`BFm)qW8ebR`^^vQpgJ9so_DCu_(T5b+nuIG9j@8&Ooi01b{-o$2x
zp2U{hi>95d-#iUZT_>$d<UP$G^Fh{j{mNYpL(~n{^etU{TX#@{6F|#ia}h5W+Lv%U
z%KUHJ5Et3vdtKEt`^k>|g_j0s;M&RknV^;}z(bpSK{tWk_0PPMjy!ihusDJwX7M>t
zGpf;E=oN-pAa|jUqeZNufxp>6eHefnRK@aw^v385&KbJ#Cu%3!F{NO04K%Ta0tZ+N
znDFbj4^8-Wf<9T2Jr6W)V<bbp$EeO7^&Tf)@ejYDBv7_B`jE6-P(-M_;EGRLNY5ow
z?BG+w32FN-b4(r|J?kl@#tEE|2*4eo43N_s#5aZfwa;X)(V@nD1q!I}%^7}V?CY${
zuY@sEIhV-PdUxBoPX{^~iqzBrSDf$mI(KJNvOlX$+-={viKimigN7*FBP3THWMBtN
zXk<u$pYq5!3gT8L>!B(qw3IsV3~+fnaUBdR;~P|Miwy?O+^Swkf>d$VbkjWdJUWj4
zzmj+)+mhwt$llL?N$gN^L_p9<{PVvgo*i_XNbjo)pM?reMB)Q4$OQP?G!G4BJT^0J
z-x?Bf6G)6|FTjm?MELQVaoA^?rYF~pBl{WXiuOr<Lk!+PU;!KMmIc=Ul6YBlv&Sv(
zDe#K6M^%N198e^$!<&?zruvB#duS?Z%A|j(vIldMN6&5zfh7IOJ-fi1l-^M;zTJGD
zPI#Gbs+WFRNzi$FhRP^T`NNSo+nwWYu0taPKsUV%p8V=MQr@_V^6j)RL>$28MV*vn
z0vu<K%y#@m_6tf#(9YZO{++im4HU;q5J7eO!%BMIh)E~6DUL?er6!^}U~qqoHdegy
z|8=$Qe4;1GmvVEgzZ;;LJ>*9YR~lU_lFvRjMTfz%0SiKT&rtsZ=Hny3q2<;FT5b(V
zgk;2&MV~ijIQg`r_H{IBZd!9|)EuD{@Nxdd2^9-PWG=c4)UX~gV7|YD^L~-2xdd76
z?f=~gGn1i1n`PjpLIHGVt&df>o*sZR0@*S|t!iIQ$4{cdLQup|_y;y9nwE6h#OOo+
z(0ZNfi8)U=%`%1DMIsNUc`d*Fic1*VG12h!%Nuw-l0_X7B`ILDCp(XcdTFM%{VBTI
zKPT1shq*qbfwHkrx=7SaMYoiWwMp%CgFsKgsNxw8(IVw1*^wCrMn+LlG@^y%Ax~yz
zyetDPAAL6MJkh!4-<MMVt99n#gl|OW#O7LWP3^Mg%!Ft3xsG?CTz(RXy4VWBQQ7m;
zCe1=pNh6Twa6#GI<_5td<P3t8XSew*IEeUs?f|p0ks^>zvvwxutuYm`2So?c8YhK5
zid@uf5t2JTbcq@f7cOQZelR(a&S|{YOjv{sk#hqI#=0UB1rYHM@abIEIh7+{+WB#-
zr@fqAM=XdeXS|YnFGfq^C#1(2d$cH)T~F^K`ecF+CD`M|$Cy8@ysp;Jit5EEOUpx$
z{XzWtD2xYl;RGvX9(TuvkwxJ$$!@y)bX!Kry>Leh{X>fYkFq<2NV^%Q+3sInWC@bU
z{1cNcwwftbFO+D0wBW+Fm<Y{QU6X6kj5yL>6w8mnbQ5)gLc-YD2jxB&EZ(eOG1wA?
zQ0{SOjXSSOKi~(j_u$w?Y!u6H<|ff6zBT<KjyrCYubD}D9FH6H=rHcFxJN6QbO9qX
z7qUh}<IylfZG-)zytCo251qTHfhTUkItBDdUn7n|N{>ML(SlVZH#;m?o`fOAGUr+S
zv(?M09f*$q4^!72Pxb%(>qagrD-mUntSBRu6&cCM-rSO8g=EjGB_m}gGufNS2)7bt
zXKzYIWM%K)dEcwg_xDeaTix+`zh38c#`B!>Jp9~3f+N{ki6v>{KiLqKcmUf5c;PYc
zqXF>0D6p*J3xp8A*90?NvDS6(Bf2vE$~G)OCI>ZN-FZD<*X{{5LE&i-P1qX0JyA@;
zGKM+Gz$ad|eoWcB%iBKdeqH_Ph;x~E1?$F#_yDQ&pi^8B8ld=W#XnqRZN?vKv%(O#
z0NE!u5DwgDWFD7`>4uuc+RA&Mq^n4~<2p-0>N-oLvS$qipAddF9Znm3t2EsxX!~V(
z1Nta|1pg3aK(<&TPpeo(-6JFgAPcaKEV!>3@aip}Gn$0?6v)qDsn)IcbahU3NeBfM
zXN?oz&B1I?Qza!59g8@X@5SS^VI>+xz`(9yCL`x{T+F1yHQDIk`&j}(ow}W&EQo@g
z&e5TGL-4Q<9F!)92Wd^>e=2i;C~vSLOJ%_97_NaI@6IcZZnGChuI6=ilLjc^WsV=>
zv)=QmEO2J%BtUHr{45fI9l!+O#%*eNot_pwxh=<l?DR5flG`WcfouB1{br0az@!qd
zlW-wXwhjvd;(+;nI`%#<=lAiV>!)HRtq|u9T?=CTtn3jYW-63r3tw$he=rr2rgD(T
z!R}&|Sg-A~ClbA(ODadHA4aWGW|UV}i5W}Vg<_sjgXjdL%cMqJd{^=7kz30x0xxPf
zV853$`+o)cEg`S+ClH=9G>7)+cc!j)Gto4p@huXtK`?3}wfNWfZmLB6OA7u-Bu<IW
zl}T6)onD^TlVc>RB+>D!BfA2aC?$EPnu$yhGd=CkGYAhQe6|76pZA>u;3|3{rZwNc
zNfEb)646_z;o-x}5NL$Q$U`LGq6AU_^zw#djzZ!dH9PWYCG5Rd37s$e<3pN4-r~1;
z8`);*=Q$8N5NM(*D3OWaz=qr%KHSzcYm-CIa1Ob&QsnQv-llQA_iUVW)<@PXgEPkJ
z4f~ilxq9EZ=YRXeHCVI+r5ept__)<d<H)d;RXDVd!2wA?@IXbu|AfuYZx&wOtPG<n
zID}|8KeliftB6RO+KHrc|L|<}ITvbuw>ytbrKCF4SZR=siqR6>pAY#NH%l$6m|Br4
zzXJy+!AEp4ZT?1okQ;fWS@I1L_61eUUvA;9o8Og2PTWMGEQ|*B*-_7_lIdmvhSLPq
zs(%I3&~IQ}BQ!{sOeyCFLQRRmM7@8Di}T9Qy3!pR6&#X;-<2FB<7Lx{g{&`&5bQWQ
zm@k`cGzbLR>$~|`!kW?grl7W?1gQ?Pjh^WBTp^MC>&+~Je4L%QbVOQ(B8}(P?Ry+}
z3pmOQ7jf6|HZ3TiG`NU1-H$Vnck+?hN|wouD~godx?78YW$XM4&aLGhZx`gG@;?)P
zXM*gHRE1vXk$ZPxmnTjn6{0BowTP>I7X*e}U8T~~)Q9m~Xo}DrkaIkN<F_Mr8HC>l
z8lch@b_Zc%5QaM@-;f4+_(`H&Gg!6+8M;?)G=FbMb6Vi&A1ZzgM06I9m+9Vl7RIGa
z-D+?I(F>Fg2#qVZ&TC^T2SCejPIkowBO3h?*|z(P;Ly<Y$46?G2!#{I3OkZMr&ClJ
zX81pm_M3UG)m=(4)7~sC%ZRQdQ2_xtm|}4=i2S%pnDQ1=yv^bnQaqOuODD3&&cwaI
zV}RmW@O;Ht5#(8m<+x)<^ix2_>9Je*IebP4mh^`M%+6(<ApQ8WZMV!~CQSO~9~}M*
zi~UT*kS>sR^2<~DDB9n6MM)$Jec~+I2GF`83kFBLlNRHPh^-H*^_bmTb)P|t8r(Ca
zy*5BT$>U?Y;de_W1^iZ`YkAt-nrsZWhv*!in*(zpD8HIms=_^@{#0LWbMm$25&s<I
zv{*1XGE3e!4FN|ppSgYuEv}RFUGj@)aW4jcEc&{LfCwDL{<G`Sh}2WacgwJdqiEEd
zx?W5B(#JLTB7i$O4A*<gx$CTJILmCE7=9UG0VHfEr>QQ3x&mk|#uBfSSgKJE=|b9*
z)bG@~GK?Wc@jCf({&&rrM=So@`+_I9^~m|mnfAhN^pi8&Tr%dwH5x@PREh8W@-_%5
z?kcrfeuQ`5C{@5SBf^jFV9`g;AWCG5g;M%pEMIMF5Ryy7Kcq1Hy*CH*Xyz`qIodU&
z9eeY+7(z-Vq>eFvDaGqLFE_!dK-fATgwfbl^8~;}<Pg7=%21(^lPh?Is~BQjX<By?
z3yO6>M5vdz`$6p62F^r(0zirtC$8S!wUOM>Z4|FRhm%4qyLxVbhy!ZmIP=?ft9gpS
z!#RjLWx)i4eF^5_d<Lq82x*%Xhw&w_LjB^iSMiq(7VSd~`XrIX;4qd2ZCtfddH$X~
z!=w0Kq}dXkfcv62ac0HDmBd~Sq4$E-<$`PvL_Nm=OW+B(s1g9wAlHF*eRgdmqR{)*
zx|%sKTp&^&G;gcZuWco8n*AgGQ1#_T8<_PXs?6PoKI}w`qS(k1L0U#>n8S}!eSL8z
z^O*Gc>#p3_tdtbq;=?&gC1k@jqf6kYv{7`-@!6f%G#^`gu0ppiJxB*G1?v|=<TBTr
zOdfr<f;~?=vnY(?+O3o+QbflA6xvKHJJym1MkT4QTFUUj_|tzkkO%w3D#+SpF*z#m
z8HS+55HG8Lg%v2a0-)3B$GZDDJoqwdhP6Cg^VV6>RSrRn=vl!byao;-F2Gm`-;N5>
zx$^1t%-A8Lhs7r=iT>T&*QD=M^fbc*SBnigAK@80DV5=A9^vT~aU&?fRDmo5pwPI$
zH^Vwg2Pd-r_`65Y_UeHBC9m}tFf$`<sU}YE;}%)ggKwG*F&B$h{GBmZ-`^W*pBt)t
z@UxaQ{-U=6j8D<TZWBk;V6H$L-&uv1mNwmO7e>6scDL)z>&;Kk$mnV!e()Pwu*(!+
zm#JgC?pI%m-^7_-p+UG1C?Db;#U1Uu)DyH$5Z}=fINkhAdT^1%AXK+~$VP=&9WW16
z%)weCI$Heu=3$YBUOPL)qig1P&9z`cg#Hfqg45n=blU2<Sb^tX5J^wsXCsOKoXzcW
z4ja4_&?DtrpUG7`(BcS?evD82cfT^+{Zd}N!H=deqcwaa{_Vn#&nc(lBt2bVJ~~Wx
z{E&S08TFSc7WQpkhpkn+=D2ev_MwdF9qH<dl`fNK?K2u*+fT#b^5=gqHq&k!9y<Y!
z!c*{7Ke9gNQZ*;4-kH4|IWRI3<D~?kf1JRA>LQjme)XUw`wM&(pUekvLF$8oU_=VW
z5oG#=AmtBattVjSx^GYd!%E;|b`FGX3FnDb9lA5Uc+28LB2Ec!BI?O=`U_2+hksAG
zkyN7E^grfBvd_to<_HYR(RN6m$QU<(xf$?D8904<eQixy+{b^n)V1J1COahF;X1w-
zTYUcK(_`{1)6}Bp%+gGggLI6d?J<R85l9=LImzmLIt{m48Ka;|ywt<PM;w(sq(?)g
zcW(^z7}|6-L^`T9#PEcRc`v3y`w4>;e>3gRx8}(Gr<6zR*Ku^OdeYZYg-b45Pj*n;
zw_rUi{xa1ZJP$^{Z^RHzp3)v3e38o>idgh-Kn{gCNLC4MwqG+*QHi?}-M!tL#Tlf?
zqXh83IOonA|7u%+pP=(<uaAD}y3X5|65C=@b0XjU$g!#eA+)k)hu8|DWC|<Wr<OEn
zz*`mRCJVlczia%0AOVfh0S6#GOOExwrg@inEuiYfEi@{bDydxd?%<&!o1KbQn~u7W
zxe};<&Xe-q`uz<WGg!Sn;-S6Q%xky&$q}Zv<ddzH_1gKSa!z#o0mmE1EE=XpKOUM}
z^C@?`_Kb%6m{N|K@jJWMVunR`let$eRJdr3^G52tyL-+AYRHUAy;5LUko&aOVrKfg
zyWdEZ!#JK<9)q}S{nra&a4vYkcA62t3YA$Pu3%=$U8Ji%wojF^u90-T?mmN~nVxjs
zS55pTs6k}*Cqg-#n@}WCS&c_Jh~$#KJbE5m?Bp#}dJBP#STLw&rmU>rv-Kpl-Y4+a
zMo2GdytXBFXV%b(Mnp)Mfe#UqzXnN)X=DuA1>vnT1;{zVXjdXwMJlYq(G*V!tbnk?
zWZVx62De>L=xqk{gM3e+kp9)e1wD}c%j0*(p|4cg1&UodX~r9-`%5mLw$sboxC%4l
z7K2mDWid<vM;WDbK5wo_1_>G$U5(_^dsfu<WodHd#&6ApO_f*)`J)VC%lNlWf6juN
zQ40FBDNnHP70<$=VB+*+_V6Z^=Q$wS=TO(lKIBcF*SoJ$&4FY$SVob0s@>w-oS=r|
zL7TSq6~mUYU;=R;RD-&<cXrd>${_&%4Xi;kNv7jty8mL0bv7Z(F}9KzNnA8%4C7S@
z{)nhv=h|`>Y*#<edRh1;_ZAmY<$U0v4dTKvIJ1x;-t6c@|NNOg70{=uFZ<9$Y9RF3
z;-k|I<P)uWPkRQ+*K*AEh*c9ViPr5XK6z^ME8xdmYvtOX)Ya3MrWzvo=0<F~GV;di
zLo0oUEA4Bjxz%!x^Jtzisd(@`&vm+!r<~!kafO=(6p`yCv&j#RnS1PP&g54>=ib&B
z+|MbfTkgglB6+YddXSdiEs@D<;o})CL9=R@9=)YjV_Ka9wC8;4)n4c7XdM5}4!n0>
zo}xP4yZ5l@c4O8pnCr`^K3L&=o$jo$14Y$jf@cJ@U*G+_!(E#AoLMidGAu*s<r`RK
zG&QI4@%jGl{H+f#rfMpoCs$E@WvWlOPIRL6b^7yJGgn{J$&E=-yE>Itef!sZW%niS
z|57}C$>E08e0lwB)Ma%h&TC;DExpi^lnr(4zhPc!Ll|c^jFU)-yXaJRaekti@sh`K
zjIrt2N(uKRUbAX1<w#zgI42tG+1Sbc)|DpHs{3C~TMln;L`r#Yim%;<vldr`&2GsQ
zeHF{@usb0?KG@d~_vkCA*;70YS<BiM$_XD|mWLzJD3I0w{^Y%64grV09H<!4X&K;N
z0p4+9pK3P+_ev?d$>RY?{YIO*y`A>zvcXHl1&3QRjH>s&n7rko9keFFMPvr9@y836
zik|4>N^zQIQL!0EzRi^=;;!Pscnl9HTK%k3M1U-k9$()`wrYq8o)_nO5o(1dGKRGt
z<UZDN_<FQYQje*3SCxTrGp(4<>Z?y4Yc8R=T5Ik*^S*yYi~`Q~b0>IdHcD-Zw<|uS
zVAj-6l<F_=@s8l>%I;~4SsaVF=oED(vFb)mg4n&@Q6Jwf?!>9_G*#yx+wN=gdG4T*
z7MeEPHtru~5XW`=Vf}gQ^d%SV^t1N0y|;gSrih*nQHy^t+h3w|uFTf--gntNF5<i%
z=n+{qd@ZK&bG!a)*D~wR#;&-Ve><(ROsgt-9#^?7z9FOIA3f<ix)9m`U4g+%t?`$$
zf651zNxROvE~nGXana@J!Q(*r)Z2UZ)ybhzf}uq|KR(He*w&(TGU&ZY+L$SryGO4a
zDuEf9XPlsVDIZ42WZwSWt|8?ldOzl}<#UB2%oCXwwO4jF*YvV``fGb@*^;{x?fc*Q
z-1L5DKT>_>oTyd5wxq|3ZmDhGhdi1?pu&y8fW;UYofkGr+Nc&1C@UKIgNIIoY2A42
z&NcH&)%I>91Tt`t3m^c8fKd?)lQ?JyY_Wv}{4>r9Rq{lny`Q}@E=p_zB41XNC|N{%
z{mrGL-=5%uL?T(%HjMUlfq^~eGo^Rb1tAz6<vjlR6i*wc`Nfd3{A_k7ZY#W6*hAC;
zAw*B6x*Jy-a|h6Mk@Y`;e$hzWPu(#6`PeD(q`wx8ZlAUve75}VLnT!q@kuebEn|V|
zT-wy;t)0KLdp<vQVIrtU)~E3AJ}-9@<&9MjP6!(2KxeAF;e}gHkN57at2+_*M6YZ;
zd2BTu@vX3^GFHlK;m3L8g0+{uR|suiNS3SOHF(fW3mf&uQ1q64LR+z`z4L7MP_|@u
zu2HtaQO1gT-7HP0;TL@7G#vc9W4V6bSLqpb=88=|k3rGxxr>FOdcDOq(XnDyIpFEk
zS5#+fJZU`pvvFlxJ74pnvT)$u*>@hZhLW38<}Zhj&2$)rbE^hAtLxcWw!WUUqF!tr
zePoz#TB6(>EArgA6^4J=jM16#${pU-w2h-Ub%;_3xeib0VwQtxW1Ku*neJFUFWh)Z
z4+y=0kfge>=r_}P!b!r(B_Su*(D)Nh4g)85@bDdkXcu<{MWd&t6P;>)3XjS`I>LOq
zCiz(FyYoDp_wiU3x(N5StE0>6+Z4-ugUc`(ct}P(br*Fo*RVY+#uLhF|H%8dS->lh
zW+{T?%_GDyWK98%-VX@Y(WBkX<OXh^<XV$(KTJF3zM*%>FDk#Zy=rZk(Pp7$cQgB}
zS;a3Vt*t)81i?xBzS5zgGM28P%m~iwx@(g)JFBm)b+gkRl2DZSx_Vnx%T1~^L<=S!
zW8T$BQG7DfC|K>_8+A^L%e&I%{Tz%BZr$Cp%NyN9d38;9Iq&UIoUzP{%Q7wxWD{d|
z$o-z_M5mLdY4F~DFIR_8@9wAd#RRSc_Uc}WAq;z4oLh2Fk7W&-@A+)hxWr$w-c=?~
zZGCYChP!suzOSEIUmQzt+Z{0eQUCd=&c^R_i5Uup^V+SQS>yM}3ShM6%52Agu<O?Q
z%aMY<yW-5j?oN|gT2EK!90iQ3vlhOS?$yur#`0-r>0j|&{o^>V1?s+Q^b4I%#cdwD
zz6u?fX4U;<Wk%Au&vz8_R)J(?Mk*gVmnx)vvotwNfDhtJAYD&su91jmH^28%^M!=+
zEg$hwtGk7E1G;NV3$2agI?1=>cbu2fbaU4A$Ld3tyu^GyT@}68Uc2Nen+rp9^Njn7
z-Mg*&vPz7dTjF@aL6Xx?cBFY&Z_9qBTbcXS`}#qxfy`l0>az%vvPB){CrA9;Ogi&Z
z<>iYap6%fBRFa?Kzi8^NHBscrP>bh(rIZDUVy(5b0aI=OcA@nVKR%XT*h7)1o$fy5
zo%k7v<_l7BYjV074$u8dgX5EsV4f(4bzx|6hgY&7LDZi$PzmDTQLGG$3--vfx%NEG
z@CZ(K1w3>F>C*xTgsD~Pp`f9_50@Nf&!^rHcOu{sCCD}xC@}hETNt$0FhoBJ)%h=r
z?u*J~?0B8l$uv~`-JTjG3Vj?Aiy~_4<3CfC%y6!%e+CO5PPCLS(LG`mxtsBR#9h&K
z$T`}w85z=^YgpQr70EX=?>zHeOVVR?*^7yMTj%6IUVy@KS*$<t%5O`?NG{b_rE^vN
zKWPQbN}G0ur%P;Brc(CAt~*p+@aR+up%-h~*$4_@u=;s9Tw-aUYBlzRpy{vOp%wYv
z!m*L(5ubfSK$ci<?H1o@)yTC>3^_iq?Y`7mxHB`i#!$T+HvDS&UYvT{dZD?9TN}$7
zFaeQdKncBL%QGt(m1bI>^&cdX8hJUMvDp_t{p4hZp^H}&Eb>e$(>|2%?)ZMCVw5w6
zaBSoL-d1X&H_0)#SgW!V>q`@=k~+!$ljZAo2E>M3%~;p^Ar#BLa)_kD_g+U{{F5V9
zTG76y%syq>xkjZA_6%!w$zvs)vnGol87kUN-T2_<Xt#Oa>8-JPoOp6OC)0!ZaF}R%
zTH2lW<FE=KA;Jh8t8n_;r&lOJpB|IOyq&40U*8}Wx8=KWLG_A2neSV>F>c_Kg!2cs
zQl?ThfdKF}J|I|16)ihnEI!a=oKLD2+j-Yo`7s!uoM5|g&fYP1eh(}Eh7}5d;j@>?
zwHZ5aB%U6ynLHjG6kkVH7a8#g#j@b>q+TTLM(BZ@rZ9qMk0k9oc-5-WF$m5nJgszM
z0>S1B7|bMmO`(;$L$NVh@wGvtZf@5b3v$}C#vJ{v<~Df_Kw&Z7kkBk_-!nW9_2!*5
zweEkWG$jAtuv!!Ei5>`z7yrHS*RytlEKl$YjLq87_}N=%Ug@(ndtq%$U2^3?#9@m1
z=chZ^Q?Hjx3&K21G26|-oh9h1h!E|lIepgEcdhFFL~#EP?pqHZ1vJyH&JAU!^GW<R
z&Gy>(YgqkL?O{MbK8(H3cKgmYclg9fVT*RG+|w~He}#Pq*fH-8h3ae3ASX4IL$|E+
z9Dr{H9Fh)60kdJR2D2oY2+sbRVKs=cTx+C#zq9G&8aD4N`Oa*Pz>3cSmr&RH%PwX0
z7pw>M-Ipeu_av-umwkFV@=c&(g3Nb&@o8Pi>6zWZm7MMHO2KY3yWyPv*6#cHzpe8M
z7J~#+B-pi}G!A<GhFVSD&keDQ9=IkXMFY-6DOl+OyWi+j2b*^{<Vr4`qa#J^j4n#c
z>4HY_DQ7!c;g5LaUSA9GAZKK?!6G5#TM3Z+fMfL~58iSsst{nDpSLhT@KSUJZmJ@_
z>vvxds)8g4pU)7N!>qS2PQSkotxzRbq5!G5@)G@>8b$uMCauC?ZcuBI0FC(x0?M}_
zA6gDS!Ha-5$_d_7fDS=)J!$d!JIS$AZB14kz_TN3Qt2X~JoxbGF|7fY**71Ujhu+}
zIv!5zWR*>pRmaS4`unKl2dExr^D&VAxwS>Xq&?AO@KdA;IA~fDBvZ^<c7EPVT7cey
zna3Wk)fqpnsTaGV1m+Tf*dtSuLTYsPV%h{cuQiI_^lfSW&;~^e)oVT#Z>Z5<DeK@Y
zwpnAc?kKf;SBPj5yZ*ApmW1?HWHxx=1Z83Qrx?evu0P|^V@(&+4xSU$Tc3A}?s!a2
z_h5C|YR6?faBB?yV*TyS<GIAirq}t<^x=`#1tA7^dOZ_gikkg{?=<QXCoS&{l-lVu
zTkq|T>E%m#FK;h7r`XL=o>MT(u^;}Bd<r<kqHNaNuX~h?XL}@FC5=79vHtBA8$`o!
zRUmm8--nVmkxrGZyc~<Cl=X8&JyovCmEd_Jwkdp8gBlMlqRSvu^urIVA_A&$hXXeZ
zkmQj=87{d)QTsz{{KOU{=fHxX|1ef)J}y$+`FzIZSt61*1yjJjutG7Qee?FG`8Y#v
znk_|HbK<R@7f1ZrU$8r#_cr-yXQBG?qBvs_R9u32`VL1cRPll1sb3-L>2=i`bH^_R
zH;2|z3L$_=n)dl85-^2N(0iv#Z}aZPdGE3ZR&N!^hdfs`*Y@nW7Fw6V4CfdZ$~M0i
zb*AvnwKF<;T1-NrDnZiYZojA2U}FB}FPie|f_V>jF!n&NWmx1^ILvfGw?33P)G-mR
zE5R$ws;n2g*M4=3TP4`V6jbtIic?98V|8C<p6zSbWc^8%*P96*F7tCt9o+mXCc}Ri
z@+H}hJ<l%xRPDXBJonc1ox|?7{@S{|)8nd2*X%0~=^p&p-cVXfaQk~r(x|dDA$uj~
z{GI2Up~iV!$GkmOJE7^5t+_ElveLRUBlFVA^zZMA%sPOZvU$&Cue^CozTz<;_Oe?g
z{!$6APF~KX)*hX4UY(z|M_!Jy2>~U(EjQpI1ChagQ~?}qUS=^TjQc_nc3ccOw$3WZ
zN@0<;G$4`%e<XjP0<)LNnN6995_-PfW4Q5o36>lGynR%O#0+wmeP}aG3*PB2znbh3
zHNXc7xIUDHM^EQ_%jXvvS!??`^jT|(F`h=G4_b{i9+EHAKd{vi@khE4`4KQNh%R6O
z%y^hgif5qJopW<kOZqGr5-{q$$;v)~i+{%(8BQ|gWomJG>TcUR`N7fg$4Hx<HnpEj
z7)a3*be<Vzuls7e6@1DuedAN`tKwzj_)Bw%RaSVND7iOSd|#9-VEw-LO=;*roO=(g
zdSkmaa0P9*{|Hyz$j{r_f$l}CuWdKK*U@P?J-%?swf)c9NNDuxruv19PC1G%mn?@W
zN~}8zl0BP%n{_6)aM5Oz(s2<Mf(%HGzw8olJSh8z49t#?WRt&t`r`fC4&$+!W?JKL
zP!HMILx=Ce{ro=BQK-eea%?8Ma;}1}VKVOy34(!wS9^7XA1-06sAb+<&7M!I<!-?+
zSP~c`oCeOH0^_`AM|$?XA&<o@?uVdZRgiGaK(FZja~z4KUiM<)*O0ilaLHE?cMTCu
zjN7Dc8rbv-*#5*fc@`9aY9*(8+6Ma@2rrocZh?e^45^Bdw4&Xl;@-&Kp%QNVDU#C0
z3}(DH)Gc4Cw{asRaYiYy$=B<wanoztg~x3;WFT-Sl`#)YA?`jgofmj=Zd*ga6mMkF
z>qsB<?v2|=L19OMr{>Su4BhKzLDWW$3KaThvwj2<nago4Y--qZK14LF)UMyHT4sLp
zP0bAX-rk2>HhBwQCKI#o#rMx8=fAhl$38TldqcC>xO6>QK<{xN?a<N(tGu?|6&FKs
z-)hfo^Uz2Q;Cox{H4iO!a;myFQk~0xQn<|bd9U%!`MDvF&CJVNBAy!-Atx_L8N%>O
zz9T2aZ;aK2to&MAr%|sp7$~x6<WY?kDSYlEddi`^!W8D3_xz>h8#8{dK5x3Y(=W=Y
z7N`ID^XEtjce1rO_<~cHJ+wn5wEK(mvc--virlDcdL=m@!nhO#K<1xaNidpwM?SdB
z#!8L6yY~8mefMTb;uI1sh-T^LrfmeB_(ETk&004hSkq~lXx9c#K6}WPTbDJUb}c&z
z(z)u1QnSz3f&{DEVs-c=k8&7q9ibP|pS^tbo;Ve^)FH5-;)s*0r%8Q32A5jnqf>fX
z;8c|8Z#Z-l;uZ-Bx!>Vw#Ww4;g!1t#;E$i+Cu4=$&0vW8+{F>CON8QFXtbw`NO2n6
z+mX7lRg9!|DVec}_1>9HYqx`2kJk}W>Xg~IY8n#lqP?XvkC7v1m9e~TM6Rv;N{%_2
zKE0B9sC=n)zwF8viPo6|b0FRGky?CdK_yk)L%pEXoEaj4E1-y_Mhz^c_g$Vnjk)DM
zC*>#!_uwD7hUJ=q7wmrSez@}RNvw!Pprx&CGp*XbxnyGOiT;zAX=(x-WR9Ube`oBq
zfx>XD)lpOrVZ*#{(K^BO8l28qX*VT=!7buCsNS;)()phr&pCyL<UYFse+QzMjGlo~
z$5v*TD-Kg}XQHVUo4%EduG+iun(c0%%R61DAq%RY#C61{wHHn}nBim|q%DTVj6-OR
zn+12b{+5=@*1G2ja^#y->Oz<K_oda+(<8jTSd?Rb+4T2Jb4BmJ-(oM9*ss4Cj+f}$
zaZ1A5Qb+T8EA4gkniS%)QIJsZfLrcZ*LVO@h<dOk6WviwaqMkN3wJ}R7D}9`xwMeT
zNG3XXT;ykU-v1(_|K+p(zwT{A32;AX{}VrhsyaG@I73pTBAyvpY41aKLqD#+6AH&G
z?o)zo*6ob3B|9x9DyAQ)k_u%V;`+YuV+$`%XPV5_-QkocBweGB;fS0KGL#?)Pmw~F
ztCR)N;2!<a$)`{8F4MktTH0rDXQSPs5#q`(^f1gAuk9RsnHI_C^G3i+rYy|F+Ssb7
zqF{`BI@vh0YySM^{jIev-!>Bns4QzXSKc{(KD^et?=!J|asShMPExZXVyo)Y<DjW*
z0apf*t6uSvp1Nyv0@N14GmXWs+DB$iR(MaIg*z$OuniOIvlQRon_GK&j5)cdf6ywU
zz`Wi?CtveR@m!i<jW#rxr8sW`H|iS^?*J-e&Com(QSVKWwHHyjhJ0SXzS2Lfk-V34
z_~<D&OWQ_0S}BirmbM@s|9s<6Pu~_}Nv&+%h!yraA<JQ}t_*_?$vgd>Ya;IL9BZw4
zRlGV`r!4L@>c!5aj5iL=hkAPY$BNixN!t%=m!A(UA8FJ}@{95+5NY@T=$!5=MP|pE
zdFv?0?O!~Jz+G!So)<Y&a__UHa-x*?Tkkz^N+fT5h&dZ4J@4b&SUSt=HWHu42yPMX
z6?o1LcZR<8^J7(`OSAevIuwVoF@n^nVZ47Nc%0u!sT-G<#jD$72$oK5GEhRhXf2ZL
zzsIhCPXeuT6>JVTXGs=@+Xo3Dos;MST>UI}MxC6-{1B0wQ52L8fIsGki?x^Ta-x|Z
z+#08KLm>L$nA1(idpBgt0@Ej2N?&zxB25x3?~o*Uu5=~4pPwt@Nw+-HfNE`!VcpC}
zp^m}cHt%2-^iR_-U2T}zP4!4fRh-E-{otn2#jE#M<ktFR(BHiyIogH(c!TRanNZaL
zd^c}JhZ!W5KR-R@T%%WFE!yn1=bftb@{@2~*MlU3@VfqYjwxGJEhfV^^lN+)TF0#O
z7PjVV_|#iYB`h*Z4P;QK&WRW~RGl?0OX@GN{*B~|M#zuzXXFmJx=AsgcSr&ju9@AT
zE(~UR`J{3b|EtL*K=(~)6VJ?VNCNT)D&<>bP4>k{GhHQ~6ac?#J)`Cfye)LE$%x^C
zOAgTVr2z%8r%rjmQC4G`!xX2}N@x4!Uu_M6YnXM5xOIy;S3k49agWg+ga`(>XPrw?
zET7cbPh!1W4L;e?wbOh-a=tm{;`P?9%(2~_?B>@xTYZ<C>5WC>g?+2RRin1@>A5h{
zmUB{ga9)*=sClq=>Rf_)cYe=jiV>@~3#~KY=6Mvjom<P#oBWGQ{ydlHUC1PQ-uTDo
zr<Fawr7=mD9t3(}>$;4Sy~>L&{T&OPJ9pV-R(JS=dsP<ALlCF`+=K)i`(?ws^JX=d
z1Rc)<eq)4=Q1-|#m5>-ZQAo{!ccvww#B`we-qjF4Eu@w!wH@geMn5u5x=~;6{AW6~
zjYJlBZ2V+IQ0^Uf+I}p)E+mw>K{`z5aCMSueGNtLCcl>=7z+tfG>6J)<O5ET^1FMF
zRPO+vH6oh-E7+0wid0CQ_YhNH`3MrPBotr5WeWK`9bU=V4cT(O3b?m3i}%MPq~s0{
zmAT7#y3BV!S{!o*79ZDzJi$u)J(qNZKIvN8IA8P1_rK$i{OQR|;Zl9gW09rJtCbeK
zRRx4TGlfr?!)C58<>>)8XjihF;&?;kb?KeuaIO!M!yR$SKeg1Yc0b9#jAg9tGX7YS
z#usXG+12BgZErzx;BkR8zy*-&4z9Sn`UhYY>0S&^m#8sYAE%?`G5)&b*;i!ImE-P|
zs`5&?(#0nml$85l*Q0^G#vfO<o}V7jsZyqG_0mi6Piub7r}gB>CAX;;y7`8gz}QzQ
zEol0oOloU8=u8OumdANEF`Pq)qo}W2g{H+C-JZ$H!1foqSSjyVOAlb(>GB;-QfmCt
zX?*kZ6ZI}gV6^t8^Xh1pSa&^`>9#AE8YsId_tv>Cm@)s3V9g(&)~?{u>g^4Qvw5-I
zc_xY$4Ut`tNL}uGauo5KEO&Pwl0;r~I<Yq2k*=x}dT(e@y3$$$KuDbuL+7>Dv-1~=
zEj=0B-&ysj$vru?loNhqW>4&EhDLE(R!>IeE%_kpo`j)Ix4!ds!(Nlpx|P<;8x#4r
zcuD6$Lm;(;qc3E`(-u+T>SwjnwSq!g!=XbKCau%l7rQZIEZ8sX_6DCaEqDx`s8Pf-
z7Al7vcvT;jPzz=Yn?xSGj)~jMi=|%n?nBt`78Ec_xnk2Af`6IOi+7mJ@m>t&g6_ZC
zH~Xi;XAc5qsC0lqi*nr;OT1x}eecBl?p@Zq1h13>X{038Fo)SkMAzZv$FMuhMB7LJ
zv}f?dD-}}HS?<MY{e|A1afM|JeEfTEj{}eMP+R@^OCjBvEnsxjW4^}h#@@YFrmFUB
zi`M9glz}Eu%P-TS%CE)j-iAViQD8qJrE_M_E%;(tb=jW!Lv#;Ik6aw97FX*!g|u;2
zw}4Td)hNRPg1M~SX^P34v#&lmvyDXN?&Ng5kf1c3U207-5Vp*kVKn&}H)d_SI2W<T
zCYt7;8kkw`KT`~jG7>zPmREI`<~}*bICpa9yl>`5@`SXL=LG(C_d0r%yF0bkBZVbx
zA0LYRn0;^Foayj`&9Km;1YwD=GM3Fv@l;D8$9%SA)On+wDPDCF?&E)Py%Ukzka#Yt
zvi~xSu7Hrii1d_z=(UTQw@Y-Ii12kU7(wtRSF`B8vyF<tE46HKNbwv%CDVv|td^0j
zWl>ce=tYJN1jvt$E{HZHiVE%*mJzAIsODncf&5anJs(btr?~q~C<QLx{56*?^O3`K
zW+`ke@|?jhPjGu0_eZ&~L3zLbB!rp3<X%O}r}wm%G5{$&d?I-g5VrSGf@WzeGu<{@
z-2xg6EM>9052gpd>=18gXKKoS+XWY7dL%!eOFj12#vdg5Vm1c7a%gL<qn$!3pmPeh
zf`EK0cX}?s9f&$JbHTdz#!PpvbIreu+&fwa?>^}qS3&QMFLW=ZeA9FV9)~jI=9yGX
zg{ya$NgI{je#WbpM{PA&YG>3n8*<^7;bdZTHqYnm{8G(T<BO8bG@lehG#mAd<e&X$
zOMW=rQTZOSi<G~MA@e&01rVK8mV%%%&R<b)O)#kxvHqoGH@t0e{IXuhli`~;JwAAC
z-0ktHUUgy$H|JL4h4>`F(RcVmrd3Cp6{Nghb~i)Rzqve{{^>DU=Ka+4p)nJ8+umjO
zw~~lCJh-#<J4p5Q8xezy^-itn{;H?Ieo13zd_9W4`_C)kmF5d0S2qVOhRd(hmAIAY
zL?|%s9Z|_x86K(>y|wP(y|bdHamu9C71(PdF9_~^zjTFyC!A791=)SthzF+x+E#9q
zaTyOz-#rutZo~}fgQgn_DP+#?O)*yq<$-Z<m&cTqWueFlaD#yJVMx;_h7Wpp2W*Dt
zzV4kK(Iuq>7DRfUwzt|A&40u{ejQZ87i!`RQIeJv?M94r`g~^&y-6<gKPb=f_yrl1
z((6DeJ*m|ZTl}=;QDo4ZcuLFdXAtT_aqas+DnXPh0ywXSFU;iEO#f1s=5cR0-tdw=
z9Z3Y`pRWeqCAIiVsld_7187{K7`3?PYEDc1#S{^%4qoUzQBII}tmo+_{I#q0$FFbU
zND&Fy@iR$puZ4REHw#aIFL23cIio#QJs(o+yx__+oOdgz3vq9hyfges9)df=V4I3q
z)wuQF+$L2n%~dt;eTEOa13O~8w5!^0Aezc1_2*MJGs}xHDcPF+Ycc-yrQFH$7J+MF
z$m9^|3q12`sqoG2LrOm(7X#V*fO~^wnfwOl`LxoSl;gw;^|rQd%{Hw4+*q2sRC#J_
zE6$CU1+nk{0j=0GsMmt?H&PFMet}qJe$IkICFaP=HP-82t|Co(aM^+MN31yS_G7;x
z#L!py<I^_1>X@Oq5RW@vm$!)3YT=~b;bPV1v+jQjRG3t{kN;pdW$%55rwR1mI~hLG
zQxk{K9^v7zdZdjpT4d#YS*ovOj)8en5L#LyVc<z;uItETjVjVgonSYrGImh22}EN=
zNOu1Gov%qG$`Ju!1Bt%7ncPf*>Fm<GQ@gf=OqtKv5hXmw+o%}?xeFpJm?)gE=cTC*
zX&*5@o+5av0WxjXNG(3)4|W6Vq)4{}QrHSZdh~?Z6mYjeD{<*X4<akEA&;2Vk-OZ&
z^xoygRcI`DPUR+UBjqjZRbu{^6W>n*T@4@Bb@>E#e4M5Zont{k!Oo4Vn&@)e%t@xM
z7+Fa<CX$1AXBrA4JZX@^2sXf?pdC9|xi$dm??v=RzX>U0fG#P^FtzA%`blBS-{qH_
zB{ocId`xyee-bgTd$8sS$as%sqHi)F9`qJ6=kdGw5;AHy8Z69_x!#(qk&>d-tQ-jB
z3viN4OYe27_`B>FrLlN`yB9_%73^3m)S_b$ItM~$2hyMSJF!LQwYyyIX^!vE3v5o5
zCUQ(Gs3GKZxZpE<?Ec6U^L@g?`h1n^)S*ImB0$F750Z|YN7;}$cXXU=FyvxF;XOAY
zGkCU%o|q$41>q3){m~Y<CC`F1wYaebQ}?d-S$ZU!ny9Nm1gi;5_d_)RPZ`j)B(8Z)
zSm!K^KBQoXl>Ua_q^n3}qB=3^4(ayFnn3DsKQ8C(SA@Wy&mp(z7N_ci=>L*ETTs7V
zYStV;e=r=R@U^kYeWV*8N5EmJ+e~>VaIf2bmY3=@s)cIZd)kz<k}s1G8-ru;g1l@_
zR)<O7%xwFe^smBR(E|*8y(RZ+?L@H^R%BKmci3}IoLI!K=YPeCy(*)IuQ-)s1Eja@
zii@buqV6HG#X`^R098JsK8x}Y+e-8g8Xu(_P7v47$<`G<>q>yJ1CYwG1Tq+_2i2Cz
zm*Nd=O>f->6<10f^P(7QIO*|S_Z$tv=IZBn5`?fhgWZ4y;|fCPlFzb;oZl)Pef5K!
z&0Me6-DfW#M(Z^s_%Zq6xlSx@_#5L%*0gDhHEce4yLD9Vlqi(j86POUpzK%EZliti
z8p0l15D5okt8><09;XlDM{i_E?S!=RoYK6Tp1J`sk<CDN?&j*i>Hcc(%6q0Yd7tEi
zGL^owdHi^MSQ)_I4yCV1wI6s`@EIcy>I?d#pAw@Z#s>6`w!G*Bu{(y6mKISx8J_xH
zE~6G{sbRq&?UA3!lrN!swMQqPrtz5<dD<~Z-o(pf42#3W-;3iuDQ`$Kk<op<`lG*M
zS|eA6o5WiD+6Z_t@4{qmjkd)o`Q~QlmC7{AurjM0N@^D|QSBt#zbb}{qejY3bgqAo
z3Y@b-0LCb!>nF8Q&H*isbbCJM5q-vh?7bZMbwm7(L9;j@)kzRjz%<9{-UpB4O)T!*
zzYW=)C_4Js*^|!A1MPnusaf!6QI4ENuD~l+xUO&(8Pw;HE73wZCF=P?!QOZ@`1Uu*
zM(}gD&Hh$k=zf>~ug&S;B$@z*QaGu7lDea8PRxAp)pMLL(K=t11T}sg$*|C?8GN{1
zw73zX6!N6|UbDhNk!0fjLMb02w?~9hNNcn<B++>!@7NtKMP1lacPx7<7q4aDpQzAq
zD3}D1Z-T~I+k1B3jvTy<<Ui#i1CU9z4o`4DgcWsi)`VM>qWHmYzK<e#lB<ig-QcIA
zJBY_)#T7?GU-#&^W4!I8ojNaG;}+6l;NzftZiTL8dBLioX~%O>p<L@1j=-0ReE}7Q
zY`2$fp^!Wb=-<r!{C1F>{vJaZ$Rz%@)Uv@tFj2sY=slKAj$V2{JV*q~BI4(1yI@26
zc-+S3TQ8bmp$%Yn<8|zd<Z-;Honl=L`<BnTJS2|zuTh#lFR4OvLGTN{<UH$NAKR6o
z@MeO`9-#KmWp}s*XcQ`x1hq>?AD5d}G3nj4M_#<&7_$fyzpqMsqz7B?gRlsg(HjuK
z<%gEFUz{v}pCOw^iGB+kjmm87M?caX?OmbaEvj_7`w&K`Q98uoK7vbm!QyQFxaueT
z6LupbLaSmasZeTA4gKd4Z#XiH4kL&?lz!|twz_1NR^&TCsI$b?jN65Qzdp3C5@vBC
zTa~x%D6dZ8b;Z-?;?2F=s22xAXi<I*Vb6&?hTQ(u0?>U87ccLYqR)dSvCG3K{2GzA
zIeWHcQ5F<Y+!?Tj+`92`s>h)W=9vyB_x?jHKy5Sj>A{1=#7|Cn>OE}DyKwnh5vapP
z^m4PI{LSr1)5gw+GWZAPfD(OTz~@vzs6Tez0lo^*i0kMFub9%Fy^gN4Br`{1CnE9(
zZf_Fm-qDARZXj8Bco!6@)99*pFfxA_pSQ59VG5zOHIt<-$iNw0OwijJRQ<0}NL&Lm
z_1#r;>eO05yuRms1(xH46P}}b>YpG<wNMEgzOB~azc1++PEe%!nGCi5etX0|6+X(3
zU0j#<KII@P<SM&EStrrB+RH-#Tp`Exzs9yxh*L;q!F3H;S`_N38nectREh1$%U2+H
z+#&LzuTUl~o_udMdX>=lkb_Ijj$ZD>(Y@RIX=UydY=28cHz1#WjA}t`^yAw#>o14c
zBShV~=DCCjy*|+V0NalKY71C26DZ6DAr{PYSb0+>=PSIF;_(Zx-i0zaFRVs=8sDEk
zyh}8kav)NfxEHpq8AiiVtRdKD{2iqXfLX0VtuQ@`NDgzi)Uq>j$w4TikI<BYMOEFQ
zXrBrp-*3PKbj&32-rFClTOR)!U(rMwm_PO5UEY1`EOU2<a-peasGsuH4l&o{y|;Sz
zJKy`V-3ILhvKR+yKA4Y(lofLgR;^#ePxM&EAMWW3%q1?oO$Re`8gX%-@=~#*s!8K2
z-LI6pmaf`S-9hxSBRY;(Qs-5eC2pU4rx7u;#@Ep3gJVRRJTH$$`h+eOI7V`^BKyvd
z)uL19gVDYO2pGeIt$jv4GnJtp$u1{${fj)oUqqJ?wd{D9>Kwk%NfF&5&hV&??D<*g
zZzTGo-y-^!uPpwk;I`^NFkkz3UyC5l#Nq{WU~#HNm`WCxZi%2=C_&;+XI%~6mzozC
zkQ$Dd=g-i+%9y|3Hl`m;A2Rx)QUE)^j3vFunBkm9H%lY*6935J$e`RYWwlReA|PRO
zxKU1+XOAQK*TvwakIjTHmT5xCS(j*pdc?Ef6VNg+?@p_yS+|n-vjC%6(xH?>*`&t?
zBfnAeliu=zcRag)ANhr^Si;=Ie&eRg>d5?Z;`s~6jp14V-z;!i2{?_NLcFwaeE$k;
zuL6?)p86Yh3dMwFd~ZMX%w+c6TE3YE;ze!q-r)T$*{|<Wq{*c=*W*k`eL@KXxZA7g
zT+l5ca}}$3ZN96nJsfy-2?RjBvZHID!`~QL>^xWr6ZpvqT?hrCGQ;mqzO(%0k*b`~
zE_H>52L!{<kDWN-biaP$c3FpGd58W-M^5e^EaVc<2G?BW`zVZCjp0{(AJX9t_iP?v
zg~3<Pu=t={=TtwWL_E`~wP#BKJJOC+WIS+3@4po~DdA-Bos?4l98to?`w0+DOxovq
z7-S8w>H6c9h(jrO1eQICf2hzAklUB}R)i#t{A7}d(()6t#g?8Pws!9Z)Zi(Ziq)yK
z6OoLU2{mHyOyRg``<~3zS~VB4zDa$noKay`au&*TTo`J0*?6J>dd(2=hb{h}ag9Mp
zL4;?NbrJ1oiC1FqM=(-C_<fx7A~bJ*ST}JMs9a@79BMx^qUkiA4C1xW<wiq(JROXm
zj1b_LByz7LDIK1}$|pNxRgml4L6mhQBVAQ`_JV-G-zx{Ol%(2CM#eK+zLal<`tYM-
zK&6tudo`%j@jfqb?<!+UQlbCRAce1`G;Y8t=27WjKk!8rhhJ_B(unG0qdtL#mOD=x
z><tT5C}RUVO6Z`(ubM>$_8d*g-^d1yH~U>=CqkYVfS}z&F$OJblzTE48THoU@s&}e
z9`o2)sZ4gt1Mupgj0K`14`7qfIRjN1t-+A8tLlXcsU|x8j^8FaXAQn@U;T!_V=_2;
ztfXR1$Jl3v-xIS&b-#|Au!-m*MG=;)*xWS=oo^!Y0>`P63EB^eY#_k{%pkZ#1j|R{
z6C;3V@@%H7P-=~THXmfG6R#K?JIIKBv?H#T(&Bsbp%N*$Cpr9W0v+KDngzv?avb}#
zA#cEsX?h4ZWf!rnNT(n2@aR;T*VpW=H&?rok6^1n{tjSIgm!mEl-i&CN46ubiuoG$
zUc_NV#JnS|(7!O1^IQ;VaI=Q`?EMR+`r3~O%aIv`bp{LsP=WD7rh@zwyF~<z;;=%b
zQ5?Ts_@8u8@jp3k9YEEQ##J~P61$XKI4cN#Ja&|9AILg7m-c6WI6N~*$JW7@oWS=1
zSy43JLj5`Gu>8l7c24K>oE0UIuRYQqZ37r9TGT!u1>=doT|_?xA#*yZW3F#LyEA@!
zo7>3ia0o5GDa$8eg{1BwchT%#meg{-l5-bdqVYG^3BZXTafabMC@kXAus9nqf>!{3
z4Bjii|18qy4Sq~OV>?=3AG6xZoYnQLd|w$g{418qJ;hc?$i!1-gE%umiPVBTs767L
zCPH>U3|AJ)ojp*rs7v-tAC6W5l``X^n{H`VtWo<2-^t-8a~u1LaUy$V@S{Q@)b1i3
zCtrwlPfWkzJ(*D87V!vS^uTM<VqeoNUG9l12$;ix%snT)Wljx24{UgDgFGl|yuG4C
zLiAd_;6<2%y71F==-r=wDko|-8aVhs+)^g_-5-Zi{EO&b@4s6KBpTZZ{8>%3Zc@%y
z1iUbB%Spq4qZID%7*WEUnVwm~`bS6iaG(HN=UTX(aI0SklewS00(l}wcb;A>(mgeJ
z2dm^ofvqE}W-LOXhRFzpBoCHd#K#ERS&#!F!f(WYk^_YYx*V_YYDhtQ+eh%@@hMoo
zF5-sKX3MIei4-vd_LVEOyH`H;1)Jcnl3>tEPs&<^5EnBwK1O!P!>yXRW^Yq~<GV%l
z;v$L^oXI$$3wQ7*qOXVPSbMEAo~zq^^u<^Bf-n^0a7-FEv)f=;A=PoheOjc_fA5)+
zaB}3VlotQRs5-JJe)20Pd2euh8!~j+yD_dFInZ|G8a|hfy9TRvz_)krA)P_KQ8|xb
z&@tHk@o7rnb-?fEIzQ-{L{bBQX~}~xiJ9EA)a$!M;;#tOPI~0qW^l#0&B+f(`}Uhm
z55Rk*;60!bV_uC@2`S(m8BxK>o91N7Z1`_v!kQM7SS{BP2O!^XO8UUF;^h<3*_kf=
z!vwj*kYGOsDO$C~o^(Nr_S0MCU<TT$%2bKdCau!A`eu4XJU-zeeHoUl18V{9ypT1N
zLauG-33Do->x5LYiS!$M))6$CIJhx5c7MNO;(LSD$(E}R+9zI5#veu4N+{E1Hh#T&
zSM<v*RV9wCrSJ$|m&oAGA}Eh0&(EtY%c${i%kR@+V-XULf7^h%V1G*t@b<LSRdvVV
zcTS?-or{n$RZY@=V%vY-wnUR_Y~-10w!jARcxorg7JCvsZvNui{8b-cY7RPnR#^cj
zM(4(9LaKVUe`Lad5@8>Mx4tAcUgNU<GnbRUw@r*Ntg+}KE~OvKC_jk5c=qsZyy`||
z7_uH^VIaO5L}DiWS=J<<Un0_Ti&o#L>?v=W?-6LBLY^fUiA0RAT|;C2Am}@W<_p4m
zI{HeOuID9LOKO(n@>kD*GbE1<HT5+TWzM_xr7d9JrAtI8EOclUMc1rCFzRWAvISrI
zT7RPqXgIsFem;EQ8~aHuodxOkK5+05v6#u=8|$YE3^6Bp03wn`90PULZdu$W;s*GH
z1mG<PEXWIS&?wwg<Z&$6AN9i>e#MFO5mcFQFQthO-_Ff5-7wtRrv?G()`W8q&^hLR
z1;WyYMY?(vEuW*Z$q8ZUx>?dplMln*7wSF1ra*XxM>3OSM@6zWWZ3Vsk`f;O4GsPK
zTSXP#;=?Dz0hN+}g>DzZo^&_U9kVSt+8FqNaEaITFujG}7~EV=bHFjkAo=Ifk1{xS
zSh@qA0|EbKipZ_j80Rt|x^=wFaqCG!Ux)l_`vf^;w*okBNV%WL<-e%QLz6Cp;3%*u
z=72Xb0)8Tgv&3?P5Y=<m^H}`+C6)hW|6T!I<l5_+nZ@B&>ycDpU5dzcIPtHjHOsGg
z`A>5-8*Xo3c6{-h;B3Lahtz*a`!eE9^~+@J{pk=WCjD}kXqy#=yqpX<+d0I1y%10A
z3m^q;nUnpSaIp~y`#yS7h^uAUfrz86te6j+9%z)rBMSJ7%|dwt<ccUF`U_P-B<@1A
zYt~OJYiZys40KK}pk4<)%KTH6dZ>o#^8UMTfm&rfdtiVa{0mk2&)Q<ACvOHtJp~5?
zP8P*d;M2<0b*e|~0ADdAczX>-!&~OFG@k{!s9}2v;mv~bXyw?Jw)t(R_)4GV?8T2v
zSIr+|kP-0hhg^qJzI-7$<C`VnK=?V#2V75dO_vtQ6NW@?QZ_%CZ6t*&EvUeb34|-I
zlF8vtcq4LT5Mh0UyB>fFS8LLVPLw7>8vY%~!My8%dB3txHBt|kz(pnV+VO+=V3R$+
z)Uxc0?_oiP)GLWiLPEltV8kDx_q+YMZu2@3WCXehmenV-nk8nulY{HXO1<LH{Rgn}
z8v_|?QCWv?%K`~JTwt^tx6oqksj7{o^Ye#=AwmpB$j}x!xvqfFAkEbH@#*kBdZ1h&
zPHDV;A8g)!`;+t)r&nMxCeR{kMk>OA6z8~E&*LqE4DLGYyQ%ECBL_bdGYn~|2nRVb
ziG65#i?^YaK{C0lA@5edo(+Zz^8?jI9@QNvwR9>^W)r_8wc~EHLwT`<c99mE>4p9l
z%2!y9(M-K6e{=Z6)Ko#vHGG@#frHOHX^?n-6qu8US`VUH5QnFDMjdn{@>ukOu-vih
zD*otNqtSZl=QA%Q?WZYr1c#ko!GGUDbErlrc`~0$+0OhM^ODkla4eJ*u<S+Ltuv@6
zWP{mPH!FxHZ^||9V{E2me=a-9q>^-YjO=X<G@d*HFhmDY7?;|c*&XQ{i-Yni*F(Gr
zTOXh`+FPEe?FkC>NBb-B`okX3CyWwk+C*O!M6O*kkCaSbxFvRfUQ0dcVEKi`C%X>D
z6C4oJ@1fsbi%=RUQ*1hf^-BTEHahh;9AO%Oh2tyow;94&QKVGs>(S~fpI%-gebsOZ
zbh*raZ)oI^uaAxs)}aJA<&Q_@=g5JM6p&=iYkv{3r(Dp%45xju-u3Y{i@php96-#S
ziHDsTpUA~R5(@U^-URde0^jma&mnKKuTN>A4ebz<7S)0V#v=J_R@e_xX1$x22umVx
zx!EZG`hT^Je-L5u><OJBe3=Z(F}Sr00idc>Q0&jub@qg94nQFKl=MiGuAJmj>3#j~
zw**5WgOC$R(4xh)Fb<^*(=G13ufA|YzYN@zyTlc()A@yof(k(CbBb$0;mZ>;Uw6OH
zMO+B&G(6ZFvfyn8|IHk9Gjke%XX+e~dj%vq*>KXDen0mLZwo>Pi%ZGxwC0p3i9EvB
z<Bc*o7QF2vft(2FO9C|lVV^VrQ<XxUKMhhG>oZ~$l+Pq2alIXg*nNo@(gbq)zC1ld
z2&drCfcGgz@!&yAgnUM~>KkFMrYCm#A%pej!m43)45DBRlkV?Q8+N!R|A%iAZS%BE
z$DfTY8Kdz%dvekcu$%CJgJ>d^BrWK?b~o$s%WeHc5b0jkq~B|jCF|3ym5)_Fpjm*e
zk*@tjxA7bm_YLUzjNybmFP^?8MtC>N0yDDbO0eg)sQSFb8zohe%N-*Zu(0o+iT`q_
z<&{u8;WKL(d}68WLHLLpJVUQ1p8^}k6^nWnZbJ*);?XbH@n?wQa2V}mmAsgde0I;7
zUFLED;QIRVEOJE={hh8a5k!!em1<vCu+oV;ZN!<LT8gcfauzxR-Zbl(CR=~dc{*C-
z?VW5l8)7ABWdAL54~fGc^r-vpJtKvCdlqO@@T3W~TCn?zMCN!FCAiVO*WvH@^g1OO
z_9$JAZnIp9T%o8Zs98$l?&H&G>B135e?GU}Z)uPOi62N&yZX#8A55}0?QOir;`bZH
zY;Th55k4X!srpwAw}@gcJ)L67ocqI#<N)E)tmotOw%%ve^>$bI@D-SyNhw6NGNF=b
z*FW4fi@c`C`|e5saIYYj@dU&ykMQ&XM96ehd_Zc8c%F=Op#-2GtRs?5skN&`6H&gn
z6KD9Ql$%ZlgzgEMO3RQ^{;v%CyDo3{S3Hlb^TKUnB&YA*+t9^I2p{=KKa^~rUfI6;
zCQ_E|1l-;f8MpXj9w{!D|7*&Jvlp5vCbkx}ynzdQQz(nOYd{b7Vz_lH(6nhaN6-8u
z!Lj$FLA;#WtnlJ+B=CA`9nOauMx2Dp+zJFY*3VBBaiu#xQHh~gDe2vQ*&W@o&_cW1
zxejs5TbcPL^-N#vG3=l}P?aF6L<rb)3aBhNNC9&IV$NjzKgs~MlCS<dZ>=;ZV1z>f
zV9Rl0Q@*V@uF_-gz2b=QDHK1M4B}4{N43_|owk`ENW|l&wbzsEyLrhPd&Eqg=<(>L
z-~X0OgDe>jOfLfamh5(O%s=c&3<<qL0_8IxCdIAP(B=P`&nDJeeJV~}3LdpD>4ymD
zjy=Jgb5;3QKBobJ59~i*#|bI?CZS8jGo=zy^DnIJ?RGoKG1|<&93nM+2yB`d0W1Tt
z^6wO>rHC_Bduq114V1|EPCq|dV&lmlb@o+h6svZtMs6ay3yhrPtS?yboGY3yrIh12
zbo?iT_nlL2M9Wj95$pLlXd-N2|7*-p2VY>}S?IU@8-Z~Kk<qV`t$pfOLew(2E-yGo
z-Vr4&sLv<#1~3^n@`&qE8svc#8r{cVjY&q65<Vu5OkvUDQy=C+lGue=zwk#+$&XEJ
zNz`usq3S&Kw;W^lO$tH?7A)J^o$pzuPLY?jS`N(OiU{8j!|gD&OjRY6R<dd)G3#_6
zp6AsIV#<YUNh(Fbv4(G>$%f)v)171X4<?*wZt(R~ih!@_1N`&6MCEzXECo?$h|N(k
z8kmL2;`HD-)_K3~m#k10yaOMI--O9u4q`yh{M{tQ>UncQ-sA&aug~5M$(Xc^H5z(+
zcRO6Kdx#}KBi(53y}_5l0AdDRHbqo=syCVY)9WW^54b=?RfD#jyQmmS>(eV}Q-}u@
zAbz3NFLrvE@Vad{Jp%AFpxvQbFkp!cyX*Yjl=pSsyH=Y*&?m?ZR-@^48Yhvg2=%O0
z%f7r3%MG~NlC`n|dL2<dyPdZM2$qGiAP!l(9yLl9cLK$D)+aaisR9A~!)E+T8q5Ae
zhe&})K2AnFjTJ)$k8pyA=qBF1=rtW3%gxrY|NFYM^&z-=S-AF6^X0)5(YRPCAc;qo
zG+K=F7mUv83oanal{0@#RCtc`U=5kqje@F#=H+*0J-5#h))U8p<V%2oOBGQ;_<YGW
zA1IzZk0J)blOg2oKp)A6{=tG_$EI5LWPC5o6bp>G0YDR{khHH&SEJ@>LW3Zv6l8E@
zsGo`=%T>@pazw4A_}!@^Q!#_)hY1Q{F=>biw6Q!PTN(1>Txn^F``rvgs{7Pw5~f?<
z^;u1gk0`LP`~zhU6^RjIH<nQjEJaJ6hWQ-T<;-8dtOEdnKnf&Spu-xRdHR^~e{KTe
z72^wO!2(&OpO{$*C!b9?yvROEk9BpbdVAucnZrNk4Zv0*S|KrvS)p3Uhb#QQN8dvS
zn~G^vN%@cf3{>z87tlYuawopWj#}U*Ay0tu#x7XU9A91J$Va6X`s=A2k!49j{phpF
zc1nmo^sjjiRt=%7I578F<JopI*e<eAo<bH}{|bN*MEl9We!+sNBnH?pFL1qM#hpt{
z^@lC4@<JMxGGXVUb4$ly)32}lc^68uU`Z)0$<`e7O(I+9KNtp$xvKE&9O3qH7_-<8
z3qAI|#QlR@2*}C&+1iSgg^%9r<U8Y82!;_auGCY)t{DpVVi;{2fWoky=1QI}?NoSb
z*yecp_ZXcSIb;0W{`1IMsOew+A8X$oPj&zQ9Z@1tR@ozzS@tGE5i*ZW$(|+i*d<qG
zmCWqDNA{L3l<alvk&r!(<Jj)^2dC?M-@p5DKYqWi`;X+*IiK?$uRWeGunGWTSo}u0
z3_w8w5}{j*I*E4yXg?rF{ZQ6-U*ZkkG5%WQ!oR)bF8Wd-5Kl<$R1Obd5G~GNe+IEj
z>WijZQuI@RMo8>h9-NTk52h|t_b3)SL&}7kfdH?H9>2sJB-qNXUiq75=w#=>C@S$T
z$Vm4<s+Qab0eYQI>>*wCNz}y<%Lhrc0~do&TbFM^TJ#+0JJLWX-+dg(#s-O3f1kon
zH!xIvQdN!fl-}6e*Gn=Ow!PE2oPc)?q~xVS9+2^68nb@+#7J|pv|LsoIo$af7;*H$
zlHD$yTpC`!)QC&9)o_{S=dllC;0~32BSOSezS+vP2nS=GTn7E*N2%iV<q~6b^S!qq
z7$~T2#sqqNU_IeoKa&p*K#$KcM+14p0lD7mQVlWS??N+!zwohgAS-f#j8Wob5kP(d
zMwD2;4NCtGG3^ZeU>1e(WnZpq-!1?4G~m2Kcp@R_jq3m<Bds62+5)KDHU;jNA?zw2
zA7N}xmgjx3af|H`lzCyLRB=GImHXbhK&Ri@3F{OFGz8V#Wl#Om()F~c7BvQSA1QWs
zEz5x40U_C(MB-Eu_oh@Sy{D)aapmsf32A`SzQieJ$utSIkZm7_dylEQp$brSp`Gnt
z7qP1GpNo^`U!W)-=J)s^2jb|#*IF$!l2)33$}pZB)gTmSHDHsCO^1di)i(Y-_VJ9J
zPOI4nwTQyDiEkMuKK-T;({Gu)?)IMk<Sw<YfZ^Z-Rzm6FpUB(ti3sA0)GR=%bQ;G{
z8793-w!B(Vb05Ot1D5|oC{cV2)VBh1mwr%tod*C=^23C80W*GwPJM%!Q3}WAW`ktl
z@FyD_+t4#d^i~gV-#;E*15&B60k%2<eggNvg6}k42dInSb9w|_#-9gfm|Ow&WUjH)
z<@?92d!W?F=%~cN-bg3c6cIcqa2{K}VFeV>LP%c#jS#r4E6{yIxL=rG=>8vpYa#u_
zxv6eS_>^@3JHYM#O!4b|QLNl3f`6N;7|OFlvi~lG!+zFR$^zJ}0nKp+C-?f-eE_Va
z41kqrq=4dn;%i2v*}u6p{i23_<kVmTsWbNS{47L>3IFm27r=M}aTo3k_`_8)8seV@
zn7kLxA%r0tf8jqOE9sEoSMugP(eDL7?mj3*#8FF}2$?4HIz&p@eI5p1d*>9RiG<~p
zJAUgmP>zBuG*M7WKK>5@5{o@Mn9@jDtC=bZ7XbOT*cs%F88s{MBq1a)M__6J=%1Z%
z#>Fe!35OY2@+?+=b5jwvzR@5qgy=QbfG!!h)<8kV13eK7bL6>{2Y!)W>|6ne+K_dv
z<p^rLod8aT%THm)S+%0aO*T=u3?~}&9|`U72?IH-%tG%1$<vck4XTqY(XlZ2-Aups
zpV<N^lw^<|VEJP<&3EE28qk+3wa2<(Y4euh5{%ySWbwJIw^lOH{nMNB0|bG8LFJ##
z$K{{Lj}5$hQYO*@5FkMWIReUrnJUT{;|;0-S-`+Ck|1brHJ5K7;<oX!BThVnL#H@X
zs&2p4s4x)>{iQH@a&7ehUEHh`W3m78HA9<U-YJtqz*NV_(?IH5)MB1J7fp7IFQu(a
zFSh5n5Svl?yH@9SC#r7)um>;Ya_5{{7~H;I$XAw-*<DJ#Nbdv6cigos(?18fPhnhH
za<Zr$q*|%)?at)x%jBR)>(>WBt>cLPlOipMT3<ov;$4mJBTRu&{wP|F7!SJ{LQKX<
zs{vS1<DTZp=?|il365IE;~IuEj=ZV8^;&pd-R2D}3M%4$muE9{;ih6Lakzl2<s*xC
zWk&DtZ&trgyMFT%>8DiUp*Ks_MeW)xfuGmBW2aYRZjZ#>b`eE8(S^`PJJ!$b9eBh~
zOrwSB=SR`vZahQy@$+MP1zU9V-rh&oS4r|G{gh0O^MY6*Wc2!<P0E8CFRuytz7DAG
zMF!NNDynW?#d4vzs=j|&Ts612I`Y2f2~oS&o<V;x^uBOrk{)X%fClG#$;rP9-80^f
z?WW{IJDzXvD8X|rXb4!|{T05|3Fkf&cY3A_*u^2-YKYot@l@T`yA6&wbvL>-Yu`9;
z#QI_89dMIPR$ky9a~*cBIMb;l6dMH$YXz)Eve=sCckkXU4AoYHK7_E@*1Ed77*TIu
zP%j%}kt_O&9Y6zWac@@c(A}o<C=8>un2>0vh3eA5;y`Q&59UyE3(4doCG9)ZLY}=?
zcOenzB$f+pcyL`Ja=Y;R#kY@L74Uu`U7x*2@&vr~<rf?zmuy9q>yP)RbvdfUH6}i8
zy-ssDi3mrZ>sJ2AqI<HNOC;hBMj09>G;pidFU}jJI4upE?kO9CtW7H0n&OTFKbNbZ
z!pS+&PadCw2BKC>eu-g3Hky{c!I6Zv@cxItd;;)^^Fg&&^|P5bx)UR6RDw45N~|m_
zGFLKnH8WJ=da^Zh-q)1xqcwT_$n9!IZ|hG1gotdlBEP)mwL35Ryrn8goODjDsGnfd
zldV8<n-g#Z?W)^4Uvk;{lpEkPgF_y%Sdfn8#EGCFJk7~Cft$>$`?5L50e*>NZWlSd
zQaR(5VO)2ICHCOxSe?sjjJ`v)lHF%rO1F}OEsr6xA=I^fC+FgG%hz%=pSI+66C2P^
zGWzz1PpA^svvKLhnPM!~6l^iUcdEi2GW12@UL9n?wJ<@~lDfj_7(ykgRX{{(A!>!g
z;vonxTd7(!i%Gq#)>Yn#)Gd3SWjk8jDV~8IKT23O2b54@$#EPBm|Vwx$?m#O-UI4$
zZWhk$doNTY)$=Mz=ii~!`LOdzGb4E)GJUU2&E8?F`gC#NB&~GDcZ7J-Yg=GVsDBZ+
zf^KV9@ytmf7{P_yp&~<-Ah_m;3euN{z?MBv=zgM~_ah|_vx*fiqwn|GKV3Xk0Z+;r
zR-(?jTdxXvdV9gmRN6fNoN?m)72+T+bav~{3#A?fd?((!k0!3GU1PSWqEQDiAZ+s+
z#UPXqE;-eD5&*cdsk3QxcXyYOc^^5JvS~foee~`t39Ckq8R5uaXecp2@M(88w3@;P
zAOXFl)`$SgDZ*yS^18q?0aV<Ql9Dsu!dSmuO&LGf+nR6qe74F#LbvG+nfmLlhq&j?
zu~1TxkfeYSo%6rmF<EujL@$do5htrmP_!iwP;lh}l)CFWOklPm81LP;o+3}CmYWGy
zRDg|(f4!Q?yfa?Y#wK^i5OkoE5)&taPgopOIf=Mz<t|J(hCq`?Q^%fMI~MUOSAh5k
zbAGFPxiF%k`z<S<MduAq$CcUIno^NeDjXi8$;<T$yNR0wZ0~a(&Z=}^3V0?pAYyB6
ze@uS))=GdR$AO<;C0*Iq;GWZDM~`n<z~+91!@(zWCTd^?W=Jje^z-jVKVrMA(bmCx
z^&|xk1{AV6ENommu%B@CBrk0?P)y~*8C3?f(ZA_Dh-6y|+m7}uXaC@LtZ;zVSHg<_
zcn=C4UcU@3gbTE<J4BqB!dHF|kVZ>a?0bjHhCOXZtXlglZ|0Bh4Vm*>&z6^=5eKz*
z(i$7v64dcw6{Hjyp_7eej_%?p(6C4qVG%^a8k_?Po6Ahjp1aiJv*s|;2`ez{j}?~u
z^#VQKdw8%H)`zH*Iqy$InF<=kqgM}r-a>s_3sKV?t(c)B<2D=>nC;6_r`(^V+I4OY
zybk*RRAr`{RUT^3_q-m5m*~Mb^$Q!s%mU{REr@D2)FeluUWc*dc(w#94=Y6+=MvVg
z11TwHS)NG-S}F8<`D=^kcn?<pezwRjFOT=+Q-igCjD^FzL~C;Dlt*+8X)h*@6^4^P
zK@>7@q|D*i^M>Pv&m2AwdzEl`XiO^*hpEgCs9{YMjpV~=M4O`Zja8;e6n1Byr&NMC
z>d_~oA3sn+XO7=UKlvG(Zi%XZp@rPd;rxeSA4eR+3%Q{EFkXG!rZTRWKIi0ZK0aR{
zmYDjR!<YeFMPZj&4?Z?6y;Ox?n819>BN_h97eqEWp5nGu!=o-nZ*sVGK4}-%C)mP|
zb|gGC(iF&$a~~SXe*ECdws0t1riM3??FJBOY&ZCpIgYy{2|Xp;pU1G}XcegX<CFE!
z<P%d-<tWpLSS%0ssau$P9o5G0TifL@J*tp?)}(Z}!7koa=NaR~dt%S;;o!m6>clfl
za7I;)H>PwJJbzKSa0JDGbdzrpbJfCna@=S#`I{4;_Ka^E#iW-IQYpGy7kiXQ&suW+
zBt7W+0Y~C+-H~wr=JMQa;=2ucxUb4qb0SB?=kk_&p^3rZTq7u=T(?EVy?@O{cIebS
zqP$BVhn@1)rCYtJDiz7`>O^1q_+;RDxc!8S!*9(;lEM`Z`d$NF1`e;gu?<w6l|$Mh
z)%r(x<gR5a%xFk!&$dYcpz`p`<cPBAKLT(=R{hETc`QaoMxeb<*Vo^V58XmXcKPxn
zc){~%9^GoYS}-;|2bX~S#_ql_ATavwJ$|bJ9`D1+FGQM&QdmtbEsNh+X$3ng*YODn
zA=HoO+g%K{<26IhV%M+VT@<v@P^P0pYU@tn8+q}|qRXu#8B~-(+#G}x$^cIdj2l(S
zG=$+q$Q@*jS4;N#<~)tp5GZ8?D4*|jJo(Dn2&^a{B9azw37^W<3PYfK5vy2a6$!w|
zSSe@KIE}}q;LaYFN~x&0%cw>^rl}=GGELsb#u9e4mM%a$9U0__r<>s)7q9>)DDc9*
z>pskBNL0Xt)sY;VoGdf`i_vO?yEG^Ef?kQt@bUV<`>23M`dsQGr3R>QG8^0}>;gE?
z>pLqUV#xr5Z&-_W@~od9Pf1luBiZ=1jR?6QYRjDY5uM_`njKW3e-5l*A>JKT0(!?s
z_NdDDQ+_nP{U}K%>ij^HO{=h$Lc$_+mk3X#Z=#~e1ht#!TV@hhEtdN(Mee3~N9=4-
zcZ!_lSG^aut3(ICm{9H;H<5Ec!S}eWdiG}<D7qncv%xrGHtj;=S7O4)fzgIxpzXBb
z-t(8RR7eIX;16G*1N&X(?8jligz0-LWp?5D7JGrq7xx^El`GNw%t#EoeIx)3Jxg`h
zO_}W151667qvVo?BZP+xxn~AAWpv|Nk*xJuO?zb(iue0`eZJ$w1ZehVgw*HYH?>yf
zo+Ce1oLF=C`(EyG5)wi(1SXe+Tpnr3G!WvtlV@fhGSjIKi6z--(=cPC3KLG?9LxBq
zs9bT!vcun-ZLfXgFRYEel((g5Vl)<p?75OOnql$830Qtf9{JP#mz)~(wah|n`cpv&
zquxR8y29{cn;rZy)x4PHIRIsCu@WLV?B!K7p@`3JFuXq$@8B;-xL^&s?aGh{`_a^{
zu8;K>--Lv~YDHYEJ6FbLqarw0`vaqS+a)I`^KZ>%R90m?`m)(``(zFT0Wdw*8kI6k
zam1u1zZ{Tk4s?H<vZj5=!^{|(g}q8{nTM5x__BG5TH@n_hHODkxN^&DU^C2O1OS$d
zal;3O-RC<fb4FK&$slZQ!Ik7B@c>to#m&>;FM{B%p-39{rOvLs7H_0G!I>J^WbNeM
z=HqX)t<n4eXvVHn+Bf6?R-j?cPKh1<+9(bM09~%o^>M&uU2e#m!Vd_cRnOP2JfTH$
zE^XsiS4Um_U%ve1?{&~u@suPS%#;TJk@t(nOB%@-nV2+_Y_5&$^jr5q*xw(Y)cKzM
zf|`yMo_%W4Ub;B&(Oday{^a6f&OyK>^RK~SCmx;(__oy%M-jOOb)4CF?d*7X-NV3q
zH-&F~uN!O$etv&1YZT$7j6Tm_y<8b}Og!L+m>yu*&T+}?&M2SyPZrYGRswj_TXarT
zhqk)$?i(HV$F0Pmk*z<5u!ju$8{W^aF-j!xnzZ~Nk!egE*pTbi-Zo>c*QE9G+xlNK
zS4viuu(5PLSwGJ*T+rS&w72?bh%qCtLCpGTO%5xbX{*^F!yIQ+{rHp=(ekw2$+Cj=
z(azroY<U_9cs8DCR7gK~5GdlZlnHF7>o?hN-MD89+HZ-R=97m@R~4?5glbhZf*!g4
z%sU6q%i&@?3ZMy_NuOctS?san;2;AYosSC)1asf9+k2?-y4Sn2qXI5mVZ+2<NqzHo
z*yr23GDssbo}{<6K=mb%w=uZ`bOHR3w#WAX{4!$SbOH*FQ=??O_<5Of6D6u!VV+W6
z3Q&M=bY(vv^xXbstjVQ1PEZYq@x(^Cr)+G!$rU8VXQ19;gM|k|HqX~M^RSrV*{_Vq
zzM~ahoPL#Y0<fe9=l;H7jR#nZf9o9=ap4=tlo|fE1~ckUy-#AB!+BsEovm3ApVUu7
zmTyc-0<<B;?pAl~P_cS$o@UMfrQp-#joEf<sxWXCbl&?(&bF(HF7<ntXw~XGcJN^L
z%Bfk8H#SO4ukULOf<9t*Cf~m3-RyZsCzhmPb(dZSJAr&Tb57xTXIEwHiMWO$rjuTS
zyYQuDnrD(r%dj&CCkhQXNbm_l#0UZF5LDOhn%JP12cHiLFhn)9-h^6yA<at7=`f>P
z(@eW7R{*w^k`+DSk1ZoJJpU~@4veUqMWVSl0@6<Dp`jfIsKa)Fm(O?%eCAkq;yzrs
zEHx<rxVu703a&!O|M=y&8~iWZZ2-{QUx}2t8Gks|79DfTD|Y#S=+z~lEKA!HXs+cu
znA~CFc+}nKA0v5W&Z$?$cR#Mw3NesuL@^SaL6*M;u!iR2-JNWwWn^SDGYo4rc0QT5
zXNSD<&W)9jc*#BpPr7|v4Nd<VoWDLPAcLFOIV$#Dlb$3cJS!C$A0EWvrQYo7$|xMa
z09SA#=)330arV?AZK#I)kd=dSD>SeooXqD>p>SF*aE#UHbE|m5Mv@t+%kg-bCZG7S
zVKGo1{sQQwc|~EzrD?~u$QqyTM6#CkVA8xU`S*jujAa^BI!D*%@{)M&0a^4m;&e&`
zIN*Dl;Fv0;a&G`>qcy7OF5N&0)QXTL-O*5ujuNHdr#!84JA-z;!dp%K)sh>3k#kn<
z9M&J%!W<k5g(cD){1u-*#lOI1^AR}(U{Q9F+*k6R{`mW;CY#Z?bFTNcls^%5RJJs5
z9RM_4Ze6Ej1{mW#GU()O|1hiY7IF@VC&+U9b%d}FTpgWx6m(5=!0tf4+Nr-0m!NGO
zIQ7HczY53ZcuvZZt06JHa*zSX5mTbyT96GAS}T1;t@qP1O`RM2KF;_ByEF=gEsd32
ziC?GM4orRmqS}Un<b~MXh6=hB*ryB+aJr#1DW_rhQF(e6E-iacWRhI&c8BMi<SRHl
zH@XVCW!y6s>1R5k*<bKFU{XV_9~;&y?s>XB4;~kZ+29=*H<PZ9XTQal8W+zoe7|l8
z>261&aok4?SYH_mTx2{ej(UOX8a(*9;Q?f!F-ui6+O7|Ie_H?CVWr8&&iKPDW?@NK
zGFx>zHERh#hiImpL)nH!0{Lx?$SXgHRjcs3O<&@ATknjt@x#!=ks@^<*Nft+O?z4R
zZJ#-|Q%&K^`ADyaGL}6Zqw~~YlJktn{M;!YGN5N)_efO0Y*fg}EA#CR5-5#=O}fN8
z1+@{s_N%QCJ@I4Jwk=m)@m{B{u$Yqe55J^d`AkrT9uHP{q-z37E<iZsF;L4DjKC-$
z!Hr1J&2d4i3}jb?#cNCO!z-oECN#S9Zr%ogjPgjuuG6YUyeAqydsBg}Pvb%3ndH)?
zYAM1K*`zIFe7I}0Ib1GN%DIrqPnk?ma3z!U;axg0v3s^wrEA%BmM2y6SU5Z?4cp@D
zgG|Nzth=+0EzyFaybP1tzL)CK`ZKgC_}2<%2K}QT3~-3jIoJW+MvUneSOD{)=J7|%
zD_9{E!2Nu!xBZ2v81=ls@U_<d5|X>GN{Nc>#zQGszJ9lTJ!il5)YNdjcfIYXp3Jz`
z1cgz_L9A|t^jkBfQUE42qRn(B$ul6h6*R*KcD+)j5xueTvz^Fd3=eio`B&Ep)<NB~
zwB=E<oWq9z^TSp$faq%CeUj!8uXurJs#2@5;eBBdk>QKZ73)=dD<UzxF8R-9+bl%|
z+%~Qgy3UY|bk2N-b#31dv$6jB@4tT`yAv#bou~VXK)@uq^-}>DP}KAVn8OeMRyA;T
zK25*{DI9#&a|zq<x^Zf!mzP78p`^&f+p2U;6$;n-ub%F8cU@*?N8H3c*|UyA>}Rkd
zAq#JVGtuWFxP@3OKIN0*vNOIKxQ~B4My<Gf;omR6c8>wr%m*Kx`#&1&vb%KX)2j3O
zpXB*`eBk){e}(iTE<5(EuAx_S=rtKa0~@+Ro!viKu<n?3zQx48=^gZd)%;Y?BX)@q
zXkv%UV&6eoNfltzdxAsDaiO=a(@#C{y>sWaG?85mqT)VDdn~FJc)Vs*@wyd_@?T!X
zOyOKGl6&a8&Vx;C=gE8#7PX5)xX(9HTp`Q?p*%K??9|d67%RTVt=Z8slMH}FZ$f4N
zlKr~=m#fora~Z31ZK{>eX2|I13ifo%dv=``ujD;?$?>ywCIt*PU=<m!{QiZK*E!cM
z(7}JCdPN9=ELt-IbY0_yo~JntR!Im8DLE#iwNn_X3R9)dPw==`-W41Rua9BgOSyTf
zgB{|41Cn2CZn_7AbJ@h3cPDgBA9~xD>}Ws9#mqZ7{Ct_I4R(ig!v$<YMXjF6^F~@J
zq6?yr_#=*GGWcPCWzb>8NJ(tt1xwt}PbJ&loPY~rKVUj4uS#HNk78)Ggl8}pP)z`I
zUG*w4>Kf#gI01PQ&jPu`E*xAd$-A|KD#d1AA7@*g76<wxjg(Z4lcZlar<3Ocq(`?g
z)vU*#?%;ppjJl=&d3$Z%oJoEmt~?-BXQXYl9#(ADP7<^?vA4PyHbuuQ>@u`LR+Tc0
zA{tzps5eqUxl2PqMyH_o5b<=P0MArv;b&3P;5Ho<uO6E-p?;7;qXgj>GT(xb{ltt*
z%Ebzzn~xZLFECf-$ae>mFZ`v2QDijWtejg6l2~MbRhWMkbCl@~U)`oR7l@c*p@}cX
zkqv9X2b(_*ItRfFywhX#k&?qrr#ra+<&tN?@;U{N2<{w1=sfn!r#W@k?%)OT4WCap
z6w^C9Ut-?hKnNLvx(+ai3K4NhTtKxc0dtK)pRPGT%v-1Ao=N?-evVe2g4!M6{BADz
zIF#D;vJ5R;dBuK}0f){zW?M2={_fphX<pn`^FNwicNAz=m&pNSffd{FQS!Q5Yo&-y
zt0Sz}&72_qK++t781Byrd&ws@TAH(qg5Ni7jZjh>0YIsw5{dP7akrVe;q?H=2?S_|
zgP~y}04lrp=WCL-LjRWqEbTG#b$i1LMJ;qH&-d5k#rf=4^pV;?zLx<V=ofbyhF2j4
zf{er^C<c`1GW#-7F!9Z<x$OS>sSrx+P$_kk_-esm=@A(yfZx!)fw8}9pp#x5G*_8_
zzxPOG=;p#{r=~kLJY*TsC7fWnVMLINpr&z)Z6I+eRdo%h!zZ|esu%{r{gdkvQ#W>L
z^J*6oFj}QET8JimSek}o$UXW%{7s3v#meJ|g|}vy>-B^}51!~|D)#Bh3-+T<?s5$x
zz<8)|<u-Zz`1#MTkDBfpJ^b7t1sszbdSy1zYT>uh0Fo47u9N%w``-kzcs>TPeQN<4
zjIq*oZRb1=m}9{Rq%J(hF;>D;S3a2fHi8oX8v}gK$REOTL2?Zco}Nb4^XLbQ;_Zwl
z;rvN{DC*m;)q4Zmka=xxzMg+!?LqtN@nucV-ds4|^EQ~A=UZo0@uQd(Rbowy6O6cU
z75ycFCOV6*1NgsAA6L&2g1^swlsc^nqBq9p7%F)n<Gru{oybNO2P=bs?^0gwnzLu$
zen+#i(MQ}<i}MU{`j(@WV!Uj8o8t_L@UWFBenl0;#$TFGWWil^-W}#R3H$<I;Oa3e
zPbxqpnkHclvJYk;!Vs$Sz76B}*xdv?u4hL8&BO-D2#LCTbTlzpL6MziJ%JBiNVQ`3
zJN|?n{V>=xp3*uVPk&7Qb_@*%g?ctG5Tu_E3K2H^K_^0F@+o#$<b&P-#}<o;9d%lm
zC@wr+D$4_xf6aGp^DfdZ9wtVHi7PSV&dPHkKBOQ~>YKERTk`5F%ny02?FiWhRL8)@
zcjQ`nKT3jYs_>uko3Sj|MB$J8Dti?%!Kpg9j43Fq^a66V$G-X6>3b&cKo`?xrpktm
z_vGH><9%6An)Q@j+CwgxImav5TX-H?OAO+=B`=<tql(OhPQjOen9P8jYd)(2!@u?(
z6^whuoOE|IFyR2@#lJDPPPvcN4#|vU6jz_DE$hs-AIS)BVJ$Zokm|>*PRCaf#=Tf=
zLa^D??Y6sjCCMaW%z{F2OUr@XiEC8N6#25M;>rnD9VDBt0AY&*d&vv=4%b>CtjP|D
z_o9b$Pbv(7F$WnH^FN`x<hmksjUuan(W{55WwtsKJEAnXVNZ5Ny_0d7>?etF)7G!k
zx-}e*>)>Ae1$u*Yr@RJ(1YW3N7>CQ3N%b;it?~O;M*?5+*Dp#p(E7qYI%_5fsAOA6
zU53BnJ?$$1u4XhaIm32m2eJL-+rpo>n>rO1mL4-C5xG@XYn^Fc|J5-JQO`gdc&4{N
zPPjh$QqSfrlvFtj><5Q4Z0Z=rvIk`wB;a?Lflos1dzOO8dZF9R9X<GXj^is^1gR@;
zg}*zgn-udiveGBse3<<YkO>jPwbetOO4^LkI4hfv5{b4%Yhw2E6kC*O%c3orn|~KQ
z6s-3$nv=T=9e*CBpTnxba=mS%wuk;Spr@^PEL}v4^hs1Wx>vTZTJy^bDwE(5S*0rb
z>t$Qjy;0T+^FMtq2&jS_$?LX<Pc8x3P6=)*hk!WW7)6sVc_OQ7^nrxuu0LZzhs8|}
zg}{14+F74`ep}!hSYo%&Qv!F;^PlC4f7dH~TDu6&lL{mm#?08ovWZs$#I34tV9d@X
z;z2Lh$mRnP|4>}f+^f&j8}Kw;t4viiZ!`-cpBZ3|*qng+wP>~*tCq#WI<v0#&IfZr
z8I&@K>&-%65eloMn4MLJ;TR5#+lwb84csg0B&!2qH@n7N_=5ldIAH)q5pYhGA*k(}
z!jBj?i~;dCQJhOgV#)TwTo7fA+>T)wXIt}nx3}rwU`_U&>_^@nb&DpZ7651S7>E_<
zWO6d#S|?L|{AT-9GWJ{IgOheUPzA_ZIQL6JNuNjQi}%MV=Tg;BFr$6ABq!cx+#v1k
zhi3`NnV{$M<fy;m_+~0*l+r(|Oi$3xHZ8gweTzw5TXk~BryBJzDI!}vv5IUY<u|s#
zW8W7PAr>s1m*MMV#zu=`f{zkNQh=WTNq=o~?s?2}-(LnXg6|M!Lj@PH+x!PFp~D=&
z|Cg@d*kC7+!SB%!Oyo4g9%lab)c{_H*I>`c$En#0x{g~ktQevVz^4}V)K~Y~)3V<e
z8;}uAw2{ZFL2T)uY<3I%4hTdayU(5|I>5}Ma+A^?x#aQs`K!u@=?Tf`3MB*5A0oaB
z!u$QqYqX^ob2D1&X7pir?5DyHa5t2SW2J{rUID_)_oEyrC=I;{_VNUuDGYP*)lhIf
zUsT2b@C}>qcSOF$%4_D`g+c5CO2<J>)53fLT;185=`DUEzkH?J!<iJFDYP1UP6ZMe
z&IOr5b(Ph5Uk?ham+?@T$Fk#a8C2$4emA#j?3vf~wy9@VFjk@<=)>nq%ZPDOM>iAQ
zG~c4;%729^^#cQ2@j*6+^NoIz|2uE1(RoydL2Uo1G?Y}Uk}UL%A<tz$qTU%xX89eJ
z#EE4FUQ)+<=Lx4{h5f1(+?5;HpHOE^IEIID!Rv}Mam=91(FEsE?4W!$RzF)+)mjWh
z(%UN<2(X;`7&4<5b`Wjb*JCl2rg+--fW1Lrn@*Dlob2;gWH3)-$BnSjO}At>v))Zl
zGaRZf=O3$ecXYDePK=ot8XVEhFgm3?DS91W?+$xJa;7BT^iMY1>SyH41OzxwzU7<y
zQ7(-8>_W8XFPg@Wd4Gc!q<JP<@tFWe;aA@y0(YeY-BrZ(-w|#-=&mA0q*cLPnPCTT
z%UOK>79QiVPhnfr_66InOuSrE8AW~Qp6oy{M$xA&3oxVy^kYvVv_Ma5Yl2PXtmOWE
zQ0Rn?=s4XIJrZ||cBDYZdq4F)dtGlGGK0q(%j|iyRHl(nyv?9a++w-9wnOIk1>;A*
z*BXb*$Q?J(qwZ~C_md5zhBHJX6>R58E#|1wwGN&7#0v8jezL`M6ko#x4e(q8KnzdY
zB>`-%3a)4l#04B|ZZw|G9HXi~0vR|7h3~=UoUz$e4$^Q{*-@516YOAAxI^4)YR2NF
z7c4Sg;jVr<x-NIhL10%vnOf`PfQXU_-Td)fO28}ntc8=SM*MJ;hvxyn0cH0Kx7SOQ
zZ;x2eKzo(u5AB!DJ;wgMnU6SHafSs(DTiHMVeB<owu&g-n{Y3uOEr2*`>SeW*!&#*
zRPDc6IhY*qlsti`xfif@f_Xu*4`dR-%KynE(i;Z=+2>4u8xj}y<R<%Ocy~FiO1*-2
zWhP=rUcEby_q^TcKAJ2S6eplGZpnKQWky~3ZFQj`vFC|qNoxh+oEq^IXk;N|1v_~A
zl9)5`qYM0Fs-2U_SB8Ea;;JX<hG!*hxs-y|vvRFaBYH**UxJVf1My`SeebxTTupO9
ztAQ*+5$EL%+qUMc4r15V`gC3L8b!kW)gK^L?*pakkN2mo3#7W3JseyTax3r+U>PTf
zdphF7F=5CH;I$A|H0T3w*uXyjn8>;*tG;Bij}q9WwmV+pS)YS<S~E+%Y4|Ty=mAxW
zO6|!yt)Bq?=~YNYx#R$WF;SbubGom>_=b+Z#C6xukK2#nuOsLNt!mGSSER5cg*zDq
zkyjO%5rkj3fSgpmfeDQeI~e(fJyq3pv@6z17|Kjgw(kS_7R@>Eoy|I|{H5+5LUY=$
zRFjJvRPU4>l$>-C0a<tjl7)B7jjzRj{Cb8m1KRL=P&vYLe7fL=BBX=om(xHStb=dE
z;h>DJ)2=<IaIGP@v{^rV?VfuPwpxi1l-mdmi<KWfzX<|QNENUZ>*I_<4Z(T^tA);k
z!bKN9e2m2Si0e!}lxHN!*~?88IUgxbRU6%CT3gPhE|a%nlRN7opt_T6s;_mP;J4Hs
zzhUh0V%5l8&>A(=9^-A5a#;Cnfa;q5uw%%+OJ=?iS^s8Eu9a7~zAnMre?G(lL}C8K
z(|9K51KNiGrpUDp5Mg|M!1H7G7W~Kp22#Te)FL6I+^}u-s^462p|kiSAG%L&xsr0R
zqN&DpmS<?=m)DV~X1$bC|9Z9h9SJPM+&haHqVm~;f?u(<fIx*iaxv9mAT~z-qfeD{
zZ_eeQY=($)uu9?GQ;!$+a-8a-1rPJZtTZcqW5&9rf>tZ!8E{|F6kT-uhj~-gC-=h%
zhF$G)4n@!fT5$*RAmx_oc<$8*(?eGC#2E65FBjD_qYK`@`T4_ZkXEqy_pzVyp;1D@
z982tU8yk=s27owS5njE=HL{>7n-w@62wP!7&~HM3D-e4i?;SUiE!laH5<Pe5_=q{a
zev`?IOtW+KQh%$FEdPGCtC!60)53H01%Z+1@^7O==JCwDr|CXmK$CBqj8Nw7+m~wD
z?kU!<jQw1i;Vd1mO<U~~CtJ+C(<G8@G;gPflH>h-YMQvthJzX4xaUKP_4sDm%yP=+
z*XlNIydB=r)S#(X$ew}e^zUcikdLsrWE6>eN;rV$?Np4vRC;eBbmE!n#G4k)k)wCb
zZty@oRiU52<?7R%euc3ma8NjEYx#hQWXD15IpbFrJCUz6chtL!9N|A06%foHK&3hH
z(&BxE-Eo=C$pnQ$Uj^ZY2nt!yFNvX#YrsYk@_ar@l=06@XDBfr`&KxEU-W3e2>cl~
zpenUMpHsOx#_UuENZ2JZFJENFYCiuN|If&lPG+Y<OkFkzv(Dn_2i9lun+q-iGDEdg
zdY4|Gb(no%^I7MOS$kHx7nuf=y^iKOXAUr1NJEQ#a7EKjTfTvGfdiAD(G%Y8NHPzB
z;sAY74e5(~`Z<ig(1Y~Fz=+IKaPzX*kp%|b-rd!uobHi_wT1Fj$!H79rOVt`Du%3z
zM`bm?l$Wf0)zc04_@13?uVXq#MP9R^n`n6|gVq4-Q9vc#R(wvJGDZ;le!zt+m>_tW
zMQ<JFE__vT*u&wY0JY>~_!EBoNDb7La82>0OUMLKMHon54b}GerDHyeWq-MXm@b8e
zVr!wE0A9lHUN8_hkrw{6r6%p*uBX=5*_`Gb_822+)&BAtwmJ4rkPvla?mC_n3E0y$
z45-S{QCpDtOJ`328Nmhv5O+Kc{v1oIucY9@dHmnqhiD}LFShzh9?0933eF}vH`8`)
zMZFmIm?|u5F>?6o-Vt9ST_%<tQC`9J^JdbsO2zEw@mJX5ST($cJmU=T7k?8rUPY2m
z`4~~a%*`a8QKIUp@O$?$wBcio+o3O%Vtd}%V&u_ug2C|9Cy@elV|mj>1KZ+Hll0v*
z`BMYg$T@Qqnp(5f);F>>l56mP&gi)sz-Nk1n?k`Q(PC$CC-in45$WHm%X}=qboqb=
z{y-JMRW0vZt|JTL?%AQNchelnKsbgtyiM~i&>xziDh;+BZS$Cw03ZtDdxw>;Wrk_#
zO#HY0cKkbHP%Z`>!dsw%jk|-=Fzq=NTv8R-FpylPpLD}!on~}e`=Lq`ESfGu5i;*E
z`jqA`(WKfU){^;F;c}~A!Am=uEU-{%M=~|lghsY^?AlFj-T^nhvUcTJrCr6?31_f6
zK|$Rh@78O!-}j6|&F*l0A#;mnq`;H)lEuX97a|Tn{<<Vb(><PvM-wQqJlNDL48LIH
z?T`C1^RAR?IERKt8h-dgi=_AX1YB9kSPb*AK~w+i4(}f8bn^4fo(nXuMU$8)g1qSv
zhZWPqWbg-zT(Xsfs(IA7nxh$sZ)Q0%r4r7NwN4d)8e6t^qR?5rQ_-R;&kC3RM}COO
zL+aeTAd?i>4{I8LX2hK4GNDj0L`6$bIU5(tF<b>Llf&)9WJc};wZ1goH#Ht|VD4Yo
zy3!?ZVThe=i@2cr#A4Xv=L`~Ba|MPP&pl!X3`9&}-p$^dosnbmJD+CNK<U#=q<9Ga
zlkYhmLmry+@)Bfi?^JL<&B2U=vGKp^Ncjrmv%$*ro!i?_8rDx1!6Vb~4*iASk^F;^
z07$8uBt)IIxr6_1D8i=r@z`m9^EQnnNmkgL^1{zbbrGk-5@p$hfq8<t=Mv4^th#eQ
zz`D5Px+A%)&_iL)WSS!0i5s(RX&w@8Gjn0`JJ0r7xkD20w|BD=3+nM_k+4vsJGeWz
zSq{EZWLrd9h6$tpWl58*rLJ++9)@#2I=^qHPw+-|F6OS+{5^vdah$2?_&cHAYpE5t
z$)GwJ1Y<rP1@j(yqTX;B*5*1Q@{e}<O24<}<l=vgm&Y1%WcMx`ZH=5v7#(`{P0*Sa
zdF_o4bu;qHA%5$;y#)8=&|V{*;wSBa5&yAkFyslBdS?`;^YTb7;YG;%6Eg&kb;yJ?
z6exgB&9@JPJ|=fhU!C6OKezrr`3>a3&Yiv=fWH7I*Bx$&LA&~&Jm=&xe}AGH%I&;;
zjR|^BW<iR1p+ohwChR}x{kQh{@BUjfQ0mgNIy@w&CTm3!(1dmsH$VIiP5h4^iTP@u
zFi6bu2z|%Y_BcYX^96JMk&%D;?8#to0u|Hw4>8Mr5(AbUE%)s%=F5TH|HFs7=7LAj
zRy&bme61~D=oyDx`6ur9f85T0|K&f$ZO4??um}!h?RO#ZfB!lE7gD`jflUFd)Z;w^
zx5EKf(Vn~g-ygJbBsdJ`+qX}F6mY~e!J}2igcmTiU4Oo4dL*FguVRX3r*(B$f>11#
zP|*MVZ@T~EhdV&_obowy;CmdOl|w#w-GMUu9UVB~{6FFKQB`mPE~8{tm~y}eB=q_W
zy*HvUNAxdN|4&23$qhHq0v)rY`WRC_{)ZF|eQban9PaR*qRR=1fM$#-e5e@%W3B!v
zw*Yq?2v0@~MgE7=hxw;Jy~O|2r(ktH8BkOpOH_XB&zFi33Qyv}?xW4WJve>T<SR&=
zOr<}(^2bu+_thvv2mNi50~22DfSP0~$8#}N=YPI>A5rK8f~%#KPM;BK36}kYl9}Y+
z^Z8^Eq*9g!RDXj(Fac*zTp{qZBH&Lr<&+WrqyF@m6bhge$s#w_DH_DTAroTYwBei{
z#(z3(e}2Zt6ygIpzJnMfp#O`h_vb9`+XhJsBu6wR_cQtsh!eq4QU#0@{8M%T_T4wI
zY@uthGnj*~gkB>)_W${EG1u-O4+PQZQ&=Wu**qX;?*Aa=3FDtH7bAkjw7?03jEUf%
zr0>pP!69o$9@Dn{o3Z}jQnmHKqperD$4(doG#~&XKVUwCkputY*^K(WZ!tUI-~_yq
zRvtO~?+?0A5v;g6>MF+iif03l&RC&#`W=}1gJU?^W+)WNfAUZ4#fJ(KC$BzA|MpA&
z{8)r^z_M9iz#E@Y4HUqBX5A?6Gi#4w2g&^Shh+#vh5f4G@^J0<=b1Xi5!l$+HRIPg
zecn=VTg|kR%@$5hGG^<RTIpu2f$A{VL?D`JD=a_!j<WypB}uV>h(_qQ#1+0VFx;@j
zvR95q%=Mu>Q*idfB>M16?0JPerW%P-zNCt^^-9)xhPA^U-srl6tYD`MF9V(L@0jGD
zZ)~qWQT#eJodOE`MMl?8yG+_B&DvtKK%Kag&^It*i44xbGUW8htTR7!(ioSV?SmB!
z1($x8-;N}^y`fR5#gLltv!4#GV}j(juy0x+avvQIf|eeo*!?tHTiC!1-x+f021P*g
zYwv^7mHs_HsexqLXTL~!509F<Sh4#la)A%;-o5*YW(z)VTD#fG-U^07zDHkx-8+)K
zEMe@!qI5N3;Wa3r1a<B*C?dK{P>Pc7{f@80LAIiCtkl{P6vbz0kzXZEbzT<zl@@8F
z<>27(zG$^h{4SGx;H{7l%7e-(=f#M5ftyNEx)pxxi_a*}5HL(KL%jA)u9xNCt5hh`
zYFzZ4iG@Y3Ho;97>3t~N-VsPt%Wbp+e@|3XZBo%V8$`u#)pxHrLphF4ZBf9sXQ?y#
z>=M|dcIVrJ-TC(NS5K^7uTbWP7JlpZK1c(VWy}krNn@cd<C+O|p1l3crQg&DU=F4R
z%4dxkaBA)Xa^@bg82+6s{A13hCj*j`!`W@qYfGm+W+yK%C(>xSV3so`=W&yQh|5as
zK(0<6;yj@m82K_A1$89P=B|cw>IsYpuUyS9G(Pk|{Tgr2U2p&V0`)_YySl%Fd7u8U
z0b!{AMJ~t&b#3MR)+z#F<e3I$TMh@S#7Quz%P{KG<lnMw7G%5nuxqJvo8D35$%iuA
zk!;X9auXCBih&_#rkpxu`hYA8g_lOkRZLm}RqJZpQ2G;fY}#wP)E%yA<oT1WRk7Wo
z*7TD~&`tK*^|Jr_oBRgl1d`ZIz=ZIHo~*FE6npb_HRLSk`{!4kHd3tyGVS&n_9#qR
z=99P#Y@l+oBiVPi^dEtqx~c-(k?Uc9x3sW(NO^nmyM5X*1pTc8_M;yTo79B9^iSb8
zA4TEd;4)`%F)~V{R_eYx*K!_thG%PJy|?t7=(wBZ&pz5w6ARK8E1<a6559c9|Bofh
zZ$UYU4{ldKX(f?g)M+Vk=6ghRF&ePYn(tY4eaq&}dH1AF<m}$E=<}|>zZnfTr<3M8
z>};6I%F0Gh@9*z_0CNhjBaLd^HCdHoZ-r2;Qcb^yLlY?XwwAg-g8^xR2?YufH?q3a
z(msg8x9)xkp_5FvMx+{%bM~-vqj)D4_ZkV@)6tHz31`oq4U09Qu6JEeJ{+mi47fz2
zCS{!13d@vrJHLXd1uza)S|OvNVo#x+*6f-v687|HLkifAW{SBXfnc7sT!|6~$9Vnr
z?c3QJb+Mcl#uJ}qTETFjPe?im4{bPlsXHt42B^r&()Y&)EuXMArGr%Y#!KB`+?A8@
zk(cTBcqKA64UP35P2tRn5qx_!P7S95WOfR)-UXu1)oi?BQHg&NOvUR}BjV!qRX|hv
z$j9dl7)A7DYy34yixX;re`kC9>%_!_nAbwzP22I3`^|1?-#=(+YtP@EOYQr+J4L?K
z4QaOXvn}gQINMDjA#HH6LOEPa9*@6AaGDu}=V)jpN&B~x+ik{+y4cNhCLEO=(x$;p
zgt4&Rf+{NGBEqy&^pZd3X`uIcK;NPCxvtT5Ql`yBkLaGVp0d^9xW`dGx4+_XX6h&T
z36Fz1T{sc72H@{@sQFWSYs7wG-&o$Ujs4)fMVEB}bJAd?W5B|gXSrLAV`Koo+0x)$
zla5&76jdgP{>*nwVX;({l-Yvg)Va<yB2jdkA#bZQlRtmXde*5|_z=`{D)E^uMcv+A
z^IjdnzGzpY1DIMVN=ye-8msUf7QbUcZH1P%nM|`P^=ucJlzNScj6{9yHSZaH2LD24
zhcc*nl9i3fjkY*6sCHfey;F#urnh0aBiWkPo;=T9E}z}LaDI>k-0l=rL2WvXXc=qF
zNX5Bk<)}<BXew>Ux)E#Z6?@Iz7I6^u?M5+F*kz{v6myjkzN~(lUq%hoh*TY3LaMEI
z@g6^(^3pR*eXp<spG^d6o>gxT$f8ZxPTDf!zo=e-aehgl1%1<Du46VyPezW~08xK*
znA1YLoPV%~X3ee!ABowXfn^({RJqkSeH4fh@sxXYM4M(Ub1l#Z<Xd2cznXhaXFL9}
zZ3MjFdC;fAK%>1PwuvzE22pf_wksb?Es~-q+7*gNzlE`|%}NJ;V166#HG6HQExK2%
z1$2@@q8wr9E&h$NIbdrMk!3<#&#%uQBBHxIJRbS;%X+!;##Z&}Jm^1tzWzg&jQzcP
zMdRoWfkuI$_y}o=d{9ql`MHeYz1$(m%=^9RWw$SUA$u=+yZ8%P48PqI-fi2VXJF`<
z^2jIo5L(SJIYKhGjVEu!uinAqHS>zhv^Q}8{gc)MxvC=rSplpUJ(l@vhrOj@5FJ5S
zTQAx5tDfKIj1lMteM;@U0td)~H)QN)dSBv+&!(79o9fHltSws|%xaMKzfxQKtO?)A
zW}+kCi|0yyXm{0>bK$9)qo5OD{s8`AV815BM-VCoBdmT9@^4P~<g=+Dli(+t9|{Il
z&NtP0w%NI(+|^_Ph&mn2gYjWkcjj5$(Qz(qRnjstD1{@eZ1s%bt);OPVaff(=m`&#
zoSn{6Yt4Lpw`HKWs+^UenR1D14#)#@cl1D*iiGK5rA5)>vWI_FN*-pi(t5Xv(E`(D
ziq1QE*rk6Un%A6f7TL*fyPz>LoO7g`0hKL7jef=+#&vFQ$+OkV^PkPM=B<QC#H5>U
z`(VZJJ*pA5JJml=I)|#wLsqgid$-0{JolhZSL7Tty0N_$-HMla%Mf%0X-#->1D&Hb
zTxwnZiij#3>Qh9a(alQ0>?*L$?~}%NUL8)GRr)yCcmZnKEN;%#DPEX!LvGG477Wem
zpwZ{T@d*@*%}u1h?XoIUBPJ0OUFZoTqP<MRlvm{32b|rb;Ce@eK4(_S1O$UYa4)?K
zYP5|!g@?%Ru0O8#a!2MdlvQ#Y)#b*xXsO@5`_e5JY>9GnmkOVqCf)YPu7C4dZ>i0^
z+Q@bwa0pVlm~4`@P@=X@;oL@d>@U*V44C3P^x!p-ORlmbgnj)w!Bi~}b_Za?1DlAz
zo-6O)2OEqtfQ|1gUAb5IlCFYwe}K5QtH9`$qBH2bJMF9}&d=&K|GM4f+K9+0sL2JB
z6a|PpMV@`2UGDy}wdJ>i>`#FUBIg9p6AirOu8sXQnj#;v5UfCE+ah4MBM(NNsqm$v
zi#x3b+U(m+5<Cz6Y3GMgy9x5aeIqjCpMngE7Ko59w&&f3fP}-L-gMu;jXb;Ayf{FF
zM8lH`IM4h@3aGN^n@eDaZ!MMa1QN|i_Ag#&KiV-zY9Fon;?oIrZFyNS;G!1$iu?sU
zP$-Sk+M~m}%k5DT2Hcx&<6;9d@8makC`^{DBtgUYi*tlO!$ixMYrdQ(8XDlcG~Qd7
z#PT326Jox0Tl<Q}F9u+M>73DZ5f{`#KTkev+BElQx@J+Jnf;MUKOi?1$<D~ju}`N>
zU7Z(q|Kj{gp8|L@?>pYkt*v3#Ylxv5T!NXoIhW%63L&V_Ukd?vw;YN7ny+L^3_vs?
zf8e8n;{ONU1wE7g&;2SF*B;3PSPcfyMa_&+J_sF;0X>4D4&#=*b*ec72uV`!X%uLD
zv+N*}jFP0J`(Qtq`EI!uv~aN~UoG%GdoF7FeC=VCp<Ai<`!bj1;jAi`F;iMhSJ%E{
zql14EooA|{ibS{}59su;K-AT;X=Ok8IK4DfJY4CR5y53>BWmXH^{9M?om8u;#EnBh
zK&wgS&EU8S7j>hn<HUGvwn6bL;f^R1$bxy#{C3AtfdLnIqpH1fgtqw?&f?i|Tm`Kl
ztz_(=W9L5ZIb6%V4g=?F*Du2EExue2W61)XRpxFVSk9{dIn(mH<Plp&h)S|)U=_jn
zb5SjJdDSx2=QsCS!)M{@>B_wT_JQSQH(pJqBg_`*DhE=@YOsu8ni7v89!I4wsU|Jw
z!}>~HI%&s%XXUm(06I)|fLx_rm%!G7f`bsq$G^XuL2e*d547yWc^*|XvNFkK%Xh|K
z%SWhA;it%XWV?)ejpTmcez-eX{_59w1Sc6W=?AksOMiB;;k+EEF}Q=*dW$IAaN7OM
zokm1|4ooxud6ZkG*7C6K<|3-_#Y@nsue_s+mRysHL5+&g1FF_#rK0;mx7+Q2i=$73
zd&>}vI#$mi=WLTKw{a@~4s!GlzBp0wOjE_km{t3+Is<=#^PqwFW~y=H_ESnyTDxF3
zC#j0~<uTEr$^>8~j07AK$x>^sj8^tq$pS?fScUxAZX(JG)UNZ&Xc906MuJfuOScKB
z4vV11AW<`w3h8+s(-P;g-6xA#x|Q!485!Hqj4BC5LHAwv2fy7j?Ti=ywsYYN8_;SF
z)lRb1l1X5`B}>*~gYVgFH*<dE_6eKZXeTs<%45M*BvUEs{rjs(1^vJN&y6dQU9U-+
zttWl3%w8ANufH;MpXt9CxtQtT|MlxV)Y7<tH6s7Mh8{53`nP<~_vL%SflVzjRMm?Q
zvlys&CtyEr<I;KB*(f}I8JOn#f`$<4izHQTzBWq!y@+?bph^hJwNLEu!RomCkvCoH
z;P-|#2PJCB4iE3cWLc=KY!(=wH(k-o43xr;UycbhH=O#vX>Q7m4!G0a58e~BY6Aol
z+SMVMcdRNg$e;wi`!u2w79U5zS4RH$L3%}hP@jp9Ph(NgPN9s#Jb+!l&O=8Q-++kZ
zHntq-L<zSsICickQuqWvVBu+N07dcEj>8sG6yy|x)h-3V;4^d9sc?AIpKmbogQk}j
z<4GEOVy&#_*0((W-TMI57XT2MelRNCj@-_}QU<i*h!tF5`;UAR7*MgkzP>vXY4pTn
zDsJ6sxFl=iXXQ?ljWXK{(|?S54o2fqJ<5bq9z*n~W5~u_r~SJQi{or~!x)r^MALjK
zt~2sJkTs}&ep?<5NXv8Ia#!L(g2Od=fA*`^SLxi3wx>h*XL7i0>B>|poQughfypgI
z#-V*nbq=tOMxOrt%a<=ZTN%)iyX^+<thQZ(Me#VrtblolTHh-j=brSrFg=;daFfjO
zdU5Wx)qz>_MU>~EFj9Lv@y>!Iy;zeWG`9T_ogtA?)cy?2J<$`6?7ZnuS~I#T>nU!k
zP-R2Tt&_dLZ=LQIeC(NB03}_=9Qk-;G#C#i^z=ssTX;QfpDMua;54XX95Rfh$v4(N
zo7D6+y7U83=ia&ZsrjCzeC=x_vzuF0jiG8igTn!Z6lDb?%7~>V%Wxi>n3#?_UPX7Q
zs;aVSWQHn)v!#Jx7aI_k<^1LSDgsM^0k%PrAt53A2M07g8x>Ed`JVrJ=(ysJTCf~0
zvAm=caQ}Dth6@Q;(#z$fwwI-*-`>mO;*;K5{VaxR5|97iLzorP4clD<-;R#1oS!}-
zy2?-z>}oq&p-Lp-iX>okULI~*{YHb;9{Ud`rb~f_{J^<4>hPJ4xDi`P4Kp!r)mnEa
zy`AQOsn!V2?<@b5zzIF1pITK2(`(*7u#}SWxkkHaSx{JbOYhr+CpylmKRZ0rpVz#@
z0stOCv4OM|(V)ErnSe{tNBR{GpGWH%W#43a>}>FCg;79M>N5?|N==cv7C_9ZUH~?J
zet+Vfvj;+}b9@NTgVH-y#58%33HKsNW@b9<yI9M+DSW{<RRD==AlEQY@@QZEEub;b
zELYf1b>&L(L<A=cG~tz*00Jtp80Zsd0S%r%7Z*QT9W|eChA?J=pFXefD{2Ol=J{^y
zyBqthKRRlv=j0u;uhGiaP6}QgiI$X@$OswtLf4Wms$7k@1@8#4>Z>Rc7Dx;ALyvpu
zG0AyYeXKqdN2j{k_T}lRfVruPj<K~<_;Z~Ju&gUhw#YHOvU_=U)3s7Z*t5dGyY3!#
zS`5o$eFTjY4q9Xvx^b)BF%D3YM}uhQB#LO_8e%6R4^jVmdjJNEQo-g7^nax#(9aLt
zlzsq4)b1T<)Xa=t=uQbRbf0G~KOjO~vl1gw+5PdBo6lq0!Lb<(p|$|4iWb^y&)S}h
zlhKZbDr%ri(5QX`-luFZEjwG2^61XccE~qi=fl8^bFl@gqKXzrBthuLKP*0~V0^HP
za{rYSV8ef{GZN?gd2{z5VAG1+B>9IPQW<YO{u?idlAlc}rN#}JE$xq=t(NvC-fPzq
z`9f=DjZyzIjk7Q1=~Ej<Z~`5CTj;#S+RK8>b%P51;H$NWiyu%g3;h8XaRIZMlHY1D
z-X&hbvua@=?_>H4QKDO3bO%!bbXH?kPTwLd_b=4|$qwc<M+SEBpWyfggRIZzr)A1<
zL$1F{T)(y(#pdn7Unnr&v#%<RdP&DtkCGV&Mt#j-LBhC)^}YABB(KDtuWS@H2hvza
zegOl=Gq~bt`Raucu0bc^Rx?q-JO_UX&?j$i-gc{n>hnd-)tcUXr=U9>c(A`fq+l2<
za`z<6Qny3w^Nvrmc7evMol|c-2h0gh*FN&h)3sb4=AYfGKdRIvW7pz40zKr7ZT9v3
z$l3({mKt<D(WcGnxbsLVf7iH!zg|J-^gGoud-r=;b|%Y#pc!&*AloZrYjwiD%wg%t
zlTSw(4MU*EoKp_(%{uyTS6OP&{Mc_Ez43tV%2!l$y+eA2RmSBTvOzFW`vj|?huv7r
zb+?VTGxchAsDs3`WRLg$dW#jn(r}L~+IIzE)B2`UG&ImnMOw(JKQ*xNijXQDjM1(v
zwAzbg(f{nl4hswn4leW0xQ5l<e3tcs%zFb>66@c$Kh6P!o#3iO?eF}_09m1+{*;z4
zg^`D9EgY={A}$7RWGeg=cXW=&IRhfB(P#iWekmr`)mXh+mjhqg_A`Wi0$sDl9%b40
z!&u5T483+tQS-em;WK8g%iG(ogp_>ufW=#D;P`<}Q^BMqSQG4GnKEJg&Z}i00!-q`
zuU^d*IXd#6n2!rshr|jiRBidK+C_1Bs-O;fXpB7k6cy~T%c;e-w>xO4V)g6D8=1ZC
zs4#_pYQVNTia0Ig7Ll-AkM{nui?SL@u5=RvM&B-KadSysCAy_rY~wEoLg?8F2rBbU
zhQr#XiNyP4jRL96A-E3dMxU2@d-p54fVn|R=PfHCQE3wpcRAmfLtwEwdf}jrceY9{
zvB?NvFXZbZ7H`?T$3K5=&`RMZwF!XDvFb~#6XpVtC`WdCo#d3EYWI8}O=QawAY(UX
z*e!Ne>)Am&<~Kts5JjBdO&0{gCM^!5{PUtEf(X7kH@l{6Nt;E0GL^K)6k^ex>_00)
z!m6aT7fchj8M_u^H<9#$MftF2$_eFBQayXLUtHM{^>n&#CyDF+!Y+EkyMH_W-0b>*
z?Xbnd=Hh3D@;&s8A*DHbY(oeKjKYS86LgiwV1uB*?fP%@Q{T6n^x9+i+l^}CM4S|w
zUt|MLa!J1ZmYh=!G=ulVPJBEEZb7M9so+%AOxpPB0n^j|XVto`{?n&VdAuYk$;iS}
zbM3~eEWd^_lu5zN5w@%DAU(`J6Z5ng<#cp_9w8U>n*B(xUrdpU0e%K8oG;lOX#NQ>
zgB~eh_mdwTdDu4^GBGikdZaApaZgu<fS%T>5B?6gksHOB)VpgI1l>bOCGbH70Pyn1
zXMi{%a3@3~?tXRk5_;t0TYVYo;6^QImfDVJjg%W5`Hi?CXQLDDBmYJKX_W!c{aD#*
zfliwpznZ|wS6AW&gsq6{TB7X(fX3mqzb+5Lv^RS7;=%Oy@x!CeaLUg2oiY6Ey$EAz
zAcisKk%GKuv(m%xH)J;EHG79geS4L2@7vZoXWOlMD&8$`t029!4$dJYzuMNQ;lqR+
zX9HV5;Pba^@9tUwB%KW;vN+D%gFXjU%UNoUwnJ(Iw+^5IW<DuOo_)$hIvLV$O-k&*
z`=CMS@DzbzHp*_S+WMz?imfAr-A3fHVskip&@IpZxX=9cE{`2!HmvrGv(3N~U0<qY
z?_HC?^NtB#pCaA92-!AY4CjO&$UN@Ahuy*^r5q?Ipb^cV=p%I7qd~b%;pzp^5gpy5
zt2wIMar_>Ew%Yh`vuq7_I_k1V7l<Qp8kMzC_pYWzqM9c^mmz_<d<*-3vG&$+QLkIu
zxT1t0AxcP^pbjBQw<w?pA|ebqAfPl1A}t^#pb`clEh05^Hx4MMNOv=!#L%0r;a#)0
zxX<tTozHpBd*1WUcJIx|eB-{?z1DSI>sn`t2%NODRRxNjE(_p%BA|Uu`n2?h)@kXT
zyT;tgcOfsOuZ(D;g|I!-Uyhuev&94iP}oN?p&qOG`0LTGUPJ+&wGLTo$1H9dOG-Ru
zD>jxiQg7euFRSBs?jLZ=ww8&3!g)c5hMKywnTqLa39fRntS}3TEm+w9zv?}d&#OH}
zwP9U8-HsoyfNi;%Rz*&gOU>EUgmlw*_b$f)3e@^kN<95wM6#tF6%B;Pe<=G$gh`5@
zB9x;9&$kxSG5f_yy4>+3Y@`f1j|E*@D~Vg6CItyh<A-polkn#n;WqoP9Njq{z?z}r
ziATQ)S!W+vs2olkIzz4YwaEH$s1+do<MTB~pVFwtifgP)8|=OkMpi)D<R`utiJufx
z4FJk^&<+53nM2PPB|pOzC!4n?_YPg26Px({cC5%i^Ci%St-f{!R*z|NOuoM2*!oG~
zwl=4+G~QkPrO#O-8>RoJ->t6D{4VFNU}|WR+IjiFM`7B>%=r?p)6+jodO3dOXyaM=
zB*EKvC?YQT;uVx$K1*^LQ7Tp*G`X<5JGQf;JDpY8G-NvOE*{$?R#_F|U!R@d?UcEq
z-(1+d<KFD#-n}Jpuf{jP>Fe@FyeDCbgjwMQGp^ejQ2bBLQ!C|w`n%qE2-ASRe1jcs
z^0S=j!z{38MJGcfM{P@s)J|hG%7drQ0y?<b>wh!6=gs-%^?nIQyvYGF>R{138E8_C
zblviB_ackV;oau#8mdgo;<@COC;V0GHK?~+d7K#uvsg6g&OrLlSz*s1$zt2Dug+%n
zHj3yr>J-iv4}0cAJ>6GQ&#}}mFt(wc9PzF44_IP-8l72anF~GlMn?Sg#nnI9Hy75(
zKQC*JXO<ZvqgglTk=>$U&#<Z73`aQG=$1bSsubNK)y;npgmF{t-?Hjiz|9RGXUIyh
z=ha#W249kSCV~Td{Ntj&XUEQudUSolHSkq^p*<ODTOS;o@n{OhD%8`sJ>C|r-a&R}
znCCxe&XsieV_hN5@7Uu%zA9PLT`#t7NqARSv2+WeQ<7udQ_?yVBhw5viz-e$ADnr&
zyI=W=H(}9!ag}bmUL?EIG4uUv`O_b(#GSH+6-X@~ujB3@=&v`5-@#G3zAd}eh;hH{
zK2i2))*>ZV^P6ynfvx?6=2ahtj*l-WkpX>K<eUZVN@2l$S%xJwI0A?KcH+_jlKN0s
zxb-cK<9EOpA^qc3S}Buenca$Nl>@d&19u1I%-(!c-FRvD?b)&V5T~!%Z>k~FABp}g
zh+`A;x(5Cq`H1g@V1~L18*7vLj*%yn>mhmvXqUeDBG|Y_jts@3{Z1eLj@zq&yw1RH
zxlaEA|9A1CEq4Myl6j+oht}v|f5z@eY4=UFa?KisU=}IvJ#$%OE#ikl&Pm#8J@2;2
zE&Q%E>W46?6Xx#cB1OGmm*^U{hLl3HVttp9mWET+zC<XZAAvw-Dd&E4$g`&ChU5rM
z+6%rec|LI4y*R$7S@$*z%)4f><fAC<F)o#vv=naniiGS~;JI6N4|K0yQxes?f*2oa
z-?Y)KFjGq}x2)#oQVwt~-5tUDXwLqTegsD?{^h$izn0Ha&*F&?8A1-nU|HYy<CpJ9
zc|^PQ_l3T@x-({KQX<z=Y+ddsY%+PVx-vdn+t_Ka_gj(eFvk+hF^`41Xj^SB64F!n
zB*r@l&(u?H<#OnkCtKL}-q)Dj=*`bG#Cit~7*Rb%eCoflpYt`Bj4=dIyP8?Phu?;0
z&mpTS+$;Wgotl!WH>D>NYBV1rBj2H2?NK?{vhLbnZmQbh&VbJK-1R8t1+&FRd@60$
zu2)}2&Qb~svt^-0s}&dLj`Sb-l11FB-4YEBV3%-;1Q*e6(UoDYvm;WNxI1`PN-6<a
zI$P8~0~!3PQ*VL!>*@>Mo6b-l=JV<nl|=M)glKrKluc*dw4?k`pB_w7vV3ab26wCp
zB+Ui(O=8@gSLE2QZ=HXs@w0}C|B+|yq*vvp22=or!ya3Wq~BuQ=1Pf_<TbN4J?>t#
zA0(Yogy7A!>fKqAd7xKqArcmCRl^A$)EjKZKg2GI{wQqKV@Mg_zW6BfkFJr2;NUlk
zdhNX^_$7TocyRdWEm7<(nVm->W?5UZzx8>+MY5N0lolAx>9QZMZf-y52B-zN))@T#
znW4)5aDIci&1?9rbp9m5+s)Uxn|HC&Ih#2;`$uJVH$tYP(^NON=Bvv+-VzXMiP!G9
zS9GvomM&b>a+hH!RNoOM{X@ZW8g|WnnVsb|=CnFz_35#xO~7t{;^Ul0109E4CQ3aq
z)o_x_l)#_bskcwIM<xYldZcdRbb1p3R5-u6_{Ttzbu>^U-wHS0sNb@~DC#|4{5;1N
z_@=f}rYs(k1IM*%)`ab)=D}f3{8~5y*~C{id8*;<<&@!LL9_@-o%>7Uja}8dyCg9T
z%0Np?7pou?uT57sT*Y{&dh)9JouAgbq%>O|8bIo>S0j2E>!0XFlLj5-*Dvc>Y3wkN
znJs7^U@q7Uz-=&G(OsE{61K*BCV7-RBV=#B*{sI*r-h_Q7j-MXaPnL(_FmO+6BNdH
zR1oHF4_|t@IN)4w`fD^5Y;W1FW7mcCt{~Io1q$My)#(V$9mkxJ$YPrnjmpnlw2f8V
z(QdqP+d#{>j-?(M--Sr4Os!ux@7fM-v-qX*`SO_L>r=$!@#?rBxBE4|hq@Mahbo^t
zI^eg=ZM-)<T$`2LWg1nl&%Sj+qvr2N=#SH2c2+ndf>Z47@&><isf;o{g84*+q=-|j
zZ?EXqlJCykC>wsf6cjy?AYjyZw52C&oQM04py`$F1eb$&CK;R2fjuoi#08CSO`>Cm
zC3d%$+9k94bBz_FWjw1SDzmOo`6p=#^0})RVl8-coHl+&C=SZ+EYV7@e{3A?dVC~%
zK1=KyF4w9tc47P}Mrx?WJ!<UY_AX;iS4DuKr;PKRx{9M4WNP4~koO8gk@l3$+14(h
zc=reI6@m+BWwt+hx(xK|gYm;ucQZH)a;yZn9^dgfdlOcNMD?v!ua?@$CicD*ihV6N
zN8C51OpvI>wcXmPpIy4MfrnHTVy?137kIDOAH6h$etpYFp1;Luy0zA(1gFptE8+C4
z=)Chtk*@AKe;Y;)Y>oQwVZEKKzKmec2ZPSSp*+jZ*m7_@F2GpTdGrwL!flzg-WL<5
zZ?jJKwv|Kk$@cQK;{NYU4|IXDG2$@#{48WPYI9|0mbKW*;ppAUM5Zh<>PcIB0}rv!
zm6q<!m0g9pNQ5TOeYwsaf%n#5PKT7#es|fpkI^r`^-S1mpai?QI%WKP$Wz8BnyUt-
z@&4(`WM_Y{3}M}uzgl6%;(UycM7;Z|m?k0P56yf{>+;#v{@IeT;G1?c9euNYh)L0#
z5&R*2S<m@JhuxVvy@m-ZBIoflLp!ljEou2vZbx`1nT`us6vWzVx~wg#hzR8edIfeX
zmgy6rE{C~})*;We!2n17{?wO+)=t&>p0mTlwdfLWX^EKO_rA7#3`f2w5JThp=&v7O
zJ-3lSf?gnO-M79~x&222U(5;AaY3`t^I>;?cBrcshDdLI8UEQMF<)?YcWuqP%~~j7
zb8|X-t6%8ER@+T}`Iyl`r(uT!wyv!gbkrhiQ`O#|+Wd@l#bVomkn3l)t+;1g_ae|W
zLt?I^)^&OEC4Qep#k8umTOy7!>dZx}o{MgapP7s~Yz9i~)O^krTou*B5w_-w0X**G
zuikz&>ddkpD`@_z9GUygo0Q7xQ^1k5As;XS;#fpKtIajta|-xEAa1JbXGGKP%G4{(
zbl+S)tr%PY%&&r9NA10p=4C@kJ#TlzmGWge{fQt=odUCa2gqq&h%>VA$|Cv%j-eOe
zJp#Ao!Mwueiq2j_d_Sq>P5VO#>j>nW0O#DW>vSfciQL&9|LUF9{vATK<T2(EscW<%
z3YZTnF`})0@w_?(U!X)kR#=^$b6`c@vNN4w>1GUSZ36Oj2P}PFK$laNPGR~Mhx3|t
zvxH8O)$z56=|+*^7ZjM=Jxec+UmoxsH=AhPKVP+Fqb?&YO5j|(cK2_c^a3e8HS#vv
zORh`sim2wW@=hL~e%ZCy=kzql+ryeWH~2xWb+e;6PS`q%itf3F;G%}RnJt@?p6Wf?
zO4pT#C+m;>78!aOtDfM6$Itz4Q6c-9?v!xm*f*R+0{SV4Jl>9%C`>odu#0y9DmiZZ
zj4|uu`c&>(<v8@Q|EYW(`9gVyH7lXZ>>VYq*1N=9HK}IW2#}$bl^(*|Dj>i?HlLdL
z;t9Ol1Ds2x&ZpU(mU4?BflmL5pW(WRai>uwauu`Usf>K>l20b$-1zWff?1g9lEpgK
z(~QOxnq4I}TdT9iO}U+tgJ1>~#dPN7clK`Q9FYjEB`G5@m--GPdaQKu_^KvGlXvuu
ztD=H&Cjc)&Vya_{^_(J&FBg;+Y+q{4hA@uTMLJz_iY|jT-!Nj!iINi{$XX+>1)L2t
zZ@)aHnP>7<ko&Bk>h4aQ6yM~?r|pf|<xBSyrG0N@evLYZiNF+iXL4P#s4=ccjQCb;
z+y9`NL)1|IIg=CS2O07$<=k%le0BdguPzTVD@HR*ZzHLnDVz6ruD;Lfa;Mq6*ObR{
z+LdA-xGWJWmAY_@DttYq#{N4_yB-lWVUy|i{N0A$msXQm7AEFZL2I-&U;AUu3P+Hb
z)E3^{f9yFUU%>+v+edn9gPzq=mrTr*%L=wR*c-P#mL3r$I&iX4J2ZjI##?z={)<zj
zd|}QQri1+%H{RP;u7q!0$C^S+T-_SPGBqUXn~Lh4WL5}`dX6e-`_X-qzfw@XaAYKv
zE6x?+|5-eaW7+b=^7S{6^HvcyEnll=TnscU7hKPXn6EjMi)EUpFQwU-`k7^hIf~HN
zyuuuK%nv3{hX3wbXQTEi@I`DxS|j9F?<(&;GII5SdsY}J%w*sz##>p)yN{d3xo~~1
zU2t|ESr8Dqaqruk^L%u|TJ(pIEzd~s&0KemJ!3pf)^cFoZEnM$WC1|+Qyg#H>JMk%
zd3S@Rc+fGrpAGogBx=y-RO+65=QKZLhe4d-WutgGw5E9U$mmM#iilqgeSr>Ir-or!
zdCZHP1O3i+@mbRf9+S<HyHM;r@%QN+8b(U|;$gZd=8Px9&hlOsQOfBqm$9&kT82q;
z<yb0qj7TT&enlOOV-#^ntf5MjU|_dZ(Qh1)!sIgXhJEV=hTZ0+ice)CX-xIRzC?ew
ztJtZ*QND<Okk8K(v1i!zR*sm4RLXz};eF4Te8>*@L{Df*?<}i}Gz$%BrN&_`=dLV{
zzI=X=eCvJSiSs-e2G!L}3N+!)xI>FY^MmExq%Y;E8mQxME;+pC<$LEhU687K>ONH9
z$+_buO3pOdBu7|8Y+}BjJcTE0OvLkjMA{!2Wq9j$#oGK3((t=P+{Jz<gAhbTbl5zH
zH4JL!IiF)at-1AhR;OIL?pmOYK4-y{dP<q4+vA$oU87yP`9B=m%nn|94rln=pSN0Q
z4${GbW1(9iYZkn{*=L!}?s(a#QY#rNSJ`7w_Q)KN(yalPW!c>!xA~Rkv>RzUi_;ZL
zO_wv3F`dVfRpU8w^)X9vP#zwceIZPNnQlGPncpnk51DSLk;bL7Q-H@$`MX!*4nRV4
zJG7TtWPncKwr;hDd--^jWyZBY`Z+&ozY_-!oJyqDQ=~$Qu5_rY)VDRbx}LnXpPAEr
z`Q`8@G?-}30DoMNn1g(DSf!_v3hnyVYN*0R*lpFyvz)AkAt%B5ckny$p0tfVD?vED
z`n^YpQn}-727nD7?Lsf}!Nk4j;ZLRA%cO@oAd6mck>1_5XO(h&l)m%M%-t|{=^G;Z
z5&wfsgX$r_^9Q-vA5C{P7Kq#A5U)Ja4o->FtAK0-QC<H6nx9Pl@~#d}>NqfO7t8WY
zO+0~IIaE38G+^gX^#>)>j{d@k5A7yrwpMP<pS5-{V^)InBm+_pC-+JO7+|PPLrVYf
z%F^Ch15Dv9SLcOK9}#6VDrFSmryU?geL_GjXpV(Oud%moRDPudusNTYVhi2qh9`Tm
z+C^1z(YKn!zYkEq`f}@gGV``aGf~^1DCq^J#u{)zg5B~C>m`%x3cKQVdlS`UPc%@S
zfoJ0pzB!6&WiH$-0KhQEwrZnpyg8mTmojp*5Gb@4IfwiaX7B6r02Q9z#8RHn+-=g;
z{@$;>^JV1JDSUrdx<<pi6P~#n<(8@M(5YcF3W3>^ZL!!tI3JCZBX$RbS0nX)i)o+8
zj*`G)ZHauZd2IC=icJFNdvqYgUm|OUU43jx=kRG!!s9`Q?ovB6FH5rB4+sNNpL@`v
zdR~j|pQ@=kervVq8Hj25jy&(15eBI-+m6(iyZI!CpyWH=TC863gz;tzn^xmV>Lx@d
z8x?OK9Z&1{ip5;Uc(R3u&$yXyy^&B|`UE~V_;vWKb$?M1#c-z{ojzv#u-OZ(<{h6U
zhgvLIln+MWezvo{l~5K&x|rlk-HYQ#bM@D*y8pO#)0rcCwS9nbhY3}1`la!OZRD<t
z{8&$!B1?9cPzak?Th%VX&9l4@Q#vT&IFmy>E}MmRwcgQR$oqq_py4%lhz3Tp(Y-0s
z>6DWXjMITQ1xMC5rx1udvf)Q>lNWl#_7%BrIZn6z+&|q}oE`n*T_V#*gGiwUaffw-
zQv;@!GET8tlrVq;{KNbT`g6I#RnOgP<hh#bBs-h(&FM}*1D^JS>eOsc$=7MvL=8bV
zzd$~@+(v*7i8}{5cp!PvDYlsv;noqicBU&*jh9Z2`0jmHk~ss5jkYN}pBZu7zS<c_
zSynf4B9AOa$T|A7BF%1O)Qgrhb?){;H~9kvEN@o+1Q&)bEDBF%T(MF~a9-^--PsXL
z$UH>b8vOoi1<M)UyQ#N7t@x?i37Mt0P{Q^81(t`ll9*E?DOS~1a-`P{w?0Im@*u_A
zj7TJ(psb<{2YJ)m%?4B}K|B~)<33`BJ>*I;2ptOnOliv`;hTo7n-5x1cuJXNq>SoO
zq>nspS*Pi$Hwj@e#Ir<Jh@b7|J<4XOwU~bS37FdA@N9&K^h5<@aaqA!2M-=-hPdrR
zP8%F~J;A+dYffVAm3B^Qb++TNbGJ{7E-f_J<gLn4-d(&tz_}BY=;3zpBG2|(AVITb
z_;8v#ZH;x%s{3u`rvx&JxSPgm`1xsh>3QjM%%|5yt|;u<{KMWtP!a>hZ5^}&zn^y+
z|9quMvL&Q(NBw<_$5`An;#(1|H4Mk-lM|jAx{L*hWB~d^P^9FUZh7ako4<*7z;`Tq
z(vZD#;e1-3D-@n_Bl~wq+vjDhNIYj6#WZ@dnOx~;a#cd??oatoh@0`%WWMvmc1&n+
zN-}?>qd`&xr(E`Moq3#HdgoU*D4Iv|)fZug%THE`Ryas`ZoLrr8IRLGRK?~fET9Cc
z#Q}0Tz7t^<RhDlr-QT{@ibrUj)GD|hH7??OR#N6lJbB1#s}eb9LT;VyN`~~h6#?M3
zNA_<D7owGLHGZcVCn#1^gt#)q4r5(7`V`$!q$i!_jXzT+UQhO&P%ty#Pe3kd2+oVV
z{76PBZ^ko#z<aLE_KO%bc{9ExW`(dBt+RB%mX?_LA8G7-{N{=eS!r`3?@V&@@ugei
zH0m(7J};42axP}IJ^+X|k0fgOvGLfneu+2IqC0b%i`{eMvv_|F4zat0JFTb_?M5hW
zvk$K{V+sDK25p<TbHn>?f%~?ihV0k;sEo9S^Ob8l*{DjIaw#l1&ecoFC%yHRy3mH8
zXs+OPn`h2Rz{E;)#kvr{H`!rEUC)X-yDl|~^e^CQ-=h=(tk}7tO8ttAyNqMiZ+Cb<
z0D9+Ex>!SB6kW>hrlCezobnQxIuSF&dKlTVFCF#$j<{6`o1}Bg*&WyO`L1fW`479w
z`^2Nxy}9(v<e#I}%B;dJXlxgmCE6|gtXa+*6WxOtWhK1|o+6g#hldRoPq69G&A?J(
z@}5=Wv~NqgG54N|ujC`CuFKgT@~$(!YVQ@~E8i?UBddK%eR)N#l742)um3m=4@Gq<
zgXB9d=>oIXn%#3fp6&QjY-lbM${EX7K69zsrbm?R%n{JywIu~gZBD*d%hot*>Eqt8
z;8GD=aKW4FIxK-!;mUc{jIT7})u{CLPxr&jULUAA$(mck;O*|Q6ZE0Fu;wQwyXqOm
zB85K;4beCJ8%cShU4iyP=k&mAK6PJrmtfcP$~e;tET)}FsBGU_h8i3d)~yxh_7&@7
zD~WzrhS=#e?C!Aw&ds`Ts;UosGwjhWU>Gi0+j}DWNP2ZoyhW2{zQW}8j3||3pJXkw
zAZeP9w=hovC;EOUV1fCO^Y@6w_L-fXpZH&B(a0nPe4A#5);;d{$9cn%P^Z@}TM^)}
zbg;Lp+(=4K5V*-pKOP3-4qB!7*Pfxux*OJTiPDMVhn?+1g*dgAm@DXGx}*Dy%%Ym<
z4p+Oc4LW6lmO+iUF}%kq5R<a<OK%-!%#8DJ9{JvkO5r?HtL>LPZJV;kZ+?oBaQk{T
zVm-@Tf7==k6k)@UPf`s|1&LVRdfs;%@WV(0!C1G^Pk}b&bs!qhL3>fz)&pp!zynTM
zqlRYJPC?S?!Wld4)C4T#aiXn5owhv}k<UA{z1*(q=-FRXWQdgzkSC*Iv6}5GR?SUk
z16$<K3fM7UqjSLq$%GS*2_+?!*`dm<dj@(7pYzNRtFGKFvgss@ca1(oxjHZiCNT9>
zBzjeY`e#F?{$}#Zg;k)zkBuhKTc7Q#t#ZCxOfomw`hM_T&1-Zm|84UV1)$#-P-T5w
zI-QZ<^l+*Obz}B(`NDo5hgxgbpJ7PlwXcX=di%mx*<`gEf-Nk1E+SF`qI>>nCqe^c
zb!r)oIW7SHP^v!ZRiqi9q1KW{l3bDa(bus0a!>Neb6wYj4DtrljRM+?O{{c@rc4Xv
z{=ntM2Td{Nlz|J+xKbHGu*Ic&QA-&iwLIP3+}SA_u$d6WmOz|}7vR5y3uD#HMzJrF
z=v>r$2hy`-4VFZPmGaKr)o*n{th`Qh1LxB@#2<a>=w5lo(PH58GfeR(;T-cEvAmd|
z$yRvR4CQ#sr`Hh%9=+^}_h=wODcNN|;`GK8%Tpyicd_sNO(~ohISA<cZJ8wiIoG!I
z*d-j7w_ID-!+CWdP+nU220b<U@wd;iWhF3m8wG_toyL~{auU*49VCQZ1@c=YGd%ef
zw<^aP=br;t|0=?Jj!*!Em=1jaZ%0ShW_rg^3zWeE>94%01Z6(D-Q%gO3xi5&meFD1
zndW(#Z1EXus^)nLf5b&%^pE%*{lAEMp-bcvO{>O&CG?zSVTQ-HevQ472msOb>`r<e
zSIH(CP;Rq@$$lLbuO=&o0LAWu!x=xHBF~TSNPE3tXB5jV$#hcly06ozM!%NAbmhp4
zClgfyoyjK5l7u5p4doWu4B~5!REUwc;w^J&NOw>G|DG2nzshmP(w{^`FdmD*dAPwU
z#)*l%aH%gZw}K)i1I*0jG|P<(h_T)8iTEG!9-D#gMfl6QrK83X^hiQR{!C1MbM7>Y
zNYSPH-%OrQ|2ReW<uDP{dRi{a3KBQ7LkA6J+APvp&PWZsntXmA+exuZ@|vqSS<{=}
zZt9*J+AsSW`8^-ZL~_xEMI3VyW7Yz6>O^a@FDY60G^HPnV`Gach*pM!%?OQ_FIYH3
z5xW*;nPunGu7fRsvc$g@TeTN<WXmX%gdp|Q%QQ^51Nj9Y{}Th%g)Eug<Q115e2<KL
zO>!)N<*<lWxnrga|0nJ~@-COBH0&15l1ncn?t_$Rr-d8_3~<`EBwR`M@4f)3pacI*
zil+BY8z!sl8&pwqNZO~)e#mx>o?0sYiV?i9S<6R1f6|+YI7&Eg@`=hA{r98{2SZ!{
zlHYj!Bt<3q0VH^$7uFOpcb)GY@jsfC5XRY8Y|DvDzHz>cHfrEDbih8^sT?ufyNQpv
z7eaxEMG3dBCnG!RsR?YtRH_A?pE}_STQqKR>0QB60QIp<n;rOt(q%yjt)~}%ejw9s
ztS&3W0M<<^CYc=rfYxutX0XPeON)k*s=bC1%kZq-QcrAvTa(VZpwqUq3o^+U@m#Ko
zX?unV6leHCAza4!V}_4g+g+?YksYz6AsBDilXFjiHP7fXrFuey60mTyh25y7X)f_>
zq=Z>hIwQZj8fVe{hVVn2++8j;_Qs&>bl9qwA-oi|coRi=W*tJHHE<$xGC^0}o`+X%
z;xU8@|Jp;yg<F_a%Ur?6%9ianX7W^c^LtX+L=>YC1}v=0Sn@p=X=1kqSl(^RI!@fd
z;?wAvKwrdUB!t>7<g-|)sbBxuWo%2=_}65teO|R7_QEY}_kb}}UeOb>&Nss8520@9
z1?eQsmN&h7E{|x!aYUwIPozJG>z9H}FC_>W%IEV?Hy+Wgn)xHXM+(#$Fo+IOJtz~V
zt|BAPUio7f*vC0O2{_Tt_L9AR4CIFm@KZ}Wf;mI)uKFLt=%m&hH;utngk6BPpQ&1c
z2l}tslo0(#&<ERCvgq_qjwDChTw0OQAZqg3ug(@6BQ*sv0(Lgaj8n_Ohc=;*@?*4Z
z)l|H6p)@LIo}=QamUZ{l)uvd9@<v>hX^H1#r5Ph?5Q(Lv)S?J~aTxh!a_cn;N6BK@
zX7c*atU^jhJ`sdWFb8HZAh5}NgCp<n=?^?qu(5JHc3ef0r^2AV{;dCT1W*~_%z_Vz
zBSNIh>1SYJZekZMW}>@t?p>{h&^UwMZ>w`(RIkGpDU%CdU~}pr43!N2+22t38-%IP
zkcE|xmw^b{l_~7jt?#6b9`f~%K#hIFE<UI<TmvYizCvcPhJjf|>Opm%-k!#W?Fy_(
zZ@Ggo!id#Q!H>lG=XkVj5w6x>(OL~wiOQAzU&GNd0<A8U;vtMzT9#bH7Ub*}gO6I4
zlVAn;`w)-<<TCK;2=+EST=Cra$yB_rF6qYW8Q{=D++HkG03~y6tSjn$qOh}Z&(P|~
z_Vj{YXbCm-UFUV2zlxVN>V}}6m%zNqn>6T0)h2o=WH{EF@&77<&On2z+#S8U3j4gQ
zxagE4J1MoH29TOTDF66;>1?3|17G$vH*>@Q9rX_j!#nb?^}=4^!<>C!ywH1gI6E>b
zm^O~-EC6<%f@hC=l(6-FE9sSTi8q=0{qZmu+IMYz+MYVyBGJ~uXB3|EBMj}tx3KA)
zYHqeaPZZ)mu0JQ9yL_cT=y&%Q%YEQ@yl};7^SpX;Pw2_3ZEeSjN4-(bcWxxn&ct5B
z2on>}9cCJ->zN@;l8T^<*>1_w3Nk1`zbiCvuN%%FpmHWZ@Y*^Yn0JOBULu8Zp$~6-
z{5Z6lt#Ma^iCQ(0TUzOtfxI$uSYRjUHssub?&Q6DW)pOxU8HbsQmk1sgwp9@MWXc4
z4h2xZmENeh08szIT>`WCqtwBN4ZKHE+VS^Tj&=`|MZICo?8wk=uM1|k1Rb(ym+j?l
zNbUa$a%}b_AhKvg+@`QD`Oy&3d`lGPTOvFql$GIkvEanhZ)quUQTRyH3N&eU>x=lh
zO839fcX~!RJFl_QQa3Smc@<vl*EWp}8)btsUf8cQ`NP49vu7Y6O|(kV*xq|)!esE=
zA#R~$j>w$4K%>cKo?u*m-u;`N9)3>y{BD>v`4iMzH!5BYfx^a)mP69ae*F95*7&BR
zD3i9mtRT}F-Ve6JRmpDiVb^LI?#2tu7X;+Po-!eYuH(EK{luVOF*}qvsiaN0J{ZzD
z>VpMxnPi{t3bv$p6<*V<)d6ikB+AW1$f;g?ZElbkkf^zdYX&@2StN|gw}L*WGi`w~
zcwX4@^TkZI@h~_ILmW%wEHLDX<#Q_0!rH`hNd-!wxaz)ZKrtIUUi8!V+*u*my^($V
z?R?6$4?{2^$DH2hjw?gW0%Yd$9qsrs*Zn*%=WhtFGvMfdW!EQOA4)o_cMo<KkPAY)
zN*wOXYP<LTKx9`Kfo^uGIEYh58i%ODr(?F6V(DiOOpmw*S}aet&Ph_5-oEaGyfZy!
zKAO&zlYVX=mTLA{r(vcRw2jFWi?NL+G<(0kw^ICMa~*Gt$&Tm~yL3tK<okJ5SAT@_
zn!+#^#9KYkGotrVXPs1hkUJBl{F^qXyMF6LArQotD7()Lg#ALtOO)SUN{br-=yGYx
z;<Unxiz=fUH-z<0ilQ<<jsUB3O==!O?to|pq5X#`|MquG#*JK-T7IY+9$xJDedf`9
zX(KMNOwny%$Wk_3+bs38$D)Xh2$qV@@}uZ6$Qc(_jkg6GizC?gv?KcsPP|0>5vvQq
zW~>`3^9hpInT}7&bvcKaTe@cuQkmpfLv*pESU*zw*lx@i*~G~KkTf1y5*=md?pn32
z-swt5X3vSZO|^Z{OuQE89P!d<3%XrqODE!%WNf>$Vuh^xI^r9qt*<}glW(IA$h(TJ
z@)x$mlKUn2F&Rw{mOIsSXDlv`FuTHwMjeH+I;6Zo0EXXQhSurOw{v9HzaE^|BXIFK
zIe0_t1T4ps`>7c(sC6PPKlmQtyvWn_;UMQna&=V=nO3HT<q>__5e+apm?7NEJc#V7
z1ejR)KnW^P#2Mdt)3O9u@1s`r!R&JvDg9a~ALKsMlwKu^sTBtCRjH88K+o_>1Anz(
z=D8yn9#n<s=vj=AWmgZVFMgzRAI+k(?HuhGVEBIV@%lnQ821~x$4z1rChu&;RrY3j
z&YTJjhu1(sr`L-pk-NHnHVqJ@Uce#a1(AvFhU}s}5t{qLxxTrcEtDPtL{w!*JM1}M
z**Uz$eeBZ^7NKu(uK4q7Y6XW%i1J=@dHrk%W!h8s%D(|xmZ1>Da-N4imM-BUNV~;L
zci#I+9HeD?9LVcD^rA{e@q*q-=gcVO1j5FX{Rg&BT;?A*1+z?Uc&_!pIK01h#TOeA
zcxy$|{AnN@{x+|!P=3p=m5h7!!uNFN#nCK0WHI+)sL7gBw3z*aYdv!7&Xlnl>u-@A
zyIop2O7N0!Oka;N>*X4K_O*FUa`KoXV@#@q^MavBZsc!f<^+0%BFPklYe5Lhu;CHO
zLyhh&CG*iT)_Yoj2L-PHxLII+5ziqpY@fBK#cxBxawLsa8w<huu`RzMfX<AgHFBiF
z@7g%mr?OYqCRQwVM~tjNXIiLhQ~FuPs$%R@Uslym2#G&AO@W$l#F8?dA@v;jxL;(r
z20@8fkgKmDSAv!2TwOfm+5lPTyk~}3Id=?NE`4^O*fu^E6p0?}yl2`{)lO3x*jLys
zcHDXuj`mwvWL~<3pH_fDhhKb&xqVHv++WitVQKCFr*~cEW-wUhXsgN|@N~VW#IKoV
z_T&z2w>pC5F$S2{YE^)!Ga-}`_yVi6lEbP6DKHN=r&7uj{IvLwg0Si{DEX)3#{#+I
z0-VvDwhJBo0wBS~o(QnauI%CfS$gC(>~yw4b=9t1v?GP;DP{>rE8^QofRihs`jwq%
z>PgWjnOpC|0*%8!-PHq)ih~dQPMu@JT80!~%JtAR`}~zVK4$cyYhW()w-6c(%7)A4
zf8%yQMZBU$YJsjPZFihOg>cuP4WaY)%Ip0Vm!Rdld;UhznLcvDQnSn;l|E{>9G-Zx
zbUczM<N|0zI?}tOBP3XphC^~vGp5DIf<fw2_f2ga{mjHS91*+F5InER9}0~#5}&05
zZ&6$iLHoh#oH~+~5J=<dbxYpeawYeDSP-j-4yYcsRkABrbv`vb{^~)V_WQszVcPF!
zEw#N+>rs7|-}>_fEFph0hccxRv^fU)_a5Nm)66bqas8~j06NA*AV3<1*$!L4L7B?W
zl$o6oySvfs*>`|ea)i?q+F3Po46m%^*E9=GX~=t~9OV8<*53*8lWNuDmMbMQ535Uo
zYWl@?d%Yo<f;<7zxm?uHGsj)HWy9?^wvu~jG1}xH1X7CT<6V#2M24JC8_n5>b~pm7
z0pU0|i8T%i)rEZf$_`I}8a5}MJH>PqS<=h{z&Vgx<}`0J+gJG9g`Gu)02SY$V<!gs
zf%=j43rZGCf;N>any<s2F&3Et>?rqunC}4|T9b|WeARnNE0O&Ngk%9;BV3q(aa|9P
zRU;l970iC`(;zI=33`h1o`tPbSJ8f|LHcjn`FYW=z64NOz-Tg+IvV&{<H6-Nck}`e
zn;u=&0FfazqPGC^nNF4E&v{U0T}x^RW)*45DxWJ$EyHy_t^Jy@NTyoplPsi%13AHp
zK~4J^ed=pWAn2CYtv!&|N@nbHAeB-X1^{2_xE%=jT_jhND-6QrJAx@7<)*<jL7tic
z(dvBPG1SZTx$^lUkDbj@SDEbvAAKmu3DPW+hiMK%V>OHc)rC5BYZ6VSm*1OB`<u%=
z&JzmRB!|xQhco<NWK}eV5hbpf(&~{lpwt)$JC`vM>ok-Loi+-Umok}iEW7!-C#b6m
z7-kM2a+FU}w|dtulek}0J~<F^i&yW;(K|2?*~ayHR-*s()u)F8`<ftG>MV1d#oMaW
zMUa%%$iLI2bf$<Piblw2*qB#(AaO*WnNx)-V+K;(5LatR0nfb{1xZ<;Xn2(|R+d!7
z_Z+A?o-Lg>8=J{*UX@X`%uyuUrF<y9x2{G4s2(q1$$_9k>`Jz3-fCCav2KB~qaTF!
z7);e4_RUgEt<pgbmR8+}T&}7MG0Mi6p<H4*9DUg|xY_`S^se>PI5A;3plBbpq?>JS
z)gZ8e6`QPyp1TA!Da9a`pZ=?4wGTr?rMdqWZhSfR=W31{`vz&1!@G(Ll$7nxPUx6{
zTB_`)8Pd7MMi<9Y-i{&^PVc2mtdwV1vJ!4~_n6KPRl1V~y|eI0MHU43Fa|9=L-lnx
zY_)zPo)Aa5l+pZ~mRZ+w4nj~S$boR;J;&8|#gx@6-vG*_7myJd+8*gBBA+;HIS1xL
zu$mXo_br0tq=b~GBC+%sOEh)!A<Yt-iya>^yRaD)zh4CuPw~4Sa}77G|7(3TmUI=w
zjar}@H}X(t2xu*}H}!POY0mT$A%YUN&xKX%`cn<5dJz}3q_OmekpV)t8Y7*Aw>gjU
zK^A`sLi7j~(JG%v^7Mi|sh^d*Td61%8nP!O?e3NzX1@4wSxy7$yY17HKRM4Py7G@(
z`k-2(1dJ6vJvR<~iZJu6{PN+-_3X)$ZXjaWju%=;zoK2aJkRi<^n%q%tx;;2vf2*M
z>P9i;*@b6vw1QY6=A0bh$wWl)XRFd}3cT)GBQIqj1rst117F_~|GKMuATLUGCQ~qj
zn#dl<y5iG3VxcA!HVeJX9G>I0X47u*X$WtXz682Z9Z+HKj2$Ew0fCeih>`Nb&Z~3P
zATb4lj{VjI(^`MpVyK<Pylj~?euu7Qh5#lQ0J}@*F0$$!)pUuybYJPy*TPNf9Mv)F
zyA(boIiM%WQwZURHTvl{LRkihiO`CECE;NXZN`|{L$A%}*uW3?<~06kztfYr{J!He
z_9;LPj{)L+d6bmLPjS-AWkC}6H4WN$ilEz6f!dA2&6O-l`5n`@#IP4M$m{c4_M(s>
z+&EKau*rAu`Q`}3ESFDfQ*aa&Y;P=W#hddeZNW2d+f~MR9^B2kF+9u`{M)C}gxw3R
zl|j<dv8K7(i@>kREVo=;CF;H6rzRj8Ax7mohdX_>_|Yo$cbw4|(JF`qM|{WEa31Z^
zc}(?LZ)`Crk~Qu!za>;H$aNCd$7rYfi?gTQ+|II@u(8E!#+vQd#oH764+uRuTtegr
zPUSVlCVkk0q4trOGhA;*lNO!?1he*v8IeV19a~1-YA;Fg_7oyx<-sylGRvq;7klsg
ze&!vduMYir98{<Ug^*n(uM6R{#Yeb)fM=Whxz3w^dly1RGTr{l$!vO#_tY}G9Ku$S
zLbgMaqjCkQk>l@O&z3kxu4z|nVAHH=Lqseqw3ZxHr8i7=WAN`Sta_ujFoqW!Aps?p
z0NV){XVI<lOr>ItES8!ZAkJ6DQex$WmrKX#{kJ}+4PI$fYpo#3HbdpgaYJh@U2gRF
zT}zuQXvnrtWq{ipCx!rt=wL~Sh=}}Bun>7U$YhVyx5*u$q}P<<J(eQt4+6vuhnoE~
zxE3l6lkd^H_vQ9^&47Q3oMUyZ9_L@XslEj8`}%dJCk^1A$W6y~X6d@%Nb<5aHHn1-
zs`F6RCT5l;34y9`_BA3FZ=O4aoseA_c~*W;{-HtLGeufpsO8m{*y&ySHJ5m@93>){
zTmC*L9__Gv?D+UzQ?UI)F_uV$m0=sr<PopTNqmrkqL~b@RV8KxL7-8|YDFD><g|ho
zpjfA*pTiQRv<M+n5R$zhWBcT8zhEztpMmVAsHj}O;60>IUep)NA^IVuroQB9%^tah
zpBFuXe!spK^c4R4Q#myfuN`u7UD5X0=`@U9mNmeVVNdvsIA*>|xDk(1i&uPS;Q9p4
zmj}8aJNcBW3j#hkITok=YZ(fzSgU*HLW9C806+bJ#&BYj$j6{NFQB(x-9WO(^sc;A
z3G#MCO$qG1?|0XHkKRJlerHH#;KA!Y<t!mD_D6c%E@v<ssXW72ReT)Kl%<r39kCcl
zK|dWToQ2izw2I%20JO<22sHV`%rIcST}5Q@2f?vzSOj+2)>P}9gTl@&JC41>=EP-6
zUjxD&Rt85X1VH~fQpe-tzS}|adAu=tqUNZ#ygQyKgehR@t?{Ee9n4_OP-KRq6ps^8
z$T;+w<uditpXr&D(p0OMLVcVbu4)8OcZ;Zi43Cmx`kd||bb`%;3WI{*P>JjbchWWq
zy^~V)VbC?p(rVi2{1E0?>g_|9#LuN2tOX!UWq6)a@fTRR|DdFoNex3m$fg-2LreRG
zQckVcRLLC>jK5-UT$#909u=*Vbo~giRRmOx=SIoS6^wuseo5weQOOf;st(T%wh^<j
zcR2Ykk8+%se8#M4$wgCXbwQF>e7zSy(^+^AAtk}kY7t#$Re6e)SBH@&D&-w%CkW+^
zuiRvgQ>UMgPA|Qvb6usIlZVp&9BAltDQ=yli#kdl(~K#z@I>#Ya8F)MAH*i+PQkg{
z9prCGqr4zm#xeW8lor)0)#Y4@{6WMF)mw7L8_Z^+1?HWd!e=3~>Le;B@J^wtzu-ck
zv3wB=q{IrAzzE&k{;WLIPmh1fYn6>ct;@_;EZw<#1JG@WY~A7}B0?@e!8%*9yIwD&
z>=Q#tOA+Dh^B%PWh;d7je&zM>09C+62B|b4*?g|FJ`wL(cGutowhjR~bRNKw$*GJ$
z>pscvW17A%H=7}RUO+^2eTw}Nz_!UIxRInGt=YDHct0i-b9OHf9lz?q-~d_3ErxC^
z%e~%wf+PQm+X02fh~`xa|Kryrsx-&izU2ZN6H_e)Lx?S`r+f2LsN5(b3_1C`sMhdH
zQzxCB6Xn*mTw5)Hl5qq!G3i@U#K&VbKN(aaDP&A&IY!KU5lMe8Xi~8k&=GAR;{lyb
znuQh`@p!-p>@mmd5u3pl4;5My<;OJc|7K{>-zm&icr(2j56eDxSY%=CEU^O(fYGKe
zvgetG+EID%o3kJ`Fr*SSsGJgAN!qii(nF97Z+A9$ldGSLAuz5(_xI>f^MaDCol^pF
zki=iCm~0W<^?5YuyQJ=tJe0J$r!X5Oqi^@)S0feA;4sEt@`&QCO4mF1>+>e3yi95t
zmI=OfR{=+wHt?&HTp_7M7C1-6Wv2);;yY)%v*QPWcRg|nG!#ZJ%{^*A1s>I3kSqBV
z&B<n4UQ;KCL@r6*L6iY)nWFnaDeP3bIVzJ;pTeKzAR=vt2&zw;4e0EQm^^EG|GE8G
zNwisO%!uJW@8Wn!oGzNZ5JRc$>f7I}vCn_+u2^Ag-IIfjzg!#XBzcc0(9r}H!AZoh
zRNtO=ydA8;fScDyK|J^L;BsCR*}1|#>jHmV)Uou4Oq+_ux=2JX{;d1Fe6|*UklziV
zbEy$;3SJ>W8q(SRL?3qWOt`L1Aj{zdaV!>+u8BSvR7<y#b)HU+KO@cTXAhW^ayd8&
zec1#_TFHnnTEgK3^(Bk8Y)!SBN#}MnjzYKMa{IB)Lf5EQW>DVHuiREoR$fHj)I9eT
zH90+8U0v>k4LwM`jwdYvrSGQ-Q*ke{n)(pVd9oTG^V*@W4z!PK3;Xzf^Npf9Bsz_S
za4rd`W><x9+yN$HC^G;J!fjnhB<O9jG`rerCq@pE*qW{g%!BmPvLjXP*_hvfy5$`A
z1(4x$WMQnqajp;u<j=EX=AX%>N<uW3^LmM@=h_9xi$A0$dPH;ay*a0LYOW9yf^l^D
zxzcSQLK+QKrzMyHWKW+~KoBvLK|sE2UT-er7#O{`&J{FH*W$|(RU&Wi6b!{*+f`^C
z78qKYEI(%bD!`jVaR15eL`d7O%ytUNY|Z3D`(666D`w(Vnzy@#&+3Hv{0)|b-WeGS
zktw=Y`&5259wYOCknC*^=sSCas&Sl-%1!qI^p}jyO+2|pXQr8_%;dZemr7KL{oO3R
zULvuw=HyeC=;Ku!B@4BawYuRP<XUX`DlGopS{Zfz@BMhp<V8v8{ka$GDz9JowFMw8
zHlf<T!XOm#aoV$Lwa;?up*|6d)_B37lq}F@IIOdSgOZh~L^-7?<^d=1sqsh7OttIg
zWdoWtzpq?$e~=Iv(_&lX1H$%(dgmejPYLqOf-<67g7LCgEuGX;I-q^qY1`Haihg<%
z`bmiVVV#_ij95iLWQ|p!nF4x9Zb55toV>n&j{Roytk4i!T(%paB>iDX)Ks0xdtO5F
zPUpOaY%SQVy&V-7>UR40WWUW&!DbC=0|;#u_a7z=AQiWQ1U0#3#EdF=Dw3ty1`Ic1
zAAUQZ#^C`~iH#muYy3PP{9(GQ!m82d5IKz-d1s<KRH@1W!R&{TxAp5PURO4B5Siao
zMCP|tz2NAt*w}Uk{zp_#4;*#D`@KM?)dvUYEGP;KUY)(!XPy!p-g2h1_QM8HWdl@3
z(BJ)#-{*Xz#%`09JimrJ=yHlon>o4_s0Hg-3}19RQp;M7xBwh(^I1nb<^FAriB?|<
z(zDxJ!@G`0j~P*~CU+%+;Bte1YHG-|%Z;u%433mvAxnp}L#F-eD5u9d7A6i)kR*4g
zKG&!Lz%=#A<_q0o8wc7~44)j@Zg77nydkjGp4(|V3<&vjF@`o496x=V-!pt#&M}a8
z?*n$9yJEgIJ#uD8jDEIbct5^&TE6Pe2c^<^MT;vO`045LghM>|dCON<FJU<qM_ELF
zyXl5%92C^dTx=p@zAI@BZ_e9mxm#u?eW=odZackQu@V;DJT4;cVg<ICHitEEpTz9P
zmGN|xq3WI}<2-z`rKCva*!LT;k>B?2YadB{!AD#$f=bnX?wC<>RoP}upzltdoay#*
zBtiTk(YAnC!G+2n?C|f<O05&DoES<Y6+L*B7MOhbV$rA1#?MTPMm<*pu}adoND_J2
zIICH3W?gh4+P}{6C~qHf>1ikVYMpOL$M%ERo7My13}ikR*pwphqu@KQ=CHoI4ZEuR
z602bI$(LeOQLi&B!?m&Aq=O!5epHvoV<(FPUE$jqpqBhX=@cluhowXj8!j)iOZ@hH
z*t?%6Z$DGQM@4ls)_P6j9aP*$yvPUA5Bx^m_72^>^m7lB{i|R<kx2s5r8ZZ|)xT0D
z!06zM&Fq@?c<STeqa*k9q5a<Az29|yUaYJpC_=uG5S5kl_0W-TiakWrJEvf`H^Aku
zb@Zzo-n-o2|B3zt-y}NvDdx`$9H9Vy8SU#Owg-B#=>yploF!xWJ8SrL11B(4CLhp#
zfSmU_&h*?vXlCR<*GnJZe(bwK-Fn6#1-_<P%}@YMqW}Ds|342Tm^ea1af1x)O8m4}
zEm0qrb4YCODou!#)1{@sch>*&`b|8%GQj6{r4za3MR}#yX~?C%Nqjovdx#3vZ=&O0
zUBC%-BB7pUOB?j(gTF2dXu-kI)V(;TjU=+AZu4ehzjKIR*Yx(v35-8NIZm?I0+^2D
z=gbfM&rkf%OZ{^}o7fTAv~}vFjX!^^P(os`H_P%%7ZGfp?r-?~KTQwe9SwPGSwq{L
zzeF>1<~@J}kZ?rCR7aI)Hlv$s<i`%Rfg|WY`q-TY?m?oVG>z+_{kNVxT>xDqI5U7*
zd5b#{g@fWvRPL`!H#twd){fc4++Vj6N*q@6^_kkg_fG%SYxkNVO2$^pQ}mAfdTa-Y
zsLk}hUaSA!Pa*AQ|Fu25tiUW^uBfU~kL}-jJAa>%|K#5e5m_m^qhY@{065x*YRt3E
z{>{Vv-j)CA-v7yK`A1se&u9G>1~vF8JFA=h7iNSU2Ui+7G9UXrK=O+gaWi#A=l{=T
z_U}F3Uu)sd4~HHnhN%}$e!{<gmuwmFA=$iP`+uKL<Hdu3>khAU5ZrUhp$D(|lSj_t
z|H-@g$BX(mZX>jkc-=#55tzTi?MNgLjJU{M%6<RFU;bY{^5jU?$B4b)mRATnrgwAo
zq22%G75<YiIYUfI<dpC3jRMLb9toP2_62)0;r=fd-QG3AU-Mc9717BZ9<jaUW+F#i
zBRG|J|Alc4COPm7jvsEC+S@qB#D}kC+w>d!`;T9!>;teHJ$ZSEp>J=5#S~G(SElyx
zAIH@FhtDOC811xIyIRq|4v_0$)bDrgP3m5o)qnm<Wmk!%o7=EK)?f45yo_N=oS!iP
zv2X9h`;Q;VK9Ya$O!+4Z?0@;rP@=`fApx~L^d~Q!_<UBHT5bN-0s9ZD?4Ja_y`Q$J
z!u>Dj|G56^nT8%Bt`T1mKd%2mkirtr)r-!WqJ!zG(z%r~kLROw${pDo0Ls=hTNN0t
zvxaE~$&Jx5wen2*R-kg09#`2%4CS!lNQMvmzuz6v?3>k-95_=m4AS#~gwtGs{_q^A
z3!mwfUT)}p`?En8Qcq*lhC{bt0jLT~XQPX)RSRu|$8X}>2s`th{m?!7e$HNRsKOCy
z4|cnHwbP0{0rzV4SRXXLH3kY)70;4Nw9GL<5|8ZZ*q>$p;iCVCzjj>@-pQxTJmp59
zfO`wl)UCFSLwbvcJy;6|^*NkdI41i#Z%HnGI@S-9F9@1o*k7Bh9QOtvys<P<jL0tg
zR<<^CAD;0o!Wp|&cmlul8#TAqy!W&KM~PSaHR#8sfB4$}@C+3_48M!!0RQDVSC9Z$
zcCVtMWo%Ic;|%9@IvDvkKHidA=?Ex$E1-9;(KNnyeQ``r!q&nuU#Ma{s-!#OB?I(l
zQWT}wNARt-Jn@?9gT~ahu-86d;UNr@Hczq+D*p{j{D)TvVOEfsGANXMFVijGn#+$E
z|GpZ%W>`F@nPS6^(OT5&2UP;ELDl!o)j4YzfMDm4m8IQ2Ua_190@Q|K?#tkTFXmY_
zXt!mZ6-2u-ZyU?$d{KSS+pt6~TiSglokeJS^{adR>g?*k@)YQw#dnvEH#aMFhf+W+
z??igT_+?ox;@un_JRG%`;r{1A?4ug|F5EdRXJ9+A&8%xXIePnQv&Ym~jCzXAGj;cB
z(-8efIMO1bVan{+K-K=n#^|jTD4z&(fDFgQ3bbcgcbxlt1)v}kDYr+(#C}j~Sp9{n
z(z>zRUyWw2>_ze~4~RQBpY_|%|0P8I8$m6U4Ax28lW=XP(y2ODtHnh5ESEvI)x5Y$
z*Uwh?jEVT-TkL)1vnn<v*toaijoGXSJsh+a6@W$TP$%Mc!jo8Z&7t$byU-BW>q%JR
zTq`ZYpbGu~xkP^vuddZZQ>^3Yjg8FjQ};7wj+<(MFy(amJa{PVRPUOuHuc-;c9WNt
zShGtw<Q2`%IqmY@NxJ^beR%^a>j%@_nfYL^)kn#6-pDlGJ{ZHANfdM?ucjUo|9Pz8
zwMcfq?Fua3L)>wOg_hlcZVg8PAHG6ttDA_^$I=${6fIdwOeMWe<k$s*FgH`TsE2mg
z(-wICWDU^?wg$k@z84WWUbp2=q(LvZd-5XZ^c<VS7&3vy2nXkayV>en=J5c0^+P*U
zK41gdy_cH{z{K+N$~z*AiWY>pEE=^L^Iyn0zMq7ndc1_ze~{9TBSya}#xo{c*gE()
zSAr5HZ|b8au`Cb3maM0PW5X|--deNIK>Nv4G3n$di<F7$m#^gvxo;+!twGns%(DhQ
z`*;yckLOZCc1G7?LAC$2PDZ$^E`&A0Xc(k;I@SK0x?`+1KwASPXY1IPmXd6-1ZF|K
zM3s@6>8QGD@4~yQ+xrgK8bk49^+!jV=DV8SBP*PoB28q}Y$MXqg7=@PM2WUaYnQfV
z=dabrj{@umy+T#<RclrHK+GMfA1*L|zcSt5O?1IHHbHcxk`kX2fV$ZEnKe<w&9OS&
zUN3C5e!<Aoot*2IM;(ix8QqG`ZlQDT3JleO$q5lgTeG~nI?Y4w#13S;*i_<jW}}An
z8vImz;&;dCe;g}M*b|fU(mBN_-F)cHakN|-x7h_V*1i}fgJ*6TY3gyg2dddFHoUBz
zv+nQu<Hy&r)f;E@a9EqcOx5A4^G)v}RxuixcxhUH#LRH@FpEf87vTA?E&9o%wgU?1
zTd*EmvmywMQ!8k{?ulx1q@JChX9ag%NU_&}%@o(|i18{TA<ND`reXId&PIX^wJ<vi
z$I7Eu&~qW)v&yp%kXr3V7G&>`l$#OC$D8g!ql>_3nT8muqy~_$Otsoc+@Ybbt}9c<
zgJo+0qHEDh6aDPP!{O=XK$u&%zM{=Q<7(`xo&MC%ULx}TFBm5t|K|a2FBdbBhF5TD
zSn7uQ^SF4ic5$bfkyY!#vY;SlDRGth)>|OGyEo9IIE%yj=$C^(uqAPILc332c&6@5
zClZw_2H<D$#(MyIDH)nTw^H<$7!3eg&03l3ZMU}V&x$QHw-4D`GykBp@s2LLdNpd$
zy*qYp>6HBQzDa?QzOxZ1BQQgHEhTi%yD>(fR%Q*<Iz;aldl}#%kD+d-*yv+iH-3im
z4=*~pHH6#ox~)#$Q|D5BxUv^#@zT1*R=GF%tG)~ux%4|Cv~m)*fG+bavcz|bklsxd
zG;3)Qcbu{^jj?-b-B-}75W;qk6WDcw;gtByqNA#ktumSxILc@d>pXE7l0w3FmrUl;
zr$PbH_X^JkiOjsKa^D`y*nSiiYd8LOZUU&^PNfJQob8{+H6?&6XcnaMYUO-PmcHBz
zeqD1#{<VUmiE2b`;+GS|=SvaQ{$GghfyBJ=lL+_QWKtihO<HENSeQ)mU@f2wUeY_8
zS)JA1bd5Q^%W?7dsk2MDMk@x(q|Mq>ZaKsUv5O4p4B3IrO5?`TY;eD=y^Kspb+v=X
z2sXeSyr=F@#Ok*0&g2)y>w@0(G`^sGUfRvP$!e{4>}Xs8WAPApY}E(lUpYX&?y$Rp
zy94~kojV?|@z0GUtmr%Sf#PByH+lf=BX!v!$}^5HR(x|moyhROK%Hu&A#g3L#k;`I
zJE~5XTN5f==JMyH+_alfmD{sv;Qfu!>7=!eBn%w3d^G5Aq+4WqV<J=Ce|0W@oL8sE
zmplI9E-H7_m}x!X)a%cjkIi7z*23B#$cyx~KICm_zdP1nP2f5&a)C%q9w$a!g>&|Q
z%ijJ)TK=y?&81=}0N!p9&J2{jJgw041y`%LgT8pBhJ2&?*`IRMfw%dn95QNF1wm_|
zFIVxv8a0Dt*aq2|in9#?y~_6=H@Yy2w8(0w;VN)9T00g|Y2L0-zTI|naH274*hp0+
zW|9C%J+pwtn?f6V)jSj6In4%=0yQMp^mdtv{sUm;O*9_T2mgd4JbK&w68U;!YrSxc
zT70+}zEG@4<=^sWet(upe-b~%-0$cy>(BlPCM1E{tTWv%Y<{zk)zkm-!3GdnWZd~|
zZ#5q$rI}==wq-HKRqQeaYMilYmQqiI-aQB~Jh0l2Y)MPmCAxzZYZm*U+j0Pf?{$_}
z?C_+#PJ=CM%@Nt3q5p-DBLG_>uZQ}1=K#12z7Gk?m(VFxS_)%NL;Ed;1QlYT8QF1)
zlt4H@rnBR^l7VhbwCiW#*L(NVy0}jl8f$`=+6Is_-c-9ZCn&<J37ZWU-bl2=V4$-R
zJ^fS!8VP9QQ+8VwE1%n(9xLJos}_(qPjHD07@k%LDys3L+R~8OF!>;qs@uJzmyL3d
z7Bao{y;iV1EsfW8*S*+%5NV*jIGR%CSx<?Kl$<i39?Va{v}Y=+mS^jir`Frpujv;#
zx1K7Vowju%3ZQLa%u;l$BYwCZX+D(bS7<(1*Mzy_N9X4(5=CUs&51a>V6pep|Mw7p
zCJtB^wOF2V8#U!p%|l7KmiVmBb~i)0!rRC#dIv`d&KrfA#ltq7|A)P=46ABg+g;XD
zKnxI2KtKhh5fLN=6h#Ci3_1mo?(T&OC`bqbl2aO`yTKr&yGy#6^aLhza-LzVz0cWu
zoxRs${W#ZkzJKJHW4z;ipS+*@b}hLYV+>=?S+}}0Ont&HXM%b5?OlK&G4M<eVaQQ@
zBWwkz{NeaibqJFHPNGZ!IH=J(DqULuQB2UAEV(k6A%NDK7D8+|@hN`RiQLthp0=pa
z)to+|o%#Ivth)E#7Rk=8`5G0bTbrOSX#{NdTuL@`f%8Otl<|Du07YhbTDnanf9IG7
zRjTwr5&LsDBsza2kC?^T$Y`~{VLwH{Q9Y&We6uO%hv#3QPF*Nzt9mK5ptGep>ieMJ
zN#hbiE%b&{d#-1?4LJr(cVLd)P)5qBmynG4L?#<>D2+=@_Cf|2{(5PU*41LIO+a<H
z=M>j`?=7G0Jka)QY8T>oG>kH>&o<~t7Ry<4SISP&#$pF_1sySY3xW<+CBfe<g{vpW
zok*U6G}G1!oPd16r>AQCeU?o^;jbHt(WRyos#dScn=YVIa)xhs_Kt{p$I$4uzGku+
z^^pqXKNtjseYclL9uphK_xsS-e-Zls!JmX8HU4@>(*T1W4`L0a-1l+=LZC^K-!=G#
z!gi<3*`bdEi$O-ejk}*8558h5l;8B~u)-px_2Sp-DrH8Y&Z{kA>kCh8=d$IJx7PuY
z)=JK<Y$OWJePM5kG}(L`ww;p>EyAw&?RV;~z^<5LGtZya_zI|h_|D5X^g3X+1ujMd
z8f$&wlW5}rizI%Hqc~Gs8>0;@sz%M9{VI%HFS0&dNKRMsNlv%1)&?1sOM3o->)nbw
z-5qHqmlkYCm+R6q0A|P}DtJI~+i*!sCF{|PQf}8M+LO^<`wj{lo#wZB>1gz=1$+vr
zh~M(I{GEN}X9?#2ZtMTuZ!aNay`ku+xObvpVUmN`l|BvGjwdG1z2s_oX`g~rRS>J2
z$5O93U&Mhc0%vHo&{|1DdGTW9($h0Xe^~f8&1=9vG#ED2-oCnAR=aWGe0OU8zyz8K
z%-Ibr)_6TdDXr|uDTonWL?-3pUmjA}z+r~w0*E+P)6wq$U#yfJj^lB`t##R4A7ANj
zf^tZ{lI28&(M~QgWp_0#hi#wmhF+*#iek&Ry%qsPpw7iu)kraqBiY#AT*>b9xn4yH
z)m1`38hF^Y!|Mc_!R!^I98l|ut6Snb1Zj`IIwYWRA@tS%nB@7ZMF6^4qy}J(R`UwR
z%yl*-+_A569^8s@G_LsaiZk70TU*<B@$GfjF5`i!TQ6zmyL`yfGHm9RljTO470?Oc
zVLcT!f%mChJ1(FUON*@gCxO>iMo38?GXU{p35beymWnl<zyjpD(!pweMyPyqVq$%)
zO$KWXgb@4pk$mbRy^5$k&I7*(vX^&8VLh8`)E&%yb3sWYQo)U!MMzC&a~U__3uPar
zrL*oho=U=M#e9><jwJPlj{9#uQfQ>*_ZM0gqhKq3DZ4&Ul-39>Pi=4EjSs$noK70@
z0gAhBf(sE}P1^+9@XSPm8hY-8WM189B#~ZWjx<Dy8z>Hq%+^|zwS2qw${8fJ%t7q7
z@^S<WU;n$^_9uSkRu6jOA`^uao&y0e0n~`UyF|Uid-UijgZYJW;YxF1jqEA|b+yks
z+doVdRv7#k!e*VaeM(2I6yU0Tz1AAa(A?g}xoiv{G*m2)GVUqqafa{%A=ys3^RBIb
zlJJ0Hkx?NT`*!)oJ<j-A7R&j;&Q!I?K9ll+Dna}+*E!6fW0#43XFbjdV)FIwjp}o0
zv$N^tc|^>pN!N97&?%2om5*D))>SCZmon@tFpq7B;I3=rPkz!D1zJjkvIXyzxe*Ex
z+d;Rdzp8jjM{e`@o)WC}AU-wXlBSSeCgr@YB<yq@#kBDiLe}g`Z}LKZq&By;hDM`l
zSyZpPksz*&@UiT4XKdoyTt}V7*q7tOE8Vf$bD5di#v^08DL`yuqO$mA->*lqd?N+K
z=3>p<XB1QyhE|{s1N9g@?sPQbl|w}lGih-_54an4>!rnza&N4z>&?ciHuZW`%U{mn
zGt-URzZi6+jjG!XK^e@s;L!`I(B+rqrP_(oJetj4pXWi)CL3RrYuKZkEMK@qp=uXx
zJ>NNSf^xBvLZh3-Qe#~st7~1e;E9V#$FdC+|DyWxf!DipZX!JOacb{+AG*9JD;|IV
z+J2k!Z<e-M4ec7Z@l6^ooAGLL^Msh}C#Qcs;?muCb>&X76_Dr_=-tI^l8#pQeb}=@
zM5PB>0UfCdLl)zW#)e%fnH0L^nh+qETch<IQN&b2{Wt-H6FBVv(O{-Z_!Uh0jfeY1
zy-t`5vuqD%d2?hT$O+7RcV=J^yIL>OF!%GLoy^~v3F9{IoZ|}yo`oSs`GP0R-x#fB
z^V2l)uRrzZTy7Ld)f@hl_i*%<qb2^TBk(p3tb?oQ`Q*x$30xnASckQs9iqWzLH*`M
zN`ZVWQLIsefg`R%VIIhFS25TwPf5Qon6Re^T)`6##i!w^%%6k5yLgE`i00IsIqkVL
ztv{rFR?IUB?Tfk%tX<n6Z1gR$fnwXcg*05$n~NVy`_Vyws!`6ZOTP8&ieBH}$o!o4
z2h7hdrCsXwmAyG-0t;-euES@OEj}JFpZ%VJ>LH<)a>UBt&~4a6LRlvay_#~)M0S%=
z`<GYifa&kX<FMy^-%(6qS7%`?Nx{z{jfzsk6v?omAh4MmY1Jxzd@Yz=%^*@BN9Oo1
z&5OW8CsXb@SIfd~yJlLrChw^ADeyR!nf_t@RLlBA$rU4*V?Ewi8^mEc05h9ZCIu}P
zP<)Ir20ionPV#j?h;Q{hfl*&iBJvXL8^0cvHs1!7m_BPCDwSCt%uQ;?Poy&4zj<yI
zHa)&7TxWH<CU~&ap=T`dLeaqEvWtC4b!z1pi@cLjS9?0zbf`cl8EDzQ?AQ;LIrHdU
za}CEX*D)=q%{ngRrVSJ+!%QG}rMWjPJY%oK`X?>bT@YMEU`!*_=Tb~jLU~g-%(*<d
zclRpO-rog6))`~KQaO3yI@8pRKYJ2q`w1zB#YiC`DZkBv7F2<yf_=8Y&Rp{VF;M?A
z^%47b?-lMKp-)1Y;B*_W`|-J+(mp~mCM}rO&4H5?U*}dnlwEz`bi^Cs@<{cBJMGt=
zwM(ypweE%YGY9!(7E%p`HqB_B<nZCXeB*45qtqEOmEHiqs6_I@yBO>!X2^IYm<`CJ
zrGYHnsde7F@6F*PWJ<YbL9KW$ZtsD)oO_8%gC(1-<0*h*&59JT>2}4S^FcDR2gU*4
zESiJArfMtYP)zd23IUeGoB%B;3hwZ$9xQ{|<#s;cSKGz8{r111l87O<7S<#Fajm#)
zh~uUY*AD*)7yAcq<I5AIQvWghR^Six4IP4aA<2*V9ZL2GLHK|1R6TNt(Q(i%Wd9K#
zn89Z)ivHC=?4RS_Ph=ZMek|*?Jft<NGNjJ_y*2v>5Bgtys@pTL1-GBSkofU*{&Gll
z>b<S6&F`EN|HX6v`#<q_K|)d#gV;|vz#T@|-RDb~F8}P${`I%%b{JWMryu!#%5pqH
zTH&W=8+!iwHGi(-mzT&6sVWu;|8Xt40c4S`NF4du!vFWr`)~Kn2dJVpj^<LY2><3P
zFi#*=%r?(05@SRvp<QR<F*mDt_B_`k0__V}_6LW#ZUu+Vy?RE#fW1h_L?6$nkG9%Y
z#|%VF+U7OdzrWx34zuPE8G<cD8#-&`H*QXDUEP1^7~Qqse%Z4Z`9fA76iXiTrgE8o
z`}P_g)gAzLFuuF-^ACRi%m4n1P7}C>AqKB}`rBtHPQpi|tfc?)%lD7?OIJPyA`$?l
zLhk&7G8>)h!_+}_?{okCJ^k}DfBP>b0@$)%;tb#K>1`I_A%&zA0o}p>ZFT<K_1|vq
zf5!3}6(9Be!`uiN=~Sclns_lC|Hpd&xhwwmiyJp9JS_23D&OxfOfh@!C$i3z{FZ-t
zp#T2HuZf;GmL_}Lwld<!jarbx_a?9T&;HrF`@V<1{a27Y9Mkv#5Tg2ik*wq3-+Ti2
z|NGneu_OO+51RAj#~?{Wr+0i?KsRf3I$_l_n`j`oJ9p*Em5HWEs_-j)tbjt#ZN&ca
z*VlN@Uc=%KpWKN?>(a}7`K@Pf!KhCRT=g#W%<5%Cm0W{DvmfuM-aW5P^ZjYAjgv5*
zO!E&32_aDE*8EHyqd!^|WXSng^5@omFELs76ASQ<=lS{D|NN7bj1M{JGH*WN#+qj=
zV`F276citd693#*Y_eJfpSCwMAJvRZHJ3TNM-|uXVu$V7o6Nqrw6O$AkUmKuEdrWM
zY;azS-qHO0yz~ArXU)LD!4WVUFKMa$@rnBqfctNa0=qv<ZN1av;yJyGlYQ-N$^Npi
zOAL=)c5WCI413&#0(O#et}^r)7>E^bOIWDgl|WtqhXC2TpN30bgpNS&woAZo?j`Y(
z+DicpOE98eSr1F5k#9-?B-2VS)Va_6=XL&hy?;GS%vm2+r`tvYmq=qCj#g#jw`RqB
zfRZ@TpyRUQ83MVa+aC#EKtk!Y%@a!X?Gz;K-@7?XxVeW2hQxgUDN;SBl&#gfI^B{c
zHLKT`AjP2gf{A1|d$i}!%bnG>jk%Q<Eji+W8*(_1zp<H5Ql?h~JONL@%#UXYx`ix_
zgiC?QU~7CPJsgvUa4Ifc7g{de`sXlMaI<crA-3igm1rq3Pm-Db{h(j_ZW8?QI{fR(
z{O>>cz(MC9aVA1gSNcvkKlgd(O&y@V<)!2?I04dY&(}JWsXCJ7yd(AkzV?JW%l2L>
zo!j5{isl+2z3U0GZSlS2<ZSBHFdX8el>N98`uen%lMUXLL=;s4@rC*W0kz8u>4QD9
zk^f>I{`=!}?Dqa(is$};futQ4?{E1i=f*5J%!=ZEC60lq{meo5x`C3rRntAr_#?{e
zyt2+jN)H3dBt?&loA!r$_(VA7d3Nj|>)7~sWs|*qrd>^dBCo5<HZQafaMOuz@-?rs
zDwXgCOcMT+N&M5MPnK_g02C>>4Q>wbTWdiXO#3r2&vRv<%YnTYD<LgS-?Z|SEP#xS
zBW^fE6{IUQ?hSQ+`xH$!5=P1lf2T&3qRYV(<CP#jtF<&DnyJ?^@};3c>M6yEU7b*i
zL-czHfpo$f*+3uy8vD2*>@GJP17&W~_x`j=vd5p2k?0H)292t5Nq+kzS*HCGgo?Ls
zkS_;UH3^Hcs)cQ1CRfFFcP2frk-YKWejxSv#90dqLQm!gtD5dNm7scW*Hs_zZGSwV
zbbGRgs3wlcgXx5`ygs>3%%6S<|F9aGr^y*9qx@;}{QVzzXu4ZPap^X!ceKndN*Yan
zUv=w4W1fuk&Kw-F(VCGRoClqEb;6U`{b{58hwh6%Bov)Z*-9E8dTQpre5K>u_dT^J
z>=v_!a4%U2<u0D-?J^-NhhFrhl-mU&I^7JG^xq!W(Cs%(_gqa<Hn+ci$~x`g_K1QG
z+=L7FFs*#Q@GkE3+wqo{fZC2krvA-8aoGRZ$UY#4z%)oFu|DvxKjuG~KSd_E97|=w
z@!g#H-?y8r5=4&=f+H`<?B=NczD}C)aJiHdKtlabcl^go^B+9GH5~}&WR+}cukONE
z{A1DGf=D2;yJtkXtGMO&CkqmV*z^CVO{bJ4_2!}wd3`vl(*!fCAqG?DlE#Hl72eno
z-VvWQ${6-&$&yQE6}#v2k44|bE@hN~ovviC&>U}hXM1}k#|F*S_?#uJ<b8Xv#+`_h
zeYS(_scit=JGs8frQ{n&xr>kb#}<{1f>bA~ofRVO%cq32Zdxt$>lCJfo*zN--|_*9
z4aoKPvs0!uzqg*XGhUraQp%QpAqaUPi9Gk;aR@WQAoG1hpn6&LjJ}O@`O3&P5j$h%
zL0HO9?{EEnQg`u%d^VJhSluKE6>f)>Eu&j9K@^C5R!8&`nT4gL_DDt3XxkF0)>Gmu
zFTr7pW;a~%1Nc@jFQ|-!)7aY!i-D}~s6zRcoU$&+$Se)*xJ2Ylx9j&MX_UKU<^flm
za|vd!IMYgB9SF^@0vpgN=pS?3{|d5B&zDB4t8Lp7M1e3j))>2fH&HtBQXdW~;+*;;
z6&t`xs#Ur+TQ$+Z;|Extn~+g?<w_j}I_c2CA+yiKvB2L2`AYyoD62i9i>j;&Hz7IA
zZxlM%l)$Q(L07edDPMwy)U7t3E7Fq#FavKCRu#c#InpL`p`x8>C~n1Mph(K7XgZ;8
z!0$=qdBez!%}GvRnbvE|GtM#SU}hO5%d9mx&ipqRm}|Gdx&(9FfR1FET5%On`m_bZ
ztnJI;bLz}CzX^q#xzp!-?HAr*ilXL8>1OTCHKbM0a5SC+<YTlhk`0_Eri#O?_gkj(
zj;3Uf#F6^?g>pSU@xBX?IUCq>H`-)>3sI*$j^ikx6I|8E$T1k;Hz`}o>$abalzi~!
zimAFPkPvV_`tnt)=_vok*Mi}M@L1sOtc+@i5)?2g9-n}^xQe%+q{tEWqKyDvkV1)t
zR!ZokX}KW#`k=Po>dM-cffK?w-V5yIbFEtQFu@pCupDL>1H^j_jhm3l`IhNMo<f&m
zO)@93t8=G9)LcY!j5^*|<atxDc>!}E>#u{>3Yn8HI()7SP^;PY#8>3ixM-Mt+~l;V
zc&^oi)v&r7(SeyG`Fu*gin&hVZ#g_0C}eAExI?Kw-Pc8MeZVpOjexC5?^Zy$Dy8n)
zyh>7H)+aI{J9H`U#8j*nP&LFie$|i>A}gLNGE9($mz9+ewSO<Q<(#?sGy_G5^4dIR
z(2sugt!7O_gU_fR-+7Ott}cbfKzKH4x8P3E_KW9sz#Hm<p|Yiq2WemPPv|J9p3+^N
z4t#eX7|m0xLGe&}X^M2`CA?pX_ghoV(dJwFiNU=kuo0I!1<*G~tE31!5a{9P>R{<;
zX0+eyUVLz$iC?TAUxI98C`iv0+oI)X)NN)51!?S8Gn3>~dzn>&#z*=725Wf&Dkc8o
zRCh0`4v#L4j;3asRuWX74%f#`sF;cZ0Rk7Qj!<E$#W?@YFCVWTq^0&e?P6zCER}eY
z%f{&HYV%X%MdqY?_)u25R?9q(h=^FV6dxv>R5QE2oiNMZQgAo+B-i6RssMWr{pz_*
zaN4oo-24;4g<AuVpAe9quh3vGV?6JIx8K@WJm>dPV4)=0zrr53RrwXWAceMGXk}n8
zU#`{bh|#&TWnlrAabH?5FrUtj^%debDaHBT=>u#RQ(D3H@~S0C_u`}_wh}t-CrQiS
zoZQ)(6xN;s2I_a%s_x8|Jmcb3%N96t`-iuQu+`G=SCYXKRe_&9DhF%_L-id8e6CbM
z%i;CrHh?L_iaS#;p|I<M0_**{=x(dFhLK7N_2<}yLJ(;^i4qdd=^8f2d~kE`be!kz
zsvzznzKv#xKE5xl{0taECUSPgW3H}K(FNnd;aqDPv|Q)m<)d8GffbHA12)QFF**Si
z_|?5lTKJsHTC&4ZV;{N#)wlrpcKvPC0QX`PZ;C>?TpsgfbK1Wl3VVA8ys!=lTe9qB
z)oAg+1oKvc>O@a`+oZtUNf|+`(F0(F#i=S6d_vgDiswr1E2lg9(JW1A`-uS<>=IWf
zoS(}>Ms4+z=I9b2k;%IwOhK$rFz+ic`X$zvImb&k%7x!oc>PU%>7$p`G_EnSk-+6#
z-6BREHE7sTWc~6q#%5wOyXh)v^=V71twIor<8-Q!gu>BU{R+@gSDD)Mb0TV~gH$V>
z1$qMsQVykJegj<B_Z`LIhPxAWn?y#VRwjij_ucS_!yq<}ccNQo51Hs^vRh?WnfYyI
z9wg0wy^g80pNtA0loYujv^_Nn0*JS^Ht|@`ibB_|`wq@E8h8@jHNj%pK190cNWbaO
zoxUZMORzm2uo_j;eWoaT9*5Q0mJIVzk$F?ZI&NpxwK}@;PxcpNxbCbL?YL7^2-*%s
zs-v7{^vxS`yT}bN(}|>7lc#Nvmrsl?*|}b2p_58T{B_^oa57&rK@s>)j1HLuAPR+?
zmFJoZE$JT~5<g{zTQhH^m6lGIBvJrAYub@g%%Ie4uHN8T<vas9BXZ|PUa%7z!>jnu
zH$1DN92bJrDGn<zQhNChiIccwh_@w#3Za}PdNvwNUGD3>gp!k3wiHiee>ji!W2A<M
zi`dUXzlTWNex_$qYckT7ou}NB#_3`sepG21r(#-u&X?ao>Evg;Am#;#404s?`#$eH
zFU9mE%J$JKj%e&`>pG-^!dm96NpXDFfzM>p{F|>&nhjW2R@H+6JzZ?o_>BKBE$3Na
zr43k$x@>>XVc=a`-raH+oXGsj^0HQVYTnCt_Y)H^!l=u9(4h@c7ha!go^qafH@y}g
zqDJG~sGOJfL<c&LnLSlh@%hLEnB7+4q&9%wTM~4<>+v#MGqZ}ok?fr-I6oGM2og%7
zDGtXdDkW>}E4aRku<7SnjEAECm*oRYOc0+bFKW6hZ$@H-p97&^NxPYQ%#HKWdk}#x
z{ribkewGt)ezf*uuk4Jb&P}h~aCPNfpYGu*Wj~qLoTi4gbFP0wqR{M=Eyd-D*KG__
z(~1;yn4>|L7PF2GCz~eRisZL$o%JYJCg=Bmy@Ya(B2Z)Ot~m(ITIB*8Z&y1}P4g50
z{CMc#+{bpMdOSoeF9mhWX9RI|j`M}Om-X6{9!!HLbmbjyFR=OW8_BGO>%ea(%^J9;
zv(I3Jj~%4WF*+hDNpf*%KELfO!3V_x&4*hXpH`au2uQ0EyGVslCxO1}b~?w5>%+q(
zvuUeEnj6<!goYdpjac85)A7J6PXP<x5^Te&h2r@zdC4bdY3!y<85+mS9MLuPn=f36
zy`e9!!jOFLjNspp+Pi5Xv9}XbFo30D#Hf0>^oTbgDB}dJ5%1_Yg5sR^=Fq}6_QhiY
zo?<>nxg>Po2EIk}ei$EE`ttc`2)}m_fr8#po>YAV=Q-e=r3x&Mx~H|{h%OW>5j0WV
zVii_>2++nBi<QSp?^%=Au|u?!`_RQ4rP3m2eFe6rP736iO#u+>v{w1PBhU98<!6L`
zxI)T~(PuK6)BKmEh3DIIa6dzUX%;ActGn1g>NlTF<pkB$dtI^+6wrGb{i5!mf0No}
zD!S)ELwn(7XWz&hZ9g@JWHL%woxdT2I0UIe+5S2r2=8S=FEQlx7}VX7$se*;n9KNl
zB;JE%dp_DT2Cbw^PANzr()}n<Dpo!<jMIFi0tuD2oTNNhoB%%9qCcCO^*~A97(~0g
zJUx#z<S2nuc|ULlE_EGTkl9D$6-?tecii@9$%PqUezJdUT=1z)M(ET9YFE|X1wUtO
zRi$g;<x+JZirZdF;qpEpciE_&G3>GlHBu4;@?JVFb%?jN>Ac2<>y@&z)v?-sf|R8)
zd<?T&;*~LO$5^y;MfSbF^EaGW*fh=uC15?a?7rf$qY=W9kv1XE=(p#GT`R61oI|-R
zfQLTpxD{G28(6k+w#X>oc*4@+YgyMrPtng+K3o_Rn2sx0_F`#mGQ6ZZoQQJqB5&Z4
ztd@F0U{XBld+9~kWdmv$Vq=!)fDTht$>w8Vm!jf?s9~hkcBrAf2NrE~{BHWA&Inkf
z8%Kps>h3J1<e*s6iufH+E)EWYtFOdHUJfSeOgQ7#u2h&}`nkUGXsmqQcl5by`MUB}
zApqauP@M+vDUNpK8xL0mmC;&N%X`D|A-5`qJ!!%^=LciOA|gbaMWDd14V*g~49O|y
z6G{FCZ}e#Y`}zoOtS*fX(Q7iKgGJ#<ZFlV@jUfMg3Q&)60>A!hkzT>4wJzf4d%9Eu
zg(RPlHBPl9cJFrqg#M$m^L=?QAbE+i+*-iWp1p7((daF!0bsi>w9I14y%BStYg#<o
z$h({r+d2zpDd5A4it|iIuWrcB<?m$u;*E1$AO!`)#}0xc@vmC+i|4%>^z4TTfBL!{
zJe79!t-ieZEJdjbpxBM6%c~P%SRZsmZS+A1C|7L69P~Iy%F+6#1^>MS^yk0$x`QO=
zn>@%mSaE^5iK(;cBcILGD-ikkdE3=_$}|)0f+aJw9ORp<`1<i_EB0p;v+4koGA(fr
zpRN|E6|XOCz2Rg?qZ6i!hD?BSbC!vrv&XSXaAe+mv{hHbnTs0{_ED$Z!VXm?y*k%6
z``un!$-bDUU{yQ@MC|p?IOz8fBt|+}DCc(_7po}5HL`S?eDVL-f^Kq^M$_6TrWedc
zIkwJ%1Go_BByqT4p-9V^f<v8J#kA)P>Gs8$AO-DY-_val2lkyg?<B-Yd0FxCYYhNw
zlMLAOFd%{MAhY6RXSk^s3w!z1QrE!)6t8*Fan9kvY+5kK8Jh93zrSCvH|gQym$rjD
zbUYw_PLc{5m8hi#4Roz?5btl{e|~xY<*;X{A~mEk>K<q&s=*kTnz{K75z(6RW!2%C
z<TS5vlLDdCY|J3GVhF$FC$dKL>oNMHguha!yfAZ5L^&`^^DcB-NfT3Xdr@dmo`S*!
z%jIg|kiB#Si$li%$CP>BY1=9fDwC5?knjdLA${Az+Lh`PM0^{Q!l>u>0Ysi^+1?^n
zoti)N3JIic3myF)yxh~Phb)?n9aqONT?&!UkZH*)0vpDYC(JA56vWVNGEF&BBFDB?
z7fypvo#Mox80w`T5Q!zA0MZmbRiNX!%1;n`a;>*K7D8b6Dv+ZdFmG|Eh{L26P4x1v
z<+QcVt~3d7{5nv~N*9B~<6Q@7nNP&{_tUN|*O^bDkGxpnD1or74HXML=j2CndRjtI
zjeSc(0F}0;AicZ<iGNwk-;2io`HR=|vIuVu!8z44b;fld!NB*Wyh+`$$`NWn(}i%<
zzr5lQO&{73TDi*ix*YgnMNJl3Z%6r1@?|xrm=uk7@~#(*wmKS~RXuYm5zJ`Sm*eMJ
zIRihq;VCqzRcz-@5>c?e%patrdU}x93o#8%=$+Z8nLB$9#&scS!c}ZN*YsKyl_|9+
zjg6w!P^lOUMqV5Qzf`amta8cFaSDC3T1e0_0p;z%La!Z#OBAlm>$CP9b4^S1AoixW
zI$M6?aK!BeHT%tR^SXvBI#IN}vx~R;6YqqQGzqR)Ie{dr`<<ba0zBZrLkeww<Z)k8
zFs*gz&)N8mUU^)(y6op#0ZGTB8S=xAHz1BYXMbgxO*z-(G_FxtSeeK4`2BJm50D6-
z#td*>Y(pn0Xn2#esiXzS1*fMNz}`<fwpVl?*?!gs&y6_={-j^8@hIQ<i3Rv)vz2jg
zujo@U=KIZ0pw5whwa?5wt{7Ny>1}%K6Yn%ZP84vkR7QY}hHC4Jg_z8z0~3vr;X=Z>
zw&;SH8N=3DZnCtCAY#e8SwX5j*UcGEI3QqWMs4v0eaRYXePkC<R$3*O3?96j4_JH(
z`8d~mhzvSeDAQz>M?d>ry<}3jmIoCG<pgD|j#$V1H&8xP3dOHQmsgfy=R@8Jm=2ck
zCO4g08q0WCXFQZ~H`Z>orCMv&IFIRpE=VhxZ)a9N+Dk4mL#L0eDEC09E9HBBmVUNl
z_8z!#VmbW)+jfkKmf4?Num59>>WCgN+Ld2=#tNaj1=e<UD|`crjBUN7LO52+%LWe&
z>ZnW$gwhIU-sec?FAR(>x#E*$aR3;ve0%-rNReTB%`--NG9IY%Ot~&Gw4@pLZ5aCv
zwDBMnyjSTZVd|6P<D#R#uC>jMy~QWTYH*m-fRhtHioI}#_*+aF>5Lf^AdOmFYd1xz
zmhLm-6BAV*iWj^b(Wg#|cZ;})Z}sbRsf`}JfFdcjo|R8Q$3YFE{}{44t60nLC3mKd
zM!4WcK%toFgfGO6!$%V%C{;{LtyNum;@$TW1^o6z$hq+)SL0PKi7nJD_7vAhm|^;h
zgC2*OE+<x?J*Z5*IJK**DsdclP`FG$tZs0GkcVTD;3I#~={`_(@vX3)%EvAUj>LF#
z_)78g#NDg|u2{$;@C<m^AMWef;M+4lOAA!;O|HYvR(|dMb7yZ<?)UOwqDM&<VZ5c9
zKkUZNe;_0nL!sF>h5{B+WfKhxvdrAM535@h0BwHNYo_}n)k@i|Pq8}gJlpr$B4P5~
z3CPX9HQz~2`Wst(d2)bA3zRnX87n|yixP%iSj-9F6r`QLNSBI%T26I4)BPBi&mMKe
zJdC}=F``6mX3rQTE!wU<ebmUJ3@C??Z$)U58^<MPO}AF{IdOgZEG4KO<<u$Vb^s-P
z2s^=eGRB|wz5jMT$SK|}mTyQ>Ds_l9i{$3JqP?p+F$;%(gpWps-d!+lyij>><C;9+
z8W5E&=vlU$t+*NdiA;V_y3XQ+B21d`9f@W^P6Tux7!I(Ev8ho~8D+SnC={<7(5PW{
zwf<owZv+67u-exD<(+bF>wY*giuX-D%_Yc=rF}gBt@mr=(9ljnqCVltanVu-s$28m
zM=>MyQM>69F`m!RY>9azh^<Zv2qfj>;|uk7kJEyR6LZ8HGk3y#hS`Z{(25Mlnsn?x
zlp?rS90Dv9;C5n72G+E2Yn>{N<oXP|dGKpz-1saftANZJ!RLU;AV~_H>PK%8O+H96
zzje!#O7@B;iQEg=nSjGilHyN)hg-irW0}3SemCt*x0L;5;hWB^QjO$bT%$PZkIE<M
z?IDtT+!$6mcQa1pE5(U7tCbYyu+QVUHs(z+&(%F?@kEVP&B)VcoJH;lFGG^%zr82N
zWuPeY`oNle9F_I1Zb^c1aa6`qd!fYsZZ5Pfkd=rgF-c$|{oYrrqhLIl;-7D&&#In9
z&tuTfXwaVIwyPeYV%-692t|inuADP?kWRxVx|f`}wKW;ZGA6w)pRxRb_+a+C2J8O1
zq@?6_S_pfC4=AYJN}dQ;h!TCnw41ypLt-!K1=my1d-Q_VmMH8x$Vx8Ea}=gAiWZ27
z_7JRmfAAn#Is!oX1KJ4bi~;{fOP*YvL;>af^Zz-7`s3cX{H?ETFEnmKbteW)ihhO&
z$$S5u>`S;*UmiH~p6`Xey~_{$XA#6+e_>0W)U5T*50`fJhGm4YS7+K&SyVqJ|G4#(
z$h}aXgBc6T!oosMS7?HD<u&vcY9{Xn&$-`=;LgTsHk>9%^1n5dP+p(p5NMRJ!t0th
z2fx2G*~0zHpUIY&m(Ok<Pm?WNZ!+4&vt6@4bOIC+YieGMT@coczPiQXCj@|6&lsU^
zF~J9ZW`M$;9<Zz1%{w~)un4=;--8UdTxEclD3_L!i|r!B&H^lhKUtu}cN2C^2du5E
zl5JzjZdPIw(8-L#l7c_n5}7QV<pcdE?(gP}8Y;rWQvP~{`unTPc#OcZl}uxI;riUX
z5Qy{H1uwoI7a2bf-}f_G?*^~KoC=*kiDK*X(%)aoqjLb-r()Pm&i|nofsD@&Y9xP$
zjL(+9M_A*@e%a087b$oW@?+a5CL?Rv(PwDB3qMB3f+WbC?|!V^19|v1$a=Cqd>797
zHPS_0&Tc3Daa{MneLnag#rXsF{+D)rh6nPn56wRRc;|+I{QeZS#<LqxM$&U|)yyMl
zZ+_mW34CAcb5Cp+>-n}7!Sv^-=#Kn2nLJ3%`R+Z>U94xy09>PU0hi1FEvw0BB!U=g
zQe)3AySPs}Fh~UdW02_n#~}TWLHd8vAQ?tpQ&(4KRV}!PQ_6Z|J~qMbGp2se!omWA
zzW3k8CO~3*E3p6mp<|4+V6?|alPGpk^pFijjP%3+m+jvD%q1U2D!sL#O3Miq8M3fh
zhuKsL7~XVw0OU39z3=Y)cFi0<anLJQR1-8JmO$h|H#mDT%JEiPf>c-VxYCa}?JxK_
z`DAb%9kt1pd-r$hxFPif8DU(G#D4J)BGB-ce|OY}AZ2#1;f;b%Fgl~XwK~lS^jb+k
z+<zIApaPDO>kN?af?m}q2#nXUI)D~?CU&7XUFDGc?^7~=_NLr|U~VZRz$^?LkEZ=z
zZwd}yrEHhymEIw*iSGGOcEq~ienr3t7Sl2p_IGl-)l#PUKVv!!?K~Rj++KbVt)~yS
zVKvo!2E^IQdB^;3K(3&x*4N8jGzdissQ(FS4VKu4ng`<ad$PtU!#$ybam$$QufEGp
z5qLF*!wJf*Gh`c!IE;3$ZCl&*BHJP7RKCS1Y9SiF<@hgkb>4`I2aNG&IGpKf9i-q;
zKEd_4@y_YGY<kZGDsH2b+y<SjO(tuinvutnjD`utuhjv`;b~~QX?9|>A$_g}Wr<Uu
z9jeo5{6Lk{jb1ex1VG#=1wpe!|3hUMGdQf*Ip*IT%%4xS6sZtzFIvq1@Y9CkMN^le
z7@Kmubvq#8+B?{kvgn2IO|Gr{R7M340WxO5)~e_%$(N;&ZU<r}t$T#F9ywh$?zIX!
z2$Fx&PD`7Ub@Pe0Qk7eP+XS}C0<&Lk$&rB1B~(}RBZL+}P3Wc5c*mWNv1`*T=`X$X
zhorroF?}4w8jOAcPNY~M(ji4E&XEGPOn&UHEkXf1iDj^<ERM>5(Re_T(G1$~x#ycl
zDF#@drr+Ni#H9KVc>K%(S5OJRkvH&5E1G%FJM#RT{QJ~f@!+`^J^nbg`w#2&)&l-N
zsUNGLw=Q5cO-;IEd#xOEO1FYcL0xWUrtA$bXCAslO*s(|6r6L@x}9fzI`Ut490zK!
zHks<BYMT2Kaa1rQ<2awI5aIf8r&}-9r#7YhEE)7R?WW_8n{PyWCJda0N_T<d*AHaV
z4u#f^R()(j8(*KUZUT7Y{`5W}&<rGpGr&X<K5l(4_STwS>!Xf+g7UNU*3xgE5Ig|I
zS4grefV+?)@VpfBd0^EOsN(4}A}z<Sr6comW!uYj$ZOKx-dL)f5!%^aX@R#&m`4=k
z$`8TV4vq4jKfhhRXWO%RU^{a4c8H*)Uq|^9yUU^)IZSwi)}CJ7>7gCJ&5k#F+N$RS
z(OG=JFyVnob8Mt-<#90@B@<IK{b52GVk+_rQD#p3@_vHr&!hc><k?5bopd#*m+l#X
z!erqpR?_N{<N6%JZqoUs8L^4&$qJ@EFLjRXHGFzahd`kKhPFmQnv?w|qM>y1(xcls
zAYR)oPw$DNb)3sASo}mpBxneB@-P(-D>P|Kd5kpNm0;w8Fq`bW$Y1hAV9|a;+sU%;
z0!&RlRi)Z6Rt$i)xe^hJGlvxll6KrV7t@Mc%~7X?uG(}ztoC}5N0O~PFiePD$k&Jf
zl0o;!JTP|u=Aw&8zp$O`xAN}XICLaZLGG79{%(mltPZeu`3ay41j{1%xuu2Ha#q9J
z>S9aaftT_<X(Y;haIf#n_%O@8e=U}8SmFm<02QzVol^xhZnFTzNpImKz6B$%4?N7=
z{e-p{kMMr|O{78%7zIC*0|G#U83&+H8lbjgc`zB{&F%#(iJ4g@O70Q)usDTm=SBa@
z;v`+(E86r6u9dWWp=j1+n&~9!10@C6^Qsz!q2G{p$E(I^TlEOnj|Uiz0P*Dbx|X#k
zOGIz6t*Z4JH-oeZ0ENtZnJ!cV{wz=koim@usWn!|lJ9>u70wJ}$ezv-X`r<6L;$nz
zShiiNUT!>|X<rQ=>&r1#(HiIx-ae+`jI)M4!VzX%X8#U{ET;}lfx34Mn-7$(k+moT
zsKb33K{-7&?W&hAfZ-veu=9~KqO4p3f<mE1AlPVlb@9VKojkcSj$qq+RNjgIm8GDQ
zRlQd5B>%|=4h~=%4jFoC5q=%umg1A?+m2R7h2z1MRZ5^?4vgJZ7ie9nfpgOOvR?Pa
z-ds~!n5tuK*EKOQsRseeQrmH|km_?sg(K95cDfG6)~)x6NlORm^%scOqlASg>O%vC
zl6R6dM18`zy&H_d7{WkUOcF#Z4$UQcN+9`HAI2?ES~~1Om2j|A@;%pZ;L_6CYo@!|
z@(tZu-bXS4`@qpv{B=9<DZ=mLQV)RRK^I3=R@ID)Ht3df(Ag%{ac4OZp>jzP&QV?e
z=uZS;jyi18niU`y7V6D437TG+eK!<bw*^o)M!moSdZ9WNl<T^Z(`H8qCpxh(6FRA4
zb)BjA>jET3!b?<i_;gnALG7*(bvg0bTOdckC5-C=&wy2%-e8tap$7@QwiDnYbQYGd
z=u(RGvP;aVnBp5pB`5FYY-7rIe2#M*_Tw?`6K!(Fuw^$vM}!`twc3=#y>8ZOZ(}@J
z=y$4&Gb_p6^QODC{d^=jN-xi*I)cndj0{T1ea4SgSP1H(uL?1pDyEg*9A$4dOTf)k
zHwvJsq2+9WKtiTvTF-Bmu0bn`17kY@hie3MgnhuZU%_G4lGDq)pv!U-6xm||V>CTP
zEijjHBh-?E9|esJ;rVl$R1a6DT9!aYvswUMLJEwj>X!{W5$HI@H|w1F4iNaExDZ=+
zIRb@^saU^zfXCUSF9Z3vRohLtt4KV(V>!sCBG}&Ah-GMLYB1i^hUn(ioOTw4_{nOZ
za7Ni-0Sz{kDvpBsq?d7C&-s9iZ#JRF)x{m48dc5FH%4J@R>~E`w@x7VFq}%B(J6p=
zNxJ^EaY45^h!q~0#-DfVV1Rmybq#(m4w$8;;JF+wax&FiuLR7z7Z@OlFuA;8!hPs6
zfwa=C_Xt=idc9^(Ef%DUft4g4vxDn3G+%T(__}CWpX+he*XvJXb`DG?uKmD_Y7^y(
zANgq0pLK)&AQoxkYFC%4r8Hf~3{XvCW<v(c@d@E0ph{WaF5Ww2kDWLFyw*h)ZV68|
zx<zIB^2X6wxs)dQn-9@~>$lOEc}E-QnaFV3Exx@|`ijHP%Quogh%zlh^WziVIa|*P
zpqviPbj7<<NFMfQ<aHwhR`}leV$2|?&D@(D@4M+Glq%M91+}vrY^uX+EwQ5?a2Uzz
z4eg;a^Cb;0+6}2A<LXYs2M|>GiEP1G85D2gkbR{H`8v8#rpjPsjHB)C%NT|}OuAmN
zf`&Z<dts6*($lWoy1Mm7d!&Sj{iP32uU^oOjMOKQfE!slK>!1(;rA1o=uVO!+o>TV
zR=9nn=)4;(OrFLQJy->3bpO|*t{XR^MN773k~4cAhwGH)iWjs%%&U=v2V_<-O-2(3
zrr%Nq^n&SDHv27`q+DeNLGG`zN?hcma=wY$l*_WfLRKBS<WsU*X4v_rs`leS4EW-*
zl1)|TwGKo=ul+26k)pczUKbOX!RQ`!EzhnCle8Dq2nCeT=@%;yZ`DRr@l8gMCPq0J
z05I9Q&>H&thpBll27L7ZGPT%tJVdZx3ufLYw>H0Tl~~S~Sr($l1<Ms#O_SiT7@2)%
z|Kc9Zf<5@!IPO=s4y5L1O_cr-4`E0N|JGW!ExPp5@ZON^@mAhs(;<=Un)9l|zI`U%
zk~<dS?~?82Ubx=E4A}a0sXKEY;hXw!Z}vPa^%XkwR(NEa!@<)|W``*)T%&nv9&QX2
z;m=!|_6wkIc?Yu*b?_~`i5>0HjS@%u*c+<murC@ni6?!^RnSnIxq4*Y+OFTB&)B`J
zrTAjShn$~S0L=msaUVeCD*_ge+Oodo8wB5;<nU7eB1NmI1AB4`fHSUR(IEs)b^zgR
zHKl3dU@67}sH$;mly)>gl7l5D4wO(Y+6)<Y-3tk|dr7?}LBEG$GadkDlY!^OAQK{7
z%RGzL_~_9D=x}Ps)w}VHx}!c<eD9{?1d?$~sj(owb_P193Z3L)0N{&Twuvmh*`;Q~
z)NX<}<b74;75Vugg^FZ{9$a+uqDeEG&+V!Lm~!}C$-Tz|G@p^Ng#iB13Dzw1vH0ze
zd3`3~n=tGYor8yWeFr5ZC@r)(wo2!k7q8!zFde<~#FDW)Z_0_^dgcUT^700%0sBci
z-^)g1r%b8?A2|p!FSkD(%i28sN_Yoof;fqNZ_i0E!*Apt4ZJYb8q9e3nIxPIGI4~E
zFXagxq0Qo0piGs#igE7Q`*%T}=FjJ98PbGf6BF`D)(Xk;sUi*4j}D~}AbFdJJ+aUK
zIZts4*N{Kx#bez2SSW-nZLvM$q4@}4@Yj$~{z|{yeXE`_NyJGml&v&w^xZfb-xPMm
zl*Y7-o86_c&KrPl=SyvIzwKF?ioMY`TZ}He0N`m7ISY%{qM9>Z8u^Cb1_zGz%0z7I
zM4RfDZB|i@yk|+TuV1N6PJhwnfN6A+cCpVfX}JpPvgL>^#c(yz;ITuaDMGrBgoZ5o
z=9j|L)U@?YOyKCVm=6|CK8{l3(!3VoRQoQpiNT%43edGSJvt%XZ`DhAr`|sOHvC21
zldMp(F+!wY>?d>zMf2O839FeJ*XI{Ji6zk&4q`n0?3i$-JjhTPV8Uosaty->8aL3-
z2wDov1Fhc3Dect4%La6+OR*!yN;q)Y^S-ptIX`}8HLR=9_QgiwbPZ%?aJ6SxjOLVW
zzrBJ-T#lJLnez@XCP%G@J7sS@rZRnfYBVlT<^_VorMzNrqUPc7nWqchHGvlrn*#lP
zinBLt7FyTMpsSy0w-j(GpHEmdT6vA~Rq-Qp<#NEx-E2$P5$*z02-5-%m-X*0@9DpE
zAr8F#ZN%HJ&i7r30%h`gUuvu7>(hI%%j_&9X^YEs9Es)Hfmtwy#tT6mk_Ndayxv~|
zk^u~eaxD^efuQDj5P`sIwYk9FN9ZotY|2wM=Q68lS^%GT`^jlUdRyzvfq`OMKcJrs
zxzc8VRe{(oy=;pasIlc!(&^2Z2xPmBvK#I-nU7YHsVIQU9s!wHmeu^bE@JWSEQseH
z@QXu23{L&lIIU5Ln(zQL&JQlAl4LKW$FJv?lQ{&}LvVrdftjsJxTz7y`CmLTJ|KBd
zcVlrlnOZ)lil_D3UoAqXd?S^KN#%fo33ZXs^s`Z}gLqrWO~CNza(S*nfV~0kLpzzx
zC9=gH{dp(u;2xsj!Nf>%KVoP4QtKa?Td2L$-5nzBuWEHiT7(6h?C7;ASSKSbr4Q3w
zWh`A=PEM~xA{YDq*gg})8$N<49%iamEt_<OTp@DL#F`W*pd3-=w^Yr?<)*DIo@dnM
zMP6D{-^5IHThy@;`CvO$v|}gL9RU=s>4`uUEl*~Eku<jL5B1o8f(^_B<rNcZ-N>E`
z$l%1Ca*pz41E@+c&*rlLyo$bJxWuyQMY+)8wO(65){d@mYS-%ESg6v>dTTCJLnMdw
zSR>lP_z9y{cJ`3hl!ETxt*%Jh+GiYh@D36NsMq7}EGe~E1v5VZtEpo(jtH=>UY*`k
zB!9kO&RKHeRlTm91PNn6NQlB?3LpbffxqJ8lN*iQaXMN4eu&POe`~6KClEkb2o*)R
zQI>e9cJeh%HHxGu5DBEQe?)o5Uqc%B@OdXAENh+nf+-&RQ?C!{qMTcwZl(fH_6-A`
zZq29l8^BcT*bf1)`$XXWgY=%OFbRXJ$5rsXbF5>_Kk+`Cx>06<f~_uGhJ@W5wADo+
zljD*?k|SQwXVx0~^2)vF6t}?xqq5D3aTB?Fo;{GJmy`Me_3q_kF`A(1D?@*svZj1s
zQwPdn)1@)9MI&A;BS|FqUzI?!Akud56a>q<(bqhXpfpmf<%2i)0Vd@<BPBf(xc&Q9
zbKRNErNGp9HQ<9gG{$unF1RATKckxlrUnm~170}&mGi|zf5BQK8FsFmX2tX4)2#s<
zX>#&@NR@JQ%X?M%Uco1zY|-*;j6~|C(-FU_x;jU!dg^!%!Tvo7$U}3Nau@y5fFt!6
zFd$#s)~%17Z{zn|=fAo@!+SA%0mcc{?S|cXXBO4<alZq)Bb`>P6I1gg(gRKFqpsRp
zI7F5t5mRzYq@#;5Q3YR1R$6B-;JI0CutQgF4B6B*m~ZNY#ACkAST0miN%ngRNA+C5
z<I7DSvrmCLc{qey_bwNDu+bO3BEWJoZ4tHOLXzL_WO=v@J-BLap|}$|=}AFk%{c20
z6hj#@O;P4mp}J%S-%1@8%VTyB6>EKZwzD&__{g_LH8AV_tVWNSd#ZrZap3Ne>cTH=
z5WI2<v~RJ1n70xlkjO!r_4c+F>kzfp+3))ovo+OX{uN($2e?Kc5-4uI-Z_RB+;=d+
zQ!238-4eUz4LH=GT+uq`sFLiS*AQ+(-m3z6FD}#U<CE@(iIG|$pDj_W2=$FPsg~wI
zqluU!Zq`!Y607S6#1|!93YTkH&Jn0GqVL^%bDbmwMpBQmV}?G`)9GS&aA{4bCOH1o
zU23*!(NDJzOm0CIC04$JBYp+LcFocHb~irWYjv`LV89N<MkOL-meDpXLJMFOyN&Y)
zYQx`G;Ikm={X`_qH~w10S=G8j&b;Ed7;F9zkWp60`U!>EM{Tp87Id&e_=MbhU!O=@
zOn1d4D_#_FiG@g{67nt$M$KWEq3||LFU^xJ7oF?}w4fcNlp$DkdTjWdrOPx_y!*|o
zPa8g>J^UAoL7K)VZa*O-^k6xps3=&>s`_xP0DrbL_(Yojov}<Y&s*sGG7a_9FmiOe
ze7q2RqP8#pr6|{h!kh+enQbn9<6`4XZib=y{=AMXQ=x_ac*(=A=1P<j_iAC>`x8x=
zX`a4vel?9_MY9;KWV+{JniDuY#(1EqbWvor-!Od@A8C8^B_NKX)F~qRUYjQBl-=EI
z9@=5Qg+o)NYEW)k7~TIA5x8zz%FWY;76<g=zO-WY`Fw~TX{GtN0eAPd!Wo9|&3dO3
zs{!v=+b%g#f?F3zS;PZ;`b(a9OS89}+D<LNxjjw#^7SL73-vzS`e+T|;OfR$IVvtc
zuh(I=KK~U5hw4MQ!E$6k@Vr#`V-K`-#qlN2K>RTzZIU=cSl1T<vpn6}O{H3`6dD!x
zWsXP|3vNwmw=N!o5=$9w=C~p!5`Fsb|CRpZp3U(=N3_onI7ODcFRTU>#9Vs4Ir>*u
z>bXK)10`ohV1&uno4qKhId-hs848~gr!y7O)j3W23+_Zd@`2{X$9q;n03Y{;A;~Po
zx7R-MIB%`Kn8af+;ubqzENRbUefgQaJJKD3kVqS@Yqt(Qa34r}2*E_%7Hc}f`q~2N
zvxpx^F;nSA%JCY#gP8#|4E;hX#b#}O1F~59j9AUh#m`6EWaG923Q*4LJ)uoCs!?_$
zFUHrg0EVuBYC)v^Akg%j+$=BuD6gh`^e;N^PBynE9|<>EWIh2t`Sp$?;4ikNTr+7x
zD8QF93zl>}gv26i@u|r`aiSYR&G5p!fN99!?9VZo{-0&#l&%2k=J4&c*LQGW2m`zh
zeEy{@l!wirGli^Nc<ig4PJ7Z6jHO&%-ynTep5W}T{?ZeVH-pIe)+~9$IRf1;<srg)
zAJ;B$*jOl*#syHX4#lVyzpNbH*;a6Xtc&mfcIct!>Cw<h6vx`)*z&b(Vg<eKq`Ovq
zsVWg|=^8mEZ3(ir$wheB3MYR6<HaYJ5-l5jh_INZtw?cZc4Qw7l}GzsCDC0KN^MpR
zu+6D9b)|yD?Dn>epI{82b6GBTjmzOD!cET-P%<T#><l_C&9KBmDeLrENZV_PKBN4W
zU^o^u5u`rfsPdzwJ*R$>#<(}nI|{p?A|LYVr(a%sK$nq5^dQg79fCSB5V)>$?(_0E
z6#*LD=J?IY5Ps<v|7T;@a6nO@KG7fWi$_fKLC~(X-$Ki~D1~mS!qlQUq(!=0U(Tz(
zt*?2kbOvYw0EAl!nTlLeH6$<R9M<QQCK#azX-F@;$zXplz&2Wwi8Ae?Uh~^-NX8}S
zi{rj}!2GRPU!F17JdD+<rl261X3p!ks3XBjvj&t`E=vMTHWoP1b<*x0`16_1_x>9p
z(d!c_{u(zvh-{X#0qA0Am15Q$W^!ttB>=>}&uDGu;FwAIN?JF(zF?}f3~Ns|WZIr3
zCm2ZCbZ2x)(=LL<uKD0jnepcIWR%}ncw}FW(W`ay(T4mA^J-e!eNb6Xqct;jK*J<t
z)g;P=5(eReUCPGu`bMX;eQRF!lo^M=;nRjO-(s{Yqt$QOUqzsLb~603aoC{2kGW%q
z()UmxrBzUOmWt>s#t;@V1VL6$ZMFE(d>z%q)Gh`LURr?=o^v15l<O*o4d-{{G-V>n
z#(=*oIjxXKS}@h@?RBMNFiWS{f#Gl!PA}b>xttOkXMz6u(frGqau!1`9U&A9=(4Jp
z#ML`Mvc#%*QP|@!4N0LSc{O|S9A)lIyHd27J0<sfvB2|ngF5cNxQ&0?B1T8*)9YQ*
z@4UGVD&a)L+|Xg10**rY&lk?@6Ysv}Vh=NT+Oa-7wNC1xoBa^Rn>TQGJ=)?$6wP)B
zf5krH-XvkxAx&EZqfoi$Ahm4L8VsgU0`88*vb#wL%L>J3r48wOK)ywuUa~9^ZNowe
zGfQT`NL&T77MGlfPhFyi;mmc+0~c{2SAd(kFF=a}vuEOF2i|!*;am(|WIVH)Y!Tha
zx#!P6#Qydmo=NoPby=@_H^b=YBy#DVoRtr2eR$oAPU^VPTPyNo)3-U6UDF-ybfapF
zvO=Y@Bm;0!vm;tpK>WO3_i<oNO~g==>1dTtJji+NaTnVh(EBFA@FxgPe@al%A@rxW
zfqFUc!Ncy1hvL0LJ_p(TWiy`iFz+F9!#b!yjMD5d*xX4%sL<@|eA)W_s?)S+ED&hu
z22Z1$*@<Z#+c%)lF|)i@vMIk~*ySMW(p%EAp>`qK5cf<X?6Q8Ge5z*(v&knin}zN(
za_B;#>nr0z&M)6S)$Pr{;<7W2F|OKQuaRdG6vj<+k){nl6B&fX%xiC#!O>;_ZHrF+
zS>fg9M%`x4BVT<79LJ!@vC=zUP{7ONidid`P<XGZM9$&E?Q#U_9{MZfmqzP2QmiZ4
zRoKT_<nOd+Y93XXYA?(#5t?%)6&v6=F}Hq@BrU^WTtdG;DY~U{fn&`dpI$bTSA0uQ
zW0>$GjqAF!-tFh>mT<7M^gcTI2^b%xzIwCBYCbGUNPq>!YyL@lIU~KQ#GU12^$g0j
z_S1o`opomU_pHMB3~?_qjx%dBU6{Ufs97q3K-@$=4cW2V(|d<$(qv&I96}nu-0)kz
z)J#B;NU&)lY4qkJXbqhM8OD{VYQWFNU31%;w$+*O@Wv((S)>+$;@rD_kY4XZznJ%9
zKe+&OSMn*xi0Lm%LMS|jMVH%-TjRIwneI=xURNw?hT1JXc)!kNHxHK8nGQ)9MA6CR
zvYL`TXZBGYW~R=Ae!^;R*IZ9F)x*PJ9#QQnO7|iE9x(_{`U@<%zi*<i8gFgUgLsw$
zcW+Fx-2Ei;K?*jI;a+l){GCGzha$&`O=~m?J^@B}Z0T3O8aPHT%gEVPyAQE6k3e;L
zdE0WiQWtfq$+=i7zJLCW>a?l$z%v#-s-W5st}RIN<Z7q_70RNx#A+3i=rZfdx#got
zwd#VI*!ZuP$<20J%uR7BmDs&{&3N}-XYay?6l;x{L8%1i?aWM7kv#{K6;cDLsdz5V
za2vJXJ}(n$uuXlt;FF4Wl|*=+aeNa?`WKi3*Ucd%B|Vqi<-!3Zh-=l41Zlm@+%@xs
z{ml+U9#$<BvDX%Wz08buUUZu^?({1AMD|1w?_@pF8t;8+VxIGoK?T*VAZk9#+B{+W
z;Te;D{!{B91?rODr%>>Oo!4|hwWriDvBRSeE;kp(bpL$$Y{K5XOloxfpUI#E#VQ%h
znrU+%+}yZ3h5DiI8)IRhcs$w@PZ1G!y0^@^I8FvNC^uv!0Aomo9Uae#!9pvRU&s?K
z(k$>~K}I<s<WE=ZQ!KOqk&QYIHGBPdNE_<TW$41N<h>ldyM~+Bfal@m$ul#?<bo5I
z%|0qcl$G(Tr>g_U|64b`i?_k4sF~7|{a5n#|4efIPpTRti0J*YuUEx>mN)$SS)Wbt
zo>4t>+4o_KSGn1N`LU>h;&_Wn!lkWQklqruNjXfp5q3A-8GGc?NW+y<lTlzd8Xs~^
zm+&}zN-)ZnDs9nV$7Ok;;ss4z8IPI2)qH1zgHf~LzDL^y<}}voGd+@9>$8(f-NopV
zbLs1|hF3eY<XBD#xIF0+5+2C&;S5!)o64`g-Io}3$>j(L4t7CD3N7Kh*~;)vW%6N9
zk#%xQXRM##`TIg!-D`0;*=H>Ki*atxSb(-&ba|pypAX%i-DQ|m0X?n@xGhzb(N;sr
zriBKa@W`2tAnV!AQ^I{A#1k8idD>#y8U{*5+bT7|Y~j`BZ=K7MS0iCx-W^?9qq-vA
zqE)#UPu1BR0LlbgYC_<|fNrx!?0#Zx2TO>LO}_`rSY3#pc&f|zyWc*ny`{k=x~6Z*
z3>7z`1X&oo4&w7^B@`wrFmRk}s7zIlx)JDzgXQo&Ef5E>2aQ_uhXeWXVtzE2bQ`IY
zi#(1X!T3Kc282b0tJ#q#;G~cO$ihPKoy#vj(sXk{)r(03@9_LpFzky}JJ{X<9nw&i
ziF4h-t7GG_iut3^dRsi?uqa;$io(kf)Ja5(xT~6;+tn7idSGk4ROkxNJFmgZK_o(Z
z-C(PfUeG+VfdfXwMURJVPr_lVq&Sn5_1Nnch^VSYye`MG8}>b}4`bt|b!ygD;ZQB0
zYqHYgaK&#X-r1SsVv<iOSljl$zE5ZF4QCY^UA9wp*|@Vmx$S)rOT2lk2TfC|TDiK!
zYes#+yoaA1-tBxjM`KOSs?I9+{=u5v+*nQEEmTvKpy5^gTEG2093Cq;!>U5g!WPDp
zOVcL&+Z<oI=f3@<X>aS$1H}pk{Tc(xJJ0XN#yNZXruq8)zG<ea*6hd0HoxL9FX!i=
z-g?RIi>#k4K_tEMiZBKdfujfKy*!yV(5cqs43asP+c4rOa_cay$!hhf_Gmx-0+BTX
zOl?}EKsp+O%DX-M$z5&!f<};Z1n;ozUIUR~!rlcaOtNQ6l2av{k*1kJvRqB%d&uCN
z;z>6~@<SN21C!63oMobTjFn?BU+P1-#@pZB@3c57xawa$tD^P!a3e~XL#Ouj(iAec
zdv<GUGy#xesyxO;G&Zq1P?Un<FVa~|#kv^9VT_qO=-WucM5m$gD98-3L4hlmioMWk
zI^Z?4Ty5-v7a7adCq#RR6`D1@q10Mypwf02$+Gri<Im6o<|b%uwyO>t+9Sx()Ms^@
zqSU}{u|NQBog4X6X#OX2`?WtXCjXujo-UqnKWU0)*zt^G{Vo5Cy|<35a^2R3m68wz
zk(RJPN(2R@LlF=GMd?!MMw*GFh@g}pBGP36lWry<2-2Z+mox~>NeX=9ap_*`?DL-Q
zyl1cT{<r_}CsTnr?`Pa2u5pcPTq%~Z^SoD(kN8z?jiT0?)i2*#)c1krvR&)<V8UqB
z5<f$v&1Lpf0So%HdFPwRgd&^Btcp!t*kWuUHj?utkAKiPYLVl%#EW5Z6kQuEQPD=N
zdus6y#VRnnCi<r;#dKS&0Ru2x(w2GNC2kTOF|-ISYCrPSV=}EILJ?`N>39tD;wv1;
zubsl^qZ+h-Kz5Vb@6i=JQmKQ{9zG%b5!FghM`=~;D_Cw<jc5MlLs~%yHJ3(%o^jK*
zxUvi-I+2USWCx#I<1+L!?{FHl_Dhm82)<y~E_^X4?9i|-xgSPZ<4<2rrH!RyxMcKh
zYK%+w<g1Bg038Kn&Nr(T>5IFi+K89r-Qn0WpQniyH4OoFSDlEUMyA%h%l>A1q7V6#
zqb$nV{oOn|MpI91r&{@qQ=J!|V7hlv>sEb5wpr<RkHy?p<)QWW!zp;0QcCLTM{!+g
z_Us~?p?*UH^K(AR+AheVveU*)%R(Rnk~3&aMo)UCIT7|tB%c&E0aj+<aW3^{wW8Q2
z<!F9cXx`uBVU+hmKHM}lgYRA5xfjsmCMass>8*t^v7ogRdB~<$Lq>rB8GMex<I}mN
z&9KACihwHmY&#gTJtVgg`+FOeHl@a0!YJ%J%G?Y0J`!|P^eY0-!MHYHKhE&%hkHL4
zPyVY}FKZYcfedBFU4F2n&4XY`qt5q=Qo)iIHzALj+_Tuw9vJ0;V;I<2>bvsBYgNH_
zpnoh{d38Jc9&^Mor%t`cxi0lOOKo~(XQ6M;99m?vmCCJM-0qs;zCoL|Z<+N;XK88}
zGgWhxjXqS!yz|cR&M1DCN9Sn3$wx$uwIo!>7S?KAMj}9;&-E*bEEq^{rGbIla-2(0
zp#b;zfLi(#;Ppz`l1Zc*#6K;hom{7oTU|tKH=jCt)Y@>MXqh#ua>ZZn+%<3y)hE0d
zRNIq0L@T{gnkw~98aG94=(H&jVsy%tZInX*z%P<V*6JFnW#Id~qd*)6x#@ctoO^-;
zKYtFE<T@=@KHRdO?afJ%^B|9Dc)<~Y(`3Cz)T)4NkuHQqu2r^`<<?)|I;6R-j7#I#
zkAou4E-nfwsh9_{Q8<f+1W7O7fwXC5xc(dOQcjX@txn}Je;Fk*-So=~$%+J4i~(T0
zg!AUM)rTR{nkB$k^c-b49}<jMMt2eld(sqXI}*v=`(Vo`M7RFs9BIP8BpCl^pYZ?Z
zKva{xTMr&FR)DV0xfn%0Yf3bQY}vNY+(rYk8r$mmQtyJW16#3E%E*bcHK6MA?skfa
zQnavpNY6HC2R`pPbhNNvkjtF4CWV|qe&<MhgmBBW=|fza<I>lL6eZg+(u5l^Y`o58
z647>J;b-mJ#MQ=ehFy)3oyE7VOsu%DD}_VieYV(Iq|a-!Jt-GjQlTi6#_|$xg%Nf@
z%X520?)~mfo{2Hj1b1cs3W?@<k%fB{mHR7CCL1FMQii7#qf$LFrHEgvn@}mRWVa3R
z<f`5~ub(fkExzS<YkKRvo>6;Pk~CAakJWx8m&O@e^nCq|EmG<;&Ra$5EFgl&&fu2_
zEr_FZ6j@#{Cmt@ryFoLg0Y14PK1((2!zHhA5_3>(EH`ElaJ^BXgXwpD*tU1Mqy2y>
z33hYGt%=6XaMKPHzzSAmSo$S!FCY&aBCaGh-r8BNvEN#ayeUYZl?lkd!qT8yxFgf0
z5UG3;Klfr^)W+g~22f_mp6Ro9+YT1r0;&R=Mp?=qnacifJx&}2&>?dZ(J_E9zTe#f
zo=t}HrOPnPD(lJKQ3)&`e)CS;%`-fpit-$)hwC5iyw9k|n^igYks6qiY=CIuvbO*Z
zoB}{urCr;jtB<=h)N^mkG}O9t8bI{3z)#GXE3h6=*Izq!!q_01IfX$x$%oFwygMU0
z_@e9lZ!W;Q6wGBvjzgJwf}ypLJu>Vog!K@2S(=~bh22LHNFtpQ48@oNQY_`^d9?Ky
zHtS<uTb`eOl0FgndkxF~ah1qFilqPgU#o&CfQEMMo!pFwz@@v>XuWVYB?}JK)OW=S
zmrCr$d>4i>I@t5|grvvA20$r8t4M#R+;YRFW7PYVnA;gSv~EM`9wR1~F=toAT;Tk9
zW#t43>p{%GV(ncob)OSnCNYPOoCuqc3%%ZL)pv%C?HXVs)3#0r#k1=Bo}ZSxN*<m(
z!&L16MX1rP%2SCiY<Od=6eMG$5Hw!GA-dTK*bHj=A7xqE*meH&l)AIR!#&hkAOljG
zBg~<M$4nBFlz_zeP7at<YawE=b4|i!5!6Z3AUH6$NdnQOGtaawafj+DxK_V@3vX{N
zhz}=kzqzqeq68``mkQnX_jc9epe$?zVN*KWXr!y9|H_w0ak3?*$8-l)9=!l)(M@cb
z=X*6hIx&elCnqOa`e;RCgo*^md{0(U{Q28&f)GNQ`Z>R%Y!a`XO-SlgbMDKAs_g*?
z9L}RtXtx>h_UOMHD*kwO-WsrT=<)^dK|U0uX2i7}hV?Sc*@@Mp!VZ&RSbBcH?4nDL
zr5Y&${Okyas8X&4hl6A6F?{=DT5|t6s5Ht0ArP~~9hVR5p4%FM#FH`Y^l=y5DdOjG
znru*PS|<YWY!zyM_k02K&NFT^Nl(Uc3N=ob4%~$l6*5`vf<|Jk+$gDSst<OL;Sto4
z-JTh#tn6^{z!cDuKV`UVmk9C@H4_gqmk(cUCk5y|66hYTbjP_h+llX=Q%#i@yJ)*}
zvnG%R#BX>tYv4SC)iSlaF54ic-BGx1Smk|i6*k|wilO~MHFnkYM$r{~=H}#k<RDxS
z4jT;J#g`BS0|+GXa=V#2MRj?K^jR0I&i?BQq{8y?L{!csjej$lQy93SEyrpPn|lIc
zJ!DlVrC4PMV72KfcI6XMO;K5XsrAqujj-y=RfJ?krjt3CHLR21)LGpz@IR^;lv8LT
z!H@>S%S36Ssivr?SFh+w9&Y8HxNIi{EE{$(mCzzlxX@gX1_y4qLTu~*oMTu&3F3Z%
zJ@Lw)D<SC(sydLFXADjc$a@nwgGVIbqNu|6{5W;Tz^GQioSMM6#kbX<&^8|~FB$s*
zS$X3y#$C3j#B1L(6g4Lb!7L%GiGgheSZ(gyDL#Y{TO;8%(C^&AKPPC_J4&f~_xz|O
z3yMsm-8k2@&4xhy&WAe+=k?3YusQ>XK8pDE&0HgeXh|>6ateaX9-ue6?!1Hb!mH58
zyAJ1ZI21VejqtJ&1XyM#QGgHtgu8Ce%VYI7w(x~b;xS~j7uk*w^jx&+&2|;qy0IFP
zgGX@c4)l15haNaG9whi^FbZXbJy>$02<lf#@yO!QV@g1|o*zRe?#zNpPZ%V7wPfe)
z%8nj7%FGQmyQ(b?X`Qtd6gA*{Xp4rj=en{C4C;dDAuCS}EV5$VB~dH(bvF6KzwBJK
zjX0le)Nl++J5ArFBTOQ901FSFSwBS1a0X0ny)-t<j<ASp3l11*N8z;f9`QjpVY!ea
zT_1SL#_;ySPs@c|<!$=ctrG4$3BVaul)h4CuwIKelRXpJ;>V1qf!5{2qiKy3jXFn<
zsVO1iN`*w>R?{u|g9PJbS5=FB*F6DH?JRS#?aMchm>+`dSYa0KC=}o=)BHYu^u3G&
zIfhRtvlI8rI1tkS-6{nDUoh%NQzerQYqTr3L|>F6I!rgZEubBTuwXb0D#{u00)vAi
zq0isov}2)K=4_o{Em}jJU$Jfq-jigV9YP(y)7%{n@PuusZ5MtdT@E8GlEr6}`0@P;
zBxaQZvhSY!Uqqw->c4~$BOBLzWYq|CVQ1VZULYs9Q>kpc9<*Krj6pE$gI#iKWbJWn
zzoLnAjTN+JP>4E@F=~F*u{mwYZ=bz;*Ns3mSt|80*NjA`1g~bc6sS>iq-$iYmkc=O
zK7{-%6{JQX^t~o<$x=qM@EZlF$vryeIPP`75t!IPB%6SJhAj>hx$ETvNY`2FWXS=P
z`OiBSt@|(0gWv12fvcSc9xt%Z&(#UsB^O+0Gy;v;|JZzxWlhbkc@ua=ybxYe4NOh(
zk<_&u=69}X`WI0Ukbjwl)wQ6rErYB(94&O5``SQkbpbjGIzb!Z_n-pXsqOQ!-tjra
ze8E>}b+Tci(H#CGzuT(O#O50H;nb5<yyf40DGA1wiyaD7IseYaM^|cAT_1dWpLSU3
zOQEfzedUh?*XIINK&>62=ot9GV1+GUH&c=0wJWS5i2-0%L+z|D!4d<NYexWQHfoL4
zTAgY#{m}&4FRz#mE|sNJJb3V+PLc->lZITqy*=jU3xH7MU}@+{BrODW@9Q^i1g-GG
z7+I3p@a1bz1+h)HB}Bn~Li&0I$i46^bR=Du`wN=P)@lQ(x+S{z=JwwF>>&J&Kc2I}
zXnpD;-}bX#h8K7&07$e~t+|nX-2WOz@aMNxrNe@`6Lh}<KSdXwAJ<jflJUg<ypH(i
z@31=yBLrM*zn`;ID)Ow}yN7uG{S|x^B5>1WOcfM=zioeb+kRupNxxtCuT#nY>hk{M
zJI)|G85<6_&i(p4tZv}j<n?X4{r}r<{qG*K)MexdLfjuq{IY$i&k)Cn>Cck?oxAYI
zZ>7jVp4<XDW#ZSFj9&A$BNV#+^?zY;b}5`dz|wA0_aARFY#cd}l_v)d{Q6b@IJ^Ju
z0RHm{f_~@;g5OW^-^TZE<NIfi#`<sL`|B<Hx99uoY5a6N|Mq<UAqV((*!|~l^zX3y
zpK82+hu!~>iu^n5{#Rj_ab2hATiNpDkH>4_Cq0PV60ZekFY_{8MGA-jG04JC*(P)t
z{;mGQ&pcZO*%1Fu*7mMDG|%+T$BNow6R*BkwTF3@v%N6@aDKL}{Bi$liGU(aNs9b)
zqh*hV@lTVz9Vy|$4kmq!F06e$ZKOZTp=1NVVrE9_txo<YtN$OTr+bi|e`h}~-KOzg
zSHXF4&>UO5w$|1ZmXyWbyE9bg+#nvw$>0QILgx+IViFc~6pLkYBl2Y6I9NZC0MTRI
zS(q{CKUmuT_$@%VlS0lpc_uOY3D=AXPe^biEKk}Ql!4dGrt>&{#zP6n$VW&2`62#U
z<^A9P4f#!UcK%$)IkfMnXK9_L=QqNZMnY-P(Q118=c9TEMNCz-&)@!72atlLgKre@
z9Hsfb9b>mN6_zX=(B3@0_)w4#iD^}Dk=pdce~S43?BM_Vw*tm>oC$yUBemn2x@XZf
z*d<0~t4IYLf!R*kEyDrlKv6p>exqhqmtigK`}gnb&c^}I(sQ^}4e9B^5KXx6V^Rf#
zt7o)wA7QOD#0uvv1dER5VW`-ZKd&ziOnn}!Q7yK+$DyB_YSj3mVR_pL<L<l|4uhgi
zEk#BzWeCX>#s+Mo0Fm6*drA89BXyh{g+{fZKei*s$BOXpTPyJ<b+PMgu2Exb-z&>_
z5hsfY1HdGLyv9^jnMB>@_CKaw92-394m66nE@L2=UvmNMhU=MOlmbA-Vx`M$(8^6!
zJ|U?;d_q9AHC}u^r<~|i5QDh(YeCDU2!t%Ls{2+s7sg*hMTG6Yz1U#)V2z8PeFc1c
zfa;Cfy$|vmH$GYE?#RA%+HEbf=&WUT#!CDbTnOV@VGyIJ;IIQjYx{oJ!Op~6DcK_J
zHCw&OwupJ30T2;}l|n227k~i<1Q?j0qsi=riOftbE*#5yL&8&sU9A(#+c9Nwk_c_?
z-ABe6|Fgv&N-;%YITLjX+t_%Q1ClUYEjFC(v(R7iB`cIj0C~E%mSGZn_0D{EuItLF
zgr@r1+Rq=)Dk7XqbtZBjv+pC@(5>ty=n*yheABH$k+#w!1rK?QQbuH(q#EaLm1`Q=
z(qZKO?=Rnf=|_9;ynd8i;WuvOhUt(<coK~J06H1}Ad3p0>utEbPkTO&WZDxxv*$pC
zo}f+dIh7)7LnpVPx?t4|%?I-?UeJa0*nVH$KIN9a_v*pKRK;A^)JVF9G0f4d+Gpu^
zJJiSpg@v>^u8z9xm9(x-O(!shn!A3?7P=-6ozh7F{&F1~RJXoAQc(ARmM-tcl6BYn
zJ0-b?nMLkA9rS#%&{w3fy|Kt8Y1MDUJ@SiX*45oxG!lOD(ILi4+Vi@aDC`^$C_6;z
zmAN#;_T^<t%&v{t_OgOH67lrV^^u>>#rHT!DauRH{QW~?B}IB9zHw$Yz87^*x-5xx
z?#;fPjLE7LgiE2S_U*hTD<JE9o+{^b?*SC53KT{~(<v9rRG1WH)@Bs42}3!}(S@2{
z{uruLczu1LFL=b|CqehURhL2KgNWli-`t*j7m^EpA>>b<_i}{MrRqcF-MxqA1ErBG
z?tQt&#t#<w0pN|p{Qy9Js^Wv1F-&088LqGY<^a3?h)|J?D8<dWVarTIqb5^0ZU@y5
zGm9!~7i}3FkUh?H#EKL#r>cEgKs&D-{10jVzvk=VM3N1wbc#R166=?ok(>=cxDDoE
z;<I>>zuexjDGbEB2ZqBhs~-{3<6r=T_q1H-I%ij=CGD2uHrCZT)Xg&gFcW{RYx(Wz
zR-k!|=|}NumA^V6iuy`y3gO8t+n0#jEV}G&60+ZEc=eCYzk9Xo!-Y+f&fG5C1%J8u
zU&KI_{RIc0<>-YP7XggwVA3YYoUV^4{W0xxD0$}G-9KVYEW`-A8~;ks{O6c3MtaNf
zuq*VFT4GkZqB=`%vs)^94d$wmQggnzTP*X1E!g<e>Qo(n(@QU|Db73JISU?45WUxU
z8?vIi6VmoM;Q8s`gtE$ZHK4f!uB?ssYQDeoKDTEIh-#C?Jn3p)J0Wr5Fm~<QWIL2A
z3lqX-V#6sKwzFS~vR3lM=}yVD#`2FA_^3{gJvr;%8hb0hsPFjC+g=2pusAZA`R}{`
z4lX3hE$RSETjYJd?3zigm|%BrKLd1)gS7ID+m?pxRnnf;83KniDr>r>=+c7qtn@h7
ztI^NTE2mnIoy~AIZH+hl@xu&Lnrky8GBIu7Il=~nG#uw5kM64SvoF870AoOyd@f2#
zedB99+@Sa68`X#E_yKE=D9qGu@F$-a??0zk3Nj}-^{LV|{;K7hIEg===Kqt_YzKJv
zN|)_My<e222NeiRuveT0+Tsd5`mR6o44zy_LKwJ9_sC+$+2qNlh<aDFd`EKby)Q@W
z+SV&hh&|NgH~Ku|<OV(suz%IPrLtpZ_rKRTP3G}d=D#d?I2#VDXS5~u%szmTU((kp
zu;_W|GU9Fk)b*F|a5tf&1-afT;%Uk~u7&=6Jf64!Ql2CljL+iP<LJbpZL_&Mvs<0d
zt{sIvU)*0LcXSyf*59qTLj<3ihZsBD<26aymwgYjvh$nzUuwM0>UTYot7$wf=Ng7B
zR46=>OPx+~ztE#>veiS}yIKpV`OwO^X2Yvl_3rg)Q)POgd%gx;K&4aYTb-KdDnsEu
zWEd1F!&JF@pkC=!WL)6`LjE2>YjOzNPpu9}Q2+GRr!*kb{ygM@J@L0alg~{^mnk?K
zE|}H-6AykEc<`F*OGB1F77lB;zIPXjUSFxNbI56Wskrr&8e=myr<Ojs;!hql%^+xT
zCgSZ40neqOlqWZ$SCjs7O)-zT%w*Rd>~4Ktp$dm~e;BdtK%vrWA#-kM?C|$93f)T<
z1D7q||ArE|l|J8*FeJ7?hLQQ(!JAbWLCcjF&*(=1#anOpH^mzT%zoF6IG4#TPmf>}
zk4`~&&IG&b;_esgfzRb74#CscD#foMY@(Gsk1b$#G<^o;79OvyRbvkQ$s@w<>lsJ`
zYrT#sd+w5Tr=~i$fz1yI<2kui%^H9G9<Q;FgbiUQA5m98KR#x%FN7($v?ak+28Ht!
z9=2!LP8>U`4SbUGuuIVM*fRa=pYgW%IXI(1d5`YkfA*gLWA7y83N26y=ADygFhIpk
z<jOt7@`}sZpDR|(O|@~vBZ~52;?#V}TI%-hhC9}wFIUsNBmX__74wZghi{iWCG96|
zOY*Lg%$KC)G^NU<UGH8N=_qJgYio!~@Ujv61|>rk5xGr!I9RV%sZ|NW-7wq*CT)a?
z5`!YF=QAGk3k*N2NF(gB6nnfep-tOnu@o0B?(Q5qWzrUZwk_Y*R_x_XyQ}ifq`^O<
z%b*=3jy9X;6Y+nh=6~yt-#?33?+_5zbulQlxo$U2<Qi$0T-23Lcm-ldu%YQ}dTW!%
zwtT_P2gXXTB2+=Su)QB{5L|WIw?{`&R?Ue$M4vYwOk~vS&kkrbz9>;V!Xm*96q6TI
zIXT@9t#*VS$!>XX)R{agM$)qyhm4yVKatTIPt=jG0uKWzQc{B7v#3PKvA8#HmRQfL
z=R$HaF%66l^ZtzJuMe|d>Xtj+>dw^TGOQ2E>E3C0o1id+!pRg-nUVbTY70njs!UJj
z$<NFFxBifKhSLp?6Ps0^5!97-&$b>AEUE0rsGEW-G9#`*nCatwBqYwL@v>!wH5#7r
zE@6-D{Cw*!Rp4VzxTL`KJt5*KFH&g9&M26nVz;Hh;(0Dqa=7<{!|J5MY;Q$ehHlQO
z>Z#X)wkN6BlwVvj@7!Eu`G4r8rhn5Tu~%KJ)?<aK7P@AH<Ql&B7zoXMeW!KXq&0q`
zU@zA=hyUTsO=OOuehmUfBybwfgbJFCI*3Q{8ocZwIvmy}8FwBb8qP&#-IT5iV&sJ-
zMaTml2VO0gWmSzkOm0LBd#PNqs^-?--`oEoC*t_<8uPnbr-!$lN;+UCE!lKi-i_w#
zvQKFu<1y}vDc3?3fsj*kx2@wREz~C!ab+A%=0HvPTh9=@;%8vto#bD?t%+S-O;gMT
zhFyvM)YIC@hSLxh?1zwLoDEBQWs|FsT=qZ?YElv!nnY>kjUy9WI~&VU$jlch?RoC^
zs%iFJb<kxug2X%7<1<h%j9OlIb=m(xd=EH+;2nmNxzvB_8veZ31g9Y>x`5*T-8;X>
z3t#sxpArf9`z|gVndO<R&G;Q6Y*Hb13#leJ{V&w9%;1Ur>OB)_e;q;CRe0eHC3nlI
z|2g>aPv1cy4L|B?duwv~@1N}o=Y7n!?%3Zy?yE6y1RaHPeayd%?K_x^4?f=Cw!MSk
zj7I5x6+J%hXuuFZxbQOm9lFjR$KuTeA6}R5)=!@YPx6!+BsKCw4%q*N`_hgiH6n`I
zzmf=_3&>SG>_V#dzmQc#BUy!so%-(+Xh5?6RaBnf-@WC)V7moJU^mEx{e31f2m|Hw
zIdkH_{TO`$fVgw=z6%r6?*d;4jIsDu@{#{>hVke9tqMMltS1iY()e&^_L}pfpZD(;
z0w~{E))zeT>rMZ~etx~8`lbr>o2I^x)pXa<@@U@y;$0Ls9lLUD7zlX`Xlvx$|8xeZ
zJ`K4x>b`&eHs~hRe){yYa7G({4wGI2+1l*6Z!l{%324!^1RD%ay#d_2{C2(Rqp%B|
z#PG=|R`6i_CA@NPyQx3ql<ZS^5TicrS=M{tFApnOmUXb+j;`$K%hSP&;A|PsQYaW+
zH1NPhzJe_aTpBNdB|m&lup9AYSCJ~=7RJ5r@~<BNhdRZKj}XmZfKK~>(2!#U%qyLi
z4uc(@4G1?(1oR+|^nHrpaN*6K`pZ2Jco32~-EY#dW-l(OGMDSTs0~V&wi#X6g}&QB
z$c+4&F3@jKVxPvXTimYQ!<AKj3esf7mri-d{_@rbiD&4x5u)^!25bV+^G~(4@-TgS
z21a;oUd!K!0~tLj>?u3YVm5m2xx0PVVk;H>V-9i_IPajYL8l%)psLM>WrVj8oxGO{
z2{^Hg)FW$0-D~Wmvuz@R$ypl=XRatn_#hKgFqxZ4ji^k93)v1&&L6OpIpA~rWMbAD
z%Ep$4{O}h`0~;e@&mYAZIz_FQdn!O@9GMsv$`#E(?sLGogXGUEA!c=$G8J|3#k^3*
zdR&!knyK{K-|e~lq}z-BqRC-lpjdJl0mWXu41_nHBZTtFd6InTIy7FSp)kQIl~LgM
z*5Q^Jh!T4SW(wE<LJ>mysGu32UX6df&n(y28zin-J;;ei^JCe-0*OLCNG=?}(DVz(
zkg7$#<}2fzWa{D#0uuRB2fFg$GEkv40A@1exoAK6Ic(z@(O;@bd2>9FEsA&u$`0Ko
zML@yhyz?$>@-T!1VLq-up`ZY%gXC(PFc%*5>=W*zqiveq*vHP|2ZjwmhW%U^X7_mh
z1wq#1g|Ot41Qg#-C(@33L6}aa4RPl}#?@hrT7wxib5bFalR933n}UP(J3AkK%V}?^
zV`L9OhB?=5&BT(2NyIS>7}@MA+Eg~4!17z2PVi!g#A4pURHTsD_c4FpY<sW`R!Y3A
z%DvK936FlwQzssAQsr<2qDz7Qi;O~1f1R~rHEoRrDtsv2!RRDT7%7c1THw4RcYKjG
z%=Ms0i$TT1lD3@K!}R>}Ac_eHJg363u-Hvzx$a}nF9_zDe_@N}GxXQ!g^5oE_}5cp
zal=StymuaM{i|ix(%){e8gap~24{Ey!x#g3)E6L7(Ku}aGcFD8v3~)a{SX?QuHP|q
zJ=^X-ytC?SZz4n`P|tH0r%@S$rnM+E|8fni<699rh7{hj#yFmnkQ|v4d|XW*Sn=5a
ztUo;g2N)bzT>I8ivX;b^S;Zy$k?@C)EtBFYZ>h_~GfdV7?u!DU=oefX%JHz5_RM^I
z#YhH_)-5VwRCNWfADOWLb1YIb{XSZ)U|+OyW<Z|d8bl_WM5#0WTvjk90#YwF@5}>q
z0KTVU`mhG$hYc_@rrXeyuAu^x17jc1mDl~aE;vsu(~Y?igsYBL`QQUIe;g?qN4j8U
zKm$gqPdu3Jf<3Ci)C{QuH-Rl%Il$0JIwm0)0on$$?fK@n-veXvoR%3G+#C50@Y1O>
zLv3|`q&5`0ND8qpv0m^PdMf!g^WB*qY&0PGU>{0b_$L~`Itx+zE}mK^lV1LxZLl!9
zgP4hg;jKok>o2*@bpuLF+nDFaujRFZ(kl-<%j?Y+<=sG77a<!Xm1enq2_CB_0n&#7
zzVZv8Z@PVLh8g1H01IHZU`L{>m`3(pX*bZuJtjUI7&oTRI><ZfQhE04)dN0u)a?x!
z$cFSDj1T^y>j*_UbpW!_Jj!8{mvGz)&rivUbr*nLgZ+oBRHR0{4R^;=3%9x)j962{
z8Hzv{lzd$YaG0VQ$k+vzmTd$0#Sy`-62h*VD0Q$Q`r=#4UWf0a(xKDP?Jyr~5bu>K
z{^$hG!dE<8li8=13~qonR$v67nzDndpv5ptoIl?>F$-Tefo%2j&B&puv!KyOF8pBJ
zuj3Ku{tpoc$hRJAHN0r!OMQb2k0yNW-90@BB8$kO?=YL}{E^4Yk0B3b5Wh;JSO)0a
z2(K4umwu{&iSj9CUMt~$gjA_cxCK?R=M-EVJNW<cs<)00^i>0f&vr}nsW0Exf#uor
zHd7!am^Jfw63)5cbxWLRQ8~6#v2KXy5eJxi&jcRsZpf*ZvIh<d;Q=rC<<{D?j@mP7
zF1BDsAsTXx3r!FNg33<5rp=$9fXMkAjILOV&<T%%c$#bzzxM=<^Z`hM=p;QKmXm1o
zx74$E=^|S{&xkuC7(sU%Jw&iP370bpre?<xcP-=df(}_CdZ(|@I;KF#5~gCd+nA51
zwpoh1BZTomST-Te1ahjn(}oM2?`i@bQxeOMf;9Nc5zn0#ZS^bEm$1EirOu;O2Rl#<
zwRc|vW0zrK=ea7hbt~S2-rS)rh(pH;7)dnckJJ97(<Z>7+S&c~)OV29R9Bf$b?_QB
zI*|;z7fK9*R&=&owSHVPQI)8%j*b+$;6x$}>ntL>fs&)enBhJ?ChOjAK9~hVJ&hob
z6Z}le=>j*>3)@bm6#(}s-}zRBSJ-~?LigCWQ|fxiRss8!aoN)aT2V?-=k*%JS$h!=
z`bSye!^lR_Xh$gS(k&W3v*igplY`dm3}_oO^vcvh9goqn40!G4v5fO2x$#ftg`I(*
zj0o?ct$==S`jBW7ymOGl23%z~a_cX3>S$dKGTQU`{WvGer}{ThK>JQnDYfoL54%-a
zC+IrG{&i9-;4`R|8GrO6dHFa?RA+XBQ$)SOWm!Mn2FUxE5Ch90&~u}oo)IxYPqd>X
zfS%s(`VDEZx``L<gBW*^G4`SO`}(RZeT>CJ=5`0W#dLqUnNrAT)VN&7(Pc~FFnY&0
zkT|^{^3s+@Ttg*-Ex3Mtws3x$Fwg9>1MvNW4Td}g+e^3geAktfE*gDig)ui0)cpg8
zB=Lw-#SW4y^@8j}y=y?oz01$mLb3t&<&&YypXq&~g~iG53qQjs!~8_>0~%9>h2kd_
z!*l%F*d2{so7?q@*n(T^M`tVxD>PnZ<&Z4ud4zUAHxtv7;H1SQw_2Ey)q`4d(i%y3
zY`)gB$Wt{E6FjV>(Gv;E?GpvDc8_0d6n&;S9TtnXjS@m(&9c(JTHb;b=3A*KBz}T*
z)i~VROC1}&))kzWyRg?@`HUM5f*~g|BaVCFUo-@&ZFO6@!gZNFjWhG_X?7;oHz++Y
z8|&M1<=u4yCB=nJI6kxsFUSb6ek72A38d+Mk-g-eV{^UFLIR70i@JL5V~9Eqn|yJw
z*q#0nbhiSHObcMk?&Zz6q>3yhC(vRY9#uMQMj3eaeMp|*649Sn)NTNg{m<Za#D^a>
zMsm?+ZPf<pZ2@@B$0A;-LFQrb)vGn<r0oFp%np^I2Icyb>n@bUs#5i0!>D<lbZX3z
zH=tmmpS3XzlNmFY%d|K((A**o`p?z|wc5sT0yhmRv9Di1X2h6f(0XjfGO}>u8|IUQ
zGup?_<nmP?Ji@CrC-cp`LyDG<`_l9FY^2H4#gLqVJn0DmH^EkY{Wv70-T~mI?t$a|
znV|m4;D-r>&L;tInhh>V6+C^Y;2?7M2=h!@!eKV#lTM}ni`$^l!2!Dj>K$4Y^u$rv
z3#x1r<Ktp;vx%Aj3I>z035<DxDKNWGerbf6NCBc6tl|+{*-C<FA=~(c!IF!^U#L0n
zT#z~Y!{gR-`%s3z#xM?;fkr1r;9<oyYFc7t+bSX0S;oo@JX;g{5y&1-foZSv)VP*u
z0L_2c$&yCdJ(@Z5I2lzhx2yU^3rl8T-LrKzzmnw6wifh?Goh0_?z-FI^nyo69X2{x
z6I{Oe`=*1#BYx~X+-EUZ{6PKox<Y>II_~}|OlY*CiXn}!o4lDfvz4KItV@b74m-yU
zODA4Y+FK=5!On*E@4hgzQ9Gfm(;qT?Pp`fT^O$me%_qcXzE*2jEOFo)H;;CH7>Fae
zf*!##-murchb84=kw0&56DS?rw|b@(@Ai$}klWx{WgC&U9GqFvNF#_7jJwTU^@YJO
z#lT}{WggJA6T!VZ-~+Ra@}B#<E|!WOgp)J#8v&H3Gf>+iDOo}y&*h@{o)xukL(Kgg
zcJfMwh=_mE{=zbqPmue}<iWfd%~1VRTQ5oegfA4t9xQ8WSSPJ|-SXhm$gC6S!SB1?
zXomrmgd4G!J1iig$6u^S*UK|eDpx~ht6f9a1gjO<ug>iFIAA_KqorlKlB=?Zg3MHW
zSm$<CQUe>LSjR|bEaT%<UZ+8LuPe#Y8Z7@dBOr(hep+OygdJ4R65y*(7sywt8F)y|
zWVzgvm9T<^sWn-AkNj7m^91P<9^0DF<_iQ-Ou>2FdZl+@xWz>L2TUU}jFFp=VDqGp
zEs?%PvN0J>3Q#Nv8OhMc^wZg9ACh|=R}Qgr3Uni}4BO~?qNwvWUXnSsx<Is;LPlcP
zYAuGqpRyM(k_2CgCY##~@aKE=Y0q=qO1Iup0yIfOHzamU{iN#9v16n#>R+C-+q!X$
zJgPnC%x*}Z4heQQFeg21Z>yaSkMeY)A>n$Dw)k@QgF^<!kSBIqmWD7LrMpn|ZmwM7
zT0QnH$QT9-jX*}<34+6kZD~|H!{diHu!VZ4mSBJBfsvzlOuV6~IrIkAr0@nWexvJs
z=4qOo&=dRE`*Fb5?YAkAZ@hs}=r<dZr1Ps@r1(Xy2+V|0;7dGxp3mQU3J+l1T|$rF
z1A;*-*%^-#GloiWl0IRx$gsCZoYgWkJ2q8oG&;(XXK0&RMbphnXFv|DT))|(FzwL}
zi2kqAw^9V|yq5SAG4m^ux-dqHqExW5%BcS|T~SyFc}*P?K}&e=nw_{xcN@uivcjea
zNwa5<zU_QZ*rgpKb}y=TmolVzO;$Cq<s*IUUQOS{{*mPzz#AsO4sOGar!_js?q{`R
z(C<BWL0m3g!lTq`ppd6}%JJ0uc=nhGmBlgAJ@t3fRU!wu?--7XxGC=ZfMje-r(mVr
zpWQ6Lmj>hQ2?`+H_6n5f(Qj+jpdQPOXosZl-3FjUwa}XguQ^V%N2dLNT-@fwx7H7(
zH(?BWupB*G8au(fZb#_lo&(~@*JdzzGnTuM`z&mT&%th(!W)i*(;!*9QgnUZ4fpk?
zyZeI*gH6lkmaC>-);~W<A|5JU5=5#jebu7*jVEFJkv7iJm?rMWhcW(&r||<`AOK0C
zZ<*ZmdW;B!t$NwLW{pm|C+7I`T(;%shX4hG=#{}X^8%8Oh{$s#PTP4Lu17*BfzREK
z)aOAg#^B+~<B=6c@-JUw?m$uAddg{M_g%<{<6?i8=6TRC=nsi+8mPCuG`IlUj1<2v
z9dTS}q(_h1rVaZp;CXo6UuaAaY&%VX!E2rGb~?Nd2*P?vH7c$F#&0vG1-w-aYIgNl
z43D-Q#ujjfZM>9%V+rDNV?-=4+Rv97*1();<;#WSu@OLya-a~<Jvx8o=irKbIn-r=
zLWU&25~2WBfa^|~nLaK~Z?$_2BER*Us(pJ?8Txi9w8O8?LZHCZd<K&jLuo;*K!*DG
z61_l`J9K&hU$=rN^Actg(k=anq?Wq;koAG+?d5W_>A?~Qe$OASp=HB!OgAr83qyXM
z;`RFbdxeBQdh~z%?(i$Duj~kI4bCAN@X56I=9nlJ4_cu1EcL5W2Bzl4ba{_;lJUj)
zkn}IXiWcMNGj7GhD_5^{!(^~AA0J<Gg3u9WF*9-W^bq*mTtqm<l^fo#cu~(Ym6l`=
zz9NO?r)K+BN%trj7^MF)wZnQGPvo8j)OyTHvwFLbFLT03t3v_lbX>k;5;VCOsP4p#
z5$^9Udj*$0vRt7?+d)y!Nc*V2ZLz=;zD<^$Am;2VzV9tDLX1?T3$kqmwg6Feh%$*N
z+WT`|W|y9yegv2lT|`Wa=#SUCrysU-oxFaQK(*XkS*EMu-For_JwtmkmCZ$y=2wZg
zvd2h2l;NKK<^og)xg(?sK31lt4(GUK>Q-;O=~AaF0t<5WmRQ_y#X}G{y;>>RJ<g>o
zUGMI=yUxd&nH4&JmGh#Me0>=9)CTb9Tzlu{OF~Wxv-CjKnz|{ec7TF7x(Y~jFoevZ
z?ruW&O5#nMd51$Y)Nm;Bek7qf%px&3A)wk8iCgm-b{jY>)b5NGxK*DHz@2-Cr5P4Q
zyHmiuUHUfbdC{Q#GwN>_U<h%(yqg*Q9q!#{7@{}B>ENHlIs|IP_WYO`>SFQ0-kO-b
zE5Yb@INl!uvX2o3F`I5R{r!|>LXqJlD#N%5A%L+Gk>UMr8sW<6uRZGk7dF8Rb?~y%
z;&hjYmWDwBAQ~K~Omw`<K;`_``Qy0q5?E$~X7jY^&6WnBf_k}JJ8R`D<S%uEBF<BA
zA|q5?EpGbD<zx>pEUN_RovmRxo-W0DgK!}W*DuRtK%81ku0i|_xid7oVo6z9+Sr0t
z?(K@yWgcxT=4w`b&#@U-x76SkSNE*kCuiV6++?vmNVd(4UY`1Cxln#Wi^BEd%iqNW
z@i9OOeVx?<%I0`<lVGfN6{KEW4}YI0c!y}-SppfVTG&<ptuoVlwe*)cvCO9M)V~wk
znDwCJ9!S5ZnNEz<Kad)@hX9O}v5B;KBD@P<rQI;;QJy6kvX!y0-zkgdtoze<5;Hff
z3%yn{%$q@)O_h#z!Ee($Mfe|8&A|k`YCo{OyU{LnosqMj_F(hCoBGGxsA*2|wsmJ_
zv_Y%$^6-$zK6HWu_^O*ceL{D|`nJ+Cho5Hy1Fl<E6jmXG!}c)Efg#WWoKQ62Apt#1
z04ZIEx!2o{Z1;`B_N3L~yIliJWtRv4nqpm*;*I^<pwz06-2YNJvD0A~U{0;+=2oYf
zl05wda~e!>1=KY#9DQWsBxa%uNp7YWBi_bNuQObDbC49J!GjS^&=<31!7oyY?<B%!
z!rySdmF6Ln8IoW*u+I8ul2ij>qXaPuwXSxGN_=>`h4FUC&B7S?EO@<y`uD}@(RpQO
z&ctegZSAZi{PnUguSKf;xd<*Ujg{LCN^~bLQ*V1@?8-cJPb{y9pV#YOq{1MIFsIKM
zG$D<&Wzdii2uaN<5c!r&1mzaiz5m$R>vT<XXE@0l#Q@=Pq5$F0^t#D=JgtE@TbJG9
zr~;hmE7FyOy+W-x@Dz9w4^}f=wW1L>=;;xhwu~Smn-?z5YmO080pBh<KL)ffMjtT|
zO7*rhnBKM2&ALys<Htfyh6GGpY<!bNl`jU^jqN>7<PR?x6ydfRn7D+VIoL14rVQT4
zq}2TJM<7j7T_)>CAbuGh3bSJ0in_THv=&xWmHg1f$}3%VCw3<F#Jv`~Gh@`eK#85%
zP!6ByaCRLhwj2fW+Uj~tjIiV@0k;D*6(fNEx|bP7C)g;eb)`n!p?%K-<h-Ez_XD>;
zzoMh<pa@CNVbMH|!zK%jZXWM!Vk-8LW}@aN*p+28UK`jw=XgTy(S?>{KkJ&Ly{05_
zf>VlB5;Wrv^%R<4BHnA%kZHf8Cl3@7nn1pr=6i`__A*Z?4{Eo9{!U6#6M(1dy|s7i
znod8ks$<T+yC0i&t^y8Tc&C`9nlx~WE9pF>8x+7hCk!F|9j7di9wusot@r`*jC>nF
z6zUf2vs1LxV!AvBbjlTXP$WX#QUdw50$o78GI&p5s}aotSlW;=J>Qki{`ytMCt<TR
zgKNFZcyI70x6>Z&`kpXl!px|#KaKu0Y^$ftOT+(c&4y#Uc<mYf4pWWl(yfm#|IDP$
zJV7!khO5rsn(0$wP}M<ha?*Jth%(52Gx#oAu8v_hX7uzfirJdCzhW5E!@W*X0K)wP
z#TTQr^g*hvLsa~=Y}*7*ISlpWJc7)HgXn8NLJ}mL{`8^M!3#60&wE`!5faGE28)KA
zO3g$6NV}vQ$!6l#CAMcyBa)tN<Xs9HD4PuF>h<x%2R%VuKbWL+J^3KXdV>Zqq@#3f
zF<r!h$jtvOwYEjv$A>$q`nwWxHDN9HB`c4Z9M-MJ)rYd!7Noma+kSZyESKOU6Qvw3
zplJV?3lU6G&(gQfEP}%BTGeCBW%jdXu8)fv@H;%d<~qT13GjAkuIclypqaPC3|n_e
z^l|ipa%G+P0&U2^$f4#6%Mt93s=K%ER_P|BNsP<3CLMfdc5Qm~9anRdWds!glS+dg
z!pcW#FiPH|V&A2Fmu=Vi-a$vD5%8pp?O|UkC==MAK2^$AX5EQ41~}N5>~hxW4wAPJ
zbcJprx)rewF`ow9vL)V5SAU!TK!nCE^nICl_{A+VaQ7N3_`;dexCADUb-e#jy*)W=
zcDo<_$&>uXg#>cd^^T9-fWe;uRX23v!9yb5$+GP8B9*7RM)@$zo!la00#0*Z>$0|Y
z-wvDWJ}croK|Uq?a5H<QJml7lQew05BdGZV3r0jt?jPNMup~LehUs{D@$$J>Ib5d2
zzTz1zx|J8Ds(*+bYewq+=bJqW36#Xa-ue#7JxQ-V>5O_02nc6|!nTSh!R?paNxl_a
zuc7vJv+eNQBm>c{axv9<lS_A{C6{Mn3EUOV=}OP<0^{gf*vzA&5;N-*Nk55=-n4KV
zE_45K!>k{mcNs7@6f;_f;17l}yyIUl5ahk0^=3PczH1O&m}H<jAN5(}auV(8Ok#wm
z@LignsuvFJ*DHfsBe|mF_65F6KVoUVuku8Yg;Bubg}{TRc)DH4)#=TXO*-;#UF@x{
zIEKMT(~sWW|0p`eeD<$Us68<p<K5*1&zy|uk!=-xTI>dFMq#{XVv;jL-_+t(?C?=4
zl2a`eHlfsQRfrGX;LR6$M77|tjkLwed}klO1sxIocx4EbZhL5h7Z%<!&?gL{AY{9K
zw*FRw$nQ|&^MWVQa1f>cfeO}Jc8aQrI4_vRzI`pbtX*c(!Z5!9dI<`^(-5Z-g>F@S
zoP(2n`Y_WVGkUZ<J*m&z<FM|s)H^DT0)mS~OR?Y6rg0+odbAcI8pFACt0lCgcT#9O
z=a_02WZCiNr;p^lx<}2iLu@inDOHu}9g;KyhQ2$%EPvNPpZzpQ)HI^Rj|ze$-h-n%
zk0($<{p|6sr-t7^;@?i^@}T0p$Q33;$8czDFe810WdPsBu?$d$CD$?1QhmKj%;gc4
zg_H5H{fyy8DpYy7p1Y`tBjqM5G*zR{m8wSpwzxp(XdkgF5(z9d1t4GXu#&&%SX0RB
zT^2)!3bSjt#dxRTngd0*^FkiYZ{@zc3u>Bq0m@4P&nlb&@6<kTP{EBFwxo%>km_R8
zb*$MGKjZ|sQPxfZkWaL;nTF<P#<C_(^d=K+=LW?NE@GXJdAh_2q*7$F1h`dG13+(_
zhlJn%ly0@I&v5lakfml`Hg1g^c(jHqx%;!8hDILW(y9%w$Th=#8*STnX@<hp<&u2P
z)aG8%SX!TU5~yggxOG4r$jk_B(4k=FoV^<~dcy|59+{Zx5EPu?)jgT`$nWvb=R1zz
z>C(SPVEzQES`jhZRF{`s&n~qjlQfCYp$`(SmpKXJAGzdqyVA8=+I@$~3gdJpXN(l`
zsxa7stEJ>drjb1&+yhVk$H&1I{hmt}n3*Sk?Ki8E5x@c%5HU79<~<x&dzfskYr58-
z%S;qny@mZ<frcVJH`+FEKSXmrm8UBrQRUtYKpGh3`(G4HQHS_2HLsM}PMe*~arfT-
zv-2BB-G0H(z;o*p@xH+Fbu-%<3Aa0KhOlB)Wx`zCrC@}lX9NYq61}|f`A;A@AzBg>
zTJA`B@}T~jX$j>R>AKVQ+Qo#T5ssln{;!Do#-$7QfC5~%5gQ|98*(U_>cK$1xgkJ%
zjA)AH;wPXj4=sX5(A><lhGl!{X6L>^v<+6M2;=}N>qWfzxCnP3d0l2_eYG6g8c2bV
zrNF1w%@aZO*LU$NbR3HC00fJK&&<$;D~&?hIWUit@hL7#4?)6U+w>3$QI+9;Fn)D@
z128K_!!I_9P_3YpdJrUP#f{v=5|nhH=2ybD=9$bw@-ZX8ukE{KHR@dUQ}@O1nH2K>
zgH!#D<}BY<-ao2w8M4pvjbV5F%BZfeI7k!~Ai+5Ufcwg8a^qs(zG6>}A4tqdFkbMX
z__nq_f9Vl@nLQPH^l<zI#7iQT@kmF*8u8UE@A#vYu+Fxd$fW6I3-Ks<YB33t+BYuT
zPJ~>eywdKmRDILhbldV64Y}b(5ZYbUsN#pmCG}Hmp`2dvcT0i*>1axea@Fc7fw$Et
z06{{erCOklxsvJ02NOloyk|O}**hi<D=9#U3@6zD(SFFW=|c)F{p_b}|DmMShLZL%
z0^`%VKz`S+CWKF-k!|2@F|20?TFZ5^R|0t$zJ~D`UYj`b6vZx^H$ywREnBRGJ;KM3
zT?iUb3F+;ka<D=zVr5A;rdQ$?3wVRy?dT#rk&^4n-)U)SO?mDg75?tLv{1MRfP*hR
zerRwo^{(klAOk2sLu1@Yv;+X9X00m;R64OPr<E60zaqIK5;h0TyY|H2e|UB8Amqqq
zIzA!paBg-X7Yl4h5W(7$AT3p~&|koHOSBj&ELG6sOoR@E4i58)dpphnL^3CEurK%O
zA_FL4dXpWrJy?y3Ab0PmVk8gad*&Zx-up@`_9T&tIPS$vasI$Dfb`I&(E3k~&?+#K
zs)dy+L2YM1%@nipN_l*-D?O?!4T{9#q4RTy6vo&oiW|kg{uDP}UuwX;f$1B^Bq(R;
zgg#uKA-aR|FaljCv5(^s;Fl^WQA+PTUq0}!iyrA9y68-O1N;h7@|8&3cpo5jhqM>}
zkR!fa5FI6O*#X}sSkq4PAX~=(paH2$)3f6o$D9zWxH^>}%J>-i+~=UrO}BKs^tUK^
z5)~A7jxV2ghXctNb3uOjYC6a3ibmjoWWJ3JjC=hw%iu^Y@G_tUItjOs-{R}JbWf!G
z=dCN*T_3=(T^T4^+s|=fX}@)6k)=N2xQyI&Ut-dvl+8|ksn?y6tJkSsobS9^g?CEz
z_|1dWcuxZ~rP8<(1AK{zNl%?)3haEr*(sYEwJF)w;?>>PV&fb!<k#}ey=_I_8CD&w
zMK>&bTN)fOv(H~o_^WTTAlro7vi-Fhxm%D&D&3R@#%Bwavm|7W_2*O1=t|obB5iB)
zE4C6{4Fqx_C!RxO7Vhs_q~=oRR``&eeE~t;-5OJh><H770C#?Mpa>+8MB@)wjRbg{
z(y?G+|5=FqVV1<!2jlEMP+1hrn5xGG%%NupxG|JN(4|m`=n7Ou-Ns1lsw;+^5H<p-
ze~FYWcyDcV#mbG^*>`<X5}-y2g9ZotoQpP$x*XC?s6`~svf^EaoT84OyIEx^4oe24
z>W;TRAaa)q@eGY-S79!qV-&Os1I4f2oDAtlM9CwzM5lC5rcE$c0PV@sbO*M(27=r*
z^luU2%lf^Uh#sd5w)gh1T&>Y-Z;hoA+Up($+e*bUbwA>avMA-1e0VE1Wz;jZBNvo3
zdzAE6Hb%UJ5_U7~_jfm*@g^u_Zu<~x*ezZGS2zVJm|alch(nvW@<!q2T9I^ajwUii
zRNRWk0ZCySmf_`HkNx*$x1fE}!R|KQ7^w&yTO(g9&mSvt^~|OIT$*H9(c4U9oy+{V
z*NfWNy(<`XolglM-q#JxDJJVkZmmv3V$2>-iq{uSL|{7^w@Y8P%C1|Tu)$u3Mz8TQ
z#K?_`kRd))dE==WYu4MG6N_`ulUyRc`Q^b;jNG-Xc{qtphfLC1cSTjmIBfTVqMr2k
z9v&m@*`kd=$S3}kVA?e&ES!;+FhDaw9ANu(VoRkxP+8@Nuwhl;`kf9J*S!bTo;|dB
zZ)@0|Vghlj=w@STjFveNp+XYA@Pj2i?RuM|nFdi8X6GV<+`soZ{KH%MBp#DDFa8MN
zXLHnB^$y1Smo}?B4Iios*>0~+<;;H}Ojk>1gZq5_((^?4?#@DModi7(a*b@EcOHFE
zw?y|Q?$|^k^^v9P>o%s8Q-4-M{?yr$B`TCyA`i@Lr`{Iy5}I3Hsm~6T71h?&H3F4J
zDeRTnU_sK@;q|*j9wKOeVdPGL-T6n)PI9Naq8PH?+7b3xm&Mq<NwS62XD(JLKp9p|
zzDly@pz6hlD0JmQU-mX{$vtZN^{XcJ&^A;!*ux$sWYv2UE9o)?4Qc*|n|Af5FgCNe
zCIJ}p?3*iS)4$}X|HvgH{Ht?@NJWtQrv2%1Wjt8%w|rutJCOzBUn=2oE5RPEBD#?V
zmO6;m6Me6lll<j_NYV{<3oY6DcNy%pmWh?Pt0OTsr3%})`6#nIc$D^M-aR^iS3x>+
zTMzu%*rkw#`BDb`!E!f;+e0`^)fb#Dd#Sdx_4ap4%Ulgsc!Dh3tW@*1#F)Y*5YEaG
zMfW&(?FoMG3P2&zFPk{^lCE@CiilPZCt6xyyOikGT&icfE2&1dPOPYlvY^f2Ifn0s
z)VthhL(cAvqCL1)A)<Zt8oHr@^O`q6V)BN!pQND%yuP`%SKF(W{iCkqC;>XuJLJKP
z<`cDrjrg+la}pBzMC1&Uu39X|?(Z%%?egvErsJ&)0|~o2VP*9uW6Vk2vF#rcxoQLy
zpIxCVVpML}%KS&A9hL+fm(Mq!449jGkZ80c8z^}te|&$Wa}ESvcg+je4{}(_dXP3V
z+Ln(wdpAW%r^BplBb*k~{6LX4#*F0$2T-}h_BJO>o?B)=8qWC8g!NZ*@9+^&ibdZ{
z@`c@xXD8xMEc}Jd@tPFQWDKZA_xE+J2w8eXvsAw2j#Q<*{{c-gAvImeC!kO`{E()Q
zcK0wk;Zr6eTMor)$X18vmA88f9FtPEu7M#T&ZzCow<LGa_l_V#nb3<D#Wgr3T>2_q
z!*uS?Jdt?w^aW7OM}+!PNOn(rNRS(%CO_TYR-&FGK{mg+3dExmS!HAlnx&5Kqem?w
z0rGDo7aAOeOjyzoJbMk|uD2ZqtcwDPxO<;j?ra}lgVtO$Cwjgt#;6=5k=JT3q;E2y
zM@61j4~=m5zftbp1@-_khPfAumjQG~dMPRPH*>E3YFN=0=%AH(^v}a@F#=*jNGU3K
z7ShSBKIY34B3jp@%FvcdbvT#78qbMhf2+AKri-!zJ<C>$NiQII6rd{6W#24il<O>X
zJe8wd+nI>6#Cuf<xwvWT3lL2dDYfw8EXO5RsLbp<R=eaa{fG`Z2&wA?y6pGniZ`Gs
zx|GAggkOY?+rB_a{wBw_d!gsy?jTyFk^JaUmwaT=2-W0W>K$AcuHRBzU~rgnC&E>n
z@Tmu^*IDh-FgQC`xm!VJnI!4Om|FW9SYro#<~hPT?H<F<^j8;L(u+fcX2c5^PMEOl
z<b0$CF5pkF&rr{0<TkS6Gr8JEJx9`bNI>`Gdpi{kot_78Q$H^2)!%<DXw3=gzk(ar
z-aump+_Tqk0$o{Ye5J7!qt86=C@QPWQ=jF+U2po^E<EtX@S05|gMfuR43jj6Rt&yf
zYAa|=*q}+TT(^4+zCsaVN1SuVpO(LG(}@q3Pls53&_uKT9~|_sdr-!I&VHi*5Ml|h
zFZ7UPivsu719c$>dI5V>E=%F+uFp4_gOc7`n?Bpgjx$C|SJ$1|kvBL5-S~^mN>|i7
zDuBJ_flTJCg-b|ZJJf|$e6C|t@=0t(2pBW;8wB^-{-i;6-lziSRXONHE^N0L<asYc
zWd!vt+BB9%E27jfdN?0VRlD$M@2gY~Z)ichKksoK?XQDivCDdr^#l0FyU}`FDEu(B
zOSLy_C30;Z_OP#7Q1~h%8+E=s%rsUIk5jjm?_`X~7)M>i%+uDz$7jTt918o3Hk+Rx
z=zH(70sG6jpLW*@9if;RsJ7l#tS-Bokxr%Mg!e&NzAI)iGsiCO1g`zc(P%zXas*w-
zf~|A|A=cpTU$-@AWAh-jE^Dd8)!ii5v*Ur~03S|>qrR3epd8ZR%0R>9SlngH$hu(0
zn41Da?7QcsYtCe_hgdR!Ls?2!zMSVilghW4u&0-7xP(N5erf~AJYyI>SlJ@li*^q;
z65sUifzZGWYTq82agFD3QmkEsSdk2sQ~B4Skv|D~piZwpXN?g9LCIO{tnR!;94Hfi
z$#~<l3LugicKde4L${0Z$y8q0*PgHgtloYnqIH*k!w&O6cOcWCvZ4=7#5Hp{jOesx
z8YCi}8Cn<DQYxO9XZ!hgXv!w6Yr=x=z<_`Yyt7Uk?9ZXgd)?7KyW*(Dz@9(X%udW}
zP1!3vSj;J)cz(mk)QC%NO;WuzR4JDEu+Nzdh_SX*mNCp?hIo8^Vrxd>^LCu!d-6uv
zjHx~kx|#^(VFi-1CC+n`Tul4jfgjX!4xIx62WTZnk88f^(Z#6Lk!E!eBH5Kcz7~1^
zNX){{x3&?YlOFf89RLip$Ad;J)1!`tLIrBf-rTM?T7|Y}`5Mc^@6yO-68bMlEfwvD
zOg@KPO0q)xm~Z#31I@!u?6X2Wrz3X_LuH5HB|o`=?qusM&76-N`9#HA3^cPMOR2##
zwf8VbFM{~#8zl^j<_Laf&N0g?>Q&Kygda1>A4omOIqB)qcak9dY@#6%@If3hQhI&>
zcl<S<naAgN{TL@J>E*LIQ9whG2X11s;vdP;>NMulT;9Cv7vQQhZ4_HFdDS&tv9|Ju
zRpz^-h^#7wd=B(UIo=q`{>o_NkHTe5eUkD*!~+X=rl<mnwP*oL_2dvJQ*;vw(;{(i
zR57z(J=emz0>m>%qNKUJ00L38#@zeN{5{d5BSyOo2xK<La%o*ujw{BUmi|300(B3)
z9^Auf+N1LvrRbBUrD)~a+>vv(wrzWp)GlMB-P4=gTDfN|CSYM^*34D5^qCfE)ahs9
zMoLlUpM5=jcA;VxU3|Jb%c1a?t5||hma&7;fb96WyKE_al4bKFCq$kr+L|Q)s&^4G
z&}f#oM8VC33sc(IYi@C3X%Vk=pDAm1HKeOQAV2w~$MF9B=31_vm04h*z4}hX17@}f
zfQ85`*ZWE`$7op8;N=PVbhD|GyTaV^F}N-H7-+$&V!wIx6t00z>2czuCfw!OtE9W`
zen@rVdaRwX!%3_L_d3JyFp8-|%DHD*(5Vlq!4pFHyapA6H{KM`W~O{9(DP^k+@`Jg
z$$aoc_d0Gz*}eA>ZX4i+GcHSmAvVD5yYfak?)AG72LJcx(H_e{S)>nL5z>_wnh}w%
zDzz!|l(TdSu_N?+0x4S>9*W6p>@n?$^!Wn4tT6>@ritzx=k%E~8gUCBWZ5ld@f8-9
z$x$sm^XVSr8QooNRi!*!`QM<OjVw00Y^}}iJ6k)9@SDq*6pMYk-685w1(%fRPiK;E
zLGpinNDBe$ikXosU{ILVW9t#x{zS=q)W@=8<FHDC%3_Z$`TZ};E{ka(kid3Vx?Xc3
zAsy#LURm^X{&rX9#!-*ujzh9;TxgYRMRW5z&m@fI0K^HD=mCxLL4pOHvuTiL!Pz5u
zR%Fq|M^nUpK#HhAI$?_*7f`znE}`4v8-s>;9GT-y9&_44X+4}?BRY-)OTz|O%zG%0
zRH2^A<3cKcPNV`z+7)dZKItv>9pTH1)%(W(#y~jXg)q{0v#AY}fSjN2t86cD?qEhI
z8k|#kb>U=3RDJwqEL(yci^o^)b>sHN5ePUTP}yBMHAtS?w_{$JBoKE(xis(>(Ttci
zEQC-Mq?v_!kbSD-OW&GP&tV(RZX0pCB-G&iPq|PX$VU^g%>+xL9NuAO$ge@d;OLHD
ziHToVOK>(Dy7T%@vF~2oHo}^Md>+Hxg$NeIRw+#PAA%sieo+OnnRhP)*eSRH8)>D0
zS?R$_;@LYI301p&rU}C03Qc;3+gq9m=gp|$Hs;5@00x)ocW7)h02%9HzikiH0S#vV
zAA4^dRn@xh4<7>+6+sYDN<czN6h)*F5NQ-p8l+1?x)DJUL^`EQLQ1+8i%==)k_KrO
z4U3N7ce=Od?0fIo_dWOQ-#f-T-f{nNC^4OD&gc0)-}uBZskltZOV`b10FRX6p>oY1
zpsnmd2VKPcLkjYQ0Ps@A;j&}xKNhlqwW&x30F8_+FWP=3aYp32?D)0pfnqP%A&X;-
zYSlvrDmo9cn_z;%y5qT#?6a7!@e$jfK}P^00!Nh5<{KAI&GlcYA+Ct|!U8=R*`r|b
z9kVTE9tthu0Vz?5m;wH@Us!;QnL>y4nRc1pG)T|5zt&=1#-RcgTh$=K%V-xov3sek
zXcxNZ^rx@&R4Q!_AUR)|Cd{J{A!z^d&<-@--Fze`TBn7a2xq7c3N_H#v2q?(-?a+@
zVC6-;nL((#f-sm%uZFLr9|?TY?j;Bd%F4TkS+yvWcWcyxA6qA1^|Cyaqe??yz$DlI
zu^bHA%}ZXI38Wz1mTha}hq&$m7u!~j<N0=3h?(E7TY!G$^|7%rzYIu(%pS|k{!E32
zHo!jN+jno1PbYbIZ)s3UAk7#1UDl^a8cuKtrWr@a#h8E3k_nO_)*hdA7xyrm6%2N*
zei{m<0OBy9<~37hkbZah)>ora2tp)=t5YBwAf@yYHA98sS5{<rurQ1o_+$tL>J)Ci
zW76D9oHOJ(nD__Q)&=rp&<iAyHY@VM6k%<g<bcopD#d)H(tG0pkyJQ~G7Ulp=_DE1
z(G!L7g9rum!U9h`cp?3Vs2M<&3qhagXjrs1{_)NiI4ETWv|(X5(rE#Um}dFHOzp$y
zXNTn3ab7T-d~S6$VE<NmHn5)V-_nwbEBXP=k=v+G@&i^b@89yjn*@7x&ba)A`wXTo
zfVlGuALP@LjQfygI!9!o&cJNQ<OYM<W}+9r=~4amWR9zhwj~Hp;d<^|u!wm$r(#yV
zaHoBgecyQ@9a^Dm`YioeeOVX6gyBI4h|k<v8Jw@@44$&a#%9A%#QuR(EWP~ptrOX@
z^1U}*cRwpGygk@YXv$1w4`b8R;I^I_?K*_vVHBFd?~1_Ux+B!|$?)J2z3Dm(x43fM
zc;VJ+v3rkv6k>JX-sx!b!yJmKX8C%A3o#?_z5z1^Pn>oAbs!c+JwJ)+DVN#l{e;K^
zL|91Tky)^+Xrj>t;74WYV%~=Nz<*?jwAF(16DJ*@xyb6UDwzW+Q1o<`c>9GKzVO!|
z<0Gb!?087wl9NZG4ji4tDL$E;LpY+^jYcX_3TY3kjnqvs`<o+n75excpESBs1u`Nr
zw%tmHom6fgd7+6)KOc-7KeUR1IcUeByv7$tj?uau>}f=`V-UIk1=d<hO`uryzJLLy
z&<c_V@9grO%bGdZ#bGv?SYD%8L6fE6BBP<T#9kRpSz7g3(z(&>lHu{B&CL?O^78Cy
z$b&Sh(;z~eI_~~rxM^l*NLOyCqjjtHHJ+6M;wQ81*KNZhEbL%C_yYiG&%3&xpL980
z_ISNgb>CHC>7F$OPsgSQ00g2QHiN?e-CU4s>c{GH8z)8R7}V~Ob+z_zKS^3*Tdb7q
z-sQlSE9}Si@Rxocj-2pQH@aI{Nuu(FQbZT^p{X$T@%n*6?+WS9I_30BP2RE>RW=ve
zK9S=^v}1hBF=)S1Os(kct#5@}mT_e+F(Dcs_h96>Q0^CwF(JM12q2-U>Jqc|4r#v4
z1lbl8Zs+@MA3dde4fZ8_*O<P+ZzaR8Qa$#fQ|9c~9h^_+bOEo^I!>EeFe529&_+80
z>2nm@&3WAR-g3=nf9PGihn$+h+ugyjR8oq-Wq#}HD<yu*5<B-8p=gx0iw>+<*S;(N
ziWO(=_X^3xr04J0VSpB5R5OTp6~yj^M)Rkfau5Bj<@mE5zU6iVkEk<h9&2R@OqOQ1
zoydXSAFb0Sn#E)38WMF?*b_|vT^jI>Dvvro+Eh}0f*G@U%>7{A%;hltuota(N@01E
zMa$(lLGJPO_vz#K+~=7f!{FD{v}O@OlXP#MKrPa3mW4#agzw!r>FYjd*0f`7YO*#o
zkDZ^FO~%?<XW7`ug=a?%np75V@Uixql=$%}>nORq=7<@gm5{t(`LUn?8^&$NLAfpy
zMT{C&iTi|g5$%<n-9i<c;_R4vgqZnbe+$p?abDP4g(sRZ(?2GBcV}Ex;>>N%UW3Fp
zk^0<lf7=TE{;n{?lCg_ATT0wpxX6-w7aDinMSQ^L&70+If*ZEjrQih@QOQIa9Yyzt
z$#};r&dlszbzJDdqz?-x_I7kJF<v&<oJQSWLiIi;(%fK8=_UWFFNb-SpbqIRRRJPQ
zkTu>g{Clu_@fLF5=zod5e7yKYxy7r|#ha+#72|)l6#vs7?(0Z*-I3RL{inPOOd_0t
zZ(MD_#PqL_uPxN!_DZhLKl`m+`Jb-+^Plc#8Q?#7%`-87<F_{9Wl3P%`r1_Vss6no
z`Okjuw_jdIetCySfBn*b^E3Y+{{%Pe7J-s7=`(8&FyAgvGuU4^&WFIN|FCC%&5@9=
zxyOS97WEAN`QMZ$;ahI-l$Rg)+x(+D@F&0er`P=TjZ=6KHiX9S=KbQ@kKO|$j||?Q
z-OI1v`{Vun$=87UZUrAo?(x&k*Lapcy2SI}?O@5oL_|a~%>2J1xBk;GhvDD7^*`JK
zEFc2zlQ3+dCTWSWD}SJ+r4__RFA9!QAFO#w_hAr}XWvdDm+kBTygrFj6s1*5h$qWr
zj=<q<Jm3K~6UGRjWy!bzx)#m-yrzrwVQxG!)JVk!WmuaBe?_Rl@_MbqE<rqYX6S)r
z<P%eILE=OE;BDFOi4bzK{2>APpZwGF1MFdHYqg~`Ic3+O{5lL}C@>@_mqs)pL#87w
z3(%0*=PuNPL+?Ym0O;F&@gb3AQ<q(HJ!hYXcD`Yg(PuWWv7q-OD%g2WctM4O4lul3
zF3;zcX4}`a;(8=A2**yl5_P~0Zo&BAW!#HQzkmN`fB%evr;xhj=*jke9H=QXcS1iZ
z1ae(z4Fx!H>KUBf16K7SHKxbe<N>Y%oX!#8u~T(ix`Ic~_#uwWv!M!QdMW#%c>~Oy
zP04Y3Y3KgwE3Qfm(qtT#U3~Ui_=pE^5N5FtrJC_L>qi<<v5wcEz0Q%iqHqPe8sa^A
z<oPel!#Wi>qD=88tM3o1<Ii{2&);<?K$Ja>pGzz}v$5=cIbUCL*x7-?iR8+mKRH<L
zJ;~a6GWG5Kq&@0>Q`qWo*JkId8n{2*uj{jN2|_rt+sm~_&fH5=&Uz26nA%I^JPr~y
zwY45!bygDZca-X!?2I$;!V9k3#crmXa|f14r1<2SkMPU8_4`J4BpY?o_5#U0eDceq
zB&iqx$T#`+<-7EU6$2R9o=6)K?&Km^8|kc4yZ`Ru`p23)j)qHByZJgVCO}4x|Ex0N
zQZWWn{U_En<&XK_bIQ*3nvbs83T0_ugI?85(!)7scH;>#s}g72_S`suCAYiMi>5s+
zR9^2bUcLCq?cbt?<#fe9)90@*r#HxQqB$vNR||Ds7HH~SyS&-hq`wqL$*UAgx>ca+
z4PDjx9H)(Xz|^Jarpw7y*gr>12nWgldJ(#{<@RmWd3&`1rU0-}SXZISlmzro%G2tX
zG8iy|dE~llnlnFAEc;`8JVoqTCiF)Ypdgtl+DG!BJB7%0H>EIrFfafVoIRJRpF~1J
z)yxRQWi0&w$exohI-V*#<S+w(MBl~Dd`~YgFlJUpx*e`jC73l(8lb&yR!+{pUVed5
zPDCPvi4JbnuD=IZk`r-mB9$t6BC+$Ep2{0DI{po{{_A%R{rvpG>g(%iTQ!DK8;P0k
z&du}Kiva<C%r?e!phz6mZx^YjVo<lp_qD2U=J+InkaRz`JGq+DB=<q;vNx;B?S@L2
z29>~J0@_j?&uAbGG4n5{Y=wq@B)6l6A>T)(X;ql7(#gj1PECR(TSKcrow$gIr$VL@
zWBc=7?y_b8=`|FZtjHCl#aeygjqTjn@3mSAFS*MFnxGSJ{lYr*8Y9L>vuHPYH+v|X
zpjESt#Jv$;j=vtaPjMiJ&&(To1~n~g#^a7Whg<oZ@1kx8&fYTM65rdv<gnW>Q*Ar;
z<%tLh$2o{nIwi(MR++K2I}p~KVp2?}Q7^X%A4XByvbbt>89F4}3Eijyfj>Rin(R|w
z+AV)<t%xk(lkuxL@(xPo={L_6eB&2C>~-0ld`)I%p>nXmIZ~f%@LEDmO)c>bkL?_-
zEIuU-g6>w{==lC=wIhOrk8+=9sZ5f8|5?Hay{XCw12g)dzaVMs#IYT0FvtUP7k<<_
z!RF^8-d|{LuF>1D^@`W?ffBQ8<(6bR=sEW0_nK|AgfMnwbi0`KUf$kYTkYR^uCH87
z$)`6j$wrq^Y(1;EI+#0_XEp67(nRUB_x$p0`!^zbEzyRNsTQw5yiP1?S0!>smY?I{
z3H-}JhC{&mlX%Cocq6CSAwH{u!y#{b6LC)eI^#Sw0>cFVb%*(zvl|b?MW*Eu8P2I_
zf2sPfP(SI;j8@aLeAe&@zeYW-8Aruo+_gNzwVhS0`)%eCz3yj?f_=MGnNS$-GC*%?
zy0q6r0wk2gkm%Duuk+VTHh-=ZA(@}2baDf(;uaV(rYLvP>o1vr3*#C7!y4-6Kfd2g
zS1k4;=Xd^|Bok9+qt{YrMaRzG@u=>!qD3(bxW^(BgmqVw#l;&rjk}aSG)FTcjSI(E
z`dO1#U*296pZ22&dX^8{J<qb+7&J)Yd?{{;YEbfg)!7$}MBpieXv}9<r;}6PVwmwr
zZ-;;>Rbw+Jv6!Xi#p^23x|d!QuFfmxPqg#nCR{Y;*4daBS@>F4C;94daPjW2WEg93
zW9Y}b-KyAy;*N~_YqYxxFeixQHz`WXM{N;ix4Bixv+K^Zi7c1|2saydf5XH=-)R5z
zN2k;l{Khw0t@O$^wNtEwWMolkEnx1d`*~SQJe$YvfB|vnP330fYeg;K|G&1qs`<4l
zoLar~zJ32B`U9G99rJF|dTSq~r>6Zt2q0(Jg;q9pFz<P-=<LW6F4yzD66HHas{@vY
z$MEkSSBGbphkAYEf;TJEVV0V5Bj_dz9Bg^qE}f>V<8JjQrz^yC1u}<UZ<vl_3+dH#
zYW_5j<)oMJ@}r;-aC)Dd<5HP2D(&Yu<hULJX0~Dn5to#qbs*)kqz>-Famr@WZ2};8
zw&ySx;*hnCI<z`|CUf^W3i3p;qWQjwuVh3=&+Xm(1gH~L<BkM*hIF}7pS_ZU2ay}q
zCkX*xRg~0Jc`&8AwuExp^x0eUXVI*bIw7!M;IJ_EfHH7#$SJ~&q-<N?+s9|saU&MA
zAAN`!=hKRJi%~&<QAx$l*NN2P^qBXvK-TET4dFkW+pfoQZ|^hFeli>-A7WUeIGf_#
zWx4i9IgMyK4O%RX1+r?0W8q*j?kVde-vnxF!!6+xO%Uy4b~?7JPfjLyl}Y%imFgl6
zV0(QA<nAP<1I6Lq=G<PcENZ!eW&B-V3eHmyUCpWBmdQ}aqH#Q^z)nT6>+D$POAYlL
zlxQGG6xWSu-c84c>5xe_Ad*jgx|#ozr1Br<{vZD)SdSp+guJ?XEnb0sgjm*GH@OqP
z=~pSEj)L@Uhnaxt)eTkiNViS<lJJVV`o6(!P)(<NrLc?WJ$;eo8d>o(8>ws1LFH}B
zj;Y{cOrUUzT<*6A+2rYOk|@W`u)riy9@fK&;O&llRn9dPOpmGVYWWg(7_0;HxcclP
z=SDIQS{TU@Q4YCuXRb~e1aCA_Ei5yT`FjRcVLLy;hzlcSl|_GVKD7kvS@t~LK6XTG
zBFQBtS#wOFm`CVu=dSQgU3i~s-%c|-_{k&va6VUS)gFD&z^`*<wp((_^>$t6=GUm;
zWcA$*%1!g{%jZ|W6Up8UtE;PvI-r0UQ?b!lveE%BD!NC&c0TQPnriQ(>0q3=2K7P{
zCq6R(-3Hv*EM&*-;M+^QK1=c5aAdt?W~E&lM`s3|1Lm@vqSIDgaW__^jYg=e8<;em
z55WC=uwlh&Xa}peSg|c*1E~QG#XuoP4l&y!Ay*}I^`||=`|xnk_T%_;^MGp*GU+vP
zku5rio^If;Lf)+g%#@cUME-9CTaBN=_A?AS@TBUamPQ(;6?4>X29I!NYqH6IsF?na
z@c{v3lD8z1Q{R-qOPE<MPw7#e$RX<FIc}UIO3c`~c45Ggnz*WMjyp0w%1hoZCe9{+
zC97JrPYYv0@#NiANgciUw`}iwhd@$Qz)eGgOkkL$*LyyO+s?KC+Ur`)b|d0zPKO3_
zfGui#{E-NUwt~+g4@p!!uk&(P#EXcEa`#I!sa0zdIhEARE%i2L6(8^@kIYpa+bj;u
z31__}kUdf&?sJiOYDN{nGL`#NWTiQJXFBzf^I@1Fj=LWXa;+iPNHKS(R9*Y8bB;LY
z>y+}92-Tjf)ZFxd2tv!9eZ_4(aD5S*>##qp-#oF8pX$J8<_>2H-u>J=&Y*zLs1W}m
z=}Mf-Co$um%-JqGzLC=;Of&WiAeQQ9HIA|y3A}gg<a<32uXCXcCwW5+(VzrC*ZuJc
zN6tX)l|8OjB2!NiQ0q5`ROYwJ<X^8m{(0%rfr2x4_JH7^{1`H;vSq$==L!Gzvjh-*
z`K~YmS|D8?UBb8R0FO1{F?(z9&e|f6InPnTDYr5~<KA?gIpwj_vGnC86uY`E`^pSi
z#n1XAe2Cc=3!C6XQe$WrfSqf-)T4eNUs)ml=4C1#Ephf}4(znC=@=f6cPAsV8TYQE
z487c$8r7@lTrL5NV>*rK4XmVxCHqCHlb=_{Kd3tiJaO60Dll#ztZ<!Hw*&o5R_nPD
zvK;jF)_0f8G@M)~uFVdm`m2iKC6q9_`6^F2?(tC+3%+6wxvnnSlc_pgr1`0MaQ>9v
z-IZyhVjI$)9EK=PQ}(8Fd#*~5mg^r3r3*W4TdruYEtReboX4Yi&bqR)B9~z=bV+oQ
z>9KA@hiAZ9w-&1$^eF}Ckmw>*zh~@E{_3-bvVH<-uq6o3nUuVg5nbvoFD@|cm4SFX
zL7-IW99dx6Nv}+UBv7!-?_l8Mk0;vqI!8*2Y^s777-C3_f0a)D;<70YNPIdP8k$D}
zywV-LK3AF}uewmqP8J{$FWJ@OL`R|?vr$`a0>al?sH8()g7^&>=*jpykKs6&4t~@>
z)O5r?282)4w%s8EWw;R#HxKrE2FxX+cCT2llkyq{RP1i(uJwC$8i;is?zfI_YY7}4
z+_fEiZl>O9@rpe~;{8KhK9UUz-ie~6cZ+7%$a-=(o94$(V=-M}0QuS3+kHCnT41`g
zl`I(`ds{3}%(W^g{IoauOAnGt7XlePLzB2c{=-fjLJFes0z2UC1_OXp(%!yg02Rx#
zspF7r(5maryICWK2!$)xg#(85Ii7IDa=*#Xba>z`IGW;rXbnJAfsB*^AF1-Z_BEDW
zA1K}WlM=<d%fDyV-eJEzy<AV`wEV@?FrLLU`nO>$fxt<Um<7lOkUOWa`(Cc$@E4x#
z^@UETh~DdI?9Q*TCF^IYP`3Jict_fRFOYewsrWEY_%ux84`MWGi5o*v(jYq<ojKw~
z<Q8k25f`+^t4x**B0^iV@Tg>^epBrHYmX}V=cB4M!B=cM7S&3pRy~jnln|-@A|suQ
z?kr7B$1Q?_hh^56!SMTyG6UDx=_i^$e*Bmy@BXOw#V2PHqt_H&R$|evo&G54^*9G8
zc|W-yLvV;xHZV1vXu7X?x8|7j_M2(VfJ%S<xq_Hv2vZ!mVK8DG+p#fj0_0nBrTMl|
zd76t?5q?A*kM;bu9Q4hb?TqZU-!3^g%wJmD@$IuhyjLk@uR2|-uC8?x1C+A#&^l>$
zTdpf#UxiU{-$}eF=&?NrLJOTge_jsldaT$c$ST%pmroBm7_^8d%|z5E(9if|Ci3sJ
z3=$A6##0oJU_K10*vyZa9^a+`OZKqK`34M<40OQEz>DT}Rikv9zp0!zA-QH5b+W%v
zHJE`X1Lmzy&DT0o-a-M^OMc`?`^}rHO)ct#7cWkwg~0$DO<#Qh5nH-&d21qAAFX+b
zL#4=Um<5E)I0W1_wn^mjpJa*DIV}$QPX-?1_t`JL3hYQV*DRj?44r`#i-ec@k*^7$
zdauVkS1r|kRZyA}n!dS3BwL?f`+(NiX}X0Xv91p5Tw=TMe(+LEYen{vD<%Md8OVWM
z+UPxAM}%$AC~Y6Y)2rRVPNf_}UkQU56Qp6kFV+K;_9UlVwh%yG`0X?17kKgOMGcQ1
zIUWtcYSi;Dt-#;AV@M%RzRamM20D&%RP_DSdC!}kAd60wI!4M|TBw)_$f6}63E!1w
z>y@riVE;Ul$J{lsXmfs;wL9a<&756sakQd8WuBIB&BRuUW=;TrBe@HmCL4*jW%~xc
z(K@kWT-Dg<B*Lt_#E~;U_$hFO9afV=u0I-_w}Vdj{6KN*UO7_0O{OjoQc}jw*c<*$
zc;C^60+XqVzDINQDp7aT>Tvn$y1Z;;uj;T}T*dD2g$ER}36}<nOoJT@0jI4}Y<4wx
z#D()wc@!Ye%gOHCfK&QT2aVd;yI#%kY0<Ns1B*Rb<-RVH#Kq_{j(%$8wvX8jTC~G<
zonp&}PO;Ivc%cdHjjb<rjsL^NI?)$%=@%B@pQP!Yo^YsBKfgp|TLXX$Q=PU>*(Q)T
zHtqkYimr6NYwDOt@T=Nyh^H1#);wf@!=t8a^I~?q%{<XUIEyNMC^N%xMkPeDQ!abn
z6nEjv=XyW&a*8H6U);7+KCy3nA(2LnU5y3RYq!C4X*|WW$4O;-Wd{BZE>L>Xt5q@m
z9{As1;WQnhhkli<%E%QW*i0}}rZ*iZxVb<3Jw3SM&KMrL<+~T<JWCv#+DzBis(T)K
zqu^EktXL0x6&$;n@|~C45>_W(coN`zoF6JzBptCTzFP4k$zd(ob>CC)IBTrm0GJS`
zh_ri-$KN9z_~9A`0}rkq9-Fxkqh4+^BZ_PbP>oAhS`_d*_!e{M-Ib--YBa(IVjO(s
zcEQl%XaFVfWZeci?+vcf=~B&;5g<=il?9J5`j=VnKY7Oga&$q0NX#*y3Ty$^R!XcE
z_TM|H6+$}Q(fE6EEJbPL2jlqLfCZlzDrSh%<ED0<EdH2m_(^-pK(mJUL&at`@4iCK
zgtIytI>MHleDA)YInDd8b*4%OgA8Ki<gYr&FCbNX=T|-1WipuTecO0Y#H<|qq_4u}
zEz91ze5W}pLiRF8tBzZDmGgDo=U2_Gs_3b>e+FJezHW1vGz4*djkUVZBNne<$f~@U
zp<Fx0@nf4LS?QCu+(yv=t)`SzUh6QOrYj@GK(Up|QXL*yiqgst$^oCZZ-e^_jk&{2
z>hEFhWYHmtlU9SR?AqV+Edke<KdAoDBX#@(7LtOWsTbx+rb5GUPS_FB>k+Q(Zn0OD
z?uDn?0DQy><jL8!w{Fx`Zh{y)>9C8xh=^!oQI_iDI9EPJH8~&UA|0FGWu3Vlt5}BJ
z_&l%yLM*DQna>mdU+57!{Ol1DoTO2^#|5VqgF3gJ<#Cpht3H0-f!lG{Z)o8>SpmUB
z2wUuPucjy8;SvRfu&I~%I#=3%LVCB4*wV#!&hT%Gl-XhCu!gQE?UaxlrS|mLavOEw
zOLE3P03qYpovG2xs4K`LpwsirsH@~t@4iiz#dZfB<Kx7Vt7pgjcrqFi=_D(PZrLr?
zt%|kAiuYh(r}(<Ly!3qaimO|4t|SZTqnENxI)WZwrL*#hbM|ujQgN}mB;}jVN}}&5
zS>a^-5DUo`+eL6CcAtPUJb;(Y_#ce*e|h!(r<G6O0|Cpk?NOHc#}A;*8_Cy?#hA-f
zA8#0HhR$}=+SS)h3~SRo^gm3<0B&UY06WJ%n(i)FVE8CiKMRt2QKft{^`NM(hMmq~
zH%)6x6bc|Y!m%^GvSqeQ)G(*CROx}ntTM_t)WLMg-6QChflTV;K+&_nn{1WWM%>U}
z(_2+$tFNn1wAaPm*tcUvgm}klV?!H)>A5bJ!X)8kNJN3#=n>_zb>_}RaO$At=H_nS
zILX_m$sfVpT~TS=ylDv#d9LnlBg~W8w#pc!3Ao}2RO<qFgV*Pt&tpu8h6(WQFQ?4I
zNazGUB`wm0-7cy7EVeZ4G7-q{0@=5e_xn}bLC8$5`fn~=1raYRmEz~Y^z0Ln29qtM
z-OZTaIxzI)Nn2a?4RLJL_O(Nw@<^HFGm>#}+t-Yt2VrKHZ<HjuT8oc6jrl#zA?ohb
zxjVN#O#ySDS1N_Z4Jgn9D_-OqEQ$$Q8w}UEM*%(3Sfod~mU!p?LVklxuCGyc|81!g
z85+!7d64`tK?p{f^zm7mV5Q)?yP#NVzY+w~FjsHy1~%w`x|)vz%*b+e>v=;AXAa^8
zv5@T6`z{&*9;4FIt|3SGfcQoace>FJv*~W5kzthO*q(!T>53=_1l^Efbnm(0a}12y
zMhsfShGz^JAI86c!u&%rW2()%z0nJi4JcPE0%?vIbuP)2-bOY>-x?-|@cjAf;9a#`
z>Yr{Cd(!dH5a0bF@$!Z206Hs$v_<w^py~Y&577U#tl^*6kCL#dhdtx6jNq!_PE|iV
zbLPygLmWw5o|WlYx0flm){p&OKzD>A6*I=Z{a-*3{PUXoA8|@f7_!x_hbhv(Pry%+
z9+4e8ogx`}_C0^cPk)sErz`y9TL1KKV(RWO<+hSV<Xp7u>~b(FY<7dj;}rTSqZY#f
z@4jrV^=sGPV}alfqFCcX!RGi&!T;ZXrh>)@Y?L&k;1}@o9%2sAMt++650u1z^QBeU
z00DEXtUX`r_lG8S27-2nP^9U<8`S=>7zhR-ydB?MNwE9<vyURah^|NTxc~YBqozVK
z0df)BU+!YO&_<~0`$cX4_a8Rm?r3rD*IN{Ws}gj0g~$9iu$zBzQB^U(gLT$UB>eru
zCnFGw4oqOu$X~hH-+uQvGN7qa?)Y`>;|cJf@7X_``Spdr@G^~{w;)97k^f5sNlX>F
z@1CeEgh~9@Zk@mvSs>$&5@dhB4#5q$_EAxB;lFlW<i?VJ-sVC=()jP!8b#1nmDe7f
z{1@NXpF<Da+mN1qfj^tmZ))9wuMv<>ZQRkn{e{Q;`(0AO>LdK$)%W)Y`M<00Kd;08
zU48#C?)-1;`!7-We`DW&z(D@*$@^c9)BpdRyr;fcylU#ruK#+>L~p6V#q!7eO|IvQ
z5nL_peQT1|ewVzP$(TdWD2Auir=4}%JM!22t%A_?ALaf1I>5;}6$%Y`{~TMEpw=Qc
znlqcuj1R6~kzFkze&Z9U|AkCEe?V0tNp&eSH#awczh$2MzwFk(pLPG`E&azp_uJ0}
zoX0^tB|r>6gwJUsVu<ZgqUUXs9x0&5gr4UL8Z-dGGP>WZ7pi0&A!;?Pp~|I+S9+}t
zLAA{C)|sTk3J+d$lGAs;9S%*zD*y6I`lkiYzw)%GwvOLc(%Rcvv0NPFN^Q|=ja3Jg
zfCp7Co2aj<QE#<qIfB*;Bf%Sg|8T(Vyg$rVD`f#@7m<rJGEahf6|`L*A)be8ah0Ob
zUh$<4h^-~Qu8Cq1Ccz7Mu1b$H@f4f0{KnUKCqv}EC{8jT>53+m*&#8P^Xhw}H2uD7
z4Pjg*BXKR!hYwu8KW|vy4BHEoo0<|kJa71`IQY{KCwG4owB`d@Rg3C@p^q4U%M}_w
zM(|&n106+BvvYQeBGO5K!E-JAZyU>_aaBMK*M)Yr85yHucC_{U_jWX%=l6c-@O(d_
zXGc(PcoZOhfk2nwd6ekKc~W{1!9^gR>#C1I{ZNpbL@a0QG(&4lK<pL1YiG{661QD#
z+Y2k7jM)_knIXS<#FR7Xj_sm$g>&gaqHZhUbv$Ohu=+Q-x{r7dHW-z$Yxnb8zA@-b
z6xFypXs#A(#@cGvE;e=O{J_mGG5Ye1Jx_8`cY*DvSHypaj=%DYm%^hpug>H-ZJHsB
z8r)nq(52sIBOua6w6!|3i*kq@U@FH7AkA=?Z)_K?A(}P-Rul)F9K^4Ox-U$V=L^z%
ze<3{zExpyfwbr-8Qbue5hYW?5$gUoTR?TsTg~DDbGU)jPg73giHzo7WF4`7DfJz*C
zA46>N$EKQ~<#B6}%g$CuR6@95-f)3QLCog@qxRQ@t28u0ogqot2U+pdk=&v=I@oH3
zmN)@6xI>N+vM%tGp}FcXs(FLr$_~`Xv+_?rzd4`St7vyWr?@P7H3uqzXgr`#n&HUA
z@teLR-eV-qjprNzNqZ`5oDQ9m8t?qN$>H>O6LkW`9~#}$-=|hM58L1#Idi0qf@|0J
zo2Fe)!Mb%5S+Z%&e1kDZAq?gg!c$|Q3Q+b6|FiLf;KS31C(mo}O)4@++=vX~T%IH*
zCI$^{!fi*|OgBeO+p5QW`xxvfuTro8&Mp!F6wn2+Jx0^7nIxH}+lBI(h#k%M<3P@3
z0;0Dyd;7^i>%~FkSjRa=bS5BB-ufdi*!=}=^2YSi3!4x`6Zr4-PF2#27Mm>~ur)`Z
zUNe=1!DPJt3|j>iBEgJeGX6dV8pAAz><^%#yiZ&-i4<_F1h8p4X2(c*EG1kc2()ve
zr03A8#bz;KQ3k5;ss+VPLu;a<RsuZSD$>Ay^&XW4jE%T#=8~b6N=JqA_GzRAuw}4R
z<k7W)<rmgIqVSBL9-ReOqt))F)haJm-LZs}BeyJiAFin`hH=G^h$-l<n)^w0`=#W6
z^>VdPxo9pUW{c^&5zf1cCU5BX=sK;qjI3@NpnA5p?n$1DtzbH@MPrU_X3)}Vph<!m
z?>~>IFRmPQlz&(J^eC!9PWWt|Zo`kYFvM(xe%@@jf~&!%%yxmPm3Pgzb)lb`AK00z
z;LY})AsG|gvCmlDA11K-8Q}}Opd+|)g$?*vB&a(kv!JYHJ=Z0UuoYfVfjJX_C@G?V
zy+<hawspkSCg4A8w<-pAMGc4h^wRGq3KxOoON;nDD=p2mCv_B?YxaTPRU&uwrR=AN
z+1enD-;wkHKj(zeqkC~%{1&5v`RO1w`WXDzf-gqtks*&>@HhxtQ$xV98h8S|-elN|
zNBU&aZVQzNrI9yK_4!Ma-KqDM#}!w`VmJfdym>=4tGsM099&goDrwK|(3e*%nIQD)
zWpVz!w)`f50Im=*h@elM(**!mc*KmMcVjeHKy$}Mgmfq9ct+9Q@}8!Hsfo~O9pmr=
zV#>hqD0E<d6z=TCCS@u866>~Vp58gm>eCKZuNh3-<U#In#MPnSThNpFHo2pMOf*XW
z&ZpVJmw-RU_$K_>I|{ILhY6B6sNay|&2+|tlL94R|JXUz`1h7;!9m1P*Z}CM&coj`
zmGj9HZ~>Qai_>H7^Dvx-^*~_O0})=oBE&1^zR!h~{vv)oW(0<64&>fd5RVWCi3&tn
zSEILB@l;PyP$7{5Lfvt`(B>2f_ETEMpiZO?T>J}dC;bSrN5|dcNntGo_#91N+2$cG
zm+buG!WtEQ3c6qP1f5Kzr!&V_xnr%slg45E9j6FGqcNjeNiJv!d^Ww7=eJ}x+wtXQ
zWe%3ddWH&gn!-T!SPagTAmR_v7f)gkiz_e+%FhA4jc{HFa$odOX5(P}jd054b3ms;
zqc#I|M+`xhQQ`eO`^W42?HmQ#nlXh%nrPP`FhjaMFTHH;0|YSvQT|N}m{?nmsnrAr
zt3#`@Z!%2vv?MgwUCh|%h?l@|8T3R<o($#N#ZAEKr)%D-XaN+m?rxE3B9Vc*Brpec
z8>9OMLlQ_{B>T9gm;9Z5(`OYF-bx`U`lT;lzah!RF^WTjl2eA#G3}$y0;VrVcV6iI
zV-&#I$$4y9MypTvoHMKvI@sGjw)4vJ{a7wF@II~u0FLR&VVT_AH^T^~2l<leMXO@X
z4^k#G!z{NtZr0tY#8e1nkf4|!7l|hg<H*4x+6|L`0z!BprJrCS{?mO;aQ5g1!#!Xt
zi!P!MT~p2WA;5Kj4cM9rLYjT|eg{=voH+6Yj5q`lJMN6@szp*hBy5WX{U8FM2j*B)
zg+Qd>et9X#xEvVkQ?VYPB?Wwn9P^`O>jEz7wO8&u`%V?-yz0FNBH`>n8K5n{oN4Ni
zj{qd70tnp!g&$>-8V0hDjURI=-v{aQW($`H333^og~%&bBxvk%AY=RBr-0etgYh2W
zrMnjKAYR>Ca1$i$j6kMb-f5>#Q<xCuWCj|&D;9VXxg;@)spHe6PvY+%3$<aX1T9}z
zENfCWNbrgBt<G~EO}H9=<jk)`Fs36Q29yNPXO2!05P^H=G-~isO5WbiAp<IP2pPCt
zWK|VMAM67t_t@b*#;jUm8FC(aJ&EvD#|v)(SRQj_9>L^Wk==NNmN7-Fe~qS*fn-F}
zJ4y}C(Fd;peUfc}-us@Spo*PoziPR?8meHTN#^I%7{Y`mOYb)#eegGTTAU7$aM;Li
z;K9?K4KzRID#D>OmUTy-j)`634&~mX_sxdaAwA|CFtV4Y*v_kCk2CW-YhNc<T5Ym&
zSpTVWMW4Ae&r5vc+gM`GzT?*W`Gb8Qk!kOM!wcRa&mwDyu(~7dCWOUHc@y;)uirQK
z4XD{ZbYTxet!_)MtoD|A2Bb!i)zGom>`Q+L&)K{B{A6~0^>}Zxp}QEP`Zc*k_E+M7
zMS38s8N6j5$P!sYE8F79AG^b&QM8C+Az|~rfFip_X7CFOz$hm%cwx*os&WI<G3hoj
z?SZ?`<SL&W!gPT#lBV`^<-xnstF(KE-h*HU{k7YDymw-HUy)W)KTsQoU3@I!)Ta@1
zr$xDn=xw*uA|3yx$hWw4lW(;+CF~=_!qRRu1YccwE;cFeIrS%0K=-p(<41(QAHxUR
zyz7X2Wx*k-5Mn{S2GVX#DKJIWc!%JLAhK~_*TrXhf(z!E53s$OazKS&ldE*z*4^L1
ziWix<&6Sn=IO?SJd}@TeECt3=W&>w?iYjX4ko;KeLlwf10YOSw!9`$f$gAB0G7yCb
zv3qI+@S=faW+m08A5&%HF5>mIA0nK)DWf;Bb33G<Jn?*Spjh@C1-CAxuT>LkafH_d
zKsW7&@<H)k9+dD+DQgm4+Q|fmQ05M%Z%!k})~VCUU#FJ{bhX3(kei%xJVGH`{I!(t
zU7s5$Hm?p^wMM!)%%+5YQ}RbSgH6bk(S!;(m|X)MqoR@BEO$JxJH4?0l8~Lg4KpUB
zxtYN>*o30uVaJaH+YY3w%OL6=g|#LZtBV{Ag)Q>NkHV;Z=`79FLzJQ>TDAl<C6sL;
zSie6s*#|6jJqQVCeT`V(J!hwLzh^6=+&0VAaG(s2m2??|9Q4=nE3<b^T}Bc{j0{Kf
zFS_)Xr=HZnd=KvjCAXIKk3gB1*&UyKfv6#QYR_=Re<;%giU0N8t@LgPEfb^F9`w4x
z1BK)$j%=59G*?n$BBByTNJOOb1o8ZIc$i0;_A1qKYgy|SWg0ax%zE{uWb0@VNdmze
zkYEw`KA?N$vI+>Z;q`*cw^AAo1#D<uMM)K?<bu>81uKlqSu{%_86+(q>d<RSk(+FE
zr&;NjfwkV7uc^Tk`;~aTNp=6|T~;60H@*1vAf<W=&wZURJNK?x!XQu1<Er+B>eElg
zWnDHRd<TM-y(+`l`kk5HnM;<;-VA9hiwU0$6vsWrgU|VmE;6Y`w<gikoxmwwjW@qy
zTTFw<_Qpy+T5l>N-*UxR=;_PHW^5PelFBAzF61rG?cHM6=~k9sn7r<ga_|1MzySyO
z*cbnn`U)FdoB5R9p;Fyl_ome$KhNs8NZGITrmt>sWhglB<!*19;w0%#csL|4B?nt>
z<$RPeooFPyo@3j}94aZwg<8zgBxS$p*fO%(fbYHAopeveyYa$xbJxhH*lMD7xk^K!
z-R!Z`Hq82g1|RlkdrY2f^2*&XuX*<<r-kS0ttSk_VcoNGIEfQU)$QKC_J3L@Qr!U2
z84oB`z|li~@D4AC^j_vPi&nm4H6`_vC3G%RtyB)auRn)(nH_KnON+KK-~hrCo0~#p
zk9~b#_P+U3XOOtmgTrX*gNQ6hp!Yy^va`8lZq{Y3__B~SCl^q#M~(+E-mshyi{!S+
zr~~d>1|3LUSgBOnuV`E8RAQ}#cWYw#oZbhV=ncRDpx{pIEl`Un=3Fy*SOa1Uz(xFE
zcI9vJoK^lH+F|<8KRao6hH;%bQcVHTqwUBNG<H6aDZXU=4~xscxm&Y<-nl?T+Y4BV
zh=l3TVgr(sf>80Dru9QGBeUr0tnxtQQhXCIO55NbN*+A6uLWsp5@>XNy`7+Qz#S&w
zytOPMeaEQdvvXWL(TWX=7}^d&hRLHqjiMelVca!c>hzVA>*{3)s8Nask^eYL!QI9C
zYDmM{txz^wi>Uv~eyng49L7UsEs?kC=EK82>D0Y<={~eZ^AY2*Ep(>(cWUFEZ*xIJ
zSO~K|V4bjYlXrC2LGnKsig)EoaE%bbAQp$9g-8o+5XlYdu4P>H-qUSGoblCUjt7RL
z?&XOieKU9CF_*?b?8b~2d)Ij7!srTMh#J9kXHcaJe7wNGlp?_DR^PRsTn$>_M*`G{
za>IM;mVR?s#r7)q#^U#O9l*Dqa~Q|=PR{pvdYgh9V!&gQO3v9~cc$K3YSi5Hq92+g
z#=eJw%Vfi+s}Cl2fo?k2<z{|%wkIjo*JYM2Rb3-r|J}C;es!?IrQ*BddRIDbI7XqQ
z20O19-{LJ;U<LJ4YO3GyL}_zVL+<bccOhtstg{7Z)DSzmblo2wT3OmvqM8`OVV2sO
zBA(q`ph}%`8txY#E<4;8e8!&EpX<eJkBK<JGSP7HdXsC}=qKahXHaa_lhLu$e0x+!
zslD9c;gF)00^qT1jok-jXj_RQ%907wHT_cHtx0L&4wSF@Ta9|4+EZGI10n{;__3JA
zZntDiNpRl&W)nZQNxtM|ap;*zzmV1k6C?`<%xf+6-)L)yB_>*Ft-R=IRptH=+5evM
z{QTNcws_8>S!r_>M7Z5d*Gh4olXy=04Y<55_g~&^j)BxR9JmYR>eGmJ+2G%{;cdN7
zrQ4R<SQ;@md)Ote`=lMW#__5S;_84!ndKHuzCC7xT-y97u+!S2mawm<!SIHvK_83j
zv*Y>s%^S~$Hmu@9d)cxxCXi*#bY2W*TCA}zkag_b?$vZ#c>Wj_XE0phaKynUj#Kuh
z4MjCmKz|(C!v;M|@`s%B@*_cyS0pS-Pi^;6o5Q!XYM&^>F=0K^R=t-7J%~>lwRoT-
zPsc4PpP|4=WK2MLu*5f2c?t2*K@wBV3?J}^BA5aoGhYvzN<kVf;TvCH>#h}0IqQ{X
zdZFwgn&o}iUjp>rx`M@uwHA^6j!NUF9v6Y4y?%FnVW77?>@_!t3$iqnn(gqtel0do
z*9|8uEA$B1>lo4#$2E8My>ceOjFuSBS}eo<^r#ZbvGAw3kZGfONezH}kyJtYLZ+7a
z!{V$lGT1R#Bc7i?=nf&69~V57Niqet-Fns3TXEid3rI!)lv!HPwELi_US=Drs3C1X
zCqmVTJ*#*Pj+{*8;+6$7gtFCt;AR~5T4J8h;)e9G3qg564522dqrK377f^$}_<m(^
z18zIw2zwWhcnAooxcs1rO`s{XNio@awj+q^?ONv-b%Bz}=3R3^@oRVU@K5O~xUYjk
z%J!Td<BsKdF3WBEs&m0P)u+p<k3PDYx0$|ANPL+%cj2V4Fob!o#G1*36I>}0v)6F(
ziIhtgE1dUSez<#6;#o?de3b9sy3liA`H0?irTFUir}ZwSDb4DA<mKV8=^l(k2j7f4
zm`od3$tIV}5xQ7<k!^LqHGE>9*p26=1E{q!J!T=LYhJ3q&RHkY=+jIx5o|L(@uS<b
z>eX(>WPm~c<Z8O+EydVi#fy6bIU9wRVjdE>`zmC1;vcfD7sHD!UL8Jeq{lMr5x;w(
zv_9^jT(mIq!Y90ZBJ>1te*J9zisjsreJA>4T}(iJIMD&$=Iq{-l5P_rJ<jT$lkk%p
z(E{s#b~v4)JK}OQOvbi*btcJQ0`0m#xHt@o>CK;?uma!OdXI<kE$6Vk@NI>AZ&MlW
z&9d(%k4y|++JYueM5=k8`JJwYLLfm0s+As4kZn%d<Cv&cuE%gg&hdiN9f6;L>nELR
z(X;1j(^z_Q%=<V{;X{1MjJ_UptvPS6Mly6lb~7+&m&93)Msy-Ei;`@piS-Lr$!4x@
zh;Ci*X2HxcxAhNe;FA^+H40Ysv>*;;H~+eFI^^1;nw2&1C_>s>Q`2y`ypI|LwQ%j&
zh}0!&khX#|Nc^SaI1dhFsP$<_)AzS|lFIV_2$eV<{G!EuYirye@e%x>%1xi0@MXiR
z9%@>}Sl1n+d^Lt1OoX4wXo`$++-;+vfq)~jyBJ7W2YNnTjhWB6cLan#Um0~48kPuy
z0+e)whbzO%kGE{xU&9d(86u{qh&*M%0dic_P_DZ-a`PvTo#L^bzac%F2l!i{KLIxi
z`kIr_c%Y|>ho0F7sD2w8;7l<)hyi+H-R60c>uNVfib1-+nWeK5exlh^YNjOG&&Y^J
zMFZ?)5e4uhH=u@xA#Ry_&b{h(kruv4TMk4tn_WS&a+sxa1+t4CE}UET+!}5N+o^k-
z=tCQp9-YT%R~I6gGVL#?iJ~(S&Z!iz^)q~&sSU7^dU%YmAcRF(?!?(kRFF!3RjONs
zF2ZEm5@|N*bzi>q#Go)|pnEC8T5TDQP@?@^ED-MP=7VEv`||dANNPLzR}g?sz(oLO
zB)_sGHLV4D$3o+4JWNXap+I1wc8WyaJciiJDecN<(CuJ6d2T)&`bSZmnD2@AV}cUZ
z6cOb{0gF9C5{8rblp)UT?Q&&6dH3^^DeCgpsY{lcmD5K-Ice=M=|ijwqOBhmr%VO7
z_;7^LYF+$B?f5QFN`V|^_&(%fOlHm%rox$UTkb$jv^C3<iV}xT{9S>K#bew)#{T15
zaRHv$1cYyH-y=99eSsi^au&r%Ly;o+=pI3ecww7};Ct<~L|z}9$w!X^Xrv!G2GS%j
zbG)jsJFpwl;{>($dV2b(B|a}5+o_fqCjmRE@%eA&2M!+#KHi%N_lN#=*gksyx`WVK
zBUDAkGMR*@6~(+=jplaYwM(H_he??H`Bj8&zo>DYcYK+uWAkMFxCHud`)jSYf;i37
zw&mo5n=2l7EkJ5R$-(K6NOw(S#G<1@k2!U~`L<5kV3~tFXi~A=GxIA&<k`6snv?wG
z5KBe{DppVCXZ&T4GCaK;n(1yrGbQGr%{4}WNv_+(MGOz`3!Y-cp~Rbz5`n4&6Z7VB
z8qLKDE!CbB{d2QJpKrz+eBMLrZre(p65h{K*0ZjQF51ZkS0|kV29A>tz6%|H%^xoL
zo^Nui+<KfXu*1A)vc@~ivxYc>|GhH3oz>a>z6t>eN9p3|)C)~SRFYnUxIL={njY_`
zL#8vhG~$)en_(5~(?MC9U|n|B*fxh(amdnDmo@mn>hY9m?(y5!X|cjP99HX@9JE5$
z)yhqKmZC#s2cv~jUJHBk|I;2047!XoMiJdj2dmJFsGHf)iIb_*J$#+$DRgO`vxhSd
zL*`X5(;N%gomGF)Fs~76j6H$i#O^!n?mTqtzMEa^BD)O8QIibBaCI<Z+DJUh)S=()
zr`<v9X^{8mv?a0!PVZzh=ZJ4{`T<#v)=8CUoZ;^RB_BCMOsZZM(ps-MLDFr?8D=8r
zF>GO~iTDSD8Kb*$GUs;z=m$?3>{?twF}gx2er_}Ez9@(Ya@&04Q&m~t>_3LjJIaWQ
zMG}!XLa~-L^SGDVH~!GCN~U%PKxZV6UG_{q{!aWM_%A&>a&)JvT*ILK<nY2<4Yp$b
zy(P0Wq`Y+q7zri>HU|WfJFOS`!{Oj=WQcRtR-ItUbodr=lig|KnfwD`oZCvBD!d?J
z{0VdHU?(~X0+}H^9@A>Po%tjV>mOzy?P7{)a?cuhKEt1RFMdO(7(WP<J(H01yLt+!
z2=q5p-ts4<jU7KYIIvvk=OFt2l$A90DV|Wbp5xiu#$ELn6>`DzhY^yM0me=fQ^#iM
zxA_ja_#-`SCrn;=^z<%S-@YLHwq*sTcjOwjnJyhmVVOtHJO|Rbs;Tf>4U(?5$9SW;
z7xBzNu*@I#pe=D^NeMmvoaYAk4OFS)8qRpXZka*fSGhf^Bpg9RrsSr`BdbGpK0Dwm
zJxju(BWX6lWe3UC0i07JY9*K08fKsv2|X|D)!=?CjFw>+A@N+ky@iMSErfBHTegN6
zK-<^Hzxv)`z}ZL<@g`(9SyW@x*rWD0pu0JCTC4kG1C&rw15w3hHsAeS(Ej8CS{;c6
z-%ma|OU5rG5ynKvS7sM{W}0Gzh4RVAFsb*v_kl;ipX#Dn>Rh_+P-<6kv)D1aP`rhd
z{ktX2>Y^uZN4mU$Dp|u&j$Tt`fa1=^yWSjVp@@66#N6M^(OduiykjA*I9Q3tZmW&j
z!D-^u_FNO&_&a4;Dlh*_jQ)HFC3RM_89%^Z=9#zpB56MOgrE$JyP-cU`E`I6ZrQOz
zj3$i7rsrzF4o-(qNlgvKTJn&hdbBpb>rztQTFwaX>&mF7IHtT6)#OI<*&cPf;%A5#
zYKcihnwgU3h0bU0L)w|V9%+Po_f&nry&m6lp-%aF7MF(o(f1{m{8?-$OW7V?JXc0^
zYLe-5mFq}#->pWwq*ZRb^D}%4L3{R9gv%3<$>qD9=(~Ge;pj2)U1BokRguG6`l?y^
zllwf=)Y&_Q*ry@Zhi!!Q1R>qB2R!s$Mre&#S8><x=Ck1+EnYFa)eE}JHtlD3ZO{3x
zipE}*W%dNig_n?QE*E?8|8rTg7df~y()MsB->O};1ugn_p2O!9bJ5k7;BC>7AbfId
z!xGh?&{Xn#{F`b5FJpQktL%;pfVl;!ZXS&V7N+XKI=v(-%vQWNSI^_!OoL&r@|8`z
z7r0OaXyNvd6(Dw($e>5K7axpGht1Mbw7>YQb^$dh4*SlrCn^(kVOhXe`wgcqs&rtd
z=<CXOT~zUpN3gp=Vl5zgdStde_~subl>wy3Z{LWAspv{sA{#Cg6Zy5rmU<+>cjHF&
zv7SV>b3G=vAlv4^pTiVh#$YdI5p8O@DvlQcanNMd(Uji|Ldsj#%zL|#%?NyTvgkcX
zI4HS?6Z@JOT$)vUNQx^$`YH|MXI|rxeM>|{A4zab#1}1aTmnC}bYd}KB%C13-Alby
z-CqaRG?89Wg-XIg=ED_?JM+nfccc6vfoOoAkS50C?dGykT)*FibkDkPS5U)5`drkE
zq<^=jW_ITNoHHtMQC)3suefeiv-HNF!?Sy%TCfj_N$<aGjGca7mozrC6Et3OfA>j}
zC|<sjKQV{Z=1UVh9euu|r|y!pnH+$Edci)KURH|RCUiJttAxn!0OobZJSY`bbIs#|
z+{xs7P1};;6t0Y>{UwjybD9RlL;FFG)_IHu(fttS1081hRH?wRT5_VuAB%>wBu&X*
z1<=+*(*AIXRGFBdItgXUg5Kn8igFeP(w-j~BXDQc)YL0N#Pb8!-~p}<x%GbC#Szf!
zpuNoXL#FJBkdDMPwXx+-<3YDlC#Cy_XL@&+P|P|H{B0jR>#4(2{El`*cV%IvDjvQr
zdFQgfP%M{F6HK{K`<PC8KQGq0%%q-Qty+NUA-DDXr6pPp*q1wRuU@NPVI5oCsd9w=
zsmoC#09iD?-b_9em2C5KNsr6<@XfqfA#72NYN%)Z`CF&r>eKzppN+?pWwE`3i&t46
z=i=Wr+!MKTxqX;0R#)>}j9;L^2$#V{z7;|G$RSQwrK;|z!{7{$gWEQX_^aWQwX5IX
zTM%n6Z*Owyu1_mUp~7PusQJhyEhKt3lO*$Ii#@@H=(yIx_lKziikB^(WZ(bt-lm*>
zgp19pJBQ7+ggPlqWv4sA@!V|hHwUyvjE!>7zGG*X6%d!1a({d-9q6#O_Ur>%h+yQv
zlFX%7*8#Y}y3d-J^XmkA;p85!;V9lxhf7mv#^HA0oT^DxW*$oV>-z{0c+}Lr0GOIC
z7E<P?x}rp|?;eo0<=|uH-n{?`r$B1q*Y=-7RR&hm)_zu;gw&(rB|?K!>vUW@Pef2H
zR=XRf?NQm-DF@b_*MhrbD@0}6E+DqQ+QPFGv9O*(pMyRqD|JwDlS$)Ut~yrK?RX5m
zPqvuJ?7ELtM8+rE$Y47v>fX<$spAD0#q+gr>xd$%yz%%xGGMhb8xX}|qR%5MD@*T7
zj5NOSkM0aAfU~sJwU=0GdrS#Oyj)K41rU>Rui>AN%RzyN`##4dR3#KcSGHmH(`*~7
zAzKWamcRq#3T_QwAm_6D%xjpF0_}2k)BXZ`8*3@(ORzU_1XS^#s_6uVj^Qa>T<_iu
zP~aA+jV;VnDQvu`5->P+8d8;f9D<n&00a!pj&Yd}^A0SnEiYR*?98T0^X=a70ING8
z$BlWTqhk3ms4lGKg+V6x6!)+;S)GQ-e+cM7MFOjA+d%bi9w*{d{EMOF6B85^tZ)U9
z204U!7B&E~D`LWkSAr$#fYYFbJX~i6j{j%<1r3>-w<l^%sBU`-auc@ga&T0AR&HNX
zfl+dl-|azs05oli8hv;TJ1&k@nTD@ibyzHc8rOvLS;4zUXwM9dl)MEis5euTo5H5T
zrxw-Ab=#_rSWfv);x%CBdc&7-&QLf*uB-$Hr}bi2dslD#%gy09s!8UMa2QtBuj31Z
zY>$oU$GpDstgmQjmTjUWcuX8j>C?@ZG(d@zGT#BMs1eFJ;@FhrI^cCliPJt^)z0ci
zs$O?S=xT$2`RBIQx8c`A4Prk<lN)n6&jcuBJ{;aCRepOB&W8sL#209Jip+s@FB5vz
z3xA+zM7pGAXdN?JeQdQW*iH!l{cTew3LcxV_`y;=7<;nYH0rkNGMadkWw!xasxQ|S
zrL2CHMT*;Qk;Xsl8cf&^XyaU0y$z2>+Qe?|SB}h*#6F+y=$?M_CZCX)c;S%^=nb4;
z{w(r9e2fPFjbC#mExj7`jT?fiQ#J=TK0cs8Apgmy-3th^Z>)cGXLqbSev-{3w+0o-
z>i)NUPFcwtPpKIpLL3BG=G51p2#Zp4PO&G<w%C&LEg&_=RlKHnJNVli(cy<!OyDOu
zhj_a5c34`w79L|+R^q`DEo}D5)+IF)lZunUSjA?gVZ%UqmB-C<)@8wjU>jX}$%wsQ
zTcYG;&Yr0@`L7N8!o(eBNKF9diFuNH$bL@vkC31(JDl}qF&M;i#Mn=UDkg(!h73=#
z`NcebDWF7ZwhJsa0%pOKv$@o9prmL8no50UxoVIpD`Y4%sCVk4Hq=MBQ}8!cnjp>n
zhB_lX?tEoFySl4CtlTx964`maFJNu$*p`A9)|(SFdteNI-7XMJ%3ZuAzzOY}bpOUA
zfG_TBs&+$P7McT7xr;ElnxZWF90HYbx$`K?&4q^~$d%q6ZE!h=xhOqz3kgAzM`2Ht
zo+ZEAHXESEH##RdZou;MBWnw>Vd-k~^_vM%VP>q)Jx<ir)J%W^y?)^d62lkw2DPue
zB;Xva3N2)S@t{8?2X(#5x??L$;m0{r?={d#s%V7FGlMDZ%Ve}ak^EOb3T9Hzg!^&N
z=ix^xoU(3D#A~1&<-mR#_nfWsrvyk&bwq2==(j{0)tn(@>e(&T*49q8U-|JN<F)0p
zk;<W2eJIFo`xe6grB7xzeeJ5KF9BY3Tb}i-T>Dep)4;;id<vs!`s86{P*nUl<Jd@n
zut#PLmuc0s_RDNQ$I5CTZQ;sPuV%7;D3j3{S$p#u5rhKl(N=18epTunX%Tl*SWZC3
zVKTnaeZ{fUNbexTas9liYWc<i4UDI(4a*;FF6LP`Xy?y+;HNgM!HFD0u?q@*<QuYc
zp$E=9^rC)Oc%}#l+fW9wm${#n96xb_yI>(>1QPsctjUkvrG^=hK6LW%Ivc2{N%qua
zz*UL@dKq>jPMYkx^-ooEIGx~N^=)2*QiO0ICw8c;!61(H=DvM`scPh12cNC&?Y^B9
zhOySJOlpz?2TZ&RsKX~HC%46v4ivkgh5vR>K{vT8?TPd`^6%#T19_%Vyj$^;x)`%Y
zU??{qUb2_V96K!?#SuPvsH}e{9oX2s>ut3~%|zfgOAj;6P2FCEuc^Qi@C1_Li5$i=
z{jS%!*hh3aZHRLNx}M?;9T_`4jHhUCGEBT}nL6nvF}!ezwl$=Ae%)ML!i(8geKp*<
zXuE8->AUScx#H+GS13(<4j(0%{Mtr>Ohj$RHxNjlM$S5E#0Mba&F@9u3dQqS{6n2P
zx^^^n@ND|2ofFI^%P%V%>Vr8WX2{ZS-@Vra6Bk`4)yHZID6MJe+;Y6N5!i`mMVelM
zRl7(wix5%~7wtauh^3o<q37$@{br**QK&+QG50VSvWwu^B&=Lwk<j_D1-3{Nv~tXy
zgky)v6yPKhxmV&urjbbc6B8Bi_4wUG866@~I|Lyna(c#LOHtEh()#0RVx|aAVfml^
z`40aoaDmVTCqezH=f?s$x~d#a9~_cxDsz35OP5QT0AyzntLmNY$#BiV9}cT7LXJ>?
z#&;m@MjQn>%V5f0|CX)NQ1!z3^VEpp_ujO?;q!jK6XBH`{U(&?nJt)&fiU3H_80WK
ziSD@6)YLzgmdu4HGQU7)uFjK^Oy!5hVZM3Y<C2#yR0?p$d~?yxZUk4*`-g_@ROk3?
z;dmc)fvrGj0FbjE6>>JFyB4p)ch>`-_2m!jI4wT&obN|T+Aa(lsXhVCSmjT~p}LK_
zrPU4tMOkua8HzQlcI_{^YqF~UhrPE9t8&fzh6P0h1XM%>1Vl<&rIZ$=O9bhZmQDo(
z1O!wh1OaKJk?wAll9p}(=`LXr&;P>ho|$)M-_PvX^L%-adw<vmA#1Jcy3X_b*Ds<D
zt{#{+o}cZnh)C^CvC`dn5<T_()OrcXVn8y!vjYjEv%1NJUswR7YrVd{pu(!(&X4)Z
z>iFsOK{77ed-M-dwD}65ER>45QJ3*}$kOvU$7x*5HvlA&RH2;}fhWjj)+1%mwts7c
z*?y^yqQFF@vrx6jm{OiU(!d1~kwmRM@0&Z^MY(jaT$u=gxY(K1)@-l}9;Q@<TH%ZY
z#MZQ*9&NK!Nw}e7eA_e`cgN^Ve$0|L#HW5oejfXKS(_riIk-QzZ=}XNUbt>IP`=`h
z$PF#3mwt$))rr1nQY={CsxjFILb_HHCs*-Kzirjvg2rzMrwuK#hU#(9R`XfF3)Sr_
zWxz!s$(ufr-L<%U0Wagu!F82(dt-Mr?2*%o?WD5l95TBKu1uR!k%W$GU2fNAZ!EeS
zr>^4n>)k~;O%ymD1uWNAMwX+16~wI>bri71RPy!?uDGi3G5Tk;qO|sy);Tp;V@7As
zQWcODMJh?FSUup=eB8aqlPk?^yrFk7nNnib(lbm;D`<99mF%fg-UAt9x&AfO4RZ?h
z8thY7{@yF#9}v>1VgjRLnRt1Rj0f^lrQThyF<xfdtKRK7k0akzL{$PNN@D=fdGrA)
zZkcH3EtTYm8Iso<WqM4I_>`p;v6ReXgA*|fOz-l*D2a1i)uOnE^Apac>(%8qm~}tD
z_PS@$)D!WcfQm!ChU?UT*MU=(YfqLIi_`W}fwcdKP=WQ7#Cq8n^z`nR+8XD{SnT#h
zG!GLDw>qvDm6fI=qu8g?&(<xpBIG`U)!eT`1Y$904<Mj7DNnG41h<=z4C}UNUVU(w
z{k{%0A3`LSA?cjo^Ts8;Igfk!))h1~G|WK!%zLdr6f)KOFJ3akkcZwDcZ5GwnZba@
zDCT|Y15tCMpACoe2SnE?F!&3ED)6O?zb?~D%!?X@reT=6?Qy+5Y`4^^@R|arTGz3O
z6Dl0m4dm-#C${w?9#o87CU!lWR;Qo|aA#iacqu!Npb(Whfkx4joGH&CATY0Objg<4
zAyy$&n%V&M!tEVjRBJa`iGDsu>yl;s7#oO!OGBULOW<HH)4_3^z?mJ)s;a~6I2A<O
z{9?TBOA@81Z%A|nBVJEE)7E=5;@WJxvMCBjrc6Psfr@sK%AH*kc|)WIT$u2$H{k>|
ztyhH3)r`Gk-rb`aR-9)bWsALYd<$v8BdW2@p6k<QKKzk<LeVC}1Mj0Dn6ua~(oB5z
z_wP-H+Oz@RKlny737hG)_1fu(n8i?U7_>|Bsm<B)_*`Uu8|t*lHopY9Th4xGP<U=4
zQ{#QdxT2@sp)#m~jXdhk_z3E|b+GODi%dtPIMTH&dU$vAglAC_u5dJdsCyYY*tniu
zJM6`Pu<%0|H5sR`wo0selZ7}QCa9jv9HZdrKD$DJ<bm0i^*qMg4+xXze6hcVtQ1O8
zIVD{#+=OH>$lPT2MUgu}{`ksCn*{0G+lMwWA-KM-tm-<SLLzQHUDdDKe5i~&+x??;
zub(6d62IO-^Tq&-P$@z#g*J-)@Y~CT<5<SCV#&W3Z+}~9M_)lL*U%v5F!@GQO1Q$o
z05Fs?oW!gKufIg|4yJc`o0C6Y8+IAO*~B=ryJf>f92<)_!^N;=(a}kAI|FZ}beWg^
zC{moK9Aj3$qm_=>Id&yf=2(Knbs&41?zJ+`T7qv|I{<p=%+VFS?bLJLG>ZZYphax_
z;Dw^O!N<bnjYocwpTFwknJ@%VD^PlVY>!(*n$rW^l7GuXSLECPWegg@@^@qG8lW?f
zZ_?X3D+bn1w2(8h&41Gzblo0)EG!gQK($d_dQxG|V-J&8z@o}V3sdPGv{{*K2V9;)
z?Gp%v=R09!tPC@denqWPTXAS1lV)m@>ydIUT&45=Kz52ad!<v7r9Zr*ExLT+2Y6`*
zfe~xOBHQaMDWYapzpYOyaK0AdjUb%@$bmi&_B<%AMMP30g6Weg%dVeh@40u1iTE_g
z8m}f;<}jh3E<XDMmZLskO}~#mMa7LC-vB{y1kJjzfXKhUucI(876hL>v-qy(7ACVD
zX`$u3k8I1|;E}P3891}mG4?(?hJ$4ZE{~hjCF_L&CzU8LersUz^z>Ac^E)(|IYZ#{
zCUaDF*_%y%GB^|J>_f;DSjn<on1ONtNG|y9nZ-Z_5KAlKADWYp4AtP?k2<{0gg2kE
zZKj#mT2af~q_WoFWHlE`qspGH)Vnd|S!kxec1k{KivjF=E6N@>=d~4DpU!9(0ijEJ
z-*C1!pK(aUEu*<DHto6JU@Ei+G2x7?BuGUYIh08tF$OAu;AYTfO^#`0Z6;<nzlwK(
ziT)*=r7VvShv>%4R5<ohm5-(yw+qGTT~)gh9|pM>Q15xRQK=<yR}EI}?=z&XYBOPO
zRIT%8%X5^|?sMXnruF}Lzt5GbkT9oV7NN?y%UMTYPwpEi6U1^UJT~1W*T6RAR@q^4
z*GHdR)RTnNqOtC?4*Bg-RPDLWZGDAW+#Fx&Y=Y4Yr&QlgZBJ%4?wHz*9DcJ1t7^19
z*p~6WlDhfCV11pXK0a~(uH?*D-mrbW;lA>~4i=&ELT=g8D`kGdVN)?1*daHC8SDG~
zgyhybq5XK&W##(*x@eJn`e8!jjE#Xq|5dk}MOxWHQK~{$Cu<7^4f<Qfcc_H+hLd}Q
zUb*}cU)or8EHybgm$!Xxfk|<9xOC*Sq4UfG@<JR;Oe^m1VA=Fe+m*@D<~tt$-r42%
z%FeglM%0t3mq^-&m!2Vrx?|`s&s!2^YP;eWr@00JGa><$fMpJcdq@sxrNi}lS^!kD
zwTuEJ+83N~)o`#40$2H$y~|JoGytYtKZMh4K!HZ;$FydQAE`c!Kn!-Esu4c!5J`aJ
z)$o=Me;oTI*VPnY9#qm)?-XUVT$?~J?nkG<Suua~t(uVC_B1}5X-3n|11?!8vL>C&
z47(K5m37K4#^W`rd0brJ-Sqqf%DvZpJ}6}|6W<!kOqjCtl;z)705*iV*Dd=6<&H78
zVts%q8$^YGNqk>hgn5<Kgb1B-cC36S38(q36XB0Qe-!GZ06<558q9>EbZwKLrHBmR
zSUjkOyrraOihPCRXJ7<7l`SnL_4@WnwhdJuXHuLm2VeozVqGDV+&lm6B1$&}PJ*=#
zQSvZ)D<%lv%PZ+g1*AA;*_!jsQQSo{Hong-%AyqMuUPh?6K7{bOvitij-V|&0if?r
z5cvX1^ImV2xxse66#-g~qG4%V$RC1t!F@-@#Ih!{qUs|`zrRdLR;AqXeQMsr?$EUj
zeop>dB*uUv)1OzA45-PfTIS>wGqNJMf3Ngod>o-IzC5#f<+s982v|KLBbV2_zP#gT
zdHU3@T7YQpGfClA5T&|KcT;dD2rK6KSMKjNs?{;l8d^z0k&>=eB%@kjWM0~VRB7yv
zue)5RFJ#7&%;2z7df|m8N?zn1u9O|ET>Bhh@v^F_YS2L{Mey!N6~NVRrT7+ubMYH8
zl$y()+)cyAs{n-zl;zt|HXkmhTO23|jn%IA=ABrg`j^d&vjq6m!Xp)0ts*L9j*k_?
zFMePcXJLGk?$#ffDJzjJXr%q(GKpm^MGD0ODb4fTs}^1id&{m@alE5~SY1E8liNsl
z@-J6dmbvA{td@UJTAsJZGI&iMw1OTd?Q=PQ>dZ1PSbDRBLy9VRQfEhW7{k2};{ZXA
z_m9;T&ookcu2C(jQ@r%XjQG1o{6D0Fvm)AX#NIS`J%!S#ppdm7`=TBC%*2(_07eV?
z1N@^|PUv3~B?&u7rt?2mpvhLHIjpyE3Xh&l6t*C?-Mq*wyCsZF6^^+*#{h)yjPEeD
zWJo@H+~L7I$(an{(e`a1I1QQ?GlNP?x<*+~;RsT+lsU$4fR;Dm@<Bf2V&X8|mR8&S
z%vIs0;ZvD|j5WU-4l9o4D#Z$*dArT2t#R2e7>$@F53YtV9ne55bi4?$khhIb7s(cX
zZm|^tv<i+myiyY@`(gF0jQNr(FKUyQsBC8ig}0be*(YfRy|o`XJEv3vzNv6=lgk-W
z!Qr*UDNBs~Xu+0zqigvmiTgr9VVUd1>5n){#fa`Io&0ChxHbud_!1r3+FkAtLWri6
zq1yd4G!S4O-j0ZMJOXWct~JBXf`i|F&kd%m?;MFmcx}Fac|viVSmMKYf-0Ms&~f&m
z;EPPEFTA23z2vSZezr1~mKA;~BLlRtm|zI5xi06=G=D=b<sJoMP-zyG+3TIZd8^<g
zYo9m6j3bVCfmia}J79MRHAeQY-4|nWtjLCRn&z#VkJs%pka-UWDEmX&lJEj3TXeON
zH@U^Hso!yGU-INwYvG?2M)bPQS@>Je^!>1!m>gc6_>#NhbJ1snar{G{H+3Y>dNTMB
ze^Ri6oyL%!v@lT8^)>9ap&#ZGv6LBcA>}?+^YQcenJc4*nQwYBRKqxa%MAwyWWn7K
zCE&x%Vi&x+Ts~pTLr0pK{dn6vRVBW3RuY9vs#lxPD1(|}R<9}TK=>0AUO3<H8nzUr
zP5oG%DBOC~n@Ncs%4o&ykNKdT#WYK+YDtcywU%Jx?mb@?&08R*7aR!9NvF%1v9lI;
z?%W|;jF14#g(EWPbD!J%kskDAkC*38!}smpPzSS%pRkq1B(mL?vgaum^>*{flSjnM
zo1^z5#<2#b*tsp5svSbjDza2=`g~=KQi*$bw{XuzvS-h_OGl56AT!%wnu+Mva-i8L
zyM*4G?3-aziW`S|^9K!2kR4SkDbL*GNBPF!aO#yoAV+tec!-qC{nhu?Ws$}le<*vh
za(4_m@`0fDI`Cmm+F{pVwYplM9~#JYBv~8ZdFM%*d5uv3HL^V|)lPDfK_NwZL_Gno
z!38YX3Jn0Z)^a>2I`%%I#ZfGY21B2L^h!?|3!2_Ios+xVcZ9H!w*C&RrAbKb3oGXL
zS*!Ned=~T4pgpC1Sjb(0rm-!bC_(V@^=q~&6W~GVn23&ACv)nl`HVD}IV%fn?+ln^
zg`Ir?S!CEL9FXcU+wY9%!7nXZWS;FiB4)6nN4h45rN+hos>5KJ6<^49&DLP3SgFPC
z1aqIpH<aE0XMg9tyy^Co$uUZ}j&8zBdcd2;qypw_jnJ@Rf|ND{jIjp_drwUR3QFzB
z)`Cd98RlKmX@HU{yfMd~1vT6&K2#xew(-fd4_~Ve0b}@{kXVMDrpt~#VorYI)Tw5$
z95fo}u6BbGaL|q(hvva!_8y0>+o;JPSt*T*&zsP4X#x{Ai(2LlZeo)`gh>S5n23XD
zkc(mq7zeCv(WWyb;pZQ2e=}3U--h9J6Ch7WKc_qQgzC*lf{Ev-jy%rYZq9y_4nwnW
zHsgnxn5zD)I37rTeVOM;`_n32@I2mx_8y!I#*FD`<Xkj38x4T@GP?JHtgfe!eL?WJ
z06IGQ5ShmjX8Aq>8+?0D=Dl+<wo<#6S1`ka{7nN?t43T^b%y?IXIp}3Z|3*-lPpHZ
zJo4gF?|80Fv!=08jsIwrFMI?wp5yi$oev>1+h$M3=#@lrr!Ndg+2XNh7hA%^_Z73`
zg!r_!$cy$za&*hS?oUgW6PDQrSsf-M4n96W1i9;*-*WgY2$38BLzQlGhSI>nH~YHE
z?oL#M@IsL+G!cBJ+nR+wG11yOKFmexxM^f41E7%v3EA=izR`igCxd=5Q*Lp>%Z`<s
zPx20HIo^9k0-Ixh{oJ`+%lFhJ&8kNTothfVEy*e#zX&q>-s3vZEdSAaqEn){ma{4&
z&`WZd7Q3*#%I)cp!Fwiciqsk`t{Yl~yZ&FD@;j<HL>mhxT)EZ9T@Ueza>iIxa)$E)
zV&7sZwY%V8A4)3jFQ`<N!_o4vS(>Qwhs@0LR#zjx*J~};B++S(+JL`@0i-eUGa!JE
z$BBi}GfR(H948_x8?Om@ogsUCx5~eR<i`SexLsjRCdix@)-T>ahy2Br)uXAnv!3I6
zVOkug%iyR{r8CMNzc!W{vV54wh{f<Zn_9%%bXSh_9l*HlR(X`HMQsmBPlko5ZNVZm
z-&#CQ0%btp3NN<hK~%J1OwQjz?vKD{`*tDEGrNqg<nk4h6(L^HChWVk?-w_94q=E@
zOIex^XWVh%@8OZwCg2n2=UI9pUh8{1k2Pn~2Z0<X>~)6dp^1bqn;zTy>ER94a4%1U
z?pL_D5gvK+wQAjI^-VK`!3W{iiA~E9Ckvd}trz-oPWYqE7gQFHb{WOMLz?c$b3%|O
z-o(-E;LF)D&7eWR-mZ;}gZmyykyC|XseZkQuQ}sg2D?wVijSpv&$3x9CxXL-CU1Jg
zL2@%%ql_xu04FaK$job9TcpsLB+oLmF=z|yJ$2@KGXQKT@(kK?x~&K@S86635m`m~
zEXhzp{XM7U+oU;3*M}=fDPfqsC5C`ECO-QGZ;udJ3@rYv?(zp+XsOljj8?zl>|0BW
z3(;_LeFKuypGkVt!^j)QdbK#4N29La0oZ(G`hKU+9L1dyQ`8HRTpbM^{<ipfzaaDB
zvWN$HhAnT2x{|_T?8xeBqhE3+F-LJVy_#xnSreD%3n*M1aA1pRrJsFy0Ocv~0FsfI
zm+#b*!<Z|h&>rb(B{1^y^ZRc}Q^V|}0^Jxs5lY2Ekx6BJ`ef0&3@pwN|G_VzD*Q4*
z2PCITGGgv|s%}3Bwa`=zN+F>N%CEaH^rZg%H3#E4jJ$dSg51V-!X@9LZCyhP$@QFb
z1`dhe!t_+LxU0%Cf-UZTZt6PT7Va<Xeq66#jiS(=W`Fv_mqE+!r!HAG0ndY9y5izj
zZk2vfcYXl#>Vd*$vKiVe_9`VAtru@p4hu}H^aRN0G{;&?l=>?TzpRZd5b3uVP1hXn
z*5qe!9eox2><p3KU;^rVcb4p-leB@eQ_Fj;uzl8s>hHJphesmT>JHSBDjfDb5^cu?
z*4JAp<vR6WeaipYt^ARc%=}R-zNjsX3kiBE&X=Wib%jN~z=j;~<OW8wyX%cUg5NuI
z|Ik56a6;O3jewt;;4S}Pq0y<0;VjuP90KWHV}f|lx8aY;oMv-;l5ekB6-nojA}{jH
z8@=rDatHw1BL=K2_6jWoEh5R-AH4-j@c#Exh;OHB9?+_!5kR?0vIQ5QK1z4`4^D2v
zA*T$p-0#^HBdqMe5>2-F+(n3H{KLKS#&u{&u8JfK&XFu^c)6k?zOXNhLm3$e4fcp4
zmY)cGMhI~>RDU;#2-w0vFzWE9R>Zd;TC2^1v-4z=-SqA2hLi^oF}@TyRE+3q&GlrM
zWP-zVP`&Q8MOkR0NbN)U*c5wbHAd-{)wkzBmUTEOCv=_t46AvG!+O#pH`>0RHW&vN
z(qn39b<V5I_hxb0v46aB?b<cXL5qsb5Tmi@Ar_T8B4my;6l$c-xMnb7h_hSp(bT%%
z2IXql^<zxL2MEc{+cA_`<7RKxLRQ%Avd>!p(SPa1I&&D>@BQ{7(Epo4Su6zaZcY~q
z50XRWhe_*8k{in+*W(P6<<^Ov&R4{1vFjG>Ip*qMbl`wmENaO~>_scET^`XmiF<jb
z-31Jk&Vc;~hpFY$5aBF*dth&?78RC1?}sK2GvY}=)CH>fq>Q#vnr-ty?|%M#$l)ZV
zoX5`@iWFdCsqh!7I?|z3`w2%0&bPDJ3}?TesqQd1Z6HnDydA+2*7kEKmiPRcvQN^b
z?lgHd=16{vi%dIvHs0Rz8sNGBQ~IV5W_^>R_NGWnIIh{exO^{RSwoG-DgA?5&$Tg+
zPs29>1DEYG%w^nNyO#Jq#8WavY;nNOG)7~Sn+|fOA1`!-raW9btJuCg+!bY|zH+6y
za1;`KiIztX%wmp8DUL@UPlvG?$Msuyc;V>xM3$VtWaMCU-zQ1rLDv2Lt$sfB@p^KX
z02*K7aJxsBDlK)&S-7>FHVJn0mel192VVP6_D@IKaEC$`i!X}8msYaFhuAgdhcP}5
zRA0c;EJ042(BF^wB=BVI=hIhKvQ8%ee&AETwP}#T!PnL8c!qqelBR~jW~V^YT_Kd+
z{nUo2QDJfOfRpN2krhwXu4WE}2-X|~GKkJ$F6V49XqmfWmehA<dDXQx&NAHiK7Ck8
zN?&rQveYtLVau*4qw)HU6w!WyHW`0oINj#ECpMA!e<WC$por%D47jTCah$|+I4)3t
ztg0$)qFkLN-|*c^!|UX7de&pY9Z!LTRW~ZknU=QQZ}{_7{jHjxZHl<F5BS<g*`Yle
z<h1NdKC<+|Y%z3XK52Vp2HOnAo0dhx+T8G$)zcWa4!3sb44(ZhkDL{_!o{V!u~P<(
z3o%Q}Y|ygh?C2G;Rde2AaoSqAA1mNy>ujc(B^m{mHXs>qO12>TI+@QSuI3bi81K#7
z0N7IR7wG8I?oL;tmV$;#CaM-Xy2lYoZkv6{s+bOEs!gYG=;N*rzvdHq3<NWT;*Gz_
zDe8ZR*JXn%(xoU~_W<!~0-#7z6fzqS=z0F?BzuZ5co@7EO_B;b-+hW6WJfvy{fV-`
zw?){8UH8C~IROc;ZM@r589L-c;g%TW;R=AQv@N#qzr-9wD}9sFb*=H$+7#z#pG@Hf
z4na5lsQ9+|rn-r7|A)jK&#l4AQN17SMUxPc4F=sjPBvHfYCS${OK?9nI7tR*v)(ub
z-H0{A*AE(^H+NCZBfL(Nd7pgr+Q^!P;#lnFnRV-ZZMeAs)#dn&^GQRLR=eZX_<7fn
zojj)Nf+Xph@m`E7yCrp)521A#$xTS%Kai+p?EV#daX=hwTl9NdWAs}W`Z;75)g(L_
z`pRZq7#@6}TI9C3?Pr16Hm{uHirdvfmr&<DE91_DRE4J>0&k<K71?JnY8JP1Jgy?W
zb;V)rmg`{QAm%}``x2`;acG_yvgCIGH5ig88S+kguxR;8$@yD4I5;?Vr)yX8vyNtG
zv;iTt1PT__uR`@}muBhEcbas0Cx>as6B;V}#OKbR)^gIA3u$|ZEuXzSoRe3SxYKt!
z?-~NFTsv@1O<UhM`FnQvw><BUzjCv^8f!7ygXBcXLFZVdknGGE>*M}*bemt*;mS&;
z_ohYvOAvI3p#>H}WmnY`<Pc_5&aO^(nvQy$0Ok4j>4a9%-95F|lyhR5XgG@RZdpAn
z4~;Z=W_5V5kE#5kP8Kvh$o%OBN|VR2;7ksLY`c*6GC#}HN;adu_MYBEN&X-*@YCtr
zhP<QkW25{xYHeseoh2ZkKCb2T;JddsZQquUMp@&`4P73I`d1|9$8gm>2>5o5k|uF6
zty03(q4^XP+#D)7EkinN*OD%q3Yl4NuD+I7FS7>ETqsP9%wuV#+xQ2YsGd+OjKtg$
z=d#@}U0C9ZGgc25i#ab`ch?#m^3In%B!}7=9o?8oor0c5Le+IZK{0ZVS;a2=LOPSr
zAWNvgVYS{co^LXr+wHWh=C2k9feUUfYaPucQyqe6g)-5VPt-J{?Zy2xUT`!M^F==x
zS*l+C_?6RV<Mf|-D%GJU$exU$d5;4TSYd+<*bqM9Q@deDBCQa4&+l&YL8=ZOf#(LR
z4xes)5%R}MOWWM0j$xW6$mFpd22qhjl{|y*`pv+;3;?N+Pg^|6(H>8sX1)muAcI<^
zK*`cvn{Kn<qwVHgJd`##aXNv|4Ui7a;D{P!pAKBAPJrBe?VWYa5q-|E=ksG^q`<kj
zwuVxa`r5UIDQ3QRJSrk*$PIcz>EuOv%=>2UZLho+LY(?ks_ZlB*2V(P&i3bpZp?H`
zqN6YIyfDo8nl7%p<I+X5zS>7lD@=ahUk%P9H6mW?1P6i9N|-*X5VIR!)zEy}s2h&h
zvI%`+B*cyk29{g1$0r}jj#IBB(t6s&q0=HWUoy9y8RHtF+V(umtaN*UE?&g{Wzjw|
zNRethZ{QG=Bn{4SF(1?NbnERM3bgpWZ<vfCLe}hcwFx>Er3Mk0K{QC~#dMJNaTQ!A
z{c%kPYRxLmr>oSBO4-lOJl%ZI6}q}yNn)YN40`l%)C7YB%13OK_Om{{Co7p@a<uV;
znK$*)IV;fJVZ?KyQNlcP2FwnGg3=rYgpawo-no+D$#AX1(_}iaW2iKDaV=W!Tv|Zd
z>-0I}{I2+4Sb%a>_dISd9O~v)Berf#DNUCLd@8QA+1IY6#k^&_d@c0wAZE{+zOzRQ
zN9)I<yP74mCSD4hC%Hfd>u(|A|N7N47LXYqlgw*WMvA^($UC0!^9U9M?Pj|=4r;c@
zL~-ep74}$Sm>@J{2QpjOwAM526oYHyb>5NyFNERG+^4E@M{tRKC&!7;ILSDME#VJr
zd8hoKmv$Kk6Kkl_S?%DKm0;$<e$fexQ<6qTDL+ssCt)V~oA+_aZ(k*1-4*YM`&8bO
zsl*j3<*N=V)_&x?^d;8QA?O%bR9%|qN7D<mZhN>(Rk8J(ejT)EPQYA__<WI3^Qzt4
zSF8SPng>xlR)V>D&GZ;p7l4wKOI3+aW_pg4lnGjtL4AG7c#mi+U&X}4AepAIrPwz$
zU2LdJn9z-HsNY#+(|$j1NUHa#ak*TgKSA3pY-fSTouK?f_!cqBagd29cPy~kj}Q|#
zz$(gGd=-7<_Ohgt;QwGQ{javNo2!=g>bFlx_~5B?u+1%mcT`~qN?%#3+J0)kx9{!!
zm^b~@8bXE3Dqnk*4veg+9A2aLE0F8@=zV$Dp-7v${>IexjnO3_R0Cu98%>O*=SK%Q
z6113e%2no3C#GAO5}V#ar3U<uRPevBo?Ow%Ge@;?CpH|%OL&!Ia;<&`o3NZLJGKUk
zqNe8jJ39FfmuRElnJ;4|bX#J8jNHpW3atuye0$k#tOf@E&43P^5jfEVvhqbKjn&2$
zrUrBOwcjpqU8Z*O6BaL&a#_<pIOdRU^o%V%K=`Jf*x*F`_WyOc{n6SSQx(u^t$@ze
zx*<F>IBkg#I>-eEMJYfV(ZUGnIe4&lKC1=-lm7BZg^ZIbKp%`@AVPdexXJDfw1@Hx
zWKSm$yG4Ox-J)vSyMr(LKk$u*@>4S`I4wrr>R43L*-W?IXqI?;jbfg|+*&Mjx9HS)
zSRxQ|-ln7&W!X~0^ugWTT2esZnbJT!=y;21pc~&-uc0rQ>Z2jbF-S<?v8mG-?<vhH
zJ(I?+Ku?hBs5F>&?$2zte|7Z&bNIi8xYql-cHXTJGo=C5&H_{**}3_Rsy@nEf&<~F
z_P*6s)IXE-xDvDN8VU+Txo3UH8`5g*>9)Zh<7{`Du7uApm?8jL+oQnJ5K2*8(0(%v
z9MIN<s~JYGJewI?%jMTyl@%CVbs(xprov<xzqF^eXnIocxKM&sM`>rV9&0K}jIt5X
zS##0X9DfQA|ErJvZ~iR62n|PBxx_jV5$rcrOIN;OJX8!sGZ`vOC9#e1PbW|R@B(Qf
z)RbpW2GY@%IhEjsEuSP4JWw#7Foz~8DjM<3v-l;~5?97cZsPQ_XU~ph(gS+tiZAvL
z0GsZ!-Tid8v5nR>P?ylZ8P3zm+D#h+JIg|z^O3xFu}%?$SbNfo$GU10$MBXS4gS9?
zQvYFy^Y8uQ*<)m^?njw%C4dHlEkJv)Cu42Bjav`S!Shg_@@zE3udPtxNv0{bNx)2~
z>r3%NUEL{=+W9VPYy0-&$DxZFNuS!<WcT)2B?JUw^;#qQ_d4{U=OsptUU?}qfX~2B
z?q8Et{>(=o;|1VaxuLk^Zx<DS1yYh?o<V|tuY~e<ZN5KF|Ni+X6Vrj$zJDol__ryu
zKocU&mOHY5^UweGPrilQSH#-jQ6$0cuL!0In(;LzZ`po*|L;Ade|4(_!oh8XqD6+3
z^w+#g7I~6)Um`r@fAt4{;%7e)1Kdj9s@J$jx4_Mo1umnM|HQFBdHw(51`2=#=#^hD
z69a1CHOa}LHGeeV|MxFt><xTmvKw;0L^(S@!1u;>-)A`g>JB-EK7u?nr;z+#4=wc`
zbVL<y(b@ibv)`J_e`eMFb_?7tAcE+gHT_53E_g%<>F~Mf=37So^Vj@!*TsAh8uDkA
z-!<aL5a;Rg|Bgny3cOV3!q*Nfqy+%)xN;Yq>1E%h{2e;)Pb|2<U$M_Dz&T)SaJ_lv
z=PQeCBbR{^I(F>0xB9hu{)2CyTVmj%|N6wna0yQx9f|&`t}N^}G9=?XhaddgL%WiJ
z93hH^elCA&_y7GR{+T=TzenFc-MRlg`u^ce``@GQpH71RJ^FqHf!`0y|9>2P>YfaG
ztry;5IZ6H(GCzSUw@;W0i-`9u^nV&1)!N(J`x0}8=;k~A)I_~v%bljf`;vw;r+(XO
z2~0@D>v{U$uv-d5?3O0~X1659jt-<IGWrAU53`h{e}f4A{_uW_EB|(a;WkNd%W@?^
zuO(VzZ+{>1^R_*xe>`@AR3*HyLEe$2;P3pF1`xj`vlhaNzk!JV(>I123VAv1g8?Z*
zbi{XUzK03aIk+SqJ~a1X?uw(MJ~$wPS<5|epENy~xe0770B$uwyboCWzHl^i|F<vk
zpB6aWBe$=JRqCUNbGt!v7;*9OQ&4F`1-f~6lO5!E0-<=sJbha1tNoF9?OCyKNVUY*
zbxr>1`1sS8|MU)IKU(jEKL<QSq{^Wh6bD`G06?H7u+<bEWw9^M!d*V6tnk-wa<wQF
zKPw$C^_52mUH}aSB(NnE6!MjbaiJv_8#{C!D$3w3#3&VJECq0lmr4KqJo*ny2Z3Vr
z`e#ZQ2or~pS%b~Y%afOqh}B@@5$aGxSMJRl>w{X1m%hH6b4&YsdsI}nl+juB*B+Iz
zc_GQp7}P=Nq9^_#Z2jRo{g1zZJWHtlsJ#BZNg^ZqmfeX1kgfrMRijoB9ZLDhLF%s`
z*R4mq9~(=nCe3+Zq6A}{=}m16lPY#?3Q(knTNE%P^xhfn(3N2%S2ItJcKhqOnl@4>
zc;kA}HirfQM2+@V9JGav2hvM6TobD%TS(?MJ5Z{{zc8ewLCzj-ZfK1+2^)_jV4)in
zfD|o8xij>C{Z2K4TeINJngfy+$Mc!mqgk@kECIVX#7_#+DlcRrO5=!7kdm`H`>&qL
zs|BAZB-NUghQn!tW8yW!68+OV;UE6O?FXdpKicJV$TP3Ij$g%WBGn@qE_q>NJyz|q
zqrIkA0>;29AT46wzcFDzr;rlRd*LZHNCCq0isqeXCzK_|!odlC_UxGKha<q7z?F0G
zf>h`}AO8A+{*eOrnvX39#${YNB|?JVd=a8-XSSwBf00FuN^g#hp~Lb%rl$N#u%#z#
zu|`mjz_%@Va!?-0XCnd{=vVPBf)w&nuw>|@e-JIQ+V0OBpzuvu;HWu&!It)Hok@@&
zV#fvk1hDm^$d8>N|I2q2?Hn+<ym5~o%@w)rO+!ly9)-O@W^yWd_EGW}&X+b}bF9^q
z(^7$MFqz8_9Xj=d7tot7Q&?wHABVop8miLSdTmm?k@PYn9`9Z@0O-o1d>b0ntT$%B
z|6{Kha7a!2p4gIat_o9utAlybX1;r&)9!|GQTOBJ0csM?bk0rHd`Cra3_oiTG3tVn
z?s;0KO2&8)@YSNd+AIQwDujTPDcVdq+Q?%iaG#^q<naIcwQC{%s@?`Yh&;fx26Ey@
zBn}@veFAUjikx~0GGK}#XGm#4Qp=zA>mTUbgaFR>wy75IZo=3fXI@}AxL0nk`|zQj
z%ah{QB-|nZG$6OwZ`Y}t1YH7vEHjEncfcIF0l417g}UUKmdh2}5`*@OpZKp->y!c3
z9%R4=)9#!zKXvCwW1JK*8^omvqxdg0yhI?NkaOJyl_JEhH^FEeWk$*GI-9H45Kyz_
z(Dm836D-J2=!3W_<v2E>I7k*>o-4stddH>z>I^vt1f5Wq9H~cN(`WBZw@_F#yf*GS
zKa^=c?6@}Tj`3}JIy6D0!ge-Ly~<_Sj0CoT>ds5+sYL5wdfY*34t0v7C46Dhe)I^e
zcy>h{K22Lj$}bni|9tm7%YxH(Oo(+J6yOX2lhL*`{H1}NN@vl_m%|fg1rI(brJACK
zvb0={dvX&eL6MYAO8ZD6;R{h-rRM(b`AY5g9@>KASPY>op{-F|;kz{y6l)_W{Dh~T
zYe=Iw>|oscCO^+mIs+)lgGhn~pf0~mgOi5DK9`*-is<&Ee1$YkjW|k5L=)krLnqZ>
zX(PE*FyTO<bZ5HA-N;~QofnxY*AeU;N2jLYYWnKBv@=c3w!t@8_!39y^v|)^@KVH2
z0!cK|tSBL1{{toJKe6an9w7Y)BLiMcC1m`O|EOb#W9~7nQ~(UDBHAFET2oF9EL?fM
zO(XTzFN*8-=_r`tw*j6gEzfiZD^)ckJi`xkgAn;>3Etfo86&`_5UX*=ARSohs3>F9
z$n9f9jnx^iJ&oY_K1~-y)6{T|@=M#W)7D$L`1)I>MW+3PoduGFdFlGiiZ^w8(y3bJ
zV8H0>S@sZk-uZViSJ#`bRUPCiSz}CbjN?M+XN#Z(Iw$mgVXnGt-h0H-JS&D+e!r}a
z`!7T=K6-&-cRcBI7{fL@?}`;7q%ZEr9D??XBh+Q~OZiL;N|oj5$^{Z2`)3*gPx!%H
zZ>p{fvugS~(*xr)CaUV_**t2=1jB7}1G)ImzEcwpF$0QaSW54BO_I(K-)jF#!lU=1
ze0Sj4lQrOnzLfwr_f$r-2~(Hhm+SmhsMaS${PyWP0B@=V-m6~c$Cm~bCpq#>M)}0^
z9N`4@F9b!C6xD+8r)!P%*7M(`9dhqe1134pm@)_0C^w#bMWa7zY(9Zd>@F&Gq~7um
z@$pZrj-P?JIvGj*-p>}`DOqx+-?1pCa7Jy0LV#53#-ou9IalW$*7lPa>Ui6X2IA;a
zGycOK<I{CLi`=H0P(0;3z4v{(zS)~J(#aAc-d|7d-)j#p^cPrmpQ&Wl;H6cm>ADo+
zIk&eFx3;IN*f_)*$vv(sPuqM9l-V?U(%beMDe3AtLkoFkgZ6>kRL?Cv%fit(1R-lL
zXMl@*%xnB#=$hvvU31k)c0y-AlFR@|57b)V;O=)>`o;EBJc&n4mB$yZ6Viqq!-7N1
zVVkO3mBrr{RpiN5jHPrsO;Z|X6%#pyTl)Z*PI3WG(-|T*F#tR)W;?@CnV?y*+nFzn
zoqF%RJ2Hx#*uwwt1R`8V?5W54+u)jGRp;mcOTNPrgK0GLKxFIiplq^{gubo7oC&qP
z9LheL8FI>ppK6nY&9XNE#2CbZ!aLl9(0Ku}I1M?<6LaBTUb=rFg?jn`i2~s&sOsZU
zeM1x!g&jXvdCrMrMn`-pF|dTXEHe5VWlE(Gp-kCMH8I-}f6ZWkxvX9fLXXG9!C~iz
zb$?Cco7`=X-;T>?0nXGt*T!$3Zi3j;ZA)#}a(gU7X2zK3ZK0q@NArlhm0t9>lW_4C
zwo<Xfy4RN|R;7n=@d*;afcr7&x$DUQgif)M@{5v3Rovg^NdHs%E+g``;TIO*-wGlD
zA;_SoIgc=T86*>py6su=-&j;0448JOJ+>fP-MZ#|@v}b(?Xn-aVMvQszB0fs=kM3^
zF^*4$@gosDDHD!FRULLfH$^42ez|QURV^flpg7N8+<M(b4^yrn^2$R^$cq?Edef~^
z^48L_rT`2o(V4CZgx5?UpA_O40@|kIy~nAk`K(H|L4LW+^1X81G9KkUiqz3qw?U3P
z{bm{<qL|Oi9SP1>+rUB2Qxr$@*OU0lqa&~-z0A^cAGIwxB|%_DIZ|m8dV%i#$1R6n
zG=aRIGy!WsD$u><k5Ngaz^s>z&V2wXRqemnbVcU-C+YV4bT!{pK?=LE*d?l%b?`aA
zcdn%8Ca6VG6=Y15fwcc12OJVJUTKP%Z{tOA2M1Qz)G5HX1EDq*p_2Yzt#4qlaD8=g
z)<iTM48DRcNl?EHe<9{Ve}QD}qn_(AU_-#jZ#GH+YKyDSzki9Q&ceH-9l~kSA!yJN
zt(!JMuRiY47^MGkMJGu!l$oXJ$M%Q~Jvlx;WsyZac%+53?4|&3`@^@O@6%U>eVRJk
zs$LWgj|+JxJoH>Ma2U$=E(;q0OvP>I-TXmmfUFg}?3X@WTdhBjPpUt#3b(-ZU=Na}
z>HmlMka%%zs(kWf&V6dLc+Cm}-?t2gm^AI3zc57WV-!M@-Mx$ySUmvXzmckxT&RA_
zb%arMZD$%;%4QX?&Vy)WCHgxPO*cb+%l+E706v*G@1ubjDcp1&7j#&u`DRez9ASk@
zn{NXzyhKT!M{_5=pEn$Mcn9*N0dU|vj+j^q70@6DL73Pg_xoUX5+)QIz*a(*xcCw`
z&QUx57Nl|2=l(mM(LdU6fTEc@?)KujI{mc-af3-&J{7sjz3(JPJ*#qyQNC2g9peaz
zv}skzW<@4yke6Nid$8nw^&JoWvH2|S)1?46l=!KF=QS|5JvXfOs5_IAXn$XSIhuE^
z|C{iUM%DqO_xcOPR^O*@=NUH6A7`Y%>(4U`O=<}jU*xiDX)CioU>uKep|AHR=bSJ5
z3AYkoOBWFpZH9k`Z)ylxYp%{dmqWguc<O_+!miThP^KV!T0bYi@DUT!gT}=Fvl|6@
zGw_!tS8pboQDA}=gCu~H&CW}Py3p{J+DqR{GApycX|;Ai?V3k{HDt+ha&k9U3Y7F+
zo;-0ktLiI=cumGCa?{|8(cGtx9~)+hM4L{@Cs7p-3*qrHrd1xOy1ToV-%NuR)*F!F
zcT8k@>}&Ky7+e#FALxQoA)-ABHI5~rk?CLePk-i*49$e_A3<TY($H~2=;SYqorqSF
z6p>1qPQ1rQ*ra+ZV|Q|07FE5cAk**6Gh{(X|0hnI_}FFAlaTYY$~Z{HWx+ov?me1S
zGw??l;z8pLXa={_Kd6`FvOVg&TU!1juuG+*-CGto0fnah-?I4tO5B;{>N>mkO%eg@
zKCu&_1i=ZUi8lCpP+43188mCc(^0X=bQ8EcP}cn;cjssi{0INjK6gdkjgsPy8>oRb
zlY^{AHz>u&j%h=LCUA9i%}Nm#7HJx%6s6J?;Rm$PyZXh?@R&d|d9o)%tTBSq|M~OD
zb5LAoZP1xhc64+g#*xr;lMdM`7<E{iv?5k`!^oW=hkR;Mq^*TZ8%6Qg+gfKuAq~OB
zJTY|I==8_`59A8p<|y6=Ab#Xjl+4n<zuTeVvdoz2heLip*XykI6q0Y8UkVQ3V+y}w
z3=U)rPOL~V?GU`n0Nl-n^TA>}iE+|tg4m5@xy$ok#txsj?zb&|iE=VriX!^5w#!FG
z_I(7!J8ILq9(j8@nspj=@E=#$0vF*CQ23Z$ySV-Xi;9Y>4?;g9A0LI#MJi_Io>zqY
z9e{6P1*goTF8pZ#KA=1O8Ug$V5B&FJ2#!m>X95?{;lUSyKAi9k;k6H-g<c3q*Q7KY
z8pKWQ><cKfJsbWTWwwAl0uCuNSLvBg!Gx<Ue&)&Rv~`!=A9z#Y?gVg&@!@_=M;X{G
z^eicyU8KN)@ZZYFe!rrBx*G!aNQ;}>RJdon`1EBi+Xir+SU#Yp`l$Bs+np{adLVli
zzI(@Wk%Yt$xB)hY8)Qc`y|F%Qy?RT}A0C(-7MqU?A2v%2mOI6pjpTLIgj`c@lDI%`
zOyHxGZ`0J9SNyJ67q9j5U$3<rp2Kq0tM#qD`U~{)8B-6m+B518FScdlxw?)fG3|fs
zske|gH=9r#*z-Zc#^ga-278u6A_zq@Ox!d6%g~Q2@~07P?Ih_41L!W=HOqs0stI%?
z2<Yxp$unvhsGhDRxY^aCt@2yNc%=>_SE#slo1rR4)DR~(Y~CQbF?qJpcVRpUPo+Wv
zr;Cjj|1ZO6^!U&)7+znxQ48f$klr}fMMk3v$IYwS6h=WH;I^}+6Y>kzee>QG25*Ls
zw4Vo`5p55$u4^@&ed9DgVj!f(V`g>3il|f5z(Q|&q;9M3+i~+7&B3p7h?75F&J&I<
zg5J~;k5P$r82fF?n5kB0y&iA82<IH_DzL&*Ot@#xUFF!?cd`CVG|~U<as&jlfeXa}
zqN-{IkAkP#Vn%_3$pe8)v-J7b9#Co2AOYp30+1+9Oym8z#eOfwtaGa&SQtVzS5#bl
zD-GNLWs<aq|F*I^DXyCj-BK&I)M>al_cc`)^c|!`=ld=0LoPJRq3`?KQ>ms6cu+?G
ztqD_J8oQj-!#x(EBExy>mW2Y7(Zchd5(Y+PVL3T5hkiv%ET;B8J>R~db4-4Yt2e!o
zMV8wbVj*F<9>Kdo#h^MPRw^j?O^18A(sj5^U*<&)k%uH{p8i9TKi-s2&|%>e0BLD}
zE;;fcG%5YD3;;g5)y99Q40T~Th;=L-zI{c88^dW4J>O0O|8<wUGXSA}gu{Hu2!z%O
z;2w1;mY#Tb3GGB~p1{M0aX4f=eH+&ktMV;IN64HOa%?kpZQ6JZ5yw=s^3~5IJ)j+J
zTTuV;x1*zdd%fylw;AEV5GL5nr6#Ke(?3WDyS-VHcd17=^QLb#aJbd0!w$f=wE_0d
zwBP0~Ka)OaWEAQ*U*rTM2mQs5__9)xtWrUD(5IuFG6%_s<$i#_LUXL5F>pI_J)Tug
zli#w`i>(3ul9FZA_$v_xEs)_tCCAt;Yi+l~12-?JkV9uZ_v(Oebv8MsbUp-}LY1Yy
z<dEFGfqx_W8hly-FD#z52Fj)7s`sz_igqK{VxUj808X|)!&e4I?!)5R@52!bO`H*f
z{(~1U2b<Yw=CGRXwy@?oSEGZrrT+GNB(VO=0i~Pim3CmgtATCI=F;$>dD&uNN{><X
zGc*n`?%l2~62xcwpqY}ZU4xDq^T1mG7o0pekNe;vO+cUCT45b4a}Rzoz`b0q3t}(X
zH*`O@|NdO6BP=S7f&L(#`-;mPim`rDRF^zd#r|YnNEjrdjg?W{b>V?taDXqpl<0dd
zgmHY#EuA6TZeGy|Btp&BCL1Y~;-Gi1gxVLUjk>TZ0c!Sj%oQ7*&}advz;qDPJSQvr
z=`}K_n2<I;=eBTVrJ1FwkG)qNUzuRokbnIPYfy%&prHFKUqCD2`&UUFc8K=}D?u~9
zERPNX@K&SQU(o86Du`t~1A!#K69&OA%yq%oHHxs{w{3OB2UD*APWq2e%9a*6ILum-
zMIV&fm4LnJx`K}n=6>~rT-45uN0FAEx+hvp|KL``f{3i94po21pqPFggW49<_rFak
zi3!4j(%6SP)emIFcY3P62|qxnrXTRP8mNQ7bK_W`R-6m>d(by9v!k<1-da#?c2!3e
zEK*9*i5s_Gv$k5+aL^+zcmTks8%E=dK0S`5@_1Cc5s<m4(=(T{sw1I4&HgDEYcq-$
zbuF6)SyWpWmBG<h!@ghNZFzINN3jMAal4GNti?R%c1>!0`0*&tR~TqrEsR%vY3Ui?
zBsp<fPaF*+Rm18Nf%sC6H@IR*N##R>f5h`jvLbjBKZ17`&ltFYQYU>@acm0IA=S2*
zhW-1?<-^~IJY5DefVBI02GV5{e%v=dS?8QZJ_Hr|#An|;NG80}KiCM=`;k%_)6{>Z
zP^YLjeWZBdsK@9QNf*#vORyB-nCz==N#(g}6p9?yvV|@OMs44V3uKFHt>O)Vg!l*1
zJxodfPX$uZ6Co0K2F#k}eJAnAE_Zvd0js8R*!6HfGYa^&ec%Lp&S>536j?U#r@S=Q
z^Pe-EU?~zAB?ZE+Q}%`@q2>#T+qC%v1gF8=_sSp^!U<q5UlA;F0W>_Duk9rgk_er7
z$znk-xz4l5A~Hbp40E_+2xRy;SgVrE%7&l{v*c7N__Z9da!3Ppzwqf#&yPNKy{3Sh
zF;)j+6cJG(LW+1HF6MX1u=3)kIWfW^SqM66#chKHCWQ7Mtq(iXD#mahJZHF!S|s5S
zttId~<j}@E+hB^`#)nFujj4K$rS#-rXW9(RuQS6lvAu9fA0hh^WGVVV;AJtBsC>*5
z4$na_q7Io{K2dK|0a3>cXu3&dkGnI}IAL-2t*S>>mxCzpqv=Q+KPM(hmSb1t882fa
zMRUScP!f}QthwSIS~17fvo+V<4DQ_S?`0v;wm<dTDbvt{u0jW97W#P^9mPqa`c6a2
z6&1sZhs-A2l^Ge_**C8HTX4DRY|^vy(6951_=37pdC{@;UvS`mI;$Ga9A%$*tz6BS
zmAj8jK-V)0v~8CRebsM1{b5<Q*2Ex9nz>>59r|CymxAfO=FaOl^S)L|Q)G(ZFjEbr
z*VOhH`I_<)ymq3}^1wbviG^t#3)H)FAc-xVs+bIvR8PLK--VLp-F&+b{JNxSZ$SR{
z14TuCvK7-z-)rAj9}cDomRPwjc0&psR)=s{x3+s;Ri_a8>G}FXRiI5!!*MpzZ5ga`
zTXMnvh|1Uy6bmx(Gn>GF<nrl<FB}b|j#jCq`iTnx_ATta#SZgi&C@Zi<}i7b&1F1T
z-k)PkMDc*JGgetS@k_O7JkOjR>~XAmeSF$5Aph38l4PGatw)3Ad39dX$r2M+>E1g_
zP>ej@&9^g&|JZd@>uaOpc6Y_~=zDfIyGjkc^kFZtnqq`NcdwH&R=4VauME_Nd!@QR
zJjej<`U!^T0<g(>orsUlV`NJv5jN1nP_30gv+OIM#-YAf1ikY3l)Z(jx>RHfYFgBU
zJ+mOge{}MD*T$sCmiV>`-H1Zl3I>-5ju)2FEua-_CV6a4e>l+`+MB*6o}*Z)M<zLL
zf#sH{QE{UqBttg80)?yAeKSWfQHso`5r5bJoDyEYUNa|kv9Tc@Z{w?rO^YrvVmzkP
z!`oS?k}sGyICL#jvxx`o$#biEXa>A8PG#tI@F?b~za~H(+WVcO$ooUkQNu}eP;oDE
zS}LK<rXj9ra(Z_kZ)SO*fZ@9POHHTvt0%J%Pt{?eAM_BSazH_oDmAW`cwd6lVe{S-
zFu2zc&4iwFv15l9!w*qSyaJ;9^aETpI7$nGK@NBFVlylZ4~^glurO?~Qu5yV&4S=v
z5roi|f+SoOP%4Z;sl;E5h9i|?I_^p|WG!I_{8Mk`hgNyihsD5i?d&vU6=q<=Xnvs<
z27o1Rx)A#PT(~)SNBL$$z9Le@=y)t2l9E&z(W5yn?dc=k>?_h!wb(5AK-#5NTZH_s
zSg!TK#{MA)el}sUrBfmYklBenire7pSm;N}?WNA?+OGd-TjN4DqL72pN<Ok5vjIoQ
zEz4?1we*Rd_uAhJEtQoW2(JxmY;Hzrb-{_L43?Bb&QWjCukxJG*iOmo1Igq0Om=#u
zOj8KhFK1MRrp2Vobm~qr$i+RMe{p$fKy+PxADX>oD$tD^*sp@_m;AJ0i&pP#tlO{j
zqU?MV){8^5*1HQrGySgu<HX<YQPm|7ud(U%pjRa~6Vl*MQp6?WnaSJ%Qtvm@e3=0<
zN7wc5E#}s~ewQzw`BsoNom9YN+j5DVe0j@FEQ?59je}40N*dP8c0IO84_Bn~RzLHC
zGW9L>8uHrM^%}6bKWkk;?zC`&1degkLcd`Qj=E%m-sB-KPzAHOKhN@F(9LfbDx}_5
zge@CTHOiHFxHBD-G`qo_p{tP+r<>~MLtkppQBut?dwa`qyI!zhz94I&^!xib%jt55
z^^<<vTrLj1YNbi{`)nT7vy#^9#lQJxCzArN7`TaPm|^p#d}A9sZ0=I}x{9NZsh#No
zY<6|Apn=U+oz#L1{f-iPX69DJh8#Nnwn2zWf7HC4RBsNiddF?y>64xc3hBxn!(Bd;
zk%0r&tBCisB^#tCw}?OF|C(rriCjs0&hT`vo~_Kf=>gHwcRa-v;^qDE;jJ%wl!UwV
z<OQf|X8y$na*aHBI53Q!8t{?aGKg4|<%!f|HwpI5t1lzSyZK3o|6|_5=v^nh1$&gU
z+0&cR%)VHI!x`9WOO*YXZh_I3o>5MCg8{39W<3_Dz?Q7L?|HWLdLJqlS*zO*D5PV<
zNBfr%xLWQ)yN4wr3r(kY2XEVx!SPuR?1ZiA<9NlVrrn$6WqApn1l)_KOxhSL;WTpu
zWr4F3h(aMC(9XPWB6-xm*=`RW?hBwZX@_UxMSuH!Mtm`L2OIiny>n<7qvbo_BXmLw
z?|7W#07WRO7+2UJTac9(pDOW?^e5w07ZX}p<tqRdc;rD7LslP%0f(nc+jSyZnZr9Y
z3dwZ5$FgL!-g9A@5NGI8O~)|iHYy)ctEJKN4BHAp0;AM;bGQODr6>mFe)MmTx-Rp{
zdyCs$iaWYsJsdP=(cZ_8f-&)F`e5;pTh}0wdd4>5{>&uwEYvS0Nz{4aXw+-4ykLc(
zGpEgM+(|`p<Kf*a)m>H3K$S5Ed{Un;DrD(*KX&qD_~Em(`ug(iPTyRz4=KkhO$A}=
zQKk)~Ly&GT2K_@bcrlyk8sVs2yU{ez^=RZPgW_fpF3WoP5c=L6+SSK6&s(logGP8A
z^ANK_2YcX>+U(^emQupx&Bgw_WSg(MCS(VJn)8-U<pbRXQH&nTgpY0m$;|@7qefpf
z*0AB%?SL_3cKS6O&Y`iS2he&ywU`uPE>U<Xx4l4Xg)jD1(U7$d#2tpo{l@fFk}vnK
z2H2zR%giY!!Jgsz;Iu8~UPn;*<C{-)!Ly};As5slg<-k?#=d-qRT<Q^sm!tHq_%!?
z9m}Pe)V7h>%vg3$zK0nOEvL1rS(LAe<gN=M!pL{-)KFm44QolX<tQ~zU`Ss}PeBy8
zLYzQi)x1K1%yrMIDD%MP(X}g{p(9rHq~d({Up(t+!G5>pnz9S|ut~#2ihDYwwc@DJ
z!-G&$MM8B;x7i_eknm6_lDEXbFgF^2+><7v5Ug~U`ZB9M?g{t4F2%d_)IS@J#a8)2
zIpM|UrPF{fxJklgYb1sp)l0B8j=_Gn;^9#szf29|GQabTEx+~j1iqg|f@hITX@{m(
zB#$^B@2mIj1kn-eZ#Q>ywE_*CzAosoXrUAx4T9;CH@z7W3ZLoweD2#2l~Bo47dJ5<
zaB0XSF72?dC&wDR+Y&TkY8r#jB)fD-BLjNgP-2&@&N6LHmrmZnJ-{elU&Bu~S$9v(
zxES+$=klNS;Mue7LS0y@?Z=&oof{bDcm|WCNjOW@i#yQp@$rZ2W*ytr@Fu{Xx9ePE
z5-m919QSok@xHK+_dYEso6LY`K0S|-gM%Y(N-i<7UGd{3g}cYxOsUUG7rVD&I*vJj
zKocFY(Otxpm%GtpjE;9N(~lj*TPpTJgo3V+<O6GVi1>60RP{Uy`NU=x0Qn)h`AVyB
z;72-CT9en%><k_xUkZN9C7K$a)Vs3|b(?K`@J|_=T>obxiG1+Mjx!|4%sH%4k!#aa
zP}Havni9=?%(QW@y|`3~GUqf?1qNK%*1fVhvDDVk5)YBgUD$++5apz;gi>_(H69NK
zC-_BUC{B+f4zZt%yLI@BorypihWBjX*-ST4GKY`g`4Ks(>v~EH<Cc-$nx$}5Tt#cL
zW)u_$y`a?i?whUV@V#-Y*&N)W$kHlWEtcnW>b%aOD_i)kq;|Ovrl-UtQY<~8MaUKO
z_7&GUB6@HB(GCm!wy;3dK!vWDFERVjV~1gUJi^SgsXnzbF1xd|N*ZQ!+YANg8*>Is
zgwU|DYR?d8PIPyy%HKi1apQ)YiYVBiE#~x+XU00I5^C7W<#u=H(ld%ucUoe2P7XOt
zN4XVVm`N8PIviDXH%zF~xh62+>e92b`ynk;;>KyU#hHW9gROJM9XoPvxO4<jh8LR7
zUAB&Gr}Vrkd|%L$p<xV;!ZSq0ll=8`Pba{4)<=&6Tocev_`QVQLjCiwu-^{z>ecfN
zSmRi$FIN?38?g%cT;#oO2otBr5=CE7>Qvm&)VI3PDEhuB8-oiM#}iA*$UzaUY%+Z>
z>C$r|{-pvH>}`yYg+>ye!9>IF*ySTmV*whdJ_EHf-j0gi1Vxwmj`HlNd)GquOWA5p
z$_^Qz@bSvp$cjr-3QUx*Tt^-)E;+~i&VV9nt_=#ct2@?%9*aH$vjh*#Cj2}&cA6_V
zCVDH}99}P})V8L)ttjlb>XUv){Rg2aApXQ&{E#DqOTT_-Ke(1&;84D^xz|;(-pZ{b
zigxDnmlOyRFGkW;@~H4G&yCLkSyvU1gmD925OPuk5G~w(5p9^eC#92Riv7X@oRgbw
zi&+-gQRomF8EJz&z6g|!O1Agw?R-N%yqRUL{PB?6b|%27Pa`U}{G1s3&2-ljJ#Wce
zT)|FZxWS1Y^dBDMMa4jpnn~I5nut{@p3xEU^DO`gsFRv$lwI#`=nl=Zw()fFPHMgv
z#Nd1w&2?cPjER<5eW_ATjUHJa$q*nVpGJziMDZKt&9Ev~gM3mO>kmxxNNZe=+6_wF
zTkVbVq}|<UoC*#gEpeP8OjC5*pKteC%QzOOEJ_B>A9uFsO&MEVU0vey6=B|f)vMF(
zl<}sN{bA|jjQ7TNRd9<+aaTo5wlh_1dB=jmpfEgBSix4-s6F<MVwt@ex8>Ng3e-|r
zlF7NOlnkWb73%0!Y%yAy8T8>*raas3u5ogd0hD9bz1QZR&IgbA)gM@5bju~{d2)Wu
zQ0vu*Pw~hU!P@3qclRxaWNV4E825g%VvAb*oB4ycna$-USGw_Vk*rYym0Re;IaeGa
z>~<cjr>h`zi{bDl<bH;VP&f(LAU)~9FAQ@E&UHAPAmRH-syR*I#9_*G4S2Z_RY3CL
zHfzW90k;IcvZKtHFKwSsxomE`k-p*7lza7T>NCFw;PH6V(?3NjimRKH0o1GB+XA#e
zIbJval_1szHz~7re^olX8rRa?_JgQ>f(x<hFAkE<s$b~q0=eMF>WAQCV+zJ~Zn_7M
z-b@K%l%F>)7R;|7$@gM_pVuJM1$6Xsl=i?$q-a;uBb_d<623MjHXg@io;p+BUSOg`
zc=J8VnyV_6lmO!aL-qgz*LN3Cs$J5D@IQP*L5CRfVw>p;ET@IG=P$V9)8C@&bA}G8
zJ=_J_+lBO#Dd4ciEOlr4wkKE032#G&XJXqYDs;12W3X8N4{L87R%O3!4L>4?f{IG1
zNC`@VqJ$vb(%mK9C@yLVOHf2nLJ$y;2I+1VjS7f#cd5hz7Txj9^~AfM@0`7__w2LZ
z|L_u#`(D48bBr;^$OP|6!P@!zyM5Zm1jFZrd9eWIk7cb74?HE0%Up-JhDz_vExVjB
z@i-!~oxBdIlv)OGyMe>uB^(Yi65+gmfnq(U&HdoyYppGQ^VKNS)Upeo&Hc{dr*%rL
zJhjHN`Y*qCsyG8mSIRVq2qe0xTl|i8v9N4*@i7)*qcP}N%5iPyAn~@K{a%&Oa*6mA
znkBWnEyeQvjKc_J$0u0wfL4bh|H#r0_X8Ym$;+2FywBSn?qnGm+xSBKqm+f@ec?kt
z7pAD$R@$Y~0n4Q)SWVW8cGz?5HWfkNL;p3$D;j|3$&a&sN08iEFclIiUqn3f+USxQ
zlXyB6K=ZNp`Ml>VwdBiEYohVP-(EQr1e%Y7b77r?pXZ0wIOOu9H<|tgo6bflHvkRF
zAb{{sx_zP@!O1!P`_7Yf=4@H256E2;E@d|6)XwD6Fl*QOYO8tfR4c~t`VhAE>B^88
z?7tD{XHJokA{n&XkR&JIn5(xVM`(G1n^V|Z%k=Z=L?_n-=JDNDT59yecyO;hlo%J@
zd3QQ3Kp-s6rTrd#RIf)1X63!w>63rJUb@PnvCMt-W0-PKH?e2I`BO-)DkI|+yj5dm
zr(u_;z6faE(zv$FAdQfx<lBT5eC!@w@8(x93O%{)K(_Ts1wYSPx2ipoNMa?TZQo$v
zCRC-5xbkZD7V5mR00$w+<><Y=9;Pf@aOuVaMqSI}$1Fb-8Qx~4KQG)a5}?QmOBYz%
zZv`xHIagVu_nzjgcHVk{h=CZj5|3A+xF22^+oTdh7}Dn=>Tomi%h#`!9eo)Z+tXE-
z76iVcmdLN=hR|S~sWi5~a+Xixm0_*D7gqGjS5O^owgO}R>i$OIllelr-!!CRZGL`I
z>NU~@;F7p=WlIrN?%Qx+{u42&`QhcSpIk&$of}56&=glp5)$DJ8P=f=)S0{x?b>q6
zkTEn1k;;}}WPE0K|6{0)bGfgt_68pTN;SO$%)(AO&F?IYjjWD8T`Xv_?@d=-P8BC0
zOPCIaHa$sb>l2Sby?!p(g`CPQc=COXu-zSTAm%EdY%RF^M&y+=N?ny-43v6H<JBX6
zmhMtbdR(V9u`KDbsIt}e@Tqoe{fN@`@RKUdGbPkyPZDpPCXbb={*AD@|DN&$fkts4
zIJUq4QI%lPy^YUhLeFm?){}XTe2lVp;^P5IM9uwqjmsQXo^@{|XnQ+$@d(+rNAFyP
zPv)6a$3^`{gUmS_`?Kq1A8p=Gk%;vh22(n=cewsU(D;Ah=|W85L5Gum+7&~I;g5(0
zo2}L$5e8Rz`F!82v?J5!FwRPmuV%x@S@#;r+w-Caj4Cjn&EE()+4v%m-eJhvDVyEJ
zA^iY!JShoHDKS>x>5M-KdcgR+;7|aWY}`ZVCV72_W#fIr*cLB&-9GNy%d>!;KDk^o
zL~%%k{e(*Kx@~93g)02n_t<c)?$k)damc>?X!VVy4I&xG&wu0({ZqL7G*bd$8h}-o
zF4N1B^z~-z_5`YJK)wRHWy53-V7}<=GeW&j;nqWMZ~j(7qY_+fE?Mq-OfMg}oVK|l
zQpFFrARo5|BW|C*K8b*RiX@hVWQ2=an<1&+q$myFr`&lvuKr34I*rj;BEgm5n&|FE
zERp;QO=thB)T1CtTRWJ{aeN{{j+k2&XmO_(_C!JB;X3Xydt*e_vmA{&K3YDUyy#rC
zO<}Qwqb*YKj<5|c*z(<Q#nU}yy4$zAdf)X>5mbT$cy7-_=dNnHF|IB*6uDp4yirI%
zO;{Q%E0oX$Rs&OTQTe3uTR3QyPT}<(?aYu2nD(M6E{k|SZMN7FINBFP?VY^T;3sBH
zwhFbuSc%7S#cXAJBJ0t`hLS~qhtJ+K4lG{stJoF1xZg;Qiy-UE(pKiJK0X=%SEd|s
zKcd_q@gOqSluMjD?fOPsi<3~Z6Boy8VcvVQ6&qVmsHWK=@&$2RiKg~otTcyq#m@-+
zY`DFbtrWAA+KsxJF;~fj%69}`!_Pk$$Rw&%X*Np#P22C;D3Fo4Ltt}B*pQ^A$0aO5
z$40y(@viTpu^2lz06Ay9kAtF>3=<y^ltaX}>Ytcm{tMz158cNiNjN9Gwhig>bxk>7
z7{j432z{h<ST9EK?j@Tfa#3g)Zdek`;Jn`gyFvLaxw)X(l=UJvkv8Ii)%Yw8F4!kn
zFQ{d3Eb72pJmpq!G+tP)2Je0xr<#?v@)GFN8&Nm;N2MpuDe+I?Yd4|ddXJ`KvkuRt
z9|Fx*UUmR6qL^e8$JqVnZz6Kw<XCoCV&h&Hf2(GA58{eNHSj8DMIL^BRd@Saj7}}`
z4?<Zs%-Jv9l?#0Ie%Bp{YLVhf<c>CvZ=PNrjH?~Sxy(JEzapaT!%!Ygj#1$UzucS;
zi%+qo$6ll)DMM3HS6qoU3=lC${1QcA-yA5{^Rgr^i<hRDSAwrxQ@BX&WA)IwZ1ieF
z_-en!XUlDuKDC0aJ)xH8S2l*Ijz=73YKE5<0_R+lcrs%L4zD?sHzZ0}T5ao5CLDWw
zZi!%WTf0T5=|0tHxb>A1Z7^0(9WWF=%S2+@%sCRW`40}T`2cSW?Z$^FCeqyS*F8?B
zjzT%;i2n_FFU)&JV?Q7f0)>YBn#u+M<=Id$Iew7{yqvzx!<sAIq<LoB*?_;|E$F%h
zg69)O1J9@X=avXB<Y%ca9x!;MmJ+y#>t|e90ockM<s;ib?n{36aU9LB0WTWFhc1Z$
z0jKoz^|ySLAC1yBR?sMOO~gwzrfWj?bK=!m!`ZaYKg}lGkwE0DURHsQ-Jlx1T-hpg
z_5rR<d7K25$h}8dMeWe>)?GXyL;}^PXv{5BUnH&$jFHX?dh<qJ`mXEZps3a0h*Pal
zr>+rs4{7dX?YN3Q(X@t%*p~ou^-%>}^fs^~&3&r*jf#9@WQ8>~n5>?f0K6+O84%BC
z-h)ZFYWt8QM!<8ysn_b`Bk96hzXjscEa*u%?B-d337Hi7V6AnG9Tw68Be;*Ym=|pY
z4-3KlDcbz}*lVnZh}=BkE7_@w5UHHg-*r#}w#7AGXf(|zxTd2ifN2nMfI>0%3X1tN
zm?s+Y#|H@5`V%#GS{>awiz;sbSZBd^P2<$r%ahCVeyj`Si+(!HFL1u!!It6aZ$u+V
zJ8$cqz+)BA@~pM;jO};!gTRnm&J&W<w&dAQzp<oA+Ru<^pQb!t1Q^CZm(dM_3juhi
z!KZ#{VeWFeS)%s!bK0-A29d>$<i3r*8*bq$QX}A1_imXXHVo`svEEz$SLW{LF6EhJ
zw!2-?gczy|<sD_H<9A|=gd{Zf0wkGpSV^Pbp8G0qx>10Q(O&CAvoMmq9ccLnzfc-4
zF6=atlXW|9_GzQH5y#3Xc_QtD*&da|OIJ#ki=T@sQFg9J6Wuzax#89iIQ6e5NsJif
zay<0OKU+9+JD=<exhtJ-g?Tq-twQYyxpbypJe5&9A=Bo?^5vP|20mN*;fdK%yXX4%
z-{oxi!5Y(YQYh}1;H%u+@@IRxh4ID+dD>~vRO`o^P)CzJ>5-($&9~X7x7%8IM@4#r
z=x2ehguH+3_FLMmp}N(P(OEt|PJ6c!mTP^F)vo+w#=++;*$U0Z>Ap|L!H=%oQy#`m
z4g7U$`4pc?FUqFz>~C}&Z`QVzBl%&c@fb@lgTm|yz7ao*OGG(G#aj$YI2oRG*eji9
zHz%v457&c(wjua=7^;$Ns18**)RnB+STEq*IZH`j-8B%44cf@B7P#oaQ2est)lCCa
z0LnQ(%WV4{q)G=~T^8GC%Pnun)XIteQ3Rr_iXi2#_kdXuz(r^&uz<s(hQvhct&Gyb
zfzTWVz<}~`$z8Ql>F-*qO(UM03l{!;R@Asl>l()-t)D@1Ocnzwovw(-uD^VrpY`gh
zUaak5EHCVsgnfA;Ih7_3RM*-ZO{jF0FknKVewXjBekNTWW{Bqgqv8xeN2Z?t$Vz0m
zJ~8khqZ+ikgzaJV13dLT8D>QS<(V6QNDFwkT>#+CMK25N1Ak^92qs`WSNvF~U_9NH
z`t>Tre2#gEd!?;N8<X(F)~c7(79r5COL$^u>U;c%wN;vou;WQvewJ;~eulmBoE4wP
zf;Dgn6CencEY#~2qia3G{JmRnyx3u+KMr6PModTqz<i8IpD0^<P!e#yWs1H8a%CLr
z^T=3g8wnwce&$6gvV})m3897!<S=G2<7<_~LX_QgPfTj|Ho;jIjV5EV#|b9!t(@rZ
z58m^0>zLn_n&LP1+6=D-py$(y@B4u5`;j8wr6-uGT(nk-;aLv$oysqq&*SiNQ<;?1
z+itODhn=cK;ST9r2BKc+N!ZSRCgQLy7k^WzxELFxp6y(7-DioE(}cddo+$bROnNtx
zkMCRNor|gx%A5$)kESTl*Qa>=`&xc@D2BEjJjLhmGqhl9yza;R*YSp@hfOEY`y~u~
z8oB&M&(2jBSZlP(S^S>`djg+ZP4vv7pxd%Szd5LFMqe?2sI9emsEgw7$jLRc6UWUG
zp8RSga?<MDaDGL5sNv>no9FS~y<oGJ?51)ouczQL`uIXV)~kxJd^5l7!QCmMOj=r6
zr>pat)CgZ%vVmCuzaGaDR9##<NRF4TTvDSt$JOncj&m|ImpVaklbK&kia`{a{N+^M
z8=4QakVuByhh4!7Q3=2Aufp7CHO3?m?V9sUnjQeT?XVXro_3$CEMZyLE*xYeUBC}~
zwZwJD@_RlYC{5LUklKvtO7`Es2WpdxCvA=dNIa5F_L(#io*xAn0LfD~LUMoQ84DS6
z^jbY3Z8;q;YO+>fU0M(J&QIxXEmbO@8i)kvp{AM5eW!6ZvwUEcU1*Bv=-D&4{B$AZ
zU7}sYpxjsco*t(6>609{!_5IEV$DuhHVA~-->;>to5iwYu=%lSOvBD#);s_b{%H#3
zeU}yQd1FUEKKDegVct}Ef7*QZlFgqk_}p1_aPArK`z*)Km4mj|p3SJrJ@ktgNB|5~
zq6559FclIry{cC`L6ou)AnrltN$NmvFm+9)AJV1kc*3pH6S^UUR!S<<#RT|zydE69
zKqio~Zjhcd*$w5gh^~ric@*p0G^kd6%(AtWea_&hrV~8lUcz3#!1vOiiFizj<pnc5
z)Rr9eh$iGu&&QDxYag6Ywb|8I*O=6hrXvIy@rALkOfcWfW&2mzL-Dt=XNW7x{!L-z
zpdd9<+U5L^i?D20U%l}k84FzQc&N|!^UL8b)*W-yV5yyfD|%#KUGVLrBF)+C49snh
z3ZGtVi<1eZ5s9yzSVq}p?e7+IKXNteVMsi~626f3S<g?+!yw$ck$j7W-+XgF+pQ-~
zgFo1doADsf1hvw*xd{RGcFM92T|3wQaVr0puYB&F!3E3QRQNDSv)r35)paTzRDm~L
zZ{kk!?i&|C#9yoaMw+X)IeSk;IgSB^?UfkvOxL?H>`dS^)%O(uw7H{<=XDK!#3wPS
z7yN-RsG#$Q0!kmCqERc)Ien7IG_AX_+beFih+W+8(d>w~@XQ73+ls!c!cWT$kxM1?
z+Nunbwv4Le)NgvY_iS8?%)D?Xa5n1-9EQU=W#d<Mo+3)O1qM&$_25JS@Z*(xGHbTS
zk&fo8)&Y1Uy}O3g*lJNiCr>|?k8a~0%RiwfpU0!r=&dh?Rglpxop{oZh@2ZGgG8L~
zOGm%MsmX`nhc9Qcn#-C>Oa;^yEdnA=KF1$}E6VRa1xU#;;;K{?5SH{-@p|RHe5xt^
zEJJewOG$4y3pX*r_wzEb7l~$8a*sER%9Z+#ltv&XudIm%$^Ij|0oW?R{+gpb%%_#t
z&Qc8J$krW5f6;-7GKQfaa2(5@nRBy-X4*y%>}?~WP6@425_~I$O60;vZm`qDK;l^R
zFs!Plz$YN~(Ed20EC=AbjH|d<BH+d&v*Q}h)j-0ETM&>*TzK`onU@vw(`zW1--=0X
z_k)yYu|e^$sU7yv@MwjLAvKqQ*r9!<M#l7bPqhGceUjiDWp2Wrt+v#xtDo!(wxf{L
z0<$JP@YPWNJ;73vE5U^4*vlP7TuF#MY?q#Ry!Fx7*>ADJP?zn`^Ku7;D?x4@&6ef#
zyv?OA)6G(k9vTb^gYfYNpAM))S{$PgWfmIHPSgC+PA^by>)JFu0AW(VCgD=1Db?sg
zoT_kMU=8+jx|R?uC?0QB>}ILpQAkXOa>qye+a96g8*3Dk87zWJv3YLjNFjZS0?v#0
zB9bL5f7pHeqiX-#S9RaFmdEUXqkl}n5-1&ci2_7{4{+sh0i`U5LH$I%?9@G6PH<tn
z+!fHWRsDjQvfBuSHGyVk$*E|&+(&%}3|&Ay-p#z|5?p=DMG|&GP~J0?xdQ<+GaZvg
z#dH9hLhLO~I0GpYT%Jb8Rs6p5CD|silbJT^m=J#N19vKZXOrThN1Hr&o4Qu9;h$`H
z-bou{2lC=sCdE=gwYP-}3ynXd7NLE*B8Hy-6mvZ;Smc_L80kXFRhw0}?g5_H(%AEw
z2h_*3UK^_Dsh3m+B_K?INN0&p=N(yD2(%@y=1v+fzt2`LR3#k8rJS-(2`s<FXyka<
z>T2TfqMjOx%ooJkD}*}u!PCo5O(<oxfoxnVPfART=V^1669g6CKip<eY`u03O23|)
zl#)eY$T?sHVXI3JexRg263vW$!G`0JInC+HnN{@ayIEnsmlv&n1BLz4N0$bFw&p=Q
zb^6;xZ(3d@33CzYtPnEJBXAvr!%-zB*JWyum1stA=IxzOMN)`O4d+BJa=TThCt;e(
z%gfDsUJ`5TK*$5}qTKw)X`Wvs52Ek6eA3J_66)Jbg1IzFE}Ww3cShK{$xdt{16Q6&
z1(3b2>9W61Fhw-vK2vD>C$nb~LEb=KqrV!?bGe6c@t3V(Zd73Plp))PGL?k(V~V!?
zuYJ*a2H#PX`G54ILtKh6hcWHOI={=T9V}y+;W8s6p)PgtJfzYo$vF8y-%m|O+U5)=
z^8B?zUk?{14?!TQ`Gl*#P-F{F4tq>4B=zT-!er*jRsS5-<IPf$)%+~JL^qbKM-S#=
z4x<q0e1reSI{wiZ|Awb4QFq+AkAoQ*4yB6VbCpb%GK76aXNIo^pO^@KZkJrOYTKd9
zM82tn3FFYD08F%e3<UOD6EzdaXW)M=94B17Rf*BmHY8u8KY}x_srTK3R4ACYzTfF6
zhm{q93(8japHz{mzu>X{>&8=hGgopwNC0PN&37CVu<K0l(f17G%)D3tFL`e?KsskL
zsADQ<Q}@ZHu08H|kvYSBb`nCT&OZryFpn-IOvdgLQ?Sc+$x+{`Ryy8W&It-<U7*t~
zw(iRB`P$T^4@Jc2?84$b&y6{A1SCN@MjCl$ASWhn8x0WaQIf~T^d|BfbovMkP%^Jf
ztcP*c9ux}g{s?m%cBXy_r0Wv=-cPiSf{qtb7W{;m=fr$S>VJaq#qwz8%5UU`3^rFZ
zyP@h<ss>Hcqos89Ea^)moM+CQ;p`M|UD|#C><85Zs+P;(!vY+&_V7Z|?7kW|i8NFQ
z_slH;nWW4sNbu}FaR19*sF0W9m-NaUm&OO4409$n#2@q+d;ARlG)WBTsH$kw7pV4A
z%54R-kg>nWBUB(+Ya2OJ>r{x`cBG8PMeCwVD*=Gpp;pM!*E+9#8LBfO5F$JF`Jbb*
zB%(RZNhH~6#fno$os{D_j5PMPfe8a*IqIjvJ%#h53AiI34aatvV%khzP$O%jKS`Ng
zUNvuD+Z+i;EC{>7nw!1lu7FIbb=UO^Nt1cWb;8*3gyo)jZ$oEz-|u3KQsJK6g3qQh
z{yB$bN1OvWgn{r@i&Is3;Upe+2@WqDMJ`yTf(bl@N?k*-O^*WoS5~5%FpNMB#>$eQ
zF<N*0`iIC8BvIt}h2rJnPajrkdKUVEhK($uSaJ6k@77B>ExKHjW`X%LTKp`zDLHf1
zta2(6T7#t-9A?n2^lsI4jW~SGLyp-iv5{KkZL-I)OPX#q9J*qu^mEi3#rumKF0LPG
z#YO-Z@@9G|NShbEi(@ZH_agGu9~@AAbl%Ay%9j(gUvonm#1=}KEhdYls+mo?{H-Ma
ztDF3@Zs}&63}n;*XtJ*HX&0{~kVg-Daq7r!t`NASQDiD@ipl={xrTzb%mO=cMJORn
zc`jVy33ozSp;KBZ%OXtWNwQyQ93{d)wk>kB>PcMJ$wk(y1<RljaTBrA3oLX4c!06K
zli6coFy-CSUFu}}RFrWd$jm@j3@s%O!a()R@^8sjsdpb%NSkS@rp4m?$H&4gKvxWX
zBkKxCXe*UejQmlEZtdBjx6HUBobD_{4|w+{%LKoQ*$fUk1l3N3=t-1rt#`E{G+RE{
zEu%COM4g6=2O?iXmC4kQ3Y;?7S~j?<H$qty#C#mDUNn%R0K*zL5w>Td^=Ip2_a;0s
z97tej45?B6N3^JeuHiB#?6@{_7X%t+1I^{*u~4<!tFBz(kqHGw6G)M-?%aoC?kbG7
zuXm6Xr<y<pC+2398$@0y1dUg+JgZ}~DN(X9gSfeY+?f(Sk=-91@glccz|LCH)Wc{V
zDv5-!!g2LxKdV%g^M<rvzkWTnurD}y%89soEBK=~c&VHczgBgM?0nLN^G>w`uIKu8
z`BM=;?%)@O)xkI-+3ChJi0_&g<e?%rn2Zi+ry>fKb86bmhD<CBqajxYGrx?_siQ)O
zoMJqI2RtG)Glh5B`5P6J*1y7k9=4=b`PCC*Y{vEhIk+2(K1dYxoDdwhO>rMv@8(ra
zf9A%ieR&-AQiMGydp<d<g*zvT))S}9d}<KTc*2oh+v+YgI{{p52cmfE8}u?(FnH<8
zMgD%KZ=eFvog(Mcu~8vlgP|G6DS{UO(cRFiS2l9b?4JkFrWmBc1iw=E{csW*6I#s=
z5`az@_2jW&fK}7gfk7|!s#TpQe=c5GLpnBS2RR&(+c%L8U4vxWbD2cigCo>886mz<
zIp5cEFxip`xjS5@*7W@$PdDH%W*w$>N1dJ{@$Q2;9;<j2OYIR%I(}hmgL@qQi)g9+
zrDWrv7hIozeX|JL3om@Y^z%_(4<PsRj$Ynx4)Zsj*)bR^aH6xME@l~V_LpLX&9NP0
zW)mE{*rJw0`I~2qn;*vbfBBbYWzC=Qj#N+aWX91vRgwpJEQhTE&iOS(nGQr^CAq3|
z8@DO~8qVJJgsHx}-x38_J*agzDo`65)#ss>>^Mjsn?LcSO(uE5mQe=*7o<Gh^}n<L
zKf|^0*wR#&H$+PT<~rN94l<ZBy%O6Y5W_1nEZA(QIaO?QdIF-_L-?f^u1!%2iXGUG
zVfZ)G8`}Y-nUy}TDH=E+r=FFr6pG(%J{8!O1b|Qw*<gX0KW4H9l*?sDdyZpeP7@j&
zcUg;Tlab|TaMuO)C*Xehc6t*dJfR3^VY5MBUJ5fC11##)KQuR}jbrauCk4eX{I)>u
z$HY9C<GwoWXg&tH6BQ^{qJ0him;o^zQ{qaB)n6mED3rF$)L9~q6@jD$7gU;RbqyvL
zJ&Fhl$VENLNyO0J!&GJLy2od%&$lqeU(@*t_j>xpK!M!$BBQQ*XaHwQLAVOxyd4H<
zT6y@!$kZl*(b5UPJ7WQx^$E^`XscX8n2Wb3YFKfr(Y%4^ji}b<bsAr+adDSQPPL<A
zO%NL~ZmqKFcz5En#(@~6=MrtTK^~7&o5cEn)m6Fi7^5jFBYxxZ%_%SZLbRyu6cJ3M
zD6Ap(;Z8{Lq*0lB)6T{cj@xZW83A4osivq14*lWfG4#n<mg7gPIDU=gMQ>KJOEUqb
zfys>r?{87x(In$faQWaC|DZl)n1YB2FxltCs+Wa4i?g!K(Cuirc=7>cqI~e9BuA7s
z7F|*W{!)*8&Jvwi`vz~`1bS)(1m8B{gnN?~$2uH0i>Tv$W4gg+J6WIft1U)SUJkg6
zc==4G^@Pgh7rw7>3fJ~9qkLas&@>E!ZC8;>d1yetT%sa$N<0Lq3)kjKa`NBsjk`1S
zdEM<J|J}eKL<~3kcY(3(Pj!yyFEX6oEdJo$n4Xej4C^!xx!#~Y^;beXif$?p>3H`p
zpF|%Nv#H0rX=R0sI}_w!w^3j8^9D-s@hHTvFyou{j@?+?AUaOP0>f##9wgzq-Ky`<
zRl90hLH=V!D=%fe)pq3N&wss_M)9r|C{t@|_9pVU|5%lc1evI8>L2jVM^Q##SE%)T
zXLAW_4@si4!U6^8Gg8QM^C5_k4=;!B;luKh?&nLMlM^DLNi+@pCouxp6pc8qEnU88
z4%~cYa|@m)%>!!dgG8Rh`x_omcs=GO#{}W9Be@e^O#RGVT@;94?3$SxnPI6+24Z5u
z0))FKPl~sxP^&O0ef+Q(7b<?CcS<-lsr?wP(n3-tetH!}2IKAdo+e=++44bZ{S(^m
z$Mg<IN$q(=JhJlwQUjvkMd0dl?kE)A7ox83)z~m^M))N7%IW#XOrWtfcF;W%qxp|8
zVh%Eh@0*l<s*+bdFTi4R#U<L738}FT7$I|r^;FzX5%_#$4^hJrH2!$hKay{I0$a7T
z*2<;)C=|Ck$$JEF0=J6=FtV|NMh3z_P#+-u7p&E#iLPuCzCYEWGJC_XeW!z?k}0h=
z#@!TuiUQ(35;?1Gh9)81i85Ekqr??wL`n&bnQWsVQSSY8rMtr^$k_GrWBOer=A5ds
z9_fSkf$Wn6jyB<b1GGt$g?#?CKTCFJ4g5kd?vGes8;BXsMjgv1o+IqeeaME)YUD>A
zjzne;L{2$5OXCgysr4UPJN1LBbvg&*5<@MKRYW`tO~;t^wtc_7QZXCt*ql+E`i;D5
z@9lSlz6TZ~%M!d#8qV)81Rq8??>J8;gMLeY?AxRMqRlf}^C|b`K2<n^7_9I}R<t3q
zQK|GgLD1-=;(hnQ_UdipZI_{>+gn`;KTys5Pns9|g55?w=edovANq$D>z6$=!VG=N
zk5y&i3~iJDJ+Jw{;5~o-F^QscP7ZXcE+pLq!Ag`4W&o*_0XH$KNO9lRq}W0AcUwC;
z?h}D3xvGwuzO)BhWk5UoLpCKq(~8|I7LkUQ!S~l*QJMA&zO027u^(pTv^$QURSIw#
zLPn3=CvCz6N+WmrAI<JpTa>4WuioyY&7R~*u;KBImEK+#G0!Ee<AOmU%xFbXU!JiD
z_i0<)Z0J2v(O4>;=qJuhR}l~T3J#!6?l?h|eH{SUkVAZ24la6cAuHMFHi}vA0V#xU
zF}XHTyOpypFlS<3TE7u!4yF|uzpISua&trQYBIGsQ!|6+ej!&1G#gorJ*;G66Z?IS
zM8N!mo>Gqbj<NUdPey9~K93U9#+R-DqmJN??#BX#c5{`|Q|Dm}QAtgPT8eyw;@Y=K
zL-n>ep^-jqnPG_GWwJ9qfd}|WX<D48ZKwdQ5n&dcI(KwIFmPE2D0a&Gd{*t(_$qgS
zNsGun+|cnK$&L5giW)iPP26TYqDXCiNKyHfT`fg6^b^@anw_+vwx?7NCR#B$7J1?-
zOtw9CI28$P%Lv$fge{#Mju@r|g|H=vAiI_$dS&QF&ddoO;v{gMiXg^%GP)A5M+0^4
zjRiyy<Fhst%>wW$&7!y*MqL;s8#^HP&A9b_vJi;tI-b|Ls!y(MJb17j`Q(}`Xo%}c
zNpC91Qv6Du(ST9291u@0>!c-_t-z>Yn0XfzYYWT9yVxkd%BE7Yrt|9j&vRQ3nznJX
zQcyx;+Bx>_m8W}AACvEqUMmFA+etnwsBxGw9kOa?=Y~54X+20W?niUU!Iihvskb%B
z_LA$aqlVxj*~Csv#0DQoZJ%+foWE%|QB#c+)F}5IpD3}5)K7yJ=SD%Nl>pxyQU(ME
z$$Ct`Gs`miP-rD{DD3~WRSgJmTQ%gb=Kp%$dO)nHh@<`m)v@=iUOl_SS=t$<l_M=I
z=dveUJ2$ZJNzJl9pQ#Amv&D`g2elj(@;{7LEWW>V+b85@vap%uUrqXd>)u1m2sS#C
zwpFU7HIqo~g2u>oz)PZ;9?x^f111$Y7e%KCuMGJ}k#uDh1<}}Q6H*;F7iFy4RzMcr
zjKF0eZaMYOUk-^r@w+Vf9g%yJK30c@weDtj>F*Z<R6Td`h&WW5JA6(O8l<&=q)2CZ
z^qr7?hRtRy3PuK(^-^Hs<zj~?l%30Z5<M>#%A?gJD*HQ&E4R83-wLiu=?_Rjgza5F
z4(q5!0@)Y(Td?fxTwoym)A<r2W!Y9lWNB<a*qJ?S=LSEJE$9t!de0x0_iTHa?YbEc
zT)M`E6C9Ez1G)i<KRf-#y(s~=^Cn3<AGyJ3D5OmBx&?LLmTt<B4cJRy-Z6oSZP_~_
z=n>1<ossfK$@B5z-ehE?HbX$=3Q{h7Oz@CII-ZUTZf_E3Vv$6H+Cnu}zb~R)RUogm
z1+BcZIbf_0+jBJAv1ZqjGB-@E%R`Dnp!OSs(|Fap$0`t}!!2q8Njsc#l0KHKu$B>~
zd-bNeS8ipoPvFBWr#ETgU(8HMsHhe=#dvNUt#BeOk6K~kWL$rn7g@Nu-ehj{{debF
zIO+dOJNXBf^0E#(rcv3Sp0BX5{eSrU$}SkvdGO!9w|N@xs)hbfkeIq1uU`%RUM%8X
zYqVgVb&DYIC5=HZOBui{xn{Wm;s$*cd<<K&>_?ckX@(2$erxgy+HYDb$1c6k(#k0m
zIofH=EuRhu*`LRyT;nD{_7`6>#pT=OR=k|?l&tO25C;PVW*t+QRD_u9IL15L&mQF&
zRiD;5J<N!kZ}fV9?@wWU-EFdFDDyyu-0!VGwZ9Ut9Gs~Jv+DK_XEP`$N!>JNC1(EH
zI{udn{I9=YA%-ZkAx)i{rxpA01McRZ4#irzK}>>P$jll&+Jy-##`#xhm|~*hwf_J<
zdhK3D$<pUyguOiJ%6Y2y?=+D>!}n}^e=;X5Xn$cH2cWb9W({(jw*#u4&f{;7kk7xv
zVzLAvv;_1xBMxO_mVo9vO_t|)t>GrAg}wIRuqVq`2XB|NyK$kh-f6m&a7{m}@#g@^
z%a3VXLyOa(>r(KjvlGJQ{qRmcZgLi<JaI0@F9a~)8ZUO-T)Spy)O)maGClvJ_Tt$X
z?{x(>)$|{#Hu2JbYBm4Gn)qky<T|CS)2z!Urnh3qkuIWHm5~JvT=00ElGpTWreP?V
zCyj7STqzW)byh@L{5Xw%UJn{2eH0_9h|gUMHO3WMn#7#A@fiiB7$Zwur5u|>o;w*1
z#I^2JgP#M0Z*9RG4dFNnDA8=VX|E03Ii`Pk<9j{co)BEoPO?6bHTFR`?SKhqV)A!2
zz~$V8b4kzqXt1sYB*(jVCCZflv@E!(LocCeg9~~88%F+re`;BD-RIY&W1oT5_&=*1
zSt>9LY4t*KG6u&+d3AocMC+@NJNqM&zIxwf7*+J)l20~6$oK^5r`f8DZ61yLZMgny
z42iAg1$&<ST6QQAi(qg_FYdkv9-<pvYY{u45J3k22!__5j08CQ%~hrU<yxYvK$rEB
z?bSWu+vBIcmv_WP9Y21VJ^_20YIxe_&70S)A%7ZT|KA_x|NrEVgPuuC#sSXO7B4b^
zD=DD0s|DD343y=TxY<{jPWpB2Y(H+!8b&2S&ruA+%;hMMgTDc(V>{3&58*5-fvJp9
z92ax0KU5RcuEcL)Cs1%2Tz)JC1P;z!;``BQ)ogljY%)<L|MUG9#)$%AxKdmTQ1!WJ
zo<Yk)K_*42g#Y)Z9}qF-HvH-$gFV3cauiDS+Mv-Yye<`BUgIYmBrgfW;h(Mg|JpDc
zI3E(<_r)}KC>6_WYEdRV5pBhrt1)Vy1p)Uf$?P80>$A0Mvoo>*A-TZb;P>B6@&4WS
z{`Unq`GJVp#B{jWrWD3*`6l4a>%rN0TI+NHIZW|=Lf^deyTX^~f9g4tMB2;=Y;;MG
z^4l_x<EKt+rP;-8XujcJLR4c-H;5t%!MH>3%QX4Y$F)s%&YPS9?0@mKxD(^AgYVz`
zDnt>S44XeuMf8dP=JTB+BqYQHhgjikc}fys$rJ-Cs&8*^uhFA=1=sOVH<CYI+cN)~
zCCT4k$-nbDWpNFQjjGvI*wu8@xEXM_dZKw2A{}PEVr$Q66FvOLZ{a)cS*jN${hJT<
zPu|4~a31oBJqb&gUm6c8-BJXG;!Ut}bI84~U%u$APBZDjL%xInzSHK~F!)u7iLj{t
z-#*ztw(8%llTvi)j_OW~6nhkb<p^_|!;9!!pkvS~lsxmMHHJ@OB=t7jIPkzjHg<)a
z|M>%_;QZ2yD=hXhKqzO5I<EeVQ!B;rIu>U3We)2iI*Ko)KCsxcATg?gN#fy;_lg`2
zYcV-etr1#4hp?BOM{X~d+;~HY{wbWHa7A!FC9H5%AivIrQdU+rA1+Kw_k7<nN%*uh
zGv9;k`;!-a)FmH#Tw)^cczO2K|NV;m>%+SUPGJ}5HMBBH?FKlJKYvCpu9`NAb3TsZ
zwpjd?Yq%6=w5<mUm%`7s06nqWP2|Sv_qz_1ltmhQ+>mE4L(xxM-mKgN;dgak)$UJT
z$A%a1Q0&gb1ibb-POGbDY@FzPS!Sjm<~*?x7rdU3^x!-h*o+W5KGFJ{IPBlOa{m12
zedus&sEf0}W8Knjd_zqi0t7Sd`f4Nyk(Qrj-++FxWO+6BmcxPudiN96*h7Qv;tWMk
zx3yKHl=NBDqvv~DKmg%?+V|>uC^*k3&>(Xz>Kp!Z8t-PUJfkIF2_w`@o5Dr9LI7LT
z=UNJw|8(r4d82z9%9i)Ah;(gT3iAK+MRbiEo+F3|vud*uoi#lCaj0nQd+U1^vy(JW
zo39!@Er`{rD$kk7udmr#lc!pnGZ_K*@2s9bU-wK=J{T%Mp}#dv+%Zy%>DS%XcPxqK
zv6H^Nxtg~(;!Dt9-t|R};>WxC;Ne)eF~k8SXAFnfAu(ru?UCMMzwJy!P6Q~KW-4Fe
zHY|*XnpK`9T6z^2DD-LF-14-!EBtcY`xFm%|MQK?zX#~sHLn>nZvUU)4dF5Sap{+4
zx(a>F`X-+ij2W4)<EFb8lZY`xfHjU;(Ry+B0730*R`~WF;^yK0X3>DL*Nv71?F_xX
zn&VX_s1>!9Ebg&lVuu>YOTladY6m%lp?0p0DLheeXzGLE7N*EEy2iEWky6JJ^=}a+
z(>ETxa40gV_tmO$U)7kEBfx(giaY;o?22;#^H1^xF3>Gz@e1kJ;4<`b`B)A(R1_C!
z8=-_2qlH#?X12hkba`F)a8EzJ#!I5#5G;c@^ecM_Zi6fN7_M3Xr*C?U<3!CEZoo;H
z&9Jf<=bQu@F?;Y#7zDARWm=rx7*xc|!dx(bpK;PXJt=4o?vlr}zy<cM{c5v%{rYt&
z^cNawntrLMV}~rQyh0(gt3Ie&vLE+lI(lc2J9%j57}$6`T+;z<S&l))<N5O<A##DX
znz4xuoSY7>QGuRInq~a7$5<3jtDjbCy}bV71-?EIiaGk|{voXly)WSOWc~;;A_bsO
z!;HC(=0AFlDL2k}K+dKLU}8^31FS%WdTRYL`vRzZ^f#~aup8GrHBE!xJ%$=g6W(7@
zt=y2K$FNA6;F{DT7`f2}!-%ntsnVjY#tGDZ8!oUpJWHbh&;zC+PFs10%;Ku53ix%q
z535#!MGQyu#z9eiQ$GUgr@;V=R)r->c7tZt_jxAdY?_51K74p(ua=dvR16?RZ)QbD
zn%7QZj!w<@hYx4qVB^z2Iv@yD+@3$S98MBBF1{IQU|WLel`9y-4G<VG=>5h@AJT@q
zw0}{3=)+YQ|JmxN!-HLP9nvK=p?L`y>&}VM@9k|Mw?wV_oqIZYLc6R@(;>$#J_SV3
z3KO*`k^QIr+2&coCX=FQv=vt?0IH!K!-g&;ZAS+#+v9Je?&Qd)DV2Kk+}y78SZ~cS
zi{$KI-P>A5K+N-^AEhx-i{~tL*~sVBnK3J@!bkH+L)R#;{WiY-y>AiA)kx2+VnSMP
z#-U<p97+gj=bUhK{nik*+qlj4_B<7@dHuS|g%`DCtQyTm9$xQxoW}3Bq3en>)R%t6
zI6mnS+3A#U?UFi|quV1thG{pf9K6F2uUN8FCKFt08hq}YyC<pj?kSQhwtP<(KiDJF
zgM2TZ+Q3@ffmz9+`_Vk;?=R2OI)Yai(Y<2`=6-mR@a*Xd5^JRJ`l2kP&Oa%%iQ%)e
z6*=ArLmtN?jw?l9Og^^TUgov<X1=|(EplY8nWgChPWS7|{Z%&V+v|<NXAAX8?4UOs
z54Er6vKj7`7T*6D3&!lZxgzY0z26La^Ao*Rri$xii10idf1E}x5B=C8s=K^1DbZi)
zF!F@Zj(NkhHG(6<(O7c@+!I^^qj{DJe?>CIa7H`(fyY%B5t%Ga=Y_5Yl`}r}IDc~9
z(e&&~|M}&sio1Mo=vd~|xUW96Q^ESyO?z$aQfh5y7bO{uwo&ovg?$aQ2Ry|z&7rrv
zK=G+tAqaKxaguOfCJn0tRWNzr$<!=?hA&3^L<GB`C2Yx?8CO9++LxtqzE}5PTMcG9
zj6=bx9b3^v<7uuEIuDJ9wIZkEhv`b#$9=-_LQQQW#x=)BNIMUYZ&POuY253Uv13fO
z@`{sgQG6($a4zHVb|H)c+^(s1PJPiOTKOjR`3}KUg8iQ3UfKb;ac#_Es<yGBn#>72
zj%dEJ$+}mQFTuiBUl1DGu&P5~x%Fn=P~9ZvS<w!i*^$EzgBujsbb&g5p#&rDx`G|g
z$?{qOkzOSzK5smTP<V7?6^DrM+8dhX{B3G=s&T2M$={#H7L+K8vEGa(;`_#!2oCX=
z&O20>H|8#=Gs}45ghmd~!Cd5-g3%cK9KEuF2jOf?QM}R41WW2Te?04P4RJaqTuKLN
zDL3ZTe^AZ;Q9Fr#!%<0LLO6Tn{!A(2{V9L!NxKx4XSrjQ`f!<D*J}mspl((K$Krso
z_oGcg*9G&kac_UzIsNPKe#i1s-<{5>!&Ggf61zM!XQv|!dP3Eet-Jn9D@)5kFm;s0
zbv{*b>1cnsq|2#h{!<jcM<KGqxaQ-Xrd-F7uhoc|Hog&cWsw>0qpcXH?9FhFu@0cZ
z0W2txkGXrEUAv5?Ovj(f@mAY$nICbE@q}=xJ+x2`f1MHEAJ0#q&^CQjMiwg}iTz0y
z@~yFgWnOo^DuwtbeMHCNe;tNq7a?ua^-3#C>?&-51t^-QMNNCt?0)az{Q(1?9rZy+
zyjF0Am7w=B>-2*~c2js9M?Vvhv0KNZwxZ6>O>pHecGT{K8crlW&&mo3zziFj8KXAC
zkvYyj-X~A#fr*l#^;goymqXv9WFn*zNnL98hH;4!Mp*Eu%Pn6l6lH$ydwY4oBN#ZU
zmZKwNhS28c86Q{jXSc8eyK)WmAgiv|pI<H;wQY-`JyZKZ*h|mkxXaFoRxRXnX^y@j
z^%9fOtyjKOpj|g3Afm|cPE~#!FCsX71^HyfWZMN4XiGKYUW>j^4q3ED4iRE&ox*M^
zoObUxoFdFJI_&M`bs6m7`=ge<sEGAr`~3N<?nCjapRMr|j#aBSTVuG4P4=uC$fu_t
zp2S@1!owXAoVX)mqAr`}KR+Ta!h*eULQN~<(zUyj9AyH{W$@8Q^P;~8P;gvzMVz|d
zIbr0rYq4D+P(nf_d|wWtYmN$uJ47a`(^h;v)+u!$-~qWrqOIb8*irMr0cuz!?n9iO
zLEGq21yZ^G978-(xMkK0TRSoCZuTCDZ49>5fjfPygT;?+bhsL=7{xu*hY>M(Hs*%H
zGCDYpR}Eb?(BZmJlfM?vqXosAcG?jECB8Vmbnq2Bj=U=Fmg1QSkEZ3C_4C`~hyi0K
zu9_#GZ+1_UsJg?^w)irLdMpK?=VF)kYz)lCaN?Kg7mTv_th}(fBV0->V9{6qmllAl
z>XuwMoE_tOM&69>lOJ6=N}}T1ABzN2-}&k}=2Es_v3etNaOVu^$q_j$u1v~Bm&W2Q
zNNuY%Bvyasrs8Oa5VofEYalho`}aet0;CyG7}Px_AMLEhwDHa)2ah7F_qU2_4)+Lz
zJDQydP$n<<o?lcJv5@dT`-n@z!ReTHtlT1t_}fb4r^vf!UiiQDvZ^xl1_M9gZNg`7
z-M8*xdMjK~Vgz-oOY8;&FtP!Zxy~)HYeCCZ;GkcolQWE143+0Pr$7UiAN^?ip~83H
zqXka?I1Tl{<Ik3sH~xKe@xN9gvZ~O7+Lu1JA1ZFy+n9Ht1^Le7wn|s5DW6;Qkdjb|
zbZ7_ZrAyg*KOgwCAFyd1hp}H1Bi(5{iz}hCAUejb2_m{?F-|zs(3W3$LB9}o1BGBR
zQ}OKijn)W#1A~uQksm%-YqDuRS?5wMOgSvDF8J9J*5nnTRxTdfqfA`9-85aB4Mla!
zul?RI<-wIE8W*f`EbrJ=gD39*hV6_tfEPXhginmXp{&lc+H3dSJC*Wu8wu`MM^SL?
z3Qkvlsm+bHo(~9@^W`ApPRu_OPK%1Og7QzU8~pLIma^|Gly7sw)qb-Y$tZfgyttw;
z)eASxzl7>Pw8MG7T?)D7($6jkc6(up+e>8=dT>LG?tATTmyLVv!Nk~pwn0?bNd(Gp
zCk98b3>C9QaFw}q2)9<}Ev0+i0G4AJAq^QRHY5Gg)w^1S9>)-c-k&}HuFhwRT40cv
ztLA-*5+LZ_+mB|Lbk<vgUwFA&fCKGT{XP~QIm`u(+9TO*+3^GDV6JEUT5z8tYJ<BF
z2*BUVuzhXA9?tx8NoTY>ixW!?KNCwz;TJ~XfC&5Nh5rvyyHg;9(C==7g`XU*S#S!x
zY5^LSv-mf6BKNxzgNGc-CTQH*`0Y(L1|QLDLk5gdNt6FMm-y=KdJS~BD#Lb>h{03`
zB>X@f?*GwyC*O3dmoymNakF;2hR3n{^Wnka_Jn?GYYaLbIgX4!_jIMcZeyx}97HGf
zP=N?>A7h3`TJx$dJ&uFWtb8dH=i~UkT=gb|(SYX$c4VO14HaMGig76O`&c^C#y5oP
zajlHp#TZ8>XpK566{(OjIbCu$kyfMp=-FJsG355<ve_Z6J6+2xZN~@GSi$khapa%p
zheW$;OK9!l1eAu(&mq;WT$G5*gf3O|)y_#mys7g*g_gn9KLRARd0PxGV%?^Hk()}y
zMr}}Y(+Mj=!BvX80}yvu4HET(_3d|NWWa_-7v^1K4Y$v3YrTo!SXxRrybE5Xv(iEN
z_0LaL%>P{PYz!W>Xp0_teM4TlP&YX<4CVx*d6bKAaU{PE55jP+pZx{uR&QPh@-&bq
zO{a0=$$`t5iT^)Ps{j300CMaK<1j;)+QWX~k9$7V$KyyjUy8jAjFZ=qh{<G8ho$bm
z>rztp<<&)({tOo@K1Jvxh)$NT9ITIl`t3=9m9#L%+uM2aH{|XY%CQb(FTnvN!KLE5
zLePDGIQ&A{zr2uTP>sZ59Y{bvvAQNAFn1B@`lI<3CTrSF<j5K>>R{_=L2UWh%^+Ir
zLQu@Du4q1yOV_5t0ruDLdq6%Wk61fC?2w`Wf$q*hL88P`R9f7VyhD1jjJBshNov6%
zpF0c&?sj)XV#9|SeL6&<g~uEhM_a0EewL2d&zZ@H-xUw{_Szp#A234DwtcwQ(=Kw1
zx4qtVURwwH<XD6>HD6xw3pVDEWcj9`twxdwCfyv|D7Rjztp!m-I$YMT+SD@3U6=I0
zE=EPtL2-XYLcic?6p!8bC|PdEhY*vQuR#U4ZZXO#*5Mpi4S%MyABY9@!G)M1nlJo9
z^BJh<e!R%}F7PL5_8-)UA%!?p!J1?U`rY3<|Glg{{QhC$vmfs78lrP#g46Gw5)$~l
zT)wXK`-hc@luLf&0Eu0=D|H{aO9VY%aIDsh1`h1W2-}aGcp77V59URx1Z_gcyfGZP
z%aB#K6rt}F=)Q|x@(2#}*k8hZTG<`KWp_G+1^aAVmq%^F+1``%s-G4;db%5?$Y=5G
zM;(%sNx4*>%i*fKSBIh7upoFn3>3{iwJGV~XXx9_Y=CZk>Ej(tWo4xCBfmheS=l-X
zMvI1>Ro4OPGIZvj=jqE>h5atl#^4uRRlEJxc72}$_wN<?vsqu6A-R?h9*V=`G=~u*
z;7xZ!F=iN!1zTJJ{({3k_8e8e{?n)8k`DOr-Pir@D0sMq#vBcAEiFNb>d+OB(hHO4
zEEz@w;VZmgd-SM43qXR4Z7~l{|G>vxm<?K%)c^g$^f@-e3fI})$HfguEDAmB2#HQr
zvn?%6a&-{H*)3~keO6M{u+wmOn5ULvc>(!ZOI%fO=P+-7wPWV~EaSadMyBY-{R++j
zky-EM-AZiO1QumjyHEOW_WZAK!cLMOFGg!o#xUlVOhBF@`|f&!Cc=8cD1u8rvoGqd
zN5I|fEnHgJgGSHI;=;n8t@2b<z7*hG$pK2jzTrXA+*?k|*X9S(g8Lo6WcG!!+o)xz
z)O_6X_%V08yFi_(@t~1dd$8Ir@~Qs*QtHvN5V8frVeH4-x)`LJ-?N03?6J}%{fIQy
zbI`AHKO+~)_`1&%q%3|6gX_K7n)1Kej1%~Fy%%+&_`TtW?goUbm5%Du+I4_WAEV35
z4ZRZaxVS<<5$qH<wo!}Y90=RKUPTReY4>0oe!t<yZi{c$nz11He4+?6bLh$a?N+#1
z%`p*ek2jhxdR1KEHV>f|bdy`SYh%B4CojDw4DwbBGQ4zPs&T5FTJVQ^-EFzJ`+nuA
zatyN_u_Y`9^r}gcs^|UlZKgHE>u^V=b7<hh=>HsvlT3#F*Y#?@rcx{Nb5BKTzdzbz
z-|00Kmr;46lTNKsG~Z_T_(0x-sO8??H@GrVUs=)TWIz7Ny4D(c!&PwtWO#yZM-f#O
zk8KW-W%evA>YqYsZz^>P(~{i3vG5Q*Pij=|JO2?zikXULzZZD4w?=S=D^U;IZOWkd
zw1(a0OkDKs$Q4hX0vmnif`?7#%U;j>9o?Dbl3nO^+U|PdEuygc&ay2=pGpfA53XHj
zYLMEOn3UMX269J6mtl}yExj&H@9;r*O~jYh2)~i7m~Y`<CXSzNd3V$thB7I~m06{!
zN!@$0lCZU&%BFq8raOhgtJr4jfmV)AVmR#%CgI1%N~gE*leq+qTpiW@3dD%(+F^Ow
z)TK`yK%{>uGC7em7h~IJK9yvA7AsG|b`$giUEh{R(Ol5G7J3|}DaS{gLez%G@HyE!
zd{T<14~)56P*Lsi1^(h2SSs7w(i%ZFA0?N0R|oOW)tM$wk)PkRLzIcDcur&G!db%^
z6+U!+D#&<I*F+~;-q4ian*IME<M|apayz0*vQy&maw;kzrP1VBTJrPU77d0&TyH4k
zAik}5d-Lku_qs(^Z#+aBr_4@3dR70eeU-?sZCs8cpz{@Q7)|hjGF+GVHx<g2KEExl
z+C6w_x^}lMp=6_{rw<hlj4?WH_(=x~wL%IxF;ryH`Rqt<HyVLSHP29c`Q`wq%?Lx}
zmh4CVNA^Ze?&S*)Ybz)7;^2q2)HBF@`SRt)X!YgJ+S>1{u{qVWe5Ss|wqw%!x&)Nz
zzn$D9<1#Yn-*q@!6#Pl?YOAz}$kJFzOc|q?FTPrtlEYAmOPXo*uRvvdeAyxH)RO6=
zlY|ej!d^c?&mYQ*V69%LZ<Jv~qtRc=eSCb>DmCPC?w7>Ge7uj)GcYtP>0m9E@N-MI
zIyOeV_HSaMSfc99V;U)Q?E5xhRqjjVWIgdK$LYCrV2bjDH-!sKkb88OX>;Y=zw6F8
z+E%nS4O8d1AhDQee-LV4HLiXvrIquPN;;87A2<LA4${tlp%|8O2~P<aC|^=18ufqa
zH~l}ZcIt47T>jH*wab=kDX+OLH>@45E;Q`_${A@mD^u=<jeBaCSVi;smc_!|Roh_=
zyMbC`k*NLTye*fZwVxJK9dFph$#A*Un>9JfhRxWnqR7ud)cRRYPUQ{5eOaj%#7-wi
zim%*BRh{`t@qWsWEj{4V6h5^8BJ^FdG*!ddUe8wV%~Xo<1mA1zhE<GUVA9vX_$`u!
zgOyoS2wKB1Z*XD9r&riD4ONJ`uWQ*6#TI@nvPhRyO~doBd`BTFN%IN>Nj|~uZY6oU
zcf5mKF|{v5!x)$VXj!gC*^0z;U}ufJ!!swIn$1c35#Tl>Tb5c$Ci@<uU~7F3f%%Lc
z8WG}vydQSsithYiR>{OvHy0s%)7jjyHJf^0y+b)trsl!hX2tPrntOWQdgUt9O~HA=
zS-w2c9z0!*RF&IvEYJPV_e}&}6IS@Nw__def0mkc%yZ-J_o2I0qSek%%6*4>o;~}`
z;XA{LCXiXP@9n^;{4P6++cv(>?MKHUA){udo9U&@r;wo9U8>2JqeRNZwHn1MbkJ5b
z)dqINQh|0$ubB<RO2!I3!afQk9$>ygl68{gYeuj!?tl412#+=#j$7J3*CL&N^V0k$
z>!bk~!l{$@E`#-KXu!|bmM_GV8{{RnJz5VUnCV&6Q$uID;^gZJ%(&Z{WN1XZv-?yj
zzmw1iUx(YSOIYOTj!FOp3wymA);8Yd$9EQ}SSYvchkpLb(Jyqv8b!?r>Lb&9iCmYD
zBnr`JyZEJZ+A5J7Mdsg4I%_XKk%9z7%L0ar5O7FHC=aL1yj><hc(^2~?#k46cV^qa
zm1Apqo-+y{mf0DktIs8<z|H8h2P6u)&B79gV}@GGkjw06r$*1Ax!JTn&3ZyX*W*Ng
zxfcj~adGj_jY4SQ$mcRa4<KWO;lAlYgVV(h@x5zqi=#IPg!dKfijV`GyQQui)m|Or
zUMUJgg`spt_jkdp#9}AkE%8(>yKbhxNV;&AX2$iSBf^aeNI8?i#j|ZMPef)2tDASw
zqUNyTC#f~+;YNqx;Es}8M4M!58}DIE^#OP@-~w#89WsMyj1qnoy3ccSWMAI^4PMOM
zbbamP`zD=qyV)xA6^{;I^2S@pM_j&tjXJk8)2}RBw_1-%B9<WUQyZgL!wa=+o!dFt
z9_m~|8rNaSPA$*di$y=TYU^<DcsAbi*2~PS238GgDGeILP2jQ|O5OmV@GbQXWs2I*
zZ*X@Rz1f3lp)fyUisp5zj_j9gDe{p@U<_r3P++B7xedu+E4P<;?f#`^{-3Ow|B8wH
z@hx=rP&5iBge7u5Lh{+M`k$vMu4E<8&i7mrXaT4*aT)ZJ#lqqzDH;}JOAHHaODOm+
z><v=oCJZC6!&2V5#j=<rt)*e^?X+FfcEKd@S~LOQ{O(FAVxeBTY$cdW;V^>$NjQ1W
z<)QX$;x?B0*u?XIm1@b8k9+`-BSSVw{VZ*|^L?~rN`~@n!uq^a$e-Rkrc0I%>Rl*x
z98s#F<x_Iv^XQhma%azwPEv<jDdx8NRUSuscf@Y@jaA!G9Y{kbUB1?P4P{g;t5#8Q
zW#QxL(;*b&ZJTxe`2s4)+IFX8M#bpfX~a@A&&J9ryWfIv4b$V)V#mJjTiMZe*3Uiz
zS;F9;SMuIa&`p}Z#Pi(MZyQ(cTtC~BUs~F^O+s@&1ZULRzo43#=Bt(++rxZL)C~Wl
z2E-9Cjq!i_OJ()HugRXBgj?I0&Qf7+0WO$A&rQ~$N{g&(8zLr;#Eb|So?yl$qLE1X
zh8JfVKNeP=6@I*POSj^oAALR@L{Y01yFZ#AOUpCwh#TuHef0bkEO*PC#qYbsp#lio
ztZT^a#dmr<nRc7rhLsAqN%~tOixaiRnc6u?)tK?*w6in<y-DNn|5}LF))d0_YW%4A
zOcZwq0?<CyJ`1XHZtF?Wp$ac_q7w99KeM`1Q=N`agwl!OWntz!YpU6eOEt2#8_D8N
zH{D%YgblQ|Yei6!1fsXrpIHN+zkHF(TN^Mw;<m2)?Vjh4SElE~S-m)7(TFh6<-WLA
z1};dgAG(swLEn9)f%`EWNzhD(0S7F9u(R4|zdzT-aOJjrdiKtt+nde+Er;O;dE?da
zi58oddaeC<{r1{z@n3DbT`NYh)o^9C&a3-ygQ8(+?9W1AYrU({KNYephdY)8UEg<^
z)fCMggAI(@t>Y1u;OG+Dma1Livk0SFZ;r;7=id$8v0C`~3Ci&mr~<idrX^SPYnAX$
zo;<e{u86JiN_AZlpb)#JMIwq%4#7U9RZp*63g^r&1u05UiegN=tq^X90&TT&ds)El
z_u#Vs@oxNQBx)V7X$^$l*ELicO4zg+jeK_?(fy{}d**kBY+8{G$2ACjs5_W5Mn@NI
z_l-5QrY;TS8ix6k&<6PX`zt1%PF&ZZT+cJAxPC0`&3^CkkNgqV$^oiNm#$NC8Igsf
zLl|U~(45B;Xr#8rEwPshQT9YNw+vgCMi$PFhBC^9J^1?nvG<-~Rc*_*s0jn87zly_
zA|fD31OdsQNS4eb2LS<*B$C4v6i^XR$yp@loRflp2m+FGQqm-6n50)jai9I}x%Yc#
z!+QVj`nA^gEyf(9_v+PKRkdm*NkXkzl5v=%zGG)$MB)T)5kq5S`CA5+EKxYV(V?QV
zJJ5OdWD9Hc>LN#)-uIAOy_R!RU95$U>sbkwz7Q1{hDLW61KYsx=iQp~(2gtSd(8_>
zgNCapUiwIwCLE&p0U@Hlbep{&A^|@*L@#erk|7+lb{x$zTS}Yf&&kL$KDZM0%Ebp1
z%nz$X9=Ua9O%#F1q8t(W|7T6>|LNOkUjg!H4MO3wl|DpCN%>@Fo7Zmr<`+sTFfb9h
zI7w=Y;V%}V=%=oqJYZODg-20#3f_K8<p&P-z!zlny+)$IXLpW}^VnVnrFk<ytT=?T
zR{^?+J2hQ!@ezh-+ebfMg=YUnmLX7Q`80tT^7dhuw{OodY7f==(pY;%(8^ws{frAA
znVC%He|9YhrveZ4l7e}rroN*4zvm(T(=T63I1*8AOLyWt4G{{3dPPVdu+j+LWP@0q
zJa7<AzR4UX>28N?w>N?9;;0u7dRu*i_}qdV2$e7<N%CTdvyzP;gQ=x`@uAS#i2r7L
zM&J`4+;~%qAKCZ6C=`f79K~>2*0o(o*Mxli*X38o5RHs|q{e>#?cBTLVZ1h)=dRsn
zNJ~rWrnrmRQCC;bL9>iloY)@wyz}6jUeMpsi=2V*CJnh-^+f;a3ja6X<T8$oDdbX^
zIKTU-2MGI-<sp60@%^vZ4wBE`A>lo|d-6VQz>f_%(Xt-h|Fc<;W|p8*{`%9qFa8nX
zArKriLYn#Zw;i93Ap!caj8_bQ$+{IV3e2VDpBeCLesmX`4L%2Q)X?*OO(I0QYJac%
zObUX=&M$YVcTLk=3CupsYAlFjzfXq41~V}~TLdh<*nLYD8CdxX1$2`8p89yeWfkJ)
z3WuWxoV)LBTMpk*qGfjPA7B_=L&zlOZQO3}PELGQiDc6*P?P<CO;Y^--i^T=Bu1ZZ
zXF*2dBG-5ZIA0t!zXYW1dw)Cm$%7HOI7-V?{us844_ujUKHJ9+?AygWdj?*ea@Pg8
z;H$!O@$DT{F75Y~4;*5L5Jmg^dH-F@{-lE7+xBqX{(UY6tS0AuSlJqt=JUI6`9%OM
z`@vw`jlZV;-(1@N+$Z*DgMXSO2^;!*BDWAA=Uhs1>VN)>-9P<bv7Ac~;*KPH2}l1P
zo72cK((!xx_rL%1rQr*IyYrU|@b|BuwZJP6=BU+t*}Z;05yARAmi>5o|GP?&2g^gT
zvYo~C$IAKa;n93psssBr@&kv23J!VvT{AvI<hkS1`WAn`YVSYLc@+|IQj!XP<una|
zfd5&=#@lZH;BSx<Uh|THnDp*jo<X9xmoA|de*Xs>_z#T8wh{4r2IlU&e$Qo<9=yQD
z@<X;=2eS_=e}Lc?77J9+-y_5+2}jC9w)yP-P2@hjrfZ8S+4;YDPc`td8N#prfdal`
zCoG9$=SCgo&+@K~BRGEC=fHveTM10FymV-HW!F9+&;5`eShfFqK^y6$U}us2dox00
zZH{BmcYAcNIfG9d=Vey$VYJv~(B}w%ekxIj(yjt=czASlW&7G^(bL38pIB5Q40-d6
zkB_gcwp+&dLmpm;hll4X;Plgzf!_Tmv@bcu4?#)d$@Zq*Iy8n?wYA;C9>u<N@Mii+
zCE{(kqoR-Xqesn91>`wR0FW>hmfBq%b0IMLF!Pq6n|m`B049`_l;;QtuFlNNoa45B
z9NN7Z=-;|i&CkiHyaPcgk61WYE=1BwkQ`Wwl$wU-YtTGCS7<x`QRg(!vEM`MYZni5
zTO)L3<t&%lE#8ALiw>$gKem}0(Nt%`fg#)s<%Sd{>15A|>p3pZaB5~)tG$=mrlrEw
ztepKbx$-fa=Q0MBXUEyDsZ%aE2p0(bnl}79>+C*YJ=gP(&&eZVb$d9-84`m~oO-f0
zr!zg^3B{kmPcH9y?4A^3Z3q0#`iiKbH><hga)muIyb)R+12`>)OJ);mp;7J^bYc?y
zgf>mNCu0pJR(uf1A=B({+s<hRS+&KEz+Z^MQlzX1<J92ZML~5fcBhHte8ymBX=P_-
zL|kdGCKjKOM*DMS{|^&M_^4G+7?|Gk<J|6dgb9H0(R5yo+atA8TX7IJ<H=Mf%lztU
zV6n|CDW+!0+zsX*)`6^1Y8nfeVRMQKs|A#$RXbz}6~-&U3YTXv9qG(KKnjFuvpsBI
zpvy-O<bhPb3g7j?RT_t3VOK@peu{HW{B^-){5b0PWHWmFF$`v7ASWmH4&D^$#jE~N
zyk6r&5jZ%g?J0O%**whQ>BaMDXVyz$GUkGH&fk5afmq`63HDcXd*mkErOg2C8%71n
z5}Ios^a<ttyfEUL*YN{LD9OQ49I<y-++MtR@%8ibW59E{g>5Efe@q(@5ivV`_sEeW
zU(?ICle_{s%rxg$R`To~TN&sygx!8JRDqK!1v)G-AX)RC^3KueMOcUt(8WKm{~-ce
z2t}cl@bOIKYgu9_LI~Xr+=j(uwu7V=HimzJ{D$}T;WO`84&r&w`<UtiJ-%ET^zHh+
z19lzW;1L9Me!j*cyca_Sfvw{>*Q6sDK$V~wa~0HOV451<ZRiB<Ep<TAd)EFIjXDPw
zXcB?QEwGvPc0NdjZ4Us&D8muZ-9N+3oW5#(MY2Ze^Rep(KDQ&ICU5FipLEi~u1wQ|
zvteN?w_i?@jO5dxhocYyGw0+WhJ8%tYA;J*u2*m<a67tygq^LX^XS!Mimztsc20-H
z$=jR{uZGXuHUzY8$E~`%o6pVz&vWod=of-LrWLLb%q=hbgRa9XaEp*D)hG_z0dh<&
zj9|*KX1T4d15~vq!(UFAMDW@#y#+x*wUp(FmUv|LYbr85y15*^BO3k^ioms?XvGM%
zmvhS<9c{`d&Rsp8&3r4aXsrmUC$b06U=royy?=cVMQy0$vf_*1m^Fm4ypYp<lnTt7
zZaL_xxlwcTRL#p;2SU1~3;kbZhj7)gKHFa2UpZmtyJz{y;dGCUplcdh?HoLrkbOsA
z17J}?#`qV~oj?K?SE&cD_jvPJ<8i{U8_=@*1+J<aTm6RQ{6lR)QPGztN!dh`eHm14
zZW*Y_M)0GVpe_9j8jbe61`-nfM^BN8g4poMSr}{(gTwM-6;@ODTL9z5A%e}#%_VL3
zmFXVO;$nxOWrKz=Izd6f?&5=okBY+V-p3lG%O7b6Vb+Z+;m3j#>})=1c;oCRw|<~L
z^I?4io?bxCvlG=ndY(HO2N{NN^BAUpVK_WFnXCvY?sQuRhn{B1<VEbVaWFr+ER5TR
zse&B@PT#|AGj4V1Y?^l6RjKDx3J4`%6J|T;OUPq51uiEI;U1yq)IOi`^eh>1V>G&*
zqW$=k;L>b-wATsL%gqQ7Km7+yb&6>1EvU?=Ycj$lu$Ge{Y(`g*7TDT5eI$sG05tN7
zCP&`X7f)2lj?=3TlHJ}~)k@t2I$!GsqUF4DpBJBkkHD%+(W}^?kvvs0_dC>bRxFWn
zr1Rz)`**63;)p*5#TMaYut$qTkmB>(h&kMY^YL7oK!)pd!@JapalEm2;m4-$Za5_{
zP4PQ#cDho*i5{Mqpo4UjjIiLRcgQJqruxS%6TJG>t9PNL^1*87^{1ER<0P%~@sb6B
z%upY8TizkI;w%jAGFimYv?_c$(HyI)#=*fc(VFOs&?#=zLt7j&ze-gF?$MY#9;b(g
zhd*|76<WqW?k$kr=!NU4Hj=;mPJ1ku9d;>EGK^EUJSC+);F=Vv$Fj6YJI<Ah$O>5X
zB($6V5?)Mba9c6M>GU1vKjD4z{|~UB_6dfsLvblzGK8&mCKGZ0;C?cS!|k3UIeZ@<
zA9B7X&|s{6N9FN-t09<Gq#=?&z0IsS<`n^ha?{6YV4vtgnFJEgPSfEb`61}>^BP0A
z>00Fh(Bf7LZ1$We1Zg1RVs<79Pu~dWRS+ImGJoTAx0Dm(YPZz5^z))i>8ovCn-?rY
zxbFsNz}=XMNc=^6NLN;vwr>!kU9yLK!?V6a4diKao9mYI;CzAjYG}+XANNK9q?aEa
zBMfN*A-K|QkZC|DHMrSZpl9%<u~FKgBgaS{fu+m#KhCCon7NsvUMRP@wUujuRC0kF
zMhMy9&<+vdn&VK5gzeJprNUI5C9aD`2T-gYpORggMJxP1nB@QT!8C^fK-hs^e!GP)
zGa&Qq%?R#4qgcc6uvOwy(4<E2bSf=Kt^f|oHm^KeK{^g78){mj(~8ic9}5#!p`r%W
zk1Wt5opyp2uNWZ3*!KbO=`6BJPC#SC0vLjyPPR({)#;KEGwD6ePoSdhN_b`Vv2k63
zCT+geC5*7fv(nc^QMu$FA4nFs-s+nh0Pp#ax*y~#`<`=saKR3&Giwwnc$4!cEeG7T
zd}svK-7lWRjcNU}eZ@4OhSbuHT%}x3$IqB<fZpC$5H(IHWrktRtx1X!>67E;ZikPZ
z{tCDtce^bFhG3?+@y~5?0BqUhm>KdS^{@NIVoXi3{kSuEHM<63RKW~fm6LIY?09&2
zk)Wjh6`+9iEg;nWgGdi<hLj;(m^~5*0y1~h(nCW-pH6kk!WE#mioGKwqzB4Ns>J{S
zkm0@+(|2%gL%Hj&gBGB`M1{onnjP<kaDiL|;+jIGW`rqksU?VtJMJB>IRWg%5BI#r
zg$lV0;3~K1{l(WDQIJEi$N`vw-+`b@8|M}`0^>yfQ5biy7$=NHUC`}%f;rA|Lix8o
z8108pv-*tjO>R7_zhJjE7qwymW8xv)n!2$8<3JEYLr@9<y^>`57)%!Z@ZoYW2uAmt
z!R*8@m6cS@#?eu_N2Y-J5e<>jg^ic?LkrGJ7e%a(tX#`_vXbj54qD`|%yBkKq>TS@
z<I4k4DiNP=Ks3p*s`ez727%x!5Z`4w^u?VbVo<&elX{w8@1k#_Ef{wS3i#nX&YQ{(
z9myzWu~7C@%|`I5NPtYj`tU0t&m8B{k`hGmNmliu7a7%=U=T>Z`5RUz5Hrn-lxLPw
zWzej=7EW_kcuv@w0K3zmnfuR17hrReL%1No<O@?=F~(EfxygFp{Ay=zg>n=;op@g#
z!K+4pA36J&Rxx0Jq@m<(aG`gAA&Phkf}s>Qt{^_yQz+ZHK^K@9sfcfu@MrrNz8Oa!
zt~q{}U0u-Y{wG)6mCGMB3+gGhs`I=*X?9*G%(eGEt|Y?>C7p#0$Upv*ajx1Yl?p=B
z-U3QKK0YiKm+<;k_%d(vQgC>IJa!A6dJ8bEPh3FYnGy#82RV=)5DR1q=W)U+6g%2O
z5V;kOYjxw4mJBn14y0ln%;!{uL>?FK;P4<91f~R!fc7#t**sMrTv_6mpiD*@{>&|5
z)+Lv`pw&!@7CVrA?1x#(J#!Go#~`8ZED79T`O(O5)<KzrRtGns^ZK0aLJXuo)Fb%p
zu1qu=yq%iqioN^lefN%K4dmumpsuN1PQti{I3G#CJt%vY{enKoowzdzGdhZlG|WuI
z{;cuQ2az?n3f9dhYruX%T!|JUiTs4~{{K2@Qj2V<Y!KLsg|H>|O&e;L3n)|)w!S>V
z&^c>rhR3wpLqA%8?c{E_`7z=WNy>+6!~t&HLpJbZ@4|>D@snTUvW3>uNt;d^W@4dC
zslUF?FwNYyRE^ORw!6WVas2~R?y-Tw^ACB6iHXI6xpG&uA~ZBKQXzFPc1C7LXKA>L
z)w8zx6|uBLyhQNL*o0Cvg%1`zToQWAA2=}X+`Ys4bun_W>115t(4$#9tc8Ae66Pw~
zcoHFDY%vzSH2!Y0MBC-aCH%Lfw;qW@`})))Y5gPp9!LiLPB6<JSF}I>({3iDJA-9C
zYkL>YS<fRGAw;y^5&%#C*9cw*J>VT6sOL^GFbTz=dH<?z^&6cP11^3uGqYNN`rm&-
z8CWq+I?~i~tLZgB!4dq-?o^_}qu$3+GF0a?&fG>js0!<)972IYro2N@blRyyN9a4B
z{d#uY`?QjbJaYao-a(f9O5Xy6?Kh39pCTw`u-K+@Dqh3mbaSz^7Gwp4V``$JoDT68
z+xSKjGv##CiZp~Z$C;=B8B-F7h-SHbgb&gLTpaC2V1V7(`x!bvtD95oEZ2uUKmN#j
z3-TsnmDuH9<L{`>dS~j6G11L+8JrHSLHOp4G~^#$$y(*hoeu|3Od6whS{xnqKp??B
z^e~#tFN~brdRb8a$Va5`IZhOZ-dhp?tl0ZmQF;8#Bti?_p!(W-(DSy#qE`JE*&*CV
zGe;Qi?wo#bX{$Pl>P*U<b4oOovf%eH<gig7hs{%=4$?A4Gb7Z%woA#A4&%&B=^Lbh
z<Uoe%s*}RnBr`gg#UzBU_0#9)&_dQbt2@4W(>-+vH_BIRdi2^PgqQd}(*1Rt7rx9N
z%6mco!aGTb=$d5MRlrr|Yj@+ML$6hOoMu^4%X7373%cw=RB(p$fW`DEqlY(z<Cyoa
zhUJ+}A||=J>?U1FjX#GfJ(_bZX|@*g2ipBfb03k6-ZmUOFdu$Pf?2KXL98Dms$uBf
z)0YAY5I?_sO>VNsR03k#V}y{vaFrWeKrcn&yxCFHwaV{mX^{t}TQvF##oF;7gef07
z;a4_?eq$Hwe1-C+WJitK;q(@Rx&SFYMj3(aLbMh#Ut=6q+LLRLo}hJaXF1z?`H@jq
zg<53wE}MF1Ip-34nH_MGrA5PN-?i`jq>;Y5HlyL0sZj7GFPxjqeyC3e?;}<6p;1VD
zZma-DhqwMy$#XbG->_bxm&yiCVLE)L)dt*1A9oc=@!%1+d!XSKQ7?2<!6mw`XC<|w
zG(M0XSr4&zt6d~dl}M68YLbn`#)?U8<e0`Y@$!R*5i+zpr8fmX6JsccFJJ{at;~;`
zMYbn)Vr%=QJ~-zfvwNn$oZLfz@VBt@Mf9KuB;ADXJzeLA0jk48LuaWN!;IuEh|HS0
zS+Qt&iDtO|>;+OJGtir|$D3q-2cPLk@EP96=w#3sAb1!%Io(P;m`_Om%ai#vMjvz2
zGO!_BZ)|1SUS-3ZOn)h8c8a|5$0<I*7nL=Ku0k6)*H1WRUmDGxFJbyM5T<OPPb8--
zv`bAJnqnRB4*?AfY1sJb5}zXrlJkrJ-~GvY^2N&eoKCVDwZ)~rxyawIlP$kP%^a@w
zsI+{S)6A8ER^zgVEFJ=tuMm8O0by<BMFrbHWJBORW2NjdmsMziu5h3+5ZLRf1+}Vs
z$M1?1xT-2E2kwA#uWD&wy|<Y;eZhsIN=*Bb@TcP;$=q3(CuKKJJ6*Dx;Kx3kR_7JT
zN1{A_d<1|tqy=DzB^#!?P6jTlPW2#p$INk>wFWY}&BA!ij-}>&3=JgZ&3qx%fRMYQ
zd_XDT8?c?1vmjILu^#wKQTY?3uzz9v=~ep}RI(rG9KsNPm;f^F4uZP$DzR4Xo}>H?
zp)??X?FWf&QBZJUXpdq_h`eoi51<1RvsMY>$A)KSOj!n++>^FJsDZIP&e<gl?lM!&
za>~MmUjbpad9Q+al>0nf1~fH?5B&mXJRDJ}k!6674x3|7GgviUSgdfv8ZVl=H4#s?
zr@TYRpZ1zkq2K%xTPmiMNFsTiR3!q%!mhshRU3)|MNWg|sRXCfMUE<I>ZMntx1AV3
zSKvKESJta;3AG3?@WOKhS9f~LnW6FRypMX}Rp`OdVfVrW%NaWYnC`cMST5Jx)wjl{
zF7`v+g39N{FT5hBJu}-P5*ICIXEaQ_yL$VOjuWN8)zR-4Q^Rrj*9Jm4-a}jM^i<N$
zu+c2i9Am_f1U%RMualM)_t;GNxw_%HarZ*+?XTu4&xP4&k>Lo|_+RzG@^Fh#jIJs;
zp~|nTRG3F#@h`<VDe2&Vi)?bmi{Nug@-M7@O`X^h^J9|Vc20nM6(f7_1f5(=lXIEH
zPxmk$JIK1;<#}RncyDyzqT*~rc=^cp&>bU_RuZKDi9LXHu^s4;nL>6>41`O~g%YUg
z>}~@94kwIv6z!Cy$5)52UKh`CXsQDz*vC3g7c>D(x0<qJizGu=rfo!0*MGe_|IwKv
zG25Tj;Pflv#&P5Rs3)h3o{FVul{3A1e>EUQCF{|((Q^K2-aD-}r;(I`Ze$Pw)Ar~w
z1`S=taZxghY^9r^{vT~KV}iaQ;**SNTUy}%jQiu~rQaE3=f>aeL4$F1c7VApS?NcQ
zqkL)zgZh$0fz#97ma}qx+qIW^Ha3B!(5{k7+P1u~jz=WE9CGW_R*G7&k}8{7Twtnd
zwo=(9hJGs>OTWzD5J9bb&*!w|=1iZ1XndN+vP8E(y`tZpWBBgesFt~7ieefM6e)39
z9OGUV{W9CmdDN!rev-oU?6CRfngtyS+sA`eDY*+mwz}prPKjF0=dVe<w_m>avS_Uz
zXw$bHR^I4bxE0@JIV%3@+$>Y7TF(u&N<x^}#zZ1@=p523)nhZw{xrP;=i1H<u{i1Q
zM+JWA*JG`V)f8m^ase!TNwOb`tuGKV#KpKChMsjgT@jztEos2iZZ`XLV191xYW+yU
zB8zqXh51!}?Rm{`ms&pg+{=esXp#&bHTaa>{Gi2OT8DHFEyihLi-2TI{gXzjd0?l|
zCjIGT^X>ZO#G=DT@!K0C)~_gJRKalTU&BCFpS;NT#P8`;D_yTAR>!3a<|%Z44_}Oi
z_GZ-VN2%hKn=2c$j717MNADax<;RQO)R|AyeC~eJx#9?8i2yHzp6Al<ouc9ih^}^|
zA>*<pSR6R^d55Q|r!7@p&3d{w(J4(~!g!)3Kb_62T>*3!jK+%%e>}M9G%7j0`f|dT
zOZdr_uA$6V8{O)!_~&Wva^^?ZNQ(leUq8gh=gkE^$@Gg#w6AcDgV=OR>O;9ZhBrQx
zHQw>SC!Qr@WLz=D_|@Kg^5uBx>?c-(7#MU<REFUm+4y;hP9yG3RhVK>#S4ppy7Y48
z?J~vbqbDz2g?6tWLJw^D)WM$ldQ0{7_iWD31nwUCL6Y{NS}|~^t?#Qe-};x~hO68^
zFC2VB_Va=gGiG52LMtSGeTO~V`GX@HKYncdcRJGG1ybSbYI{<#W^vPWO1boVWBKNF
z#q#xQy?mg7b)DW>E2@09wJ;l|k7yMus24vxRoV+PWc-smzM^6!j7?g#ywlZ+t%Cw*
zrD%NVQKns4PQ@#MQ`09<GCP!Qv6cp&0!J3zlIEU|(4$_H(k!vyqcV>6X4_COUKQGU
zaANlM)1@HcAOTw|lT)bUCr-RuGU{D2t-wWHxM};gK7@s;f_jO9Q^tPP&PGQ|k(^yG
zqdthQue(`)cKh&q?p1E?Htp@r$QbFy2&J9|t+i~0^!b^S!poAu9`r%d9~49LZkle|
zrgm;RoN3o<b6W*fb(+N9ev)K+=Zoy3tm)Uzrlmh#U&ykpl?!G5)<c^1p^U?hZ@#H9
z1oue6(~%^~lY<Mf5^{M<sIw6wgpV_yd{>3Y%u{LzmrBIv$04f6r%)Mr>yI|K&}3|D
zLGJWy^9$!9jasN-;KArXA=2JxZ-o)n*4BQ}B0oe?&ZKhv#QAHjlk1Y(g7>^GC8CvP
z&N>a;xnn4Fu``P%$#lFZb$!0y4(J2s{iV92d$)(bsEAV>Dz+kGsuS@jpP4N4&xcCe
zz5CFHVoWQ1vZcq(wo#*sUj_Zml7NfrqrcUi>+V?>6*x>I6?U1JN!_n5km+00^JB|&
zf!7tqn+@u(PBh28)1m6ud=_zA*Zm|J&)19;XvGlwra+ggeZ0l<hZ_&C{?AcH`w%H;
z^n-bwzJPb?y0Q%_M!vmcjn``kQ-M=xl<>1HCs8t(>-)8b;F%QWgrQS+iO;w#jnNVv
zl8#;p=T$p;YCIjSL|h@^kCoGWQQ{ZglYen^Va(;Q{iiQccaFtAse0{h4Hw<JR-<0M
zX-wOb#ZjrPaMkpk&v&q6R34|rVqX)UbV?q4-D~#*X=DPrfS#=l&zxUEDN0(Q(GTJW
zsEqiM4k+YuUYuZ!0q?ykKG#=_<<6ZE_9O;jLr<lLrqSON-U^j)TIhq$uDj)}E`uaC
zllJ;J-uzqYf>v=tQhti#(av`6M+J~hrV;qX28<*9&u9_v3oB`+efBpU8ZO<oTZkcw
zncwV^SIM_d?N7%Qpq0xBS}6n(K)F2iLQ&|Jo7K=B6!W~{s!~=4Z9a#cN-|)alOxo_
ze$AKr=tW0H4)xkOYbtN>fb*jUi1lEbyNXBsbFwT|SB_D%4*xe)3T?VpY1Ud<(wX41
z(f1~;zE=_oX(b5wA{BP^Htxk)hti?}(lW~=jo>W(k)^~Iq`{*y%sHf7;8AOmeoJB0
z`$gc}4LUkhzu8Ab^Ec(60};G8(W!X;MZD@b;_T^QAqD1&KxTQ>Lx&D6Q8tG0(jZ8K
z4~m*<3uCpZ<?_UpZPc4hA{ujM5V-7=JnXZlQ%UmMUXMg?pT%FD!Ws}>|FC_|$uJx$
z8sf=B{qA_sibuhm+LP1P9R#3%Ws<}6JunE2XB7*CY9E*}hlldT2@>wMZ*Jw<9T&XY
z4zc0mfifvBt8wk)hi;VmIc;{b(4q3)@V&w1RL-_eHJzG83zQ|QtDv<?@0|)RpEH<V
z{5n*rm*nHKZ91_qA{SNBli`Ns4g#sgFC4n&P0k;MBc2fdVEsuq^>&j%YtU@Wof>cZ
z9+v2PuN(d7up4I3gyQDu{DV(qS<;O#ttm>Lh7OfhqW3jO@Z42VT1YMWiI3EgH1zML
zN^);+!aOs%cqOSy($mmw*VWfI0!a0J4^=$nRqdJv4LOjZ$jQU>DkaOQ;IoTD_$zYQ
zTf+6oi7VZv)8Q~ps;}7kofZ*e^G0v!s<iB93XD;AOeW<E?FxK;QBNYqT$@MRWZk*9
zj?f0>IY9{bt3E<%HeYRZ=B8e!d1Wtmju~@ZAY)sd>yF)r9d+oHt+WxxA!bls%g)<I
zkoy}WdHwov8yB3^o;=^#8n2cf55lxF*yc?ep}#?1p)djXQ07yZ_O{97*~+W|bRbN>
zGSbIzYoy;NyCYiBpiw;1;);{IibR_>@3G-X@>@1=q^(PF?Aj8`R#|9qQidmEPu`>p
z*~Rwsz)`8vr96;%38aWC+1OU$<xw!dj^MvX#X$^v$A5oe;}2-R5X#9=wSKgXnl;;Y
z5*e=cGF}}A-<V!;qSfu;a>ATz%UHujrl`h<TN3vpaa;R~3ktr*)XF0PMYn<R5UwYB
zOR>m$CMMlzJY%Ri*TJTe^!aS>yWT>+A9c9IbXP+29=Gv@deFZi<GA0QV`5-9kg37F
zKAo>`ucB-v*^zL)zw9DH&{s-@W811#C=H0ZeP$gpbfZf~l{jccfNmBlxz^$RJ8wTf
z*K2=6f>q9Tbc)s7I_jRev4WxI-(r(yF1DO4`|_Gl;wU~TZMH!}Yn>ExaI%n<tj4t9
zcuT4Sz6JEnGHI01Y7uO!Gea(;gki_YO-Iryvp}fprn~ub`VKQuDDPe(PisOC3LxEJ
zI*yA?c(VbF`ol34C#~umQHF+9ab6dzk}ar8(@-sOH=$klPEQ*>N_<kutny@QHnhLf
zEv<9=&aoq{{U?6b)D~pwE~g1q3eWVF(ig(5TBms6Q|5V^T;5Yo0KO7&ZolB8y5|*e
zKb+f`f(+nGS&NH7!=nvSY|yc*L6JV=Cs8->-R62qRLa&qCg^ZOL6*VmV#$X05~c+O
z04kvkz(i-3Rj4fy(_=%e98sM@+aXuY6`MKUX`6ucvV_a{gyUziCHBkWN0(=r8?|^k
zUi0wPQiEE{iP;31nO_L`W&P+)r@cqee;Hnv5YE@(GbR%iJnBQ()Sh$v&W>s!q?o(6
z)IV<?LjU+!6{Fb0E|;W02hB?+FBUV2(wY)=kE!J8z3Q(CUL?M1g=r;nvYu&`4Peqt
z2^=W0L?PXpP`liIU4k`Uh--Xb<rymx?`<!u95{Y#X_nd2(O}YwNu%&OJTUi>33-}!
zs$l+1U+m5&!S3EW6pPv(cSL-|hF_dGrID&yDt>fnGCmM;=l39XrMbAZ8Dr#IZC_Xv
zlU_mh&5w@$_LI@p3Z@GCdMW4a5mX}fI|q^C_enR+r#_hAkj3b99o~)2Eg0ncgrr)l
z+%(*l!#F80Ri#`|Jb=L{VG&YB!MAja5+s^1vXk5OEiG4`3Z>3^UJ*WNlCDvFjga22
zqfY2KNy>B-_^1INGWzp1J}t%S#h<0c{b(t7k(j-m$NlgawGLCFI{-K2Txa{+zNzIJ
z(f_RW>2S7&R2dg*&0%SkHyQ;^25_Cn_=g@1NoWMr`xdkvoW3K90sJ7164V3v-K%CZ
z>h`=4OF=-t3*k>WElu{RK>{^7P@~jB{@nJCO~dAfa=PH1M6L2NN7<YN%4Zebw}(m>
zAs02c>F^bIj|u31`?Hrxa1+WB=46(lqVHuHwcIPsD>{(MB-FEUclpX@p`}6Wz1&Aw
z;fF2rZ8+OzlkL8cpBA&WvGGh)!9(3R^%mq0GLL8!laDUM-4DJ(C33Q3V7e<`3lZ9r
zFQ_o93lOVWnO@4%aif28fn6a^Dm<y<mAAPYoTs{%veAs~fsB^d>^9djHF}DSCY9*a
z3tl3{6HHqo)%JD(ag%&;p;#`aE!O$@QMs6}#O@#5==dey|A@Xfp}Rdl#)qW9t1fM0
z>$H-bw{kW4<~?eM`#!qeU6zEvOuKCCn9n8usjlpvU#)-Im%HPNqWs-YQBZ0WsT{o&
zWb;6}K&Zxg`d9uyz=XyNchOBYv$Q3Uu})hLK6<>w#~i2St;;H5+8m~hUTkcINj>&q
zs_IR%ZPy#&n6@n?Ytw<WQr4|L9f<;0JMA|{1r<fNjAPvLSw2udJ#<|;&h$A}4m2DQ
zQk}+zi2fMDg<oHJL-G%>vJvw5B}UTw=uxzW(}s7rT!su~v4{^w*!I>3EZ)lZ(hvmE
z7yMjB0uvC?D)?f?s2=4Q+<flLnGef}u2c%o?kYFBt}n*gG?HVJ8P)P%84Ojt!$lo8
zG3N4)t{_xc6Tt4^e_DeS=|tC7pT1LW88obm0<mj33aZCfok%%~SD*gI974jWeUM^|
zF%E3VdQ|n=d?Qi4@by|lIQ^@0)XkVTq%7)=agskKkA<D|dqcvinghAdH-6VOC7CIZ
zNP4Dur1S;-n?I@r<GPXMPrF9(rgM`}zJPbTN4iTL@JV<c2eq-Uyr5TL(7NwUe*5F9
z-O!V_&;zJ`?fwPk0rYBkTc#vE(%+uiV`C^x@u;8zW~5S!<fUM<N<-NF>Ez?xCR&U1
z@l;A5`EN6=MIP&JggT>)(^PNf9mswV>5RXcuxU#3ipgq02zYF2Rd@G~F<-L79)0v`
z@0@R?lh^z8a>#xtg#zsd=f{H^3kRb%jKXPoRky~=x5CZy?)sIIiDyvsegFO9mflv8
zl|8NN#70Ev#@A1R&zG*i9iFOcTNl!noQsV^JM}xh18r$v3*8z_)v;|Z+S|N557Y}P
ze(Rh}7S|0)g|Y>BIXk=a8nxtw>)3VOG`OigY}#3n*>)au!HAJaDyknOyYySCy|Q#b
zqyXBUg(=)T3EoMm<vkkV{~k*3<gnU4In{?2Kxn!@MjJ~VVjnI)vM+4RnP~n}NB_-0
zJiO)L7ItE5W^px8ny*&>!hp@nV-mIx<(exUQI*3HR33^K6+dqdJ3*86$tVgPtA*tb
z|5$r3Ql$+fHklUL=9!h0s=PDWxFd#Lno9Ih1PoCd!t3xt7wCr?c+9em9uVucKg2pE
zC>H0{Zy7lUF+qas9pq+>XXT0uYlAJvawEy${=p*j@3oB$&jI)4EYt6#g`h}X#dBOa
z18Zf0!G#NSd4<L9AGkmPh`HXmkZSYf%4LCX0d%P-1>%ej5OK+m`r|u`S81dp-vM8%
zwx8D_M#&3fUu?wsP@F0oZ*#Iet!-P*VLbcEGU<BKQgLP_DI27n0~j@~SGu2U*GiUX
zh;NK&Va`&+L#>(CUs%@}K2o|BoIQ5cDuj)wGT8k_LSSIJrtej;_g~h`-9CL1pwmc-
zDI+JmYylA?^oc7l<ITP=SU!Kw*$ZKBg6Ju76}u0*Klktv1%KUDsO!<Xk>}n2*)@_F
zT<UCt=s4cu8TY2TU$VUNNZ<itIHVkg+RKtqBT!f0Ugb~Ktga8H23F`f%?lz5l6QK#
zNz<CrZOno>%+mPu{-Ei6mvcjIN}XKg__x)gp2WU>GCnBibp?up!|1uUI1<3Nv@I~`
zXtbu3mhLKY@=$7odfVu8O-{5Xa4Z=lh?(295}Uk9SPi<0Oj<2(BB=RsWf0RpfSLjA
z2(f)|Z;LJJRJnoXtJIRz0%-?7Ci&`*MeEegEfTdzVwzckpreQFaj$Y*W029f?n;Wv
zP20f(r3`H9Iv}DUiijyJ1ZO+Nmeso1EDLEoLlF<%iQE-X=@wZu$5~uw*4hqzYS^P>
z*7FyYnqru%lkujbd?th+S!I@~Poyu|><T?y?B2<H9Q^e0z<uVP9IIpkCiO2e246Cw
zkY@hUsb>FV_X98H@=E?@`zLp6IPMs-o?PDnXSKM%<(VF7EWWKlU%HuAFvpn4)|SuW
zD6|s{xEIy{$=MG$3Xf(Lo(YYfocLFH;N<i}$w<@V<v}Bp^vf8Ix5gc5Vo`@8F;)`(
z*Qt{`QaN&*ptG2O8SAEAVlK#BZhl)7=ow71x8;*qLGuULcr;bzYeE#oNG8*G<#FXD
zo7ryaf%Y_g9Ruf?616<PSH8{}Hy|T?UHNWTVL`!*{O|5h;4g``HnW$;+uNFEnttfM
zXH;WPodWvodwyxtEhiv9>W|IzLCT%yPH0EEmM3Pir^qVz#=EAP;0i+f<q7)3M^Ce*
z81LpanOSpLcJBWHbdJO_A4!8}%~m5y_2%AEs-k6201O{Fev0Zu_&AiKs8J1J_6eX#
zLXwj~5P>g`^!!<BsSxhptXAND(DqRxn1r_%>ITWdasBQ$!E&*W6sO;B!1zDC8t>_w
z8Cv`&aB-U_PhI2_DtbB@=LCe*Ouf1=F?1lO#RHYXN4XFUFkqNJnJp~(67^RLxHf?y
z;ca4`tTphjj1!l(t;I_CzlS?@d@HipRt$PS5}o>Y^;ysz$c@PMG{O1Z7DV0)RbvtE
z2VU(a^mExi+suf<aIFz2wcAs~9mH)olV(0KEWG}4Zp@vR#}4}jQCXqqhLn%rdX}FK
zI<7H{x-ALS@y&03R4OzE)Lf=54Fz1WDmYpR2i`OptoHL$L(2o!U~$l0i-`H%H^n5w
z*`9nOs`8yO_4J-p2OAPj+m}dHott<IyTpD(q%~Dd8U&KgkFdsaWl*bArYt9B4<uOV
znw$p0^gE_-F4Bg3hP2fnW*@UgEPQfI9LEOH{(x8_y4V5q*vdGrJL>eVo#^gP<%Qa0
zVqdS`z(I6sEsRpinf;tZNRQ;3qCzdsUlUDkH#w=ldoeC&A-N1O-*}K#OU%te@|qES
zMRjpf7lm<NGiYVXZ8Rh!Jr6-UWpp63l%iU!1c7vN`YjN2SsXk~sGTvjN(fd@p1Ord
zX;`O**ne`l-ji)szRd@z(qpGDy?vy3eR5I3g<L*fs->|Ww75pHr57h>+iawq#%%c{
z!Flo3JLxO#KPB1;^Q~NYRZl1M<cR5d)^#VTS!Hq~_3*Rb{21x$0(MLbXf;b85q7~K
zs;IQ097mX|cf;TUT$h?5S`{dL(6A1S5qtl2#iZwCV3^|i!T@UADT3QZNt}T3(S<wT
zxmB|C5C^SP=G@0MZ`$7az!d%gXsAuQ3hG+dHYD3BNx~@A1sOl==4721VH(@}dEaXj
zks>}9D1on>cjIf=ZO^q0iW`2(&+x3G_)SY}v&P3FV@2}Q+*g6h?bmC!_!{^t?w?K(
zCRt#nZi@xoh*H`WB`LmqR51?otHBqp3O<ugl+`Q8@PT^>QHW1Tp#jN#?q<gDh!wS+
zt=ojxK+A2?Dj(AQrzYE2a}*~*(Z2l1(FnE_X~mnRA1Howw6m#y4oJ7LG&2ictJK@7
zch4(y+Q=iIm+O2$eqD4Za%1(BLwtA8QHd|VfEkA(9Q`OnBt$Wi*3dAUtc1+*d;bz(
zZ|K3Tjk-$%HV%p35Ix3p&GPr2#7q}D4H{PbL1lJaA6$)$;I;L|QI<_jMay)V%#S>d
zOQH}8m|lR!pXz{Y0kW}k0Q3u2JiGSTr1NhT!!u-%0J!V%=!g>x2T(7vnPh_OS1#8R
znEa-{?dtZPON#VPAJBfpA+?*Dho7oVnl`sIAwSWa7!7JoToo(V*>vjirh#TiR2oqf
zraCeyj$F~6c}UHvuAcd>$1RzWZ;E=KKMD_HFiGXsP{v;@w@oK9A54G#zNPYxS{(xI
zrDrv>p3V;+_iC%!0PQf$MzUj@@bWt<ceTDA{qh~Akvi0kR{4WRQq^)Y3I@$o#oWvv
z_hsH`j*}Y8VAVGUQrnG`11A=%lC*IsC@2`sE0%(9S;n0tVY?x8(aO%b4RcFwe6cZ=
zGzk|_e$de?FWS~Aiftr%*i$P{im{~5vYHe@*`nF=fqg;6Zskjv!ERR@O{tO)X%1jy
z(_2nbJUb(%JaiP<q~{uCjw&V4O9vltmopFdy~<KuI+FAVZ8+s0CJjZ0u^!fkZ~m4c
z{%z6!X5Rj12l-hvQVYpRIJK215fRE^^1h4J;A?-W1EVUC*P$vjO{18kbSgi;e0u??
zfm|w^Bdb^_g`yTm<$i|Rm~^BJT!tlW-GFiCUYp~S^ibPBi{3fx&eA%vbYG)LbdueK
zTKF{q(NC?ir(#?=W(H?7V3$9TlJPn!yPqau*jSy-A1}WX-_V?^#v%6hvdfT$w)O`<
zre)Iz`S`}S)lwlBFe%FO#W}`(s?2z$gC?p*tuKd$S@mCQJ{`fHLR5Cz!YBHY;~CZ_
zXi7Cd)e6+YoY<i0ziGMw=p0e4mI^aWNUk_t?M=>j@ZdrBCxl5dMNdg4+TwlOT#^#H
zzpu}W%ny_gT%nCZs9$hJ@qYd6_ynP+em;EcE5K34Zu?s%*Lm%ip-`UfUKsZ^BGJxr
zOcYoqOME+APnCNue;x1GKy;Wg&}c*eG3x#h(9RyFb~nQ)Cup}jk&WDUdYyxmze@uf
zmu_3W#-(~?=%iz%{3qW+FsckG7NXTlGjgT(q!N`%i;#8+42hiJi2*NCYU7U7TQ3+A
zGR`fNEt&q1L#o|(_>mT;)s$Hw$)eRM>gOIOSz0H06Qe0pDwj6eKREMtm02Y#@k4F+
z$@n;nr(M#lKh`-h9tyHqIxW{q?_&sRmm@<R9O`0fXUn)TRmi0V6BdYcC_(Ry5(r{%
zNm}CTGAN%f^LdAJ(g6V@E2uInRze@+M@J-h>|3E_M_M!7jh^f+@%R0QD%~+7kU)Bc
zdz{7T-pPyCTjK7wd8YN1=&xz=0`<4rnd6@I^cw%l%wh3lOfSV;-AOWnv$DE^R39(+
zU#xO1y&Mu`T;pz-MktYT**fzsoAPIOS(f%7fj9T4NpIzKrV&QJB0LlQK=91Oji2ag
z%bms4^*Gl0PmYz@9U)bYV^a$=29Y{Z#^D1z8b;H<ZmrcvSqSWG|0uGWRBc3gR1ls?
zlPNHWe{$%^@iUhNo*g*&pZ`mf%%KWGQt_;a#rj}Y8orGweinoFDP=o<#VleEsAx^{
z^gzefaCRe~=gM?<RT2NTMGizJ4Z89*(B@GMle#X!l$w`qD6J(o>XyG;0LCI~jofbH
zp1N!InG@pz*UCe<ZgD-Gx&Sj%JljpW6$)pd1o&VfMvTQ^Woo=PR$_BpgkN=vl-T%=
zREFhEm@X;Dpqz07dfUjM@gh~;zjobMn(tLG>%-Q%8BgZ2uMLK7gs3;S+SRigCYdH!
z7304P-^E=Q-PqXP01Ar_x#CeN1rAh}SmRdyfa7`N^z8fof|spQqcgG8HH|xqk;+CR
z{<_n-9i}Pz0o^6g0Ml46KPQY0*3xk!#N@7&*eyN){PS+xG+}b!_OfciYe72N2hc#;
zMJ{*XE@TBrA3a)Rvp6_}E4BH|Ph?Lk|7X7fTmcKmK6`xP&(>*ooj8tCwq8-Xwzuv4
z{Z~@L5NgTaK4G<M6kb;@t4GNyONsB}J#oe1nSx}24^I4ks7n<gEgnh~9pLBp1=-4m
z6qU@Oqr5~m*SG%s4|_00cz2gWgtQcCGV1D=KzZ}4(=C6-+_i_;Hxwb_ESOyb$Cdct
zSRiC%WW=Pd^PGH=xc#1j#6G_3c&pmrbA0~SD`edF>H-*}6B0xVgi5JTUH!BEAu$5}
zL%5csUyk;57{6b>{(3KG?C(|@+PdKLMO=V94{=)4T+YM4zu_u?ixN%E$zf|=rKa|L
zFw<-I!>P|IM9A*Z9uM`O9}IB)RO8G43fe#KSy<E=LZ>MKA)$V9+-#`0@%;BClATqh
zn0vcRm*63Qt0<~PryZ3ObCrle{la8Q?nB;(H(%`Mdui{wNN+Eyfa2lx*RMUZwcQAk
zn*3Y|-zS>82{~r9O8)-skhcOV1wtyHgv7+eQVOw;q!NT;_v*}kf43KKnOm8o3xqOU
z&E2XAI5_^8Vn!>DT!PRe{UO{~YU=suHYE*=mGayDe4aA<AuY#sMFM{~2#RoO*$s3Q
z|D56vXK~~*gx1puGH#$hy9V7dR)TJ1-m-9Z#)sb{$nZwLd%973W|b-CV$wJsOvLTy
ztRLAf7qD_UE-WnkBP)SZHQ(eS8TZqd{>4vU`J*&%BP~)Us`(ABgw34`T2iNSt2kN=
z6t=8&<&zb7|6CdZzHpL-Y4Mb485zAO#3gh;SGcj5HH591j@Ab)Z>_R8%=9W3XbZ+{
zknZhF|M@GK3y0{`qZB9Ge`Gpsj5lTKK2^1-GVCdHLaalTfKa$dizwx-wStCdWma#h
zxto5XnaS_PY<hF#`ca0MM%Xo3IaSidu|^-5?pw3Dj`sj8T4m1luL<wztPr>h;K~>R
z;Sw%6F4cU~^DsX6)i6PljCvTJA}yYR;p@-1Vql*-JjO|Xjw=qOjN&IDqAVHJbNriU
zWaZv(Z&GeF@A>`(lXa;$BkFQuBAF9U{w3}8Z}^IanE&>pR5E<pl!O|5l2OB@u3dgY
z`*5<Ko-oL;@I)~@rhG>rlp&-v1}3rA_M>k8&g047Ch>vg$TuN^=H51(>wdE>7j6al
z?(391amku{krkYTE1%G5P>V8IBY8p3R+31vdy(ug%diLtesC3ezK>raNE5IU#B<A_
z8p3rm7k~6;r@jjaWC*cx-c{R^W&FA3Ml?S>_#_nd>^O?n&sUCSKPTYtEpS<e8F0h$
z1J;-O_~8HYkhBEwG`A;mnBCiCKb8oehoJ_np!xXd*}X5?zb%p*f;?pIi-+$Wp#E#w
z1fB_$9(h6E>iPZhe-3m1?J0j({euiVjo_PD;=auLU(1vb2tdw0ljQDxz{tP0mEbiz
zP3ShA)wzHDz<&N^`5Z(F%<RwiX&it4+(qatJdKtn_WnP!51J5xV5%OT`8T`SySd2F
z!qad^Vp_%ik$q^D0N7jFdGgBt#(@6wAHYR`c~qDm*FN0$U-N}~!yaOV1maM^y|324
zeU(7e@&D`O_H;h}uan!;vK=}8f1TVOeft06<Z#soJt&-M=g4Ry|I0i4=iU^F5CyM*
z6Zont&-VMzX-~SmcELSFg!{8sVL$#f>0H8v6d6%Lyb3~|mOtJ~;5nWjzAWvAW|Po!
z*3kXLVQfVZ0O5|L6AOKXfbSk!f#Hu=3t)D6t%EyZsn`*~Oju0)Z?5h?T_iVp8KMZ8
z?Z%|ETO(w+D8p~@(d@skJ{j#pBX<bC2@y6&LN(@%wMoz2P^HwY*<1U$7(ZkjA%ax(
zA~DmO!o^V$ET0>_-;Q`O9iF=3Ywq)DO$5>)i-(-J4+n6PaFu8o>0S|{Ks-6e81;->
z?&g2K@Bd|lGX9^Y3N3X<>t~}A3JSCj5xt<d4cNu$)I`W0s;ZLm`vp{s(_6i^HtA-V
z-@Nu;f4zql4hi_wyS@l5)UzLjWo02fF(O1H=MT9bL)EIdkg{ODpB~px{;s>Y!}Xl#
z5bj91xP<se-I~*xLLR4aa`CJ7g^;X>*PK_TAVRk$AS52EAe2Lr21OUydm_wAR#Y7q
zr*j^ooi=8OV0zGZ>vZ<tv1Z-xTnXcr3M>YlG9|TSYP*&H$l*^+`?%F1D4QGU7|@#~
zj(g^|<gBBTAtaBdZ1^Wlb1x=O`4CXCU+4GRvjR=yoR;IZa7xjmj`1?hRb{iSW!+eR
zr6lXL(v?lSlBH&et}UNyQfZm94+vvef188yy+d>gQB(9=KjUL!t}2apvM5b;>X0bv
zsqDv4wT({Hhuz{Xi@Zhuy3UP0MjK}cS7P!AsZsb+#W<O+sgG=j1~Jg_?fjF&tg$2(
z*ul>~qV9|Yio4OXHGd8YK#pNRu)w;uTl4$(${FT5n}%&^NN!tS$=7WkYk9yWmI`KJ
zyRHo<r$<AzKvscLTW3N+CSOt2k=3ah-)b_c13Ep2UkKJzMf>o`(N|yBD6VF0<fTYX
zFSFMih`W$>W9U1FZfn9jmGCWm9$M$Jv54Fm>0`ea>+KOp?L3N&jqUpPWZi*%#Y=Us
z{&$%=Zs`FI|7+?xEcb_B{Pgk3L>KUL48Nf?s5afQ_Vi-Mih(i}tETgMEaz;P<#1?v
zc>{K;q>gFcBlG9Sf&xyCI68OwH|V7woDT+dRJ@4QZFR!zu_T^RAL$XJU}!u<Cj&Nt
z!@!`LLo0XT2V^+aB2=cr|5NYyZ|IW&b%?@|how8;i~{^&y(=MP+`3TmE)Xu%_}XF;
zX?_lFZ&{YkQgE|d_oQmY{%9%N=CU^{Q>hQRMPF>wGOjlK;W>W8^7%9w5%a#^KJN07
zq?4$iTlDPXna+Z(>7x5G*jgOEwYg{@(?^@TQOB#Vur3Xt%WX#|;<JSscqXSfC#SNL
z88KxJvtIJfR&v(pfvpwKp6cFrlWH0T6%}rHy3m2EQV!mhMPekOv)Sy(4kkH0t8T&>
zgHqg>DV}}MTtiXgM<@TW5|>Oj+;s8_QZ8A!9AKv9eEXL38s+eO4Y}v%_{e}hu5~~8
z2Tdnv9uA~ueY@^o9Wx1x0Z(-KhN&ZVBL0WIzv6?+2;OW+5ke2%y(F4ke{LIZsGR8i
z?6+V1Za5I-v@~7Zlf|!2h=hy+r8wU_=>7iRxp)k3yvx7s&A&p+|LMO7=$t6o`Rq|>
z?gnaR2sW5WPMnHC5{R2k3a^cltYVs;pX!*6pr0+p=TBmnylf>Ng>!LrDtH-&gzHLf
z>WL%i=E!6`lr44^?Q<BvlYf#GsbDn}jwubV4L)Dh?McmVNTaZwqqJBY|6%9!us-N)
zbXqYxbh)V*O%+Y1T^!Rg*O|&5aPGRpiQX<zwp?yAzKXWp)Y1(#$*Y}Y#g2yld_5Fc
z1qIB7G_#WVYKzGrmdwvbFOF)IJOBDxu=Y`>D|evZ*<sUqY20?Y4Q1&BcS>|3d2!Ki
z<2ro^(!q2GXq`@=5)Owj?PIk*1fTH3M~Tk1$ERmKbBoJT9KyBYd{w?RJ%7P`?z0LE
z2gFuUY;)$d%j%kzGmh3roQDOy#9=6tW7@}cQ9jVzjnzGjWGuo)Gxk<LdZ)BAO*(SQ
zzRKK<z&fK5y>sQ7WRQ%m39%M-l5+x8{u)%)s#N)tZmSP5`*{19<oB_244jI-S0!A@
zlwz@+iMGFN-DTCG9=R}tt9XhaO=dDW<}e)kkQ~S=Tyx@iO|^%+`p+eN@Q?%qu@!PU
zrklburDGAC%fGbr@yMK(Smr~M(~?#{dJ(4GSm-t$ZkAxG#i-i!S?SIN--(uv<eQ)W
z;`6f+pXUsEZEM!@R{7dDdSt7rW5j%~z}bj!TzJJfmXe*d@%%m~rT6X8&Z&)C9jf%i
zxbuO>DBeVSZ$?gG5l5|v(mJnZnyX(Q#6o3SHeX#ZHdAbAT)tGEeh*Y`vl<C22|@ej
zLh<q>u~S~xweCC<;=}m-CH(<M5v1@bi}*}h##EyK&OUZqTLlmD{p~bO0+WIGOa<nh
z!WQ3*;@ccXt8r1|9X1`di(VXAMKfiqWozpZ4x??HdUGW6#Vop6#vR_52t6n)?#^tl
ziBNb^9VHKNDjTf8``Oyk`1RsO6|vTrIQ}kLo9XZQJ0!;GrPi8}=e_y)s<(%>r@EIp
z`UyNvUzkI~NI4Q>EjEUZ)h=|&nTuv67NuJ!k@TNS9Fn~=3io*QceD2Jk)N{8zzQ+6
zUex)1wtQXcO~LTO<I&fjk9ZcV>jD&wT#eXprr_ULZ(J1LSS{ZnLpu+;Om(mHm{D-g
z<jBuBn}7&bAGU|nVZ142=k{1Q@pF$b6{8*s=QY8{*=<T)%ZKs#u9}kba&443LPJ7Y
z$xUy*(atLBmfyikNCsk}j-2BAGEp(aL|sj%^uaBvTlRhB91bi`S$&V#CZ@>v=X+1)
z28?Q~aR;(>nKd)TB7tcd#;Li8MhE`IGiWk?zEFdyNb;B8*#}CR!{D;d6a@W=Nwvp?
z`aCQ7G+DEC9`wByV;Y$q{SF<fKBtjomf=J)Ph%+x`zf=MBKaoWTBZ>@v*P7^i<PFR
zuB5SWv~w7rt!OE|VT!q%S=stE=iBDmB@5r`>~c-O>CF!~%#v+P6`MWI`0TFOuAx>S
zG!Sm{8fhA~YlOMVZ)zjAX(pM~qZ%G_!4ddy83*#7zcT4U_Hom*CBQZv9Z|RT-I_M@
zsd)ysHtyQU&Ze}w)3ntx(|7Wm;J;jexJ-c6f_S5iJ^-({W;XlC=D&Anp^`Gq%ALXQ
zt34R;M>Q0q;H}fW(B}Xzu0NPw51nAm+6KC+r<4KQ_yl3_Yp&ckanA2O+Hg4v2ft}B
zrtV<{BK?>**+Qe{xG|mYbBw|{rd_Ckdo?VG*H{Vetf~<(d#DGoUu+2)!qpdsaD-OV
zc_P+!zKZzgt8!j)v$FYnY5lj_m7yhOi8b?EQu1h88#HI7&!!dLc6Qj9{sH=7q^nv`
z#)jA-VEHWKfIlJ*7*`dkqEkc;?*rZnJcmS`;hAcE{#uxltvh|o*^mBLTgSjliu8QV
zTsNr@PL{l>QafvYH<FUAner!2ljqXRF-GxKIF(FEZ0Pm39=ivy=sxGp_G&p`vSVMy
zBGD1c6jqg9EQ1-9Pjroe^xh^$Q@yp?7q~3_`DCdxwuLJ-lnd@jR)24>c3M%WI^ftn
ze!ZXC<*Do7tpslePU{(*A~^^8)M`p!e$<c?my@u3>~_7UVPm5HWWH*rV|842m;<HZ
z{~Lz&n3a<i&*bQ~rvoQTcPTYrDP+g1L({WwV>&>CnIdhj+c>=%a8{@W|60?XpY>4&
zilp2R>!(?s&J9js1&@(k;^=!KktPjpYUJ>_>of72LP%)!{=M*zIH{gq00ea_g}Gd?
zS)^*nS;Pz7Pf~@=3E_zByuqjsfqIRuub2HOR?EI?j&tbCd3vv%u@@&Y>l(O6()gF=
zs51LjddB!r#A!DmAXeU~nS8i~Tx4eD8|lgxRfLv5%eGc}*4D|3YicN*{50q((r!4c
zOeq_r-pZa#emYIcT(a~8dL5|K^Nx|P$zQTr`q7nJdGz#~cO3(7i+6tcN`Ij|Mjqru
zZo4*Q(U&l}SnUi@GgBp9%Ce(+d%~qtze8gYTOZEN;mtid4)_dzIAUYQlbo0R>kJ+$
zVUa413b9~0#Dd8~KkmzdalwLR8ua<Qa#31@fm_&)LLuk*fgQ5ql|IIH4V%6oQ2pHe
zSvWQf*GgR<KLVCJs{(%!YHAb+VOrsw&5vF*)7#?caa_E>^Q)egj_#FBza0(vT1$a?
zhES0fpE{+}_Q=rTpFc#%Ypc^Tt4S>e1&>uR6|Z>NEsj-5FqfR6N-t(Y)%30Q6Y~#P
zHujF8w<fhRe_HoEjFiu)6b@7;olMQwe7xx!c^B@6>`9I{q=dw$if?d?#%OI_$4-}t
z5ad55F_R8DgD%-wWzng4F}0of+}o!vz2M3QOkmDJn<^qVay0>XouH!8{hSjwN;oGs
z8jLcNz<JtydCPh~-Kw5%W9A~qz(S89aH=#1LMjL~?I&VIS0|gVyVE0V18-hz0utI7
zUy7*iGymx&tF9h4nGZO=(=?RNZs^p+DDUbPpYzJ%PO<^aS7dqmbr3;P#$h`_KaW=F
zS9*+%5~s-owzR^4ltXUx@CN3M_eb`CC;r|tAEKb%#^$GYKGdKh)U4W{>fRUr?RiHe
z^h+;F&7V0x7J+ttoWHfAs8l+@=TNiQ$Q#%f$~MxX44kY5Z0TGDo&_fT{%dHK8q?ST
zTvc5-rget<aj}&3*4u-JhutrleVg<ZI+s?4NxHD}wQ?Q;veCXtm_5m&H{R4~R=yRj
zUl-v2Xaf$NMd!0SKS437u@6p>jP<-3+JT3u_}6>!Mfl%VGCTM-z!6;v<yiIN=si=(
z#K~W5y;`~|-0kr@0rXu2&cNbr32w@L!02U!yr)%oh%~U`c-i(s9YVQ#;B~A0B}7|C
z6P>#|v<$#maaq4HolKF}zbqt$2YT8Zpn*<+z>#)U<0^6bR0U%Vx-cDtM`zOzHeS^I
zC=-*Ed{0(Z*8e9_eIx~i)20OhF|qLK%p|k5Q!Y_7at9qJc!AueoY#c+kvVg@2e03h
zP;!mt&k_XW!ZY=q4z=(8_nz=)ohHDxEdIm4V_Gm9FIup=vldcP|9PeDU%!ug7xv2K
zlHbig{>lZ5)XXA7W%pyqx8WIv_v4M2|2#y18hkuC?tU^8&|P4#`;mt203$<|=esW<
zd-XpJ*8d)|-G?Oj!gg@6Ozak;36kJHg?MjU?FT=(pNAbc4|up+3Jv)H&%9<!E54u7
zsDugv)Q{%xerv{4fTj!@X36`=rn$r+Rznv7b1Hu?p370>y|w+W?dLsl5dWv`bAM=e
z$2AZlg0L9H-goG7Qwe-4+w5X4_wR>f^dceU48_3%d*1ZR0+%6Qe|-0|A2Px#t5BqW
z-_Kfd{XeX|by!yW@;<C?Q2|l5fI$ctbcb|^0g7}<OP6%FpeTZXfV6;=^h0-w(%lWx
z-QDjjH=eW4`F*eVI!Dic8#b<IJ)fAlXXc){k=ugfFM9m7qrh)dH28->)71VL@lg%l
zFi`n>^pjID%$bvZ-NU(P(UB;rg%G=(I)3+Kr|HGEwd8!X$G%j&W`;><(Q+41kQ~d9
ztM+ev)W0u_8^pRxrF&I6k&dzpYQU_g>QXXqd}_atqk$M>+T5NSRy}HODCp>na?jEz
zMfF}!_4?%%eHH@H{VCb}<>P8pU?4v!G<p`!d}ahBS9wF;aieo=`Rhd=5U@a4#+MDA
zlUiIxiJyy)efY~q4c8kkY6S;%z_GdCz}7`USc6NcsRk*OR@gziX_i4!FglC9Gz)dF
zFA(8_)QF=|FLhcm69CZs?E3WUziNxnU}vMsFN*IRpP<H5ZdXw)(C9hcm8xi@0W-9f
zp9C|IeijW^SkN}kA9>wl-pmu$I0pZ!mvG{ev1Z9eSAE!6T#$-Kr>vsk+bPzQzxpcm
z2tj9Ju6W@`;o%&OHS#JZOC?)Xclw`8&7>gNN6_DJ0=*a}$f{2~-XeBfZ|%{I@d~ZH
zhAF3exw?lW3`_~hJF;K&`~P;wKiOik#GANf`cnaXg)9yus%WvW`0E_V9dWO>+-rqV
zYOZ|J5N0{Q!pa2~gY{7F#xI<LXV);!6LDHxL#f!#{CV>sOQId_y=QvJLBy}?I*zBI
z3}b#?j^eAs=v#7im_u)y8y{|^@X@S}vc91x>N3Q(;(l&?K5&ls?s5G}41NPF6UI3j
zd-xjlhv%h_aT7~4zxf3@q342xruTms6m%<yUy#Lz`-YN%`6h{`a6~E<jZ5&5P!-9)
zw?b3rd@{6DXVlXbee-czkHMdMgl-8<2sOJY1(Tts<GzAbkgFfdfLuEQ>Je<dJ;ir)
zjXEV=V103r3${C}$Ex2jYsWx;14}NLSw|FE@0AAT=5HV!HTLx)-#g9BoyoB3Dgt9d
zzMWbzbtF#!+aX)9Pkgjpjl@P~TX%Y%y=0&M^in^kcq+m^bEB@WOVOC<V0WXQw-kzS
zD;-i|6N?K)OQjjLWMSW+Dll3w72%15DML<s3pQ}@G8MWZ)|u|lGoFXwH=|EKc_KA@
zmv_1Rj}-`FD<LtezB%6;q6IB6nH<pXcy$5hx91G4619DF-u_CQxklB$=X}uZT=_Z7
z2%o?xUu_<~Giy^wL`=U?5iOe*eqJ;0-hJRzb06)m^$rc$jCt7{Y;-ekdEM!w@H2o`
zz+{IDi=}&u+YlU@t$AHzCNt)%jWeHW>dlFcj-Gd>L0UcPc;cr>7if9j;E;<pq;OeG
zzfTPlAZT052lZ#cxvtbJ^-qu-&3}zl%16PQJXK;mKxZk2oB5iJ6^Sq5IW4bFhuY^0
zV9*KCX9gKlGDJc0xHF;xW_68uP@~+rmWs2g{2$Xtse-l4fU=8RKYht3m993-L%k;G
z65+7-E&XiOs})ok_2#;QVNfNOoY0g*H3UvM-6~;d7dkrHJU3z<dU<SgtCmUT;a+C6
zTb~}-(0uQDQXvQ0hCe_hre1)cE>D=ggyjO)eENKw7u!%UM_^9&Lzosh3j3PcdGwmV
z$UWSukFxC$RXCfJ52wX|Fl%=<S?56V#REfHw;LZFH+$vF?}^Zc8zkL4ke9JvYh)XH
z@yCUl!9M$?k}*GFy0;(%#S;NRIR4aiCQTtwL872Pf6GlQmj88OZbu&IeAo^O3kzq7
zyBVMg$S|=I6K`jkH*t_}!r>^SOC<gkL-;HML0ES}PM*eB0$}{oKlGS-q5Jq$BaafP
zJhA<J#*d@h0|zd+WI#nGj8Ws^Cet1y?-ZsqIA;@LMvK>)AZ4N;jV}dp_TUq>(>ZPg
zA4JT){VDhj?TXU-Ep^A<l1g;Br|Hk`euQ)$Bh1|8T%xpmauVk(k%jnBu=TKGUYqbH
zC4>4KBC7<eMV$y+GCzr(%{uC|`^cbWVMyU$POfo>M8%t|7LUqa)ucpF=;)-|7_wig
z9C<^mVzA7=gZ|K)P+sfAU8G1N3u-k*!7O@`;kmnWsz;n>&R=~$*N;7dfp?E-R<Z{2
z>K{XNf8mTm{Eq!JTUSEkiQ*CmG@Z#WWt_Q0Aq`f{&CYE07>3N=O6Pt>t>k>LVG12Z
zliVN_L<F0cIxZzCdFc(InNacJ?wsvbTm3R6_b0eqE705eZOn&HMQ<Kvm}+bd!g$jX
z^?ZSy3(AESZ+RVezd?eMxS3~5DPYQSqf@RL%!S;{&?tO{Me74ouo*I;8d;5ZJl9#F
zfm=xJtW3$g^H(gkZxQy3A#7GYJe%$p`SuyCX+yAxd5im|XwmKuz>zE1<66wu*k80R
zt9L}vDv@4`BYAbSKgG8)>Pg?Vt3=+Nnm5GBl_th_ko~wn`%Rc}X+d2<DI96UK*eFd
z6S>oS3(|m*58=+=bfcG+sfP=Ko1B`fFjNd1MnxC837zm;Nb2VDEF;+NVmiwAH^aqX
zW@6Udj64DwQDT+iZ()kz1Hd+!d(g9BIujR!RBg--h;7Gx*(W|oQ7!QB=**>Li6V)p
z!!73{HpxLe#odBOe0;y$f6yp~#OqvAT*o0m9Xid$5sZtx+s{6lR$VJlj!%D;r1Gu|
zOo>KMx|(fswP`g`ke3L3M^Fx>)Mrilc*qI#7Z`v<k~_#u2tw=Q&~_3`MA)3a2C|j!
zz>e?%W5pK|r57lLNK4pNOXI{{;v?*m+KMefJ!5AgNTdA4$$-h?h1~wkjrzQ@qk|>W
z2FB`fWno#p1L)70Kn>f?rJBMYPVvSE9Swt_F21r|Z}izQj^7nVVNUI;T6W50fWiHd
zAAIjhgxI&@96s<w><iiLnI<oj`reb?8=a2v@xEi&H*OT4?g}k?MUpiYkmVo-`=K4D
zC(6C@%?4b=DoPH|Y^4H|UNh%O*d5yLE%%$=?zq|#r81E4*(8kBiBF+b%4hJaPLPOM
zoxIAZet&&wxU7yx&Y>y^!-j$n{L{q-OzcNde}dPtw^-<7H9jPdu(<(3Z6B-+r^2nh
z88xb;<==Sz%7p`?hA%}@vgD_*I}xiehNQX)<+6^UtH}Llw&&y!A9k}uT&2_z?1QZf
zT9$UB2Z%0AY&@b5jI`{Mmx<_ru||k(slmj8&I-Wtaw<n2^rf)Rrejr=RLLol6UE?&
zb(9=dDs8tUYs!(EW1R}HSWjt(#C83~(ZSX*F-U!)%nmx(<O43=yUJ~2^3kI0QNbZX
zXn76?!gfq*ur@|Lnd&Kt@*L!LQ3g=+4N|ewBZPQCrYrc=Wv9)oNSQ+G)mrlEnfOSR
ziQu%-U8>#n8Gq{~_`J7B)pkiiMh%zJhQy6qx>Ln=B7hxm$eIz)-h5UDSotZGj8;pW
za1de#Z@S4zKcCTILZgf|)mnIkBkIoF%$-$-f0<lK4W8KwV>^p&uRHIrP!KPRA8Oml
zzPUgYTJ*t{1uDnbaMMJ_jTyB5Yajh1tw3|}6y?(>hkVx;ZdDwXBN$#|`m%pH{7-Ms
zAva0YVdcT|yg@75QA(32hjM<q)&p>ojj$gjd^_X*t)-58`eI4y*aEv}cWCnl{JP6V
zJ(p&PVRWi>npIO<TN@3BA@o)j@KT;2K|A@u*b-e%=;S4EM1n*4(yE3>BMkZ-3HghK
zbE{QxS7zlPA2^VML`WDnC=3w$dLGPNTj>u!Jo7ostXqmgV5fQJAvgxr{n0C?a9p~#
zahOcLmm?J%bH_H}Bg%K5AQ#x_&9(9k2LX!pgK1RdBd(Zq?qDd{y2;(7Vof|l6);99
z_AX|17=u+<saHK@Vv9{OaeH&!j^fUsMZ12y2y3iDoq`CNCk_haGa_X$zHE1w9pWJ!
ztC^r%HTjJ!?75#cefVBdGOF+X;Tfqjzv8lA@S9(uAWjj_?OykmHe7ndY8_P76A7(t
z;;hI0C@q?&1K*gqK^RMiU|a4rIaNni&@b{UvV!YgB_+lau!qn}s=@Injd6%XaC2A<
zBJ_akJa&j9ieUSUY{-K>(QwXA_N7Sh3dng!i6t?2DwcNMR*F&=s_=2%AEP<_DIp=D
zYC{J?CGZcnDv@W29T;GMRzT4maPn6<Ep!*nG1$O-u|>-y%i4~CB4^kYTwfppl?&|1
zGAfPyJh)X*tyr!oE`MA2ie!J1t*jQaEFr%MV0)Hha|91po|V}USVV)Axadj=K_WaT
zPdOPqfei%-mMTzmHTbv&3+{E(hnuOJyf>aXA&FKrUtrgE7;+Kn5F`{N(iM#R38~?A
z=7ccoJj9pl(zkaCYfv@9__ffD!p0@Z6|e5j?PpOVK63d2U&BIu|4O;(3Y@CHmtS#3
z)#1;6!#w4PU63ET4wj=yx!<B)WKAWh47Md25G-qiG$8R<ez(;HSaNT`Pvdl*f4{s?
z#VtXS`HKq56?lj(b))={gWF@$_K3W5W=8nSB_G~hUDQ&I?@f)glFd3tQTl<S^>`Q!
zHrK?p^p41?ht!%@Uiyi%JphUr&{nh^n*|;fBm3y~m`^jNeS*F}G)8+v1UPPVJ2I<@
zlX}Y*TAVW=RG7d@O&anrN4#7HyzL}iJkPLMJ#9hr2D+RLltI+N95y#fNRfO63=)e@
zpa0!8e{0BoE!Ve#@&`aJpg#K8IiuG4_TSQw|52pa;(iL^C!?E9*BL?P;9>ai_{Nn4
zFgVX;PhxItrRv8*Y_P#Xa2y+a`*GBf1Ac*b`#bjzf^<AQJ+lljfiH{2HjsW-lq|Iq
zjOKt6yuHv%YH$0=5S?g%j|H|+2u+9gu7(K0pTNA4wR_y{L`U{WGOCcu2y!q=LG7Yk
zw4xjnABsuw{<wO9XT2qVKC|A;(Fl?d`TMK&=8+fKzrV;|t)r%<?U#m%3s`I+`=@Pz
zr`Qn7JHR4Bs|3L&dd9HRo=j0An7yjpexoonjg*`&1>rh1?q9k7&)%MfluY6MF#`gn
z!ywzPuI__4a`B*NZkhV0X;=mdz(KMLGasj<M8tnM$nP#^)ob39avb0~y%)f)>jU?c
z6;w+Q&9lG!HDjfUVCr*{aef6H8$y^HQ`=|``&$j!m4H1ZAR>vd4YFuAM}!lYL+Je=
zlGkxIyD?j3N4gBR!vw6xgqI_jk}*IUP0DjEQTJj=TmoqowYw#Q1$LFX5K&h>RXjy0
zSbH7o*~Iv++C}Lv-aokj@wuW%6ltla4|9al;a2lDv5&nAzGJB1r8oobz{(qO*0F1y
z|9v<KM^6|EwiRucRX68oMbic3b532xpB#WB>$@2Fzn<qpMuk9iB*W7tCqLJjEXNH9
zs-PLBM0i6ao^w}p8e&EdTz&B_d@7|8Z?453F&>+-V+CH77r_<8=7n#9SaA<KKvXkF
za5NZ#6vLP4l!6=Oc*{qAUc^#3EIry`hGv89o;$!xdkA_ANo~6#Fnno;rNj9-+lGmo
z#W^JT6^rc!MKB*mQ0>5v^u!f1gHx%g^K1F<z|Z_Usw90^=PrOhWc<vk!-F=91AgPf
z3pcyyAOc{L)?zjO%)F?%Opq##^l12a0Z^r~#(*JyK8S7L1yjWX5lp!C<EfA4qCiix
z%MdeySM>ttFj3XXrbLRy^5G&af=M*M&NnqG!kPKw0z1i&!&>7&u*XR(RzstX1PN2*
ztQ5u;pn$0I_#PdoJPWyCXf3qdyXXap8yc$D%;yQ&84xo~74#hDIf4FwCZY9!sV(aT
zkpInybO9Xujr0wnA3;zP$xcAdKP>+i#3>$t&&otKsCYH#OV%Y*a{Kf>Wwzj2<3PgW
zd29xK>9%@~MtueIWdpPDUo2F2+<o>4O#bI9>EdUn@e3hU!NeDHTtp(HYZ>^8hoo_Y
zT+UAPFXRnhFPhI39?J1hI|FXigFdx;iee52#Q^bHkEXxKYM?zVl{&Dr>y(p00~xN3
z#z4Ml0VCx)i5qc8TsWXsd42(TF7S_|kcLWO$yPVv2LzYN|K{$?GnJ4i2%iJJ)*rW2
zW}*!a(nyRCug9SEFpr!@Up?Q^PIIA2XHPtK1zw#o36FDH@#^E)NPmyJnBY+AT_1ym
z4C<*o{fmIS?lk@lu*Y;@kDXCa_!w?Frr~}%fn;hbzMLf{1Z=Cnc&iO_jWXdA;`-y6
zpOwErLLc*P#I|ntHaq2hBYz6GWnJJ1#*FyqZGs@_8gKV)CAIbGRz~%2?gRPvE^yp>
zeUVsYF5<DU@Xdp>-yj8M<_KHd#y+3^mC8$`Sqvj77=(cqRWO9vXJY-$B8vd#^vZ4t
zIDy4M5)SL2>1XUisrd;;>g9xXc0{$nk}Tauqlp#wUR{7UeFvcet?%0}zq%HfK$lLq
zdshJlOMhCUrT2%ART1su{c$qN&8S*Fe#N^E(3KsK<(lYbLX5WuL||oYdaB2<`vl53
zw^y4HYzPGvl|nRm4DSdA%!~4Z$Yi2Rgnr+Ln2$HjyYLk?_u=-KX$3m@xR*V^Rt-o5
zq?w9AIb?V&Si`$^Zf!oRxe78t$`knjIe3Bm-={x?{F|E#iG^L@og^JWL$47tK*$O5
zE0dRa{t$r%e0BF4m?fkRK^n@`8C<_1=sL1?Pfdmyd-H7eXuN%L{#R=&pJtG%sGUyq
zagO@aNwiRnd}OM_JK*}EAd$eGNT*!*4Kj4s!Z|IIZf!%1Pzl&O%-Zpr`=704&PVt;
zU}pxAa!=-!<ve)1$Bxvmsg+E=pdm?JSuP#Bw>%{cDy89evx&Z?b$PHz$j}<AKD~Iv
zg&0lKJMYwAz4QEO&RkGnV3o_+>sKkUKc#HIu;A+s%U|@XpBy7!{iUM`dgr&0(TMHa
zgJn_MULG+8_%_iQ8WG|#_0*Kv`EV^Vi@}>3m45>o5(2I5_1;j&ihBWImYxZZSXoaA
z%IS-E(_vgso7Z6fx~;hj$Oc0%oH0XwbwG&AXA-D+P=0j9KXz3QadbstP&`nR0J6|y
zUZfztApSb&6nZWIV|`k{g3~tOhu0QW0mvYzO_pQQ?TU&!B(J%xji+0pO!rr+r#4b&
z<Mw9-2*CP!3bDrWd@xQcJG8S{9N<_&P-fc;=o`zIWcW%M|MAjHazX-yaTD;(wMqX3
zImzZCr{koO{1~%M`N^}=dJ(Q?;3$RQSKo;<aYKML$T6%{oNl|0Dm&cm0lb?$P~FHj
zOem*ft7Vl2r`oh#gsl=FA|&H_z~c|W-0_Jn;8_T(e=m2D=>mwKS2Yo&8ezQzL?0hz
ztKPV}!<i{k9{-7c)uY{R5E#HBSXjD+^GkK>%Yq~&Qqocey_plEPvYraCV+fbVdl7h
zN9;$H9E2=LUsFSXSmqAfs`&=?e199@`&hX3P$KSQ@xyh*X%&;aN)ok#apxIpO<Zz?
zkV3ZC8abuch|B+8CD0kDi=(ZA#Eo-BfSs!WLIhZ+LWtNw>h|Yz$k6p-?jf{(U}Am)
z*uJJRD|R6H^d5#`LeDHd3hAXfd)?+)-1nF30*8><BqA`(mY{*m%UThnqO$nv^WaL}
zl(gYDT!8=Ug-MtHNiq+CsF-F6iL9^#(mFCOxHG$N$s>Z@%u@i;BUv{a$U%-G!4ZOy
zjqUO7-NEOAdru)0M5jE8`1{n{J}S_sypDt`2>U#F1q391aL5tVCua_2fw507FL(fE
zrG~WDpOn*M2q*&Y%ABT}rcyErMl@x?)Z~|Fap}^~K2rgO5XCVC7zusxB&P5LJ5Aep
zgc|hnUN+isUct^q;Jn<^k8AVbDF>ib(<{7Usn_Xty5mkRAo*V5DeBa0NtN!|3OxNV
z`av=C!x=GWkM&H4O4)7`H<rbh7kS-}b|Q~zPo2CRAII?4ezAbO&}u<pE*<DScXE5w
zJs%$&ZswI$!gi~UZGXOudhbLg%6G874N<=2Tq(7c5Gf&2B7iE$Kx!3~s7{`v<c=-e
z1a)v77i=wBGyy`$S9+G@v3!TPSR-IcDXsR`dc<j>p!RY5G|NYRG=xR+*7eF?+_#;n
zu`%%Q^kutDvI~X!>ria!u_{`KmWmfeE8`<TA}g2MI7lUzQhEddRe%RL0mJ813Lv*i
zefj$r1XOZ*^#e-L00Wx=nOwP9Rfxf1bL&*Z(^3r!CIXS#$Misfd4Td2awSrcWk3{_
zw!qnj`=4ewGk=K02uO|-Pxfh)=z&x`f<|z}xP9l4%0FjncL#XaJ4izCTe{j;q*`Uk
z#116_B>F(=m&J!(L?{MOCWjI_5fYfobjdR+ky?TQj~~r$7foIpYHJ1?G58@h=9jAK
zp~#$s&t{iqb?Fe=O#LI-44?HYlTa|c2BFPcdfuZOvdTFI7OH9XDS3yx0ZwxkQkp_#
zj&}PoKKIj(cGKW2&?eKY_`V_bCVkoLZd`g;ShuIKxUD>2vQ#Q!YOjyvj9ubxiJya&
z*8Nm?rMf;?G9CIBo@39Uij0tYBIy0f&D`FqB!#fwXaG#s3Y62Tz_LD_Xn}10eGK6q
z2<>6AR6-puB+A=7H<2<kB(1m+1o>D49L#0Dz24^0cg#)hP!^X{T+KHfQwJMfu!mGe
zk*t4?5hEJcK61+8TIbZ2Qc{f8-1K=zWIezL*v=q4&EX9ckEzpML;0KynkRx4rt&ws
z6vtNU>6<r%=?@~Il*{TZ`~`=yB|7CV|EaGJXj@PTSc3(0<dF_$AE6S(>b<kS);tFJ
zDvu!OS!ydQNzz9mG6br(nJdWH18~UHiA^yC2-AD5qhkpCwa{8%4q&QExO7h!-U9%q
z!4yVPwA34kRIt^LT?l~A`WDHW?QNOJqzVVoA*cp{_LpE1R@w%Q<$shWI1XI?k;0@A
zf%_sX)vr+h5{`hjP2KI=w@s^q`!zZ&yC2x8p^~inW^}&IygVzoOIsq6voUBJAIzX8
zAUkwax@ngJl?s)_8Mj7d>%NStRpRSM-AKF^I(xbE0pc8l?|uR(9eC=VmvBQQA0NWH
zQ+3+WLX0!m5qu<{o&tSaIf1eu9)uJ#OlSCp$iyNDA-a7Bfy;e6mr|(o<TUkS6SbAS
z0jb}1q-YG2(k=rR)j(5KIMc}v{b;3{xH(`8R$NE4F|HB1`M|5k(0m{X0UNFFTfq=o
zS9S#|fH&P}9Kf41LNxIdx)jvG!lT+loFK8>yB03+L{ePH?s8ji98_s#ezj}j(+<#&
zbhULps<3dWwV19<-}LDy%mR%XFP#W`-ZtY3l|Dnb-KKSEqIH3T5YmjUf4N5$kiHS9
z`0WQ9`KTX9tZGv6xo@{lnd7GSRHQv!QCFU7*;T97%3e&XnTeJ>@+a;{11lY&l|)MZ
zsE4q<eJ9F#B^@(s_~S>F(IS`$uQF-CL>_|;jY?Utr&T<IKx@Ufo`~bxgHw+OLf5sl
zeURwB3X1Y=v=#cl2;l)>i5tV=+4yV_`iB_%;r7+NH+$xl;f&)AJ*mS+8Lbcb-mdq%
z!-oIgos~9;M$?c9cpJgf)!fOj=)xzbaD+fF`^8c&q(D|>`tr;K+Mlt*O2zs?0p=Pi
z4if=jzOjO4ug?PU0P1_-aD%W8^!xI9jYYc<y!XizA%mfoRxhC#%*JbkRJ9f$lWckZ
zD#IsJ(?-!_R^Kn&6D%@7m0u`=4(^NbY-kb=lsSX+Nwv4vpw*mQV!EEHGf@fKFpYL&
zXux2R-a4&m%a^nComd@^^8M@zq#XRP=N-&*ZH@;UV*zriib)&Y)}Z9N5y0#Xmt+GP
zD#V?O3g0PRufPL@Qi5=I*4R~`5Q?}IW%u=8OSb;-ZDa@>Mkf@w7tjKM?`TMTWYcG^
zwUn%}l&ofy)$HD437hCn=cC>O$E|*PBLZ{507vAel!$NFj@L>IWU||B4p4Nd*e@WR
zi*bhtj>ZjruK+Q%x*MLXJLqVAgZ?V~waF$=<-JWW7?1o7hCV{aaH$8_1jf0d%0R`c
zrNu(7y;5+wtx#T`-($J6Az}z|So7gWu=Ea)XJrIwwQWe4(-h@?_2#N-%-g@SR|@(6
zjJC(r5A1w5>*>oHP;onL#hp309m^|%#Fas+j@S5hTk%_C?6;n3b;`_H&_M9+JPM$*
zb{7R0ZUu;S?8#9MVL(ek8hndB=!@pWZ*CSHA!tOYQHFLK@(tRDsv_a|hzEM!lBJVv
zJbZYRVNJe#N9KUI+IcdAg6<l#V8kU~jx}!2`}ZdqUl~Ny28U>#|8vHd36}|nG)gd}
zj`bm(80o!>2S;hcZM_T31NKb?V+C7IU2~mtmd!&3OC??Qk(>)9-G_9MeGhLVY7H)e
zr(pK+5*sP+YwBs^yu&kdN1pS8MRIU_ZbSa_4O(xU@Rb>u9KT+XY5lwM4lWdUBub=@
zIW&xQ;E6#xs}ni+CZp@ue$2wfDzw}1z@>ZIk|Gv%Cw1RpvDmhCSS8oEpA1Ak{UDvk
zPTRd}K1KgNl$F?xfZgLYMMsKkqr-e>a^66pr7$Gyo}~^K8Wx?$XBRKs(RL1Az~|O<
zUtetRPDzt13Y_oHYu-PQs^P$S&tTt0bB)(RD7YVF3Gd0KC}^EJ?{UTPOGmO)9*RbO
zGphd%{yPScDCkXhD(UAOZ0=bZ6M5=t(2D)`5e|9X-cqA4l+TNL-(6)@0Ey?@5CO5y
zk%<PAfSeI#RwMp}l^LB#uGH=;?1C2v$l#b-^oxFFAQKDG7q~_7W8U!)Ofz0K!VSS+
zVN_C^@5#tCiP|$x=hS=A0h9Z`9vr3A*kscF?jU{sb(o`%&4Xer?QRTXd*rFz*kGD0
zolKU@tFn-T<$0OzJ(u&qpN~EWaazsZ0tS9wE;8!8BXxo>;(OuOlP}La8g}~9rEZ_^
z8vk++jF`#tvzhj-)+a5S(AlbU?@4fZN(i$S=qjjfHnwg7c6|I+{eeh{LXJUw<^=V}
z+}4nUxsH^X%Y-9^W8wCjk4GxpQY*XDl>My?hd=PxZ@!xQA?9#pV7McM!KwI3C<AZ9
z?nGUHf6m+?x=qXS>pQ6mwE$WEoV+8Sr5)fEc1IZ8RY`;n6$uQFMpp)RGJSC7TeXQB
z)TV2|4|7+fs+1_GKmmCAf!5N0Hdy-qXEL<}2x|*`@ULpR5ahfawLafENLZ{4+Ouk_
z<LB7M8)n)ibIfid<Ij7m6Bsq(L<bA~5aod~qi{qKvv2E*@kQZ9ZrcVOG2pCF%lNHM
z)Yp&Av<rWI?KOUQuxGZ_L{xCuPDH;uK`obBAtksWtgL+hK=bu^KRRX3wLG8^LR|D{
zI>+GBrAs$NRP~<E>al<6m|<=h)&u!XP}36zaZTXj#IqRm-M3om(=z0Hwv1gHL?5XH
zL%GSk33Sj1#v6mgtmgY@6D8y9G#S<N5z$nA>%9v^6B8JC4J*8$OnkX1Qm1#G&qRE6
zqM06le0i9Ftzq@d#%!pDZtDifI)k*Pr0`^en0)`n#S6KcQpNYtud!;s8*dC3Y>L42
zC4G6O7PLV{VA4SDhZ$y_2ix3Pq;PcKi=PJ3<RRt-e3Z#}&7Zaac4D?ZwH8~$YQTu;
zAZVw13<K6<cBbdApZrb3Lc)oB)`iZeJyYw6Qkv@t5|cGwU;Dhz1B+rpT^C4on_Mh{
zq2D>(BBUc#u31l&I*>jnuh5#gK9tp%E^De-=g<mBgNz2b*)|83J`3ltumV7~DZ~=L
ze7QDMY;e{VL(W9H4Z7wZs4@^E0;TnVX(oNV#n2xi9Q1f8!Z>6%AW7O6k2v*%X04xm
z{}J#<+U7eyXFATwW<B31>lTWu3z+!w^6YAw4rYkS8|Xx=%NXO!FX8S>S5XEwh)=K4
z<UB`P@dM0wt6oFr5~r`HWqayhZ_LG6CI@Ou_}+LhUQesak+X1kU?08La%f<Bn*IK^
z=3grf^m15f|CF+sU4q2hpfK(Sh3aXZXXodYopmk}vXg+B3jq4W<Dp{P3E)k!L<!;k
z=8B(i$)|+dF~DtXlp4XV=K6$?uZbp-)A4n--I&+84KQgMk_8p@+Wj!!zqZeEZg6vL
zdE_3YQo<+nYc*GKZ;^|J-?5yBhWgpAfZO%F=d-XfuAy4yQm?O$WNLjjR5j|oQRx|E
zVlV|W-sA2La%$Tix%?5QYU14LwA5E1b+}trb_<wQ*Ygx}%;G>uy7&2(Y;y$D^KU}&
zj`o;xEzi)fp0=#+y!HZFk85DqzLFvu9BFwDxK;dj5wX5y8vguK!{>i@8Q@9a(IOnq
z!grDSEE2?~kmoJlJlSlodS-LUICp_yK$X*aX4I5#p}&-pE7zE9j!x<Dfn?m{30zc5
zsRsEqJ~e@0L-$4y=Ph^PxmuAE<vdhI5A-T#PxHwJ%7V3V(>c%56#KC%ESS3PF_7=1
z48$|~9T<s?Sl-V@Qz&Jvh92vWxoeQ{Sb4iHdw>()ECkGpL2vtYxOQ<8_p*w`%AQ?g
z*A;)&#7aPln9c`aI$xQ6o+1BT7jxp28YcJ{u~H)F1@=Gr<;!O_81L>o<hc7VK?n42
z-_Nvv-pN@g{p0K{=fhK`H<U&YWg2QhtM;<d+mCC4!t%B|<x(9sX7S{Ubu${mnH4RZ
z)$p9Z;(;tArENshjGTQaiyoEvRP&Yr0Tm+YhAx7<yH(W;{qMi~B0!&S{>GIc1{nJw
zOZzh$2+8_d$M0Tw|NWUwk(`)(q2^mvD#g-1st2kLjH0ioU%h%Iv=U7peAt<!tQbhE
zIwGg)L&R}oW3JN@Q>G?>ItbByaXLD%Zq?9TVN(K!hbg(fGqtZTwlT}9S(zl`WOz>t
zjvPr8sO-LPX<|Qk@KZSQZ)$=3|JCox5kF|Nn#yjw`sxF%Ox^ltr2?}|t3kUo9s+LN
zPy42Oxwk|=KCKc7CZUv!{lIurur6Cqsxf!4&^jn{qTYT`Y^F_X93fWYj9^$V4FwR&
zX9e@((aJu_eLgsu<Lr%b@jCZ=^#>6_AO;flfL1Zbk8ZHAmbn=>do#oN$SF}V`SZ>^
zl%7F4=9YC6p?3efyLXv1x@gi2>j^(R^1!8?&AE<;Ak9~B<pczH_tuGi*WUkyT4C#4
zd06<1ESCGf`f-7Qx3}H|X_RlCl?}TvJp?hZ!DVu(N|b|z7I&O|Y;`_@4ql~B6r$wO
zsNebI0Oo_&ZlmK=4BTO1k;a&8*6ET<k$%K0zm}*tXqRJ93&sA1RX{qoAWD@DfBznv
zQe_=&tw466FZ1~hM*IS>TBvV(@L&*`D66LPJE50YiGUafHR%<)-GQ<a`%R&jc9tRs
zvz-Pt9x}-Txn585T^Ac#?;PxP&#^sOMnglEfy4~K-%UQL{{t<&i^zF?leKM4yt}nP
z4de-i$Ue(y3LG-g^I6u+pG5*BZVK`y^`lCj1atT98(tK$nGA8w)Yvk56i5?NeE{*D
zpk%zLVX7xJ^f%+P`4RQ!g;_c08kKyYm1|0M9wz3Y3ZRl@s6Tri|CZw(8W)<F#cbPy
zss}ose{un;N|~Dsi<-Mp0lCJxjP+dB3sf3arDM|Z&l4rhR>#q^8l-Fl+R4&tHd7TF
zcOQ82z2C(mu*>dd@WQ2(#4g45IXsA?K1YJ>h%8DZt^LFQ>MHzSe@ucxK(JiXhl>lv
zU_kei#qTChPG>9$K?m?)ZuZ%;(~s@T%U_<o82h*q!)$-sG)sB-`(c}N`3Xd`quuGV
zh^-t5YJv$u0uO^w%fnaH1I4ydtK8x3&x2qJIEU5#**vSRWMyG6Z90LG90WIJ+T-(P
zf7*)X9R2P<t$I0jL+8zTc}j_tglZ5qO7*{EoXs=`vZ){qmST$W)@FM-D%-GK;ZBOG
z@$B>A45<ie$@@s~g8;w4IFT?}CvHmxa2#4hTgy@RBuf-z=Ca~nVCDdWH6hV_dz!H}
zWX;zlCS`Bm+%{{2U{a&%6G`uWr)(bQR8zRWTv+i9L@wxBmbNgk$Oh)0{?K1p_5op1
z2ZCQVKL1>C#0YH?1@A6uUgOe!*O|;|Irn&iO6Im4N-5gqjJ?%@A4p3)owG0A2s}^B
zQTOP}b-z#4`dulvQ~R=gKb^leKAtF*Y5LV}M}6#JmIzo*t^Ouuzgv$kl~v$b^eb^>
z)<a^k(P?)bGZ1ie82?Eutd>j4BN)4WhJy+@<6*{|ijLFmd6A5TPGheD<%%GHIJLh(
zCv9gBlDVr-N{a(K!DxNZPGj}2Zj19bE**jlX=Yz-#v}jFOxA}E@mdQ*&u>PiDjNi{
z>h_2$<l5bnj1#4edmNBC%W9vK_<S(4(xD6c&6j&`>ee23)RYu$jhDL^YmT_0U9wvU
zl`pfYl}wZ?bK>5++)jktY<&pw+!e$&U;qEa82?$2!mor2D1$D7mEQ31*^2tio|SPL
zPkYebu)T8xD0B{_g7gOF?R>FFlP!r%O-lJvv$$BX$f1s`H%!?}J&&rOqkVC+(3!`(
z#A2pP<e|?sgUb)(z!>e#H}eVCU#1-&uf<WzmDtO(=w+(K#?|cHG3jNR*^u>N$ZKUd
zE%@x!Yx?=YBZ~4b5?v_yn+yFpmI|Lw;(4Dqt8BWnsx{M+n~Hac-SuUXR*Axkplo!5
zTk0g(Hlb;_#kbatPaFvT^PK$RfAPP9^R-LMzB_2mq&IpW5Odx}W?4)!K0bqP4K}4B
zN-4jD&vG{Q{B;(gT;su6=`<nV8>?n+7?-%8eTsb?P^Yjpm^b`5CrPGZ3Y5p|f-{z0
z6&<y-h|jd3Qs;+q>XURX%IS7|D$QA(-@#mknwtCuol-u@gGlEl2b5e{DUC{I$IR2s
z4g4D!CM#!+3=4qp`;LfNLDqRc<CRL0c4~7NePjnD`gb>oNq}K)(Z5(vU-}-RqsO4n
zm?L@*uP?`#-WY_6#B`dqX^$w!KLS{2+T90Oe2w>c0$`tNg-MVcqQ1^;^K7=k-Wi3i
zXoAZlx)Y=txJktM*v$iPY$h+r2mx>s)Zj@w>@wMYAHI%8g9R{MN!jVucH}tf>r7tN
zta|4Mb`2uGx2pCn{4ds~nrc(~^KL`M$B#?|zbyA+T4w2T(gNnehMX<8qg`zTPth&m
zK$^PEr8#euY7rR}CH+!*vxI>+=GZsit(sQXsfw!60L4z=ywHMP?W!JEss(~*ZC0X@
z<NMs;Vxq}lEhH%>pdqM=2W*BDQT5ari9g{KxmP1zZOmV|`}eKXvIGcH5l1Ebypg7e
zXkotXkS^=*gGmV_9+KA2q(9!1bL=2hcWUuN3(4<qlDZPS=T-8l7suuT+aFnz*gMq%
zzj&Sg`Oiogz)GEKSQAJ-US1LpB$~V-WcBj*%@*NhFk2TQxkJ5=pY>PX>ps@+FUe>T
zoZFRy^X+_pJ?m0F{EWVj$-njcKnnZM3cPK6B*_Hp&0mas36)3{&NsikATPvV-?qQq
z|B-n`&UP}gkDbhdMZf>j?woMmqMQ795Ceg{_X!LDJ}=1K$c}&U8*h*O6?snv_BZ$b
zIyf%DNFG<agaiNg?~Mxu+#8YzyuMe*FDO9<zxW`LdGmj8NKz2vw%O5Ya{R1ih<wph
zKP3DQ&h|cXESw@$?fyCz{H|Bv=P%A^C;q$e?VmUCpZ~>wPVPJCAN{qqD+&m-a<rQv
z{Qb2CMjPro4o<+&tByjBh+H$_!v6qg&mv}nQ+V^|Hl9TG^+W`2=+9sLXHe(=I;H&Q
zktD;{?}QhShzZt7T^80Pcw<uc*Pr?Gb50}v&&5Vo7w33+?}xxIBp%j!|Gv9%&qA(E
zuaw}|<Lh011@5SWMD&H<-^vw5Sb}Xwrx~KZo`tRgKc7CrJMqtB^vnN6s^mg{^7s|M
z8Ne%#Zp_4)|NdHU--4MaVo#)xy_QQp6}D`?Kpk%Fn0}Bh+wZT*xot|5rNc-+PD2Gm
z<P_2#J^TI?5;xYwK7F_!b#$<BbSjQ9`;X&8G#ZE)hdGB<h2J+c(f45Wr^U4*j~5A>
z;gp&iHMbOrb9uJ!>tj#y^T_?mkNoQxACdSkUW6K|O#wi&4RgM9`?2OB`UgLX^|G=9
z)lV$1t$w<!0nkPzH43L!@cf<6{PA!3Es*$`C}|$&c-c-pgs=L71CQnO@h^V;p13^4
zf%oj1=3w}F*j~YwFh(^n{`xb2zSOzr2>jaHZ{a-NUH4dcw(n_8^WWd?Q5SgB%J*As
zXvfbw2bU48l<4<w2<WMw8vgke+`AF;G1o3U_4~`Q{0QDKGC1L<F*cQfUCg(e{9jx<
z339OX9rBsvKUaevS^DMJmRrBS)ap;+J+GdbGWmJ2ewfr0Ho;>g@^h_z!ReA<Bgpq#
zmO$9?@{-gcE{y51)z3xx_5I}khybLf2u}Q;$hQ=((Ra^FmcPH1?!(BjSXvWa`s-Oj
z%kcB9?X(joe*Jxanh7ApIiUYs4i&`frisyq|NdH+lOv8#J^Iqmi!OtBmD!M(!QX%9
z`{8gKC3I>de!lk!WM9ku1^oX9Ypn+Fsebk2*Po!e0YOYzLxfnraq#}~%P#y#P6xXg
z!|<m&q(H1;9Yyb-zwZf65rD*QKO3Dk^5!CuUkgEZ<H;oHL@FexFMXMz^Vh|UmWRL6
zJ)^z#`<w9XB(kC9k34j7h`DV@1ic-|r<x;!ROyaxgfO8!8sfISEmrE_2h>RhYsEAx
z+TJ|lNO|YU=R*0GH~Vt8a|eOMOGe6f^t>?OwxVq9$DPFOt_QmaO#dd2Jb6AbX5{zZ
z@)+A)W9PDibSsTYwz&3_FtQ+e)y<xCm6G8=s9Om^y=kBe2lf4^U|+WqW2QAVxi?+)
z=p>R6KC-U3{Np8BZ-B+iPS2G3eFHc80Zy;!tc9)dJWx$zh2y<5)eh{^0+`RB)p{!z
zO(e!gm?aUok6;Lv?TNxTBcs0F*qLO>WGln81J7Cvums0xfPFYUU-;<tks{getrRvf
zlDO2-$q}Av%CzfzoGgc=tz?pA0tDP50>apg>wvwWxm@moq&*X*G9+)y=j`GjM=M8!
z<Tdqk=+_+5-6_-?Yf<|etFx5%$85u&C~WcgmsJQp5d~|t?Dh-x`u~Bma4cG_pUrip
z#mf7W$@<8mRA`|~$$V~P!=QV-QvJaMB;>URKNc+2CpU)5Zvf-wNce8P>yh?z7vx+a
z3(t7F(e(GN#5pB6qNlb7wg)rGya;N&7y28m4t6iTKm6m&s{$Xq`k;En!J?22ECN<P
zG|$V5mR~XCwug@n$$<mKwgFwHrjNoobNUaDkisqy2O7<k(>AyRhMkX;n-16gKk_-N
zv~dT@Ml|hYkJp7OLK1FP8mdavtIkK{nKSkDaUdM8t?ZLG<OfRTp=He44b!<^bY+mB
z+_%}!SIRfJ%cR*r(Tq!@I}2TbOG9{uK7r(sHUfU}LTb5OtAo}caIX&pk)&?(5m1re
z{fLR~3&pMi%eBv%%@N9G6SX&?kuSDe0}6`|nxN)Ywr?iSq~r7$=G^FImBgD(0g=Ua
z?X!FU>Af>ZDM^u)br<+-4Xfl4LiA8{T+gRBTziW{{-ntNmIzXY@FV0f6N<k7c3_sz
zW|?2$-o3_E7QMC_4IdtDZ`0|Py9L%;5z;8h%CW5~gQ-O1K;IVtQzi60gYq}eHau(P
zK0M0C>;~)l_Yeo$)S-{;j${oCCsSji(A+RDvuw0O36C$5iymJ1P9$tqPpM%Ti(_0y
zVtc%5`guZ@8j+=rM1RT8nvb%I^|HFhOA5@xXQw?kkpdeCkrx?;QOnU?W3mWl(e0=y
z&UZdK<f+~4kQ#}IvLq;b-xep#)fuukWY2UMo?*7PX&65Ng^|D=&&!WoPBpXBMshe7
zz9VEDpb5(}iE0SrlDj~}t=oxyuoQE`b=iY{1cS?Z{=M40GxadFWYDTJQ-*qm&*VLj
zPAUxtL)zoD))RaY1CnQn5UKvWDOihH>A{g|uQUHNgvr)Vesf8z8%ZS(<|;#RyBGxN
z<#`<^X>3chg!4G<n%+QV52!LG3h~1s1#4G?8bevb0}b2-pj_IJ354)^DDrBKRG`U*
zr}pOx`$j(~G0jBSJMNNj1EN3phyUlfCjJ-a2>0!a4Im$UD)s@(&#3HQZlg;%l4MD5
z_GwP-FShm1*6nKONRvzrP1&`{={CGVt3+abn19oc!q;NH<B=b^m{INubWtvp9%#0F
z|6)|#60}?&NTn56^qN|?=kCiw%W;^^Gm>jKKF!#cYHy9C@HLw+IptSO5!`tUvhgVg
zjiHS99-b$@ym%;gWbY-Nq|}?FaZzqLTTS}aPrGK9zfc#-n*4k?N0CXh=2<6~>F6sU
zB6iYJR9FfUuo?QnybxUdsLJc8?|rI*;kSt$NF439n234YsON{vRA;-)E{K`%EWWt=
zGS;~4nL!4R(ibTmbh+i-wA)Z6C&5QB=ox9NxBq6vUl5-{^6FrHLuvhP3zO}vPONFn
z)yR}U4jtX4GkU9hZSsITmfg%=+u&ck63OK0`ED5`XoTE)^}rX7V+@8a#7~aB2aQ@O
z*XIuISNHVsYd$Tp%jx-w7kbAK-@P$b<p1;{rxCMx(vtJWQ1ArklkwPFuyN^j|0pSQ
zRB(BsOx$Lq;%lZQVxANM_2;(ZE}Afymht#VXFsv-6ki!)N6nm_Ipb2_Q)m&sz!~(|
zA3my;Q#JH;IoJ!^2rsno-CW=bF3ZwtHX6)7bXZW(+tVh<;?@v<|HR4K<AY7&tLetY
zE$!yOi$Szm-X%-rcbVPgJPq;%pb;fbKSy6O$wKc@2vb1z^Uk{D2|;REAs-`UkrJna
zvqDEF|41=h94eva$kfi@&6{hHz-M_*5#s8q2@PGDx?dd7(a{;_l>eX%Wih(-gR4U&
zlXwG|zy3OKL;o0_4~m1$L`EO&+V5B6AjQcwj?57Z9nr|ZqyTF9s0%Sw?*fp*C(K~b
zIw-VcvREcb<~v))Ljyb>#z;5;(!ejM3!<m@i5H{CBDmuRBX%m1$$zjT5)e2@#X8mn
z!;R<YTV1rh{itN95N2$CIPlT%4i>ti%j`kb*i$k5bI!l)4L|!SyR?o!Sw3~HhYF@S
zMi<e@XWsWF<}<qBf8znhH6A+)3*xrEBUd!cahMt~nKiUWbcbf&Waz5F)w6%EAh<le
zV&WJ$-uLPL+e;yH?l5=!?IBT^792HE|Bxpi*%|MIea-lh$~wjWy(yea`^l@JwRY1B
zh<6C-c~t#?J%DlZ=pS5whiCYi$CPj^B$HSTx}Gj94i@EU)~+^hH}lWF=Xv_26$J^5
zb0;xfECO{gPoazPJ4d2a%Zx0!DJX=1wH2~VGR^p})}EgqiAY-FtGB9pUt+$-A|^H7
zn4Q?GqGOGrR*F&xs9PNz`8uf!+`RWdLggYVFpkWdc=^DyAv3XEM<|(XD80-07@X{I
zTl6r@^zIqP8?sVv7wBNh*Ozi_mW<c<eoYh&Y6{odND9#IZRj<Rwe`I0a~Q#^{LuTV
zQRg7klX2;kdg#lREATE5Za+lGo15`_gBkWd?f14o$XYn#MswK4t~l>_#e=oH3uaB>
zYmvN!e5L~6FzfWYBe#}><1p}$f~$7#F)eCxspd5`Lfz?GIx8IXXwYusBeyJ#DxI<A
zl6D}g!H|-6vu*P}@F*EHx}NK;?8dA;L?~?P!r;ex{Cp0^V2a{V0Q4GjuxdgJ=E#|Y
zVrVb*sR%!$JO9M<U`+_~??#nm_VnSwl5;)Vu!F{e3Cyt4Zn3nu0@hnG_~7r@k^lZ_
zZXRI_1HN5JEjM^$q#MHbJ!iKSY=JLx!yPz*{QJ1u(6p}w!^5IUPegdU4(m#i5e80!
zo=6ui-|gslIa4sl-@m+!9>IvH0~$V6rRNo&>m-{VVBBo}Y?%_@<*t)}i+dC4Ff#g=
zGYx<7H&gQ#hpgt?ijT^53oNo_>$Fxp)U)BGH`Kg-p*i{-tP9n|&L6~%ME7asP#=qx
zqFi%^6!R;9z^Tb^lAg%-gSVU)sh9_25N^k*+SSq+_sz4~8ZRoX<?+C9kJv|TD95wT
zwYPxIdCb~r<YiS-+d~Z+UF;i<<m!&Kn0<2g!1d*A=)NNp;S}t0zT~6)70<#MW(WEi
zUnFAM>%x8s=qRM@CJxGEzK1bUX+$fFnCGHFcdGRoLhZn%lNJ{M>N9Yo%tkx(q^hr@
z#N&;W<um8+mC^Ph(AHfaaiIz<i}TIxFW4Q$V=g|gpaOUwz9uaE_v%o&GyGj!9kk}{
zztO<_yQy~%ItAnu_7j;}^<>C^ihQ-9R+k6)0u~9GV(@n)i|9(lHWDzT=2o8Z@MfP4
z)|pvABOk+P_hGCU4%YjYXvYNE)X?tIhgxp=u*)jxu3uq3RKmV&IutdR1tEjvoSpD*
zDMf5WBpVUvfJ@wc9mSy4XJH#-Id_hjw6FpXVk@echu$m;ZC6&`z-47kk_$S2_pVC+
zEUi*h=N#?0rx!t^lPow|Tw2)%!${~c3Bs)jtEQn>iGJl!VC%Wle;t+n7ptPQdoy45
z9KF&A@L&BF65~@u5aup05rU>Xa2ZK4MgoqJw@3hZ$4AY1_QE@>^uiGHRt(ZHjbN-z
zmC*mOx5c)%bj-+Hc?yh7y_|)L3DqZIK;B&7vhrKOA=@^rJ%gNVX~fcWMw{w5t6{kt
zbS4FGZw;7V=Mn(QD@R#2?%$*TeJK36n4le%vHplFe&%5J@s`(VW?(u~HfIWs7`w`1
zHuZQzNPBTg=&eV7SHF@fkya&eV1t3fPCvC9#$q-9G;dRHS?u-sYxkYIfqL*gyA;}7
z+Mt2u#e#qQYcFCx6&S~)COgp--oHOtrHQ@{l`L00LY31r-^SVAXpp{m0ZC}IQp|t5
zMy7YcOyrvcI_Qr5yb&BWHP|zQ@o5(oZBYn^CMqhbtx!uC=3O3$o`sK2??_cuMSLR~
z2KQKo#83rZl5`4*pwIP<f@Zz;&jIf-uZSE>Uyy6jNKq(|EVP`N@8C7O7my?qrxsHs
znWMn!<APr8P3Q}5ohqsu#bKy;I1v=5^74#inGsKIFr~jDa!(lS#?OWD8iqCpDwqzt
z{Ncxk9PE9`7^Z*3W<)mC=+sJgonP*4%uTK2!Az2JE}!gke_#A)QTWbqZx;K%{mlRT
zxJ-MeP|bdzo`Brgw^G%Jg{+1Ce`07P@PdY^VFkH(QKCfgD1mpRu+bVFgve9RJ$1P)
z99RR$I(1Vop#u8BD1G=2^K<4$D?Ot(=12Ge{az-Dxh97(f}s{k=?trHPx_1$<*=ql
zerg5ohugL}-3<D_I4$f*B$y`Gv0j@LX^WO;ZVv;+x0)iU1AC64CTv)IyLWs`!$B}U
zQ!daUy@!^8zgsR*R%9q_ue3+!RLcY`egyq~3NZS6)3UDZ4i7&$2tFs*GDgU0AzoFs
z<~`q2I;g=lb<DiUU91bBW-|MBPQFAxu6ki;wpZ#5)-@_Xe>q)(WB`p-c(i8xZac{v
z?dT`tI<7qUzgJvQ0a(*|J?T-3F$d^!ExjI2!1XAwS_nngZ#i<dg@MAiOh>;N?RC0X
zLp+%i$aRKopwv-uJx}HA*i8AG^_lh}!(?Wr>7yy2cPKGwH|To%LLDaUdtvx%2!*Z1
zTwProa%=r=uN4v@;O8GZN^*#CUn}2LrCO=PuCu`%5HF{>h$eB3p<MRGeNo>VZZLO3
zVZK}1j`qWC;meU}^7{ot^6Af9K5|;tu?T+Me2qmgxpI2WGEC(jhjwNA;WS^L3dY~}
z<D1w?)e1a99zNUESm^w0ajl8uE3=qx`Es*?*m++qf_TO=6^3mFYu0_JRr1-ET<`s?
z5;nbdbMOw(u_rk`qya~Eae%S^2xc2h+Etkv`U477y&#4VzD~HDz-t+H1M<())b>5o
zFJHb~Uy2XsbyS#ajx_G1m56@DV%XQ=U`15)sf=~E-yFsw7dRahLX185j@E?saKOiW
zuq$ZK-7ZbsnJ)+W#M&|5z=(l2y6mq40k?5^`C1SP?#1$Y50@hIeH!*YpbU#3?w%>~
zUTfL&w{u3?{K=$iC1BK#VOOQqTcLE<m_{%Uo4sS(=WfxQG#<g=R9S>+5lj^Dk}Mjd
z>(=~fQR~D9UeE`T-0!@$QMSeTS~M+dol~&->(1)=>Y(AM^rrW@GS1}LCA)jk%~=)$
z5r<Cfk0D8RD`k%Mz_5MAO+huU)8Jl7>6)yK_JoN0#=qDf{&D2^7pw8lj{xM6%$25W
z4?J!OD9JTg{^YV+z0f~dwVaQRbL)Y}2ko%w^KvFEv(PD#={(H41HJrO^^+n9u9LOj
zcwLjbz;#RG^OG(n_$r-A(z%;aq-aCeAJ2)rqmoGqJ*bw>ca34T)6kjnCIVeHx*hee
zcC7^T-c0Hpx-&yDZ>r7XH!O;v^{6ILL>1v>$)wqB;Ag6LQq7rb!Z@gRgp?5dv+m7y
zl@xuTRUMkMPPCX|nv5zvBZTytbr=t4_`i!}_%fF(jU3u&qy{^E`NF`#n=7bKsSsKe
zAtpZYkJ4Av(=S*YNnu2!li6JH1(RguqFh`m=^DL3=x3M!cbgTsG1D%{d$_GpU^3z=
z#pB4{fl}sLW0-`-iA=i<{doEJ*=D5<I}PP$vE-MfVS4rz`8=a=kT|U}w9HVie3I~r
zH#qw5l|=pu9Cr^BH)vK4Hn>3aeNtgv0lc}wWN4L&5<nHQr;dy@Iny*5c8%&6{c^hB
z)@*p^nYi&C?MqoL4bcLSS>1L^kWTaq@sd4jEcGv!(g}SV2la`En9C|<BQw7A8?$}~
zMLhp=$CY*Hh5P`c1oH3B)bs5+kOM_b?Z)ek=R#?Z*74_|TRuHEoZU3K-D%ye4a7s;
zOKoNpEY6E~;j_lttc<FauH%$7(Uc%yb~Lgay5z$bRcClu!liGdM3+f;o4(yFm*~#G
z#K+CHn2|J45}0X=i<5|X*kyFnjISvpgKz6kRzjJjF*mtTHe)(y!_G;X_C)pP8u~*f
zwa_cMg_q5s>j?}ux#m;U!SEV}Llz8<(TIO~q5J8j9oJ(JR(OS%@+k_PbMu=DH*Na{
z+?28-x|W-#Psx-k=DWWBgX1x12RzBI0IM=kC<T*(6IIJfL!Rn(Cdr6)-}A16iA)~T
zS+~V-@OIX?#_dc>a@&W|v1HS)U|F;b2Z5`R_Z)Uu6UobP#kb3II<Vt_Iopb5>(&pQ
z+qvDYtu#=Hmvv@i{=@ho%Mb(6^~!k4?2{Uf%tL=~`~R2PZimIpZnYnIHXRPx`h2JG
z>kGsqxz6@A_u947YVFOZc5m&&EW*cGWNE?oAJH;vHwIo#D>E{j1I%Tghsrdo#E?>b
zc`d?u1TE4#IY6CL>B~_1-quoWc4E6`+p86AQ{WBntc+8pWl79=R&e&@X{~jq3=*-g
zr;hLJkro4Bo|x^F%$bcT|HEE>^~>3|cx(DB-Q5QHRlEAY$t4+TxyN~Q;f=!@L)XZ|
zi!4@p{h;uenBacm6eGe2Ij?@UCrat;w;2*Pk!UMiEP?6H<e+vE<U&Kjv&7b9G&Nhd
zRX`>E;K+UMgxhj%_nUnf{S|%f1h#DJSyud(Po(mj(aeuv%59_J_ZKDJ7lx2Yt-&Mb
zhjy#%{sj&fo$>|e^`&k%+S~D&>C;Ov#+{k@42K6~T*4w=f47|PX+8hh(_=0iVmXUR
z;_%Am>zZ?kj&=t<F@hKK?%2*@&ix&Dlcb~VLz5V<V_|zeD~vzLK;bk+@)@J(=bNLs
zH%iqjJ;)OJbD;C-9?Z?0W)6mr37WcBsIk{D!AtD!@xv^hB>m1Ah)gDmX4ZNmV=+oz
z{q#v{41FY-aNv_-FXfi<Ggw9~qxDOk@hfNlEbzJNYl7yeC$o1=B~hiMP&##2_Y$38
z>su;lSeaV0^;$4-TXw}`VXr;(%d~oYM0{6u(h^I##qu=GwnJYcthg`sGP%;1el-^M
z5g_-Q!O$dz<U;Ru&zhz8j#H&7{T#WbSaQo7z5b%*nio&5T5?6m+wOINGQ{84aTz*p
z(1t&b-cLPr+^ef_^J%m1N4g4>Bxe`GgBcBz-r;ksN(@>pXjP2YcFm?&;IWXFnYjgt
zl)#9EI*<Y%RJuUSd8;#-r|_ELMY)!sMK0^<XMt=G*zTfjS@&DDM!Q`ai1(2{oK0@j
zY}#8=v@CX`?)l@A(w+ui3o!G?N4}o*yHUxP#VTl>@4BhDm!`GWWf*-Ccm9F#Yi_x1
zdGrJO&v^%DFFY>Y-_iQAZ_5O2C{i-bVgXc5Y&(qw_E}yIxmKx(%!XA@^m>y5b`<l7
zmaQ|Vpp`PVlfXFNwmFnT>fw0;{lNaOc=IRGo4KXLt>%Xeucz2hg{J65W_X#P`8=Vy
zf5PP{l8y`%<EObkgv4kz>SC|Dz8G-2H%e4M&)GE>_`>5IHyvllLHPseB{2AWLlAB6
z+3WN(6ytRP!jR}ry>^q^RFB9ok2gOf2<8rnc;MON2F6VQ&U_EUmpsUHxID;|<DrcR
z2?08I!yE77q*MOgrM^!;eFMr<di;yvMyT<zt=Fd|;;*=`E8PEjj_`Jh30lce>lGi1
zGu-xxa%mAC=v8?iqpaceOdM?=rA1;~p`+nse*b!|SJfl)B8}M7VSKy4MRfcSwU8^_
zO~ZjOL|sicA+HGo#T+~PiemSCE#tj>**1eXI7szStkaHY?-2&CaX&4d@PVpIID?w2
z6wx3r@PH?G-p7}pfv(|$LP2XkTE#oH0I_UOJ|gGJ2!g4Sb;$5)XE7=sq^dlcSPl*^
zJYuKc`Rx8oCZH?dYtGodd+xhoIgWc)?Ex@Pi0fcz_JEVt&RMitR~KoObU56Z65Uvx
zY^3Jom41mo|9~9Taz!F%x(72S%O|;IqA>N)*=5d5`AYu?2I39q%l6w6#Wvrc78}7(
z=xw)6kk9%ojZ*53OgnFhT<|iq8<$X@nsp*<M&FuzP2a$O6v=l013W~#g$frw-F=zz
z7VG9J*Z6d-H*4oxFQrJunKhb{#Wmd3XK<Q_Lni8j!gQW^M=xPb-w)p9LSUUiL2eP`
z{rzBgebzf2StsYt9{93<^QrDg7S(qYGsP=Sso=&Dm2``K$Iqq|{GEf=7|BF+G=m+T
zxh~;evx$^uAQMghG3-!a9%5(ra<pfKcpS!z<mI*#)aU3+2Sql0WUPl6)-LN{X1=#!
z6_N~@*27M<z&@Ai?@HOpvv}U!L}L#*{<Vs-7>A9{%eJX{Qfm@_oMsU!S6RPn(K;2G
zbvgBL3qNt(4Ckq_zQyz5rUC9FlS+)*$g&rS#DgOk{$!%>(Z{MnG_Z&nCGFPdXF8x`
zmO}1x_Jq}R(amT!wavxen^?1*td^kVL0T`HViGE^7__ypmg|tN>zl}|v$(gapQSyy
z^rIEM><INV(a$0C|6}j1!?Mh`Hc+KhKtUy>QA89FRHRcB8392;x}>|i5eY#;r9@Ii
z8bm<4C8WDU8tHoJIO|bnM)&#l-rvmpbIx^r|LhCc&hx&{FIL>^UiX@mPSB*}bdpb&
z-I}_T&#Qck>Y7ZFe0kADgMiZmYTJ0{)Ca9B=Jfi4ZM8x06uLCfT3;_H9+xxIm_!GF
z$OplqEiP!pkwjyC2Cpny9Z0pf<|afX#j#%sa1N$(&;j(j%JU{kzV(txl7jw?#on3D
zl&HsKeV>dOFmd>{U0J%1Vso8K2W1xoZ(Uv5hmiZD#e@hQEyd>h6P?=!DvE%}8Y=AA
zCcbd7an7tkX~%<ZD1vG?eA+%BD{$TMc-=#J1RqE3#HpW9dmx1RK*Lv4nZx#)e*J?C
z{gv@AntZdoRnTeAeUguo)8bwJWb3Fy@f+rI-%#T4|28@l6DL`d3uSm<og&xsEV(=B
zKnL&8t)T0Dl1xX%V-VVotcVnaTW^_wRTN(uK7ZurBPD@W0um0a&CsP38I7)g<P+8-
z!&YKSRF$wW)Zlzxk@Q`EUiCc(F0e{!XKi)^INb0JV7GTpk#nf0b@wWuI3)nNZe&S>
zJhu*fOw=?5bLWiwxs$s#1kSyQjvEVI=kU5U!x$CX8dSx<x6%42p{)~7vtAZJN53G&
z<H=A2DydSj0!LZQJ%%#c!<1+&`I&BPoX(NpdS7|kB6j06XgiK}bovo9*Fi&as`gB4
zk~H0Hi7Le64O@;<3~6fvmd*E4O6k(tzGCh4;C7pnKs_oLN@QFV%=p!^J?KPp<=A~K
z;AO0$_AoUc6JA&`#q9^g<_-pU=MM+A_t9sGm{sS99wb<=k&0zJ2iTbor1a9Ir-QIY
zIEVCo8Ww|QQPK|{1ldPVgv(0~cZTyieroTz4HnCAGw@SBARJwr2M|KmLEOjK1^*Lq
z-A&O>hw!;68GO*sb(zx$=XccRX#PZpEnU5QzgzQR+f!rxHrF|;=5&>hW+P}R^Snb2
zqF#aI6CGjjy|blq=tCw7OJBPC5iwkH-d=y{jYs7>BqqPQD3R)RB+U@4N^_c0PVmXu
z?$?_7XqxSEY9S&aDYeBr8(PCd#W$S$Zl+Kig4{|muA3vr?DOZ|zCOnF!RB*ftIk)G
z5#5*&0NQl6Qb|~}J}*7$Vndoe4LS{fd-3kxL{ID6mF2p?23!M0E~^>FvFbo}SH!XQ
z$uJ&B*m<s}=%n?n7{v*$47Sp&Y$e1*T-3fA@v+FVS#>qH1mhLIgo&XJI?ALaHZGW6
zy01a(gYm4aLcT^7|6Mu>k@sSOXF@Ze38a~z)-<i%vNh41CMyFV(iao;p`4B3h{^Py
zJAYz3U#C&AE%`p#iMpU$;?Z2RWbCP7%xosveMQDoOqOFHeeSl~jOH&$T@FZGkXb1j
z;BY&TbZf&kCwg}3jNWib@fNvi-eW$u+-63ZB0KY0q4R_5pdER`bcn~WG{>+z)R&MU
zqB$L%0ERl~>zuS8fR^wun>iNJ{I1py^v;}LB<JS4=B;cl3Y*^_@0ut**e{$mA_|bo
zHBo83b>^22`QJFc$C3~7K#_rjF)Hq%+InUflF{ssUEaPCsCkLAyS#_y?z12yPdCnB
zrk@`!9aenr@!opLN-G0#zb)mq0SaE(5~S&0?Y8cbeRSL~X?3?yv|>}NslR_>itM(;
zPq8LYya2wsNnQvDplkwa%fE{gs*LS^+=_89gyaSI^s{e_U8~=A6G1O)&f~M>-2Hjx
zZ(lv_kmRzOrUrEd_K_2$7z>vRioIw#beKCQ6oq4MfnJq_EU$3h<5^beI6==lY76EB
z#=|fpO-FD!8}N>M^fH^ef}xwvUf(&z`1}}ar4yueW0#}RjycUI&GvYL<rIbGk75g)
z+smsR5bp4@!;zCObt#_f%c(cW@}l@wpR&FJNpBr=&ZY{Ty(D&RV`I&85RjEt#f2*z
zBTxdcz-GmMVuoq_0gG|kuaZl)N)=fg2htC*n%)eBVzQI7wq6bp@3@sBVD@z07NmvT
z6oMX8H{F^fc{-6K*xqaGGDzUQgyg!<=~=^K3p50#*`Bmg3($SIjy1C{*HgU+ksL@J
z(U<P7_&ro{Eu|>OEqLJCj_U1zb0J2tgCc8A-Q9aHN%gB&jzqljDo$-0zkHGWcFADB
zVLt+cE*A4Q&%2v|+J-}=Lidgo<kM^JmfkkT+BNI*BPQwnjS;;4BKjS5+d;WT-=xGx
zP8RG|5>nl3R1EA}1wm{Pvtd3&*I;C!)VW6d#(I=(>K=0A*mUM2SldcelroHza*e|-
zd^(2W(o|ZNdtC=HMdjf7U{d=#>(^}J*2*4i75(nO&FE6e){Db%yqCwM@G+QCEnliF
zLBiBVBJXjxv>1?4eJ}w+)i}y4aEe4W@39Nr%{awMeDZimjaOha$P==3^~KPI+m)wo
zeh{D%oIOaHK7#Hnuy}d>)^WHcpzCjlmC@^m#izIA@s<Ots&`f_;^r5Jyf-7bq-C*H
z)}eAI@0($8_vFUh(Do(#8k^J|;d1}G7dS-l+@H|kzcRxtd~s^O&G7u5Fgo!X1bYWY
zk0;25bp7gIvuAAS!Tl%pyc<Y4@0H%)9L3!YgJ$e4SEZzX+!8Yir-buW4r%Y^U0}+=
znI>Y7=nH>Z+#mr=<rvznx(9FXo&@*nn*?KLtXqlMDB_*AR-`gid2?0ryDXnr&02?e
zv2gfeQNeAjF?Q?@bDC>@KF2&V?X~?lY5#3E2Nyc$kLGI=oILQEuET{O02e2|b;IWT
z$BnVMldBtiZ%iO#E=So)s3}|T6}R8ZyQy3&NzM|{zmXOvLK^v1@#Ya(4|NLK2Ni@B
zTqA(eURV=)gtV+spZR`pEvcO;wV2bp#iK9bw>`xJB-6mS>yxq475NXbN-2AL6cLa}
zDi>INnG?Q!dT!)yK$PKcfnF#MUmE3d>(O^Wkm0}_=A4;be5v`dHa3<TB$#3ps#sEf
zbNbfvOZfrc#|=*HX#qc+*W`N(+^=q$znSaJ>et88GA=B^=l{_i8CjEl)8K)c%|X<h
z<N7XU?yYwY9>uyFCU3IX`$g0Ga<p55;-pH%^s_c|h^}gN&2frbuT@pr(n*B+&vw7M
zmAU?cU5)P>895_BH#Q<)Z9BI1rzP!+g)9?dkAmNPI|R{!)?A{b$qqA=;5rOj1p0Co
zzgi9SX6bx^Zsi6jNy+)FR}O#N9(&jpFHM)#d&qytRUzlLxKkZSMyKXl+&v$ucTF%b
zy12o^xcdw#DLsuB-b)p3n><fOq;S5CwGjpl(D}v*>`y`&w*<C}_dc~3fRu_zzs)?<
zCw)cw*{LvZG(_?WN95{_d<q1Suez_dJhXPY(!^(d39ejVmP@2AN5|r7?AiO#4H}4r
zZ?(|(u=<&Ejhe^|QvUp1^yd|Y7h!rVMa!D*NqRE^=X_nLtWJ8y0AoS1UIqOWC7+WX
zrODhte)|>ezO%liBiIo3hC*28WpAYNNFw)>H-p}hP~M*Mu$M9r4(WrpVt$zPOWV=%
z9cmyC0GfQ7f*>L5sD7EUUDdFeCmFj*xO;nmREq4?Bm|Co#B`&Zd&HAr7qHMvE#=Z`
zRsyfRmcHTKBe|jFLpOY+03oye5ti5-1@VkETCrl;%+l<)n!1w>Te?PKAba}G>YMPG
z&Ri9$N}j@Y8J<-SZbG{&RYA5BqFG0B^fNHv8fH{6*H?u5+^LD1wr+&G%bX;gFp2a1
z2I3#Xv>FfvggGtL8&E)Il~qu_hue}(ak@A#vEKnl4n~C}BDIyU1x4!u+ePY@y^7zt
z08Eg#**e_oT2`7Xpn;mhn|P@5P=CFI-wW~Wlu&d9p)&d@Fsm1~xwQ`b?bmyC<NfPD
zd-wH1yo6w%ET5W(f&BoKETU+IEe2udpOdNIH58b|jhvw!Io}4A%=7B{Tdl^3hX_Z5
zcD}@AKEl42|9)Tgi`8!lyjT~W*v5k7U_=-(>gdOzJn<O5;%*y#j@z}pS%@gpiMq(%
zhRsxV0-g}0G{eHb2Nk=Ep-_q28sy9He|pCg!dKtzc-NJCmf}!toNOOjE8q9DoVxfh
zqT>ax<EaF7j}JDnB@RUgs-;Y?q8&t{9cHc|asm=HmNIR`_nKq4>2ghm*|I*x-+Nh|
zF`x7dw(#?NxW<`DRE0ICn3ZoSeX^dF?akJI*;xyp5aCULWPk_WPN2}g0&>us9hu>{
za+@<L83=cUFQ;DeUVEnF+Vn^_o6OI>T<&>S!6JLY?27v!1bh_<aU_oKgUQ<)9jWwI
z+JUtV6FSx)wEjKQ;0-_3)*j1Cu|_1@I?Eju(lxx3%y&!j#LrGr<9-=R;YCSmGII-u
zuPXX922p|XL2KsK^lr>_=B^@`aCE7mOgghP@$J!*+h{F-X=s6km$i<{d8lh@eH9L}
z-XPq|S8kq5s%$3>*}CPqkCLB5KA}wasN+{Rlbeq!o*W-cS^06gE?81Y?hrwk7ogek
zlx6qoHd*2r<uN=;BjaSvJ20z*FjwVt`qvC56cRn@x+k8JOO#FskV$+{{*4+w>&}{O
zEi1l6#_Za5Q_d5@^d&gcuLVq9>tPJmMeVv^9TqrFDgSz$MxmsAXCUC}VMIoK3Tc5k
zCN6c8wH3jIY4sG>AdILmDu*_lH0$&%7Oncw#v<jnx9)MZL*$;T1@b$xd$2)f&UrDQ
zDwx5NGSiUK=kiM>>LR&&?Gxao4S*09BV!Z_8Ou0{`4+O&r%k~HFtgUM7_16H5%s8`
zh=+k<Qkfb;Pv;QS9<ydS9bki+K&mig*qa3)4!O*ps{Eaak~AYu3e!K6Bu@yG^=DmF
zJFcutXFQOX8BG7M&RE)+iB+$K+Ax1ih@yM`^-cW?Ajkire;vG-6}mIY<%<_TEB8;M
zUMHCGpb<H7rgR`q9!;XmB~Vl;;V8NU&+?t{lPVC2ZQXBqQ!e0;Ax`J^(|+}n!G5LZ
zdJ}$|g2JgI?<3Oj<d;&I$Brpkvo`#8+g}-H1Y4E!JFW8x13rK>&$lSrVm&}o@AW>+
z_B?pOK4e#!mVumj%lAk%4TaiLh~}}c$Y~p%zUxn#f1mmb3&TF`uWbo$)R1Bf`{eOM
zV~FpE5ECxAFjDn}9X00)S8s~seDtXUND78sjGV6fMM<xL9K~`(T#ecy7$G$S(<-(3
zI!XExbg6#<HBVEDLP!OrfTk+Xhfe+rCW>~S8YnGXt4XI6ZGwSTCkmvnD4m*iVq2@S
zh_{<$>1L4gzv6c-$#DktKZH6HRI9qUNt&+CFNcUKI>GGGk5CXW%xscP!Aj5S!0O|C
z&-<qp2h&*S#@zg(Xnr2zr{MFqz2rNguuBKRA-4SutaswT4I&N#bln4<ox5I<oWb&O
zrXe-GDh$l2@lACn_&yfXE$0n8{g_KG1Br9B>uT3`at}s$84TSRhij0ls7)34wNIw|
zRW53x2}W;)8$d<j&ZLX7)*_7oSuy1Dz#_5$&60MiVqJElo@+79q2gt6rC$_3YJIr?
zQvq%ILjl_7M1bbwb_Aed<ypIb>KlikFvs(Km-WTr;raXr@=z(qoDo_#tYAs0#s0|q
zldFQ4g#H7}5|ZCHECVSOb|<h8G;MKFH=!mj?1;~gV6ST#?0iKR-UB(CTFCCw8Z~by
zm$UYqhk9&Vmaasuj3LDx^RHz`S077(qWjr}Fpub;XiN|?ULZ}!hgf2LmL|&cp{{05
z7|c=P^gIpLAhv&6-K04EV^|1-TpifMG@-+^Lh*uQ@mbltibLzwwG5i0tgWv!=e0qx
z?v2Mdc~$>2w-alILb*RDZCPj~e4;B|<#3_vKn>dDAsJvi(gL~Z@`W~OPN1GFOK~!l
z0qRd%MltS6=p`sx$taZpNeCq_lcKpGu;HsQ(s{^{UI0d>RF9g7!6msNAA`cAG7c=!
zdPfU-XE*GY)J;`1zAvMI+ljn=oo|amAlTpN+O6U@E1Cu-?KuKi{IZp>h@b}-3_u9C
zbt{U!^K{$HOze5=?Hy&9tzj5qDBlXw+O&v=?z4ggKvGk~S6J8d@NdV4e*LPR@V<9(
z49noPJ~22cQ}-TRIiI=37RUuBfZ5e`Vx}d|L+@)|ao+kOj0p%9^u&He|MJrPGbi&c
z3A$%lYF4ORHg5q1;4%<wZ}<U>QhE>-Yy0zA#}9{_iZN*)_we_VAcPp;(;#i@pMgGV
zbvG8cZ3-TBb1FIfR$aFYp|K=aHrJq2WFM8``l^{UHI^ln3+w&2k8njq;jlM4s9{~s
z<BMEgE9>X;6NI52Vs4M$PUB{BNvFQm>qoo>5F-2)tY*8ewh||;jfe%1b2cz$At{B2
zZs?_-jt{^}m`L?>>4Rad`)moSU<8JB#I%d0D%M=57E@c{1o0g`j>pA4Y6NgAo|5ys
z3@B0%5L^V(XpZWpIfc)A<F;Gn2$Q`34xo8}&d<Nx^Sr>T1DgA()LbVM+6_NI;HWs?
z)vE<wkwVht)6Z7T{m9uR@V2=+g{tk-_3QvRWJg!(EulcTMq~c2Zg1D@a|lhswMheF
z&z}g8$}@YUKU9>Da4rzkYx_mQ9wt@VlwH8PtmK)w<bXGE=J#K-<*e`Zo0fh7?SIWQ
zJi|~EQ)jIo=V=ZHRI~2F#a&!;d{fF!Di8$twI!Z}EAvgKGF9^P?+Y5jGI11{-)xNS
z13doQpm2xg>^mYZtV&53@M7Zc*rH7u5xX%@F640uKu8_`;g%f-E+!2q+rIbZl|cb5
zM90Yc?KJN#XLDJPr)zu(+eul);97TvofRR*G#902gAj0s8<}PC3IXLzjUh3+Q}gZH
zVm+XyLLT|^K&$>>3d8`wGSWJ^ZoTk2!YSyG?My10-tD%%)0tx^mldEZYd*^@ZuryH
z6rgrNTsVIdP4Vxk>NVh5|CXnA(iQ771*gRw*;M%vFKs*yGm4(~A*l1-P2^U<&CfNS
zXUX5bA#ff7buPyz@74OzDYGR>-z@>*u-2c9J+co8!4MhCvkSyeez7}8kaOd7zJ+AT
zYLdLWjB`*{w>qo2$zV9fxtgOJ<o<XERn-VAiUZ7xRi8GX#KBPZdBFsb-(YkzHyu_K
zCmRx;xJ4GL6ey$9{7{Yk{d%}!?AnJCsAiyOUxU=t>oDGVp_ta`>)(^y7LJ)2%gE<6
z!UX`De4ERP?qlGHe)KJ~<{8PD4Q^EY4x9{&nT{(7dtK=&O7ya+=Ul}v@FEWWOpx2Y
ztuxqA%EcOev%my%99DylAmCNVi<CT5X{mdjPeuG{$LG;tRy+Qa<cBGWn&dD`1E;sd
zxv;&r+tDAwf+u=QLB-Rb90H}$FK6d@u}|Mf8{>Lkk%?D9c&4RP%Zd;<6L*kJ&PIQ}
zNAZzg&cf{pibu2?(3-VvvC74{vmE*qCly+T<3LfKlf;lC+UtlXYNv)J<?@!u$Fsi#
z{bfk0-0AmDVd}$XMbo^fRa=3`gkv=8W|;SVqOWUuwWr39unHV&Kuxz+$}DTU32MQo
zae(gn_4B8rvF`WuC$kWR06S^Kg>#zoC;xOph8l>2Fa#w9M$Gi;<{w&@`+Ja+@XV)z
zzK{;}D@`mp;V2)~#V0@jVZm?)ky8t(0GsW^d$gmr#gFO!N~G97zPZDAr6}6)_~WLP
zdD0JG3+{tB7p+7zk4a(M?3ux#ZVgv2YXCL2Kv=$rud<EUQZd)W_;KZr3ZS{PfQL9S
z3>idi+;x;Iu+rCWiFHT1+-FjmHHj}ceuvsoJ*2qrHrA9yq1+u0oK&66fZ>)`<#-fa
z1Pf0)%*nRfQig^tgTd-V?0FNC&KBH;KB~!5hHO%x6iZNl`hEl7b<1rlk;%41rKCbp
zrdwaW88Ehq3QwGo=qHemh*Wx=Oq+VdljU2y$SC|v!tn%=!KvU`T!Y6!b;2Ek27Z6c
z*=a)2d29s0%bd_K`iCN<>?Y)weE53K@w*hYJM5I*R56DpB81$2Li9rzM8aU8?`w@!
z`&&RDWf;;#5X@t5@tq9><I=lUz$*bU{%t#-vYLej?<d(Vg+THXU58Gt5GAaevI#>H
zCLoBj#a3u3N8^&0pnw+$Gb=r}M*e3u<Bq}jL8p-vQ9V{egXKCKb@id&so!?MxDD#?
zIYXH-9tNb{Fd5)599}mJ1p>({LxQVZIDx8RdS#K$>Jh40!B>@JZw8+S%~i_&bI)g^
zfZ$vYwOqaR1Qwi=lsrB9!w$phpcDAsIX$cI+p~{^^fEy=wCjGG=}6kMK&Xy?WbVf?
zO592z<U>sZ`Dv1~4dRhO)t(M@^e9dq00|x~+|_08oDy1h!zyNK{mK<JA=9njstw~G
zZTgyF(3>{ofs+pR)kt%QYm9~g@w3MHxY|W`81+TFVd3Z{mH}tK5hpS|9(a$FxinC#
zHJNoHDO4Z6d|_kEYR6|t*oxc{hIJ#MX~MeUgC|4$*<nB^s(pX|^?(jq_XAIebzcvw
zO2i4Wn-1M9O$pfX3UHqBOWzI@FB-WFDv8%w0*)E9F4L`#>Zg7=$g-t+VDoTd*lqaY
z%e&ZKX9Q2uQd3_L3TC1%UQO@`rapf8vYsH}JM81XNjnf9FZMp;D}`}KAFU1Jod>?4
zgdo?jgG7nrt5;(0o5!2RdkwX<Ef)C-d8Wpr^I2>UY~lk3^N!<BN20-c+bwg)N+nV7
zJ=n8maMcZV@9(S!beNPb(oAqGZf1ll{@5ytA01yr8zyi+b83D_f3+BIVvqT@)Av#B
zno2Nw+0P}}_0)&;-4!>8`Uy)N>vl}$9jz%#2Q2CdOBqsBcAJtd_hYUx{Fr9rhD^nz
zmxi;g9Zmf9a0a#FJ@}pBmce_kGC&?_q?1=~<A8j=?HUA27d!!GA>P7CP{z>m?)2pm
z!umdx;`_LR*xT6SZ=!au$$L?2nJF`^=!<{BOVH+q^?YjTG)8vc;LX*c#c{`Ckh#9Y
z<TEo|>YDj>u;DRf#7+5-pC;jj&tr%z+7<wCfKiMBGvA5@2>fLiyw1oCk=}a?b`dqY
zUp5r)e=BVDkoi98lwOdU-KX|Ltn%kq8?SfmWtBoEcX`rj`Gp&rHOHH0NLg~*bU9WQ
zckQ)R+_A0mgIy@)w>fp;fb{!H6e8dJ8V-h{1y$Y1ByXY>GyNXl9LUlJ0z)fAm&K^(
z0~fl#2;s_}!aft@;`QFUnv1M1x~w=%=Tr_SKYxFM5=<BiPZQ7m^8JtQy)f3hV$Qay
zF&tT7WQ@Z1mHy8^v=F#M%v}wYUh>z*pA;Z!epekw@&uXEEZlV^1ZLZ0wz{9VPvTwh
z%M)8Z!FZXzF1gtse=TDq!cV{EC*ij6)0+O*&nINO1_PS%rr-FD!U%BF>vhP8rBHc|
zr{}Jz3m{X{7GN;a=29hIJ&U|{$U_at{4&0hko-FLyg>|vQ4BqPyz+Dhd@U~2H&)L7
z^#TaE3HV_k^T3cfYX%sX8&b<Try^M(Dx-uv%|tTh)Grg@+!bi3l^=EG&4&E=L_Io~
zoH37)M)p@e@EBn@sGSeMfUxBZ*FD4cEb=gQMiWNI`@#zsdNj3t_+=T97d+g`zxRSE
zCyHQN*K=27hVVIPX@WT#)KDis2bgO>e5hh_=XNXpFGr?<6y7SUS|#Jh_6l$#v+U^f
z2LE?w>VG_U?$~fd9+cD7wEQ@b?xDzpmHarO|9n3G$7lWiT?K?;<VH(tbL{frKr|FK
z@EhF!!M8jL=SLa+@U0Wz8@D7$WPJHsqnHj~^DeS<1TRGnpD9cT&y;MAH2+&8+zy}F
zbrv4t5UO}+JLw;Q?Zk{GxPAEh-&)amMi?*>Rc<Z(<D_M003@`I>N=b={2#aB-<g}l
zJ8+6Z>|~!E&Oz2=h2PWeCY}EacjaH7-SP+~!&vo5>wZ04P)%f1+TD8;|KyqZ$TJsK
z4Q;+ZQ~eX1s%!mfXh;6mLLPoEIEbeY4`LJy+7nFRE53BNwtwq<lG4KdNQ%)Po<)j>
z@JwM|%j*083nTyUc25yJhTyD%!QuWS3c&sl+DYO5t+~~QACirXDzd@qrucD5TS^c|
z(XC|qV_E)nJOAA``(@>0&%pl3j4E8e^kb7_J7LeWN#nhK`B#5!9R$3Qi}*+)%Kh*n
z`k#j1&(T`{lV?sL1|z>YqxbtJx%aAqLpE|fapb>x!vC;1=atKa4p+&_0QM(pdo6<e
zcLVr0mQybn_UG>Pq&q*>%Sr~GNr7r0VgD!3<V7yFZW8U`{-7cI_4VHMi~r<OHX#Rx
zMA`Q6KJ9>M*Hbes{wKCrgaBO7Q{AfYADiqhi`Y?vVA6kLHz{P{4teuhV;xSVx_K9V
z*9`9X`?H>oqD8^rZow(OQk@?LL&p)8H*1gf$X`3+zaEY|-pA!OyR#1V>+%m@w@*%e
z#FN-$_*8#l?ki7*wVB?x{tg|C|KJ=@KhQ@5#dKfJ?REd;<mBnT9K&Vc<1$snh+I*D
zBT<)h?G$n(!lU2<H;C)@EB_Mb{I%B;m?E0SAHmiHKr5xmnX~~J!3EFOV{p$X*`{A<
zhT^s_KQi=i8RA>^FvX8)1szQP=;a=v9oTP$gugW%PE1brg%MapuAm1lwVM>&2Cbs;
zk=SEDE;<EbR%^I*?~47kH~MA66p=Gv=w}f4<FARA;S3O3bK!dZ@~{4ywQ4wn9Hb{I
z35R#e5s6Kh_4odkLpr=ebznyy<WE)C{(h(M;Z9-uMEnz*N1+VwevIGU>&Il;;~mVP
z&qFBq4_5OyxZ{)m|8&R4L!L1H&IR~C*Zeon02qt^bIox6WB<=J|9{Ul1E-Vt=nv1-
zl7yrpGwp^JKTP!BGWM~O5IT`oy*qRGOiARK9W1&7|Kyn{B<7Be4?Q&V*hnblPFEH5
zS3FP-2B4utP^`PUKi<7X$A2stUoTw%_<e5-yVF~N{Xy!=p37VFQ;65HjC}W9OFgVZ
zm&J=D=#+oqMcnHMYN<V;1XdG#MH=IZ%;c3BtG9J!o=AKG4W*|GVt?{}*AR~wUfh)1
zdkCqCBN4o9-Tl7+sU@1Z<4T7^`A;kFv7ox_39URqFUD~y&p)@)z4tbP)R{*&zWDyf
z1_Vsg>6bPg{olWrfaeLV@CqQ&c+$)C*uNU|et8}TnscA+D*Y6A###c#GCeTWJ@<W=
z%8bB|KKfLOapb30{%;u=A@wz26@^0$0rS~s{No*0TL3q|pmpo#k6DG-e7b0=tKsl)
z_<&yLjlU8AG;p~Caty;jT}ZZa1!LPVk*UJPFoDiwu;AhL1OLMy2zjKt4)}6Ctccr(
zpA`UjT-;bB0}btedy_vGmn*Cc4uh{crl)}L*=cC1mwEWmI{OhBC^!G{k4_>X!_$8d
zGRP#lse5AcUia$Ma|ih^p^b$>G8HwUKR*G3UJb&Wi5ME1i$A`)A~NF@)9%z?c$4Ed
zZwq`7WN9IndX5HgWdNLNU-H+te!f9g5cAz<x5PL!2JUc=tzutlC;suK|Mdp}Z{lz^
zW5s7=?CF)wl^Dn0Ay@VSIuXF-SWkXB*5b(bKO1>R`f%%Ym>_KHy!97cwjRGbu57Iv
z?2GQ{T6IsD+x<36tcK^uRwFOa(1l!;*>=;F@83Fh700UD%=4Z!UCm2VUeXNLwY$$q
zxVfsIk*P%1+Hd1Nv)^ta^J~h{bFzKj`9}C*V3X_P#-KmH@=yEyKdwUJIrkH1FMS^W
z@{&P^2TL$E2LtBApN4y8ls1`t`_C6EV?2Z4-(RgkdLDUZcAx<0lGWM|?6pyt&swrq
z)yfH1?Y!hmB{q8yXs=mM%NB4otp5_5s*c|@=*aB2&HiK_{@a%dzlw>BB8HLlF;}Nd
z+OoXM$SoUA1N-DP?<K>~Ki-2v<SS5>0->B;4ZIk|XO1v~K64^e=`Qe4xjT6JG@%yT
zcUyt#$A3`9cy=0h1pB~lY-Dq=xaPCU;@~i2&B;kMx`4i~werT9Ij^mYJpSB>|87A}
zp3wRrh{bprgDXYg;lqb88NM(}yt(L)M{p$yU@;&=)~|y$3n|NVdx8Wm8Jk#{VA?9Z
za-4_iwAUfDbyGZ+#+yMb;>MLzrDJ6r^WQ8<*?X}JPO3eM;c&^4ehb?wt1m(G$BX~R
zAF>0=j!`+`GZ!rhw)V7%GE=}Bxz659B}8`ZC1Msvp)ubmVaV#Xde;xzefiG^(hI47
z_Bp*gm(|?G843Dtd{F!f6Cp7WdUiWcP$&}1<M8D7iNwD3VsN@?A~xqdZ(?5GZ<|Zs
zD2royj(E;Yp`qP&NY+?R^Uufru_k}~z?EDE`Rk}Z`;ZTaO=WFz+b)yv*qJfrbVyxS
zFLRTP>H>D!IT-94;EsN*8X7GlI&7HooL~~VFF)rbkmfj$I?AZ&_hY4_=8kY3uY>Lg
zn)(;ouvA;R3FV~-)T+xyD~w<k#JNh~$5fza-aOkDUq9z3f1agu#EWbc>gY^&R||*t
zm~4jZr?5$0J%UY-HAjPk7YN*DwsZ^6?z#<SAYSMp#Tu8*N-CQk71h<~m^k9wUby<!
z%g`Wq5gC6iuOA;0(P^W~utmu!ibbgP;elm6v6_?QGungkfMOiR4+6`ooKu5944q`-
zZXdHKBKh!>S572we;dfhwZf~Qq8-3F>Eooj1%T?~6!#zZ7)l}(FbTM!2T#*alr5l!
z&;I@Wrp65{Cpwe<F{Yz9#&1$2e=@p%Eb)&Y+ygEy!7->hElhqIzOGhOB_*4Y{2bI_
z(mv{q4%!a;Ls2Sanr>&nd1H`F2nD^PHTUSE2)fl=oug2>y*jTsrei%K$h%q+n;s&-
zin}k7-Aqz~M&bM?hQQ@&GSg>-a>|)a*N3gURm`C=qZ%sf{FSRI=>-Pl)*X_|jixSH
zZ>IWtkI^Z|WyL&NrD@5>w20enAX>5d{EB~fsWKBf@Q7}M7((ONle6N}*V=1i-C?*m
zyGg;f_Zm}uAQoC;hu23+>p@CsKmI%q)ulAX?7Ah&nD_PZb%TyX9aiUW@nO}_S)|Hm
zqf<E7)otfRJb9|Pvp-3d-*%dJJm~gl|M0#|R<-=_t$akL$0Thi9qUhE=B6-ssrC*)
z*&9WTe=KCI#|f)!#Oz+G3S{c%x?5r?@mj<*XUWUFu|)|nvuyLavh4e7hA&6w`b#f+
zWzNqyYm6<fM|9q%-*BA^iK*(Ry8qNf<wDcm#K0qTA74&Ztbd!`H(Wx4$>M6KBU>Ky
z!qoUtC}kNg2Mp;(S<6P+^yv%Pg652T14}c{No$J5;tf@!?AE)8NpYAxMS3$)zU9VL
zq$OL=du-&owQyow5|2Fh+N3}~^R{JD1EcZ?kdOj^6<$>Sbn3zvD1#Q2JJ4tQ14jDE
zyp#SY+B^*s{?vLdM8!jQC9nBc_hUru3YLwmW096kNz+N%c~u}8K?y=0&wv?LTrICe
zqdWqZA%J@!k0!l%y^r)fY2!&byD@)ujryy(sn?s{dogIWR8l(5otEI=v+|glOioGn
z1-qPH?r=W|39hDrPAGj!GVBjGCGh%$)^txpNkUUgrix8(eB<_l&q*A)X&>Fj@E`l+
zeisMX5Ok9*?a1W@d;e%PQTkJ0A2%yybw9m(>dSA_F?M$J!)Yqwu>s9Nm(1a=J$ju6
zGV=Xf;4X8{HB0Lv)gO(fXaBx-mgP|<Oyx{4o0=ugnN4lGHw2CB8gZUPzR)6mBORzd
z9FyUibp)WUV_=lk$kzD&izky|T8?a{(k5JjfkaPEkcaVu0g~0j2m2duh6kSV*b=IN
z{iJclizxJ@v}(Ea-15r{93644Z|`&hTiw6!S0={(W)1({{Up^HY&knP2Y!wZl6JwE
z1;*^n>9&@-9@xPE`mqm{r~HtKbaq_)dd{%SR*XL4Hx&UapVo@NcJF<l4#c9Wo!};^
z73UG{Fcl&yr=?qSaFDKR)du-S^??tdD&4GN9vurzaFzXNqkk{2Vsm*+6Fx5x>{Mpc
zr`KoGgBGn>2u46tI=NLxx{|O7<X<>;=Cb_QCL;{fIYxbGG~k;sqv7rE3?Ec4x@;6$
zEC~jze(E>zgP=^7I}oU|{-EKVt?2j@-rRD=9azdd;{1DSBozg#j$Mx`y$JbnWJ&<8
z_-b(IO}KIdgyHR{OE+q`XxQ{#t}effw|VB=)x-QL-{7^K>FBft6&_wOv#gTQJlnUd
zGo*y+4^HTopZgb6_fuRELT3ghy$Tf8lyQyxu6_!CWNyIcQjSUd`6*qre8-ol@@B5t
zR2_+n=x0O<(Nth6c;-UEEL)E()6Fj}-i#htCw)tSLD~wPAfz=2@7&iockq)PBR_SR
zpCn+SZR-8>NQ59zLu3cm$JbGMUP>-c5QVvue|wEYH&Sx!10q}4rRKV4AulnMwNmmn
zyA&xnvUk%QMN6Xz@|&pfC+p_&*N^{#hR3rcFbC}y6Jst*9#o%!IXeanC1y%P*d>Ii
zVwkaq(iIC+(0O&iZV61}<vtVfJi(#G0N(W;lF8m+GelPEvj{_)j0sKYF-40nw1(MR
zaMKAEH$>ykT6gN-ut`H-akle<Smlo;qrXLsPINbbTmd6l=SxuDu6?Y!CrNXFnWspe
zhX0}G(PMEBIFlYUHn8>>H5R==Wn}G#E6ZWKBZ`<nyOsGGjr!9{NZ7}?-K)NDt<j;n
zVN-x7UwrVTqZWV8F(v{(VR&8Pdbe>&H{E*QJJV%Uk)@4)vI&bzB4eQa^8A<OuIZ%K
zG{evA#L2#%Q)#|le6FE2#mnU#cA9JBn@$6AnJq;RGkcr{HPT&JUG?}(Mzcq^7`da@
z9y#$nQd~yO3pWv~6y8~zX{E(lLwT&r9!SLA`nSGN;Ho?LICj|R^wCzJxUz(T2pq{X
zi_`b?GpjH7F`mg+kI&Zz0hTK9uLw0~cZ}-52NE>ao(^zvr-do3Wh9x2qk}6*45-5W
z3@x7<hYC~LU!06_-N)*e{k~>g=?J^WPd%y)?Q@8nDrdCQ$`=hmYflDpa9!6mKKqPr
zy~5muaQ1rD!hpicBI0|$2;^sN0Lz*Xc;PO%<Q&(CRP9FO)!i{kJDcEJo&`-Vhs<lX
zPiaGas)&?QTe(F`p_67A`kjeubYkp{hD+M{sif3i0pp@*rH)~F$Z=69kdoJT5pxD7
z<hKnV1`*s}pY3J_^A#{UOTL4{T=W2g`f9=So6HtL9M(<FNaZJytIp8vgOh@gCG@f~
zN3gGErZ-=-)o;EYudDcO3Vd@nzV@<H^u_>Zu@)x~Nr(cWx7_>r>iw8)zS@|n5eVci
z6P3N!blEJ0f#Uu%N>D1(DK3M=LbKw@i8Q_-<#WLq-3lTZ480O1vJ<o7OmofMdu@gm
z&giwDRN?-Ox;*z=TJ2FLP@ADCZQ3x5f03~hFSM2KR^mX_NFmom8`$__@x&CEA`-92
z7}~3YrYm1kr5z5!7bRCEO2lQE@%VSmBJC$%2~C${kr_Q`7y~nGi`YP+oX{r><8}v&
z2m8#QfFaVO_42;&j#Vf)v69Wgq!Da;y!z`pUyk_T3S8!7ht{GDcd2s_ADWy?h_n!i
zO5mqr_7sb>YP(lOu9&q3{gZhcSN^<5$E_G4|D*t}+|?iUr{xZEY0RcpX*B)F_A{Pl
z8Rj{l)IFu<Jxm7q#T~aJSITouT`i41&Jmqt@496m7P<B?)uH8JhGM>Vr{Qc0G|wID
z+u-LuFP^uab&kcxz+bb__S>17`ECCmvx$hpBO&y>ON&p<+j3&6chov~m}1mS^M}mK
zKJ96`=f8L5Sm+?*3p|bIAN8##l(d5;eXo&+;!fYSKjWQ$&1@*-sENITiA=^H*A@^h
zPM}qqI?pOqU9@z6v@kvxDaHHl{B4R;JWFMFSuKGyRbxLDCD&2BJ(Ds9e!wNFW<u~)
z+nYXbN{2-Gfj8f6;uK-t_zTg|ys-d=OLj};$B0Lc#4kMo(a(=2lrJZcXyBooiZxcG
zvYlNMXFI>B#YBi)wLwZ+mtGkzI|SML_@H>Wfm@@c22a(qKdLj2ogdDJ{$vLG8rN4h
z^wBB)gDo-irx0OeR*XO(`#NrzcVi%{r@Syd$a9ym6|w_)M!~e=dIzTHy}?BnIY#O<
z6{H`4Fpfy!6z6!5JmQrrU-E5Fza@PL5*kq&?2E53S+x?SDb)%WmGKJ^Uf-VXmr_wb
z4N;2h&jlrCBhKHqkDgKNh`>>I1)5{ShoIaJRVJAsXp#3-_n)DivglIK6>`w}VuSci
z60c=Aee41J`<q-D?o|6r-k#d}x2)eXix8f`*RyrU<*9Y^>|(N~x?GIsxYjD{*In&I
zk*0cMjan_?Q=dT!S7GyprZ<I+yw;Ih^JC)N^VxY|wMK#d%@Ccu&$YQZ7FZ+Uy4^my
z3@(7i1sqfup6Nnf@-a#+O-QFKIa6ahHldBpcjr!MWIu)NfaDX}amNyf_KWR!4v++(
zcp!~1{aTiI1X=nA=m4zpz!M*S!iXNVGElU$P{^{$Zgo|gtXDR4*D<4bJ$W@~cmMrb
z$u=luIvaiJ)j7#J_-+b(BNJ}oJq`LlnLdfQa2G<%DW5(55!>m}Aa`MD)zI|}amh{R
zFt;vxYfOgSZ|>3>Js#d&(;AD~HvX2jdD%GyQ4{k{oZnL9i{s2ZW18U_tXk()@b9x+
zS?AQ<UO;1EC`=z@_cHA-t!{ry8H4ZbznM2Qw!J=0noEBD+T_A8t9bs%YTn0aGtcwr
zg*7N|35f-{Kb+nF`v;x0GXDMLz#jdCDBoM-qb15dy^$~cWC9`18Eq-uonX!c#vFUX
zE3UvK$|KJSEsia;rN2+>ditG`5vze=anw;ia~sL8Au?vHI5C4GSNrv`GC>3_u|_D-
zh0seOF==0-Vpw>nMZE}b>Kt2YbEdP+N~a)rKsE=a#V15oF{!#TpJ5|Z$wXm}hcD|R
zL|N7GVX9n}#q(QJF@aY<CA!i)ANa!KeB)Z2!<Pr1(0NuoWEpYm80dm)j6a5X!j$Pj
ze#(a4^fIQ`h$AN-_cEyzbWGC`+v?a!X^MdUS5XancR|U%MI?!qq}shoWjkf=aq8Pq
zHvPuA)nW-vW}ZA7_LQ?(4JDwVHo7^qQPQ30B6C4Nz3cchDt<nIV9YJwga*8K@F_<^
z5@_Iw)PI@p!?#G*DT;-!Eg-1B>~eeTl|r82{56lzXAJ01)AL4sH7;-Ug)Xv)ZulXz
z%gNWKlvJ)fdn`|D$SuXjd9R2L;fZc!WarI)>Ys@cr}bhOfV5HQnoKCw!Dfxn<?2hX
zjoMPpJiVH<ziq|rj?*o7NJ|hN6v5*7n!W2{+}bb99A?kaDee1-(h#c+n3>|_l-^<T
zR)NVSm{;-c%1ez*e%yc!I_DmP2>+9^wWp4u!r4{%ryHjwQPw>IDJQjvSl709q-mP>
zoSVg-WeGdWKGX0E+4(HN7QT<O>Nzz}G??=K0Bxsp<NarGI@fbAOSh9ZH=5b!sK_$f
zxC?By=og%f1S4&mrzR8z?54})o%WMQhsWr|{a8=!ZxipnPUjFdTHoW;P(Mgt?oOcl
z{Lqz*EJh++wnN48o2vOFpJi2oW<phsnwYCmZhQ6To_p=3CHq0{tvRBf$%_j<#~vNj
zc^+Z%?@c#GG7h=(TB|wuZeqN>ZxXKbMEN%p#w%Kt6AK^|s6lnB4M$$maS&VR+pbsJ
z|7hnDrebr2sE7VXu86r}iC?%-U}%4AQOP8q*5dTRb74vaQ`k`IXvp8`WmT*@(XJ3z
zOg=u4mf+3V+<?eQiBZech=j{Z&z^26r(2a9flg{$ya!ZvkVJC;#VzV}T1!vz%8|=8
z!G83je)6_GkGwUOXCa#;LGnRzm(7t0%ni;@Z53@s48(Pl3*+&aTlsnXmFJN_s<y?m
z$Q6>US)tM`JJdA~T>HycXBwth1kPUt+4nPnJS)E;sKP|jRClKbda^e|F#W{iMqKr}
z7dUrW9wf;y<&VFxz`x4}5mH7Kbh4|t@ZH9=88ELwD7UAL%v*(sLu#Tz47?d`!ridk
zf((IRI3~D`Z)Z-rLDwCV=yC;th43=2b?u9(SgWY<QcLe`s@<>0Cd{7EhAH1b{Ghy5
ztI!zSR9`aFqU-zXxuqffLrC5ZodL`TI|w9+Ko$co>#zMnh!wP+SJ2<SCQ{frg?h;y
ztW?z3bMR{Bw4SRwE@thHjA7W!d92>`8}*FRMU>7{+`~_GqwU|@xjuA=s+;<rUEi*)
z+OZul7haYx@fzp-iXa)^nZuATAU?sM!xVA>>6(y@GTizrn0%2IbyqSWcp(}~q%8UX
zUb+Sxq|zx>J2)bm;8m|yyTE=BZUk+M#CtM~^U`?`-0;y%&!6;#?4B27KKkE}V3UkW
ze{2-+#Z^hBaO!9?`~<}-77Wgu?E5u;ntJM%b+~nXL-Ke(Vxcldf@zo#=IT0ME<fx0
ztyIt0zbzQT9@pO!x31}uH+|<&n@>25KCcl>@pjD<?-&o7dMz89Z63R>Gq=_;H)bo_
z%<A<!7a*E}ZBI3W)H>Z>T{+Tfb<NEyCv2Y3b+=c!s{6pnUTSxD?s`?X$F{W}w=27v
z%&^(lv{q@2lrdrAX4}O!T1sxsebRZ^#f>BuqC|5eq4T7;KP8Ai1#l3vsIw8&3dQAr
zWfo;xDV&OSd?OtA-aABYSb>|kar{C=7kxelEwOJfQ5eM5#hIVah-S;K_8|o#ckHu?
zl(<2+Fh~S~;=yyJzVz#GUC)ZC$}=DH)wH;^_ZT?s`AZ)O?tFllq6(8(86R>>gN_Ev
z^TuA>!6IIC5b%H4U4)hvA*|!UM8&eD65y`QpO2s`+=!)~dQe;hdpJ=Q#2KypPVFJ9
zGs`ozgYE9B(OO1Ozhm~s4GCx-EMf1{d%LoCeX1uxBF1huE!W@)#kfYlvX4^ncvBZi
zZ4hnX7Z;XYYEkeBxW<<|ujZJ8h(Z|paf85lH}q3Jpk<w(7;&C}#7D;2U6<)d<Ko$s
zMaIrbLPZUg;V%u>d}snV-Xy-j39vkEiCSrP-OoB+Ui;$cvG@<qc5Rt{<6CRF?KgGf
z0S)oZjoA&<l*P&}z*IvMZk~M*TN~+1u68MzsxV$=@-)?YO)~W1V1K6uA`z9f<rKBO
z<juGE)DK>vsW~kRy~a&-$g3FjV^)1~V&d_x)R)*$Cy8L3^{nxoJOI~;)pQ?-mXrjG
zlwftclm?GrZY9V>oK0`(FxOT?+Rg!cq!h{}xf!(aE_c|4`-V}X%#CciN|WR;q-n!l
zz~A0fQ6CQX@#pT?3O9<(qO7~Flr)ujO10dvJ_uEPpdWJU36ey#$_&Y|L?&GoLG7q1
zWoO*~GoSP)tlju+%Q9=XS1}a&uJ2&EZ7dF#X5MdLLjm23EurtucT-(9cclfUM5jB9
ze(XU7#B|v|mW{CNwVTNzCUstkIGY;eua?<cmDz4<YiPw!5wCF@$`US`7P!27mETNB
zv1|fo@nUSflAw~DS$*rk?}T)Tuj)gU(N^gM?~6RU6`y++cLRMhX0hdJYnaJd+4%OI
z3{FR0bL!uh>`W8QcZO_ag8qj1pI`f5&brOnS|R`ZbJ+xnK{$AFO2#=l*JadrwgLUi
z=?kdOkG(|vHq^$d$@6{w5y|goyy*%A@l>A?Yx;yntEWtDe<f^%H~#tvcG61AZM-Uz
z!p^<kAlx%{<Ija7)^5!X*zYI}Z_APt+2jfGnS;@(g4ji+;|uj;T*f-b9$$uZ`BM(H
zp23~Ob)lrGly8Do8>><jEa(=C<fg(cmt7a`s1_obocZ>*1Y*3fg|Vq9TU9M;!B7Mn
zJkFk&LT*uezDj&r0l@O`9*7_OGE%%5kht`@a|aV=w^Wc+Q*MV^lYLTrD7~C3#Mhc7
zpkF_-IpdBAr#ixLu;suDbOdOIAg_I+h@~C;_@YS7L`4T{w{jNwW)PNT6Q}O-T1(vR
zdK_5@OZbU~xjUJ9_o2B!jz^hSId0u)rLW;bU>|MGCosW8cvD+VhVePJ<fgT?s~E?j
zoWol|_#M4|^kDuYpxdEpffmayLxvxf!F5z!*k>e(l*4|R<m|+>(ySiM*my!tZzfM<
z4`9R6KqzGuZ0eTe*1N?>9Uzc{5diJ}l`;3yL}0_+Ja{A&Zs5{*921RCs~~KGPL5hf
z*H8qFt3tIveSzpz)13MUwsA%BA2k8@OW07T+UH3nNLS?IaeaRS+HWrH4P-o3v8|nf
zZjy0*mfs_%Of-t~$|DkZk!LC?BcsPvi;W7(9Ik70&yH;;q(6%p>|Z(-7eSU9<Q%>4
zaaQxd`jio)p?6aEgS-kMTYo<!fNIc9VBM)!eeD!wpyK>uCmLm5v{`zu>ULlx&*jPK
zUe-(E+w`)$)2<T+hRpp8HcF+YPP&;3t!cB}=doET&j4eYi3a`8`tXBgw5{@)0qgYi
z7u-vc4l_xF{KwD_tI6MkdV%=k<4rA)AW3WC3x+zChWIhQmcAqwj-QhHQDphnrvcO!
zBul2^EG*<NOVRh{O<k2#eO?v@PF1v4&#Cs&qqiJKyh3)N0Ml;`6scLtkQ!!oDH?{<
zw1k^^Dif4~&Ow-m$I4e_r)@A}A^l&f;<t{@wT*67i+$Wi+bN=&;DBVd6N>B`VtB65
z7Fdt7oMnQds7#>>Uga5k#^URZgvIij{;a-L8TkS?>e>2@SlVNpArA6h2Aq!=g`DdP
zH>ru!_u=a?P!<AK?t9I>K!nMpQT+)cXDJki3N{NIfMy{xUeVo0YfEuZj_2}#r>ONV
zS;&;^-m+B*<l8fIJ4j;Tfyb9;mk$3}pD}(gm&|Z5+)}={33wDVu0xS7Th3ykxN&xn
zaQkLh3U5jsxqW5)0@VT7bm^fhB@T|AQz~%23$(rHlmU}rp)f$L%F4M3OHU>89Yr&y
zX`uxB*#o7B)rM>CPQ1vi@~dHarvnfuQ%RFsBt%4+n@CpV?=+v9qGi_#GqwB@ei-SH
z>Y&B5xscpi49C}$ZWJ#f-mqnq+D+tyTq0jH?wtb22{eZ6ONTI0u2v8(0DQ0swIk^u
zofs0g%rZ2b?8Yi8FspsfWT8ZV2x8pFKX+Z@j{nBZPQ1n#5AB}Bl^l?bkV8L&Vv@dR
z0?%#9$!qw{75!HqV9SPQb+2V_`0cxh7azsBdP25#9q(XaiNhxA+qd1Qq?-ikW&@ou
zHU0<Z`rlnqvxR8SqC9yteD;8iPdsnAowNoCElRTN0(-W1EI$`8tT8@5H$z`R81Xs%
z#!uk|>bT5saf(e25;HE8?3lRx@r{umT8_Je!>@{VTu>N7t$FkBKFVy@&NUe%HD7!7
zZ~-8z%?V~#1)k@Av~r62@j5xuJFx>4TnAcT2J0=&>%dSC(i<CoCnnHKP`j4o0@O@^
zo&xF-5P{TCIx-^h?&#(~5|gc8lge9A)jWfgG_#txQi`%Hv6#jme@^WVfAQ!};bMuS
ze~T9n6Y<cL#uwakiN*Nq?#C#7091H;y)kTdd|`-xyESk$&YRK~m#y~2Mh`TevKK@Z
z0VD|#`W|$;JH6j%!X?@S%ca(#gj9_X<hsNJgwYY`(lDdgMzRz+xoBE;(xJQ5j#xw;
z4<T393$WHS1Fn?p6Y+7uA#z>kc!Kn6(9|w(kQDEmyv6&QL)SwcqVxxQ5lx2YZ@<-%
zwJ^8BGS<q6kJT;UD7bF<(EEt{r?ZKl%{-k<!#2tow}y<MR+D^IT^6ER_5H18*J{w^
zc&Moi@>afZ&^}brrASo}it{Xg&YMY2@!c9XbZ}voF3z^es{p8GV-x-h)rAX-=NZ!T
zH2ipH4WTCZdc`2}_Zn5~b2JkC2>#iW6s>9bD+1Zi8?Cnuz<BOmVY~I+(_VALvFb4M
zY$Q@<P9K=?n(j_<-NI;MRF8`<$L=kkBTYB^>KXG{EoSHAy@Pv9L$1;C`cEk*G^6db
zr6O&{rj|z!E_L=cN%E88D`oJF1>pV<N6HDJwh27`?sPV@uVtf^jo3dOI1Jzr2jSpY
zx=(^ct)FkcUo*hZz0+0k);X$u`u3SsM1BaWQFWm!G*mfQO3^JGN6qqB6K<C@a+P8&
zvB#VDEn26b0wy!?asiTyaKrR`12Hz+xh6;1Q02(d3Ty@fHQRYEXBHpj4mHJ_u8>Jp
zfk$LV?;7!@qLfo}wqD+R<V_*_<Rt4SCkPnK0W1u&J(=M=(Co6F#j#X|UjIlacgVpI
zND!%+jos&@7sOo3jvgZjq%i+{`u=wB6n#pn)G2qQ-lbbWvk4|k^Obh!mF-%`O(f<W
zodp;dK?}aui|5B5HzTI5X{(z!J?PlY&VuvfP_rlEcGN8ec;eD{`Y3QRp2wYvmjbt`
zQd<h9pBS&3c!@j9%yVXS7tlZoC{!Pac`NeD(0d554O+E(y`QiL)Y=`9ou=VW>FuLc
zW3kM13I#yS)T=DoiD%Kn-nG_Z(7L+{Oq`0-9@GaoqQT~m&LVXHoli$xWW5;1XU)70
zoS@miii4#CO0!M+gw-O)<?JAs(VT9Ht8%(wv;;A3^oaAa&TC^L2oFpo>1Lt(wyDwn
zU>BqqgVEzZM!gj0N;>XnQ2%0V4z!PyY~l_p(+K^>AGkOzm)~2^0`F;6>h+H!I<5Yb
z@8+?>>TM+2eWaXUk3wNFX5alFXydevC;n`&oAZN5)S#C)_ssGM^B$jXrFK1s^-=?J
zt6i{sClAgk@q9wjJ8Ph{9oc%OH^LT3_NKy@Jxmu}Zn9GDZ#=Qvta`fKd?5DhOQ(xM
z_6F9TW=x~u{t=ZtL645_MX}%S%%Aij<S%{qzk(-bCIXDqGdO?R6sC(cF7Ok3r$P;+
zYWcp(JFYD8MMzdjxy^Jw2<jg-&N?<DfLyIaJ@>QX9OrM~$8mxV>z?WOn?|He!NEh^
z0Ql;dH5;mqA>;F1GGiH@TnNWP7oXn$#!fsiHQI@5QH%M(v=}A3wKQYQ2PY6R1V@7A
zG^ko<_L~&4_A~~azpVj1B20Y<d%<s;L^deyr2kb&g`KrH1VWKXDkaPQrXBWrC`Y>m
zD`zNj6QLBLB(?|TKpP?M{8}p=ZcH|U^arG7nrUPozbw*<c-cFX12Uc2#5H?oaY)Vd
z!pC~1!eC;yunNMJRe4dy%sZ{Sz-Osz?p`p}8Ntqfz}4UQ;uhsraa)53pKT*+H-Utj
zc@<%1HL2mvn^&99B8}7*wjD)N+26~yE<5wYczm1c*WcmhD?pKGhI}X$S1u2vmB)gm
z#gne5LnAD+teP{5NLm(9FeuNGZSmff7PS<-w6YUGVbc>=ByBpxkGP2UHiP5aK&$c_
zz?A=!?RYH(^X{{Ar@^NfMOD@cEVngl=%6?l;#~pRwYc=`un}4Bta|`{x>@Jhu&Q+1
z-R!0<)BF}M^D3t9yTj3H-e}5e8<wNG8w*rvgsDLkhv^R4zP9!2$aic;+2E&s_ox~e
zJ4PM+>qFVrXP(eOaM(n?C8WI7vi8*r$$1tN8mKziX&^52qEl`E#fkpRhIGGleEdzP
zauJ}fM4;Dm13{85Wna_m1Q~p8ab8r%=u>4aF0h(JIUAqPN)X@(iByeN5P|X+oJ@+l
zQ2!V*uc2rpH3d!+gk_oFA&6?^@URmHzXHH7%M+swtfFV&E(;Z$Lr>K;&uW!bAnwJ4
z?w}aDyNTj(^4<7F7rLC`EU^`2%+#3VPlTFRljz>u?wRphv-DnFbeiI}rc`nsab0-t
zJo!rZ`!QOAmiRE@I-S_hF~DEq+A%SL60*l^mdWucVg7ANPBTrNOHe!1DkQ0vRJ^tW
zMh7YE=}eozx#>h_B*k7$r1X96_g3`L`IC)}ka}cils!3dRs;0H(}wg#!QJs~jn`HQ
zDKHhUwaMF0gv^o;r$V6}j`4*>?VNgL%SJ*-l^xgS`#(0{fa4<Qg7>1F?EY2z0VFn?
zuB?7WBK?GUVvkl7>)J$4J7qk`e7Ax+$ojO%A*~L%*)xQjfPIaD>`ox=M5^lc+PAZy
z0pbUPpwFgW0*2(o;Z|80AZKQ2de+sCm08X7{nVorPxfaFHYH5kYrEUt6Sk#x!l{Mh
zSgmhoX4S;@532-hvrc?GYb8GzdPcNV9guCD%@Fe~ZX%TydlX$VsL_#${x(@Dj4R<L
z)Q6|rvkbTL)go8Tc{V2BjSjOP*r+#jF3wJ^WL}Xj_02iu!hcC@D>>0}uN+;o_VL4s
zF_^r$5~6AJ?+#bl+yyhhREVhP>t9e^LxS@<?(6K`)V4+{K>xTvEM@Yc9LpR6fA-v@
z(L7-Ia$3|hw;daW`=8na9q>vW?>!J$AXfAE_~U)sA^U`(^2v%;h@FZOp<8W-cq4N_
zh;xw;VUGZ)5WHxKz@*E{^D7YOg%I0y<!+X4o9FkhLo6x9W7TlI<})7f1W5Y!AV?&E
z=jkqQBBTZk%n9ck=;R`_z&f!T@tlp+WU5UqAzK5+p8;dKL=2>gmR_2cr{|Gmada8*
z-Q?rpwV9NFHdSfns~^03DW06wtQ_>pZ!?P=gy@#RyX9>bfRo9Y+C|cQfU-Dl9{_-?
z@aPq7O)1zJVl^l*#HBceJd}M3EV;zQ_3@Vy)u0`3K>lKg<eDV5WTGnEpY<!=W(boh
z6R2CwErUSplP8af-`=>B!;3^3=XmUvaBFn+Zhv!(#x1KWOD;$s_L}?#uDDN?+Jo?h
zdR&euoMpf$BP@J|AbXN_aZcl_CbuoIWxzZlGd#h%n8v^NZS8)R4PXr`JJq|kqSYZa
zQ?p-93g=~q9<Bp^<%26!2XTzkfo+GRaE?#b88F7E;<(uhi;lDhZN;3GCv=ItB+0Z9
z8jXFOqj+eM>A@s>ss3{n=~GSWp1AT4e$O~Cj>|k2z+%*L+eApGxOA>e;c+I933Yh5
zD+uXFd|9!6;4ZO^82?g);E?uCBktu$@7d}Le=8irHJg1={t=L6$50+asi!+ybm-ni
zk?q%)Uiy5?bw6*~x_H8&CdsjLn|7%qL&NXw-I^UWv8yw4**e1<W`+B$@v<cqRHj=O
z(w)?e$a81eH7Y|KiLE7ymsig%=Vn%QJMMo_+tsLdVbuv6!6w^V_t>=C%^qETjrW?F
zC~9#Q@3N82__W<()|D#DTuQ!cL?oNmOM=`i-wwMB51BcCzBLGXC}EFRR4cbg(UW8^
zL8e+*_5X19mH}0++Zw2#f}(^XAShBI(uyL|C?XxAbSfa--6Dbt3P>ZJg0yrC2Hn!B
z)TEn9bH|6e7JKbDXP<TNpZgCclP}(Pyd$6S3}OTtX@6CF?rUU;1xLa5yz3q#-@3f=
zdZ_np+g|;5<2NR5BFlk#h6xUmw!Q8gk}{W9HUC1Ev)$_J@&HfcCe&aNw}?He`H&}6
zaj#vl8+QA#sOnb;15ns62b~xYM<;-7F6e$(yjF!)WpaSnmDo5EQUPzgRdPme*PT3F
z<Npv3gj?!0frnG6Rdf?U!bzUXdCmwH5z(tZx>Y6YA?Ym?VnDI74if5hbcfU;uu@c-
zclALwY7vrC%)~9hRbCdVz)+$5+CHfgO3U|Lm`FOu<93;t0p~n&O*Jm}gsl&&?di1l
zo0~b*fN63v0;hVc95PS)1>!JoTT68%m#w~`&QM2|ZC)r;d*P3Uh`IP)185`BUYbc>
z4Yl`YD4D3ZutYcGFYCS#q7RL=8Ghg?q;pv?xYVTyY7k`Ht`oQWR7(LCiBDq9*6=;X
z9nWB)_<`FY;N|c``}dZ_=YJJZKK;lK?LJk>Px>GS{PMu(LD9^Oj(X+zOhIel?PeoI
z0HK1R&CUWZN1e?v=V1i)HMj_YrFVydMj4hC7SZVR2x$KfN>f03@xk4wvyz2<GdZ^3
zX9gg+2s^G%Pk~LdW7zJo{KEjr8!w?EUtm{U?7F&%KoA?C#?3y5-q=nM4WM?9SmFz#
zJ!~&^^ZPUCh#kMH)ObOa2CreBy*H=g?nzMudHgF}KSD+YFuYSD?|=PHt`I}>j4@%3
zuWR-KNvWMsS<4=WU3;O?yHwp{ih82pwHBh;O1>6xtM-~pTkz7jeowE>UQTHjWGn_q
zL`8q8#>uEmM<>HKb61-q+FhUQer61Kl$rB2P-UZunpbPWdg4XVroxxhc?qwQU3RJ{
z7p+H&+c7Q!KYX+%ytjL{DuzPO3rg>C5omb`IeztIT=6nxY2%G@Hn!+r>|VFCUKw37
zkM{}Rtsj%^nU<#bLbw+>IA<GzBIQnRr*lBhkfplhm{&xg0_hqO{&>fK`eF8>j3b5?
z*4fdj@=dY1nRb~-9v46vnFEgR%n2^b%15gn0g_<|lz?~-?Yc*T0DjE7!AJbzCy1w?
z^-@*l(L@7Q*aHM__U@G4W!3Lcri1L=KpxK!q>gBBfPkTZ4EB_OUnLfT@m+KpESZB8
z{Ew)18DLfvJ2fh!ED`R_w0t4Ajv@6kMCSLO(e#^r!X10OA1Q-isBCkS4C=1S(DUda
zu_6+1z42b*UmtdV^hTRrfU4RG$Z4vf4(zRE*{aVH%)A=zYyv*;RmcUMDRI%&s{{m-
z+_%P-7bi6?2Z1N%hM(x~?6S8t#JU?+i2+!J=(=W|bwSUofnwsHh%8zSQZkJ!JLD8z
zgG)*ULkY>@LK2`Eh}elQDc~#Uy|i|oSj2Z-7mRS6D;i@Ub$K&VCzJ+aXj{6{CeDsm
z0c9F5a{Qc8-46(2!Vai(yj&;P1E|g-aBF1Li1~6OM~FMo(gu_vG+Z`x%yCEALuoUk
zVPQ%X6OefkB)85a=6At4D1>6avuk^ct5`E(=od_&B4buRr<{{}QI)Ft4f>fl>&|A*
zn+>i!xN|j7!R`YwunPmf_Cr2wW0ysPUwjNoql{kzX*F~K&G+%g^hueTEe#;w^md)-
zUb+x9rckjdck0Rm4Slh~D!>Px3Q@HXJ!KV$jt8s$p|ZUjE@aQE<9EN@wR!$9k~=0t
zKNZC1y^dsqmK3i&Nr^>Q4eiX?8a~5dzuD@*pj~)>ayvJHyn4Tn>t`aMWf!T)4XOJ6
zJZ}QrI97lSyvN#49InC78(C5QVPLrNM_XhD12$9cbw#SJV&|=JtpJ@0sd7`jljM^d
zDedK6xcGaNd>8oBzh+6F=c2r!Tx7eE%|FD=vTL`cyDDXzZC_kX`)S<AbY+LDW4%+j
z;#GX+M#3$BaaVTfv@E;EmS@F2jSHT=R3~w7WMKY7g5tLh*gqcv0Y@#U9<p3E607xq
z;l9%v)4UfCpAzHtEU<b$riyyY&Bu{9`t%!s|8J~bS>5-a+;Jc~=hwaoeu?6?e)8zk
zI`&S*_*jFn3CqPDL}RN{^5+}|!msu9MPFCdkx2kbP%o(~;V33gcSB%VqByFgY^D5u
z`Qu^y&k#l_%(F}u9a>F}_d&X_g2JP?tPK#D7g8hc;I8hM<T>o~J|q~>%qm5PuG@B-
zNFa!dRh37)IlF8z)Q6MAZb?~p)SG$B`U%a&l|#|B^X49D|GgnjCb<mq3_o98yW0+d
zRad5__?veSz5mP&@Rtwrf4S(B;ivNC_4Oe)wt;{@5ugLRfrv5uBRY1#rZ4@NSPdHt
zAGHX*t^cHBq7;&&#OM!9B<gk#k=n?YE^wplPN5X`B??dzr;$WLtEwmWXdxNH?5PYt
zH*x#D%RxvPA0Q@0KcW%;l1N@LHuhoD!Zx6MmE#*PamdU*IcWh?_7ue5njIuY$Ps}C
zKBlK#zcFomnB)MAt1hbbIQO}1&oSm!=q$+q8_R(H9o6+3&Z{$(g6GmSG(3=Yn!B^s
zrrJ+UbeWq=`RHBjo2swcv~^*e$b&;a$69fX)~9Hx-R^stDEnpN&>V*Hy~Zf>VVj*t
zK2aLjP|WAu=}ovf`<3-aqAlH*QRUjcb513;GbKWMidN;BuJ<&!OnP%)Xx()prinhU
zFehDjTel3S(feO#93XXY-K`&Y10p`7wk%+8@BdO%F6%5jGgZRPkrKbBQM5_jlyrU%
z(h|ZfcjXYd)LbJ#Jd*t^=B4lx%;MhUhRu8=!MjLl=Hz^e8pP8jXZf7$P6G74Ru6`k
zn43#GL&&ImOi2;apWZ_0MdDU!w1O|$W`^Orsiy+75VMb@wvJpL?XnI68hw7GZWTAw
z_G2%t08kom?*WKDb-6-L>fW5qZTI@J(;?2%-SF|bs<v_oq}s1#H{NLHkg64UIRtQn
zYu`2?VX1)k4hb$s(sG*K#!3wiLE&<Nnkn`H+eb|V)V+_)0H5c_cSxN)^yJL_?C|(3
z=_^0(;0g4VJZ83Gs?3lPAMOl029oUykga2%8msCW+8*b4lhjd<q*5AEtS(G}FR_Uf
zX3ckA!ORKItXHc2TizPm)Z>x1gO@Zy@F1w!Im&iZb9;R;z1O@Piw7#fLg7eu0tmP?
zJ=d1=rl4rZdZ7Z^L}-Qz<XC~Y(Mwgv6~d{`vqJ!SAhgGC?Amd1Zj|L!rJ4`t->8-L
zszz+Z*G!kyg<}!Uzp((R7CDXNU6LFF4_3l-4xklOv`R^D=0F)DgyI|&0?bXDvu8oS
ze>o3C$MU6LI~4#*>#<~LhIM|-aJ8W>dUxd=wVfW)WHVz5?P9o5)oti=z!JtXH`2(g
zVw5dZ3fH=}K5=-XsP|+%lC$$(c7UAB9W1iIsI4a3^7c`a<tWHvPP1<m7UPLzPEkpv
zw<X^_VDt4z00TE$l}7l}?STeaL<_IjudG&lc^kqp_dI{-+(M+?On|O(!{$QE)}y>H
zohIhoL4zLyQ#8Juo0ooV9+33qBWKAMfd4#tY=4^6VPPDVa@D3PSJ6qP0M%~zRlp;x
z5gmE;{-cJ8_D2FkCfURNY7hZ`iY20Oy~;eep(nO7)5%VJp*yeX&~q^~JKq5h?7)*E
zKEB%|X3>@<%QwXGdVBExOerJBMs6EWEG)zyCgN5>3E%C?c)e$I$9Wkc*BycFe+jL{
z)tD!kWVQ#o*`Q~zh9BuO3%LE%Vq&V_nA?`FIkGgoO_!w*$(eaYc1{4uAQZ4IWZeD4
zUFW!Mj9P73G9*)zf`b*iI=YbZ6v>KI7#poctP#suV=>WB(0^3cJ*<N`BhX&(=#~|W
zS0h`FfY+3>wv3?qVPNEB%y0*~@*6tGrcP7JU|<$4@Cy<%WRLDpYfLQVxguG;ITFr6
zfSTr=H5n9SOGx$?_i+X=GSXBbPw{wAVQIDC^e0TnakOWkQD29X?%$sedabW;fN6{Q
zR86$6&XX}D)Vm%~slVZvns0~S>TfPzm5qdZOlN;rnjT}4)2mXQ!Yj6}KpOb^8sZ&3
zeNyPA+s*0-n{5k``pdHagJHC?aZ|l$-*O9^sJ(&wqbt&8wniULfqW<T%}4Oq)p8@a
zC3P1~F9ccf2C{7R>u)0nK{yS$O?$_M&zs*-h1|{;OK1?WSlqd1sM>72G9;A){|%99
zt`i`C(pzMwufGA5N@&*3T3;6_*%fG<x(S_8UQHI2t)P6mxX29?+fQiU6vjG!0Nl(V
z1OYhGyFo3J=KyrVzZ)0{X;ouoGgN=k!5rzm6BF;T-@s^7>NH)rI_uc`IsO|8=?CmO
zSw`#dU{$Z(<@zuFpnq@!{;IfJK=OFG>!EHWzdbv|!!YSklMN7hI?#Z9XG%WKLq6}S
z)B3_v)!24vCt%LcLa(FQMwKfn_W2{|?l20PF4Er%|8_|rrtB!p`=fwXeB*f&U6g5W
zuKt(l76>p2VJ{sJGk+CA#^7mQ=y1t~8n3VqM?GLciKoH&W}+y-cu+0?1-VC{DU!F{
z$f$nr*GD7TD}ds!L33IML7cST9@$eDA6tu~peKS9|B<&7cutJc`;POH_wmg0>@T$E
zs<ond+Apmk$G*_mx8zY&`EtJK7TKRw?t`h!-*@`CGJ54tt{i=cW54>qpzyBGEF3&~
zzQE}3IEf#S^m2vE&JP5Lrl4-0xV;Xoj^r@%i+QgkvCDROPnXmGklPvobQ#NP-f~>w
z$l<#r9d#b*YN7e0CPqtgh8ciNivZC43fMk57pJn-PVZ|?H?`#P6o$w}_7g7$df;V5
zF*lY&!pcbM=N~THj~RlF%lMt@xPQV5>To<%q*+;L>yj_&rbF%TCv=hA-U*vRiLBeH
z?+sr4b)*0Jm0KJz!4;Qm?S{@W#b29$S#1*1M@lCt_;`>^QJDHRf(YMUdB>lgeJn4r
z%W`^0x*b>`jA{3q*v#CO)DQv&2n|dkpe}QbybjVugxKfJ1XkvUT;=f<_Q(Zde&sOn
zuE+}hfg}hWfUfcDv#+2s`8K5Y*EV7kqLRPk)bi-pCEVQhIs7B{U9&OK>UYK&!fI0+
zgO%i|R)$&q1O4IuxOM-KL2>I*ptMbPg~YEHf6<9;K#?iT;P69p7SfD>R3M_9%^M;<
z8nIk~#=aUecd^R=yH@4_;rtSfq!h7m$sUx-r$eNZ4FUgyDuUOshmRo~^%m6{e|A<2
z(Bi<vhd8_D`wB`hy+sRhbt#`8Hh;K!Tp?6vh3gm3XRjdAZXD=z!Fk8jyrHc6E8@^8
zX`gGTkUF1N`6j#fks-&l9rl41`+wf7zkEW*=vRq@^t7UwFcD^2ppLQ$o(#qQy&?j1
zguhe7(chgFT`0H#gMtFCTDoxa`Xn0FSRI!}J}y_8g{gYhYOoZf^QBuROu55P7iY&p
zd@H?Klow44)m>-v)|V4QK0|p<t4r<qR~*LlZ${YIKbb7@iIMhh{lMkI=`VecMlCt2
zYxV|-=A}2Y)QfNNj=yFO>Asn-Y7*XU7seb1lwHP>>CXS&EdGA*Kg3pm3Mo$`%+dM;
zsD<BD1bF=Te<C7L{g|X#S1d+rkP4>vOFUAxi~0Q);*~ho5jNlvY`ank60wvoRNb8Y
zcHhhFX>X$GP<i&^*YMAx?;=hkkRxv24D$iwih+FdJ&ir(2T{6%_9I0k>MM7%&8-ZO
z?fA$93k<3M$xD)9XQaz_eC>APIUY51w_bhRkD5e}@g3Fz-SRcgl9_BsO*;>DuS1LY
z#q>`Oj{m53|JY7S%}RElBsp@Bk_1@;1BA=8+VD{Wsx^D@?m1|9EN#`y6hBFNx@*8p
z>*NKV!ph>;>1JQXLaH_9%HAap0u-rm;fMI+V?uT_*{)xEbfc6^ma>L+Z<KE|CK_60
ze|?|&73Ph~Ze({2I*D6|YDqtJK#pC@9A@NI)!2bk)*}B{KKxGxlt9n(kH+?|Z}6zD
z7{VJgD7%*ZxjA}_ps|c;RfJ1msPiqJ#q|;Ps7a`-rd3p8A${X^C{tGiu^t@VJaNHg
zg#u}f%B#DK&$;jsNe<K*m!T_BfMyx@>7+3&qFw9Wp&R2W7_@Or%N~ErzF9HXYdA7|
z82|EDhZd^mU#Xs7=w%pb--i|v=$$}r9sB+OknpF1`9rw=`3Hd!gh@vJ2-D~gj++<>
z3I-h_MA6;f9{gFT6Np(x=*`|)Zf4R&zryX@dstLpKOV`EQNH<B(Zz#^ddN;^1Ja$3
z_B3{>?+)1O77aG9_0ak7e@CaY)pde%UkNk(=n<-gu+Q)I<-<)3+A?Kob*sDo<8uE+
zwFzm0S9R5XX|zYDc)SPWXtC|Q`Vqzhy@toE)L{u`txTG^mK$zv*3i_IMebJff5{Mh
z-qhlV#l%#!{%EY41bW`=);36{&g)#_*q!)7G6Ei`Px;Q~7q)tqa{!xt8#{+hQA(lV
zOk}=tO87G_hpL9lZtc71m*588jplQH1oH`yy(}DA>-*v7j>phdH2lL`Yqg{6g_HYD
zbiXBuuPb=;Z}`8}$jZqPL0~0a<gz;PVHO75oM|qDGXEl!T!cbcPKo0wu@RH<6rN|e
znsfh(%l0~?mt3o{_Z<0yl{dq|ZVGzs@<HvHx}QoMjIh^YmmI+0BkdsLL^HuZ<OE4G
zA>x-F#LAb8M=8&Mn%U-Gn>*5!w7EC3u1kE)J=>E&=psW<qJP;P9dEzex4m<Fgk+CV
z>Ch)6<cbSj{7}H4Jt<5@U3<euE1Yy>Z{2Br@B9Rd)?7n>SdndMx$kpq%Xzd@Gn%KF
z9X)7SK7=N5^S%r1rQYKYEMpGP##8<|AMxM*L@<h3Tod1<)>1)#?1=XhmbYX?L^|VX
zG6%*73sCAJgI0wmY?l&5+4P1j*9Ma$A{o+^^VW*cHpYE*Z}SWrEVJ#G>)x{)4q#%e
zP*-(#sRwaflJHw!w=1~eb%vRN5atD9;m%$0H58~E3kfP6zGvfvqS}Doa_!aka`c^+
zo;<nw17g9<N{^--Jo$6W3lf<$@*8-%l3OF&3N-lblSkZ<=`#iSrbUUKrC0U+1Iw1g
zGMx>g9j)i*h>tvEdZeY(7Jk1WJ5z0B$v(-^*8brFLBS3AOm$j8b-P>05RZ;ET#kOq
z=8A>5ew(dXC9ClsT!ds_zy^7{0o^A%2dBFnoSgS>mvj!ZSRjF=SfmCs^VQ6mmMcfq
zUIof{%<!C;Id@=`KpGK@0`@N5D{v|6m#>H_E3g==ukW{CPEgDiZ|`@%)r=olOGu{<
zWu0bTIvDy}zhZV2*RnfzjJ1Rn+H}6*rAdUbeRwp+uq^bA0ej@f=wL82G5{gP*dz)K
zquw45@=SKeI=}BT5c%Y6+?S;6i?jd4v8;e%LPZNgP3IrRWBiZ5S|mO3WW0Fkl9wkl
zDpVQ=GmM$w!UdD6Gb_?}?%a7i@3Zy~^HXYITuMzGVVuT#eNfTuA0s2PykEb56+>U(
zO_1!{N`$FpF00yg;ih#TF?I%elhsOmB19$pbi{)T^A_7#D@1xeD2O#*7@+0ch}d5F
zghqC`L~6Rz_#zYa?WxXm#uD2-I$&)Gm~}M`=t!0Cu{P++V5VhZr2WFme2Ep0)Zl_?
zdvQ=1D@->u0ogF>FRYwh&r7eppCl5#)%5&45B~zEy=B|Qf{{XK3!%MnBO2x<vZ~*O
zrG@xFG!aLkXm%tY3wP9W+7uouq-Jw<dLUn8Yikb%BeuB|-QOQ_M`;BksE!R-3O65o
z`Tub#2?U0JoDz|eB93&7bzK?SeE!kHdtzJn>l;rGkC&eGC<<KJtlg$p&aIaY&U<*~
z2?I=&?4n#W3Z&k07)}vgiBUtCFC=Sjw?A%7F#BG`=a|?x<f7udRg{{Uaap4=j7G?d
z=$fzox<Ek5+=pn>&eEb%?j7f?3Ei!gH@1Ue279HBLoP49ye#^<B6@NX#V4fJv@{xb
zlnpvEX65OazvJMN-3UY{Rj|U~u;6FUj)bjm9wFs33LO}v@wE<m6Mr`>8a>lP6O@@U
znxDz~xG~saRjt}-1$9r~*;HJq<ne2@YSN4>v+o6M8M7NPShyKySAJ-g%zd1|stK$O
zn2n~ZSPjnAx6~jm$LuEhdF){Bjvx8d4B>w%od-43&-Hg3K8>8P=4zOukSJGAY(dGw
z@`cxSwo}q!b%r+N4D*z{Zp-pvou$t&*R%rONxZp%j>IQyq1#-YV{T6>)9UJRUGNj_
zZ1?YgF^k#RAI#ey*TO{FfoPzds<RGa=;a^kjB#t&-afIsTrw{eP+sQH(~Rr1Yd_gj
z;u~HG%?V?hhMCzEmVh6*W*TKR(=zB{g39{7^f^GfmwyjZBTK!Z3Nz8?IE*hL6?@_e
z%x?1iHIPSCPsfiL{Qno$fDqQ;TvIK;;Iua#=WD+eB-Qwkb33iYfc9W>oa>T(|A2mL
zLz&&61}3u3L@Q*f(Pi5&6&mv!t}&4=%;c<To!jld2vbTp_;sxdZ`b<Mj-g+>+L3Fl
zGH~=(tL-F(YgbkYB{hi)V%4vkkIZZqr{{lX6860iWTBIhMPcE|c>boD0E4>RV7iO1
zdRgM)fNlLM^o759^QOlvzlZj3>e_!&!hSn23QT*1v!ynwVkcj@{4KA_W0$qC^Dn$D
zr(a{8Xi!;54`fm6<xx+vqJQb@D}CRWgh}~gN9vGv{&AR2rz`U8nriH_Ai2(51n1f!
z`Aw(K(~7KTGGc<T`8WiUB%)^8lSSK;+SYclM<FKlOGcrtbIOt;8})zI1^+@_91Db_
z?&ja1$t@}>y40bNqci*j!-VQY+2%^n1QuT4=g)WO@1^OzMK4V@gjrOR<2Kq<UdU)k
zvSw7u*M2!^_$E$Br#-l$)Q2O_?C5}IRiQbXRn733bZ~}fu2rnd)~Va;yyflLzcb|u
zsOn>7mUn&sOC9#Fo;w$LZsOI}C@dN#_1qel@ed#{o99ediY6*{d#MWsopN?mSHn&G
zkDgHL3#L~SLoCC@oM{(J#~}a4w|3bSS=#%o-Jghxd3OsNA{JAeC9v@*7P<IbVbmmz
zwQ{~yN<%oe0x?tQ{CE-^?XPvLsq*45PwPH=0_MIf>A~S4=$-H#{IBiyKgkloF_?~x
z85=5gPT1%Cn<bt4?mWbnG^k`zen~eeN+~w#EADV{L6`5GCL*G3BpYI8lux_jOG2;w
z;D+%AqhuNWnwdvy{M}mA8`i$+m94M*3EH*(Ce<j@!l#z;2?-ZBW(zu&e#G4R;LyRa
zmC{8g<&V96ELnt*Eogr$o=SoH7Q;<zb?ome0wxkf8P?PXvd}IrF0Ku_tlN7$c>kc*
za31=@g1r=iY*WwKqOzWOc+}?XY}Rs{R_K^6cXH3yl%eyN479+p_@LWtQZ(Y@Y0_-(
z$+%tO=sVgJ*_Yn*r`>3H%e*?(Wt-amOAPHBu8qd7mNDyWe9#%^#J$_{<Vdq@>RsHP
zQu_e=!c9qz+NU1g4Hf+1R|TW&N>kO!q$_k2_dw3WO?y5l84Ox@?{r@qD5*c;{ya1~
z@;f0it58EeJ-DVuq+|}NEL7Hp9l5S^3&ZYgCRNi)D>#}Q`&-yU3m%S5ZH~r&=imIZ
z1;IG-R2X)EiHk%_os^kI_*E7<sq%2VhO;D8V5JBnVsv0o(~|0*E}|@K%Ajjjg>QS5
zaCsRD4GAuhy=#_WH<rF8)VAd+U0YU^mGyTj(RAZk(ZpU}9;LsZ(CBPDyZOlzFUVX=
zBgb{uYFr}okSDD;v3Or+`Yac(!%CnVYpEvsUUUs~KLc7{e9Vxc=%~0v7?+%Kp2g}!
zW<|b8DvaL-l0}=ni0?Qf>W*@rFqn0xKUJ%`Rxq*&TgVPe*vfH9)Ly@Pfyv=$*17!=
zTQi7ZEE(-#MGnmW%BB6c->XEXbrDB;Lv>s<=c{c!*xIr+#SABVPV1!v6}=~N`fCwI
zvL#aFj^PglJ!=ZhwFY`yVm#XtSwl2jcfQOn!fdOW=8A2Gd#$bGi|BXKA?m!vj>e9{
zpFEd(3m3;1nN@CxH>#MJr`}J124a|nxm|3KXU~&UMU*>xeB^6w3zhr8S|-)$t3{Ue
zZiP2lxpfPxz>+1%za~?!R(Pk*+w;LbCrvHq>uk|cZ(`BaDGr@h#wP>&@2wpI+Ny`P
z+2#KQ#diTz#fJse^RK)Eo|jk!gLt-PmPy%Z#pN0f4W`e5{Y@~99$cENrqIZG%^;Ur
z2Z?zG@Xm6k$$!~L!;+G79KrZ}7J2UoW#-Fs-lVDL)uj%)eG+ca3M0*ksYdICuzb+0
zbgFm-dtF@lAyGUL3>7UO-|o{sv~zw1PhUla##YSf|F6`b=MAf;6VT=n{KcEN?tM@y
zOp=x~Q2`w+)`#6&+uqDWlPDG>mOTc}LT&vg&sxM|p3+Oc4V0#dwnOFq$YA4HcBh!W
z5w$S^)rg&lYpS;>`ghSoNj|zCpAu!XWEiU`6)vdcIREl8x{dS7GG8+(<<@MgCP|Pg
zmDxlpP)v1X(89>`>%K!4;<#Z2nr<qQFk`(gR6+fX?Ypv(&Su2*b;rUF#>4M7?Se?C
zg>H8+U-Irric5^HJ90MjgR`A5962vhA-Y_)K)vjG1p9kx<P<#n0MZcaw1(pT`^UoV
z6r8XtK9eS6Kz8%NdCMke2N<|69X&xTabM--%a<Rts%=C?L;@|w>O>_ZB;NPY(bCpd
zaNE{p#|w}7#|b6gd3pNusZ-zcBc<*DQ)}kTP>I447&|C0u)s-4$tOqQaNEuW0?$O~
zPHJOaP=(kC_k6DHHHU_?lS>OU^mA*_A3f8XSAYJKPNLYx$%tcC(fa%TBxNCD?lYEe
znf@z<_uqY1gNI1HV5D=><(NwRNQ$Y;c?Ml?s!Obw-=j6RY}od~O=qe}Sd|z!<kP(_
z|6Epj9D<CG-iQCTMZ<vC7-lDUfXV86mMXKHt#@T|?(6GBdv9Xdls5L$1+EoPw$)bp
zp!a5A=%<p&2uw~+j^V=Maz}I?fhstPN4hp*ej1H`tKt4Pf6#u8D3aJFzWZlT&{42|
zNS_h^eD5g*H3lj~zEn%$hN`6#Q8dE;!gCV%uRi+-8r-exw#@O1baeFzF9~%PPPog?
zC=@M?jRjrJ6dQ0@efoah3Txjjy@`aVP0P14|GT~YR}WMphU~X&xbp^cmR2>MQl3F#
zno5a$XSx!j2M&=xj)H=pSeGgdI#-YW-o1M+1wumm_QqQUtf=?aw&lwIW-<S>NlJ#5
zF2&n_6`?|mp5IsiaKD9-s3~5W75n+$GimUQPc&ew*1z1L{pCR%lY{rZz1q-f`uAN5
zOggZb!%X`7`2*PWr!ufOlsxoSzd!iDZ<8AnG2-M^_Uwm|unOAguv$vfjf4O9YyLi`
z$L_)sJY7s{q5Hiip#oyxajv%B!|21t-52oxym9~2Uj@ugMDPVr+CS2wWn+`A`t+$W
zIxFkSGM%DWH<-YtqvE<K>|cucSumoht;<o&e_vCFQNeaRPHy|1X*u#5c`XHnLI%A}
z5#hhTZUU5+M{k&Jh%bHqDyFTS@a*~XaQ=r6AC60B1!f(7?i+C;xTyvI_mVOrVm9s6
zs`B^6j7<>4szD}E^7pmLko_Bf&~obUU;Be3T-zvKxBAy{_9KGhqV2)9^{;fsfA<+>
zA)>A3mIdd3Ej^_>a%}>?#=q~Q)nLG-MxO-KQ2mlcfjanLVd}qo!hfx&tBCAye_z!H
zIfcT}>Uem+56}Po4i#YK7QA1I{aR^)_wdBero!Tf{=OzXf<%`emD=|GMNk$;V&PQX
zvXe#q{@{N)vHwBMDls8pfqM@3FJY@u2I>3I8D94H6$Qa7Sb`%XO0m+v*W?OZ8}qKH
z;NM@8XKAnmRE|@qo4*vxI)pb*`Nh87`q#VuUmT^M)smcMR^gxK>7x+j;j4u9P9OT)
zmp+6+rRqk4@#~RC^<X(HRwl=W|Gx5C5QoP3iqPa|zqUG-0k$<cigWYzf7tu~-8Klo
zC_{x~5wy&|Btn1y{6d0fbRH~!Uqt-AfQV>cy;&mob8X%BYb}OlJ?H+uy{NnlOK>HM
zX!G})U?3S*&A{uwfB)aT{=Zs3ff{59KD_hs`IWkQ!VmAU9)E}YzmT(kBTW|hAlaN-
z+ZI+opHFoKF0H!4igD=gO9=rezf=D|Rek~@ClD7K$f+ACb_#Y|=Z69#7zv1pFMa?1
zeH;p3&o<)slK!KjbUQQ5_kfaJU;Jp=mTKn?^PJ^k@juvu|BdOO^geQ3gzD<md;b3Z
z$7E}$mo<l8<K6Lo^(qhswufaM#raQy?RNoVPB2mUwJ{s@N9T-JsO*Do(?691Sttbx
zF<F1RB!4_<8*9u%oa4uj$GP`jK9+DX<~t5}_?L{_p8hLI{{7iH%}3|Uu7Sw`J(v#B
z;-5aR;vYR|5?PS&k;P}Z;og1#PHEN(2f(Z~$^q}d%=P^k<}fB%lG%6z>22uzv%6~Y
z-n}_4K3?d5So!iJh4^2lsm~rQY$kf8>%n(GvG{Q!8p4M${pXFJ2>3zSiQppLQ<J~!
z<+E2G0pdt|_3BmaO>tp&X#s^b2;YyF`?S*hheKH-4=b+2$j^-yq-0>Id-n4F!Ba*#
z0k7$2*~~2L`D>x5Z^M!w{_6#|386$74Asb&yOOsk<1s<xkQ_=Y)a3v2lm~t_Ge2QQ
zG4+FQFV<$o!ByP-GYvKM?eystl7kDsO#mIZ_!r;*`ab~_qIilYe4_r6GuMt3fTZPd
z`4~z9Jq%pM7q4EOw93i-Pw^EMh*&ZK=RK=-@h4lVrI!!9cTE_q`Dnv(-MwEM@o^6#
zwvXZ%2cHbS?{?zEm6+EGB9Bj8SzyZX(5Lvz-~as8Z5TOQW>F*#V-*4t60b(<g6j8h
zlVAQ8KjigpA?5CtXlkw(zdj{JQZqCTM&1X%b&S%l{pi`2;Pz&-h4T~`Cn_yjP{;rM
znNp&Hw@j0HOo9B6f&6e_N3<hB)hg*WM*Vts%5z}pYOt(q{^7YG0dX3$wzk&d$LE)R
zD8|SJQcU~h@t}o;g$VO2=a2sTdml@<42MenJf|on6O+VsO)6??YC3Y_>H`PyqYxwF
zTR2W}n*EfizaF$dlD-LQ0`5dsn&*zXrJZikJc_Frb3l~-_||VRX(EQ@ZsMyT8EMte
zx*f%1&+=7pBJ_Y`USp1IapC<sj9**)<US=GfCeHY1BYxf{ARIjYuwg%EQUY3Sk?$F
z5eHCb3nfZ?XOrDoQlVvF^CCI?*VpDdDizJg3?~jn={JU1WHII+8XC$p#L9i=-`F`s
ze$r0CV|L!m2}vV);pOFzLZQ-zt~wt454R_Xz{^OH{dN#E32W%T<2aljGI>j<VZ1Io
zZWPJtNce+AM2+Wt@^x0*kn0s0iT!dZVNf4A+Lsc`e_+3n)#<rtwl<^0X}_d>V>WVt
zn)0z6h1$UL16%Ts!Uq4r3FkwGbK1$``XDCIQpmae@eP7B%xWL<08Y#C8bEkSlGKN=
zvNncuglumtV;hF#q-%iYI>*a>_qT6DP;>k{PQ}dnJ$2>lcZg@ygIPX!(oWTT<7)V+
z)OSjDtr`8rHSx<ia$WHjcK$tr8Ws#(`4%_bGk;Y*2al~1X8-d#rHO#}MPg6@f&E36
zg8K=ypW-1Pb6hX03ecBhfY&$Kse=kR&|wEWIqI7O<3VN0oF-5H+SDV;l!2d!PWzwM
z9xmlu>Ma(<csOaT#X&kaD)-Xs6^@AGb&JL0+gXdRBKRz&;w(Hw%j#NhVJ!4@-r=;G
zNqgq;vfoAU)wAc=LItQJ2jt`yqhDa)#dlJXIK8{A+1|ne*pZXN*Zz}196brzdF<74
z&AkK`IKJOrC;z$letDP_F6*(|K*GRh>#(!hCH@?b{6oIrt#S?spSO>+^8Q+?noxmc
zsBQC@3tR|a^lR8f_r1cfGjf)myt~xt+@2_6)cPb}Tx$^15ic_6XsWdM*oUHoO*u}Q
zmLHvij-ys>oV7&6ml&&qj(N2Y8Yo6=lZWVSelW5#r#~xRd|M{sEZ3jUM39S_Mtmms
z-K7p6<KA3R5DGd#QU=Q=iX|%ZcQXR|Mg-2{)3WfDKLG>7)TeGbuB93E<xB4FZkhJv
z8HSvpm%Rh5V>m@X9(j1TXcgL(_v^^=X`yFW)p;bVdJA9<N*#3Z(zLd=Ciwz`S<ocw
zzQG>;LDXGppA*4p`SlQLtI9)Owv%XPg;#nHRk6y|jwGdt7#{d7P^vZx48;RYfN)QR
zYsGbgZz4EnE}Jbz>G>e`{1}E?gcSt?C#Mp?t{x7$lU>&%_>fvU*PShReI?FmV+q6c
zC^?^#V!r7Ri(IO_q(a{&U*^!8JUvR=FJ46L9X=*j+w11-Bs=lZ=3>E2^oimjH>x8^
zqs?<GNH!aS<_<p;JRrtx^jGW_G+XDj%e{PB+a~BIAg?go@mr;FDpQ{MM1=RbS~N%B
zwzlrm^tG}6epM7!Sf36C#)+^v$MV)otTQ14!T}A3qtUFF#>AfO8brXsTk`fCKdA7u
zG00;A+i(LV2H6{RWrhI^D*H}~yj|>jm50t`TVfa+0h9ZH#PYbqh?F4l<pWwn``t&V
z5{^R82D<32^kAvI4zwP%#R+*oal+aI4x*XnH9$A|H$`%9S);brW&>K|h3nIla-2F{
zVbIPfOyt40BY36}8UM4~laB*`yQ^GaVvPO{O@Mw3a_{X{McthNFnS5tu9kW<2JQ}p
zo0KkoHR8R{9LcItt_l+?9$hf$`H+aPiQekq|CtsyQ>T14@Vw0|8X6_5&TB%0pbiXw
zqOvSz*VAl`6Iz1Jemh?ba(H!q+3hmfw*}~wuLYtfT5l58U?8=T7;lb_&PW2%1vOG`
zo3t`xvD6v$WM~$PXI$axGw<voazN1gDd4vjZ`#Ga2H(s~mh4aET=N91r~W4zRVrik
zZ@+aM0pYPcGmmEpNA$VNJQ{lPuG~+YrymgEo4u(LM;*^*%}-)Ef{Qg1BuE#4Tlwvs
zw^-g%(d{UAGY>z04^plt)~<9lpEG^KZzy*(Fxtxb*2*{<z4}An`mJI@3H(NCyzFgh
zfCx3Ed1(hB&5sWrpj_WI2Qh|x{=6_iy`uhR<?L_QqlOa`UNBMv0~>(t*>oM+qo^Uf
z5nOwiL?uDUsE`pzE##HZ+Yjwfi7?s(G4Url)747yC8GJ%s;a7FjRSsS@i+yC8^W%&
zK~*&8c8;8r2P5iY4fX{)0cb=mc!2M;Hq#RqK;WJTjFcR4RJWC<x-v~Msh`H`y)XuV
zse}S-@<pVz`-+t}-@X-M@N1tFWL7PdSt*Gj-YI9-Z%Z&*l{B6pGs!mSU<kXW>*E9}
z&7|Y-sf;Y0dg3q+)2N2ftDl$~c+0-yaNErILFKe$^;-IOoJ~?;!BEgNA!NP?Z56_A
zm8i_hOthk|W@Tlid?S|SfC>(~6cejO@0`>*?M%*PRg>%d{Lv>!Q~gkiZ~i6m!vzA#
zFl;+&C-9ZZUeZu?$Q!RRlbK7I{mTw_-)i=qIJUh~O}epCLTKR}cG-S3L$UVwNcS;?
z!a|LuWrfJ#2|gZeg5v&Q=_r#o^FOe@qkbPjH-a-Se0@oFq9l$>VyMN+(`gLAG!I$m
z(rMv2=BqxPklEececqhu{GS#>0CgNeBmoV`4es0+s9U$Ct8f%S6L;gCQ#&W;RC|_z
z>1n@3b^!Z5q1x296dJN%vo1B;4c@E5bd`z$4-LO1Q^6>;rw@{4ZsnFi7x|a8k156m
zq?{HB{m_d(IY)EuXF)OeBh1qg+PmqUY32c~YXj<y8~)-fZ-6f^Tr`f%VFNy^1sIrV
zMVBgcW;`aEs;Q}o`PhO+NXy=$i=`sD!q6WzFM|d02b_0!M)DZ2lTn-;h{K0v70AaK
z&E1j#!^ehUgD41~X%^pD8q4WG-{u}FG><>N*@~vqprwJ$R0pH2y8*Xy&W{8#{LxWu
zLa(gHjbsHk+Q|@#y)!T;Bu+mb5QO90PK|HbC5J2Xjr&HSjp&0rNp7^|L=!GbH)3JI
z3;=MZE#)kzvw!UV$1k*IGu>A$aa*pXsqp83$lhO?Xm&MsOR&g=<f_H50MhL|GXdn)
z`HfUAt@0a%(oe+S_t;8QNq?6(R?Vz~4%=DdbD1f8V8R@J?UJ@O&iU8H#~~Cnub@PP
zpqXFT_t$ZaWsPwUlvNqKzT)dob4&=M%<Y|f^FQd-ypI#nt|pl`2hx<TW!9$jM#C&a
zz#WW8bYY!5ONo$^6qg`N(U*!@26Q!-x~cM(z!Y|`T75{(7>uNozEIG3T{9M%RmQV5
zm0P*<v_|X^yW;lhxDi-iG7giOju*OxPcu+6CohKbyOyguuXdR9O@5q)ew><0ckITI
z@+s}K0!~vy$ioeCj=g}|losMcg=*X_P%n2XLb`WtuB}dW1OTsK72aO0NMRKWEbPBs
z!3YPMStUR46wTexokTj-TNS?e<XqpTv)WH*#6+9Fmrpk+h>dpRIef~Of}ds6c?c(R
zL5?ndt$(5}nX>QC;O&U4K<08|*frsNlL3Rb9e#yyt_jnI4~Lm~2$U~D@4-()`BaMX
z0pKX2Uk?=v63^|h411ELT`6k34(^!$(5@PNBY&yz+NIB7JJ*@+X^it1i&!PrM94Q?
ziVoNj_HTSR)=YTGUQ3mb-DXbO|MlKQQHk6d=s2t$6Qa48_eolcxF?@Z^v0}M;3E&}
z(YI|y7d7Uth;lhf{qQMXyGLmnI{K22pLEpB=|hCnP2FA=^~(U<5UKd#Ln|)pZy40`
zG#kR*x~)=jZhI-I2%A;W=q?9+W?|`wfFaw9BHOi=7S<^u^p^SwC>|0(`QnjF2TPXt
zU!1E^Dk@cc_TVxRy*>Gjrrijh0H$Jo<}Wy&;&<#qC-<WFF4fMt>n1wYinL=p_bceL
zGfD0Gh+mgxKBvy}Wu)VaeZh>FzbpPl(c5t%9`)3TMlX*=&l>DCUo75yaM87J)N7?|
zzU+CkSN=3l^_EWrk#pJSQJjF=8>(w1co%DvTmvpLsV39~-IHD4qp-cuT&Y$2!A9k&
zlF+)>qoUEe)2B|8zS-QX&sC&&DII+OLZ;~Ip4Pj1<>n4KTAJBCM)|$85!KxB+*gr~
z-+20$#!Ht_0~sAU-o(eyshRrD<g$N;!<1Q=5E)qjwbsWQQ?0$=AP8YwPfNb_rxh0i
z-{XGi)p+Mt3`u1x+OQWdj^(hW4R*K6p)yLB#OPJ>)9m{dTAdM(PNJ@>V=WgoY^tU&
zt#G;x<45oFKrffI&SEZ3Q3cfUJJkEE&S6IK%Q}*Jy=9ICoF>M?*zYG@?r%k<J9q6&
z=L0P3YV})21r|#mCK6s2UDT6|_o+KR5P4x9#pzbFF}a^CLzVNxXKfYSn&8>K0`WK0
zLJfT1dX%hU;@LITDbW4Va_EKcpW+UG%N?x`X*OkbmB{lcp3FX&HK{Rh1MaYT;6r(A
zvjxo4BG711S{#$=I(6qHGx)8+@cQpc!U1dI56Qal=0UO-er;&-3B25LlXqh<2=E5u
z347w5D47gZ&gHE9GJ}ryR_Hgl`-bGUpg`tMu0e-b+VK}1@8tqu_DQ4F;5F4s(yEw;
zCrwKiJ)7OX9ruS!414oy3jRTtJ#op4EG$whTmcybYFV1M?yF_m8xNNDsP+{j9H^N}
z_QYl5xh^{nIqB;0?b8YlYV|p&>?!N3%nrtNq-+UYH0g#>A?gk(De+xctDyj)*2<8c
za!k;@@}{$WTCFqhYO_r`pWe{Qdam9%<>uaZYqguNWD>=Q!mjK4r@Ui4G!D=^x<2Tr
zYgpyNt?Y1_WWS|RJyVpO5n66JA!Rv`tC;<0ypY9e_FA6hW8O@8m3*T&u6sKQUL>q0
zy?N*F8w!#`rwYC$bIzkLUI+x(vYeS>CnCO!_CABMbmr0NY<=FcsOi%2u-;w!3m8Y9
zN>k>{2`Zu8S6+A%GaKNkx}vA&S$E2k3Aa|!DVam7QDVKFz^|w8f<JxHX+Yl9cB6PA
zp)biwLnK<<v|?q~&m>jIRl#Afq_ujLJ8E_C9lr{?b!CXmD#mrixn0QxVg`F~O(apb
zfF-Wc_S4?ZylY#zv*UecuwT7HNN=Qat{xS_IJC2Ke`q8xfnD{ME837E59Q46%$n^P
zTB!6J3ouuaNUM5F<M1Z0nmG8r+Th~w?P;M#K>W(>O}-`H8$XMwv~taFuq6IqwnIP<
zOb&tag!ka@q#)VR+qA0R!(Uq_^h}_W7E!X9b0_7q4A47Mr1r*<(@7b@nSBlZC7I^9
zIQ61Bs~X3bQ0Fqv&G=rgq3a5)rEQkvXL`5CAMuf^bDG85|DNv|e}4~W>F%(dWqQ)Z
zo>QXVlvaFXm#5C^yE>-vaQ5W+(#_SGO5f;;jttlh@xA=8iX>M%L4#a_^YUJw_1E0{
zC68W}4mLVJl6cg{S!CG4$7$6@lwqdPSjrYNyK$T&B~k<T8H#Tss|-KYMM68Yv_B>5
zq}{yVV*SrhbHPAL@Ra)IdZ<&$ZbFx3L7;E&o5&OP9uyK0ma0iC=90;8H?8i4<u4R&
zm-aYTDGWK{h?Mj#JLFAE7e4jGe6{-{`TPt1>Aan?g3on1#!I3P07Zl)HKE>kqQ)J!
z6kXyxuT+E{b57!2UAHzmPM9l`K4G$~I40ZLmM5CFVqdK@&h%wjsHTsX<&CTmwN7nu
zJKLkLr?w)LR&gedhlFqu2fqz+8nP4hwcfgiJ?cAf{4vRpFB8?y5bummdUacgkc+;`
zkadIZ=_b+F<&G@tZDHN%FTSPK;KqI1bzS87?UVQoU~;ucVCU=HRVp-#eMQbK579h-
z<~X<Y)J2#T@<O4e3RoKr^IMmIq_z$?_l)E<SD9emO&savIi(9g-_a_kVVxBr<vG<?
zkV#4~!Nk?F4&)iv4j10<Rj1G>waX?Aj8JaHPy=uGN{7|$0K9c)pc<ON(CA!4B6Dy8
zwv6s$|Cp>RaM+F#>idSF2tcjt(v6{41+7*om>uS<{7Q+PC8Be@+GVkyPYO7YADUNM
zQRRWoyvG#ERtuWIi7~T_Ps;ZBWU(bNxnjC?+7dKni-Bu)KVGbTnJjJC^rO&QvLv?O
z?+k%$$}!ZPlabpgWAM#2PEy^zeB-qQUjX6N!%*F}vG)NQX+-SNc0Z0oLfcnk7L`Ca
zUE;&OQQhSk#Hes1dNEHg`u+*0Wy6UFw~^G+F=Y&AezF@zp_3XAY&2|zscW_WfMyP>
zNm)y0Dev+<)RtdnTvtGvp_s$K9MD#auCA{thveN}0UFdxFrGA&XZ72C6St_|7gFV2
z!&taST7vR4942WA*@l_8uC75Kd1Jn|DbDQ<fbp*3g9hVOPerX}z$qQvP9_w=#yhVk
zKW<5kE81cBs&iC)x(E_8w=OuKsFt<FFz#|~XwVrNv`#<HEZ=+|7GZEyX&rNFproJ(
zYk~<PnJcN5)7g&1>6z7Ij8>wb?rYeO5p4jwQ(1oMy?9SOnZQiL=#<EtxX~@f&XSrP
zwHb%8PA<I7HOxziJ=?3>taVQpH?(ECRNggjFA5NrgAo%DXnmgMbY`ABqPU|fc<Yc`
z3t>&#mQ3dkC6QA0BM*E0#nR{mwAYHQg4n#;rnAKSgx(>y9F&a%h3NdX$*n}<iTS&@
z8IC{;(>S75Z1v^>uS0kEy8?}-kB5zoI@6SF6x}-3A;&k?qZ`f6Z$L587_M7&dS&Mw
zc;DmZJADf4QOoO?L>Yc<saGLd+brK2u+0#vNs^8>X?kt#dli~>dOh<Kh4x%vwt=&a
z+)(t&ZZNSkzQrIK=kwn6Im@HB-`qHu*K>g4%ZI@T-rw4e80Q)AP>o#Us_hF`<tRQZ
z=X8`&LXq#TgG<+tF^R97gUqF&3EmVMnVp&pn+Pf_GQ45V%7LEDdYrp;{gq!X&TMZx
zEUy$QRqJe8bba3YR_9Sg6pYJi@*D@0*xpxK(dCC*vl$Xjr7!wMw>T<%Lg>9!Ydbfz
zs&sZ+9{JO8@#JNMPuP-+_&-<Y9cHf`>iSv^!wkULd|rLQf0bM9JAS#C(St&#C8JY>
z44Oo`g|`jJjpb<Mqg*K~RPw%65tVNZkxpJ+9X=Y)qC_b>IOXzE)#fFm=EyRIRNX?e
zZ>X!n<qNdeu<SCEu2@$d54*XSoMMT_wb#BA^3*@ViBFX(Ppfs|S!dp(vGhHD4f>Ag
z)&4};aar`R?}{?_CnBpo`D4#BoqZ=&70LR~(!2vL)ChOwQGcF7&fWZ{^R4asu{MCN
z5r^B2sW%F5t^*^7gn^54GreGtEp<=v3+XXG<!B!4G=1lZ7<O{Sr0Nh^QVx@deu(+k
z+IvmaB%2txF83-^P26@i_hdvd-0EcDD$g&1CbiezmbU}2E?UhG4j3+|i)~3DYWdF0
zkn65vylx-YF_|q*B621@T&xGe<m)r4R8rVarv)sTCBttJsa0NS5yJM_%87drgBEu@
zkcV2Qi3u>WT8br(ykfA^7i}DA4HNKaNU!Vp*^3+=1ZS}>_r{w?&XI+7)#SFJ6V^-b
zGlz?x%)av67o`tsniEZtac=yb^Uk=0Eibp|Js8*fzC-ZnB}Ls4XRK~JV4Y$zby7hj
z{evf6Ke!-|Wk)=`q<SlWi*1$xn(e@c=?##~dkR?KKJ-Z=vpM0z^h_Mi{Q!7&BLHu1
zX$qN_N{djW+V>Bc9W@s2%kj$KfrOc5PO*cS&?n_phm>oYx6tXS&s4sP(i?9<O05q=
zDkbu;vpU_P!ObcUFDzP=wV<JgUFsa%O=3N*9BYR@3ex?~59rF3-OkeI#a8B#bK9)w
zk^s=djq-HOt1TG^yQZyM3aaKFz+%f!e<4pQu4^czDGuX~gXw1lfx=8rpb%d;d96mI
zVr8%w2uCz+GSSfBwPn2J;_uml+BrLYA@JJSK6_J1W^mRVD-{H;crr36W_`pHbAWNm
z5|_WixSPlfv!kvWyPNh8L9-`q!dzDdpu2co5xyzsyQS)K_1*zYpj!+AG(brmC*N1k
z5ReMsJOg&#+p<psoyTx`!U;&S1koIdw`>)mW??kH<$FhHJS}J<k_wC1sQtZt!mW<}
zI8vNt`KUmlis%oG8j}wc=aNrr?Um{%_~$y0Z9fZ~8jDNRa#y53e~zVM$NKJ|(izrj
zDZ0MZc9;Vk<x*C${_Iuc^xJP57jIM@xqRpDvoNz~k69z<=SS(hL|&)v@V^^)ciw+~
z@1}8Y$HFsp=B4^og}b#;pLBI5d)t>9dzT4=AjNgkY5s-UgjdxYwqduYvU6=BJ=y%C
zp3Y8pb~yvJd&_5g`<HsPJd8M+%{+c=P$%5~<Rn{U#L{CsnkJz_z<O?1JZsvuJ2hF=
zQHW)0;)Dm|wyAKO)p^I=J-KPJ?6$baCWKatTSG6|e&o=cjvnTE&Jp}F*w#_~(XR8%
zC}#?Xrf-?AhoF~u>(e<ZB4f|$+RmK}IafLxMrwA(yBjAJP%<3yCS{lIdX3?SXcR=e
zS=1m8_-r}RznjTX$Wp*#C#+r@&3$`!ll9hJXP0kye94ZIuU^e7cc;5Jq(_1Zj`0-B
z&4^TZuO1}s(&vBqn(K>@vTC(}*_9%DK{ZCS$&jP`itS|Es_u-y%f}r{V(&cd8<!Kk
z?}}uI_-gw<*|`x<^+y)lP2f06lW9klq$bW?Gu^F<>_&`xyH(3uy!V}z1zegvIJ_+w
zgUrggS+?_VTvGifpD5wdwwN6vhcwnL5o{QtAyYXx$f+ku@$Kauu5JnJfXNs&HT@d0
z%kP}qTb`g$dXA2U*4GCz*Jxc`(3Bh+QcY$@r|s3)o5=#p^jfLII4zUPQYI+NVcNB<
zm1dTl)fGE9k{6K_eugSN;Ux*PK4S;SAYkySll$2KgV$TR6V^gBhDRx#)%VnrTQ=r(
zihHB+9=FH2qpUsnnVW`>8e2k&NH$BeQlR{qgbJC!sdMMfE!gN2{7$VRi58qRl>#YX
zAiL!#t9AGGDJ$7Aq@hMR&%k8p99yq&WOB-oZ`yGIm>RyO9L62LrRlhzpcy{ZGVQoI
zxB>?@TxxQaOpSdLrhe7{H8gMmB*>>LCrRScx1f1+_4LFr!M0ql$pJc3*#wbON@Wgt
zN)P+5Q3?nWuN1#k4`?UAz+K6GdI}Qi%$qKci6Fm_TaI-bN$*(zcU4_)p5a)4G~XN0
ztzk(koVc&E#2h{mK?aVlm}?8%zge^@FE(`Sa7a#Db4)9bKtiv<nrqrwc`K<)hQ0p*
zzb?x9rm?U$)<=UU?s6;2Db~)pz&D6QJcMxxsln6cO1I7y`xlXMx|7OsX*|cLxDhRs
zhGZ)BTVmV-nUva8Pkih6wCbdnU3D?SSl{ef`FO70A$Kg{0buaFbn_8(P^=lY^nL}o
z$W&AFP|I94Xg%~A#(K9(n7#J)4ghbrYG#OG7t85L^PZFgR4T*FDa7P>=dtCWDQw%P
zZHRxmE0bd=Gi^w1Gh$H1oEQdtpha`_T5<*nA$k9yh$PRbhpknBS639wkV$l~%jA|j
z7D^GF4cu8YugTci2F$QnzojYN2ZkY|3OZ=%5{d%nvmFgYJWbDt)sl~>6h1A-*Y|rm
z$o*|g3Y2_a5r1G9cs3VwdZu{qIJ+)RT$57X6*ep^EoYTI;JFA;<|5d!^kpH_UwL54
z*O;+DBECE{BpQiNmateOn-LYPc{DYMf}14>ilDfP6i;KRK%?w3pAhNWoFmDuZscNV
z524@~a87pNn`~u^9$0;MiQGT>MoAUcb%Nmz;S-{vTDygwq`CH-Qc`q9m*^5XRH@Q;
z+KOb*zC4sFYsHw@X*+ye-(%7SZNBn!mMW{0wq-vVdiQYJRkZE#%7&(ASTk|J5-rU@
zzU!>F)>0*Uar`PgfvJ2{up0$ATk~YXcBVR$0VYM7#ij2N*U565@#4+$=b>LE>jmkK
zx7c^53HOu!O;LorBo!vs<SLD+TG~GdCq7|;;gNY)ytCH({Wx#<Scs2pp>${Kf@kNa
zkr}R$3q^OP<ZLAKEu!|y(P#W@3Zh+SKa-0G-*s0_75jY0vsOAYkU;GT2d7eka`V8N
zIe*`WC;jt_Z!MMezZi<$trc!2HqTLC@1wV0+xaw}U1eXTQ(OOKcH-Kj*^>$~)2vv;
z0o(RX(eG#$Yuiv8&Nl0x>J-EaJuWq9SSv?uwOB`$>}ToCclW%9SZ^@=@+~2Gs~!Gv
zaU^4&&y5L6CT~1Wki5M#<htj4O|M4@W;jw4(n(#%AAkYdk16xykoKlW(-8Ad+%VU`
zemt$IlDY$pW%V${WOg>vee&&fed<ro@kz)_wTZ}M5)b>O6TPyEF-etA@87fqlu*G(
zk8egipNLlMRth7=!13~j!Cs$u5-JIcKco|@1xZ58^@M}DJip`CqJyfusA=I-T>_7M
zbPbJf=pk%ogZcA!X3sYyHBZ0i<$6)Bl=Ile6$Z1@A*}cYcP3r<H2BIj63+SlOdjnE
zCg!D>=tOIaAs~xEI2hKR-Hp7s2sDQ!={AwUkp?Q88_M2NZ(BvLPwuyf23%d;Y5*r`
zM)Y=Xl#6it{F$ctyORU>efzM9Bk!J+D@-QHFms6x;nX&W6h6groyv<Js}BjcX+QmK
zgfwH=Pz9H_Lv&ldHRezmF$%(|Js|pG$Dg#O-|1o4^<>n0@m{LM*3%AxjBn2>mA~Ub
z-ac5hNY$G&fkU-&DkS5wdYOaua{QcNrmsUV)TqJ^DKi%v<VVrz_7q#E@_x^;Tl^9C
zFdw?K;|K%Uvnusv(n1Z*k1zuQY&^$<JxozhqaI3QQ{HPZh>FeanDUDCXen`u?+(25
zrIWY4J#Q#t;BDsQWNzj}DX`lT<A!G4zO-Tvd2>%Ty_@dDywwgFJnpL2V>Y;7I^w!m
zt*b0!=sqTS-8p)MK%_w6asTtSrknHFlRFo2Cv0{zy5>!}><4kSItj?8ZOe8qSYWv}
zzh$qVMkjibpeRxk==RU1v;LubAuMVQChU3whbeb=&>DoNwTW=Qb{;yf+lrorhTE53
zV$Q9JnkN)m1dic8Xo+(hk+-vd?7^5EG?<!G<>fRGE{;Ais3i!|l9<2EpE`$)A!g{!
z^#>A}V|w%&<)wOu3i(gq>sSrN=JP@)g3VXd?^enLQOYw_M11PJY8N8VS<NHwm50fc
zELZR=d^ve5aeCLWB?sTwbWkig^2f@wl4h8RZ|K=CPl}fo?*PuhesuNbvfY5;BW)*z
zt_0`E7T5ckyf!;U?p~rP)N>CHZ;rmJm##@x5|%7m0fy{64f*H0J+AV~Cx>*=nbO{v
zY>)F(DIlO43y=MB(R5`)R464fb1}!a-mzYlF#WAuJ)_|LV~-2-&=&|VeJ9Om(doxf
zDj6VJyRx`QEt}(yZVdMgiSkn@w^+^A@Wx#FXq=IS3GI|EHXaE*%td9zzY;vl)g_Nr
zMY&PbiDn)e1s7{Z2=PPnug7S%F8sK3s4}NvdpF_L`i~d(g}p(oY<VTq)*rM7^e2}y
z7)4@kFJ2D2I_z|)YJxu^@OyMgzW#my_c5<39n!7W&Q$hhVo82OIqv4I-t7`k=wzQz
zXzp;JYq}^t>yoj6#hj|n`0%-$_UB&GjD>siaTbkZ8MkPfmWEOPPkY}Tk9FVnAId5k
zqO4FMyUd(+k`M|JPAhv0r!6a#M48zV$=-XMY1(^l*<1GZJI=bg>bb7xzMuQPpXblt
zKfMs=d49j&&*%6Y$NP96?>A2Fh)7q-uJyYlg+hl%d)y<0gIP4^{-kYRlcMFqEto#U
zl{Ns9)E%bSfyCHt!#HfQX-D{>vb$Rd35L@HL{S$b3i}0*R5kxgIXv|<Y-;VM&X@pG
zkUw>365P4;r$R8l9v>^`x6In;VbUl{Fkj{)WYiM+pmKYLC5|LE8mF$6By$OhhBBh^
zyzOM1PA%too|V^GRl0~nV2(XFv4znw1S=3S=iws5Yzdzeirp{83?p7iNByeGj7giD
zDm!O78_l^&t#fVeWAdMRlay&T3PkcNi&*`o;i`4}fYrhVyYGKf#g=V3Bn-3J0=I6v
z%YDQERC}>OFRYGCKH8+<F?lJKwvW4Z^#iG(_(@h-qQkAGUdk8^sQLm%!xn-ZXl=&q
zJ@>)Ae!Y0%?ha*UJjrbqrMJVVQ>d@0q*Sk1LS_s2*&?Xn=UQn>DfjUNrV1n`^|aGo
z!+`Q-oWX)A{tklD(u5Mt*Li*v@Gh(0fSD0Fo1}(Go<OJ0F_mK&s;h3De2T%_&<ZFr
zw>_1rDcNzivLIcfOquYs72Dh^l0Xy>iVd0r_D5S$yw+_n9FA$Fi9<qK!D}LG(LqoE
zxz^fDR%I;kMrdL7k-Nzi+Tsd1_dh8GK81Gr399cYOklmE$W$E%nw!K+u#QAtQ0E|^
z#aX;_@gt_EDz&Qynvc48^$r$U!Mi-%k}{CJw)S$E9#C9*z4%m(`;j3OV(a^^-ag4|
zx9}7pLBX4HZ2jsO$OZ$)tChnbLub66;&F4^X=wwJlZ=w4P~|H#zt#Re?zk*~ICfT^
z)1Ma?|LD9vC-u$~4>3X*@r^n0*DQ|5ZG4rN*)IO8yP4>4)zP4$I^W}sArYp+L77iu
zr8>APAXY4OJ6#x$*mhMIki2x)%7=wJB}mc-#XQyFYIsvDH1`f?hOa619{Pb)tIJDM
zo|ffL);0AWgTc0|{F4`Ve#D1H90&Umf{4paq{_prvB7I+vV_=14QN&zXVm&5RnC>L
zWUW5j$z~m}s%?(|=r=`q(7CljI9#FlTIfRA{Q8+nC8YHh{*`-0LU)|xPy?cF@yeRh
z_Hnbg<y=Uedu7*JKS~yRf=bh+dK#CM(;Q<IH(w|ed*%&%p&Sp-l)djtan*}E+5>;v
zp<&RO{#!qP-oSghPf12%T^{^6#Dnvi*DcChNf}0tsa!fmN%z!8YsMyyZ=+kcsLZb1
zxwN=ItnJK3ottD(eV|AHyM?d*_kEwOU7ciYT(wd~(D^VX%X`C_EVNd?5lsejGL8tx
zKkEp5a*uk7_KCyIq#d@QT{w8ekBJ|3R26s57$Pp+Q(?^W6B!{?>!P^z=D^P9(p9{+
zY0<CeB^vP(RCk&^`VcQwo)SmK0@>E5F&vNy6)Vci+U_dO2YVZFQ?!@aAQLF_r{rtg
zRac?Potb6k$H1LUl~daM8vIh2HKjn9YK1FnB$7@#6&=%j*WwI2a;lRfW|hZn-zCeV
zliYJP=ZaS&Hk<TsP|Wm6FiJ?9^6Ny<HLH!N^|cVBBhEJ1oPR5_bJcY_e@ioAetHtx
zWWGCjs(vU)n(i|U898@;lt|0<xjH3$Z-ig`<9Axi;S6`Vo9&0N*g%^#9D$nYc9n$;
z2iJY(oe3MFS}hAFl=*J0B@RS((7~mLW>-d&IgnP&&_xKwegT%*+OM6Dlnu|mKm)CC
ze><(|Q0JeWx1=t-jAqYzVwG+n7;u|**3YSkvqYyQ2n4D(C83DEf&1EXsM8{nV{{Hf
zCyk3lp&+Keq~c8a(#|7CrS{omir!aUwrgBZ!(NH|`uV6EwR8++9Kt2?-UA8YhSBW}
zFqEIODdI8h%>O{1ZZq!^Gj*eJ=~&YZ+f#GEt!nrHd18K6!JCb<JuqCAD~IVyZP|!a
zJ6cM(O{!P1iu)XUfhlchr(Bu#TxZgZ99s7GGIKnq2~=)Q3*VLA%iWG2n&p1m*ITq!
zydThUyTTuaWMzsySFWyA23OJuh_`WFKvp?w$!(-you!xAK9_vv@d17RB;lj;=D(Un
zdP<_=iZMgR(euX520+i?EPYB<0GR;)jIH(MKf?Gh(+R>6LXP@b#t$lG%7OWQr0KV5
zKl5O@&NKzHpUr;$Li>ohoA#O}Xa1Af2|YQc{YNZw{c#sJj@b{K1>kQtmtU+@7NLC(
z{R0tMFy0Hh1DQ%<JI7>63;)5!v&X?1J0wkLi`20fBj@N&aa9U1T|f(dUCHOo3RCg1
zWgRBFeR=VdOp>0?qSQvOJ8)2R8Jnaku$)_0b5k5q{<mBbvU@%cS$S((QithNYG9pM
z6jZ#P8fJ5ZA`y%ijkZs2IW<Tr8anK}Z{3`Dd3vW?`<*7gEoYA)dZysiDe{vB`+Hw^
zB=s9D8SBwIgNmZP1F<S{u~K1bd&o5Iu|R_G#T%qWeQQuRB|RrJ#8W@k!*M`meO#sb
zEe}w<oFab6=3sgaz#ER>c`J)IFms4rV_w4RhywF8kxH}2i1MWm;68W}aYFs6h}U#}
ztW5!(Mh)8qoR(bzm2PN8W32z)1Oki*J5pWKZ4cFDA2RY`-lHQ{vj<9Fk~~bQP^u7r
zSAozJf7R^-Zp;z2koDj5I;+hkoh>-7B~(ro)Iy`A-rhg|w8jHfoX&hBXABLoZsJUO
zTHFBY{#&`TxymmWIy0ic8jDYRC;mH7<1u`qxfy$pIx9)PE-azTESetHL8BFxx#>iG
z1d|*>R;mh6OCpL^Q+bNvcoHGkPyixo06%C@<flXG0AZ&Uj!W(e_f;E7=-8Nh0priv
zo5|S0L+%=epW=$!_@+>t=;I#ruo@CIh%$?BV_@Oo9q6|9D0S)PDSL1952`?3{Y_2h
z*crl+=0a}Kk7_+gk+yqTJM95aCr^sf?i}Hq6%G;E@KPYWf-z*)8?Oz;l|)A+ou&=Z
z0MLqq2+s++1_N^OKGa|yqE9ZIQgtd5WJ_;ijB*>kO>L;`v5vBO5UVtAu(0fEY`hk`
zfx!u~C%q|#g;m}xxBeWMgW2ggY|u`(qudzpza{=<)v?wQ`V0;{e{3Gn05bdzD{qGI
z0d^YHCUW`HSW%O_G}cja;2~3=$Q(YGnLW4B);b#_{&|p)c4>`<9+3BZkvMh{y4MEO
z1!e0N8|SS@Lo=JP($a@wX>F8?mCr7*@-W|!`jC3%>#;MN<DsWcQI8XzSz@ichPD4p
zCTQXV5{q;{tTriOe6KS6<qT9u7zolOual>0GE~lcJb*bf`%%by(o%W;i$ez^h=r~)
z&GQ9WPvml(H!4pv_8l+2#yoMnQpxX(wYN<AKp3qCL-93U=FrDMfjehjNSMk=p{IQt
zbg5@POD`%<9t0YI!}W~}0+po=Qt6*;VGv6s{P^X|(}$A8di>U7j|IV9XI<Jrxeu7F
z!7}U*TqiJkU=2f<Rgd+llsPR7vP~&yj5VP5$ZsXD*`kU;y7-IPYp<01y1H$$&tF)1
z1Fz}jAwo7lnZm(;putci7fvdHM3!b(Xr#ZfbW)s$E@$x6R0vu=iLx!{Rc30`i<MK4
zg`07IYZ@{UO!-BE!UUiEEORpA8#h}LupA7qb$fF4^+8oBA<hj)!}hLG%rU*twb`zt
zBm&qOw=idx=sE!v)Rw!kMehm1*wh)kkCu^fW&3F=wrVS|QB2qXNEYdqe40CT<Op!r
zi;B8t?>bSlWq5<nrq8V`)k^R<vv2`J!cZWKbIB$;naeR^tLuX|3h2fgMevx0HQANg
z%`;=Lg2(tnM~xgT5+_aHxnoW6d}VcFQ&Bk)=<m;6MWzgUA>XLwz2??!akG_45fSD0
zJz=U2grq;Y09lYf3Y%&i?}&d!&Sj7|m3#jaq47{<g<~Z!|Bh|Tx3N5~#n;RFUT|Jm
zo_u&4NNQl#;tqO&E$?>WP-1#0Ukgd--avo67!JQ}HIMS0A;r~)_h_XrKVq43_SqNi
zO3?9IEME!e+PF`&Ux?jbP)WA85FNYN1Vm_GOv{6J=<S`?w=Uf=AX~7}f5UG6D_u;K
zfDzn$qbD#9#LHpw$InF{69BIN{?WK@;-vjvg<cf0Q&f27@`@+cQ4f6BC4m`y3b83e
zj2{~pyvxeAvkp715_NstWVpLroh=91a(9V{)B^beA?{lRUg<Y$m+tRZEG!<L791=v
z_nNh?dntKzt6$X)xa+__D%0v`Ob%|84`5cm815pR{q~V>^1M<ZrK9M6f3P;Mwa-z9
z!mljIk?tBB1<QBm6nPjpZ}}8%n2(#K8C6*c9DWbS2O}fkW_)GuPes$6g7%O9*6vG}
zRq^r^kyKqeV<k3wze}j?h0x7MdMmr~ub;}q8l8!66et@lsj!|(oGp<Me_B`F6i^#P
zlw9A$wM`aGm~?*Lj!OVZ_qr2m-1&ne1%Hw~qZ#5^B4-X|h=z%I;XWZg)tP`(h<g7b
zbN4<`Z|B|SbdP@6KcFCuR+YW^)Q1)6JYO&|w14bPn-h;odp1c4%JYsB?tN7Qasn0b
zFgiX4Zn#%ujkO;UpI*5Oo2QDux^bpYH&DnRE0?mmD<F@JdN)Ii`1j!m&pV=vJYg&<
zjSIa%j#Z3)JJaJ9LxrJyuVhc^)riuhWzM9hMVhuO8bec^c$MAghvrJuVX)8C@wIzX
za1?_4O6j>bBm+^r=FE(8(U%*h30pDt7-~@8K$^n;^H4Z5s#Ij5;Rq`B3OwupI$&h$
z(qdy-VovWueNzp`hCcM(?5K&@nxCZZhX6+3`sj*Li>NoGR?=XFKySaWGRlOoozlK$
zQUG<C?cFtcnXs2%+@J-0T19CCs3SA&Ogp6(5QFAtD=N3=jwNBtE!wDVj|AeNfVF6I
zm~&J(WW7CZM+_e9)Z$5^7oDJOg3Y9wo7m*l1lxjW5_XlpI(pD$MYd%qnVhW(Txe78
zvSdBCa|>V*q9fVfcL1hz&&H88=VC6Ss<^#3$;2Bat*<}x{;GB(=$3$p(L3@ob{<gR
zwS+F$OMhqU{|2h8G?yz~*oyyf?8&o6LlKd+NvT#;3)iW)kWg)UF)ZFJn@Jg}CQ3RZ
zbK^ZJF_mnX562vjuX^P@_6Yv$w@u>kxqqfS!MiczPs*0-UfU;|(|7K-1ymQ!%10Uu
zK1_YAgl4Xt{I*S~((Kncy1mFVDlM%>rm@V2d^P=aXB>S&>W$V>-_vJ^jGBWKir=3R
zi4D==3VeyspqvQ*61C0C|A0Z&WWy$A7OA6?YmFo*(sgrPe-KePSL~QB*|y91VDN#I
zpuL>m<kRO{AJ|c8Q9WRyUci8)3wh|(qVlr?M7xBcriXp}_|csweSQFV;BSOt&StSp
z@Z*iljC$a!SY<LN?lg;`)pp^Oz}ezPiq(;-An8iKn%$6wtG6A_DNq;yDSvtjwc#{9
zmE!ln0Z&BDb|!eu3O(g&KY!sNlX(<S_kc%O<NwC^H_=UxqlD!kew^!uW_g6cEer|_
zv?Nqc4ph39IZ87ok2OSfar8VPVXOt~1e2K=y=owmZ571i1<A!D3rs>C-$J>bP=%`W
z%e<kN@iODf-7Jt=T6{|MJ@@id6lL^jjN;?ah*>$N^7!dfu0_Vqv0XqbtHDP;II|G-
zIvN<ST@*WOvy<aX7@jn^92lR2CPLC)Wv0k1;b=!%GF4{$X9{GzgosQz7+6f(*;%|D
zjbB~y@S(mZ;l{4`=2q%_k$GR|KJtobCu<2<F_jleF(GxjvvoMld$|=4U~-`#i^!RG
zm<1^|dzEG=S6{|2t_&O^IJPD0WH>4=0vsW~R{R#YHC1#crhw~l2WpK=fO-Mf@TnYo
zYr;@)>fN*n5|*;}q;_-Nba2vb%qYU>$2d4fgmri4Kf_uzyL9$FX*AuGv18JV9oP<s
z4MhR{{M{o7<LXyom>G+HnR>tXe;p#+$EOmoyY)GM+SE5yt#8Vejk+jI#O<M5WQoxX
zW<)mHg!uILj+w_(MGWAmY<8e&f_8KEW1Na@eKzK`9w#+8wQ{Boy=N2KZ+BPxiJzbd
z!Nd2<S6Wxf_NNgoB6djTqOgppOmi>PYyU?q(E^ML1z#+7nk%WSQbO3yjiBDPRSMB%
zx!JU%#0D?4(<VtBkWYtqcziOIml@h1j-b(f{a$~DOJZ#QN@kUtn((65t=iBfp+n7G
zTala`nuAD(dO_4AkSp}UJvBQ{1vg4%2s_JWyBp$r*tG5s?;NcWDvH(Wc-PZh!&MU`
zz}(N~QbnG5dCcQlYq`%xVU!(x4Ng|Hh_Io%xOC&}zTET1(c>=%CZVXHzrY?^{rGa$
zsM8N<14V3^ae^&4)>gJXw>H4lFlqd;t7f0j;3c%J`PYXyEG+LyIq%CBU(4PvOwjrn
zbVNJxjj}z7&5kN<f%j4pBwKIzWBR$A*Uhrtpt1{zsn+jG;^j;?P_dPsmj@1Ed0|)8
z5W=X38Jc26D!n$uZ`y`E6C^6czg2F2J({;1OQuoPKoJt9=><2_449zDkX_b2`r#2`
z4@!fc8Ma`}BhIST`IB=c!qnEpkkfv;nA`SCVMEg7B)NW*?(A18Wu+n-uO#chC-pj1
z)Dq_DqzkJ^OnK9qroyq)KfMnF&uudHRr8q9z1TayN|+PCjP<2?*nRkuam(FX804<w
z$R6uMup5Z_!ZT+MnZ72A`_4>}9B+nVa=_d`S(nR=IPm`~C6*USK29UtZ|3}pz$XTQ
z3c@h2+SSV)9{AB6o1QsL`MnvTm-Y^d75%PEjWcsz;05vCft&Re4DU?zDng@UejfBY
zlYlFqtMdVOr5nuYE+WWzF3`iEAFoCKB>>a7e6vW@p?fkZkz+A{C;?ZMhEZc86|3H<
z^-^mmpeegro8C;v?N*b(2~MZQsi>T0;g-TdqPHd}^J<{s(;z*N5*lSuDn)!w&?pu5
zxupUILzIO<_<9~KqR^%E6<`B*XPp@cUueslntTI0vKMC)@=MDyKOeCv6q3z}sLgSp
zD>V@-yHug1<BKJFPdT%6CbgaTdu?>{Ft#gAEg~HroYC3($0sk$4UKjRU0{q@S4Wpk
zFWzT!;;3fc9!wpgEU;bZ?;&pKjN@wM7|<MIT&?Kt9Rf$j>x)laVMfNl4JgUAOFOoh
z#L#}BeL;T4F=tou8HIj;)&~Mb!VgO>HM53PLh_KwCp$_ndQ4Yjr!xa}pV@f**FfcP
zpgS%r3<Z6s?x%)xXbmEF&flw24+N%&<{dHRNw?Xqx>(oD4wP<!ZX&z!ikO|x6fq{F
z7rl(h8?U`TD6nU=;th49`r?+?`x#%C!}*RL6a9V=YmylOz3TZV=sD9ndQu8uk4_Ul
zIYD=t^t^g5=~f;4PIt{qkd@z#nT{>lXtXn2h$(BBbgU>Zo{Y7Loh*+VwV31|V&qkm
z_Ge;9e%(YbvvI3sn{($=)<tKdR<4n&B<Z&=bH`CF*tavht%};dTw(rz_oMb$KTEFF
z3eW59TKa4HGp3I87q5;?><$HfyxI4Fz;z<i%3G%E>sSh%;YH^4!j{4-9OExaL-T6C
z3~2_Zq>bX7lD__^`n}lJ#mmiCD!9Ter1t0tu&~=o$Aj@?82h^ubV!6mN@ztEpP^6I
z2}9x(M#;HZ_w-wwycf<`8rD{#(ZfC~-`9qgQoau+6YqIwlW$0C)`VUdY(*gH<kv;F
zOtc?9sSa(nB0@Q=y<W*3waU+V_yI4sZpn^d<aiC_Jf%&6ej$6wqeZ4FEXk{8k!`qR
zOVjGDCiSXq%X`F*iE^Jl<|PRW>_$@s<j0KIPY>@}s|fe$+5#@h)!FF7a?jVPojp!g
z*x{31ytl3)rRg7o(a;ffkcMe9_B+f4T;?reatKrZr1}^EmD*4iL*Yt?ZwXhL>p9&E
zfybQ-efAZ{S<yqT762(EaDBVyM{EFbD2|*v9tVv_d<*|{{<-`&I)@P5u#82$sBM=*
z^vQam73tR~sHd^Yz(}NjlX;AmiP8`<0=M3C)cF|_hMzjbY&s=yn8CG-&E^FhVCi^W
z#^Yhxen63`1=8rVb=$e_mK4=viij?5YN6&9j_k(h{NJbM-DBL>>Z>U(^TL$b^(q2{
z;+ye_Dsc0<v0CPRK_3POCvMdt6btAb8ef=abma`nS9u<hu;i?dXj^yk9kfm38#I!V
zIdomE@BQ}ousp~Tk7iOenCN`h0ym+Ln-_uT-E=hsKKN&A>f0H7#RA)9_pBus>P84*
zTkyuLZlpY;<m)Z}GP4+knU98!Fr}|0O{Ue_%-xiGISJpQD<x;w*Ci~;I);P_elihA
z65{LDHu&~pZW|tNS1l}%=d~O(JFH{W(tK}E@cxjB6A5U!+W4b_j<RH120qkmZX!~{
zJ${ZAL-kc@scau&MJ-h%O-(+B;fAxvIgrJ)0EAqLQwOH;$wX}?gfON`O{io0gg}bn
zq^cE~89PloLA$%KM^oG(89-aswA-()1$k7~#5`pMA;6}i#oLIG@yF2wSDL%5XWc1?
zvQm^%f*MQ%D}C8jb3Y<sj~p?7TDf4{GHbdW`EYL=bzxId%ccM`mZtzs+^EKmc<hQB
zhOV+~C4=&&#h#k#n9l4YABJ0-p{)@~SsiNJN-l5=ObZjlIn6NfKlu76r=kG8Ml2sI
z$ON)|(yK8VBBMsb&nxXsTC|yn+N~y0jF~n`WwSkhqUkWj6$m5q!*?FOsLnGqSMaV=
zc}rVW#ni;vKk-R9cX{Yz4~Vt#TMLdW-9JuqzT-zJJA4OA3t#1SJo`#t9iv;LT+2+)
zefhe2WgC(stPn5aN$pCDp51a>;0jz<yrHyUR{Xw1=E3sE=bNG|Z1gMM)kg!zpU<gc
z>+e(<sg{nHel(hShyDb3RfR~&CDZl(%O<YbdSnru7qY%BcB>bSrxZ0xj}@qY*4<f8
zG!Qgv)K@KED=krriquiaba)(H;vl1J85krY_tE#XQO<FdW_|O)r`%mFlL8&b!<Xr=
zjTx+(_Y@wyVeNMqICkZ13v&_o+sKCQa8$9UZ~*?%pfjf4QYH84tiR2$MO4m|l0T1c
z;&A3d_mjU^a^#1kP)JfYajpB&A%6<}yjre~JQ;^V(XEwx`7W#Tck_;`i%>AQM*1?=
ztd7ff>DLF<P1sOq=1etw%==mjh%>pVA@GOJJ$-RT<nczk@WTupIVNS=>$RjrIRqbX
z&Le-!p#308H4#kJvuz9Y-2H@L6~%kNW7ggLQp#*`u;Me3NLZDYT3lnf0eN>~U<UN!
z9sm*O*%DUF$#tj~KWkf2TbVMIicoXwGj)1R+eS1pC+4LNfJ=!r%<$>H;g`ww^x>O&
zcXif7$#rKv6!1@SuO>1M&1j>r!bJaQK&MpoQ10PLQ_oa;EvPq>xIU>K7wkm!pUjNU
ztD2_$29zv{1}6Z2>ctun7ZTRyd=TmifN^S|w$JVm;NzdDXcYUiDSJZn9SJr?F_>`(
zaXps98G}}ZUjOyCe77*;uM^KwdxiHjA3)1RpuHU?X({;*&&ZNFk?5M}dIa^Q3{Jh}
zJ3nKO%O>%ZEEM=%6kJ5pHZbOr6Tz=$`PHoL%`<Uxy&w9G2Pbc`A;pFS(k&z1z^MA-
z#fv)cy%R5Drs*ExCMvn`BgFz`+~V^3Kc?_Kp0TudvdM0A$<PD>kw%v=QY?IW61(E0
zvJ4EB`d{vaNvcsk1vZ3YJT7aDh})n8GT}PGs4H@)sVSOYcUN;8=%<uT(}uWvbFa|)
zV0l4Nbv(?~v~ShE6l}_>&swH?9P32W&rD(wy^zg-jPUa@j%=#nLRHIq9Yb0h^L>VS
zNB8!WL~QQ);r7D>XopMs7i%b?pA7n!Ijxzfmf2-AtapwOl41BDl(R;(A^SI+n}jwV
z<7!M<=7(8ny2|ZkxE+_9?{<K>opSMa9bK<h-$oOtG|xj8W{3>VJx!F0ng6<e;|2xR
zP}neC-O2(!;JV=qvXL*%BVnMig@J9mH!UkrZIvRdlJ8#T>w8+sGcB)uG5*O+b}nkr
z2`%k~PwqeK2+F&>Lv;$N@2G)JtD%VF%UzBfx&V!Hy%q8sUOg(i&RWk3QBZNEJp9~}
zO)KN@Jnz7!xN$uF_i07iVSa#!1r06RcZXE8Lbq1Xoa#Blvl7b=^Sw-kepW}0+f)3A
zD4QYfS&vxK`^#=oup33Dny=g^8p~7Gio`nFh|6N+Jydv)ReqrBQb(z)`4QMps}ATM
z2l2uEnFMj)g#asW8oTRK=%&%&6qp`Kb3a`}sV6*`E24&w_v5DFpn9n#O)AY_T$j5%
zK3kMDx_Oh|ikG2dRF)Yz@^MSO)qME~KUKu?x}{K@dZcpTapmUwG?~v8#w#c%gLqNa
z-RXb>cxG;{`MBwQ^ps&br#QddGqx8{LQhLO-NCN;EV$Q;#FN*FhcLVlMKZKI3aJm!
z$|*CgSQZKeuT1$PHyImoX9fyO#%u6Mwz)e<9+Un`@&y^<^LjphOx%wcYQbF?LJt*R
z5h+Q)$+lgml4+?b2#c_t`#`FYY6BVq6RhcBYnbm$yc$oLy5fWo%N54nmBsV#kQ=vm
z96;v*!;aFMSi7+P{L9EZf%l}WUgP;}ke6o}xqGg$Iv}3Qb+sgTb=o%Dg|VtCn3jHM
znx)+bbpb@VFv~AK7wxc#2LK6DFnO#vFb|3PGtsM(ervb7F|!SDO7Z8a=FS@7KWfx8
zDY?Q`Lb~=wK4weFa^Z)-j2^oOAnx3(@3wIrCG}zDT|@-iN`LD5K>BcRO~rA4Ym)lB
z6f?4_cOaLfq6O6)FE$|zwLHVNBW=>g17Mm{s<QEQ&U~h@ZGI(=*V2T=6q@gHqb1u1
zXkvYjZgelIi=ShCMU2qh#!vt<6XG6lKb9V#Vp<;|G-*y#$-2(RslF&PtCg+o@yz=I
zDhCp12VeKJEb-|({J?+^;{!-M9Lj%zM<Fe6zXp3UH3Yc&lg;}I4PJUCd31j1hw0*$
zSv|E?CyY<&GdEMC65Q=1rB*;K7Pl~{o?Y??ac^e3AKYMW|C{0`AtAs=ij0EfK2w1K
zgVR2AO0#<mBki>du)0d3TXcVy{1gQF9#6bI)OtoMy<cB`ym6kv@^t<*Q(-OKAcLkz
zdXaQZeX7@ur`M-f$*1L}Hb5hu2U7yL2jXu^7kd`2q{z?K%qSKzEl6D{x-@uC*mTX?
zWxGyqy1*h{QRq(AZ8p`dS`##tUcsJre)+DBOS9-Go=tV1xea~pwg9Ix1(Ap;YnB4@
zQ<q*L%LEj6w)Rx|Q|s*+wiSM&Ge!zLzNeqy2N4Wu@&dCO5pL_iIr8~nQc|LJzpdr7
z&Fl@*pryHQI6bX>>=ii`H_&aTNGV0?(p_JAB|X?n)(Gi94_!VN#&L={Z%6W~OTfpE
zgJC*0>~$Lg7B~Gn%nBtI@WWcDt?SCPG{QvWuFEJuqy9<ZgPCPh&W*`gYc|9Pu8Rg5
znRDA%h3}ThfTc4@0IK+X{Dgfqjij#Lr$RR~=&%ai#zkBC3To1QBjT&!SEpI^2+rZu
zTc_`F=ByN9r8l*5FTcli3&D3RcsM=;kD}0tPhnq>6umd2bA<l9iuQRGdgu5_DP6~^
zXt7-D>mC>9)7JR)S9PreN?Y<iG)0J!qRUlo=Njf@a0qppe~AtsI;b?xH||*S4B`;{
zc4am0;T`4001>x|)f&bP(t?-_y{-`>M+hNN`}D}Fk%Rl`Kjo<K9gw1UW~#o_#R*~*
z+3{Qh<^!c22KE%n@m`NnK4&XbrRqRJJPC-(pV4rjgQFO=Zg%!yvE_hpMa02cmsU7P
z12CGTuD#==zL~`JMs+49J)Ns*Dm?>6FH{odcQzI|Fj^I3O>skK)1!bmqr{(%_iFl9
zw$uP^l2;5HPQaRFMNUnnk!$Z@p5Z7u(4?iAz&yC|d1BrP<DA%(YQ%{IsP{ST7mzl6
z03Z4hA8zB+d4Jdu@=uZukYti32W~_Taz_I1+3c`EOiYu4ZCt74Y=RC|lkiSDrb~1$
z-7Ai|<QwbVdN-BkL&UR}@g$3M|7?vx0~pB^pT{$6XcBX!r?NfuZr!Hl{RofV7fzG)
z5f>~gx8CHW?)f(bn8mdtwl$1_!SlI+JB;!i+pKY)ZDC_#<<Z0<;ll4yPD^YafPU9P
zwDP|(`z$Ohih3<4K#~bk^vL7Y`=7TH?X;=;<EsvJa!IOZ9W;v{Cm+Ff8ZF=d9HwO4
zlHk1y@WN+BgaE40>>JiWCl>ztD+vlcj8cNG5Yd(F!)0oVT0_BW6{=77ZzzKzebh{m
zS<n4l3jqJFM2$OLFa*Q7L<oMLt%)K!hQu=JAo2I7wBxhrH)1b@jFXW&M0<6r1yj*Q
zZF~c<7r$Qc>y%v`T9?>3SSVYhK$G|SvQ90gs}=3zMusKq#p|S!k<=B!Q6CP(4@y_?
znZ?)5*~d*otEz<qf4^nO1}GY)QMxVjsFHm<BZ8o8c$>W`%XW&X)HO!^OtMlAkV4vg
zBYFerI|KBRbS?DYp_W-uDUGI<E{=-z1PQIUIW&6OH2mSDdamA+2Gk{@n9hycu5K+|
zNH)kbD5{rQWjM&|*48S()W_gUVvz<+0CUc?CoHNv$zEcuw+o_ibp_|nSE}JYcC*f9
zg|gxnt2?hQbeXO%46uNj0r&cA9gpn+-V)5XCB+c`TIsXS$(xsh$5(tbo7y&tSILM-
z@{zu|>s@=(lV^!ucbC{Cw`8qMG>{N+XA7zT!HZjE)@Z8qg1`hK{DO4)FRaAf-5yhv
zR6T5Y?g6$Dj3!lDzQoB_pSMAn#9f_d0saeD;Lcb?-YE)-nX1@$lkd2?8`)B*)scBG
zSzos>iaZm6cIxAknU~Z#7Oag1LX>-(*BMik6W+A#)EpBiUT!kycVW1({OCw+%*m>R
z;C=t?ncVszhk>iR8@=OUPRBoL^>3^t&|%@pf0DMHGiTDIz0~q-FMuk}iCTz~MMo9q
znd?P9sUQeYkCjW3#5&9p)=ZZ^d7C~^;MU3>BbK4U9==IA*Y)Hn3BNUia%TVI;Kxg%
zOd*UnJ+T$zDwx(g%~J*^^G|L*?|kRCn$MNdchw}ObC02@(us=SRVGvNi_|_+OyRQq
z^4@GJqUZRZon80Y!?y22i7jkUC3f?XQ$$h}Zvol+ri6onAi~P^ams!Z8olIR&z_!U
zIuF8vHN0FY5q{k6qIl8MLx|@rGGu*Ld^<7Iv|7}UlFiqz^V=^(L&hi#HGG39HlkP-
zFVIxV;(0t{Z{$go$y-li#P74z!)(~w8d8Rz+7}78UB?;)7H_GXec6b=2eY;}p%Q&Y
z>5SA^eM7UiaGHwBtpBlb$yR&ETDHiKwg+dhd*#9GPTJsbs!m1#uIG$pB!x>ndIkPa
zhVTq~^jFK*6ve4-grv+D9ak7)4_)N9iK(9l@RE0Mqk!0O=)iKY+;~OZM9nR^P5T)P
z-aa18PLBf{l)d?$Q~vRM?;b);!4!K<B}<d1H$KjI^`$l7DiL!00i;-H((1Rfw=)m5
zb+Nk+w7@?ZU0n+1ix&a~@6T0&ch8NRFZj-wJ1Z$E`E@n7_C0jXYU#Q!IfT=uF7H&>
zw$bw#{|jS;v^=%(fX^(_m{iyGXD8<nmOVa1QHd~i4Q7~Zy`0)M%w1s-+Im&cKEIA~
z7UUScDipHh%zJWNofF9X$pw^qix!`o)d8zbJNb{py@_BGQp~UG>aDV$7oxwCO%8^Z
zR=;E*8Bhq%QqDE74;iZ=zeFl?k=WDkNd?>5kl=+g`%k!t7iT@TlJs6_YY8a@76_zR
z9SP)Ni0})ysH790(BzJ#Zr>#~-oM0m;Gj;^a_-mX{c?ocVHnb>0L$lMrVKE58kPzI
z|2ON_W7SkF(^CQS4Z^DX5=avcvL|O{+j{&uGc{&Y3`&zUsq^3BB>%2axf$$^+XVE1
zrmGiYMliBA`?d~LN53a5lt*AX&b0lFPPCeXzb|7GUWU4xiY9<5AjiO5LurZXw605E
z0312^itgu^2fEQhZUdWIfvHeCN?}=+5bN_FBRb#w?hzTA+QqHjf}f{R>7W%igi6LE
z)g>3LesTf21@rK&Vp#H4xxf4=#kd)OA#76e$z^H<#))<+fKx9Wj5wXwuF7Nq3P*Fv
z9{OND_+U56+GyyJA1O<1plKI<Uv45~b>2&03m)VJ!-?LDtmk2M+Fy-OZqp4s$AA6|
z2lBGP>9Vq0<Shr6rAYUx#Dfo5CGZ@4e0m4X-kP_BxX84Gh*Hx!PShLgl6`$;S;=(t
z4EyD{19LF+#J!RcJf?a)=D89^qH;6GJ<FTr`j;Crb*fF(L8ED$`6`k9Yme$pcb+}M
zWh5r5ZuWCEnnY7Sei1;@M9%hb$Gg9E^M#qg>_G`R<A(|4i$(iAT~?NtTsOmxv(TQ4
zoNM=0BH`=k`#{>L;TJsdy0JF&?NtH-{O2@-OqWJ_a9nz$KmTGV&<+#j;p%_3IzlZf
zXwrVECQbwm#&Ht1>%1~8JrCA!(_;keDW2N8FTeA^*<07s=cPf<s}Udj0aW~2Oox#d
z<MRwn`E943f8z`MwluaCpH~50MGcUGqXV{I$hXlib=3C#I<fN@87df!i1gZ6+h_ul
zoK}~?o|P_%gN$zQ<t&zZN0});{c6Tk<zRnLA1H<x2#j3FDIcT#sf3|~+0L{}<yWXd
z?~DcN6IAf2j?LUdT_r9h8%BQ`y9}eTwOqb=Pi;geN&^Ch>4@$-FHK+N1U9h8gddp2
zP%?~udB$VUW3;4AZX9Y`Z1I5uyzNUarsW=2IV&<EKD}w}dwsUhqV2|wK=KQ!xq7nJ
zB9xt3;dd@b)`qb~kq8|aHAI3fmG6yiPgIL}tZ{!ea<ylYE9p)!1Me)WdZ|)xk*O)W
zdbwVT;Jqa9LRGjbQCc|PThslG1X)!l{G;@{e8dHi3(9kj^U>UqceDyM`$Or3wyYNX
za??N9pE?=FA-=xIA)t{bAnhbCkMCbgK}AdY^o#GEIm9WpJ2^!S;xRoe*O+&AqR~|7
zvVaeiA4vU0vwOnF19e-hr;z?qEt$%4(>>hDWkzrDemydeV<g3>*)aawtRI-A^uI)0
zL5@JHG!&Y>k(?O5l5{9Dxy~odcv!gUre|ZqX)>~jl!cllCqM&Y$Bx}0*Stddi!1r(
zSHkCq=NhKW<j;D=&SVl!K7R7#1#sQ!B6&>f55zDM1lW4ej$*}7PD_yDq}<4=(yPwG
z+tqIBk+5A42pvA4E}8pP+O5s?v`tX>58lSqQv6P<Z_S1(2j=piOGR0A<@8~ylf!>W
z6NW7?Ng;y(!)=idGb<s7F<^rg??>=0+S*wNt+x5bMaO5<eH&H`qyB=_%cNBGjRnrJ
zc^#?3MrachOsF`5C#};rzMu<|#8G!ecFcTMX9old8piV?@)GZiex7ieb=y~s<dt%m
z10|;f%dp3VAU&s4qWWFgmKNu*%N3*;IcQ3??b_vzZ8C?aa+k~!Y>kyf9A>%twsdjv
zo+IjhBJzo!jP+3><k>+)QF}(T?aNTF4!xO<@+(L>cDb=CO-A$WB-{NH5p5#Zu8CuF
zqTC)V{p@BQ!rs4d0t|YOF|R1q_(O@i2M)T@&~OjZ@5(+>@m!zWY%XQLrrJsT+O><O
z%9WCaiC1?1(AN9)*s+GryaYkG2PZH&+y2CrbFqRn`4$zb+aHdL<P$tEIEY&ZC*&Gv
zZCh}0m9sQz4IR)loTPoeby(1qy7v6JGiMABSKf+2@bt(T_2#FnPPa*diwBpM<b#jK
zWWxxR$eQjSlBJlpd?yP^v57>HK!0*9(VM4vc#n-uJ^%8CKEWl2{Sva}(V33V)-f+k
z4ywc<c@q)HMM<$EUzv1BjzJO&PITv@)+Echq!ISh_u2a@&7%bGWMwuWK#C|dcOxuR
z1DupVQOhj0ufj0vG&{2UUf7_Ow<JjWXbL&sME09+>F+gJFYCQ;FlmS?dhQ-io1&Wc
zro1^dRK~yO58YofEG>XL*CoH)sEZ$W)ti&+<K9?Zw^)?c(9`oeev$j?x5=lg3tU`g
z_Cm~Zg$sdU)NT@W0bVVqNNv;?m`<JFI86{{Xgc;hx~I5jFk(e}ZJjdLp-tp7yJkw9
zB6Ili?v~?D;mrX)xjJvRuNTj=-kcG6E?dfdEEo{)7=EQfiQjJ4?BPr;G&|yLJ&FE6
zDJs`x%lh>U#7JpCR@>SEi8H9Kblvec_c=x$bV>WFtbol*El`7kAvV`SUc?Uk4c=bO
zQd{E>@o@N_Iy;3P5?bw^`w%}+FOT}Qh<^WS_z?tjJpUm+`?+qN-5cuAb1eZn$T*Cd
zg@QuiyC*_<OmH|wxie;o_o$x()xTnf*KX^JLmc376#`9esREOZ>t0z*_*c)LIDPse
zV)TcS=pPqlc^drFIs6v|r9vT(yE)sLQIXSg&Xi<?@Lc?2_p1t*Jck_Bm2bhx7Xi}E
z)!tWW9q&+S7}u(gVT3$FzWv$`Q1TQ+EUT{Bh<>dlWx3v!6Y|()OK);vs39VLrXz(-
zpwN;pjz)NydU|>2fFck@J6}EWLGS(Mw}};ur)@+Y`trGCVDn7q21e{qHWy`qHe-W}
z%W{3sMe&P*%{)rqQ-on(>`JOk?dbqau~4LPJh&sd^G%xX3~4I8_)G<Thjja`zw7G`
z$6;?fXA_&frX9xU>n=?$;oI{o{L0PYRR1$5e*bEa{T=F(<sw~gxH1+rUhev@{iM8M
z9qwnc8m}b<g$QKAH}`G+LdaTAojbSCIN{)`@rb3k<Y{A^2#3COIH#%WzV{iu*0If=
zw`*f;s_AdHqET->P+arSSD+ER2u|!d{6UqjPIZ%91~2QvGVU2)WI2a$xP2~jIlg4~
z8v+GBu36@V9Z|Pug*9dD=6m(oMYcBxE|hy%9pQ_+tn^*=dpO@+<Ppmy&vRew-PnVZ
z+*res@X*0+Et3lQOlKqIDZ*1Zp4IV%Zg21gxw{`qX6yOsO7X`9yB`oh+^vPa-R|PM
ztLL*wnx9V(4{K+co+0`})!?^y^k@3u;SVug>2q<e%EnQvn7X}*_CL`R+UIsy6_T#N
zBd{KRhow6TT@D%GB@igz^bCU75~n3+enoeidwQrSt0d6zDA~<{(zW_8)B^e8mSh~f
zG>bc6e_S0m^hR#h%KLi<Yj^Rwc`s(T!D1=D#06aXZayVzs_ExIhgfJFn6k&MeWG$K
zg`R(3UsloAoyGAH-?USi!%B;JSH9=7jE8pt;OS*Y@Txr&s8l766FL8)3))g^d7s-(
z@-NF=zbDKTn_R5Kq$YdKOI%1yF6J+5L73s)J6@XE%QR-}IE^mZZAQOK{QTv2*-s23
zLXMv3@s>OSnEIWE%)c3n(TZbK$4_*Q*{daY>gJkuvFjcoy3q}m#?Tq;-z>hrWo_KI
zEn$OqL9&7+%WlCePh9dnX#f@f`Mb<2oJG#2)hDJ0^TPdUc0Byg3il)TS2!rgD|Z%T
z+J`}Ht-4KK*qGhTZSJaLimUT`(tel9+uu#6+*h#o&t?vn6FUFt9PkH<{Z854!#w&V
zIsH5LJpUkl^k1&!w{JIn4t2e9c^zk@e;>BP1LfZ~3v4Y|^f_7>)9JvD%|O{_fn6!O
zE1PkqT|mEYn8*dEw_1)Ul5?{p0pM>@>7pu4%3-jOEYp?A>GJU=`TqLth|3SlOI*5W
zoD*-pIRE4{W@eu!Rp>rD4Z^IryfcGxgwR4z>n-8;Ly8CUZl7ON{Pqbj3c{OcQ6w_D
zzxaXpswE+IBjI6OTtDKgZU0o4|9Q!gV&c$}ouRG(;Y*ip<{C8AqS&=&ulD|?L+_69
zI=YHK?$_Z{&VP@=b@fi9{o1I!Y2y9y+6g<jASz+oo9CRCuxz4=e2#@K2szjKPq!ty
z4OLDo6GidL0BM_~U^*PM5~N=HOe_<Shy<NcF9K3wL&X=|?>9IWtcj}Hghcm#yWN<J
zt7L%u0poH|*=g20D}hZ%NB7zNpNeSHYO_JmYQ(cV1L;=L#)<hqq}0FPHw@)Jn$Ong
zI0#8w%clfc&-e29b{1)-=q9U-55OFc1Y8WpIWCgN^>hD3@N^rf9!1qe#yt!oYl!6u
zcM~=(<Th)+bSG*~{OknVJz7Z6gNcCn!u5=#Gw!N!F6O9iSg#9X4_%+{jjSVc&AV<Q
zy#8{_L3F5+({-DB<y#GxAw4%YcLTc_=7|9`egSiD6FwsTa^?8lg#D!`8H>Skrft3>
zSdvF<$>La5b034{!mk7P?_UL-8b+L+^yVX+T4SroqQ82zn=(o=>Q}=CG8}Kr;yJ;U
zq~Tg*os@5}=2;?*v1z~a;o~dZFw#<c=Z0hV@sA!2c6Fn^Z0MK^vlVMa^W99~o>`Pq
zDKpuaJDlb?kxM${#&KK(c{czAKSNpiE!nd`zse<VPCd$e^y}9|wGQ9$VGo>%W$+TK
zh60KXLoO0jtB5Qq*H2SkZb_`+?Q;{<_dE7*6lJ4oGD7%8J~qg#C$}Vp@$C<Lz&rwA
zpZ7RLkN%c$V6N9HNz}|N-N@lG-O)^?HMHxM?)ro6kPH7fOw+!`tne0)l{kq-q=-*I
zK&Mo7lC|@<+xSi%Vv?1jWG~+Nbk#Dsg{*s5dV29HzLnmJ;r!&XpVwq4{hC46|I7Lg
z^WD<?`Y5!hbjT$gK@ro5Thjx1z9kvB9A^8ds4e}h6_%{(_ufbAC!JU4m@JPyY<nri
z%)oF1cXifu?t?-kpCuiQ+jh#gB`69Mb~6PUCb>6tTE1G2c`)DgH%F`IT<b-*H%=5o
zo9t()*M+eXZO>3|k`)r;`MyRXFfM2HougDgXS@H10-`tYjfy?@anrr}SIc;hc(}VC
z8ZGrA=53oj`a4zp_qFhS{m=?wBYmX<Df+HnIC1u@5puFs1UYGaBgp*MVSi#t7Isd5
zvn3Q#FLppz)3i0)%Ur<j&ApXEbF}oH6M+W~3Up($CcfaE@AhT6XQxzbr2`ne-${3E
z4F<VLR*rlVeRc#;Jd{|q8V#t4q%MJsLhfRdh<PE0N@g^xdd_!iy){aqy%3PItub)U
z*n$3n)VW~SVo%piFN?&!t_&6V&jE46KIdK$Vvb;s`io$pVK8G3_}HIE^7m~{js4)k
zg9Nw@f&1zQCyIxO9h*8{i4h{IZyih>;@bP4oN+Qw!|}z!(-ThEtu>j8T)g&M4T^P`
zGYf>kEv9x-Xxv!6G--@FxtE^tC0e5QnL5*P?(iI{LS$=i#8%wE7qcEAl$u|P0HyNf
zFN(0~+b5<m^#nDrcTa!Rt_bQZ0A-~_Q4devzFs_$#2ZF5nJ37}ne-RgV~p~WV;`y+
zG;MJf4Ez)jG{(3i%OcZ%DTM!sAb(5S{u)XCa!O!qBr))`k4478b)la1*(?Lus6vZS
zn95=7h#aEkksfrj%r6;qUPN<HYc5=x?<)w^mkFn+Qx_ak&@?#+vUQv1;ddBzFR{2@
z=>keYa;<6hae9V<2$%-N?B^|=wVCU5M>G2JUue2+O9N0IWHt$735n`mnY^eOKVSuv
z=Ua5iQSdqR_FL2x)s2fBYy~zv?A%=qww>Nhy&fxI$PUU09g3bmTFtE(FGNIh_u>Eg
zoc|vE{<gON_A4SFR#g><SX~~kvtFIL1G>>!;6HFtR?-e;4)~q7^T&=I4}UM=cN3KF
zsC)N8_YPFj32I{5qE2(%x#sERMcpf>;`i)X=;)V#n$Ws%ddo@|4DpkIkkHz}S^4_+
zH+**zb_>;=`_%tsS^n*_{44*v3l^nE4i>Zmet7nI+``z#yb(Ea=&xzazyIo@U_5Z~
z=gXim2XIzdxYuvT<-h-uKdzn*bM^P{|1>FG!kCo06igcN{k6XM9~bK1mUbrQ@u9-z
ze(H~vgGuQTj=9s3f3Xtz4|axo6gV+hab4~BX%XX$`96!U;1@IUZyV`vpYOlFqTy$7
z<T~hPH8cG2$gLtEhOocZll<?0|KIuan;2_A;XV}iPirbF@DZvyN&ox#_MbjTG~9uu
z#r^TAAN#5r<ISeGt$66rzp`@w`Cfcvbwm#PkC$08g$1%(>db%jfB(8v5G1SU7?gje
z16ri;y^3>y-EYwGzjJ$kd*s6i_?Sq;nxFnj?~Y<_&wII7Qvds>SgZ=`n9ob`r$KJ9
z3Vgrer1*be3^)kJfS!EogyuhQNjM}{!<^D~{|8&933HC*X-IzfBUSkSf$#qZzTY>)
ze-rpbAuCeNdsLcE{C}_j4`C0ooj`G^<@$O{Sy^R6y-VSSjg9RuGN^!ko<p;Ap6%Hy
z>OVfvusTGqO=Y(hwf}vT;k*VZxc_baxSy}hgAJtokdjG@EaMAAzf~6hVdMp^LDJ2k
zee^}=doK^;;mK%g$A4p_rG2+K%0^GS{57d>u=Q;3Pa~#Edf4EWYiBb4QYigA+W(Eq
zrM-XwXYlW?|Lj9*Vti)1Y>)gOT+=&U%pvF>>-RHOP{a4d;t_~{eo*`?|GQ)Xk-5Cg
z&FE+NyvhV0JJ{VU;9oqT|M7|7P6Gyv!+0^jyqTBbV_Vt%b}szmKmH%yeS|O?=jQ_I
z!YoeIhPBo2+vh)f<*QH@d5Ygk{~6ya!5r5!Yn^KT@12!@V`=<I?NFF!))*x8Ge<gu
zIRLz4t_A-qkLjN;NUJ<dU4@&B_~S!aVd|`fwKu%~?uY#Qo-4ltr>W%}Y46Wl!j4HJ
z^+V?H|Mvw&945gqEDP}YBf<EGc+NjwF$|(#^9~(4)FpLYOz9sz^35W+8~X!jsy~)^
zgeF9wTW*Ah{?Q-&<G1_kU$}$WrPR+KK4gQ%qGiv4_s`5U|Ft#hE{<IZ;+Jk0QkJ=P
U%C*Vh5)Vm9$X(C8rtSIv0EPSIuK)l5

literal 0
HcmV?d00001

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/first-ui.png b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/first-ui.png
new file mode 100644
index 0000000000000000000000000000000000000000..c86981f104db9c2c5fc5f8466cd45dea17138be1
GIT binary patch
literal 60664
zcmcG#bx>T*x;IJ!Aq2PJ5*&iNLjnYMcbDMqnh@L>T!XtzU~miW1P=_Zfx%^vLGI+;
z-`@4rxpmJUx6bLRwN~}&)vNpIeyo4}bd;*H3<fF*DgpumhMcUFIs(Egas-4Irzptq
zH%kXT5cmVhT|!P11)c&>EF<B0VvkR{9vaTp9^PhdRtPpu&W={B?iOxVR!;7pojpzw
zyTuR?-XX|Iebn^HIa&>lB(>=}y=%6xX>-E@EV#Wkc<yID`B_R-TA)kT_Ktpf4Y{uV
zyn4{`12LC3Gwqn&nVxz-q2bksLL~a(dgAvk5+1+Fs#o#Me;Nw4;o&xZu}%$b814_A
zo9R;>3J?9$Q|J`_F^hX#bI7$LSa!AMsep1dZPo2&{}nP=>%FK}iC@=s0K_*>=xY73
z?s;8Q>OV<(2iVCL68Z0R#4axs{qM}MEYkra^}iEMNpaD?OCn=alH>nfK+UE8zgcN6
zX=(o{zmqNWKaC&J$UH%vpS|kF-u<T!u;C<&q4;A@;{Q-)Nh!$1$q8Jv!p8YODJgJg
zxIi)j+J^q0YCjVG9MAtJ_rFWXe=}s{#Mj8DtL@Fu{r1x?((AoXQad3&N5CNgk3YYb
z^H)_BadDE=)C}QwSI+2+D~?#61E141(UY~#F^dGz!JF>qKze$5=~iDH9KjD=k5B{s
z8UpXrwcWGLK4Hw#XgO+XF8OE$_?_*9pI(%OhTJ$1UR_&T8(#|ER2R9R+qdq!>~1qF
zt1$nYljGaV|5p_(+JoE9(?I8x?6){ch@%{_FsBtJ`l!g^az-}zy`?2T<EkFst=m=a
zb=UpLTs0?kDJjerVegY8yEWzkS{xi-Z2WX7DNDm6zP~*P_P-W5t&WTo@jGFtW&Gzy
zO#l3d=%$71;{W0_GKc?7=K62u<iGNMtZrz#yBM>0^Ig^3ZT9CU?BKf_<Y1uU)BPpO
z`uO~<Q(erzgvDRh5g8{bbYs|<@B=g^@>J~lc2B%}%zG?5y{2dJxwo_KIm}rc_PXnF
z_qk{Dxu)l4l1`wJ@Y7qIB~WC&eyKWI6gohYFVyPDGZW6u6mRXgBO}RZ6HHZxNaAhH
z=`X)wUHMD6HAUIBB1u-0TPi7XM?IUOU4NKEV^W;$uaItEkqC8Om&bi9J9eUI0zL%0
z-iT*PIcr@bX-H8}VT|f!d+^B==oacSsyf2k82kuu8|>$qP4N(sk}75Z!9@s@<k}+z
zHn#&_qFsOJ>pnVjXI}BY>9(P}@8(=nK0GKHF8WTa%9d8ai;g>juKfPzm%|;xoe?b>
z4)W+%Si)V4uk2KrQcx`9eh@=UbJ1{cs1H-AOYCwPod8}lx^Rs%D>+xK#<I}k<#P18
zds|JlP}R}g`bV+X+vhoJ?4(Cl)G>So-b31YZcJMZ@BK4bs7H$H#cEDNOm>9l%@ftc
zXxSkN4c8NOuUn=*&C9I0suIM-u{vY4C<I|h{KsCL@5&?Ws*DQ)rezXRNF-YF^Fm7R
z?B*EL!Jb!N)Yvr`@flMfSi2As5OvsB729-^GQQBrBWH~FB_!7<k%x2gZ&&lZ84noS
z7c1TN)1N_8s8i>i!JR|hu*C$JNUFp6YB2P+iT8dhDl%4c&USL}Y7WlsmY@HbDc$W{
z4+muY6`m$r^DO$2Sec52BM{d|rU*b2r!WM3!1Cl}<XRX~xS!a#49V0+WzeDibMC`~
zT6Md`vtTEfL)J<0UV4J$6MuuYweYq&dK0^Q=i#<>G6X!)g70@^Ql#DQu5J&>8bNoW
zGTmOz^<{KSa1)HM$j&HLs<l@i^`nab{8+dF*ZumvYq5E{=e|O2Etd8%?HTK293mJp
z?8D75Yg^s&qF<Jln|7$Md0kTVMlO@SLZUsdQZV;^)n2DojV{zS%QE^c>XNc(E|YV4
zeni!&u%{1~ifY}K_xv5{wsMF~W=5%GO;vz(<%ht&z4to}2N>s{FTHEiRx9{W<S8<D
z><kqFtGE^jB$|N{b9N7kLOYoHr_?yaSm(5vmS2fX`&nmfFHIG>f%^O2TZ#=UwL`}%
zgL;2R=U+NmgN!TzUKg5&2K<C!R&Lo~qJiuCU{4rR_v7X~Q3kp73=9*_rk2k!fYINy
z=smKgHtJ+4r8Dm$o^FT4*GT6FPgYv{D4)(=2i^8ju00PHh8Vt|%}Wt818`aJKzQxU
z7?1|ZN42o<Lg=;lKQ+yK`=%shiyLz|H>%Y;{7$c2U3Rd^f#0kQi1!QSy=ET@E@nw|
z#H&WqU|V^mP$Ha(Z%Q+<IP+C=y(s3y@*qQ-RcMSQ*ZicoIYATo(C2VXd(U@YG%7c0
zYSEE`vJ|P1`e-wML~4|2*QyQmOlmP&F9a9HB};PY*w<w@amLYq1S!^Fo-0PlJ9)Cz
z&2!Ze^bN*m(~2f|bl3~`*C+G2W+BaAoB4WCea|3+dew|Hi$6Kv?u`XOM22pjK%+RL
z57*)k-@3#bpKm!;9_VX)^`$Ih)}Nnl9yVT!Z=4TNu21hv695Vm<y)my&zTmeac$FM
ziD|4$WDPhA<&npZ8@pnWnjCSP$=sH_Rz(5=yY(Z6B4>-IxlefBjK2LU{b8DYmcxOJ
zUyj-dpbR2iRZC>ZWm0E|&s9$T{!z6S7neq>e8by(OMhvb^K(5N-|tpCox3c}RoW$a
zr0}R*MQliatJlmltqv<-nmjG?$laeLU5K*+Cv7BMqMpl#$(@z{#kVkYTk((#rT132
z_DCsJFL3x;?OZ$aFwu%<#i(45G?S&OKk8QC@=&F*sZW53uAv-IKaeo;Am^-Yc(%Oy
zU!D8fwwd$5j2KKf^6gc+I->c(%hZ76`3wRA@|nBk!BkSK=y`fhVU^Yl<0(cP1<Pc?
z%Aic?87fREt$cOFttGCvi$~ReJW13)Jwz*T&gc5XL<-YYuGyK_$qfKq?X99eVs<kp
zp_u;meQ#v-S=%t#Da^b!Qo||z3rB(h3RPZ#=7?EMP_6-0wp+!Xq5O#Ye)zj$T~v-O
zribV$edS;7X8>DNy8KEVOUWe8`pdV`2eoM?nge6=2x!fQ)a`AM2@>Pwf{xjUaJAg_
zX7Ag~pdg*ycE*WK#PdjfDGH`=x%U?4e9`#!7+VJ{@tqTXZz9x}4C-dhBCa1R={d`!
zN^Dl5%u2X*X_wDgodB+6xc2#2!!|K<z!9xzOKrjytDIt)fy*~-6j`9|UTPE8dIG+$
zA|r}P`W5mt0NbJ3cL_RCO-DBPx5eDqetOZ7!=ckra!6ER>L^h>@v~Y*i-CsX2(u-I
zlRx~%PPL8Hmr(Bv<2-&kiQ_ZlqeLaKX${wD9~yrUOD)iy)NmUUh@vHaeW(^?Ub7~Q
z3@wDK*x@gHrF~VBqr1qao4$}YG6=IHKj<b0$fG~X)(CIPN?B$cpVVBt)bN|kWdg>2
zb1>+{TGq<`WZ!V|?Nd$8S$x#~MdY>olA7dt0&!}~vg0b;sS%hGVgJ(1_qYV@BTx!a
zc8{M|d7J4%5DkT~Hm->KeDuXf5HtMO_ya&(1kc`yH<C0_*=xV&X)E7Wya2{F=eZz7
zE?F+>7Yk4CtTFCu+Rnqo=kb#|7ttAEf+FlH1?r25%SwtvOS)wZv-d&s%3G7#YBe7!
z-nb4~NM2K@Y?oqu)~@(QDh_aQcR(T4Mg=2~{M3IykA9o=fotFCH({UKu#+DG1NFtm
zr#a?V7kM(1?6VepMTiWHY2_A)qcsd<FU;lA70C+qqr6ZeBeQT!u`MJ^;vs}g_#IUK
zT$q2yjSO8)w>0tc%<a`^fxdjzU_+V3+-HUvT)u^0KWjhMBo47_p)}EME~xmh93=7>
zR^H(sWJwC;_BT0>XMExUO<2d(Bur~R+w*>DHCsx1j<U$)M1jnaBu4S0d_}2m3Jmib
zmrs88-M9+R3eO%~r4w)whCA<)EnG<zG<B^{j=*gNH93FrEAGp1(62}6VfiD}Zj7d+
zpfT{MwrkyXWvSZun1=yEcX1a7w&PpgMHR-FSTnJ0e0DyDk$k&`b`>`*5#l68)IyHu
zdF)cg=u6!{?0Ftle8lE?5o#@{(lyh`LVeVs1zJO5wl=kz?T5=+CaoF0q>z;bn80<6
zzV&s9PWDGB3L_)ux>9)K!s!bg@v)9Gz@^C|V%P97K|V%7IX7NeT5^%8!Pp^=LTvGD
zi$2pM-DnAr6lZ>!E?aUP!3&ORp4#-jr4=PBq~*@{*||*y4VPPKM8IP&wuPmA>ri^^
z*S!*1jg((Ask0T#=(hS}BlXvQQo7;p&ogA6JCZcC<8A+<{pGFxhaK+Gp$l%0T1vP#
zL=KBJT;2!a7fQo6H5>E`f7|Dh-=IW)ZbIZf4_z%J#38m&%2Eo6)URj(Vl-NV#7-5_
zw0;c3KFQPN>sLHJM-?lu<&&$a$o%7Y{Ww<?BFR;LQsY@U>+E4LL8Q?tJ_3{GxzMAR
zJFdx&_l~5yT>L_}*JP$c4dc2~{7_{0lhoCwr+g`B>-Xf%K;%$}G{c6oQ->!>e!uzg
z;Ac&`(}-ij{gh6OKH5TZo(FBbd>T?;b6SCbuhSh-m>W{bLvx95i7j%QbqL3hFt$xQ
zJN*{Dbk`Gx53i^y)a$L*HetWtA5TaZ#n4bw-_YdI0;)AC7osp{z*Vql&qKRx3Du*l
ztP1|V(L`qJ;pt+Ex$>0gTPsQituoz-=Cb7$O1M`v{N-1Wzh{wVQT&?ms-wuh2hWzS
z>-Vl@QBb$FDDBJforUbUz3?d+q>`6G1wZ&U1IHWX+QoLiV$3n6^C@|NBn@KPg*w>2
zkVimW>=9AQkqj1{khKm!tQ;OG(0oqkO|rCL^BDf-Ak(Xi0O_kfHHjU{*+;IvBwL3q
z`aiS>Kl*IojY!7Vl%-K`vsov(y6;?4ENM!_wSW0b>Y;%nUL*>i%8F00!2l1&cV)-F
z%bX?NP^tGZ=~DoAZsCk%TXBN~;n00NG$z6T)ZO~o(#WKGb<0aSc_zdxt7w{v(|Ne#
z8v2uC*3#YgqV=drgPB}&JJX||Hdh%z>p?xRFS%UX+Wmoh>$pAkyP;9`8ATS-9a*Z<
zIbY>Hen3Kim4!*1HG?p5d!4HVhI~+K75cC0y>m!NrZMELr6BQ^l%|^)>2kru`_=%2
z41ubK=ONr&e&ck$tKSZq?mI#j^x<-1Bu$dI<%DS2enATr+K|4J4djH09f1H39m>@|
zf1dldx&1KTQNyO<4`Jlo%Oj)K7LsJ2r;O0!%;S4YnFL7Y$>I%`=d(*|6r+ih<b$j%
zoQJIAE)q2YBO`|+JxUeroQ}-C>=sAisGai-kY~*WL^yE%`70#Akkeg8=M1c1&)e%k
z<6C=oG=A^3b)$clLG~gMI*3sY6lKW;87hD`4aLVq6W=8&G{IbrWA#QkKH=sQG?^>_
zo&w^zg>`d6USUZvy2Dgo?OsJ2pRI75)nMcy@B4Y|`jJw+8=bRCnHjdEMm(a45cwKR
zS{JuTzZ?D8zNv*_{AkM~l97~8IYJ<}I3ZJivB|?xApVkOyhF)Xi;{Z4o6mFQHKLt{
zx!ev2G;(Y<fbmpUbqq3wPhXKiZf0W!iV=L7JLe{k2`i8J&-Mv#moFOvW`k)&pj9F=
z^xk^NIKDnvFLuo{^=*7WMQib)$HiUiKmj?tO0%fy*?vBa7USraB-+z5Ih(Ot;uv|Z
zu(uJ`ozf)>2w?E)q8`PaW~##g-L9pJIswo+&aEKUEuQ+~3~mqxCeQ4$8v$avo#c3O
zit=-nY;e!d%x1(2*VGq3Cqxk_J6LI6=BQXCr(2_HAChU5d)(JMMpx0I<u-z!ni5AG
z;ip<aB4uhd;-xf=)69Z?h-94RK=&ne0zmF1{~oSWb`T<axduR+^YMPdUa__+GClQY
z@^l@VU;UOC_IDYPk!{x*8cM!cZ>Gky$l(>K73tSZ%NCEMj_$CABp%wCvu>(Z6S!y)
zOng_Y&@DD}G^cOCulzJ~bA2{Wt;4ppjPtQXu|%7}y7Wxmszd40PR}VbI-f4{vnp#k
zV=5xGaGXxHx(Dv+>#xNo1slI<V}(F=srr^lBk7E-Z{AUpxea@WXcTV=|DI#qbKkkJ
z$|{wiYKF;mQ?#q@_)iA6L#DP<GF!egzy-Gsc04};1y_+Giqjs!$G<`#Gaw$?P>!1F
z(m7<ol3Auc3IJ};RawcGaHaa?q!<+Id;DH)9+bVeie91xe*cz#Is6vV-|*_ej2;sY
zhq$D+Sw|+0WEW)C`&w%M1;Cc4LTePs-d&wo*Elo!G?6EJZj>&%1l5csYFme~9dh#s
z)cj&MLgOf@%B04UR=%+PJ6@$VWtE7TCE=?DPRz^7R1!oPXXn2b`^Xt?s^XWO>$Ej0
zj(<@;-wyc~E&t9H_J%J=o_er?Z~N37)hXU!bmc0YPl!Ks3*U|-MLeZ*;W?KL3S6>M
zL#TVr^S1PvX{2YaWktWip8tzGj}MTNf&!((I!ug6Usz>e=3TlN(-*Zg8vIqZLG#~p
zE*Hywa67CR-WPNzTK{#6)mB+)u=j_-ys^)ZT9_EzCS%k40uRCAL~Xv<zTZ67jLG>!
zGS-Y)sj2;$;YwZ+8xg&;^B$+*FEKjD%{mO|J-@(J?G<H3vD$MRCpMqD9$Ut}`6W+S
zn?v3RWNrMapp6LLa@nb#uxMk(Pok=jiHeMj#TzKWQH7gsOWMKCvhCkpveFc4(m8#E
zBA6z>cVkfhLF+7oHQ-<Dd{9;K{5MpGL(D`+{^{RXo@H^02mZf{l9JSC)c#!}B`q%}
z^Y4=XpOq?T{Eb4)RyzID;b@i1{v`QdSgq6l2HGYIn}Oqn0s*%i3F1!zf3FBE%C5TO
zgAP&MA~6$cF0y&Y_A&u({b)q$m#{iE%~g8pAHlJKGp=wTt@~k@-QOq{adWNHKLB>z
z{P&Vl>&H_O`Ptv!U)xl23Ehah2#6YX(QIC&9LStjCxas&x`dTZcsNVqgML2O`Ogpg
zfrL_&Z*NXkx7ma5(1M>X^SvMRa+@PggC^4>(PccrpP43O)3!o}f4XBIO3XV_QztY5
zm4s@mtKo#?cCrm>H?QsAT{{1$hhVU9`0x3ynFL^iDO`O+;I!8N_`!9xFbM4+#}*ca
zQ<LLb1$GMbNV=Sz6@e}H#Sygwd2Xnuj2|lZ-Tu`-K_X0jqw+Q-shw$_G`XR6@6!`l
znO8z`_tSM9d;q;S{QLvg3L$l_d%J>Z&}yV@v)`9=)O|~kHpiF+k<+gB{_)o)XH(sI
zB%9$h1bbrUL0IpnWvC}vCS1?QKh?@$-T51!bp)S_%+Ag#io--2+?$buq+CB(29wsc
zG!B>Ph?mGbhf!e=25UA)!Lh?Zu7leN{`DhIoZ`PT7B0j9Z$DN;Z_U+4psB3nw|`$A
zI}Y*WZzGkOPigcjT-;W%K7C^=59K{&V>D|=*c4F$?hfHP>%OTPMPf&RpA7Rmhizoo
zFYn?=S8mU28Xxp(F+Z;|W5UJR!ZWbhiQC&V9$W)k8g@CC@yw1KF0x?(#IFazj(a@Q
zYGH;V;uBX_Jp1fjQxawSKWA3PL||JigeD?W4YRX3-9Db>RyB7qIlkwIO)3Xzdv#}9
z4YP_W`TOSQ-VYU3Ho<jnJ=FPKchpnL-eTUKU#=%{m{+=>BvamLoqUVeH8r31jQzV-
zi#8wZ1Lo!nsPu0m7xRMC4i0Q5J09pSSHp}RQus~8W}j9rjq=;C#iqnz)PyEteOH;x
z#|7XR_i?dxw#!SxI-r15U7XqE$ahcu{I2l^!hO9?2E8o*OdED%XUg;i9f+u4UcS|F
zqJzfM=gmiuMbO?ZGeqSR;o9z2>h<w@R`zjDvyHE-SG<AIy8m9`RBFue_Vv-&lWKS9
zf)4!Ed0?0RW8vp73D)_}`4AfuOX%#pN^?YQ_ra7?aBYN$O}<HB-a+lQ*O>TJ=3-aj
zx-IG6Uoi-8%eyz4vSGVe9@rOrcJN<X;TTI3+uG$Oyz_9UaXO$e4g&Tp*7zD{icMvs
z9dC}!PMJ6?s^prDcW!^G^RxZJKlPl_yT}}HH`-vB1JSG&J=_brW|RupHQ5=z;+eHE
z-dnx13Ma<)es;Bnf1E$mJ%4@5JyrMUe?H4E%(;n9_*f_8dHAxyX42(+D@IX8d|i1D
zRO@baZJ5_R468~Fga|ns1$YOdrkq%~KT$tjFD&0cYhlit;=$odb$s(1F*?3a<45;R
zgzKjd{$V2xY<2BrnMeXp=u>1SdwbZOYHwdlLF;}ldiVFvLwU$%XKj4$Mz57~30)tz
zc=k>F<I<<{ZP^W~uwbkZHSblwe8Q=zi}uuYPXDI?(0vnms5V#za$Iu^S)@3(S%k4s
zQ*T?sIS{dZqFHRWW+^+z4~FKna*M(48n@JI$7~Unx+|A+Bet3E{E)_?lNso3w((;`
zL(jN7AZ;5QxR|{tcn)=Lb=^kH87TqnsC2tE?$x>MLeVJ$Tti8puU;Akx_8=0G>)I@
z@84b%^4}hV8Cnhq7f48$nN1qFF73No&IKuRjP_QSZoqHq7d)-mjrwi}B34??U!CR{
z?@TPNozl(_wB9ejO`8hri6iB|Epw0QfGx<__r>aH>yrf@Aa>n8aA~l(c|uW}m4kcs
z`MWk22~B+?7dGnq*6uS!0>9uj?+fu$um<rz^J);5a_DZ&E-8%X`{YhJ2mBN_`mB~=
zr1Id%^31xH`<U_O#vM+6j!ACEWVW->dU8k%!P-vp`d0626PNA52*b~J53AW#QR{E@
z`3VKG9x?d4ZbJz57h7gpe;(WjXLRyRMJ)=i`#*3834)*2!n|#mF3^J9w~<Xc_y>9o
zbTUj7WP>Ks$GE{ckj<&3%uII?P`%$uT8nSPKonu=pT#9<Nfjw+o3m@44L>JVS85nl
z{=+54(}5vccY6>7bo3kj1fr*`;&fkWA-+v1K7KK`gHE|}`;A{)Mu%O+1)9s=a=tc;
zxb;f(u!L#tc8A|GKWifs>nZbwjV!dw)BV(s=l+nDZ9?hn(79`4(AiK~s?RgH^;v*>
zAWXw0khjkd!tEsHo7KSZC5+iHz&jI-GU#XARPez0oyo<X-L{||&|^zWtoz)==fJ05
z$9dB2aYs17bsM?cli~I@{fW<=m7ViunQkwkd(zo?W#e*D#U&8RE2b}cAPRW`7`8kx
z=S*~JCQNZ$?!0u*W!G<eq6-$feyO3z<$3Z_#XIPAO_<<bdf76}!(>Qaioz<i_ViDc
z9@_-@{`Hiz%l74%Vvx{SYHf7&fZ*EGj=NL9lhBY@d!sQW)NrBbMCcAp>|w_-i07OJ
zUMjf)_~4P-%w}Y9LD;=J7`L9B+p=Kmd|heM93$So?u~;(%x;nC(cyh+{QQ<)#r>}D
z#>aLPA^vild&t)F`XFE6oKl$o&yYa6=)|bb;v$KGXu6WJtDl{HVhn+p#pbPor3xit
z{P~rNwU3>7i`y^#9moKR@>A@M*t3kW{)8p5$~oW&eF#Iq>yV5=*Bp2Wj4GNs>uud8
zQslZ;PtzDPadUrDn7!EIdqroQD~L&?*tx@XSvGZhM9||p`E<|U;a>3giXmTcVtN-`
z9j}@p;1`Wnme35)RN&7v5eduAHOCFz=4N-Xb1(8DMVuPpfGFl|t!Ol78brR+H$8#A
zVav(-R>I!e#4*7BLxnr)=SaTb!)M>18it|p3q(ArY8JL1{j@43PZ;?f?tTg{PoVSc
zn_)VwE<XaD*bIZdFm!i}9?v`Gj9$#l(GqFo1l=>%)CtQ}EuL=d*|6mJM5X8DA<_HZ
z&o}#CAJH=RyxA9hI=F_`J6RmEFwm#BfbO~f_||&6OvX=fxHr15=)=36w-xrH?|p>e
zUw`4};_P>bZ}e=gJ#+_+ofA~>m&b`T%F2ie{hXX_4qr{?IyjdFcYJq7Up7@;T`8jI
zd^}g8XSWpeUI`gtn#>da+0U1~?tt%Veb~#S-IZg5qnq;_9W`qs_=d$WJEEb^ZL{SC
zK;^PGtmxrn8*D#hvDZ7BYvE{0gv_ka+`9VJg1dXKxw~~dEt5NaFSA`V40bq6hDe`3
zxuv|i*Dzmu6BvJfUY5VNllJ~WVBea)<!*`9G>U!SAjhu&VnA5y66BY~U5C$^GnPZD
zwnC6311AWa;dZwXI(E!AwZom0{j~%X9rP8CyKH$DM=5XcPEIHAx6KmNb5VPG!roB)
z{^e4p7x-XBf%|OU(+R_%du_ifCUV$E@W<k--??z^IDMFpk^grrfSW7S4@Tbw8ket&
z<UPk%d8!!tRU0%Wq(8=*5l}fK@}+Z(Q}B}Sl=TjuO?2pJ^o@1SSjSU?BdXxXQwsY*
zS{VkKH2q)t%ZBlC@#0J71@6xrOIiChG43oZwLPO;V>!n_Nd+l@OlCm2yLye#AoqUW
z*5OdIE$7fy6x#8({Tb?-)a-FF{#DS4M$T_&e@=hkDMr9Es(60aM1KXLi-~vUQoT6N
zSWRTnQ2XTajvReaHcRuypHfz3MFd2lt;U4s>1(7A&Vg3<s$i3?!=vo+bz@}h+qP?3
zh9>ZEsk`Wv;I;rax5~x&P_v#8jMyZ<rDwRz4KE4Cb#?8a$Ym?V;;7SoZP0`mx;23O
zXs&91+veLz5%(EH9WT}((*RL6+Rz-^-`hg3Vc)!hFbG@O0Y#qOOY1yq{NJ0mcjo&&
zp88&|di!2JyiH3G>qARl-yl?R)~~zftr^)i0?wIU-0s{XRy#e$yQXjNTW9zjb33u-
zng;ozmI)^+8tnl{)1#awIAPv(n<|flD{5VmvQkh&L?=QvF8{zJf?xN3VR)jwGdrB2
zf4spe%d^gU>@@=f%+2e&L$jw|j(=E~(e=9F$aohQ-2at~z`PEQ2A#2`*Gd~co#82~
z^v=kzU(B-mSGQmA2K!x99Q*5C87y%6df*mX>DPmX<nrC56ciMVeL`=7pvWviqxN-%
zTcdOP5XsGO9FVRPaZbj!5eoozpi<2I8WAhOGtUSoVq}*&bcSqb{Vq|Z6uo8F{pr-t
za+*HDtT9NYG0>o@4Bib4(B${BgrPjaq3MKLPH)GgZ5tKPjnxGs05ElS?;Jdl28(B9
zKX3pJC%6PZQn9fTJfyb@_<z-S_Nj$D5Rr*m|I$Aavac~{%-H!;zZ%Y$DZ=-r=4AaR
zE*csKuhrSX5uKCR<qOKEds<|)@jPGmGh}bK$q)c{neW96@1A~4j;^RvAi8^(l%)V7
zq$$^MYMQHNcw-L9A(ybwekt$|DZ5u=!J6mg%!Dx|S4IxcGS*S}N!b!#)<33e>^6V$
z<CTYhIVCax50En))Dyw(m?vV9{bhCxxs1JgsCBH~<59`Dm1k^j|J1e3zhtB=!y!=4
zo;6Lnk-$JPFUxX6quLm*ruqy59+n&l%5o<AN(j&{`7?d2!vV-d4D4sUZ}PpJ*?;nN
zUbHj89eR_{!`^|a2E*3Jmy{3b?qm#G_XFI9$3Q20VAymKzeKlHC(#gn=It~%;39$B
zpzy=gy=T88F5Ku)S_pRB!y_vmbt2O~*HnMN$6*Z`Sb1>N*44A`u333%d2~zq{H5wi
z1WyI7c)nZJyz0{bE#wO1^h~P&FW#1OBVN?7J6~Meu_uV_>UMZV5wcH!_Peq~Mt6`T
zm5RH6JkTwQ8POIF^v=KJPndMMCn73i<M4#N4{ASKxi9Z|0NC7(;Mf09ta?>1G1oTm
zFtn%_?-u|DYUGG^eE@P-1U7PXi{ZB<eA%}g_7s4k@6+!y1^C7`Q~^@Sg(t?RvpWp_
zC~9|Jz14Yabu`(NfY9q0cSLsoa{8rAmiw*Nz5B2qZR)Hnp^n3w`6a>K+;fKbL`P#F
zRzC*#^juirFBv+mZNFaXv)rb)cwF=0u%@MJn_7jXevS%LsdH@r{ou{4Us9eV?ip#w
zvCi9?C>lrSqzEc^r=pf5_7TNs$<s-5zF5-9Z7Vtx<4>4!IsE<IN`WN+R9|(aweB;$
zhy)mv-~WOkT$SCPb34NH#N!RR{897CX>y(7{ZrigNkt=pfyDuP7V$tY$KPvFgv!8x
ziTzmv9Bd%R{^ipiAvHpM|HDyC$Aa%2cxPw&m{O4<d$Tv{)x#t(iU1X#K-mR)lt%oe
zS@+?P*~yWVMwyFy*1Wd9Cn~>s5=`m}E8_Qs*zGsh^GppjV<_hktpGIPYtUyBkHF?M
zgJXkfMsr)UczZPF>gsAx%I&Jn<?;S~jC+Uh;+BlKAg7DoRGYo|ON$Z^Us(T6MT6oh
z^t`V5w9EjF(sj4!)%{{!_SRJ3Q9B$RNe3zlQ3!H<N8FobOIKm#f^F~noR}x20#ts^
z+&}0kN(J~G=#}RChuKS~HJcpU*<R}|v>9*Aq)s*QmC{e0-;-(t_?`=vPUY;6eg!_w
z)v5?8Td&g#pX0DAt8fSIrL#;uM2|^cx#bA>eI2=5^l`dJuM6->(OD0wcvJ_B5U=^3
zz8rf>$jl3h@6HyVBt3mB%;m@x8QRrJaDPnY7V!>BQ(;hc^C%f2Ga}o!aW=7bJ1J8X
z_YWsTi&4a!uCm?`BzDV%Vngs0AO1KjqT$A0&ImiZA41u|&cctrUk32Xn!3hcnYx89
zt_Nj-)0dsQ{H;!iPIl1@!n;W|oX>8S<iz}T1xw3JcCwOoPuKrEU%dVEEbIfzon6Uu
z?4EFjLb*FGp|<Gpm%XHzgDcEAz9;*)CKS8<mNDR(7kWeFx!fUuW7^{=cXVz$*A_UB
z^%4EUV+{24dhff&udaxVGsP#X>be`XyRQwKZi#i+-nMjQS6g($IgK-~)g`)aU8pZc
zhj2-4b!EWk-g7NeZ!g`Z)ED}YJ?@-2XYNlE!>vIm!0VebYqJ<ydwvD!*zTFv$+Pgg
z7qs4ISlpXg`9mb`591ozXFp%L;+ZmP8<``mbDl-pCn5}b<SP>%+G||`=lJa}J~)^@
zcJzRngXCPzU_`EN*5O5XWo>)MqJv@0>!yc$B~ZcJ1DMpLu;i)=<3CEO_O#;2YVy<R
z#q56Gc53e;nfQyb=Ebt$j2$7JNk#5Qjr>2o!X4A|xq&dNz(Y2RXhLgk#)qo_m=!Nz
z-v`#&z+!Ue3dc>IpW@4ubH4{awh2BR1+9OQvg{zc-==&P__5@3`hN#YEPDNgzq%j6
z-N$x?8zrrTcLxtu510Nbr=K&gy#D;6$_u!Vqwuc|j=v9@%trTuJQDiaUyzHD{i-B~
z21JRx4|;~JUxrdXgbYyz2gu};Mr8EY-1t7ta5)ED3@(gZz*vP%@ol6PTtDpm^z+zO
zw<*6~Qn?*sbuK<^b`T*G@`yYQeuf<$Gg8l3{j;4v);`@AfprN-&W=1ei?^c~@`x%o
z3*qRQRLmv5c=pE8_=Z#bKR{3XVbg0BSL;T6_$s?ORG(1nydO_qAUaaSd=MJ%VQy~j
zzzupmvYjA4+24QW%=^pNAAz9uY&+k$z;pAWr@;Ro6bz2(Va0Eae})?gGW6Fq|A2ZI
zpGn3x=U3qYbGHza=gI<2tR*-w=(82Y;6=XTxkgb7gX3r04s{VgPmNVRp=j=+5`lLY
zXN+v3B9&k%se96!&3OxPywm=EB$;@!&1~ncO|WzK?#XI9jIaCz1UKNWw`XSYWP-hL
zXfP0CV#e41OxpLaF|7ojB>by0!$H+(T5#0sh|(h8<6Ee(^GK2MzLFG_X5MjIa$iD9
z%Ci8jQP@TK;5O=C>3;|*MR;i_9A>f(aU+vTI0Iq@s>>yq){Su<S`cZuj^hsuMm8}}
z3*)PKvT*J0852rbqVq78C~>8Ju0x}CbBUV}J^eY$SOUyhHYO}812V1mJ;Wiid2z|y
za&#$JQWAlSEgI5>fJ*SlwaJ}wvK}N^%?WcGd67gTXXIOD+*uyZ3EFtd`kUrU&j%0O
zn=hYYkUuUBO%$K=1rDt}tWjJ&MGu!teN1u~wOh=Ti;$?l;oXy5WZe9XIgi)^fdeFT
z)QkeON_ex4vh7xf{zk>3*gkUVcdyg$D;DK<8f>|qe2UX4K7+9%d*2V_NG|)jtOIw2
zDbK{BhSx}^iY+wz#?qp8E5DgxtXFUOzQxqf$LjN9@?qMdS$6|OLsXS_%EPG4mcE#$
zt>iIu<663j)n31AT0Oz|lPXDK7HIL6w=&6{x&M;4m*czXJjKlE@yC<X(3$VaW2V{k
zrJ21<9&}YjArcHpjwMDNv7bukTEjkTk60anzQvh<{XDWK_7=qDorZN$hON*NS@FWD
zw5GoQ*~2nUNbo_e+b|>bH^NTxT*X2<ij^tpYAcpwU60c7LY`7E6Pi~Zuhf9f=vHAF
zqZv?kNP`DxU(pd079<!THIv|m)2YXioxC6`G;bC29ST4&a8h?=nYlwX6D{VXPk#!v
zCza^T`00f@cj(z0@%v9uBCL@i3v?YXDi;v|f|xESv{ZO8q-!qp0X3@k8v4xBH20|_
zMp+#%v8k4uYIx|ym6Ey!xetD$+nR0`Z+$=)cEqcC4HkLv#^sn+d4bBxAVZs^u03YC
zp0HD+c+GP_`bz?U>=%UfN>0x<CpOM@9|dK2`QVzWVgi+zS+ZnFk3W;{)M}Z(rAd<N
zXj!?=>LUfiqFm6mLEUNGwHL`;9IX?d9D0u;fRpAht_G)6ZPc{HD8~bLj7LuBRh#hb
z+!%%JSU-<rPCyNy97210;Z$~^n9MpKAprH1H%^nN?{jphY;3kkszTO`rWm;`C2-fJ
z;!qbDAu=_!nxXAI&L`r3-#Yo!M9M_EOu5?KoHFL;>d))McUl*>UCcRwA13r6^w93>
zlso|PL<PNj6q7AD-3a3g)0frtj7lZ@kvge2)qblMuFhJV)@=Jt%|@KYE>B^e1=|Cc
zuY~nYc1XbJU=#n7tNiOzWc@)^OVf5=w*w@Eb4%m~V)b=(D``z~fF+*-y{$zSUna;8
z$1Ay!-P>eNlJ>ZHfeI%zcAl3Oq)cU%M6TNn)my0E60BNudKPL^J70jvPtn=7zh;+X
z#xib*&So`l*@a5>S(39u@LsA-&=_#JjJ+@$pi!%<3$9M4AuMHlmHWExRUMx9;==bm
zr#QJLgTM@bh8c}ceYzh;Gp-1LSPS(!Bm;^JthNL!1*fvwCfW89jJ{8>)k{pky9y!t
zrtL&7C9YliICB!_c8WJ&4U;X)h9rwpetKQ(<akv#aNQ{jf@kB3FYiE2dZSgf$2J=_
z=knKIAlHE$T{T1_5+79Aw)9>7#O+D3Z~Q?R_e~ILJ71d`qx3qSh10hbx?pVFOzMv{
zQdHT08oCijW$K!!I!~?mPG`fRp7|ETAzn*)pH)Y#D`+n?`x5oniVv-Y@4g7V;+OeM
zSb_W^%tNY0f5Y#^RD#QUDl=7Dt*LFtr@-)6T-g@MxfH*i-V$TMckW{iexE0rm%QMq
zfbU{5%bB-(79sx@d=Cow{u$4Q;@Gx6yyXvo&d%%umE<B`bz+A>@0p!ZCrfi(aZ$OP
zhyiu^F43GGtKA$*4H>9jnn`PDN@t;I$$5zb{Kwm(QxxFv^K_*gK~1(K>7DIh6HL2M
zI@SRwkFD*>w6Q15kNy#pVf~#3CW^gSRCJ6EBt@iB!?BnViArm|IPFFlV=`zc=u!vk
z_n=p*7bVabho^Ejc0dmd^La^Q_k->=m}T2nOR-y?C~bI<gf#h$6~Ds3xCR>HXeND^
z!S_jyxa@g19@`8GP`w1-i)#r2enoW@iLd5AAkCej76R&2yKaEuee;13pXeNW+!Q;W
zHx-&R>c#}j$l;lTKy9p+FJ?qiaf$VB&fy!PR+qdMn@%Sew#CC%&<S@H-xOl{1H~Vg
z_+r#7gl{G^VM4#90X#t<Y27hAcALe+fsb-9iIf8TZ*v!NSrFC|s$^(Yl~c9k{h?kr
zrY_$&UzU|fvpls46^guN-1z|=HB3R1Sv|()T>VW?&!}H<menZLw~`RuK^hAZ>;~Dg
zi8zb{>s&w4m$L=B%#Ll==CqwhrLakX_;kM>e_E~_Yti06evuS0LmXMxj?xELT?q*<
z6CAqaO7XG7t+*yc;un317EbfLGmu8?1ZlDZSc_9ma5&mWm#Sa&ucDf%_SzDR)Hrfe
zS4%YE<7&J0Gq=|6EDt(f>DS$ap0CA{UmdQCo!mH)_H20N>ex0z#>>5%`=&t{5$l^>
zyO1S5vL|C}3s~C}=Mk6<OcRG%@~ijKVe7-V*LiiKTgi(!lGL_1$WlK>sMP3BW5*m4
z<X^>W<#@ydP8ITI?xe#WXGcowHvX2BQZgn<IB=6hL!dWRxJM6Gk&}1r$mx94Af)+{
zs@V8!CnyjV;)adkIqhHjDRw@l%O1W*d@Y1w{<{@*UcwE0%C`lNarj>LG1t?AX(cx5
zBRaFAInSZJC_jvq)S490xf*7tel5~#iODcsbYxxW9<WusN~=~QkAgISS}e--2GN{P
znO<4-P|BO;<DgO!$2+GoPTNNRR~Q0N((aaLzNVT+?}^_Rb*z##U%5U~$7IJMx*jRE
zJ0S2>;v=Fhf}+e!h4iYW!<O}@7K7rluOF4Hj+8IBi#44RuYTxC?>9TvJ~er}pv$~3
zT#KE~&5oxt|5ZLqTZl8TkT68A-4#h#w?U^=t(hj#a;?pt2mRB<z-xpB2~w#VMwyQ}
z@N!Nx1jOz;JikLn<erZg?oYOaGuux&7zh$LBnO+<YKJ7g@SCp-O~U}jF*4$197`pd
zIaD%#k}hBREWt9(%fc>Ay->Us`<buED|T6$Wmm)FdkTo-n8(R`F;lBF6ujD_v8_Bf
zdZyy$w>lIN_Ff<tiui_0FhUpf>x60L9~P4H|5UA5x{uh#Y7b`9gUidOnfTf2I#5de
z54|IS#CqWN1Vvx4f6e0Q&s)Z;NEqTWawpi6*PJ-r!`!9)<YyxW45HJu=GeCh*Jq7&
zFtWa`?&;2%>e*PjHla46eq11Y!)ECnm$?Il%j*v-1*)>sXWY7_O7uFb^n|~Hh?;^*
zK$PD^Q|P}B2a>?umxfr#{7A}jCx!ys&Z-%GMqE<l$GKQ!lPjQ4LY_0dF=qntj%+r)
z+>i}8$wAoa>dvOy3ULt<Y#}NO*U2Q9L6anGM8t2*Cy>=_jH9GESAB`&<VLZY^G}EW
zy!TtTSU>gWcP!E=>9n6t3wB(4SQu2g=@ptN54X?E-QHAnl;$a<BIO6Cl&LwZk5oHN
z4WboJI{T*&opllC4zAok^YkJ2;~wwWR4=(_co&%^j=!xyqI%0NEeLT6Bo3RN2T#jx
zR-_ljW`3K^n+0xVr!=sEsFnkOEz@025wgq9;H8|+Wa!PnA4>1=7z_vm1d-R^@4e_5
z*aAX7hk>4L)tv_;Ns)mWAKk$Yf>LqFK*c<BURoAGsj%ZcP<)cU{YHf=!?v~k1R2IW
zn)#zx*K}+oL)!_+oE|tSo8NWQAxS5Dk^o$teTF7e3GaB;Ek6IeEw34P6mtw!#^FzG
zF<P+Zrgp;g#d<(k4u8C6HhFH^tUa;1|JTgnDq!0$w1@l3@IWTKs-p)u3n?z=WjwQ@
zSb{2~iST9T-CKeJA%3f!<k#;MDX8Ff2Yn3b9G#dMxxb$5H8&$x(u2MDG?)3{Moibz
zyX7W$fd5c0b4o=GW}VlVq}O7+pTp(H!(fY5m7<)1nhgACOvy#P+=5|bWKNp!18tN(
zmq!&>_wG}rdkPrUbycHx-{)uT1*Z%W&n)TK+fv<Cr<JQeZIm&1F?3AGMnlxq8}#9h
zD-KNf=RP@#Oe-z{3I`v%*I$p&=Ekdyc<&+FX^#*d>c%Uf11x909}>Qy{wKIdE|f%b
zg=cB<!4s%^+Ulz9FPv3dm98~>8~O6Rk-HV0I<W&yu|DO)v~}lFyc}XO^jx<w&{-l}
zaoKq&M6{f7*>kt4??Fm>te#uf>`Oq&3#o6P^5t2S248Yp;H5r7AIc{}+yo8B%;sYB
zW|k&JJaQv^z{X5f7$UqUmgD`noQ1XDr>n6tLk`*!5{CFelvz|t%QxMDr@j$Ni4L%(
z&J6pa=g@OCgBV!gGV<dnNeuDvx8>U7E=Pf@re@avGG!`BoQM}e{%m86XXl6j51|*X
z*_zZn>_|LO<vP)G+N2Ey2>`DOJ_H)&YMX_?YqJcBZzDxkB7k_;7@tnX5<nyTGbB!c
zBjs-?&&pIUt|GN-rf&qcV?;jFWq2>bloJ{l%d5R-ofn2n$S*$PMVj?n^lbQwzYBj`
zrBM?u#q&nK1Oty(T=vna+CS<mSv;08C%+4dJ$~9U`)t%p)H~Gh+<qj*p;EPR4NP#S
z&sTMdVAaKZxI>`(`2Kjce&)AYm^nz!Uwo8j{3@*g5S}`S8e>1wSg&u;{UwS)ZouBY
zo1cUi_0B8Q`p@75GJOSpim;qWxyHyoc;5_v$mP4xU2!Y4c!mdXOO@gDC7@7#fr}I1
zo0Ul&rU~n9G|XrD#FZ9xtQA$Gk{q?YFRS@Ow=^oX#%%YJwmG+<r*~o>9==wzMwPT0
zLy{tr9sqj$T&TyaVLu4O1J^35);2P1*QF1qXXz3H;I4oNZe^G}Y*VITp+d)uK@JwT
zj4@ija`I)SJhfb;m>}J(1bF!B!4C1WDzg@azJ&_3t_Rd+o-Efk7XlCO<&>n!@8@C7
zk^dSnJ%EHRoRII7te}@sA@T(nglF3(R;xzqn3d6_K(h+~drf{Ns>o3>juR&4jw)8F
z*8bC>NmHze&Zz-T&_4{M%rDj(RYRrut}JL$m^s>1mmdU|eg;{-Xn3?VI9ImNFI64H
z*<U7IunuRXKR7qAMvVJ3K8snFw?es&hjZ^k!Jc48i!#T)T!(g@JHKWOZ(sJ=eIn>%
zoEVZ?(Of)LRWM6>h(P976)q2;65bdF5baftz=yBZr%C0O^-3`gZ?>vdU28<b6aj`m
zX7_rj)**7~nFCY1e^mpM473daEZ=gQ7qhRsL&Je9XSfdGjL?eJO=Pe_=HZZog-v$2
z9LIE>wEecm+u~DR{B(LN_|*Y*HX*6L`nsSJi0|7So(|&7Hl<bf39^o?1s}JnRxa^q
zuk|R>M<oQ*|Aa2{FJLaEgb_CIbzqmCl(~@jR^FWyEq>ogE$8o1@|xEzl>r?&tm@Dd
z=73!KA~TNF&#FPEtd?NskW1=FFk6tBD$0TTQN%)RW1j<ZJHi`bkg=^sA248M9v5-H
z+SnqA*>bpz&l=HOJG`S?36Um^9)3VUh~O1XycJ#Bf?Oi&El=m<DXVo7^y0X`1hU;m
zVaqKeg$_PHZ+_%-exIsCyWc9Hofj$41n8r@f|0+Xk>f=7XHiTXO_$wmhUI)}(xpTD
z06)%F+NfVIl@%a3;YA5%$x}>NRDF}Ai`tF7<tI0;yd`dM)~u3)$XU5_MD}sE#|`y1
z*QveK;N7XOC2M|Z(z{F}mF4W(1c0Yp7KQ6<uVH&RSPu4U!u&3`jcy&*-md2qpEA2<
zJuYt+=cOFIW^Q|NN213cMLYlmM2Ti#N<b3?GTmfLht&H<)vK+W4Za?yqI5vJ4}+rh
ziR}43Fwn|We-iIO@R(-W89~E{R&6^*g#1>?eeaSk{Kl(fPhmdHD$|~>+yt$|J&L~g
zm%05`-TubRDpY_0rL0ED!WeNWxOs5*Nei{e&c#FmCQWb)MDE^OHn0&hCz#R84gR@G
zv{#pBsPK6aifn(~5V&$W%lD_R{t{nZ??;myesevZa5wXsFWAKfe4_Q&+gM#2yAli!
z1Y2Qc?BZS7y&p*S86a8n8p9=ikY~vH#7ic;n2Fre;})a2YSy*VGrBUApk;~m4}$39
ztV!DLzK;nHX{5Z}#0nOuRKmpGSf+@Y`CfbYT47Zs3G))^RZNdUvI0I6RzT_jl%#~G
zB3i~pJn8l$M044zRf12O9#FZVjYg6OOXMBJG+rI>W{rKPBBVj1!E_VwF=@E|zkrJV
zx13CchrjV>=Bd`^d_#~Zn(S4}p*}C-heK7_H+C$1f{?i@w@Qpij8o0!7fV;VW$4&M
zac|DCjP`%FXcVQ`smluTT+CB+=Dzmj*?M9GhyO6Z(c)KN1q?M<e0vq4I8vy29iG3Z
zSRAoBSR7#mk6|90oI?{>!ZouQHZEA{k!J`Aam#oIP(E_JlV&SC6xy+exC^`j(vBeU
zR9R(>RImAUyxtmN(f&oOyfIgQ@rsV@6J~Kp&bC?w;v5s~ZM}M1MOp-N5<OmBV;Le)
zl!S@W<c&-cVuhNQ%fol>UF|Otrpa6us&%To%a=VT%&%)5Zy7o2b7`*)QD+;6Q?`BJ
zf7~@Cn%bQI!5zhu*&?$rI;~6Il^y+ppjF*<SSLYDemT`^M8RyK2#S3>FE4ELJ%<mv
z&L)m(&gTRiRi#0cvZQPnE>_s#qIYT#?Wjy_)?y!%Bw$EoP98n>6qK^88vy9BEDrFI
znr0L)QpDOYrQMim9Q1%NC^5o!Rm%nZjnI=KPH-syMvTH%i@0Ky;O9n>2k78CWP~Jt
zU;dx;I{JV3s5to&<fVg+tE+2W4E+2zjoZWRc_&+Mpc?#;^peTH&KQdva@r=s_f}4B
zLg6t|377-L&-tCtVZc-!#HZ6!fCxi{6xkQ4<f8XUvKJb%w75}H)JcCIexXv-Y7D8e
z{UdT#0Gd3Vp7H9;&V?*-f9QIv*vMqyR5g>w3mpS_gKyXp56Z>HxDqJmWr+v#5-3#g
zH~-usRp@f#|G)B^aUX~N9SZ=j@ZWy>KT>|3?Iq-duGH7~d>DXoo~oDDR7lZml8ZwX
z#2Im5w><E47>jaVa;zaauPA$|8sH0)(!g@)7NV30u$ug}$lK}KEyN)4un;t>EJM}L
zZi5k{)#7OeXwyW2=Rgg$1XeoQ2cG!wQHW`Ew04hoTuU^dqjG|EcMBobxo6axUGR>w
zIB0Lm5Zjs(4TY`xBDpH(-7+Gyb7A5^tbZ=j>PhcV8vL*>rkvza3*k-FB7U&}-IZ+)
zB^=z*i>(V<Z6?^#X@Go1!%GgdULyZ^hL4S_u*KY<pwN!|t-3n956%2XzXdVF!s_Nh
zib%}ai<L<(Ohrh%hM3UANaIaCRrpinTNC>Z$G#~ATuK+xS&sUQ2DUM7>QllXTdE*X
zpcx%?9ABvwgWO};)XJpDmEvGwK%92CQ96DS1CX{WB(8w?-PMwI=zvTalV3JbI!4vY
zLJ<a0u<L>%`gX7NPc-TuBAd6vKqb+>4ztb>MvrQL39WC8J+(BC+nqYnc}TLC$^k~0
z+y)OkVZMVc*fn`#0A1Xz5lXI^X*2KqMu+k-B+%7WjEXkzT*)9S4SY*?{BgJz?Xa}q
zm+)-8>5G+74x)$Z!df(3ucJPiH#S5t;?xu#CAmTZzf3S|S7WY~CsLBM466Gbl8U(;
z%E}2!Lv$(IFQ-ycJ`dyBxmTNfoVgl~&<Y#+0tb>q5mVCF@d+&M;=tE}T1H9sLr+Aq
zX`oZiAnExz{3NRr8%ww5+tH?_ka(0L?C}Q&{R6S<akj#8(n^+|lauNO+O&ScO_ug(
zCP?`EYYxewV%*WvQbkkpeVZFeGvjF<I!?5{fX3Msz8UuDmTKEkB<J<~<sg_Wzh2>w
z(hBYePtz1z4*2{rU!LIDD;*t=Lo_C+fwcYZ!LnsVy$L*BFLxt8o8Zu5iQB)lno`EX
z%1z(dr*RNRS35y*Yi2z%R>bvV+{KaF-2TJdJVEppFJcWCC-BWNl{d715mZ;r_wM4Y
zG0~>u<u<;36dl!vS2)WW-(PxcY=&_b44pS%L61IMZGEN25EPq18YKr>VpLtrB_pVi
zyAt@=ywmIJfYG{!NNmcy`C`C1qe0#Ez8UC%ZTCzxGCX+U188a>K>=iJI1oyA^(Wt&
zr>GE-7nO8y^y<7g@AIS#_nD-~jek$ejAm}~f}#NG0=r9eSW;DU>rX)awH!<q=;?9K
zAZ61@C=>0Nw2*t-R;^bbr1%~G<B<j7<?ROrbGgX<r;vmB#R}5U#8lqczFuqcjrz|B
zIiBAisw#3kTLOzK2FpzRruS|1BgOl>s#`dOh48dwca+8laqQ^egQ$R-$GYc^Lng1c
z=i1{Sqv6pUP1K{ON^$7-ZgWN2M2E2ZDv7vYtI7@hm8$scMSus&YRBdUc35BG8Ex7(
zA8DgIaReLswgECkzMO&ohqkv2YpZM8K-*F%PH~4K#VKw<i@UoPC<KZZ3leB4?(PsA
ziaQi7?(SYR1b3H{KF{}la<1$AJU^4Yv-V`InOQS)-)lDF3rrw6QzMBizfF~m0*{HU
z=);2$+9|NIG^{6T%zENuxC6a5DYh4mf_TeCpBun<o441rV+gfajNHL(KT7c9Hlw3p
zq{Ez|YNj~i?Ir+C+}n=y{EJh0t}&aBaD^_p91F^+Wn|s)g3HI4TL#|1or7qdK7HrW
z(=(rw-S7);sT8NW5vJ~>jd_9}HIeoDnLcF%yo5MR0foy`oRmp_CANp`0%eCnRWoex
zNM8h;jlLOLQ)L+IQb8TmZ8`|}WTNX9ME<3C9X98-5Q1w0pJ2i#xUY7wpd`&0JxuQT
zv{F?bg-Y!$$VG~#Ti@e2O2;p<Bvatr7O_MiO}xX>#?Zh@gs;YpG1Aq})YE`gk^r~d
z!_mlSXYPTv%-j?5KLJ(_z*IgmOdAU6T?mA+>!vcXcqO?|YBn3!ByK60Ps-4ET24u>
zl-F_-M09Ia5U}!nNhi?=E=fsx*LvjhVuVFq<GJxb)GJ+}_Wp0X()}rbix1wP#7zt9
zKl4c;a(@S!ZYytOFKlbnDL#MO@ZmrfK5vt2Jd<kHlilnWJX|7xvr`HHbpqWG?_GBG
zSBmdfnFSjRN}0##5(*aNgLAYgPYG+1!6sWoYB??+9dB(^;%;!K%tCPC_OaSaBTq9t
zuBH+yX5&3(nt>p+A!K^&wRday<Ho7HP9`1LXqr{d0(z+yI}opW`d)ym#)~7x_tpTy
zaHX4Q{<@74+AX1C5XE4EE6;-BWE35ZBrKuvgAgZx;>(hgKj@=;f!AGu<;kns<7^5_
zroye${_z=fWw<q_B(8UDFfZz9BiBH=+BDzda#kKh!^b!se!l$+|2~V@n8R`8=bJI#
zr>?)J3&s|=qH3bJg}1aqpZ6%ysO)2PaYX0apC28bZpVDjqI@4VjbKkjfC0OU5n0v5
z{%}&NwjlFElElUw<ZWr?2O^Vf<7y2B8;w1dn;AXqjVQV*TA$jeSvk=m6W-Rl%#141
zF+KwQS?d6?p(%T+RVDZ$9Yf(Ru2zqtV9u6FX!RSbKZvmT>SBr`V9}22{3sg?bHv*)
zI#A>z8^Zg8e*WdOPDq(xW96@A?i{BYgOgP7I_9-5uE++{eeS8zsk&|8mu`GQ-_4dv
zDAYj|u(v|O2?#b2TG)F{-lPt0#H+;bNKSrd>%Ir2>SA1s1iMmvOph6|GNoFDyY^sU
z+tI}rc$neqU%?)s1mA!m5_|9ApWD$=j9Eo22PR-Az!uYqT3V-`yLF7xcs23n$6!0(
z-xc$P@L*;1K(^R9(Ig{^a*zX>YU^!2VguaM#0_Lzxsu?zLOGhQ`8Q^HcxO^H<&>*r
zK6rgW`zu8#W|aQ)($-vxB*5P^Sed!^um`Fkk!dAv<n8NyfZ!3&)qK3r-#Z^+yOu^s
z<&#qvDo1i2i6<zLDBm|BQ;ILgac<Nzj8;%W+?u)&j@LnN4}$ClU22@)QMu)hn0K<%
zPNQs}WZGOh|EepLy@*L-C`_qvL2piALWQ%mHRimtT5s$ub%QdkpGQlPou+`bUU`SK
z-F*kcO3Gw`{@HYlo^53wEE*Iz1;T3v_$}?Npq}H&`nM*NgnKUN{d<Y(?ZN>WURMm8
z<Z}Ku=P7|Xt8(}F<^+INRjn@b0P8}(Qr_;7?k2Z2N=hH`87;}Rn&}W8^cBapW$9qi
zA0G@-g}lA|z-BHe)+b%n7fD}BALXNEAWc`LJc;ijMSRIe!Fh*C$8B=AB9Xs_i62vY
zh=!BR)6NJZb`5`qVTNLxqdS)o4V|UE(Xuf(o&8vR-P+!IQ<jnMK%76N_P_v{IEtx{
zdrMh;{eC;gTIYwJS8Qvx_o?JOE6*jp5|)R%*J<injvZB7@ml?q6NE{f94C;&LkmY{
zdo!4+xpwQ61C@EufB>zpwkVomOs?}}@S-Rpn`t+b_w3@eXxr8FGAC9dzo0>eeZJtc
zap8Ndf`P!G%9WJ8a0YagF8>y<C%g{y?OP*mYXL(clq!~yln;YN#r|;q7|teW(AOKv
zf2?cbrC6mht#@(r*cA4<;r!g~UQ;v!V&7xD1%#yao#R3erHuJ{nWTbLV41N3iYC$N
z5d5yI+K<f~cmuaasCQxLCXqhD)uAxzg);903Hju$KH%-w=lcU;y?D`;{$-)^$T~03
z27b)Uxd6{oa(NQ3iiceBt@UDy0c>cCpAL}kO{U(cE{*Mxi4%yj@?1eTi#XJEG#krM
z?%U5`*ev)^DnuxB6+B7g%Lja4H_;H-xIa+m3q|tD4>t?lTTiBq-@L=42jm)$=6(Ve
zw+OU_S<7ws6%0n2<7~TNL6^9@ogQ6U%Mk&vc|`@1q*D9*a19EI*Q?>gf}(;!hty?u
zr$|d;9>ywiYB4e>hh06OT*F4~SwsCLzrCDNuQJ=!UhK*EKTZt|`vYDUn=4<>M|mN?
zN+sfAhp6w11)bcRM?ocCu4pokcH&>lGJV?gAk8$Q6HXMFgJ;lLPC65^f{=;Z-%r)U
zB2j&1&P`avYOAWyK8^{!uDwr`UtM@N>l0~x09Q*lj>gnymICK4iYeu(XPzq_9wR%#
zOPe1#xaA~&@y`Qdhn!pLpktV9Wmd&RSnq;Eeq?OxESDXSDnm7a4$Y7)E4N__<N8QX
zOvX3^qu(;596yWuoYQ7;_qUzwD9h7^t~Oc$-uc1mcZKv{KLgCGnYGf#?IQ)Iwy@@A
zN0L3Z@9;PBNe?skw_nc<t&uLh6>qU$!?)JT!q4Ki#;FwDZ#A*ri>PgRtaLusaM4z?
zy!)xLdA7Q3cClsQb*g>;l1!supdg6kbFKn+k7tQp6_@C0QvNid#QBQn#9ZtQ=NA+2
zhP9fhiAc?D#c{>beX;D})4|*Gn(AcaG(>ZP#ZP%G5Wrq(m=!@+^s1NL`lu?N;>Rvq
zbOl__q#lhf>`3hQ@a|HSOr=V4`<#J2mE73PPEq&VcFGpiO+BA>a2)y>3u=a}%NR%$
zcuR@6Viy8i03`ADKN*mu1j>_tQqR}#FSv4PO>8D`^$y1u7up`V^4VQT1%wD{n<q0z
zwebUrj<%sA2eMit{)gcl2muWy+_uuiU#Y(6gr_j<GL8v43(ic_nd(NV;kwLB6`?fL
zEXLdO4BPcj)~fK0*>}AsFVQ2K%qXyp`uWbSfW=c&z-(Ba&_Pqm3vb;0?B(xr*=GDH
znd|l_-{tY1RpvfdM#jKzmK@3Xy`&0zeHvTrTzEe^6nUOBMcwksl;mUvKBL=I=#`|x
zOrfLILHJ=Q3{UOxx@F-&09Sbt!y{F$V{2nUMP_|V8M89I{|h(M1^jwpLHSL;CvB|n
zOAC*&6GR2Qz;aGNg&8NaIg0s;Nyg;n6=JRpK@B@CsU6o!yGU28ll_GJ)F_Qse@3zs
zi`D>{NV-IiDsQ#FAE-xKXEwPAXspvTZF-=Qd!+sAg%F#~5vbL6m55&IZv5xhhRhZn
z-ZpLf)%hJRL32I!0E{p_VlD*(H}`_wm5}DS!9Bi4gN7IOumzVV{?t2TFlMEL$o6M;
zjUS>3nmV&S<A;irjGbRB4{OY8H!V`gTile%-Skd}P--x@>I*5{9!i1aW}2#;BZq3e
z6+9j_aS_ax)+hzBd+R9iOUc(;@+%(3HK)JLw41`ioQY#+SOc`*($cODIvQ8r3z_GV
zMFc6=^zn%;xqe!_G*8<tJkwY#2OZb~GZtEccTWigC4}E<&XhQmu3kld<t;T2A(1~*
zn_>xc?VoSn>Fw`ca=md)wajEdkP<4rNEvHQ_Be#w2<hCSFyBxJ>GpA*9WvFbq>k|A
zCLZfhldcPnkdOUh>igm-&nrwIi&M>~+3&W;{b32UT*>+LoU9`=b%o^(lt;g2>*t&N
zCc9lqOb^Xx_e|@*Wi!6fbiJzc=hC|TH8d4m0c|*NaoO)DA<&fjrY@qE_*MvARX1`h
zv>!nzr#N4}mFq1YU}(I88?Zo+l>4*TTtA*LL35Ga*k$whJUC)1Hy5#sTQIg*%qy$&
z!n*r)pi^zPmdC-IO3_fXD}N??s(oM!H5z_jd<L1r5&Jh{?UsXw;i)`p(4}>-fv2UY
zDCEz5p46)$Z!iB15iWadi*mJZkm*{j@UPeB=i2t<dO!R)Mb4Z(d``^vszlKizVTyL
zCaL%w^wtX?JKtG=^xr5Te%`Jk7nMg@SQ!007&S2UA|U94d=5O#kJ_xh>2rOBYNSc)
zCIr|q9tfHgur4xw7P;BgrKAx)BGbud4$Ky@2el+?c0HXSs_y2zJNy2Q`s{F1GqG})
zIPEp1D&YOaRiX6<rgsB5=4)1yM2Sv_ygNPFHIx(EH-4}pKvXpVGJQzeyySH1w8{NB
zvfj4BM3m{Ba+EnCEiqN9&>V=NlfSoNXAhZr`+d9~DE*jQ@^GoS@YQl8aez8%18F#-
zC@i^9KT-AV^&#36ftogUoBC@x<*kf>?u@T5Gn06(Tl9I;zAq?*jEVH!Uv3>%pB@3-
z>u(=G!xtq5EV(q9=dW5-+@(AI8o^$8Lz7m+pXB?)oR$_H2&Ko2htD+hqj<_~=_aX7
zKhWZ8AF3(!KHy5sdZWM3eh%x;qDr*(=kKrBsK>l#gD&wMW-_2W1_?4LUWPR)OXxYl
zo7L#DxILUCpMaSxYCdYz<vdPAI2Po^MZfNau7QrsN<7%p+vdOQ3PU4f@2L3g)pxn2
zm{m>1ahP0UaF|p9bZ3x7^0mBXwV?I|8xH4lxKi8MC*e*WVQ<JR_Qm$@Xky`S&1yuw
zbj?3CwtiyFh(kh+rwj3J;ipG=!A6bo+qfcrb=jwJggspFR6t(?mM&ySJQqZPAGE~l
zCY0l8cC?{llqu~k+-^~ryTS^hnp>>z13paw<>NBRNgdWY0x$i-{KVD~SEYU*DbmnJ
zp#cTlphoStomF~KC)5bWe>&PsoepN#-w<M$vUNKrt^i71`_|f0jl#G_1eADahmqWx
z*L*fUxtBt7DbDw?^HH*!k{~)YPE{Ug#*XIX%mD`aXWVp==GC)8J5vh!cVvO$xYCT<
zWw)TvCB(F|6X8DlitR3%lLL<_M?uQtdy%oHlU^s`Guyj#?vRkUEo;2N1h&EtZRzTQ
z5-Bm=9CC(^c6JYM0AWr;;R^(oq%qIC1i2XuVc)Z?2PiNjo&OYS{*o464qiy{@B%yU
zowYEzLdn)1Pwn*Dak-jcKOaJvFel_b0=E`2KmjXGgI(=z9IMQPs|T0W3*l(SsX~bw
z6?1WOL%nmN&21x4!TC!2>}jBPfIy8apR^Q(ec#H`(4N83EUTMkCAP|#)zJ)8r=A?d
zZ{uX+@gW-rM-;=neG`0HrtbI{CRkc`0QRKVkIv)K_1cbN8`5pw6ndT^rTF$vNp&cA
zfv~_R&L|Qz$y38oY96tNdZb)^v(6is^C`q&@uo$7MSO+-3;;F}JjtU#xGsBn--78|
zBgk>SQy=q|Z-tFMZ-u5iYCSQv<$E#n=y!QR^OfA<yGNTDX5(d=Hjagnt1jV4aE;=E
zL<XK(8NAH!R{auVT|X{!XtiHnbHnQ~F(Webm>i=v4PvC|YXLM`TWCH;1i3Zq292BY
zdD)VFA|?K1SZYGfXQ6|jZ{*@aUb+wk&N=~KJ}?IG=n8qOtb6S3;D!UePK4v_qk5Jp
zpIAo@3*$4Rpl-`O*Gt+zTGRg31gvGB%ZEx{ybPLS;EsnS14P=P3EVeCa<}j)kZcaW
z1-5z^TXUej?tyjN*rLpmCM<|_w6$rp2EC<R<u9*veP1VMU6|sLYPF_0rQ2KmDdbD9
zhh?f@tQYhnP}0qeNX9MWR07!9m_S!iC8dIE@_7*JWckS!LuLAnL#Ie;9pA%9Yx07-
zl;O2viD|J=@5T}#4)SR@G&g-)Uv#YX>-wQFbDB=z0!?#pkIw!8sl{dqWMzJbZ*3tA
zHWzloiEH5~I55)aC8Gx(YHjKnMYvi(TmQT8XRUhi*DXRR`wc>;x9N8Tc$sI&L$D3q
zG@Ziz&07X952ICVT3QzL&HjQK^9UxEeeTn7zU<C$p=G^c!6gGoZ?&dChC9piDgRHq
zFDX|EJBA3%q*u9{?;)$iKPb0X-NKK%hYM>Xx(VIe)1%#@-im&MG0ICUUgu$r5jK3c
zU(g$L#+b1cLHfA60cF|F`(u|7+j$MH?hs<;irj{=kfs)s!t-jKq)nA#jh?kV_-3XF
zka8eDY(WqlVi#V0SHvKd7HMDi&B6{f^r*KV8K_(CDtm{b*Em_*hiBDLUuz@ldBthJ
z>EA@8_KM1>G<hj=<~!GB55SGedXIw#8pd>>IAyo{kZgv(!{Js$9FD--Yx$e5Zz`HS
z%+Y+PQJ|7}6ZGf>QVZq981eRo=k?Q%8975yat{IZqV)}9JRTmU5O+3Fwy3$b4=QMP
z4roIjIPuC81-?Q^md2U(f0iR%G1I&3(7HZ5lI>gAfj{b__cfV7k;5DC!t5ciK8zrX
zLwy2Ks;iGu#EUN6Q=_NUsfhy$QP`~RXQz`Z$6cdMr7|DAppA<w6iaTAVDep^Ag{Xd
zhJ*VQnTDE3;V@Ts%uu>0x4_Z2pYJ4SUaVP~Gsq`4<_`HmDQ{7%E5~b@34&mP1o-4r
zqdwfC-D`w9G|0rw+b~tefUhbU&kg35Kqie)=WL&`=4(zeDrFx@oYLAArxk}O;u6OO
z!<$4flZtVp0dECD7{qzu*|$Bj#fW$H@c^E>P)2PEicV)Apc!#3>rI_1FRw6{KxX9F
zB3Gm`T$=3{Qlu3gY^gfEE(OROnvV2XD<f*VBA@<<2fB~Jj8I)q9qET@uG&nwkNVff
z$5+Xee9vemKjjO`jQn!-<b4k^Ajm`#44@6Mu+r)5Yw9t*3oRCmx)tFdk|KHv?|d>S
zU}m^ZZ&S*Qu)3IBzs1nl*@V&*sEBZ%oq~mG8#u;xtRU!JJqpoyneab4>Tb4^Ye#e1
z(`t3S{DJ-`zMZX}${&>L%$vM+g_o4z=~z1TtjmVM!Bm<&cSO%(?I?7>y*Z3|F!cMP
z6x)5F9$5~DXsrINt)h}Myb$wY+FH3r|F^^~#d2d1!A6<Skg`lmd_f4ig(8uq%Y6?X
z6<hwHnIbWE;6&AnFJ9n`mksstGj$DI_n(avY$IXnP27@3GDir>=8^+peDC(E^Rwuu
zsML5ijcP5ss&i2+QOR+7F?jc3qf|EXd>8pL5bI9%e4Y1TXYM_%>G6U@z=XeCSFt^J
zOly3-%EJC;S&&m5j^wqy!K=`6s&r=;qFC<47QtDEUr7*XpN)CxP#<YpT}dXv^|gAc
zG#50LJ@lu}<#b~d)1FmsI1k|1(ewp0Evl<JUsKqc2uJ$8*W_8^OPWEf(}Gvz(w}ox
zW-`$Ry-<uGReT(#MFWN33fQ7Zn*?tg-Mk%qAa;2l7M&N*4>ya4Qm1)n_2cSDKO*0k
z(1^b}D-gpVj#0L@gpAh^vK8HECrdGKFEsZZw0AA4vI!OluDv6taJXa9c>!s$8@Ex$
z`!d;)yH`vpxOetFNi{)4q5#EppvbQfJ5fH4K9V;i3Y(hGyqDg=#_y+C5LJ`zxRL~m
zaMVWmx12KMf^dduJcOGl!nMP%>!kOJ2HZMpuRs;H#`g*Dd{2?On=iLA{wumV1G%tH
z=miB@4-rVKu-)DCW;8ZyXp5G_8Iv^+0brIZ)hgk<w>#VP*L%*YuNNojs7%$(;}Um%
zAa=Jpd+H>|c_Qe!gomrDN$7|r!E#wLg*J2u3WL72l${3ptIFgZx;cH&xhwYe9s-CZ
z)7~&O>8?%E+mK$UlR^2dousY{0QXbBV4(3jZm2=inDtTngKKjiAfuKM5dKr=c*C?#
zC0)u^OLEa}IV>fr9_~J`b5@+2(;GFO+H3_;s8+jOc&6GocJ8W_QM=M%gxABcYPtpH
z4R%^P_lF_Z@5Z&PE;AbUG`~d7L>w`xPjOOtJMkt2e*7*hu9-`s!rh2`KL6V%=oviQ
z`vh+aeG2a&6Xg52Zvv?s=+ehd2(^DgL8GkTu`Yq#d+j6W^|F}t69zV)o2~(EaMh<O
z-5l-{4Ir^Cwl4PqU4{d%CVWfksIAQdA)KKS!E0UruWGB0ZpIeDSrHvcA?0)Dn+DYa
zgoXK46Utqg>A2&S0_)(Zr=G5i=r1G#KgI^9m+XwBrMeuiX&;mC43SUW?+^beUYg9x
z?B_wYugPHj@)<gcq`!OTm9yd?T&ePN;W_}aYYuvcIcI>IOhX{;y8CLDEx88=nMOLi
z=6bYS7(i=+zqNT@XAs^Y8??DLL>%bW(GC(Ue!Bs59JWxd5mJ&fZcXODL21^;K6EMT
zI)w|i_G_fl%twzt#bjz7`7K`83}zptIt1-s^tSC3j+TC@#=B#oMaR`gZKAu&x2d>w
z`Yy6&{PP@f#bwQx20!oflZ)a|B-2%1enJevMsa{)p-XXAqK#xQL=k(N!yw~r;GOQy
zI*^swaVn~a-nYH!TIPo8^4GuU@CK=G?>|LclSD;xTsUkh7~?4iFXbMK7wG(#5dYxF
zZFn#jII8;Jpt3j9|No!8*%~Hi$(OJeTa5Jgo@DHdg4=_;bKbr<FqaTqpsc-&$hN*U
zO(Wc>Filwubb9`nwno2bxg}#~9IR5~I(_JOPetmUTwY+{J3Je3llCxwmED~KYJR>i
z;c{H*9Y+UwNNub=D>Sf{TIGm6rk6gV9Ei^mZ*bDLc<GYeSDSSOkKgO1;I<0`clVys
zMqA!hFdiAI;)Jbzwam&u2&LZe3D%qSpb5TY_NDj12!fH&8L3NGWKanttyL@91t~FC
z|9LWz7ocvl&?|S@VKh=*YtAY)<)8qZ#gxFlcW;=OL#zM_+Q8TD&#H@ea|h;KSzia|
z?78#Fu;*+MTpQYUb+6@0VwXlFLwamz3EBhKYNt*Q4**=aZxJgDi%dca<!W9W&jh<9
zTbNzvpWw1FKx$iboO~3_P7RoX2h@)*N9h}ChS8WN9fA!`4dR?V0%YPXP6Bg24q`iH
zQ1_QKW3{!J>J;?Q$CJjR;e?rZxsS5^hYJu@ds%V18Gc~*{oQtOqr3-)R6@%(6F`o|
zn5OE6=iy~WBosOBU8eydJnbB0nEYmE1=B&R<>oCMmcS$6!VDh@)PmOl;sRGWSo66+
zZC&%x)$)}(4Wtx=)kefYA+9xlY+_kxJb5UN4w@VMvn}*^(+Q)u5UYH>+wJy<cQE!5
zt)4eh21F*VNZX+EZei!0z}xwx@22_-8J%+|dIaQD`{)ww(X)shBVdPcr7<&d7am?#
z#?`4V+BVu|x4!;X&JK4{^QFy6oL09r?6A~d#A=H`18p~G_LSejy61x|OH+h3k?wE`
z-B={%G*)kp5n!>0=9761=62tfN4W2-C!e_!B}_(1OS;J5-ZJOV((Mg+3WspJgr=pZ
z!Xhcs9s^lVk2eg}>`aKNa&9c&NaoJT)cr3&LjQ8FbV(XNi}#1T4d<N6TKUHAFxi^|
z*FHwdjGfPSmz?)^ZG3^v91ZLjxcitsM1GqG{Gygrjla9>1!p~WgBk;&PEbTiYh@g!
z-__^{A4+5&uV-Q6%cj7^*|!OZF>ny5tLW=j-yBjtvT<HP57%&{W^ycqS)Bu<jpE;w
zN3~d@cwu~dT{>nHsWCqM=Ox0+T@ee+hY}5JGOfP^Ti#KROrFzSa}qcl8ko`&JhL~9
z=C`iSwogb`!)Xklo6*X9L|3z;+LYg^A*P1&ETE5)SE?o}r!IDWa2CYEL}HU(Mdsz&
zzuW|+n|UF@eKodjcpB~Ay@x$_!g<um|2`~g?8@VlDx$^4%5p=4TdmF@HkG||a<+vg
zu>}d4-LpLn6YkZ~l5Pt*)^UhbA1@YqO$Q+Ao&3Pm+|a@PecOz*SMjrtAxm-Ey<1rK
z2IL4!Z)$=Zqa&x_C(bm0^Ei~fgn<T&jp^qoQcQ+dpfGI(>7LMMQY4B*635Z?9z@rK
z%#nJVrT<G_I9UuucE7g6Xojfs@JLyu$oxR~OAMfp)0&D$Y4d6$gpwKStIqHQ)GKy{
zgJt;ya&ii+<*E55ARRX&6U|M>-)foUyaPUbf#Ylr8?f-?1gE-#q5i%1wAt`Ze7kPp
zGh12`32&0E0fp|qv;?d+YvvCJjXN|$%VSa2A_QTWP&_9!wYm2psjx!x@-_Fq9Ehs6
zz<1PsW|-px7ym)q`uq1vMmWC$oa!784UcG6K8FmZ7L1<EeRpz>T5|gEu7m`&%-(@;
zzA!VzzuLO!{F@yadj)H*v%{LZxxE>d^IidU)NiAsJ^{mMHEo`mn#Ot-aMUU1U_tia
ztKsn)LyXymIk+Ni_k3RDR3UYP5H&<|qnzaWHH|ZfW_vdZ{3697fEH>h$sKeYUaj|;
zof?BdTm&m{#)n^Njx{RIcIFJYVKIomYkn*m&iPQHI6{AP0kig(+$ZWj&=?6P%`M(l
z)WzVb8EZg0ZqF}yr@AhQckq=oaBA3xbt<aEgec|;<mFQfXw`<y4fba4#-!pe)f)J(
zh5nGGmKGP4;5i&pZhAsI1BKs}kfw5eWEJk3`PACxaI7yt-E9=gE_X8AZ^pXcD3*@x
zp<{MxFVrGTu)@p9LZLS^KFzoaV7IUMe4e1&V(|R<N4KTkA*4rijdBuJguIdb8=)n7
z-1$I<6eKvbha9)b_#M^E%oixY2HFmg%yypuHPspYWp@B&(kTNO8rrMho!Q*a(#AxI
zWADBgJv<x=3^l7Q6hpLnZ0Y;>^92~Q@GO^Tt(*w$-t3)xus0$|(%PSMXhwRw42<R!
zw?v#4S`2uu!@^LH;-6})Duhst+LvkFjOuEN08mcxK;L`&%tT4TX4#KL<jAsAZ`8#9
zL^cXsJ$C3`T;9H3ljx(eWfp`x<pflm4KeaL`z*&f=J#+OjB@bkK2s##(wU<x!vljS
z8Hblcv$3IS9u-B_E2S*5C1%3074TZ9fQ{~<#skRIWjZE`_yTz}CW0wAxP_~{%ya=9
zOUr*w6!-d`BX(yg_qrEg6#OQ#tOBx^SL}6Admb15iFEfKpH0rb+~QGR$Y1Rw@M>Mg
z?9>MgVkTIruk_+@+I>m!5l<xTn_CHZx1KoHEOs0L&nG=+Wze%uy-DjjRCLr}Y}>{z
z@118$`5)zGsesQGAHD0r;)g4xZzzQf)3D|)EDZMMuj}p{fILDyQ59oXv$&!{d*qt3
zrLA1$?z1!4bWkffHd-a``rA8+^#-{26LNGbD9b!bNDT@I5>_JUSauEPr4FlDV{E0s
zatM>!rpJ@=G=wsV-G4G+>_0xf*M7X_GE-X&@+}el<aya})H3+WhSf%=%J_j7wAthN
z%g6#_v$9gp-InlCe((CwAj3M{735$v|B+D$ks#=rGXquCzPEL~c@Wp;wAjlAaEBek
z$5s4rWHzvd8#Y#bwyNtw0Oh@FY8t*6am5!U2%{MMwGV@D)0yVc8~B(&RyVt!J7J<&
zYwbq)Ea&{6>YcZOw7T7KeI3_E{m#}JDe?gTMRJ+VYdt^!RCu{@Wi7e;J7^_?hg?gn
zG}}l#G!5RMkBtCQhb8(pjPfT|hU=e|^5#t7Nj4b7n$fB8b(2o{*p{Z%g&1vA(Ird(
zz?ad3SaG<xeic(d0`Y-KHMqN=|Lo2=Sz8tAvI7FHg)+`sYI1iHez)rtqMdH7rbZga
z|4|YC5Mf`geNzr<tbY!BUVvt<9sr$(*W0U8t`F`RcYJ+V<nK?8Pi5Qys|6?VGMbus
zY%~uE*w15)5l*@%)qYH>eWV+Ab6+4)2L{<fuH0|eaI{BF$zNl^J~-?w2X;xwNiq7c
zH;fFA_BG(1Q>-RqKA@Sac`&GG#4j}1pn>&S^wZBWCs#tHPJ0;Rq3iUB+k7fbYZ|J8
zvu(gBM5!Io@`0OEu!DOnxrWbjn)v!bzv{O$wWG#cAqsE7Qdb6#^Rk<XbW`IFoj~g<
zzQnNGPeR_!HCR0xBX=jpOe*BA7!D{sL09V%P2_!D{Ue)!Dtojqm+fd;>%*tH?j=Pf
z^tJu>41bKa)Y}B0el6ZuV!Us-2D_xTyS^@m#{xzw&@1xzL=maeuEX>0qx&Kc%PH7Q
zow6ta)>^gmSYsbvey`x1cDjk2v)7ukncBl!-~Nj|LA=HqH6#)JF2DyUu2EPDUHRxy
z)4sL5pR=GPhc46@B{b@ADeBcSCq%=UWhw0SXsR=6q<I>>n+mSy9~mk*TH*Fach<TG
zwxptAuht^++8~%-@Z9QTDqTp8WwYllv|WM4lS-esH^}tf%{<fCB<^xXcR5Nb!b$M_
z^SkjIZ(|k_w?Dz{zo&i)m6vP=VE*Oq!0J3Ebn4wPFA#wXbIx1G%xSmdZLQJ$OUa{k
zwab?C5LQ|s$NnkzN@~i&o#c1G<SpqGvAca*3NK_AgRR+PM-T3UZOE4Rs{@FoDAspQ
zt;;0EeiZ_?=6W{z_9XBnZ|;Y^3Fw*^GAm%9TyT+J@+U}2B<jAduO5uA1^v_l2_9<@
zj4j?#+R}i#1jvqVDpqv0!@TmrZiZ8v9(EK8$l*gHg&p*i<bEk5zbs+BcL!}fRTa=$
z)n<0q$aiN^F8WoGeM2jbf!6h}olX*EhQ`hhKQFvI#dI?@#FI0QMhZMNE1Me9eSnu-
zhZeYw(!1=LhmP9xY);>YNS)R^p3;zm$=BV5m6Fu(NkkcC`!dTZoc6qb#P!`v>o6*%
z5(Tzd_R7eJtdh?Dy6tb%ijIY4X8&{=r1!4k^;1XXbDdto%%mIGG)I+;j_pH`(BaB-
z7#^9rMyik@LL8P*vMFI!dG1MaEr)>wd}#W=a0*tw)d-}ZV4RrbDD8`{U!x}w-Vo}-
zKybB)YS^V)DA5Qqj*$9vXmhu+j)<}#(5(TMW-0#0?{cB^gLRFMMEU_<*&BNIK1wFA
z+|m)1Eqvg@3vx(d6Ofvnn~C>*_9nBdjgt)CB;=a;eo&*nEk6@4lTwJ1Dj)9)rS(3>
z&?&*Hc^rjWrs@6n9jc=<F9mkP>uR!?4!sRWxQMqUm05DyNSkq*FXeCZOo!M>I$0!d
zvGp%qB65qk{IGhu6t2xq>(egRh2`TcNWpWJ3;~oNA*>$KLkaxYZS1b`ul_l7Llr77
zThf3bJ?-5Mc8>;jdG4-4NGR5hwJ9LoLNCDrh1C}Ac)GFc^F<d1leo_ntR{#)>9`oe
zc899QVka%?;#C~HG-+CJ8m=2A^LbplE!plqN{P2idfbZs#pTYZNj%N50_&4mUuxue
zkAwFHQy(RrttQ$28+s0BL3Ww<Rq!|#Zj5ZVa-l~ush-_v+}RcLCZs*@su+B#|G$e5
z6?PCSFB$kNbL^<PD;yO`<tf+R(fgFciC$|D=aA>Ezx|P$C*?9O79xM<8LP$ib1_l*
zkXuteeN|_B#2o#ZrzUlJ^afcxcnqEom4IuN@ARG?{x9u%Ez|{o`ripNGL=YzVg&&_
z!#0SswuNWXKJ@BrC{+G8MsR;I_DMgs(d_XANqdkXd&Q@_UQ|Hz?=2F7<|%IjscvtM
zuDzc=M+(e+ZU>75{F}M^)`;d#oiZ;V4Z=xNRDhC{4{I0ADw<HBY5LTMtNSToU7H+s
zp{Jdm_CC@%aKQ+!3lUBrwjNKlaGpEYZJ3LiHb=6GFaR!)O)17D&LnG~$m4KB5&vwq
zud(H`YGfUAa91?@bl$d<K&1KM87V}#GJN5(i8_4m{AH#&IaBrSO{+3$(`EMR0`Vjv
zY$N>+O8(;CzuT=soe|ld5K(Vc3H$wpz_V2~0imxf*`k<fwg|`*n14ky7)06<RnVMe
zLtxI{%bxI(X^#UsCb9RDSxK8c2!HAeyMj!M*4E{AqImH@I?S@kDtENvKmnQRiQR39
zN-;#_v1~+8VU6>tRD^Fz)h*JDGr5j_m1)pNP}GLeivjq917W~e<BE-ICk7L1+gl~?
z)nL$9-=7n|MF_Ua-X9W#>k%vTMB}3qriCtUFZT{=zG1OYZg`BRdG{}A{zlGcNx2VP
zEaxgq)VsA3>PiS1!SL`7j}AUhygaRmsFELx0m(EKe#V?4q=f=|DuwOF?a`&aMm93+
zvPnb#VUBI~x5D{FBi_l0l7(A(7u;v&qzrMJ4sk6&ui@luIqJcljyCqCU}`Ki&~CMO
zT8xM2lf5oNwPEfHwo$q1L8}{3le?qykeISY&kgDcw^TxhkkGNFCf4(2ZdiJMIT7*i
zGav`6oZ-0U0=9yhvb$4ja<-7UMqDDoP6VvJ3NR(LHR7lEfai-UxJ^3~YJlnz&m}k?
z6wf{o1$bxjP4Kd3WM22@hQFILJO}pOO{hV$qo8zES3grVI+T!(=bQF$iTvV_xkuhG
znPKgs&ncqCS!yBaE%NT`QXmFb><iUYZj|}aiQ^@q&79cjH^>8L(RTW4#3iH>4LSRP
zieBHSWxotsnHzp!Lbz1bWAJNyhX&uC;f&oa-PnRJgQRwiVW1G_)P*+273>NuyT+p&
zR>tn*V|(!LQB5Eey<ls@XIIyg#xC>7B=$=i!>0RAkP9FIdslq<-6?(d{X=F(q+4FG
zWv5$j^7qaq$g4>>MMr$PoQO+pT%%rQEHLBCmpJxPB(9xtEfpI2<<T!1O*8BbR0>lf
zZixa7>#>nDEa)(0jrzWLPC*R<;bJll%lt6D;v8Xs9vo7eFX&-In$4H4nMmNFqtG3e
zPwIHmWe@o5s*sI;lG9Tn^vVHP^KHcm^g1fn*8A01wLu%r%97m>lBqc8R>6pC4CC$#
z>JR|E)L3k{-N9sI&iUSNf+tLmC^n)##qpZ~b7*fY26J!t=X$D&Ou)56zIoX|T86D5
zhk^oof@awAdWh(cqzlCeX({skNnFv3q{Gl!0}ilDd)psvTdP!$9CW<X%1NL|-(n1+
z#(ZUR0!K})g}bt|+q^{&8~rdKdMWenpvW*ScGLpB#MIjCK#G`>fK|ySewry9rT+T>
zza#VJ=LxwN-&V-rq`I&EP%nn&){3bKyV5k3Qnny}&%DRZXyXd>E7wolBI`YE0ia&H
zVXv?G7!6!_h#KSUq+OH#!xkNzFIEg-%ZgeTpzUxDuKYbl(v&2sC)$R6gsB}(x*P*^
z%MYi4>1NeYuwnF`PwW~IqBBug!42hE+#D-kbnlbvilg(t2Q*4=s03f%unLl|0IHD?
zEe;U=;g2kbfjBPbAsH?&oyb0oNJ%b6*g3!5xfl||PH)$Fspnza7o{#fsw^OO%i%#n
zmisy^)(WEM=BO~XL8#dm{nkY-X8x4u{f)dxJY`Hz2giwnNpgK~@id6RkJgu0iY=I0
z9PtJ_reWNT8ME)sY;dLS14*BIp4S_wSSz4xe7qZL-$iOGH)q%0RX%hr<qT)=fJ`7Q
zun27aMv+g#I3}Ra6*42Rx-9Hgx-8#tg`0=3m-RcWp9`Wz0Jl2+eCNrNqV%I#!sW;a
zhXbz1V#Xn4EU9F|UGRo!bXKT5>f!gv?igRi`(E~u$VR4dRL$hr{X$G3d}+y!TZw43
zLQ>aa6j$j&)V)3)Ceihe-<<jJR+%4z6tXGjT*AWwDvydf@2$HD-AXVTRM4e0w6I0~
zNWD+s4acI9w9j)^7(0N*4@`_IhP_TC{+ZAX+0q8HM<zBhO;G%ypSI`+2o1BV{fDQ*
z+IJXcN_1W5DGA+LA7qgD7SJdUUy_D@j?K)?ulNx<f))KcSus2WL?gBYz3N)>^4CZg
z#Wk9u^NJ{C+*{^f^Bo7p2OSHzd9hMbd<P25cC}|jF`FPmZ!1>)Kg!M|;#maR3%jJg
zWxD2<Kh-}o4_uU)YRx$N-MUDE^>Zi2P@4DYcDjy|yxH}pqX*?mT&O`PBE2<cRDVb$
z-~X{EC`L1H<JhU8jo*@3)VT(^o^+Nq{;vAXhj%SFALL&`t*%!*{2g>1CRy>f$tFfH
zs(?g;e$^2~LnmL#m%ZLlG6nbn6><!5U75iTs}X1&=e+4FmBx+}ZR()!?yC<g%0Rv_
zE)1u6A@ET?Wa98cH=C0lrS0tI*UDdnph^?cy7CW4Z^-T~Q>srEO6ly#-M_F<y~gns
zZ`o-egYDi@G(O(Nm)B+Ql6i=7jd4j3iv;E@xwn*NLoh7+os2qauG3or{sY{z(6Xdm
zM)F`BZ*2||iZ75~C(ha?Pbndp69gKX3P)VMWc#ggWd`of81Yo05fe>4ig-o-`^pUO
z_hK~dSx$0=#QHsIvyo&0oLTVDoI#GN;^Du2ar2ehe3;|CR&aaw%H0N-wDa8T?vh%2
zSdw^IArH<SajTp39t~$^8Vv!91$+*$gjn)M239rC2d^9nzi3HFctLJEyi?s-qv)ad
z;oQF)c>YSL*~sOq;DKcns0EHb$~Q!@jSCw4({gcjuZdxU5}`_UkHHB#lecXuyvabj
zIx2A26bn_i99(Z~{(_YG8nrOk7*!8Egf(v2a4U80!z;HlO-9EILa1+h#~NsUSmOM7
z-QezaS!61T6mw{?j>Sj(;72HDEzGJQV^fNoH7+R@c7J;lNEw5~yz=YYF9Z4yK!1lJ
zKaUtklQ)BAzuC^tLuABA?8CdNd@?h<=nCaJ$K<X_@RRb&3+<E4<+F@nsV@ohCuN_-
zJB4~Nd44#-!5sAYygzkAjQ`@nn2x0q63jM$(Dr`#r1{7TZD#_`ACtRHtQMV_M%%`D
zfURyCvLs#0O2FHe^eQ(;OH*OKKQ<6B#TfRz;CbbrR}omRo%|bIpkX%X5)R0?kE6hY
zmwMSzb-|;cwSqv)OF5C}nYE3QbKGi2a5&*VG=Wqk_c)J#VE)ry;e$nu>oa7n2MqDa
zY4b0mNi+*71xw=|7xINNva!GCub^lgyafdxS1qWzy<{IyoJJfLV8Ka~+^GU{{%VS?
z#f4%K{|i`cHht6izkpTs_G}r&TdGyftgc|&i=T^rFMccR-i5b@phzf*Aaa8}Tq>6b
z`WjxH)%TL(h?B?EFZF0<CA2ZYDCTT+8C+xym5Xu;hbVfJL9|K=wFJBDw8bpe1|}{y
zVD1$I>%D9$L*|Y1n^9Ax=R^dSCzAgIAD?>``iGJ<Z9I>yJ_a?qu7#}nQa%!qTUg6<
zm`W=J>!9!pqi_hDV(5e+Ohi!4Z2INCHrx_z(fRI=-~EXd^QZkF()#;WdA%PG(P*fw
zx`tim!mRvX-bphymiS4yhAGtY=Pf1|3?>Wdm`_T|H|19NWJ05IZ`X<CxHiK#s~$Z%
zz6np>W*(2lTufZQ`J77^Xd26Khn$j@@rtgSmlt+vMlG6c6|K)HOKX7es=J2RZ^j?&
zXG$wEg1lHEhf5TK&XGX(IoaP#V0tnvJSSEung~hrVFDfYDF8GsGQy`76|3;(ki(W%
zmfoe>6rn3v9hp{6hL2}#qD_WY;X`?#FTEml3etpO;=ZhWu<K2TC6|BTW{;vKie=5d
z!}&&7^ng@R;ekel!~p8|EL$cfdn{>c1%N8GJqb}ZcZ5}>E$ERAJp4H_zFlmXn?0P!
z!|!U<Sv(jc4j%pJFG3-{_I6rkEA~laBKP4k6ds>TV&V9lQ_%fM7uGLmrk7*$N?Mb$
zaU49LT}D1@qV<1k*4(%{m*+5el@4S0H_ZJfk!ZA#8&~@uU=O(}pLX|uU!PZRkRGo}
zr6QC6`UpkUmVMpz`3oQQA?s+=f1NM=``d;_1DahB{ZB$UsUJjv-?2ku82QRQSco}f
zMC*%Ut5t-^PjOjUMB1gP@M~1EdC|qIxbu6=8?-{^i}(E|Xm9r-J~aN%aE(T?<4y+F
zs<L#9X?lY*O!;}rBAGd*2YsOfv<aUg<?G}HwrL=;Wf|Gl1q?bRnk8DHAul}HWn6Eb
zy}REq42CfL)Q?vDDPN~gZ5JQh$2pyd!y!vh(zP%D`3H}B74|j!l<a>JGc$iXQkPOf
z4M|0WE@bQ>ZL1>usD#OG@vxc;PR&G$5;a+A_K5BML^cggXQ$4tzKz?(uYM6Ew;&Mz
z4|Zkyo>CF50c@-^1+J%1<`1N4QC|WpiKz%M%w7j|H0ftb&imN&C+612S24jHqb2oT
zx)$?Lc2tI7odlT^O&9SVK)0D+=5XMWp9GlsU!n$#jEdRf_2WI#PB|%xeuI3XmMT)q
zsm!t64SPN@?=^o-ieG#=69P{g|1()tvsdT<UR2t+_u+~mUwBlObqcG_sw7iB6^PgA
z(<(<w_C~hwgfgnnu;0oje4#>Gpj}uz0caIY21l1^GFqSy!iFb@h4a4@IVQ^2DT=7m
zXAq6v*~H6sJMV_Pn)wo7TO`eyncbu;a==Y`v+2RKjYr2*9fCKbn)$U(oEP;nKP&em
zcLJ6Dp4hi&lx^`8Bvs~}qT3&Cj+JUM>ok81T1HiV&t-|21zbwjaq_eapz~wGK2~qP
z3i;jNn-x2zaf-<PkV`@MKkKofzr?v)#DvK7oj)X+@&q?L5QSy5<vc(Z|Lf4lCe?4!
zu2NfNYPs4PpSt@K&btx1*7jfKpa_!tvip6^SUllep`<22$=d7+r$?Suh~Li|6c~Ks
zA8>pz&ao-i8Q~|~?3m%b`}A%?^>-$_E}KRvq8y!~_wMUX4!^c-mN$MM(aFW=lNJAr
z^&yiWtxE=cV*36|mo0bi%XwYcBzOpySf)4@ll2HjM5{d>0-RE~{m(+cm&6QbZe;W~
zLxd-S_e*J&(kZoV?kdRvOcLI`B2(^R!qMoG!hvojoWXZwDlw4}$O*7;tR|SqgNRfs
z2NR{pt2U&B-YxHNhPQ*zK0blTH`D#^C!>coB2$XKrh+&>Rz<%b-WA&4FZi{C>XJW;
zqD?}pfM~{9^S^A@FvyPB<>D5cb?|<sZ3atwvb!c!Gh4F%&84Bg<A9Is%>GS|_17xy
zY1HmqCw0q|3(JDtpGcR1k?RJ-G7(4}rXnQMBq9%Y|48AP>!+?5?Di@GwWs)_5bzi#
z%P!qbNM{n@$o@^mLA6YR;e~49><R1Gi<Kg=Xfa`x{L!<o)>?Gf%H~_B-S5Z$^&#E$
zJbZlaH8t?W+AQo~`PaE6a6ND_@uSR2_$O`WEhbZ(0_8f*f`V69KZ=zlU|D#@+EgZ`
zIWAs1#;k<&`VkuaQYh#^0{hRmRmDmD_+Rp9M2Z*CEqs&XDK9?Zai!3~&-`QF7wvH3
zfw9l%R4E`)JWgW1(X#K9cui=C(6X4MiZO^1gY|!fbN(P|d-1YWzD<_~4<(BUF_cG?
zN>uDyuo_KV#ao5cBK61|&H<9NQbQAe5WfU<N>_h3JJ@wF1y4%Y_88W9d%5_pk_J2U
zA3nX*f^#Ge%?*xV!EE9HJN3{MqK>yeL)(NlIg)AdOJk5zlB-w-k;Pi&$=Pv;aXce~
zO+UTHo$ex5Cr#ciy2tSD;V;0Z)jx?F?mqmM#iqzhn4gJhN<>#>_RZzP_bO$PS=6^f
zc_-UlM3&LA1@&e>T>}g`Ki22GfWL+tX#qLV^iyxxYxRZows?_F7<z|1*%Ui69jPSe
z&;5Cz8h!jg%mrb{o5Q%4xS6*LhGvY&O#kgLsJiE}!B4l)S?%|;hi<nAHDjQy7@2w|
zIk*D5H)4rCM0*|mdeiVKf?4uET!5w4pZi-pe_0_B?<y4Fvrr$l4_3M>upLYJKYaxZ
z5?_=5S8?i}sWOoF`+MEq05j-^c8P0E4g3)syr(ldChLy<G7Nt$hGq+213s?Zz`Elf
zx8~a^$Wu3=iMLZt4GsKOg6p~Vrvw#|+t&?Ctlwq+-j86&Cx`$avpXWonuH=M==ovn
zc?-@f5;g%};{WJ)F|=5HKJ|CYqe@q%U%Q)axEXbC`_Z@gajG^g<L}u-v!%GKTzH>@
zrAf2#)1&6&-p$i-m<tg)5}%;KUs*rGW&Qb+5niqTfbviEj+FM}-zPV`SDJDJWGuVR
z8G%}jQTXA7y&HWp%r~h8tdGl0c#nh#wLk@s3D3NvoF>YpE?Hkiv7)dG&3S{!zIX8K
zDZ`z^rWNxOn3=_s^79Xu0u8Ieul#GHo0APs6tnrS_dX-@S>MShfZW!;r7d6eM#Xh7
z;<|o_xK3J+h=LeIyM{%uRtf*JPj}ndY`>8xobrfshR>0>H+VLHp{($EO{*RJ>bmd!
z@|5`pbuGXe78j^2^yvnpf66fP==Q}C)NhF%*;y&2L1SDg$YDS0{-8-+t7(BV5`+$Q
z1=f6g){N|EdwrDAWumk{K0P56hog02!eP~ZJ5bl&_RNs^b;o84=v?}XW$zx*aC_rM
z#9M>$j*Y~n0Bu*4!@*u8@(pa+M9lZYH&+pbDC8sX(>{g!4^~-oh2H1H@E<eM;b^B3
zao_6x%UdqXABl!SHNu*os&BZc{vc<)am?uFsDmO&#q6A2tg=*<xhb_xShU##QZYfV
zvJgg4TjTVQMk?YgGoI2I@0`ED_!b{U?u|)NHiXX|K+n}VqFQagzR`TE=jxmun{2GN
z_>C>rcbZG4ajG<o-iEE2u<Ais{`is`Z}t~=t8-mN+#iCxj@j^MR^m4$W#oh#Y4rcB
z@?W)WB<CJ-$>h_W&#pT876Q;9M|$<;B2p6O!@k$$9&uFlXOiczrY`@__e(Vb{As=U
z>?uHc4~f(5AI;#|sdm4iXL1W^7^7I3?71;Q0x@|sQ95e%i6q{o<hKAXR|3pD7}gKW
zAEg7G>plB;kLE84A`|$q=XKRAwZw(V#9E0g*H=w5N8`2Q1!eEO!HkC;f++e0Mn?e%
za-PhusD9LN=wn&293W>IhgYARR1P!T0SPG2r#$ofiz19_bt8Yaek@p(%`%doM5XAw
zJM*2wNUddCz_&FTW|_I~?AQiW?V!~{&XzoQCEPN#Lh7w2o0mVI)Iw%|k{l>=TpGTG
zhLDx(iD_BAc`Q1Qz?h@p-X$N`<F}gA+gBvtSD!r6QMuIv@hh8r=P}81X0J>ybPv2N
zk}nE+ti?=aIbh%Q&f66}rd$a;mjVRgx_Ktyun3VAfI;(7BkUPyh=4bN*T~Ya(XxJX
z%lQJqhuTQ|#QhdM<Iy=>wMCU%tBhjSh#)7h4|mU>ONPVcP^i(sl+Pfruqr1CT{(s2
zbyuxoM8FRzmfq_^8_50hI9R?gL64#)gWkJ#bT;X$DLC4K9k)+lDa)N-Oz;|I>nU^g
zWApM{trWZbHBDXovkxz4DLrKwwB}-_h?}l<BDsk|;E6swpd)~GaQaY41iw)5&1|w$
zrRI@>oW7<1Rah6V7r!L1$NAut(>AQo%<Y#<c$nQ~en0tVgAWy%X=w(}a(~?hilF<T
zClcIGZ1ieeM9IKnq@TG%-8hu@gPc575*^1P+lwI~<E?l-=T0bx>Y-QbM6Ipwmus||
z*k~&=S#pvTOP!q-+x5I!H-F)*8e!|RAx;d*kulu$b-A!fCEr#0*BE7i--&wx@gMb`
zQ-z#of=V>Ic#Lwr=JUWp{@0R@%*>Xc5|v6z=Uqy|KV`^!{k}bbJBM9Js_rlLLrNgg
zfx>3;*o26B=j{;SNM`@ShbZsd6A!AQ_|LbJUYk+7_bz`Q7vH)(+mxIIZi&2KVRKYU
zf_aNd15NP3kmFQatGh}}mvPG}&=6hOCnTL;whbCJV)u?nhjmP=kK<lc{H3@*o)kFl
zn$dRKF*_F+_GDu_;IFJsK+X6R-O)aqlo-3jMMijR@yC<(jaT`|(B0xV`npH^H*@VE
zh2KdSwYl$G?$NnhrLV=}pN@p?3aLPBa`(5$D=QWSmM?g)n!oNAN?0{v$~Y@}3||7#
zjLXDp{jY(5M{~N2LR@}dwa$CA-PTW&;MVYcU!-;KaODrbr|$`r&uV{g0LG>#DElbT
zM))--=^PD5CIl*5-gn%Hw1*U@l&piA1A#gbN9%7hHnG#g9^H)lF0Tk1-R=XymWsam
zmxlYp&q{m-o$^Fh=N5O)Nad|z=F%MeTH=E7z2C9=U?htiKX^S_=>4pwciZ0PKU+~e
zy1Zp3%zhL{>T`(W7a1J)X#L(i-N|E+?e$I(sz~(cf-%Np{jEMHLK_KI>g3vL`Jh6C
z=4Im&we@F)WEGh0%OVTaeL2S_6aGW1l=*$B@cS0}hYMe_yz|Xh<qf&~JBO#8{|{&H
z9o1B~ca4fDMVbl-NL3IJkX}NKio%0573sY<>Ai*`AOb<@y$VPN=`|E7(tGa_LT@32
z5R%;BIp;m!_x^G37<Y_hj6JfmSK0fw)|zv!x!1C{Y#qI1u;{AAJqpWDV3FkiCE=t`
z#JovZ^6y?Y+GUgD0IkN4(e^tS-9EVi&VPMoOBg}9AGwhNHWv$a>7>!jO|FDq%-$NY
zWoA)dTd*91%yrbYyaMrm-aGi3xq=0NQ!g%kG&Fs!838N*tfx%}b87$xa$KJfjVjFY
z*ZGNtxIJJC+OtVHRK88LOSDf>45G7kujUgHRVSPUF5nunqH{9&%%6@GcB`~8_MUvD
zqF^1t5H!OgYKHl@syv^Z$k+?ic=SGYt_YWnFS{{H<0AV<o;_N6OEI(9<bcefgl{H{
zJT&#zWetI7hll7(<Uhf|Z-NygN;S(+Y$Mk2ZNJ2}4}O>~=n@?Z?pPm}IHNy^^SH_j
zYo{`Kc+f;YqKoEy(1CemfDbI@vZkADgPe!P;Rn9U$z5$+&yfZcyy9i>xnrTA<@K1`
zY*sHD&u@>pJG0#BVkJl8g4`f4kSY`;U0I@84TRlT>fR<sU+srEyJsW3Oimp8asbAj
zI%y?3&T}6mmH54c<@8@|eG%c2=xLHR7<>@psm?TexSo|6e>u4elVecyd!h)E1E0U3
zwAcQqBmO*b2h-Vsh#&W<-THFIpW3KKwI`kQ%SHIN34f&gY%ozMub4OYXY>INe=KWE
zoknt<i-TxIg)aJa*IaegEHQUk6Hn5eb>H%k{I*V$HI-Y)N0W!tqbbL6vTiQNM&X?*
z_XAv1dPM-M(Gx8hT}^)GN>PmV_z3wAMvE5O%Ap$6$oJw<z`bX-2Shoa2I^6iHTe*!
z`|0YO=pQKG9)39Eej~!VCe_|VEC67YBvQ0|6j54-5Xhu_UekU!S^sOmb?34U7l?1D
zVR>y3132}ZInct;q2ugF0ET8}+Q)lONYAO_0ui6Ssyxy>5k!S0t%GJKfh6IpH<)K5
zAJ3d{WSZQx7mvno)U{;=i-8Y8)-kBvwQZu)l`=C`MjK_1;{1a%Q^S=F@w1C0_*Qj|
z6#*p``OkY&5C(pw_N7<Sx5hf`(9Y3I?5;1fAx5j>V+*u=I*SsVXGPPs^LHx@NiXT_
zZJad6vkc{!7kvc=*Tw-F(DSyBTGj1W&z6bBq#N&ac)4(ov3!A|n)2YjpJz<RvXn$T
z9@iH?wlm-Jts^ymA(49dI%x#L@s>)<RGkUQxD&(7B6@f<Hcd2iD{0RVnX4*6Z?Nn<
z{)>Xs??1D?zn)d99ffgY+H}v}#Iy|fFp2CLLgmv@`WZ*{T1;=u*Jb}i?A*|+0Z*@d
zl-sAm%zR-3do&TPQkH>iYltR!t<;L0us2Bd%;L_K!uIGi4@;)TKxb_QeYFhP%+ZE!
ziC}TrsPj=!>-qB}<8TR}xmzzW$crezQVKM*K1Cbq!wj>3-3oHd!PUgBz^e-|EKXl+
z3Cnf$#}#R249vYh568@oD(o16H=a&6mKvDa9hsdCM3^@VZM}^n4Z!*umYet}WMgHD
zf#tLvKHME_$pv2H5%AwVCVHWP6(JAO1qr>Sg2dsX8myHvCM5$?@+M;TIxY9NAr(+O
zvVm>h%FNc1sOww5Xf|@_(s}DabSqWLaJ>Ro**lg0x_K0)co@)ZTH5#hC**8yjNr`%
z<D>tguuZY53ZA!jN_F#bT1lOnw+~2zrI$PESTFl(JdfXK?zG3{NE0uN+#SiZZ0_#1
zDT@jtt%-1dD<<8a&)ArS7zaI(huE?PPRQzZ-=m7b9;04>S2DWnl6F`GI#x(1nQILL
zFWA&UMy3HDzI$QgD|La4Q)P=DGg{<wJQLFTh9&Y2>f{dms>sZTNhRZ>wBgh@Ju<5A
z&ZH~(CO^~>-Ohe9Hs9a*teNtFNK0d0Wb?e&*+6Xpd4q^fxVFZUZ}%Jvo)>-~wXi?H
zmP*MI=20NT`Sm+}hJd3_(ECM(&ZbfoB;qmQ?NG9(&2$tQqhPts`Q{Jbk>gso<7f@4
z_h#+z@zg)wGF6L)IIj7>w?3Za!xVNkCp55zMg|0GtSC>m&2`vmZDVUm(0PM{{n}|`
z*$U(5J!64zDMHz3cy5pAn=^i5m-3bPNkW4<s>5;5aF>yUq=l|D-U**4%EkoA?`t8f
z`4UBAGJ&<W%UPstJQVb^3e>v~8}XyjL$cxf_@=&N@WXsve$iH-p+3IRlj&oExf4_0
zrs#5w7}}_b1GB?jq3AKgipS4v|HqSKXvB&ICz0i{kWWY+^$AT@5yqPD0F0k)v;!5<
zFJi)oyU$40mu!n*SY4uL))T%Rv6r?K2aEX{<DPvkYOw8;d%kb_P_6{Xikk<-VtSn%
zT4h1j!;ggJSzhC+vS&g;>gwu3h~4AoQEd!MesA1aP9`o*iR@uoW$Z@T^%60DPKhJt
zUipD3oeRuW$al9=V%8<^nK}O<&_jl88zH&{$G#s7Zb;r~BlMbFST70~i8W^@Zcrh1
zInqAEuH?AA%N_1bkz($-tbSo15$;<YT|fJrJqT^hz~uDW=3vZ*nSWj8TaP5g-40qZ
zQ)Uz;kBAvjddZmVgM2?1mAhx<xHt9@R@vAVdGqz)6y`EL?HkA){F=FDKhUC6-|m33
z>6~L_@^W9`ETTu!6QA9=u>&v~S^LOo3*1)3)PAWS3`M+P9&^ER#}3BlVsesazCBj)
zOR8X8g-HZDv53(#k&XEt3;F&^zC5s_Mo<2L9YwD#-Ii%;#qF&5Kd^W5pZ2^X1(tWI
zg^%V?{-HN9n0!!vR8-};=$B*{Yn>`Jl|y~@(>eP^@+}QT)mkyzX#0F6k2c?H1XA;^
zaD_z3`_Xgzh-6RxAoQyteprc1m1)g8nIfo89|hXTnqmp^55=Bcrpu%Dd)F#-yQRnK
z|BH^W7*JF57|&A;Bv56wGiwQvQpvr3vV&h62=>gPXW&v<uAal#G&AYq$pD_`0!H1^
z{1<HwQ`>U1R?c}L)(w<XJ1it3-gVK|vF^gvGoH9I4w3&Ezdj>=2p<p%HM2fNCmha_
zRdEUX>XtVa6IpltfIcDWSbLeaLQFKG*x=XkP6&`)h_s}it>{tP?8A7zz6st)dQ$Y?
zH(d6{RShC?;I+wznp85WX1l-2C6(cxMY5?KF5=+}C#3#pKY%)oGq4uxA)x^@pOD+>
z_G#u8vF>q@Pr6QJZl--Cj$rU-QXo-irH6PHUSW{NFR1l=vbG?5IBxU}o+H#Rcp4i8
zERML>jzrin$L8V0+atyPQ1}wxbf?lhVbPODEHr<8)pjhE1Y@;a1*=x^Ke1)5fIfxQ
zTV^ir`u$##iSHX67A$^NdF0eZRD6H88UQxdOkLPo%~?_68_Zihf;s~(W*XYV`k=bF
z$Jbg%v{9vE&HQ)#8F#5l-s48i_MOour-8b7{RA<W<tHUhHk*}ICvR>V0d5vV(Xj7j
zl8~ueHVL`u+PQ-=g7c4{<x2zveeWEOKSUoEsAh1~jk|l<)UGhN#Vypo%ZLA3@E2(P
zsaaGxk4IJqp}m3uz;Ze_Wv)J5y1dfEqkIp5Y9*;BUM5T|FYk}d^BU{xI$1=0=YNgs
zxl#ViF#;jBojov?iB@pp5&!*@Z{eW+784$vd?ZaC>{-1UULA96s4h!K9qv-14e&v<
zkyIxe3citbwC=mQQ32t@a-a2aLGtWki&8F?{`C5z3wL!?f#9~@O!z?-%&#$UwhK*1
zc2oqi+CAY}X5~x@F)`*{wqKa(LKChgS)h7Pb1;<x6~B>&K%s^T;1A(U!goY16Wgr%
z-oPPfD^n2$I^p{K0GsbESGO;Ys`{)^u*39psrN+>VjB>cV9tY8jUAN2NNAkF+7C_c
zO5i0W7dyLME9=+SlGe*vL^`W`D>X3rT2y%Au$lwaq3}%=BtueKhcNT<4S%fV=iFvu
zWDct4w|e^`GmKe^jCk@ay_-1AQi_=He5jhs>`dYIy$@mMNcpo$|Chi&MIK98nwG<K
z$(3UAwX4O8NUbMR-GO?<st-Kr-Q}9an>wGyhnb`#6<0e~*%XQKgW?CIjdL&wAQToB
zfm9p^(iR{(oW+;m^PBUo$#JzqBnNb%=N?oM+bU^oKlW^b3W=SWRdd7!&nng0i96Ol
z`d{eW@c2o7aMGaDyruFv%w$5XNH-5tMTJmX9zhxezSiw_=jR`Z{%|(>D;#->mmwPS
z0<~(@1?{qh8+3{)KZS2nO-O1Re<OPhWMr5@F1W^s{%ph39E!aQg81|KO@`0Vg$1eX
zJoSuXZFWH6i*$;0tP=SMjJ|9jl*p#$#gd}Db8+p~2_j}s8{bs?YmJn0RHS3e>5|b)
z;k|>-Gn-xOB+n*CyV_>!$?RS)FWKh^^M;g^yg|Np!<RkrsQ_~4+d&?ED@#G9zEC&(
zP1d=FoOBG~?{$?i+O*eGgaivwn0DRgvQ?fLU1s{IB<st-@6Qu$(mC4(Rf*Kmws=8e
z)8*Le(@a};AgH8SEuCs_Cuf<mTm(V7Ni%CMNI!Pq>EtPXEjd~>FCPvsa(OSo;@%zU
znq0_Df3InjGM7`|3uaqJA>`;(d?9@JKYko~Mu+bN`nLbvRB3Zs#|VaciYr)WTF#1+
z)lylH8C7iHM*;oOF*&2&m*YT|g4t*&sxb^1BPgo)s?VKzwB<<#68CK6J@Zj1=R+~y
zi2O4zt8t)1Znhu;QzV~2!v}a3Zw%Jf^6aTDT&iNycn+NxJ-qt;RD2sklMj)O#U?+v
zES0-dj3cMfp~G*WD&gFYxxJ!3*qElY(3eCgJ(GBUCW~)H9Y>{swm%Cr&;cnmmrMfV
zd(y<6hsxYyQA`KsubG^#7><hYawDT({DwDY)L?u*Tq_1!d<$b}TNt=TT;fjE$FMK3
z#++2=1$d!8AG~#bB30o9=|G!O_BGLG!YOhTuCcM9?wLBIgSvDw;E_CQ)kxn?#>qN%
zna*3;mT4GOAfv--x!t<bVQ9CGY5WX#jT=c_xD+APuJZy?=lVSjfk7W!?g)mO3;DuT
z_M<|PB~{WP<~^T`9MqFqc=C~5wQ01zPD!TPcOBvf?KoreIcJ<Y5T1lbN5anhLIzrp
z&Xb=UUy9!Mp#vWrly6rV(qOW~cZ}``Axz1fByTs79MpKSGGs(eV%WaG%*l>gNXz2!
z!;QmF!!0{N;QMa$3A(X=Lei-H+-LHIL9E0!M3cE)X;cUgI1FUfU<dUZo5Cv)|6prS
z;vw++Hg%Uq@!En|3{=~rb@cYWF3~PE(J*%wuzn0=B@D>IZ?n=D>trJ@@(G4{aQO&_
zKmvu5m{{;CuUYBx)NInbY~|iI>-i44WaximY3iIpsveiQV$OSBDgCv9(A;mrdu3!T
z?Y4t>w3~#EHs=wsjbXoFiqcx3xL`&#T`=+v`9n=#7%f<v8c^g>yZp|erAQ({*1qET
z(N8>a6{Ixms}>0JQ%}S;nFc+_@sFfn=K3wE{5J4%$Qb9Qx++g4B@1(fR`pir$w!v9
zgw9;vOQ#3xO`?a(a-z!}2tB62c-=s#5Orrj|Eoz1AX{jCHzlWcK)mrtx_0!!Idfz~
z55_Xn!!$F(amYHi>C*dnjUoP!GA7I<O)kiBP3~Tg?-La?2OdL)6IS7gG3;eyHd$US
z)LXoJs?@Z$J}>)Ohls5K6>7|?yU{$5$eM@zU-UVUrZ*Su+#3g|*kTxZdTIT}nOm%t
z^V8lKG6`O|_dK*S@gW}LK@5A`Z0JAa#UQA>1Yqc3?zSE&!}*nxmjcGdyV~GB>PAn^
zZR3wBj(g(A2OfD5+G-Q+PK{Jsp^ut*dZ!r2hpGNVLTw%%*xa90V?M~eJ2Fo+qxsyy
zs&(52Ef1)g^kV(F*z^9cU}B_-7fi-I6;dz1b+T#e38nuWFsUGDq25l6W3J7f<1gJ;
z-B`gBLU9+!!(cc{Q{+VeApZqGyEe4VnzstrT1ZKJWJy27k?K41ygNc9t8;#6vPEW#
zxfN?@AfV`?vIjU<82@1^Hp{T8k}pfwEh&8^U7hOs*K_R5e59-O5Y=Roi5$d(k6%RB
z<IipYZl#`(H;ouSg;Z`56qcieY@4>{n*CWJx)ut0`HV&H6eE$VOZ-sBffby(Hy6;P
zi*NK}Ng=jU3u>%0o5KRK^w|)l&1siR?v1RcW2BclcriD?WK^MMi*|t@_de%ky7>49
zX8V(gn5?3zW{N<46T4WaWj`HlMnREBZ+}WHyWWSHN%`Gx^u!YHt8Mt&%<<zThFZ{T
zL$nL?myHZ99c|e9a9<K-(L3Df(bxx1v_DF}nTnrC6(>NXO`G)ISu^+GJa#C%UIYw-
zy(^oQuRTQM8$GQc>91IrJQ?*dU~f?)w0F$voLn&tI+b?Ejs3cOulmuxFj!#L#|^MF
zIX)sE+7g)BD<+MKdnYajKBL8K`u0VEJt36Z2Mo<x@CDIYG{(7(Xs#1p3^=1i+sb~N
zkTb^xy0)ksI}nx|8p90^P5@w(3?{bZ44VV>xB8X!Pbs?kP(Gc7$YfUFG%nJiUCMY?
zUkwkzUM@AYkN72h%O>N57~{>~kHqcJM9h8L*7@!NiYEznOPUpebzX!b)YksTUe;sU
zEH_U3nADad#LKH@$j+jL9dhuDTDer2cE*740J{gcYxxn&nW!z4GV9W=^$QInx&)%P
zWm)rAr^Y>Zb&?qe2aD5b`L1jj(|<J)#2@7jU*t52kJa3p38QH%U6pT1$ZKdU8glQT
zWO_F35sK}(Ls*cnI+}-pvz}CxwHSww7ZTctsEZ&@1_<r(6IkE7qbcDr-%vGaVr7P;
zXU4N9*y<p-YsiSYgx_TimBW^kOZ#H;c~yoymeipfdLd27Pgj|mXl<x6cBfaON=6~V
zcA4^m-_}HocHuMIx<?Fqg;y(g*&s#B3PU@o(YNrwa>pDls}u@I=+=Md4N44(zb8dE
zjc6F0zLRAAi*ak`?#Qx-FN%+lwyVzm6`Mz|HF0b57gM|iQx?n_eKcKPh`Y8!Y=D0r
z`aQUv?u!;jVSeHT(CT*$I%DrTok@R8I|?>_&G#xMeWU9CV(KqXp9ts+6k;*x9~()k
zb|;*T9|KA*wOF*jIy$`+;UcKbyqD23;BMRy`szRQ+!0IDRE<j4S&?d^3+aaK*wkQ6
z?W9I@=tnrV4ejOzb#YIK(bVjrOtaRfvbC~8Ovxf={0n{;6eG#v?qA7ERA2><!LxU~
zjS!R4Nd;6k(%k^-H}2}1`<qoq95%pg(;%?OgDzhYTUaO&MuSue#yB`jzS#F~s=foD
z3afIpy@UsqOaQeF@f%6g92_kYf45-)F4Q_UbQhNN{Yx1+4}OG)K8d%Mo0J?V7TRgl
z5)0syrdcp$cjMot2Qfx9qtHfimsg?AJYr>JJ!_dX%T(kU>J?cYz5&qBsxir&GxH&B
zOW1s-Wf2Od2o=Al*c!RZN{elYgYK`*T=syCM@-!KzQgY1IAMKXOS!tq(?>uRX+~J8
zn~R=&yw9i!lFJYx-20QR<7dvkH(M<MhPtL5&ZjLmxGG&vzB7p3ofCO}kXpLe#*jU=
zW&iOt4!`8UqhHLH8-5R#W6hfta1yj-J+ccB1A!io6@lvo2pHX?ZZmr@30OOe$Jer+
z<p=7$Ufk@wG&zm4auDyG+ToswrO=ZWol>@}Z6kUpHNv{-Qp~Yy#9Gd3W$K$hnR2sH
z9p>zRSAMxD7yQBbsx`<Dwxulg6a*b)?7-BJgBu>#dfL=dCOc>KZ)6Z1obY8O2b@tZ
zsqVG2$*SKOjT}qjk4^E8ou}8}3OS>?)b*arfk$ZG%bfO;IvlgfEFK^2-SLZ4k!9>~
z;SPllP95K+AVlu)f!$2?q+5T0Y}ceRI}1YV1)^Zwo^qZSw%Ks#9F#EHexV3~*GCWU
zg4f0HFw31~QkSH68wx2j(1>{G9%A(1P-HvKWcNqY@8(IDcD-K#An<wULo%xHoqJtP
zZtwL8eZLkr)ByN<4`hH3@Te{nRu@y32_^O^46N0mGn$Gm1%R~ZUA~SZV%WvSjAWjF
z8!>-a4pBE_9uTP;wJtjOzvUH}F3$DRH~c){VY#9i`8h1b*I@Nk%l7e)&NZE&oXAYg
z|9AmrLSx6-N2W?Uzae0AjEZoT#m=#JuTx?+B$@l99OnY|%7W2!#iqw{LA(#Tq)wSX
zSe>f;!gq+5P5Ki!e1AydqL_M-W!Z?l+>0G=9?gLh<HGCp($20)>8CmF1NbO#^`|cU
zfBD*$TpylM-r8m<Sx_EmD77L$ykePkf;ZNG+#_&d_rF+=SaKVcZCpN7HRP)NJ0Ew;
z#}M!Fsx~w@vY(LHe2{+acr(r}*gaD(q~DK(CIsO<0Qd~A`-#neSqe^uOBO|hAkiDx
z=^01qf4>KUKc9Z>Y0w{v*gNPI$3i#yF!nv?8UFm&m;UYFSuA}1Gpl|5gPHRGmz(bX
z|Fw?B$EW|Y8AuqWrkI+1n)pBm(j2}kMBcSCpxUn<`f{p6@G;FpiS_e;W%pTs<y_W8
z3!hVCe6f_r^J&^UV@{rd_<Z%>O?{C(EqFM<%5gu+<kHbI>u>GihW=((&n}|c^gcI^
z^i2oeFQiq9-|Wav^oFK@2KR?|64L6|i8qG-b#Ht=c$4h>@4K@x^Dpy*8FLAJk05zo
z)8lz>`bj~-yxUriUOEDnO0TZXex|n~e@)QXv){M>(9ik!76oCqAj#|aKZESzYGvQ?
zE-EY6=`3)`OMV7+i-lQ6s}vm`b<2DW|MnRK1rLg*y5CHaBIFw&^?ktW%Yt=m0>caq
zB#qO8p8n*tP9(16^~A}h6sZEWh2nJN-Isi)5ud|vUffuAx*tg|%xkdpcBX)X%qkj-
zP$|~LlVPIF*m@cLhHMm5Iq}Ogn&*jXW9sO<A@h2%ZRX=~DGg&>af1khdIQbB%^e?<
zxcU=1$-^Q)-Bf0EE}iGj^$s^1W@C!EM{)Z{q8mq-&?)aKUCEu|e-c!x->~21V4|dc
z`{aG~t<4yV=bHb7<$ou$bQgIk`tT9W4~>zc&k7S|et(8$o7-PJy~mk0prJ+dO($AM
z^b<tuF(VbV07d90->*6(Kj>y}8QS+e_F$tCN#0e{ocP2}>RLdg!0|@(ewXpnxX3W2
z1de0wPxOjhcfs*0MM_Wdyru%dc&7)Mbgd?kGqWi@v!>j%joNg*m@hOv^PAJBJe*n3
z3@>e2dRi|<PKmon(;nHx3Jt|&k+8djAQ<o4D39oNPnVF>UR+-DPZ~j8dLU%&`PE?`
zP(<g8L>QHnFh8*eo)<Q<z(SxnS?yt479{seCyMW&o3k9c`0>ht-Sunqb#r+aOpkhb
z-)+-9O)vaa;Z22*myf_gR~~r@Y)k@iYKf5+2LTMF^S4k^7mszn?A(pY{#M#V|LyG3
zR8e!_Yh@_VC?`dyRU_{G<5#UI>>4Ux$zrqj;B^(1bp44BFG6hZG?8F?R{P+u<e$Dt
zy@_~B4wUNDA$jxUPS3*=Z<Fdg?gx805s}X{O~Tw|6l2(m&A{6m8q~MVayfb|!rw@S
zH8~Dn4=7uB(Pn@lqhb9_?cjt)qb3k<|H0oSFjP^pP_SLWr{Qr7V~%dFmvGeH+x-VS
zMIM(<_>SQVbVX9Kdtrn`14y=!f(`#!@9?zD&DJ-i5s8`wUD~<%_&O1}$kMew3Ycw9
z$ir|p4n8vw(QGDu>F)aI%zJGC?c**=l|Ce&dH5pqaGDM5NxO$%>F?6vwbj48L>9ly
zW{H@B-|(wbWIEePu92*fJ^6h3A`$+9;KzIJDS~(lSIIS-B1W#pU^K5KNVXKMW!0s~
zoyea4J5G=jqJ-6(MVtTO(H!6<1al`i-W?0pOYBj~Y-V6DlP}lNyJSY(?|HbLOW(Qf
z@Ig|!odBzYPmg3R_Uq^EG46L|YJ72cpj7aKw&r`h()-k#w5jwI9cu}{Uka)WPU!%2
zES#VI?jq#eeF`MQ&ua5lZAH0L674g@S$#g2j;cw(_rcqIOtscT<%V6w+t%#7Ruq;y
zy!0024=Ddch)~mFv~Th;@taX3Kd(2AoM_fIH&wjhQPM2RXyYswDeNK5N*s5#b+D>W
zN9_)#tqSTaW+NlMUrTjy0FzD3X%KBGQ#(q`!Js2TYmG&90B?0f7Hyn)`n#y#O;Hm(
zIGol6d@Y0|gy(^H-s}b257xRL%wHT=-`KTaSlAQABcp)vTDZH@jYI~qs8R)FPIed_
z8Tngsqu7a&>8b~NIOk7EJJ#z)z;f*`-M*P;a|5C?#WhwwO$XVZCjti)_dZaNy*}~*
zlJ(7O;UDgIO9dN9qt5IjspJQ|w(b~Ryj&I%QPqC6>K@8@pln~1tjoG-0~8xF7yS8n
znBqNc^C;EcB>^<8-O_L<C#2mJW$q4qA3vD)rdBn6Ws@_s2-7VU{MXDg(nYy^m>-1z
z;0-i@YJ-_-L`_Pv=|f^V^vdVz`rLN&*(Q%i`2DS<%IV0IYeE!fZ9`W~f#n|^d@@+i
zo+Y}tV`o;}4(6Q3q?vLu(YIVd>U(Q~ti!^Yuo%;plpiA9p6~uE3)UJ_jr(3|JEI`^
zL)*@hZFwM0@qKk(Gyt!xB%jXXtxI~lA+!rGfV)=<bitjd$9PV<P@KQRS<x8m;c3ve
zyH-89CzHDf;(Y*OA*sA*sp*g1gL$+<o~>b9_DC96Ui`}~ZqOi=xX!h#@JLmv?Uc*<
zDE^1t)IL<RcqaJyadR@k<x8QLQd1MAk55FK%u?+Lk5fN&JsP_4Jk*t6p0j3yOS`ao
zeUB@-Aw%^p1qCuxRAtB{q3bwi<G$=aeBb5kp1WM6)*11<ea%IqpVgqlJAd!B=3r$>
z%bByTZ>AkINjLe)rwh*CJJZnNy+$=qFf!THZ)@aVj*=s5m)-xZl9lPaUkJA%8AU%k
zlb;RzTK_)|4YbQW*d|A&h}aw}o-CP<-TE;Jstjfq&uIFN4aH8A{Et}kGt?I@DK$zr
zrZ#mPcnL~bNGx*uE@-Ay7ZPPzo6PGC#4=Y1)VPn5hdzNp-A68*6WcrV-{c!&V})q*
z)=H>m1?-j(F0>6?s^~^$?<)RZwyaKT{%Eq+>?9Yl_}bXS{hVL^;PdLoU<qtAa`OJ+
z4gxvO_`jtnUSy{I><%;8qyyJU#^-31AWM%%F*E=eb*_~#BG#Fp6kD!s{RMl%-DZ_h
zOr^i=^r?zpK;gZ62Hrx0$(MAkPxdJIRL5oCFpYiK#=7VrR)L+%?A4bGJwL#Ov>0^O
z_#u+hG@Ef>O`LyxLJB;S8RuzZPuG24xy>3o=FofMZ?_&G4fc>RBc_90i<fKvr{0wm
z@|%4yFXH$EPot+Q^g@&Q$c>-{6Pw_SZ3QDI?>PQ+H)3u3<Y|BztA*#a8T6oSX&bV1
zcl}EH7McUBl^F5d+P5Vb>BRs@&hb-H{h`4+@*~ot-e$Eyw-EW_2CV(Y!mq1x?$!S4
z)efKLaIW))yJ+SWV+CivbD{U!*?QjU#0*SP0s*-}X%U9DXX?Bv7<?tP)w?Tj!A8HK
z69)oJ3w?WyE0~){5t2+Wvu-(~0`$w9d%quF7I_p>1|v2FRj&mtN@UiwQw6PomSD}5
zpF=N|@eHTev*llysE3zm-oOE$40fwJyUEM*G{aU^2h^!uME8r*>8?G5qsIguR~-so
zTT?0fJh6dgFY*a;xM6PQ=awJlTx!BG!8%B{W&K!GmxVHZXLZr0mtgm&#6gY<|8Qt@
zTMmkS(e)!*KlPyKs%C4aFa)Y)`t!XiArF2VZ6W-59hqColj?1!IzOyK(x&tMZ3%VM
zZUUL+7<<`g$-Ld}Acv>wjzfltL--xRKG#)bd=FUty@^u<MIb?xu%V+!=)!?Kp|rO%
zh-6ldP?h-K@?WwklT_8U`WJNA^iXSw_}{Y92IBeuvZF+>bV{b@dQ}I*$M0iGJ2!6x
z{nexnEPwdr+gMbk33?0knP}e+$Zm^XK-jVDEu~bQtk4|xVQem(4-u0s2E<oqqY3M8
z?;#yoA3idOXjeQc7eXLxZo&AT-<Ta2Tu#12o)C$!x|gM|(jBo^2Uso=InyM8{YN%b
z7Rsz9$yn_mU>W8KZ6X3Mlb*eyDP#x~D5AGuKU*OaMlAkHdD17ffc?rGok0PW`%@H9
z7*aQyaXk0A?tcERir99hHr~;+mNsoF{>9!a?(q1&gO|6zvk7Mi`fFriD4c=X=x1n3
zC@Dfha_nvg0>abC@^f#dT7cY1E6KXDTv2l;lMpr<q1@orchZ_WNlf%tsvFO)OHP-D
zGGsU@>=>#EiPiJj+fJGmu24X|`}xz|KtYF%=dAIC9*??BID@fehHA6pB+Kl#iFkhR
zR$CF@QasBPD;x(e)F9bDxrzT?+x;WuA;Z#l@;)5v&vf9L)u|F)oN3Y~!Vl`SN5fL8
zE6Y(OihVA%pXD6pK*r~<TvYn1)8;J4AyFdYSBo_|Tbl|6*K+CWYq^vJ3P!!dtEHZr
zJEON<+L(V<F0=LtQ5!cGxfy%Aw?w0O>>T{|%48x{TFmRcF04M<j*b7<mK}gx?pyX+
zZA<)(XXTBdSBOf`X1uywCqB-h9r;v#1+HH|K2fxJKct4*M~b`&XqyM%Hx`pp=c9<R
zOMNe-F0RkUT>e&oM(H7Ev1{U#hcR%g`AxVx!<jSqC8ziB(`o|dfl@NdUJ~>dnmd-e
zrkO8q`+wUOLyPe9!zp3B78X#2N58Bt<X_2);aSeEnoOJTP!@QP#bWHQODL<yc-uxg
zKqq;xYDC*?VFZws%_~)jpJ*jINEOxKGJAdl7RcHrLR)5is?%cT`PIci#%z9?sO-uF
z$own7hS2i(hU)&WN}k%b*%Pr9_Zw**&rOGUYcYeUu|ic*%`UqTk2(U8VAb2KOru+=
z&1v8L=F}S;)&OZe)T|@)n%RQ=pqnDW6orNP%az^z@#$Q$^#kuS#i|zC_ZB0@M0S(o
z_nd^8D;{jOCRhp<<ros@rT33j@vR!|e~<#R{&Kkyx>{x@ffxRks|ejhpaa4@QBtkR
z-!U)8vw9Y<Zk<Q_9Hxkt^HN-_Wxtii+M<$0a1MXmxXv?AQVm>=NIj&OyAU=ZD?Jav
zs|n+j1^WU|#8V(A=Ac{ZF)QEbG0Glg>wM6dwkYjufwjEPrmbmXR-MOYrmBz-Aim(K
ztkB96z1-sBa+G~1^N4uI(8x#ibMc#dv&@hP7-D`RC%@3vTZRP-2jb$d*Yos8Oly-9
z5%MXIoZQ2c0vENSc&C6peSetrYA5t0$955cRsa^}%9p>)Eg?}&d-?+{gn3($SX@kx
zRRu|DeK?hT6LaI6cgl@5k&su>Y^EaN3<4Vc+De7JuPGoah?ulC_i^%aj0w>9cCC`=
ze*V`{4esrPlY5ayjJjvU6#dD?G^Hls!G^mpqlNL2uyl(~XrVTEhR>{yA+T3V$1R59
z_EDJ?g}wGo%&bzGRqA1<U}iSaxUrbC40U+7uJ16<Lhjh*i*N?kp+!HXg~2NOGvJNB
ztPUcwyzXeQ2TH22Tf*LR?H;p3QD%4;GoU7o7QH%|b1kPnj%73%o_1jxSdW42V-Q*3
zv3ZSdICswIhIjsF5!O7nvLGl7nxrl8-V<e|&}N!)HV2Snnv7W&z9<)L!lt-qTYVcL
z)2+=;JdryLRVLK~E~)5Wj>%Az3D8D$KHhtu+BvdTwQR?GsYO`2Qv<Iho$28?i2qXT
zRoZCfL8MFV5$I+s2o1$+KG?nOl6uE6{Q!tdfb}TRqPJP*rSmUxq9&O(Ua1jKZRpRL
zxvTPl#kp!$9mEh`y39L6CXcBv64)Sg{6EC8Z`(}P*x(FasvG!m$BAjn+iPiEEiah(
zw)h`MY|a<YBwjl2S8ny8ROTrA_c#w5>>De5oJyUVai1+EIJUi!%U;kE?`?M}aw5jn
z)E9US;fCMV)zlP?*Rsc~IF(cgL)04Y)<JwyrR03`3(0sknDW=i)NT4#j|qOx-%s_A
z@#m{b2<M@j>-TwDlJH1>qL?VeqI;0_E@StPY^ThBwq~1*kc*?0G;gNZqauEb{`jsz
zle`Ky?vDO+vI)1C2oe}5Nr5`Y{uVAU`0^2;?%xANy#Hd+$(9&-AFnc8i-!dVcyCN%
z9@_U_U#V$hN}k_%hfmjY^UR!4yo5?;vb)Sw!Emjij#}KTH5AH_Q8;SDg`j_3M)279
znFGKDJ4PfT2ms#Ey=|bBo4v9<^pY8tdzVRRJZjTfReL)Vg*+jMq;fsmdf8aW>mEyI
z;zSxzA<suHz_BeG-&a?vc4X{Y1&q}o#+%9dHp$zf?iHSIlaD0l$nKB{`=Q*?uJ=cG
z0AO2SS_G|fcmTjNwGk(#2&5^3tKG#Amxi{fmet(89R1}ow7H#SyLN%vkc*0ES^OuF
z0gyelgAr8*c`@}FWUUl%%9sN`8uCmaKRL_Rj{g9I-CknGXL6T2?0CxNHT_nLrL?I1
zd=CA?j4DV53_yj4Uw$^8%cBu8m`NcfH^~K{3iRT2SaF*RQ(v6>XgGe#sgEuBJCL~t
z{(~}^i}McN!PY~WH&I44m_zUXA<wJ+&gIrj$s9&T37N^J0VFXo>>tCh^?&g90P0m9
zee96(*!7kHL;FR}tZ~Gb@_U<3)3y`Ty>cvT17^<c!5*5y?{$VBhPvtEXLZ2mjUn4P
zcI0VmDKjp;FWtc$I|qa73lyRFS4^ZeR1V12mr}p`6@C$M?C7}}S{g;1z)b{G*757I
zKR28@4_mWHTTy&uAYFR)Qxgk1Ka~4W0q=lcA>XvOD+Z6qn#O#{jpTl?FKPd{K3wzI
zmXEWCL^w><xAZmgqa=rXn0Lw@N_U6WGBS!eORBwR-GC1{s&_bJ$fP)W&T}eu?rPZI
z{Xj*jzkI@a`%YG<s(jt4x)MFI3F_`&VWE#!G&D5)jZ}TFq%E*YWiZwT%YeziHotv<
zpj-JqNa#M5?yteUvc(+5hHYj%f-()ux-UUMz-;sq4B)&L6r9ho6MnGR5E~X2hNzU*
z%6(BJRXB0*{waCnpwPRoapc6&g?Fbb{D}r;^*#{OHkS)0episBRO%!2Z5vl(MFa&k
zj<d1U)6bX>xTL<MiBnY|4=25=!3%SmKY3wLlvX;%EXMr+O~d|AUp_ByuhmXjAGCLr
zC+yCqLF^$-*Zb5i>pRaT?2@0(Ue@y7ChEB##`Hb@Ug$W@Mlaaw^#q2;TzI>Jq7wX6
zdr+eFpIO751xaR<wahW@Ny~+Evh|5Tv%zJ9=Fe3ivGFAj8nk46ay(LG0GL_tEaEZv
zOyz9qL5j7EC&sxyJG=9k1rYdIeWl_jNCLm@$LU&ZUs<5Qs3L>_Yne$r>x(@Q_tpcf
ztak!=T-K@DJ9<K6tB(dF>WvJ2pF-oEHXASYXuYp+Tb;1kkO*_;B<v^;9rl>a;Oc0Q
z@9JGtfp%1lLqv(p#qQ^6;O~<bw!W@#qm<;8iqmoA<0J)&^Gckk3C>NH<-#a&dKJg-
z{5cFXYq_K2jCc!|w`94BmHmm!@9oKNv-eGTMnK4a1wV4#xe_MBRrF1q-2JCvzJAfd
zt~^j(TL;66^SU_24YY3#LNztyP^O7wg8}D|W+m>Lu&{%}Ro9^nY6dzi+r|Vg-C)`L
z=xrEr_EF7cC8S?b85bR(PHW=vGs<+Hv0@V?7qwdY^Af!pK8hRN2Q`gue7o_Z>Wq$B
z3qp4?4!Mm@=83|o$74Fxj<m9fOJ2)iSLl9^U?f8HqI&vx4K85DK>`@wbJo#rf%v^$
zRI~Gsfl$yl=XJk(teA97?+Xw#824fM&xONE=JLW}7Ey=mH;iI()0sDF!1=;(#;K(q
za#Z|~47VHGk3IGXfmED!fXd)I$S)SSM;7a`Jp0lqr#mQemX$wPrs8T))32~D8mxXc
zG1yDza&qu!a=|B%>E@#-T=8%buCPO~@)I9Zr0&I)-lO@Hs8Ow^GrKM<bX{yyLf5xq
z!0zM*owoH6EL7d$G%6<X5ncPV$ts8ezQ*1H*<8pBqmsMms2+{`?l;mCMdyRVAbrlp
z6`h*PKEBO;%StU4amJgDTuUL>tCb1}|IHUhmj8HDFI3?v2m#(naja3Y{yL<U0RHm9
z&T>L4lST8go9JFgqmseSw?w~aeQghd?~}V@jNnwO8<KZ=gzKy_H%2m*J$?M&K<-b{
zE7mFm3?$>IlEK@edhX#hxid{KQ}y!SjPXp;M||*QPn+e4QY!tYiEJ9{JcxQ+<C3k_
zA`cQx4R9Zz<<{I4wG(P-;!r~7?gVN1HDbxq*-9pUtYrBxulm54S$wx2J)onj+-vl~
zwz$K7U;HUZAtOfLs@qE^KC${p9wg`U)C|!^NsP_&o<;!!+Mb^)><!qhzyU`)_gUNC
zKk}|=9z^YWvTs6xLvAO<p9s|r(Uq&7i;hzXQO1LC7l*E3YOFo)a=GK#>i5N-v3GIq
z>dg(nC8ddgk+BoXIG3Gexl&y7a65$MWR2ff3O{$~rH_BUe>#Ds)dG8N>&BW*XZ|mp
zRfEKFV?vwIB6GPwvx`)>W%s5Afcw>%^%MTq*|kns)Uj6PG)UG0H@0FpvAnNF#e6ii
z`TU7e9EYu2)8j<5th*$Kebc2!Z1^SzA7`Cv`f#vsmvY|9$5e6L(aBPZo4m;?s|TIr
zYL@ZV_uUWM$JN|Z_A)){2m|R_ucq?M<EoyYmp?)q9n{#Yaqm3%S%mKzv)qr)xxaB7
zJn@ry6L&~+?w-Jb&rm7O-B{>9hoaiy;On38pRECW?f)K57%<>3_<NYfE3f$XEQgYt
z<u>=f4s9#QnXikE{|qPQ=KuX;-1jEo|0YVc?{S+$sX5*M^f#A5tM|7kIsyDqw)4(J
zL0iRyti7peFb0jRX>9D@*m#Ua9zlvv50TaqN9d>cG#&cz1^I5MXK1+T1wk(xX+zsx
zb|#+4VK2<Dzd!k)9l?Zr&z>#6)s<^Ot*GNKvE`zyOyaPm3q&ujt{`)#jhfwe?&GgL
zx;StG`7QTd?#u029TwqBTFZD{;R6#7k3@W-4n4#iCm7TM4`NZ{^ZIYkDzny&{oypc
z4LRHPhWK(%Pfr^jft+Mo^kKe7Mc>nFoL1%JF1PdBD#AH-SdP~tSbsXLW-{+B&)3Cs
z*v1CnD~U7_XsWr|PB(`ANo}j>i$QJY$6ox2SNB|Us?0V#pFyG)ywqGAsYU|MwTo;(
zxO9J*;?ZH_k>h{T$HzMg4Z-<gPgrp-m8I-T%~6>12FNBWcAZtnz@RlhR1t>1)3%Is
z{04J-JWDqtBu|zG%UI_3e3w#`llfiNyKYl50jdrH{V@9>`C>+fa=&sHeP?LZfN&2Z
z1Iey$`?4dfE2z)Q_**Aojeisc1y8U$+1N-3x&;F5rUL$%R0p;lJ*bQ0SkAydCb%C2
z>F0kEWo%(<8;Kuj@lP=6Isg`W`&dD(a5ZaCXOsZ;t3+ViO=I5-U;v8PA9`<Xnf0V^
z6)hIQD%a;{9oUTujfF1_0@r@2EskIkj{NtMGcE>ay<L5vk-{s!TcxeP-pS$47x{oV
zP7wBwur=u9F_*DVC{im~@^T8-Gl;0HB6mKg;ez1q6oCkhrF=8kLIs9-hKlL3H?PQ?
zPP^`zY(6tWVU;s35qFqm-XKuPs6*`}RJ7rt*I~K1K-;OviX0Vjtd<XI`pA_7&>dwA
z{C!#qEW(m>Fc@7eMDgL~L4{ZnedBIbnPg_9Bw7k|b>`Q4yfw%~06?>2FLqYT@UzGb
zMv}jkivouSCb~1c*EO@G18vTivanAgSmZ_*A(A7ptN!4K(W}qa>YhGm89or|)@a)m
zQy&$9bzr{;P-bKl<QihhCJon6YoA+BhUi+N2Gx(3$ON3P1Z#w|17gh;wE>9UN?k*_
zHwU9e(8a}8GG539r7;M~cy(0=<s*ct1w;TPF%B#K2lTO!OJh_eL59!CUTY)NZ~=o!
zaChU602^O)(dp>vZFGf^`Csl7`58V_nlQ9lZ4Z#SSPS((bjudO2hfgVJ-lkNrWK3P
z2H;|{j~hUNDPG1n^LE69x+FH<$(cmQP_nPPF8er?o#3b)%bX>Ll2XLM8zfto>*f23
zfuK*_`rjRS=ieCxz{S9Pgw{susjOMBMIee%jW2sW(FyBk<bPF(>eL>AU;ftiM$X0h
z)L;d9i;OpR8YFn1LA3?4{*)^kL7lKyB)mnC(FSZly17$($2Z1#r%k$6_frRO`?*A`
z=O3A(EEFe~bRWtGL&62_iYgj?5Bek6iY9UbVd*R7elCmMk~lH&tR7v5GU2YCs$~YV
zE3Pf+L;gTm1HkMZ^RwBTe_Hx{4xF$V5v%BX>OlB?2;lOe`pwc(UZ$(_SX8=s1gUqj
zwi=dJ86kmMgdUe_xBspYkR5?mGDAxiDqDMgTZ0sim((v7p~RB#OA#43hV`TXcV);z
zpfw5^_EQWTN*7?-Xv1GN36vSusAT4v+c4CT^9+dqd4Ca^cLCq#y}CSevY#7x{~s>^
zz;&a4KSO`Do)MxQ=eW?-bratc!rZdaOvIE-g3bvX%T)pB^XjUqDy#>79`d@$OH=tt
z4^aazl(VE{7+<0Lp?!dh8YF;<>1Glo%lh0m-8*Of8mn9Vd(10x5@gH`OP<?z6~PW-
z++L9a*#IFjreG1EG==&V0~aN6hqm|buNPU^QsmmPUxu7t!ewl16*(U(=u7@!I>L{P
zBqV6s?dW7>;2xL>M*s>CUF2w3*bE%(^FHM21NZ}OP{J>u5w<wj`d>resPQ{iZHih$
z&<+3$ZxXm|h<(wpTf3eG*OtEixy8p*oyB+~RbnNKeemk^?2h7|Vvv_4A_~srx4y_k
z8pOW3RvZBtVYC*`k|9whj&<FbTSwR%KQ>3~>yEg5s+2({U&)Zkxf%a#0QD{sLxzo6
zvSYmDP7kE|K%Q|DE16+n<-xw<Oz%%O0H?pY`P#gb;2oy*-gHT^r+<<I`-?>w`oJ0M
zQ+`x#8{3`%@=oVQN@)=>tdz*3RY+gmH;$c|>-)RI`K&TytH4^#Wow_OEDI*1{;}P>
zYRL7gi(^esNW)@%L3Cmw?MOEEK`iEDcWkUxl`HroifyoE8{zo}1%#@DF651_E_pM6
z7XWox<jqygz@4IYctq=|eNes(Zp&V#X(w<t%OrCDfc13fcLSj1W?2SA*z3<XY9>Ql
z`1w4v?CL&P7T141>&(a$cnVNn1%-Nz$`0+o6@SQ)R}G+6%bYKF`n*4Ow;LPjhK0^1
z9g`qtjdGR)!<=N#S(FvC^RWJz(AlM=L^s~5s{#tRG{4&goHs+4ASt+@6uFA3X5KjA
zg8bS8Ay{}bHuk%@8Y73UNBuPE>v6vRI@kgPs`j-r{Lg73j4`A@;QfvkhjwgR;<Izv
z(KipA-ANn8H5MBkW^X1XC;2p<n+KjA*lUqXA{j#xjpHr%Q%o|YS)KQrX1z}(0mzvs
z8O**CxE1w~3wz}xS?vO;Nk8)XXl{z{4Qnc`WsvdNZXX#&FlXskzXb%GWV#~rVYavp
z8Vh6H^hK9+`?+4n@NfGU`zGSQ(vmMqC03yO-*(Ha*_D}OyuVTl;4)wp2Om+XJvrKd
z!Q^5beq}!0brrO<jN7Rx7>kP69#(4dw_*6XTGh4L#G?&BuO>^n6UyfbNS|HAGhOYB
z0uVJdOo1EQ^=>AIf7Do#*p=eGw@hZXRMc}Qc?B^?K+3bMEpMA7e%v%v!%gdFjA}`I
z3`~~@th-s}TnJ}hk@L^UkMLaZ1dBkVx*v>hYO)0Ga>GC~TXaWO&wEof90Jcu$tjsP
zBfG7)v!uwLdv1vyIqI!Rs%2ksu7WV+3{|cE#|vs+vkk_c;KXUoe&L@rkd3Jwq>iPB
zthub~1~+5}8x1%1F$>`De^zPA*us$1*peF+>wI-_r%1}$`yzH`>(!roVAcp@_rQTv
z@-@DqMF+L)#XrZ14L+Ocqhm&UKO5bh8N>~aEIY@knS72s7K%m*7>=;D-8-YePS%6Q
zkPGpnuG~H!SCnX`G0R4zxy0=7xM|jPP)Pg@ijxjPY4STdfpIYGnV^#_My&l35r1X2
zbC0qjE1lvQQBqQp<Sd3VR`y&hOD-S<7!W9)4Xs}sY47A6_4Kx<D>gq)g!$CnsRUv)
zS^V}(Gi2IY#nu0qwx683@nv69v!LmWp?F6IpHtd>mJLP$VBh-W=;?GH3$%2!efS$)
z7HrPickRFxQaR;wxUH*(UDrnKiWq9KqV8v;54(^Kh3g2g{+XlJo~SRcG_{wOOEx?t
zJnlb%G8sq>XfTfWe8)Z<W%duXZoj0*7m~aP(9H6{*b)U8g<R3D_?_F!oX?rd1nk~L
zz|@XY4U=QxyY^gwRjmAVVf~NJOpUx9u4_~uKu39U5l>Zfw#n7_d&p%Lc@2^m%KwtD
z)b1xr$c$^8i$x#7@tAMrgJib<DJg5<#d^%M+LOcB3#j!dylb@5kkmKA0sj(B*G>Fp
zPO$j~C-iFO%2Z8D?EZP+n=~I-rkD42ZUi3bE$x;36X&i72PNY%u{jQlVFEatRF>va
zT%)_vpdsr9>6W%^d=VxP$DovJP-~0dnev&}=boO|NlBiN1@Ne&->e@H57oafyL#8*
z34v(k`ZQyC1)kL_vPv3wQStHdIj?mDGg9{Zduq4Lqn|F1G8y5)!Xd!EkwdAawzl>c
zA(c!=7#ZEg1vD0ghq2_<j=5oBx6hAON3YLJOiZX!5S-5sBLlB*hV(VD*pULLuPqN+
zbK!ycvK;n{KK{gYDgXboiXCvAP}zeYXOnFepWTU5CU_M;5X~EDzrv?F`}>+KFk3+R
z>)r=*fBF1HQwoX}ypekTqgOK=xn7`*|4(z^HRgA)SE-o^*30Hlq8Go}jCcTTtC%@R
z;vL@>{TzCoZcnc<$*)AB(BGTSp5|+X0ls|RxD%rg`9sPgDOG)2Vt^*^GdIusgXku4
z<<W_RGZACX!|VLJuk$~!AaH4WU6Vn~rd@WofHZzII&g$ui~UR8!$dO`nw}4O>=pas
zmSYBFFY+d)Unq(fYCOCD`d*l8Ce}i}@f)SB)&{~T>0sQdyP|IjnqpU{LX)_yB21Ln
z75=E0TB_h?-N|NvvZ$WN8~a@4a*6r3BM%lQ9>wf#R(Z4tn@HKb<uAJ}6(iNt7>En2
zZAMHyLg*#utZ*syx__a5SSL>UHRj=zF98CZVll=BOf``FIQBg?VLOI8E|6A=LMp!W
zj@5_QNT_}LZug>(2fk8XvVR*s^{WKl*RD4#I57N5AM)-xw)?$FJ$HU3Z1-(%)+XAj
z(|Dp{;vX}q{7)7-T>F~E6jlTqjhaRAn)s9z${+9eR-_2oO))4i_u9Ad`ROBm4!tjY
z7y3>(Cuwy(?I&rsZR7~RbPh~kx1c?+<hbZK@DEyaSN^n|0O}H}_f@biG{rIa<CJAW
z={WahaL~*07f%l+)!BApNO>uE-rX<_c9q;HQET4$^qV8}#~ZJymcrprG>l>um-i$~
zVkVxoKgNf>U(_`{Z4ul_ip;yYY4xVyT^r}uMm{#4o|+(GzW1en=#lr?a#z)#itpA`
z32W!+#?m7dzH^X=GxR9Lyu9(^L!lnY%ph4v(8si|-@o#D&{L+-h|79py?<gA#djux
z*4lk?O7Lex_}(P1tOOn)L<#?N$#xMX3khLUG)O&QAJ&&reKb^wd3l44gSAj)B3g8q
z1fJdyUNu#yA7)hkoF=*0X}h3>zvO+agg>jqkJoPH?f8}=JNlOa_iJ0bNl`A`!{}v>
z^ZOo!H3jhv2SqDAyzkKeyvv_tlJqIV<o>P$Bdwm{!zO|lvsbwv^5ch^7ENyGTZJq-
zESf=d@6sIbUnMxcOd)%e{xPMC%`z_hPe_m;`9Bh>gOAeHNO_+%cYpe>{bX;-Ca_T2
z>7U|v`edTkZA<}0_+FzT_WJHE{_Z6wf+9@VjZ5wllXm|ei71RuU?UGQDJPx@clb@y
zCG&`&NpP`M;*nq`5ly-w5%kjw_V31}M~=65ZuC3i8n*=LUN#Gn#5u;WRlNO2s+LHD
zjeVz{;gcoL?aw?yx)9lPRx#$uBd$HSA8O5F19dFaL4u0($Ejf!H$In$n(c4mWe4}r
zzl>8&ykPdn<U=)re-r~0Y{3A?&PX(x@P3d|td>B*+sL5Lu96mGyMiM@?*EjE<i3p|
zjpU{?onsKp%nZW%I`uvc^-Wz^$P+P5Su`A#zv<c(^c`q%M@3PVD1MRpIZ>E!m{P>K
z^Boli1kqBV#vY4!#i-Vg_AAXp)kl2eJ6b9A|4)108P(*vtt%)UloC2fk=}&R6hwMS
zOn?9i(v(gDfdvFm5JfuDLkmGvNC+SXkPZ<GC>@l9A|<e-r~!dx0T!aJ^M$?d9p{{J
z@7`mNbIzYTZvK2@d>LPP=R4mypZUz^8}A(}#O-xihk6fX)}&5r%3Z34a0XPf|3&f5
zJBS{*$w#ML`Kr$G)=5$q<1U+Abzpf(j}&0Yu)(A8UMvvoR<KWIjB@3oiXi;9CyY!Z
zby|NH1rx;$#cNnnQRy+~=5-#%2J1^qa-*rT4v(j+ow;Y)+v=v*K?L@$S~HNh);ZfY
zx<cKIN-J$PNsLT>-GiuHB)U`-i;F-(ksV0iS52^b{i;i+1q045``&wVRyw*b(&al>
zv1U7ass!B!-J<z2=j2NNCklk}QiUt1GQsh|oVX)>jPX@**w8Tqh|@26Ib?49hHO-q
zgHWF^Igq`jTlZ~c622K!==iziFpAQ@4ew^T8;0@E95w3G6nS0{23QTHPMm1q53rP2
zGotn9hYhvYmG6xkZ~yVe^2FoL&d!;O0LIRJ{|5?!)wA`(Pq8O+Jx{qAe<W4VKC@<C
z?FtDi>8NgH6_JdrgU>$)04bxLnXn*u0&8((UZ7&tJqxV{8uAt8Zk7|iRH{0#)G4ZQ
zLk{qZzy6lkFbC<b7qD9#hcr+uGlv0T4B&<SDO2@N=&yQ?-ELMOjSY?8Goj2}%vTtj
zc-NP{*Ub%_6FqdvG#Ps)7smL0_KEx9Gyf}z?(nVu0Vmf=&L+}`CeXcZd1?aMD0m{6
z54RO<&E&Pz4@c772N%zCPQr}7on%@OAP>D=%>YabF+$N!e#jKlz2~2@FJJ65SZjLq
z+!!ZMz{6skl$k-m<hG8O!%&h`YGg4~?ujRV&sO4RP-H6WJAaD?_nM-k&0NXec?hgU
zgIS%s-0{6Xs;YYoq;-@?QVwF-q@v+2_4#JiKJQX<tl%m)C@BS5X|H)4&CI>=gZF^k
z>s1qq7q}?Vir43!&9@J?sGK8CJraPk^I~}u84pJC1$QoG1?s;hF8Q^q2E3Kl9&<(N
zNxJZe)AT&lO#&7+v8!r&?r>DZaFg-N7xeD?@H8%vZ`GM3|3Ux0cHjouS#|mzdTQ6H
z$o@zAvn7B%cCpOZHKRH>0O~!GbT0LVotSW@Mc~p0SuY;`KHnVov%c+hX6FZS{$_Y>
z`=}!5^<G)oY~L?F+Un=vV!(+z*I8L3BQkFoDCww9{8TH~#+$hej>Un&K6+hJR0nZo
z{^C2UM>!+emhYmO^Kbt<)4RiLj`+{qxV4{WKHRi)s%+FL7b)R*Y|x3*B8l&yVZ^C9
z)S_ed?H_$oxtvqLO|$JXYS)fLg5*E)D*I1mBxV;Sz5z-PEN0*kNR<qV#ZqA0`lw<l
z7NI!uuTW?0@(`_&PBr3_Cz_l*lk37?%Gp$@35tGT=pZ#a#t*YL@FD{uBEZJtlV1>6
zE`?%ZuQ_Mts$i73@mPRmFO=ol!l<FU31SG&8s0P^FqrC(mJFFsO8NC0c*CsBUhKHd
zxMj_Ovw_bUE|qDIR`=3p>!4(=K82OY*8~3AzIby3X<hsr)5crJn3OW3gcIntK^iTi
z`14PL22;h6B`k8UP?^Y%3sIb1D)MeJA<|BdE)B++;B$av5mC3C??^9g_8-*Ka2i7Y
zK<0LefhBSvJUU&z#lDRfD6`6g!Wp4V--%6OLhIkD-mVr{;&sZk&+^;P{yLur5U}2^
z0YS4VVf7AAy=#Ky<>@Ke5jC%B-#!pIOLFh%H{O2IXL-Wp<?`~fx2rXlXpHZxSA=wL
zg0bG|FBI6oBmzsJES{XG$>=7oXwhGUaz-17gYTw+BH007g~X4&n*x@149mXn?TALW
zA6{UUyXc`}q_K<&L&C>J!EkE=Mf5k%?etVMcwP$FH;QRrdg0bX;5s5Djrp)SX=Xek
zZdNA@r>X&T@jx_wcNp}rqkGzKJtA}0|6~9>xYSo-<$4h_cx-Ai@z(D1P6Tlh+OU$L
z+5^3A|E?q~hifyk;JcT!guVFQ{G|GtvC@yxelJutD*`0&>Y{rerllhIrNFBVlyiC6
zfbOW+UN<kv@Uk$oh`q~n|M&-v;k1V~6w|9l5AGMMd<ef>jG=vT!K2p!5_cd6zcUy5
zO^7rU>QmBVNV>dXMs~m|@RqaujH`I3Uo6=n`OR=hzH#Z?y>~^34)_v)NfhWG4ujqh
z(Y6O9U@cJXo{aLWO6anj!kD!PzK-(|uE+GZ==sm73l%?f$r6}Qvb-^{DUq}2|MP(8
zTH~3K0l=`hypV$s`1b^r(xJxt?T_1U6`%<AIt@`>QPchRd?Kn}{636qr?-2Rxk7AP
z>tD_4m#&9)W{*|()o&r<F^bao;~p*XAZt)Px__nuQ=RQDysRRBM_o@sv1<J{6YUXF
z!g_Jr2EF-*&dwQ<yQYw}qEX0<F5}8m8J(%=j2-vz8!`{Qlr{qFKkB0}T1%~(jqw)G
z5F~ywePjIE*TmD3G;(R+f$;F;LCc-$pWLbIS9{LWyi<GELKc^2iOFgaU41Fp2u;#L
z&)p1QcL=uO9#zK&XQgyM8mKI))|)yg`=_eqw6&VJK6JVYZPs~HjtM?~YQ36V;yVn~
z1kfDzscYmMeU5Cy^GmyHK~0~<8|dZJ#j&lEVh!{?owm-=?`Rl@3%4*k184KtDjq0(
zK()KmF>jm4K7H}Z2g(^9W_zZU%vBLrsIUc=%3~DiV)Z<hrpfwtccl9vy-fmCvVP;S
zXj)=q5R97BVPa_z<``1#66c2{Iw+zM=ulo6rEeT8Ya^A=xf+BFHk?l^FMcv9g|Sva
z`;WE5uExuSn0bQ$?*QmCZ$JJvF-5=c#YHhaef}Huev`Gj*;-44MDHGbiY@ZKO@h_J
z$wGyrC`?^PWB9dD1C-+i+vI^C);#&gDjp9bfh100BkoIhp~#y3V}Yu)+7~L~jw44`
zl%}SOptoRPRH4iyG8;U-l<u2{0F#`3vJP5zqHB_s#)wwock{p1zd=6YsF2L@h&GxO
zSKwL+yB$Fol1*)LlY_>Eu%L#oX;(U`@`rv6?d`O$zpUh7Rw<|>&0EIm?-vKT7a6e|
zmKtj}-KphDqSukrH?z}Wy|`;XIh^ChPVU?I4G7mO(=xtm`z$mHeOq@qU~?y=L^Src
z(&nmyd~Luf?x*F%^@jNHnDzu~p4POZ>-&km;jj*@AH|?$KGqz_0Ac<>gNzzOI>lay
zi#w$xdTjN=#pRKqQH<R!LFYyh&P2~T2nC_w##5POQ5@MCb*B)M=7@I8WDV>yu21P3
zFJ8=r<oUP-YKqEB?upy#OH`jT&p*{rG}u_7BpEHf7C0~az%j%Tdho4Kx*hHOernIp
zF4psbcODm4#zTE>8Vf-)9m{^q+{^%O=QLPs#LEHaKH^gl`0N5%o3iDr<AC>E5}PF&
zDm{8cr!<*$Nj-i%XYNUG=akK;oxY$gb%P|z2pu?A4IN!uKrKj{b(t&5n29-)fg%aJ
zvsZ~Y%^$g+&^f-rZl?@W61Te8O<2_U_{7F#gBo5u$YNdz1KC5IWV2O22*s_0YU*Xz
zzI?a)T1mrEV|989QXCAvTEq&uuizRuVxJU?4TaU~$Syr<TpGZ<d0<%)7*WH+sZumD
z>YXZBt@6N8U5JezbmwK4Y9ahe4^aEr+&%h5Cqiq@=*mRJ{HWF<8#Bfg9F`}L8h`Ua
z5&=$AMdD7mEr|%0Uic&*v>@w;4_y5sX;G*x57eC@?`)_t0wqE3XrEdcq4(kSMHaXZ
zP^8?xb^vxOaQ=OOcR~^u(xA#4$7h&RrPil6U)8Y$tDLGXkbI+J1A^)s4XsriZAO%%
zy6hgi5vleKQNc(Xd|=AHbcl)2d#)DM%LYUV^3<~@mrsvn>%q%nMnY!95GZ9L(jZ=@
zccCHfSXeaOrw-o1-Q#{+May}~_eLB)j4`ENbjKR{O2T#8VF;n|0TRc>=p0aZIGXgD
ze!g6mBmw`JSCf6PQol$xo=Nd0_t(B9d3nY!&SnIv6XrCwe=LT{yM=dB&`mGW+HXp?
zU)Q1}h%z&?&EGq)gw(T1p)maC*--gWfxuJEJ81F3&nZp6N%Oqq&mUnU7J{^Fm5~-u
zJFR14G|4m<l&f#Cw&-{g@AB&uYagwY&~|i;)v!WED#<u(zH0QfXOtUJ{}cZ<II+zB
z=$$dGH6>U&pIVzyDx%bvS~WcsyqgZP#KnvhrBT$Qlw^5NFHyW+1|lsaRymX8>HdDV
z213$3Ie;BaT(&2kwa?FDEb?;=&wVAMqv;VwijP`9Uh>dpIM+`Gi`cX_xIa;-zS5|p
zw)-(wp0$5+rT_c1=VMsIeDzF4{^>@O*IuUOiJkbG*-hGg_M(TeajQ5m%7u{v|DMzP
z9qqt@W~b>SJ6VM!EP)Z!z)7HA%zr(hc{aYO5Pk200ey@j3jnQHW~UseabFdE@tdpA
zQ57#VFP&IBD;;GG?Go7BdX&D1c}sNP4%2z&Gki@iu%)03(PlRnLcI_e#lGudLUqdF
zyt?35RPVHq|KQlaFCaIv%8o^(T2L$XajfEyjxkvcXVp(l=yGu5Q<;{Ku(lbIOJ%tq
zTjS<O8D|0<Pdj^f$e!Yja&7Joh2jJ91N;jGddw|s3^q1#irM`eD-MlMV+#ccZNt{Z
zxJOGQ(;-=)WWGZ8082)H%+(zf?B0|!fBZ5`{#~tv?q>T(W$}ESt+wDi@ZhVWuYN`$
zCe-H7SF_%=dtBKgdJsH4C_y1TN~ZDk&Lmn}d?8$XZ)TA)V*LJ2Q6I~uPwtnsQa?&i
zVXooA>skJdAD!?#!RjAcVS^{3M*8bCHTv$9xv$$+fx^&t*GB9q*UiF(lIJ=^egHcP
zft~t$7SpWnu=dJ&@bt~@c7579%vr{N%US2zVv>J6u#gh2-I47$-w$>m)8r*CsagqC
zUxK!^_$)rnAz99~i6q0{pXcS)?B2-_t2P4_GuWfM$(QpQB4S}rC9crxv@~d_R|-4w
z2$xD-y7q$Me=5%Jv!Un1=1HR=+qO0EyOTlcHl_2hsy~M<WbPLb=EATtlPXpMsdE_?
z_0~E^mf6RyS@gI)aNNwdzK&CZ-40zKExLKUI>5&pZs|>n-sM^r*^Gp?xX7xtiE&7-
zkP@5ngBG$gxdV(`kcKfcsTvs`7}T3O5CCm<%<Ur3TSF)c<gL1Zu<!8ZkjNf#V<UGR
zy>4C_31GHpQnkU@YZrBgwu`4eUd-SLaPN~s;KJNqs@Oi35&#WLvNFi`;YOj(A-jz!
zede$>08*E>Uyq4R3^l7aQIc*`@j59eV-50{>G=K4kFodO)m|iiVPtL}UjjM`q^?tF
z1MAZDp?qkj9A>1g)<0fw$av0eK<%)4;i9L#SAXs;eE_)Mitrb+8K?z?trKBClTOTL
z#C6$LFD>5e{M2dgdEz5)2j{u)mpdh8tturH&x$%5J@$l$``0g`f(m0YBdNX%I$Z^r
zkSAZqjn931W2vE~wH194fF*=k8bF1j19&$sx)anbu>(E@zP}9a8f73)81P69=+*PF
z3ng;>+&#igku-SHR<5Co(q7P>jNXlwWE}t~1hOrbg^_Q63tD-j-a!q3#YkmlO^a5S
zZ4fEby8uuxP*Yn1t#c@GJ5ac`sL~@dqe>8s!nl8KnEAaYAz+bxA6&eU=q@LJM-p}c
zJy-2vN&whi0EIJ4b3oS<z(nSI`b=crYW%;|F#n+31}+9Th<{N6!_YF=><B(V^>F!~
z;$1(csqWn!MC6^*{7&<5`GGN`OntZn><)~@sGn<^5zbd&jF%K(+<Cd9*CRUno~o|A
zOS$p*xqbYisT2F=aU_s~pZ&Zy>;DqR8gaf;Q=dkc4QPenL_sLMj`&Jy3PR8+BkE5B
zuRsq#+tX3XOo(5xaB)7{V-dICyj~BnScbAi8gG~7rt=O7eTaSBvUQ4OAC>Hmk<L+*
z))iaJ;FUIP(u87(^CL{kaU(z12-AOEzCT+@)%>X)umQ;Z<H50MFx`*sbD)rD=vljg
zgzldLG!2C-j~q4ExTfPAc9YM&P>@qGtn;Ujjqu@8%YL3r{#>Lnh){8@1I27z=-Tg6
z{^p*LWRW`*JgUc|S`^}<wYLnj{nmZ7AK0Bh!2i+C+}$@JJA+^382(UvDhT*Ib7C%H
zHpRSgKm{T<DpXouRCUBod?(Jon0;-*y>a3O?99mmVt$tT<nVQ+9s_y=cPp~`;`-EJ
zlimD<^wxQ<h#niMK!qNWpAVq=h7V}>^I0~hi%<lMdz*8Xd3vJS@CR>e3pUWZxeYye
zhLa-B*qeF3f`Js3F*855i`IdE$Ha&1Xr}m=(s~(*F|ig}qd1szvv!qB9e*QwoOJ4Y
z56cSD2A8MmIy{PJ^tX3TbsZI)uL4{}h^fqBbo&!&Tt0OG22~!n`8J@s3Z0a^_{IDl
z%1`7Bc#|ehe7U1U4ot=KV}Cz#gx3IKW$v=jX?qJxE-ehWu9hRxX3-Sg^&Imiz%CPz
z*|y+=sM`hp9#i3CF(1ZB3dq|if;9oJEY6ENk`MlL9A|S8PiCJIYtH#F1a7{O8b^Q-
zBy<=%VnHn{HgqkBTje5ZqIMM$=Venq&Q><oTj5@KiD0F@rF)m%s+fJ}j6(K?9`D&!
zNuL6!T)-JzzCFh`Wq~!Pd!C+z%j*2V%g?Y5Y|dLkOVnw>Q>tlA`^HA|J2rE^MxUtV
zHZJ9wc-J<`_OPs3ocC$DE66vfDHS$x$#UnCfRr_foWMeNxqvs4<LyCQKezay(e7lW
zsbFZM@!K0(gYegArrUn?W8&s$?k|dW_KyG*)D1HO`nhNvuaHVnMjyc4ygG9g-2LOT
zsjTS0YEs1rUzR><ErXx)3)>g-e*g3be)CZrXSu60v=g<j$l5~jEXdw7V+ghPT%4Q)
z+>d^HPjkDQ<RHKNyv#mT0>q%)G#pQG8E%|<Y^Q2ku@m>>6aCZ`jqzc=Q&rl2S@X)|
zAsnV$Pa>zSaXc=#RQ=+hLmY<U*Xxu?wz;}Jd9v!vGda)s@6tWL+Rp^&jb}iuBVRm1
zgQ7w<12-4S+g^o&eI-OxZRGf|d4zf!YYy{!y>nMic6HimNf#3H;b{uy1x_GV7T_yR
z3xmKXm)AR|mW~2JCTjVRJ?ei{xU2+j)>D-3K=K-XI_Y(*%N&^FJv*fk6B%0Kay!S;
z?_DjRqy?=H1m3{gNOu30N|I|X4`<&<C1W>rHVbMzA80=SaK}eB5mx9CpK-$(5yN}T
z*}{{ujrsZ|Z{nBa7DlMNy$f3+L~hpJBUE@E59iV31b{*`WY+fGimXZ63a$?kr@bYm
zJsns991&9nLQSf5?VJ@4|FKYrKF%X|A<*(+EbQn^QuYzf$YYl+@Q<gXbWg!`SzVt_
zkxLYL2l9CY*$G8+B=ymytMPw+8Vak`Of$Fh3~_v#tA9C38^?DLXb9IiH75J)=0Z{S
zh>4*tRYSH(6$nHohdkQ*b!cOi=UrvVF%e8+HY51?)tZQj@}ko5<LMd!MkjS3Ez(gV
zl18y&0_j5RAyJUP!W70up`mJp71fr4x0Y!@Z$M@=cLXlR8<Z96UnrLh$-O3;MfX%p
z4Al%Sh$+!w?3Gywqo#17Z=Zo(<@x<x(|ESMJVp^J&pS=s58~w%#d+Ui-rwd+x&aF_
z^6%U&9nvfFG^z2!KjNDh$MJH&`dATXB%fB?KQ6Aon2X*O=SbbL4vZOV2bvY{pEEhn
zu?zV%VgVQrO=?_n<WpGN+nO09b%eFI)~>o~?b;{Jl$UEb;!NdP&OuS`)!uAO`c}q^
zk`IgTJg2~gVdd{-Wk=T<x8#J69iyG!e4kP@tM;Tt-f|h0+B#2|a`Wivb`PN02h9%(
z`$kr1k?m7$$iKe{Azv=1MXcmiNsy^HZ!BSQQ0Um%VMMvNsoX=WV_i6lH`TP^T7C7^
z@LChk5K4Pzn`fO(*HSg@Qz4t&ekUxtrd<G3>!O4)*0eD<(~|Ml9W|Df#01-u_(fDM
zX0^yonOjv$&^Fr2^k1<SqcS(fq|jMFo<1o8&~(Wc;=Q<l!EY|V%6jtGuY+@dPBPxB
zIR0g*3ev6KxqDn2L6w4Yv{J;2ZT7qSti}fZ&paKl8vdiM^luFRDzHGP<U{9(8DQF%
znVbKSXtiCRbh0$Kb-n1YZ@U3+2(<_3B<m^_d9_POKH7$9gG<ng5~P%l-!09dOhN?^
zAjG2>v7nBxc;LocCz#k{Q=we@Zpp`Np|s5mME#gpqH2$Oj``D9+7Pie`LrDgI%9lb
zXG5PIkp=J-S0Kn4W7zKdb)xb7lldzKM8t;Rbh^S&e%zbtMTzaHDd3IiEr<LWB)`V#
zbioN((b7yD7;>AD=<W1iB4dcf$Fl}u_wfYDSjv!StmW7^kaEmwN+Ok!IDsiQvfHaa
z+wlzOh~ny<POl|Ot+{jASYl0{STP%&6Mye8sj(a@{p+s1UEevM-vaz_Cm_n@#Ppey
zr8%{tReZ*)nNrKD=<ws4rz?p5kSyQH?q(AWzpsTr>N?G&Aj4d6%CK~zcu1y=jS+-v
z1yJsv)v^^6LGl5-`!ofReDbwFlNA*N&GE)7_RhOp1Ri}*aLBGAx&(`ZVf7~RY|Rnn
zyJxCA$G3m;EN}{Iy(vW#sJQg{taSB8MDph8>=6)Fg#7N2t-sM0^^*~^`l3ELM2?ar
z1S(RuZYGleiqx61Pe+B-tbCa?LR0(aB7kl$!TOiMq+56F!qo$wkyeV(`i}erDCtIK
z93|2Nr2zmc)60Mpp3vHiRs@FA@$aM<hwyYSKX&nYdiu#YKpyd`r{NAjFY7Up;GrM=
zs~GRl_x`(q<3GFU*5!lU%@so4`MC|09d=6qke0|D?CuKyL6iQ+6&TPqMgkH~0FHmz
zyY<)Jj}_BjE8ecQSWM{wAc7t-{n2OI)Y%#Q2as#E{ti7axw*LkqLIv7-)n9yZ~xlb
z{u9{!ZvPw2p$o$RSa&#Z?JV%Q4Iux0HX!=!Pe4^t0$c%zj+q?_riPSW_<vKI2LC6u
zDYBFqBaTvT0B;T{)$(%x3(QnFX8$jRBS3?<2RYaRg9usS=mS*8+YxBy)G&U%;~o6x
zi~VpG{}qKgb9EmY{J&H7{{L_KKVwtIU*Q9}Y)60}`@V;RZ;;QiBS)IBxy%#Kp+>CC
mqdJ3=d3Z!T#XS7K|0ioKygsj6Eb=LHxDac5s|Jg!N&f~qp8Wg(

literal 0
HcmV?d00001

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
new file mode 100644
index 0000000000..62bebb89b5
--- /dev/null
+++ b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
@@ -0,0 +1,69 @@
+---
+layout: blog
+title: "The Evolution of Kubernetes Dashboard"
+date: 2021-03-09
+slug: the-evolution-of-kubernetes-dashboard
+---
+
+Authors: Marcin Maciaszczyk, Kubermatic & Sebastian Florek, Kubermatic
+
+In October 2020, the Kubernetes Dashboard officially turned five. As main project maintainers, we can barely believe that so much time has passed since our very first commits to the project. However, looking back with a bit of nostalgia, we realize that quite a lot has happened since then. Now it’s due time to celebrate “our baby” with a short recap.
+
+## How It All Began
+
+The initial idea behind the Kubernetes Dashboard project was to provide a web interface for Kubernetes. We wanted to reflect the kubectl functionality through an intuitive web UI. The main benefit from using the UI is to be able to quickly see things that do not work as expected (monitoring and troubleshooting). Also, the Kubernetes Dashboard is a great starting point for users that are new to the Kubernetes ecosystem.
+
+The very [first commit](https://github.com/kubernetes/dashboard/commit/5861187fa807ac1cc2d9b2ac786afeced065076c) to the Kubernetes Dashboard was made by Filip Grządkowski from Google on 16th October 2015 – just a few months from the initial commit to the Kubernetes repository. Our initial commits go back to November 2015 ([Sebastian committed on 16 November 2015](https://github.com/kubernetes/dashboard/commit/09e65b6bb08c49b926253de3621a73da05e400fd); [Marcin committed on 23 November 2015](https://github.com/kubernetes/dashboard/commit/1da4b1c25ef040818072c734f71333f9b4733f55)). Since that time, we’ve become regular contributors to the project. For the next two years, we worked closely with the Googlers, eventually becoming main project maintainers ourselves.
+
+{{< imgproc first-ui Fit "1000x900" >}}
+The First Version of the User Interface
+{{< /imgproc >}}
+
+{{< imgproc along-the-way-ui Fit "1000x900" >}}
+Prototype of the New User Interface
+{{< /imgproc >}}
+
+{{< imgproc current-ui Fit "1000x700" >}}
+The Current User Interface
+{{< /imgproc >}}
+
+As you can see, the initial look and feel of the project were completely different from the current one. We have changed the design multiple times. The same has happened with the code itself.
+
+## Growing Up - The Big Migration
+
+At [the beginning of 2018](https://github.com/kubernetes/dashboard/pull/2727), we reached a point where AngularJS was getting closer to the end of its life, while the new Angular versions were published quite often. A lot of the libraries and the modules that we were using were following the trend. That forced us to spend a lot of the time rewriting the frontend part of the project to make it work with newer technologies.
+
+The migration came with many benefits like being able to refactor a lot of the code, introduce design patterns, reduce code complexity, and benefit from the new modules. However, you can imagine that the scale of the migration was huge. Luckily, there were a number of contributions from the community helping us with the resource support, new Kubernetes version support, i18n, and much more. After many long days and nights, we finally released the [first beta version](https://github.com/kubernetes/dashboard/releases/tag/v2.0.0-beta1) in July 2019, followed by the [2.0 release](https://github.com/kubernetes/dashboard/releases/tag/v2.0.0) in April 2020 — our baby had grown up.
+
+## Where Are We Standing in 2021?
+
+Due to limited resources, unfortunately, we were not able to offer extensive support for many different Kubernetes versions. So, we’ve decided to always try and support the latest Kubernetes version available at the time of the Kubernetes Dashboard release. The latest release, [Dashboard v2.2.0](https://github.com/kubernetes/dashboard/releases/tag/v2.2.0) provides support for Kubernetes v1.20.
+
+On top of that, we put in a great deal of effort into [improving resource support](https://github.com/kubernetes/dashboard/issues/5232). Meanwhile, we do offer support for most of the Kubernetes resources. Also, the Kubernetes Dashboard supports multiple languages: English, German, French, Japanese, Korean, Chinese (Traditional, Simplified, Traditional Hong Kong). Persian and Russian localizations are currently in progress. Moreover, we are working on the support for 3rd party themes and the design of the app in general. As you can see, quite a lot of things are going on.
+
+Luckily, we do have regular contributors with domain knowledge who are taking care of the project, updating the Helm charts, translations, Go modules, and more. But as always, there could be many more hands on deck. So if you are thinking about contributing to Kubernetes, keep us in mind ;)
+
+## What’s Next
+
+The Kubernetes Dashboard has been growing and prospering for more than 5 years now. It provides the community with an intuitive Web UI, thereby decreasing the complexity of Kubernetes and increasing its accessibility to new community members. We are proud of what the project has achieved so far, but this is by far not the end. These are our priorities for the future:
+
+*   Keep providing support for the new Kubernetes versions
+*   Keep improving the support for the existing resources
+*   Keep working on auth system improvements
+*   [Rewrite the API to use gRPC and shared informers](https://github.com/kubernetes/dashboard/pull/5449): This will allow us to improve the performance of the application but, most importantly, to support live updates coming from the Kubernetes project. It is one of the most requested features from the community.
+*   Split the application into two containers, one with the UI and the second with the API running inside.
+
+## The Kubernetes Dashboard in Numbers
+
+*   Initial commit made on October 16, 2015
+*   Over 100 million pulls from Dockerhub since the v2 release
+*   8 supported languages and the next 2 in progress
+*   Over 3360 closed PRs
+*   Over 2260 closed issues
+*   100% coverage of the supported core Kubernetes resources
+*   Over 9000 stars on GitHub
+*   Over 237 000 lines of code
+
+## Join Us
+
+As mentioned earlier, we are currently looking for more people to help us further develop and grow the project. We are open to contributions in multiple areas, i.e., [issues with help wanted label](https://github.com/kubernetes/dashboard/issues?q=is%3Aissue+is%3Aopen+label%3A%22help+wanted%22). Please feel free to reach out via GitHub or the #sig-ui channel in the [Kubernetes Slack](https://slack.k8s.io/).

From 466b4bd8060291a2d1758de7ca30d29b4620a1a7 Mon Sep 17 00:00:00 2001
From: wasimj <w@juned.net>
Date: Tue, 9 Mar 2021 14:17:05 +0000
Subject: [PATCH 150/788] Update server-side-apply.md

Spelling mistake
---
 content/en/docs/reference/using-api/server-side-apply.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/using-api/server-side-apply.md b/content/en/docs/reference/using-api/server-side-apply.md
index d91497f8f2..0ef1c7a4c1 100644
--- a/content/en/docs/reference/using-api/server-side-apply.md
+++ b/content/en/docs/reference/using-api/server-side-apply.md
@@ -46,7 +46,7 @@ Server side apply is meant both as a replacement for the original `kubectl
 apply` and as a simpler mechanism for controllers to enact their changes.
 
 If you have Server Side Apply enabled, the control plane tracks managed fields
-for all newlly created objects.
+for all newly created objects.
 
 ## Field Management
 

From 2dd9b3d4fdc44dabb868080b24473c9376978e0d Mon Sep 17 00:00:00 2001
From: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
Date: Tue, 9 Mar 2021 16:09:08 -0300
Subject: [PATCH 151/788] Add also Jailton to the pt reviewers

---
 OWNERS_ALIASES | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 4883589bfa..2b5c02adb4 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -175,6 +175,7 @@ aliases:
     # zhangxiaoyu-zidif
   sig-docs-pt-owners: # Admins for Portuguese content
     - femrtnz
+    - jailton
     - jcjesus
     - devlware
     - jhonmike
@@ -182,6 +183,7 @@ aliases:
     - yagonobre
   sig-docs-pt-reviews: # PR reviews for Portugese content
     - femrtnz
+    - jailton
     - jcjesus
     - devlware
     - jhonmike

From fbff88f16a049484c5db9fccb6166bb2cd1e8296 Mon Sep 17 00:00:00 2001
From: Paulo Simoes <pasimoes@users.noreply.github.com>
Date: Tue, 9 Mar 2021 17:03:04 -0300
Subject: [PATCH 152/788] Add Concepts/Overview K8s and Components and some
 glossary itens in pt language (#26710)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Add Concepts/Overview for Kubernetes and Components, and glossary itens in pt
Modify Glossary/Control-Plane definition in pt
Changes to be committed:
	new file:   content/pt/docs/concepts/overview/_index.md
	new file:   content/pt/docs/concepts/overview/components.md
	new file:   content/pt/docs/concepts/overview/what-is-kubernetes.md
	new file:   content/pt/docs/reference/glossary/cloud-controller-manager.md
	new file:   content/pt/docs/reference/glossary/cncf.md
	new file:   content/pt/docs/reference/glossary/container-runtime.md
	modified:   content/pt/docs/reference/glossary/control-plane.md
	new file:   content/pt/docs/reference/glossary/etcd.md
	new file:   content/pt/docs/reference/glossary/kube-apiserver.md
	new file:   content/pt/docs/reference/glossary/kube-controller-manager.md
	new file:   content/pt/docs/reference/glossary/kube-proxy.md
	new file:   content/pt/docs/reference/glossary/kube-scheduler.md
	modified:   package-lock.json

* Changes to be committed:
	modified:   package-lock.json

 Untracked files:
	content/pt/docs/concepts/overview/kubernetes-api.md

* Changes to be committed:
	modified:   package-lock.json

 Untracked files:
	content/pt/docs/concepts/overview/kubernetes-api.md

* ---
reviewers:
- lavalamp
- rikatz
title: Componentes do Kubernetes
content_type: concept
description: >
  Um cluster Kubernetes consiste de componentes que representam a camada de gerenciamento, e um conjunto de máquinas chamadas nós.
weight: 20
card:
  name: concepts
  weight: 20
---

<!-- overview -->
Ao implantar o Kubernetes, você obtém um cluster.
{{< glossary_definition term_id="cluster" length="all" prepend="Um cluster Kubernetes consiste em">}}

Este documento descreve os vários componentes que você precisa ter para implantar um cluster Kubernetes completo e funcional.

Esse é o diagrama de um cluster Kubernetes com todos os componentes interligados.

![Componentes do Kubernetes](/images/docs/components-of-kubernetes.svg)

<!-- body -->
## Componentes da camada de gerenciamento

Os componentes da camada de gerenciamento tomam decisões globais sobre o cluster (por exemplo, agendamento de _pods_), bem como detectam e respondem aos eventos do cluster (por exemplo, iniciando um novo _{{< glossary_tooltip text="pod" term_id="pod" >}}_ quando o campo `replicas` de um _Deployment_ não está atendido).

Os componentes da camada de gerenciamento podem ser executados em qualquer máquina do cluster. Contudo, para simplificar, os _scripts_ de configuração normalmente iniciam todos os componentes da camada de gerenciamento na mesma máquina, e não executa contêineres de usuário nesta máquina. Veja [Construindo clusters de alta disponibilidade](/docs/admin/high-availability/) para um exemplo de configuração de múltiplas VMs para camada de gerenciamento (_multi-main-VM_).

### kube-apiserver

{{< glossary_definition term_id="kube-apiserver" length="all" >}}

### etcd

{{< glossary_definition term_id="etcd" length="all" >}}

### kube-scheduler

{{< glossary_definition term_id="kube-scheduler" length="all" >}}

### kube-controller-manager

{{< glossary_definition term_id="kube-controller-manager" length="all" >}}

Alguns tipos desses controladores são:

  * Controlador de nó: responsável por perceber e responder quando os nós caem.
  * Controlador de _Job_: Observa os objetos _Job_ que representam tarefas únicas e, em seguida, cria _pods_ para executar essas tarefas até a conclusão.
  * Controlador de _endpoints_: preenche o objeto _Endpoints_ (ou seja, junta os Serviços e os _pods_).
  * Controladores de conta de serviço e de _token_: crie contas padrão e _tokens_ de acesso de API para novos _namespaces_.

### cloud-controller-manager

{{< glossary_definition term_id="cloud-controller-manager" length="short" >}}

O cloud-controller-manager executa apenas controladores que são específicos para seu provedor de nuvem.
Se você estiver executando o Kubernetes em suas próprias instalações ou em um ambiente de aprendizagem dentro de seu
próprio PC, o cluster não possui um gerenciador de controlador de nuvem.

Tal como acontece com o kube-controller-manager, o cloud-controller-manager combina vários ciclos de controle logicamente independentes em um binário único que você executa como um processo único. Você pode escalar horizontalmente (exectuar mais de uma cópia) para melhorar o desempenho ou para auxiliar na tolerância a falhas.

Os seguintes controladores podem ter dependências de provedor de nuvem:

  * Controlador de nó: para verificar junto ao provedor de nuvem para determinar se um nó foi excluído da nuvem após parar de responder.
  * Controlador de rota: para configurar rotas na infraestrutura de nuvem subjacente.
  * Controlador de serviço: Para criar, atualizar e excluir balanceadores de carga do provedor de nuvem.

## Node Components

Os componentes de nó são executados em todos os nós, mantendo os _pods_ em execução e fornecendo o ambiente de execução do Kubernetes.

### kubelet

{{< glossary_definition term_id="kubelet" length="all" >}}

### kube-proxy

{{< glossary_definition term_id="kube-proxy" length="all" >}}

### Container runtime

{{< glossary_definition term_id="container-runtime" length="all" >}}

## Addons

Complementos (_addons_) usam recursos do Kubernetes ({{< glossary_tooltip term_id="daemonset" >}}, {{< glossary_tooltip term_id="deployment" >}}, etc) para implementar funcionalidades do cluster. Como fornecem funcionalidades em nível do cluster, recursos de _addons_ que necessitem ser criados dentro de um _namespace_ pertencem ao _namespace_ `kube-system`.

Alguns _addons_ selecionados são descritos abaixo; para uma lista estendida dos _addons_ disponíveis, por favor consulte [Addons](/docs/concepts/cluster-administration/addons/).

### DNS

Embora os outros complementos não sejam estritamente necessários, todos os clusters do Kubernetes devem ter um [DNS do cluster](/docs/concepts/services-networking/dns-pod-service/), já que muitos exemplos dependem disso.

O DNS do cluster é um servidor DNS, além de outros servidores DNS em seu ambiente, que fornece registros DNS para serviços do Kubernetes.

Os contêineres iniciados pelo Kubernetes incluem automaticamente esse servidor DNS em suas pesquisas DNS.

### Web UI (Dashboard)

[Dashboard](/docs/tasks/access-application-cluster/web-ui-dashboard/) é uma interface de usuário Web, de uso geral, para clusters do Kubernetes. Ele permite que os usuários gerenciem e solucionem problemas de aplicações em execução no cluster, bem como o próprio cluster.

### Monitoramento de recursos do contêiner

[Monitoramento de recursos do contêiner](/docs/tasks/debug-application-cluster/resource-usage-monitoring/) registra métricas de série temporal genéricas sobre os contêineres em um banco de dados central e fornece uma interface de usuário para navegar por esses dados.

### Logging a nivel do cluster

Um mecanismo de [_logging_ a nível do cluster](/docs/concepts/cluster-administration/logging/) é responsável por guardar os _logs_ dos contêineres em um armazenamento central de _logs_ com um interface para navegação/pesquisa.

## {{% heading "whatsnext" %}}

* Aprenda sobre [Nós](/docs/concepts/architecture/nodes/).
* Aprenda sobre [Controladores](/docs/concepts/architecture/controller/).
* Aprenda sobre [kube-scheduler](/docs/concepts/scheduling-eviction/kube-scheduler/).
* Leia a [documentação](https://etcd.io/docs/) oficial do **etcd**.

* ---
reviewers:
title: Componentes do Kubernetes
content_type: concept
description: >
  Um cluster Kubernetes consiste de componentes que representam a camada de gerenciamento, e um conjunto de máquinas chamadas nós.
weight: 20
card:
  name: concepts
  weight: 20
---

<!-- overview -->
Ao implantar o Kubernetes, você obtém um cluster.
{{< glossary_definition term_id="cluster" length="all" prepend="Um cluster Kubernetes consiste em">}}

Este documento descreve os vários componentes que você precisa ter para implantar um cluster Kubernetes completo e funcional.

Esse é o diagrama de um cluster Kubernetes com todos os componentes interligados.

![Componentes do Kubernetes](/images/docs/components-of-kubernetes.svg)

<!-- body -->
## Componentes da camada de gerenciamento

Os componentes da camada de gerenciamento tomam decisões globais sobre o cluster (por exemplo, agendamento de _pods_), bem como detectam e respondem aos eventos do cluster (por exemplo, iniciando um novo _{{< glossary_tooltip text="pod" term_id="pod" >}}_ quando o campo `replicas` de um _Deployment_ não está atendido).

Os componentes da camada de gerenciamento podem ser executados em qualquer máquina do cluster. Contudo, para simplificar, os _scripts_ de configuração normalmente iniciam todos os componentes da camada de gerenciamento na mesma máquina, e não executa contêineres de usuário nesta máquina. Veja [Construindo clusters de alta disponibilidade](/docs/admin/high-availability/) para um exemplo de configuração de múltiplas VMs para camada de gerenciamento (_multi-main-VM_).

### kube-apiserver

{{< glossary_definition term_id="kube-apiserver" length="all" >}}

### etcd

{{< glossary_definition term_id="etcd" length="all" >}}

### kube-scheduler

{{< glossary_definition term_id="kube-scheduler" length="all" >}}

### kube-controller-manager

{{< glossary_definition term_id="kube-controller-manager" length="all" >}}

Alguns tipos desses controladores são:

  * Controlador de nó: responsável por perceber e responder quando os nós caem.
  * Controlador de _Job_: Observa os objetos _Job_ que representam tarefas únicas e, em seguida, cria _pods_ para executar essas tarefas até a conclusão.
  * Controlador de _endpoints_: preenche o objeto _Endpoints_ (ou seja, junta os Serviços e os _pods_).
  * Controladores de conta de serviço e de _token_: crie contas padrão e _tokens_ de acesso de API para novos _namespaces_.

### cloud-controller-manager

{{< glossary_definition term_id="cloud-controller-manager" length="short" >}}

O cloud-controller-manager executa apenas controladores que são específicos para seu provedor de nuvem.
Se você estiver executando o Kubernetes em suas próprias instalações ou em um ambiente de aprendizagem dentro de seu
próprio PC, o cluster não possui um gerenciador de controlador de nuvem.

Tal como acontece com o kube-controller-manager, o cloud-controller-manager combina vários ciclos de controle logicamente independentes em um binário único que você executa como um processo único. Você pode escalar horizontalmente (exectuar mais de uma cópia) para melhorar o desempenho ou para auxiliar na tolerância a falhas.

Os seguintes controladores podem ter dependências de provedor de nuvem:

  * Controlador de nó: para verificar junto ao provedor de nuvem para determinar se um nó foi excluído da nuvem após parar de responder.
  * Controlador de rota: para configurar rotas na infraestrutura de nuvem subjacente.
  * Controlador de serviço: Para criar, atualizar e excluir balanceadores de carga do provedor de nuvem.

## Node Components

Os componentes de nó são executados em todos os nós, mantendo os _pods_ em execução e fornecendo o ambiente de execução do Kubernetes.

### kubelet

{{< glossary_definition term_id="kubelet" length="all" >}}

### kube-proxy

{{< glossary_definition term_id="kube-proxy" length="all" >}}

### Container runtime

{{< glossary_definition term_id="container-runtime" length="all" >}}

## Addons

Complementos (_addons_) usam recursos do Kubernetes ({{< glossary_tooltip term_id="daemonset" >}}, {{< glossary_tooltip term_id="deployment" >}}, etc) para implementar funcionalidades do cluster. Como fornecem funcionalidades em nível do cluster, recursos de _addons_ que necessitem ser criados dentro de um _namespace_ pertencem ao _namespace_ `kube-system`.

Alguns _addons_ selecionados são descritos abaixo; para uma lista estendida dos _addons_ disponíveis, por favor consulte [Addons](/docs/concepts/cluster-administration/addons/).

### DNS

Embora os outros complementos não sejam estritamente necessários, todos os clusters do Kubernetes devem ter um [DNS do cluster](/docs/concepts/services-networking/dns-pod-service/), já que muitos exemplos dependem disso.

O DNS do cluster é um servidor DNS, além de outros servidores DNS em seu ambiente, que fornece registros DNS para serviços do Kubernetes.

Os contêineres iniciados pelo Kubernetes incluem automaticamente esse servidor DNS em suas pesquisas DNS.

### Web UI (Dashboard)

[Dashboard](/docs/tasks/access-application-cluster/web-ui-dashboard/) é uma interface de usuário Web, de uso geral, para clusters do Kubernetes. Ele permite que os usuários gerenciem e solucionem problemas de aplicações em execução no cluster, bem como o próprio cluster.

### Monitoramento de recursos do contêiner

[Monitoramento de recursos do contêiner](/docs/tasks/debug-application-cluster/resource-usage-monitoring/) registra métricas de série temporal genéricas sobre os contêineres em um banco de dados central e fornece uma interface de usuário para navegar por esses dados.

### Logging a nivel do cluster

Um mecanismo de [_logging_ a nível do cluster](/docs/concepts/cluster-administration/logging/) é responsável por guardar os _logs_ dos contêineres em um armazenamento central de _logs_ com um interface para navegação/pesquisa.

## {{% heading "whatsnext" %}}

* Aprenda sobre [Nós](/docs/concepts/architecture/nodes/).
* Aprenda sobre [Controladores](/docs/concepts/architecture/controller/).
* Aprenda sobre [kube-scheduler](/docs/concepts/scheduling-eviction/kube-scheduler/).
* Leia a [documentação](https://etcd.io/docs/) oficial do **etcd**.

* ---
reviewers:
title: O que é Kubernetes?
description: >
  Kubernetes é um plataforma de código aberto, portável e extensiva para o gerenciamento de cargas de trabalho e serviços distribuídos em contêineres, que facilita tanto a configuração declarativa quanto a automação. Ele possui um ecossistema grande, e de rápido crescimento.  Serviços, suporte, e ferramentas para Kubernetes estão amplamente disponíveis.
content_type: concept
weight: 10
card:
  name: concepts
  weight: 10
sitemap:
  priority: 0.9
---

<!-- overview -->
Essa página é uma visão geral do Kubernetes.

<!-- body -->
Kubernetes é um plataforma de código aberto, portável e extensiva para o gerenciamento de cargas de trabalho e serviços distribuídos em contêineres, que facilita tanto a configuração declarativa quanto a automação. Ele possui um ecossistema grande, e de rápido crescimento.  Serviços, suporte, e ferramentas para Kubernetes estão amplamente disponíveis.

O Google tornou Kubernetes um projeto de código-aberto em 2014. O Kubernetes combina [mais de 15 anos de experiência do Google](/blog/2015/04/borg-predecessor-to-kubernetes/) executando cargas de trabalho produtivas em escala, com as melhores idéias e práticas da comunidade.

O nome **Kubernetes** tem origem no Grego, significando _timoneiro_ ou _piloto_. **K8s** é a abreviação derivada pela troca das oito letras "ubernete" por "8", se tornado _K"8"s_.

## Voltando no tempo

Vamos dar uma olhada no porque o Kubernetes é tão útil, voltando no tempo.

![Evolução das implantações](/images/docs/Container_Evolution.svg)

**Era da implantação tradicional:** No início, as organizações executavam aplicações em servidores físicos. Não havia como definir limites de recursos para aplicações em um mesmo servidor físico, e isso causava problemas de alocação de recursos. Por exemplo, se várias aplicações fossem executadas em um mesmo servidor físico, poderia haver situações em que uma aplicação ocupasse a maior parte dos recursos e, como resultado, o desempenho das outras aplicações seria inferior. Uma solução para isso seria executar cada aplicação em um servidor físico diferente. Mas isso não escalava, pois os recursos eram subutilizados, e se tornava custoso para as organizações manter muitos servidores físicos.

**Era da implantação virtualizada:**  Como solução, a virtualização foi introduzida. Esse modelo permite que você execute várias máquinas virtuais (VMs) em uma única CPU de um servidor físico. A virtualização permite que as aplicações sejam isoladas entre as VMs, e ainda fornece um nível de segurança, pois as informações de uma aplicação não podem ser acessadas livremente por outras aplicações.

A virtualização permite melhor utilização de recursos em um servidor físico, e permite melhor escalabilidade porque uma aplicação pode ser adicionada ou atualizada facilmente, reduz os custos de hardware e muito mais. Com a virtualização, você pode apresentar um conjunto de recursos físicos como um cluster de máquinas virtuais descartáveis.

Cada VM é uma máquina completa que executa todos os componentes, incluindo seu próprio sistema operacional, além do hardware virtualizado.

**Era da implantação em contêineres:** Contêineres são semelhantes às VMs, mas têm propriedades de isolamento flexibilizados para compartilhar o sistema operacional (SO) entre as aplicações. Portanto, os contêineres são considerados leves. Semelhante a uma VM, um contêiner tem seu próprio sistema de arquivos, compartilhamento de CPU, memória, espaço de processo e muito mais. Como eles estão separados da infraestrutura subjacente, eles são portáveis entre nuvens e distribuições de sistema operacional.

Contêineres se tornaram populares porque eles fornecem benefícios extra, tais como:

* Criação e implantação ágil de aplicações: aumento da facilidade e eficiência na criação de imagem de contêiner comparado ao uso de imagem de VM.
* Desenvolvimento, integração e implantação contínuos: fornece capacidade de criação e de implantação de imagens de contêiner de forma confiável e frequente, com a funcionalidade de efetuar reversões rápidas e eficientes (devido à imutabilidade da imagem).
* Separação de interesses entre Desenvolvimento e Operações: crie imagens de contêineres de aplicações no momento de construção/liberação em vez de no momento de implantação, desacoplando as aplicações da infraestrutura.
* A capacidade de observação (Observabilidade) não apenas apresenta informações e métricas no nível do sistema operacional, mas também a integridade da aplicação e outros sinais.
* Consistência ambiental entre desenvolvimento, teste e produção: funciona da mesma forma em um laptop e na nuvem.
* Portabilidade de distribuição de nuvem e sistema operacional: executa no Ubuntu, RHEL, CoreOS, localmente, nas principais nuvens públicas e em qualquer outro lugar.
* Gerenciamento centrado em aplicações: eleva o nível de abstração da execução em um sistema operacional em hardware virtualizado à execução de uma aplicação em um sistema operacional usando recursos lógicos.
* Microserviços fracamente acoplados, distribuídos, elásticos e livres: as aplicações são divididas em partes menores e independentes e podem ser implantados e gerenciados dinamicamente - não uma pilha monolítica em execução em uma grande máquina de propósito único.
* Isolamento de recursos: desempenho previsível de aplicações.
* Utilização de recursos: alta eficiência e densidade.

## Por que você precisa do Kubernetes e o que ele pode fazer{#why-you-need-kubernetes-and-what-can-it-do}

Os contêineres são uma boa maneira de agrupar e executar suas aplicações. Em um ambiente de produção, você precisa gerenciar os contêineres que executam as aplicações e garantir que não haja tempo de inatividade. Por exemplo, se um contêiner cair, outro contêiner precisa ser iniciado. Não seria mais fácil se esse comportamento fosse controlado por um sistema?

É assim que o Kubernetes vem ao resgate! O Kubernetes oferece uma estrutura para executar sistemas distribuídos de forma resiliente. Ele cuida do escalonamento e do recuperação à falha de sua aplicação, fornece padrões de implantação e muito mais. Por exemplo, o Kubernetes pode gerenciar facilmente uma implantação no método canário para seu sistema.

O Kubernetes oferece a você:

* **Descoberta de serviço e balanceamento de carga**
O Kubernetes pode expor um contêiner usando o nome DNS ou seu próprio endereço IP. Se o tráfego para um contêiner for alto, o Kubernetes pode balancear a carga e distribuir o tráfego de rede para que a implantação seja estável.
* **Orquestração de armazenamento**
O Kubernetes permite que você monte automaticamente um sistema de armazenamento de sua escolha, como armazenamentos locais, provedores de nuvem pública e muito mais.
* **Lançamentos e reversões automatizadas**
Você pode descrever o estado desejado para seus contêineres implantados usando o Kubernetes, e ele pode alterar o estado real para o estado desejado em um ritmo controlada. Por exemplo, você pode automatizar o Kubernetes para criar novos contêineres para sua implantação, remover os contêineres existentes e adotar todos os seus recursos para o novo contêiner.
* **Empacotamento binário automático**
Você fornece ao Kubernetes um cluster de nós que pode ser usado para executar tarefas nos contêineres. Você informa ao Kubernetes de quanta CPU e memória (RAM) cada contêiner precisa. O Kubernetes pode encaixar contêineres em seus nós para fazer o melhor uso de seus recursos.
* **Autocorreção**
O Kubernetes reinicia os contêineres que falham, substitui os contêineres, elimina os contêineres que não respondem à verificação de integridade definida pelo usuário e não os anuncia aos clientes até que estejam prontos para servir.
* **Gerenciamento de configuração e de segredos**
O Kubernetes permite armazenar e gerenciar informações confidenciais, como senhas, tokens OAuth e chaves SSH. Você pode implantar e atualizar segredos e configuração de aplicações sem reconstruir suas imagens de contêiner e sem expor segredos em sua pilha de configuração.

## O que o Kubernetes não é

O Kubernetes não é um sistema PaaS (plataforma como serviço) tradicional e completo. Como o Kubernetes opera no nível do contêiner, e não no nível do hardware, ele fornece alguns recursos geralmente aplicáveis comuns às ofertas de PaaS, como implantação, escalonamento, balanceamento de carga, e permite que os usuários integrem suas soluções de _logging_, monitoramento e alerta. No entanto, o Kubernetes não é monolítico, e essas soluções padrão são opcionais e conectáveis. O Kubernetes fornece os blocos de construção para a construção de plataformas de desenvolvimento, mas preserva a escolha e flexibilidade do usuário onde é importante.

Kubernetes:

* Não limita os tipos de aplicações suportadas. O Kubernetes visa oferecer suporte a uma variedade extremamente diversa de cargas de trabalho, incluindo cargas de trabalho sem estado, com estado e de processamento de dados. Se uma aplicação puder ser executada em um contêiner, ele deve ser executado perfeitamente no Kubernetes.
* Não implanta código-fonte e não constrói sua aplicação. Os fluxos de trabalho de integração contínua, entrega e implantação (CI/CD) são determinados pelas culturas e preferências da organização, bem como pelos requisitos técnicos.
* Não fornece serviços em nível de aplicação, tais como middleware (por exemplo, barramentos de mensagem), estruturas de processamento de dados (por exemplo, Spark), bancos de dados (por exemplo, MySQL), caches, nem sistemas de armazenamento em cluster (por exemplo, Ceph), como serviços integrados. Esses componentes podem ser executados no Kubernetes e/ou podem ser acessados por aplicações executadas no Kubernetes por meio de mecanismos portáteis, como o [Open Service Broker](https://openservicebrokerapi.org/).
* Não dita soluções de _logging_, monitoramento ou alerta. Ele fornece algumas integrações como prova de conceito e mecanismos para coletar e exportar métricas.
* Não fornece nem exige um sistema/idioma de configuração (por exemplo, Jsonnet). Ele fornece uma API declarativa que pode ser direcionada por formas arbitrárias de especificações declarativas.
* Não fornece nem adota sistemas abrangentes de configuração de máquinas, manutenção, gerenciamento ou autocorreção.
* Adicionalmente, o Kubernetes não é um mero sistema de orquestração. Na verdade, ele elimina a necessidade de orquestração. A definição técnica de orquestração é a execução de um fluxo de trabalho definido: primeiro faça A, depois B e depois C. Em contraste, o Kubernetes compreende um conjunto de processos de controle independentes e combináveis que conduzem continuamente o estado atual em direção ao estado desejado fornecido. Não importa como você vai de A para C. O controle centralizado também não é necessário. Isso resulta em um sistema que é mais fácil de usar e mais poderoso, robusto, resiliente e extensível.

## {{% heading "whatsnext" %}}

*   Dê uma olhada em [Componentes do Kubernetes](/docs/concepts/overview/components/).
*   Pronto para [Iniciar](/docs/setup/)?
---
 content/pt/docs/concepts/overview/_index.md   |   7 ++
 .../pt/docs/concepts/overview/components.md   | 117 ++++++++++++++++++
 .../concepts/overview/what-is-kubernetes.md   |  94 ++++++++++++++
 .../glossary/cloud-controller-manager.md      |  21 ++++
 content/pt/docs/reference/glossary/cncf.md    |  20 +++
 .../reference/glossary/container-runtime.md   |  18 +++
 .../docs/reference/glossary/control-plane.md  |   6 +-
 content/pt/docs/reference/glossary/etcd.md    |  19 +++
 .../docs/reference/glossary/kube-apiserver.md |  22 ++++
 .../glossary/kube-controller-manager.md       |  18 +++
 .../pt/docs/reference/glossary/kube-proxy.md  |  22 ++++
 .../docs/reference/glossary/kube-scheduler.md |  17 +++
 12 files changed, 378 insertions(+), 3 deletions(-)
 create mode 100644 content/pt/docs/concepts/overview/_index.md
 create mode 100644 content/pt/docs/concepts/overview/components.md
 create mode 100644 content/pt/docs/concepts/overview/what-is-kubernetes.md
 create mode 100644 content/pt/docs/reference/glossary/cloud-controller-manager.md
 create mode 100644 content/pt/docs/reference/glossary/cncf.md
 create mode 100644 content/pt/docs/reference/glossary/container-runtime.md
 create mode 100644 content/pt/docs/reference/glossary/etcd.md
 create mode 100644 content/pt/docs/reference/glossary/kube-apiserver.md
 create mode 100644 content/pt/docs/reference/glossary/kube-controller-manager.md
 create mode 100644 content/pt/docs/reference/glossary/kube-proxy.md
 create mode 100644 content/pt/docs/reference/glossary/kube-scheduler.md

diff --git a/content/pt/docs/concepts/overview/_index.md b/content/pt/docs/concepts/overview/_index.md
new file mode 100644
index 0000000000..f254849b77
--- /dev/null
+++ b/content/pt/docs/concepts/overview/_index.md
@@ -0,0 +1,7 @@
+---
+title: "Visão Geral"
+weight: 20
+description: Obtenha uma visão em alto-nível do Kubernetes e dos componentes a partir dos quais ele é construído.
+sitemap:
+  priority: 0.9
+---
diff --git a/content/pt/docs/concepts/overview/components.md b/content/pt/docs/concepts/overview/components.md
new file mode 100644
index 0000000000..b03946c4ae
--- /dev/null
+++ b/content/pt/docs/concepts/overview/components.md
@@ -0,0 +1,117 @@
+---
+reviewers:
+title: Componentes do Kubernetes
+content_type: concept
+description: >
+  Um cluster Kubernetes consiste de componentes que representam a camada de gerenciamento, e um conjunto de máquinas chamadas nós.
+weight: 20
+card:
+  name: concepts
+  weight: 20
+---
+
+<!-- overview -->
+Ao implantar o Kubernetes, você obtém um cluster.
+{{< glossary_definition term_id="cluster" length="all" prepend="Um cluster Kubernetes consiste em">}}
+
+Este documento descreve os vários componentes que você precisa ter para implantar um cluster Kubernetes completo e funcional.
+
+Esse é o diagrama de um cluster Kubernetes com todos os componentes interligados.
+
+![Componentes do Kubernetes](/images/docs/components-of-kubernetes.svg)
+
+
+<!-- body -->
+## Componentes da camada de gerenciamento
+
+Os componentes da camada de gerenciamento tomam decisões globais sobre o cluster (por exemplo, agendamento de _pods_), bem como detectam e respondem aos eventos do cluster (por exemplo, iniciando um novo _{{< glossary_tooltip text="pod" term_id="pod" >}}_ quando o campo `replicas` de um _Deployment_ não está atendido).
+
+Os componentes da camada de gerenciamento podem ser executados em qualquer máquina do cluster. Contudo, para simplificar, os _scripts_ de configuração normalmente iniciam todos os componentes da camada de gerenciamento na mesma máquina, e não executa contêineres de usuário nesta máquina. Veja [Construindo clusters de alta disponibilidade](/docs/admin/high-availability/) para um exemplo de configuração de múltiplas VMs para camada de gerenciamento (_multi-main-VM_).
+
+### kube-apiserver
+
+{{< glossary_definition term_id="kube-apiserver" length="all" >}}
+
+### etcd
+
+{{< glossary_definition term_id="etcd" length="all" >}}
+
+### kube-scheduler
+
+{{< glossary_definition term_id="kube-scheduler" length="all" >}}
+
+### kube-controller-manager
+
+{{< glossary_definition term_id="kube-controller-manager" length="all" >}}
+
+Alguns tipos desses controladores são:
+
+  * Controlador de nó: responsável por perceber e responder quando os nós caem.
+  * Controlador de _Job_: Observa os objetos _Job_ que representam tarefas únicas e, em seguida, cria _pods_ para executar essas tarefas até a conclusão.
+  * Controlador de _endpoints_: preenche o objeto _Endpoints_ (ou seja, junta os Serviços e os _pods_).
+  * Controladores de conta de serviço e de _token_: crie contas padrão e _tokens_ de acesso de API para novos _namespaces_.
+
+### cloud-controller-manager
+
+{{< glossary_definition term_id="cloud-controller-manager" length="short" >}}
+
+O cloud-controller-manager executa apenas controladores que são específicos para seu provedor de nuvem.
+Se você estiver executando o Kubernetes em suas próprias instalações ou em um ambiente de aprendizagem dentro de seu
+próprio PC, o cluster não possui um gerenciador de controlador de nuvem.
+
+Tal como acontece com o kube-controller-manager, o cloud-controller-manager combina vários ciclos de controle logicamente independentes em um binário único que você executa como um processo único. Você pode escalar horizontalmente (exectuar mais de uma cópia) para melhorar o desempenho ou para auxiliar na tolerância a falhas.
+
+Os seguintes controladores podem ter dependências de provedor de nuvem:
+
+  * Controlador de nó: para verificar junto ao provedor de nuvem para determinar se um nó foi excluído da nuvem após parar de responder.
+  * Controlador de rota: para configurar rotas na infraestrutura de nuvem subjacente.
+  * Controlador de serviço: Para criar, atualizar e excluir balanceadores de carga do provedor de nuvem.
+
+## Node Components
+
+Os componentes de nó são executados em todos os nós, mantendo os _pods_ em execução e fornecendo o ambiente de execução do Kubernetes.
+
+### kubelet
+
+{{< glossary_definition term_id="kubelet" length="all" >}}
+
+### kube-proxy
+
+{{< glossary_definition term_id="kube-proxy" length="all" >}}
+
+### Container runtime
+
+{{< glossary_definition term_id="container-runtime" length="all" >}}
+
+## Addons
+
+Complementos (_addons_) usam recursos do Kubernetes ({{< glossary_tooltip term_id="daemonset" >}}, {{< glossary_tooltip term_id="deployment" >}}, etc) para implementar funcionalidades do cluster. Como fornecem funcionalidades em nível do cluster, recursos de _addons_ que necessitem ser criados dentro de um _namespace_ pertencem ao _namespace_ `kube-system`.
+
+Alguns _addons_ selecionados são descritos abaixo; para uma lista estendida dos _addons_ disponíveis, por favor consulte [Addons](/docs/concepts/cluster-administration/addons/).
+
+### DNS
+
+Embora os outros complementos não sejam estritamente necessários, todos os clusters do Kubernetes devem ter um [DNS do cluster](/docs/concepts/services-networking/dns-pod-service/), já que muitos exemplos dependem disso.
+
+O DNS do cluster é um servidor DNS, além de outros servidores DNS em seu ambiente, que fornece registros DNS para serviços do Kubernetes.
+
+Os contêineres iniciados pelo Kubernetes incluem automaticamente esse servidor DNS em suas pesquisas DNS.
+
+### Web UI (Dashboard)
+
+[Dashboard](/docs/tasks/access-application-cluster/web-ui-dashboard/) é uma interface de usuário Web, de uso geral, para clusters do Kubernetes. Ele permite que os usuários gerenciem e solucionem problemas de aplicações em execução no cluster, bem como o próprio cluster.
+
+### Monitoramento de recursos do contêiner
+
+[Monitoramento de recursos do contêiner](/docs/tasks/debug-application-cluster/resource-usage-monitoring/) registra métricas de série temporal genéricas sobre os contêineres em um banco de dados central e fornece uma interface de usuário para navegar por esses dados.
+
+### Logging a nivel do cluster
+
+Um mecanismo de [_logging_ a nível do cluster](/docs/concepts/cluster-administration/logging/) é responsável por guardar os _logs_ dos contêineres em um armazenamento central de _logs_ com um interface para navegação/pesquisa.
+
+## {{% heading "whatsnext" %}}
+
+* Aprenda sobre [Nós](/docs/concepts/architecture/nodes/).
+* Aprenda sobre [Controladores](/docs/concepts/architecture/controller/).
+* Aprenda sobre [kube-scheduler](/docs/concepts/scheduling-eviction/kube-scheduler/).
+* Leia a [documentação](https://etcd.io/docs/) oficial do **etcd**.
diff --git a/content/pt/docs/concepts/overview/what-is-kubernetes.md b/content/pt/docs/concepts/overview/what-is-kubernetes.md
new file mode 100644
index 0000000000..29473a7f75
--- /dev/null
+++ b/content/pt/docs/concepts/overview/what-is-kubernetes.md
@@ -0,0 +1,94 @@
+---
+reviewers:
+title: O que é Kubernetes?
+description: >
+  Kubernetes é um plataforma de código aberto, portável e extensiva para o gerenciamento de cargas de trabalho e serviços distribuídos em contêineres, que facilita tanto a configuração declarativa quanto a automação. Ele possui um ecossistema grande, e de rápido crescimento.  Serviços, suporte, e ferramentas para Kubernetes estão amplamente disponíveis.
+content_type: concept
+weight: 10
+card:
+  name: concepts
+  weight: 10
+sitemap:
+  priority: 0.9
+---
+
+<!-- overview -->
+Essa página é uma visão geral do Kubernetes.
+
+
+<!-- body -->
+Kubernetes é um plataforma de código aberto, portável e extensiva para o gerenciamento de cargas de trabalho e serviços distribuídos em contêineres, que facilita tanto a configuração declarativa quanto a automação. Ele possui um ecossistema grande, e de rápido crescimento.  Serviços, suporte, e ferramentas para Kubernetes estão amplamente disponíveis.
+
+O Google tornou Kubernetes um projeto de código-aberto em 2014. O Kubernetes combina [mais de 15 anos de experiência do Google](/blog/2015/04/borg-predecessor-to-kubernetes/) executando cargas de trabalho produtivas em escala, com as melhores idéias e práticas da comunidade.
+
+O nome **Kubernetes** tem origem no Grego, significando _timoneiro_ ou _piloto_. **K8s** é a abreviação derivada pela troca das oito letras "ubernete" por "8", se tornado _K"8"s_.
+
+## Voltando no tempo
+
+Vamos dar uma olhada no porque o Kubernetes é tão útil, voltando no tempo.
+
+![Evolução das implantações](/images/docs/Container_Evolution.svg)
+
+**Era da implantação tradicional:** No início, as organizações executavam aplicações em servidores físicos. Não havia como definir limites de recursos para aplicações em um mesmo servidor físico, e isso causava problemas de alocação de recursos. Por exemplo, se várias aplicações fossem executadas em um mesmo servidor físico, poderia haver situações em que uma aplicação ocupasse a maior parte dos recursos e, como resultado, o desempenho das outras aplicações seria inferior. Uma solução para isso seria executar cada aplicação em um servidor físico diferente. Mas isso não escalava, pois os recursos eram subutilizados, e se tornava custoso para as organizações manter muitos servidores físicos.
+
+**Era da implantação virtualizada:**  Como solução, a virtualização foi introduzida. Esse modelo permite que você execute várias máquinas virtuais (VMs) em uma única CPU de um servidor físico. A virtualização permite que as aplicações sejam isoladas entre as VMs, e ainda fornece um nível de segurança, pois as informações de uma aplicação não podem ser acessadas livremente por outras aplicações.
+
+A virtualização permite melhor utilização de recursos em um servidor físico, e permite melhor escalabilidade porque uma aplicação pode ser adicionada ou atualizada facilmente, reduz os custos de hardware e muito mais. Com a virtualização, você pode apresentar um conjunto de recursos físicos como um cluster de máquinas virtuais descartáveis.
+
+Cada VM é uma máquina completa que executa todos os componentes, incluindo seu próprio sistema operacional, além do hardware virtualizado.
+
+**Era da implantação em contêineres:** Contêineres são semelhantes às VMs, mas têm propriedades de isolamento flexibilizados para compartilhar o sistema operacional (SO) entre as aplicações. Portanto, os contêineres são considerados leves. Semelhante a uma VM, um contêiner tem seu próprio sistema de arquivos, compartilhamento de CPU, memória, espaço de processo e muito mais. Como eles estão separados da infraestrutura subjacente, eles são portáveis entre nuvens e distribuições de sistema operacional.
+
+Contêineres se tornaram populares porque eles fornecem benefícios extra, tais como:
+
+* Criação e implantação ágil de aplicações: aumento da facilidade e eficiência na criação de imagem de contêiner comparado ao uso de imagem de VM.
+* Desenvolvimento, integração e implantação contínuos: fornece capacidade de criação e de implantação de imagens de contêiner de forma confiável e frequente, com a funcionalidade de efetuar reversões rápidas e eficientes (devido à imutabilidade da imagem).
+* Separação de interesses entre Desenvolvimento e Operações: crie imagens de contêineres de aplicações no momento de construção/liberação em vez de no momento de implantação, desacoplando as aplicações da infraestrutura.
+* A capacidade de observação (Observabilidade) não apenas apresenta informações e métricas no nível do sistema operacional, mas também a integridade da aplicação e outros sinais.
+* Consistência ambiental entre desenvolvimento, teste e produção: funciona da mesma forma em um laptop e na nuvem.
+* Portabilidade de distribuição de nuvem e sistema operacional: executa no Ubuntu, RHEL, CoreOS, localmente, nas principais nuvens públicas e em qualquer outro lugar.
+* Gerenciamento centrado em aplicações: eleva o nível de abstração da execução em um sistema operacional em hardware virtualizado à execução de uma aplicação em um sistema operacional usando recursos lógicos.
+* Microserviços fracamente acoplados, distribuídos, elásticos e livres: as aplicações são divididas em partes menores e independentes e podem ser implantados e gerenciados dinamicamente - não uma pilha monolítica em execução em uma grande máquina de propósito único.
+* Isolamento de recursos: desempenho previsível de aplicações.
+* Utilização de recursos: alta eficiência e densidade.
+
+## Por que você precisa do Kubernetes e o que ele pode fazer{#why-you-need-kubernetes-and-what-can-it-do}
+
+Os contêineres são uma boa maneira de agrupar e executar suas aplicações. Em um ambiente de produção, você precisa gerenciar os contêineres que executam as aplicações e garantir que não haja tempo de inatividade. Por exemplo, se um contêiner cair, outro contêiner precisa ser iniciado. Não seria mais fácil se esse comportamento fosse controlado por um sistema?
+
+É assim que o Kubernetes vem ao resgate! O Kubernetes oferece uma estrutura para executar sistemas distribuídos de forma resiliente. Ele cuida do escalonamento e do recuperação à falha de sua aplicação, fornece padrões de implantação e muito mais. Por exemplo, o Kubernetes pode gerenciar facilmente uma implantação no método canário para seu sistema.
+
+O Kubernetes oferece a você:
+
+* **Descoberta de serviço e balanceamento de carga**
+O Kubernetes pode expor um contêiner usando o nome DNS ou seu próprio endereço IP. Se o tráfego para um contêiner for alto, o Kubernetes pode balancear a carga e distribuir o tráfego de rede para que a implantação seja estável.
+* **Orquestração de armazenamento**
+O Kubernetes permite que você monte automaticamente um sistema de armazenamento de sua escolha, como armazenamentos locais, provedores de nuvem pública e muito mais.
+* **Lançamentos e reversões automatizadas**
+Você pode descrever o estado desejado para seus contêineres implantados usando o Kubernetes, e ele pode alterar o estado real para o estado desejado em um ritmo controlada. Por exemplo, você pode automatizar o Kubernetes para criar novos contêineres para sua implantação, remover os contêineres existentes e adotar todos os seus recursos para o novo contêiner.
+* **Empacotamento binário automático**
+Você fornece ao Kubernetes um cluster de nós que pode ser usado para executar tarefas nos contêineres. Você informa ao Kubernetes de quanta CPU e memória (RAM) cada contêiner precisa. O Kubernetes pode encaixar contêineres em seus nós para fazer o melhor uso de seus recursos.
+* **Autocorreção**
+O Kubernetes reinicia os contêineres que falham, substitui os contêineres, elimina os contêineres que não respondem à verificação de integridade definida pelo usuário e não os anuncia aos clientes até que estejam prontos para servir.
+* **Gerenciamento de configuração e de segredos**
+O Kubernetes permite armazenar e gerenciar informações confidenciais, como senhas, tokens OAuth e chaves SSH. Você pode implantar e atualizar segredos e configuração de aplicações sem reconstruir suas imagens de contêiner e sem expor segredos em sua pilha de configuração.
+
+## O que o Kubernetes não é
+
+O Kubernetes não é um sistema PaaS (plataforma como serviço) tradicional e completo. Como o Kubernetes opera no nível do contêiner, e não no nível do hardware, ele fornece alguns recursos geralmente aplicáveis comuns às ofertas de PaaS, como implantação, escalonamento, balanceamento de carga, e permite que os usuários integrem suas soluções de _logging_, monitoramento e alerta. No entanto, o Kubernetes não é monolítico, e essas soluções padrão são opcionais e conectáveis. O Kubernetes fornece os blocos de construção para a construção de plataformas de desenvolvimento, mas preserva a escolha e flexibilidade do usuário onde é importante.
+
+Kubernetes:
+
+* Não limita os tipos de aplicações suportadas. O Kubernetes visa oferecer suporte a uma variedade extremamente diversa de cargas de trabalho, incluindo cargas de trabalho sem estado, com estado e de processamento de dados. Se uma aplicação puder ser executada em um contêiner, ele deve ser executado perfeitamente no Kubernetes.
+* Não implanta código-fonte e não constrói sua aplicação. Os fluxos de trabalho de integração contínua, entrega e implantação (CI/CD) são determinados pelas culturas e preferências da organização, bem como pelos requisitos técnicos.
+* Não fornece serviços em nível de aplicação, tais como middleware (por exemplo, barramentos de mensagem), estruturas de processamento de dados (por exemplo, Spark), bancos de dados (por exemplo, MySQL), caches, nem sistemas de armazenamento em cluster (por exemplo, Ceph), como serviços integrados. Esses componentes podem ser executados no Kubernetes e/ou podem ser acessados por aplicações executadas no Kubernetes por meio de mecanismos portáteis, como o [Open Service Broker](https://openservicebrokerapi.org/).
+* Não dita soluções de _logging_, monitoramento ou alerta. Ele fornece algumas integrações como prova de conceito e mecanismos para coletar e exportar métricas.
+* Não fornece nem exige um sistema/idioma de configuração (por exemplo, Jsonnet). Ele fornece uma API declarativa que pode ser direcionada por formas arbitrárias de especificações declarativas.
+* Não fornece nem adota sistemas abrangentes de configuração de máquinas, manutenção, gerenciamento ou autocorreção.
+* Adicionalmente, o Kubernetes não é um mero sistema de orquestração. Na verdade, ele elimina a necessidade de orquestração. A definição técnica de orquestração é a execução de um fluxo de trabalho definido: primeiro faça A, depois B e depois C. Em contraste, o Kubernetes compreende um conjunto de processos de controle independentes e combináveis que conduzem continuamente o estado atual em direção ao estado desejado fornecido. Não importa como você vai de A para C. O controle centralizado também não é necessário. Isso resulta em um sistema que é mais fácil de usar e mais poderoso, robusto, resiliente e extensível.
+
+
+## {{% heading "whatsnext" %}}
+
+*   Dê uma olhada em [Componentes do Kubernetes](/docs/concepts/overview/components/).
+*   Pronto para [Iniciar](/docs/setup/)?
diff --git a/content/pt/docs/reference/glossary/cloud-controller-manager.md b/content/pt/docs/reference/glossary/cloud-controller-manager.md
new file mode 100644
index 0000000000..622d3f842e
--- /dev/null
+++ b/content/pt/docs/reference/glossary/cloud-controller-manager.md
@@ -0,0 +1,21 @@
+---
+title: Gerenciador de controle de nuvem
+id: cloud-controller-manager
+date: 2018-04-12
+full_link: /docs/concepts/architecture/cloud-controller/
+short_description: >
+  Componente da camada de gerenciamento que integra Kubernetes com provedores de nuvem de terceiros.
+aka:
+tags:
+- core-object
+- architecture
+- operation
+---
+
+ Um componente da {{< glossary_tooltip text="camada de gerenciamento" term_id="control-plane" >}} do Kubernetes
+ que incorpora a lógica de controle específica da nuvem. O gerenciador de controle de nuvem permite que você vincule seu
+ _cluster_ na API do seu provedor de nuvem, e separar os componentes que interagem com essa plataforma de nuvem a partir de componentes que apenas interagem com seu cluster.
+
+<!--more-->
+
+Desassociando a lógica de interoperabilidade entre o Kubernetes e a infraestrutura de nuvem subjacente, o componente gerenciador de controle de nuvem permite que os provedores de nuvem desenvolvam e disponibilizem recursos em um ritmo diferente em comparação com o projeto principal do Kubernetes.
diff --git a/content/pt/docs/reference/glossary/cncf.md b/content/pt/docs/reference/glossary/cncf.md
new file mode 100644
index 0000000000..f9ad249547
--- /dev/null
+++ b/content/pt/docs/reference/glossary/cncf.md
@@ -0,0 +1,20 @@
+---
+title: Cloud Native Computing Foundation (CNCF)
+id: cncf
+date: 2019-05-26
+full_link: https://cncf.io/
+short_description: >
+  Cloud Native Computing Foundation
+
+aka:
+tags:
+- community
+---
+ A **Cloud Native Computing Foundation (CNCF)** constrói um ecossistema sustentável e promove uma comunidade no entorno dos [projetos](https://www.cncf.io/projects/) que orquestram contêineres como parte de uma arquitetura de microserviços.
+
+**Kubernetes** é um projeto CNCF.
+
+<!--more-->
+
+A **CNCF** é uma sub-fundação da [Linux Foundation](https://www.linuxfoundation.org/).
+Sua missão é tornar a computação nativa em nuvem onipresente.
diff --git a/content/pt/docs/reference/glossary/container-runtime.md b/content/pt/docs/reference/glossary/container-runtime.md
new file mode 100644
index 0000000000..8c1cb808ef
--- /dev/null
+++ b/content/pt/docs/reference/glossary/container-runtime.md
@@ -0,0 +1,18 @@
+---
+title: Agente de execução de contêiner
+id: container-runtime
+date: 2019-06-05
+full_link: /docs/setup/production-environment/container-runtimes
+short_description: >
+  O agente de execução de contêiner é o software responsável por executar os contêineres.
+
+aka:
+tags:
+- fundamental
+- workload
+---
+ O agente de execução (_runtime_) de contêiner é o software responsável por executar os contêineres.
+
+<!--more-->
+
+O Kubernetes suporta diversos agentes de execução de contêineres: {{< glossary_tooltip term_id="docker">}}, {{< glossary_tooltip term_id="containerd" >}}, {{< glossary_tooltip term_id="cri-o" >}}, e qualquer implementação do [Kubernetes CRI (Container Runtime Interface)](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-node/container-runtime-interface.md).
diff --git a/content/pt/docs/reference/glossary/control-plane.md b/content/pt/docs/reference/glossary/control-plane.md
index 0465d5a2b8..c65759b83b 100644
--- a/content/pt/docs/reference/glossary/control-plane.md
+++ b/content/pt/docs/reference/glossary/control-plane.md
@@ -1,13 +1,13 @@
 ---
-title: Ambiente de gerenciamento
+title: Camada de gerenciamento
 id: control-plane
 date: 2020-04-19
 full_link:
 short_description: >
-  A camada de orquestração de contêiner que expõe a API e as interfaces para definir, implantar e gerenciar o ciclo de vida dos contêineres.
+  A camada de gerenciamento de contêiner que expõe a API e as interfaces para definir, implantar e gerenciar o ciclo de vida dos contêineres.
 
 aka:
 tags:
 - fundamental
 ---
- A camada de orquestração de contêiner que expõe a API e as interfaces para definir, implantar e gerenciar o ciclo de vida dos contêineres.
+ A camada de gerenciamento de contêiner que expõe a API e as interfaces para definir, implantar e gerenciar o ciclo de vida dos contêineres.
diff --git a/content/pt/docs/reference/glossary/etcd.md b/content/pt/docs/reference/glossary/etcd.md
new file mode 100644
index 0000000000..0761a53865
--- /dev/null
+++ b/content/pt/docs/reference/glossary/etcd.md
@@ -0,0 +1,19 @@
+---
+title: etcd
+id: etcd
+date: 2018-04-12
+full_link: /docs/tasks/administer-cluster/configure-upgrade-etcd/
+short_description: >
+  Armazenamento do tipo Chave-Valor consistente e em alta-disponibilidade usado como repositório de apoio do Kubernetes para todos os dados do cluster.
+aka:
+tags:
+- architecture
+- storage
+---
+ Armazenamento do tipo Chave-Valor consistente e em alta-disponibilidade usado como repositório de apoio do Kubernetes para todos os dados do cluster.
+
+<!--more-->
+
+Se o seu cluster Kubernetes usa **etcd** como seu armazenamento de apoio, certifique-se de ter um plano de [back up](/docs/tasks/administer-cluster/configure-upgrade-etcd/#backing-up-an-etcd-cluster) para seus dados.
+
+Você pode encontrar informações detalhadas sobre o etcd na seção oficial da [documentação](https://etcd.io/docs/).
diff --git a/content/pt/docs/reference/glossary/kube-apiserver.md b/content/pt/docs/reference/glossary/kube-apiserver.md
new file mode 100644
index 0000000000..f5ce3dba1a
--- /dev/null
+++ b/content/pt/docs/reference/glossary/kube-apiserver.md
@@ -0,0 +1,22 @@
+---
+title: API server
+id: kube-apiserver
+date: 2018-04-12
+full_link: /docs/concepts/overview/components/#kube-apiserver
+short_description: >
+  O componente da camada de gerenciamento que serve a API do Kubernetes.
+
+aka:
+- kube-apiserver
+tags:
+- architecture
+- fundamental
+---
+ O servidor de API é um componente da {{< glossary_tooltip text="Camada de gerenciamento" term_id="control-plane" >}} do Kubernetes que expõe a API do Kubernetes.
+O servidor de API é o _front end_ para a camada de gerenciamento do Kubernetes.
+
+<!--more-->
+
+A principal implementação de um servidor de API do Kubernetes é [kube-apiserver](/docs/reference/generated/kube-apiserver/).
+O kube-apiserver foi projetado para ser escalonado horizontalmente &mdash; ou seja, ele pode ser escalado com a implantação de mais instâncias.
+Você pode executar várias instâncias do kube-apiserver e balancear (balanceamento de carga, etc) o tráfego entre essas instâncias.
diff --git a/content/pt/docs/reference/glossary/kube-controller-manager.md b/content/pt/docs/reference/glossary/kube-controller-manager.md
new file mode 100644
index 0000000000..0a52ec27ea
--- /dev/null
+++ b/content/pt/docs/reference/glossary/kube-controller-manager.md
@@ -0,0 +1,18 @@
+---
+title: kube-controller-manager
+id: kube-controller-manager
+date: 2018-04-12
+full_link: /docs/reference/command-line-tools-reference/kube-controller-manager/
+short_description: >
+  Componente da camada de gerenciamento que executa os processos de controle.
+
+aka:
+tags:
+- architecture
+- fundamental
+---
+ Componente da camada de gerenciamento que executa os processos de {{< glossary_tooltip text="controlador" term_id="controller" >}}.
+
+<!--more-->
+
+Logicamente, cada _{{< glossary_tooltip text="controlador" term_id="controller" >}}_ está em um processo separado, mas para reduzir a complexidade, eles todos são compilados num único binário e executam em um processo único.
diff --git a/content/pt/docs/reference/glossary/kube-proxy.md b/content/pt/docs/reference/glossary/kube-proxy.md
new file mode 100644
index 0000000000..1f9a075bd6
--- /dev/null
+++ b/content/pt/docs/reference/glossary/kube-proxy.md
@@ -0,0 +1,22 @@
+---
+title: kube-proxy
+id: kube-proxy
+date: 2018-04-12
+full_link: /docs/reference/command-line-tools-reference/kube-proxy/
+short_description: >
+  `kube-proxy` é um _proxy_ de rede executado em cada nó do _cluster_.
+
+aka:
+tags:
+- fundamental
+- networking
+---
+ kube-proxy é um _proxy_ de rede executado em cada {{< glossary_tooltip text="nó" term_id="node" >}} no seu _cluster_,
+implementando parte do conceito de {{< glossary_tooltip  text="serviço" term_id="service">}} do Kubernetes.
+
+<!--more-->
+
+[kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/)
+mantém regras de rede nos nós. Estas regras de rede permitem a comunicação de rede com seus _pods_ a partir de sessões de rede dentro ou fora de seu _cluster_.
+
+kube-proxy usa a camada de filtragem de pacotes do sistema operacional se houver uma e estiver disponível. Caso contrário, o kube-proxy encaminha o tráfego ele mesmo.
diff --git a/content/pt/docs/reference/glossary/kube-scheduler.md b/content/pt/docs/reference/glossary/kube-scheduler.md
new file mode 100644
index 0000000000..1030d27853
--- /dev/null
+++ b/content/pt/docs/reference/glossary/kube-scheduler.md
@@ -0,0 +1,17 @@
+---
+title: kube-scheduler
+id: kube-scheduler
+date: 2018-04-12
+full_link: /docs/reference/generated/kube-scheduler/
+short_description: >
+  Componente da camada de gerenciamento que observa os _pods_ recém-criados sem nenhum nó atribuído, e seleciona um nó para executá-los.
+aka:
+tags:
+- architecture
+---
+Componente da camada de gerenciamento que observa os _{{< glossary_tooltip term_id="pod" text="pods" >}}_ recém-criados sem nenhum {{< glossary_tooltip term_id="node" text="nó">}} atribuído, e seleciona um nó para executá-los.
+
+<!--more-->
+
+Os fatores levados em consideração para as decisões de agendamento incluem:
+requisitos de recursos individuais e coletivos, hardware/software/política de restrições, especificações de afinidade e antiafinidade, localidade de dados, interferência entre cargas de trabalho, e prazos.

From 54daf2e5586496edc599174b091c9e2027226415 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 9 Mar 2021 20:17:42 -0500
Subject: [PATCH 153/788] test blog page

---
 .../index.md                                   | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
index 62bebb89b5..b40c827448 100644
--- a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
+++ b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
@@ -15,6 +15,7 @@ The initial idea behind the Kubernetes Dashboard project was to provide a web in
 
 The very [first commit](https://github.com/kubernetes/dashboard/commit/5861187fa807ac1cc2d9b2ac786afeced065076c) to the Kubernetes Dashboard was made by Filip Grządkowski from Google on 16th October 2015 – just a few months from the initial commit to the Kubernetes repository. Our initial commits go back to November 2015 ([Sebastian committed on 16 November 2015](https://github.com/kubernetes/dashboard/commit/09e65b6bb08c49b926253de3621a73da05e400fd); [Marcin committed on 23 November 2015](https://github.com/kubernetes/dashboard/commit/1da4b1c25ef040818072c734f71333f9b4733f55)). Since that time, we’ve become regular contributors to the project. For the next two years, we worked closely with the Googlers, eventually becoming main project maintainers ourselves.
 
+<!--
 {{< imgproc first-ui Fit "1000x900" >}}
 The First Version of the User Interface
 {{< /imgproc >}}
@@ -26,6 +27,7 @@ Prototype of the New User Interface
 {{< imgproc current-ui Fit "1000x700" >}}
 The Current User Interface
 {{< /imgproc >}}
+-->
 
 As you can see, the initial look and feel of the project were completely different from the current one. We have changed the design multiple times. The same has happened with the code itself.
 
@@ -55,14 +57,14 @@ The Kubernetes Dashboard has been growing and prospering for more than 5 years n
 
 ## The Kubernetes Dashboard in Numbers
 
-*   Initial commit made on October 16, 2015
-*   Over 100 million pulls from Dockerhub since the v2 release
-*   8 supported languages and the next 2 in progress
-*   Over 3360 closed PRs
-*   Over 2260 closed issues
-*   100% coverage of the supported core Kubernetes resources
-*   Over 9000 stars on GitHub
-*   Over 237 000 lines of code
+* Initial commit made on October 16, 2015
+* Over 100 million pulls from Dockerhub since the v2 release
+* 8 supported languages and the next 2 in progress
+* Over 3360 closed PRs
+* Over 2260 closed issues
+* 100% coverage of the supported core Kubernetes resources
+* Over 9000 stars on GitHub
+* Over 237 000 lines of code
 
 ## Join Us
 

From 4c75e0cb8bcc8e41832c41ce445d3d9fd267d3f0 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 9 Mar 2021 20:27:09 -0500
Subject: [PATCH 154/788] remove imageProc

---
 .../index.md                                        | 13 -------------
 1 file changed, 13 deletions(-)

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
index b40c827448..ffa029a73f 100644
--- a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
+++ b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
@@ -15,19 +15,6 @@ The initial idea behind the Kubernetes Dashboard project was to provide a web in
 
 The very [first commit](https://github.com/kubernetes/dashboard/commit/5861187fa807ac1cc2d9b2ac786afeced065076c) to the Kubernetes Dashboard was made by Filip Grządkowski from Google on 16th October 2015 – just a few months from the initial commit to the Kubernetes repository. Our initial commits go back to November 2015 ([Sebastian committed on 16 November 2015](https://github.com/kubernetes/dashboard/commit/09e65b6bb08c49b926253de3621a73da05e400fd); [Marcin committed on 23 November 2015](https://github.com/kubernetes/dashboard/commit/1da4b1c25ef040818072c734f71333f9b4733f55)). Since that time, we’ve become regular contributors to the project. For the next two years, we worked closely with the Googlers, eventually becoming main project maintainers ourselves.
 
-<!--
-{{< imgproc first-ui Fit "1000x900" >}}
-The First Version of the User Interface
-{{< /imgproc >}}
-
-{{< imgproc along-the-way-ui Fit "1000x900" >}}
-Prototype of the New User Interface
-{{< /imgproc >}}
-
-{{< imgproc current-ui Fit "1000x700" >}}
-The Current User Interface
-{{< /imgproc >}}
--->
 
 As you can see, the initial look and feel of the project were completely different from the current one. We have changed the design multiple times. The same has happened with the code itself.
 

From fa183e46a68c7cc48c0adbb319698d7aad216465 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 10 Mar 2021 10:26:20 +0800
Subject: [PATCH 155/788] Update data type presentation in component reference

Instead of putting "stringSlice" or "mapStringString" as data type for
flag data type, we can show more user friendly data type description
that is not GoLang specific.
---
 .../kube-apiserver.md                         | 385 +++++++++---------
 .../kube-controller-manager.md                | 331 +++++++--------
 .../kube-proxy.md                             | 111 ++---
 .../kube-scheduler.md                         | 185 +++++----
 4 files changed, 532 insertions(+), 480 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
index 6e87bff44c..edf25ad835 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
@@ -2,8 +2,21 @@
 title: kube-apiserver
 content_type: tool-reference
 weight: 30
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
 ## {{% heading "synopsis" %}}
 
 
@@ -29,1099 +42,1099 @@ kube-apiserver [flags]
 <td colspan="2">--add-dir-header</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, adds the file directory to the header of the log messages</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--admission-control-config-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File with admission control configuration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File with admission control configuration.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--advertise-address ip</td>
+<td colspan="2">--advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--allow-privileged</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, allow privileged containers. [default=false]</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, allow privileged containers. [default=false]</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--alsologtostderr</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error as well as files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error as well as files</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--anonymous-auth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--api-audiences stringSlice</td>
+<td colspan="2">--api-audiences strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Identifiers of the API. The service account token authenticator will validate that tokens used against the API are bound to at least one of these audiences. If the --service-account-issuer flag is configured and this flag is not, this field defaults to a single element list containing the issuer URL.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Identifiers of the API. The service account token authenticator will validate that tokens used against the API are bound to at least one of these audiences. If the --service-account-issuer flag is configured and this flag is not, this field defaults to a single element list containing the issuer URL.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-count int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of apiservers running in the cluster, must be a positive number. (In use when --endpoint-reconciler-type=master-count is enabled.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of apiservers running in the cluster, must be a positive number. (In use when --endpoint-reconciler-type=master-count is enabled.)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-batch-buffer-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10000</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The size of the buffer to store events before batching and writing. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The size of the buffer to store events before batching and writing. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-batch-max-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum size of a batch. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum size of a batch. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-batch-max-wait duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-batch-throttle-burst int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-batch-throttle-enable</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether batching throttling is enabled. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether batching throttling is enabled. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--audit-log-batch-throttle-qps float32</td>
+<td colspan="2">--audit-log-batch-throttle-qps float</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum average number of batches per second. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum average number of batches per second. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-compress</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, the rotated log files will be compressed using gzip.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, the rotated log files will be compressed using gzip.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "json"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Format of saved audits. "legacy" indicates 1-line text format for each event. "json" indicates structured json format. Known formats are legacy,json.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Format of saved audits. &quot;legacy&quot; indicates 1-line text format for each event. &quot;json&quot; indicates structured json format. Known formats are legacy,json.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-maxage int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-maxbackup int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum number of old audit log files to retain.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum number of old audit log files to retain.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-maxsize int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum size in megabytes of the audit log file before it gets rotated.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum size in megabytes of the audit log file before it gets rotated.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-mode string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "blocking"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and write events asynchronously. Known modes are batch,blocking,blocking-strict.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and write events asynchronously. Known modes are batch,blocking,blocking-strict.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-path string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, all requests coming to the apiserver will be logged to this file.  '-' means standard out.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, all requests coming to the apiserver will be logged to this file.  '-' means standard out.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-truncate-enabled</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether event and batch truncating is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether event and batch truncating is enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-truncate-max-batch-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10485760</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch exceeds this limit, it is split into several batches of smaller size.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch exceeds this limit, it is split into several batches of smaller size.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-truncate-max-event-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 102400</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and response are removed, and if this doesn't reduce the size enough, event is discarded.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and response are removed, and if this doesn't reduce the size enough, event is discarded.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-log-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "audit.k8s.io/v1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">API group and version used for serializing audit events written to log.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>API group and version used for serializing audit events written to log.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-policy-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file that defines the audit policy configuration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the file that defines the audit policy configuration.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-batch-buffer-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10000</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The size of the buffer to store events before batching and writing. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The size of the buffer to store events before batching and writing. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-batch-max-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 400</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum size of a batch. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum size of a batch. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-batch-max-wait duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-batch-throttle-burst int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 15</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-batch-throttle-enable&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether batching throttling is enabled. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether batching throttling is enabled. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--audit-webhook-batch-throttle-qps float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
+<td colspan="2">--audit-webhook-batch-throttle-qps float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum average number of batches per second. Only used in batch mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum average number of batches per second. Only used in batch mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-config-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeconfig formatted file that defines the audit webhook configuration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeconfig formatted file that defines the audit webhook configuration.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-initial-backoff duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The amount of time to wait before retrying the first failed request.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The amount of time to wait before retrying the first failed request.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-mode string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "batch"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and write events asynchronously. Known modes are batch,blocking,blocking-strict.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and write events asynchronously. Known modes are batch,blocking,blocking-strict.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-truncate-enabled</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether event and batch truncating is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether event and batch truncating is enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-truncate-max-batch-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10485760</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch exceeds this limit, it is split into several batches of smaller size.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch exceeds this limit, it is split into several batches of smaller size.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-truncate-max-event-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 102400</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and response are removed, and if this doesn't reduce the size enough, event is discarded.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and response are removed, and if this doesn't reduce the size enough, event is discarded.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--audit-webhook-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "audit.k8s.io/v1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">API group and version used for serializing audit events written to webhook.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>API group and version used for serializing audit events written to webhook.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-token-webhook-cache-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache responses from the webhook token authenticator.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache responses from the webhook token authenticator.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-token-webhook-config-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File with webhook configuration for token authentication in kubeconfig format. The API server will query the remote service to determine authentication for bearer tokens.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File with webhook configuration for token authentication in kubeconfig format. The API server will query the remote service to determine authentication for bearer tokens.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-token-webhook-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "v1beta1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The API version of the authentication.k8s.io TokenReview to send to and expect from the webhook.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The API version of the authentication.k8s.io TokenReview to send to and expect from the webhook.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--authorization-mode stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [AlwaysAllow]</td>
+<td colspan="2">--authorization-mode strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "AlwaysAllow"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Ordered list of plug-ins to do authorization on secure port. Comma-delimited list of: AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Ordered list of plug-ins to do authorization on secure port. Comma-delimited list of: AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-policy-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File with authorization policy in json line by line format, used with --authorization-mode=ABAC, on the secure port.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File with authorization policy in json line by line format, used with --authorization-mode=ABAC, on the secure port.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-cache-authorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'authorized' responses from the webhook authorizer.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache 'authorized' responses from the webhook authorizer.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-cache-unauthorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'unauthorized' responses from the webhook authorizer.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache 'unauthorized' responses from the webhook authorizer.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-config-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File with webhook configuration in kubeconfig format, used with --authorization-mode=Webhook. The API server will query the remote service to determine access on the API server's secure port.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File with webhook configuration in kubeconfig format, used with --authorization-mode=Webhook. The API server will query the remote service to determine access on the API server's secure port.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "v1beta1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The API version of the authorization.k8s.io SubjectAccessReview to send to and expect from the webhook.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The API version of the authorization.k8s.io SubjectAccessReview to send to and expect from the webhook.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--azure-container-registry-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file containing Azure container registry configuration information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the file containing Azure container registry configuration information.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--bind-address ip&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
+<td colspan="2">--bind-address string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank or an unspecified address (0.0.0.0 or ::), all interfaces will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank or an unspecified address (0.0.0.0 or ::), all interfaces will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/var/run/kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--client-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cloud-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the cloud provider configuration file. Empty string for no configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the cloud provider configuration file. Empty string for no configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cloud-provider string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The provider for cloud services. Empty string for no provider.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The provider for cloud services. Empty string for no provider.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cloud-provider-gce-l7lb-src-cidrs cidrs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 130.211.0.0/22,35.191.0.0/16</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">CIDRs opened in GCE firewall for L7 LB traffic proxy & health checks</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>CIDRs opened in GCE firewall for L7 LB traffic proxy &amp; health checks</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--contention-profiling</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable lock contention profiling, if profiling is enabled</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable lock contention profiling, if profiling is enabled</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--cors-allowed-origins stringSlice</td>
+<td colspan="2">--cors-allowed-origins strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of allowed origins for CORS, comma separated.  An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of allowed origins for CORS, comma separated.  An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--default-not-ready-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 300</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--default-unreachable-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 300</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--default-watch-cache-size int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 100</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Default watch cache size. If zero, watch cache will be disabled for resources that do not have a default watch size set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Default watch cache size. If zero, watch cache will be disabled for resources that do not have a default watch size set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--delete-collection-workers int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of workers spawned for DeleteCollection call. These are used to speed up namespace cleanup.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Number of workers spawned for DeleteCollection call. These are used to speed up namespace cleanup.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--disable-admission-plugins stringSlice</td>
+<td colspan="2">--disable-admission-plugins strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">admission plugins that should be disabled although they are in the default enabled plugins list (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>admission plugins that should be disabled although they are in the default enabled plugins list (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--egress-selector-config-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File with apiserver egress selector configuration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File with apiserver egress selector configuration.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--enable-admission-plugins stringSlice</td>
+<td colspan="2">--enable-admission-plugins strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-aggregator-routing</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Turns on aggregator routing requests to endpoints IP rather than cluster IP.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Turns on aggregator routing requests to endpoints IP rather than cluster IP.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-bootstrap-token-auth</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable to allow secrets of type 'bootstrap.kubernetes.io/token' in the 'kube-system' namespace to be used for TLS bootstrapping authentication.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable to allow secrets of type 'bootstrap.kubernetes.io/token' in the 'kube-system' namespace to be used for TLS bootstrapping authentication.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-garbage-collector&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-controller-manager.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-controller-manager.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-priority-and-fairness&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true and the APIPriorityAndFairness feature gate is enabled, replace the max-in-flight handler with an enhanced one that queues and dispatches with priority and fairness</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true and the APIPriorityAndFairness feature gate is enabled, replace the max-in-flight handler with an enhanced one that queues and dispatches with priority and fairness</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--encryption-provider-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The file containing configuration for encryption providers to be used for storing secrets in etcd</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The file containing configuration for encryption providers to be used for storing secrets in etcd</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--endpoint-reconciler-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "lease"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use an endpoint reconciler (master-count, lease, none)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use an endpoint reconciler (master-count, lease, none)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-cafile string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">SSL Certificate Authority file used to secure etcd communication.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>SSL Certificate Authority file used to secure etcd communication.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-certfile string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">SSL certification file used to secure etcd communication.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>SSL certification file used to secure etcd communication.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-compaction-interval duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The interval of compaction requests. If 0, the compaction request from apiserver is disabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The interval of compaction requests. If 0, the compaction request from apiserver is disabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-count-metric-poll-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Frequency of polling etcd for number of resources per type. 0 disables the metric collection.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Frequency of polling etcd for number of resources per type. 0 disables the metric collection.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-db-metric-poll-interval duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The interval of requests to poll etcd and update metric. 0 disables the metric collection</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The interval of requests to poll etcd and update metric. 0 disables the metric collection</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-healthcheck-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The timeout to use when checking etcd health.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The timeout to use when checking etcd health.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-keyfile string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">SSL key file used to secure etcd communication.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>SSL key file used to secure etcd communication.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-prefix string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/registry"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The prefix to prepend to all resource paths in etcd.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The prefix to prepend to all resource paths in etcd.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--etcd-servers stringSlice</td>
+<td colspan="2">--etcd-servers strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of etcd servers to connect with (scheme://ip:port), comma separated.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of etcd servers to connect with (scheme://ip:port), comma separated.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--etcd-servers-overrides stringSlice</td>
+<td colspan="2">--etcd-servers-overrides strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are URLs, semicolon separated.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are URLs, semicolon separated.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--event-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Amount of time to retain events.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Amount of time to retain events.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-logging-sanitization</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).<br/>Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).<br/>Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--external-hostname string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The hostname to use when generating externalized URLs for this master (e.g. Swagger API Docs or OpenID Discovery).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The hostname to use when generating externalized URLs for this master (e.g. Swagger API Docs or OpenID Discovery).</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--feature-gates mapStringBool</td>
+<td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--goaway-chance float</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">To prevent HTTP/2 clients from getting stuck on a single apiserver, randomly close a connection (GOAWAY). The client's other in-flight requests won't be affected, and the client will reconnect, likely landing on a different apiserver after going through the load balancer again. This argument sets the fraction of requests that will be sent a GOAWAY. Clusters with single apiservers, or which don't use a load balancer, should NOT enable this. Min is 0 (off), Max is .02 (1/50 requests); .001 (1/1000) is a recommended starting point.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>To prevent HTTP/2 clients from getting stuck on a single apiserver, randomly close a connection (GOAWAY). The client's other in-flight requests won't be affected, and the client will reconnect, likely landing on a different apiserver after going through the load balancer again. This argument sets the fraction of requests that will be sent a GOAWAY. Clusters with single apiservers, or which don't use a load balancer, should NOT enable this. Min is 0 (off), Max is .02 (1/50 requests); .001 (1/1000) is a recommended starting point.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kube-apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kube-apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--http2-max-streams-per-connection int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang's default.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang's default.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--identity-lease-duration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 3600</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration of kube-apiserver lease in seconds, must be a positive number. (In use when the APIServerIdentity feature gate is enabled.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration of kube-apiserver lease in seconds, must be a positive number. (In use when the APIServerIdentity feature gate is enabled.)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--identity-lease-renew-interval-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The interval of kube-apiserver renewing its lease in seconds, must be a positive number. (In use when the APIServerIdentity feature gate is enabled.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The interval of kube-apiserver renewing its lease in seconds, must be a positive number. (In use when the APIServerIdentity feature gate is enabled.)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubelet-certificate-authority string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a cert file for the certificate authority.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a cert file for the certificate authority.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubelet-client-certificate string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a client cert file for TLS.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a client cert file for TLS.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubelet-client-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a client key file for TLS.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a client key file for TLS.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--kubelet-preferred-address-types stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [Hostname,InternalDNS,InternalIP,ExternalDNS,ExternalIP]</td>
+<td colspan="2">--kubelet-preferred-address-types strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "Hostname,InternalDNS,InternalIP,ExternalDNS,ExternalIP"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of the preferred NodeAddressTypes to use for kubelet connections.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of the preferred NodeAddressTypes to use for kubelet connections.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubelet-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Timeout for kubelet operations.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Timeout for kubelet operations.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-service-node-port int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the port. If zero, the Kubernetes master service will be of type ClusterIP.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the port. If zero, the Kubernetes master service will be of type ClusterIP.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--livez-grace-period duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">This option represents the maximum amount of time it should take for apiserver to complete its startup sequence and become live. From apiserver's start time to when this amount of time has elapsed, /livez will assume that unfinished post-start hooks will complete successfully and therefore return true.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>This option represents the maximum amount of time it should take for apiserver to complete its startup sequence and become live. From apiserver's start time to when this amount of time has elapsed, /livez will assume that unfinished post-start hooks will complete successfully and therefore return true.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--log-backtrace-at traceLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">when logging hits line file:N, emit a stack trace</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, write log files in this directory</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, use this log file</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of seconds between log flushes</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Sets the log format. Permitted formats: "json", "text".<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--logtostderr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error instead of files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error instead of files</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--master-service-namespace string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "default"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: the namespace from which the Kubernetes master services should be injected into pods.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the namespace from which the Kubernetes master services should be injected into pods.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--max-connection-bytes-per-sec int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-zero, throttle each user connection to this number of bytes/sec. Currently only applies to long-running requests.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-zero, throttle each user connection to this number of bytes/sec. Currently only applies to long-running requests.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--max-mutating-requests-inflight int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 200</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum number of mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum number of mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--max-requests-inflight int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 400</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum number of non-mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum number of non-mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--min-request-timeout int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">An optional field indicating the minimum number of seconds a handler must keep a request open before timing it out. Currently only honored by the watch request handler, which picks a randomized value above this number as the connection timeout, to spread out load.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>An optional field indicating the minimum number of seconds a handler must keep a request open before timing it out. Currently only honored by the watch request handler, which picks a randomized value above this number as the connection timeout, to spread out load.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oidc-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, the OpenID server's certificate will be verified by one of the authorities in the oidc-ca-file, otherwise the host's root CA set will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, the OpenID server's certificate will be verified by one of the authorities in the oidc-ca-file, otherwise the host's root CA set will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oidc-client-id string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The client ID for the OpenID Connect client, must be set if oidc-issuer-url is set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The client ID for the OpenID Connect client, must be set if oidc-issuer-url is set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oidc-groups-claim string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of strings. This flag is experimental, please see the authentication documentation for further details.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of strings. This flag is experimental, please see the authentication documentation for further details.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oidc-groups-prefix string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If provided, all groups will be prefixed with this value to prevent conflicts with other authentication strategies.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If provided, all groups will be prefixed with this value to prevent conflicts with other authentication strategies.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oidc-issuer-url string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--oidc-required-claim mapStringString</td>
+<td colspan="2">--oidc-required-claim &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A key=value pair that describes a required claim in the ID Token. If set, the claim is verified to be present in the ID Token with a matching value. Repeat this flag to specify multiple claims.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A key=value pair that describes a required claim in the ID Token. If set, the claim is verified to be present in the ID Token with a matching value. Repeat this flag to specify multiple claims.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--oidc-signing-algs stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [RS256]</td>
+<td colspan="2">--oidc-signing-algs strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "RS256"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of allowed JOSE asymmetric signing algorithms. JWTs with a 'alg' header value not in this list will be rejected. Values are defined by RFC 7518 https://tools.ietf.org/html/rfc7518#section-3.1.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Comma-separated list of allowed JOSE asymmetric signing algorithms. JWTs with a 'alg' header value not in this list will be rejected. Values are defined by RFC 7518 https://tools.ietf.org/html/rfc7518#section-3.1.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oidc-username-claim string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "sub"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The OpenID claim to use as the user name. Note that claims other than the default ('sub') is not guaranteed to be unique and immutable. This flag is experimental, please see the authentication documentation for further details.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The OpenID claim to use as the user name. Note that claims other than the default ('sub') is not guaranteed to be unique and immutable. This flag is experimental, please see the authentication documentation for further details.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oidc-username-prefix string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If provided, all usernames will be prefixed with this value. If not provided, username claims other than 'email' are prefixed by the issuer URL to avoid clashes. To skip any prefixing, provide the value '-'.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If provided, all usernames will be prefixed with this value. If not provided, username claims other than 'email' are prefixed by the issuer URL to avoid clashes. To skip any prefixing, provide the value '-'.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--one-output</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, only write logs to their native severity level (vs also writing to each lower severity level</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--permit-port-sharing</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, SO_REUSEPORT will be used when binding the port, which allows more than one instance to bind on the same address and port. [default=false]</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, SO_REUSEPORT will be used when binding the port, which allows more than one instance to bind on the same address and port. [default=false]</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--profiling&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable profiling via web interface host:port/debug/pprof/</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable profiling via web interface host:port/debug/pprof/</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--proxy-client-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a request. This includes proxying requests to a user api-server and calling out to webhook admission plugins. It is expected that this cert includes a signature from the CA in the --requestheader-client-ca-file flag. That CA is published in the 'extension-apiserver-authentication' configmap in the kube-system namespace. Components receiving calls from kube-aggregator should use that CA to perform their half of the mutual TLS verification.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a request. This includes proxying requests to a user api-server and calling out to webhook admission plugins. It is expected that this cert includes a signature from the CA in the --requestheader-client-ca-file flag. That CA is published in the 'extension-apiserver-authentication' configmap in the kube-system namespace. Components receiving calls from kube-aggregator should use that CA to perform their half of the mutual TLS verification.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--proxy-client-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Private key for the client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a request. This includes proxying requests to a user api-server and calling out to webhook admission plugins.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Private key for the client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a request. This includes proxying requests to a user api-server and calling out to webhook admission plugins.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--request-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">An optional field indicating the duration a handler must keep a request open before timing it out. This is the default request timeout for requests but may be overridden by flags such as --min-request-timeout for specific types of requests.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>An optional field indicating the duration a handler must keep a request open before timing it out. This is the default request timeout for requests but may be overridden by flags such as --min-request-timeout for specific types of requests.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-allowed-names stringSlice</td>
+<td colspan="2">--requestheader-allowed-names strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--requestheader-client-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-extra-headers-prefix stringSlice</td>
+<td colspan="2">--requestheader-extra-headers-prefix strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request header prefixes to inspect. X-Remote-Extra- is suggested.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request header prefixes to inspect. X-Remote-Extra- is suggested.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-group-headers stringSlice</td>
+<td colspan="2">--requestheader-group-headers strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request headers to inspect for groups. X-Remote-Group is suggested.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request headers to inspect for groups. X-Remote-Group is suggested.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-username-headers stringSlice</td>
+<td colspan="2">--requestheader-username-headers strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request headers to inspect for usernames. X-Remote-User is common.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request headers to inspect for usernames. X-Remote-User is common.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--runtime-config mapStringString</td>
+<td colspan="2">--runtime-config &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that enable or disable built-in APIs. Supported options are:<br/>v1=true|false for the core API group<br/>&lt;group&gt;/&lt;version&gt;=true|false for a specific API group and version (e.g. apps/v1=true)<br/>api/all=true|false controls all API versions<br/>api/ga=true|false controls all API versions of the form v[0-9]+<br/>api/beta=true|false controls all API versions of the form v[0-9]+beta[0-9]+<br/>api/alpha=true|false controls all API versions of the form v[0-9]+alpha[0-9]+<br/>api/legacy is deprecated, and will be removed in a future version</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that enable or disable built-in APIs. Supported options are:<br/>v1=true|false for the core API group<br/><!-- raw HTML omitted -->/<!-- raw HTML omitted -->=true|false for a specific API group and version (e.g. apps/v1=true)<br/>api/all=true|false controls all API versions<br/>api/ga=true|false controls all API versions of the form v[0-9]+<br/>api/beta=true|false controls all API versions of the form v[0-9]+beta[0-9]+<br/>api/alpha=true|false controls all API versions of the form v[0-9]+alpha[0-9]+<br/>api/legacy is deprecated, and will be removed in a future version</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--secure-port int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The port on which to serve HTTPS with authentication and authorization. It cannot be switched off with 0.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The port on which to serve HTTPS with authentication and authorization. It cannot be switched off with 0.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-account-extend-token-expiration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Turns on projected service account expiration extension during token generation, which helps safe transition from legacy token to bound service account token feature. If this flag is enabled, admission injected tokens would be extended up to 1 year to prevent unexpected failure during transition, ignoring value of service-account-max-token-expiration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Turns on projected service account expiration extension during token generation, which helps safe transition from legacy token to bound service account token feature. If this flag is enabled, admission injected tokens would be extended up to 1 year to prevent unexpected failure during transition, ignoring value of service-account-max-token-expiration.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-account-issuer string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Identifier of the service account token issuer. The issuer will assert this identifier in "iss" claim of issued tokens. This value is a string or URI. If this option is not a valid URI per the OpenID Discovery 1.0 spec, the ServiceAccountIssuerDiscovery feature will remain disabled, even if the feature gate is set to true. It is highly recommended that this value comply with the OpenID spec: https://openid.net/specs/openid-connect-discovery-1_0.html. In practice, this means that service-account-issuer must be an https URL. It is also highly recommended that this URL be capable of serving OpenID discovery documents at {service-account-issuer}/.well-known/openid-configuration.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Identifier of the service account token issuer. The issuer will assert this identifier in &quot;iss&quot; claim of issued tokens. This value is a string or URI. If this option is not a valid URI per the OpenID Discovery 1.0 spec, the ServiceAccountIssuerDiscovery feature will remain disabled, even if the feature gate is set to true. It is highly recommended that this value comply with the OpenID spec: https://openid.net/specs/openid-connect-discovery-1_0.html. In practice, this means that service-account-issuer must be an https URL. It is also highly recommended that this URL be capable of serving OpenID discovery documents at {service-account-issuer}/.well-known/openid-configuration.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-account-jwks-uri string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Overrides the URI for the JSON Web Key Set in the discovery doc served at /.well-known/openid-configuration. This flag is useful if the discovery docand key set are served to relying parties from a URL other than the API server's external (as auto-detected or overridden with external-hostname). Only valid if the ServiceAccountIssuerDiscovery feature gate is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Overrides the URI for the JSON Web Key Set in the discovery doc served at /.well-known/openid-configuration. This flag is useful if the discovery docand key set are served to relying parties from a URL other than the API server's external (as auto-detected or overridden with external-hostname). Only valid if the ServiceAccountIssuerDiscovery feature gate is enabled.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--service-account-key-file stringArray</td>
+<td colspan="2">--service-account-key-file strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing PEM-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens. The specified file can contain multiple keys, and the flag can be specified multiple times with different files. If unspecified, --tls-private-key-file is used. Must be specified when --service-account-signing-key is provided</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File containing PEM-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens. The specified file can contain multiple keys, and the flag can be specified multiple times with different files. If unspecified, --tls-private-key-file is used. Must be specified when --service-account-signing-key is provided</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-account-lookup&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, validate ServiceAccount tokens exist in etcd as part of authentication.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, validate ServiceAccount tokens exist in etcd as part of authentication.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-account-max-token-expiration duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum validity duration of a token created by the service account token issuer. If an otherwise valid TokenRequest with a validity duration larger than this value is requested, a token will be issued with a validity duration of this value.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum validity duration of a token created by the service account token issuer. If an otherwise valid TokenRequest with a validity duration larger than this value is requested, a token will be issued with a validity duration of this value.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-account-signing-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file that contains the current private key of the service account token issuer. The issuer will sign issued ID tokens with this private key.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the file that contains the current private key of the service account token issuer. The issuer will sign issued ID tokens with this private key.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cluster-ip-range string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes or pods.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes or pods.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--service-node-port-range portRange&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30000-32767</td>
+<td colspan="2">--service-node-port-range &lt;a string in the form 'N1-N2'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30000-32767</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A port range to reserve for services with NodePort visibility. Example: '30000-32767'. Inclusive at both ends of the range.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A port range to reserve for services with NodePort visibility. Example: '30000-32767'. Inclusive at both ends of the range.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--show-hidden-metrics-for-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is &lt;major&gt;.&lt;minor&gt;, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is <!-- raw HTML omitted -->.<!-- raw HTML omitted -->, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--shutdown-delay-duration duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Time to delay the termination. During that time the server keeps serving requests normally. The endpoints /healthz and /livez will return success, but /readyz immediately returns failure. Graceful termination starts after this delay has elapsed. This can be used to allow load balancer to stop sending traffic to this server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Time to delay the termination. During that time the server keeps serving requests normally. The endpoints /healthz and /livez will return success, but /readyz immediately returns failure. Graceful termination starts after this delay has elapsed. This can be used to allow load balancer to stop sending traffic to this server.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid header prefixes in the log messages</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-log-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid headers when opening log files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--stderrthreshold severity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
+<td colspan="2">--stderrthreshold int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">logs at or above this threshold go to stderr</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>logs at or above this threshold go to stderr</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--storage-backend string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The storage backend for persistence. Options: 'etcd3' (default).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The storage backend for persistence. Options: 'etcd3' (default).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--storage-media-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "application/vnd.kubernetes.protobuf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The media type to use to store objects in storage. Some resources or storage backends may only support a specific media type and will ignore this setting.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The media type to use to store objects in storage. Some resources or storage backends may only support a specific media type and will ignore this setting.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--tls-cipher-suites stringSlice</td>
+<td colspan="2">--tls-cipher-suites strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used. <br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384. <br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.<br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384.<br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-min-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-private-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing the default x509 private key matching --tls-cert-file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File containing the default x509 private key matching --tls-cert-file.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--tls-sni-cert-key namedCertKey&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: []</td>
+<td colspan="2">--tls-sni-cert-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. The domain patterns also allow IP addresses, but IPs should only be used if the apiserver has visibility to the IP address requested by a client. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: "example.crt,example.key" or "foo.crt,foo.key:*.foo.com,foo.com".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. The domain patterns also allow IP addresses, but IPs should only be used if the apiserver has visibility to the IP address requested by a client. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: &quot;example.crt,example.key&quot; or &quot;foo.crt,foo.key:*.foo.com,foo.com&quot;.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token-auth-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, the file that will be used to secure the secure port of the API server via token authentication.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, the file that will be used to secure the secure port of the API server via token authentication.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">-v, --v Level</td>
+<td colspan="2">-v, --v int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">number for the log level verbosity</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>number for the log level verbosity</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--version version[=true]</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Print version information and quit</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Print version information and quit</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--vmodule moduleSpec</td>
+<td colspan="2">--vmodule &lt;comma-separated 'pattern=N' settings&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">comma-separated list of pattern=N settings for file-filtered logging</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>comma-separated list of pattern=N settings for file-filtered logging</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--watch-cache&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable watch caching in the apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable watch caching in the apiserver</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--watch-cache-sizes stringSlice</td>
+<td colspan="2">--watch-cache-sizes strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Watch cache size settings for some resources (pods, nodes, etc.), comma separated. The individual setting format: resource[.group]#size, where resource is lowercase plural (no version), group is omitted for resources of apiVersion v1 (the legacy core API) and included for others, and size is a number. It takes effect when watch-cache is enabled. Some resources (replicationcontrollers, endpoints, nodes, pods, services, apiservices.apiregistration.k8s.io) have system defaults set by heuristics, others default to default-watch-cache-size</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Watch cache size settings for some resources (pods, nodes, etc.), comma separated. The individual setting format: resource[.group]#size, where resource is lowercase plural (no version), group is omitted for resources of apiVersion v1 (the legacy core API) and included for others, and size is a number. It takes effect when watch-cache is enabled. Some resources (replicationcontrollers, endpoints, nodes, pods, services, apiservices.apiregistration.k8s.io) have system defaults set by heuristics, others default to default-watch-cache-size</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md b/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
index 79af1bc81a..a7ad248e94 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
@@ -2,8 +2,21 @@
 title: kube-controller-manager
 content_type: tool-reference
 weight: 30
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
 ## {{% heading "synopsis" %}}
 
 
@@ -33,980 +46,980 @@ kube-controller-manager [flags]
 <td colspan="2">--add-dir-header</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, adds the file directory to the header of the log messages</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--allocate-node-cidrs</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Should CIDRs for Pods be allocated and set on the cloud provider.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Should CIDRs for Pods be allocated and set on the cloud provider.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--alsologtostderr</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error as well as files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error as well as files</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--attach-detach-reconcile-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The reconciler sync wait time between volume attach detach. This duration must be larger than one second, and increasing this value from the default may allow for volumes to be mismatched with pods.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The reconciler sync wait time between volume attach detach. This duration must be larger than one second, and increasing this value from the default may allow for volumes to be mismatched with pods.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">kubeconfig file pointing at the 'core' kubernetes server with enough rights to create tokenreviews.authentication.k8s.io. This is optional. If empty, all token requests are considered to be anonymous and no client CA is looked up in the cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>kubeconfig file pointing at the 'core' kubernetes server with enough rights to create tokenreviews.authentication.k8s.io. This is optional. If empty, all token requests are considered to be anonymous and no client CA is looked up in the cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-skip-lookup</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If false, the authentication-kubeconfig will be used to lookup missing authentication configuration from the cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If false, the authentication-kubeconfig will be used to lookup missing authentication configuration from the cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-token-webhook-cache-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache responses from the webhook token authenticator.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache responses from the webhook token authenticator.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-tolerate-lookup-failure</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, failures to look up missing authentication configuration from the cluster are not considered fatal. Note that this can result in authentication that treats all requests as anonymous.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, failures to look up missing authentication configuration from the cluster are not considered fatal. Note that this can result in authentication that treats all requests as anonymous.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--authorization-always-allow-paths stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [/healthz]</td>
+<td colspan="2">--authorization-always-allow-paths strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/healthz"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of HTTP paths to skip during authorization, i.e. these are authorized without contacting the 'core' kubernetes server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of HTTP paths to skip during authorization, i.e. these are authorized without contacting the 'core' kubernetes server.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">kubeconfig file pointing at the 'core' kubernetes server with enough rights to create subjectaccessreviews.authorization.k8s.io. This is optional. If empty, all requests not skipped by authorization are forbidden.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>kubeconfig file pointing at the 'core' kubernetes server with enough rights to create subjectaccessreviews.authorization.k8s.io. This is optional. If empty, all requests not skipped by authorization are forbidden.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-cache-authorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'authorized' responses from the webhook authorizer.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache 'authorized' responses from the webhook authorizer.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-cache-unauthorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'unauthorized' responses from the webhook authorizer.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache 'unauthorized' responses from the webhook authorizer.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--azure-container-registry-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file containing Azure container registry configuration information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the file containing Azure container registry configuration information.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--bind-address ip&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
+<td colspan="2">--bind-address string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank or an unspecified address (0.0.0.0 or ::), all interfaces will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank or an unspecified address (0.0.0.0 or ::), all interfaces will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cidr-allocator-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "RangeAllocator"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Type of CIDR allocator to use</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Type of CIDR allocator to use</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--client-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cloud-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the cloud provider configuration file. Empty string for no configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the cloud provider configuration file. Empty string for no configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cloud-provider string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The provider for cloud services. Empty string for no provider.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The provider for cloud services. Empty string for no provider.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">CIDR Range for Pods in cluster. Requires --allocate-node-cidrs to be true</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>CIDR Range for Pods in cluster. Requires --allocate-node-cidrs to be true</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-name string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The instance prefix for the cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The instance prefix for the cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded X509 CA certificate used to issue cluster-scoped certificates.  If specified, no more specific --cluster-signing-* flag may be specified.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded X509 CA certificate used to issue cluster-scoped certificates.  If specified, no more specific --cluster-signing-* flag may be specified.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-duration duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 8760h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The length of duration signed certificates will be given.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The length of duration signed certificates will be given.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded RSA or ECDSA private key used to sign cluster-scoped certificates.  If specified, no more specific --cluster-signing-* flag may be specified.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded RSA or ECDSA private key used to sign cluster-scoped certificates.  If specified, no more specific --cluster-signing-* flag may be specified.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-kube-apiserver-client-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/kube-apiserver-client signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/kube-apiserver-client signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-kube-apiserver-client-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/kube-apiserver-client signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/kube-apiserver-client signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-kubelet-client-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/kube-apiserver-client-kubelet signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/kube-apiserver-client-kubelet signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-kubelet-client-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/kube-apiserver-client-kubelet signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/kube-apiserver-client-kubelet signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-kubelet-serving-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/kubelet-serving signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/kubelet-serving signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-kubelet-serving-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/kubelet-serving signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/kubelet-serving signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-legacy-unknown-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/legacy-unknown signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded X509 CA certificate used to issue certificates for the kubernetes.io/legacy-unknown signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-signing-legacy-unknown-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/legacy-unknown signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded RSA or ECDSA private key used to sign certificates for the kubernetes.io/legacy-unknown signer.  If specified, --cluster-signing-{cert,key}-file must not be set.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-deployment-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of deployment objects that are allowed to sync concurrently. Larger number = more responsive deployments, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of deployment objects that are allowed to sync concurrently. Larger number = more responsive deployments, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-endpoint-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of endpoint syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of endpoint syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-gc-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 20</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of garbage collector workers that are allowed to sync concurrently.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of garbage collector workers that are allowed to sync concurrently.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-namespace-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of namespace objects that are allowed to sync concurrently. Larger number = more responsive namespace termination, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of namespace objects that are allowed to sync concurrently. Larger number = more responsive namespace termination, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-replicaset-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of replica sets that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of replica sets that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-resource-quota-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of resource quotas that are allowed to sync concurrently. Larger number = more responsive quota management, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of resource quotas that are allowed to sync concurrently. Larger number = more responsive quota management, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-service-endpoint-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of service endpoint syncing operations that will be done concurrently. Larger number = faster endpoint slice updating, but more CPU (and network) load. Defaults to 5.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of service endpoint syncing operations that will be done concurrently. Larger number = faster endpoint slice updating, but more CPU (and network) load. Defaults to 5.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-service-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-serviceaccount-token-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of service account token objects that are allowed to sync concurrently. Larger number = more responsive token generation, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of service account token objects that are allowed to sync concurrently. Larger number = more responsive token generation, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-statefulset-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of statefulset objects that are allowed to sync concurrently. Larger number = more responsive statefulsets, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of statefulset objects that are allowed to sync concurrently. Larger number = more responsive statefulsets, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent-ttl-after-finished-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of TTL-after-finished controller workers that are allowed to sync concurrently.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of TTL-after-finished controller workers that are allowed to sync concurrently.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--concurrent_rc_syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--configure-cloud-routes&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Should CIDRs allocated by allocate-node-cidrs be configured on the cloud provider.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Should CIDRs allocated by allocate-node-cidrs be configured on the cloud provider.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--contention-profiling</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable lock contention profiling, if profiling is enabled</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable lock contention profiling, if profiling is enabled</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--controller-start-interval duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Interval between starting controller managers.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Interval between starting controller managers.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--controllers stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [*]</td>
+<td colspan="2">--controllers strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "*"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller named 'foo', '-foo' disables the controller named 'foo'.<br/>All controllers: attachdetach, bootstrapsigner, cloud-node-lifecycle, clusterrole-aggregation, cronjob, csrapproving, csrcleaner, csrsigning, daemonset, deployment, disruption, endpoint, endpointslice, endpointslicemirroring, ephemeral-volume, garbagecollector, horizontalpodautoscaling, job, namespace, nodeipam, nodelifecycle, persistentvolume-binder, persistentvolume-expander, podgc, pv-protection, pvc-protection, replicaset, replicationcontroller, resourcequota, root-ca-cert-publisher, route, service, serviceaccount, serviceaccount-token, statefulset, tokencleaner, ttl, ttl-after-finished<br/>Disabled-by-default controllers: bootstrapsigner, tokencleaner</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller named 'foo', '-foo' disables the controller named 'foo'.<br/>All controllers: attachdetach, bootstrapsigner, cloud-node-lifecycle, clusterrole-aggregation, cronjob, csrapproving, csrcleaner, csrsigning, daemonset, deployment, disruption, endpoint, endpointslice, endpointslicemirroring, ephemeral-volume, garbagecollector, horizontalpodautoscaling, job, namespace, nodeipam, nodelifecycle, persistentvolume-binder, persistentvolume-expander, podgc, pv-protection, pvc-protection, replicaset, replicationcontroller, resourcequota, root-ca-cert-publisher, route, service, serviceaccount, serviceaccount-token, statefulset, tokencleaner, ttl, ttl-after-finished<br/>Disabled-by-default controllers: bootstrapsigner, tokencleaner</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--deployment-controller-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Period for syncing the deployments.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Period for syncing the deployments.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--disable-attach-detach-reconcile-sync</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Disable volume attach detach reconciler sync. Disabling this may cause volumes to be mismatched with pods. Use wisely.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Disable volume attach detach reconciler sync. Disabling this may cause volumes to be mismatched with pods. Use wisely.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-dynamic-provisioning&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable dynamic provisioning for environments that support it.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable dynamic provisioning for environments that support it.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-garbage-collector&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-apiserver.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-apiserver.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-hostpath-provisioner</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable HostPath PV provisioning when running without a cloud provider. This allows testing and development of provisioning features.  HostPath provisioning is not supported in any way, won't work in a multi-node cluster, and should not be used for anything other than testing or development.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable HostPath PV provisioning when running without a cloud provider. This allows testing and development of provisioning features.  HostPath provisioning is not supported in any way, won't work in a multi-node cluster, and should not be used for anything other than testing or development.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-taint-manager&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">WARNING: Beta feature. If set to true enables NoExecute Taints and will evict all not-tolerating Pod running on Nodes tainted with this kind of Taints.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>WARNING: Beta feature. If set to true enables NoExecute Taints and will evict all not-tolerating Pod running on Nodes tainted with this kind of Taints.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--endpoint-updates-batch-period duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The length of endpoint updates batching period. Processing of pod changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of endpoints updates. Larger number = higher endpoint programming latency, but lower number of endpoints revision generated</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The length of endpoint updates batching period. Processing of pod changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of endpoints updates. Larger number = higher endpoint programming latency, but lower number of endpoints revision generated</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--endpointslice-updates-batch-period duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The length of endpoint slice updates batching period. Processing of pod changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of endpoints updates. Larger number = higher endpoint programming latency, but lower number of endpoints revision generated</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The length of endpoint slice updates batching period. Processing of pod changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of endpoints updates. Larger number = higher endpoint programming latency, but lower number of endpoints revision generated</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-logging-sanitization</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).<br/>Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).<br/>Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--external-cloud-volume-plugin string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The plugin to use when cloud provider is set to external. Can be empty, should only be set when cloud-provider is external. Currently used to allow node and volume controllers to work for in tree cloud providers.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The plugin to use when cloud provider is set to external. Can be empty, should only be set when cloud-provider is external. Currently used to allow node and volume controllers to work for in tree cloud providers.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--feature-gates mapStringBool</td>
+<td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--flex-volume-plugin-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Full path of the directory in which the flex volume plugin should search for additional third party volume plugins.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Full path of the directory in which the flex volume plugin should search for additional third party volume plugins.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kube-controller-manager</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kube-controller-manager</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--horizontal-pod-autoscaler-cpu-initialization-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period after pod start when CPU samples might be skipped.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period after pod start when CPU samples might be skipped.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--horizontal-pod-autoscaler-downscale-stabilization duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period for which autoscaler will look backwards and not scale down below any recommendation it made during that period.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period for which autoscaler will look backwards and not scale down below any recommendation it made during that period.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--horizontal-pod-autoscaler-initial-readiness-delay duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period after pod start during which readiness changes will be treated as initial readiness.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period after pod start during which readiness changes will be treated as initial readiness.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--horizontal-pod-autoscaler-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 15s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period for syncing the number of pods in horizontal pod autoscaler.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period for syncing the number of pods in horizontal pod autoscaler.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--horizontal-pod-autoscaler-tolerance float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The minimum change (from 1.0) in the desired-to-actual metrics ratio for the horizontal pod autoscaler to consider scaling.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The minimum change (from 1.0) in the desired-to-actual metrics ratio for the horizontal pod autoscaler to consider scaling.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--http2-max-streams-per-connection int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang's default.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang's default.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Burst to use while talking with kubernetes apiserver.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Burst to use while talking with kubernetes apiserver.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-content-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "application/vnd.kubernetes.protobuf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Content type of requests sent to apiserver.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Content type of requests sent to apiserver.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--kube-api-qps float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 20</td>
+<td colspan="2">--kube-api-qps float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 20</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">QPS to use while talking with kubernetes apiserver.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>QPS to use while talking with kubernetes apiserver.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeconfig file with authorization and master location information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeconfig file with authorization and master location information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--large-cluster-size-threshold int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 50</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of nodes from which NodeController treats the cluster as large for the eviction logic purposes. --secondary-node-eviction-rate is implicitly overridden to 0 for clusters this size or smaller.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Number of nodes from which NodeController treats the cluster as large for the eviction logic purposes. --secondary-node-eviction-rate is implicitly overridden to 0 for clusters this size or smaller.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-lease-duration duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 15s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-renew-deadline duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-resource-lock string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "leases"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The type of resource object that is used for locking during leader election. Supported options are 'endpoints', 'configmaps', 'leases', 'endpointsleases' and 'configmapsleases'.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The type of resource object that is used for locking during leader election. Supported options are 'endpoints', 'configmaps', 'leases', 'endpointsleases' and 'configmapsleases'.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-resource-name string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-controller-manager"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The name of resource object that is used for locking during leader election.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The name of resource object that is used for locking during leader election.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-resource-namespace string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-system"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The namespace of resource object that is used for locking during leader election.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The namespace of resource object that is used for locking during leader election.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-retry-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--log-backtrace-at traceLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">when logging hits line file:N, emit a stack trace</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, write log files in this directory</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, use this log file</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of seconds between log flushes</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Sets the log format. Permitted formats: "json", "text".<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--logtostderr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error instead of files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error instead of files</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--master string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The address of the Kubernetes API server (overrides any value in kubeconfig).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The address of the Kubernetes API server (overrides any value in kubeconfig).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--max-endpoints-per-slice int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 100</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum number of endpoints that will be added to an EndpointSlice. More endpoints per slice will result in less endpoint slices, but larger resources. Defaults to 100.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum number of endpoints that will be added to an EndpointSlice. More endpoints per slice will result in less endpoint slices, but larger resources. Defaults to 100.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--min-resync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 12h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The resync period in reflectors will be random between MinResyncPeriod and 2*MinResyncPeriod.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The resync period in reflectors will be random between MinResyncPeriod and 2*MinResyncPeriod.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--mirroring-concurrent-service-endpoint-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The number of service endpoint syncing operations that will be done concurrently by the EndpointSliceMirroring controller. Larger number = faster endpoint slice updating, but more CPU (and network) load. Defaults to 5.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of service endpoint syncing operations that will be done concurrently by the EndpointSliceMirroring controller. Larger number = faster endpoint slice updating, but more CPU (and network) load. Defaults to 5.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--mirroring-endpointslice-updates-batch-period duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The length of EndpointSlice updates batching period for EndpointSliceMirroring controller. Processing of EndpointSlice changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of EndpointSlice updates. Larger number = higher endpoint programming latency, but lower number of endpoints revision generated</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The length of EndpointSlice updates batching period for EndpointSliceMirroring controller. Processing of EndpointSlice changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of EndpointSlice updates. Larger number = higher endpoint programming latency, but lower number of endpoints revision generated</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--mirroring-max-endpoints-per-subset int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1000</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum number of endpoints that will be added to an EndpointSlice by the EndpointSliceMirroring controller. More endpoints per slice will result in less endpoint slices, but larger resources. Defaults to 100.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum number of endpoints that will be added to an EndpointSlice by the EndpointSliceMirroring controller. More endpoints per slice will result in less endpoint slices, but larger resources. Defaults to 100.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--namespace-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period for syncing namespace life-cycle updates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period for syncing namespace life-cycle updates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-cidr-mask-size int32</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Mask size for node cidr in cluster. Default is 24 for IPv4 and 64 for IPv6.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Mask size for node cidr in cluster. Default is 24 for IPv4 and 64 for IPv6.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-cidr-mask-size-ipv4 int32</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Mask size for IPv4 node cidr in dual-stack cluster. Default is 24.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Mask size for IPv4 node cidr in dual-stack cluster. Default is 24.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-cidr-mask-size-ipv6 int32</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Mask size for IPv6 node cidr in dual-stack cluster. Default is 64.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Mask size for IPv6 node cidr in dual-stack cluster. Default is 64.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--node-eviction-rate float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.1</td>
+<td colspan="2">--node-eviction-rate float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of nodes per second on which pods are deleted in case of node failure when a zone is healthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Number of nodes per second on which pods are deleted in case of node failure when a zone is healthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-monitor-grace-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 40s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Amount of time which we allow running Node to be unresponsive before marking it unhealthy. Must be N times more than kubelet's nodeStatusUpdateFrequency, where N means number of retries allowed for kubelet to post node status.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Amount of time which we allow running Node to be unresponsive before marking it unhealthy. Must be N times more than kubelet's nodeStatusUpdateFrequency, where N means number of retries allowed for kubelet to post node status.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-monitor-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period for syncing NodeStatus in NodeController.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period for syncing NodeStatus in NodeController.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-startup-grace-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Amount of time which we allow starting Node to be unresponsive before marking it unhealthy.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Amount of time which we allow starting Node to be unresponsive before marking it unhealthy.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--one-output</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, only write logs to their native severity level (vs also writing to each lower severity level</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--permit-port-sharing</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, SO_REUSEPORT will be used when binding the port, which allows more than one instance to bind on the same address and port. [default=false]</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, SO_REUSEPORT will be used when binding the port, which allows more than one instance to bind on the same address and port. [default=false]</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-eviction-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The grace period for deleting pods on failed nodes.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The grace period for deleting pods on failed nodes.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--profiling&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable profiling via web interface host:port/debug/pprof/</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable profiling via web interface host:port/debug/pprof/</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pv-recycler-increment-timeout-nfs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">the increment of time added per Gi to ActiveDeadlineSeconds for an NFS scrubber pod</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>the increment of time added per Gi to ActiveDeadlineSeconds for an NFS scrubber pod</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pv-recycler-minimum-timeout-hostpath int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 60</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The minimum ActiveDeadlineSeconds to use for a HostPath Recycler pod.  This is for development and testing only and will not work in a multi-node cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The minimum ActiveDeadlineSeconds to use for a HostPath Recycler pod.  This is for development and testing only and will not work in a multi-node cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pv-recycler-minimum-timeout-nfs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 300</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The minimum ActiveDeadlineSeconds to use for an NFS Recycler pod</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The minimum ActiveDeadlineSeconds to use for an NFS Recycler pod</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pv-recycler-pod-template-filepath-hostpath string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The file path to a pod definition used as a template for HostPath persistent volume recycling. This is for development and testing only and will not work in a multi-node cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The file path to a pod definition used as a template for HostPath persistent volume recycling. This is for development and testing only and will not work in a multi-node cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pv-recycler-pod-template-filepath-nfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The file path to a pod definition used as a template for NFS persistent volume recycling</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The file path to a pod definition used as a template for NFS persistent volume recycling</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pv-recycler-timeout-increment-hostpath int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">the increment of time added per Gi to ActiveDeadlineSeconds for a HostPath scrubber pod.  This is for development and testing only and will not work in a multi-node cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>the increment of time added per Gi to ActiveDeadlineSeconds for a HostPath scrubber pod.  This is for development and testing only and will not work in a multi-node cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pvclaimbinder-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 15s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period for syncing persistent volumes and persistent volume claims</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period for syncing persistent volumes and persistent volume claims</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-allowed-names stringSlice</td>
+<td colspan="2">--requestheader-allowed-names strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--requestheader-client-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-extra-headers-prefix stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [x-remote-extra-]</td>
+<td colspan="2">--requestheader-extra-headers-prefix strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "x-remote-extra-"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request header prefixes to inspect. X-Remote-Extra- is suggested.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request header prefixes to inspect. X-Remote-Extra- is suggested.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-group-headers stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [x-remote-group]</td>
+<td colspan="2">--requestheader-group-headers strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "x-remote-group"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request headers to inspect for groups. X-Remote-Group is suggested.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request headers to inspect for groups. X-Remote-Group is suggested.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-username-headers stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [x-remote-user]</td>
+<td colspan="2">--requestheader-username-headers strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "x-remote-user"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request headers to inspect for usernames. X-Remote-User is common.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request headers to inspect for usernames. X-Remote-User is common.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--resource-quota-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period for syncing quota usage status in the system</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period for syncing quota usage status in the system</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--root-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, this root certificate authority will be included in service account's token secret. This must be a valid PEM-encoded CA bundle.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, this root certificate authority will be included in service account's token secret. This must be a valid PEM-encoded CA bundle.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--route-reconciliation-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The period for reconciling routes created for Nodes by cloud provider.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The period for reconciling routes created for Nodes by cloud provider.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--secondary-node-eviction-rate float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.01</td>
+<td colspan="2">--secondary-node-eviction-rate float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.01</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of nodes per second on which pods are deleted in case of node failure when a zone is unhealthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. This value is implicitly overridden to 0 if the cluster size is smaller than --large-cluster-size-threshold.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Number of nodes per second on which pods are deleted in case of node failure when a zone is unhealthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. This value is implicitly overridden to 0 if the cluster size is smaller than --large-cluster-size-threshold.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--secure-port int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10257</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-account-private-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Filename containing a PEM-encoded private RSA or ECDSA key used to sign service account tokens.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Filename containing a PEM-encoded private RSA or ECDSA key used to sign service account tokens.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cluster-ip-range string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">CIDR Range for Services in cluster. Requires --allocate-node-cidrs to be true</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>CIDR Range for Services in cluster. Requires --allocate-node-cidrs to be true</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--show-hidden-metrics-for-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is &lt;major&gt;.&lt;minor&gt;, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is <!-- raw HTML omitted -->.<!-- raw HTML omitted -->, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid header prefixes in the log messages</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-log-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid headers when opening log files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--stderrthreshold severity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
+<td colspan="2">--stderrthreshold int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">logs at or above this threshold go to stderr</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>logs at or above this threshold go to stderr</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--terminated-pod-gc-threshold int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 12500</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of terminated pods that can exist before the terminated pod garbage collector starts deleting terminated pods. If &lt;= 0, the terminated pod garbage collector is disabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Number of terminated pods that can exist before the terminated pod garbage collector starts deleting terminated pods. If &lt;= 0, the terminated pod garbage collector is disabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--tls-cipher-suites stringSlice</td>
+<td colspan="2">--tls-cipher-suites strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used. <br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384. <br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.<br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384.<br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-min-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-private-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing the default x509 private key matching --tls-cert-file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File containing the default x509 private key matching --tls-cert-file.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--tls-sni-cert-key namedCertKey&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: []</td>
+<td colspan="2">--tls-sni-cert-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. The domain patterns also allow IP addresses, but IPs should only be used if the apiserver has visibility to the IP address requested by a client. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: "example.crt,example.key" or "foo.crt,foo.key:*.foo.com,foo.com".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. The domain patterns also allow IP addresses, but IPs should only be used if the apiserver has visibility to the IP address requested by a client. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: &quot;example.crt,example.key&quot; or &quot;foo.crt,foo.key:*.foo.com,foo.com&quot;.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--unhealthy-zone-threshold float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.55</td>
+<td colspan="2">--unhealthy-zone-threshold float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.55</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Fraction of Nodes in a zone which needs to be not Ready (minimum 3) for zone to be treated as unhealthy. </td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Fraction of Nodes in a zone which needs to be not Ready (minimum 3) for zone to be treated as unhealthy.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--use-service-account-credentials</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, use individual service account credentials for each controller.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, use individual service account credentials for each controller.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">-v, --v Level</td>
+<td colspan="2">-v, --v int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">number for the log level verbosity</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>number for the log level verbosity</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--version version[=true]</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Print version information and quit</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Print version information and quit</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--vmodule moduleSpec</td>
+<td colspan="2">--vmodule &lt;comma-separated 'pattern=N' settings&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">comma-separated list of pattern=N settings for file-filtered logging</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>comma-separated list of pattern=N settings for file-filtered logging</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--volume-host-allow-local-loopback&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If false, deny local loopback IPs in addition to any CIDR ranges in --volume-host-cidr-denylist</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If false, deny local loopback IPs in addition to any CIDR ranges in --volume-host-cidr-denylist</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--volume-host-cidr-denylist stringSlice</td>
+<td colspan="2">--volume-host-cidr-denylist strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A comma-separated list of CIDR ranges to avoid from volume plugins.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A comma-separated list of CIDR ranges to avoid from volume plugins.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-proxy.md b/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
index a13368ed01..ad9d8b022d 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
@@ -2,8 +2,21 @@
 title: kube-proxy
 content_type: tool-reference
 weight: 30
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
 ## {{% heading "synopsis" %}}
 
 
@@ -32,308 +45,308 @@ kube-proxy [flags]
 <td colspan="2">--azure-container-registry-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file containing Azure container registry configuration information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the file containing Azure container registry configuration information.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--bind-address ip&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
+<td colspan="2">--bind-address string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address for the proxy server to serve on (set to '0.0.0.0' for all IPv4 interfaces and '::' for all IPv6 interfaces)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address for the proxy server to serve on (set to '0.0.0.0' for all IPv4 interfaces and '::' for all IPv6 interfaces)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--bind-address-hard-fail</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true kube-proxy will treat failure to bind to a port as fatal and exit</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true kube-proxy will treat failure to bind to a port as fatal and exit</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cleanup</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true cleanup iptables and ipvs rules and exit.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true cleanup iptables and ipvs rules and exit.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The CIDR range of pods in the cluster. When configured, traffic sent to a Service cluster IP from outside this range will be masqueraded and traffic sent from pods to an external LoadBalancer IP will be directed to the respective cluster IP instead</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The CIDR range of pods in the cluster. When configured, traffic sent to a Service cluster IP from outside this range will be masqueraded and traffic sent from pods to an external LoadBalancer IP will be directed to the respective cluster IP instead</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 15m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">How often configuration from the apiserver is refreshed.  Must be greater than 0.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>How often configuration from the apiserver is refreshed.  Must be greater than 0.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-max-per-core int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 32768</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-min int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 131072</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-tcp-timeout-close-wait duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">NAT timeout for TCP connections in the CLOSE_WAIT state</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>NAT timeout for TCP connections in the CLOSE_WAIT state</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-tcp-timeout-established duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 24h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Idle timeout for established TCP connections (0 to leave as-is)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Idle timeout for established TCP connections (0 to leave as-is)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--detect-local-mode LocalMode</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Mode to use to detect local traffic</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Mode to use to detect local traffic</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--feature-gates mapStringBool</td>
+<td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--healthz-bind-address ipport&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0:10256</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address with port for the health check server to serve on (set to '0.0.0.0:10256' for all IPv4 interfaces and '[::]:10256' for all IPv6 interfaces). Set empty to disable.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address with port for the health check server to serve on (set to '0.0.0.0:10256' for all IPv4 interfaces and '[::]:10256' for all IPv6 interfaces). Set empty to disable.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kube-proxy</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kube-proxy</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--hostname-override string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, will use this string as identification instead of the actual hostname.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, will use this string as identification instead of the actual hostname.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--iptables-masquerade-bit int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 14</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with.  Must be within the range [0, 31].</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with.  Must be within the range [0, 31].</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--iptables-min-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--iptables-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m').  Must be greater than 0.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m').  Must be greater than 0.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ipvs-exclude-cidrs stringSlice</td>
+<td colspan="2">--ipvs-exclude-cidrs strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A comma-separated list of CIDR's which the ipvs proxier should not touch when cleaning up IPVS rules.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A comma-separated list of CIDR's which the ipvs proxier should not touch when cleaning up IPVS rules.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-min-sync-period duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The minimum interval of how often the ipvs rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The minimum interval of how often the ipvs rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-scheduler string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The ipvs scheduler type when proxy mode is ipvs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The ipvs scheduler type when proxy mode is ipvs</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-strict-arp</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable strict ARP by setting arp_ignore to 1 and arp_announce to 2</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable strict ARP by setting arp_ignore to 1 and arp_announce to 2</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum interval of how often ipvs rules are refreshed (e.g. '5s', '1m', '2h22m').  Must be greater than 0.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The maximum interval of how often ipvs rules are refreshed (e.g. '5s', '1m', '2h22m').  Must be greater than 0.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-tcp-timeout duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The timeout for idle IPVS TCP connections, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The timeout for idle IPVS TCP connections, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-tcpfin-timeout duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The timeout for IPVS TCP connections after receiving a FIN packet, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The timeout for IPVS TCP connections after receiving a FIN packet, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-udp-timeout duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The timeout for IPVS UDP packets, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The timeout for IPVS UDP packets, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Burst to use while talking with kubernetes apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Burst to use while talking with kubernetes apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-content-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "application/vnd.kubernetes.protobuf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Content type of requests sent to apiserver.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Content type of requests sent to apiserver.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--kube-api-qps float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
+<td colspan="2">--kube-api-qps float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">QPS to use while talking with kubernetes apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>QPS to use while talking with kubernetes apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeconfig file with authorization information (the master location can be overridden by the master flag).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeconfig file with authorization information (the master location can be overridden by the master flag).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of seconds between log flushes</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--masquerade-all</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If using the pure iptables proxy, SNAT all traffic sent via Service cluster IPs (this not commonly needed)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If using the pure iptables proxy, SNAT all traffic sent via Service cluster IPs (this not commonly needed)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--master string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The address of the Kubernetes API server (overrides any value in kubeconfig)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The address of the Kubernetes API server (overrides any value in kubeconfig)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--metrics-bind-address ipport&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 127.0.0.1:10249</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address with port for the metrics server to serve on (set to '0.0.0.0:10249' for all IPv4 interfaces and '[::]:10249' for all IPv6 interfaces). Set empty to disable.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address with port for the metrics server to serve on (set to '0.0.0.0:10249' for all IPv4 interfaces and '[::]:10249' for all IPv6 interfaces). Set empty to disable.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--nodeport-addresses stringSlice</td>
+<td colspan="2">--nodeport-addresses strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A string slice of values which specify the addresses to use for NodePorts. Values may be valid IP blocks (e.g. 1.2.3.0/24, 1.2.3.4/32). The default empty string slice ([]) means to use all local addresses.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A string slice of values which specify the addresses to use for NodePorts. Values may be valid IP blocks (e.g. 1.2.3.0/24, 1.2.3.4/32). The default empty string slice ([]) means to use all local addresses.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oom-score-adj int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: -999</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000]</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000]</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--profiling</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true enables profiling via web interface on /debug/pprof handler.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true enables profiling via web interface on /debug/pprof handler.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--proxy-mode ProxyMode</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Which proxy mode to use: 'userspace' (older) or 'iptables' (faster) or 'ipvs' or 'kernelspace' (windows). If blank, use the best-available proxy (currently iptables). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are insufficient, this always falls back to the userspace proxy.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Which proxy mode to use: 'userspace' (older) or 'iptables' (faster) or 'ipvs' or 'kernelspace' (windows). If blank, use the best-available proxy (currently iptables). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are insufficient, this always falls back to the userspace proxy.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--proxy-port-range port-range</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Range of host ports (beginPort-endPort, single port or beginPort+offset, inclusive) that may be consumed in order to proxy service traffic. If (unspecified, 0, or 0-0) then ports will be randomly chosen.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Range of host ports (beginPort-endPort, single port or beginPort+offset, inclusive) that may be consumed in order to proxy service traffic. If (unspecified, 0, or 0-0) then ports will be randomly chosen.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--show-hidden-metrics-for-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is &lt;major&gt;.&lt;minor&gt;, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is <!-- raw HTML omitted -->.<!-- raw HTML omitted -->, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--udp-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 250ms</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">How long an idle UDP connection will be kept open (e.g. '250ms', '2s').  Must be greater than 0. Only applicable for proxy-mode=userspace</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>How long an idle UDP connection will be kept open (e.g. '250ms', '2s').  Must be greater than 0. Only applicable for proxy-mode=userspace</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--version version[=true]</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Print version information and quit</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Print version information and quit</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--write-config-to string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, write the default configuration values to this file and exit.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, write the default configuration values to this file and exit.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md b/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
index 7aa8ccf5d0..913d7eb925 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
@@ -2,8 +2,21 @@
 title: kube-scheduler
 content_type: tool-reference
 weight: 30
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
 ## {{% heading "synopsis" %}}
 
 
@@ -33,504 +46,504 @@ kube-scheduler [flags]
 <td colspan="2">--add-dir-header</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, adds the file directory to the header of the log messages</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--address string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "0.0.0.0"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: the IP address on which to listen for the --port port (set to 0.0.0.0 for all IPv4 interfaces and :: for all IPv6 interfaces). See --bind-address instead.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the IP address on which to listen for the --port port (set to 0.0.0.0 for all IPv4 interfaces and :: for all IPv6 interfaces). See --bind-address instead.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--algorithm-provider string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: the scheduling algorithm provider to use, this sets the default plugins for component config profiles. Choose one of: ClusterAutoscalerProvider | DefaultProvider</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the scheduling algorithm provider to use, this sets the default plugins for component config profiles. Choose one of: ClusterAutoscalerProvider | DefaultProvider</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--alsologtostderr</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error as well as files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error as well as files</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">kubeconfig file pointing at the 'core' kubernetes server with enough rights to create tokenreviews.authentication.k8s.io. This is optional. If empty, all token requests are considered to be anonymous and no client CA is looked up in the cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>kubeconfig file pointing at the 'core' kubernetes server with enough rights to create tokenreviews.authentication.k8s.io. This is optional. If empty, all token requests are considered to be anonymous and no client CA is looked up in the cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-skip-lookup</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If false, the authentication-kubeconfig will be used to lookup missing authentication configuration from the cluster.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If false, the authentication-kubeconfig will be used to lookup missing authentication configuration from the cluster.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-token-webhook-cache-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache responses from the webhook token authenticator.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache responses from the webhook token authenticator.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-tolerate-lookup-failure&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, failures to look up missing authentication configuration from the cluster are not considered fatal. Note that this can result in authentication that treats all requests as anonymous.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, failures to look up missing authentication configuration from the cluster are not considered fatal. Note that this can result in authentication that treats all requests as anonymous.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--authorization-always-allow-paths stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [/healthz]</td>
+<td colspan="2">--authorization-always-allow-paths strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/healthz"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of HTTP paths to skip during authorization, i.e. these are authorized without contacting the 'core' kubernetes server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of HTTP paths to skip during authorization, i.e. these are authorized without contacting the 'core' kubernetes server.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">kubeconfig file pointing at the 'core' kubernetes server with enough rights to create subjectaccessreviews.authorization.k8s.io. This is optional. If empty, all requests not skipped by authorization are forbidden.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>kubeconfig file pointing at the 'core' kubernetes server with enough rights to create subjectaccessreviews.authorization.k8s.io. This is optional. If empty, all requests not skipped by authorization are forbidden.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-cache-authorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'authorized' responses from the webhook authorizer.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache 'authorized' responses from the webhook authorizer.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-webhook-cache-unauthorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'unauthorized' responses from the webhook authorizer.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration to cache 'unauthorized' responses from the webhook authorizer.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--azure-container-registry-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file containing Azure container registry configuration information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the file containing Azure container registry configuration information.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--bind-address ip&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
+<td colspan="2">--bind-address string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank or an unspecified address (0.0.0.0 or ::), all interfaces will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank or an unspecified address (0.0.0.0 or ::), all interfaces will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--client-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the configuration file. The following flags can overwrite fields in this file:<br/>  --address<br/>  --port<br/>  --use-legacy-policy-config<br/>  --policy-configmap<br/>  --policy-config-file<br/>  --algorithm-provider</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the configuration file. The following flags can overwrite fields in this file:<br/>--address<br/>--port<br/>--use-legacy-policy-config<br/>--policy-configmap<br/>--policy-config-file<br/>--algorithm-provider</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--contention-profiling&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: enable lock contention profiling, if profiling is enabled</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: enable lock contention profiling, if profiling is enabled</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-logging-sanitization</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).<br/>Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).<br/>Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--feature-gates mapStringBool</td>
+<td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--hard-pod-affinity-symmetric-weight int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule corresponding to every RequiredDuringScheduling affinity rule. --hard-pod-affinity-symmetric-weight represents the weight of implicit PreferredDuringScheduling affinity rule. Must be in the range 0-100.This option was moved to the policy configuration file</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule corresponding to every RequiredDuringScheduling affinity rule. --hard-pod-affinity-symmetric-weight represents the weight of implicit PreferredDuringScheduling affinity rule. Must be in the range 0-100.This option was moved to the policy configuration file</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kube-scheduler</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kube-scheduler</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--http2-max-streams-per-connection int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang's default.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang's default.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 100</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: burst to use while talking with kubernetes apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: burst to use while talking with kubernetes apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-content-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "application/vnd.kubernetes.protobuf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: content type of requests sent to apiserver.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: content type of requests sent to apiserver.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--kube-api-qps float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 50</td>
+<td colspan="2">--kube-api-qps float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 50</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: QPS to use while talking with kubernetes apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: QPS to use while talking with kubernetes apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: path to kubeconfig file with authorization and master location information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: path to kubeconfig file with authorization and master location information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-lease-duration duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 15s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-renew-deadline duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-resource-lock string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "leases"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The type of resource object that is used for locking during leader election. Supported options are 'endpoints', 'configmaps', 'leases', 'endpointsleases' and 'configmapsleases'.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The type of resource object that is used for locking during leader election. Supported options are 'endpoints', 'configmaps', 'leases', 'endpointsleases' and 'configmapsleases'.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-resource-name string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-scheduler"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The name of resource object that is used for locking during leader election.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The name of resource object that is used for locking during leader election.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-resource-namespace string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-system"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The namespace of resource object that is used for locking during leader election.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The namespace of resource object that is used for locking during leader election.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--leader-elect-retry-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--lock-object-name string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-scheduler"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: define the name of the lock object. Will be removed in favor of leader-elect-resource-name</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: define the name of the lock object. Will be removed in favor of leader-elect-resource-name</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--lock-object-namespace string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-system"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: define the namespace of the lock object. Will be removed in favor of leader-elect-resource-namespace.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: define the namespace of the lock object. Will be removed in favor of leader-elect-resource-namespace.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--log-backtrace-at traceLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">when logging hits line file:N, emit a stack trace</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, write log files in this directory</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, use this log file</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of seconds between log flushes</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Sets the log format. Permitted formats: "json", "text".<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--logtostderr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error instead of files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error instead of files</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--master string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The address of the Kubernetes API server (overrides any value in kubeconfig)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The address of the Kubernetes API server (overrides any value in kubeconfig)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--one-output</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, only write logs to their native severity level (vs also writing to each lower severity level</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--permit-port-sharing</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, SO_REUSEPORT will be used when binding the port, which allows more than one instance to bind on the same address and port. [default=false]</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, SO_REUSEPORT will be used when binding the port, which allows more than one instance to bind on the same address and port. [default=false]</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--policy-config-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: file with scheduler policy configuration. This file is used if policy ConfigMap is not provided or --use-legacy-policy-config=true. Note: The scheduler will fail if this is combined with Plugin configs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: file with scheduler policy configuration. This file is used if policy ConfigMap is not provided or --use-legacy-policy-config=true. Note: The scheduler will fail if this is combined with Plugin configs</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--policy-configmap string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: name of the ConfigMap object that contains scheduler's policy configuration. It must exist in the system namespace before scheduler initialization if --use-legacy-policy-config=false. The config must be provided as the value of an element in 'Data' map with the key='policy.cfg'. Note: The scheduler will fail if this is combined with Plugin configs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: name of the ConfigMap object that contains scheduler's policy configuration. It must exist in the system namespace before scheduler initialization if --use-legacy-policy-config=false. The config must be provided as the value of an element in 'Data' map with the key='policy.cfg'. Note: The scheduler will fail if this is combined with Plugin configs</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--policy-configmap-namespace string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-system"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: the namespace where policy ConfigMap is located. The kube-system namespace will be used if this is not provided or is empty. Note: The scheduler will fail if this is combined with Plugin configs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the namespace where policy ConfigMap is located. The kube-system namespace will be used if this is not provided or is empty. Note: The scheduler will fail if this is combined with Plugin configs</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--port int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10251</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: the port on which to serve HTTP insecurely without authentication and authorization. If 0, don't serve plain HTTP at all. See --secure-port instead.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the port on which to serve HTTP insecurely without authentication and authorization. If 0, don't serve plain HTTP at all. See --secure-port instead.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--profiling&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: enable profiling via web interface host:port/debug/pprof/</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: enable profiling via web interface host:port/debug/pprof/</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-allowed-names stringSlice</td>
+<td colspan="2">--requestheader-allowed-names strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--requestheader-client-ca-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-extra-headers-prefix stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [x-remote-extra-]</td>
+<td colspan="2">--requestheader-extra-headers-prefix strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "x-remote-extra-"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request header prefixes to inspect. X-Remote-Extra- is suggested.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request header prefixes to inspect. X-Remote-Extra- is suggested.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-group-headers stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [x-remote-group]</td>
+<td colspan="2">--requestheader-group-headers strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "x-remote-group"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request headers to inspect for groups. X-Remote-Group is suggested.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request headers to inspect for groups. X-Remote-Group is suggested.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--requestheader-username-headers stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [x-remote-user]</td>
+<td colspan="2">--requestheader-username-headers strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "x-remote-user"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of request headers to inspect for usernames. X-Remote-User is common.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of request headers to inspect for usernames. X-Remote-User is common.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--scheduler-name string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "default-scheduler"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: name of the scheduler, used to select which pods will be processed by this scheduler, based on pod's "spec.schedulerName".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: name of the scheduler, used to select which pods will be processed by this scheduler, based on pod's &quot;spec.schedulerName&quot;.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--secure-port int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10259</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--show-hidden-metrics-for-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is &lt;major&gt;.&lt;minor&gt;, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is <!-- raw HTML omitted -->.<!-- raw HTML omitted -->, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid header prefixes in the log messages</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-log-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid headers when opening log files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--stderrthreshold severity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
+<td colspan="2">--stderrthreshold int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">logs at or above this threshold go to stderr</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>logs at or above this threshold go to stderr</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--tls-cipher-suites stringSlice</td>
+<td colspan="2">--tls-cipher-suites strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used. <br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384. <br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.<br/>Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384.<br/>Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-min-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-private-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing the default x509 private key matching --tls-cert-file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>File containing the default x509 private key matching --tls-cert-file.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--tls-sni-cert-key namedCertKey&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: []</td>
+<td colspan="2">--tls-sni-cert-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. The domain patterns also allow IP addresses, but IPs should only be used if the apiserver has visibility to the IP address requested by a client. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: "example.crt,example.key" or "foo.crt,foo.key:*.foo.com,foo.com".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. The domain patterns also allow IP addresses, but IPs should only be used if the apiserver has visibility to the IP address requested by a client. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: &quot;example.crt,example.key&quot; or &quot;foo.crt,foo.key:*.foo.com,foo.com&quot;.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--use-legacy-policy-config</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: when set to true, scheduler will ignore policy ConfigMap and uses policy config file. Note: The scheduler will fail if this is combined with Plugin configs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: when set to true, scheduler will ignore policy ConfigMap and uses policy config file. Note: The scheduler will fail if this is combined with Plugin configs</p></td>
 </tr>
 
 <tr>
-<td colspan="2">-v, --v Level</td>
+<td colspan="2">-v, --v int</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">number for the log level verbosity</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>number for the log level verbosity</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--version version[=true]</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Print version information and quit</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Print version information and quit</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--vmodule moduleSpec</td>
+<td colspan="2">--vmodule &lt;comma-separated 'pattern=N' settings&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">comma-separated list of pattern=N settings for file-filtered logging</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>comma-separated list of pattern=N settings for file-filtered logging</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--write-config-to string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If set, write the configuration values to this file and exit.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If set, write the configuration values to this file and exit.</p></td>
 </tr>
 
 </tbody>

From e7e5f0c912a7cc504703e087178a39a2a645c8ea Mon Sep 17 00:00:00 2001
From: Terry Moschou <tmoschou@gmail.com>
Date: Wed, 10 Mar 2021 15:45:33 +1030
Subject: [PATCH 156/788] Remove some tabs on container-runtimes.md docs

This simplifies the containerd installation instructions. All Linux distros will
now download from Docker repos, including Ubuntu 18.04 which previously
installed from Ubuntu repos.

The Docker runtime instructions have also been simplified. The RHEL/CentOS
specific option overlay2.override_kernel_check=true option has been removed.
It seems Docker will now autodetect overlay2 support on older Linux kernels
<4.0.0,>=3.10.0-514, which have back-ported overlay2 support on RHEL/CentOS 7.4+
See moby/moby#34368
---
 .../container-runtimes.md                     | 180 ++----------------
 1 file changed, 15 insertions(+), 165 deletions(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index a59ebbddaf..15f3e3a9b6 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -92,37 +92,9 @@ sudo sysctl --system
 Install containerd:
 
 {{< tabs name="tab-cri-containerd-installation" >}}
-{{% tab name="Ubuntu 16.04" %}}
+{{% tab name="Linux" %}}
 
-1. Setup the [Docker Engine repository for Ubuntu](https://docs.docker.com/engine/install/ubuntu/#set-up-the-repository)
-
-2. Install containerd:
-
-   ```shell
-   sudo apt-get update && sudo apt-get install -y containerd.io
-   ```
-
-3. Configure containerd:
-
-   ```shell
-   sudo mkdir -p /etc/containerd
-   containerd config default | sudo tee /etc/containerd/config.toml
-   ```
-
-4. Restart containerd:
-
-   ```shell
-   sudo systemctl restart containerd
-   ```
-
-{{% /tab %}}
-{{% tab name="Ubuntu 18.04/20.04" %}}
-
-1. Install containerd:
-
-   ```shell
-   sudo apt-get update && sudo apt-get install -y containerd
-   ```
+1. Install the `containerd.io` package from the official Docker repositories. Instructions for setting up the Docker repository for your respective Linux distribution and installing the `containerd.io` package can be found at [Install Docker Engine](https://docs.docker.com/engine/install/#server).
 
 2. Configure containerd:
 
@@ -137,60 +109,10 @@ Install containerd:
    sudo systemctl restart containerd
    ```
 
-{{% /tab %}}
-{{% tab name="Debian 9+" %}}
-
-1. Setup the [Docker Engine repository for Debian](https://docs.docker.com/engine/install/debian/#set-up-the-repository)
-
-2. Install containerd:
-
-   ```shell
-   sudo apt-get update && sudo apt-get install -y containerd.io
-   ```
-
-3. Configure containerd:
-
-   ```shell
-   sudo mkdir -p /etc/containerd
-   containerd config default | sudo tee /etc/containerd/config.toml
-   ```
-
-4. Restart containerd:
-
-   ```shell
-   sudo systemctl restart containerd
-   ```
-
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
-
-1. Setup the [Docker Engine repository for CentOS/RHEL](https://docs.docker.com/engine/install/centos/#set-up-the-repository)
-
-2. Install containerd:
-
-   ```shell
-   sudo yum update -y && sudo yum install -y containerd.io
-   ```
-
-3. Configure containerd:
-
-   ```shell
-   sudo mkdir -p /etc/containerd
-   containerd config default | sudo tee /etc/containerd/config.toml
-   ```
-
-4. Restart containerd:
-
-   ```shell
-   sudo systemctl restart containerd
-   ```
-
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}
 
-<br />
 Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), and then run the following commands:
-<br />
 
 1. Download containerd:
 
@@ -425,28 +347,9 @@ in sync.
 
 ### Docker
 
-On each of your nodes, install Docker CE.
+1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server)
 
-The Kubernetes release notes list which versions of Docker are compatible
-with that version of Kubernetes.
-
-Use the following commands to install Docker on your system:
-
-{{< tabs name="tab-cri-docker-installation" >}}
-{{% tab name="Ubuntu 16.04+" %}}
-
-1. Setup the [Docker Engine repository for Ubuntu](https://docs.docker.com/engine/install/ubuntu/#set-up-the-repository)
-
-2. Install Docker CE:
-
-   ```shell
-   sudo apt-get update && sudo apt-get install -y \
-     containerd.io=1.2.13-2 \
-     docker-ce=5:19.03.11~3-0~ubuntu-$(lsb_release -cs) \
-     docker-ce-cli=5:19.03.11~3-0~ubuntu-$(lsb_release -cs)
-   ```
-
-3. Set up the Docker daemon:
+2. Configure the Docker daemon, in particular to use systemd for the management of the container’s cgroups.
 
    ```shell
    sudo mkdir /etc/docker
@@ -462,73 +365,20 @@ Use the following commands to install Docker on your system:
    EOF
    ```
 
-4. Create `/etc/systemd/system/docker.service.d`:
-
-   ```shell
-   sudo mkdir -p /etc/systemd/system/docker.service.d
-   ```
-
-5. Restart Docker:
+   {{< note >}}
+   `overlay2` is the preferred storage driver for systems running Linux kernel version 4.0 or higher, or RHEL or CentOS using version 3.10.0-514 and above.
+   {{< /note >}}
+
+3. Restart Docker and enable on boot:
 
    ```shell
+   sudo systemctl enable docker
    sudo systemctl daemon-reload
    sudo systemctl restart docker
    ```
 
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
-
-1. Setup the [Docker Engine repository for CentOS/RHEL](https://docs.docker.com/engine/install/centos/#set-up-the-repository)
-
-2. Install Docker CE:
-
-   ```shell
-   sudo yum update -y && sudo yum install -y \
-     containerd.io-1.2.13 \
-     docker-ce-19.03.11 \
-     docker-ce-cli-19.03.11
-   ```
-
-3. Set up the Docker daemon:
-
-   ```shell
-   sudo mkdir /etc/docker
-   cat <<EOF | sudo tee /etc/docker/daemon.json
-   {
-     "exec-opts": ["native.cgroupdriver=systemd"],
-     "log-driver": "json-file",
-     "log-opts": {
-       "max-size": "100m"
-     },
-     "storage-driver": "overlay2",
-     "storage-opts": [
-       "overlay2.override_kernel_check=true"
-     ]
-   }
-   EOF
-   ```
-
-4. Create `/etc/systemd/system/docker.service.d`:
-
-   ```shell
-   sudo mkdir -p /etc/systemd/system/docker.service.d
-   ```
-
-5. Restart Docker:
-
-   ```shell
-   sudo systemctl daemon-reload
-   sudo systemctl restart docker
-   ```
-
-{{% /tab %}}
-{{< /tabs >}}
-
-If you want the `docker` service to start on boot, run the following command:
-
-```shell
-sudo systemctl enable docker
-```
-
-Refer to the [official Docker installation guides](https://docs.docker.com/engine/installation/)
-for more information.
+{{< note >}}
+For more information refer to
+  - [Configure the Docker daemon](https://docs.docker.com/config/daemon/)
+  - [Control Docker with systemd](https://docs.docker.com/config/daemon/systemd/)
+{{< /note >}}

From a9254a983674a905c854f10c0d69975cdb02b967 Mon Sep 17 00:00:00 2001
From: Yuiko Mouri <yuiko-mori@nec.com>
Date: Wed, 10 Mar 2021 15:01:58 +0900
Subject: [PATCH 157/788] Replace redirect links of labels-annotations-taints

---
 content/en/docs/setup/best-practices/multiple-zones.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/best-practices/multiple-zones.md b/content/en/docs/setup/best-practices/multiple-zones.md
index 107ee2d0f7..8f51a3bd06 100644
--- a/content/en/docs/setup/best-practices/multiple-zones.md
+++ b/content/en/docs/setup/best-practices/multiple-zones.md
@@ -59,7 +59,7 @@ When nodes start up, the kubelet on each node automatically adds
 {{< glossary_tooltip text="labels" term_id="label" >}} to the Node object
 that represents that specific kubelet in the Kubernetes API.
 These labels can include
-[zone information](/docs/reference/kubernetes-api/labels-annotations-taints/#topologykubernetesiozone).
+[zone information](/docs/reference/labels-annotations-taints/#topologykubernetesiozone).
 
 If your cluster spans multiple zones or regions, you can use node labels
 in conjunction with

From dc508bd396da844a697b87dd074f2812b40071b4 Mon Sep 17 00:00:00 2001
From: illidan <illidan33@qq.com>
Date: Wed, 10 Mar 2021 14:58:24 +0800
Subject: [PATCH 158/788] Update connect-applications-service.md

There is an extra space before the field 'type', so to create a secret failed. The message is "error: error parsing nginxsecret.yaml: error converting YAML to JSON: yaml: line 5: did not find expected key".
---
 .../services-networking/connect-applications-service.md         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/services-networking/connect-applications-service.md b/content/zh/docs/concepts/services-networking/connect-applications-service.md
index 236c03f910..afa2a2ca20 100644
--- a/content/zh/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/zh/docs/concepts/services-networking/connect-applications-service.md
@@ -438,7 +438,7 @@ kind: "Secret"
 metadata:
   name: "nginxsecret"
   namespace: "default"
- type: kubernetes.io/tls  
+type: kubernetes.io/tls  
 data:
   tls.crt: "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURIekNDQWdlZ0F3SUJBZ0lKQUp5M3lQK0pzMlpJTUEwR0NTcUdTSWIzRFFFQkJRVUFNQ1l4RVRBUEJnTlYKQkFNVENHNW5hVzU0YzNaak1SRXdEd1lEVlFRS0V3aHVaMmx1ZUhOMll6QWVGdzB4TnpFd01qWXdOekEzTVRKYQpGdzB4T0RFd01qWXdOekEzTVRKYU1DWXhFVEFQQmdOVkJBTVRDRzVuYVc1NGMzWmpNUkV3RHdZRFZRUUtFd2h1CloybHVlSE4yWXpDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBSjFxSU1SOVdWM0IKMlZIQlRMRmtobDRONXljMEJxYUhIQktMSnJMcy8vdzZhU3hRS29GbHlJSU94NGUrMlN5ajBFcndCLzlYTnBwbQppeW1CL3JkRldkOXg5UWhBQUxCZkVaTmNiV3NsTVFVcnhBZW50VWt1dk1vLzgvMHRpbGhjc3paenJEYVJ4NEo5Ci82UVRtVVI3a0ZTWUpOWTVQZkR3cGc3dlVvaDZmZ1Voam92VG42eHNVR0M2QURVODBpNXFlZWhNeVI1N2lmU2YKNHZpaXdIY3hnL3lZR1JBRS9mRTRqakxCdmdONjc2SU90S01rZXV3R0ljNDFhd05tNnNTSzRqYUNGeGpYSnZaZQp2by9kTlEybHhHWCtKT2l3SEhXbXNhdGp4WTRaNVk3R1ZoK0QrWnYvcW1mMFgvbVY0Rmo1NzV3ajFMWVBocWtsCmdhSXZYRyt4U1FVQ0F3RUFBYU5RTUU0d0hRWURWUjBPQkJZRUZPNG9OWkI3YXc1OUlsYkROMzhIYkduYnhFVjcKTUI4R0ExVWRJd1FZTUJhQUZPNG9OWkI3YXc1OUlsYkROMzhIYkduYnhFVjdNQXdHQTFVZEV3UUZNQU1CQWY4dwpEUVlKS29aSWh2Y05BUUVGQlFBRGdnRUJBRVhTMW9FU0lFaXdyMDhWcVA0K2NwTHI3TW5FMTducDBvMm14alFvCjRGb0RvRjdRZnZqeE04Tzd2TjB0clcxb2pGSW0vWDE4ZnZaL3k4ZzVaWG40Vm8zc3hKVmRBcStNZC9jTStzUGEKNmJjTkNUekZqeFpUV0UrKzE5NS9zb2dmOUZ3VDVDK3U2Q3B5N0M3MTZvUXRUakViV05VdEt4cXI0Nk1OZWNCMApwRFhWZmdWQTRadkR4NFo3S2RiZDY5eXM3OVFHYmg5ZW1PZ05NZFlsSUswSGt0ejF5WU4vbVpmK3FqTkJqbWZjCkNnMnlwbGQ0Wi8rUUNQZjl3SkoybFIrY2FnT0R4elBWcGxNSEcybzgvTHFDdnh6elZPUDUxeXdLZEtxaUMwSVEKQ0I5T2wwWW5scE9UNEh1b2hSUzBPOStlMm9KdFZsNUIyczRpbDlhZ3RTVXFxUlU9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K"
   tls.key: "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"

From a82eef93bdce71ca8a0fc9fc7b306a8f608b75e9 Mon Sep 17 00:00:00 2001
From: vaibhav <t_vaibhav.goel@india.nec.com>
Date: Wed, 10 Mar 2021 13:07:09 +0530
Subject: [PATCH 159/788] Fix-hyperlink in feature gate list

---
 .../reference/command-line-tools-reference/feature-gates.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 229ac94099..daf525c781 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -729,7 +729,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [ServiceTopology](/docs/concepts/services-networking/service-topology/)
   for more details.
 - `SizeMemoryBackedVolumes`: Enables kubelet support to size memory backed volumes.
-  See [volumes](docs/concepts/storage/volumes) for more details.
+  See [volumes](/docs/concepts/storage/volumes) for more details.
 - `SetHostnameAsFQDN`: Enable the ability of setting Fully Qualified Domain
   Name(FQDN) as the hostname of a pod. See
   [Pod's `setHostnameAsFQDN` field](/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field).

From 58c9ddd24e1518f64036fb5d78ceff2040d79d79 Mon Sep 17 00:00:00 2001
From: pacoxu <paco.xu@daocloud.io>
Date: Wed, 10 Mar 2021 17:09:01 +0800
Subject: [PATCH 160/788] Disable CAdvisor Json Metrics completed

---
 .../command-line-tools-reference/kubelet.md         |  7 -------
 .../command-line-tools-reference/kubelet.md         | 13 -------------
 2 files changed, 20 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet.md b/content/en/docs/reference/command-line-tools-reference/kubelet.md
index fdd85997eb..7b28336293 100644
--- a/content/en/docs/reference/command-line-tools-reference/kubelet.md
+++ b/content/en/docs/reference/command-line-tools-reference/kubelet.md
@@ -298,13 +298,6 @@ kubelet [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;">The Kubelet will use this directory for checkpointing downloaded configurations and tracking configuration health. The Kubelet will create this directory if it does not already exist. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Providing this flag enables dynamic Kubelet configuration. The `DynamicKubeletConfig` feature gate must be enabled to pass this flag; this gate currently defaults to `true` because the feature is beta.</td>
 </tr>
 
-<tr>
-<td colspan="2">--enable-cadvisor-json-endpoints&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `false`</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable cAdvisor json `/spec` and `/stats/*` endpoints. This flag has no effect on the /stats/summary endpoint. (DEPRECATED: will be removed in a future version)</td>
-</tr>
-
 <tr>
 <td colspan="2">--enable-controller-attach-detach&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
diff --git a/content/zh/docs/reference/command-line-tools-reference/kubelet.md b/content/zh/docs/reference/command-line-tools-reference/kubelet.md
index 317a3a581e..6d7d2e757a 100644
--- a/content/zh/docs/reference/command-line-tools-reference/kubelet.md
+++ b/content/zh/docs/reference/command-line-tools-reference/kubelet.md
@@ -584,19 +584,6 @@ kubelet 使用此目录来保存所下载的配置，跟踪配置运行状况。
 </td>
 </tr>
 
-<tr>
-<td colspan="2">--enable-cadvisor-json-endpoints&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `false`</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-Enable cAdvisor json `/spec` and `/stats/*` endpoints. (DEPRECATED: will be removed in a future version)
--->
-启用 cAdvisor JSON 数据的 <code>/spec</code> 和 <code>/stats/&ast;</code> 端点。
-已弃用：未来版本将会移除此标志。
-</td>
-</tr>
-
 <tr>
 <td colspan="2">--enable-controller-attach-detach&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<!--Default: `true`-->默认值：<code>true</code></td>
 </tr>

From 4919d66afcb45765728d6221c23758cf045bbfc3 Mon Sep 17 00:00:00 2001
From: Andrei Artemov <andrey.artemov@gmail.com>
Date: Wed, 10 Mar 2021 15:58:10 +0200
Subject: [PATCH 161/788] Update the note ragarding matchLabels vs
 matchExpressions in the Deployment document

---
 content/en/docs/concepts/workloads/controllers/deployment.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/controllers/deployment.md b/content/en/docs/concepts/workloads/controllers/deployment.md
index 9ba746c2ad..0380889414 100644
--- a/content/en/docs/concepts/workloads/controllers/deployment.md
+++ b/content/en/docs/concepts/workloads/controllers/deployment.md
@@ -54,7 +54,7 @@ In this example:
   {{< note >}}
   The `.spec.selector.matchLabels` field is a map of {key,value} pairs.
   A single {key,value} in the `matchLabels` map is equivalent to an element of `matchExpressions`,
-  whose key field is "key" the operator is "In", and the values array contains only "value".
+  whose `key` field is "key", the `operator` is "In", and the `values` array contains only "value".
   All of the requirements, from both `matchLabels` and `matchExpressions`, must be satisfied in order to match.
   {{< /note >}}
 

From f7e5f7cae04b704a1095264d7213ecab6cc85cf6 Mon Sep 17 00:00:00 2001
From: Jan Safranek <jsafrane@redhat.com>
Date: Wed, 10 Mar 2021 17:28:01 +0100
Subject: [PATCH 162/788] CSI migration of Cinder volume plugin is on by
 default

Document that OpenStack Cinder CSI migration is enabled by default in
Kubernetes 1.21 and that corresponding CSI driver must be installed.
---
 content/en/docs/concepts/storage/volumes.md | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 8d84a519c0..d56ac1f99c 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -208,14 +208,16 @@ spec:
 
 #### OpenStack CSI migration
 
-{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
-The `CSIMigration` feature for Cinder, when enabled, redirects all plugin operations
-from the existing in-tree plugin to the `cinder.csi.openstack.org` Container
-Storage Interface (CSI) Driver. In order to use this feature, the [OpenStack Cinder CSI
-Driver](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)
-must be installed on the cluster and the `CSIMigration` and `CSIMigrationOpenStack`
-beta features must be enabled.
+The `CSIMigration` feature for Cinder is enabled by default in Kubernetes 1.21.
+It redirects all plugin operations from the existing in-tree plugin to the
+`cinder.csi.openstack.org` Container Storage Interface (CSI) Driver.
+[OpenStack Cinder CSI Driver](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)
+must be installed on the cluster.
+The feature can be disabled by un-setting `CSIMigrationOpenStack` beta feature
+gate. When disabled, in-tree Cinder volume plugin will be responsible for
+all storage related tasks, as it was in the previous Kubernetes releases.
 
 ### configMap
 

From 3dbb61e149a966ba1679dfa33b2fe70c1650a56d Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Thu, 11 Mar 2021 00:45:36 +0200
Subject: [PATCH 163/788] [zh] fixed name spelling mistake

---
 .../access/certificate-signing-request/clusterrole-sign.yaml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/examples/access/certificate-signing-request/clusterrole-sign.yaml b/content/zh/examples/access/certificate-signing-request/clusterrole-sign.yaml
index 29bbc6a9cd..6d1a2f7882 100644
--- a/content/zh/examples/access/certificate-signing-request/clusterrole-sign.yaml
+++ b/content/zh/examples/access/certificate-signing-request/clusterrole-sign.yaml
@@ -21,7 +21,7 @@ rules:
   - certificates.k8s.io
   resources:
   - signers
-  resourceName:
+  resourceNames:
   - example.com/my-signer-name # example.com/* can be used to authorize for all signers in the 'example.com' domain
   verbs:
   - sign

From 817b03624b482114ed4594b2fb902abdaa1786f8 Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio2020@gmail.com>
Date: Wed, 10 Mar 2021 22:35:54 -0300
Subject: [PATCH 164/788] Add _index.md with upstream updated

---
 content/pt/docs/concepts/containers/_index.md | 34 +++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 content/pt/docs/concepts/containers/_index.md

diff --git a/content/pt/docs/concepts/containers/_index.md b/content/pt/docs/concepts/containers/_index.md
new file mode 100644
index 0000000000..6ce26043c5
--- /dev/null
+++ b/content/pt/docs/concepts/containers/_index.md
@@ -0,0 +1,34 @@
+---
+title: Contêineres
+weight: 40
+description: Tecnologia para empacotar aplicações com suas dependências em tempo de execução
+content_type: concept
+no_list: true
+---
+
+<!-- overview -->
+
+Cada contêiner executado é repetível; a padronização de ter
+dependências incluídas significa que você obtém o mesmo comportamento onde quer que você execute.
+
+Os contêineres separam os aplicativos da infraestrutura de _host_ subjacente.
+Isso torna a implantação mais fácil em diferentes ambientes de nuvem ou sistema operacional.
+
+
+<!-- body -->
+
+## Imagem de contêiner
+Uma [imagem de contêiner](/docs/concepts/containers/images/) é um pacote de software pronto para executar, contendo tudo que é preciso para executar uma aplicação:
+o código e o agente de execução necessário, aplicação, bibliotecas do sistema e valores padrões para qualquer configuração essencial.
+
+Por _design_, um contêiner é imutável: você não pode mudar o código de um contêiner que já está executando. Se você tem uma aplicação conteinerizada e quer fazer mudanças, você precisa construir uma nova imagem que inclui a mudança, e recriar o contêiner para iniciar a partir da imagem atualizada.
+
+## Agente de execução de contêiner
+
+{{< glossary_definition term_id="container-runtime" length="all" >}}
+
+## {{% heading "whatsnext" %}}
+
+* [Imagens de contêineres](/docs/concepts/containers/images/)
+* [Pods](/docs/concepts/workloads/pods/)
+

From df56f19051cf0f8e63af2e125f6a37b3b72e9e1e Mon Sep 17 00:00:00 2001
From: CKchen0726 <chenchangkuan@huawei.com>
Date: Thu, 11 Mar 2021 11:14:48 +0800
Subject: [PATCH 165/788] fix spelling mistake in
 content/ja/***/user-guide-windows-containers.md

---
 .../windows/user-guide-windows-containers.md                    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/setup/production-environment/windows/user-guide-windows-containers.md b/content/ja/docs/setup/production-environment/windows/user-guide-windows-containers.md
index e1a23cadfd..6f1ed4558e 100644
--- a/content/ja/docs/setup/production-environment/windows/user-guide-windows-containers.md
+++ b/content/ja/docs/setup/production-environment/windows/user-guide-windows-containers.md
@@ -96,7 +96,7 @@ spec:
     * ネットワークを介したノードとPod間通信、LinuxマスターからのPod IPのポート80に向けて`curl`して、ウェブサーバーの応答をチェックします
     * docker execまたはkubectl execを使用したPod間通信、Pod間(および複数のWindowsノードがある場合はホスト間)へのpingします
     * ServiceからPodへの通信、Linuxマスターおよび個々のPodからの仮想Service IP(`kubectl get services`で表示される)に`curl`します
-    * サービスディスカバリ、Kuberntesの[default DNS suffix](/ja/docs/concepts/services-networking/dns-pod-service/#services)と共にService名に`curl`します
+    * サービスディスカバリ、Kubernetesの[default DNS suffix](/ja/docs/concepts/services-networking/dns-pod-service/#services)と共にService名に`curl`します
     * Inbound connectivity, `curl` the NodePort from the Linux master or machines outside of the cluster
     * インバウンド接続、Linuxマスターまたはクラスター外のマシンからNodePortに`curl`します
     * アウトバウンド接続、kubectl execを使用したPod内からの外部IPに`curl`します

From 4d989b9a673ced800149418582dba3339a65769b Mon Sep 17 00:00:00 2001
From: CKchen0726 <chenchangkuan@huawei.com>
Date: Thu, 11 Mar 2021 11:18:25 +0800
Subject: [PATCH 166/788] fix spelling mistake in
 ./content/zh/***/connect-applications-service.md

---
 .../services-networking/connect-applications-service.md         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/services-networking/connect-applications-service.md b/content/zh/docs/concepts/services-networking/connect-applications-service.md
index 236c03f910..6f04ea1194 100644
--- a/content/zh/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/zh/docs/concepts/services-networking/connect-applications-service.md
@@ -462,7 +462,7 @@ nginxsecret           kubernetes.io/tls                     2         1m
 <!--
 Now modify your nginx replicas to start an https server using the certificate in the secret, and the Service, to expose both ports (80 and 443):
 -->
-现在修改 nginx 副本，启动一个使用在秘钥中的证书的 HTTPS 服务器和 Servcie，暴露端口（80 和 443）：
+现在修改 nginx 副本，启动一个使用在秘钥中的证书的 HTTPS 服务器和 Service，暴露端口（80 和 443）：
 
 {{< codenew file="service/networking/nginx-secure-app.yaml" >}}
 

From 22f104c6c329dca97901ec1b453da0cba6147504 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Wed, 10 Mar 2021 11:14:58 +0800
Subject: [PATCH 167/788] [zh] translate task/install kubectl on macOS

---
 .../tools/included/install-kubectl-gcloud.md  |  37 +++
 .../tools/included/kubectl-whats-next.md      |  27 ++
 .../optional-kubectl-configs-bash-mac.md      | 173 ++++++++++++
 .../included/optional-kubectl-configs-zsh.md  |  50 ++++
 .../tasks/tools/included/verify-kubectl.md    |  62 +++++
 .../docs/tasks/tools/install-kubectl-macos.md | 263 ++++++++++++++++++
 6 files changed, 612 insertions(+)
 create mode 100644 content/zh/docs/tasks/tools/included/install-kubectl-gcloud.md
 create mode 100644 content/zh/docs/tasks/tools/included/kubectl-whats-next.md
 create mode 100644 content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
 create mode 100644 content/zh/docs/tasks/tools/included/optional-kubectl-configs-zsh.md
 create mode 100644 content/zh/docs/tasks/tools/included/verify-kubectl.md
 create mode 100644 content/zh/docs/tasks/tools/install-kubectl-macos.md

diff --git a/content/zh/docs/tasks/tools/included/install-kubectl-gcloud.md b/content/zh/docs/tasks/tools/included/install-kubectl-gcloud.md
new file mode 100644
index 0000000000..e73932851d
--- /dev/null
+++ b/content/zh/docs/tasks/tools/included/install-kubectl-gcloud.md
@@ -0,0 +1,37 @@
+---
+title: "通过 gcloud 安装 kubectl"
+description: "用各个特定操作系统标签页中包含的 gcloud 指令片段安装 kubectl。"
+headless: true
+---
+<!-- 
+---
+title: "gcloud kubectl install"
+description: "How to install kubectl with gcloud snippet for inclusion in each OS-specific tab."
+headless: true
+---
+-->
+
+<!-- 
+You can install kubectl as part of the Google Cloud SDK.
+-->
+kubectl 可以作为 Google Cloud SDK 的一部分被安装。
+
+<!-- 
+1. Install the [Google Cloud SDK](https://cloud.google.com/sdk/).
+1. Run the `kubectl` installation command:
+-->
+1. 安装 [Google Cloud SDK](https://cloud.google.com/sdk/)。
+1. 运行安装 `kubectl` 的命令：
+
+   ```shell
+   gcloud components install kubectl
+   ```
+
+   <!-- 
+   1. Test to ensure the version you installed is up-to-date:
+   -->
+1. 验证一下，确保安装的是最新的版本：
+
+   ```shell
+   kubectl version --client
+   ```
\ No newline at end of file
diff --git a/content/zh/docs/tasks/tools/included/kubectl-whats-next.md b/content/zh/docs/tasks/tools/included/kubectl-whats-next.md
new file mode 100644
index 0000000000..3990922e0e
--- /dev/null
+++ b/content/zh/docs/tasks/tools/included/kubectl-whats-next.md
@@ -0,0 +1,27 @@
+---
+title: "后续内容"
+description: "安装 kubectl 之后，还可以做些什么？"
+headless: true
+---
+<!-- 
+---
+title: "What's next?"
+description: "What's next after installing kubectl."
+headless: true
+---
+-->
+
+<!-- 
+* [Install Minikube](https://minikube.sigs.k8s.io/docs/start/)
+* See the [getting started guides](/docs/setup/) for more about creating clusters.
+* [Learn how to launch and expose your application.](/docs/tasks/access-application-cluster/service-access-application-cluster/)
+* If you need access to a cluster you didn't create, see the
+  [Sharing Cluster Access document](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
+* Read the [kubectl reference docs](/docs/reference/kubectl/kubectl/)
+-->
+* [安装 Minikube](https://minikube.sigs.k8s.io/docs/start/)
+* 有关创建集群的更多信息，请参阅[入门指南](/zh/docs/setup/).
+* [学习如何启动并对外公开你的应用程序。](/zh/docs/tasks/access-application-cluster/service-access-application-cluster/)
+* 如果你需要访问其他人创建的集群，请参阅
+  [共享集群接入文档](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
+* 阅读 [kubectl 参考文档](/zh/docs/reference/kubectl/kubectl/)
diff --git a/content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md b/content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
new file mode 100644
index 0000000000..d92055f6a3
--- /dev/null
+++ b/content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
@@ -0,0 +1,173 @@
+---
+title: "macOS 系统上的 bash 自动补全"
+description: "在 macOS 上实现 Bash 自动补全的一些可选配置。"
+headless: true
+---
+<!-- 
+---
+title: "bash auto-completion on macOS"
+description: "Some optional configuration for bash auto-completion on macOS."
+headless: true
+---
+ -->
+
+<!-- 
+### Introduction
+-->
+### 简介 
+
+<!-- 
+The kubectl completion script for Bash can be generated with `kubectl completion bash`. Sourcing this script in your shell enables kubectl completion.
+
+However, the kubectl completion script depends on [**bash-completion**](https://github.com/scop/bash-completion) which you thus have to previously install.
+-->
+kubectl 的 Bash 补全脚本可以通过 `kubectl completion bash` 命令生成。
+在你的 shell 中导入（Sourcing）这个脚本即可启用补全功能。
+
+此外，kubectl 补全脚本依赖于工具 [**bash-completion**](https://github.com/scop/bash-completion)，
+所以你必须先安装它。
+
+{{< warning>}}
+<!-- 
+There are two versions of bash-completion, v1 and v2. V1 is for Bash 3.2 (which is the default on macOS), and v2 is for Bash 4.1+. The kubectl completion script **doesn't work** correctly with bash-completion v1 and Bash 3.2. It requires **bash-completion v2** and **Bash 4.1+**. Thus, to be able to correctly use kubectl completion on macOS, you have to install and use Bash 4.1+ ([*instructions*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba)). The following instructions assume that you use Bash 4.1+ (that is, any Bash version of 4.1 or newer).
+-->
+bash-completion 有两个版本：v1 和 v2。v1 对应 Bash3.2（也是 macOS 的默认安装版本），v2 对应 Bash 4.1+。
+kubectl 的补全脚本**无法适配** bash-completion v1 和 Bash 3.2。
+必须为它配备  **bash-completion v2** 和 **Bash 4.1+**。
+有鉴于此，为了在 macOS 上使用 kubectl 补全功能，你必须要安装和使用 Bash 4.1+
+([*说明*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba))。
+后续说明假定你用的是 Bash 4.1+（也就是 Bash 4.1 或更新的版本）
+{{< /warning >}}
+
+<!-- 
+### Upgrade Bash
+-->
+### 升级 Bash
+
+<!-- 
+The instructions here assume you use Bash 4.1+. You can check your Bash's version by running:
+-->
+后续说明假定你已使用 Bash 4.1+。你可以运行以下命令检查 Bash 版本：
+
+```bash
+echo $BASH_VERSION
+```
+
+<!-- 
+If it is too old, you can install/upgrade it using Homebrew:
+-->
+如果版本太旧，可以用 Homebrew 安装/升级：
+
+```bash
+brew install bash
+```
+
+<!-- 
+Reload your shell and verify that the desired version is being used:
+-->
+重新加载 shell，并验证所需的版本已经生效：
+
+```bash
+echo $BASH_VERSION $SHELL
+```
+
+<!-- 
+Homebrew usually installs it at `/usr/local/bin/bash`.
+-->
+Homebrew 通常把它安装为 `/usr/local/bin/bash`。
+
+<!-- 
+### Install bash-completion
+-->
+### 安装 bash-completion
+
+
+{{< note >}}
+<!-- 
+As mentioned, these instructions assume you use Bash 4.1+, which means you will install bash-completion v2 (in contrast to Bash 3.2 and bash-completion v1, in which case kubectl completion won't work).
+-->
+如前所述，本说明假定你使用的 Bash 版本为 4.1+，这意味着你要安装 bash-completion v2
+（不同于 Bash 3.2 和 bash-completion v1，kubectl 的补全功能在该场景下无法工作）。
+{{< /note >}}
+
+<!-- 
+You can test if you have bash-completion v2 already installed with `type _init_completion`. If not, you can install it with Homebrew:
+-->
+你可以用命令 `type _init_completion` 测试 bash-completion v2 是否已经安装。
+如未安装，用 Homebrew 来安装它：
+
+```bash
+brew install bash-completion@2
+```
+
+<!-- 
+As stated in the output of this command, add the following to your `~/.bash_profile` file:
+-->
+如命令的输出信息所显示的，将如下内容添加到文件 `~/.bash_profile` 中：
+
+```bash
+export BASH_COMPLETION_COMPAT_DIR="/usr/local/etc/bash_completion.d"
+[[ -r "/usr/local/etc/profile.d/bash_completion.sh" ]] && . "/usr/local/etc/profile.d/bash_completion.sh"
+```
+
+<!-- 
+Reload your shell and verify that bash-completion v2 is correctly installed with `type _init_completion`.
+-->
+重新加载 shell，并用命令 `type _init_completion` 验证 bash-completion v2 已经恰当的安装。
+
+<!-- 
+### Enable kubectl autocompletion
+-->
+### 启用 kubectl 自动补全功能
+
+<!-- 
+You now have to ensure that the kubectl completion script gets sourced in all your shell sessions. There are multiple ways to achieve this:
+
+- Source the completion script in your `~/.bash_profile` file:
+-->
+你现在需要确保在所有的 shell 环境中均已导入（sourced） kubectl 的补全脚本，
+有若干种方法可以实现这一点：
+
+- 在文件 `~/.bash_profile` 中导入（Source）补全脚本：
+
+    ```bash
+    echo 'source <(kubectl completion bash)' >>~/.bash_profile
+    ```
+
+<!-- 
+- Add the completion script to the `/usr/local/etc/bash_completion.d` directory:
+-->
+- 将补全脚本添加到目录 `/usr/local/etc/bash_completion.d` 中：
+
+    ```bash
+    kubectl completion bash >/usr/local/etc/bash_completion.d/kubectl
+    ```
+
+<!-- 
+- If you have an alias for kubectl, you can extend shell completion to work with that alias:
+-->
+- 如果你为 kubectl 定义了别名，则可以扩展 shell 补全来兼容该别名：
+
+    ```bash
+    echo 'alias k=kubectl' >>~/.bash_profile
+    echo 'complete -F __start_kubectl k' >>~/.bash_profile
+    ```
+
+<!-- 
+- If you installed kubectl with Homebrew (as explained [above](#install-with-homebrew-on-macos)), then the kubectl completion script should already be in `/usr/local/etc/bash_completion.d/kubectl`. In that case, you don't need to do anything.
+-->
+- 如果你是用 Homebrew 安装的 kubectl（[如上所述](#install-with-homebrew-on-macos)），
+  那么 kubectl 补全脚本应该已经安装到目录 `/usr/local/etc/bash_completion.d/kubectl` 中了。
+  这种情况下，你什么都不需要做。
+
+   {{< note >}}
+   <!-- 
+   The Homebrew installation of bash-completion v2 sources all the files in the `BASH_COMPLETION_COMPAT_DIR` directory, that's why the latter two methods work.
+   -->
+   用 Hommbrew 安装的 bash-completion v2 会初始化 目录 `BASH_COMPLETION_COMPAT_DIR` 中的所有文件，这就是后两种方法能正常工作的原因。
+   {{< /note >}}
+
+<!-- 
+In any case, after reloading your shell, kubectl completion should be working.
+-->
+总之，重新加载 shell 之后，kubectl 补全功能将立即生效。
diff --git a/content/zh/docs/tasks/tools/included/optional-kubectl-configs-zsh.md b/content/zh/docs/tasks/tools/included/optional-kubectl-configs-zsh.md
new file mode 100644
index 0000000000..0f32593d55
--- /dev/null
+++ b/content/zh/docs/tasks/tools/included/optional-kubectl-configs-zsh.md
@@ -0,0 +1,50 @@
+---
+title: "zsh 自动补全"
+description: "zsh 自动补全的一些可选配置"
+headless: true
+---
+<!-- 
+---
+title: "zsh auto-completion"
+description: "Some optional configuration for zsh auto-completion."
+headless: true
+---
+-->
+
+<!-- 
+The kubectl completion script for Zsh can be generated with the command `kubectl completion zsh`. Sourcing the completion script in your shell enables kubectl autocompletion.
+
+To do so in all your shell sessions, add the following to your `~/.zshrc` file:
+-->
+kubectl 通过命令 `kubectl completion zsh` 生成 Zsh 自动补全脚本。
+在 shell 中导入（Sourcing）该自动补全脚本，将启动 kubectl 自动补全功能。
+
+为了在所有的 shell 会话中实现此功能，请将下面内容加入到文件 `~/.zshrc` 中。
+
+```zsh
+source <(kubectl completion zsh)
+```
+
+<!-- 
+If you have an alias for kubectl, you can extend shell completion to work with that alias:
+-->
+如果你为 kubectl 定义了别名，可以扩展脚本补全，以兼容该别名。
+
+```zsh
+echo 'alias k=kubectl' >>~/.zshrc
+echo 'complete -F __start_kubectl k' >>~/.zshrc
+```
+
+<!-- 
+After reloading your shell, kubectl autocompletion should be working.
+
+If you get an error like `complete:13: command not found: compdef`, then add the following to the beginning of your `~/.zshrc` file:
+-->
+重新加载 shell 后，kubectl 自动补全功能将立即生效。
+
+如果你收到 `complete:13: command not found: compdef` 这样的错误提示，那请将下面内容添加到 `~/.zshrc` 文件的开头：
+
+```zsh
+autoload -Uz compinit
+compinit
+```
diff --git a/content/zh/docs/tasks/tools/included/verify-kubectl.md b/content/zh/docs/tasks/tools/included/verify-kubectl.md
new file mode 100644
index 0000000000..a587e26cd0
--- /dev/null
+++ b/content/zh/docs/tasks/tools/included/verify-kubectl.md
@@ -0,0 +1,62 @@
+---
+title: "验证 kubectl 的安装效果"
+description: "如何验证 kubectl。"
+headless: true
+---
+<!-- 
+---
+title: "verify kubectl install"
+description: "How to verify kubectl."
+headless: true
+---
+ -->
+
+<!-- 
+In order for kubectl to find and access a Kubernetes cluster, it needs a
+[kubeconfig file](/docs/concepts/configuration/organize-cluster-access-kubeconfig/),
+which is created automatically when you create a cluster using
+[kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)
+or successfully deploy a Minikube cluster.
+By default, kubectl configuration is located at `~/.kube/config`.
+
+Check that kubectl is properly configured by getting the cluster state:
+ -->
+为了让 kubectl 能发现并访问 Kubernetes 集群，你需要一个
+[kubeconfig 文件](/docs/zh/concepts/configuration/organize-cluster-access-kubeconfig/)，
+该文件在
+[kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)
+创建集群时，或成功部署一个 Miniube 集群时，均会自动生成。
+通常，kubectl 的配置信息存放于文件 `~/.kube/config` 中。
+
+通过获取集群状态的方法，检查是否已恰当的配置了 kubectl：
+
+```shell
+kubectl cluster-info
+```
+
+<!-- 
+If you see a URL response, kubectl is correctly configured to access your cluster.
+
+If you see a message similar to the following, kubectl is not configured correctly or is not able to connect to a Kubernetes cluster.
+ -->
+如果返回一个 URL，则意味着 kubectl 成功的访问到了你的集群。
+
+如果你看到如下所示的消息，则代表 kubectl 配置出了问题，或无法连接到 Kubernetes 集群。
+
+```
+The connection to the server <server-name:port> was refused - did you specify the right host or port?
+（访问 <server-name:port> 被拒绝 - 你指定的主机和端口是否有误？）
+```
+
+<!-- 
+For example, if you are intending to run a Kubernetes cluster on your laptop (locally), you will need a tool like Minikube to be installed first and then re-run the commands stated above.
+
+If kubectl cluster-info returns the url response but you can't access your cluster, to check whether it is configured properly, use:
+ -->
+例如，如果你想在自己的笔记本上（本地）运行 Kubernetes 集群，你需要先安装一个 Minikube 这样的工具，然后再重新运行上面的命令。
+
+如果命令 `kubectl cluster-info` 返回了 url，但你还不能访问集群，那可以用以下命令来检查配置是否妥当：
+
+```shell
+kubectl cluster-info dump
+```
\ No newline at end of file
diff --git a/content/zh/docs/tasks/tools/install-kubectl-macos.md b/content/zh/docs/tasks/tools/install-kubectl-macos.md
new file mode 100644
index 0000000000..bd5e670e86
--- /dev/null
+++ b/content/zh/docs/tasks/tools/install-kubectl-macos.md
@@ -0,0 +1,263 @@
+---
+title: 在 macOS 系统上安装和设置 kubectl
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: 在 macOS 系统上安装 kubectl 
+---
+<!-- 
+---
+reviewers:
+- mikedanese
+title: Install and Set Up kubectl on macOS
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: Install kubectl on macOS
+---
+-->
+
+## {{% heading "prerequisites" %}}
+
+<!-- 
+You must use a kubectl version that is within one minor version difference of your cluster.
+For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master.
+Using the latest version of kubectl helps avoid unforeseen issues.
+-->
+kubectl 版本和集群之间的差异必须在一个小版本号之内。
+例如：v1.2 版本的客户端只能与 v1.1、v1.2 和 v1.3 版本的集群一起工作。
+用最新版本的 kubectl 有助于避免不可预见的问题。
+
+<!-- 
+## Install kubectl on macOS
+-->
+## 在 macOS 系统上安装 kubectl {#install-kubectl-on-macos}
+
+<!-- 
+The following methods exist for installing kubectl on macOS:
+-->
+在 macOS 系统上安装 kubectl 有如下方法：
+
+- [{{% heading "prerequisites" %}}](#{{% heading "prerequisites" %}})
+- [在 macOS 系统上安装 kubectl](#install-kubectl-on-macos)
+  - [用 curl 在 macOS 系统上安装 kubectl](#install-kubectl-binary-with-curl-on-macos)
+  - [用 Homebrew 在 macOS 系统上安装](#install-with-homebrew-on-macos)
+  - [用 Macports 在 macOS 上安装](#install-with-macports-on-macos)
+  - [作为谷歌云 SDK 的一部分，在 macOS 上安装](#install-on-macos-as-part-of-the-google-cloud-sdk)
+- [验证 kubectl 配置](#verify-kubectl-configuration)
+- [可选的 kubectl 配置](#optional-kubectl-configurations)
+  - [启用 shell 自动补全功能](#enable-shell-autocompletion)
+- [{{% heading "whatsnext" %}}](#{{% heading "whatsnext" %}})
+
+<!-- 
+### Install kubectl binary with curl on macOS {#install-kubectl-binary-with-curl-on-macos}
+-->
+### 用 curl 在 macOS 系统上安装 kubectl {#install-kubectl-binary-with-curl-on-macos}
+
+<!-- 
+1. Download the latest release:
+-->
+1. 下载最新的发行版：
+
+   ```bash
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl"
+   ```
+
+   {{< note >}}
+   <!-- 
+   To download a specific version, replace the `$(curl -L -s https://dl.k8s.io/release/stable.txt)` portion of the command with the specific version.
+
+   For example, to download version {{< param "fullversion" >}} on macOS, type:
+   -->
+   如果需要下载某个指定的版本，用该指定版本号替换掉命令的这个部分：`$(curl -L -s https://dl.k8s.io/release/stable.txt)`。
+   例如：要在 macOS 系统中下载 {{< param "fullversion" >}} 版本，则输入：
+
+   ```bash
+   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
+   ```
+
+   {{< /note >}}
+
+   <!-- 
+   1. Validate the binary (optional)
+
+   Download the kubectl checksum file:
+   -->
+1. 验证可执行文件（可选操作）
+
+   下载 kubectl 的校验和文件：
+
+   ```bash
+   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
+   ```
+
+   <!-- 
+      Validate the kubectl binary against the checksum file:
+   -->
+   根据校验和文件，验证 kubectl：
+
+   ```bash
+   echo "$(<kubectl.sha256)  kubectl" | shasum -a 256 --check
+   ```
+   <!-- 
+   If valid, the output is:
+   -->
+   验证通过时，输出如下：
+
+   ```console
+   kubectl: OK
+   ```
+
+   <!-- 
+   If the check fails, `shasum` exits with nonzero status and prints output similar to:
+   -->
+   验证失败时，`shasum` 将以非零值退出，并打印如下输出：
+
+   ```
+   kubectl: FAILED
+   shasum: WARNING: 1 computed checksum did NOT match
+   ```
+
+   {{< note >}}
+   <!-- 
+   Download the same version of the binary and checksum.
+   -->
+   下载的 kubectl 与校验和文件版本要相同。
+   {{< /note >}}
+
+   <!-- 
+   1. Make the kubectl binary executable.
+   -->
+1. 将 kubectl 置为可执行文件：
+
+   ```bash
+   chmod +x ./kubectl
+   ```
+
+   <!-- 
+   1. Move the kubectl binary to a file location on your system `PATH`.
+   -->
+1. 将可执行文件 kubectl 移动到系统可寻址路径 `PATH` 内的一个位置：
+
+   ```bash
+   sudo mv ./kubectl /usr/local/bin/kubectl
+   sudo chown root: /usr/local/bin/kubectl
+   ```
+
+   <!-- 
+   1. Test to ensure the version you installed is up-to-date:
+   -->
+1. 测试一下，确保你安装的是最新的版本：
+
+   ```bash
+   kubectl version --client
+   ```
+
+<!-- 
+### Install with Homebrew on macOS {#install-with-homebrew-on-macos}
+-->
+### 用 Homebrew 在 macOS 系统上安装 {#install-with-homebrew-on-macos}
+
+<!-- 
+If you are on macOS and using [Homebrew](https://brew.sh/) package manager, you can install kubectl with Homebrew.
+-->
+如果你是 macOS 系统，且用的是 [Homebrew](https://brew.sh/) 包管理工具，
+则可以用 Homebrew 安装 kubectl。
+
+<!-- 
+1. Run the installation command:
+-->
+1. 运行安装命令：
+
+   ```bash
+   brew install kubectl 
+   ```
+
+   或
+
+   ```bash
+   brew install kubernetes-cli
+   ```
+
+   <!-- 
+   1. Test to ensure the version you installed is up-to-date:
+   -->
+1. 测试一下，确保你安装的是最新的版本：
+
+   ```bash
+   kubectl version --client
+   ```
+
+<!-- 
+### Install with Macports on macOS {#install-with-macports-on-macos}
+-->
+### 用 Macports 在 macOS 上安装 {#install-with-macports-on-macos}
+
+<!-- 
+If you are on macOS and using [Macports](https://macports.org/) package manager, you can install kubectl with Macports.
+-->
+如果你用的是 macOS，且用 [Macports](https://macports.org/) 包管理工具，则你可以用 Macports 安装kubectl。
+
+<!-- 
+1. Run the installation command:
+-->
+1. 运行安装命令：
+
+   ```bash
+   sudo port selfupdate
+   sudo port install kubectl
+   ```
+
+   <!-- 
+   1. Test to ensure the version you installed is up-to-date:
+   -->
+1. 测试一下，确保你安装的是最新的版本：
+
+   ```bash
+   kubectl version --client
+   ```
+
+<!-- 
+### Install on macOS as part of the Google Cloud SDK {#install-on-macos-as-part-of-the-google-cloud-sdk}
+-->
+### 作为谷歌云 SDK 的一部分，在 macOS 上安装 {#install-on-macos-as-part-of-the-google-cloud-sdk}
+
+{{< include "included/install-kubectl-gcloud.md" >}}
+
+<!-- 
+## Verify kubectl configuration {#verify-kubectl-configuration}
+-->
+## 验证 kubectl 配置 {#verify-kubectl-configuration}
+
+{{< include "included/verify-kubectl.md" >}}
+
+<!-- 
+## Optional kubectl configurations {#optional-kubectl-configurations}
+
+### Enable shell autocompletion {#enable-shell-autocompletion}
+-->
+## 可选的 kubectl 配置 {#optional-kubectl-configurations}
+
+### 启用 shell 自动补全功能 {#enable-shell-autocompletion}
+
+<!-- 
+kubectl provides autocompletion support for Bash and Zsh, which can save you a lot of typing.
+
+Below are the procedures to set up autocompletion for Bash and Zsh.
+-->
+kubectl 为 Bash 和 Zsh 提供自动补全功能，这可以节省许多输入的麻烦。
+
+下面是为 Bash 和 Zsh 设置自动补全功能的操作步骤。
+
+{{< tabs name="kubectl_autocompletion" >}}
+{{< tab name="Bash" include="included/optional-kubectl-configs-bash-mac.md" />}}
+{{< tab name="Zsh" include="included/optional-kubectl-configs-zsh.md" />}}
+{{< /tabs >}}
+
+## {{% heading "whatsnext" %}}
+
+{{< include "included/kubectl-whats-next.md" >}}
\ No newline at end of file

From 1ea5f5ee3168b0574cf4eac957fded24967c409d Mon Sep 17 00:00:00 2001
From: buptliuwei <buptliuwei718@gmail.com>
Date: Thu, 11 Mar 2021 11:58:00 +0800
Subject: [PATCH 168/788] fixed  demo deployment create command

when use  `kubectl run source-ip-app --image=k8s.gcr.io/echoserver:1.4` . it will be create a pod, the output is: `pod/source-ip-app created`,  but the svc will find `deployment` when use `kubectl expose deployment source-ip-app --name=clusterip --port=80 --target-port=8080`
---
 content/zh/docs/tutorials/services/source-ip.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tutorials/services/source-ip.md b/content/zh/docs/tutorials/services/source-ip.md
index 93c4711363..f989e93c70 100644
--- a/content/zh/docs/tutorials/services/source-ip.md
+++ b/content/zh/docs/tutorials/services/source-ip.md
@@ -35,7 +35,7 @@ Kubernetes 集群中运行的应用通过 Service 抽象来互相查找、通信
 你必须拥有一个正常工作的 Kubernetes 1.5 集群来运行此文档中的示例。该示例使用一个简单的 nginx webserver，通过一个HTTP消息头返回它接收到请求的源IP。你可以像下面这样创建它：
 
 ```console
-kubectl run source-ip-app --image=k8s.gcr.io/echoserver:1.4
+kubectl create deployment source-ip-app --image=k8s.gcr.io/echoserver:1.4
 ```
 输出结果为
 ```

From ff2da14763cc2c9985faa0faadeb33a2d257c24c Mon Sep 17 00:00:00 2001
From: jralmaraz <jralmaraz1@gmail.com>
Date: Sun, 7 Mar 2021 18:31:32 +1100
Subject: [PATCH 169/788] Update README-pt.md - Adding OOM to troubleshooting
 section

---
 README-pt.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/README-pt.md b/README-pt.md
index 0992f6c045..458c1e492a 100644
--- a/README-pt.md
+++ b/README-pt.md
@@ -144,6 +144,15 @@ sudo launchctl load -w /Library/LaunchDaemons/limit.maxfiles.plist
 
 Esta solução funciona tanto para o MacOS Catalina quanto para o MacOS Mojave.
 
+### Troubleshooting for Out of Memory
+
+Se você executar o comando `make container-serve` e retornar o seguinte erro:
+```
+make: *** [container-serve] Error 137
+```
+
+Verifique a quantidade de memória disponível para o executor/runtime de container. No caso de Docker Desktop para macOS, abra o menu "Preferences..." -> "Resources..." e tente disponibilizar mais memória.
+
 # Comunidade, discussão, contribuição e apoio
 
 Saiba mais sobre a comunidade Kubernetes SIG Docs e reuniões na [página da comunidade](http://kubernetes.io/community/).

From 863aa080dcf0bb947459176cc21438a5ff49fdd6 Mon Sep 17 00:00:00 2001
From: jralmaraz <jralmaraz1@gmail.com>
Date: Wed, 10 Mar 2021 13:17:56 +1100
Subject: [PATCH 170/788] corrections for OOM

---
 README-pt.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README-pt.md b/README-pt.md
index 458c1e492a..3525302e8b 100644
--- a/README-pt.md
+++ b/README-pt.md
@@ -151,7 +151,7 @@ Se você executar o comando `make container-serve` e retornar o seguinte erro:
 make: *** [container-serve] Error 137
 ```
 
-Verifique a quantidade de memória disponível para o executor/runtime de container. No caso de Docker Desktop para macOS, abra o menu "Preferences..." -> "Resources..." e tente disponibilizar mais memória.
+Verifique a quantidade de memória disponível para o agente de execução de contêiner. No caso do Docker Desktop para macOS, abra o menu "Preferences..." -> "Resources..." e tente disponibilizar mais memória.
 
 # Comunidade, discussão, contribuição e apoio
 

From d65300986f6773d304f84943137f9b437c02058d Mon Sep 17 00:00:00 2001
From: CKchen0726 <chenchangkuan@huawei.com>
Date: Thu, 11 Mar 2021 11:11:39 +0800
Subject: [PATCH 171/788] fix spelling mistake in
 ./data/announcements/scheduled.yaml

---
 data/announcements/scheduled.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/data/announcements/scheduled.yaml b/data/announcements/scheduled.yaml
index 1d5b330ac4..2eec2c1777 100644
--- a/data/announcements/scheduled.yaml
+++ b/data/announcements/scheduled.yaml
@@ -18,7 +18,7 @@
 #    title: "Sample 1 announcement"
 #    # title is optional
 #    message: |
-#      Message *one*.  
+#      Message *one*.
 #      [Hyperlink](https://en.wikipedia.org/wiki/Hyperlink).
 #    # message is required. You can use Markdown.
 #  - name: Sample 2
@@ -36,7 +36,7 @@ announcements:
   style: "background: #3d4cb7"
   title: |
     <img src="images/kccnc-na-virtual-2020-white.svg" style="float: right; height: 80px;" />
-    <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=kuberntes.io&utm_medium=search&utm_campaign=KC_CNC_Virtual">KubeCon + CloudNativeCon NA 2020</a> <em>virtual</em>.
+    <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=kubernetes.io&utm_medium=search&utm_campaign=KC_CNC_Virtual">KubeCon + CloudNativeCon NA 2020</a> <em>virtual</em>.
   message: |
     4 days of incredible opportunities to collaborate, learn, and share with the entire community!<br />
     November 17 – 20, 2020
@@ -47,7 +47,7 @@ announcements:
   style: "background: #3f0374"
   title: |
     <img src="images/kubecon_ad_eu_2020.png" style="float: right; height: 80px;" />
-    <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/?utm_source=kuberntes.io&utm_medium=search&utm_campaign=KC_CNC_Virtual">KubeCon + CloudNativeCon EU 2020</a> <em>virtual</em>.
+    <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/?utm_source=kubernetes.io&utm_medium=search&utm_campaign=KC_CNC_Virtual">KubeCon + CloudNativeCon EU 2020</a> <em>virtual</em>.
   message: |
     4 days of incredible opportunities to collaborate, learn + share with the entire community!<br />
     August 17 – 20, 2020.

From e83eb6ae2b66c62aa152273fad1621b3587bc673 Mon Sep 17 00:00:00 2001
From: Marcin Maciaszczyk <maciaszczykm@icloud.com>
Date: Thu, 11 Mar 2021 13:15:15 +0100
Subject: [PATCH 172/788] Restore images in Kubernetes Dashboard blog post

---
 .../along-the-way-ui.png                      | Bin 193956 -> 185770 bytes
 .../current-ui.png                            | Bin 656592 -> 156166 bytes
 .../first-ui.png                              | Bin 60664 -> 44374 bytes
 .../index.md                                  |   5 +++++
 4 files changed, 5 insertions(+)

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/along-the-way-ui.png b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/along-the-way-ui.png
index c105d47ae42f4addd5d49bfcda07d96bf86fa6e2..e83656a624b22db66ef9f3c196f112583ad474d3 100644
GIT binary patch
literal 185770
zcmd42b9|jo6E_^&Y3wF#Y+H?u#<ovv+ia|+v2EK<V>Gty_w>H+AD`#>|2-$yXE)dG
z%+Bo2?wOtaZkW8R7$O`l90&*qqJ;PtMGz410}v3fO&BoX8{uZ0Nnny@tR`V1BLhMO
z%)@{{fuezc19PCjF9;|u2;_hAARsEBcz@<~Kq>xL2gnAL5#%>B4B%rDVh#fFzxtlQ
z^!G;`_y9TmH<dScHMX+WcLdlI%i9Bpndlhk*nnkV-@*Q%13&l<{zo2c6Icc^gst-f
zn84bKt2=;zz@z_uKta+nuz|W*m@BI}s>w)m83L^7^o;-p#&oXMw!f)BcwD)FS!-iQ
zePUN@D;ozcSKg2Rslf%z|9(yXk@!DV94&c2s>#R`3j^$piP?Y>F?{5MBPJ&1u{Sc|
zQv4$NKXTxIydTXR9c{Vj>0Ml0=v<iT0QRQzjGUaD^bAb&OiZ-E8ng~>HjetPv^EZ;
z|7G$ApD)G^hW6&Rj^+Rx;@^Dr4FFD#ydOXQZs^a?f8{iGHUFz68;Ad?1yqp!cL_Zs
z9RvOUjSQ&lpYr{K%2nU?|4HO%Zu0+V>vze2$^O$B|CN#Fw**}O8ASCj=GMkG4nTeQ
z*qPaR{v+G}QSz5|f1_0Ui;|Inf#L6@e=GVMDNr*mVSD4>R-+66Sn>VejEIN+-?je5
zKn6JCM*5EWU-TV~`Is1(7-<=pX&D)n8JW0%f6Po8|K;$HYJX$#yF0kl6pbAKR!+YM
zk&m4TC_4lFZw-Jd{2#^tCjE=@tBtuMAJhLx{`LCbRO)|~|KA$?d-1<X<?PLkfu{H$
zSsDM=+TY*(uRag`Z)^OUb^h1%|MM1T`+RV~Zuw&#@xjG{xY>b#5Q9j35ma^sJ;{Xh
zCHT4YR{5+Q*4m2V2ZKs1fJUYkhe^Gh1V;N(`fUU{Up_~-Sm8U71`Ht$ED2d)Y+zGs
z>&mjz>-$8;+VHpynsb8o;x`xf=2T9H9p1^YJHGwQeXqggcj#7Hr%v_qB*$R6d7JuW
z>!is3cu7-hm54QyU1c`Sd(0sie_vu^7#OfWlCHx@-(1<KMh%*aE9rSOIg?Ch%k+V0
zL2d0djb@~z0)AcejV5Z0XwzSpvLP5}bT{p?l|hblf8*dwY^y;kuiB@r;LLN3BSlt0
z;nAov0srh)fqy~`vnW(uwxZu|==f`P_ws)KOOlN&KGmqJwo0L}olDMn;q5Eg0Q{fQ
z{FZGF70gL!)tarpv$wiz!TfZ2hOw>iem?HaGux^6Y)+H8w|2g7h0RWjZHm3F)zXoF
zGB0R)!8DNlTt;w%SGKgbg6BqP<M_Z`s__pc|EqE#CD{D(&!$`t{aKy6yK#KdXZH%i
zJxfJB-6|43J3+_0qs5Lb7AHmXh)L_y^<}4iy^TjNo)bB3G!Ii}qumB0yTyx+m9GSG
z9oYpgi7B-I=mYs<m^oa#!O>_QsFCPSPXW{WA@3~sC-*e=s!1)3^fn4EQ)^Ej3Ec6>
zSsT|`Sn+W+gW<9j^V5ZHCmo_mi~vu*80(SvgUH0o7%Z^};Z)DgsDrP4Y(g8BuO(6;
z|5AhitX^OhmOn^eY+F6W<6XAG!NY9;p>NbCy_4_ma%*uefBIDfr*U+P>7#tkt%f+b
zVp?*@wmQTacx#i`-F@WIKBB8N5pB4vCg!uJQyay%Zk);<O$lMr^ncifFYyJd=r83k
z?j1ZCDX#R>r2)5Lkn^FpbrZ-t5xnhlPr}qzx`s-MZToNJQGPYYQ3%X1O9X7xkZCsw
zl<`6b9+PYpjNt8tP><s1VWr+LT3WZ&HD>e24O=;t2fr*mn~jeCshF-Rglt$7x=@<9
z33r|CDkBv`UTdpehu2b4A3RZrij@>Tl?*tg8{y-8T)|2An!+ft#YPi(v$NRDsiHdZ
zk}@1F>9hw^BBFb_bs9$}W1q{ZEq|c*;oie>w#d|ALMW7KyVXBi^zT|g_e&r@v$g3Q
zbRUKEV+?2;hdZrZ=o`kawbulr<(3zk+T2P@wloTp_%u0&bDH_yRJw`B+%qXnHCwmd
zr)}qX;ISMpP5rc<pMSl&o(0H4uUaX0P#JvVl_-Z6=Qead8xO7_{fDg(!@Mkz+QuIe
zC!X<GHXnNOA1<oe$h;h$#=9MF#i>E<Su5UY%~#m<wMPpD6DubxO+QJd+jp3{C6_=J
z5K3tzS;@v4LFqorkiMv9ora9?voshDc7J$<cd3NP#E1LGZ2H|2(-As{3svSP!Dr)u
zwqxhd?;Eutg|rc(=;|=+%Z|jQl1r>I`#W#(2snn4q&QcT@(J;h5Lt?8N=SmHrrT#b
z=Q{M>TWj%enQQwuSHEhpy2pH8Whl`<KtO;B3ZS6;Hz^A5l0bEVpDs$`BUnZBzhgHI
zMoP>ha4zj$91W0hXm0wkCpwX;CS-Ru@W_@uC|NSdlZ~h|p{aZrekCd62#Xju+n10;
zDHZA<lRdpILLGSCoLDL=A^G<<fKB<m^FhdpQh{fG<~LkWiI!)nwNaHsbubj}MvE}5
zQK#m_*I&P|ccka4^+?8y*0I(e$K!%>wA+8S%6;~Le`&CORyuYrfZ?Z&GKw3WMU;6M
zaFZLO&ivK0koir7+0vP;wZXZ;@<^?d`jDigo(=7bLEainI4{O2A~kx!@RhK=%G>>`
z+fd}+#VX>5nM-LBo*|jdv$5Kk>(-QY!53HPf!>qcIcRS8qHA>;7*XTN*Qp33D-c#1
z{BDy4$lN}j>nSeGoG{X4wZE7SF)R$>(?r#5A`x^Kw-<|_ZwElDHmV@4_kGErPIKL1
zukv|#n##(Wk0P*aARonoD-8Zf9atmImNo>z!=?g8zJ_y@X`A7B&Bo73E!To&PVp~;
z%RmA3xEAE+(+?UUw_`}S%@=0g|0(<$YrY;1r}_2mHWISHdorbsTMRmZa<m8WQrOsB
zXW*vG3337Pp0tEhEiJ2+jZi`@4Rf*aOpbOb#kX6@Ta<gj&GZ+bv1~buLoJQ7wRIoh
z!ixWMlHJbRQP*x+pX^(nNiWZ{TRTtsJz27q<o7X7k?=9wyezVyUE=`Hu(}{SO3pAu
zRo>Ca(uupAp$#vNsN?o^o5g}1=|UK-_RK8o&wo>+%ZD3`^}Y!Ypw+WB(W<bKme@62
zvG_eFTyX2^p(#FIes3NgJX3=sl)BxZs!~K4+Eh0~qe0KhV0iC=77NPl>ui!2r3F;m
ze3o_Q0uua<+4f7fv70q6cf+|{oGu#F%P3X^+quk9a=B3P=Ah=?C)6=Vvoqx<9MW^{
zwX7ScAelUxHpZh8l8$$;LdWswz_W$|0u!bs2lwVq2L;=cItEJ&1gKc|CO-^0e%~ln
zb;>8Yf3Bxphrt3-VcZ{L@3Wk(4t=EoYstaQTkj_GY0`kDboZUxty5^FrggEqYegh4
zpS$g;xqbx}1`aQU3Z>940@|0E@!|Y*bn1rBcI&!66+}sslq}4hPjb@@uM&Oa^3pN^
z<_=Y4wS^S34Pm*0Q_f8^<@OWu&qnOl))E{68w9<wX(KbSSgrAfg)Ajzm&GZLHA;_L
z&Vkop&(^vAJ3~G`HXr=Zv9^?xcy)R5=KeRYf6uvDP|%dI;cBdxlAcc;FVtGh)*&t8
zn4iMB#k`BiYLDfqRP}pqNmtxyQZw5)TJ&Awhvm^EjP@%da-1j;7V)D=VfFQPy<?(;
zZrECp^NEuwY|XCTG8jGufhMZeyvX)s0vdx2aU7Yf(-$>asy@Y=2%JcKEJ$fNQZX(c
zz7<fK$l;`Pp4&eVq{0yLS8vgy+ifYYuyxG6BCWMPqj<`2D^YZ~z9@nlJbEpH!w^+U
z88?CD7pQW)W$?+8%ltmIy7+ZKUai_NYlizsSp<^zOFo?a-)0EVF?i6I^Y`hUA|oGE
zwePnSUxgKt(bQXU?YPIxmzY)?Hls88m`E@`D-0>yeH~lX`H(x%>)`>rb;DsTSczLb
z1#nmzCQKkn9oueXZ`!Zn5%JlK!5pp9v2o<cV0vWovQK(Yu9=EOs&OKPUQ2R#lI&f$
zsgk6pVUT~nU=g_Q)29lM-!F1cb!00)QYMTHg5L7Z@0>IN-8>L2VUn@Exc2n_35Kya
zdD?>=v6E7g0ehtu5GAW<{>C<EYqShX{N-H>jB3BZc;h7FC#oEXB1YzHz*(xz&k!6&
zQCZ8+*m5R^NyZ2&`6V~furfCv$$LGlQ#JCdcjf<By-^@!*&!ZSLv&e(8x!(cMH_m-
zUu-n5p`2;WD-<+~J;Pz<q^ZDj0#^hx_1Cj$V@NC}y}+sZ(ld@v(>Ovu?rL;!b4yQ=
zySwxq$E+znT#*}Z?~8>p_HTWLy!*bvR#p3~x`5?qUR*Oirh!4KJ?27(gmidzxJ<=l
ztxmO}t4<$%1f?yxpdx!dgMG}Sc2dkFUawfR$iNr(N&1c(3lix=;X7wXB*eGID1^wP
z^VBM0E*lky2AQvm%oWF$!H)y7$Z{G*H;fqYktdH{Ya2KOWE)7Im{t3AUs*hxq{9?%
zpzf__`z}wf!C$$#Hb*E<bkhl+%<LjL8Q^1P?XMxbNqAQ)Wsun?YDw{hzT7-C&Flp=
z5b0(ja~RdUckc>TIdLWm9X`eg1E-&KJ4$9k{(dm(8)&AM7U@S{P@k<HGp1DQ>8ZC`
zOSm*llmtEKy3W-lUyQj~qNH&R0%Z3xviHOJk;hjl|GZ<+iT3_f_JWYY%Fs&-O_@oO
z*Y=f`Gi(B@pW?jWpzmSuAI~SFs=iF)@Q)UfzyIA=4*=;rWN0x7isoO{Xac%J%izp8
z7x3(6P&el_f@iICh<pzQ)2sEcbC?I8kA@3YV+P>;kHUECZA8aIxqEweh}}Rdt=A?X
z_)MB|&CwT_vc_&~&JV3@FXfU4`809F6uj>91r_Pgy4}_|#aTZjh}cKvW@2RhXvQ2p
zVXfAEEnM7hxH;b8DrF{gDeRRMa;-J22bWoOCay1}5Ydpx9t|(hGCz)~a8M4gAkqUR
zQhWYhQK9Qi-KjryH?bd=88WAtuUGoY-Ml%4ox49QI~p8qQ=T~vhnUQfi_I3vH|sGB
zLe$6<PYCmrnF~gc&PnLi9;n5IqGNO5O`!emAS`(NIl6u&VNM@2#<TUi@bwgPf)GcW
zH5=X}&QpU6D}5a_%KZurBxoOdlJBHwuc%vtgNKLSx><Od+sXd@B|{(hBv$!avEp*?
zvPYv*Qf;1kBdNMH+=NNAuCA^?=KFIILQU2%wvWPyZuTyUA@S}JJzHx3iLO>Ma#m>r
zd2@}|GUxM#!oxGW)OtFB9UgD?#^7@)VAr8t#YW1$nY+=J=VAN>xVey%p$O>P4#v9o
zs0XkV|GC)A(L)e}LwbMGRw08fxfUU@O@qIjje$r`5%x^`j3`gGeK4H*X>VeBe>7&~
znI+o(K1O|sX6#hyoSCcdqNjt95VDP%TM=`#hofHNEA{?eueVJ-I&f#FpxZ7VT0*{F
zWO`5}r&TIyYALYFh`cO0M$yI)FYqf`2O>5a7pZ2cBnO;!ygUBp4xEyOu+j(fGv1h&
zDuvK0Ly<+V(&eD#7JN)b4cSw=YWTsUfVuNP33i{CJp27zzCs>H!A7#mjb{-{t+j56
z13Y=&oh`+7AS)rO>o_via_%V6>iFx>c#zEXX{UGdL*|lxdzbGvRqDv}vG}*okw%yX
zoSK4NZ<EN98yPq`-pMMmi>IN?JhiHW8>vwaTq{LgcU|?5)@h6HS2l->a=mkYPyA1(
zLW-u|H7ug8biBWMO}1~p_FZ-GV@<`jQgkD<Wh}_juAn`>C4|@}32*s0%e?iQx<NZT
zSudvxiKAb{1~L0?zZ{0;(@P`fQXVbOJeJ~J0f=zaS{VJFU)Bqet`}~XC-Dr2W3qYM
zwgu8|<5%>pHOxBC!-?nKvEC`OTFAn|OvPOm-n|P!rOISll|~!L%$&|s^rlQ-`{DbQ
zFvY?I1s-mO#vyr7h{dKt;D2N=y&ELn*1-Phfp;ASfPDBI_NKy&w|$!?57`zHe5MLX
z^bubkc{K`AF)#)hZjkXgScn6@SgPO~a-3qh%v53yG|$fk8GXqIx5K*>JSK=VC8bMB
z(lXSm+$XuXx1EFOODyIV1tm`2C=i|@SWyFpo$%M%*49f`ZwC4_Y2(o0JYkw{Wv&ID
zq%;jg!8kU&>qXVt8Vc@W_~x0AZ#kdXCh)5>E7V9hR>hNlmc_K<c-ixrb4bT%mIsqt
z2&|@7V>StMxe!Q~uI{r1`Gawpk`9xKjW&M%b*x23*w@BOJyX`@eV@WJq6(1fcy(*?
z5nB*3eQF|1za#U$R79=Ny@exF#0>sw+7!My{?N9DkqKVZYXaNPRAd}{uh_Bg#4W*{
zOK(51$hyY*>vIe@z^R`gx@1QVkSLo%wE5`U((`lWMn;0~xsgBS0*un%M%7v>`jura
z-?;mB|FMuhCT^|9)Dr7^J0t1KxrA|wOxfwn?d7{Cn)|~Z*vn06Lvqn3g5i1=&fETj
zV$B&tlRIp=``q`{O&{;V$XKoQ%erg5G*zWd%Jaol*mtNMKkYVfE)N)(x95l0*_<~k
zOh9<&iv)HUJSe!sLVwQHYUrw_XOr%2Ax&C`p)#Kw^4pu>VV@i7ym-?ja2v(XnS(&&
zc|Sh^+!8~OJ@Cx`m_eXMd8;^ZyN&Ma<fm$NZsJdp_mTZ6R_v}ON&DB1=|K@y{-js0
zs|xAmAfUxvZ$E<lGcic}O7lHNA<z-s<k`jQbRy-BU+YgtzkutnWyV~@rR(G)&<Yu0
zLg5+8`G_|l#d%rb3^?_d?K)#Sm->Mk`e|gTij$X0nC7}|zM@>atr9)?V9%?#o|`0g
zX)h>x{WQafYpI34UlA0||Grk+aPX>JA`>6ET(EH-$)6mRR3HI`;}`1LO7~h#4uK?R
zO*VA*^)dm2^QWbQ)v=}0as!za<UA5{Tk?W{>uNE)`}H3m+KNo^lE;%iv3@l5qSMU2
ztH4A&>C>!OO$&_Pt06FfUK2Z)q3in`<UEf|10Fq$V-ESO(Zb2+kpEFZx<RD@7sbWt
z6VuWFBo#iWpOXSbE@x?jur5{Ez90OjRwQG|k4L-3*0`J(0{6!-u;g7V*E4fd$ILyo
z8l3J8P9#XMPgWZ|gPrb{27@^thH-|k%_u5P#O+e5(u^Rne-TEQxH+IB5SAms6Q3UO
ziF|015?6BQC;s&Qu+Ue-ZW@$RXfYOU7qj5Q`KHW#7e2zY>S?RaMW*`nq<tj1-%}gu
zC#^fB`ik?5e$a4S7fea&(t@(bVO#yEsC7fJgNhc8S~-=*QpSN>KAul2E%=hzSXN{k
z$L0eew=bJz2XkxF0UWPa%)IQ8o&wXZE%$V;sRoO!Z90?98LwC)c7SXcca~QTcy+Xa
zTUV3O0EAA%i?91ze>Q09EpQ=wKUsc3#`-eUF)17a44ti~qw5pX+2q@Nm0J31`}wO*
zNT8Z_m!uvo%w_NZM8VTxet?_J<>j)$|MEH)#*74`>L;of&%Jh>%P!zvn3I_7VjG}~
z(v>f+f)LnIbvL+9qu!uC?eLNU0kQ7r$Nyot%hc7E-&^O~0~cw?AgY<|U9ad_2aD}=
z>UzLUYBe$SgPzXLWuw$I)%)W_Poqf?5uv94C=p=WMRfmqW^9ybT^E01>!$5JoTq7O
zQ@+Jmn0)IrWDt`b@T=*PNB8)%^WuwBuh+vz_7lk*aKfLH&#zJe7y0ru5&JId%MTla
z$<|8=CrePpB7zDOUPUZXWP!xeJSml4m;(!uci7U)EKVm}DL+hA;AzZRP6Lhgk+tny
zXJOvshVd-{gWW8sISiWfQ1v3I7DB5(xs_<Yq@e|Y*o8QjV5I05nViyC+V)utz-}!d
zUSE$Ng{;Q8b4l0hXGNum^NfhIQjk$??Jw-)wg{#OW|sjDs8A<oICsz#5z<-W3^seL
z?Y@)Eww620fKmHZ6_!-9%|jVNx!dt1i_~}^<zK!ExBeuJ-{zU>HVG(FMe%T|EgjY`
zT<0*z7J(s9>@oOIyTazga8EsXr|p>}S1uaai2}nb;S>rDG7x^Iyi$^!)X<X132}QH
z>N<kAzfye|U)y#t?F8Aec@L9>yT76ac4<ZCLL#K9MJj8DrFebD*exv*$p}HzA*(+N
zhT+|n-B+6+oVV0`Wp!>Gz_YWaTTk14<j@_=G0J9K&*<VHzl8c{(8g~T71Vncz_H*n
zY21y)N9SQ-0HaHmhvW{oP(sXs`Jv5>=wY`If)Kggul#j8K+)dh#{B$cjW%ebmCSWx
zHYCSi*xjSULqTt3h9c&Y<d{ACyz}w}B!ke+mPG*xd519Ps>nNwI^;no4cGfI0fq0&
zhqeWTYoCUX6X}dm{Q>Ce^c|z3Zq8aKZHH*kJnJhPtFbXg_c_TCs5QBQt_K4zQqT`N
zDY!y-kr_>@-1~Cb)IxUS37{IN=FMI{X@Nvdg7gFjufspx9&X>?vf?LyDcv_&olhc;
ztD}d+y<I(d&Nz*!;dq!?!GdcqF1)S)u(H<HYF(9P6eo-lFXd@Mw?=1$I2gmGzJ?OV
z4Ut$pT!WfUZr&IIz7=T^^BM8fJ1fokHZgzx5+!|P%l(Z?Jo%f?!gres?Y7RL4Uc+<
zdh4>llQy{zagFAmY4GpDV(x;kUuX*5>zr5tMJ0^rdy@`PNr>(8a;$+QsOAe}ehvg)
zXp9q*GRC%FQqI=5Zq~Py7gUgv%!vK>`tY~Noae?(zjha7mxm%Ao|y<X*vW<825?qh
z@i{>2^WR@Yh<$~*{1w^>nzhV8S&{E9l*>-4n#)zxw7!?R8XZG5Cqr$;z@_T6a3Xyb
z3LP6o!<ts4*&W`Q9p2&4s(hc4(^oyFnGJ*U<Fi*9b&rAGZ~;WQ8vU3KI&?y}wqg4U
zx7)A&?KnI!HK2dyeYQR2w}qg(L$MN#D~R;hYV*B=v}=-=<>sopLsJYA=BLMAF3P8H
zPV8m7S^8lXia?X9UO9d`qo!x6?7*QfGj&~jZgy6B3ov!q_jDxDSed&b`u;E2u!u4`
zDQKS+IKrNjY$Sd(<{&o_mEmf`*?7S0ob^%~U~Pu`ynm1E;+IVftc_qJvwgoeJAJU#
zKZ*w>6n$KI&UdZ6d=bhI&0kgO+v>Sm&tP~I(YwG7w)L%BU^o=l+U4w%2{VC0-rL?r
zs<pasF9S@#AfIgEE-nRaf%gcjo{vX$aFa_m{i+$iY_{As^UHc;=&SKNoYc);Y@r`+
z;<5cM2ae{%n#%VQ0ttKOrh=M`ctr(m2AQ}`!)yfC#5W8#^z2Y4rdeMWRo>D^5YbeT
zXLd3*=2k@0-bq$2txTq=ElxME8=yRpf{AE-p@$G~4SEp$N*P~y{qg5o$PB5w#{j}r
zT>ZtJf}l0$!`orGK|zRg5cN1E&lyJ>svpY8<M<}u%e<Cy9_yIy2Ay%-SW^4pwY!Hr
z(`F&R2t-vjA}S2B@l>wQ{noEcEXcPD6Ie?oj48d)x|B~+0^9yYk5>vL%^1mI<;;;f
zbM3h<QHw}faMg9+^H_ewe+R6mpG*%3N)EE~!P`~J3u)VEwP$rtT8sB6BkQ)|^d4HM
z1u11%J!u7{QXA0A!rHmSJ8Qr87n5UHyo%jkb#l!LeWX3X%tGvkNv=}Ud1VQNi7W-#
zRy8TYNs<fyY1^@ZR4#_c>{jhAJJX!MJuwaHuVl`2b{(oD_ZAVAg!@+vUj7`V>phGp
z=><O-=|ZR`tdI0NQoNpg@V3UNdXWfAu>~q7jLemX>$TTQji1hp`S;pS0FJ{=qSktO
zCu0=#6vE{j9qSC9{gC?Jnk0b4+wGcS6Vv(`kxmwSO{M8@!A{v%JA2nA?GaxQysgHV
ztK5amI)?emfQY>!<_m&zo^S4Zy*23*_l=gzFsSe|$zkw6rbzmRhrC#G3>dqbzI~7K
zYkzrZ@ubpYzCK+azzH|m1Uf%#YB3ANJ(}${c-;kG`nJNw;(Z4Kg^<)Ws$_jVsYSn5
zQ_>gqYTypP7<y8!@4sbgDSvlp$-@o5Q!NbPPr=hqbN?3ZTz>(m4{N<t3xvizP3I1c
z2^2U!4iCc)CxpUb_wBe-4{Q@sMZC<xboWRaahxdowZQ<O+e{HWT7pyB^3h_uFb*3?
zgH_uMHR5^ccY+*)O%sP2(C1yly4ggsjgR5Mmjj0i-R57fqITQWBVwRkHj^Jy0_|>s
zf@lBif|alPO0(LLnvl5klqs=Af1B%T071eAANG?ok4_59YKR$|lReNvn*_@|9^kMz
z%%3a7BW0LMN6Sm`;6~@C2c^rMQ?!A-#a&u^{n~sax+w@sU@wQF*K*xO**+EO4FlaB
z3#z@gJ*3y`W#Tv?(@O<IfF1gkIM4GkWjrKNT!BNzJ$3z*hR4vrDPpPUTV#4-vQe>z
zg6VSeTN{WEC%v@7F@VKdDY-9gk9+7vcz?BKEa+z#r$E2JRpno2R2fh(7u(Th{(X+I
zL`^g!i^&CnBke9#_yM0&XTR4pU(O<v{(vC#e^;nZ`xcLL-GF0(ni_7I5!(j0m-gza
z;J7BcJ7#PxK)o6ys%E&Sr+#-2NQ#Fuv1P|XdZvc*D5Q<y<t?Vks-jtme{ocQIkB;^
zPa<X)LlGP!#Md}>Wj~XsS;wC057K>TaZvPeD|DRA%8QT3D}yKrc%HGT6$~d93N!kg
zstlDoo7za%aV?PcvKE8^<}`$GYv+GuU0u>f{Gj?XkE-otaEFt@$t2|Z<{psv@;2Wi
zJ5CV(0S6^6^t`{AM4VJPwP$&)L~0c$v0B^Na>{VUiy_EgM3-MW&vSKu^Kdkm8>s;0
zd+)xhEkjEuRut+gfe)<|rZQ$Sg1ltPYyaVXVPNpByqt6j0~ki#7p;I9Gt3a)QQVgU
z;2GX$dNNoz-4w-v<uIvHiYH7^NUi=@Z~W`<;H;0>q8>2R^dO`s@#(PrkEgj{t7^bw
zLp#;-jl>;{ygr+nq~$v9;UCsth|ZhazkV-wdoCHZs?OLLY}aq}nfZZzD={ao3~|hp
zHH2a{;??FV?C*LsZTcjy9!DI%0?9eT+0Nq<dBx8gcdsZS$AG-%vkNyMBT8a2rjDoC
z#Ajzi&rU^`CHrgJ6r<0hOdR@gV2r_Py{A>R7L!ou5+qb$6FeVIP9<SdhVFP}`nKHR
zwG}D9fF`>8)@{Dq-t9(RN2jmLdNBT5vkTyqxXloD_~bN6B`U+zNr8)Aao6@|6WkzM
zWlgg^&0psXw@9D|phi}Q1%0`IZ{NR!fNeUwcsdDHb0?y%=>1p@E8iJUG*31-<*8`g
z`Zh*vAB=WFKhdXzDZb_xKi6BC)TQ{n#)Nx_H&8Rz7dg(1%kz2)_5qFa^#WGM$Hvz;
z!lqsS4=g~JaeBh6>Hv&Ye*}L~DV}VQZ2H`Z_|dS8&<9GJx8VqbY`Pe9PT2gHLsqwB
z<h!?R@S0fWjI9Z5xQOj~&gm3;BK}JooVn=Dx=&N$LyDtN&H=s3pP8BmZw%!x4Rtxj
z*Hi&YF-ULw1D+TTMVL@wogJ!h0S31QvM-CLawT=ZU#?m8!EaxfxsmcNK4C%Gj+7(@
zt~(PNVdPiPO(*GHE?rSXdVT?%m*@{C^C`q=50MCaf+X^5e9*_}0Slr@50wa&7uB6e
zfT2UE9#&4NrfRWqK_h3UG)n>~pvIO}%muLvQArF76;V(8di}JERd^+%Y@<;BwmDLb
z!&^G|akUH>CVO0Kgg?hYC(}o<<VHh?Gs*h3OWvW`)JZW*q05Wh6EIOg#9?b$MWer>
zn<m&16C5b@vnI~ngQ3smDV#$NyNbwo`aPQ3>!QW8i4}gttN(}uJnf^-bhy7(eI-iW
z!KZM#O}rIs815M9S+)0S|G90&Y>w$dKAKOs+ez@?`}eme)FUh~iyCYV$$>QoW3Fep
z$>|aE<U{7y5yw}OJ%U0Kd^-4s2R?FeamAU?1Pj@@JH`}~;+%31ly)sNv{RJ4?3{r;
zCozp!@$q4abQo%hs2|6fAu?|M5eJF@8AD5|@pSQbT#@rqo3Aauexts2CZy8nWDZJ*
ztBaHoSJ~X*J(k3osU<jMnbRU6pTf(?l4tsM&_pv#<YniB90(CZPIwlChi0V3+1QB1
z%7m!D0?y4XQSEOeyib@19XN;rTXK84^K`mspp3`zZl>_z6dcyNfL2M}@)zMyEr5t%
zu}-R8Cpbr)rwiN1+j{+cgMxsc9xbA9c+hLx?TwC>z?IhS+H!rD1ZomRGB)$2$6MzM
z{sq^EWo&SQ{>JDH0=($ZfS+};CIPL&GNu*LysX`C5rDl*s3-DuS`rv^w69oY1n8&Z
z(63EtNj=127{4Uo6!MBAF=&WagF|smBxZyYvoeg~blg6oak02KTbz-pBzpRXt^xS?
z7xVKIMjz+;YQ$+GjxuY%T{L`Vf{5GPSy;gO5wQjLYAJ+MHhrjkWt9X+Mm`fk@D@~w
ze7Z?O^fDtu7N81GFIrY`nOHK7P^NChNVz@_-_06$GGG4u6~Vq1%GsXsW5K>%_Z2Pd
zynmZ+m;gi#7zwU=6`fz9TlW*kIln=NysbFD+pM}@o!QRLQw|!bF*h<MQi!rRop5d0
zmv~l}Ov!%X0+BNS;gYS(+op9-(kzX1lS>?l9r7iby4A0Nt>E12?}JDj5E8$XR1;WL
z=pXvs(lK%>^4t`V4Xmi_QzzWgtvV*7r-JbA6Y?+lqo~#EWr9j^ee^H`8KwOOaVb_z
zD`l<L<UV@-ghiyh_b3lNe@rJi<U4aVKm*D4u-R>ZxLMn;N1KxIA|!5OBo%6dG*8FA
zAF}^}*75hltXpi*CeSZ1{G`pdcOQ(2Yj(b`R53f<+VW?eFIoOvag9aUey2lNR4CeD
zqhhFQ#gn|8AA=Dxh*!^^T>*DEUR#GuZ@KLe*oZ#c=cCiC$~u^$!O@P@pxAWGLd+Q*
zCw<xAnv{c!LTpt^YwWhQm81go?+y3(U|KP0nCqhz`{n5Jvt*4`ua{ffMs-lc{m8b>
z{wKCbBxXU)m^)BN2<i~Ja{P@BhOY3f{$l;rXzB1eS1e@t?X7oXQO)~;P1OT$*d8m5
zgC_UTm_}(Px*qp};i;W-lQUbwDeT35FHw($z()nGRJ9>o!!ZG(xlorYTk-wD^*PG=
z0be?yA8LA2E7g|sqQ&*^$j+*@L{3q&OQMf=**ckGd)<TU6rz#QNO|#23}5qRtkXG&
zI*NUdCBKtP{U{B77?yq52~=FCgRnMc4OV&E;5YkHc2;Mspa`({+idmmstg>_>X#h-
z5G)$d4=)HLjZN$gpvUM<Z~pO1tu_5jo)!}U7A3QEkd8;fRx{H`GzO*SI}#$B_uLT6
z7lNQ&EfZJfMtId~Mb<OeMUF!e2?Pi*BXxt>vA3cQ*(2Wx^^U79>R+{f7|}j9Tq4WV
zbjaxXi9(LdOyrp4?kHpPKV7~1;=!|9YF0x9rZAdNu!l<`O9wWvC(8|tg1Iok$c^h+
z(Ei%qSAu|gk6gZP;scMl1s_<D#126DZx)blyN5W*oJc(hOxa2_u#rBx;zt0_V~9N3
zA%adtOx?u^z*9w~5Q2KiM-x1I7%!`5nCJZSNKx)P2(%c`Nk!=-)kt>+^FEE?1PjTE
z@*G?k9`!0-#QvbzTZ?;Ol0f#UA`AF_@3KMnFkBk~s}NKwpi7*Z$J}fli2P1ZCxVHM
zz-vyzWdupe+;U$-Ot0*3or@bv#zdi3fxRP)5)+J5$bDHkWN$0~Ly}xE>BOx{-4$uV
z?5Z!<Q&hFrA5`NjN);GV*w8yOEdoKwFQvf_H54ie#u!w4a@UiRLKO}0tqB1w1%dPR
zk;emCNW?2E<Tf=PAM3~^l^W38RQ}^aBJIRV3?}8pI`Z3R_VD45(4^&4-!B@|SG6_M
z*02h@7+GXgpeg~s2oK}eT`&APUVsZwmEObYV*LG{D236S(#~ngV|9{zT1WcSv4tn|
z4?5*!a?_bT67J@o(PKFV^o`UlqldjIqtk0gqKT253MBhf2t{+vOGhbtha}N%RE;Fh
zpTSzRIw1c9&-}U(0b+ss{by2S4UkBR@wYs8XlPPRZy(;KB80&xrol{#aIJI}Hp6&f
zaV|AxMvTN9g;eFOzs!l-d=Jt9lgFT5!!W-bQulWTvCr%8Vkz9Lte7Ns8-A4|+M|sP
zHDxiJ&dhZo_F;D#Dl80UYf(X1N&7^cfK_k6lkXlq<aFhwf{D#>5{Hno3qyBfTQ{F{
z0Ba9JF9i8T20f!>U_Z%>Fi}$x>zS4GObx_^yy4diGf!s+2~qhBI6c0JHrRYhdMl$G
z9h&z&kye(AAQ5tiRo)c2XaY3KDugv2w<~R&jga^;X(dLr4JmeNdhSet4RLyq7@nt2
zD(2^FBpZNNrE&@7zd&w3#RM2xdXEd!DLPDI*RFcQy|l|`C`H~P;nG-C^ZjE@WK5$3
zqb)yVT8dVP`N5(sg)M@b@;`P<poGac$EQDtqvtNH=9EU~kLPMS+fN>Cjy05M1by1O
zap>kegXri(XPs)YEET}SjcQBBmO<;kVEd#@eRLTv`f1RSWhw9ju^PFThaJvHthD~r
zdQ#tK+DuQ<xzC@-sVJN=Z6bk=*Wso89QZ-dD=@U0#qVJJLbN>^>rllugT-OWvV`&H
zJp4V%MY=G`IU%}wghsfN^u>nWFHvpWqL9NMuC5C8nR=CHPrdxtEiHy&Tb|(LzOt7}
zSA?at#-tN`rr12n(LpnP+fS%!zG1XfL}ZImq{1KPdlE%m&W#?&r<j{&=<b*LsE#&w
z!kf`?98au|7zlGQUn=SCNIcLSEdVzkeG>M8;*0*(Sbluc0KS6rU!k1e$Sqkzh{&d|
zb?j|T-`Iaj>!J!9SHwG~L|@Lj+SKbk0r6Z}WU<?yY&M4>i%9?k7-Ty7M>7-#xmuFr
zeBGdJu4a2Bi{J7Y#UCRRT}PI_t=;%8hrK5A!M<-G<LS6HygyPJ7r0AIBE(5wLqXu|
zpe{b`+vSs~3WCbf1pNz$_wEHFfVLSj#4=<cb|rT8Ac5JsT53f`GD%ys&KH=D5FCi{
ze)?J?PZqI&A1#aGOPS)Aj9xF$$7p|tyeIPO27)5CI9Avm8P$9Qsl%ahw8h#dUJc@-
z8|<@)x3F+Kr3s+X)6@|qhWioPO%B};vS+!}#VarAue~G;7`XsQ$5$VIqdihB)(wEm
zvUOnkys460cLTas=5`hrPE6~Ww4F=3(_<0`;QBEe53a+<{9?0OM1;zr`Lcjwd;H7w
zLcaubvvbJERKjs2`}n3}Y{~Uzb$`)1DVKzN5I>>Ib2%171;>h5c(!UmoWeCsA$$60
z^xtLh7Z^twGMNpVk)|q9#2&fZC5;`|aO02VekZ%Av{OlytPSW$Fx@+o@^4!>+BMH9
zBu|RpPe&WM4Myg(E=#0hWkD{M=#Xm^Zcmmn-N}KSxdXzJh+6YO51)u!t6^Aqru$5?
zO*H=&2L6wIl7KBqQ^k#w#mGu)_wwaE4Sy7<AXslVcW{;MA@{l>bg`x-OaGEi?}KZx
z*5|!u`(DsKd~YH)rzsxwk}PlCzs$+;RzSw6V)@Z4uzpZUooSNTnw)h9{XFqXLkU)r
zgU{Pu^e?ChgdZ-6UOne3W<;T=b)LO7sr=?ng+yne<SI@A1aI5&QE^y~vkd-y^f2lB
z_I~MhUf*CO>9^Ou2FkOF6u#TIKH|{#_5N;I+Kf)u9JA?Qj?|0(1)T&-DyP5JQ~{I+
zAqZLNiH@pf<p(&FB0Iu+!(|v3e)+U@4-V#<>_#Q{!5Z4I*M0_D`0fJnmD1;K-fWV9
zyj!4KF3uEi5$tP#e;54xmeMPk^N#@nf?}NnzdMI=XW6e4jz%bNON;`6bmh35clZ;;
zj+ZUg9Tq+>gqqttEA_oEjat|#wVyBhJdBN}rSq|jy|n2f#+3fn6Tf?(1J_R}apYh<
zwuaa_q!>8wDG`=!2sh7XC%%4=-7j$AabFz~YuZO0h4^|zg!g#&ekVwIXtpYgI;;#O
z8U1&aQ6M_9VCInQpt<|ktdD5xCw=fWYI!-^l3SffLwfDV+Q+cA;O#cNiJQ#~4X(Bp
zJ3i{4>cXTb{{{8>EzbjRba<~rS}pBb%uMtyc2Wgz&+71WZY=JR>;_GVWK0Oy5=nH-
zcZ|{hvB>>q0uCy+mqIVfh2dC+d27Ec{W*(KQE0x1y0l+HQ;IDSZCQu(S6<CO`m@W2
z6D-=3=w*4;B8qOCuQIi>y$3?gqrc*X`mas-{{n_kwZWQ|YlM@a!r~4{*fsyI;CTz9
zjB;Prwt7(7iEZHbk7j_w1_{GK26Y3E5<mM_{P90fcmZAk-!F$BV~U{{1f~Dk7r-Sl
z)b}*dbT{u`+<-WBc!<EJg@{pN(Z3Kn{{@<piwcB3hh4_i{=1!a0fA7D_9g^_z<+VG
zH30I;#wOzYw@Uy2ZKTT%O~t5IT|>QmUeel9L#Md;U&!M*NH8cDB?8qPfD>cdjk+p~
z8tY0$=~=$+Unk(dv4xc%K-F4@7aZ<86?2U)5`YkqDPiQFMcOo&)O2(cMohAW%nOHE
zlKGO7l4?-$St}&FA|fJ(j?1Uc`$-FC{Bh#aX)NYPbH#{wY&0}9MmMWDhvD&$*ZZB1
zd+E-t?Z%@?U#aKJn$VR^{1FIZ2Kk>3a>LNc8?0B@uo1GpcVztOG0Sp8xK?EitFiQ!
zzPP^DrH?JF|B{|JsMQGXO+6enMD%ygUXctN-tN4+$S?t!6WB(=GqJavFMGVL^m#q0
zoeb{PM<S`QIw{j`y?c8;_t}nO*E?#-05sq*o4ni<@@F#WgFUxE=Qg$Iwm5`7msWN>
z4Uxt$xaWI2Lb|`*%*y#(M(8r&V>s$N4HmiahH~HWJp2mac0MU`vot69V=m0;LOdvh
zl&x4F^+rEMRo;p2Iu683Ci~2!j_?mPn~qyt!0-*|tN19%l;cwk{4_<xRaE$PP0zxT
zIFI<1x_vrO_8}!xzQQui$^MCAqkK6K{X<#-Q|u9Q;VgP~Iagn@)(>?LbF%B35M$&v
z`Ino%ns{4GLLV>`Ds^!glT7Yidu&9M$lA|*aQG8xnm-%%D4oX|5{X%lcaV%QkJ7u_
zK03x*YTB^2eC16S*=6sFYo4vLASh81fA>^f9?Q869oSSDQZCWO3i<7S&DxsNYc<&p
z$A41QvJ)Xj>H2*7lErL_RMuWrcH$3DXEs}anCSG#ecs0GcD0iu9HKazfzR!p&DElD
zwmPPC(lvw=$MyL57=_0^Z{xA{MRi-#Nx%Ndv*WW&+C}C{BH`RgtVQC)kucQ(7d~z#
zL2g<_Z{xU0uB?s@VeeP>w(rLWd@&1?jEJ#9e^}*rK4K88%|d%!JNK;@Gmflg_o7Y_
z@K(CAXt%V>{W;~%!Zhw9Ax!YW6@2H3gN=<VU40qQ>W~<_J8T)JeKrp_bPF>@5%gMw
zqXIc$H3v(TqiBmkmh*!i(uQfgm9R+_+$|}-z`13sBwL#2oxqw#QxPlY(WWKT0=Er}
zZr_E1$*e`Pt~_W%NSC}Hu(@EmnXHW?zm%;@OJ`_J@Yn8&o&zl`4#JQ7`LL7$Uja}*
zHDw{!8jcXZiz*W&-S_I-WL_z5XXjQP#xXYwAEOcs$f%g#kRl%GRYLU<^n`<k3QzD{
zO9y`RxIeSr=xAqyWgJ^=c1UNlZgDzR$=FJ3a)7IRIr>>j()9X#zb}7n(!{~t!k$7G
z;;!qGUwUX?(!K1&X^?KjBw_3&4ymnlUwpi;GWFBZtJa6N&gKX8g?8}-qs)(3+65D9
z<RBA%(Znk*lg7jWChEUD9eHF_-*7>ZJ1kS3Co;$HWXyRXg`#}~lV@XJe<RPi?6}Km
z@i-^U_HR6_(w4|(mkvj_J&?#RhYmO7hOqg+<xbud%r2Ra8YuhXUBbGaXlrn_)H_==
zG#CSpu34+^WC(;kTpd+$xyG08@nxA0-r^mz7Tit9T_zhOYg#)wUYEjCCat*}8}Z^x
zjsfclFIL874pRF|YdnL*rs|`CLDSO9Of{W@$0b!$7O5>P4cB^-mG~LXmZQOUz$*oi
zpm@34;aM##EtM3f_9ag?h2=7azc0J^suD28Roc$BwUNa?E<DsUnut^dQf`Y7-gB<<
zdYq^5utEkb5lxDFInN(GJZTS)LO<f}CiXVjTN<plJS?s8@-B1imq%4DrGj8S#IBiG
zE9#xk&n(p_JQ|!||E!krP{g{sw#Q1%{YIKlU$z*p)<%gMZJN$*i*S1Oqg-7~cPYvv
zo>`@j{$SgDWln#~?K>H-w@#n67IF6Ie06iKm}Vi<cQD)b-dA51iVeVa7Od;YBoitP
z5D3MY*P0%YyCY2fLkEjJY|v0kkPe4^bH8*8?~aU{)dA^zce5p(_na@|%}D)Qb@1&?
zorT#(8+rdvqNT}|j#Obht7TmmZdT$mY|z2}>$Pe_F^a3F+v7>TXDb=$M(dRZo3$29
zS`B<YPwXu|_Zu^9q!@nNUm(CqHI*SG<C8m0(YCQ^%VIf?P{<n8!skTXm$Cb8aNF<x
ze4{hlhI(9gq42Z6M~6ac`nZGTQFT$3<pP~WO~q6UjD5(g)5CfrK-b)yQhRg3v|heA
zx&c2O^^^s$j(?3E%C%?P(s4%q0d6w}Fjo|3<0QQ@_O}~3b3_m<KLg8v5#U-Jc>H|P
z28<vk!@{8XGf61k@P(c=k_{l_IAdv8gg-2A_jIxs=;H@qNaJQfgq?2;V}u#Mu`+&;
zG140wKrUmQG;Q6XIgcWJxfuPqlHlXfX{F3hPc~L3rj*ZVxfLo<1d<>{Rx1Pdkv(Jo
zeZJY7FuHdSr?hKB&rA-(IOJh7U#=$sOU&mg%9FzCYeD_7-cgu~lo|)iSios>u`i|C
z!`c4kq{;vu#Hcy-O`U_(pf(mXBR6hi8yjzptznx)mbRUL86?z3XYTQx0_bNQCz#oX
zmURW;6`D`_`LWYwnZnvI1U~!M6tis}(p6Jx-UnjPUuA@d11i0)ejKDTlLGID;qDek
z46(UrZy^JcUM8bdLb*%Rs%M48_Ya9QAVh(Ft_|OY&$PM@5;<*TbT-y0@ES{!kFWW|
zv>!{-PzNXJ%h8Rk#D}%$EhTi#*0WBk%H-;UE%^=S1k5i$WT&|~8Ih89v^`k+v-}e>
zAh9OAYehyTDah2x+3S8wAbmj0PUG|K;niZz`0(I))zM0@;5#!bi?R7hH(>8LjArTE
z!?B04n@*Bu^jZ0+FbnXu3iS2I6fb9Xmyo^a1{wUP5raEu2U4@BEAR#tL;{riuPX_i
z9_@jTR9h2h2SY8wF1q9!Vlr2KqyhpY-L9G3E@uefI?eW<ZnP~$Y)jFr-It7$QAyzJ
zV!nLTsHxHKg&JaiA^a$%3BxFZGTC-DLXG0yLPbH*^mJ4TXgy`)GW{wr9F9TleVx96
zK*-aiR47Z|euLKGNp`!R?c+@+RlxN6@_Oz=#P9tQgr)PaP4vFFOVyb=Mrrmrig%Ld
z8sW)9RLsO-f^&b>VUo8D^F~d%fLhe^sJJkRPP-)i=3sjJto3|82F4LEr{3ZDxbb$!
zj!Dk41KM-Dpj%0uu5!o~DZ<~fQaiyF;oahRXplz6{fFNvz$+%;k@p~)mBkh9{*a<H
zRfo{<K}Kzv#l9;FcW+5wwo)3N_sZhZun|+}>N}t9JrG$AT`>ySm_rg){5EZ2zBbfh
zW(aofblxzbtF0@51Mgc%p7^@ku6S?-gks{L8bF-0uw&y{1FuPBr{<|Wzpuvnn3&!t
zc@^`wYhR6p7)M=OKM2y}{0eH4Q$so2SPE19y?wrOv_8aL+mPZ<!%ZWoVYU;j<H(32
zXX0=qIs5hv*{uGv;*yVdr@np{+-Dw~hYgpJnZue8zz87YT)dFhyYckC5wpSEAf}H7
zc*y_=B>Az~%Z`BpRl;HRGtOSDJirT4mLmx?oZaLLgD-NBg(y_cK3*rc^7HzrKg|yg
z9>2H@$QL-85$;V5`3ccp<&md=(E#C=W>9F;mu*1un}d+~HW+s)EB?!aiIb+@_aH(T
z{(FA%Z<hz#o9O`zhAK*vp4jdOiCg67=2LZDvioIaD!@ffr%Y?_d;<0wA<q=A&|+fH
z1W}}R|JM2SO7js2-w1@9wyXW<5k3>Mq0{vwm>y^yb#;=Acr&S~%HpO_=0na7-(#$a
zKASY?UT?RhTd2VkXZ&+8Q$;Ij_b#9*otQy4xwpmJ#eOq5@Z%ZA0}!?oQ#jWbRa|;l
z+f=?-=Y%2VbO(66s!n?qmMezMx0(75YK8sI74jvQPNxmKz<c;p^3B;A9$Kf@v-29s
zGmGHu1W6fz(EC3B`{VB?i`N4R5tqgGmw@YIZVVsXb?}BITBIZ)KkwMv<si{Uy9fK4
zg<trY{KDq5x#9LnqN>i}ZA}R?qcTR$LL_{7=Xu97jOyuB4){w}KR9as#`F4p60N3a
z_FT^AvA5QZS31A)i`&wQ7Pu@KuM@vw2Njo58t<E2BCo4q@|!8(@;#5>^Lng{`m_(X
zx_MmpBOCaG5rxkgUk`fO6j^Walgc>u&yZ1<d0>|Uf6339){IPC2-KeC{Csr8-ppL^
zjZPN8Le7nc!#8E&X~zgi8KGoMB+m@xuCHMrqOG!=7&q$N@-t(8%+IY@(3`fu0k=Lp
zpuWB-ZQ*HO+OJ;k${0pMG{vBR;2c(fp4j_Et>smm4iH7QeR7eN<)^(C>W~DGwSRb9
zr8s1+z&kViP^51I$cP%Kbv;lJLpa{lsb+0<@_{=mGWY!$fhpCf5<MT4SkEKS^v1K{
ze|tIZp=8th9`*{nrgqWhY`*(2A=2Hwwl>;G=8P}j%w>;-hwlxWZj#!c14R8$6L9mE
znUp+?#l?Mv?5$ehhyNXQ++?DdRltZ=X1(Kp@1I;#hJBxwf<)c7u&|}W+i5+X=>h_U
zSXVIib}=H;j=C5~Ka5JJ5M8^K(cnQjIk8jMZP<gVPL(>+SZ>eF+{5Ojl0)&BYzo31
zgVt)vkss6x6$6oNytdYSOj*sATiG;9*0%+P5t2u3>x5abWh=#zIQ;A*_fh-Ma4!~o
z2RfK#a>Qvu=FHaS2uqPRqwJ0NEd-r|Tpms|X+!qp3~RfZ@j$@vGV535oH1Ahooa%m
zQi|dPpO}shx-5a8&&o9$MLTNTu1&}&>U=HGOC`}n>(1NVZ-v+lYreJt*MH^-4q+D_
zk2@>Rnb)V=-o$9|=P>dt*VFoii^0x!;5MuMJ}aqKxL9FZ;Bqh$=Xzcf;C0arohuq;
zVBIzK@@j@ANB;h_(D{AYu_yFvd9Wg2xh{;0!ustZgrDdA<+}5E?L0KI{kWplWFq77
zYLq^AU|L(STiyHRD!G$PZbHucDgjH!b@Ofo5K_-fSAq>?EaJzXB?j%X?nZvcu+?O@
z-SK(~FpSh8WZ>G<=cmTeI=Sg31q*HhZa*nWBJy=elvx%3yu|AF6bynNBone)or_F;
zX~04G^amE80e#7e;j^n8nT{;R<l(OWPZHx`5c8yfdw1Z?UakjT5lXGSK-m%`#AU;#
zxshSI3~VQeHl<oq5#G^OWg7IYq5A<|O8k~sW-dK>HV7(&MtxN{bJo6NJYi2qCVg+m
z!##+zuPhi?H(wJS9#l9@wcAOXt#yyum{%7N?oVkYtM$I86|A}M1a56w1gJb|&(}F~
z;;kFe=qo<a<ha?iT7;6njczdb7n8vGm(y*eoh;8RwI_n3#zCp9^zwZw6Xs~O(6k?k
zH)G1DlYwmcT2^6OkxtG+{3Nf96%j-@R(mk9v_MTgaWpCxrVj4Ii7av9x&4KG1?h0_
zs--*>2>vi6zW)uk-{S#nri*>b3FnqX&ZBP(el5x2bG=)ww{u9-BE4${mDf~w4`^1%
z*o9vhg!RK-A1$}mX_i5~v<!9=yS)eAMg65S!^_MSPiueyJW|rFqs)=uFMPX}2(@%y
z$01~Ogp^_@&tLI|-C&I!(L?-#i5tF+Gb4?gN~_sGOxaBm^?+v#^9Fbsr%)vB*mxLV
z7e7V{6GI4S%4oRo(E7z-pJF$e#oHWvGhd<In*DlWYPO}{OJRMGDx}7`^A^JYLPEJB
z1LNo=>T|#5@_rfPQ|0RVuo;4SdH`3)WO+o;W2(-t2Sw-BPS(XU#12O^56ix43!b#i
z-MN=$*>PJA(DuCSubWZ!9*QNQk(!z${<_}{c8o60a~)Ln{OUcX_th2{SeQs>kFnx(
zr*Y&6K_V~+6H=y2V!(fHT(yTMWfCl>FEPscD;RSN@&B>*j^ULp-5O||bexWDqhs5)
zZQD-AR!1G%w$-t1+qUo8_niHm{q6hrKJ`2+Ypu+=YSx%lqehK--**BtqmoU9#6qku
zf)-jVf8+B25D0SBlc86?LGKAP#dzkH9nk-d&@()kSbUgSV}{}kn<tTh<JCu5kZqUL
zxEpGg+?jiKX1e4tx)pt-R;yxKeAN**jbkv@ePf2LZhHaYD~F0w$W(*PagA;&!6h(T
z#q*gpsArz6-}&()nm+@u8uJVz?gx%t;>&92x#kv?H$q+1_wbV?NgdhEpSW9@S?IZ~
z=3WcU(3wi~TfC4(eXbE6q0-Gp3US^w6uS^o6JE64OqVUFs1**eANM%>&i+e_g)YTL
zd7$i4a#Wy3s|xRQFW<jyuR7GUGA4K5l%qFDFkJd8ChO=^PiWE-x_pKr`&0tM%!D)<
z!rz#)-bL>;xRfx<_nKWKR`)V>>Li&IhY+r%(}yZcAh_W+`Zx@C{mb5=YUYsV1pMrK
zMf<CZ^UeL?ghu>CyOLSMkCfc>a-f6fW`eG|y`NipiH42(WIZzpv$AgUGFEP63b)!`
zF>;|cIkl-x%n`R)?0cdw7AYH?P9`08UMZeUePzV?6{mB(4~OIQv3jqr_7^-Ertwa)
zKjikf3->t|lkd>&E9M$iTp9au17Pk#k^}<`00dUa5Cr@f8ALZI26%T6o)^(?bH#G_
z+{YOK{c`E7a1iTVK3?#-+YPhpxOvjn6f;#dexG(AkgS}Jv|39G6vo6P_j|E?qU(QF
zfpEFYP@zvEWbfhM4k32P);JF>7G=TP3`u|TLJo021EAnQsLLy@PULu=+E>bbt&?mv
z41r4AD%)|WAO$$klj@#<UG@2)eR#*bs~E;l(itj{Q~0ZmR$?GtIs*UM+4T1e0}8^(
zel5=q9`eOf&64dC_Fc~@7GHRY{#cL_QKmn^O@#Rv$-bf~2#~OR=os}wTIh|}!E)4p
z*Dk9dwoYupRRtrjv3cAZp|Rd%&oBADeq7~;mls~;JqF&(0E+sitb8I~-Nvb70Wa_C
zzK?&w&FY)4L9Wd^46`75?)##@wQVces(W)*sYwA-nT!iL%Z+Tl)ZZIw(pQsZi^9&F
z%ZrK;Hqa-R%~K)s6OYKO+e{kKHX<2xRbq2IbP#P0AxQut%WbU$sJAhV0-xbrYJJYB
z|0h*V>349PJ5GS>&?u%-(~iI8Z0mIBLDX*XlcVzTbqoW!q)1j2FHru>jv!|}sHFO2
zs7l9be@BuQ;rMcdwjCCPLgE%E=Tvp!M@J`e&w{<TJOZ<^krN@-ENP{>j?JPb#n^LJ
zN7|uT#n7vx^xdH6yD4hh3E`paIN>fg_~^miY)o>x%^PM5aZk$IpvOLdm84}v$<1pu
z{cU%1*#9|u4`9MAol~R$sbJ`TYN1-(DcfAmN3}53nU-&~yM=1y2lZCQ^kfQCBRWt1
zk_^sV((}Xh;PiD<r@6^V<4jlz9%Y{Qb(Zn7009+cj&;i*!?```r4(m<I}{~c2=n{6
z?n7`061v}+KGbk+P&q&5Gjhd9D-3?oRH_FF&JZ!4Vhd4#bAY+@SbvA@T?HDQL|ipJ
z?K!lFJj?W9t;hE<_r042D&`7E9m4aH=2{Jf!xkmHV>uiC&t4cHLu9{P5wuIWYip0t
zl^~f@)(?-US{y$CTF-)9CO?xASA=oZI5Y8-SRgb5`|_+We*crJ)1m7lYb?Ot4Gw(a
z9s;~S6iy<~3T)cE$g9zz6&AmoReC81^X&C`z~O7o!vbaUC%&?WmO?lV%>-cef2+b4
z(e`k0e7Z5&+RYv;J}9oC1ju%T@}7A2hCKW4HdIc3KDQ{EAAjcEPX=1dvmm;`eGA;=
z{u8UBJa_~>Wi=yTD4~ES9_b0~a3QZ3$Sne#j<)*EiG=Z27M$9xLZ446Bs3kbCCEY8
zK}?k#Rg={?{gZN`kEsBvP9(2Nv*ZuuPx;`(73s%6yt?-vi3uPjLQH1GhY_DxGV=j4
zPMlp2-^0p*T0=4S+{`{iUqzZHJZqG7mjC2Li!m4z4}4uXE}K?F)hF-0IxbCUVzvWz
zgW=%rMwk5AXKv#2RewYpbFr#j>hD><qzq=epfI2cSH~Rh&0M-lYc>$}h819b%&isv
z7KxC+yUH;PZJ7g4NgBWyj5@#im>3huu8v{i91%q_j1MDogL-`U2z&5!247N8RW9=_
z3niCW&t2`;+bt1QtaI2Cbv~`sY!vhWdAe9_r1r!Zz434oM=WcK_sKXWt7U~N4tm9z
zU8ku4<2i62%KdbI&HXd&)^K>S)=Xa7aXEdyXdQ;G-OTtl&oytXqE82#<$Wu$z8|!3
z%S&n6pBDfL-u?A))mWBA_IqO5RLf}yM<J!>91sZV{!#p<X@c~p9t!1sSwc<x%LVrZ
z?e8tBQ&f<&l^kWlgGf`&8tQ_<W0kB-ZB?uh-=kfA06z=oqK%AO-ArUYwAG1{+%lq$
z!i*bCY7V{bXTEv2^Uv5YmD?Ku%j*W!8ovbrjxh$DwMy(Y@k4W0sq82y>_zNLr>6C$
z8oyzz0%&5Fm&48x9Y}GU%U-uCO0tSH?#tgnFdZHF>wd5?!StdQK^?4MsOtSwyqJW!
z4v>;eP<AEo9PKafKjUHAI%-*^nV4h8LKw5a!&exDmMFcLAj>vm3}Bj)^$Hx(J_l?{
z?P~X5fJn5^R3M%E&FmZiLUak<1B4!8WQi{Osad@`W0@-`ASt4vY&$WEEU0mop)fOr
zg;p1j`)xXub<&Rh6#J!6+`31`!Y-iEgF8MoG@W<$(6}(~zHhxK9;Q^uiW<xc)?l1>
zJO;kTdJdNQM?XEvOPmG=gY^$io>ogV1YQ^Z=ue)i=i;x?mb+09O%{^3PgbZfc%NFv
z@F%JK@d+T}WOnIdCl#h2oFE3-&k-KU4`FVu5UGZEpc&t7TjRjojcLYiWGmGa{|ev*
z(__(feF!yw50CpDtb7cmNpO#7)v>qg$zE$4Km|b>?wZ;cZg3H1e7%(~l56^c|2o4|
z6!&WE`gO?G9p04z4)kI$OdY5X!SceOWdPdcbkDI2Av45kgNNq~F#x1#@Xes^`hoA`
zL=Fy{sumqv^L-s0B7~vgaoVaamf`-Vl&+gNaxxBJr=^D*jn+C55#<e#iZR%U{LwWm
zDb)U=a`k^m&Ibr!c4%y0Ti#Yt0mDJr`jCnhUtDcd-?Me-wjBjhRLC%7g4e&evaZK+
zh&#;GHF_+<AL>HL+gkGY_YgJAt_?$NMof^}n6?vj0w;;l%^;K!=Eiq9gr>7`<31#K
zgyM-Npth?`(YWHtN0qVN?-m#eELI4c{rBhlaeWp%Pp}9)dmBe<1m))#4UK=qKYqOb
zs!FzzK%@>g&CE!upu>n_CX<tcji+}Q83c=ulun+xd8;$el@kF~)=awXI!^Tww8lOv
zKLYS3RlH;HUZi*w(N-%?Y42Il^i}Ou&6SPvQ5#=fg`e;Vk2o>sun#nr&c$UkZ~)|o
zmF9d;EJ1oYe8=0G*nW{2_P}RL_v4?L(d|myjyncWN$avOGkwEqczD=;heC#w0W|LV
z7kfvd!|)PlvSl*A(SyzQ^vJ(A(4_6;ZF_$0rIUWWkW_@VtB{V7|4Hg+>96taBKy3|
z7|yZ1yo;{cGm?!Ylh#Nzx3+R4QM;0t)BoI35rAgLmZDI>@UU*e7r$-hH>qN8b~r+d
z@x{%&8jmqF_E4{PBrTUXiKf^46<5c6aHxC+R1Ut;QTka{qLTiF_YkT%5wpNjt3Hex
z_y=r;gISF$i6up3AZ9$XAc9{1yMU!X*TXmR0m6?VzE7l3X4GrrvmG=V^`Fe(L)^3W
zlG0C2yye}PNRLsM;N84^K3{KJp%mR8k83r?hN7`6LDoz(sKX>eMB)i-^~nTziAwiE
zQ;2R|4CzpsPVA>SKSNinbSGCqKM-CF#Gk{;bk&4Vg|wnUNyUHSxo-o%?qla6#2#Uz
z^J1RG57+zB!_kYy<Njx7DvJQfkA>TA6o*?U&BJQIlBRSSzDjIjXITwrxPZ1y<VBPx
zBG(oy3~A^kUCliKiDq%OGx{tU<~;~V5kVGyXOQyq_-tTWOw!rT?<Hnb1Xv`Jlu&w6
zdJ-|sTHsLpR=iCVgO!w?JOIYe(dDzT&$}R<MC%2BX^%6`WIip?xa=YkM<ir2gt9?x
zfXxyENpsYq{!{?(z;O9y_awdPDF9q8T*+?aFTl&zYQ0)_{Nj`IYvoti=(l0h*Ebh4
zXMS&5M_ieM@p@Cf2ZK;Z+#qzL?ppZ~LDz-+SWD|y!36v}fP@c#=-Ks^+SmUxkKSTt
z*x^mw4|(q!=o7?J0JW4~hm_RQXguD}x6oHPS&D_>pCkl)o>Du(K0I%cfiw`lkKRbX
z$ce(+8yz>?3MGLg4O0;ggQv`|h(2HvH^gG_A`gDmb60zR&#EN~p@L9=X6UW>cI9)5
zNDcme1JHv5h;WSi+*lTlFl@<_<clm~yzc}+Nr;APiOd);l4QAmzRrfj7;d$*_pluJ
zG6~|+cHnOZdMNZ?!rd+4@+(6S&PxaRm_im5T#&14xJ`b%e^rgQTgQ36puD-%X2Low
zx$>tO%$AtQ*Y?>`2Jz?9`^WF?XEB;UXSq`_a;Gaz+dea3;_cKK>leU(w-5XA>VDhU
zXLXZ*wiK@@K2fHvjc&=fQKiGRnJ;|&SJqDMkAa64@&Pjgwjso6N~u!uFGL7CP7kBF
zI(;fSdr^{|w#P^#)`Nn6!X4rVi-AB8k}Gbo9O?@_vrdPz%I3Pw9_!n>1VTv7So}<F
zPR;1P^Xpe88ADwSDtfe<IN@L19QWQY2PtPujh55<T7TnKO6;I0d|iW#OL!!mf#Egb
z%lGmZ9t;HeT8P})3&L<l(cTkvG&veqgM8zV*Eu-FCtXC&nd_NayzT@^W;8a<3c{7?
z_GaGPdGK3XfduMRrIf;&yQ<@jjNRqfuIvOo#;Gqo<bQ5uih#5oX&(YqeDHx|I*z-(
z-=_V}nj4GWhd81$d%%K-ks^8lq+r#z)xOybBm4Q{$2txk*$&1pnd}s11(gux4fDJt
zT^X^a8_Hmw;pT$?n7SIV7Sj4v*G7fxYSh%I^BO7!c^7Kr^=OVAacy|~_8G*|V(W6_
z{Kba{SHXp5C>I-A)OBXIuVoIw)!3IuEYgUc=fL!~FjWe<df?>Ovf8sv*XO~Zs1wjO
zKAbIUSRU?Sa?cNNFBe!`C8e5}toD$*xa2HxOQiw$S<kwlVDyMq?@zSYoNY~tNfR>@
zxHb?r)qG1+nzCC!D7UI=bjLk(l56??Ai#Ja4d%v2F(xPOLnQ?LogzXD<iHhvEtNGY
z#9lr5@BrTH#mu5e9OxS;XFFbZew@YWN^KubD=0@{sA=(Ha{}Sz>fAbD4{o27#He>e
z7E8<)ew1ZraThT_=BCRk(uIQx%aQ$imqd}1F%t?=lYb*00BXR#w=-eyM!{R<SyF#^
z+{W=n14?m3Lu#y!&*@Adv2t>h8;VE7MUv))axI*;yIBPCKsfib<;S=0b-r9n@7{5U
z=ti|}YYp2^nFVppS|Wz$5i|hWkUn`5qym}0XJ{te7SOxpJSTJfAVCy9m+6bR)?l>+
zKRZRpssy=%*yW0IQDAq(BQww8eob(SrHXRxezyX`@_#6!QznqK3_-5>;=_<U)R6Bg
zmS&FT>s2JyrOu1o9fmcdc)iJ7RhyyZH#25V-6yH57ipZ&%2Y$XtQ$C&!{p5Yn@cVL
zB{+m*MPJ2ggJU!mSYIU_NviKm*x@VTm#LW1^cdY5x^k{mEiH^n)e<o#zq9&lCzTU{
z;}0*{3tp5_%KaYdAeY#)*Bza*H)q1`7^KE=UrF%V{KU|+*9GY?%8IQ*OW7f-Y+h(!
zvE5UWHSW^;#_Uk*gWw+)m;uM0kK1US{5m1TpjM*~sn=sG*7{?E)Ro?ed8Z<lQRcaq
zx^QZHgb|KX&h)$JghavLL(h3eq@~j({4-?rR~_zcMD^-?%$briJh`ZNU=?n1R8{5^
zwM96$G!|7XL`V~b%5Y^2wpMdMDf00MjK)o5-%R5dUNtL3Pb|_tLH*8!Y=`y<Ag~Fh
zn?o&!V*NhTQ!ru|c!&K0?VR0^#EHvg_8@)JoBtv(7oZ<<1Qg~ft~Js@j|Xi#8TLmc
z60MeA|D`vq<mj6bDSk)t*c>X4bT%(8Ypj9$3WG&|7!uTRd0_GUf9U0>pdioixs1c8
zzPHv$M4?~p)krZm9rYzjWvv3{IRb}+b~Xc7l~m=<s%mp6h<0v;qo(A};(e0o8XDQN
zC<&V9iC;Zx%+rCV3RI&p@8wgfHYTe|nTJDX@5A(Zqj*J(NbkG&v{8t%5h_@mDp^)P
zf#XHTk7{)od!+aSY}2*I)|a5ndst|ki@9j{R2<A%XSiOi3k9Q-Sf!sNSXj?z(!;%9
zYHwmMC7TNcFN?TFXiFQi*OHZ9Yi3b@{9qo}&z4zBuqs|*b%QRmoK!7c%V27(_xjbZ
zg8*M@GGyG-iiUfaNY>ki1&i@1!(Z$=c$CFx;Z_Lmg3FVkkv)38hkleEUEd~XtM$GM
zJH*J()$P(KiF%#lq&nsjl@&9CdIl+*3XR!0JA4u91Cd8PXjtwn3I8{k&)+i!C=p6g
z5I*|mj>sIN3inbhalE=yqU^NwL(l2%{$P(*+>Orz%HZ4Pfg}zaIzAn<r-Lz*+}2u+
z4^t?h`2vq;gdoMj>t{RORH@2I`D(N;f5?)kaIR`Br&Oe3mQ+XoQxza3J=qG4Z|=h+
zbI!pE;u+ou07%>y$SY6^h8S^|(reXW1XdiqRc>`Fiv*9}jtdv@UcILvKfS_sF8@=X
z?=S3|GQPj1)neIJ;rxG#L;eNyS_PouyljZ6KK@T0=YQaGE<b-FK5+u6wEg=WOKf1m
z%f{%Ed-A{0PydUwn+FCFTt5R+K2iL8O8Q^aUWv_Lm^{|J+3bG-?BpS#pd6|}<qM_$
zj;8)sxH6{+32|3<Elkqy?@iPHxu^hsTmpdSh38MA``c1~VI%+lZ%B+as}|&jWXiv)
z|4AU94y7L4vP70KoAU3*utBjuUTtNM7@rn7ov8fF28dvmz`*4Tr|M1C8dOPtuIQ?s
zH2Ia={?|hP`D2L+Ou_ZRktr+o_ILrPhpK5d_22cRL-lMBUM{+GXPw!a=_S0b;z+*!
z2QT+GlH6a3zsIy*WA4P+7J=yZh=|bRzYSK620T|zr(x2y3PYIx-(tT|APa*0x;@IY
zzYBi-tM=;!B7**p@&P?j^uHJJ|665QFrdR&_L3z1eF=Zx89+sZmwL3HjBWq=EqPin
zS<v0A3C&qdDKf3f7xBU$_`p@L=wY#~4z;tG67t5og#Xz!|EmMcgMg4Hs6dcasyovq
zs8&1GU7K_)m7<MvI-p1No6)MKW7SqQNA-%?6!(G@SH;JD{&$<ZB*A1uTJWcIMT(h{
zHIG^f<HyTvMnqql;3qO3+eoH81^%q=NvR{?AoTqx*4Cj^<!x-3h8|$Faw}Mum5ODh
zqm!qyS!v>HtY+WnY^<l3PeDH)1C|o~k9!5QJja({yCfbn;zENKAgYLFE8YKHqkSUc
zE;HjgI^a<?+L{)Nz2kC~yc7GW!1q;qrsOj#TQ}j#p$zsO|3^3;&4@N<Px@80jIMf8
z9l7Glx4XQ=Sj=M=PD?*a7LaZ<>LoOjC9(_dxX%r%0U4MJIqzowDVu{qcQ4cZPLG|h
z&idZCOIx3*`MjIiq<@-QPY%pdbbY2|xf1R7y%O>$d}y6+3ehDHBvQ~)ldW;LWtg3_
zU-eixardGz(~Ys~Q?9cEMW7`(ybj7}$ESwzK(cVCX-x0NdZYV_E3V`fN5<vyx_`F%
zT6Z=3UB6eMw39rWTO`DzW`;6tnofSzJ&O9H^+vYkX3u6G;nJOQv+!tLGsOfIyav}3
z$kxCPa|%uJaC~R>DZ#AnKZc5bH9$_3_%fts1KOW1(lpnHE&5u>GF*}-vIw9zHKC6B
zwx>lJ2cUt!St6;WF9g8$8T{~DvzoTTWtwKosW11LOT+Rb%HPhwACKhya#+E)rS8ay
z75kxp1z`g~4Dn0Az>YwUh0OT`s(|iSEYyl^QM9@gd{sr>$?Euk(b$GA9O!=(0qye9
zC9hdDIvg1PH=4SH6wGqe2NhLl0A9^X)x6y~2YuI86R?wapYj9Mr-dMdxWhug<jdJ*
zePO6P@JRK=F*=?g7(mHqfvjvWQY}}u#VdmZ8}h{JiL$@gTaqhOLFGaF6T2n`4uEUA
z#+ca@TAp6ROmMczxOi5{;<7j%jFhF4&L#h{C(9aM4AWFQISre61;OQD9h~4{ezFP+
zTB$k}j>-7N^G^rb1rIf!*n+>KGtHjq0REe~5FiLp?#8uL#52+v$`sLpeb1I!N3)ft
z-oh&jWpp+;*@c?{0P9VVNwJXvWLGmc=8$7d4=bh4X(d@k>z^*RPZu=@a!+kf#OyrD
z<Hr^2DKhX@`!?v!tJy79d<i<;jlAcwP^z{7(0?;mM;1zU$7IVlsacpM^2KxUT^HMx
zX$Mm?^kjY`4?}u48}Fgd`9U3tMZ&wqLE>8L>ZYnmTHG07*VA7mLl)SJV-u7Kt+p#E
z+6{!QCU#U)c7@2M8x(S-7cSt|>J5axre@>yw3{eu#HJMhTpon03uNa35zd@-XFhhF
zsd_7ItFh88zeAZoR;L@6S@t8H+~jQ7Xs8foQLCrdFZS)G37pO~PA*oy0CN8hCN%(R
z%cgU!eep_~ZsV6e<!n=}k-ZzbQqjwzPbomvwP(_q^<1)(mw3Ic)<_+J&C(Z3(H{w*
zFfgfs%atE!)sLx*YuT~)Gs1GYjy#wFU_{SGCl+eu<+PtQegQID-$Zin10KHZM&Y_j
z9VN?NTUh@T724I{%fR2M6$Owv0m{+<<w{65r`*^h6wVBlweQmV{0<P`lwzA=x-K?+
zr{b*~0vrw!|2dMsWd6Fl*jdNWRF$)gn#v&$(qxguI2K${R45ZcyOQfsZ0OCGFiL;y
zCSiq&zL9KrQT)QM+3+*j6fyH?taf{UKjx|@Rzr}X+xo?Ch<B~-hA-Q<(d{R3eQKb~
zOm%MrTM7|CRyUxu@|CU)@#Xc{6+-6lWi9eP@~trasR-++?}^qcvd?Fg%g<S56Z1l+
zEP9~MSZUYpDy3>A%UA^10iZlNPQlm09b2O0{=P3#n_8YXEf(6x>EmJj8u9F-wlA>0
z)7$OS2==*AEJR!l6CF;PG~(L<m^~53T=Aq?C>w?nlJn|dquv3G8Z&46I*6RR6{}r@
zXxc8<l5Fk6NH+2e*TS*b!Fm9b;~5|WTHMKaGJl`)dlH=&zLS*)MedHdPXR}gd~OAR
z<-F{q!MIKy0%%ERXUMbK*}&3k$ez>63JhIg;F8Fy@j%q(uuO6DRy9cYR{})yDi$2F
z2y5&OIh<V)p3tOsKmW!8fG+L3*&JwhQ@<=dN#e4?EdPmJx{!pwJoRs3di|22;zAjP
zy*vc~G0*uWUYivBb9uPw9{^}rIXRlO8m@(kp20?5`7~1#7l26Lq6Ls*X0#?Ch4%F+
zu<{4aL4Qd85<1x)L0hed@h4u*T`ij=^xZi{&frv}Ffv*!6O@A)$Ibfwv{iPnf0&g|
z3k|N6fA|xi3-<ppl#b5AP##h){imEcf2T-JQU8X07M3&IWYB#^G;TW5ZrB{w>3Us!
zzJzaU`P+fT4uDF`Ra|_eb@VdK5qNf=Dv`U@r5W`DXH`t=V$j!5b|0W8^j3XsANKxw
zp%LHRp|zUJ;gUF|GV>7ewQM59C-aKMbVWk)IkOa*P<rn6BfzSRnQSh3U`Q6BZ~n{M
z40OE#p#0!_CwY@4baJJOgE2D%YLnT{dUF*k=!d5U!qv~`^G3mUo9>V;wwa0Cy3^4E
zke&bsW&tNVby=wyH7>bZBK^Eq{dRic^<xTqegS+SqmAV8HA>!s<l`9^PLox+5~u*6
zL_az^oKuwr*_|q<Ouh0w`?JP*{m3BWIRDja=c$z;x9#rR9kCz29%oMdTL_Xbh;cZ+
zkBcY9WW<lJ#~Fdw{czxnbVv|2guB|?Z=TlAlX@@A@7Lu6;Jjz8X6`7=Xi!yf_<Yn6
z>60)SGrbNa%x|mr*XND30EV0IDiyxq*Vjrr3{Yo8x!rd9#2{*bRX{tcn;W%!4y~qL
z?)-B}bAyl8sSmYX(yU-S8s+7sYEDZ#GKruyTl?F`r4wu4fyM~g3JJB-H@Bn73=XHm
z^;WY_!0TIv_xf+@%go0V>dg(Gy<SKg9_ty&XWl{wcfM=yK3asSWuv`bYFeJ2B1j&-
zSHlm9uQc|~+!rP<!Px=Y`ZA8YK}x>&qyB7f*z>BWpOWoKDk>)K%5-xQSDRVu_ji7B
z0jsgg4$pMhaJgUQm+7BRR+}z?zTWdh#371K^^1DGPKQyiMZ~UHUHwFjXVJ8)ZLi&P
zU%n6R)U-NJCp@AREy5d8cC2lc{M}xj<D0||w)vg&_Oixs|19@(aO0HrKRglkIou^)
z+{EBd*y>A*x^ll6^Ifb`_S}4?BjC0h`|D-9dlZ#CC8d<TeeUEBDF+a3E9jp+cXv5`
zfX;c?a1;xu^VPK8g$Q+h>?nZGrKQ2CVTRppRi!$v=*$J@^u(af;|0^2frQPLiYq{Y
z-ga@6-Z*(hzxQ9#-W(fp1SMYI^Suj#y506u8XCP`)$PQ|T`&--M`>C1@W?IbxeqBX
zyA3@+#y(`7{bFh6R+P)Cm4Z{ZX$7uL{rTHnW}+)maXy{9@g$F{Vc|YAHj39hJsI78
z37e}Y1a#W(L}!i$Hm*1K&(M;d#kLzSBbA_}_so0rH>OI_OTQvKdjxPa9O}^m<aRi}
zj`I!F6pS9y?h(rYN0S8;OZPdB;V+N5`A#<Mh$)-c@s^KTO#D^P<t2DLj+$GWQ5H3f
zn&pzuE#8aFdfPNA)<I}tk(;ycdh2#Uq>?lIaJ(OU?{k<_-J9Z*48(7DDty|)SM%aM
zHv&TD*zm~|V&~lBZ!PhqSAMPUI%)6ywtak^W>Q5Vr>B<Qs>5Tjyyr&6g_ar%e`@ZJ
z>e`Dp?u<XW(&0aDfr*LJ_x0N*l7*UZn=Uv5X`<Gh?cbk4#V%S$ynfKHzfL>5?e|oM
z*y?E{M`@M8ccBk6+k`yjrW0M3$h+~@LHx74{)9M$Zc*dKzI~Qr>i&FkgI->QrD5%6
zX)V3Jy=0E!Q)h-+&~f`>cK7_E4S~m>wHtK?res;)r@zr0L-=`HJZ_G~(g5`=+VScb
zjG=wV|9i}b72C59lu39nGLhn^msaRH#kCK%z>fB_R+Y;3hI=DQ8n=BpA+H>!!o1+7
z-)pT1(YEk?q<$8X5SS*)4iC|JAkQ)tEJO%Ae4e%;HlZY_CCnc1lg9*`PGwI!1);1o
z{Ho`1u$#2kb?d8JG0PbZ*{%mG1{=LA9`u)|&4lC_>@*M38vNzmK9%UX`$wkemKnEs
zd9HlBu2|IcZR8W5ZFhXY{6P7(_gg*_kd+p+JXc!VY967k-&n4gZpl-+SY!;vpB+N|
ztu+lZ>m3+!!W%Sv9cwJ<v_)l_1S;Ayng<rv2m-qpmY)%`y6iE-j?(+x47DdWDYcb6
z`sE<f<+2vG)9`2TUGJ9`M6NOG9?L|1TD;#ho%1sT_vh=5iiA3{b5QNR+8)Yj*0$WY
zXCT)p`#1D#Z#aQAu)=R0W~Y})Pn~-sM9$xqN&DF!^560Cd9XgFC6E2gt20fVTo?KO
zS*mAyGC-dA$Aa<On*1iNdmC?{OVv@fE<$Gbx~IYn0<9wTZ$4S7yLgaKzju5-bjy?+
zSNv?XPq*`BV+*{U$PZEVZUpb58O>E;hc(?BI?(rhZA^_b98+Lko4v27NN(HBBA2$n
z;w)(jv&|j=n>?(1l7olE(4*?O?4GmpvJT<#w|J0Q1xXyRMmY-~%_YX7xOOhgJk6G?
zG=^4b=Jj7S0?qxol;k}Y0vHCJET!QjeW57XbK$NJ!P4wp4Z%L(@v3c#4a)mNy?*Br
zFx+(c(7XXl#Gz7~?FD~K-vcUeWW);Mt~T9g?n>3LFMNk%CzV~lMR?u_h)%lnUxG(O
z(A2+D43<WDN5<XkqOn8UJR5)Rlhs~rLaRGEGss4aALhB=%zRWzWO;P<mRZE3iM`V_
zqBfQz7~BxFmt@u3rRA-mArQ2rfMH>$>$&H*JSB~Sn|XmaTgrT=d0e$F;Ym2d`~5j?
z6@3<6kIZPFiF(%2oWt#@xuMuKi8cI>a@>jaTWMR@9ON0awDaV-vrjaZ1|-qy($jE|
z?eh~p^nNWNJrorf3!KKrnkK?s(MML8D8{#u#j28B|77L^G#!E;W_n3bzSsDtDG#JO
z`LqTSlM$-ITJ`%_5eC}jPSN4##~ZMRF6_r0YJx~T4NKdz^4N8*3wKw|t(9Fj`7#ag
z+9$Rn8q_kQK0odH3X#nL0z2Ih9*CGrS!~{VwWNSlr67-gj+w$4B}d;24@@K4f{h6Q
zUE3hS1@d|0M+XsCx#A7_^kM3v64$q+cQoKpVZuQgY2B)iPv_Q28r@5QGrc}i!r(QY
zns|^YwI7a~Qwu8Rh3*^4B?{t_R}6NwhdBpm)QeQKf@;j7nyVC(Nd(!*yv(ypB0i5t
zm*i&J9#;(_Ax}rSeAYt-)HJ&2#+905m>Qt}ES*ZAPN3_3D&xg;(nNw9{c7i(Bl17s
zbzQa^Vy9lOTaTeQ?^conz4gGM%eT4oVbH+%!70$OY{1b>t|tRlcP4*W@Z`2D>dH(I
z5nG1BSJ{}Cq;lqa+}D6y>}*>b$h-Gb5AnzWhDtJ=8s2?=zUZC$Sa5x|Z{^OX+1XeJ
z^l1||Wllk#RiY4tO4rX##BMAtW3&mDrJf0?=&HR{yQ`A0S@<XD2o+P>T+c|gu0Irn
z8@YjR9_?zwZw<4nK;QV<e1PcL8gMJoZSN!jst9K9A4<2M`NLKt@!nT?!}sy{3Y^GV
z$zZ5u&>U<XIxuy>TaMHZRE0@sL@K;%L6{s3C++yS7YU4)zBGi+bDqS5a<%BwlKY5K
zIbWg8)oW&Vgsx0k?iPpLwi%~7T5IS5VZ+I_UK&#znJjVtDbwvN*S<q`<Zqe+mh=g7
zaGcLgtq~$D&xsLkY(C-KIJ1Ju2JK>c87Ihby9GX-{cEA$r_;gKuYe}$_eNrf>C2}Y
z`0ifE3y0=O_jM@Y2$lp-<g{ZkG~4%&SHCG?XZv*$$<)$QM0h969H|Bs<fFuFO)J+Q
zXo7yMQm;U3V@Ip%o7*SSRB84OQNVRbS+gr%Pr>X(Hrao}#B(p|4gJ9pOI*?kj?>&r
zH5_>GHc1@12$Db5xoJKim|81K5GPmte!nhJEoa^!vd#3vPTKtb=D7rud5@fh=U%&0
zjdjn>c+K1?Ic~v5&HFt!0!={@<)goTe!j&dS?-b4TXe%DUM1J#H7Ql_R86DE_Pz##
zFSi4YwepLGsc7=8_YwsBwah3AOs|_k-?<~$DcEP87ORX>)iBTM({aF<hjh@<=(I!h
zJ@`Y6rd|E3J*%V`nOQ)CaH_b%|DQ#-%D)xl67^nHe_fL3ebtIi@2QtI^qKBi<w+K~
zUD~GIj@kIZ1akfT8dmR+E`XG3C~^;5j@u`odZM2cB5%{q)4Yuydxv3tf49shVMeQx
ztBOq=$W1_1AU{c2xh%s>r?0(hZrAIF0u1u)^Ys|!l3eR^j0GW~+rxP3L~Q3g5KI|)
z!(j2ZN(vfSq7FQ<M)t}b)7~eCm09%$T?_cjEssD#T@s$J#nL!W`lkfZVr`z4?<RLF
zkZ@@agZnfmn(qDCPmEhqjr>ywXyt2GbGdH3ydUdY#YFIv%{-hNYU5X)-XXv3K2}XL
z1tMcA78<H&(02|$gv*$-o#qnNHZAUNT=cZVBS<%|8u3yGS{?C)E1<fO4z9Rj!;e2u
zBM16w2pf6lI68Aje1qjUiE;|nwrshdnkYeDJM*w=+8Gfytq3th(TOhF6X<-%KjYD{
ziNwm;xY<AYnaFq_B*!=l<eelyD$gDsp5(szOcJWQs!bY7tQyqmRC$f`^5BbJGXB%+
z|LXtK<t)>_)?#ZLAuYnnkiO8_cK!qh*T`3`Bl3K*U>defuLSsfNQt{^0pyuHCy-_`
z_eT8XG&+#)FBj5!nD}ZhwNvK6ymw0ZL)q^!DZB&9KsQ9{K`eoLz@N-}UMwOFPZdI%
z>@v`lJ7JxBGlcwEOS-`_eGR@c;eJc#y-T{e&n*%75)ZW3*!aJ12Kc(`2OV9i<$k|x
z6=Q9t&Vo^Pad+*uRD!8g*ZhvfUVIjB#m8Q??G#8?<sDPsl6OW!{sMjVvf&JRdwE|g
z?z}cNy1{)qnNTI$%-^u9Cv3N2E`SQCrfnhsYkxD95<iDEqWVQyS9mOpq8wMO1RM|f
z^frG<?41J9b|6sg&0BYq_9ffwykivOX0W8=upQcrO{e}<?&l?z@id(KaphI?c}Z^i
zY&yBa1^=}1TVLD1DJgacg%&k*kw}SXQ}m$W5jgeiD*Gm(p1hK+YI12kUPJpOr2%Uc
z5LCWpW$ipw#=PyVIY+M8#LmCrmiVyY*R4Tn^0JlI_RJ-z!svC{o>qwemV9Gbt5))+
z*9{xH@$*=#u3g2y-mBmhM=0~NA4{&bYzosUMdZX}&l#-S8BxRXwLcW*D?Uv!IjhCS
z&!EdO4}E~}ici@T95yG-uK%wf*0UMn5TynEI8JXRMHCJ9Mwditn|%88Cv9ki%{3Ka
z1-CmtUw2brRQKa%@#%*%QdrwQkqaNEW&DPj0q^vrSnm##ck7Ohr2WDhfu}dHj#Dz2
zZy(fZq-utUMvu+y-X_%Y^DAM#ciP9OS5cPJU1HjyFLxa|4)ds-wJ6ks<rwU9?@r|V
z%k4;PxAIrN)B_{JhAsQO-=>YyX2v>{*-(1jSvB|d&&rUE$LssZ&9qacU+I;s;$7@G
zz<2{ks#H+va~n%5QyspiEMJ+fi*QN?N_wJvrdLRS<p#xdbdu3>j_)v7f2g+uT3qM-
z?@usl3S$vlhnWE05Bakne68lW<;7=LzID3G%}aiKjYrqd^PF*<IaP-xIw1*1=UPSD
zpZNIfKS26@Tn~pcL$s3n(|W5L2FYzJ@Mn8vbVu%+k0~Xosqy8XK;@P`-B$NY19L2S
z=8>*$EejDXR88!PeBb)=)pSfpQNL1MH))le<<Y%=Y?+<UKsq<A>2p8t%B&Mk<T#8u
zV`4K0akyR~g@m>{4e-o~%ffC2K5+uXr)ks9#HQF$45Viqhr6##18o8`JU&pmH$68#
z2HwheZ9LwAiD{7nX+|(p{ymr@SqO;o2547bWF3n<2^A|uz-PLuHybbq$dRZ;Xt$yj
zX!7<ZMr7<{&A|>*G%BF%Q@-U3x$|+DeW!OD=k1H#Gzt2Rd?lcom-;3)E>W|%u9bil
z3R?yasiH7rX4x+Vl_IyygVDuPdh-x2lW`+YOz@2NUO|6*@dtfqDriY04|Gwx!xe~N
z7+N=~r~_~HecTF8nbCFxI6nk<cVds66*!)#UV#&&?3SXO+B|5=y;Q`icQ^SpiSJeG
zM7%qUB%DZq@{d%<<x0TD7^<X2rjL){+;h0I%3ibJ-r8NE<M(-ex<79lClky$#U`X-
z?>9cud9Mdci0V3wZ$$0a7+GFD%O4?bF1>P$E3P@v-P1vXDRh-W9p^A%-PHrokiAkw
z=ROjH0TH$*B+oe+g(JQ-T%Wen1(Y&*zrY?__DobmqPP4|O^i93*MFlK<9|PmFCmZg
z*O>n3^wfQSsGS*^i>%GH=%g!4R7JmvKUDtb@?w$yYN2Nx=!s)ilwiX#X*k>o=xOSb
z=Y6le>Ai?@)R2@RQ~|NFT)A=W#zdoIrKmQ*d+cXJ#EUgYgV;3Yq>4@BrMuU7`7L#3
z$*9#+UE56F0tdWOsbPT7S;pe`h9Zm1xi;0wk$(iy!&t{YSik4wQ_<jn<YE>l6;f41
zc6P!0sac>qw5mua7;p&DynASS(XNUuChE(=1%Hix-L6>|QdGF7X;Dq?Zlz6m;g|~C
zEiw~+c_r4jSdik1RBGUGPD&Skml#gg-ImwIR~Cm!E3*YWnX<9xv~g0I@>#q9FBmq-
zb<@o<f95Gk?appP+dc+OOV#A+N+(@qQ>}c~@YmzV#Zmb`r~V56&1(Nvu**td6GfG?
zJP`FJ!CHYIjKa<l>M$wWUP!?kiwXnvr;H16TkwGa1uTbF6U8i{i_A0HR-+`MGpbsS
z4XGMcD#{h_TdEgNQ0-+WRJ^#6Y9jAh%t^{B8)aj{>wgL=FB{cFHj*{NrT(44k$@W~
zwa<3b0heF<E8+A*CuLJU!>uV*=)dpZU!SVyd%R;Eu97szGDrW*)PJpB)O)bh&GDX&
z%~XCrfLwap(peGwtK<}$6L_tAjb@HIn*LW7$r$e50xr?FxLEFt(2e(BXAxNCXju_}
zKH2(s)!F|u!2h53x&E;0cjEtCKK;-8V_>WjfWU$#0wPo7@Bf<D|KGX2nMM8yz%P5U
zf!p6S``5()E(Zwi-pbPQ6xh%d>Az=*ztSGBO%S(71aFTYQ=L=)GQ%+;*6@$w$2jby
zf$@L;YYl6-r_*lhYyIuN?|y|pULK$kUc=F&hW{VC*uWWYZ#G}~UHbg{b|B2~LtOIg
zi<&Ta)j_1Cr+d{sYdrq*mu++XZ9h~}e{umxeAMNVrYf?n%*FK(hs_YHILUYIGvj<#
zIYw{|t?c7Pbw-6rQg==|i-Xp49z<D{5sU(hJ>IkY%@CI}N5%w-hP)?4^%GdX@v%y(
ztL@CqF*u#gj}+$bPv)W@357z&5j+^Dy7K)w8dC>P$5WZ27rOHE*5^ECdNSZ^JS?b}
zCIGg8f^*)IPX)l`cpsOIt~%~ydot+}k;!HMVqN#7d4JVGphZ9sq?={?xV}H%WLj+G
zh&*lwB4qhIt}vJr7YDWp*xyaC>G?b?5TJ~%sGj`PqB|wVq8HZ%d=rZ2dEA}U7w2^|
zfKH3f)vXFE!gJjNimu}v@0|T=(B<Br<#CwGw&|W93;WySoXqNRKS56RH+?VA7=$HW
zQfj#w+;}NO8?iltkUrk)nckP@PB8l9Zw4V*X_8pJ&*zik?9an=yVK%~;gm4vQ*Z6$
zsS5>BUrus(j(8UNLf}B*n8H19bZz^iOgGh}K@$c<GhBfmTf29yM_GY?4%id9iccwv
zGrm@>syp9r$HJ}A#&+#SrEwgIta^G{ZU(XcBCV|hU|Om^lSf%zmw$on8~#KYBts~A
zpol2!cL2byh<?ZQfmEFmJ8j>5Ja=VzU-rl7+NGBSQ7e-Wp(P4W>g0HmW_*-tdI#%8
zr5H*Cu_<+2QX$5z?~uS`RFa0Bt48H$i{3K;e(?dT<gAIuSQ@|p84SJ8{(3hnuWX7S
zZ>p-Yz25E}i6)7kJ&2iKM1%Q7AqhqqPjQoo`Qi|hAsmOS0jh#UFZ&l~S-%J9g@Mdy
zzuyG5LzxuH7^@i+5?(kpEU@SSiWwpIWUITIDqIeAEioH#k_71BxFmI@^RhvxggPnj
z$NgN2p6?5QO8*y|6x(Zf6-VR%DQvJr3bdM0bL+`h!Lpo<R1j2^t1lG6@8e;KTrP{-
zus`frKgrR!=%`s6B{hC7oq0|`FNze|0T%USnqN^?xuPvmLsfHHSoZ8)`L9DRR8II;
zwG&yU$C$72*pEYS@51QX&+D2uT-Qdat2_38N&S+CH%88@Lr)-+X#+5+pUGC%9{^m|
z0aUen>$UEBosMzFv6??qd|&UgQa?IRiqgy6-!7WF0mn$uHqJxxUi&NLiw@jP`FjFj
zouhiTtp}{@_I)$?Vq(5*^P*^_>E=C9%;Hc9rYVTyq*HB$MFtknn6e=nD7no@U;W5(
z(g6Qd*|@0bG{GX^=N)Cxe&@E~l7htUdah19C$0+KNqox5cRNgs!1rD=9IB$KF~H7d
zLRD$WgLEXkHO~+G%?Q-K*dJiVEq3Gk40J7PhQNto@B0}sxYh+VJs$vHH>52O`o~-6
z)20<poj(YQ(Ke<|bab?6W-a+p&zgQ9oMGo``h2++3Zuy=O6(D!hs%oK4Q9HoQd0JQ
z7k`e+)I}&7nsXdJ9j*}O%QErwdR#G^z`}D)?UZ1`eG2xCqJU&fN8MGEsQ^$y=(t3&
z0am=+aNDv$HCALr>14@;F6_LYmD+8A<v`}FV=x-j-$lz|PNFv9P}8zuDRKmmDvO*{
z&ehu}2aBoFZJIPNR9>QJKVViF28d<HDq~2e3N=7G`9U`rl*vjL^1BX_wQk#;a0O^@
z`?3Zxb@?tD=7d*i>xPMTEze<?@Xfi8Tq8s*1+R(4Vo(<Jl>km=(kOsu&9u&{s#UbW
zQ9X!hid#uXG}NN06?SM0;Zq{&ui+2{A+3Cr;S>|zPtP=`?KnbeN{kv!;nX1xafeJ#
zGJ6OZkMUQt)&&thW^+jr;tH*~7@=s%DY~Ae%+js^BkOwK3@~`!QP7@I6<hSgmE@Eb
z)g<pAMmsq6!LeyO44~?|HR(B<9OxtTLDYHGlnPieW2G|IIvxhGUeo(8Ezn<kX8#i6
zAVZ=~c3IRI@*GS!dx^-RdMFEz@lrl;=RUax@c!c;f6s-B;iWa47769lKb;is;RQcB
zZzWpB6tS_6iZksfq7-TfDH6a8UScW$0HR+SW|^pWj7L~Lg4e^#5_c>JnKu@%p8))_
z1w`}qJm;Y<VjZU;;lzwthC|4-#)~Z`BeQ*n78&2MP(jSVB*5-GI-naHd$uB70N)e1
zWSU6Zw4C>@?wA0y&UIb`iY503aA<$B8&1p08Np&$7S)Xa+*`IY3LXH#n{CB7f#+#G
z;X=OO+q&~%5ta_4{}az;Uf~=(!3I+wWX&|)M%s6$@$|%vZLGV8S>Kc~`8f_&JTUZa
zLb)Fu909XIG?SFVjKiaX@Tz4G9&}+i=o=!A=W%WTru%N^yu%o6Ge$-W=?I(}U1uNy
zuX+q+1acyq)r<(b3>d&8BVy6d_Bfb9Rv0zdi{4sYBTHeYW{gr464GWVh{mQPe@E5t
zD~9j5)$UO-r(uEPzMKt&=Nv9H_(p}9+&NA^NF^f2<C7&OS9lOX;pf%iIl%@d<LUUc
zY!o}4jx*(0@Dk45+C)i{Aj|Whe0|>oiV!vMJ)p};K1`vvvJ2o}PFRL*C5&!2Y??Q;
z)7ouTuM?f}F!il-9ER6t=%t?j!2F;$F+6BpwveN|pE@w0ij6moX|gRa<MqmaTI&8}
z*()VvVo||&=tt5#%7wf)0Fvp4yWkp~;<-r2I$rGAp!LrkKy^RoNwu~D!|3nhuw8FC
zNYUF|Q`0`A2^hj~R1_)ounI<1g~Fx+ege8wumVhrLrkg{QNfB$%RvRuP^7pxuZQNt
zoms?i7)%xozxilrXvzFZkXto`WnsmQ$*Ah3=pipJhOsS*h!A^&%pN0<hV@JaLDt6%
z)j{o9ZZ1S<Cfd%bunEUJBB-n=i=!byPZ0c`K~?A-fDp+^<N9GiL~$<ud=r$qZrce`
z7wiBArG6KR2OcR2xSbvReJa^$XuRDk4I%=2vOUc;*-#*sB>;2o^R$7ksBIWdx-CAr
z4Ro2zjHfH7eZQ2Cwds~BXjPK<D_1eL(#AkqnwsI{9{$6*4!yxZmo)*RQ$oXBRT1k>
zglREBGMb-krYD~Qxmgpo$a^sEurjRxj=S#{rt&Dh9T-+Zn8IxRHYNm`{ZR6ujZwrK
zBQLQeE7<T+g$SLW&EHr6f8A<-JfL+M@s8~*<1R#}aH-@!(K~MYl1D@V11s7oCKL(Y
z$rVh75So?BY~Rf>kT9qt*i+TBYYyY*&g}dy_0=qT!Wi?fQB(iCut$?#^T3IJ3#1K6
zJ`ww)h#YNTp}%GvdlMq6LnJc5e)kBBOw?t~DRpg>I&%AbUWUD7^^EbIhET3p09?sY
zh@Yc&kZBfH>Sab_4;mQCq$7AnO2k5Y<VKY`VJzNy8#6hF_HNB;zL1#n3^pL0>zuqN
z1y6c7T}Uhl0+PE1qgO;gTIYMi(M)m(*+8gpf4tNsVWH0>lzG(~Lr_#Ub28D~3f73(
zZj^-Uc-jyWSquXW*VqPlKl^ZsD;Jo<41I_uLs^oi9bDa!PqPn6Eg<M9C=8hO1_a5r
zaL#VqcnGZN$H9bSR_tp=_z?3#Fpc<*!-Pf1331!4?%Qh}1}4M-1a!SVa&IwQmtnaf
zIF1=e{jD;p986X@4+KaC7T%8U=Kv>4<^{@P&p(^wF}(9#SuxXX&H!gMjP2XN{f{ju
zVdO-GrRBr1=9B$_A8)dG7O~v7;_y`Yozlrzqv5>ez{lEQ`YW!OBy>hUW-wrIrq=z1
zcVXdJ1LO3RWMR4c2T8y|RLq+;T(!Dfuk^KD7F1x*9foirNgm)IPK)RQw~2JefBdPK
zAj6|TsQ!c&pK}|{g+$1qn~PFx#7WGd6RSpy0jh|=Iemmb7&rPMD8&F@h|IRdUe~m4
z*Zl!2{<a@5Z#2qk%dt^jWS8QNbB}WqYQRdlGAbGWW^#$9X%r5SUFZ2JVU1IG2nhLd
znk{nxk{QX_9<dZ+`8-=dE0>{S=mOFrkIcPkH7F6IsO6X1tzid^X=d%TPd5gVJ=M%E
zDk|eCe??Ldxg+`Zm<#CL5mZ};Ke{t9Hwcx299BUX^Ai6+mi;~ipTE^xJ!PTo-J&qT
z@+Tv~qcs1<md^}PMy0#+-M|{89@kh8qa$po<`+G{Q^pNO#cM2z{uWL~zC;54UKo{S
zU>YC(3(i;>PS67WP+V9OiqVbh+H%{&LFwEJc9QWcD?R2&swEiwantMSV<y)39zaWW
zLt~{~4#d`7;x0f56HPnyh99^)j-zbYh}yf}zXg`E?|IU;8PDI(9e?~yQOMxRNK>$Z
zhc-oSzRX}MLkk-9c&;v~MHUX5$Ui0PDFIsOe?$t9lJSXm{c#Sma;eW$$tSW6bf2ts
z@h$GI9>OyfqOE<1XZ~U&H1yeboZ1v!uGE`A^f$1&ksPwU843{D3xitHl~R(%H?9Ew
zk_<M$6A45->N+|K{(SFfNP`-ccI34B31LXn%Xydu_N%`dJ9^j9fH+XT3;0C)abZBp
zPP9~@9iUEv)zESQ2qFG-vd;{-l@XbS^yw-z>{^$kw^>65%4kcTdWOr#v{epybP4!q
zgECl;O45rPW9jf79tSILLtF+4gI7e7h_=p%V)xz%Hn*O_$;M1UiTo6UW7^tgyapmG
zmyw=5k{Oe^?`O{J-`f*FYeFLA&*hQ-Rn^}SUe#0v3|*=FQv^BAK5e>~ZjJP=M|16(
zf&sjSY=|Cc6&dhoIYuQl^NKRh^cP0TxcCM+TQEgN@?c?g@t2GP-w$Zf6eIpwrni%G
zQn>17&W@cyvmG=ji25jDJM>}4#H+yD*6Y5Fs@#@(6~%)wKoX+B{}Z6{V#szb$L*DT
zm?b(Vs_n_%`Cy1TnMGB1VruEXmy{ODy-bEphOuZsJe{+|QrK}qXM{f&NSh4<4S6pO
zVOR1Z?Fk5x**FNpf(6)=rO+%0EeRlUnb;7_T7&xJ9e%%Y__Ciyso0XF_%cez5K_sQ
zTG%yd;G{)&)ELyUxuiBnnb~jM_w58Ja{rDG$1_9z9*TeH$nWv|t%{L1S`n0eN)E<>
z#JR5s4nv4&Fv?j&Fa`e8C4ZQ{zUIEDtB+oFK-|=b6qY_;c{{lU3245Di7{HjpV^vb
zDJ1UC@+J+_RjUOja0{U$wSin!3?L0vAxEQcKAyI&5!KkG6tgti>*>krQ*vy5c}){(
z40;nNG_@c>P8w@FSYf%z?7qwcI?lmv&(KnUlOlPN5F#@Qi{*)?7<0{+0!u)Q`5RBj
z;fJ#of55}LbCLDEEpWZW)bgJjYl5aC-*mj%4~hxUfY^6lM;O7Wmvu9i>F+bk#II9e
z<9kLL008E%@0v&VP!q<4=xq>(w)+iL3!KF+OPoUgli4z_^oJi*gcPZKxgW)GpJ8+T
zDZ5s~c?^e)Px&>Q(lviL+G<x;zNecaHFi=q12P(!P|MyBrR@BAQatu@ZpMdgtdih+
zZ81^lBCA6E!f2JVWS;XDGU^WBO2Xkg>qJc`<~!=F;X;n0qC%s$JAG)f&sDBFK(A*C
zr))t0VZgy88k2h<{xZuTPpT}C5HU+1=^x4uA~Q`K>7O~gtLVF%s(v86$ZwuwIo_Zu
zg(VUZ#U@6wik%Imn6$}xy{eox8Swv*^^W0jMUA_6CbsRyw$X+SnxsKv+qP|+jjaZa
z8{4++G-`}@=Q;0l&bj_4Uy}JS*)x0g?6ubK#yWdB;vnUjZHx8l;xd6Mw}+sfiy4c*
z&B|U#nvKNZlXKSpHDa#Kq^qc>6~b0TWZcmFLu|EUl!<T@e0U<(jd61#qBUH!6;ZJ5
z>|bDgWogy~K8<BAwfowr!=cmv#v=f?0F!|uiYP*ZL6Me5c)z6bYmRxGGuSjD@W752
zpA>0<91Dv^BUviJ7V*AWIMkVJfM&DHv7FzJ_%B^**M-=o4q5l~RmHJD>5c4^7axi?
z{eVIMi-E9F#Af~f5tUxIWiI0K=rI(t)L$Fcmy78^hgR2nzI!H1y$g;w|L3)1#>M{|
zlpV1l84Yb1mybnxd>r%dd=t0p|HNduO=hINVnt1B!)vksH_iF@Tc^sOPuJjNo@ngn
z=>MQgz&ZvAzw{>1s6CIQ1?9hQ<p2C`*MM;L`P!`N%JTml5ddu5W~7~2D+Ct?7yl3S
z`?V;f?UmWMc+c+2^8b=K3Cj<ncY8kC^FJZlEf&(;zvP$$9}}c85~Q&#-r17$>xuc7
z>5H?L1>k3Xo_8{vL+SsR$!_gFPH(TR9=7kcx!yn&9ug9gyr+`VY)@kTucozMx?f7$
zec#^#p^*Z%o?H1G-v0~cfOF|kD)XzOy~XiH0^;R#wpbQo?Z(z=k_2iJZ?PF+>v^j?
zu=}33BCG7bPpO0Ui23*cc<<@Htq5{}QOW(}!?HL$JtsytriDjpX0CaT`y|TdG6?~U
z*0E+?O20}RjUo(xZf4%j)}r$r+5SLOcFOIQOMuEj&N!9j({1)1?(*I~`O>s;!@=VH
z<aBYDP3^iFhwB2w_>TNQ5KmuS9hpCl4v%yz`v*6!Rd8&*R!$?eal*W6iOW1d2JJ?3
zEy`;QIE##vrckDL?cX4D#G_%;7uL~_nKs&;efC%^V6#@q)xsW$zHMl*v>&b9+qYc`
zf+|l=Pc=ug96!LMM<R4jid+WAaX*gk?NAepPDSh3`SsK3FIT<Nileqk<J)`S!I#s@
zdddBnyhY@7_kZ)Mo4~ZY?ze(8dsSq<$Bz#h2jC|k4z~RyUJ5p8PXH&7xNZ4!Z+g{p
z%KnHaDfQmz3tz5PE*fC!9Q*6w+#=21yHV-yM$jO;yDt&ePB`pQmu8HGdDqaAj<ST1
zWY;PBkBc|SlCg$kxw$krm8JQoIcB>}xdCW5?LJ1Yd5A0$vS|XAMKeR*!AHTlF=7N#
z9pWY*<Tl+K2{DT8(nZM(28NTmT`rlr-zX35f&BXrJ&{zNUO8&4kL!AOIz`0;FjaiC
zJ-#nb`ZNL!k)zW#Q%Oa1O`ZV5+i*Yp`B6e}l@z;#hMr;^hkV6irS!%&xm=u>U*iDT
zK2}J{o7XFbmnw|c6X&?q<(~==0N=Np9AG)q%QRi%+_d3w8qK}&@UR=}yMvJfAS@!q
zWXUX`imVgpAnSaZ|8>!{>Ekfh6OEYR0|1Q=FsEtLB3`h8%m=U=U{SnTw=5QZ_IQ{B
zKs{ey;B=RL24EJm&sF5ARlO`rtYe&Pw!kBR7=4cNLRkb(N(;C)y>5n>l@6R#%>nRT
zJ!5n*`^?#eUTc5;FL86{ylHd8C{cE4wr<?u8B(Y7W`dt=Hxz|r;!gM-c4fET??!4g
zv&XXGym55`XlyK4l&$ZNps#LTa~SRCGit<IC5H_G=mo7!jJqm=b!OID@ipR{&MEH~
z;Oh<Cw@|xS=biEF;=Co(;R-#f1=DE1gspms6woL;mF1H!HJWq)6PjpzPK)EB)B!^E
zrNlW@e);O2SFinKRhx!+m5dm&BIAHkHA>=a<S~rZ3F>^Cmhf_7{bW8(N^1@cO2nXX
z(L$9WM_^!jzi{oGEqDcR1%Sb%1Ii*9IeZ83OfQQEsf>)EqlaO0JD)Gw^q&C!ftO?J
zeX7aPGAqXqCH#AIjy$e$4o}eI_M<EAm)Aahs<z9rK_nx#k(;#L@H@~W_uD7V2f%Wb
zpnQ&;!^Dp}{P&1)E6+S=+_D-aWp6{W^hTii^Fsr82bSFZ1Vl+zmT8MXCFo#~zABF0
zCO~TM)*Qb-n(b8D2&?jz^9&l>Av_uFD`CXP#R^Zsh?<K}7*CW{^(_}V0BP+Umlbo@
zHG7FEehI9;A;m~0taM%g9JP?VY{8JcKL8cz)3Mh{<dPiW))q8USmMV~$q?zv<J=ur
z(LnR#lTyyp4+ire;fmpGhyOvf0;5%`#s|Q(tkR!pTF3*8#C<P5)3(FCtSDv0FjkN!
zkQFF56{u-`dpdRe-t2XdZmQ#X-hjllL@HyD20kx1mwiiM)4W}jsuO^@U(r0lcdD0f
z))NF*S;Q_thmk|8RJ`WAsJ&|2DM--&eat;d>b76yQ$a>$5M=0+FHo?6rK09f4L)G3
zZxk~2(oIOS&0=zIwBfR94S8U#4n$-De!CC+gH&D-6j5DZLA8blx#Td)*ns7gKP{JC
zpwRAlRy!!!?{FQ)T-%3UF4{`=y^`B$yt4MJZj`Q$9zp6O{H%q`_pQe)$uTIK)-jT?
z5w_Nzlw$E&7w8UT_I(^Bc^r}uDKwi_r!})-4)8hBrH7Twm%x1RNAdEj4|$8_zi76b
zA#ogI)#GmR0KZ5p6-f+w2YTV7!$;pAbKaMMm!|*}Jorzm)KG5IRaDk3n`9mnW%s4z
z#6Fe)g3Do!4f~-^sXyQyyC2`<aM&A4vPFmA$+T%b26`y2CV&ETfaTOiy$}w$EF0s5
z%-?pY)mPE*imzl5VDj1-){VO$!&UXA_eU*PYY~0Vn%;^sZPqkc*t38Sk&=UBhu1|2
zpi$JuH-#(emL{7|o`N!EOFKlRD2p>!@Hs8UDkArY_^KVcFr4dr6D>NMW=W)J&P!Lm
zQwhJkSAq2yZp!Pg{Ky6<Hg(Xg(h&MmOdSsfrSU{tvCVfYmfv}{A)jr9s29)P-~PT=
z*AC!k1a=bX=~@+wi<`2%s&+nMy)*&*y6YF|al$ty_ZcbbXgv0VWz(G33D=H5YDbT5
zC>+>Up1nBHT;FVP1(Fna!@(F?1(LHd;Ji`C?M?zWK|rpEu7`wyf1ojn57K?;!BK=o
z%CrOcxZSs1Aui(3&6fjiGE)vDWr$mu2twSI3}I#ltQ1`zcQ(6|)1TQpsM<$DiDo^D
zQY;4f?T=zK-RM1Z;<*U1oTv;;@sS#l8G(f@B0`R6fvw+pzkhx#)cLsanrbT~oSanr
z3b_{cO43gm7ILFUvdOKV{QM#Ag#HUJSx1dEsg&XodwZPpwV+}9xT~&ii2XIOPqk{^
z4!MRK%U6_qxDI5ir02QlFcYUzvYHUFDm!5Nfo5t+Ek~ICUEm6`jzY9%<dA6*kkGWN
zXU1w$E&Y@&X1(go&J2^J*}F+O2T?LDH=b4&J4{jx+P*w5PhJyTY372|blvx{bWq)#
zijq~pb^Ooh4iHNT*JP*}sHn`w)LbakHI<UgV+A<}w+74%EVJ3iONZ=s1pq$ROesCj
zM$R@RCW}Nl9KS6?%!`|#67#h-VYi5hG2`x5!8vQ3b;FtrVn>abhV54xl&;%06k8vm
zx($M8<s4`I^*(9LFhsP9%o0T*hiO%&(m&OBx>{5ZpyrUXkk_*zDBNe?5tsva1xyPq
zaeu$~7+xTddA4SA-Z-8OZ;--1?zI(3%*(U*J&=S+>XZalNTb<qJK<g@Uac?93<-lI
zE-%|CzG1|-p=R&E&Iz;zNNOywxHLh>per_RYjaACKS%kIZ+A_d-pAi`R{)t#^53|v
zPvYR-#|7B4Iq7wk*EP-nha9kL9prOnNWu?%!SnRb**;h1kkNx!G7#lIrwV))V$X46
zOEU(Q&zJ>B?Xky#ad0D*@F=~fPkMcohu^BMKjRJb1qNC5y%(UhIrqCZc}N#lwgWxt
zgl)C`YMzVzaIVtY-X03;lA0j+6{B1s-WZYV8X8`9M#_6?=gYn*$rI{ngfhB0Fz|-<
zOow^aeh)~v!_{vR<-5Zcaj0rWOZqEmWUzy0l>IN4Hb<6;Z+{JsF`540R?7?+Yg^<s
zsuMV;8lep$3@Fug+=$dngVl%aA_5m-c@*3X$hvhRg(3B21*oWRfm&U<Zy8p)ddnoQ
zM-p1<R{0SEtf3@6JX?{S%!ot&_4a<o%T6KLoP#RG>QkQL_-y<h1+cJp*QoT&Du<3a
z&snbF37m`RaambFX?2JD=pFs@+xy$*`|MOx=d1N>d3a)}2yrkk^bptiPe8piA-~Bt
z57$e}<vz5hLK`kpP5Ny{ka3yECRhZr;o?vsKR|r${3Goltzh>Ej5rd!Ya$vHpN3sm
zt+|b;R29<xD0K^KMaRTJt`=4|{*|8i&}5IukoxKe9$-Uw0Zmr05s*oWO-Tfd71Ii?
zdug;g5YYq{1#q(MC4V3{!+qC;(}OzbDZZoVUA!Fr?vua{-gi4xA0b~RJF1tkBwdP|
zuJw#aN_vq1K}-`G5<F<tdR#mtWEZmy2xi~Q`oFM4r8-Kot0Q8v2HB8fDEBZ=<mwk`
zAEhf8V6{BDmo5LEbK=l&HYsjCQ8xMpXtjpKmh0OqLdDE7wOGL%pRF=-i8z@0D=s4)
zH6+B~sar=MW)LLD!8{1C(&LCdBJahV{aFiB0Fp1s2yaxHXA$$Ms(wDIL?fesWL&&p
z0XjyK+!1vb7?l05%S56Q^PP^$BErX7!zy%K*Y?E{(KAH<O7iluzH>|sAf@?68&3e*
zlNyBn?DDD7cft8P8apckmT&1fV=_}L&z3e@M66O%5JBD}v?VnySxjK8o9HMQe_=PJ
z)V`Mf=z+liv)N$4z|D>F!wBv_tf}qw>_e0AtML-oQK&08(c=RdY|!#o0lI63`>5Bz
z4N-k=Jx4)~Nt=_zmbvBz*VlB<w(4TYTrJmp-3h|S&oCj`(Om7@x#o@u?#L?(>KKJJ
z-!iujs7Yu@xqc<TYCW$P!w?eUo}7`qUBa*}y>Y#+f|?4uQ}$qGP$+7nEd})wY9M#E
zYQwFlFoMeA1=CWFl>Un4CQwXbA5$HOEp)vs_;K<ES#zUw>=Ee|2u!OSSZNFNNP)#V
zN`Gq>%Y}c!{4+s|+K`3E)F?g&W3VtOo$Z~7Tyxr;8bV%Sl}hLg2R5_<8P@t>hsDmE
zg>!~(*$c~Vd8I<Bkgnc=SgMUyP^c2tJ*0=*{V8Hd539T0uY<ko=Qw6uAjD1Z7rZ5}
zuVY^!_0Px#GJ@zv+Nadnmhve=dW#gbb1kmHPTBB`RFWEpj}xq<8L16kd+mFXpH09J
zY|)G@Sje|fl@(#&ikS}5c#=e32+1^U+Z!4p@|z{l?Q`P;Ws;EDkcn7x>fvuTgNuP-
zA1C9)u~+a1gq6DGaPJ1~PUykq!5Q!El<2bVEZio_5V9p(rA!ss(CS%#62A;|4ZkB|
zX3q|CTNcR3-K=lPuGbEe^*)L@C*^oB3Gc7!Fl3#(Jg&VG+R-HZs+;kz_OyL|2-F(5
z1ema<a6@Pk9gD`yAIj~dV2+dh)x2^x0mt!Dk;8IHkSvqOZDi(-6izmL{_C>1kh=wS
zwH3~~SS;rL*BM;Fm(>1?Zi=utNi_JQaM^C24cAhod}SPaR^{~x+ec*RY~M(=3kVU2
z*_+_z8yk*(dj4(a770vntFo2;j}Pid1Su%_=8T;oWgJ}9V0nyT2rX{{)tz{jTz#OJ
zR+p-`2OpII7G3Z&16X20#7K{X51E{}1MGknDnkocl0^@tBgMGo#2HwFeYl#YHCJDG
z9NmK$#sf>5LhV`sg%EEy?Znr32`W;in4Cz^9}`AK1+ktb1SAg*VeC}>6byQC2O7HL
z^77ri!7pr5mOu42{cQUY$?zrUFOX~TzJJ4sL9d7IjiG9&W>$f^V;v*s@=W(&RB@I^
z)`l|;Sdm4-Eah7+50WxC>;pzL=nI6elP$?Q)u6_)x&Fbi%`s8L=@C}ev~Q430rg}u
zXEz@4B%nfs1%#bFhAT^aG93U<+ZMUdwHTdgL{RACi4#Wnpa~T4#q!&7uh|wG$(UpK
zI>NE3Xd(-Z^<49+Q_~m(=Na`uZW%N&M~#i4v0KiM%g0Y<tA|FZo32St1ngo+OpUsh
ziJQu1D###aumE$cjDbF`0Ny~uuV{E@cNuhJcrKrYVyo=b`ZOS?#>2`7Wx`8ThN7wn
zXA%UczMW?jc@1s>&XU$r*@&H!-8qS66W4N&)c-(%Rxt?BqCncl;vT}*enZ3n9^b8*
zr-oq3wpiG~Qbi3eli-R>M6aQxGV|Sc<jk_Lb=Zo4PaYdE%r8Uwi09Y=f0!_G;)K^F
zOS92?^qS!w#KJypUXZZ&_((sCAs&F^6cNc_-$dfh>_f%%Quj<qs`=Pqg!vt+kd_nb
zdPoV*+u%|@ia8u96pA8#o%}?N{05ckMMKEpkRMJXLZZBbp5sKDhec;h%^2s_W~~wO
z<+D=}yk-@`98DGf1Q_2op8NL07C%BIpV@?IpK_lu#tN0_v|Xo9?KpkwKxVT7rgt}d
zv{ROS4btew6H_5sXlp!dfaG9HPcu(4yJPDp073~D_PyA90SH|V8fbN1Oe;@I$K}zF
zx%-O8Igkp%B7rk=@NdJUATLFW;+o&y6{PbgGoe~7BU{YVWQW`gX^IyM@#~D@q(-8d
zgkzNaidj&llO+lkjjc3TDOzllV6EcvO^!}FoQ-l@*3+szovj$PDmRKMU;H}tw0L3k
zoUBHUMZx<rkmNT$8Z$-K*VJ}0stJh_p51Nd#B>$Z-Kf|C2AL6=aWoW_T&YhS*kA#c
z*34;cmr@+zqW|&JjZq`@?H;USZ7ucE2;f)$oBaY5g-r?;F6?Dnwi$`cw-3=!;736V
z!5NY$3jLG-daeAiUwbGSv@*#>t-@i{o!f#pc8#u@=^lo}OLrmELju8soumo%mO!Zs
zaKowH)(pA92<at$Wwnpyq6zN={_Xs1FsLXuJtu6W40K+Tml0F55gVX38CHz(Z{ujY
zuVgxoy2<|GocABwU=%@;4<r+RF*rfz!Cs_R!p8_zDeSf(MpB?pV>#1VuXV)bz{Uzn
zbs?pq0PQG#PgeZ-4H>~-%4x?{<c|k^hC;lT1*QaKbMGvdIUJRB23WUy%-NO5$;28V
zO?xP*5*kQN&cPr*f=B_fV}4gPv9fPXT6}?JgP<|+L<Kz?sf5NT%sQISEDG!byg|Of
z$w?((Z$D;ec<^OP=&pGZrOG7RTMi<(<Wb5f@-J@Jj$a#GFZ~N4#dhQlCMz$iUF9cF
zB*;vxhn05eeI*Fwwzw^R`eEaqIkwlNA=r%7EgzmG<3A4NHb*!lYmi+v56${E36aOL
z@#)G1h_yosHnwOfz=lGosAW;f%D+Xzbf@{>9(EtkWZ`%$!zQCzR8_HhAYD`o;h*K?
zHfV1m%$EfG;ZO)m+IS=r%qAGb!J@x9W~lUIO6t9RN(8Aaa9vXZ)LYDnh3O|ND^jM<
znF5bj!T21R@OFkIe7MGcjK?fF99#NE8CI$4+YmclH2l2_tXjmPKE}|HcJ~p5lDq`5
zh~f{ORZV!Jsl;|iSx|a*UN@QRHB{ec$|s`SR$)M<Evid`yIOw(AgueK(!(6T4lFNF
z@*A2eVu=SpgS3toP6hFe`^aoopMM&KXiZB71q)l@B#CxcQ{_Mv91^JaiISJcRhif=
z;T5BFVSzK{NUlwyS)+fV(J#X4mm>!^hhY>K86r75C65|wmiN>_%#0IaPaOKG{}aPV
z<5PBYSThHdnu%R$+mFbqSz3pL<(Q(zJq%^FnAD6lD2qZuqbqe>MKsbMvM6%|3u=t6
z-Bb{~>e@zG3^pmF%~esnhpp_N6!I5SRFN4%D}S+wg{0|iOt5jLsq1+dP3H#<ON#lx
z55*_OK7RN&4?|VhCjp3PlvKe7N8g(&lV*q9)_%nb`kE+y7eHlb+KV%=zvRc0ZX%zC
zu|6vELKZ~|mT^WzW$)M0DCXTOtbLTyDOOml!eO0Zq#Vqi@k7rn<!5I^pagA6ytdv3
zX@i@Xo3u>DLt45OUco0USGj;83RaY3oXl@-80F!34_rtOBLq$9a9?j@cu16>EbpfN
z{MQR`b3T>79F`u^6K+b!R*ya`)~{^%citdS<c!C1bgfd7(V*bBK4bNIbpWM*pyUBu
zyV6M%DUEgpg_dIQ?^lDL4G4J(*`MkWh`urwJ^sfh%YqLZ2a_rqy^k$e65%#WwC`mu
zzL6u9?nk<WpF^Gm7qudJtM!fFbATv3jkAWh=9GpyLoe9vs}|i3p}kl<d*Xgv82K_G
z2N%0B)#-QutC)<myu<rwI24#+|Kxet0jgMlwlTqO!mIv%el`0KqT?Tw_~29CRsHca
z<lRN!WZz%}!I1E%k;OQ@#c1irefaV@riWBhuYj%3wy<SkK=bNjko1pS0z^!VSPboo
z{pDh2nRg7s`J>8^On5F#ba2r#YN%?)>XKr7WqeFGEeM=bn{-tO%f>4InJ_b8vW#Rk
zm?u2^*_PBXLS0VMGsU>zXs`9oA|z!Px?m)^iQsXFL4Cu5Udd+YY$IdBz`(u#dKpUv
z-n=>j8N&$8Bd7LN$2t<E%m6V)dB=3#>+l)Qngf*PbLQF8rUHJa9Nyh&Jc>IOEvvbc
z{)ld8y2&fo{A&y;W7n&$YOLX}tde=$3V(wi8~Ek=wJ40c`d%bb@IkUeVf@-l-ZS66
z-+DMjhZ6Je7`Aa5Gf4yeTqOa09z%qVOz5MCd?#tFQ&50<QQB@lPWmFSef-1>R<yZx
ztQi~C!9r7D@7Q!?sKJHCLYK&#AN54RU`Kp+fi{;qu^sO<<z7jC^Q}BRy5%Rmz@nY|
zef%wTR4a_`qZ2CRhXU83C?|nqVe%^2_aB&wWz}$xL*VjthB1&#`vsU&G>8K#pK_o?
zDG*}|e&%Ru7fG$4eigkYT2T~a8a)>KWg}ngXeVDWCB7d<oXkt_To!SHoSOD6*9rN+
z7<n2;{6V~*t!d7w20kE;SB(<1Qzu@jURPG+EE6EpDuZeco)j#@_|+urC!1sbD5pGP
zJd<e#o(a;eG?JTIP-NGIjOHnFK-!=68cw#9QA&d}EV^U}!px!vb3GNa%tQhhRO}zY
z3DXc)Q*_A22Xp}scIBelWA5YXiZlzU*xL@KsXRB8q+J*~IL&aInF!Wr<r9BnzNp{_
zw{VWE_ZUftPLy};m$Qs8u#wv2%w7B4e_Q#?X<)FcS4|mMCij;COKXMIuN*Fx7krJ>
z1W2nxt4SXDIB}WF&=)E$u7%_3;BfVF7Cp0BlbiKWdMF;_OV!LkWk{II=9{Nyd~25+
zBhQ=Ol26Y0Uy~_$h^wI{lO-J=`8tsv@D^f$(QG9q2x9x<T&;>MoAJ)wtnyYSB1FlS
zl;ZP$k4f0{<3d-+5BP#@3dIT)R?(y4jv3jmDnxcixn^?vW4D4L5O~e^VXH~OXH58h
z>O|HWj&X}?sHDl1!4vz<h<0%0BcQsL*5m<(d{_$SqinCf@*mDvW1K~K!cou|yrd0P
z%D?Qwr!k+vrw8=0IcVVppo*>ER^p<uuPEw8oxKQW%JS%jwJqXVPNWkF?ZeI$O)iD~
z2u93AibWR*ujk21G$xdlid~GMP5W-kT+yeqT6x;UiVc1ru|4P!NH1)fvHl}Nr$JN8
zLai*P0rXlUBnBrWHxa>>z8dMnMpzjC(WFi=3K?trBs<onAR`u>8bpNL%$D$ta(}|z
z4b8t+7mHrgU}|tUb<b5Ty+5y$>DbtXbC6S!A5Fs27%_*#PvmLwaXHGHt;VtKry%8$
zq1*D*mVWN4V^x!n#fv)|Y5nclkMBQR!W`~P2a9vMq~-oW*%IL}=U^5l0bl#OK7R=D
zGexXe5*h44c_RBvS?QVqi&Pc{d~9)IkW>Py-;2DDB6%I#WRgoP;V~QahmzGA3oXz{
ztRK?fkrSw=ue{=!br`xQ1)U9a2h2md8}S`TIHsE}2rXIw@?)DyPP!)Zq8}}cv<pL@
zPXg#G&L((&L^zD%evkkaaeb~NRyrDQJ?g&JrR;1VrN4K`QlHu-_#XBLS>-DOeXl48
zNWsC^LdJt#EB4JxBpNnShd@vRK6Pfj;KKutKhO^*JT1Lae`@#)JJ8_4J1|6BrK7?G
zwr{FO{vxDmnJN31d*>~-#Qs-p^%ncMV&VyYwk;>)`>ngT`5#mp@rC{Y|JBsev?@GJ
z$TgEVR0eM0dP|X4U-|JY@2?OHj+xkP2v}3x(Y`ozH4-%=UF{NU#SBJGvtZ9Oe+XP)
zc6wD@_|cxDgbqaVgf}$DnG5gIJ+t{UIH#yN<OiPiZvm1wW?ZkW%>X8KpakOyvkGJi
z2EE7H)p+prI{$>xRtogq2RlH>ummWPTbSj+#u0oVp#K<P-Q4@sCZ=J29e|TO2UVj=
z=P(^bNg8JW+V;xP!7<`m+auD*j`9DFNjUK%LC%q@EDLJ}b5<~odee~i)78<?IU)xv
zD8I1%CW%@FR5CA#3K^wpO`Ew`lLtoFFK9%YTXfu*^BDFmG{!D$3MQ22Te_G0N<MVY
z2)YjeIeUqL%IdaE<m~%xVq2*k7l7^a3#PFIs}JTc22o`!9g0r*Q`74hz>Hs-JrQpG
zBi8FUDa`8|LZ{>5tB)>TH645aPh!N1H>RX6PgS|j`M=<CKs$>4eN{oFyv}eleB3fC
z^k%m5za)7xQ3!^gYshCm*n+EQl@tiPOpP0=IV%eLk1Sg`a~62ZR47)+&Dg&f7ei9*
zJ7L|(=};llPUAHi@5pf_4S!sq2ig$Cf-*e|{x<0GF^)UB&gs_}EA%%CCo^b5EHmNO
zEm%oR{<dAOfS7^vfZL^wb*oSm@j2rSP!_hSH(ti-6?uiVY-om(sPGi|BKRDUK>>>R
zzUF%O!_+yq;X21d435YdNwFbdKCpkeJ0GJ-GJ^ZPzeZi^zMiOlAibhbj>&OsuYRsI
zbQqADyyyztlru#+y*H7IKC1)=8@}(as}L7}utZY_L*jJ_s9axwJcRk@j)U;;gt?tL
z{r?Pqf9RJWSMMm!nab;zCIrB+;E6-STK|#M2;w{wA_ym?M7KZ9`jLcAG*y_NbR<)i
zYpz`s_#&2t9yWSBcR@&r9-4H7xXN}#$e9}c@nt&DfPe#s4)u$5>|<08muMbi@t<};
z3n+hSUIXlQ-0M!W504bL`*c8gL)zaxz(CfX^Rh=hYEV)<8t$O!R-E5w!G!KMP{E_n
zL}rC>$QBUmWrn*<2}rVll>3w{NRPDP^d;o=Lq=^oZ@hu`iOYjqPKe8p%!EUi4&)7>
za3o_g)v@b_@{w5hYx?YtB!imzO-U3RrKT-*GxB9S?YjU*H=vDs0mf`K3FALHDsqd(
zZD7p=c>RJmIsDq{-7ZyO>6!~dt_wnH18(rG^;znT!POv)yx}$rKCL4~V-WBrB_XVS
zvNEJRRn||m0{MkkoxTt04cK}L!s2BU@ZJ9l{d}7TylC|A)#{{^#u0{6NcN{95plP`
zr|>uLaugT1E^Wn3bOC4hqLw4lB!_KvtB=VAATsmpMzPBqATvK1o3RDq?(o@kJRSh{
z<|XEu1ZfIH7=d5xG@XF|(yD%(OCyP-4~Q}lRJLq~5RA;xm;*5dFMA?D+MiJT#<<U2
zg2J-})|nrn(+O;HNGNv!Sm$kk%5+W3s)hj3gwA$IH`zBh3@SpGCH>&A@o_+W=F5^5
zv6}CBtQ%#zNvy^1PhVo;n{U7DL3n>T{1V(}S3Rn0+x`!=!U0gJKXhI*zhl7TeM7MM
z06i%fg1<9gjGFVRZ5Yk@8PE|<9e%@>RYV>F;RIhmWwpy`LvWIW?q)QrZatxkAlv>>
z)Paq^l<Ho7x^6t?1|p*e_yT~muP(1V_R|+C`8E{xH6T?nEgz>Jxdn(;g3o95(?<na
zbjXi&6&x)0T||n^F&PIdJ`GShFe~&DN{&h+XLPjeIhFo4rJ&-(X{TxdxMfM_Ud_37
zF}7M>nXb>jbJi8sPdALr`AR^I6SyJezE86`A6cY;QPAdJuS5P1HH)`1SThTN?Q9Uu
zqS1gzeq7ylp#inF?|a|235ERurD2I<f}q6xz%GEO&&CIBm3Ic3nC(ia`m`@WniMb3
zo9`cqq`b$t-$EpuoG1d9UBEp+l~JT?cQE$78^wpk{n}_AH2Wb6=NsfIJ|v9Q902a^
z2|-)RT(a8E`}V(}?p2#MMz-8#aw+I8ZI&m%WJw;UtvN%TW!LkecLQ!&eyv5KQ@Fk0
z5LTE-h4LN<Yio#64LY@RwQ9A!I8c{2;Np-IxDsm*SpjSeBpK3M|2~?b9enQUbEd=l
zWjI1nu3+nd&94&Vi}ykJg8f<;KTcxw2)JQEP2BS>v{^@sz%^}N^0N`p`qh7%iQ{9u
zc{*s&LCQ46$$zs$4lv`WjTq&zt?7nFhZe$WmN<I=#5g%C1QbswC!OlFS?$t~L}RdT
zdkeG?vyJ|1n-YHU9QVTg-$maczfX~fIuv`3I5$5}do+{Po#~O%pxwfkly?7U!leWs
zAK<evYy7=R-_LP9KX9dsT+D{P0ODdkHrtD!-I&i$W-OTCT!rKj<a8PZ9!2PSj5nYM
zA-lVqSl<_NyD?rQBTpJIrP8Y;CAsa+4{IExfF81@=pErk8Z3@~-u90*^xspE)b?6$
zZ}**tSHaKv5><9`yU;5Uzg5J&T6RCAcvuMa4!}u*%1bkufDx#P&wWQo660R8^u5J<
zkDLTe<EG@xD;&c@!$dAVNz2UXobj=f)P&&O(k^?>W7N!tT|qNr4LE&$IhPk7!du{<
zD#{qX6PhOqU#Ap@%b*oTxS$dFI%}9~O=NXFy@p|`%-q3G3ltnu<`HIRqq=W(ty|A!
zCE0W`uy#$7u*_`{T4%*IK-x%ZR&A}UP&2&>rDsY}`7_nYN=L3}Q?eW8eks{#s&<k8
z3BeRz2MhoE)7U|}YrEH?^Q4aJ<mmmMr;Cb2QyF3oy(x6jR5i=+1{d76-bQ*GehYb4
z{Ofqmsb`L^DSkD2u4+T}#pkDNPmaI%ERXKN2su&fhuZ1sy#aGzjxgKqtO^BL4f(Qq
zT449vfHgB13QxViPQVz9x~es&de<B}HP1yQ>2%RE?z2KZY|Q}>@6Pe=DSf&d1q4Zi
zn$=!|D$k)$p^$NmH>q-r*B2jwA^A4K1T`?XDvTt=tqI>r{a-(@5P2J`V1#t~P<iow
z%Zb={DsO53B-<E@Cm$vs$#T?KKN3j>Q%*HYkc^lqf;?=+4%ER#`OP>dG1lr00lo?N
z5ELLG1CM8ZRAJ{bJir*iJoUd1nQ}8oGO+kOj_PVKZ%gHXdE{EGVgehxHi=KD9UcXb
zDXVHL!>l*-0%<E??^mj?eF#uSv0vdx(K2GQxF)NHom6H!<{g2JGc^<Y)_*i{cGxEB
zPh=q=jj`IH%)MPcg!<aAGBbJa%rq6Z8(U#ro!2&(SG7DHSA6d{+>=dRy$xdgzT~{G
zeJE0_MQNGKZ%OKPes*kSt>t<lo?`vUqHBnCRTu^R;7>4(lntL{?hQU{0n9`MBWSjL
z6gF5ioyAWQ-D||JL9o$|0vXgD_<5_$RCuUOV>?F$lKg9F6PAbon{)-@uhAjlNj8Zv
zISxil7<wJA)Cr+KX0~bb#zS3((N&ZnLanZ}k?!p(32<92TIZ1U=_6ZIr#G3Jg}#g!
znP`tYaZq>_bqftX>uKLqDOqF?D%?v$3RriQqu0r_@vZ7v8*&7jBEl;WBy#^Gl_%Au
zJ*cXt4~1nd5rmt<Y7il|q)9wg{*X?g<5b^J`g08KGvMUVbrN<=A;cDMEn{p)y$;eN
z&O9ol@D8;?_VW~S>9~s|?mW_5^giugBxaa1(p$v-TNpAj6=t6!;C<cjUHiGq5+$o<
z9xi9|>?ZK3v&nkSeH>e~qb2O;-xmb|DygIiRm)KHCSHqnA}-!GRdYY%-za7YX4c_7
zJ`EFpbKeEm^PNc^+hQq*)-D|4?F}%6S*GA}<(Wo~p?(3L+V3#p2s#tNs|L8-TZmz|
z$VCrUqNzST2&1mVYV6BGaKKCpe{YKJ_DoyqabKB!WD9JRP6XxU>gXml^e<N}e8_Y}
zy(pT;o1xED=_z7kKtip^C9RW-rk(p-uv54FHY;RG3Z4vwSf*LbyBgn<_>VD&s}dc^
zoCQ;_Id}y${=KB(nWA>6Z>|PrXcO2M?+w4aW!KZR^36>_EII>3>?Vk@{Dm=C$bKD*
zaBiFDEJt<sy6q-44?B@J1*h>SrIDQIJGPxY%dd)&h8qYSWM|^N2tx4j2`t8NO09`S
zbK;WgwW!w-0Vi`dWrpIydY|0{6P8(<=FH@rzC!%`$wGRK8+rJ}<*hcA=y|IG1>3FN
zjlRLGh^Fd=o@o!SqTzMmJN|pLWvBfNBenmv_!}WHZl`aT>yIy15Ks4lWJL36-s*>%
zIfB1jXu<?XE0vXkL@FF_{`D+?dG49bLZ=5=wYcaAajkzYc08<bf-}CNXyQIQr~%zb
zXO^dla%l^F{z7pqBHpkpTF#!508=fS!8>w>?%x(POc=gS6t+q@aFr&eP>7RXilFUx
z<QWD6Ju|^`AXan-lL?YqLCUkSjO-#*fRe7GFH32v`Q#g>@QHQbY&XF}+1zLQhuwVa
z?+z$KJ|BWBR_y<iPQx;F!OAgPIrlpYjse>-<Jb$M`V&fLM9A__#(pC*%ikC%I<RNE
zgCv6_WDVJv!z?zK1%rhiA4bg=nK}K{*<oi*)Q1;vk6(&=1&rD{;xig3l5tvQpEJxf
zdMM!-A$aPYRd`TCg3w$@5Kxky_SeDWyy;yg9EieIMTD(e(Y<ZX{na!W`Gh|#Ir=`p
z#CRIfjxfd-t9^`)ig+A|$x>K-)%=8;ZjEErxNM^PIHD@n`r&a|WC~u2oJxuPHq(hb
zQYfXohUsmOcaltlsi9!LH&w4QNTh%tO4bn2g(u`%BG%+dw4ex5<0c>mjAK{+84DGu
z>Q=1>%;s?H5)w`|mKnC8k=nF>9kKwAnhj;blrsNs$E<br*fy2+2#>*0SFii0za0;E
zkqr<QyQi$@oI_Wi9hQcqW~qKU%}P};)Q#w$V&#0bnB{34)E~J$7@p0*CRpyQ4*Qca
z4*JE-0d)VBnLos>YzMZ1wR3aL|6$FuhqMuG_0!Cp>6PnW$?e$)bz=yanO01ycFgxQ
z>%ui5T1o7;spRciV_CJ=5s+<Ya7kbGsK&h1mh-e~6WHwQvT~M+G>Lq)PU2toW>-pO
z_Lqs!$l0XI-rK%8HTu3v?kGCjMPIU75X*|{EyJ-NvF}87<PEp(l=Lhfoj1$_!Swq_
zQ7N0Z>CE)VAH-?YVs>jrFnpoJwnb_&FTH7@fGuw^C^gJ)=U`iqih-Hnn~w+4c4Tlv
z(4zfDfleK*u+#AGV8y(aAT#*{b7RCW_brpcK43+t)-pjhj^e%Dxh^x=ByiUUl&*D?
zq>7P))DeGXX(dJ7nlylpEO|dw8kNf@Aa}f@8DWpHj?nN>-hO&a&k;5Z)@&(AeD@ug
zjp~)QVxza3kaSJ{bckSg^@;x>^aywpo#l+32V;m%u@u{9jTxVYKcTt+`NvyxA_JjI
zyG~_LWmHI<wD%TN0y!8`obX>vcc>Kf8V4!dQFO_lay(UxhJ8<tDZNh?Xd9!Iz>@18
z=F5ZdNYFo!M+K=Xg$`!%#!)f1lCUY(zn&gZ`i^!(VX{q+0ZNs<IVKn{FKKk&N1i_E
zK(3)mIJEbRUnsk!0bTwHE3=~hpWVKe*;=;hroi)UbVuR!-MCRD*zaIlvfAjH;(D}q
zvwdAZaxg6)LyP{GJdR{3N9GQrp@s44r0@88?lP`IdM<p9VJh=7;k?;$7jAh9J<rM2
zgrMuC8B$rn-0?K&`ugbC3cBy~co+P&UO#E^9EHbMoamr=hWABvga7sLP;SjCTDTw-
zi)k2_<ywiX&jqjaKKLqHm*2Q&3)EoA^hM9a5EMZlc-cOY$8q#hG2$DWKO=3I$<lJ{
z_<nzv3wmA9sSOiS=FW)G*F1<@BBMWqSq*r5{lp!vjQZt$U@Vh3<FmQNY@K0WH5N|?
z*v+d&@gnz^mzS|s;-9rU=*|!)(z%}>4sLp;{6JRN+<z(tRJ1%e2M0l3@=@EOfoV|@
ziezFg!zrLs#3sA|XJURAhDI8qeVe=}^8Gd$nUS%g3K|UcA5w%I*4;t^*u2JH*Xc(3
z>c_q2m#Kskaf|JS?;e6!>IIwB1vOCgVYMh_)({eD1{2gFrNgqg)EgEH=(5AdWXfEn
z6oga4l*pdupA_YkP2^R6UUBQqw3pJIzZlzXeSwe=!bTRUYBC{69{{tBLxy*wNrVzy
z>%u5Aub7%LJ?uXcPMYSN8YzKp`Qn|r;yMW8oHY3}VK(sZiB$Y*w^ib+YUWcElak?#
zQQ<C|2AY}`+2Jdc>t1SwB+P1Qat170D*8ZPCYETeOq|(>#iBvxqj5%yT&RFN1IKaq
z{ZV(@he1kMYG?SntyIMLC8ua9+Mk#z@echOVi@He)u3AhvOUR=@OF1N&+v#4;g)kL
z8VaJFZY6vHC>e4cD49JR*YK)mvb0RBU^E4hBD+Sc9$*V-uM3t9$RhUv_zN*n_Gu_{
zbnwb-s5G5f0cOZXe=vIwM@+oI#tScC#luPbV@^2KB^nY=`A=Ax^G?fcGA?sxod_wu
zyjhEgz&A|5L3N$0e-iFboSs88&u`GIOL%^zFTt1(YTiY-r4bx*aLSsY=@yP=YoKHq
zC?!p!lA&DbhZpUY!Ez2S3G@ikIZd)6{4l*a?k1h&j_F}ZYRB}R^rT2eTvO9!JD_t&
z6y$5_Ee4p-C2w#$(#|u9FZ-Kommf3n?x^h8nubi*3)Ky5A)G$I;*S&(8kBBO_WWS2
z72f`K2TiS<wibPIJyROt#>B*bYCrgNaA@1{lwM(Z0=DlWs(WH_YO*k?Wmv}P)BgOc
zJ-xNBhLXvBCjp15!|vp@<V`P>q!e~xQe~vZqU(O{2|G>4MN;*6+4w!;p!>CqJp<na
zyWx~heP2U{a->;YpR3}bRC$luhI3rWl!JRrBb&5(2X($6-05&w9_v9KvrIEfBc}A|
zqxH1<kL!x#uSu`#<aCJ(4y)OD=<TnUa7r1~Ew)cYvEyzh$?5DST-I$9TX}(s=jvM5
zo56*kfqdstVxPzC?~X!bms9y1?5tksG8R9gMrjO+mtDWk5|W~^untWX^og19H15}f
zuOwj1b_TW5jikzp^Qn`ivJtTnm1jye*LjhR3mhuJ6?0?7^Jd;qa9}Q=+LtrsSvsH}
zO75C-qhh4SY>Bd%-`cCw9?wa&#iSL6$Crn`{1BFWO}0ahIZ6%@ku-Qhfm=<4Y>!Zu
z9qLm`rYIt`p8kVUnw~;KH-|1ex){;XCUzVavHvZdCr&oM;Y3k1UXrl<`tS%H!$wj!
ztbW)gmYCG9BEa#ndb_MdY+n~MdL)(xMtz3BH8&T$h->iCiSP0JgcrTx8Fi573J&e>
ze7gGhzD>$DngS>ra~c*~BrEr8YOX$$&QZCvPdNe<6%m=;{jOrXD6-$^F+r?8<}kyo
z<Y4?mTat=)kK)M8+~m4wkuYixOtjNn)o+!kb}<aVD4a@hIfu$}Xe}v$^<9X?+kq7;
z@9;u4^<^jPij*O;@73zhl^{fba2FphdTpzRwKb`P#%cCQtk)j7{jl?iq&N*|=Lh$1
z$b9{yw-J=>pX=(s6nZYet(Npj;(v!B{j-4LIPCoHm9L!&YSYH2R>613hs_a-YGK`#
z<c-h83w09vTc~)CfU)z)V>p7?NGv2VA`?y%oJq7VQ#n(zxgWS?Z0(m2=j8RB%0fM*
z@T4!rMdIO_oE@^h^iq(7ciIfI<@p%9@CsXeg4D-rphJr?*+rQQav?|@>eJ}Aon<cl
zWKPWt_fNU*O#=a&R{O}s%2R(X85VyE+M&!p%RK*^)P6tc<3@1xR5ILF`SmiTn4UV8
zj>N92?J%!<@${|q^$~9J{rHP-#sW)Kao)j5N%hMC*CydoryW;N>nK*m3|vuh5DU6K
zJL1+*UV~DJCN~EPK_46TKe0Iu_))x(A6Qv1Dp|9?I@WnC)H?G5HO^8a!o)kHa+Y}9
z^g8!?P>`oRrX)K*=fxLzZ~18)bs9KWGC&t|b0B1b_BVen6h3u<81u!wMl&&lFAl^d
z=I(wmmM1OCRoGVBmWHX83D3EffZ#cMVHP*8FQZg9Y*svHKYdh5>y?JST0XVE$?cA#
zeAhMj@$Ni`>~{1BtjAE<a@qo+P5Axb!b27l#dm4pyv9gJIN~8YobbHkg}OAmk_}FF
zg#9aIE~%hr!-t7s#7UuSq$zQsCO$RC{ey&+;quSR^EH><IukY=O0qz1_tF;tqp^i_
zqqZhCRtkd*-=QV(9<%n3vL{dT)<kFP%jjY^iixR726hi-IJhSAuYr@1^QxIA94Vc-
zQg=>*+}fq+JWzDDpb$XG64ji*6cO*1hbck}q5wtZSD!m4=<O3eqH9bCwZ4#K%-Z+;
zvHxAg;g+9gdK8V5qKTkVV5(@YkxDDJ@-tt}*<6Ydzkptb@JWOsD;S=p2)?NNcUc4%
zyJ!?I-|k;c+o?wN<#ERQqA_Zt#NI3Dal7x*)ObHIC%!o_eXkinVq840GIz}homXug
zj3zMcqY7T~<^KDGtmj8y`Dq(fx$Ec3x@+$wBlK-_qEL>L+1h|{lyYpQBzlpJa1?j%
zcdT)|{5;JDforq;h(0VcssDNbgon`de$!(iGnM-z5)a@S+SDo*pm|UAiSF5q{D91-
zB*%DZyR5_-Kla(dV{1z)quKw~=ZNztd{B!8GC*CKsog3BAwO>&YaO6Evli+*CmZ0(
zQa2t|MC3d7nH479^Ih-CwEI;CLTEOJl@OpiD<!E6$34)HeQjkZ8EqF;xe(!y=t0%|
zSD14o@*B5EI4h%T5H0<<GNrdDf1y&ch~~C3>DaKCA^HrOV3I6;M|*w?n=pXqius<t
zP&`FU+K7i*O3{SkccfG+t#XmJrxZ)qI%|m)T-im|!U;vY#H7YtkhpWBw+x~7s+Otj
z4S~`|^ZmSMuPtIB*MwE&vF;0)(shUExy?NOx9Y2kb)SZ3x;D}CL2aKk@mTFWB9-^-
zoQIcl=8cZtW}?2OTh;nra$*nDSYI_iiELY**C*OGTY<Fa$9(=0*^HHkX`&Dm0<GM=
z8=If-%Dxu&+jj2nD;b_S)xIzLA=En6x<+E>-K%znp2(4HH`kic)VjQQx!lfwYc{rC
z8*#yR0$1%fe?tX)&zf->_^0#+RGWu=dR@@c?`oUPWN{LBQ|#?`mD99dZsjNW<?E=p
zdmXt*)VO=8oJ#uxW<SS!b`B<ISGQ8#d6|zfMl)hpDKR*eXfky(EBr9NElSNk+yH0m
zSk*M!xi<+oTx+*91j?rQQbK`xeg+UZO1+Fxi)3h0TW>-pYJVtQxv|Z8>T>iM%B2~R
zxStk+`JPLLLMM7m-4;xpVP=ivuol7%6~$fx&s^I!@^jbSKU)6UJ0f;3>WU5p0yD9x
zMtl<<>`i7&i~sXMzw{Fn(w77n+3P5WA~$iFJ(^0Yl!<P#8{%ayW5w|c7nE}}%lLUA
zhU<jw0~=L3Ixw<riETCT={JDXJ07S1b_*ZVIgyUk`M0~R0?YK6=oV<8;z;h4r~oZ1
zgqN6~_KoNho&Vzu<}%4*zRdt3%c^IIr98s8(6=rO87V9v2hu+q`{y!6xJWOq-S$e7
zP$Z6$EfSJ3qJi^Y0wh-il1(HkO{hpsgX#HT*ER%O;7R})jf%$SL%c;I>&UVq(dX+u
z3YOqVgQwNax8lGKvjbJc;NKaGuNo1Iw#eooYTA%#V1(sv7%__}2ei@!Sz$J<xQMP=
zR2hD6RsVz%7SbK#3l!k*<!~kYf@KQz0(?)0!+pSnS+&jNi_KSGUw3di%?Mk=LzcC|
zrZFm}(qJGTsQyqd@@}<35#v;vGCCdUqs?0J;v^9}@^Oo}S!~NefN?pbA|W=cdC#wV
z8`=UH^%DKI#{j#RKc%aAKb+HvS)W|VSyWRoR(6kP$<TcC#xxBpdOpK0UO7e5-Vc4G
zjMBQ=h&8Wqt9Muhpx7AO<?96e_%j2o-2yaY{oOm2+=}Cs4!$z(k0vo4t|Hf|U1t;*
zMd~h7P-yzI?J+2Qb$;A8Hfk~NGk$VVu*hgE!chNh5Zj-Pj<-hJIPG|%Q$iQcvoDsv
zw(rmy(Q(3d(nzbhvuQ&6*}5)5!x}reNLs+W3k-vsnTDo;hE)^U3_a07{P>!vj83sA
zaE5Njz4P~=S@Gqi%SM)mq~X2chNf*Igp^ux;W^j2T_zTPI<MyzvOpwjI)^tp1G2-U
zRTi(q<xl}P&(jPwv$w^I(ra^(Wd_3B##HkNdc}*${pMNSHPfW58?r^`Lv3Uv^W@yE
z<;9|a`2a<Z56l|E_=HV7#=iYQ1ax1g=Ky~N6Te>7K0?LQ(zk!V+Gii~tTRHl*R&uw
zZn{Td>V(fFbSpQ3O5oE<p0k9u;<ueYQk^ez`J*w%v2P`ZGL`4Lj$J9D!96)1<84Af
z#RMXpZ%gY6_|CiideZ0{`}vf0C?ngSO`_QOPR`{dmC|YcUx#aK&ZiA9)=d|Ba`&^p
zZUh&7fEp}{!I#ZnKKI!rCn!MaDW$gE^IVC}&&&E)W_;q;INxFMr<)92x92(LGgYsl
z<9Hks4P3%j?JM`<B5c~`o57M6O)SArnZ6N0E&QT)k4Gx_ddVwEgV9cE7Lh287041X
z1l%$GL72<1a4Iun@R=DZ>8iYy1hD&8ja4QC$_U7M`n%`!^WA1VV~Y?nt16d-H-ywj
zpR6!Y#z3fGsZ?J)eb<WY7%}OQ8hY!%IDW|bedxJscOnF`3S)%$uwXST_D>cdAZgxv
zbXm>xpurM`LP=VW4kp?T1*P^3C2YDbv0KS(5a2A!Op43VM-FGxp$(=SNXmkQJC{9>
zfRE<a-vNFFl*wg*mj!fv_Qkf0s`%A`uX(wSE<zK=oild3mU4@@rlt@VLD6H1W`?tX
zA|xbdi2@k>6(BVOrB#${AX&sbbz%)Kx;?&f1t|n&Qkktr*+gPc>`d=<h8nkn8(ZtK
z4roh=UtoINqdg6#xBd<Yp)(ShSuoT=o+V!rbZ*Q_t1=nsBPzV|4?>L#dRr}sA~2OQ
zM8dEcsskG^k}*-Cr6D@MIwpFY7G6?as^CUD?&DjqgKugb?DlpIiV%ppXh=&3yT}8f
zu<ac((5QEXfXoZkC${y%JThLMiWTyz74(O3cE{ywIl!+#Hf9@+C+aTzEcdXz`;fCV
zWh_o`2O5^kav-MOdNa`9<EeZeCPFKm=4WEm?-BRpNCJ!+tDe0xj(sY)=*9wzL^dQ1
zJP8!j`%cRZaNO0hAvR6P%9-NrRP0YWZiR<y)a&EPsD=aTLm1DtP^<pO-@JvH$II)T
zZ*1q>ePlrlRa64&US!&<3upeGPHrB%PFtBAf6fMN9L~a5b6|sgudbOt-%mK!@ocGT
z8_etey|OHQU3SfW9Z}YGM`^(MYqB7d!|VN$WT1&U@*V$-#~<0o=d3@Z-Zr~#@2K?`
zA&bQrtfSF*ZmSQfBZA9`Dtk?}$w6foR%DR%B9YhJ1QY|1U-2{adA}P+8Rv0o%TwK8
zf9>Zcc(;Es0EJP@nzvrYlxbG-!X}!tSN1>K+kSbqAU}MK=SSf;D9L}qA4T~CY)Nv5
zML2{_q&_OuIr}8;)*HEN`uV{M;{FA_;Q7mgR__ueyhPiJa>}vqU!{Luhe{?K^!s|M
zXybRM$gSJm$2sec&EiA8Iq9_n*AObY)#$HU%Vag4x;n#<E;yTCa@)L2e@zK}9>F)e
zflCU94&tQG<mWYRpD|hpwb|a?tKhQJZ)-MEOcoid6-Ti4?1s(V<K9mUymNcVweG^P
zNFv!Tl&3lxhMAO1f3sf&GTqzSZ4ME+){cMR!Y%P+?(KCSO<a+!GJ9|>=3vV85E{Uc
zYZ6K>f6vP8exv&GGIA(^n1&^fx`@yT&cT;Y^Q5K%^$Dc=bH-9H046eyNouF5Pd~$9
z&ZNaadKa$(M=i$<jSK#wmk<(z2-a@N+OHzl=p-Q2YZvjr1p5kyafBg(OG*Th9wSG%
z3*K=A=L$Rvbc@ZtK;fTvEc^Xm{Ed$9Fe(|E4*iSof<RnrKUfo`xOohfKO=XfBsTkT
zqlGwQ>h^V>snz2yd6Xgz6o|AXEM1ByR?IS41<mO#A;_jWki~joCPlHmfE&V3Q#F~+
zfS$5kXn`tJCk4+NN73MqdinApYt)BYyd34Qxz1BA>Be2GgTN&%>B=b0Sa=RKeE9!y
z_0G|CMct!zY~#d6V_S`F+qRPijg2Oa)!4ReG<IXVvD4n&_jlj#-usR9&q+qk$lm+x
zv-VtbuK7F-#d<2*sclSguu7qEI4t<|V(Kv{&9O}V26-@ICISR3fxfdv{3rA2PwAaH
zFm<aKS)%FeaH)kb&hH!DE?<Gh|6h8L8;q!9lDJBhWTgmr(giBVjvhm+6u3b|h!$fW
zuy~*Yg?y`@9)tZXUb2z#JZ`yJZ~_dDC-ypF7y`GA#o0Iz;mNGKniSu0+kq~<ImpV>
z8r82>LHu1;!)k))=eGyHlzMm{etu|f&m6L*5#QbNGsh$Ztq(WfH3z&*FdJQ;K+kr~
zUoZ1l3f0v_5}!|@&l-NvvS)tv=og23L>-N%Rqk}6UIz936;wi79@esm#+QXfF4M7`
z8;BDu%>NQLeD3${a1Q6JlpE>GUNOw{bFV(D&QQDc^QfV%_iakJm0{MGIU==OfBzDT
zz||BLu{U_(zkPJWh!=g_G@s4$IMv9Qr-Q9D^}Ff<QABt$9m?L{*J=n*gr1hmjRX&g
z{yZya5;XNs40rQ>bd;}rX31gU3HVz#r&q=K4Cr?5Ud`UF?~o%dwe$Q=BL~at{I+FA
zDJ-d7x6d!$%5Ei|<^$iZ#zRrQ^vc)N8RvPTR!DKjN=Roj6~c{iaYK&QLEQK8PjACV
zA-L@F!eC8p`#B*6`6ZW_^9YM7I)g#T`^sYXLmheiZ~|w^qa>UOh=sHw#+MLifC}6S
zRC&>dm{%@|KF~rm+#P_mdO3QKP>z$ft`XUc0!{jS>oK-V%XP~{L@OGJR?5U+(URyK
z<73f|R{!)ljnW>O>?Uo0P_2du1&L%<%vi8NrLTQp*i>iW6T-rzI3|~h=+w6*lpN*q
zNq|Q{oCiM5)cfvAcQ}BhQ(2nIt(y;Om=kMPJ5Wg^rpb7`j$-N)PRJnFn3dXAlSmu8
z4+g8y_EBM|cSyH}=0=bix}%uW9n4RvXc-gx1>(9zPiU7{_RwKE^S6Q2D6Pt_=K4~F
zEI@C9$d1VMO8dF7{CD-ke$Oa3-)!6F^HAq^rZ};yFM47sg5e4qSW1G6Oxq_9=6IG-
z)Xnth8d!K*(<3P=2XkPv^$*^Bc8ddBV0YGT<9gh>F9eVC%c%8R){KvTt$quEG0;Z;
z4f<W&4JHM{``zmxHV{f?06iryPnw0atn6CsW=07sfUY2qMj8Vxg@%_xMch@=bz0?n
z(IoHt=ex5Spb6`;bF+IBu~YEJw;xw$6=#_lXHHrxQ{ipA&jfT~oVHGzYlW*Dd4m^t
zw6rcpKWWvx&R85|bii6|tatBzEfy<?)y=0uo!39WWmU^xLCCwbwniz*4Y5yYGoqLO
z-tPQ6@B#Yjb<o-E`_OY=F84_x$9+A%wEyZ4-5Gi-iOb@$6f%*({m(=vV)sFj6(P6k
zcRYi<Up7dkTo31)PP6YRy=3|*%&nxgC;C;0S)n61_^XINQlA?BTESE>E8F9ZPoq^c
z`J`y+`}=UlF$p=cdc0GD+Y7fxY~Ns()U?>&@rh-^GH%$_G9KSeSNg!8pmwwL`&JIT
zgq<MNQPU06jxh+a>hOww<+$u#@;k3t^&3sv|Lb#ivQR@p`(%JWm1_57VCL*(PjrWR
z(mpZopQ>F}>Lm0!B0$5e(2Is1f)tM&pr^E!px}7nj+hQ3pL=B1wq~pMUB;j{kIm1T
z28w8;+$azO&a=%f1w7`OnX3~#nB!+(yamchj_t#FpAj-Xd&gD3(N=t2s4ENn@Vh8d
ziDwFp2RbdRekjupWcwzYr+wR72aEDm<50mZkN7s7T?MQN1iTGG_y*_)Ybf38Ep2$c
zP}B{6uru5_G9DY$;}Sm1To@LgvZPPo0bvO!Ry<FR#hm+EB4c&{lrmN9Ee3ZL(Y5p@
zF@k>$dKVWn?@*7U$E(oKjTFn?uIS+@grAhsp&9!X*O#%dX!nR^ZKx?UaRU<Ra>g^W
zm&tJ5PPINd^?`JM>9dnU8rrl-lHyBM`xaQ8<t?1;(}b=^Krc0VvbXYqX949>L=DY(
zxIojHRH!URVi4(E6t5D0eh71?KlJk=v44Uq`Aw%XmY+FVdrh}wBCyrK656zKw0q@Q
z_mfCtyE5^<Jt$}BCo&(U1z+uKScDCNoBNN`_5QVe%Ni562+@eo{_L<<L2>?Jo26^H
z{%<<DAyD?UerK||kx@^|D+EnHW`ufJ-{T;fKYKZJ`Meq}I?k$Pf-ZYcMkcWW9JEim
zQ#5xjLD{v(wY@E~?6pb)m*I((j4NF)_&wU(%~rMK9ELjhJDLnA-+k3kKEab9CcUjr
zzS46&T`suILHjWA7}Yujczz{`-bEs#0(W9AWzu-%I_v}Q_WOOfxtpYA7@iU{!$#eL
z#WZo~W+j+OE&t>78WB_TuXipaEce?FAn_a9@%+fzbJjMHN4}aHzSe2<Er$!=`820c
z3wP0KZP=GlAV6t;(uFBjj*0Jq9%`EAu2-R*qgAIb&Vnn&)MWtv)AQpU08h0zHrQDk
zsvTc+EC?HhR0esO97YEF+_gT}2X-?BQaAL6z{)v2^uhjN7o=E_Njpj5Nw!N?iN5QP
z9~gusa#tn|3H2|mefd!;2Hya-0W3Ik!@z}wL1DC{+KMF3+hi(P)ULC|U}P+48xZkO
z+?;()?ru9UVx{Cydxs+h@=Cqtr=~pMoY{0d5D33)l~a>V7sd0;<@dv;mr4`K!%y?+
zPt;(79l#Tj@;)!lBC@7KbjHZ;Mg5>2DAN>T6N_D34l?fY5r_-Uu@M#Y#}-w7NgG%c
z&Y%<1<T0&aqsW&5AF6^aVJ~07K;wy2t4&CE_awWgm17l75p8L4??T3dRBB;VlWb2F
zWBe&#fC=L=I+5N`N@;4va|O<=)J0>HHUf$p%UG(ShG(3@KD_P2tFW)Ea4mKTj}UxK
z9mi<(*3KT;EKV4+KIeej&~kL`73K{?@9amT@h)GVA4q#HazyN&ECxR;?vi?<EThLZ
zwH{Zl#>-@KC~!ia(aki!%b2jWfvY~4m1V=Ho@i*Xc)$>8XY*jtY7y5t+E}yT3zgl9
z!kF0gIDftFu+={Id82nJlVhh(>58Zpm?2G>$`=bq>Sq*OX&m5vZGn)~+L$(l1idY?
z<pOZD{DCCFET*sTraG*@<G<qAK5d=#a}&R}TKyS`*R>M9Jh-<8sEwSOMt&aKi3~<>
zsZGrK>bqhwxG$!N_Ztoi;60FTx11C|0v2*@E?BJ-4V}8U5A)Ng{din&FO_0_>j1a|
zapaR#tm7B^Y^B-f$H}$7xDV5Hv{}__T9Omgl@A(jr#WU_malVTd;Bb}+ofiuHrfG8
z7Cvw9d(f@%U-!Gmg@pEhaXNivDgXXkP5kCVXBmqdyz_7zt5nVR{iY+a)R6yd`?r$j
zLalW3Q{0s3M+L9Xpho8QAL|LonQz;+IpiBx=|_|Fhww?!{maCn@0ip|YPBt#D^s+H
zi`@|#nL>gY!EOIwEBTTvTG25t8gcL%Uk88^H90m^d??t460uEpO%G5v7TVEvh3286
zB^*e)whj2nO$DYrt0r5C)??TKwtQ-+?wpC1uf`YH6&&V?N@mmPkpO#SXj2Rplks*F
z<kKDQlxslFutVRg?~0Oqame+hKCkq%F4G>96<EU@B0gL?;)@JteIJ<i<h(`Qtb(ba
z!(nuGz@L{qIsx(2BCO1WVV)w~ND&oCy6<QVM$iFu@Z@Q$VyqZC@UT!wraU%*2n>=|
zF$k-hxD@cXuxEJuuin_-hGR3W&ymk*h%Ej@&c;ZE!+klnwk~FV(8mvR$Hh-}f*T?K
zyE?mwwu=*|Moq3OBq&A(2dOHIb2gW)EQjOssuo6`m#N#~@O>7AHuT5PZpj5)3z-2%
z@*7#ty}nj1>GGt%MLJQzy#C~n!S0A>lwd{hxuYC+muOduo&SlWm&HfLJ)TGV#Z`30
zt~y?YUvz+v0G=A}>qs}gMTuwheED#rnpX_}Xv!X*0GkW;4wwR+Akmee5-4r&oYnov
zyvyT~$cwwzORsx4D0bRWLJC8-*fWjSgMhm&=^Ul8`radhqsG0S&PQS4r;UNn1CzgU
zDtxezi}kEQZN_)1>8J+%$mJ1?5Fr(EMZ#nvnW1b(%4%J;6Lk$*WA0TezphWzOA9um
z(Qi)1ZB#vhZB9bb$xfZ`EmjO)M-cyh$@g;mEu%)=e}yCHnfOZL^teChB=|n@speu0
z$ghaOv_cHU#6Mj%kKzx*zV|Qf1+eo67X)k*_rzYMCiJ`RC?dZ9J|%%z_}i(M`&0Ax
zG5fKU5u0EBi;qG&#}dgWj6sxC(e*zt3$;vyTsE@bzDX)<xeWfXL#5?X<}zyB-ukV`
zcbrS{(N6(GC}ca)-wApNOUF5nC6)m3Q^Q_yTwmXX6M3J(HvAgCz`<LkH?&Ntu3`8|
z9slx%9esM(y~^ysx_ufz^0MQ$pY_J!&*K`+yi~;_eP6SqBLvdR1E7l0KD9u;!AuYh
z3XV|`MqP+P?W#Z?IpgDS)el=lD2D>HQ(Ez3@LFH<o!rFvdPlZy!;0h}V|4&@6U^ps
zO11SP${H^KxohCbIJXvA_JC#Om4c#24o>(@8v6Q^_iu^$NSZg@Fs8i|VO|bGNNx>&
zPQeHWTvHTPJ8X|6-AiPZdS?-FFp2d_9YP4@KpmGmpKLarWu(BWE1Kam8c2VHpRx_G
z!nEPNy$=qH&h53c+8JXs$}&E}R*6pV&7Q{(s?0JlZs;zmVE*#&j07?i7dsN#0aBJH
zv-x1rT2HY#QDux|qlo1jgc^qzvizE0YLU{`Q4rxfcW{A-UBlDH-Lf$KK`u=bERP7Z
zflM<IM2pWuCVueZSGB(%(ZFA|eaF77Kqm;^3}Nom`x0|an87jDhx=jpUFeds$Y+)<
zBG{OmbV7}sJK;(&qx*B9H9kj6B!)$3U_#?2y~TSd>NnpqyBsd)Ftdj#ph6BsSHur3
zG=n|($@R<5gDn^&!>RVOgr(wrT5|7(m}H4`StGd7Y|<LvbONO+cZS8C@1-Vi9kDCK
z9toK*c|$haBcurt2bG!6-<HSxxH6m;X?GRzF_zFg!$9dTZ_U^g@C56My29{|)Gu$7
zhd3rCL5+kRO|#wDUCvEi=7LQiTSkY4w<PXs8>G7U(kWKb`FiVs=Gr+`3%jv9XLl%n
z3V*1gr?f33#_HYXj+z)TXTy`q)>;-NCr0HcU{FG%{n#n7$@uOkx5?Txb;sj&;TXd9
zw}K62gMT}v2ui8Mxlpp$gH&Ooa!+AS&{|&diXIcZ6sKnxb9Y1yWkUC%qR4B+20s#;
zb2wYIkV-^Dp(>8e#kzc@YSD}s)rtQ16xX;d$KsGQRCnNxf*Sa}(dH|?us&WUDq+uo
zpImfjqnt-xw{V$YseJbBDYlUR<<`pdiv9*dHTV^7hU0sEQS0aIz5SEx%6OrnD`w2<
zCiUDPNS|k)S9T|PEL2?!JUKWcb^F^ykASGt=D+f~_WeHwB^7Qa%73%e)MuZNH^(#w
z8wC{J7q@<z5Y+m;xxmpu1BEx;g9{l}+vwL=JIc@@%v^p=5|>%fwU@UA`HI~=v=R}Q
zd2yHA*S*jxl>L7DD+yq$H@tuM*VG5{h}ipki;;gm{!o^4(lh8FpK}U6-iA_vt`3{m
zXUR@(@~1jU6m%Tcw*2Wbo;;q9D%R}4pLn*dew4lSA^N*m-Bi#3n_MtMtzR4)t7aMg
zT03fvqx))v4W=ZL7fMR)nj{N<!Xcb#hp<0m<cQasM<gAN8r&-w6TfZ|ch2ES?}Efk
zP%IlK#xlmu)AX8x253B-3cC96?E@Z!H4+e;u@cM;?jqE81b9S9YJ|Fi_|fpN1sr~y
z%LFJEPJ9&+I<$q@J0;)R!38<h_rwU3?YrE$uxZ(Y+xt1t*71#Zq!&Vd!iI<ncwZYI
zvAwM21#%*zwYIH8u?Ei}m;2=_Q6+u1i^5=)g972&PMLGCz6V+-=LhD%`bQbJI#&r9
zg_LANqh~Ily>iPNqrf5=FqrsSkdMV77KLx><I9Fabg*~!o|*d0inDUY&-T7oVjxdK
z4Z5nmO}NY{l+{oiS+qE!j$;eS9E6C5qqXX!B%cJ&UruyQsSX!Ke>MCZH#Zz-1%F%v
z>4{8twwY>rS;L==%m-^8MFtCQ*ZElxk*VINmA(_WJvjuwIU;cv{iL!})S}c6;zx@s
zouY+6O;nqSAFlQtA6WH2G(ms%^0jttY*(pvy`<%RNH{xzf6zC}(u8o-n)4#GraC%i
z{oO@>!ZeW0c2(TAkj*z=t>F>PMwIF9g+HXxT>w8bBpbJ2jQgz`zdCi4jp~BE&7g3E
zxnYM;mnt7Y=-xz1RGVyEB6e!-JIb7{CEEg9y4~9xw%28md|=8@Se~m9CsXBf{N!<x
z2sxGrg(pS&0A7dS#wQ{C5uM?a0^fx8We6y8(sbXgFyp-vgiK(=H-+%Ux36thQ$iwW
zVl8~l9gR=8z9AdT$Al@nsS1WulUjFQw<3;K9j2m(PfQEy!()l)HtLFT+Y!h(pgbO(
zVmZRqQn5K3)sh<ARlxK{-7#Ib4~MDfF{fnPf%0)6T*n)`ywL2|8w#AK`v|!#pD}D^
zF#p4zT8YaZQFfd6BJ5P{-3h@O{c|%rGHYbpT7Fz5lYv3v@d+X}$X$8*O1KKe5UtG#
zyrIQxb&qnsYO-81ir#<0*#~H6MSkYpxVoYQ^P$90ff%8TRZ*}blbq1BV`(CVRBb$h
z?pY!V2}L?PB!v3G`aK*nnn^bVwZ+>uPOZADdVw_1pH-a;{25uQggUujlghM|Z!a)q
z;$)BGtk9PxP%M&^>Y0WIjbb*Lr&7F%I3sZ{R;fK(`!teaF{Vzf4Bekq9#VZ@SSI1>
ztgs|nBUXB};fQ8wG%T{GgT72k=9e-BZtB|EUI&zpHiNDhawbigRv(#sVy3dKY)NGN
zp^<@bWmB=T<JonC-b#VQPRqj{5~cj&?!=TJk^w}k#eAusF6Vp2!lFe<*s_;>R71rU
zZT_JgCX|M`wXL0Hg#$hOM7Zj5rTxf=y!Bz3Ty2j4(@Z=pOIr$6MU)yVoUcy{KDnQ=
zrQTS&O0-%4pF5ze;riGsx0i`<l?pCXU#_@0VOV$AnH@#IdoCe%DH!lh&5&+tw6Jop
z6g>K^zM2$^omtm9^BmpoO%~x+_ffE=X#zz`ll@%QMD?~*`xX1@GawFOV4zZ<rEo6F
zA1<dAo@ic0@U7T|@}LUC`0ri-hHC~h`%e&8UqA4WZMF+2Q{x+8KUfh?!z682=3rGF
zpuSj*m%mHa3g}pBgU*<W7kv7T%&P?_S8D2qE$dULsspBoMl>vk*WHalzP+B5dweh=
zFQUnv?&@n5l0Fry$bf6w{~{hacuGKnT9Vw8Nz8!n4PB3z)%AVsJh$7h$2Zr||6r=^
zbKmQ2;D;c!X9kDoJe^#%>xJhisLX#vuSI@Cb&cwpS)gJ~g9~x>d{Mo!hlf#MrD-b_
zU4mcUNLhhCc{@a+Tn>$<G~VJgO46dgu0d3}e8=eaa@Zz}6br6Jh3U92nU_9dzyqGA
zyMs<+yxKHf={OR4r||%-5({i@QM~dkw=i~LPp1sbv~=8vbYIO~B@hs8m+!@fP#f&c
z8l(kg*=D;U1ph2wvdJKx*~wmngHF)#l{eFcA5o@g(#W`95yXl#R51bt<uMS6d`Y)q
zu*jJ_WUE9AB6G$&RIZf`EwN_I(nW6Ia4r=uMW;2>aIah(T}=rIDDGIzq{)>m-kwFf
z!<A!L#o!KWNM=iNO>$+E*vm$sR`F8jyG(#+hWAi+VgDGVPuF;8E)9>BS#xjZFen*e
zG3%04x8N?l$kR}hTP|zxd{LK@x{h_-fVU1dS*_cUh_f1U>hPPRvME5zG%hRLHpagH
zDyFRA4|mpQ^j=QJVn5g)pW)9qr7=Js{1My$(6;+6e)X5biGGid{eiNI1^Wv+ybA2p
z2ee3l(?u_8Z-?%7Pu!$s_+|JgB@U6_yPh5+wVuKRhx`#&j9wX+HJehDa6>s<`5Fb5
z)-5^e0W1M|(iGxRhN%Ej1M$%3zHUMEFOYQDCn;3RkethN2H>Xni8~y1Ct<!iF<YA7
z->ls8CGRb00JU)M#|3Wak%|-l9C)YPvZ~o9%^{+6n2$-(!~Hb}wCPqX6;#RJfO{#G
zRV)Ifx@<e-HjrY~_9+}%ADupk4c0k(C3rm!Yl3pv2QuiXih(k83EXSMoiXpruWuJ-
zdKf*erIhGc#VZ@=A-@AVE2$w&CF@XF{ivHmm8H*X8ctAXBUnH1IUO#Q(Y2237fV=H
z7IR-+89AD75mGanYA;0UbgVWds65@K@OBj63<Z6IPAeH&CT#d~Jr9DVemsonV2&zX
zEL|Y0lK5o&0GsAe5Tur8Af24mh#+oWQXydObP+%Q#rJha`h}I2^!I(Kq`#j=$yB3t
zEgIJ61=>j{3zWlG*LL}&BKjiN{$DobO6_vx9Ua;U&CW$Y=;fQTQL*gDC&kdmeRB~s
zUx5`FMX8ahG<hiA7Zs{jd9E<<LcK?$uF-PJQ9oZfk<n5_Jh50=1EE1wsc6@kjLnpW
zX#s4mI=`)|uBs^KL;myCZglH=Bq@_#UcIBm1dIS@@nA9}(_(`H)Fpirhv&u=xo)L;
zb&BeWY_qvRNlCvq0WN#Ek%Y3)@G`pjp=*Yu-3ykE+>=;_d@b7`nhJfH{&vtIn7mLU
z#UA3!?gghyKsy8%#JYH*KOfg0x(aS9DC^>*!Ja?^q@W{V-Xa?AL1S<)YbBrX&kf-r
z-i_aOcS4Y^&^I2y(R5(9#1bf=Fy-hmAWI;_J0NR=e-11e^Zf~)(Cz26u*OJ5?!y`^
z{dWC{=0e@;g?Ldp^%Uwcir;%dGCDEXi=ZowK@KhBv+<{jpTJg+5DmHB5pry+u>`Ua
z)AVrT7c#ez3Cek*I60%UsL|2wtUHV_SoSl{@o3)HlfvR2T<H9r9upYKVk8LLvi_ha
zVYE!)aYY3s7drDRg8)bu>8Sfm<kMyNqLcV3**-AHdxB1{ve4oOs<8{0t3nk^@~W|i
z4lD}oh-3rMW>uA_+x;>I)50Wkue{)cA=7u`@Ti5^3bO#Q8Y4SYtz3w3O;CQ+5mSM$
zu>WitJYVg_*<?cfnke{FwcUC>LKEXE#hZlBR0ARdeSFW`S!eF!j!oL<FE0mC>{YIL
z>kqKCf4h-;TL)$NBWGJto4tOBupiq8>C^{C<R0%KzZ9;W!dXfjZ+I~^3CrgW7&qQA
zofYA^GjTX+mM1an^mvR;_`-~uIPM<Mh;3nvLgPz(xl{;q7qKw$0Be%PyT)e&?S(y?
zxEnp-33xl_F)>$74nER-&O1fa`YvA-5Gb;W@Zm$!nmrO%&5aoemX;zS@8b9yG)aro
z^ynyfg0v9fE(c+>d1LBtUbF$UcOOJ6A?hMV5(m8Bq=%y9{RQlEJ7H*O+gf!+!I39&
zDCPJPn`%3&Y+{kR^fad{a&Qc2T(qA9=PJh4A;4j|5d!B>0+n#;ouBnE+E;GSDcLL@
z(L-9T^C{22Sm=ODt_&$dJO&ox=;}j|@YW4sP;k2qABs`b|6oHZw%;6pLkO+FqJ!x%
zP_TGla55U;e`Vsv2X1UQdpkilK*O{K22X8>byE!f6mCJ#S~5;_3pBpZAwcO(BKh;5
z2CfsaTL|$BGOE2j2XPVr`?wm=WK(m?e^irM6F85mI1_<LRt2214qJ5sl)-0>h#zmI
z_J#1dU9zV#g8X5FAMBXwk6aN!^s%w)dTz*UKf5fzx6}xSlN0LSx;%D|h#h!cywJhs
z%J0@T*te==(&~ltND`gkG^{sl-pA=)FdBrQ0*T<s+Q-S#E3)*3wGQ-ZrKb{jkvqly
z8W*U8ymc2fky3_@rHt22Nehkw^O)VksFL8i_mF)bc4!lzoauej20Qaf+n)G}63fud
zK+aKGzU_{DU{yk?RGQT(D6Jc=h#E5YbBt?SL5rt0$UDDX1E+&O*u#v30fI`Xf>;Z=
z$~wHf5|looHGVK;u@OQMg)vk9z=1Hk=`V;>rtk6E<7l&bNC5fpjjARxlOQsbgmmi`
zo}{+Y)b}7!ijIIkyhX~KtOG<QL6?Y{OJIE9stk|Zf`HDMwo0KSNws=eceDodK|($u
z7U;2Pqts(WqRvWPbr#W%0&S_F7}!$|p<%mRktdEOMY=Ycc$lfUN)fwHob}aNEa_^s
zXLK_Kvs{o~w+AD$X0i*(VQ<V`!#j*E*6RhDQPE_j1yv3coNEww9nftOOy5I5%%|5@
zu7=!-%f0o`-p*=yFW&L;pW-|wtJfgdo56Zv3xe`Rk0!`Rm8rGi@jF^y28Z$k!BZ$~
zvCvP*2N;Q~FldgYMY6%-A-dZn<ca2?l_>nq3-#d0lMDrEvc+l2;M+xi8@;WsEDE>k
zb4)on*t4Sb5i!B`nCL^Phq;@`mgS(fu10EbAd_i{WQ;LOl@O~pOXT%%_T^A77COu;
zuO%tUoNQZ3qV;VQ><9>#<<JzOIf7p|`wD~SpHsy1h?YcaI_nq{1X<T;#DyUU|Gv}+
z4_-g4+P7D3VIU_On_XR~2~O{3-4iY_!rN_%PWIYRAE})rQ~%bt7Xf}+WuIRR)){kC
zm@HuC;sHqV*lX3%jC$+6^OXGj;NzH1EK=oqqv)|IRJUbds|j<4x;E`M<;tBRDp!bi
z6bXFpZRxfY9t$k7`IJ)FOM*+u4n$jowd%mq%zMx;b_prmO5XE4!_bdd-OHd6a&=zX
zlzA!F@-f&N?SrP9!EkWUpwg3C&ea013AK+>VZ^As#X%myv>K6&OORm}(rLzy;w6KL
z<jXlBoJ9$UH}qOJ@{p3hBj1zq<`9Dqa_1tE#Zm!-rZpN=F6qLg4V(tt=7e8agc1$j
z(3mctd(&sM^1uC<_?Cp@7)8F!AXqc41q|3=ckvwyeGb0Y=|U~&_X&ZygM<#VOLN{`
zvAFsO<1mV9Xuq^t(O(T;QuaA0b&;OM%(e*gtdxNrugaZyJ*Z>a1<DjK1ieuqhY?}Q
z=ErZgls<?stlm&<(DdO;^w7_G_%<swsGT13xWC{x#0WB%3hp{ma*F&dvlv;d82iLH
zo%`K1TNwoPNP&?D$%v*MI+}EK;lu+L05RWBaug20sKA|7@WM{8X><eyJ}ENr)evq{
zd_W#ymW1I9x4@zj#~NZ8355$hKU>RR!%u(36btK%@%h5a!8y)eUlaKR(LI>i^EIT;
zN7z0c1^re_EF$pe3|U!OCy&ps6RahHiy@{;7M4>ZVooL`vC1?9ee<vw?nZm5P6>&!
zgR(8w%CwTS((rqfc-m}slsl5Cr`(=t928KYoy1h2u^akCw4@jM{4j@2W8}z3l<kAF
zoEnVV&gQ}s;lAs~Pp}MggPmh;SY2L)*xoO-hTch~DRpy*2a{G^6yvn+{jx-Id-nw|
zoY5^Z{>4j^Awf;Ya@eQcsYUp|!>eAHR5}ppASD)s@QttyhvcK1OhK670<OM)XrKdO
zuM>Q`8~JoonPaC4%NFj}lT}_oZP3I<Ab&sq_LpRq%PcxW_7txDYUMsbW2!2=zV&h?
zzSlu9!x(dSo_V?KIZ6`)?M?d9z4M_{dMzQ<8h^))R%OVedGLZwfc|3s{H)tf>8+jW
zsBL2XBz%&2i^3Oavh6&G+@olwlCQCcu!(iSD~*m0r{yVqBZb;4S|)@;(ftSTvOX%7
zKG}8CojoW#XX#7LrUlfy7E#Nv%_sP2=a?M6NH45lF^7+^gkW?Lvzf#BpZumnv*G~}
z@Wcd6mVpl~EiC(1PGOX@B|b5uOK+hIndsq2FY3=v0%p&j(?T&<{$RHB`;y!s#k28_
zcA&{WZY6jq!D6~Ca~TQZFGz9gW@*!+_;XT;hrySwc7bzHdU51iRm==w1N8qHNAQSH
zi<puR6=j5WI@7jLMbPfpe$ex8g@HMrktp3SuRVq%TPDr}smbKv=3!+5brY~Q?jcCL
zVP(XMdB&EnsqpYfZTo;0P}g#aU<wmKc}ggzoWW20;{DM1#mP{@$pbw=XZ*lD2(qv2
ziB{yxo_VXDV&p~|Bg6QgtnK%bG+O@@)p@wNf$RE_RUq64)Avr3<=dmBl{R|TaBLMv
zuL@1=W|!q4t%Q$+ji*Q<q<*~2eBPpJ(S(b|EXYaqh-|2G4^d#Xq5UKDV}IBvcOaGs
zNixAoDI>2RDwfN$otw?PYoCBK+-%HS_x-u0gu{oPoC2cUKZAAP?^F%7|11%SK=GTN
zRJ*FC5lq=gnZ#_h?FDgJ>uZ6D^|^z(JmmokLx?><3F%=dlEK{)RpjeQvoPQ}d*Mh>
zfZU5Ee?8icZ|Fm+{qBynF!f0<PfsWC&CMOyWz;{SuI?o&%h8^|n7}yu0KjScox$`e
zwTi%BJ)<d|@{rfn(2g}DudAmJ%x_im#OhF!af%|?hAX-QG9a2nr~3*b*``LD2dZeg
zrRi+My<9Ek#JAw6dGvVEg1%F@R`6rRyOmKkDIxRVdLw5V2dC?k$V27$d(1^>`W0bR
zo=_E__CV&LaLy&_XNw^hXoOEU4J)YKKg6hdIWJd`dMH&N26G1XR2^`uuqDFrJyeB}
zYf$T|jdGw>;+u0p?Ip356F*zRo{4NlRr_NM$!i^r{7{)$mw~lF`mimC4H{}7!(!ox
z_!%VqhfKY@rv@wkkxAd*f5DWZJO`1;6o4V}55;E4cr}4J4U4(hA_%B^afl4-+^zU^
ztWil=bd=KGmNi0me1rBDK<yb!sGNY`r9#uO0J->lVc44`U&c`Bvru__UMysa-%)1L
za&fNUEK19oxY;a9S;T+Vi1$^Nlmd4p3wUAwqnOl$HfL($f&RKv#k_%cKVc(op=05w
z@o>l_6GxW`Q+mjR92<y~RHT<O>*{|f`oX<wwBn9@Ps@EOr@Y1!^@V<k$!+rRQ3v3r
zKdv!8on3(fSLn;5BpgjI-{&@~2H^rbSF;r6?c=UIAMU(6OQ8iGP|TEO886TR*<ONZ
zC}lZZYm3bzY4pxw<R@7YkH~srU|jl}!mBff&?4M*6BJ=z$pmea=UNvfy0wh`NhN~Y
zSh{A^WQSh>j0$P%r}XDI6&gyYs@V2z<6o+HK@{aGSHub$y%s{{v>wbO%FO-LGz1At
z4i)r>mEzf0(yr&8<#yR@xr>6VQ(-7g09BaCdTOeoQ(HJs(6GaHN3}DCvE&>3JO2(-
zTgp$iO}dxfHHbBc2gV&}O&LxMUGtE<9bvw4r(}x$eA(|*OQVTGJV|HgcG-4~&_^hU
z<~u@O`Vm#bU1s2A2KW{`i(jP9*NSKxBaO!&E{b@)xsWMh#zAAC6Anb-c@3A7wQuQz
zL1~+d7c2P-NZEK^E{F#+BAz#h*%2%Cpq&kiv7)$vc#AFQwhXwn(e)C<SSnPqf6qF0
z2C!zgqOP)J_g*(BR#@}gMn3m&2lkmO<Dhrmu`B14J6!%L2*dFR*-4j76thhY+>CG?
znF-$(Rju}-FNA9lME2m*Ch>0(?IIB<Ty~Z#f(!{1SDX8M$10wo(88)@<h?}wRm}oj
zy}5?FP7b*`h3vV_l<H+uZ{`}mHk#+P$0s|RAKIz^^W+7NX9A+pN-;xFwIV!KiGL6R
zugxo5gMFsPCJ5|`F|K-oarwvcvT<>PK1r#{K92ameT5&49SyT=3Kid&nvpO?G|1+p
z{Ii2EdXNf7KH>N|^&_^S`Ek&~6(APBk%!Jy(rUR#zq8hZUrKZSXI22_1w7DB*!qF(
zEI*%ElFsh9)wJxB=3|Zrtx5L?j66r&xNf-{b){WUHl5lELpz&ZUJo=rPa$1vx?-W6
zc)3}86m@UryChj6uf)+JIMZ9>Zo$eQT*F0W;5I2li-y7M)eT|eT#7HMfcJO5=jMOM
z{{Bxe4v^#L&c`Ue-FJscBSRblSS^tN1c2rAdkZiqeb|U?D?@JEWmNXpIr`U30iQGQ
zNed%7>!TnIM*U27Lz_vq=fb?Mf9G=geD1pcJ37<~<#Tqp0KICR>kz}TundQcK4ilN
zM+|7J&mV-G-s#1Uxac9jTgO3LCp}A<&J@e2S#2nSA4LJ@C!oUHAiHRNsJBG3gLw$}
zbBxx|?e|fk&IUNogQ*PyotHBq*7gg>%>(6mdCJOJ==Gf|L_&nU0zzlDnPWfqU!ooj
zix+eb8ZkVjO??pAV@!%B-B*Za4H#?q-`V_60AYscZ1ny;Fc`USNmK9Vws~CUNcTIm
zCVB+6mVUjMva6X6y907qn4I6z4_Uxt6vtGJCn1;p(7hK;?{{wxSdI>ZFsC(V26F+W
z4&gI^zS>rOf_X@h$<rq72K*&L_?mxq{M&KZ0(h5ds%)$Qp9Wh>vYuOeAp^i6lhR?k
zJ7ofuc~reqcu~uCuUTf@#3Jp^i2P%_3>;WuC47`*IexzyNP1-_(X+1)`%H2PIRbc?
z_<N5~pUIwIS9;^4KGV?rKnA^G?qxsciG<YMYJGT%1?cPQh`=CDD>rBU>$nerMb&ho
z>i`4=ys~4zRuVt(&Z=9tbd$zU0XUgIp!M-uxA_#HnstPdYo~70@(b|an6*&s)sGVY
z`e$-ixfw*^w+B#U{D;YEOzj64+534f|7766uZ?d%|GoQMKcBv({kK=WdOHD_BpRTP
z{1LAyH-e3nIw)97)#)l(he)MM4@IOfUr)+tu?uJ;3!UnQ)kOS_9nE*Qrv>h&%;I@1
zmo&8EmQM^%I1DNqHUJZO@+5#7GD9z=h|HnpFj~%!R%$Q5nw{9Qot(>Ius36P{|gX^
z+5zI1>-rhG@p)vA3g%%0^`TGoNpnRPz$pXl(Efb}c!6I5N5+bQmqEZr^aAM1?nt};
zy#?(ddRX2L=s|^;%Rb#^;A@r48NJa<bT3;>01{cpP`S-jD5l~w;QY+V)Ccq;VEYZ0
z(&5N^@BF}h%X`&m-M7*GODFH5+VomK%ZU`h!#R^MH4y4ARagHSyqOVTI{(L`3P&Xo
z0(3io%jq&0kx7|WnR4RxF842?>Pl$HKyAQ>UEq(-`=`DDpm!VI;Mq*lG80JpWGmNu
zj?-EH`1)#-?}MUFHyOj+LnGjn;|y>#GUA>!cR>b!0B?!Q_SlYhHo!|Du)WI<d;^?G
zGMEal_`#of{{TuGH4}g&_h+$GNCJFNW`$GWpB&AJiuAmjvrO>eXPAAEeNc@RxKMvy
z9;@Ow^Ak2_cI?6d*;1NP5)qn|TGwgKMWp7mluj*A9m3yzjwM(N_ciwgh4vxfVl&Z+
z1r=dC%9KHD)AZE?R5o(CU<_7tph-^@HrUi%w=y$WNk@F&^^90ljGUT<skKU2bCr^E
z#HnnT+ooVE@hs#U{`^lNOJwL2f!=ahy;AWAEO|l;TE)q#<U+Z{(a0%uDH8vt=j1im
z$};(0vh}JUm}5*pX0xcK^ibN21(m{5b@~1ENR<EIbbiUAd-a`>B?Q`=D&QTp3ELef
zdZ(1szWx#L&BtW%KW(@@0k^o5-#)?XGsUleEHf*>a`XJQMc~v`pFXq~!yFIkS4+|N
z(_li57f^bW{RaH=(9fE`(MFyDiv2|IKde=w+RH`b%pbsR)dRR;zTOv-+@ydYBR`fL
zU3^rPT^o)XfnDD!q*4_=ZHiMt-mJLwZa26H+6KlF-O`J5vfSqEv32D#f(nZfO0~8>
zOaDD=H-{jU@jn@ZJ2lVDt!=+eSqYhGI6XUc-Gt-w2NA}rxj^{_n$|qx7HXwSd#OYL
zN2?-$%X-XZIs}JCcyeI!!|zrG9gTBf&=2R^sMK0hQ!dag;Dr$2tQmym()c7@=C5e2
zVN|{9YRyI2x^7GV@`;T5Yj?NUr2^NQxRfZbwwO2IF<aKLB2rwXMJJ>Xf}jDuB18{7
zo>{rNVg=MpIcx{(%2dJnH5&d%)&0yUV;2E`06I%ry;-nv#`V-5ElPd*+wWeIE-u?&
zrTv=S!{N%Um&(3B&deC>aqlIE+y&ZogmEIMRs4b|3-7#40PoQO;4T{$rW2(WyDMVh
zoU8@VV;CO)0GMt;cu+w)!buJ$)SNjwXUZ^x0Q&7MDfhjI^V@k$m1ny3#U9_+hf1UB
zx&Z{Zp2y}|BEY?z?gv<uN;T}{)hD@D7Mp=E$K&UB`bKEoCgJCwuI#nup1Uhk^ucQa
zwZ>dty{o1%LHkFLLAKt4mZWnochPYMC@VEoBvuWqG3mtzm8*B0B*O1fL>^d52uzq*
z#M|$o)kXMj-vb5H9oJdH{I2_90q5scmiUk#2e+-Q3UlOiep2yPxsOXCnOJyL*X=}!
zMk7U<0>Yu0K8HvMTV&x*+OMBKxOFIS8lXE$p$Fuok1>f7e8BN01=;~+9Uv3>gW947
z+B@8UXcG(N-f)K0)`#8*TKR|PBgB_7_qvJt^aITlO#uv#OdZ`l1{_RxV2gc5fC87y
zGU(DG%>d?`XpPAi!?eceyaxM>FpzF!mLPC70Tmdy?oIu5O&uHqu{LO<2#LFMQB`g?
z@Dq`J+-)ca`cdCcv@z&I&YMb2ind)hz^o)^w20W9IB@fRX7uM4r+WMEpC@Flsrj8$
zIEXx>)i7Alm!KaWe*qWHK<(|80B<{t_1ID3{<qJ>afakPFw;WWpYb;{aMp7FzFWy*
z!8BFWj~Evlcx|SfE8>jF7eyVzmb`rF$bdVr!e_vzO`B+gzfZ6`178CwPB935L|5E;
z85WC^xkEw7tW`voa2Bj?sdhL}Onj5dgEpCJwr@w7p4vd{?TO3ib-D~Hdl1=34fzaR
z?%$2>!&RSA<IPH()W{wra#=NUE^?O84dDdG>b3_rg||`jMeYxuDS6NPA#+6S5bqQt
zM?oKfq|w6!9no%WJvojZRG8=jq}g*N5;aZE?Ho`f;vA2P$Vg?twztdN3NGn)x?Ckd
zJ1+S*T{78#8=~ah+t4!42uBpaw>%e}-LP*U&R`ZEsS=)Y(B(`VLRL|U#XKXx`__hI
zE@;6)Vx|D$6wTD9JA%k<;}GOF&FQ#b?)bG5n!E*QCQeD*n76Ceg>j*Bc@E|HhV&2(
zQ83#6Sm%)x@jLc82)=_qTj(XU1HFf`O*nKYBV(l>NfFD!qGkYiW-jmmSPW^DkO$;f
zM%tfNK?$?czkp}uU|Ihju5pM_zZ1DN^lQj4hFqW%*J9XR>l6!r--0>#>;PZ5nX)1M
z>&CH=m5ym;|0pCwhOjx*zvevuotUuRyPV&BHv<RYnJ)n?uUk(&qYTu^0GJb3Z&QX9
znaF)s1jMzhE4mLt<?-$uuU(tS?DvG#@r1npIO6WL(KktIi&v~<Fe0wv2N#)gKdY8p
z6`wNHVMZdjXS^Ff%+NJHYF(GtF%Jf=CpZeCEzUH+Y?AV(7a{7IH#ZAdFg*Jwgc{??
zCOsauL(EMtOa9>FxEVGj$gU-gz!6jU3<7JRHB&S-!DH~FKORd8C*jymfDXe96}I5p
zTXecsk}vpy+1fnOp2bBoHGJ3NKD)j{!)_y-n)NTE(NO{IjVp!;R1cu?p(oo>`gB3j
zq|jbNyG8X8{IaDgXw`KqRxwJBWIS-NF)o3ze7DiA>V11~t8#aP8wBqOW&3*Dub@)h
z;cA9~ni72!f^XKTfI|~d=ONGH=z`p}AkoxtDK(B*Xyuy@lAKq9aT>gwF`XW-gdz!v
z36M!+*s<)~FkWF3&8Wa`eBa<$cc$@?18q3)G7l$$V2N?<Q1dYh2c!3~MbZF*ok(ls
zD}`oB5j8vF8(P1$EA84ElBrVQ16mz{+Zuv$Zo%ejCd2iLEoy&x2x(<r!XAzu{K*+~
z;QOBCgT)cVeKq;w&~j)nBuSw#W~oPjL16>ByU22zoPkigYstURyM%fI3dma5gL%z-
z8tBii)sb4wN{eVzP<b!x3pr&pygYs-`i|%#uYEKa_TRk##Bm|}IbmPi(dTxV+IN7+
zaGBbyZSp$Zl8Be3goO5XqnlUwHSZ-H^9itNG^8pLVJ%Q*hJ|mVLI~K54WHAa&d(2A
zu}`dD@g&pFskebXAHH@RF3&DrrUTP95Hu<xdYAEnPkw#Ykp6{uGZ9$3y$a8uFE-Ab
zJSlmg?lmn1BB`qhw~OYcEri!S%z?0W{U(ahaGWSpJ%^5@p-Ez>vX*ale;D+_H_k|x
z($25=O$h}`o;;M14I`bv8Am9>i+1J-155rLA#Vqb9;#x`44KqE)^LJ<(^LhW9B326
zbF0ZRO<rt$ggXMkAOuyT@BfP<DMoYz6$;Gyj5rlt!mEps%H3r(@EDTw!=b!rIqXH<
zS3h+~jnb&i+uRrHNy9@{s29enX2@9B=pIC#AmU0qSubIgGJa4;F;V@91tqWAMprJY
zZtHIg0W0Y(q0U3Y%|(daKkv)&xoHPiVXRQY`-9K|X>sbcl?bbSYt$IL@vaEFzJz;y
z5dlzF8m_aRxh`lz=%?USydqyQsgAg;x)12+=cXIb($YfP>~lZZcx{jyic*+X5js{K
zQ@L!l7Vk0RaTQpwrqk|ebBT`^u?W%BS=C8UbdxCHZOdozGgDuWUjNN;?XwU!%5Ith
zBY+h6A3##HkM0GJ1*-s=Cq3`SMCjQ>3PcBKIXL-smLIg%2s-pFqR)+!A=5;cKKU}0
zk3<kwRbAL7rXD#VIN>F|uFdKUka?D5s0-#nV@FT7=0vb?<qXr8w+=%(g2_S7kj>|1
zv&Ozs8bWB6x}J-PM8oHV;NTEZa%59?|E8uoMcZ%|7wmw3ZViJDe=EaU&e@=kB;L|Z
z(J=%T64gLqPSs*7TCja$YE2C>3HJMYW_$3wQ@dG36{C76mcSaU*bxH$B(Ftl^a6{q
z!?yl{5aN_M<C0KGyH<;^S0mW*a6Lk(^ixyuWGf%?D6GTa&zt@RX1`s;zrX)}d^U&p
z43K!g!FA}+b(QjTq{DJoOL}%Pl}PqD0by2)MJ$Y1dzQ6*`t2Vs+hS3KmvlK}|BXE{
zsE*3yKauUcFicN4+*6TcR5dX#!c~aePMR_$+&7dvidG7)Ul$QaF!AFJr7%ln2GIQ2
zFpkqZ&J0fuCeB-qCjNa2Ult)YB4Kk8zeA%SOr{<+sNaf84$U|#BnI|Nz)iW~?+P!v
zF<3vN)xduT{c3?x{ucXdH`rN?0`*gNil3dbYA6JcCZ^x}-Z(3D8ukNEj5u5+qJ4ye
zgQBX&$x!(UAL}u0VHAofNl!8T2w_2Y|M-dxGzZnO_hu4Syh^dVGb>imH_jD(%z9;M
zmM?((R$TjlkbK_*dLRUH7)chH&6b`$tiib5xW!=}H|OFD{8Phf|4kWuOZa{yKA#>z
z-_yU<Cd~HWw0uPMPJB=qx{KAXg9Hzys-|#FTuoe@&vR$oMRkqoiB7%JOtK0Hi}7-r
zH4I)_BrD`FcK8J$=h*iR*EZAEij_Voct@`PUzk6yz}WZZyupYplx=+R^)_Xf=HqOj
z9kNqpc_<^gXK;A}#lDa^!2wn$4h=2>mmPCa(bQX#^GJYLpT5Nh8rd<hGhR_8Gxt3X
zsq_frB-=WLjGR`9X3x8tE?pe6g<1kL1xdY|1wNPH9(-eNf1?j8lAwv2$n{??%Gj_8
ztad;rstu9#8fGgHi|CsBN09dkGD1`TNwr$p;@;=F5-&ksP-j>+K`h)Yf(am9K%@C3
zE=!g>;u3}9O@w(r3Tp}~hEalcBpW*@DH@YwxR+w-)0q-kb#~nTxbo^=I-_U@e9BbX
z@}aF<<&?wFO%H!8LPyZulp&}VK~peK-J0gj!kW(-QSoe&*Q}Cwv>m?tW0^x_Vg~kl
z$b?FQ_1JjVHF*}XD|-H5iPqH^vpOSsr3sY+zQlSQqqiY5Pp}-;HHDlohsfDNlA{YF
zImYRVHhWmyxj)f|ObpZ0zmxA7rZzVjlZX&@mLpjg*~_Ied5`dk=roNz*2Yp3G};#%
z+97=o4VUS@v<0VVHGCC<7-5Zx+8irg$%%@TBsr`1EUT#X!C7x+VX6g<Z9YXopQb^v
zHh;tS?On!K+7=)Rec(H5O-tU0-%EKhM|5{Uytej3<EfmTm*&+cu8tOt^YI@flCldt
zWut1ij{1r&mBbV;4yuyYlIBpH+z3``g7H5yEcVn<wiP8LJbSG8MfIRTs)Z!uT;}-1
zX2E2IXpT6g2f9}F?Gw>X*E2)_WK>AUm+i+tf)CF`RCBGsq4J%}X%+WtC5637I}KT~
zS3LT}Imf!LF_{$kI@<z$PH$I5w+e8Dg2-i&83wNMOw7xYXx1HWj5SC_2qo`d%MBGh
z;7KP*5DbNvus{@Ar;D0a-V(j!=Pbp-oqa6MBvpIN@(Xy2pa{>hRz}(cbRulZQ019Q
zSyP&2;`$U>v7x{om5|LXs$onL9&I1W1fn3TtOB&&O_*0qlj0zFja@T-NFn)COJn44
zZ0?|G+9^}vb|y_6tQN2xgEjEIR*qY~T0@X%6S)CYgiE>>a}}x0hF@V48wx+=BOYO9
zn+vst1Ba)8b_iA$b`fdF?OdmD-WPo~gMnPVf=ID7!ASgy^)?p1TFVSh>#~>>Tun_P
z5K=0Ad9A1r-w?!ts6WvFJ^MK5<QBA(1(nsl9xF?rZ#TWpuoXzkZSn8&c7our^oj#E
zC+ISH!p{8A>FXGvXblk+qAx@ro8{X!uxhJq8FT5(3=dNaYjIh;%uUez3UHviS`nC}
zaOk1pHw}Y^#WEadvTaq#;wq~QE2_>?&g?o@mMKlcQg!tzn4fZx50}g4@H5x)Y;iCX
z)hs$zp??mZ>LWUTn2rzNzN;L|W^%W)$MCYX6dnIWH?RH|Iar#48?PjxG)jVVj^e^;
zTNpPVkQLINg_)rvV!u&fh)xeIx%Lcab&q3~8PNYe<K{U(?~^U=AtM*B^op*g;G|6}
zj%ce`beJL{U-&bIo{rKPBNNm4#uBKe(9d<_BCA=fHivaqPBvL9rlwO&Q)+mkrjuV~
zQo+2ild6cmbCiq)t$;vBWFeF<j0;}BfZN72N8dr&0!MhNPBvDs<-}Ss0k#BNxoDn`
zU2R(@f##{KiCJ0>Z?RZ<)jmrG8bg0VVKuXy?`9y4nAxI<Na<F68Ms>~?R4f3FsPY1
z{NL-3Z(S}L?fo4ohr4b+t~)55ptaY0A8!pO<Si%ir>a}@m%7h5PQaA|zR4`N#iDaI
z_=lqq+1@0yEnQ+)BWJ2UjX)Dl>^sO;HP;Mvq%>Ep(^aO5>DlR)YwN99zM2CinIu|Z
zw#!2XC3NA|qW%2Zx(dT+g+ogLcCOrc85z57mA2HF4LqNILEKhQz;>ub%&ki339M31
z8CI$>i&$>e194@y*=0t%2L)ne8{)4quhylqjW|g|{ED{3!8g_T)k;RrBh&xMyEa3U
z+DHvdB-*JcEWR9Dv`_3#@EO^sCNQ#8{tHhv8Pngq+z^K-hu{!4XR%m+y<CQy&4^6{
z*=Flj=<kEsAzNmSv-z7aQ$(HB&}`1XThfG31^#!c{$Hv5-!L|85dIorZ`h%$v-0m6
z{@=sVE@-c@eADy#%g(=i%>O&?qM?1>#B}bWYjkG*?>GI=Yv8S08b&L>Tf)a6Xa17_
z|Ca>+??}&LOfXW+$*NUcX8ivh4{$`8(5~^mJ=p)J#QNV?N8pGDk#7Rdi4D>J@3H**
zsk;&W-``mdL;N`~^!hVd-e}r!wZ{F&JmoV%#y0cW4{l*%kN;fPzN&vqWu1D%t6$ZO
zEH?8+H~XVji(A!B!H+1!ey|&FkC(qnm2w|%$3Fi1pF47(T`S~UI}g6}0fjl26tOnJ
zwx9jI>zibQ<MNh`(C^@JZC1ule?H!h->kTPeU6#@&$*^cF(w4P3Ha<bth>!a05GMn
zU&lo-I-XkfU{Ko|8v;Nw%_{}`(8U~>HvSFw0%#vk^50W@dU^D^!anknmj*Wj(;2K$
z%}VJk{i@E>ku$3QzRUl{5$(S!lafJA)kStoV611KL2{F3qPJXgi_p^IWs2^xu}Mj$
z)~O}w1xr?hn2b~kb+v#)`R@xtX-J(q{+;QfYC=Wo|2a&cI??j)zWinQDscU%ZM-)W
zwIx%Xl_+4`7YOVnt8-NI3DW4FBks>xi#S4L?sBH50?X_6eKNGp52Li2QM_QvFb{$T
zSr>n|VAC?+=?l91$!*lGnsMu@4$?74AIw08B#TKLuTZ5>q_q*zZl%?-{NE>Rjz|fd
z#Si&J#Q&_byjQ?HKfhlO0;UK-^KWu^aCDII|BI}*49X+gwncF#xVsbFT>}JnhhV|o
zA-Fri-QC?KxVyVUg1bAnIs5H<>ea3O1@%?I*S&hKxrWTa)ZvQU)89&;zTyg-?Rh-{
zz`vf90o81H5w^LXh!X(GZ2-SJjiCM)+Y~JFViq`l0c>YJKxTAXvua+@B7O7vbvHOt
z0xwP9GyonBiec&8zQ0^F2NtgtTU#@>ynbRig~__lzz}<yWOm7ZM4L*{c;FxU&$Y4s
zNn_pM5hHaWV)`~8n^<;tw)_B6-~k*=rC(NYFqcrFeJ_gF`vzd+|56DG+W}B|`8=+F
zG1}rt2dqDoQBOgVi1eLtYZyJTO^5wqZV06i4nhEz2F1@l=tUqSWZ@HA03g`voc1&p
zS%s#3&Vum<TV#;NgAB(>fM39qD(X}$K~=X|_!|zyKEPt>{xT>@!@fURx`-7g<UY&^
z_z9`xN*tz|2vh8wu4F7BX>=X~;KR2uB427%6yz$6o6xDV_Z|ML25A!dtOnJMl2s#^
zW;0;UB<czgrHq}AyD^1xAa<krR{(7FUZ4GT3WROwSd<n5F#8c8jM~i&Aw>0pp5LB<
zSV}lyQBO@vK=TTnMxR|MreqIuZ1qs0Yb(&h17d@ghj!7?bY`hhWogWUHj*`d!gePo
z2+bPLgw+Y>PCN6+$>x{mF<M4(jpMNaHP?T}No|J0Oohi8WHf@It>j#|h%&NBABG{^
zuDxj04<e+5kv5eJxd7iPKSQq1w?{bMUu-f?nqg&Dea$(NEMe+@sM-HKEob0`^U$gP
z3!D-#>5)?^nsA!p6H)FiafTVJ2QLsg*NJ<yLZ3qfUvu^J6+r}gtK!Bozd8TPD^0J7
zO}k8{`c2qNCdR*yYU`iq{w-g!TzMR$frdQOz9i9~RTZ3zw0lS><2aosxSwkwkWf=}
z9V1j^dQ`-f!0;$9f&^Q_TCc9=cM<kCDG^fU?;#iha?VIW`J17)>`5ijJEF=pi1|mm
z5e(ET<m1xJiSDh`ZM?rDQk4ESD#6m?`xo)K$livXQ`_4?SRkqO;0rG(HaV&)3rzgq
zx+#HK@=>H>G5J5_1Py$*E`1N3>=)|GV_>ioKwLcl59~L`D$Mnb8fgiq!(Rzv`CF{-
z2;)=_&!e=}uK?!}uwzkPd4E^!qXVL0c{v2fgU@O*4nSp8u(xo!up0nk+O*-K?P*jP
zvF@RF6NIJP?FKMkOI`pa7biw<>+yKGLtILU&jGM}0G1Z;Wwrvy6*~NU!=&||XG;|G
zEp}KE%oRz#8Usl$>&{C$|L#k;fwUn%MZIo5z)De*s3Ia_1*lY9+zzf~?B08^I(@AZ
zbC0ud(KFrvwnzGWbj`L)HU!A;*!#?50Ag3nIl>ss&|kCc2XSNqO;(JPy@2Y1rsn<r
zbnuyTgTvcKS3k}InCiFSXe)eAJ03Q9fn#a5`|($a%*=;X%WB}EBhwO4)B*11uBHnT
zN0SKpCVk`=1gLMRv{fy;z+Jg%zv#4FGXUmcyNr15i3Pszr`u8*FV`3Ze*(G=0D)<Y
zh@~F>0mKEpZU-Q>)uo&QSryo*_G{M7K#-BFMHUbf!>IO!ojR;2(j9jZc(eXP`hM<r
zW`&Rr{T+$Hqed%Wb9B=njrky_e_GsttZ<>(FNbb`NmHm;stbsdA+v*p?6tex8llQY
z5b`+zkhD`%LHOJ(=S9ulscvc%5=hPzB}NEnd^_KwcsU+eD@cl5yBr|q6vcJjUR>c3
z;C>*_{bqofoHBDiBk1oZY`q;5Rn@p}##uWS!$@q9nQoELpg*p~f}|=TjIQYbVQM$+
zX+(5@LWv62FO}73203BvVj%aO5@neX7;?whajO)Q=%$ufOFHoF-)Eu<FF+A(Jp#Ze
z)zQc8oII7>!_VbJS5C2(N}~7c<gOZwmtUn103tsviiuzG4&?nTZNLTMR`9#unvK(&
z2pvp$?z5(u4XZ6;kSo0dcd+ln5>RsDT2_EYf&V*pp1ECjoU#UlLP`9QN8uWfu{NNF
z3M~HQMcQA1cq$)Wz<>HRC!$U#A=70w>}MMhAa}0*a}77J3DB(NRc+y->Ye~S+9;8O
zZNs&9QAXmTvO=EyzdKFCCK&hbrn|QBe`<p-f;*bo0}c7<<Hm(I77z3~=Z2H=<Ml(=
z2mjw<!3OAMzeHk!k`RXw0vF#VXhd8<t3VV6{o)*+`xnlBYl3qNA2gKCBzosFktgih
zmmQhgXc$?ESg`|n4=Es=U!>%d3Fm4s29d&k08oD_%5QsHFPjfe=mO%(gpu9#%~bYl
z-Y;iB#E4z35u65Li8xV$Xh8!q8HRClp|8~dhB`z7iAg%trE4DJjl3~I&{-u9h#oXP
zLIU^|4{nPd``<cWyGDtoWN}2#4d<mht>Qwt%O_y!qwOgGE|?&jty%UwD`A*585_j*
zrKrhr5$EI@#>;X%O}ciHjd@l!F4n#3Q&%+LmePWy(OP1tH4ig0@TH#kd_4FVxEgp=
zDzt33B~DQZT!qPd9V<V^3=@CGhXIHtR4E=;uHa)2(vR32*DxgBQ>G0a;{GOHTs$hx
zuK<(t-|JWlXtUZ(MiN)Rtm{F{VERDqdK(-BKdA<Ai%aGj_?c%bc&8TN@xhwIXM_9r
zvfH%+Q1O#!&it1{&$qj!B}J8YU~U(hSn%ciDd16IDnG1_gs*iQ#%O57&cP28?QW4v
z+>y{n3CH*u;`McJ{u<<1bq}7YjZ6*4YphSX^bSy(*Xq`(g$|<C4RJ&f4=$Ffb!pMl
zydJ~2p&6j~=ZrTsRWPOxhu8k7g(Ok1RwXN9Af`8Z2U2$&`a@B=8Da=V_*i^O3Sif<
zAUQpK39~5WhJOfUW+hSlWr>LOKUI^BxgEr_MbI|veRm--Bh?(Zl;qS%xO6WOr_e^`
zDzVr3ql++CpDqoXa{{<rn(Rn>-3<X!F?i-5Oe<*`-M11f4g*Y5a>k%sYN*?>za%QM
zqjA;j(!kFA-(DH0A1rpZg}E%6P2Ftp5WgzfL)^EKiV}>!WcmPfUl2-<LKqH^^%bRz
ztwN_Z3W3j<gz)8){e~R9XgjHbXJ`>}XtHZ@kG1MX;T*<BPB?U!U|;fm#Ivda)nL5*
zfk}Wp!>GAU2Kh=ltplvq60A+<G6C;^qH$<2N;y~9EtJHe9+ZTc2pIMmS}xw-l%(5Q
zO5dF5KL9>VSn{PdGM1dIb)dU&W-X|uDc4t|s+9uNMn;92StlG!7%2Hsr|8(LyW){Q
zzC`AKV_yL4c958jz2I}7@SRD~kwQ57%kz!DKUe-0%BO3dQr(GfSR&d#>KMg$yCLqx
zc7a5~cEq6YFYRLwx0OHfBP)!xGabZ~m89|_Rq}s3;W|jII)K@v*Q8uBg`aO0(ouoS
z?&<v2Gz2itKqm;lHiC!3ozx53-j_U0gWF0AHn>>^aZ%vj=NZ%XAnV6hE!KMo9DSY8
z76Z|9J&$Nv7=}A;CV30($RTfg(M<KRid<>>BUn4$dNUuX%}`aMLaSjKaK+uM^eG0&
z(?0V!K7jH>n@49Z;9EffA@FVfJM;`H)}41ISP_rAm$K7J5vcv}^jsi}(3W2-OD2kV
zp{tTu;~9BO-gmf`1XtVXa67{jAsL3ryvI>CtOd1vt1HKkw+9bKwcYR~17}kMpC6KF
zxW6_iF7F84+u%08H=+pFUh5~K@a73+`01bA0vi*$FxEb&Zt{2zLI`eJ1sa0reU~NG
zkQa~(7msR~l2Cgoge+d8%3&wT%N07REuBM7(I`hX_3^*Gg<1ONI!o_h0S-yTV_Li*
zE@?tSin=3<x{e91BzyQSe*me@z$(eNX@#T#AoI%nlHk`JWywV|$oVYy_9}==H+4n`
z28!R9SGTC0*1yltI}jZ-GwSt-`e{ZdnBvhVN-&{$aw_p{9Eb<GVqZYZ#H&(9M>5m|
zQju*(9`@xCJMR7oH%<C72EPmVQ}Equ$lZ%$)okj9DFp#DqJ|VaHX_~d`Ek032o__n
zpglcmv}kE_ps5QH=Stny0>nvIL{CgDILVAv+mazQBm$^%OtDC0W!A7pTx`ipQBce*
znlDzvle&HE42I04#-+SKzMbpe1^u5Ge%j1`X0?DBPBDk-O>qO!J1?P#S-tm{Z9#!c
z{y6K`AQq;&;0Y5``{+550Vw3-C9vuJ8cgIfegWhj1YSLZmpxt%3uMFM|Jz`{&`qCU
zbv=r`xbN!%LWT)21uQ3+Y>Hv+CSRnQQ2v0K%eLu?5+;4<#)us0l>1ql5@-nU3ICJb
z7N$J#KWbkMpvurZqN+)IPe{Pd1Hby2K<Jh>(D*VM80R2=x!*v=)_HFm$8Q6zFoNYX
zgc(zUa&!QuRs5sX^D`Ef3B`eC|M^rfy~S8U&p{_9&Zo=L+|mgdtWHB>0?BCEyVXrA
z%Y^ctT#*-%==;M{k}S^0^VdwbbI6O>IdkpLT9(*g8_}BfCHc>!yA@;w%qb2}r9;@&
zZzG%eL1BnJC5GGReLXY-584P@?n0E&x&@C~QDR>zHH4D>usPK%YYn#r8EcHhR5~6u
z0q@aRch6|4?)UyI2DpgU?`dXVp4;IV5QR_o3c;!|nZ6v|8feHS^sl%wRYGV?b$`8h
z)<Q3>Rk2G1;uD>Twu}Y=6&6oi6vV2vu!eq2RGj@f_pC=~RBV!MR*AjW+~rthYX+bX
z{?CPsNxjKB*7QGp*KbHZI(_CGO)MSI*qXYO1~oJ6$bhUJZZ4#z_(>8l#E+h!Y29rT
zWXytqE@#kph^C-TaCs^(UqLov%6WL?G5e5@z`lQOegA;CJaTMV8+~J0CGpo>HCkw*
zpU}E~I<^+5qHZY|DN&r1%Ke#UcFNCiKgxN{PUihcLQD09{g(kf_pKL+BdJkjXnx;Z
z48JCn@s6KRhBn$fJmMO3PLo>B$}cYj=uoPSX@zIc0$i=2ee-w{C^<Ch#g+=3ZHF0G
z{Y+34TI^8U?dcU737g1BvKB#*4h;W5oV=Z1OJKDp1HCP<%e;+bJM*Odbr8_t4XXy!
zhP5Tc!xScHxU&$Zn2sIT`1r*I<sznuUkqbQZP9;TqIdT+c4Im|8}4?mWa@wP45;SV
zono6wC3C@%qpGN;%KvX!9sL9atbYHP#7qGa#VxTLFrAN}4El7L3R$e6ze4pRG*BtQ
z-}E?gb+`CUVhC9f%z!6wLF>}d=E4)h$kP%lOiTZsDwdFZICE)1<8VfnrM7ze)OLk8
zrUr8#kwZn1qx<3Z|0CHx68g>{RciokGn`jJcE>gl`Z}xmTaTc}-7CPr0uH~Lm(l<<
zPmu<%qObJa9S2>_Ag0W(KA6PpTR!~0;&cRL#?Nzw`v_LVqkwt_IYZIW`RPpb*Sp_y
zOqA|-GZav$$vF!4$11auiu%8?gIFkY|1bwnj0`}O7m%chmJ(8cIlPfFAh9OKY8n^L
z{rK<3JB(S<C^TvRf6vJ=IK<c~72(uO#@zyk$OR(%Y=;BB0h^^{qgt_$o%0mWYPDh+
zW(j^{Am^c=!p5NHdF+Mf34vj%{`LBK&oL52wLbp4Y_R^6DB`ZN_P7Z4cHv5lU8BQ7
z8g~}xz38C<#A&+;HvMAUqT)D(0it_wlgEI9JSXnjfb&+e&A~3BQ%;kZ>&2L;4Klt&
z6kph>_;{>1^tS~6ml=u`Ci3GH4Y7w9-A>Yxf)SgU=J46C_PI)zbRV;$6tqi!|9^*n
z;5@QO35a%c#Na_R>^MR(w=2ZjCarS7%@~G6bi+@-%;+I=`-vSYV8WqOs~dfxSxJRD
zwD_Yl4byyZvarBlO(_4LQYWqrba+usX8TJE^dJ=Q{c!YC!YLTbI*%L!f5z0HPf(`o
zf258%Rzm&|PgSW}{ZVe9M)&{WefkWwz@F_m5;SZvE{zG2Jg{*<=VHou_~(3AxMQ(R
z_9iZ|J){b!(KY%cLp=3=Uhiq<{{c@=Q(B!k;U&6~3h5aO3tbW0(}k~ptyzH5(&DhN
zWGemi(&je$AFB2fi99y}Fx&PujH$gd33v(dFtWafC^k#=1IRk?6Z^lvW2?LyZyx{C
zu=31)0zC!ntkwT7oGDi)lv!Ql99J;Tp`A0PE#%<#H@TT@c3z7lW5+hTuqf%dtokf5
zR9Tr`u~)z2zgmFo)wFq9IC_-%O8LZ6<Z#t1s}u9xB)CcgZOW=R4I3r7VnvDKnQ~!c
zj5W0^wJTfWYMG?}Tgs-FKaVTR0<G--FG5;XBQ)gcYh^Lluxt=rblkPauO7)l8%sZJ
zj)|=OJAaPcXi%pgY<6YukaTaP@4pK=<qR{0V*5+AOsdw?&Biv*Az_Y}#T7wY7QX}P
zq*Ygn=Jsi$FP4&*>Yz9Y1|NLA`mZF83(Xw6NPdsOtwz<X2dEhKPjLD3N}0nnGcAim
z<{jQF7q3pbU7~r;qAE^0jXybXhL-`r$^&9Ar9mMUi|nQ9eXBXaAEc+}v@xBK+-rYL
zg#Qbz>GXk}L7X!`VhQ}(A!7X4t92#xupRfvr;I#aYrn{Q!_qO2O$`2m(>79<p5u4n
zcrCNkqIgX`iis`g{kmLh2)TMQ+hCRS!=@0j;?@)1q1zV}r@eXhXX<|!88O|o$u^<J
z>+c=gjHlt$WC5?E2%=6d@7YJnCzjZ+)Af=}=F_hMP1*+S;2d1~9l|HZBBt<8%<!R&
zFZHFs;;S9wNe_vyeX-*Bg_-=HMaWJ!&9QA$hw{_&vJx8U{iVmX%f;2eUt*qa_n5z^
zBM+`e{dyyru;sRPji~(~&7)~bY2aIqM6#{O1?fZ!yx1c=ybPxuUWEdQwLYAzb)AK_
zSn`o+aYfzwB&`R;_h>@I_NBp9_E>H0Euqw3Ik?Dwix{jx)w^uBI(N^l+f3VPgs-Oo
zsZKrQwbOKFwRig9Ce*fo+p&@4S#y{Bi{BE_<2<iCyW2|xb6M7WL$@dVtNV!_QA>{>
zw`q~AdSQGh?Ma&4?uLOC?P2rGY@X22+!7(A{g`y4e$XFqESfl@z_pX8McsIHB!lO+
z%ErV{W2s*qs+XNjjW-t8x6@K<lY}A@f*-F0DNG`!`IZw>IX#D3Qw51h8Dk?q|45D)
zb<`2yrqDW{&iCT0=O~MF(vGhgrE;K5g{#$XCYSY)Z^Wqbt#Kyluc6A5jzatvgD7M`
zY*9VpOP9wx*(x24#Ae<F^r-Bu)m`t;(sZ?=Ll(1I+vmp0MB#479mSoF6Rzj(cU4&(
z9&#^PG99`387yv6j@kRLdsK9MAH6;sch$U=f0XS?#C5xD#ve=b2jw)4^s6`NJ3)Cx
zh9u*Qz1b{AeZBb)PS$?$GmBKWKK0v`G+(}2zY9zyl*$tQHu@;?dn<p5N@sF@O!*2w
zwN&3KU#wl);=fnKz~VEdrYmeQS1KaJ5q+RHbv!e5yl{Uid{*P3Blu5vp#jiPE?8H_
z{T^(uB=UaTA&sEh<sbM9T0YFP$2Ont9QG)bfggWy>=c|;d4MBL%n0XNK}ld-0tIf5
z@vI&N#a3w*zFs-qny6zj!elVM`fQ`IH#?rk+@3qLza6vY)Uhhc=K*DW9(vTxfFJgo
z-D-U`uJ_CZ#d+YWS$E!Ca?z^1cnwfM-T<dkHcn33W~KA(o`7UM@29ps3yP3IBVE6C
zK$cJFb*sqn2|agR1~Jk#On)Pwu37?OStAB<%_xvCvzgp_cbW;k7tqx2&eybWI|_C4
zu9YceaT>OB`ZxrwETT*0yIvaR(-<qS3IP{(lalR~_~985QuNCk1{ueXLbsl$@UVUi
zbJ$tPx04H5fzwlix93|8=Tw1s`x0o-h%p{R-zFuLQvLzoUABHz#qXBFin~8DCNz}U
z<jZNDN_Z?VN=WU(p#slV@{g9Vkh(5buF|Vlnv3H{QFblP6lyBX3Ui$2TfT;5f6R#I
z7kU4DGPzS6p<G^nSP#t3ewnct<6vx+sP2_w)ygL=$U(BPPxBUWuhc{~qd{6E4WH!X
zXE}dJj$SrP?6imc7%L8v)})@xKkC?tCjy2q#g*ww!tKj<3S2D?4f0<d2PzsCGc@T}
z3v`V3(vGTV$fmK}4K!1B+;191WN)(0k{hq8*nz{BguKwYM#8>FvQBaVC*P(u8(uq1
z3je^@Q5Ye#FWt{To~&m#D0Bs2dH^7rFa4U7bNngf0wjtQb^U^JXjd}aIaK@_iD77c
zW>R$)Ul)j>E(#EIeBSO{5CYMZs@pu3PGsO4Hx}jzY-_?7fe7FYz(Z+Kkv6+fYMj_c
zt@69WGi}%oMqA9%k}a$g_`Zob^I8o3W%+7;EV7oPTwDT=+W}PBp0n2ufG;00sQmeR
zVfj4(yN=DywAIQ4gFiO|U<?4@<t&52(<#_g{$#Jt9-RJ6kOvUb7Xbfve?BS(pw&_!
z$rlq$AF~Ks!1ED6UcCWG7N`g}_j8zfo>!|RR4>$Kh~P8@bHsLv=dA~X@;n0c&SAP?
zB2Ow<;;BBUimEF)y2>F$&W$ukxqkhtonb9al88<Jo=e<-kN?Pz_Bu6Gn#_ZWXVKin
zfrOc&0MfS$MMj_!W(w44LzF3o%`tAu=5o|WMt&{wMMDE}ULF7e0TjHYkv;weHh9Rb
zqeB+##x1O%{i|j+PV&#>HU)>D#*_9bXIoe)i)+z!z&v6{HDlue(lO3D+A@P*4oqVS
z%CFg^o+CfXRF~KV!oJ%8Q1KWbhIShd=h6atfuCqLR=w=;qQ`Jgug4feATF_HZnjws
zm0Ik#78{z5dCy}H9hUH1bv}CUWIK9BF<tLH9!~kqcMB+>80^>Yhem9+ejWY3@VR+U
z4(@Q8G(5m>JIdwZc=R_?YQB`0mEEI~C*U6B*GT}?6wj%r(Kuo|q>>jFG+ux7kMkoI
zyqiO*PBS-a$*BerXH`+GVq!EY_pQOGJH)OG11Fg0qCYMccchZZaNq0O!%XWsFe$$q
zFv6XJ``D&)$FL|q7nQ5J{2Dm<>yTxmp|feFFIc4do2T%@*14=KXiq+`EE`7NjLg?y
z@SL(hvmu%8f;>C6QtM-8`?%1T`LIM7^O<J<jXCUvNA<|OS&FZE3P}aTp$w2-24~?3
z)45#P9A)-s#ZmZ{C&tfi<~1Y~G~Xouac-tNt?lhyxS70qP5tIIT7v9iaq66BtE81v
zbBd098QT&^Jl*OeJ-d4tJZ=2v>(!JccvTgHE}bl{n`ZZdws-E~();b^j?3ml?3vwF
z#wzE${$NK13F<dKcU{XJ+zAFzhCQ{oY{DK}%4Kw4Fd}$v22WlXr;6Qn&TOgPzffy*
zr$lgJ1-a^!??(;epg66<`5<f{F6-+6Sx^J$79+06-~W9p(JBP-zedggJ750?ytVCv
zxR!yvZS&VN^JxKbZD>18+T`}Rd|!^=c<7Te^Nd{5PV2@PJZn39%GBaZkOXqe>PESy
zsrVPndeL5uOJeYhjE_q3A&$_EPh|ZxhBO5~T>)EwVF-Yj=Kyl86CnFOE<*%m4Cz?a
zk97TYq5v|**6TzY;3Iw_VE*=ZXFB|Zj7!`B;W<2dZSh*sc<xw&q1ob;l`*O7FYKLY
zricY%H0C2fgveLyQ-Kel_9kbSSBjdQf|@Kgf{@Swg4e@jYOR1DO3bQS%xgoNnT8o5
zZ5ts$Bh4Ft2{eE01c`typ$Nyto$HQnZ-<_j3b;FOGrl)+y1`KJL$FT^>#<SC_s-BR
z)9~hf4OXZ^+PA0Dw#ft{V*S%<mBcWu0(A8}{RO;%tw!dg7GRyI(P4Ix3o^zN=astw
zmyBkk3MEeza%JSKZAS3wj5;@<9v`$}jrV7fvb?CD<T(MD8P$5As$AEGiQL}BcppjY
z@c>jN5RG1<z`}EkhZ=wD^xO;27#LBr`UJ$YcWrsUBqqW(g|5V#oj|j$0$kVG(K0Z>
zVl;uvLx~G6WFSEG+<u7Q;Hq?%3EO4U76I8uE>ggS;p>W&JrI)mgZAs1ILDUfO==|F
z(uP)fWs_FLQ+)5)p5{5bV>CiKY_oh8%TtoNjoVE=rw8YQ8q{>|B@F~oiB82^%2|}(
zYRGRqmz{X5=l$^nSmi3W_cRd>?!e6!RS;dxkYfivQ|~!6_3ufgEN$GGgwpixx0Vd<
z#g}E`P{OZJnlnFMeYA{u=*wtO(LUf*Rj~T!NN(9G{fh(REs3z(cXM>LD-^A4Tdm=0
zw2w6RPkUrHVuL7q4AOi@eVkI?UCYBaCpz4HAMG3FJJ?=7(xeODf%Ye0X~uQ-mLF9X
zoMuH7klXsjjg8JRRjFx8X+9yN-xrwHDOIRFb1ro$iiqNR=Mpxv+aD)BM7kZ{g;{$3
zd0KF#TFiS>xainXX6SIdrBb(g@8ZXrKRHeRuIIItBCCGUyqjb0T9=4~C-8pU-?ho-
zeu>%vO+PzEQ`kuuw0w_`xULMdD*$oUO%Nq7YqjI%E0Utz$(3S;K^^z6Lf=Jw%1a#7
z*X~mMQGYl(osVt6kC1}0r4%XaF&>q1@;J|<ppLj((<->)1E4LMAO(OJU9WxC>>kk6
zML%%p<51S%;mfe|9!x)Q8TmnnaNU9ffSvJzX!A$1EfnH}ctkFXac8HFDNj5>qMadc
zqs10uk=v$WE65qju$Rzu7@-hBGrn^VqEs|#%NZJy7;!i}InFU9g_bJzCJ0^Fz67N7
z6Q1U?bxaB)xLhaLE{@^y)RFbdZ1&`k^Z7k1)ee`8AB&ZAXbp8%#9(~>F84lLfP?5T
z$PL5CVp{eD5FW4_4aa=C1i5Ewo=S_eMu#bTvGhD^%XjZ+;@etw8vz!cEuf{2fgi$m
zA0WKiuLkjQNu`zV^j>$dJ}bcMk-SgY@ua)KY?*uUNX@9nY3<NwoVt9Q!$t_{d5i;=
zaR?rQkK!y)HN2<zBN+K}oX9E7REo&HDywG0@Dywd6blVY`I{AH$ibHJ$mWebQw24a
zJ)~RYA!ADH$;#w8f1=<3&$Jh3E@dS7dz!`_U`Rcp`R`M@T{0+l$rbtC#Z}|e`k9_N
z9<9yiRdsrUOJ_S`197i`SIY%p3OoT2aO2nB@39(2HaCEjsiXnOFm$BS(Q9N>qHz%%
zh*3a~kc+Vmg=eL|mRnei*8`L;Q|X{jD=JpG>#`2klms<CT+LrwpO>{<kr3})wCrC1
zsqEIp7PIn$NvJjvrn*7Z>7?3Ro4Y*?OtMJgyJ21wVzaWzes>2<&b`_5RLaNe$<{}>
zJ`ESA`FcT-z<@|xjmHI{SOtMav<C0|d!Nti<!y)@qk>K}rQUDP?Fnds#_{4^#HB$s
zY8&P$`70QV4}4oMrl;ODaobLlE<|;k&a2#7mSVwnVV@R-6Xy?HUhkiCSR7}Jb!)}0
zbIR57j}I^Ly1zVjhcJ&DPbk3)CeV)`%y79~jx|59AyMwF&uh=9o^5N@1Z(a_)TuV#
zZd;6#54{f1_JHR1Le27_{kXH1NV}wX`T`ibs%51AIeEUuhGGpO1lSTid#v*}2{_!|
zz4@E9yFN_HAH1IL!W!J~GQ%!B*~~{N`W{wHyqWC#Q@$o|u<u`~Q{CF0x6X`C+(MkM
zY-a*r((~YOX)|+uy?ux(nC+rLvFqujUN=|UUMAWR9u;ppFibXEBljsFRvA+#hYAn7
z=W<4wq0@0Z!WJXcWg`0FY5hAmCZUE9Dffx`I_rLIGL=lqe8a9%hwEm^heL$6CWe=l
zzz@5%Lvg({{etw0&4+qC1R<o$n%Oh?sP=t7<_m=MKfQ5Y_v-*}B3W7?qw8Zk+sYa3
z?el2VhNx4#rFL>l>r{UG?W6k!Z7?dk?R2-pWz$Ru#CVZ4Pf|H8%f}JyJ-uS_0T?l>
z<9vagtbYUyEMYK~k*C1UBv>}RVSlayCe79^*KxfKD#|V4um9O_f9rZ%@k4&)myebn
zi&P+f>wMo7ePKEWBIZkF8CIN;BHi}yU}0NA_=WF@yzGUcp86KZh<<@~%OdbJcb8tZ
z)|>)MlJUM3fTZCeGl8k%929=!*z;95T*I(w1BTzga{FfkrGYlk_?H$P{$v27b(}6x
zL#jLO({7^)T$T-hO+?gIgy;<*742VAVw#(E8354?V4{?szXV*iI|M2YbzFA%NCJ;J
zDa-|O_>&w4LE7(t>Y&#YIV{8#pkmO}P<+6|`=R>5KFQ|u;Obmo>|8qjP|z$6H*D!T
zopCfCT|im%2Q{n+R0ORU<$OT%9qG@QwWe5tX>5OP88RCn3Hs6i!KIXFGta@FVwGe1
zGJu>Y#F7Z|wFf~#H7=m_x6=+<O(MG!n_nrXT^e=y3LwHD!wqCbVfYPN1+@3y$)!xu
zO(;!FjkK8SYSE}p$qoB+WNt$69boJMwZ&&g@o6_SP*-yx0R4dmWkas(_AfCTP&R$q
zgH0eZ8C$l&uISZ!f*g-lpbu8vNGa!OEF1RFO}Vv-v=Jb8hT$mXEQ6G$1~#nfC%%=l
z{o~yLP79IW)^+%*^PMb*>`Y9t4CJDVUr1n`D--$S&V^i)>!@6T+x!d=@l*&GX=Si|
z$0sDtSZ;Db-W!)!GGUYL&SIqe`&=y$iz@e516+5`j&<B>n>qnppSI2Eco>tVz`=lu
zhy!&|<;Sg#v-5A4dqf`^CD?hha2`D_SvK!})6?;48DW;D>_6G1+d}fr`GtPF5ZU}f
zsxb1MlNa2Wj64`1JGyuLfcbarfyrI4cVVzI<N^pkRwL;~umL85o$`CX0dDL8v(;Gf
z2CxaNCmf7X_5oesr|JJ1e6aTd<qeQbjpyKx5;`)>w84ZsALrg2_A~<g>oy>l*~?W6
zi(?VZDWFgO$M$@!PZ-jZ7_j!2_S8J*FK7#HwBQ8dkceN{b1Lq{1R0Dhs6a?l6|U2m
zPk81HA23C9;0_M*m-=d5ZiECwAC%8zhW!_ScIW(_D9SV454JX8PHLBnQuC)>8mp`g
zZ-Q%(5HDBsQYCVn-JD$^D&a%E4)p_@*!WQri>-=<)23Kr5<xZ&$JszP8a(UPH4H7D
z8<;#`7lN&Bwv0=#PCrIhFJno)CN6@u+0BNs(bsflsM@?VzGr~3z078HT9X{ofp8$7
z##h>^e#2mSUiY_~qEJ}$@dsGsGX<u`?($jqg`hXneE^UR@*~G3I^<#sfrxW`%REom
zk`50^{1q%SXOoc;|NayYEm@;x`u@ClXzTG(!?&@w@(4I^Z{A9vkU_w8Ai8}x?sd$;
zMho2b1{yNrU2TSrJc7&(>9KzU8>AV#t#x!c#UMNPDv~I5+o=pI-e8j2ggk8R_RS)S
zN^^Lx%zyv2Az`plh;{a~eS;?V$D+SxW}qITI@@j`R9r8Wm>0h}zKZZ_cnmFP4fxPM
zg6XH1I}L}}P5(C`DjQBg4oo|hr=b(^k&|h!+m^3X@7DbU@{u2ps2$IooNqg6D0ySY
z1f=}~U2t^?&2Q-u;*put4X-)6HIG2ehv+sQli+&VFz&1N(LZI0Fj%{J)fU%glDJ!Z
z8}%5<@R}=m_wt}?l&IDwq~C-Cxk~kCSrTAc9W^Qy^UwszaJrK~n1OG`$((mfM<o`B
z@tRd7o4=8${=<7z5)u3olv^usb&TTUQ^Qmt?ecD&FW>576#39JG?eKuAptdWJ1mWs
z`Y#xIsHSYmU-SKuR($<wzU5!iA-}y+G_)S}1<PI8`cEiq!-UrN!?C^UwrXqvejWcC
z8yt#KsFkv@`=hmD=o`$Dhcr{ZJd@=Te+MCBy&!w2TT2U@bLNU`OxqYd7~u-g#&Vns
zfzoA{?<SefgKBnoD&)SVa)^54SE)>o!u5?SFpGbCz*%8c)&Y%97Rvj4ByB+mI5Y&b
zT?9U<0>gYILLJ$DZa=q-m1j9Oi0)rb$n;$KESO{V<ePaXWDOob@{_2pX^c@1^98U%
z)7V;mqnIqn6M}xuaGI3_d6S~84BUaG%IF?*eA{Ih!goX<&*jww___j3P%pkN?+GIG
z02|nFd*KgCDr{U+E|KNIhU7N3Ca%QpU1d4$0V{HoaZ#wBgoRl>pLwYvc{#Kk2?vHs
z#WcD4es0Mu!&YPx)@-t<QfyyL*i$Q(!A^YXQ1-pCGhxOOOQK<D_nAKwXImtC^jxvP
z;(YNmHv9E`x#q&}ru#G)*w~%I*bxrDgC;=z+-*kflfwBfyk}+=sA*mpjHnro<GnrE
zw!V7}$_WTHW5u*0ITdj!eRt7|5Ju<cDd3sEV>;s7_oL`v0dlZ$u1NDggbc)tIR(l{
z{^=_Nh{^?>zU@>4h}#Yxx_>c5kNuUSTZ<R2<*|$(vR)=C4=089_U)t1-vA95xN|P(
z(z<?)6_a{tgmN=8^0sa`m{jxuF!MrLzQOtH`jHqr`!PQ*SGyR!DE+|9C5g?Sh8Pjn
z2<QzysdFEOD6TKzt^eb6E9b%k%kFj}8F2WQ7s2ooznHm1g)w1l%$_%Lkhd1LvC+Yd
z4|U4?YRZi3gs^HKTJTZ$(N7;00ra5@ko;s+N)>IFB4nt2r}qhXP#{W(oWkgveodE}
z)p05(YhuaxnA-FLIaF0S1K+yM0?A#1D0rYDmQqHsg2A-%C2m4OQ4#I-5B2na9{~F)
zf=q`FPvfcb)n5YZ>nyAoPeII=uOC|*Xu;_Z8ylxK95D`6k0$5isjQ}19v9=R2U)Er
zvyK+Oc#DVoUVxjToQA07WY~g<-UcDXD=>_md>eXo4k{8ad^atE#Li>S*)oSd;H$r2
zddQ*FT0zJkz{I+4c#9_)*#@yL_u0IE%4I>Qcz&j^=YmX|DJxJ^i+k&Q0W*oOnOmL0
zh`mU_8W|o8{&EftFUNn^$;>9rRQh9jx>Q17@jSucFWHCcJH3}H%7zIgfn}u|VN%Z*
znEEEOL;Ep<Z>>*D;5I_%_MtpG_O@qp^Ek@(uAWkS;|6PlE`Ps>zh9jT61t2SV7Cta
z+K)^fL)1Hev3+@m=6ojBdx=dZz^Ndptp0J`p{3&EuEhS=IqQ3_HZ^XN+p}>zQ+>QZ
zErL%IG_<4_1ysIz1lv@3-vpViRq}6WuXp~w%=5ODZpQbYr|hnsElc+S44uZul@DEy
z^&&}{-lZ0z0_Ue!T`w;MOVvw6OZWmUSWjn*M8q`^VdxwkV<zB8Uao}(L%;Q2k2UvB
zZPqQ$-hJ9^Xr4Xx50cN8n%l&Y1g%f?s<NLKkfI*v3H#1H9|zdgkDEWzLx#Jq@69u&
zhdh6k%6?b3je^P++=*V2-Nzv0wZH%U(D`e6E%?0NkfQ0j4oxp@;d(c6<<CV>-p_-B
zcdzT`^1HWpsxs=qS~OF_d)BPivL7`=Cu-*pxtYN>E#L3tKK^#ycAjS)d2|?DhD$%R
z-dCCbYQp@t<?wO)(e6gGYuU9g&8oeq*YRQCfp{S6<MKKl;C=fl`yjXFNe{$j2YFZv
z{+c?Yg?@!9zkAtVLA&?(36=J8LQ5&1#`0pCjmK@IzcBQ{Z`zBKEWi5m?0xLZg(1rI
z6MsmTb@?&k^`hm2;LZah-|b(73$~ovbtSJa9#fari>0JNlb!B$$rySsmrB~5Rmbo0
zjK_D$ct!mSwVsYD$<;p9%{I)-{yQ_KCfg63>o>bBA}>~aWpT~uwHY-~C8BHG3Z7Db
z*nl}Pde`*I+UoX&P>^lrre(6_1T?hl?vw_@9C2wO2+xB*ZAj*#S9&$R3a;uS6KQ9-
z+a-i6|5g3g_+-QF`di>nRuL^(XKSE(H<!mSNl1zc*MiDU`V(+G9gjEiUBtBh!Ie=V
z(K>>3Cw{JInwycrAlL0-y8LgjZ#b14t?R&gAv{&mQSHmHF%w4=K3nq3sOQBt*I%aZ
zYBGf|qTp$A%y`OQ$`9GvKMUHr2|{17roZattt*ox1ZA1y&E?`Aj^{TP#Lgm4FSZ-u
z!5=SAQ$B<#uMa$9Z{VC}H*{&?_(j$b@MUTD*F9Y47_7}nxoEPS><$H~=+0_J#hd26
zMz%^z5D$1$YHzB%8Zr9k{0P1dnGW=UQ8@z)Np_IEi{FZ>TB5XOAd5kR_AfDF((W*>
z7DWirPqV4eK_wo%zb<)+zp*UL8Bj6*@nb~Oi&e&&u7cfk5OXa^beW11D^E%fe^@2k
zlN7c`R+!2>z_NA_-oe?hCjuh}8-!!w`YqBBOcjyhVGF3XpugUqI^7=5ELR>dr=*66
zp;#S3yaU?NO0knbdGG7^EOsQ~zaz+@5qZwd_%~ej8xB=zLq9NFJB`Z>dJIwHpde15
zo0;n*V0%Zk()h=O(?lwut0P<?SFgvlOq4CRdox;+8c&3&bKHb72G3Nqh79@KPj4f)
zr{#cy$M$wbFs>yAW0b)ARdjrF)9qu<Ot1jg&AJFNVcRTOu|hbdg3<bh!cnO@0b?_A
zULa>r>C9|ncWxhQK84*c&R$mQOZ%sW-Cf-FiUfpUa_5QduX2(_oz(QQAz8tCg$x<S
zguMh8tQ)AyUAzYKC5otRCOw7_-%E9rU)QKb!!X9KhKPuoF_{TKOLM2TUFH?V?R9_o
zd}|eJv;k0hzrpVXfbkcp(SDqzn@M7j7e9)S$J{X$8;zVdI5c={MqlvF!HJ{|7P)wE
ztu2K#?KcJx2dq}zxIKH$nZ)H(6JJSZR=;Cte0~;R><kQBS_1$-9LyM(+1{uDT@xV!
zY4bV@bok?e`uEcWQ|LRq+u8|1$~{&rPm|-@QjM1pkBrxM#7#l_=l(v%^gT<e$fD$}
zvZj1AN8!+zrjF~i13962xwq5df8SMh@OzWrI$3i2b!QhHA?$^=bboB%_Jnb2bZp^{
zJ+z<f99=BCZxa~metU#ikVzG=EG6m4PG>qf7uRz)d6j_&pLgSP7nT377GSLL+3+mU
ze0|N!y|PhBEXrKlFh~Hu8-JN`BE#z>AY(|?iM{%dd;%Y<H|A1xM@@;KjrCA*+p~CO
zN`~cm#^9ChxySXBrY`#B3L|R;=cL#E79~Hc!M;Zmp69eppA#aw-s?cihrj`(dqiUo
z^d{TmNNxT7W-jRv-$Q3W7!IolOw2Kn$JjJ4k=Km47Nu<V02-2NEpt@mA|WxvVF~Nt
zMe7^!sav1oTkO%-ITMl|yl7nC#&{f#mgEOmv|`nkx}+(OTR04<5_*RB4MDk<v!0_x
z5P?}z1{li&%7dCM^Ep5DE$)q8^CuM5=^5ocleg2nF!|rvcaJx$DaB)K<7w=8mCZJ>
z`;<P1r8v66RxGPjU>)Y>n$AXg2G3P{Pahf2FP2ne=$khK9U-=SWm~pY8F$lj81`Mq
zQKc8lE(-nY={1L6X;W!7oVr^rxXud~m7I5jOUGy~et{}rom;q1X7ahRPZdj!UE>~n
zpOMMyS%q!qE_>Pg7hse@!!n(t0EIG-JjJ?&J*p^z773c5uF;7T<%6D{KpE|ppSa4B
zKPQBzWM-}ZE+T+n0Ht|Dgp~1wfMRbU%F5_~8{5OD!n{9gqOf00x;^m~RfZ}Xv6FO8
zXo|p0spk)Yr`)MxdG5swmfBT&KKd}j+q_NJ+r92m9@%EYF+pu`IAegKEIowEk~nL5
zB9!HdtsJ}I&IB&|ozkQ}CN9Jk>U;)Sh9J0_iSiqq1gti=MqdrY&+7>nU9>%De62;o
zSKTzG6_I5DoqDphA72+JdTENvO1d0KQFQD`geHQ`q|M3mEak$EI(5ySXQdejwpRuv
z=9tp{WqKSrOEy4Dqa1pEJ3;I<&=sNdtneiDO`Hfa4AOXOfVQ@*F(BbaRJxvt_Ezyt
zT^orHip~?o)Dn33J1dgoi+sr;RF;6<Y=1j!y^n(sM-Hu5JXaX4WF{RLtXQd+YA4n0
zi2JTmOjtM@7)WE_o32;dJ{GVoSzB<s9IleP&cAOU%rmm>W>&6RZn~I16ri7=Q2VqQ
zvjR*hu*#j>zk~=u;|!)ltZj7?Zu6$mb9Ql8--d-uW;=#`wKLbY8t&ok<B-tO-<xiO
zJ%FLMU}}$25~acw>p7Ie%-b)0;DfSnChwaOk0z7_C+CO3uEbB<fc-(91;2{G`|R(6
z27g1Bf&4H;<b$ss#lW_#AV`tptkbu8w;?rtcgMqK70OFK%&Z5J)iJ@bCh9Crycc&Y
zhjA3Npf75t$!FJ(ts+bkPh*K^n2GYWicW>10i(<X7z8KMRzqPJ)dT&79A_?d%~zv?
z*ZyU}k(9nmK#dLl4;=RZ2PafW)Fz~RrunL@bcNZWOd`X`FNxnDgfhR}`G2xF?>S$i
zIu+$kqPog>mHJ8Z^B!rcpQty#Stx7?1AJ=p!<Ll~^9j`tk6vb8!hpu9FiR{F!veD-
z{_=nSc=cVzy1l{G@wFg3oS{n9p4IGG3*3%xF;%WtKV<q`%imkdE%8f6OK+NVF}x}q
zw9IF>LFxC3AKCt$md=@yq&@Jz$1U3%g^?|C!a?6Q?=_)jJ?~ZsgKNQ>IIGoO9uqOF
zVSnSkHf;<&8&tdSH2Q9-FeFpqJ`eZ4Dz~6et0uPPz-+<)8kv?@7~Z7gO3YIRpRtRz
z&Lsvi)l(d$W4+Ruz2^A1O8ek7h6!HlQ(0N-sVBPbi$(Z0>Z^vt#t`8vmoD(~7oKYK
z*Ors;jb+vHQd|JMppihs9<l++(mMBB|BWuPS_9A<c37AD9d;H~asqR?v9jY66bniH
z*V~boMs^{1O*vkyK@@N+uv1OsbFP5SDa-ANy!I|%y$l}}Ne}~Dwe40VqfHAF8~Y;%
zw4<lo{6+aKxEspycEj?Xm})c0x3|uq@!zw+<)btmk)Ydsdy{oXol3vrS4%z`u}Wyf
z@d!-kS#}4nqe!Kn2Cw)>>JLQV;(zuz?Di^(&RW*+zN4ky;j_}-?saob44D!21%N@R
z57NmpDUMakh%0^*kx}tBp0({H@vTVD__-hD*N3i3)GnFkrOK?A)<zC<i8yVDyGMH6
znb<xSAy(-jZ~bgw%3AVw#mbw7Utw3JcX$}Yge~&Iz<@e7Nk2F>(x9juIjL{RB<bfL
zw(`6#E%AT$SP)~wW~0%rySH2ts7yo3sA!4G@u?#$)5HPH)ZvRyTr-r5G^$IA7h2r(
zu!W}vG9BWT^j)5=?sZztSYr_8CC21!w(O+!RUfJn^*{0l-X%0{S~Rc;!H+pb>iMfX
zdnP#OrZc*sdmKbXl7h~u$(Kt*CO39T2NCx$Aw$!DD5@mDg!0uZZgilBT}#(J#l~uq
zQ>57^i4;-CmSnfVB7XT&t}s;{VODbGYdNgVYo%KNp~r<(`=G8{QMy@CQ}yTOXga?O
zj7H<!&ln0ES-~~oAP>Nf7bh4vV*JX)84+$y*rePLGY0*oT&epL|Mj1Ac5{=zjk-#R
zrfJD%3yYXESi(49Q~za3fu6@><(3m^u?c9qCSb-4ni3#HR>d|{Km?r#dXFnP5J#~#
zNYt|)DahrsA=zW@pZ|@Z__yvm#ws~NlSaD?7}%nih@1Ur?e6aNiifO4&fd0f3JI>%
zX1|35T0+Fgm6W&&2_g&g`?MwkOu$K3p}A{IgG>H=p#h<-n3)3l;L=IwzIk)@9y@2g
z4aoF5__@&|@92hVa%%SNpD^BoDySsFhTAmhYPXNMhlk@e%fSkq;&r?56dWInyY2}j
z&xf`PU6;!`&ogmdZ=*)M#^(ZwYITkF(R!_z_X+h1(!4gO1(Z75i>}+d2f2@#Y^thy
zsVzix*9i4=>e`=^4&sj~qcH0HW0h2@FjCSHF(-HGCsh2N61E-`U5(ijL<l9KcB|fA
zH18p*tmak1Ec1=wsv|3T0q#$<-&*#sUg!&@JnNu*c8bLh!vdMP9+X7N^&c2JTmv7#
zhnYbw!7sGJN?R_fL>@L8|Ap1E4qU#z?uHF{8<lP}mAszVFZ+&7@fR*I65jGx%ntDq
zy3Jt9+^@Y!F4w#DAS&nIwuZ5uk#1Oz3C9;t2%N=93bt)S8r<&c<`w6*ZnhuK>Ni&&
znh)^w|1`YAK+e=%-|4kdsRglH&XWoo#$?KJ8R_S=<v6UrD8syM=D*$TB4p}UVZji<
z@Kwd7dwrIV@)&^|`Y9y$PsmoMyQ1Df@I&<*Mpw1B>$=(YmQA|*5*cG<heKB^qL0C`
zaZuv=nD~+Z5`k8esSxa2eDP%6_SHkdx0=w7AJq%}YB#zgsTV5g0m&Z2e|nwCw-@j%
z>WgyY(I`C4%OKJtxl6tK5<R1NOruG#y{M+h{sno+fc#Ay)SgN9c$TV8;E`%ZKx4x`
zpV(b)iscOdi#5iMo3z~s6Rz1)-E>G&#2{F^-+M9aHYI$LS*Kph9NRCdtwnB|#mbnr
z=HKaPl5WY};D2jI%ky(Tv_Y*mSiyLanG;58r$$9I@=x1-S&EfbyM|YQjL7`YY<ztf
z=9X^4LeRRA6r3-wx;p*-9|)|DWfCQk5va1hY`835Qe$-dG_YU@YPj5x2NI8}$Le|w
z=Q&d1GHn1kn9=6&`rUMGUOuOxkr;JAA5n4-4savphv8$vmakeS)Z}-}4iF21*n8NG
zu3Gb1%u{DN<o;_fnmw1Kl?NO?kBp$Ge`<1H2*4Mfl$zlT9^wKicR5$XU&ym4m!c%s
zU%yfEMH^U$x><EZ-Gobu|EaFO=ODH3;4N(GIkn07uJ`y@iPqvUP|qA^?VS(XHIF$q
z0zJtR0qSm$z_d8R=7jDR$JcKo?P_i`dUe^$cf1&z5H%+eLvFZ^cBg`l%U^T<Yc6P`
zmu9gXg0DDOpdz`)kA~mC;!ksf$zK0&msoGr+cvW#yFk!bhT>fEia4BN?+6W}XZF8o
z1Wp_hrVSWzx_!8Ezpea`n4#LwUk@2du-&1@bZo9kqyC^cw+BO|Ij`_<7ZQyjx}wyp
zGr;*ljh%2qX{2pD*_Ue*B6IwTE8Q}e)4R#nr)7z!g^sk2s<mEi1qPa~_~PNNqNhyB
zZ03EMWe=p$s)FF93|LP$Y>dC`9hG>W9Cp0M{A<>>ZqFIOC_dY`4)A&39_}J|njKHB
zxtC;=<Jr9?^LE&icUR3i3D@AH{^9X=RlB;b@j~L7m=m2n`@8Y0!=>*gE&bful9s6V
zn)&lOJmsqHuT9oHldu>L(MY$^13j&`4h)Yf4*PK92XT?#omd+z&f{~e%{p64hVEf!
z-WI3hKAQo?>N0O_A2JWZDQ4=l|6&3iHe9%S{&+d=FG3e>Ic-J!G^fV;=`CLlRczGq
zTWol`ekBe3^)07sOOt-WE$71PwJ`m>I)k}$(V_bxyS_3WJU!iQ9_~$axc_~1mZz#~
zQOc`Qsm4^Brh^DsSFn7+k|B649a@p6!o%To9Pgr%!|Qk$UfIOwZX8zdtxHm)U2Jmk
zB=oB6oynp+_F2hE{fMjahnvGGf?DoU5~g5BiNi+z49xRlHJ;sC03-kNI>M9IpT{Kg
zU0pTYuRl7U;~T)dg?3&J@9zX&zAZqU9Ve+R?@4pXN2ecMFu<zz7TXft<b@JH-H{D<
z<8feL_Reeibl4x`ahy(t>0*_%y#K(;b$8Ye5QeBzZ}*12s}t5NQmbn5N*m34HTNA^
z4paT1T;J5{u>VppF(hAfHF;_A4Wpq9g(Qv=DnHD0x!k%QM(+zzV(GBTjvSdSHQR1V
zA40<B4KBq%D4s#<o2Zbxvvl{R>>#|}lLfaF(r!amK1@4%=pL!AspBi_`1<w>RBxTR
zU5tT7jWz>LaM*8HENM^l-q)dgG7}I%6Pm@by-5k@Fjz)dPCWiX^G!>c4Hbi^8LUY{
zSn#CQ{;yNW<-Mp27>fUv`uCDi7ZO+BaDJ{YY+43LJ5wjVOVvYP1d?<b8~gX<JQ_%D
zn<s&hNvoJv4uj@aA*e<8HbV>F>Y#W*__v{?Dr>=7<AQa{4V+94-{N7d8XKomAc7*o
zl0%ZcX|#9hBaP3AqroBsfga|E-%*lon3&XSBs(<xQz#@a$R}|{87CX<+AF%FNN_4W
z5|h>-(h-MP%A4oU@A5ozsciM<VFB#H4}X@{XV1}QW^HoyZSQOrg_E{=%zNs|zsYlp
zMX!%n#jXvWky}j4Vi&5-pxUT(5z2#3gk}zr6H2=B;?h@=?G9|j&t_?o%V1PGc~+im
zq?+=aURm_AnpGDE^VJ9A1|+r(mze%Gs99)0=8D!n?9U~bWis-KlxuJc4V@vgp6@*p
z^T1=1aR26|5@Mpd%bZ-w=#*E$Y*hL$lv0!*mM8?lKqNy0k}MZgxKu&t#8bpx0=J}N
zj&<GKpK$6I1R~8slH!a`&r1$gmhsDV>>rKQR))Z^um1IGlt6ge6zYDX);yO~NQz$J
zu@p#85QoZfRNri`1gg3PFe{CNX%$uoJL_9q#Sk{55D`|tvY2C-@4>pT5F~{|ZM-QS
z|4dBnQf7s#|It6Q5^p3n4H(eDIiWc1ei2ZH)T)Yox>@}~38EgtL2+7dJe9;(b$S%v
z6XL#oH;Bi6a?FyTitEVG6la)5xXY7deF5!@grN;6<v@?*nf45h>xQ90fyH9m>|@5_
zdz+^nM8RAB)Txel$00q(*D0H4&5O=zPXd<lG6_E4=cd!fcU_8NT1@rVsqEFKT@P{3
zodZK3`;mUeF5CWe4&2Zxf}3>MPU*+nN6leNQPzkw4R;A5A{oA8^*!j@2c6+$m-S!W
zn3e71u4@i8Q@sC&thbKKYWe<nX;4DCK^mmHL8Ju)X$0x+7NilRySqCCq`SLYLQ3iG
z#yijXo%22C-uo9Xg$MSYJu`cK)~xmZc>S9H#iLz)S2E(MF!E#jogWX$PnJ3I-i*1=
zwe}9-`}Yyn2$K)Bx{*sxPTs5EPT%3Y*(M6#7_(i_yL>X$J!G;NHeF$pE4sU1<^7$Q
zDBm|3h;m^4nG6js6L+NbS0AkB*=7aLMXIpjoadi(`xAk{+v<1u=Cil$*WTw7x#Ps`
ztAE_R%H!`HT(tsk;_~vpwx-tkXXM>oDwiRO|EP|cC#YI+Z0=0EZWDf%f1jCDb=U+8
zSA(<}nFuA}{g$kmf$8UVQ**&8n`E3Pi?D6@-A5GP7YDp>?0+1GG_r(l;I=J8U0}Kq
zFG+vcUJ2V0IvjDuGR5-#Vsjnp=6Pv>Y$P20`P>s${%+cT*e0FdQ!+Fv!}U^8Gcjup
zrla0Ql4<q$so&J9TE4}v^lY2h5wm<e{^cqr*l;Q3UwZFkbhm1uAN>Kj?zD%*V8lPJ
zjEL<G4=;`dRkEU+5?8qo%NS@#&ZG0^bZeh~kIYr|HBu1Hx7oeQ5Sfm&pChy6pl%DI
zSxlxHS(M~lMO;IA1HX439!&5CZ$h;2cCd$1sTV)wj)=PbBA+GMYQjc2>zS2&BL736
zz9h9*3ZzW;L7&h#jBg}PFR-*=L9c-a$DE(Lk>Z-$Bw1pH5Wppvn-4HK=f!i7KQ0z%
zRpS|=f2gi)I{@XxcdDi%YJ_1ti9Zs}QMd@O&{M}WbSN?%tB#+?vZA^MEBNjDQz^Vg
zmY{P`BwF+MBIe2*iFcIqbAyyYXik75c0gTQZ*XVsh3&ADe^|1l6x@x)<O9>R13b3d
zyFPc=m!+Nba@#3cQa-Qb1NM_%Q62~|e`C&C<2T03LMETnT`kQni|6sd_>9R%e=;M0
zin0R#rI1F2Q_gRADL9LZ>=I{K??pZ(H3t8%xdQcbGHQ$zCN!q*wJjR^iYpbz&>YeM
zDBn$(7cGkpzwFrzqVOZ%MV*Z{dzk2Ck+WTWYiJV<$1_vllj0hBcXaBcrTN>iN}r1U
z)%Oo;T(J*sP^g3nbEI(Bg-hd0^e|6)3GTBdGTAovnax#r{-X!JF&KSVsBdMJS=kW|
z9ZO+HM{R%DpS#x>_MD@I6kj!q#iY+kXYiiM2n}a&jYl{)MBsnw@n0)0Dtsc8Oq;V+
z-!~FVF#WLhaSiLb5&9j@{fC9M&TBi2YPUBN(VD(u*;E<!TB7AcHzm)A3>$xhW3m-A
zPKXYM6G@Uc3u@yf5kaG{v^}?Y>=SJj%N3HDLg#MVErZTxJlwi9Yo4~s+Fq?1pq0yx
zreaR`)XN*}7Lp`Vjqs?0fnNO^>7LptP_@J-E{_RSq(BYrPjqiUM1MpmzuTnvL)XXL
zG-Oif27-r6>3(Y_R<9H!ry)BMmh>|1@~>8V@H2w$>bAzv`NL~l#gnV-;ygU_%a5*s
z?>RZuccatpWY0(yHR3MVToPi@Fx?u4Dpg5SPkx|AE>AS~J+Jt4e5o$vF#Gjdmk!t6
z=Cye~%Fj$8!>fc+tIr!+^2E!wtfZ?1d2(H|;)2b_zfXjTB9F!i7)1<5<L~Z#uAj>;
zJzv1%5PSOFejG050Yl7$Ywx?Z_~~|q1fgQba4**MxM{Zo)`e)u)V5B7r_ojYL*23e
z+v>?p*j0X~#CN6mIKQq2^jmqfsuw2~7O(dr?F|Np!;3Ora-T5RvX{L6P8Vbx7=Cbh
zk$klvz1{CZL@(1;D>J;vpsLH=>B+XG@8@pVO1zzOE`_pt-o}F}S;mCp?|EFgE^^Ns
z{j~0P&&r5`ggS|PU%P+L4RgBi3yV{_94V7a{eX7aW9hQwcxAwQzD}$R72(CfW_Mi5
zxv#9dkSAL@YO@XZj!!*Wt*%<TM%zlsBisEP4gJi#ZfoZ8>$8GLo$O4OsY;8vvIVHT
z@UXes@6$A}<lOpGj4!KhGhI-mg0v?0d*g*2G+q*E)$5r0&=hGK8|k(OjSR_NSH1WF
zLpevPRn8&8(gF?DU|BW9?m4g3n#ph}qfpA_hO@bW1C7E%Fgwl=o%mUO;#$YyVDl0q
zTcocU`>vJS-gDu$DgN#Qdn5YB?(6U8?=4H-%hUR6x0yxA|1lrt;bcJG{<vWv?Sd)E
zK-t`RgcE9M5tqWk7mnnb9gK*-vze6UKbjPLDnZF5TrzVb9pB0G!)IaG$fSo#vJsKA
zmP^=SFDbI>(~9xph!Xo~3LAx4G=j=36>a%UjsA1aRY%X_jYImOF{l=Q{5gg|#ILME
zauN!op($(p8)oaFTpaeT_{FM)Qo<$u(gtj$=Asgw_7-KFhuMpItk(Mls)5fCf_YdF
z-Xpy0Dx1P(JJbx9-lusyi`FaQ4Ic@*V_3BckK2LK$O+!b%GvoIV#R8Wck@nLg&<<^
z<i%&MLB2fPot86`;1D<w(=U0`79r7h1}jQNZXBJm*k4N;KCxz_x6=-q7^Kj^T9ka0
z`u4^^)BeqRS>ZRN&&jxgD6G(d{Sr7OAx|-SVbsd05)uU*!4p}?Sw3N<jI`{z{EJ4j
zRCX{kVdfblqH;Jg%e2Jf6=N53$tz4q1V{}-xsu`Rr_CBRq96OW1wNYHG|;I{e#;^n
zJT%I23f?z?tDCqo>ZQz5VN&pyk|Yc}dg;>KEUH;>Pdkt->to^1&37c1zt^Oiv|e|8
z)A0J2z6%pJMwU2l^Hx#q@?}<Ifm!}+uH0grrh?l@I8GnI$du=g&RR6srVFC_Kppoo
z5kz9x^dx>Fk6ryjd)N{*PqqTKju34;C*?#%B|;Py9j3jAF->j`e5s2WG17s66jyVf
zAb}i-$ao^9#M&HZB)y{F=}oezz&yfFLhD;WT?0LotWW4-g9W9)=Wrz?EU_Y7RCZGR
zs$<NY<FZ?!-EVjgsD5QrB&W_cu&RP3doXH+dFB%&WM-nrf=?|}m?<Y0y*t>}jmt9m
zB>w457F3r5_y%Fd?QA`pj^|MQ>E`H^e&31Gm|ml}T<+t$6&Z*uOP}~cef8RGMn8Is
zI*HYlAEI>klXXrd`jdr5tRY>(FJ`WoW;i?6GsnGVIisDK57&-sA~EvmTn;6e^EoTe
zebu-1>e^UyTf3PS?cijPX9TfOx8t~ImzV49e_g7C;vA(<;>cek_6xgC=)Pz=dt$gp
zD|+&xFNjD%&KB7$9Ty(+wChvP3?{By{(LN8+pj3_Y0!pywvd;*ZskN3R>Qoyw21kA
zJ;m9hl1Ai0#~-@1(qPTd(Z%1qA*k^L<p<R(2~Lh;*(I$H0ejYaD7BXbvgIbVBuESv
z%HD%{s1%O+Qz1&TmxNE3b3|n!W4OL(nE8`vMvK#PcCb!aCADHCH4~c@*Q~2y<^`kc
zg9FBlG$JGVPplmTcj0a!Uo28l!hB@jQ56ud!x^Y?Xi+Z6BujKuyz1d#c_&#cnXa@s
zLniOTO29ul-DAKUY`*mBbG{~d+4E$xlq8R2Ij(jYUaq59(|F3Boyf+hk||4)8H_&O
zybq-2T^E(_&_2`P2w8pNoy9fe#5OmHdSS^`-lW7NGd-xs&!xz}!-;nHN<UAHLaM0~
zQ<6Vq6HeOV3pKWdXfr>xvL>1xC*k6T`p=H(isbkt8kj2dtalO2QASL$qQS~i*wOlV
zlqf~}Eah-!qY~%I-3Z+C@noNMj>$gVEq&Ca+LyR=!q6DOw2`g<up1|fz!TUeu!kqF
z_*kP7O;#);RG4wpP$P{QYon~-7hp12S-#K}5RzYhEBAiCC>P`1@Ilz4V5iQ-`e=rf
zur>?6rxMm{6IC(1G$jqEDc!)Lm5<oB<yts+>dPcsB$h<8xe4`jExWkS)TA;jk*$7@
z<CO{?qjJa5W7>1pXpOixwkZDz=(L_w{axgew~#l5Fla(;ZIVDAjg;JElt;7}GTo#x
zsXSg*7}`-9d(tNfSFr1cdWqZF<qBZ@=zEOXh$R`{=J%p&_{JQ7fkrH2Ukk9s-g^_o
zFT3oFpnN>tJU*(h^0136><Ky}uGb}PcBxGeTq-C`Edq(le)4>jM0@#p%7)g{DK_#`
zw}F4ztfOF{jLh)*K967>?&u}du*=|YA^{w6$0RpT#?8FMak;UrtfxuwgWkA`_hd4*
zbM+A&;@0Y+xTRATa?jwAriqi4hF!I&WW|n9k~isYdwrBtF!L=_f>K#I{jGa;%Fx%8
zZNG}jGq9_+W5+RD%F+%!FHD<Kz(JkW^*pN@Yh+THp`QquTJ|iv)3MYRi?h@;X^oUG
z9kHM*K2QwQNX620{0ZfYP#O5d$2aTzIlmoMo4Gvj6yCRpsL%Bedg1vWEhOD)`d?qV
z8(vCmp*-_rA<p|X7agJW@lAvWjD>_r@xDs&Ly<%ud9_8BbLNMgSA;n=qtg@1C3<76
z_%dcu1a5m<IGED~(3doOyJq?Cgi<I8tiO)M&{Q;jd5bTpT2<Z{Y)0oa_YRfH+@?}o
zeo$p**<a2%x3@^kE7!Sj^1WZJVsw~4jhT(L1t|jdCN)NBt^<E&ut>w`k&}+2d!>s`
zcMdgy%U7N5axbyHuc6;KPs&!MCp!_c_<6%=HlPcYFB^&%%P5q!2vtjeU?mJxs8cQI
zY0-r}D7ipuM{sw(LV)`y-yP;w(K{G~^aVjUywgz+nKzinchZtXy(+spUtm%^4WSZM
zVp4aOB>&h#@rV=iWA=tv3)_TS&#Y_l2AAf56jn6zP<p^I-^`r*jE-i!n__pdTGvxU
z(B&{mj054fiU)@ouE0)b<=OaGg#(G=t$6II`%{d{(Q}~zthK^#F@i?in)Bn~)Ah*D
zA41lvM*UWWpk5u)Z$_Mwb|afErx#z|X9qC_`G4(kX}{MVqojE=QfhUa?l$4WjPCLi
z`N*rE!{x?j<g1G=9ipf04tJ%;eyg$DaG#}>$H7?tQR7jDudSa(1`SLo1&oc!k!rW^
zy@z7WYik`>bUT*Q>GRQc{_B{n5sHdI?B)}_j08q1q_t7*nCHstC%6%qof60c-1V(e
zW%7$(Vt){=oiiGU3i^p+fs@8o9~9|YWNherp_bRDSAE9TX281A9v=JBwNge*47E`3
z=#$5XEOsd4ZF@Xu92adrqw61O51jwh0?0Q@F4uN8j-@`$<Q0xJ?x(G;JS`EuY_Fnj
zIpiYbaQnT}%Jaj$ee`O{tTCLPt`sUv)Bc)qR5Q4v%NNQ8{^-c}Bk#yt23%D*JF{3B
zKSWE#L%GFtBqu^&6NKrsX>;SB*j6@Ge1)kc)tVG*ev9Kmrg*ifLz1Cq+{J}}9Bn^u
zck`2)H1p=>=lD<0QOfxs&zC&T%TZ5aY9wuYb)`1Vw=$`bIu<oAT9G~Kr{2x2D62DE
zg3&=rs>-{PW2U;wBM2pidGOZBJHuphNGR+K?s%Z=I92Q$M{v1$U^vbT_}UpDpORug
zLbfJJf31{iaGA(t{hTptq_QNZL&(!9u%Vj#sw9BT^`VAf`azXu2W5vN%R7@#Sy8*7
za8%wixWh6Gs$Jm7=Jm!GS4Q1mZN}%wD8BeZhq)V;ES<T?Wwk14NK`PvA{3Pk<P+~U
z&;l$Hb4Q_PkG}R@it{hx)h|)qPvgQ6bLY_7yR^@CN1@%+y&r1%0#z{9>|2W*X->)=
zszHP4D^7+X4TtG_g}x(f&qAoxUaNs|8)P`%k@Q9G-|znYLm8r3h(YcO$uVyK``q8(
z5zi8W)43focgIZ5{J*P;`u9r(AI#fj-E-L}1V&+`5ss<Wo=zUwgdDUr;4kbit5}_}
zm8QgidHAd*S(jb*ON?97o6lgzf;;=a-=RRxx?Lf771uNqi^Rx>q*q#(&%aS^@K#6Q
z^KR+mLAm#fUeeKr?=rM+WUKzU94PP?&$*@Hn*5;Jgsm4jGvhkvW52uLyy?-#$<#O{
zck~vzsJ$DrQ6H7R{pT}lwGw1Jg>7{=ru(5(Fv1(c#zWZcZ$$70g&E-_wN9X-Ry~2&
z``}N!FUT=8e~o+;65|1qQP_Q#*Vn1Guc**%S4M|I4vGc~zslhSzY<*rjj6=^GYpJ<
zNL2Q^VJtSE%C|ArsBp<++pb8(aXtHg0?_V?AHTBd-?vLqsX-Cd<5|^GwonZJ6)NNw
zxKEk*%SHY|o?WJ&_*GQU_4ft$qWDrBg)YF49x-ab-7M-Fd+jzeRBRQhQyh6@giBgA
zoj6IkukS*~DJ^a_&S22{HM9H(O<ctK=aEYg`#zM6P<TO4Kd56s%hfDp|L8Q>9@O18
zn9?}@>9WdHb=0&!CqQ2)q)LK4%T<$HFm0-1<_g-A`@)IpK?^+^sbE9)uuSyjU@YzH
ziwUuD;roM=^={qkrulGuwwyO%PhO9ARo;6u#SmL3;5sK6LA+p+OFf-4fM+sf{-5cU
z1r2Tm)#tZ4#RM}9uO)|2x$OK~$5iv=-^klG!r?gs*P#@dpy&Yq@Vf1~HHLsNWj}zL
zb0&0e7fnvp-)PC@ekV6_1+<q!`Zs!lvD%+5D{Lz}5qO(&ie!l%8*V^{H|U>wx}Jhs
z0Cv1+e7~bWS923I@ys7cPa3#SfWZuT;dSEo@}>i^E2)Wqy1Xdc?bVR@KMy4e2@W!)
z<iV5*5V6}2;Ae;TCu{pkcg{n({6>;5CO1Jz@r+$jU#cgHH@=vzhYD#pd-N3awk_Hg
zU263fTpSXyUkD%x7_kR;MOl^eE2F(=3fRN=4Hq=1!sCWvGI0X1nxvpQP?o87=6w9M
zf*7aDad8tYB3jEy7c#(nK0qqxAkA@*dxIFAy#U^E(1^t7G5SRJVC1ckeE_>Ofm<RB
zWohsE{w~##GbelcKeLaMGODMQAa>*}9KR@8khwMtwdccWzb&xEn+LzIOBN~Y<?AQV
zj|yqEpVx7>j)C+e+BU2s^f*<6st_=;7#F61@d=m;!~kXqfT1tZ4qkZfh~aaqU(c%R
z9^TUfHMIz?pevAR%>N1Et412?8wdappijKe8&D~Kf<iSeDJByL*3fbv;D^1}d=b?&
z^uGd@r8%IhDxCu6=$3e)HQ<4wIGSk}(BWk`U@$t&G(BD|t)6FG^BO<n_X1vI*;|*w
zGO^;<Yz{v^fX1BF(+HRM5`(Jh+W9UJH;(bDSaJel&)jfsm;v@-M#mrefz+>Tp*R%&
zH}P%Az+ez%8OKu-LYLKK{}G(SqLBlJNgN)plths3LcKE`hF(GF!2v`zt^l|CR;scg
zD>|}<6pVTgpnw{#SRy``-);xoJ3u`~<LIkoY1*Nvc>+Fwy2kOUMVq%PHqD1M6f5Z^
zg_&M%pwq8^#<pp<K<tGO_OSO}abZJiZ>Qx~>H(qE+fKxnVV$d>HQ*2MjjLNQN!9NT
z(4T$S8Nupw*h)54YTGSHrPu(!hX2;3?K~YcU@f}?h^F4T|I$IR?KdrMvZJ1h`HEgY
ziBQfBv}C<Q-p4V4<AVzTO-ANkh0^@*Myif6P%-3$Qx&H>g<)2Zy*$Wmc2<x(aKqp*
zl0W*Vb&w{Ntfw%;Z4Yo)=O94lFI~VGZyYp>MIsBjJ^;e57npvefQ!lrsLXu47l14%
zdj_E-C$Ry)DCSQnNgSk>-oR22QY*i)3E^W#c|q?WHQ8aK-3P_4XXEXB`Fadk31&j5
zyqxU~mww^d>*opGx$V8US`(iEe6}yfuh1L7qwD?A1;xCx4@QMl)1zT*Ys|ve?RYBR
z6SwHhAEP)M8{Ce{>=`7>gZI|od*K*lexGaP8&OPf!|<|Ev;mvW?A^50mferPTm=Jp
z3LBK;2n+E9yI(U&OS*=^B|Lm{X$?(kLaM1GkZ8Xh1<i%q830OwETC%`&cz7J8GN5J
zu+!#~06JV}WAvu--fG#lawXQ`h>AxA2Bu!8ck6_OXwo(4a+iUQGF&KqexV>?)Rbm0
zSQwTEnTXm@3N>Ar2ZH`YUVdNp%P8sGk)jf@@=vuE_e8Y(&II56d+DDkqO#e~{psK_
zeH+ouwrYQr$SJZR@!MDn&~&vze1)dlN`tbHJ)>#5)tQFi(>F8wJRf7?f;A}j(-uIl
z9<@H2L#F;Zo>Y+R67diDSF{BZfdjaV#J6a%zu!}rOPF^}`KRM%kmR?m(;=-~Tku{=
zTn1IG-&fS*ga<4dh@_p>R%edIR6JX8OLibE!A_R@``re<fS3lnik{fyP-Sspc<nia
zB#f*PaM+m(h(jfc;m5NkyW03>zSc6Jevc5Vs9UsnSbkIR$d5hQ2)f#zbE;FNZ9$;O
zpk?_HATmfZX`l?;dg@PV1*k_*gq_XvbT5#7S>>X;&2Pi^HYxaO5h{zZ?d#<$E1W<T
zu_-N4h@AVgz8w<%cfa<_-(6yMQ~C&ZIWLwb-Tp5&pkV!jWK=ZrV3<UhzzFvReg2*i
zabH4b^`?(!vEUZ`VQu2jNcyt^WEt{c>+`=hyelV)1v=iCLnLaCS?LqdIz!f!ey+tD
z#=@jThakl3f|UDI=Nl6KrnzeShB@4h@aPu3C{@Mb{UL(nnC7TrEofl=b5-9i(Mg>m
zAfZ+Dp8w)~uWR}lIU(BxJ_N}m@r2Y8Trr34IKvd|q^;^`zV+{TikPBHN4lH7mq`|1
z!-2D#;5KLOY62vHpoHKkdv@L?9|GS4k8Q!zFGdd(7gzE0OmOO=WZ@kbpr3eqhgaq>
zmfhp(hBJp4J55SAYUCcg(EtWHm}4c7#`<;sA7tH|FAaG4s3S@8h%Z`yertFFaP(I{
zv?FZ%Pk(<MxCiaP0;#!0PD<v3&u(8n?nouPtedj90OZc*@%sI*$BH3a*PTOtX#CPM
zZ3=RW!TS|OUVF-!IVDLdDmahHkTCJ@<z_=R(T~T}q{viC1tUualSHS>MM(Iu4jMZD
zralM*&77Q>ygT)1i9KxtM(;%PfcSRH1urQAdMP<1%W&J@-u~zufK&!(*FB4(r?n#}
zn606A=%;Lti{*TGBL&ZbBBddf((()4B|#<qV;`tbNa72Z34K_h_Yvjq3@W#f%py=h
z=`&I7S1n5kyfPuzxmJo3qOB^K<CeGYdojCGp})D!X$E>67{0`cP~c1dv~g!AP?~1Z
zo6X-h?$yeSz)34@F)x$bNay&!TM{QjPwHP~mrDZwlSSq;^ISO?HH*5MoP2{Aky?2?
zGO~%Rzu{F(_%Ou<JDc_{1%dN3bV_20PUBEfi4D_%iH?k@Xyuwg#-Ux><G7ZGsrPT!
zHc+|gDBh-O5;E29D2hj}yfssdXwnbxA0b;U=_yVdnEAS;mQ(X&Y2InAJ3i?2Z>TYY
zA-$m^ML8YZA&9>AgIU+!Tp8QiS=`DE=tbUM8<J?OU4$w+CW&=qmglk(!4%5un-glU
z!<~wC7DM1RCEm6cH6{?lWb5W|k}J+n6m)TO?2mpmNrhvCB|JOl{43u7>p?yTAq_G%
zc(7aHP-sKDI>h7W-=Z+nMWF7te@QJ1kf&1ov(P$XLPfk(O$J-97S3(RI-HqW@^~|v
zv&l<2DWPWFki4oz{xi#=;9?rKt)q~fKt#N5l&tMn=D8bGQw5J(awu#3_TSr70ZUhI
z1u<A85krK>dimlMH=1Ksd4}-AiZPSyCwP3A4m9;Lp-*kh3$8}T|9g9XhHObI`1#@#
z6ErYwI}|^Dl4GE>y{j6rk`%E*`93y$WM=!z%CQ{8I)6Xh1Uqm+EbBZXpS-;=L>BlW
zyS)Y5n-aqAPQSqDj`QHi_Q8+q{4F>x@WGh4qYQzfzW*#+aLtUoa1M@pU%I)uX#bTa
zf8C2vfC%O_sUJHI_5bG^$Y{Q8EFgUQGM$m~zsvu71&L=#q3;L)=M7TDIGO)U!vA|X
zdY$A^smgf7b;W%DKCQogYKIN(Zp-w*4Q2TMe}$}YQ@`3evflOn^VI%PP~+qi_1h}>
z1>$;d#mQDa%z6vlG>i7+aQ@zp$uELMPqoBZSDGm+<SU#B5qF2N-bx&a$;!+4wm;Gy
zvIyn;ZwPVj2k!Lt4a+|BB#>dsh4Sfah6vbsiDrz8do9Mnur4oo?esE*Jr^+tTmHFE
zGK?J<7y|lf_(~;C3_7Hin~hM7`?3$!G2ijz7G?Dg8}5CeVHdFm9{%$I6z~iL{FH{M
zU>wO=J?}2`4h4rCaelwmLJ}uKJrXvX$f_ISVEK1s_`ibdlJATY4HkI=WtqutEW<Y{
zzKtQWJb67fTxj&~jGMvO(SH5cN^=VH`GNn2-8!IuKxI+KIp4m9w$g5EUvW3ipV?_i
z-nsm<fviY<yixBzm!<bsk}UW>#^bX3SX*)}e=c_vDH)iZyZ{>LU3jNwuG)I1wG6XL
zauN5-MnBcCc>&J@ZkNJ0t4!{=CBg-4|2&co3V+B#!f4Vk-va`FY|*#-2D~0C&{MeP
zG;-I8f-DviUpa1#B-feWNjxp(JyqCWZ`oullz9TzjLJh0)}XF?fxsD<Mz;Y829xc6
zHC=q~)vWGm1AET+&yZ+rfcMNjrpsV;_fJWvUslt)q?{KJ%s+@BNhZlIV#CA;joY^~
z+~xUq^C%+)rz$u_%Q#0|KUCh;!*+*gL<bWW9^!Cq2ii?eMA4l^Pblw)Ln6Z0kGl$+
zVMIJfH@_m=fi8hBraW?3EM19OwIduNV*l^n!Vj4%V_9+R!5zeKDbGs3kR3tRLiM;X
z5lrXtrr{w7^HzD<PQw9g$U50L;q<;7@P9z;+7mp8%@%XWrg<wNrxnc{o{$r;r!R>w
zNh6>8;?n6icJ1jmGPsA5hzg*I&f#2#GCyw-c*gD0sfvoJ1m^^7iDo^-psdHl2LJQq
zzzn2<OsHonA=EIA=tzr;D2T7!R@)p6#wl1OU4zqr<HinvdOZ!Pw>dx}T;~}@h<5`}
z6tfk&ui?}Oc!j15-XRaJjiRP-N#WaGLCZ)?z46%O6^-26<CjrP8`>r@75lm6#=oe<
za3Pl=_(6gMV+2d$Qhu^q4`zkltjS5uIr;ZK$un8ew~zIWmu}_-|LzA_uyE{st+00A
z=`hS-q2p@aUA=mV=R($5)L0aA-Lfqt0AK_ltdI&Pq~`PhzBE7rq>;Hk@bX?mFeYPs
z+YplpB(_1wzkp!_>fPI?O&0IlrPZf^)6#n&mu-Q9`&EgT-0j%DS5mqHfN5zPAey~|
zbf=a>bRP)vjd|w2NgE9dtlp0CfN&Ui+<Kl3(n4fA2;82ukKN|;-o{3q?PU0?L+2O(
zcHSgJH&T^zq5)!2G^Lb<cBCkZfH#0OMG748T5#1s6e;jA$a=5s@rS@P%^o~$OPfUP
zPm?)juFk2x7LgP6&`u`*?wB3RNO}F9HiBo27)f|Aqeh$-S$Sw9mnoLt_&^6VMAicn
zh`@b9MN&{v@%riXg~ub%qCNJ&C&$xB{l_4P<MjGz5n4b)6vQs#^`F~u3>WbaSZIr7
z(Edq~+yUL0)ayG%56yVc9NmMcLkhGsWHJV>KrFF=NQ7VtfPn-mo&fH*=YMz-ScIj1
zw|*73kK(yd5Nmj1>nAq!t@`tH&(eJG9b(&V)3i%NWZfMppFzEDR=AMT`P_H<5sZ4B
z*X`B_5a_<6`*_GMi{^z80i|Ce-n+F$=y3L*w=aLNh}-{WrO4app9s8P3Mu-NE?yO;
zb-j85xdTEMsb!3P;P(f=zLoC<gd@=5_4RF+<r-WY%nu|By?*Hqw#We(3tuG9Rj0>M
z+X4SAoK)xzxZWs+QWERFzT3(D18~DuZMR!+5UC9@74bMM`85qmB9ueltPw!eJ+WN}
zH1UJ2+jOc*JHUD+`Sy4N0as@-5v5Bgtx1#y%x?%E*I#%SF(roq2Wtkgj$%qR46ou@
z7FF&Q*Iy7j%*2ll!4d;tA_jJrwgDlzQ^EYhXa5oEoRNyK@_Cl1_0xY6dWq=L8!OZe
zO1v0mM9?1C&bXmn^UN~8l{4?K6T)6nu0m`|&_BqZ0^5?42!W%hPgYgExE@OzN_M&j
zxEOf)Uv`C`ZhncX9ku`Q8rAz__6PtJfbUcPX9KT2E8NRNGcHsq;<Jhl&a>o)JCL;~
z*z0n@uYNci=J3-^Be=N$&J|YaSrTXt`4MhB-vDA0u)Cxs-f6r>w~TO5lwg=6U3nHX
zLVn=+WgdRR+k@Q!I7MgzQl#p3lJ}qc)e0tqIP6T%)<(JiL;}~4dlFjyJ_iCNKjcOz
z@|XG&5T=aXetA8`cL%!<(5x+MARWS+(F*KIZs_vxo$@}u4@bhvJ^^fv%iHbD$S<)A
z!2fv#NSB<&J&Fk<FYvc=&qR&qK01zKP)geE;Vm+CwuUzd7%UatB(N$dM%hXXxcN`8
z#tZsJJsS>QzsATB`%%0)RlFsRF+uTK$n^Emm^^>(Byb*|D9AQ2)qdN$>*n>Jtw%2d
z<Rmj`#a~4sjeLa?UK|nLB<p{AAMNAtW<_*_FB^hr5q5Yo$Dq*=AjoE6sA&1#fk{q%
z_PGos1{9)q1UIFK?fuCvA=Z=-S4#P^w{V2{xb`-yB}fGJ>>GBFtlCDO$+Nc^UW^O%
zgpUE$f+MOuQr{G#Pm?%>nZkPvSEytY%iz=i-~i)X=G3+jGhZdgYlzC8ow0M?^InNA
zq86@DxKN<>Zh)IeqqkYhmpA@Hg^qga?tgZ7dYDGO+R~u>hnNVFR5=xzn2^ioSa=^J
zL=4w=8lvKB=XJCM!+Z#y%u|J<ZP8pk@MfPD=i5vaO8lEXUM`<^^p;HCokZtuHGGe3
z4GK_CyiOlG38LJjf38!nu6hvunB{S$hD=ZYJyZn>#bz|!R=14WANMe#)_(4L_EFt@
z&A<(?1(|S%Ivc6>!)=dLd%z5;eLfoUt@TRt&`m;bwhCB!MAuAJ3g7PQ{;~K<Hqakv
znWt)gE@{rv{%(Cl?w>dn)0ZD+*S;b*dRJU;1qm+HI^oy1tsjzY_AYEkPZLwX;-JNL
ze;t+)l32M}Y|ObW^kj-=@C4Q;@g4T|ZfI6k8sg334TI%yQ6@Dv5Wg6iLj~T`vfQya
zsW1UpjV}$MsZtFj!fSL0>7?@ZnL+C<+l2i$y}9l8KabV4_g~*lM$&x*Zw7pH)b&ll
zJ9f`Dgy9#7jS=sU^q^!nDhZ=0&-!0ou~@9?hwHnPHC%yxIFg@2EpSW0V*_i2NjfeO
z7XI6NRe6r+e}m_AsjTO+hb>MrG%&L4Fr>KhmInm)R(-zJ3#$aR``F}tjh^Z0dG9g}
zR2p(THTnY8dJ=vF4sk^=D~qBW_LZAc?jkd#6fq=j`D_ape$+mt6~3iF2q?V=SuoN$
zW`hjP!;**yMB_hu>g_|*wyJ9aryHv1md?cnf~qiv{=<~Z`Q*<MP72PKL-!glrexV}
zARwQv3uF3?%KDrMN-g!;UOfgli&yG|vxiy6d1HH7G&z2#bh{*`-r_Ty*qi46Mvo&{
zAWQv!nHqKUHAP8%<W0}~to*OCMBtQ5N`a*1XHQyA<qhY2?a08Jl*XL&5_vhMXK?9u
zsVTG66?DtLsW$D_&v$a?y9|F*PPp<B-7HG1ksYO7(6!CQm*hN?QHe`XCXA^}O?atY
z)S3wO<!381dYM9dlMZE3FKc_;us+in6EtFb$-DrCb))F(TYlbXwIQmW*8i7|1&bPF
zL<GrYeE-TZ%!z*19khN2Z~OvRo(4t}Tp&g@=~>8^8H7zHdls1`%4P|glC0qymx0^?
z;XO>tXZiWh%xh~RCX|U%@}Dt;Oru|wD(^gjre>BfshXzo@q1Z0c0~_l9GDBUxGq*Q
zdL>LINt2%g2#@*XF*6C%|H&SSfQ>%VJ#kHDotgw%_!rVIw6VLC4h*k-Q2V%)$%wPi
zWvVN<iq8=UNf6m)IAn&ukP%W)ewOvqLXoaXTQBUe`cfl>beE>O^)tHcG->&9w3^cY
z^kXGHL<q9AH7wM^e-XLKw%>%$X`Pm-vPPtJa}3w(v&Q8@mO_(i(B$95>yDU6x$<vL
z9M>!(aXHqxEQ|klf`Y6*Dah)FLD_P)yC){uCoZ`<Gm!0<Bl}v21UZe@DKzrH!YsS1
zSzE~dvrrT0Ac9gcQ9xkH5b5M?C}aPc80GgR!xB77i7I?_3KqK8xl4Gt$f??YYfx8f
z@OpS!T+1kDMnEFlH;}b+q4KgnYrCGw$8h%h9vc2;f$b(kDfQoTHELWi*JKa!$0M#;
zVRoG=U{mB;BP9RbyGh@W1-nOfB>n%iBYda`kvElbCwJ1nCq4h{m09~pzh8>&@|%31
z#7H9YMTto!iWIcO^9>`jz)NBLJHN97Ip`38Rtlklu_pJaxVMzLDqKuXS#D+WXSZdB
zJD8JLKAdwNQH`SgN7IOGqYvO;kFCck1%ogyZu||6aVAlcU@9Waj=+X6a8P^@-V%%&
z+W7l2Xu#m{yon(Q?r1?@Gt1<6rq^|s6dpk?VYG#X4i$Pibm3wY+g$G}|4(>W6DeXN
zZ~Zcr@h#k<DA|*h#rLba%E1<Sa=q5=r)0s;-><pTOQL}I`+KP}fEzfM1kcn5N_Y2S
zcN)Hy=YA1~uPLiEKfm-$TPdRpnFFTtXKT}-yPkfVoVnItpF<`BAH%C-h`C~%L9(kC
zNckX;`&H=Tc(wg}PMKn&@ttbA`q`okvtY9W9;qz9x5P)c9-;K3bSXyazk_*@^$-GC
z4`^u4QX#xu;1YRqP(5C!zBnNnRR@^En9lC;jqbEeR;&%TaezIGT76~4>=y56b^Q@N
z0ji|1(&7dBJ}Mi>VZ4dgKby{k4^UAEA|Pxu!-M8To3>y^+wuevt0%Bp#FiGzGVBU0
zz5O--)XF)C7w<qIlyIcc*4S&a%{prdEkL<lDB-+2ISs-10(No8k;_uvZG~Cx3FIsc
z0tqr@f}Sa@{5&(t`g-2rX;K#T??DVjhYUt`Xna9i9}<}c3Hmh<i${RrfC}C2aUR__
zLafh^I(5buTqu_ev6lRijo*dZ<`Lttfh5G~PlbAxFD6OhKvAuS-6a95A07cDBTyNw
z;4s6^1;)QSFO8mx@}F7&bcRm}bt&h$&qD-3J_N!@gwV!R<%uqMnG&4X72U`&W*;RB
zA0!LJCyDdpfDh=pKbCyMdH~UhRdR%hs{W_c+ez`C13pJzkeP1)JF-}229+p;`V6*1
zY0*xG-G4tNbvj?oQSsjt6)IQ<dKOSr;7sT<*+hmGo;NBY6Mf$Y0goHInKUgo;C$tf
zhcSe-7sM1i_4{iI(zzYk7c5$Ns<-XB60$6<PBmXCrYVIgFVT&Tb@_le%w4XSw#$iC
zk>Rkm%Hrl1<G3|W_<+z4iJEVGUwG&NavX`kCq{69T|1+s&!>uusZx9-<g=#_l~_kP
z^;_%@grgRl`9Q^JTItbOM4jz-@m{B7;NT`p9~_7Ai^}0Si908VBO<;aWz=O!6J@U>
zV1*r6)YSiqBhR;qEpZlXULz!{K~yEwD=O3RMPHc+cdvPi*fiaFt{~N>321EdL^h`q
zF0%=;F1JGSQFz7!r|0@GRJ&A+v7#2)i==3Wn}O7~sbE_qp<J`4oXFpn2JPA|Rvm(}
zsCY&OKIw&a{V)MEzl_4FNMt`1$H}LJt0R27q94PmX+SS&Px(=2dT5Zjx}9Vg@!>!q
znM4lG4G!86%fuwf5<fMKej^>?5p@rY*RTSyL>z!>#V<<)AtOYGoI&tbu*_Zkk@q7U
z;}A4B1mgibN^3x>UDy4v7IHoVj-`qLVUWNvJe!~toHJKLoWCGPiui&;lC$6hR~AP`
z{`I4i(|fVyZB2;!mF!M;S$XU5dmuVYT!HHjgkC8G1`hAFx*+lbazZ71^}}#SK(v@I
z6LX$87Lea{fnn;Oi5}n&84$_tC)92&)Uf?w?1`OIHmau_zDT+f6=thYmbvjapqn=U
z9rQ{UoLiO=r&L)Si%!6bm;f8q$4oS^)JmFs*s52<V7dX6IG__E7NcxcQc<~a00hdL
zZL?DC6=gZK#upJ?!1N|-0%@GAo-=k!9haZZ05}RcM3oHSzOB3iLk3(PTnnuXD=%TQ
z07Yr${<u98dO{04Rw{qdNrWjj!#-ApX_TywOtXK0-&rwH;<HppTI3BhKeEqeqHf!I
zz$>zyuPe|cLcSEqkc^0#WR@T=^(3S6c<`ID*sjYEZ5g8H1D4dJc79rkCH1f5aD>*;
z%#^d-lO?P*mVCmLJnhYzvWqzJ*kwqfkD{M&ACtkaKs+im$xjBexep0HV{tznIzkG!
z>K=?MvjeO-Ww19up!cp%iM(aA%3jwfAnw{BNwCekKXPdgWi-f-BMYKUcfu5H1UJ3{
zAmqSB7CSxY0A!~!As(v`_dWZM2NN(pg}2~Dqbr<eWe5A!_PhEwYRx|yecbICd6|Vr
zNuvc_OFpq#X^Y^Zes?-cu|(GL1Y~xI?gym*&61)gNID6myf{?BR@dHs)5|i%V_K9W
z<wX!STrz-Zv3a5Z5p(meRBk}l1MPVPaU%U8Iqof|1}yRC-_iWcOfdZ+U!zlQ7RJ4<
zUjI3NZN}yxN6v4P4$FgJrdccjqv8#!1)yXK%lK!ElL{{5sEgXwoR(wOfIlR{`EQ6d
zqZ)PA9C2Ft=ON=+JZD4re1n?H9xR2*Jy5Ig>5#J@zgz>M=-UQ3?1yOdhdC`<V<`8$
zg~44L>#NxcFI6vhjt}NFh92J`IfF&<j_Ez}y$45eC7c&tsf%v()90k9w_Ml{;M|z|
z;QhDVBd$)p5?2kB7$Gx{qE>JKH}dL}*4NQq(K&vU0LjLyFxo7&u=4<6l1L}Tm|%Ec
zk$@paBo*cDjW7`u)lnf%q<~DK&0gL1v-pZILayhTlF*xhEo@`2+_q=%O*#K^<1AM2
zd_K4YoHZwgK%V6Yz$&l73hbYB-w39)0ks5IAH9woGsT85qzown9w8^JC@=UES*=s8
zzCSyP*wDi4VHZi!CHSgp+<G~eJH)I(y3vg$ASbr7MYM7f0Bj_4KW+(5|KL;J6;G+X
zpU!-mk%eV|Gk};zu7Fd1z05PzeYx`Ml*h11yl3Bx_hVtvc=Z6H(mAB@2~4gfv)u5N
zvxIt|9Gz0WcPlGUBllu2?<P!z&k2OS`@9JSSsuhA@4MFYiB3?mkX`~wVY%ALX@}`r
zme&Glo7&1RGWw1cP)buDB0YXnz659T!EbzGbv~kVGBT}z(vuGe6T5`kfE*4<mT>>j
zgKa%8=rT4YGL(D0U(wz+ysjOn6pA|l1??9IHM+d#+Cu&AqZ-bv!w?kS0L7@xE-?E{
z!6$lHsjX(6fS+d=`9_HzKIaI^G#EvZdQh!27`TUb*J^^^a?Ug5k4j|MW!Q3_G<?R}
zrpBl31vM)Bw`WuVD5}mJAtv2xkbED=xA8DAvPbV|DEQeu&LoYWf{x*mf$g&s3kZ6J
z<3K#uS%258XkoDlIvON_QX#DJ^x4rOjf&YaDS0GLJc&z@0}$I^^G|*>TxPJy{id5s
zFo8|567C>j8vR>m{c)XY3b#KtgYYhHt7;9BRfZgau)IOS9}63<^Kv*PEV%tJuVILa
zjSd$=3?J%XktDVZj`-dE(%~X3%cS^G3tU+<q=?kQ*+QY-wB4pQhU7!cT7BvIYzUE#
z!E3KeFfY8kAy@Kt4BkD7d*o%`#~KZ6fi}w$<sm4>xq~h}dCLGrOd>Xk8M_~bhZXKW
z_jkmtC*RAZyhhMhm1Ve$D3aE~FXL<B4ikS&cbH{R%3pa@62c5|@~{4A6mf&~hH-t-
zG~@kCT#L9mkWq?CGKWp=&xRQArh(ym39(LPBJB{344}e)(Nqby{`8|?xK9dRU#R!E
z7b7{4Gh2C!=pmJ$z~i>Ja-zF@%=I}en>puC7@z2M<3#1-L}gs|rKJ~yX(0)|jq`Xx
zUw%;K=LZ876p9FA<1E$6LXycX&5e{eC1b8-v449i^2~6_{kSzeWKS|a%Djj)1(il^
zGQ+d*^kfbvVUBXrHv?fXKw0odlAn=OTh%<qTpb@$jj32Q^fK1Qk&GjpjAqUU1q?Ih
z=eKtGL<>;(HbGHg>ocswVm;v$chO>b3-DO@4)pdB9^kE0mxInf0Q}>Mi4t~6rO1Si
zgwV|CKVo9A`jd|aWd&g`Gt;?4VdQE-_nHr~$skN~(d4-882anuD`33u<Os?QF=B)r
z;m?K}mU<hCdF#NNNo6!O7%xwbU=D?f`Wtn0N+y(g>Y&F5{znmMAO2^17fV<pZL%Sd
zLLX)&#TIsl$)C&-7i|uD6%b;I^~u7bC*$ibhn#MT)PtL|#oLnJ1(w4sIH^J^dVYx@
zf^liE8qLv5v2BTrFoPmuecO>cF`d&>*zG;d-|6iU-<C67#N<9Re>U{4XbM$rR)KO<
zy31{b292{p2@RQ+1szFw7~z}SnYEg^4Fx#Ym4Js1wVrg#P|j7J5bjPy9KBnGEyDZw
zqK|?FN+<?3ot@o|0pHsoF-X}4d7Pb175j69iqnANo`Q}Y_01)erulFf;+!m>SU9DF
zpfT=)RfoNKgj8gnM?1xatLn;CT|GvGX>292RnlWvG?H?y*-4xs)Fen?Pv$g{5C<qn
z)9&3}&W%Oc__K)+kUI~V>3u@76bqgkB}{=$$u(08ZP83aEAdyom_TQTYYF4R518&W
z%T*Lhv(M;sD;!3k!0{DP`q@#!nLUH^8<t(bKRTqQ2svxoSQUgVFWO#Ir5uEnDwi<K
zKDR}(9fp(wK+4xbmY+?jN#!uZo>OE7lZxxL1>GMc3`PDJ{$n8(&)0ldufkO<2daT_
zVEQhS%x^RsUW&Urwx&9V4NNM)1n?Q^cJHvzvWNR2bOLV`g1PXqqVq(6t}L=aq4qPw
z9UzRGQP^dhEA3MBoOpv+CBsz67I*JV*e9K|5_U$>l{=}XRT7|KP<Ik8p`1lhRaZIv
zi|dOn$D3rqF4EYVXOZ}px9zpYJ1$|QLYkUdULSCNHPFamQooC@S%`*C`BkVclVQ@D
z<?n%1omOcc5E;%h9Ou`Z+Qn7!ERf!RHl};*Jw^D?v_kbTIeu_}*%whEuJtNiEXJ^-
z8Sg>fxCFVvsmYI2zs=NBl6Et>ec9$j<w@2kfSm*`H8|wPb%r~@U;kiN?>-l%8Gw{G
zTH5tz-py6o`8`xXy;e_8<L9;w#WP-f9hAtr+O@clDA92m@ABUEd9w`-6oCv~e~8e*
z_6+PI^*HGSkzK)jq$UQ}(O}Mm<90dOpDytJqRjP`3-xwaFEYj<Y6A_UpFc~plWGXu
z!?zP8{*Y|cq$`N-|Fz3EOHpd4_FFY5y_GYhOsK^)x4%Qw`}4_Cvxlfl4})e0s}fIm
z@{HRy%|?Wnc$>XyS_b}WLQZmGjHQC)P9xWbZf*u|?P)qYP;tYMgkKcQXHdh|g`V}?
zzCLL(YEAO&qUE~v7(NkA2}Xg5kd>=k@dzJJ7Heg*iTTaGwzzB@{(`t*mp>NC@HX!0
z2PSPAD6!f-MA@{xT(*SDno|OUl=HD{=47yCWTo2L+B+f+t#m9ds2kVG=h$nzFK?(M
zA+^*Y)$n~9?imS7wFQ>g66%I&2sXLoCL^yX@P%5|1Yf2}1`O}rCJQYk9pU6<e^?~5
ziE#y*l@aUZCh-Oa8yR8ZOSc{Jl{oy0eNXjLFZxjwITf7c=<y7K07ZnPldwt|LnrQu
zQp=$24sKb+F$KR#b|0aSx-hu#J@+FmZ{;K9lD9~mUzxV^kzI)I&k$~$8gf(-^WF@h
z61<7MGtd<Mu1Zy)eUvXvbd*2J%&4ec9NCdI--N<*y6NxSxFVI(cnzxUhyoU<hFDFe
zbH9Ch$CSe1y^q0aSa&r`!h*WiaZkN{w_hQJrbp2)L&-QvDJiMDp`NS47nB?>>Wz_w
z_)9%Rfi=d*Wr$EU^fMWkSn~#rCNn3qkii}|-7{;@eiFbQjl^h$)N^iTRkesGOdB^Q
z5?GWyEO*K1ivAF=kbzd1kvJ9Fu-?dxg7Jejf{to&!oQf|jB$zUX#IPw_DM#?T*!2g
z0td!gcb&lUFFCExb|_@0QA6S>$@*BxY8LatwO!mu_+<k`Ur~?+4r^j*6Dy(p34lgu
zAKjljx8h#u!?$E9_Jzr((Sr@Mf90l5$n?`(-cFFRUs7+$L8CNea;0I&IULJyi3TP`
zb%t`%sgJ=hPBrSMKvE64Vsr$Oea&SMlzty?yh3VQN9<P}QiF4g!N3^4t_t1`P|O&&
zAdC@U-M#7xi7fVWoiQ-S1>}YO!^bJMn4Ev;4WMe2DTO@{v-RXKJ!7hycX`)fu}Fct
zWv?^fl+yo2EK7jYCDO(j$GuiANmzfR0f?DM0#Jkxc(3=DM?3}{L8?+^O>^v)<-A4`
z?2c4;X}6#p!gUtI?D!jZlYT;<vEMH6=6;sT`l25wLch@SP&+TZzAqW0FXamSE2AeL
z{2LrG2(%92JnxrQZAv)O_1x3wK<-gMepf3{=Qw104({8B<EmRpli&XGFlxvYXzzS!
zsP0)#rS&;zr1zmoF_`IWSnKTfl=t^}2+zExeL_Dwnh`X2zw31|Au7Ec>9OL%RGF<Y
z3N7SQou1@}9f58#Cq#;{amz~f3Se6iH^BU!fX-kJ`Yf%$WK*LlP{rUaP#XPAZdqqS
z-#t=+i=&2&E83*YZzj$5mh32m(bsk6%jbPw*|oQrGTb-c{TDQOc0<nJ%#};7fCAVg
z%6Hpo7HTx_a}Z@Kqi2Mng>s~D%HQY5b$&xbSaWDlTBOKQ>Cy}$xZ9i!30~j~ercBO
z6QM=3n}Y5w2=&GnR<%kqltI-ix7Q&hSX_@>s^f87bWB?z?UAn`ix!^iBJ1?5X;A1@
zKC-{xb18X2Vcwj=NW9PBEc}Ak{Q;Fk5*CNa#d_;hF5JdBgedOI^)y!6%CvTzlxX=>
z4}dg>`ME{mEZ`WTg!QxjDA#75o0TNZuOWaHiYK);tT^q&r9`um=+oj%+1ApMB&UR>
z{o?sY(ggWwN0jsDR>hmCqF#EP2Ue6&V<;BhPs40gpb)t#wi>FD2Q#Mr#10>}{L6a}
zmY3+)*7ZN<BuQW~ID~Hp6$sNnQ8C^7PlV{FKVU5iME2qDI20Bc;D7p8W~V+HS>358
za_1T_qJ-U+v0s(sNSkir&*derN7?O^QBEB`_F<#Dz!N-^Ou%Sv)l7b!iR6^rFrFe*
z>Qb?ytebKd+5cpJXI-f4^hZL&Jv6anz>l^`Vc6#hwoc2r`H^So&*6TH=fa!efCmrF
z<XJ4=uW-KXqO*s=lS~wZ;gu#d%XlP-Yieu;gjnHulB&6XKz)PNK!TreN|PLl*~=HW
z2H~5IDnyqp!jjFNu+i;3c^ku21w5)K#WYa9FWJ~-k`N@r331{ucyLG!$8!Bw=ktt3
zq+V{GKd#O7*{k-9-?Tk13|+IuDyPWw4rYokVnQVpJ#A%F`{`dIWk5`j)x<X#Mno=R
zLPObBF_)w*_gYYB3+1OjLV|4<tL-a_vXBME6zZusX)V#D*bDhZ{RD~J(R5-fx%>|j
zf;x!h)H&@Pw8hA3Xg-^`?9k2VjQVxvKZ@V(g9B#$V0gb|%;bsDBC{Bp?pM8Uz6pH$
zI_Dhnmd!Wb(&DHJ$`66g^*Wyb_VZPL?Ug$)eLJ~MJ#h+*jZ7--hDsJ**v%J|zFchf
z;(_%Tv9n$gv^K$&h3uGuNDYTSzXfppis!MKI{^j-p}nk>Ki5$UVqC-v#FzInUJ-`z
zoe7P3ZHgDqE6WS5d2PDJiId6@m7&lm3jM`J<HaVRK*1wkihf0_qmH0D3s)f?)(R(h
zNov8;gMt@=;-~LNA>%}K<5^>7M;56iE3VZ;eChP4(l(9%oxV}+t;km`{y34ym;GdY
zy16cPm0BXr9h~-Amy%34xw;77WMub!?TC_5gVh95$i~%k_*Yw?r9^3zb#W^=r2|d6
z?86yfG?0d60?$JieU3raRHMlWlbivf1*B;#gAxIwx(}AYLvV^&zcG7McRG(;P*;<y
zO|Eu-ZlB_j{uz7S?%3Bpmc(i<D%+0B$JAPSPnol%n{qp)`r@NA=u|pryE@WcI<?fQ
zXyMv#Hm$#Jzx=i@>Ma}ZT2|`*Ns%{XA<XzT$KWal%35J@hug+cJajv@ec8uY*v=wM
z@&M`A1Oivui+Lx)7?5O=rc!9}#dqN;lhWS8<Oqe+<rzy+K`HC085<t<EDgq|t9qMZ
zCBe3@cTxvu|Je8HD)LQC-iHE8&QRI)CsSCqL&64$XiaXF>y?9rI9WROGI!G<C>Z%#
z(H}<Lvf?=RpCiTBt4Fgb*mPbVF*EUV@k~>Or=LIiM;C~V(axr8>LtaCm47oI81}vK
zpi+I%>5*HXLy-s&MSNQd<2fn5_KZP@dR!EyBd|^tz1BhH1)BtKO(MR12{LpAb)f%V
z{MDSF1J36Qi6hZSgoP<ZiC3u7jrDL54I(q5ud*tmSm*hrr$*%4!;*77kGuzJ)H&<*
zGN@rH*kJ5)-6&49;bt228|+}UmfRgT>s&JXr}bT<$v(8#3vtPlklMlUi>*}9((xAr
z$(gY_p`YU`F=vWA$n=~OwJWk&6yraCoO<gQ$lv2S+RDvIGhO`r?K26d0P0>9lIYzJ
zG+Xm}qKxvnyG5#tsHHja0~ZX{8Qp*_g|Sp)c5xyD4)2dW(2}qM@B3b*=H5?6vx*eJ
zjfl}Awy3A*f)u61Zz(BGQ)$jAibq0<;Dyp0PC1G-r0xgFRcZ~2@?(kb1Jay%l!fbf
zAIY9uE)-*LVVF;oHLl5bVh%X91;a>hmpZ9_Ux7P^`SXq5T%irQ$8+l-r1mxEQFiXr
zry0KbOh4@_k_o){L|yY21s|iwbUg1=$NS)2bWVDDXyrYIgPS8(YKcBgtJ56}S3x;m
z<|NK`eI&>Lb|-m6R2G}a3g2z6(k@_Fo4cwPQ{MY-Vb}ypjJ(N@DPuNnHpniCIhvhv
zht_C5`Iz2BogrjM?4UNzxSMqV_q$=e^*6Px#s!fTZ^oCKcw4<qmuQiLfq@tLv+0CN
zw-OYq6%@C9;$0FWc7vvdBhFFTQ6hY*nw;V$X54s~lrL+$R3sGXIWSSOS~`6u2o_PM
zFXwij!Kq}EUr5hbBamPcUj^3Yv;1~O<%qzgY+r#>wMQqTc}L@r(tF}{_5T1XLDaq|
zC0xX$o0}lUK@~j;ZShMOP-RUblUuP^>r_RpM1ru>P!ee~Xep8}(`oY|zp$3(((dJy
zj(1$$_0_tgO|gzk+pMyPW`Zk@us<*<u)sm7q7E)%XF48DP|_LUg<J+vvu9DXj8|10
zx2*L5dKTQtiaa%iGJ3KUMX$?ah_mvAdzA+hZ>v-{3<BJ#Fgd?oh>aRG%0S8q?e9@=
zh<MXgt_b-^$4E<g(aaw2>kK%UD=~42jETSx5o_EWd?oT7=%)93xH9$}-*PdO8Qf^*
z=GUAzhnC`^fCzi5h6nRmNJm?YB<ZMhwI21f3<6<;G)%^f8Dr$pai?CQ@<(9mHjMJM
z^Sp>Sk}p0GR`hrk$xe;>qZVkrBD)9}>7}AlYDLd`yZhPCepc8ahYJUdDsb>Vfv^Lf
z7Ex?qZT*%j>CvM{8=!3R3BP`LNup~-hMv+XnI+xY!Ykt{Slj~woaF1NroA=^wITT`
z{IadVyjP*oc{brG0E?^Ou685EJu}Z*ofPQ9jno-Yt%{I&Zpw35`)_aiZSN|Qt@j+t
z-e!Hbbf1<d$31z=Gq>zCYNzFgERPCSaq*o#h?eI<qK*HWRE11r*V9dc3o2t)HNwAQ
zb|;&un_5qIvU+F4D!XP^4BLO2sIEi%Z!;{D%r6~SVj_#u_>I%fn6VhhRJVQW(L7RA
zkHpIpv(ox$r0c(+AY-fy$&xM*)$<$FDhjb8)A4Dv(x92n&=X3EZOzK-qkp}{dYbZi
z>M1hOL_>9@#fApkLcZ8vBuh?%syHp$idd-_MMZ6Ct}ZEE^hiY7Z;^?d(n?)PLs7j}
zsV-qqHPsb|V!fyvY1$l!X5Eqw^suVgu%aaH8K=!M9q3#Xi&|lr^RxzZrON?kT;k|j
zDe7uZqm{1KD)Mn%y4`xwGyjRWB``&Qal)1rcQ5{D10_F&2sc>S7%Do&{Uc)gkAM6l
zdM$j#J27G6ST)8kM@NL=*`|WdN(hicOl=N9XVE@8R>`1%Hob_+@wef~Bd@~e2uR~Y
z{^Aej%?y760{<3sNW<vSqqS}uJsGx1Yg)jYR($DYr=4~Ziw}Y5f;EG7MG}TEGZ;?~
zon&lZQOm(>!ST4Vpm_s7C%0G{k@S2AKE0v~qVmX#c(L16fTGolm4m<)P7~I$O2oV<
z9WDTV4eJL1kY2!|wul|FZgoMeb%I{&yU0Mb#8TRgV^N`qk^Y#ScdZ)Lg#L<6#|0I^
z2gPRqRRZ71Yenq7&W;*2%I0_o=p7KE%Z$`(F*YuTc3mLjk9QH;vV^cevOa;EO|&{<
zg`ieE0=j_Q6VN*fb<hWSTxCtupkIvFG#Ov`aq9CpRt_ZR|9<O?2Jcc_2um;bOvB+~
zHRs6GwOEyPMt?VCECOA0TcoT)T^+!JF0Mj1v^7`hl*hf|+^yH(CpZ1%%zvMWwNum{
zYsU=9WBL1Sy5H3gUwzkq?>hA2L(kvm{6YN&b&|WIzxd_tV_rPx>M5VxW9UlD^ttzO
z@2%=L!R&s0dabf-pP>UQOR&-?`~9_(AANS_C*C%6=%C)GTrhF?pxz(edC1FDs=4ny
zpVK|x^R;(PzxbA^U;ofj{ra|?ckSf=J~#7Idkh=Yp9iAi$31dT!*TS$6EmKBVb;<^
zd#|}t-~N5u(BHc5s95`pGiE<IcIJp7y_Xu&=pqWMCQh9-=BXJ|UTj%yWFHrzM~qw~
zlo;I2RUXTpwYI%6uD$%uw?3a5=CgX|?OXyS<6iRHBYk(J;$m@gnnW>%4%C{DZ7bvg
z<S?sGCq;?CS@*eUsCsD!3Kzwq=o+43^9k3izRPhrFdocFkE9jhH0X|)Y#gN<-HcW^
zkI@AiLNMBHC@I&a8+CiOO59_-yguHF)H-;toeJU8koXy-jVG9=9I=k=J%Jlq3F<Ir
z*IjpYi{hh5KR%5UhgzjJsJQEFL~)B^pSJq=#b`0taL<!b*I!}7T&4NZIoi=gY1hbh
ze66F@PDSp;$HmcQ+GvpJa`<)NrsC`D_95)LV8FrW6sf3FSTDD?dqBh>gXK$WH|`Az
zF;~Bpu9g<hi@@|a^-TG@)ab8XSf~KU=XXSpSPY>1qWDDYsNz+C$VMa^Z`MaUac#>%
z@)X%#uOoQ2B??Q}DTYu!{wLHhx?mrX7A;z=0c;S00D5g(yoCp9j^#7PRwaB<#ef&j
z2AAp(cA4;gO|VvsjrR;eWUV&}wxuFd3Fy8Y2hB#0c%|Sf*!&ti)k_#k?Df}5NG{Od
zc(OF%t2>%@d&Di#nMU2NP%0WaQ>9BXV6<HuEKIW2ayi^!J=k0|RL#?%*kF3wQ@4HS
z4<EYw$-70!%$U_SaS7J$^D;-i@yNrsKm3vhFWL7```XER)?R0Qc;gRO!8X0-J#2-?
z_ws*DJLWgzfA-mt%M9=Rl{3fp>FtrLEJcndPp^It-+S0bqpFcKsHDVkXHU56krz+-
z%*bVi^*-SH&o4W?_woBJ)wfR@47E~JI|>F3M7hoUXs)uQ)gD#+iy4ofJnPPfUs`>+
zKC3V9@3XXKmEY>gsoE8`d*uKCAOJ~3K~$@1RR5ogk)M6_<R4!+@zQUtFtA^*V}CdP
z?#Euz>tTa>#{#C=hE@fY5~>;vZp|)iKbj*mea7rlFPwPY-P2bX(dX%LGdEqc|H1DZ
zhL=ZQS}V<gaptU+bN@d1ihoZ-^bgo=*c;ZbUe%Q&OnTsnmrnh^NzaU%Ie1`i41Vu7
z4BGn*)hop%=iqX1bmrMvaxlrBb_oGfsVTX8T(HfCuo>=2{yFo6x9Z4&`L)corAlOS
zQ2FW+7iQVw76Pc1zq!j%#BJ$KJ>q5ViI{|<VX;Y=Q_*NszTJKvXUiC!wOl#yzyobu
zmi846u2Yc!_?GYnJ5sQmhVC~E0>O|<rqgHzo8;iMw<Oj=lqd?Zs1j=Bl+(Hr6isA>
zScqV#MK}_rO2_$8+JnD9<Lq<~gQb3xu-1)a=?F~Fp^{3uWA!Nf+2ZBYWr<8A4_TM*
zGb!X{62sIjrL3SLyu`KOPjw06d2!0Y4@tK-r+8eQ;?Y!uf}@q;o~IBy2a!!L%qR$Z
zUcv?(3%3?}V1GGBepslMm4<i{jf$KJt0-XxlN|IgUQR40qIc49Ef}v0#2}-Jez6Bu
zN_EOzSIiKAXQgd1pdr3tRf;EA5!>V=%?xm8MSraUq7@y7GxvG0bJat>7#!i65zeH#
zQcaf*Qf0ltW*YQV(~NX!<jaXBTAQu@DwA=8C6UQ^Ily!`#&{yfMOTrj#7gg?`U3im
zR{Z)BfENgGW6V6;B2UIgdn|YsoSmTdolRGSNv@Z*je9Jxnx}=G5tz5fJ>2JXT|VaW
zyPv(gPyasR+S^neti6Aq{$JSc3t!&h%Y*t3vW*oqvuDme`_8iwceOg{bSKIEJfhkq
z(z4u$K8No;Je0${U*BFQ|Mi6_(`K)@OlvSP(U*zp-~qjc4w`en4IS8P$UxC=RapbO
zmD6yvC(veoWVY&kS&ciPSIe{GXZ_-miSONEa7ElLFcgMiFPk?fqjnng2lVSTV(=Vi
zy)K~ab&+NpUMYPgHOG>MjOw&C>*_nEUwZ3Qj{MiJJK**)Fa5tiy|C6wefQaMNP#XG
z{EV5i&$w*Tg*Q#xeXD_+t~p@sRpz=q$gm8v|J~J7o|`c9b9)Z=GUVKArkwNlDI2XZ
zVBJ;!KYRB9r&(2{3%_!8qPxk^q;7H$BnTo3Gzfx%0Y*_l#BdEWbG?qvjPu=}jw2X8
z=gydQ4CCl1Tw#;}BZ2~wZ6qiXBqzzC>71+T{@-_XZw_x&S65Y6cUM=fLvw1Meb!!k
z?dP1c_p{eoXTP=SN^fgdS~j}==-}LEx_+bbx_kIX7iQU-8Uk^*81vjhG29LdF7Cr~
z&N;{HexombfOAA$tGhX|RU@>|l&iJ7pRE(ZX=ijd2fz}lXGdQeI2r{j<Ew?6rca-a
z$!R;krhF3^zF7WIUR!>5@d=_ed@9|5!^-jIg}K$tm^=B+0dC8n-Q{dal+x9lNE_@W
zI6*PXa4nZ>S`{uDBvzMSm09~VGu*>sHbPag%3*bS6I@(o5Zn+JGXqRP<cjmzyXCA%
zTUa~$1;JO<dS0-f$gy`AZf|L`Ut63~kQsPtp{hZZ#GiQ9lp+=~_TtXPdw2vy_=pb?
zVZw(Uq&C`O;$aKTrF9r>sjDhnZ5;s<3@;o)vJ^qxs@g)QhLpAxg6<T_>ZuS`OQ}c>
zs%j${XBDq%&_*0OYK*<9PB~NrZpFxQN(W*qVv#6##$nM+iQ7ABHzA3$aoC_?T^url
zT6^z9ENl>m1FR_e-a!=^pym*Rr?4yE5bK%E5M27eYEVl05q<$P>s!t()Z8?C@$BFJ
z`L|8Wo0`Wp_wc*cGYjogutu!?YDsI`M-KbQ$Bz71XKUx@XMO&xE6?I?w^HP-Pu_ah
zvv=*W`5v720|d*hs~-RO+V|Lg<yYq_LK&Z$({<vZ6FAgY8XU&d-r&^!#U_D<{{FtD
z_dL1+*FSK#&gom4=JvrXpPt)&?Vpy+ncuy`maPZx);W2VANrYjUDw~a?CE)3(>AN+
zZ@NjXx_OJb#qex3wQa$Y?%N+;j&L8gXU7&(TJL{i`6V|md2&wowYM)dqu77vj)$LG
ze%})-wwc;?=OfE^-L{RBn@M*(y!@62mRW{p|D8Ja*ujSaHDk3A8;-5k<W*@bS-i?`
z?_6q@vg@?AgLdl>AfyR@cwiZMv!{ojS$^1Fozpg3$(Y5r+<f1%37swbO>d`1@mn8U
z&Le)%E*)3gvShbu?XP=jt%E!EfY$5&wB(vQmcH)L3FZlbNkFLhg|im@&Fd#0dqCr(
zt6)ez`s@k_yy@_XFWIg3y5sGyoJiYE_bx@;qX}bVZ<z7$^Q>_H7#`gGwlUK7Y~~OU
z(C^udb8Z{sy7Ul~^iu>c<g-K#aiAcJ^$K55i(Aww-Zd|mt?+{k1uqP>&I%{MP*Hyi
zT%xf3R5xl)K?4o~tP4Ad2iZFZ42GN5S(|7C6jQ8om0xl(ngWRr;ehnDC5mPNCDck(
zG+u~!ISluwDFOeeE26uIbwaV;Sc8>J&|je!-0DI{Xdo#>2cz{)-z17pQ5C|YUA6d@
z(X>j0v>64DH4TOQQ6l1k6Bqa8R%DXq4ExRI>eCrO#hp;CqM9F)_K_K4zOD45Z{7}R
z1^Q@NC#?>d)v0Z0MLDdhjk+R7+7=H&u-nKf`-tSRVmfw3%u+2v&*N+uS@bxJ9A~T5
ztu9@}Bor)qLV0ACeK}hsYn9bIhw7<nPNeON0oAjixtbGc`9(ftihhTYV_%i2XV-SU
zGpjkpl8`UemE!9<VM^u-4yxX`G1jSJ;;-VlUKf*uHIuFIk^3z5&S&myYQr*XuV1&H
zy!}%PpIWlKwl+lwxRC8_?f>xdfB4wpHP-%x-+tlDE6$v^WL|Sib5Co}GmD>@^~kIs
z?!w;(h*#l3!HDcJ-HUEmJg%eVWqYg);i%8KioQ~!=9r&#=aPD$cI(4WF8k5d3(q=z
z)7_>udWD~w+x?+$T9>0~hb`NFdDG&HZdme>H%{4l(-!e0;&bLL?w-C?+plk4@{`{#
z`n$iFGGm*zC!Xv2_9Y7zFKgO*s*e<#?tOguHMezq^6gU}dAjSi2bV2h(R1$;UAI59
z{GeSsZn%5-H-0%^jJRm^lV3goasSEni~jxM1-oz8-qzZ5_N5Eoa>RtwkD2s>aaB9&
zEr|Bs|HO(<{y>aS^VCVr7hbpMu)RC~<_(ik#9#hy@m04knLMF+vrXFe-l1dKW-DhS
zf`YETbtwzaJbmiKaW%#Ne#!i;r?wujONTI?h(uqyyoZB-t0}GbJ+{Jp0C5lO!pVQ@
z1Iss`)Z#3sdwW|CYQEW|=Lhcqcg_Nnf?D$xG=JE9la?vtTb_EZHrtTj*qqQlO7|WF
zqi=L!wdN;rAEg(1SejMFm68}1wV?#bjv(XWYwuIJTU6~r0?<2QxMbv%G0e>z9|C$u
zKNfE0Xrq_faPW1YJ^IV5ZJ>pc2nVdUcp}9C3r7~J9?sxEl8oQ5MEz&Xm;pvyAGa1*
zjB0asidj-hurfUyx}t6zx>CL)MC*Ad6_F5U>{m#wJu2Ya8h;MMtBU<oE=XFSv!zG~
zqxFg-?)a`BM-$)7VN9)PY%2*eUcFXmC1a*xnn9<z9RGJXp8LEd)+TdxcXFTk)lAb%
zVc#OPyyS7$#fu1*giKYknAeb54ohNnk|n<+qKL_Jgo=6fBps8bA|ugTb3<lTpqlPS
ztg1iK)q>S@gOc9Dy#*SIuTh}4eD5NC*4taGPgPNN-R<KUwD+db*9h(+_xT#Di>KZj
zu%nMYIy9`Y$dCnsvJbg<KLyuJ+@mnZ`Lm0k75{;_zkZL`|I^HWI_Hn)eEIq>ujs0+
z+uGgL?RS?xbm)gf$aJ=KesR_p&%A0SYp)e=ZbI=NoA;Px-B%wf*Ss$*(EPLJLT+h#
za!%LPcPu?@ua4<k*DPO2=<9*+b#<jg?c~JH7S7|ncWl4!iRB;r-kk6JYQg{ij;S?0
zbx|x6Tm9mNwcxGKy=U`nHf{a={mVXe?wqS`U;L(5O#I5v=Hs}ZK4a>x+qUDlpZLL?
z|NEPTAA9Q*)4JL7yVd@YH%{JaYU>5pE;{@2g?Bx=;)s36O_|j4ng5zA;F~v^9bMf$
z^A~l$<CsaWI$#`^yzgrn@VZ0Bzx()2)cgI*7M%T?g@^9diO1K?d49(*|7_p9Xg&`8
z@zbV=`MLPU#Y{Tt#p4d#r9;5Fvmbcv<o$N;7~fuVncM8)bMPJ=U;o8|Tkc=>^1VB~
zYIx|06(_w+6i)M!Wj&p3&(D|49JFqESJYE08wlg~_dn6~t&119|DRjXb>X$GAA8G`
zhHp<7FY}Y1CTX=wWApWk8P2MsG55FhStT*%Ajk%f7zDhTEw&hz8b&64wX*^hyi$)9
zHX^55#BCf(lr8zAIN@_ZzHJ}s@!R3$z6<oqLKKAA3r>mBMcet~VHKY2f()z#8Ds5d
zopqM53SS3u$&*LKQD*_uzR?urg1B?E$9IR6pxx4b8jSlK`SxoD);2-1sr3fW-bS;5
z$%Q~GEtl?k(d@U<!iR^HduJkumfP58f>s9PIey1G-r*}uGdI+K`t<3-KQv11h&zQN
z@CxF}whe1oJ=kPyeW0~r0U!3-Jt>|hkBR5E+WYlc5#e|iJdb?}3}dG6h`0kh#l9!@
zacVr&!==B%zxq|_yHdZbBp$|6?gwsr-~rnlu;&(gV(tHS!@q%GT<5sIIplB7oOxz@
zYdhBdi7P)bchTIMuYJ`Lkcux}QTq{-m7KKSy81c!+dnOxx2Wfc7u5nemM!lQy8Y18
zD^TREr?#DVh|K4^r{!Hu;#Kz9iSMLIl*nrjopAou3m<>3OR&m4k1Y2R7$ZM;_s;9@
zTK3_SHo@8{+;4iv`%jp>?WV1d&0cZiJxf3Ey2)hZ?=r3J_=Cp(_qB@_Ebc~m+gh3h
zsBFJQ4LY-ej<%-R^V|gO^5qEZDYFM|@1tKlZtJ@8%m1)sVrTQ)j-F_ZdyeXN9y{q5
zzgu+WAD1HTEPQ_RsjGJvt<4WUwc^%?mY?vF@s@(A3DknidwzfKvKnz;-Xj=>@#8w0
z`PVPLaR~~p@<aFRJYeUJaqUe$LPgv!zh&{3Q(IoNlYyre+*IA7!WZT>EnL#`@Karz
zOlUrJ=7g8+HSVrQR{ZU^pZ($03qN#HZF#J+83Gh^C&&pssvgvQtf<OFB9I6S7XrNp
z2BVa%=nnzG6}(fzi}_^@Dh<TF2uoDUR`W+q8UotF_a>S}jF6ZUt~;*l_<?$Cpo%~M
z1;c9dW#S4mXU>eMZmXjRn-QRbwG-nGNB4awDP6k~^=m<cdd-@+_T_t@j+6_7k)|zV
z%03cKh3hV&v<aj8UImylNC-7C&9FG5s2*l0V$nc0sKP3Z5w9FAr6;#UVALQ`o(_|3
z^IlI!!{gacOXCSG8v2nO+9_}0bS5U%`UmgyJgvHy{`=cORWwlIF8XCk=akutW?N6@
zOV@vC>q%R`@1Xa6`j}6z=vi^zt>?Y>p!c42)LCL+zBKDgB4p++ncLE8QIzMsu!?Uv
zvG!^9(2&wwVuy1Vc3*YdlKp11Tg{Lv%fde~r|W^om*ePSRJytw!?LkeVeVpP2#XkT
zIB#LM5P9(}NVYXq{`^eMcfHHDHJ^%vDvsU1_QMS~-n&$p?dz)?s#<?5GK8o3i8<Y9
zG1=!s(retcxtl4ywi>(TyQ*WrjK^oM*kW?4bt>iXSPOvRu)pW=+S*U*t!}l(wlqEZ
zY!`z5n?Eiwg`i5QaqTUbI!XVN3C&BE_dM|Aa&s7QGCOb6W}>q1jCPnjx1byE-)~08
zmQz}|+v~FhYF1KhWx34FF>F-HrPIV<&cd!k_Zau`y~hcc-)o1qqxKzl-JMI{x3m^f
z1HD>#9|pCWku|TVw<~hOHm6?Lj=FU25`jcuWFQcIuWv4Wi;1m{45K!r6~V=ETwB=T
zcYlBMqaTS87w(J@^GO+ZgZ1)-12A~7L{J2K>EgX}NN4#R6O*tRts5E{7a}r?o~lf!
zjZ+Qz4mlS&{slXI>QkRmHEpQ8#pa~Ne(<<kcF?*&eDfCY_F<eNp|Gkd(}}>SK|u6c
z1h9>q7Wt;dmqH$Yy@#jO6N<PGqj_s4?%`XVJZ|##Q?`HLnFrcC+R=AE!=yiY|H1G7
z^wFR8!>GsXd<^@(JnPG!yy}y4mI%vkeZea4-A$7_C-1f8UhEESLu<e_cP!zDe(RBw
zFixFeXIssI-PAJyeMBW2b=KFPv8qfk?}bZiUgxQkTHbubL<_$VSLCU=T`2E!3u_(g
ziWN2PD-33QXY*zgYx;PgYx&(Z|97M(bReuUpYM3<wFZ5y)n7Fu3<|qw-ePjwBhS`;
zkKJdCH650ATHLekW;O0yqt2C05jkwoz*CQ$xc{ylm^V+q*z{Ocou3GA4$V7m+4hOk
zYQJ5_s!)5#?&I!#Y~inNTI{3SH@>1aCov7cycaI1HPa-gquuI|O}-PLFwWZByb#!K
zi?&5eYhp1gm^`6{tr1XDW*3``_kms0;+0~4ph3FF+VFK9V{T_$w|N$9W3KVp;2|NP
z`#|raPal$kp%>ys=57~+Z4`0e26G*{x{bMHa9LlM`h^q$C*0n0jACNbWoj8WyqI!c
zZQ&e%3g;QI-i>~KJgAQiy$N^kA|*%JQd}ag2nsGlr$p%#;Yi3gH}G0OjEy-MXT0fz
zO(wcvX%s8r_*EU;9kUn1!yl=4is?s#syy5n5r`WsZW~v&b^`?)*ccl#95(xy#CJOa
z+Xg-g>jSN7ADzH(n9!(0H{!YTLQECnWUNd|Vi+&enu&W@wB>{?58UR!tM9#<;}tKT
zy>Rx&fAewazdHD@PTuQe&ULK)%q!2Fv$z*)SH7odhbcQ8y4|7V2mWQMTajBjZb*AR
z^{Z}My2BQ22kcUFdat}uYm|3oQp%gg@FGihv^U@L=<?_0cW*wqh3ooPH!s?L^ERuP
zW4CdeBgZ1h1;hO4ss%6Gb2E;4A?csLaNf)J>3sD;<3+;!__{?0?_OKTg}?l=Tb7WV
zwt4G)k1yw|E>%j@fBRB}wM<6(CCu7E{jeD0@Zdc<e{sX&%YMJ)l?ROD|GxH)C4MXF
zFJH4V3Z?$ewpL1uy$w*KWn_H!dFP|cPkzP9wXSZuXK8#(ibF%DCaspTTLpy0X8`q|
zmoDIL-)n~&R(@+~&mG!1?@ddraBuy>+9EL1I$|1NO4Hd^^P@vx&+XeRD*xxFSNK#{
z_|2@lmhQHF2SQJYRdnd_Z=20pEwCfR=v4=fcj)Z|?>=j5hK!|6AK}X?Oi04RX&Xze
z&$g}=0=gg+Eg0Cavu6}-bvk_tX|rrL>ucTMs?MsRG4jnTR(G~Rc%weVdae2BJ-gqd
z(GYHI41nKVTG$DnnHX_Ppg8mmsKMTNTy1XyP;pqmcj#IKj4}&#mMCf3q@#$47qclZ
z)>S0mm!`#ePrw$Xgx?6Tu_BGBMK~JK^r+gx^8)C7pK5_TGJ<EUOM^gEZ60N5-LDNY
zf%6($M_6B7#ea=O)~5jTROedvQ)#uO{Y&<vBu;@M0EtTb*A|j$U!52M8&x4wwR4S@
z3_*bLQH4d^Ee+(k@c67zPmI)l=>l<IqwtUg^zEKOPpIlV&OV$i)(%-`wcwih7HCvC
zu5H}R=`+v%<JsKpa@_aNEPUn@SA0SY%qcHA<vTZjM_PnTqp!XGlCGt#<=CB%ozyYO
z0`LT?)%TNLzM^UFqHYv6WGr9k=Z*gQwVR-r{J~XDT$FJAE?6AbrHSYG{>N8*@yGM5
zs($C6mp%BzivRDFsd%pVomHf_R_-rP*yNMv&N=h{&K1ah>x0Xlo!7O)7B!-L#xavV
zf5F^;{Qex=*Lse#7j%E{bv2T`qO0a9HxsB8t{wJRAQE4f#)&tZ)bfKX78>#d+{+Z(
z6JBs<58So=$o)F~3X<>`O}OZWMaLaD?vOod9&y^{EnLa_c(PICdMHctU%X<%fBb3z
z8^pi}@1gB)PMWgi6dbyT^4>hrD9j!_d#~-=&bhqn?Z<Qq5Tf69;vo|(D@m1UiP)P3
zi+WCc>B`8WfBxZIT>P(2sC^`K<cr4n8P`vrH`fX_cm8?BoCQ4}e7(01O(N<4`TV)&
zGswCXFnwbC-Cr*}^9OTx*rL@>H3_3PTTpy8G@xd{DBE-pURZm3u3gc0#D0`DGn=#S
z5QtmIo}&m$9<GWEoWd*JoD}K`ZPh!I2guiWqN^M7OYQQdd3?RzH7_msqb~s#%|zU1
z&YWqv7;80R>Vjm9wFY(VwE~PFbqm}36)GPFSnbhog;v2N18pzC3sA16LvHVYi+<N4
zdI?v=sel)^<{%FlIb@>9jQZw>u`CcIGG5p^hQu{M63Gy{!+n0-amNYc@zb8j3g@~N
zW~jC1%zNMaUhfS=?)oy-XSLRiwnmM0X8b;AR5U90&;yZ8>!cg5PM=K<;XY4|gv^1M
zXDuV9`r_HGWtxW+dZ-83{AwGcNOcagIwkUL{oCeQAW&o+4&-uF?HO#k==Z346=s&p
z$Uc>jEW#mU@!UQohbvPpu1l=kN~gnOz_3)&>SrAWqDZaVOxotQCvUssu{(5jLfc)T
zg-aLCdTiDmPu=m|TfY0;qS}vgy&yscr}1BR(>9a0`Qq_k++srQCF20CM*%s8t)_C&
zZk>LRNWsURUE$|`UUk3(ao#+@!4d7_Uo-)$<`nmHs+`AGY&>G$&dn#+R#>+n<7r1t
zI&xnt_toM?s-*<7^G5SA<EAM78LynQ=k^`gwh)xvw{I5^|L14Ac&1N(<s>USMlI$H
z`^~U=dW{p4<gT{VqlzYtYuS3UR(d9kYu;x^VJMbyY~{08yLypzE^uwJ$fNfFhwn4)
z^jA(4mO}}eE{5kNyLGY+^XBZ|cX|hTzmc@_HtkP7*Da)Hn@!tL?R|FaaAOLQpT2dw
zwe4$u_f-hg8bud;o11(TD+uQmFB&I;Mb&Zy^piLJcx-m})QPQcKW36OBIA@Pfj19(
z?bz;+8LD2er0KyYS4^4M{I26B`P!9Mp*0UbwPM$49pEyfHj&tJYO61OpPS#a?~D!~
zv(i9pjBJKyFVo}OwE^DGV+5IO=D-oCJ*oBeTii~Fdl~QsuAxDaHaRgu_(~FutJhG=
zjLl8^)vtcln%{_fjIyiFJpVU}ILl+iQyV`(6PlkF8ZD`4EYGySA(1eC`cYiC-;0$4
z0se2RzM$0i+;fki?LF^#4~k#COo~I>#w8!G!j&TF&?l-ua%fiO5TACHf$0-i0tmgg
z=Qc8m+gtOI?;JHp(9v#doQqlaqqgjEvCy*m`YW55Kd?%UIR>>R0Dhj6Lb2>VS}-p2
z?J45tFtx=D#Bww^4V$B-qvg7-YzOGH>+ZYnwtfz5p%*#*H`7`lKJ##a;MTw7203dE
z=ABso5!-&j*P22{AAPj9L;vs(|G?Aim602)dULMP_`u41_43Ov_bUMwR&tl(n!O8#
zB&gkN>NN$8FFUJ}WYlgsRI3~LWdl=Lzhb6HRc76#J-?nNj|?38+?;CI;&%_$orN?5
z!K*M&B2;5iF^tvKx}JdmT3f!ox#jAIu71zY-gDPeceS?FI6AIaD^5X;KGxQdX;dZ9
zytVynCw%Qa2fimXGzzT#7$@ehF3~a=t?s8jwO(x*oRU3Wnvp=_#f94zEv2LuAimmS
zb;tSA<u$(BAcIo#+?y&0n2A%G>myD*VYuz%uozjZZdq-CmvQYD^QzH$RX5zdwdEAM
zoBXgV;W~0PF~VW3Q?}~+1P$Sm7bH{k^p>fWsch7Gv0%CUhW04vrG(~0T~R{q(Uzh>
zaZ9`lg)gmkiiM#tY?i|+w)F<B=ozgE1jumy{Ph^E?aX$qF9c97<ZM{(C>>x7;k`$3
zJkNsP=%8_qSU=VEqhx(SvYzTGI2dJZ_;GJo;1)qmy=`g$s-Ht7-WIP`5O=i%acn4}
z3U1V}M4BYAFo`6Z#S&XsB1Z_m!xB*w`AT6|<_zwu$XQ2w288A+XfpdbtXfivHz=v*
z7geD)PDQ5s95{Z($x8++cw%M{cH5WYrEIm*fBBbx@iqzfZ4hp-!C^mo`Z-mttIu>P
z>ul9R`3}7~@u~E?-u13HtO^(TQ%*UBq*i<Da_Xt4;_mN!=R4gtE_YQS`BJ=^ADMEz
z>iO(vKZ{(NH<~Tb;FV6yCyV7_2Fb5~{p%<`H^1M1Fi|W55^*8Ct)k7Z6PQSNJ>@->
zUn7oQs9Jlq;BciGZy{IBFYPUwU1e{#X3Ur|w3iY^&tMb4v^J}sVqk#zKg0$&u^eDU
z1ARpcdd&Oqoen?qs53uw@rNFt`*^eOKCSG6ulo;!?~AnyjQQKc{`Q^wzmqisk8Tgs
zvB{QIbXg7$^ctH~r}Znv3O9|oaAgbQY|x|gp*-ZJ3qO`dpu^u^$~s%Mq~VZeAFzgg
z#x%sKg>nw~5GZxkTe{MyDrK*AiZ$C-)>v$)%B(E*!apkL{UcY=oJr$X)?P|9vi3Rx
zLC1@Qgv*pk`LM)XsIxvURK<$g(VF0B_e`#?C#pRT;27{WSor}fPQi@{0XLPwZ&(6m
z+)=C3!}0Uhx4t#_;_7bTK&>Ao8xyPpur(e)d)znZZ!nc88tGVTJf7<Y+!}!D=MaMl
z5<_$K0yPv-OP!goq~;BhRflNRHag=lj8v-F++gqkAQ^;6pUN9D8xE`5S9hw<{K%}H
ziaV9_R*(PyAOJ~3K~&kR2D~$Tz`bRv)kzC7;SYZIyWcInM&W8*4SM=H)gamXu+Oq_
z`Fz#jr3${=k9j09(NF?`@aB^5&Dx8S1{;b2Xr<V>k9_1K;;+0`^82+u<lwOmV3ksr
zjr>=>@)f+?%cvK<=tc1suILN_hv%Ggj;kPo1Gzu<+;jcNfFN&|26HVnmQur#h^p=V
zFonws3UyUAt5?_R)sv4s)-!Q8)qz-a>@hVmu`F0sjT~Bfz{I`gRIgQW%08!{<Ny1z
z|9$UM_sYTAYx`B}wb$r7-cqM76FMjOJ*K}q?C;uI23ku)8-gG<WcGj9yGY%Zn(d8@
zb(JFIyCzd7tcA79DEUfO%QjTecvwFU`G!-WTxRdO8YIKCnvzwvg*}l!kbQ5318mMp
zBkScO9o1FYd1+nEsya{uF==$jcoh5Ti9DHuYUW_&2c>*H2%`wlunn*-LjvIu*lLCa
zuVNbxT`bh~J5|joEiFalkgvn=0vzg8trn#~fQEihQrv8?%F;?LLrBop=SUfC8KA<|
zDH&k#jYur8(%!JS3SIS7HNV=r2B7*mET>8$^i&Vk;!u96x>|4bRFMqf5G$oZbG2;b
z49h+YMop|ci8F~hIO(L5gziu-SVCyNWo^9Gad_2LR|&QEu`e=LZKhN5&p-csaY0<O
zo(``LtYsP8%R2NIUwp9~I%%e#KNT<ZvdA}xUU>4a(`NICVVu`obB!w0sJ$W+e)z*5
zG6TQFN6SK=gq=n25IEsO3~=bn;|nghKwy&SBNnRV<daX1-^#_IxwH}e>C>nC<^i2m
zBsRaQ!_ChOo>Zq)6v|hf@9(cyweaD()*FbMI`PC4eeSHdL;VRrG`WOdivrRXE%MC+
zYXKevlyG!b67q3<Vt$%epp=<8pLbZ`GYM;(a(-*t2`8KY3c}!0%Nb{!LCp8f0$POJ
z=y^EW1!NO;MM@-0Sf#x-UvIloz1tR7L8Oh(pk0@U89VmaWBv4)kfb2)VQufS!;+&>
zZW}j=E6d=jPN$655FW0swW_@Tv>M$=@jKSc^ZKiQ`N5uTa0>TVJlyK`Z`|vR|9#4T
zpZelcCv{G$5jR+MHTC#h(ubtAWeTlN(tg;Ehn@eX^FR8EkB)C!`4vuos#kL^2;yo^
z_MP3kh@9S;4TWnmeF;T=!<jW4R#<+6WK<eDdmGS@Qw~GEPxFdQ??gXUH=JrX3{|RY
z$nR|cfd-l0W{k3&=wW*|$~`Yrq@bTD$H1gX_7*ES`WFroogM##!9%*7S`UdT<6N8S
zw8Btld>yzFQ3u}R4_tmdNV;~$6~nN|U{}P)UfLzc6^wr0$A7(TCZpjN<1;$iynHu8
zRL3W2rJQnob>Hra>e+^NMMeGJGYv)hIgGopAAy0K8Wtr3sc3}AXm4!2?O9!ZNIF|B
z($8TzRT8VyPy|Y%NLF*CW2+h<y(;?!hBe3x`7oXf1k^88;fn_ybdY=dumAe51)9@|
z1Y`5@^`t`)+oH2DPU-6HEyjai*+QH%X3V(cl1o1R@sHaJ5F+N+XDxGy=-_;)v$Rgb
zvqr7Y3@m0EFB6JF4BPL>dJ^S$49TO#etb%rFPVk%J+1ci>!Q)+@EMEP7G#1(vw@w0
zXE56Ms@oy+FlIE`lAv0r78-134o;zEK3vwc4}bW>cr(DGije7ZAI<;wfB$!}I=-aj
z2LAGwzbrH*TCGpk1Wei|DDmcpc~*bo5jSVBXPzJQ3E`@KmT;3Zn3&f2dEMxc^*ja_
zV49_v7s)plQcz!{3D~)-<}%^C-ta{K#wwtd{+z+lWs%44$xwLanP<9cRRf}3tfeqm
zyR+U2(5y$TN)CG(?4k4c<BxaU!R4hvb#tZ6H^d#qG_s!_c-U<-TQKJYhzXKujE@!y
zp2Jet;C$hQ&h59=e&2rmw`cu%*5wage)D5DKfd7c`Ag@IYaeIT$i27R`^f1>&fIBc
z{NmEESeZ%^fsufKXV2E#5<Q4~?h50|JKpgQU7>!w44=`bmtMo6O;4?F)%9}=`4~>$
zTI552y{eVfDI1-XV`ZbdP$(x3B@`@@(jgq$Lf9Td<#gc;u<k^tA|MgPsS3%4;??|+
zH(==fb&EPpZl0*i-bR3YY|^oroWRGAz$>B`D?~Qr`!Smy8tRH`EoG|1qP%(-k|EqX
zKXOXz!YXQA2!6QleeZiNhpXV)dHL?EK3@S!8`r<~wXYd#eeP-03<Hd;2#PgExWphy
zi5%{((@r}Ls+4G~;oMp!78nj|Ikemu23KdJ>V|#b(2$vjiNMH20F~tD7C{lK)`-kT
zkv%xNg$9GmQ(5vo0{q;b5zG~{!OIaW{Zf!u-%opvL}gHgyW{letXlLKe(o0+j|F+E
zYNg}x`O=rZgl&t)_GPw-G@|Jl^b=I!gx2rfdFP$je^_FjdpuQGHg`MWkAC!{x7>1z
z{(-75eBlc||D{b`7V!DYzx+!bmrlT}o;^AT2D28)#_17aI@kF85@4rE1;+oek9~{{
zW(D3zV9)Aus29@V1fGO{@Pi)!iYJHzUg85E_<+x98@extW*XiSaCK7-fA*;2b+3CJ
z5-&nSyo#Pj$7Mx-b}|?m<|lmcV28PQbV{OA5`;|>6y-|M=@9blMCf&KzTy6#|MPzW
zje9;?6b&~wlPKm%Xp2uWs0x9ib6q4<XImGV*G8uc=gy%aW@5lx8*L3`8y~ZV)BPNB
zr5`opDE}5NTex_|;$>aSgv4~V)qY?#N|pGTew5^?L}24WAbP7lZPt~?xJAaW<jozw
zl#VZ6;f1rr)9X-X=pnCz^C~Se^`!VE8E0wJlhUJCl^^{nVH@WMj}(QvR6~os%#hTN
zlMD@%(_l}Y24dU*dRQymd2?zcFlMMoTNt2okybpuyA1=7SH+nmUv;JHk&x-E1?j?<
zKwhTmqLU)5NMzFQlpG@pYhw`QHlu;f^lP9l-XTdvWYVJ}mLs3>ip!*#k~pP}PKBhi
znikcC251nIPpm*11&bI-`bm1%|C!HxMkj0aYww7~eH!>F<f9^^7E~Z0br>7X?Bq}4
z*z=(nVXk@uEuWbI5||RkexFPs>qcVBfg6DR{yeU);mWSk^!(pGGoL@5sYGC8AmHZr
zz<NwPn0PQ(w1?WG#1X4+(QEZ%rkh-G&!A8i&koiu?TMH^eL6i(;ns5a0(1-Xh(*y^
z>0xwAs=!b^Tn$f3JdF0_MX(_ESUX{z15c+_P-u=mM+6QRiB)$<>K4T6V4}>>5W<|w
z;a2w+(S#f|*Dm$y<=A67;dxg?7lgP+Gfn2ba4<PX+~q{;`f0vX<b|Dl>s#Ma)`Wp(
znXJ{_=^h1z2Z_g$y_C>=fzfQx+so(GZfLth1+_@?^+IL>T46$^dxs=90oLwf={Ye-
zjtSkJ>LM0MS)0SyOW5eKMLPD>nyy%c$BczGhx#;gm<unwuqswnQuH*as>+X%^sq<B
z6x@bR+^O)ns{MqH2@^Xe7LAcvzy2?{1ByT<5`m2x0i9GoT~dr0I59^N|Et%shBQ5<
z;Ya7L<1^ZMo^^uJ+36O&W%kQ2`dr<#Aw)h&1DL)W=kw0dcw;Z0n0KAhh87Bqe7r<@
zRbu!hKMDe>Uyh;3IBMKNBE6PXow<Rq4Z{Xcxl$ZF%rg*bi#M&Pr-6zA)G|_E&n4qE
zvFePh@(q5*fO6pi0h*~TnSAQls#C^J&Cv>IIJ9wYc^zR1YBg$w%`Ad#%+{PRPXhr3
zIu0JSYlwUUr+kveEjrl`84Wk+#!$*ywi%^juvaOY4Y47{a&4gjSC9jr5R+pg>^mxM
zC-1D8L6!CRWO^^pw}f+(F*LHjw6U51pdYYQYUa$D_S}1#Ne|dvyH9@dlNJ+@qZKqb
zlzG%qN5xd6swdNlz(#?9$HATKIl=;UTzt2PY|ODek4|~sHH26+C*&g?^puSI-%L2@
zW1P~lgrsLb`cL^1`bkVzTF0fJQXx+`Dsourl0!g`B$Kecu0x+jr?gHF!xoaRH***^
z5b&^v+OWYXJ&zUzftHY?2zjl>rzwmMM0L)3*saOv8P}W9KwDJptVA^(s=P7KON(F;
z_oCNAf^{HH>5%ni7HkRSOtOWkp`@6{o`#KWkwcOht_!ZO)zLG{WQ@9O#K1+BT5Q^)
z7H6Y)%n%Gf4rP*z=4kj4M;xIOQ&9hGcH#Xbj|Tn4sxY;vVv>!ogsQMVs>uCtA+T1&
zJr;^_f$LwS)=jb$Oz#CvhRfL0lL(A#1foyGn7{bNFQUR?C`H#v<JLU5#v$W}A6UT-
zF-5|1d~}7&>iT(ld^6;wv!H4{rq0ppPQ2eK1ku}7{$Pwyup=)K<?nz0`+>nv%;Tc#
zrx|_cYw?y@kI4ox9+<ZQl4ipLACgjHKXlMOB(hkQFS^7v3X$XiBBq1Z^Lpz_zusRs
zCMS@Qi9PygL4>?SY}OHb;?+n-+zXep;YUHCkUmH<7!aV!cT|SS5VptZjq#jJ(#*hO
zRjs>6+(nfbu{iII3g|Vsw8fapX(S+3y#`}b3*nVM(sIg}#9`)}Dh6n>G#Vkm(U)GV
z@<Q1=ZnT@_7`!*#nrSrhc3!<+@*1&fJyt!e$nZnb>tl$qxjtMjr`ha9Lo_Pv5Bch?
z7x`3~6-XP=)yrm=QrcHpG@vrBf&q+$R%3YI``%~FE@N9&Tc#6%jRFC;Iy>FuX3m(L
znW~4{(;-Kf<>}Ku1lx1l$J60#lyVqt^f2mAf=?5Z>A|-rX$oy0nVuAB9t!<lxHISv
z4HT+HT@IyfB%P%e{gr7J?ZMP@>LTcrqvzD`=>|iC8VP&+)nbzw53+<VmqKm=X+=ot
z0O{9PWAmQnFi#Ev)saV+rAq^)i>cML>hwsQ-}*ZJp<dVf1f3N(hn`k1$IC$8#uz=4
zo<v%w<j__>)3^)6<g$vXdP437eV10NOFk%A4sEBVPoGXt*eO#FtV^VywK8F)Lk5dd
z#eQaJ9luGS6xGKlAnhvHBy@K)tI^QrkWL+S`N%a&<$f3u7>2;0`h&A-H|D-q9L8&r
zsx}S;-0OWBs%z7A>g#>B#k+$_>O=LXu|*O6tiu>`<S3#u#Z3hxT2#S4sJ4Jns|5JY
z#?XkcBA57mbf!ilOkE^~;CQO^%X&%gY6XlUseIKuK+F)i!Rw6HBhyH~aSO2)1Zn=D
zPq#h;^9&WL6TZn2{_Ssn8`0PQ+UwK#hA~~U2p@h46*XKb9({CayS8YEy?n0`M1%Mc
z3hfpXB97C<gBvOQH%52!1QC|Ha!u9{gM_Jqh)nOG5oI23yqPNX+5?b1yi@$^LRsjS
z$p&2fpZ@8e40ZGy_So;GEn#D)>4#bjb>IE&cO^vMY8ODXLae7@$&|(fL(|yr3WnJR
zB-~nY0<5CYU}hYJt+^I#`?=Pv@~T9bjmdy3h`8Is)(v2oG};*gqZUeVdP{9ETh8iq
z7GN`x2#i<++`w!zqc+FZ+qlm?$evT5>v*)Kbx@|$9w>ZQ_fjZeyk}F^b73AUqJtkD
zQzY!=WIW?&pPcW1|NF#f@K%s(zyux>br=thy+=%DKt#VzCQfk{cqBdVL36zj@Hh)N
zAt|5V!IK`P^aGp-+yU0?Bdl*>YCP`@&~Kl2-g$Vo#})zA8;fbtH_A6f(Z5l`V4b{v
z)wJKCviiWF+ImGV9^nvmNe744QFDvv<n_<OTJ*-{<9?Q~M|DvIL|)=SRTrv8F99^F
zbRD3uk<@l(_})N`7&i6~QhmF82x}1wqsJ4Z=hdPM#0Fj)){<cZn|T=^pc_=3_m-Rs
zG`lD<1(FudPLDt%bt&$3feD7{Xd|WxWb~OfgN3xsg`-e+C#|A-Uhakyfwl6u52qoi
zD-qb35zwpZOtDXdQYUM*fe50|rqvNOJsOJ1EiDoT1s6JLgg{|+lzi=mKm=VUtBcf8
z3M$px5;OMTqedg+O7w{szj0JW9MbqPPK-DjsPv?WvJp-Zn<0v0+mOH>J+-k=5q-Tu
z%ST{%r-}?hXff)qcFi&5$hVFd9&8*c^Nn($qG{UBJZBA@3K~aIWW$D0&6{rBJ%!>&
zac%}j5y~wt<}AcSkAxX)(*$EAlZ@p?P})pdj25cEiQo3Nx8c_8G~^JV!Dwo*RLZ;p
zAli-)n1`s;7-pa~fiXB46pbQkkLf|!Pexg&LL<f`lbjg!fn)shg4p0x8rzW25CbYY
z;-c_ovDsK96Anrlo8#(4DfX*cPBpVZVIC#|8w&!S+&8@84d%>xDz`NMu`kpmgra%S
zeCgrMo*qM#pr_THuU)3-9uO0I&%P%VCG`#pQ}?{!h`KllGjrcQV#ZtsIJe$UFRFJU
zfFOEQ10OV3$Tb&(QXXNaJcCZ@LUng0{JKZ)@toqP(Dms<yx9}CrfOmyM$f6qIWp>-
zR4*9yFkJgg4LzLVCggtANYAVv3#)VyW+~*k$t_f(Yt;n3gbtie6xLTmANtUT)S|Ax
z|NFlek?+@$^hiuaqrH7q+^-Sq;e$_Wov;(9tf&LJSh<pIv@y?`B>Hf!4c-tF6<x80
zM0ccnk8T98FrkNwM=7Ri6#s~{zELfz1_k$oB4l)H=34wXygc&t_JqCrg#i7|vKd6G
z<BY)I`HZMCzNo^RUUm{wV|@QZr)ib0SYsIsd@_1|1tFvD>8F6+I@*%BuOnbn?bt#<
zhl~HAxdsWN(To{0bh3sb-Mv$`0!PE4eo#kAQs2kRt2flw6V_MiVdYE5Yey_!SzWeF
zl#%{WrJx=>sHaSal*kcN?u9R5Vq88VH;hk4CWm30K3ZKyQv<EyHfatXtuVkCL5(pw
zdIN^R$yZ-tWNC;5Rrb^xS-nSAmXWI9Ix^bDSZg>$>-Fa5A)!GjMrwGpJq9640LUam
zJ7*r6ZUUeotcqIfX{H}1RuIeA3eA)mlMo490W!!0vz=8|PRKYLImLd)FqpOgQ$7Ps
z41mTv<xNOG#GU<$8@7${jA8uQXP<4bH(3&h&&vhLDqQ4M#DHjfu^|(Qz{Z7uJJ~&K
zQtkbc=Ne^qw<F@=JMiEmg682m1k-8U*8>~z;yMuNc-Rqc+>!5=7>emhN3w%edoyM>
zuJ1Av_I&AxJl#4I4h6G<z)I*KW-rsB_jUAp=%m%|^&k%gPeDAt;(6rzXccKT0g#Rd
z&|Z&Z;$f{7WE6`<#J!?q2^oyjt2})O3T{He3{@!N6t{w2noC00Wa6RraFf%<Bt)N#
zz6*=hMrq*CU=kv26W?gggV*vhXgJ;s5dD=FmDUBq6q@P?h1VSs(|a%`(Bl;%Lz^Cz
zoh;`*a3MJ9*+Y`4YUC&hC|H7{hkme_48#>-r;A8NhYu(+x-V*72(z+q)$7FcwB|w_
zBJeSY=oLeijvYG>ReCnHvzb3de+wnr!jdqx*7)3p4}m1^!-r*R8XE{i*Wb`q-4g<5
zcraG+Oo$udt}x`FbR?t0jUo*l8FJ}tj0(mohe~0Y2ErKjl+u%;n9-Alk|+|YlyxXw
z4oONIIJs>MmWmjVXb9$77hEYUU%xMGCcI5@iDBx@&?)o%n}={hYm2c#K#n$&2^-3u
zc?NQ)=y#Se?ALuq(=^J<TwS>VAkZiULzw+G!X_|q!`ivEboxvZmoKwgqjYTQq9+<2
z8l*J`dR9Y&o}rOWwrLJYr5skPHYTCzhW`lkB#AWe@f)xWW)6$6get0sk;BMnIANpv
zcfRu--hFT6jhb|t4;UIX*;#WKp*sd(KDI!qL0cXs0vihg9wm>1$J5PhYcLz__N`7s
zCV7z|B@+eofbh=B5mDoj_u4HOupGSER)m#x%0pdpd}nE@;Ls@~GI(ShdVZ^t1XxSC
z6=u*%GGV+um%N_M2QZ=5+fD)=*wCXDR;7$nk)uc)@{!vbPAMoBE;98AVT0OrM||)_
zSXW>wVk<d%A#kZWdZ(&+f>=xdLef%KK9|ykI@Gb-Q?8%kVwdJJ*LQ`aeJBB1H8YBs
zA=rwf-VaAFhml}pxvZ>GkrtVE*+L*tbpyoP2ATR^d-ES#$k>NiIn2Z`BJhI2X&CjU
zszhM4B2aqpY6E5Jg7t&KMKDFa91CXgwdlCf=!kK|^Uyd0Rbi0&J5d(OI%R2a&K1SU
z>yi1QL>yw(2(dJ_7v3Pkwo-NPLsclw2Fw+SG@_u<Mk(&(C`gqqRqsrar;2;5KKAV@
zpKS=bOd;dgwwJ#Mw|BT)YhEk!FsWBT3X1^}TESF7uHIAQ`dTM2##;iO9-X^sj3#*D
zTP-48S`kf93fDK3DrI0}n|BWU)~ahL7-bt8E>oj4+z_ZbW(4Dhs!@l9A@3T6Hiyy%
zLa%yxywoe4#wn8Y&|qIA*#La<QOe$_*b|FQ+ciP$B-Ji-hmT5ZkFt=L1|Tr$hjVDo
zeIl@tBH-qC+cUmA1=VylGx8hcJzu_o!IhCnAF=RvAmT-)s;Zg}wQ_7~cWA4c(Qp_t
zgyW0Jdbt<ubkV-0;U*U+qpR_*z@tiHb$X(3QCqFrsghsP^ptcdD^c>LbsA`QoUQKl
zHhzD~r%k$6y%YZn@3_7tDs4~_hgEy}Y(l9w5=vEzG}vFN=u?%mwrX^}V|bn0_WvE*
zjg!W<*_aI)+h~l&wvDE-Z8vsfG-jj5w)x!IXYYOX*}wnuDp#(x?sZSkImVdd`#I;L
zQ{e*iibWmpR3RR)(L+>xXrv+f;lTFF$C7*ddKAW9hpm51|9BjUJNofnnpuA+y%se<
z2s^6IHDbOun1Mx-tnxHAuP@?Lm8hFt+t<D@J0YQPcLzSM9W1ZhK#>&C8XGnQ!8!UH
z!+YFHOXEr2Ie;Z;s%*!YQ@TK}7%kz>H~hJWtkUt+4N=oOp?5W@>gj}^3C*;})M#m4
zhvwstV3&zt9zbMGZ>Fr~=HPSYq=JyAPW1Rlq<EXqC)n13KJKC1B-7GBf5Zy?=8s5n
zX-V_C5oII0&8vnI+0y9LE{e)JY+RyO`^phX2pw|UJJ7tJ)-BbVh`0S$`f}W5t)fNo
zK>T8sEqQmd^koOrx?)j@jC+i@C{6M(>o_Cyb8vsZV{Dq0Z0=U!=ViVIZr!IoGh{Uc
ztjr^s80t>6;ym4OCABqf$&8(sYY)g+wZSOcZt_ph%8Zp0T#OvhdLot>{dU=1qp#{K
z^;M2go>s9g8>t#rc1rZjs6!FrBc7{Fn$wWY;%}E!omHJKaAij=C^Za_O>&RW?BDAW
z+R}RORmH&hVOwQPtf>+7Ila^ZThiUPwA4`LyMfk82-e&B8DVOHw+*uwAKM%p{W03a
zgMCPdA!^mYPrLeQZm*n;lLPskVR&ucwK_H6=Rnd#r7ou7IF*(nyd4~%K$QhgyAv}w
z(S3Qq{f7NB#M#3@^N9fssRR*RUJ)u*$T?2(N+%)T2>~MT%d;juY6iQYJERr6cmy6-
zkYd?jk>r7}al4YZHO4N{>+&u?<?`~A-#GR@X9tvkxcL1A>@PEs^X*HEX=>cwGN^uR
zNHGVC_aTkGpHLaCM816gsj<(5Cy(?S#V`H>@;LTfH(B_c+w*l5Bm3uv+XF?T^;3Ci
z_AICit1o*Ah)X6yl6B4DDe*hmlcgMap;%a3Mx^D=J(>px`ZvABEaDb);9Zb14d<hF
zk<?;c(iqd=-PuQzZ24JeWP%<>HsFYe=e0e8v}ZaRi1i@pwry0zZKW?*PqXz{_`5<R
zOzx;>dv3;#Qg{tv1O{0~HtKi}B|77qkX8a<ZWf~?)fckU$<{s`A5gKmz|^r=28OKH
z_jTatMLM|*Ge~?-<B=O^DiZ3bbmTejk+wJ8wgO0{une(qw;ayn5%?5DF^I*X+?;6c
zEYWkwkYInwfSbvSDU)^ooIt^(A&2I64mVz4)IlIJfsd#E`cv|&f=3C%6%_-t%C~IU
zNW{ka$;mC^a+*|WA-H{HaADZ;WWdED3%*@OYrF+9a{&&Go2%e-zNF#A4R6go`6Y$?
zz2RrVZ}CNhN<~UMKZC8sSkU|kJkk-tk7ltkFbvp-i|RmMN#tcwI8^jMva?SAEv*j@
z$im}+4E+$z7JxX@H*S&h4=PxUZKfjpz>c&nVM2!9IGca?^RbrkGwi(Foc5!gYHlh{
zi2V%7`;Y?39|kHSR5gu3$)Z$%%8nJ)l0|NNV4l@?XO{4p&uYWG<q9u6)K!@@sb$Wp
zhlnaa#i@&OB~`?cK(%0akGvX$f{h2~k34>3K4es25~JNSCR9+@^j*^zk<{TQ)?VN_
zs(vPs?FuBm^E#~qw5k8Z_n||mB1LU;y#uN+fehwZ115$msU>g${sCjTvhnQT!b7@}
z!IYl8+{;cqXXftkfDWJg-g0q)ACCnkqwBX#j0>0-&Cuvy1O+0L!LH%9cW8b>L|r~~
zNX96TP!ugZx~(lwe&!V)D++?YGe*Z$7R38;I@6QS2W42!ge_ivr?k`?u}tdw0~3Hv
z3NUvFNwIj+xUFD9)BEesDh#HR!~1E#x|inrl)sddq#pkPw$)D{1;DU*Phh5(bC6(n
ziTW;Sy|_B1hdsVC%{8PbF3~vIVtyBxOAA#dOMfueyWB+pLY;d64=t`WjJgh4q5@Wb
zR7h0A&S#G~95DYEda2FXsArxsGK@dDMUlb)i6N#ZB2`w?7H0jhrlJwIE?2=91k1xJ
zFPnZb@XtzLhXD+N>oDiJe?T+-7!U}keotIZp<SQ<#;*T|B`>P)^+quF%FS^4FW~Dx
za0U@k{q2}=<QhjzU?<@K16$r4Q4Xt#>Rs1l?D++q+R%+5{WsaigtzzMue$*HR&THm
zE4^2%XL;1FnF<=CORdu8(ouZ{(dFl@SiQR1+VE%nh$7FwzzIwosDm*|13OORs#O?Z
z>W>?J5fz)C;E`HXTl&8kFy)?ld&79iVGo=|#mdS-{DD@)rUC{xbhz>`IhY?vOS9P|
z32hVQJbof@7y$UtgL=sCF`1P9#E*3Ci4z&gNZekJ%^?baQ9agv9*O^sj8z+Zbpn?E
zqk!r9Z+K)L2CxX{T@RbI&cT9_ETP^y<+>x#UdMr){JiE5W*#j38zN=-1{h3bmI{00
zk2bkDIeq(a9jpH8s2cV8u+z^H9UfGQ>_MS#A8Ga)!Ajr;2zUI|+yLRQ*UMNpsosK&
z#Mg`D<Zz7zY5!W48tFJd0bjFV&SRgFWY91g;z*71U8%3hamLbAjHTuibKd8<Un)Pt
z|ERqr1cxGoJ#j<SRZqbpu<LCIoYdKvmZ3MeQ|W}GrvL$B?&7*_)t76%SB$8a*3QRP
z`v$Ubn&HnpN4v_*L}<i%EO|u3-hf<3hS$v^fP2$3HQj~1wtl)h7qh08z6hhtY<f5-
z1AHuNZwTl&)zEG98hM6?ZAyXrKkncJ!D9iayJ!Fw*T3p<TA`p)R|b_o(4HOlrd$69
zoFrQgAY86e(xs%pTtx}WPp$4YeJ!)Z-6%x*F;EUOUaz8Lb$ooRkm$=+D~%wQ_;J)A
z6hnmtaLMfAu$o8)B4liZ1<7oMG*suLhll5e)2Ky<hm-fBI~K1`%e|oueI5W6L(h5O
zK2f+@+s26A%LSmUV`N&^$86gJh*l4102x)?kXSOQY_QanD2bv4#%7QA<32V>)c_Z+
z^Vr(94r%<YHUQzPeE3wP>F68H{y%v*wr|D9d!w*JMRoZ@!teadXa%G*jb^FJ*HMu6
z!`@MDd{=K(iV=9>D$uh2K08yQ1PcS7!spR&<uJ}Sz}gN38c{b>yssuDzO7i*jY)1a
zrB47D4`cOrfm+?r1g;>+s?KTF4c(;?4b)17qiLK#-V`^D3Vyrua1Qw{b-uurJb+FZ
z55G6CX0pF#c@tM@2Z~Mz2-;S89a}QG4M~T-MHAl|;|+E$%ekW5-u-j?>noss9%AaV
ziMQ6Zv^$<Pz5}Mg^!UaKSL=Mh*nB;xdKtEe*?W9LlLN}QJ6F?kYU%NS1o2-zM}&$^
z^ftR--WZIus9nKj1ZIG4%tCyX=QeGw5Fq;x6M{blsNnCu;oR{7HlHg84IKoeS|-2O
z!|NU4>t=QUQp@8>E9_DA4<xva@56>?uQ#@@9F}u*+S-o8T7d5RW{d#A^=l7S2hlFT
zap3w+b>Z_o@1p~t2oQ)a-wK-l^%IE$KpDSCAOwhat^y6R@#Ix*W0p*={HKSNttS9|
zqW40<g4Iu!V{r?B1x{k9X`fHVcqf3eyfGYdXVzYB8c&;d39NJlBVa*llG=|x%P5wN
znzc1J6c}yYJwx-Kfx;g>0nm@^6y~c0t=@D{yCP$NdKgC`{tICD6`>=F(Y@_NvH#hf
znBF)-$Z(bDpCBGyN@f7mVrJEQJaK1*UjVZsEDOkFta>ifd!{*wAis2b9q@S?c!M*J
zd!0DITmjV19>kdJQ-E$3dI!MEJ+{B8dGD}hb#IPy@8WA`!9PuiAY*jo5}i~I0zFFk
zB8oo(sH8doH*QdWBm-neV<oWkw63(Zr=2&V;2TrSjPw#9=(z%OS0W<}qo1yu>F4#^
zNZ9x?aR@LnL-REWyzdOO*Gw>lekE$zn2+Bz9f$>(!|HkuktZ<;vfeHj#k@i4--w=H
zTnvFU3y3lq8g+&&`#bqQPC)o_YwRCX-2h==xyuINP@>t$5Gd314GSCV0mv_a@>p=m
zW+DF~Iz9=<Gf-bdN*)(3P7ZPJVd|nU-fMtdI~Q}!8yHi26MsrrPc$*FL3`#?+_^>(
zEXc`-SM)wqS${QTRwzez19fkm4}kT+2Y{Y~%)jS5ZoXedcok`Y@B|@TLahU+64VT|
z@>CipYF_IlHr?0FXx>lD+(W=IUQ=hG;lOHg5GJpxQmcx@k8iL=kSIN~Q_lkcLA)xx
zga|wth+{ei&Y@71!Yp88nxNPGW1e?)p}Kl!zjsYZctg9<fDKYrHArGuY2}Ce+S}OE
z)&dF<lmT}aKD<Hm7si_tfF}Pa0Dp)QiI9@Wv!<#I(jai(%Xz)-e3`dtJvPa}Oi0~r
zl}g<w3tJrNt(L`bogM>~H|>|_ce^kKyK{*(qQg<!*@{lKpGAegDR)*l;#_ql9k_p^
z9Ex`zp3<=<h&AOoDcePjME+3Jrd7X-i}4h_f;XrO1<(^&(>nTI=fiapQ9*?xjbbK~
ziT|9l=x=itQVot0%!|}F=b;PzE9PaC;H6K5a$H#3Mc(BX((~jp5eA1Mt_r)ovyTqa
zyiNd{_62C8%j<bP#=UJom%KyJ+3r|agNnFB)nghQ*ASl9EL77hmO=y%)YOPDEIwLs
z`M3Y+82KAOVuZ0XeRH{}G6DXs`T6G8BBmj~Rl(R(caG-K52zFh%B9fm%?+s(>9gK4
z@<PN&W}Gilh5krmBvvG*#<g|bnZ*pZ|D9bE0zl~>2PnrWz@lKXa}e8DVQ3j>yH?=B
z;9ziWhbWe4F7U?0=G>YT)VIF*ERoO~n#bzn8F<KOKDFrE(NbQ-Ijly6?V=_r9c&m5
z1beN88Kfa(4;t#opjqMXUZD>eGAn(ImnbhF)dN&g<~eEQOSm52MA(PXlrrvIRn88}
zXeo$8c}K*CzIN}&*=8+hT8sN4y3s9{fspBnUD1jqTbGmX8!c7~A&~|hL8mcdnvncO
z@RfvsiWaQg<o{Bx$bwo-Jds8?(yNN<7>IY=Z$|G=;Ha_Ai}vL6GX8qbE1JH@|LHnF
z>b#wLSc`l*F{5Vc9ss~fXGMjlbO$iorw%Q^L`Y#(GmNhEu)v(VbUy05*n@IV*{i6G
z^}1727z~jdc?l1f8a4zfUFA(~7>|;SGNb2+%Jc6$XPkP5fNH-0OW5LQ3M=>Kqz&zm
zHo(7-N&$!2L=Cm=#u?50p=;cE!vbEB)B*7I#^grT_tc~!0+GW4T;_Ty62F!IN^bqf
zHh>Qx4hivfsWV`*Cxalc*tQ_FFwRK=b*yA!&EcsZCa2%7<95hJ!F=Ux-<NHwl@mU<
z-^%1*)7$`V<gC3dRRE8r4ygo##e0xAgs3&S-k;@Ij`x`DLRGHOWlu?2TD&y%oemWe
zxj~Fl+sX|`<+Ei~`_0)8WVH-MVw6uV3U_nG=li9#R}McSG_aa~F1^v`0yB87XOv(`
zPrS)gnD{o2n-3}=&E4<`^Glx#7`;l^8Ms$ukv${JoJyxXzrv0D&{CEt&^*sU_8R2j
zR#w0^VLS53TOx`L`D^rbVN0w-cDiu&*9`7Zf<2S^jyz1%`DE3Mi^r{hNetmQ!U0qx
z)MB+#!L_2<py=Qr*AV&X-^uP)P)0sJOaOANC3iP7rsefHZH3Ury}t&}qe>KwtA9`Q
zlSaSThbsv;-(kkjz-<z1SZ65Oqgb-^1!w;xnb$Z>Q`U7TG9(e|)HL*yH00o(OH?3b
zB@qtJml3a}zbexVjHCtyA2mpb*JIC1Rn5B>X9vRifA2@~V%eQ`^)yNQK!5pyP*{iv
zs)dL*eGNFm#7QX#RT?Z4Nr^j=7%hPcQeX;C*g#w=4N(A+8cPaNza%m@SWpPd1&rpd
zEkd!9gd~ef1_wjcRFi$G_!-P)X<MkEi<>a|k3~}O4PfU-0yxA|QP<CQ9BuVmEEy8f
zo=HIDs<1?ldS$Zp7C)r?WyMA6Ks+FEyl-_i9(m{Ijk=D8i9b~(nTgK^cIOUpkI-U_
z`6s<j5~3dsnDzrxvp*Y<puwmp9x^}O{_d(R1dk`#ci>^ub}h{Ob2KVM0(Ompr(K=-
zAq1$waz|g}+B?~Y4h|G(_j9MCrM;orzgh-}CJ-4d4-5wVG(lno<6o|4iKOpncH|nx
zh}3lgGcvryD8H9`Sdus`_?h^p#e={Klp+LYLYcD=rE4Db_TYflsPtaMro0ieLA}Fd
zP^wn{?^D1W00-ost8{JP{O|04ORvon1>VXzJd!B>w~g>ei6YtG?6&W;na8sKv0VPF
z`vO3azGU5*{l@Icrn*Gj=}skJU-}q4O7*K%AGM4^xan5+e9)@c%PGEBDhjdTngNYl
zY}Me@k-ezYz<0Pz%w3Ihp>Au|lF;nR{MV8(kUpCpZ^o3JPBUgcXwF4vi1wULWBQm7
zHo980MWx=ZRm$DIUDnT*AMxd5;77!VM{0KCA&V%)hY{kG*?q<$_rv`RC3JB^Cor%7
z5am;C<oUaP<mQk;<u=eP%PU+b)Yr{Y7P~hn&zPD7EP)bm6w?$ujGnUAp_fqLl06D2
zR|{ot4JI+f$k^6c6ci|nm<WWlV{mM-;d2xpyjsCjDHPJk%ie0V31$DT?rsbIfkL1h
zmz$HN2o$t0BzCWY!`^)tS;#F*464jc{stvlYGh3NdyeL{;FMQl1!g&%C=bG3-A(D2
zEU8?p(Cd<%aYdEy&qaBzi|<bA5?{VuIW)*!N;w@IC}mUO4{ERw3$TqmR^_Urh0VfN
zF?8lM{qU2nthAaW5-MCe7z`V20MKwV!`K~_qzV`Z6`TNs<i88wAAO|HN9tRwHPbyl
zSTCE#5jD+MD!0**$ta?l^w&WD({8+q5#(C=Wu;|RBleo>#_>Pn;>{T1-~zM0KcvKa
z!p#T$Yn1*ujk|DB%|_0W*$orG{{0D*1aRbn>Vz==d&d8H5Un<Wuz!EcZj^xbe;>)V
zdw+{)Bai#%SO4(`5hm2u7Ei$2Q^W>{Q~di$fKGTbtx7spSWo$XijVsSj0CWTO#k`>
zJM7Il5~fCOE%iSmTM`2Ijjs$M`G4L+iVB$5r01pivj2L&;NPyQKaIz~jAgPnW0_3%
zTRru^UT!7`tVrNQZpr`Zi%3xjaVopUCQmgNB^L%}0kqSUe?6-YPQ--f;|r@}y9y$2
z{Ow;Q=^7NvwuULJ*t5`Vt8cxDDC@5BNY&I#9f+~Cd5_exvLdTBO@GVySXG8;)97{x
z2u>{X2(Q5*fHu>`|Enl~$E6$fR(}?dxH@`FqEBzFZf$NZ!5p2Mo|#*!->0ZxZLr~e
z63ckg`l-c4=qM_zy&vM%NqV&#(&epBBdjlc^$Nw}jQC%-Oe6sWl*Dp?ia=xbW3Wde
zgT@k&>Q>RVseMY@0_Y7H_VsZx@ShGt67stZ!$QYYk)UsNY-K-s*|1}EXb5`A6@D*B
zxd^8JDZX=X#fA<z2mjUL=tN9h8wB0VLUXqnlQ;XU94p42BjJ^}^SaedyYroT7eJoo
z9iaMR&Hnv*eT66XC{?<nql#w?o}KY5NCxG+!M#g%5FIqERAwk<)IRwi2h{&es(KP8
z^^NGfdHfx0)|k6|JNkD#?;m=;n_mPLHg?+Q-lZ@;xt@G?q2o52M*?L{460Gv8Cs;h
z+Xp&e(L&0yeUL_2?%RbE;gga>>n`2ViIwG&d09jB4OY`OypWHH?rq&=%b;z?$HSek
zS{CmDn9S;Rv#iwqTE73B5b_fG)xFP<)x={Q<x4veDsd+sM-v>M4M#TXS~2O5#Sd$o
z_W{8t&%O%j9io$rvFSz|-rupXjB90Izf9O6c%4sWW{qlIm8B)EZ*TIZnw-opF6z>1
zaX@&z<euoQHf_~vVG3MpH#Yy^NNd1ve{E7DWHXq$3)iNO{XY%jNX#U<5lxqO*rD>h
z&*HFVII?g4c{9?sl6QyD&7{xNhwJv>S7N*CZuE~Eg2pd)^G+@d?K?LGJ`Ph`oCF-i
z!V5|Cr}s<ayRYlvkZIOa7gKyZNiOU<_S1@OKIgRr3areu>K(betw{`bs|E1Ri-pe<
z?L33aUv8&-xP4aN)wQm@rhYuO9$Jx@*GZ}P6N3BaF0~ibr62Yv6(0Frs~`?Kqes0G
zRYR|~e77I?HSOiP&BTg#{j;AkyzYB|Y<u_N-|yBg4`eyk^7|Sq8kaktly-mKPsQvW
z3*;Hy9$S20J3qU4eY*As@;@JY&6RGKbKal&Y&2Jn>oDC8Yb9}PzFr@Xk2~tPu55S}
zxp*GYE4eJSsH`3%GrSHs?09eH-b<X$H;-RMql^Gf%m0~fOq!_Jban#^md2X+5fe#k
zE8iUrO&wN7Rxgj9P5_aZhv`GC2pa+WPF!oBqeYDQ<p$$JS*<mv<$OSJX2xrG43K==
z>=mK#+zD~;Id2tfZR=<dZ>37TX`o1X9NSy(v9&a>E#E3b#`W1;8EI+p@NZ_+nlw^n
zaxxsLAJbYo)T=t_lpa{itRM1<sX|F%)vS_jp#9gPMFoS9*fbwnzmPmPx6?|Xa~`vn
zRi~)nprodT4CS*&ka6lgo6py1ndCFwK9Z@m(0*7SZOv)fJ?J*B=6IXE0_34~OwU<&
zwma;%#vEpT$k_(uXMPb@OOILFXiiK|PfyJ(FRm`n%^fi{09s8eF7A)teKa3RE_dF4
zU*oED=Vrad<8<g$LA(Fo!wcZ>nf;?^U4pBvtsV_4_1A!6j*H_A$qKJ#npp8^_2*wU
z(-wq9b3MyxVr`C$I;-_7J8hR^V@{1tUvT>%r>xkU`{d~8wG^grCX{G-mQsskia&Dc
zJzgZdsI0Zk#iZUX33y&?+3K>rPOUM%jL}OM%2=&>X+APTKX5sDLN(0`j?({6Yw6dM
zGLdck>|9-`f5xmhb)U@-yH>y9R}il1>$<C)Sq!Z%5gTFS1XOeCjNRnuJ=;$dvKA(5
zzl4Q#N!7$w#NA@qc-X9Y&+RLndX*nGge0!qtk>e5Ry?=fuYUINxG=UH>Xhe*`S-3r
z8Qi5QznV(gjvCE_QN{h!y4C6zM`hl9oM}t-6Rz|rs*w_}&+Av(%;c5t$0nGTRbj_%
z)`uJ0d~)Lz74k}(r%o8`j9$lE!_P<eEBKc^R!9p4&(;#M9}cf%U$0lvG&L@Y>M+*;
zy}}m#H(8edS$!uXyHLVB?nVNPp*4_WRcntQvVg?pWrK)@kgSu3%>Z_r3Q12j_i4Tn
z0*}hWSw<YndYzXX59gnm^InVe()rI;7EksEdE;<(`(d!Yo~CP$+oo^w6BE;mt7H_b
zEo|QP*NZ%xNm>7aDF1isV+wzpJykW1==cQ;<vfG#;No1*P0@v%gv@cR&%i9saN1?*
zbbXjfuRPUec?D{4AAFtsJRlMG;})m!c&DQCZpAP{n4i6IWa{+QX}0IGQrnC?<tA~-
zwsxt|c7?}9;g%aSsm+O+56~<aZ*kZMbSY%;*J`z%MHYgWF8|Nb;xh~aOMiREhs|&d
z*-NZjI!)aC7F$7*@Ezc#e0)`h%e0u@XL#e9SW~t%u<naSk2lC2-WLsNvx!EHvcKA{
z3D<bGBLq@zo8fo7UTYx}9#oxnt$$@EPY0EU@V@r3^1M6*4y|>1cCWn-9GRzme^8kn
zFmbVF$+>6LV>OQ<JMl9*`4bfVXD5lXgK00#$|tecW5n#3b?(+|dm{~z#CU5AwM1D`
zP0tu_4_MmjU2LV}!mn9tK3eMW5ZtR;$39ZM3_vG7U-XmL?E=>9@biGy@U#CRre^jI
zATNn7a3=cV;==emMwrCUS5#KgY<f9VA#u$4GQr0?r~Qn3Ed8$`BC6j@3T)7o+=zj#
zuTX{ud@Hi_?HhLGL>gmOTt^jkg+=_PW=vhmAdhk<t9Uhl_xhiM3>#?I)Fw*-r1!*h
zzv1;rNnE*i-ZP&IeV6w1q^1=pZf<|oOilApt5J+G7hD1HT)8+KT7nM-cx?akD}68s
zK~2brNRi8`h%x&WMHF=u$Pa>7S99sy{~c3*tj}HIQC$zDCwS~K=6^?f{#>}L4N&(m
zygLlWhW;Pyb4I{ux($-r`QNh-85k+T+X?c>KmXq^64V0@qo?rSM*rr%|J85UfNdwS
z0QvF%9Pm3(%<yIyi*5>tFaKG){~S{?NMlEYDjh=W{Qq}~is~Punt1^5+Id}Ri~ntw
zxBr~N1=FlERAYz#cklqe4?H(0pYnZxiT&?r)1Pg1i2oLu%MeM&`1dE4F@o;P^8`O;
z{&%m7g(-J<GXb2C>{S2HCwxG4|9>6<?)3e?D<rwmaf4kL{NI{lkHM6mnC_@038dBx
zHdxC8y<sbVS9kH>Z!BP=?2S!&>{=llOX6|bK-jCKL_Izf0O7}fZp=myeou=t%=S5T
zDgXU|i3{Rx##&9=uJ0@0*<PCOaGuKlsGw`&;BX0ebKRe>=WT0;C_)Im@0#p3hf5?;
zsJP=)r9QEDx?}g;5YK&~v7jq@_@KpRY>56x(DiP^Wct4ys2>UgA>Giqov6jo`E;RC
zXM!PScK~>7+wV3a07R?+gHFo~bqYt@2af$%7i?2$Z=Ej%#;BGPC?PrBx{IY36B>M4
zQz_UhZ??_KJg3$_j6KUBK_E<~s%0J2QKeqvPXf_WQ1JP8Ptb>xuat5-cF4!wBUp^O
zPXIfeUZXbui{<|3k;J$Z0iTyPw@ZH?-h@nE7n^TQAy6r7j!sS(hzBYeBDhu&nDn`<
zbTypT>ec!}DlwzW;<R8mG{Et}>YvAlIZRMToa0ra7`~Iv*B78|Tz4~E0J=O76EawB
zJ*tg>YiVsgRyY;_;u-jtNWXslx?S^m4M5_N+*krcA<YAx1)i^_&7MC2=sAGY^~U0s
z<GW4}fs5feC<dZW6N10Vle8}Y;<2P$I@dYiMx*}tH4wnBJ*HY#62B!Fmf8KXZrtAS
z0l0uN!DLkeG_P1b=UDIGzejSwTY<?R@N(2!v(ou*=Oera?R}4$#bLdK#Cvr12J|M8
z!IhB60E9eifS3cu?nBng6=nUSFMtI;uAfGE2C(;V^OWOW-oSg#$2w1dT(v%0U1BdF
zhIcmIc^+l^0gz(1Z95l-46`eH1@bJn`UHRw<my!+XI$rAZiEa*de6vd>nVTc9l$9*
z0;pGuo|j|qSAk%h-2o7z%wRGQu5~tx45ANvRBswy?Emjz#wG!4;#KwPMU~K>jp4h&
zroU-eaaqd{S)o=YXnqCm+K*s)@8yKp09?5AZKa}5+utb5@2>Wz^=@jD3|`IJVL?FG
z>fT)9p?APYd(YtflxF%2VDGcv;(J1Czm}H#r>EcO;Ccgw$6JjHhVY-?fQrK@#yi=A
zD8CZ>I5;3!lue9U4b5%;+k)kc5G2m{yldW%$2F#e`5SB6`-yR=-+M@-lj_8>xnIUE
zy?|h;7+q8sb~nAyp_Z0boUP%fuoR)&lAi14Aq<TU&t@ePuunNhQ=jaHPJw8xp%Fff
zrGx6yPC_a7O2HW7-Ht3&e%@-Ts7>D6?W4TgC6kfAXA&_niWNK6ek?jd`-G%X7AP1+
zl!b#Uyd&z`1rR9Ez2c^Le>jvdXLw-7S6i7NTK$DSoW8eoUr`=x1YU{jue$*3$liJo
zRNeb3$K|7v3tyF6V?Nt9{f4Rw0^-h;b0y0}^JPncGF8wJ;%s&<Y5v*2#S<1|>j?C5
zEma^cK%H{iy(_)-bt`D&s&Z@k9YK<_D^QDnV^G~%W85Qp1DBoA;iZ3+6(){G(JELg
zf9Ia{q(AT~O%?I=6#2AX-STuDfcBN69JD<xj0#%5N8hGpzYs__lXo1B(7hsw|FlSU
z_cN%9XaW#HL_oxDkZqC<6)WUZ$)UF&CeHO)ahku6oZT(OZaY;ablXDJtDTaI@k$8i
z!)iTC8)0aT{E>;ELW)>FwJL+a2u8}&-@ZIH%P~N&H8ym0Mv@%>vz3=Nfwhne2Wtwg
z_`XKbg6M+!U9#FOcwmd%p2fV?tjeL1zEg?_LlaNXA-zDhmhJ3kF}r|oybbQV<=fxY
zA6N4%1OcyXX`zkdJaZ(YbzHGC`mCpU&$d;%g;~{TFn);C&@O8xtLY~?!v!sqmF?o&
z6w^%D&3PUAfGGqN8(Y0Rn!f#LhBaU!0JAD%5QiJZgcV0w>**oGW%V8iCyGyu0D(;J
zm-}6KEy_Hu6h&&4SrKz?wovb!Y3LG?mHSDb>oPsNU9HqY%?L-|AB&8!P<2=wMkT|!
zAKv8=_{AOCx#Ve;D{rZes%}a(g^dY~nU$sFy^vIlLmlw;xMd#(HV|}^Q$g)9T5VTn
ziBj!L5XrF<=}&^(IvcmN6BA;$kbw8Lm41N{%e{+*SGCl8HK)?pTIe!Y*LnRO(~Ub~
zeGkOITbwFB?i#iF2XNjogv4BG$B}6KtYof9Y?oL@xDkiDts5BLk#9#z!S(AAVX}%!
ztb+D)6{cT`QaPk*a`nT%-tegrcdbtV=Ryfh#Fg7VR1c4nY_^<d%EVM}^43{?C-))F
zbBONqyiQNkkBBy4#=$~%hs|G@U}N$cAnjtqEe3piq`B&2^tRK6zvst@DqBaFYa9Pa
z=(-N7GSc`I5m==Ro6x{T_m0MtkGB#&cIb|1R+CLl*R4S0;w@<1lU8Z^<LAitXj;Py
z!On5TJl6$QI@wR;q&R*{k)HXBST6a<1wJpASz2a84}~@ZuD)ZRpWCXn7M0KqZ#ZPB
zVgenvM1?i9^0$*jxNG_@r+Iy5@0qVS&x96@CN*LoeET^s_&w&E!F%Klx+c65J{N%<
zK<Qt%>E6Iz*HL4z*kL?;paT;#LGaVHrGY^B+Q#+8S>zzYX&QiAH>%Y@zGLCoK)kg$
z^~Ci=-@e$N9&wn|D%XyXj3qNF=6H%2Nr*0eq*HHnhd4g__IB-4Tppg~DnL$s8E?ve
z3dUjzhJ*YBu`xVNRRWPO*4>UV9E8;1j(a!V$nOBza~+%q#l`44oJu<TH<~hJ^~cYs
zsO=I0oCbT;L>NK#%U#}E@rS!ARqhzzbfxt88YGo0wIfC};)`{vS6F<c0y#RJk1MCH
z4nLHABU<K2LOKkePG4VaGwP5ah;FcR5_4TNEmDLBAy8cuvb%At%)d~DO;E{;`VY*v
zgkUNxx~zGT4y+a?28R@EsWBQ#q9sz@6Kf!4L{)6@I?lZulvQC$*u>f2gam)f#XE^1
zz^G=<^_v{i8*CxRU8$e_nOI#jg{~k0#~@1t?tn#$l<`eNQz9(_V?3H->a>RCSH1ga
zVH$u(Pd41&R>svG8NAXc-6o}9JK2x0Z265coH|bkM#`z&Uq72ZOIxH~GGh&g!5;uk
z=s7`c&do92Oxcae?WgUCXgAzJgA+oGDVFOh;*E;U8wR2To$nL!B&~Z951fl|?btLf
zc0Lt>z_m9oqU#b&h{e(TBrY6a_6{8JBLmeEs&!Xy_rG|LS;PEo!nsQIdMEMjy7n96
zK-zTH(-vio83>gsw6ciz`e|avMmVi!y>ey*RE@ubHvD63LUnGnf>P8}ua#Y*;8x`5
zVXoF$E9C;hPqpuL-QGo3lYs{%n!E!C?VJnna8%g+GDFWpeRsoZ9aHZQ=Z)pteJ3sO
z&Rdxh1~QZ^O7#4e$cu?P4o>26LN2ZecJ%FbM-V=OT?Lj7BJh1Ce2Dlk;3pa2ieFv4
zSZ4}c(8vUuqFV2VQ1B>cayWrlyMlAxf+dkld68CRprA$XQu5t&){8Ru;we3}9Ftmv
z%lkW?#v~DaVG-#`cP$L6&(~Af2IjoaWIAAhnR$)FOWOnFMEG11xm(f+p8E?M@haro
zw<S5Lwu_>-;{{2&QnfVrA$Z2)YS`sE$HjH6FtbR~TfAijNW}UMFrL%IDM;*y)DqJo
z{lq*cv7Ys~`;6roAD+8h1~BJ7DH64s3syUaK*6{)jfnPRFqV?p<6Xl<F3aO^*01WV
zg}06;Gm{da-L`AkHa`v}C*zi`Oivfd#b9NdwVw<*e2$Jla3f2%C$3oRO`^+s%+XfE
zb$u^+K{8+=wLPOQE&2*3gAen0{uB!W0ipi`zkXf`a~I4Q4t|xk)4A{LH8@K38C$N0
zf>|{gosu57Zi?`&HW!$8c#m(6(lj)8uWA%SusYbbm{f`T5t(2P?fi<wSHzSzKp``N
zi!JCd)#1x6SJUrJck1nUH#jcz>uZMa?#FSTmpXjXtdCW#OAexx>0%=8*$DSEU`->x
zL388_4-1;&1T}EW9e29J{NN}<uYVRRG9A1(pAYgua&(7XZf|3NQQCxZxV7LK2gKRq
zwr%Eh_1)*SgMY`()yJ8~+_$y%j1TO=sZ(*xSD2NW_nf{sx)5X9FKeFgaH6>jji&4E
z9x+_l^lGrU<GuIC*V{xr6P7#uofxe(|1JE}k07NC-o?#z#rT<!LFL%$w6(qhd2cHM
z91hWFTIrYx_-{Ox(Z9<%8yBo+r`t;RLSM>eA0RR=&j$zzgAZ8W&W&f?Ba@2jcPm-7
z`HfJS9w*IDwNU(2-x?rUs;}>UB|S;*ZAE>1y9Fj97tZH4ui)}qv86-mn`b;jRQG%V
zbsc*O10S<kBzz@5B15}~nje|b299G2`uxzu5rKZBCzj;9z=)<Ms5pCSyd&+bkb-sv
z>aTD%vr3>=TY<*xlv5XFVz@{{R}8w}>=Gj_uf}Y>-!<qa`_i)H^)JV`Lx?lj#qeHl
zGx{_WQnFrR-eGXt$fvQn`%O#O5>&-rX}dF{2db&R79>$_qBqtMAby+tws*L{HSc(c
z$I)ieqtM1mZhkbW@(t<pjNT(ZUNL<2zVnC%!qg!*3hb6I@mVv6Q!f_@0W~&iB#WKP
z)+(daUWN`!MyhmP0x0<8K-o{OO@wEzh4)LJxVO>yz6VCoW}yW<#7Phgk&ENi7<Mgu
z1Q9Y?DVT7;SPz&UOyGdO$eXh<uM%y0csm+cOFD;Ztw0Ih_kI8~E2iD{P9&Ydu2YaI
z_SJ)8Zc3fQMY=yY!*&vrNx;oej5Q%Gb~(S`BSpye17F=V%C2>Djt!1;_KQ3@;qlg!
z<LnvGDWWfjB=yE=EY?z>9VPDbB2KblYGn3N5e)Co@VpojI_m%V%u%1{{}WNaHcA2V
z7gDhpS?eM00x`)+$2A(Pv}#7{Ay(&IkQTg$vn{;YWPzxJb<4H{`6Oy1e$bWCSqnPc
zHGz$0V=>;Ub!18M)@B_4%Jg_^K}8Vdz%@O+VGcc@R^q6}n_$xUX()3#XV8`oR>@M%
z@<SW$HWFv|9G=;ydL&1P{0zuYP*j^rX|`&8#U<&Ed~)F!o5ecYT!IUh`@3sm0+e<(
z=Mz(3N4hN?x}py@Q<)TY6)>C`syvi(Xh;1vn?W6Yzdp>TLV<@zP)#4_ymGo-y1H{r
z%Ex_}s{dHFLbSo*(A3>1SeOiYA8*4&?i0n02=+`UE+$5S29OT7O6<U|G>n)T-{m3u
z?b>#rE^v%@`U!z#8GQdeMs0b06iNzr(a_kAs5cq28FAsH9t`~+0`n!Yu?;xnxb&Ug
z&ql)8IA);k1~LbbIrj(@A@czCVHEjZw1KYo>8k8b@mek~Q-03R#8w{Q5+XC6%wX3L
zR#{qqDPn9e=zC`6^Pat7$c1}1(`kaFp{Aa-0AU=~$g#@kKu|?!#4ZrkfiYWja45wB
zXh$9G-U<CkgQ0~sh)IjCmJn2V&I)eIt{R*U8G`M%D<TvhP%c}R&k$5*24Gy?#NaZ>
z5Th!UNA*_@2tY$XT&Q(eKAST!*aK;RHZ4IHE%$3@!JOIrHy@IqJmSwEX1_>R><&__
zk@>li?t(!YViS-uLp8>R@hoqcJ8in%I6-=U(4JoYMa9pSew~Sk<rv|9(;VdlLniUe
z+Hr%3&}H|T4c^F?K4a3Usmc-cBzKUQdd=vB!D(D{*2W5piouUT=azP16EFjLdqUb5
zdpv~cD{T|0y2E@QTANy6bPy3w+?L3+WqWm?Z75X96&2L7JSdoT2eZ6kIggc0$V?C5
zmJcNHNZGk#Ig_G;B)~4K*Qi4@52#^mu;v+l0;wYHaUU~TM}9C64qBYgkZxBdNb6%e
zK{ofN7c3V{{ytRs#IsLUuiMd~gSrv{Pq`q{nJ-OTLTQ)s!KN|^-t?>>XQ!um6A5bx
zX5$b&!1d{8u~I#bd%YS@<0?!t9ZvM-@C|<&cOIS}>aiVkJA-do{|_r&f~p=ThDj~A
zmHx0Y(|O2&ws#|uBvQ>qQPW7*W-xp=gpExpAT3o|LS|PIs}H~VwkC0PFrZKryz(AP
zZx>qxX9<pj!!k9~TUJ4vQMtiQZFEAI*M(&K$r!6nRF(!y;l+Km;k_960;8A@;wkiK
zoFw^?bY$@m#l0^5k}1)LYQDmtw9#GY;*I<+y!fPn0w#qB(MVotv=Gqnh&dC?=Rmg4
z<IN7D!vcYhN=eEj7=4H_1F<A@NIVX0g4-{*gX-J7K|l-cqfInFQkdP&+`4``F}sBz
zGA|roYVRyUjy;Yrm~3x^Ovko(hMwllYg|ORf_VQh-^ouwoH~Sxo!F{IJ{ke0$RHCf
zqSyYzT7=z{v~)gylK!Al-$6Twsl#1Ol9zlfi0U5gq~Bf=<mCbL?yyov=)xUYEI%*l
zi;n!qRfxs{ykBFd7_t7w*j?mR$W==yiM{*?@)?h+^1K-*7IG;=G`Pd3c<!ZQ;;y*p
zxJcnpyx@u+^N?a3jO?E;BGcaEERm#_Xy$ACTbShY$rm@@Qf?=hcTUc2<|TyTbPA3}
zZPx|5^kdAVBzt)QtF1~NGgkFoOU*B8bCHV75FCa^P=7hlZ$)}q%hEF~38+&#1cFK|
zE@0B3sM-01X%QuW=e8dVj5MR^(Cey!>OJ(?tI_EPkaC(z{+ELr9e3yz46$lZ+&%`w
zZZzH-0!x{hV!iM%dJDGV8bcX6b!KN}A}EjURdau^sl%R|ho#%r(<7v$$A-2Quhup%
zkIFmelV#Rp0SD6;hn-PvUGII!e8WAkiMxxJ%bn@>@G)T(tSwMbAk2e1)Q#f7pJI`0
zF1CiIsI#G%QX?yuWhVrtEb|@=1C55s;L)kH{ZQ4L0;lZYeVHT|IE1jtieV=6e)%9S
z^$Q_16<`I!*J9oL4k0w*Lx&o=8<X@E#5&3YjjCm3*y!Q_ah=qI<21Yi)8*o;NRm!u
z#MX0Tmse7N1c5pAt6*URdyio-t8@ipy5*)c;ax-E&k|{7z6+7SBitXEpeQu?#fbyz
zj)~Jq1;R*5NvJni=0X{T*0x?STSQheM-ZWpUKR@qS?BBTHS{Pe>7NR%Q$`<NpDq<K
zi6Eg1`7#vXX$uYq^#luH&mX>0xxxic+2?}H%N{^jc=SgiWTLQ_hRtVP6BcGv^MPhb
zi2}l4hBEDDPcsR<;&>+L*(T(~shlkFpdP{-95}Hs<e%IdM3DK=DZ(RBLlM)``6J~M
z{9Ur3Z0)Iv!Gh2w;6@nVc@!3+xJa@#iW7u1e<vlf5el2fXZDQE&n+P${U|ZkN7eP%
zqb2SnIjT%((}LApP=*Sf3UiZ^&6~yYIb2jYLwMM2fA7rAO+&!=Wb8<D#}+LdjKyL^
zGs;-x=~@jHaQJ34Nh3}U<=O<gb$!CtD=_u@E}}uid4`b;hes78&!JvYn8kvGN=m1L
zrwR9)(~(b<AwVeLJinT9a6*73Vd`><aoW~UOx7nV5#CAxB##0Wr#p5sVcMiCTp`w7
z$Tvnd`R58K`ir){v@OG^oS^ul2jGPG(O!)pG!PSxzQXiTS~yx#@ecEg*^kI!E41un
znREi5Cp#$C!t&*d1Usa$L?RGhCdy<s*IGdcR8Ya0(LMAM-bjf8e;9HkbzbR(HqkaZ
zGQV$3xGtGeR)e9*%NLdeaRvVVV01XuY@gu<?%*g3{fkBYv6<g}DdSR)CK514Rw2~z
zH||1f3R0Zt&##J&BsRH_c`>gq)^Q6&XossnO6*h#p9n+40O=050ljqG5%|LHR`uI}
zjXt%~5&cFOXTiKhIed94n0Z_H+s{_H!=PD%Nl_2d?6@RJvwAk25BtBv{4D&ZCV#JQ
znzh`BM&aSuM`U7?SbpFw0e50Af4>0_mJOP$y{BsS3n30YJaLo(skH-NP6&1nhPF}h
z^IZV(i+}Jk8iw3w)!<HFI_5#f%*bRi(J4n%w45jV2uhpBAY{AT_-qGKC<aAQ5jljr
zJY2z~7^o<hn?5W(W3R}`koAP<Ws=~ur(SVOx!fPi#+mgH@4R_gR-$Dpe+(DEen$e`
z<(+F$Um`^xOK?%arR_}ap45{@CeNf=*qf;F`<>($Skm0~>&Dku#zq!tTUA#8tcO3S
zHLo<VC^v-&&CSB!5j7+MH~a>0+pr|SIX<y4NfXj=O@xGpL%R14Mnyv$l73-5;6w#C
zWhGz|j<|>BW0#vGlpf2i_LG;w$aXhH4++eH7Au5T^)o+4P>Z#PVogkzm+*r^f9HDM
z3la&Bfy*kRoLPRCSDo*i>}g0TBHeGMK63yfiNVBxmd?}nm9-%y7&W|wi4ii)p4g}}
zG*+u8p6c<n*vzoM;hPI0{JYYab?5tvjYP0qw*ta!GxbG(kWpmlzJwsxRWmqg+Hd$h
zbj{xiAwvR;iMk??-RljS-meU*QcLejDTDN)`1ivul3Y%WR!jDViVc$>Mt1nS5H>m@
zeaMCL)mcKWlW=6Nw|H=t$tuAu)J03jr1FAnyuZJfK}HFP41Y=HkO?;qDEy_a6xndt
z5=?J1#L;R0Q8?oyNp+ZOkbuno6SVZ?9+TTgH`IK(J9)unUt30M!O5tuySM@Rvs|hi
zN+D_@14x-wuss&`pd!(rZ`7rr59AO{@>H=TNHjqU6Y!$#D_5+_B-0#VOXrkXqnyPq
z1m`W20XbC$gW1;lRw8)%(PP0Emp^%9T+iZ0Crsk4AraW}^S4k!w(8n_3gCF?nr|4Q
z`?F9W;?*`ktsxd{S{J3)>pWng!y-&w$xkKVWbX5G<tLs5Acaae?!inOr1&nQA)g9l
z`eUKm(=s#ZXG>@DIMK+2u1a8otiZ{&u6vM(HDC(4EP$@i=drxQQ^&oE^Hyy!n)x6v
z7;O5W(c;15ctj<b_L6FV9Sq&Dj!<Xnm;+xpx9*A1ZUqsT$9k1ZnO9_TCuAyOb@e#T
zcZ*N<jfgIXsXms9*-_{T2P<feX~z#F83d*+-79y!zf#G!$0Pw2>juHsYz`E0rx&-r
z9GAK2Leclbo*z9UWR5EY-{&J^5864HdIuV1N$wKCu+b-}RKDO&W&B|$$NL$`>mU{c
zX+wXeiVYp3Uh;L-PO?Tp(Eu_J=g%}%Oj?HPCkrBV_(B?HS^7bKt@Uy&F$iFcZD(Na
zQasQUAF_LA?8=hL>Wo1|uyCQcrgP0$pL%wag~D3icbSh~wO<X@e<YYBDq%@Y#MdJ0
z%eUAw-P29>CmB7A5%7#27LLd54pBjc;d3^;;%2kLC8kf;DV_TIu2iVkY+=g}-HpaJ
zv5D7X04$P@zYRzUvJ%X-Rub1WHDms2AthBLWlNVVuc)MMcP1V{u=yU(r#tpw69b#m
z20sJVAc`qwuYO-9lG4)4ksm@-Rzxh1|3|md>igb7*k?5E?uN|d6manGY#_!>p(#f>
zvIDDOHc_QH^M)G|Q-JcKRLv)Kd3ix;BJ?OBVdjDL*~H(1o(&H`lY-~4`{(=8Db2aE
zKv8H<H4cz6vOo|kC?k`J(hm^IlPlqYo&qUK34!GKHB-=blK~SdcG47XA(IeHXzL$$
z!7KxN1?gOW?60|9;<VjwM{PV8DSdU(wIR+E=GyCZgT|f=3kl;FL1L~>$-s&ys>c7#
z9B+t5GVQIAJLvchA%*2?DrJf~fWAI02Mq4hlzu2eDn^&-{<|yrQC|WBg#sed%o+G|
zK`J3UWijdA1%#OyBGjJOVrpgHrWCyO@je;fz+$QWilwUjAskjx2AB!?0utX;iec^0
z0}ypzwBnl2xdtNLLMrO0EJqkdf{>m&xfdNM=`BWdWL&Xm;5HWFL}WthPjO_QXyUpR
zaX)l!`JKm?ni`8CT=bR+J<U+WE2F4nkzt71;7nnU6UDX7Y)P?*<G3ACvoLZcPegSo
zP*FE2u;CJ9CS>GJ-sHzkJ9WLlCZ}7Ime`XYe|6F3!c^&klnogbT6QZz&1Mb|IOUgt
zv~mlN!%zX)(PlIGVE*X}$`Kw7KMlt)n?P(+ni8B{B0dx1KrZlZV$j@s27OlIyW+~8
z_Ll(Uuv9&KHqFwsbz|R|5)Bw~CI5WkTBj6H#OiM+=z^|s#B=K(t%#uLB5m6Gmf<KU
zFdiVfpm82R8L|sIAROH6V$q=kh#b7pz^pg&2~oCrzQH8ps|gDDlA*@)l(IQOTuHZS
zB+Dx5^@`BU!1G@i#uK^|@0Yml4+hH+oaG~CcjO?R*-TYTA{4XOBMIz~5Gyh-vVPuo
zg?95*YXdS5iDZ84pwKYo`!U~sSzp#)jSZ6+MOB6SG(U!rB84Tj89VulAyiPC!(R&$
zE0s<Ms;b>9KAcj7C3EL}w#WcIDT6Kgk1*0~QkW{7Bt9q-W6>NJrqY25#Z|J8=uHq>
z`Z<)Ji;bd1S0e@Xe#cO5(!PW$K&~UZ&tMsJs}6&e&SVga#JV!zDCC=<eyztw*n791
zd<6TEOlKF140MrA7<3twT7Gj}e%BY$=RgcQvV>ZmoC{HFm8eT%o}B2ia4=0QSM+nK
zOb>8UNm7m!XcQ%PGTm_5%GtCXg1s+tR21}p8l-RZg;fK=?8-6qb<XD6TIMl%xs#+a
zgNVtG`(-5WG7Xb#(v?O#ij6IcGMy|Y!-Gim{uwsL^-%VkowNjT42(@~!B?UFPfJHS
z?UITkQ<1VQ{RS+)$R!TM)a_Am`!h&V5Jc$1j@9VUS6zW7Yx*A%8`^%(;8xYm_@5_X
z!$|9OCxY*^<F7~x-;su4<7eP9V_1V-pb-;2$Ga|_b53q#Yr-;YtwOlegZ7>Y@r|Pd
zJmVSOv8j_h@$P^@zztrolsPBqx>KJ3NsSQcjLlnU?$S2RWFe9pD4cGjmv{2ARQ$#^
z;Jy^&AJ9->Y(AXFNpEzIDb1Colo}{dOyC$eIm$xBCpB?u5we*XZy|PD>wYr<UxM5U
zLMQYHbWW+<abEADPr9PxI^z0edu)SZxiR-LcoK~`I~!}8+ZF{ntN3anWJ4!Bl=kdp
zPSQAZ848Mg5*;0DZ%_qkzK)<_#?xqAThpKZ;a+Yhor}qFIW>LL_KS1Vv5G#j4VFm%
z<N>~%tgue60dzPCuT2_MH>gg4fmpEhCo{Ji6NAJE<Rs#xrjKF==#3@XLy^yOnK-Ta
zVclG!Q-fcQAhakJs{Cu$T$hXvB^!-F-Z2jHOnYOpCEoxEVyqK(Jnz1KExZi-j!jWG
zs6^t=Msakui)ldg*}Y34t(<)bw3|ZVkLu6&XFPmiGb|zA{Ak%f_Spid@d~&9Hw>DG
zw5hS7S@{6-xeIDYxBT!(#od<(k##ge2TKBW+Axr$5~Ah6SsErH7^3CjSt5B%e}(1P
zZi9)hTCiqMVpGehL>r6-eJkpMPqJtxXPCb$UM$b-wt5rbS+$+@^d%xFYO}LJet{Sq
z7Y-Jh^$(zaTjdD$ZHFZ`f}U8neTqUxinAi&ii!Ndj9uZ^Yl6n2@SD(MF>7h1CO%`N
z2zHrDa+;jIODYaA-Wj6zT>#I~7yWT;Q5;A&D=H6@FC!J9-1a@Bp7_k6ZRbfvd#5$l
zn|W|wv<K2<A$ac8;Ced161K01^P`b*-tqA~vZ=S~gA>qtpt#FKGMO2up&6FrRhJ0f
zpb9PLyzCv-Tu`FHMGK@w)}Z!<!sodqVv!N|E{Jt)K(Rttg~aBc3U3NVeX)2)A?}>v
z1uc>@L=Fq~QFeK|!kOsvZG9^$YhypLftKT;WaY>zk02`-7Xa0B=Dd(y<~ScDo0-K&
zlF7eAk{hrNV1eQcseYboiuw`QgL;T_Xq2=Te$vlk@>Jt%+DAy!B{*_NQ}(oD9uTw=
z-nSq5@mDw7eatl*e?M_g^e<OKGvWRZJq9t0Ck-Qxx-LfK7Nctk^%|gLK|-~8=wNVs
zeMS57i2PC4k=JqB+)vCe-J%lZH(!O6h!%gqb!KOGCA0L@X(X)ws2R1;-?eJ&i-sJI
z<|9Z2Ta@qCB-FeA42{%|!j|D$EhOynse~D4qaFlefehq&AT^88zH2b0=F1=pjK0fN
zKc4Luc=TFM@E`6bkPyln3}c0~uQm<k2g6imix{9{L@KDhZcN#=W1rMLN->p23Sh|K
zKyymlxc1t3Un>0Y;VtEq?UvADMh%RAA)6(0Lur0N2gN@Q!r-UiJG1A8#~2~GSu*_j
zDc5Xz@e|03DKrz7V>)U4L|$IlfK?1VoN1;T#qOMu_m6%{qy~~m{uqtF?gGGsyJgzP
zW9xk|9s?b5HT){t*B^{XY)u^<EQ<({&{QPOXF-h)Dkcb+pTHlYbC|(%Sn*lJuO^T&
zMsasbv|)A}NCP9eE+K_R6FsDC+jkDwSTx|={R++qBXls#Y*%-AQoC0ij&Q}t3bXG5
zhd|_DVT34u0s()NZy#Q?^M5{oOSw1Cu2n_~Dy9uPZii3S(t?Hil4QeBfrWReN`O4`
zI4&3eI=&YoAEyt*ljU}InS*1J*-c}z3dK6a<vx=34`ov5{>hyU1&^~_Zlw<bE<}mJ
zPu_hDNTX%nE!^3)F~WHmXCGnjo`otOm6Wwwl4SR`Th6s6YW}BAZ&gc`0Eyy~!ELY>
z%~_u?voV-5n^qWtha7+|!$zv>vH$<bI_L0AnyuZ(wr$(CjR_{UZQHgp;l#Exv2EMd
zL=&B7_TKNe&-qUNNUo%>Jl$QZx>j}7{ks>$6;}%z3fTM%`5-<da{moCNtk@uV9a@r
zl)=d$sQbxpFSygS!ts&ny3D;!RIovTT>Zrd3dHl%2B@-fx%6r;`nG@H(BJ!F3k7n)
zHktyj<Z!C9ZRrv%xeM=P)Tj$Ma34&Az{P4h@FBwE#TH-(FGyF47<(px>W8eZ3-1eL
z()j`Eqtqd~xt1_qngbP=Gx>6N@ESp21Qvc_%tsotb100j3-C>Bb6=}i3Hom%3jKuY
zO%+d_W@fZO5B2$J@%N@K4fQ;a(CM~b9q6K*-O3BuDM`q<fx}AQ`)`;70uzlzK<E4c
zny<MA=VQ1YfVjr@WiNbfay(p_xk7j@&K3^Se8uQRp=q_xSTw#o#v~5Dwx}{M%DSnd
zV;=PHgmN);ywX(dZ;$z><1m2Dw!!+Iut^Aj5ntk&a-Z-u(5K25TPzoBVKqfyvEgeW
zVhSE6hz|DR`{S+l4cs78pz-O&tk0D@ufvV>0=^lQU3rE$;rll|{ty{pG+$@Z-d&W^
z;N3AmLCtAvs1c!#>OHn6DY5`=*7&FY{B7<g6yUvUM7~=feHk2HHyh*n2rNbJ=$sp>
z9M@&d)6u=V`g;kMr^EqCmv=lEZqxCUzZ5+EFHs@;P9hL^wsMAuAPmj__7t?hVWeGL
zX`jv%))nM{#0hZllm1vr8fUrr`oLE})t%KstN4-8T_kB#9XyHE%_z_h9zv5NYk90C
zDr-(ESI2OaXNGN{rkDR-;w%*ilM@tY%b5?Ov_Mk`Vuj0GNwhYI=q5K(m~ZjvF*FGX
z9}5eY7z@t2as0@2{6@%;N|i=OHmH@DoPQ?^h!xF3D!?A4=I;aZ@8{-@Bp}DD)ou$X
zS%TM2A>LB1r1<lP8EJT1D_j0}DGi9srb@F}v(A4n;qSvn9U71|UZm=3W%%Ey{SDqX
zbYSx9a;-)!hJRxDuaE|&hzLb`%czxNNc>-o^RJOiX+O7uz4GYW{}p~AWGQMeA0J81
zVwj>(<^SgZ;0(yXc{?|XLr#{N|L>{M{+=X0Sg!nhvHyQ=?q643L<1u53S?h_p$Hf%
z|JNZ1kP1h|Sg*xz|LgBuAivNU^Dq?ux!lutsF0uEAyWpfoV+*f+y}c^+8j0WnJ%N+
zY|ABd7~&`R2Uo16v>3ZIn<RUm_{wu~PnR0#w8&#L#G8I1p^E=5NVHJkq43z}<5(Fo
z`+iU_39J6ag_B>eWY=0rqKX<5qSK~Rvo4j-^6kRWQzQ{7PKivek_z!Vq^@DG2%Db!
zD*CjW`DF?_*Fv(yp|(J^qSjXn7@)D~g=I|vIpN>UTpcJxgj7~mWx;uD>_}5Papmk?
zNzyE9wenT_-gzP;sHxhCpkT(x;H1~;t+5_(;Qah<dVRg|_Ga$&?(m#XzD&g&omaz-
z6UvY3*cM579A#2uZenUW^ul?hj9Rs&q=yCvo;kC6MCH^>3&iyzs#i$@JaOBm2gY`L
zW{?aK)y1F+(n^8ZCflECx(7IaBRFp@Bj{QU+zMJKZA`bzC^|J<DmY1B1_y;khpcES
za5_5ocULYYf^xS`KC<rwHHBSb8YneT8gWzUBUjL2puDEG59e|I>%_)D+>X6%nyR{v
zr1^vVc4ewc|3qe02CCPC$nYwqZRASaSPQ4-Pr26=?$M4sbxw1kTh0W!DU=%thP(il
z<5aCCcaPN>D|w^B7_PJG^y%JNuoFKvpG%$37=0IFGwpSWboQ-m19A?q1{@=WX=H7=
zJ_#{5i6IIK>B+F*aHDcOla@)Vxue0>)`h;lu6D}x6E=k0c79#9$k9?F5DWX>dcTrq
zncmu@iifRqS(AVj@vlestG8Bg@EGFLspG2l(Vy&QjMeP45h219JgF8&W-B)HG<Dd3
zIA+%?rT;VRC;Wiw^|K-gOiQjdlLeh~66HTxsmfJ<dQ3^u9AZ-7)N+Nxy~LZuj^9Xb
z;j7!L>0cqB_q!R~WTrg1Vkhx+DB+!=K8ea73V$q2f!F$@HJX$BrD?-!6zRFOZ9sNP
z>6%^%LGG7w!CP#Mf`k}3c=7bI^-G9M>=vspV&tf?1oKWeLH<}8H|U6Uyhm5Nd-$lp
z0zqh0%lG<6BV0^u%OA~+xXt13m&3(c$T_C6pePtJ%K7JWR(#05^L&5-BYQ-O{GW$2
zusT#IrKjUprQV;xFn82xp9nnu-(d!4BWkcK5FAEy2aa#_D3@gA)AOVT^$x8)T&moj
z3)u@3zt(xJSB3Nuy@kM-sL#%(1c<C(2(UL?A555^1JqFEQg--azqu)fady+Ge%LM*
zBGQ~7K0V^3cTXVsGyeWvRwIp7?S=|YIpjbFVmcC)^#XkUG5$IM8d@jeZI-}YH!^K*
z8ta-?l;|y;=u;xx$L~joA)LnH|Ij=%mF93an)~~hNp};RL0;7a6O!_JpVl!Rmj+$+
zpV6oV1O#IzQ@e40uisLAAG$=qF1lFTjLTBb9Y+V71>YPwG&c!9p3>L1?Du1mqR#TM
zxVA;~2I<j<;-7rcMt6P^^TUkE0$<-PtNy<AG6}pRuZ|IYyc&;In{91$=WUw2?l!Z`
znPg{&Ck4sl7#=EXFfAW0rsdVNa(PnB6#kiPWt@sXWmdq62Is7`W|_3AsLjpHrUe-V
zIR2+qe#W?wCCc{ELE5~kybBzg60koJc?1E0;q}M2g8olrzF`AL!<Ke_=-DGMEG~t`
zQWVV&My})jB4`%3b4)Rzu-d-5^J2jr(>Bq(>KL(7?^b_WGUV?3WHEnc&fIu@cBM2h
zEc^X1F3vj9lc)E271j&!`$NDUVfe^C)%Q_-=<<U#oG_F3JmFF|tQ5ZJ1^&EF+EJy>
zNBt-$6TNYV>dj7iN(N!b5MuvM(>x<1nx!F@h1V*=o^NSx4oU-Fv$o~$)T<iG%Hy9@
zlHZLSfpU?M3S)J7*lDoTH#{ZEhxh&92@^v0Q{{c{Yy8&^tus~lJQCQ$-ApA0Iz;sB
z`oLSYRAG4G3tuLl6HBGj_K2FGg7nwR>gLw-49>N??KXi`ACj&&6<pdh)z@|RxMx}p
zVu$Y<=><&qWs~l1REQQQtF%BJyQD4-;33uR_|ts*pG=qo0lZg{L(!Sdio@O$>EH&x
z*g>Vr(|B1qQ{flnkq#!SlwhnDUuL+J@+}S&)B5dIO%`LZDr-M`Xj!duo*yQxlSBvq
z=wr3d9(nAzX{i{h2;*<AtrTcx`_CE5ql8#0*0lqgHD-SLj*yj*4QBqv8qqGDjp+Hy
zeX!-A{1iiM7oi2YxJbQ35RNf@k06#q>INi2NkFz8|6Y&rpFxs{94Ue(lh<21q@<Jn
z%6lMXOHW7!k3GM2wS8-+Ep&(0lrx}=^a$C4-!WbxG&}2)lQ!Xg*9!Q5@=6Ht>|#Q8
zofr=V36{t^G&FC#z8-lpVjza9`@N|^yVD}h{`8YGMbDgQE(tCzCj*^M+b<_y@qCi4
z>}}S@lUV{$$P@S{PoFd)RhD*{s`md$>O80*3At$dmpNdbrdiO{Wfq{zVLzbcwB<IB
zNPC&?+i{P7-4D>RV$SGvSvpF)O3T*`pFAFw93hP3yY#j|{%Bf|enVUn+)A(6<VRjA
za{O-=7aAeXS1ArL+B!NGuG0r<YTAtar6sW$+Wb?;|GcyG`p@qga@;fxeK3me7AsrV
zN?fX{x~i&bZ0=K=)QzP&T_Zz18*lEx_YlnhISLv5++)oh^}nY~E*N0vBYya>ymiAJ
zcndcAHa~6Kei2hLQDaejk0xodkysB@<h?gYBJv)-O0e9rg^lQ}dy-enw##<iD4L;M
z0<-G!yRa#tGV3)1h73FrjNehw()L=RbpKF#8ORCW;VyiRP(R^C`_RH6<V6UpPVzpa
z9jm6bo)8Ts^$}y(e`u+yMuy>{(<Xt9k*MWiwiYq_aMsDU6i4wr_gLI+H5B+^-WiZH
zah%9R3EixJ2t8p6DS_sjUPTyKoMUj)3*xHuO}<HkfE-M*90w6UK~I|mh{c0zy`p!B
zF@l?5O_Y?#btNNXaDnJj{+VEEm~Kr<^`Q>4!guRx9<|jzjo1DX#;vrB7n>oOzS2eb
zV!8UDRWVOMAP-RzmETa7m5|YqQZ0T%1-~jRZs%icOG%}61$Up<T3b(Kr{LvBD-KMU
z*<_wFZiVlk!O}O==L6+rKDUX8LU%Z*?LUDH#h2}Yr#N>(B^**Y$madMn5#I@D|MVd
zu?j-!M5o$u$hyg_90UHeB{qpH>0>xkSY|7JB*(p6U{RF+QKAxarR1}f6oHQKaTbS~
z)`386m*1`2ZlASKwu85bQ<`OYfa1GqMHn-)-{9iNSeGk?DOQ?i<$@vS!krm5!1Q0J
zAB^JOcU(*?*9;eIof?jbS&WD*ik%|mK)gB{$Y@9%4t=6gMj64y?@i|N&uXRu2@MT3
zH8nlfje|_J+v;$=+2$u0TOOMQ_kEb+1ke`@{D;2)Mp^(xGI?6(i1=n`oJxSXnV|F6
z$@9X9CqI0h8+AdQ^Q0L9j@Rs^YvazJyK3B>PRDuW<otX3D@UTfo2i;lFJ)Ub`8I#V
z8-|TPlD6r&seQRCVQUT-M0QG%6w-8hsPA@;SB`Hc!-BQ}C77w9E9l`)EL*|eoN%?`
z3;Z>O_qSQ{1(Pn%9KKz8@sH5fX9-8trqtzi8UC%82;{d-jgJ>A-__K{0<v-d^~v1r
zH&r{ZBelaD`BMg4d|vMf_`ME~kJkxZ<y(P3`f1gxsOagh)*4R&fI$OD>g!6$S^|X(
zrn1;wQsxDOV+b-~A$7S8YP6bZ`1ySSs&!jg*5g<r^vEJ~rX<cWJ=%T>b0o{m7>VCl
z;^N{>8mtcc`QOs$wK3ozAQ1_EBqyV4gO%flY4ZS|n*!*IvGMVSXz16HKUk@eWb{)!
zR~tHH9fkuC-%8zCa)*T>${3A?nN3C$Vq)MPr0|kFtwKiUqUQKo04+YPEIhuB@4A-T
z3ghNoxUt-JL{E_huzP!nX8e_(SD+oiI{yKnY%W*pDZ;o!hZxlXC657%FDWT0v+=$F
z*Ecvkz^)&(T#cdG*(l*zft|iilgE8)GA#}5``M=u*KR_hwgzuf-IKFKuJc15r{bIA
zIy-Bv=lNTy0-odko+u)waW(`f4<G&ZWrN0B4r8i~V6UK0-B&W9mDyBf`w`ww3$_48
z4|67SmQ6_eW$W;Whe#kjr%D2qFa|>mD^g7F^qbrB(|GmDmA1_odX(1a<SRFmrPo?w
zPe2<l%W5xufz<v*o)v+2Bgl2`wfj}8^Pe+gXD5~xj}PWgL+rh)n+pAxx~_^aA4xa7
z!=BU8O}{PTk+g1P&+N{sr^lHJb+j;qb@GoC&_;P`x<HH1yZWT)wDtRX^c|Y=tCqkR
zj(u`ca`@{&NP?HA4g0-?#m=3Z9e_>NUkV9eQWUBkq!nA>S3@fB4b|;9BtujJ<led>
zw%{WS*N*GY>CeBuXYb^$e&l|n6u?)|YovWSIG9Jp3!d+HBl^CNOOun6>+9>#s1yJb
zLTuZ;tnxrP)Z%=#09>Cx0CzytD-64EM5Z8IOgo<60H?sDNUG{Y2%k06bY}b{B?>Lc
zPI3_jlePrrsh7&yUw`fD0B&=79lH?0fSpA$h!J{zt_MgdvY)UZNgbmbD#-r(nBmg8
zcFE`I-+C*AJpdJW3_x0D^<_f7##3nlu-e{D&sXm9#N>NFEaRqmp6_KQW<8?7%Pzo6
z5eU1&X16!+yRPd}o#B8O9PqfFrY5)Le9<$2OWOJR<m^re0l^~xP-BMxFQ|z=NW%BO
zz!cH_C>gW+^=3GMm&N1x64bybWB2cQe7Ds;K6FDp=52NcDgmQ`a6|y-Hjzn;RZr$B
z_Vz_Kr9Ey+%hOb%Q{JK#xDKwMXWk~}>dL<0vEa<1Eav$EJs%>sL6`_*1v`dv{bG*h
zNU_D|7*5+i6nT9`Ztq`z4y%|&iG{#{<&AHR7&5*7QN@eU1NxAmm)U*VSy@q;`~EqG
zf$UD}*J}O8Jk__;^UF~=-lga56_KBDx*`P`{-cQ>^zk77$b3%oUinMM?yeRV`Jt?V
z;=c7nW?GQ%Bq0$ytwI~BeuJFGZBn#heu~Rlap5ejPOuh!Td>-u)9*7nZd9|0=Vdk9
zl;4RD^=XD<zOQcL#BnN1U$k)KD#vrRY*PMc53)4<)7fiHf95<6zh~#-(?V}*5L4ET
zFw1R`k;NVFaziJL3ZJvJ9zohv)<$mpj>qCp-IH)I#9zxxbaeEiqa(nEZ9iZIX%K3?
z$KT(me!$QjH_7n1X#&?jNhpKE7vN#XR3$TgTi}~5b$GR($R($NtT49o*P;?2kA2;`
z@q-M10eDq?J=Xdcgz=r`2g9LJYo52D$s`1(&*bvIbv;Z6Z_G8_;xQY6&Gm2mHOveO
z3IaG>VWi&rK5vb5o&MEcgDNf@%Hg5{kI*OPIZtz+rbf0$5>cQTwM|_Wibn(L8T#u0
z7RV0e_ghPi8bSsLdN#A9JW}A&51;;e5OO(^B+H>~(1B%FvFOO>@@1MDX|Y_mww>{m
zfqNlBQ`HKh7VzG5IWLweGu>omWdZchCy4$ppnSQ-DC1IOWpEiNOuz<GC8Yf-NkBe4
z<nQ|4SIzkDn{zMGpj8?Dch@!muMz+xK`|PPC@^{jFshR?BLltX1$a4*egH5+cYuc+
zOKHdBvUaA2l5ml%>X<vVq2e!|IlN}LKq`7!9nrM7#2v?j;VXdDzwj`MRnpVbQ>sOO
zMMm%mVA`1^05cxvMz|zllx&^brY&R8TG>?MvV5;ukd?qVfEmLkv{^8C7^Bm_PD#Ll
zy!?5O$f*Ck?Wz_?^DFl0sDkl(TFs%)Ggs<0d*5i6DX=W&_5iQBrGXS-ZS%+&$a+OO
z;H7PL!7%vU!Vmk*PY0bS-r^{f-<}TEzq2e2*rzp!4bCQ^wjy#;ADQa(rn)R{QWNJg
z@nGBdt%)tqTio!rlU$ufpRNphae>z-Vuz-3quD^*08oQ>7Wk5~E-6`mVrdXv+;X}B
zNc!E%XF6efdrou#qXtIqt?N8NIdj$>8fWU4_1SuF#-1f++|1Aqh_BZP)}5CM7A(M^
z-cdN4Y@d3=N%Db++QD5lj;!0w%;jxKM7h=I{L6nWOzG=7_tzGma~k-955wY9J~EW}
zF$1j0pDkX5CtR}~u^MB-xjzMqaAisoo-n>*<`AhN=3jsw8B-1jIqLu=C{rsGt53sW
zw?Q9>2G_;P!^w=KKZn<E3v7^+sqAo2`IB^gzepHcfQ#fwIo!4!A`?3)x=4N9FMu4r
zZg+?X#u@#ZT$C=+AE3=*tKM?kfak|f99>wQbk`$P^1U0v1bzazhnAw{bDB^80NA$P
zPRsf)`svD@fXh1}P@6v^#wLeZF~ZtH_d^yy%DvCcHMm7uf(@g)fsC-BD?sy#$;;X+
zyqQ!(=gPAV2YQnD#O-1^&A!ScA5#k?ywvu5W<hY9O=2;x2C#er7*r~EWmeJvc!-XZ
z0@3g!Dz-$-kn{*IvD!&SOtp7_D=c6hVh<R^Ihy5ozX0+hsELg}+`c#RcJltB4xo@`
z7Ajs;6c$BCGH>gZ8i3qcQIY4Y=&#a_a8mUXfCh^!U=Jr0(6L<g{YhSb1?coiDGX1y
zYTJ)-c8z*LfgK>e0Il^35SI_l7t7uyj*_Dv!|nJ!<4Zp*?=sFs1?wvn&j=Ix_X0yY
z$UYd9gTb<Sq1%yzg82ZJw}r9jc{5ArHF=0OT-aGSMOnsbcsza%*mU!bHLPMcEU=tv
zQEXw4_dGtVB4pf8Q*2nv){5NFufzDEZpU&eZqBudj&rKoWi<N5O<V+dsywfKUXB}>
zicPZ68QDLMzU1+r+r%XXHY@5fJyv|_HWyliZd}B9kY3O%`!?(+tGEdiYwjzs!2zc(
zC8nFHRnbBhAp2kXn^F>H#Ck%P-^E{?xla__t>kUflTO7VwwmlMJ9i8m`)eS3>^^>L
z^TrX4tbA`BIlgK(_A=BwolcjT(=+zc`$nLrk0P*-iTxcvkMr%MH=0l_!C7_p)+2%!
zrn7XX+{04c)GjT2)Dtc0ctoaoOg2U`trqcV?BVycsHaV;Q6948%}mX(>K2mwnzi@l
zw&uvy0RXhAN@d?;vv6}c^uFjkpRZt2f28GvsI(##^?GZ#ptt??UVofhZmQ%A;x_Sn
zQV-+hL)tUrZc<;5_o}htLgA)mf#Xy0cxCg;YpoVxqMm~I?r2k)E@~1SzmE{IJqXb-
z1Sq-Jd_0A^4i!SgCqY;gZbdkIs4ap4RUozyHmm<e98=c?Fiw($WhK|+G0WjZfGzt0
zXi#QmBCaT(VZSPzT{(d9p+5HIT>ak6?JIzX{RE)XWUgVhiw1*=aJQ_6SF5WDocE;p
z+)=aG_L}XW#obTq(UU3?8pw5`k4g;Vn<cCm72OYXwgJNsykb2F$Y7kS8Mjg;L2YMj
z<hXK-`hYzXiysL#{Z4a!vyh-Hmv{q+DbKUQ6tZQ0dvTM*?Zt)z6nm$qH<q`v?p%au
zU4ZS}EQEs)ug{Mg|L}Z9y{;F4>uVs3$e?t}+HvEI0IV%Joio!hgi%J{JI4JVfPF3>
z;1Mv%urVGMEz|4vO61?BD5E?#93M&v*k$t`v+_Q`Hh;gLSC%ki2Lt9g-lL$y5{cH#
z?}hA_XDx|YjDyO+d|Fgd<Oftk&TJwQ^}Sn0jmP@wEb9qSd43N7s_luy8|e>)J^KbV
z%>p~SMi`m>9I-ph5oSfA%tIK_DUA=A<(EWCug8CmQ!V(wW@k()hd|iTc}irB4>gCd
zNy!bfcHM3e?3L0xn5mRvrvcF-Y!GiC2>Y^+X%0qn3{&rmsDd0#CsELd<3wV(XDSIR
zWG^IWd=r5q3+hSGS8=B8kS$Qa{Hp%8FlLNv8AQoZa2(l5rlYJ<U*HogzA3sl2P(0{
z{#hffuaL##P6M!~Ca#nbsY!O{eZ9VOf1W=7Snpr)d)V2jqSgboZVeJ01WlcgN!zQc
z<cn-7*rD=ub)C3>KRdJ&tc6B6zv{f3v|Bs7P8X<QksvZv+bjFz#}PoGt_1P7KGe|1
z>v&$82j=f;&0Aq5-ST~=C3lyn_uj8yV_OrfMo5^#ojDa~i@$kAq{;OueUIR0iQi^*
zJ_Y(RO@^7_<9ZA6t*%xsJJ0iKHR|`%Jc*fLsEK<22u<3R*j_qj)FNNI*qQ>BmpseO
zG(*Q@O<yNk+u*B^7Mp}|KuZhB%$&^9j_rO^qdbHzH6NiFW<}Mf)BV-=jUpCnzvuCi
zfd7FH?W*t0)VI^ShQC=mY={3Ny29P;dm}^OB;)hA&jl{sF>Q?ipoYwiDjeY@uZ#PM
z8J#rer@kjJ)_ex_C%}{wTwja351V?AbN+W?AHCx~=s*}H^SDSVldK0IcVMr(Z@GTY
zfX5M2FO28Amr_lo%m1kr)`p5?1(Mw-tV*?-&j>fxws-Vb+DGGG2B#X?>@j)$@bJJK
zWy-&$u_85JekWUAfH3Jy6<0>)IIv61R<7LpL<`O;eeBvqTUXd#xF+rndlw3Z%OG{$
z;0mp{$@YCAc0SB99Po<fFDwiU+WUHvhsfS_H;ijp_%Fym6Q01rq#VCLDk{Ad$Zo1D
zC6m%wfod0E6#?#e;!8}UV%lVTFOdK!OCFF8GJ&MU=*-Fz$>$7e!|g$B@j7^WoNeE*
z8l=mGz(xCnJ9^8p7qGj|y6Gp?LS?2^eg=8z^ZgGbgmNUj6C6DRq$IM*6_%pqRTVX>
zB#Si#z*zkYD>8Ex2%$_yRjU8K9IeTku1Lpej9kf<K$=7D_{>3QH5VA<8>0jeBsK;s
z?ly13NE9L9<&npda;zcWS2cc1aP`Q|TX=Dc1k8d4bfIdgj*C(D?Zhc|ayqZ$fUvT^
zc~hd@{6~S>qzDigv;XLm8Ju+EQ(|^p>(!}Lx=08W>}<g-?kx`|ZnX>M@24r57Uh84
zgl6FmI)ESrEop;e*fMBDc5^LO3%#oFEnkt(xRrGnJqCB%n~SOYX}}r-Grmm$-}Bs8
zavRcmL?jHp+**ci+0Md?35~8gE~)DUM*zk~LFMjklPR-{YKmPsG09}_<sU78tIg(x
zoMPLagL{_5Z}2x8VR*3Trr-umy_)jam^EhG<CP`BTG*%2CzqKgyiRuvFAI@(BMlsk
z2Xb_Eb+1E|blmC|CELr1x%50QB{zjMO3H~)c%CpeM^kL#R_hbuPxGBvzAxd|a>yel
zH4hUrY%S;eo))U#M~cn8eJ(~Ofj#cIOT=BAo#&yNsU{vPwjah}nlZ6l71pFSHvH~7
zPkY`bRT_k!8?ZyqJ$haXnp^%l=wy`sf<2Jl8i{-c=`kZaH0kPD*=Oyy5kJDsQgok9
zkRL)C5yzyT+davmfuLGX3l-|M#Y-cS;EwwehBGKbKw(6#CWL4mSw0>2N?Z$5#UvR9
zh>e+C^6L2ZyMy`~p;Mn>K)`r0kNEG9)b)&q&7=e?<Wr)-`pCip@w`IDfQ!D$e#Z4f
z`ac!+9fw{xXB%N+t=EHRdUO<^ffk4lA-B~rihM=Ik~YQ1#$c(jHXCC@g3wpX?xVTW
z74<4~lAsK(ib4;R!2gWj!_bbFB=kiiiP+fIi3Brcol1%Xmd8gISobxN>Swd`Mtav|
zB!TcCW`)su12|p0JzdG>X2RwFI2IvSq=pjzQiysda2h2}kxC1=f(OksX&WU@$2S~9
z?+)1_1g_CoMUIm&80t-dh~+Z7U~x1p0Oe$*IzC?=2Q7a=4ar1Tp|Dvvi+}>?*SR8O
zzMZ7Q428@3INUb%!R<oV$&G1H7HpsWk|P^CJ3YCX?m3*)mN}L=mfh;oG<M>!w^JBP
za?>a{*P9S4GT(OWuukL84BU7NEKxzyZHp|h+*9WhKN|*N<nVT3VWOggJslg<EBqFd
z-d5_l(6G?(%0vVAxugH(T`Itf-#nm<cR$*{&=k5bjpusYeQ*=n+yhuN{(3(CqTgtm
zJa`z*N--5b==a*#;U`@`82oOpj3YNgK;GzDXNy3+J+BrFZd4evqe`%*gyMIebAKXG
zCud;=iX7+G=k^0Ge?~%?o>}<M9ERq0TFuIRvi`KU=6AefBwU3I<bCa(S8bNGrm2?@
z?POvjlri1=g=xY(-lMJi=aWU3nY-WP4+s?$h}UYk!K}Z^#0X{r0ZU>XnkJa|U-f`l
zGXvb#lh0UQE|u49gC3cd7V^5c$GW9)qbB+3%9iWA-x{O8j;4lH`CcO{AE?)I^&v}W
z^#qE)PK~c*k^djjDPz`&THb2hmQT7f?x!1x;{6X`rNv|ii!e60&;mvyk1Hrbae*j5
z7q}Af`{M{WP@1b$WL3L8&VIhzL*$q!gV6`;eG`wc1thVu_%e>nMyKNez{(Dp(dfe>
zm^3q_IBSG5+h)JQx2g<ix;U30jTQ&#CU9_YBwo02;_Fi{OM9JrD9C#@aY=|G<xGgN
z-$~SEqe!4?2DNCY>RD`#^L6E1mNk6j1PsWm2zH5w>Vq71n-Nh^+1~09M0a53Npgi<
zm`a`<9vmtSG@+KCfa<`36~km%HVAz?iL{nY5Ny<34v|bm5u*76@RH^@!LN91Ib{J6
z<(NHX<v?P`OugciKn3Q!fCW6`J}_&KTo#_fiPD_}W^JQk`NJo;UHh^gQqUr)AD3(f
zW8l}<RMFcsAW=g1q`fu7HAUl;$LVy#GUlT}OylEm6xS?glhQM1c?<qWC8?imUxo0|
z3^|TxKS%h+g_+~=9!87&k{Jk{xvPBt#4pso@1)X3t9$us=iU>znVOp+UU8$D@V~Dd
z!$QC*V`#J6m~jC^RLE4hjQe(YQ(mSAkHJ(}PcC!+_62Ne8kP?cU5qSr9Kv6<5Qu*e
zJ-=7hyLD)d2shwkr26N${Ep8V!SyeS6^uiD8VivCyz5@E4aPV87z65f=WkKmIcR;1
zA>KEFq_GiT++f*YJiXz4?7fU+OifWQ%%&7y#;#fdKgLb5c2KnELfgago-XW@bfPii
z9(IWMk)j?({5%O$7bAJ5&_`W0mO5s|hhPDwgALC8Hk>e`nnE1gZF-54yc-iFBAibb
zra7Jv>CY$4Mq!M|P|gH#kkIUun^YJx8#^@X`9Y0y7?z15p5LV;(FQy55$52sUD#|r
zy=T74Hqc^dPbT&-Ix}N_Lb3?YOB<tSG5NCKkpVW}GUww=JEg{A<{n*S8NTlTB}Fwt
zN-D}91=M3Qyh+kaUf^LpN}z6nsqe%5!TVX|=s319Xolz(DYUtkHO44mROeaHPH}AF
zHae_RFHqWLbS(~^$+uBpY>K!)Eu0XJ?}i0W0ETtNlx&P;HbXngbgb;wK@=e3IP?QD
zDOM9LSCs)hN)x{?vo6y@b9onDB$plDC?9xMitPL7uBZZBZtIpC?gE6uYtheS>6CJo
zWJ6cLzLF3NDG<FGh@w4`KgAgm7SVpXeL0yiXSUUB+rn#IJ`HYV(SxO>D*X6JrQ=QZ
zlDq1cvOfLC_`Kd**CkK4%^y=lypP_*4MNX}Hth(U&Zmhl@7M7ptmWy(I%|XLUeFe9
zpwg|;;y$=F{(?C(yrLfQXga<uQk-a75}ytz!!{C$!-hHMjbDIDg@+~`Oi76zb!eFN
z8D(&_M|BfCyx2iDg0nMjY9h7^BO+!h*p)RX$tpd1H{EN5+yxUK9o{d`A4%(HdEY;t
zGWcx#JWQtOs-~JT@cr+vqTq`QB74pQvn5TJ3_qceB}+e-6xr(>lxv)^5TYS6mf<eZ
z!`i;;NZNG$1(PNriB2gHFH3ami5-p{+h>01*IWCs^QueNgy#8F(^B|j34{u>q%`<U
z?v8VhBf0Crd60>+G@&rF=_L@mJfI{gnN9u-gn`{dE-;ZBiWO|ti32EIb0q-vxtY<v
zZ0?g|E8tqY3XSlsLsSNU>sG~uWT@im@HSIaBh0K)nCpv?P$1U!$@<>k-~Sc}8H}go
z6*IJ96QA`yD^9my!kd-{H7;e$DM#Y+R<MXI+1kIc80I6V`<xdWitVx-;A3Hq!0w)V
zWJ$Y?iy)K7lrER&ag3m*WVut2p6^m2;dVV&Ws%dY^BM`m#U;Q%BDzjuU?$rW2QH3D
z;_Nktk+}$s2BpANrOH_=A_qs_o)l&P_;CF#CK5+xh<uD`%d_F!myiXnsNhu~Qr{e`
z(P*AS-vty(rkGhbhYXyUZ$*<xUwsIvHB$phVqzLBCZ26)fM)o#$24MmOr&j>VIhs2
z^o0r3K1xZ>9_nP0?GB9XDNj|aJNY@P=RUk6wj}m0QF6gmSf*VUOqu?3Hz*fhF+5<C
zWcUawF20=38*aF#UhFPihh0Nu9y1Z6nelFe)Sk&ZXB5?;NX=MdVwuS7vgF3L5G`b%
z8aJE^ZeVaW#OH!w&Rtk512+NeEepl3SLk67-$DwPHxsm#|2Fd`uN+?64MFv5KQ`L%
z9FgE-_od*V-nz%@c!@UZ`z~RFo1XnIx~uw~=9>gxZ_~$pAdkG#S2X$E`wFPi@lkp=
z#v?VuY2lOoq9OktWxowrav$fEWJ3XcrN*!6Gy(6My|bICCu2_*d(V9DwD4rqvGb`D
z7fP7lYwVAd*8>5{%8*r4c{P_VifXnm?T9qWHH17g2eWf$3q57;AI9P%abq-e(A}@L
z=&WF#!ulUgPG{@8p5Z433^S$q0zb5;46m@deSX!s9j~aJ;3ehk%<wqp1Y3W;nJy_-
zf(TZ_I3XSObuL|@HcR+pFw#X`leGGKR-7Wn+wwT9#5@k|eHW+^lV)^||LK=_cZRs+
z@7Hiz#^0!p9;WwNwBMkA%<{bJF(N8yy8Wd^eeVN*{t&uE7GjpODxj~ydejXwxjDC4
zyN&f{CFUE#&p``Gv<G!!ZKpdg(UH)$hyI^Xhc8wxT2x;egD0C<ZQ$O=2I4j+`^g4f
zKw>kn1BD#M6=Xwo<Mch7g@5*`(F3#fB^&|y6gskN^cITN4Z_kBT9Ionr03(xUJ3XV
z^Cuk{0jdcp^<7afBO?Nr=t>>75avVyxgdacP5rJXJy(V-$(RRnWb2J=LKW1}2N+3)
zHSjp#W_~6bG|0VURW0Zi_Le~R6>#s0BN&z5N##*^<|9X`=W6GdY-MR%F3rbSZtx{>
zL;_Xgct%EH6-h6MWn$(38al+kNVi-lxg(I)4vi-X{_`VvU?iS!CL?hDrK)kdA1iD(
zhKJ5!Pmx!0A!azIEWe8?W3P{bc+8>U10>WJA1-QAIDyH@Vc;`-z&Rt4<(X(>b*lip
z*8^WB7FU*-CMXk{3>P05<dQ955HyaO^b{F1C&nh1`N9usR7w75KP;zl4HIb1sn-uH
z2~gtJ627n8y~_Ij;Q`s0v=6X(<TQl-T?yZ&-w-E&N#N4!gc?)(Hj^xZ*V5lI#09fN
zF+p3>u6T*q?EMbd)~;BPIlgU3pWx2=-53-nujb65mjPA`1RTprnY8{CyQ()YTFOHc
z%=Q6L^udsvCRYaOAU@vHq@P5zLx<!hVl4!n8I^_|ucWT)2CI+>BS0}&oHgm#(mQ(@
zh)XkRJ5sDYb}D#GjuuZ3LBfIq>o8mO&FuLIR8Fw=4ci(!&Z$)1hHm3!=$ui;T9(p}
z&rx%aC2!}%;3_Rsel;~U&GiQP*(rh-dMMAEC$o8o7(wNP%MC<ie{b0vL3U#7)?qP*
zcmESm2j>2f*kyw>yrljDjXC0SdZVPC5N-UIjW5zGU}8aYdIB4wBYsq%Z<EK-*2->M
z2Hi1Usp}0d8}4S@kd%9@SI5$8rf$Jjx_0>dz^F@jc>8iLWU_;tISK!?!yWv*e<9vn
z$r1Ln&5V!J?V#qcJ-_ZNVRC5Vl~x7s2hcCg;Lm$Y^mKO=aPe8|xvEuP-14&+K8Z0{
zd34Bq7SNSi+Agecwzaxn&l91>q=phZIqfBKXVm?al;rO@KoWdY>e0ocs(~ut6|~07
z({eGq7qF?zV>Rb`h8S0v{%!|#XR1!Oo+(~ujJ`bmnkq-2ZVO{(?!|p55XB)#-&Tgt
zgX{sisVpJmvx^in^;;#z%A!%pU3hJ-Y;UF{A#n~i2xQ4@B=^TSTw|b*^8{6#FU=ng
zGVz}hhnJ$Mfj<(_zW}H)7yJNU=UtIXFfp@XuLE{0FC$hrih1u(4^cJf#yw1FYPI*N
za&Rh_wz96J-LcAPGaZ+K{Js+cV!U$I$*0~_h~6kN`j7{W{D56Iz^;>H9h_ysgOGeQ
zGuu>ZcYG5z73tOZwwc32#2FQ)9gg4>`hnA$y08tC9|e#|rziL-u6)z2B@VG|h6}Vf
zYnbCb0h7~hki#!vZ5nJ56Iu@XA6B8WsJPq(z!TnLjVB4@(+a{v3dp-9gOe><DQsXT
zZ0Jd56+V;9BS<0ptBqR(QY}0RPx+!#z_G}}S}b*}Gl5wT)8FJue)eZ)Mzh>We1Umo
z4355sER@xS7hsf8yO;$?&?6yQpb{T5Z;FfnE4`cAQ21FzeGjw59YsQaOFC<iiW{P(
zfOv5b5e&&ae1QwCY6{?pUZFY*%z{%Q<r*bp9~Fy+n`KvigeElAj<pR2wsa+moDX>=
z#;2PCmAjl0y^lu>HPr%9ikSPr@#is5<IUJd5lq%50|=6g(WMVnqjUnsf+Uha=ZRz@
zAHfW@NY?`aOG0^mVUAH8a=}FmK;ilf21Uwu4F`5iuJ4f{^+}mDwe1nolQDIRXgOG|
zPwhO8EQ^IB1+_#GSYTPB#d;RKY_9jBU&gi6S)7_j==l(yVh?F9rbHZxMFF78eb%sQ
z`H&G0APg`FU013;o~0hC9;LlIzhfh1roD_0B4wxb{T;WXdvfnCVpDOu31l1NwqQ#|
zwfg9JF-mLr&uxeNuYgy!-9~LuMENYSu@|qHbYG|h0u8`EV{yyCZ4mSZ2}@wnj}64+
z#$w~JLwR0VN=pyoGr5`wXcUnM41x1<hb84MDr{9Ui-(V2Fp1Zo(9}XY4IQstlOc^L
zl=+mGM1MyHLNN!OP}>D1bgaF~m<<wyN#3)y*h&d#@(Y#6j|*~EG7yl-Bd?lfXC50F
z?M6V-;!O7zT%PRcdh8{(Q(k4OsbiZl1TMvz5a9X-^k<d*azGL8>RH4zEAQG6!7LQ7
z`wjN{vFrVQdI3XNEbN;X<U4Xe6)rG@E-B+5SprR>d*&*di(7>l42OZ0Ghl37v0OcA
z6M#qqBTjrp!VF0wKynhEiy-$Eh!*Ij=o=&$#W%NcSxSUp<o8(ruE&+3LpXsZ@+?T(
z`E5J!Z(Kia5$l-mAt-@Lzq4D&W~XRFDCf#lrcubK6v@xGM20_6CnAMlAth^Tamlz0
z+plxj`4t!3$MwEM0yj`4iGf^@6EMfIc#`^!2lYtd_$QwfIgP^F%`&x{{(-lsgLks#
zGo%lqk9UBzPP7t%!z!otK0AdJ0-g0Rc^;8pLYgg-EhRRT*DA>t(cpU(mtzr{GzpMY
zEgJ)37x(2xk*Uy*3NQp}i8c@!2u^gK7hF(Kv2s+BQ>W3e&8IA2FO1kTVG5y!RY6N5
zB?=OfgtIv?JCe+z(x*Cz1{)3FxO1qd>0eAN!HxF+);C|1S&%v}m7xF{SH&2Ji>vx_
znhht~wc_)P^E)6*F(;#@H<z~8#BY=bQ4*{l=M@9y3Q5t(EN(E17%Yc}+z$hy9Qi#k
z=OJ<JzHdCWXo9)<Nu07AbNNoA<lvoFy(1!Fn65``w1EKK{i3?Hp<$3DW0A4)=qaW+
z02d#!8#rPp4V=niL&=;6@_erAj4OthLv_PfDw>-~^3T4|O~A0^cDWciPVFAdSznjp
z_Uqvh`2;s71zO8-76#_?a?bI^Y_p0}^zurG;_6ihE<%T}oi+^Q<pNls^V<b0Eu5Oo
zNOcDPGQ_L}3dUV1;W%{C3lw5lf8h*=vf+*0FRKvB`p5>nRwZ*VFUh5oNlO4w$|l*2
zR8YDd@`EU>85J~h&%zsz$%EjI@ri^B+qkFPXEjxIH2BuWuh<2!dV)PHZ!##%w?AW<
z`cg|9S7%3*ZFQvTA&Z2aKA|OQF)%AC&Rg>MGW+`q59Aw3Xd%7R-to#TvRy2n9czOO
z(p$CkC__Bf4HjlCo}GHH=I*cEAXvaefm;=~8F&lzGtvu~?7Q|y`o5AL!yh|_`(WP3
zs7!|+@ODk)mJ0K{2Q#7Bb}}inv3t}OvcphD_QN6Utxpu^SQ+HHk%6ifdnJjuke^+o
zg|ev9W7%^xd(!6-j>tV^hT|l{Ne?S2$_<poz3`@JgfbzeZJ}%j5Q+?UHv5=3TUg00
z-|?7djivaKfc@k-O<4j;$AnOsITQ1$KO-^;S~PBfmYJ1+9twD-iHx!#ZI{rJ<&0Q|
z_xP#=>XSeNjW>D$oK!$8Qaq7E)rmtI!UdTIgYb*ew}z@gQo{$jeq0;Ppx(UE*Q+ed
zGMT=D^{##)`Mln;!IM=DXId(%-f0+bzCnw?S?g_0NF|Y4>>;ArN#o4q=$LZGUuykf
z@N^=YwZ^hMtv?PWCc!-K$0#$2WAJ&?Xbi%_95ElM?9;}u8o|TFf7$o$6J)`n(*N;p
zdil{ac^O1!m^wnzBDamleOc66Qbb4Cmvj~$xUPq>?LLQpi;<st(lVgMq6O;K&DuvQ
zOP9f<X@os%vYI=#+<xFoe6h62fROMy^5Spsfr4OAYg_M$(gL@JkBQ4{-G6fBx-Ht{
zLp6{-7Z4!&t3X>X^H1xrOmACgffMWpI`)IqY3*H#_C5zl(lkb^GLEfJ2#+k>Q@|74
z>Ic4EJ2{uH?uSKa-b0cq*;mTcAu4yJ%i~eMZAQ<_&zBRCwH{kSeY=uJr4aEL{bXm^
z8a2$R=m~;FK-U_QUm-;xwZuc2-HghJobtPH;G`O$m5d(%8gK|QO7ct2jR;^dWD@??
zOS}amj%w3>BopY=?2arXtr5K&wy|sWZd%0l`9!ydOZ-{iDv=?%AD7A;F9qU$xncO6
zE+w~3R&^Mw-`UemM}a$b?2s?~R73{>*`8`6Yv?Fjwz{)ApGg!aiL&gmJ|vZ>tpZB{
z`b4xJ_rZ=#Q3~1#l@gu6jfEBE_5^Bh7sL(LUQG8cW5|u1>N!#C_eg6NM)f`%iwhYp
z${cBj)hH@wPn?4lU>F^WRU`=$ErZ1opDGBW)lQTpW(_2#Ah*u@y(^54)-Yr6WIp4N
zDN~pffpXwJwx}FxnOv!9A{^g{mGsnb6qsEy7@!!q?N<pH`iAhvT*l2VGN~aYBDB^c
z%$FgL^15c87h6poPa&59)MMU4A)O&pki&W-VyifnwU`*fm84ApDzaJbMPatjVMM(P
zB%#4_>_$gEq{n6{H>448{*v^Ku`oCPV^_fjB5TDn<2N0=7ujUs_4ga+$Cj;@Zrf$s
zovK#|)F%k3_6_#3jeOb>o!1L~|D1yv%g1c{6MBr$`Z=ujX3q>8iDDyy)t?PU4bZzy
zJ3P5rV%11bO0jJ@eeL##B+A-&+ECp0#<_cpQGU}uJa0MqO`-dVFWcA+58N{d`oQYn
zA~vo`jSv7JFJ8UTlVof=vvD^-z%}=+t|_)+;B-lD``aWif*aMhDwnJ8KZYHwCwC49
z1Km(tj}slG$m&}W2uY7`PnP!<GK$7*QFw4@K{R81O?+a0uA#6~oZZHEyS{MUqrNq*
z{U8el+JyZ8_fe1wo;@s>4^AF?E;21Et`uXAk3t?MqKIyLbwk%d1%bK2G=?4pn?R_N
z>;rcsjZwy~BZ|yKHD9fFCe2k#GzloyeE{O3qpimVx@Hinj|abit=B?cuo?>xJ)q46
ziUwt7z*|I4=iA4em&P9($L+)3b#OjJi?8W^(t@USg@-IY$A{I4K*oc$&*0hMTOA{%
zp@;JxJp`CJ#btJqjg&zB*0(9GuSLqTaghk`>VLmK<KcE^XhBQChcnHQ?~O^dL?krp
z8X@%ObEd?BV>S2WN6iStKyr_Q1hAl@T#D;wMF-)8UoX$`J72FK))ULiVOHGC5UkH^
z@sBwrD(>8mS-!P<VA4Sv_qHcVSHQOBaj5X!^?PTNM-iMiMqqfgP2>NPXD38K<!gq>
ziB1!Nr6B4;*u{`vnufLwOo#44fA5V&hx|lxr+X9s=xd{U5@8agB29uaFb<9cx1#{1
zy4;HsdF!|&Qs@H*UOZpL>1&)LFVF|<$mZq6gJhor@mmQGUZT(CYY)DlLpD<5J&pIv
z#bKivnlAn<EN7%i>4yIyJ;W19suh$B8E4!-3GpY+j-W995ehGd9UD*N2$_^ddJ$RF
zya$}Hricc7D$EmK`)W)L<h6s^cp`$gFD45s%Wv-#mJ!RhFROu_e2ILi&q^RZD>;po
z$XuwS_S0CD!!x;v=O3~LSUkTNimhxRHkK?cuaB(lHr`jvf#B}13zIQla5>upa175U
zpkA^O)4<3}NbYdSytoe-9u#wm?zE+_CA@X%i$ep%oec(dBx*fH5bR8to5~p-ukm6C
zaV%J3MT#nt0gv!dy)cH8KR|Kmm;sH-goorsVVs1~bGTfzVS}KSe+AV9X_~GxWPPx0
zfITP`7Ec>{%4+mGV6OA`7I}}iKvj2S%c=q2dHH{-J9*N8&@f+*&@^I3?aaG$$yspK
zGovXw0VcsJ@In2E{2~zcLlJFiI8a&ZxNk!Ukh+XGrf@cOsgez}jr>4GFIARIm4-M2
znM?`BPhigdaCQ#XMl_~N;ZrojdX2+*S^ZaKbQB6usH~~t;Pv$A05n!nxSNP>$&dyd
zvXaV1*3=n9Q)Fw}PO2h12d)9lnCuE$$-Pt}Uw#n(iuWu3W?8VN43w*>z~!8yAoKgb
zX&)&OuvNPVQ&^7EWseId!wH0wWMc`UL>&*2!8>7y)`)s~H4do0cZ1i>aZ)J)4y+%<
zqC$nHoMftq0Ox=hPNtT$Mgi<ua)S5Hb#jY*ixU-4i)Ly80iW||`8>Qus@7OT5IY@t
zz9VEw{z6R5FnUX6N4ZQ7u+o$Cp9HUDAP-;y@x6Rgsv(Y2?`)uMBT3S3#6P{#>Fea>
zXvk7N-M)dXi)|K9itPNPU);aTL4%qCkTd^o@q|ezhcZ0gM{Y=o7_WkLo2<d8U_Q|;
zq8%=Sy<6|9z1Q71ssm<ib5WXgua-iR7y|tDa4eQGC+?;YC9!C;^qG&sqoXtxnbj?-
zH)`S(c_gI}m6xO-)^K2Hpn{^^Fluh|R3*$!9FyDdppAk6^NCiF%iP`x)4O7-()9D6
zK?%fMl&((GaFml$NYgn*4O~P?h_QR1sg&rRWPOgPxSx}KT-AA`EBP;%in~-C1jxkc
zQYc8$(3L$o_<{86n&yl#$NK+(eo|^+L~D5a(|vmuhHL$!%EW)&xqXh#0b<*bh#l7z
zT_pAv8mC`egcSpSLY+6c8IulNOd-kg;5)86F8lyh4}^}O5#A0}8hXXau)g;qzi!jO
zc*igp1VTNGCJd>HH%B@FQ#@caZQ-r<hl?4kR%z88pteo(KkI<>hl#&Vt%ILDtfKGX
zWg@Pa2Qyl^k|1NPk<-Ca48};{IllsGg~w*p>z~jmSj9@GFG8KP=>s&Ms;IwnG&4t4
z-tZFTIw*)qOrXW>xW__nI31<RY@$s_!e2XARq8#0GN>N2scHqz(V#p$^LWK2*pvUm
z07VIXmjD7kA5A1J(6<;Q4ssBvniqeYHVjP|Wi}q}y;Z7lE`*{?6FM^7OW=kg{1k#j
z7CVcZ#$v^FX~Kh!M{J5;Rk|?3mFFw7k&GvRZ#U;H(a>_&oCIg{>x;@n+!YGtt_$5N
zob&|4%XJDQUZ9yqVUDs@XYGY2JK_>CX)C^lk|HO;fIm5|5}J<MgL4YZ!AbmSTt>=q
z3SQ{=j~1ZlKE(^|9XdNNPw{+H#^!!vEoTwmHW(c}W~<<)0V)`a7h^QZCbl<ua+D-S
ztgI&oEwIMAb6J{JuCe;xJ#}^nIe-Gj5)`s?16UTd39!Pr`y@3x7Zu1ZS5I5H0iOYZ
zhey=|jt82LY#ll<D5nwJvek(0h*EUL+{B;@zr+kh<#>bjgB|^UV6keb-mwS~4PI5m
z@HYIr_3~`PkkQ>4au>YtNSdcaWaq(6cKa(OZK!4ARW~-g`Zd~0*F;pqVEIDVddo60
zF#th@q8?=?{ZH?+Km#7dp22&c>{}J1P>0J~=C@+w)IAnPZG*0mUy0Z~ETcG}M(~EC
z;PxD>{V2a{lC*FqHRx&Xl-F=|kpP$@xDRVB@ckFG{|jHcaD$;Z;F+Wk$iY_qcZmE~
z<XyP_;(B;a^8drR{>xH92-$)ga6mgQGweUV|IZH|JOH4EkI+t0_P;)=>F)vh5joNS
z!cqSwzwzS&>;c3Ies0<S_dir1^rF3#`m%PKM5*fkFpvKvp1?S9p&7>;jV^Zfe_H!r
z_%R?MsX>*+dRH1O2>sK214w4^K$a=>RGy=59lw2l5Vuj1=;uHd4KCOp`4*JD!!eAJ
zZ5NE3b(mnUM8rYxXh{tKvhAsjXlno0UD$ww`Dhc%%YXYPAWC3bK|*AcOI=Q_YgBW=
zPD_#PuNN(TTCPjwsz3cB1`pi4t5zL425KCbP#6%@s$gvBVpX3XkKv!5$A1^S>Qp^+
zR`Y3mX}O5^&mmn?JXjxvdeCD#CS*??kyfo-#ImaOqqb0KeEJ?Wj61}RjC;a1;+e~o
z(?SF^h2SY3UvqDmde2v9NpJPLX^a8Fi?x`Q@XxqAD+6W)5_lhV-*QV}fjYQ;^W?de
z>p+I*6gp7j#UWRsh0>g0=fQ;R^?LFo;%rUYckW>8SmtEhb{U?fwxjyR*Xnh&zy2t`
zci;CbcVGcBZgSNuKIW?B?)mz9YWmJZOxj1sBEdOtLv%Vg5$PfD^sqNmmqn;1gYQL0
z?*jWvQm47bAZ5had=1kC@C6{a0m}sFQDQ!J&p*bG%s*Xb&d=Ey6gyC!xe7MuB-BDd
zc};A2eP8mzP2q}QvU1&R5z1<Yk(Kthxj6oa{nO%72w=x6H9nRLBZosZB6iBl`7LL5
zJJV;u;U$kZ*JBc(S$j|B9=n@0LS&=%@98rKcO85VrvbDY1U2-q->c#5-dn8BF0+mv
zD!wzoRM8@SXQi$qiJ=+A1Yf4B&}Hquw2t4{7|Cu`8O}HS1n&0XCc{y5%rN-<;D(#t
z{b1lfL#L=EPX-kn{!><iB+_a`_l&@Q5S;-o%}>9PZtIFLHF4&509b~y28cq%j+~?T
z53-E3+XKUvpE%EEOwIx&i6NVY6j83toBcEn5~a`ohpl%GuWaeozGFKbcGR(Lr(@f;
zZL?!^?4)Dcwr$(C^{suLXP>>#^?v`(mDE}_t7=ruF~{$|<pGP*Qt*G*PaK9nIhFHN
zrH;#6aES`7<|uy?dFuDwwV`-6YVYpQd;h*!i1Xj9dcUho>2xdcD>z_gXo51?(5GD5
z7}Qt3QR-r?*XO%z<gPZrS}u)OsJC!dL)YRVEQu&z%jZIDRWyavxM?!4^;gp>wO4xW
zc~-6@8LeX^Q4-BU;>NeVF>rYPzR<E2aRxYC1cd@YWRLs|80#Re{tO&_VH)lHsCEGE
z|JXjylo{W!lscUL?8L*gBB&bYvT0uvrRS8l%r0(|E0<VrlQXuI|1Y=6`2z$!voVD(
ziNZSXqF)iMQX74<y4>YK(^%J?C$+=d9sHBGt-uyE$23^4U~b+x)!WeU&ha9cgJo<f
zM4~L<AgOch!nK7bX(iHlC~_eDVG2+BzHpLE1F7r7Jmb=RVeC-(<NfD|DcSy|v)JTh
z-fWX`XAd<<#aDY;VjU$$r_SesXd<j&4rLQr$GY-^!pIPS73L%MT*`A4xyo$eaoP&R
zjndIX_AmUtq%y8nB%$%$zNnOTqWnMWh(B4ddw1@g&Z;^3s}UWn8FkgNi3}8;z1&q>
zZ?2Vp#}v&`6EhpL$+LYE&LNmIT}$|3W#VY^TfQ)b#)^xf<E4&5+admU-Ao0}v*C<b
z)Z0NLPev1E+7yk~gC%7?|KDqwgH~W4t!oE8)J4=<9~L8I0N$O4z;OuL-4l1w@%}M2
za9677C9WSUHe4M_XlGxv#WQ^^5ao$guo(G&qv=H`KhH{yo2+IF;!Yka&>7ii@XF}O
z<P@g~n&}T>6dyr@VLa1n*3eWd&HIf5o$t%{ZZm64W2UC=vo*`mq9Ay#*aQBxAwfi~
z^m#Rlkla~L)X!TL&wzo)uY5?@h;#M$?vNv(8O2`@zr?n$GL#D}z#rDe3i@~K{li4?
z+icTt*$#K<0uD1&2j9AN>_8iryuP`0?aH}GU?neIzlj{Q4mIb>Y*#S0yL7vd29M1>
z-mE%ZN(!G6<o{JvfPvz#&SS3qyiytd8An2~CN*HfGdgJ~{&t8%q*p=LypB^^x6;Ic
z0emk(53=fq3Ty_8ZBH0C$Nu*Y@s}Qj7!b(Mt-WZdIy~b&`@DjHk#HavYwOnBx@8)J
z;_OwMof5WxZ4#7VrxmQHUyYO~@bdt{=<}o<w3vDWY($BPk@~FWyA2jX)1wd~=(GHy
zW3o{Ljt)Tu+rR1Le`I51z%&dgiSR29m?>~9$CfH7bQM(;RZuH$TD(`xSG?<95yo*-
zF8B7jQxZ>(toO>H&=mjP+pvZHY%({0+6MkSO;rP%FD1=!6WN)E_z#OLUk_`nt5Rz<
znnCfEdWVmL)_@jU?Odx=$XDm8a+T-8ej2brhq>WfKedPYB4nhz_rF1<l>lTi@q!l0
zAH5}>2+6unyW~emUJ;J_Gp%}VRTA=(9Q*!*TUp>jd{?U1)X@|5YV~k!;*MjV77qBC
z!;P8nNw}}?%@xK`huh__<CksMm*Cr`%VlMJz0gwIV9|e%PAf>q675BG3sHwn=3uLq
zz@TFYm4$OI+))mTkKW0{aXIJB;xn-!jq8nm%^`&7mUN}GY3!D}+S%)9Fu`8D_+&+K
zWHqj2_y9@F8+TS^+g8&>o`?u^S#GP{>&-sR%qzL#$!K0Em~jLYK4)_n9u?%DJ5Xf(
ztR&y=$}iU`7&mL}CPVWnR*9f%NH#6tRlb{Pu20sVKN0sBucq2B8>8%!qV1Y@J)_2r
zAVd>~cYt^HqVV0${yx8j;OU7Ml^0sOpZ&wjfLp^;L3?R)O#`TUG8w>*)B>{IjV(bo
zl9Hs)auKb=s)i-|rJ1NEE)Sm;ra~}Xc-a(ozq;APhU{L3A6te-r83<IhsT}bpSRLk
zEDSv$xh{?do665__f+I6`))?4EA{x|-D5W$n_?yQYuAt%^&U(&`^`hS`m_al>S6r+
z<agu|y3WzTci5STDXJmVd^AS+@7WMytUUQ4F{Dku8zim3_5)1o#AaK)G&5WzU2Jmn
zCp1rYExQobKe6Sma^#@0gA|kc8~0S^J!`>%k&1Jc&cLm2gV%JBN0Qd^M`H-k(@EYW
zNG4KP*HetFmesNw+d-6QRZo@8=rQx<m^HYx6x949D7PC0j?WwB{$K)!HTF<i?#Av1
zLABsuIU1n=Gm^UJ5gabmMUX_beZ0QqQ{<Wu4<J|T93AVwLem}rl6qrfV+X>~OsDPb
z?Eo5ifMOkn;WY`sHGW31ZFV!boG$~=xsc0WI%PeZ<!CoU((BsDF=Kc8uClq7Aq}1z
zn`(<TaZOo^5KlDAu8*xNwja-nEVepKFUuo#9>ra;VMD<F?q_SKPn}hj<<N-72OFM4
z_dFp5rUh*$Qx_h`Zn+jeMZ_8f`QuWWxUX;CPwx;W#P?9g?6rajS(`oW-PxHYGWEUv
zT3C`7#M`tR1X41nHgr{&p1s<d9}{D!nC3Q)@ROMS6eR~?k9%3hl_LtSl~z_Bst&f-
z*E8D_S5L$y^bd|DrKVEcEER1Df58y&%cFHTI68j#bODz}1fb~FoM81t>a5*|m4i6|
zmpB~^3=A;um6w-4?^>#bD~*nhYHTdUv&DA=qaIsz0&wPSsX<E%3w|{iavCf)TQ;j^
z&!<bM(4vk|u;f(=YHH#*H3sNjr?T2wMlP;3Udk~dl!4gTSp684S;BAjC_zg7xKx4&
z1xG9O=BQWLwi!Xvix#E$5~p9B68TLR{(b?Oa!Pr2qzH<0WnO^H4B(-Vr338Bvkr^&
z8zcP*06*U9pSCJaf}uZ_0$9}l2&C=+$ib3t01D?(Q?#`DwIk<~(doSR(?v_E%094s
zl&+!@`)3=Lz^2yj+S3O&?+<g?=zRBXO^>)e2P;i+8aMQBzPG{J`W&^La_Q3IGAwsJ
zUEd=fs!Y9b$W2c*N$aw<YXmJY1C`-5=HJegt^}-01|{h^Et<Od5`0rv$2?6u8yQ>W
zF5wR*mTREXLUudN3}+hpx&EE%(!_Ta?)AYod0xt+!|I_>&ZX7#yb=ooFLsW=8(_jR
z8P>Zm>M(p!czX>%osA0JKiwSg)^P!}9B9*L5j)$QBLI9rDI(Y=pE-nUm?o(xEiOL(
zi!27<ZpQgiva$eT`+~0Xc{kH#Ra}F+Cap%=YhNXR?T2BIaBXhxZk!}77QliJU`i#J
z5e1(7b2$%f1Rb5WWI%ca-}n6n0PLcd0v9|lRQWgq+&u%WPZQbX6MqbsYc!k!aAZCC
zIP?faToRg7fV(3&XWC64B44}J3ZvONp6B^Z2;X~-?N%oO_d$~GNTT`pqvkrk*L4ri
zjOFok4zWLGa!{|n#Jt`<cR@pyZda#nm(Sx%Ad$Q$@owXgRTgO=C|JI)o}I@<!;(le
z&PW@aYw~WDPRHx#+tptf+c2N-CxA6=0>Hv+bu>ME05Tc?D+7uZ^Q;?J4gr+Uip!d{
zu+*+TuLyUjbQ&{7m(Oy1wPX@?%jfHvys@^^j4&8ObwuE)PN&xkz(G<)LqlRP7;&pt
zMbRil34p-Dw%d@9knDQ_N+18A!Q-$`XH6M7%<;0Z)ftVdQ63dkDvBKtx)`nG+L5;Y
zxZ|8__yn+X<TF^Dd(>0WT$h+dMrQ!=;56_-`&a(fGysylI54MH%nnsz%wQ0^%9h;z
z@^D(!aWZkXDvRYjiW{;yL)IpnUC!%M)z#km9(I*whHRgFF7sAiE1PvR3ENuqvhn^l
z^@fI-ZMUM%)uiI9vQ;ErRvnd}#GQP@fDlVv5vld1#K8F=C~Arc&dO*&5SZJ+)tdD>
zOi~KrTTzX-RQu5LrbBbKwBfn)ypFF54&Y|I^lY!f-dO*f##^Oiz{Zf7IFMY9FpcSC
zD7P$CJ4K!sxH%>-s6c8pWiELS^*A@EV2I<aSkg}+$YM>I*=75@o&fX;Cb{pVmLZ6?
z015zZdr@ov!?v&UxuO`N&`h<zviiM)L+t(d$}0dYmd&6asx2ipc06T2l8@J=3Hf*)
zfno+=xAwFhh}g^YN5Ho0gEhf;`1cP;96LYIa2f5{eiNPF>TNDGII-d~0AQs8V@lg~
zBQfYt41k@%=)VErCL(2{PEG&^1>e`XY#eu_Yuu<&AF2|hmmp|VkB3uXyPb0Oa|4u$
zzM=KWY`!l5(EbS^Y-<5dg()yBvQdb!%Nr=BwI6YUNP488?Qmj}$+W_T@Y$r<389pF
zpJ5>9rDc@{{<|}x_~7o-c>sC4-uAAS!}PANkE`hes><d765c~0Rb6iuU@Y&j5HW%+
zfNf&_TC5I~Y`~r5>@)Z6Fwqp>mzR$ZFYjXnT)Ae`B>->#*o~k=+WU(X6Yh>KZB9kx
zzMmE(M?m1%M^gK=ZrT{cxoSPDB+~W_65o@NqswMKIQfPpKaHv(Ezgb`QgWaDj^{Ye
z0Ez2_M6KQ$>UK+QSp+DHxTQ%vS*asy`B^1^@&>4$1grp2IDpo|i;P4ohm1vbgOy4#
z=l)pz;vYl!L?cZLawJZ}d#tDEE{sLqiy?E>_p9*RGzZn;2LM9Map}!J=?6fFdwyF!
z3~q-<_4xC6TSoNpIIIguW^1cnvk3nPb>6xhHz|)Sr)uOiT<?N>W&LBXyeO1Z3A@YG
z9HV-Fyqr-^1M@I>rvgb>1{<h;l4bq&QjI}JiTG8|*=%HeJ*4a(yH@aUsZ!)5>ZUF4
z#xIK)E0|ufle+>7;8h-{{KHR&(S{D;PcJr1g<fwTdXi0*b6u}eH8JY;tD6b6bkHu>
zHkvBg>uZ?jt3q7)V>pTAgZUUAciK<sd`ofFe~WY<n;mHAq7XK=Q@e@_n<=Iic}ANq
z49eLAuN^tp81R>b+~25+2&vGnI?cRd1*?m30>+CZcP39X8=y`|{geT4SF&6z&w0#w
zm<K~(M~(jccw@TX70Db~MG6Z0Wt(8yYYX)=BXS7t8t(4-ZW0MycCpkb!$cXEi3RTm
z=n$a~t%7Leb81Vjo*{L}FypDCWVkh@(JeRv7|0Yr6t`GDPi>vR)o?KK1wdjI$z-+y
z^i3pum6q<~>5epcM5!fa@#Jdee9lw#KgHXA#*7I;`K}%Tlr?Faw?PiGXDfv;XGI(f
zjB{It>>|X}j907mK_^mLNXDeMV~E=w*PHD*I5?W!CE&`(bH_x}0}$}oKFvb)quRl9
zRZM3kH$9#%qiTi%z+us8H0tekerD|wHHe1~-*JjH(YEX&#|2%?<UywHkklTj+-AUa
zwa1WU*!2RKf}Zj$yuNzbO;>czKVwp3BV@}ujuR~9#`vD+HN$e~C+M5rPulcffKUKO
z5Q_Xg-2F5lEUMZ?$*j0foh*m&I+jq9Qpz&5bR+}acQ>KvR#G?U^D~lZGKI_aGJ!%-
zYH+{A$PWszvpZ8F6h`xH;6juDHYA2>rrlLTN$e)4i%1dqkcGLk1#GZJE9!}U0`j}>
z#=u}voaxZ{F-`p4gr<vB8i=^QYs2!5p_{D&*@TpdDP)=xf%1U@T8ppreS)|^5Ye5*
zG^r7R&25CgZ=KQ3=+#_b2x@VN`;w%`yrw0ZZBUFqpdtIJAH_vwPGeX0qOv!eomLCV
zB2?SFFGH7JW#--_xA?r1=h8_o=joa2iwWP8i^BC6%3uUBwshS_Vlm6yrVG_qO_R?y
zRVBBt*)msfBaj{Jx5`M|HhpvuL1?wG+Am(>ge^hLbyQt~k8F<~Fx9tp+bHfsMh1w2
zpF4GwG&RsFi^HXs>E2?B_9vcmZ)@1bKzoMwn?|7>o`hABKaR(5hfI=?>z4K|Gcj;k
zDwxw-hrgY=R0@}Ydbhf#0{y1)dfcG+_~2MDPSh7%m(PA{zckNQ?R=1SuHv3TqyjNc
zjJ;=GG8R3OUgo31tj+p)hM%V6vg@O62_xv31Q}Y?%6eOMVm#MXzU!4fhQI3c_+zDu
zm-DJhF<k$`SUKet%n~G)$5pKBAmg$e5z0^6xM{?cnT~c)iHOB)ng9yE5bF64cVAL4
zxD9$T7QxqJQ`ZbRAkMoK5B^m<%aqAviV%puo~Hi{kO;|tk;!03ehs(=D9S(uVzF8+
zS2S(50-TX!!B!6duLIy0c>CzV&Jq-51bQH>e?C|Feo)<kVRL%H(!$!4QM$o#=*Pn1
zQl=8~L3^P}xi^J_enR4|1GFW?a1-==ej~c!%_};AYLcjmXBF22n|O4C`_*%<1_Dre
z@L8u{7z#*f6JvB;k=jAjIO-ML5`;C)Kt_Z)`hD#?$pA2n*+Osi$LC)xL=^lZ2SDqA
zxnE6p|LBPCrXMxi>lXSUKqDD1RY{G~-)rufp=sNoRXE&kt|;3F+h!EK;3&&8TE%-#
znhlu)IZj;d1Ry6N5In-cq^5&PT4Qttz(skgK$S3m)l3^;a;r;c71DAD3=BvG8wBug
zs3BR?QfmrE7*huD#ao+jjmzdDvUOFr&tnGm#8L1v0FXt=66E+)6b;8e5F>#8F6y|D
z)~ij@GyHA>b<YZj>7Sybn607b;fK|G!T=5nFPi6~*cG2uf~3Q}V@_2{DUO>$UWid&
zkzjrj@62sfj3$7l>3~9R7$+%~Nzs78<09NxJV959u;#dzE+p+B?2_u0ho7EG!SXTO
zk<t}N_Pp+al!S|dZkoxi$7Gixp1n(1W93XEyNu&E{^KBc0Fk`Jd2SFR;JHr!7);jb
zZE)IN@?34cuzUMsDQJWAeec@0d$our!)3*nPE*^U#)YbRZD55l<0_ho^Cph``zL?`
z%)9gbY&;rxvc_It18~?IwT$a@69!-E+DJ~PDOK~%3$aj5THI9B@Um$-t<v~cAIXn?
z?prSoBmEc=_#L?zCV&!3y#)N0m#?)pMD~erO5f+qJ7NbE53vA(KZGC>c1mDEN=QO-
zs!q-fXSz~th1#mB{pD|!l@Z9o;NOtMVF<+(z=$O#3G`Ezc{1NVHjl>V*WI%&vx+=D
zg0l`cWv4P*on<pQol9*Ns$?=tk0$DxR`NfOe9sS^9glTrY}1x%mg>@FpBKHdjz!PY
zSH>$l>Ye}}bD98FMQ5(zXWaPM`v^(F%gAsqZH)5pxN>3ALf7Y%>pjf{)~20^ik-3k
zx$bOT9H^E~cvZ(?^k!3g`CbB%DFWQQ*Ur80k=7i1v*;KpzoX&Ck11Q8gWdvCp!Psc
z4GTVp`SK{!rLU8u&8bfFMb__Z0C?Yh&+9a*?r}Zm<u={3)AJLh%}uw-b`2ZkiCn=8
zXuSKI=c2kPmKM#E8~92$YL2yQo;I8hHi^-cl#P^g(=|LXL)cBEDB^)1T{nE&9zfA&
zxZ#`K5DkG3c|X-982V5ROQ8e;dWy)9l7BpC|I{o58g$U_xs%H}kaIubUoiJTQgYfp
z5G<LaTw%t*%?&){zd;&AhTnLu++$?coo1Nnlqk6v5+c>qzDsTtv%)p_9#HAdR5Ev=
z%CP$vB#{jQTr2;Qn^E=jIn&&FeLv#U73N>K(H;)<PjdXF1R~d&1Rb_pCH|(C>lD{N
z)LTAw>I<l_N{?pjD^|Z>|4HCBy9qe2Uimz=O>tdu$EzU_pLe$BBLE!L0q*Ea{mV_D
zXGh>!LJJkpRM%-r?Bve;7uzDBAk0_MK-eler4dahc#_soxu7-8`EAGN=Wrm3xDDH7
zA(QdE-Wa#9ldheHh5h6}nMJq-VHNx!TNL`A)<FwCYKzL`H_t0`?IZj?e=4LNm<JQ=
zWGDQYTwh)g@O`ic)VAs%_!@1ohAgZb3w0Ii6wi{rc%E=2Ly{Jj=Bv=V%daTYoL*Qq
zdeU;#AFR_^OvqWC+v5|FgIm?T*_&%MwzC+287a8YfWz@~I%+S%>OTLp?2TUwQH5Q9
zgM3SVpizW;J>GNSy1d3k+;Xhr5zcyhatyIx(t8cw*u1_F?7A>joa+2IN6h&04?*YN
zCrhorJ+_B{fK0llF3}O-zaC#~9ehn23{Jx;u+Doy45q;ep5iSzzXg?3cSLGEZPfWB
z4#8#3^Q|s4H8%<R+<54C;$<D4Gg0x}h@~^%GF&4yqT4KZDKAT+(MpTrtXn-Ru(d3S
zxX4Q0Sm(;Cc$}a+<G;FEptE>ev`wPU{_zKI@28Sx-56^WUt9fIJ)aBiXYL|o7Uuh>
zuw>E${FGUVr`OK*gX;qY$TqL-lM09}W7+32=xXCS{oEHXS3`!QGDhfB!RP7Po7D)<
z&2TEy+L;IBbNqb2KkH=i4)mN{^2>U9h#iSRmhTH*MU|TlD}Sfc(;`#V`Jp~vu%B}0
z>||sEK>GsOk;w0MS`bk{_%~9wJ^}M+p*^x-R1e8^Aj6@07J|^E%!pxnD!kp3wt5(Z
zM71&B9z4n+n^%6+)H0dr8Ve38tPXZ7u5G6XH*hjQV1-#~1_^FTLqS<R=^-K#;Vv_+
zx>c<!ygIr7-gzREOVx9Z_ab>4uCLL$CSZ&U)T^@!ZdZa{^a5_}568{~n)>lg&je8(
z<DQ3~%!KkDBI)S>744M)A@m-thb?N<kl79h?V)=Gu13@V@E;tzdz$BFwNPLc_)Qd4
z{o(N~sl6kMUYm(^TKCU9svFN&+kG5)DC|c{XeqMF&~L+JIfJ1!tNe&cxOLPKR-`Xp
z+0C_o2`=43Xo~g%9`w{ASCo!dw7E%*d$%*dhL6<H3$4eUd6V9b)qf=+OEnBl9!kGU
zvy>FpaQo}9+GM<(a(K$@8B~ttR?LEzs}Gj&)y!8#OnW9gfD+XrV&@Hp+LBSt_IGpo
zO-i_E5$@pYiLj5f2V*J2uBV@-ucohI+|y2j`@T(WZF<LV99eT+d4~92NrT$9K3_)Y
zcAcGdc`mz}HjKYsWOjLfy<GX~eS$tjJ;*r9_5yU_QL^z=zmxaqL8No<jACQp`sxVw
z4KtqWDE8^Tj|d0yy?QUn(w(5Mu(8jt%k8bFjK7%-_$V43qN=OvGOmPN!9U?+Fg@<U
zhPZ4}-ccj!CV!U3+Tl30tgRRNdbq#2PU(6~DsNm=G^9_K9(mYE*bNbVY;o|VH>JRx
zR|^x-xj^yeFvip#Li9x)%}XZPw5j(+YqHXw;a*;RC-p<IZUpYf6V|z;P6)GPubP;Q
zpr#RGXIuaA_;)QpIqHpr_ls>oZ9x60XFW}GPh3;0iQHe0mV3v+5_qB7i8mtBfw}uP
zqtDp-pr!PZ`AWup6{3M=a0LqB9V4L64S>g8uxxwj5~_l<T?YAgVxwb=+RnRv7fx`H
zj1}GEaEFr~_u=ari1mj(r{i$dG<0K9sFbBZ)fs{Y&J9b4WUyKmRolCM<fI1T6j-q5
z2)EeEZ!*yG;fN~dZHJWrH}R&6lr(09ap4_igWl`g<gSdX)RT~x(i7k_2ZLH2Ftfm{
z_}Sd;5$G(GTyatUXHmY_*aH?zSW<cz@+{O?B@>~P<4~bhpgkG$VX0Xw?rrg^+Q{fu
zD1e-P0=sHSK`~c9PSU*tI{)nB3MB_OjgdR(;v8Z3YxYU$+|cQ$VsQs2Pm}-)azjiH
z?N>OUhJ@~A*rIm^Ls^hR2m27OBm9?WCT1Df`R6^*Q}ki<1ShNKaY+bvI`&nn?-ZBM
zUGx{nxi7-%<)5pr!?&VMw^L0QU)Xt{OWdQ*r}ih_>v>Rk>9SAOIXP)hOV6VWnO`v!
z=WY#hxw_CuISLhe1EFwWrrm6`w1=XXYmGbQt(~9x!S142wq5Rf0R@4EK<ZV5EI=1@
z+jOQ*p86|qbBO})voj0^a1(gQqRT|?2KGC{7)^Y(Z6<9p7cK{9v-e_r+n>9cnmX4v
zR%gfE({`eg8^%p`gVK@7Q?mV9uT5EFwwD`@Z-wzbEn;CdzRlUNZ^@Ht?^BRd%g*V8
zvqFZ(r3X2QUMi(7##-Pn7DRCV5R#Cm>R}>YtL8=atPS!kR==@Z$5Jr5v1^7FZiVDX
z)T>8t$!owtv|?4^#{H7{SvV?nnWxiZxY1E_+X-;DF?G7mRMi&?>RW}~CO73;Vd$+-
z{z|mXh@AsBJP;-c@h}=%O4jHTXsE_9@xYj^Rl1?k&}>F8pWZ?fL1Uq4t`vwSRO+FS
z&p9QaB8cMNA7cLC+d}kVTpy%n_OH`A_4alNL8YjXcrP;Ph6^eNZcbDMZrHDvB|__`
zGKy4aY`A7&)SfvvA2d61!kEtZj)FZ$uWY3lb*eaX$PM6&)4}<@%))|O7FM+9R#w8s
ziAZ8{&`Yj`&|C8MyZZS?E7MyXkK!B~a0c}{ZFDNm50<2TglS3Ozgc9D!uO!Fk2wuW
zY&j=7a6T`H$&=iG4d3s3xOJrRiV{T6VYazqtI~29aZ0qB)uz{5*S;0D>3VK86lQs_
zE#r!O4gT0-H+mENbnfy^ywBj8-1*`774RndEWD6|eKd03^x!i*`0!l{qGukF>MmT+
z*y1^g`V<>tl;PWz*br8Q`ZDs>_2uFB#f!GPTipY@PbpE$i-3Yub<P?_Pbk<9V*lVZ
zm3M_%1Wne@-P%gXY)n0hCx_3t#KA^tadSDS6ucv03({rM$s3EdiSO?lkNjU8s;*s6
z3ry-OH5N3P1Ct>`zwnM_OY9!aO1m+?YL=#$x3-Dr)>CjjK*dsk#!rUX6BG)B!mDes
ze#4?NU_G(4F?;usaiOzH?IA?}l>i<%z_3%j(!mN#ZQi%e*kgdR6AFG|m|D9xbCb!A
zcZ;d4B}UE$i`m!U?lL-*)dY%R--U{W!eP({=8>04_k)Ix$cu87$e+KYu4UaL?Ps!<
z;8X_>69K>Iarf9^j}o2BWm}fFJUKsiiYuY%;xvnS6zO{!Nz3a0O`N9EZ`M@e9Zm-e
zY0RrrIzN9yh6sjLj;TG~-~Ld{&=w-whz0KJ0W^PE{3lWgB8zE~9h4hfiUt=4ki&M7
z<4{Gmo07y7FPzK_k4q98SP~PM2bpWW3}_IKL0)vSjb|mU$&Soi1J2~cszPd8<2+Bn
z_J&<}L8^9WkIXZ%yQW#DB+6nngDYG@UI|AMeHC)RnMGSjP}PoOB2*{2r$K0dljU|V
zs8{4hVnX^!Dc|YmUgJ$*|09&@O9e9?dGD@dG>*Fu-<*`!$V1XPOeTq{H3)l1lPJto
zrzy;r1weI%zL1(Tz^S;`+;LRK=#wbW#;q~-x2S&oe%)jUM=i-%Fw+vl8T^yIOqCh;
zAqhdM4s<z~IWkcOvt2oA8N8Oh`m|;8rD)69;QMEb$jRr((ADR-7m;O&Z7Q8>Y9t1q
z^GooF$6dFjf(LZ4Z!&kq^~^i-<Z?*mgIn<-e4A>vsaO4%Bp`$b7C<lHt+9OUKWTq?
ze#T8of46Ba`U>`Z&FBcd(BWdeVf?yHmE5fU+CG1LO}{(~^tRr*AMK$Yp|pj2z%*%S
zJRINl-fS4d0q-OGESR$9eM-BW`Z9>s&XT3U;ygMv_NiylI~-u6_Ph@3S?bE)klJo-
zd$ls;vFLL7{aX0;O4mlQhSoX|yrPoy5)ne%RdCcf1o`P<y2Z=I(&f}7RV{TIw_hO3
z<tQr);<lGBDST&fRPp^IEbOdj=z~+K3tv1+bkU<EAP`ejlT;S3o#!?VQR2&Z!aX-R
zhk+N!Fz0Gr{r6;cqx<A454U{}I0ik;ZRZCdA#5O;{9ycYOpwAlXG-)N@1-^0ZPwH2
zmzfz{cdtP9D0-iZ6DKb{ZAB*o(Nn{c&X{@R*1M1-tMeQ%^ZNGrdVwbWuR6#kb5C?}
zDa5&wrp$8AY2!IK&4$LEYP+bARCIKsQ1GjLgCekRX4&=9Atot@+3kZZj3K;=hI6Y8
zO}{1bSyS=k3r)(ya=!(l2-NG}_wyTuQ)LnJbLd(pn53}kuVsJB5GO<<L%LYONg*zM
z_P+AWZlG>7@?>~<w0n+)MQtPY@G2{-jkuy>gi%qvkU`s*dL^!g4x@;-pFgFyzJ9bX
zC91h#JIJ>|xzt3D-ZLnkbo%9BrcebUs3=THgups<=bFvsS~<K-h;OTJqs|^bnpeTz
z*mMba)oFikiX@cSGL+X=w<aA#O_sL05@e_t)v8w(xD5*Ye6JPeV*z2twe=%`CwN>Q
z*S&T=2y8c8T&Xj1*FG=YtCzcni37(&Mq;j#5NCAUQc8-ssJ(S`co#X9>Slbd$Zj_y
zE?*THGf<G%nxc%Q2i$mt_ajE)+s|cnQv&*^qFl;>TUZoj1)0c5;z5wMBEps-;){OF
zq=Hfy5z$JZ*N7&M8xmJ7l&%boEhXPK!=|pI_NV2t*Ss^|ehA&LRjfP?<0-35_jkOZ
zv1SiPPo-hUMw@k`0pKGSM+b}=0n}{4Co69l-p-aMI@kLe1^immF%hP^0H^xJmBp7j
zJ||r#TtU@|jK|ic^UROo;*E^<smu$^Um@+OHMqYnV>#Y+5iZy-W-qsNw?Lb@wmwj8
zQ%;r?d>!nUOzO^b8$~0CD6m-Mc$s~#lOW$>hBZVkP$M7#Z2p&>VoF-tFYQ3K^*PUD
z*gEOl%7KkQw#_wD*;Dzq2Hg90l@_{?nF7K@_JwV$bgObqv0boNZLV~+d1)FrKd6_T
z<@nYcoHxbq8PAnk!>rkJ*BKR%iNb0Tfc(657*(J*P5%`;Zk66+=y>m5ORhcx*9%<l
zPjm*KKVWzua}7VM1EJ?QT!Z=V#GZ*Dlo}Zf9T`orZFmMdIR^)r>-CP2%aQFENCw?6
z$kiu}XyS%NJl-C6^<Yeea+@+P>X<7d5Pvgg#Z}<f%Pat`>vM(ndktPK5kKWW<N=*&
zjhX?(p$ExAr;T@dOLmZ|Nll$+Zz5z!{c+)={z{|uiwrWS{A%}0ON`Ph0KZK<KR=ID
zP1CX%Ty0dHAw`A~Ln)~rQ3IbnZ>dNZW`F6&05cATWVJ!atACm~U;0$?s`vU%xWKZq
zzngc>@?&oGCektE+m5xZ=UV%0Y(%WQ7|X(CI69M802W2@l7>IMD*lZL0bZ28fs~<5
z^A5zFuYQDNqykXAcFPQ3Grrrl|2Nt{?YzKg40vxa25H0)zUIcj$7SF+23EIb68Kzu
z$U&_}l%&yBVVGrDex7>X`hiXRa-PJobp8z?+Y}BKI^nWzT|fS`tcpoX=5!NV57RMb
zSekcdB$1*Dc!9Ve@MoX2&%1pmn9Y~Z&QMWQ>@~IWlc1QuS?kTb87?l;4_VDKuc<3W
z=JB)T@Cakn{^4kUTFpZ=tb~vKrYUuM*S~DBoaU+&FHUh7SDj{_{W6H9&m<dI+aq7f
zjlUJ4Owm^`@md;}p4u*k_i{+F^hEzXN+!{xj85#>MN7QYG#bV9;h0NVw461*^6vKI
znFwac;u54yw(H;?)yK0}QCrsds2LFvoOUUNIW`pQ$BWzq8RGN)(V;gj_6ihOo@k9u
z-xfdte0GCreS>Yh7dPvmd`y-)Hx=%ocGUA8X7g9%!$k})%QD}-)F3Cq!ECJ^Q+8mN
z|C@VFU4P*D1PM~4A4MitTOUq=@|$E5{0O#xS5Xq24LcE20hd#pHg~%U7{BAurrqoB
zhWOPZCpG;kiQO4n`VsOJ$i8#o6BwkJKV?HZmk;fC+IS46w{(`S5p5wEctk^HzlT#6
z%mX2=fBZ-_O^jZbw<B?Yl6~J++GnZZ$~>KZxMkP|N5xHgu*oZbEUI*7_VBvaDB70K
zHrP%G2c~|d)=n4DXcrJR^$*i0;6-Var2(djee625)Urx?hk^TX!{N^rn_2j)t_BQs
zB-X!fvKTmK|LmfFlpS2LpsKH^@;TwklFT$bJAhFZJT}e;F66zmp_{QIY<|366SQJ6
z@i_i^uzh~D!J;o+Bmxn{np&eF#ca0vk4jO6M`B^gb2`1*MGq<@7&iA1CVuoGZVEJ{
zU^$`?SB!1X+AxpHAJP?ixPDm^Zbh#+cM0&_HKliQrD2hH4`>YoKiTK0rt)E@vxrCk
zITXfw6v{jx?HNtGPz6Y=hU6%(%~91~5FI*_A%Z*ZjOGiSvK0C%$^@jG_}HXUtU>#<
z{gqn%N^ogQ9K^{LLck3!uoym+Y67`;a2@gu+Fd@r67~u6R{f>sy~peI@4bHDQt>)<
z>gLM+lD?DVeZJ6CqREHWw2Jb`XA*_e6$i$ic@0=ReyRD&1f>!B!?jrwH_(_l%+Jp~
zhs4_T)(Hr|AGm^fA<;}*Ej<D6+gTBZCPgX+w7s2OT*Bus*h$A&;kJIcSh9?mz(sKn
zUq8J(C!|0_ZQB%3O$`zE@R!_-iGfbzJ;(REL=&&wLzy)x<p5LpbP6HoF`Q-px~p1r
zQA@w^en|^8(&>4{>Xk~uJP^jM;2!%fG;uwmn)QAn$-BYz`(qKBKU@E4mXiMvMbRC8
z0jFgwmd|Yh(S&&lYF8o-x<4UjhdZSEl7h5s$X?^mkRG0uB()+!9z-s*a$^!@e9Y*R
zxi_+Nhl;S6x={BGHutg`RTQU{AumMcx9_I+>XyoJ&f{9{2Pt3G@sx`-#Am85i5e0N
z47-K9`On|#CP9qVJrkUbwPVn`CigQEA}L|h=}z*EZX%5h3WpxXUiaHJA87TvEP>-W
zWKsQK8-_B8l2lcMF7UUxO^U88b>B2R$&M#vba_gl^S59faXQgTk0n!;cwc8?(wIGr
z>_g7&Y2N~}{4I)PF|MB$n>rViP@!1w>MhrM`Ui;yt?qD&l2?CNcZAMpYpX%n7nPYk
z=4@_#T)N`FEe}}@)Zi71__-;As-=%JaSjt6PtaVvR;y}?sDuRJ(hRtd?}lXu{uc5U
zrV-0^nQv?0s-t$S24Ik7qy@V~x|JRoG|+u-lRwexIz}66O|j{DP8kyCPg?!_9puG2
z&F+!V(X&8me#UX;ejA>XHAqqKIZtEp7duC=Fuh!FiGOBMwyaZ{e4d$mx_bER$?1vz
zbehe*6!!5nZ)UY5IVk3_3`(<}sA<D}OH}nS?k(nt@n%XQadaDOHd4`z6;Dc}B5*LV
zpR!UaNI{Fmt4+ZPcuFB~o=%SzmNLkao_^O9NDZPGsE9;73|qTxSFyWObBRj9k<Jn%
z7U!V#z2Ab-uhmOnh-YjY#UpYsc$yE(-v`Wtv)Kb>i&x}na&W?PYl}PzYr8SNLOU3+
zH8(hqjvQs@Jg9ik^UAw`RpjI90KL_9LFapP3Gx#M;R~7cpOwD?B6HaKDhhWcC@aSK
zI-*n)V|w`Tvk@hgU&u)nggfmqux?6Bh)6dfyhq2%yxOl5I^v4Oe-;!|YqX>3sthJb
zbeFlM69&e3NHI{zCE4zBWBWgQ#cgMV63J2UWA)5^nk~`g(LqgiSpx1MD_n-hX$d`+
zX~i@@`847O<3z7DTxDivX8AzI_lw*bss6oyuSB<EhHu}+?~B`0)F7?-fWV4$A-Q&1
z^YBSs`jDu&lHt5I0b)>ViaX;--5XTl-T>T(Ix7%Ixi8iy7_M`wNnBLBgb|&bUS@!y
z<E=+P-0i+4&Z=f)mRKNCSFW*gmu+}sfsT*Ugxcg&O({|%A_!3E(UeUIdVc{GgBcIp
zHp3ohFA~KtfE$i`qZm$nc9I!qIIsyel1TTfSHr`=1`*yZQB@<$VYY9kLk%dQK`I_7
zK2g4*TiZv=SZr=~`Zg@t%b;y#?c?a+%YAN-jYGT!r@=IzCB4!1)xU!e=wNMuQ(w~)
zZ_EUV6w<JLl&2yW{^lj<rjnZUOHI5B<_>Kofn>xq+ZUiMPdGwpaDZ3)#E~|0JhnR|
zqb!m!X1(4sI+z)QJjq9TY0UG}gPLgae+IniJx?ZT!5{bM+!Oeqf?E~=G(8W9xb0jX
z`&s$7yc20fthR=P4%`a{!0=M(9T=)hkqa29dl`?LC7ek`p$-?9%Nb()K#oy)WCR{0
zkSte-PBb41#R_y(FQs@mj>HYkhyWMLW!i7AG~Ay?Yoi9C@EB->sS!Bxkio-fl&<Tk
z^9H&E)PDS~bu{{!5l%W@5-gw!2gQEEPGnrq3qc-2T7rOGh@}lb)~ZoWn8VKR<*>S6
z*F%EKEUK%bpxiAO?7g9x<f%*w0Z)(Xm|xtcc1#a^Z6^Hd4PKBDTfI6HHU$ODPWF8Q
z2WQ!@Zp4p5-LCE+Q1BZf{9JXhw5DJ4ff^3|ikSJ*8UH=dWnmS1!fs8uP|m{ih?${~
zdYrg>{r%1pp*yF1r#7d#4iCjR0~Vy6Xr_|meWmEtQp;9qQ`QMa@}<w|rEo`t2ZRUq
z88+5ZQ%22!e<mbe-5EohO|6&b=P{;dt%Uq_>Lm8`smS^zQ|6df0$?`h`2Pe&!`|)(
zsS328Zb_EIWd|8QfbQX99X@6PEr$}k*hNjHmx{-`^JlCx{#;<9x4MTGwhxBJcTI`h
zlFV=tQq`B-Ed?gz>g_?tI71_q1jaI_F7=~X&kf0w`S4;_#X_aLM7>c#XTWdX4X2{c
zVz-iL7gMBzL`w<0Nyh*k3Snxp`;1fZq{pwDTC4Zh#>Z0e<K>^S!mmcdG8Zko=k9x;
zE%%cjEFo$+-OFNjz0`t{eRC0#NebEny?oKao%r1B*gU&xB(w3XKbxuCtUL@pj9O(~
zweQ2_N=wStODUr3{RII7{|%d*S<dXwbaxO7k{b^RB)FEb**H-`k{MV4>F~N_7%9Bq
zK2utf{;2}(aq3e9ZgzLg5If=ol_Ehi7P{$daD{#YeUoTuKGN_kXBc?=ciZ+E7m$$d
zeCaiTJRP6+J^Zx}y)yg$XDmnr4ii{WT;~KSYnI@4X=s!ws1!`S;ZrG~BbAl+?lQ>T
zC)998@LfR^*92pQ#2QLGGI`K?YiAOM46TWnZLSmtY_4wL;H9?3#=AkTsk4lyQ`4?h
z#1dZLyCcC1b+1DU9j*V<p?xy~1T^vXUOPOo8MX6U7y~^Bgg*Cvf<04mUXpJqTEwwO
z+?l=K#N=f>fI~UBmv77!d!WfO^ju4_LH;NdYrCgTxwkaSt?pS42pXy27f3G4sB~V*
zHP2~l$sjsDN4}sPTEO5>-q7=Wg{x8CjEX3j0{6ULwrlBmUrL?UNOjECZuNy~F<NmQ
za`e?B*52X$fZNT@9b;yN$5VZY8&bwYpl{!7fTlrJko6_-M9+5J#lzSNX#UUS`%hPj
zr~M4Ua+qai^%YHb(YB$Zko+8>yIrjM%z^@?Fb~U^7geh12uE3vV4Oe@i!ZqGt9Goq
z(g(dRL;AQ^b3K-{UBdt`V6)eJEWUug(5wCsB}>Q~YpJMBw+y5UmCym<61u9u1q=t|
z!CH3cx<Ntb2b8}zL-yP9ZcpyxFY`d%x=K}(p#9(&v2#hDj{IqqRSqTl9bO8jnGDTH
zT5(V7MwS0DKb7#W3G_cp<`)F1Bxq!(OyZ6_uF4}-Rr{>EX3Ye$i;;CA@;Kzy8oznE
zd5W#NV+(KJr8@(rG3fCT5mAe3@I&ph>7n7VKhJjrh-nIchw)@9rKoImpc0M-M|~LO
zyqfhL9Lxm5Jdu8&GYhbQAxPOx>O<AxKaRH6#1B*<{9QEF#vVy>8~zV2oSl2PSLBY>
z0_7+-3CV$*FAZEzxLz^Y9H`l)D5-W>cf0mH3*G(R>q~PW7zP;so&JDd{~!-a|5w@P
zRlf~Ttojq69?yZ<?L9vMbU@wCU#!_~v)vs5+ZDZ;Cw7}__}HrQ9eA_6y|F%6R5TUO
zO}K749ReWKGq%Y)her`#nNfE9?#vfHzJ#;tB7`{ab6ztv8_cw%Z#-1C7CF3lNg#9M
z-}SP<-Z@vP0!!f2lA0Z<JLZtVKzhD={xl3^(~bM;`m`31b2t2LzESl7;Ct{3)$qC}
zX@VCyztmn$`jvu#?1@VvuFF&HQu@1+@$$w5*1VhAQ?_{``^Tu}m1<9sZb>)_+CSYh
zF9g1h)<+|Vh!@Ww066A^L@15hEkj*HQgBvnWC{Dl7$-wEZrzAKK6L*A;#84(o(&fd
zM~TVllYO3xnCg;Xp330=wuSr6g$*`f@}=HyZ*rHp!@jBWrW+JdjwN)wPOBiu`un+x
zB2WjV9Tbr$MhM8tCglRatmWid+CxNq=TruqgIEWh_Vm{nc*-L#kgYtp1?13x5O)B9
zBjox7;km`Y#JA`~TvJGi+}Ji_^rCi4M8CE@>EFt$=h++$9M%#Voj<%+zm=1V{S}@6
zvp`aku&b|-kPwm3^(HfUSgsIuW+;ANYZbV188qtPY_~Ih_$307mt##=pI<QDG4vd;
zE6*hapBA%C{4$e@y4HmWNu5Rkfxcr2fP*xWC+bP+T>$?@W+Ohr-mHL2!hqrrlw~&W
zFt0k^Mu?+)f;MSv<c=Wh)-lHqyuQ>%Nd-pxKfx0)drXTVMyEAb3>75Qy;ckfsX&x1
zfY>KN&+=t~ac<)??kT5QBx=3lyqX!^Kdq5{3eEojT~5_w(~WBWy>`xOAV3Bw`0?mG
zr~@POVueS>Lhnv7_ms2Fu`uzZ3k>^@&Wa^!+YN}sv%~?f_-BX%yq4GQ)!?%wCWXi6
z=K;T{$fV<&!oP<6@0+A13>t5TvrqXR9`g64{{;R2uGz%^2$=0o^aPD+>c6}5&)?Cn
zV3Yg38ClkEtN#5<{|U2tG-i5e+jwgj3be*CyF{eEbP<vDiO{I(yh#0tt|NP;Udrh4
z!(hA0V6%o;-X7zqO2Kyw6k+`RF^{aW>gae}Bg?i#TSD<5FVu^~4w3aIiTu1cga_co
zk>dBpMu`c=V6k@n`*|HG_*E!nUQ#P%LQDn($VEW4+)WFGqh#g8GPYFig{p}q3R1?U
zqpFEsl!gkWP>~|^243M(z*4t6jEBm+qzDvp@M{1mK9LvI-V+9p69$DSWc9(u(ILi9
ziiOY{B9TJk7k;dR<rtJC<b2GV7u6R#-nMT#Gy=Ji{3PD$QY(8F@yW<;IO&2|0wnh8
z<I6FLEk}lg)>t9jJ(xRy)^04|g3G*>M_3Ig_f*G9B?4|7@RGSh_ps$Ls}#Igc7&*Z
zA1e}kvHt47O(!51&8HyI_K}3U^G8-ZfF48;y>-$Rv`KW28m2c6@evB>FG_1N+m$F8
zMEl+7@j4SK8d0^c#dBb0jtc4jZ4y<~sD^{3DxOg5|7SSDE&lXOk;=-?z|{P+wf}dN
z|GJ=-;}6kQ+CZrFuKWM~H{cNPZGnG>l1Z4V5UK3%fc~#`bU@3jWG1@E|IfkUe_NNr
zh5y#=eL64vL;Rohsn!7@!bNRZ|GeNhE+08))c=f3#PFSlH+iZ*kcbhV!C}|^8wD)9
zlrsFcN=ATNHB8Gt-`5QTPmOneiFcf-xV5RZL~P^cW>#%NuG3rY%+m0%Qn468A~=?X
zqqWL1uc&wcrK>r|uGJ+VI0W&43*P|mh5(NUpU6;Ud{~CoWmIhX*&X+~x*BzATEEm}
z0s@DKC??OO^?i1J{&zlWUeyWKX(nHDy=Sp);Oirx;Kg{{(o!KDjY9NG7fVvzXrNqq
zJT2`qXOj#P;|USbN{-J^MO#ywVyI`QCntm0nZ+47#%f2e369MsgTsTAsQm;N+s#66
zWcpg~>KbS=f&cgCPLKai4^+(W!cdJIV3q^0zQfi*>ohi-N*WiX%IUGRk8JPU0p)*>
zij*`wnBK=kfaTYoziwyq#foi4%N4>zy7PRa(|i*gJZLPapS&(aNiq%Qd8@@rW|x-N
z!o%35r-5Bqka7}K@oJ@cyy}G8<_<2Mo64RD)0u|mS(@Hl&rVKKYhjlDwDU@DPvu?m
z=5>0((#GtaoZ%!JYv<p!0M;K_6>E4*j$0UwHf(v7#v<BOUh8c0TWV`S%e0uM0=|}4
zeSj~V$ZoYIT6mOB@2E9wQk`<^NrM0GG~ZA^&(hoZ$;hm;0e;Xl&q_Hno3l9}xUuxG
z?s~XuS$W=RxMH^zEuD_bU|1E%>9SR=522q>;M$DO^CKDlfd=o?J>U0JU9ytL_5_|T
zyY6j?Gp35R58Jq^s-msttP^qb?E~^Pt2_Q@HHqMoU3Ra@T>dV$A}Fbhpx_5rgRS>u
z9bb*$*kM|k`ceu-cyieif8yQE0uv?qKeG!kZ^f7RQ`~)@`|+c@&c3HK%{QFS%(m#R
z$-Fi2cqSiKaGq-5pJ#tHZN7ajKRijc*?Rx^5=VC&+}412E(KJ{AeuhDEw&zFG+bQI
zHfldwWwu$~)%k6|y=AwXtYoS>ZP}YIRm8wkkEbMCt<k$$OMd|F6W(;^9dN~zyUp05
zCd)X3rr*-nymXwV&53ujZE;nQO$Df!GE-Y+Uw_{gZw1%+G(bw|HJVZYr`gKqcDq|~
ziKgwT)Y$dC=1pZhFC}$l4eU>&P2Ve))9vh|w$60zMWgh0L<GdIj;q+RwyXB?w?;m?
zHp>}3Rq2UsE;g?FHb>cF1uD=!LHGveWSY*0<+jd8yQ#beXPVR`303iPO5-ZVrW0`!
zV-vk%-=oHgDTHkuCM#t#4|HeTq|)l<DnVlm^?z+K(3XE1@q!NO?46&iRb97U8&(fN
zSF`IJ@6a)*TW%^lLzwKembwQ=RKfeD$m>SeEtn2jc=|q)X*+Ia3w$jrExF3~+|yYm
zc^zk1zK(qf12r3>#!vgOzTmnB`?n`IMK902x4$fCR|*c)>1?+is<5g%9qpQv?_{j4
z1+}e7#Yy?YUV3vbw`gDLy5LVu@j3V0Ng=4ts|*7<n1VF2_`0+mK6E`UOR=zvDeR*S
zl2S}fe0VubX*x%@Na4TZu<n6NhIr7by*3SiN=n3;#$6v`Euk@vaNY^*I`k=;f!op9
zW0SSnAMj|0h5)>Ze-)B8@xpHNw!Bg||LZn1<om-#2gW(C^GmSb?iR3VwePQ{trmJ9
z^fyHAbiaY=D?p!_lCz~e!6Rn09LuIEw^g=uRtme1ra%%xhFV%;2icyqd?gvXCK5Os
zdRse&X^sSUX`!xEO(hfCqTkHREtSC1?oja}u&Dnmww?@EPd09{U{KZneBR!@;&aYf
zw>V2Xm3#w!K1)6(D^HagR|p&YVJo0vrbqMFLBmqK27K*bTRH_cxxY?^#8(?|tPQ`5
zx3!|Rw&OVoTEn4gv^!0^jpL6)a||nzFQ9&s<}EqZB_pz3m;^2H^e~<j@vI-uudhj~
zX|tP)$WWruyB`5BW&={=b?_z56~n`<!TUr<u@Sg5c{t+8<vO4w&aDGKMIKIIMga@2
zyW=N`u+TqyL&{HVHDDK&cl=xd0W5lLE+9t^gvw|R%KK=Y5(U#xNJgp`jTSQ_g@oGD
z+NJQ~DdIvBXLQcYNJ{*n!^Dx{%5C|7N6Y_xkQHK<19}QGs}NKC=i|jhh{Ys(5A6}%
zeZbXx|J)z4B7%P%Ys_l?-O6Gk1k8F}BTL4fE;(0GBq94R=ITP;OYQ{`yXv}|{AEA-
zUluJ$1^?a}F+(6=e9!I4%LueXuv6IWn&#GHEAs@LG{+>jJIr3rsu?57{|-8O*cN&N
zVy(Mh=4$=9VpCx7-{9RCE!+vadH6ZzW&Ft6vbCn`{uFf;`4)F|R(7^@x{KUJO0Tk-
zm)qX6c7GTRt6%@0bK76-s^PQ9x#3A`R78DmCZqOwdtaMse;D7|xNA$t@51t`Iw>nL
zFHT)ybZmofT=Px;h*^Ib{%Bl5Y?i%`Cw1s4{&!#gYFw{lrkiPUnRj2ct5$bC^SvS;
zkWUEg3w&sJ-~r_++HhJ0WVgN6`kEHzP2IGOtR-nA-{U$-miQb#9-g#)Po;}G_uQ|Z
zyEpNd%MF=seEI>(oXM%H*af=r?Gg3=oE*1L=J^>Qc;Q#+r26Bl?i;3mGvWWf(Y1t<
zP)+|)f?}lW2&a{_!S2Vk#^KjlZMvgc^?G_l`=&L)FRf^aN=~<_OR5g7y>ydeUY5PZ
z^A(Zobu(FX`Myil+5C}laiN#F?6S~fH5jKYfBQO;-3s;=d*zcmkx<gJZ^W&-7%Bm8
zK4C&tW>jLV;N-orYGb8dsFXS7d11_PQo%v@=z%RWs_SW?E6c(Zyew`m5U;B3kr;y$
zxPVy|e#n{TATlq-l2#RG(%%|UPt-|h%92q=_Pt_TR<OOZh2DS%-h-|-qZJ#o0@clf
zgmi)L^9B)jhBVzuL6=VksfBZ<4E(Z|O!Q0dYpL>6BY1UXB^~=U_<5+jeb);s!Olxi
zyN`daJC!Z7rQY_$yo%4-W$ZlBNjU^)7)L=@a|6vO`XQ8HZF8;Fo|4-qTKy+(xq66j
z97}RKUg(lsw!H@1hl^5E8xGA=@hh`ydF!K!Y^b$Sy~nI6#K8780gobV=G^$|^h>>x
z5wns<#B6~`q6*~z@rH~PXxLFu{2u)TrBYa2@SR22v)RZzuf`Q})c@DgS%)?GzI~Vm
zQ9}449ZE@qq%=x*NO!k{bcX^;NjFH>=&k|M-J`pk5u>;F@pruYYk%$7vEBD`-Ep0t
zQ#h>t_0WaOW~LqAE<qLZb|?+UTtsHvW)Q0dp;6CX9Gbp;Fj3FoFT}i_H2QWD+55x}
zb>am4Veqb8*Jq-5H&4%77%T=t{^hsz>#?!1ii!$aaC)Mw;V=&WiZh@xJhp%V8H4}q
zehJI>KnpQZ*wE7eKm4wMMHz)kcMdZQLz?C7JS-R<>@RrRa#)kW{`B~R8hp{S9yoTJ
zd%rLts8=@Zg$n%<czXYgGxG2d&Y!N?dHyZ^cCoajf^><T)LPrMgaKo)vi)6T=jzOD
zIJxhd|3XwzSX=~iyd2R=t8Z9(21w+Ks^a?)sx$9;#I+ck&=I}k^4B$!ubg?Kgj*t?
z-Z_r*<7@j+#vQt-qxk##M@KI*>}_G=AaNn})>@7T3JPLpeW?nrZ6tfquyDZQeypUV
zgoCqvaLinn{KF^B*;p*^dr}KXhHL6A+R2-7h05wJ|5dUp8#0B4IxnbMmN>oc#Q^g~
zhq&$=v*Al6G_`X>LqnAAkInQb!T9P(q{#KZpO*i(?C-L$H%U_Q8cQpV{hw_&aRmZ-
z!wswXC{soZzW8zBw#DfY|DxTn+N2v0e?9{I-_TZU;L~<p_6=x!TzO0BjbD`==gU$5
z^}mnGEoX^qXKVe*($<4fTB#17k2WT`+9<E?Q~crcfry)dKm;^r^}6m~FSq44V=WO6
zycNI2v5s{CYiKe#-$}h@&yDBp+Py3Smcj2(C-=FXQV9tf7B{sdyI2nI-o&J$Ua_%S
z1;I2`JuF-%#4rN=HE)IRFjfWz9q-F!U3*0Q#o+$)<}WezGVE`c3wKLW>YEy(7)Atk
z{B}yajg8iB;tkWeH^zU9O$&<aPHAyK%l?}x<7sdLg28|TE<<16Hokoz32NCfR`96A
zTI_Mryy^0q4_(VLN2IU3nS6fz7JS=rnN%gb6+t^)?nk5WyRF|OBVR8zRCOG1z+M?Y
zA8FJ4n8+Bn#Xw4jq31Yf{jj3)ImiV(#xsKQ7Yb2UPhtG+n+N%^Z~j52PYF3sJO7f)
zmVo#Boxo{RwcSTOkAn_*q?!}xFiX`Fz#cvKaRj&k5xy{HmE^zqE^j*B4yOUHrvqRX
zzm?b>x&)Q|oR|@g-oz*0>DWuRXK%mw)I+fP!A$BYKUVZ1l=^97$-ZhXis|WJmjOT^
zq^0l;R<<6M0YQrcvs*5JT-zJam{pa(sHHKHdIT=sEEi^Ifp%{GciRDgP!#dliFgE<
zY(`_bcONWW?soxG*HNj8F!XzWbq}skJ764Gw=K?^UZ#N{G6AQqb(T8>@CEu?PI!-h
zTLbRr%Ku1eq5Z2bsSjiqAI0u>68`Cu0U$6cx12~oG;sB=9n<{xAUYos!#wuExpgsS
zlWZOKa?An>lfUW#Q>(<!yPKV}yz|jk_SW&95~ng^w+B_=%kqqg1;20{4;y<2{gsY8
z%y|Tob8)R2@{R0P4lpcE8kedNBbl(hr5wYhn{t*`g$y@sr?1pROxj2fQieU$h|Rx&
z0hW&}IqT_776YOi03i^QT$XA0?({hp&+i%3moa90w=h-r72Jft>@*h4Z#at}uKMt0
z|D|3>CXRapC0oNL8+ZD|Gs((jS_~y*qZ0gJhq@s4JR^p_B(NRD{S|Q3o%`(zkvmj(
zlh_ja$py=AdF@uxbGn=Y?MZv663Oa?;<}epTO)&zbs3xOf&}G<l)(FxP+Y+S0L(^I
zAs(vO8W;W&=)3V8JGDTvcXCNNU!(bLldogJY&(30P8*k%i?%jTfCt}&M$W_RHh`cd
zRr#UEJoPdHG2@bTGP<ZNzAJX+6?<bDfZ3HI^Q!7{lS|%bgssW%P{H`&1Q_8f`=b2D
zx%u?eYynZMki~M<KYL}87zLPAUK_w^+?SHc(XOs8fb@D6d)maKhF^r|!T^Nr_}@V9
zgf&z-wjLI#UC0IiYShnbfUNe)TJ$PSD)No#4>-^;JvExf4ONTX(^J%HrDV9LS4fUf
z)YbVU;SF^3rb%ih>sj9b(Uer`{8{E<zZ=T_jScIGY)X_~!;H5J<wiGU0G|JJ9*B4Z
z9!2OP@q0C4EZj+#|8f1R{U971NybBX`h0sBx@r}bp(L+&-=~$OW2<PPa0=H!fK62?
z0A!skiUbL%t4G1UHr*~<+QMFa;uGSZ?R&Z|#0x6~VA;4gc$94eHO3-$<^L|>mW2Wz
zyI+bnH+#B_sgC7P!>{rcs8`#~ub89HP(Sw|yzKCC*Ze|Te<)y%QIL_#cf!7)6vuMx
zU>np;jrxofhea|Hr&-N?6)tC295)pCj5o3W&Y%w1cj=z$hQNb28Q<WHpOqLx_*ot8
zHBOVs=lLOX>_=p+w^MMLJ-n5x*kDFt97h4}sI#6}Hj2w;sDrhx)l+$^y!X17v9ag*
zMH}Ang3or?s$j;Mm&Jy*wg+{y{s;!Q7S}#zParEvW~Y~pmHufM_c1Xm>55qoh&?gF
z`U!X-60=io{Z~I1c7sFDL3#4bM3hGD=W3!Xv${u)bTuM%d`cbQ1>dM$%f+#pb>eFS
zyZsH&RM#fp60I>1J@=mACK*@;w85tpPX5Qh|KY1O${9-<$}7P}Ky}&R01R{y5s?#p
zvhufDT?cKu$@*qLLg`RmMYHCIc|)ZqH=d?bz&!o7MM7^hs({|S01D0(hq|$l{;Wt8
zXBwfnv(zY4ex*`K6;g8#-%|*2`vyQ%;SC{fj1fsnaX0<|ZC@l(nBD6X@H{<gS7^yK
zN3(vJ+@urv%4||Kh>PUi(+;DUTshT00v*siZsZ{Da~dk!MX9}aUdPBqwUK>OP>7U1
zU<Z-brBtImQqZLw0rY;%SpfX$-mHDDpeE#y)VKEzdm+FNU80B{HLIvCsA%PNn|%+~
z))iMn*YI?*!4}{avzl8POM~{3#*8XNZrFC3E%ju(?ZnA|w}`4ZIo|o%<$!MiYC+N1
zbmiR<rszfRzdD&LY6MIbnbOdB%GG5;72&wQ=<kncsqZ5~{(alvC1A>o8$WFk?|o#J
zRZJ9|K8mbt-opO26j7YxMef-W8NSprDc*x5Semyip%{SnPw>*T9^i|DzxIS2!%qag
ziFV8$w66c!vxt;{BcrxJB!Xy7G9}w7f@|BdnG-X~GWowJ4@g-bP*!heo9V)TvR*cq
z3tlV-y-kS&9p<yoHWV2!@OCKoFE~=-X>TjIotGvUT!FOkR(Rd+MZniCxW~!?-`h*q
zs#x7`+$}fNDaB6<MGN<$+d82NRd?!POXqi|kK=*s9V%=3%c?>K{7*Xb<|$&%_fr!e
zeHyw}t<l@r52@hi-%^C{dN)D}Kj%Cy=H<ie_c=rlqEe<)u5ap6x<ENT+n{6ys^7fp
z0=_SpL~oN9&jJIh5kmWH-gl*M`!AFG^+<dsDAPAL2oX-3?8`hM=Nlig!%ycP*0d*{
zX4pD9o7?S8obUMO-8|XIMFD0?`Ro0?<!Z4pWOY`DyKauJd-|ONksa<!k*W+F!6Uvj
zbX&{91*iEvmanI}E9fd!XlJGwh(qeu@jDG|^UtfGMm=TTST+*D-OuE;rD82!2jRqQ
z&&P%xu=nh`eAiE>8Op+DRx;(q>A}I9b(Ke=H(Q%BIb<i4Bmv73lvT@3N>6!bxm5@s
z=-BOT#_}s%T<Uh~ks3@79)1)^+N<r3FZ?SB((*&On2qlr^M8216kovj#ASjVStNbm
zGU0#r4;9?N6vNsgXP^$aGp*jv0%{2mNP&4>?H(-Qj7P^jxwtq4vJ~dK=)CPX-^Kr{
zWoLkhMcl=j$9(L6rKvZ$5@c79Li--^Z#Lk^M#-YQIt9e_(z^$Nj8FxVsyv1iqd2DU
zZOTUHY;RmnPau9_rXQqR$G~4@+rzemRL=Yd<d3q>*<|@EXi1eum84k}=pq9Q#N@;C
z|B1*SPj~#yO3#BSB6KL7yO24&hZIQMlnO5_EHU3JakLEk-H#YsA!%`}p~RT11GagG
zuYcqo(e}o(MnL05a3=)JsntQZS`hKC1}zMT_S^2HbUx8LJOGQ0&VuO^%Q3d$FF5Qe
zLi|)Mocr5*84t(Ch%zjzI=cJGa8a~_{2V)_Rge(ApVwf4v{bYp{_tyBaW=4lMk0-D
zp#Ts~!Pcz1I5S5wXOqD^i&9In(>%ag!mXudE5BP&83ex}uRm3Iz0LNF7U=m>3y5Li
zc%qz>$EbL>I2B6d(~;oieSd9}fz%Hl6s$?N3mz5JsvZ8G=1}&N|7JH>y;h>*h(*@6
zO%zp-;>)o-7Wn8IJ$Is|(Ie>G8VBo(`o6%dangg|NYP5unoqe}*MN~`dODfT4+-lE
zSb6J!MLtNq>}Uv>VxijFfy5W5vmS$wKlD2;P&ppDNSiWUAnOw-TSLSTf<7tvDxwEF
zY}Q}B|DWqwL(D#_`X;wm7PWOg!hhVpOlC0ZcHQyy(-IyR^Bx5~Qe||`_1_=@RwyQ6
zDJh<es8`e3-AQnko*so1OPD(`D(sd+4|@!8{>bNGTlVqrT54U`7wWmz7N_ywxj%^7
z41N*E-M9?eoK*<gJM(U9YPYL`SUWA=jXO;QUbV;2!p11{zBad=GZJ(7-&3(UiP`jT
zM}`6GF{$Tr&-CG1+{96QaJ9Xc?F1*OWIBP{Elypx^?xkvh0X9YQCF&3>*F>fUURki
zjr~BdSGT&t6KNl{(^2q}*j;NHhmXhAd6hAYx|nUrw|FnqcyidQ!)wvmY5l_2NF?-e
ztZBk<)WxQXG9$aerRO%VDbW_OzQ$=kKVDQ<btbx-M^8RcCgxDZ*P?tv&ecddie+x_
z-`)QV@SOCV$bti$hq#fFHQ(PlV9_etbO{<<<`H*b>3u>?;cl1U3>pWPENV0u&MElH
zW=h190U)hqV>9_6B9_t}Y2#P_rdi*o#vv9RJV+2q+@V|R4AROARHiQ*Z)q5=#j<|2
z@C}<WyfD3L;~dK687X=bA?`?Gs7<A#3f@G1LHg3(9C_n=gY{60-NEo%->ZpKX}b=D
z@uAP^u@R<DIc36h>SP&lHkAP@d>!!^=n;AWb@oBh2gm;4yfFJugJ4nO`%|?N<DEo}
zi1|y(Jj5nm;CuK@RiFqipYPymFOj~{e7lel{4(X`9YwQ?KKl4eiqRZco0dGYnN6#A
z`>`)EwLLBha=M00Trc0VvTc5XsRTb0Hp<$*^F88e0#S`6X-p@Ik^XPJuaUF@0d!($
z$k4aabZ#n{nj+gFhY8?FIAJgnMJF&_UY4kq7@~6O*7BMSE61ajo-cw|<@7sS#82<b
zD6~mV0*rjEZ{+e)QkQFo7#oFMH@l|8mL4?wFONt?LYa8yyVJX)$*jK4{`RjR?4hGQ
znh387F?hor9DcAVQviypm(?fz*uvEx@~_;r%Dj*G@va~X#9D@ah8to4=~Sc?*oQ6{
z#)_P^44ih}z&k=a_SaoRhc=+|=a&yoR1Zpxuy5zWx6j1w)OMaFzck|yECC$&&5gxp
zhG9GQi>$OXeg)uc^zm{mi$%lAJ*hd7YU_S@*$1G~5U5pYLufOr`gMp(Hs=ff*xQM(
zRXwLA&r3%2<`_}pu$S;9RMVH9)w=T#=WNqFn2nHwz4<B>b1aoRe|+8k*6|VY(b;a;
zVOAXJcHd$3?n=z#`C+)S=k{xzK^F)0>{t7-lLP+sb!*MP@t2}P{Kn3wA2i~&0Z!cJ
zlnuxAews9LRBrcbdR0GSEb_UV5krvQF?CMMbEd;T=&{QrTAkvXcpEDg^io8Rja9he
zd-2#L_16RMZDdDZhZNHC9eZz66Hb;9d7^0M8!V35q8iw=0tXT2N$|GkiVNm<)0cc$
zX5Yt;*Hp=3`^C(uJbySVn6O&sT3F3k>>`8y@ka}_(_Fcv3{vtL@#GoNAlBpGt=e7K
zvu5#K7(ZiqJ-N1WDd2d)HzLY)kv>dxM8C{z8(t+AG)V<v<ef_RIy5a6_xB?<fy4__
zjixA6e#Z3w{_K31`)T@&L;lg4gblxd+g1`*o6-@bCR`0}S3fNw4)bQvzf;+^_!-VY
z8#!ArLZzG4VK#F^G#Gcwm%tg?>eS1J2eX|q*RrVEkWEtd(ogt!>{LG`ty2j4Q9Q`2
zH*(G9n}mkj!IUysQbiZIWrA7OVF|12?@dw$KdzpaNu+O9S5D+6$o6&j3-6P!--VH^
znEj>st%IHhW<jg|Wb?BJG%A^=j$|Q_YEvqa4<^-%ceKOsa9mzmpG|bslP7|8SETa^
zo6dw5St8H-=Q6k~kv{)C*OSR*fiyhim9wf@TU#e364HjMyIqbV_io<|yho+c^pGGl
zXV+}#>L>-5=9ijFOrY!!`JGp-FWcs4;jY0qoTx8PZ|A`|+N0#zk6|30mm{i=i-BT~
zy^+f8p70KL9Ex6T=9(I?i?aPaxN;5~XK;`6N}h%+w`<1jEq?#qy+W9Y?j!)Fw@G>2
zzWRoG&hl|b2(`oQmCtZpq60eOqHEJ&d>DKMi6$Q}A>7NX^J8&l>Qs!+y!tsnr~1d^
ze6f9<r)v9pqz&Mf<|`q(74G_uvy)3Yk6qiS#fZ|Eq!%5FnXP>zVcE-z7VNL5uW|0&
z%RmKZIPS__1|F+f{-7I*=az0(PaO`+tomSA8_sVO>T5p~!udJw2evux+l-UO><wFn
zlq93Jm4%=<sUK>;cN`m@Gjm-R7JTCH<QwE3voq^MUuoVNlCj)*6B9@9UP6~|#fJy-
z?(>ObfhCSq`#%tv+7#+ds<p#M3D>?T;M#p1rc8j8j!U0;^5MIyxV82LBy=4hdKr98
zsQ)YJXxT~%N+z7FR{Tw%iE+at_N{Mc*MUwpDc)&0o>sZ^dk-^(lAu}<(gRjF=hMcR
z;n0wROiXqDHz(HDCT71ze&c;zS~Kx2d{K?6KU|Qt70V-yHx-ZmNnw_q!bcWaFjo+B
zgk%#m`=iD1Q#PmD-)(eY>ASl1Q%KBxSy2gY+mDM@c9rbXZ5=|@)Jv*=&0q+S_;EdU
zcVoU$EOD<{4=S9h&-7PJi1a0Rr4UU<9kt<E)lptMt<Wf?-Y@+s0+F@fw|9lvz3~S$
zwMrsJtqrm5e{A=~e0cATeHXZU(Nr7pwkx8gicT+g$1lp6z{pDy*ZY2CTI-5rXvV+Z
zpv;u_-B`p{;Ys3qnd)f;Gf6GN=xZWw;;=sFcHuls5~nh|1BsN3udP2v$^*i#s-p#u
z$(m(Y&TY;X>dj{`iG@p2+HY#~PX(Wsx{ZYZL=+rwF%Qssfyy8B#}<w<mnZHoq^QA<
zLv6?8N6&dj!&^9W^-YaV{ER|JrtR~x)bjnb_5}1sir{g*%?zqcYtPvl9VgDZ%BIe+
z450*AV+KFFUOHjX*0zGK_z?rrc+@}{&m^SM)$j3=;$6;(hS5Dyid(_Yzhg2d%MT}P
zWK@O%&5tV#8dzUlqK?}<_yYD87US_Vs1*=FQCdqmgK1tl-`sCWwcR>R5wNT#I|ql7
z`)idq>7NQ%ex_Se;`I-nSle?G$iFW|`9s~P9;Y77VuH2vqHDcNzWzHT>;9#Hb(oww
zVU+2_D&XLZl4y<ZJb#OjE9kC`|3ICfE~QtBMa#NQlaRIR1ik+<L#vq9rPTFbgk<gt
zs(^AVN@bzCP57&N)hc#%jVTjBA)$MrVO)5l4%&hg#7A8ocmJ1-i5y+*>+Q;#Lf9L$
zL(M!DD0J8ytzJ>LKz3}-JX;{W(hJ%3VVIRA*BTEuK^O`Wx?gd7(CYA-6)+gYMtbON
zRE#Qxk$la1zz><C8%an8xp{y5jF;HM|8u<)T||RJv-H8lCMd%d4%BXa*JLkGL;Nu2
zrQtAoEGqeTn(Ruhab{W(+=8@`s<Xi1js3Xnn+IH>6Hb(fUg1le?mW8<cYVXtRxVN+
zq}nf*-oeGP3j*BTUqy_A<f&e3kmjf~Fl_#>4aJ;$qH`>KKqGV7M87pUwM@Q|Ha?mp
zZNjnv&3kLunQmg8#TG(mB?-M;jFzot_!yIz%+2OZd~;EVgoH03Cn*6y8%212bY+@b
zsV{(EYTl@`Y@iNhG+0K3*Yj-UVl=H+v|TUqvEPyW9DH~-zvg-ByzTtiyyrA_b-dQd
zSU+&m1JnPykGhb+<Cc&^__f__<5T-!ZaSNlL(O?z?cBc0Ge&|M$6VVv1I|z7aD(bZ
zUXk(_dq?!EpD8PJ!(pK4r%d}(4}G4ytfCV`rD$#ot40Vg8sA>_V(;9LXu|>>F`(N^
zrjcRXRR`enno%XG(F6spcko1Ed|w|{u0i$4p=w|M)3aq>mz?&i&0qyM<O&ulXw_&L
zvQ%?KmHG{UnI~F`9;b>iGUYhppU&P+JL2JvuGVixV_N7J5W7hXFJ{M_)SCTH3T#<{
ze~w-5=eBnNp9aHI&icEHAkYtD9rgCWhu|(W^eq$Zbmx_|6*&leXH?afZ1i)$s{e)4
z92uVBO+b!fxK{hUaCOBj-fNl+v8C2U<Q+LARs<l;JCQQ+HqR?mcN7E6d<G*&$rPr9
z&pcSFtQV$;%38GHU^U>UmzcIyZEaBde(=roL$pSd4R^hPaIHo7P$rDWuqb9B$7k8G
zDYy@ynI)%b@^hu5_;eu#EKDQm_FEhJlS;*<pYGbsBT#Ku$9h*JREn|6?NdLbJ|@!5
zVk~4gIODE}@<(F$xjQ)EIGy~-47q(GRuXp4O;zRP_ZPv~!D%aY4^`!Ll<hl>ZlOHc
zbE7kTkA2o;jT9C(>yI^^9(K>u%$c^h^p}N-kf`EQ-vxtfitt=|^_ZR5^P$SA;GfU2
zz0RJ6zi_v>CxmBS^Qb<ydtbHVAj^N(crI#?eALeSQX-!#Lz}?IZhPg^BhmhazS7*K
za`ZS2zwVRcB5SLnQ+{cyI$L)E>%HB_ZQ7rHGUg<jTCn6VW?OR+_sLUL#<B7RHfJ%|
zoX>n(NBmm)-(`0xbWnTkeljX{{VwpuV`*bk@6Q_a{QGKzppvTDx~!CRkFjnY^7wpR
zlmo+o#r*--z#)Mv54kVJuE#!u4})NJPGZXw`D-G9XtUWBT)dEzx;fE|dZ!NpJO_;0
zBXlI&aZsUCoLzpD{BTqMCdZ5bKbMrw(<X=Jhx3lWwx$VOWj`3OJp%ShBKM<x1C$GA
zZi8a$Ymaw-b5*EQD2I`!7-ky!Pq=g%_$(W*BApJ>+H7gtn)Asyn!hf}S+k1zAQ~Bo
zaX&g*>E=-Tjajr`v|8T6%`e8TJ`7xUu1tB3opuaREu1x{lAoV;9<*8xbkzG_;n2*J
z$v_NT?9bWouJ7mOL_8h-s_KP$*lt*bgq+wL)p;KG1?qcTl18q3nJmX!_P|y@z`}LC
zM{tf+9?d71h}q~nYn>B~SJH6q*I?HboE5$l<5sMSCu!$!_-V26nn+#8xb(7u(^1Q2
zCD_m?A-5yd1S{$`Bz8L#uK>Qs-?_-dPV*zohQKzw<k^%J${GTj?rVuY*i4e8Z}W-*
z1QBvM3CY`2MDOGXs#XYBpu;6m49!q6kHqlc9O`On+3n3?O0#zQ^oMJ4)ZeDobe{TD
z%Y6GTQK7be{@1FI5tZjH5bBH1+~OH;4mO;z>;2R4c#b0-C()|uUrX+Zof5xr2yL_v
z*_S&K=k3E+x1V2o$Eq%*7|W9bMpxqbk?$`bl1;LeFDG<^705VL{k%Y7M(A-jkWcsX
z%kMl+nsMr|-yRO!t;@}a#RL=;HXh8xm^q)zUv*V;z@h$9(r<UZw6O?5<G;k%H6V-2
z5iNq22S(881A>0`w61M0n8)6Htdm+Svj_1m*KogmKt}S96@hszFRvvxZ_@lEE5MHv
zjlTXxoU=38LIUHHU1c|FO^RGSHPRiJv@ez1`Y5v)=EZ49y;Zk`U-($tY&sHsB($IT
zjZ-bDwV`yqBhekpGB%f5%A+uVmWpUn-}Lrc-W3X!XS<6r=(dm?haQo7;W>WK`%lb`
z9=}!T;Xm&5HP!xdVV69WOpQxs!2H8c@Mqv-&J>Bo`}qMD`O~wyxweP3(#l#IT4w8t
zJlJoEbs{nLLp9Bq_tJ&+n*AWE=3)cm#?z6FbFmd@_}%UoqZ2=?HBVq558XM=Ui@aN
zYvBHdhlktLR8Ng)--ebNxlu-~Sr%82^JjIm6E3=Gb@-=w#BF^$c)2X#VeF!R?(TVe
z+H4s*ut=%<6a`tj?X<!m1}1<`zjLF6Ooe}r-&mVZSWcT`evXXPHV~O~wo-Ig`epCp
z7HHYA4m=1MLG}!T#exGMwkaN2K2UY>r$75moL1orF`ydL`kiB~5ovfAA!>j-5&uBH
z5XPDslzxqOT(@(#8w`e%G0xrPYA|+1FdF#j7O|y6-jG8Ak5Y9RsKo9JiG#pbb?KF0
z|N9WIvArvPv`B*%kx{cbcg~#-PSD8hLgmzpq_~mH7`<YBj4N80t+{>YQ*w6s*JGE)
z=kS=+mVMkOIju@&$@sao{M0VN6jgjW0Gj71R-e&`ScHfytS*w_+Hnr-`rvwy*sIk>
z_tk%JHRZdqal1aqm-nX#yYT#bfN|JG|Ng#YNYJ%jZSE~O`18=|k@J4}aA1%-+xTsS
zLDAx>mefF#P+K}vTpRcHyI5<>S6Pa6f0gB3K5;ww%w+HoIZpRMM)a39w*=+ArsP5#
zT1`agD)7)rS+3@y5=2PSj5#A1q6zesc+$BdtDNiQ>_r(~x#A($&)p3bSHHQM+*k_6
z2;eovVi6LsIWG;}dF%Vpu76zY$NUgROGpN?qrZ(bjq?n1g2bSc_rrrM0jVao7?Bx>
zs(>S9satd~gCW-xiXlsc)=QXFlZh+}L)CdvgY>Cfwe8(!lHp^*KcnvxWfkxR-z*4T
z$V3gt{a8fF;<l$Z%QVlL^iJFwqb^aK_>3`WkT6-1CZl`MCBbZQM5*%al_#0Ud~PWd
znuhLXy{WFWH<NBIk5v5rTfM<5EWSNK=N<~_T>S9L-g1;HeQxOrp4JE1yfX(X=M4rj
zJ~G(f4}gS<)T@}9tZ@nSjjsx_=gyH!(dwF3qE9<laL88iDTN7}6h{Nh#-5CvKO9oW
zH6=+IIQRNlrA(5_%ue#=kpE)h>J{0_tRDOu7FqQA9%;0((5=*hp7}{O5Na^NJYhlh
z9VhVu^(IE=jh<^#$FB*~dOFKqLf=HDthVFbX$vni5VJ<o`9M_xenRft=y@J&pC7Su
zc%tGVQaZNiOV*ruv-*)?k@Q2$YRSlb;_OWvao|pYcIJN+(mP^$bjQ3JZq4be$CR)u
zxyeQnVt%O1o9eFlp!q+XS9RKUGOI0O*K|L_fc^*K$z)5ia#(U}*E3R6-P~f?HXZ58
znXf~2O@P-(bh3*18&5nDu+8LR%s0WKXZ(1i#>q~DyGeUWk>{SBw<M;Lg6>9sSbMJv
zqqZbvu}d73-WD5BFi%(o0$29Ng8tAd(S{e*?6g~PIkfl_)HFuY0i@Xa*RHRcd|5DD
z)dT}BTugU$MwP7Q!&{RFVi00kar6P95&{lrsI+-6_c*c1RHHEm-7x>MKevrXEJuB%
zH~BUGx5T8YOQyZ?<xH;(K`e3@k3Hotg{D4q-NzWPqLH8sPkNh|ci%&^Y_Xgmv}Y4?
zNk4iw!Y`$vs&*j5p(ypm6s!#SPfThzptVo_0U53PgHI&&zC3g(Ub~-pO!HVCD(AeQ
z$4Et+mu%%Q6Sl2Je#Iuq9m7zjWaqwApj|3w-!E{79l|IX@q&vkv2Bl%wh%JHc~ZBf
zNZ=kFtF~y-Wkbo;jm$cOp&FK;QaCDiSBg)=%=Mp`F<LqrS(m-kpWxp!`R`^j&X<UB
zid1QbWlK`=RjyzCjgKhik(2BfXZcXS$!<(UW;Z~`BRv;y^TG@%<v;~rqsULw?ArVe
zs~PJz$*(V#?7^jeAA<(n615IhxxXcs>_)stuc7^e>5*5-hK604iuL<Pk|b?CwKjF-
zx1#cSFsvbfjU~NAF7d}p#gaaK1wujn^jEyfmRTUp#ZRcoDW_!fWai8^!Lv-(Mz(Y9
zH$WKSx^0J@q<(|5-KQiwIty;ehj*a+W*#YD?E?y&)yuQG{2oQciO^6|aDrT)g4z8z
znhyQ16b_Es)J@EZ>ImK0%Y01saoafCl`%D(6!k?k6{^mD$B8K8v`NBBP4^1lJs$!#
z?_Mo=BA$(WD(LAFp=OWCv4z4rq?u52sGE-(M?$=<W|yII?RW8274YTGgwexdHk_)1
zSpWd03HIKn<*`VTRel7DVdiDJh86z=?iTj1pOR=7lw6j;O&Ef4E21D@G6t*Rs=k~a
zYm4>R;be%>kaT>+8{RMioNV`5`}+`zbtQgmh>f?f+|vB)t+kd|OKBXZy~_`op=)fP
zs%07pL4N?U>AC8=ELy2B!xmKfS;_n%Hj0peyV?+zPnM$(I+YD<-wKn}6|uj+vW&IY
zuNFqsf<$~WWLhOurNfFoFid#Zg^gIS`(~zpsNzshd-KWtqJGA8^g#d}iXVzX$cp9o
zIXpQ-!1(av>Fo_UN_!pahK*|`)Qj4Gk2@!LPetgIX9EtTCx(a+S!E>izZJH6&G|Z5
zE-wEX6}q#01RPVz#U+RuCT`5X)yZ$x4&I}<h>|SM_9<iHpFJCpekx1Xq{OE{eo4&f
zxJQW6tJ)VCOPqPnC=^oK_Cg(Bl~pr?2x$?t=T$~Iko)0C|IZ^3VCjSz@q=dJKR6%e
z=id%!-MTT!=OFu1UEKse=E(Bw#dIR4`wz1EgeI>yINywfCFErmr^qog@yn81DQ0%<
zw##0dVB57!g#RfjVd=hYSj}DxRqS8zkLbm)t^qcLEq~>L+A|5UI6OOa9EU-fq(z{|
zjWz10S$K|}lij{^R<6fF$M=m90Sg=N>b+FM*!%HvFlvLZkn&R|l)E(vqj|SoqnU2x
zvPpt_i6s#^lu+WL%<onEG2270hDDy@rhM2>1}@?ROA$e|iC@)uZjNIO2Fs{b)-6@|
zNKKN2n;SW<KgIj)&@GdlO0m3$p<#6~*!e3-X0@$AjC%D4xnC2Vzh;xF2$V!$T7a;g
zH14UKgH56#0}`hZIA6LgmR9OiSjz`?Q=EGhGk}8vfT(Wr)6avvz9BtQuGJLXGnQ(O
zmsZSX#k#ccmQ(c^9r$xi0zG5${`ESwRvVo9b|*qAQaeI}hKQTGgw;x39mcF)I4G=}
zZHk>g$|wi54DNNd!&tC1707<>qF!fn&cw?de4pjZLs$7US}(!pv?lC}>afu89y!a{
zeNI!Ds;?RXG-cs-vc6D4b*mO0Zno>X9v#Z$r<p1lD=m$7rzOJC>HcFuUa6QMFoXmZ
z=S*NmKA<KmlDiuPlhI^YzwF&hD%z#u{d=*)L$};>7g~cHiMG9RxIz&mlj)VIRN3Az
zr~b(#(cOUlSNOJO^c;YDr^<+f{k$^C&bZheHsL_em@Tqa+{tYv(RuL%B9S7};mzk!
z&@g+X6F3Fwx<0G2!7$+Cbfb5ABs?FRfoldq?Wsy0_p;ll010@>NhwQKeliL9KRXHT
ARR910

literal 193956
zcmcG#bzfB5`#%gKC<vkgQUan#cQ*n8(jXumL)XxqN{57W4P64#(jg!NLrQmdch|lA
zdd~U$p1|!N_)^C`d#$~$>w4D?R*;jx!XUyxLPElleE;qP64HG!BqS8dhiKq$aHfS?
z!Eg8NMI@CUf?pmF4THd+2_3}L9F(k$9h@O{Mo1=B)=(n`djmToBP)ATYll6QW<l^F
z>OUV6wKIY^m|0uBR5pVeA=y}4(Z6J6eQD|F@RF68m4*H#3kNR?J1;Zmy+GR~B&3%}
zlJA6-T~fAZoMS$&{5U_@qp@ZhA|!Cz3;IMYmK{WWs$<Qb^vf#qLM%G@U39|qG_G|f
zOKy_sHhLA(D=9_f9H~8{fQ(+uwwUU8B`@z3h+e{HVG@P5+oE<2-aVRro;||n{etd$
z5`<2BI>h9DPedO6`4Ob_<<=EDokM_c9dmQ@6;-;T##bX1vpCb%%Z9)=|9y(7mdQ}z
z*LS+(-F*8AbuaPLBL&=#2Q|2xOV8`E6B-T_qx`p&lt&WN&J_Irx$?t<Hz)oWA=DTS
zjKdd`F)s}sxIMg5IUP&BzJU>3ZOXv0j#(i=@t?=)#>@Kq3qzkZ)KLqM#$des@7_FE
zyYO@JIwP&D7)e$PdXShd$YZfq2#p!!%S}Z?3fypp?v+Sq$V=d_VV>F{61^I%{0A|7
z)w`p6wBoWkDUCS(E)lGgTQJQ+;n&v3^{Ih&|JR;hh}X%v^2;4dTDHjA)k_6?KL-WR
zw63$uW|+9c=)|uGxyGf7b&VwaTP(;Z&rOw*8XsgAiT~ez{rS;xT6<qi8Sm1;!Tt(W
zIN;1~;V6H*nDe|%Q}MaA42~?RE<CW{ZHEYK3yxZ&|AkCeWn9(ZaP*MEJDKFQ#Uulo
z%D?;ikX+79!O&0_TQ&T^R@@q!ytyk^oACArbDsq9(C{z%B6&sRC0iN?XdatULPWR3
z)j=)Z=}1z~EqA*`=(E8{mH+OkHzg)Ls3V6tzc92Aen~hnCi*+C+{ihAOHgY6b`qC^
zrBIfYS1U=RS|3K&aZV`oOTy|W;_b!RB8C0OHxsY_pS?1*5%GOha8E#5YuZyW@@eCA
zjW+F-xlC%((}gx!GyM*A%Avep?WiW_=R=x`A0|cv3%@C(<k=tnLc&j5>Byl`9!YMv
zh4^^)gheAJ->ZcEdmL=d`5?kyTT8ok@ck0FhoyfPme;YjN$+*2{SXkPxIlCn?l$xH
z{4jY?b5cEGN!?F+=4C~~i?@*?@VonD?LGoMfBPG!i<{Gz>NqN)b`|u0kIABtzt^kB
zo1=JE0!*E6OfDuG_`p^93K0|^M)SIVm%{K&1iyVj<~t?aF8adetP%qDr`As9(-k9@
zVp^$MCHak+`0IZkNYEY9W-#~qycHv5>Z*}RY|B~d_mv$y$;C9zm-n^{I9mcH$Me=(
zF%sf>cg=mN@+8jF;<p}NDl?L;+{I)){rABA^7i4x4#}s*+*$z#?XVw}h1Oiq-G1nk
zDl+PHv3x3n9e10btHlS)Sy+y)34VL+qzP&AzZ*r~lrqUrooRt_!@D&s&cM0Xr|;Qy
z9QmTTOZ|plOOW@cioreVpCtHxHRm!yqILDQTWO4MqY#rtQ;Fous)Un6HydbF|1F5A
zk#mn`aWviJ0SrYk^zf#);++GQk4~&h7o`PfSOWFipLupuuENCxI~{8u6|o;p$q3GL
zEDw1S<jOh@FRBi0UV!s2Q{}(p0!x>qA30_t9#=?R2{^z&sjG7_5&Q5l^S@Qg2}4P7
zH%4d0#`DU}RFmFkx?)Ej1zugua`5!%!WQv|HiJ3oy9+Has#A!UlWdU>@6mR#JQH@1
z&G0OSGg<fM6|r`g=!BJeY-Qwr^R2JHX#egy+(F-TP><3JS8SSl8CANjScJ1*@ascb
zv1;)D_N!sC!6Vl?IDG7TshMiG^jh&$BBXnlUMb+pW&V)47CH8l>H-zlirp0|`Jpdu
zfLVoyMN)@O;aXKkp`>w&R(RfA@L{je=zc${t&=LTDedw0{9;+jiv0w&P{_SDx4Mf7
z)x%CKQ+l;IJH6GnzcPyk(=EP=civ50#&~=Xs^^JciEy6ZtU#gKe!(S+S$ci&`1(9o
zODj!(g!I2ts{A`Q@l_pKBVVn}28QNo)eBsjLiU;)1j@9%VnVn06_2-HglX$5rge6K
z@1dF=cM}?MmQJifQW%x+qOa-lMgwr%P|jQhm71+q=CL%Km-8y;dlvS!PFkO4-!Ptz
zBuwAdn~%mAYrJUtoG+;!+cIzEh0#WIHJMJheZZ?ujv>b5x_0@>W+R;zLwyJy^^5G^
zJL|}hWfQZzM=LPNCmc{vm(?%B7SL-wSG2a_oVi{g;?;@nQN++~bHj92;b4E6e?@Aj
zzCYaaaPHC`>!8xV;O*Wsd=AA>zEpmj;ZL0{p3-!fxTu$oR!11G4tUOYM|k+}U?P3n
zOBW4+ul_ldi_)30zOP(`V|Cszb`@eieis4rgiMq+&r%q?Ft<;_|FAJ4EFol>qZJ`-
z*5k5IT1H{rnP=xF&$S8Rd3v=aYp%h=^)uX4T^SY4$rkp35by3=$Ps%T-qv~JAr#}E
zb#V(qiEuZxvT;rew~JWwLrLlbgooxs29Ws~{T)W(mFe~weS5pq^Q#E*dpahj{t&Dm
zkklzg3DFiBtPQpFgF?-t3-|@O2WgHiYLeBCV{Yn#g=5jm6&9=d`iJFLT;r?XRRr<0
zQ6e;3cFb=p+EBzE(0r0`z9+HC!YHf+L;7H)(Ei=Nhq7wkWA}_2*H2l*3r`kWiz}f7
zE30)_v#;L0U*%zCVxeLSUp0RZSH#<|#XA(G6)v%#9)&;MXSdu_`W-<KnE9z=<;#NJ
z7H<5k4R%BnQua4FaV4+!j=P$4XRSG+<0YKo>UaA5w0}F#bqD&D%B7RT)5n#)LUoR^
ze}*H;p=N>%`ars@g@jxDIzd1$Jd0gjVEVj8$IbC~8T5RLPtlUNiFX3s#=}!82=x2w
zemX~o&M^fd;{y^5b|0_UfgAp5Z`Xv@(j%LARYLw-W52X(RZ`@V){8bz(CY7P5m@ZN
zqd4iR@-}AW@(ezUL+ON5a2S~K4}G`n*EO<_7T~zep07iU+Cb|k;OcDC?2hK=qnb5L
zyN>MYw??#WeLU|ae)`eMT7xy4`ge6jANU;DWW)J)QJi-gPfS(^DK;#Rh;fg<Y4O1O
z#Z1m0UgDNh4!>haO(BJ}S7BCpu8+s3tgOM&kw5NrGF!MtS?dr{g6}^K!IhVburbzM
zbJr;6>1Er4*BrGz5p}Oacfn;1=)JNS;=hsma_Ms9o`$bndub`O_W0!KA&nu{xRSx)
zn!4i0SmRO#D(2J9FrH;pj>$EimI`Z~XR8)UmY^#i?jJcOtY#cM-dtVWeI)8YJ3OEq
zlxrzC9l2U!Es@MHQ$)*L8JJv>MwY3R5g;9?j8?UcILuR5bW$b=JNsu;9883f&M!O|
zTip*eJL%C%;$QXHbpfa4*1=lvXe{>}@#qA~_Wpn@uh-{Q5{AH3eP>cBbZ+3v^~JQ)
z_FE?85-HEt#l{~rQgpKVG|7Cq0RUr(AD`~`porBRi>g1HncQeN)_b~R2SYD~wuOh#
z&)v9_tXx$zoa=n~b7vCn`2LWvg3GM<0SZ>mt!_5Vy_MYTw<a@vqbNL7Qk{AGGZuE>
znRVBdV=^^*Q>QD%WDR~-%X>M@uTfxz0Sk2i6~e-|WaC>`OEArVA7A`I(IOImczslE
zsin|v9aPeqdKu;CuTHf@bM=%x3CKDHub&&ms)G?U`-Zo<jv+#*=gVP<e=uC{t<~Ec
z_cFQPh0Ks3{1Rz$=(r0peDRFdfo@dsQ!0srTYSy9HZ-!2Td3K~<I{9{m%L6<2Qzk9
zmIWWoTKB23vNv|@4@x5yO5wEDNGnD!TMN>=GdDjTI#@Hsk|eSA4;l=<D@r!b0YBMS
zP|-GW6;yyL*OKD{Y|TnN(}d}b2EN1k!j@2u=?5+rDjbJ7?whdV^%1WwWfa=|b{wx7
zdzn-T7R2He6nLwxb=}{6LO&ZLzWD0zqYR3cRnc?sHnC#$l#B|QjIMU+^iJY@6oMPT
zA%($yDj{<^M#i_*x~I6ISd>Lw+T3U8{3F<C;@Sd|QdiSnUDBEHGW*#n-)E#Lr`vqm
z%KjlD@2V>Lw(480p_=X8Wa($uW4~SsMzp%NdGHGfISsQIVkJY}VbwPRlipsvAAJQ)
zR#GJMTqnvq<~6;Gp)B@`L)0|C6MxVnN_0b?NNbqVYB|e&Dv?LGU0FwZG@7HXy=mxe
zN;K^(8B~VCU&PqG-`G4>);w$3^YEe%4`S8)@>c@~O+m!D*P~XV!YUJ2E1ei4O|}FH
z%w~6Ym|E8&U4%+S37nsP{fV)IH?}A5rX{tr&xbm+YPrYE1!;jf$shPH?fgPCa8PT&
z<C@9~I6qy1jBa<9o_#`qRXzF{?Yv@dtc%^8_S9&%KsoxznP&82HHRD*_10O#k5D@0
zr<~XO6|T8X14A-wt~BE1U~h?1DD^|LX>WA`?Ley8FRW0=i*BdE3(^MG9@jQckDcq6
zWY+za3DAG=+_|07{G)?=$EHgPDg*-^ZS5wPY7I0;fR%W}#VSCrmgmkmL(v=<?R;K!
zSLI3?g?kd#q48jO^2b4C4LGyK#yJ~~Y@bCG?>Ac5+0^4&5<j<kUtuI4@a^?=*oj_F
z>;xt9(@*cZatmg&4L-|7JpQh$;Tju_{JS}{a0DuUzgc3TNxBu_DQPo*03^-oKRx`p
zNkW*KMEEAoA>2%3zv}_ITkN`)M{e3y$Aj@oI%!%9rIbPz<4=JFZlMyX_V-@Rdr(<>
z#pszja{+K|(8Wx~)MKpyuW)ZhoTYxt;2k_1KO0TB-j030G}w`gx>qb?dtoYs!dt&S
zv7n$}Xrs!N^}uC98@fNF`YNn>n)46BL36aXpWV=bV;=99pay^3`<(gnCO!cDQaKfd
zV{o}BdIkEb*R_bi-MP2F3~z6Dg}wf8I|GKjas#P<U4DBrK3UgfFa`asAeDIDD=clL
z{W?7KkiR^{_8v{h(coZC+vgxLcqu^a=K>gDUVmxRM+S{5TsNa&);ucsu^bcJ=SA3c
zx|HK^X6}NTgxwZ~KP0yGMOa<FBy{>!5`UBTQ9ZlAPpOom+8dZZfUT1?!A75RX>nKc
z^`?|ZG-ag@M7?4oRWmM2S!x|kuAF#?Kuyc`SXy4p|CzNMK00|4`Vh4oZuzCR%fD|F
z@E$%;4k0d}2d#%gvCwuGi~Tr7IX^hb?}i8!f;Uw)p=<qAR&AX7hTxG1kyRr^F*?D2
zq$|d88*t7A`B{8;xuxK29HjqqH1WJybb3(c+ju8l^0cl|0r5iNr}4#+Ly@TEYoAtR
zc=7hvF$5!yR>-zrms^<x><MW~zk-%QOIpC3v*0(W*TU*92bfd*yLuaCT;+iB`p4<Z
zoSg#B{0Kgyr{v92?6!xOA?rjQP^lom(<W3c4x{5YC)AB9H+X2xWz4f=OAyS^=f(1D
zfI4Rg0B#o9)mkgs2sWCo$|#7!@;WuQtWmbULdz#&p^+a94ZI(e90OT%^&uM3Q1|3G
zD#F}9Y`3_c*uBk^_RIDfIahkQgLJ@U&4}d-;%+t>!qpu6jPPQb-rI7%5A`p?78+-$
ze=de?7<UwgYHrV3D}0!bAs=anH8(t?3AK5<GN|Y^d%-QqZxqd9>9oyu4#(j@GSuX$
z{)^5Rhm=$ZW{29GOVE|nO%9jvH@_9JU2N7OGx84g?=<uMJoOA*RZ!~Rx0`zdvGOWP
zBEbvv(n-lWm>XNMGuGu2jPQZ{Y#5=rWv825ZnwJP4=aI@8EzwCrv~63C!ZO*x;Yg|
zdbh{nu9$)?`(%%HwO@yfTd*aY%Mii_h1`pH<mIVJ>d!-acT%`Xxz>1B{$%Nad+kZ}
z1L{Kd&PU()ZPXK3Q26CW{qJ3w)9YNkgde|=>?2)Y`P|)h-Z<}Acs*bD;uMtFKAB^T
z3ZW@c3g2*tEDnkT?e9`(P>!WBz2ttE&%342bH2O)f|0ql<2UG(m<NM`@@?PgVm=aG
zdx^&Yki%hewK2}D%KL=nVv3LDwvocM$33H9e?E2rUWL)oRylw3gXTH(J=vKcG)MN&
zp!bwYc^1szUjCi)mm<;+$V5bu+0eJQd75Q?`Cg=en!XV#;>ev+9!)YN&NQkogxTSX
zeco+nOudtPT3BV2(9DUrJfsK1P`nLsG8%`6JV=<#;Evh1y_Mno02WbAR*x^GsfbH3
zG}qfHs3Y@8Cy5M9{AhctPo5l<-!RYlG04-TC?JC+6^~R@)^&=Ge7Ee9c9asb^idk6
zCm9Rjl_@3*di?~|#lOqmimJeJ8zZJ8r!3PlwWtz4rW7tX3Kzw`)UVh2ad18c!!dm(
ziALp<gg>}nld@V2w1mg+WNsU|TR4{Pd0d4skEQIaf%Sj1>{if#C^)`*r}4L&3{>Hw
z1~}LsEhXCp<<WZ`xy5wxu8}R&70)};gfR_b52{clUv-Xf_OCBNHdfi2y*Nbpq4o#w
z$>PHgaik~s4~*{<=Y4OP!S^TN>jaWOyQ{Tq2<eWaRr0gNJMF|am^>->>f(zr*wWhJ
z0CFxv&{1C(Ze6ZT$M8#M8LSGU>Xt4N!Z@g;{m`$MjeK?a;oQ;QC7KX`GEUG7S)^|>
z3R}OBEiTpau&jQU{7N<onAwxL2KJshR^J@WLH^@2qGBTA`R&i7UR(mLx!US^JD={o
zzH<3PNsVIBux}c}4JTKlDm<n+-@KzRI_h$_wfvbQEcqE80}=cq0j<uUwYj_2Kz!14
zXOkq@%?`l0_-GkA_#Fl(Q4*bY(+R>J&53Yjn$=BS1f%hMH3!09Ji4~>z*oLG<vGu4
z_bE<Jn9nN=PrlmxFb&I@A-A?cUq!A@B{2Nu@JAwkHyCxJ*8yQ*_gbGYB|Dka?55~N
zKhRQzyd&d!eOV)!4Sj_kn(`?G%9ryvDOZnl3EG5ZISGRdDlmES!5Y#Z{>;DCS)`$Q
zy%dKKj<fD9z2M%})(pzC#2gY=iGlY7`$Xad(RL{w@MZKGpN?tfZw7aV|K@n;hK(v9
zavP^qT(HSNKP5h-QF46bu8fOosi&vv9IC0wxgDYAchlF%EOUM|WeXs9?ddjBBj2W$
zkYFbkj^(C4XGI*<MMr~L1^tV^WbfV7`rJgjw{Ehp5#9B9yIa-H)v<lf2_GB(d9{WK
z3!2_dAHBe2J@=Ud6H^nuiFYHSG}Q`J(MrzQ62AanfLTkN09q~<wr*NC>T3@GjT_pR
z>a{UY>TAA*C-Adz$*G9$ub#14?lw`s>wkuC(ZxzXnXo!(i!6TZRN*0=RD_;&<&Joi
z&(Fdo#cKfsI~jsS1Lq$tWF}(7mmJ0{vdLGB=tEh)eN~?7nUbLgqV$-Ls`l6>DyI-%
z(B1H?U@s`5O3yc>Pqqu3yqfAK)7{JZT=U!$k8I0XlyU^E4!X^r{(&S@a*qNSci3~o
z_YacC46fZJ?+y8!@MX9^fF)DjM_?6vFP`OvLVQ3YD1Nb(_rt?qdxTQR^IKDye;Z<y
z@{jl?1v)56EZWuUUM8UC;;!UZc8}0t6v~jUw$JRJHfa|hk%7UKRQjHn6Oj5(5*gVF
zR9xwY(RW=rf)K?gc2z$t$Lpx1<=(b$eb}#o1*Ojo{r1CKS6N)lMMvh0G5HqEyF%i~
zQi#YNuY$$Cr+?(;?65Ez`+TcQ&hLHe;#i3|fzYpRKXRSjChlKnY2TqAOGeMV)2ftY
zAK9VMGHSP!L-lFaAhW6l`cur#j!F2dB#pv5!7(hRTFAz$<@ZY%c-{IV-@&c6W9{g_
z`uRhr^yomPX)H=ibOccL24fDX7dvmPVv;=K0PL1<vh5=DFyO#za)q~W^}YPlzsF_r
zW1a}iqVMsOeH#8l4-(?8iVpfQQ(3dv0fHyUpw$?Ee{Zw3{KS*5Zd})zH8bMDkWWOl
z5w(@tG)l?{;}T6M=?-i&AhiEDgQKComuMfbOukd2i6*A*$X!N8f$olL4jORYfofvc
z5zR4PHM9%aBK2+Lpu~|sI=tpL`T8|jl>e6!r*(;q)CX4eWW1?C%#GdEqzV-J$;eDb
zt3UEoGFf5n4~*MI{xHCjx~q(sp~+GA)-<$;VpMolp6%HEfTzEwv;Z@eb5@r)&-p#8
zLB;o0)AAtrtsBl%6#}~;hNB40ojn(|Ihhm?3s&3wv;3(Mz?hSsLXLL(tvSXy(L;`D
zZJ+KJSkA>m%Qm{s$#uMJv>A1(MMg`5^S0q%B8ngtHU>$(_2rfm(SOA7R1`F@CoY%C
z{w~vUXo!|i54qoP=(<`8k;aRZJi~94c5th7W+`Y6WEA5amm?ZvSVKGD*lxCS57-k>
zl0JDVoZO`m?fHY!Q%dW;CkDp=ju7I<=lIzOHhc9b6+YJEt?k7gFVZG2ub_@Qk`{i;
zAVL&ev6e0KRE`XrZ8b#8WyNbptGoq!x_8mf%K~2Zz-QF^$QItLtBk7~MMBBn=h1qs
z{%DPOV=xYI3VZQ!c~-0Gfrk`b^QXYV0yc!k{Gc#u)sDq%^~(MdO^A}TT1=LriV5JW
z<rRZ^COIttXZ-1<Yt_rPABC`C7yvna`G?!}@4^p|wd&Y{=Tr?mazDM7wj_2^Nn9tY
z>{e3zwD=;=b<04v-@-O6T|S4o$WFuA*}z|v)}q2iiHO+6N+$(C0LP_!)9mCw;o4}A
z#`0Xep-D3jQg}ouAP2i0l3*ek>Z#&)R~xPmA=>L;6L3K?&iyv;;R7H%OtWxw!tnip
zO5Wz<Xf~@EpINs%K7m^+jHj*2Z4wy|$Xl;qNra}KM~9V<xw_s2=jhXDmU>8W38_RO
zh7B#Q*O9SbaeJQ#wZv|0&p2pj@OnBWhF$OSN=b!m`>z50S)~=_E9jYK!WUk?BzWq;
zUnz5xj|1?t_G0=a5?dU_xt?|bqD|+?=x?IMmxOJ(jK&<svCF6`9#*kxUHY<S0USAm
z_jLSOP(qN#?SC#e36cD)f-IWpP{LL%w4zSmUu`kanqvkyoB?z`{BCM7ys|Z5GQqyg
z-9m=cwJE%#DYZYx<U+lPqu0lA1CIGMB;bu@J?@5!R^UfIMcnmK9jX@!oiB`ZX0saQ
zBtJ{3uVm=HD3OL->*amhELt%e#6qskNgn$3LAY;y$@r}*mxWX^=QE5;W$}}v{gz4G
z4V)OzJ4@@>rL}wXU6{Ch>$%7zbQFx<n&1~oRs2#4d}R}7l!dhWTB_9C;5l8jF@eDE
zwpf!Zb)``Ugr1mfm-#cZ&_N6oS;y2wYpo~xy9E?~x+)8^!IXlIk=;vu#gx3ofhlHB
ziNC-F`7N)-(QX$zu%&G7Rv=!7A|xllRWM&rHNlOL$?><N4oP1HZ^iu#b1#x_Z%&?X
zIU8TBrkN8_ojJ9swIF!!1|FR_&<_(#bo8#@l3EFJbpq4M<1A6biL(cxbH$AKv2-tm
zt+P87g_7hEJNS!P!*IKo<_Ev$HrKVX|5RYbr7KXnUIHX^@Ke{ExZ7SsKdG<5XrT^w
zuSkaTYML1$(T?cu8h8J>oY6dXxD30f6rxAzV1{x3tXxu4Jbq^ZSWW>o^(WgH^MJE4
zO7*5Uvh+qAUK1sr3G>$rg1q<}TJCb6PWURq)L#J1bi;$p-n$`iczsP^ubShs9H0f<
zu?1VYFY8OIjU00CBo+1ES!2Js;LSySG@3_kt%g`3v)6B^qJGSs_*A0YlDN%|ciD?n
zY1-FOlc^`-;Dm;}$zJ8LisKJU^Y>&Lx~b%eRU2T&i@o-wpGbiNBN8-=Ty$Z6Myjja
zoR%|SO9BFsnv9=U-bXR7nBW!=!FJ`6U%=+-sMt`ZmEX`c55tozCcv2w99seMHFdHR
zU!u^?A$u_?@%(fKDXCYVV8+)56~4h9_1MLb0l_AB$Aso45`!fxD(zwl-6hbRzYxwZ
ze8t~PsJ>Kq`Mtc)j%fVxajB7Y+`Gx#O!%+zg|U*6qcu5ynHP(1?2Hn|o>K;K9@`U6
z&a^|7M3hGpr_VZw7HN_ljpTY~d3+nU$4&NU!PzXTI37WL-2fgp(6&D4FsT0{CsqDX
z6%0DMcDFS*5H2Pon+H5g$4h8{+gZ{C)`fBt6hF(*c>jUPx9PTT1xNbq7NF<t^$0tw
zB<EuQ-cd9;P&sB8{pI5MB07&(Z0Z}{t1bF2T1>#u5~`S6{7uel0Tsf3e0CJ?tPg~w
z$pl31j5?aLv%T-)eWT|^d=5?1=~8pyj8b%%Rok|=4aYh@e;UHwAu~>(i_3*?)`MpS
zuPGCYWJmpY3O~p`58_r6`#qY-^&Pkx=O=|vo4mCjy9(oVJ0+FfdWmm88VFAZ#D<SH
zrTVnZz0TF$HB)`n2O@Iww0mZ^ge$Rv7NJV%PcSjn1{%R1rRfVYfUN|>z3SpWifFs-
z?G4^VbC!4~%mYnP0XM;;F5+w~yY%zp3tne!ToILw%)aH5h{qg1%QArE-OW|68Z6g;
z%2>6-7L+5D#<V<-!S2bo2~gS6={I4}a#G*728;J;#mz@mT=P3Pj&D>is@QJGjfy~f
z%ul7gegpD^3W=rK>&fFZ|B9mwT-VLT=ippc7^F=YVtT_!Ue7Bgx+KNxdT>O9@cI@Z
z!$KS|+l<>sF{L@v#*Hg;QTzKtfshRN!HTyPBBx-sl^xdCN!VsQ5r=8fm1G=AKb5lT
zvmnSwuwVehv-(0=s~adsKs$9<=f7Eijce4iD?&v84wnm90AFtFZz76*d_e>Tv`Qo5
z%Nqoow+(AW{g#ERFAV1%kns|Lh?F0u4#eX_Q8{%Wc8dq+3Et`I{RKU@L)(QMk~vTv
z7pA^XjEqgZJe}bfzGB2F#_6$+&+Br3=fITutd`gbNM`F-P+y}tIu7Jzg_cX9bXRR?
z<+Hiw2MRpsfwwaP9b_S?;%3^;Dl)C<gFJNjogyyqEwZj^)vGw#Qc)O8Ok;3O`Rzm*
zja1Mgn$#p@MR5jUDrn#6m;FcJ##y<jp<Fq&p5{S)VuFHd$+?@QXj$4J4yg@vX^GO&
z*NeJx*rHQa;1nr*YKX+SD1%aQXMe+RMMjl%yvOz6)pH>5F<0g#m!SxF)R6l^CTbl0
zhumFk>h%T!h9$LShpHBC9BC$-zuV3kkyq_-xY)U6w`cqJ`;IR3Sl_KzkY;mQv6Pnt
z0__CQ49huZk1(54(o%wfDOoQy13gtPpqKE`V*Y6hUuOG~dgS|p%BzN56}oA$`Zm{c
zs3o!tKKB)^&^VBg){@7Q&rGX5zczA;LA8jmhAu_Qugpr@tq%>f(~<pBZ#o&bkgxXl
z#ktB!X4{_hrgn?rfGjckW@=##*(LSu7O^6T<R~R6Hj17{v!plBc2CiL0N29QR>==f
zpr1`Kvy6)-bD+Fpi+|&~(a4?qJ>5(WYpQ^R@Rpwr&PNyB%jzCQn2gPpLsP<vNa761
z)Ju?Ko5Wx3IA1DKGr)c(X6r>RP}d6ACXBO&lG3AJDckwd0-mQ<m2<I1a>z0G2YFU(
za~E+*ux|{n#;Wp-mCPTfPSntKKRQ~xK7kROl;!FU@1jr+Wczol#Hj4#GbhIwLMNhE
zvSiKZi9Zk$Yb)g!v8k6bw(s4NEVPAfz@ZGpqj5%RN=fal2(1rz{x?rU{fUS8Z^dKq
zrsS_H{yKoazGbThhuZo!0Jv+sMViO6IXOtbB!6V*hRsE0C4(b9X@~_%Jf7{!ZNC<{
z8Ma41XoS%moE8T0av5Y4h$|ktsT31!NsQtCm0ApJRPl9_pJh@@EHPDN6*1VaCOvp1
zSMUGL<eXq|M)r3eYeRf;iQHqmK0PLj?(*%)IXj9BMyqIi<wVd(fFd9w2s|!<X?B*k
zoq52ZVL4SM4%DC+*3fbZXkMr=jTZFhU<s8IBZ>}i+W_9*vQnZ=Qamx`{kNaz`h#rK
zA+z|WbSYdt5|W?8rB%Vu38t`g`bd;A(cc!c;AQ8F0ehsaWfvEr+5afh3`3fehi)!~
zZCrZo6^u|iI!r+Jr+TXkfPdBu(&f#!zxy9JIbOQ-X{72~_fmxxywF;vh;4Bd);(xP
z)Tsu{)St1*@8F`sG57a>kML0c#7-+TItiDd3(esbKRwysKdA-QL4K$@@Ce{Q@7|b{
zGjaECA!#nODxdCOM<(?;I=QEex>_Xl;mIg>V<2&x&qZPMwZ4XDG}E!Ehn0VFKbGB)
z-%GM0>4PJ0@gRyOg0BTx2X(j}I{q$$yyj$Ivp_f0suQ6%BXO=6E|nJ>Baf?;pDf^)
z_<)y}7F<j+$1Nh5S7ya-M#6EqF^VT5=<o1+(QGTB1xv*-4&7-ZQf5lF?&G6>s90Y<
z062V1okFW{wbEHvvv1VQj(&fVF6uSpz2F!oRP_R<vX}%v{bkYLj040Z76CjE;E?kI
zvmSIiFDH9O>1xCG*-+rsyjfQI7OLK(mSlJuLh-Gwi_1sQUsAL&#ksDeEN!Ka))zDx
zk5a}k*Dt}!KMQRZ2nFGfk3XaoW>5oLq6LV5v$|vaY)jR^bx>pC8oS9%YLqZccbUN$
zOIup|B1jry$4)<G=DdFyi2mGKj*HRi*<s<dyKT^rd)>ESjq5$3Et>D_3b^ZIh<3cJ
zo8!Ih)-}bToD}?iYmXQ`UD3Bo7D_&tyQ_=dcX(#kgdoas1N?z*raZBv`<8tIGu^;`
zy51alNbKxchxb`|1U=H@s}6Iuq{96a#1=q()AqKJSoN4**ZL&x;aO`w1wVmc0dhJC
znOfh=IDnAR)<05i;~C=6264b^MUHKrRUNOXe8R1Mf3HOPAZu+aiGNr^AP-{=w!0+3
zwOZ~N(GsCsWU@8eZ;k$6@G9*~0WH{9pj0U5p17vx@(S>6>YuWpyePO=i;O4cUzaeF
zjc#7}csF!NBr|73UBJpeuUX}-<F7?N?{8+dEAlq?L@tE!+Wg*^uf*3DY|@K=?G<4+
z<B*mCUV+^;#z1z%yg(8sO&W5ZfrM+Uq}Tf;ppuDrg#i%%eUx^B+l)Qgi5P@1GMS4w
z7~k;a7bXkOXgM&A@-)UL)3kYL**kqIZg*Q^eVe<&zUX@0yKd`^0700GzS!FIpI|T5
zl$`Xh4FAnWnQB&H1y_1b->_ItA#SZ0q+8%-3^x2zRTQyhl13V{s!9uoie8jhCx?Y*
zPfsg91Vr_WcUX$M?I(p-iR43grI$z<_Fqlr4{Qp5&2HD74Oje-&a%PI#7BqHa4ei6
zLpMPjht*x3>$*MS=H+aHOd3B#oy#qs#oga=PTqTlAmU`y&hTh%A)5^$RW*E)u3ZcV
z;hoM$1=qI5F-BAw5kdbXS%Q?NVjwz<f<rWB>UBJAb+EMJ`(l;fIk7^JK&XnJgRLvV
zx@RRf7`bY%`)~n%Y<p6+?~aFyYRn*AYTqmg&{`dy#q#}>$Mw0W?vDv9r%V7nu>r-*
z7zUSX`i_2~@~6_wW@bP>ZaEe;*dSN-zZ4ae{DlJg1>UT7;_}7C0n;zL%EkNl#eS*}
z9+y-Yc${rApXm_gmKPU~q>>1iwDv~(47by#raWDEJFIU0QHXvWvUFb@a|m9ZPHBFy
zF6#=QmeFeYGD}3sHw-0-^BPO#Pk5R`Kx+ez+26|ddqUMtOh%blMj<)Me;Y++yZDW2
zF}(_F@4M{5;uSjY^L39KpC`2~25Fl<PrU*hoR8p(_Z@BXZfOm;d-Z@wB+tJxY)qJ|
zWLHtg?hBckX61PYQR7=ZkT`KZ8bOd3Y{~%B0N$kGit%qEG3AB&5M|=mPo4O^=m=co
zyxJbRy^f6uVH4md=q3^@gW*9DF^Ks?;sNZkrrpPp2J`5gmD@a%lFaHoOHp1R<BmhY
z>)td*vCne;yv}l1Sr+?KT$x3&@PdEM{EG^x<yAEO-YYrBkb-+16QWDpDW&NTxuu`n
zc)9sKc6HSf;QTq-s16*HiNz@KyX%*I*Bp{g$}jE)YXZ=P+;dXd-0Ib<D^}hDe!2o|
z=k-~gwf3{c9-XiJ#kZ9Id=0rAefN9)>@C4PND$N0_>w1L_SF*yF_5!efdz6OmKy<n
z4}-@W^!%6l4BgeR6d9}%&4p2fuvOv<{n-Lsp*s@+N84bLe}Xc<@ION}^&|y?xxGRP
z_}-91m;H=GUR1hN42>VBhPF*Rc?HcdjVcawx%H&QX8z31_|uFHfm#B@%{MRqjr8cg
z49WCy64B7cu+@_58Zyz?UtOfAP^AF$r&k+4;GlMjv3w{B=t9og1e9OP&L`+jVpIsI
zjy?WelHa)<j~RKb!|3XUvp)S)6lBm$hmmZj<9k}d&-Z~IVQDid5}hT7*A3i-&W4ek
z|Bxh5;@s1cy-Ef792Z;L1S*ctt7XwyjA|kxb;Y1r<3ZAaef~t%x=%9YgF`2}qh&M`
zBL90><bI~B+3XrnI}ubc0uGmm?QOO&06YQ)6|;~<=u^~dD}NABlEQEpjWs&&n=|Km
z@>TGE-)p*?{Xh)KK^6i81=X+vw*2JK%opEflRA>(WP#oLU~3RK`#uG{8~XJBW%1%*
zF(W47h6$X~oOu%psTnVe7S5=l&v45a^20Q@OSo7lNdMhXksyQL7cVp;#iKa~vSX_M
z?PX6EmxrLzKF|K!Htv&k(RvGs>-TZy|K;$0c^8P@@Zolszrpz5<&?r_pJU1WTM7@!
zn=FU>-I4yg&XcqU|GK!KJ{Mysg#W8kk(4M3>i_3LQTN6EUC~2Zsi^dS+ZPD4N<PE=
z-(Ap1`uuOZxZg-By!&qzc@+OYf7u4q@#Rz%@tvk(jDeMXWq*Woa=&?hs(`YxvVwxb
z+p%J8O#xMHZ4x6RBhw`DyW5+A6V7@l^c5+fcpZ;1+tR)7Ze1E@``zFFvqJ-Zkjd?m
zYHG~FnqwTUIh@64(`cEe-Q@{f)}(jm9YSjLPS9v1gm9uvz{XG>8+4N0+}vD)zpoF*
z=X!gw=6bbLjWDi&vQ!#dPOYxQ>#lAVmaHPE(tfe`emqleaAB#QwtM6}=gD>8a_#qJ
ztAd(=VI`bzcRn}SDl;>4@rX41pCQ2xNni$gsiwF6CvPUXD5xh9<uAzrN*e4qqcYQh
zSE;V6gvIr{yqBjtp&d(R<-N0w?iU;K-cl6L$c2Q`f^n!gyMMbZg>ktYBB&C19ciN}
zWz9n~{?35|GN#n>_a?$)FSp|{To2my6POLmd_c<eTbMc+KOtCJoLv#cp0imvd38WO
zHcf)hxA+dQhhY(OM!u&=LKTZ+)Rtl=dJ~P<ACMqpv6|-AVpLsP19#?fpikeeKmYS{
z&CG5ULDJu~+#THRg;85G$TFuFCJW7IewszIeL7^W^Qwe8y-MN4X1Pk1W}Rr9Ghy`W
z6#EM$|2Axk2|aZ{bkcv=G4$Dz8;q|Ltrz&XjSD{L$fcF__A=F7<Ch4}c+*$*Rw*L~
z!=vp!_camrOhsF@&}yTChTv(u%4n&pvr$OL+?QvPYDgg001{;FIc)$$)d-2wgbhU6
z+8Nrc?C+h<vmHw|r!9Hj(oebG;-YG4Z1oSetgV|Olebx3T2hDDY4wXORTR_qddWwe
z@;UCWG3=n|sq1lETUitgE)qQUPQ@1LYq|Pvp}YN{4k#ZXnZL6nutP#aX~2X1`59$-
zWrf2lwbxj^()4KnB;AZC^f|+;L>aKF${#;|(9sEpPGJ%-r!xfn&EWr{X(>-Z@3d78
zAd7!Dxti!~P&A&3_EzboP&P|;eX>28>$*ZZSK`~7n;8N!sMHUaqU&_{SxI*W5WeIq
z^s~!9E|~~cOU1u}9f<N{?ku#-F!LqW(;~Xbei4oi^#YGHg17H|tN!dJ?od4Cw+KxT
zD98dD;xfGuP#7(VZ!d&XY73*kY%i_E*`w5G2ck7O*e5mjgb)6J^}+B1XfVk<(JZI-
zx5hRn%KGQQ-~b@k{Ls~NdQpOD_^BjmonU+}@QMw93i#(mfQytR>p7GCBkvIot2`u~
zYN=``A`n#}ob3+lIB8FPPa08#Zp|Qn=v^Wfl#?WPoFy6Bp%bb{V1rQi0=Zh_Bo65A
zoisziJ)tI+_=fq6J!?m^0B}&(mGh6Xi0y;lFp#=tgx9$Y?d4JE8kk~Zn_wTZ?=}}s
z&JV<If(+LmweV1sK?om6GAmV>CEhXVm4irnZ}GX}BMw>elk3}GiUJWg3x6|+lEKSC
z6hsJQBecn?UFJ&yCuKn_7Win2H~fF{6GG#MYUR1TbF;x^`kDcNYk(R5+r?`tz*$I+
z6{_eXtgSumCH$~Nvjr`e;S2DXDb`X~my&Eh8yk3S+;AU_QYe0Uz}OFYi$C@?&v+w_
zUA`Hot<use<%!|q6Q*xpdS8PLlvU$*bQTUZxXm=J2+z>2bI4H2lPl8r5h9z+IZ&ut
z0`EWFnd(^WO{QUFgs&YbDk=)Qy7Ks<VVO@GU!Cr}%Tm1d5^8imv$C_Cs`^$^VzSl;
z1HJGGCfdeyEgLE->iv74ji)|>qo=7U4gP~|tyWBYe1-F#4jLxG+rY;p;ci%gds_!C
z>*Hkx6<^}x2m*v19XUYz93CD0prs`PK0-}P%WJGOnv|3Tw>Wg+cUb@Z8FW7!Of=2u
z*>d{L&CT%&6YSX7SX?~3fp1Dw^xfvRSH5Goq3zU6OxD|6gH4|9ypEgixL*inU_t+H
zQ2mOJHk;VaX9nJf^c6o=vjoK1G0uN$sNodi<Iecl_Vlgw67d=kmjEU(i_dy`$aQm;
z(_sW;c@XRe8bqZf?{m|9+TnMYV1y?&QM6z!`A$2f;#B4rRQ$PS_}%&syn~otYn_P0
z(enGQ!eN<Ov2_XUZ1(!}b4d$)s{R{e2(h_7##9)wfvQT1J(~Oa6e4l>4I5{PSAw3b
zdR!Tb=Q3J2>{+Rid>jv*5{ORaG6BKCphj}Ol^HVAM-N<7oi~>mS2g|1bJ9^DPt^fz
zY7pCfB0o_yncAKsx+X%R;y;;>xP+-2)63e8j3ZU2;{V#aIK0)IVTP;@-UsnG=<_E$
z)T!mJ=Ek^>lDow(Y&{3R+yg?3u_7MT>lGVE+vM1(im)|KdNoyJ1st{w<@}{lY%d`+
zP(dtCu)qf;7(<MzufIAqrJ1&(dsI?bj05Gph0Iu7SaChF1fu@j{v)M&IZf|fJ!?;m
z@T~E~pBUYKOC38neLX9ZR!L7xqiVl$Kt`PMnvJXVNl=pqrJ|ixa|tHfdaFww4poRA
z@#IP?t!pnXCi2*tXFkuma$VP2wybWRT^<ob2eI@T(`@XLsoMUL6H4on_hoJp&)bv}
zfQYg<or^N74P_5EX}QGp<gHCI%$(qCsO3g<XtIs}jDhq`4_E4mw(YgyYbT?M9UdO8
zj}+o}$1|C<1z>5pEcl1v><$ioaN3<l_@U#Njun$IHJ!go=CU>hqb6($ob@ml{=OR9
zrHB3^VI4o{LnDN46XtGDtLb$b2*eaip~Tfwy>H^RT2Zk1--4o9vMryW_dahUbJ?w3
zt2vu>|5jZ5XIhJ^s5IT(?Aagna*>@7Ic<-(I5%HufBde|uA-{lE{ZKMY_33&D8p(1
z$4qtGq;cAr^v|SLixU$TMn0QyCX3hga;^9oW|l;+RTD{->f)nP_%XvwLo_M6YxtW|
zE%=^|fh>t=Ps=Ielg*Lq>op;hi^G-tf{;vVFa$nzGu9WiJBWdpT8-^%d4UsL`_&#Z
zOInL5PB6R|XWjRVettsEmsoxJ7t()@F81DQCkNJO7N_ySX6AjSp3no(NU1R`FgM-S
zzn2x$PTN9)r2CFZjuNz|%&sq*?uiKEO$C5B$vHy$<l50G=BuX`=HASuwB(SFvnpj`
zExj;cmtIcNj6kXd&o`ox6w=ornd-^~znhNg`1869Y;`H^(PEFrSD@{M=hD*8Mg5V(
zNsb)*$VNR5-MG60Hl(9~h_6%KstF_*BmGD@|6b=0crF_)uark<hN-_ZyR2I~_GrQ~
zE%?ItnE2VpXb@wrmzt=4H?(meS?7IX?gzw8!hw!nbx+M^eBF2IZN{LR$~O?^2-<E-
z+G<ZPej{YzuWP+XD~nlmxzA7Ad?8K>0?^|>`=op&bPLve9cg&+%%+_Y18mWct8?kw
zK%tu^wfd_1^Xxg0QSUFh+uj~JeYv|a5diPQIY6CFyPyf2K*~2r;3SQ2?cVFC(XUL4
zEV<yYpyhWp5!^XqcOqjx2h0P2n8OOy&5IqbLyc_`_RQ))AaC|)$1eLinpvgHr??~H
zFzK8P2}av`$B_d+(rT;58EvJ~gUyK3RtLEWaJV0Tz)h&;Z3i#+;J%1cjP08&qUq({
zkdr7(zw)sdn%GYl_AR9k{jOR4EchLfca!-DEoPhEa_83+&(nz-Eyh34>(y7&Y2zh$
z*f<c)4wjPdzgq2sb!$7%v`dhA{z^1SMZlbA5vomxcy*3j@Jh3xnv2zBfJdOV{QW|A
z{A?zD*{UTvm}G(}-~f|2Zr3~Stu6$T8ShN~NO7KZo%X)FSzcWwJ#u5{Uc~l3M~UD+
ze0XwllHz@P;jyJTw-`cK{C0?))bm)8)a!hKatxi>`_^N(@l2-*It2#@{bKg4sbj`@
zPBu-@GeOXkSLk{H8_Xi>>DekMCv@_cbJG#Y$6_r>0LN=jCoO6ZyXX*xto#SRaFkV5
zxrlYm%xHwpTd)%Z+&N8BY|+l9?XjI_9P#sDPDDp*{cEZ2yO60WXh(ziUxfkb(1-Sp
zgXO1D7K-w4QbXgbi^K>ZFIttx+XuQSeqwO{vNXvQSAM>vsmO2TUy?$cE!{?Z0IYfe
ze1B@1Vf7!c|K#NvWfxk%3WE1z_P)ziI7SG=OF=bAvO?{5xP`<d5+8D=GMW7u{81iZ
zp%Ry!1e^eVRr5Yj{<Pc9d#3g5SEc1>ya|s+RCPh?_-7qTZ2RzL$Xc*^*wMRgqCamc
z=*omv5`p#}Wg}&l%On}a(<G5DOZ|4tiMLwbk@ci{hb8Ich&$<QESKlWj~dIEh~PX|
zMHQ--PQ4Rez>&zMG%s_ouR{oe*gGJvgwrE`EMrijnrAPr+&|({C9i+(ZpB<*G!}IY
zK;0T*up&OC)8c?f%w;iKh()11jW!)L2JcsRRk!|FyH6zj*%BBj>`4VSD+x#-Y(A|*
z)APKERaS-Icl(N=U#xMG$0?W#Ak^y?U#Z^IE;*L_dT*+lNiZ#9XR2CBMMX?b?(u|W
z9O$zI&2#;c<f7E{^x4_je%M0Sk#%*v_dX*5HsE?>+@Qk*(22-UN^{J!;QR9Y2lpKv
z9jCpncBXARNc`I5mWvx2QqpdZ^Lk)>@g`}Wae-uBHMY%d;P`mTB(nN1E-q%pg~Y_h
z9;|0Yl<T)+^zp2{@Y?q!d%^a}?za!>BbSYwc$-=+{=?4KGBDmBW%6B_VxcbkEe~7)
z`AJ|mdj<d$Y6|_=4l?f-Q&qJ`eS8;iuBL$m8oPsbeET6;t};+zf9eNMRcpY7EY<7M
ztgEYwK*)<<=mH^6O+#Zwf985TAmO?Ob58owTLoS1PwP+Oupr<t$Bhs;Ra@fF_P#mc
zKmINHr|DlDtqoO}^grK&{iQyEM>V+c$2LcofwaK<m(1RQKf@-ba#0}R86JNpOiq<f
z>hAwF*OMti+UUEa<F8Ecf?T3!GUIRXrsY6ZV_%f4*+*#qV4-g)cr60RBx|*`EI`s{
zq1}O8jAGu@*8uyZWW+d$*okm^(%R<MhD`O#0o&CQ1<0P%oR@y^GvMvxTIb|8qv19}
z*A=(uX8rTZEHJmII}qX2bKb|sT(HneczNOkT@-kIm%ufO&Cs$NUC<*+vnhjL`e&An
zxV3!r_Vemu=JJSS0DLTGEFuw;VV;(8*0MN~YANn@@z<qYJ|{G*C9*8pfme4G&T|Kf
zGtNzSx@$d&f<!0xo;^grpXvOhk)YJJrL0W!MT1<*@>;TNid#jW@t#$PcfBNMeT3l|
zW%A58jogbRA3iwhP~nEyC%<*EXCflnO7gYdm_!5=pQ+(uX=_WLkAjR>Q}$?H_nryN
z?X9_wEOttg#`-G>Trbx?yb717vG7=XT^_JHmB=~VJ~{Zrdhg-a#G(&Qw5{v6a+Fw3
z@JBhL>;&6_&oi9sy4orPw)sen_YNMaoS=C!5+fUFJWqpduBckGSLi!O61EvAt+gtK
z3YA#4o2e!UPK${dZE>WuL_{PLg&3Nc3^jXucXfAvD=5g!&kuSn5pJ{i3*FAn4pagK
z4NY)n<|{C=1;R=A#KDWrDk>^~@GYKQArOdQYwPw9JOIlh<KsKVnofWCX%Kr}ov!fB
zT|C|zD_J`k(_I7ocvm5G`HwUJD7NfFQAU{YASvzjRr4L6#aM9;C^fR{`3I^+e1mdh
zjyj$vDt&1}{hntt9oH8}I2avrpms{UP73)imZPsvO1zC`8(dA30*bfjH7Xyfs3dY(
z>+pY3!1WjOykz#ecA53Mf<7kYC%_hygYmYP8+E^zlw9~KL7L&bH+wL)yu7@>!sML@
zN`Gi{H10S2^3qLaD7&<jd0~15{99~^hkru@KPwv>3#O>Z{|QP#5w$^9j+YFKT3X**
zE9pg^77ocZ-Qy;aa<&g-G|Dj@|DlHTjLwSa>V;XtbEYB-X#(NJ-?+CBMOJ^FcscS<
zla$eKxj()rUv!9xt@q8Row=>5<<a|$Dp)-UA^LpJkgD(<R%jA@yc8u*8zLMW7+Wve
zP|x;$VuKn=9_mh6hm(8H0nR+%%K-Ir42^1ee8|dvSh2m$`)up2j+^C^EwwTB#C$1B
zm55C=-#f2*)MO0N%SoJ%Kh1>jTi$OIk#ZA4dYhOT>j%w*yXAdYQ1t0u{wOTwQrlmy
zm6Pbq$GE;M+&D%wIC?%ED$loIwdIqM>0Y#KY+)<ZK=%J!t5N+?DwybbFEUP^_D1Et
z*+;wWR8v!q;Pv^^4)Nbb(<CBFc;e4_-yeOW*x^l(`!@^VsvKwi=+J-4LzVvUQJH;g
zyp^cRyq3Wjd349O{fk6WC(_{k$yFqscpqb>^BzO4-ABl&MlEm@^1e}Ge(qk;fI0a1
zE2{qQRt9TdAJ&@f`dtl|>qC~(wfJ&6ve+w=49``<Rkl*{2Wp`)p~Hp4%NN}B-!k57
zXb|~6z%~Z+7&KZI&r1iVy;)f(lpz$K3BGioS22;mVt@wNr*TI(323sh(5b4Ym}oS#
zw66pNPSMKgL&tR7v9!ksxvaDT>s}!F`}-Rj8{6$p^PKL^Op)Uvy1VQ3$p@;cIK3{q
zb^kQ+08GNx2(RPUhet>Cjzukcks%=%$|@`NX;)ezF9)qgi`1_-Rht)oXNa!Xh3A@a
z!{h+cfFQLlFjL8=X6NMi>oLCv`V&!@eiG&9w@BR~42jArD*h0H<IRy!bR0^D@rbsC
z^-^y!MFLJs0x-0Uy5k0_t#xx{5=G{kJP%y>|15(>DHrLz?BC-m|7niV8sce|KlJqe
znx>4*qj2So>)z%Or^`!<>Mn1g)bKG!gR&rFC4I+ZMtXmDnmp~6wYu|(!D2_P!DHp`
zePg$Uf~UO=c*z(`r8FM4#qm#3gR=zd^mPbi2S(1^IFq007F26nC56?)>s>D!KbjM@
z$`Gs@ZYrp*5!d_*w&!&Z?=WZhvcC3nM>&CgT=-(+VTm>R{*L<%32&tC<%s{co#%d;
z&s%~J+g}+;6Ja&!trKXllDpHzTGK~~-0c4Sz5A>M-e-OOHJqPI+l8)ck&_F4mB>@;
zvp^G~+u1x}#RT>|N3BtHKv#2mmRUI$A3#WU-d3Ci3I8ZT(^K{}EoZ@rItJ5jf41+*
z)>&YUcllbu6;v0auF$4(CSCBcahOfHgF(@kwjG0M86pqcV_Az%L#P=+eXhcX?RP4A
z(?}0WtRL@>jv}!I^6}x4KK5e(9k+Z<%@4b)t%q#Q*xofE2x8lz#?{d`+v+OMH6e>7
zHksGlZ~!NM!S4c;#nw~-cLkMLAYQ`xc5$fW{<P7XtFxiW$u7`F0k?~ZiTRZ_)RY-&
zq<*|N*L(!GAVPWYIJ>Sc$)F=#+ups}YDS70x0M;QyrKdJqe>^Nc#EBrGb$$L9Z+fW
zN{-wbT^e-?3JSQrZ~1F$Ymwf)ddg`z{xjLSNm5J<_4C_LrtF;Y+k+bPJD{6J7^!FH
z<t^E1-{3pfgR`>V`8s01i>_qf`tH>F8uY`A($dJMuf>@iH<bghhy$iPS47nQPexu`
z%4lj|c7P3-Q4ii$*bFZ^Xs^w^x)S)<;Oq2yGYQLKrgcXF2Ls$x5u5jzUuYT=o_<Sb
z4!>Nit=Qx3Dz%`fM12F7CSPF1s-_y-qnAjdzNsp*pf+Eqv%Hu*VxUZtl~j{bQCX-`
zWSpJCTL#CEWNBLU#)(v4iF7jwGvN3~g_G{X`rP!b=LH3&#q7W0S1;e!T2{VA_|ph*
zCW{2<=6Hw0g4-W^#N!P+@ZiF+Z1k!-#77MC#t8<;`Vx@Cu^Z>t^JD`xuUfGg_j1i>
z!NGiq_^wyc9+$+}S;l6Yp4FY>%(V6!mtW5Rh@ouYL%fBqZTp_0t!dfWT2dpqhVS!4
z1ks*lMA(-@?V5<OokzCT!D}HyHS~0x1)a>2YHl@bNf^#w9FO|KUn-)kM%XVkEPL@P
z8YsBE^6Ag9+gFa+bbBp$m~;HjFKdL?-~mN|9TXCp_&TMbrYX!swVJhT9MLr+93?>8
z?z#Pf{{~U?8HI}n_p@4=N<_#1N84M*b-6B4!xo}|2uevx2nZrbHwpqGEz$zg-Q7wz
zA|)*y3P?97-6;)HBHi83+&j)W&-?j#zwDoG`Nw_5%$hZ`77bf-Es&SB;I0D!`^2F4
zvxCKlu&`%Pr{m({#seKrY5);{jo)ad-|%sCo`^M<Z^L_CWjHK$NAY>AY;1j1_U1Nf
z`e(;`)lfVEjc^#yu~=I4h`tt0O0maWK)s{Tz`(%Imtv##<S_zk#l*xU;@E@VUq$`+
z@uNphPW9f9s>ww8lbJ(XzNkty<99O$Cr3kNwM{|ySR5|S4o0i&8J!Q-b$9-B@$Pi8
zAm9-oYJ72VvGG{mU*NHP&x~k^LO^b%c>PDLD>-I@|HnwJIhJtV1h?_EVtP(<3lSg9
z`r0{c5A49xN5N?w8F?dY=|WE}E8<^AZU`*Ww7H(8Mi#w#{l?CF=(F(A5^X9PqusQM
z5OrqHQaK4)Q-wcj{GYP0WjQXn%nxyHd)JzoG#lPCW#H0ZQI#FFYSYGJ3#JzBSq`d5
zyP8e6DSbP=H{r*~JvSn0-o*`@2iTUjv64ULyq>l$f1@%t=ERfGp?aXMA1yS$g(9}w
zQF)&CEu}H4gU?1JGljW*@jS%gv!=3)8#Nx*ZddWlH+qO>JfY2K5oTX*6y?rpCBH@)
zapo0t4HVO}8a{YNYqWK~en02RRqOn75h=-6V*5GQ>J{qkB+=PPFtBeZKTn~qbKlS+
z!RiQ*TpD|Yr}sLUl041-IfGNCVFV73qqg`v{Gk%doS|v!ff_33LCl4V@ZTA}6p)<Y
zRuA;{ejh6_&d$!(Jl<W};wHF68tO|f<ns-f(3j%kKnGFt@Wgp|csP8Rw%}~->Pm+)
zC7eduu9C5%a8^zU;!A!-uA`&l=`4QTG;pN|&f?wsDYv^a9D0vM@6BF`T~$I*P|)G4
z`h=Ul4PJueujPZu+_kkSk!tt}h9^yu%SYuRy(Uq2AZ-Cg0_US$-x|KVYl9=4Tw01Z
zz?yGZ88~UCe|oqTM9LTY^!`)mV|`J`on>@CLhs=}dBnxV#e2M%njm%YcQ1~NjK!zw
z)066*7P=my*YR*#Oy<OQTof6`9QaZyoBnJwiE~`H7}M-FP%O(JbRl?EO?Mz^w^Ltv
ziSes>YF3%gaQdAPmFgP4)-A$>S$;xFbaNB5mrMRPaP?Dur;Q!{sX6zOF%%W{!XHL;
z(3N|KeWsJsA^J@A?Nf6e)sBW$e!_J7Sf89`?tS<hEt<rmbBlmdse7|pUB9sMO+hQ%
zi=BVDXy=8OZ94fIOz#3=%-1OFWI-~nzuxL3d;01--xbNPE_l%Db4ITIW~zC3W8H=6
z>3x%}X4K0=Q9g?aX4+%DD*_qT!PKf9lq05SQ{^1~zoNZ7*=|wSDGzm`&TEo>S|+F2
zo7G;M8tu6^uX9v-pE1w8A^9OM=UzMI8~&SSPPDUjRrh!um;gfS0tUb4`K&pZC|af!
zDq3pk#Lkucx^AfLvc7!LhGpN1)Ex^Z6G$vE9xjA#Vf~DSZ#L!N;9xwTGhWpsLO14B
z<Z3quX?A{kf^m=8OUM^<s~(+kbA0MNs=i(j4wiM(FgG!#)4{r=vhqEE_WHe_pOJ_J
zMMOpQ_xB3|-kS548jq&8t9S#kBe&s6NvYk}k+_6};0(if9{Z36-`gw@yS!Rb`)GZ_
zI3<|x_;2=$GbXQa+fP`c!u}tgxdGn~wEm^jReb?%h$R5;{Q$17C$RoSj`V3O;Z^TH
zdzXug4S4}mQP`hwv(=RU<>M6-!i=WE+{^oFr8@c_RcFx49t`y_<~2mho*#K<cqJXZ
zL7S=`?wOkSGdKM(0d|Z~Rr2_tKg*PLR0W&7DRcWMrWRAqKF?dTK8KH-a9jefXP4R8
zizWGneiBA-SsAKw8RPRo7rx}EfO6aQq}7@4{<L-KL!H00u?yv1hrC`f;U&m$XAG`L
zt<rFtwpt*(<#wirZnn_0vTjE^!7<v9_5*W0e)`WI!)3SAH<XlU#7cOpoW#l5gTKQ@
z)vwQw-4td}AD<ARHG1OyH87^(?)aQ_wh6=So&Ej$p%ZomAsM<q%%j+}%O1YwAc#l^
z@wT2i4@%<aU}~TL-gd*6E)`=%e_{X0y4ORYuFK&E_9zeeu#+Lz#QzLo!M#4u)hZ^>
zC2!1BIP&ZmSETIeSK77t4b68IscI6{O<yo<=OL2BW;}5@wD{$?Kmu?%xMN-mNIH^4
z#aFKcot(IdILxRBFrZ^Hk^E`7-Wwfh4nL%)*B;1_gwsMv$_o(zq4H>Pv>N@e6Y%b@
zNvX=qH*Fm3K(Uqpa2Vmb^WD#k&$q}f3WQ!*KlE+*fzW!uu_2`OCpKe+dYok78n!hq
z_B0@dKvM{x%)gJny@3e>DdM1ID~p4oHjI2Ku;`aQMMvmArlozmyV$onQs9ZN;S#pt
zesKcW`cVf3F=i3KazaAFJA(IwWgYeg72#z<vN)tpi{!*1N*<=l3cNvEPBpI#{<fl`
zlDU-6QX0QL^D-e-p1Y0ITlOrWlW0zB`9q`b3qC1ts?hd6qlDB!e-!+I@Yno2U4eRX
zo6a~cW+g%iz8zd^1+Hb@3<?{!9`Hsj%N_lx`2ewsOdz^5NwK70>#1MifGn%L<_j{O
zKz+v;<}__zadL%Fs?jfY%4sEPOj@$C_Z~FlGwVlGHRMpCj1s1v@Qk>!*8iHr&cL*s
zImp6Cvru;&kG=J=rXcpw<RimF|MZ*>f8=;_^;794HfcSV8s4~E6ct2<4y~dm6BRtL
z$h>8}%~4dNlUba<f72~gkh5K0lymgw$eF&%w{+h4O{I^jn#WA|-du$4&iZ$j#Ml9K
z>CCT>xQ@|F&ResbP6&(!59C=?i)7|Jqv7akZk!Fd+?6HB<GH;WpFNPxYyKfYi}FY?
zY=B`N+k`IdM1GxkVW#`$W1j<S8)KA*afI}FU$d!~AD~t*C|v`^OS6T(uL`G_S!A|Q
zLVV8P(P!Rz(^M_`A;@EgCwzmMRxL`m8O@F6N@ep7t=b<upX~T0ZBR)sz!81sXh)5?
zyg3)zD0y4>wY)AgNT_IN<TNyTpmTC3qq}(L<P3v|J!q~a^ePkd?l7BP4)pgQLK<tW
zJMF03oZN7WW^|cB4<hFJ2#6e#q$6}gpik&>GCoy1vqYw>tn9MDGd1H+llXSDP#1Zx
z9{2Md#jp5QK#>)?ojFA@s5T>g6Fdf$=YY6MN=mAM;)S5cY%%>5PE_(?0WLni9CQ<*
zcX_cZebESQnRh)4sgPsKemMnJRw|`0%h2LzxHiLm2sU@|M37OscyvD$0%>C5ej=$z
z$0w3rQHwxCP?b$`4v3cd&6$SNKOA+*wY7<|sUpdSgwU#-9o0_~9$?k$iuG=>-h0{d
z7dlT_*sOeAd+;vFT)mY8M=L=UO1Z(d!rCdN>4k!$gxhC|xG(mzV3QKh)UUJSR(I1M
zcx@z3>kYMb*UczK1}2Pws{xtIkhGlYonX`Jq?s>sq?_hec}-qe(VzaF(XsKw+>?2{
zU`uzplA5j5YuI&L_&u3Gydag)j2#{48d}|jf>W7b*fU2$@eA_1s?G&n(ghNA!3%Xs
zqw{mo`BqlBCUl)dYkJ#nX>y+hHnWF!>JX_%-_h{E`@W&zxE#0i_WcFj$)naGhb7dQ
zgrN=D$Pt4FekiJ;-Ft-=Ilev$cZFqN>^!8Z7<3pJplN8{sEc`@V^gaUm$ONBLC<C<
zU5RVL?wx*NvE}lxQK86^C&HMnHZDA8E3Qtm!NcpAFSP4mYw-=4dUQWI@hco9)`kwg
zyL<+vBL!|p`&4*6`!m*RZ^V`Zt!sdC2$$h>=)+({r*_;_Cy<}Bqdna>HY8AsAl%{>
z;5VFxGk7T=AfUCoJENc=?1^^shuGM$rJd%Wdkx$39R;H%7^J-A0}FtDu^^)kNDFky
zN%MJ+uQfAaP=wt8=6Dt<wqkf4w<Qe^0A@L^7PK6~m`gkSs3e>%2&XICN0`2z8?GD9
zX&D)XE=N{w=Q~MrdrpR?rcLu!2%B-fzHuI+UgOlH0sk8rl4+NA+rA4h4|*a^W@V{{
zgn;by&QFgJ00%7yZG!8->CvJ=hh+{<`81qmlKk3ZI`f)6g;mMusAh=g0Nrk}v9WEP
z(FWARUk#0owU_$Sx2*MxMh(o&5b&7qGEd(b$HAy+6#h3C98k}OE4Wt?;UHQ-k10>i
zknK!D9!-f?YvVhR_aQRnL!{N-ezOR=%|<znH|A8DM)$(2>5p@@V>$QNSmOkpIC`3B
z5_0<2<kj*NPtIb0`=}cx9GK$FtK>-^jDH=~diFvEe>^1D!)D&t^@uOV?QVCp<l5<Z
z&DhD9uJog*RojOoQClInrnN5e*&_kGYn40aN98h)z7z@9m<1Wee$}W;1X>SvMySs1
zjN4URULIGq%na5C`bF`NqvN2fT3E<TM@Pr$cFGy08<vzL4K<I8aJ2YA4WQ-_Qoi<Y
znhms%AFqF_fudbbU0uq}jUVcA$xr<KLqp9Ol5wyydeFiQB4i6_Z+{8xRcv$p6V?d3
z%Df`u;m0AwT=i|?G+QTUIQaN1ma~lx3}GD!0E28-hAfwVKAbS)5Ed2&3IL`Vl<VC1
zfYzz7UZB2)=c6g3uHIeidXfd(hIF<_xFg)ojtc;@#m2?O@YtKx^V_N|K!8{sD+z>8
z#t|l`q49+%@kFN;>*n*nrrh{Z+zQkD%SurQqBf?N%+uXzy%oF{Ll%aLt<qlB9p9~z
z`H;HRYCH59d)CQ?Ho4U|+tpDeu4_oMvP-n9@R5z0sQjRr_pK;hO@iwIDR1OB`_3zk
zxll6<n*$4sV)qMp?Ej_)j&n!x19JJpwdQ_3j{1!|t8n<|;%Cv)+rwq))q1b@nCB;3
zyKy5F<aw(?G5kB4%Q?+0E$>rkhhL9BmyKBAPF!(J$jNyn^H&<4l`|T;fnOx@=7Nq$
zaN?2B&RQ17CW?vddP`Xy4Sxc^CFOr6_*{6E6;`MAUPXMt&%vG5`}jXYdVC){GyguJ
z@C~1bQYHU)(9enL=6~MdMjxfv|BMHciv3OW{x$2j`{K?&)-ZrNQ$+voclY}5bl_qb
z)qe*E|9|+XQaDB!4c`mDhE_8CwcLOGr_3wE&_GgB5<t==iGfqUII925HEzuSMuGu>
z@ikhQlqnh$4QMs^??9x>*uwyi3`5!(i;+rRj4+G;4mKu<1f(=xC<5Jm2kY-HB)sJ=
z=SyGB|2`}h-@8X`^#6X8-~amsThlX>;CRaM6;nV_zV|iC9%abe<ycAe$)6&Hin_lD
zII?S%JRhNZV57&ONmXt4v2Qa+q0AVp#&fTswYPk6oV`;bd7a+Q+iwx?Kyv@XZ1AK;
zrtvL+M4Bpix21MwZQF%${$51CP)}%ie5Jotm`m~TPza^Jnti*-bXTlQwznf>fpQsV
zi2dH_dV<2S-WY*E@4ef?-Ry*?%O!fp3nR+B9f3V(TT8|4s1oNZxp<GzYwhe`Rd>zK
zExbu>(@-qyCoKHLR*ws>`MGrJs7qgIXgTb_p`N)$X_o!(sVr|xZcWsdRsTisJ?~*T
z3BIRymL_(H5^xxl=p-)lc4Q6c#93tFt1}kq-D9qrKyi28TdQBF&CZ<9ffcbM@&B+a
zcTY9KK|O~^;@22nqnYPPrUMnu5_N|Mi7zD(<4_G`+Q(k|&rs_fSK6A3f~&-jV%LN1
z*T?Ir^^I;RtluoyllfGs=jnc8Mdx_0jNN6iebddZ)=u#bmmyunQd#MaiL#7r_Kv4M
zA$Y|6xWLIsHo}(+tBql=wbr<!gyzaDK)SFJ{+(&Yexvx?iGdfu0*U-B(io?IPb9?;
z-~Nv7m$EU;js9ze&u-ZVS?|;cuv#2SM94cg@bY%}<Oa@AM4`}HFq|o^2y%rRubpNb
zzpmvRcHUbnyU2`N3lO;A9{brn_u9c?xyxL&-q`$GFh^m+%B20tmfeaiNymiEXjERQ
zeNlHG?t%M^z_87E-gc~NpV>dh_%N+9UFf#efT;x0Y}%|uL;#DdAogbEV}7$(iySHa
zi!Iv0Til}$36DnE19nzP&^|{cg;<sTdiz2E^)U}IcdGTS3C@7m<r>!Of4E<4+2+%X
z^lBj-FjZ*%Hy6~$qO&Vwf_T1PQeM9nF*GV_m6Bgd($1t+Y)H195dHa$Qz6%SIzmb^
zRjN=lT{@$A({0}&!GB*ni`!gA_8!XT>_K3hZ<ML&zII3DFB80PQjkj#q$Urm{eC#I
zTwwAWr+TWKo63TT=QF*+mvtt=^~5}Gq5a8fNdKcGCTMx%dq#a&4z2GO8w%Ohp3*0U
z-=7s8jAbms86f7woo`f5u=trKossaqg78RLB{RXY!7Ilp;VO-G%ZBa4-Htxm&Y@O`
zb<S6rr#3)PdIH*h<w7U=#RgMR)DZL2?{wp!N5$b`CPEe8));g(1+fD&*zdlBa;7>D
zE2fRz=b%Vixgcqfl>lRX?x`#TX1t$8iirN77aZPP1!dm0GqDi~{#IXAXi`*hbc}bq
z`dfRJxqGV=Dm5+3UuLepj)22gt4w%S$aekD7>~r0lh2PNIE|i|eGZQm@jRo^9^T2j
zY1aQ(BDen*r|jMI>Q|W=zrN4CYU_D*Z=!{KApf6WG<&Dag<m9AVCW&wuntxqLp6Rg
z+ciqOjxrSG!qVVnr>mJHDcmEk%QG7r6wMAE*et4#VZ9w4x^yvhN+p#zpj^Y@mC>wV
zBrEUT=9$3jCjF|~)A@n#msFRH+qW>5j2ATOB4TCSQ<kfLkWHEEcGY6N|KLB6hZW+{
zlK$;&N?cQsi_Rfq>6hfe-=l-MKsY@Y|K2z+191p@Qmg(cjYbuZ{}0zyrSHb79`LX4
zuve<A3l$dH9!OF-%e(C<5el0Hk5PNpU1(E6<#}-~;#9xIS{hSb$@P6D?&?og!gAu5
zr}2`cv$NvXt~h%`vtQ1y3E=_zfRLrN_U_Cl(jp^o@S2$z>SfV8Jh)OPPA9LPo7pBZ
zpzo7}ZvNz9SmnL*Lr?D8IF1K)IDZUbQr!CduR9$3;vT7QM`ml($fLfR&i~{h@y&Rv
z^7a!<!SNhzuknlEarQoL6H$Ld_I9-Nl1A(bB~I`pjcfx&PK!q(uwCZ|u5Pex{)>15
z8e`Ap;>2k05K(W9{kh*!dL8b2QxBQsk1OhLhMTuZp4Ia9wEWVREhWQDrTdU*lFB3s
z=273<Xx$z1y-jhkah?_dLE1+@*u0?UP~n_{nzYjF5$2;1zA#)`V50gVqjcm9H%RGl
z5-lliMz_z#To7x&C^|OFkooA32bKC*Z}XDM)lfNI33pUO{>ZnDT1!5c7|l&mOWPWk
zWO{AU8$A3yiCrwER!`eo|4oPGP04<`KeDa4FDXAP_3GYUQN40H#i6oUi9;H@q^Tr;
zT5{`pz8U6reI+}P{{p8jR`n6Y10GX#<AO;N!Kj%|1S8{8!nzR$2iKGp2`R7&4+k$^
z{#YxoHE$tOm2}&(Vu{1_p<PY4Y<a}!%3>PNslWLr>V8k2nb76)eKP?&)m5U43&$#N
zMGln3INdpOy%XAH)69&%>8{*or4cP6OsDHaOIdUiPllSNd4p5+ZDErr8Ts}J%Y?|k
zgk#^04p_wN$v2)m*eLzDuIOkH>x+Fx{F5#2>n|d$!NmKS-NHws_;O3plUvLeJ>y-!
z(+qie$Hnaeg0%;^&CPCY{>r<5=4=R^z5IsV%#K0Gc$@jbuZM|(7_FGC)543Xh@3-2
zlxq1}FI<aaimAMnDJQoc@@=eRYzIci6=WAIy`Bq*f1ZlBvhRB|E%T{xies}QKaJVx
z9i^s56pHvzX;_qw_6*K#*CLbG2^@}do|kxTiyp4Tvb!D1Fx%a#byK|a!>_66iz@I^
z7A>6kl<35}F9*3zc48t;shn}BZ(Dv0H%c{ESml!6<CcDG`1?0k0yYXJ(nH`AgEmTp
zy*<iND2Ivx+9wyo#M@PC$9JwbcnQ=@wSO!z-R=5$xcZvRyGH9^6WLfhM|7C0K+T{U
z67pZht8>bYnXn-$60K}~DJ!;>{R!{u7}0E9G{@XQmWyRbG(^E}j=1U?%GTzqn%!le
zP8YPZ(;kS;DF2gF%5{@pJTFtyAk<ScB=F5(GR<PCWi{7L_z}2rb;NWtwI`Fw@EZ&N
ztGBzCP(v?D6YcG<JG{;DojF^*Io|cMbgL&cO(tGnRQ5a5qy*{eZ}*Gj_g6D1zW%!V
zC-3I^iqQ@XdXPo<67-ID-xf$Bp7J%UKct|Ux{$kSZhG5lL+AEU3?U#JJK~V(gPhYO
z;fFz_(|*2}Q_)CVW}+8Ht$FLijF5m2_n1I_@vXQc)zHkrc)7mTY->PX1Zn7Yd-Emr
z%=){xsaUkjS$=UPvDG)#JvP;{R{o^OfqFPpbB=jgbm~zs8G}?Zlc<oq7Kx4T^`5UL
z^If@@@p`tktZgPS8@w(YQoY-Eu7?LCoL+>cHD+G#BKVVLp3%&xZZ;cAKL#mGELNQR
zb@acp0MhB()j!Zz#=m869`cE~=zXN&mp9y}#h0!bZ%1DlbFdV8cV5FIbs@I(@bt{n
z?PWkhmeDFVMn~DsnE;!`rj7}>q{_$Oqq)h&>&VVzt03*fiAmw)L7e>hP%<ga=K`Xq
zZb4ubr1GoXpD^L077bilw3s%d>IA@3rzVDX^Ucs+y;{}Md0#W<Q>8iZg9$Q(*nZZj
zgC%pragzdREPrR)XI`GE3+=1!Dt+ypGkJ&S<F~rXcIKKMLdQT$t|LN8X?r>2(&ujm
zmA;JKVuJG81MjFY0w(iYzS!;)2QoXS{iizEO2#4JR3ITb+MI|Tshg@9sFzMO{=Fa`
z2Xhk@+Ft|3nxtMo7}9ih*8fm+>w3d67l8ni<#OZqH#{t&mA$v1cl7Zanecm<^|*de
z(85#A&W4vZ!QU(l7-3K5urlNshgO0@gU5JFCBY|WOR^j^&l3X)qUFYgSJ}qQ1&>-c
z#}5SpKOP;WW@9i~P~q^dMP|%cKm0^Z%z1CgCTUpf>>MlDl=^O9f&`r%b&$ehq~6@j
zs5)5V1f$l+n=)}%pC{flyT02$%SLZP7lC0nYm-&%{b)?^5AMO#h*9C1%%kb!{x=$e
zxj0=JOwMV6VcwXlv4V1O{)Y95sRflJ!WDLS5e|2Z${@+D$NeU6$S+LiZA@k%>FJy3
zGo!|^YR-f%9GH_pAGUWy?@nd&Kn|_N!8MKtO;Xj5QH1@^zGk$&l~X22QiX^wEqFh9
z6ek1Imf5&Ge5dRB%05cIX=b!i6{Fp)jkr}!i=@CkAsm#K0VFz^Igm0*)}7<fG^*(R
z-9`x?w|LuWICQc;!g)&0&TvyJbY6D^PPtp6!~K|3iGS*4FRUy4X<-zoQo;{;NP;ii
zp$%s%CSJHTKVIWv7wb!P;GOcJQg~_WhU_E-y}a(!)(c<r-5Mzrl&n1I)d~7u!(=(%
z4EXxD&E2rlN|)LbPVxYQy-wulH9-T~lte^jgw1>7*8)JHtq{YHqMDtTP%~~WsA5PB
z68<bBC`Qp{Be{Za^yV7H@NkA*6iPZxDhxqvUFE^k@E&Q6_^J~LBSf*+QyX42xJkG0
zc5cW5PgWAJsAwjn9Vd3*1ni|qGAb{nJ;**?P#j>AL@yJ1kfI7L1~@0FJQE2)f^A~*
z_hQZU)eJx79EU8>w&hY?)5Ai?g4Wfa&;Gv>uh@hOnh*}pGi39V@sz4(vqJ>7b4X~(
zW~!_UpC9)m&hHz?KdYdQLJ|FvTEI>17RlGbP0bzCMyJ1wLAP>;(I@BWOByx}R-}z@
zhM8!l*H+1%LJjGJ>2n!LsGR2P=a6Bsf24Fyg|{Ez+>@Q2&J)j|kLM)PU247*dkfg^
z=BwE6vYxrTu5VW(A6i4VUwkWa3mrYnkg0O;vOEq@?!<Q9&7~o!RF$c026sY~ve44(
z3J3!`l5Lc-GiogU<kTRY9hvWDSLJ05YQGV_w2$^%d&y*ijiCz5xf;=3x2K5X%~}T$
z!gGg#1FznOIz@HSN7$!sNA-oQmZrkVAeyK)+Y1~m@%#4dkxiP4t-CEDna8JlYGrZB
z3??Z=c!qAcC4m8HhGGRR%c_!q4aC-s^XdC>{DPT|lgd=T*%l_frP_Cp)IP{d%Bimj
zpD4a28D)NZ+t*&z(K10WcB<LW%}y`G;)&bmtI=m;<8=R^*d!6Mm$V;~bfG0avDJsW
zpc+q{7f^U+;dNl=y*Sm8xEWk$l|09r*NUyGmLABjTK6b-e5y50VRig)MNPLM@8QVf
z;)1F$LDkk-fhmJOYirL$a5$A%yM&TD(dCHWk)2k&x1L;`R`>5}_TI6dzxwkQ69f7j
zp{R__ms>_A!;_Q6Iq$~r#VsV;^yv)*c<X#;3q3B6S!G9&ui36iB`PrKV6L!m%Rdv5
zyCms3E>dwPgG|lLU}`;dbJO{Ct(9-+y#}>ap1-<I4Uya%YZ!%k8h%wRRgSCOX+-L5
z|CmgX^WQQPOCH>%iuBbx=Cmk$56LlxqgmKe{VQksKwe|!l_1)0ErCM6ZghC;bWvkZ
zQViO=?%nM_qvJ0NFeGHPdD5T4XVd#riN@)|{|3Fi?~A?B!>w7IZRW@8<Aqu+Xm6x1
zxZVQ;Iitv>GP&o6Hu){foZW)w^~Xt$I-8*3?CE0qcysnjj3gV%($0LnKuPC^tp!C+
z=6;oWR|hE6g;Le1jAX}gcoJ<cd|$0+sJ^O3!<0<U<6_r(zM^9r1F<K=aK<)!nC<1Y
z`;?<1@-;td9*~OQO&tEjTdD7FW|!AAs7**dvg7Ay5Elw;JE;;nwG^h$H$h`6&rdj-
z%gaCf_74x>5<5|txKK`ksvQ^~Z_J8dBM<y#<B`|2oqd4S*-3(W@zx2Re!{y}Pa=w`
z^ptaKYhfm<$yoKuC7n!l4cb{N+TR)Dy^?{RnJJ6Wy0<GYySvmyZtzcjPn^Skgig0|
zOHelOyv9`L%}{nIp@OgJgdZRq3fVx0d2$sGlAh6_?HjgT)c4xxP`Ee*PPQxLVfba}
zLsQgtNRvt2m_(vWt-rfVslQwacdTSGXHSTb+=xA|pla5fEsvW1w~OaqI{7bUH&#^p
z(&dIZ7pWS|8&+Oro3ksG)y)-@Tzgb1|C~vJV5lc#ZQCZ32nWS#fX(LWuQ5U(Dt@1r
zY8^=0CuFl6F5t%=?!|Q}MdK(-iobFMoFwK+@;rFt>|g!yES?VqX=c6W051eLlM%9%
zUBM5RHe<v{fu7-Xplb(w$BO#cZrf8c(BAHv<LvEQ#5{3I7X5{90nkjgP<+ByPa*o2
z{;1REs^%%FcT58hUi&Jh_lOY<ylWMYCp7w{Mp_cJv44%+nYKum3gA$nq-@Jg$+jqG
zZika`dKfz<p*~LRH@tsC^sarxY@lsU+_;2bf){T>3|qZ0ROJc2l+|_gI2*59&>WUe
zZ6)bpVl7RJMtS%ihML$%)%o*>>NX94id60fO#7tbAs`xt(jslS`4v}BgVxRU9o|E8
zksAgbCCj_@i7?bvrbMiJwOqnHQznSetzOS-VgC|}>@$<zx%@)9w7??3SLWyJQHg1M
zR)qrtrEDN>m8Z#L^svM<=8|y1uamYXO884|kr1>2*S;*@hdl4DGTL5O-P?KeXI--5
z70!qYQzx9G>N*}jH?hzCcbE(f*b1`IYWTfQp8XS|`Tfn>c4O=y8&l&~DU~vOM_;*u
z(Owk3D!-IqHkTZuem=K{cfJwF0PCmu{QcF*Z?porMd`c>E+r2}3iMT{w6=eLq^8EO
zVfq}M&>$}hL>%@YgI=f&i{a*;y-Eu%SGj9YoUW=T?~%)079XCaaLvp@DgF7x`(2j<
z^MA!WpF$Up525`Qo|J1@{Bl9GhwX{whpWEV=QC4Rxd{F3J9{(=DMGI7zAOn_mE}^)
z+<}7d-ls2?<Fxp$%$2pg!ZmA;VrOO)^P9RyyHl}!_DkfZv<i>jehSE;g<1ocur(&h
zc|93<2ZyL=;5Lv_`M}*MEp6nP)5rGra<W5_K5Y^TN5_*;Auwh0NA~pWZVliQIqK;W
z;YP}e;Bfmbe*^x^wI%g;+Nct5ho}|Jm$^5_Cuq*2BkGsU&2MX#W#j0KE6L1OEE}(}
zBNYINFEUm#vvKkB`_JUZuUygQ^=;T!Z)+=WZkjL(?c}>Z7jL^ygZ`5D)Yg`$PHC(W
zRaetz*H&iA=-Y)(M1pSv5Hi=Q?nTU}jUi+P(2d)H>0K}doD8D}7C*I&g}q2{HDNY5
z1Ec2r;9sg1;!MBHb9t>V+HgpUvL7}6VdmIrskl^b>=9>E7p(uweBN{WMqCHQTji{P
z`mA%zTGpPHZyns91Fn<>TZPZcJ2*Rk&~^HdWj14-&CAr(5N&>-xsgWt+}<%BEp#gU
zxw=pDm$)mBCb7O}(0!u*t!w0B{XRN|^37K4UFC=D=S#^rZU=Vgs`T}c>4jzQ^E5Sc
zY)I<0%rF`6d(#TsjdSW#_k+HlqeW%3K;2Y(K*F<9l2`YB^|&>`*PdCwNy>c6p6FN?
z%;qcvMN&Nz!zpQ`vp6r*vvD%Rzx8%FanFy!a1zx9+acQW7BSxu5J)}daWJV3mG$;7
zVa~v?+#X;|+xEp}FcBcG>c+#9s;ckAmLiQ=)3%t3W3l}+qs)()*gtCjsNULG<(|gx
zRR!8BA7<r``etzwHO8Brc|3WmDskmyA=W+vSSz*1<o>m4z=?7)opy7Pn9P-hHR@|{
zLPI2eUUEk=lXY5Pey2DEN3Qd*Owo^2>*_QIdG$%+=@N#5laiW09lyz?_yrn7r#e-S
zOY#3@q#2qDzZ!on?=1lq4p_0*Nx>5ss+oJwQ!AUGn34HOK|dNLvqM>Wn)RcCIy`5G
zJ0tl+c*e)1bX(f$Be-Z$rnfeyS#O6<%`H3+?jF5<wZV)39{aJLk;7wEO-h0S&R4iF
z^}iUG-V{x3dMk!l;LDs{)^1l}Q>I#RAc2gldT2>*A5~kf%!k~txV$FCtcssUQ6u}^
z?2Bo~Cc9E)FivZk*Y~-!?fbk8L2pN*OnfneiRGqF1ki~Xb-`gMm|(&LqoEe*Azjx|
zxKw=SUo+6N@1<q*eJ<?&ZWuZ!*w!<&$$2-)_!CfsG+69Q;mJ+t6Q$_F3?cF@8ML^2
zL*I-iS2j^8@u0TtW+z}RCWP_L#VK)07ErlV>ppW0d}iw@W?K_tCb&^N!nJII8^vN<
zu=XcyjN4?OaM~hL>U9}GuWFT2=e`Fl;`V^-73@F{lVEcEE71eC*MoDf*9@4Xom63x
zz<^;p_gQ^GOxlU|TBle^lTfZ5L~P)Ke8dD*RXpGuFvbtR$sPE-E}^#ii&HIgt``Tg
z*Rk&Ci%OHm&SaK8^cJIyZ^Sk{fG&8=Etcb-38{V^F#~p`Hl`GF_|1P{F7z2DUPk*+
zNb`O;mF4&s19@R3F>RL={M!#8|Nr!*T(yL-L*>Xvzs%aX-4Ors&zph0h1|wnRk^eW
z26qCGW&!^J4g2_iDE>y#-*<`r+qDv$xN%SGKdqeqC*7K~1n66*ntA@`Yd11v!o=B1
zs@cDh<_39VZiZ6Sga2*05obUAuL;Nh`=-(V)zEWY7Q${|x^dl;z^89%ZpPx10jpD>
z>I1KGygq{n3(g>2Wsc$mn6TbFUdac6x48ii0|P_#>2^mvJef}^<#Xvf!6G-Wd)~Z&
z;kan`r2G~z#c+h_AsBh&FpWzwPL_GWFXVc~yFrs8tW|UpgWT(Iq?dpBy35G^##9e|
zesz6k3`-1`HFb{D6I5o&@TrUQ0~lZXW-(JA`Ylq>FOR_I$MN3EXq~$Nh!LnMDd#H7
zZ2xrLL#Cs?Di>K)O%B&2yk%;IsVG`n+WP_m7nNo3t+0bdlxtnMK-k!<S9JMv4&B3t
z4}UK#uz=D9CO2hq=6&{&i5M6vM|?e`GI#V?)ohY0Dq;}LFpMO8LP5uy*etnQ=A%h)
zdeq|%Du~U^hTHBxyRZfQLcOJ3X|)KhC(HODs(g?YfOh`FW_jAYpi8xKly}|=hi;l5
z)@&*WuESnj%OCClNe&Fq{4J#?bJ;{@kdZmP>gwvy%Ip*(aLj-?V^$6hIgs<y;#4Mo
zR-RCSS4y7zw7(4f)N!Xq^XI~{H+&nus#Qgup1Q2so!};!D=WCX$V#Dw0WM-p(bKIL
zRD!I8F!9hNgbTCG9rJ?n@}QTPu>k!u=;KKC^_B7d8gLJoG;3M2qX~M8E%=6PfOT#|
zOkSR++Mdz%*Zjthj=Fi1Bq#h}5lilb1pWmpI0iDbUWT!1W{Q4^o%2?*N=kmiD=44K
z%RkM|Y9S^h`>UhjSOG9dFPMyV$*zhdx?^zWOedE5$6GA5VM|WpgzK46x=m9ZYwpoJ
zCpGsg^Gix1;Y2aP=-fXI|9h+kGMRN7WA4L7u|DH#)HrCGW#f1GiIys*XmJFGZR4eA
zq%!6B@h1htUQoHMkLP<f%zR(6X%-MFyHK-*N4tXCz%)D1XUeXc+4Dq_<$SdA?2H)W
zIy}P7o<Una{<X;&3!6ipv2(YO=M*C*rH?PV(a9T27M~=yf_!!q+zN=;P2R%f!`4hy
zbl`IeVor;9h{{n;&NC+mgOJrPhDE>Gcg=jNHUX3`PwZBekP+eB+y@UHc*7h>*vF6c
zF#pf#xJ{K|$PCW~YC@umO9rvjCkGq)gE{hu1R*}Y6UJ9!m^3|HIw%@%!3fjpWL30U
zm7Oen3dp}<d=x(AV^kELd!nxL>O@623|oMgLThX5Tad%Rzf+x)PcUJyn@zM1<*LGP
z%L6{X1jB)hCr-PIkA*^DbYmz_O&rEd!(MoGc1j@AtT6D9PuPgo7Y<_cz=#MOBV*$^
zfiE!I3g3yC--V!~u(iEi3!WRq=l6fTNAqnknXE*_J$*w%BKhhyt!-^$H$)@`e#0ms
zTs9xjb+SsPg4PXr=!68<j?le<l)}P~85z{nlCjUJ?r6dX;o#v>+ek?c{08$A<VEns
z`UeK!{%NiZ<p#ktEvP%L6s(lPoEWH&g_#JbU{(gy707|O8EJmGqi_V&?=ZWS0%r_V
zaeckLSnfSs2~x<D!xDjJ&2p~!2^jD2lHSHbuR%omF#3TgI;1kgk(myVW4Q2>S!`|W
zz-+G}4CAn{go}k!7dY)1tyk}KJAB5waZL%vcVPM+6ht4x!hXbaSrc$tfVEZQR1e6U
zGHPo{B?mypr_&wJrK79s8j&e`W9#NHr6Be@m=S*)OAY7cGpqxM=WLFvVc2B{;v<V;
zKh=8ei5a}6Apn;icKC0p9fU_17><IGPQ9K)7!#d^DbATlMfD$lP1X?q>5LJAUE8R;
zaH|$VK?Yg+)5Vd92!g`ji+!n&R7)}5!9@8);SPCYCSvo0L^cq|==|_NiRZNRfH62w
ziX)2Gxo25<E5zJ3eh`G`4o;LyjBxX7_6cEN4<14@mO75zR0}3SVJImSWD13b1Jvq{
z^SBTY+q$~ezL_^LA$~zwFcJ^%43ov|=D#|P^J{#17PMiAu<Y38#+E-erti&bSGE{Q
zRa8`vpEfWun*D)F*0``!pxJOe(f!;JnHUB8o6935#`uUf0;~&=!B`lpDzchy_o~l@
zX(G+Gj}MR`pp*5g(AZc)L?%f{M05m_uj4S{4VnbF0B|{e{(KE;N&-G7R`IAuFcQx`
zb1(-pJq|EQdynbuB}5hu*$6R5v0ms#Mse@&pE$ttA=9lq>*b!HNJPXvs^&G`FkATT
z+h!_vC+PzM46E(mVsLg4NqLm+*8aHp4h(Hi?;Mq{m5zVnv431;w}vbes03KR+2|7T
z9&qDgK#dOC0Ys<-^GGmW2<8lzr{QKG`VbgcDti0l3Os~zh1CNXc-(rp3PVjWQVXKW
z)|!J~;tC3Qu*Lj6d<Vo+$3tZ=q@^=+asu$x9o{Dk`C5S<1foqt)kbYc2V-5Qb|@dU
zoQD_IaBj=#z6B?-L?Um@_O_KmzIvDEZGOLw`Q=UCq@ET;@ed~if-Iy=3z(3SO5&F^
zHl}y0BfFG2fS3S?ZTzaajOgfL1vOz4;r_wN-aI)&E_!==`yq!Sy~0;Nck%QbI?zJE
zJ@A3R#{$RtNa4BP%3EbTx4NXN^~yla2A>(L3J3@@yGsMa0&el}tu7SA<>g@%nG`&z
z(7)^R@7zlS@igKA0QoK(!pwYoB%<_2K2%utlYl!vn8H-=_KPEvr0d@<AYr+>@_~i|
z=CyF-<;A3>Lx&}?1REDCrG$j8Cd=Fai46>lLD=vTOm-M4uwIY?6_--AgJt!HEl|3O
zT3fS#1xUuXZ&<>zBekwPusxt6$B*t12IB!xi&ew<+B$=QeMrO*t3e4A78e%?H?TE~
z5&+M9mTX@M#Iz7Hf$r7OB3MRvHdGJ~g;9zwPFC5UT6gBDRrRt4qmnw@KOcPv@pcL(
zOt(xEV3|M@fb1HJ)2_iKv$``oaKLGSM{n)vi8i(gq<Zkca#+p2si6%b);1h3CKxn>
zKnwZAftM7?9yvKzwA`Jot*pu~&QB0U0()FAXg`pY2ruciC6OFJY;<5#9w~jh&+pVY
zZ&jev_VMtXo{ny$#+gIoupWO_a|E>RhoD4jgE3v@atm_(p2ViYM|$1yVi3OJ88~43
z;NS=*%eagS-muJdl7KobCg$j3q-x_ZD`$6WE{TVwjVfkW{lyDf@~7{f8oas|A&i3Z
zs66WneP9-=Y<2*OFt#$vd*QGQV^kDxT!koVl52vvOE*7!@Y-dL;XgP)othxizHvqC
za^k^ClQ@g@dX4^ig!8&}w<9K>^S%yD2qVc1kk%0Gz&A}HWPZ?Yl>iXX$eJCTK!7Hs
z9o_O8#5vwxUIuceIgHaHsn}#>WVu@~N(sW72h`MHhHGy;zP#rIFV4!!>LtV!^b^md
zMFTssG#D9%SSTYa`@Ui3b9FUwbcgrA($9AIVG!>W*EKXW_y+{cLYfEb3^a7~0+n2l
zVMEMMj@<dnWrjPc&j67bf_9_8Y?AxVojZOZAsL{0?*EKG%M0tN3&D^!AjKB%8Y=2Q
zjk7%=hgncgPCUPB?B~z-L$MP?Qo|Y>pMxutC=5(O27<KBZL|1UaugEP^z_?M&|{W!
zUb%V|2@HmYhK)^4vUP5*v8;v^30R7Y5I@Q%%|I~*NcQmL<SrQ*nAbUj!A-)@OhkCN
zkc32#XcaXt@5Eg7!tdXg7DQ0NqywGPJ~cOoE<HURu;0<GvjhjYL|;d6aB#fJ$~gS}
z{l|X3a(8!^pbn2(5tYS>Wiu8L6T2yJen<%_bQN{J1SwyDhnWMi;E)F+w!9hszTV!+
z!z(2{LJ+1d!JEO5rNR8JQw`pP#ETdAX=(jn`1)gFqSTu=@uhwqE=k^4b<MYMar%~Q
zSWU+w$lOoE7*tCQYF;gLba(6Zr3ljo2s$`$*4Ea-Vyj2aDZYLU7##8t*orvu;$vgK
zZ_)|_KS4!W7{df7pDQ)$(gp^!Zf<VK&-Vwg!Jj~2pPECbS9I?kfB?teS7hZQv$AMI
zFNw1yNVOoL&Blh+d4Cmg0$H@-Hmh8s=C)g<<r4Nf6u`#Do`Cppczm2Pys~w0&@w)*
zTE&&K{&aI^=S!Hu!0<4B)nv$|8AM>TvT@0`Z>NRLeZYMWvC2Dw3Zw;a!$U?!8alcF
zo{j3FA;aR?Sxhp1*mgL|a?YU`*RO(j6mqJe>6e@wI#X6t)2|BjkD~)&Sk>v8K+aBU
zYk;<U{PM;iBMK3c03f5^#K559<Wv$LQX#pNEj2-ig=Nv_Do>-CTkDpn5&G`kr8Snn
z94_qER3PCz1vP44U*GQPs2tJRLoY1FSs%23?-l6wU}$)By3?avpyiFX=3_1Pqts;7
zqtD>?`N;+i1;v$jU^r9&I90=S70%wS6Ca$Gfj?S_(sy#vEOkxTi2wpn+`s?MdA&k(
zCHM^h1RneK>c!GQp+g}dkb4MMwdJg3wDt5zqsPDgqP_<+yX?hgld+&?ay#7;g#;Ab
zrjr8yQ*mz(%`z8m5Ct9GOL6{lYZ!O)@VH{S=vo3m2Np<OUHuvg3LGjhDie_(R533F
z*)0<R24XG)j$?8%GT#9t9d36pIxc5tQlb9PZEtHMXJicZ^Sc3W%bUm&BeD9cMpZoa
z9uCfPS=m0}DYEc3<a{GWOPZRRq&@Qa_o>gTJM~zQhk`2%dle1~`Q|Y`c<l9a<G8xI
zJ|PSSMY|en>-@$>Xi^f{ZN6QZ;3-tN08*K$u>0X{jT#rniXguOjXDC0A1N1lwU9bX
zWc1u1&l|Z_@k?1k0)vFd4nbn@PKKe1x6AU?-HM!+CO~=vzuFYd+}vDCON-O$x8IPE
z9&-%DGx)hSELn25_c=Lmw?o}?a*PHhTwGj=H_UW(9~>PWjmfMU!D)d)&U8FJp13=a
zPyFS}0QUCA;o<0kOzF9`wOqEJbjfcqrvIG<pr<bwU&A+<i0jg;Jzl0q_5wDypr8Oi
z%G~^XdRGme;G5XPLkCm3H+u)gfXSf*NJ&kF!%xG+^kH+;f|;3_DXt5wrUsU%7#VMu
zjpwczL#RO@YSE~~+qd@tx>G`igHZH^9c@=+#;$6#)RYLWFbJ)aE?>RwaBAF_f&%jU
zpWJbG?%w6H{u6{pU|BT@V%qk(vut&S#ouk=hlhvLu+sVYjNlljl&cVPXNyL^KnXti
zlLR%g1cuU0O-(8wG4cxxoNM&ItMV2So8|GY;hV?NcCI0zp)E5O;EJ)Zr3~eKua)&0
zU^(;Jqw8^9BJdq=5wd=UKn)A*C{Y2Gc!#Z!T^Pg~(7kcF95SKaCjCjuK^P1%w!m^u
z1Wv2u>(@A<A;dHANe~UxEk;h~m&Z!zHQbIK03sr1U<ii$3piKe`SWYH`42y{Uh>NF
z9yHQDSf3>2dlry_MMU)Ffy@M83lLsXaC66kO@b8wEvVdiw=X{osE0FbFqnf&9q!*1
z#{oMb3}~fqW$*d(=e=Na2PKPNmmVb-R}5Sr_{$3;BRVix(hsh@7c64KO+v4jm-h8*
zP;ajcOwS`b^YG!4J(qys8^%};^KO74hu|K%IFw5S?+=IYZHda#cv(I>NiHk`LLive
zokc-ihlYj*XggXIi<O!ABVg_jSTP?!&%~IhFv0(TnYo{`?8Bk%{QNvIk6n;RFd;S;
zmdxByaWN}WJOTcEAuf*WJ(=6#dvA37{$wFkI(mA@+<`6Zw#z@0p-M$6Ik?zxI$AqA
zC@CpD!N=*vm1BX5@86$NP*RT8IF}7QEO5VY14jo)KtE<I-m($`qC<x6UC#D~!LvbD
zMFmmu^IF+}c}Xv*T|pky$WS&RXkzjRQjW=Jq4)Y^)j*yakCwJJGT#q`PX-jYBPQ&~
z4mmiKN8ML|Tj}Li4@#!<#h0g1fCs>!hn$UVa83{IaA0fe3xE`U{{DT;YNEoz$pcGJ
zl&3}ElvI*Of(HPcAUJ(+EFmLiJaDiE-2CTH|L12{O$qqFL(O#a)~$2^x+;kuA!Q>H
zI@ke(ReJbPtRs=pYcnl}4qzncm|lU#&&{p2MIgNG`DCT7e@MuX6NR<4wSQ>nFrg%J
zlOV<dKLU3YQa+U0pHf9b?+_Dru9ZzmK|lcq23j<zA|Akx0eZ3c-HHug->@&myVNLR
z(u@YO;_u%&^$iVhl&GkwXRRs#GkuCG2GE%YBA0erCd&pn`A7)35NV;b#!o1nU0ahB
z6ubgq1w^CPU_>K9eYb4VjtKUzFE2kiIoZqGJ1jC%SWl1ItSk=Tigtk#Y<mN&8e|H9
zJqWf3TnuS9{KJRu@I~Ez5IM_M!Dk><1=K{vOHB*tH*O$x@5hgKU<q#AxB*M!4-pJb
z?@N$!C2-r$0-ymKs1F}LypzhLBqzTtARvI?YtZ8tC_O@i*QKVaM{B3S@HuyhiN7-7
zYXGA(zLo(6x=L@KQHj<5s`AJ1@S8VpUhWl9^zro#kBIP6&!^$$Cj2t^65t6)K;Q$g
z$jCzBRiN^Kkb?yo0xtUK=qS{~SK!Awq8QrR5g#Z#xQMXSpi=>eWH>Av*dz!RCMARB
zf`Wn&fhd7`fSrNQ6M{nsk6fi7O72yDCxA}*>*Fk^kw4~KNhOdbKz@twN}l&|nJPGX
zd(yUQQt1)i>FKG_n!ioe<fksZ)3Y<iin9KBE6t+O&8@BMFxpo)EFIzcVftRx(3n!G
z^Bnxra4)!7L*n<17pRRJ5c6a~9%Es_gcpdSp`iiBIbg^`3U*SThVI$AImUI_^&P03
za%JZP3>pnuou9t3_0WNpgai(76VPyx$td&n+oTdUHpQZj0C@+Ea@h{B;^Qh)X#)^+
zrr30g%k|HzQ&NG#1;!<Mufx5^neWpEmL88y=RCHqsA+SmQLh~reDeU(bX~bqxO#qF
zS~p6C<FPC3VE`a951=-%aB+n-HOaw+k%pOh+k@V_)qJ5uTs9)`F`mU@FF7C&!RW_o
zenCOMfx~ryVhF6?e5a?U3Fr5m&KT8`bS<xtHx5$$qd{qu*DX*w1e^jpQ$KG7`Q=HB
z#DrA`!$;$#>mU~DMkqAbV^*omyYlik(a>gxRL#@j61v;$0bBl$!}RPj9DBG}FJHba
zeq+|(;I3^|H3>eWvI+_r3|$PVWnNhBc>n87eM_wH(mw|1&<^nVU$^Ut5C7|SP4s`c
zT?_rM+qKyXpZfZGflAE3TTe)Lp^gVQJ9itB|MK{5_5nFL%VcW*G1?dOn~MAWU$IN$
zt^ak&E+_wAmuwEI1~RqF$iXu!Bl?TGtzWad=o`d#w}MD9u(Y|oEto${Dc1a#S?aYH
zDe~lvY|U`mN>qU3gq(ir<=>G^i{?~An%d_V9UXm5^sg^wW`Qil8x}Z-aL%GT_Cyth
z-^{_U+8ZAyf>U=h=&we}#CM(JAgtL~@Hv1y&CLA#4K6rm6pdb@V*0BOVR<$D`4>Sy
z0X{fq0NdaBl`pT_RpAl;-ALgeMI64*f95#v>b3_RGQ4)LrBcqv5`3fj+y0~sFcK-G
z;j=2TVY9M18*cZqHLomcupDnpiUpCMSs6Sf*6@>~pqs$QHfa?gR#fUPTTL2l@S81s
zZXv!0U;y_;smgc?yy2Q5?i=y0+f{KnY~Ba@MH7_MkkP&lxdNg@xEi0^WKw2kX1Vj=
zB?O6w_iT4y!fxCYv6@3D6wurU4#~>P1LJk?iPkl^?>u}?yVHY;8jz8G<7*`4<Un#j
zglr%(Jp>0XH%lT**YJ1>c>0oMc|ET~26^{xsxr_=ogOXOa8poFz-_OXb%io4icupZ
zIvSsxoLsTMZkVQMv=dBa+TbI^Q$>OeCM((AzkiSa=t~YA*o(R=7wX)EEQ!D7Fj8Sn
z0}cY@5JxkU++rcx@}D1S12NhJT#z_KuiWuqf+rq8uOj>?VBI3Uu32DKU5=MBA*88U
zR6)IoIMN}v2XuLGpKVr0wzj4H%JW`;#%n9nF1tZn@vG7g#C8Pqx!~)SUGfHSC;)%t
z-a^qi@Ku=w5M6#%+zjI02i6in04(s#%{S=Be7p3t!8uGvM+b4afs#7Uih*$zI5T}<
zlP18UuWtMVEEOJrFsyv$RH4o}x>BQTJXp$p>-`G;SahF(&f(_FC4AoQbYcMj_Yk^R
z^g2Hg>N1v`*B#i-4gXwuRhpX{G`{wysE2<};Ns}^U22KXqM@V&7(OajZ~NXR`vZ*E
z{U=YhQb<&RK5~I=c`hmn>cHoK5&(XBd3hm+28^b}0kkoeuYs=yQV@ZM8bqx-5K1sH
z^?-jwNQgM75<T)a01P5xM__BLfR2Ob`Wcvb*HZff6r{7#Yp*;hKu!vp)xbZb5C4|S
zBUvT9Ep7heCnn7+;K^K(XXa<hP6T*LQC9%IRNaaJDE0%UT)6`~CGiC(XhEq6`v2dM
zL^FzuBj98GftSW6B@IcTMTkwn&IlhA%WjGmU*%SNe!Nm_Iv#~e=JIXG6(0|88)W~1
zz-`E6N|C^c?gosRrCRnF_J#>=I2hR?Y$Tg8UP~xh<}=Uhh)^38*PvG&FEd{Nu2H)`
zO|1HO`3vv?n@#u{4ioQGAK^hiAn3>2Y54n3(w>fvIppU6sCfDM4nPBo)M5HPA>~Vu
zi$lTqTv#|PHa3S36rk|qE<YfTG7$zN4u?Q<T0?#o2_g1x)42lOwxn#iOfZYX6BH7v
z0C(F80H07}SJ7?s9YGle{?c=>dvBr60QB($9vS>deSTQ1E0_W64W)j6jyyg8#i?~+
zVc}wbIy!)BFyKYlU_h78fe?VJlLGAs6{hwjn?jqVSNx}&LaTN>KnUbo-U2U!X(-<C
zA%P=&4ZbNOGzkzk9he7r(L5Zc(3Twlk$O-x2a)jL#dZ0Nnq+_=73zb_pNCfrdp}<m
zN!?13GXO#kjCoO^s-z9@NTIb^{(1A=*RNmEuM2}03p6_*BH;th_y%;4xC3fq@KY;@
zd1eGqLLiU{v8e=pWE<j0U$vt(u>6w3!cAmqe2^$+Im*BiA0W3dq)Gw^I+@Z*e;^4i
zK(TZQSQaoPn!#2o8#Ms}(ifa62P>ymS54qDH@8R9FM$X0($W&rZ$<2Zprm6stOkMr
z{#gX@3MlxY=J$YdH3+(<by+ztEiIp@mYU3fL25EIPaptQG#lKB?r8eqiF&k@nN-{Y
zr<8!-g%j?+&d4`Sn~h%yQ1!e6%sbe654<Wmfkrf(s^tTR<nI+v+mHwbIo%Kn9E2=K
zIArMd5%W68i2rtkD(Lzx!bYeb2!Opr;wX?Znm@B->%^YA1HX?!%!viHF*v;m0ycwH
z*9BfkB?kVmb+nMg0*<jjlYQqqm_UT!2%jIye@qK?4s<3`a_FS_kEoz~J5-tg<Tc{;
z98ARVC)t-&3obd-BF(8RI*=bA0`?W^imSVy*^;`STEfYxAxvNde2X}?fF>C}{FOG9
ze@+f?HAry+EKOKgSZ9(z60~s~B6uKR0__Tq@zY5i?~&4X=+KpX$NGLS<sPb@p9x^Q
z#7v)wU~_LTchAvM`(qd+f|a3}2H&>sZfd9<!T%7Gg!?(j#0|md>DRAcUOqnkfNzly
z4h2+6MFD&j;M1*Pt%5`-fy>3OVN#@rbBp|9fQ5y-goH1lUWBq^aK8eSs{ko)+`Op?
z*9FoLA-l;7=$-Vg>|H|Gedt*bvKci(MFK#boRu{K$l}l?dbna&Kf?))=B-D5+W<n~
zL-LqeS?PeQ_TuGB3N9{Xdh6AZC(xCGU$<w<x3Bu@RXvnp@OvlH%_b|0q3jaTrh(8L
z6odik1#ow<LEkL?g7dfuJ5-0yz`7FXv|{tAUvmI7o1k)fAt~7e*U@~6{}CQKP(kSc
z-AQ#j+S^BfFM#?8BJu~I3LP8{A0!X~sKJJE9Z}&QA8hon^zZ_3LKr33s_3Rbd={(U
zFQzBDR*pED1TIblA+oi=VU1xoC4{0=SQe+!W~n}0nm;=d;b*pgw*f=%3oZiFD=Xr_
za1(Ib&>~$GFpc<PR}BI51H3qOc!iO(>CfpgEMkUK!b@3MY`_Z1P%6L;ffX%&+68tK
zpCbjFc4-C9cJIQ89L%#tnm!Qw5F2hd(nvK0Jp_kYe;VG96C@r($%8~HKqFvK2ecT{
z=Y^av1rB5RW36()PXNX04vh_m)2$Xjwulj7-PxKsWSU>vKc${Ny#$3`8r-z8b|VD3
zfDup-!ILX+L&k~?5yd^6Jyf{t0A`W<0VcB2h^Z$W8;Glnhyyd!$YZt8FaVLe7KrG<
z)C0~>JM1`uR1ky4%a<=-LU?J|4@)4)1}bfhb8}xw%HkwKTLuzIUI}^5xWFKwpQGIY
zX$UUSq9?x>+-lXJ{RluU1F|lpR*lh{_#BTAP?yJ(lVdgg{W63TE?~V8>;FqgB7)}U
z=3*Q8!!+nH8wzRVD$rAk1R+NnD3)0p?k90wK|~xOu)$?R+N98pg#AMJc|b>cMKN$^
zez_i~E&t3;y+y+Szr?_-OuIw{*ey<COvF+hhCO_t+yjOIo;&oz2P_~IWaV*zqk^pi
zJKv9X$w_cJ@B+QTYS-Ad?i13l(rUa>X}8v%TlVWE5T{6w4T4G5&?0Qr;1|Ur@Pq(!
z98oB@EX+7}t$X-HpFMjYRd5EsKV=r&vim$pV`5^E?+mMe>^z_&jwu%w#_CPM+&y4;
zwPqXrzp9pD0{@tk!)nlbDXuFc61*#rZZ;gNt+RtE?Xq#GZ?kgRp<&t#q(%yfJM0nA
zf3Sf-x&x5g{1a#1pCy~B!7Birm>Q^Kz~cLrf`SMvYjNLQr<z1a;?S7b`m$dKp$ZO~
z!FXw|T|;bCRK_IJRRn_osDzeZx+ELW0=yTeI}k#Q$Cvh;&LR2_#}>^l0EuvfFsg7O
zN~AD^Wf5vBSEWP?Trz;gBNLV_&Sn9ko{FDeeH^)Gmk&EM&QsLJJv=>ux}XsdAmbbs
z8L4(;fzAyTH@8Y$X<v!4BH)zvj}OEb2Qqtb!M>cB^E*WBl4{bfShiHih%g{=BXa=p
zPXw|a{s5T?45>)RTN)dof=oyGusoD24mlZ8#CHSMD_A5Xk~%t6(5t%ys8R+<Aux|F
z9yVc)$<nB+-H(-*e*oVDP!9BL5Vz(MLxro?F{V>P`Lz~%lYtE4Kiidqev0GtdsHJn
zRHvF+k*BG#gGTdR98--(CEKe-J?h&wRB>I+|A(eC56iJ@ySQ2AA|Zq*L?J_l4528B
zXqHNnR7%Md$t)$QL{uV$q!OhPk`O|QWJq&ThJ;k8zTft|-yiRBJn!>R_kCS^?{l4N
zt#fVm1Zfnul%#@uH@mt&{{Y^N<?sKzfP8x3HzdACAZSd@;nn3;Af}&R--n3e1aO>4
zOwIaZ4-sMnJQsizs{k!ODEuCW%u<J?_t5UwJeCGEZ)>VN0n56Ub3piphzaoq$jeSG
zxN`CGWgD2PNzO%~L{6Z|J>u`qftt3XSZr`Q?MUFjNz&1wSpVWJ62hoppT!9_s;h__
zxuY<-zt96Y8B)=hw|z+}NPO^czk9RF%Yi2P`WZm0iwd(=(o2Xlkj6a%9bBaBth(EQ
zXPynDsQd9_H5KM2DeJ;Igp&JdPrVub0bvE;!wIB=Qv9bjeTkNqmap97ap`{pw*B~!
z3n><xd(GxiZ}ycpiYZVa!)p9^?mZ9`;G;*YNRis{>&;pb?32Fr2tdcZioOgImesD_
z(pWC1c7)Q3GB&7ZR^Qt6GiP?8+?hFVEiD|?=3u7&aFf$VkItDp_io=IX{dHA8$Q3f
zT*I$l9NE(;*ZQWW+8mm2I-lPq`|$xSV-7<2q@?s8G9=tbv2RXJPL@+L<dDJYpE|I&
zu)L6tb{byUG<bxQACZxc-l+^kUR#*rLK-bfP#4H6J_qQ@!p$?kZOD(}s+#ne_ylw*
zz@1&#(0<F_4+sbjUg#$`GqFJp))o>D`3Ak+ni@ZL<&9%BJSTAEWVejvYt~`<5I3h3
zxqnht&UzRn{1C5iY#I~3^LO={^&{s`{&$Fup@*?8y}SQjR+cDse%(Bv=|He+$eW=l
z=>uIwT~5V&kf^mcyE0F<2S9?8^!t;EId&Ukb3&(`t3Q3GwRRKUp?2US$YKM-{PXt*
z&2)cxZYT9OKfv?kVntD1k*(gOZHbqWrizzdf9Le#{LVtR7rL-+*SHY|W;F41%%VDy
zb0)ZbT>AF<`fU7nWfK~HEkk3?qYH>V`<lCpZZ~}xD7b2tXA_l0a5Cgu?%RADE?L*r
zRdvSZ&u75bcv_4?{JvCGEdYqUNnF>buCA_d$B(CG8`ctVhHK@r*0`MEe(G~s@rhsh
z^yvd=dL_F#zsu$xo!Y}<anOq{&h(in^nqW*sC)PBl~h$_v1lE}ZmRk6#Y3~e%bvha
z3fzZ?Lov<G&HB<&T3>x@ifhJvDeWa8F(<yD;9;*1uBmMDS4KL#_OzDpaI2LUUO;c}
z%C5X&XK@rU>E^9lXnE;Yo%du|rPwX~Xw4U2B#@BYm~rFQQhX7H#gPKK;&jKAQWMd%
zQU#Oy)Sd_DrOmQjSpPkX?O(sp))^@H<430LwN(&V6@g3G;1!hWf@cokZkoZr<wIIa
zL|`{HCAFl9nkJk!*mG1lD)>bkwd=P`4-=+@9hB$A;j_Zv=m#js$9aj1)(U!%%8l&@
z2^o|i)u&H+T_LA#V?%oD(?#QM&1X@<MO$HR5l27arF|g;kqPwJ-{NR!Y%KQ^{TGMi
z-s7LFxmQGR1b0#o+|BGY`^m1h?Y+Fbtgsmh-GCMY>_!a*Z*6~BSJm&+zI`1)pHsL0
za*U17&dNFn0nXJ9ozd)6-k$sM;|DG?JK&+X0WEH7LU6<=Ip6;Ok>B*lcS<)1_X+5l
zLQ_t1fBs`E5?Y@$sT`+{AC09+eR68D(7OP&9}{dgtoJ?n<5S$IuCNtQCkBT1VWG)q
z5)LhK4H0jrx*&dt?x{&l?~hB#z`o1~)4Q-T5dFUTb;9rsU(I*}Xo)myetv#aHeEaQ
z-YMRt{O^xBTI?+>As<*p5F72Sri9FNid?;VH9|FKKmc8>?{yP=5*YIuOte2#sa%h|
zjG&33%(3|PV9L7hOJVzB=@)`uI29npOc3tZzfBxAcI=bYLtI>32%2^QP|HrT+Z8d2
z#p5?R47r-^eGUJB+_nlS<ujJhnVjRP<ws_yYprg{yPA@oxY&ufD$auQEGDp<L))mD
zb&=^tIyzmahaLH!o8;V!YJ31x8b4QJ;>G!jXJy@sK%P8>RzX?0$GO~xluLCZAN-`k
z`NT$?V0EXBS)$$9Td#gtZmD-o5BF>l_OO@VbN?3R<OFeeu@*3q>^foLehA3F^4sK=
zx4S}8CJ27W<voHW&3S2M<$bVq^or!TDT9*9HAWwM&XFLFe~5gPaM5Op%s{$MK^V1b
z*DjdVdO<JD8XT~L3lg4$P74GL2_qJCLR-==&kcTIqguLQYVcGSdA{`;mgXe;ml84g
zkMU$}GToFetf^`5PvlFuP7gyZhCL5f-=@kPAL$XpZY8m!V*+_Qi%zIamOV*xo@k%%
zjWO5m*1=ADnHO<p;k<kI=h7qt#0c?LsR66_u3~@i)9OG12=6B>Z+X&%$c-2=;^^_?
z58gSa>*5@s7Zb7!QQ;fjtxp!`A!_M_{@r(Qe;*g796;ZLr^>(^n&fcwMRkSGxZ6XA
z4xN*xNYrB(&t^PkKY@!8@kj-ep-jE43&CeW0JXSt0vb>>Il!p#8$T>|O8au%EMA{_
zDAMh46YX+`df8fJqdEcV>OjxIkB^OBF315K9fC{%BP&0u!6!M@rL2SKDeOO=;~}tW
z1n5Azps_2%CuW20`8Mxf8&qvc(IW$2KX6%q;8CeG$VUUFI0jFdxrSFEl$X?vYaw{(
zF2S-#E}VAnx;JANxC!EI_^er{(@C`Mx8r?FON#)jY~ox5OqA_^2M~vKlFilh53;8M
z0_F<bLV_||0WIo#dTX;EQr0#%CE@iF{G7l+c$j+2$vqqBd{cw|3x{M@c6Q8zQT+(9
zB;rfhx$#PzXEokQ-FH)TVI)x&3$()f6DOoPkVw34E>T!N1Z<4ghR;qDJ850s{1v9Q
zSj%oUmiY+VEG_uf3KP5wi`-^|Pat_!Zpiye{-eItP~h-UjzDL_Ij9Qhpyem$o1Q+~
zD5ftho1NXotZyYX=JFs{LqmaHP?zX+Pm8=kPOUn?^bcsA368JFqwyrkU9m^L2exiN
z?GP<miFvz%ZVFz1wk;iws2-DlNx93`v#z{o)(@b1+_dWcq1|SQqaK<T!R84IKWef;
zz57h>h^;?&we2_P*X2u>7Ce98I3+MFOc&h>$HH5$(C}W(s7#YTObj2#)_d~gRzSS@
z|9b%z59)dF)wN%XGR}6xvL+JEsB)r-q!0{HwUI#oTU%FlUwnVB*45+tZ>2a0=2y5|
zlGZ7Jv+~+?1|dMu93?+3k7YrPT=(v}GK=y>oCEA<-!Vp#GBR422lb`*gL=PVIT2S~
zipwV9R;h7A@v@}#{8;a<EM;5oNk#Yg{j)Us!s$FM#oxbwyPMCTZ3DA9LpSH{k=Ht>
zA47>}5l+NBO)r*3WlM~{y!`xP(U)_G-fnH#URGYd4y&{8#&YNj{1)N@7tu}s&t(Lb
z^t&PGd;~Y~BY@dR=8^n;xP8-*0GlZx|15CNLivp%-<Lc-^~RFD^t5Q5CfvWsnF{6A
zyr<wXP9m}Gp!o%bKp7Hy9<yISP|$t$JeIM$Xe8%yKPL2Illb{9@vT;xHEY&e30-a!
znC3b{!1H+rx@+K}!p!AFE+B2unf2whwK;-krza5Y$@6MAOk-l`fI7W1Bgd?M`=|2q
z@(D^d)Jey;iHGnlL!LK%O{+zDd2)JY2)}##=iw73_yc+*>F$MoK(D%BDT?6)P7=C^
z>V%aG7fP^FGOfl7diQ8Z$o7mgUV0bON~ZPxPmPHih;yNTe?cE@B`;BM1AKMi<3J#1
zOAGU}xQ3J+O!<Xt-NzBHsMtwUUr-5Rtq6ES@NirBD;_&2VM}gNe|j>`Brfs8Qzl%V
z^hb&6{qrGjalc5gcrvXMt{_a}8(YvmHX>pVY=0nG=y-N;X4t^o(POO$nI3rJ#KDMB
z^R={InT=zrp;xbwQ>GkWAh&HFU;26M3N_*7!YktC=T`-(fV9Ii%Y<ltow#nfZ!^O2
zHE!&QEltC}Ed0T+k8L1MsP{kU-Gs-G+Qjp`Y?81CbA&h#OtKKXi7_0cT<eutTJj@j
zHob%8E3f`!PI6_|zWdgt;jMp1f;Rj6YH@Cko4&*hf_FaW+8TBi56KmA-`BT3W%SEx
zw|_Vf(=$FAzu@3t+2K=ncz85%J&}65VvZ`gneH2?B7x*1!Z<*A)PE`f{+`nfik4er
zmHZBORlLhz{*<^V)UVud$<yfDCmR~L`01+A#QxnyfVd#XaEurjD#**vo#6ztB&dA^
z(b!G)YiLEt8ehUKjCoEU4|X5G^G&`!-G`^lF?+$YwFOgy{WP^_OK#S%9N8%|U5~5(
z`Fst!Y3`?B(Hc+#oA0Zua1xa9kD}d1r0%A7wz+C{t7&-x%2Npcdsm)-n+j6mL!F7W
zwR|_3u}ppRH#BrO+;|yHZ{|Oi^FKr8TiqmTr~0qgtHuA`t_IN{_@nnFHMp{)lhPZ1
z&>5)7h3R5%N{{@4bnKdu)mQT@3Oz}#Ujlv&k8}QaU~iGu%r!dEL_dsXe-<~JC?-|m
zo~Oladaqxb(8P#~rYzHUnjLRo0bXS(2-=93hP4wyT|D{%_nSDL1a*jXf>}0sirW+w
zm7Z`&hK50}KH^BTrG4$tp~F&IMHFt7l`C0S6TBn7v4C)?>p<F2(eFKY@UJUs`<*gS
z4vd-X@JgYw>$VF21rMJ*u@PMksET${73mR*|Gw~MgIBIz?S0{e>FRyrs1%A;w|*+~
z4God3KNj6eJHA!{8xi#Lcqmcfl}AK`i`9%TaEPfeUr2R+LkkJ@MA|C`i<HmvJwca(
zmIS2M@mvIH%z|)AUa_J{jK_`Ko3SA`@;#>$P7w>YKR?#2UHbzjypF~p3|Nm26Tahn
z7o(UUt})Cvi4~A3An<_kiF9dR6V0rwUuO=fZQpIy@B1j`EQEVluoPUf$RFS?(W}r=
z!14_l(KD;6RMM8td}ch;wQR=;_ggVvZ#F3#E>UYzfP0k79&4!*rnlu$ZDmuOO-N07
zm%2qlVQ*ZX_R_}`=Mya9bJ-s35VqVg5JmasG*Ij$hgXL=_O5OEWW*+eITeHn)}+`I
zO6uyNQ1RhNVR)7gQ9tkvLC%`_#TI<p1~|qX)C0^nZ0gitjwlX!(W|PQSme+MtsOx9
z773tuCVXWlmvO)H_mtOv{`{F}|B|hvBv^EQzPPw_@Zi{>ZH!Oo8z#MKDi}Q7O%%87
zD?9Do&E+1#s6=DKwZ0gWxIX4?OY<M-H(`6l`lJ^+^=!wHfMgxM9}<Nv=d!RPus!_x
zu9ns;6<PhPWHFKegN$Uk?#)#N_F&Sl5gmEzph!OXg3X(!Ah`%Rh7*TzqKMcwlUyqv
z%FYYhUSFfh+nyfQ6E+VO8N?^tSHKJK2;blLdPL4Re=QPb|4xTDFpK!X)v8?B!vbZQ
z%AJMF@!T4*h&7U7r9Bx19}}dQ3E}AP-@Oy;(p(e-nyunmljXzi)#~c6xiuGYo)U{a
zvc@m&LA-79JAo=V8*euMdY5$k4`I)l^j9YV^>B;72Rm$Cjg|VYjcRkL?`Dwp@l<ma
zG2Dm9(B>nT&Qf{`7MGYB8tR=^f5dS_=x!9BT*%aWrro9S?KOab$HwI`7V=BWlFO0}
zny2-FA;o?y%u^W0nsW_PxmWpUaPZdLb@Py5{6xR(X`jDwiRW#d$4OfH($Lf9t1C~1
zck9+|xUzEWt7$o9H7`EZ8><_`F5rbQfA`Phup|f5#FUVDyHulLI}gRj$6vp+>)&u@
zN`m>oK7aQ~s!h6OfqOB2v9qLcSgzgW$)>UY{r8qf3o$KB&cxT2U}AI6t1%xNh210|
z%kYdT;x~8=4F1=}OaF7@Ado~{x-`P7?+G*vz6h4~apT5y@%qnjQ6jcQiel<}C!857
zC%PrSQ_hfb(Vrfsx9DvQF2Mf(&40EL{Lw!nN8B(9G3wx|@%=9@zwoSY?FAg3*kD*s
z6Z*&bYEDyQHj1;Z|0Fv}>hPcZKX4n+x#8TI3RQ~LAoX(JZ|npB7k%tuj-S6ZzyF3p
zs3j&!V}Uj?dA(+nJ;x_Ry#}nDW;Xnm3v-qTyU0_`Nro~7XB^7kjr;d;_DSx#Z@mio
z5d6oin~&a>CWi%Z-;m~+2t@zWBGNT<<8NaQ6Jta$<gGCcn`oO+M}>Z!<e$t&6Kn>&
zk9poKPAN*<NWz1S3oe}c=fj}33pgUciV*(*mte9#5%0`mjW7rcu}O?-@gQh@B3^w5
zwo*;RT-fOy-?hQoJMt|Krfe2X?!SlV@)WOzn1OkF?BN(X&3|qEyX&`X+sPXT0sy%E
zRfzTA3|RW%!WhZ-5FGB;!c@=K2FoGe0f{DXr<}(y?}02w?RSusL4xxIf^&MUdwr!;
zGrJWgM(`c@B_TfzFWyR#`G2>M*T98{3z%r{m2Qw6G-&bMxqD>H!78-*Fg|<PoEzfQ
znrXx-PLfhm`k!{LRO!dS6mo8V96P8c^Ju5o=%6QiwKsqZs2rq5;q%38#~*1U&Ni+q
z0T#n}SSOjSdz%=Y)#FCQsF&ysugdWk*k@giy$vFZ#L34dwfBp@q(c=%U&2TaJR}U4
z*$ko3gbinwhQkThB)|xt=eX_mSviJ7Fr5TYT3FZ{ob1KOufRqUMf@$CY_M%v#l_*A
zLoZFNi*WSe?&TxGz79oq7$cnD+!`q+FV|6G+IVs$SPC7V08pdGj2X_^JL45^fq%}#
z4;>ubpN7}oLpeXZA5#L*a#-&>bn4W5z<}r=tdD2;5|CB&;rx3#S1T;oQwQNTh74T*
z!Vz~Rs5Gh5lzivr3?%4oT8I0)<X+9s2*)lh_^qb?Wxt0DOVZ>E?)fKc&YpHk{^J)H
zAn9qAuWgHyt#8A{uEXMn&>4#ReJDmHZqpB8db|DSYdQbRge{{;euoVH!R1iTQQb-k
zd;CP{5yoAbvGkIigL`(yKWt6=DpX(IJ2Ziqj{~*}WX4I113_p3ToEFM5@7a3PXV;h
zTDnvc!qtk+Ci=A{vzw)%fasp^gykK<Q75<+N-7n!eO0@@;>Kj=RroDn=6SGv%+^YZ
z_r9n5hOdgA7~CNd0z*SD&%6zBeSS&!Gt_K|TVZnG?a^XGMeuZy@tQFCm|n4Ji<Scq
zwlvvkrT94R?!WtX*5cR#)YyPTVK|p`+a+cW;kyKgKz8o5>qWH<%@;<2qi}u{s%m5w
zp~zhi!&}Yg6JSu>N=}bLS0FxPMn(p|<(r^vxH8<&{qK%VQvm0MsT-Sku+bMU-hm>d
zcu>7BcKa|%uwTG?(Y``bIi*(0C@v1314;!rwF3&Z*};(DWs6&<7@S<nf)j)04Ap4?
zuLJ<*R)CIYu3ULue(R4yj{1+ozgqjfi~H@N&R~+b&IQHj#E$MR&0<8Q>=YduS|3lR
z%K-_O0hf%6Y0-NRk}B&|={EhO>YA=_iB%|%!W}MLAT+%~Lx31#AAtp!Wls9S@y7ZI
ze)_?z;TC907#5Z-UoP$h0ZZ(lF&DNVniUwW(hcJsUX5jzHydk-KsW;i3|M?>QWqLe
zHK##P3-mGLw|q74)N{~6+DM1O!b_I`goln>Vj8^0jGVa2QLG+0Zp;(QYU0|S;!AOi
z$z}Kf9A3p+=5WXGH%7OfDGc%eFVm4!MV+vahXq1OI?YqHukUP<wpp22{0~6MN?|CW
zpQ9TM0aAVE@k#aVyGgSa_dG5h*tfFW+tA&N{<_~Bf(1Yf2(CT7?EvlO@v)|Nd5hW$
z7oJ%XK1*=zczCcpInaL#^MgRUtz3kCh<N~XcHz$uSGme<V*i)Zg_I-G<^{w$6{h&J
zMg_SDcXl5TCOiUgkyWtUKVKJBx(XHc2W$2Pilty-aqhsQ|8HO(In0MeiBcgB&f%Ij
zw$$peJ3Ny=y?~Aqv^#T95ty{nvnSjSFL0KXPDpjMIk9%Rt#an)@#oHzR8=mx=se10
zx69V*n>)9SoGVf18LBsuBAH?yH~WUtT=R{1z95w@yZ~0zPQI46N3yJD8gNwHn#ff`
z7`$Y59h7tT5>6c<jy$-yJ3E0HXtolYdJ+|`6D~J@To|#7aXA-zGz=EEioqb>vl{<A
z#(11?QL|Z-26{68gdA5rA*s?@Q1as8`TDNG3km7j_S?(lOa2WK(TMx`w_)+Ha=#2}
zBkc7!rBrR7^k-mvHw{0QLp&DimXG0+5ApaZ#W5hRU^Xi$@l`82Lx=VEPjRbgl+w4U
z90BWMlbMf+sf_>`g3X2Yb^G+H2fLK}4}?;i`YA3AyNVdS662+~J6`a)zYH?mm})LK
zJrsTnIryu93S5H@wY0)1m8riDXx+3rC186x?Jr3;%vHp!H+xo?wYQ;SB%Lv2KQ(eX
zOx;k@28>+!pHrP~atK-e&<DKg=JQpbcQ99Y6XO6P{Vp8L4_^*&soyK_l>gN9hpExp
zINS9f%zjmT9abE=<YW^1xWun6ii$%I{0w$;e_5OHbd$5<%aK2OEvgv4FJ;QYIrF_@
zGOOLJr-V>l(=QKuG}p@^<lPrr0JD$)Fh+2mw-5cJyKCbZe*?b*DZOzKAOkSN7e7-*
zM&?6;*+Smr=Cm-*t?eCbTkHHhX*i>T@~hn-PA$GCWaF7(#uFl`F6E6Mc62;Nc;JMG
zqJMYXE9}%IJn_UG!!cq|MIlA(@*)pSG0WgE6eDBjQ<)wSqV@B6y;iB7Oe_};Y&y||
z_3x$>IyE@AytAJq+ofB#7cED;yw0$^{{l_evCv$aXjb5m3VeVs9`n?Mq;c6OCTkm1
zyf~0pqlek+_DyDNB%C4KfJZLa*4<FHxpYE8c!CFpb)BKc*A@p9%d*cB_0ojI_4GoV
zvW{$7SdJ?me>RI=<;~SfXZO>h6Q&Qn53LZ)!30lE+i$Ek%6j8l6Boyh&g-}NtX#W!
z)s{E<b$?xA6O98_o__i)G;Bvo)w~-cHm@?za&go7xKCr`Eu*<!r<fV)Fn?c)ccD|V
zOn?9ANplOQVsJxIU?$1Cu+aQV9g7QIKdH^5AY3yHzLi9zk7hE7O)Hyy>Gz*M4lhjN
z_K_y>WwXN}jTkJwP)AcY)kq_a@qC&2Tg<$KXY(h^nKejGqUQF#ZQ*s_I^)acKC))l
z<`vkeijm?M)dWaC^Nzrl<ime-N+!r-H=b77B)Kt{5Oecj`eZk?LiGJ(VwrejI5#=#
z2Vi|Q1j$&-+o34Ab&yI+;S+g-QI(->#Rp*s5Jmqg$GTs>H9#l@Nl74LL78JQjif-l
zjJIq}o-sNJUZjFEkc~23xPT}VOAQS8awQ-w!T3XgS^nHOG;X%Ba#wxF(Y7CYO+1<E
zp{RL0!g6eUg!Lw~rs9OwgxQ|6b2hmj*&W-d%;9LSGm>Sk%MJUcy;o@~H7rh*-sY)o
z;DK;SH3_bm(bmRD9s)5Fp(WRmk-7}4=X+#Ngd~r_ln5fSrtld$?2MZpOjA)>x7ETz
zjz`bVEV+8bRC&~>h23_B=Ga~nLn;5we&Uu9zE4Oq`aZL1Y|n1pP+OTBa?c1_-v;=}
zMy$fU%OCt=4rs-jCj8dwllAqb8H5411-w<S@~fc~p-vxXu4R4xki8jm@Mcs4kbKwY
z^qND<>P?>#h|MrB-P6<W%yHa-wzj<`CGU7i4Tl+!CoMw6QDCAF4A=U}A=G8z{9veE
z)Ka>6c<lBi_=ND4n%;05EzWArSz(2cd$iHBSN`xl5J+@vm>4_E$u>;J1P{=}Hy7kk
z-s8h1w_b*C$87T`|FrmxdSyU6`Ksmm)0Vp&sB_4gxcX0bN0oQ^7Xu{Art6297)rR*
zzj2(RZ8G*A(S*`$x+9NltU+-EjP>c?-wV!9O!b1?8G@TLXV>N*ChsS>Fik|=Pa5cA
zXh^SJFX4ovZx4l^o`xZ5l2fj-C9w)6snVL`*1H1Z^~J^K{#}ff^gLRz=?laSBTGvr
z)RgX^*%6*QFr;haw^iViYB!OXAx7k1M&nwNqb~yUr9k#487{pPb^bg~3)5t$!AL4J
z58MDFMg|`Paq*UB@h4f;$FBD-0!)g)6l8<kJzc>@axYY&S#Sl(#Yaa*&R=8^Q}9WE
z20{`pUmn|L{iWrbn(PtT0ZPVyddznFD9Jf|4y)VS-r4yt3@M{fP>oGZ<dQsvdrUI?
zD@^prEt+8M{@6<eeSc|Z{u<#v<8{ub4=XJ#6=V~|^d!=m`^{DcDg_<IL0S4Alh1Tn
z?r9u)qv1<90fpo(><m?*dTV_vZl8$w9codN7+-UzL_9hGiMU4ym!fbR(~E&Jo-wkZ
za-;A{$_-Y4n0_(6xpe}IC241tr$f4Xq}S6mt6RP{-Aw=CacPk8tRXRlM$bMCv=}*U
z(#fLHw{pj*=9o&j#Hsx$c;X^6_hsDg2c=c>-t3nwxPV3|*h5Oo0y;t{=8>#hP{enn
znisftuqL5mSYtB5Jt|yQF!t)_U*Vs!*jn0=c@`m3pscukc^g!jeL`3<gb)xh3L*S`
z`Gct{Do2C}R$%EF1{2M=`rWgwSw-6x80*J+G@g9%V$8Y`lD+44**(eq<KPZbQjw#s
zFVa^rDOIwM+^TWvjD#0g;EaxtXy>gX6}kV^^X^@S`Ti_g5?<@KW5Bc#XSFnD=9pdX
zc#uquUneI{{F7YV(C{E@<KIRX=z*2a$HbJHc$D;@@V_aqS{)|IimRKkmSIp*6+Aa{
z|C}*m3ya6lhElv2%Pt0}q_@IDi}_C2AB5~lH_rsyQ@*6~U)|GN%esjFhe`t*J3~wq
z0DuL_%!-zmXh$Vn96HsXw)i`vm(+e!1`)*`6I=u9g2PxmVK(1FRAkpw^Y5=sXp&&>
zXskB!>did*cG%79*jQJlS@{0F&=g@&aehfAnfdBO2`k}WnAuA3b_7$Lc=WH(5D37E
zUda5LxC|KrU*20DD1Q6?1WvsHMAHa|C4a>lDHjAAz`gMV!3de^#fxi320jej=FDzY
z7t9`c9#**E?Iy{-w4Z#-y<VRD1io8YWu?NGja<nsqhkILNA2j7g+*PdAU2pSgpq)D
zxj1ju_3PJ@<WJh`6wH`5?Y-*^Pes5y1kI#{D>w%Nq`u!efBtX-*bR>->^P*H^s1k0
z<->W6pVQWrEc`8XzInW__4>NOUutVBa$??FDkMz}y8M0Y5%ZaMpUcd1N#2wm;?&kk
zW>xv_uCt0(>SZ0bcg)}7^x^lj<Gp`9sQLI($9GvvR><9!<F;164{A1USNi6X=Gj4B
zf8V{u?YBkQ77qSYYpfA{a$ooMzM&NlFU#F9`bv0!=b~xPI1b9O07imoWj<IWXLHEU
z;}wDOuN}~{n8!iXx#yre@836%o2deBr)8B$HMhv#)*9|@uF|@EUa+SA2sO16bkOBB
zHSQ}?8-O+RF@ums27Wc}^Z0aduo$h%e{!pBs%vG}2@@um-`?@2%rDn2@tZ04n|%P1
zioS<~)_mnkhu9}-(p5R(RbXQz>w7i+8~b$77&>CaK9DpG6ZtP$Z{D2bq<X;;mhRe7
z*7pGWkBy2>&{ZkO8>nB7w+f%09gHzV4_+arjw27<3=12KBbx)2SS9~QHo~_`t$)ra
z#b~qP40|J$$64Ic!KoD&7bollOw|q#d<2y>|H2EAR#sg!!do7ICd_}hDCi+5AjoHn
z`r3T{@}>Iu+4ihhWIwbPJfFSTh{vByN^dOdW^Qhd_-UiuR!cEZYS5s=K0e*3)ChDU
z7bDS3*)=s39Da6L^oC8FXoXcUe)}_a3x5r&{eUZqE?>ib9Bn2HAT&t#InYjKvB%MI
zB9=u%gF)~!KE4DmcAE{GH$Q+yg5F|s{oBu<HZ<iI^X)lOk6gGg5+L#V-8(_$<7Q^e
zcq9TpG!)v1_hQ9)k{tk?d_fT>K=H0{oz_eJTN}Ec2d`eqKqB#II4QN_3znOjuB*eD
zAVy%(@I<#w1tPqK$zc%)1zqYN;SCXKS9Eh44}H$2mtG+u16diA)Vbf?*{_49x$eVD
z;SH$OUd_4^bQyJp0==T}n!{s_&ZLGgqTo}!mG8>wLZrjBXIlcPX_%wTE=X)v#?!}|
zVV~Dd-T%pN1gtGk&_6VEM}g-g*&g7P8{<y<@RTUQI#P2d`;WgqQ0f1@0M-RsQq86k
zWh=*K81+{Q{?$BbmQVBNBfolW=wj7$r?UIH3H#zzcHFNB3mp9-XhO`Nu^)b(+F0-)
z##YMci_+@a0m=^NQ_D(sRF&QBHl%Mven#FQmDlT98ht)44mdq}i1gKu>-xE0H*77<
zN*l0EK~W`g!0U}#*-ZxR-@m)Kt!dQ)pY=+c<kzKY^|W~I@>6ZF;<bkdTQ{eTnef;<
z=+udGAqn6NG31TjGoOY0wQ;LZq8NIwK)VkxudX$Qz{c2rjyu~t8zX-)vL_sK@DFCk
z#{Z4+$F9T0l0(D{6u6}2<?0j1kGp;=(LmX=)}LHran2~_)6-VxQS<d9VJFzR*BD9=
zhRwjhJ_s>s%2FGlq0Cb@?8eYwVzBe#*~rL!k&z>!ukN~bZ6f4D+Bl1r78TJjik2s-
zyYd25JpADY=bkOWI>dO~LD~odrM}b&7}+aCJgLu|Iq>EZ#LyCYE#c6T3CuenI(Lyl
z<@ox_?DwrDe%Lv<P<VfA?E0{DslZ1gnmt!q2flIClI*a~lJ&<D!Eyjcc}z!vuAAoR
zkdQbjFQ$nbuay^Uy17E?)_nc>G5PWmdl=?5F?lGafw06ed=|a2m_eXHg9rO(S1!Bp
zl!=OY%miX@&{v*t{p!_as?%a)h7^Ps)Q9J9(L;BLHS!4yd*35VOIi~MvNR^YzU%#n
zQOitC4{4oCb!h*Zc%WlCQ5C~o)5NzC%pBiBLusvfX6(-N0&=Qb-wVGlTwjkoBX%Z@
zOM}M*TNWgJxJ%{ZzGvM1#pu8$E+EP+464~Mp+SDOV)NDof85`0ziR!hYp2OW_ANf@
zzbtf5hC$f8#Ol9_7GJ-s#!cCB`>jLNs%=f>@&Q+U-MSeCT3Sb_D0~UY?7QRl@{V$P
zs!yzwMy<L3_`S7mSai6EHGm6-RsMM}{W5tq2^&i1VtcDQC|Bjj6?q3gezfzs@_x1t
zCkCJ>t0q6Dc8q>SPNOddd5)WZb`egFh*3qqCa*9sxJLsJJbjaWSRY9cEH7K6T`;4G
z^|*PJf0tGpLKSd(mNV3p(Ad)<V&{B)k!1wM#YzbW{Xb>?V8HC1>evl!smeWyE(nPl
z#qj0mWABwQ^;={5#dFc>JktB2&DDWNPMWKvuhI<uH1Z0145Ur#SqL%c6=n^)ieMF%
zB%Y|aq~@nbJg=4KFYu7x9}_c%cY7&03<J5K^&A}?`!l{ZWy%y#S{O$(plI2JGaH6$
zq{eAi@x}}K?VsziD1U1Qjg;t%$`W(;Hc$B)Irr!&Z!vD)r%&by%bkzl{_MNRZ}?PP
zTVL2K@Xu`7UcLM}rEReoV^ib+WDxctwg#wC2o$(ZziL~4HIbg+V|!$++{iTbKi3=9
z*StIy)a!Dj=N!-OitQKqsjR8ajk5DKYqQLI`P7r!0$O%AOWD01_tfz~ip@;3TMKQD
zcD>d1S=7gMpH(hspQ|aA)JzGso#P;R$kFNK+OQRlWjaUvyT+chJ>Avp&uD$~K)vDZ
z1~e%?JO6QltmcmQefM=5<zGDFVB}4m3b%mMf0y;S{k3bH=K|%p@f#=P&sn;<W9og|
zfNQ>^`bx^4xtm?t5Ry1*u34Oaw{@L<YDo<-o_4ma(#yv;{K5_G%3ROy_WEG&BN5y!
z+WqmR`O_1Z4m;7M`xl!<CcC;i_Zu+0=vmCQ*f!%7Hp*>0pA;UDG&{&ezVz3VfXgQ9
z>_F6yo;-=faXEGRbXT;oL4yWKbnO~o;Y5Cb_%E2cWyTEQjE4lm&E@Oo*9(p7VrAM=
zChLTvp`;|7rUAPL8>E}xXF5Vsat^f-5rd-82l@nCh86+`s(>g#MlmoqF-d#4!g7(h
z`5=C-==!K|TIa-c9~}#gm<FL!Ldsz;E?YN)l`MV+CRqC<5l_Xuu6=zo9W%;aNllFo
zGg&=+?<2-UJuh~!oWcavV^%R$4DMaBcketa{muZsWkYV=yop=*=#iBM2J`vVR6g^Y
zTm2Cn-G6<4M4hdxuTQ!-=qL`C9Xr%1>J(;?t%VU~YVm)v<mj<uk6r3*J|qJU;vRoP
z+_Xxa#k^i^uB+Gw^aNR%KVa2QZd_-gV9z6)GR{*pf#=Y-^rkSHQOJ4lWC8pZXnRZ>
z{~NihKBY8nToq+h@G6noeWJf`MvDv`#+aC;XozySy;$)a))82hL7twTMsen&W4pgs
zf~Q|_b}7C#quT6^JZ3^jN04kquRm#iL9F=#2r)T1If&Zp&-yvQ8t}!T)`E0g389z>
z?<{moypk&}q%gFJNZO9aBHr}z<BIP?Lc_we7cU-x2FLl1KMT1$Zxi30<RX8!@U#u3
z?I<Clw`3kQ05b!fJ8R?U&TCxaE_^149;0iRHWhQs*tYCwIf1JsFzyUlC7{({(W`zL
z9hkU&*|Oevf%&7nTsobElquQS+0&S0ME{yPb*dy&#`x7TJq9!k;5ZZVlCTJ}t5-v0
z*435bSkKDIskPYBtK@)xZ(ye&>VZSTNdt!a_3M`~qJbG(58e8^9agcim_#hPM<#T$
z!{wrywv_Dbtt#7FLlQcS`MA?}tj1fdUcE6#X5v>J>1qCqDK(}oN?dmSp5B@ThvFiO
zf-bZ<(dKwBvu9`SXnfRlHwrVke>bz+==|odi`UCM{hWIB;Lf(qvOn96KUH$#nwgQO
z<%2s5dkkK2@uAYBx|S_#x_`3COtHw%T&0>>aB$2c<tb8c{x+N_3$^a!b6X`U^6uiG
zqQkk}`}}_UV}tQP?Vl;foUAg86%2Tosu!Q%oww3)>(%g?^<B>NHJj*@KDx3|Vdk$X
z?PQ~N#cJKz@wET>N?Fstx}(=O2SrxMM&})pHV$4_bG9V5?pb51adAaMc>dL2S+0ql
z@H@MoTS&XYjXHPk-`?E$am<sOf7TDk>A8RBDp{L${SV6z*=czs)@-Qi!u^B#zrXcc
zVXpMq+wmim8XLMql`Z+UGQm1()_na6`T;>Czz)!ZV-OU<I_y-WI2B#l25b{JQV=?P
z@7rv~3d<>cCf`2#^5sZs1qSQoH%4-E_C##@$Vd9o1_-wN7-7VwbE7u(X1EG6jfob}
zg)j>1>aIcf5%wX}PWF}9Ml>M>7Ta~bt;Bz&NQrjyM0S*V1@688=o4B&*0M;}V_Aqf
zM@UggO@GE(4&i`W*ryjqRkv|B=ZI`c`k1xk1BlOQphT$QT{bx%U;FOk`j`7M(_#Hn
zQc{L`%d=!Fu}3j7J|swIe}<KqAW<j5bIV})@W8-KD45YnEAbxC#R)Zr3P(SUGv_G|
zK+0vt)2F`JGp{oIY<Au8kwArK-1msvUKvQv<e4&!xLSmY4xVA;uAPHBi-(8fdtsIS
z4|&Tz12)#z7@|bYH8YddiRvAuw}6Qu#Iwx%_xID-Uj^66dHmGpiyJ%SwP5)54-DM<
z#?cmWlJS!RumJ?~KHwi2$x}9tGv~<L4ZVb9pNXC`TTHBLOEcf{0o!z?u-(8*c||OQ
z#Xu&l0E&zX(m^bzHLXNDyLGPbt=V0pmT5EfxvQqI?wzvfI@Ob}@kH}bV%1`G6$2+Q
z(RjwJ|IK&fUB+zUqIA(}Q77^ubF;D*$U1Yzp!jK~8f!>;LGnPv^X^}5^AwC4?s*Yh
zN8bb7gTFcpFh!^F6)pwBu83yUkIBaq`vRwBo9j;RA9Fgtxw5Lg02OFNXz6r9+Pb<?
zI74EMvccrrDuaxdDg}jd6Eg&;xZqt|8UjG%o{E4D(fuIk2LrrlC4mk|_`#6S!@T98
z{)BykUe!i*05d;gh5*ZboBW0#>W-jDz}9B5GHPmSB+&-BFIQ`+fw=hJ%s8#soJ}V!
zwr~HFes7;1E$4s%+Q{fcY-U-FFZuY<D=jT8KjwqV(d<g-oCAW<#n5XOy~W6h6cCl-
z9Y1vUCgz{l9Z1u-v-q!KM~#$mMaEzmsrxm{ZWO2{RxVZ4Tx|Wj*9+~ji!UenUAQ%}
zw%5+^VNVYZm1tKxc$?q0&Q<xQNs6gc2P8Zj;XC8=xDAbJ%B}CspPczM<#6p9KXVIZ
zb-Q}o?uyx~t9#fcx@YHH^;xX`_Qmm8UmVAu)HK>*{P;$AcJ<3;x`A4*s$Ca9X}KCK
z>Djkc*3R#imQ}-O<yz-)QOg%iUVrM9#efMuSLzq`-Cmyf#Qo(VmDrb@L`_?_Oe-)_
zm>4oF`QE+!b_3%5T<+et(0igVcw_q54-Yj5`~A9d-)>J%!?AL^kyo}}9%#S+&h4qn
zwd=<XQ(bt!<l);f2Y1iX*-=>GIMZA^M{=@#)SOhKie(4<FZ_PjJQ};{<w=vEvpMev
zE?KgKBj^Z?6F9>z>8)915sW(hY|=h+&MJ`;?6`ita4MS+8VGBP53i?Pl9`x&!;NDC
z4GzI7HVY=+Z+K}`Arx5-Ft+BYuKUH{2&WtZ)`;cTX#mAkgu1$VBY#k+8Dek){Za&0
z@EbUcgpvF7>C?=(9TPGlo(lYeS!MTqqSSu_3ratHI51Q~gqcAzsNy<c`VAtcg6$_#
z2C$Y%&6qJ`)}PN4#bn4W_sL(se&sayh66;z6c^FuOwW30H;FE2^hqmD*(-!J@Og;-
ze87<a<8hULA%cGaCABFLhb-dP!lVi%h7<~Dn1u@$mWV<MLjme19ArN6SBRB@fdUhB
zUa(++S+bKLqNA>3$Pr!-Mu?D0R-AIo4{oS&n~uOgX5~a+f{0eZnJhl6fcV6AiG+Au
z7eqdgay0~GlP$(5FoFO_?$hZQTY3cDxpQZ_<>`K7O_-r<$LIa9zn{fWb#-&qx5D`~
zW{eN*5Rjqn=g)g~lV06Wd1^Zm-;|QEF;EmCW4C>Lk6yiciCNxDhA|REq<kyM@C@nK
z1QUT8OE;NY{2{dEk_h~$&QlPV!h^1Oit69)v=4Y4%JB&A72GJXXBRyc>=eUe(>0|)
zO$<48-M<I2b+xmzumB3ZO9azEn@7NF!0?RcePIBWKO_&$L}OFkfMPIh%hy4;b*y17
z+gvtJ4WJVeu39(}rT6pV;zJ==cU#0~aqfy}2aX_S@1OC}M{N8+8}u)CddD}7mil<l
zVJEVi%6!I&Wkocb2x7yAz7f_y5dW|&sqXbk&Nu5iF(DAe(b({GU*uV-4sF-2txErS
zui)9Uuf4SI|Goef4CC3LoA}()Uv_!nff9?zUd0l7Gwx6$A^VO$ajU)GT=z^<YQB&6
zM2$F&CpA-iBx)sQ$^McW_j%{;l+dZwtszq<uc|y6)LmlGt_(-3NB#<9XWmFGQoX&c
z@3wp$t@gf;{C%dkB&Y9j%9!%k;Y{Y>lTp|0F54`P?D1@K{y3W@z1*y7F10(-a{gRG
zi1I;|j}OO8o_PLX*s(m-n?5~O?2IjWcP?ns57!FU54A}r!oI9Yneq6I+nGJjVqbPY
z{Cwz%E-A0Gw_XWU-o83!>=EY}nXMOndMFPx_89}Tva1*|a%TMR$|4(?+<_Uoqch*=
z9f&ovTDrZ**CVQbXZAIy){L_mIH5VcO{9TDqTS_4;}w&EH+p*hhZN<y>W!#*Uj0<Y
ze~8iLzlJG0npAP_WwCA8<WlsKGwj#G)d9}ijc3?HT-3nyZVvkwIj01YRG6j_SKGWz
zc3wi|5?N08I67Z44ilCTv^r%)R|rt*1P$oe*fUO4B^VDjh5!+GNdzs!59pvF93`R=
zhJJn?Z#f(CQeP>ECAoL+UTLQkG*dxXs@ix-E6(D)5osk**Mdf&<m{ij``o$VdU|>!
z;9TRji4_*6{WRgpkB~l@#jcO)7simtv+&tD*fU0G#uau!SQS0WP4b!n^4%|PmhaW0
zM<sc8>Wn+j+4QVlXbKEp{%rGwUqN`u2mZ7m>qA2qqlg1HVtxz@K|9;ut)ED17ZW!y
zrW}jRqAy_^(;<i&O9d9kt@cln)sA%thEX_^Ye$*C)DX%yj5^`CV#Nv{Ln#f({;&@;
z5h<}Q)3^T`J5n#yim{)(sr6spoe)bNg928W`sA$%e6jfSmK)C|jUVGVi>?LK2!)2;
z(0+F7--(tx>N;``iF_Zsr2OdT_1i`U$FHnQ?dhwP$*iz))Ipld9ux?WrXArhyc<3<
zwskzlP*kr5+A{>aR!Zs>og2R2B`z)rn(iw-cn{~!os%~FSW>bJ%9=BR*F-4f09;I8
zzvk!nCT((+(C7fX!up2$^+wM088gZ&D(>-;0jk%vRLQxmynZD)+4+ie+=|rJW>cU9
zI(8Oc$D8vW;3qydJ=?D(wb_Gx<lD9Tb*b30CU4P;HyfPVD;JtQzqW44@g8OmUankz
zXq?x`JJWWpX@6qE#irWP6McG)i<ob`%=yo=DbIQ+dPyG-Y5aCjwL{6Hmdz>C3g0LN
z`s!Tq3YGY_ti)>g@M-UMnM!Lvi_>#3O}*AVf3n7~j%#cKu6DPPIc3sVU%PJZO0$>&
z`A?5uRhk&PL)l}&OP!RRZ7Ni+6g-S;O5WvbHfQZcnP~<(yGz5?zjnK_r^-m?`Pu!a
z*sF=oXCGu}4OPf`=w17GRLrHF!(28VP53st-`$WH{n1J($5x$52-)*xLCnYAmlM7z
z@jT*py>a}&i(zgfTtMwTcf&Tsjyqr$d!C+`VR<H&=72nT;5?;Mp!P0}Gt&!gRGFw(
z{?&EQuE4<Mu|Z!>o%nL<c67cy(gV9eUmC<0lxK}ZJnYMf(9pxTZZ-E9*%x+S5MB(P
z<h!QC*KO!O*<Sj@ILi-!SOsjvY!IrPNA~D(c;x|{Y`3vSJ0Ueu<sFM|o}@#aA)`rq
z&#bO+AaMSh?ug5^iws&x_xSDGm8m)GV@SLV-YGU?1&lmk@D=;MTP}hl1v@~xE)0~`
zko;JjJ{v7-?z!Bf2ny@gjTSLS=#y&w($QkjIX=4GNPE0HHdW8*gsfixS*+LS4XS@Y
z_J)RrMtTLLPp6^^lN}zcj|Xn68MO>z&fyRd*>O!ssT8UQtV4|MUO#8tnDsmEL$R9o
zPt+Beol}*9x+a<F5=9m1HYe5mNLtzq+AHG8+&#A!RGlyQ+iawBvsi*8VX%ns3j-9E
zDFq`&k~P5Zhn$Aq79j@WW#!8WM>TDGS9zn$CaKEs1_P$M+3ii*l0N?uOeOZ)$WdS6
zWDzuf^y{P9p>40UVq>c$E#(-!xVxidw_T{6@zegTPyO&$6FnN-ENbhf?+xjtHOC4D
z?#Z<A2bJdK_b}@`yK{P{iKfc&z3bfcms+eTD}TRczTZZtqpAt2XMg*>8oEb9E6__v
zU-|e&>Gb5{C(93o?Cox;Hm%j8tYO348NPF#UNc?pCsp%hXq$64-sPnRo$AxYeRJ5w
zvY5Sn6CKW%)lblCOnJ1;<M8nFt>H@^t!ZZ;G-u+Hj!!+L2dQ5;cj(}rd)?dTmWN)B
zo@mtK$|wOxH_QsO^6vlU@drk(=lFeO6L4f$;3Is9$-$8wJ9X00A2|8$LoV~_PqTps
z)oi{rufL?C!Y%WlsqSlcD=RDIgfr(2Tue;*(*~3QV+6AS&_QP<f|Zo?zvr7{))_||
zy!w9NV)QJ1!%gMe|N4qSap|u3(rt(7b>s(r{J1q!J4l>O+i=1zMpMRfm}mdB9yj}8
zt<}oq3!;{d_OP8KOMlIn$IH7rCJ!Cj#@M)EhF+f=EBG!PfVNLhnNDpgIQ$~)_~M(z
zOsb6}ErRXfQ1is&PQBJ+6%`eRszt6bP7r|cLmO2r8Oqnkj2$~)a^E|d>t9ctXpo(+
zf9zf`0*Q%vART2u|3VRmhUWwX_L|@k7`_KZMW?Z_PWo8!0DFIHcc;Xmn`aa*IUlQf
zvOCHW4Sn0lk5$_<IQmpIwDv9O5Him3_^cNLHtle&>0{v9*V)Z;?}pk9w+H?ie8hf1
z_w&WeZJiXo+Wd5Sm6kEzUrSH*!{IIRrI&W^w>)w6i=D#i?Qe!H9qcjeVTZ#HLjIgE
zuN@q+-0}QPoqIVecP~~fsZ?4ptl!ov*LoDi9gk_FdiL#(m&KW`53?`LuTb6nQawBL
z)r_-O3ZDdx9nMlX{LwzU<d<yE*7K`dJ}mo{wQj(>?4Gk5rr&mLtJQF2b<qRszp|qx
zJ4o1HzFe?0-#h3}-;;|U5OlDQvV`kNh!Hox-R<`J?OXZ*b|O1&g_4GQ^AtK3F-0Dv
zqo8{j-C5hlCi4E~Jwwkd9W^2_bq3bBZmH&aP@DGAm3xL3UKwk{)`fa4tIHY^pS04~
z>R;OQ%9S{RMv|#Kg4|;|;A=1oY)F?E2cwon-^11fnaf>Aqbe_WM=))TB3l!u^UQtw
z_Tduk5EFM9+=}R=A?cLzSV^KC2}D(J8^XURdL4TI{23=VZ{DmGZ4eN)-c(zeYl6`G
z7*VVH^^1R*2j$?NUVGrY*1oi&+7dG)CH#IOFzWg9=Vr~n(~k9e&kYZpclP6Vzjz!b
zBKHK0g2z?JTtN!PC0*5%i<K1I*SDmN@}}qN<g2x@_}IBPsfo^NuJg|>B}Zcc%bIo}
zcGIlM=VK;!iUAN@;QtHCMK}zEJsMljg^WvXqQurNp<s~W??S)K)HnUNtEI$nxIy7q
z70L@XZsGXjsR}h<>myCYhabz{byOReeNZDP!8<6+_-e`Xc1k^hQr@Jjnl!-FWk*M!
zBV!}3)O_gE(YdqpjmAyuu8hmpQpkL&p;bJ7;DIgCdgBfqDrj3`HzxCuk=ESvhbWw#
z&OMBZ>7;Vrc=m|+Fc}3K*{L3;enq2}MfGd?UC?#0?Z-l${fj&KKQ#>2eC?s*^K9vt
zH)r#Gc5J#5@Y8*MuN6sm&MfSae!9SQ!qZ)*`vSU7JUFgq{7L5=yX!Y~Y;p?}cJy1m
zzi5<o%<<ClOLz2!FO5ofS#kF1vDXeZJL(-e`fDhe*N(sc&^u^5RUz}mi$F#QF_quJ
zaB>&w33VEln;tP`Yn?pI1pFEUA2@v7!q&3@mZ-|i#F~m*vy4HNxsn~IeW>7TKz(rU
zXHd6geLokchg*6!*T?0+ko1T15cz5d05DQC7EHP=adf;q;xz;aE#ue-)#+QlE{3pz
zL^-DT8H*GpR8RHmU$VP+XC0Zz;7^Lw63idy;dvfvIDkkkbpP|3cX-DAt{FYkC~x!I
zI|TB2p0IiWQ&QcB1|5$*x%Fja(aXzS=WMEekF7wv4M>wr#QkJtEjKgs)`?=6OW3J5
zqE3Yz3FqgNAH4&=(AKS6nQ!>yp1l6m<pKDu#AiV;gX!VZhztmZIeVO3tOdI!X6|C*
zZ%16bC=s>n5ILYgeJ+jb-8ge*G*>MYt$xGC_LhgVR-4(`*w~n_yiiY12&W_)VSX5`
z((*og49^MRdEL2K#g~lYDr95%DO0Xz7zKS*fDRLAnLoN>q<=$OPF&J-0%6d!t4;rB
zym0&YT*F(=fe<Xt3AEqoy3?7R6Q~IGqDW0@F<G&^RED@1JH*qQzzm|>^sxP-Ec(P^
z^*A^R;Z7B#JQs(RxJu4O^{jys%7*ZfBdBo{6z}|_EJpH3=781&8jx9%Fy8&T^?mQ4
z6=y%pJTt7t+;T&S1??ok3L=kIq!z%M{XQM_s3`xtQSjRS`nnN~U-P!eggf|}9Urpd
zi1wrj@eS%mgDf*vq~F~C>f)`a%|jgPhJL-i>EQI@9+1~LJzOf5xwnnk93)km=j8MM
zUVyUryYIF2s*IFo{Yecy=Gfjfb&gX)m%ZBe>TmSEe%*d|N6R3#o0Uw*ydT{UdtE)Z
zKfZTci5^Sq3_Q2b`g{9W_!8sNN~Mv*i@hX%_KclTWvH_E(cZyq!JKsCzIm@#>S+co
zO#SuC($?dB#ZSAKRbRfUZXOhSFIR8qwLAMBb$>t4>2Ggq=i%oz^--7|7H4g~WV?g*
z$}yhnq`U5~2&qFeeGU^x&p{?dfBY&Hsa2;lb94PkyhV@t6zb@~`htM$2-c!oBBkuu
zV~-oDsR?$u@?uT}Yq17eC{py<#Kgp+8s+49#6uyK1YF9V<Wv}p1_Z-O$vh4#95<MK
zHd$Eh0av34@UkKSmK9#dl=nf@;nfZfi`ZGf#44)70{B*J@znJD<$kmEP`X9FBhlbc
zS#9zamID=l0+^&OJ)703QzsFxg<kuVW|1APFnMy{wQJXs2zUSi7cU1stWXSU*ZABZ
zTMYy<;mQ)1c_n1Y&5Jg;irZ4OFoHOSNwRx+QA+#);cF9ye=xEF@$VeC1X6BzQFkpV
zX$_OcB3y-_i^B1hcON}EB%FDm$q9^)LcH)y{2!P_EyH$_fgK=|?n#*D5$U3UpiJNi
zUa6$PURrzzTsYA`g0UZ@+_)jgEHUT?ulDJSF-9<4j;nyLqB<<A{@`%V2L9zS(I*eV
zT8DgmVm5^p_KKOaB^#<0(v@kezsk?5;*T)4hCj{fzIR`d0{;5V8<(c<YtYM?dsya{
zN1ZuIBnp4xPEL*=h!|Rsp8Ds^S$m7cP#BgaF*gHqCdRSB*0EoN%V)7-xkz`Vl@J}b
zTXo)kK{OM+a)rEEaSj9gA*96JQTyj+Tv?Tgny<vW6GLN++G2rvO#iK%_ntu^*DWu%
zCX5c!fq!f{p3@cP3lrr2PV2a>=Id?QbK6g<uFmaMXH@pk`OdR_VTb?Pk8oeUKL3%{
zx_R4cf0;i_+ptJVzRi@b1AET&@RF$YN~@MxI=Iqhis=%wxI?#B$v#?8;d<VGqW1K=
z?Ot}6Y_!x!!L>q7`Orx%N5gjOPbuXN)F8)oh=sE4ps5!$75i*R>^n8Y@yzANi#HDG
zxY8`z<w{d?rLnX0v=GOVWVf03`^xJM9L>(mt7v_(tme~Nt=oq(`z6`*J6YFotWV+m
z`_b9cZ*+9{w&_Hmv31$=j)TAKHE5iC>DARsKjpWtPTD&4(Z|<U&3<0YJ9JOsllGJG
z%gk5Z&DPY&I)15jNnL8))|EHxOO_qj-L`a!ok4x8$#uE7$mk1u9)75=$_>A9d1TD<
zduJB<8d@c|8gnFS=XZCSkK_pX5y8DO%cgELGLnI=6$4|WonnxjMn=tlf+UlsE^G*n
zSjKbMV%c!~tQrwrBMkXe8Zin+?BxD&nz}Z37`$Ph3F`*-4C>@SGy>|F7?q|?FiWym
z_=4Z(fuL+&T=0|L8JBPW291PH0?KAlX#rgnTiQQ7oD8U5EE5D}?LJ>IQ;6G9NPWPc
z9BA+%;k>~YBDg5uLVaZmEnGL7T?%PPzqde3tCOIB_V1VK-Fpwf&vD8Ra&@5p@s@Tf
zLAd$L^cf3yfvU~q{@sO>2+C00fyuALi*pt^Kd*fQGz5ZuZrT=SECEO^t5C)g9SZcm
z&z#1sgveL;OHEYgO$vFMx8)SnDSsI@Sfm?JUvQTR>4%KNE8m(f3S}Q*8WmT?@anFb
zi^ssBxzOL$+fiH~Peslae0!wbaFp$Jmyyzuqe@}K5b?^YtF?t+kZW3?V9|PDS2Ts>
z-(#mA!$VASY;be4Ar3EZD}s>jrOh4k$8E!GAig8idkMFf;JwEajw#yQdnYv!&YT-i
z7Fk%Fb_+AF-Lzr&Bw646sg*-~xibq}DN;X)Fe~Eq&%;QF%}N&|!itmYdyn*%$160K
zlhx+o(E~L%`d+Fv2FQ%SR?G+E&?4WZGYr2>Ut7wrkgpNK#W_wB#VYyKEQei%Cs)cy
z#IgB%NzXy(o5%JR0bol#o({oj$r;HIoR?0NxX%p*ay%(L&>3WGDbAj4c_Y3(?g5>K
zqEnY__}Tac4icFQ*2Xnk#w(@6WGZ8O2aP$>ngU(3SV^B5z^I)6194xBa6Is91?;86
zu$i@9^(1;}CArOvq@T^TV>n^By!>6+`j>4Wr9@~Rznh%ahl7*F1sd?gg5<09IW)i^
zy+QnT(kpNx5@W?`XgprK8=*y*P*GPNExO!EUs|jc=BgCb)cSEiiD64FrqX@K6^Cnp
z82r*zYuDnln#oN459QeoB4CGcw@=bT&bpUc@mA;5Z!F`f3eAMiO=%H{QuLlOf5bS5
zFml79q6vtBN~{_e7<Lv$!&9fc>A0v^@j)&2l`TYcy5bV%r*k%^#K?EqlDX1HzVf&0
z2f5(v?GtMAM;|WiX`g!PetVgT3a(vsn!>}otykUqt@T5++TF26#Re5>ua`>4EUGAq
z8)`M_(8J0twddu%t)}c<Tx6xW1IlBhplVc=V|`9d@(nR;BdM97*XP-%WLDe5%I~u)
z6fIut^tjzuZF);==!IOno1bnMJ9eM1pV;{Kw`W1ao22!vQnv?h(qA31qIhfJNApiJ
z4t`=D6NA+XcmJFDpFTOo&0DeJ-5<rMQZwPWM+w0Ezstb&_2Xs~UGQb`&*XKJWLp!9
zYr{6gq=)_f8l*Px;Hh8E^=i(QugItr_rSszFrc(~L0=EreR1zFO(OWb_4dWCT%z$W
zAP3waq8uQ;IM<jqAG<9we?JfvCz;@SAUAi@^D%rhV47=WqVFhgF0%?@jg^;{?nW|!
z5<*}-hE9T`$E?<QC~yNOig1kJTofujm(F+x-|EXjX2Ok!$~lwurBktyh`XpjDG#j1
zU%{{;avFg_m^Rpt5e7=z2o~gAY<p>cf(Y3FT!A9y@Dro<$B9@{geoq<p_f2i7t_iM
zBR*L6h&AH+smIFBwKX+LhteAah(X+|BPD0`Bw1EU6`5iRqegv%VqG~q>a*dmn{R&T
z_U_vI_0DyF1}6_6`px9y>cxkHw=U@*by06kYG0dng-`YyG<vSie;0K&La9UBuY0$r
z^&PY2>5w{AkC<_@lC6!J77SQlWdBF)ck7C2IR`%eiTzop)f!iOZN<8@v#D=_-(Q@a
ztfW==tf{c3src#C_wffVBTp0a)MT+GQ)gyj&4|{WGV@DbdCsU`zww$&<F(pVt<va|
z+^g_N_h~YhC2MxXNgx8F8}<)vm+wDj_TO*qsWGd8QV>#NypY?%GTZl3Uz%-@c0fo-
z3<hAYV{=`r@ZY4&hz2%|U_uE=FYb=p5)VcNAhv?p$Pz+xVjH$yA%BRs)5yRt9F|CA
zfQl0I4O`b}?Y$56Ors=#Xw8~+^z=l0LD}xka&1c3h->H{{(rdgqJa_tO8qC=b`SUX
zb@Jz}e$vv|i!#{AoOI`Y&UnXVxHL&(pc1Z>B^}JjF$(J6Y;Sq8$OKK2eA5G?LThis
zIQ}!WB)wuIxxx>?r!A)<BzEn6yxXwX<-3{B_AYt0!*x;6;5bdm4i-M{z9;o3=8mfA
zc`nKN{^QwwPA-N**1GWG{iisSgzw4oVvUN8Q}4rxG;I`63&Qm*jt~Nw<>2kt%?&+u
z>M<h-1h?-x_R9Fb`4S24xKmQPRJ3{1^ugkRGfqRt`0u9YA+wKQVITtdXopBP40H1{
zgs;24Uf3o4l}@gtOC`AQB)2yN;5xzdl|vzR9A?hhN*UX4u2Mx7#PM12yav#31;_Bz
z88Z;8H5tPC^!XFh=Pqt;Bjn2(j(OmM12oW1SVAO<)GO+g2)>8hJ@)kiDB`xq47$-w
zfHd=og)cK}Z22w1H+<{XOp5P(l@sJ1R5KnT?g&#<Ja3^dZf3*#@|^ep=xm;`XV|+Q
z42=+^v2e6K-W$sO5ivVWZJw^HqNy)TAEeW3=a;f9IRZxDJ{!qBRq`{{D4d+OL_JFM
z=&=Ub6^858Xi3@boiJmFd~z{YwY0gJ35;B9^`pIWGc)&!XlQ@~Q@g{4?H0cWm?N|)
zY{6oBUfC>h=**deQJqHz>7L6KPaKU~mqR?tzz$}bCRscVm{9a6Rf4_Tmrt*q?3uNY
zOZE=jx^+u)ehMDpnbnK-Y8TAvIcu!kmEfTTLyf}Cb#=5K>)uCevinkWYQW01-|Rvb
zB<QznoAy*J3<rRceUj|njBm*o&#$`wxOuK`iCte!{>xgae*Lm&9E4l`$dMz|IWNpF
z>;~1s!a`v?B5Iw0#J6*$#i$t1{Ian$4gD&_dvQ+Eik)3L>UFa75a5Xz&H)vG4zaI^
zZKD;nESFRs!II+H6>2#q`7$!8MI-<x7rt>VY$yOGnFueGdyYT+H`>zJldSP7al7}N
z-kn8&85s@aO<vu<Wf|%{6oH8Nyt}1_g(s}OBK`C8=O-+3X7sUME|ObFKBF+lAy<k4
zAYie$NRC%_Bj#eCbGd>i<jcy)*>WClb$2hiB9Bns2Z^ptO}IJ{Ex{<Hxe=a|v)ndq
zidFMnCfNaWq0+P+9)~)^Zo$9zoEs#fV@0SrVTB;-glpGU11CXM<G9;4SucZzGl(J}
z=Df8dUNgz_h+qTTIu9~{A8ni)wG2QkT$vOmX30Bf9GxHJ@P~WEy@6;nhJ2}oWxzKZ
z9*PJwM#*EyK*)e1qK&81;Am|z1k`Y|{?&@)o6VLA)1N+gaDcH6ZHtNg>xRoCocA6H
z4t#saIKrazq}N)LosQFnoc?_@;*$K62-DsR!BdJ4zg=x83sQ;ywzzTP>zFSCuMQNe
zB?M)j?|Am=)$iAb=kl(W4b+gla_w50^V|oq9641>O-&!6p^9z6Ish7r70x^Q7fMHt
z9T*<g&8KR;ui9hZ(;31vLeDCaR@m<CMP%g!auL?06M92-=WbAT?X3p6XV0EN><fvN
zX&|EOfqM`IsAEu~=axm+EdDe;#53GdU^qrxL}yM3ujZ0K{s{O;+z*X<p@#)E%Hu^|
z-c$y<SaQ4FhTP;-6j`f~Yc_yW+Ft+Dr^USASeZ4<^k&i|o3OZr?}N62>o=~FLl5;;
z<NG0H06!df5Z&FahimGf&Ye4RK7GCTUN+A6CDsxF2CzAB(%j`dbe-3}gfDoFEUO1c
z24@3JapzUQt(9R^3+isqC(FLM?T3gRWhp{EGE^b*IpL<(hvi@3qj7GmW*{zLPW-ay
zrO{)3riuMXBQ7QZ*;e#A=gEl@u?y<IKb~70JiaaR%uoqosuE<GU>g7rrvO6Yt`{sC
z!@FqV;1zjL!UQJ%B5zBK)zNW_)JN{gxx3PL(>%tGzP^(<o~9w$LD=@#SYx|{H|RWH
z_w8I)iIle~s%Zs|wwuGWb+o(gH{5^hQ?`E>)z1c-Q{LSuudVPiJFBJmw|VYvmP+2Y
zm+C`f?|OkE7U+KbVYx=(5qe0EdAgPU*v?uw6m;g!10{?1Ch|C-TGGmY`3;)3=itH4
zv{pyo$^nJ}WoHw`AfUL{2bf0%S(JN*5P>QVkATLZ_>OMxXi|=UeIh8R4$zZJ!YA2Y
zO51LUD#BtAS5SA;7dP9ZOo?JpeT}4Dv2KZ{_hzpz9lTPC;7mrHmnz>D>?qFeKn`!6
zEOE;zyzC5-Hcxoz7U|uzNVeBfpDpaAFD<3%Pgf+gKezVy0-0EKO55`qYqTCa8Cw8v
zq7(gI8`5<!Mh9KrxaA+4&*vAB;^O8K?&v{#yho{EKwtaaX+(j3{rbsm|2(0(ske;G
z1Hhc+h3YC8-X@UifXVj9q!pI+gYOahoDniT?@m%3G-NNFN-sE^3Xcg@WCNcgyc#qU
z^lM{(yQ5}_u40ni(U%3_0AaeJopOFN^}SB!hS^&~npZi`SJgOh>+NYtzoWBjB*msb
z$TS#K5lq6WNwTqJyuf6Qr%GpieSIg-z2_a|IW%IFu+l>TiVW+>M`zwRDw3qiSX#9G
zo3N$JPq)1F+WTo_BXxisiqNO57$&p~8l}9o$UCndZ-qez&?Y_hfA{7M7BVVaClqa8
zEs>OjCF|eHZ-k--MRCyjborYU=zMX?&9Ph@Iby`Uxh6(RK}_iFgQgELijDD;-PrIc
zeXpzrI?7T|6m)l_f$a9}+tF>ES4fMXbM`K8{Tr&dxYk4%k>IaPxRG~+-hQrA;`U52
zZvp^-Bk2L;A!$Ygt*R1DHS71s;i3iQp3|pKpO$S8%&x3I71F}tj?RwN_M4giu*m|O
z^TVb3_kYM{cdkAq9BdS{)yy(tZSyA+R~ST2d;BsbA;M4VTq!UBo2^MA4O4&aLo@8&
zbkKUG;#F{+WmhC?U`@oRh!@pp5NbWDldLPlb#&Ks+CO(yeXj)T`&~JKuzC<~Wv{vF
zW$>z^(K=Dz&)XiIoKy2D{LPl_&X*YdpM86jcfd$f-`9c<V3rbEBI)&Q#pW_Ck6gP+
zv|rQruQ``%=byJR?O~-WJX^|!(mk4y`1&IvBRimVz}Rsbz8{?AxqgI>?;$wamD>;u
z#I4wL=i>4O3T?skc&6O)$d_QEroF+yaB(-5I#Ix4NS9H@sG{;$lTS}x&s_yv9ThXZ
zL0rzkc_jL^ah4VrMryAVz5~J*IK%s$neHm;xS$TPlW|D-EiBJ{UT`)jUByWM9_NRr
zw$qlr;vf+#b>wh~JvI-jzkYRE73}_H#7!-$i=zX##ZdS+w*1|OJTW4p^0)Q{dbd48
znS5||d4irMh|Who6`Nf)Y`BAH2>oo9xPtI+UiU|c3V<OMYiCQ-T6_|^^dC{p9X0Nt
zEn$0OFT*#S{OMV6dN0rzDS|=U@p#^}4d{i1YQrijcCn9`d-mw!xyzR?k2-c7UXy0w
z+pk}@&uw<_BJ>5zvxpsl5L+>*LCbonZ?NnCk@cnlJ+9sRcV^10GHo*<WM~Uf#xf;}
zN+b!PhzymKlqqGV5)u)W5+$i5Bq4+(Nk|fsDJ4=ppOt<8{x6;v_rCY0zQc8$*LkjW
ztYb)OWw-0S{l6XRU=`AY^*^3~fqh+q`$RL`kmu*IzkD80C-mxb0@M04&fp62F&RX!
zP4{d(%e`%fUANw7hnoMxdf{dQ832Sgg`eXcO(g_ASI^1G2@{zGDwC=g%x<Q`{>;4N
z?^Qg)P=sn!kY3;|2J0R`MbHri;iYY@`}*CxhJyT|JjbLe27w@7sHexZ<ytc3)R>ph
zGxim`F8hH5ne;_510aS!=fhyzDF8~Mg_YSq3m!u<1hA5%2PhIbEH-1&5C^Jhm;3r9
zB_-=Wg!l^?n)+ZoGEdqQNR#Xm4O-|{bmjgXIg*Yb2X*W8$jK{NiXoGBVmZl87AIS9
zs*BG)6E^jR<P9Oz&>&MF(hQ6}n<c!~$$dtU9RxY%@kZck0GC-)rU60-%tB|Tko9H)
zXENodj5FYx!<^)Eq`Z82_2uImao&sx=q|+_1!x|60BX`dNXnra%nHA^S_euPLf}<k
zFdCLuydEt*c*~S@4Baj~afm)xsbdkUz?|g2<>9?^paHh5hZtpuuNY*~$O2z~f5`{M
zjeD3x2=Op-G#spc(Lc2xj+dPF`-xPAg+n_BsL_R;l5VJu=v@*2NHQKfK7ML!u|nBD
ze(~ZHb+145F6evzzx#aQdy8w7g~Ii{p)~Lz$S2$%au_7Wl{~uEp<0$CH}_zqJeVgv
zb-5OrYW4Of$E~wX;VhGxhp^6u1ndNa)g)R#?5>Dg^kVXwot+)L8p&cO9wr;y$b@lv
zIX)iHmCC3w>~{YN`-*#qh;9<0K7zIY8Mr^!*YMZG#T`S=>ztdgXV$QK+3%?Y$FlFB
zU!XI{M*}r`_Uy<D-@bnrCBD$$5k$jSvW-pf8!eu6@r-vdI&j-Q(dgWs8uyiV?C+i)
z*0_FSkCtP!rwmk7UH-3Llg3_+M*K5YPv??X=%$T(TYnAhs@~^rs~?-Z-?Y+G4)Z)X
zKB`-tapPQauZ}FO+`RH#QHLo@w_U4B(1@DqgxJQ$=Kj4GYexSRUucvSxP(!kzH}~V
zHlW@~<~3Y~Lv*|{_rlr;M<CGaXl^I+Ghm^2qAmb+77Yn10DuI^d~l}F#Q^_=-!2(s
z@snrQ?#}Ql+XoJbP~#dkX$57haAX)Qp`yeC!1-zLC4A#xC?CMm9VG%YU{=IGo4`Ak
z=1gRcDR$o0FzN*dp-n&yE?(KRuG!CXp(n_JL=A<1$gJlt#n6viu_MoZ3D2PKRrlh^
zILQk#|5+xlLe?CJt4K7db468&Z0O<c{AR;m)P6qP@8ugnLq3h4kz4@s>CdQdH@8^0
zHoWQ0wzavdZxW7&t3%=v!8H#K$LqxZqL=+}{uOE$`>_#`i3Br@;e=vj4HKIv9qPff
zMMEB81F?b#(^Pt45sc$e10_|HOhW!IO@iM}^is(k&7L7%8iNNLZ5X40p$^D02c!Pn
zmj&O>vw`A+F%J5XWt2ZXE6J?rw8Ao^&b&c|UWW!Sm`;h?iOOO<#)Bf`VyJhseZ5Bf
z3T<NyUJpF-<d|FGZQ-0``Eq?xrxl@F@d|=Hf?EaQWy{#N`GJR?+Tr2R6#cXej2jw>
z-k4eYBRE1Up55Vy<8nRSc6ZiAw;%6~BtD$fEWiN{5%nbl(c}x|SuPTqx{x*Q#K*B)
z%3KrmJ*EGEk?&ngIuBp92~1dYLX#$a%~>)$aO_$<IQT&vbO03h@7?=)=A@x?BO+HH
zYUg-s*(S0;?%clpwaMu!<jT7+?@lXRE&4Ru>~oRL(!<4R1S|$QWKZ@QkT7GcaDzGw
z!M-&h;0_lF%X)$Nx#&T$@6TSoB+i&dJqS9^F4i+T7-Km+wb0CH$1AHrN8`E%Vyjv#
zx;)`(V}Ht==0v!<*zM4kXv2D!+{Y}J`&g0}A)r1D#K1(z<hP}fG7Z>xYG>}{#50-u
zcx(E|%Y}Y(ojDl7Ph^ktO7?6T)N0(5KH=e{Yx4{aDKHqSNrQRcCg7z><8Jji1Vm0y
zh(A_=-(34g9~X#-23d>AhL(BO7mlu3x&<#o$_pqDyGDM#ycu7ItG_??YuYfS{dNb!
z(>m?P)i!kS70ZEIN2Z-!s}UXqfBn^~WMdPTZkXN%v4+J6i)l1xp}aO`XoV4aqoTAx
z8H6oK2S_BNfpj(Si7C~K0_|rvHd^!dim`SgOpDi_-R<*{La~oWt8R}f0_XmZ3m`VF
zMg@~@&ur|FHB)&je8MJP7O6yM+Q%g(B=Y_|Qa2ma`WuE9t&Tr+=%a}to*2!yKUx1b
z)_174xY?Qwjmq{($q)T(@1_3LC29YFzs9t-%C*Txww6(5(JgEnlZ50vYW3CH7oD)H
zn^<X@M5;Y$Wn|(jeCmDsjPmA<7-(X0=l=a(BS%&qO*bcG7YO5eN&3Apwa<32+F(<s
zMubRN*p7ROan^rIPclm_uuwS(euq=>4Q~2fdMTN2i9dG65TbJE{?HQKV4-1pDzHJ@
zi-Ct%{rxOkLc9L=Sw<~7VxWer7VgLM*EtnN@WQo1S+-9Wv*aiG`bpN2Gw?Yj4igF=
zb$haU!^5eXH73T9yX>VIom)Z+VxX3(7nfh=!dE_IaN6!;0yd|8IldTj&I_HFSgw-i
zmt9;-`{5C!Y7JT!&()Wb3#!fpO2DW|^VPR~Ljkh$R=CbPmr<SZ5$wFDk-K}1-RHQj
z;riP$8h5iDMSK~LIJC9zzpl_eu<P1wor8HC{|+`3LmSQ&d87HF2P9y&B4TQuu_sd@
zJ@y<z20Vv+v_pZu5R4WqIC1G1hPwS#`>Xn7lqXpZq~MS$8LEr}+d@#+Jt_HCHPuyg
zAp5C{KtO)M{b3CFZJ7ko@7%dlvw1IKwyA_N&Wv8Attn3a7&$5cUOm8}QJ54IdP_#_
zrZHm3C~7*0=j+~W9>9{ArHMfxw7v<pwjcG9N3kYEM+gKAA9CQD7H6}8sRg<Ke!B7|
z_q+2bIc}U@u1_n9L5o7rbh$ak8H5H4aGun?st@%leGnjpm^#c_7RVG(uugPCy0VjB
zb|@ggZp|*|ZoM@I-XR0yi8F_Wz!cI4aJIDDd|lxh2CB~h)+yoeJvjhu!+?%l^15V7
zi64uM6_Nkp&L(&x+zu^y%6WOjzS~HHky$5D(!(Kr81Sse5MUW=62mVHL|S$1m<~3h
zc(k+kcdRMTbBuF?$*aL%3+4S~FcZjru!jyDK0Jj|mT_@Drw>M<lDQ^U_HZt|!^0({
zl!`_Cj5z>Y%jXe{OO1eNB7+}ikz%6Ai03AJ>44Ghy3B0kyAAI&VMK1ny}9;@)9hlx
zSI*`JcqJc(i%gB=fAGWy$3&ryApu}^Z+YwG4)%57xDhGzAV6pJ2&^InOc0kY4nom0
zZR=<s`q%|r$(oXu`7`qATZEvcaYt`TY8<wi=awd?X6X%KyBKN->k#6X<PFZbwS^0X
zepx)acsH>uLhCw1d8<q!#nv5fE?>!;20vR`%*p1!IYvQovO#+k+jnT-+UvOdD@Geg
zn<Tf5*XqdkW3x}QiCO0Mn{?$vNJSaLFQD9GJ}TvoOm)yMdt?Umgrp~wW43Hb&JX|)
z>Vgoqc-knPWReQ29OZ*=c^)=?2M^xFp)9t9+*3)uf`6blX3RAeopN?4+s^ERS+*gt
z>mFbHX&KcvG4JyMg4flXZ!fr#dG2gDK_pMk?Z5z#$b*Q~(e`3nXKWli;Ac?@f0<{G
zUDcJxj)1)EI6ZpxO6~n{{)H;aY_{+bl^fpNY=Z7P9R|#&(s(?%DZ|cYd8ZXzFI=6!
zR@*JQk^1hmUzcWH2;yXTR#NWM!OulYWd$HrV9W}HyCoR`Lkv~)upJDF*`rc)3Vzh%
zU%xf!8icpzSkisuNK)mEmaQk4n=f(Y%8R0BCd;{qCg_}E;)0V^icZo(pz@I7LM$Z;
z{k3UPM4HUgIRuDFQn_Gdv9mzHnHAQ|p=7U_$2hMJG+mMqDU1ujrgrbPp_O1Gc}%ng
zbq+OR0brTr-%xYVQwXdiaZ%8OD61MO@K8twUFo*2OucbEma9&E#o@4s@|@1<$Ih5Y
zoG`^ORw50d`CJ?}Lz03e85}(E$*oK#CzM*9MFNPf82AgO)|8IV#XX5V`9XY*tPtLm
zXHJ42@liG8x==fgkMe&O#{*I`KXv>oc7*eDB7t56Q6nPG=em^@-$k@Wl-nFEN(#(&
zoXfJzgn>Zf(!=(-q)E_)4PN<j6sb_tNIB+dkhKpPL<GEC04~_#biWJmtZ2AHP0p%H
z|H<z_-HcveY9quf9^f=~Q9LByBI+o+qe$&_1=xeLX2AG1Ry3!s@Cbz4h)EHY(0g11
zOyGA<pRb~~04u;JXU+CdMA!wvLW^PR<t&om32GLW&w|)F5|j|TAX?(yCG(qE0wue!
zLGi&JYhiKpso#I$>+D+HIZcpB4I)vDq{wqq&y6KskFKwQQ0e6OhQ7hEw3>v~iYsF%
zqn7|>N|zgxV?YZb6SfSc1G2%3yq9GSx1&AzEa*iac`9)+5ObEYD~f>v_6i(ai!fyO
zt=kgwcKUDeJEhSUGg`?zfgzab$GaBFb_-|vR^e)yh>_qV30@E~DHEEV&H9*m4tyI}
zLh=)s9e&4UPc~P`A`nQ#_n5OU!qm>U*n=g&NZT!X3R|kADe!RIsC9TfyU}>UE;XqZ
zhDu}tMf6v8H_@GnBc*{sQ~IGghOgRTpI2QPR3o#7WyKIU94MDdcA<srIehrDGbQZ1
zyC^wJiAXpgq$YqY#&(jQO-$+IBmPtZ0{hSvz*l-+#54r+&LF@<_6?8Bw!g)(^7bC4
ze5e*75UcN5#vwg`PDUO@yi6%|Jd=~%eIHMxBC!~)thWI9et!b}BvXvOZsV`Qw#Nwj
z#gu<4WJ#eSv4*kXT2@T3hb&T8*FWaDhSR4PF%IN<I`AOUatI|vjF_SHhDs$~$dgr@
zUXQ>|%p)nR1?t2oSd6sb`f|^=N}L?!*khpQDRnmL8Oh|?bP<wanvuK2;EHwm9-Z=b
z0xB?=lP6`}$5}z1CmCA{;31eFM6cIB>Q!<23RX&$bB3B&X5Etcap+L!ykaL5Vp2XZ
zFhmH^6itv62rzjVz0(2RDlQW{>cLoMi$5_BUk+MZ{;vmKZgeQ~)()O-Vj|x!VA#se
zAjd_VXjVJ~B6`*{BKE$~#l_-nMi}`R=69UxwW0DH`9M}09J25^#rXd{lLaP}QU^fo
z0aBN!H%>FSX{7*LVnZ$^hzx!Nw}$~Oq14k~u?g_5Y1S8H&BI9$D|Bd5bMoTA#~etw
z8ba8t?EY*(vO!4FGh$cN08`WZ<HajJywtw~o}KLDtu?EiVY0>Vf+SOuJ@AOS>7RVG
zWFC|b;&j=r*(RHKTTJ|$Ey0N^!Cq1T8X7hSemcoLoYQQ#_nZ!$_oVeUsUQy}n4__%
z=@>{}gQzm38DY%^5EdnBKs1dsC6SN6t7x8wS@-M3587IaU-Ox>2QGdEHgq3EEp=0!
zdXl3+L6-RXNPX#RF5wobTk*OcyUTTqL!1<FY`V!A@C!S|2g5bZO{&24Wc~zp^pH=e
z0FZbc=hcggadN|6pgFHqz=(pD-2qHMLg{55$4R~Fx3)G6FZ5d{)El(G@RJpO!!~vZ
zx1OUx>FCA<--!_TPVH(J8>>JWE9^e5efINLjER%0f7ixTgP)MwA-9WupfDzqryYm(
z0AdH3Xemf&pCnPq*o)czs`n4ON!3MJl0spLUB?UD!R9=LF9YlBlZgof0?IBiduOOk
zhL0Fh6SKi)Ro-OQ3x~8$l83}jF1|T5_&L<*jDxS)#C&5)CQ<R0uHW=nB5aV|;1~^i
z>AV>XbZO3cp#pOy>K&)`m839n`Cii0TWVNL)rHi<J(YY(g^R~0LHcv9D$52o=IC9`
zwhLi?cS`<o?(ZBmW4*6w#3D-?5Kn7e0=D8bUv8L(fiK%b*uPVE(UyYGt&Uf3_N#Ta
zR&8h3L?y*QI5OY|Bg7M*gmimHO5G++o4#G?UU|eZW){(B%K|zq*?;WVZca)<DaB)i
zT3n_=@U;zD>iv?gE5h#uX`xHQquEc*E_RNbB149JkDmT27o1m@;MJ>D<#Ulz#O4pD
z(yD)SW6M8Oc9H}EF_`&!gW*+LS2@)=0ZaEke+4H1=ubDri0P<$vm&w{By?7H<_BFu
zv4E8AT7&{?N%;8P9A&m1h6gR+2tO(6K*w#sivGo`x6^gK?3Wjhz((8g(|gT`cc^%|
zOPsC|W%9NZf@^5&UawVq&pN72p>En{c;E%5KQo28f~$bE4>($Yb=XzTxG-JdOlDNi
z$5(IF1{<bOTl@Kid14LBpd}nl&?_qzC9-`RC$?q2-HZ2tn*}z2^P-qWicdD_p(_Gu
zoG$P$fNgmD<U`h$d<)3zzU%?`<Er}TjZ|x^K4OIV$e#!bz%NCxk&^$l{nItFR;ee@
zE8O7g46JlJ(9*qU?U5!`JmvsL#Y%w+C@7&T^!nOpDq-p1%_x>I(xv|X&|CP9oSYfY
zKeHi`4rK+0iji7tm^LgksRazr#262r>61DRkF(jp@BifivsKbJ$ZsHmZaYgM_V{rH
zO3>xYKbhC-#4Q7iE0y4YHf^xwT<e<)s^{Q_gqUQzZw#`3Sxo1V2J_He7#I<*4gs!v
z_cuqkY7i~-)p-<T&EKw;fO|m-TS>Y*p5IIBNHgq(A%3{({wysey>1)FDCufV6cxq6
zSxy^Du#!2v7B_?Bg(>5g)`T*P;<sE~uVg5-0-47Jiks#<sxx>U-qOG`ua;DSQqD3F
zgZZ|dl<9)&gg(h&JybSr75+Xus3s}+{W3fbI`7#IALu+j>nlc(p92&|^+?!X3^(tk
zdyN~<G`lEUCT(uNz?AUcYl2`Mcn4Q3`t%N_DlwkO!8p+FwO6`7Uy+Z(VaeYryO=09
zz-9Z+qVG+f@30H11z}>9;`{O-9j6_X;|HNFzZ?5SA|GknWdb6xvOMh4L{X5?M24-o
zv;heA`*XV}2%b}5s>q?u$N^J)as}t~O?_-NXjS$+Cy~5Vf2pb7gT+KE&Tv+>@S34|
zn`mtMSmsij#73P55YH+&<`54O?84>`m4xzagL<A<6Lx*TDT&|1pZ~XVgRPl$>PseB
ztOg@f;FaM;_j;=OFbFx5l@(5*<B*uww(4s~{6o<V@Pz6HZ5Y)Vw>{_`Fy;XGlB>!I
zFnq`aZ^it6A2(F3_bLg})7OV<j`k+v-%potra5qD3wY;{A+6(b=Pffm?A`vm#$so?
zNt3*^>ZNxffa-<4lkfZl0SvQ?MRCIE7x}|YuVES!)%Xvmk2oW7pk29T6C=sSf<?G=
zd63Fd<mi#GY<!5PSzEtZ{AwF-qpq$Pm0dh@WLk+M={1{Dt>fPx-xC_JXii;_u99&p
zAJ||0Wg`~8oMriKoEbbc?V@{B%7nIUCo-O970HzD1p(m-5*!9I#5CcA1gwb=Mo!|0
zh^EZ<CAdgN_AA~`3(|GNpE&W7AuC)Me>BXa>060lq<n_NxbR|m%8eV$Y^*{Czu?Oi
zlF12m*LqMpscSj)Mt|A$fMa+4`xD#W6Ypid=LpRaw^d@dj;@Hc&zsXR*R9(Rmnywi
zGn7c}T1{%BR?0m-TBuo6XOItMtDUJWa1}TGgy@hbBz9fDZPSjPtu|$U5P(-xb7p1#
ze*MyW-+l;mL37Ja@b%6VbG%ys479%-OkN^1DJsyM%MK?^6YGi-z4$dyW-KJ8hYS~-
zK3KQQG*e6_85rCIV~1cd;5@-_ZqG~MR017DSSCGR68;*PTD%27o??qHfmiVXpAP{a
zXA1|uzS#bYhCat755G02#q%Yg?Gh*pC}1*THd!TlG-qsA-8D1}D|MKbig`M#kDURB
z6Nxh(P%jqO@pRJ>N4zUHDcv7sY$C4MF)(&IBa0-F^0d;NnsGR_z4_)Wg>Jcd>MWEv
zcZ?U6Y4-@|KF;gx^R0$`bGZ(*CvLaCpmCAX!+Sflte{2}oFbVtPE(4B7!Vwg{eqK=
zBPZxWB&P_a#;iFqk`SM09{=!g-%D*(R6<k|Do=uFWELf_Of1owWumk4yu^1w$oX?L
zoy~<cw{MLGR6>n}y#WSw`h(a;UA{bA5>im?Fp`uU3{Gz$-f?CL-T_?M?caY74!m07
z37?d43|sov=`F93FG?TF6Wg945938Vc}0>lh>~6ES~f5Il$vo|J$Iq2l8{QUo0cXf
z(#){^*kC=;w8OveBgU^}r3n3qURZnKm~NbO|Kkra_LXTH$C%KjxOgNQwcJF}e}D+n
zTlc)=B2f}CjXv4TJdd4-p0y`O-CTRh3jzFq*Bsc@2p0JDdUK1Vu=TOE1K)qd4eX5l
zi-@oYuA^Uv<F|?Xr^yk3YlVVfqY_xegG04TJl-Li0j@+otzsi9N|pZR(OZNtEdz_Q
zrUOtlqytk;<9whI5RVV>hlPlE`ECP?@#DwGqev1XcVZ$~zKkYs%TIGtooTk4G;gl<
zHw&n>vNChlMfAuto-=7SV^nt$^x2!ESjeOt#Vc%!WSsJvqLmf_zmtfpB#+GN#{mU|
z??u6O3np;Jh>nlD^!2{6B*;yuMH0e3h@8ab&-Na%PuKw((wP36jspkWwBj=Oon6;o
zUlaHj-FG~9;ZECht3eiPTRrw^@3(ryt&pb&ePRH@cYQcZ6S<O;igx}V2CE`s9%H0T
zGCYvnDMl;TK0H^J4vrB-L2BFiJ-L@CVPRe{fg-^bre^MvNlQ3fNYfTxBqR0KJn&e!
z(1iIr-XGdw7gEO#1Xl6MPd5vYr6sAkQP~9LPM5RW6M#1mVtt^*iXZ_(eL4NnYK}wb
zi8xXevf1@SU^iT+@}4-(@rZMJNb^YF{OU}*<y)D$2y<JsdmKq1t9XI<QQ7}mG}e)s
zikap5tyK6IP<M~&++x^^RrREhj$N+EXPP-(M-MVQ&(a0I!QZacYcU8r=@qX;SHbOw
zT`(Fzm!0)j(_Pf8BEevNHy+dR`<tSoGo4a!vXqo_`5#vh<QsWM&~gD5!6xYL=lB&f
zaymb|zw5Wuwp6IYINL<Xqrdx~u&l`<hy#2UQHR!%_>xPxULX}9tdNk%7nG@*ZLDps
z_pV)ql$!<gmo_{VBHV^|*0NKlk~S9^8gaTUi`8QeK%@@91e5OkH5=tQ=%BTH68;&<
zHPs`*o2){P!-AE@+IQQ6u<*NV@#KncQN1nIJTQO^TWGxMp4r|siD`aOgl6w^)3nPh
z)~{lQbbppfmSX6Rvq$I>tS{V-7)I6RyCyLYq?jIv51MUjKa0^214nG?BJR&&e}rcI
ze6u4!PQ%UDmn=P#TLREv#3YN0P5UkmP&}6OhbQKB;ieEw3SpC{6!!R!Uk~zERT$XK
zH)<T)eJ<XnEDx<0XU3%#QNBE{=al*r>_Bz`8Mv{Z9{YBg;*A%9+5sN~nwn%}(O$C}
z=Z@4@$%Q~Nj%3xeuNeaysF%l3OLN~4p}JX?^NTC|+HSsnJg=0UH1d^wT*o8#O+Wnp
z_|5rz&T=pl9M1X3$DdxxE>5+NW5q_fnLcvVd-!%w(Q^`BX3Q7^Qb`f6`^qc=i)KlM
zvA%G;k0PZZJ1ZMz^X>KYj9fpiVpallNL7F=0b_B7jjV-b1AS`4G=js`c@3s{L<P3r
zzKrAIo=wc9SE@cC#*WbWXGcDrlDuSir`e@0NxnmtF-qVP5~L(%0zZHHM`Rc8t*sH0
zypMRVQCZn0Yal80idPi7-CU=R5Kr>vQ7Z)UeB`f=ub@AcST9Meholqw)L`76wDDNw
zp&VTj@ksK_hT5ruN`a(x;t63lJcKik^r8TsGlu?{)A*a&-h53?yJL@*-hB0{OJd%}
z2i;c&|DJW_I&(t@H^pYnLRe_R$)!*PFXDvV*<q;oWtdbxoO1Hf>}9tCM?WquW4bJ9
z?69_W19#!m4g@Np!<7R+g|&PWr6xye2hx|OSiMzWG$eqv5mDaJl2S7(9n^}fB4FI+
zV?fi{a~`OKwQ%gkC1fv7WyB1CDwe8juXj9^-*o6r4>VyHDQ*thf!y>ayJu-~*B5&c
z@Kl=&`DB754?h{sB)H6l?S&T#8~VL%cxcNnMMc{o;8-vEJEYV<P@4zW)%|XDhyAVo
zjzZ7%8oF>(P|I;gw~vaTjFP#k#=*Bb|NScy%>-$|YX6*nSorT`A!p?^`oBN%N<NDH
zuBlU(|NThgZq=)YRPK})s{NyLQ;lc-mte^sWcQN({J)?5|GjorUL7jAc6^a<&ODQS
zyp8knS_SI^Td=~}r5bKNk&xI!e%q)-V4_gsoBqxij7(I*R0iDKn)zX^JV#YkgF6(O
zj*)lD9vI-J-`Hp&0W&<&mQisDiQUOT#rO^ruaBR%$p@VfyO%2ytp9f(NT1QZ+c^bF
zM}qg(IgOVWc{8y0R#S}3b@YsAlUlcI^+qwQ-F`LsBo0acH-%nwduK~C2Ji>2os?HS
zH&X74g#@kUubSmFY|CYhNte88|7O_VzZuney06V4BjpAJsKz|{Gg>9Bz<7O<<*3dX
zi{C%;T^I7(d~iwWuS;$tc9;1=9%1%<w|&>4`4+Wz$HMUMi-c=02aCCy&p&Ly1&dZh
zVG=KMYkz;I`&Zk$gOG|8M8m&0ICqtHpqz8K2Y^etw%_2io(xxE7}19fv>UCYsOU`U
zt~0xR#;=jME@%-#p~)lQzarP46K$@5h(tU_J^qfXh?P<8^;KE8&WS7ipm1F0hY#YG
z!*-x4kZ8qPBsK&p(5TXTnqqNfoamAjZ_y$yyL9|&lkzIt(YkFPj}C)nAT)_xi&z-v
zZ2e0;N<ps6o4>R99~WQ=LjrtJ{lv$kfs!izI*0gVT1QHvS4{Le{K>Y(_u3U@VJL)!
z%Qn6oLA22vLCdvd&McG{p|eqNP)rKKjd=SYa0KE6kIWWZ*^$}&fz@%V#@C|aO75EB
z|4>ygjGe;))3bZ`x-mHsvF2=$*R7!WNduK#+zY?~+a)GKt6UnkgrNwvi|Yi0N#V>e
z89L&MxoqkR)aquxoaN<Wa>Sj{YS3PEFsas1cPGq+Ez~qIPvn^y34gf&KnU#q2-A;e
z&v&uND{&-+eb0RxS+2lltm}+KOWdP)2=PGcubOV2tD&wAh-l5nZ_y&^Vnljj@cHvI
zMm}If`uxjrM6?`qR0QNrf~dCc-1%H!%;-zLn0x2hOTnh1V)CKgh<}>XzH(^L|Jx<s
zA8o9>6^bqp4iBFEma6J$x0P|ZSk(5wZyFA#LTzquQ_cl`?_z1s7%gd{#~nRVn;`s;
ziOC39h(dAUQ;1&#&jjEb^Xcz>z0JQ3vcwGH?^X>sn58(2$$&WR(S*K>u`i`wlv(J$
zeJ8SlgnvY(-yLX^%q%s-qh6UGZUU^be{!X$ULku)wjfrY!b?Z`&%R9XbSpkQ4>J%}
z0L8n7k||WXR&b{nLxd|&kZPKWPe{}Bxa>8O2naY)_{F^@(eZ_D&7U<g!R6c$FXC0&
zm+5)`MR~o2YqnfV6TBO}q{Ro1>T$&0%7B|S9-?!FN!JmXDNy?cIdn2H$w_n?2*(F4
zZx_m2p)nQGr?000V8E}*an0Gq6i=)UmJ!cE&%&h@s|ec5Z?gN*7}kYzg*B78T|YRe
zeAv~@n0XOObP?nQ!yKLSFolwt;Rfv`D+RXb8enHZlCA$ecJ+y$ukT<OpNJ^xZDPuU
z%M+-F1QEPmYbD;vOg8G0`3Pl&zAU+_WaSH&;z)K|K~Iyb%LXz4%R${uvm=*~O%bvL
zI{;0KP}MCgUg!mNk$dk|>>+$4i<v-A+(D#{?eT<R(!ayYOX2mUT>F!#MZxc+D-iPu
zrV<7`m9fLVp<7x&%7vsZ_P4mamr9Oh`T#-5gM?{&(o%$=!N$#nlon0&9WoTBH?m7-
z-Ack84RgRqCykX?f2lEeKxE{Pa40g8->{}pB3>5RL^qjivX8hzka_-a8}O=sbya2M
zqCH28okj8eB;3SDY)LuvscJaT)Ng)-R+Y0{cYGh5;qi7`42CYR%{myw!OtveURj$p
z4JECJX^rep___*KwQ-{^LK9uPZR2@R31@9ef6O5-tP*CD8YLCiKP)80aI{EKWOfQn
z>5RAygLz@AJ}mzNAa6yZu(RD@PhRpH<A#~Q^l0>{3+8MPw33cMv@3sJ)l_w%R3~#J
zV@dc@rsHrvpydhmLNdYlZAp22{UhETZNhMXa53r-$ro3D6l-TO>`3+pQgdl}Tp0}u
z20mT)*A`}(_#;Y_DGhV=V!A&*0^{BLOcAJMYOz-yUeK?tVx9ct$&;z-7yH$ohdO%=
zWDE&Y>Ik!Tksv_)TlVm{NBKO^Ya0HE!g`P(6$(u_^AdtnvdbNq3DAQ&s}&aD&@kl6
z(Q(!_OfDgLJp1{@+5PDqr1GZJzBsHDcPVR@%^#lG(hu`xf&fyaz+kyKIXRM8`d`9?
z0zWQ7a_OBE{u_V^Q-DUE=Zi29C*R#^boQcg1ih6g4Bp4$>)^=w$+{3k9}O8I`7J=h
z6-c1Kyz&~vnVmR)z9o2<{pI|IOk!E@ji_0mPINPHzxPqHm6?@*<(Jav*`+#EmK9HQ
zana`6*Be8#Pnr%#?ukyBaED`X^OXrLE1W7Cl)WWS74bf7e?qCF4ri)FSNPmfCRV&E
zN75-oz4GOl?;(>t-7J=)tv2{n!5*Yus0l*)kr+2}0i$j1cVOR~1bCz%r#Jb#vd-aG
z$@B)rj<}BSbo0n_$GIHCIK5B7(xM$y-~x$bBI1LF@EiQ;H1`3s?qgW1z_;fRkc-Ai
zpZI=F&)Rz*`M1IZ1I1=SY+&F?(agOstrCK*(0yo#4frgupx#PvOzS50{d`aHnxVuH
zCrvo$r&ygbxW#|H#qhwquK?_I&UCrjsA;=v^tRKjt-GV=T|g2umyFXMUTAq(w$X(L
zU3#ghfm+;@sybml`2lj~GlO1MrXTJyN>nGHJL{QRhR<qSXdsYb{rX+8`=;ZT9L%(W
zZ@)f|6DKp7!{5`)c*q32WHxT=aAgI?%*n}l{++Xfjh`%gXsth&74J#Q;#7ybLqq4x
z?oM-B-!W0l3Mdb}gQ-`9xLF%VtTs(Ngk{eE_U$4-`R#^hGCk)@4>q=SOwP{WKDu>|
zjP3%9x+~KmiHZ#mm#_u?JjIh2LmA)4`v%{QgP9#mX?x0bU@|#uX{y9Pqs+xE+KECL
z>)+?@5P=v=F|UowSQS3H=B3=BZd(S{4#?WW0Rr}i7$AfqG4tRIyY`{`$^U0_ymV#7
z3ayUpZ3Tc#|JehAD&Lno$qBU{Uu42^A<OTF?7W?|T)8NSCtV<3K9pEH#6wyWtXkn>
ze)A%bUHa-do%U<e`O`n<J0=bcU3EIG06V0Elu}fe`q0TV)Mvi6sER*$d=md5iG*^l
zv%^cq5Q7Z?Ga<K#tGnB_P@#^1pxNb)?iiJwF7!(1E<$Akn&}SMBZ6#h!-{ywJ2D0p
zdV%-_@iB$!gFD#8m9MIgR?b%;?D1@t;!)kUDnV67dgtL7NfpBlz<a4Hvl&_TkQ+Eg
z3p7W)UtVc3c+14vs&iIgZOzj($ufiOkq!7AK+{`dHVTmNrBE&!8;@ga!}CwK#cn{~
zdWMY#NkvN2%A;7PUc*6@6Kue2SkiP#7YX{gta#S#^z;HMkdXPw8|Bag%4*A{7_l<Q
z$J_hC@Z9t+Cifn;ZrytI*s;wxX!+ihS8uR~>djL+m@N<`{IVA1DlLkOO4Ir`*q$O|
zbVwj!#{05k#IA&AqiIL2ov_IdkY9lO?=FX8n$$e(Q~e^_bnNI8+=sfga*@xU3+{YY
znRkOzO7!=N`7zPa7ms^U2Sd$bE1=Q71+51or+mn6R*(odDt~&G>zSAY>C&?bXNg{y
zJFlA@0}atG9qtLc1m`t%o#<8-a5D|7GQ{Sa6Lok|dA+)IA@uh|N~dRZG2d!P(m7eZ
zH{&OtFyU~a$`R>2=Y#C}GQnrhm|&zVRC9nRsw$oakO@u{geCPP{GG=~GH1CmYADV1
zj3^JWiTP)Hio?^U9^P?3RO+Ze^b}JoU|h4lF+C`_s3U0J7<NOK0r&v04Y;%u)--Jv
z5Qef|KESFRKqmoqpYI$*C&8v4^wXL3wH=^QfK0JPXUWw$o^=%1eKZN%dPZU=J~z%j
z@(I>G%_*j`ZN|gHR$`TBe%uinKE=`Tl9o>Yqs^(f9L6an@W^vMQ6FUa32ZE6Q{IW6
zqvzlxleMa6^x*PzR#ytLC80XaN#27YEMFvc@hlU5K&)m&x!^oXygk4xxd0avddVRS
zEnRM+iHZ2v!oP=>qIB%;Qzl8!K;Enx&UF&<4s7qwS1aum5Uq1xB%K0;sm>X@a6)R1
zvXkLN8ljRLo3or59$C4v2TGX;BffK+;W|Ut@H9U|dI(fK-bfkSPbSfs4NA7x-qbRE
zAzzxs`h@Mk`7w<uXcEUI%*o>*;lgM`<REpi@KOM4DLRDy%PF|5f$>P#8HiukQ@n^8
zO||~}r;)klac$wZ@Lod7;m3glpe-?6p;O{3T^#lk$(})=wlCYhfZyyrmrEavWE2qg
z^jL5osf3U+Fk`umRe>S?Bu;tj{IzEFg04kH3N^?yq+1)%@;7Wl(%(p3NIXe3S6&k~
zha58)wKHORO9AX_a}m<85Hc8AE6BuEjKgUbJTh~dv%Sbz6o^T26WUfWU6a$A3IHdm
zD?c7j6~Y7@Mrhpc@%t3uON`c-V6f8G5NJy$;`-El9k&Hez;N+<;Gm|wU-9vc_riY&
z1!jr<qTE~$ii?+34=^=o$uv)p**JCKb%d3;b5X@z7>^&>e>i=DJQIrK>%&~hp;rMN
z=9t(8<|gSzJW2F*La-5XAx+8tLx*mQX5#kku4wz2-|%FRdjEzARu}oSqQzlsiNn$B
zZ_XF3?gmg`A&P48mFezaCdo*vC&LDU0;F3u<G)iX1zP3zDeIhg=pWoF_%>^q*Thui
zaCnu>Kk7rYlp)lzWnreynnc&J(8;Tkv;wX)@bD05HYMFqY#yb)lpPr2Ed8|<n^ayg
zPcMLF;;mSR92gE$Fm5niardLYmNlSNzdIrmMp;7beeIYiG!<c7m=?U{YKmtsZKoAf
zkh^z9E;9<^2EF8jTpMN^bgCC^vp(+hIO*Nql%kRGtB7}~`8bO?zfbTBq8~wjykd0X
zy5d`~Ib?;woaq4v8WIDWy7Z$GiiMa+^kw!hhOg+bkf8#YIM<Sjf9%LEFb>fm*v?ca
zdi!=S58nVxo5lzqyMKT5ib`~9u)$~}Miy_rVtD2xH4tQrHB8sJ_po(NV0i{9VRh!T
zVMGN_hl&IiUc|-)dieQDsiFK2_>;;&26ilNxk+F<X?wbmzO;vnyc!(~=}J(@fWMJ!
zEqihK!t|;ZoCa`G#MFls{DhX6+2GRa{*)Kr;2!-_j+=(ah|Yw)&6CL<nJ9N;8oaY3
z-w(kHmx!&~I(Ck*R5>zI3cfugBa5!)<g{10RAWLNC_fn-e6dQHINW^b1mNZvyH}0a
zzO?FF1*zy$Jxrx1wHSu_YPjk+i&S7|!HX`1LCo-1I{C=?LEL+l7@wnOLyLlP*Cpn$
zK@6}v;hA3erb|slBlwC8+Uh}>4({XoyjuJK$hFhzaX07rOp~%`oy!S%_G`8C)+?Ph
z{S?F?DrAM3#gyubUqO}5=X4V-G$P+GH(5Wbv;0U#{;%>#>tv0!l}qdZez{%`5~5U6
zocP2K5_EWn>|!0eTleDoczdQ5j3`*IEpgwgR-Kok0&FqwFIfHDcT!dMhqWdhRvTwo
z-R_bb`EmSmlg`&NvR)RtE{*)S(Q>JK^`D&h->!pO)R+X6omQ`O>{b-1z9R5ToXNgj
z4jTTgkB8lEn$S-Fq*2}OQUqQ;HwoF2gNbIlrXW=o8fJ(}_Jb(dW`!4O9(`lL2#u2^
z>6H1rEthBe_ZwbY-5brk{k1)WfsBH0OEq^rnMKC7v9Txgf}TC!Mo2RbaSZUP?a{FA
zH$xyp@RUzF{TJ`-SBp?LHas)4-=Mx*E?=QU72djS_Fv?#`0eM3h^Y7|>wN~?ROwo$
z7IC)7=m~O+>?zN_R$?+ST7S#s`YH{~@7u)GpYZqk>=)ej7U=Juw3E~3&N*PW3xxl1
zEnd9B@ksc+*R^P|!vN_^<crHc&Q0Avu(nnGi(Bmfd#!8#&S9Rs;Q#wU;|0@d#a-bl
z=Dy?3jyoD?8I|pQ_U^%_wLfz8|1jthNBCzmlpC0sEVi}m_CUC0F%S4U*t6H4So@~c
zLH)EVcLu9Jd!c1v+14^uNqf-8orjvL)%{cVVez6LyITf-giYm`*a<#J-n>@9w*c*6
z(JE}dK7;?1w+nSN>)Gc`dBU$=1#PQ0R3tCY$T2)O)ZcpIV3)vSGiqkM>F;pS$1Y80
z^3R7S>>D-Jjvw3xM2^`HXI`1h*~ES*Nor*ro|Yu6)LuTf#E7x2;<E3bZga$WN&3h?
zN55(Qy5y={c5h)-GnaZ7#$I@lRiRPsP%wIFtK4y(J<t#tD>tZR_J@5w*Vy4c+o+fp
zTGitF*|F)W$`0%2xki_^F?OHQEBmm|l&r&9Cr)l$>SpsZ;QqW_Uv3=tzvk8QhCd)4
z<b6TJ-?0b5i#eOvvG$5)y^F4|H_Cf^Sn-)53k#Zhf6{B4rEf5!=}ebt3l<gcGq#)1
z_=J)2R)hxu3-rDEp>{zu+&`ywO;@Dz%t0KK=%l|E+o5y3ug_mS<7VV#^XLst3e0x*
ze&y#rIWTNR*!^G+pZ7+|+w1FZX{i8=3A-Ak-^<RA8CXU})L(^}mnK+0p2s!O7gfL{
z030-?&h@`r@a-#w2&hc*>(%j+JcBa{0O5~;U($O`zmwS8sYS*)m-66x-4|3ZXqvE~
zWqP?rkHk?&jM685EB2bdLup6ilXE9Rzy6BS+Bov{q8qPgboU&n`*6sLWql3f?q=2-
z*LcvKS=)+?ZD$_3a{1sXZT)J;#KP#<#C|EMM^zT@ysCM~w8`lhjh~-9yT7^7Y-i%I
z`Y9%=bLUpf9FeFw%3xBHUc+BMcAu!RXUYzfUfpNU4{<AVHu1izG9^OMW^|_osycoO
zIwmDMQbMeq!nV{mU9rJ`you6TF>nz3V;N1t9rt<p5-}{={HY=+1Hrre-tpW}P8@iU
zR2sHFRw>bMQI!6L%r7S-t}&subYC`Of{5@M(fyu3e_rXXF^Cl{1ii$Dmu2h@{5kx(
zsU^`BVu%Qi+0U&rc*oMEq2=2$7)c_LM%e)N0aeR-NMO}-x4r^Q=az6TO+0<%sv$)$
zB{P89`}gmC?9=!aQ&as#i{1_$(IcBtg#@X=|J4s^l<!@)T*bZju3IsqRaI3~V917<
zoPE0ZPJfI%Do3`4K^C%(`7ej%%@1qA8x4VHeKP{W!x>;Jpb>I(2t20`elJe4{vnZ^
zw5_{zaX0xB$$&p%UZU#ulsaR8_W&Wn){kwq=gorZ@?VSm7teq4JHI;rN><T;&vuSo
z0za;`e&L?xaO!>Ipih6cEJ+--!Q9YvV}Sq8nVm<yoZ7M1L6g_l^S7MU+5GBc=szPq
zq`p0Ka^pphkGH+box7DDJaYbcdgbUN_rq5A%-x)|{_~muhr62%x2pTa{+e3o+h@_+
zgl{e;p{x4@4>>cpFgbbT?D#Bw`yDqnEbOsEQRnBKOCwEmt5WYqmucNCQFPJidGq(+
zt2ObP4HQxf6<@84iE-IpZ|bJq{+*j9p6Xh#HT2{80N`iP%~Mqil4gredHAa1`uA2J
zfc8xTOB*%1=>EOJ^QiKqzD0p(0D=76`%C9e(PE=c%79Bvl~gf5VFis8^c&Q~-8mWt
z=9R}=cuao(ARJT)kain2b!T)lAe57FSM$xTd3#{Gpd)ME-Mel*V$H)Ov{E8E!5$C*
z3J~(8i9@MVWCd<C;Jo%B8Q@2EVPZiK0*3hp#uh_S%@Cb3l?f^p<-va6bIEkq5{wAY
z*kt3i@NkwccTt*xs5{%=9S)}{!kefyeLL1bE=EQACME*>i;$lt*lpUeR}jI;m)ey1
z;m5C0=t{(7e@RAXCgJ!Q4o2WSd|^iz7I5?l+e@Jb8Ter<E;u6Z7L#9qJ)to{(pdMh
zOh5<P2C=lGpF+PPR-e`7amj%{tCui)6LyY3dNQ5jQ+*GvoFAx>Jt+I^2bWNM)|xjj
zztebhZfw<*#8Zjyb=GgFD1R8&HrD=-d%H~gBe#xsY`Ea@kyY#GJ>Qjs^nX3l|3B`3
zVmDN2#Q)eku6O;$NoHZ54JMpdaI9lAp}~ZfM#?kBHc*~0c80sRb=r56Iw6XEJjcB6
z)w51rkNS@fOg;DI^OrrEN)yLT9GjF~dUN9EavP*MOP0JW?Hlx|ddv2?ItGWn-RM1~
zj_YuXK`X;{9U8RnQB_^j0X6zhKQsDu??rNssnS-hU!FgLrZuu~y?SY9qo}x5Zfn}C
zPaP7IJTQN=N{GRRu1$R|SkK?LsN#F}kgFDE+bsLdSneOD8j_@1cDkmg(2?ctF`;me
z&l(R3B{CpN%y08ujwK(a#{iBWkEWuge2rMCBHJ87s3aQi^0=Uy<$pQ_d*znMz(Bm0
ziFu=dpfYc}?lZM278KV}GQvPox$3_-Kqv+*%Z3nwsjq3G6ZiYKQV{(h=mgF}4^|E~
zPI6gCoVAfM-NSV{9rN>6b%xqLv4T@0>Gco>s(M+!<uwHfR`n_L_D^E*3a1CGBkK7g
zoiTch1p$*O4CX~2LK7z{Mw%J2%`EdfSSHeKmf}M(!`S%7inu&|;7v#jzMcC`ZY@)^
zzt-*Zo>tz-UnSvV<hqT4q=SDLgXN<?oxtd&3uRe}T9X1<s9kt`)j?@16vQR--V@||
z5U6`5+%VzWq!q-!{XKsg2(GC7&rLGd4*Yz$l|B^6xEHIHgj9|AkPs{(^IP~PSVZ>;
z?xUC+9miI7TdzjzNxQpqhb5(6)34X6!M^E^ZZ~cYZPT~3VpgzQeC4yCxS(>A+#VLU
z>|F}Ww$(kd)6CTCqV3+rK_fkK`m|pAocZJ|{r%k@e~h|2;)SB#;vt<UU$<@Dq*?1$
z8KKqzGrPS~>(;O3BIO;8Rr`L~5MsF1c)P(Clb&&t^o_bg$TbT1;(9{W<4WuH+oxV%
zuFNa{d7-SFYPNA~*p}c;S^ZmEf6F>?FKkutjNh3<>qaZ}d~;)HyBcNvQTxYj+_5ty
z(&~xQgoZxvFIM{wT=)AqqqD%#cU?BxwK4bj(|X5{GoE96A0H7j*3d5ThH?8dbFVLI
z>D5^EQINyN#Pn=O%Yj!HMs(M{-@dT#3=6fH%l*fCc(rV%IzDxcpZ4M@pN2%&J)t^(
zWS~(~twe)IK|i0{sy0z--OnN_?d*&h9}|0PM~-nmAL>0#amJsbFU_<)JdJl)9f<lT
zR%gW!Ma2cG->z7Xv)r*WxZ=0X`k;L(!_E6F7_2z^es?ZG<%Zes_bytLquMAaVubsZ
zX67FA9ks(+MHXIauIgz}_rih>4cFqTv!~Z5-8ZM_C3$PKihk2ZzjJ)wL#j<&PP@;0
zWB1d&F*9RkJ**D2x9pqXS$_<!fbcpdCV938hm{tcfWX$UhByox_`YQL3?!bCf6X>l
z2FDt$DNw;pm~qn>@@f#`drWT4A<4L!F^@joA))HzE-NbOfHyJ+gYfH<8hrR?0)t{D
zB}~f@j_mXG)gvY%q2Ad(iu^8u53mgiEfvS<^EBGBl!pfzvJNQ%ivC?O4A<*rGaS3G
z`5zbHas8N_Pe0e=NW%$5tBS}BALB%8(|&~|#cQ>Jc)ll21lmBHz&JyW_rld!IZoum
zsQRR?{Kk+*ylMaamuS$bbjSVr+av6-^<4RH2g;n#*J^K9$4fpZt(w-6s(ZUs^tv&{
z0NkI_JDY&A8I_q-J>nQ{5<csC!8b{e{yX{S(lRQAeZwXE9Z1&-d1OZZZ^JLW&3<>b
z=)1^Ve}7NVCK}%XG?N+}VF{tN4mX@zY-4BFwmQ{EF}goYiHwKv6B#*e3<>Y@`d?5x
zFQTNe+x0b!(COTw<1l-P(iQRPCh!dL$q~9f6xXX$oJOUmr9czlclr=lZ8a!#;Y^Nh
zuJY|@1E`>;XH9h6x%NSo<AGbiMnSY=`?K%OnsxB^@`Iy?5nHoy;e1n5zu!9<`N`eC
zZ&ScY3sH}$Tx93DKq*{F?_enS_|P1he*|n7T!S+2@BFB`b^beJh`~TTp(RMdL!Rb+
zSZhpK=j?o0ySYn}rSQlC42mw^+P4_fAlKzuM_g*C!_=>A2sG@?&F3;gAA9B2$0<q3
zgSezpo!dSM&CkB%*>wi+hN9by{XHoP@#+ELZq=cK%hTVV0j{{=zz(4sO+P<1f}zpJ
z8{$O)E(b12tj<t3Grz^WHS=7~0-@?PZ+<l*^>i)mka`s@8c#(2s^L$5cByzblnaLO
z4hUYqAHAVxfa>h;$ve#%dvkA35r&E#6J*UW%cS2Uip58kVtF!!Mb3qV+g~|RCR0d(
zMDxRhI>1P-de;Q}oQjtv$??x~qlus!!;$;*02arVM6Z0M3+yVa7LjSbW^%9)fK{g9
zC@hYa1)4?987ka*NEB2d84Uuz%$acV(Vu>L=3`spd}3AcHJ=-?Q@_BZO`n15pZ4tA
zy5ny9F{T>!9;Xz$H)|B!W}RzvaU1=rQQmbYdbsS2xZQu+yeWwlj%Ks&7%M+pb2H`b
zbf5PRuU!kB8~M+jZ$k=WtX<-?28a5rwE8w>kkgJ`N4p1%NSSVaR@rZ|!JkmCCk34?
zEVp`D?b{bO=fk6Wp;Lza(hB(2MS1n>LygS0J?y$~!La&k>^8LVRG2z!WW^7E;||%6
zV;q7G95%UlrPR6p$||dZ*~car9J+n0N@L1A#q0VW+wGfLUt4#k;gui#2exUevU=3~
z?@j8O?rY`d8GmByj-UgbuEadi-!V_Eu-)>>>q;M2ome|%NY{RY+?VxzRkPsCy%Sc0
z6)%R_S-l7}U028b^`Y%%s%_T{%Js=sx~{g*aB{<A?UzP&wLF?&c7D0f=JiuoDEr<$
z)U<Bd*^lQ({ArY*())@*RrI0py{`;^p=h&tOx!K~TR-Bgt7q<<qVu`1FvI8e?Qd_s
zjoUl<^)^4XZLgFk?EUbhzU|zEBXREM_XQN`)oEQ2dqsQr&i8v~9(enr^$sH?#SyMI
zHk)lzKhZ($rOG%T?K5h+6W3fBRl1;6K)mIm1~)cOXt-8ujr*RNn+-jt+1wh|tLK@-
z3nLc&n6uP$ZbqilmX=*kjNPxS`e#v(0qH(nuXz}>a9XGIX5SId+rvK;77p~Dl<_^d
zPs=vvMnn}p@GnlEos@Uy#+mNt54&Z%_RmOvnDc9t+lIzEbKAwomjx*;X`r!o&CUG%
zcl!E;b_h%Tx};P6I^k6xtbJ$Bjz8;VSnucB3tbyu-4K~{%lhI`p9l;UrXAjL-RgCS
zzvT^>C6Gr%xV~_Y&S}M#GAu+@x)`6;kEiO%oCiTqvm^KQ*#w<lI5a~1>GeA)t-#1h
zAZCC{k&KKgdopv=%2qO%7J58j?L@jfx&U3k#3Ela%M<Q3)iOqau@U@esn`bti_h4)
z3yzj0@<MEdz0(V6CAKgwTLtQP0TUvT>8%@Ai8u~H<4-B4>yH&8JSKa30}`kBs>47r
z4>VvmmberA@pk|^EZ53BzhFGAi>v9YPfTF>rZ>T`P5NzTEc6|LXEe$gHe^1y%z&AV
z%`d+Ru~t)F;?pya%n!(<58-pOm8!qa)ya>6_v0aA{6Z+Y9qt9y>dr2skD+Ein>Km>
zP0(`*9F_^Y0#N5-q~ao}w4IyGU{nlo+3h&$7z;?K0eyF9+LiL>cJN#3prOF&fQ??v
z13@P-cfL(=DMmUF(8JEZ?+B#<L&!<{Z;H5>&3(RGnTlB8f?NVXd-I~CmP?j4l%EXU
z%AF$31T<IB%?=VCQSOSk!Kmb~#qB-HSR49;aa9CHQyEYUqWUhNE?o_ah}0j$Go``B
zYUx8zgsK6yUcP*H;co2bg#|vR-=B`t@}nBuU6^om#YVNsGL_nBy4bVpLxhncg&#ZC
z<JIiB4-jFBD0g1M+I%)jp-w=Df^Z_EVVS8j>eusI%qD-GQ%x9O3SX|2isW}8t_6T-
zA_~OPNhY?O*fi*&@5;qN0ZTxdQK8V#_Gcwb*)K9((K^Qee7Qlc6#V7M`vptKJfQ%#
zL48-h`J}kK2E>P4g?^tAj&WN{21Eu&w01Fm5iKHkX5YR$+F~smUXdQO`@W4>uKz(*
zMYTckR67gc+PfqjV*$zXv~>B<%jB6h{Q{%tB81vzY1x__Z!+=0MiJi-IJl=E%ltFS
zc`q>dV5n{v=M3OP5axr-;<l%F<SakU3X!`HS59)9@jI1<x`OT&NPGeF!HpO8;C}>n
z@n4u?e8cHge{ejo#vXuC5E}R}qmvEcVw_~4r&9kc-ZC?iH@bn#XJy1;6^%uiIRA2p
zB0@yLLZ!xVEbPmBAw$Bdq>>TcKBI1ly2f1E^852tpe`)qzrwi4#FB<KCq%KQ7(hUI
z$Khr>GeNwU(c`|0&9<BwbVk&(czSBBe7O@onVQ;Z&jv(d$%JzW>w8v|B~!--bLPXt
zgGD6cEMU5g!Ay}0d50pI7OhOK(gH#j_1VU%-`^gNZ&61#-wt;ai5?TBGj<RdDYw*v
z%(w1($-%(DNZp@>)E<0K=yqR5<V7&^U(cs<OsqP5VfSTasuOtzX>oWn(T*Kn)?#eS
zb4@N(MEBR*ox8iz?P;uy*=K`<17;gHY+cwZP5qA=?ae()&Gt{0wwz;>exsApdY8h?
zjh>T6Y*%b?!eVR>w+7D~Zr@i5QhpSgu$$8Sp{;A;>yYN{{j+N<n)@3BWY%;WdAP@;
z3uirysyx3<`TD@Pqmp0Fr0{b+G%Ut%+;Q)wo?iWc`tL@!8XKzjw)oYjD@mue*sNRo
zBqBJq#N@X6UazM6+Br>ZJTy3V>Cn24{`bx`Z5wNS?@INmb{cUvZkQ}~jeTkO^R!y`
z$nI&Sy)0|aZK-HHVBpJ+-eY@z{qWqldZk`pe)Yw}8xsl+YoB&AH<;zMZK8d1HQjNW
zBd(>LO`jc?cIR?#<iBBIOEOvwTj{!_VEZ)3&mU~Ynp!<*q4lEkp`rbca<;4Fc5=Ov
zu+wtDu8WZ?L!a0z`O<1w)Bugs6E)k^8+l~k;;mmcI-T#86>{rGAB_X+H%x94-86Ii
z@0&g<x&OFcIJfgu2W|Uet6TY|6-#5AB~H!vZIt5GB=c*oWpAIS2aSdqrbm{zhQ~x)
z%edpX?bY&LgDum~rF4F$apA)9n9Yqg9BZv<JS3@U@`yvtowm*}R@1C1ZvC?2(iXji
zJzCWtez<t?r^>BdufnZ~<If+SuyKmx*AD|1*FQ4hx6`14a&_0M=XSbH%rj_b#p_O7
zo#5l-=l4DJ_YnP8A2$rvesR8d?~#sk11=|?-MVFXC&x24Mp6;vC|h10dGNW(MOvr@
z)zPgzr!6s4{e5ZZx2&ke%O|hNJQ+5<Z{E6RoAbi<&d&OI+53$7UW-1>hdm2a9Q&y5
znT{_H?W!BxXNJYQm^tCgU1w!G)^rUDfV-*5c$034=duSqM`GT&hRP#5oyjy`c6WZH
zX*y>Q)_>v$!G7iiV?fO2_;GM1HJEj<3XEVbh!1AgtUm}O$M`L#kD6>~XoFx;<Wt}v
zq!5U67^5<o$WmLzkk56srh0??8oEC<a95^#!GLPijx%FzO?Zw|aho%QCBZv1W6mxI
zIr8)aK&S_JNlsF>XMq&fmOS?b4eP`s3+DX*81@&$QegipY(QdJC?D~pelszn#~_hG
z=yYeGtbQwI!fmDXfMxXcSKo|7gU7G%5qpoSGBd0jC&8*k4_ec!(H9t4LP%%l)P%yy
z_$d_)oOl6*na8Ms%=Dv6p|tnwZ+=6VV-RB5d!QQ#u{$;bFo(Yx7i*gpIww}0b0pO!
z23}ECF=Vn<M~1Bw8ldP^aoZ63kM5tZ;{hu7^iLOCXsBttmp;vx$fblqil*%p3R9`i
zA>|-Xp7~+IN!NV{liJBp9!)3=CXNB_ffylh$$LPUP&Wx@M%?emRC7N#8YXTj^we<Z
z;4N&YdY=JwBo515+VM;f-aigWAFBDmBfWGx?u?5#<RsCusQ(#@#=k}uocfcEW16_O
zzF3<%js8he2m+m6P6i@`1Ss)?=y==q)5jy-+WJXe+1&}PU~vIk(U;40B=S+5h8Wb}
z1PW^hJ5Pl29E$?%L!=(3qQ@D6pI_1!+7vi$;v<3C3WLroQ0-(TvhTL)(q#|4tkBR&
zoigvzF5k*ug|hD+{#EHDt%+NgM18nS!-q|FYNp)6KSnS_$<Ud#D>=?oGw10|VO9uj
zbQ+bJxa}YU6LKmSqckc(r-%b)5D{>)N3*Pm2!8_>`v%qKDb6O=9#g&X4h|RQ=hDAU
zo_uFSUME>-@D!Gz5tf69giolfN4b?^Iu_iAW)U9IWG3IjbfuY+Br8h7T9*?5wop|q
z)}0PVZ3u!rU+<%Z)-%^v$&>OfBWOB{o;VN%PG(+v6OunaoWioF?}SWlP35uih*)xo
zwNZFKF$%+K#fsDSN#tC!lKC(%#Hr^6Br5TRq1h8tH}NJDc-b_+d>q;f!G@vEl~PUM
zhVuJrlzGhQgm`&iDH+pvBr+&Xzz~E9##o!*mWe(w67#oS^&=Dl*n>mv9pqt2_hTsk
zIq9b*zENL#&vwUS2`ps@TmkUSe6!v9Cr>~bh0#Bg=8=1Y#9e$iM4$`wK>-fg@+7N0
z+~-S(R~DsPW6v4ajfYZY!~K6@|I>WHyqW=TE>n2x=u~+hTsOjFM~!07$=zXi0F19Y
z=Q#A8hQEgQ@x3cE%xVJL?YrGE>E-cd1~aWat=s*|oHY7T&ztRTeCoJl&Gdo|E$e$s
zcXGR%*)K>f``FxNzj7`uf7ShyV(jFPg9omxS=vL*Amx3vY4A9W>TY2jqY6Dbj}7m5
z>txdA_NA6}ju^lAVYlQ>c9Nm-5S@GOqmH_mxcPXbRo1`Y7`J)gQ~$x$hC#oM<#ZiX
zRz1Ty#cf@m`7fSE1TTCWd3|=%?%r==X0NYq6Vz+`DU*!Dfrh)^I{&H&YaCnMBCqAW
z9&5hmxL%u9)mhs*CAQt#x~eC~{0Z`FqP6{oQ?mb~v++AD@4Kn?8@xd6(&_k$zByxq
zv}_C-0uu&wc+}zWlP4##o4m-@X?)W1+VQq~7xz&gIdnvJW2;!NKNqt+vic8+UfDAL
z`c-YctxKP6ydBy3EI*xdXWa73+d4eDs^K)Zk!HWR5tDR2#{{2GR9@|~D14&bvRUIN
zdg+}qRZ+4zIcDwqunoN$f1TZ>->{4Sc2k^j*4wYku-wV%--Dj~8x^^5#u81Jz^Hn=
zK6Sho>ZJ7S@VnFNf{z7V((Zfy&b{?Fr!3zR^`|mn?(kLjQk;@=KV&`LV%g(i-#cUc
z_4PYs{m9EuKcQy2(rLfr3!k2S!>#tVj9TdY#p+G<l{4=Dth!LT_eg%y<_|BQygzHV
z)2}MP{!&Qg^IQ4G=M$$-dvV{z<5}YYu?yEm<d&S;(58o{Lh_e2tva6Tru*ixlUpzI
z>peU|uYU<>trv9rO?>%6Z_7b!O|sqMZV~F48q)L}M;(2r8&x%fG(WK)a<BR6F2!-w
z)!*I-C?*e0EP;p2-dF$?{x~{bx<?__euw?`d%#;3Gh6RT7{&@>Sh2Cng)?yP;sCU+
zVm(sZ8SZnFK9TmoPh;K`HXo=@DTo^%Erqgc<`ktm&~hiX^EhUj`u-F?G-NXQX~Ghw
z*x0BcC!~i$V>=1=552fY^ceq%IZiW}Qh33JAt`0ThsOBi=+LFPzn<aRB%LuQDIPo>
zNPN$Y8we?J5mVF`tJ4Q;${1J<f4qF|pPzJ=aPYUXX;HNb6%z$SzSO8|S5wg5hf68H
z3-xH$06XS!H`((*yWYVy6Cxh^K$Q3!NM)xx#3{}jqJ~3Cvtd?40xqMFdf+mRCml6y
z{jpuu)$gu++`n;MI>r;wNZV!^vLlG)tF$}3YTZ>#cVn<|6H{(lKy`!eHDRJ8=cuMt
zTpN4#dk`X_u9I8yVG!2ThG~F*wrSsfGVX&<HmzTxyRxwRhj`cD<oL0vnmB!?f_D@u
zFO)KNc}+&O0Fq*~$=D<#z8#?6VmygI4nOAWn@YO}*4kTFxB5zU*rTPPmPrZfTV^5i
z1((Dc4B5GmggADNV5?W>s?#mbYw>|@PyYoGn@$NT@YF!<b)ggs<i#-JLpo<Nb#ovu
zE?p<|Vdj>NtZ2N&Mn}XSoGNAe)4AP4Q6Ka^=In_pnSyi=SJub480hOaWW$vN<To^O
z6P5KiW}n3@X#qh#{QX?}p=OxGDQP>g4?`rIF~IR|-bPVx<1ToOZ<_*wo>c&y7S!?M
zvnIN2lh9FsHbh)Cvwa$Ihn>G~pRX%kt9##&v<uV74%`@{v}Y(@R&xW-BM=d2!rUi;
z8cb|7vhJSbw#g0Q^NMp^{jskx+jxVdNkrus!LU|kjR~;8ngq0@g3_ZLfG6lTzjEsS
zn=GcwOu!hN4dx-MNrSaO5#{;3H?z=NoCViFcl*topyVl1)Md}kpZIN#MTIE;0Qf;p
z&jYo<nEwE&a&hd$^$Jy*Y0A6wPbSz@=R)RPva53S1&gU3FMCb4W)?;sk1{7V8H`ki
zUwUP98Mr+?I&$a-!(Yi=2I$_6{;~MqJu3{8e^)*9p3|^q<)8)+>W*vL?aI2$x#3%H
z7bT8f@;0MKzu1<2dr#`JHnsk~;2{BKZQJ%x9Q5VFr0x;^m*y^h>a%ouuFcBX^Cq63
z{C38rj^=}93(Gxwe(ALK+cICSYwkbpxx=1>%yU_d5B1yOvEX47+doamZnBEm)V;EP
zy-hk3UpQaURoe3Xf}YXwn<rL%@Bg`l!iO}SgU?hP7hhig%cpx;>G+)1X{(bik5XK4
zz5Bcl9V=YtwQq6%PSHD4HGBKTZ>r(I?ltTA?OKHE&`LvtL)%8Aq}<lnyQ6tlMSR@S
zp`ID{-(+YX{!urwO|wt;*Oq=XOI`G~V#w`(2JT(@wk)UK)&@J)E?fRKvdffqBj%qr
zo7yAp;$Vk~6Mg27ZaHSx3FDWB`hlA=Pj>BhCZdn0LGb+L2OP_qE!BJG{$yHueVwqh
zQCk}MYzcbWwyCzqt)c5ajd*jt(DZzLrGLXhie_KEdGyQFN%y}Szu7y&uQ<e1B`_#|
zOHNnohk@Gj?RP|-0HfTvPDe-gZg$5{uD{d6oVz+X#jJ97Qi}Ze(L6DCM@r--g^n|i
z?o8IKU*g*`F(Z1tOS2Vf^Hsfrzw*Q}3P_iwV{H7mSF+diJzsF85zQJ@@$vh6!mX_X
z2RkIlWE{L*!!vCX^O{$vHS-PmN2UJtjI^Ak|1#oXDsVgc9=iYr+TsZZlsHZ2Gfxa<
zZs3}>f7spxtOFQNwrg8!cK;}H?l607Lj>W``T1fz3lmf)Nc~@n#yq>!^dR(AmKLBP
zY&a6mU_4{SsyhQ?shpTpvHy1>7AofVFJ{9JZDYgBwsdW*a<8HoOK~h-Wri=d5y+|F
z_upFi#!;Isg-;+Y*t#3Nyt@O<w-rniRwl1V4LJL%Yy7LX)iMv+wv9p3z<$#l){l;#
z4K@WQN!(UALCQ)&P?u}vj@CN<A^`47Db+7uByP%prgi@$aS&cxnJod&638QVR`5^L
z)#tXXpS<Lb)gUXTP@GSrvu$G$fQNr`d!Xix_hWMO-LxO+ZW??mHgGALiHS0Kf&UDj
zcfX%s!;0sHC=M3lQZJ&Rv6~w{!kDi9*vq!67KKlhVZH*2n7bt(JY%DSIC8PM`C=Oz
zW7@W?l9sMt;xb=(K)t1}fqD8zceKuFg^FAGKIZk|&0JtIA(D&a%FgWh+--_@96Ext
zY^hS^G~)OR4VZ<`Ka^8YJ+>B?Jrj(6v^h_YB)Swff~Z&Pp>aS4vBpT}cC@Rxs$y`T
z-@cucl~3KW>=R`MbPV45@e07;UP@1dFHhDedCtiHg|`+{j<2LVlG$#jfI-w<T7!G=
zBgWBB@9T*Nzq2QsDu%~3O6QyysU4y<p{y<7Fty>sa%36fY&X^3Cv(KyS6BS{cdt<o
zpB1*+G%nVs(02FOCEP^vTS9D;>|$~%AmUb=2YdDLnlRU}!I9N2f%l#bsuvl$cx~>Z
z7e}2nl`03m4KT?VbULryXZy9oIvAx)9I0#l>F$Lh<p~PmbIw{`=z6x7V?fuF4dcx6
zH~WU{{M7MN+@_>i6I%V46V&HKpVzC>8&^0M&O0`<FmB4A8NCeF<h*RuJkC?Ueq6Fq
z{gUF2p(<<2=Pq;VcRSj%&!*yw@nc+1ZM)pK&757E`dmvH)*$oZrDMA)=eZ`|xxOKN
zYW%qq`vzBSzA$HkTJvaQ-OlaT)^&;8lz#Gf=IW=f!(X@A`f{%2-NyqQUH%>VIQBv-
zqaX1<4)#!7wWPP^x`K<#pA}i>*fjc5v;5@THf{F2_{YHaVWz6@lA}{Ll_ofPb$@@c
z?$(g2sRt*1Z!k?K=4HdAO_>9F+)=cgyx@as?^3^m57i!x+1{|>P8W}w6&Hgl7j4Q6
z>FQlqttzL%WsP0Up6nh`_BcYdFmb!v^FtMmn*+z^bZ&m^tF@Nb+7-rwGjF6?J#2EQ
zsk`^Y??I|PHszk|dPniPTK@cQJ16a*0AzruSDp)SdZuOPCgrFdXfk;}<g$;i2Tb1o
zyGB9$e_$2u?>+v^k&XUqTz(a1uhFQ<`R?4zJ}&o5NH)jhy5Q$z7)iG;Y#v%GvCj;{
z6{@yG`T4+XI#S6;OC!2A1X)+sLxA+-hQ{yy*#PG7JHPxUP(uCGN}bZw&aGRIV*!cq
zZ#brSc)Fee@Ys00)pV$5XR}vpGtmq*@cUwXC;F3F5c^b{PMzGc?ybQpEMcaj&1fXq
zHQ9%nb-~O>Dgncz&Z)+&8(v=fplNwq7=;{}CWAHA)EbU$`Nz1wy7xE-hi|=_Z1SD<
zGV0wHG62e+U$KlLB^Iw+M08&L(*?_bP`{u4`U3nSaSfI!A{lxzevC3L>#MFEJHpZB
z@YC-O-&Z^4rEj(lDjtC-W77Uv*NxGhTlii6ROVu&95QZ(iIFl1FUaRY?Tz^59(c~7
z>$?`!xzKN7QTX=s!f}3uieuMZ|5=S3-Z|-IvfG~lLBoz_XrCXocQJr^*6;0DbY6B?
zh$d=t&&g6>2_QtldVbN4f$8rdu46GT5n?d*k<le8E+*bFlZ^>D#E`4{48K-p0`U>b
zR}0JfIVEX#O3d5+Xz8dWdn**OwLA&m?NIe@r&;kvOTRw*m3`m-G{126kgJBZ!T-1b
zlkIvhc+#Q$OWWZ|#pS1`?$Vh3L$!W=-Q2471*W@uWE^vP`90TUg;VN;edoLG`!N2-
z|Hsywfc3bBYv1PC5;A2db3#bwlqrPJB+_6g5t0x^G7lMxBq~H{P!UN&8KWXf(lUf3
zN@$cw-|wom_xHZX@$Tc;d#^?7-}8T-`?>GyI?wYu&x)QIkGI(jKaug`+2z<(9{rl!
zs(#o(;q?2Io-6+GF+4wE)3rfHQ`ZJJx@@rEdH9_8)2D8=HRwM5@%=WPL%YY!{q!qt
z!ZW{7FZ|Dbz2?wzba=vn@RZkSK_5PtDY{0C{?)t9z_z7VB3F&`Y&U1c`r;4gbv47n
zb6z+t8Lj!lO7me<<jO-IHxx}xnzz$q@h{6;S+gIsjhP#J^K7T_b<R(DpQtl)eucB5
z`&SKpyD!W9mL~M<_vdP+ZC0DMeTskRcQ|EVTKe0h!nXYQi6LgNcRQ9n{F6Q{=yl~3
zgH3g(44iyQcea7goq%D1YwebP%-Y)BuKnqcnjQK!OYOQ~<bbJ@Du-TvmKEGBFwn*L
z{*;R@SB^axRyM%QXtIyd8NGpHcO~!lUOK!&BeNo^i{JH6A2h6-{1r;#7oX|gWSi24
zLgu;N3D3ac0(WlG$=l}FHm5sJv_5eTA_YOo4ST*P;33FG#=F4tJ>7f2r+9Dbik5)4
zYgda-h9O^m#P;!}r=nn|z%^fJ*r!Q7@-)y+z`+P<LR3)?CPA^K(7?kBsO~_?i&<!U
z+qS(6O$Y~b7D6w7Jpzp21x?pnVvqsLFwiaQz$M@Eu5UI_6g)@>MI>Y00VsfO$}emk
zJ8{B<rv+u9%hry{ZC%3Ti}>X&y7YrCa?Xj$?~!wZy|csClx0XZ=e$o`!}ZUbi)SrD
z0md}P$I!1`8ve+mDv_}mz@lG!dm?AqetU~b6Ex2YFU@_3ox$%y1|b;6%-kQH8u;K;
zzxDH4v}~EnEelpDKB^OkMg{4_5Xi}0|8$kc6833!&O!5*KYbj%`K$zdW7YKM4RjB%
z+U2#c`{>bT7Fwqc6t_^fZI*`!fe9;%sD0x=OW70`C;nNi#NYwu#G#u9C2NQuEaxUe
zvJ=M6RA>M-g*{B(Cbz_U_i$hmt|w|h*vdfFW(0xUvx~O$+Ss{$`(02xIsj&g8R7H2
z!KgT;tA;mEy8OB6wgfg7;l$+p1hT5P>H8#5U*N1M9IR^X#N?Gu%g|!_(4j+dv#qw-
zcN`6j!R36vZY#>rX@HtmFCSj#$$iQ#(QLNs7skv<Y2mA%CoZ;ULRs>2pv06=2H|A~
z_8h0SF7{)mBdUAWMm)>P`{byk9=We5?7`6WCFYaH-?O_I&{}iA+nD2t-eWhv=-A_Y
zTe}v4wtoJmUzapIIjP5m9x>|%ud$d|e~sG}56>^1FK*x8qy6@APFwfqr7j2?zB}bi
zTkSRb)2+O|%<C4_d}hDT(_==eu2a1dVLPs8GtCPTci$Vnbb4CYcKoF5>{S~rv`zOU
zpEC*An&WIaXXW}}n|(c2XuS)lNWCAUTCt;BOrG%t&x$53O?pNTm~|C`A^*Fhd#`d^
zm)VL|mH#eWQ#|kL{jDk$<_oS58?xx>zAmHR2S$zBt~w#zY_x{s4eQ+B|LPj3#LfON
z>CCy|mLU^w7uG##G$*{Zp@!?qd6wTiy6heDy?t?2pHs5~GMlYkzDPxTLQemJ9$Bkj
z>KkN*WV>DqRrGtYUVmGimHGLP)DP=D9$of9{c7@`>zTTR9S4r@Q#bP5VXGbs*Z796
zpR;w6*|DED=IBH(j^1H52|ebA(u#w}+F2=&R<8H-a;!&moZnZiuR+V(-nE&(`g3%>
z19qQZZoC)XY?!59_fc;S81$VTUzt&~@>UwXBua1L;z^%;NA3R+hd5mW#bE~)xVT);
zj&O+$De-}ov#P3QevKrs3rqS_%l_lptB67>wCz;#;2EElRE)0$!SiF(Axy#7RrEZ~
z{?dE?>9dK9L+|9=5h1Gx)564*sh`S>mBg@xs+J;x8cZV)y&t4Mo%Pi0$fGslkw+(5
z^?EpqR#Nv+;9gTXRdx9p)FcCE)wqCeF*;JpqO+K-l*xZ7Vn;C=o;~}pT@Uk4{C2{f
z1uhA(pT%W98S`Dt0ek7mG!hh|a3-9$W~YG6@w#4pJJUqlKs`olR0rmP094{F-q3Tz
zyJbdNF{E?)dPlF!<)F*r@xQHL-9VY5r2>d8h=_~W`?<7wT`#>wjNl8+pKr@MXwAeQ
zzWT`Sp3iN>B(FhYA10+?t}!u~zVmsG>AvE%H4-zO-?TDn13ss2vLB|@QmAX*E(ZH2
zx_(QtFhZRGB?4+DQ(<8FAm9WErcw2v`cj{+8Q-PB_|p_ASTh20eeJu2?Q4o_V}LTW
zdR&IF+eYkBK-^RN^@zsKH~MLR$rq+m39FttZQ30?b1?gl_p27?ImRz7t|%BCMA`u1
zBwuB7PBBOM%h)x2Il9Ly>Y}T~v`<*?$cxAA34Vf<$Ez+{8EHfO&+95p7_-|dW7w}>
z8!bPPjZq$UiE9`gxAeNdgz0kz8EGRLoqXJ=V#f(FtLvHxxJBhx!O(fe)hD>|()PjI
zwkF|`A?(}SEHRAL`CHLb{+A6kfh`@D8Y1D`<rilmiIGB)O68aA-~6bNe_hp4qp~8O
zP~n_KWm4VLpuudTiB{jT1GN{sHAJd_;iZJq4o%g%%Vr#5rt&iRUpIThz@{t1uG*BH
z$=G}<?uL5Mg_GM<_w1*^A5^~i_L1aM=bp~nFh2L~afhBBLH*;8EEv{&f9&I=&kY-<
z%(u&l?!Iu+Zg<Vdvw6Suoy@y6+&*)G>8{;5&TaM<{XOBKnoy$L!Nb^Scd!0Hr~yV3
z>z9RnQE0F<J7H?J(-O;HQOC2(M~8F^%w2HR+tsI=<*h+SKdn<w?Go(jT7Se<%^_7M
z7Y#pueNVGz4(ObG7wye!v`eA=g~SyKds=2jIeBj%ajWgMlF>sEH+B5C{~iF8lFzT}
znZ0;sU~T&HTK4^cD<Ai|x9n2KhW}=a80_YAU|@*-qC2|f-HNsZus;+TH}V{M?M&d_
z+*iIWP9B-{GidS+&pV&$tDj5vk5O`KG|S>jXiA6E#&f1VDqXO?-_g;V8qe96_VlX%
z)`rO|R*d=FM}0=GVad~Hdfa<z+2NG;{GJI$-`l61-gVG$_Z{GO7~whTubu2ye60MW
z{@}*^hh>is>^QFb;`{1FL)>R{QFNc#Q(;l-FBx}Iq6RwoyF?yVxSZgBwwvR=UJbTR
z+Zo_!H+lJ&%(p48m8Xw9me*T*Lh`K{tq@jqP)rY6wsLGEzb)hY8ee=GtB`hCYsQ~z
zd*b36J&W;MRqx-hogOA*y6pG08kg9se#7BD?1Haf4cueraqG;2Y=c%t@dK7Dux%c5
zWtc_CMQyh+Xd@U}WDmGa3ZHn|3o(cSQ;cGSOah)mt~XUrFJ$edVW`dpKBbH0r9Ok?
zzeOjF20seTWW1OSkxWzvsJI8rrXmk)4B3}z^IO>6)c_Plz+@8kjozE#@5T7xi0KRO
za}W0(#4yxIB5-6s53?zaJw6Ll!V?Ld!@+kU+X?TO<c;8-KjO{WwlW)xprr?tBx<H8
zU~z#a6KuPQ-6ZwWbIq$>8IlH_$NusOPS7~Sa3>1!BLv$};7#LWq6WwSGA(uDIlUve
zKQ>}tmM@G|ju@Y!S^;5J2feUCk|Czr%F1xNizQU#5kM}w8Nd(hOz!nOq~-XweAvmy
zuh(T-$R{xD@$1I1Ven}q(DE-9UKV2xxz6R8>Nw6GxV=DyYz~~iPT@0vb=edMH__Pw
zOMf8AI1n*CSj~PalM~{d2q}FtO>ecc!)tNJ<TGRr`iVA`&xTwt)1`z?ASPv^;!Wgh
zPJ$8!pi2M+Jeg(Ta~aIGhU*hs1>>+eg~~ef%o#rkP)%biTE57%Abuu1v-ry}bqbBk
zh}nf86IYTJj4$T_V2Mq1F`p;{w+w0nuQ1bVk=uWyE~O))(9vMS3)oXRGlo@s`qI1_
z(NFg#^$=kVz?b5K1R(N2Upw4wDatqrSjKAwh1w&ab@4Cc$)9IBSL^rJ%i_==)+DD+
zrNXj`4|2OT1veDYl$s<bz^I7p2r4xR^@W`dVD*WS5eul8{N0d#xg1JW4-Byh;b9`o
zUI3@vWLpByWC}1hA=lfKbV#rDxpT*;q#7Rk2mHMTge;yjV8PvS%aLJcR<ZxOlq7B%
z(TGf{ho*I$3);TBo68=K${#d->7?Z#GeGE*htreM;>FD8cLF93QquP0@}ChZ@YeOG
z1>>S{yaEFe^I6f*c{7}47Ln4z=Ac@l+`VM|s0}d~=MGk5rY2@YuoQAZ*7KI&?IjCY
z<~gYUjf{<JtYoMooiR@u^vi!+>NH!7+i&0iDtX=<wH}_Hh6~SP!@iA&CTaBILIH2f
zW%gyJ8JO(Mv!!Y`8`H!e=xwd31foPGP=wB4Fhl$q+j_!<%38xGcy_ya>WxU-z!)!!
zECwN$8PJf%Hr~xm^l9?dutlJJ5&nXM%An92558W|v<R$9t?~@pBAI5<MNXaP-Nw8+
z@?2EP1k?JDIokVL<sTY2x;av#R*g50oAbw{ulL7Ag&xu8+MOG+sz9r_Yu@lYwJCk`
zkFUw;lE1^s=d@N<!!}VZx^`9?@}=Rn89g%2x`voDPH=BS*OtpaJH)p8r%TD~eB;mQ
z4`$rWA3b2Q$3J?vjIT7ld{Z;*?D^@7>yJr$^HFj7+LbFl?!9%pK_}N%XH_eA?0cx-
zQ8ndemz450T|*bnaO;0yd1bdJM|9iR{Ij#$;~Af$&yTi#pto1$?9{|_M)h{Q33Sjj
z4X|*n|LlxX>FBLj%UbSexcBRmAC3d80?dvcdlu6u{q%{*P2;!Zdnjo*_KIp|4Pk0D
zEX}(taOK$gTuYac-^L$nSQ$M6m2t!EPdd!cxjuPvN+XZ@iCSH>zw}NCSa>Hv0om}W
zb*ooAZw_eQ>-^L{W0Uu7Nq{IWHQO3$V0Pkp+G33+S3+!6&QI+zG;`nhz8ayYyrzcj
z>2-Hq%L8CokL?QfHfs%K>X&V;*fCvaM|sOl$J#*e?wzpLsjP)vdDn(pOIHjsnGk&?
zB5aDnf@*_S9I!@_Ck}qp9Kl>l%++B-17=;cTYV;@$y$5sN#}QtopQta<AxAZlhkWt
zF5KJkE9u3u2EYmLi|(9hizND5*uI^^%UURUsa*+Ml@Q$FQA*jOAx*B#d>(emu0dVT
z(1MUQ5ewadcHda!6QSR7?F@~2^>~VZzE%4$=D|a?Q0lbI=XB(A!%1}=_ia))AA3S+
zNdBy@AIlT|&KNYXAm8M6&wC#VtP+cFoa<8ZuDnv?+iPdPdFxyqueZ~f>9Wjn%B+m3
zD|fc-rrmGhuzgoX6`EDs_0kJHtZ_+$VPd8)PD4-vT?598O%`n(`d+*nrgHqCssZFC
z<4Ho7#f!kRmte@KQ)#*-?t_vXmw_4J`)qQH*%<BaeJkE#3%w@uYcvAN_^sA&rIj!+
z=Jhs}CI~T@og2sQO{U;gvs8fHnf_W|@@xyrTt?BG;<VMLU%#d(5rA?-Xb;$H#7sEa
z>_4-6lfHGZYwL-zDkdz<DG7rGnTQIh8`~L9OAm<x<-kEhIeFOpRZmaXC2_}^OJQuW
z&X0z%am2#6)@_YGe){yDJ$g)dJOF#&8Tdd@w|2*NAIyMMBVJ+|y90x0i_!)}1C-D|
zKjJ7BjbxtD*Z^5jabx%-W>ip$q(gJCuv5w1$?%S26S=Y?%ahS65}Vu!5<!YDn&<o-
z;$z669d4-Xh&?2F3kbr?R!?<ks@bu{X2Qh^@J^qDBBPx77mTLO9uH`s?GZrrE-oz~
zhV<ORmS2CR>fQsdn*c%~XtPa6zkj+^6YNFqFhe(xvpCO7JP$=gRsJ%(6P})_&kgOO
zy{Y4oNB1VS8VmKohA82(NF!lCq)6a-8yXp*KO<e_C;*4W#ozm9p8q}n@lBg~eXzzK
z7Oj1<`qqHt8z^eo>4H1?sVmlmB<axi$9^(wTb=#|Lox9Np{(aAiGml~zCZVp?%kUt
zH4pswZSWB`#*by0RyxZQ7H`3OggK0B?{{@J&g??}1LQMx#tdVNOeln*L)+p$&FKKM
z$N_=lmW<O;jPZEFvQPQjM{oLiV9y>rIMcCw<k~UV*7fX#Qnw+a#F9G8H#4+Q<6klo
z9&mn7z-$dEGG+!69)_}6q&i)z6GlWxSHk^8ioW}eecsl_-6ZqFbYMw~inmq+&8~>=
zjD$Er(TjT=F@D_R2Ak{^5R2si31Jt4lt9vi0cJRu1qS5{fIPvRQ<62T*!GG;-wQ!3
z2LsXsK2L%wAXw<AkEngdSL3M2708{X*TK=p^Tf&v@E?><gs8S(w>s?E(wA5QalG{$
zKD@o2C#zU6FuOi6xU*o|qGxH@4N@BT_9=%e9ZcAR-{OvpiH9xo=w6M+uVQ)gR?E=e
z+_}Nc27C5eojfoGGcxJ`(Nu^x9A1o!(unnqsA~V@<3}<F>D-y}-$?IyPGSdV7CuK`
z*Nl~uF+pR@7<{&-Gxq!Z(z7L(R}<JGf(hQ!y3bF4%`J>%W8qZ>p%>W|zaS024oTi)
z^>YJ_-z?_C$J5c8EKj5?kO(3FHM_MD%AqI{sbaJxtTVGiltv?hSI4qe83Ut?BF=Jd
z_kZS&qCVx0<<o)RZuyJ1l}?Yem~FQgj8oK={3|j@!07wpaYH9Ql;&P%{S6l8j6Ozz
z-{Xr@HuI~;<c(Y#9*|jJ(*37nwfcw$$zGF>+0YJ~B!@Ygro?w1AL~0fecYwX#}nOL
zd=V|VJNlfN)UZJxC;x|Q{7&6H9b39!y0?3;-|a8w?W;PYs%_fj@u*KHJ2<A~o>sjT
zfBCU<u1<X9*FT<{k{*9rVdHJ<7<*j1-=kZVz6E{r#{A6njn}YlIC9DuuT!%;N7*`g
zH!tjL8(!aA+33@vQKpj%*1Xx>|9I2i?xc)V)jMR_G)celAnRvyyM_N<q3Z6K<?$)?
z{;#A#)wj%3M*206ed74jH_39Gdw}`VeP7Ji1z+$@N*enr_HTaq*tU9}Pn;vxWaLeF
zHQlopRN(2q>(6Am-P-7&&fVBK?s8^5WNygueE|Kpu%1h*RT8qNId2LoDSKRU;EXBR
zVuyQuxv_3QEB|>}FW23&EnVdQEB@q~1J1cCjk4C6?i!E``55}bJ3tl2?hXN*@|vIu
zKX299{A<PLGm8hDZnS^w&996=$<!?UhRN;f8N8cS8lTudhiv$<fI9VoluGaac=_eo
ztvQqW$!kNrWy;vtHs+tBt6t4k%ni`6-5an$|4>{m+%b#-a}%rJg4p{2mL2b>wX$mA
zJ<z>Qmzb`3Z&!V{dE>Fp+c#;t;w1Z!_05~FvX~lN^uefYqb3UPviI`Hs}|R9(8M8^
zEw4JZ>5?sV>PBdR3rI6!4%rLH;32ZTjo-(bt9L+M6v&%w8t0yO&pxIE8sqG<rN&{0
zF<mT1n_t3(KgC2b%;J8XY6B5d$k6!h#P#{l_YzU_XXmi%8uBe|pLEH%4?HW|A;Vr}
zF`2pUQ>PZ)E=u`6^i<!?F55D8&oOlf9Hk7OxU!{vj^Eqw4H|gVsavmt+7$45^KApU
zW*h!7^W(R5Tr=u+IwuCni*Gkp4h}J=>wH8$dW7@%2Ahh4MK&TPeYhv#X43<_OXU1u
zQs3-M2PL@q?#sGS(KmL#W!>NV``>AINwHtwRR6>^%l&iG-<&f1q&}v))fR<`O%{*d
zzi>v}kaikb4VoyZ)Ty|j%X5qL**bLG7PtDjUyQ1o_PJWOUW1A}{G5!9+-_P{AL_ig
zm)@O1C*sP@!pp5XTp606(`w$as;FUpt-|MQG+EriLe)LsA{&mRWg#!r$#(s;_C}O<
z_E5LH?S;x0^Pj3U^V_+hS1ZpR-BnJv9`;#tbifRQ(wSc$zx%X(S^M-B2NVXsX{n%+
zkcE};$Sw!B3~r;6&~BVUgBe7+ZTICFtBm9B)ccdcNDPo6qkgmrn8cN(wz%S=&SzhE
zJa@X;W~IK<W}R-Wd9Oj@Q<bQ?e#@QuOzm*7MN>X_=NZ*zXcxSb+bK-0*Wg-<2ICWI
z82M_0nlD@X3)~vIg{ZcXUuCLvC~^DU_p^K6YRvk&L#=T+>(8OVVO(R)g*2!b(_~K%
zxl4)NlQlehVTyLxW}g1D_WZRw=qmH%=hM$**wug0ogb?G^z*G1bpPj{|Mw58_3AlS
z{J;J*V5)rK|NhgOe|V>(H%^i7QhNdadrSI0vn*^TKbH__*v-0KlLls0jT!CProtf>
z;bijvf5e|DO=~ZC3iqNWt>-{5JyrKM3X}exIl8Y$b?RHc!~)~UL)C8K8~^?NwnS^e
z$*V(*lx9q+@6&m<()01yj8^u#KVEOtwEF$_PIcd*(58pS;gBYy_T0?cKDJf)hScR%
ze}B9w$g_X-)%xW%|3gy_t-1d5dZtU{y6o`x*CT(f>*v1hzN8Q=7(BIJjfXn9KIbr#
z|8RoahY!d|zb9d16<2p+Du@}DK1c2qkRypLpjS<3_b>t%7$$Xydt<s$^@9dB)?2pJ
zX}Z70_GeH33B^ZuDwy~OEo0xBHtu7i+2!*#YWeeVwa!2FYb@ZCAUm&_M}&=Sv3loG
z{UdE^TxmWyihWSPG$WIC*ab%K?jA9i)Y|p!|L1ST06t(^$p)=rhfVd<H1(V1H><H0
zN}j2f)wFx)mE~uy?g*;M%HZ@paNy>@cVkae8W@}O*3!CRn2c8)xz&u?;y!+yK*>#;
zHmQ|a5;x8qG8Ww(J63o<_~ID*qpYlI`u7?uAOZ$zu69~n`>07ku#q>4o58|~gxhrE
z$h>pQlmKod;*#>*hzSCT{51dJipoP!DePPkK49IF0~GNd6$KTQX@xe*Ezk@xT>znx
z@i#<g3kMr(k1sN-_*#3LqxH8DYoJzW_F2h(_(@@boVPbHeMJ*1*cOhGqPSq#p!u!y
zc+jJfJ4`4sz84(!!^HC%sF*A&ck+$Ts!ogji9who8xtP64@30cz1i+Ji=~o0QuPrv
zKBdmc)Ug+lk=-Uuo>~n;9S@Pjo4xqb+|tabs3=YYEQCmR+xcv114&t?(_l<iZ~F9!
zCML8g^|z1?%iIDFebJ@4zz=EXW%vuoVTjL-St0nVBDn-k$4o?~oRyS98@J((B5fCu
zk5e2bV+d{(P`}_(bIYH{#@|wv<Z29LP=g2*e#}LGmJF3+yhn#XFccHcT2-a#ns(3k
zRR4~z4tu_O?7DnKdLbcE#dmHCPNo#^3FsNG@yv=!O8WoQW{Q$AK5AV_J7l0R#_(0!
z+T}N`)>YS=m~V<6DZ24sz1D3lf}~L*LI>3$nL}Ji_@eS8fTVzwI3n+$n<CuRny)LS
zhOdFeH<9U%xJUyD5w7V#^P}hrd*e|~mqIThj=or1BosOgW%3jGV@I9MS`K|wqOd-Z
zSj?HeBe&jPbcVi1z^f~$WJTH_k+vMA2=6~Y6W#x^wr0MNAYycndlPdOqWc&0PNba3
zK_gw)$GzE)W43r{<B{o_?ah1#M`X>k8}8DKp4NNv{7djx#bcCjoW|7TPpwENki<_2
zjm8q&ak`bt2b=%V0!#&2!+d6B9S8-tWl8_VPndeX4r$gs!Wk}Fa53Q_c!2Lx?pBNa
zIK{PiUSjP+$Av9H&4>%1E@ZN}X8_VQOt6nR!WyRZ=rqznMXWWM!;neVO}Ms;h70(y
zC~f+n)mSm!+`K0=6b-(ivGKV>%cy|Gvz8H4p|S|2o&ZD)d>V0UZ0*Pfy`e;lOM4{&
z2{Idiu7mLveuJnvC8?8i(~8PU!#JmvGF10?N&P3*cJcs)p!WS9a)Hs90qv*9E;`S<
zM=yXOmAcEDnng3gxM58k!l!xRbN&_`a{D3hr>ExxB46+g=}w7EOlSkTL!omRW}(kN
z$FJwrfaR4x03|z5+mhg;a+fwtyfyvTc^p2xB|udyDcPo!M%eG?wH-2q5flr1Ey_t|
z4&N0NB%=f<`+AU^8c7{Z^6Kx5Cu|)iXQb&uy4poqSs63INBm-8sqy2(t5CW=%|hR@
zF?E1z6WJiZXwUJmB?*8h!wgKwtd`e1az0~-W*>(r=zMy=VLCNi#l2y(WLqk@BhUk(
zXlUdDnIC~N+s;K`woAMaceeqqL=<WxH~cvLSDP*zM80fWgtoRegNbkYD~J}lgf_M0
z!@fa|5L7k)%b$s2<@Bak@7P!PuP0+si1}q@fyj_Bi9|gN3Fi>hO>gbmD{nu%SgI)j
zQg(KsrXE@D^?KC7Kau0?B4fp(00u`#69ZsSyr@;**{eNXMb&xy>p_jVUiW*^<APE#
zr)%CFQlAVcic8s=@OTiRB`Y|==W9z76NbM&F&|W^Ln0-G;JX_Z_Gp71BIO;&g33ax
zEEBHeROa%sjmay<m%PTMth`wlJO-I5zILr5;QA%wUSz0=R)-lKYP)&h-$?Za@w?rY
z-^7oaGthDIx{+N-MXU}VP<upn53Tn|0!=#5P)mdt$bTb5`Z5E>(9joM?c~wvvhT6G
zxZKQKs_Fl;t_~);EEQ2dFbG;3BH$sr0AToq*TuJP-D1;a<Jz8>^DJ{EKHgY5s;UN?
zpFa_gO{^sE;;SU+Hp81B&-trX^&Bu@#&>rkMqA&_NazbZ1O%@3X4~A_Lq4g-dwyLG
z=r^`^63|1B5v23*uFr~A=hGhnyioij-)N07DkXGjy})*&b!PDV#j9Kfb{=ctOL{IS
z2+NAO_P?keq;3~aVA}Ynnl1IyWyP{D1oGOuh13asRd{QGK|0q-rqyFCA=pm>IqbYF
z-8xYn!nsu6gt*{47QwmXXZ7G%mcap3*&m2wicigT^c(SNa_zN;P8Ap2%$68vn#I^Z
zhUrLRE^QVz8-HWqROmL=iwQ1kNPJvD?SZF;u*F9HtL)}P5@r!3ta$13Ue3Uz1EY|S
zj0~!fIBA}62Mbb=5JC&Yz#p&7u{c*z9Hiq*ioUaGT1?2m<&QQNf7GLK&WoO9+nilk
zRFq7#3z{w|PT|!n#4lK~@(9yJ+XHeT!+yW$jW7Uteqr7bzy@MYK4*k=z)u@=2WFk&
zC1rr{b5Ij*&T+L{llj00O_}h&_V0FbBiuJ=`LA)>5F&Ag>><JcA;_s($EF~rq)nT$
z!+7A|U9Vof4S*Dq4hi`Hj>NHmJa@Ncg`zM=+;v0<DL_u+@irl&cmdQdtM}|OC6*l*
zXEexOi6J(`2~RlgM<M5%H%~@2PGBnV`OQ-73V1kz^6@l3zrt2n5r;|{<v8-_-1>N#
z^1u0D-Edt4;RE?eG2EAImks+F9w6PIF23$%E@Qzo*=E?T@NDN6Q4dHkDn187jsXrq
zZhXw}6Q5OJ4G}kw-FR;Q-S;Z&#|-T$bm;KY+x@cAfd|cgn%1t0>EoaE%AVK6U}sig
zdGnd8euX6kZRAL>e7=Fxn~<%v@BNlr73AcsG3Yu!X=b{2+^gwXny1#-Tso>BUQ|{#
zHgDvUOpS^~K984h1J%Ebt|{bpjI2p&F*)(7Feo_qvt6r+<_+uCt!tQKQu9mA=NK+E
zX<`rvh2uQ<R^3i5c1{2HOs(Ddo;9__u90HkoqnA^RN7pc`*CQ8n#by0<AiQPu-1*>
zO63p#TJu*W?Q8zZbVmc0wh7kC6%`dzA3SUcXOGi!-&2=syf&}(IQKM^8lS54Qr3##
zP?zZ4J=D)cEi?4&{$EH{ubN_T)QKQMz>qzI`xu+(&a}zwh7hAe8a!j(iiU(o^2_e!
z)<y<TpJ|oZ*hj6#{<C{T`!DNNi3WOf_e#w#RQT}yu(?f5-7o*=_2K`iI{BA9ojo7r
zI$9JCsks%k_hWSst^;9X8~yKpv8Vsc>ulCFzmasPUA>0Y__fyj!Rm?sr-!KhRIxt&
z??>;oe6%*YvC0mG4inQgjZGRptu{68iYKS8!QhU)%GGN=E>yktyK*j`e7q|(bZYqL
zP(1_1I$*(=hab^XA5rsZ0r?)^$T3^aPq31FXXa&ebFXNQTX|w)V=F7Gv2$zh+$0l~
zngr$lt262`Z$NttXnPH={h81fK3@m!2rllW;^@kdA|K~dTze*kwvcNH)$&g6UDu;v
zNBWnesfIOQ#kiAvE8}IMp=4P`mJhzyJ7Ag8Kf5PJ)!v3lUh-Qfd3`F{a4z@Tx(9_$
z$+l{>->yN;CtgXK87)Nyf?U*sxi^wYyoFL9x%RUH1spY$rTaq5BfQ~8K{Ld`uMYSB
z2a1rP>%YBDzO_<5LmpLVLhbF$Gs;>fFQv3Rh{6Nz*q{`ecYSR?hGWhJ2NM;34LYEc
zhIJFMcQc-NYY8ie%}}4Zc<a#do-&SwVP*1l3;lHK%G%;FxJ`}wY@kKb?mTu%CVIQD
zhuvpb?7l?Ozz{=OdR^~b`)prtk)K}u250lL!NGgj!RSu~i)3pOgpI*mwo9geo69AU
zEX^}|N3sB_N3c(xEiDC|gr&nqh))UI#95aO5zjiyf|Q33>Ckct3Z_F}uy0e;@L9Oc
zjy&?1kq1ffgOfnPBR_(shLWc8DirQB%>%)~!OarShN{u|VQ|E$H;%vOUyuV?Ik<uS
z;@E$?(5Y?f*5h$#%FG_7-xD;J%~eysr<Rs4SKXq~-sqaRu|3Oo%S)W;7j^mpgIm0X
z9LUWugN=+FgtgZ4dE{3-vQAU}go~HVBuQxKk|mPoi@vM6GBbWDZXP>d@nsee+aX#a
zt_Z$I1XJSCfyfHdNN8d<HvWY|d^aex=$j>XMru1uX_#A=GwHR{tCgZQruEq5>KaSw
zA^>)iX3groyZQ6&U9w=I0~~)FFM(Z>N}Vfd)4KKTuIpdlroME>>6CJQ!Oq{F|Mg59
zQk*@UAw#g5=ge>9+w`hfPEb!BIevUkfU2|))ULkp!4vECta;`iPIO-%LD@Nzc`FKt
zKAgz#%y^wPPmpO9J3BQYn)y@m$%`SCpK{iYUGsrrTAFZF>0$z9x%rn3(~BFZ>HEL-
z$Fh)?RXBIdFtWu}9vjW54MmI4v4;&Zojp52RMjOV<d?i%AgSyO{DN{*CpX-3_x(HS
zLb)mQW+E(k2KfHpSaD=z0l?{}WAp8AQ<klnAwYn?mJh9%R1{PMBRTG9d3no>uMIj8
z<N+y&9E5MR1mh0O31v8+6S58mnJt+?ET0m7LlMG^)?_u&k?T#J8vOD6f0b-TUr9eK
z5Wy><wUY57u~<aC>YX|v;j5Cr%@oHS_jdhNVI}b+kh1ak4BMHzS;+XmiK+#iMhFQ!
z&`aFEdb5p<Cou_r>n1fBZx#@S<W<dIb+g?TxkZHBfFcx_{E4QOgU?dr^<sjtK?1^-
zq}qxpJyYBX(r&qKgsB-m{1`>aMd%J8Fz_nJxagttp}Ra{LRj{98oG-?y1EK{H|n9(
z-`ctcr70b0kXcU5_}j=sVtGOzUFIWDK2VBD&|MwriDkHwZfZ7jL{-OYa}*7{^u%ua
z%~Q<-l3R@IMT5f4o>9rj-6aU(Bos@sp@bfR*r9Z@ra7g(RK}c*jswl2ST2d)fJH>T
zKNT>cP6gwub7SngI`rA%z~sFnUFjOB1Njm%ODHC3xWK)4IGUXFqogFgU_Z?rBL`Fk
zy@w4mv3js#I2QlGhsJ_BVN<#0$Gh?DnoXND8ToznY!fdr{HIQBgYR2>HwA^+Aq#Y=
zWU!D^Ud*mZ87)_XXFh<ycv?nSrKj0M1g{i>1^%bjpj)CkYI?I>_zMCP0o>!GBs?Xi
zHg%s^ZxGW09+bp7VdcmDVRMtg4PkTm;!sPtW_BW^Y#Rj95295RI(L@vmtToGe{buL
zcyq3UmWkp{CgEXeW&D<{MQS({T6p=RI_~h*AEXF}f6J`CZc7Gt<VM^j3za^3Ll^KH
zr#Op9o#OR`mcn#1+)t_px9y@?xTVqh7LB%>9<EKU+_QXZ&E6+TEAiD;t3c>BaJT1O
zUE$+j*ApE(&5ewT5xbM%b9yq=BR3G(3gfKl><-u-vooxzEL{d*C5}g8b0g;fZz?@p
z!tywlJ;RenX)r}E#@Q@35cmPaFPQz2w~Heg1We7GgOo|Uuvr<gVxa_D#Ea~GE|7uW
zA$U4`|In6s6&QMT@9D~iUKRF%j|34b`L?gN=rP%=Xx0u>eD+tIAA-1D1mJA<>TfDM
zAYdeN7g7l}S68j)9&8z!J_D(Fv(qv6-_U;zx>?$WUxvk~xC+VG?VLGtcD`CS+K)Zs
zbEkG7PPD=T4uytVCVwK5z{_iA&@$fT&6QvJl0ia;SgFAti)j+aI$I2+5#%r9*qN7g
z#IR6JZFJs-q@XgEl?<Jd!p4_9e0X+<$|D3wQ=xh#O?M0pC!HZL%2wjwdD%f6i&^jx
z5iB0*i10_HuU)HGZ%FOQY~Hj62l+<jIT+3f3`F`?x@WOB6%CX4zlxg?^*194snGNj
z!NJOUoR|4!+$_XIMEU?^2gui^ptDlD;3eUAyrPmXGW=vqqz|a)w-FDx<g&BA^C(GL
z1Cm9GEGcM!J_pe;rJ+-H?L-%fs8HNx>9r-s1PDi59Bx*9!=ec^Q$&W9YyB^mp_fN@
zI2f7lxA^MK+%zI%26i|%%9}A~Mu|R~tcQzI#|1`V3t#vL4W<U)o$h7Fp+l{J1yzO*
zFTatf_g|&-VC2F(JDQqqWGNW5rZ=T?edoxG0Z)h%aSAiLlnv6u!Pl|DisBJXfKW~7
z1ccwBY5Ia1oOHNzmKy~<VA~d58ZZhC)*0F#*~B>+POW*xrVX?SdI}&o!Nf$qABfLh
z&<Ac9k_v|8Ct_d=18#$21N$nOXoutt&diZyJPE!+>d+fN6$>3WocmM&g&EsMfHaVo
zZGW?DPK#Z|dT!`JnEa$Q53pS;PBq+b$>5g1XE~1@>&Lzzz95M?V&cjEjIl{7i%xaG
z0P*9J7OwIN^AI}nU$7gnElK&q7kh@REAmc6UQSMq(ZVqcYYY7dMcpG>w%sSS`{Xc^
zo%QCq0%H@2er7iy?Vz2y?d7aGY9@*GpRA4VH-FW<ec2)nl!Kg`B0fMoLK0kGUq?y$
z7^UHHk_pkz;e_uubPMUO?g7Tfz0NFCVl=7;=Mx^1Y+=%;auP1)&_zsAxb3&mvyQ3!
z{->Jy--C@h;l#<-{H<e6{AQEYfseX|z(mA#$!gGO`}=JxSDq=peOSXi;NAD{Rv|Wz
zmy|fy*RUz*pZuia@*11nz5{_iDX9E`pbxP?*~n6voY}==LI>x)Vt?L=>ub6b^m?o|
z5`l_XGI!IcR+n6kH4I-Gc3oWFuRe-43r7r^A3afh4o3u+E4~e4j*MM9sqTWMQpmb3
zf8*wTf04)a+VUx2+TkxWFlwoVPAGFW>8~F~y^7$1PiNN;bBLubhL@)u_?7IVmiO-x
zFbyVj1$V%h^TIyIK>m?C)SJ3no{w=;X-Ul6vPX#b*FXDTe@+UjU-f1{$J(c-?o~2t
zS_gjN9Xcc+NFS%w2Ryg@_s!gEs`tl0JY-?wc$-sXUif~`G}Zp0cF|^mum0-@9Oe68
z`$Vp7O(Zy!RIhP{_kq<2hPBqfFqQ+y^L=g08Cu)2&a*vr>!b0Ub-rEecr5tumnHq*
z-KK2HHQ#{dwWS`X<$wRO<63vU{&hG(r<<6t&|G?u(Hx-a(m|!>`@FBAVwN9F&b?zF
zQ&6`xEs?>c%iDVZsii5+laKf?K)U$Vk7t{-qmfL`^&GcHp~H9sMVzQ<B)5-W^0bDf
zstE$o=e%OU!OPM{Dr9OMd9))wK3>uh2qC$9B(6Kn-1%iEIMlE0;6<Tl^IY9qI<U_E
zwVge!A@|bzc+HKmC|p?c9n4Msr%NPsDWZHZ0mxqM2Gl?T*9@d0G6-~*^z+n=Zo5c^
zK9ty#u8~iD{j_$WsdZKmHbZoj{rY`bwQ?0pOALpo6yl@(3l0P=ds$ds5YUL!=cD5i
z=2_dFkb}<Ny7sqvxo&ujaSzBctx<J&Vc@xQ7hQil(JE(~rFxOVJ8{~yq;}2;h%(1e
zz${|Uz}t1cw-F>5iqF9q^<Mw*%4xJ8!YSedA}g+@PN_FZ9?mt7+H1FH<<rzVnWg>^
z^}}B$m0%4e&7}zl9T1VdwaI>w%VfJQpN`Nhqg{46u8W`3&$mK$$LDG*|5`OeZqf*i
z^o(v>$f{9?Z`Du7TB{}shUe5`SG7*J3!!SEq4~*2pYgswVTC1EReiO2ZNEO&MpGY?
zVdOkKUbgf5i^ivGx^4vRb&4ZT`pBb?!y+zcT3x;I$hz2Ueb%5qHp#wKoB2W3%Ti6!
zg8Q4t2<BRqS2bonr9MMG2}?Cm!d_j)b<oP)UNG{z%U}1TE>>rs1+U6pbm{Y{qO2UP
z-$Tobiq7CXk~g+npCci6QeWj1;eN%!ugo)`JULb3YU9@bWRPJw_8gz4xz2i0<~Mrd
zpBmtXJxe*RrW6V8QUfG=BQZjRTu<ikk=Q}e730w~m|i3DOLOl3A|O1*f?RG^Bm4V=
zE3OQ7*ZhA_!k?9Kv`bXQLRE4=72j(+>*AvO&8kd)GNyw>>JeS4P(qwCxzJ{!^Fx_&
z5o307h(R|r0S}Yo=&k9vD=YWy+xH74^A}tR(df6LD7R&`iHx!9=t&$>zbLk8mc>V9
z6H!`~R}U%cJb|H^!gfvMSZ7(J<n&stClvy$;3Hr~9#<R0W{=a&cFMPAhggbZh+`bV
zP}Fm)<R?!)ffI^Jlf)E*LUQ%)(>2B-H<1uA5qWVSNnbnnrc3m#LyiCGBDyWHe4&^s
zdb#+J9KWdAd`7JDztxSr;fo9F(<}Ailw=>}IDJS3le12X8K?v_fRp&NFF>=Ps=}dG
zYVa0Iiz(hBAx6L^ADR-t+}ZVn2`(t|{psNIQf_pF_u|XlD|9NMXCI1ZD2*T#k}QH0
z-%&@nmS@QEsH?clVXPyS-o16L5?SpV@<YyxEyUjwm}tTPR{nHAns#A+%uM&T&AZ=Q
zHz8e<m$BWL$hbG(!bb1B_H}pt?h&=y<`^a?Zy@%Oc9u~LaM9gC%UBBF@}J9|nxW)$
za&n5j-b~nP6qlPw=@5_|2UqMi8~esCh_t+U0$0l)k#1G{=$@n(7MpA-M&G5NXERe0
z){``ASO8ia(y#@f6&F5Ee~EM!hDxv=dc3+|9RebV-+>&LlwBhD6WO;c4yt`gNm-T|
z(G}Q2h8^fgvCGHzNDvarMuxn^iiVr^o*dJRRlyPph~Zc&;Sl!;S@}#nJ5H@StNdCr
z9l2yl(B`w&7!ok2`Vz4@GaZY7z(i(BAzX|F!k_Tb?LtGNnA5uTr+7L|+5;eqrC9k<
zn||O58$EfRN5Pyc%L|541_>zK>1HDa)wkW&NvvE6$3(X%{PvS4FY3?c(|9j<Mt4~#
z_vp(7k-<^ctJ_jTvg`0=lCg6czQE?fyYs9C3seY4z~jw#&8fF81p^Tv?t^B=*+(=8
zRCti&aO2`9C!h+=F7v5$&XmKi3i>d&!e9dafO|K$5QKsPv=c8X!H;5Zvj{qy=WZHw
zA2w`0ox;(hlU!UXv(0AF=J27|?UkNNeFGFB{NyIo|EAWz=@QRi&19OZ1P}>s@d-_*
zO5eVD+mc<hx`BoDx9DPJVuDeLSoJ1?2oP3xSh;lrm2_J$Ee0Sai0+GrorsnSr0TwI
zcpj#vXX()DxIBFiFKEkUaTF9G{Q3dmTg20;HyE^t@>6Ulu=r?%UPy+Eiy2c`Jp5$Y
zy7>dzi#QdC0c$$Qf}wP|umv&}&lrxp$gO)$e#*N?M+PP!{<=`8Vt6qd&o*gbl@2hV
zasbI^9Wm)+zk_+9nyf!q&`3}eR+<nZFgT5A0x_QJOe?}^^rNT<AozS*qAjdE7R?95
zH7am=hdL~l$?zixG0w9u(gNiK9IWCmg$3ggYsgfefuh*j()=Z{aF;PkQwIwaTpo*v
z?E7pqgRhf>Z3~QCcfd`$TuD_0CNZ^7YT^6n$6Q*XR%1&QkSL6#4`6p$o&UUF`S)z>
zfa`+Miua2c-{Ks?gnuVAw48_^fK<<NK@c`Wp-h|o3;_b-_(X;T+sZxAuRa-|Dney?
zy+4EW$5zT?BxV+kNeft~DLI|0p8by&z(CP|<F`@VXkj(!OC-+Q#g#%PT(w`n_hM_k
zVDLqU_jmT47#<v|Cia&MUSYXcps~L=@^aP+A&!B6o-s2MHr7`y3@Hnjb_qy@*ZrPM
z3UbD${$|IW$BxHfQy=@7`SE>aqoe`7X>H_oKU(UzJq5dhmWlNlo2jIGJf+6ockAKK
zUAywDb$9_K>;)i;m{K(M<I*)*ro@8myhVJ@Op0Cl%8?}(=d%(bw>0r>dJI}Me{spr
zpNWZyyCI`%bJjry5JJz3w)6U{4LLkxhSsX~4|twv2v)ql_N;#snFXgEm4sg|PHa1G
zu!PZVxC;WwZjOE+@ZbSNG7mj^V)(S-&6Qu3l_K2T{HJIN1^A%Rs*XTIRDJaSmPWdC
zF#si%e>=Bm1Q7MPtP``|zUWyPg1e0gO)~Em*v@<KM(w<-SmX3lQwxACt<19?+)?O4
z{{2pN_Nn@f{~_&U0-K$7;pBAm)tF2gSH2V{O8EGyL2jn4l(qNQxDVcZy?QkLGU0JG
zH<dO;nL+aFmaFm?Nyz}TD)86e@HG{I#z3TWTvnXC+D+Y!PxI&i8a-)Yg%xGX3XC%2
zemOHE_L-A@(2XDUSffmw{eUs&kciv&x3#{xa!s9Y52hsfKhKta1c^CM!zj7np6ePn
zZk*#V5-}Rc$LVECjPY5-b`Ak)kN0z*XKV~hBH&%FyYqtw57=P)-`Lu}Uq4bgW6V#i
zoH1j+c7*T&5Cq!4KDL#(G71K%I1v8y)zbR2EoV*K8^QAP@^+Ign3=t8`*uPtfrR3t
zlErxx<DE_Tqvn?D^y%~I#t0pe3#`iaXa6Zi{~d*44=u0R`zyy79E6Nba-CJLetlBI
z8$8+64g7^EiKEROGA_(335~uouwe8R+G59?(4}rW73w|l6+j$)rNBH4PgiZ4&q>R;
zx4%b|YPXBSI4;TEYL;0*W3R8@n`~YnQKVh?&)(0>^kxx^t(Z^P1JF0f0<tW$VER>B
z=KK){E|3d$ZuO8k(HSN;Jm~7`n!GYQ*HN|y22a4~5HUHg{JDZH3ycmCTIZ@^sNj;4
zaG>l89Sn5=DRw?x&)nR%+ZHYp*)o%YyMa4+vUH&SLwjD*fVn_)z-(}ReiHCaN)^6i
zr3Ri+&;@|)H0!dfk~tme%InUkfqcp%Yw5a0on)ic?a=1^in`CvZ=R!Qo~C(#^W;O(
z29dVI)#;~$S*wg11(HL2)ks{!Gr#N4Jf*D<+AUKpJ$p{9)?)hzw7q&Pd<<{`)hO4b
zrWX2o*f8`8m}UbXpY5<Vo_8@8Y)G<5aSk<1tYB}uXRT4hcwxTIrYbah*328o!)~J(
zd%G4vCT)`zz5V5^6sp@`EN#F^%JTOFEc;jY@sY<6MX9OsP=Ip)M}TJ10rwpjgL;;z
zov1X`oiqu&Ac1OnCZGl30N*pKf&5^G@u;_p?d%)XI1kRn{?@N0h=}!pqA5BTKmja0
z@qlwteWW&xbFC%bA<OIl8K*fB<ou@ej|sapncfn;<=E<{d%)4=b$lPAIRNYjR=daR
znna<s;ggT8T8kdkcJIMe?6so+%t&8@l>#LY{bF%a|6J`=+iyF}iyES+8~bkkumJ;F
zaH4U+mJue7SwCkt>Hc>Bd;;g@;S(o9tvYl6>;Z_k$H(iiY;p(_cpo0~7LDH$w1q&a
zl=*kq*ivIHslymfk)s;Y^3vR;%oDLs$$Tnse<PL`&rkLP00-2i>~f4@+H%~oC@-za
zn<)x6I>fANt9vpu#37ba@Y;$T5biJQX%pd82|im=U<Kw~a{x2>oSDo}sLc2}H_R$@
z8Y5~durC=vadTz;i!_Wo4SCh{pMNkV0ij8yD3^aBc^O`%ND}Wqzp6}i`#X_7MO|%T
z^o3g)9LN-GpExaZID=#sGQnq~H}CXCNFvaCyw&dAzhA`R=*@|Y7@MuyGCG2a9ar@k
zz9T)D?d4BHLyL30t=NoDeSY&Dr$y#E1q{pkIyeSfA+eo3rR~}gm&H0_T!3iNSKHO>
zd%aBR{K@+}VphKdgjCKEt<t9xMGeP>B{92zv%iSLo=!tqNBl{kOMurPG2k+-VwERK
zz#4|lcc@V%4jd9evUBUWeQA6gogY)JH@7WAd_-MIdwzEPv9=@n^t+<A<C;BC54+kl
zae#wD6|Y^6?4>7m!9AkVU`BUw%&W35t?0!@=Ur#Yru5Eo>JzE5K+Rg#iZ*y55CC=p
zIEU|HGKSv>9RIic#&arRR)i>3_!$T$o(eLna+eK*;(WBm3=O2rL=(ihbBLpd>tlTg
zN?!HA27?DYyc;8(<txh>%QHscW9-%>=2c-kCl3Qf-C6UhxYwmQM;Wtb6m$|@W!Z^N
zL==G>y52kyWMF9c!Q}b3)MT-ICh8mD^v1zej*i6*n@83a{FN<9%6w`>hP5Ldve1+;
zOPa)CRhq(X_=x@B!I<wi7+A}rdKLo*;C#pnZGZMHgvDWv2mifc<u=D@qLt5<c>r{r
z0x-NcEgTFDJxvutsnEd2FQV_P8p+Y`$aWn0WE3zlC-UIUe?(^@H4<BqSXEyzkM*Pk
zYd!La-h!A{HzNktNB~k_wX^2oNIS`p`fh0!BqxWdAu0e)tfeO=bIfr)K@2&8+FxQi
zovD!VkQHK8`F7DwNOMX8af3!G>G))~$?m&nI#ic$&=S+m0cKbBFi2L6ct;klR3{SM
zL8)=`?Md=?X#YRIymZ!bR)1Wq0B;U+&$RzmES9y#d%{vE%6|}r)J>A+{hdE`ngaxj
zIH`1Z6-V8^N^?L*o{LynQDqf_16+1^KS8$XLE?PK1|o(dXc5SQm*&v5@*zDEN<x+D
zU#V_V@iH!QA0G-9TtVhRE4L~yX(c6}32$dQN?m5AgfY5#{rPR5)IT&*i$Dbgv*uOk
zhR>|My*i306%7r!Z*=HN($xWj^6qW_>rChC_%5NYI7(yckwVY^i;kr1v_54b!{$%j
z9-1KqhFT2JZWud*2O(+SgIuPm`^Nqp=~}4?KVJ}Mt>J@&T=ajTHm>fW@1q*(z79P(
zVM_PiQLQeGbsp2X&F~+tAAbJvEgm|>@!;&Q10I~!i?-^1FVL3I1@<>K#)XxoU#x9x
z7DDRNZ31Ih)0m2@G>vKgh^=nrG*OpmOE*`%Z%p5}lU-S`9fu`J_Yj3bmvs`8CWi5>
zF`*Tfl~($1p;|fmiu14=DJMr9A~7Qhluo`TboMV`l(OdQncEu0*MO27NZU6hT~o$f
zKmj`rU(u1B)fVNW^xa?%o=jmrTM8*O`TMnESOXa-r)ob}?fKCu?ibCO49Tf=$w5vq
zfr-ir&e{r41L?En(&V^fGpy9~1~e!lo*eOML*HLJ9q9=e2sFt)B$NyR9yfbCY;V+3
z1Zg#~l%PoRtr-7ijPu{H!qvJWSA(FHSyv+UlAW7BoI}ka>Nb9lrOpe8acgjHG~!Jp
z%^cv+_2-+!D4S$SfkHT9%SI=6h~Edd^)NYkG0hsCT=<=$`_z>=Iijou9ZhtO?~ADA
z?ov$+tg}!Fr?9SJxOQb8a0WTpfYd?K09jItz<;D$mQSTCG6}J7HepZLtaMFkzAW5}
z`93|=)&HS-@K(22%J@IGyD;0Vnmz$|4_AvF?2{rz<|r&QnOjK@C`tu1m1|HhP_HI(
z@=n7bw{)4BL!ai~A##FvEuM#&e&41uoD)I@^5lz>lh~wX%Z$j3C70(#R+}ur$pVv0
z0GE*Xt2}z@bLk49MtV_@amTWkyBtW&5gCvKr-Qd1r*y-dNC*_FcN)!#fVitiZ32{9
zG?D|gY15*l*Yd@`ypA18VIrz`EzlI1=%fPF)X$M{`t7Z>-_a-Dwu?@~Yw+KgRkIc?
z3fSywK`<kwh<FdMiGW&&?i(Zde%|XYu|-P%%(^KZpuB~OJBn#U`0iPV&*6+;yH!^S
zsmRU!l37mEF2*tv=g416w}D2RW2ByK{_ZN4wVZsS^QCGYz5d$_j;<RIXgPcGik+R6
zd%a@~WSZo92uat1!KXt**RF`WZBg8%yNS`L)s+oOex};q_h@&nL!eQ<+Wjx915Pg(
zV)o;5g~8BkeOynL=RWIm$Z%k=QX@UH))Rau+FVxWZJ}KB_ix_`5v266oLhJv4;2@E
zq{e-yOnD10FH7$O9e+=!`qwOapVL-f@7}#D>PB$ICFplhCW$E<aBA7IHpnmm|623!
znDWR90{)VMK<+h1Br0J_sGn*to7vi#unJO_Co!XOj@_{Gh84nd-cEh|#^|eZDSUfj
z(*W2ap08DX7zno)fdya_R6QJVU(BaDHj2<T3}u<uVg37zUKgr8!WpzfSWCKaS=89F
zb=2B0m?Pk#cF^Vim+$(FyPK6W{N&^PT}F9=tz2YhMXo`+aHBFm%;oy9)7AN=PDjp#
zhW<^>dZqTe-K7*(r#PQb;D`;{f2mWS{g%*ymCo3!Gt_5>v|D6%Iv^5vsd~KVk|gTj
za9Wz#ZNs~|6fxpY#24tzHzG!8YuvZ%)2)Kss{hj0`iV;{VYU1eNdsHn9{BXtHGB_M
zjGR7njbi-I`?fgR3=Y9E_T)_%OgZU9EhFV2@?tFe*^DMC$I<qPtcrmm8#VwjTBHR^
zgSd1l{k;0^vdOk_FGu}AA-FGSnHXodB$r2x+Y07CKcd>N@m;DP6zO`RF8=pa<a>@t
zV%9@VBfqWt=1kg=^GA;<rOP+Wn`3FyPEnCDo^$I>`eTHW!p0epd5dO^?)L|eQ0CyP
zHia%zLOw))d^CCL$c@V2`s6&HMksCBsWH5=lraEYG*RlmH21I3?;4J>hklH4XI9%J
zRskFDJGKvrzHr&<FtVi6m@fYaxJnmzGw84!$~^jw;n|F(AaRDEMmbn!c58()1?q+P
z^A~iZGVIFKc5N=dd5{6JrJ4{<b#MrHuvF8K9jSlXufPlKlTIx=(Z|pBUSLc2k4HaU
ze3wvfNtMRF#m<ROe%)UaqCU;Mx3#zR<w35>&07ul82ci%Xm-x-CZ$bp9K8##*jVj%
z!V6qQ5vIH=Gh=mtm|gw*o%wHpgpqgD_boBq&555Lw|-R}q6i;Cn6nl28}SbnCl&l>
z#&)DDZrIRypu9tD(@Ej+tXa$W(YJj@tFVHDGM7_bO5&G9NKhYgh$J28&cqb0;-OkX
zxNILP#0+Pe!WyZpnZ1tdrcJWDw9@)fht7&F%sJyV6G&|H4+^?$Cg;nm|63)75+E_Y
z;43d|hp``|@KY`nk|E^KSYSL}F6TE_%DLv(2QJ)S^#0cGZ#=MWl|^HJ2L*y54=}%W
z@paKau~b8zbJsDF<>`lU`LQwG;LZYg8bC20^72f-&HYUc2_BQio9t?pYS{-JA;r+=
z8`-A11|5-L(y>x1F(@*f6NikMK}iFbYbq^6lg^I%qWNuh@ouiA29dcuWdRZq{#^L6
z(XqSZP}O?}00tIoDiL+HD|5R&>xS*!Eo}BR(cv#=sOVs5Xx@#WIl~WcRJX|t)9GL}
z@b{TBD?$(OjVM4+0czmI7`gmdVvY#mMw~Xd+BGc0?Az;Q8a^mrO;;#A$kGKTw&8V@
zxg3GXKx^tC$(Kwn#0I6gAls~H%f&jT;Tkxw^DxBcSV$Er(-%7PNp8Eps9&Z<B+rSR
z>2g};(I{oBh)H>v#xbBiJGLL*v7L$hijS|>T|cBv=I-h374-&9v%PbyX-d|Z^JxZ4
zOpLO;FC7}6-QvTBzpE|nez&=O>$bPuQ~<?<TvZp7EX5hyZ@(+sml;c26nSC$bUJOn
zn57{g7$YlQ=RI!Tu8s-v>`UJ5tioDc&N6@B@${wz1?D5VwR^L_V~brS5x)&XQwANG
zeAeLmv^5bwt&lgmg)~`dqpYZ2IyUy{Z~$=~1aIXzu9c-lb|w*_p_|_h8l!w_Y{N(m
z-K51h;$#1Yaw`7G-%;aczc`bdYBUV`hZ;rP*E&S60+K?@>iFSa)5z1)sr#uM=}O;&
zXmO15>d;a@BV4Dd%En?Yttl~fmeE>I-tOkW1?`gC+3nDj?1Qy~d;GA))kS`8{%xG;
zOlU?>%2G^-OC6&<cNlb@KtETbSqyHh3uwL<y9uObNV&#tv5t9#3*i=1r?9LQp8yJF
z5KaPIG?%~FPa)Bf&XB#HA_7GEL0CtZtfJtrHz$HdFc;|W|IOsyAIFAX03PHoJb-4;
zTn&0f&CP(^;nNRIjE@<t&{T>vE6?wpW#>QeQ1$O`)fH>A&v)>0I=@V5)hf4>&vf<&
z-J9q5egw31#}1VllbftAO8U1mGih$_0S@W<BU-m<Q_~HD$<qqXo%>K~{<!sn9Qq_6
z387+Rijf10goy4?Ct*vSK;tY2H9Jjt%2_Oi<LDijk)%vKOsh9&jeI7%3#<~`U!x~i
z-nrsg1j4ywXKHJ{6oRUVCbm9N2YYcs+0ZG_M5llG$N?<(jE1BgtCWl3Zv$!Ha-X<L
zAT+u*VJn!O0|sVOW18w-K}VE)9@GqLuz^6WmFswE(=SIv+!c8`)gg@=vLbG{TXtyI
z4*urc_p_m)zN6PA6;$9$NV6rd#BHFo3U+l`?HBc%3P3`i4KUZTMx6wXww*JIw~d>y
zm__3<Zn}Y@D6nY+E2N`t{EW?W2$V`>YMQl1>-Oy*P|{7Mj*`4Zrc@f8Mh^sV#YR|a
z)|;&tg`IKrKPHpeb|id(E^QcxmP^<>oeuX0s;WMnU$43ye_(mP^wpJR6Y;E|tw<j_
znWk_ej3_7m(F>2lM2;sE278|%&!5x7BCf<&oiq5T`XPMfs-nlwRyl;Z-3*4UXz;s%
z(P!0<CE40}L3>Viba^#<z=P>WrkTtQHJlsJx~pBnit81F;_e1|towK3+|#YytQwl^
zyrMN?>zw+x|BiUk(q`|(p63%LmN~TT({tn-rB1)P-KoyL6nnzBrQ*A3ewoj!*B1_d
z=v*2F+mG0lvFCG5jwyH_4p7Za3*LF{c~Vd>a|R?D{ZhA@JFojUxm<dkHbf!wT@Y;T
z?>eUa7Kpd>0Nv(7MT#s6es0*XjOBLjZ|rRmy}?+O0OLbtawBCmY@(qNXD|9yC#S2X
zeJ`UA7cO10wS+PfI~$^x$PywIJ>rh?c$$A_NMOmKqKmhRjfWAdEH6x^1$rW5!2n^L
zV%XFir<IpMJ5Bw?kmSG-4sveIpMnHbv>0nXrF2I~jW+b=NmGRCx6F}M{G!3wKtChK
zFF+ci;b&<$(r}(uZ3ee39gEwa9Ay$Yp=y3{&<H^-1Fy1!v~Mpooy?I@U#<P*qdM|9
z?TrLV^16Y=XU3cau%VIKbMT-@yOG5S1c=uDL=gN+D-lkMsoLJX-4U8`RvVjSZ0|q`
zw-_Aq2Gc_D-2VVwa!Eq(!p`L$#M{4>Scg$ee*&poh>4zLjlqs`KK7&ylff=N4dlLH
z;Ku&6Z%P8o$w?%>fOHC=*N6~`lGa*KV~X)6_u$3yvle@h*9x`#YSLXFl^Ik#(&kox
z5dgZ2Q=p7qB3(b5mUByq;_M};W$$^W++FESs}oT_PB92~`!n?NSU=-5l^verCN%GT
zX3Zegw0(vVJ>CTdAN_4)te~jac~1}12A58&ywshfP^z{-;c%ZFi#`wR)$5#XR<DyQ
zhsNuae|zZJU_#rE-}0Q_IY+VW1X<_#es|9PzH$C0E1YCV1x@8qla2}By?Ag(_4&ho
zEIH!>eSa$6ztM2te-l0`_g%c&{AMUdOMB1kP5Czb<j~%>53e8A&G#{`)XblFZB<3t
z+UW~3t~xGpHJgyR#04|3b#afoj9#AOuq4+luUXd}75hGGdMSHuw_TwXb@A}^Gj{pA
zmk&NRT}v}wL2uW&Mk91Od~<P_s**gy{===@_04lSw0qV!YfI$#kJbnMJXR?h_MN1E
zchCH`yDaREz1)27&av!)U6L*?)J)#dD0p^Q#HKXQ7P^6L5-+dhcizpOa_{ubKbvjZ
z`&djFxI#b1;m7_1hL>jyv}#?ruF0xyp;H14yX&Q`%N@NDSfQ)m%%A7?^@ti^WMD9!
z*AO-o)q;gdujBnmthnit@hwlSs|!PTyf@3W_LR>aDug3Iu2)j)2shR^eQ$&D<2-wz
zv%Sq9OaE3|cE4i)%*a0mCbR?}l4tZVoxA<|=<@S*zt$$(R2Y$z95E!eG6zVH$)0$&
z!s5%?(Qw*=8v-lSJ4n0|c?n%%PWK)-(D3wy3;WT9w^dedHS+8*8f5Z8&tAE5l(&%o
z{w_$eym?@f#N^1F8;L*g#DLn;oM|p=!#R<l?B9-k(>U!nRzB>&vJB~qt>=MwKjk{e
z1^Q=;w|56h$O&hk)kcsmMk9i5V%m_oRjgs&K53my=JbHuG**lIQs%-2g4STtF&p`Z
zIbpq3RJNd0?XK5`L*?_@(af6iwC*1L8=7H<t{9-|z<jlXTsk$X`|PE|Pco`-8a6v=
zGX}!5r`-!WckW$bAp(#*6h3{ZwIOI2ujx3(=|Y?LBm&U;i(eR$C<sWcG{UDqqk5{U
zHo=e<oE@2XeKtI-(M9DdvA7#{p??54_yQvNVMH2V6Ky#i=ko}QlW3%oYD^~P0Ph28
zBFTc~psbT;otd00k#9F{+^BQ(vmYR^<dBfzL~TwF$dPFmeS#$-{V~1fQp}z3PiFeY
zGV(kHwU^dnZYsuD5H2IOn~zsuFPDV7q>?j+A>xK9^WkLaBx~SS{Eja=r*cCaVj58h
zO>}Z9Usnx7)RQ2ls|vd413`YmJ(ZAe#a&Z-erl(RRbtw5J>90QTz@Ns9lCHUsOrd_
zBXiSMH63`z?Be^<M!PO_nXor@$L{$$Df55c*g1J!RokzrhRJg)jrx7B>c6LsvWKm<
z+U+Ilb!>Jwur2BOyroG|(!)9v>Z?UAJ?D2t<5yLWpq52>-+I;WZPTVz%D@E+HV%4F
z8XP;O{M3Orb#=b2+okmPW~@=i>z2d6g}uwl?Y*gLMU&QB)eiby9#Z*uLQt!s^R@-a
z8#}&kfscQtsfEX6?f=aPc$ZhzPILeBcNdepBwrnR?QDk}m&$<aDI+I)zR#T4{_UUg
zdY%os*X?2St)%Z&r?Ty(j{8y?R}Z=LH>O$suHbPBBmI`2H(frq)z4yGtDV80-dC=^
zSrL)hHGBK+>UF${VHtlzwvQwCQC0OFQ_a%Be<enfA<v6wNcvZno2Q6GjK|Fh7Lqo!
zFLWU7jGz#Vt4wEuuV5y{e&6kEzdLYTPk{f_Oj=0>A$peafrh|)|M+jNTvp5A_UhlC
zkw8gpaxj_{N~taBEU1tQ?Z&!Ac*%SOHr*ih75z`_`I~Xr=2w)LA*;eZ=IorXus@xz
zU$L9w>^zEcs;9d8OufgikXDLFLkwmC73@<}ybihr=2-lb*(2$`!8A@#kyTL=nzVLQ
zUs(+ZPEoHGxEdRVj>GH}v1E{l@X%fd;kQO89}641JO9a}_YNw_j$WBi2dWdM>Zjhk
zUZ|cqQ~%n(8#lz>8dv6e>qWC68HIUjw||=!wdSrZpwSv}E}Vmo;oVL1Z*&;gzBvbZ
zZ=mG{z5xqpn_q`kSIsleY`bajca`~1>|^t*cqu}h+BA1jKdoEXzGMIWo7R_(Nea)c
zb7AcDV?KViZQgfYz4KVaKW>9OGACz#Nc&|xXRF_`WcOtqB7459POZv0oZJ7r%fpdI
z6CxVMP5gBJN;7Ng(VEXJyi^^>Cf@8+Xq@=u?3~SSt#0qozE!%^W}N4{u<+bXKa|_L
ztqSU^e%)@h{;`G2T^dG)-x&95WY;RA7SAIB`#k(!JZSes+m)MQl2f+7+0^m*+fgBN
zW21c|W4xZJTh4lQ?bR5^&ynuSqbDfpUYHZs*Y4i--OI-X8sY~2S23n~A554~h!?El
z{W0#qzofrUBTF&UWtk+S5;IvAt>C*oA6fP#tOOvq@PqRIzW1cq|3OFo`JG+ubg~KT
z4aUKqy)I$m%O)|G5L9TtE;^fi0coXSViw)xY>xTkUd-efOe+iQ{FuYo8T3}-%!cjj
z5wrZ!EK{3f$yI+HC#QJ(8$q9={Zd1`jrxo&Fa^w+B8H*1*tCzorzOUx6{$}#Ir0Y1
ztQ&}t-A`l?3w{;nilQI25q`lU>-6$6X|vYcJRGU&+G+Z~t&U`8eEew|_a;}CMYwD1
zi}+Ld<-fypH#bBlzv$kc`EL$%mJJ(-f&CoG1E&!#wZD#)=AJmUNblH7kLc}pitqGa
zwW&1*-UF_5`d;RG=-B&#L*{gJF3+=_7q!0WoZaoVtS}lr=1Jj#1+No2SGH;0;73|)
zOy6YAXRoMcJ`s=0O#K!uicbEjz2v<^P|N6PD%~efpU|~se*Zt=xt)7&9&0|{a&LW|
zK^`w!Ub*-Dg{nbIPqwZ?e*FGi_15iG(n7Z${CBHb;Gr*_=0xr5_2H~$m!vBmCJXw$
zoTWR>_t-@<wI`omWo>>rVdka!);`0=JYGBPxxt7@kKZ0?U%bD~x@{R>byfyi9zXGM
zWY=wVM(O_J)aBCbxoWLH^i8|I_28Zb873B;^|tNT8Z+jgS@6ZANex5v4rYER=-s1^
zZlAqfrwn}F(%^{6yM(1qPs4ruRdjw1y1zJYh3~^l>6i9)(-~yj*t*lzu2)s`G`cDk
zWL3uP9H;D|u3t9o=z|2OM%uq(k9M6Bp5fkONm$Bnoug^zB6ivC{+0Q1xApg?&CL!>
zJ$1EFu5<pgq=c9;Nm*_Wrk$Mpug>H2k8Ul!<M;IUO|y^bZx`R!g$0~+EmUt$z#g;k
z$zd69J#U|$7TAMAnL`Rt<~CbV3fosi=mCLc2Y1Bf@q*(Dl_vG5QEcJ9u<#j5(0%6&
z*H#^%Kqug?<2hk<KZ+d0rZV&bL|Qj5>Eo8V_0f>_PSq-z;T7;&CV}wt<kvtJI+TB%
z$IeLq7=*wBrw}n=0W_i~Ma-$UERT+smDsjhw}WQkOXw>ArST3-#XNN6`fmaqiSU-J
z!8+&yA*7mfHqQRjqnF+X_TnJGXo~a8E@gJ&Pc$G|{Byt}R@2DTf6_$UBk6Uqc4X9y
z%H69;AJff$sENcc2rUf%)V4#1^@%5T$KB{7^sP|ebtDH7m-*MBM_)(K2=mUg7MhZ(
zcosXepwcKH5O#c;vp)51_27srPdjg2KENT4()%8&KKpeeB4#P-CF`yEJtOi(Tk9r0
z&TBT-i@5G<Xt<%x_cG^0?W5<<HZ-`CqCb?EK(F^K&*wu!TI}h(#ldKCi_;H3F38bt
zZgH~Ho@Uow?ysGA!l!U|c!P>PAH84xS~{^``tC+g`x%&q@0q>SbHksTJ=Fd`+TJ^w
z>;C^ACqz+3MwA&cBMnkE6-mg5j7lVBR5CL%vYHAhD`iB8$X+3$h!WW&Aqh!ld~c7g
z>-wC}?~mX4o%22C*LnZ(z9L?)=j$=<_uKt8&dXd@{kX9~Nb#`b;1uPuvwgB!B=*V;
zoTXDUENf;sJ{KGrXt1nzyOK~oa56`z8xHR_iGCjs<}k>_H0EU|mEDZmPpy06-rV^8
zh*Nh17_fPSwrQz#GtKqquigD4i|>7#sQ$0>_6di#aG#lu(c6Il?c&JLQ+KO_lp=rr
zI^okH`*eQoo5~%#Ef$__RB~kVwpcah5^b{bFmzOnif)SIjcCq`xxE`!mnypls{7MP
z+H;N26+KBjU8XnCeOY*kL4cdZnNBV+HSnC&?ae8V)ix-gz@StVljUW)VOr69NHG7&
zg5j$e0ov$!7oMeJ+2UI!qT4Qo9y$EYcH7vxa32+c_NH!E!RjN`2c&d$1zJTGYO7}W
zLj^oadk)i01q<-(Gx&OHs?R9XAidSjdM2gl8*>x@N;tu4L7#aq{7w{(V^9Za94s^s
zFzV<Dg7k-0TF=y!5OlCF3|D_<4<lrK;Rken$|#_T!3L^H6yrvAuIO>eJODLg4fPyk
z!!V5qLW%hD{AX40Z-<-Whv5%GB9(uQwK4jVfhB7Hsr>Rk>+($Bp|vO437r3Qe!i`C
zLx3%u;Y|oiGh3-e6Yc}z$^*0C5P?uwD`MDE2r>x~+=5cwkKcs91ZzhN5G(O)M_dNL
z4iY;DFbw9iM34zG{UnACR8GM8;yk{IA|Vg<S^^j(fi4%1or-Mf-iKZf9oFEKMt~a%
z-(-W^xVU_t=Jev#5*4k1fdSG*O*1}O9USkEytKUJ4v#7SO)Z#}W&qSq8ICRsILEGm
zc%Cbt-G|QjzpiM1lFe{<WBv8`Gtc)}?N~p0Yt2(Wy4<ynHRYa54{-^IZjYK=`a0~c
zH2z2Iu<4FNGIt6K?{4O7cYmv;lO21&bJ5`Ja}S{_zevf4+~LE^G_;q>cIJ%i-SF<)
z+0>z<Gj?5mtsK&kd)(}u`DX0WMMdx4FK(&JStr~f+pMoIJiQ>crJ3I@xoh~qG2hVd
zs<fAkxaRwml6F2lPG9=kgfeB)&!1A%;+NwY<qQ^-0M}bP-)&Ynlj8m?(j%{R--_m%
z9EJ};3(ViMRGBLH-`qQX`t`5LL@z7uyesP8!{08oa=d>^W24BVZ16nv6+MfTkHxE3
z6WY0{SsAQnkFwPyv4oWsEB|p?cb9g)e@rN6HXtHeTnoVtZ=W~z)XCM{pmSu~aczDB
zSAxLv(6I<zW3_|6p^~HQrm`OqF7sW<`thWndXTUV<<n=XswwQc=1){ZR@r{kq5AYq
zJ+zC3mdz;I@#Vwqk(zYMg&G1v7EMpQ%Ua{ov$a*TE;t@#RY_q(CoMbwbjE3WenUVL
zkPO)<LNh^D0wM$U`Hbb?$D9I2>y0@4Zws!0ei@`7%<9Ad3WLTVpsAl^z-}CP9bJ!@
z26LO1EkHIx{<g5NSc3MCEO;m)Eqwl5CNgIb%n1GigJA`9IT}pVNt;J&>_M8n3A{?|
z)f-HQo6w_z6D16rT$4zkNfFeSF$aK#tF!YVyvWGJjf@N}+=tkfmSV(Z2~7-j>nUho
zNm4_ERt<WfDln=Vx?Ot@V-F%UatElcn0VaAD2~Ls0IGV8b{oTyChk9*&*gP=+6gV#
z>7}>I3b8eykb?;^TqxI_9W#n3$snK)h`wmH6LA%i!#whek6AGSJ)b5S%<t)tdT{66
zfpFHi>f;K%r&<;?pV&MRc*By&*MdSO%u_1aP+j~w+kTtmWm(l~i<ujunIdJQHmvOF
zZx_041|H`Me!6UNCH?T%S%yuoFAj^{)nc{19Q{p(`@zV;>leiO6j$%sQZz4(mI^je
zA?x)n%sn$_c0Hxq8qlgg^`UI7@b4M^<?^%KCn?2vzJINX?2T;`7=IGD;j>Fm9Fuyt
z?yzL&I^#>0w2oh|SbsSddBbKV#%t|Q!{+oGanDyCRJ}}1v3_^+;?G0hQ@@>+wxv;5
zQD#5QU|K1eQQLbc;mC0+Z;M7oSMC=V`|d?>@GvBJ+wbzDxT7K_JTq<eaTCq=y=O~L
z<pzt_52@dbjb52Nkj3`=v-P*2^s`KlY})k1tK>bYbovJ}BRw9xmTO9?6THxuYglN(
z?=3d)c-NEaF;Y_Nxw>yiGn$H5usP$|-#E7QjltPuv87p8Lxug}44j4Qzq3%g(J!UP
zAH6^C5EU(?B&U(_P1}lFzqPP3(RatGS}a+feO=OKqU!)qv?iZ-n<Gx$w7}3&MD&A(
zhXq%G<v<)hNV<&O<z!XMg*fLVd-H9f2U0#<z-)_!oqe^O@lJC?5nv@)2jpbNaOffm
zlD9UO@~&0lDo65_@mX<*N<a#Q-s+rloF8A`&`=UX<GR&U9;H0+bcUum(ppFcP19|t
zp}{En3x`88o1`zwCXLAm3h#ZehBGU0qSOpumRWs^XP;Za3`p`Yz|O)cdHVDh`z`gr
z)yQ-TgfNsNfG%NFi<W;pz9$MtCpGn|UzGJtTf>gXoEh89{>x1H?rmX-kv!k2vDYtV
zz8i(Vy6cuQySI^!*|=W2gGKCn>+t?Sx1cUFSDh2RqT(q{o$gl>cr#hYE~dXN>bAKV
z|AMlyb)~(7vi0Soq9<R@Y2W9{Fy-qVsrYf*<Yi^R*q`3=SdJTycO4s-ksK=yqkm_G
zCEJ`}wC41e&r>aHb_P3@D_mBKE#paP>}1nZ7b;@hryjAxr^~{>?xY?olT>J?+#P!j
zR{m{TgX}cSyh)XZ#GRz8Tr~95!}~|}Y_evP32S@!era~$pv)Kcy}@gZ1`ARhIilXa
z+jjB!udR1a1#~9giCpNn(;vvY^7E4DfyNHq)<FL=8NVE?_$m&lhnt<Eju6;+S~(+a
zd3(KN_F&S6==Zg^Qcn!`omLLLdSkJE-XXux6fbP8R#8jRaOP8$H7BrO+$MD|HO4D7
z;Zugsac++OME|GlAjjp~Z6a40#!6%WkGKx)?ORF>mYg(Bo4qNR9@u_ED@irO2;`WQ
z%|}=@z)s0JmTdmGxgc-o=Tt$@M=_X1;id!y7=9ck%$^wLKsE%5m1vS8erp{;50I7y
zkSzsNnw^e4U0Z_PCj0u+z~nMiZ{NEny|o?)^SxPu;(-?Cvt3V}sVl8YPLQ^j=MTFc
zllx4j@mZFZfPByLcZud<ZV97Qf*OK)=eK<gd?#h5$3z*N!RC4NkGj@7mfjx{TZOg9
z+1Cu5V{$KuVl;X<{grMNK+ihaPj4$N!edvcDIc_c_}LPyM9pR?b>~uGqs!)&q#qxA
z=%`yGoFlBy%%501Eb~FuwkEB?=uO}4rv~)}@;eiKRm9&H=TY)X%`)AjaLn!~?%-2>
z*RW-!z+!bqu#UJc;MOa-k)>NRQd?KK3$bKy*~Z36`c22NnK|`2)%gTVvm86$H!Nf@
zHo?r*r!7>}zDYfuIdxNFzxvH}#p)5)3UPB@3_WkQ?^({?it~4-X4w_I1$+c}?iw=k
zWUh}I{WhMXWv~GPlv`k*py={>>fIXxBMS84$DOYMeFS~>3#P*u7^3IEZU(bKq_aT#
zfQH_)PaBfu9r8VYumphq0cMGl(4E={E(lX<Fxi#EptAhW?}z#~7huJF8ZC8x!Z4P~
zT)O^WeE0Rbv*LVw${`8Gt?>Ir;Y7^i`dD8*e*D-`(=yY9m6_(wr#l%Y-X{uW__O7o
zJ=>Sdl9&25!U4HQ;T3*y^tvHpxC-J9dEI3E?d_zYqRy(mY%wt*JEP$y(b@RPnf@;A
zLZQ1)sybb1Xif?H!|z{BF6?Z$rgky8+HI7&#Q8_mvB;Qa>T>QZzU&{o^P#m(pZDB9
zndF#r6`=TAqv$QsyG=i>s6F2kXRpSTpi<q+X|%>~y1+P5C1AD5H8sxNs#MFVyI-u_
zV+&jNpso0#ca(^772Phe=FdGfcZ7_JuZt*O4rKhrbv3oG{??QDsDs1m3M-$jlHZTu
z;Li&;5)5V<kh=IQ=0?j}6VW|pHg`}vs8btxWvEjQ2<$o-{`SrEZoj3NKe?Z+8>8gt
zej6JeR}m4Y8@-^fFQ!)<Ic@Sr^yN{z$Tjr3-QOuvR@?z*0avni7t;KBU(91tm&z=C
zQY>Qajs5;c>80bsF;QTBkRy~>3OPJf=~|H?dLzrS7=)~dQyGH+4ss<Z*2sJX9u2Am
z=9mHCtI|4oI|2dY#+V=dq~nmN2;$&s0$MTC95=TzkI>S9^Z@+6Czy&lEQ_$Qu>qGL
zUKII`!1v)~p$g3~sKZ2R0uN1cLkx_Kc~0vz;<9mN1uH}Lt!*9}0kF#YUb?LmYyDh>
z0Th@iUQmxYU@a7Gix&yby<vN(;7CE|@cPe{!{t7WA2!7aXGt*Tr6yOKy}EvQ$1wmK
zHj5GF!&a+K*|PO~OV$W&|1PtsMU0MKw|U!ghh1ZFdv2Cr?p>qrE^?Q9Ubn<+?+l%*
zni$YuD%Dt>J3Vmsu=Qs7G3{oQcO}!MAuHc6SUj|u$*n$c)?_jx<i)(pY0kzk9rJeQ
z_PiV0b7=V!YlN2a<7=owIo`@d9oKa<JD?V}V9K7g<HAA-H)jgxsNXIQTm1uS7uRJ*
z@X38}6!0^U=+@OTx=Ll@@^bpOtFX6L@ym<)u6ZAi>WgL1+z#{>wQw7axs^%beC|>0
z>Bu=3&pm8LoG%P*=96X4?@k#G3p1~M1{gzBsg2Qi!x!<NCU%?}!fS%4pVCThev^wT
z<PzIk{>n@%om(6n8Jpxgmj<FP){Dhl%S+GSJ7M0in(N4uy2BU^0K*2)1+2m(!7SYO
znb##64u%IHN3^6Q2BhzXWZtgz;A!83PY<EN2uW5|Wjy}JZZsP-Vf^zPiD^I>PCyjE
z&I9zXmSOY(34|mh5Gr0;xte>p*JV!E-R?|g!9;-$WH^+ir}9jZyU`EfrCwu0;Gt@$
z43#6T)%Bi0ZAu7JI45+?%&rS+l9fji_E6b!>#;&jGX!rN5?=yA7Y2~>vFr6%9W_nP
zldGqI8(z&;khv1k0KkiZ@o}$13m41-TQ;b&jOdlq9-5WByx7IR_t<4OwnRReq$*ZL
z?ZxN&MR#nwCd6=QTD-6s&-BG$a3D_xLx7ov!9hdn`4EYP#sIZ&ECpMGRks*_S9R*n
zygkNr;<PL8#Y3Cl9@A639UuHzV9<(bV{a|T4K2Qk<0n*kdD)*8RvbMPIyKEADi(p;
zcl*<LsR!u==eXE%Z?$Eki#k$bS>5h=W%QGo<<LtzW}Y9TRj+ml$61(a``!x9Hc-vl
za9^>V(SF^nu?fkawvLvOOS<)g6Ku?VlKKu2Q@iM#9Zm9%)JD+#WYbJd@2}vDj-1JJ
zc%8Q9avsC@_jlhc8$Nr~`3b&ZeIQ6m*?~lvhUv21`dba&bv5TPEq6AF&d$GZD-Br_
z7W#fH;fX=AV-ANoORWC{{Sb@el}lG`wwoq1&d`#=lySNHp_I4inWi=Li4;QCGP9Q_
z1r)#i-uS&c1Z(B<d6(m@(|wgyc@R;dk%1_sQ`<laVG-b`PR-5|vO<1M+NTwH2oOk;
z7-@;gxEV(WCaegDJK0xpHPrYu+9J2nq$t9Q&_vgdwmk)B1X_<T?D3VnkUG4Fs)7iD
z;qi$T3fr}k@HxUX17mZpd}UFI2pONBpahAA2+0Y75OHTj92%{S2@?FbZfYf+!gLX~
zGS|RZ<N}=-E_4{NZnt{fm7}r}dreR?;)?CQE;-0sgFc@}_8g5#Bnjul7D4F2R5JI`
zNbBz|i}Am8E^2Hl-WTLxjEiu-t$g{iTF1|+slxGP8;79n!F-lyWR@eZOES!zqR{x7
zs8xP6M2w4O_rUcj2Aj@^E$S2kSGLT#e`(se*3Ma>TVL)Wk~rFQ^wqd~RwT0@93SXA
zn0%wU$kcDiF8Nc`Jxw&DLW){y$0XTy7r$+^GWr&fDjjW&0`n0IzoMy{|D^Z<`g?|T
z-xW^sr?ji2mcOVE6=$Q0S>~VLAL7r+{_~Ka-xUoMBrGn?ySH9CA0y>*`=fHo+$q*5
zttV%Won@Lj;K}~*?e8t@7sG@)UY`wFV|YpM!~RE_=xWDoT)x>2R&a{%30%KaqHbDk
z*IgZ0!a`eqrrox!-QDc2$*HCb>79ED64hFEoM(-WIV-$Q;9~%-ypPW#v#%9r>9g~8
zIoMm?ygMA5<aU?KRxj*_*UJuTZzZci?KtiT5nWjWjZ@~5-@+a&&pZ#LaJ(bTq0v#7
zGtIdt=4`FOj|7MN57@I!bM4M7y3hg@dlZ=!I+v<cCT;I>Q0bh|mL|?MN2T7nGiD_{
zdl4j#q218X5RVEF*N47ZNv}FP7mw`lahBUmcoQHVpp#CMEIpIoNwlzVJ|f0&#+MmP
zA_@M3bPfzwwiJ!`mm?Pe#DzVuSj3M5{Q3cW2Q9?VU%c2}?xTctxfSXI;Fgx3j$qOh
z2DNB2R-wjD5h*F8(J2rGIWKS4<`uYafp-QAs4&wEVXzgTMJ2;wt)u}IQK5`C4t;?h
zkht%lRu=msA}&6NHhc)?xELR`00+WwI|LClWCUA%64NMh6oT4-SCjl}5K|`1D>g%p
zg`hULRJrV}g*JOV&prYLAVL;k7;pi%&Lb7eYjM02(e_8XUBta@*O8xK>QrHk!@~Rv
z_rn%JO%^EF*(h)aXI^*$#r|L&BJ41{MFQUATZ;8i$Kl*9?e~(vO9UD01b_<QQN-U0
z-U+~~wQnpug!eS+YZCqr5_ckM@Tl${+ns;?<`8?1?TYy<$e%Di8}HPSF8CmdhXte=
zUfks80P=D<RJJASIP25r#*;m9v-e+K;2L`QbL`voTc3h%t-hkZGPj%>P#(D>e@x6`
zytlc=Td=iX#-TJ$NpHTqmL)5ZS<{7Q+M|4v-Nl=-q36mNSN=?x{^-ry+*H*H@5Bhh
z-MApS+)&N*^z`Jno_G(hX*kjWXV!6Yn#}ldGw6_0w3+4ER|1+X_VL^F?<yK`MCjff
z>+^8!*733Qxhy6oM$#Lb?ebtsIP)NGI~o$in;g;5puw9h9gqKTE(tS#XxWJ1T?PYu
zu8G+*A>c5OK)tf%g>yx&6FLwT0q}ffmzRUd6Sx4bpS_T9R1LiyKK?E6qX15`lG7{!
zbRUk2FC4n%7iK4JAuS7i69}tBQxA6ni}AAjwLnks5uPjYf>c&Ou(uKSA-QuQl)Wja
ziLwj-@Cd-c<zHoH`3#SZ$J|qg)M9qUSx-5JWtnW8`Y^w}^n<g<uJ1EZ8`S$cw$|+W
zJYg4b-R{=WDy#01!Her^OWA5!?yW4x47#W82^U18-p{O#J2nKS1e@2_+UNOYz)i-`
zoiU$x*Wu%H;@UgUwbXul`Si`@g4h}+lSoIc6}t|H!!OhAHpS}HV!{v+YHB!66;=Kl
z9&UuQ4zjGF-QfP;ybhUiZb^!m2X83uwn(}<G}E>6AT-3dL-=1yFbo*BpL|7)&koY6
zLAaY(K`ux5^R4@3;`X_R6J9Y&lI=EcH=-&P*T^uhhd74h;<}GK3cB|a%e4WbOp>dB
z$5^}+(z^;o1E5!zZsbq2XAfGcvSO@=v54rh4QR^0e*G#>7FpGoJ~Q;Wv1uTE)_VE(
zJjSQSc|OmLrJG#6;+iE7JT^8SckQplc>6GU7>=t)E2}KI|Ke)-5h4Tl!b4=9^pOos
zW+Y&U02kZgJVFdfnW(RVVlf5M(GJ)mV9>%yrjyX>5d&u!6&QWalxTqGCs8)uiHpMm
zl_oAD;2;v-I;t=OF*cwuL~4%&VJL!;Wi^Zqo&;Y9<jZ515fRqP(y)?A*_Az@nxKBF
z8DD(!Py8>K8hCt16`LTB#7nb5DTS4FM{Jel-v4|7P^aS@6Hj^#Y#V12F>=PJ$XHP}
zTAK`B!9GrGwk0%ea5KPWCQf{i(Orx|RzM7372>XnZC)@O=h<}=3UE->X%W7|4-+jI
zJ43di20B~TUh{117ox}nl?=O!xSwKH1u4s?!vW7R<^^+`=)Qo@i^p?-#|nWM&Mki^
z3o*eL#IXs7GpJ0AGH!#?Li|lYDnP?Yq_jlUj;i3EJ$~-7a&HBKRD!z-vWN_X{4g7&
zuK=)5m~Mn|2WGMro&ruuu+f7pCSquX1qF$HA`Ud1=~*&)ZyfST-YfjH+y_Fob}i^~
z1LwyK0V;|DFwP@>72!v-Ah*)gw8LH$p*0WE(<*)&YtkHjYCs6SFf^<XRSXIU=n60E
zl71tj%v*8q_t81G_qDmV>~4ve6`qYq7>HXvJNfRt<Ho3+jeoI=M=ZP8)Um~DN#-n}
zo^U$?0xkg&{JwVbnBB0BTBJ1@k)KLgU6-SM_Ux!+p%K)Y7`C13XoJ1p4;1t(R0J!A
z<cmg1N(x?pl>l5f$~wg8ONxMDfx;XvFe%@U8X3LDtpYbW<-GB)LqpqPEJUJuF+52W
zk%7ey5t(6O-m|-~*X4U3cHm>E6M+KW0rL+M7jO$Lfv8~$Plk8PQ2OP-tjBI^HSy=f
zXI*~=Js+{M0QvSk_{@L^+{QBU-F_4fOLKK|oIj+c1^FHoCO(EOLP#)$fQgv<;a%C<
zitu{<Vs<Q<x)$EpU!-_s-xM`cLN@@B1h_X10}x^Ya^l4wy`f36*O1c!zB+F5w>Und
z;h2PVSJ-j<>$UWF7!<y)tqlTefOy-Gi6X%FA1}wDg(GgtU{>i<Q<y{&K_ICj!Q_QX
zV-m`?DWcWGYir=yixmtuN&nE01{xV6uEk8L-u-xn5z$X#GwI;&BQ_%>YXpi{!1$|f
zM@PTG5{{TMg-9IOJ@%StElely!$IT1_0bwAk3OjuA4~x>+Qf|p9KSO}LUj7H+3$|n
zJ(pHHIy&aR$p?dL-#)X^!SQPiwt2}bnO~k>Ebh~af&>U^`>S9qz?>-McuUl#BEi$T
zn?_m_I5hL_wmW-lP>P?A_8OkOQ1)xz>$O`F`3ACPx3<WJKM58rY8%r@k&mVOy}s=1
zkgI~*<YZfN^4(m}iHY$bq|GoZE%-Xf{ZHb?RNa<aUB9(F!FtAK!j~TMB$k0?0mqdF
zOwC|nSd_dQ842!S!w_K_&WW-Nwfd|;V(S6hhzlU>VfJ;;upUlDB27;OH6=`P0sz^)
zfYGsCd^VP24t%MGAfr5ti;~0(g3;!{v+18SyRwCE;x{+%@q1@e1zQYq;M=}W;L6(O
zUVq$k(rNfo|0^1dAr2r;Bzm8_4AKyR^Ah)1B4LFDFXCr6N4bxAk7$(V)|BLA64OE`
zxj&$br&b}^=|pE%zZ;hm5$Bfw8FwU<Qg}0<cV!Yj68CnXCX84Y^(`qD5hrGZxZ&e8
z+@EdU1>N>5A~>(B>%*a*0*MF-oW^bgqZ)GCE#Oh>|5or`k^{;DZMmMi509LaFEn4|
z{3kZB`T4T&*x$E2H|Q|@r*ZEDJV9%qR93@v1)(}IG{RYW6K|Ph6JQ2U#zYwNz(hb4
z7WXo6>m<o>o)e`9aBfGW2B+6R+zf>pKod8xWdPMVPxQpLS$Gn^U3f&LoL|Ihg$jk3
zblz(sLDYD3<ZL6yS+ng<3`%dID>9pE$8#h*7eSS$O_I^dmHh5FN7RfUTs{Y@3fBW^
z-0rb-VTV|QB}qKLNc)X7Jq;By4#l-{@vvp@7Q2o4D&8n2MlhojTZAEZ!p0v93kz_S
zdWY|x$Dw^623?(dEVZF4j1cN6EiH9C4wyDzuT1z+CTcJRN#+jRUeIE`^WkV~SXW+@
z$Ojrz<)lp&XSj4gR||qmH`o+&Qd0WA_Kp8^OFCZq<3OzIC9G^Gt10b|X~TDqD4xW)
z7-lnlp?h-M4xyre`0<5Ia3T9khi)xM7QlISjrp76Lzvp+s6w7KxnXgQ5k5OuU@%uV
zbC&1Mksz99Y`SfW=cDf3yNwVM5S{7h>8lX=_@$1SXs8?G6dGVxdT%W^Zo~mx=ruTl
zV9KBic_`tmLdAe4fJ}I`>Sl)~)kE+~&kVBYnhS-4Xh?a6&J%-W{L`Y$-yd39paxAs
zwdv;WPD$L5(A!4X6GsgkEzo}*HTp*NPxb@qcLVCRdaRs#UC!Uo7pT~iy^OnV1fnL0
zMb()|DFwEvAWCxF>pO7lgQ6E{4Na^zN&}FH3_FNq8$~GLsBGLwr;O7P1a7@V8(gSF
zQ$YOLNrtHKPe>wdpui<+cOq!VDmV$VB19n}CV_(N9xP6xQo@4(jjzq<?9s=~BBHdA
z9SB3Jh-)(kc0of$RlEalK*sH&p2I5?5#5p5v}vcU?iRIk#=nBbxO+h6>~SCF2BJU`
zTOn<(#n2LqMtmX`E0YM-L7~c#c-%G?5*n)C@obww`{k^($4{P6W3Gz2fVhg`gN?yF
zl*nR9)F1ExW0P;K4*AAh{skph_f1qP@v1O6ENpx!++|>>n%=@P&g-><5j7r0w`|B!
z(zx8y?_{=JsX+ckws`by^UNF-NFOkTXw}Jdytjr+8NoK4p&hL+Axb1kETk!GI9K*y
zcUt<g?p+rLn?Owc*AjCzSc=@=>$(lA9ApOc14KiNjd>cMVe8j^;~-GFh+(bmdkQDT
zF!)pwMh%$0p%8VzV9^A2{b=yW$QG6)Ao;;!1$N7LUk734Mh04j+?@nZ<w22xegY0#
zgkRn{`{>Q-M4TZGqrAq4uwwfA`yJ9JqrBtc0CMuhXVym*8h8O`k++-kr#17sWr5RG
zG|gyIhFu_|QigjQmerGzlFhh|$b<&~8*<j;WjOB&hM@IC1t<_~aCtpg86dL3Kz8DH
zkMUCjI3+pZ+y_(#Pf|Be&*C+z6d>Z&dlm5LoyM|%8?O|PZX4Vq9aIXWVDA#3LU@6u
zi3umUlQWa5`bk<@MMVWy$dKWM(V5F@cB0I|HXIxu9~XWFLa~rgV%lu_A&Ej~3D{d8
z6u0$e78a^*dMo4=I?VY<MJ9HI@!kufuwrZ}b)K1T8QEYGiL=#k|82Lq-ii%rq?X?c
zgn)&()qzD!2%iAHNgV>{Ng5@t&^{!^8WM#lX73H-Lxo^G;nv;{OKUVoMAPgLAq}vb
z{2DTc2QQS=>-mnBXvG*SfT+8}NF*ZSE;&IkXh+mE5uB@CV<36BAafzdm(<J!;Fm<G
zXo2Sh`-tsW9*L-v|IG%1;GCFLK@%{Hx(iMjJHU%328I}EF;icKpCb6Q0ytO#u!eA2
z6TGdyUK>p+G!SR7xdBL^M<U)J;GX#8jc!JvHUy`<FQX~(MymQ@p`j!z4b?Qln3&+o
zi4}#R?}4PN8ZchK^+l$v^~zV^CW%?=RTPam?$b7SCjcr=Kndd@Dvuv%4S7F|P+$bD
z0@^ALAqmuLzB{xAiEtIj?iZBKLy%SD?jkCb_t{nlBBd-F(fUG@O2VRmI6(P1_-Pq>
z={<1VhmMd0(BRx;VrK_RM<7JF1;t(Y`9^FDiLfB<0eFH2)XYwq&PAKY^GwGhcs`32
z9;0rt-C0l3Dbz<mZ169B!kVpM=5UgJGkz&bWmpuY-f<cxAO0p4CgdW(@(iK&&$RS5
z!Wg)yY%BI^=6&ykwlQYvN8xi9OPl=xAfy_Iy|sCP`9lyD3}7+2gm|Gr1|zOb=!lT|
zRdYCC>i6&c;ZGXYs^!_WVz7x4+ekDm0lP<!m05#$r)*w-AStA*A?v%xQEGT@y#)q<
z{Y5eW&=XCf)FRe(xWJv{HiQ0m6?H4I+4#OSQ~+g1`}vofSVF`#S%6Ssc_!#To&5b9
z1ZHCv?rp9<YHDiP$0Qtj_+5&*Awg1BR?eF^f|<=woP{<jRQyE4<Zc{2*k8o>-Y!qf
zz99!uNXzynH`}V>tHv$2zQX~+lgR>*!H<TX$QU7U<lniIRWn@f(pLr?dJa<Wp>l)1
zLT_}a5JGLDR>E{&@2LTy=3!{Fs!`<=)(3HY7zJ$ryzWN;M~L8O3HeLDJ7i#16${er
zS`bTshdo7;$+680P%sryPeI5mgQ+nHzVp~{pOJvl_x8pzewGP*{NbH>0?G<vWC_{T
zMT{QMnQ_WGY$k01>LHLK3DCwzN1AB($-zD^TG2}$7TLr2@hI<%_tX;S73kdGL!o5T
z7^4Z@9649P7Rdbl;DNR<3Qbk_!WZ8?unkd`ZzKIB6!ZjG1_Z~x&8*G`S&>@)888sV
zFYmq>`ywZ24x5NTgkV1MVtXk84ICmV8>g}<8cQZn7Cvel`z!OpOND0G8trW8XzZKQ
z1P>&JbGhf*Zj#X$*;cUQNY;rBHO=^I<BAr<8ho595S(ij{J@5cxIG9vn@Es*;5AzQ
z9D+h?r}4o-bjOx?>5&+uL0W-hPkh~yy55&ZK|DptEji(WxSEN}9F9}4GRbuhXe2^<
z7}kUm>|w|03c~Q-$kTujYK6sGkCaW9uv+0n05TuS9pu_$fQLI?2uKC^oQP)4Y6I+w
zRbOAm9yS!JCx{`x5S+a<8z_for)wtKaBvxj878s5LUsQW@RdmKm~j}&K<KRi0@d1I
zG=~!%t`c$wg6siQjd=gS)3z&740julR$Q96wUVxH5Y)VQt_kH6UL<O@w33vHLZ(aK
z+qV;sdmyZ+W^i8tG>x!F4+*>!#8G_d!r|dHI*fVnI7NYW7+e(~6lc(!0l_3GyA^xZ
zqdnsQ**5D-s~(_8IQex`O9WNvJr?0lZ%w;SRbdiX+scU9Chm8Zns4MZ7CIF99G9_J
z;C*aM*f&5+sjnz5At4CF3dV1CTTB7-ydQOT5HhEPcFo@+E9;_?3e&-Z2P<F*o)pH$
z!Ep%`n0%TIj4Q|8_G^;a)nmA05dj<A2=Dm(8M6d}*#AH{faLnX-FIo+(Z>ou3Me1i
zEqb}F)5LHeqb}mtfZCm8P?A#w!ialU!$m?#y-%`4$e;z0Ec8y9bGM+31J|qtD;`R|
z0C*|D@vRb+8l+`LS$e-g?TW#@G|8TeSB!<NWHv6ilG0MF+jZci;hsg>TE;VKFDycA
ztnHq^&y(;881@`Pzf2;0Bqi4YOh>XF7{dggBmNIS`L;t!o`1D5g5(&%f@BL0YK#N<
zVMaAgym^rt2?VbZ_hW=TkN|YRNf;m3?{XrNU(!K+NMR(Jed3s_pwRv9%`z-Y`wEBS
z9s_wN`hP^EkrG2T$}7VtJ%;!U6T=hKO(-{rojhJ8u~NaLsULS4)IGqY<^YS}!o(!t
zJv@>Sy<P#jG1<ScV?ahagelc%Y10|1Xi})kBpM=KRc3L(iUTy0TKo)7G=D3zJ}W8r
zy9&(~4hwIPkJXvtDBP&Wip-g+hK8}5(@s-lBnE}C8VY!FU*m?xU;#H9xerm^(ZuvN
zB#Pv~MhvwP#A)QS2MJsJ)YYo~6M&>}=&PJ9hUo_dDUqPH!onm})ULEwLc+qRR9=B?
zmt1lekbfP)j}c#Ibmise^MsD~?AbFhpNaADcf>arDAutOx9o7?99T7>^2bx7iBbKD
zLu3>yKWU-{rcgx9265{V*h~R0MCRai%xH`3Wl_9?57LA~330=Zh)HCe+bY1hfK%_W
zz6QsZm?0C!h(rTP0V0OKNZ-@AjZn(d%S-b>_bD3bLU7i$WTZ7hTI&Xlb%Z^ds$*~*
zB~Jxa05%X7wwi`UAj{zbJPv#{jn#5BBM+>#$uSR-4|wmdz%=vxoF=&qGebAT`hYe_
z7_<bA0cS}4&C7Fb>+!;176Ey^TDTz2tQwTW!8mFXMF`&v=FSOoxkS$n&@cxFCi-Zw
zAW7qbf{dszYHpoFg#`V!7V~G2P*B|Rq9jp71*RG<NK8HnC<34`;$td~ix(JwpElW#
z#B%tpp*SX+0LneoWG?_>2x=}g7}!ra4Ng62B0Qv<r=a%OjIJMx6|Gy!ISYQq_3MpR
zYeR2FN*lCe;P;YqM0GDtUwS!XUzCzK$3qMH)_y428KDmCAnyMF(Z%_BTqBri{xhZ$
z#oRzvmbfq#j(ZMNhiHjQaxi{h4@*!``Eje&7dGTv-~X7bd{8W}5!eLt2x3}@lN@Fy
zq(a<Pwi|dd)&+XKgE05GcqOW^gP@KoDp&O{kO>t;z1aNbquvD<GtKQ$){33XMNtOc
zKVqB?!Lt(Zh1Qn<i3SJjyXNUvGF?zMA;|P&mZhbM(2k7^=w*~S_rczp*ug<@)1G_w
zZi^9`5KLBamY`ek(crxsX3T1i<@<iTXBYg7WP98mziw-9?ZpBXJG&3&2jpnP@dD%9
zo$!qu3ZWo-%n;Gw?wA`NgPkBL0b5K+C{nriABr>8wV09-vvT5@!F7Xx82KMpfeD8G
zPX(wt8pET)4{^d0E5t<DbYpC?{5!wAFv1i>Boa|XwjKb&#8x{T76@D2fou@F@(<XG
zq*}l+=O7%rO<fOm$ANGLh#{uL=#B+6S<q}^X$Rqs1UnJh9!SK&ig=-AkNSidu#@7B
zI0Wv0OsXP0&?5UbU^{@vNd1k^4H$wRFamr~86~sWwb(;4X#K4*v&7&WbL&F*M@P$8
zhyGkv0(?nOQqt1P$!)|jh2tFFpPS8#oGEpy?;%OX&)*+;MdZ*ts(-=U9?;V*u+mS+
zM5EN=9l^*kqO}%%0Vd(ANudVsb{zK@${C$)P81`~GZ;`{jbm_y)YdvIq<b3vI6S7|
zVfYZNVB&2Kg%-GW*2qo?wRM398z50tybn0>XgqG7gnEzIZV~Ax#*p%{H*0x3wWq4W
z1w-&!?&4y`H8MFn3xzBaTY~?wK`)tnMUOHDwB=ghcWi?nVIfMmCei>b2=q}CP7p2F
zBO{$1i;c|XiUeR8o%dI9;8tJ->sd^7_~}+*U%j$<VICD#RRc%@q%)GtoSVyv+X@Tu
z_##$6#Jc&?jo*Yn7<&D9U<Nqn1iJWw3y(X~qPrbZfOWUZ=lSorm{3q~U#e{G)%Y|D
z8*8kxg?=2fKymI(HUp1<=T0hD^mPdRwwV<G?Q#{Wbu!-O2m|k*pD{6pBrI#^^Ji<@
zE?+PwwuS(0Yj7&2niuZ|-mGQXkmO#?VR<y__Jy<FC1YodZ42PXf_sQa-s*SfNT5r$
zu;;8ebYYDxj+**20AGNh?4~IB)pE$8JY5v}fOocr;et3Rs$gBE22_(Q6PVh<E5A6f
zu=uuMNKTH-M<l*ZVej~p^{G+f68-p7n&F|RW{F1W<YvPMJpjjO3@%t$S;6lx>R|@n
zK=N5qp^qrmNN;V)vQ#2>KU!b($XJgAJA*@#fE!lwPe4s1>Iu6W8w55!qV}$s;{XmR
zayNsq>Ll7tkseL7QE)wPA1?uNLyBdhDN1D9vSkZitwGsiSEOH|+fBQ%gqq;gn{Xju
zH|ry`lC&2L#Uci%K<#;l`8sLqfhz<j9t8Oloz}(0xErCNr*NO(>LK+WYzR<zx*QrK
zh!v`Pqw0I;y->f8?0#7Q7#Hf(Kmn~ae#)p95#7v*6Bh*nY$Ne@He#8gk&pc+M(CLR
zm%})j$u~tuM`Ig<xkduEx*JcDI{tGBA02i)tw|)neH>|e$YDc&)x~}X(>fsG#1stI
zJ3`NiPXgGEqld8M=Ky+kQ9nchH;p7-#1s&D6WqaIT`s<eE)(VnH@h8NH+&|}v%s*R
zcJ0S*#Zv~bnzrwdAK&E1qer%*__HSUB`O?Pd+=dQfub3B>6*1`e@g6JVjN`F05R98
zmXFSlWeSeos>HesC6U9yPOKxGdJt=)Uc$$VUuf}0!GcwTVRe;ZQlgm_`bBu8lR-zs
z&*SFvJ+1v?V_~poz({6)lIHVsx071!R^m(dGTusToTgpQOe?#q<Eo>I_zw<#{>}ZX
zhjgi__1>h`g-&0xULSio#<S~y>#)<;3tgAbY(BF;TJMb0Ym>_w%#<{Rj8{+4-F|2W
zm)$QqMSH!BS|@I4x4jqUtBWnMY^s`8zHB&?pZ@Si+7Yj^ct(7J!MOV$m6mej9k?NM
z0D0h3=nsAR=O8pk>x2JZWX&5J89@+thx5(INOlYd`$2kK(Kqbw1(=A>`J5{fFV(%g
z6aZtpyjfh>m)^S8ztWea<@GLn%3s*$ogFxda^V{MJJ2tjfcr3$1~Z6jc+!-<-YGAy
za3+cf?ApbaBXLgj3tAfRp8!ry-2Hvr((;z&(f|js(T&_@?x7jGIoS5Zi(?W9+HgC_
z+<0kpW<l{*{H7;N)Q^s^s~$bNVHxvUD<nx^JhvHEcJV7qXK;7GePs6+zYphk$Is5c
zv$+({=OJD7vul{~<u8ROLCxT>u(5m*7ufK4|GXO?BfCXak97$d<{xE5XjGJe`d}JE
z%;*D_u9=UxH_m9(em*S|xYS7R_dZ4KA)-()Jg$>bVLI{R^MZ3er7xOUV*2yPCWN9?
z)@gaHe3>3u1MfRHc;%cZQjWy$hntDZkI8w}lHujWuHJ&C;`i;oK4r7<u8-^&HXXVB
z=CmqwA>rW*6K;0-or~IzY}Ayv2{|IT)%>ZNZU@^|+!oY)C~k@a7`HnW?nQv#fuGOs
z$7VxiLQ~$G)%|pjWzrHnRL*WSd-v`g%G!_m0YHmyD)adQlR(XPq*K_fcI2XzpFhps
zhWdJGk6*Tu#r*AtLIpm+R_LfzWrP9jklt?Y&+_dJ!NBy;MXb(|7)(+6BZ|U#awf}%
z8$Kf>(gcGYqOb|$isz#P{8HTuqXM!pww{B7Hq3-7(H4Ns!)RzoB<3JP!?tqakhK^*
zde)*{1(J!6JT#Hak0=&wLe0dme9%s#3alEQK3m%`Hk0`1QGdzSEAbo%&p;Uk6VNsJ
z-7cFzu2hw=*tUD{%PH!x-!w;-@tTQ=EU}G2Vce#ZY-m`6iX*SB(wC0e+&*0JQAWnP
zm7h{8ez?!wN-fBGL`{imxA@0rJNeijew<;I6W=DT4DUUtqjSw7>wvYj5XxtN$lxbU
z*G=cla2Uu(H4XbW4OgK{MAx@oLl4gKz<1bBVB*^5^h8~DeVh<;vv0uC&JF)@0U*r7
zL4rxxk-h^;3(OWCqe4sQd}I?76Qz-&M%)33tt;AYoOl6%2F{9B4SS$Zc@7yhP@Dlw
z#DXlcYF*2wxhYDgGk7t0EkVXC9rddFz+||%xF!K^@WUd#7p0ff*e(oBPXS&eWSf3x
zdE)!<v8`<olA{`P*X}@|_UA^6xVgCrn}f8m=s_@*VOX4<sFf|BKYV5SVXrz?lj5IW
zM}aTUB91RS^7R5{YH$Pj^5sjy%a<g^h8+DAzv4DRaN2-A-3=}6BDWQ8EO_erp{iJ?
z7|)2}xE+Z{1WZkd^H>XP388buataUi@#RB>2Do_O53_|NSC9!i5S<#_#<@@VqtsG9
z^n-p<+vNRw2SH3tf4{*I-`v%8J^s)4GaE4*g?f+5z{qF-=g~y|{WRoa&6cltE%nhV
zRk)Tfnv?GN;E^LiP-g)Qdf(G?6T_9Qr#F@N67$KRE59+YF*SYg=~3<2%qiSTrj$MP
z^;$^vr9m&#X39P`<3Y?N=Z2(wLU{j-9H?t*Isl#+j)QDiDqxns2@I6dXM^hM&fBjs
zaQay;|BS*`s|G8AlH!QsydcRlD5e?DLvGS@5HFBlvjJD*$hU8*7?GiDX+4uR@=oHI
zl2!k!Kwzl8y%V*N<w)axns)Kv=Nj3_%AdHYBdYWTHd7F4JqDmUJ28p9fiihB%0fVt
zRA|v?5a<lF4z|T2PwGA2Bg1~`VeisvdwY8vZB>V)N}nWM)(Q_GKL8(x8)l1y0tHlv
zg_OupT6U$}tVxoI)}H&}T22I@#B2Llo*f%pPbXWmyxGubx9Z>KkTeZIojGV+zQBf~
zJ~=PZ9N$CE%)X~7kQ>pFX)c)tOPbGwY>guVQ@psqA3q#$H-Z<x8NPg}yRUuw_RZU0
zWBBG2T+k{p7?~QgTrqukcM&$BCvZVBQBxj1d>BNoDzN4jl6q^=4!;_k8Gz7K5^G!m
zM+X;i2`F1=&BFFsg?Y!K{^Gg^pec|wL`<XSDjB^gN-b`oOYBoxnO3@U`!<E4VRL(X
zFg`Ey=jJEz%19C}nZnNfnee%#%t!IKIT+^(DFNYlw8jL^kAtZ5=}nT`#-{KH4CzA=
z&a|{VTi(WV=<wkhytYvE(tE#@5`F}kaS}?&9KMq#tBoXSquFPHk9EOFk$lXd!|G8D
z@E}BSQhK)7jXLb+Z{y(0eCR&!?{m*Fs=H_Ve8b0vcS^znMWKG?s%3D<yKTMa$;ff1
zZ+;@7rU|N%*2qnyD9z)cR>3`N8Wi5=EvV_&J8{6+m;(*&FAuMHdQT0#zS+foCpnbd
zXl>Qx%cxgT9t>x_nC)J6p+2W8MLIQ6WODw>$ml4-m*t%0&Ex5fZ`D#oH6*nn%9wf;
zzJN4M3|{>OHTegPSvAD(+wFdMQYKn8u5)4*#&GuW!#q(<<vdw!VR3Ohz>Pr?v1=mk
z(H}p4Bz%@J*ElC>!}+eK+<&-v@p4>>`)7zcpE6d57MD_K)*t%~T`R-4o=P<68t(ey
zM%|l^ACz&wr_d_gnlndYc9C;#pGjn1)3a8)KtWBfo23#BUh;G_G?qtw#_0Sg^jH_y
zSx_sfAu`OnoEL+?Ki(GG)WZdjWqcZo8_>a!%vo}~h^o45t}-7}i${b5Po;xw)Wbb$
zZTqF=_T$St?@Jp;20PeR?j3iY?)P+^#^A3Z5-6hpm-gSi_JEHLUY6RUTZ=+b%uyX9
z|3>8RkKBiGd2@|G$VdwigPT<33$}m1Km(tO3c6-CVI1+VUbVYl1EpiNB)h3l;zNX`
zPkNN%yz4XOXdY@Fn}LrhLogFFb92J$1Ulw!=hG(F+QwQtBGc09`PMXZVCnnuDW`mZ
z1Ml<aVt8=Ocv0ll2?!*rgzkBPUrPS`^NRlY|Nbog0{{F!{Pk$&EJbi|*|QUxf|2`+
z+-bsmkV4JOY|h9K%G68(O+`XimG?5@e;RrTBK0#o>|PK{<48XkPVHYwp&7oBkNmpC
zbD`a5f=7}crHLWt7I}FyJZsHq_CIC@U*#$@c{N2g<Y_(hOG_h*rfImiN9|Gi!EiyW
z36=0CV+yR~o4BZt*+v9AxTU4Nf{iMl3|(CgLw@Hw`R(NOIv<uMAJo3`-X`BVz5y&;
zm*T8hX*|1NTc#7b0r-$Y6D!7MWG<b!JvDztBH<AESH|3Ux6W!uS!u2+_jxe-XKshn
zTG<A?$7aLY$P#?1*ks#vFGXGhLwNs|^r-ETGKs`Ysl-AGTt#R3ZlTK_FtE#!P-CqL
z6AKV)kh!ABiw^<c`(=3AqZIuwN2wxtX3a^b{=Nv=D%Q2QE>K4fKmUAwuAkAztu*LE
zR%Yfla{Ur4*2BZ&HZr>r?Meq4h@XyYfBY(wNIesi5O7N#6%}!z3ah~cPO9J?n$$^L
zP~32i!bUu(rA0)TIJpbLen?!}Q8N4Y!CV^r#VJtqsGA{A{qOa}b&ZkNyEN#c1v&J{
z0Z9C%kAa$qjZbv&D3UCl_Tn{S;ME7#{~nOtNJk1_*wSfJd{YqU|0KSEAUmL=QEKQ-
z!kI5IIr(d1?OUuu{4uwGOFqsxoDYkCaFO$y(B(*MVWLC8l<kMzen;ggutr8^7H-%2
zjnUG30f3??t>nayR_05v=eV*hR)<(8&+gq-JuzE_qk@T=eDkyGeToR|HBwVEY*iei
ziJF!D^QFrxW+G2K)Q^~Spc{3=pqhdLW-t}t#Xa}_<AJgzZnoXX*w_j~V(?ga%BF5O
z@<~X1r|-RmmKy`HQz-6_<(yulu2+pg*%Umxh|xHT&ZSpg*jacp^nX`-R(3XX`C|8k
z6YOTJ0HSvM#4LIvR8`fte3q<GQoR~=9#~nPSRo;e@FIp)HuCV;;9_}AB(%NgvN#4i
z*WqDDg)!z;1c!j7%%~au9MK$P_(ojrVg2DyIK)osCQJygDpP>CxeueZDS+ZsBkPPl
zwzi%G0*#x@zuC4LgJu%X!4EYA#ruyR11w>tOp<}gU<0>0D@rBIok<oN2FAG1CyBAb
z%*@POqiY#eaW~J;j&29p<w2!oDnh{niz+YS4eF#xWOwxAqEb6^W@|@hCmAQ$?}bkn
zAo)IkmBR{|3JMCOw1jEMRMyHu7LFi}8SjsuKEWCY2DPfJo*P&Y7y>7;kd6-1xj)|c
z=)yWU$dhbttsdQ>?)(9vHK;R*XFX6j-=6PxP@h%~Ps7R_8+#Bq1o4c!00+f>z+kZV
ztj_YD5htZR#e39hpskUd6cyaL7{#qsVbVo~OG0JP=n>a+(snORtSn0{|4LD!9C=qy
zM)M#QX5M(3nYq4vu14y8ON$@Y*C4w5{Xo!2g#q!&YGp@d!rvz@iw_<?Bql_pGyu7?
z3NHtn{_kBm9IJ(_4JJBjvbrRxUQf)D@i}f)LNEd*NkM^^(c$99$0sVf222Q?*MEL=
zjyj*hOpl~F5~2x#FbM&S^e*Ftibo6$on2fo;jXaDvuhC2RK;ytR9uXB*0M<jxNzfm
zWWO(p!%YEY07U$Q$W(a|`KI~(dtW?ZNC&n+e@iOhPnqUnyeL)+#$R@VPfSvQi5W9c
z-3>;WW@{+WB$FbNfS1;LsCURM|LI-f7QTx{3G=T<X=!P_Kjd%^Vu7k0Iz&$jnv73%
z_|T_FB?U^>9PGL?GvXgU3<JQp2r@7Z9XGJkbdMbi2A;);AB74_#K2I&aX6B^P${2z
z`i_nc`1ko@k)h?H1PukRA|oS%f~ke`024I;SaL3myUcd(N=Z+r@9yp<XCN&22ydK}
z0a%MwpofJ7(sS6=iX7BqEilVe<hE1S3$VxvY8wmeohVP8jUeazh@Dk39rHRm@CmLZ
zioo&~*Cm<zViJfCkQNI?U!Po8@Gb^INAgmUrv}JT#l$4~B?)=y>gu{3_6J2C1qG@6
zNTY&Jken%#cmlsVHIs^qH`UbC;BZg}9{+M549&os!-o8jBZQ$Vylo>5;T41p7ueX?
zc>DWp`n;T2v{MubKs7@X6Hr~E)Bu;!H2F<njAJi;I<9DNjH>CSN_<I$2jlvtJF&4h
z;KsJe+}xa_Ya&UJ_wU}xd#%kZz{P|Lnxs9U=N>><#{rN&Nl*pAYOHh*T%O=@Tw!9V
z!;i(_*N-w7($PUu7XvOKoLq#Y3hdpxiIn<oZf^0}*q<QQBWip1mqHXMn0Y;T@IW<3
zNO9$gAD@|i8{u&QHaiK~$^AW-gh}QXX{yMuiUM%gDhgca_(#4yXScx>8uK=B;YD|H
z9cpx4sO1JZjgkUK<0-^Hlkz`CC*|b?pB^h}K)wcyX+A~L(!b%l@jA@m&EM<TIgeC8
zRDN$xlL_M_SOf!r@(3AXwro}*BjF5o2FChRRlLhgAouWhaxq*}{Gi;JB(fIc*D%Z~
z;nTa8bbP?0uV1^in$*x<pW09;nPz}r!T-Smm-C0wfH$X$`lijr^jOI*zcS(3TZOqB
zAqSFb-<0+t5Elw%>;W`ks}f`n5{fLiqcETLp53%hr&3;0#pVUVs{^PN{BWltJ7?8Z
z3bSodFZW?Bk2(X7hf$^Za+vVn&AUp@>ss(?Y858ZnZs}j$ULbqa5H@3;RSUP#e}@P
zyfjn@$o&x5zMUC+kbHPY<%x|5p*rEy1h{z&vyHN!5n1FM#yETAg*P4t@Chdj+jH~s
z&NduDeEqj?c3>#S$nG6%sK?9{_^XB2j3L=(82@`726Yuu`&xov%y@cu5Uwbm^w*Nb
z>o;!H08}9{IvLOH_?VOp4cP$KExrq<^tg4|sr1BZ;z@!7P8tqp)2mOC4Hulb%Lav@
zFUG0<ILihI8h~DrdDEtJh20>lBkp4zVeB^J)J6;Y82g_LM0gOda@!>@o`aJ!gf#W2
zyU`-4;KCvBz>}1eEhrg}yn_)*a7`Eo35uGFUzz7cH%f;~5#nSXT#Asn=7c$Dri-iv
zfFFeR+6tE~Keu@!)XjmIZui4k_BG&gwN>m8qhfkeNyd(VCE$T|_UcVI(VZQ$?<!#4
zwQJWLW=rdUw&izD<z;!T!yG|?w3*mBkFjAvoT^cn?ZTA_V20f71RuaIQ%3+ia5}hF
zhm|kSWZ_f;q(+X~RaYx$ZteJY&yuSA{k9~L6h1m~Ib$jujDs=A*#Iuz)qk-CU;(6Q
z#r=ZCLSnEmFkw@k$i0n3KE<QQLE^%sgxngKQ>_k7L?|fj%5TS&)uk4U@lCW3-?6hi
zC;4?pynk*W?I*ccP-nwvmkf9CSus<1__JZNc;)N|VgyEEZkvUnVPH{_{JzNws$sA3
zMCf8@d8@%$d4Bp$xMCIoV}k@W=iWJbQ~kvtiA$0d23#HTt*x!5k4#mVFcZZkLbArm
zIR#q1@8|Qc@#)_nX7hO50QE2$BBtZyFF_1}a~Xkvs^gb`ZCygmi>4E2LnW!4z@YpV
z-gAWPl*DvRU8$r8yv)tJzD~KJ+mrJ6b0W+ntfs|L<p{dqs0Nz+&KsEUVEmNv`x-#A
zwlNKIjL}~-iA25M+|#ojZO6lRh(mjlF?_KwH!(w{@>DV|mD|>w_;|qO=-6HPJ8%Ev
z?WeUuI>&KMbma2jXDai(pD1WdN)wCG8FsfU#!qe-^27h$*{B^u`rl;r;8ex%G<uoD
zrgN@^W(07--ox`$lQGBky`pGYzIaJ)GpZUKG^mK83=V0ee2A6ZL7KPV5v_k35bSH6
zlxfmtP=(d7gpb3h9gRy;_Ioib5<$&V^ld5!(MMz!tCBDLvi{o+?$l#dOMd#k4_vn_
z+s;#epVRW>^}A?<F#fSOqh&6&@Tob@PL34jnIIKrfujC3eiWpMtmEU;)IYeLuwL+N
zLjsLL{_DZ;n&(<~O@fM(F}VJprCLFjssZ{Oi3VKjcqa(v4ox(hIN2Np*E?Ldf|}@N
zP|W{rIPnqHkbjU1+vw%@?{Jfk6M6}A^9=bp|NL2}C6TK|-U<HvKiW$2zW({+AMOCS
z1;5X9b~Sq`_Wj?NdR3%7RfSap1FR7Y{BvJMQfy@UuWhA7nmjsp008Fa&!3NXiDbC`
zw@SyaR(5vK4{kh_Z8qHh?_V*Sd&=vb&M^Gv=L&FLagGuD`_RcNV*a2`J{<h9)ot-A
ztNYs@lecgp;jVSzky*}v|5f5uZS)^##WQE+{`r0!e0x-^AN<ezRQ>;cpZ~k7{$FqZ
z|NgH>Gru&N@vu2$wVWvg#=uE)f88qeel5kpz|t3;frkSft{>Ue*Xeq|ta$6+TL>#)
zQxDs^(DO^rXyaMk7bG}nDtNXDd=loDdgmK5y84);0O$c<w1cjPdnhFe+-LglIX%j>
z)%{}d@Oo9AVgRRxy2%RXPhEq)c2On#_K6=CPBtFfP*(o&n%pLTwtqiVXD_qngoE#Y
zHLu>6EvWiX?C~lmPs7bmXZn3y3!nc<rF|*Q+*>BTs{iXbx%j{P15b5?H&aWu`aCNW
zuc*p`nZUtsy4>ea3V2VsaD3t&sZ7+gxqf*2ug{8n>63FGeZC+1{vv)kRqXxXQA##x
z&VaCv{d$z~mVr_Us$17cn-4zN`rj-0V-}H67pVPKnorb7)!pB3@XRWH6=oC4G@beE
z^lE?nr!U3z>upwV=@gPrb2V)mk^8XCYK)ojX6#yAfKS#%ICZ-1Fql~y9C1!-*ZaQT
z#GiM(d+qst0htY#?<;%?a4U8WwA}UYdhfQ)bl0su&2-}ZY_gS{!pe11w<}_wu6%oS
ze6Pp*uev7~IUYs%b_?;`XAp?ge$ltm&3>(J(r5pE1GZGT(c0+=mq$xac;%U&2WhtJ
zJv-rbm9{@}`GcaJ&f=8PgzKPfEbqzvlty8}KQ^r0&6d_a7rm*saPO)OEeuTecm2Dc
zcAhYwPB?fe<@)*qj-5S^?yS76oBQ&7lh0D!no_|NLw-)$jXPDPX4q}bOKSpU^Y@(m
zL_ha6w!dTd`h36m<x=|Ern&8kt-eE-UNPCTU3hu4GP26yyTtN=tudEm_MfIXR@xev
z$i<s{CVH~(JbmIbmJV*2Pv6HYGg+i8OeZQF%h*Fi#OW*lVnoc$>kNz~MG{x>e=s&+
z8<|RToA|&JbABCPqcH!jN3)||lx&XU&Xr@vQ`O;gUz(oV9<|O1|Fw}hy(-`0Y;9+;
zS;3`n&MGURREp3vFFEhmxA<MwG%231z3rpz$w_tMn+TPB?ArCMbE>afNA-0rCJqE>
zRJXAQSp9PHnxIm<9GtC{>KJ)pDVO(#B&E8^;-|g;9Uxcx)2KDlj?hfLW>4AuM_tb#
zcdy|+**V>AR$mjTf#a?w+a;1`M;Q$~nm-C}kym~7y{jxwE$8k`-NBEK=L#6d7=QKQ
zn;wZ(q(oSVh)F9oJ)=?gdv#b~|GE#et2G*<S6j)@J>N)^>yj>#KFcquLhGOD8u*1@
ze#ygHaGy7u+T&x!0skB$wtU56DtD|>mQoeC-!Dtj`D*rVx_<w*T}Af?iTisx=(?5s
zc$2m+P0kr!-zX6Hkzq~C7`67Boe5t87$Z`aD1bogxe8NIDu0#sDj#H8jQ+!7!z%50
zeNB4)p6qW{TSM*s)E(M!!XSM88a;W28<Fi-|J`i1Oa=J8Q(HW#cq<bE1Sy!=nVXH6
zL$=EwyZ%ToXm`*m6UuA*Lzv$Cs0-}Tp`}!=Rr+K|5o33kKh(GN%2~bZWO*<P_jM~M
zw3~dd{8Z(zab^`hyZiBHUL|U>-@kGFzY}@gX=5Rg@Qqtes>IEgNIEM?eG*pPO1bUU
z#h%L#_Ohi?2xhzPzD~g>qpf~CilO|<)t=%%cybc44wYTmHXmcxCoDZ-!~>Xn))5qX
z7k(!{YHyXXP^L%YBKzkFu1-7G<CUzmCFom16!p$L@yP|lktgpZ)?vc>&C7Rf^=F}A
zfdsKt`qvJo$`93kUO%50-!P=t-1@lUJQLFfegWZEzM7n?<+{ZbC1?BcdF7vv2h-9E
zKiIyd!7a)1zx$w@&mq_#_=4#E_9~5-@q2o$UnZvA4n<v0^kLODmuqIAV4^v3<pJd?
z-y`cindZ#Q1QRGSx*tVv74uCr<t<yRby+&;uQqmb3!QJPz=<DnJM;%H)76QY?rn<C
z`|lc*E#D*{!g7uy+bxGiQE75)wpj1tt1KFc2Yanc3SMsNR#+?igiCr$v8<;WlW+9n
z!*n~sL=^gK#W!&~Eqcg)yC~}B8AV@wsHAl7n$=1a)t@z-3s}F)eXCqpC0pWccznny
zgJYc}uzTMpaxU@zZUnA6hv3m2t9(6^qc03R<J}up>h?{F`{0rHm8Y3>J>`8joT1vd
zT|LOBSbWv~Zl#n@4B3a~ezS;M^o&#-FE(qp>{p2~e>LjDX}_N4w-e<y$B|1(ug9Ev
z-%6Jhc86GIjlWKQ#lsMCug@u6L}~Ou%F)VjQJd3(zj~YhJMvdw6X#;xK1!p0O#S}4
zsGdUWVDncy7(1lJ-oU(n+vdy}6+KFSi;5P`lgGBpGE|*XeIcvPT;N(nqi4kIv(O&$
z`Xz-<-kab&&AH#<bZ&pdEavN&TQv7?UE}8FurYj4aLFr$erPL|$W!2l9%B(p<(*re
zJ0-5^k81y)m*B7sh;!7ZqM=pTnTq9WOLgY-uQF56)%kX&Bz#DEHF)$S{f3h-=%l|j
zl`CmbdX$KDaF=r1B|a07*iV_$Qp^}D`0FgyGZEj;w&KILjIVwcsbCitc-!8&Cg|Tv
zVf9PA$$y`?K#@ro)BmhpG*7EF{{1dnT>=jOyQYQy|NLuU3f(h2RR7*s&AYayrlna-
zsQgd8bS_5mzl;C>tz`SZuUY<A;S>JDgVFcz8y>OQ+8|?k{5ZNCU>l9aacIx+zt88d
zy|XF4wnZ>;nE?Cbk8^ZUQPE_r(lTj~i4X`;2_0v+fmFNpxYOq4<=w~R>~FvH>heZO
zW||8N41eEev$eh<8~zCp(PGyLfI?oM&YnA`W^XSEFhHWA?c_c6U+w^`|JHj&s%S3t
zjvl2#bM?46Rnpjy4P6hqJNB@oCKq5h823Y8f*@`5R2?1=w}I<|{{j)<@nfnS3Haxt
zj9rCB71MC1LNiQ%kZ>1hk;VAAymnCK+&OX7-aw@ATYwbh))oWkyI9DCR`}~zo8Uw`
zP+gF~1-Km}&hg7J3ZCrYg8aL8|F+w#iZKeRd-5kyTqStX?LRI6fO%S?ZUTTO4baTK
zuyg!1<Z;^(H0SK>9B_VcdfsWWPX*K~+Xi6#7<mVgZagK07NJE!i6W@!N4|d#s2xNw
zGKT0obU~5<bew>1z#~JfYX#6zkP<0=*`yNsGrbFiGNM<06b!DHe2&bgU>KefD^lnx
zG(c~}$km@f98gYV{We7a5{cIVTbSVU#xuuQ%<2DIW6psv06O`l?oK<*t5;q1eOZ#6
zyc*3K7$8P<AGvV9Vdz1mix9AqsM1MTcwll%@OfQU8jOKJ<9PaX4P-BFi2HjE=5Jlj
zb@0l_beGKe;r4zfGV&Vi3la(oIVt*PJhCB+%FWLo#Mq<8>XyPaf-eB|2Rxs?`^Hu#
zx`Y=mHefCV5Qq`E-vOX>pw$FH>8zE5g9CsgbuF#>UHj71jT!%&k{Jg}G!Vv$si`Sp
zyHk`NwIXV0WM06cMoo{^-V5y|9uT0NQ;;{HHzaZc{7!-?;ia4#yUDd{Eyl=!=rzIp
z1!DvD1x^i;`2gkE(X-x16bYKFm+4QRs$9Oji#&CV7G9mo=G(Dj18|Q6;1gkA<o-c6
z5lI8DtFKqZrvo?={9k~1c-N0a)<O|P2~89d=g&E-hh%R1?~KWWB?zY3zDQ<)zZV7M
zPqg5E0MwvYVN&%IsARZ}$<#CRVs@go>G7I1huaPHRb@Uw5dk{YgZW%&w;wlS(WXg;
z1qb_zgks)9;fn#4N>-Z{#031E<lRv?!D&H~9$e`RmxGh@Ku!9b<eZR(Hg`o4zm*T-
zs_}rc6{JZfe@52o8M47w8aOGSzrcneRTULV2zw#P&dRv-V*#u#4Fi84EM<_+7bNRF
z_~RX?($mE7ErObBO?Vi*0TI*xkb(dcdldEw6i~T_y?nV_`{C{z8RQo|`llmI6hDt?
z33w6}$UVH!S3wCCIQBV>L;l{=3K;hz&kYN-A1SM&vh8@uWxwRGZTqL^a~ow;z`Fu`
zVA-y+A8!?kZ!*q+KoRgHXwxf6wQA0fPXdm{pJoasiTmz53Zh>xSVwCM1K=7&@Fali
z13Eg5?rjZ#>2MZdLa{zUws??4zk%O>(CAGRTt;q!;`Y6}*qA;O1N-lt`HYw@fT%J;
z^Fr~TVIH{d7-3)-vzWUmR204aXu!zkN?z_{Di-E-4rytshK3oJhYFXxmGH@8z$C@6
zI-A~Wf95WnnnWGSEzb&**n*y_LJ<I68ZarsA)Gm@o0$ecFR`FtBW$~1CG_2u8_$Cv
zVr6AKBv!1aDmfW;9D;mOQWH6^K~#e}PXfBXtz<NWht%BB5sD`cYUMe5Pboopc`keu
zwvLXqurYGW)TRpk^#NE=N}DH>@loKci2s5b3>j$bKkuid5m>&eAK2x`%Ut~3ba;!0
z53d8aTF=;+78no)=Xy#kJ0}6%J$m+x;l_;{w&%}(41J^-PW|HZmC~RCQ3oTf4Gaw*
zB_+{d1Ibp?tm~G8_aa0dP%QXiW`cbO^;f_W55`slm?c#LWd?|OiTi-(C^oV#jvZ_W
zfL1t90H|UN@oWC(hf(LHn_~w6jhdTtgR+y?ba2vb^`2NAaz51NVmt_9oKtZ(wz#Pz
z2&WhRfn{eFO~j<64&dMima)x^*%SvR&NM=;!rCxi*07`jWcfF|{T2_=(3b{Xs!2@?
z1ypJOKnu_^Scm_IvF{G&x^Me0(Nri2Wfzh}c2>zsGLn>pBr`KB8I@#{N@cGigk&cv
zM3R+|9f~3=d;ebV>%Oo1`S*7m&vPI5eO<-(`}w@bdA`;OtuY-7OGd`7jg*3L?U1*&
zhFC6PKLOL8(zFRL2e|-7I46P8=+O$m81&RAjlYKMrUxb1|8Okk8b8P4fkg5afG<2=
z{AidjZa#gw*V+)bBR&jLS4`p-xNftP;}ZXfj7`_Pv;N`Qxcy(Cb%B|IgNth&aj2>o
zDPXQ2A}7gDJbAJ>B<bmJ^-qUOFltEH_fcYNLhZ?S-~f<Fa^1ibij)CJGjInP;k<_u
z?(Ne-b93`|SY?9nFv`A{d_B<&wg;%~w(C91o^s&PiR2vf=r1-7TG`qvW0hlona79G
zc--{8cwyip2I6UE@^W)Y3=<9>aM(Y0)jdmop9Go)UM1)gc7mJ0ro`GIvu0p1+y!+Q
z(DbylyN)4+n0fXAHz7VGx7rgs9f2e2vC{s8Nyab*kn@D21bs9#JWLR6s!iS*;wjLf
z5$hD!02?kgl6aSv#s?ncuDg;=>9RB73y+S?&Osao4(OQ^6%I1crTAHddd4Qr>p!&d
zcFU$8`p_`m+Is?8GMe8T9WudGAiQA<F(_g-N@jOpX&J;^K9!Y9<QZesw)EI=aReMW
z2uNTziGXeoxfYB3Q8G82<3?&t!FNAd3ta+E<c4mO!(_@i$MBZhMDYklc7~}6IQZg=
zD2NIm#rj9Y^K~%!9gJlQ%X=tpqAJnRY1Ub^;d~uyvtk=}i1x*RzP7eEC?=xV<_J9y
z;LtWXbw=ms<MLB4a3sJ%P4XznXmQ9YLqfI@|Kl9|9RI-Q2!g;@CgDN~T1%&og&{b=
zsI$<XI-v8;?Ok$YAnMKT)k*b~9Yn?nZ9d{hZ{sBxW)E6fS(U@|govLTir$>W?2NN;
zgOetf8un>fuN{;u3HkXm0hEe!Qg)LMt}wxSc^t!uV37)i8XQ+Ox!a+nDubGgY!oC~
zq>HWB(Xq#fM{Fq^0EXf9X9VMSNY8Fsx$&zZff&1uvd>{uB?#ASuT@W?14U{z>}G|1
zmy6o)mtfx@{$T8dci>&XT;;C$h#!xU!j!o7SbA_MT4}R^|6$&}I~&<$MD0g}^H_HD
zijreDJQAvI69vWd=e)Rmr;0~ExXWD(9TNoKNH}$n$MQBdqx<46Y&D6i|5A9L@>t<h
z_7og~5UgQ$K!OE6(4)Ch$+3ibE`DRfVw@awc2NC+KUygZq=tAZGLo4TiU8gr-9>rP
z;K`2<V-I%~?wTY>E5Wxy-mZkx9iIvpO$aDbd0I*=*Vpx%3ZOg%`_<UihOT-e#F*pq
z^G6_R!DM0--IP$o=8E(pAquzW*0DE}+wh~w=?>d2l8!_~M83m92ma<(qd7K%#Elt#
zQfq)3!0m~u4~BJi)K!Rl;8Bl8eSz`;Rz^JEci=(nQ5TFn<&%iTtX@uT?)4B8u5t4U
z!j7|FnzP4B#r2E1p*N0pY8ADC!?N-!(90l>E*!u12*Ae>Q%GPmb#$np9RUZ5QHC-<
zC`la$8jxJjdrvS58Q+=lWRr5H#&w~mnwOS_-`#N947Q@+g#|Zg@IVORckISE*^XH(
zMBD?Au#vr|_C#<k&Kh$|ONupnjyP__$XKgQ&v`dnT3La6kMB|h!N&M<*BoknXjefB
z-+6Cz6h;A%&8<9|j-&Q)dlT_8yir&-B&%R#`47Z$_#;qOATk0kwsveX>LG|VyZ}<K
zBckQRjnMwSK1epHiMjMRN<QdmznXQ-%s7)|LA+tThKj+-gjcT!&c-3i3Wc^0Rsd=#
zQcdHjU_=GjL2|S<G&fVBiq_P;iR_?*T?Sh8XLNN*g@LXFhyBw>J87f0C#Uh@l(e+8
zyoaR46M6ggo{)!UWM)23FM|}eIK^@Ard&C-%@o`<xK%|=Rf0bI#lcW$K`|cwF8n`9
z(9--6Hiop%Q|ga%@gwUm?d@*e%sY0~j5sHusK*iZ=UT$BbFr3zK?oWhEG%{|uB3X&
zR8)5;V9E19Oewy`;ouZBRM4ql9Up}S;AS^76Do4qIE}@FTWDyMaXo)rfd-qrcXVl?
zRY@@i;-vN=sD2YFH{7HUS<J<+26g%2-h@X9%0>Iui!K&T9)9cZAG6olw~>N~Y)B~u
z-U=doX}j(RE%-=qvC*Ni!|{dxB)Vn9<YX!?q^G65L|!SZWXJCB<qbf583hPHFuaMl
zBOx`1CYIdYtnTB-Mk*?PI`qO>eq3331C*rreBS6i;QL@B0e5G8@2r5;0FR6yjs!?i
zFh1>z`W<E1&4`c|EGW#A^7zX1ij5R|;oJjf1rx<L7<W;)?LAQjhEDVB*}HH#zcbE`
zM<GUJ6mG&wi1;{r$sO@ISnCQZnkFFk(Fxyn4ts+XC=`#oAgafm7w0j<1S1;+;9rh;
zRIMsOAp%yXb(pGQaRpbe5$<l}>G(og6vm}|FD&d9I8uCP>=1IkOCTo+-wDUjKZP<h
z07xY{4ub?*3~>3lD8OmmCcHWL+6^ypl)@8@OCL%Ba#_!P(tVp)%hU}W6e@!^2DU1q
zi*<GCIA5WDVCUo8jN=5YDB(|03(~T%z_L7na4PI*7P!tgZ_1~phl-c1YuMcI(Zy^!
z{VFRf@9ls1il2<vMVPstm=9dw^mr<y2QoIsB&6HeS}??svkk`)YQkRFtIlBp%_&_o
z<CoexI}aW_Nc5|wrlxVlxp+(EczrjzXQ$yAB26iJ?c8__C;jK5ii}K)Sx0%{+Fghe
zp(Mw*B5^#UrK{*S1aLzoqG3L2+jSq3iU0I|#54d8J~Y$bDE86BkW2l|8)+PDq#56p
za@3Y~)?tgy(6k$vIM^a;+Ut)te)&RC(9vbvqK0n(V_x^YNV-AH4Cko%yYu(k(|UTF
zb#(H2{Mj*On2@hP8SwLoZhPAviJOGhZsJ0zPhxrCQz0P~SZQQA!=FSXHFzbc+})v*
zBKn=hWt3vXJ~Fdtk1;s-*aQ}UoRAn~(2A~IL&Oxg?s9v|k&{YJZzA1ZiNj%h8TaS&
z^mKeRHqAW6^~g1Xw9b89BCq8jv%<RC_>BQ;O0<@+PmN*dBnhNYm$i(!;Y7u#a-#Gn
zvLI-=39pUcsAmdN7)&6U%~u)1vIW{W>^ri2(K!$e4)}TdfzM1!Ak2?hSnNkN1;_|V
zFL(b-{sU%Fgoa=RA|;~jfnjrARF;o&4FC)xW+2jjaLt>sv53;2yjhAj5LlAzb240o
z3={_H0acMQehM}U(!P9fLm$m*O+wK_?8fLq&~e%g#<&<`x8YtWgG(b<ZJ(kR^k54?
zxOdE(L{SMik97y5tVZ(#$1_e`5{&sgD{D;H_hDw{cOQtNp$a3V<ry84-?HXAlt!=x
z(7+iNOiWHV@1Qaw>kr9FL=A*DMjkz=(sHDF5gY?D4LD8M#l?3)E)C}{1$p5J2)J0Y
z`LC-qYKP-60TOu}Is=@|ZxCLCchz)Q?si<<_v-7o*Z=W+qT+^*5I%JKkBS$xwCGS_
z2SY^z+ycr-1X8TQCf{x6;*Bqb<Q`<4hTw*@+T{*NjN@1ss))Xvdf9R!MFe00O((RY
z<jb}zs<G3)L*)<kIGKvdar`d9&1~P!b7ScCEeP-pny1WO|Ap*@J;1nhSDtCk`9--F
zHXR)pg%;GRWM&ujb##cm5)I5dkJ+vbC^S)NlY<Doo&pLP;C#e$fHzBe%v;q&%!xhK
zB<&%~MwFJwuj7I|>mM;fdH;kF4k*&7{0Z8JQUT%zM;8|^F)`<cp7%8C>nM-?Dv&6J
zX!pC>-oj9<NxZaji1G52Fdk56C)SF*&3&9zz?Ks8@^%vS6dpOY8JT-b1|_3#0g6W4
z^Jok3(S#u8!Efk?aP2*oJ*h=eW*pO^huDfVK!woyBL5Z$AUP=^?CgaVh5$DB>#|GZ
z$4S|bp9u<n!?ry)A=rVAVk=abs91o&t;ORfSqcy&!Xt6m1o=3d8R?6T#f%ASh}@%&
zjQ8UWKt=W*6#&um03V#aQ6`7YkCE&6TB!VRE*L=?f*4KTnx9|PHDN{1XI%raEP3bH
z6kkSv@$B6TJtA89<LQhSp|FHI-g18yYGX2<9L7?pnCs<DTaRJ107-4!BVl*6*lHJ)
zK&Z0&VNCFOZ*)^V#T)<0z7h7a#m0QSj6$dcfo|p2<H!+%dDjOJ!J3AAnw90#J^kOS
z^Q%p6WBXy{0!7IhdgDBVk?BMo+up;nZ3Aw8L3ou%GB2Sf0*H#$o#r7<w)8(YTTM+K
zh5P&YC2SrP0`O#$!vL&3bQ5{?AB((Ne>;*(h$8SqqQ?sM6~KnOGcz;yvXQejeZq-m
zw8~uMuKRlLo>Tbix7m$g)<v((bT94@YFUJn5CsgJ%K#oNEG&SUm*Lz(>#%0ZSpfwX
zUPq#{E<cc1ys(ClR6vC&^8ke=Ju9UFHcB*pSO`Slg9uiC%5^c2*ELhW`MxR+{0zf+
z(aPiWg}odl0xko;#OE11mKIS;hM{f4i=_Cqe2@wGZ5Sts+bs3UOY#Z<I~nrb#Eo$q
zx=u<|BfzJDV8ZK&X~y?wx<tPfb=j;b{KbC+o-*Y2!)>{y<W@2c%zj*Oh5aF<+3Fap
z4GV;V4nj>hJ&tcSU7s@Dg{iE1EvZ;|fPNwG+<5*`V`C!;9wWQ0Ne&}GfHzPRZ5laN
z1Q7gAY+p}3TAdsn<DWm@NIZlnh<OA2f`Sxq#*xz(V6-`lE)*sZZUSjW|B2ssNi6EP
zY!a3gj())9(Vi*_tsmky;qEXTBIljq>Vj^D>g*uZ*p%*>Gw;v@LM`j$WRb^J=QO&@
zZ9H+dQ_MV(7f}!+b;fY7blSM61p6E9`}>{d>(Q}h&m=ssa-6S36)Xb42xT*RCvyvn
zV+dBdKBf<t9j-lc&5(Yfey~YaST|AlmU>D#TI_77vzK6DI*zC5yuECPuhk*fTTuCE
zqKbtS&hoq&9ynls6vnnC(~o9iFu5Jl;XG!NXk3ogE&xq*A}}hfA7x8RJ}kRKu89a}
zhPEl&Wz0ZCOpKFuBQpMornTqP{k<2zDuzM)h^3{8qMcapa6eZ<lpGcjA<3R%%7P96
z<tf6+8k2KzM<n28!eM}6&-_5i{xR<qGwj`TWcJCCJ=^fTa3o?3Hor*`e+@2O^x(t-
z0Ob;1LREi}Wj&F1lZ0olxpFpQIzZ)Tj5#p7t|kmkxHjO8!`=zGzeSCAsrX>NL&>+*
z#pQ{`<zJ(t+a%*i9xJ-TOckZ_qqIv~H>yXxVT1@26w?~Fo;dude-x^!sz}{<{U_cJ
zM8ohjZjJA=4TCwcQ21seVi1oX4*_ov1j1eu7KrSCQllETK5v(1eh<*Zg$uhoZNzbU
zCmp1Tt%txApd&H-5=A|cM-mJY5_rfXJzkMxgJWaaJ{DatBo>-fiZ{D=d`Fu}M%tsc
z9=g`+1|R_Ycpbte-s7pFIY4t1PbDOvJg#sB=d#DEGkZ@AU87LfjY~^2x3-4qgY>}Y
zkMMt}hv*<K1bEkr-7`4C{{;^S{x#f|q&J3UAILNlm99Jti!iSeIsnL_5#Uk@<e=eJ
z*zlukX?Hkp0I?g~?2g=#mX?U+h<cTSCmacQ8WY;_vkKbuibUR)H;4sBI*7l29dK-4
zhWB!CYY<9062k>^D@qme$zT>4hm75z#VQi=LWn^dpb7_MNlH&*s06;T{>=B<!O31A
zGHY&LEOxfo<q2pH?+O2UZuL*sb@wyVMRODN5i*OcuU_uGM?1r^woM`I_C}}lyt5tc
zEmk90trx6pvvh`a0$pLEpxdcvm7aK7SHErV9TrY@T6FguTTXCyn9Tf)?qRbJ3EC7$
zJ2SZKHh=$f^kmE!&X0lULFt~sjuZ_xq_f3-@sNg#QR?%NhyC+K`=Xhc-%hf=EoOz_
zj|jhUZt&==T49DdkgL-=I*O?D5SI=l`Uxt=Q9p6TvPEMhC8gq^;PD3UI<zSXt!10*
z)$J2#A|#^|dGWUrEtmlbk8FOr;4bTo#6nfofVZnSQek@`!%J`GUn>a-c<SrTm6nzt
z#i^sC^Wv<PZyc_xqquAg#_YTNB;8xW#@^QThUkp#jTViHiD40%66~~*P|?-YJc=xy
z@bGY)D87hIetD&aA@lW6nqPl%&sgia2l5;3x%KUi(J5*%id|*Ivbzi@(N&st*|&CV
zRvTktF%g<k&ht$y%PZVa>eol?-oJhF<cafSP@pi3E|aKeP<DQRIX6qr=5PcqaSlf6
z)4IAY74a&#_3&Xk9h*)q_}^+BmdT8`q{jU~_R3TkoVeO(iP72sSRv&F%CJcUkmW$F
ziW_8BrYHLsHL{-fYbO)G38u;yj=mnAN-Sv*iyl?^FoV(#M=wtHCIouQs1zgZ2c0ts
zt(DTxLPk2O4x6|0rXKBO0|NtN7Yq8vEhJ#^z`-*$))R;G1rl`Pv2_K2$t3GuXb?2!
zj&=AB!<m`Tk{17_L|6pbu;}0*PDb5NU=r3)p1y4>y-bq8kO6JVGzipr;J-pHj+km2
zL_N{lH=a9xz8d+tRWvxDws~{HV4$PJ6*AaU``yyo`WZeNl2C=fmLQhsGt$bYm`;X>
zi00OsViY{<siyW3t6qyUQvKU*xX#thpED}T!4JnclH*uZXv~9LGt<%nfYrsJNl~I~
z#tcNQg49Oyy+~0*P(#T_uP5mIemXRw?BiOmh*HSDNT2Rl7?3=)+_FL9FS4`4u%m<!
z7mVX<TCK8t%U>~3(ci*cEdEGL#M}VTfGDZEF5UdlYey<QP+yE9=Cnv2PRz^<AxU7!
z-*EUDt~)d=DlWc*h2>zIlf0ksz{g8{ljoq_M(@H-zgaO_1?v}vGrWKFnL{pj(e@;#
z@WxVOonhEI852RE&?XV^JS5y3zVQ+D_=;4s!x6u_OQaA~YmAz8VWpwH{S&D|+O95a
zvXf|_V`WaVU`Dc(k>E!t!tw2J7L$lO++kemA?4+^W!eYjI~d!?MFQR%(WW$2!=a9Q
zgl@46V(O2GSAi9A!IP0Sa$j9EBG<sjt0GfHw#ynPV1lL}@z~f&OuZ|Iv!M)zteg2v
znZ$60UFqL5#=}TG<kD3ZhbLZPB&a}LemJUj;VsSqG*-lvm7AZ>+M2!J{j`CWR)V3*
zT2lNY=bp8+hb_B4)^-v8>f#2GVAwTqSJF-x&I#B^JTO60A=+!q6TAr)d~h-w8x(-l
zN>@-wNHPd&pgdY~v5W4qP>ol?L??CS>?V6Rr2k@=vmh$c4}k8cF57^QLrV&tbtuQu
zT^Ai9oQmi$Zog+|4fREAh?4$8nAXr2SHfR4)$cx6%((K_XLZE!$R<jPg%uD3BG^>u
z2QpTqNC{55Gmm^``=Rq0XW_)C1RzWj6AiL-<D8xGwvdO@h-tH9&B>VY<}%g|vJbm-
zDxm`rI3)JVNKgd{SD{bx9-y0Q`W?i0cgL<>Rfq~Xho7?jUP|J>S^zS5zTH$#|39IL
zl?YvrjQj*dhU5!E%x*5Fd>%dwRItjOtqCK=BzGTgqZ&^`ODFs&`#b!XdDzV+T&3X*
zLFu%gpZ{r5(RmtXXUCP(=g*&TcVE)V(XG=N{4_gxX6tVHK7IT5R|4)_F*CbXz3=fj
zGSY`b!Euta7MWipS8Uo*5x`J+@2`haLRj$oaov$DG%yipDm_a{j+1KS5EBW51k-Jh
z^%&jZY4jV_CSSZNz{|w<lpy{z5yRARr$GU71lPckS2;OM*hgr}iOqh&@d~16TUyR8
zJE0!&3k@9vY?1_o7yfvJBkn=dKGiD-6Ko>yfm|we@W>kIbx}ScI09V-VEqk9v6Cp-
zeNsV_-Ur3@D;Tqg7r}ETCk_lE2@IdZc^Uyw1eGe#9)J%dl4lKxS;mVYohrgl@p#X(
zh?w6qxG9ObnF1GIlK@DpgQ=kv)ST!O!EQLmTM#M~;22uH1kGR1Zv_FHMQJe)0D#2p
zm%@e)CnuSR1Y$88ap4}Hz5`OrKe<)z@jR}yKi?8GY!@!#rbNF6Jm}NQOXa|{jSzx~
z-tZQtFhHv@byVj`+f`FE2!xa+4;+95IJH|xZ-TI>nONFGFCg+~c9D#vAUNn%vHl5H
zNb-9($j!Z{v$6tJ(NOB;g--f2PVwo$((+-gwyR>0hm<3K3YcW*O4lh3jg<KKqdjJ5
zKLH^K9eOiPfru+fgv(yWHbh5w6Ukeo??~juY9eo;?0Mf;ZF(Q<Sz7A#WDEvz*Wq_N
z7bD*KC;8p8tVdFKH{)^PncoE$hhftJ&6dr+72xK>qNAg^ShY#8F18&2l+xG|V?oA3
zB%6|26ci0Ym(L&CzL><etU_}i3m^t)UT8tL8_6I*8Hqa(>3omy<+x@Lxk3<ks2xZQ
zpX`nc?6gKev_Sfzb}NK$2ut4tsrBgFfntz1f`)lv;_KifR4JI*UT1%$E%qely3~<9
z^IOA9_44H;&lP8}^<GGpQALUnBcuoC+vGUZMHQv$n|1&$0QQC18F?4=Vtd9?UcI`H
zo5bTPEK9(I0kcm}B#A`@g9}6io<EMOgoInDggsQN>@HwiW3<LaIg2kM2vXXN`EDq9
z7ijd@X}{yv$6p6)k8U;W_h{WqoE1O=an<55zyIWk3JMlP<BS9xcm&uvjSnjw@G&qX
zNr0F5QxK+n!L^U)&>(V3BLP<oo8^N?kCJJ^aJY}OWTdA9CppXZ00Il&Z7hkPxl@`>
z0I9&m7fwIe^c;8K-Me?4UFt+m5vu8N%}#r1^vS?9ek;l#9G!FM8eTp)lkAR>JMtVb
zreLx9NpM^>H#Y)`hBlTUL~U1FW<`s;)X^=F{EiW4+;%|fcmv9?{IE7g1b3F=d0=s)
zV@==CET2FNK8LVRlk;Fvd8DKk-$ZUYK)Vs#Ju=p!S4tKH@Z-R`<ELPodlaJ-2dqqz
zMnOhAMb;{+p<i*~Rs9Lc$#-$Ape_L7g3M=~kio&1n!F0u))@vWhb1K=utELYHV8Zp
zL|u*ZWopcMt}pZL+gM!g_%>6wi+jf|yXv*##Vu20gLkGI<auv&57z}~aO{PqL+a(F
zT<8uIwSYj82yvu6pV4`SU#rRMSkW7M35PsNtmSC#rQNuX;V2xu_~=_Ib_f}Eg;#_E
z68!zt2or;>K}t%BGPS?teLI;b{2g4>C)CvT!rGOk>?DFzmF<|6L&8kxs*tJxtHe$x
zCnqd-#L9GMGDIL7V73EPo(Es|%W*X;{H75K*;_}C_V8GX?Z$zEYv}j#R<n~Wt*yh0
zH=LcFD_m0Z^B<8Z2XRY3czUF22CgD8xe~A^sUV@8`5t)atr5(DodD^0bguEax3#pD
z3L*aZ&HO-={*945bfAuw9rDpz>K5Za`XABR5L51SM)PF!^{NH^vi<ceJC94X45p@8
z`YP@THS6Lk$&`>{sULKDapg$6p}Mo2#1~oK#nu8`yztK^;SxXvm&m&rI=%t$Gp1m=
z7wn?St0$J0u5tDNrm5I7vebLdnr&ph$=;JQq&`)`hILHVu@GrP1XqJ4wq@J8Ql4v`
z4$>icqha|Ek}YsJ(uP)*Zx!#f>+by1C=yHt7on&{;;w%pZwv$dd5o&rx^*kKxm0bd
zm(SBkPT_kfhKgXb4Urg5q#ZmU=`D48$MU5)*&mb(e;i-bD{4L5_E<8uURZzsib9Lb
zm*Ie%rU`e0D!t^S<)0?A-drQzue>}ELqu}AyWJ;Gkx3=+FjpdnMNLU*J?@oJJC-)*
z!MGjs>UUZtTjtBN+hyA)Q~H+__QYx1cS?7A{IbI-NzE+chYFU>x4dz5{(+>NBx{x4
ztV)Lk@CRU+h-A#2<YuRMiCY9b4Z=bGYORao;go(*U#<4Dv(aid^?F>fN3UHIh7?e)
zH{VA>mx+x`R;Y92xkD@Om*ayv7D^Qa&7)$+It7xuCodWQDtbSro8WFGDWlDnGDDw*
z%pTyhx5LnxxUV9uW>KgqfuN9#X;47T-ijbX_DH+lL%t!2AVO&|of=b~7f7Zt;Bffe
zT~hqk;6H)rRVdpqL1|{RE1kyTFmv#N*~sKPiS&u{T9JhK0JSi-1LxhtII9Rplubqu
zjrC{%V8QLYV0E6K0aD0sh!2Le>0W|k-)+u<eDZC^z?57Dys-ph_)nNiA)64QbGmeg
zw(lxD-Gu{@Rv}MnoyA_mM#q)BPL>T-7!GYDT#mdlLuE~zhmpxZVopGd0=IoBhGt?b
z!vTwj7y5Aqt=<-t;Z4Kuap2(mf^-Vkd`TB6;6R?BX2Cz{MLN#YmoGKzdD|cu%PL*L
zeBLMo#enlBahb4j+bRsG05L<I<aWt`Lx6rzH^PkL4sGHCd~YTOt~(ND(N<Kiq;j|`
z+sgVUaQ?OL%=O8?q(F)*GGtzh9yhHkNDBDxOz~~e*X5uJ#zV%OPb6TRHZV{JKY}b+
zoEzTYxk*$lAbg}CDmRIEv?N+(7Tv`s5;?_%!w<a=$;yB2_`3{E2Sz3IrKM+bA`Bko
zR=3;mK@cUdA2tX20xu@yU~yNK4*NO3NuTJEP59IZoU1tDP~7!At^JZInRI|H40r=i
z2kJgF>u4w#)_4s4L~`poO<i5zrr&!p5-Cxjrq{^~XC$I+p@SkL+IZ<9Wg}D9>Ica+
z<NZEf!~beQ2dY+F?VbqzCiSPnXZKyPOwXS^`+3HekE4$7{(jDXKEfSZp6bELwT|aP
z`->ItV}3ba1i243QljL!gsKaSEHn+D&_d!HCZbPJ_NWC|iakU8?Ne1Er^=xzMK43W
z^ClwFyrIv<CCvmL3F0Mx^8+9-6}6^jIVyZ0n#6Y|zt#SJnUict3b${v1uj63=P2z>
z@T<s_7TldgDgqoNR5A!dVVaOJ3boU>(IO~L*Wf0?WC(7+@Fdh4iNAkA4iG^A+{lS$
z3HV`au>Rk+E;97#^OT$Y_Z#-@Ra906Plz`#65AvatjYUyb!2uCnFrjs)9U%jZ~<%&
zQX+z8M}P0~wH2ip9xt$TFm&W_UGRdI7F0J_7*g-Hfuh2l2#7skx9yuS+;=TmhHOG5
zS!k_H4#zy6Hn=0fyeZ&6Ul;EgEemw1j^`e5NuN}Ms!uj9ln896-7xvbp<)4V9Gum?
zM~{?{Aj#Q|E);MUs^A7ON;6bmKxc^?8)X`bRP<PXznnY-A+~oSFM%_#&xv;6pIQlZ
zEMmXtj=SN41>7I_!66|39<3P<lPuT2uY13k*dvh9VB%^4d~wAJN2uZ81|4&PmmZ%{
z(BjKe=UbtuEpjl-&u!)p8XNbDYxsm{5W~oQhqlB4XPGu)(4m(&pKVMPDl>!O18Xr<
z2%80y7eAnYgvps$;)%r?${Kub5=yBNyGO`M3uhTt8CIZxM1b?$kFWn-6&&iQ(>5Wd
zaXm`YLjcv+JWo@_XEHeqT`5UMO-aFI5U#_bYjB3Sj^wo#{!WfU6Mv(426-J&7=q0i
z7FAn=0tnnSZveEu?#0GgX=&RLNzpL^I22V5i_plMp0PnPlMggT5Tj6{u(&_1nauw^
zpqO|Jj7I<P7YQ5N-_BkYWSm-qeAgrdTc6{9<h+*dR1=O5ZnQBrSR3CwVRl9#MYopD
zJZgd)#{z1KZDys&)WlIo4mKce8~w~9|GB?VZ~~x~Y&*qXA*uYo?a;W1Ua=Pm1Wywa
zZ{zK<wjPO0&IUjQmaqzqbm6bWz;-G%^=E)rQS*O-LRu)|>Fe8t<0_g8|6O56PT*=R
z=yccuz@ynd3tht|A9+$_P_xM{(a&U-fS({Oo0EjTvfq|lU+L-o^U(d&8K~FS`+pA9
z<o()vZ#T}=?f?EO98Xjy?$-bJ7vLtiz4sX1f6gr|CH;HQIsbP_$@^`&PpSCt|JZ1M
z>@XF@E#a;W|NFy!O?783Ui3&_WdFZE)L#AY&A%`HP9gh=Q~$p|JLdPc|DGaZP$}r>
z)H{lYd`em0_B-pT&NQo25&d!g`4+X$0TUwAfBsw%WE5mPGRQhn^fENMUPL6C;}BoZ
zqZ;b%WvL5Or5<`~vKB@@r)Q+`7|(||3hn!H=(W|L%eiQsf4^LX79f*Oo7sp_CEq^@
zXY<`?#<L!U(-*lk(L1m>%~NZ0KDfNz&U%UWZo7k@xI#>FY^(<)DOkKQUmn#AR`xox
zIz_DEpwLrUm3r<oZuQ=|#^R>#7CV8@z6pt1ELY`!cHF$DJbjrakJV*2$EjzsKg<gb
z-i}ng`0?2IOKa!7%*?eMx(fHW;(g4ux_YE(44OlSquBk|i}*xWQ3ovTb=qS)&~?3Y
zOffp@e;-+L?;X`^A3rd=?9a-3@wB1j!98d9^P7Ed*S_g~72vXGc<xf?#>|l2?+bs)
zD(rs2sHtvWUvFsm+Ibw=z)1p4FJ7CUE!~=#m&VF0KeBFrTCzRww>zs6x7W)1J>dCw
z1=Ou&X7;^(kpG&snL*R(nFXr}%UhSTzO5}~FiE(~5+_k=9G@pusuo@GOlVm}sM5(H
z>k##YH#?V-o{g)y9N%b9@xM>2wP)kE^G$jV$;Izwy$;4n6lnIPOZOUmbScu28<x2-
z-+tp}uU3&-2$KTMwIRC4x|$yk^L%N&e=6wxOo?HAf*bFI&UUMpVP@6ulAmZKFS2Yl
zKlW)U@6Xn+tfJoBhBd}l9aq)8JUA+f6#w0Cdp@Yns@r6E_Nuw`Km2RH_H5C~^FIY-
z23}QHp3C%ODa*4@Vq^_J8T3BD;b8*0zl^lU!Lf%Kj<if<UlYy_2u|-)vb$V%?l1pE
zKe2OCy)tuc!&yHsR=LSKFldiv$qoH2RV@w5uEs{{lmFiXtFX7Cmb{*HWhYx6!!>(H
zThB<rN1GZw{D<Sst+YRW;F}dNur#PMwUxAK_FZ2%F>!j*fkEP|u&DD!@qIy;)f{cr
z+*jL-DD>_b+e+Hzy%^9QWMGz8&%I3FKrinn_`jRx?XKYb1i?6|f>$j$zJXUu3i)g(
zA6HEA)G}&Zd3lR-R$yi1Ts?#Bbzf~NUttw|r|dGFvWDk-Y*ZPmK4_Jk5UXU(p}`k!
z9_?D{$c`0_J#FcIa62`fyu0oH4u<HLkM2e7%e3Zq88K2jBkP^y_Od-MYUHiz?L9rz
zeA65o0%Hudf3;Wd6Y^l%8Sd-w@I_cWgGtmZ`^l~jdoSVIG?d62|M!X2^)`m<#CE-y
zc$gS#RC!lp%ec>^)uST?Y^}qaI4Y{|$NP~=2}NF0wE58=cH77Cw*`7i?}z>8ALHLu
zTtE8ntHmEIWRLmMD;#^%_f_)YKQ>YsD`%+#Zb_Wn^IPcml-iL02Xo2rLx=wF7*dE~
zrPmS-S5@8@sJd%Hv2E9%{ITT5Ccm07B-0un%zmoytU<0suIYw`nPpb0qyO*QXneYM
z{@>BYHS{&!kLOo!hPCa)?6jAe*|Iu?WqjA+(VJ06bXki36ranzL05j*cVf`q%T#Yg
zL~VWQBHzEi->)gD$ui(;@o>><&0^7Hpw#^9nc;2gIDMNM#(mshWa!r%l3Usrnst4T
z?z`smUH?6_@hv6N)KApf&F$$dSdum9SYUn|KXxO_cJ^CDo&$qGY2Xc>&XW)KrwPB_
z_rKqiqlu0mqB$@kKuYUD@d-uMrj)Spu+UGeFOe?pJ-<>k9mhjYyXo47PU*bS{R_#{
zKku%H8;LM#<Xh2+Y}M=J%diQbQs6q9^HuQQPhvk~dG)FZ3aFTW!tv41$Q&5DzOd{`
z=4xWh5sFZPx(PBOuX4&_tmec9#j`pu`us&TzHfEYFkfE!;XcZIZCAaG>m!zFslwsF
zV#dxZg6qC)h`!qD=o@(^)-}s#WCH~wy&!Y^g~+ftLxvhfsuuMdG1|RJPORO0juW3^
z_J8B&DVSt^LG#M9fbFp^m(+)Mzut-&TUXiSRHwd5uBb^c4WBdjNsu}C<BHRs_mdk$
z`9?U>nB|}HF!KI#Tj28O(Z%R40H$A7#Uj*D<B?QrfK+woO7#VH5qA$<JD4f395j7A
zcfzd%`X3U=-fZ~{aJ0T-BSZ;@bLNW@fqMYfFSsF%(f}bl`f|t2ZET=x6NR{r4wy6;
zwqMQZt@|Z!J<rTEh2@LP=7FeK-PSPr2>@oyM+>etA?W5vtSulQ{7qEipoHE*PZw&%
zmYSAk{GaCa0sa}FO^nAIqXWMcj%cZk7<>dTgp_nQN)5Clum@d%sR|Gl>%_F^DX38I
zBeV|G6H-{2p(*AT7M^6hKnb<*egT2xXU|BrOZr_mw}tce#s}}v4hk1^u-Iof90sC>
z*E;erU;Qj_Kp4!R@K_~X__ag4eN$4`oodoWu1BexFUzKSxOy&3s{InW74(hTbLD+~
zs#Ejd(1WYrSGiXWQ|Jw*sYJT<drfL&<qGs!YsL*2RJW~vvUuXah7k?{K8fFt=engm
zgEhq6esy%ImD(uNFc-dI&O68<GV;UVn&GK?%Bx*v3Ebi5qU6(+uS}R8TJ^A|u-K&h
z_IY})?_5o3q=oZcl>pJcnN<FBy?rjieGwwxl;+N;ESk1Gma~2Kl+*76b*sT14|PgK
zC?r2Z-byCH2u8He6d4KnwOt*!yW8eFSjMkxaxrP?>7?aE`-YGNCX`6m!LShYzxvas
zva#7FFnGxMx?xk;dsnzi#y*<RBg?Zr8i33dEKLzO`}m?Ww7Fq`#jpTAK+6v-3P~ws
zI;%aXKn%aBP#@C<*@om~Gq}NU3K7r|m@g62KpgI5*)hnaqeI>~RAUJE@k6)cfC<9|
zTLQ42h&lmq_b~_|(IjJBvJdn_q0kqxWiO+IBqMMM0H&%67a*CY>_gJC^qt$Tj8LFa
zpFr0%-f)~I3=9Y~qerL%a4JmVA7q1GL?`L>HU1+2`MDay6?vQ*$c)a-%^gP+jvZq4
zusggerip5WB!ST@a`5p5K!pdVK|Pth4(4UAAS%O@d%#C{cv7_6k3`wL0~qkyc|;Xo
zcnzkM1;u1Ve+}=Rc|F44<zk#FeX+mzZ&~;u!GtPGdioaKj4Bq#b>r&QQk^oRHm8%c
zHIi=}y)aPrI!1QEQFO9@QzPTn&BwL|-4&i)*FDtuB<Fd!p<0NfspeB*%Hx8wO=sPY
zxsJ}5eA&MBD)01ULsYH1!JmQ3lg1&1GNvV6^4?q(IR!jT2b=HIq))U`)qXzz_0w~T
z142C}krMiRE~Q@-1S!4VaEI7faNqB*3zqs7nG7+S>riS62{+Tx!E+@ecdrjbm;vQ8
z0*sJSVn`+sz%7-4ZIQB^r}z}gkO>S8o5W;+!%&x@k0gnO8Zy)LkUL3d7Qg8GY<2Z&
zg=OAfq$(<z+yXEYRGH5a73cnU6B>;xka1A&77N02CF5R+2ot=KI$~W?W-Ra<$&?R_
zk#MvuUPJIcOaa1v*1pYI_1>o7S`~{6R5*1I5dnoUXXy+(mupT(h*0qA&oC$h__I9#
zo4;6#gdhe#+mX@q?b}D9CxQ`cu5@)#&TZ<~F+k<3h{3A`epv-5y@RSWMx6(U4L|rx
zBf)Q%;*KZKl5d4UO3DEB7IzOg7hlH;#hH(3=HP+K(L@$ONkwc4Xz8+6WF+)KA0lyz
z01E^cg)E;eITFXWf)sc`tm?$Xrwq}!<M}YVZ)rfh^!LMjm_@88+Q4I_XTJW2l!o4s
z(AqG})u|Y&OYkOI@(uH~YK>*Cb`KBi8=Uz2`7u+62mjmn&<$JIOhzk<DCMn%Th2(P
zozpD}`90sHF?2jf>dYhS31gS%6$(sqj!BO@sV^6c#TW!9S{wX*b?OJ37{AH2h&YCV
zPaixo&Z$`s&w0Ph{;F)DbF+eRUHM=BDHYp}Ada1nY^T47HmkVjmL<!qjf~-=>QW0D
zvR2eG8upay__S_r9kUc4h5PHq@}I}8pPbsvtl7H9_>@1*W8I|qbpLy9Xn|p;&mK0q
z86^<>%u26gQ~fX5vr0S9%_n}VnF?#%Tb0*SXHcr7lz5A2*M~-#+B=Cy^>fSoy3dL|
zT(Da_V|-Ofp6|`Xvn^hl{S$`!8o5fW+d{sI`J5~5P=27zC0C<R;J72IW=ZXr?Y{Q3
zmzP4>bbP|*84_Pu2mg^~G}3UoC*;BZbf2S5MuZ?Bc);b*3z11{<b@F26*gfeh>oG^
zfcwWE^xyqQkJjgIwLcFzCqQvxZAQ#2g3W$+6^jQX;!au*1cGR=s>V{&R6!-;t%2Tt
z1t<YF3Wzp(0bMkY85Qdbyj@wa!rCL?3p@?DR1X8k0js745CEJqykt-p=q{I-M=C+z
zL1rdMvl8tESWN;aLKQzYe&^zzE;2v~18Ffy2p$BC``A@FM@24eu+;YtI)p$JyB8NS
z@K`kC9WrB+^CZO*IJFRT4%mSAL1JRwElKK@gdY|WnzjY89V6s^hMDjou0GO=L*oR*
zG#(c|;qD0eW@xAZ**bRf*ReTqXam5DV#xy&f)DEvqzi|U@(;Z}?%{m^T*$Y<z$RiM
z#y0`-kEFs4xmSddvlgbwTY>F`YuFSKreIJJNa^1?Oy=e+e6RvffiD8M6-Z1qhFHNu
zxo~5%k30xa!vBFB3cWO#^Xr#6G1-A_gnYWwxx;$o5wvLdGxm*&yM!=(2B;#CwVwbP
zOmMV7)Atyjpu7tR*A2mAu!9YR3~HuVOaKQ%yui?IVK6DzZBEe8WJ)f?Bw-jG3>2_E
zFV%vX3>O49PYM{M4a_|s%K~MCzjLitw3TpHiM(XY8Lp$@(p@Z6%P0ixkHjp^AueT1
za0a7%)~;KxiBI1;98SvnXyd_tJM0?3KfS=7xf!W}Idj%2s;4~I9B?(Qjox0j%s7|U
z%Kuq)hhs(YPO4O@H-gJll}>EF;@^K}i-t~oUNE!U&`D?Qb$(@^?hnITWhW>V_2jYf
zf;+NKpJ)4#<YXg2bHT{@UoF6H<I6@iKPqjmZk_n*yUiw+em5QcysLMVO!Kk3Gp~$<
z_Ro1U*L!{W^w{u*f2i2^Su1{ihY4S+?ToQz9E@LFdz;QW6hASyPj_8ru2tVzpwXXy
zz<9o~kTL(^{Q1`(PO?AMI!*U(1WM$FyKR&=(kPaG#?=;jFi!}rmmP^txO_%@{luKe
ztNU-44@U$G^0t0XW093!36VRHe!kbs^Wn|v=L(dPe-3iIFr|8sJ@TI0%rCU%M&Uvq
zugv%kYn_j(Lcc{%io_=he0)K5@QnCf6@T%Uj$0Ua@@8zizq&~8W)>y+m9a1HnfmCP
zBe5qpbUe4(Ht}O|+h--8iDh-$<;S48P}Bi1J9?p=%rv}?vG!B(DsZfj;~eYU2o;Hl
zxHuVhN0tR{FK9c!sbLk-$Sn!Nk`DtZLH2-10_wmYg_s4!?f?=fgpfGF1F8*woYnRF
zS`ya|gj^mR39<g+Bq1Tbr<$H;WRNMYWHkb7qp;rJPLc)i#$gd5k$&XwpehH392Wm^
z6O^=E!1OrdnITbvtQtSY?4?=XBJ?nv*j+$vK@wm#8svabe{9I5+6^lnkwKgtE~tva
z-Umm4zt582@#RYyzHxO;4V3TD8#ouofN3UixIz$61ItDnZ9zv7^z-vb@P#FO9b$}s
z00|txlq`bofxBdN`^5npMh%chfNZ!;Cr}xYNWuHCMReH=B9H(3qYE~T-kd;ri4g^K
zBgAcRT}a|;|Ij}H)iCJJEjU{Cp>{%lWQXgRK<EjysPFr|FsP645o5F0R+ndUFw<~(
z43lGsk6;}6{R?lTh1S8*L1wA10cz~%s-2vd7Y;rgBBM0h4T@Ss*o0r5oE+l2V{l-A
zOwoh9ma9FlW8_Kgfb)C5|L906Fj2h@LzkK^MS;U3VYy@sI>gI+gn9cMk67T@Vs^<G
zP-ZyiNO1C*RZsU;;!+2LLac&pTh@CMCOtCJP3i9A&4BoS!0<@svBZ37!I1`R`|tS&
z2SG}TMU4P#sqp5EOxEhq+dc7ZdO34YPI;B5z}<DrKBs*nE!814rrqI_j6Ij7H*e0-
ztsStnTDdFt!?xhht$}ss(fW@R#;yv7F7x?ch&4Al_txizt;#zS^Wu%6?uV?)ufB~6
zr=vc`{+w>KvN*ld{muLGWw{e3CbzIPfA$vW&2`+^X7HMeDlpZ0zHG#RwPc@vSV>0V
z8$Oznwz3NcE`Hv#vo`o~g`kBUy||n~z0T#tB8$`1X9I87X9=xt;i<I=HnTaIcp=UI
zi0`L$S>nGvq_vn%D1GLBZl%S=THv|kmxWXMy)Uxsj%%?GMfGLQFobhI{`AS(p!?#;
zfOu2Cil2oP$5nd^*L8fmRhMy;^xLI><KN8n_u%K(lK$owIu>tS$$oIWmcw+FGwgPz
zX{4S`?DF$)>kSm<xjWy*2=N6p?~^q!95r@iJHYm0TC<t<N8^S2D$>E__9CZ<j1rmJ
z#21tsEIzxq>?RaHei?W>0>iTgXBYP$I%I}1fVisfpc`2k_mv~zv4<hdgX#%BZZfKy
zjDjYDAT*(5oD4EMz3efukcc0!B?c#dXQia^L4Slb@Q^6;K*bPs2WaLxq+=7Z7lMe-
zQR0Z*tioi+U+sAZKtPi4bU3$?lFtTmT`SUeW6*liXdbjN(my9E*@DRFp!%~Z9uY&6
zjVgf*hK1+w-h&6;aHjQ7(C*r`ODKpWeJE-XV~bAnHY+(0JlK+CG6$-UhmRg%9>&t0
z)!Ee*HZoik9)F;<o*4Tzi5=^Jlx#!;bd44!rtx8c;~@c1SB7*DlcfhWycTvq-SZuk
z9oRDzEeV>ui8Q^JwGh)n=m&@bFXOQ-)vqqm;Jo_)UC4wh(F|kS=M`wKF-VY1V*u4J
z09NBOFnP3UePA$uK#;i(L>L#IS4x~`Bzay$pZkJ2)cv(&jQSgd%WK^6@!q6-gcZXS
zocrIyz(H&p5MKLll)z07X?v+X<Y7&ay>072dr!^~jG6UX8T5LEq=CybC5Ug((V1p9
zI)}3muR1w7d0Sv$RaI5NmgL8e9=(Eo9&N*@I@@XI{KyEA`)k*kNDR+&cXeJD5Acle
z+^@a8W0xtzVE&n=h|&mfr>W`b!w>VL)y-0Jo6bXfhKd7DPO?T&X1gm<i1Dz}A4~c$
zJ907S_Ctyl*9kVJuUBZZmd8as7praC&Xs6+y)`?nF;E{}|84a0#D-;Q&ABz##Op=`
z*(q|j)--<KyIoO`v0Y$jCsk0T?V)iE1@GfO1GA*n_LyH*u-zgi{O$AlWa^xWU-BEm
zXV_(g+r<Wd9*4CoYiE=qhrlP5RaVnambd39m^TUC%|CBKPxXM#Ln-1lLpb(@r;KPw
zcbh3amD{%<eKCmuFaB$+_7a~a{POls)g8_;FNtdO;5Xrp`c_y~m3}hj&KbY#{Suvg
z#p$=rd-TUrc$hiwzL#E2^-g4w-D4BpTf(m|)TvZR?cbE%H|<@M<ggmNY3h?m_I2Bv
zW(<-9t#C15(YTzh+ADTQH`w3QD1^$JBBENUaw_kYNsjVZdh?6%$!ej`Zs|TeJ=b2^
z6ojT%Dm0b){xos+x%_u=nM|*Qu!nZDj|3Dfa32nmVJjds7rIB5F-+$>I>t&PK@?G>
zyhLkNH8wkJQAsAyVtKo1y&)PryWTRc*eCKAM4Yfh-Ii|wxQ7=8D|2hZqX0vF{m)QI
zlfNF2h%&PZ|DzswlsjjXQiIsT_@s4?t`ZL=7E{wc-Qze8pJNc491(R8u_GkuPlV03
zk*M+n&5e)=d$jbHhEAW?h&ZgcI=T&t3f!ecE&-zxA?WnoCq6)Xc%J5|^Im9rqikNE
z$kMrnnlpj-lfBtKA757=ZOwxWfwA+iAX^|P3DUgdX<8xlmIj}SzrBlq5^l?IZbH|^
z&CPumlh$MKX``Y2?jI_j=cC`8kT$ewjLWxx02FIU$d%UW3vhhc@#I48L6gYRGPmX%
zMt<9tE{l=*!J);pE)sq%T0Nqtq(<YfqkSO91B7=7=>GYlsKYhwS=0^{ah~YkHhwwh
zbWd)+cyND}fu`Tsez5m&b2+PCVA;whtBtKdgcZ28_t9_u568-~?YK-cX*uI*ZI{Iy
z^0Th9T@$P8ov2|ma~-f7&=>N(u&e7+{%h+g_20EynhcHHp%`6fz-l<@TFfEb6TUs%
z;q=<Dx|ScOQ*E^@92N?%86>R~mS^;BF_-A<iQV|&+)irWodS80N1H`L&aysD-mjqI
z-FuxuhBo1*tin%|CqbJF)C2p&T=eFedv^N;+7#DBFx&2BwA`Yw=lPbuvow3GBZS`l
zND%Y9e*MMDLh0%y>4J+1_VHpB!fcXr{Rd7-&kvg<zSwL~diPjk;T2W>9qYeM<-6!m
zohxpts@KzDj^SHj$AZ7+da5<#)yoY(&lUbn<Q?$*V{-10ux@ZjujAJb);2bk;QVp7
z2nY-erDqM~ci03zdDiFJb~WGct0kiNTZe-se&@DbrL(?}aTe{n@v)MZ<z@^>V8LmF
z!?r<88b^F?)Yk86!SzyxNDtq3h*9K}RG(s?L@}_U%(n}ckf0=N*oXs24P(I!-6yD^
z^n)7O(e)PNN<p>Bks+$@y**}%TF@ypnhkF}iEsz+L(0Qe5`GlcJ%(^a_Vi4gx-&)`
zE|lKK$oLL|S1nIq>=dd&U>KlpiBpTzu?&X{K7-3<f>{Wi;RID_sqdDr9^!L!E7GBZ
zvk1-li#Z;zFxG%rXqD(KVL1^#`G~(4G_sWOnomC+gaEjq{Q5NYyUOs!!KJ9LT0J`z
zB{S<=emYEi<O)SX(i0StR57A^fsCDmRCrU@Q<?iY`<}489oTHRh}IUEt#b&KBE8Sl
z6WcL$O8K=b*+1FlbmZz!-3SRg&vkw-$)|H=Vq|G--)hYr)*WkHO{Te|^B06lo)3jN
z297zOo>n*#m7KpXbLzL{rE>;9sFD+p7JPlMTRT0~`WS8c{MR>ww<Jwt=T9A$+D0iD
z5%2QIe^Aa^aUDOm&)Y8k&qd1}4|WHh@P87<Ezo{+&%IcqAG;o0E*i|^9@0DG_H=jl
zllGy&y_N2}dtXNG{3~3`-}UE1uVvKfbL&1=Wk*o27vxp#u;Zo*x~nbs0|7$g_|gq%
z-|?=!=4%XLF-nA?G12dLk^F7;m;(s3$ZFj^agLWBCa-(<*j={O!`ds<S5^<@fO!Ku
zK^K7+{KBwID1sq(PfSaD`vQRoO(Kw>)<y2XbXCMPwOxhuRfzK)a~%c942Wk~J?AcA
z{MkR_xq*0Uz-3sD`}jCY_Jl33?<(MO7mGU8!&A116l)5J%*azPr!kPR&ec3|CYS{4
zwi|RkDO?~=f>!kt#I!f_Q=j6Brjeav2M_QJ-8}}H341QN%5?ldkxSN=*UELErais<
zRK4}Zd3mCJ_DD8syDB@7{dsuW0hlS#+9QVlfN&BxEsL+`BdX1s{s==R2I+C<XuiTG
zG{35<N4PvBdxdv<8ylI-s4!eLjF)3L<NYRY<X~cumb80Y`467K$wm#?GSmFtE%UB+
zAG|-e2@XD4OLw#8#zoI|SwZi$pOvUqwQL%ys(ANSFrqCKymp5E(HP|+YSjxD@9zi?
z>l6#DX<b~Ns*@GviB6qZUrA$Ld|Xd!*N^lPPa6aq>*uabT6^D^t4Zw7K|T$S@88pe
z8iRf<kBo;Gny-so|6a3WF*wwwxLD7EMkp=bI^tgY*_+L#cNwGBMm@`TK6LAKlG(8}
zSK9^$m-7TNckix^yeP|%=`a~}pf9Azz${xYW2wq(iDc`Uq3>HzL^e8_eWjp&xegKn
zm(zxLt4jcK%w9_k2BXOI*fuSQG%l$6pHs2d8NgLTY?Y)-0kp8r+U4T~7+<4m@ptb(
ze5inEH|%wIg@#?0Av;2lhuNtS<X#0enoAGSMsroy*W)r32DG_ttOAD&cAOIOs&M!A
zp<N@$0|8P8g2lVPhhQ2_{Or7)M=(TOehY`m(Q{RdO_=vDCQAro95o5GAZiw^I5;VU
zuo#v+y%aL|F!@YmYgTLe>iSc0vMe}*s`?vSx2~?LFeyS{1O-ZNRP_KB4V2T0l+|w`
z$|d77URpNu#X^j}&Fs>4h@&hCzV9;HscvCKpx!4!{Vz5KVLcLcKWU9I)D6s!ZHj4y
zI~&hVdZuuhfZSiXeiql4IpiiwBSRaFeuUMqa&$9?){OO`jjC)Kj*}g_7x6N4;$ji+
zVq(*y{l>xvOt=fS&YIh&Ds<52kI=l#=*%*+d0M%fsi~@rXSa0F=;bR{<qkx)FjSl?
z=%}g}2>jq4eg1>e@e8!i-X|nlSVwUG_Fu0wn>}8+c^B7>3%?>Q6Z7|1d>XOlk?vKq
z0>Jr3Or>7!fdSXEG!6xo=3lX<Umi<p?%JCY=x;t;(9yv5)vi!<+t>Bio&0y?XkF@i
z#~Y;l+>m+4GtJX<@tM!UqXqn*?qi(TAbQqj@;<F~gEw#6ex(Ix(TT<*;+Gfns?`pk
zKD*;blkp*s*AXXz#c4ObFI*9OWHaON`#bO795s>rH2Se=Mf$MmIZ=ZPLwhA#KH6pl
zaUE>@=xfy#^!xG^&C!D6f$Dj{CJ)1rLaa9>-!8h&gc0(@;fD%t{sX$1Phq2?<5G%_
z4PhYxgupd>p_94<;gI84cMR0#5YCnhcjaAchwE{^Ys^y_Lq|Z@5WgBG(d<yvD*SQ(
zWS!$|g*_rA$h>)gZLs7JrySJB#DCy8+(HII!!Aw6sKVBp1YsYN1RxJDg9!&BQD1|a
zLA8_6UjyiXNdj#Mu2Bpr)W%_EpKY0aZmKM!cgq~EGK3`5k|F4jNJ7>Q1=$J)?g_)k
zBJlbbCxX7_C*xK>qqh1CCK7XTpfO~<_O0HB{Y@ysvu;8Myq=no1k1!BF%yKw7qfMc
zClb69AMh8I6I5`uC=iLfnGEOhdvDaBeRroKg3rjr&X-+Qq;a_df{@IDbYu9gqkC~@
z_UHTiPR^l5m?KXI)2DCdi~N9ZvxEi;YlJLCUa5Ix|6!*tViiw976w0~F%q#B?qvYZ
zfbO5b%J7_@YI21UjL;YaenKq_8fH23iYsFZq^sIo`f4S@(Wk^+@L8m!qE_cZSK)+)
zWsRvuNhVd7B~tRCzvPa2m+De3RvOD=2H&PAZfV{u)mWAa&Ak4wO)+OvYSk=<e%I_!
zek5ng3Dq}YspUyeCbbUe)~8jOP!?#En`nMivnk#z&iq|h+jxKK#_<$gW-PkIw1yvN
ziZ01hGc--q(>|cJX5aVzos^;tL~V0}7xz~v?=G~~+fyLh^iG2<XUApjad%<SvED~E
z6MwzNL?#<fozRzkk>Oe8Z7b40m9{jTDH5b~?oC@w|Ef*zO5EPVP89{(drIak4r~eR
z1Rl9-=eg^>F8iNWu+1xQe@Yzxb!f*tO2ER=UbolJBA#1p?)_`tdEIHxiJs5vFX!+s
zjcM#CS}t1exuhcV+h55t>iE+Nro!QNlh52#Ih$;v7;3yqzI{9tXUTrB`)JOEeY8u?
zAsjm1F1p3v^clY2irTK?CuFxg$Jp{`>hE0f!O!#7sui>`+SNvac7O){V#kmXtK&<P
z^-bxzhhXKa)z*;t01ruW>qg0_)79|77a_`F{=*?pViE#i^<l($$IhKj@_AYcQ8fa^
zK^9HPWFBQC{B_W)!2{9h(&I7sV?1q(7Q7B*a>zVpJYsR^9|LC%Kmi7nSl7Ny%eU=t
zuVWPV6EZ3eu1PYq3YtC)#ynz`oD%|Q3_FxeF@;%NDK2%WSd;_EIOvTZ*p$NL#wW9$
zU=tzpHohanviDVu0EWPL!|Nb&iVUryXrGyd9D5uD=;^FmfaVy5O@m}v=6(KPDJQ>t
zd2hE(;jtcNR5#$mUc_2s<jP@^8bZikd|5E$BxN-Ppg1B!CNax{E3uZ0pCThp>9mje
z`iu?u2;aHs9OpFW!s{-dn#Kp*9qBFeTL=mYA%F}x*G~7z+D^CO41J*L5EViLtnBP8
zCf?=vpnCw%xf1?@kBF~B5DPV=--HqbT}YtJyy9Y4fQ5D-0;8Ai?v&ryh%iWgps}~q
zEov~BdFOdfU#Z=9mk+d`=$<+M+IGLLK;d@7hSpKZocC%yxo;nehWGw04oNRDza}#5
zRT8`Q_d50D3$KrAUe@sseJHWc+o40uHSpv!*Q~fV{10L;(rqjoI4t)}XYEx6pOvm!
zN_plC*5E+53xZK^nZ*Az&%N%fUpam(k$-a$6Ze9%@MX~hch2y(_wEy|J6g)hP$KcG
zdx(9*kay6S?T5dor1EMx&bp6qF@BkAoHOU=raI;AJwqE+<DTm#f`i@hgoxJJ9pCTY
z5(`p#ZgmzTTdICh9H{Q0+$Z*Uev|u-Uu%GNYv~URCU&1ay)CNJx%K^;VD<1^O0J9A
z!BwKWL)V|_@V<JGMzf2SQ?y&9)Q0=-tJ;x(I9AJT*?FHebdppH&aCskcJL_=Ggo`s
zE8lOg>NSq1t7fU~Xx_@fy6UneYgs7VfQkEU`>?W>k;<Vh`L?edXIdz~U0^YBjSbJe
zQ%4g3Q7-Wp3zSTK@$0(_!wa<R%m8pO<_0qRq@p4s9d|&eDgn9SkxR|U*au@RoNRs0
z#l((?WFcrdlx?kmLV=kVzEnmDz@C7|MuH?PZTYAj-1=~Gz5^OdVi0~izJi}_S-!%i
zfZ)X>Z^AH|%KI3G5FUf}9~al!_R|?CiinL4b{!-wq57$m8hcX?!wP4>f`9*@b20H<
zk~}2S9B};gAoJ?d;-5$yfePWpi>I)eBOVl=xD2QPh&+FZV;k%H9Puq6%4U*w6$Fkg
zZOowxzX+UeCvenrCSN?r$Hz&(nFLIfEaSQ)zY|;=N;U{v#+!8w?EwHhK<S1{hZq)7
z?zqvN%xbN{rGYWgO)2KnuF`~g#N7m{kO_uf;Mzbbae+;-|AIt;aCsn#(bxNc1B1`%
z&6{XE?MPtjjU_i+7G_3HLeM`gwSq6**JliKsWLBpB51szJ(Am_YAb!-{d6FX3UGr`
z(G0CN1-Ml|BOw~f3FC(NV|0stT{dR8(IFJR4PF#bWx8(G%0JlvTL)L(P1Hxr@GJ_1
zsc@=Pe9=pEPJ4FHvbbxh{X%Y9=Iesy(~7AA?Wdc+_$2O5J6NEr6`+@v%d0wak~56T
z|4(&WeZ>57*ua^{JM4Rhu9q4Z9E$iXJs2VU;F{^%NsqUoHwtSEo3jk#FmXx8Ed=Jc
zKt!ws)=fDey>RAF+i?(~U3tf#l<)FD%ngNVoLF*7N)Ez2;lx5*Sqd}=$f7Flz(FR0
z0`@8VSFSg1JOCmDdvMyGM@@zHmtCAc)gojAv0r7d!(&RWh*e9FGMh)P{;{8*z(taO
z0SPh@JOke$*vd|dU_5YGI&UN6Xge+KQ5XTcgf+t@5#)f;>(A}fkSv3^wTe@Qv_%3W
z_Xlqlp>X%1Spqw7;9x9&&0!P?099F}SLXVgZ49;Okqcdh*Y*jL0NqPz){kpGVD1w%
z=7yL|*6C1l5Wjbow*W&k|8$o`k<ByODT#+c>^SC)iHhNIqOfYis@^v?MwD&oZz3+{
zm<BISra;P#ItVD)aReh_QDlg$;qQ!wvK|qey~zC%v2K4zLIhPC2GYDa8GL<y%V`YO
zj@TMs)1eO1-{xKUu2c5f^`}3%%+EM2DkWY0RwHT^cSLl4o941dW}VxW;TLVzmxk_B
z$g=HLkpB_<pjxvnH^%7$jHFuhK6s+*o=t|y;U)qVI{_RnP-HOu%;V4!O^+*v9=oI-
ziI-)+ZC@_@Dtk6%IjSw#F67KlrO_MKVOJtB<9r+-_LqF?3qZUvPM%v(@E$Ic9gOF$
zKgucZ{f<J<7^?s{bpPOB70wRCSen9wI(kF~DUwT=PWryr4ujw|@Wla^6OSn30$P_r
zs5f#F(=}exC#nHp;2%-ED!zQn0C4&rztzDDO0dO`PfeL1=75rtavblW@8?e+L`Yn@
zLdbBOD(`V=1F$m%U-kIvDi}5NWrvoaiRuSf%>`Bq?uN%(G9hchG^|>5(dI2Ln2yAR
z^mr}?V-rq78&kYU+)l8P!IZcMd5zK1*U`n%lYdYj8{X>txwiHh8g6qDW+)N*JlS0m
zkjhLj7BB^_NcxBX1__=KAsY80BC1i=>RWvfu{{In04__*EH-+21y|QO(LY+X@Z}?V
z)CX;QzeCaZI0SYZ*j|JmUDWZibTgNE^6d&|l|xAOpYg*hd#LTN@7=4E%Vd9?QsI01
zdWHB=DuwukMg5p*o2lWKuiZF)+eyr!=9x#bNFh`P=Iyy8go9YENyHeXg5}YRGBagA
zQ|s*C(1lDlk5)a)FQx1DZg=D=l@oX9u?mF356n3!1n^4ecw+|KfJ>4y4g<pCzl?xd
zC<lc?el`I~@9!m<f~1bm!6^lQJaRkTp|JthL0s4fUcfrD@2{L7Yb8mUW>$OU^Jg_M
zJ97}L9Z(D853w3Ka&3T`&>2X-Adyfv(SryAV<B&mU?kWKS#SPs293`JiCHpyQqfW_
znR+8$c*f*c5uFa{uw!B_UW$S0A_q4OR(6#)jjZ3^6T}p<%fR&((tN(W^|*l}xe`?u
ziIGEwqkMWZ$Upq60j&KLlsG!3a^X8YV*xQk=ybxThfT)qAr6A@3j@8q@8KO$6r9-%
zhh#RUtyyOEfTqOo592(&dGzI-PU@Hq01)j(c)Ut*C&%xvM+RmhYMMskl=fZpe86|&
zL#|Zv#6XN~H|<)wgn_vmspfPU=`EV9y<c+mGH&d-f$XfnU5B`NdHw2TYoE{!{i_97
z3<8nc>O6}ngp|E^&xlR&%E`rH-grleG~j3)zS)4+`3htleqcH_6?6?99><>`rvtdb
z9KIGnjc7Tq*dDLd80?8+-y+rf3NZ0N8pbPbrD<x)?dj=>D4*G>NGFTP+NcP`JDKK$
zA8?Dok2rdCjdIAIwW?ODq*}e&^*S8XQ@zZaj3cDZB@`QWR(dqUBB*oR%4F_qQN2G-
z@6%ZZGH+K`Zs6Uaj5W{GgAZ(!)n@;R?eK_zt3rBI`X6tDtQ4I2q=Cb0)BU!JJ*k~#
zP~uSj5fLRorC9Jhoa-O$(`U^%dtt;&{1fewJiUtoRw~a<Uv%WowMwnzq+MZMQ5zNt
zE_^4^-8C(6qUc27!@yl<o1cs1ZnS>?RN%p{U9B`3LzPUj9AAS%PE9*r<*VG;vX_R2
zhFrZpZ#}Gv4`5pT?ePLQ)PwXglJP7@uUO_qLW2Nv-8q}cfh|9O{D46C(^mTia}i1^
zDw1!D?}d_<Xk5tWoo1k*pwLV`1C0>HGo}O#N_BN}BS|Q*N^YX2{sHvHzV!i}rAFJ=
zQAG1T#X?iLuYkG-D9hAP^A_H%vLY5=D8Ij2N2x<4FYquXW+e7@agcfn7Zw9a{BkHN
zoUD^7!v7z*8WkBC5Es{@IIMi)z5=#32^odKmP<gOZn+p~-JVMm%B&t!T2Np18jLy~
zAznoyg<=#u`jx&&4F?(YGa32CTKzb;vDJP=*}hFc$AFMcAWvEcJW?BTsgqhhe$3}$
zavRp{?pc<-=2E|}<6&^ul|wPtl_-Lr9!qc8{(E<IVMxC#ZXQlX&W+>|vVT1fJ_q5W
zdr$lfc=cGOE%zM%6Sd^cREH9BD-jNtH9pm1E^->-So}3451ZknPt=E3QQA3e)DOEA
z9`9V~#wXRwU`TIP1#4)C5w<?PB4yJ%nVCP4&JAsg1P%&(egaG6+V;dkwQBfS79Pp|
zpFedtjt>6*T@7v|Em}_odMbjGTq?U0xLy$oP+U#;!#RMl$O)yFp@fRUwkM>tRF36{
zBT0D@eQj9Q6T0^Vm@h#*xb{)i+VzT`7)AacY407+^}qK4w-aR)DN2$ev#f>?MMl{p
zJDEv#LZp%uNffeI_9}ZtX^F}vkwUWfCfv{W@0{QHo%>vW-H-cvoa?$CC+qwDeBa~s
zdcK}x!+WP4)qQX4Otzb<Uf_N8>riZ<`i?xAH7C|2kLvHq&{=ni>`F=6JH=U6?TbCs
zYAIhLko2g285snmKqYkvQb7$34RIB|L9imZ6fl?F>ZN%(Adb^<q&*bjxY<y_LW72N
z1GHthxan$1;4vW-Npmgb%hKQg7s3LPU;AbouzIjK1W;hZrQ|eL9^sXt?jjEZAKxzO
z4^2aNS@pD9rqmi@4%0HzUgtH0W8hz}FtaE-saG+n;br>J29*TWqRWDRf@I<)gL^2C
zq-FDz4Bk#|vQ+0{$mY>He<qOqTFj}mrur<ya{ECP`rbHqvvC)~wvQ`Y+7i4jCY+gx
zplV_?#}cXd0nRJL)DVPX04-x-vy$<3PejjD!-D_yg=E^Xqt`}u5nd*~4sD*M3rh$*
zs!P6uF3N*8GF>On2XLk*m~D>(11nH}KVna*7pIWY-=7%w?^l1v_YwPj*wmP4JGIQ-
ztY`iVNW6P^Sik3y=gpg|aPB&lylkI90e$T=t&)<`2{9~zg9jN;0CflHE+m9eIV|I%
zNI3U8rLZG5)F&k+CH;o7Y)#2ygx?LZcuQ(nT??E5@8mt+ah5_1EA}4lDatGjuwj5U
zRjrrC-yy;4IMHB7U+_&Z7;i8siGvV|z^mQQ&+m_t7Lgo3qmKQ`>P=>CG-X59#$S7b
zf^o0hRzD`;HS$Tjc#U&fNwmd_7aHa=-rnBW-c{$+bYL+Bja+AECn^dk11YGfe`CP_
zNGoYkP*8wV+3e;maDO2@m_H~_dJOh~3>hT9Kl`+$b}MZt)mmNCl@<#jEuq{Vd+F1s
z;khcOpy0q?U0vNx3Q6nsuljB8p`SFZqKD1*Yh2>(IV}1QfiSYkZ6)sD@Q5I`Z{;S5
z_gNdI|9R;lw7YhlC0h~{T__1b4tx$~0Xh=W?<l*jEk#L>?KINChv_6J43ntG0wW^M
zf@Y3_n>eI`pR*Qjrde71P+43+!$Zm)R7)`J{|JxYOC6=hFh*H5H#dht6tP%?p<f~z
zI<oGtH{cr5_l1+r@(j+o@u{g_C@o=jc@rNuxq{%~(GQ`4>H5vY%mjjeyvC3wZ(NLY
zEG%E3QU(<WSr`6bWzc)Sd5u6=Pnr1FW;x@COD7&JWb%eu9eZg%2ZuN2$7c_y<r#1b
z2|dBRONxm`OJT?f%F@dyrS$i59p3b>543`a*-4!NTh~GuUDgdwS7v_#yBs*qI{87r
zPhrBokYa0Q8TjdBkXxOQEik;R6Wg7F@)+<-FHn428uPxEtUajqji83WJ&ZL59fS$E
zQzNm*Zr!>?h6%8{sD%Yv>C2ZeHX*l(5ki^cDlK_2Q~XJ|UnnkrA(!M`L&IY{6g*K9
zQE%8U!WEQS&z25b%L{+z#^H$`Td%{eaRpAFZ(y85gvw~yuVx*=fikQ93OBtGdKD}<
zLF@KH$}1;;p9Renq%WUqJ(kuo*pFEkF0KTu^q%Z<d~g>l_s~B;an<XYp8pBHzs?x=
z-@iWSBZYz<>lD9d+s>Vk6+94K3wt)$<e(B6VXn>Y>BXR_0KTN^UdP$d7NKp0AbWgv
zHc8TR!@7+dwfYE*gzZZ_a>{SGGl^K8?{|DvF%5GWtcwG@yjyZw&msZ?&*|-(H}UmX
z8}Pf&^MI=zv=|AU1h_6j7PYJP?1`pqGcz%Pr4GQo4BE}y;Zn!(!`^Qs;l79UHZs|0
zB7h77RnzbOKY#v|_ig~W1qGsvg+=mWX>Qwa#8JE32oqVecI~ZtBU8L0w5Mu#MJC!{
zvv0!z23t(8{*?8x`S)Y)ksI*e|2eW>MeX#zPcCvfga=ai{PWe@wrX1?>Hht|$ah)G
z|FhTdJ1WkB9Qv<A`>+37c<_IJI~_gUKVR=mWWUY!pFe$@wf%_@4#WJ#zh4ablI{0P
zsN2=r-2Zt|_^d|Qz2C$(I&u8-yCi8dkI1Re|IhE=N0~wS&mZ`|uRiSC2#jL?`i@4^
zY@U79_E)aOYaXL#?2Ys?IYwp2wk>gdpL(~qrfQ2*OXgE{x#T9{h823<?H`-dnJy_L
zi%R9)$UP*IJZw$T^7KDXszMr#@h3BfE7!V<Rg|AsQuFxusef>}Q4nPoEgZBh-{INu
zFWt%!ZwI9Aw|F<G{<tZ^vgK0DmbaWc4<+X&KeD{em@18UA0ej8&obWidUPc`$g+IK
z8#}UNS7T^`-}^?VBX=&J{m+B$WK%qr-Kyg_7FKq51B2bdp^I0i#~wMhOyzOK$Jl<+
zel^<Muq)ftwl?fN-Sq>#k<wr3H#)uZs)(Kx9Lh@^3l|RRspp#tyn7*!X4BmT_CB_I
zjT_>Msx}8woMRpK^HVnLv{>OWUp=3F-&ubtZNQtA!o%aAPn~f*ZU22cZ9~0=mPe1q
z)R;G^EIx|yk15)F+gab8EpPRm%WG=ogs-(`#yslgInWS#Cbj#7x7E&}oW#J+%Ka@G
zQn#w_d`jR*R#$$`tvKZK_+o3-!80P4Tm2;yN(QXxl!BrjvYgxT>v84qd$S!H3kufV
zr++_N;t4<JJ!eywMPJ0j?kZ&R+=k=Zj*DZeJ2O+2ZnORo`)AeZ-8p5a!ls)wKS*D_
zy?%EQ-to!3bEzjNS~k$eZ<#lKD*s7i;~9b7^Fz-gem-5=9Qsf%JHo3lm2OoE-_G?p
zRwV;Y@+REeKG$+Ge_cE7EcBc12VeV0(9NvWE?dTuF81#M)gjUnlUK$K6kAu)hXcAQ
z%^vsDMn16n(@;QlpXG&f+Gg1!m9%@XJjMRAHt!ryR?b(psQ#7A`*=&@S__qZ`aLg8
z6;y0FzgU{yZd||p-50Y-Bd7C<_4V<q-Nkgr?-??>X~>w+&uFX7#a$4+e0H(&TBsdY
zCgqi1#q#I%|1jfmT)J|vb8j^D<}qvEC<XIq^aZmV|Jhy2AC56FD(bbfzIec7t}-+v
z!13aTeHg>LlA^XjO)Q`JkB(0qGNnv<x^mVY<a|=8c|%~2X}NIFey=u{1L^#;%%b{9
zVzldGGyiM*TT_U<du`LKej_K*z>Zlu+slxL!$N05bk_SGj+FMH%=Czy|JunFTc8g6
zul@S}`E1DS9}=Vv@!X|AeV}Ahc=g>ocMRe`==Pqwd1e(;(9=IM{~Qo^zS*6N+bWXe
zmqqRIj&Wld>oJK?HeI^yN$WRlqVd~Uw!tuLgK*DyvwuU9+#aDoiiiJw!nrqD2vz*f
zeK9b{WwvrW+}(WE$nLzda#e=fMgGpx`4b=KKU&FsmrANsd@y+Qp>^H&)4%`w0Bt$v
z*F=BtMaWn)zs+IC9_1T~i#v1P=<Q{--z%-c`6A@GxQm!)8OvLaMe)}o*)8hV{_By@
z@}<hC3hv7GWE3fTRq<o{MTb_t>x*pH>1xui-{n!;zD-o=bcSln>4N|InPgAcQG_3{
zIUpt$iJGuBRRf_7#Uo3F12OkLn;MUd6uHeTnrqS19yGSoc{+~?|N0~G9&R3us-HK=
z(8qk`G0x^%w~$<WDRU*9_lbQWYt~n<0!gnr)`y;de|S=+Xa)&lX!$Gy2AQ=0A($==
zS{~a)P5NYFtH@JLB40QuVf<4x;$AcmQyKM1?CiW9<$;oZpM080%I*{=r56`Q*C;YZ
znavG!wr_Q%da?S2R-16an#Z3$+4y{Qt-UL+T5G}HwNL0oM|F6!pQG^1@s<jYg7A4a
zwN2Fr)^*306t9xHasO=9F^>J3p~@1%b+JrS-@<6*k48|+nMXSJvByaX>FpS5yYaQE
z<j3~M8b9MauJ1Em=~U~^@+g7@CV1fvE9t5!7|-6hbLVGouh!+I?6zS7djf{-LP>sk
ziB=v+9VzXgvcf3%j+Ym_cQv@{tU9X@8D|Ur1ZB0K%sxb0j2K^faUQCQz1-YXHa0ed
z@JmTqeBeVd`cbr|wQ#V1AY<%Tz^}IxkSoazNl|Y^S5h&0?!Y$O#{f2#v%dtOk_3PJ
z81ieDmzP0Zpkrdv>2dOjBhiWIX`oY0vwsQKUCf`)0n1}yVF_uM&<_6i`7;b$5Wap(
z$Gv}}3e3y!0RVnJbKwFj1Tycds}<Zf;O5gahTkA6)&!Yv1GTYh;a_sKE2qsYhuA>t
z@r5k*q8aLNmZU4G{&J?={q&2BIec8>n>z;=%M;a1IJUmo<}y}J6KM0%ymQ&>Y>7J)
zSO0)Q)Yn~<(MuP)diRM$m45Io(P91?ebM~Ahp+5M`)1^6|5l#sN%niHyrnLdQDPl6
z$I~m6j0bB}d3$~JO2_2HH>&OCyeYH4?x18%qxaI-L~@Y?rS`4Q8`Dd3pWUP$-_YUO
zPUDAUL5F$1-|1ZM8(0s|rkso$X!0{sB`%|=HAkZN%Spx8(bCes!rTYerpg&^w!6gL
zp2Ei}0*@NjK|cnU7o=Q>R%wsNpTo*btcRKWN+CS}##9n~{eXH4^m98=oq6@(5qASe
zkj&5|@I5Nxx$zHs0!(*m2d8Ldv7q5)JAC-X`^8*<vxJPaolj2|-G*iEFy?;Ld&JKo
zCj|XYW?lYDCPo;f!~}QyH|$>sEga@r`R&Ky<y1OVuRyY1qz^9HQ*YX2gq}JVB)O`5
zK>-0|;;@t0qqHW_bjD_9%|U_FNTfoO90vH2ZtGSuCaAUGG9XYlNz=fe{e<QKSvASo
zGypCjH3fNqSltpK5`eRElato)fGdSXA!HlznrT42U%fhsaLLmcxbPQeU~Ah>=jvSX
z%T<eHotuu+Oxr|FjU!|?=gW;$6coupWqKOQzh={av^raMGhAUFV5s6)5|4E-F=v;%
zI2!u$e5B^8;N3d!zfv1-nxZHT8(DqfT1BR@X4k&F6OEs@`7u?j6;9U3W8BRx#9f-5
z`zZFBtG)oI>NY)r(ww**X={TYY&jrs{<D&|)u*|{N25;RMddjh158{+;Ws)ymT>#n
zeoR;$NEONNsA3UVRPKA^b6jrYtyTM#T?5eTYop6TZVg5#Xyk}HCX&cNW)IfI__=sC
z4QV7i`o&M+IBPK5vc0MenPBkVBNShJ_{=%2pMc4`z~aWDEuR-|xq08EW0~Mxh3!uI
z9)wZN+IznKStd*7U*&%$sE7eq<ngO);6H#GHHp>>ee%tuBy+!+6kveR5BG&V%VvSg
z7$BSpP@Q~YWQCzUKLnN9Ll!Z4ED-Gdk(du&P@jFo`XetHCOzPY2w-|g#JzY$;}a99
z&(DEa3_KB;022`KkO>1oP9hwF!q@{rbNg@I>dA6}^v!v3xIl&e-4gw978V^5I%C$E
ztj@T?#?Qrd5&m=pnLvlv-QTZmTH@huNJ2Dq@+{wBedC-WK_Y}90sv<M!v*6*JNQ~3
zk~Lw9&<SU#7A`;Il?xm=9Zd1Wzyl!=?qvM14-WulO#edKin>JYwF6osi^6l>ne$(7
zb2XSgf5P_gwYTlJkTLq@;Wg(gZI?%4DpUTb4T%=`i(VW#*;Pdo_A%9#vq@3$#o6c4
zVe$Rcx81l5gm9XCG>=@jm`X9TB<LC()m>q!WpQ4qo0_T6<Y?sZFTFA<rI)8op5I+H
zT5niI8Byu@vp1z8=CN$G)5RAD?<}O<r)*+fz4I8KVx&Wt?ZJr84)$}oo^!GpB}*55
zKc(a-T2UwW8qTk8?aBVeK>h5i%P%LTu+vXiCPa02e$D++F%Y@kHE+Up^o`;ENV}K@
z*>!Wta-Z#0O@cSgXw-4)>2_A0-%Y8I|8#6tbK6jo(?&7+^<RFM91R|Mwg1$8>EE(p
zo_CEBPF+?sJAR)+wcD2KS@gBoRROOprIs=c+0_Esk&{9}MYUF5!VMqD8GKHyV7S5^
zlpByYao~M!bZS;Q>$^2z+4TT`@Cm?CiS%!e9?`PPu?Y(^pzTA?2uoOx(mj-zKmlbz
zV+S*+1Y9=Q*I`1Jy2_402a>GL1$bB4^;QH1zaTupnENNz7QP?fqH6S%5ZCeZFuKHq
z3MUN*h#7#U?8aT!<A{-gK{RxP%d2mCdv7G57a<ekw-C-zUi+!o<Jcwmp(Kz?dTz6s
zLT`z>BN3B7$G+OtfTeK<_BABYU^Q|G3+L7UB!VrRg9s{wv+ilEWDKcLKhSR7O1$d-
z-Dfi~$>T`+&d82zz6{O5vSYj;J_E)=EQJFmk$@7hF#$2Z6?^anlTKhWva<I?zaqUD
z_c@TIiZ^fMl$3hWID^Iq0xQnqMCdO^IL_hmLUW6}6LPePh~(>ShrbB1pn#MNu!ev@
zcKz(o=;;hiLgOOw!S5~_!4Qn08G1@GdVyN*xYN)*nfO?hc$v++jy^(7V2=twK1Uj_
ziUdw#ypjO**ecxHgjt(-HWUDYW>L(&>Ygr~!XMh&!ZA5VIiVeUPFm%t)6fpcW0Ju2
zvTAo8_f`*NuS1mpdo?NC+W1`=&5PM^ZAPi$3>r}Tj{xAK@gQ-L6gb~^Y-L&~`!ZiB
ztS_@U9mtL#5t3z5#hbQ8i-Ep1;6;3eeb6&0&0kyvRJg#?7R%x;duGZ8zKz)J@HE>+
z-is~cvQlQk8Aty#SL27KN1e@XuqZMP9kn#J35;A6y<VGhbzZ10-HkE6_qV_=YW}<J
z^S#@ml$seGx*mAaoLS#Bm?EY5Gk#Rze0I^gBn8PeQcF#xOQ%=)RS2U1<9AbimGMG{
zI^no%ja^ruf_G}^+#`N>o5>3we{a<sI@Im>`bhcHd82YK2L8K0jn(ZAw7k1FYyXjt
z^X1XzOYCg7v&0YC4n(Ydtg%;MuI5dKrsSZE>kTo32cK20{_N>V@S0=NcyitpuiLgr
zzQFyNH)H%LuVHUjlBcG~aKWJ!3CYsQa<*A}Z-vgZJ?Gq}A8!iTJlRa2<Lt1>A)4}Z
zQh@VCMZWL4eXZB3ByZfO(!P7hLs&3+j3e{L=Vw0po8s&40cbU^3Er?wq#6Y5Msg+|
z|5|x|N5~XhzU5!328sQc$1>4y#^8z}8x-R}1iaSN_!CV&axAKQE`l9}O$bH_YJ`e@
z$2ip#xU&e6d0l)R1`Mx3P}MH9-HZFA3(g~d2?L`}gyJ-yN^2S@Tdh;(b}TkFb`|W_
zh&4D#5N4Nic6P>ee<K;>!_r&|zsz!2?4?T2@86o08(@Y8Xa~CgP@RDw+aeNBG&y-H
zsiDY|mMf@gNlXn8Fm^q!PVUL1MF$I0OqH>|=^3@e)rEi=VyhrHxCXS0?;hc}RNa>6
zdq>L8Ac{~Xo@8W`;n^xuA`^R3z>rULt&6<KKn|S9T4>lX{_m#tfwVk=4A6J&8e+M7
z7?>Ou^_nLe<U4LGUV*$De)1&P2ET?GZtjpqD&kZL6}`rXxB9E6=P<-jBpx!36ORse
z*BgAtLj)rPn-Wz4P{`pM?irfZxVp$}I_vZ6l(m1BmcFn4LN$0+KRG%19*St(Z5ktM
zgpv4*!xHZ!p-tGj{V66X!J=6)LPz(@sd~i_D@k&Rl7TJiub_NX@I;$_sU>qa#IQvs
z%5Sk_f#j`DSY0ttjFDA8@W>+ZVm&_cSaCtCrF;ce<Z*_;=;24QWWHIFA6=Zu5Nu^r
zzJBWwmA;+wX%+hHv)U+8**A#nt~AbI=`NbCu{$yA>~*E0^v%;B*TnUi9i=6W-p}kT
zooL_=`l9pL;ORsAATJ^7E6K+1e$ldcaD<@$IqUptV}=Y{e|pZJGUc$I@s?+swO7yI
zp8ImGT<3gV!`o*Y-HVpCuXTCH*KuC6a?p@*tfO*OF4HD$mGdQS6;w2H^$DR-f3}A9
zSNqPPg%Z<c-XU1)?Op65@N0M%OWF6w-Zrxp$sx~=(TgvX37s5&oxF;vr6n+U_}6FC
z1jh4Pj}L8SiIGgY<uKplsj*@ASA9xpv(V=^tN1NV);qBj99}T6NtF2Q-<o>px(40g
zjLr`GB#sW21V*p*`vsz}2-TIp<d|Nm4_4ea-uSX3*SBGOAVm7a_aEWbyi?A7>d(wX
z15CXhoA1IoLGziZZ%*vp7j$heX0)j4+_TOd{#wQ9)Ai*O>Q*pj@59IR_|<`5%P)DV
zd$O-p<rmq8@>G+89|c(hwg%h*Acz$p@)EQ-ebcV=(njFG{8{|5@*Ae?@cKpzwF^16
zB-QH-l4z7&J6(+0KwLs`6@h3&WQ={m?3bjTli@9d_eY_d1pk3mZYw6aiSQV}&2jir
zJ-bQKz=Z@`JB&~nRNI;?g^x#$WLxvy`4-RVBWm0YW#B#pFUHr&CMiZb!=D}DrX-jM
zUi4X6Hbu-G*%t%R4RHFX_J<VkRO2Ep`!k_{02yL>Ntly_qlgO790VzN91`Pm<Q;(W
zvrZ=dMSV>W$YrQ`i7#YXS(zIo%%rD*w`aA!VRC8>n|AOf3W^J_Z?7l!7jX;)T`Uwy
zokl`TK$(fRIYv(4ww<)KJtXmGY%PEJ9{~&|y5U*F&dckEXput~-%^kp2}TirHBWA1
ztFbjwn$|StWfT_fNNduGePy9Na{*(hgtj1tu`*>CQD6!Q+as19pQ7L=PYyZ!K1<Z;
z@CN4^pJ1Q;n+tG7DcF>}S#rIhq(*XLWz&dGkPy>3FP#HufAD<0FlQ*P@09X5^W8n{
zMRJ{oWeKy?mdhr|TE<tlP*|LKAh|hdspNih%kp6j`t{+%Rpu@)m0RCDEUo}I4;?KY
z4IDN%p*znDWN_$_q@$nsJU<fM?b+qhGovL-q4-LxxBA|wjIB^_^5Se~N2go+sPTx;
zODgZ73p1ImrTN3cpQs%YhRwsX72+AR>?G1PZ-q!o?Y|`hm6_J^2F53q>2vSSE;@_p
z>-N=M-e0jsXzGf&3F&-m?CPEy^tZL9<!yA|Dpq@W|84iC+)L@kJ=9d1CAYJZDB~s9
z2i{TS?wtSdB=?xKz@SIYp(#cFt>JyE$9(JRW<~bxvEeLAoqhd5jqQMXb@5BH;{4j~
z%THvFcbh;G%Fl9qlkd4st0<~@e_ty@rM&CODvuX*mR(9X1|%pGovbW>&i-OccUo`b
zUti3-C;gyI+FiO?XBF+D?JqSeP8quLY(Bn8>D0XO;pd(l`e8xhUIX>*uL?vzVIRH_
zeKNR}-tOowH()$uj^%j#7)lk;K}@g;2}LF3dk1z=HU5|CBtkE6m;3}14E5I3LVY&^
zo*_s&(Z$Evh#@3Fga~a;GN3$=ozTX>Fe_M93xAH;+8vyqEl>|`B$Io{+PFdGP^0@D
z9#GwrIwf-+C5=_FB*qvhP0`uLppzyHGR)B?-Z2`2#XxLHK{pyPcJCbLTeRn+Qq`P3
zO)URMI)%~q61_j6;zB)wfi$)U5=XsoDZxG=bto-5dJnkm?Be1qoJ&^Dpx&f?GMM9*
z3j`PhxytNHwPh@E?!d5Y0^_X`@2P2+Y>@djD4%dwf*HvB9(yn*#4z3@Ejpwl`2Loq
z`KvkhMS7LldY!j3hI$7KtdJE&42lV2hG>QM(KMcF$iE?1aPIVC<l;@Ie1t(U38{d?
z@4b8X3KQ|9pdT>CR>$-62chr}uUav8LnW=uzEkI~TsxKg2Bu;bmmZ{I#^7-Z08lPy
zc{1Np2Uy}o@U)PLH^8S?hPsjHiR*56wp1}}lxAlyo%W!PJ{o-ef&Yx#+jN7RzFkeB
zN*mp(+^a|S#dE&VKlN*-uPq?JWu;{{wA55U#Jq_vYt^Y&8td0s>R7+{G{1%sH%pZ6
zSnuN)HeV|59HF+j2i}=~*5@g1$&OR!JmDHESj5N9eq4k%T1r<_t;e#1GDD~9V~4?6
z1HD%_LvqHapB!qXXY&+VHy^y=Aazpf&K0@UPUe?57Qg>~Ex6XLebHermgfEtvn<Y6
zokF4#f6Pq3(Mp_fte5ugR+ql^Iy713mgbgs!M^3@!U%aE2dYw>HehaUE{G!vlKkt^
z2lYM91&Hj}4C4j+BekwC%i7;PL)j4c%(sJQbq}RjsyY`SG|kJG#G+6kz&aG=K;~4U
zVxhf8(=6TSu%BdF(?piXk}pETiv6{5VUWuI>+@K>p2>2S!R%=MY3;EVhu3Xw%;4@=
zf0aa;u9!3#Hyx+WrBU?LQ!`CEL$hS%OV)dMw>&Zp1;NN43$7#tFLG@{v=@eaB-DqT
z!Te=&w^3>l#}BC43^`Qw25+a$pTG}64}33(TZ@=2KPfpW20keU&lj*7G&aOk-IWD=
zHx6d~WR=rTN<foDP>IWK9!h2cH)dub*xgo;a`WcWk?7eL&n8P#9OomW>Y(4^I<tNr
zbB~>FfMH-+TZMl6az1U|v)?^!hKc%1PCVrv$F_-_yKr{#a65~;C|~Ql^vE1%(?M>=
zE%#QPo|D$o2xtmBP)*4v9V;0Vd}jk=b5U)as$G+`WF+5uxzrsulMiNGyjm*O9{p0z
zNuA50`Q!(jCJ|qp;+kaHg=!Da{#ZR?bo@pX*Q|Omqnb&e%jBTc=HvHIr8qrI5Vb9)
z7jTG7R^J+J#o75#SM1)Fl9`+#y)B-vUjf#_u0RB&0EAzJg-vX-f)p-i4njho(B0sb
zMi?{Tk_D6gQ(Rm;uaUdc{>c{JqOnAc49$j87Y9twr7_3FloW-tvZ`tqpX25WBH<wO
z-Mo2IXVdK_6IP_U$JAL^bd(mA*m9r5^@Ri|5I<rX`bh#U!SHYsU4)LV6fz6a{*uh{
zsv)oNTLlG2um!;lve!O^T&PushCh6*`Ktv;P1#xDMW~>F^@=>S&Y!Qupc+ME7mhsK
zZL1Ts_hMp<P65&*Milnd;93$9=AIjKdso5R2yhm$Z34;T3+(O;yBDoR!d(FKv?Avj
zd8mtRj2#T?B$K((aad)#Ilk+ux6HeGU{EbXbK8y`vgodr7cO+(4G+}XpHi6Dk>Pf=
zk9$_Yx1nOO<j02?;X`E&&epz#e$)QxXVU61Sa9~3T|C<+vgPp`$GZIe&+4VpTMlx@
z1<L!z9_M=+syMIUM`sgHDWN3n_eS_Z;RmWn8T%{_?u1iUGucnYoqZ`WV7u#FK||qk
zw6}CwWy9NQ2FBR^d~rfCj{~~9PWnV%w-M|bj+KhPd!RGKuraqX{pV=H`yW&@`$gN`
z`2@IG4-TEncDS4#^_7{kyYa%Iu|_o|l3ogQwGwrHyK$<iHs291qgFpneL7m&n+91N
z2M?ySzjL~ps864|9d8(AL{T^^!b#!o4xp6TpGQv=viEeoqQHNTL1LyxTTBFEHPgVm
zcw19L111xa>cDy)3Dv>WzRp6Z=Qc&29QZ!rp_HjB+VsrKzC6`v^q;q@cY{~ty(LoI
zJq#5WPyksB{zDHLtsz+##77RWxfA2nvYqn_3n0(GLDqWp`c}-TJr$EmEJzCg%kmm;
zq*bBGgIA7n(JD0~quA^D&*3;<64Kk-3my$o)srJaQ1CH$ASK=kQvJ1Z+QGyrE1Rdq
zS(yk9kcve>Ll_CR=jEgQzjJvMcn<!P^e;dku`0>iLZhK}1^MsA#dnl2Lr3=IGc4h}
z`j9kAA4i{|JLTRI^T86AeUF-QG!!U(NGNokp3$mHn?7o?adPI9@x<?sBbTo6ANVTx
z6w|ECw%7HS_e=e0d=}ww@hWFu<JP3?h+WmTg-KOgW;7ZEWU9Z3ZFg<Aj4{onUN8IE
zexh21dG?x!!IUuHvtW7eH&4#f)30Yw5o&lQo%^unNN8Vs`_1SipRK;1vN+@gEvqi>
zqfU~FMc1t6_uK#1lX@rmQomG*=38tz5B!rThu3f7;oCW+=+({^dQFR7#VVkvThp^7
zlACU4y4gtI1f5v;sm`MH^A^HeZNx^rHPse997EE8&wz{QOUhR?%}hcTg#C%)9tz-Z
z1vdUbW6*Ykxm;)-pK=A9QHVte4G1T(5{`6m*T|utU*dFX5c?6J7YDo#0E+=xMW-u9
z?H#W-CYRhs`1&~LNxIbd%nYpP$6-lAz%00wyS|Kq0|SYL2#AVO1br1=VuW)FQ?+dj
z8b{vyY+SbvSyPZc*qeK!`S(E$R5<wP<fXA^JY#CxYX=)swyj>hnnyeP4k+{ZPUx?Z
zIu-@Qa2wilFgu<Km{O9~1Vk*j=K{=r18X>&g;i;aN%5$Dh-d&t3|r~wBoPyVISIRf
zKp@^jjL_vQ^dFc|<?8TatOS~*!S!KbFi5LW!c{l1qe=rN_Z&?FW!5|>diGGih%XKa
zUei@NF@Cz}DmjB;Wb_705QOYYMdD9PS80U6v;En#brKR1AQ-`$4iYWWToL8e?rZHT
znXl#yFOQL-s?=4mMZv#9d1Ggo)NZRbu_l+|l4L=$wcGWfHv4J@dhxmGwd~Rtt&(22
z<*x`Dv@Xc!tzlcWHk|sclE+eN+eYWK!V<rYzDI%%ExbAL!1ex+RA}i%#@A&DbZhe{
z@BZkKmU-y=(U;O<SEjTI>u~Agw+CD!_)>T4jfn&+=9Sndg--3_P}{I*)TnU6#h-DT
zcy+JgXz$kTF$c=eC%)AYS2JldVisK1tyEa)J>#92kfPL3#uxJzP3`GbTnv94E34X8
zxG&awmN{C^n7cN56ok&*$O<am%2>CT$xMt+xhGvPq&urObJ0AdYt)*aE64{>N)EjG
zh+GXYCLAT{K-Bz+rDB46=3l<`-<2K@u0h}gVcf%aj$|nVvH)i&Fg#qhO}`}e`_&eG
z65Qp@;(8C1epvI*qx{(+?&cg>q_Ull50tFEr|yoy?~i~jfIyF-ZougWp44mov|b1Z
zNgY5Cendu~90!}u7&NMoT}*Z_30eeCI^Z6Lg-IRa5L|mzO<`5BfoY1=(n-*-CZ`&d
zw$al5jG7*R43GoBGt>!okj5k`MN>bC8ijoK7exJz8&`w%*awE5m-bU@8IT~&!POtR
z^wh!L{wQ7$wt;=plJ$?WNG(J6AY#)87Cm}27hp^nV46bR0wd0Jy>O&vo6n7PG7PBb
zCl5)zNR6vuT!wPx#`3&5S*!#$$1p7QrH7%%k}&eNP*{t{02sxVK7`i~gb6*m8Qczg
znn&9T_-Rgzoy==nDdD8rtUvOonESh8;kf$j`4YWM?yzqQ6`RY`>|TEPIMCd?l?$}H
zE*MRu1?2zv^Jk#_a5B~FtJA=elMMRbZ}3~Kl)=I6pY?Wc2tRfIquqa8e{0P|w7zNa
zE=&AspqC-yJ|+IC?7B!mS%B8J414+nA%{4ZC&4lvn`r_}l@+!Y2sP3TB*`QMS}>)&
z`=RUgdG)e^<#JtJ<rO>EfsL0ec4nN4=Zid?px_`D<;q}Iayz=f=lVC-F=Z{K2MZFa
z1G^v9o>Z`U+AK!p`)2*J0oON?=6DT-WR0y?nEDU3$>*pa7ix-cl5L#SYAAj|9lkr4
z=|11*&6|fT-nJ#Py?DWLwf~uL<w<Ynwc?B>cTaD))Sjm(Z>ZIoPu0A-k~?72xSC+h
z%YfJ4UncKKE;FemQx`qMQ#lrq*Y!iFPHe%StJ69r_~6a@!?8?V`<B}kgZJk$73Rf8
zVGeWSqX+%vD-GwB#8xEAY165_`e?VDWA3ZfjL-krgeDD(47iN9ecn+wclQ*-a&chY
zkVJuN4upLzli!BF7-&Ky+ydP?gf`olnFke(Y?@LT;C(ZakB=0VhaBJ^XK4Du4H}CF
z>Zwn=)sYqnc!%Kf{{H?Y88{fBOTq~cc(oQEoBcaY@b7tb^PgdIx(Zafn>dz{{f!J@
zA}dE?sNJthI^r^?vbLKNvqX^lA0l=6;tMiNhHvpJY*ZdTD;ru<rG4by$6*Q|JN(=@
zc7ivU*d;BK7=eI%2&@u>N9+v}RDzmM!zJBR8*0IN6yEl4Qt-8NVL}JB=Dv2?{u~}Y
zhwh@zG7m)_sOwnom<=#%2jgFIFSmSIDoEv|r1tj2YlW+pAG;h{yxTD`tQhoBY}wLt
zYa>ex)H>wdAaw@kILcn6@S>*0WFrx-RRkbT*A@f@ijm6)>w*US7eWms|L_-lOiU<|
zI*d!j*~NvJBu}<G)O;73_Cb7euqlbBvXAaj4ohixVSFZLDn|^hH15=*8fH$hA2{L3
z>qP<O{pJ>Yhxzy(f>;RFY1Pu@ug~|Qat?|z23Q8w!R&*JL1>{sF2$qki{dNf5q*Za
z21BBXCjI)5>Ygvu#bbBR2C`4NilMDXOk}b7KKNJeJ9@NG>PL5XH-@4`U9$@^u*W3l
z9l+i_1TO%);m+N=aV>-Vt}2Ei!@qDI5H?EXmoLEHYs3`PcS@_k0|2MNbAUjA54hat
zpewGdsWC^{1`>67`HFC>Vdq5auoE8fJ6y`G__g5L5*`Rx%LZqHO#wiEffS?$bFiaV
z2k3P&f?vIQ<r{S-o98hkP~=Boj0%wJYKti+cPS*8t~ZvZwWxO;Rqp%&6!N~0k5p2_
z-f98J$;>b~u)?VaPhh%TyY!3}#;6d$8O(3^1uN77GSQ&d5xBBR7SHT-RztrDUL^^s
z>g(&{rd;#=6M@8PI=Gj#S`t;R9o@A{;zk4vJ5Y^~c4sSVz!Tq~S6Lf!-h6t(tM>He
zWf8^sf!|`yskx=sXG<Pf2(IxP_|5z40EHIePOlmX7kvEjE%ZM~ULtx4x+CL+?q~~l
zX(ODNrAVE^s4c$95?_CY4;@<P@+vC<;Pf!4b-^eYYwSJ9xuCj|`7uh*@2mZQ#}W<#
znxrZ~rLri1Fy!W9w7Pmc5}NVnkW-No0wwxW;mg}mqZaaw-m<mJ<{>C7F^a<w0-R%f
zV6@=#q8}O`8?#jsTR{2IH8`kXVZn(f@&*MKX6<#LwR5#eVA@6w3v3d6D^6{wWR1u~
zABLy5Z?A#7`YSwJE-R3cwM$D&=fDLA5KPjiiH|PKLV*83Ns?>Tica)*(DgZ|SP-1a
zF(MP+>9Ml72d5B2Gc=mSLyV|;P`f|HZ@efFN@j6zr#3-L4u-Gce7M^-u!cb2flT?j
zi%V1JP_r*ir9V)vrR$e$*AB)+27mOe82z+s@j#`g%4HL&kWJ4R62^z?Y`9GxsD~(K
zbidH_Km03rFB>Zxg;phGvY=|C2RMTpaT67lF<9m#uL+KLit7-a4(${r(oIQ)b#wJv
z#Hk5jkP0!<IGQHH0!RI(-tY9UnFIll4q3M!B@Y40F5>Ml2R&W8wm0Fy5Z?{Vu7qql
z+Qri9ypSVExF=|6r-oV|+my}!))~#W-HB7~13{>M1)On)eJRdP!g)`Ma`nMkLmY20
z4RHased$M;7(@lB*Ju17%A5rAVFJ_{EuF8rD)d<G)UP0RJ&lC{xpB7_qrnAe^9Y+B
zeHb*7k(6EqR8&;N{GHIVQT&3Oe+W&#PJ#7j2q`E)k^xKM4_pi`0?<COG}WLXp245y
zJw+Tr30hLUfY?+tVo)}!X9fo#=L)vIK-3Qh%`)I@Ai#gx%mNOY->8RP-W5yTiBk#?
zP;reG;1S#$miswX_g#~{#d7P@fUvK(uJ{8<hxwGesN+g991qPFA{)jVHCRIF*LBw8
z3?#m7K*Bqr!88Wd9Q=;43Mzi2m9BgniNc0rZGTQeCO>|R^;lU3q$tF+1;?3?W#c_O
zG>xL~I3qAl*o?ZL^rC(;r?ABF4P;C);(8LV(hTrHDV*kU8EUzz4M2E`F(je7;4k-`
z6O(q*S65ZN-D;JHs{jXnjA{z;f`l#wb=TU2R&jI{7je0c96yH>4cwwIfT2Jkxvzlk
zh4i?7mh23$d?+d7aP(m477!BR%`S(d`hiURVl)Q+WF7#ISl9;x8o_M68{&t}EGM4g
zu*ciSawGJ4HvkeyYT}wzfyM^IYfMY!U?x@c18P)!<PW2x4U57qqxHf(03MXf_JT>9
zn&MSc#%5+RXUdsPlhfoAxI%*1<y3>T<y&<8+yiCiPLC~%jc#M4{jl-6IBU+)#|nO*
zROGmr7LJ&xhRFRf^j$fXlv(`hDJw-&_uybPX5N?zkRxoYAeNJ`A!Gy9N6eIP|L0y(
zgF%(L^|u)+Bm>8{45IKTyB>-L2^Pzcz}CAzhVz~C#~X9=^CVrH>Fd5u9lSDfyde#D
zb{-+<UaeM6Eo_uHJ3zqUDTu^{2i`sS_*|D=@vuP7AU6`GKd5jZe!;=O&dM57)nCuM
zoeJ{xL_8-#;J-;kK90w^8$*3znL!GFJha7F)f6Z!ejyl{oEAM%1JTDE?vgzPt9T3~
zyA7;y@!{wq%nnQyuUZD)W|qXX3h3cQ@Y3J!+`NG}VUP#?(S%J%D7V?{YI@yRcG8!}
zc99?I_{;Vf?q2Yj{x~Sde>Ul@%I&60(oz*Mhks^F9(XTt_lDh4VOGEU>3Qkcz|%VA
zWX)3CR-Q$emzkNF7e_c(5apgddoa2_@HnNO?Jfj<@Q$NAbzbbm2?#Ee4>d{_+O6NX
zaT4m+NgOTcRTR)>lQ#`*1;F-%_F}9bAn5SweTPx&QI`pJczBmu)U|_bmjg{9L|F1z
z@5gYz64eMS3HqiN<O}AJ-%J`9lnPgAu5Q}01+Xf)ba@NfyQqKT<cm=3mCiW^G2GFk
zPw@#qcby(su^BDvj^~`*_|U`bx`-G%`?FJhtS_|!;wtwhMcwRCrctSx{Bw{Ca*1O!
zGy!WRCF$PUbHyd!W0gJA&&#=ctGsK?jEG>l#KrAwn}lf}^)9(~Ru6qSu{ebP`E;$U
zX4VJ|$#O-8#M0C@^k&3L2pVU@q2JrA4+XMAc~N2PFLoEXf%wbK2ks<~M~G%TOK?$l
zFc_ZXGA{Nvvgt6$PS<{NRH0TDWVi~s&F7w(eh*&Px8}=_n14Nb)<yyU4{L2TZR5K}
z2Lzs(YH#=w<&zsH;yLyqw$6e`Yks&*Zb4@Q&q~A@e?nvCq3Lu7Xa=$%E`mpd0gUVH
z$T_rGUye=6fE`L2O{i<Tu|#nW0!dT^ESaX)fhYvDYh(z6e;e^Q0Z<w!!y&jb1H4)i
zmWD+i6q};G&(nQc>7b?gNVLm9(cWSYoJ9ppt_^%R><11kl=I)V<zw=DFYzE<M8EFV
zJ;}SQ#rqvg0{Qp;wVYTfv?5+Bi+@_2z4gGyXls+ctYw~#x`r6H1zhHmH%)AO45xDv
z)&iao*2Y^9-C$Kg=Bg+txfsf!gX%)%C!<1-xkeSi6C7&9K7iP#VfsD*#_eE6@)(vy
zfPq8|>`5<)sS3H|p5orq7JNvU3TP68AUjg$>R<wOvV3L92Ic!ZjIq37iH6P@ydJ=R
zX`heZnpkS?9<K#t44VxE$J!7$wtRVko2ZU(Q=!pN5j|a)dGGLFI$L~dw$$ijVkFnn
zOQ)z)sHxDS5c#6reu#~2O;W@C7G0OSGEjh`G*4(1y))Pb@&FM%p}(BmxSb4DG4LYQ
z1bpP@+{Agd`$|~gs73!Qh<eBvh5$IDvcU)y6x7Z!+X6CH94biQC-`KEZ7vZxp}!6a
z&U#9D991~BSX7e%l7$KV544H1k;j8DLcRma5eCXNy2*Hfpou|X#t+YdI8enP`iA;y
zn{{#j0S}S;ta|*XmH*cIe31-fhgyl^NzDPZ*C<HfAB?oe)ZH`6n0c9K{{~pJ`~h7V
zYH^5_?pp;&(87l=HFY_ijq}Gf^mVpipQXwJh6dDQgu5*$7>wKA2;}ZHd)HZ{=VocF
zJ9J}@BjkWsNxM&sy;^H-`bfRh3~vq>7$HT0VEr6U|HSD^zg8T2Yy3MxSz*_v2iz7b
zMk!&IkD`U@9~s4DvTgw%8W2!0$%Oqww-G9D5OXRdcwjtCDpas7mj;C|)!%`5mUwjo
z3qexlza2K}0hl>ZYtUx$<Hz1u2xS9pMXV}pP*Cg=02c?)?bjDrSy^wwfQ48_1j2v6
zrgtAVw=YpkK7HC3E&bjykEH3Mjlput0(pesHc(}DPtFs^y`HKd3=8CQUO`|7@1b+D
zvJ^NWGewv`;#Q7|A{swuq@7r_7n00`(x0=sbn5eCZ)lK(gpl372w|0VojUua8pv5q
z79a}>r9VGbmiDZ`x1b0WBCPnH1O*{r^U#W8F)D0K-?1v^fZzb&1~H8kiQov>kikAy
z1F^uty-bWhy4WUYo}n5h^9>$EwPSS<&k<1b$T@;Dd1IA%G6@}V0peK%HUJ4J#VSGp
zPO|JFL|cW8!YV8r1TN56lEl*e+FE56mtS<mv{_<#oCdfQbaNmdvRofJJfNJ)XZ$x8
zpe1W`^bBS+z$t&hdXJ5ZE48YO%cp{DcqkXq8%zzig`ftXixUWeGd@;AFOI(?n9Bqu
zMsB||c>h@xx01r&ijSBR+lV_lOyKqaS5Q^migIek{5sYn<i2R%u?iMR>L{p+#PR`x
z2{Z?2yfeS`bHEG^N@sF~ty`xqrW^n6Vkg>~IDEb+#9ID@Gw>mfd8obUF)Era`y#*&
zNm#%T2F!;bj0K`~1O_XB0|D3~*Rsh6kn@T_LPCO7TfQGE`o)|x>Kglx90>vLk7zKZ
ze@)M008RvD6MLCf#08_fp3Pdko|>8siaGKCh@0X5{gFplyT+Z*=UFlUMi@6w#DR__
zsf2R+&r(6#FsaC~(RK2zAif|5A^18dGLFq>Pux~+`)6O1nE`WP^1;8gyjVmPTmDC+
zxAz~p6j@|P*#EP`{^~vM{*OrS(f|JT|LETSTA`=@OCp4yx0XGw9elZjhJ5Ys|7b<>
z2@2-?kIt`2&bmN1V_5N@Z-ac{N?>a0KUy>Vf{HC?=yfm$`}?Es{6DYGG4K28za^c)
z#~5hDrQfF?X5FjbSj@#G^3Ly^U2Ke=ro@!Rrn<1hatpo&T9WVBM924Ti`(>yRsWCa
zO{Jh0%QNCq!e)+vGjVOnn-Cf(ZFk|3<2nf0^rp<$SU34Tka{i>BeU>JwX~4Izudz-
zP-Fd`i|=a&1GJ5wJ>)CQFWIYS^v|pA9lJWN*->R6zfo=N2+gphpmDoPi;BvzzAwK8
zs}J08+Qs($v48J1#%e}xS>w2r7c3r>)*l|lP&YPt87NEK$X%+qmLEA}YxYyQT}b%7
zz@g+V9-I2lK6>xiA)@Ewy=S;Q`)jeEd#0MRMri)(kL}yPhP8RN87MOg$I9lv_?jK5
zG4pcB!E|e)U_*y`bm!jheU{d49n%`DZMtuzs<$_bQr8}Pc33S?rcw5Xc$H!GP&>ma
z`s!x+nq%tx)bI57W$n|`KQ-vs?fHb`atU(<!-4;Z%515r-+k8npyG5~V6N0k@X9&4
zDUl;dAw>s|gl=7`cF_nu6=l`jM)SPBEM)Bnk37Rh@jSEab-R4R-3)iO?dtziV7pWQ
zlV73mbK%IfOo7Q+-8C1-lf^|uX(n^J4{=|){&8&k1uZ?!CpB5N^}3ZZA0*A_d6UA6
z4lk|Itrw0tTxY&cTi$e|XvBx}!*fA?4?QEMwi{`+Czt2hRp?eywi$HrEJW$9(XD;c
zeur<h-~HMR&6U?PY^!wNYWAu$ADemc<;Km6@9rv$uX)tN{re`j@BU_e_Q8ESX}|i2
z-{Q5nB0pi?kbLs)k!Zge&-80U=4q3h@3OZP48*Hku=1N0Y|(np(lX9;S*cK@P{ZcR
zHOWHCe>Mi+O`1@))+(;Wtn~cReR|BYf~R<9y{?||4tCi;c=Y$@1a&7?!{5rG4t6Ol
z_HHa?`BuHx2dyjeZaE4Icg2o%JS$QhQ|Xtn?@=A<tyHw-VtL5DeiuLYPlamDi@8Qq
zlvY)duXmrfk*K7Z5fX5J*JO4yIr%945pS_$yJmik8MSV>m>au!)5xozKWFY3n%O>k
zW!~AH?U$atA|GJ&PWRjeImra|{G2oSkAENkSdx%-uSMF{(1Ip#Du9Ql?UR$%aWC<-
z9TjX8QbGUqmI8g`UsxGGo}|##|8R5S8y!O^y_WBp>408t<NH@QezaYSkLyz7=VR?w
zagUf{n7Gth!;@<zqtfI{J#dtPW~cmWL0>H-kNGp^SzmQa9jdV|qUGW;&3-I!%r}H;
zJCqn{RnmETDJuNV{6{C)xix6xUP}p-@6tt|ZZw`|7NDGv-e8(}$9K!-O}A~kx2jG2
zx4ifN96kSR!oQA=|DWfcqgJ*Zvfoq0>7_w`ladN#7Yf`EDdT;|alfI#-v<(oo>(0%
zcFv2l-?Sf>-8DTE@<Py@<5=@9dHn<n_AN$<hq_L6_0zZ9f9<!iK`d5OCURWf@znq8
zr-hm5$17Q!%tn7DT;+cuV$AE48j<(l-IY$0RymQ#Z*M<c5iBZc{r+I|Sd^K{XDIh9
zx_tgVTFDt}2nFJJmBH_!r>DyO7hfEAzZ$eU;KyTzQ2rTrNq-vG=X0+vnrLLEjQsae
z8=>a+%&gFjZ#i$=@azwP-QF#Bb%VO?+gWrMcFaF?W4XMt!_}|sK=J;6eyBniW;Zzw
zy^4StNH`O!a*MogX&wI6)IQE8G||fw2L<y#y&8F8sKX(29Pj^up;**=I=}w57=E1;
zvm<x4H0=u2Plz+*sCY_l)XBK>n<;CWi~HwejRy;1gUOUyFW+XQ-u{pTN=aYl@(n%;
zVHph#_I@S_TMFSWOZVoB(Zx6P2h6YWy8Ui(_^}>$4Lk5b(7YODb*~OI0;wJeJNj_Z
zO&k~ThcMyG${InqYXvbe)5*24Yg)8#l?=!&6_Ux?<@edR<k|GTHEcUtt=ab^xSx*V
z^)KgJ<`!l7E-7VE(c|>F=C`WLpe{G}HBm{8!%XZt2X;C?H>Ax7%o<LAVsk`v&e<=r
zMs?reoqRUER|_>J6ikM!z3yG$RWV|6)H=weZV}*Ot3&t3b;HDk@>gjSVT@Ild8n_u
zR&)c|F%WqD`ZY*QI)foKz1?7qfc<SO5NesRN9q`)el;~5a7_Yn6W~L#TGAKc@pv}9
z9R+RY3=BH7{h2p!K(O2&kLxE`@G+p@U`LCC+@0H=o>{WdP=mlx4k#3b=WAPOgHwgh
zK5--+N+y0U56@6~FT%YMNC8<HfNJ;>{8~S}4?R2(Rn#V+uCihffLu$<5G{=$z)4V}
zKu7Vd`y8?cfu#Yjb{IK>6vaH9gPfc(F!V(QqFi9Dk9Oco+cmU8sEbew5f$aOZToJ7
z<J!)=4VQ=I+47YpSzSWf<KxSe`38b@h%bV_VpF-4Z!G5l`WQt1<wVibg3BzXnb`_D
z5`0G=UMf)R&NRDL$CkQYiSK%#+Zpl6*-z$fS>wWiyj{~NZe<-`QpFVSIv#E)E{odN
zYEbsIFGe@GK=U@6byijLDVD$iOS#nRBmS?3*ZZn<7P$8W_5@e{nZ3+i(je9+#HEvQ
zdNlX|%S+ySk6tlx^Q!SmulCh{-ShI(5&QK#y7>>_{<3xZ_Pa9i;0Y01hWqzBK@>Cx
zA`9P=8_Y`v@E!J88Z;y>IjHc<2D11g5;-YJZ?^nr9<3yJJ1}4eG>h50Zrk^5e6_$?
zcLIKeQ$~=gV7Snw3iw6Br-`^&po%B%8(_qz%A=k|PZf*jBixY$5MmOz;~@a)&?M-_
zUjdiI0W~cOK{+6RkR?j6X=ohe<?R8=L|!)lDFWF>AyZMlngRMjxakw0C3ZQqNW}ON
z*2oz;d8zqJpdAzMxE!>8m@#1)fIeV=h$-@SdPYCNHIRV5n`mgvn^HCU9L=KzN#g;L
z8<9*v9-s)VWU8CHw941qOWTMfkAq{QTp*g=+$(Lt5JCo{2h(hu1?7dnx3&X~2Z52I
z*&@R=6tEa2s}8%8bGoO&G7n8OcJZxSEnhxg%FtAR{0W5WHB~leTbk#qOxH`#Fbo;D
z2AGEAT01HW*=%<9ydL($Q)#+$>iANP`%Ja@iPmwsfv5Z)@r9*agEPgl_v^-g{k$-x
zbC0@ZV){VuyjGc1)h;f6cfG1NOKV+{4Qm-Z#I$eC-gq7uHP|!lU11Rx)4O;@v17hN
zerd;Uj}c3m>+sCY+UXMqMmXqL`~I@oSAgpc=Fu0>Rb$UKfFqICkp(z@jIatZxHp_`
z+0I2;USgUHPZHu0=liZgf&b-OfV)I@0IU`Q#LhL?g0W4O<imii(DH}RW;rX=f8gy$
z{GFeIcmy;6(xYw95)%dR(PIv8(0%QF8{AU3vr46a09oeh-^8+mZ`3*>LqaB&W$BVc
z7^3MRFD6|E1{}bwV>rzj{S5Q1b`mNHKJeaVU7H@9I1hG<27{V5fgxv7)#g*c$HBrP
z7ELg7aU5v8513uRY3Mu=z?Llxq~$!^XKHFn(x{O9bAm-F$bDwsjU<l1Z13Zqm=rST
zB7_y3!krkX5*8%JxkzUHOYH~`9Gxq*B%+M{#EA&f$fDKC!9<PxdVt;gFyI4baN@^r
zQt0!kz`<yTsFM{zKmi7V=KAT#4>xcfad<ogvfCtY$ajnrK}4bsPJx#`miArU_c@?c
zv`>Gz@t0C%>Ziq$j$SVf{yFcTyZDZO%35Du&z-_pZ>nBy>#8nb??(URW3FtyL+UGq
z<oTgAk1VDAX|e}+luw<n?eCpbFg+oD&#zY1ZtWQrb$bPRpDUCHUY`Dbh<ESr3Gq~}
z2(B?Y`k2=-k1KhnJ7-RwzIXSjE$>!k<pT}^HQsT_^x6yp_U`OWP4jKn3K_C}8BVYS
z9ghvG{zALjc9Gs`*Ni}})~aEq;H0LGR^FTEHn#J$cKr-)K2YJA>hI%R%BB5IKqN^%
zS({BjUBUW=|DEFFQ{Nh*l~VL$E8~7Ta^G2Jd2dTgTtnp2y!I~2qWuEdYXbH%#Yu6S
zuPZ9$!hhHFmb$5O>g6HcTdTF4?%igW16m1DDa}bJ?&K5|f1~y8LX#bXiyK%XIr4pd
zCzF`2zcj$;j)H;$$3G<;WAS0a^Ay%v_*XDiF_2TmArG2(u4dYPcn!gK2*?n$Joxo<
zqZg{P&&tdDtc=709R;@y+kqtRz`Y$)E6~ex;JYcpjA<1xFyK^VA^}4r@KgfgJT?*I
zMI1^lNQ8aFz6n}gEW;f~ZCPO!*99}_lwm$f#u&IOVJJZaAuE~DAA2XqyZt5VQ`9&}
zvL>z`;u}ePt#I^0-xyz2GKND2U?aJihMY=PN_OtveGaHP3@$<L1B(>CY*>Jco`>)P
zaTv{)_o9rzmvFCg0xp5<0eTKMx6+l7habA3_xA+?vQkSet%AYUDGd$031r?u9gBfJ
zGK{;R6MOsq{Q|#hh9)=QGVBnHq=6e`JxNivi{Rqp14y`)fuTp@?ve^Dhj6YDd-`mi
zNzmv~=kZh%4kN}>0+1A9QVueM39xABjr;*CX@#o5WA8IS5|@Skq<&zBKqP@+BEt3y
z_7(i;trKGI{fl!h7f8q!xc@a~j=>!QDH}J5Efjdj4rS$lR0zh7Gi9ljNSI84RAJ(?
zQ9C$ovkyTphK8&RT>JNfZM?d$Cs^0wd$BNJL@;NGy9bb{I#dJT$r0aLjMx>E(t_C1
zY<Ei1X$Q61TT*c)WqrHKwEIBhrjic^{o{iB@30?ASfSq_%yLI*X8d&&jkDdf?~@`W
zn%62S^PPP(Q)h=<w7aJT?cGcBpFa>NsTwghFjy{puzGlnMN9I8w2}4wipM#=MOoKa
zXQz)vstVa8_!+l~CyFsC-qZHfy2~%}RXe-Mt1XR9u4nb*q!Efly9kynCDTtE6ND6M
zjUBimI3FE+QT5bs>q_aqJ7pQ?+)CbktkPH1GYHyq?btEfit4Ek`zQqDOtvpLy9anZ
z(A(p>`%Y-yQ_G(V!fDE{M^t6+omjFP%-y=1nc3OHYfF;u{?f2J4B=`<RUzA*c2CAM
z$*v1!-#Td7YG3>2OpSCPZHlyt(c<1Cqgl^YEVXP`L{2BRoI9{QpLF4Yd81UTNBtXx
zJ=ZI_o*c~KKJ9(kWn_f*n-Hf*yi-9{+YjxpZm&Go$R@L&8Jz3=d4cI|Ur|^OGZ1pP
zJ1;Y>BMG6n3?M;x6a5l%yfd(4#5He<f1uyKeS#!QW}7Mi<@(^iCn-1g378p#H;%!o
zA5S&$1gOjgR($nqxkvd*MR&j%mQFBCP9`-3U}1r;8j6{{ez7B&z7lE+5&jW(OLg@-
zAmV^^brym}Okh^qf=NT%QyuXCp}4><60-XG2tXHvbE8m>c%~K5t*~NNj4@}5;|Y+|
zaX#Gn^vRcIGgTgmVgOtSQa*7$NNRxJ*$9n&a8M9J;?83J&24%I^njlLQMuDxlP#cN
zB=H1zmjp}${Q%n*EeE*{k!y@O04knokDAf)l^ZZ9KvW6wTlf?uMw~rJWE(C);`m0Q
zJ-}N`YLEjIPp;K}QQO8*k4D1&?-Az2jGQ!K7=(wD+&`$V;C1p9#1B-lU_N+bFOm^8
zZgb*!ob_^s3Fglb<Dy<75GB$nSq~keMN%KE=str@;@>umQ3gtJm#MllI}!S}C;uVj
zSXcktdIX1O&7ueIF2>?PAlvJsN7n(lty`Fcklm!7s&q9G9~yBC4imYeb7`^FN<@h1
zv$iDh+0B8+Ffsl`v6yO=gQ6S9GdM@0pr~Byh>^vt(Pc2B;0xst<N^SE)0Xsfb1g_r
z0GH|6s_X|ilrhX}R=hy^C3+P9@Jh&qkP*5meCS1qH>#%>zGaQOXos?CH}kCg(D4ht
zv1P$dE2qS{yZ6XZ9s8+tp)X&5o<A@f`RV!gH)C7|;$J6Mr=+RADC9NIi#7-}xN@OK
zO4z4Cu*atJgh<-G{DT|bx9|3;V+{!CP0NjlOZ}=x$zs^k;^3k_G&14Jl1eGDG|)9U
zO?`Ko(!`cguvJ<-@rJ3<`-1HqJ9geuq@oU~pb?GuGu+I&>~iMNv3CN3WqA|JG@7pY
zhwN=ePr4Qe9k!R*d#d>9&JNK>C*$vYNShdE65XievU4(oR;T5N?V*MbpY{j;$e&HH
z@utn$5V_qaJ&9RG<Iqm_2o{Etw1xNOtwSa~){IItn||k0n^9J~eVS|b`JBSK60D&I
zFOwQJs?S@mKG@A9e^2|3`QR0vZ+$W5RQn>sBg9)ppY->1E=x{XSa*eNW9iVf?n#T@
zE#%h{U-v3$aL7vRmr>&t$tlZAT^0{RE*a`R&1<ZBwy}bOve3TU4Glpr_m3k$d`T2t
zzvIH_g3C(-E0J)Iot))476ol!l`NOz62X4&1hK*#8A|XAAYlF&h{l9Zht?5S6_QIx
z%Bg_+f+O}5I5x!Vf(X_D5YtP)zW8F!5ZXJW?Knd)xD(FDu%Af>XP&S<adiq{GJvpI
z%$j<z`yVhLd5F;;VN!KCcW)uZUCPgjdBl(9sJ7+l@NV#o{pQQs`3?0Jv5`gEa#)x=
zW(Gh+rbd56lU;<v0jhft!NA(mtO^5@V?4{S=@T=<J8szB?L-h5dKpvHAf=#CkbF#X
z%z)u%l+#N1CM41vmJ>%X>2Q8&kgl1wa(!fSo=n;yQEY5fht0qohIP)Mv5^>B;-rwx
zV~jso@;zt)RS6y&tZv64k;#T@DyrcMj1H7=rVu7mzaz<JS5a4g3vw<T{s<+?2pipT
z=xYEj$HzDViA6Mc7$lq<GjNjKi5Li5$k@R3w!bQ#d->64vq_t7!C6ljG++`aV!It*
z(3H2;*4~NT7mraw&|L>&&;2<}8bq-^@JWLt>7-T87dsxr(bSEco1z%)O&5)gxnDj^
zP2B~fX58$PuoW+=;t5D?UQ3(;NQMiO@IV+-^o{*_A{>vIuA37vn9*)e%gh6cvp*9r
z?wMa}c||dEnD3{35zcZCzuc>tT^)I^hn>iYOv07?{E&Sxz7Q6uC7tlrZsB5#%ISTH
zQ{ht8#k_Kq=ekCJtVB))HuOiS{N^;Hj`$cIzPwXAD74@@OSh(fngHvXN0+N#4iy<s
z>rl`%#{{u&cD+CLQ=vR2|0w-(L9=4p-3=o{W(R87=`5QkLs-lb-Lz%QV*P*hO?+-G
z3A$fCv+1qLBiRS_bs3@F32jw5r=&hJNqGukpm|eef=2gXHkVsL)5kG`TT?cSH&43^
zKUVWH6Q3KeH=9YJrDLbtlVUt=&Ec-gyh-G8W##nvI~h@NZRsrjJ=v-zD#`awg`Q(N
z>w5lql}t<GhUNM<4-~oSwkP*?gs*M2ADjAEsKRl$b6I(7yyNLV`F^7VW@h6xicWi`
z)hT`2o5gR&imeS`zjvSFLYooI&LZ(4J_c<S?XvHZ(V7P~I8mGoj5)V<?Y@N#<Ks-s
zPDj>7mY-bSKaLIuOAcU0=j1%`K)u|YZiMz99GSVewvz6LqC}<(6(jiie>?1B19x)6
z6sr^CcM$To-Ygj@_JyB7C=eF-i>Fy>1+rsWb{6x}r9n6F9l@Sk)g!!(knS-CCn>NG
z|8n+41ziI+AHQh>#goxJ8Vr(8*i%#=oh@{lcM~VorJr8{W@98^00gHAurn~KBKMm?
z79&`u7D7RM&fLp0t}lBd9>T067F^ifHwl9rH#Lc|#B`TXNx@<zb2nUEd;CAB4L{g}
zn*Ibt0gl7pntp&qR;D{l>+_?*LI}J`Y=*9t6`#j3=sL6Qx@Cyy(L<#cPU|<pFoVnZ
zR>&p?XbK6H6$b(xGjla)2_R7_<S~9Z;^X7~YnH>xd}JRZ)C^>!U~&wG+6xImISmb5
zZ|5LDMggDYblu$4l;lSfT_<W${!6Lvfgq6{7nr~`5ari1(u0x&hxkZ1p%4w^8xtSL
z&6ctsVg`KcD5ZYXhW9bMs$uWUtrcMM0~D4l^9?GQ)Bq>T+dS1s*bHUh){Nn##BoDH
za$q()mpa=MSYyr3zQ!+UlsbY-^j(EJRmvWN=;bX7lg(Fb#;1Iej%m6*xKq2%V08Al
zXZYs#`>xMjnB7>KJF*`zXH)(j%gry-Z_1wI&gS|RTvhmzYh~$u*QoA|`wx`(YJ!t#
ztpaN!4mV}U(PYQjXNFI;z7t5L6w?jkdU<8ohT})b<IZOdawi%k?(O`c^Z%4|<?&Fi
zZMZ`SNhuMD;;U>ap%U8c6)A&|q%4i?i0qP1DCIcBIJPE)(@;`Mc8M?)(%4$0nvlp^
zBZKdH&gswjg?Zoid7tOLulrg!1L;m14ivAl6E9BC&u~<A`9nYWaopKH+p&3?YDZqu
zRRj+A|6okHo!TGre0F9|rOG8+-|2+Rp6|XlXrq}enIEP$b5@D}{Qkh3=epEFNIR9u
ztF+ELXz%U1+`mrT{_AMr#MYGes<D1<XXH3Su2(S|=YbstfJkU&$RPsm{&YevTQlWQ
z(w210V&TwvG&icp<DOrwoyE7JvP;3@FI#NdsE=Tkz991nA>OFXFhTxj>Q~o(+urGK
z_Iyjd6NN7gXE+oN;20YKe{ZUbi^E40F}~zwK>zrGOP?-%b-0y#6VBk^e`;skdzCQ-
z7&BC_Z<nwW^--_s@PDK_vjMiml0HbM(A1$UCC1nbpU}!-5({rrxMu?q7{{`{4`L*&
ziuNHPgXkviw$z<hjaRtC47>gDyRe{Ckj^?nQN6(F7r1%h*I6+!F>b32IJk&8rJ>@j
z>g`(x+cvavq))~-uDHEw5MT;1v;fVINRb&Lb=K3pfPx6!2Fq_QRl9Wc;(eTKvbY|+
zWaX4uMZE;y`@*lGO=phtGoyXI-aH=B7LG9%Ymdka*B^1%z5Vgay?O29hq_!PyWQka
zX@z@oB;o=BD_;GT;^Y22V>`BBNm}4>11tAbbE|l9_~R|yUvW`;y{(t0?B2jO_6bSK
z>&=4dEN%$x;<^{HlEv#iv_BZWs*%ay<pfoyP3g!6XXx7}(kx2&Gr9gZC1i39ESS+f
z>E4Yo^_g3PPOWK}44a~!%JNBHmTc|ZcU8FjwAIsoetMQuoArBs{H%>QpPhRGsFk3n
zp+|<6ny?jiB9BBXE%w%}X8QU;Q`t~U3Nq`#oJde$8Pg*>;Cz~sDRksQUf1w+jAvNJ
z5sG+*nURgn-wU%K0}OQ+$?q2WBX-fEm7^y5`z*1Ij!Rf*NyW}D`jS#_PN4u&n98bd
z)*OFV*z_s7V`xfX;$_RZubp?L0hVErfuV-GetKqtO%zs;-pMzslMG)Ft9ST4Hin|h
zFndMxGmD||n2W5LKLsAB5GQ2v<OmN4t9ouWg+*n9LC#;}RWb=3%p$gdZHCz<%+?7x
z5{_v^z(dlWi0GK-K0KnsS9GHvMu~0hDGN-UV1D3?RB%3CL*X!f>3#XLen)VVpd*U_
zC*w~P^h2q;ipX-1zu~+lZDhi5nI(LTSS}0)PpQ}_>{KeWiFo-(K_b3Qu3Azi&kncm
zDEhr`|H5glxY(vWhYhpa$2_`ROEuY6!5e=l?3KNkrPR`=NtfuV2z-BW$=;urN3B&i
zZ!o!aLm_ma@$-^pZOff#Zheh4pGpKWJFG_26p~tBox9^yTfCXUZ1<3j{Yag^d@SLX
z?=ks|3)0M^M{>8$hA5Xj7M0t%cYj`zl8A4_M9&!rNKW@SyndWZ-4lCVN7hcXG(}^>
zbqCc$#$un7n?lQ8Ua$zezJ#{*E7Nsu*RiW7`Yj{kHu?l#|D{}QPQpyW7k-B8Ahs`b
z?5O}+v#fSEz}bxtLSJ;U;eifkHNY9DYaVIkuw)_5<s6TcsB}<U7X3+dk9>oy0j33n
zgo+!R4O+^4gYG&}C`JBwy4S`=5)%^mrG1<Zo|9OB&<S&<hb}=3RolCr;W}kD02c*5
zfGnPaqsLXZu-%Pl0}$%as{3;+xthy|j*MjUp%5GDD(vHP73Z#qjEWLNj0q~&m@E$O
zA((Ou`jt&~+Vwo~kq5)p8LJ7wL|Lyq93jDmxi!Eb4$$$rIGjiQe%doYtdWmE04}U5
zAI{jRh5ISkAP~sweWVVdwy4mH0>_<5cpGR$=l1pNiOC{qFX}kUNH<Q>*;g!w8S)cT
zz-q+L4Q9VvPLz>kG5eJbV=;<BFrRC-r6>GMm~_-kh#D1qC%A*MMQ<=(_t0FB(y<+f
z>-*0ycUw}YTAotwyG5-qBt@)i=9-wHfMK$ELr9XI$_<AsuP3yr^oicpddJz0xyji*
zdD~^aUUqYPQ`6Y1u_+`jq`zeMWc2n*7$(Ui&(`v8u)U*WY~f<f<+B`)a(|-OQ{yV_
z@j0<^Gd1Xg(?HQgd58Gj-MUIcrFsiX)s9rzzh4uvIM0a9`A++d`z&;sb8t||9lkhG
zud|-o$~DK<*A-+M3Cs6+oll6jt5Vf*NUB_u6dllbF6d2Zy^t3jd(i!jFCyzRt(c5m
z^f5V+j8v%^Y+Eh06F*M}+zBmaKDX<$^|7zhs#*(_3qENGQLKUNaTnA8M{btoGL+!5
zw4de-X#}9Dk9fS+IVUAHsHj{=ML}}o7W~rjV8O_`2X*I(VKCva{D=*afyG#$4%C*5
zkJILm8|<EzwHfPHl<=?TKR&?|N8cZXvW0NGTG#eqpkWk8lMqIs0ggYdySrN{Z~U$Z
zAdkiT{4g?Ef&K}H8BlUWk42a^4^0PKQgR9kT4Y;BpzH+75DLv3#DAE0pkV`->QCSW
z*?_G5zd6EXiJ0R5!@yK76ASpsyU~L}b=-KIciMh~H9!K5&CQJ{6j01&aDJj`nG(pr
zB?I00Dba65Ndn}u9nSbf(+Os1j9K0RnsfMlU7+LO5fb_wiQrtQMpw5SreO#sI{@<N
z8WgJpF3DlfV;q;=F+?J9(39mqAjdK+aUcohF$5RXv*cYAcz$}8OMhc*ma?~y#a@pY
zfHILIU~&L@p?A*oJ(e^dMmOOK;tg+`=K@q^9xA(dhY$e)`29hMl7gt8m`YlilICNG
z))xCcF7)J(PksZl_(ezCSwEfLQH#|hC+j$mJ}LS*bgPK)N{c9{%T1gs^S7wIq%n2Y
z^J6~!8+Uk8{Sq%|X-&$MD?+Mq(rf(0!bhZy4R6NXIhoX6mAS$ol6RA?g5i*4n?wE7
ztdlfriH1oXtNj7BM3|Bk`0a-rPps6sQQ5kDI!%52hPu@2js&}c-#09j)U<eyUp!%i
zcZ*re2{~}K?>=`~N4m3>$Ck(@(a7w0$AJ~1sN!n7L-r4KbEZ!GlT@BwVCEZtd{7?4
zg0F4M#j+TEd>Ufc%T%xM`W_6NxuLGDrNz~%^kLsJ-k(VO>?T7mcr-pNC~8(>>Joq5
zM9so&mkehYefh&Efm#0X=hmwo>}(7t^>u^(r*8BxjC(h{P5iFnL<qFqP|}fBmORFd
zX6eRo_9W5^*|4b<0Cz$B0@E?{u#7zbLXvGnOpKs)A#$;nmX?D`wVTqlFaacy%ji6t
zNKb*&3diSC86f!2b%i9<pcM`oEsX|}GyzR%d}3l9q?)_@2A7-bPA66`9|D+%{g9Vr
z8DV#Z!x5dpe8{Lg0`%JUf&?2Lhl9uyMQ%5OO9XL9W7Yb1wrm1Mhe_U6tU;o$g1&CA
zheyF4VJ|?HfcHqKDnYV`a*{Edhi*<xM&<>g7mZQ0LEC|0eFwhMLzh!!E8h7u$dKc{
z=yU_gLIUDPhFaj{{c!y^z75>U3}6G0^O@lo!9a{m%iy<5hcd;Q`Ve$JVq`<Px%BIF
zFkV6orp8^>=JYCeDkv;ANq|42yo$<F3I)}KD3G}?U{+?kw%#PIIljS$W_7p~!iKN0
zx=O)>z#KpgNZUXzY(b-fNN-ZM3*@tyFjT6A09d)wA5tEY(dmBXjf3~gwJrgfN>SxE
zy>$&NxSAeYN>nrb?FR>rQ6j#le&bCKmvo`<-FDActL;HE$3c{=y}W0AU7h_gdW2#2
zxVg4PS}_I~>4A5Y)23YxX|KE{y2a2!`J`l-^Nu}qZc61$$c)=}BZ;-kx4DV5l!dKs
zI@Ofid)IW8c)^yW)q?y|4apKu^BX<f-qq}_T%u|ltKY1^`y0PVP>#BoSV_RrTc_pa
z&p&%qY_jcEm+9rdHK#l*^y(DyjSYFcyqrHiy^yEY-Mm)lg_wv&fwf+}N}{XRVt(+J
z>#jJ!MJ~rPCgRdjzG$ONBj1($C^v8aY1PC((R{|kEK*Bknp>Kmvgi-}f!vM7Qe(er
zzE}>ueZBXenUbzzW&KEMsbZ<lqK`?e3FlPFB_cXua(c%HpPfmR?0(;JrE1^py1|!9
zslP%_?UT~h)H>>7-KZE3v(L7Y!;6N)eYO=_%bkjlYS}2Fn=0)S%#41E7k#4f?mm4Z
zH$mao+)g#Yw1b(RG4Z#{@_4r`E7^bM3axWGR&rWwTfc3urpA#kM;cY8EOuBnU#W`l
z^YqdWiM%k0G7yp)1dCWnot9X)&dkzs6}Smt%P&VD1lZRAm!Q)YL$D87%%-M7U}t86
z&N;6b48`?9jA^-^Kx<L09z;_QA}iv8h#>)hp}G1ssAw1rk|nnPzyVkc1Bb?-miV0v
zPk)@8!5dUkz2tO##y6nWub^fLuX_Z<8)I9?hdpGJ1N7Gws65`=snoQX;ow_c!=)I_
za659S8d9TGvtHP*6@~6PY*H}Ef|QSB>!6g0zj5OLE(5RfDhQay>2fgS1ohb*GdnC?
zV02_+u+6dNBGudj3RcKRp#p__7dI{$a6B?2$fV7?k9`gb(jiv9L~!N%lQyMrz6A=v
zaeYE&P*6zB{{T`6XgdoOXh1x;UIf^H&@P5FA*5OkzRD5C2pSYwp-KmH6m;Or;zmMW
z=Z38ey*E)T;j)RU1R2ZV=aK+Js7mVhR0RNK3DhCJn7^0518f%!zVX|w9fekF!|fhX
z4NOhhio3JnJ&HepMiAX3h{rRqelr93#+^kg`wXgFToXRV<HLxAL~~$J$dxD;UjPhq
z7AA&C4J)tJ??=ozHnzea`kf>G@+M+Pe39F^Q_>`XJL_z)wb|t%;)9^c6@t~!t6_Hy
zDKL2cO9&+o?|o%?ctHuK(u#_L8D;@ieIPWrb&owyNy35o<9lB#<N!o=3e*&x6#Zuj
zl10eJ7^ikuh3&@2s9yxKizeFG064U~-ZrA$fPrg`o5rte2k2+9oCs)(1_gR%06yZ?
zMqPh_s1CauqPE$rs)~8|XhHBH=vwg~dl!yNFO3pjR+Y~%MJ5UMFUUOUtjGW5JVJC-
z1j{G{StT{+AlVX%O@cXr<O2Uxy@8;tHzPz(kLQ<weVQ6B0h)9-Y-`uWMPo2==C})9
z1tOD#9=WK{K>;;7PJmc$d8d~bhD%^Ypg0lO>CT+ZH#pi#;aT8GEHhnG?V{rw@S<Lx
z9@2SzavL@F(4cOFYq{<<3wNCbA<aX46?)>a3YoiG16ZGw>ALK5TV7XIP5jaOUHBT)
zbjCw7iW+lGiOOE%__}Z2_se`XBYDT^!<53IamL?E#q5@q%?x~VT3u<A{JE^xv^g-0
zJy-R%%Zf6_v7FK#s)$I-zw5-g{M7Num(iF1Fqr?PNaE{<Z)?MuLL^JIk;3(dG?JS}
z{Go>R9(20VRW3ZUET0jBHnw%lPxUB89FhkNI{m{7HrLp*^z6pdkrDM{@$C(6zAhue
z{lzgOCs}&u6pt^~9I-!UeDdn_{GcVp8EQc?JHmZK`-9#E>dSO%hoGF^YbF@3qnsrJ
zHy~~Ez5mX)G&Nb_$x~Ph#7hWGC$K~#@U3v?35N#9Wp=w8iq{I{_7IzEVEmW@kVzld
z?MU1iN>#iSn4RF9f);8VK%f|0Z6Fqd(JyM^ZRfvQqJ0L9-?@3UL-^cz9EI>nA~|G!
z+GL<yI`a4pL)V|c`ZU^e{OKMnO~gLpmr+s$nIry_s6Zb=NC6NYkWV_COrY(8M`$Z?
zSfV6hJU9+Y31O2#AApqz1m7WuExwRAR&9;R9z-q>*^(4AV3pqroUsQHuSIyxeI}+A
zs2zZqxU~Ge4{#t3@d<&sNMXqAUNSrbwutZWFFcQC-t&zXJaMizv%!bE1W>a4RV+K7
z{h;;hvqPsUx`z$SXc=c_+S!~{eKXdKOZ(g%ZJJMUvpe=s|0l=8epqZNafPFMK*U~j
z=)8EL?eU=dIlnG&=N0e7xKMxD8_GvC{XS}_DW++)gu;0Gn3{^br8DX*{~e6mn}vwU
z6Y8J0s70`c60csOQd()Qvz}*z=7*mF)0c-^BSWMAXHxcs_qPOv6K%8qc+qvce8ulg
zdmef7^3fc1w;WIM&D<?K8z>LojF4`FXa<0=iD$Pr5+yYzxnveU_TeezUNWRoBolrp
zHw_WlO96fm-3rPPQVYU5M5qQdm}l@VBLyF}Ey5Cn%9LoV(KmchTRaEtQyj|u8<6fY
z!+n1BEzBqPKa1`_{WLzq$^r&WDoWB*39D6HMEVfXjuD|Q3QU6hAsHCL>b>Bf5uZqG
z$v~&a(D!Z!g$&YZn-RVdc$+mL7-}B`On9#IHPb0@JZEAERD(S~5JOM$w80vyfPjhA
zO(+W!z&b$rWP*;3SmREAWs!JrqAo___#V<HQRb^GU#~p3bFGTa{fnf2)9$>(U?PT<
ztI1G``dd2IkQg|CGuUWTwHOmjP$RxyO8$<L^-)8%I~Il$9#Z!R`-U&}`UlwRYz1Rp
zH>&wp-U@E12-_H-RXLg9ay|Ypj$K;yIPlyR)Kw=F-7}ix;%%&>=X)!Hf)9X!_7=ln
z0N+Vyg~o{Y1GZYy%p)0(S{_1Zw!gn)HZ`qBIv2`w;D?vm-9BS1MN$}vF(>O@03sYn
zS{Z(V+am)Nyd3Bfa5EJIbrUZ%YTPU+YQe6;abbi!xsrGO(*O2!VXaJNty583iT6p2
zj^~~YVBdgVvNZQ=`nxNb>%i*(k%$*Rd~n3v85IX{ZXv&SGu@@!X%7+zr$ocnVcHF2
zBX9|=-&{bKOr~XUV_b$|#GP{~SS`n_te)c;q4I^$p2&x=f!n}W6tF75G{+(v(n{c%
znf{pxZ5EE|UwLZ^V-S0Z`-vX-M?n)mnqHz#L=aVa`nPa<nlnb*^;m(*hXvH^pY(~I
o(CMol-d8{NVmqr-ByvH(;bXr1BH^Z;i}26Hz)b(%e#cAy2S0Ge+W-In

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/current-ui.png b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/current-ui.png
index 36e5a28b5ddcb0edd8ef0ece52599fae8fa79f09..7d96058165fe707bea9cd8fdef8c9f3239e77d68 100644
GIT binary patch
literal 156166
zcmZU4b9|gz*LKvPvF$W&Y};rWHBG~bZKJVmH*Rd(&cwED^P8UM{oeDO^Ugo>o4IFh
z?7j9{>%tECq9BR*5$_`y7#O0ol-O4=FvtTiFbG3f2+%kE$%^1$U?gDDV!|pe;3pX{
zx<C5r-tx<i5)Fpz&OfZkpZjCUP)i>~`%^$oxs$tY=D#aze>8=1X$6DRbvxJX?C0qJ
zutLYssIOVwtVU<~_<ly@&eyIvgOHeSFIo;v=e9T6Ybj}3=XXD|aFUgkO(Y8aN%jkt
z8shJ_i8j;=hx5(D0}OC+A=EEWf4_AK3x%|JA^rWuUx$5qz`)n_nEEpXdQVPHG6ni(
zuEPeli|ABJ{&Cu9e<9;wclyi^+gE0l0&ruIw7TV$cXM-dQWR5@^+6T<%0^p6Q3L1q
z_e(*EJ@;3KgP8w&{f#fA6U<vkhEe@n;5zkGye0YUnF)xV=lPRces*2I%BsGVW@m$c
zG$;6&lweZ3StoKirV(C*8G#{h$$MK{ohB7y9|$fbX;)B&lg5k#-WC%<B4Y|~Zf#~Z
zJT^8qG}I*&Z&xsZ@ll*?vX_b4@a<=vsqV9y2I%3D)S<pnLwI>xDO}iO{EXE6Gaf#E
zK0@vxEuxFLwjGRg$)b6yn_s!tT==k%>w2@#WY&3YKQ|(G>5!gjS2QSQ3BWRRufk=m
zwuVHz7#&?d9vvT}#=;Op^`(l8F}H_FmCF{9P7dn5jlbXiId^6#ScxPBp6b?`az(|s
zEa-YmAwn&|?i6@b%#@7t*(bck`cb2nD_Z!^4{%MA5m)=W27NhIdx?!eI-jN2R~Zs^
z(YJa)^s0oAV@C@SEu2~2u#M(Xwz7kwtkFmF{iaX5rIXjH5WW1D;EV44VKkwVzk1+c
z#2MxJh^WRpDmZ(d#Q~uVf^&s)rt}&5<ablKY^Vc?0+);O4kpc&?#?uE{9&SpBUUEO
zaqW53V`Xc|Kl>W(;27M^v;?%qaV4sKEXj#_N99mH1*Q06Tmsx>Ihc&daQqw~J3Cbt
z`;BlIgij0+z6MCdlMOE71luo9;e;WI11yTe(S(sMNv78e?ceIy$?zj+mhJ{E@61=0
z%1;8fCho}P!?i<MjFjqK3mEN_hwu=69gKMrXqDw?bO9^+BtbsnsWx{8jTtBA`R}xU
z!udj&93`TPASQDn-|H9hP9;|_Iqyg|)9KwDhiz2fR+B>fYE3Tf(~WOI;eODZm34?%
zjS)R!20QotRNPfT_|5LFQC+QASsf=`3=HzBA~T9c0P_adf$J3<(X1+4ivtbM>_Sdd
zhM9LGyWQ`{c0S@Ti}MU<Jjsx*cGo5-Gt=>Dq?qT{R*%xuR6M{Wwbgx{&4Qn29$oiy
zt`gN}<MZgdI_A4^D%vg*mzo~jYXQG+e2JJNOV5RgmCUNiINW}fz-cc)i=NEl?ifY{
zU6L+B?1$x!nI+>(!1sLC`rE1A^tiSZTFuH9l(w=eLo+RLO+azDu9;<o5?Qh+!Vjab
z=JB{t^zvmRg*43;y=%30n9B8bxcK<$%cDk9!wY%zc)&v_b^FmN(;sfia#%|aB5}Pr
z(N<rI)&H#dUx-jhSc1J#z_bKfz^@4Kh1oI%AwFJC7`IKPa2r`HybjI}#`T&ZE6}z{
z;djGJ4}LZHL@Cn`Uh)px<8$_fdq@n|tAZtZ=7u|q0rJLj!>=ogkLZCeJ!QRLGPFr|
zh3)EV_<LhwNR^H93$V~vpdrU?$jf|p)_jJdEdfdWs(C50JzETl@ckhpovJI#whb=>
zO-i4pOs67{rr;8Gq>LxVZc`*OlU15SCQ<6;z4$!b2O>|CZ;6?HW}$7f>!h_baC?GL
zDAF(r5?>L045(COroi<_*IpMSD2GR^N^<E?oi@rc`;+`K#B|?vbg2kUSV0-@pbb_C
zzNI>Ff`DTgE#jGPQ9#Fu4b9rhaqaO0<yXJ7wr@2j=Kx-J)e8y28XPZ206~xes)18#
zNaM8@7%mG@#eQPp(V1skwlyl;;-!7zuC}9@uq!cR6LSSU9CMH{HhWte>C1uqZlCMo
zCM?bQV)T{c@^|cVbADs9%Dm2LoXCCX>YlQ^X)YZYHuiz%9pefQ#;dud#IVSb>`-mp
z<u5ODV%@Of9Z^5v_8)uTMnzvIU229F^rQ&BP`Wa7txXyje@HP)hY57ij-(=pWN+Y6
zMEbdm79xqZZnA;W;9?Si)?`aWBvi=Ds{LC}zd$<#W(2o7I8&;|KPZGVS8{sQh|JHK
zVYWTDhuq-lkP*2C3EF-z)_Zq1sic_p(5myN&%Vb^E`${Cv#<TN0+VHf)!L|ewdcr)
zsJy)IXPI9G*tqRny+jLRGY=+Lg0Ah+BURSrPZfXH83%Hx4Ge`=E-dR10}^agn3D?$
zMJzs!th~!_FUI$?TFypm!QgLS>@ir<>lb}6Bhj6lLU`orng#AQ@FQ3g1Bdt+8L!g0
zxm|XPn)1ch3iiHr9-}PXAW)CEUypGTAGmtMrKX|Z%&-}}?jE{n%eKAby=)Kc$>CuU
z%mI_KwugX2M7$G%t}f96SY^mr0?fuH0Z|6dzng%^u6jz>=fu{H2Mg)d`Z{EdnE`ac
zy!0!sm4kNzY%PcN*s1NWm)$?tw{6andjziSTD!nnpp0q^5x-4P9Nhncdmtnt&cm^J
zyLNX~o`YMCb2>M9$()ly04zMNXPV(G%rAGaZCv+?!Uf}IP4o4K$zKw9J26RNM+OpI
zrhuou3VG<FDF-5<Q6WJiFVOnLbbZLqh82+rVIW6Qkzizj82wtG+f|xjaSNF?3?7M#
zZ-|@l8J|3UG=O<|`S8ogK$cpzO)`AknWB$#4qWZ?Yr7<oYhzXR=1o*Ov(f0n2lzd8
zRaHXQofzHN_M$_<Fm>JRJ(Bmk?f}htD~)yw4FF)f(+ASt&b|ptNM6;;%S%Clf$$Qx
zk1H%R)a3jgW&yr1FVA4HI^X^71ef0}oYPh-y{nM$>di~_E2w-akasp`GZs4G@mv0e
zy-|P~H1$#Md?LzPPCp$wQa|xQbh?QgJ0%=XIR;vN9C*L{F|Ctjx}brc#?d|B5Vc*F
z;q0BRn~ptNUK;Vban}6qSp@g^l53Y}Vdm*zb={va85aqQvG4A}CzWDs#h_!fmHDAW
zyY17}ls=z?#NGY-{p=_BbxVz^rhqYny)wA>qv?Fr+bZvlIg}gYsNWaFtdt8=c;w@!
zw?-8%6^@fniNLIk^(i#X%KC);5Oz)S&H>0y-@4DD!+ay_Vf5>0G;|jyrol*`?bkm0
zR{*teGiz9Ws2$MITy?KHt4StVSZLKXv13FgVHsF^2(p;Fx}46<d5LGP=sJ;XENT&Y
z9+iFZR1V+I3@lj4wHNL1tR-^F#1Ecl>xW5vOmBT@5CP+F9L2ZEdDEz1u=KK&wzro>
z@Ir3mt6j+m%aB`n^tW}@4K<%H_dKne4@AU=_VYMzyVq^*>+72si@@g;QB)GRolzFy
zH0_=okBV%%BaSBVgM)&Y(2<a33|Bj7IaCVf700%f6txd(EX+a@w&mD#bzW`GmreTN
zwz#_;$(5ty`q(M#r|o_^d$~=8!V5FSk&QxSu2zwHzn5m5<vD(VO3rDy!elq|+fuWE
zL95!|;qL0n3!l^CTRVo6_H5yAMODMyoDcBHQug*HXD5r%xBRLJ$Lm@h*RS`7k(Yym
z%O~?BzkET9-vI-BO-yNPO=)6A8}(op7M7Q+Y4@G~hhSrc^@(mrUZFGf%$|Q|O|{3{
zN!GfK_kgTCq-+~qg9KJ7xg+1V=xx&5T>do@=a>C^cduLBSAcck@RQ5gyVapM6-K&1
z*ZZjN-fo&Ee%iLN;t1&w0YgleUV#d(X}z9tUNr+=NS`F~#jA&#qjdXz>NLC^#G;=}
zn@)S(6<}a5#<%;rYxr}S2iF5ur(TAJL6boOwrhjBxOIESTl}R@Toi)Gy-uA@6UqAy
zIfPC}?%kPn;)P08p@7r*=tO~5jABOSeT3{sYwz~WeCO0>EVs<m^_P3byUpWp#<lO7
z^B5(Tp`g}cf3M`D_wzT%lPsHOa{D%CuQCI3)t#XG89hNywVUP|{ej54^;a2X)9n3O
z!%gmz@9hrSURiv=`?KQRG#|-z1T9;cvxLIk*Qe}e$7OO8m-ZB{867bzWE(2zl`;jp
zJ`U@(R=eHd?I=O7=etu_S6A0KN_pQp^zVCqTuvto&g-5@qbEagR6Tx^4nZ_b2!lN2
zKdKGjRx*MReW#TR<n%1A2I5?!pDV<lfTa$T3o~L41pO;tbdcfC=PR-Xwh@DR(6E6k
z@O22W#+lhYx+mnuW9dWaleM{##pUIhk5A@+{>Ze)CG)CjK#TJ!gz|zbK$INZCD~J0
zZ?igI*6#X>qg-bl!_00k9y3eOdM(8`L-p(TQ2DgiVxK=Tg6H#kELx~#BKoHi%fs5l
zImHSPNW>tXp2Y3L`UoXnLmNFWaF|R&Kfmw+Q$Lq6G9aN-1`XVQzCg+J@^l@cQXG#E
z*S9ELpe$Et<e#t6bN5F`sV1}TOscD)<T29?XWcxn7FbhH3Y@o&3dcJz|JWx*D!o4;
zZ7Su;L{C-oiOyWs5Mv7oo|u0k3wu!DJ-PL1Z^74b)4pIghhSx%w{}G`@NI83#s=Q>
zR$&U>AKI?9h2tqr60aZm((^b60-+dRzxNOoc8b;QjhyXm`8bq;m*&1*L*BfhcI8rk
z+dum)ENUd9io)Z46h#rNq@hmR-tDYMkiKnmrIo;YZpkvnTw&yOwlLJF%w!Y)=X>ki
z%~>Su*hna!;FGguhd!gKN5@47y50GM*(EdJrJ-Y@(M@ybsU|~9^6g0upla!Gc9eMU
zBx%jZ`Hnr0acKmmh|Oo}&;U87fRdzyNG#y7)f?g;y+4{FTIxJqAU~4CSW!~qrz7%B
zG6IiXzZdp^SNQnOW((Ok6(O^WiLV_cnbUf$-g5cr{v2p8?w+#|Zu8zF`LvJ1#cAL<
zn#??wJu$-A)=Nx*!hg|u)8z+)jK}u7sfl~q???cn7aDnh(7W4~is1bE8EagpQvb19
z%G_Tr&)2v6srhMTr8O~;sjt64!kfhAC4>qS3+syQDnyo%_cWXp!iU7V*J~%7)vpUo
zkaE{Tq9_OyA|BDOCpyFegW59<piehoP$Z}nVsU1d7bg?gZ(m<C-peT4Ux54g9iEc6
zoYobKs_5_!84H@c$UzH6hStm5m8>k1Xnpij^av@TZC)&Heil5qJQ^BeC7RzedeaDJ
zCo9&}p6k5TydUeA2xncKuFi}4phpmP*erWjhe(i(ID@vs)+{%NHns=$BXBncCIR;N
zA&rXosIA8dZn3LDx7Ruz7DSA0<;!a_OzvAY*7hZ$Je!M~QgfkWW&X?3sV1f7U7Dso
zL15e|Obe`U-76<CkPz5J_}(T8CXait>+C|gdOJxO>7Y;>QHO@Q4GD`PlzZb0*%)^j
zv`*n$(NQ`nvJACe!0pqWO`Jo;T#JR!o`|@P{uwmX<B6HyRq8^wjv1X(<K%9zLbAT#
z!v$>L*X(=uXg`cnWJ_nJxmc{Za_QC68FAvH<o@RU0ONrzGb~KvIv7nVN$km18jo-?
znJdZoqp`A}0NStJ^ZBE?6|&~5O+ja2lrda8_0PS;#6*z-TtQL!Gydu1X&ua9cUf~;
zZSAfAY^|5>YvAe|&^xEg+uVF)?z1K|GU3NE#l;MMFyEU1adD<wRXX)d=eG|%fr#FZ
z`Pfv7DI&vaSzG$;D;v@we7J0B9G2l?-<v*$V|jXd_8cY9foHk!J#s&gPMo#oo4Kq1
zLFEEqP&XAPkYK7>v=IDQ;Kq!N-#ku)jOk)?egqkak`#tt#8GUCjiIMyI2c^{rxEtU
z%HLlW8;K0UeM4IMo}EXucerCZP|d)@fgLzn&p<_l>H;uyxhux%-nFRn9T?4=LUT@K
zrki?%w+oRQ(D9(^Menaw66UaTJu0K*x_56Gbi3!jRonK~w$??lxfI#QPL&$7<yqCj
zrlT2b-%R)Q=9^!jTE9MIy%s*|bM8j5AUor-h%iv)>{n~WexrhRCHi``xkB-*W9KoB
z>gQRgh)}*r<dbo33bypkeqrdll}Tirmgr7<HG_nS_lxfOY6S=4XJ8u7)FbUrb#>>n
z@Jc^K@aIr{Mr0yMq|1)BcDO{rYHuWj%=pZ@<(&D9l;?}|3B|(sEFJ+aTYte!7l`5T
z7)K2O71UIzc*0?Y;-OGXx<NtGc7<XDZX#Z%6B6mb-*=-atZ=5+7EqI;y?%ndKCB1_
z^fM{FL{hD-{!5o{uGO;c8m-zo)H7@z55XlBO^Kxr>2Zew#^WcvXN|8<j2?O$owZRP
zjc|6>ul0``$s<e4$_&l%1PBV#-IkK806w;}p}QxDKy19(S@*T|M=x7xxNPU(7Qqc-
zE|-f5y`H^MFTZ)cfk^xybR!;<3tfbq>dlx#p$~u4P+VfLQa4dJckwZAG`Sn|i;Cmc
z0*8a0H0XAE33=_ctX9W1F;J5GIuOGX>SuQoN)Mc>brC6zq5O^~y4e=-ERO!fzFs@J
z?`1kP(m0)V{PUSH?}vhFWs6wZSoi}|Rvy37?{-y0qP|$#`Sl}y9Q{GG*4pB@8VQ>w
z|F)%^zg$e#O67K~`swC!V8HxXr0S^u0a(t!ZQ9zwi~-=p>96&YjBohvZD&Zz>ah_q
z@o8WeMa=smVqz3i&*eq6a4&}SdM{OtBdZ9p@BO*B8?NV7bhy>wrh9qQnWHw7nMR6%
z7c`&><G7PqW2)&&ap2yg2c5sc1u|uI?<_P#Cte>LdKek4HsQn2BVj9RC@Mji<nd8_
z3{s{wOOQ88kFOzEztOwO`Q^)cR;ESc`7Mf$^bZ?{i*A5DS_pp-%NEi=z!F-u<0);A
zfi#y-lDdjYbnTcCO|(mFUl1}ek~~!>pX1R?wrG&d=f_1$=w#&917epDS7xt*eqmz_
zEiIM}4yOdu0mBdp@=genS6bSGU`DbFIQT3UL$kC)Q5KP`bwN;c==B6e;qf=?cY^iv
znM`cFy}}?6bNilBZXR$E3+VU$1c!Vu@`LY+V!u@R$&8R$>c+)?O?IZhgQz+*?J)K|
z3`E~dU_yQ4yxE;82m5V_>9ZCHc0!J3+dXj-f4S2-kqq9h1lhLZ*b^2PENy1-ixH|6
z{)%7IS<>rL=(V0-Ngp&KZN1gDBXq@3F_OqvfayI&-ky?0x0oNUPK8a@M#`q`K?tb0
z1FsdFtIuxJ_kv0;Cyih&O~z6-#_@|b88d$J6a?2_Vv~;DcQY;&&q@L-vRDN6W4Eu(
z@BnoY%=IyP*n?Di>{BmC(;vN@<ZZcDK01TLzd>UAu3Kzn2Ioq`U-P{T5Ha3n<Io)T
z?xnC+U8e@(pkBt3A>#^)-IpBaEZ_GAU*0orT8@-HMPEAxUVn=tIcxnLDrZ7G1*`#A
zwfNX%s*cf0E5p~iAghC8wYGa=iKNUpN_CS~XKEbp;pRp&e0>pJ3sA&B?x9P6d36%7
z&hIG<b2A~kCl#qTkP`h!vxGzg@d=8p%L@SIoB>WnwkR^4{R|uJ0>xaP<_yEV`g?*k
zBQOw}Qi>uihyVLtOJO~OmgX`VE?^%r$z_}rL2-C=?|!XBif_4g0FuL(l&EtK!&de{
zt2la6wqr0SPwgeG2It_fluQEkpt;T1nio|=SMncHxfUI~$tMn{x(;nT0}(sGhPSng
zP)Y6>8EXS&CJ@IzE<UYHl{phUk`SLu?*|ymkF^2OC605s`hDr2T^E9P%<ua(h~8es
zG4+tLtrRWi#UWnDTfP-PzM)u=UaPstFI^gtow3RAeeJck_i%2Vc&Is?1<_2KwtBPm
zY6V?sMaq)UnVL8}PI4D-=ZP_LzzV|C*V(DY>j*F)=Y(yiK6WM)jXruhl!`5tVj!+a
zdxrOx?Pz+a1=a5QBMer;gScvF$m^2${tQ|NjIHnGODP(QFICko|2q9fT+bnA3@L`}
z%UrA_m^|m(;}BgcRkPi9!dSm&6nZ8?TVp94n>~n+ytV8MDO-9DT$~#mA-w3;>+uix
zHdhO1Ha-a!hSTi@kqJNP?;sqj>G8(h5gQqv1$gdenT=>cbbP0<<WE7>EsT7b6=a_3
zqc5ljA7E|P_bgRl4fe_E*|5KltY(c3oO=`<zU2CC2Xf`9J?sm7o#2S?g;?|r%=ol;
z{4)DV?`!Yk_qWoaF7lwq?Dm;%Iu>_RzsBig8+Mvc7C&Cwyk}Rg&G;90ET+%+SPTrS
z@Oc;u1zvitNOu>rji{vi9TGRvk=ktG^fwM-&}`)t*wAHTiemJ5Ed$~|r4nw?W@ATO
zZZzgqo-?(Dku@~}FD70_JgHf28-hN)d}W}jZYr<0Savo}VHRC^TvaYu?+b1*Pvwv)
zr~M3KXgl>He%4r-^uAWM`}4SnZ$y)A<iuy-z!N=0{bsu~q2>@a4$i-rMRM(dD|@&k
zYf&Y0&Cyy*hYBAJT0f>}*?-i3cXXYs%7uJMMjhhp#-6;E?~1llw4aJ<PfekKpUPle
z>rEc(tYW*;PJ<j7Di;H2;--xf<<)Cue3*(CtuC>^1@vqvbDY%6u);&lljN^7xjL37
zn1g*+0TCHzAwS)#4l;9RlxQGAg&M><`;d8=CHO9gi>O~jsK<t=4_AE98x`S;?qG;c
z3G|kG2?v;NZMY<?CK3uSIm(ZNgL;&xperN`QGPbrb#m=W9s1GcHW=peoj~cIhHFrc
zFA{agC0N+)pNkU7o|+YE<g^mU`uAhVfA*!0=)a5mYKk9BuMl2^5s^ZJ2U#pegI8sM
zQ=W7BBXuFMe=S^x?JI^mIlg*540+o3?T-;LmR$(=`Jb1Ge$+(goI(KrfR|tx<xh8C
z*{T;7EagiaR12KRak5P0&dFpG8e<jm6HK_4Wmsvq2XIJm@|jr`!gVdeDgCN0O~YAX
zw=@u<xi2i}CL2Q;B1+UkapP5NleH~mH5I-Q+OQysn}>^6nny@{u~U^kmkT>jLOu|J
z|4Tn2fPhNhwejw@pn}mg(W3fMmq81F4sgEv#wL#HLOkP2r4ltx*0~y-hx+{<L1N7d
z$E73A(q2m18P%DuwzghkVbzW?#jHcN?#~Pmg@LUrJ$t^Wd|&P=AcFT%kozOPfFI}w
zY8hf=A;W+t)6sKWJ{WF&pQ;hdu~?jIlrY{>8RDq#PhPZ&iO>$0pPUUVq3)MBq{VAP
zy~ATN^gTm!=5&;>Y4=#b=9D{}q!woqzufrxb;pMPM}dkyrQ5Q0YYOdrr`%^~eE<)O
zs)Up=iQ9O+edrM0b~^1gRu{pRaA^NG`Uw8IDKP{&%Rn`KYlIWZ0_^QMLrU=?_MVy#
z%bkPunx^K(C_lyw`Sgv7dq=H4)t~@}SgTi;%2=MW=Vn`K9cknzUFzBEEjT5CdcSN^
zQgUDmq|gnfC(7$A(J0*&>)U>Z_kRl3+#Z<8;glf{>z_-bg|ZJury1V0mtS<Txsrt=
zISuN4_#*sgKz!DGJJ&u>@$zbEiSmZ6yg4BSLd6mUc+QJ_4qEAjGPPGI7Xg@!c`A<f
zCU9X#m@>$Rr{Ml%6V5srHnC{Pk(*0C%gcovH$CsN0JmN$`b!H0gB{$8simOd_-j^g
z7@(xI6<ea*&qcPP$LA<(jYyuYR3f`S<ubo;=eMo)ay4i+5iIpCbI3YbakAB&Vl+?H
zXK4LS0l~BX6&Cq1!S8}V<c~6A`CqEm-y-6#eUc4#TRmkm^U8fWY2%!~|MQ=#^FdV)
ztTY;~mr5m(BnczMoL;x5zH;NmK9I;$%tGL6nx>NEIand&C9q)wV*1Kf15O1+3k$MW
zD;%is?42CrEf}|%0hK|aRjYhTOC_6G2I~6Osf|BU^s9-d#flA>2K%!oWec6=C9nX~
zVX!p7t;N|eOVei7M23BR-7HJ%tzoVh)aHKE2FIZ-8MnOQJ4*2?PU!jwW)1~0z)ip3
z>IyY#_?ndo=YRxKJi$T>l#-o75w?24aB{xICqGmG!Vk%-FU&SHlZ~k(KgTpYmU7V|
za2g4gR2h&}QluBxm{@}j@=Zoe@;>|8(&5cB<*8mRK42hkP1GiQFJd7KnOY#Rp_mU%
zNtf@ykQW8$nu~GZDffO$UqFh0DcTKh^E5b6r=NZl1L`6B<y;!w)JF`abLVmUn)8JW
zLsF9A<u-&BV56Rp8I{N6#<a`LZw*sNkR%o~Eri)~x8PAOhtb^>Ft#+!;5BTGeUo8c
zEHvQ)9O6mHL_9Ei<`W3<<RA8Z`cg|MgIyj%!O2{9LK`EW!2i0V)P(mH1JRgSfr`uN
zx!ku3BVSI;Ok9B*nwdkjAmMb5t827TBwEc0{nE%IG=dvnuwDZi0HAzr9-on!zherw
zfZB!<=ELd2utcopC$B=aR*^2FSxQvF_3XCkux+*t#jTqPGyUXyX@t-#cT;d2FT<C-
zH@GDXrH(0%1kg3ejfs>itk<=WqeJByAqCVJs$Y8sj&~Hu7%Vp>4@rq7)?9XUSl%hE
zuNbBMF8x<fQA4bvfM?k}SaGos#{PGh{uOdKP|b~md6&6=NX!2X;J=P|{DkG|;H&sU
zL;UlAgFRGyqw_U<UXSvB3Fd$FaRMlTZ(HSXH%~PGK7#ZSqMf6yce>{MWGBM>t|=Ea
zK|oQBJ`*#{(6Dl4J`QK+{Qr9ax?d}(Hu;u{>aBFXtNrT&NcK=HsLs?a196x)#y#0u
zCxl-KL;5wzig39RJ+%vIXV8!zsv+Cy>AC&emBUDYkP-l048*>~;OWBkB*gQ5ro^c^
z2A)~Be?Aa31V5fnZ7-qz>8(MX#P<1lh+SY8ysNXw;i3jqcbFajrw>FBN9B+o5VKFR
zZCYzPmDdS+8fzzphD=QzVfmxL%O*>I3NELeR@(D?eCU(p_)u)3fZYU+tQxWT4JmQW
zV)K&CcIhb{+{VRIqbx)c!nDHpZ=Clh(To2oB#TaL?5QMO|8hN|FuuRCQk~QyT0}ls
z>YIM@318Ew;v@POXJJt{IRKZo_D<8Gy{7_UR*k9p4p4Eft(7Yte~@AHnk`^^Q*FS~
zP^-3xd#z$&duV)33p=cDiw_dYbFuG3=20Nd=8KMJah?Fi`)V$G%&)>?fv?&-`Q(8!
zRO`yqINR=Ep%I9eIeY|-fxpE6&n=Qhr#7ZlHm|4gH+NKchcsk!BPBTdo-Hm`9&LF5
z$5Ve(R4qiK$WyT)!N0FjJ*6`-JfsM!d%bpdXZ_F!|D^W}Vyq=@?-A*5+uG?J#%ET@
zVV;RIr$H)(p!N6i`LqP$o0H#>4BtVpDcW18$oY0o?Z;)O&G18~v?LU9#<KtQCT4rX
zTwoM2{>pdE{B`AlXBso2R!=yUf5yo{3~V0dSqO$xtZH?L<vVcO5w4w~)YG~<+)vy|
zO`((UI8YNEgLq}0)6!rgdoe<>b?r-h(yO21UDL@<D>?MD^^4>zCnG~Q)yp$TA4iEK
z#(o)zb8PU+w>GqN=xR<ZB8SX+n?3_(Xn{4Yf5nB9+%i@idwpc@o48kke8FFf@-WaJ
zM?PP?o@cykJ8g1<IL+dtIiFfTxtjVPyzqAb3Pnkfu-iIcjeBZzS9-fz4qbQ&7<5=O
z`s~Xqv*;0d<X(a#){l04<@C-=dmn0sLMn=*cClQCA~ruv_u*>}nl`=cypS5U8}H3~
zU%rT-86{enG;OwaH_<`f%2!paw;T8EB}#g)oEIx!!(DXTD43j(c!Oy650d*>*e=BB
zvk&>#@MrFAw(6EQp~_dTI9x_@zewg;-3?h&ZZNa}2a`#1RE7UY0TcMBQt~TsM%PFt
z+7rqe_|N@>ss=GF$yMmFQGLudhd$BjvL#13y@LbDaQ<dFtyw&!S?8y>pIgPBuFb>r
z_TlFOIvn9_?_DgFPv-WIq})j7^BFLfr%}?X8Xsk`F~&6(<rH430KVCCI2HNT;PRHr
zH*53wSuQn)Q*qY<juKt`tay~j$a46YjjsW2b{6RoRB;27_!R}?f8g1FmD>R_P{@k<
zWjM=aBuTc-rzZmG@&-e~F^uUX?N&kp&`-ULgr&66*e}Gk6^eNn)6k;cCwKc4Uz*>g
zC84pcO*9%A2=W=|%(tIoFg3sLm%(N6kPfyK_Y8ZUw=Q?X7v=4K2~!N_rC~ll3yxN(
zu}~gKE9u#n8^ir_)Dw$nmS|<x#6fqwxfs#9_R&_Sr7VHo!|)W^8}sj5{F64_Xd%|#
z2D~|4t)fk?`WN{F^RU0F4LXwAXEbufX9)3D+3R1VIZMuW5MOqsA@c>##i?A6Kh0sL
zX;L8|wmvu=L`BVCvC6cXHrKISO>G(ZUfQd3N|I^B1;S){^VXiUC1%Vr-~I0L7PUu6
zQ%_=_XYU)#-+Y}h#^z9+>x;z2Om3(*94}@%AFP%iYpvTnRo&?gQnxg9B%)do<+2g_
z4pKY+*Pry~hLOCXstdgUn!_5=#R{1`a-NF(X{<a~Z=FsYf`NEI;AJH%xzSLNXkJYX
z$vR@T%S2Wm7Tblp3wIN<*xX}O2J!ujWKWsKBlqHq`Z7)rCWnQ9UwYE^LM07_2B$$k
zIm-EfqG@*0<xG(Nrw`f-f{G9`l=tO$|4vBzq@bKRqLRJg53CuoT_2fH;!+_*EMko5
ztsu#V3^*l+3mVw6brB3-3F&pO8B7Yf!imn<z2???HW`K6$)(CC;$U3W+n{#E=1`z)
zQ$Btmog!X6_HO`e-f#)${=4u^;G;-oY+D&2NmDUceOQ+NxvICQV8H(>EFpiaop_F7
zg#^n9@xB?LqvW_knLZJatJo;Q$iar4e+om(*w6GF9A}+nl1ugPhbSbUfVMS$%Agz=
zLbQ}mt7c~M{Q<AcCZgCO!6W#uACt)1_uh*ByB-rj!&2J{A~3`vDg7h*g-|cJJFN4V
z{?0Z3V}BF6m+0KL<#3x3{nzimKsB>Nv@cN_10DJQIpd&DzwpVxRH;M*R~J0hiQ0HE
z%$6E(0h|QINYej03&>OwJvR;{u9F~J<gK?hF*W6mZd5-0*u89eQ6Mv#H%$FO8F0==
zN}<Bw=P(hbxExZF4SMPkRhc&GQ(AIz8!1K!Q;*PofwW=--%C>hye=!lcnO=?uWZu|
zmKKY%P|pr^_4zS<3s(9g{RpHQQGvOl{FJ=X4-4)rNLn(Gz6Z<OP_iwmdz4PjhX%N5
zr*n6vBmJUj!|~8VW6awo_B{HOi44H6az%0vP6|$zGVTD=aOQ0$NY*m6qgOYYCFAKN
z)Vw){rRpMa8%N_7@kF(|MGhgL9$#aznDrAogi(F^kJ?v?k@EU}l8iMRl17Uu%!oDE
z^7{I<J8J_3uCHW%+NsO?{;tbZEjr}*UA2-udT!2`5h<U8;|$d6BV_9%EHy@dr0$Rz
zg@3tmvgBF3u|f#fEk^lbhXV|m0&h!JBTLS)OrZ}e5H(IRR@YQEhXUxbF?3<XeO5O6
zaW^FXeJDt**aA|se-tA^mrnkiY=NV^cpP(@8>7urVV@Wu=^EPyWK|fMGEL!{V$WtV
zRJAK~C;aqEJ{EzlE}F}E8hd(L)HEu`tYI>3KTMe;cLuW6d<d^%ON~d0(`p(u8IS3b
zdr8y&(Pv=o9)uA!&?=y#49Ep$sbdWSCwxW%u>LkI{z(X+@Yv`PB_WD>Zf&>l&Sk_3
z<59%^KV4R+(7h<w*0@0Qq)ACsc#0hA>lvp5Va&f8%n5fCn_%~?11EQ378ay(e^fW1
z>SW4aHn;zZd<Lk|D26)W71H~dUhoJjOUnd%dMr_EcQN7!330!lK3e7@Y<V0R;9d*r
zYsVn}7%a6VGA-SISwH`rs|^NRwAC|ZAHno|x)7O<mjH=;W_C6qF|it6UQ`qk@zqOE
zbpgt+>*dA6ObH7EqjOa>8^s_0Bhq_67;E@p9Z2}=_yuNYPwh_x8QBJqs&wKhE-MNV
z%U#&0sjQ6t{v!qToPEywUrWhn&0nY>nD+(0`t3@Vam;Hw;^^oIra&=Df(%*kW@74-
z>{C+GC9wzIu)r^!$E7-R@0Z*(+To|}n)jO^!B!psw4LdCds9<W<#lW<ngz*0<(&`a
zYr(qnx!-glHYR4af9iQy`#=qU<`;XD{qc;GuOYEuf*EIvH88{D*|zs<H&ruD{~XUo
z)IqV8kWv`WHN%laf#(y}8l&;nLzs1)W{1O7=T~?ULHDyX=eJ`9--9#`E03cTW8>DV
ztCr)rS@yt8_dAV~&E<%(&5oBxAV|_WT5dQGSJ!@=U%f|>p?Z0HD&>6h1oHn;UW~k-
z-`5_;m#sx#(eqZMvx_Q9f)1{6DnYJ~Re}~L;dOj`{E+q*m~z8^WxijWq#LhY@|^kU
zjKWr24obqpvJ_8uIpWI=*5;O`Wo2cj%MA#xtIn(J?`5tD2?_T5<4wDY-aJpq0JXAj
zk4Gh}zFk6A+C(bPkH%T<cPYjkmMdV_+LgL*I@XW&OjP>;`&mI-720)2r8U6E?e`a8
zDCUTIg@)(SVId3zcq4D(?Jc6sjjQ$eYOS81;D)g-NDq)o8v>5l5Ap+KxYbnuIiMg&
zfentsqQY%SfuC~%a>AyGND?|?lzL9)h-bZbV-tCwOoBr~kEZZH50{jC9K=ZKc%Rl4
z4;N>>Zeb^BdG(E^R9G+7Uh=NLYAXY#s|`njhk>cAg_V^Deb_oU+;%eywvwe<HAZu#
zDetYXk&G)Y<QgZ${P#b;nm{8Hi7=wsDhi#p?tE9%Mtat1(l^v5i|LPcB)?e+tM)d6
zle@!;u<(C%N)#)z+@Sp)SR~$JX$C+0&u1XufdXlRfnsVraGyVk2XJ$9UmV&4c`KR=
z3am922N;?!sw9bD&l)<|Pk-kIhn+7f%O8y}4-mOu4HbHvH6QzOcj@&6R&l<tt7~CK
zh<j?EPb=~-E=-`nLidN`ULWhc+C6#R$M`F&YG|mbIqefVNB3uLoQ*G+<c(c0343^M
z<qbhX-wcGWJBzy>TyPukkMOoco3<Nm;L3ihQ=&wMhXh->$Jl8Fku2_})ccU%2^-ZF
zm+xTM=KhIhJA)#GmQ-+|$twJxAiIS9pkpRjj7}CpP>yJn$9axV0t5S{*zBgGyhbTm
z0Rs`I^A+ncl93%pM<qk~DNK4>kJ#x^yP$Pg-ncb<Y~4yagF$<w>~Pk!kD9#R><I5A
z;JRoC35~Q;YdhW0ah-9APAN1IkSW3@9k5@frX5Nspbu41zPG=Jb$dwOT61qO%%qbU
zzj16dO!f;@49D0-;0)KBu01E>?mep(>&&SZ<t?syYNAbjNpy!{<U^-kUhkc2Yisv*
zcctg`jqtn{h~-Wd|50>xi6LTX<FquiY82zPbX@RpPfsxY*jxBxSGonF<mKfp@cbNA
z<v+8bW(FbR56;Zb-+w-vMvKsc{J=Ok23J>$R>R2nxr>V+q`E{d%h$tz#b(fae{4SS
zTWfi}+5)Luj5f)o!w$uzOEvt*kDD<I%CoXK6s(`VBAEdBUS~q6GT2PJ{R^{P3yO=6
zSm(7G^m_W|b=+^`l@$oN%^d7&{FuI_cye4{U!T3K^U6LaYI_U~Xm;x{4ErI=QB@pv
z!!wpHDI<ngD@83#W2t~^aPjoz_`dL-x7Jv@J`M;tk<QNpHDRi7-rSL|z;gc4nSscS
z2ONutB&p?v0m3^8YHZ5S{;?6-CV@uJ<62*YzM7bsnNctyXkhb;J4J1B#x0DZIz_hO
zC?5}=bM|i8-c*VPlj9kH!<t1ZhVJg}!eWR|FE^53gPih+oI#6K##jDuBZ&+E_l$!=
zfj0B~@!{1LSs7WqQ#$o>{~}~u7L3~L+n+;quuy{um(Q)4x0>}ALgJw@afWdTvkMcA
zZ>!E>vZ2rS#6S7f%|;SG>k4>0*f4xdl~3aUcc<U;KW&n6FD`a!?a0l^5!A`EiD=#&
zP!G!cFT5qhC`O`O91ba|PmCQDMx|ey9;1YgxhI5zh=A|IDua-oXAuR%a4-nBtNki~
zn~xK$S(w}FL$oxk2S50H<lfgIM?5~3n96h|EE>q5QQi2fvhw{WxMqVD9F(7AWY$IJ
z>%H|#qfe5v>jfUa(WvMBoAFwj^^`wf%GTCa;8WlLk*C4b&QRLAdsKLCZ2Rv0>hrnf
za(z`0@&zI;$4N?I=1R5Ub>Qu>l0qimW0~u<w#OT{w#v5#tIwvgAd_o03^B!k(WdXC
zxM%24?3OzkgIdK;ZK|UGe#8bbFqS<E5VdIm=OnMP>iLV4mVCLNVG#!(Je5Ii6}F(5
z6P7O*)(WasnqS|W==b%`ka8lUj#^WTUGJb$*t%CsLBZ1#C<%_$%~u2W&N6s6kN+6@
zK4ELY>W5)>T))@@wY+u{P(0DJg0mREU0^*jtv}9jD)L?CiHBjecK`+|^?IUs-~6TH
zsH%X-I@zs{dn+}9Pm{+T7Xfdt&)4Du<66AOM`l2-<5EB*?>MeZh4j}W#4Lu4+`s!5
zf;m`+*hb<x`?EPeMUQ<jpFr2^z0PHL>~M;FkbB6{d|pjW6^W1sqnO|9#^lN%5SehQ
z@b_;sMNDfF1OhfDG~m_aOYbD$a$zF7$7F<)D18xVJo9@}&UN8p)1X=O$yHyo-eBnY
z{CuZRKlT^wEMQ|~9FNV!#{ReK(TpiorUMH;_^ir&y!wsb>xjKd1GGHMe?xa6Mj@dP
zcjwl@-a%<M(kPSHr(1G~@ZX@<W`xg?nKs9#bC1)b*^`bYgU631oPu&Az_BahXX~rf
zbC7q9-|OYU`{mUdYGlZe$^%&NU_MuB^|66os~YO#+6uv5QdNOM8i(zaSbYW!EiD;m
zAQ%5RZiQAuBGFJLa0J+LQ$3PI@3p^+txeBB>;LL38SWtW7t{DZ0Of`SYRQGWE-8ER
za{+uC<<__+IOy*DyRfk^QOSv&dr>tm>A7xtrQ=*oZx;)*%B_D3ZuZ7K-IkDSWyYn!
zzcWzNQ=iYD_o6GVJVbRc{-^|NRz&a`jxVB1Wb8QBdEZJ<yIaa)((4BGEp3<m_^qX#
z=bDovG=&))$G7uNXD(T#I4*pQjpG^oX$`tCptWtdG*ht0WYMm<k>mFdUcs4sqTeaH
z4L@C!+x>ud=r~5o+{+7mTM7h3rObWIM31FIHet#Fk%_y^KU$oKA|a?kt-1F7{KDUF
z@f+CBVq@!cVE{~tz~_jMPpm9Kuv#>ay;obz2>gNfU3d=UKpVyXZ7|+B`KVf&!RuTN
zL}<E&dN3`qE+85P`rMWMy>i-!z;OsEBDADIgzPjBLOobrmUPS@g;nf<$C&J_(&<KI
z*wr1A)oCKA9X%~5SlRzfbf78*13UEK5ts6%v)feRvsf18AhqeB*P{itza09w*p|J$
zFU2gi`FQ~`5@F)sv3)}c)hx3DxAO4^*O7dq=WqLfZzGO5>Idw`L*IoJW8ga@pMJm^
zJhZ{4SD_9w%m<SRMq@_sJa3WPuPyW0eh??Wdl*255r67KyL-=8_{RHBhFD7ES4poH
zSzR<=cf+{$IouP{EGyqyV!pHSxil!d!A=J`h;ZsfL&fI9-6f~&Nkggy{C#VG#Se&-
zV(M+{AyviUD9s?|G=vm(!Y?W=_4O8Q_Vf~Tow~3?lI|f%4WmDpB5s;L7;2A(Wga5B
zaB-6Hc_Q~uOC!A*2mJiMJH$X+xq?D?OEVg9jDeZ2M|2hGj(3Yx=`J}?<JlX2PwH$O
zLHI|<n+M!pI-<XEQ;|Fim2vo<(=SAJY@E=6a1z@Z@O!}ZX3OK<te2h4B_5B&+v9;a
zp<N>5q{}?vVv&E8agYu46xJd96E8wbsl^?>^~-IdX1`+cMa%kI;QH!HqwO|mQ=1Fq
z)sS(fo_DN3Utft@xyNOKI>@lt&l^(~;!Nl2bG7FFUSoJ|<nnj}L)5D%Z#lLd#m})_
zH@_>b`_}5p*nVTDpnwzw-u9Y$@bWJd=R*P2D%f~fKw)SWKrw`YjkV(SOo&dY@Y206
z$Z7TBKbJVixbCtYO)6?Mmdbs6n?k2fPv!hN&in2>w0uslQ{}OwBw4jgf}ge#vlI#r
znd$Lz`Qduq&3!Tl)a(kpuh=KF&^_vrI5j->yuV~(;IWud%B6Q2(V!J7@+1AL{RF`?
zIB@;-@#mb=^y*fQqgJ8R1WYTq8j$|IL!*4b;<e=u&)6J1ll1=boS7TN?eui>93}8{
zaPD#L-X&zSTwlh`-Lx}wLo-OsY}bp=YK*4ye$Rhj>GObJW0c|i_So=xtyYgPFf<sG
z3u;w`{a}J_vAxkqj{nVPRHB+N+9qk~q$3(sS4RrI`NI$=x9d*wW_6sgmZ+79h<|OF
z-}bz@q?#+$KrGy+@@f@e6g*8yOH<cs+gI;+=zCvvoPPpMdnCTPruuWQvf_F9%4&s9
z$D?)I?a4J`ZLPoSPp+*&@+3x01%!4IP8hq62445P{|i@fe30^nf1*`g2lf|)#8Jk~
zUG2mvrn~NG5KMlHkH=Z#@w|x%DwNA`+f7hs4@#4aAjpVIV+}@m(sl9JE@9Q)WuF6T
zdGqs*@m*br62JFSDZUR%7SqzLYu8>h1HF)fD%zfC!{4jv%3(nw>=~Wyd0&=vM)N;b
zS|>QHRI!|~7dNK9*0*o44SV-KBJ%RBN;1J2^NOg!8F7>2XD4D~i_54fIv~DYm8~pB
zN*O@Tku!kCUtTF@<Sf-%MMEKvvj|Q;`_DEV<b%>g{mFFwM#UK56xaxf=iVXpgWxF=
zY<BO&;vkbNZx{y$FdBYx@zx8?G9_k!Kz%nCmUI12?*9wa3an6ZK%=t@vGb(?OkaSR
zeShu@o_uxH>cj%TXk<zT_}?|>uhgN7GLeS?8SwF62ZZj$LDllUjf02fUud+G<X7*i
zQ1<`1eNWUcTWg*b5t09q@BjW66RgADu8Px7J!0oIYeP+E*Twh-B^tcKL;sV~6Bo6Q
ztOV8O6bd%fjP+Z>1gZKwS^wFW_CM6hUmP(c1R>?w#i0<%moL$ZrR@dfMBRu3kzzR~
zGe{xEl1>QGdUuuXQS-7&Y~AAlsl0Vn$roN`sKc_dWS6B&OW#8udNE;G=7loRdmA}_
zp#68(^4AzdhYJnd*#=4X6h5Zpftu5<LXcaPjDnX@u%o;lD`j2f>dB*yo&AMKnTZNU
z_RcjAE}Vd4y-+dh$t~#knpKWqkjVvyd*Fm~?LbqF!*q%w9<*;G`%7>Y2(`@5&rhaj
z8E<iB=2h%)6U^a}7%F-Yd6jBZ#_@}D=Q_a^92DmyuY3edQoXHu%Q(e$eNAmjUzXWc
zw~(7$AW0_5&)uN~ko2d^M>(NSh9N@lF>&NzSm&_eF>_eun^^oH`YrDio6TD+Cs|LT
zASY@|Cl1&%Gv~A&auVH^d67!+<k%kQ+#NXMSuC_v6ixEMh!9=wq^?3;Opid%mF9+C
z_TyqkJSD4UOZu*C81KY5Xt%(RH{zK9l31NJnJgo|vej$GT$);hON2+*GgkuZ!K-cc
zEiCeJmd7JBu1<R8QkN0MIovLVCL86gOj1WKV)+;Fwg;&1ITT;M1lgVyTjnNzqXn^y
za#0NX(4%dTgAY~Nmeu@-AHG2?3mGhzX_<#dfcrjljS}?NOyV@?8*vKPw^SmY><#K4
zqER=ewh$~Sd{vXSXO3GF=jiW;^kru96HcMeMFo%tYlyUYch-L`KB-AbN>0f+RDf!M
zH)X&xVEvv1vrNC(kAu%z#r#TnEDn&M76%y3lZB;N0`Qht(PYQV;Zk#8w+6x|8s!g_
zM|%rn@<UF?xP(yzbE*uN`#J0vrD9lva9wk1)d43F5vKZq6sk^i<b@WWh<f{7a!sIr
z>fRJ!BlM=Rv2oNBCn1V6+p|}}kf@Gx<IklXVMly})SDrE2B)l6+n5HG%9s82XKk0a
zN3U1f;gOM!%Q9=>qI(rpL_!V(zoR2F3yE-?Dq|oKwTn_#&Rn9J7k(WGr$j&8uX}gs
zhz9_VEs@v(8qB}E^Xd{FUO#)k#SLtim9Mc{E-B4xd(Ou0(n&-SwSn-Kj{9jH@P{*D
zt=IM5*z5DXaj)1-%H-Q4;T~F&5Bb5pvHJ<IOHY7~u>G&ZW(Ae5v$CyT-6U_*NViOT
zu0;z8URdM_V^NYl_ZMMk<3c(yH8rf5PHC@|C`@`rD4U?SYxt&FZ-L8gx5L@-ngR5_
zYewJClDc`#XjmtGdaHtGe0kP+Pfbd4KCvAr)2MM<tTx1arS1N#_g(8f06+1w=F>q>
zRQmO#J*Z{A+kiwyOAtJJ*e-9sQwHs+Oi0pczsLz=Xx~9=d^@gLb9u-PiWJy87(2K0
zI%_gMG&%jAUe<IF8>YyA%LXkUE#N8;G_R^xO95^RqtEcz#Qov%F=+L{vGcEl=78bz
z)Zbt5g|!Mt18jLcJ-?b-P>_?e@Kt{1>!0q!rw7#s%Uf376Ot_hM{+p78Zc=d5|4p}
zb^ECzKkwmpZlrdbo4ma}&MS!2^E&8)*#~;l%@DZhKHX^XI%jwc)A--e(bD!u@NQK!
ztW;YJO=YckTt}Yr61hI;`Cj}fGoWr^77a;~d{Wc8rLDc(>+FQv&~VrLeOV{1XADHu
zeQNZ&WuH&Hr(18-1MC*JJN$ny0L9eN{bLIB{4ey$R4bQVik;roU`7I*OjhRq=o1Io
zu!Cp=4Po?da#f<t&T3v9VzAKYvW8m>6QaUXrhn{gjN(FSQhH4kiPvLf*1nVnRv+CK
zn70@dKv=Hfe4*WLY)Kp*J24@ljoEze0S+BR#exU}*amOVRt!po)Pq~sDDEemE8_yW
z6dsRWSi2R{t-LuKd8sm75ReBE9~h<)DB(dXg3qJV>RO)ci|iebw-s0LAE6O&gf6@u
zf;TCE2FC6R{HL|LO#2{k%tWa|uJoR1YngF#*PDbx__o(*JgQ@y{fCW)1lQPV^cxJF
zpOogM%l~>8nNx5FnnIgo65Y7Ywqt`Q%nHa}LLGzRXgd2|RLSVFx2TTy)3_upx8b5f
zG+2$gsUew;lj;%BLXut@%^Qk?K_-F_X8inlcQQM>{cX6UB9+DQXukbUHFj0-?NSi~
z1M6h1&HcsyQfN4=uvhmFOWT#cfyn7~8A?~aQtc}Hn?{VQqbl2Wb~quspkR1dhKhS_
zzo*(*Y~|iNkq5(VX<hEqUscWx6~Yd1Y<ld?*!+`674($}x{oK6*LnvHzJrT8?wmXh
z-=yuhXdr@*G&)OA0J>X{FS^72hWJ+=@^3^@+`J;y_;MsT1~{NaMZ}~_q5`6~Q&^c@
z8o7`m^TJBCS~zeJB8gZFimGgv=gI~_d%|W_)Sq9xQaRb#5%Ji9+uauWSz7Zn=Nc%I
z2NR`TT~+>~7lfjONeGbC&x(c)b&GlK@$l{#8Mlol0ly|f{wjJKB0uYpBIUKE4QGic
zTv)0@)V_@1EmUb4=0TbcSw&fV6Qw3(k#|EFO)CTZ+HP`n9WP)Wv)D@}4C{BfjMsKe
z!eD&@p-%rK$pr|OuDyVkFwwi1-oPYfTr8G!B5Mm==|tq^EnPTgY^risqPf1kFTYEz
zi_q?Sp2&_iK)v^`3|NX_cSi*)E8f$-aCd*SdnD3={y$UxK(>M6?7OXD8sa|SlmHI<
zz^P|#Hy1;?NbtpMAC80<AD1>t+sV_GK6m^)TOXLx*HB!IhQE^t6%~{!iwY_7uoaC;
zzU?ErGKKOf(WLTFL$bd@)NM}1@jo^<8)RE;dHJmN6f`m|YUS=68PJR!NW%&_>kV3t
z|L*A}jDq{xmL)1$B+r@Gj)N;Kp*tSv8rIL|z)jK4pb+kZYO&9+z2_Q8h1Dg~&deMo
zG@4<}{qWIuggzNCq<1m!^-CWZD|R<O5l_Z1P?B}ff#MllN|6eUz`T=>sxa1|7@Hcf
zqoT_$O@A&$TIzThNLq<K!F>4T_$%@+v1Bl~6P%AXH($*Q1vampxT~Ifv@AHXNz|q!
zx{chBU?qKLkF;N8Ov$cgE4qG4#-O;eEBQNXT)cR$Sm#tdC!*?KX#JNm>;<BY1ZC#%
z;T!u%aYBL&1b=n=P^dAM#2iCSsx)s+0d7}5=b0tsHdNOaC#aa^j@kkTtN1^jWFbb$
zUl|VO-W#n++q0epjGS;%cOdX3@Or4|y~mp6dNV26Bzobert`cs-~O`8=zS=w^EBV_
z7SL5v(f)Mq{hmhmxxZo62_Hhd`?O)r?Kt+6tVy3ar1P5Ves=(TQS1ap18(yM(m*_O
zA{ic3=oGIi&i~`-8w2a=x-io?jcwa(Y};&X+l?CAZfx7O)!23$+nLk%o0<H~pL_1v
z`>wV2qpf&=G;t9a8zTyoWdwV0<q=wzDeAUhI>iI+k3SkcM!_aN`w|^m*LuFs|4x&X
zWX|JjLs}`Eof9ab;@#~@G<Vd?+*Vwgh*Jqv{l>9;4^R8Cu%>>0%1Q`+oDjDkp))cU
z!y?ojMA^J$oaO=KXNtN_l-@tf3E)s|bQV(F^R*D5qz098Iy{=nc)YLidk5-3>uw0H
z@B3f<fm!$SwI=W98wKw@)SUM-^UsgR9)ZudTbrQ)Mzt~UIP=LgVwT514L#4puE(u{
z(W$fhWqth~Up^Lh%;t4WCq@ne&n&?Ul9Mtq3`#5qm4hrM@V56by?+DwZysa=%Y*{!
zd4+>k_upbS!j>3Cp@hCqGkzbeA1f^Ww?Ms${d_wXpwk(x)ID>epd}!cAd2(PW+XOz
z@DL0nVBIPqsWz-}wK2EBVwVg0OG+n+2aOkrL7#w*6}q^%NSDodAXr*no<L&On(P}d
zS3=i(QfCMf!}za}<dzT-{WYQdXw*Vl3lut5HhqYp6d^Q<@5`O)+s&h$TEE-ogE!GK
zw*m0N!M5XUuURon;?HHjcgz-eJ9@xZ_<ABC5CO^lIgD#xD`w{CSSK4qhts@|hP@GY
zh--2|a#l4K@?z8V*>&lI_#oi8Hz)w?BjEIhVQ%rB#%%2Sy1qSk6{-J5vi_sKXr@%D
z0NM!f7lH--0gSC)!0A!fp$}qXak2wyE;9RH-FPH2U>t4swm>Gr>bs0UnkBMvT+%YH
ztGq5C90)};$0wz^&bsstMYn%@y7qe-ApCe55m2638{JXh+yxiLtxWHE-MqB;Xz6)B
zPY19BpZ(X#Sf4ZFe@_LIl<Bb-UYY*yg)<v;nPT%ECaI*+d1cj=j#pate+{3UYj--7
zRyW2ox+)-ihu+guR=&B-`Sf0?HRL?_tCC{fe#E0J9;q$vG>mQT{a1TiI6PF(qX8A}
zz7qP54BW()&2L(n_XPD!XVAx9M@SuSnuLjy6jjE+H8EdlO^kHCDhj3VM9lNI`BoM_
ziz%qs{&2K$9Jm=n*PZec_kt&2reo~90`2oqHjUwX&}82`=q5)+9z2r@ha6U53)_EK
zw+GnV85zbdRaMoyi;hdXtxkXdtnodFmuM}B3knqZ;r()2LMiu4^vZX=+4lEK$7MGz
z`wV>S30e!)eClT8_`eOgk8Hrat1haTZfXK7@F*SKrr{EuoJc4_7K`b4hJE*#huL(d
zlmX~ojBF>^F0d&AsRkz8&sLZ{t_;R(3}Fs&Wvs@${2jKv02lkVpMc2=qu(>EzC4SN
z<||Mhy!xrUbz$!Ho2(XtU{EK$O)U>6l{7U+^QF<UhY~5F=(KcW1wNiAbG#F%Uaf1o
zhCwGpKxxmDHT0xjNc_Dm__*SjJe2LOW}*`=*`uBRDT;QO#C}2uQSs;xZUWxt$p8{;
zr1KmEf;Hof-7p?YFJC{9OFE9<LJt9jxEAej2t{ygcy>qDBH^<a_~YHwhOy~EDO?k(
zvpfFH%E5w}SjAMG^Jz`y(tN!kr?~lWJd{iF;Q0R9&|1l=J{Qh8q~;-vK=6QRA~rQB
zb=X)&<+R?@ER{Z9q6Zjk32`2&?@@}3I05e?ZZ;It&ILql3D;vb;No|>-1YY_^gQr=
ze?cA$xV!9%DVF*7@VS^oL^5oVAh7+vzFB)5^?bbim59L`Ywu%mDg}u<3=59&0<Uuj
z;qZBJX=RypN%;mj_85vM@YIKhMOlGOyQ?IDKV(rNpA``Wf;nPvy*D(1?~dnxn<&p6
zUPHL;`+5!lP*=8;kZ%~A{@&dwyg-rwOwN4jMoA%81)IAdfmv8N@9SAZ;WrdRuFKBb
z+#~R_v4-t#AD+hSJ_A7}0!m(Eo6YuQL4I$1TqCLk;lK(Jh=PZIu}@GCU$iJ4A*?C2
zV@n)I7n_##U=0(C3i!GjovBZ-fFt!SY+228+V$uF;w#t(09l>f%?tFW1zC{P#)!0P
zwb}KYv)^zta9(cwY5##m2H9AYLZ}?P#wtR5G6^m(g__OceKU?Q1E$CL_iV06COoV*
zdk$$v(7?fR<_*yu_eM=~!@l!c`~se1+xs?Nf&c~$JjGz$%&PKrBd4(S$GufIJ_a_g
ze`@dZs(H>7NAt#aDilS^5Yc$FXTZxCxH88)f_M9V>6i10v63JIwv(#w%T?!Q7qnsD
zs^oKDp+A&2*obr>CD{JE0choSDBuTr{h&@aW0Z;CMsDP({M#DJ@ov7QXOQq>&A|~L
zRlVzf+@y+j<jqz_Z`h5B8Mcwa^|honn9pFO(4C$|<&f-CG6`u%(77nustaGVP9nqK
zWkm^Lu}cM_9TEizLF=2S%lPtVhUB~~ln}jR>U%TCSJG=Y?_5=PT<kFn_Zfq1;CuBm
zxJ=Q=p@r1K3i<StD0-H=SfcX+1qSZ|x>rLBYgGmOXqZ(1#tR)C9m+=;pXh>aTamkm
z(rdOK@Z|=l>N*}O_`Ve|7mS>(b$JcbGU_|@0UDQW)L4O~8vP+`^K9&|-|F7zb?a{Q
zfsTEsrlGd1ih2m>4A$#CS$Um~ryob~9S7GItvU4_b^*%!KuNt<!S^PSR-;O%(E*t{
zoGxbj^TOTk<5XcJ3j6i92x7L|+9`k=llUi!_~vk)VD=uy$uJ<A5B9Vf#uZ4FhAd28
z`aX7ecTHr8=U+lQScCF<uf9avdk5D1d}e=0(YEW$2<mH1j9-G$@mAt-*bx-w_ZEOn
zJ`NEYr<egrq*S07pO(=*7`s}10otSj69FPGy@Nh6+fV_h6pQx}wDkKCM^9e^Z(18<
z<v(ff$u)FsLhVoIv~)L1YP;>_zTz4<P*@6`^j8S%13E>(9qsb@@vik-lc3H02K`HB
zTJT-Z=W7qSZxF4W2_CepKM(C}H1Lnl*Ih(EN!puP1)g&@7V|J4gWmP(%AmhXRiuow
zQU2sfcNzL`dzf@X2Mjj>NY)guP*=$mQ>R&daZDmX5I&xsT-clk$8kq7epLMXZ$O`#
zP6VmU3eNhT&D>f?<IVwHkqeCn7(mNw3$H>aQ+*$vf@fEMRZnaYZn&uMbTQE_rRMhs
zxTnxf&rI~})yr_$tu>lW{h=iEBk3XfTs6<GuBg(j^L_?UUIL$|yn<MMv(-8Bzf0Bh
zbTmN#8on19B>vB<Z*!`=M_6fx^s*l#u$x|zW2TNMn{#pds^@jDR{p)8e%;-srmBpZ
zmXVO#Wd&$1twzsZ&j6CB|2v%m>p7moBL~<_XQxiLVQuKwX@h<fphpP@NQqiJEhXcE
zfH+|i_Xd7>M2F@!H{u0%{RyFmu$U4H4Jn$|y6W)B`F=NV_^`3nD&QDO#Ppe5;|(Db
zV9qOa{SM=ub;55Ke~5Cc+DqEUb)4DYd@P@@4je&g6OO-lW&Xp61sR0|G02x_)v*xF
zrV{4D+Zv+Sf`9q=cL~%j`y#T@jm|Xim`dUWH4Vq$%WNSKL-wP3Q;u;<*#wY`U7Tov
zJ*WH}LW&LwYRym_ataNRK#n+QiTe^e$q`rSVKJH?e@PGH4G4Lh>_em_voSUEHq$m;
z=H<ZEu|N!c6V9~iW&}RHGg%>PNmdlRgTi<!X!j}mLKr2r<ine8B?VPK$}6f9#4@z7
zKL7Lj8AgE6qL3cj=k&O1(af$?sPh~TfeETmiN^UKj-r$F;ZmclCNF+FzZ-%MV}`@#
z+-d3g%yDqORj})R9>%r9;<h=F0p9KE-<s`aQ`!Tsxx%rabpW?6znvEFn?73wNYI<*
z?w4f!x0}=;4<NAv2AR^YIInKk7*p@AWBcuB#_xRsvFG#M!P#Sf82%qT(PFzE;r$NJ
zF`30<{<>uA`TQ)pYIvo<`|$)gxfwg&oK8r;pqR}~e{uI~I8t=h+D<SaisMzS?&|t=
zdml`uZe+<&I1w^21}_5lw6QWJm+W$273TEu_Ixk{fb;2{MnlWp8|haDxkscc;fOhR
zMgLR(gMUFGrF~pDIN+u}Iv3Eqwpi)uoUD|bThdFNEVtM|nPxJyQL#?>)&RL?*7yx_
zlx*sjg#pSDX}^yxDMs@<cCr=$Hp&kbQHm$wYErEyUa+e_0{)&I5?){T6#tv4t&!tg
zLrn9WW(a)C5X3|2X21-D=_}xQJ6Vw*O(!(y^xhCY2lkh{ucHrXQ!o!OWq<K<p;>)A
z^0^Q6gu>x}S5}smB*h8;xNY`B(S5pj>=t<ccm+TaUZVraZap&JPLr{{a8$~v?E7Jf
z89w*FDOIA3!?8KFrhhTYo9(wT;Eq())NkDUa`?r_(CoIG@1IcR3(L#OW}DmymoPa|
zEahTaC!#c8+C+MnxeAEi0(<-Jrql*Q*5O*%><Ct%ttH|@dF>EY4S!;jWk-r3lP~M>
z!*iBk<XA{Hk<kru5G?CB!!s(4nFo)MSzRwBGGTfEEr1G?kROzeQ#8T*11&FNGBBK6
zY@^QH(&*giJ`p|kUQV4xoeLa;PwV<530)zDKWU|*JI`@xUNq(_q$bIH1Q_-)T}EZ-
z0bYOeX)uFH(8G9?vbwJK+}D;TiEz5Eoy0g^M|ZtHhZ73IXM5OStOSk~|65LzEW<u7
z3uJeu<ooI$Gugqgm~q7(ORL8KlGfQ_x0%T$@9;i^nSBgJ-TiTIANNNBM_kIX?AG@^
z3Y)OwN?3h3=ku%tfL<aC#G|*Gtj)Ewxb)?OF^I1V+Zc5_(_GIB6BUM|Ok>nVQ^%l1
zb6Xwy0umLtf)@lm$Rf=Y+8d|x6t%YJl8_$}J%2r9g=@!bMDrgoTe$xlW*d-y)~a8W
zO^;2HdMtdT*K^M@aqVsSB4*Vdn1P3v<RNqK22pIVP1(X~j2>a<IwLeC|LgUt;6dSa
z7A7&R?nG+has8yT+xgz=TXb$w#8xtpGI~tCEN^=<jE@y3?h8rOJhT;Lgqz2Ym<OEp
z&l``uVE3-~sd{eM*z591q$q&Dx;KY}dX2n@yzuE;h<2DIQfS;&tpJi>SYz`M<eS_s
zM%2{JvT?Om3&{l$V+&QaeXNis<v)kqCX~O=;O2Aq`~zWVP%A61_(a>^zr-@MExb?M
zU#Lyb&wDPc%AoJq!TFK)VpLXGt&wPve<lb)x45a3-@JMAZ~2%Mk;+cT>?;bYQ=Mr)
zFU=hr7bF<S%LBC3aIG_Y@F0w#t`+ek6?sam!W-#)N`s38eF`4mC5qXo<E3ZfA~50p
z!vlzfHmsd)oW_=H1kg61EuM%aHr54r|M@q8**ll0_dDeohx1^UF=GQP<}s{jDOW)u
zA_7%YC)i-K4i=KA1WaD4rJ@Y-uPq%Fkt(z@6cTwE6VG!LR!fq2*XLi#baKg9ce&0`
z7kYdaOWf%HT67ciAkW|$L~$3)Q5OblR_nht0R<--^D>9w*r24C=}4sBXR^$Yl~HPM
zyuYIq>p%YOh@epgC;5vKaeAS+;t$Nr;C_TqZ*VM-4k|5}kU?gx%r1I*L-#A`$93Gz
z*&lfuWtw@l@Vbid3X68}oa*rvqQXY0vPSLjGnN92{}ji#+_n#Vkr4(FW5X6YP1Lrc
z=@(H@>rzh4rXtMF*ygpeTEX>v1Uj}nYlCoVZ;G;%t=ueTV{)>|^jHlpzENA6IDHR^
zLT;-7h0!$XHmhmomYpY6A1aCn1&%E1tdTs6OF8!IfF?Cj)}3trNzlJfN@6(qbQyZC
zA1#{vhc>lX0rNYVwXB*nagm>+-5JmBd?UKXUf;#UVlXo+JBj2#(lC{ny^W~xbTe%M
zTA$kC4N+4wOV*iFMm5#ckS#Z^w*C6L?mGLJli37ZQ!$Ts`{WtTys>mqSyR@^R)VRv
zF^Bt@oBODn5}nw-)nU1`U9ye+TOk{JQ+3G6Arqf6;I5lkQIoYa_G0DNg-?teR;xG2
zT*+4X6+Xw`!CkM7z4{~}NF7>XIBqmTazU+&b@*WpQLsj7Qo3e7C-aGJ0>>|o#HrKN
zJhzivA6_QL1S!tcbjmjNW1dV)(lS$-+BUI5bbqcRqIlcohjCmr=3SPxbqh;9baC27
zneJk-V|(4Id|@P<d8*@4{`Ec!>x&6-gXz(liM<8)+Mua@#F%i#W;%tDWduo@(d&Eb
zua%*s`l?1R<Ssx1-CSgSfEHbZoN%7_jXFAd4ti{}Xg-ZWcAaeZXDGOFjuz2Hpin}^
zJC0?xP29%#$_ihx>KY`&YO{UpnN@bZ#cN+LS~O7=g7oa+AVF*yOF-E-9AsJM!(PQT
z$YvWnGYsX2gghyU^C7h(f78;Y4(Ie$HM3so<YJ6IPUe6rwt8Lb|6Xr#IC2z+1}!xX
z>$;S*%({ZK@&5SYMiGY?Y3td!k#vTMY5lMpNqwCZh7M$Pew_qky$^=5GyAZ(gWBp3
z33)=hlHESC3o|^LM#3*B&&(;5^snPh+kxNzQ>^~ZLN@R*cHG~oSeB1f>25xZ%8}=p
z4FL)t06l7h=LXvF4AC4T4cz_BM0pf(hB%ZL-<FG(i&uY87hoIst@ob_;>iK&r+rH!
zXAfteA%-Azv*&QO{>AN&AJa9LO<bnm{t+cxAwNZy8ybw1d|OGzhv`p?x25*vCj%el
zv}8SD(6RjoPA#{2%I+v%T<{;Ax?phX=*{Grh#cJm(-uI>dPlLjw5YMx)P}2+)@;R&
z&R80vbsx|U9aalfiyK#u4L;GLAp7hBqK2d7CT#*uqRW~f9F5q}Y**b#eoW5|R->%)
zN2XUXYk>DH24B;ujaB_Nxmf083pgj!!m!Wh*pF{kCNDq-1NL*_5<6>G7~#CSjSZzL
zwg6z;9d8t4nnJe0)yD90p5D<ZpL=E_K+;LEFaa?lC5Y<6jzT`8v9x9rk7GFd-l1Z=
zBu{L*Y?fL5U1RowL<HSzA)@ZuW^GMvZ_v$j0$9qzswcE`9n6{*E;KhcGMS4BHXxZc
zCnt3#24c7hS$QpTu35;<b&UYtH!A&{-npchbYA_<fnAM3j{A5x(AI#~kxDF;<q$eL
z`tAZJO4sF^eM6o#T=mgu#4tT5I}1p>9JB7a%a4w>>)1N_jAo;=Umnsj^Me?3TEz>I
zbD7u1kJcP@rl-?OSlE4sgY4{P`HeHD<q7x2upQ$mj(=%zqEEOA>ddWT2eH-zunJvd
zlF!Fo3~6<z=HZD%w66`O&B*q~zd;&@7<d;qFjvntC4`7>WN3evb8oI2%_6&SaB=f6
zAvU{}cnFw$@L18LU}Ws6uEyvYeG5Zm|I(9FexRpjjI^T;E{Y?;^0V}xl>qR3H)v>5
zQb=k`IbVuu+x}<m?%fRlnIXpW0;4H|+{9L=uk-<Uz}w><2#HJm*_z7E%I<C;3%M(c
z(3pl6n40BR=Y0&s1ccvtxeNbjxOyRnjo^EGG>%`n6d3?5=s#M(V5!BYLg(dR>Mk*<
z`IWb@W&VG*C<F!YN;L*B`^%?^GF~Vox#JS$<Ebod6>aAi>XHqPcYh^dtl%@+pk?ft
zL@bu)`BOTUNYVBFz*C`7!++m6FD)(o<hoc5{vAQ#ZJqDWV5EBP+6AOlDe%=IdUt~a
z=U!4yvy(iHq^emmtgC<@78PhHF=%D{sg@y>im9Z=_%sFvLF9<EjLfIYg#J>M?(NM4
zqpr*K5Wt$S>ihZZ_6Gx4)=i=Uzm}>d^ia=R1nrY=;s~^^1LD9;48niDJ^#QM5ck3u
z$H%*t+CYAG*Z+NZo;cBd!g8N#`k)t+Nk3Cb!d^mod3iAG(dYh>c1`=spAq1w3dFp9
zJ{{X;YSidC1Hx=mbFUCM{I90RoC{bk>mRIonRYx@_-X$=c9v*vG<}51k40@sY0dw5
zB0d;@H^^2V@eS?o-(N5upXUibul(FM`SusFjfbP?886+}ZCj>1o|DH^imSi3-85_4
z>(&{GSz3l~Uz)F{pFVENcw|?ZvCZ>Mng11OCv3~klAVRN3@Nb!nm7REGk`j7opQAj
zEN1-o0DK_+Zp!sB$nNI2>58|h-FJt8FjPK^<vw4A;rR%_WVebR#ba=u4{N*+&z$+&
zotLLk6?jiyaP2B<YH&Fnb~JiE;Hh|ESbyzjACcY@i*4w}I-(uk?#`897nc85%s4fn
zy(J^J`f#dWl>Ut;x!S~WfI56W?~Bl&vy;=;Tc_}JRkdX#txJ_S!l`i}&XAgc;o%w;
zcNU9hG70T*HytEJK`;7ZHyL5~|DSlKcXs{||D{g<!TsKMuG{s0hob-SYhx4ViodfU
z%E|GnsTk)$6d6C?PVRsxqn{vb9l-fxiz?WF6nAY{dK6~``0GnmdFE1&4b?ST>CUPR
z7eFHNG#ja=c$*V4H6{0DCgLz#wv!N7T*|(7e(3Wxoh09xvsr7j1Y84@nGXE`UWzr@
z>3OSO_1*QfDD_6R$znD?*870e)6>%^-Ldrh|G2+pWFocV0eSAN`~h7Hu>Y+DJ?OcK
z5y0QaQ}+$6cH=L}JJw`AS*o}4{CK`rjZbbO>__~vem=04@#`1BS&QXHvMOi+N@?9r
z4@X<ub09NpwdQs=l(4$&bVY+9)Iof$>Aw~IuhRfE0Obp+&J1q{g2V=E$NbtwAV{no
z9Hic~JMFTrJ3g)picx5N!|6w(<$Sj9%V{J-`w764?BnkpFpInxzMZT;zonk_Ej7-=
z5NcsJY%Yx|4;2_d;u>cPSsWVxijsl9ji~$Tou*gD?&jZ%&{#O@&RGFb)Cd2xo$17I
zAoAJw_;ozlkmh0S4Ed-c=;0FNH7=~woTQ<oz&ak5dgO%n9dL3;H#JDF^~sb(C{lUu
z18GR(kE8^?#`z4m5Cb_TtVXESW;i%}xI97-oppTgQjDG6fH4;9xHFwc&OAfRdH=IM
z7dx!Eh*!`Yq?l?>Lp4KQ-ArUK113=WSnNrm&LtF@^RFy$A+dItHBH`E?PCTA<4~6d
z@6`B7*5~cr(i^%z?;4GSguYa4MKX3nTT|{$Zy(3t^Q?>{-eDED`@FjGXN@@@*{5YN
zJO0q4J8~N2==*<K011afM4r`3Irz<MN>OQbJ0KFb-(@J4S8@j`)b=66hUgIyiD;Hq
zKp+REIMc&vzyv;#L{0Wdx&&$fbR-HS2-bgK8eV+IlxZ>ySNk~gcSPTn-d6$-pCV^@
z!SKE-DP!fgui7jY=gSV39-Ss+L>tL{4pm%FcWxIr>0g!?7q2B2EIlBwKVGmPM?sJU
zv5(I&Erv>h1&XSBBT<PCamJc1#tp#rAm`IxeagR4vZ7IAltsa(QT&`Z4jpqtxQ*iD
zOnw?+#s5<F2H(6&7WhR5b&ETzl`3%e*Nx#mD(!MRDk`SHWSBOHM93HOQWVM!{-;cr
zLsVK{&Al|G5~)1SUAJL<BwrS|4n8%y<j(13f{7${7Od)TP2OgOX>;{*<hEIlFf!6>
zjgvOLP$50Y7gf60a4Syfg2m4Avb6jjPWIn^O$I7xS@U~jIg?azvSQ^i=w1&%#UAPW
zO%idXUSEwzamTddD;dopN%U`({l#_)utNao<h=9O`zxUFz@XD~xL?#zky-K@4~{y_
z79g-2!$Y!*sov?&VSC?ep!E&%bsYjzL6Rj3)=fvSJxp0T#SOokW)du(ZxLsOuv_f4
zj>tmAf}G#Ycdu@1-1~!<gzXQ<nh?2odVMu}z9%8yp3>*?18XksFb$Cj+Sz3YeYyQF
zAr@;wHJtd)`59F40P!ON-`^|ZgSqt_LWjTOChMIhF3ZJoUT_EzIe~`<2G5o=gRJX#
zN%1BZ`R`3orc6*nFvb_^zU?en9aZ!#pY4T>XZaNj>>MK8n!Zs3)7xTLU)@RfC4=RO
z9UM|#lXNE__Pka1nAidBIp^bsGquz6XbLj%AynimAr$1ssR|BO&MEl!a8$d@+V<+F
zyejW4?&F|lMfi|DkE@>>$qI}FS77KTnW)%NMDtvTpqy9Zl0m61)5&n+Z#&Jj^6mVj
z*ildZ9<Fvwll|UTap~WW`MW@G`f%U|PR0$=0=$3lM2E|Uva;@N4E0F(LkL8b1YS}2
z{yYWiaQ)e!=q5gji6)yED)_8&zQYM`K-lci8g)A`Tr}}cU8@^%1?K*HqDJZHlqZs2
z#!g+`Jd6jHqy-7XCU$wEel)p|wJnRN)~?^`X_dU-t(WoMaH9{(?N!=<B=x5Zn8IPX
zgE&3Mcj|~JEotaknPg<;U#9BP+NbTbz9(Xkq}43$zpB+CiF^+-r|ac>ma|p@EgL#q
zAe$4jnMuuP5>bdZ2iF&HDRrNF@$UN4l$y9cOu#HBxZ27Ka2)6E`+nPxjLfGK8dx0*
zQ%~UNzc<8UFm9`m-4-h3e9mlTfUGI0K7X#dql^yIXo0}UtbmezAx0uPi~LFVH2{t@
zpS57xPZjdGWGCPwvnK)$G#|8{F(7P|BA}je0KrfJWEDkN7}Ugv@!6-md-HhdZ}(%j
z-i3^vo*wFpnnu=bm9xBB7PqeMru*m?z{vpw)5PXslN!d4xP~~>LTX0y5Am`vvrc%W
za<VWOmG~Ob@<JwZE4@HX8Fnq>b?C-~n<SH&^{aabajYdqFHDagVYCOU*E{}pp?CR3
z6Dvky0i4<9#XswvBL{c-L{_k*%@p|Iwd_*G^qM+OP%(0qIO$|H${0|S;CtXY48SCe
zp|!=25;)-(O4BeX{0hh{(d3z3QFP$ZhT)P+N%l>_$j3B|k16NNl?eD6HYznmw%yik
zJI5McFFG3DQ)PW8Utj*#2s|Gornf~=C>);8?-{RCj>{?$R7L$7*4Be#V}LR0H(}S4
z6DFgkmX$kEQ~jO!C&{LMm`05N-t{Yoz5m+Z2E{+1k6T^0RjsI3_ZL7?WvA!kwmV}E
zZF=p#{NJh;0&OgD1YGXd_qMY=JV5LQyf=4%&OGb970slm>(Ki_Tj^<TZd2G%V@#`k
zg%RzFAhWQ0PE&66CB3>Zu{<J^qd_Tpg(|c2hJ(u|RSRcRkdyBNJqO|MsEF~kpvQ5R
z`<BB1y#9~VqTPYeZ2(n<!goQUlht#@lEFw$-<(%VeWZauZ3NbYn8*?peN-sn2)X#@
zn`O$8YKh6Vb)|A{a#9JLm;c(jsnTfLzOe#TFYcZ-BEelMKyB^SPdt|`=)b)kcV3PT
zr%8M~GH>A#a$5Y}XmkGbzRj`gI#l<ScYV1#emW)GDmqt;O~06`P?PUog_XGpVL=S=
ztQXQ|Yb!SW@g}WURp@cUNG>#9YN;lZz@oTkize?W_3LZi1YNXU42iaB{b(+7pB1vw
zYr_mbz~+BEWI9jpjvP(%J#GLdNc4~IGAZS_GR7huOg8EA+T9O|X9*VMt0Gd892oRp
zwp>?{VA-0Z#|x?s@{*KxHfS#zr!u)NqjC6NB1<ysXBNr;3VHi>zNF{&VLg#TA-jGg
z+dTVPH(+9SAVlAN0Df85c?xjGJZyjdWHugQNbAYfm|lDjaS50P@5hYs5JmA-3Bc1E
zplJ(k*_RcKomqk9kq_Y>g-5O-CUOm`R9Uzx&uFXrvyxX~Ay+H-fR50W&JDyPvk%wS
z{EI#QCsm*@GP3%vk#5l!f_M(@`#zzj?Iqj{`8CiFjNX6Sb=3iut#)jDLR~M7W!}ht
zjkW#&cH_Alrx*{&zzjs>^%!>Vb{@?OMXA4y{`vWQ=t-I5G6y@;!{qu$k4HAm;n_5`
zTC+Q#)@i3#$a}e}si?^-Ci(p)dJzWM<D=s7XO71n%n`9385W1#2B5NtDzBIgT7bbV
zMlB1PI1ycQDVr;!%Y_=$Qr#P(Cy=?BU8hzlzA8sg4aIYUjxwd#p}TjRWov_A2@#d6
z7EAS@T?L)uqCbKyUB!%D+{*Zt5qEuJ9P_+f<Le5@Eizcm5pY*i>9jU#^tS;ESGR!q
zv^A@F{iDz8xx2@eKa`&5^Pv#f%Qbp;vdzV`D!vlWge0rkB;XBeu<N>42Yu9PFw+Hg
z^*{Df1#LodYPIE;cQGAx_KHkE(rJ-;6Zv@VH(dK$szu%eHf>z=)RMd!CyGIX3b<JE
z)q&@6+8W;5N!GL7PC#pd!Y1dd)jg3c#H1&a#H=yaRz}Q{_C_AeoJk?Yw!|5&TwbUe
zZCjAgZ;;3W4dDU2cumKV+#g@L+!E#Z+n$g1Th?y&hh&P+I{;U<{`(R~w_|^}ep>B*
z&}Eh*#ovqhhfT!2WqrTsC*OUg0t^N%nql$#sBd3KCO-i21mNhh1q#6tGLt<dYR$Ia
z=li4ru1&4b@UULNS@RLqx~9T1nH!K;^)1{sLojM%#;u;UcCwG=71zE~XeXw^8&F+n
z9&w)44sfgfWkB4>J30rwtnV$a7j&K$<pOnw8<8H)^dvlEwZ&OyHJkFx!Sh|;tI+>^
z33$E@g(s9hLY(HdUY#?whS!VqVKMi<eC<q+Ks?l7;;f<RsJXbek~YA$Ox1N0N(DYJ
zo=~J~KZYl4Czj`e)2Y3AyfT5pZu(jWh#ExqW{YLYs>z#hNf^E|Lmb$Dskcuy#3g2M
zd_8YDJ|2JmN+yF_lKsO9ZeGbRqbiX|;Td@Wsc1ZMwv^qPKnkZwNd%`<sh{m@$?Z3l
z0y@;agLN8GdAf<O+;yB#+w7-X1yCJZs||fZcmgKp#Fd`41iUUMiql9A2o-12P#B}!
zgv{uDLo9Ru(&~YGJ5ZZ|+mf<)NLY9dPvB)23dfGF8KV;lD@fJOt)f}%)vms=B(~(&
zzjT2<%nA<!TCQP^DS6J_ARx|u+vjl;!ojJIO`Fm(j2HgPnCUPA`EZXbOEh;nH~!j7
za9_s!Xd7m~QeZ0{tt4T<jp^W#Z^<`HewEQH#X@;a7&(mvz1ESSsLu59puy<^`j!n8
z*jpbX{<L1G>0Hb2upDg#Henv{Utn;#z1nxxIFdt!JI;zv6vvO^3q=-n%66XD*-1n5
z-CWuZQ?#FAco1n;nOFf$Q*ycP={OF5qqEe)%9;#9&cE6~OD)U5T3t6to>5t6tE!BJ
zQy0YxVKp<VY(k&;rPuI1p*J4F<52UL3`+)kG25<2D)_^~``k*M@#l4{ACo{d0Ux(b
zFokNNbEJkDFGpeBuZ>P}R~v%!UlIuk6t*M}<7e?|rBQg3oM&_3cZG@adjl-qus5&U
zpWVJcEt3&fD$9o>jaE-_Wi0W#i7{9kjf7K76jawV8^Jx6i|7>RM#)!Es}u>U;Do<y
zMbU|YJ_cE~GiU@rc$D|$^K2*X!op0-deiL2`n{17-sb%YX<d#{%(H|@tS29u2btiU
zToSx>3mVr=)5Wk@27QtWVejd?8)Edm1||%?r=38*y8=Q0WLY1)t8{Oi*n$Hm*Hw{1
zuY6ED*^q@m9d>F*k+btJwyIa7mHk&TT_7$h+|W$CK{w=b4tJaU0WC>J)`f<?&o{2l
z*AA;9{Y2~Kf1k>|pctKyr^Jb0eg+(`SY!%p^$t>18n~r<;)Djriskg6^3NaEtQngz
zKdwRr7E)WeOTY0zH`gBGk|^B%L~9lqT|sgc?p4da@WwHmGgB#FJy5Ed=o;}!c3=9Y
z0%FU(SHaJ7-iT`6oeAuT(L#+fizzml)FsVaC0OI={!^3aIn$J34k{jco)3ITBlj(c
zJ!749n+ABhL<MR#y?Cs;x~xLp@7Un`O`?^i@jc{1()FPz97r@ly1}PM3#Emsz-ylZ
zCKWhg?5!Y@@Cg#y3-Cx@=YvvbM&bAvQJ-CM@O~K9cYKY9!{p}5ifsTi&Dd;obiUYV
zdpkkF<pAdLnRHfjBfcMyW;XI&Jk`tWqT3XhHM;m3?$7ILwNlW(+`PYq``kndEo5g<
zR}|dkj6mRTKLHcdE&k&KL&up$&kMSM8?(i4qF*e0R&4N6M04D&vXoA+x=H@!k@e!<
zrbtoCD5gQwFv<yhNqD7@`N5+VG@HN#l~hjVl}|rjkSs*io8hJi6YY}jg$$~sxo1j9
zj9z>FeU~TwY-4Bg3xj0}2NlT_ZE^(Tt};Rto?^nl9y9okpi~(>fft$k90u}OJ4H^D
z&LHSq3I9DcKU6q1h1@STyNy<}W|%1n5ss=LIR?EBH`ZsVMw!fDV1Cs4W0hK57G$Zh
z#t>lE0MgSjXg(#+doAkAd*A-IT7(yuF|TwyDdQ`Q4NJY~XtMmkMEvwj8kjw6$9UBD
z1xjm3e4eiOzZ^nYb1Ypg2sRJ-wO&cc6oX@WUbl*7NdoRW4DiP@IWss{VezD?bb7Ll
za++fj8|XDE*Cc+mYkiz~Vc@e|`bS2AP-jfS`}q&P?^{1^<=Aa+@7)Qkogl$+F23Gn
z$X%h#n=cf4%5Ebk7%<p`1&_oM&LDm<D#dr-h>!TS$|-k2E)$`V(B)0Z{Dn>lr9p|4
zd<e<w7J43Ng@d(nU;59zr>Qtdxf<XaAbS)>YNT($WPy3A#WU|Sj5J2jTKH;^B`%ZF
zeCx)1&JZ*p?a0iNz;7bk!%6eIQNNKeX--@Cgqd5L+-$3^u!~mi1Sr0Zzqdcnwl!hf
z#c0N-%dMPWr{nMM);>3h8Gau@s17Er?0QKHYtP))h<)$6j?bpRH6jF!OS!skt7=M|
z+3_cttlhET7x(U%`h&iRtw0$bq;FpP6WHdwtY@B;&T4iwfbDhGMoG-GOMUm#y%t%W
z*n9Z76nDvBZASxS1~@<aJ*WEhv3$O7e@-o<JSBNmeIvfH#4#fhBUr)aOK%@N{*5P2
z0gi`n7(kJ;D;)vlC4oiHQ#`g!C5025s2j|kG({?VE2%u9Q=x{;SaOuYF_FmgJ;D;g
zqVv!nilFs&nkO;v(F>TStJ{u#fgy1IjCG`zSfrhDxlPP@3(B$D`*K8{ssnmCD?vE*
zTIumUCA0f^%D(?~FOu;_es(mTRNy*XAqcuZ?<<0*5=xtEq`nHXp3Ff23Z{8X2sD^H
z!xv$rYi=bYB$*(S^WvdHMWakNtvT>L`oOqeI<RD<VmP!aosi8W&_dZzWCS9-LRa>y
zD42aGsv<`m=s6@q798S^dnfP<s^9(j_APe6gghCBOxp8sUqk4!^QA)}{pJ8wp_ASD
zh&UAg;qC4ek^icfef@^vcXK2r{lAcwoxZ>vuZuPrhHi^U`sNk)p7+a+$L!-AzmF@@
zm<_9nDvZe-zY8F>g>j~5XHi3M*tNd!x<p`;4VW$w1>UY)0j0nyy2b{eq;&>nm^cx{
zP45j(;m<)MDK`-p1nFp6J7cCz;B+(6KX;U2U#(SM9x%yZl$XSm)d*MGh`uOP`gNU)
zWnRVp_;-a&Bm-<E1;!|To4KJuh!HucM9UaO#)ij!bPFIf1iqLiS-;^$^SWJlDZYrM
z^pVCn^mUu}NnR+ROcgLAIidq~=ij{taNg)QC_?YJSeb6%NJr$5&gn2jNAGCH4B;LT
z7z|>P8AYxde+Vt4Cz*b*li24!CpdQ&AomkiE*<m>RF#xAdeZlzfWu1V2@XxCAY(D<
zFe0Dg1&;w`oPZ9ZpgtBueoIZ+W^k{3$)cYi5V`5Jm9v_XR8^vyWo-FgAjuY_VdM!O
z11@34mTPO1v|GOuK$W^R&unN&;r_(cG_&hQO;ANIqln9biXlOk25A)rNSRus)I<!5
z725=O)*+^f*GNapz_3Is!Q@#I6$T?qLYs1_D``^qLnEE{d&{WMh?55uD;JsSIdCp4
z9fX3rNl~0C;*)}jb_IijQ$&>`70iV<P#1ZxAP34$R*(wiw4!;Du==EvI)rNNA>gum
z4_DND{0V?X;JwPFB=CFtQ&A1riX6=Wkp!;<9*<ihAga$GtibIUqwwHHp-rj5;xRh|
z4&DSmuD-Ote)8W~T<UcRJdY{Vw|?kvKTkJl=yx42lxf?v9hQ}N1LKO+r}H$I%Hvw(
z;ltz6<n!&6-yY=8%S+{7DPD3DhC%xut;l;#s(LLXQ_4uzS8S|&q=xWKe5}9ERvUoJ
zW5@%zoR5C{KXs{P!``B4%1GFEKT{OR%D{l@1`HUUmb0Ckg%Ba(8gxVv3vu>-4Gj7z
zor*mC`|HnM5-6emImk5HFCDX?mJ>D{#9yK+vBFk>mkpUgYj~D2I)qS{t`QaNDE!b*
zghCOd%)P870+P~i)N4&t-p-_Ip(lt^d;WLG8~bkk;WVBXHr_9P)MbJj84wz>J~=UD
zJ9nHn?@uk1gFw&Nj4N{!pu3NMMYc->9|V-s#yoofq$gz(+hW47kC`>9fCXRjwPug9
zd<k5?srq|5=mK~wxfB{myulSoc#snAp&d?5t^--Ea84&D6?rsS)Zhdx3QcglCG{!|
zV@!~eEKH1Gp{_q`6`ZObb|pyz92c}oWmPaF+7ZNHZzMTLJeFxtADz`-Bcc<ML{Jj?
zuREotRr_UC@LU~^gZ<csabKmRzk;DDUxUZ;XX-|ACq09@mqSI?#!mVE)8+v`qSxyY
z!r5^5v|6xhZkaP6L}@`qfzNfbX&DZmJL+(^?Q%wJX$I&m#Tik2kEzE(ZDYk5begpw
z=Hue$U*4g-@2&ND&b7DOZyDWpKE$I5nx=o};o3INo@q5Wba=^cT2FgjPGxXl2A8Q8
zR~C%@(ModU2kslH9|~ig5Gcv<<xc6m?0)rliX=x(nI%u^Oc=7Syg{JVXQAjLPswDr
z#pwY@xJ>PNGsQ^B288o~^jg>73lz#rct$9{HZdSIdkqOsFs`<c>1VEtXOVQkX!e|>
zW!5ai<(Du7tVsVfrX4iM_?1RiDc2ws<pRh6kYJ{p=AlXJ{?f<s(eX*I5KQdxFvEVy
zD3*Q;9k4K7%Vi~vCKCPRGT4=3q&~LI8`60^8d4H-4Z}5;al?nc`1(v2-~u(2*4qp@
zhq_5N({VI)sTi&!tfg4ZPV)(#XBZ@w^!;A*28;aCXiaPeHgCZRLG48Fnb@yQcB=nI
zQG;Palp6JfZ-@gdYRR8n$o&*-H1oRgSh`FIn?x0N-%gN1&>L}rwHgkU7YgccR11tx
z)O?UsqnphL`W=36e4}PTGe`lP_@&+>1<7sBb_p?|;*H3|V+KEek$s&TZ*kQW>h9Hz
zfq`*bbzR;Ucw9vVhM3VAy!){!j-2}oI{qXt0A%+0o3V|>_hYgz6mQ&#XK=p-dj`s^
z+vnxfTehXB>2S)gQ|fomsu}63x7@mp*VH#)DHBJ2p}K7VELN;h&#OF-f{E1AAz)eD
z`FMq1)Iua+b`q`8E2_k>>Ub%>=DZ_dw+7Mz3cSwhpb)MBeJwFbi2{?s96s#4W1!1f
z-N?--R{iOGNh~(2S;G{2$4P$V1K=(71<S;<uz<*ho}k;U4CMK}$%-DI`%uf)fxRot
zE7<y&yiFH104~_|6C_O+q(GFk5<D!Zk0;K!s12nwcT{lga1WhXZQcPokRh{=nj#83
zPTWERPP89Hm^PIovR&>=Mw+Q2xM86@bM()C7Axxm>Lo*2h#=w+S{pqWFlZyDjRj{o
zUN6vSi`;}GHCL37X5e^bs+Zf_$GM8`m{h5OhUb009H<Oe4Zs$<fKP}nrNJ>VRSunJ
zE{mx^Nb}c7nh63niwOYYQS`ZqPM;-E@{`I54!p_581e6uNI=m~<o)nLzi<qwfWj{j
zV79!{U^@!>2@%A@Dv2jKi7!MhSA0`S5{LqQhCs7Mg9=+vo=Ea6LC6iEAk>R2`OPrD
zd|%xKw1TS(t36VsXjZw1@=AIL{TXjS$@6e-A^fY6;qTF13VKo+KesipRNLUZ%}r-G
zgpmuOfEYo&qK7bn4;3{mIJn&1FbW6~S&^6v`(39aF%-t~o}@ONWagx#sNk?6*x<V6
z2c2m;JSsJzD{SVt^kLlJj|x<Lk=7KyB}4ncIbp=`G^nKD=4b*>&RFr&5kfESqpJf2
zAWgfbe~m4K2P2EZ;RLE8720-+%X<o^waykPP3k{qoORWbMrHcZ$%^i$3ujX4s$roP
zD62&$;pB@OlJiLH$ZxjRJ`?&(c022>P+m{jXR*7i)J9808yy1}nQ@xx%1!r7qmNdm
zfj04gO)tpS_$7z;U>N+8zF&rIi`T(!=o21%hXn@X_r|52J^_JOOuzTPSy1>+qXZq7
z53wy<zJSqJlL)wK@=l}Y!8L#Eeo5Oe6b6+-E}Pfy12k!@R6(p^I@yW8LYsp?;%aXJ
z@K-6|c>_{>R@_-C8tGCQ?OLY>z-y*Ot$#Tiqj1roX>?oxdv->KVD{tn!o7!<ij^fR
z*#H6w0foI5wW-kyhN$x=(-do6av!m1E_cuvKcw)r2~|y;S96$F#4a?dp}{d#F>;io
z(X|Sd`Br1@?@|X7%YFmYwaAH1mM{XnUszp8#aN&^3o%%Km{yvjn9?va`|*cW<HXrx
z=mfk#Cw_m<LKre3r>=U6NW&Mg9HHZ+#A5{q3qi0lx|6nnJt|g+mwann)-ulmgrs_|
zi)sMi#eln^b+$8Wv{-I|DeM+e8zSuH#JM6MQoPh-%bf6rGqtQcFr1~kfFDYC(Qf7p
zB{Fr}2jS^b{d3R+Ci6tOD6`83p|1#@5^dQ0r5-6lb4G)PK%=9_HjFV|K)50f+lys4
zxGxmE-@|i{XmQpHC*0_4Os0U@kObSvIHGrS@NycxPAxv@nnMviKM0FP5?Un>!J7E|
zGrTnbb)HO+#)M!RcAqB*wPB789WT|EMzfz;VpRRl;MHJuxm?*SXLlGgNf=|`chC&a
z;RvQLF)Q$cyO2fgQLo_@1)zK5s$#gVN%&cONmslDGY`w?nYr!kM$p1V-H`5kev89g
zXvO?tp~|>oA|Nl&Bk#<HcyiuB{i2qr6o0zv;Fx8=K8~O_%HVTG;RcrnuNQ2Rw_F;g
zJZMHHp4RQU7DHh%feTN~p*NOse)~PVIyVLX;))$R+5vmeZ}uL7BAm=%^F*O#jZ9%6
zz0e<R7!m>#@S2>}G+6R-zG}$f+PfmBud1|_&1}5|{E8gwHY#Dq)A}I7=~@k6#J?9I
zwHp61hd<5sy6AhNL#VUO;)0B<do=~vZBst#O!*{=#FCbtkNcW*-zN-sYq2*F&W<#X
zuam;BRV`cXpC7LcWHUl+h#taXYpGBULC_1M12sqjLR!blI&6e&(1P?s4ywT~Ae=*j
zgJO+BSA)6{W{)_|4su!j<>4A>(*v2mY|20#4NcaRto^AI9$3Nq(*xN-qeb<iOT~3E
zg{a;*6^Kf~4ALc9`txRxm<)FxsuZJziClEo+8r*x86*i87~u~K*3wIp+r?I~8I!Qp
zxJ-_w5fvmdVbwV>Be61m<jHDN7FsQk@6Bqm@ey+DJ6-@Y`^*m{!Z4H5tf9!paZRuR
zr{d@n*04S&NN8ET%x|x~Lw)2D@LZd4u_ZC)E(yC)dV$pAZUh8Q9zNrOf1HDhs=4>c
zcXQta6b__C{<K?`d@+;>+IbftaI4jIMHq_Qo!py`x9e`K20;!e2@k$j)FU%IR0K9J
zF%Yw2L^gP**3d`{E*ge5!4L)JLbcT??4CON*}qE?k7T%awlqomhm6dzp8NzgwVb?s
zV%OsZdN@i2y+pcr02!JZ5rr7a>FH^8S$UQbg@(kf_aZDUp`VPc)c2IuV%{q+@(N#q
z$~&z(m&+(Tw}DP-jZ()lxVbB7zg$noEAu>=lC=5d4h#KKyjC9clHLBIGrQ|Yz4x>-
zO=_pccmVeoK2`>E$_9b0AMO}Bvgi%wJtL??dSqUY6rrOiKO~`lV$kbIB3YV{9nHAI
zHVQ62B;N<0lNGH%@i-6waJd}E=G}^MY+VNQW?0X2Eu5jdumaT>F(}X5)quXwz1mhy
zK7Cr3$8v;^^qJP)jU%4@|I-5C@;e}3->L@T-;NOac~^m`D&}gDC~3UQI65vVVM#QB
z?2Wi+8Op+e{GG^Q_?D7@gDu}4amEE2PnI%0ZI?7$5p;Mgja5VLREJwvr`;b>PZ^~F
z(=i!?q>R%+-amJCdea{S8gzQb5{9Bz_gCj9AEQjf)|3T6PC2kzU#TPhMFSA(<)&ZL
z8b*y)dTOS{xG<<&v{qcC6K8=eU0$w~Yfy#eh@Qzh-Q*;C6#{+HG9yH*^r~fz_Bj__
z?T)B>!QnbO$cB*jmrD(?#%BbUs-kHh@9mH0V?1Kn9HC4U4oO%Gu^rTmvUVl(;O+#!
zdtSfV{mvAZuR41fOhSh3zha1;n52)2!@DF}Tbn>?aRn!UHsjip&eXMx&E`WIZc_N3
z@UjvAf{ct`)3Ho7N6RL!mT6MlaWNmdDJdVLNeZ)(!q!<{nCxU8LYZ>9yWSqb6j13N
zBe;0oYC#)y93`oI3avhLu~A{}zP#j%HpofrJgE2>TR^x{^O{c%|KI@(>XYRw_?9|n
zTO(a<dwS$o&vYrM-I3yY3N*-~GzWjyOBi*9EhBRM^%NPZFE_QtZn8O5gkVhM_*p%X
zI&P8n0l(`Wz?MzCf*o8PxZj=3))R!Vyi!Gz=N%L2Uq&*yhC?zS%+U=K{y51aBSJtH
zE%t5-n?5KNLm3>lGa)8V=LSy`%pLtL840A6M9`_g9KPO2V$FpZ6dBTo6v)nE`Ab7s
zoRO^!CGk=u`{UL`^m{L&sN0^A%_YJ7&~;)rs&g32dy5NZ11I)LGfvw5mCqu?I?NWy
zoPbnh#bGFnMEjMMz6#v@I>ekg<cXO16iLfuyb{bvjJU&LG>=V`Xo?tPwlw7m&Obtw
z;^ifM*lv)FGpQzMrgYRewOl5Z7=fz^ToNfGCO|q6s|#g!wVX)h6p5_RM&O)Kv_(NZ
zOqd&`_*Ra-`*`#QTt9I3wRo-t$%>DH;z`21k)QdtpbzYxOOjjJDBDeU!ki|L?f5IX
z(e2Mf{?U^Dl!oB7S?4f8jSy^1?f_|uwYt@4j)b?W35hL)q_2JP&3tfeU*S6=F>kYB
z{yN$z7))Xb2cIRalUqWa1UnM;?^{A%LW6^sGmu0cBCeu})w=0-T4?3)!@kR@3S(iR
zhF+b^T9U!Vs;sO_!u1>6@|G{G%q!B=<G8N+%#t+c{qh`>g;t2MLR^KoxY63YnC%K>
z@4OyWuW+iv5266C`->N0Wm$rW`~CItvz5MMu{uaM<fr<<<OJhUt!a+}p~<Y-W9|Yo
zIht&eI7&Um1g^<DQt_N&etz>_JPc@PA5QLsA=(vHyZhyd2nP`TghqPIuEYFm#1;2>
zBhs^zjo?mC<6w+4w6k4Ri44nj5Xk^<&Kz1MTx_)&8<7f(I3Bo@-PEb?{C2Ns^Yu=%
zeLJZ89m>U8_reLs2_Pn|)u{h+swLVUanjB6l~@&gFQOuA_#QRuv~&gj$W@t@fsAEV
zSWyi#i}9nD0hEr~xI9|&wfkg+%cf5%)h#4VB=uBOG9|Yzzx)|e%(AKxJs2F)Iz6RS
zMKyHTN~%FyUNSMHT*YcI1)6!tLQHza^cTzIm@vj%VIOcu_x0aIDTu5pcc3OI7huXk
zXES_VMNP7FBb9W}>fY6s=SJ@TUWVnG&W~%820c%V@a$H2OFshG1#~Eo`scn|YO124
zV8tXa%_v!h34TxI4n4z<x8t#2sPHEz!XvFI@_lH?IaIl@Im=`+1cftEcTK*pU89}n
zDaCqfTAi@}VKMf*>Bn`NruLwZX8w6o$X-d$N`ZPl)ag-9rSLe<fYQmnPE9afVcu;9
z2ws3fN9VY8tu&8>!qehFk96K#7^Kxmt^mRKz~42w4M|*u-_ZNbh)ph+b#y3@EQ`2{
zHVJ8P#BPPu`9uhR<*O4ERn^L6Q{}OxBSu`AQ|n&G?%60yFf+UaC~X5~O~MwDn`+h+
zQc;F+gwZ`@HH<y5S{2eZ-v-wTLSM;sYmn)LoS}1RvT1J?)q=v;+l@36g#yIzvKIr}
zo%FM4-FGph>!A8)#qbu_hOR?HLqSKRg!yCdR`*5&<5NnbJA<-`LE+PN*S<WFw3LaC
z31Y2qk(KAF#_v0{B@Y}9+9GSLwQsm~5^Qeb7d+C(P#Gb|FeK~t#lAuoG8{eN*HGd!
z)<(&^BA^Pr2xN}Nf?Jcqfj;FO*qc?7P)e`sVM>uO2cLrM9tmxPMz%+5R=AFPJPr|<
z{IP83%%qX1bWP4@s$ll-K+=eTLM+l3nXAlY!kx<ENp-K{Y~V_k>Bbu9C}DG^Ck@*5
zSS*HtvGPwEtNCt;-8+1ff>uN3<*6$RB9k;|gC;M<Jg8S<%mFUIBY7*CpnGIi(g?!b
zkbAwb$q#le_ETQ)pWgNsgZ~w5^=z6)0Dr#go2C2T<&O2=P3<*&rCxuXC~V4akfWc?
z#9%MDMA%Nf*s0RDH?`sgX$foHw9oMaoJd#*QK+IE%|YQ|f94AgQd5H3;f1Zg?^{Ws
z9C}e<=3V(gY>=c&vg`jTJQ;?n)ap6b*QxnGY@Jn5TwSzo(cn&?ad&GZ!QCaedqdC!
zOK_LQCAhl<m*Bxd<ALDrF2N<Z-2GSGQ*|EB6R*(K?6vls;~U?Ib|67Nn6p>bJ2-mk
z6bIQ^kd1m6U6;fs;ixa)R92NXbu{6F3Vr|wh@i<T1M#8`AwkxHO_6_B5Gx1uwEJz%
zTWt)RQyFGwSmU2>$@o6LH@+Irs<Io`C?f)pmHmKhxvoCm^0nU?_``3r*rrzB<q{0k
zS5!+g^Yf5b$lnBzM?^Cf{bWCB`#EXj{f}`xdS9EUgIM>?x7|ST)WQ6^_+AG$Dz>w=
zUXKn1kfg=|8m(NCJdt}_P0?fbs;#XqFl)H%oKNZV>$TIWr|dgDm%FW-&|8WiheitL
zhVyff>&a4n!{6<@AHt`Zz5t;*Kqb+aM70O`p*E2amObaxFAh-iYm)cFbw=!z$n}TD
zqPbuZVRp3*B#+e)9NNp5jrgFI0@+`uYOB32)&is?tu|#f(ZvzSGpXz?S0#`&By+4t
zEM8xuJz%aiOE`O;QcSB^>bcXdwfHAdLsMiyubT1y(?QasiIV~EifbOI|IjJ=3F=j9
z^7FgL|N1;`o;NzJCjLCiJN|TRBi^fXiDlfSyMi~nNIvp;1nI2hw~^@@dXRI{`->#0
z+>WQ*wSEvgFFqcT1%K)3s(0(^2~=IyD9U9z=O7udEQsa{W26Lr#IREdeUHY31;cGk
zTdS-qL}|}k4&3i_{&5FN_@KMn!6|?>QAT$3>$>X;jQQZ7PmeOz$*C%6wQH}ba<aX-
zbU&47V7oO=?<1i(GI6VX$k4}6Dury$PB9eGg&+TJEzQAD$Zr;HsC4?qSuc|OJKQSt
zYNO`X`t?>2{K3RFPEuoI-!-ITj2*2VB2aTMq3?dG_;YCs3x}*_Z81IFrH|h4=Zz~3
z+K63c;8xI0iOo>!Qm@JKm)@_0Z(k_=Y+Xf0m&IO4Mf?G)KCh2TU$u?={fkBf85+<(
z1OH22cy&>5r|4A%OOP{1Q|zIqqyOEdhctUI{^(o44le3#ks6FekHlW|h+<=k+#z_3
zmuRs(1)I?J|FevN=!rLLOx6|`?uFrzuE2FF+^P8mA33z(s==T%2CRMjluR(tnQQWy
zPyui3VzNs}h2Ma2i#AADjb^b!5*aD^crn7N;;AGe<kOhWtz}@Kb8dxDP#twXZA5tq
zEB41=rAk(3RA!|#^Z+-(PnDQw#Xoey(hR}<05RJNEErhq%~qR?Oblsgm?+p28h)C&
zi^b~R5*;RX2O@hu4Y66V|GdIb0xT>HwR=ar#>n|U8o*5rjROc|1V&=rxLSh^$#bL}
z{Ozcm6L5VF_|DNQ*yFJWH`1ZaI(M0y45(KS`40MQvO%;!dJq%^j}sF?kT_xyPIkdb
zy7f53iOG?Z{GiinMHS8eUiIj=7oLcM_P@*1&Zo-&$5`?J_87AU4-dTlWz?iEMGKuC
zYS&-uPKQd;obXyc^z}!*qz>$R=8rO&)qXnKWi!-k<*IM(<VAMwIF75Gx`-;1o>fgh
zt=Vq!%1@Z)32aThSeK!7=bBTwPFfQ!THC@h9O9hKEL2)BiLFYM&mX1yBsQlyw`Ik_
z{!o}`@oB6WO!kQqx@0@n(?a*0#c(?R4^?85HtB32exPORqcj3DJPm>SR9y^+JDajA
zUadReiCdQZR2R~Zev7S+iOhgvA>qU~Bq2MYUR--sq5bir=1#uuMM610jiAMkBEN77
z_l-0y1IPVNwq~cqNFmLyZ;v#pA4=b<z}~lc&ay8tj_<U{WNkeW$HIoqzG{7S%_y1t
zBVA@rqhD0t?q*quc{Q@^)crhS_VNXQYOLipM%s$xzd8DTfTu-2tQX))-NWQZAcSFw
zu5*QLwytEOpnr<xlr>MY3q$)zefa5??Ud7<3p1F#x~rtE#Lh_av~u@Y6}|=>hqE^k
ztv<@-HvJscf}eV^$5D~&#JHuD`DTPL=A{!Y<GB-Tn)CaIqvI9AmXNa`WQCV9V}4b2
zC$(UT_JstYg^zu+UCj94SE~X+lN&q|7W^2%{;z{myL-zTXb^w)(dyHVDLnrXSlx*>
zj%>bvdjOy^m!)J*#*MZYz=Zb4^q4S#?#<b<%_+*&y%(N^%i6Q&X(;il`>hFJgCoaI
z=6^uBIcxDe{P9ifDSjPu>I-V#!B)f8XK8x!yp9ph=f{60f6w6I&ZgVv6H7+!x`f4>
zq<{Inc<qZ`UGwHWuk7Ew)zRT|dO`5F1oVD)lM{}<14G?ai)jw@eh=3#2Swi^=TWFf
zpO8JC|J8oo>j)QFc5GP%k{W;1gfA97#Z(pnlnYn|4n5<`w>Sb$UZ=fZ^Gk#cMa1G;
zf8<we#<GV=@$)RdCokjlU&}3~=-Uwu3H;K{6ft@0W{^){l>bapTYU*VV{g3T{mRZe
ztmu9aXl2iMdco_;%G}73ha_)EkayNcx8fqe+2#6ifO)pUx|stZB!#!-oTR2TT%g#E
z{yc@shBhX;%XhSgFoSS_KC*|lWGT443_~}xjXsvGrr)Kddj7l+$|VbG{*4RQWN^nP
zmw>)<r&FOExjDwEbhBALuV4ZCFq9P^uT0TJB;_bUn-y;sEnr>oloB5$?`IpW`L+R7
zX(n-<9+Lo9Tgil1mV)skKW>t-pnDvHq~~qk8HWS3yx(?6DPq)a=SBvyIn<$R|JDE-
z&59Lr?^1f?>CdKtv;7WYK|1)c1PzG`Q#$Ze4{rcBrrsXLBO39EG=L2zVLPo7&j2@!
z#%sA~OZw6L%1D88DRG}XNZ3J|ezjZetb6sDUutKZ(qqML{b`^i&Fo^}sJ7wjb_Crw
zU*M6S>${~$Bp3$l_@3MLf!SyX7XMNN!~F<nXL26;5-?42>ON^+Y_OqlyRNqZoET4U
zCj1}I#)U*Q4v~qCMI56!08Ya93{d$3Nz>zn9FN=~X3^IUv##g4<wq({xJcfvTff35
zV5xfcAJcbG)aJ3`zg#Gbfg^C9AMlt~s{(Xq_&27k<1abfuA2Ec?2*-WyBt8mFYwmW
zOub!(HfWX|x_gVhiC<i6sZsj(C5($*jbd<#h+BOVJ!^e-UjnwuK40m25-}@M8ZE<r
z(9zs=SiSSUJ_vZd4d}kxif*gl<Q!_7sj++u@CSDk_II3D?qy!W+ya~wCwB=^z*Zs8
zZO*`0HG^ljt{1yV-Yq-tHmDt=;7LaF<9inoPG=9CIW)4Ucer>6TF5p`k?kSOF}+_(
zjBH(dj3sfqpJ5K~+<T0<-TIIlj9lb%c}Ts!f+4BgwL1_$Qe2z$!tkST|Gzgrf>DLP
z<nvC;m;1M<%Yx)Mb>mD`ISSK0(bZ~uU0p^sA9<o`xeil6RwS5(lYQ$>Jx;E4LmsU{
zpTc@b`CRI@fQDH7Y=F@d*u8sm=f_i(@6<Rc_f72b{2!oC0QTH@0saqw%WRllVD01d
zhrzhjomo9IukBd=)6V@ffeHTC3!JGcFEfvmcMtFVU*Vtgy!H;e{2o`m1}TnxymmI_
zt;aL{0Pqubw-0a`H(X-|pU%y7({RM@;t_Ax&$RNEPR6=dE+#^7E*-d1)vP-nSZm2U
zUth>yt6xl?A8`Z#`B-a!x#Tkr{|eYK+C}`S=e7+i@XOB6qnF*AWt%^_?|=xG2yN?0
zvysP=%XdA~mw&*HGz^nO#QPfL2)fonMQg9B8X-^M$2bB0q_c!4;8GC)$ddumy2Wm~
zl*T4pRe@~;yV6XQf*5J1Nw&yhMQ(E^rF;0WeRS&J&7~31mtbp;WN+-@Z*opev%2hG
z)xR0mNu#h!Vidf26<D#)$-2(iHxP9-^51TVp8NdL;@j^WhX*?#2r@O1C#@Ie5Q%$S
zen0(T<hQE_<0LtSBK~Tn0EEyDj<(llM~OL+D6F5hWvhl`B$tV3KyR<<>(br1oUQ45
z$j>GRy^@yT*Eh<x;rc|is0(52v%Yb}+ScZeZk5Y9_|>h^G(5p+DsB(OEC|-J@100!
zrEY0X^yze1-*!kOMtPg?dS0-Vy1ReXJMG?033I<h8%#k8|BhADX;)~v8M-N-&OArk
za>m<rVu@>((H;+~$-Gl{Gj8icU%U9!P~GvNT(6G}#H);gLiSH_lNnf6!)^Rba%y=`
zD@*EW+GAjXa4}Fl1+my#@TVMVaMt8^nTwMBl9zJ*%^P=;;x};wzw%6yANKJYwnkFq
z@7?&Vfcd$&J^~$~tRdDR%I4s0=mjE*?hE{u5asJVc6Ial&qw=FPRiL4#H1FQ<<EDd
ziLb=y)qj<9uaHkQtk{0mW9*7||Et#OzO;JZ*>QCvd~69(+l;6A^qO~;eF0pMO}<?8
zANTI{>&$haV1hj7zWH~oMQjGN9x^sJG)%-<u70VkW>n2qU{-ThbM>E1(KG(KdiDx1
z=>$w4gm#s``=7<|-u3*AB=8vctenPCGSweVyzVz|@~E<WI~^YIu>3u5%){&TYI*&Q
z@9E>2Q+F@+G1)y}X($5Rt(z!RB6sm2-yV-`a72%%$sDfH-mf(_vRnF~`792`lHK-n
zcmV-Tp~Ib|{f^tUw`pdo$>VRxIIPq7EYRHNdzVBPm=OQmU2NZrz<^qmUR96xsP)Cg
zO(j6E9#sg2@P}aBD|`y>Em`O^oW^+$mWP{czdfa5l>NkKUrqsMEsI>bq@wG<%cv*Y
zYrrPvzGU~kJ{zE8X0T0Nm@w(=ac*an)~*F-1lj+&g!pK0%#$uJ3~1vVR$Ad3Qlo%Q
z@4Jqg#h$*TOIAaKhT?1sH4P(V9lN(weF-RO+NTc5)y_g)dWdoGJG5CK_{U+Ek!7Ye
zkt~x#C;GN#X}IshqM(~e;*mC}H1*{qUz_S9t>j>LQX`GfAngwkF{Kyl$1$|Z8o+pC
z1iYH+8TyHl*jbNX*<nE9-TGY3_8pkNPpxjbgn>G4>dB>^U7T7XhArlR9KVI-oR~Fs
z>?vrT<Mq*~Xh9l^3L%ASZ-h$A;=6U+K)GvJ(Y|Ac^Vhz@I@4M-i#RKDL-)q`V%J$M
z?{p5MKki|yysa8F0|)$079A7Y59s>xHw|0x8m!yIzhK_`ho9<pKg&t%abH|^vwHB`
zt0#?k@5t3}H^J9+s@I5|Qvg$<UdC!OZauerPrVkf?q~dCIwx=7?ls`%3V0A&rI~nS
zysTW`?$^bgVrMVxZ8x_bjdcSW8*zPW%J$*X&)r_YZd$DVq73<pc+~rL6@VG6vi@xK
zN524S#fH?^wc|x2C*GIB^`}&hV=~9a&AQFrHQy~NUyo1|p{i-8>qxb8yz9!Ejzr<u
zG&66zV@Au!)s`jiqe;s_T1@YEuh*j|DD777S6#LC3NScZ13h%2`8<i$Lf9vsC`u)x
z+<RON%-w##`6o8fh`dHJ<wo?bd>P@;gXvjC^raVgv7Z+1TA*b6XGNRcjS^DR|1Gdc
zb@8Gi#M9sZip?75ho5|6_Cv4hogo){X*|@03U!|jcS&E<7-XUJ9giQbpDz)N1c{LF
zG{mHTpZP7N)6_+^tD6z?v;IJ}`#vJrzQtOFH)R&p=Ppi93FMtc5RO7R_7nNtrD&?t
z&DU^URgewsM~QS;=ln?FILW>6z?0JCgl$31Cx^K*nYdp$2dQZvh&fE&JFGu1ICkB{
z(+pAsJP{c=_7h<@50bkM(I}^~=ZbeP2cb~#L11x6gU8w=KW>&f>b(!oI3cUgC^k86
z+gSV?Y96@)XlmZ$>#t(g$LT<#0!P$$p_Z$|893%YEPJd!o_3}^UksA_uqW`FB??{?
zCpmWin*-R8zfdk;Nc)A6+2iBUqDe31El_&okW(NHTwzvAl+!Mn51((>y8$8{CguEk
zljYR;JO)HVYF~RRv&kG<@qXa_5WhU{4FtS98EMAym{ek}2NP_yty}+PK5oSx^CLc4
z8rsd0^Ep1Ev=DVzjlB4uN?aSVQn|jKI0dw?x-S=)Pp`T0Rh$3tOp2a&YytnDsHg~0
ze*4~O{UXVEsz{;l^S}Ap&KpBo&s>$uhw1K@qwc)~Fjw`m|DP~i3r9wLnWnF(#ZO>)
zyYf8*WK;H&fm`%Ss2JV{bdjo&l4lFLO&)5o%Lw`c+CR==(s7;~5cRn9U#pc`@3485
zdXu}re<w<oF=3|IFydPczWw6l@kNutwBlZ0HceOxZOk&;sDt9pp%fIIq#W*jaRF!l
z)44F@X$@5eJ(^k6W0(Gdb)K6iz{qM%NmW6I!9l(B$0yR`Ejne>9zMk(wEjJwo+Hnv
z&8v$9wrr~vqih}KSpKcZSAoA1d#KaDnLy8jDwdFnB^fxhn}ey&x3MWXUb6}Xw23k{
zLD2pDnV|anK@ROJtJ!2QjnuE*UsXd4PxgZASSqLlx}>GjrkAti_H?JT;M(PFN({Pz
zMn6m>gc3nv*=(Vgo+JYHVszQEV!LVfP1{?+E3q<gQyMVMa<p*iI{IP$f&zSRY|68g
zyXdbb3;T%yW9wkR%N1Q%4KEO%`m8015V07|^Kn8VMj+rN*ewiGZc|p-XaSDbb0d&p
z#1NRP%r(uEA_3<B)vtd5sCglpVLRC=|E=Jt>d(o;V07AfVx<_Cphr*m^TQ1?3B;2X
zU2MJ7cxCE0vGsxm@0SJj<n)#eX-Be$>yzcBDHul6=SWE@iJ_0}*f#cqP~ZGFH|*B-
z<6z_wVlG1w-vuGR$Ln$c`dQ)WJcnWMuQ(&-Ijvh~Ih=M}sdf!tHP!mX`f4BKi}KDW
zOPhDb<ggTkw&JR-UqKkEKyl_?J0F6(G%#h1ula@0JcRkYxyjL_o%$|UJ}_vHd6ris
zK*z?<hlf(A2~cgI@KDnn>LE`S@&O90VjBw*5^0{Gd~AUSub?_UA47qT9+>L;6Wo!p
ztbF!GAFSARt0&E2ny_UE^@NJ%#ILUmzq9ma4U7PMZZu07`Dr-2jq3Vnd>-oZ%K&Gm
zkDz+wdl0Yd7cXVXsh9ilfPt%Xc<wikEZ?&=<rWQt2hvB*{C#^w$E!gi@%{eY-UiVH
z?qX7$mS)UUTBoyQ3rkQprIk2bAw}iNNA!%W`KX?|2^8MTLsWn9l6-c@1}PkRgSDR>
zI}&m@KVzqd&Qi*Y0#0bTR7QAiT5k_yy*?3GGaLMHjm-No-DC8|S`EL+jsJG@vxO5C
zoAoZ%VJmz=#tNUd6y0dM>mpC{@9QrVwPj$W)2EJcp0114@5NpjMLyTZla)-9Qj(B~
zvXW3@CZmiZ3=Bln&QR1@90WN@JP7IvG1rk;-T2h_@mj$1CgPoKn~#X*ZM<?%`q#a&
zUF#r9sioN6X8E|c9-ts|_rbHI)79@d%c`yPg@$WOzZpI)^x-;<XU2Bk9i#Eh3|{OB
zQ%Mb6j8!dCQ=>O*v{MC)8X!4!UU7;A`!+jDm-4GCN{D>A@$saEW63$0mN}u?((*pX
zaMN&-rF1?&B%e_gyOy~@EoF_@`lsX{wf1l>txvtZGDrQ#vt+<B>*c?lIg?d{UHm2B
zM8>}?Vi$T}G?8P%_>UZ`VXUAMtIS&cyBE}e!&ruw&j6dm`KO?C?D3ALY$1vN`;^<N
zyM7^S+RnmE>5ivj|Nd2nbGK+e$6*|=)zPhacSVM2*2}&G>vMJ|H>lxGDk`n*h-&0=
z@`knEH!h=xuPZvwdiVO$ZfnB??SFGHCzI_0mDJzlGgB0Vxc_Voxbe>0*6Ylr4vq!;
z;UR_L<S)NJ(ZyMXeXm@vh+uPLMY>6#kdkPKAqWY;o?xLwm-q?WQl>?iGNe!W?AV`k
zC(rfWo4X{=@}|PebbJSnfg`{qwvZ6sio@|WB<AeWf_(5TRbtN<U#tS;mGQT2n(K2C
z8K#^`uYM(*BrXGC|4Q)cw+$z&XRBMue5623VZ;oH?~hY;%RhZ;mc7qoGdx{ZPI+)-
z-&V&#t!EcY;K9h_{X6#HdV)>o-+)#qJLP5kJy_<F?bPt)8@qJZyfmM)V7$IUEA2;I
za{B(7oE(-ZSl{fCQ*i>wk3&Mn0&c4J`7amsq4k%I3gvx$P!0VzUgC_4C?A#8Fczet
zoH627pXe&;Vt0gxyL9LrMcYRm#R9P1qyl+$V&a@PWl6C?P2<|aI#*GmBGleysBG-l
zut!T<jpD+G1x9TK)9>2y`k}Ioj48}PI>&5^7IQk6^BIM!h(QILH6i2pU+Xm4-VJk8
zEF&A-BjNk(&S%vRByN>oB_j<p+w1UD{zUufq66Q~)6T9wiy+Xc;$O@9^;zX4X|n+Z
z2%Te}eFqxlGRV8Yz4CZ}c~jYUKkbU7d5qr{nSXZKT>BpufGxAo?-=x98It+e7rZl8
zk-0f~N{E0!9NxcIpz=|UYfFZ4CwD5;>~v&pQkNu@>n)TTH|FmQ6(UaPWEk$Px0zCU
ztB^Q{PO!3hHm6JZa``Av$#VV1O)KxRuy>MiA7f&L`xCc0GiE&xHTFcmY;GAxGHZ#%
z9V4P`mu8Fjnjh2P>p{5$JtjMz1-+N6)t7-l4Ke3at2Zr7Q35<1k>eE-&24<l9>kl{
z>1z)eG+ghCP3d#2jOyF*XWvc>K=SkLj5ki-f9c!mCkp(fO?|?ZGwNb!9qD|hBG&BI
zndXx<gsma$?XA~-;m!SL%%yY1{im!)05RUk-+~GRCG@el)es+vb;awS9Q-~{x!-B}
zlH=B%slFiFnQb9>$OWHy4zFPZEr^yd6hVnae#B5Ip1ws`UwN6&H<raKaj6*4M@CUg
z=ysK(b9Va2|BLpMmREMl-4S%$8CaB7A{ef0Xg6t4#v7J07(*l$8O6=7wb#<crb`fN
znxT_A9Az^8TR&K5l!ixV6cmCT1g{Cx%W}Tsmf@~ZR1?~@vzF@z?v)w4MrrR)muc}S
z?`swIqF^h_is)L2)2wrD?`oUc|FxyV4?7I`(?{9=7nXy|fD3B98%BVN=xeLU9ANwD
z40K16EN6BnAFYTn!*KEN-CN()OQCaX5U@2MDgPRTeJ5s(<6N%o#zKa*rafIFrYhR;
z*vS}2g9CAmg&<4Ov`gA~9UGER0>*ETPISdij6`iYA8^CchfB~Y>VgBoO=RV&8pb8d
z)f<lY9hy3!!$?xnmJr|*rjrlgtwTu`@krE62aU}n$SLpM5iz!8f>}E3NgT`IVDev{
zM8P(&b9<P!W!x2<i%GxJVr_+@ivErhB7#R{^Us{>RyK_#1Q8+gl$>}Iqd=u?H+Hx$
z@4u!ovrrzV*U~Fwys`D1ohpk_FzGNM8nO<WF<z!L8Zbz*X@(yAmIFcSF~rM6WlqR<
z;ck8yQ~y$Bfp(jb%dJNAW0^9Cfr$X_Ori3=>`GAObwZNxV+&Ra+2FEqB#(?bqaZh7
zyP~IV?fxUDBFMU=!YIf975_>uxnd4O`iYS96-7Ol+0PzPw(eMps?7L$d{QnwYP6<|
zwz!?g?Me0{39<1PpN~OSp$yt`<lIsKmh33#)%JL&M%bda9euaVj2}&`xIN>NkR5&O
zo2p1#gGw9UvwQd3LLW*~OgGLF8i`5M^XYD9umi6?yw7rwU$35rMw|Xy8ZYNJdoW+|
z!CFohpLaCzfQh_Y2AC7?qY`T#vB9tJ<vsl?)@$#Py1bKU@G;SA(=?<uy60I+7RnO|
z2ly_lCWnU!mM3i5N+JELlKl=Ric1S%i#TL(umJqf7e|p!IZP<!!<?U#$235OC@82M
z=2^Br#@BVw9Ll{p#lkDYDDFZgZRaoD>@j2RAQS)Kn@p&73<SH=2P>LoNccR-LbWt8
z>-kf_Sd(QK9~t!F!Uw)8Sa|r4W>N5n6z<GYo7Qrfx%ufGZc`F7_g%Typ!*$c5{qrx
zWPax)j@}WCn9d=042g<<F&M2T3T_G~#n=u}4i+SSCKk{yxMn-8qm5}%hA*LyF>AXv
z!d`Jp=;ffPM+v#BX_Z?`uL)ZDK&oK+9pR6R^WSAsQR9#0e#~ttUj~Y^6hKZyX-Q-Q
zZGKE|Xi5nN44AnhD#_nF8my*8JfY}!fRLTZF;Gv<NFc2v=R}d=iNq5l$@e=qZg_3&
z@}m8rE-jg&t1Tzh5cFmZ!{gwf_EMcQv#E5QFER#hJYyI-$enDJ@yO|Gtyt#sA5a|H
z%Ef2j;<s_D;8zuU{+$9opaaYQm3)`5WrdIyY7h@8)xilbd9f=FjS;up(VkNRIQ2>M
zvTlyY6zl-Pct5cXa`{$#5o>V6@bh30g&cb>l<K|oBP#80oh1a)Nf{*QqGRx_zzYVE
z96Jw0h}ujt9WB4xwOz}2%CC2f1MTs=Bo=&5S|neQ4ZKNEsDg-VTLT>F<!CDlBj^L|
zd)eUrN`k&ebp1Lg_tTJqo3$M}gjQxdE$1g7x?UbBXeIV)Xn}66yq$JHeYhL=wI~r4
zb=kNRB{>G3VYn$q<&#;MQW)d83r1nGj@Zc-X073c3gOPKib4s2jK5t2bPqllM92&n
zlw=FKk}&$Zmkhb!<=^~0JY~oRp9|_*@;!igtNLl21sKJ=PXjjI|BjM~S(x^M>9br!
zu2dhiQ!4NO>*QomiJ&_{0?qHm7d7@?P>lQGms<b}+5MRktHcdkI!q6nly8NarwUa<
zQ(JF~EaPx&eG|H?w>;ce%VNr=`na{mx@CbUIZvJq?9YWUez$e4!qg4n;RLKsgmG-f
z4deBlL}a+yj;IFDrj-U%CI9%31}=WOV9H-wr*#B<{R<(E(4JY%lZLm2aNW4;q<u4!
zAL`y@;P3x^{95E~Qsg{W#;C9J+a4dH^%(H7A8<*dkWJQ|msx`BFp#h_s{Z9$s(RN?
zT|?nL&la7qA)^NOP?*~0MTg0-YDvU<)I9;jtre?(ET*;=s&hzWKH$65n<z@o2TA&U
zk0gNt5uK>F8G+MVlC+Q|g-<;6`6pA6YO{T8>|YQgz^7%pMuc0f7ClizG_Ad68u{j9
z$P$XUI!mSYYDf({6v<FY;v3<{*&$mgW9hH7+HvVJunA2Th(#1S4v^PyVw8Z}IQ~qa
zlU_E@sR*aJE5U`f{d;M~lGuW;jFmcB*2t<uLACY(H-bh#h`~at7QXGJ=+acTay<dH
zK<YF4Bm13*<Y+KBA+(@U+locG50j>@Hg@f3?YXJ>J+}Pf9;_kJ5`VxhfLPKgfxc$H
z5l>Fw9nyLJ=}tJ@t!Le!ybn9KNqYdsn^UqXVSL-J)fzQ~?SJ~I8!As6^QGidt*ZWh
zk>i4w2AqY`dP~*ILPu4-#O`mqoLX}q-DYvbo+9pY$)_&UsU=iO`>#(}r)A?O5i(=-
z(|+Er`2Y@o53!t5UFEtYJ3%FR4p0meow}3&4c&cYJHjM1rs)eNQ!MoYpC##>1dLXB
zULH5Y7Mc`~gfLQzV?}L;L?CBNBS|{#EVam9jf5&kR9K$;Ro}1@ole<#u>>zLUq!hr
z;wy8cNz?)oMyN(Y4l*-t{a2z+{NI>(eNz5g3e)LuG$jcv1f<xIzg5a(G<wyI_4KG!
zseEx!F{Y@-q$L-uypm2a5STtDy-ztamSh@@DiJ*FZ&V3eZW*U|kT5UadVGeETLtQU
ziV*%NqoH!e?`qAl|2k2+TmYMwFI?dIzwPkOMY}7Ufb&?=<`rjNbse+Z<J*(fYBi^3
zjD}!EDz{a-2j!&_V>#okl88$RhH&2U*HZbsHAntt9vysSGP$$!gCrN^x9Tm;gJ)T|
zf$#{_eEIgZ(aLc0*c~o8DTXU^aApS$3(G$`h(9@;nu)X){iXeZ+M}fm#yPFcVb%Wq
zn6D5lSr@~GxpO;@K!13$&0Oe+ToQQ_wFq6^l2}=;NtnZyh%u!!dB|4SRf<CkSpucL
zkK&7Zd&B5*?U1jH*OpM94SNV^BN!N|q8(&>YuqN@QC(C?O=0wFHRz5}j-};lEek^~
z4L6WoLdaU9S-4UNuR&t<FMAPVO>%{O<UR{al*)btYh7Ht|Bsb-M5!(mYIiT>c_Ps{
zw0IPiX#=kXv4-$pq^Tz%tk!Q)cBIOT<%lAVH%tNEan}^2v$=Dwqe#b{X@y^+O5@hy
z=;zZ`+anWB_jO5jCB9yHIG-9njyd~Tqfd1B;6yISiIFK3BvN0(kX7L_8#$0;XDg#&
zqv2IF)`sY@LOXU;D*oy<z*bA?HKXyL0H*Q`Ixo;9*6H&n=N2B#_KuHUJS*z>;B^aw
z3rJI%;fU?1`-9zvr%FDq-Gz&*Wb;K*+0)3qu3Dw__}}5lO9=v{S)TXrwEWAV-zc{f
z?<E-=aqei_Q#DCT+^0A6TMWJMAv&X~-#dV;LtDtt`@O7t14%cnu>$h<v!VA8A$ncI
z5}H^ESJkvIV;aNEDKH1TUpn@p^g{d_?$#<U6{2h;1$~oDQT7zDyDmboEA0+CcdTB9
z-Bno38#3B>Y{^klC4IYeTpv=7zMwZqMT+$JX$Y8*Y4v2?T_u~a4&6-k@2nq~<qSb=
z?+8NqbPbsxuy}PLKh?VEUp&1d>X;)f(E4J6LT)8|J7%^I4M|B7b=hEzlzKz!C-ZJY
zgL@HcbYt?bQ8V-(u;nQ}GE!hl6~BxLpPg@;;fP*O0Ow(kQT0>J5U{y){!dn?ObtZX
z2+um^P*+wfKaCjrG_s#f{-q6lZ`!EZ3BjA<v|Nl5uTIHhMnmH%Hn2IauX4NRkz)R?
z4k2ekrk3Htv?J~!6r{)G_GqDG7qm#U0I$)HEbLDGKGVZjep}Ds<}=cIUb%k>BbC+F
zUz&>bAQFty@4vzot*FKe`!@^|;KPDlPc>&1GTVRhUulr1SHbIqgKWCnDc_nhj2<E0
zI;zqMnX4I;=7X<I{R<mx&bAz4<&G^3=cJ6daeqbLtnBdcI%Tw!Ro<;7mW)r78Vmu!
zUhO|zevWl(KZ%V!H%Cc$TNb{IygqJIIkc?a@Y;+DJOg9K(EU8KR@+T%VU^bNU<@J-
z)9Y#{-|Y*gJQ&R>A0*r?`}u1JQ-R>52$^O4aoADq{<~KVGKaf>t}7FZ>!6S~ey^jv
z0WS@CK)o&Eky9PK>dp1E>f=;ecSk>w(bI0Nhr^FyMmnH-{%YW~&07jF!Vbe%NDFU&
z94IUCJx_0Az4(-NdSkaKMU*Gti&Hu;<dj?K?It<4q%Yf`>1K*ssbN%sTLnV3$mjYC
zF2a!9BJr<*I_i26ArZ!Sr6huFk%UQu)FptVfE);(2u@>GKkV`27|$1Y^7?#i*bphQ
zgbL^gyhA9U-E`KWarS3fLfih54igb+TVK^Z!8|B^>CmmX9!DM?qD|L<+WT!KbZZx1
zP6rWIpr*b1c7QL@s|`tBoGrm55dla#;l!pK>BSbv(-X}B@=5+&nk(kSk!m1y4wT4@
z03Je@6kn}G4*sV=N5d~qJC}1Me%|b4+-36XVt1**E+DMQDI=Wh)uKIDS%WWd25W<D
zgu2!WX+0z}pGdeQ{v9uBzA0{M`8to9BztGb$IMg5B%GEV!pemC^IU`~X6teS2j$;Z
zxE=9);(O(;Pe-OD%S-F%97n5D-^aH!N$=yr6-267V-SV0R+n0uJkDhMB|GF|g5S7y
zh%Lcwt$3yqDNg6(b#VAC%zWtB>F~%bT_vaNZel-MYnLDS!B8dNa(%p7%QX)BOF3iI
zBEmX~*UAg8=xulaWIdOGoqV_Rl=$=BJh9mGj#i%V%Uxxyd$-1IAK*>_HoibR%gyw-
zn8$@I@xQ;TM?muqpz9gKCSWxF`cEfs$)ROG*Dub2_mqFXv-ZhzbC9d+4%Yp&+<o%n
zh_hwIU6}0x`1*)-GXQPG<6=(}Aua3PN3SnuucuA7YbX@H-~<MjfalO8c65))GMjUA
zD9e8RAZ0_|S9A_UtgHIxhZLduv3NAe97(%v2442J^?PoB`d1&OJoQ_}JW(+L&5~~m
z3r}WPFvvWanZbR8+fJIOSA|JC6b+G>52h{TLL|B`BW8>*cYLT>ACWUvfo8=xs>~=q
zWMLRz>-uwQg2#eiNis6+tEWC*M&bVVKT{j=ECf83<xyO}p;kyW-qP;7(0j<N&N8Y6
z4TwQ7QAVIZTPeh{PYL=i>^M@ho{g6##tw2!%ex4J_9U`gk^1O|Dwe32{QbP4R2<5U
zkR*?WSRgkE+(m<25%NZ3!icJ<{~H0X6d$&q3CK0${U@gc!uCwR$8trpvKtLnR(-~E
zjbcdZ?rm+VRT^sOs>q4(BJ|QiU8bnvtmT0)9^VgZ`M?E`C@~qcaTuB|26`dVhd|zm
zsW-BPFEkRCjov9{(Ji`m>3IWHq1N{nYT&>4J=*qtCybb}$Pk}EEA-|O&fqXq%fu`N
z1T{V@js&S2q#_g24|2E-Ofhey3QfrI$cWQQWh07Q+iiN`p=ji<i_sicSVI3jdRA%y
z>|$?B7@(e)EuuLL-mUwGQ<SPKTKW+U8!(<tCXrddt`UJ4Igpmyw%fiw9FJYMCQIdJ
zR9mxZKWTXdWHD>CPTc^Qz^;D|>3(@u`15+OJ>C6m7SR59`l;rp_pNB@ip%l|G!aqk
zp!;U&h}?StLcpZz4Tzu?W_rS8pGs5x$%_AxV)YV+a!115xg{Dowpsm7X2}fUApIre
zl~y%p8{*EgZWRQG1ICErkLV=2AO2QGj@<%6fJO-M0iYaERRIot;O8ax9iT!>qIyu|
zL|f6bnQi}g_Cq2KSyvom2X#fm@i39$s8;y0it5!9@Kgyu4bcUhck+G{+gkvD86bP?
zrzUpaH&gB-`fxyp6j}@XwsSyomd}<0_R#bOr|Tru$k|;coIOwcqHp_iVg|nl<+%Mk
zDc`yHOZV%7PoCd@k=%9QAwIV~czZhSv*iEC0sIe%-ab78Xvd=McC10*D*$*nw(aU>
zIX1Jf-8OT!J{bJWpr4~984vXU*2*d8>FpWXP7NJP+QDvU(^f(59KZf5(mH=mD`7$V
z{EoHKwT<Klg0N8MRj+C~P|t*RwMAKf1!yc3CQGv%e+xc6GoDnseD1*$cf<IB&Y+<c
z?Hk$}4Gw)5c1Wu~>xph&YA_`@TT$_&I5VN1)i8B5Y$KdHwONLUJ2U%@iGc2xK~sQR
zUFK98<mzu`(~-l;<8nTmY+$O5I_-Xi2g=Z})WrYou$T#@h=Tv)dN!KomVnK_sn2uM
z^No1mtjC&PX5BW@`%w|+*Jmc*O^k{2^NWoToR`%zPJ?FG!}rUdN2G`05m7iD>_j*6
zLmb=x5hV+rTu<|_dCmyh0H|8Sxc|d>ugxECkDIE+BDrt5k1vl}H!GHXLwHmH*W9N~
zCQW+$!8+3!8QC-9FcYH6tV8tQ%Pd>D!9P9ft51mz2s`IRg|Kh5_++z&80@2Z`1ev+
zmIr2TH1uA4apyp#%W3b(WZ_5ol!d<A@7n!vRn-}QWnlH-NU}Rb!hXENv9y_Dh}Mzz
z>vbhsi{V?{AAO{zD<AT7J-9L8G^_U<w&=PV8u8!RK3o`E`&m_DQ)}uwJ?W?N`!$#X
zB6LJR-oe?+^QOa7ZffVenFx*6b1nRngVp{3T<YJTEldVSLW`5q<HgF`A665sEnmMz
zE<N>i91H)qQQD53XEQK2j76+;7wfJ0sO+vY|KE51V?7*>;r{4z{(7Ll|MFKNZ26F^
zV3$t3-hX9aHY0x_{=>W2;0nS)W}M-SY)<ivb>JV~gy`Uhgd@gA#NKGm$UM_O_?X81
z;m)uRqklLh#;7?>kJqSmWmG@px3C**eY_45=2}RS{`E(a(uVop2b@EA)U2i9<H-hM
zG#*7^+*byINl%sADL%Aa*Bmk{c$Lh$3ep4>(r8{R852;RZ;4{OH1BMJB;Q0*U>cG-
z0v@9sHvAlnn-qT|9UR62yikSGnGVgMF?dCg*c)Qd)5P!vFMvO=vR2?Az{?kEqM;Sx
z{{v2k<OzCKtWbIrDtdZV?FwZy%gi}VrM@Xt(j!n<-b5p799|L}xN7E{L*uPvhFntF
z%z1U^-w^esg1vWk<)KAg;I8gg9n8i9>Z?q@GPY=Nf!F3PKF3DN^U){5Z7q#1ofGfG
z{`}q7FxUv`=HmHeGGCuParrlvQ3QGc+gc&UcMah&zhDY+;6Kf}Za_G%$+^rY92QSR
zZL|A*F(nCiAR;u9wm`c{VhATxk{*p3ITS5_cOJ$KnMz4SR234(vZ5wrV0}l!kzn0I
zZmaN}?VT@g0&w}2Q;|yf&7=NT6D@=JkE0+X7%hJaTk>t&nz|1=6BLc@9Yj6K7rRm@
z2Moa{0{fzFRNz?j(dUOR&=Yr|4pn_4KqtUwqvB4sC6+;uR_SDnK`Zy=^;u%v0dYsx
zX-<*D8fA2#>=|u(E67nQO6GKVH3Aj@aX-nc!C63@hBp&9CFDca!s$NgQF^r{8y$v2
z_On8FMOt}^&yFr>Sfi;nDX$a<e)e5T@2}=A%F<6k+J8{uNh@^?Q^ZEA7*v>@70ljs
z6DbUVN-Klo?fB?jGwSN_pr|x-hwAASspZItzv@|$K(LB3BGq)NFA3ub8b#{qxX?yY
zLmRdq&`1+`g+6t=pX2JuV^v%+2hsyzir-rA#0xaquW2O9-fa+;gw`6eB&SjZE2JY(
z7id#|r6(1t;-+tIG;_%tl*eXgQVx#N9gFfIg2XWL*&WQq1R^DVKOx@>M~ZZ>r&Wdy
z(V!lNp-$t*L(O$Kw3LhD`3V^zBtxz<u<}ebM&oRPoMu)Rgzin40-e30>o*~o0{vJ4
zSW}5Q@(JmSR8bu*T2d*FUDb^Y%$6Rl1Xl0PAB;qorc0<~Di1=$DZr#pV0k)ra5!cZ
z6h!S6gs0tUY_s3pM@SH=n=x}ayZ<w-TGZ8nB6Sov$>i#;2z>IVSO0!j?eu+6j<X`Q
zOn1(H!L`~KZfR`922FJ9ts)<%<TpK_<A{3tq?>^@-);R@8|nM<d8SMwJ>cQ`(06>H
z`{%^-f6laZ-aSN&rrZtc6CmjK*n>iKjvU66>lxgVdT*d>%EB0K=DihC0GRu@yT2g(
z0VGx<T`aLv&^YbiElB_^NW!|+@LL<5gvyILFVEW#C^D6cBS*Un!4VsJ{7vTAO5=eX
zIa#U9_z0-w@i|R}+mCA6O?@w9P2XAKb^+Qo{#923ds=!lf9udZStvU^ZTV21VA48k
zx}>ZxZREP{&PcI7T7tsW@cy6o%b0F=|A_pZ;bNz#e{WtbqxOcYFWQB%03L9LtKirF
z(lvNO&9SS1uN2oZ!;qSX3*oAqVS>_g1O7OYHZcDfxSgu<7BD)5M@~`Ku_Z0t!x4%{
z49LA>Wyn(!3<>d?+yY>b?>Og=#>`ocbV29WF}l=Pe}FUlc}kfJVu~vOK)wE+mpB1;
zh#$Vi>qu(THTT05R0s1lNkeb&u_^GQFBsn_9SZw-&O*tMGsyp$ihV)9h~-}sa9R^-
zViEXtse=pcIQ@Ba?G^8OCX0b4t@XQuUR|k^7?%?9KhuS)LVN=Hw9ZK<{+lC+9Pq+1
ztbK-z^5Jk9s1JOzAu*|<6B>li$tuN4|9zR4+*3Bu7yI1IYxk`uK&;;Yww+HvMDt^X
zMt+O5;Eb#h^*vCV`N;uY^v-;WtR4+EK}PcZqvl6crT7pp4YM(t<IX@!hZt$zi%3@d
zzY2B`B-twt<Hlk=A1Yo|)L#r#OjLZ%5`~A;AK7S7W<kPVTw(+|aBl`(8yWYkKvVqZ
zZve*|&a+vbznT$Z5|2W?cqid_AhFaJ6?rkSBzKggILY=9m0Hy!1{EQYC|1KXpKlA6
z*@tiaR9jolSu?6O(xA&jSz|`}Nrsdz!1de8V@w_r>Rv22AeJ)K1M+qi83T&_n5KBT
z@Tucj!p)=yStP;czu+X|;W=!1p2);+!bf2J&j5!dFEVwQYYjWsQ0+4x`gJ$o{qoia
zAtGKI+LQp_u>IiNVK<J0HKeWd)tn?V&?PE*+h{5i_6wdUiw<+WtJe|LSRS;5%8aCI
zWNEsDjO)$wM<xkE6hk+k)*J(c<Vt}Edu%e3P@p08!$faN1qbln%jY&m^Xl6p!Sfsk
ziZo(mA_VWc^y`OB0l-ma&rq?tGK<KY_2U7W4Y>n)`%e;J3JNlb(!-<LZc65dkawJD
z6!>A9<OogXa_oV^Jo{>crCbH<);%rpfs@)1kV5jWFMV%a@kuE*@xok?P!sd9|3E+N
zNKFgiT8gswMkiwu4N%Wn576Wx;x1(}N^4aN*yz5M)8tkGaW%5Uj!pD3*gGOqMNgu{
zLy-tXhwK#LXv`d94{dc>`_=UWeLs&l{hUmK^o8<J3Qke0E5SmeiGuW+!ll*0&S|+O
z`-w!hb_R1ILBhGa`{J+n#fnKF=pC{zyy&+cweVi#X$q2aS7R}mkP!9TDFZom;*Z78
zmucNl5D$JUjqyET*#PMwMPph<kmP~msKj$!e{Q3n!~wG3z06N{xMU4@HCPg~n0*@?
z_{?2a!|6z=PTSfiE80O^0zkQ^1MC+Aw>URDmDdiQFVR;-`z^e5mitq(qKJxV(gZJ{
z)VH7?7~QB8$Ds=_?jeqb%A11-+MV+Seq1C$sG&*;MC_=5WR22LdY}rCODvfBZRg8<
z-fM>7TV^PvYaJ3!G1X86zM%fkI+gxC1B%*gi|3r)q45{+xpwR%Dq{;B<eNSJ)$>$Q
z`7S7ZGqd=`7NN_x1*ng77Dq(Aq-%Z}0$zZ>5eZm@t^y$ky)xAZ#O>SeS3m!(u(_Vj
zt>6SIapY|r|8vAI&Zg9s%qtAl5_lX|m+4@j$JePG8&cD{g|6L;ovCcQuB9p%YF5?f
z<NtD%H~6eUj7`DynVP;VIW-h;)Q)8exv^rW4a^?P;)Okbd%eSfv9CPrrkRa>mr_uO
zsjFtd-1zUIZl{!a=+XU1F%7pV>;Sb&#{t^O%zPiF^Y&0i%-0>;Pt4(IkR(BiQF1%P
z{6M(EIR=yQ!#BCs&pVQId#ipoi{UDJhCjKN3fz`>uE(jK59AxGU=)p|2HXe&*Y*|W
ze|O_DmoagN)Y9h-u}BVDnEf|HiKT|s_$P=kRa9hnxj#(#LU~*{<lz4*a5dC%?vgXA
zq~|kJ1(g#owsKo0Up&ir6XIaE9{vvtP?RY4D>?GVkMBYH2pC|R3#sJYk1CCPk{g^!
zQ)vf?G420Nr1-n<v7}S(a|K_3Du>eTO^9<=0HAEPwHi(7N@{V3Tr%oriFom>Nq8VM
zVvhwqvQ=TR2fE@vkv&heN`0NwXJ_~?W@p(qspz^a(NZuNtQY_X-y?7^`jks}g6y+k
ziA6LY#3gG^j&PgmiuNGl?b4#cg&gI(6qgNns<<ax15r~ot#QNN6j5@z1||59R0VyL
zlD~$nZaTFrT9e`HwkPAWH^Buv(X;M0!+*l%pI(nxM%@Z{+NR?D7!h9gR+=)~wIvO#
zzwvZ6o(CAHERo#eV@X{IUGIRN5IjCyXEOn#4lM*EB(&a*{z`RWz71-$vAp;F8!MkC
zv2fu&WUz6Q5{2bzmiI2Qhx~IMktcWQ)6p{t4Q>_wiINJLd7T!2CfK+pSz(b*yeFn9
z7yZnrKUD1DcjmKRWbaGbM8}&GYrS;|JPF@T?*fgp!yS>+0z2{2=lEzPDxg#HRzD%Y
z_lt|h!zgJ@@UOGh@8lB*Y8vi9GLx(nqYg3%(|83csd2vr?Zo)~vU3#z$pP<SycdZ2
zi2VJao|z#WDb&JJro6Vd@c$W?80DYdqy|x*$;^vx$MAwES}nFrI;H`}h$|^ffQRrF
z+=$#s9D)mmQ(mW2Dj>=hPZMDKNyRf=uCBxi{e#3v_W%rftnMay(i3ed9x#)TVc-@X
z!%Yi&bt-H75LrXi!6`oYYD`oL#GV5(SO3gIz={|adQ(yoSeOio#5Rv%{5Erpz9JpM
zr}wi&P<Q1}?T&E^ZtM=3F~r1UHO2oM+d4q{f&}S7@z4)dp%WNw+aI%;yt^N`udqTg
z7Ab6?MLn|kd=lT<zfbcvZ3ns%j8cE+Y(nXn1OFZDi&Ke@Az2~mVHQK>gyl>Y$rIH5
zm<t}10d-(bYm!3A!6a@GJwuy`=AkU{{Y-t9(63)%q?i?(#h?Z1qJ&mxDc>7ObA31n
zeZy&lS|3aP2w<MY!srFHOZNH(?px?bt@0%r2uO!vDQ?JsX3NGYP?N}$2u>*#Tj?vL
zfd+z^ETT6fA%SMn_(*}6u@USBe}5^l<E!_zl-V&_<7FeH%7C?)W^7klUGiyobK{26
z7bBFj@jgxc`cWYRjrx<(Y$tG>^lKA8qkz8n7mTm(Kb5Hv<^|PD=0toLW3tFbAmRc2
z3L}J%8IQV;=0k}mXEuw2<W3L-7*u@p<sax#hrTP5GqR+8cxw_YECJVBu91!!a;`#y
zyK(VfS-D}<DGHAkqbijjH}+P6_Usy4tgU*Z1S=;V8hJ&j9d1m1&_GE<M22Ie!#h)0
zpb=3ix)3JE4`7=h{q$dtD&2HKe0(6HFc@*tu3nH<5>XTjy_Vt!W|MP1`_Bog1E*2N
zOx=tPk^+57tzKDv^UDFA0x(EDu#q|^${kX1H<i|fgz;~xv?_9HVw5=w<4_}p1$SyY
zlN^c?i!Ch^`h+R%E!MzeIFXkSKN;25+84GV{TV?4GpBsMy0vANpS~=`G3>1eU*RfA
z$Tb^+k_8u`_|1YP+VmkNrhUw>iQWxNa(sO>VtUSoH)zMh87}C;w$KzL#gF)>8xi1l
z2{kLVyz{Wo>ouf^Dj7ymq)*dVhZ#^aR}BkfXphtM0cP*G?;dX>%hZ-^>_`kI!YU5J
z8&WqKMCnK$5yK4Y-BOBs63G=DL}cohs0&o#7@CML@z6OYu*Dn5W}vEa85Df2<M{os
zCXn|bA{<OT^yObz5%-XOV5pcPH8QCf(zqNpC1{*WEB~EobOv%u$Y`V^m;OVu?&4wD
z$_>HSZIq!MT>>=tKHV6l2k|%Zx41|NJMhlJ5!LTu1rU@Df}$+{G4npcM&c#zA0Xkf
zJR-TJ9w~x}t%Xe>?`*}{8#oi)ZMBp5t<6?|=TJ5<egl<5nm~HE2UKjAKIV+Ng1`-`
zXX<Daz$VGsU@FJ{4b?>0QK6ff7U+H1<q9A%od650p(UuJYt_jGN|)Bh)2ynvzSp;<
zkaGBm&K?nzw~xtqik*e~Fbx4yV}0<U!DM_Fi;JlL#o1OLF(YFr{iP1a1kX&yh!?}$
z*^}m%*v5n&!I+r<CQ&>d2$H@siEv+Eak`jJz|s#0`%)%Ub(o-%6yC%^!qy+DuZk{X
zK4ptf3w=f3lR}OHi=nDVndmZnkiwG3yMf12(k-HXLqISIA7~};wN5*HaWc7v*_1#I
zjlPPiRZk^j<M^j>5qtiNe3dkC`N50gzSuB5)R#fSGzSoE|9_R9&W@(s*vUE{kWeWJ
zUZoK7Mi#<y*2bBw8hb~=B@I%0^I$bWX#<c5SR8*41}-@RB^HkewpbdCj5$5p@XpkL
z8bVY8CZQoUoKEk^wOqs~XaE^kZ}TAmmk%^e{To6$aJEf+o*VIp5LT;8Lph`n(QU20
z{qOuZaE1p%7PXheEQ|?OyV(F*Q;-#_fiEh+b1$VGnhJ*o1+rjeSeYW3KW(Qtqm14P
zd{A<$O_Zx6k0{p$Ty2boBBZB@kwnriydgOTG}MG4p^RWTWo7~rXH8T@0E0<E+*f8~
zGaa>IR=}ntm&+Vp=tbH~nbU{6jRon4QD^0bNqX8U`y?pB!KVQg;;M!)T)0i4S)YXP
zHDy~_f~4V0tb1s+Hgpgg+N>OSkQgRMSt_b64H820OCi&<_5<1Z`2tlBC)!Rw+Y;hw
zS!pE+3vaBHq!p}z<A!ktK1qdn8uepE^<)Gm(-n^>fpk6|hBlJKN-&T7)Ww0DE0g|I
zczk&RT8OE9x)fOt2Ju!;=;v#ssy_~BmNK_EO>#jQX?yv3K$Pqa(J2aQK_G17T2$z5
zhJvO}c@%V3RKBD`P>Y#idxHO<GDhn&%)B7z;B%Rp)AxO_J4it0gfE`3+#ZV^2ip=?
z#hCm`sDR!QiCj>HHpMbdFpN_kV~!h@2fTtiaJq)3W=ALVMwCh-bs3HA6O960cGv*5
zx`3|`CTAQuwgvVI#=T6`FWr7_<mx1IBt|?TwBB$RDBLy441CnG`4d>+FqhF;4h6wn
zhj5Tb`%gqtv?bEybUeC>9N)FBn;{qqnSek(*tq(H@!lZiwc>g^+Y2%%G31gXTy!#u
z4WM$299WXm;17vZQ72{T?-bWSL6E#28fpODua4v@&m0S}+$73uE}A^V|3%A-mG*0r
zf#MD61L*xn_9Szqk}U4Vi=XVhmfYmXaV@OvJT5HEs%9lbnP~9maISE0B;D+J1nv!<
z-`xKnXYUxF$J(wBM-3XAjnUYR(b!32+qP{swi~Ol+1R#i+j(cL{oi{(Ywd4ue)*KS
zGc)%!*PJ}g<B)2t0?Fc!H=4alIRyQqHB&g)BLvCYkw*2C_t|u|s6e-JPKt$P%x^}Q
zUr*{QwuC7Z`8WYo5MA*oo@nf==hw(o%%P!y5j}0Juw`U8?Lq--WBz@7kZf6!;M1fe
zkwG|~NU=}!JV*r~qy&gVRm4yh3)zQ1AoLDVSlFz-N3n}DG(T*9i^eEIwoCaMR7cLg
zF0`PW+J<34>Lux5nHVc^tHp`!QU-^TM0V)Rj`>PHa?oTCrillS*wEB!L>BBllp>Bu
z%755&>)l4$#xSje4GCx2LUSJ7rxFao)*FKF{x!LtpTAIho+LE}dJT&?5(5hc)NYkq
z&A^=`gv%+gNdBi#&sV6%2n9lcZVqDfb99#;xn8e;uxLVfvgq9u$WhopxrFWJO?`Ev
z!L3h=%z_9VAj!R#JHhxPx=7Yym%(uqLJX>-k_i)EI9f4N60e#gZIgOqkf8kP)qH^$
zmKk2)r=@TdyNf3^l`fL80%@)=5+WuXea%*f9flLXTzCoCMZY^FuA=QKAZQQMo#I`E
za*i7XVrZpmMeC8KjRG0485e_B8<V6cM0-noDxM?W8<|G)L7gS(h~+28>fBYTD5^2j
zG$_(;$x1}<$*ngsXeietF2^JdO9DFN2#HxB&xr;HvvVlkl+^GFG2n(JNet{FOr$s-
z1Jcl)9z#U8<*Ngcl>}JPMCrG+6d6fGLkU4rWt}QjB|VS>?a=iIH{@W6)agS3icCk8
zVJ1Nm5N8piyNp0iO$ie7d{I5^ZMb0Y2RKKLB-f)B=!s#v&+?e;N+EG+a9_y<(o)_h
zzVfq<VV{QSJAw$z@Ye!#bn(UJ+Pk2D7~YH|R)_;3|97r_!U%D0%)+Qy5A3*G{<$&-
z0oKbk<<wV?RXxo;k5y?BI59_m6+IA?bJN2qj3#!Pu1R3;gPe-wfa_{tMX5xUNiKh4
zW|CiQ@zp!}<qHxTVX&0`%}512N^+5kIhfEKZQKzhEx>vA2nl|8lWaUE8|jt-0xK+M
zia#(iPDsv~Jia5)4cp=to)hMZpo~<A1A^btNd)3cw7RJ^H)MMw)lWl`S%bDbGz>yI
zKdhpVBCv43k~_&sEab?{UJxPD7;L#mwrw#_Ce|9$a7wHItkhUoUPN%a<<$o!EbN82
zjalT-R7}v6DqA~O#L<X9S2784VRnbpi%@=L2!=*!odp#oXd%9wp+c>bP^yW#At;-J
zqqLv%xGE9?bI}=KfohYFa<3VaqY&094Yi$Y_nCABwsberjy{2UND%lcuK|XhE%YcQ
zyDSEI%xAwNI7LMzN*KX|ULsx2ekKx3Y%vlzR47!o@66u7-FGdbV%Vj|8ad$Mtl_$o
z!`5TABUJjYn9Li;ql^<^;NO|5mz!gA;#&>Nfkkbqo`|X@rb0_`!T}6&69HC7J>&r>
z<XF<;>DyS?Oo0oI4E{U7tQA7G2<i+=An`3mLf=ETMI;fS))!`d>|ml`BhH>qBHTj4
zY%$0e5}4#^GEjfD!L6M1DPopCfYd_7CFvv>zp=QraTVfz0Y)ktQ6xY6f{q>iqf)Be
z%5O(K*z)CzCW>C==pW<;+FCIXUI|3Kx;fAf`QM9QA;6M}LZ@~xv1l*Bg#D{OH??^C
z^TLb$6e<6~)KWK3tUn@qLmpm?SxLdNPmuvj(?sP@g#x25D7h<%>4)Tz3yqWNh0+Td
zCnko%ggPFY%I~sOZ;SHO%~)5J1Ywj(Tu*rmBO0Aa+07c#rl+oSXvsv%0v1U5xfb_(
zC_g7r5e*15&EmK3ng>j1{qAN0Sjz|th?aDE)39d4;$ry27@tX^2E|j@@+;G1HdhFz
zLC|0~vBL3HEx5^J$l#7wKmxn^1-`_{VGZgY#JG(uCqajyg7GVya-F}LKD2!K`0@}~
zr$mpsT%zTOkPc2wIW9H{%N$E7nf5l;r$+qU#y{vOpX0JjfVoJqUPO=(6tlvNBUgmq
zZjchWb;T<bIV21TimrsdAk?)9F?VMQG_*i!CPwQBDG(3Fz*MAiT-kz9kQ^_w!bG`1
zcGgr0D|9a~sagtUm7bAIuRvXHIC&l?AYX5m^y}C3Fmr4QP~e-bi<`pe8wHyn7YC5x
zff*WCM|KZZ!RQSNeQ!~wjgiBju7R`4bbh~^gOMy5c><VjP`h_oD;H6}L|<ka5emUu
zz}1WGQY;n_-k$xms4M<ZN>xH_%EO;F(3A`uuH-n{f5OYR{B3QrE}e|yl)<qZ5tU;u
zSt6|@gc^aR%|VGPlca#&y9-KtYdwrvNcAh66Pl`~C8260vODEVaRdqIuRk#GqUy79
z-=KBbPL5Dm7~`Vd#CyQhfHnjwAxf|miVV9?DEV$_qD&n^vYh`99b`cT;r*;prr`r7
zl@PxO_c315nBHUJA3CLh3@t23bg76SjIT&b)7wl2>N`{vB+#bajLwt-b7(_tNMEg#
zicrZT(UNz?^q-h2m-wP`@TPEEbH%Az6TE;PQ|qBLB%L@3_yZy-yO11uh_CMW>i9i}
z*itV|{8X9hjADIC%V%0Jnz8((Qgiu5N~IkELPp0D;_=;u?>UMI%E|nWg$Y=(S&#z1
zvoN}+$)viSzw7RbK?@>45Be4#7oTm5QN~izB8_hrZ%~aj&l8EDuESAZb^o?jQVjYW
z#MqN25*Om>DmV&}z%Sr@7b7&6V@K-RBRM6REXUgPRRDx60Rg+Gj^7+cuq18hQgEFC
zo-Da^Bvd?xQoKAohB{UTngoMCAG#N%kT=1vtM7*-7EBTnp&bmG=wgDVe;5c}B>8wp
z-0_%@834R*@ur^eeVzUpAI-aEl^KK11kuMIn)3BCeF35XH7as}yjX2;e!6+zm-Mo&
z+4iP<)<i+vCBj+N(hYudxpDnjGBZ7OVpwRFNe!E+g1c&lPO7wBS<_xJ1Nm@M%lO~J
z)~RRa5ac0KD$;@7q1shQ)OzwtMk<AVF`II@CFXRfVbAQu$_2j^5zH(RaA4{^Xz`}H
zjI7dPh?3n(K0R02!AJdK&{E2h!xGwNz#yBA9jqMwEd@>l%F}JD{D1^)@-y-a<Y=9n
zo{H8TnV(2POsX4dw`vE7Mdk;A#{nposNJ32(Q{_Y?z+c7zv2u$7BDI{8AtCIgKsW?
z2m?cj<PL%h&8lc%sSqVyU2WIbj=7XXyL7D8;!WYzxfDBppioVkUEX>_v(LiyvOhNJ
z<81PAb3X>>Zm2!hU3M@nZ;xFWag-`iU*mtc0A6u873v}CEE9zv(fSio2@(|H4SP0r
z3cP~<583qb8H&4TtR}BZO*=vf1nBJ{@L%o@hs}8M(b`x~aKT5jl5^qs*VC|q_6XQ{
zMPx|oGf9d=OgGf1$L2lT8WMCn1q^yHL6P}l5RN>7Mv-mHw`?pH-DujC{%yVVP!j5u
z$qC<mX1WKZR_5l_v$ld@D%5Af1N#Fp3YXrMJKY2nf`Wbsz@>sg`!N^_?DU`nXEtbK
zy_u_)R?SRy$FPd3b~nsIXELF8;?0KYC>~wSD$cAe;|gJt6Yjwb2FwWZF8E3Wi{aDR
z6?L<tlP;Cx`}op-G9?wkQGu2t3>PqhzWEYm1By48f}Mj47deZ}-;}$FLpMkgpeCTn
zl)4xxC|CkYsC8`$EtKB(X4<7W_k$=0>5vLyduV%I39Hl-9qhB;qsV4V?;BFENaSIO
znb|0A3ZsMa`}>=689Yg61~S-3zXg1!hxn?UrbeZ7O3-d?+Lt`Y&I!cC0Y5A<6eD1~
zpB;CLHbetUwE2ESiK9I1qF=6F0ca_p0p~^_w1vi1fnq5o{R|r9D?m7m<V(tyP<&-m
z`^hq@>BWoJ^=V%^{r!D#qeF`Uh<VP}stve0o<@)MF-ylz@7`YSk$uOQdydj=I*bM2
z;#r)}R);kEM`;+taIp`$z@dkhQ?KFd=qc&?1)`@iIjHfluJ=^Jj3clPV%@p=+<27k
zfV%*$9L!&~E-|J*d#q8ughnL~EP@<#FBX^;0PUl%%v*@NwNy4?#0igx=tyI`Q0aUc
zgQ3U@99Wvg)b{Pwak@jy9ABQO3yKi|=+=)C6gFJX>hXCzx(Bn}?axD)jWs>i?o6_r
z=3yt^1`L@tu19ogM9`I;A9>2Z)V`gswGNL^1AH?3&aM4lnDJZa4~~zU326O99!l~G
zI!d#E`|J7<>3bXA7hl(ob;%otpLix+ybC-U&>(&|qOJvDJr|p~mMLO83bGO0L?z`+
z&+GhyA{md5_6H^=CN-S<F*a=zvXKeC7c?j=W$6w;yqdt{R_C;We<1v0Bx8clBy93P
zJ0-2%U;s7x1NQ=F@OhPfKf|&6YH_x@#sR5IFPIkNTe$|C;h`Kk!wb0IbIY@k;G?HM
zR(A`y@FzxIAu-WB1X308zt@uAl1SHbbzG}0b=hH3>6*$+_A^--u$*5Z^ie=fiInZh
zUmFykG3a9mHy=#$i)huGZ0AZ7lL5B(2!*2Y)SKodLwr{A+ogjH*iQsLr`4DlY<<=)
zZP(W$E^k+e9`^UMa|^NIiNR`egL{rB><6n3AqZdg@1U?m_?PO(Rm!QHPVENttdq|#
z5~g*z8T=XxYWfx0JZ(V5zU$@kLJ?+B6(9fl`+fwFbu0Y+e-WR46KaTPl63I!{{FpH
zKFGMD`@c4$GSXK{S|d#KMJ68Y+N6hhODxA^?QEaJs@$6cp8yp&v{w_h4Q`k54B-vh
zG=LhYD8s#UjH<!1eP5JMzo-m=WWnQbABIy`s&_aZRr&zUhu32jANRuvpm+#@TLcL7
z>@7-e-a<2HCq5N>J>U0u@V@yIR0+Umou7WkqV^Rj&6r*t?<(xxQ}47>fa>@nT1qMr
zEx-@#PIeS%Qu3PF?;`R{HsG9H&U;^ZKa!F#(0-$qESr?usPIat{=J7C$-o?K%IgPl
z7|;Yr&c_@RLl%8uYB|>rY)>*W@V+^Wj}Dhslu%MpNy$pGnMH8xGw&0EKkLI$IaWd}
zZlF`irhuIIh-=eDkwG)_C8n0sC9hb1vm2&j88zhjEKSLR2rmGTa37|5#ET=_A<j|E
zQhc^^!wa?X3>%V!r(*4ks@bN$!Xsw$W>r$}1r54Ze8-pbwk?#dL?Mx!ivi?r!QF2Y
zqOO?)q7f=EV{@IRB=D%{j`<5)Qn=?>kz_ldew*ugcf-zLZJcft;s{9@lxHQ+mV6Ks
zSMwCVGU*xMY!T!%lAv$VoW?1-5H=daF6MKh#P`>230p-Xj`6V2-0({rThYWi7ZzES
zXa3gApZ<*>gGtr<y&%mzJ{jkZH9s*H>P;dn;DT&cd`-S~kWrCeg^C21KJ1WOFK&4E
zn%6?E3|&-ndKd9Ci;6rCdfau4u<7I6dkidLgib}D;3pi^FA2)ga8@{}63JYL;|r)P
zkllespZfYlkZ?XBzLLR&6xTmG5C&mXyd5T!GO6Q(bp=Pjiz66%5$5kjC{s#{4zzUL
z-a9(xGDVfDzfjvsp~33TC|#GCAr*g{FDvOV*3X|QZX-nfMowYzi$lo3taDjyC)&9J
z^r@dTSD(pqv++kE=zW0j-WZ{hgYblGWkgfHMU4G*BO{YyHXWs+nJD;TR6V;Gdw!Zg
z!%+QXjW{Sa2?Vag0@GC7F{3-b_6!Swn5!+R3Dg>Q&8m6=e!@eiR1xfnxe$Mn<~zRQ
zcdjY4Ft9@$T%$DEDN<#jKxHbH)#B1E8`$KuV#}|Kpn)2)#ad+Wb2f75C?vJkU-QXH
ze|(;(V+@-mQDA-jmfjk<o9vms@Kye#f`o9I)JWX0b(m>TM@tpzhQCdjRgH~!&n~AX
zim`<onRvBsQ9W|Dr*bkUQ4>R_7zUZ}$uGU~DlTT0s+%lU^B#rRXmBc}@@wg%&LMI)
z)X5B;DIe1exr&opn4T%oj|JOAZxrQG;wbx}yM5DKW#8%WVQ}nknEs&#SR%*~l`}TS
zdQ6+p5U(P6Fhx#DIa?@b8-^?#ad>f&<YZ*9+1SaFY}GM=`cqE=N?~=XszX|*jSHIN
zR|KMcW?0-o+nuGQ!GD|MXb>JBSo#4$ei9wLHZBCBB0B27{TY@hi1p|cibauqNLACw
z@yyDvAQ{wfabJZ@3lwp<b}GhR2MN{BNb_2Y=}G+2-+BAL^OkQD?9K7foGR-7<pAfA
zCOzKoF*KbL&xECh{yHgRIRD9;VS1=XuZ0XIO+*0{aaNFg@!tmQzkJu<1|gIJqGf+1
zk2hr!{3@`dG~(|+{$+Ik-)9K7p&jAvqFq@N1c1x@WkUYvAipO`PN;`xV`XXPzYb&&
z0tYf!@=JsNb>RQce@r58kK_C-U&G&MDqg1i@B8}iJNfk)RKY_M+`^=iEXmIBM4_AX
zAi;OlE6kOhr<1tLTPlq-S)kAG+L&ZT1B<Nke{cT3z6-kql4*9|7k>m26F$Z438;^T
zm9uZ@(oA=|yN0z(qe}Ya7_ff%yN1nfRQd=Zf|w*kIELznTyd0?l=dTYc@U0D(*I{w
zJdjNZ>_RF{3W{i7?^mLY$Na4vK7YcLS~IVxs0i{*mm(i*UpNTpMFkg~7#zHOY76|N
z(6~}oR)$PiF|yZfjJOsulboE4D@~5&=^<J9U;g?(mtGVGtl#6jwK7U6NVR8HK_RX)
zg{!ir=2w3HE)e;v*O_kh?)-dl{^QT4?c=r5P@x=gSFfT?Nl$<C0$$nn%GA4d=Img0
zQz+f;@$j@?M$ebQ*kfM%XQ8O`VLgs40tykE$zy)Bvh#KL%sC2&_48ZR$G0TWu>Z64
zKk*@!4|eFHwigGh^L$>fM2j+=m!I!WOgu0Dq|KFCzh22|yI=LS=&p6Vy~wa%^(O0N
z1cSe>(svxrS7?l%uLVFN($Ud9TTlJMfx8I{ljVDYz~f<Kqh}>^x;vi3#y;v3?h{2k
zEG_)ot^W5D2R5ePJ@F*(%{Og2!%ce*K%hM?F79{RaVgLS2EHXG#eMArhY5h%fzEIr
zE}_V<6&OFyfEkd%;?wKCL?)5p+ldUn{#^VNgsHWf=Mmkuy4v2{?79$>Z*rl1kl|si
z+-U9ba85)E4xTFPQI`9EAHY=<zbMT)Hg+ncAaUVscQ<kLfI~M71qKEh0G{<KQ>kdV
z9xmh7rg!*3-?<&0k&yvQ-v&+B;WUDgVUi(3A(xbxs2}&SG-2I65S)TcBI13w$L+bA
zSwEgPBOdG*uCBq{k<F;Y^^cup^&Mon{7MgQZ*1aKil(C2GJ=>Ae8ljX5><-BNUjy_
z(|=<D%qbnD?DS0LkAV0roz3O<!pYk}Cw`v~4=rs}bCJbD`O%6j-pN9Rq_iY1pZDv%
z)yn73u>H~5F{!D|#&^eQX=yM6_!{c!X{|2w>#S&sbWAh%*S#&IuJ%=*qltcaKbux(
z{<M_7(?0~gMub1<gNcCSvJx*(d`x0F6i<WXj1i(b;_o(&Ka6$HF(c9lH=`6c^)zKy
zlr?R`p9jy4lkTxX=E|3n1k=09En>pMnW?iJ>t~Th!9m3k30U6<(l%Fi7$Da8v2rUv
zlk&}Yc`I=2_#&m@zK}DY8w}4KeCSt0LTQ0(YUy2FE>ob!kGWwoEpbUE+P)K*75qu1
zBfo|sD`h6&a!n<+Co1W~1WzedDE3s*Rk$ULoN+!qHN5%9NxK^1Hp+S@-Ph(POnT<X
z`_KVp;O=tMzdh?M`(y{?hj!i7d2-6mB7L(W@S(>Fmc)RDY_gd~3)K$d>paEmi|4zp
zmKJrx={>T`^#J!Mpu%d!>XOo;31+{xT;JT>EEtTC%CMz6pXxWZ0~4Q=v3nI^D`Fnr
z$(vjAi<pdc&X`G=OKb6nxt6K=UPW;sbk2B`oY+g7J}*+vb(=kM0y*N)SE;5aYuC2d
zPFiX1KkW5i)_2(-#MrKhu~*AI`UW?tbgefNS%U$KAGS~*BP!M!Uv-Hw$sp2XNmO6=
zMsC`7V}dw(SDI)rMa(ciWy(}n%nvf64+X^xj#_gy+r2%@IyDuemgC%_l<Hs3VG;$b
zN?&|la)kQ$_#}6X;kdB3-HZ2J-PphKq<NUZ^UM6XbMqpV65XCm8ysQSoz^g_Ajeni
zA~|QCI9F`mW$zQS)RvaKiuuxxf4#uc$iAeo#*4j^za>S286{`96txy4`B82sQ<8{#
z41fNfNm|)I?EXHd{GaZoYbt_2Pep2H!#FlHMb=Hhz`ORTWH12PwB8N@L&@Y{m#_=>
zwG~4a-O+KwxW{GO#xGRKY=HMu#x1g<N=W#ZSCS&J?E=qJ%KJ@xuC+2;@lA#+qMtNa
z?jgTwMv%&)@|6gk>aQg8KMha=Va^x`Po1u4DA%c+26O*}KSRYX2=cC}Fu#`hC(x=y
z8az0%@r>hGX;gb99d0pgcrL3nQkFt9`|DqcLzz15q)bR@F$_#&{UKo`3jaEJ&-cxo
zqkO9$5W)t?DYv(dg8Kdo2PQn&;>)|Qirwt34*dJ7Y>?vfcFD1qVndhEG01wohE23j
z_&iJ~bifeRDF+K-4+<v;D8Dz^dmvyRK{B+e^C4x_dO{L8dv*om#T1>~csQ;AET=o}
zkT2RiGg;06NjauC;$bYrZ0<ju<RluXct%=(NMGH=Ho~XCi9dbWuCE(^A+G?fRLk0>
zMG96D67Y68kp>}Y2?=7UQ6Mip@VSBSWu&H#m&|u!$6KpmngaPw8Yda|5tMjj$_f8q
zmrR=8ZU*4dVl%m1{O8KmY5{E>4zQr0AV6NE)A?-q(~m+Y4kSowFqCQ^U{VE`efo)i
z18AlI>hSRj_e0aYsAS8p!I{ImfZp2S?a>U3fxf8jOrbQ}hUX11vGE3=$1<_D9qjF~
z#B9Ye;(WQ+0BeT3Cy^<St_RkFwUyVAOU7`l@}Jv_pBcI?ma;yesi%MOD#1!F`(>i`
z<>9Pz53|$rVa<gw2pD3Rx;?rO?9V-_Y=1rm=<4(=mzI_^8m+}8Wh=|eGw!=*C-^>S
zn3)ZLyp+D}(tl*HSBCE{2y@@(h7~TWrm?zwY?f(1FYUq3<g(UiB#BHiNv;zR&-4Js
zf*~4gHV_)%;-PD0t)!zCRU;T)G#C@W9Kcwh7+K<HjslfXH_>8lZf;;CdB<$3osnWl
zJ4#E#L9R{t@ws^BpH~1_8o-3^`Lvg;Qm%USm&_()JAezG|E(1P^0dFV$JnCF{^tll
zVqF1bpQwbe;Y8r3f|33|6!ixqu)vQ0C#w5vpCcth9|kHT3bm!3*(T;98OJZ-LTg_J
z5VT#cIshEPKHEb@#@>%x-8P-|>a@)s4h!YltgeGGUN6`8dwa^t%4f^XHz`*GG-|J3
zkkJzpTV2lRXepN(tkMT|)*75(HCTZUSd1>(E$$b5XWMp)5Dtpd5Db;&JR+qzR|KV7
zFH@mUxzFP90ASBc6&j5IpIEl7JO57J0D#p)u+gqH9!pfw9$G-`3d}R091xr6P_aKL
z1Nb2w27Z2Fc-OFLN2mKqhW|dc_!p?@eayzYM|U$f1Rn=Ly7oumM)TaO!r-9cjq{jJ
z=9HJ01H`MkQ@?~OJD!h+6R8izGr3$Zb){ag-eaEt#%eHn6QMtc{&k*6j{|(~Q>`u+
z0F`xS+t-QqhxLeVd>(hCi3Kc3$jHz7)mn<Fe-~H&+f>x~gK(?Wup2tAm{MPVX`Mxg
z;KEKBC6{XE@wj*2z4)-@$aDe7Vqq~x2dX~n49s%cZsv5ppT*vc^8t#v8-xG@3cXgV
zv6Yh19KrefjvykhoV+HS7ao^24LaAwE3EtdVQOk(fldB$_4I&usjUjOIjN|b!NAWx
zHejTx15ofAMOV@E6UW6zJbOPbtK6T+{s6Fl-C1_ll(e*c0ek%b1RYQw6N7H-mw#{F
zc(Z=I+*0ke6G`Lo_}2S8Lf;u!D4WUYw9(-u=VQuZ`3|7A`z#ToLk>HEfn~3k`$R~O
zL)P6FS)XTACO~Qycsm{Fnl}BjUw0`0G2s?KC!HaqXCF|WeFJcrdw>GxpXB|=o#>Cd
zN+0Q;?4si7JUwuVV=0W_2VYkKYB=m}vUc<84f9gSe;9KF!kk*?lobF>>hDw^?+L#w
zx~gZ8YF2X5`9f#Jc^<gq#k*lQ@WrNfCFhhP!xfCQrmoKLa+8R)o^?9tOLDY!y9dwB
ztiptB=DZL8$M*oJty6>#>aT+X;jdSxOSTHNOZGYIqFP^9m4c0v*2yoO@CLT#0iy5Y
z1WE<nb);KV8FoEDLo{Rg>>d!MyFFb(mH)|;juk_44Up&3laxu)w<jp5a^X~kj+Fg{
zlZAYYi$e*90FeJQo@u*HMW`@EqWJH$W^8(3Li#Bo$-odADhu08Y;}$UN!*v7iVy<t
zl(?8r-Eh;py^s*PfTG&Sm(fQ*NdU$_15lq*axf0BBC!AG8%mgkG^xgg|M{|PZzS0O
zv5yfH>a+Oqvb@@w`bLZGODGp<W!<mq->nx}>{pBEBgq?H6YY&_-cU&k;n()uU#*{?
z#+1u)tm&mPo#%IJTOSUuc7SKLeDa%s$?&V?#X{%X8X%l}eDkEBpitdpaPqcb5Dibj
z2v!vNEvf!4t#^OUnC85O`0e>F;I4Z?mg|f~jGJyB$%PnrJ374I+zo972dc&>W#}jE
z^oNIst73abp7ziJn+^E!gU2Y(S;}t$I^oZ$JD=w&t0qaJE#L#HolfS7x*m|cIdT?U
z7j<0LoHVyFskyQ^BB9u;>J3g!*#AV%Nzye3!oUqWSlEYwkp0oh0{KJ|$FvhDsCN!X
z2?Nv-(aQaA!DausP=F~jfz}=G&-v?3Mj_a@+v(qWoc#T{`+bFY1A)M0_D}od$-|R%
z(>bS%mbQ+t@RKy(8|9XIqse5>A0+mE4Af{Yg!SMkjBPR2^R^vli13l&3HF;&hl#Ay
z+fZSd^UjNPelM`mXa<$&`MlJY6W_^W*M_b(P^i56KxiFjyfFe`P~z(&AcoDX-wUlS
z^js5vnPTv>c`F$AviJ$GPGW;(yIV_-?UrjTcTme$LloHzNcjah???}2zgvz0T(pVf
zAQRK{t&GTHyY0=}>j57DppyvDPuq18k+^a=L{P|PaXTK$WmqNAYLMUT0V?D}3DMwx
znM`agG<5W>m;jXt075U}_7}-7%B(%#pn9>+KLU;`KM)AG{vfy8rk$U#703x#B$lS5
zTOp{`IgKi?K{rorPEOr7e&~{$ho*#5PwWM^?CN6S<dTtF^QH`{<;tBK2M<uX9;W=k
z!(#gj>tMZ6+|2xH1T*Gl>uS)?BVEBTC9{~>7~W6_c!Tu5JIx5yNpy_tb(=!ts|r&4
zo3dCf6KG1WvwyNl7k7wG4msX#XT-+~03A;t_YAiok>VpGdRJ8)COW~IeYrgfz-+bT
z?Y*qiOQW&oAnl!wo+AkH=m)8CK4f2FZ1J7U%l;191A>vTi|OLVvV&2t`v+{lO+URz
zv1y4g8sF)E>KcCqbD?|?gpG2VW`02u^%3<Wfeek)*VoU1LPKQ*rE)o(0;}Tm=&_=z
zz-T)@0;;tE6^|Pp6t}f(V|k=;SS#L*oD10Na03*lYQ2mP$6hJv66eZ3DwF~57Zwre
z=R;^W>ypW`(4Z@`RQlz?ADvq4WEG>yzW9{~)0Tva4yH|Ndgvwp8ES173-e!7o2s7l
zwg+Iy)tw9m2j2}&@)!I5oi<UGlYrO+pH6$nnFuyDlk(Xi(aY-XRyh}QTme$6@+62Z
zqN?^@hM@<W2@EQC3WoWRNA5D}#m$BXrX&_pFD$5f@^*=l>|`*{l;BtL;B{G&qf&cR
zprk{R7%=dM-;2sWUH|jN$w7h!q!`gKW=_qZXwS!v<zvr;bDUIC@68pi|6!idz^X$*
z=4G2+h-lA|ol~QQ^Z(@r|622@Xy3nrYZ0qwn(2CB#pb`OUjG|Z3xR`$H@R3*<E2nd
z*6+#v`>-QA7?kI##$GV+Ati9u{W9sBzUr`muTLwk6<dm}t~uC(M%{Gc@VQ_u<Arf8
zw#98|Gd?{Mzp{_bjQIOQj$qKOm9=H5QHQ1O6y5XjNx=2=^;9^l(&YLFCEc6M1bE1$
zf)(5XsVGGFtiI)D31M1HPP12Qm_tkA7Ao_>qa(nN?B?nR3P#Jl^@d~}o24f%klp#B
z?I<2kDFhu&eYy=~5=lm!BT)(x56&8{LYrX?q)OOgVB}#^?3DUl1TTq_6qF?=OSad;
z!bVLVANU?zFqe3E<<3tvJ0~$z7@K?jti*#3%0t6?cr6VsubP|;$^%dppzz?83Jsqy
zKAWZ3&O8<}%7;mPtsJ&J8Fu1vx97>xnZ6sudP5s3WOO$y#@CYSTviODqX(ClCx?R#
zfe9QI6Q|5E$%VRoob>&xzo;k@{3I+Dji^*ck<64^<gWe}2N#$nky=<13e!&7!<74)
z2-cE9hlc~Lfa^>})>9{r{TA1T<6at)E^(Y}2;x_T#iOnL`E5`B(9Bf5J2&Ka{9s{;
zp`ocr2--|yVBs{0(fqZd%5Nxj6j*8WQsw9c5<&15bxLyCJ2A>3n?t2H7M2{zVc&#>
z9(nnXM87Icf%w6|mNq(UoESYGCE%p0rE!e8dRihAl8A@N(1W%bbVp2jeho4*i95bk
zuicJzcU`tbr|K&*D{+!5EPcUf@d~XbMy2Q~`g!$=l>Z359Ld3KkK$@-l;`dEZtY`Y
z%rKA)Kk+wb5f<Tb1}yYISMd@S*`o{aXwTE#Dk7pn*KF(UfNeb!2Oz1D&;5b|{gTle
z*!v8@$dEV$gG$mPT|22D?BkmTR`}E87E?7*?msgJp!&KE&2Pb~4!vac<AErYi%R#*
zayr$p_E%ncO}KFD9?m+=_!t>ejAth8d2SAVH14}JsXp{zK}S8Qcl=P~w{A_NSR2>o
zkv$1<@p@I-dREr26N965slC&ieMWoGghSu8<)arCs`#5CiQ*y`eFk+|hU2=t3<e#g
z&AtZ=gMl&N!}n%BJ8QFYDRGQBK8oHZUtXRRv;03}$6rL8qfLe!$oBb9z8E~(vZZxN
zVF=-QjDd62Mu*i(S>>zCX_MW8whNDDo2YW($cY1IrkR<UbHvgSGA>B_?RLaX$K!S*
z5bQK76js5?hWBXiOpAFkn7XjbpEj5m!H#EUWm$hCRi2-XYty;V&i1^2>hN;o15zi$
zy5pA%9iO*)N`>*4E!KsEgoLVGL?Le0AwT?|K%%IC-5YoIP2b$Yf-+^y(*Eg{RY@r|
zHI+Osx2{|h0bRY+>b7_0TMffc(taUjEZPu!Y@R(uvLF9jp8m^>A6i0e`ZcBLuHQeZ
z*B&&8tm+M^si|?*)&hbW^UUMiH)}5IK)n05v-Z%&_7?CXPZaSBr{he26j0^+;xfwk
z>FLSmeI~%C?Et@Q4AMfU(^~7tkEz9K1LoQqJOoi~>+|J$3mHx~d3pKiVEB^}i4mDB
z7D`rDr@mpOi;kOb`>z}C&kMM0)*pNH*3CQPt^1zuOQng_F6YZne@SETHC_H<dw-Y*
zxOu0GY&JgK9MqanKzNNLjqMD`VlnDJhNEv_VxS`&^7(?%XtdPTlpg!T(iNAK#CC9I
zM%m=w&WIKJ*HF*nQ;H?x|HE@v2l?*$rR6p4<E#rDX^@<|ma0Yu3rAoG)Le8NtY@z|
zGV{`QzKq!b3N<PU8V(=ehyY!CdjKT-@6yt?(`#xPe<hQ4AT!YPI_fhs42gPu!zNHp
zNS*+MND%@48i#AO63P+_<;wMDhl2^5=1((^ZEg<8S@!Qw&^?0+3i3&GYMw8dE>`Px
zS8osNJV0ElQlZHT6ptOoGwn}%!zQ@jW=o2)B%Je)7b-uZKQ1Vu-%fPWFr$vfThECj
zgS<!fr5`ptY`lLkqICv6i)cB*qR!|2&M4*omxsv=^u2A{Y;<}H(MFiQxakSw2!_Lx
zQ&nxUT$<)^;N`oUoiQGNt+MI#p3!!P`OFI>b~7?uR@3?7dwY8uwCb*7(cZVi7L{9L
z#I=n}X8>h&WqC31gkR8Aw4XKweU`I3efpthvY#d#e41YHqXz_$b2ls7-Z_I``FL!7
zw5rbcHLS%YB<Q}<Jl?nVfkVN2zW98!-qwsD_0JT_W_R#rKL8n9)9$pSj>lURu+5Jy
zIuGnyArbHsYPq147>!%3-QK^S&=&os`ez5D7Z<ET{$W0pYyVkSp!>)qBQ`z#<<THo
z%XO-6B$*bM$#rn!<7y(2x|4v-T2sl0tS&tOJBhukYj(|gVem&Drg!V*Ua~eZN4)gI
z-kukWhqAOZt2URCk`jI;)Wy9oAA|nvSGb#|;m0;!qyeIXq;wm6AjtoDda_VCv60>B
z@jw@{W;a3bQRVaT4&+8q;D6dZ?nl#D<I%0L@FTg5S0AXA+t{tr7EU<!Q?6Vm5b@ZN
z@;c~MF%5co06sD$f`9DD&wf9NCriZ_TqnF9>hrOvU9Bo=H+(@EcAhpo9ailI*6bFv
zD6$;4f#P)MW1M8=`xa};)&L-mMgp(B4`h^IILs9%@OdtSH|i}8k{u52k5(?OsVns>
zu=cA2=KoTp=#7`b;jl+@c5gHNtHbckdU3MMg&yv}3+Oz|m8o=kzwtip?ocWeu6iG2
zHf;cHfSZ~TdYv}cD<u^juOp*mgEqdK^4iO0pk%}8Ha*0CunVl)%NbabfDb^L%07>Y
zj*;o|{s|2dF<aHn0TIF<AtbZUMco_>{a@`Pqz7oRR%XX!RyA9KKiNUH3I?~iY`XqX
zJN0pfwIFI{!UdW~WOCVZT3Yau`<N!^jRQT?U#o5+XA|Jlzwy1CGFvCVwBY{kyzGuh
znfScYuaZSd^C_$y@8V1CQeY-84;gl*bvA(l51AmY{^DcqeqeJTT-gj^7mHf@n6`$7
zp!T4x*}(6$nZgcVo6-6Ot&o?fKK<a=`Ig+Pb5*^wU;frEjpb5h!n$P$|9VDwsG#CA
zcHES-^fpG|g@ULqn*ps3T@`Bg$Wf04{6DcjBT@QrkYzC>tBM2%4K*jEr3Ht;C5I-&
z6~~pQbyv5?Z4eL!E8;;Q89cdsv+bUaZbK76FEXUPLzVU2Ef)^(?7EPZmaQ!LO`au2
zTHrn1-@9e!(PCuubsHZws^IfK!rmMOWZyjz-=+}ESadjztXqksOG^Y-R;d<7S_G~N
z&K0)dpf_Q}$Tl-lsZ7a9$Dz|62>m@p<OfwVN+p?pe6P%?E}}3Gi+BYM8ckI4FH|Kf
zvx2Hz3q3<Frg6&M(rR4Yvl9CPo12>IQ)rpVoY0bv$|8vp|McWJH%ODT+p(iy8m^>s
ztW#unF3xn)HA=|;vPYl&21$HNT4+Zb1Th{4la<XB|LKzcs-~$6@*_XYPySf=SM?qZ
z?1w*pQPZ%H_?mt$R_2KU8Z2~R(hsSu80`;~<X(s%*{{4;c)u6awd=jP8|`47;!#r(
z%%5eP8!U4Psajx>*cqavPfnGxH$GWS3af?l>YO~>4QSPSYrGno(h0A&9%k_z*Y5FX
zspw#qBhH&eMo}d7bXAJX_bF97{@}6jkzleBW5Gg&6A_w4eu0KKIXOl#edDa43WJ=|
z3Y$-6%{vl4iBM_Dap;YhKPdV^cn`|%Zoyv`4we1Un<pJn!;V!^xdyiVV<F4^JaQ5$
zdoIN7c@8+!V4=wm6E*Z|ri}a3n>?pm^^+6nN~cG8!uvAsx&>bf&J@Bd_ocF%K{gg1
z*>;RR#75DbIU!EZxr0W>8OMyKhyiIrI?jzGgx?a?Nf4YE1W9HlhEvu4^?XVehxIxd
zaQU0fcMDKCM%?j9La3dz=q+2qUR7gj8luab@~LjW(W5M2T8kr#L=k48!0()p>>~WW
z%$W8n!@6H8b&BDV(n=#n+pre2U^ziwO5E2fh<bfNTh(VG@DF7()3)i-QNbilT>9E@
z7us@M0#+aC>v|cW&y0yPuCHGyRJ%x5ow&2Pe;2EM!ZI7M@!9x?hxo}&Ujw)CJ*WiB
zm+gW~*U8L3BgAqS3)47JP&(nu&-khSPBBfjiImhOwRR}DCGv9kV&a8&bctnn<#S(~
zTO*V8l(kK;MNv?WZrsIb5)U0U7cffIx`|i^;nR1O>|<l)3Fo~L&wuGx03?}}m2_Rc
zD{-a`IHT^}$NXpBI%<BEZCxsA=*1=QEoCR3e*)bd1oYFUk__uiQsmt=n1J6G^%^{p
z*11XB0f8MXkjcb|4*oAwQ6OGyQNj}=a?%thSveFsbslORl{MUQXK*cL{`fjzb-YA#
zy3*g46{LsS$IRMk)x2m@vG)}#Duf%yizl=Wn9Wc5T23k?D3C5cy;@e7Fl&_WgKG$>
zaF*SxpzW!kp(`gUvzM8#*3)%jdK)ug#nU#RY1kV}h+NcJdoj6R(=R0%vQC+WdiM~(
zT_Qe@^99)?kbtN?K)u-)L+T_Kz(c&b83nO;iAxLHNvl;1962|y9zl*2!+B)J%J7b4
z%#UQOFT^d4#HH#>{F;fejAm;u8@G^PP{-K-`=R}o*X#;6)qV#WY4I&!X?CzV;LZ<B
zCusg4Ir*{7BH(vg&WaL2AS4-CntY^lT5AYL6hgLjXEH}mf++*pH%FY?r%=7CDZWws
zvCD?aivZ$UU(WJ&pvZ6Bz*|vPSzL_tx^iGaxXnu-;_9qq6g?Li3AfFIAHBHEg2WGp
z4F(_s7%tM%aM)ec-8ny(m6ke!em}uRNs%&*=>adBlTgPIM{(?yDVo`{kB#vIU4~{r
ziD9aqPr9<P8(7`0Fqovl*F8#8+OO19Xtgl1x))hkU&|6$)G(S<!@VWHB$Ix%cnmLX
zmeJK<CBwB!Ei`<-(!1wH#S4&;!slf)GmRSpjn8X#%W{hogaWU2M(lNP!>;&*;*SuZ
zbibCB<I?WHCfzxn8h<vlaX?M|FoWE5G|75_m8R`M9Jm1YAteqenMPUC$YBs#aiBWT
zg&H67C7Zjvh-}0fsh#5ioiyu3!pkG9+avUR8TT>_Y9rD~G^Qc$xMq$cU3uSfHKox@
z#m@S>k$6zq@{SV)1bCBlHBX4CSBraER(oC4K504$Gi3!JI<wUdDRanooKLhvfq;{)
zFPoIGc6M{QMdrwW6hw$uFMR#U^RZ`<_FH@dZOg>PN*kYt(zuAV@0TEt`-C(4vJ%JV
z)$g4uEbS}V4CJ&#ZgT#~xV{g~97CpKECu`<A<OPj4G&yIZja)WBurywKZU4ct~YPg
zb0<^~z0uZnQ_K$U&qN}$?9ZQ{$A0tNK3Qb8Ha0)(xl87p&V6qrQ0_X>Zt0bWzuGj2
zVpK;RGb4w(^@^z<F!lJ@i4VE%C(ys3e(|)t%yK7Ss_-m}7LZ!j&i|H{iz-P?welNn
zh`%d4Hn!RO?KueO?%Z=6MB?)-pE(1NkVF+FSmLateuINM_pMc%w+o-D%ah-oSz_s9
zkd47PTzEe-mzJR6zI=ld>9AOkX&m8kUTq=`Svx=^1VMHIazkrbCnY6!<H8>Oq_iK@
zA@GTb==Jq7o;$DJ1iM)QKZGn_Oq`|v8w*f#AK0|PF-IaY1ZhTI3B%r5s>#)8KNg;L
z*2*nB&R^kbjZ2^c{*IV7lg^tJ-0g75i^=D|coorE%dwWg)V+RCmoSBCjOQb>43TH-
zMMQ$aglDrbRvyTO2zmxCnR#kuHY7ZU+gYsorggVpasIaVUJBuE#fXK;<D~!V5pI}7
z3O1a*g1%_(Dy$SWitZzftz|5MWpQ~Ye|HPh5YNT?*-mvIDM@D<muWh#ESpZWYv-Z6
z)GjQSRB8N}p3VEAuV0wjxne^p<G@J?wopdFfa!qX{Ny$M=ec@w^<0?GrE705-}?C-
z3^~y2>kriqkiqp{6-Fh`=DJ6#6^C0FU_QQ9F9Y-S%|@iTb8@cLUF3e0tWlZJ>NNc`
zkG}HRC0Qwv>~WPi3maDbWCsvh;h9n~!ODzv)%$R-Ou0szK5*y{uyIU@3tn=UmcVxV
z@qBfVFDu4KmKOk({nA?)wG|}e<j4x<$#^sW!Z<VNZ|Qjc{!4%EwKPig@Y)L<#%Xb1
zi0wDB;}#ip)^k5^woB{$)&lccMfF7G&aWxc3!9;|6c$5?Wr+31fHN<-pH;2n7CS*3
zm;HywX`-Ay?w!-u_FeuPDAvO^E267J+t{h80KUY1|EQ=?D)stGl;G_ywlf-s^|)0y
zLIxNuhdXm~b3-}-NO`u-8sDMpI^TYB$?%*xhV*pU_4JRHkIv54y?eQT95f&3xF7Y&
z@?|p{Zu-`e%i;sgqPh}=&aBQHm5cSNr?z&Fi13J)`y*z<$*wQ0&Ifz@KeHJ?<Kbmk
zXLB1G8ft1#yb&#AWhaWi(hnF<_&Ieh9Sh@3K%YbyZ2z<fJnX2~W?gB&INSb|t?1dg
zlz4#Hf~DEhIrb{aa<%GDxsQ4k{UMyQwFzcm`~9@9mbUkB@(B;Mcp#g&tE4BvUUPc0
ztVX6e_hmOLNlO1Q#vI-I2I^^uwOGN2lK^!2r}MVevDs+{^(*T|GTm#H<<Ri57VEqD
z6o&x~W6IqTyp^T9_GTK<K(<^6a%0xIXF~f$-_gKF(*VZ+DSV-E7AN0B+;i~yQ<P^Y
zo^4dutoe-V%KRJGhC264ywgqN?nSA~LbyxAl0J(DW9kUoZ>+SDogApntCEAtd;LP2
zhfm;6swQu|=M0ka%e|m^mAqU2xU#KyqBx&-uiY*SI083bi9Y|PBcKCgiKp0fQa$}j
zRYH|{^@d6CJEN7!M8QhBnW1cl%Ah*j7$sO~YAr(W<Q0|sPvDQE;D~1fNzAp5CJvlu
zPkhfU^dWW~k4svS0W6Qs2xgh4ju$lpTzt>A{mX3A?2E1~Wu*c>EYKD^OA}}DrIQom
zL|U&($0?UNjd0Js?!#cEabKG{SJnv3=6fZr+t=k4?T#zqRtI5^TPJ0ZAYD?za_%a(
z05{+Ifo8KEpH;7Gjw94qqYRL-(Arqs6kpJ2`QA{jV_UhSh1P`t#5WEO$|C?xpUG^a
zoz3gD;eIoAoOTQpay~YpFnM2-`J!=Mq$=0jGwR2IzOAO)++3ZAk?`KN(MZPlvWEB7
zh$LOh<sI948^BVvp8ftOrP@H2<0)U~bvv1_>F}4!hTF=?m8Qd)6Ekm$wt^PWpxqn-
zxCQ^*KG0&E0M#c=AS<?R95H1<$HdfIpr@mI-#@7wXTK?r`}NCiXJE&5rq#t}YP;IG
zm&^{)D>(ObV%LYe%+f8lQn4)!9s>^-%lxMNb6#3#Ty(|#<ZyNXE~BFFdWLA49w+hb
zKJQXG1y0D~%j)9UsD_8m@><*<GWQsEj}*jU($Wc#?28ocNKak2+|61x2@Fe@y|514
z8tW>t3vx4Q%r7nmO1oX<S5hAyF}{}Wq>Muh43pZsFlzgwBTTYwc@KMl<A{+;(M!2m
zU5(18R`Lra;pYk;$HX-36uoY!c&W|KdU-CN(@9Lk40mo=q%o$pvANoG7_29$+qWs%
zNTPT8p*WSXTqBTj@VFbXQnx{Z)i%YRbC828+kAU}<Fm}%&XsJN^@mN6^v3|QsIM%6
zr*5u;aSNFAN54z0efT{o#H%NjUNL!Rdni<P|3R>+XAQ3U2Cftqyd6OdzwgV}U1_>B
zZ3{0jxV834mzKA{KpM&ZxzzacV~4)Me7}riMDLyo*WNN8787U>jOeCs&hABz>1II=
zDznB={??BzL%L*H_q$rMCl+2E_lqO=d8t2JuEr;`JaDu;!=)J}4K^8dC@k-toE5Hj
zXYCsA0fO4mc;8Gm1dJ~Bn+y(8JGOO)4KJ(agDyM}aBm-TiED~%Z~N)|c+n^<M$g46
zGRb7i<+`K9WE}t+;5?p{kt-OY<<k?T<8!w+6i;qsWCSq$TD&i8OsYSueemmj@94AS
zxL<@hnYXD@v$Br%c$v2Xii<$k5|_bN7r+Eg$H~vb=P)4h-cJ73YGqh|IGjR#c{3}@
zT(4D;&DeaZ@i*aySJ%=CVwTa<Ba&YB=>mx(rJzvYRvT<kq>wPY<l1%!yakJlBmQE{
zc&JewA(*B4{h_D%;+5{8ASm&~{G`n|V9vOvXT{YQc{6)7ltSU%!Zjw{kbt~PP*yzw
zDLOiD$aKp=zPZ!>$6YYC(Foj~6GhR_{>-$H)N^g_>tl9#XrNtqzmE%B)v5m2H&K(F
zsohdFsuNVvXIv*qPrh^u&*Ne+Gm}7@P`$Mt16Ff1<;&8K8!;7*$~}`lKWEsf(-0U-
zgnv0|Vg!lnkh4=xU;~<M8dfNr!axOo#@^3;yQR?SaZ)MCMjs@OTY*r<Gi1newcPJb
z?wMUD$i1*UCI1D7?nbngr>V7fx_a3nG*Mg%LxUl9=tn_BBVBffIez|T!q$M^U<hxV
zz|S*{>GExo2wy@aP=XCr{`a|0Gd|DPJj}^n%4!<1gN}w8ajCA5D^i+yptx$O>rKB%
zS9$!Nd(ZECx6H79aA1lW9CY2q@bdZbZj1)lFw8@0mRU4*sx;*H>iFTZAa*ph)_nrN
zfm{U@P7r|wBFz0`m6{F;_sp`Go@ocP<&q4cyaYZ@XI|1pYl{an%kWVv-MAk)g%lRc
zisT{OIWbR&yG=8RT<xAqEz74<_Z?mpYfl0_bx>ZPEl)oE3@hWNq+^pYa{Y{*UQlmE
zc781$z*9s{ftj2zp2q5M+GOw-?H#vLjf-(KKG%5}{lVSILiWJTt^&CiKokp<uX=Jn
zUEIIEzCG6L+$UwW=jnXB??iJL1MGkUkp!LBFBfdqtF~8U$@{yzr;F8@-`TCNJjHi7
zjP$9J<>M4YBJrBtZVCZBs=_!Iq99l34uc@8gruZx5Szwm;vPDHDl`f=2YzbjBCbWi
zCR~ZnQ@WlEVN9Nz9EVs}2wsXk!^*~O7?;b-$ptnlkgY3(akTrtSbR|&3T*1W;xyR?
zIA~27l3vOVlz*qGR2ygHeGqEU=VJ+rop=lS|J*B*uMhWioe5{Fblqc0)l)b-$8~;v
zS$d5g0h=Qa7^5mIz%g~lku04`uT-iS(@DtWT`+Zlw6WL2-Y@1l;ifJH7@stz$5K2k
zujO!f#-FeDw?flY4{H)*6aGB@xt^$WdvD;N?$i|qiyzagUUZ!$x<#`7JmO`aQbBJq
zN@4HrF`w;+J&!A$$hxQV`{h0&Y9s1|%hERby~=sM`iC{M=>EBG7vv^f>bKK1_ninA
z9<GP_nq#KCIqT}>r!IjR*kq$K)9R!8bCSR&hvYz)MR)ZrNLqYPaC{ZR5h_E;vTxG#
z8p8p6jBZ$nyybLR(5ta#y+8K^C{7LPzXqfhY+0|d-XVHyj9%@|;A+5s6KlXS3rRWP
zObTiPz~z8lt6NTyhODjRZ5nGnIIFo>1%2Q!+mVJ;;AZ7{(=ZHe?fvq6aqS9#j8v4=
z?uG^kqOh6o3$s7)Ty7da9y&)V+pcG4WNutn8O#n}Hgg4;r<tdxXM*8z=R18qY&zcE
zpRSGA+aqx}YVyl1o1F1HPKAm&Zj^y&PRP^Dwu-}fyY~WvZW-v>3{l9oJcsaUR_XE<
zblzT%R1X8wK!3nbrU&l~3D4Wz@6PAjTQf3BE4kdT9z-!ojjUFhh|cB6MAqLqH*B1F
zU1ZPGjo!^+4bFuaxuSkI_|*%e87#HtrHZEg&Im~bHUHhXSrHfH<n%stgo@@D@pXNS
zIuG5{y(2{b-qrnM6c?bRKVP;mtn1G(^t`M4gHG9_(>F$Kp+h4b?aktle%1XIadwnW
zqh>4-2=j$7P>h^u*!W*qsE(Y8yI@7sHMF!B=(W8zWeK>o)iliXw=k{tM90VqGjUc3
zy*Gumbr88&!mv^I+kUm%(7Zsrj4v6G|5>I)AMJo2P7oVF*7XfUguB?I;QP3Mr++8n
zvf)Ztvup^1(s385Gb-)}_l)Ul$KJ-57n+J?;e8BS4zTGrWN!5|Yw-ARJ3@_%M1aOa
z>=?fjoG#VvMbf>L;!1_@ciW?;Uwa;8OSEtWpE(Hd6w4;K($;C{c+{ll-iJ5V%*Rlw
zcx%(Y8yf0)QEO$^!G^i|LvD;{=F3ZJXS1=ZILS{k)1|k<VCJoM_Ji&k+R6BsYBWnn
z|B&AZhH#$1hvnsFg16^l@1b!mn7VB-)Xxc2TAu*Eb7CMt8BISy?@wymYFiPY6F=ee
z1RLx*?<ti2c$%8RPX|3xKBc3jH75V<*A)#0R@<62g&R$S^6F#L&R%f#lJY^8h0Cjl
z!I?}vBMetr{;cRVOgB&Pscmo>V$1jl`_US*&#CcHmye)E*tHnO?$_anh5UW&z2~E!
zMZ7dxy*L8){-A3Qu|j?iELO5WIoTn!eWR7+-PZmXt0T*TE{<_Enm`<GB^|S!?!u<L
z;^f}4S#LR0!^MVyykP5*;&dyMNzta-*YTbEMM}5AMM;+9z3svK#j$agCi4FSH9^Y0
z!EpCjd@r<E&uF?JSJSU@Ro^i6&N(aRCRmdo@z_w>-Sj-2o?s%Y%81FSnCII^xsj&n
z>GA!6+Tlrq{x|%NNvUHwC0>o&JL!G_Uin$$uY2Emc;EZ<^j4!ycE6pJW3y_>kyaLc
ze$Zt%I-VQ+i=X$p5J_1)UO%zh@6)wLY;vlO9Z#m{C^fd-G^~pe;40)BADH5zq8>eZ
z*c}dh({WXom-H?bF|-j0-G`$mB_#<T2sTU8B11{JE{T%~Vafgpgk~B;VUOG0Ei2Qi
zZDJKe#SSeh4aLiw$N1B-r8n+)swU{P86BeaLWPcOn0}nxy@8s+_I@9ZyzjV_5%O!m
zkuAkhk(&fI+m(0q_J3`x*<mrK0{#)E?4dx@v#_YBJLtw`>$Rb`{<!B9%`3W{Tp(1V
z3b%j&Ud#AM(1*|Z{)?ZybdSqfX-iHgvI~1-3IkX3)RYhCGwh?=r%oI^4p$9P#8|e#
zwE%xtMvFebPHdI6t8mXHPyKRR&PH2mmh@lhNU?Zm4}-YN93@S61!^(+zB=sI8+)8f
zA+h?a6~;Q!BCV#8MmpAbx?%gjXOt{pD;>>9*JW>fZXaf^Vn1TJ$-DYq_2iIWQG8j*
zR_hU^7wJFguMSDv+v?*UT1)hzorB1xVHqRkWeK3yOhP3L+lIB1kT8b~=)VMD>R9nL
zcXlB|3<m){cRh?GLjvN%1a!%m2*kRNyUyDGTQKK_9gnm5mfdLYLf$4Do%@nI22Z;Z
zfB8G5-<_B|WQ3zX6jOaajo?E8$V_R#IqLiBt><m|bB=qT!;;>$1GdK2uV?uhmi?bu
z`mMugJw0ulh-V6ONH-Ee9F9&^5Omy8fOOi|@BDP?oh;I7ccikdeV3!bIL+orDXlDe
zW9cWS4n1~g&w<>NluEUJq?$$$;yN+GVAbvoXZ+*(eZ{#B?c+wr_0w6m!&Rome0cBJ
zj5c>&U{>j(RHNh6)G-V!F~0KKVj6X!oe1EIf{#i~p!V!d4}Mv`!e&mRTNMvjmmb`c
zc-6DZ>XOPeTipAv>2?Mu6qVmDEmsFKr?Z0AM$*S!F9@pTK}=&%&}+iY#t1InNWrB{
zsIZ=dfV8iN>LId~L)X@dOw?YAX&-l<7HMmLA^+pw?0Q~vYc_W|YuDSFlJNbG#ce()
zTRPD(Xmrv*=!G!9#qb9-y>eX~py>e<*1n`_<Hg(l##Xq=<}?=Q?BZfIW>4`j0<oIS
zyt1YA-Djmu5RUMQyEo!<n13Z}N6CNYy>aWS_Zw^uo5hB^bCh(&xMJFENgkj3t)(AN
z8Zu#cufdX7L`m@u6Z|eu&I_6`+p_F6=REq88fUd5Db4Hm9Tv9X#J%G^H18ue?5s~T
z&MjYx!ybcn#oZ%#!!T=zxlEP*>dBk#UtP1+VNTPR9Ee~p9aF_KF6OxzZ5wK~u`Ty?
z-Ol7=ODs-vl8;hn5%>0jD@vnr`a>o>tS;b?+M`S$c9(<X#$roD{Muj4|MYjerm`W9
zT<S5Z0A>jSo6+hHdS+EDKQU>@NJoG9BzOGH5LMOdqQXelP7lsPE|+fmJ2S(QO(|@X
z5ml(tkHZJ($G<LL!Ag{8rX9mTj+mpWd+CfDMDjK?Py71qTVJ`~n3T$vI?==0DHu%*
zcV{et6ZSjHJ~?Cf@k4qJz!EPeOR3}V5CB-_Fkovx^B*^OST*0C6oICX9C4@V;qGGL
zaD(~FvSq2pq*FAzJCUmO53l9fr<N56%-Gt`+5EuT+8wa=K;xn@hp9PI$$2sH4l*0<
zn`*ajbmv{$?JQ<b#+=<<x{w@_xX0wDgh;h?6zGZ7cL@_fVeRi0&;QNtX$GT>&u7tN
zYY%DGM4sDZQ<5j>{n3smmR4`ZNbJ>iT@8^@!S*2_?JirKd#>8{Xqm4v)sz}-tX<Ye
z+F5bCe{j$1d=$d;&Nl%%_x9CRNrxbyO&Abe)_Y4o`K`v<Ek;uWs9Q)D5eY)zD3!xv
z<NbHxleetiy^&XVK-(lFBKnU`CAdPt+IJV_Uhw$MKA+oRiv(+rG?X;Gzm9j4kq7?|
zIWPaW@C$O_*~i~K(peov`b3|fXb#o|F52?fHPzb$Ymb`mt0B!GhHdolc5}w8l5c;O
z{Un!QCiuID$V7XP8@Me+RK&e4C<z(f0UV)$wx*0bIk#9y#Js$E^DlS3z}$VC!Nis~
z(OFA|;LyqxQ%beJ>Sx(c=Xr`KIqS?sXKACqRMM}#!e9N<?5FcR1!<OacfBvFZ0(^K
z(up%!)@XFxn)AxM^6xRlG1VbdK!w|m0AO<PURj>K_NOo3%VwxHlZ90m+xVtwdqxqF
zq*R`OKgs6sdEJ*k^XuZOQrxm}@`;G@qfiOM9(K{HbvrM9@|N<7B8MX-nwuW$j5U!J
z6KucPHFbW)TH1>@w;Hr}?7oGgGuNNAH)TJ)xN@Bx51D9W?V@r#^>B9r7IXTWg>xUt
zeTT3y!6+kzM7$gwA?|!FWmYAJHjA_cBsBkeBqiCELZahuVe+wliGXy7CkX*g^%p~!
zwiYrzD4HZJA1U>OB@a72C|Q#eSq$7}DUAFjris*15y7U@?2cLLtN3a5GtQvPVYIR6
zp5~YkrPXiX?&kDt=bm5gdY-)-;qI6aqO`bCTr7HUxdG~}yI)*YwK3J2#SkuPS-S+1
z4?!4RcxV6L&S&>{3h;at>kp`-{Rq&PW4A7;E@S0Kzt@>!PZk@aM)CA7I%~Jzo1C1!
zzcA<8=WnCNIA<%%Yx`TCeJ^n|5>(;;Ui#y<oDE4SnTPAw-dZ6d@M0BBU*}6T+M$>?
z?R*w{jWW8o26@ZZ=s6)_7=izt_rY7mUt7#6#6;!S^@cjY(8NfC1+PqwzvR6?tMof=
z25E_Jxt6harQO6G!phR@Y>CQ3F>(QQ7%(KBs>=WZ5M{AIyS79Ozmno}6&bE_5F>dr
zl6qKbK%NEN89E`x3Nz%zYLb$96VFOAgi%9s4m~+akVk`zA;5tE3%z&m-i?GbC#5C1
zUKo^1ZL$C|o>WqU)TXHsWu{d8vUoh(Ke2#4@hA+Hk&<!$%OhbmSg0l*GCN#*?Z%|2
z9ejtj1$_<Q%N&-Bxn;{9)<)r&5aMqX9$MvyhhaSO<^6pA$L|z<Ww&Pe>-+#4@r)v_
zkPZCo23xVW?B?ueQ4V+KHja2M@vV@)4%SW`fA_{;a`tXXOY7$JxQL1J=I4%Obdi+S
z{o6I)Jov#Al%I7B<GZCITRYjl{(v9$!!Ap+mwaqb>&`~Gy#6AaQHZw4Xr}3%K~IJ`
zJ=dLg+wPap&um3CYzx8p5JB1Wm^s)Fdtv3ehxbiqzgoUx(49uPv4)!y!(561PdWcx
zdtTe^-p{wzI5X9?Z#hW1Z$N?L?#s)|&CN|tPKFsnY6-}lm?V`alC{{`L8+>$imU9A
z1pnqXL5x#~cxq}Ys-VcQXIM1~Nk|x~je(qmXdoj=lru6iNRIH{z3j+nL<wR95Fm-w
zYDE>1s3jh47OU0AHmkg$Z8jn|ZQN)>yWO6%dpBy)CRuoCX(<8ZIZ#f4MSJ^vq#{f)
zWM%o4Wv;BOtf{G~t*xb|$dfPfQsxj(K+Bh7ZgML74D;x|Sn%27`)8VrcFY*j{}=;5
z9Sue!93OoNiQm_3KQ(#e5PNUfTQu7XTfS?$<_c4hnDe#1cIQvCpY`BJXs|HPf!BH0
zl%}1zQc8otyvvnG6_}_hZ{v3AII6{ENB8Qt(;xldiR7$4F0Y$jF(we9mln(5*c=Nt
zFFkkcse^m;$Ne4C`(bw7F;Vx!EF{Bn@ww9PvzjfN^0r_5!X0%c@g9%xx?DV*2Q3E~
zF<MB|`|JJ5=G67oo7jo(q?A#z<Ppo@F!7D<<TMM8g_t><0oM&Xp2+p&Cz+CXX~qP4
zG(C%FB$<+nJq1O9njdyM1Kz?Mr|5s<%YKR9)|Z29N9PL`@Y<~Ov<36$Kl;yqe)j37
z&p-DcSS&qwVPPRQcrt_9LaB*lb5mI9vZYJ83eBx3FDEeLgAcN^v$L`?kw=?k>ZK(m
z&~E7UteG>DQ&LF#?9)%>@81u}e(u?4bNB8gP+nf1nV$CgtFLa}v?)2sfxVr3o{X@6
zlMw>N#l;#qw?q1Cs;gn%CbOAKFTeESbN~6z%P&s*=IgKDfA78W@-hYq<z;0VX{nTr
ztXX5eq_`MnPZse0l+;u-7v$%olK?f6<%hMGm5H<zo8bh)C@0Kucu(J9CO^E)+nHM1
zBh$Rgz5iePJ|rm)Cp;T5@fcHDS_;?pG?T*<sQF9YyR`uqqwv_8w$je#iljLGwOBQ%
zKKM}XJC(lD3{x^+qGN@%0|e^}nZ(vi=BM&MUR#^Zt;=57#7DWoIFe0x7`nvA7K345
zS-~IQdn_R-EgIHqZ*OhHy;@)YyEh-EOJ{>my86TJy4zcX*psJk2Pm^f)_?!z!#+=~
z#U#AWVyGs3hNtf`nA0B2eH+UwHR1+{q4IZOQF-bm&Hcx|>8onCT20BZ^^KZlW|}h2
z?$b*bzFG7YNJ6%v|L$#Lztj$kI~ws4NlQuj<kL^!+<$%Kk-t6saNoXtH>_VjZ|)Zs
zt7Xx`g^+K%&Hm<_Z(x$gClaEMVSDC`8SrxMg9q=wzk9dtSj69b=bc^II~_?$FTeQW
zcZ(LmwwEqh^5V3qH{5U|1AzJ8eC>2OyLIa}bLNMqop$=`ufO)yS6>bsJOq<D7VomM
za!C2&#ouM`$euN8=JI9BHgDYY<-B<e4|?|M^}_SdZ``mUBQtaGfc_tS{PBwA%OCys
z<4&h*&z_uMAefnzxnlV;82sR&L-*w5K>go+_nqa-mm{`n<;wNz*9{&#_?f4lqO?Yn
zY3R^lxW-`Yhokd>wXh(cVFQNt%8ClUA#fi60vhND+K6@2hcJdL?mV=(mvHOfv*)#M
zD^@$qsdR{uw!Jh(D3UQW6OKJLQ_?PHPIpVXwo(}VxZw1W%qH%1(b>U!c;~%Svf$C&
zcatoc*xF+aGd9!3*`4Lgstf#;*LR=Hnn>IX()lOuS}ej90y^6NwzvMaV$<T3luS>+
z8*{kPOPejW{K6cI)qcjPlbBe^RLcm%6p!kdB)~X_r9Y?6ecfbFX7CgFTGIO-WN{Z(
zmPqBoeajTA6r;V$S5_KyUfu0<V#NI%;jadfDsL3&@zjg`^;XqvzhloU?)re;V8voB
z-UBgm(8Q1yhtc8<y0?1@uFgCq)s)2cBT;U2mwb}nh*{ieFKJ`z-o3}(y?drjoqFnN
zr|sL9_s-jIL7Fj#uU@r!(4fK03iy7-3aialR8)vq_Kxj2dvdC(tFefmHF@&L(W9Px
z{0V2R^BZj7UwyfI_pY<gIs4;}W{({=?yR#WV{s>!tFHdxrcIk5^e3M@Y329dXJ%#*
zc<q%}xLRFZwRY`V%;7t>Z(p!rJ}x)iyLVr{eA$_kC(oWW>;3oMUAtyA*?l~FHhPK*
z3nw0Te81kkuD|w27hZHR#sge;_}#d1!=i=X?%K68Cnsm)hK=W)fBxs6etO#Jr*Bxl
z0p(k_Ze_gTtgWRY@)o6b*!ZzIk^A=T+u-ro>CuA$9s%uE?u714<{dS^7^i__e&yQt
zOBW{?ZG>??iJH>2wIGz)NSAG}JX`Qtj;BC8+tIonPFt(g`Eq~;P^{PfC|_DwqXqw{
z7+hOTtm95KjJ7$IYd$Pl1Z*r7+WFwcd=B`TK+~7*SpDY08P>G!Fu9mx?XnH%u@h`b
zPtJXPe|e$JY-N@Am~Wd-t^g3Rq-I5J<-g~=l3+6P_K&?DUn4DiUSopOyTuFUSF8cE
z7<_Sca!WT+k5vw5NTQ$0|ESzsnq*9(w~QgyE-S<x%a`F4bNber9WND$g+ckujs>|%
zbz?80i;|Tf001BWNkl<Z9j-D|PI9%%$_gya*xLVa_uVNesraj$bkfPkpKzkpW}Px+
z%8<cB&OGz1;^LzH`}TX>o~*2H=bd+6NpTT;H#H@d?{1Y<m08`oU3|%<R;z8q$dOQL
zqtOHfHyRB#lM(CtG2_RVm6rbZ<(DtI<dVF7c|(Q_898bc$syuM2K;^;>^&YYO!|~l
zPCem-6Gx93OBPIX-IuoygFVB8Aw!2y+FreS!_oH_7S8_oleu5au{#`$D11JD-@g5D
z>GAvgxWW$|HuRjylZTBMG3C4|i~&4u_hpw|#+4mAc34cpnvNbS3qMDG^q4U)_^QfE
zvgRh%;^_sDX`uM+Z~qP_Y=2gVk%Gq<UpEv?Eu7=@S0o$lg2%_s;9IXcW%ktj(#)xQ
zoqJv_`jU7oukrCD>vfE50KO|t6mONx-(0he^&eRjUk>0Sn^9+LgS2CNb1*YC=zhL%
zPO!m-q}babfR~T?-#&UiAt<&GmtEo^(nRHD?5w<f%F7EM`%Fw#R7*o1vX!Jy)Dv@F
z-IKq|WVRkD)*ktHVuQUVA>rY?_o#J@jzA9CUJ(?~R*Fmbs$%u*@)Ze2yXG}~q}o4%
z)zHc<^cn3h70%0c?;{vJyS*MxMcYT*A*^JUo}O{R4=%jwipw)H(lJz@aN>!ZH*JJl
z_wCcSLYu)^T3S+GR?ei)0Rsn+B!7QCPT{!F5VK{=mTRxOuB^0#7r>~|qcFqo-@m_K
z|9(*U{QUfF**l5BmuB+WXAc`bY}D{!7hLdz*|TQiMMJ9o1Nx5}Hx5HM)^|uVBLrMo
z@QH`47Zel>7&z$q8*e0!!h(V^W5?pgar)_}4;?!6FMs~?nl-EY^y%BLU*8@*dhFi4
z+voG*hts=HZ!%3wP1|2k*sEu+f`USbJL3mRTTxK~GpD8$5<3mW7J~}Aok7UNiN_5d
zG6a)6k$BM{5R3e^y?2bXuzp>!W)2n$qk~sqOg_X~wJEw_>PE-w#oz4q6c889i(9p~
zr6Mjbi5lkisReWB{&)q(aMO$XmJQME-_>lH!G|O9i9Q~zFA;BaT_LM?V_#pi?fZG_
z7Fd(heL;WBcXt-s+si)PTe1(MJF`^vnyNq;0<0usx7f;SD&Af8DYh$agV=raxoO$W
zBgvflUDbwfDppfdUhHA@Ri`=vnw?I}LVmUQYmdJw#psApI~`S^=`~YbN`ZUdTg3~A
z(I#s}Z|k?QgH0^0sMH(mkO3ZD7&9hzyhP+eF_2~^hBAc|I!l(U@`6zuKbG|LbeJ*>
z7=oLVvm4j&kt0VjClyn7{{aKGZrQ?eFui*BX7LsTYHMm!(^7GZ=Qk}a9pz-iFHYp-
zvTNr~oK;4R9xbM^rlc@W6l&h5Z(saXI4Cnpp!=-%0x#dWb0=908#at`k|`5OH*elF
zWXMoRc~Majd>v<Zto6Nn_ZD^0w&c(XP=jWS{e&4m;L1N{%ox&2Kp1<->9)k6)?j2;
zHZ!Z!5Qf&b5$I;I<%>kOtPHC*5w=-@Xo$oWn1!?`$<MQ&ey!ls6iatH!DuMh;go?7
z2-TjV$A|vzkNtj#9{6Z1T9FS2fwrX8ok8Cy`tqi2kEYnVvx@&=d|zryo}DhkHx{R_
z;?i!Xe=_DTWX4;H1qV7k*VxQJZgGFje}4br;@P&;OnfIIZw@_z$ne#LTRPybeemi#
z{(j9LSSb>2dIa;2rK}`4|C#&7?Qi`x(PS|jJMGIPx0ENCI65QoqW%e9ZQfKT++?)7
zHPKw_uez$+=`%+^gt3OL*<z_Zj$m0?Oa|}vWz}0Q-12Z$(3Na-MCabvZG;4-$LpTi
zO+##bzB}fzKGts0-{(UtOUuide+L0>mSnb%xPug0<VuKGo#Cv|Yu1FZTP?LNL31VN
zPESkq`2&*XB98#rLAasUkX_=_(o%!LItBooq6dNwGiF5>mPwatB`HS$(hQZyDT6Tp
zVsLbFPqJB^9u|Lu&x`e#btT9%V8B>jQ&THTg7H2r$>H>P$&`d7r!Xd?q1Nf5@N!EL
zug@zBfG~bItVlzqc;@JMQFvm=3qp@tphR9vepsxXlE(ybmyhvg=brPoJe2P(OED$0
zJj>w>SEzW`9yF-kXsPy99+xt5{<wdpY4hcye9lUjASTB%jNGPddf?m2wW;O|vExz<
zx=88h@&0B%CN>UBGbVjD`k~X)j?vai5^iAX2tz=uqG&MgD%>;ffs1{@^d1jHhg$eN
zt`Yr)uYKfWht+{Mh?=Du*6y6j0ULJdQ~&m(Wm}h99I2h?Pk2O#JC!0Iz810!_4*0V
zj!qgxjbe1RM$`6+U<_Z^<*V?XoL3*udpFsV6(4hf==N)UWv`65`{%uW09?9FDuU2O
zL>1&ja?93<d;45vD48@r!-GZTH3K{r?!w{{VmM&8@ZF-~5*)$dxX^L9G7HOakkI9F
zLWq$mE-qn#NG_2CJs8VT#VU=&AV#?fVE>i|^)ejZOG=28`VlTDE~%}p;S@0rT?uJf
zw6Ub5lt|<`^?E${Ma3i`7nvNVoucAm3dSiuGcLDF7C;DSUlI@~DJh|lXdse<0F`2R
z0H@~*16Fw=by}~9#O)8%O>TEQw_<g^yU=cOum-k{OpI2W^0OU-&6KjHX2+81E!2X0
zjwd-rtJ6uv7G0b61gxsr@on{Ht0^TG=O=}Mqj|bB?}}9>Dn6}P$yN4(?L<-%mVHc}
zN-yyDmVf4{slebGQ)O?Zu!#vK%Z`Ga&(_XI$fu^LHU||xQAB^edC8i+TYxLpJA7G1
ztn9Eif57=h@i)XM56R|QK0&(07I@3%RIX+&zj!mouy<rb6$MijTmL4`C|eTLHcf}v
zG+X^Hk8I<!)^6fX#h|bpdJUo1Eb}5G$(4gsR&0bf6Ui?oYPl>rUNjuUgbJXCNKzrj
zuT+Z+k-#nENl!p(BVHsondGU=MJnMJB^*RbJ;-2am--JB#)?0WIKtA(7?Pu3*C6$f
zJ4{^;OZb%qlb7QAmql0jr05NL=T)wyucPB*N$fbNGTjr4c_-9)KP&&9>WFXX(fTBJ
zA=<z~?w>M0Dc}Sy*{645c_NZEFKpo(lbA5SYD0y;n%kQ%rxDQ{PfB<k%tqnoI(yZZ
z31&;&_ykig-W&;j??<b@rgjWS)Po;(-)c=S#%VKG&ht8}OlC`bjBMqgoh8veE?*I-
z^V10^V@-I|Yc?z*m)30A?A&WIiuDs4Nm-a|Or0i*HQf!S<VDq+H@WswbopwFsX81~
z*p3kQgA~N#Nr%Q-aCZ)>s|O-c^$ry!5*fEqhb$lW`pVjD<|Yd27VSlDW6dxv1gX*2
zRqM<ARiufRYPGfcZItuX`M$vPVzk8vYnQbagHMBPlPg!;)vD>6yA_z0N=LVL&*t@c
z+YJ_5)EcOoD|>5ka5W4z2?pb`UF(XgN+IrQUC1!J00da7T{Vk$U~^3{X}ipZ$#mvv
zC-%g=y{rc7cF+FhHQT5{JoRZ2X%R+fa>CDostpN27mJ{4%Oy9MQzMc^mnacqwuE4^
z(dPD5d`s1|@kw;{X>GJ49F@eqOYWT*%v6|O62zyK?`yYL`pWG_TWoE?&<f;`66#_z
zI#?oVgEI$7<t-Bqm-YhP>dIa3+-os9FiXpUYq(gfolC=;-DvgrtC!VmrTE&Cpq)q;
zVhtftUg;<E^`<33Pc0uwW3dXYmDy;@Eh|`-Emrkrh|-$m(RWQY{i>XeyGrsBjPW-8
zL%2)?ee<i<)3D0o9(H%j&*@mQmNKy6i?sL<9VQa1r&L5UyBhe=+GwSV#=5ofB^!4=
za*W+qQ9YIoCN#{xU0$<;#TeqoPe$G&)Xr)!B?LW7HTDLdi^k`;i|%Iug?4W)tJxL|
z)LPkRG%j4EB%B!Dv=M3j%G#Z{JThie`*4NbXiQ5bX5qH)6NGPQTpidWaN4Z%x)y81
zUCmGoYh4M*((JWvXO%(t$sFN+v2)*v!lIdITvoH4TJz;4tnNqosdOOO=H9o>y`OKA
z;-hpN9l|Bj=ve98neQvrs@1u7TBjlx6*n%=l6ai7Ll1OnwUzR=ARrAAjK4R!_Avey
zEp&wY@V1n)!!oiiiN^11gujG3!Vr+1_;TKGau4BnYI=DiCz^Rh<@!pf_z`C(VPHqs
zDK=M}C2Bp+jr+6NGPAL7j;=y>xHPo27?#x6uiGoWx7f@UX=CoN!gxx^;u03Ku(EI5
zx1BAw%tm%0jE6~0dK(E}PlE+Fx$1xu>wA2-@9VWYoPh8m(?;o=oO|8=8i&!!HWzI)
z03S}iM<y*5p*l8$wZL1tUE7HX$LHAn<kAu14!35eraamRx*+B)bpOON6O;pmGK|ia
zgxi>%5{nQ5Vn~|jEy?i|Cm5`C3|M1$jM@Z}M9s(1VBO-*tMu21%kjlcn^d@65dsUg
z7u_JnY<N1>#Z}X@372qlx9s<o@Aec@)3|v*wX2O=5{A8TDZ3!2pt3kIe%6yYP+h*U
zus&K&X&!Fw#42wY9U4AB(Z}Q9o?W<yr$X$zq+g4R09=iA((-*3JK|^`&4{!N^h+9R
zHoN!ofn97=6h~iKfr#o@v~TR2c&Ujm$}!Al+D+V{*Q~pel9G~~!jkA>f%aw($-?C&
znS@kYq+sXzeMT6{&id#@MaArXT2PSBdX9(@87ijBtH2RMfDTS>QL)!sTp6fl)jX#1
z#Pq!$23=x(BA)_H2FpHQX}+(FtMM>>KCF_5cUt7D-0Ll2T`25Qz;$@aq9`>qotv3k
z+7oa};%-cUpd9FzqNuE0Q50#0+*+{9?{&wmCyBvWQeB>d8#ixsZJ^Q>NJm|s!8-92
z>@CaRUx~3sxJ$*~i<l*)>gv2}ox7=>vbgKFpzHwsb^dI3euINtob`y(%{?J;i%UH9
z9I;!!_N~q<DL8Aizxn2y`}XBsdg*18&pw+q9x-6ZW!G8b92U-kiR`t+Lh0~t_&VsY
zwW`@<>d~{OT;!3Rl4M`m$l8nO9ZV*3AmC?Jc=llG*|R4vS0dxx5*EF84#O+?;Vjo%
zoKWX8n^FSx0eQQ}$!{V<@Op;eE`K%LeN56I?MZI1I>bpGJ6a7|pJ5EXfaQT&J}-*z
z%kjh81t`MsmS|#SdU1QR#I5$xJl=bo_T3FT3-=~yYs<v)3$FPpi*DCotns?`mhL}!
z*u?1Vg_|#ar^X5}3M-3i+_eb?lQ=oj4?cNzc9!U`-|Z>rR2*YYxqJ#L1GW1wV<pDt
zGO1z|YA_08jeNsJUn8}V^tRRFF4eJbQF==9w5d}I^7DWFo8Nx+*{4wOnKNd*{nlHo
zeZF_^-hch`A1jtG-<Oy7{D1zlZQHiht5!{Y;f0do;z$1a@IU|Y4>nJI>wo`y=k2%I
zAc;lOC1^xK-}CqH-?nuN@p-wq#8*{S=>pM*Z3Iiy**#Rpi>ezS_xZ{bwB6JMdyB7w
zI$~-~sQ2f2#TWB<`krvu4JF!I^x$<~qge1b-VV|9!pX57Zy8y)_`AJ3+-CAY$SunU
zpSXM|#OsWYx_;lj@*+@*-d?!FP1xat+Godo6-92Zn;lyOP;m$k{aGU45&=m#O{qge
zKmviKrkM4S`N|r1#u{#9tx{(Cd}p0UR61r~Y;Co;OZzwGbGJWm`IT3`@Z57>eE#`A
z|Mlqm@4dTZ@nVa`T3ArP2BlV;b?MS2r6r|#d3hNb8H<-JcGfy8D$1ee6OKLhwO3x*
zvSo8tR<~o1J$A&%kr>^v&0}9jEr#|D8`c|5Ms_rnW_Y>`0c`vm-L;1%ihoMAWzNM@
zExNlXE@=CUCPv)`F-1jmRqAMhK(ViqF&k|je~+QoyTC~j%L6rdOvUBkq)B_WF+#X6
zB3e>YAwIi^(M=l@#*kP&E<nslEvXU1Hd)^oDt+e_RT9}!nm)*eH8%Mc?!4@p(|knU
zF^LA*=c|QfLYhDzUm0}P1U+nbDL8JNz456KOUES|D}v72pgYNEk3v4v#;?9@CGN6y
zadh!|Jh;I;_|QYMXU@Fs_rHgETdbBbW5<@2l~$Bjy!7I<is~9@{n_W7!<MDnw{1J`
z{PPD49B4L~2M-y1%BiO!kC7hpJUs#jrR0FYBRqQanC;uP4;V0j7%s^i)p$7MxjLdj
z?Wu*b)zt=F4c^~Jq(?oXm29k0O`!IO<{KlKRco*a?$!uYj1;^L#cZfiqBH3B)%oq>
z17IBT(>4GRE<)EU{o1SDHSxC=q^zwVB)nSc>uac^FuRH=RU+o-J^(>Bz0>2Q=hwoW
z|4@YIAR4Fh+rdy9a5XeNbnZyx*!gujtQ-JA94^rx`iyu<(GkSi6Vc#(ZSVxWZfS8p
zEW|n`aT`0Lwz|s5GUC6EtIQ`KfAsQ;FOD2F3buXP>8JCXm6dtX#TPSU^??Wf^y0K>
zKEJ=XxVUfMzC(u&H5pCEAAf?`V*YN?qP1&Q_v+ni$&$r8cI<$=qZ3ny-Qj@EV|4G+
zx9{lDqlsiLJ7a^!ZuAH|!=2Iq@uAdTUso06qmtGN;XQ2ZSFzD^yQ0n=`<01&4Jv}b
zqP2QFHoe5FCg}BQlQ-h8iXFQl7_l4p43&^ji?c+$_P&CXXvCd5YW@-pc8ZQc7B8uI
z1mtVC+U=Cn8;-<70iB|k2_CscCq<<a6Y2BCrgCI`Bq|y0w+I->(MxTem&L^7Wc@gM
z`l$||5vZE8&gZK0i@PBDnx&EV9-?IJv$(_2ODihx`s3YmznHUm^X5O^bI<VM!)JUj
zy|SWm=+I%m`~B}f`e^palTPW@ty^tP&DgPHetOf*E5BcXxB8EMbnV);Yln{*@%@Sw
z_uPBmS(7JYcc*9!FVfS}{61gbe*Fmd=+Oh~JFktjv^3a!G~#*)Jmc+hFrnU~@4^s;
zxA|e>-B=^H+C8y3B;5&(8*nrN)tppp#x>L^k=vW~ePgo@omFc23ipeLLO7De<ssYO
zS0^Xj$KU<k!A6rn2sa6h)^vK~3)U`{_rl56FNRX&dW6~{C``(oUcU}DLzg7efcMfF
z^0B4CVACb#=-f<k2J_VieKFqWw~x3p8sKhsyIfaaaRvXJ9&cG`>GjuM3(}P}wOHKm
zy#01xT|MqJ#(w>ZOG-~a{q(cXJfqg*#hLx8E3feQ{Nu-tLAb243O!OAv>v`L7n329
zb!qffCfhjp=-hTby0!BFvv^hm2BKGuFE|?eZPSr@Tf`Q8CcVAmy6NSzr?J&EN1(Kt
zyR-I9s_`*70+}A+EX3S&bu=PC@2;%|nP3%*_X|TfF`d`=bh=`M;0mM+&Z<ADr`I18
zjd7%2G0aU@9x{zBul?29TYKG$rjO&}AXXEb^=uz;r;d_s?=LLEG>*HA$!sPJ;l>!x
zFRQ`e^nwEnVXl^zmIeX=E|HL_t8n!HXYV}V<0#I*FX{TJ_hw6S@4a^$jKMa&haP$e
z3GE+92qYna1j3sH2yqB4m=-Y2fa%o+jC=3K-MFf^ldkFg?v6DqcakjGDtG5u`*WI|
zdFGj!=b7@GXP=!d_G%UmVgxAX7e4$ZB_)wXL=q#z;VIR~skJ#eCO$@UYSOOuno>n+
z?eSaRqD0xo_9!)M%1DS|<mxi27gX3({iqc^(xST9Xp1#kJK-wwns`(hG(r%~{0nM#
znyqb!+8QalouV~28BOI*{VSoGcaTExy6A-w+G4V>(zod<%y845b5(m23R0t{cdm%@
zn_Sun#O>4p>grh6SluYDy^3t7mK}33y6U52V^F<`C+%i!L_`{ZXRF3h1kPxSgD)}Z
z%?mZ{H*?Un7`SU4Jvtg6bgkLCcbG988yhPkMJfQDOT^&pPR{_=%ZvoL;06JXF$93@
zB1Ry1Jzf2Dj0A)=A|~1t&&$`s4Nza|I;J*lRH|5}qM{N^v29dBShGz$A{H^Fhjmke
zDt}~2s*5u@w9o0Ot6l=EWPF{9fgk6H)0VbKTf4P(YHg%pSS7SJY9C-SnKTS{f?r}S
zMhFScc#gZ)_it^2-jKiMjZx)IEJ*WD?^F@%GgbMcEbXKM9jnzjbgKkyR8L#cxW3$L
zLp?Ue&X?)%9>o4y=Z~m2w!xX~)c7p4!)$Yes;RD-(DxXJ3L@YV(_BDUL^hD5uK-43
zNl9Hrb!9*%sX&KIAjupbc{}d_sU}+z0%FuH5=ha+648%M>*^BBu~vN&SI^BwpJx&l
z29)I3#3MWQ2pkMpi~IohB-*I?hiFfIBe0b%Z<6?uXbNI6ndk;>A(jSEd$m8xdW=w{
z<xSLc)cN&w4Xb}deGdE>r6EM3BeXcPlP!&3du=!3W<=4XI$s<|qQq#X=kT>kwC`v+
zo^GY`wyy-_I+krs2EFN)2^rVERcW)*G>oFH-=<t^3WY?bb@3Rbr|CKevBa3MO}54Q
zeT?;LrEI$DHPb_uB}uT1xMk|tB_+^XZgPeW+>e|SckJv!FQ?{R&C^|zIVUNd+DRi+
z=+(5nYa~RGo{(a;*tCOXS{vKIkf%9yMq9f}x3#zTgPpp3TN=V;U2AU<hjw`>rnppd
zTvVMmBAv&yM%8(<tcjW*0aw@}8U@@tb{K{3tf3(reM6dOO9#Dqqj+;DY`b|QN~T2~
zObaG^XMGaa2Xdsfv5}@9C0a<KlP%R@a(c8$JkrDhOvl-gJ)2Oywl9siHXcRCM@#OS
z-kI}y^%*JxwGS$_+Z=hRxknSjiI%SEx>HJ4B2GkpufAh%wM7cne6P5!%9GS3%|8PV
z8Qrhl+#w*OuA4oZmMUXSK>tp*#A&8FzgK%Vz11`yP)G;eYG0_JQQmx8hB;K-Bb#YN
zIL0x<c-Dt>D=459S+zoK+M7k_u880mVR)mLTTQXGevkH<k_Z~gj1XExyD}_^xmL~k
zqKq#;bbq~LW?NEoEXiI?_1cRlKct3vh;Gc`3GO;Cd$umNEL!8!?0}&=7~5IiVh__h
zr)!kiDkgz;u0VSf=l3N$6S|~#qO8_h%i5#bZCr*J1vyEXsj*2>oXFgImq6|QN_R4-
z9lv%bsNElB?tnq3O=QvLK90`XUp4A~tl~J6v#UJ|bgM;ofO39Zo7TM(&8hSEava&N
zhhY1f*&&YwxU+=UxHuECniFFP3x`Ne%k^WR!9Z{%S;(t%(pVAZ7cxm1%u}ETNgxBQ
ztKW9y7SdoyR1V<Y$(rKlYiinKrgoG~TNf40NtZEE{@U*LtV|2;K<WyV0RE1>ot>hD
z>O*jn3#@Om@AZ#^`uuM8Y}zWNdpS2dbL116VzhOkS9Z75xMWW9jl2eH1_-|&yK;V-
zwuGBwv}1+Tg#?7^vy;;EQnNYFn+3O3o<wP<wVR`L)Sm90o?8iOujv@n&NRk%m*UN_
z+RUaMc6=-lC?dOxe5|T%X`*=`**dBZ9a+(nwNG|LoBKKQsa05GnPcp=Ia!&Vva>jF
zozq}A{83<Tm&+w^d`(Ra@g9$dfF>Znp8#K76{(QvA6GhZ+Ei{<7OXg$#%i-ABqX@q
zZioefhlAirMgrVY7D;Ryh!K(8hEC6Dc}+qZ4T;KSTT=vji!_s@cyQ)-4~^}1<iS};
zYoq0z>-chrrz^u_yK7I(vAu-#JQpB}XqIc-oIPFbnFaPt62spF5YWQox;5!1isYtb
zb<50)@_8f7@J46mWC_-#zB%13W{bz?rM<@`uL#PFC_Fw7<6%%<9~`B;e&6v=`x<Ju
zMEfhSwP%3ZtDJQ)p!Rk<`SHiv(Y5cvSW}=sYCHbc{g{0i-|@wIj+3GR{lT>{j#^=_
ziJW;~`(|p5-|e&{^mXRZOaP>|u7&5-GT=^A!RVa%`20&R-TV9B@7uR8IVFYD+0AA%
zAU-!MlT?mx&&tezCOJ7JCo@BX;4v`-(lgS@&T){C@$1v$A%61dryqRiuYmP6t5&@?
zZ(de<T4rVj+yMG~KNVuJrV>a_PKFF{&$a<pTtsq9q2Vcft@DI(&BYen5@Q(wdgG(i
zboBa%DxqBMX4Z|iX!BIGX-s@?ktJLQaWfm-5;8fXjZI+vws<*vA(B*&8<;lq{DWh=
zB=RPfGQ9n`Z=h=py+uWh?luVE9%18x)`3Uy0vbi@qM`uqk<_<;tjQMN>8jVBu?#Kf
z7j1QTy?oEKWgsD-NFBAu)T8zs4Yk*H7;2|(+M-tH85Y}(%?WSs$cZkX+9%*G!<;jA
zXm~$oUcNoU<FDbI`-pLnq#+j0r}w$~JM+5gd$!O-U%=Yt^t~30NrrT7ZB2Sg^5g$}
zZ0(x0!-fz4e-Hol@y8zh&0Tkbv%mZ9ySLw+$H!AkOG@U?U$ATE&Q&W{eDKl7fN#M5
zN1uGU@SBC4>CR`E-gs*+pd7HDl$h|hhacXsVMAPe{GI=I$A%5-*R5Uat&5uT>Z^PA
z?#a$b-?C-Pn{(f$C1iYi-n>;SSF!=vylK;WAADf9+u0kyYV+pJ@~HUcG&sa)LV8Wa
z1)QgfNNiMm?-)~@%U`RF<j~%1G*iF&lUq}zzc$I5IwHOYx$xyxllYIMr%xb5W4q_t
zGpl|2Bpwl}XTH`=FP^9v`{+1r&xW(R>G;sekK`6XH>dO)$I&YhcJhX{1NC~6<B})z
z8jh}%%{8FI3W2bz$xY5eP{*^YsYmU#x~;t)wa0Yis;AFt(WfR2323#tMFL_4EU;(s
z6dET|06-*(MeE6a_r!#Lc9Zr=(9m?@Z{~1o>6b^eA(xev{qct%4IMi4&bxm7&qp8K
zx^?S{6)S+?nOT{@Xt4XsFTM1Czxvg(WlOo`<Eh2P#Y>kgE-fp&?6S*uC0d-~001BW
zNkl<Z?b@|t`}PI%=ihzLJ=N8&6)ToM^w)>;@(YFy8wM`7SS_D@`sv$q=Pp~eY{JBe
zue|(nQgSjFYu%c)t5&U?G<h=ImM&Sce#82rqM{{Bmf&);aN#$%-F^oko^UhUtm`a9
zewwwr>cF~+gJp)sb?fKsytZ<yIVPE7Si<)Cl0lH{zj;3Hts0v;sGB{9gizOnq3-Pz
z)R)&ZYtrO|{x2Q;$ZU@FV5jWJHMe!zjiT9qx_p)S_Utk7y<n;V)9`Os>qw`bi$y<m
zVM6Z_Icd53N)B4g*2vhg(>~3n<?{~c)U$tQP5Ty8OBca<8Aa${A&_pF`9t&j?me*M
zm>+1@d&q<kY6qCs)Oj*&X;YH4hb<=lsmmY%PD^B%gV!e~_J8Z}e0Lp=QW0XR!!+ae
zd!tOYlM^-7)6B4bgxrE174sc-?!(0;(`U?h@UMSeym-;;bLNa4H}1@{&RV@{<+$<V
z0rAV0F4?_%*9|w`Fnq)azt5kQnfdu=pY7Sb`=N*b-%oyW$^0+BT=eb2#H7TcqQc6`
z3ZOPVGnrXgaSmIbzI}n+c-`RXo|2Ms`0!zh8!&Jn{U$#zzjvQLHk-XikDf~wFW$Iu
zV@h)JjvYG&4H}HgdwzaFI9uEegC-<{;@zE0Ys!>_0r)xtdctsb)PQ7Zg$CE^{HLdk
z5YK{@xjk4+0;`>sG77b8Pb9*6s;h4viq<x1eh)5EJ)GLf65`9}_37%bCIO~ax7U;C
zOqkktOqAOd)1g+<R#XY*WX(?|I_9*26JYCd*C+?~0P!M_YPa@s+R6RK@Vo`5sbhE^
z#YWiR*B&CacHWPTsq?v}B@RlpB<Y_AR{QlIDWB1yS!bf6CM66=v!%Pd)wq|4Rp3W-
z;dVn4EYW6{ud0u;U}U|qCahQd765mYg^LTWG63}X^S?ajoO8eU;`6eyQv6#|Qc_p0
zSpM;6pM$*P;}h^}|90WRwQJWVBqp(6$BsVl-FMckUY(npi%WW5UfztEr&}!6r1-e>
z^o%EF&BDj#7eD_w&NKVI-#7QoH{;^s!Ss7}?e5a0YfWv<(@#CcD$=`8@7LzMT2)n*
zo}NBv@Zd3H#^QA|WXO=`XFqq~zyUS@njJ-5tt|m<pQ@h>H9cjR#gb5|`MrhxNY;n3
zslr#CX3v_IG!&VsNj$jY909mdQ70u0&UbdM^hL%bUT2PqsrJ`KnH)2dHBSl71Eos`
zH($kwZQ7+{&*U=>5j49-`@No|#ME<#pNfhj%o(7yI;}wJh$t^3ug+78wWdX!HPmjB
zZ=;3;YN!776I%48>67*5D8SHwR)uwDP;A#piT$E{u80{Rngf{6bymtq{d3@<`-HWb
zGi}R&J1?P@RaRYb)m0qu^4e>2ZoT~uAUN-*4j4FK#K=+azCHKud+r@OZfrq8moa0<
z4j3??vZDO5%P*faY4VoMTR#5yqfw(rUw8ct8#io(4<0qJy64_|IY#EoFTS|-_S**z
z9C+IF>1UjE7OpiTM~)ghetc<ZX?$G#jW^wtnVEU$&>@^>etYk|!$u6>uzr1NYAW{l
zb!*qbko^Em0QU`a!%&ZE*@W0Jt<mSVi3tP7#rLZ7R%zzRaG&wC_f*VL-b#jXxB4Sp
zJ4Uu4UaGF>R7>JTspAosCbTeDJ-d6BBEQcy&{=R=(y$O0f5%o&9JMrU;KTt1{oFOx
z5wL`7fRY~I^_<jabg!Ilyq0P;TRK+Ap;@}sVyX4IJEdk%A2^ZI+<kmPwb|JH2x`~P
zYv<(0P(kg;S=+IDtNX@wnW{UuM?imWi_U|Iop*NGs-2s{^A>xxuhtyq4n_5Lx*D4$
z`P|fT2u-)sg(zHX=0J-sEGcb~`o+014u_LD(ChW_x+-s`V*JL-oFX~(MR3FDPJA>E
zSnHzZzV+6JAAXRQmUi8B*LUes;PG-8m!D(cd1=*bv5=80*z%bl0Q7_%b{izH!fnQE
zGI0<jobl3uCt(hbgpBN1=$T*q{yMyFn2wv-U{Spg`Q=>8wA2)v)fyu8X|NjfdpbH+
z$$#yC_vY^&x0+*lF<<z;H%K4iku-;yh!4Sf{GQMI-9II1urRlW^@FpvlQ|AW*ecdk
zZXdDcc03HM(VFPOS5~6yy1kXZ%e&&f{L6S@gN<nTHmB|ME;s{i@p%5{$FqO=<Xw)W
zbew0xahjD<qVirJM>+dH_`hdP8#D<&8Hd#_Q&qqyff`S(-C|p|ea+;*Tvp|(wAmc`
z8Jb3t2Ew3rKi@_@g4*?yA2~xN1pKT(2=*9jh5PWM-G1@Q+;f=okHP<^fd)rnl-uvI
z##o9y<<r*RyS#iuf-S}6bBFK1NA<BLduh#qb2FyC(dTX+y>R44$UbEiP!@#DyP>>#
zg)a%=VBxnIxYJQ#4KD()<06c;n<$KNMzc5ZPy(`vEG{bIHB%~4Q{xi(1f^spZv}sT
zi6NCsB#GKnoQxC!DDltXHyp390PYADcLH0C<&e8%>iT<lMK#`%%z3EjA{=E-x6z03
z!86h)&Fyn9c9&2d#vLwUT-$|d>Z&b&pS}OxBzsnsuO@s|PdBdgmgm{CKkxTIH%AWL
znB}~~g&eXKV6dR;%9^U)cb)ou(SDoN4&n*f+8(uHw8c|hIidf!1^4`qj?GG>JwR7i
zLlQvsybQp$?I-`b<&_0*Seyw^VfAQ;_DGzD+IbvX<xSGQjmlS+I`X`BV?C)f=609g
zooz{2H{@R_mP8t&w(CX_8N<?4_sI8e-M0OSur}4z+v)rsU(Ne{@0*@7BE;=<V#)>X
zHVxd5<#_?qA6S_SNG-zr#^^Bw<V6IioqAwOPfJgyXK1HDny{g38AV5dSkGq?xrpbI
zF(NFIL@vTIQc@cGT)2h9W7)9An6XV}Sd)L6aWbnNFXrnT)}|)$&{PD&n8Rc$eKk>L
z$4%KYb<~dOC0sXt?I2`CB(U1e*)uJc#0sB_^F|P3I~3jOMI3oyqt1V6+C)%0hYWz@
zTfLM>V#s{!_4(rLvHy44)lserCSm6DFl`_}jpYzC&s{UGqX|4cP^i5LRib)4WFWZp
z)T^w{1dsP9mKuTDqd@Hip!QA`A%oiWHu7#FXNXnYk#iQP9fP7m?M<nkFO=!~^UKnw
z42<jH_Ez8|8K!eSD;1Nx$6az}%IH&*HQz`Y63W_V+%=&ZnRG0`U1n}hfO>G@6VHqf
z)NW1|MH6ZgpriAYg<4&kdFqISJ|0g67${5^aONPdr}UDviKprBCNhwlHBdrLCGB3H
z;qkq0%skcSDYb^Jr@IE+z12OO`M=CQ6ZwVs4BqY<Zn!|KEF|1C^|D^w231#;;S?UG
z*qvp_=c=4B<fNHHPQqaZKahqStYYgWfQayPAJu)xC1XzKWFdXL)TjOUFJObOV1U{a
zkDzwH$<>ixSu)m+?rMv+lzS_B#C5wNYbHs}gGNRkCtMh?%VT!V0{(f{jHqZcZ}VfS
z3p?yig|Ru7a;$<S;kKMJF+%CSks)oTYv%0QPDolu?+PG=@%YE-4ZnhTbL<^CXY<Yq
z$IFD>E}S7@kG7O~E0Sy(cjTOlGB_|NWPRO2r>}r_#do-F%Q-8@nOEv5bHrGiIlqKV
zE9yVG6diqQ_L*6>RGynFb9-~Nqv2h?hi$Pwc;T<2JZ`q@;b^GVj7L6?*%7C;LY&;+
zoW`H<G{QFd$8&E<PR{bU@sVo)FleY9K~;m=Q#D(AtWQJj=1^Jg>8{!vS$_9l@~?<9
zJHrlrc2pk}!~B}8X(uNQ@p&sb;ysiN)eTCC3Tu9zp7LumPMMrE7@7vUZ-Y5IE|Qt5
zIfaLQLz>fy@TCbSv$giLF)He!^vRc|O^EVV1KqUGM~BJ9e60acW^iB4|K*%LG`<I-
z$MG>ts^7uYWcovZT^u=o=yWklpm?V<jFv#L<oJBm(~^eWlye5s6rH()#Tq8XizlUL
z51)4Nqzh__58AEvaND*;X-^2N%71hE4FmFe*LvLAa|5OVbu}pgM1-JR?%K|2xxYK>
z=TYujVghD-iP{r1)ZRJNP&*yf5o4>aExI`4<nz)disptL0BurBZIy^&j&G%#qRoHk
z{F69qQkAcYIWvp~K2^2HSSsA5-D11m)#-f1#7nmk;})xcOI!8(=J5@f2Ah|ugQ)2A
z7~LuS&-qstIP+ZIN;6&)VY2=qXdW84+{KfVN8Fx!4z2L`z1ntMUCodHJ2c_-cwN?M
z=cP|}xr-2H81-Fno6F})v8MdJ%QZ9?bGv%d(hRj9AwkjF*UF-z{(k9iGqSr>RF>jI
zp}*YOd>$P}$@*<ES!yavhxZ-*$MbKa9^wc{h2D;;5+NeH#mXa>Tc=+=eZ(|RWhrl|
zN%Uq!?NI`?S7U1rl}VLO%d^2!PkFW@=dT4<(_ZZ>a^YiaI;w)&nt&Jgc_=+Taljqf
zXYs{4>^0g3I2=}dx+qRERX#pJ5c9{pOY`knR9<`yx~+xQKKw&vjI~c|RVl|Q0Y)<J
zZh7|1|5xzS=okwJjDX!ke<U-EZPC_pPg$xh<8NKAahU8i+KE@{Q|B${4j^6alhM&J
zEP?s41!e9MOj&XXZvmrrCuP^+<~6%I--G#A^o#962WB~M_gaK^fjq$F&CcxP%%`rt
zpL5XNK9AKD2F~vEPYX8V+G=}j;_U1HiVis7vY8K~!&_mkS9@Lc+FPnmUGtap^v*S|
zN<@lawRmEyz1Z48?d5pLfZDC0f+(n=HO5rSk>qure|EXPvprLLC$)Kg2(2f)@aDuO
zM_6b6kay`R$s^pJa!g&J|Ck-s>l+M?d@kn*ic2z1LJc$|lJ;z&GR(regP%yXcSKtO
zaOb5>_-*cae2UD+k*HB2y$fd;<IP;<=L-YT|0uY6D6h$D$B8J^-r`=%fjoShqpKrl
zR@WO%F}5;qH5)m^+hRuTm_f|fUT?*X*)y-pnt|Pg_Z-@>{0J#Z6C+3QM%A4;?38;i
zxWiL=SUdeICZr#o(=*K`vvxF!+x7I-5A^NSlapjP-!SwI4I$NO7~UXtj&;vX$$CNG
z{NQV3F`IpOwg;p3(3lJabTdVnYTd<mb-L)hbm1fu(#MH}l+s0IG}Y@4GuUgM>V9*9
zvvajaJ7FdSt17F+=*ByrN>;mzCnOIOPg=z1u|uP8%9<Wmz;x%Yf887g%-USdp;R=@
zmjIuXaylIxklFk!9ZpF%@M|C0h&d@~@Fv&yt1C8e&MQ4bUk*dAhcJWlfDE_>bh|h2
z(rmp2P#s&lG>l7dcM0yWae})C2=4Cg?hqhsLU7mM65QS0g1ZKHx4=K=es!zvd)~iR
z6-CviHnV2d%zCD~pKe{(sd>_8X<MNx5|)wb@}O$1+(U!ONm-hg2+7UopNfwd*T*))
zpHVY|RnO>!sLgN7I|5Md3r-kl(@amiR=OW-qjwTJO}R-|>TLe<Oon0mp^44@DE;Yy
z1=qV0FaDtCcECIvINFljt++xe`?bkb)jZlIiZ6>9op$`PWmzlZCZUi_LYJgHm@p*=
zQ?Sp-77fKL?D(i~347EQEi0S*s+6>88YT57#b8&9<S{>~iNE$@HNOz;(L%w;$q>zN
zcp5Ky0=1~iQ<tDt(1e<o+;vvg=HcHACdLEwx!(jo#E0_|2HnNUetB5u2w>7)!m(CO
zK%UQR$)AlC8L;Z{CT8tGp?YBZHK@9{_kr_-Y~nc)DCzLOcay9Y@weGZx8!6CxH!)@
zP9$wEkJt3y2p8N|0<$B7E5A$B%W=KmY}*Ket0p+1jf<FNLp|mt!R`5W82wv-M4I}x
zwDN|TP8%1;wC4x`?Qv_Qu+K)@kZq`2y){~z>Nc=#s-rb9(IX!DkOFLR`CJs%Z&*Ji
z`c2`D177LLV{vd|v(jxag4jd4<&>IfWl>Dw*ADdJWb-{)%4T^~Y>Vu2_V=G;N9XYF
zyS^x_H*+j{Z{BiK?WqJ=@+N|~5MQa)PRT#n#MayhRNr5g6o^*cy(w0V<V`%~+0zQ4
zHq_f|fYjOhZhUk-r5(_G_lX9go%}opm&9fb`Z5iJl`6QN?l!szuotszc7HE7vfDtP
z55cZAfY7ma?|cBadLKC#KRrEjcXv6t4-h28RkYR#yq5LQB5AYEffPt7LuVGpFn`(*
zAN>__ZF=pLTecC_wBH~O+l?lP0#FmqG81PuH5}G;p0Z|%mHZA<HxDBecyjLvJ+IW4
zIdabPI#LGN8n@T;a&<%3YY5^Zzu)P$XA5&#%Y;|$pZxwa1JZy1#d3+k;OF@myOcZO
zp(-A}7;J79Yd1LlwfQdiv9ZbS>#%rq7$R8&R@=PC{dDQ(sa})&s!cWjmjOy@?0U3G
zBQ$Fc-O}Q6t9P8)Uw#@7=UbGyy!T<rbbXcFhbiz(T2)F!yfthqcjmDdf~BYtj4P(7
zIKC+5v3!Jc4)o=MoC=%2EVWcc(pHLT=iL1;w|HeN9z~t?+g5&WGQ2J5AM8T!<%O;f
z^iPh-w~r*7$$Hg2IMPs|?kRHP7X4tS;Z{XtG9Gepw#*G-+TGm+;`0pr-9JmJyI*W{
z7zCa*G&et1R4`q(&K|*})6&q;P*E90HSu#+q16@?6zMSGri>+JW}Z6n2EWZwVi(<6
z$W^Wn|4>+J870s3Ih}M?aX2M7DEzLi(cx-3AeF(F&7;}=(a5i`3uKa}w|2f`>pJOE
zba1BDM%qdrdQ#)*WE`{|7kx>%r|UK!Fr`U7);_bpgs)3y<T<f2>N~rnZ-Zv+lCk*U
znYN%7dMt_bT_1{p76HF1N~`TAb9*-Vbh+O9<b$pq=Dj`mibQC{RLy1O)N5cak+|LB
znd`k{dl;#-xsh>zqzi^K2kUR#82Bxr+-{=^jp<6a;`4@284~1topE%{B{4o)nu=`b
z!F>zuQ1T>a_!A9r-s%-&IS!vuRS!0lxPcu$=3+;&psmAIzD^*@ru(*2BP!Wlu164j
zNyoT;qK#tK>dU#TY$(^fwC$wJws|p@@>6pVKe_-ncVm71?YZG*ga1pT=Vm~LWz4(p
zQ=!9ptL4ESn`C@qcJ@D_C&4yP=*>Xi2S=d2K^m2;(PiG|+QQNj%TQ0vtYNwPYTC0o
zM7M^q=>uccBHs7ztj3cieSTyjnF7-X=T%!I&E(4MRfW%I$fc+pU7)X}*|TQlm+CJa
z^Pc<q*IG>(ksy&K4V87o2^fqzkq@T<a@Web;IrA^f7WPHvy2{4*9uKB%$^6+s#f%Q
zDeZetIxapp(Wur`-#8;*ox>^&os(L|3OYVo>wdehT5hHrwei$B%jBL_Nf78j%^To1
zVJu^O5<7m+@*UgNT$ct%;C-1mcHh%DQC{Kj=t>!Kn8l13%*Y~3W~!>Zp-SKN`XEg}
zQt01!!t2QP#CAC)lXI(c(N@!7JFS>^zc4M3st-N%9Bm8(H{ec$se7q%H2THUIfNQg
zRUdxx345Xxu~{r>k@TE&^-tx7XRP9>;mHsm!>e)|u_)*967%_EUja33$IWD0j{p6#
zFsXk%aDp!ZKv`Z-Z;js-=&Y+;-6RcYE-Sm9LR;(dT?G0;(S%-ZXLE1*6Zd@2JAs}*
z{qASsjfV*4j3x#CJGC{7>S>OB-Jf`psIhDf%}B5avxN{&kK>s++?_0+_M_u*#&;3-
zc}epd-i?YR{;JUPUzkkqb+xVgX&ywERE9WI@>>)fhfj@%^}qR(WC_vh#`I7wV8&V(
z{mp5OoW!-PO?fKo*eKKGH@w^=Z5l|=nnUN;JK;8THr-^YZkye2cDfy3DJg-q?R4>7
zN34nBEv$d<w(R?=m^GS+Lsq|(`QG{bwwYOIzldYw7~T2725-sVPOMAl`x=_OMxrk#
z1bpkskKkAkep3v)A+@1aTf=Pllt&lW!YS}-=&sJH;2uf1HTf<y*{+%Zw@cktZqqhF
z9AV$~m#pav%A0ZNwmoA?o0HD*5|7V&qmrFa@!-`o*Qwo^n4!t_UX%4!fE$(nR(G(&
z(o!4tIPcjUfTL}Zs;U^&09vHe%v1d~kL@nhPU(Q|=YJ9<IL)tJr{0<>>g(IviHiw|
zcUW5=O@f3RI4u6gye*t5Y)>hQ<X$>NoG0!SqCEUDyrMy)t1K<#g6G>LF%*B!;ci@c
z`z>GEH~qb#p<=(gyP4GRHgK!;lpt|DL-s>!Lmb>AGS*J`Q}|H=-tGI?Qi13nE_hx}
z!G(ejv^k-&Vsd1mlGMd`IU6+UjLfNr)*G^w;3SKQ4)whI#u-5*zF&Jw>&EXX(dT}5
zjkLcL*hf*%AVqGxY3#R7Xf7M+U*Uh{lYjq|S6>_2_UuV?JFw2G7kEvr>}1wf+we|a
zs)2G9AY4SCb^Y-S7W$2y#o5SuB0woICyOKQtiY#|*nZ2@p1D#m)$W`BuY;<$nL9Z9
zt%yoj*K(WEq%_3p-o_XR$9Uug++|_IB!7#Bwy=ZM64Jn=dzFqu(|tND#(<XMxn0-4
zH1DI{{_oSv*?D9_dCMz#Q7~@vk*Gw1>R&Aln%k)Q2j=Hma{>cAzQ`Q|A*4>J%lGS^
z`fcv|HGVDgCfb*OUbiWwQknMwapkfdcg4jo8%==cGB%zWNYVRZpkkn_>N;YcvhAp<
zt{&c`K<Uow{IhRm$3ZQ_B6LQ$d{F8&WUdC@ABS<2XNwKX@q4Jk%OTB)-zu0Ag=9ez
z<X@*w_mHT(V4pP^`0K!4kT^?bOCyWcXilv>LPgN>sg7@~vCtr%dj#7w%dqp;pz1l>
z&~<e@rIm~g<@_w}0;1e@uu@Ca=ozyx@H}GdIRC`wO(#3PbzE4lq3H=B{<_{Xq_z3t
ze(b$*Y3<7>zhGw|rJ!dA<$$$9aBR<Wc^4BrVe&`5B&jgsvGss;>UH^sM_`Skjj<y{
z_s=3}ZpA_eERi*qubSF-=DVHxsD1p^#Xl$If`zEAdb((SpaU|3#|=5Sw>0YngERL7
zG-yNnMP1Eh;e9yXy&8s<A^H2$InX)@Uo-<Z-ohzIMkZ=PLnT=wN2|6QU8LqITm3`y
z$&<+x|F5a+kqpi8r)G%yb(b4cQ2jhfZ()q0?ivy7x!Q;KWFV6|ghk)$<#t~44UdS(
za{w^WPE1h}{DYlRZgCV(4aA6N^IHG@W<D0Ye_-epH(&z0uz3me$Nkdp6Xo0;jIq?Y
zST4sizK0l9qS2a)q*m}>3ti2J=CvnPs_oB7;qL6JGs?1E+&I?Hwo+|hhV<G+I9nKS
zQrJXR(XA)&)5ufW+>M75-rT(>s<m_>PSsMITkhydx4FZgXwRG4&0ON3ww}J-%WGSg
zBw}o`DgK&f((pa6w390~ds@R`GIuxTL&811VM-g_X55R+A`uxw^QVb)35HHAyFHzb
z!f(daFd}D!B303HQA(Xwx8vC@f*NP*eohy-sAz+T*^&tQ)u`6;{*3w|ME3#YzUu0w
zZTV(y?^kt>uYo*@9perSyXE34OoEka=_a!!Fm6MLXW^2dOC@>2+9B2Uyleg@k1hO{
zdwlyzNBw!**+`FC-dNZ2*9NZhUIA$qN06Y_r7E0I_z{_nGIW<pQiBE*BkQaXe%5Ai
zjXtX!k)i&9u3k&&f~s|&C3E_Pt2NrHE{3=*hmf?2^Z?tzZk)Qht{D%1!0gjbvG3Y%
z*2W-C2Js=Q0n7#{{v8`sr`UgR?tBOECy1tXhXW&m%O)rF2v)p<5v|IVntK?h(4JhD
z$?*PLR8ne%pi^MWY!z>cTKTH~C8nH)nQOTy8g$CAX%y~0USJ<7TY0G==)Cn;`o62J
z%EvKrnZVKobL8;1P>UzAh8Bnf0>{1WvwlMp`{>0v$>Q#>HCI+8VQr?RTo2qN1pGdf
z4}4~n7;Vae9H+Jsc&~q67B!O{MO5&&*}@R!$)@Z+8>~$Bn3ZHhuzr;CF8^|x)-{~{
z6n#3Y$}B7K1>Rr9nkyB*_BU$jH_!<5^uQrwDMQBHQFN>yXPeXeJ)LFyEP;|bUyQ_Q
zVXU{>H+PuaAbJuFt|W7n^K?>u_zm~xJ58{#wAX;ukWdJnj$;D)7cta{Q8t=}3(FJn
zc*0JV$9ZvIL&GwZSNt}<?7S5?=&tnO9J8@U@B3Rrvz#<*#XP-MnCOr%{`{Vpil?nN
z$bVQEHZKo4TsN2vi2pq3Fkd~gT=%Q{y5Bvb3oOqtk$}_4IAW%BF-*U8Q21Z#XHA}*
zjTh^2+g0$Y{mfe3@EEwNwK8@F<$SX{)k^sZ;b}utB+vE<omc|ZBZA&)qhC7KKUK#s
zq@lVL$&9t#M8+Ijbj@P|$#XIeel1+;w#N^K2hT??hyU@2BSL6dt%0Q3ft?SOEJ9O3
zNr-NH4~uJh$Sy=MGT*sEXUNs(Z6=mORQI`!*B;YwDOhzcX4?XIe@3YB0?9*XmBb8P
zc>g@i2qg0g6kYzrt*Js2q52S7;2Sx_%3KC=ZR%u<+;8Bhs`^mwgJ-#+PC#pzz{k9p
zjLPT(yHd5uS0C9#;Xs1OwrV>qyZ9FTyYF59@_F{=z;3fcg<o-!AmW05KtvqgO2vES
zGZWld#-T1(!!J5b^TZK>`k`qerOrKC)5-2%RW;$3`dcZGx@zAjgh&yst{3Mjf@!NZ
zIjX#_cHuW(D%=zkyWlj<GMB59OloIHyXvd)6CBp4v82NzgE!Z;oxBJ4%Gp1U)LCLq
zbsv1AT3Zl9bZ7JK?r+Pro9MdldiZ=5Pw2>Z@7y-h6NQ2NSxPXGxs1_O$mUN<M3cif
zXMkrd*I94<mGD@4&j@!&5{6xUq&FQFhb$?pQ?d6-^)$(co)ehVlsg1PcnSp(DvT-Q
zu|sUx>y)6@5NhRJm%_p#iTDBiMwJ|eSmHN1vzV&;zIbz1yvg@^J4IRhxczfd({oiZ
zj{nsH)Ey3;ALH^?21cncOLJ2ZK9}?4iv$yO;JpsLAExU0?%x*Vr4%V;XYwLo9!f+#
zdx%aI|54Y3mm$}}*i5bpe7bz~rk3|?y?4EqPy^#=dXd_G@T)p9D5>hK6$^Aj)~{LN
zgBza|2wYS%Jcw<gQTlx7Df?WIHbTiKqh$tF%Q(L{Rz>-quXszXqULUY_fp>J=e*6I
z<EW>m;-XxhHg8<31t2;_`uY#j0mrt?(jB<di-fULyPk_ChOys3<^`VVLQXs8rc<9v
zH}S`%e?(&5ZREoRbfEJeI(D=5!@TTlv+{aa=uULfO-9eb3uVWc7@hbCv!9JUACL9K
z#VJYm8bqJp1smd7DrTnhUe?~y7gM7}&*yB$%hzF9F@}HXz&0L&aZ6Z6V|+_K7OcW$
z@%nkVIzP{!UtR0WVhKjUOMgxiRqec2%6Mv!KUA80>SsGJ{TX$=$o@BDqUPt0k6!Ah
zxAuDHUIl1Tkto8H%dQ_tKYzLh`98{1O6a2ZbnDCLffagPOx6u`dAsb+h6)++)E$-$
zT&r=*`HBcpT#d_m8uOKUSLiHw6Eds`#8JBhxY!5Mc71qV28SN9lR4e|OuDG*?h&#X
zo3Syf0{E4odgMxPHCQW_f{wcwHmgVO{9BqrXv<m$x%$3sK!)9iA3x2Ha{{_pW*W<2
zW`8riSk-tqC0SxBCVRO%l9J7$Xxvm}LdY2eKSRH*Xq3%>_VW|TRgDYY_QmLVJzsZq
z-!M4h#ei7w-%q$^_HzkkEt8AJdQC$#_rv34o2G~LkXSVLq;Z%jOmb)}g-1H2a~?l}
zxGxFXR=}*?T8U!^I%+kDk8j$`=@VQp4A5{wu`018*(*n7@5YnxNBpfz>{0^{ywuLa
z{r!+OTTP*GvBe0tLqBkE2_Cn^8`@pQhNv04=nUH$eIATGOC3BZB^4fBR*Hvm{c09Y
zqJ^-e!OTPH?3|5bBT=EBKNGGAH%3eSbjPSfMq!`xWWyjM=<=Dxc0#i^mlANo+rbO{
zax25P)E>ZUk%}_k#?yR%TC&{L*4R9!seR^}^s?TL(-W<T2;vrC{4##^)L8Fue;P0;
z@V$b*+We@leNb!D$#zv0g)|JfN=qyA<px+mnG=W?rGoXPJ`c~w>znhZtJ=C+d-RLy
zh9?Uo>br^y&G`I=(1&)4M<!FJCx>f8X;aIv?a;JTrBmxWp$>9)VpMsL<<^F}Lk*sD
zR3Qg;cNeJVdR?9;U;Q`j`I~(mM@0R07;VeS1RIu?#+$2jPW`0msafb*soQ)l0=m{n
z{at<CCJvdTpW=e6SXbli=^Ed|eqs46HtOpQ26wgXle-E*2U?!>=r=^j`>7-QrNmMe
zHuO>NDsoGM1?MqyOlRN%(0o6WSsrA6*NY~6G@eg!Yv8yJ^tzV1b538^>+tly`^C()
zc~QdWHm$1hr~KFDeDk9o<)#9-ra$Af9U;YD_Sk0X^v~hkR9ft@Hmup~Ro%D8KL*`Y
z=FTZ{Xagbz&&@m^Z71^cl@3szDPCT)2|v5c8j!{|4qa+h2H!wxt#416kUu~uVi(7Y
zNkfU<y^cOCf!%Kwy=}csY2<tx=5X!VdE9a{egTmq%4Iy?SeSa5WJ=HmoIfZ6{gk9U
zo43XmMmp8k&uZeEpXMij&A@dE-G*wHq$($g%tGhD1~+LsM;TLoWt4RLEB|Y7VcOM5
zY*QI}lP-B0?IeR|!^%d&lecfqTi_FEHT$LZ`JE>f_{`+<)=|d2vefKblnV(?GY<s#
zGxl<chesGpeUdIu{OEEfM4XQwn0^p*j6U!VuP<AXyN`4g1!l#y;V=~rBhVl9j>nCf
zTwMt#Tt`JvNj^+xxqweWIQ@IS4Rag3mtv`qTZ3<Xdd=lG6e5J|0j-yrS9<&>u+N6q
zmQ^KXtSSsGs!4GI`d2CFlgGMpEYet-y=etUyDeMQR=6R~2TQ(d6xYrTK{rCKOL5gY
z>B=PhEt6sva^B}Zn4yI8tNHdTL??GC`_w<DkR=XJLN>%N^8}4qETsOH_Novv4UMTB
zs=2Jnh`8-GZj-F&#niQwl%no((hUuCF9dQ`ctFMIbj;KC#=`XntW6r7mCrv9VSf9;
zpG@t4@)r80U2c`(yyc3NK6E1}wo;L<!WujX7vTSiqbvQUkd1;N*Zy|^a!>5|6WFi*
zSCcyYiA|4i>jsXKa4UEvUd(N=k?EtKS9DJ~6{ZlO?L<1mSyK^b-?x-%w$flS4LRF}
z(FM~+4bu|*@MxIt<4-nwMA!?&uKatW1;#(pJ}@BC{cF^>!SwGA{lxVJ<9Z4;QTaLd
zKcqgQu*lBk)}VylU(x(sRoMH3?3I=!Qwy`VQ|`OM80{sSK9R3?Cfnv^u0JIU*iAx-
z6C~TIi^%?akaJR_L--Swn?(on`-z@8J3H5S=;9dGxVG$IVKOi>&;?PU*O5a+yCOnN
zu(IhJIbZ}WZ9DO1p+cFP{|R#6`M8@<{<#?Ijf;zGEne~x93AbsQsGclm7gC12J$D*
zJjBUGgqxHH2M52M!KjBY7bY+?!ox^ZK8DAuxzqn^qI8I1DKG(S?mTrHPz@=GiGJ5l
z2SD(p(N5A>if*Mwa2_nv=g*(v46xD?6T_@CWlXlvQa{Vd?I%MJcLGTqh4RT_a4?p%
z5H(XLtF7*1K(2y`X@jm)<K{uc&71#=(BIRWi$(`nz@F^y!~Fbw_ibV#wwAYGc7MNw
zfxS*wfWNZ}$ZlEY$D&0Y<Y8X1)v%X3LG9zC*Qkw!JWg7C(7%QVzf5i##QgsdC9f++
z-HrUj@Mxrdk9iRuXKR3Hl+4`BOyK5LmE*JU`oY~!TQ3Ir(#*s8vT4)mKQQ1$mZ#6d
zIf}zZlOvf?y2$o+pVn+0$8R$4+ZkXcK?9zrOCax^Flcx*V+kc$*}p@ZZ^@~NOI4m#
zin@&u6QUb-Xr#V-WPseO$>q<7$%pl(3*TZ6TnCC=f~}4X$Ij>H%BGF+k%@3#VOGbf
z^L2=aurL^=TM=&tEV3M@%Wg>URn4T9j%dO%4rkZ4y~NR7ZG%%Pkqf8IPfY$WW+gRc
z7RfqeTNT*D{ynaJ3b?zxHf3eQ=oOa`^tze@F-56L*rpCX&Yl)E1uEH~JVjv;s@c_H
z!%;StEG94HYVYa9lA{SKp1(-W7Jopn5G0P9ouZWOlI)Ycj&lj=+m9<-;ztzR58}^=
zbv-KdMB}8LarG%tH99xMQG<3QY_i`x8X%hcP{*^f<6rjzvn$HVe71VvJ<ryn)E-XP
zqn#d3m;1JXoP^t%VCa{efNNP3T$b1Urvpngf=_OJ&nR{8FHDX1tX;3y19*mq^W~n!
zYikGDz7EIq#b83g=b6A))6+-9Qy2{<!|crXe}KcV{{D4eAkX9VMr$DgnN;nI-Zfw-
z2WTNZZi*B&$|vmDRiDQI6F<Od3RpRo=H~BzrqGxS>Jg?=LtaAw*&_h@zI1qB;Np@_
z4v!bmxElE5%su|y=z!sN+)$e?M9R%U#s1I{Y$GAyWO+LCv{W}kjsGp|$UC1E?sgc?
zafDhrmz-Sc)-JCnNH1OscEu3t5bCcB?1_$s6az;3{^6vIDYE=m6OeM2=m#n$s1kM~
z^14i{K1obP<qs%Gf{i8dVn-(5M7qFwc@BBDS|dUt3ZbDLk^}TR_i-XYI<PCK8f2rA
zcUHKCNHIj#P`&7(1i7>ZR3nBhCs?4f*};1zNw>EJ$a66%aD7;Fv*y7#-(N7t^X)0f
z;+8I_%VB+`0m3INGb`cd&G%wEz1Hh0A3&B&n5L$t4x+ut+TRWA?a#J*`^q(b!IZ|5
za=_7SGU-KXj$7vVx%@@pX$Q=Bx<!EnO?tgnH+4_O2Ep<A%6gD7UesW_ppeN)(3Hm7
z`3QBXf8z0QA#AkTcp)c0*16jH2h1_`3^*)u+pnairE#6rt9m+Y8aL|PpZyJZIM**$
z$Y}JLKL)(?R0{L@zGCE-pDuNh45LN>w=N+?>u29%%4Q}7v^bQt0j<Jqfq?B6cn6h3
zjBO6`r$W`MF*XZ2%pe7YH8EwnNL>~OS!xmFWgs1vJfdD998QSh=kpmlVkA8j?9nfW
znnQ#J7Zrkl84@|{CS_6~zf|3;&Tq>3)2v<jnwLl*PBSWz2;)U~Mp32;ehLNA=}0xY
zsIX>ns@xCuoiJfKd3fKXoDXXN*UplX$na2^_^|sU6_-Lsp+HH35KMGAAPESt^z2{8
zX@Ej5p<SVkiW_4^8$m)s(q@t=gf7`84)H-Q!PGJB-dRD<)c^@2QD2V{fxQfX#J(=J
zk9b%4(CA;Y4da`qg=}F^u^$zk<b}8KOe_#VM3L5_3NQUIYV>}N)<r)QX1hCD9Bt%0
z*v=L@R@Yh_WAOQ|H|s3i0Y!CfZCTyChtYd*mMp(M*DoRe7pTs~3hk_vlqu{}7j??p
zn%zOq$rEtSc*%?@TSp&EU<LpIvpnDHTG+V#$jppS${NTuKWAZNhAxaH5=NDTy4%v$
z`Qie+Z28~ZEl%^BX0>~+@UaG7C(@Jo-x|w0J3pKYZbenDADqE~P&pEcGwc19UBKr+
zzB2<IomPj9x`P94re9~eFc}Z2$&z&>3ufmB)W7LJg`}`Y{rA%>8yz<%6$JgCZ&iLu
zMWu6qB_Sl)2+dt3Sn{%fj`E2No{Pp+hXl%mxcB4ostuo$N~q^(FjPqtI6n46eKAbf
z<<nmvz-}sktgbeirPb<iI!}yiN0TA$TgUY%qae^u3^M(C3YXs~<)a-)p}i85sDQ-o
z{%14^AHk`dQp!wIT=xTz5cq{3pdbj)&*J4-Fm!&F8T#MhK)(VWlC(@3K2W@Z*Nm<h
z8k)RvBDpLJA?_y&#-gUl&A_Jhlw=<qlnnuwD(HL98u%nX*qjMUye~`?V<5llWe5Ji
z@nC;Hqz-T$%ORR)NRpZOhv-Q7{0UJ~e7RDWXBn3d8oiGKYDKTv>EjKwZ#!T;x9-%3
zVuBe22Hsk<*<JQzYG5Kav7C+^gUgZGCE@LY0gKD;XRpyy!tjYonY@Vo0>(Q9-WQ#1
zzKg#C{=S$_89d(cEUkmwtMoc4ScQdIh0zWL0Dr95#f13G`0O}`rqu<<r6B#+wVTNd
zj)VD|$u6VG_qPcDzt@bv%#h}r0)@ec6+=r~FZU<#=bQE3vx6u^{sCkgTx!q}?xcgB
z$7|j%jrMr@ZlLd+^2to+>%~e3lUY}V&P!*2mNr~c(hm9lVpI5~<-m^H7D(Y*tkT!i
zFc31{2?K)_YV;HS7X5_6INfFW%1L?I@v!modNW1lds+i95B5vdA2~P@S~7wsUf^IZ
z!N;3j@A;C^LVs^nho{Le&^b_B4(%Ww(1c$v$2q3@M~;D1Z>Sv5Zr9y{?pQLjY2eh4
zLF*61T}C|sQrmhNP?stFNiL7pu0_lcxtuoJD@2lqpZ_IJnzUsr1ZkRljLk>1Zv2$Y
z?-G*mVzG*>^()-z+q5`ZO{pns4Cc-Cwa58di}UUvuml6IM`)QYD|STuEG%nT^;;9!
zu#o(XfRAq(odf2Wo7Tj5wq!S6F1nNi5QGE;|Awhc9P(sNicqH!;9uj<14%4HF5kI_
zV##8;;9-L9k7O!N0B^{@o9}N;fcIUe|I0Tn-KAKuu9&i~J(xxpF_<%VN5we-fX)^m
z$M~U=*MXYnFiRamoJqCcwyNW+cFbh8&z(&Xs$C!-AK#(=#90poN;p1<D$T2A`|Vh>
z%S2IH6?qAs%nyA}iVBNgp4-WxKN17^>2ubnJga~KlODU+V;=jJunkdLCdl!7h0}*M
z*Qqc>tfiH>Ld&UaFB9RXy@U!ppv|J!PC6)j>raXy93T4rh<%tlkkeQ{&@s?WVl+|o
z!Ij^)sBV&vmXROOrVC}=Tmx2%>_FD{AW=CDt|vM-hhx+Ey689%N<;}Es4T?6h@`kU
z*IE-^7j2@2O2nOMo^e`$N+`g~&kv8}GiA`x>T$HvA&vI+6U28ak=17B-DUheJZ!g%
z4gc;SNQj2uP`Es6ml#4mo7b=?Diyu106S95VW>}fz+N_)#Xkrp@!Sr_Gq*6$4tOSb
zdV+OB+GVMR_7&Ehl5tPUJ3#yx+D@R;_Z7vIO(~u8$ngCcZwp!X6u3Ld5+{G9qxM}h
zVgH@r*;GhlhsCB-I0_PYWl`ol%-j|XeDfRs)jpvx1=Tj|ZQ!*Ho4sT-c3{GyeB%r6
zVG*VjIB4aw;eAk3Oc7LT;B!RXXahVPF%r1iSbI-54<Xv;P(fD;P)w^3yhc0>0e|ln
zx5Wdyi$cuJpRWHXY_e^Wcs9c9<@Zffr&g)($n!5dXPK;Mw|jvEW71$66TcHv*fCs)
zOf)*o9Ht;;S1gyrQl~-pur=h0IuNX%o^)R^JqdJ(=Gko^n4(cc4==UesjRI?LyaFR
zT#sMAnq(QDOs-4_q0DoHrQs?IQl|e2@`i33Cvt4>!7p|gzc*9qYw@3(`~9W=hhCcp
z^VH}xNiyLe6Ba+AMBZ90dag+Y$LY{gS@4<`!ZZ^Egxms@AJZXGChl+rDhf=+n;tN;
z^QDX6yLQYd$**USY?vAcIe|hif{h^}9u{zRBE2qizegj;I}Q(C0g-N?lZw@6BBKZq
zZ`AMYK-!dw{+WqtQfi`}t}ZlZ1hi~7y$B!VxY5$ck|u_*+aY@7$oC2ikfxm;aYR!c
zipVm#H5-p01WqlZ(UJKgm)nwZ3X<Rg`qViCE$!;=Rqd;4eQMW8^jS;@U3f4G){MnB
z%BY^$BBk_C?mGptUKh$HfRQI1i4WHckMv@tWT;K^7LAj@r&hrI<p_uAH@UzMVpTrf
z3MAHc^xCfXzZc5KB>k~)1V7w@a2Pd^0h`}Z#;SguKBjJl$vTeHs?&ifz60WFk`5>#
zvqX~I28OD~dNn93ZMyWR5bcZ>Um#)Yw3Q%UTU)z?H1Ym+R_Uf2Tb_Xh{IKpxR`&$(
zeV2JAr52>pGlqeG?^+JB<!4UUEG9F7hC;HNJ?wTN?`yNiY44zYo((Tb<?N^s@Y-)k
zAdTw?G4c2BPmIs^i4e!)wuzCWT4mZ9Rn0pez&8JEHlX4frMBDO@-tl3q&aC^whPr1
z2y+|RNowW|aWJX4)9iJhpozCozrL(r1Pl==+x_k~)6!B^RegUP5;mDN=G#JKhMduz
zD_fT$w8m*XMA({CbtYd1Lg_pfv@NePi6^a4+K6U_kRWIIQ_<x($An^z(u2`ZAX_1Q
zhFJP^M3BuCUX~oZ_CgSI=tEGUA-kBU@gYI$@pyX>HCoR~_2)C}#Q_D-++ydsdwmf|
zPt<S`1pN{HE&a9M4k##S;=|Ld(~(R}x*tR=cSh8AT_C5mcR?lHSbu6HDYLU6nib9B
z$TJ{_gYNd`mqZJ0@L>9p=D%Ub8_8h0!YElfrA9@^9^k$u!os^Zgu*CO`xN8~`9E*n
z2g%~-@}FaExo1a$UbQloKh<$rZc0jviCRS%*5>l=J0O=p@TM9CoBp*}MG+)GysTvx
z&pIPknqSVX8#Jw=rVP)2_OQxgpb&u)I~^t~iTRT1MBt#%S%Ss|LQb<ef>vk{;5II!
z#t|7*2x0KHnjD6$f}UQstJ5{5`AGRU_$e$TRcg5Rdsa(^JwzASGd`6wRf#Tc0)mLo
z!%YD>^#J;~$U$5JDnEhk(%Uv1L(vkVyhi7zrw{ChfyllgK^c=Y%X}ku%d3E!37#2N
zMP+e*iCZs$c?cqiBN3P4Y#)Zu^s8unI4tBrO+AxoE)8|k9#8}Xr1$qxC%8eCd@aTA
z#a2m8XH?{V8>IfXDx|qJHg$AAS&RHh>o|O|Lb0%KxNkV*1%RIdN!uTZ5`@LG)xe&q
z`l(M*v}0MG8?rn`u)$x0r+{k|m_1*e)fe?$(oi7D{GL1-BH4bi+hcc}a3!-=XP<$R
z52{()E!;ZB@WXC$bPz(c%oU@_Z6ewCJ#1OF#Kd^5;yHXwN;xWW2g&&Ra@vu0VY&Ge
zam;56#~`VvaFO4`8g5=eE0Sg9$P8j{uTaI)utLnK6D(b?F7-k5Sy$uCEMu=GpI{>(
zPg9Gu+d;n)kP-)fSp3*U;d9y&$u8WH2u@3m8=s5)i$k+R&HaN6&3kEwqgpbG<ktdL
zHB<>0>5qxPt~ZZQ|7;dBfil=~M@xIjKaalRv|`A}jeE7<h^ZJ2eb5hz+Vys>RMok{
zgaBX2j~9u1D_ggI%0wxZkC1tnTRe6rMVpkyDu;vw(r;(P>wekNbOehbSB^H9MXY7S
z3Pv#B`I2CLcg42q>~|qjAHlq#`@A}x3e&4VUB}~2bnr#9e4dpEDQ~t1efZZ}mslO1
zugv@&_2YDKOCT3-AvjK2(joI?i2V;m2-&ShRzr;GBVjklT1;WbN%ye~+xN8Say`Q#
z49otIP18(cpel}<50TbsGbk*UE0)27w}Y(Enc<{e9wGv^pQ52IvkXK9&^AS2A>0IZ
zmuom~>OP4KGWE=fZf=z_5kXj>-9y_!q+Wh3BFv{bV-0Sk!@%G=W5Cka`m%xx8-bv-
zqNFIM@l(J<MqaVz2<^MLgh{0?${uUj6h52{Jewoi7YpN8Thkg+-<p?ROjceQLI=>o
zH_Ot&;h>N?dtbSr79tp>C^1Tb&&EW9rnv2x@3+Omh`P}gXgXh!eb5Dl-y8#9h+;L&
z%giWDQmc+6nQo+@dh;bl7|1mtYFf`k5Qjwx+3shu)XGnV=TzNDq1a8~H4Je4GckY2
zNeq<ej-N@n6XBqMTsyV6%m#NWf<`xRF@LOpzMFttmh(Bz3_X_3$z5b=PK?w#^oFRh
z4x_O7J!;vW>ZYTGD7zs*6zUdnnSFvH(I29tf$rs__b}=Y@n_$hwpdmP(t{)6&m-4)
z^~|;4pb$dlVW{J3ce#^i@X5v{2I{+Dps<IiqCq%63Ay5KDpYJ!mAo`2Z_?n(Z3^su
zh)8~oh5?r$A5sm{!2B2?=$84}Ys?%Bfis&7*I-A5baF4{_a~GKws*e<u_`~L<xf59
z9(k0x$Y=z9Z!HHt2e%9pJ$1w-N+jHGGuSn8%_v$ZC+X)~$r%y?BbZ1GNYes*UkWLU
zkL0IL{m}(m;C^{_D8PIK@$lQHYYY?{3I{~|I~gr26nl1Y#4I@|XU2dLt9EL<ru^VR
zFIl+YElR67M=Lpz+Yg+>k|+a}rx0ReRIoq7Ep*i?b*Lco^wOwB2FBs2j{b^S8-Aci
zhB{QC`wW8+9h4ap?yO(*Etqu<1?7rDw#2}UXYlYyIvEFpOb-Tx;WYCp%t>u)qgK_t
zK(9a{3WIv2U>_c=VD`&&pN6kQq(oNayA%VBR0TkZ=T8pe6QI&0%fgsxIVpFMFa|@!
z;5!aX<37jhU~#lHCz%QdNo|bk<;SoaY`~$rRnVy&#mGW%5pbEe+cT}<GvbgLV6q)&
zr4!9hRQ7xK$ZpS%V^ubOsqBFSl_MR<rZMbM&XY`|gfuu({ZKI5l1Sh_L%GGZ|Bf&n
zmRz@C_f<{;IgX;csvSn$L9z@XQYH@^M74y;T07Q0s7Jy6C18HcH7;Lv{`*hat&*El
z6~ylvA#$3S%KtMEJ|dQAcSw#}6*cQ1uk}nD*`h)~8r={Q3~Y6bR`oB01hqmPdMBj@
zMPk6@>x5l-v+Itx>vl)m?l`v?g{USj9#Atm<Y8~)av5MS{uih!kqYzA<FuP6!uRzc
zDzHkgCL}h?MQ64m@b5`a1Q~8|@eL{yC%TiK=|{^tl2839NkRKTj^8mLuEe{e2Q%Mp
zej~9mY3KVhT%5X2l5qKOvM7gnV?A933UT{AMp~;Xv6NR}O8JuumD-`fbjC8lTA@+Q
z6;kE?$8e&M7fCIPWe5fuV7qz9R7NL8{hpWKU5fTYf#BNizkyI8u4~un^W|4hGIF2y
zw-7qZE}v~(X_T^iBV4iru7#&213HTa?|OVM485)fM4n)g_H)?nSB8!I9)l+5REsRk
z%-)VVh1>5Y+mwXw3g&IvwtA6x4;mKq+pJGKSvwwk!}0XNDuI*bRc7YqIX)}aOBb-u
z!ZzjD!T-W_gW^S+Wgt@5Gt0OipcPEWf{5hB^wwPKEOWf~wN0gB_UaltTT1}PH9Q>L
z<itc8YFa_zm#6&RKEr@3NdwUUSy^W&_+4p90GW)?ZL;fm`=@i)IW&#anmr<gRqIk6
zXvfVHhX;*R>DR&aUpOs2b<0&5bRY&kkI?$@AWZ_Tr+S@sE%P=bqm%m_zNf@&eLTg+
z#-gDDly}ey#vcRKWvL<m&j?oj5hSwm%KaCzXg|cL1}%uhUjDP(M!hv<uu|9K^;R(S
z^T-qTnyH&7-bo@ot^3Kw`o*35#Z0K9L42$2!7tI!h)Z(`A*Z{#i~yES+sLf!D&vl;
zl@rrJ@cQ%m!q~6o*J4e>I`f<4<Kwc62dH(=hoe;<T7Jvn>5qQm7~*Xns3qHM&C2LC
zWugCdD!Z@bbJK7i_Mto(U~J&C7Jd8yINblPY`!l0aSE%>B6y6%177R3PD$ANY@RQ*
z4~_Jb+QGxFysFNZR__~&X@RW_=&=Z(o!@D*#T0(y*lBlSF2}(CE-)wXEgUa9hs}6r
zH&*ce@-qU?@Bh^Th@))_^f6WfF5(2dR_NMr$b^T^zIt3-CkwyUYy8`0%lsvdA0@Hm
zh|}-1s1g|}j`ROxspe8mk7A+^Uj1aZ|5Xk)f^i!9vQa3XlHK8Rw$yl5yr{?Fb~p_N
zgE4+e#V2NE`Ja0q?B0D>eeuTAW3&EE#Q+I2bZ(%fr3C=KOM<MzIVsA5LWZKE!GNIa
zD#8D>+4->w>v4oS<r9E}Wqx?~f9bqf3>2x#7L5M(?X&PM7)Suu)KISjS?zz{D`7^1
zg{oTosb?-Gicy9t2lamk2_5A6fIfdgjkRXlVQ>8J{Y6X<5zC6xk&zMZI>ZxSz(i0?
z%*5PW(&h_=AA>#@#EDkh#Gfk-b&Vn#TJ=S%dv_BX0fW;&yd6$Gv_eAJ5JSTSMMa6p
z$x){f(efsyyKCn<fGe9qbu(@MCqEUH$LT)WcxC<xKGDuhIr;g2-{RA$Fx`W>dbuvf
zDxi-)oI;D~8<CsGdb`itwW5+pI=37HyzLX!pc21vAVYrn*moE11;tycO6w3lpNS8(
zCZ-U7nbU(GYm0I<r*0OUksC(StITgQ6XYw$UYQ)C{(o2eKfecKsX{?)^+^ukmqGrn
zL|lubVIw4G8DLOuh>Vl%fs|#14jD|<ry{t)G-Z<CM|ltdWLT8U;UuW7h!2e=&;Nc*
z5@*0bwD#8PYw4ZdNIU16gm!np9yG(xQ9{TPIhynGqIZYsic->32ZQ4v)36~S2@3_a
zN^TZg*X_#sU84}JQfxy0wf4JfWFe{zbWa+W&tlAlJ+?ORrExYD5QEm4HBLJJ!e^qk
zslV@3B+q!g3QckBm2$*{$AlviQWk<5dYrKO6{%!3AUPqM;wz%MYs`c55*4t<CBKA9
zqL0k`(MV~auw%nW|K-}Z&qp1kiW^9s(IV(&ACaM_qz(p2Nqx}x=QHYYY6(j)p2GKZ
z26Kl3Z10$^p3+(-420&S!oE!z@)7Vj;+Pkd-k{D%b@nxMVYB_t;;<?^;?}0b{ZAU%
zH^@Ya&KkAI3>nM{@~wFH<T#4K;rEgXi46!;$hfs$?OM#jXqkWkdl7RmF-%OHxJX%h
zk|ZYvWqb%dbS*w2*jSbZTCrG;9U~}pY-y>eE_x2mnh=a#h#yFuhWtY=bxaFIFn^mY
zPQ`);&g?60O?-<4c~Ia#-|`0&3!R3h8A^(9go?Zh)cLeM$jj67kvAGNh>y#KT>(W1
zOQ0!Ikh{kd6a{u<Dn;}$HAw3K`IxpN5CuYOH5@JsFQ?X6zZJM}(NOnDyCg$mko_37
zk8UPN<0Qeg`}v)>*%du{-eD+vHMfQ2^M__0=E+7mobMv-@J61zsCYQe?F!<8@*WhX
zmY}cDWweLpENKk8lHkMM9y5w0uU|&#gNKqVSGMD};1uJY{^3!4Q!s5bNY(}Y>UA_2
zKXWXVfgNsoSVq>GikxW|F_H?SwD?uIUIFK75FDTFGwMa~<F*z@v5q}nR<3#Eacf5c
zBcxk~KAMKSj%TnA1l6OA&0r0V3-K0d2{BL;c^f^2bVnFwR5h29C13g=MDc|Nb}v4W
zogC2&j4=Ggh%v#;%n7W3i5$}uW==GMkB$pc<UroS^<zxKPvg;WaPlxQgEi}xvDjnn
z?J4a6K_*@&2Q^FB4^&q0$;Q`aUq*DX%fd()#K$aCH&Ee%26at6v{8VwPf3Q648!gl
z3PKl0{~;;$ZD-G(Elmb9)4UAyd$<Sx>!257-(Y*lpjMzs|Gd%a2^P^0a6w8iO{Do3
zk)U?H{Id91WEk`@T~ihUdMJu2Dqc8^9_<iQLPpNqkBUFICR7XHUV9af)huX@z>62(
zUx%qEYiho-8<?TrN;$-fL##s3P^d33r}Cz{vc-UkYMh+>L-??;loJ4UtQ$X9!es<s
z8xo_hihOGkf8l4~EtbOjPcv~3QF?sBy^*m}5GXVA-0f3_6SqpYph(4;Cu22#@d<C{
z=dRdL*Z-daMGk^@D(;~D0m0?~lQj?yDc`)CM9Ry;6^sn$Hz~GlL;#if0A&~t^FYa(
zv~!)8RF30E^_3)M+kXMBkK)Uz1XVCH%%aemsTE=Iq0{7dZDC*9wTz#~RsY&toW?OB
zG?6aX@FS8TJ(c;5NGL&*Jk-?G0QY{1%sZMT6Yn+h#mMK&lNSRoiGmVl3h#IvC8g{R
z#n*IEC6>>=Fgv>T+<+zQ4`RHLh_o%}d~-)-GVA=@!4>p{D<e+{j0HvIr2nlf|6hHn
zjL92-2!Yg+zBOCxx(2z%yIG;tNsItM>iq!o7PJBwS^TNiwiPt!Ex0x=I@URx^SGoV
zQ=tB;M30k{{NlF(p2O~3R@2rV(M&$YRh5-296H;FR#5vfyAOF~JtFH@T-w~6iYCBU
zkt{Abp!M_VTf*aSEEvUl3F`mm_$8`gbRfc)A&n54bjME?Dl-C(>uYOkfe5Uw_YL2r
zUPEv9$>aHQ6I0U^R>QaZc5eXa&JqrMYeK@?H?yz<ESUJJy0#x)FflO^m~>mQMY??M
zMm6`_2aDC6yWjVAm4pCo75D)(1FGt{+6TUA<e!|TUY&vw2_wKh7c~Mf`qYGB6z5X>
zFEvCi2(f<rU1I6np4%311tkqQ%mea#1_y@xp8yUy@b5f8mFc@26;27hY<|w-KU?Y)
zq~yR-?hJf?1K0;<gWI$1z6b#He*!pPv$amsmlIb5`6(Ggz!xW)wdM9^N_e%?-q%<q
zZ*lkOHbE&0a0pp%Z8%|I7;SRgMBOoboZ$I61XhfUy_l(^Z3~yVOS4uGXE6A$<Agx0
z@7_UeVDlss@H#x;*#s{>aVQBUrKVz=ev_4z-Bw(x)NKSfl=oy^$CKsqMWw1vi`zp`
z)r7bE?jTCgV_yVXLSlUU3b6Z5zfT*B1MK+-5O0?2r(;8S&RMQeq1R&aXSdEm@OqdM
zaFNw&uu<3W@X*$_p33fUadAzEk9W%MA?md5A}dt+KZWT3+oFSIl0?Rs&U;l08yhWv
zl(xX;i_W=%e$eh<=hgGci0nuvfvUDj@P)6tI~OSzX)KYUhq33><Rk&F(^jKBAl$eR
zdZ=sx4so-~akFk}Vt;)WsJ@7W-0)NIn})K|<DWMzb4G@Tw+iRSE5-qSGF{Q)(ah2^
z@UiFRAGVJBZm+D2VZ%O#&3uc$Kre_wp}36i|CUX1P|QgX7p~m)1rCr-@On_C>q74U
zbD__YGLL<8Y+EHgBmrHK6L{WY3;_M4p9&g_a1HNOixkI3Mh1k0El#yE%{IKw?f~x`
zFfkt>QL!}i7{Ebo^S_E8DA%lPeH~>)`tTw9@uA|d<nRiM#_eKecSiax*#2)y)7qzp
z$|k^a%H_yB<>u3Az9XK#*UW%;1PUX4RV14*fy4)!rqzlS-=^QbhP+g;n{fTJcoN`4
z>}h!@Q-M;7k;hf70x;SZy+dfAc^*4G?^h~<WeJfVh(eHeDdUn5G<q>J!)m75D8J>Q
zz7QeVQXgrutv)A`Ar!nuQP_=R5}Q(y&&x19MFz<v89NN%C?7mqomCl;UdsE4;P$BE
zG9!kJn1RW;aYeNZ2GuAeS<-mOrO=61%?r?EaGIQc+)6<a(2(me(@P>Z=}ECWP?y6c
zghWY#hw-~Lsxjl@6}}LTVV35{59&=vmWxjI$oAuFBSI}xq?wJ=QAEW7o2MbAps|Wz
zoDK3AewxZ2iUr-yQ<7|my-0fvlgbaK&t{1&!&dE)cq!upm66y4C$oW%wr145>@?&*
z!FXws492F~Yj8hc`(?7@6$W9dxm<AjQQp4kUGr!O)skC*iT5hUiO><qQHvsi<bh60
z7_)e@{I~_I=xP}XCTI$S{>#<eQE)#y6LfqANUEAz%0OzeCox_qbzH^{S$=Xbh@35c
zq#7Cj2oZh=zJFL3YKL9pOFw6-*|^oX37FQ`=?espY+!*`9~osKITAT)Cr(RDxLiO8
zkt}2j@bpKJbD$=Rle9<-9s~*?v(%t1dQ<Rn3=UReh}Lfyc&ffFDigCZy3ZTms5+Vn
zn~2Ox`g%Wow?wv>1rUzmDf*bnC9Oti92^`Yw_IA#)n|BG!d4rbWooB_pFqdKqFv3U
z{>R+LS&K@y`P%Sqt;sZwoPf6h!0Rl)`(}zy1n$Pq#RTeZhn(<N!6R>M7wY8F)-t|Y
zs|_7!(zxpG$vYt_nX>~4(ZL{c$ctBZ_9)W*lX!b}na_XT9CA?h%#c5fWwl$X+d^wX
zogD#b7#Hp@5^|UE?X_O))6YRaiIxSFQ<oT(N#mfFk>p#*>n?kWT0a?m;w3fd2@68#
zi}9ixp=&omh#uZr=@YJCZRD}0AJK@G9G0_<e%mgi^kssfbBr+_?zb1&g|>qF0__mf
zAJ)=8_<3*)KTf5esE<8GAs$i`_mxP5+)=XoQGO#xcO=G(#nj#$6Ecp$ges<h=L=z9
zd@+bToRyB+62ozi-c>fcAI6N9K4{#Fv6tOf#30RvDP0Cw<O(9~W)yU=F`#G!BGs4{
zD$5>enkX;Rg2-)6+>c)0@U`>XlS<itB1E1J%A_r(Qc*~Pk%^$C-XM)riM%m!Vd8bW
znQwcDB~U`2hP`?e6V1n25c;dYDZxQr4(9O)mt#1}zo-)W3FAIGifAbzzanlC|6r0&
z*};T?q=wtGIn~&Yx64b6`7lX+WR3~CwxRf05C=Q*Ok_%qg=}6nOlM_QwnsB!#*#*5
zDq-L(Up7oJLIn>@kt(4y9uWkYA`>4Mvp(u&Dze9(O!0(|gsBZCkYoVqK`w`K$Ynzk
zhd5F<Z3V?Km$FwO5FJTs4PtG@FH1_9dWez-WPDF4Wp|ouS9TfsP2B+!O4Su9+auqB
z#TrpHOOa(KWsjpmN`e$cE(D=xg2>ffkPr~qQ;GP7e`km@@p5Y9z&*iB6Q<#7M`_6W
zs3<waaPDZ#X=6r0bm>8k$AEmE<H#t<KB5qqQeheQsD{P#fAtDt397DchQYJR)Fb57
zB13XQ`vv}HT?2!^GNZ!9g4a!A_>OC-NstKhpMydkD#%^PKCG|<^gno?jwG)gO|wq8
zIz9)ViFi+k@NhcjVC5I}f7dluH826)gNjgnxb2xMI}DuhAFl-r2(7JL^OYV^6kNj!
ztp4?Xbf6}}hDeN@W36h+2miY`saJp!)>_NpJpPLA<hZZ#GtFdr&Dkx2n83<n@SfWC
z+F3>o+wt6ms?%y1qzOLVY1o25mEguF6De{?`qz|JWT6yI`fyuEo!DXmP?0-tG|F+7
zq`SQuKQ$4fVy&@VWmkaVW4}?F!%+RvAeYgKN-)cfNa|mEj^iNIrO4ylr)Cf01DR1p
zuOT|gOL;SvV?YH<d8(_Wj(HKr{!oxVQCPM1axzGTmu^gK$^Xw2gFuNG6irxeF9S8u
zJ=%!gEG-RPoAsI2ez&g#sDCbpv`-~I*iB?4hsplY5Rv*wK0XMQh?V;R01ozkPx|oK
z;%o_cMa+xk*5}77l`Pbdl$7sQ;5e^+Am-)AG(q6~n60|U2M)*ISr&j0p>{=Rjx2WD
zp%=^bb5TJD<rT+&1rAevIN^Er)3H)p*r81Ryci8<1Y6f|CjN|;f%w9}bT=9&TQKzR
zEe0kgDjE<7<BLmA1QiV9GIzI_<iD><eItyB;e_!r`xa_7v;^r=*QP}ibSD~_5V9H7
zkM#8YD~PAHnwpw^h}t|DpD)mm@EjZ*Wo2dhfWlK^r|bE+9O%IQv$v<Ft}a^bI`o|x
zP*2WEgNd!V)6Qx<GA4Wgty86LlNOVP*R@~~7>wLZBH(1SIGJ@sKmh1b)&L*!TG!za
z?}qZCBDhI%m4M)4pjs#WT=U?wg=RTgxIb5x=3@Q*bR|-X6LS9oP^7e7bRrc1(SWyw
zDF!wYd(#M<N=R`Kbi_WQ<XdeeM5R<$E#*@}FQ<SUNh%(~KfXWN`u=p;uEU}Ah{ogx
zzDsD58Kc(+p<~VeDE!EwsHS01Vf47-R>m9q!jKf^6`qsh0gdD=ey%rQTAE=Pcy|#v
zq0{U&6F(5$WVhk>|8e!r0fD@0+u1fY+qP@7U7O9#wl>?gYjc~8&Gu${v+>RE{mys3
zbKd@*nrY^lXYTvDFZ>ng(Q7mRuAzYye+^V1j(tC{-A)&9!x3)4<!tKaj92T7$VTu%
z^mTO+w15b$vX7e?u_1ABt)=<7`On)ybe7U|K+tX`oAz<o;tsxxzKfpi==hK0{E<S=
zEAkf@IUs6JvYHJ`!)CdL=eD{LNagtJ)Yk5HArq`wt(B3K6-ANT1)f-Vd~<Wt(7<X)
zhYVc~Ug|zlj;tAO^w@jEL9J6B-!=LExb=Bv@QK&-{#)oHK||MhlH**0Im!KU9oM4^
zDBa!203d7T_70qftR+{#J7~zN2r%Z70^(Mgyg~AXs@*QuemK0`orv*Qub^J6)RPGc
z>f45d>vnoLy18-Mjz$f)g{!6g7dj*SBm?3@L5x@`cRmG*NP=l|Q!JeXfxu^eMOKH7
zGhr!?NL^L0qdhPT^VJ7FfDiYpcW-L`kwvZ_;13T;_fpAW^Z9zthI@i5eATk)F<@N}
zuud?eVI~2p7;xDUdoMt)2bbkld{UW$?_0g3_x&Z}*gtNL_h(BRF1M4dg~7zNZzt;M
z7xwKtp|I#wf&fiedv!I5QgLczgddnc>id0g0S(8hMP7TQUQ(GH=ws4#RV|k7*01-<
zybqw05ae@tLfP$pXg^E9Xc*3(fQ;8`@Id8PRZ)#ll#v1JhHr^4rI_ok2&}__g`aqz
z;`=)jIK_KLe;Uk_EkBZG;P>1Mj=X<#^tprV?{Sc#Sy$BP8o0e1#nk<{>5U5i2hESj
z|IIO=^_W-GfZst_l^-W?KvhxThmjx~+igJ@AwbOwK<4(FFO>(JT5E^nh(4ElK2pMP
zgr8y2DGejabc-^2d?|`#RR1;N_`i*)r5UW@%OJ4T{pyu+faW#6z`R`jt%@@vE6kl9
zAgU9&k=3SSiR*xUsEKlwN9bXAU1(pQ|9H9an)m4wJq`1nc5Q`^_w)^(=?j-pza){L
zmWoQJ?;p;Nje7U#+~f4)t@oX7MZm?e1lvGZ|H#0hFBsr5F!a0)bv_D7Nl6tONlQn3
zdY>HB0O7B0&j(to0QF)$x|*K&1DGJFYiQW6Hh2O`TQ+mR9djoC*}zX*O^e<8!8ut=
zO|8|i4=isB`rD8wkoENKKoi22lP~l+GBR@0_vNX1S(W3q(a&fR>FdP3G|6?^R0ygs
zz}#2})tkIKnTLJ5u=f|!h~vK*0a#ftJ7Gk?>)*Hqkg^Ee*Bt>G8rW_@+fFDxz}twZ
z@EeZC1@Ya%6qC67VFnPNE)@B%2Z0fCZP&xvXcCqG^$@nh9?OXD<Ax-^0}<QX0KjJh
z9$YR!46M?ur6k*k&17$+5~*eUuhuLOB{=|uO}G!>qwNSa*l!66{{rE8Ln7c+<2IAp
z-<YH9)!u&xsC3tMt*4b$Aj<tFZ6(#2rS=){NK7&Pm)m{8I2(W8?rSXsKAr$(eceD=
zX{kaUkMnk~i1)*JU#v}Et=IcYl0xpwC7(S&{LCFzQ`dO$(MK^YoATu0Y2)_017Pmi
zmMt`CKKQ7}P(&gm>z?ySy1JWoYu#*u;Kk0u!fgL9dci+8_I8@pxoS(6+HE-0tQ&J#
zFVub^@~rZJygY9C6BS3zBnT$%lJfCYcE0hi%L<pbPN8cvMa4^8s3l%Po|l@S9<D;B
zx`GY<L&AdTwqB&|<=vzQnzcSRB<tzPNeU>c48Ql6dYcffbCtn|glK*TtwwW1W&%^i
z(^0CtXamIIdsPLVA3qmdm-RH&)CTv$|DlafW%Jl~-D7RwvHn;?4Ql_-vVv3$3<Mvq
z;rky>g#4!okOr1ezq?t<Cp;9Ux_Oo+j9*~Q1BhRKXg>pg9i#Ow-IG%z21{!lk}^~o
z&>R59EZ(kvKmK_C9m;t>Z=Ckr-TK@FI^SdGDZK{MYfX5pZ8UHdeydZp^8>0JAJ$7O
z<aPhgCRN3*w@5lpyA>FTFMM`yH1nkb&v{h9XJn(%q84aecfeI=+Em4x;WPaOKBlXy
z&;Qu<fXnDB4Dpy=#rOT4$m#HyElg6(h5H!({r>KG3vjDpx*^i+^_$^(Bl-A1a%6&3
zVNEQL2sFS>PEO3(bYR(x3hIVUQQ@xVI%8U1{@C}#81Ol~rRvz7Z1o5s_E{@X@VTCT
zwI>sHUZFun9+X5H1i2pifZ&e3@B!Xn_bp$pONsMl=5m0LKkm@`gW%Y|4-&i17wj&{
z=47q}22q0<2<cs_*6w*4VxkVxmkLAoMP>b88j+A%2#Dg7%`Uzr#ds3z2jiI{W*0pA
z&fjxiwLt6r9vbrky#uw@e}%*6D+KjYvPxj5CUYjNYb6Tz8p@<qtr@xRHiPxc$|x+I
zAAII@u?5yva)0_gpr9qj|L}!>?GEn9hbauoFVyJJ>UgthZq~Rk{%*6V;cN5Lt$qp8
zQBv(IWQw?H0)eT4sX;$pqOj=0{rl!?eAr1F7grm~_NFP4k3#M(KrQ9J<#RrK1Kwt5
zc=(Ktp#XVOLu5z`9@O)?)?)JYE^{LD(PD1rBQ<2%ops?*Mf0H9R;(FpjBx1ao#bl6
zxF{P@#+?I5$mfU%`G|OI{S1#`@T`@joRUBE1tJ5l)jq|cb36hNG*F9+XJ5`d1L702
zF)lvlqOcfrGhQ|U_u1`%AXm%BEc<RAvoQ>hhsJ3^c=@mya4`5lkF~3(y|_36z6W3v
zH@2Dt_8%6nyW>B09f<aTlTOyw8&vlcw^M%zY<0X*1|qzb)_Lqeg=(2X_K0jhQyd;g
zWWf%w^Kh9@q-WW+TLGlXV%AGzGo%t{2{1So@liM|(5L|MUQ$EUIv6d8H*w+B6M(#$
zVH5V|a<+s>Rr$DFfb8Al6Ujo(%*NNjN{-=mp3?jxzkW?;iWD2$y8`J2{ig<@f}YXI
zH;o`yGEr{HnAjXgxV2!`QrDE16zpO22`VFIdu2~Mz}d5^+O&=ok_4TXC?7)2NjhSm
z0ux`*2nQ24B9}S2nXFFPg=ege84BTx*Uuj0)@hMM&0R)f6y`lFY7VfxU{m_RNVm#f
z7e2gU@+fSkQvGU;-?=TavyG9VWkL>i8jPTL=01v{t1jK0t1b2h75|`;%A(iWl7nDO
z655>t6Dx)QR~)DA3buv(+KDy{gUUp8)aLQOZa@$LXaSc4A*HakEy6{GSU;I97SbV;
zO#ga#acl&i<94QeIZqhOj2%Qe`vD0GBUA$wCayqOC2D|LMG*Iq()t)l8;V**E(O$s
z?TUwr+$goe3iP&ynpSe+`U1-yqoYg-yLn|TCc7EJol;|Y{wgZBWH#}lCF3Hu6A#kj
z#D71HAUx2d{q!4L4LD5?l=dq6rc^-+gyRhR-OJy2?hNTl<ai~CV=(GuQ0<!FY(;og
z#Lem^JjqV#6@ubSVWfNyYPk!%{6t8fu8zmNefnIansz^f79d-{4v^r7o!484_2Pqh
zYkpIw4Fee|D28JlIhDM3Vr=?)=hg@;1$wZ5-58}j6s6LAQpJzySWW03?J5Pl<MT^-
zNRC1m{Zoz-A{XaI?!T(YqO(;(<j5@bzDQSUibV5-R9C4$7~P_EJ}HBT>D1SI|HmSu
z2fIfGJrEL6YkrYi58h#4sDl`jOu9)h)mWdOD7f~uY;S1z_lo?V%jjJd?(O?sN!Q==
z7ZAA&oho7nTBnU=*NA0J|7+p?>uQNdP~z_=IG}ua2MLyU^&ll#7EcJwA7=jhsDD;F
z_m6;SX}zAbG2t<@(fiRyY|pTUQ`y)CQ9SVFvQ;tBv2}x7i^Dub6R^bSGSWsgm?wS#
zERz5FFR%ikLIS4E7Cxq1!`cNk`<X~Zexo`}<swIpx2!0W-lkl?b@H<(C@1u<4S|e9
zg?L|7esiy7U9RD`G5epl?ccW;#Slg~Jwob1P!#_2-roO=Y&Bspj+#SJ`UCjDZ~45(
zTrbDz)fw*0mB=#n?C**`Dl)MYOig>L?9(yz_>gj0Tm^vsc6OS*GLfEWMURbt!ZUHg
z_!ft(*Q2*c%^UQ0i>=f#&U)Qn5y}2b!?q!<`W^~5hQ0oMu5{^ef+qih%E?ucr}$N-
zHEqJ=z^PLPCv8^HNaZzNr&Tb0*kVe#SN%fQsX!D;So<=4;cRrQ*sM*Z7_+K?nI!72
z_M^GTKBmb%Q&{QT&elXt!+<^#hq}!5T@e)Nae=1yWNe0Qsf4L&-1$J<fJ%&fm*!{X
z9sR6LqDRf_O2YE(%w5q>KKy_C0&Ff!B%E@qu|W_?Cq@Qp;?K$^wqYOXH(ItOF7vZH
zXL!o5Hi>X1eKlvwB2#DOeXu@ROjlF%4jZ1Z^txqNjX7B&$qL)m=76ECqN`63n-^vf
zXMQxtnvdgEF5$hFQ^CiSGf^GxrQb*>Uadl3AnYSKGjjE;n(q+ExijZwF`J|t_M#5b
zlnslqm#roITHzfQ<7qjT3u#3gG-mEmc$c|<GRamXws$hQv+5}2#s=T;CDTq`TU9+?
z?RP<|EA_!lfr}~CVp!lZIU7HXrf+)=&nsdxw!NTjCziz_8g9R?k`{zXYORO2letjp
zSgU2rYgj5^qW>|ml}pHX`Le#gZr{D?ME^Lbswg-Mu!Z@${f}Pm&&uR-JDrbW0nWSq
z`psljEuckjv5Sd`$$HpX*e~8c`yB`Tq!|b;R&vS(&XZ9E=Sd!5>mS$_IKl+%DP@Kg
zS9XmgR&r);EQBWtWQ7!XE05{xjTTsmCGM+x&-au@5~r4`=<=-d@|VZJeZ#^tbuDk;
z#fUL?S<y^WZs5yypkAF+yC-HDCj`g*GK?1hXKYC5mAZSPG$vj<oQpSINI@GT4|&bB
zDTkjjglU$6C$JDCr7o*Zn%<_ylpvc(E03(7)YP3Qeoj!MX61#Voj6jZt+s@-(70Ak
zJiPeKB@izzt0^K7Mf89dXDx@XoH-<2IcW0Di$Q_S*b2*(SA@w^nKwJ#oHWaut;p&`
z8>J#wJRH|cMP9QIH4F)VK5h)jn?Z^{-J4;2qDuT#YDk|H)!v%MEW>+V*eRm^*zB)1
zjl3&P){n@T)S&|0wvj?pCO`g^-5EJo?pc+E6zhd7%R$VB(Bdg|6xj#sYP`{sFw*ou
zE5<PYyGm62Q3^t}J=|ccfNBLfS<~x77_I1`U`=p&C(}E6DSC0H28`2@V;DvH63hGT
zk@AXCy6Zh^1>_+WRxd9$4y2=8JAtA(dh^7QZ-ta3;fnH!V$F}$$y&zw(v>V5)|Ksv
z^szxr+^R~lfucyOHu?z^>Tq-C<fDfbBDFG(>So?IwOGGdSO;?qCZfZmUD8jCED!7V
zytZ|E^^A;+&aft_6uiDqW-hkzw1Gn-ejT+R79EovA8TlA=<go@B3+$gkMgIPMijSN
zYJJ0yCaC{z_4LU9`PH)F=6%GdmtW~t-yy80rj@?VUXQ9s&VT6VlLwz={ok7u@Et(e
z&CT#dfSdMmUUo{UTxI!LO2l@#-v{}6cjw#X{b;q>`3%Tb!XDpmKHg7G+~4mmqoc`s
zo)>GOkiOi#^Z8%RO3oin=HTODEwvc*6c_I&CnsYue7jt0u4*k_VFN=fF@mdMk+ZZ+
z{~ckKZn^SJ=l_3(3{frXV1(fdLKbUAU}3N0TH!Ag<fR4N&R6t4ANP(vH-tz@jn@&m
z-adA=IIQOOHx1TX{QX}9+&`Nf<@QiDV<sji1FH=jcEl$JP2#dMGKN6<&ys?myh9-n
zSHYQrczz{_$zvwV;mfl!u%K&}=EG!_NV&0~gD;L0K#_ec!Uk#ac0QXiDJ%r@CaV;G
zB|6CLOK-4{a19D5fwDSeHEYH$*-wm4EcWAPSZrI1pPiuaQ;Q(ZTB9aDR*$gt(pXK<
zL?ZBZq$Xsiy{=y6h#Fw?VuNxm6ci^jKVKyu-H{x_1YfO!R+J5c@~&k`_al$WjBwtF
zDj6h}VUMLRWZ6>#=g<&3)t32MJEe|gvKmDvt<qA-&M;Kao<e`#{B?dMf!4fKC0gD-
zlUDkigD_zcr>`kNtd^w;H^{tJK|{#80`HnEY(&Kjm3<VI!RvnSkHlMey>=lM)oOE)
zwFz7%?Lnks0tc+ODi9|p5ibv<xFl){NYP5uS~7<Dru2M1+pJjz4e)qzpyM+rAfu9l
z%pPw}SdQV06qvFn0X18i1jW?75(JBCORU%^saZsfCb(nCFl~4}RH+xlXd$k=$izs=
zsyOrg>3jltE<x(4uIl8uO8gO_2}e@2mn9S>?vU1f?nAEmN?n9Lf0pa48pNVEhnt6n
zCTTbkB0`@FX@!22gH|Q9BvvEFwaE)M)u}-uw;H}<6&~uKzCcz&xtOhsD)_9W1d>3~
zOsnPVsCxP7Uh?*D6<k)9Jwi;(98dP(7FwNOb~*05UlkOPqKpowGSKny`Fx)0#KPi$
z=`=e9N3&v{AUOj7Ljp}Fhs~zXY+)@BN4ZsGF`c+;T-(fxsVtVLMGI)_FbFW!k5V+^
z^%%DOYcF`2#(5F2Aez)Ido5S^(`rWdcp9B&={3qNU_5fqPQU$7TQ~aqha0EfN$u*c
zQi)1Iq4t<}dWhy>4RfJK)qu=pQAAl!V%mJWVzx8a<Ar%i_ehUe%J`}?Vu6x*nl`IV
zYN*ZorOgY;#=M+~wRvh{?69)Rt|HohkU;AS2OWKYHN6wPjfEv9!|~`(T!plJL6~H$
zd15jOc9hS#hk~h^TGBAf4~mk`n8=1|*8L~PWiPK<Jz-za^&T$_Oso=eE&<uW90`A~
z<wSqix+Re)5QahhXaFlXrF75_+#P^?GG+{&`cjbkQ*^@GN|&oX*Oy5x3_sgv6!f|2
zRq==Tk4B=`RoXyWDTaw|u$Z$09`|4#9Z2Xh14B^iZ?X8Cn&^e%%9xTmXi~wAk)P<z
z7SK0Bqr;%70fxUw<?kY)T8$=3r7C>|upr=0b2D=Ea8)D+3Ce`0ndn3&apA6bFi?uK
z_Sh1($1R9>xNc@~mJ`z>BNOLTAf_<EpnN8Cd<CF3wkmT<aNWBQ?h1G10{M>=YCvOD
zz0j4N2rpKZO;0oO<wZ}$2b2&Snh^28-yyvqlIJ+<Bu)O#+*b>XSh?!{&30+iPK*==
zj}IkbfXGPgrIb#j4O?*zCnWLcKs_Z5DDO24J%yp9R%gPKMx($jdD-6P<R7)E2Tj`E
zXc|+2{1&tj`-c~gr})zLOC$?72$;^*QhWOdCL%;dw_0{ru5ShR2)9DldeBhfxm}1Z
zinPwIQawe{t~79##sZh8YQ`z&(lqCvLp+vHDTyO2Gcu0y(iao70|<)|FmQ(Y`T+L(
zMMhE^>D9|k%FGwt{j+<oCLEks3aI8s&FEX)ka(a+sKwoILw;0<2n;+TREd$<t#gOg
zUS<~%O){o&Z8K@r1)!=~Tc7s-fPZeL@9w9ui0o=J8l}X8xHtLn5)#l93FM?)H7^09
zeHD)H;29YifaVj(X~oBDlO~=)GoQ|l!M%{A9}@HJA6$Zj;GPXbA}FlY0_YS%t$oma
ztvyb|06C%?P&oos4JqK5azTAKofk)F($;3T)?@_`NC1$YdX*V|c&U&@)$v6RWm_g;
z3pZJ&jn3VPDj*=57V`@x@KN}RJQ0S=ta>ye(gdr%8}R~^Lcp&N<mjEs-WOPEYu9is
z0pYQdXw9jSXM$2y=X>Wccz3C43@j|l*0cfT(GEazk)hGR2hddS7_T;3C<5JfYxm$2
zU<d#qj0ZJrTR2E1Ln(YTkul%p?JmEI;_KwpkeRSgHsYM|b>gcy^bG*!I(7-yW^sOx
zl%OjKqOOO47%5o#QF&b;`VCthit#5NtMr1|Vx>Bee}%RPEvzD+<*YsLtevXMeGU%?
ze^SsV!XAtBMs^uH@o<HJN=-*stFx=XKldW^@w5jhv~(T%AYIt24R%#_B>G*&nL2%*
zZ@{6E>TDwf(>j<c-XgKOn3sofHGZ2T%R%gq9VJ!MX;kCzdoYX4g#ig!a!`M=eeD?f
z{}>wLbJ_-kB#ceMf<pl5ZWn@JjoqA;c&Gu+^HhcpfFyYy9Ej9SK??jZ0u-#`;`}i5
z|0tas8ylbZLGW(?HR`s7WE|lSH-{tzDXD<rzD<vW2+rVMWcQhPhyLZ^<Dj6L=8=6~
zOrNu#EkN261f^OY6ZY*T7Un(*+VC*K$mK={Xh>uW0Nn`)5M<Cn%6fgPDN1F~xw)l8
zK|;cPwk)eGE*@4z=Y|S`CCi{uEp4({j;&;Q%Hy&pe2bXHb3vrw$7EYWE6a^}9Un`f
zYx~K3SYg2~%ZTgen@Cp($gjb`wr4oY>D|@4qY%M}{GLcOmC6)ykO=v?J#Y2_c+-iY
z4kr*u`QrBR1+>ZgyD0odr~gR0p@@Gu?ny8*u3>&hkZOYx!OzAOo<lZ)Vl#)&J|vOP
zL<+IV>uq)Ht+RU2W&Nt)+A6$_iGqB!GnUD2g_Z_hvG4;*%w9~jV4m1&B%Wl=gji}B
zqL|Hm0^|XZst59H2GyHfKl;E{1{g+k^vvY&dDl!geqC?-F|&IjvySckMGyAY+H!`>
z8NW2_U<!h2uW|*Lf{^DTh1(S6-v2tf)P-`8o}+S74Xgz)w=6qUG({nJ@ZehKuzZse
zL}5Wgl68Bj5|){Ir=&w~r8;)0tOX{VXGxH}j9aYCY{`dp)SaS<Gl#$XF7r^wpeys5
zC|?)?5Bs(e{Ur7Z9))T41dv8MyzZ^p*)dyTwh)VyXTLqM2qyO}s<l$X;Ar&aLaREU
zwqmIMCE#_*KLSEfeXb!Z99)!kD+^wz6tV+y0$^{6ZIu|Q`S1m33HY+B0eBn1WMmvm
z*Aj&}Cv?I~wDXuf-?+=`{$)EDIRLU$96w(uFqgHm4~JETuYhD$VLNl(-6K2<@u!qj
zI(!iERx4xq_~B%h)#f^N1>ST;Id?FZ$8(d_ykUtPU=xAEQ>HJ)`90#qv<9Pe^TgZ=
zbKMh_Ik>}lamEj*^a3YxZJ<}IG}qJGplG7#qEZLA<5idsF_c2?j*hSuB0%9pY+E+H
z=)}0YCHvQT;v6ct7qVYrSkn-wr5BmaQAE+a@L>5v@KMNczfJW9f;X#>IzT##DElgz
zfyh-Q{YF~gJ!UMK=T;5a&T8$T)H`?kKyhG5sk)63{4p$GyTYu6t%mRkvmQC)Z14|?
z%BqP6)&;%+>RtrALu2o)Q^EB};1Hl~*CX1cng^Gn_9M|SzGqL@dq$@&ee0S}2pBmu
zU9=BPD3>bhCgq}H$Bf|nayePd+yz(QBddV;`4~5Sy--~jkc^Q@L~qA)IsmkD<`g9F
zfV7dElqFGB64)CNF*NHSXuB?EoXZ9mvi=8$sjj1SwPFRC1WS@4UF>B8e*vE;s?>P$
zQlT~!VtoW#V)S@qtz{rd{6r{&X^>C_K4#A=ur&ZJB=_tf)21fydwzA&%2X6Ot!x`R
zY&p+S&MeFwJR=8SM1Tji0R~f-9Lom-BRthQ#4HnN07P&FsC`3PJu@ilD-j8kUTk#>
zfTUz_-e*TX0p@Fg2vF?cA%I{#mG68agRL#Rb>>)k=a_hSm^ch@)nq_4pN7F@{vAsI
zf9_El!@^xmpKCK)ST`8j7m$sS4Lw2`x6vvb9>yuW!asXZ?3|(NGApi@K_dzxGMx^+
z1UfGaPOnSfM9uEPJ*U<r!8$iU#mWB~bkOJk(psGSvRv4-OS;hThkvq!)$R$*>}N{R
zp@_?fs|Tm~IuGBvTI)g^vlc;L?ng3>I@Fym(C6&=4TvA$En;HKIL1R*-ibI-)jTds
zpftzx!ls~4@|aEh^0+p>1ih;~Z=(>KZ_{B;8y1uHSTRe}8y+P29=ytW$=ifQKRY93
zNRAfq9pBYSVyXk(3T>Utvk8$TIH<QhecjkC<5wUdI1KN&DEGZw^r$a}br9&!pb`#t
z{2M3P!^26!o3VA0pXGoE-vQ~`f3r&a6@*xNArlp59J8GGBCiT$YOqMkTzE%r0m-x%
zVt2?HiZO|<rZvb04!;~W4K0Vtn-PWa3nO)Dp7-4`YA4%ew&Sp2Lp%5|EOGP_PVd#z
z4^_pKjEJL!V4P04IVf#t6v8%P)3!1gPsmTNc@q#Ah7h>1U`Q|V8hAYL7B$L5qay@8
zkigS<HR4R1nN%e(f-e}dH3a-K=9c2RGVAXmu=W!aCe!oymutc@CMHOb`cYgH5Ym_1
z2sCXedn71I2Te{f1Ej4e9_hUZ?Fei*XHGi~iy+uBAyvVGA!lH2pe_rsM#wFM!vhm2
zv#Gs^U-DmL3B@vrj(6H*(-?JiailhE{FR|AN(|4uhd2ICiv&ShNJ;o@k9gihBAI~;
zr0Tw<gYueN&NO<O_XQxD*g8xhg0L~dvfGkNx3%76Zp@S5(Nh#HF9<8;c1?@iuqXYR
zVyDfa$A-;;A=7+;-%i0tC=Wso_Ab@Kg(xZuwj{=uAkKbq#s$|5%(iJ)z9f?Ko`Kr7
z)-@Yh$G2o)1w}R!Ih+y+F1U^#)C(iejOXS_Gy2moMGLk@+uAsX-wR8vklW+feuBHb
zRfn<y&h>2#Ty=yxgRFRxc{A95re%iH@|!6Yyw49L2sAPRrq@P1{~SJS;d1PEk}gs)
z)EdYdn3c+a0ML8ikLM%p)`=z<A9w|1ZUm2V`YextNoGtiN)JOR)g#AT{4f>lVcKjv
zYfzD}R_9cb<b^aH*fM;9lmlt_^OzT~<SRAWSbD-K`KF_Mj0&U;N_ntIQQ3ezCC6ba
zTbG~gAYKXx$0n#S5o)D#R#Z67G_y7Pq(MDS17>7o9zmE;!Z8*QycSN%5Zv?N!9x6z
zSVQ8Hjr`CY_f;^41#s&!T3kb`X*B^IP_7nl5^r~C3uz~!5EGURO<yYIE^uOIYRWMt
zM`yq7qYNY45eGnr1saGzCDf}W{n~l0V)a9J=jXJ>m@lrc5~BT?Z$(%{j)#S?xrnwg
z;DXv(xytQq>vC+H%}GBhRfK^UW-946|LP$4Jhi-K)#?&XJ}d9=eI{uRZ^aO8ooB{S
z5mlFJH%1HsOjwNeBVo2qnY04bdu?j&h#34=H)q}L4`J|=`zh>Bk#9BMF%KiEDDdRa
zZ!kn#HDkEazP+#yz<kjTKC;s>k%!f}055}c#h1RI)AAl~kGcBdefv$mR%R>EbJCbr
zezm2_P%$ObY3P~q@`E8I&|#nwutmB92DnpC=c-z)iYz$JR1|~Q7?><#N$DulEdic*
zbL`!tJ7l;(N~U?hVyXIgx#cn`)iL)l3=Pnhoq7akQgKF@2*wL%EbKsrR8LF*<dUZE
z9d7lG^=v|){5|>k7A-ZVVabX<2WFAS>ust=%BbXm{G>skHn!Dgbg~diK^+aO5-lst
zT*3&W5wMskBoNY@z5F?57CTj}DyrX)VG1jdAes^6!fn+6d?MRdV7WBFU#068I*aNa
zZ^R%k>=%grPMbf>IziO4=@tfmg4OyG^co=)Am1auIw}R8t4N}*1cSt3q>HO)Eoed1
zC+ME9&On?{_Nl5~)_I*Old6)*V<LKE1~qkagkF^A8}AAaI8r-A%!MGuc%byn_sW%6
zB7l8o1D&;0KWT2TF0H6^Tu`W_uL#ukmF#tODsO)1QX7t2wd8Nl&6AL1Nau<xBi!oP
zdj;IOc2g&_+%H$I$EuP@Ny)hE*Y1D`StGg0)cNYX;ByGkX#l%etxz7vYf_xhVZv^l
zpTm*le5pvaLC)P8FuEc>i|T%{-Ys7CXulgitNq;nEfnO*6&sVo;k;C-PNyw#bBJ%x
zY|&#lyZgB19funW<U8CJ%DsF5{P;#jXaAS(lRO{R```-x3K9^)3TA|K7GGYol49~(
zsmGx-0}^<lzhevDIfh<X+1aLxu9w>Qyg{~$m?GA$(i#TSC^OFA;Yb_PCaYO9PrcOV
zC&v1sK+3d&mK$q>PEo(OYd5nrLNmdb@0-VbT^ch!lsZsKP^QY1<q%;=UsTqHfE;wh
zS-8I^=v-1ez06NBuY^VN;tZ?D3*WX12ql+JF{cazZRQGI=>0mX4>21xq0fZ7XepuC
zcekDK?UTJsp-Iv1_$B6S%^r-jN;@6NVk+wgb*FeeU^r*q-QstPh<^I~>`DL4>v`yN
z6R74-Ugua0GkwMn8LBOUk{gX9>R(kA`5pO>p0ZaPCG-SdCb{&9_)SM{%wz!|V2GW^
za}OP@29Lw(xxs8!c~-C8ZMEK)Zy+FEX*o0dfq>Uxq`kaK(%^lzDbC5+sUgmc?S~@j
z`^&vSkKYEswK2%Lvj)m`F1r;6@;w+a7>&K#G0fsT66ksI=GuzpCSdF&oL_LC^-%0B
zE}Rtzr$338KL<7kqS&snTH9z)RF4c!B#kFm2XkM+Xo2dShhFJ7(P|U!V3vLjKP}|H
ztoZlvi}0$amzIV;);#y&2ekiC)xk!)dt9vD;2Df08*Bc8@5@6>bmaMb%k)7S^4UV$
zEs$DFMn<aBY&ZD_Ck+|@p-hq}c>eKpF>4{YG{Tcgf%yDShx=L>5#RwMK66d<x%K&e
zogj3rEvCQW5Qo)|j)rDpjF)ic4XoZ@e|iKQX7a-b{nBwCrv-ERdWlI`0y!?R4Sb|U
zeMGIT8%IW{&DX!{%+6at{;yGz;n&_CT=$G&Avb#O{SoCJuPabme&>hm{r%*n?`y@b
z=T8UN&PJy{en8UDR8)s(x43;@w$pR}yEatYGLiRqP^gd-M>x6C>}>H{A;)BI_sLpI
z*>N`VU_1lcg7=Hv<ht*}^%oq@hlsb(t!$o8-yI?5r^n5#{?p7Fy>?cjE$Y(Q+zoGi
z|L-cp2?(XP1vlrik+Ql;XJ!Y!ulGl;haccjbrY0SN8IDKn>lY&KoUVeulJ_Ik9p{A
z+#8;1xL%L%QvWqcr3Z734v=G6=AJ#@(lkroH&>qk)WWhdvgu?;@n#2ach@h?K%sca
zyVMTIGfCQ&iz1kM)=3y*n68KfokHy2eR$j%7v8AcH-;kJ1ku<{k7ph?ebc510g6BS
z-U#a99w0a2^tg(5r&2s@5lT-y8fWo-yyU6#{~S@)Y!p4rY1sly&AM*GgiOh2YJ6Yi
zvp5-b8twpP$6=JH4>2sS-~QDOp@4UTsl^KBfI-$1?Oq@N7MKkTBLeZs1pWgt(I_4l
z95YL!%n-Zlby`A{ypc!XWmuexj%;<8|DN6b-@$nh2xvOVU;jgFtm|EB^!bro{!O7>
z1-}tqB3qFFL|M=Y3(1gBjMUcdfe~7_2OsLt7LnUqcn`J|O|?B^-L2ROezz}`h|_Ki
zrg7gV#$G#v`oqIVg20xid9O}XyAhJI3<99n8}Pznrh`PSXOjfZJdkcL5kRyU&@l-$
zz9~zSzg$cD+_d4BE^6Bbv-mMbA;3>E(Na$JX4_CHgnO$PgK;zu60o0}|0kxO-$zQ^
z$$Pd^54^s}6pNsaVFsc>MiV~f#QbmjtoS4B=h=OM#VVDZA(ct%^uZ(%TwgualaZwh
z(iGXp41)y1YA~661_fAEq&T%<(&*1;o#8fC^@Qvs(eM?hrK0P1;>$-E$)GjA(@X%o
zDSl{M_<+_jN-9Zl&rj5<0K`8~|8+IJq)JD?7&Ok@Og%JY3DL2ZQIMOR!m4r)rAus&
z_p6QRbrVZh+jrk*u9yvdz2R8VMM?*VaK5~zWn6dI^ezdQ%5U(CQ7X0&Zt|ih>U$@H
z6S38V<Q>J8D(jhHg$dDkad6E|nrx%g;x;suYKRY+;-<CU)6s<$^7@YD4_?$@36_Z#
zG)SK~`3c*LS{z6w0&3%H7VNjASy`|-xX7F;@i2>KEcezG#2&mD-W(35*vNvSXx@ku
z6O1x6s9hK&VBV93=6J!B5gBpxiN)gSskCHuo~fiV4=Q}~5p-fHgd%&&eK~&C7QEO$
zJ?8OpSY2h!Y2nyF5|lMGQ(MuH&Gl(yRm^Jf?yX8Q8&XRGr7O!eRf|$drL?U>Rm>oe
z1Q2~z!n-_}8;dNQEe9v$M6pmNx~M5SAoggoIBCg74x4ou^i<Vnbj>#?n#T?*dP-xg
z1#<X&oGf`4yee?PWUk3lt&4EwV@7gQcL(n%#nZiMAY(E%8ZjnGAM_E)r5V&wOc1s1
zX&2I!5f&!+)hIUO7pa1ZzDhFA3$wu)A8xX<<&eoTDw-@t#e^C`<*yEv@m?=P1@5P)
z&9BI*<10tjkDvuZ9a>fRp)6>@t9aiNKb#A26fSgnS>o9+Uekx+NHL;LMAKGvK}6_t
z$)m+sZD$Ocx|nNl?*BbUb4Q$l^CQ_Ny&RRERaW*pXc+!q8_GR$AYOzwv7cqhM^5Oe
zjf=HYmluAP@qaF9U=ih^&aC?Sb&mYTYCY@mh0u#j{5V?8u;`+trIQ(#r4yqS6B8xt
zC+#0Nx0mt^GUfQ6ljKjK#8WN19!~K#03RVdX0XmA>5KcEX<m_Cc8hiGe3P2lYl29F
z;ch)1l@lXZXY$41fd)8zFr<jsa663IaDnQs;`RI7ODkLY8oFA;t~9!;k<z4w8x&^{
z<vxdkQyh~~vo)PnfOt?&1al>qiv9A;4?;l0VH_6?)uo0Kv+l8vqD?=vB8L`ixRr%j
zUF%x?&a<m~>j={*upn65YzqS;<-YS_C>`!Xx#r4Usi=d-7N(C>HGZ(j9iF^^H#Swe
zQTlh=X0+-(%dyP%xiZ@2&Zq82^X;IB5xF!Kqk-crHIKT_FI03vcruwV(A9brWRLmi
z(<OC9_wN(rrY^lZGOqU79?BXtLA&<Nabjb1V;RO}NUyPf`QjUeI5?Y~Wzx#8s42I}
z25dgy5ZSvr3t1;Fa&;WkOf6e=7-=hPF%A+74$Tha_QSr0gh{k2@1sy?&nPjb&L&*C
zhx2UTo4Y^c_X3(?;BhTLfxgJSIP1s$#?j_88kKdY6`<Xq*JFSGb<W-8ZTSCu0h-Gw
z)RU}Lb+`XWK}IB1ifDm`=_IbZv>g<rA?J`3rP*gf`jt$Pi#p_w?TX+HWOy`sp5cPI
zK=y-Fr0MdlWjMGB!>poM^4PMI@A&l-j#9rPOT*}zou33rQAFKw?ru$fh&qU)I&DNi
z+twwYsqsVOb*jZ|M`ZUF<0rH~g{w9^F~^gChIc^BQd5>{JE1)v(47Rp=VxO+cfUrU
zQ^6!t2jT?UH*v+f={>LVw9P?Yjk<L&;sAECMpn|WE?G={dx6gJNl9XPqZWkHq5~&8
zK6Pyq>jq)T*0LM%0Kc$%n{di1HhQ1$GFfHZTJ`|k(14@yy{8~qGnK7JUqk=lxKpUB
z`!XhIE@-8^HEK=w>26W6Mcz_}%>B2O2hL|ztDA?Eh@+Xgou{#_md{>YP+{Z-u36Wb
zBW@c4@mU8_$}ff3fEihgKS;@xgP|OX`=Z9#ZYrZb*$0=O-l;){;ZdSBQFz`l`4x$X
zchRWv`kC*E6tYh|odD4w%KXo-?~<`!+5lTID~374R*pH6BpFTm1`LHtLK$$rz5J;%
za67K`#s>iZwVE%btL;oA+N8wuV{rh$OrYvZ%EET15N2K-eU5&jPh+?+0z4bvM4u^u
z+To-I+Tt03B{*yww8kma?^MJM51jjpfLAioe#1E9UKuB-1&|5`7%|!}R;I8MdgL!9
zA8`U{?v`8K0-Cro4YITsGFM+wG9|5*l@oLWjA@3AnU*VBfkuxWyObK-lnF+u2(U{r
zaKQt74v{f24l*QhKF+p2em&^x)=5a1nVC&J??#o3r?yzmf;A{G4NntdrX}00wL1Ro
z_FV_r&15%9%vLPDqLcD=`}^^fbn?gj{CKknT7dYSxGfPKJ)PmGEFp97w^*yiWHv4y
zme=u&k)H<#Cnr)^oxh(Q4M&BQl$M91va+$Uv8Yc{;jZxoH~0J<Wx8X3{@>m{hLGKW
z(uYN!zo~#NH{ccd6(=SuUaK69@YMPedCF_M);V|T=LiEm!^G&=YEDm9!U^PeM%yoo
z>FVr81&a>^!b-Z|G7?lleW#gf=xLlMbL>~Z`H(G6eP1Gj?mJ|m-D7!`0YbmQEIFm^
z&{87fPqHV-pJKnq(DA~2KU{Z~-p#;y#aX_8eiQ~xtVbeElIh+)s*`_o?wNyM!Gkiw
zt=`>S({*sv_`}R3jq6<%#R=|q%T7-y8aw~i>+yRB%>Iy^0S+NBG?0q|XuAgh4P8oB
zb^rv4%W?N>;y;RlG=N;H=En(mmo80o!hB_KBp!-9b#SJ5k|gp?_J;dv3h<->`3f#B
zu6^hAu)3yR%E@MNY4mrg!iHX)PW1=h($+lDx^1I5LQB|e7ur9)uP7*nw}^UTQYq#j
z*kLJ73=^3gHUOXRyv1(AYgQb4v}Di~LNzQ!WU;P{XSR!3GT;N?K*#g0r3b+NC^89@
z<Fr|d?hdbk#dQnA)y&4fQS#HjohcC8CrznJq(>2lTLXN(ZR1s1L(D)>xS!B@Fv}$B
z)&YA~X)`kez4%0#nxKABE%p@5a)Jjx6nB1B1ml|b4H{J}#`LX1v++^;9uB94#qAEq
zy;8dzzOK(c=+}pH0>5W7gQ+ZRqAhYBj+Bi1&yOP^-P_;JvG(h&fzt598WVl?D@_sH
zt%_HF%IQ*>^4_NSfPO{NZoYI9&<WN7gET!2jio~d9cm0V>u!^ysf7hKh3LCFjIq?L
zBr&OMq3DW&>>lD%InVNK>2<x@!qCtfzNUv))xQWd@DXu})Kd((%=@MOy0>w^vG_Mh
zYn}sA!HFMNu7)f3T*f**#KjN%1^McobVe&LD8^e-Yz34u4fZpcg`7HlK0*tpH89=m
z@tfZbSJ#`xzx<Ly*zzl<Z<Bt4&&yk>D+~FQ-|M%ir2#?#b5nFa77ur$vu}*L@L8f1
z9e<5Gfe`A3J-k6KKl6Iej>*S*@BBlh&-v>U)<OK(^YQ-b|91TwFfhhvF&;c$Z3H}H
zhJCLAgV#&|URkL(QB_fC{VVveVzRC(8G|Rz_1X{5WEh9w{+mSLY8C#;);sly1P)+$
zFO4LSwfzj3h{UAZMnq7{$FuK#rlb$?MzN&V@ALqm=3WZr#qn_&LU%UKGk}R4XK)B0
z(>_mEUb<V28@;C){#LgxU^6@qz+MCFV~^;H{Gfq$e||CeLh6ml0;9b}O#??%--}J+
zO9#$e%h_@)M%@t-Rj7&i+HcL)fUU3#w;W>pJ8;yG<9QCC$%t_zGv^+}pNF<=RnTr=
z0qh(Z6^Vy#053ffzS|+wG&=_2d?-?GuHxjCcGoir@%<Th57GJ6*Z+Z+`UpybtQyTH
zf5#9BJ?FFlM$YemgHj-N61$6ab_$QdlsDkXoKeuWH^s;I%l<cpw~EtELNuA>@e{YR
zefKr*J2Cq3qtMefo1)O9@ukUcpar)mD=Vwj={P)7H!$%Wkms5Lrf#FVL+{WC#cMVi
zwV`{PKI1>dm|A<^Z>v(W`R!=isGQQ6^xTHRQK29HT2zO!3JPv=F@olv@-|;q+?AY+
zC+;QsJKxs=au<8XW3RrvP@$VwPyh8E|IY&SuyU~RtsfnHm3yVjBtvE?6QyyuXpOcu
zj@CX}je}Q1Sy9j~(ckLoj}K){ynn@*n)_bVB%Xy1+OBD~+bP1%-!?8`{8Eg;aW~qd
z+8j4poj4X@$@wNhzozD*{)tn1u_`kzinlsF$+wMkE_MPIj@r!uD0p=2+8~35N~q>Z
z0tq@|F3(Ac1$fZS`Qt7ZD$qk*fkZZph+K*Oby}~(ftAl~XrcUpBNmzp2ky(sb;*P_
zk`2Gt3r$@|$m#BByXvDszQuwsc19D}D)KO({2(&3^(K-~v{$e*0fUX<;gTpyTCM$v
zT<ZbyzFqkt8IBf5F5oaZp$}9?`ymh-Bo3<IV7?p96-(<90~!Xa5zCP_P|#9iz(gH^
zQm%dA{TL1q-%RfqeB5B$rbiy2^b44dpiqtjPkO+IXTY!&ir3}%AFE&9)PKe(DcI4^
zwQYxZnYaTchu<BC%zilYQX9D-kd-KTP$K<pKVzhHF1Y81@;)vI!y$A~-vlHo`*7JO
z;57t6MxTJiuj4cSRWCR@iSmo(dUG~pxm(*0&E;K;JHU<q{o+qIke}yQ=Q)3fWJU0K
z{|4V^?uTU0$Vlr4tg=FU@!M?2mRE(|NNg+*aw>}3y6xjxgwkPL{`a>{gF&jno{u&1
z(u+LbOQMUlmZL93lOxo$^zD1ETV=IA_bCx80GD;zfvTV~#spuI%X%SMT#Y?dW|=z_
zeiT#A3?_%hg@|*yfNu7wLb+BQ#)pFK5+Y-TnuLytj+NeNV|w}RVC*+h`g>K}k{`w#
zbqLeMf)-?`X0^3d3I^d8cayk^$9!wudJr7e1c;WtvbdMIC#OBGn%XbvSi?ncBWW{z
zBk{fRne3p*b978cmI5j`y3FBF4p|r`8t1NFFZSQ});~6akU%fMjwyb};7e}FV1kty
z!1MB-srJrsw$eCBnzoGtfMP+JTD-nHuu%bHU*S}aQaPb5mw9<+wRR2aaUik53y}B7
za*cmI2W*5V(3O$Sep|*@1$zrUY94-qgh;be<`Q4$50cuKV(!2R4=RNnA@H9-QW(A6
zSA3V!YaJkU*u*WA%LAO0tKOyGt88O9cIoFw3KIXB<6RKFhDJjzrV)aSJpvxI!rde@
zD0Uih%%I4Bh66T(>B6P8%+=cTanQu}$+68H_=ykTc1JO@5CX1+u~vl039~@Kp$r=V
z8C0jpLEDQ|Ke&8C39B3^o6a=mm=wq<^7J5mKBpCl3r#1<e3>HAsVGpu;L~bleS4Bz
zA3E6)3j;)Y-j4!8I_)kry#%}-4zCa24-RTH)wH|7f`IvVhuuUv7K2_AJM+y0!J7NY
zT1tV6n}&wAHVxZYHs%y*THkCm8GYnh$8V0_v2i|BEJCQ1BYD-z-=izPT<JETwL_7*
zh<y!sov)N@+@Gag-qGlBX7b#OrG0hLr$|BS1Cd0Q!WF*f^DuFKWfV9}A&_K`u(}yn
z{A<u;KkKjY;l9MxC|W3HY;3}4<IfX#?N=!`!55TV!sdfjs@Wm6$@@JC4V4IeiJRBO
z@TeS1exS$QO!sB>rj`@a)ee`X+?hQM^}JIuYb2I|R1z`T3Iq3L>8*1jJ2Lm8Fq6}f
z1Hp*}aT?FvRA2Asi*R<4oHx!4i~~>a^fC2`bnwd@jAe2#19!X33$9)E1VO`9@Gn4_
zVM*Hu62}-Gn{#5?s1Qq-0@#tTBS~mi4nX$LL)Bm(!gxaT`9>aft-BNuG$>)VdQ8>%
zJUhX_<p&xG42Vn<xLcSG+g9W4jt&487u>dW1mSAgxbC49a=NrKh`IrxeSIH*`Mq<@
z)i;>!y8RsNjuU+(BEgA+fqd-N?ME%vbBh}oe3cBFqxghRz@9v=B!4U!l<ls6)^iHn
z#56Yz9wlDeTP%2g1C3fx_LVrMGaG#N^P#2ZA1PDekteG;<2M}UEC=O&qvGGr{1D#~
zX55KbmKua$C;8ph!>}dM5L?6>7p#bUqd$hP_dae0lgK1vGWi~(F8=)T|D56@*_u#v
z`1SGH@6Xu&gtjy{1KyBr{>-Y$<vu^jMa1Ki9?hRhVf7E5%40l8MdXig@^_(reg>Y2
zJH9*5%9UF1OuwAa;$V_%b9?C~nCQcS4gEEXbK`k{sJ>c>uo?xnmW@pT2H64xD=<EJ
zu<%9gJh+_g;C&-`zxcTF?|0a>Y`tZtoA{X%9l^GbpN=F{hLhROOTR<jyw`g!+pa9q
z>lKFS90BO&;ZhQ77}}yz?ly{+(l?=nsmMnutz3sG%1lsSNM@jz&x9g0Dr8$%)gWc#
z1JM-1Qdt*6SGD;Z1FVga^H;m5a4XDa>-`v_BGKMl(tJhY{%KStCte((jF{6G4cw)q
zo^|7pP8r{H$^ApphE6StfQ3C98D7LGR>a_k0Hrv(vyR0v%)aqeIpkX}iZd}hRy;$B
z@4*L*avoxfhF(pGYp{3Gk}5Db!ZVN*52gucLxUL-kYz^=XuRVT!_j<ntaXyT4BF{1
z65BFgrL|{dp(f}ZEQlu!6B}^w4TnuTJ6RM9%u$b&Q!kTKZ;ymNGs+45o{TDK#_)>3
zy5u&G5gjL$$W%onu|C83G6IneoQw+#3&+Rxq9UKJWcOCIym(2VVUh<W5^$n&=Zngc
zbbhSk)RCl+S5i^Mkt<-b9oqvg{JY`?h+o*lT{$}U;r60UCsmbEwZlP8ycCDOXWO!S
zzzox%)D9BFr=;CRp5D^sZaLd3R#E=EJof*MnN#CZmKxS3#J9(tX5o?U*qL1`aRZvc
zc4yM~59?PX5P(N=%0g%xDqtgNv-gPc@dOcnc6Vo?`#=e=gmgV|+QC#X^A`BP*!K1p
zj1)rCk=U+H!_Ze^lNb2o^pd-xiAc!ckQqh?l(dQ-`bw4aGi~+~{+Ks`TEu8k8T8zm
z{{|As{0}qD;rXDZ8I41N8fyQi_b%h?cBXwy2X(18xZ`7+(S|3ajh>VlnGz4tSF)qw
z@6N1V2v3=ORXW`ByntM~O^Gdj%;=;0yN&_^6h?n8`6@F&xLcKt>MMAvZGgM$SwwZ;
zEmhG!6P@lGw2Hw57q8aUiu|b~{I#e(3Chl(RQ3_q!NMg6F0Jbw$uuTF2RurcnN(Pa
zOfTkvbIyLg1Iom8ir-vhASSZvRaI-oftrf|+So$hlGq!C8qd}nW?$9W&m^g8`)wFy
zyM&L}>5CVlzU^_yS$eA~PR;6kku>hP_zd^HQaiu<?&n=V_iZJ5Yio4xzJ&1$z?&V)
zRa3>KXJy(eCFgRbPnq4;`|@X~M^Qc^p*YN1qXkS@15>Ld_9xfBXB7~1V4`eO4-DMl
zGc2H}p%Paz!yqzdKa*+2QJ5z?bMZ#$ysnu%6U1k_Qqektgq6u0g>qa`BlBU-#g*zN
z#M}$haE<FL7%?>`YT2aY@>5T@F!*&sGw`k&YOh1R3p%noO<ZdP3+=SMds}ev^Z%s+
z%C><BiOfDz0dM6;M@dm9c2HgNDxYKOOV~)zL|&wq`teO;-zEH&N31y2l^ZZCPYLo-
zcGnCP-I|t}U8?wRDUmP;aXvDUu1#{+ghw7ieITPLLIAoNrs(}q=~(|qGXVbm2eNO8
z1M_4WdKA`r_JW0pH(YV0BAaLNJE}`v`#+BY@GLe6(+ugDD0u~o3Iy9f@BP$y0y}!Q
zstX2M9x>uK5W>zz>%wi`i?aDcLljM&P;jCG9f!8A|8b@|m~1RCC6QwmdyoElv4N_C
zqeV(JO=`dA75KbwzX1y>BOamYy~As2GO{9%<^<%bqQC^%>n9TFE-Nh`K{SfISR=6t
zC`9pcFW7~5IL0DuZ1-BniFu{o`ul&TYX3gdOgst-A&iZ?^1&(HC6Oa`Su{Y+=LQk6
z2Wn)q^eDTVSIM__Kv+$AP*PlaLm=tFvo#zS5fRvZD=Q5_oOH(6ZlE>tmo9<8q<eM>
znd<shvt~yeGwr9~npe8$25$SpK;$az|GGO*5yHxju=`!@a(+q@;T*OdX1C_5LfH=|
z(I=y$G?O|_t!HIIKPGSCOBqyDH*@&gT3e4lUN8T2F$n;(E&y1fy19{wjLOIj``rPB
zVq{e3>8BmBHT2^Q9bL#iO7U)mUG8#<x;#+Oxx7aDTi1U+@4(P75V?+^E%Kk=<S#Hm
zgu?lrjWRmr+5l7npqOrcZU-;x3Rv%#C){?wIZfvZv}}BQFP(OFb~e12=6}Dd+ZpHp
z?5!>aDts2q*PpI|dFSN#cyPht{(hZMW<p=KFA#Ua7W?I7y#!t+ykq(4v}f);yTC~B
zd-*5T^3s3F&V(;e1F&A+>>}dS+4bRI;hlM8rKNd%o@M}@kK=p@ES+ZcdY8>(2rQS-
z<D&&B8Cg_R<mdHzqxPz{^WntDQ&Aj{Qs&Bk#C>~>qRM%=aKM$~0RrOwX+ECXUr1W|
zN007$Tu;_aHyEMgf8Boo&qf0)<E~R=JSTFr7~;n<H#6g~LYqeL($@9_d}_})e=>FK
z?{;?jEVU8|`Mr(o3;^zE1pFQjK=;f<<mRbtG}{*pJ+Lv}T5vey!k?Uy3S>bM^YK;H
z<%6U|Ep&uIynUBC3U6Q1-HIHGWc^UrU}rY9b!GT}3c`OzWb7Ca3XX<(>oY>Tj7@wj
zEZ0HsOg`5?u>Vm&|I~Q|)FYd&j~gb#vC^`@KuWa?pGr<@tA&Y%rcJxi9Ked4>u>w}
zuj-g3&}=&+$2z@jb!~yxcbi14-sqW6hCgXdNnxtO>!p&_Ad`lcE~r5=q)mf8!iTm>
zv7$3*dV!mPmR9uXFUP2rbsTVAfTMkYTW1Z@+J?=DzKuO$JAHI+39t4oR8H?j1a^Is
zJ`6t!Qv0_Bqh64?UQ~yG(MnKe<r12zIRlav5iFFI@kF@V#UqtU^y*GtWUUexVqKB7
zk|(6*RP%z2-?6W5rlq^dZMU81RNK1_mqn6s!@qwYeG%%m_`3-pW$7nwP_XrmjsV`H
zC@+5zpZd#cPeNbx0`QQt&zBKKaS@~$uob{dU2+Hqt*y^2VgJ%rUdK$qL&Hlu);M<M
zT5_HVmr`~T7MAnUSxV`NnSZ&6_~-v{^_D?(ZQIs1?he7--4-sv-QC^Yf;$9vcMl{;
zZ~_E(cP9k5;O_Fy-1FUg_WpjPNEL;xHRc$7^xoRjS{}Jth6oJV>Sbeu#Uz40X1$5;
zdwoK6*n{k}FC>S#nXPuD5y%z9uM;2n4Tl#;odk_6BN9!^nH-HNl=i)v96>Zuv*FI9
zuWz@+ihlm1Q%B?O(Wb%23Tg#tZEIFniCl00&_)AzIM)uafj=g_P|VVro&$NjKMn>$
zcRur>bc9oK1!ZOBAxni)QuuPQ0!0PY7S&G`3b1g$zSYNhiVZ(|EW9N5wcEw=<Hodf
zYAR~1jI`@NnV%o1W98lA52QKjhr$<8U4}j^fvo_hzoqPXGpgfA)#Mx>3{P7A<A@e`
zpt0q#eG~<&L}-uw>qO7rv8}ytudoLZyt9@6OM77pIk^Cbz_>ff!iFb(Wj1d#oF}@^
zqF_>_j-ceS<^(W$xrh!b8FMF09w>4l^tq)QUDbPXc0EgJA?YC?MFU*(@&cDdhO}_6
zH297M{bC)g#w_);Q~tRJRpM^A6dE2I3X?jI;97}4(0FfGS;bNH;ULg`Rb=f%(tExi
zn#k^cNRH083<uXMk&JT|Z3^ox##!dY5?mjSi6z+;who38^YW?Kbie8m?wxy(p)%$=
zlK#FjRy3a~R*n<VEt>2jHbthP=>(B&UZj6hZ$crHecz6#s?)38XpLUS))Xh-XbCMC
ziUoP~M18i^^>*qc2zs7I18>yJW}GLKv)pjIzM6JJ;MKUX<!x<UMl(B$Y7cpVfcPMf
z4j02%C{JKfvIl?G$*@C_U#JLCJs4;9aMGcJxRmAAe7*9^Dz3n<@8$b-v$=y#lih+{
zrIFoI<7tp4B(!8rWH9qYXJggX>Eq+;TroMt+O>&E^*!8!kgxkpd|zqKecBIMgoHSF
zL{EmW&Kz*<)_k(=u#wwg&cmjO`G(Qeqj_TRRY*jlX8RQg84C!Dx0lCHe*nq47ZB?R
zOzaijPksiPTUP70CLdJF*H1@tIj&_UCC#*ZyUFsp?hXUy#}V2MD80WqHO7yhf^Y7c
zP$|$D_qfD&)ym|-gMl6$ma{QTd*LkrP5CPrrF0oK<TCFrAHqpRV<%4d8~l@^^w9<w
zW&jHR<8||k3Sl0X14bCf#oQYpzb@oXxZ!-IfrhDoYl<v4R$V);But$%J%ve1btSY2
zH)cElI2(b^<)1>4(8Lv1v<R<6vF0apj6m@zUQr&v-GfaTXAY$LG$xXXg#(Ai-1Yth
zMf=_9FE@8<A}X)gx|8XmP<SlP52=8qLXsQePlnivoI+{#w)kywe-S_&w2s4sf=k#0
z^wz_kI6(fPYY0{;O>#vKOx8~<ENu4mA`ipkJ#Lqwa^r{~wP+I(aIsHLl$SVs%pr(s
z_Z;n3+Tx+fwzV`d_#Cu73@%n=e6f6>_rpW(8s6l9FB->-GzdzR)ExfS%T7WYZ{Eib
zi$pmdyY3n_DQCt<z3d#jp##ukKd^B!G(BuSv^r{yR4s%t<%FLL=x1l?B^l|jG->Q!
zISkCDV<+M-Me<U5R>MI1hn6#DWIoe>GAJ5GzSFg1rD@mvu<$(81;pq4{rCEOe-QrE
z150ut0e;2-BqPmy(9-XL)bQ&7W=TpPA1Qr4^40?H{olMQVj<IhIPEb#pqIOBme6xB
z9Pn_lW%PQar5s4>Bq}O8?S9gmf}8U4M=9_K2<_@i0Dw0M2P11^#srWsNSQ#)3t)=|
z<_v?%R!8&YL7~X4EprP9m&PE|M3|mpnIK_Z-PP>@fakf3;e%SkLB34ynSH71ulN_`
za{0HpyAF&hZeomHLY&;!fG9RX_I@gNVEB~B@40Wc<ka=*0gSD@1J9e53_~YHN4LuK
z6$(dJHvzIs31u1?+h`WZYF6(4^w&Lr9Q}e0!Bg9}4;Vbmn12F9Dd(9P(#!6qJ0MM~
z69AzKV3D7DpUm38&u4=LJdPQ$&#VL96UkOBz^VXbGr3G~E+vYWlHMTgw>m$B^DO<1
zL~SXHEKoskUu*XUslhzopBn+}lP?A3;I>a!V=O!0fl3Bw7iSCla>1ylWNkwO_z^T3
zfUYI{(|JpDx&+4ukdzh;0AYLZje{}*_M5_it^mek_yi`Rlb}G~=;S{hB14BHW{d#a
z67}oNRDCKH5_FAkvNqO%$c1Yfo(4!{)oT2K_b+{q5iBR3TlEuTqT8bD`0qZNDt8nG
z?|&*3wG37+Wev65S-!e(K?JAGDC?I@drXjfkkI9{lb#RPMMJJw{E-@4Et90|50?m!
zP}I{*#KM6|3p}rUX{)j8)u~<U==>qzgYd*jjox~G)nGl%euj42RR6>94ajIPa)S*E
zVU2>r+k1<M;C0)dRzy3*+l0M<|0vx}7E1_&db+tjVgf{$wdlF&N$i&)mhZjMf7)0`
zSojn}uC;0JO0!J{2`YDHTwmhzIKfr3z@(NpmWFi5<8r|NWDXQL<HDivp?HG=Yq7`2
z&{RPec2PKnUM3mL2G+#EZuOILl#N!|+$CzV5qfjdxC?*f`AF-O#D{eKuQWoBBS5Pz
zZX7H@v){dks!yDq!+#{1DmDVWuwr>ScXRvGWYG90PFZW_67g!ffXw9BmrmqR@Ks`V
zA}=6BVE7qe3tdIVPQCyu(H|IyT#h$U(;O4_k?)Dl)wG@Qr5jAgy#N_a`|LI|#n4Ht
z`6f|tT9{2`ufi*U(Piuwnvv3lCY#L+CIeTTkak#+My%!v@b-vp2b<m=EyQXcdVHaP
zFkiGx>Gw*0#%aYx72cbHWJw?Aj3p7u$Ar>6z>PSHp1T%Z?jJ87Qniw=7}JpJNO@df
z&*7}3fKo&;mUnVRC!P?($HBWF-V1E;+?_INf9t}7mO6j9cqaQmR{Eh7_qkK~(aT(3
z{cr)&bT(VceoZesPwQiqXGw5giH>MrAa;w>njU+t+WcwX&YgMc-UnV-R7+M(6ho*(
z9!f7h#C_IfSSJJfUH6!vPo#~Bz*g{qdbLbJrUf?rf3*Mvjs>hvbP|r~<bS)bHSJdj
zfaopp*C`O`wzTnj<~fe<I(&jZujwd#;l5vy6=a1U`(@Mg6pAqjO+Z-~M;oGNmjsIF
zXSXYQV(VVI-X<Pk>oV0vU+oWd!lV+IZ&2_-<wG7u(|fJ9cbFs!l5TkK1Da332?g@A
zSkG86l_#E~zvw=^2VUC<Te0~}m#&lgu@>7*iim9>MD~<XG&B+*+~v}lpXfvn?uj*z
zBfSDctiO}1<6@P%qi}EQNJbR0nktzRB6i#Dklt7tp+@;kwg6lKWj@Q*siiV(cMA%r
zR25iAczQ%QRvUW7g+mhBusYbOZD0^M*peZ8i3QP#0;i4_ulThmjfzXzftJ70Zuz3S
zX>gR|kjMCHIk?=XU1Xx@4e*eO55gP*R4PcjcOVdV^H?kbrSzGcuJFvo)v(1G_h+q)
zJ!d}S#(X^AsHPO?Oylfi10)_aN3Hfp>=)8rL?!Xl)mDPz<3)<YTp;^SHQIVYH2j~`
z`6%)VJ^GSTu@wY4`p1p0V(I}Z1Hjmj;)ydl2A+ZbJ0op1p&+Z}U3RaQ<pJ_3{%^`b
zly$5hK2)^4C79+VjyL!oKRXQbcILjvHX`3Sqf?)@u()o7;cX`HBj4k;_K;q%>LMf!
zQlR=JtqgyYc`%t1yJU$FY5aO7FiK-Q9VAru1`B13nh1lE#Rv?I2~6PSso0tDzlf#k
z=A+>Gh@hERRvjDLwx;79SK_&KaCm8ca;_6r+FB&-V;~vN0O2Tpx8ZGH9M=FdiqPvD
zc4|BQ;pBg;Cl8a-UqX<LIW}vp2zVdYI{o?KKp35Ot9E!`7mP79T8ROjg%cklkWuJV
z_IGrmL-RSwrssg|Jb{xEP;N7(+z2q2_~&Pc)MFvgSw#t13lHJ_7JND^sY*4o%q#sQ
z5MNSLNUk1-Po}05-oFW{AT?FR3w+TJi1hP-`!=*2AZBjO?|PzpKtQk@Neegk!WCMX
zm8JUvtQfUcKUAQ+P&pi+F~|7=+%e+|;kYahk>LaX9Zfl!k^HY5HxZ=N5$+hvf2v$+
zQbMMJF^!9{TEjB0cxiv8OH6OJx98$-`&=#1cP_lO-%Mrrzui@jfIKJZnONXQ5L<s9
zd>g9vV_fS{40jszN+*{~^tvvzJ06~YxX>Iyf8`UuwI;}#r>yeT%jholDBF7WjCRb&
z&0i#k;8N1@$cv>(zLlgnHL5Thy)6s*L2eZSrk<vUm}0_6Z!wCd#eq=<nPo3|enxo6
zZy<<4P>u#&w>6z+d{bvRoAvpV;nmOMgH^Vzp;`0v(t0amEb#dFWIRpkRUPgS82lbp
zvxlL_Vub@R^2v`)kWkBH;s`KGMY)coe6Xdky6F1U&I;IhZl$bjNPRGbg~kYY^drf*
znx4XYWQUEI)f7R=I&NT;h;rhE-#G}zGexZ8v)Xw?P)ovKSSbs$lAvM6dognR)UtA5
zVfVjh*@R<*j0;IEOL#eV_sGKtF&Dgf=~Vp(nWi1#lf5O66ytD5f<lk2xcmCNbtM$Y
z*7}t&`m?i>am-W!9~)lbd2Dbw+yX4~6$D(hGz56}ZV$xVb&w>s?Syr3Fh>Hrb(Vf6
z81xvdpd_3)2G41VErO2KBbwYvOJt;ib7h^ko1%Y>%l)%kB36{zDjS4Jodyn+rTs^w
z;YbqtonK{q?}z?aBFSFq%Dj8lwo%y$7{^@YKc_@SVM)eD<pKqdm!_Bl<3F$`p(k<Q
z=Uz<Ny{8f8jDKo-p;XI*GSl(R>&6{cw0``I!y~9mYPJAomQt-sZ<x0RW>Q`^O0CI>
zzXTZ?u4#0g3J<@-i<GO{0u@r#9PUDHj1(8FAA%7<PLYUSA-jP{LPY^ne+Gw#y8A&=
z&I9Vo6wFM7nxfpECwP;cY~rW);w)=-IIJ1WgasM$<kXmVl4#L9k^x-u69(6OZf!YY
zTIuNYr_}k>jzl)sq|tojj-b$SXJ}OGZ;YJ1hTS6YSi^9|U*YsGXX$+nF^nlgVF*l(
ztHC3*RmDl|RXs(wFX5Ee0A5x<qb$i*FpTBy)hn-bR}_B$0K$gpB<Zsv!-GfvoDV~n
z7D6_Xl%%3P+b#}YC>|Oc1m4PHp4iX3!%;HdV3!>=dwMaiO+sT&%RA><PX%);PtSgk
zqhY~Alh(kTVB^eOS|V_sb53Hs{fk}Pi}rrAGuMB@EXPw?cBi(ze(hMlt%O;hgq>~s
zr?R?--3)_{7D&p&*ZOatLmTRgr$gpK#?NCzk;FC_AC6!**qMvTWYXIY2gqL+4SQ0l
zw>Zm9=pm64g<~Q#$;jBMg)OaBa^MDFvUM~1i9CA;i~>)aI(+ZeI86R#AoXvua4_D8
zpTRE+l*eY_e(o9Ow%6_w@&{zjCB?<Kn(3F*pTCL%2TcJ_5^QOB(lv+qHbc$LpI;eG
zvKPMIp|~JT@d4xXj07D~Q-~kXXJpj3LqZ>7`b(Z^kZ_&$4i1{EXD|c_yweU-GN4tV
zD8#gH;9^IDSe#pY-9cxw=*nu#&BsOy`?qrJ8c}yO|J##whq85p{CF&~3^54{QJv$u
zP)330fSO!kCh%dns9ub8<fc5mET7SKCyQw8x)UA(pYqZ=7bAzzXOK>39#@2uUYgmx
znoBjhZ@eM$x{^$w!J`SOO!9xwR?(h<c``BqSLHMf?4ZDh5)uWU+XaT|_A3CR`Kva-
z0LY)l9xs@B$82o{x`)dJ`IE4**_=)&If4GOc2zR?tj^u_rDGqTZ{|Esf0cZJs6FEE
ze9oIqo^>%BBAlA=fBw#Wf41@qK#%|#<Q+nL9e{J8_R40qKMEF=kaUcD!#*lHRu=Gg
z(i}XLArlBaS?eAzI;<D4?>Q+6`M<VYBH}P^romwgv2g{JfPSNVjX1=lSt&Z<9ZI;C
z@P;Z|-|I)rZtA~e%t}j3^Qm@Os*glloQ$eL;^m#dgk!Vw()`O>V}w9P1OJ7}-JQa$
z;qg1Qk_#F<EUTg(p)8nQ!q{l<eAh^+!-k^#NI7n*hV(M?!wipvj)9kD#UChNkPNB<
zfm-$CyZ4e@B1WJ?2zv3<`aQm<P-I&wJ|5A;=Z6<>qx$|mZd5^z+fdZ~@%+5}PN#!-
zqJqFXI<EHA?$NJ+P^H?aE57g%1%*Y!xZQOi+TCukTCdsT`NwH!1d>g9Zod_9^*#?|
z<ZpW~>;beTgVlL$nIDasJx=RO<p5VfZ@}p)C%@;(_{a1PkBMyL<Hcqrxt!+#9D*gM
zOkO)n3GadE4`Vs~Lk+lP5@Xm(FOO4n<#biQ@Ho6!8M;Z&4j*ll*SAP(<m=2B`|}n!
zLlhmH1uD4&urEZ`O08K_Ppc$N^Zo^Z0h;7eP@BHY+lI=+%cXqvM;oF6=_R$cVMZrD
zCznE?=eJGB`>6tM)PS|5rEg;Nznaf44$Tr0@ZE2ZYZSH>LV*Z?YJ&zoZkmHPSdxd=
zb7H=1msBNEAX|%qi#c7!#W{=3-{-0G=Jt3okPp)2ye8l}M~cK7Dw$}5@=Yn><?^Uf
zs>Z1K>^|^i$FuXf1NoS{(25B#)r^;1hs_HKT*0{=0CWSuW77JtEf;R&0u9q%DMDXG
zbZ{akr_W;Nc{0xiy0+F#KSp*mxj48?^`cvS-Hp5M-=|ur_`e?ge;ft)C=g%MrG3jA
z0ykW&w%grf_TRnEcrBY)NVsC1)>!*G+>f~(el^*xS3UBdxBK5%OGY$usCuJjD?QdW
zS+4-}g17bWzW2Zrz}7QPo&{W!*`+#-XUMf5fZzOg5s-a#AH&=6eDnBgF3@4F%)#EC
z5YaOKCGfolz~zX9!U#QPbP2cUB)UCJ7va1=Lx2tw-7Ob&qSf@($NL39Hvk=Gi@&JN
z^AxyzJS|YvjCypLGM?juM6K7`B}_%h3(P~BuB*UANtCg4i0jz~uUuWLMu8^Wf0q7#
zMAzV?r0TVjqKAM%<ntAKoS@kg%?s%Okgh$7#Ai3>4RW79oN=~8A)EX4!_nb)8S+hD
zv-%_JL8>QB1MzD(fs=l%@!M7DSh$h*0ML9PTk|uuJS+?z07S^Yt}$W!yb6{yytmu|
zu~Sug>*J!{qfE#WwZgXG(s{sn+cB_8Ij^sQeC)s4jxUX06pp$4NXxa(*TvbLr#FEm
zaK*2`<J1D)Ie8IufH?hWn2*i5+FMz8w<=}Jw;)-ag885<>_Q`Jw=8NCPuVQWP0dp;
z`k%uG0IWz3#vj&cX-Q&MF7HmF20)8;@S~$PcEy*P&#q(S9t5oowIn7P7>ki2*(KO#
zCht|XMInLktNF6aYLcGG;Ze))a_U~V@_F1+215Ke_@fY>_M3C^#WY+luWQ{iCuXef
z<BC`<0kNc|HsqreSvn7~4!ci9oiD|v5TsG?zR_~Bkx~>gL%%mF$<jy-K*t|G0JD?_
zLdpm<A7E<ig}Zt1;s`;}FG$UYu*O449HkF+XG#%L79FQ40;=fPy{f>WIdNArix5K+
zKy<aPO*%nwa<!%|uL_}vIYO7dVw65bpC2TPi7Ts6Vw*#V)^V4Oz`RCVK^nhdu{<Fv
z<+tZp_*4lP8B)osDMyNyDCb&NBdt~{t#~<37orf7ZO<n34X=y)2N@+el4s^)!aFQ4
zP0G3A^$E9A)NdK<wc>E)qRKkTr9AAnNlNLQze!j}C94RI6=l&A69&j@WkdIDNhP<R
zabl=y+|jEaXojYW-cC1al@7A>3>Q)8G8x!c{Hn~-5^>8?DOZI?mgh7Sn^iwa67;u4
zDl7eYl}#VO0d}cl;IR->2p)+E(je!U7*{t(9%NiCN@XkyE=Q+1X$px~Cy98t89%J$
z4o#wj<w5b~Ri_HsHnUW3wynXBlD&y<kEi7QwERsBeg1nncUl?dTp8cWxZP@|j~X_C
z60%Qf87#eNwoC<lw#`YF?LH@yM7nxY(g`K+ON=3fim!XI&N$@+l_g-WQ0ow*i$I|o
zwB|qzk+h&67zD|5EJ!-@d@?pIBd-(#1ph>rnGvQzZq~K|CMx2TMoO_4vO2HSXBe6?
zE^OC(tcowA5wjNN-DIWd>8Tg+IE-`{)kq^K2hH%sC1jU=ItAx#X5;NV<>Mik+&=84
z;cVIL_cZr)2WSU=w}PvJ3GsN01;|q;m!z$0>#__C`UO$qEZ;_mQKJzDqEx5hKX;6`
zfWDD(ZL|GK|I8$NXSu6Oq0~_#D8pRiO(aXViVhj^vz&oL6#-vi;Uv34hCZ@GJDXU1
zP@bql@;W=@DT(n&7W!s5la~X<mkpFQ>|<@o{TdnfgaZOmUKU#J7nNgmcyT%OH|R!N
zp)9B-k7E$AW$JLq)E^f;Nhz0Ne;>3h<FcNYSCe3M5T_WVr-+QRmS0g5qnC{mXOE6c
zt@cqlT1OAHVMM7*ZP)#Ya3l_;q;<Fuwd{o~X8*-HBFjprOzgJIlHPh|Ta&S4KMjM(
z_qHVDD>%M8Lun+i3SFb{>a)!0HL!i9ijv0~RfLLf1k}wGFs4p8N9+I_j<8{@Ma>|b
z?zf-Gs)P}yHhgRbQGvJA5oK1FHu%=qD%mh7Q?^lJAes8i(#&*nyNdK;#R|8uQhQrt
zZ1LnH!HGs5bVWYb_si_Do2vRgRXGmi{)Y3P-#Tz(^xUh<>3PO^=5?)^>)4nS;>z#G
zO|id}qllm^%*qe6LK?EEb?ETb|8(7DpP27jmP^*L<FNF&rAxQ1@rh01)VQu7Q4pP;
zC0gOkfU~v9jv`?i1I1uda^Yr%5FV{_XlfPD$J&M(Tc&;+S64zVFP^7_0>$Vc#5T82
zTCJ6`HaM2qhZon|7!O+E^Bk2}#<!ba>YB{S|K?+yiOIsx^#tF}&(7`F-fNdKh5W}R
z{y#9yF1T)k$3ldz9SY3t{QiZm47Db9Y8oyJPFCo-?$iazRLkU1dSm<1k5{&;8V-1?
zP~F?O$j5=u<*6s|xJC5#8F_@Z73Q1{gfhut{&9-)X>hhIC=xbLY>1rK*=#vnW%_x7
zK5TOxR#6{cBK4*^d_W9T>@t?<`Q8#cv;av~(%q4`f&^5uJL?KfTgQ<W-+r{w$Yx;T
zlui!396o9yFVf6+`$gDAgTO<LrPJq(b#T#Fv;;?lGBDmCKGnYLl^!Wcm_1OQMX%tL
zJfKo-nIzpWDJVCSOes6#^`v!>Epduon;}N0Xs>RgYb%glk<VGvmoFA21qJxX7&|Oe
zDLEw*F$S~&dg7B7NWqn7N$k>iQS>zilO%mxAMthzO751T^=2AL*g|GOY{Jo2y&Od%
z(Q91LCrV+hq64qirlelGKEqXmC15`1i)@rFMeDfh0=&$=<?6TfEy9lMs5tDe5!pCB
zNHR<Vp=IQm_(_~4UMZ~VbP>sv0US6XndN#zMOkw8?f5*=7vrV)5z1zgY|5Z(<+KNJ
zE<r#UvfDe$kr)dR*2+DRII(>*ty29**8F#jmEaAQA3<g?S&Bi72W7coH0$r|`m72c
zs7prtg&4NyBVc0&z;&E8UyXg#boAj@<A3r9d@I%Jpd|`WOcymP4^X)O!<gnGZj7o#
z0B*UamYh<28vATRVGYv#uj~M@J+Z*mdhmf5a%9$yEZ1J2<9+>ushp2gUK8n^O&gQ`
zAyGgZhhuGEILCha1_kqi8{huvfHkEVN@6792U`lsu1n^l?_p+L85UPy-Z#PZNnei!
z$>IH?L7hD3(PbL$zvz#JG~3$%@(Un=_GR2|;$Ktf`5>^^L{414DM<b#BD~M+(cm)E
zMvp&WPxPT4nIkF5#)>j|^&j17V`L~}e6I0L;vA{ksukG;mojl6=~DIaB^_ML<1D4n
zbncFHnEc_IVpk?xp1Y^1|21)kbA<Yg{x?pdKMIpvj3LWtiOwU{9x&4AbojWNn2?zh
zjm9IZ6XRv)=jC;{?#aq*KmP`r*V}FDlp=0Q1o*NCo&t}>q{N?@uj9^vTrJF~u8&mw
z&!MoW7`()A>nt?pMUpS0Ul)IGoCLW6*4dX@csn8I%^>x!={@ta;~1V@iVArI&%gPO
z1t5<9p+N|KiVku<zPY&p@X(Gc^<lOM-#@1|)Ft9qL}SdhTF;OV9|PW>!udq^8)ffD
zvN2%rZeebIaed90oCP$P3l8%6J*$sHe`}EZzC#o=`IcJmd2UFUj3e}7egO2qC%y%V
zMYX1XyrkCn%V*cu$%mO|ud$JI2QXc*o<m|xyp85KW_Q3C?ibKulWpPmm6UzK_+~?K
zg?DBrxAt2slFvA6TdLwycoBd7bL4al=BBf6I_fI{dj6hq)jt8kM;{;(b*YQ~ey377
z95`<GP!^GFU;@)T)X|fvBDyUVi#yZi=|mkB#`zskGHmsR0VBCk<b(bFt6z7SNtb|=
zpdH9!Hz{oq#QXvmY7**23Pb&zl9Iyjc_#m-$tubg>A-Tb4KS_qsFxaT0rz8aCME~K
z&?I08*0_pF9GQ;ssG&S<7S!l=ph%Yi4)*QogP23Co!FWIO(q#mq?ak#rmEogqTcTi
z4&tIcFf=Wu+Mx`owk09u91Mjp^qJ+2#FIWE0UwKOU9?rnLwWC1bNRlW7N>GWoWMy=
z$oDW-pY8JDA}$!PE~fmWqP#^0H{qYi=2R<=4cDMzb>*VP`=F?xuy=5p)fk>(mY$N*
zw|fatgaBM2EMC}5y~*GgUx3b*>DaZK48+5l6{#BPWH~`iFxKkj)}jCjvYlErhWUO~
zT-99m%iU{SWS4zBUvZLCe*uka+aXa>82Yb0zwx|~@HrxHg^;4*2nx2bSE^jyIV<9j
zz3p%jHleo(aBy&b(c&MEn+@s2?LN7v-J4-43gjH?#P~`FW3)$NK;96J_94#Hex>_D
z-70C%7&ZFQgK&S`=}U3HJT@=<c4_HLVuc)h1Il+FgitZ>mtegSh%IUXbA-JisT?Yr
zE#8{i$YAjFFWcY|9O5CPEW-!)`cc7g);ZjA6C;Abf=yx{lMe9Z(Ac^<=ryR}LFSKw
zTCyT$|COx$-C26Vz|6ygwzgSmqX<2qL~!sh!oY~Kxg2y;s1=Nl2-yS2^8sPBP+y6*
zFoZwGGtktHZMrfa%9$3LDOk^+HL)A_XuyhSHGqM!rrccRH<uUvj3lAk?0D*A*nnl*
zp8_?=dSQ6e<O$7ViexIBk(^BKXm{R&)YnY-*K@WQ0Zo$}K>^%hUdJ#4SK3(o0SY@(
z)MmXpJT=i=iwh6}*3+BJ`&rO!6f?VjZ*MOpb(VvToiE#M8gLN=1b~14Joo-YP}6m}
zpHpgKAyB`i-m@b&roZu_I9Xxalr5B8tj9(?m)C}SW@ZNM@=IBiurxhYdTP3gX^dsL
z%FN7ogBo*a4q(~}=m`k}?u>E@4ud#x*`<_yy-`Q!0Q`O`P~cak=XrG=KRW6b(6hjl
z1ok8C9tjD<ya!wQgLa*UFP|T_lU0=!Wo4riVoI?(8RrG4s47$_tY24z3#eyXT;#>Q
zS`yTZQ~q^}&4q_xWu}GAjnFZ9$xM|rw-#iWG|^XX`urJcnBXR%)rtd0-x-`SQcN4K
z(H3|{l|{7K&EY|NRZXZ$^_$U;ZvaEC7nLmdf=?huDX^9QHYAY!d{Veq(BPQlHp6Q(
zMgB#M4sZp+QL`6+Qz)h6_uaO7U<3RVMK#0ShQ1gz0SE|)yb{VrGd!jj5^LaWyu21e
z@u&B1CxE-qvp~>pKNu4BFZ#iIwbMT*_XjY_{b9H924wH>oc7r?|GxX~eZB9r+E{K?
zW0?CU5rcEEyHCjX$?JMwVPr&RA~^+zQU77;;Em1l<aX-gwS3#%Dc>h)U(eAtp3fYC
zyq;%(eZc4TD9;U;;1$R#Nz3nwpZ#u#xD{z<Rnb>(1ky{UYn4?GCJN3clldH0r2vLE
zE`G?>_>|D|RABzOP~kf!kcV=+GpO<l7<zZPWiXQ{<~`ka2?}oQ>+!jtjej#<7)@*Q
zJa=4de;h<6z-4(mIcuAnoweo$s0}-H!!!l*=gX}iBQ}FNzsDzJ0@fY2>6<?w+<+#h
zjeP8L>thsJrJY3ZaH_Mf!8sHEa8e61p$B~w1>fqg_1Fu6OE!q)pRWc8Rg7#_x|q5W
z80sy+@P3*SDH9!sJ$elgI04t_x-a6KO-OwleF<ou(V^!_;`Z`8qJx<i`)H7JoswC`
zh3AaZPV4R7?y1duG^*Gsdl!b<{FXtG)(b1XN0;4pO-Pnc_vcEK5bP&2EZgyVFNsUs
zF8599F!Ck6VmQp&iHVsPo1tCIEnkChEYBbR7)-squ5`VhX2mf7JOuRO(#M%FQn2NH
z5hzMoSL^S-S0jKa;W`=&G6S!`Z??)Cv~67IG50x#<YCWW-gt;3{?FW3)bC_F(u4j0
z2*dm45U{850lu)n*Xx1|LmwLzmCJ337+?ji)&vF`egUj4_&nCrKvYxKj?vFgBkpE{
zXG%&&ueTL|RLvOf;dWF5$W?ip1Nu!JXS%gzRIiu!T~;mEvoY^`x&B;cgB58ES6A0<
zpH8#0(rz!M=I&0`6^fowPrB}L?!W7F;L~@_HKEv?U+s<g-2b_5?s{udk*63$1?2TF
zeSN4vguCZrRaWCt6oCG|T_`Cb;Kb+qM2l+r#oId{R9W{=ktbRv94+b{79lvI$%i94
znX;;t*X^cw@_zWw(IYm8gypK@fTAVqU|(6z#k}fFxn69A>=iJapn6$m0c}ACwDBk4
zvQVB;kISV@WIi!Dn>>dycypd;N36ukfYegw5{FkF%z`<^$QTs~XQlem8^dgh?DPHx
z2@EO&ZaGVqYV_`R3SKt)WokNvEM!eYdc;tL1WfxixYxXPnjPDSqUC#H55Dz%=T@>_
zsNjTb`-?x)yLY5<bpvQB-XFNx>TDbxCjkd?`gd)3zqv9+iz$kP;cvqwQXt~DSCV9H
z<~a_Rg=}}BhaOZsQ2*cn8(pXGJ+r`$=A^%03Uv;bqdsfk$96)8vGnhf37utTLmc5y
zNIQQcl$zIk7$}g#MSx<eb$515(#VZTsPT3W$LK<SbMDVvR>HgOmR57%0e_eGq356H
zJNL7-uo)|T%%u{lK^Uu9d7>6Aq9^Xcs!@ygf0ws%P{z5y#*F)wFuICLLnrT#)ul5c
z6P9IItX?#aU~wsWvVjG1OL~YoW$fIwFf$j3zkR-D#jw5rX@RD(Gm`(-%6+&Lz{(*G
zC<#99F5A_-nobfD7rq=9yg&FX&{L0j6DAg9yl)2@8H*sgEimc+$i3T&09t}8XM#S7
z+zg<Uuf+1{*G(D87)!8sIy?gqIV)~m=4H79T;o<5TI%|ou2@`j<>f$dhHkTm0RTe{
z444x1y+7$N?T@6A!+t+_3<N1CTCm4kemY+d9RLY+9h?E!)XM=9>MNkzyBuVNlqnu~
z_5SKUal|R~{Mf<hYC8KG%}{Ob{R)^lFOB*cP{U%WBTIt@SOE+<SrM7nv+b5>@zG2J
zETZMxQ?pfZG5N1X2j9a@vgMaLvmvjGp6xGqb6;!p>q3^?@EYf@ZuCI^r!@b2Y>Rvb
zQ<vq6TXCU%qPJFb75rZ<KqY;8`Jxr|=G{2qyuuj>X-B?Z>$^e7{8L3t4d>akk(YPQ
zkJG2SQ^3%f0raxp_FhpN9p^l*2NlGaaeV*_<R!hBh4h|(S9^hmG9EDT^&4X<r7Eo=
z3f!HM(ji(0AT)c-?M#3I;n&?MKahjc1mvD<fAm{+zLQT+Am9#|II4NRIqh2xvbhR)
zeg6I49qJcj1td0duQ~4+cy3IH^Ur&qw738jqmn~9pX=^IEUd@ba=@v(ndAGNC!phf
zeE;Q(3dU4X`Cf1ejlFE(bFNVu%>k|w8{N^LY|4@Sa&@n;&K)Ha>*S|4Pw5m*x36Jl
zA0_Bf8d+FKF8kpR(HH3r3!UZ8v3HQ02Wp1*=*MnmdtQpkeBS$9xARxv(b@1lm=uVT
ziITs&hOn2FwRKTpD+p^nK5H9_#b0T)Yeqg^0xD*wi^L)UK9j|Evjat-Ykj&A2u1<r
z<e+))c#sQX2QkDPzyq1O@3Rs(4Z3z`5hQEw_kpOmJVEZp^2?rQv#o($Z^ztKT{o)f
zdq$ITjkDS%J>I!CyZQO)gS0z5uj6ZItWZecV%`7wP)J6$sc;9fGE!C^{`~1n+LMdl
z7MoA0&L0%Sr702ivHbk)4#`B%L)ML8lfirzR@1p+9W{;<89wI=Wm#K<hCh6kq`ul8
zr^GKT!*ifn#|^J(3vFawZJ;F>yOa7LVXq&t<QwKwx9eSDz_PNKiW-O2LoJjNAJVh3
zMlM};wN-Vq7X-wjd&sf#r8u09{C`S+gdOQ7W#WaGDtj5p-mbGUOE&yy(7$98IjHJO
zz9V7C*e)XzDWtAFE=3<Tcq1S|<=W7wjxfqjfZ)syN#_dxn-;ZTx`?$%ri|?$e`hzE
zwLRR)N;8Qg0x!~-KqbxDCiG>P73h}&mU(>UkdmxCBSVC$*2RQ7E)y1>qCAFt3q1(?
zfkfh$64Sxl$xAo$%x5SHxY9u)H5V+ZJ6bvpm^a-_YB<UyLCfTl7E-ftwh-~_Xzkn3
zj{5aTK>`iq1RUQe>H*=qioL)T!{R6y-`@JKtft<LA34cXhAsd6DWw|lBT<9p<wRdL
z#f1nDA~S~j|31tUKox$4zr6HAE**Xz<U7eOC_`x2{7Aj6SX%U56sYpS(m7gB))R;Y
zYplz+iixCxw<ag0OJ*-A%_Jw+hf=_mE~^dN9w(MoadAIS<kAoFNPk<b*9{d0k6$9b
zw>7BXgi9^bM6G0!?<RG|mGd`a47A?GL_8aG*{dBugXB~rt8$^V(5?~Q#jK3UF<aKx
z55-SXQea-dzE#KWn_x(0g!WLQ&>+Lkk?vHvX~N=4EZN=O-y1cFgB;Zrj8(-QY1R$h
zp*K94F>OZD16%r?)`u^pnqO=7CFoYV#$Bt2$xpk~4y{dJt%wrE_Xk+BOM~;CFd3&z
zSdhpm5sd3+Z1$$#KNNB-t7uJJcwazk*bFYH2X;SGB!buw55iVnM}^s?zY)?8vx?rS
zfTFF*zvhOc+o(;^7qK7L-f3`2VTy4|&Be=V*M%{KL0usA#%{dWp#{y~f7_KxHP9|i
zA(pASQS<yTPo`cXqajL}LK+*NN1-VZb?Ky^!m~~b&vpkP2^XFHot-lzu0JN5mU`iY
zN>tt@p0mRKT31o1z)XSMifDz|3xT{pl905$?{bxYf*V&^l!(d7y+~|s28tzDnPOtG
zVbM;esdLjuV?<><!5xKI0~+oqbchTO4Eprh8c~QVk(fw=5qCyxC)2L~US+7zTSIig
z=v==}CCFN*MP<IBzQ%PfB+SJ=ffLbF-R1;mIHgh;9*Wmi)1t5kBK=T|v#5gh1I|4y
zOt!l+T#C!Ic)Xz4&@%e#C*JB=pFjhJv~|$;<jObV1?%M9L!$by!U#ow2{=vtlvgkn
z4-;1&;tgjB#F6jx#<huL;X|c~-}+N4>*-UD%)}e2WK+6MR*L8AM%P9-Vk_tul=!G$
zGa)w^)z$V+-{K}JW=m$5-!XZh9SOBOt`WF6S>mWD?US_mVP-ma0_2_fzd=K_#}vz8
zVvi5cA$ezRo|bN0bjpbHP4NkUx@4xc9?M+=uhb3i_aZJA-yhIl#A?zW`XJuxujSim
zw~r;R8!j{g{Ddf22sWgMVVs@i$I9jJqPL|kq?@b^(-N=>=~qCP-0z0^I;t#MbX6I<
zus3#C2j?BaZ-E-|0h0L%wDb!awO;6nk30Q0>iLkiUG$xCPTR0a^*)8(16Qx{@MjiV
z(1`*al;Fz^=^<VgH?FCEek<Hp?r$R(zx}yKdik+g3h(Tqd*{5t8Kw*^@-@CLT;Hv|
zK-9WbobZoE-6<s)F|$AhUfT~S*&bMIeOTa6GW<=2JkyM^M%hXqA2=$=z0v7fgD$`w
zn368(xGLVBnYQAK-NTbQHYIwSX3;Ix-d=A)Ml*;yUgTy;)wz+(Aa`(}il>DipE}oE
zb%TX0DV}=u2p<xK(+%2W2{ES`eu(J5IX*u9l5HxV*AW!ZBe+yCF;>W)pOJRphZG&a
z;ZSGFM6=oz2}coj_d;lN6Tl>TT?N(1t`V()*IOB$k6&{X@JXmXrosqLsI%aVV(X8x
z3cC|ay_T5}d0>3_t=vA|!~6BnFM6@7C5A-m$IEuJn@ly4chq9qm#W-e-~4qG3nE^u
zr4rrp6q53*lTB3(V<AV4x_0|gf%QL^<PT|=(YqSs3?*8+Zx87KQGPQl2?yI$j|y|#
zS7u&hueHgoyQFm;$^k8-)7A_r3=9KF^W)qXNp~C{hXbPex4sR6?vsRm-bYi)Zp<}Y
zocMRQs~uQWJh~m)e6h^m<bS?PR@af)7@K?0NOhyu*0@t&2RHGDgBCQ}G20xPwuhFD
zVn!F#g05tTUCI%!=}xZH@(?N+g?lTSA9G8asG%+nTzJfU<h)V7P!iE#p?7(OiE^^Q
zqrbiaC0}6<$1uPX>*n`51sM_#sShh9^QrqpHXWSH*qgG1cZ&8tew|?`!xEblME<A>
zp_C5ya$9*klxnKk`tUt-d|n}DQ)`x=NCQP9>|Vb^+AtdD2fGlRVQDYygq=WquolAi
zq^~urUox$+M5ZQd@(x_*XF;i>k1d+S5Ao~p_fuLQI647+X4IMYQ|mJ)Li$QgNWqEK
zmYfF7AcL?5`U}1WpRc5<G;dd$VA|KaSB6)Cd3r=m9m9>WluEGMQR*C?Cyk5B^VC7^
z3)??reZf}rV9$Z=qCULdy1YP1n}Oxs0Ek7GwWI%g%>2)3qils1c}H~5rzXu1`TzUW
z^fEf@_WH73(89*QO9n$y<NglATxy0d|N07HGpWtbMvC9{`Odq#r<X+<p9ubStl>g5
z#dX7D+$SfS22@9$<6h}W`(cH3=qZ!k`c1;<PSxNfeU_x{M5y*ROAm%F#0NoWdj4;j
z@}Fu2Er{lMeC1tTfk!+Z2%A9%tVlKh>tEGR-)11Gy}kY9<YX<E@QMt?L;DCs!1w%F
z8CHp;>k`UNPKJ=!qY*WE?A`B6`|9!sEP_dpX#ukTSuxS!pC>OaL>y)?g~R}r#oh;a
zc=U{VlKTVFF<CiKLw!240iV^~iA)N$`=3?!qf|OABVPxAD1|E~ymh#e#S|kq79A5q
zb_@*-9TgQdkyCaqlqh98wvQKqfM9YLm)rKd!Q!B*tD8Q<(P87GyJMfPY4`8HP9g~Y
zY^^;s(Ojpv*Dysqa`+I^!xfG{qKQSf<pQ<qc>}oj0z#{r^#YL9K0gR$?*NDJBa+(G
z)D&P@^1ts`X#;|O+r4H`-;TSYqY(h<tHAZ|ds?U%+mG4zmw>9h=nBfbp4Xl^PK1sI
z2nszw9lD<`VGA;I=lDmVRH#BmTE)Xg7QA6<%IiaGfx{6W%85~2)h@tG7H~9A2k2Ix
z7af`bA#+>H7aod|M?I%bc%1X4nhhXc70^DwrggoHG60C!M%#r^=xZDxz!fr}%k5zD
z14Fu#cGufM*NX<wB}PO<Bv^Qa)6;P(ie+*}MU10E{=b?OsMXBj9>%Aic~_-x<I`F&
z;kKDgP)PVVO#6Aob9qc&wv{rdX=sReoC|^9W`aGN?RMRLmzS~1X=1U$9q6vQx!!f%
zpH%^goePy(r>m{UInBS<E45e_M>h>Wu&A!!M|`|$wIRH1*2VwV3RO?Kt>`jAk8&@U
zry9A_*`GG)EAYL`O0!#Bf0}Tr)~?&W*n(KBXVGc*I*V|-Kl_!Fzuu^{@p0~};_r6v
z>tM)M;D_4+iA#7^`Mfr>VO32-$r)-6*{w(B;)1*yl6Oo0evm{cl$(OukDQiA2W8h>
zEN6*UJGk$=)3gjY1A4s!ALk(Zrij@b*IF8+a{Vu<GHSd1fjp@teK)2Pzp1m|ec=Uy
zK+*!m2dSU;hc0^yS}aCC7@0qw^|Ba1MX}H`Us0bsl&$cSsVFHfgDhqLwb+8g!@5-r
z3EfriTe|2W{SP?j<{LQ-)fE&K!)vZrq&gu+@I8~el{?SlNegJCqQHG`mM;S6bLu>7
z>?Oh^zSo0*nUdX?Q}7lc(rBMvJ4zZv)Bmkr|Ff;Q!42QTY`H$Wx@zxEK4ERS2NRka
z>{L4{i$Q$A#v;8amonJ}++`d3ru|@2Qhn4=2AO;jhjr+sF!pPr{dk_680O-Ud&gO(
zCACY8wW>(`o}4ii5}<!9)NU!TZLQa}V;4+M(Z2OUm(g9c>F)gwN+$`0Jx}5RdBt%2
zv7*yTG`PTUDAhXjYNYlH*I@Jx+FNA~VEx(6l_8I1eTppmDjZhfm+(jsiOrL`S&XC?
zYi7C<{Lg*O9T%LcRJ8f#;s#qMQnSf|C!X`nk+FCz97E(TU%CA5?VGB*BUDNsdEs}f
z(Nwy>vCw}JBnNq(z&nS&ILV?%muy>xpKrP5GDHMetVkILi!-pJ7}X8qAR(A-WmK)5
zk$wPe$H4ah^0uOWc6$kVn}58P!g-?I7Ccx;lN7$_wx1W!cKf&c58cT@XYNOY^Vhvl
z8KcgtUv8^(o1(Sgi2W{l{zrWOIO+LznGpClVT2ojblT4b#J~_^R8V@BXmdxz@6nGa
z%Vd>j)V})D-43`#Wcp8yjMywz;T1hN2SmN=LRk9gkYto8<W%c4grA=Q9x+w+y+mH$
zkQ8(Z@NGf?uUeq(cybQ7X8?EA%b}D|NE@gr0leV0Uk*`!O6l{5f1DTij1Zz)n@j+w
zWx3g@0GKT;rnk-jMy!Isx5wU+&sa9LCn3q?A58D#W@aOOV}%!zbskFD&0!AC04~(p
z)7$g875!h3)9c%PSKyT3z3`g1)uvM56XtG?*zyZ7Rq1*KVxa-5+}E@(rKP7U4F`G~
zPuS=WK~qyemMt&>BPt76GVpxe=k6MroD4sk%H!8cpF?{GJfE8pb;N)R3Q%FOHcgTB
zygzrn6NCbpysxpKNzw<ct|tvf9Dpm8A(*rQq_qN`XEI<*C6x2##N#rO1Jlv|=L2Pn
z5Db`?g$-2I)P4uaJN9PlPrwh$E^ZlIkPF7LsmGRtsr59|`oxBDfdn0L-Ctc+9Dn~T
z3Os8)NM|wnn<)7=Y9z}Gj{Eu$2)Kr0*K>4aj>vokARv1*_FKn5#D@gxqa`sBR~PVK
zAR9MDWj_*~!Vo~2!DNhQW5z{20s+<+0PaS=(Rv2JWwF`Le*<tv85h2mD?l`h3H9oR
z*G}9u;Kl<`er;zzk8u<JGD`}0T*%Yqcdz^OJVyW96X-_!wgU&(6`~(U$a@un$ZXt+
zkxl9Q894g#fPCyPrqt;}dPJpvfIwS+0C804+@F+C-;YZ#`NJ;+bcQ7nJ^YQTQ8>97
zclhJHB!{WDDXv7cPR&gZSzPaccHAGgazsKt3JOSDMSf$5{51MT-c(>0536dhazRYl
zlb>p6f!_Km^hy^G(4Ph%Q3blqd4+7pKJlLfF4vljXP^@DB&y>xsO`g5eclS50rF%Y
zFQ#h(ZYzQFACSl;;UJnxQyDGJ0=euUE(>;IWN5FaKVLH#bzH}onpwjV%Fqiw+B)U@
z_X(dzh5GE#YXTUy((?0Bu1!9$rKI5)d_qsjVOI-);8eM~16b#E^x&OPYNkmLI=Rl{
z(gQr`+bDKlY0GWO{lfLbv9MG$5tE?e%tAeT>9Q8XE`kwB;whuzT#aQo6Vcl%p1MRo
z2ho$!(QU6LNpo5k`sgN)TXns^Ju^B!UKhNNf8wwF6?hR!;s^M`41Rv{2DT34U!<*$
zfXqY26m?ZTdd`}312CMMh{(Oay~>zk<h6Peql!Fb)xv@nJ3+`S5HNXs?%TQbci|s+
za#^r<Pga{^)F)X?@bY_p^X6C&za|8}P%yoP6F3?d;WGTD6I;F{82o|vkF!r%3JvWi
zV1OZz2#NU#CHd_H9_Pb8Owm)q`vdAWYZAh3n9cw(@)cpsC9vJnkBl>OoHb0P1CU8z
zjHIb=ZfRLOBV(FLLIqSA+>{vk&6c-EMSbBv?6c??qQA+=+R}INL4E%stBz`PXM=|~
zPTmGLs2c3!h$$fBvr4+sUf=^fVt=hx<9TBJdQG+ievg0+gWpiVVgVtuulKy;e!WyK
z!w@iewX2Ux!|&>BPTIQDJ^-;q09nrRg7+ZTEz^;N)fkNZYY-JPT-6>%Fi$M!Uo#0X
zPyppj#`3$J+K)HI2p<3DRY3c+IPUjH&L~?b5RjbubqffRbkyN_lGacB_jEo&hhRrU
z@drG7cVRe&!?K^jLWS0U3a@7dg@>~_oIlA*R`2ib?L6<P)5FA>A>1jUz9f;eZ@i@x
ztRwTkn-0aJ5b^iCZ)X#3ISegSYI+>a<MG8`VkQWsCuTnM@dwVgDV^sT`6Xp%FEUb4
zyl;wR`e!ib2|b#>ElxG-doL`EpAe6a*=-a-8p;|fb^5pqK!E)iokVyZD+i`LVcw94
zG4sG=oKXQ`I#VGc&&Yc(jZw*p=)*i=;$Lo-g3eexRUbW^;2M4>$}h>OXb<XP9hZUO
z=s(`eT)%*<pQ0Ur6=iYC{}n^($_Gf0BE6|~8&sF?XwW1EhlC2(696-{z}<lz?bZe2
zXj;QfgdI3W`2rTJy#8A)D+i*Z9g)|(*L?;zRZ}w$Z-RHG-@25S>1&I}p_0XT%}`4S
zZBav6*86&Q8t@(=1SF09K}8j~XnTJ>mB2Bo_y6@n0ud*kkTdyqwP8JL1pobO!P^ot
z_d195MWGJJirMJL%j$9U=|UT7X~9Q_qu@2j=HCJQsW&?b2L=I;AAkoUpUdLt1`p(w
z<@)Q#cfgHP;Jn@+3VZ$S^is3w<Ej+-nd@ScWR>`~2-Mo|FlfF`0J}xK$+pAc=CPc(
zmy>WbCQE?b5_sRXktg6?PyJ_>`U8gy5xRL}&}RBj+Cuj&`^tY;1XA$N*dRGe+vuhO
zbN^E51&sU8BpdEpjJz^DUc`uu0E&KKtfr+naO2~FLT0Vm5Kh<2z?Ao#%Rc`(E6KQ7
zNG0$xqUIwJaDBS1Sorft;rZswKv{dZ@hO7DkJa|(5TIJ(WMDb{`kCgv)?}xNO2o$q
zVo15=dcSXm&AQ10`QC9Z86HopY0XS)k7@=wjE;KgkutIELL1ql&R2<;PSKf16CqQO
zs345&i=9*znEcG!%8Na!9fHAwWQD>${5U#OB6Y2Uiz1Weeq`FmD<Ld~oy!xlGeFFe
z3@6%2DdWe(S6-h84^Ab~+wm6SM8*AowN~(86c{0lDTTRYi-JLSu&PLR;e_9V*f4Ik
zaE~dK;kFFViw>(Ga3^w;jQ4vodY6y9mo|J4hOF1KxE4&grq18!3KX(WPEi|<5&S}^
z+G2Mw3EA4}xBkVb>kXJB{jPNpn=%w!`ff1R8~df7@|(b~6{`g6rRt9QK4B4pUu3yF
zso0emA1BDYxNxwg+X*3f2-qzJz|eyQ`web}>ANR+&F3~<X=mocVESkAWwvvpjeY-l
zI3H0!pb`A|sdl9tPyEBaZn7l?#1TIw>~XyA-$QeKF!3B2bzS3kY9}Evz*s@da}k@0
zb#8Yj=yUgSSkelNWB$y9o+J4bw0xySyJ?uj=eYe&cRrN`nWo=n$#h<H<+{7<0stF#
z;$oOPBcT_8=W{D>IKRV(llaU~Qxo4~Q1GPOHBER_I*G|Ar!N-o)BYscUM@d($jE;m
zroX*kcZ6VDtF;8PxHfg9`r+dQKVS3HY)(I0);0}>fVl`Q;*N9pvQjoORH6g5(Ds1U
zp9%z)ep~TaA>V;uzvHFvJ0%-lb&8f7>mA>9oA<-OIt7L^dgbKgxEz<4JETxQT8d(O
zEzl9#m9zROHE4KPE@!CO(MciN{iE0nB2!*M3!?7}Fq!1MbEW5`q{VDzgb!)smXi|%
zH0Dyq0=$CX3nQUd{K|go5lmzwlzC<GM3n7NOm7a%qKx)S**MF{Scb{djcu!3{lUPt
z=TMLnR9BAF+Q}k_zj3uSu#?v${^whR6uc_gO>y?@R(NrhZ*nMp=Q7nI7o`&<VvWn?
zl4LOvE-n=X(*X8Pt#RY*b25;ZMog>GN2ccxs_MDz+b_tFvalN)N&5k9#7j<&HX@te
zXNfxTvxs(FF8-2=SQIJD5wUW#p#!A`XttKV-@3+f`x`iC04?beIhV;jz5-$uG|=lV
zp@+02lugznu7hv-1R9V-0Z8+3CjJZT9#Y6*EcI<RCd#rEwjB3C8Tc(O;)`(Gl@X5g
z?CAZZ_E6jbq#=VY4*I3bcG%>#ODE!RzwHufnUlZhw4?*1`LH;acvV;K$QJ9keyvdH
ziZ;(sKwezw)SWN3U5OV_%^0BzwxngwCb`&a$HA$okjjIvuwyL`#nhh8q+Wt9KFyPD
zqm83c(Z*K{KWsW~m@+@M(84yLt-6p`>zEkSp=XSIyee0A0x26+GQ*((?eYn^krH1G
z`g>ctl&iX6MD`c90ctdH)Fw*Png~<Uh~Xj=F{U~ds*s=7hHw>Haw^dZ-(r?y*tn{L
z!!eA0w<T%(L0I664$f|ksGuaRCs<_4`BJQ6#9><)UmZMLokgGzA!|!oCZ4jHOc`%m
zCWEhhy-=G>nO>~UvZOr@kt9K9NM6YjQFI3G%c&{%9XdoD?s%Ji0mtH7+h7tUZ|ZRN
zE?-5}ovQTBPn%?G{m|(ztK?_8_?U_?;E}$^Cyf3|H|C;QHUF*6fV-q{ha?z%m*@K%
zg#!6x%g~cXmQS3h0kgmqF^>#VE$tV6xXLk$ANBt%W{lzHu>f$BXq{#lCtW`7qk<B}
z8E4qz<v>yd#RC>L_Jso;ugMTjZ`D6r4y;i42oUm{>?w$zN>xw)ud%<3t2%1CwP9j`
zbV_%3cb7CscXtVrf;31<cXxM72uL?bmw=?Cl$7K%z4yM}ecj*Q?~C;V)|_+w=QzhW
zhNh?OWOQ4&xho^LVEbuTna>HKXJeYC*&oKLe0X(L64>%U(a$FxQ5g=z=PAtQn(*7@
zbqHn}Ml_tMpOvWV0;Bp0gCU3xv>Ypnm8XN!>PE6HczCxMdTwtJyzDIHT}cKNVLQSZ
z6)TD1!KKfTfJ<b6qZuk_6W_ttL$jnx;=_1;<8Hax-gHcUD&eF@g67gt%7Qe+1%=2k
zv6&SiVH?6sqi<_DITOR6pp0drb4c4>;Z$01Gs9DW<HA#`l-*N6B%qMU|G6Po;d)Rl
zi8_L447>r{#X`D0b1<p-+1Pe1A<jHX%<>z78FO;hlcH={mfW_sm39g4V41mj)m~Jr
zc-T|*w1ZwA$sXM<jDew+<oV_Cu#%2&Z#Z?>RHxIR;`#!^l2xkwC51@kV*NHuNh?H}
z8E(<=+G=B`?pn^F>i(hVL_D)W8g3K5WG2N5!<aFI;xJq-lzFA&63OCXRT09`K4n)c
zb=dGqOc9^R9?_H1Q^p9rO$;krdaxH?gBaudcnsO14vKpnFBXy?{jZ?(gm>J@@Uj>s
zM8w-utp=Jqgi*f1Y-M5aoRf&;rVeW=P~2|+J@(6&poFrD>mGW71SE$;2fZ^>OA3PV
z!K_EbamFjL*^L`DY^paSDxM{ZS+)LO=iqb%CI)A9GCvm9aF=FSgfQ)9n(7{Qyl=3`
zJJNGk(aVt`n{}xuNqc>7@Aj9XTv;+3@t;qx<dbo%mg^I8Ro_(R9{%6e1s)|`qbg+K
zM1M<*$PW~L9gkT)?JRp@Hh?C?gPAy#@fWzhvtDZtThUE=y0eJ$+kf$U7^NfqJ~{a`
z`E>io0dzl#_U2}0jt!$`@qGtL9yqa*X2&1etX}?ch=t$re#-Cdr$+QVPcE6f0AS>u
zfL7x4&W}!MWL)1Ug0qE0WR5{N3Q+T>c-6+2{|E2y#Jnv{*PM1})<|QTl3}|{Q;R7o
z8FcFfdAOrmt#ZHYfW4P10==wzmU6z`;nt|t0!C+$BnEaHgdm~ByHMf-9FJ68;H%Ae
z^5Vvd_dTW0qzb>?*>LJG?ymmh1xS!e(V9N0QVn2oqNy84aIVq9tpg(0EbZf6?bklq
z5XMLZy!T5T3vS=V#CCokioN`0%k}%EM}OVX;sA_Oxk*{$!uR(c$F?hRVmEQc0|Rm3
zJ324#>Esc4>L;L5&AmL@EIF+M@8082wr&K8v)P9Jm#3dnEL>a#J1U|VZ}dLu0WCBa
zT(5D)(^~A-t=I28&OIbcO3G@0hIhSW{ClQo|46H9!|SO9G~!xWTVGOD%U0p(Pu~}9
z`EVW{+C_WWe;LV!>6L{;Gm0UG=e9R&3T?1OMTB;wW|TA7wwa$kXwy%2M=-3U->awC
zGWDo%fiz3oS=#X)%#c$}XSeN?lS;%8)#Q^$<oiH^xJ~mFFqhpf!k*Tph*#3Hc0NRt
z-&~W}wBq_dF#-Y~Y)VD-7y_}m>QBu2%OxvFaaRKyJ#%rpi`i#d)nB@iU-_lDv-lit
zc9T?$yjQGthGN?vE2|jCnDXa+Zhx=0zBh@&oqYK_ukqFM)cbZ_k3`60waEs(GdtR5
zDjhUUjRDmF%<==+10F*VYYeQu`v*(~2Eo4EY?`2x32JI;b~-Fg$-X>;6sPw)ppF51
zuE;+#-h)VpmKV@H{eIk3%$26T##8AySA>LMa7Q19|IDt@+h#38bOtwPEnVGZpcnn4
zz}Vmce!T0pl#2$c<T5RmEysste$4687O#tK06~~;UK@9w$`$|*NxuOHx+X%I{GY$;
zAD;$X-YbR(b$8wgFDzz;rlFiK)*2}exBMfqdIQ+l;P`u0<EYg}t8oA(2mZqHdzp>w
z;(O4JItVZ=(C)&+)@}uh$8VFN=v8WP#6tio<{#b#;Aq4@)PeSIo83R4j%qXLRa-nD
zwx~4Uqw(Vus~<ns0BJh-Q<ThWy&na~R*e*@O$Z}A<Ds}YZNnWyU5wc}a*MswaOBK)
zmj3?!qB-x>)m`oFk$5W@D)w{4Ty};~LGk_hrFM;eO7d$re%o_X-0zl_+%Fpe&o+R9
zf6l_hBIHj0a#U5P*XAstuD%@@WTTYrC5pT)<T(W#jt1avTpR$N^K8RVNECPuhQB?%
zbkB7wALsbotg6Jom|n%u;Q&|<rYhjhi!d=EpFUp<ljXTh36Qq~BK0B_cs2zp7%0Lm
zp334wmjlRlnKE3F>Jnak$W`uS%lAay)2lVO1i-T9@_+PF-!fR+{71krD3tD{0Hpxl
z=bOF3!7%z%c$WapPar<l)il#*i-R5oRTE5*aecfr2Ny%ccM2Hrg(ks5eX@3HBYD1;
zqrgPTVIgV`s*AxrQe-EZi+$0WfcG7&_Lv8R5Kx0~RnN(TN&N>RF!KkN!|YrUo<P|t
zhiUO-MCQXGRh;lYF~<F5IbpmB*qwnb|L$r|MW;r8kVF{j^$2#nDquiSru_+qLta+N
z71pyA?`b0?nboIfvB3EPBnCEvFDSaY2jj*4pbr`q4H&160B;DCARH|6zTZI64jd&(
z(i;KE(vzRx$l8Irgko`|R#Q`siXNm3ay7r2ACfhVnUn+e_R{{KlXxFh&^=rqe{+2J
z0^rPV^LQP9EY=Lt43Y@Buhsj*TIOtgSnp`TcyrQjJeB1|8fCBg;b57Ag~w{K+Or+1
z&Hunx&ugy9rY<|1m{_rEf$H$RN?v!IgWW(x<K?Bbaux*!yAab?gScGgB|G-VM&8sh
zxt~ZTuS$RrdyWh3hpkcU-W^YOZ$6~&E^m7feUML~l|DmeHgpj2AmMkGL$sl#k7r+u
z5-HE`<Pq<RFW~7%8tJk(`_5JjVGYJkEgG@FaP8s3`~{RsyQxvJtFXCMc@)TKhjn~{
z`u*mfX~>_O+M7`y54)(Dn-D()@oipCj&gwXaEs+A);s=UHN=1#AshiKnuOy7QR3v<
zjw8l$f!BaFZemkD!IJn4ynf1t4j(^$WY)?N3lQ}*s8t^N0U%$Pu%gV+Ur>U2vL$$E
zmK+S<zQT+^%*kOlgW*qt`^3~DV8v6@8(nOC^>%H?>x+tx%z8=Lb}oXBnOuK*cnq~u
zau47`X){9;uoLW0KRTN&&zZ`}q4qfx*dsv`+D}fjDF)$xaC=WGYCe!7c0Y4+yYa9h
z@-hc3(V%;ceVdJuk(sRyU&I>a_gBxnjh!Kt{J8Xsn;+HwTVWuxdKD5fkoCSDj#R$<
zF}U!!_FFD16(60=RQ5{1{T~xu{iLicuJZ{lT9xkCyywr^D=6?XF{EAQe=kFkaV@Q_
z{C*$vafQpifBRES<6u6BzopSMRzrMA_``{=VCFw1%I9~>6;G#hk0bgPNG^nQbJ>ke
zq6f)q+zBodn$*GmE+Bnf(AK8wq`!7Yq1()agi2@n1)X(J{nhCQ;iD}(B0e7{|ITE|
zm%uchdT-|sDjJyWY6)DZVM9{i+yQaQ_iihkyWpRR7HsykkDmIg06ag$%&9b=nUqbh
zohMbD@v^OlE1Z>p@|_7I|4fPKPkssqdYgpQ;Z{4=O8T4ts94E}lsy1;+O*$*v_`=H
zd(E;v5(Nm@PtgQi>F-E^QPs7}`nSF;M$x^gv_Wuo&-lkxFuALnF6fo_B1R1)@6QiC
zvjIJ8#-kM8w5vgcmc{M7DBQ1cvB48f18YhG<Ba;&Y5nhBsjz5#(dxF&N7Ieo1S(lq
zpXZ^aZ?TgFl1@i1Vvo<aQJpF5;k6x?pMwjrYHx)C?qIpw+yFJ1fsxrXLS=uPyJx!h
z6Oy6=Mdr`$rw^1T<03t9T)rclpJ|m{UD2cY_p=*{WX%HEV%vVmwXXhxdlOIHaf!^@
z7KjKdZt*r}u6GBm!}XV`c&-zI@Zs%Y8{fNSake31#)KFnE#&u9e1SR=#pyYPPvQk_
zaAQ|=fAYCmaCy&B2w_<r^<Vc(5)!2<nO~gbDrO<KCjjR&y0mx)NrccXoGlGJHx7J|
zvw}Y6j<{teK~1bb3YQ>v8v_ZUYk%e#;vj9O42DHHiUdGVC2=vp5AIrVE%uxT1|wsC
ziRrOK#c<Ksl<84IB@s<?1RPU>x8Jh`uoK5DVy1=b!wa_MlprW=u0%uYK|W-+5|!}p
zB}_%5z5p^a8qyU$D-6TIg+H2d><n^0sUXKH#lg%*dRCbfl^ne-@U^`~g`v9}uW*Ov
z_LQmWds*)9WZ-~V`f@I*&XHt{13mOTg-ry3H}OrJ>aPHLataPiwySg($9m3O0&mM&
z3{J`X9}%}cc^aR_D@H?2-a4k_q)7g@_qKpfK27(3C6TMyv$^NTh9IKqM!Box@~22_
z+x`6RyI@hKC^{-TDSA}KhwUMFu}$?or&m7t4KClM7}y#l)+z*ikr`DOQKN6*b;MUp
zonBDS=X1Lm<*V{roMrPrZO4n|bt4D+|H`nL_1a9kQoAx`XIW%nXHJ$CjQL0^%SNN!
z355r1U8@Xb=GBjbBy{$pm2H}X4c7J?h#KvAjoYD-mK}Z@QxIdB`Rd)UD>tF(Kqo0v
zGsFrM6hkYKl#<|c4>>sTQDqFJauP_`4;m7@5ml3oWwR9&zomao0F1D-<oNRD@;WkN
zw92msju_CiPXwa^xz(Ji!JP8WjEbJX)mBkRV*72&p5W5GqOGe((!2~@i;hGR3?@6m
z8;vx0s(E;qG;B5um$9m@hW4A<HB<2~pXbS88k*zjYgln_37Km`D`gQNnK4SY3V)6C
z94s9X=?$k}$JaYEI5D<$SE3*gY5<#Cmr!&GC3(NM(U3s2uO)+Ner5v%v2D440s|Rl
zw%ImlCi3BeCB=n{_LE$A=4-|_R?6@eH5%Sp;v?hlJUn8SX&2~ze91Y=rMNw+K5og}
z$RxBbBX3~XFGJoWUlXe{`Lj@pBNtFKB)s~gb&_Bwd0?l>&GqqDDa&Wg3EL1|eb}l&
zY>gMGxzB4KXePsCq?;sCacNkT@42t8zs=Gaz(Q>m!V<HJLqUr}@B}$AG<k4f;V_^>
z8f=gaUUSgmP*h8FX{ci!R?xR=B0&XVmT2ON#Ifnh7Hh#8zk`bJa<@&`RL8?c3DTF|
z9I#n)Xwi+K_HvwP<HI_r&is$+B_2ZsC1Hd8`8{#h&{j*}0%Z@o>(6K6Ow-~L&JFU$
zReEdZHG~meQCvQ<00Crv`G5j{*Yb+OI7_OJpBrTOStXG2Svj;RRdee@=hG1iZVC|(
zV8aQaMO<5~kdH~VD-yI2(%S{>6A`@WyH6<^Q=9ZHn2mnQ(Wv?9_D-t7H0tE{4e4+p
zmJhieoYJ&a2@vRUBE4=~4b+GCh@%cc-Lnoq(bh(np6-`(nb!e5e0aC))hCSWhHuVF
zDJ}8^I)+A|72&8qE80S4+VpIf#ZN1j$O|&-<qNC}&FXF%5MFc6ODF4l;vkeaGRZ+^
zY)jQiMXI%(Kecry?ApVcZ{Ckl_>5J2j0_^yCQ>C?Cm-J1BMg_pM)l#D3$9Q{Vur7+
zW}Sg^NvJ2}`W)pDmyxPU6@kGUj31STkKllQd`#$2>V#;a(-Dfv#?2U#vaY!#LjKiC
zoK_1ObDZ9VdlVHbqAq+UhDYl+k0&OCZ-O5snSHY`+|0s0<iI+UF*pnfXI>n_Vk1tj
z<-6Y1cCdjOt4=9b={;JIReTCf;q(&J890WfLJB?ghFK!r<$X@hUYEDSe@)K*sWUq=
zP%!O4ouOwdqvfRg*+x-WvpUTAj`BS&eAB*g!{C9s0nL}T|9s^C$K+ZD3+<KP>9RHX
zMCzA}!>mA=H;8(4h2LsV8(Y;nZAwQqz!ND{C@t`-Cz7z1dCNUkk;h#3tbS}voc+D?
zejuLS-Iv#r)aNOsf0ER#tY{jPr*$+86?y-Edi6geNqHOsf`z4M&Qkv0RqtX(>dQY!
z3A0K8<_Po*!z7txALd4{o3EPZlV5*4E$B2+w?fGW)q%?vX*l+YN9&vr%O#^kLs+0p
zs6Xo_n>h}Mq}I1tlxjsJ*JVYG)sjnSV)Hu4FLY(q9n)LIi+JCv8gWM$xatr%YjVwe
z4QIqQq->KUzwIf=LUtK2y2XDLTs7pOX=Ur|k(Q1hQB;M;rc=~N-Oh?7TO{8T*ySak
zI07`b84G&|DkbK;B1E01v90YwDoOJ9f+ECYCi+c)p%2R^?{-3+A#&$()|n(~t>~7C
zBSj_U#5*Teuud2w>V`BeFt0FtbZ|Wv%JZ#l2f{|2D(PW;I8r%72!{)2e5Fn6c#w8W
z!kv}_iJj@RcxtN)Ft~#qHW_ik17}eS8&}&BXcm;!eQ?$^br$&xQK&0?s3kzcdWMVU
zW<ipKw>l)zmM~9BM_ZQ9M2Em)(ab_-bX-I)y}iAyz)(+N&t6jo0pb#~pp<+ns;*vc
z+~k~Om{A`jwGfdjLfBgBBtO5512j|J#5L8-&?=NRSw`{KCXx9*ERi8d$r6(o+}6}Y
zs5qm@B0p`J>dNUa13cz=+^o(N4Ne<Ic|rqocMhPjx4YOJSM(xc6HETvxHG+pc`iqR
zjh%1|Tr28vwYApnyFa)xwvc6Y)BD(ip*Y`NzTD4sRU1X_h+S=LW4^au(eQCHXG@yY
zqAkYkX{vn0rccCE7Jib;&B<dbxuvcMNz2+jVCbS=d5qU5HTk{2izjn=g>;Y+8AtYG
zyw24s3ePyY!R!y(UkyE`geM4_xRu)8GTZ)4qSxDvfMMH8=Kg09*8!j5O<Sve!i?Gf
zH$}21gx<n?qa|T^<4qQqOzq9bgE1_ElAd4*ZVBSz2FbECp>JL>KT7$#g@4<4X*@J5
z*(@ucZK`Oz{#ZBcXGFuY&Q;NPG0CJ{Nu0y|y~(xevm3WoUB+0|F#5^<{tx1;S8A~g
zabydTn>M5X1kDOv^{$vyonNPRLJsTkX~vMT<|&aMejx(O$hB^0KJotvp!q`>(?V@X
zAs_a@qNQ%ELd5?X4$YPLjtfFbi4oJv*FcsR6_G{rKjxnQF{+Eh$^;5bX=n@WoR*;+
zdFQDuP`fUF#&<zS9%s;y5fSibIMB9qi8cCDc2cb?^M4NjRHC59#>UxMb<v+LW0j-h
z?;de!$#R6O1oUODk%RE<a(VLSeDsTAu0@8XV93vuv@d<QIdYfEkBi>EPht5#ZooeB
z&1<jcUpKC+hoQ=-*d-Sg5CZWkiHO%XVMsP0%3a;{#bH19_2u>-7fU41v^wdf52v`_
zPRTKL;BbmEFmLC4tf{8jbcib=;-bo&g)YAY_;3EXA^82(<~kpbUQ9g~1Ft_k@Uchh
zR^kj5DsJo{i>0g%()axDw9AnocOFiZ(yCOo88gs9DjX>nAAMuZR-$=dE_pS(Gg8-M
z3Oh3ZCvj5%O*6V68)qo1ZuXmohDKc$NcyO#N!!I?RyV;EZu`ro`4}#8ScGdAp*aqW
zVzF;QXCh|P!*V>&M*>fs9-=SgWm&x9{qe^KyT`{y*<TiTAfWxz?01P3jad546KTL9
z&#%aauIJT<vHjY$lyAt3#`>7Y!a;mGXD^>x$Wp584F-3sVt?0BVBkPIsl8KEW}d;|
z$Any^-W-<Yu^M$GW2|k3?1B5Sn3!0e)H_hR@y&jLQN4x)X>1dUlf4flx2ftuD;a6{
zNMcA2?KvevefKH89(PB$C!j)K0{e_O1`Vd6396jEI2&BmxQ`x%)B-&<PLO(8adA%-
ze@HCV`Od#~$mK7NMBx<`6{^nB92RlWi818B`XiuPM2+yUwzdZDz!(t4%u|p@Cm_wI
z+XQhnASVq{$eW{-(McM~jE;RsL>R$hX6^s>d|ihwausjLStvX@(nj}BOMEN(S(={%
z(&j!lH+PrXeLQ6-MCK{`=Qm&X_4Gt|5@+He=U<W<lD|S9_Rlh>{Up8B1=mDQI)%EJ
zNEl4+e64Q^9{WDC)?nZMN^wh1e66GFYZ>4#-PC-ivyby`Lu>V`1(rzd^4IpPcL;AJ
z#htbi)Ro^OWV6Fug~S)w<oSK*4Te)yadHKcBrT!xY0xWDaggEPvxpOccQNVq6{rC2
z0cKX#F!&tjSkxZOw@_@wlt3ao106tOw$u3_Mw%Dx`{8sg5+xV^pQweh75n%`Fl*wn
zkIf~drf>!1<v{>9h?|aX|9q?8S=+MS58Mlznwq}4A4+nMFwKl0tTq58?dr;X?ZQe)
zTHMlCV4lqFHLr;cW|-r6c^H<uCheOF1TnMRl$62TUKKzkHvP?hhDIV7A0o0~qhdvI
zCApaAbJ`9h*zX`Q>a<i#60zk0Y*y7^Gz*+RJtsg1c$s|fFJ%wNw!mT3uVeht3j9(I
zi`4=TCrv?7YjDJ2&>pxnOv|HG<ajW!rX6)aM3L*UuR}wzRf7u+<yIjibuCvcI=y@Q
zJTPw@0{7#WSodxut)8;N*k>j*ZNq@6v;gj3vV5Js{chvAPg4;uaduZd`@8Fj#Qd6~
zj%r&Y{tOtmVqO06Pi<W4qIw3M_6~>2J6TgkS|Jy3QnQKJc4VY8t&<oLaM0F~>`ht9
z%(@xMCkW0qi862`FJn60m)lWnu2uacpZgyLs~Zejoruv$h3|k|5^y<6N1;W`_#ojF
zlC?3l^!LZ^Xi`CXjebk8gKLhYOaZXJ42x}E#1H<vii3><zwq97he-ANlCe(>us{8C
zSmk~EMer+99`2<q*Bc4V`*+JyVFsral8V4c@Tlb5-jZkdk-F~tBf31_;1#}af0ZK`
z;2l?+DbTF5OPOlhwzJ))C~iB}q*bl$1Q6;eSMljtfVdUr_jfN%V+EL3ZqI(^HJAha
zlYmL`XMwV2j4TGwSD~^pGFDm~mX7PbkqT4XL(CYvEQVvbjfS#O!tt3|4BO&4(5Z;U
zsiMA~brV?>LZgXuDACXsk&j`FjS`w!IK^xI>Ky;Ox0>8EK{0la64M}}iB028n(94^
z07<LzDqA#J?Y7)coVc1W$@4Uk^xghzlN0d$&gV4y?+yU0{leKxuru$x9bi#E)gwUE
ziBTe3XR|u$>nmk&smUDvZmc~o%+l@oP<-l$9e%6O?P@7lP2y?sJAs|Mi!%RK;Pe)B
zI3^wt2{@`dEAfAX>>3Zg`2{*7K?L?I$YujQSFMlJAQFop6&Bj4(~E;Et#!>6xr+>P
zu-jDo4YLiZH|Ee8;TAaH(wS{CiPfhPQRs!P5-KISeXfr@7WHgIE(WlHWCc`jKVWVF
z%Jj|VCv^Yc4kiyv-<}8MB3}{OdL_HeDf3B)wD;h#=(_``@INKlS=p2f2qPMou3b$w
zxEa_3O_=4s$)3+&d9lE<5P!SvI_o;`L$*Y67_N$iMRxBi+?)m_f{++Duw{T!^Q!-!
z`%?7-ZtFR7@aj77d#XBD&K1d`A4RQrEEx@-FvL+=t|J$C<@Zwi9WT~Y2u<W}VZ6?p
zp`APDj|K2&E=gy79=X2tlHMhkh-xpoNGKg>x=diyd-18|Y&Wgy;x0TFY!&9f^fXT}
zNsgc%4gDR)D*zAaQ}RTfS~*;44|mNfv1IOWd{!BHyb~)8@SHkYQP$^{mp}L3rQet2
zoD|S(uu{>pZo1oUq*`C4%@tyA@eHTtCaYm(WpHTx=(%^)5wRu~R+uGEB_aNvYb}WO
zZ8m+2wiOk0Z>3%p!iW;J1LEn|Gtu&b>L9agxF|tzV#_Q}I7re{XelA~*B(F-eMC+^
z`UDHX?4F8(u1+<hO@|{Q;&Td#hFJyl<%}yUqznO9ej3OXa2EaJXHR5RnEy&y`Q!}d
z4jGmEcB1ZN&<Y)PbF^}F-2nMbVF62<XjSSAN=eoZW~9_dGbLW5q_iIah)AysW^uy&
zo`%%Q@)i7NaSMwCbd>N4cgXaoNiOE%QYaWF`rf2hn9iQ|NaoQI<Oe9J&Ne;mR^zyg
zv8a>jB65X!LY}POC4n1t7$RIm2oEc~moIN24{gZ?)98qb4lU5`ZfF>GW#<Z~<ug>p
zgOOjUxAXS3*>1C`K351wZi|z9=Ea5N9*4NfT$vw{r`X2Ou#F|G!<tCX)7hx|$iew?
zSzOosXqAZ2m9PIGa+CIiec~)NmB`LU<n5PnTODmR00UV*vBc`izZ<DtyNn7ibNp$L
zn~br<AcVPStm|#5`I3yLhe+g^a&4cNo=SXH(~22h-vIo<cdZ1cQq9=bDa#Nn2i`?)
zdkpAPlC>?-`va;w3?+n){wwz5_4YFq0?rW4)gRdcZW!#Q$_R5^Yo3*Ur-q+ssvQcT
zAlz;2!vIMABTU@Hb(E%h+LQ+w_5}2;N>OgDOglyJKN3++VNua;Qd}tYxJ4vJ-n9Po
z_W>=MV3+LYPQjru*g*4T=T_X)D5i?*W~7H-VPkxVrD}bss_ppP)c={#6nKz4_)$7)
zyYKCXpwi7$mo^hG<-~?^GhxVyIQvN#@n#;Er7U!#;Qp2_a3J+TQD>-z7d4TFNfb>C
z6!qfEY=8ztXV?$*FdRq!WTQso2v3xr4DB%{XyLY=M0w94fz3Ga(&TV*C>rU?EN8un
zw^-1t=$Kv;k{0nE8pNMDy)E^nuXs*f9$eAiAWAHW|G`?^U}m}A+=9_(U#Ia7D?n)0
zXZ3*3uf}C!VoIAz#+zXvS%Ob!C^&IvAK{+UMItE?MrE!juP@j7K+D$r^*XVNFyGoS
z{o}f#iD><AaqL{gGM-2k1+S}F*=~VH-so$Kgjx&g_VO#a%3E4{Y-0`O^Qo}bm7@>6
zy*CY1o2ctgRs0|Dnz$k6Zvr3Sb`dSg1w2uma53CZIUA|NgwPb!w^Stk2>;Z)StgC>
z&26U|ch*0L7NLis#;Q&?4Cm)eP{Q)GPu?6|Cq`+YKqxN+_84IS$cHHy9l`LmdrV!6
z{+>VsVM6Au3rNV9M%q_c->JFJNb4&hipz+v^E!*YIC5__-plY<H5z7O1VRy}gnsxl
z4<kp=QSXd!<@MzgM_~Ohluu<Oft8HZ_#0f<tMuN7UJd=mECt*i1kTw$II^B(jSokd
z^~5UBFtaGjFWY$EHXFCq@XHL67k<4hT1`vpCyL;tU`1WH{w%Xr@-blr7~IZJtMx#Z
zx$CmB3ST`+3_aSm1%$YlJMFMhpKACv+Mb7qxMt_%L^O3ZwT(9#^)z<-r3ZI2a}!ab
zzK;vZ1xX@r;g+k7nnemBOc&knG`8V<O%>}pIsE;~lUvdLCZ)-VaLG@&!k1ZHR0tc6
zshb*Bnyt<@ag!~KkwqwRm(5;Q%B$o|jZ!!9f4n7SSkP(bE@c?{JB%&tW+|DgauD&r
zSM@eKwT#)~ZB!6U)OT3-2uw7HA}11-GNP3E66g-HP~3)rIkxmGZUH)+jL}J&1?~9k
z0ZQ@yPxlSO2?*1M1Xc@vj}l?}8nUhB&3vUpE9ne2%puT(y&*>$o}K0V3dC0ZMvn1n
z=4>#W^6wDt`W|MGXJkhiFecPi7s)ZFhk8D}nYt@iD=IH#q|(wuv1O-|TeAy5nHFk!
ze>;@SAoje4{=Vz?7eK-E+gUUq@C6Z<uS<S^?@fMsvQ_nhYRBz=6WpIq&*;D!*?m!3
z$Nc1uDD{WU$lYb`%3U-lIWv>fdqNlKVn){O>xV<Z$CD;Ki~cm!5*JxU@0}Su9Nd2n
zQ!seB&d}I5F%>}}oN{QX&OvaOiw`I*H$5jNpO&RSj@x(8?1VNDxZUvD{E`W-;o>AR
zfm6!7P8e%P`B{{52~}7E*}nw;;{_0LdSg#g8;(;$N)CmbHiP^af=g2qrRQ8OFcB_+
zU`bL!E$=svB4N2=L5r$>GKjCICT`uIp8hW0%i=fETUgxPVh1?j5AlR+s7P&-HH-=q
zbF8W_ZVq^XE*g$DgZlwWf727QU2ly%9XFc)?tJ_+HqLZ&_9HJT>8t1W-0U^t#o0;!
zv-JRQ`R$d02ML*Xn*=tUmzU$w-}oHYl0Dhaa$0|OUuU)Exctf>n9RcayW`bb9itm7
zm;3h%%F;&{Jq~V?do(LH1~&P(a<QQ;pXgkk;^w^moc2v;Ajp-EO`dwkw2kU5pauzk
zh7uvo!bSUB#3@O>plsjF$#*xW?l}dQG#n4fkduiwpD%*Oxe9|H+QdK!Wl@7;9Ms24
zG(E4>><!gV&Mb!Etv%@=|Ad~=5hHAB8V<|`Z@FV6Sk>S9G4G4u5|MwFTazyeor%?(
zy-um~{|)@tqPHha%2}l#R<+eQ&L*3cn+h*v!>|kxDPTVPvj2({pWk#dy}{y}+b~J%
z+M@?<*V6%=*y!YF29MjXkJxmiBa<TO0r85#X{Lm;kphPu#3ae#VcXI{$pf#agz5_W
zb~LbwuJ^x7UU0<x&&G)%2%3{i4sArf<7kW#^e7E6er4UguCQQiSH%9XIzCUChYM-r
zhQY>|iE?Rn>_LrtYYxdN6mbq|;d`Gs6&ECOe=CcGgajtNEA5JDP9hy_#+~KwfBFO9
z>&L^NY?oEv{uQqCdN4+3mnkNLI(Yx_)C_EpT8LRP-jUK|(a&ew`YJ~jz#T`YVMtfz
zkVvk3?d>{YVP?Iyw{v=3Jff}iA9rE?DWx;vE21)v;|?FuYD-ZV*&i~Ni?L?SfNGG*
z#>%iKq{_l&aJu$)P}$_~QH;r7`?_3_x!E~*bOP6#2+Ynh*I#;{?kKUyvI+Uje8Frv
z;iFNC3YC?$l}eVNBjDF2v1W5$JVsV$w4dG+dEcB2_HinFXm*Zyco!t&t<U(0AWScY
z2(hZ`zujyxgwO{Z;|^$exDA5wEB8fi=V**G-QcxNJHo>Di_v*>;#Z<1G~W{~t?=`b
z1%2BB*%G)?-ojt9Ch)1`&7ADSiG2j!#*Lg!-5>re`FuD|HBn7ZPBzrlh0+p<QMt|j
zyo8vLrU9^4I9~cXbPCp?|IK>n!QkIRI9YGayVdd1BHShsoHIgoDQj+%_)C#??z;8t
z?5>6cCmTs#ZR8;Pw*F)H$2VAcT9iH<2rNMz+>+4S8{8r+D=#<NRMp*D|Lu&1mJ-JZ
zq?W4xgHHBV?n-ov5bRVR0j)v=A-vTZPMDd36Z4%gToL$3<JW(VnSJqQ<8mjblxbkZ
z_lpuXzggGH5sLnAfj9;Ox?s#Vi&|kFa2mFmlSRm7DYp+O?jQLHg84g6)fDC;5-W$;
zJL#P5H!R=3S=QJ3e?k_Je!~&ilg6WclK-yhf-%Y>$(X+(S+Bsx9qQ1Av4SIe*(~FK
zht+yU$uUA36_;)EJ_%<;Px5I)qT7c*C$Idsqi~uXlV4$_h*OH{wCv$Z)?mcFW8C`h
z|BkoLgC(|<Cu<ef(xO><!?euq8sY8w$Vh6p{Y1yc_$I)lz>M6yrCb)_{HER4w32sh
zB8sDP$-kMZDn^*O6s!_%ZAkk1u2tviaW72U7*hZ<#TQYQK&5`s;*3H6Aq#HaZGZ0{
zO3lL*k}F*rr*l42^qI>B;<kg-P4>e`T4bGwsMFL6>i7;CJcf|At&1wO6P51IY8{OF
zU%R^eE)kZB5RB=DxuqArK8!g1iT|F~UU6M+-=d=lryK$m=+w=cUfYd1b~*Z0P9$BD
z5Rm|7d9BXLIii94ZNj<~H#HdW9nPgEM!a6RLPddo>wUuWd1hH(<s^PF%xZv(ajE@5
znp~g=N0xDWr_yBe4VfgHr2A_0NV4e0cjcr?>x;Nq7sFUh?#SEzsEjsEFOkH3Ru<JH
z4C-!iDgpS*!Q*t|C)MG(M4B(Zk1=4@{@l5QjnN*x%)`bcp`vE3O=!xHS2TuBzmDx{
zO(_0`3<RP&AI{*~i@9-+@@MU2eR1)rHeQ@j38FZJ)n*v$7S(KTY)+_zC?fgH&!p23
zz8Tok;>M*_^ZX(zp1E}MxESh>Tf{!7>bG$Iw285yuIm0Z-Av=1{LLFRuI13Wc2+JD
zxTvWxbx?z6%g%D8_!v$3fq6Abe5bY3Jem@Oaf__Z<@eYam1Ti+81shUxpP@SM^qx!
zw_*2Y>3!bSd~ue^-}~rmuIZlDai+?=UjqhSyx9hpXyZ(==PF6U`e(|vT8ZxuyUc!v
z4$3NwF-|h3_;dS5R^{Kx*=b>gQY6dH`AOE9!Tz;}7H(n$C>WPS)r^M<nLr_Ix8GM1
zt~QiD-8PJ^+)hR#)CF%+P5hD!@)_HWD4HnZLwcT~MH;Co;^BG`DR0I6$6{inCYFCJ
z24Ze{in(JY&#|oM&r-=tS7gGYNHc3`M6lyl2g+H>ZwpGY5fO&1B{Jf%c?(o?UIgOc
zO~EL%qcqIejx5Vz`COTs#7!Ycm%K{)JZ^kXS&=rPndcvggtR{tZExOVEXaMOTWEug
z(M+_f8ce<!ocjc-vYdO<(@(5K``o_N1W}StMvhJ9iab2s{*;YBE|ICsI^X$vTA3h@
zy9>dfXJS%TQTg<(t=sT-wyEwZQI&Dt-TVMeR_Z&!w!@~F@!Y>B8L=!s(2x0vPirSO
zJYKI@%*HOB(J;m>IkEldXswpI;fT{4=o$Y`x0o*aJXLU&-1db98}!pX5LP#Lj$(76
zw~Q;<uACfro!K_7{tf<B1#`4LOLhDq*{XPuj%En4Kx}a|_6Qng?fY&jEo#aS{Ls`N
zM6FE8Bh4l=MFlT?;#cP6o;+6o$R*;u*#i>4f*wZ$XDu#G$q$8VuPF#NJT~7GYNI*+
z?7`SHoHNy~HT*ll_1*VsMi#`nz+E?#-o)oO&#F8qF9XTKJK*N4HSWrskB&yMV?jj;
z->F2ygS#=LI_vy11qwBm>P)^3llmxa9<8-E84D3&Pd3}ld0!p$YSG4KhCtODrcXek
z)Ze|KrHTp5=d56)qSwHz6a2cgl?OG_hf`7ggAE8xc7RQ38ai85|Fb}%x8n7}8$iG_
zT(!>=_2cB?icHGOd#MX}asae-n;Z|^7&lN4pdxau34|D-4<~IvKlvwff(kb;kFyOU
zRV=xgdA;OnQ=m)GWqy#Ry8*7PIryPi5=AB~tK^Yc_GLUTm5|OK<+d=a4OpJp07yd+
zK?Q+X*+L}mkw>LDZN#_Md7g^OYcD2m&3F9zAsiX)`e^?66jAKyb}UWM+WjPBy{fs8
zo8lS2gRPy(A+M|YAV&q+b1(JwF#T$#vM}uz=}>-iwY;S7+Kr#pdlvdN&-%j7!qHMA
zD`^^8(I1AZT{TOen185W4$;9W@})$R#%Cs(TpV=<pG4oSNy$E6Zxo2U8k<YpS$fCz
zdqy;&US(2no`MNe@$PArq~y4p-l)FTYwJF->*F3-HM6Lp=1hslwgGadYE32`c-#B2
zPMFMzeV;M^+p*qSM=ZhCw<ys_Z=poo1g;UL(b@mj+>+w+S{{RPxzs5*eRhkXXdrC^
zCj&YR^jxro8PrU;Jjm)E{Y$ihf8LK~yQH+V;TT5{UYbn;YWzz-x|r|nx~JJWxHLgC
zqq5F|J=EOHJsFin{A9Xpd@{ddDzHcn<Lb7xE4c!ostq9fk)56WFA|!C>w5sgYHa{4
zYHLRp@OS}YaZP6Z@cMWa&HXY{J|Pfi*?*SE-ta2;Ra8H)1nz<6W|o0q2p$+5KP7)M
z2IXg>FOP2GS)5j5z<Y;}7Gw!>s7vIjAY95W0Z4!^2SstD!d~%F$qpZZixUh9Y*Z%?
zfA#Ic3`Ze9M$+Y`1B)2k$kdcS2!`@o0bzWo%Q(7}{B(8K)<e}<mq)1!M2Erh|75M^
z=QIfgX9(i9Hys|w2N8g;@ELD?3D3k=f(Ow5;l2RKRnfTlb8gt!7GP%q!BG9&cQ-*c
z(CKn_6ezTr0&cWL(;$G{c{#=e{(Tk;WW6OnlM=*HjTLY!PszzWnFJd^Medx-Oo*)*
zeH9CZBkVXK`RN<8sD=s`j-{xoR{guTK@#*Xx6Z#-tdrUp9LhTDw?i-dhU%6ZDLF(A
z^K^vu{EN4H(O-D$p8^|<zNhd~*bK1H^)qGbO<o@S2<OZiB;$uLu&pHN%utH>FD%Zk
zN#P(~C|mpM&sS*mCC1RiUk?%~<odmwpKpv}oQk|+%*}AKJqes&f5kYPxU-RN0;Udp
z0gj`10#*|(d@6Ak?9<=eurz)t{qUT4tNZukVduhN#i$EeE#nm1IVa(~$X_z9OE%)n
zn_s?hr7A|c%gj8dUEe?7kXe?P5>r8IuUgtrqnu>UmrBEMou0aPgW9KKPMCUUeFmCh
z#clKOoc?d%RQbLhE5PXVxQ5W4;70f9WB<4BLTAF64%*td!loD7gKL`^B$n`n05!b!
zcpi$>vuZan&ExNs(f^9n3kr!76wT(W(g~dw?M7g%o*Z);YJaiE+zgqO%-68Vc7Y!c
z_z8NmfL@N!9YNJx0qmil;86={#22@ert^Wai<zik&+OT2?^ag^Z|H4^76?DHt8UJC
z3v6_jF!;e6;N(G|x$Xeza+w&y!I4)A9l!x>xS7v9y9pB_+o!#!Z;deEfizO@oO{@R
z31ZXZI59mi=x-r&LzdiNEV2I8lTE)l!foI@@({$x4eQrVN0Fbv{G`2TR9fFgt>kRh
z!;|ye0v_7ZHU!1GoZnPkh@KyNKiYY7ul^(97TB%@J4)rA$BU?!sP*pV#hf(IF0W`x
z_sw2*hT{T&oQ%&bvBb|19U%VxV7lPk%bFvQBmzS0YFTd4rI+K#NT<h6nBuM)ePGMD
zcE`UoJ6rfB^+ud2=IvTl*$Zh(bkxpA43*^g(ezZ=Ia!&_F&k_eLQ7V7ec?>{(57NW
zNS|<9JPy;V&zI`h8Ue!hQ$lQQe`XZPRuXUj@|oOQW1sEezOT|>pp@<Pv-^ul+xN}e
zcutfAJA>+Mjqzf9pZE8QDCQR}O>b&0s%IwbOb)84&uP3Y+ZhUEt6T)G->g&!q{7@@
zl@_jber2x9FElAD-XOu!TXbECXm+tFKK)+Dujy|2qnlHE+)$*00X{8G$ws@|PGN16
zbkyd9;`8h@w;^qI#%iJ6<5&$%G>h83q61d9f42^lXvjjlmZUaUoWI1HV^ti2-1k1X
zDWh-${@pACJe;k?shkIpKo-wu;(vMkli?g}=W?4!BzEH*HO}^p7|+QAjF$G&IV=ve
z4wMcy<vKu@U;YCaN<D*6LtDR#=e$#h63x&1i1d_peTXf4Gh~G3kGc}d9MnLl-CNqY
z1Uq47u}$8Ar??g^+hiy$qE2WcaRjIsq`uA!p|r!Tf1?sqUqby+2s`yNKqQ*tPYe#O
zXB<a3#8jbAgz}psE`?vY?S!>Us#D|;Z};8l8E+4yq0$UZNO2L;!Q6oF!_CC-8p?Qv
z>YREHGG_*A)#=aaXs<Z#S?>g4``7~hj!%e=$R)}{&?t_fq?<z0sL=7*p)#l9!={wC
z5lAR;p8HQ==df+@N2k3b(G^f?)8{vtM?N;xR-d-UC$SYYqt@cps@}7<r)l|kXgZL?
zRasX=ujQ_MyL<f8yq+u4@pAS);75zWZSHypDJ!$(yUZ0~DjJrU#nCx#eMfEWUt9ff
zJ|E7kPu~7$fhT;r`ea~QffB*dgckHxUhaAPAt0mmIO&^;zwKdd$<M6IJZ1HCk9U_j
zm_G@ot;O}E2}Bfi@252R98A++oU$@{GE;B#NEQ7rKJ|ZulQrFCnZ-uK)pQ?G2n;=&
zVE8U%IP=wS_KV-1PK?6Yl7QXb;%uBYp5um*=-(6W(%;C6!oPA%ymklC(VLn}J;RIV
zi}@EfPNrA__NcUHs11cm50CR+M<3>8t_%Ag=QgrBVu`J5a#os*6<*WqqbvOAuFKYY
zsjb0A$I&V-8#)uyg)XphL9^({{r$A${_c|7`=Q*Y!ua8e?;etl>&b=>dzC}Pd+U>%
z`$sq@{My-xw0q9rA|hUhz}guhb*yLUA{d$-ZUpiOVCw0SHtL^KPTQL3n6YmFY<m0G
z@aue6Pko`dl+m1;(*koEK?X>h&P*x)pwjKEHU1q(7P2gG__~dr2*GE2>N1?XIvP!;
zYs%tI5fp9rQP0=hXU2osA%^cTR5jF&w%4_uq$g}^dnw#9w}hI|f;Sh2d<qL@v1Zn^
zV4ggA=m~=T*bV(K99X5YNbb1NnW2b3HU-1`7TWmSOI>dt{uMajP9`%6ewA6>J%MRe
z${b|eMkYfjQ^`U{=W#9-&54_r5FJJttvX#byzUcX%clV`u%Co=O(T(s0t4wj5nzNZ
zN}WQ7OI1eZhR4KvZJ+mGP;<b)8p??G*>;v=d-X<XfvW<&7(zkoN0^}=5E!hH!%NP*
zqc0<_kLM#Zwf0J2DccjRYBCi!)ar`h)^>m-p!Uzn33JEzIIT(IOy}P;TIKt^m%jp3
z<98tg-A@mWKfgR>*yI(^H{a1j;klt3ciAr_w{F~DgQm`(GC$QcHSx)u7(TQ}zo&*5
zZa~2B{I<PeRO#6C<<<CQ>G!<nvXTJ*th3Q`?#A*_o=>&UD|dO&{KuQv+kMq8c-m4w
z4rW*@l*b|I?n}J#7*~TtiuzUqCPH8A&SK@eR(<3}R%xtx74g@&LMz;jrIl48Rg}(Y
zry`x7^XIubXm0JlbGqXL!)ne(QCAi%H_0qlM&u*3QKFC)U481W)rQ0BTD^vntD~92
zoJMTK5lum^)A~Q8zcVUT%+>Si<}fPX4^#hI|6xN@Xz3yJSMs0>PC{6aolqP7hoF=@
zKXwi*pRkjWyS!4Zo5OzU(AtlGgT6oBPKpyZIbgEhhtp;>Bi7Tp%vCVhm2^mNsM|du
zWfMUN=;l0^hR<L!Ez<*cNpT(zN3>3mCL;ow_)LrnEl_r1CWZo2AXG0-ys5&RyCoW|
z#0V=;jvf;ZFZEC$@&<V|e{NS2;GnyMU@}MA(lR(}WowmLrA{$1WUUwZLxL^(uScfS
z{_@l^oGwiiA*)!`AdhwXJ;30*r#fJCqeX>=_Fq$Ess>okjYe%M9l6QyOE4FkB@jiW
z=|W&Q_6l*oD6o3GP?oSjM>Pv7{HQVD^Cn_^+f`1k0e>Y7YH@jL5}uJvIZT_SWIaK7
zaUhPDx=By*(zZNY{><wc_K0m4jPhA?m!R5FawHL!RJR~;Rv1j%Bt>TKS_!`0Fhc>t
zFxdr0Mq}?o8UpIMUH;@Sypmt|)67NKw{3pyuP8%%GLS{TYTe{LpAWaYiM^XC+#@6P
z+WgjiYjm&O5k|K0x2Sc)_tRHSqaK<hww%9HLbs2P`<_pC!_mwp_qS1O-|koQdp~8o
zYg%HX?2YRFpAnAr=a<?J2W|giV&f?rGB8!`4#yQWG&El0EZLLp>b}a7|7MqwI_mCY
z?mN&rW0moh=ywv&pwH#l_oLLc$pF{|kXC#@^O0Y@*;f&f>uP0^0sZVt2dT2|x2ao6
zS~LYAnPajL-2Rrx<TM8h*Bt4<s@x3f!<6*+9ql)28LG119Z56v+)A%>sbOK`ZCu<5
z*Uk^VEVo%)3^Af(G?-yUN!=6h5+e>8VMwAY=38t%E3gfaLz{dZU0AtMrGhImYb#5?
zA;&%{EF(BTRY|g^{&|o8W*Uk>yQZhpEX0sM|CNKK3M1roGI^Atr=f{qI_H$y5!ATs
zcdd!6(t+MwAsz{EXjJcv^Ne@}YV;@*!}6lFqqH;1r?e<duyQ3+;@OJCI{R%AdzT(D
zf6*jXqNgJ|Kop%%xMrEi<cc;U?xQeGgdj*-lv5$>1ScX~LSTs~r)SJyM>b)<&<CX*
zMHMw$qV1(Xy~XIK<0x;!(CY=t$YH6iG`i>=xy~YJ_m&V>(<UOQ^Aiy0Y><nREFFb2
zqy!&%8&-f!%<;|rajg}`=)3!$q~3RR0e}CPkUsv%dfy4?51I!Lvnpa;7o}OYvBGE1
zdtJBdAC5sQnfGxtm`Xl24B!0P<y4`>t_m{zt%?!xW=%e{W!%%^u5;o`r(;G%MwkAz
z3|UT#qHb>gML(vmco<tNdmO8R7_CT{=Nqi~_F$ia+u$^t)ZHwKb5h2u9I4&LOWH`p
z$3K*>Q;E%TP!tdiz!w)sH|J>FiQhS!C`E1c8uB3J!+_U&l@Hr*`>`2SAbss6mq?Zd
zU6O%+#%iJ-uuH-W=9==io|Rwv0RQcED<4V-_q3J^k<{oqiO;+G{oHV5h0}lmiAdB6
z>V_EuGo?y?*KnyJ(dL&*oq9d9Dv3Z16}LVx%x(V_-6Y>HE?=oinHk;!iLdxXK0m1*
z$}2P`|BA*h&6!~Zv<+Ba@v0I+h!ZgD@$>{alHUPpSX?5mB80iXcGg|swFJtto7`N9
zNK<&*QtzBBg=3WjWY;x5wdZ5p(@{Q!G~FpCozs>ce;Ey3*Tua<H0%54Ar`jo^S-LO
z&OY(SI1tgR)M9$yc~R=Qk#Ujq)&KLadm<;V-GcDbzh__VPNS*Cask|VIIq4syv&1h
zyIO*oP@6taHoOX}dfi}z6z?Z%k;uzHadRg(L&5#4fwAbVVR!yrXuR9~aS<d|qIbdt
zN1x6xP8F<tv!^O{kR5D3Z6{5v;#*RzWro00PAyN|UZPk+kw5GXjMX1>O^SgUQJV+v
z@W3n4csnPxwT5LyoC8*ng*j<wa5V_-wy1`8(jiAt(k0|moOu1J{Rg7JPIo!;<f$8y
zniNi3>)|$iMN#7iv;@aQb(JndG-sGJ)QDN2#)u|j92FAc4CtUGM6&INu3>Tu)oOz+
zZA3Do@%FIyAedf^=m|vxp9GJm(6eyKwW?IrG^}Ah7=bbh%V&aHi@!_PzG^6J<edlP
z6_ZR2CHZd&eHc_JeYGoM3+^cXomerV)-CjnfV@Z6&do>Vy!S@U&J>PL|C1z){CR)V
zn(-+BxPN3~2|X?b(}Y2$*Pzw$4{jG|oVFBZ!W@n!8Gk3@DCjLg<Yu2t;29L!auV-x
zk0{4BZqeuewM!qW%W3FE$+9JN*g+f}_Y!5_%Oc(HNhZ)(k|~f_@hA1o0^u;J0<vi^
zkest&AiI_C@pa07e1bM=d76#vWilgzH>V2|FS<7ORa{>WGJH*6oTDkULz>X0Xxq43
z!27)&efL*mw{q?oyS-)CKv3r=+szAM8NuYd?<a)Rv3lOQaXWp+v<ro=XA(anAsblP
zgx0$7S^hU&3PkORU`Snl=Jj)@3nL(roN4_T2~&fKQjJVZPDa5@+gHHw<Q5-ACK%Xr
z5pdCCr}DPE8Y#%&;k~k`tP?Y1_~eg)jB+b|HiWobUbGsr5P`=VlvH@3RhJp)a<JRc
z3O}6XBBpQcyUx$3xYBG2{P=3HEdafc*mYd1pfhc&59OiO+k&0~un(VO{{P255ILi?
z)L|;qqlHLUgl?&h6$Rs}Of<{P7_HThxQ=XGUoNDqw6{Yh2Bf2{&Qc{TT|6D%fY&n2
zz<8+1^5K-g>*!J1LeHzgMdsh=L-E8@PmU~vk8Q__nvzwbFUWBNwnT^RR)0si`uf5Q
zDrF<SA}(QSao|u4gFLjSuTffHmkipn?MDntH`Hl4;+WD3#_}|43gbfblR=pxIA2%}
zBNJt$J9BKgSt(Rj@Vilk=$jWQ@VG@$tk|*eyIYC48&SuGpyJya+t*oF3Zw)t4&ngQ
zNiL<Gz)X42NO7fJ{`vM^M?}LBO=HK`1R8l*`*_u^<%qiCjv=SY)d=-y=~PbJUP%@n
zv|vI98T&fSfn2|GndGCY@Y)7%c}sx-@y<8SBwE@&48;d4<E5v>mC%je6&VO>Hw$2@
zta_6eqb<(E?v=PKXRe`#it#Qg1d8jlrm5*8fk<M|f8z50ccBm>!Z;sxJ=}7!c>}0e
z4+KxA-cT=jqB@E^*~rR+gF+By<A*d3Gv8&dX<z}0e>~=ZT5=*Ip?soS!Ob?M0*6M-
zYFn)RPA0`yD})v`3(R?O<Vado_!i7GabG~Sknv1Ybz(8R6|ba~ZuCT5<BSsJ*4mb1
z)sG5nFo3s2WQyG`RDeuMTHd^~$7OstOc7er(F`)2HyZ0P(}kT;EbT}OJT-2@mXM4L
zA~K;YH}2w2u1X+3s^z7GsPDy7FKxt>8mo<M4r!X;fDlV1`ZbnvKKnLnY~pMCUtw52
zEtq&(9SfQz%bS!Hlp#Z!5A_m~Da+yTYB5Zk;{`JD)C?(>gdfg2+CEl@a>v?IQ}JM%
zFnqEu4pmd8me_9dK|Mg)CLPgCPV_KklgA3`N|mK*3wFq7EgWEuA1iRmtelZkFBwT}
zsfylZm7ok&XTyQvFp}kSSTc4g*NzNI6`ogIYw0m(-cuuBYn4l6R6vc*m*5tP+03M9
z3Pq)tUpR#&sOZ9F#xOxKWScZfF~{zag-P5!lJaZmF0i%-t$c2X5OjwMJ;ln^ko(FK
zOA4Q*TwqrxPmz*$y|t&3To&x$#UhKb#*AZ+gMxxOlz$_kS-esqZZEFwgIMB&isg(6
z%NNlRk=SM5EN5$&G05nfH^L>X(6vyZUT$5XG`$w<fB-Gh5*iBkh?3+Z=s^Dp+2Vf@
z8dTq71P(MMhB6rW&rz!v#I(sumVUU-CK}DRo3mzM7#&gAbKtXxa{AvtG>m~kir})Z
z17A3?Px_#k?oo{vQ^2nUc}_1giYeIEmi^EC`2P@RCB#eJJ<R#Am}S<eDBM0@$?6E_
t6r!*Y{jXOAb%X{^G|FZ;q-{UHEQC|kv^J|Tf<GEcUi$5uT1nI3{|}x+g-HMa

literal 656592
zcmeEuXIN9~wzUmu3Mc|fM>ilHrGpd!QR&j9BfSQJ&;x=LMT&*qkrHY^O6Y{5AiWbH
zw20KuA@uUCz&_{R?_9a}d!Fz7ynlT5CV{oq`_6aHF~%Hoy;oI!dYy=x=)#2y*PlO=
zRl9J3O#8wGqALVffuF2v2p3(rz<A-g>|+gg!=-Wj$jCwT@w%m#C9#5DeIqx4e;8w`
zTK>D#yITIusk;%E1Qk1Yf?}=mzkSMn(;N~gb&KMLtZC#;V&EJ1l~fnZiBSh9V=vuY
zEi5hOl15&-T5KOAPk&0P#5%9mw6CBgK(bGsJSnIkle%#6%D?R&KVFJ=jQUK9+R@fb
zZ!TOSVEi}z^G4~7Bc9-;f8QSj?k%9~0-DIAwnmZU-?#u5uMlV(lm5FN`*a1Rbco4d
zWJB%kzyEF9gnM9MLAU>nJM_N``o9bMzY+RxN_YQz<o}sN>rHNCXJ@NEe(cxQ)~2DS
z=cTisK@OxZ#xcCRckkX}U??0I(D>2Z9CY9k$MFAEAAEo`J0(O%apSBa*5|$<)EcgK
z<4GgZYPcT^<hR}X#?q9c;6>Sb{|JX$Pyavarj^*G0FKh6GK;LU3RxOoe|&VHsjHit
zk?~h16w2}NVew$IbPMpQlrZ7Iz`%VT9+e+Ie#k$2rW#B_rwj3n8XRQj;!-!)q(~Dj
zsH47i?#<MPydiuL{ytnwTDs=d*RS~+Y1jUzRSHN23L{g6)wMgPh0#xye0KqwVux>6
z4aUe7NoRA>Pd~ZfmrBKZkyy-i>Em8-%6PRKXmCB=I8Y|=NdSB4B72X>c^7$uxHRjw
zysY+_P-l(mqv!vC5Ux}LxAM47>Kf_UtvHhHuD3AQ_Y41ecdyYzwBsW1V**h><H~M&
zc6O~N=H@+nyo~3=nS7$}&EK;PoIVf!ij+Bb$<99TBfAM8nE=WUX?IUgHCgVZ2B&!;
zjicK_z_U#$G3u<8;BOKGA&IfCsEIhYluGpw$;!%RLv(F=!Xy0tCsg$21c;1X&{L(q
zAEM|!8E3E$7fH-3TrB(~ywVQYmNNADIr6~x{KupwHp_zg`Ja1Be}7<dU#dd-HaEMv
z^yw2b4qx$~=>Zj0^3vnZmn!hMDa`szsvPoS=k8Jg8}KJ=7yEHb^55k?E>@`ue>~LB
zpU<Ai%Kkh=z~Mv3MoLOyfupw`|GnJCB3te9xIcnsC*$0C*+|g{4t~IM&O@f!6OzGt
z;6n)`XPa~0wM*$PHd4gv*pg?dGUQLeVhMGDpbg+GO(MO<_XKz0H5Eo3lB0bgPaE9M
zH1M2V+TXX3SNfbwU%0pmY>~Ur*DL?SGp7N|>z|<MOqE;Yu9*|<tDbdFR5q{s#sksm
z0Cz7XX-etW7(NT!Rs5RRaJx)8m$*O-+>>zP+0vsOVWN<81Ew?*I2v5c3f2Gp$`h2r
zfbU5jJbf1OE;N!*>)ktEqd^0ZuiDqWlt`=ba3^S#C`>PrTSVXmRdT$QZ>@w`8azv`
zte_gU6@D5hQmR1IrA?+voABad@B*IyjD$jk^aZM@taAaWE`ZkqwbG%c=Pu&e2f7-m
zoxvQjjCkbP#>dVzj{@2G4X?W~5oaj^!Lck!UQr)-b`N?~1ko}Gdk9^uB!JutrHaNZ
z3AG6(#hW|Mxd%V^UqEQ;>DteR{I}<zC;G~$U4^u>3<WjlrZnYfUrSKsX-w?`VHoTK
zp%a<`3WA^N4T9(cPBc+kvFUBr^EO^e9f*t~$#d@LG=t&tm5QGr6^v|NHLw}w|1ogw
zFqN0%Gzw-<*Lk+ne-yXQYec|Vk9G{48ow8M?H|AUuVk&h3fSDCg8T3P+h=?ub)T>_
z&M`2WMANEfK7cczujS3R(}yfAl`5j$w_ot+lK>v7NB1o7(#l*f9G!cxuBZWfD`nG1
zdEPSoeJ>67$hOf$!D1R|>wPzi$sQ#neLBq%rOBt)6u;;x2b@4%EnFf6s^OAozvy{?
zu^xScQ6Ie~+)sSoH~zk6upXmb6NN7Bn$kCm9V^NOk4_KJl`pt!US}b1#%0ATYG>EH
z;-qPfJ8=KHs;3z#wG5zgR$LzYr+MO!Upf1pIbI{TKGVa8YS;#%aF_pdvJg*FY9I7#
z?NqUn?vBf;GZB}SmF4E-tXJE!pDiv~{%J|kf!wCTt-e04j@^Xyj74SOcH@sZO^TNQ
zAcNQP>Tmz~u1{|X_YXmhlujT=tZ`s=_I=h&sQ~uatN7T^{(Lqtn&^uKZBJY0aWH?Z
z;G;lJ4Q*}mBC=hG@`uxF7I5O?UN6pX1sC^}<Y#fu1^><;dR~w@-o_))77iVDIXkT9
zeeF%X$t{8eM?CUe<3@_bLa9LZfpVk}hZfIC-P`4MBk@urjGN{av$(N9&H)YWys9h~
z#^rv3vz2II#NE}~2LA`Rb>U(<%hS5Az}DpFZQzt60O%Ymek`0}hx5J$WZ!#alxU(G
zH*SQ4hr{0&oTRChP}23WCbV7Ru9#glu(#hvfGz7$^o}lxS^C4uth98tw$-`0^1yap
zTn)Z@h8L}_`vDaUMePh#0Rn2uk>Kp~Hhml2@;h%qdiroMu#|WC-XHh+pTE{4ddcJl
zjEv$=&d==oboaA+2P2k{$&I;`y>_jRczjbZ>)w6j30T!hI>W}sM#I2h{O)Gzi?g^U
zDaS>=_}FHa<mr9k5Cps+h+}D@Rxd#a)VFPq(sZBy81mtRory<lYpcBc^WGOv=`sz)
zy>b+gun=MW1b?4%W9^WVQNIBs`gc5^_Y|f6_2HKX_swK7>rgK;-v$nfI%W@T`#P7Y
zyjMGLy<w9=n`v70bfHw@+u{UME`{73T7#e`71Ay)r2xd=8vA^=Q%9}mZn5?Hr~S1C
zZaBRAu*qR2X0Y^`q;D0c0aZ%0mDoFV&B2FEH^T7iJS@vRU9T6AHjJ)vMA1^+ahi7c
zq$HD$OQ{6Frld`hrM`Lx{NEcRT(Yyb1&ZVG+FOa;Rs7LP)8I@nrjJ>{G6@0?m)N&b
zm|+X}=Pvxq(*c_TY+krn?YW5(xS|z7q~_3KYap|yuTq?S{k{DbOf&IK3Wla>0@696
zS&G5M$##V@7lTUp%FeQ)XGDipl8=5OHv?s1Xynf(ktMBFj^9lbirM~z+Pui+?%xXt
zjKZbxQQ*)tMX2<E?|rei@7B}G&&0@=y?$z5FGJb2nv#JqOtQeV1aQQD43skD7}B<C
z@3OHU)yxbN%PYNCD1W)c6#F}4K+2W82kttjW!t()RIpbkEk-&t+-wJ<k^2iXdV}!d
z@`vWrUDuVv0VH_Gk`)DTf~+9890iYZ3|w5a;d)u4V><*}w_T5rJie0T+kh7mLR9ck
z48fwnd`?njyaHqjf`%uiKhMc;xYc$XzCv%Lny;-ToHAEuWA)X6{)@|Sb5FDwdqMVK
zjk&q!Li#HTP5xC{Pba$on5g*k>7W*l2Qd2p(*W-ZX*08oBdNAM-;q26ygFvvii5R`
zA5Ryzrf-6eQ{A!M?`=0W%dDS9Q9=yA26BA3e6#f9IFnqV62=PCPdl8GlS4Q^=QXvu
zU0q7GgeI~r*IL|vxyL=tqR*77_ZGJ#ev}kAD8eQBoEk>~bzk6Wi9M5kT4|}q=4|Jn
zisbQdKE>(~0HAIQDZhXJzSAbS?cAsJqXJ0AT2|@1^TG^>I`lo>MIL-`>hRv7vxQm)
z<>a`8H_M$2zP+t#`Ejvw)q@YYmqn#Ze0=xK#gazFSW=g-nwl~(z>Jf(tS?c*mvZ}N
zNSCozV?flX^Ef~&+vT?!MCbT#wa9;Ynza~$elGufjmsdtXduJ;mTgy`bOaNzB|}X1
z>n3u6qc9m=L|)^x&g8x+D_!q{QObPdOO%&9fNb<kY4nsg6rJLvg76q8+!4#h<rl%R
zCW?-3OCH4GXOwZE!+14jK0QJ!MmcFPM}Z0;09M_};-l4;5%7~D14+BdmEr=$q`bo8
zGI3tsfo%iZuyQzD3!jv}=eX9Z%&VK8u8l`kTH62S=g$Moc^|?>7p;DL4>;j*Ib82<
zZ~wB_t#55@-S+e68uZTMAB!g0HgHk{j&AZjJ|`-1_0lTnO?63IR;6Zyi<MlS29{-Q
zb;dltu1IyTY(jp2$44W;r5&%8T8Og&aaB4)YdC;|(@-;4va=QY(`Rz`T9Qza!-Lg0
z^;98k3Xv!QG_h|rx6I2sFFJLr3@Qh!=8QaaD=WuxlD=L30-oE|K-sRs*au5ln)l1|
z_*|4vt_%(hWQRE76^!fVU@T{<^V_fA`wU)ww|4wS(3USqXQr`_+J3~KptiD%T7*&X
zyIi;94XOGBTx!P(Do@}7QCbrhh-i9Pkri6H;AM5Qb;9=_&5QZYUA;U$4^mr~H?c?~
zOfB<jZhn48j{eD)ecLTOs({5IvHWSlivjJ?J{den;X=Ra$F!*O!k{FdATAfbyvI|u
z%nGIG1TdT`d|_NKy~}d-+n)ihBS7&k9b7uM%mN=cQryqW9`rKOn6KLl9@|i?&PeJy
zdXoRk^xhP4s+2jnfZi)zXHz@+YLRBQQW#xq_N2k*?Au@9WI@_LgE_u`msJSq*%BgI
zn3)NrkNFwE+EJBL`<eW%y*ce=O4_%iv@|*;W%?hqqOGyB4-JIxKPP|6f|~Ggc>c-I
zKsTE&TxFnWdYZq+s73*iJj%mf(3`<ZVsiu|iZD%blnZg7@9*07F*i4tDo?8BkM$e*
z=INwnuqMN67{GC5I`@i&VmHDlw`@||YC4=9s6N9q%t`lo>q`Blcu#S=@k0|%+zDXB
z@gth9v$A5*?bB;LBI>sAwVk^f7pKwDB}GN5n{x<QiqBzh&S8KpOmk;toU5!?i+E;k
z4pXqV85J`pqVesU5>WnNhl7J{R+DuF#g!cZaDxB20Wt&t)uLHhw)3M~S8XcM8edaO
z(-w1ALR9*sGQyW??DK?DS*;L44&<YswU-i=n_7zI%&r#AA^cQj=IGy?Oj)RG4YsVR
zjAwN`sd-h4^>{xcCzleL+8+_2*$sOE7fo=}vRyz@=#~z73cn@PshHmQs~r-g*6@);
z``x>DA4ND#U>F9;)NTY1s851RLe005eVjh1$U>oV$S!99EE&u)pe>k2<c9cMn6i<(
zv^*{(Av1S9-|N>*b)LL{y>gRZ_{u_W)$(VJn2&*$F}K(_?#ZY7z{-~r9*PSh>T?X-
zF4HHH7sd$<jsMQe%>|Sgw@uRT0B~TuWqnWel28|WPi_J1@jYPw<YQgQ2<UMLjpota
z&?`VJ66E7JWRr+KdT%bJzl%<6iI|FtCU0_#x7Ddg8uH`o*Sq2ZwpsEDG(K#-NAK?O
zn=}gejo&gEh~KN+&AG#;@p5FXL<T4}#m-Ix+yY8KqGxAg@ADgbyKjOLgvPb}_^~j0
zvP1Kur8?+t(2Y+sIb<;7xDfw8RRVi`fKdt7U5q^+_Nx+HJ7~HHbqt&#wYd7DVsw;I
z%OQ7QxtnSj*|>P9#Ms<~%(77}yq%|ce@@PLrB6+KTlo_+4Y}PqltT@O`FzwydtFXX
z?Iuy}RkH!@y5&Z*Fd8j4xI`ih*e>2+wy$5mYUpdF^Q{i2%YR_HVv5g#=~~ZmK&~f?
z;CVVnVOYGjvlOx2;U$9)(8Ngb*Y%lo)^3Z#x0qQgSaRHLkmHP_KjaqQ;)`;KvP%yR
z4(8@qi~jf#bNzXRKaXyty)~f2=<3F9-#FU^%>81MrmK4IK2;W%lte||8hfsrCO9!Q
z0tvn12giZ?5y$J=!?j-J$&lF;<pk@2`QH5>JXd$i8ioo_<Uk!Ms~S7|G%Pu$E#W?8
zR4Y+K`Fqms5{Eq!orW#6=_OASImi=xcG)>O2fmh5{mg%PB;dGaoFr&wRl)Z%o&il1
z9ee+e!0rvuy(9l)5jjPFJ^MJ!cTAl>s-H6{KIc^=ee{!1$7+JwXTv_z=fJxz*S4T+
zb6y~adK3u(qKFtkU-RWWw{&cH*`+;QUd1af(-~g8!$b!&_NP#+Z;UUXs9Je{6ir!N
z*Tc}9wXlKi3cjB}Bvo`1W;{wiz^7c2B@CUcsm|5tpZ&ehUpEI@NhSCCK8pKg=~V7U
zic8GT#r((s2tgK7>Ia}r0N)xtEf8C&XgZ$x{+>MQ%NO#2SYTySo6Q^v0@6-HUO?Yu
zZ^K*{?vewUbHPj)AoZQ?OI-U9vmL$BTnWqeiQu6TQEX{{{GdgJR`Nli$Y`xI)ZWwD
zdLf?o^;ZCqKT<CL`c=AHa#JNLI(oD%mMo}MXq*=INTTzDBVJ0y{Xg-<o*)4DSv7s=
z9{5{c$JN~bn^gPD0jFTdAY?Eh&jsbY$DUX0UOd_4s8ru*O5V?(YUzSezW?2mhpljs
zd1r3X_;pz3C!-$8$8O;&aE<L`ktezpSu2w$uj+?i?qc^D_#$u5?M<$E+1?wTAYE__
zoS(Ns`Gt5We885MZ$OG`LEb@KG_g|}(4tbUosL!{K1N=Dv=~@-e+v34c&*yaM4_L>
zVDtF>vBxRRZU?daM;oDk4Gs;BrsOWGU#2G_hmjFH8707paDJaN=&tx1;c&93e4wt*
z<Loe@T{q@?vWzu=qAEcHLlg0ICKoXH3_DEn%LHHV2h{Z5e5I`s%aldQRRjo>{?ru?
ztJ%o4D7yoTN=X(e-pRW64=;cWGc#Bcnlg+)bO~>A7OERmZty{hUj^1C0+fJ>SjhmW
zSfk~jl(zQvfp4a)nORw$%Pj^M$rl~hrXEvJQL>A&$mLk)*i1^4v`P`UEiX+XR6IO9
z;8n}0@*Uym!$WV1-*fGulc6Hw_nM~l#c`TJ%hADhPHL(Yofue6S2y0s8G7@NdIb6|
zAhA{C|F!vlZ{&a4R|0d~xd&m{^K8K*M;@b^WU;|5mYH%3Ws+GOEbQJS^W|HMk9G`m
zl8;qB%{XMKDE3=JUU5d9?4snAAYJ>Fhi81G%W{JYd@CbRT2!BjCClN{s;7t%$oGX^
zTm?ug-|!fMA2Bn>#W6HF;WBY+qLJblWET&+o&5V-=W{+1tC?A+cGE`)-_OUM;Bk|n
zwl?{8Yz@U0vwm7pshpl`HDVpC{6Qlo^uCu{a@(xSdo_9KjP@cNHBzaw)eWiMIAZ}Y
z2DMF-8at~*2}2|1{)zZijsa$IU4y=RQT+n)G6&6`(`&nR)~k7|dG^Z=qnhRkZ>^CX
zdja$>l%03VzIf&V*bTltZeVfPN_b=Ax3*EsfRJsexn-H_+@O`4VH9dRXeX?nQ2f<E
ziEUH-o~T1VvIWCoF8wSN+|At!=Dzbnv;Z`ol2A2PuqQdeJ``jCJ2+Tqogm#v9B3L<
z^4U}_iH1!JHnVQ8NjRuDKU_WrK?3c4Z$(wEm`{H(NAYwz?|_r;M@SU`!Xl6*QdEgK
z2+G#4Vhqjn2?Fx|ks6xGRqhM%AnPF9h$SbweyB<bydTgAwl>;%Mo{y^Y3Z;O{+yTg
zLAEoN$9ttABy`0}g$JLWF7~x^?}!e*#V4_9{q-Y6;hnbAtIt8nK2@JT>-$;=rCnk;
z0R;|0uu*O8Nxl{lp`imfk-_<CGIaO*cb0>(GG}NsWGjt?R(MK~v9}a__@1@(igRr0
zvzEM!3>}s3L~E}cnc#5I)x%Bfeof`J6yc_)u5MMcp=XZxR%%t1Zc3qUCJ)k^iF~$a
zcQG+4ldt=cLXxPPt7qQpipCx^)V3EzT<W#s0Clnm9j|6cbAB48CM~^tc(Vi3oc3q(
zB?;(9^;+k~wp1z>m(ywm+;=vej?4|m5onSD@D9bY%S5Y^BrlIDB+yf=GEkuE_pv^O
z_K<FJ+gHhQ?O<1>l+6N=-ANjC*fHjDyFF`*+&ot7VdSS*1(5dZ<p6xTj)PA{49{+R
zbxRyM_IO@s*usq3x+C0aJYHCbB^#(^=(WI|b^VpZa$UL;9~De$ns`AvC#ywkCr^fw
z;Dy!Drx^76<-xp!P4qio9*&`&>0isiYcUY@tekG$NvjdMS6ic{;c$su9B8sVy4*8h
zxWTNCUdQ|4Y5ruq|1n+RK*h7p#Kc(_)k*aWjs0KxT-4wgrro(oo<a51YL=`Dj@6uH
zhlSozG?QX|s1Od@QOA5WIm!>_jJ>=W!Nb|t#s$W#EKo<1=h=2YcM%hE18e0M_Kb2x
z>6VoB*~dz$L*hK@9&n9k{(L7%r%{(6bEH%T)<U?Cdz*Y!L6bF~?43lq3slbkmNjrz
zZb}9{B2lqjS*-;P-b=o$rkG$cw$s67;}j9=G|@cn?yZFa=g(PRKS~nA0$JJ5Sa{2}
zF6MZxiS%Lc{Z4ELU-vLuxA=}e-Rti+;Dur?^Qn=Mx5_(M)~o=+4uAV)mT)x7Zmuh7
z@SEw=!C(o2GKs8JAU&dzEs_!v@`i_X%+1WQ)uGC8SK30UP@!8pM5cgreR9PgEnzE1
z52SZe@!dCV9MnE?6$`U^OTlADdJjfOzDsVb$!sqIz;J(g)nTW+vItf_RUm{tissrD
zArYO?xK8~@=f#WT;Fh@N4JT*p5Dn<Qq-5c9NpgPPeShM?dt#`}#66#*iC;hVw^7%l
zhwAe;1KuOqxMAoR|G>aN&+P@M9aiZ=z}|s>b$tMaRYmL7tIr`JAzS-39&OG9hie0s
zgf{cz)l3B6ALuuPHU#j;PKvl!si~`jX9f|j)P<Sv)d>De8OBK*WH?pgJJm<@xx!>X
zAW--UN<wFaH+fE?p{u0s$8OEXq4`gPt&T7|3nA~;psuJ~K1|Zh+M?27=yRSu1+R8A
zK1+?s@A0ATngl<6FS*YSx5u|+h#}OD9F!y@j(D2`Pn|!$a&st?I{`<SOFK^;H{n+g
zw@a31JmZVLWwlgqHZCGDn3L4lrz>8ap~?mj6$i88ey{$?d<FeV2eS~MXiK*4bg=a#
z<c08?o8_{I4v1}%RzpOuovaun4YF~`3jo0Mc#koA=Dp{AD*^q6fNT09wdmIT@Xo!P
zZ+bqXiL|&n(0h`G=>34cW~`CXi>zSETe|i`S}U;E%ltM{{m(^?0~m!#UKzXQCnx@{
z5$Zfx8R~1B>a;X&{%g+hnhJI$MLWM-!tMI-nnqm?oK(9)+5|YW?$!Lp)2@k_UxPDM
zwy;%e1(uJ$C3nioiyuWkX0*feNB0yG%I$8ZoGcBxcf>xRe&k-HF5>LCF&!Z}gwNnT
zwV`3F-a{KeE9q0?xiydec66OaaDLovvJ8)}qS|w3rQp-Or=$Lq9fOJMo=Jb<0qxtR
z)96%f63|D3NXH68+JdAI37|^N*&YvP*v5vF_*OaovQnunQn`Fgv`j=P$bOto%yqu3
z^290LNKrB0lL7T~WJF}q=lhNAwI_K5vj<CjDxFUIbq<#z!n?Y(?CcV^mqs(~QFU%M
zD@derY2aNE!vsNxfv<rel+nY-*IMXN+Bpjg@G1Yd_}jMAZj&N|A~U7^{JW9r%Y`CA
z9PZS<TICK^uf}-n8$Ohz_)f6tFflPb7I$)r{M2iRzrE~C=*f#FU?FJJ4@VP)L*fL(
zg*To(k(0G)kLJqFw<93WSw-b?&HN{{@gJ$003W~|jV2Uvm;VS{PL(PkyZ4B4SkVg}
zqo{~<Gd7<VJ|FC<8)C?wxcipCPmafzR|N&RR=(Q;wieBF3(XvX>>Fe{cnD6ajqFQ{
zKTH?cA%&5C-pTpI$VOX?CSuWPxWdV4pq+(EE=dmW6_#yyuvTwS?_Y?~V8}OK6d-YO
z^zN3gj?nKnv`i)gdD&!&MBaGUE??m<l6Z`1Au7GsEuh(~9$P<J5LM+9jlpNT-AECN
zS~gX48R>D42&fAp5Ek6}8K7|;Gq-240wR!xFlb*_8t63DZ(@q?Ur9~W5q~YyAKc*J
znJdLn&QF`YZhlfLDj*|XEh_nB+cA(s(Vf$X##MmUyF}Ds(<2F@7hh#o;k#b|6?e#l
zs9e0GwWxO0&+!I9kPPBDh$42iVRNn<Ia+30%iS{Hn=WAXlPtz51+pDS$*D6{R>#H*
zUerKceCFF?n?p{-^yW?7;f4YPJE(o}lQ24f+~wDM)~gv@zBGhE2l;orDuOsV+<(2E
znVlJlncLuKUWhdfUw5mt!}{!^@oV`Ho_NuWh=@>29=8D?xGO5gXDe;UXFafm&2?$`
z`FO-5wWkb_(kk#OjDY8L7DqG>a#53Gc{#~v_N8c!uP=1lZFM4Z@5HB*p1((gLjhq|
zDpy#y^?7?4Wt(StNytY4P5tA$@QHM8MTHIzV%J|@LBW3JCOJ9y=r`MT-53CRE3eTA
z>JzT7kCvL3h`O!h!wjmeJL7pumzqeI!CrLEp>m;*x^ub#WNh8V!GrRNF@`1AdM+Fi
zw+tUIaqF7^T3TDFy04~&#=McUp(ad*aUe1Q^umr4@%`Fd_ig7t*-adQ?uj4Wx$U7h
zQkc^iwO#9GX7=2E`-^hnu&U(CR>G(ETz#$;{QJ|#HU|6U`YBN7*3>IUljg0_i$}|4
zcRP(<?yRC9m9r;CK~-*!zE_bkuDaEBKZ7`8p^xL6ZmMvx4@jPv9zEaaFSIR0A1#uM
z6prY^Fv*TSo?EHOuRV81uQ9XA?w1Na$rOk`wn&@M*Zi%qI+E~kP*SXGd$btT#*cl8
zc}#{(?o}2FfBsE8t~j?%V7?xD@mPNt2xw^PMU~(~rTzwbSkFMi-jBR?Fj61mmHn;S
z+UvN~CDVPFuaodGFT{f=$jYHQ+5e$pN(9gSAr21t!;x2T(H4sz^FL61iHi*3j)AiQ
zX0Z)|6ryO5)m!VGpc}1KuCo4<$r`eZv_OXIDctj^vhHU=?Pxl8CX1t#y@p;|=IE6>
z04T_1;nx=b#>w#xVt?u_>5_R#Nr`|}4<j=(Gn<f*wn8-LClUUazDL04+Mb>=L@{ie
z0AN5(3gPo~GTHTq?^SmojeHBbB~QkVeJm`pxQrWW=DOXROc1>IS4d){7%x%!GwC$A
z<26BsLhtD}Q5br!;~i~HM{E~}c<(My3wpbkz!!6)IIt653QP9aBxW>{oV!FiZTQAG
z3io~y7wEtT=&7fy>sa3PULi^pHOubnOZ4S_0LE4D4)v0yK^0-NY|=u54-%FXFJu{B
zyYwT*Fza4~Xxlc{@A3h5<HPlfceFzp3iI<}4#8!vozz@MYY6yG$F4)=a{0DXSQEv~
zn>YE_g^<-i<tO5KbdbNXiSd{Ctfsb=fB`w8Qbvpz3UwS-y94gUPNwsdXggA|o3INc
z@9-4X$R}015bkg_AO11D7U7Vw#ebyRfBmmBWSk^Wfr+}yb=<e}c1KH2Z1MY*ad1@G
zg$o?Zfu?bl?F!goRF~yoK?mPMY0pC;YwF?tJrln$3=9xg5>Da@<E!quN*I(I#OA+l
zl0M0|dj`aBQ_!sHo64*X;cOM5n3sl+T8iGzMc=Y+{(LE>3R3b)0F$*Xfya5cn0AC~
zTVxin-BTBMZ8nZSZV)S@ewpD^Ergd-JU|m+gCBFL3@JSZp^4fNIX$a}E&_M>7$5gH
zd(@efX;t{&LH783lYjoMsMB?Mh+Q08caRWN?f4GR;SHROk~i8Hljj%Q<1VkqTn{S=
zWQlbGlpdS?geUCx-MBDp7aB^DV`KqP*35+rJ7hv!wQE>Q_7_a!qmDAMLb+~EwxO;=
zo0z?%5g|iT!!N%!_E*Mi!YU^P23Z8S)ev{$GCo}nEqD9!lqJJP2NA@Y5HJ2}sAV01
z&eD1CDj$c?+VZ^DI(|@bt7dVqU2)KM*tZBTppAFr{QMiLZ0iTA6f(!7o;Yjm++8p<
zYcQz0t`w*R%IO*S@Y$fvJ%M5M9+?Bqd4TN2hKsEf`HH;$B|G!`cSX@Es$2!2eB}tA
z#T=;3)_gBq<`Xu?g9zIZ#|NI8gNl*f=9P-kcY1$xWZoV<a_M#l1r-$(1wxEdc1*cL
zwnr>=i;Vq_GW8rPe{2WX7`4zi90ct#ItpKj2P_7h4MfdsxE=*HtjJ~IsqVL$mDH-r
z4)i|I`vI50=Mi(A{mo&MBd7|;j@xlE$NEadk&%(}c|3@Ltkt@*Kw6LLt0eUK{Xy5j
z?C^CIsLZ`rY#ZrNGow}h_$n690?6x57(_QIZFXAIqQ3w;2S*t|_-1Bia!WI0Ss0u8
zu}#~{p3_+55=iA}e0f_^h(!Cg@a`=@7ksCn9wx&i7baoUvb8V`Z!i9Qv$kZOt_(D3
zxXi~l2<`p`7ZC;GZ!&Mp1*1`p?ObIzKAyj~z0+*yloKwxZv`6rvjtFU80XgzRA`m`
z<3Yk59BCb#?)9?feFT-&cm!-t;_`#|>F{@h&O*?uUvrA=r&qK;lv)+|qABS<r@J6E
zmtCBc$L}0ABj@yTU635XrHG%{j&Bq_y{ydhJldX;C$^adL!9IQn4Og})zFCSw4Yyf
z&8uj`7FDwjn3I}~kp7zFgGzy5PQGN54+0uWu`9W1N(t(2j?;DPcSJ$PGR1Q0X@qAA
zFqmNrfZNv*rZF>E2P&GJOwvK|JH=I1qnLh?0{$@#0KJd_=w-ve|LVTW``#~KP$MK+
zURApH^c!gFLEiNfq220Ivbx?G6Nqx|{IAEJ$46@ACfD4;Y@shMQ%e&qwu2^K7PRth
z8j#GmDMSp>^iwCRtqcc?Ih*c7U$ZTalsPa6)hS9=Z|0VnYnP!!;x|@C!Ir<+I2)3J
z?R~qs`uqoBLWU}7mo4(OmEFV#ezVmygq-9)71bH(QZ_%sLKQwuK46<5Jxi5oSE|2$
zS^Ij8zLg+NCL$=kh-(R8p4l@4RN!u`;}vIs>CF%6jWg68u2iq`du`i!ZMuzvW4N9*
z=o3?M53r_qzdCR(G^};$6hKzwSBTWR?~J?U)zpk_PgJ~~HY2e=5S<V#ii*8^iR<o^
zO1(5M9>?uSpk*FpThRyu=;@eqx9BqB0ae%_;A34yCXba`f0^w(icufOfMPSk>BRO2
z4fP7lE`|FH!<8m|5t=x2LI-jMMt*Q2ZJFqibyN^>vLjirzod>r&h8LX8H|yI{DvL3
za75d#PSnE70c<|>#FS@S-oc;BiIiSrrQ!1adP_<v1hw<9fefpyjwVW$CWnJiSweFN
z2asvsZ?+H>#Vt|FmP-K4HmGtPtS}1S(K%`LJ(P)x0!x~P)vZZm7r~(_kQcZANETHA
z6vGs$9r5javiRYYEPkGw@KE*09O|||c-XcT@T}G?VpGJ(Xt6x7SV+<!wOjCj!QsXo
zCIe6TuR#n9&<O)fSD<fsiClXfHxiQ)ot-u0`=deJ6uXN}V+g+i#5VxBY2OT&rpr&$
z=ZH-iV|6!oVB25M+)d!%+n7RJ`^Z@JGmK{BW1<NOG~yUT4|V!*JoeJyAvH;}itpyf
zXdi=Ip!t;8c75><^ria4<w7h13>{1xZ9Br0(}5LtZtE5K0}}tr44XdMkC3g(dWgw>
zSaV?@Fv=KDohi1FqQl)GQ8QIjua=<{v0L|O*{amy)M4>gH-m$U-?fukXf5hONY*8;
z_>yF;CW`nCM<ENhWlv&xN2;GwK(M~<O6G)I*S^nL(EHMj-UaPK6*;BzbG#y=Go<%J
zd8SC&Ob$eS`~7nz{0M%_u$&KoA^cRoQ|CYv?M!$T0?r-#LAh|+9CQ;VSz~+`5Ow;J
z+$OAjM*?_V76)3lvGD@7TcftuRdVYVvJxVrqGtN!o;(Ru{OMoW@g=i!66{R}5?;PD
z>tBziTw^w78uq6M)x`D20De4{l;SmeXL(|rESd_i+S9NoY01lnsGtU~TzCX@$3jA=
z{g3ytV#+|k`4~?^!$*zL{{ENjM=M^~YWc3*GBdu9Yhf<#Ztl#wO&F$jCJ62^M@C1(
zY+==1nJa+jy=<kO=QK;t(ns!9KUT-Z=XBwIlqh&*Ne$8@gfVNpvB=XRn6KRYK%a>f
z3gxbtzZ;=xDY0H5zWd%0FR$^BMs5Ns9RD+Cj>A8f|M3zg@-3&f<>sd>aTmIB(@;^E
zc!;j|-q`Pk(EcjFHmlk*en;JRbX}tbxtZ>_Bz9}GY6I<UKY{Tc64PlOFHsLQtR3Gw
zv@Z(njCmbk_D{Rg5G(UO2C?ZKR|wFGYi;lQ7h0ID=3lS3IT0v2+Eu*1?{6v=KBG9*
zG+Hp@X=(m`Xf;>WxryS~<z*GO1Xr)?a32bNje{(iWZ%+U7E{noll;|sbTOVXGsY)j
zR**OKwNV2lY;82;p?FPdPvGw}U1I#pccIn%p{Rc61kUNM0c7P>832Zpy*))BOScdB
zV|>-qCTn%3O5Q^~iH~E^x1{?j&{BbbiNOF?JxlL&XXhTdnn1o$eoI6U)N`dyBmq%D
z5m}wZ1qPBbs7tBO8j{Wh(aQH$W_v3oe5N4l0oV!XK2#m7R4;2Pi(@tDJbr(okC_V-
znkZtBO5`>14;RT=S?B^L7WyueKAO^4t(Xp1PmzEOq(3Fi%+giBYzR&`jtO-T`ZaMG
z1Ce+8Ek&sM-;sA4gn}y-)*OEBhc5vdMAcSbdt~AmSr>AkPN0DZRP(@S5;ShZLrFyg
zZ55iZstjv7swDVv+|k|L9>Y}vI0%hu54L(e(!0wcdy5J@){_#G{?r&0pvDb`m5;pw
zAp`E!?lpTakA6#k&Q2b0CQXhh%xa{7r9659e204(@@?Ol%cyE#+f!dZk!8}Qq`Q6k
zHq23Rb%Gjvj7N_Gd~cS9?0;$%27Cgtok?k|BHo|UCGKa8R#$?K&~H@GM4fjk2(@*N
zjho)~C-iIS<pI8G3~cwOB!h;-d(6wBAv#Ti)jRJ$>24r<NVy0Bv)?AarSrHLP`&eQ
z+()5NVd&c-xQ4o?YnZ0I|4wN<&?dK@{aht8hqLxneVQQcz7;)Wv)M(2?amSF0KuA>
zu1_?3_qMj~Z$^QGxj8rzQutqCv!bb~a^k-91FeV1a;DLV9RbJsMU#`P(K-{^Vi?`0
zDOd00=4qXl{)YVz%E}rsE_2X8F;_Jm-E_dDh5sUU2gLB@YkN?0btr3OBgLbF4?<tY
zJp{PXv{%2rc9$_t1Om<7W-d4Fz0y_s-G>e;kb!PCKr}}Dd_S1|WtzXVa83$ef#E(8
z6IswHF8ws5r{m{w32Pc5K8v)`cj<jX&2ROwb|p(Gf#0%=)@#?_G(9dZj+)o_O}ON-
zJ1{ZhwbYGrKcc=LMJ84MBsJ$vpz(Dr-Y<Z6)lN8=<MtdLs5Y|@aolD-`PW~6&DXq0
zA1DVQSR`M}dNq7?qs-0zxo0`-+;u0d0h-td?R{JSl))#vlLqmHFl)Z|o*tFH%O~?Z
zsKq1eJWE(;hvJcEqX1m8+xJM|r~*>G+|BacxW3*m8Ws8;SJqREIY5m!XFEMKy|$NL
z=YsriJ>(O+Um}AKoRx)adhy7Z80g+fvLz2vqoVP;x<llMc35H9q)*<D4->CZL4&|#
zgRy1^&Q0}S+7k8#091t6UB;Q<|L`$R)=~iQX3x!BKT!Xoh?%dK>yD$HFN&ze6X;tX
z<_76kNXyCwd`(Zce;6}~Fw)!B)X@?>sE`%s@7+v$0=mB3Rsg4HZ7ZS_?x_$bhp!#X
zk=g+5Gmyc^WcLbLIx-7f3Ng^sWZt~eHLI@$va!T|Kwc(S<8-44K@&}owCg1wcH@Z$
ziU$Dcr;rjm1L&WPVI@SRHhEYtzw$kI>YYM{PGos?ZE#|2YG8lF2c*E<_q-1&JH#N<
z-;gWPz*G&;M6L25<{18F8f?)Ki>AW<tvx}jSn|>75fXiXA|(#@n2obs%rEKsED|}g
zyCG<ZxGE2L4jnnBxQ&@&-%@n^g=@U7post{f~WPi-SY7Im-dO))`gsOFWQ2xB+)$e
zxh}X@rHBi{t()F{vd(};$Y)NCmHnZ-(74kFHMM*|i5-%Ff1s=@P@)kU&9Ya7j(LAL
za=SFa8O^Di0Wcn84h!j9K)U#`JvYMu$>6Eeu|IGIT2ipe6;Y5<CFG>~I?dL~uP56(
zim8o1d(#KgWbk7)EJ!T4u`!ZpA`6~Qj~R0>nlBDD&)3&s7k#mKf<8M*8hUvHrTk^x
z9g&2&f9W?AW@i1V^(sYki%~!AI=84g&O-l3W?}W(&pC@u!=nt#S8T4?Wj>u=D`{2h
zbMy5JT!mZK^HxR=`wcq(Jnl+z49uE=c?%mQ?08DHEOttY2udgQf3=_MbDPo5EA892
z>{dsKi~X1%MD^Ez>9$sb^#Rncc!Pq1nOuYSFx-INuM<5>e3f}5S$DF;wzMkaX`Xg@
zmFiU$ZJ=ExxSTr>O{WRp4yL05<zWiCYRs7dTCJ*FZUwkWHml}s;gPl~4q=KqO|Z9v
z!1BrNnG4WkxT+-;*xuiGi0{$y<w1h;o|AetL@|V$W^peyXj<5xOW$O(%f>)N92scS
z@#cyWO^lsak|SQu>v#2NBDQR!+bXtG7@?LXffazT*RJ{G7`}Y*YR^>I8c1h%(E9@~
z+pnvV`SAin9WsdU#EC{C68cBkPw73r8_v{hcB$*emmv<p%cGjhsOpo8`875AvkNmQ
zxP5=nbs7y-)v4097J9FISk)qXoD`c;GYyMgpfw{I|E2JY#0~WM#yx)rUvpJPhAhq#
z8lIwmnbLcto<%3EDogjpr%xfF?*?*Yf~<zu&~^O1ENw9Ty*P=N-x?*5FXoI=O+9zu
z{5w?15UssEwi=G!e|P~r;KfNL#ar#`+M~xc4&%uEsoI?-`!U`bIp)9IkHrqC@+6Te
zl1CY#r7qy5zL&LLJKqMu*Ff)pn)f@w!HMRhSsS+zT+zt8u5Dtj0CALb<OMM?NlS+8
zvlUL~WM}t;ww##oxHUYXY7OwLs0Ii$_P6A*gD>Xrf$2brB~K#-=Q1rI_5PQ<M8L>+
z16I%duQJeo#3mpJ;VRzZWlF`O#tnQvJzrIO<12NEGTXsT0K7Why3q!9@TrnYvEN=c
z`Tgle-}=+$`TXf$1Cp#-Nql$h<}h@H{=amWy9$S>64<c~F%-Ip{&ERLy|-S?i|ZJ5
znK-22_D5oE-UcETV|4#2JO5115k1w^DWOf>x!masV12=r+@9tXc7sbKF#6=LKo8Z{
z>C-<gn+wVG1^FHKlX`g`$B?RQR6U<C(9E@V)_;3pk)x}ENgcWsUV_IF`zCN!f5pMZ
zp#Q6ehHjp}6LKo3y1A@B`{KmqdyjxBM`X3;l3llM;>)M4Vn4}y_a)L(xYQw&1Wg13
z;Cd&Hu4Z<Qyix{_7eGz@REf2-84dvPM^Ct=4?N=_DHL{*M^xm6Z%yMtEu--oe}EL(
z8P=i(u-5FsN~v}Kk|v9CVs>I;;v3A$Sf%=E-2n{lFm3}nh}Ls>0W>j__5oD&hBOqI
zOORqQZqR2<c7N4li*x;R0haJiV;^q4V)t)D`3BRQ6Yo9%;?@1FWu%JA;q+>*D?txm
zAt{4TRkwYRb6|7B<=)<2>XW=Y@u1s-dfw$GZzl|Dekwa}q&84Lbje=E0NwuiOe&)y
z1QHW#$`AA`#~)HsP%OkjEk-6W<IspM8c5wTCdSD71wP5Zk>OWho`8C%ecb`|v%4GF
z&Qq5PaFw7{Z28d;{dZ%4ZD{y-&R)~253cO%=i@i|C0h=G8I>!qBFeuXPXM4TH#Qb%
zi8SstHIDr$<y~S2+$d5a*5?jOUATw<oRVuF3Pz%UzP+GH33bK6;9V|V+vUX7Pj`9&
zZ|`H7h!2`A8gsmOptr*wMY;?=nrR*!@?}8hdIWo>udsO8iq21xRyyK2e{6izx>w2k
zB>vm?z31KGqv~>5HotzFQA7<{t>>z7>A(Dnt!C%XwoJ58vVI1AO%<*>86Nc}D9ir_
zbui!IapfaO5lj|PEx`?`vSHM*slNlB9eKU{M(@oxIc<@XqF`@d&~I|h*EOa(VYGfp
zXWYr8n5Da8N6ffEKGtvA{VkI|x{Siy)BSN8@pSA(LTYgFj@0{R3Nh%@Tm`vE1+V0e
zl*EA=7fOI_5+xQbF6Sf?w*G8&N=hgfw_4;^F8@|c>a9e-af_%|4d_iaZGhOfW`^Xs
z^fiafdK&+x140icp5hvmGd+d(ilU1AeGjJ@MoTOs3PyX<WCUym?xzf81IBlS816Ep
z$kA5+xWpaQBZK|krwp2pACFJk%SF%^Fv$c7W6jNLB(8@y5-^f!oz7hV>=m0Z2Tk$m
z^F2B6^Vwg2s&J5FgqU{O7MZ)x%=|;^xZz+`J+sNrYcu}T>7;-C(ki#-(@Drd0eS2D
zBi}Tj{gQ)g%J*Dwj!TJC`q;pFqL&5~Ytbl#Nn4om<Xf6@k2Y%=eycTO)GEzlA<*>f
z^w={8T(%=d2ZI5GZ5>O-2cEr+<;zF0WIt_BCP7QKdPWUbSYwUx`lF|3gz1eMDFp3D
zv!8$v_MpY@$4B7(JC>qhVmnihYabmv(UVHAtYYxU;I3VALZwXV70c4py|g^od{FCU
zJFrLPK4!z0;yxy^(o1ESZCD#_qW8x^ksb@&m>Hi!r|kL0xHEx}7I0Fv)Yc)-l=CM_
zBseQ?x#7or;;SueEV<~(`UAd=;x^qQFOSM(L$&O-(JZ|Rz~`wKE0b+xLIX3VWC1Yu
zo;f&}khX9ES%zHmS%=5C&S+r{5kqwGE;Wkdqzp^Hw&Dq&^5XwkrJZ!VUk8}uOjjnR
z;VEu_X!25$0lssq(b%6-ab89pi6+qI#XtI+c8=?I#71T%8;CQ&Na2owEmXHKQ50a6
zO_v&4(h4u?O-&hc@Mdhr8wgy6O}{~X>bt@8sP({w$;+%YOrAu}YryGO7vmCeP}$V2
zsnXw!j#@;GM{z&tTB0e$FU%2>Z3&dpyLDQvx5G{Fw2dHT`+!he%>NHj&KI&ckh3`a
zEgi)?R_#`(RcKgH(k-F)`Zai`<JYfO<6f(^+Z);j;HdrWWeof{^bTLCX$uL;YsH^7
zKeU`{g=-dYErS0s5rjPeP1Zq1i#<x<_LEs(WdhmRxjz$LUFu0o7j;?6CZQ9(&%x0?
z<MngHyuH-!r3`@z#On&Duy3&vK`%#%rC1=XaP%`pMGZ3-oI}dVOF`J}_cJ=wsxWj%
z@j{=ZWoIcqS*%chUtiQX-_z&MTSZ;6r6#?P%GB#krg{BANZ)kk)jC@c@(L$yQc^*(
zhzL73+aS=)EZu~rB<^SPEZy##QmF9Hk(`@}F*}}k;X4>s4ZV5uSCkj8HqDUlG=CN$
zd7-+E&G_mA0_~~ltAAt*|1Y+2fNn$&V8;XjugA3EBu3>R58OJb-|dM+q}(D;i&O6#
zfa<wO;a6GMMmg+R*0tq{vvPKvAg+N|rw-nZT^8-Rz)uPE#!p_V=bm`AZq8b@%`Q#f
z#P)o5@%nVuxT#`&f;7@5Rp~7-MU5a_uRX0eb!HBK%zxdTc&WCsO$0APf-J4h@6^d>
zF~_Q@Yk;V3HlJ^7AcR95wFEqKa|Q($+dahQK_tPG0!XZseEF7DXC2odB{zCy<5q{G
zomQw}4OeGo2()QUMMb{<`3P8rt^nbE-GLX&UB{y$wvns9f3zyToHXm$Rr(fa;gC%6
zHc)RuGrbaRQ#&E{g*jz4r$iVXzyE5`3vj43kFD-kZorR^yBhi{43pw}&0?QUAA67c
z9)}}sYQOEw+F1IOslPVeZ7vNu2p@#s50<JpGv{^(Gx+FKR)TkGfV5}@v{<;uSZEs}
z^L$53MPl7&qO^0pc2<<l%k5EFBPEuoHggM$MInT>yAyV6q2HWjJf4G%?fDlLCAEX?
z<)lU5lcOC^fC?=Y8hEe&5Z(LzC8<s44ya;@Y8GfK*Af3c?6+I@>bihpg+Jj-EAQ(x
z68bD=etF8N`5Cex9&Z$-mNE9B2|hH%BTHF${jYLO*OjrfKu|3+dFj;hqAN~&DQ>5@
zflgc$0j(fPF>{U?S);dk9aC|3zN6J!Z<R$fp~<fC1tEoKqO3y{s4fR`Kz)hw5mtQm
zmjX`fIY0pe^Lo~&V=Dipa;GW-FV1oO^JK#*$t~ak>N+O>A}$73hA|cRn_EX0k$inw
z9cSK%UCKMZ^BAHQ89pR-w<FyK?(yk5pODd8n#phjO^EP!A-M`=v1`K@AxG)Het6vz
zkvYde07MBQ3+YD-feO83gxH+xYHQ2JK(kBbv?WT7B#*px5MG|8l!uvLYL~L;G^ux<
zHKhgBz5M36w?ntI%5#vVsGcG|kCa<R3Mli8CtK&~85k^YzmKWoU*ghlC<RZB-R06*
z_N*{dRnAYYNL#UvS>aX@Qgp+gDWKmLI@+a%{bQ!0oebZiWwG^n*Ypm*HaXFHeZVd7
zo(CzvxxS8WzZuzE3TLCCqPqNQ*90Jgj~-*w_x4@gGTT31vR0d{fI_CM>9JTv0@>-Z
z*Hl)<Z7G91hQ2j-Th(;r)NQS|2YY-TP>%`?VVpchwe#q$D|p=P1AzJYINab6*i68L
zU=p&Ebd;HxNQ)x>0W`?LOW#^XjZS`j;Mv;86p9tR^O$_(SCgInOb>3?>vtJ{Y1M6I
zY=knEj7HB5F<kLF9cX$#f$p;=xqL1tlnExW2H1`=cKX*Zmlis=pNEqv>p>$!CZYt4
z#;0R)0USE|MRGp~bc$Bs;C4#L`j15x8A?Eo7z6;M%i_m0`RC8Ai`M~%F4xKYJ^SIJ
z3H#VILOE(tyI8=Fgk;uf;I~`!1$=M1wKkb3A5ly5g|Sa_Z1?WT03cBogDfbCYX8|W
zP{^updQd{>yg!#8x4nPHuqS*+%4}xj3l6u)%coa-et!~m`(7#k9DICd7w}+1L3PKY
zL)s}4EjAemjyd~&j|8Tld#!yBqzcn?RSw4ne*No@Ih2VTh|PCAj7{gh4TgXi=YY1n
zL#S;<=hkAFqO0+BPLkbK?4#R?U1506C$5J-kM;zpA%zE<YslnJ88mXN@MnnN>Rue1
zk$Ujpfgp4+fx~4p|1x`C4tAvAwG?0|D`1g)T~ArWdx|Y{i1~Su&I%#?rqBJ<8U6;L
z2ew%BH5MI{S*1An=h<HI=F`SkjjmD`5OgMf&bcU#A+glb)Xaeo?No|xThF8-M2vla
z&>D?1T7Ec|MN;b}8ks`Lkb~lue*p~*V)d>&@CZa*IBRGxRbdMd0N2rXar)XNR*6pa
zdSP8~T>Di6FdYS$3B#vh_Ri0IJC49ATyAc0Z}*xGeu#vPN201qbQ4@PZL!frNxn`s
zI92i6b&lD(r4ReXTokaWR@9d5(8kvEFTiBdT+m9T$ASG3O>~5C{=&&T$v=q9xX~*5
zfOYi!Y&(~x?zU2;;8L!}bgKWUxnxYnfeq7Q-+1G*@3Gww6~FCE$rXe_f0y}5oKyHg
zMqL3w|JzomGZVRAY)=INGh8-5s)%Zf8+9v!B{9l$r?Yc_?zCS?EY7<MSe!;gG5IA+
zPdaxdqByi|8vOAL_mqkn0|?0@N9P%*;r1xAM%uRa+F<E%$ENF|8$a(E>=%m~7QW2@
zm~lYn*~=-`e7$ZIO(i7l?FsV;X#;*u07Ix{+>MNl%!qVl1Hk8$AVGs3Da-FE;N3s$
z-0T|i)f$<ZP_OHj*`WRa&fjx0Y&<;O+s<AV!6b00z<2M0Qr^~LS62@J1Is7^lp-JU
zAu>KWt)oNH>*p7Qz1knA-2LFV0M(nk*uij)P9(*68vvlfhk0vTzix`}q#ei{`B8U%
z=lkMvl)WaL!Epae^YU-Xq4_?1Cru5sXVzgk)nAwpbaFSpkfkCHr}YLt;a2+VA13C$
zhiN38cS<C|G7t5c*xBVjeF78np7=6XtzsYf&ce>dAA_L6@oxerC4E(?k`psFuMXLB
zl7~B@$GxJAw5A7wMU0QOjYQc*(i~`UQ<6_HZ7y@W{9Z-=9!Gx<Bgqv%oRTz%hJ8@U
zt9}f;9x1zORA8xIUM$=^pMDFp*i&8o@lt<_El1ndn!mJB@NbQY7)LxKQR-8Jhd_Xd
z@DRlN@i$b{nih&7mM)K#RYdao0E2Vh(O`^ijw4?GF~s>psWCXGP^LHr#2%3TI{i57
zHrK9cP?edih=AL4{-uJ^MG5_;HnT@zUVB0m`{N(FE^=s%I&(S?_Q;MuVrfO%L;}3&
z^o2U6Jro>TR_nihDDwb@gKXc;dcVu?;z{3=T7_r+B9A;aT3Ky>eq?&6((dXO*A&g*
zz2*l8O~S_Xk;W-$GQp#Z<+jMK>8gW=6GbDB6oJ__PTY)bv?HEE`^-18i^QFq>4JYu
zP5{@s4<sMljL<o1F%Yi1Ky~#$aXlV*MB6}woxW?_a6lw};**o?If?c5)Ckz>0UU?R
zsI@iE)dCNmZ?7PMJ}0mIat$_Vf49e(tcsWUy#IJjo7Zl3>eUfBBSV7kv%>tfRn?QT
zai(O_M`!lk3P}xdoFg|pU#tk^e+O{traT)-G!8VnuFyO10YjpFm0hQy)EuAzk=R?J
zJzV0tB_IXOw(f?T;VAc|+RD+mRbK*Gg#eDNg`4TDtmV#P6Z_wUSQV#+^KaL>>&3UI
zl<>^fjos9J2soXmkrA^PfIrk-Yc(9wn+h;ZKOU_{aRg=xRK1>MLbNQi1vK>wG35#8
zy#C}lt+JrB@;J}_1&N>P>16lHAuvk=I6oxfSe2o`ySM}d2I+tOhShjbV}b36Oi2NG
zp#qpPGBfwK%odA_A1;qqBef<6lyId>rRDXm=!EJxUntGRE8c&<JEN{3p}Ox1C;#L}
z%Kw6X&LlFwSt3BS*MGctZVR2U#~awnc#u_DVAGv^RY{ghl<|g1pEq<3Jbhs#w~!UL
z6hq$kbg)@3_IDo1_!q#uAeA6D4eO0iZwl=y77jC(CyQ7~i~A3{_O8_yLawOq0b>S$
zTK3|_3;5em0f9a)6^4Npn)btDdv;^AHt8~Q-+;maC0=dxmA;C5eA%m$Q0w-P*yH}f
zZdKU;GZIHFZEe&s!@KsFx5u-o`#*MOb5h5!Z{1GAzgZyi6(G+lCC9D8!=u*mMfDrx
zfl;{%Lp{JxO|?ta_igbL2|aY~LnTG}{zEQc8g766RuS4hk>$;FnDvSzO&DgM=G_$A
zLUZX(<3T1cl<>aXq^f3>?bfg6mw38mgGZ2hJyu+G`^}GCqMj+Z4>+2JaGfKe{7-ST
zmk3I&&t9cM7HdDxW^A&%)-PbUyH@Wa&2jEQpa*6-jGh17RKe+;r=x$g$pThk#)12B
zH;Q_;sC_pKfT2JAy4-Qv2P&cAJp&KesGa5YO9b2eRoVq0kJIFH^~K(Ye56l`%~JPj
z;m?aO&ciu{uReVEu#d9H7`E!By)X+UvC)1UWz>utxtEMk(F9)Nf!a@S)yT=tAKf-|
z^8P>Uy>(cW>()5D#X?Z92x&w`x;w>9C?X);9nwhWh>EDB(k&nzL-&A$prmvRAt22#
z<dDOB_o(~4zq4Q5XM6O!zPR=udI1kSv+mV(uNCI*CbNDW+*U?(&SGmZwM{QCQf5Zl
zA~RA1``W?1S4RChyfhI#!d<p+wOpad<B&Fm$kPKyr>Y#XH~05aHS;Tb3vUb*Uq1sX
zZY6Z*wTHREZCmL3^aey448zBHE9Jztvl6>kbcnBSb_?^#-{U}MT2IqehIb8Pt9>Jk
z!`N8gXw^wXF6u4Y1H;WvJPfMomoGe9*?x4s)uSl~2|CNZ6puywZE|}jJ6l=GhI-4}
zx51r{-ZdwpT{~FGS(2Wy<432Q+MgW@_GsWdd;A>k(J%LLPlVmUPI0qi`a04Dr|ib)
zapnO2E$uU8-28U&9}la4d`Un*)B+MQNcvrh;uhC{LM%(|2_lsevNgY>EaQq7MD~$&
zciu@!7cY=Ls#texy}dbCe>wQ3aJF8xP3@Iiml&2in?16kwA54lW=R%n$6ZCaJm9|A
zYyY%SZu?|fGGJKMC7~0{p4%$X-dpuIYH99Vy^y~G;@R58*cYJlWJO55t`}lu=mF+<
zR9m0^auGK3e!nZ38t=&ta=j0$FBgXTc&;SX#8nB-z&hq%+B6U?EcQ{$jE8E`T@Wm|
zuNDsKCqs*l9nX{_H)P_&tVIfpfh-|9vil=+oNkcJe5&0UZc9=dFo#=$OJ}?S)Y-4o
zplr2JW#AUVz3;XJm2x{n+HwQBbgIVs8*f+1g>!i2jcStUcMpnQrInyZJ-Z(PyT1-u
zTx{b*aQj?y+N)JlEoRwnT#8Q6N%mT9upik(^dlwpnypbKLy%2^O+;UCS8-%0k;#2q
zZWob^U@%PzJ4Z!<(<lcZ{~;STYXTamB30IP`#JP|^p7KT!@gGvz_|+ik=Ix5pZuOX
z0`Aou?}&C*nC>enJu#Vlc_VRecyFAPXB02W&bJ8j8B?(&p6_jE>rqcsEiSr(G=x=T
zH5z3OzQ;W?e<8i==#=B_M0H7z_Zk^lFGbO%68@^;i;(e%?BulN_333YA$CO<?SzZZ
zt`b!8N{DLLJp-*ULlVSooArC|+zst(^ge<vsMZ>W9=1Xw>ywqSmAuHD?!0QoGe|X(
zXP_Lq21aLek{4%|+K7m$s3pc*F&Rn_-6_Yx4sgPb>i9CIsG;ta0QS3O?DbDj(*LwI
z3lc>aNvP9rJU(%<#$NOH|EY}p`&V{MV2A?w(La#0jaeFXi_%t!=UdU+j97LQyk#aI
zQWyC0lCkO8-;FP6D;|+l3^56SCI=-KN?p|OrHQqg6ii9RP2OI+Ovj)6{$YyY*^`v|
zZ#fvx7ouLh3B3zd*%U3)tW<)9-0hyv%iF6Eb$jU1DKfh+T5E)!m_kcD{Ot(NG2F8>
z;{W>Mwem6d!kz6lgjNEV{=^WhU&YL@tF0w!K>gCXnKH2rbTlf^X|brl;wG=4yA*-4
zt8>s5b%PJ^bSWp3G-cc-M{1LEc_Gh~Ra7Le^$fi6uc@FtKnx(@XEwuw+nz_lTyJZ;
zNNbI3yiKd$^I*$*UhAzZ#~jn=@-P8Lb#T)x$D*U@#U{*G%b(ElS<g7H2$gFwSI71O
zD!rJZ#MVoDe>vK>Vr|EB1BGf|y!-|1X&MDaYIMZoR5EZ7_Bip({SG`eJJD1B=c)eZ
zcofH;FooSD>HD7(|LfVeFRrusAca4k8yGDSD1>)N4<^-zGW+(739|%Ynky;YA%)e-
zAVGF3U*ddzh&DOz>|`-pNmELvV_+pAbkO0p=W2t4p@TH*!D?Jzinr~ej~L9#;7)e-
zGeWN#fe5tsh9zIWO4Al=6!jS=uZgo?-t+0(NiKgmiGR8v_9W`BmA%b;nfPP>oj`wp
zt3ZHLPt=m+Z}EQ+?~i9+59jRr_9aP)l$Ny3V5Zrf+-Fs+aV1O<JhOVoyjP9onPDX?
zF>pU*U64e3CiL0*-6*P)2o+e0(w&&C7BK(j95f^285qKfb6|TgNJ))0lr7$}+OuoR
z$$b{vnLy%is?ualSlm4AVl|j_Lf3sV$F=8(Q$ZFFxwKBTX|KbG<8HO<{Q4e2tiG>e
z(IpuyXrVH%l|^^se>X0@{qQ#*#QE#t;~Eoq@IKzh-yzoT#{sd-jja6t7n^=NX_TFh
zLro2X_nP`_{vQ86(!ywd^69B@qY7JnSvAobw7A)bC&a^QxdW+O(PP26Di6&Ho+8W+
z%v9nO;u$b@tH`M*I=^v6oA#83Or8++(ldFlbf;LD>$?P{Nq_1DB~llZ+CVcb*k))(
zsNsz3sHoCZODH*hu;|9lj5=yB&$^>%qfx`Y@raYJ{g4&!g9>ZE8&(eYj(!m-@#m+)
zTBK{QHW>;55|VQH+}nvK%40WW;W_tbsr!1IJFh_k_EcjT_u-Gv(kOJ}SoY6Ojt=Am
zZ&JP+zu6hDdPz^r!L%)YY%37N4fw@2E$^(w5CMDCh!<kKTQ&oa*y5Ckpu=XjDYk-3
zII?MVM3}1VeBZ3AsHnXBu#svsvH~kDUp<iPbfYotS8a?G6Xc`P7$b@tFEFSg==@Zd
z=n8M+cT61SpKoz0NLsIWe16RNZ81Nl@scmYD+OQBvmp5e_7+7fX<4MTc+Sy?)13QC
z*$%qH4-)nmob$n4GFD&@l|vt$s~>wK{MklJu2StN$zRcPK-QYcd9FOm?BdTw!fgh&
z@pH^unmQBbg2r>-OD)b=ahFY}m?(|AEEbV78lg7sv?ZusVjF^S5*)<F40_p2Z`&6B
zuFBkM=i69XSy`F5-3GZIxQ9tk`ThM~X~F9xMsK?h`v)SM8yjK02UbtNuv<W?c&6uu
zPy|mjmi<z%C@|I*)f3&GS02Pa{8&pF;8>L5>r{t7{&H5IZsO~3JKsCkE&vJ~N2d>L
zHr>~=2ox)excjhfl!W=2Z_(~O5qA#{y2MTf^@g%PdI2I)w+e*5sOtO+IH_x0$h%>m
zRKWLP#b5Q^^?4&hhr<;G`)!a*O?ko@@I4^{G<bXE0v4<{ghWI{iW);C`YS!nm6ID#
z?#SOg@<iO6DN5z74cNYLxc053)@xq~_cjkmaIm+Fir36l@QUB@!&;CzcD~O=PxaFu
zPS%36XY<&JU(6g%^{;4CaK|yB%nPxj2Rin>!~?H&`q-&qq;1?sRtm_+V*b7IOTHpk
zlJLNwk*``ItO`pet>umdI&m5pz>N@-HZ9CdVfs*PT&D-fnC_J;`3~oOfr0ew^*w-$
zUQn-oZ_MeN#kSMmR6do|e&N9hRFn#(i#9tn-&r&<cx-I!)R3R#7v=TV6&zo>c1ovg
z6RW&+zXD=VEoejeCky*cbq$6C{q3BZS8=%R`=$}%#2JBx8e3Rcc(j%l<QaD`9pU;p
zGtXX44;3w`sMANX_OYjjYk5&C<O_B0gni*z#Z9e9@O_o$R}-?da5pybaOyYR6fduL
zy{`56@W)^2yp8_`7=+LdzXP7Vu`O@uJ{8KB7d)Pepdwk_&3aLO@YrF}gl!q$bq;|D
z^b{3iwbXj@<$Ym~zR(7b7zOyjM~C*S2sul-wBP!Mg+Fn^6bp^ELG`;_>BAp?A*sIS
zv3nN)gQ%*i0&h<81}~UJgyf4~U0KWHc-e89OZI%C-Jq=HlnGnHc?i0?M&D1HmwZUu
z=1xENsW0S>V*VmQ#;b+$fHYRnuM#vk)^SPx@Q+Qs4%)9SRvF44%2MBs;H*odGJ$tW
z?ON#btgM>Xk5_97hpavyV+!D_!g7T8>tn}mPp6EZf1Q6EeCpEquht-6cG&XX;S54*
z23U3Kw2i>wkH3EG)RmA*pwxIysmmNFD=S|-sAPhAit6Di%N)e)+XGz;@Xn2g<;?rV
zYFtNf=Ffgr&GY=WSyv7dQt=9WT(#?41lhsg=LniyoXpc|GL}Vsa$gX3?e-VDp0S%N
zizPG5H!?e=w|@trQ?!80!eO~L4#)RbGVcT9A5dFC^hG|z7rtPxw~i_5H=kbIubQTp
zLcsU@pE&5t-@eYlIu1@AM1R3YA%+0G3^q00-^BNet)5bWI$_0k3@g6yLIb1E>pQEg
z<L=)fynfp;&S+q31dQ5dxV~f5zbTqjI>1AY?gsQ<0kk@fWro7zs-#D7GD!eUhDzHJ
zU86mryWYPYb|Qe+4@?S5I$%UcpZplkQr!2c1Ag@!I6gncSD@drlBgFLN=}R$A5_nZ
zurV?+I`6m>gU=9;IrgAJTX?;V>*aoIu`?(QonnE}#|D<l#p2iQuzrW@*oTh2!sL3n
zHxy^&<-}QOmFa!w7r!!>6qeE#WuAV+f)M@3-rkFpl$45kdenh|fjGp@K|OE)=p2d6
zBcgt&9yJ1iP*hVRaR9ANcJWvAlTuQ++}%BVneVvrS$&6Fr07DPFe<C5Nb2b1>ic#*
zyma$Bzlaq>{a1LnYEf?ji>$xE%^rQMvZ~4mF<c^A7=K5uNDb%MwQ%t@$Znh%#2ciV
z?__zwng7C`|HUJp)$_pG>2~+ienABTi3|=gugwT)e0;nF@jY+iF!_gX2TuW01_sM=
z7&V=)!!v5Oxb~OW{GyHzp}Y_0#j|+|Pvun3{{=jM{}DS4Xm`JVI2-=`w|r%Q7EO==
z&?r;0|BeX#1*r~s1Zu}-hy3^ul>8?+uUi7~HyPD^_eDqkr{DgMxTq(J`{{Rl)eL__
zbseU+zk>o?HM<kv<C-4=*r$*fuvkArh2n?)?0dfq80^x2MC#vSnSU7U2iO7Yhx}Rw
zyI4=Owj+G%zfxQOi#fzK@Qgutwi`<HggMM4nCNS4`IG#6k0oS&X^Hs>6RxVvrhtO*
z|N7MLh|V{Ybtn^F*YatLV9|O}j|J2kN+k6wl+rzhkfCZf2hmf?gS+yKS1*2bu72|L
zxM8W{Gt_r=qS;zoF8&gH;+}nm3nsK2`4xDiQRv5Ju_|FN=zffgzk_e!_8dKwU_YvB
z#5J&P@FI#a=)d5O|NUWL)zIm`;-~-p7vKAd35bxAa^TtgzeM6dF_`O@ARafY1SCHS
zZJ?7s%dcP2G=bOgOA!ALgZ(HP|6#E2iQeIg<sS|9gNEQA2K$G>4zY#*n8+X0)c=^s
zL%8TKMC%_0`~MMxDXPUkuN{S5Lk;H&&a~$|Gm9x&{rqBVdo*i#u4DQX;`Li5UE!-^
z9<Dcg2TUicFcnv8Fm@iFMsD1J{(QnmpB^+3EFBv&hHSp~N^cUQ7GQBs)Z#H@kk6TW
zzF0dz+#2B`hkDTLgz@Nr2Ej!I%FNr@JRuJIi!ke{N<#mihv1?36Fc9F36C_Cm?md}
z+XH=z7^QX4M)I4D9|riOU0B5yT)Kr<_NU0Eq8=~4z*Q|Zp33kaNQ;(49PY&YNDL5l
z*5?*^-pcz;|7*vr-bikVSgYJZn7wJQcGY$AH2Sa<C75bhwFR%{AZga?y2yeULU{98
zvw3bjyR<sS*Gm$Po>LMj*d9(RR?NT_seTfm3#=f)9H7a5sh)_D>l~qW4b6h3G=b{e
ze7m%his|p+*a~Y`WF9$P$y$6`p5TQo?Lr!|g<a+g1Hs+}JP|BN#_?p8pAX-C&J%%T
zuT)_4=?T2Z1a77v{@2bj@2s`f?5C~Cr)ru7lT+xa1D%LgcfA%3LAMMcd9fXW(%QZU
z9osCESDikDkyJ9gd(&ipg-@%cN}=!PS>*K-Z2d&h;kJmjL9m93ee?14%b^Ucu98Z&
zajqr~peN$YOLguPMjLeFNR(*FcIudwD1or0lkvLI6Em`(B@33S`S{1LS(n#`wcKDh
zQg!w|w~|Y^YxmooW}YUFlLJKIuby0?s5X{!oRzwJ3#7)EYh1_9KJvF6B6Sh&r6P)c
z<}Ys^(2~1bVBo-;S8g=*%&M81ljY#xIFDp!?e^nR*UD6vL6;zb*P=nL?|Rh-)z6(#
zV!9lS3AQX;oujUrTGq3E&J$bMP*XO$zu=0TI3w9vgG!Mr$mAlShgoP+ln;bOjjLZ;
z<TIHH>nv;X3o<7y64Yf+7ZhDdn=A>19V~t5m=(UeSMxe8e|FSNP15M5q~q4-sZ1x>
z>bBCTJ(4bdb+Bcb7D<g>+m&EJtBFpIXlWXimtKotgM4^92pub8h=49$;+#ETi#cyA
zmf_tiLe>tE4)|IQ_(8T8qiw7GqZi=c%--AIPu&>?MR%OooW(JZ509cmV9DltVxHw(
z9XqCryt2EfS8l7XMzdcuiR>!NGuM=Y#Uv{qdGJ#>cVct%QdqS~nD|apN38f~6HDpH
zt!_gq3k9gCFH)>DL88cJ<Jm<PEd94&n}S2yqIu=HEH!)jdm)0v)VwSm{HE?*=-A~^
zie_q6YM#D#i)=Mn0ye^ysHncxprh&UD(Ejly*i;nlNb1Msr!Xa8Eua+6d86cwahLx
z>kv9M?UY^IS}Fn!`F_hV6)>nI?jW___0#jD8w7;frR-_)lo@Eh+JyiI8!Gn`H7iL1
zt1Yk>N7=_PLlLgqggS6xwiEw`i2q8Jyza%egK0`T*Lj-`s5QY76ZE(pM5$MI9R{Ri
zJ)C2iYSy5ZQ~1;gD%^SLeAFl7N-FJ;+36jiku78U=6)>FGB_JK!f(6`bIE=V+M<*k
zYprEP353#Z^UR=xwfCi}k%61=5qQzjgZ0%s{!Km27fpmDdF<U!Zk0Dg+a`*dI$6n=
z*VB6RHI-1C2V}KOzV&;F8ZM?KL6%$T6g$n}-3%IWv0z4varr+T-)s%y$MjFq_=%XR
zyxU@pQ{%Qlr)gKuRP)@7sI;AbWNt-@TQb)^Gc|2Syk*|o&hfP=;HS`Zff?x6N962O
zt<?Lkh5-rRP2eKpEBHT8-4x5BzAqN6U2Fb61$|eKsKT?+Qdg5it+uvcZs$eXm}_gd
z)6KDpx$P$Y-Eb$#t&=B@R8Jt&o2HR01o)(ZJ#KpAXI;b!Qz3JxCroj6k`Bx<DgvfX
z0leA<%f&6*Te35fChz7R5hbuJ)7K&buIgE`>>IuMu##;_B59h<kYKYAm~wK5&22G&
zf4=YLQ6>U07i(^7D%_!r%=e9KPz`nN@wIT6{ZjbNJ%N}S(!VMSekYswr&N~Db5H_d
z@1i92+Z=bZ^YWZ5za+_&Yw@A!B?**rbAeC?#-5e^;^=Qd6>k_0dPkI^j8@h?MJL0}
za)a`$YRm(v^{Q!R+A^+Jx@^2#oScsstA|xC+}Z!!gP)w2=9(L{?CCirjac1&u{>z)
zY*LL0Jj3DPzAB7uG3=WqI3{HU8e4{pfOXGe;<BG4YA^8A>5S^*0MZZdNFec8R#o}@
za%s_n(7BQAAe}2s*<>;vw7YpF=!qD&og>K$<RRaaIJaD>?_D=N#1z}wd|;Nt>Tb3Y
zWkx-=or2n48YSOruJKN+EMN0_XK+cc3Ji+gu6rA$NKJ9{uX<Ge9(yU^fJE=@*Qcu7
z@y)8;q?o;Ryt+6sXl0k`z2O-}HZ*l4>$B*d7Y(O7_9Hh}se@fE&Xi9inl;lxgi_6G
zT5F0pY{1lL3~auHX!R`-{);ATtD9vfIqvWLo9{2JCN%hO4Ua|p(*cEM9bb{`f<Y(m
z6uh>lQJ`@v-;AO21&cSQCzG{!8`-=EE>%n}`Eg_$aZlj=;h<%tT~VJ987OYFO<ZQI
zgzQW<xq=~*l3P@sg+h0C4D|>*#hgtk9NzaP&-z0xo=Ydr$I_q5-QH2br&Eg4P;^Dj
zmJGQrrk{Mo%PMkTmBL=!x=UMHr<_&QW)A<Y-OpQd{lYJ5-Y-vA{a!y-4ZT4XZJM$Q
zByj`@=5IIbC+??lMT`szE{Ke~Emv=6yQxS{vDKIujjSr@xz=MX5XOCBDS7tsQHrtk
z7%-q=?rAbd8QM`++j;Nlfk(sfYo3#q<dX^GHkS$qCi*=;b>;D+nOJ-a8hn|o=3Cxr
ziS}V#IRi`TY(c3Dd3HlprtiqN*a$evw_bK^4-WXDOm3T8^LFlgl#xXtBRwb>HJMt~
z*T@G{qH<5!GEkGtBkJWY-AO%$AB55fwH(gR*?o%6PT6C-bphi%Rz2voEDjB|^S>!7
zdiEj5!c8NZpY{xo-Tqy_`ze#~19b9v+9h~XO?ob4CfW)XJyB1zyk~6|w^>qvuO`#K
zH$;S=TvM71nNJw=w4xNWUu>Rvr`yRyVD8%EW@*%(2AX-U@O_$Ce6c6!8dUebw#G(L
z`Sj;AjcY1EyAUnnH9W;vD_^e*DxZTdCKjm)X-RYLnAa0|7dqZ(vmjl$Jtnl=Be%L&
zBGRyIYd2S?AA7~_O{K+eQy<LSr=Dc*GS|2@jeu6!Z0Vf6S6aMHm_1nqu-}UnI6n%J
zXj>Q0mG$<k9yQi~)xY;QjUOCzB;>OsDT=a9+xcF#jXy^ZtE|a*C7rnN{M`U=U}5F6
zy$IH4O*d}*mJZ3}p>j<wf&?)U^EFNE^%1r2)RAi%4z1<Y!|JFJP>sYuKAqxH$Ugq8
zYBOTCow6`J?M%hFEddu(d;Yqo?G>(@6_$8YF5KD%W{WcYRC49@pV*&#hRtR<^>5r!
zoV&q!KxCE^w5(mDfc*5E?{b1?wc&?_`XW7@BKE9T8!u|Lw=gbh)eFe94a_<Oog{Sk
zz{+6>rX@GxiHf_7OdYrIheujdZEE}qBbR!O{eA;cgqNwoEe+AVa~`*>7uaG2=0Dyq
z_)OX3Us{@Vm0Vg^_^efat`{N6F}t>_a;xbx2?uIhnhF=n5|s804q(BKP0cl9WPS)8
zk^!&R1?JJ@kY1`pn1>MtHh@qfQG-EU+e%S9+iteJ)NEo!Yzq3)4MfhRLB@!#CrtYT
zPX3p<LR|7;sl-jSi!C#*RwgbJNO^C$o1UM6q`Hkg=&Bqv@>UsHNzy=XY4J@@HY8fI
zEU3uaiW2Z!I>mYSZn$nOrf&wf&(aZS777Y_?BP&o|Dca~h$4>)zzGHRnA1?cH-XUm
zmbK?{m{0Ixs8_Me%w$L~^wMU;Q+%93%!bNK%8hn3I#HLDYvJViqr9cFQ!0ttlmjqZ
z&^p=~cCh&>7^UaY5u-l-a<SHBiD_{vw7HXXGvO(DRIBuo%WhVE3gsC!nX%Dm!B<<-
z7rsQ7&RPARrwPYCo(Iu1(M+_C-lZ*Xckiw^z3qdUZMaC*lnR7TA2M(=-u{3kceRL#
z_;)XBNzC?^&iHw=YA5$4n6wiH26&QxzrHImG@kYSv7g7s;Bjoz<`IibIf3*VPH*A4
zl)Wn>pH_gk=m5M$_$bm>X_6_uot12$CpP$Kho;Eq(e+@<03(7trb@`?<BOB<*|xx^
zl|CPRzs03YWPIAVzjM-PSQe{!n2G9o+31nJ?Eu+@JCq-WQ%<REZ#wxW8$NuKKa0pL
zQJ7L;S^XTd?43}TbhdWK$feruhSQxy!TgU^c~(Kqs?LO`s<*p<$NkaEA|=mMe~FL^
z_|LZYDOqZNLHo`1TcBg+>QF?%c(0c%$?qT>>T2BDucQ;T@7c9xb?&+3V3atkMiS_;
zk(r?GY26dz;u5Pt<l<$a+l8h+$l@B?UK>vKNUU;D^4zSEliae%=3M>Mhwr~!^2L%b
z;>!+>S(*X#rUe-%f}@jCJPE0G!5RrBp<VXpb=UsIP4HXlH=X*#)g`1|L<x4)^{zL4
zV)sXNX!i~fC%*i~G1hFb)t{&Lbq4I2`+{`JqVdOuNNt5O^2~j(fwFGlwMqv%NSjy{
zU<1$j{r9Im6ZN8u=F5gBQ6{l|qbtFpB{VY~%m*@%MV}qd#v8J#(q_nyPLV*z^ePiF
zM+A5^xLKy$cW|z<cLvS18dhctq(DcOMYILh4#D_~Cws=nNXNbMy{as|P`-To=-%>u
z7?-pshD6@6*{`;D1hb!%O+xI;W`#C<Agb$as(1GBcdtqOMOO4rk3uy-Kd|xgnDdg?
zx1_<-Cs%UJ7XmLpt%BM|D`<<Z*5Q?T8``wR>r#Y;csfEpX=Kw0NnC5VWSc<cug7QI
zILe|oMBc1hVKX@E5-%p^9IK?UVYQPr#*cb2(X3{CxyG?2&OA=_9A+arZEn~?Nr*fz
zpUWxWn)ZYeJ$I890W(4M-13KJOR);)LGLTq)2r>>DLm$S`FAQKwvCiJ&o;E&X@utK
zaKGv7BoN*Ms-!vCd82l#PieNXRacqIiY=klODHHI>F22rZkK>emx5M!v|V*B-^U>#
ziEi;zh_&ue(|6}i_7V&!!XrGj-4~l&KdlBy@ZZpJx~99{UCF=Icu7%>t9PeTi1!`e
z@;JAlNl}_=qdcn?`{a77Eu3_G$89gaQ?FKDM|-EHiMG>wy?L1*(VE-UFK`xz1LzeS
zO-_2^js<)p^&(O7X6;H=LHAwvf}#mLA*E*ESiD+!;Stf{-*Sc4FgrVyg@k&?&{DV}
zs|sUtKE`hIL(x>eSK7tp&5fBUtV27+bh1fUXnVXPmZYjPm&`D#ecA}arAjg?=8oAd
zpVQ%big*_&W)a*u1}k`SH$V3fEAS^C`A>+|Z$5_2`_K)r4Hvv{>C)OuD77GI7k2Ks
zMm>jVHo;FxviYq40$BWB<=}l!kdLZ1nXk0AS?E}wd8c<~-3P)-ZU6RC_T@bajf;E<
zyz~bXzC1VkW$KTpmKdkNm<+cBh!pj-IE>raAOn=tyAlo)2OUqDt~e~2Qv$UiGb6Uc
zb7u8r3i;FCmz~mAXz?xijE%Z-TA~DUFLOQ~e)YtV!uhVfx&&tz{Wu3#kO&w=B9N%w
zb%EYHEpyKM!8NK%XT{SkF4qGD7V4b}9^6FodRYHW|LU(Wb6W>U7O9gt=M$zYsWtj{
zojli#iu}%88zh!g(qg?^Ud^C6Tm&a0Lqc?J#;wgHB^?PC>AQfeEZshesSD-lS7{WH
zot1X#drwQ)V6DG$&~#bbKzfnXx?JL3bNp<Fe{GCfiCj<a$qhjFFt*~R2FM)Q+L*4t
z#bkeQ=cNaj7&v?~R%}%G^MMPvzQs0{>xu>{lVWX^2VO$|oeNlhFE0M-sVigw)7X^3
z6?#>hmZ8kxw&X~)afh?lN6dDj$0Tfk2b+~<EWif5`&qs(FNFo$9q{os>0tV5+689r
zW(Ra8atfg+Ho7n}YzH=yw#+qYndT6qb9wnG*c6F`$+gLD7oH|^R5m<KmQ!CzT6E0G
zL}|aG#HDeyRkVoRBJ1SJ`p&b*Vx@wD?oUxj5$OGAO2MoI_1k?I=jM~5<HA{J(%*mN
zK!@hUeeRK9^SqQXcP8*UBlZ_yi<2p~(Nt{e3IfUX7ns~9cabIU3a548EKcyD^%wQ$
z+>3TxccQb)EE7Tr;)$vGlWEBoIBz~8d-Z%+$iaRKcrQZ;@~3ScBR4kfJA}+Gj@F{h
zv<&B6{DQpl<Pb8HwqsCHR$c9C)M%^VWVLNBwSA_Sp2CGlR-1sGz;H#5>tUDOGC^vJ
zkPZ1f7?R7w>olFvvzo>=(<IsnU8XK76aW|U3Y`aCUgZa#%u`qR>@lBfy$XR;xK+8E
zu>XP}O9dNbg)z<<kEqE>V(T&BAB>ThTUBz6_8_#=u{kumk}j4l{sn3bJo2!YQ&urf
z&SW70wUVIeMfclgkB!PhM@?1VF>Pf9KFy3CEWSz&QHN6o?`L{|NfSgr4`MfHy{8p{
zsWSZht8mZCq=G&t<x-ulzmoMoC62!Pxilg`X1aSU!w<d1@Po|iqYOIRWlZ2izoc*Q
zAEX^B|KBC$7h?T`w11HHJ=y<9JimvTzmTbakoFJKzRMo}SkM2WO8*bi{y&d2d&QPV
zfAj+UTVVQ+`|<z0`yoDKMtHzkYtZm?usD;YvZ|6UvRz6vk?q@M?C&bGzwPW_D-w5*
zl{NN8$Bxgyhli6>jAS<)w|-}hypYEpU1fp%6>-T!@mg^QB_-p8ee{~Ai;K$@NFfaN
zvUSUssr<jNM~9s`R7bykf#;>0`*fBkZ!F6(#w!px)(N~&SPAMocgBD4Tvu?iRl)L}
ztdhkwkOi6$bF0G(I&l~zKlolSghdpmQ+WN3aX&ZDZ0M`CTZQ$i5SBzvl|zOp{cWQD
z4_4o(yaqM8ywsBG+O)Z(3)lV&j{cvQ{gKOSkq0mR*jrh1HZMeb#}hLip;yBAb>`3y
zAOBAP-J{PpeD~r#H*`FNBrBwH4BXHE1z3I~@mfrqmZ*>M)vtKlS($hcwD*>1*Zu5i
zv8bid!3OPpwtc@OXzx7*f_9x&qC5WuulzyYe-XU<D#&!`pjBCZ0SW#=+J8fle>m;G
z5ZM2hB5egTRE1oLTgC)WvC%$%aZW>KN$%sl+g-`d>A9+wwlD5UYUy0xwC(~6H<ePP
za<ddYB4P?8+GUnPZtUkdY|V1hyS&;9>Q-G79_Y&!N$lJ!qDl;1+&yrptpU>m#a~<i
z!un1};N*9gdWrx0w7|dfEsY7-Cl^w<9NTl~`jNwSIsJ{Fg-n8>(K7aG9X{XPTJoJy
zw||T_JPdXj4V))TZ*ul#ioXm~{6+u0;Rka<?~Q~ze3HI;_QHjfXU}lqVqIN|l^$CO
z0lZW8_V$V~+?mr03u$1x((nPtu<L&T`eDbx{_MaFeE5NzgQ{o!aWLoJX?;e{*UyiB
z{t6WpRZ9r%V{ILsQ0^eZ!*{rS@1=hQpHD44C@YPx8#&@#D0fE0u&7TUg{9s;N>861
zkA76}i*QN<c;wbuz^<p%!_u^U=H|?GD$b{6WXwrF`ZP1c$i`+{QCTVaY9|VetNtr!
zf8;5R0Tz`;dd*-jhSS`~8xCr0)ho#f?h6d*&K0&uU7bn_!|Y9&*(5w7CPAL%T7_Z=
z##^V_wXT%Nh0jGLOM9m_p9M~pe3{NkfLj?%)(>`+XJutw+gyDaTeU|QANk=|K?>-e
zgY)6CHZ3#r9Y~z0bpo@V4-S^vqdMai4${(u)Vy&2@asw3_qzxCbSfPcNjl>B;P^xg
zla6oe#?f!D$?f0u+S}kr-*IYHC1SYOn0cR^Hv{TqIWTPD<>}>gWiCo->HuHTTC1#k
zQqsRI_lYhHr8gJ>7>wxr`L*|tiKr+#aMf4V*F&?j7a^0?RyaR`=)Y7lGC|mr8K81B
z7Wz|*+{BEU0@YHQ0ujrWtM$GX@U)VlgVxGT#?>}1XD6?55BboVSp8D49bHn=pBOE@
zoM`7O7L5VRpQJuYDJyRn!94i*)J#6S+APSc`~1t8Q~Wlu4DkfsjT_P`HC7tyRPa*d
zYqqBZB~=4sNK|+4htPIZ=Sf1v=DYDr3t6gpZ@l(UL&IS4J@i6dI#@lt0QoEgmTSq+
zU?j@xODqQ*!Bz{%=P@qh_cZeIoe*Od;v0X7qaTsmdokjLxN2ZUpW>LdfYV|>3mhHJ
zta973|G>~CGF4VI<<lqqBA9CKa14h>X(}rxr^FGBq8MwidaF05!U0o&d;~C>i9y);
zVui5Ub(Olx#V9F9qo}2?Z<AUl^xZFGYM(Hg5axQK0Dp_FoJ`gIjZinUSytV!Di6(d
z^wLm~dzvdpl@QETK>2?68xHsu1{JHDb#KTMWBy6p3E8zyy+@3zwjH`VPM}u)VERRU
zL&F8w7MEGa+;CrZX^ey~-Uktc-Z=cR51<;6J-x*J#M{}Aj^keyO!V{ftFEp-D6kFm
z{e_3Q9AZ^ZRD+%&_uB9Bn}Ow`P2v++HM%_$#UKfSCAPLMQ2WK2L|!?Vd$mzNy4<RQ
zQ8`1OZ+Q&t#(41gSx3B3cE<bb(`*XjZtFAQv9Vg!<3Wm$oi&r9P9_J_ipq-l#?>jo
zl|AHIC)MlO1STeFu>TJ^K9DLK$!xj3y*-F?ne3ZP?|OcbY4u0r_U7gpLDXV-{<EE}
ze6qwutm+D5H8po3TV*z*-7o3<oKS7lEySOo+7%C&Ec<f^nwuLN=RQBbAm}+4Vm*3U
z^2K$fv^y5?%5Y*fP2(W>>)I0lPC>V|HyuC=Ww%E&MLw8rNd=39gtXy9I7Y!>rj~<x
zjm0z`rGV$4s#=cgDV1E+cAJ1z5gpk1v^L!__eDe*WyhtnXK6@CNc@~GV)gznl2U#)
zECIl#gETdZK2G_ATB!6KB7&uTi)ys$e$&RhGiTx%vYfl|La_)WYANZyQhE$By)z*c
zaKnzx6LM0qD2(Z6+~X%t!rKSZ<g~oDSDT&1P~)|bTHUOTWDPO*CH}x26gj1^>&N~G
zAr~9O@Lp_#op0Ua6Z6><dNJ#yw0Puv)~^!vh|>X6ixBSabFpaVzqLU&QAq{tN)hR~
z($=xf%_a_*i`ROWDm*Kf4<zHUHsiy&FzFG&tedkuTG@hY`V8&3IHuG5DCqul3z4bA
zh@J1sik%!OpXy^#jPO{6$HrVH>u42|!%SNT1bs?*tj0^rz`%fD_Bj}Of055>ME&64
zNQC{ZGioa+lxn5pJVl<|kza*jFq?ZF=L2Y?0!+{{k=QQmwoc4qb>j$O!g(J_r-OYr
z_~Lq}7&KR_Z1|w+n}*R)%QQUBwes3H^PXlAilhj+JX*ETUy?o386TRFUt3!{!={}9
zgf-U5zJX}+ZU`I1+j_i$smsncQz<RO1)30%M9yois;~b#H`n0tu4b8YE}}N@qc7c!
zX6BMAXN2<ON+(49naSnpcq);NiMPRk;LD>uAK7a1j|p9Ql5gF77s%AxZgl(mm%E>*
zeC|S`3mS+5s(4V=$IP#wNXN1V@=Cx0514*VJ(F7Adt3**jYfdIjkcT_u;aNmQz`al
zC|REVF*jE?Hv!EU?_cJA{N{57_e!kY@u{{F3*~{lcp>X%K5z3{H+Z606CnYC>inzD
zDCSnxoZjpb%V;DCn;)ZG40om1Ug?7q+p!3pO6NZML@%3~;7cN!)L!gw>%m4P0XH{~
z`GG)kmZalS><uqevaQ$2I>*nbsaHHmjp1|aDMTexN6z_@=yAi(gN}0G&9#WANhL+H
z#coRd_V^sPJ!(k<F<R8jxfL+vpq$;WCskzDey@x*o`pw>-8UE-j8y|JsKKO*>30*9
zqs?SBn#e3km{i-G^?*Vt+%q=vV`@BO%3jZ8QM;B^-(Y)x=+)JTRqNrBfsY0auU6>w
z_1x#X!AMO>p*T95@<$w>cJPQcMjTAq3joL3IXI|9Fl$i$a*k!xo>-R`?Rs`jFE*X<
zU@E5@80HFxnGD(Vpi*bL(*{E?h+0Cq{B~0IOKNj^dalY^0CHrhz$yj27q)sf7c8Me
zV^CdK7LMC`lvh(VmszKx?+YSp>j9{qTC6HdiT9{r(Tu-ALvN{$2i(IG_#*r_fD5CN
zZ)fnXu`$EED>;UHRcI5@(;PQ7z@lYMi&L;=;&?ZT`_|?{U)hMG;RIeHWH(dF6CJLh
zmu{ouC1je@ohD~#sa5Kjsaexkzr<Hh=!`_m0Uy7#^u*?ZW=E;<jy$7YO?56CBj>&8
z*6<Qvbz#@L#}ZZ3?nGNbMJio-0_J<#Yi3w9&9~L`;E(7795A-qkz|6#&!(Ay0DN;&
zqS4YpCq6WHcA~sjCnbrP?hP(+Jt9F-3mZo>WwHTnUW91vx*()YTNGKAr+cdCj9Zn8
zrJK9^@PSa~1Rij9@o;hNin-ChNQHlm0%TMt@PH^PuV1r`Y1XTGkjio=$uhDdhRZS{
z7iL@Qy|AvU=d>`W2$rlBlz8p#&^Rr3ONP?R^?JZOVy7Ttj_N~&CPlE$7y+fxDrb&8
zQL^oV%B?wrB!V-i6elE(x0iOCw3tsX@RV+qPvEI!srKazIecDNu!sgcSzkQQWmR_;
zurueP=+2UZ)BJGXa?AxhwQ?6^0*?Ph)w$``QVuEh#yUFb_D@evUhvvo6%Qm6=#F!#
zOMaK7Tv3Sdny5dHS8>rWh!5wyp;*IHg1&sV13Ve^3e&*bk*r4e3@hs>PT9bc$3cl9
zu~k(=&X@zQJ})$n^>FbAD}Ty7g(PhON)h))?LE7X93q>&N~VbN0wbsGk2l~RS<0Ck
zz_49+TIh8a?cgPaT<j1A<RpXbq|LPNtb4QoqrSjnZoY?n11_eJBHMO*f2E0~4*}!M
zB_vog&66Z%KKPxc%yLEuW!Tl>nC8DNBw|v@(-vq?;E^4zbS&-b&rnn<n&~Kc!oIz?
zXNjr1Iisy3=+ZqhRMfsj*BsQ^+}wOuz&Ye`mmBTpLKbmafO|DMsfFCK@ltYXK5bf?
z8_gZ@n>(-TR>y24Ch)##oM@x-F?2RMo=46%U2#E<^#S+CalZbz4&JG*(K&PLu|mlU
z^Z|SW>ea@Xj5RBdSaqv23?=bm5u=qZ18?O;OW+WAe{QjB*X1G+=kofKM|UkpqBu+w
z&qZ~mc?qfHs4IGVYsBq!hbnBcPvGfP)u!ZXm6~tm#Y4Q6N-Q#EUM7R)%DVV_zsw4J
zvOjet+wS<$Ovevq7bz&L)-8H73fybA5)zouIrA<DlUFM$s^As@!zVl6wI*e)cnZYx
zdyn+@mfyM%NX6B^1l?;|+;y6gf_s4dr9}J9L#{~U-e>1_H$sEkYxK&jR9;?|q|zv_
zk3hgx@;~VvIbXo{QlY#atQ_00KxmrI=VQ?Fz+e}^YtO}m^ld@kJ`;3Ww3z(NU^)s`
zm2rCwD+f{v^`Fj`nQQO_WdqBByM0-@qs-(7eFGLlS>dDkjrBy29tACIs_6x~w0rKX
zXL~<>YB89fwD!4uPv+n*a23+Qnq@zST+IpzX#(ofzDvMwH8SM3Ubr|~=_Gq!d$hMw
z&ayp`Pfrc{grO+XrP_eZo&=jj5f^{hP{QydvCn_-=IwN8hJ2Ye=Emf>(&WodeeQ_Y
z5*bJ2x>P!qzy`i@E05FdW5j(s>$BF#brNRfhTYA!8mLr2@jfZ=YHtsh*(T<WkB{r^
z5mLQSb6W^wSQyPtA1ZTi?_^Y|+@Ql(yRMNH=B-(AJ1;NKd6E8NUcUP#BaijSU=FpA
zcQqOB?xG0l_X-E&GT)=5@_h?^JT7CNa0t22(Gp8#J{X0UAt7)b#qsE(ChNGI>yPnR
z4ZgQ=1?EAj;M~(y=XFy-*A@LovbE#2wPT1;>CAhn4~k*G@3HArW@KcT`#Au|MJ8Ub
z<dJ-Qcd$RnP!sW))4jg<B%v4cKoTX3S)));I~M1cvF>k2W{<zpDX(ABDC*6XHB);1
zAe>RN)+Qd|_5Nd$#X!yDp@F?o-55c)LImt~Ul!JN8!9vCF+G0bL=4hev!oZm2p_{n
z$)ChJnzHw&^OLalX{hY0&-Ur1FB9p7EpI4v3^~wggMNZV&7<2yOi`N+wY!=uS|x?#
z)I^sUFgY4+sHcJBy@U2sR>*=*+v-}y^q}EVq&|NB`zVf-2o{|z)_B1fBkCti6#RDL
z;d&Y7r4W$^VVc#O5u?LF^+Z&s`5os%RCBjKl#V^l_a6-1To{!`pFC}Mz($kM0!-0$
zVd0Spid6v5V{gqGZQz}2HkqN;N}o7g;jZ`^P5yd6n^l|k`dmg!Bnvt8ZBx6Ja<RE$
zk?n`ccNU{rCe<a85)EO3P8LPBE3a?tT5Lzo?7d96v9`KiL{854<Wq07SQuCb>qnq=
zU8^*%hKlDN4={5;&f7L4pxO*6Y^YG61Q77DaIUxG%+>=*DNj9DeMiTpp0a}tvP#sa
zDa^I_T!NNNVdpj&Kl}aB3!u({^gI5*-u~9dwHxL2ec5U%G`3Vld0Jb`WZNIooh`vd
zi?bg3Am*Iuh)(gL_SWa!+umJR>7q%!9p182`-ngMshYZaRKw~ifXcelO6hli(!TCM
zVAeoX4TFWV>InK-D*d{Mkmgghcp?5Dxe%5c$4*ECCF!)baY>d&T;}~%A{OQMce5=v
z7h;5LYf`;H0JG3r0~<nlV-6NZXGLUzL7i2(yaHW$`YQGI{q|u!E1tbA<bZ6rF85+B
z8OJ?a7`k+HIP{u#dX3j^6k-uF`UX@g?*sF1F`gDUw2VYT<+REejG6*WwSWba@+n|5
zf)FNPb3zPC*IIY~mCkC{%U4j*b-zU~ANSEAHIWCdRcezvf!S-}bZ(pL+MRoR#1#J6
z?s!TauBq$U(*`3A6R(Zj7c$e^hCz-7=wmssyO#?t0o5%+Z$ZiVvX;rAv50SpG!{!f
z>k;*AH7F+>wFHO82{;I1)Xt`NZ$Aa9dDhMo0M_*OXe}nML=4I?YsafiOGEQ^El_ae
z*zsTJ)e&Gd#UuMk;`SJeck*Hy1mpRuv1CFvag;K?52hVA=FZ9PNgq9#<q@0^Q3?|3
zB3o7rvf_1NnLQiB<hFwg5;rA!-+YK2t}+W2V0C_2-|&=aztSZ8#YG0g*diS`uV%5n
zj{s!qnjE)#oBFy)ft@chT}}x~g^Vf*&sOeg{GjxCe*V5?EQeR6yCc#Rh2_hw$9}-;
z%L4KBbPJXK>R^ROFfdw7bfgAd^}Y)u1&>oPH`pI{@f)w`qmiu!rVvD=UVr(i@ed6R
zH~DNvKKcRYVJ6^G#41qQ%Oe#j6bD0XH6s-cmZMF2;j}kTXu(ITTvRd*C0i*^#PfsY
zn{0m65X0kYdD;c>LIv~yM!-#$2h|moD;OVQa3znF3gR*jS^RkV*VSuYWr`P`R@+9!
z+HR~$Q)}i~wUw`0^p+Ql@_298{T4_mGTePIRXClckn~6gQJ5;*x0XvB;S7O5c6N6y
zz{>In6bK>a7GI`>F{&_X?WN$VmAh|dC9v(qNwDeh4#WtXWa&bcno$Yr<&VxuD3m<7
zip`G{b^?L<u#Icj87=DN&Z1Xw+sDVp)H;`}uf%fpZdFkt2D9?8T>S#rIt_E*v~EvI
zN@CQesf{<Q+23)R++KCX6jK3o#8bjcdI-hZ%6e5YHB~Ng8Gjs3g!E&zm}rXE0U_kL
zg7DIK?m04hunY5dKYHRk{nORw$+G5qYRlRu5K~N3u`){^VtBGy+8+JIdaxh0ho8Fe
zu7EW!KzYuGYnCwIt3`W@g9<`fj~2{5Jf`WC4!;*FPFPrYGMs8>Q*C#tNB#oLSF^;z
za$#fscIdT0jjijzl6~k$ulbYpL(MuYkI`BU)!dYNe-jw`riW9_L78&d5za^O?Foy%
zMR}<LUoFAn#=t;|8JpKim$WJR)jR*bN)_4k=4Oxp1!;jwr}-Re61KaJ)xl7xDyCXh
zz+uMGJ-!hSs#BE~%V#V4s)9o972rz{zX>v?e0P8Ak7uGk(H?tcQeGb~<Pz2(7W?7l
z*W{R1wJ<h71`^R$^G$!APaUc9C==aXIchyx*>}(E7^UMvx60_ao3y;hW>_lnQ{Ce%
z<$^~;ybJIyi{YH;Q9)oL6p^|j?I;#_S+;(iL_}o`5|(~zT#g;C>$a&P7c1I8eBR)R
zBx&%u(tOM(+NvEoI=YQ%lAAoXW7_dzkg;yPR11|&_p-7C$ia?lCuB)IWEb3H2Bi<p
z-SG@1X==!B^zDf2Hl>lQN>WT}(1Kntsb2|+nlm`%!rpemb318dWMtE(ld9A`g=IUq
zD53xqdSckUt0NA!Qvy~327?vHQ?>X?tOs<Xxy-zui9LSerwuAFii%yqjveKp6%`eX
zvJpAKPG_!tcct?WySVoXzesgD>jucC;fXrkE^BBAAA)OvxK}BL`~E@ZGzKL&kf+lF
zK(g{6z{OPnX@R(ybs#%}Uc1HG+S*}kwz?p&5aL<B(bXQy2f|4PH#av157g2vGRuq7
z($b5K&o8`q@#0>8j>hN3#dPJ&dsp44%ubM6`aXH`9@oW{BG_PVc9vcZEU)4aarlL$
zV42I>KApcEIf<kA@?|9j+3x$J!~y!p^{5lC_$k>Ld^JhJj6T3dAjWGu<2oAXU^qvQ
zV){2gfY>|zv2})GXPqSfIAdz#Y)d$kp!a^1n<L#>M)?F`hL?}H=zh|>z*K@2keFSf
zd>{H7G=hSfYI#o>7#Vk8S`D<ftLW;EJ#cdJy0Xr3>TAlCkj@S`6<&PaaRR-~1M(ne
z=M|ON#v!)Pu6GiG8TEv!L2F)!p*O~3)^AZ(gOVeQZuR?-nhAZ^m7k8<_t!z~dw+c<
zXZskwc9pXnpY7Pb7CqPt{8(5-1k+FP)yUW}+kxyu;K2;}=<{+T;@Y7%nGZg{pRlvL
zb0?rF=u!&2tiifuzQ;@fl(w)Yz|UxFc`P?^0Bpsc2I12gavo>?<#DjRW@0r9T&j2V
zil+R@%Am{(fZ<zR$;3x)b#-->J_Px1F^Jvb($vHREuDHDSb#Z1+e?cj<G!2^@>;;a
zj>Bx5MwSZnOPMx~$7b#!$7`iX*0uH4NxP-}opr~#w?~TddW%vwhrtGViY;5P$zsK|
z@06Nrbxm8)PnI99NP@nvH|C1|;><^;Fnz+8FV~~w9Ua3!S%*HQ-4!co*W@ff?V15(
zcS<1vyi{0o;{#FEZ;$C4F1#OFVO}TU+xO<al3(oL#v)X6Z=Fn5CpS`0b*ONfA_)Cp
zP+>HP=&ce|*NX_Ud*5&BAQ1G1Q9%VK@PY>-hkmkI!siVx=;gS`V)5-gpPrw`#S_dL
z;xdczaCUMS*hB9MoUV=*zMp)+@6hz1fB!gMmd5(b^90O7Up5)fq@}Ff7L`aiFf^Dq
z<N%^AP269L)o;|14|@yD?dJ4HHfE3I?$m70{r&U8&A{GpFZt81qP8%fZUPiv<41u_
z*qZE+grUTahMQhvi+hPYbbvE;&-~wntqY`RL>V58!f<&nkZ)lw`d%sk3+!~}hAhXq
z?rBwTmafgTMt&N^E`8tYXEDX}$cv>2ZZ4qB+OddIyIEd8wQ1t~qaMhgEHn)Rkn}5(
z{+i$3<2rdvHBUVW0WXc&W7Q}O0}dK}odYv^RT?o=Bs6xgM#PlmzDaf}h*HcZj#Zc6
z7A1uDV7rV1D-nF4*W>>lkO(LR-vCjK+UtlDC<5u&OGts`@mlDF9zhRc#ZId>JGKfj
z-lh1m6aswnOxc0F)u6x^0lgu0kD0x6s+>d1pti}TB&^yW$3#3FSGy&BeV-2ZqX=<B
zY9S8`P1>_SVABE;*-3l0O%$}WraBc5raw<iB;7noaGjrDonAiSV<0(S7@gVO5}TfW
z)yQ5DPJuWN9RWLL+?qBiFJ@heUTN^8+()~t!*pT05eH8Q442yN_#I{fK<2v#1iRA+
z1RZASNJ|V)>^>SD4!j&c0(*R$vFc1ZX#%D>^N@N8HuwzBa$jesnkYuB_FVbI!a~fO
zip~U)?4G(h&V%NS525tdMuBLP)`)f#5|qyt4C;yU^lI}&s$7_^T=_lnro=^J;w(qd
z%Jb@Kwx_43@@xGgMAsGAZ+WDW{-j<N7cU)uoQel?M~MDw#j*H<i|pRTm`%)6t)TvF
z7iyFDA$7~;k*qqs<s3$BC<$Nx>nd5wf)BPshWgh>$67!(Wpq#}{qFo;rc#^p)X9DH
z?p9e~Fp|UjbFF!o1loSL_$DecOH~P!N2VtyU+E(@khKFJE;P3vn6_(~gRTcW(al*x
z47G4m%`PFSzK7iHatRQK%kA4FU*cZXuR&1?4dEQ85(d?vXF);zEs5UU2_jXLf)`m-
z??7RwN>CM9%<qqKSx=K2&i9UQ(4?z=ZJImGsF?f&eErY}UFkGjZs3(%(izS|uP3I*
zqF33Q!zFP&ApiMx!u$8Q)+6PLTD;Z|%Ka!R9%P!fYhvpc>asswA$^+&L~!NmH=`|H
zNJ0vf<0XR=gb7V@F<EvK_0F@r^|;=;uof#m@AtM(=$JLuQifE^Y(&CcXD(G0#CoGu
zEFro^rQ|n$J44R<VgS_^%@qTJRUL&Jh9obUT&Vi8^~A>XPa0{1itv*ecd)xSKc8JL
zfm;!{ek?tuR-;mY;R}neUe%tMX^)NJaYzG_jojcfKc>ZP-m5O~;IoX~9cAM;rfqQ(
z%65`Vw*o#LrTdLGiJp=1wm%6=_r%SU@ng12_1G*M%`*@}$*+0Co#w7XAQ-=4{Kx+x
zv-+PrSf8+KU`f;MD*F!qFDhLe@1lC8@pIJDm`Osl=erkKy0EA5jlB#?j)L1^LkD*|
zbt@s5ngF|}C*=#yUsbO4K3Y{ECG)o6b&Ba;E3_ty(<GrNn@fVquygA*O}wAqgV_&s
z^78V&+IU^_J?V&g5>HQbZ>ED;MS1yP`=V9(qk_AMTf4(epcg}TJdoO~!=!CI)l#i>
z1VktUpP!G<HwBVMpsuyYWP%vOc@JbkCO}^X*3Fk-)hTW>cp^sXbH-a^-w`p)b39Sd
zgk(YgH2ZQ>{tIL@pG%(3Z;v=^GtCl90-pyw`-tr(+gA@6U9mxKghWQFRj=o1mfVJy
zT9qzx;ZPUOwq>qpO++B+Z45x_r8SbJ2b6x9r<+8MpCDGkrl+tiJGw?EpOC(jlAC4K
znVy(<iG#@!;QYxdeh4?{c6&7=$@A?!!ag{)NO(F(4@U_RzE9AxhL@DZUAcT&;-=qe
zUbx}OGoC^gVfFPA)?Q7)8{;4Yd)^M)?8x@?bior^$E6VsjY8v+9D`##o?_N9AmdzI
zT)Sd;RmE-oDmK|?6%2GY=(f4&xbZ9%6+WP=G~aEqWJ8-|=WCY0kXh}v&M2LyT}r(`
z?&0L%P!#BLF;9O#V;ooY*<Q+l`x&w<*VV~Y?^9svhLw7)?&1L2Fq#hH^T^_3zR$>L
zPYmMeP}3RmB@2IIrnIML$cGRUSb5>RpPY&w>NZhMF_l{%AruUz7D|ieO4G7v4Tru4
zJ+#B^9-v*)i)UX}wrZ7y+j4A#_{8d`=RrZL3JM|KQG5e7LEH62mq7se?o(}zkdZ>B
znQXQyVi-8}JhSB<TY0>;!^X1;xl(c}8444p_Op#!e=<e(Rt)Utt`}QuxA^v=6*gSZ
ziz7K6Kw+R!fjLR7>0Ryp`Te=}c#+l|4je+=EX_Vt4X7ztk5&&YS;A``<KW=5ZG8+m
z8%TxD-J#O^4V2SBGOay&bAU_=ZV83u-Ak2i&Ne(o%dA(a48pt8w$a5=mvCN$-jQQc
zW}sHhrkZ7iZ!I%-i}_1mM~v|OR}yS~>QCt}F0Z_PAN{5O<P0@$FDLYzutNG>9a(e9
zrAJ;KTNa>T9Kpc?N=L`YN#hp>a(kX`F1A%t2smV!WcQx}X$`)dJrji9CQ!6ai@eUp
zAdlXQ%GF}t`j})S?dIXp-0Cs+k+wZisChX6TL&+GhrZVB=9)231;e(?xz3{PyDp<q
zaNQ!Px&CW1UW<LUeU*YMKPd()#-M$9#dwsYO7g24<>Pm88|!5g5b{ZvS@dADCfwtZ
zY+7kLLN1MP$XeqmIgEGAkXnhRlZxlW@pX}9LJU4JW6m|X*kObt2=4?PKRp~;j=Y*J
z=)CX-8z;MFf#CEECFfwbUPX&6wj`X&0-7BP{F-cQqV+Q#a_|Ew0LI7*2u??$keS9*
zYF6Jyy+7ME_oLXsT*D<j#AN68=KHFGIgQ_k%#DQ7%Xd?!%g6EvOrDY$1R0bd3K5I`
zi%h!O@BB&R?Z(RMNTnwHj*69*gU*Wk?_YPaI4EanOM=AbEyr5>$5a8oJqLwuZ0b7s
zxLDNsG2_m>Qp7MlKQc3veiL1sX<A!W7F_9!JP3ghoxb@e@A5~#y%z-HH-_0f0fw)X
zV$jqF32~6?7VUYh85o1jG$POk=smK7X?8Bpy1sTD<kq6u!CO%fO+OaHv{8_6Nuxne
zTUWwpRolS=k7cIk&KfZ?<Gsw8OTzEF`(G;>fdZ0Xb!53%H=9C!NDQx~=_L|A?W9{p
zri|+O3ds)5BzgKzMB1W6b?VaZYBq`LB|QQ~)p<K8KyKriTi11F1Ym0m*#xse<jne~
zx96th&!0)R<Gw#q#j~)tNlnA&;^JTqyb^47lrx;m;H>>kzDayFTzveVvJ@%J85>Y8
z0S@5Qs5=Of1M>Y&2K)Q_gDepRW$4d#2hqI42Lain*pc798eEx6I36y@{#RGUV*FUt
zGxB4&tt~u)_ojBXy^o1m&fKBI7qkdM!lAX;b`cMZbMJLuU*8xn&~T%MS{h=>$NI}p
z?2TBgsXe(BGL_PuUH>ok-a0Jmw0#?2bumCek&wo95orMlX;DN)I)+9-x}{rGL~>BN
zrMo*vT1n}ik#2?_7+~gikFnqHv-{}#zU%(;JC6PDdE5i#bH{a^*Lj}TbstN-e3?=h
ztx?PlEM!aY<aC4aWPHf`FqQ}h<futhwNj?h&Jw7TN%cNGtY~07AzIXdD6*%bSQgki
zOMBxU0O*D$P;DeL@CA0AE%hcIuW?qKoSftm#}8nfgA3#Cih&!zC~w~;M+@7gsfBz+
z+>_Bbf;%LDa-%d)yVf)+UvnSdWiBdxc0Qt+$<Ze!@&EOl{TY$mn*<OnWu55h^cRjN
zSmD>HlOz>YmDxI2Oc`CC)kKwYHYD#l6R<~QOf~y!7(1+uCnkimagV{xN0q$sNe92x
zn57%uSDTK!JX!)M1_11p*`P}N<@QN;%S@W}Nl6@qJF*KXT;kDy;>+h-oPZDW!i5V!
zxhybXx^k`Ibb$5TzGZ_`oTy_Lt9!Nq%Pau>@I;(fVe<K@QukH|?-!b7FSvd$Qvu6F
zBUonEyg54;tjF*m!{g{AVL3o6;^X`JvVhsTjkifISLe2`^j7XN_s7P`sh_t?s)9C)
zPtU)?H7}COIQ9qJtKrQP2kcr^pn#G^$i}28GRj60x})pz?G}60G#eTkwpTM=8)`(&
zw=K;=wB^S?z5un$BF?G7JpsZ|IO~3odG~9U2=#Ky>5`*Qx1O`QB1cPOYTVsBH=x{_
zi7uV$IJ1(Xt365Hc}mKx9z;M<2PxmR-wM6SSodz7+C}n7X}hl4hcRo7TE4pQvJg0`
zKtOghMHKo^y=2Mxf}eP$+8{X@O9N*7u|p%)c=}0zxLlqe$foX6yK!BvSxP7u_y|Xy
z-TL`<i&)S&Q-6~&>+2b#r#RgaBM9*!qPZcf08$_+le*IFlSEu&Pi8tY2Q5ZhTu1Y<
ze40QLD%dgTh?K{f3hZHrNr6;@F*_W}xoPCuZatQV@mkd-c8kQt!jADZF4YE7>B=x_
z-hN_|k7-)22Ho)!)L4GtOq7_)i}=_=^OEJo3*+qtE4Ic{9-EncgaqX5ACU*UQ9A>s
z{kX%*I?b1(lfSd<;p->^;d3<TiX9<~pPZWd?TXzMhk}=!*MOZywmrgZK4^8$ja1v|
z)<BlBW5s+5?h;beU#tdEWlgJ^^%ms@+hezM`=!B<h=_<rce$VBM^Dq!U&wn0`S!Ok
z-F?&=w5nd{R_P2^=nhv&Z1BF}I`^<RSAB;vORi9_<|+#$=i{!0MrU2#1fmBBP^4~4
zDI>cM*@JCyg5?u?7h9obE!)UW2kg^dO3e`UOb6gMH~nZd_{%c@uL}+fF!C>1E=`_*
z<ZG9%be;}b=ugcCu`p&Kp2nNy&bMsXbdLL;xfi&Hi_pIGPU0){(~EByI#Iw0FCD`*
z!sV?Kp2Lhi++tQrc{PF2*VEe`VWeZMO6ZK?U7Y91?u;(#j)3H<mr}#E6dFlsA37o7
z!f^u53hB>e7xxOM@hj~(;iWj};_egF7RnUTSo_n<m|_Rex&oT~-ToJ9?%u8AUt@Xa
z#Zw@E1DItp7T#&70X$M+3{rzm%0V;)y*U)z9d&&0jN}BB9639sl#xN~b0W})WXgvD
zTsRuon~Ntv!o^t|9w1H&;EGhK)q|sh_KBnXx6dU>LEaRp+1VY##}`QR2D)30TE#ti
z9@BAE;52z)jR>-3A>;n$1psxTmkuFS*4X6a95v`U34<miD3aN<@>;+(@$gA*w03>H
zG6>t*uH>}N=ntKpZ1DZKGZ22K^|v^*O|6q*eW7+F#kcWD1Q+ytL5NPh*cxQg_;SY~
zk(@y)ym#4tiGQ5nXN7372jrl$DAn^=>=)6?i{$t7D4*@S@4U*(%W(vl;=TFFM7TR#
z>bej;sE2W}-VeBj<yxV5QOKK5W)+qPEv85Vk&=hV?G*-4X!`J3e|mR}EmE{Q$Dbo|
zQXbr@t=*LYDV&UDk!v6oVG1l`;YR~5`vzfb8tnDLf*147JLcOj^U3)VGf)eRSJ>Rv
z!CF<M=6zwR^~|b4y(@C$^fnb{Kjr{je3H*>!OvK)jo*}xy$+APqTdp*)U!Ns=l0cr
zDX>xNk976(x8^(hUN`!%&hG;ZL%r5~nf<3%iVL?=Q99RKzrn!lcR5kq_N)uWHLR)a
zLg^4~cOLnoiuzv){ejyrsZBZScYe&6d@`V|Om{^gWwEBP!zW406kf+Jwm|t#&<9K@
zq{a`JS=H!L;ABr+Sq|!MTR8A7NFS~VdTUl0t7U8X1Z|>FP)7uS2sxUC;$!6&JgrpA
z4r{&5x?=AD)m&n~WoWB89{l_(urA84J3_MnM*R$><lVaq{`G^LM`$9PneygUAtB91
zpL3-hJt=D3q^zpfdaB2Y%_73twe$u_0D}&AJcJvrI0eMwn-awGP`+6c1X~=ic%-f4
z?Bukb{<Dezeef#)fZb@n7IeW$zw%naa}pr=eyEPF!$%%tWx)D0mG0D9?zC(%+Zn-e
ztNSYm2*=RY!j*wiM@(%CWJ<%%NZmy%_!Qf0djg_&mmgd>ysxP^yfi@Wxr|m-3za$!
zrGXm$hVHm(d+a$XSZ0!h|J8-_I`3{Zlj|rAWDRt1-o4cHsav$Tqo>M3aQ6M{EA`G1
z>}pAXa#TYjkO-Z%wL!6$z%9`Ss(~-{oANU6nUmr;(Fh@ZDIa&iBSHOe*SaO0j_Bc=
z#;?44IOkV{keUJ0C;Y<e{Czd$cV(QA;wKONM){XK-4OM-DtpKd=ia7T_X7BuSXjsS
z-mAM%3@<!-&m)wsdL3{yl!7iLfTif10|Y>}TJhZG?oMgU7HDCK<~9mSO8%`=gic4)
zex?6DK)+@EqIm!}ygqS?(7684Ief?O<jJgCjdvX;kK@4U#b$ETb;G_i(3evX*9Z;@
zk1g8HKSsX4R#KM2qcEXRzvbFYuS7AE8Lwxl>BQ)oc5+gZ`7LtTQQ44XZ9H-}`~v-j
z17Bn{lS<MHxKnaaZ_0iB%)nQ#J~o}XxUx&dr&)jLhHcAP8d0*xL5}ve5WwyLR|*A^
zugtL1)MBLMg90Mo6Z`9J+V}-g72a<v@pmZ(A#spGXfIz?{4AEyKYiz^^9jhsl-nce
z4pf~wZvi7>wYL5Xu7_xy!)MXKsUmeylwNFg)X|zBvsb7eeN(?GwQKK|dum%4>G|_-
zA4YL8vEEPuNl(q=4)&2)H6hI`5@}W5H4TO+l4;bLM>(vH>#Ct<Av(%YT-|D;vF9MC
ziHL^Qb#JeB$?xuOw#D#40jF)yA1mytvh1<nOnhDUY}Qd5i_2PNk;62|u&EXryc(l@
zAd^lJaEzL3X=-k_(ixT5w#roBq&vIRpXz^jSTqdAfR~sE*l)g=s3m977Kg*N{Q?3M
z)-x4BA63BwO82ZEhvqjvXhJ<KyC&tCH$Ia)dfN{)#R2>FXraE(vmn~Seif%lJmqYa
ziAhJvpJjl9d+|X3@}kZ!^IuecdOZAxaa<DV&t=tQXm#Yo#BXfioeRxZl^@6+vVLGY
z+ZHxjXYa3ATIf%VPjcOq*0Dm|&aULDY;=l0d6&lSM4dh(P9!k5<pqbvdi~R_qw7|d
zZ)p4g--X_x8h%DRCGz_91xite98gU~&p6YaHSW!c!Y5;W%qQ~u%$utoe4O=iCnX75
zKrI}=*>Hu|QWa@jq2&p#$pC<xAkzKr%zEO_HPru!#{H87@n=@|m*aqxuN}-kX#TBd
zHI8<3bMwiAc@S`-1zp2ac@ybo7;hwUwl?4q#9|UXfLBYo!g}&o6siKCUT@HXmSlA|
zs9>dj&&$(CCT?aeesC~86sR;JH-5ikJKw3eFnd0IMJGo|4e%QBzz0v91GAodX7~`R
z4JdG$F11=iHeByYk;llBZX9d35yT@-Whj%7S5WZr&b$oB@SCK}OQ2rpr~)K6PJ0TZ
z;vIGm@n!ooy_{~?8Pnd^*EdP=^M>PKP-3zCQDQM#FU{NsR8N+(rIi(({VIII#OG@o
zQ$VC64?s&mT%YYFZyXa{RcdBG*I_~-Ito3&Rjz>fa4EAh0kX{Hp33=-_}pYk!Wf=T
zjha-q{Vhg;x!zQNN<PB?wGf^dn1J0%<U-_aA3_t%_|5QWKaRSLEamKxQ4h_Md$<U-
zV)Zej5I7|+#&H9tg^JHo?qd%<$iJ7YEHV|kv$k!!nLr1T427h`UDLiaY2Yb;>9lM+
z{{iT{W}|ZlCi_oT#|tNNxY2OS5w3dsfCHUkm(n2Wo95)79*wJcJ;PI~-fahtk)jv!
zmyDcN1Nn$!`BpX!EJlhXV08S!j}~46l#L_9*o+&So12*k{C@KE9mAEfRDT><%*Ep^
zM7y`e#m&74fCd1;HNs$1Wa7}Gg)mRki@5rGwmpKBjO?nTBcDOnOlClQ{1aPS*9^8M
z(DOK2YF0%|mi9j5n!(0SSOm2D3c=M1o9UPAn*3HV9KgT>w6E#gtK7S9T~TXHtgK4q
zmT-l=)iK^v01b|zKCQ*?T6K5-`gddXH{s|3$=)<nG?aOJsq}zpV?CDQPdD!8{_h(Y
zKqeosK{qe|B#HX1y!-sQOzI$WleiyI)BfCV_aDc>YlZ^|Mw>8wnOA=wQ~bq4Bj!g2
z;H`v?sLwy=#X2uWzmFsB4v~=;|3MoReQ**kqx1}QPkuFL{47EC`KH{%0G8}`tl->>
zpFFDnu`4OYxN3EK$JXg5tqlM1jsG6ke~;_G$MxUn`X##ZtHoKbjwaXx?hSCP_W^>I
zQZbso{tt#Rs3b^aut^uxnifuWjJs)jm%K|SI3Xc_bG9?RW`7F+#4W3i!^cFz_M0hr
zI@N}PcY5B50UNDo(TV-Xm_8mI%;9LA?a-B&2;cw6W<Qr0-{ga|O=MG!>uV4F5OTw`
z=`?UQi@+&dwpUW)k##IYL{J~q$q%#&sKB9}<(9y*+vdY1YQS<2T@ic1BE<FJs`!5d
z)}Q&^6av66bH8S3tlTPF(Pvj3lzok_Me6F*VH*$w;Azygc)|>F?9GX*M*rMQlXy3r
zcfrXgPQao6u+p|ezSadLU%E7)lyXmg0#IpyQyF;baYW*>UzD2$y3nEpv8PgH;sktI
zgezyk3RF6_cKu^n)NAG%fF{J2_TV%QRNOjY+Z4OMrJSp7Uro`#t}|Gi`d|t8tjp>+
zr(3e+r(5o;E`DGKuAC2bq7FY>(*F;j`JE59BG$?0mIemU_RHp1(A(}h?g&rO`krFL
zE+tf+miZAN^#?%XOUGz%u#}%~B?klo0kS&_uy`Eo9;MmNcV%i;&f`jWJ|xbw0+ep8
zGX#q88fRSNda85`Z~YEv9Waa;aw-D+!~qKMK6dM$j>U<($^fsC0_GVW&YSY<vH1sa
z=O7h;zYL-k&f+$bVPWQa04OPyH6dqUevST>eDlMK$#Q#yD69-Q&Y({?eMJPc+l^0*
zD@`q?TcicWgZ|JsFz~?Iy1)`%kqAb=usFhNaMk0D(4Q4l|JS+qVtn}28jq2K6%0}G
z-kj&ohEfZ%)6pgTDyakf`d;1yV`yA2Vn}-Tdr+V3V(97L+C_1hPNd}uIIcYE+8TLV
zztmq@yzc?HIgv}(#mt6s3N^C9m<zP&%<27ogTiIA;kR{zxmspsxFG{BsFh4Qk4URb
z?p>b83)gu}M*HvM&9}v#fvAE$5s`i4w_v&S_)Jia@E+i^ZSS0z$m0Ml$?vV|l-tYI
zuWfG{NNE8R@C}<b5<ms8!OvL%Ck&YMAa;s~wq)4~p5%?*T~7F<I{$0NKX<*)?{NTs
z#HSgHOS->EQ}LB4LvppXZ0FUU<4?sHZl?HF(RgS)2z#(9Xcrt46O+4gOH9m7U(bg{
zv%>n8GIOmlIqiAZ*bBke&DMm%ICS7#S}WGxpjKT5vun=8+jSl8XQ|{?g%Ag|Q-fC@
z#|v)lEY-YTxFaiiRFc*m%?A38q_p%L3JJhas?x_JT!6oQ&xJ{!ZQoJZGW5-}$f>lP
z&fnbKb#PN<{+S^5r=P{(tn&QM65K`|9|b3>Mzh9BOtKRjeFSgz*0EZOJ-zU|T;&7O
z*|s>z?r`?pckjfsU>;f=LphnrlF;F+8OqsZRXa|S&YLqmh5D^LZo_g%RW`}F-KU9%
zYf*fFYKio3CWKt44CIL}HBRJ8Z8vW1qCtBsDdAeBRIIjhwP2Hp-4`7nf&QOUgw%4g
z<jm2xUBIB1s&karfJ%?HKx)@wwdru}EQ2}+vk^S*bFA&#HmiWZ%Nyl@C5=08E}#&o
z<;G(tI<EUwOe4QGqwSBDnC0^=^}kL44MF+ZxgRdV6u~9Sh3QW7@i>fENE$ZW`3LhS
zHXft~nNjE=n#Fy0F}-XFdeS3jP1uDWw~P*AVqd%Ss*}DB<SE;|8%Sx^ztHo!D~g<y
zG}XaE-E6<epsY;99RWe05PSz<pa==Gk}Atkj{M8B6df3|p}fVYsb)K1lG7O5m%5Cr
z;1{@?X(Qz-#DN>bqVv?`nQz^}ITXZC?hj-sahj2_W8{I)>G5Dwnb}a{G`7%@<CC`Z
zKK7j`Q^e^j3K!-5g3Y*JoVolWc<fP2+`YB?;#VTxv`qvozZy^bJwnrSjp2oy@oA>3
zfy)7x-?SYjlpb|Ec9q%^&OaV<&YfS3LOLQ#2el7McQ+2>5$Xt3&@FNu%_Mi1x8)Ot
z%MI><G+0eCmDg=j9JP^nDk*P*gtu1qGJs^6c;rLpacPxr;`al1hJ1451~iIiD)Hjq
zm>>T1PeU>H48Ys$N<E(MKh<;2Ox;pjZO^Y^CKO&NU@l|T$h}7YsPw9|UhlG1)01{K
zNK!8_PbW!i>5vE2?xLxBfP}zBBkhSj8lK`?EuLmN`v~oWz4ii+gb3oayHBq7{2cGK
zKFm7=-FaCNjFZD5@B{>^Eaz;6ATymB{TfL9e5gt+`>w_(tn2mX>%cmAkd!yMTz2`{
z1?%RuU7I@_t=RgREKzd^1oH)cc_ou~-sCN$5n9pi!s$9N{?%>x$ozZ@6k3Z~iFTKn
z#FvG-@`kIMW)cs<FjdP_{v37hsk;~Y(#J7ozuss32L|pIya#V|E4{9As%S8PXj1sl
zcsP-2gy*V|oDV*JQrpd0FAD!6V;!}Y1N^37T|0YqOWYMn6{p;(%lL|L55Z_&i|_$9
zk3*zlddpHaA6s8*CSw9gIl@81;V`psS}#PJcmD%QsYX{~5+9=DY!K_Ijm=rYJ8|-E
z_eGg&C>P+0_SeaW|1Jm_&ETr;pWC?~qSs0zV6fUJl)C@GU~L?!7icJoPI>aF{!}Zc
zB;7?StE$ZN-jq?!aeo=l`^TK#|J(mTp8(oPviLbXYd2mljHSz}9K?DYO_lVyLJAE=
zOvCVg7211u!lp^r$M76f5VLp5spl<z{s5|jdpe&_Ga=4%p+_?Lwoh(RxAR#Df3_8(
zVgtQgv~do$x;va~HiVDNZX|;RnjmW<;;{4S3C+Dy9C7Y>9qa@9Ga=CA3G}kjPWgmo
zbp;B;>Af64&H0-Qf1RZ7GOua>HHW3~n^mjDR(5dbdE?=NN!fUfb3gw`v>3hT=MQFt
z3h#Pu_?#f>Fs1Wox?r<73sL&|#fPh1g3~D%T@2543oYmHCwE7YYMXtzM|6$kFDKlj
zRzN5H?oH?<K4bhx?z`j8M!a<gbWYbjh6?q)QKga*>>E@57mK#6>UJD%m<_TXXhvye
zZFTY?nnum?UJqD}IUG4zHb9R^!hA341o?ARU5j@{FFwilY?S6}t~*#mh0H^4{{u1L
zeFUgyn7dm0Gp$;YWuwg56CgcRAiYkpSU7i$7&Y@18?`D(v5`JMNfcxdp~Y^ds3!If
zOq$V0Sh^b7%kpnD@nai~k!oiTWu`afHu@ONOCnr#%n_N2xR0kCrD6W&1;BsKQOEz1
zu#TS!vFb^60k{D&*Xwvq%5^)Uc~}IoP&I4-aOtXiU{^-3HxeZurNunn5nL^}J?`FJ
zJFCsOBf1-9qz5$djrX^SS^)kd*y*bN)WE-y62cs(Px^m*mj4_B|JS2}^w`h4E(x-!
zFIlIjR>sjLOa9$#`@zhDooy5X%I480B8UL4WGDAF1c5yZc(pmCX#Xme(T?MY!BB<m
z%zOO&;y*UFTLdd^UQmB>WPTL%Lm&1^P1T>GeUGNQzA!cHvYgva1My+=pz4FWatQKG
zrbZ-pRxKMQNCsB11c~kruh`-T+^fGZ8)gMN;vG~^c6P{;Prl1JO~;*W9sx$yG!PWd
zuT>jZ1o1CrRLu0YGsn$V+QR%<*kMWMF$L-&S2qUx9h0;HhAdO|`cu^ZUtj!##rV(v
zw8=)VnMk>1Ylwu~^htYms#8xK4PO#^e9t>KziMi;;?v=lXO8POC+FT9DSX_@s1`iB
zbwkTyK>Wz>88uF=9&<d@QsMAER<n;PPrCK|<OpgMA99KRk=UT8#N=rmk9~s@lYye^
zyPh6sHP+hg-VxM?{8}=>)r#A@l>pgtPR{yzZ;<)aEavmIL>a}trWrMY9Zj{s;7Tp*
z6Ugk4tF4>u96E-CE(vfJOA20AK{&Q%YdS?y=7R`o0WN%1#_i_8;c$qo#B@ubR7o74
zmA3h~W#isqad**l^YhEhvBr%5#1TT_ju58=o#&yAc}YFmn~a>W=2{RaogNZdJ&dOo
zv>UCnKE#}&4M5nhsP1X2RfuOfEi&BJ|M<>JEk?^>gy-csI@)%&a?M02ZtDpJXP_G$
zeX>TaGQzo#Z9&v{!#+4pPJ4+yMP_Ml8qR4uZKSFigel_>9U?ukR7Tq(wdc)0CN`>U
zd`yOhua6iZYo|tRri=8A;%sGN;Rmhfy_2|r$~kN?q=kR%)D>i%pu=dUEk(86BWRwM
z{xDl(vd0nHdn<KSC+^TCr*u$#WIyrt$yQ+3E9!2(P3}jTZtWd3W=`|@;NI9My{~rq
z#Xs@nfPXoNL#ADb*$8do6Q|BzD|sNgj<8AZ8iB6E&`a5uL@hPP?fP^G=4A!;XBIp$
zcno<8Vb<Qjh<(Qgfw^kf868$SQR9BVznBt|45q$r)Ssej8h~g~0AF-hm;I=&PlavM
zdsV|I1N@=PKx=Q@b)hLok|?Iv#c46(vBo+Ns`Wfs4d(>*_X@!5Onqpj;|Q1pE7nvt
zW&xRkr++!b6WA8#PqzxO#|~QkSn@7;CTybkk>jEU?y0@$NVT5%4(|3+7J*?9L>H=t
zv<nUWOQ+(>5q<<+qA)pZ@NJ?%mb|K}^&=4I17yZ995Z_56OK^!>Q!1Q%Ys`qyv_;%
zl_>ZnQ4cp27-(qYbU3sfa1&5s6#LKn_&1KKmk@ZDZ|_X;llD$NNu+kV^5_$!<;2wJ
zvemT<F2R(_;JwTNSN+Wy{>@j7z(+(us?Fm4i_rS|mBQW!EMXanpmkG1e>AagHw=D2
zVYC~_eXz?`4gjfR^F}Le^+yqf>kR<nkph!Gi+uk3JP@wD&%fLhc);!$NJ|5F0u~!|
zo$H#fevn93?}q4pe_!F^Tnt2A7Vn=(VlZ%c68I%UbX?h95>gOPw~A`aNn&UO%t?(<
z%jB@-;lgpa|MBCaWm=-~G1qkyuk0;l=T9AC=35r3k?gi{$<=gJ=_nCl6`fj>C=rbH
zC$EiReQX4c=fMO@uXI3#MKK+<SUVN2+gLO`9q%f_J8s>`Y~qGqWaM=E`1X=VJDb6h
z6&SO5wqhaa-bn%$WbJ`vti1}t3H^alN=YO4e#pYe)(d{ji;H@TsS)gb60avj4pzyH
zwihp^$GJVI+0(n<c!EfT|K-`*-&Is~y`T83qf_qNY`nd-ak$kT#wmRG>dF)dW`W^s
z8Y&;e8UCp?ql`>eD>iI4N^m0%glMou^I6gE0JoEucDuvIMk`$_BlgfJr=s^kVN0}G
zQ&BrRgk>nxG#z_{^qdZn75T8{KJv0%qP<k3g{z%iV_;6L7LS0e$%oGEypHFN^4t&@
z2yFcE?X6Pup2ymF<Synw9)?lqsj`nT-S3XQ$z8X%QoN@;-7+#BM!q1ITc7byygpHR
z5$J5yOq}%pz#7quy}b%br2dq&y1#Mb{`&fb*Eo1)<NZYFrSpINZ-3)Y<U&BUF;!61
z`3K4yv8Q5dpum~2d~o*FKL8j`pU=R()6SEb$?=cu1HB{o)F*rlCx8C!T--wUr+|PF
z-QQ3CH&*?xp*UC&d}?J3@ri%tEgMq>Kpjh)F8u@VsDp#?9{1?XxU}!F3x5ar{pHy6
zFaacZm1jrdrxOxx>1SlXr>><nJ^jnS^LLK4S2UQ~AQuvi{%7{#2_w)b92ND%{?706
zmxCoH4f1cseQEc9W*`0ybAR&y{u}20E+O=9nEShd;NLL!mvH!hi81~SbN`09|Kke$
z{|U{hX1w#n9_WbwFq9}Mz6IRffO#TX_Ci7YzG8pL<-elNZ-0`JecXRqAPul5Lb-s=
zps}snFMH@eOO<;bhOysLwP_~J?up5Qg}y`C&bN#K{Q*~>EfT#oDNZZgH;j>NSIO10
zIlO{NrPhi7w^Et(TJ5n9FH^GGG9`bo^7L&h1_kAbh6(t~Q9R3;eBVd;UR9UnTqd5_
zsI`*h$py|Ae<k}Ny8Z*vH+*js-n@ZvT1e~xK4jDFoTa4mk)oa+<J>NGX924i$z!Gx
zC52=9cZY4e0pVzz(v6RcC5J*@Q!&AQB4d%;TMtWr@H}M()p1gbJIo$#HY2g2LlnjF
zQA1Ij>_7NzYw%gmEJp$sZ^KTREKjZ`J266wOp?}FiN^&}%8N(Fs(QYa+WxW7b;F0L
z5hHee($ih9uOyrF8HNq!ntH#!a<@qzi!xR@iuLgHvsW+AGgaIH;I=>&Ka^1M9->{a
zOcfq`>*5cvxazORC8$FDuvX5kWc7046;i6*np0{0=YD`2S%33tcBfIS5a*!{otnfi
zN9>my*O*S{?0|k3{WdDAri)NfTF{KmwC%KHQk#URoL8B~&l(JW2Lv_B6YMnwAKekf
z-9do%67`s<adz7o@SNHi(t+MOak6RVLrAdzXrhH0#naFQQepX9Ma#DZ=T|D$qRomd
zX<fE^7C!1`Cyb@;f+PJtS8OBjo<t)4q9@f2<MZbtG<d_cTozY~e@GF&YryMm|Gn-2
za}c>TF^=2+l)wkg*wn#P1Yx7y<Z;qGqrrT-b5!g`!hI)xQ~<su_G)(ivJObF4vGk8
zJ{61Jlsn5MuiW<yB3b~8iQkH>L}G?54_32nNR`dh>5sh1#vUDgCW7;P5Du;@J>Vsc
z_Kp}n4hLkBS<UWJ_DH3NCt5Lfba|VSBFNgCQn&xivE%+;V$M{rJyZ+mRn$$IRTFg^
zn?Dhref@*9CMJSs=y_n_cC@pin&shsj6l@Jk6FE2)28`ukMaJjr(S;a54QMxM)h(3
zu`ky=JItGf#NK|DXQ(Nm>!#qrXpup?)BeB^89Mwa80Od#14c*;=(w(yCWFS6!tp2V
z$|jHLJoa=Sx*}^Mg<TzTs^Knxg;`d0SxjxW0A2x|7Dt3T`OcEW4U19M>@C0~3t~hJ
z9;Db(Sry&Kk-!F{T~XYOz^6k3-k>mX5M3@YxyX`JAf7rMBZ#VwL=TPuRhnCWWHvnT
z9G^KkI4=1GTKMUEfV?W+V#%w}o1|Q%MYv4|0+CKPr?1MMw`HluUKf3UY$b!4B<zfR
z6}Cx(bjODa3$4m)i??v>9g#5FxY9mkT0=4I4*G<;ed$2bDtfuqG&@%%$#Ua>!g>;q
zbE-?Qc#Dq+##1)@q+QiC)1?r-B;CG^Z6p$HI>l|+6hOf}wG2im@(gKmtLGKV+^`(4
zP_V@bM(a}eq3~Cs7}s3{oyRMkBhy*qij^YR%ty_bAME2h;>*{K*2ecX+p%|QQ^WmI
z!_~9S7X@493Ai$apAImE-;r333iK>}!fGa5937qYqr1MB@NTLkhzV#bvX;t?qzW1D
z(x|Mc6Fhg-1`qV1q8C;@55|Zg4@7I|1Rmeh^jzgpyDq-*=J+q4m9LqPx08XAG8?ph
zWYRa4Q;cp2fr@I+9o{@bH-AWvCj(3#hm9rH9p!5j?;#+#3#i^Z(6x!_W^%^RjA9@X
z*{s?RwGs-hT>_RSXo&0r1$f#{JZeMh`lCnGF2lOB>>cUN3ouQ0drdC8dzC2O?Ov(r
zrwBS#!|^|qZk)=ZpB%^+H0??av1T<b=<5<}B?UY%46~D;eZ!ThMz1)KuWd<%EN>n3
z8a8RWuDl-5vdtyq+{}|V$g`O!9cpPNKgVio1tzNcQ~8|p-x)NEDRl<MlVPA;kO{Ov
zMGtD4sG;t2QT*kIo16x1p<JuITh?=GMv(ow>=((zARU;>(I25;doVgO)>n4}RbG*1
zpMS6TyzwLH4`8PkgZigst2*D2Vwi90(hvuj3-JhV5}zPpcXN=tuU$gLRB4~!Zur8f
zw$2}3%VS>62A@OD)#|KC{LJ?46Ner~31K@PVDz>G40A*PK~EKTPc0+|1#C>Wa%?Xd
z#oMdI0-=D*UIe?{H*Di0!wFv1!XI-48pS1>p$uZtaaqxAS<yXN2Jf?>g!b3qBf(M}
zfdpujj&U57Wfjxzgd>bg|6U?KxsF|rICAyr2_iq1{3_;fHNz<JS`hb`W)iQ(Ce;M-
zS|LPeU8g=UTb#Y;Kb<>hDqj&%f7_>}r`0aMr30J4lmLFJYuR&6d@P94U6xFS({g2a
zxO@ywkgFl2IXUS=>(@xQKP|ot#)1mP)1u6Cs+O`uO%5r+g1jyJ)ekm13#=)xNOFSV
zp?xJEOiS(WAN}Yx;*8?s32wX2DfX2l1;K-}e$PmMWevsN3oVb2(pE1*o9^oLkBI)p
zC-Z&SAvb;8zwvVreCTT5KpGDgng0>Yy%>&K8)UPr+7E9CW9QHJ)U=-s8$po}TR%kU
z>sPOqLqV@k>k(>#oNvPEcH-KL2<;%=<vfi&5u>iy;p}DFjnV9U!&btZ+aDKtwq5`|
zO{baVqK>b2dYt-chKjkW<!RI@T2*7PD3@u37Kl7w<+-krS`2A$z}=A({Mc~}r~T3x
z!<{nla@j&3Do539wG_vX2T5^M{vPjkxRE1+FXm*nB*<`_aII!Kh=0H7BEGw(&A`A$
zbr6ky{oy{R!wR>}9EA}{*Evcd{wg|G%}Lh{Ywx7z6VPRxQvRV%Wc^)ag~4!v_|b*r
zyAtzVf)JCF9F+Xm*{dHLCtBh=0;`K`iMml7bE#}t%ebQswf)QmZ&w)5hV}f}%3pE7
z4!QD<+I6OO$1K~sO3g>Ow4D}b_mCh)O47N9(ohLFS&!Qfy<gcX9nztL9j%hdTV<ve
zRb{3)Tl5?bc^BdY-<3+W+WR3+D}}9k!#Y+Vt{Og`?;FmqU8`b-YDfS~#ftAWW#xQ7
zrUHkOSa?lm*f{);BX~fl1z`12xc=F1UV#64FPCE9dDg|#6vOtfDu{{6SBT@Q06Gto
zEC+WnOeR%%6$UX^nvbX9`;kfjjwP9o{liK8fykq!7c4agYl4M4;Tndu>A!flCb%&l
z2zg=-hm9N075(x87|WWM6*06dxg`p|@^+vDJb+GAM9^VJC(rjecHO68-?mGHB@ebc
zy5fpYd&zF2nPIeUtE+!F?Y7T~DsbdXhusg+2YOCd9XSz%fBn<*X^x@8VOjb6w|<GS
z?9W>l4n%gA!@FA4l<M}T{Ef%b>?aRG%Mn3f^n?LIk-v#-m5(FVb#7#%u;(sSSVar4
zeqE|YR+%}l?!>f|gR54D_tvgLe9=|bo*lOR2B(&*U~_D{eEVFn965<i-VfZPfRMdX
zjndv|Am9k)51BKB9TB|(a-zy<fou5*o|vtK!i|?yBr@MDTg1vxWY3kmfz+>QScG>y
z=3{Awv}~mv))FP@0tso#vOcB))$#R;pOw?zR}%)wxZ$DxT!ZD%P22`Q@k;8v$D}&x
zgGVrR;Jh_8l+EXB00PfzXfxiAj5n-{#}S@b_rtBeZoR0~h@jL5c&x08D2(D-x67QY
zeBa9-BwVqbKlZc_>?r_HLp`Rsbe?VqfO{hMMpIU7T|!X6lQQjt#hho!uX%E~TdomG
zQUCtJm8logu8&(~MP@_!Q8in|-Awe4ChXOlfqkSH*(Z7^nNu<4XE2I$2&~n)Dml0{
zNO4HU*bjAzfF0dC=+FF&B}yi2Q4{#bes%8_5p+rDNq-nOHA&R`{CM6M>jPb@OTWBi
zD+tnT5L9T0On{&zOjwZ5Y2hP3I&y7f9z^7c-4RBNz{(sKkk$D)9Y!i`9S+}$9$v;A
zM$nxg$WrK~n=y#cri?gCp=r6puI1pb@4EfUqI@i`BZeB|GJUS6yc<eJ>McM*)X)Fv
z-E*MY=CNp|7g>9Mv%n3=ezCy07T?);a%4XwfnR<vkpQPJo};{x(Poi-`{^%U>g4yR
zUMt+M$6wrfhPS2P6^l%=Z!a}F8fE`hOa8aA<ZT}Q!<da*H_R(E`|}a>V^VS@-Ea5W
zsh6^(HxA0;7n%Os4}A;a1q;7!)_n#z-Qpl%_d-97m6^otz^kNVoHk~CXSJEwK4F%1
zuzpZc3_oV4nS6vu5#cl)_*qlmaot{_IB`-t)ZGK@xqj<vdAo??$}p#8<!bBGXT7s6
zRC!SFvZ8^{AC{v^;Lhtur8Q?|=c%VzY&?2dIGxb$v7l20ipggcQ=9EYjmdWr7X?=;
z^mq549-;ix6Wq8C4x2(`n+;dTA_VIqv|TtI5cWeW<2@75!1~)SA1C<xuz*nuHZ~id
ziY}j~b6dZ4Xjm*=jCQqKrEFxmeht-t#eO1Ba3?E=3kVT7MRMxjjmmO$TqYaRc64Vg
zUMcdn^}%cqZM<(JB42afda}mWIpLB!^kM1H!Jloar<InYB%f7N_ltwC6Mu(DXzvsM
z+=9N|v@{=SQbEB7yP#jZG*6S%&N3WXp{*tl_qV3UtYB=1e4OOZZ=C*qC420+ROCCs
zJ~$NMdyz3n@G}4}#d}~3D=MCYt03p@Pn09>#$aKs(?<4roc}c<e+k^jjx&7QL?Uyr
ziSS6Fn+^*l?t=$|8dfw!LWlQ!S=={2wAySH#7tM2VTg;3y7R0_nj1;uou)SU7oMKT
z;+%T*&0Cryt=vEw^fd?#(4oe+3MXGug;&BQPMm5nh&bCB1g>62R(E=W2QgKdMNBEO
zq><1DC5$pm$R^HPpY)--dmzpCVF}xB?LEb}Jr`ru5_y1xUT}n8C^qb5jvY0bkDCsk
zEWg|M@?5dLp#7-GRoQq=g9BW&5Af_@?FXxUS(*B#-kn%$Hz@JYy`z=>N?W@zBg8_@
zR+smNk~2Ls05Oj)oDQYRyAFz_a?2PAYx{^FopL!oJh(HeR<%z4$|Qc+L)cD7)jn!6
z?*{?VgTkvOUmqWm(PAq<u>Q1v_Jn>*(`z5>CDQ^d=2VkCA6&JfcRA#0v$m@P+r_Mp
zAkwKi&xTElV)tb`A~~;Q>j-J;_GeU2?dd~vTV7r1f?12jT2J|^#f%a{R6T3$r?<LA
z+Vgf6$+2y4KRN9vP^PH@t$#&nnb%^fIfBtJ!P6H2j15q#ajXHu%fiHRNkg#zDMj;M
z%SPf!0_CU|-Pj|8M0K!RerMV17LuIi7Sr2no6hk~kQ}U4>nOA56M{oS7A3aPd5-`9
zZ}1LIYk9Ge<k-%j)?<C^%Rf4q_R^1*1d(J7q)S8jbU4e%VYV3=K{WzEZ`i(}Lk=u&
z=V3RfvcJocc}0`GKlls;JDk9g>_U24YPt_7t09jt+v)tJLyIHx+t2%UV=NW+5;2#3
zXenD0ti?+#sy%dnzj*cGtGsIa54fc5H09em{q_Xm`ygaNpG;3J{w;z`MCp*Wpqb*>
zB)%&c#05Nym#YV>k+M)_6}42&iS3UTbst(rDiM~25<=+VX<+ZehwP!3^Yy{&E+ag>
zk-aaU`8~i_<)2N#(%mgYc-TzqShZ!X)$|2@MwtnU?`|dE4J1R)q?oOgD9($=WxZq}
z;lUAI0iedY#Am4~wE6Kl!!!PG?#8T*nXCsOdXJJ`8x7b7RqY)#qh_K*?amKyvKajt
z5=3aI_S4rGQasl4=mat6<){Wyq08T0P_WjflJv;W%oit8`5YwjrmdlQ*~VS(c%A6I
z2e_Jj_o#AXS|2G~ZJ6-Q@W^!~<C>-}7)V<vanM<e)~Z?|E61){4P0_x^<mi-*a@w$
z-&;3-2o>FUY>tURgbLQ#=(o1iP3!_o)|gSk-f}@qad#<co}7@<l$Q^kZ*DofO1!*V
z6e~2SQ!ecwf_JTBueD=k%a?IG0Nn5>caNn-BfXGL-t2I9`$kefM-j(0N1NtZNYlr9
zaw8vzS?}-gXtYe(WpO~5iqYZ>4Z36jKX5?4%{w#WuBf0rce_Gd+pvNETg3Y>>$LPt
z3_ir^&7w5TlmjMGyJ(<nCZN6t$ZC$|n@7Q-M{i*n-^|IoI~CJVs2BM;X6|R4pzM&O
zalYeFBiS9#`RJ3x$b7$J@zre7B^Z~<lbqV!(OGzXIl_agodf3PYukMLWLg~`n~IkG
z0GGudSnZE6nQ7be&dX+m;db%#|0FWt81@y7vvt_rhx$+xL$r_PpR_v6O!_o~pz?U0
zz4p+L|L_$Zvb3y$^qW1h`Yuw$=q{qTE6aKi;fk6VHf?7s+OinSqwAKA40f+Wx3Nqg
zZlR45pd#qVOKu++W_MrD8P`ACFI*{V598MX#zjCS6d%aW7BVLIfx*ZT#-dj6n&FCx
zmmB*=2?ni<HQP^0)Ep=9k&S0?!0`dFNcby^mHuFXPaj?jMoHgyj$)j|caAzU{ey^`
zL2%qz=QE$2UI0)KDqY%tI%t(PzZPwpIMgfp3_O&YKK1lyx3h~6aK~_$`3W5Hl!(c`
z$k@Uz=*aFST6Iv!>GVFh0aa%dPvKcRiC#G%6kH`~w5rX0_)5Ho2OaP35IeZMouLEs
zP=S>-l45}AsdX;KoEl`et~^IX<f)|Tva#^<9$!PqHEJnO`fOg4H}3hl*52gWPM3Gb
z-OC$zBm*c(;{=hKhI8bgD3YYHaT418^n9d}1RdN!r*Pl%+9KTV!G@e~l0MFNtPi~@
z0KDvR6-Qly`V;m;Ed8+c!>y?{7LS$X(dB&T2@lUlzRN^3T>K}A(45A}Sm*iH`{}U?
zQ*QW>g^JEW&ed9!M~RDtLW%iEQHL-;0CrwF;$VC*N8(!ae>v3Ow!>bF9vSmylS{OL
zbd&31%dKzt?XSR4j{F-KkkthxDtEU43t&KJ?}@s2dXBnov`|@vo>sm$L0G*XKAf#l
zP7DF14@Z(k%%HbE?s%P|wR@CPvDvmUwZ+i{tdGp{poN6!)v{$xq4f$byQSE;VMdHb
z3c<+4I|+5}`f=g8dV``^is@D;lqw&_E*Q~36;CV3uAW;gvs()`rkBUE&RI3KCmW($
z^T8wrVc$_FDrl*x$@SQJQgiX?GZ3HekqgyHLND<=xidKmVpMpiG#Flz3?!Bf3}7Gw
zLB$J%6RnIb@H$}OhpRCpb=du^?5P^eJXu`=NUDWf?A3RVPM(|E`4BRlcfr#i3<)%v
zucjNia#G99CULDmmro+0Pqw?R+-!*51$C1<Tt|0**yBK^=k2ZMPQcWk+*c+lkXkgh
zRxKGZ;Q&3yH%zY`BgE7)?rOzbF0tAg<eArGJ4FCuum{dH1xu+j`vGg%uk2N0^`Nc2
z26)NZA6`23{WK}2b^dFX6!HdejBGFmSgF+t8m`7zs92VcSyi*i2=AxhSKmuKjXTv{
z>FeI}S07%JcWiiZ2G`F)cATtj*%;Rav|Wob5S`&*_Ww;&7jw98Gr2$C3>ul|z1uLe
zqsvq8o)a?5r}F{^^K=VEI?C^{P8io=*_b}?6iX=`fkjT1MfS0*PDkoP{k_PwNO06-
z3HD2ci6t<-Ca}>}f=adlR=}ZywMxdIo9K)OKByT*+19ieD{T{D99vtE0m3;ev&qm8
zv@rU0(JyPGdFKCRZE)svFu5xAp+CvXk2qr7v+<lh;%L`jCeGp7Mk9KYePiJY^bV}J
z+YgW)Br@q9K_YXJ3j+rMs;-?p_^s)kd-N*W&a=c5Zu_$lHucU&)A2pY1h>v+isL&h
z6zmN490Z8q6fR;5!eLJs&J|j$kCaZh07DPtx1C*Wy6DpKN)Xu*lrHB(vL;t`mO_aC
zrKZp|LAP#qRI9_7l}=jMMOh)*=O@p;0%tFRzkD$*rX@3d$4?jquYMRar0vY$uvVk^
zM~*RAa@+2aEL^-Rdh+hdM6SlT-4@$GWc@2#d2<&bEO51MTQ90GHK+=lVHsekHU<s7
z-bW(4!`S9`1nk$gSnWWWRh^#<UDUQ5lXnaZn1%}GHC2L2cCiVEN}HdbYzD8mL-e%!
zDjT8vzsU&9_L~Qhf<QlWA2_<=4I5RzMV9{(be8<Y;Cu|T2H^R&8H1|<&%a;$zhyr?
zgA=wII1WiXfZKNCgQ#c_pqFnBf=RHr=D1SH?GKD}M(#O<EtG|(Ay)@1bz;udB?$7R
z)nYwxB2F})8CiC2or{Hbp1QjyYQpjJl?O$XekadR07zVrZ1<{iRGPFudMCnfFn8?E
z^ONV8Ekpq`xDt(nwPbASP0ZOj3c4{kX$4p4!A!^b30!gF3CpSu&c1v|49tlhXY7Z5
z|7*DX_9q$3$DIKpi`c)A7aS3Fo$v?Hwu(L&g`=?SCz<S^pO^0~8P0|JTi%Z<iqlHq
z$8gz`|NlOFlE;gq?tKpRrt)Ch*rt}EzrPnx#qhp-g73wDKjGW9{sp7_y9@swr2jY+
zUjJU_e<RWlAlkn{_21O?A7J2*+V+2E=STNJ^VV85atg?bzBsO&lE;*UO`|M;R7EwB
zY`{+X`vsfWr+FO5(c4{J9c{*@nK;L~^Ft2}*H>oJ{AAqMwlgy3f{K?cDc6C!NwVeD
zg)2pJ-n|9`%8)>Z)lmuXf~Y>i9TkYPLG&^vYLr`U^hnYvt8*wDgVDAnmJ<SlYDRIY
zz>T60`Wgd(3&S?iB3&kq(uexVy~Hj`vz!Y6mFa}#L6jC>OVaw<b_<t(1PUAB#=I!D
zQr(?Ixo$bHT5sWFqIcQBO0jIL`|ilVlG&$sUJPrAM&0o?Gp{98vWddJPqy02f2nO5
zorxgVtO7R{lA&O#ip!yS1Awriv~KJ5#7E|3BZfB9fqa;iI{N}A{O#2-zIeCI4-KDy
zC8A-WH&v?CGHsjNwecKZ6JVURb48TC>p2V8{IY<mPZES3?|$AFGT(PozyNWCLbOVN
z>Zcs;VixAkJMuW>()CAT<|RFM2`q|1<=o1La8sQ1kb($d_NI%a6>!FxO81)GQ8U0J
z9*}nB7Bt}F3T&li7p8|vPQQqc&TxSdAf`L=O8bC;1X{=`^3gRwUjok`L@7I8QC64-
zbn+=0+fMm1-p$vp%^L7&`!9I>3sm>2`bxiq)cCN3mbXMc`=sME=?xmV>SYZNL3eGk
z`@yckXg&;s-T;*wcE*E8vj#7Sf9e&Ew4A(p@*E|}DO#sTrIuOS+=6a<>%$IX7TG`e
z7vH^M`2uvM){5u5KK~N$e!HL=+whrdF`C2!qV=Y15e2{XBWkcoq-95yz+f>=5@`*f
zdua9k9q@QTG;iSd3k|81&vgc#yUkh1JqNyV>)Uo~<NJ)<aPW)uz&x>BtKKY!k9!%C
zz*9R6dXy8tekV-7Fa5&&&7e0p`9I&)U{9}R22EY?N+EEI4Ml?Yt10?(LH9iGn0fK=
zqvz-JK#lyl163a?Oa>Zx9ipnBLYwzWEXK;leVJ(Tg3(%LxutFWM?lWd1LJmayV``?
z{W&*$Rj0#^R$N;iLl-Dwv54mvzVE3Z3&VXO8?#SaUNN|$cHo6xTo3)oYM86Yge|_|
zH7g4xuu8va=~04_LV9Vvf!{IzdyV6NF0{lg>1a+|`HXJ;ecnwG=Uum3_*el>pw!#6
z^=BoQnJnm;wQ%Y_;IRFQyG5#-GVO=7_&{W;!!c}8ys3?(YZcQ$xE6PEf!E-$xWu}y
zRldfQJB=8|Sm^DoPs+nQj%ak`mcDrb8gv0O*ot@||AWu;{`{Hv&$Bf3ZO%dNp?Dou
zhK<1p5@pNcJ8=*lcb;9KE<YJN1Igf>CmsNF7cozq<@Yq@8HF!A_mlnMOC+DST-6OI
z%+}su1GvGb<`ZXVm={Wrm3;)mUA^@{aGU5!mrWqHNAD~HD%V~q%0U!#%i6zrMvdNG
zr2_MP*n8%|Dv(#N6iH2jNB5fNkq!60ACF4eaD`f_J63ts(}objKO3s}+flaV{pA>w
zxZ;}MG!v_$rBvJ}@uddcs;K@WHT(~-43_*7WZq9J>OcH^r5|w;t5P?R$_VfDU*a}=
zcxK?t#j8!A%T+tmt_pSqD#V4Wbu+3b9LAd2%EuMbR%O9L(zx#oKnnY01c5ipO@0B@
zbWt_{&|;)@1dt57Dy9GV_x@b(^aK40$3fj;?V7~T&Z{y7VUhqxcQM;~01Bk1&iw#?
z8T=(&v&3rhU^{N+TKavbw48bHbvt${E}i|d9f!Ye(&nvCI3k)~Qdz1V-z{h)^xx_d
z%x@be5<Rp|dHZ~7b`|(2fbk%$sW1VQqXJb^ek@Z!^<~~30W;h$@tUhnR$F`1F}(q8
zwL<5SFsug<_XKf0t&(6GR}$z)F6<ImZW1|IxwxELt{pbdr~Ghhe^?*d3=TCFo%^=@
zpwVc~V41~O4l;;Fu!X&Pg&62m*-v0NPJj`p#z0k!4ZMl>xktVboNWmgl`^on=CR=E
z%RtcmOp2ZWmtPOCe>w~H3J5U0%5H8Q+!MoT*=cF2SujgDVkaR!VJV=zjW6xD??fK@
zV1m!<jHhsi)p8OaXSs9(e<NPqaz0GN0T9K^w%>x8_)*DAC81BX;L%^Jx_!d{>YH2`
z3<_qn{3O%7YB6m@T}fSX44l$r-Nu)sL2P)pQ+A4ydUG|(hmDg1r+}=~(XgtB#a&q4
z+-w|8NbjzWG#f23@%2!g09Tmts!S}-DA*m)Tbon8R;88z68L-ZRs}eHU-Ty}#|hH>
zI<zTHo1}uMQ$0jQ4vs6pXawvs`Z1{y+HHfB{%t|PY6t?Pw9rn!BCfC52;1wT4Mf`_
z`+7lS4fh;)D>@@#@NzkDta@uR<`NOo3h{gFP5Ow}BCr_LfHwIN1F#T8g5BxCb;v)A
z;bn7;?>%Hd%*4f~J|`5oMhOy8roFs3ZgfJt^ITNN5fGI8Kqw`R_boAujrZ?2TAa@)
zB1oC1&!v!!zQIJmd%ycVnTGl6Ttu2tl2inHA@Df1p5q%opWuNu8Poz%?zh_Y#G*GX
zLLkwujL4eRNOWtcgGV+&jL*(3YkNrYoeNq}LGXpSn!>!G5dFNpd)|29SO@dwP}_EJ
zGK97S(NM9emt+);&nI|l8*)pHZg0jQ4%6<?iSlVqg7F0b0P9tLG#cgK0oj41ZfM8a
zn@D7je(ZWEFI-8b_ij>&7lVbIy6XKH-IIjWmxzS7<qWh8sSLY>QRC*^$_BGIIz85|
z_x{MqMDH*#5s5z>Oqk$bE$PD_=n};q@^62<&0@X_GP@+A&b?S#pMb@LTVu&{HVl$y
zUeWbk2HHRIb6WMbvmt;ifT4hzww*k9b-i9I1h&$s(MsES;^liLG)v&`<+zazlrr_(
zQp@s-lAj1z7Ei6<EJ?+5MG+9pW(2GWoD6k-9`Jshxy4GTqKuj`%p~r{PBk#18%<t{
z(0p=V6W~Syi;zJ)#aa?mIW<7R$)xa9lH|y#-LGFbaq_I{LbL|{yL-!#60-r^U9Z4z
z6CpT9a`Iy~B%f6^DI-P9m&&TfCh_+DW9JW$Fi&3rTpA{OC>K|h0my2xdLYz9dP^y(
zfO(!Yz~nz8ewz!JOR+~NBeR<3+qapQ1am3CRPfpd^;EO9c8PW{6R4OAui`KF(1J|N
zi_O0furSH#gBEv&XNqmv2`#P-XBh7sp?6rOpTvJJ+^KvGcLxiXE`14iLbz}j?4cPC
zr<7OfHS{3~kehe{E;lJ$==EsYyO+DbnzArA|B~epfj!cp_B`BRK(p4JNoMz90T`7L
z2SJ!Ef|-tM0!&d9$V2K)kW!wMQXZyc&?mid-x+|v-)dJ=lHSa%WF!Z*!EbCTwl#oP
zADljUJ>ZKWg&B_C3Fp;IEzh|2J#6^y4Z~+{u}6CxT)=2u{2q4gEJ|8z8%uuEu~XD?
z#?j*VYhWnRutoU<ek(H=j3fF?_SUBXwcFL3Z7llT!YEemS%3_(4j!hI7EXdGK`6O_
z%?|GFJL-%%87cOy+xiDnlPAM=;s(ciiI$}DiO5S?XuwQ<j6wwtq|=!kRXRo8Fj2@U
z>3u-T3!;j#Z^26v<Ja+FOW_g}dBEF(*=rS5F?$7Yh^r<@YVrW>0-rEq6Nk6?ChQbT
z(GTknO%P%dILqq$yr}r;tWaf$R%r)95{%peLH)frDGoY?<rNEPSd=Q06>Mhf9A&jx
zD1DFAbte9ztq2LTwR~xBAiM1apmPeJAh1TJ(T{=H3hd<VrV?ndbt&hF7cH127%b5D
zV?6yHXq|)X0a@gVg_AR|Hc548jP4D9nIX7tohwIlrHh@c2)8Y1Ujf0Dg4<+y^5{-l
zPytx%rp5HeH1u9giF1VCRMBzYS&_c-0k*B7)N7BdMZs5c1yZF(okDoiYk@<<pexmZ
z${Y+8*%{OzaOai+pV=*PU``DpssS3z(^|!4!Pl`MtgEg$0bf%+@Xn{2&Q=aFeJ>fU
zw*xj_v6mxRVK>WP16=Hjf?!0KRL;dTq{&2a(UTSmqoxI*dkiSh@6ln_eHO+mZ6}Ap
zQ4=`=MrV`sxVD^13sCLg(q%JOJ8MX;M5^`EUWTLKI+MOM20{oKxCM9O2k!v#UClBf
zHUG6oKODT2jvH`Ov{Mh{p)d+b{4^XKZBGTWDzsO?M;i?GDV%NwG5o@Zt2=_a4KJQF
zGW6~Yf}q6Z4q?=s%uJ8>!#SW1j=66<0no%qKRW~9<jgx2t_dRUNs>_7FkxbYE{-fP
zpZ*T4mDV-XIlR|BWu7Tl3k-)X9e?_YyIY7Gq^=4seb{Q*Sdu3eV-N%o1?KgjbDz2e
z{xAnez!h)(lus`=+mfLol)|pNthUU;<R<aGs(su#E^Jj!&%wOAUib^U)hULZn87TK
z664pkpDqhSQo)0$2upy6vxH%k-$Uj?UnCH5+IV99FM!OyPz(-qPs7BL{nU&U=?k^s
z)mhRFfP>`VcjLFopadK>1=k0wDD#4kpHQd(4Fho2H}ERO!$1ZsdI$zO1-krN={#%h
zd`|0QE6Oz~=ad&$*;5Z5Qd#-=oKNBNO{q#fanrJ9qs3fbZBYT<5>xV;u~s;B?{4;u
zLA#uqK&@GCmXtsNrtQmkA|zoYJu3iu`APGRq*$|BTzX)IWWtQ6gb<9eDzSK;6=3)?
zc>MgOUIJ`#+t_SbEX)G54sF&kW$v!kxCnCqm}6qWnoHmSqONr^lM=l*`3+EmHpF02
zFf0vhztieLtgIQt<S1hg+C~me%%Fl|%+xFx8W#wdf%K-r`FK}$0@rJp=j)Axf~;Kt
zSrG3q0}a>=!t{GB06*SnWX+b$pwZ%|tt5PtKop<@*e^VdAM65PUgPTH%iiJnKuj{o
z$*V&z-Mf6USqfc<4TES$;Z>1`ZFi(pK{Rb7e5;sP>1jB$aDT68hiv@{Q$-?plbI77
zTve0Qu%fxe)~)8}yM3M<ilVb&BrEaaSNtOSd2`8C%2~ld>*XN3=XKn1+(y#3wDZO;
zaKpz}1B-e@MVMW8^NDRxVJ{DZYU#nR)aG^jbFbqIapR4QW1bPdvBGz{#!M=VBK4k6
z0G~UurBXs0HyEh6{-LmyR>N}rt}|$RN_*%FAV6``u!1!v`10+d0&LQo!DoGxHj8qv
zKo5c>ur6l{HZT461TV&Le2~iwd*Q=pd)27tNzE_z8P=ZTIR515B=p#claH;8G6Oel
z!KrSE-M+m)mAXwdwQO3^fJ0794-+#|&RsKkuIS8Qac>C#UEfYVa!u=704`o;$Vz|o
z5~A&#YQ2&YBI5@tkKA#QK5mbNM4xac4Vls5F!*_;n$Yr%tF`vCyJJ=y=5LtYy-Mm=
zfYp%ArlQ8$d)qt|UZV^j^Yjy7uI0=D9Zq0W4>WA}sS=gv3H0}ZwF$Sv#<}~)$xM+^
z?+?;aMyt1$c4{iTS%kogemyDoL%=R_&}v%)$3-)M`U;bs={)HmBQY5Rlb!qsQA4%;
zvWhXJ2il?d$bHeipM)%4{Cpb=N8O$tj+$VQ38WF^RWC7?=U34NzV$P*m$$&S7ko^W
zir`8oD+@<0rY9JxG)t)`NQpLaXp4Y<6*MccNl{BBURd;5YxZo?sS!sP;v&+65{jEo
z9+QR3)r6Ag1-FFGr6h?30A7V&=H_fD@zKNR8=2$w&AmtI>pLLG=ev0Rf9$<=RMma6
zHZCn7A&P;dQi6ga2ugQ{D7^tu6a@+C?odQPBviUYrMnxYloXKMfFK>xu-Wj=2JiDe
z=e!R*=RWJK-|wGiEthK{xcSCsX0EyBnwg`!m1_w^8mu(5S7F~ASF3zG2?iMxzvI-S
z1z#`IYJ5x9Br!QQGH<A~i7hpBW)YBCy$3Wjj3S8mS!pL<DTSYoiS=B6vHR`h!Wg*J
z<{Bwgda>WCa4RLQRMNL(m#+i*C5kQV;0$C%bNR+{k6>Cr{t4wMLWpJZ_Qfxc{m3Y}
zOkK3stx2wVZy)*=oJ3lOx_&?cNYs8C6iWeUSpOK!&AhC}tVegJ=B_CV{FX>7TWa#j
z?(VYiv1+-&va?oLNlC3F@VjmjmTmc1z41Kl@5dRs9v+pKJqzxZZRIH@>;T=MVGwIK
z<Y2S{^NTEmOwY?lHu^_QoAJq;cAisGwGcPfxg!U`xiZ_jeAHZB>&N@t@2wcw6=-Q)
zo*N09wiyGHnJ$1jz+GWs%f@XyOgjH+#Y+o|IDgq0BO99=uvvA|1xyqJ#c2%1c>ymw
zh0fu0*hx0wCqJ?*u{s3b^R$6wpKeK6%{i$p^mMdt19U|Ce0q=+$AVN5s1kmnRa@W~
zo*W})ucxs?Jhy3q#mDtP4Cy^my@@b@8I;dXQdDGxh;`nslDMU1;6r&n{k8f@)!^yX
z+1_iYSI)OCnqN*|an%1*nssG4p+as~L?~T2#ocE#*?L11(kmD|NViw%woiR5$cdMK
znlnP*)nPAo_9fA6r342gsOo7tsqJ!|QiH==xB=^Bh-;~Yob8{K&J|FS=34W)I@$tf
zRw#yEIfg;|J_|r(y@bVToGS(LnaC6o|C1JQUSp8lEHF9@Q2aQaU?`~uM$`yGf@}%l
zWSk3f`iwrpNtL~$$z^T6pIY)A|2f!HQLWPcmEd%KPc?4PE=ZiQPgaM^cznK$FfcIJ
z*epJA$I(j4@tgt-yl%GU2ie)IA9{~u<JCT?Mtk+1#9Q8!?{I!P%)KAOM$@GGl;u8S
z0RMw-Snbd`*<qXCUfp%uzQE<PMU~iaM$(Yk>PzUcSFB9SDrdP`#hbwVBLf;QC4B9<
z!*%=V3yxQ@2`X=EG`4qxTDyCrf5%wO3r=XmOyBz2pH2%mV10VG)#a|ArQNOz>;+DM
zESS_j-64FZCs>tCP)z-~zyGdv3ou7UJ&mwGSwdPG<-GhXF+ne}=cYf(;DZ+dSrbqW
zGaYW`=4wyrhM{-!BHUN5@Y?$IL|m+=R}b34BT`3f&mS-*!f=;Cpt*KMTz2HF&0;!p
zzJ(8@19BeNcxeQkt5`M@IS$JY+XY$IM``2YJaAz#>Zw5%E9At|sf;*O1e08-MQ`c%
z#bwYJe<7T&2<rKy#vV~+xei1AX!!koW9rp_)@8JsXvt5-rC7QGV!C#B9O>V-bnAYT
zHVfuJ`MI7BEhL!Y5!uZsozKa%A=7x&lM%f#)md-eU+%b?vnCk5t2HG+ir((gcMDq@
zZ!XQFlwtMGjAT(S@<iz+<D0+&*3AL_t}H^>@EF3Od$SUiw&OmC19@!JW4!PDr`H8t
z^|4O3^i1kiI;nU&9rYZN7Z;*VMig5nVA1XPqna<QEZ9P0)=u9~r-L@jc<5lyK46}g
zyW&Fk+QO$!mu!G!Z{30izY_gNA9iOT8J5OgEBij69U#-ITW1~`N=h)5gn$NQQW7i-
z=7@UB^&n?R1h^fV#uz~-=a1!j>yWl<`-QH!(ToEdb4oCDoOP&%68QED5P-91CL<jo
zshle`->IPl4au10MpJ*kMcJT)mxNTn83VUu^K*_szM<Frhz=gFjmu8nW56h_gL?@#
zb-J=*$}eO)i2kWDBfMowc6FIo=Or&ulMuFL;YnlCh-4_f&|1us<=9QOiLO+;T#meM
z8Ukwu`g`n&HQESjO}>8^=`f==Kte8&4xp;4LTNXK-w&sb1z`ZSnr`upz)^uy`s`BT
zUjP=Hy3Lu!a)5PlL~tUCRIHJggGVdK%1ryOM+i1;__9CZ2lm2Z%5z@+VMB2BjsmK;
z&|Dw2?oY|y1e2n%rwV#*KBvscvK*J2f)!-)bk;%nkZ`CLTRw=m`o-zWF5*M{u}bt>
z<f^pS294ypK@bi9!`*q>42#XB2kpf+93?DnkkowXO%|!4EU{bQXpZ14?4Rn(PX$<d
z&eiXeo5t!wS|Z=>a@E4;J0kxu!~Z`m(pY4x(t9|{d8~8&DxrqVHcvIp{*H&DL|g^v
zGtet9Y4#u#yweF(Z`M~)v0B)IJc8GbbE~2T`#cXql%*Lx{AL;VSL17GkZ&<N2Fr+_
z!DPB|zt*7&NA9xR0(}Z>+1c4xx-*v%q7(Cwtrlj|3D{>r6k~VoUp}3IA^rR-7?|Qe
zqZLI7O`)Ohz>8J!5Fx#ABk8E-(Ybe5(JHEsq|fbkhiDhogfPh`Nj#_McCXwRC5}Kd
zlh6ZWQ<^06ss_KkJOjR4a>VpUmMFCW_DpyB2@+O|ljb8t{C4x9031KlZN{<_pJW}T
zz&DWF+XFfVG^pKKB+L?I1i*^*QVWNXTc+lg(9XvFi?D$k?c`ib2~E-rus-EAn0~LR
zVieykAU}<EGn||wdCd#llqX&7?)k7s3A^dVI8I-@;j)#dabGvLq%xILs_n`v!^RLi
z?$g?`yGjc`vc=&Vm{4nTR=;1Q9$&Y>8$6exTUyY}M8!RtiA#~uR_0)p8bo-Ridq$z
zS?}w$s|T2aNF7mDgoD%jp%oW}8cMU)lHrW~pB%V~{oaqgNH~;k@*KnHHPQJIqV)l*
zAVXL*Vsaa5i?L%sELx5?F_8%@y4#2}p-nH&pO&&LstIG)NP=vR!+d=aKlK-|6j9v9
z-(|RuFl1P+POF{ew@t&)nUhm%r!v}-WKZ;#+GP%g)1K<Y5#RBzwD9r3A@HYdlY7+e
zB?=ZV`{)|t;ME=Om&v~xFxE@rUh+1>dh5!1(fWd-ro1dfG*I4k<E(41jG*Mg*op<>
z=6A9nuIE00g6H)Rp)6=orADp8mBI=@-C1P04|`FM?6acf+Nt;6?2lrN!KAs;pjs*m
zJEd``KFwdv)Xc8QKml}qfj_}72XAs^3)txAdJEgFGW83mIrT#CefBS2xwRgEp$y!&
z=F(N+O-`08NAWRaman~|7O=n4vNIi1TtP3oZVy9^j~nTdTmnY@&Ez(o&Oj|CaN^8h
z`B{<eD!Z_uxAGf4MTSbgv6{&?;bn2(W3K>Q+=%~XA$UOGB7X(0c&Oqr@185}FT7rK
zZT~0jyxpfpi01un#klP_U@)-e>|ibB08%rgEfU_AXRQ*lF4tm2ETUGv0%4Ou0C5Re
zgVhg~bA3GR!z2@hWqcYPg*%3=F}hq2zdmwthGJMdZv>wl{Rk12;qcD;6Xq_fV2)6~
zZGvz|QR1BBxH`=R3xaVA#c>Webg;qfgNQR2<ro;{H!3cSQA)jCR0pH<MA7~vpmQG1
zsni0W_Lj#a953;HXPf)|`oLZlm^vGN(`NcdB>_c7mSH2s6oA*7Y{|MhIR6t?$U>|6
zluD1%g`U-^PHD)HjP%2UEqq|b$w!UM82Qr`J6k4=!3<t$dga<T?dG4jrR>gHlipkG
zF*irDJS_4Y(#H|wesk~l=;ws$qdQIRSU5?L2kE62`!VooSe9+jgOogkS&?cc6*#Dp
zyq{1^>C(_|g#J>)9>NFEQQDC_4&2O+@60-?NMKt}0q=moN$-jGqq(g7wfUA1Gt3pS
zb77nwv=QgI>F703=5Tw(v=`d(6~Cjbu3`Sa2mkG=6$>Be1Crm}L7O_S^XB8;WOt04
zgno{^)ES0k_?4xIm>(lVj>~sR(T`kQ<X=_{*4*+x&B+1OJ4tADatw-rK`=PU1H1Yp
z37=-EZMw_zisB^Lrsx_8Yd}4p^ySIg&JR4sV~i4V>6_uXiG+eg1aN-+<EZr^C*?0e
zbPG#wX{9=Nzux(vQvLHX58$0}Xt(WK1;crSgzd2pdfr|!@Pv&6$OX-9ANGJVS8J%e
z5-0n;qfn#k_`7#t6pfz*GFa^3y+ri!*n~F%#)^2chzX<dj(3tVF*$q3KW6yo#}08%
zswvz?@Mj|GK5W0CSQorRLf%90C3^h}HlYT9B`<kR_a-tZYfKW#gt3L?BY&|1lT;CK
zj<;n;cO4&Q51%zEea);G^5Fw(sgfTl%{IQULi9~FDG0~<ofR%lQ-h_2Xq3Jinn}|C
z<kR8>@IexE4P;4^Ls8oN{zIw2k*zHd5^A(baWf9ypuay__gsD0)9HiP{8In|yulo(
zG&l`V)Kz&5<x>^YU*95ol6S!0B*XG{*Zz&oiP#4)A-kJ)0iwegz%{*0O!S_lo3Nbf
zU}_iCo=8|u898B`;6^v_0-t3PNg(|cdY`Q)gI`R5ykS8V+2d|aJ^#}NS=b}=7!|m*
z(y1&Di{ZDaiZxg@GNMji(!4S`Q*=<YerAZZ#$~=c8(9$~TO>wqGPXD(ZaKcBPpgrn
zXcq*gE#8r$OebOTTz?g&D8-I7gm;xZ&A#`U(Q!GvZUNU$0`tK|KQW<waczxAa3g`>
z1@>iddU-p8Q;0GeazeWz&mBLVFg7*BRyL^h+Y8NcwSo72SlK9**)C4wc$7ux!RFF9
zhv-p{ipJVay?Fv3UotulOs3y9*j~#<^(2lUVt{O9(jy)ITc7E)+lj~Sp39M9E8n;r
ztJt)14D}XhWMD(js|%7y>M_<WTROqn@yw0Ak?0<eXrv#v#d%0y@vd}QJjg@B;>>u8
zqn`oy=^xdU`H}Vp!i7O1@nDy%AVQRBMbwH!)*=+pv@R&sfBjxWLxqC@y0&eqi5U?i
z@OvSSUPj$?d8AuQK%uPwXW?lmhi=~kHx-;=fC1!f<b#>fSMU4Ee{cY}V;yvBoho{_
z_k&Z>UNV3ZuwRTz0-zQrg!=Ry9<~;cmFRrm%g3m=S%<H;#t5>5%|HEE3BEH9=LiNS
zV9?|xL{VF^aG)>GBmLT+G~<w%TM}-!p<&Ul;AD02eZasivBI2NT-Xy7=gzT%hCQhB
zLa+rM+NtQ?vCwPWe`x_e6P40LBLP?o-8Eu6a8YKRvU~a0jbfiIwmnpL^xl`|a1JKv
zAnM-^lD{r#jU`8DH@vv4{Y(h)NSgssop&}~7~FeRG{arTq8iA?$DgyrSX6g=NjVO)
zwo%Z~T!w7c=HvX_upDd|HXACt2rkTSs($qIi)27D9;A|bFrI!BSd+P}!BV@39zCba
z!!yzBU+U^K%@v+<2yZWX0TeqQx3;r`GIxMnLU-CY*d1jM<xYi438DSfURW2!_q3)W
zO*`KhhOb+r?4nDJVqLnEdu#p3O3SM2(J>z0>_v2w?M{4^YV|#Q;Fun{`!1hz9X)aH
zcmRXV!HDshyvXh@S|wa$ol?x9l|T71xTCkD&Me;Skavp%M{f4oc%vFlY7(po=J*QB
zdtZT*Dses~Q{)+Q5tf(-H``!v;w7yd#z$0&L>g`69uPD7e*TA-+$fvl&D6^M@*wtF
z{0PwyZMQ~gOEiB!y7P(yNtp5@sK^B#JIhsP_8wqGLM)#4+Wa89;ydoAA6+Ng7-S)B
zic_@z4vXMo^Xq32Tk8v)@bLx09cahFLc35A&v`W5tIoXBHUQV<AFu5eEHL3Z@T%*!
zJ*oqU!p}_9=Z7>A2QGLePdVcB_TeS+KPMp?49&vK`0K{+rRmgk&qspWYJ?g`E3=nr
zd`W2y1%G@ruZp?u;@iq=z+#qJbPkXQxg%C5m_gk<S>}wv1(&;maPe3kWt+bub6`qF
zX+|av^9ZR%8!3!Ny0aqcCQbND@jS@aLWn5YiUJ%U-RCfmCp<b9D+k>OVK7VM`*_I3
z+wWyyoDGh#6xn-_&r~PRL(0eq%*dJ%)NH~g<4;Ss^ZH%VE#Yoi6GpGxo>3GG9Ho`Y
zdiqle5Y0<;IqgXu08~+?a2B<+^S9P3=loAyW`hLCu2>2gGwNI=UHN?n6ffwf1#=Y@
zzN9p47(kY}2{XF{NxyuHx^Ww``a1Yp*nin!^^ac;x179!RtdQ{Z6{Xb85j@k(U#Ej
z5t$DMIU#-&u7_`aLjX)PU8mg9CSr}>c9s<?8wzdQ?@nf1dGg~52Ji^RVB--rKxQxw
z$-lo<zy;~RP$*GXWh6Se!MZ)G8w8<k7I>zJ+H2erwHobL9HM`EpIVP2HC3+N#2`zR
zPV@5BZ~)o0pP#}5<LFU($KA-}T>)u!2gqvp`t6XNc1VIuox+Sq&mc-iO(LHc`TLIW
z@6!A(sGrtj2`2Z3zOZH}luudCz|w{Gal1h`Th~U9m|JZw)86>uxZJXL4qkjVe4Y5s
zexxC;y8%7;Wt$;aJJShvm0|=gUL_!H@LipeL=Mlg>XzC>V0q!=J@s2u2jx#$#e6zM
zGbK{Giu{l3{l!SM*%xNBh5h4n(<2FXqs^I~$K(?j(aGq7smu`Vn;tKk7P1L`?h_Xf
z)#xn$A)Q*>m7yJfT6as~9~56j&zjGf1dBa+l7?1;br}-hKyrB6$c{t5;u0XcFiaM<
zib-Lp?hPYWvR=?WddlHA%mQ<Rg!+5vkC9xmI4O8$T)@nnz!#EJepx77^<0N->E~hk
zgT>jDLU@g^>-uba_6>hu=}Dd2&S4PH#8%t`tsr{0Ro=(!R%<q3$nUtCEEm>f)X!@+
zkk!2b`}xueTOk;9BPm7><W?Z!%7|gVr<3FISyDQxq0$UR_!sjRHrZh0SbRMWQk%EU
z!UvdEojj6>9D`c?M#vzeZhv&LdU2Zb6bVC{;H8Oss^E>LK4Gx$F6e45*-U@`eM4xl
z8B8Rvd40$eTkQBAijGD3Z{6Ji-jNAn5aEu=DwMHg8bg?L`#x&rzMnj^O=<2_NEMn{
zP1zzTehlKanOhPnpXz$BfP-ahVVj^DkHtxn3c4$I-O;5e`J;IiPQjH{Kj%HRx1xQ;
zCTa7n+FPy3hKeU&P;nWx%;sl0?kJ(&GoV^N3nHp@++6_}Jy@A+f66tpJ^2EcP3@E6
zptSz9_#sg7BjKO(#olxS$b{>+!!L1YfVu$5Ww6b6cD03nZ6fy4?j5#sOX>zSl%8*9
z$?w4V!hOc=aRggdjQ*lGJL?!slrV(kj^jNff#HC1TaC!wE1pV_8S)8V$}~R@>Xw%v
zps2p@N^t=(0->{jbfakfF_bO3v53tj=`!eqUCUq&VEwp>%WWxG4|*c6r8`rfbFRP8
z?y)%8nJIB}1*!H_q`(S&0LtTpAo(vLd~*-HzKX!lI$7@BJ%w*(hsyisUsrsVnCQKQ
ziQ=DMoVJ_FrQK>jg1ye$`RG~rO&8Q$A;)Stp6DYVa9~>Z?KnUx8U~4?BcBt0RdN_)
zjVrkzEz$<n@>sU3jjoeZ>GPYD12@H(R;ohQzM(~QJegx(9319Eh6{)Q22B-=@(pe)
z5dyeVDZBrM$~^<?=Mb$P88<?7{Uk^}=8p&N0Nb*4%&`ZpF__trfOUjQeYgy11m|ll
z8&Z8Pw;kt*<V_&NWnNP82!yB7e(H3ohm5V*x$r^rsm8b0Qksq8k7_Iy_)Qfxf@Efr
zLOr;xQfCMoZBuy%XBJXsz07YjLk@t0B=w&Rv)-II$7{CoBXgyo5GLKX&6J0oU{QKj
zL0x_0jehM}>w&<85t^GCEt2b>mdBeXmU>~_0xat)?jFi?0zE^B!1C8?9CW+jw^a+C
zXhopy26ejHe4yG>m1s)ih3{W<8VD1#UacH=US09zP|5tyAy6Z__C(EF%^)+mA9pZX
zHx(beQr$y>a-Z>}5BI9Hz>~gxn^`&B1C7$E#AvN-7y1{jNow<2lhWK|6s8g8XuQoB
zA?8DyeSO$DS!s8zKhtvg*KY1mnlqFqo|_$kX=Tcmlc<ICm!b9kr@}zw;7Fr(WrWCW
zXETLb$XUi!&_<if=o=ffjDN5ZUbjSV**M*o?`(G&)S)|4ZvQ*MrdTN8letp2-;VWt
zl^149)9+uou6a3bue=^(R}mpPb!qaq)Kijdm0Y?Y>Q^W$!wA^5w5dRBH*bEW+c5|_
zRJ9{OhdI=Dq&p$ffq;xUD{c8#vyoujq<}`r$ot4|+A$8F0w-$|wJTn3wm52bUNxT&
zgrZIuotwbJbey>f@nS3a7y$?ST5EDQ;g9}DunU#xKYFuIR$8&Cr%hV2igj^c5+!S%
ztX;cdIYy3NPZm<i^b1%y65^zleb49QMb$cX`+M;7FC#eh=Xp+wik}7mbr;Pqv0J_j
z<%Q<<MCo*T><KT{KHu(5(6^<#@iOHB6)uh8f7=6SudA}#bODU4Y=Ci#Ml=#nIiHp%
z*KVqW|GXK^>vF&TXOOTNdc7WshK7(pcY9Ew7jP#==SUbG$v>CtLB1wQMl$7=iYT>J
zyly@;yLvaEAbr;qihfu@Pbb}$L)kT2?nifJ=;~moN{s4_q@k@=nyO<Y9mD@R;t-IA
z0%`eUoMO(8cKDW&i&GN_`XQ+jRR7?K66K6egdC8`y5x`pg@t?UI0iK^D0KHyp%W*r
zt^~yp7CUc-oMcm}dd7jDTmK_fgA<aV=hBs{@f!dXooJNfAmPt;(v|j#zG;&~E8+$j
zcADRejj)_JeiTk?e#V+|?F`N5JPSNQ;yVze$WqkPwY5-bTd*g!-NGGYtoE~;Q#dG4
zgXh$*f^oJ<LH=uFLe^6b4W6xiUdPmm9ald=O0R$K{(aqd-<Nd&4FyAsr;brE<R=Dm
zH_VU~y6~anPf?(;am20TXZzR*G}V;lOW#S8BKLw!qk8Tuj5lv;zgLc(&yFp(ThQBV
zb=$eGUkUN*G1N1p>A3Sm*Bw^3!((PT7LTpFsMbr)dyoXS0up2cq_SolkIHiN6{+3G
z&zyf4_@WFLHDME|3O)`p$@>NZWi`;29iJ(Sn&+RfU!`_mmOo`p3JLkdDETKI5&nb8
zCvTusFm$Kq8?*>GQPItNL4wRitx?(9`h~7up^HoO{qJ9%dmsWs3Z8jb$wqKQD@3ow
zuc{lbhinQLVv~X*^1PznBR1GIoJY%S%`x5_5kY3u68fZf-fj~E??^<>a6O9q8pG54
za|o8Vgfs$ny_&)+xPUCxFz)_f*7Yrl=|!EhTZ0MFj!86sqo>1inqy-9%h&Kco9hUF
zKG?`I=r)SY*j5PV(7I&xuyw6yp-R*%NxpDCp&C!nsq7;0AjR0KCu#IeS)?m^jvRMg
z$}@i`*QoION3Bldhl|1Ss$<#pN%#HM)}n6qW$NX=mr#si1PlQKJ#Qr%uE_Khs`0NU
ztByD2%yv?)NtZmozMdFlIL2@8l$RccPeOaiwBL^2L*Q9u${oog9(AW>*hYxhtTq-6
z+Wj`7$ry1jTnDr|GvcJr^u|lMdZ0&VkVCgb(=T%L_KJtIi;O<mTknJqDYQh8-2cAl
zXfJ_7Uxs(%u@jXwbb^~~f`Z!9Ob?ln=w~p1>^O1a#08K66PE~15Q8djBENO(J%wP^
zDdZ?SLbNs$wmeQRS1BRZm%AQ1qZ(`uey{WvC_Dw>P-~Qr+3K(oq+RHXgA3N2B|+~;
z#)jm;sTwC^O;GXCJ!!XCmVM2v#jqH74=Beqd2wv$e9ph?XEf(0B`N73c$yOQBrnhL
z%0aCMvGtzp$BaDIz&gJdt$RNn;UH(14Ik9(VmZk>sy3mLXYb97+pz!}z8v@_Z7OP5
zupi%^dBo>c!B<s2*;@)^P&4$9;FvZg#$X_0k|+(8=JD8TL{tUjp9InNWC6qnhv;X1
z?o+5Y-t4$nKYBoM==JRsg;!YUE$wu>xjsewW3;oDEQ2eKzb>{e;!eo9Y^}bg6?7^_
zOhBydF(tXVF}ti5g1q<usbA#jx_fW=Va~;yH(P#52hv_P?HiKA?vdE7r(?fY{#?7+
zD7D9)F&V~k=n{>6yYDALy)o~^9zbur&F5gUVc{m8U9m7&m?>fYgWkz@VNI*@L8>~J
z?SOsI!q5A2)ERN%fpN#oc{%kGywm#0O-)Y)Qr%Gf5<oST8?^OhWt?3&x00@{GFBm4
z;D(adO`DjI8+2~7Ih)kvRG4JSLxMs^ZiGl~sZ&{43vz$A7jg)M4-sVuXkr?mL;rY+
z@jYMmNgc5j23MCyLT|jzY%L^Qz5hj~;7PAoiP%b2W9Y@(X~Mv6DuPhXF9|6BmgYPc
z!O79Nm#h^W-*FItF_(L7;~0)Q-jyX=EFxf@)P!}mbE|7x?`d87pH(JQQ#e*BAgxDP
zpW-o0>KLx5yu+8m)n2*GK1AA!=P0=Pk2&6dq1mbwurTyMf-Q>=`-hM7%Adb{=_}iE
zLO5Ah!)jwHG*mzh7l*5{7Q_pTyPEoz<spq|&Wk*g5l3@Jm_*aUHo&BOS{zN~x<E}m
zf)Ks~e%&?|7!r<os)9JDun|^Ai$zc-zTz?I#_e*BLj^$<F(3OlDUGGeZxsY@XZbcD
z4g2&2PLhr|?1^$UeN&z%KiY_rG$CH-GAYLhP|W>AL{+RvuX{n*p6N+|7{-O18yBgl
zq0Gw$r>_PQEp|vB*7^(78=#u5@aBrBKY#g=i*dvsy@9Hy2kPwq{mY#J`~AXwiVX5P
zF+yg9LFbp39b?5(>NBh7xPzyz8TH!Tq&UaU6O;DPkK~w>iMIgy>$PtD0V8&ermCG?
zvuATdrOHcV-%RvpXfxW9O*B5P8QN?re+kIBkJ9KUHBv6kK)L(`3w}A)qd#+r_}91G
zjMixW!ZJbQ(36+76<W5pQk@0NW1Kgt-R25-O^410QL;Zo3q4$6#UudTtu!}nLJFnI
z<`PPvwEA)PYiGAn7@J1;gV-UtLOW1g=@dleJz4#9l2cD?M_@NaA?k{#dZzYxhk79O
z4a0`T5p^1uVC$(-$)))uSz8*r%nfaRKX{ww{S{u{KU%Sq-yd(H<TCkk3{^pViZdJ#
zxPQg1tstaZCC|cYOtv_S?QEZ^>5t@cmUP2r+ZjcyQro%E5+yRj>6;%^^FJXfZNC}2
z-MbSyxKn3`e0}<-{cT6`<~N_<F^e?dVag!bk77YgZZ$*y83LNiyGgGFOr+)`)!V3L
z$K-F3ym@E}Cb^B$OQK-i7S)bzdSnjN{I*|BbTDPQ)rBj9nri9V`N5T4b(`<0^x_Ew
zSCG3CEz!$;bS@?>AdX<CawVUQyw06>7m8&$u4u<tGbpDNl1|}vtO1qyV65Slp7^=%
z=@62-4VXwY+ias>u39L<N4Tv01i5e4P<IY+y+K|^eR@EyCxJn!|L|MxcY{JagCjjl
zMvhS{tpi|tL(m-Rk>x)|f-^Nv*B5j?B)5ZdhjJCjF5W+jq|G3orA?d<dwiuV@oS8r
z4rGR7uXWas184HcEz{`{5I5`mf?Ek;fIj>yzK;PU)SKx^)lk-RoMLLfYR?YSXmV+X
z>`o4zbAlek(XzsMm+4wmU_w0p7E1<~)h~s!^DCaG2ia%g2}kvS^5JuzIjkRl-Rids
zGd>+=40dXKhzV@mNX#aO%1ia{n^Rh6MA0qwRBhbbjcWJT@WMjmxu9&@=>woO<cm?9
z?|d}yPMsJ9b_1qAMkKZH)1*AkDGmfH6k@{AsC86X2K0b*Wa#p@myZ?s|75}~A)7H3
z*4B@T^DVg!RM%W~Y^o?3FkLH-#HKnuvGaqD#6xXaUQm#bE3uwRb1{@|FYg7&S=Vch
zo@fIu^)j(ODb-G#Q$xwGJVl~^VyAy>S61y0<k8duw^a9Khkm>{G+TSmV+RdALVgr0
zwzS+>OqZC~vJwh0n(nfi`dk(y9L}p(x*Dg~`S9Bqx^cGxs}BgB0dH1^<OlK*CY9(d
z6NemaHB_!CzpYHQr%xIZOjfh(QM~mN<j|)GPB&MrT(k0RXgPiQ7*%eE3}f)Z*N%Nm
zUSpK1A)jN|D1mdVDXchO_T3HnQ_nYdf}6!7aR^o-E-qA>yDU&s3`1a9AIN(8ItlWV
ziV2|RE_bD>zk-4uDpw8UI6#ByZmA{T!z*q1s+F6phu$JAu!Zq+>*&UgGzY5)l+qbq
zb*Zw|@Kr734to3>?JmB~q*2TAHjqn#9WyMFiopire%d`w#K{|Duai46Y)ocQUtUHw
ze1F`Dm~Z6-YjnSeEqfJF-8&D!*K)Lu@P^Y`8l`iRACKj)uNT3Qu5SK1etUKh6~8<G
zJ<A<fvlkWl7l7;Rwg;7<K`enp&5ctorG9<Wv0xrryD@Hy)dWoX70%sm;*3d?h$%js
zA?q|M^*BF!>oO?l5S2_p!mW+|ZgG^PtV5iaYC5#d)mR$Co&zKz(P?;dHIavIt1>Ww
z;Y5qM$y<KA4AAhMzzPyYT3Z73H&eN~Vk!dcaX2J-zC02ahFfkO|4+(||E!XzVZOT+
zpOi%+(BP{`rg7AguQ0g;zhcHUbUuB0M+?Ghn)?F(IF`j=^Y`D6+e(D^GEsqBEKuBi
zKJ5aDD0`W{K3}5bOP+0plTP6tq+^f>WvwajAjDt9&~-+vV6vb#X6J4oGLT~!5@pT4
z3(@~wP-`%<C!!no_6kf-OL6H!tLAsOXbxT=lWga4TO1Z`-|a%1k_Z83>eFRyZJh@V
zp4}CSaUM*8#N2h&*_oM6+ZX`?#7LjEZ50J-(|;bJ;N+iSxVu+l6}|NOZVlxML#05m
zrFQxZerF6?Uq{#tu4~CKtf{*dWIv&RQkEw@%;HYECIv?cT74m6=UWj^)2%<A5odtQ
zZ@2Kf50znF#$hGA)v#sO&}OjIC;WWjsSi81*>{!e=6!~`%OfjiJK}C#2r96-mV%g4
z?e+@LE^sdXrt~mV3oYAQX&$?}2{20rYM5!UHWyMgU)8Mn_LE7w<<T))gRbv}Q{Z=}
zHLW10z_WsKQs~!r7n)6G-?Vcr%@wAb5Rg(a>Xr=3xhg-)w<;3z@+BFsJ$p@XtH8XK
z_M=*^@9HKo;7q3lW!sNGIT6(kPe3)b;_>|h;fb{Cs|?6foR!pd#>s5pAcF0&q2$Hz
zJE`adb`18G6!kjqAnc~la78wFG9Bzdj?%+XVZ8nDnFZeMhn}t*Co~JqqA@&tMmLbE
z?ZPK>afe_Q@mXH8sKJjQPHBXe_OH{7<p=Y4!`F%a@OUpSKz}E&v9d6<JFPp~i~POI
zqW)BWY2m6vkY0JRczvLrQ``HlRNEibyJ*WMr7luNgh79Vz8u=IRdcSutY1m$C9NrX
z7LzVe=R9aJT>rW9HrKYJz-fY6QnE2CUOX+xsO8<|)#;u>*O;ql@u{vvztvnT6?bNP
zjr2S1TV+boDTZL<wy&Y_lFmgyIp&j2Pwi;p4XY%b2;Q_->6d3Or1x(}Zq0q5rYRSF
zcirp>y02VXd8((fa@9&KExMMnFVBSYg7nL!$w=nd2<NgltDBvz0vB?H-_5Aj>lf94
z&rdd+>s#Y-L9ItX<w$nOxv-lA4@2{^VSBSPhP_RQea@5xvcj`mhR-JBsn&;a*M$^7
zBD4}@b;EJxQ9^|ab2g%g?2tF)t&Rzu@ieB}Iu{TOJGO|oMcCkrUO^{AA1~B0(@(Oh
z&_Crr?qSz?%?6D46-04O4ETd^zy2}K2pgnAY{0@4%p5y+T>-*q^3l-y4gW9n`wI@*
zpZ>#xshdG=MNqLR^+_%LUcO$1vx8Q#asKM^V!XKFy*qcv?I?RIOd?LQE@s&%LLsU?
zh%Q3)GhN{{=puD~T}C{@yt$EC^Gexx&%!=V&8*-j{n@ofyXqO544D;6IjiVDxo>xC
zi>YBth~&KrVM9}H#XsI%ZNh7+Gx=8H#B2c$p~i;&JYs5T%cPs<Pd@FmV)_T1c2B_D
zCCrAyGg9~bgldB3t(l77@IQcMN_LACf+C_H$9-UL`~+6-=ssQ?uu_Gh0Uz(Ir?$);
zDM0--j4*}g&E3b>Wr^zQ>SREOIa{F&Is)UaPvbV1Kp`Cg*=wnDil5oa;@+$M&(8KA
za)?D1j4`>PmD3hLKX>Wz{A+R#Ci!p~=&zb({-fMblzELf=kC6<91nmWQ#DI1z-Iwj
zr>rjwGRxQjS}Uyt5S8Vok{gEn!7e(d_7A_|zx?WF$FTm?@@Vi+WDHY_K^OLkw>M4S
z*`&<tmNrE7=6V&SHf)i!tCktc&b$M0AU8wl-5qCjG!!6ZSAJdYZiRFq5WSHY%Ar;B
z=_fVrNcwC2CxdJxGr}e=T_vXcXL%g+bkiL=-{+VOYR{~<_N2W6J&<geKcxg6*LTb9
zT_p^Hncaf2pUg8GApH2~PjP6{zfMTN$PsAAK)fEVMfWZ2yre&F{=*LeaL5?n9~mKf
z{_$J6!s*E$*@=_q45Q@pjl0sSk`g3eG(j`Q1s3I)P-wqW=uXr6smcj@u^g!O$;Jwm
zPt_*59ei-<@4CB#>hl<VPKij7=f!KH!cllDqG%|cGyz5O;Ils^R4S-X$H7=SO|q@q
zHSEK*F`0IyyE~}#BWTbCYR40TnS_JLM2}hF&0X{?0%Ju`?<O&4c}#O)y!Bv&aEp=r
zh+g^t;RtG{j0;Nd4D*HV4vS3np%rH)3Vlh#K71hTZjIJ=Qe?aHX{?Z7yjj>l*zmMW
zk=T=2GSv!&v#Eoa1iE;6LPr=yq)}u!?mzbR)!?VwMHU9VOXJsLU9`*WUs*rtY1!KO
z7E_*NUg@fI=JVyhv;ek)l+6+HsTw-km3EWgW&83M=$ZT}^Ih#o-&i2X=Pi7^H8EPK
zT5;Z)itSP2-lD782|by1Z@nmEGecNn>}wXZ<FUa9S@7c?)hMEw9_YN|0dgUE=;@W%
z<^6#v#JAJq9|A<7HvA0p@UhQ|-}}yhV7MAuES-f7Z9ZY*eggV+33HR;=ohChhhWr>
z{g+mMGF*AkbP`^KLYszh(GC>wm>ibIMD?5T4t~7@jen)4)5K83KuT?I+?SjUx0~x_
zcUT_Jb=5Dr>tQ|rqk3yIy%70|l!hO_9p@Ds`Rk?wtco!vhWY&kE(8unV=^;F`XfYJ
zy6rVVO^|)v>*8PSKU)m_A?0f(-y2?WJ^Y@&_9cLhGqa+vDPw}VBN$-pRC{j9%2ZeL
zmh1dBo+=2NBd*uNWD4?`{^J?L0ao*0&rU6UIhXVBoAJy~W<~wri?>to^VRo{dpPE}
zGktRj@ps2(hX#&2-5I*)R3faPLJ7@PfuWrGLUCJ%6kfqa-Puc?zEX@3z5j}fwm9_x
zM4@$GzBtAWKwUfM-e;ml*bsg9IqPC0OKih%wbwX^k+25yp&HteZ=wNAr>@BAAxXao
z<6ot>)T<z^gLXZgzCzOru^jql`DtX0=?I${EQiZ2WOFc;Rpz?eZ=Y6rFX+3H?|82`
z(@_hL_-39dyL|Yif{b&&TVx(1N7UblBSwfgc}yM(HwZgGm-Oa)ML|Q5va)@qby8@F
zxpCj6(6pYk{VHDsM`k56U2F8r(p$6hG(wgVK&#I!Ie@l=;vNm0+g;sKX5~<J6Nj<J
z2<20pTGJygjMvqh!Y-P+Wcb$aE*O%hhVA9oqlB=^+P-_>;$y-mz+i(Siy1KYn&Z(F
zm3XlP^Q6c91?d<H=`l&*(1BtZ5Wbk62F||2lwd0b$D92P*NK%{ttx2W{PvFL0kkeJ
zRpF4i+nmG2l=d*k8On@Jzyb<7!W(D42o37iGu?{*CpXtW%NNF{4p1EEG_Vr!6p;0d
z2!?0l0PIHU6Qz?~N(*w_kV2(hG^MukJJ@)$NFL{S$1XOC6DRJwbSG+<PYtF7G0KO3
zO=h7IAm=gg#IV=jKi;n2X#p@x7eIAQO1tp!jOE~8pu~uv0;LD(x*3{Qqo@Xmb*5G!
z-JVYo7o<tG@@=DGcD|P_e@VN*y$y@!@2(7OrP)8H$Psc(^cy;@Qz%!v)mq}bBi9_x
zWhNFXJ!s*_&RBQz<OtEtR_L~U$usYQbY|aDH=a<<oWGqwrfaN~>slVlX2UL1eG8^q
zoW7{NacidMt5!}!Je@%2w4lo7p4^NCP|*Oswb|Pw+zkCn4vaViBvFcRG#;XP!*^t%
z<P<_h5H0y%*tmcEG8Y%fU_<{?e;LCM(95hI*~Jv#%WFOHh?`)52X+VpHne{Gf%H+k
z1!P#5hCu;`r3O&(n#e3n;vWpR9{#0rn5n;kh_^#lgfP^WCy+Ix?N^>r^I23e-4Tt9
zzG@XN&>!bfPZLEq(8D?N-9b(}@5x0it_LBt!rSzzLc0pUIz7<Uz&P)s2dU`AXe*#<
zk>G!T5aUVZ1hO?8lIFg3lfjag0aX0mJAxU&A%6!joZ}3TphD;?(ydCwVXR$x3<RN}
zKE$UQa+2le77}<(*WQI>c;HLYx=3K`2x-@w!kz?#KP@Rnd2{Yd59S@E>ziK0SntbH
zS1<e})fW*=ihX&i8HgJ*xl?pXuZIMkw1rdTBb2DPpRnc|_hh>cRhnlya~lOx3%d?%
zRfwl3Ep<OD^wLa+DghQQg)(f#uFL(Ubg*yUOV#-HUQCn1@r=7o3T<Qu$Yl3lrH2gp
zUnnyk5+6jwcuRCYkvi+v#!sQtZ*Q*ZI+kxfjI!edLeIJEuEzir0c{1LzN=4il3iWl
z)MdT%Z*vT@Q$fMRXZI^0&m5@)$=X=1{?_pBgh{t{JXuB4K1>Z=&G+S|-kx`og}hUG
zwGK*RkzeXD52;yrQ=%`=Y@Ex?rXM2g%r%mPGgqD8l<_}SjhczOTP>Dj*~Qifih}>@
zVh9hm>b-jga^EjR;qAp5N`<$CTcA!j<hhX({uR{N(p0lO0f5>g;yrLcRry*B8unhs
zI4ONnPiMwJ`Tiv`Ve0T5^j72h$wv_-Q~@f*a+FhDDVflc`DL76x=5^Idvknn9T^cb
zSn9Mg<@4*?gOxYgA=gc{BTO>E*m`q^h;&#nWPZ@lWP3dn;~PR7Uq9#$n6lj7cp9+~
z`$<Owl!}*ub3HZj1Ll=ov@z)^n6?H$F+}ydpl54ADT-Cx?^r<v%D!6cBf6ERC2XQK
zk|on_-q3{`yhK??PO`Mlf8fWVTsu09&ytS5o4&p<$j)POC&=m;@SnLS*)7=(6X0xe
zx%|2mf%-H)EQ<4BdaQ8`1LXtBK!eI?^{^!rWEZ7~%$ZLng=QU}6m>8vZ{(^3Mt?nQ
z3+~>cbgY>3u!rj|!bl8Ch{n)jP&S6XjiWo{MF1QA3UXl#j>AtAb2++Or!3s~Sw12y
z*cS%6)Ei|+)l%Bd58dxVK?747y?5z?5`)9?FJjgo48aB%s@9knRK`ogUS#;&?z;g~
zbaI)rf@wNwT9tYbb!ZyqD3X<~bjMG(0lehE09+_;G>MZ5jvaq9Qq+ne!Gw40?_}te
zGxz2^2m^^>6J|`zC$lzExI^;mST&S2Qu4Kj-@wt0eVN*A>3#TnaN>Z;BhHKNbB7^6
z*j7$u-0dL8@KNK<;ja><17(0OAB*(58gfaC>vf5Y{@y2vU4lgEndoEE!_U9R5sV)=
zSw&8fOa#cM=Bwi2*Fm0zyB`XlU%mtC!X18_Pb&-k^{O;{kASQ17JN?Fsk<kczl(QN
z<EVPT*1vcNj0g-`BBV2TqzyaixdZb&54Avd5&AzS*l>yJPJNw)57d7ffEawx`Q_0K
zr(XfdVbEx|`Ri`L0IY<>pK7PvyBLe3<Qe3oYJGbu>i?3K{lk~^W_x8MF1LL!fph4i
zqo?@mNu-ONsHIH!67;&zm(1=JBFjD-G)mW=Pj&1+i4Dvzr{l>un1$K%vh)TRshQl5
zNijQ~5u*6qB&I$8bnsu>`#8|E@+|i(N@=dYdG(x|d<y|xsHnIvReR~?@-JEBP<dKK
z=w*F9$F*rD5WrneFt^6W+!g&cgm!P_8~y`nyZvtrbL=xt0sD;8;Xf_mxnC%is9`e<
z*njWdw;&o_8SUUc)bfvD3++dvy1x~TWHfyO_L)_WD@5>&r4a8h6u}_}xayC$=lfgU
zo-j4|>OKl3m%^C#Gx^ScajG}S_Y|ln{+4N<H=yK_+Q0f5RxsW(PajhqdN)U~==Ri!
z4@Qq_TzSAeNpR>x7GXTPPxUdTiGA5u9gCd780iHL#S8zmy!aoMI4r)G(kM{xqqu*t
zn1AxPpW*J)9M8Pf8qVxj)sH4ZR%K9^{P?hU10UslbT0rr2O;TyKLEVSB076v|IQ6g
zf)5EO;(qxbSN>1$%bjfB%%A=(GpA5zxWDf|=mRjub3Eex!J2`+N3;mcH_)}rf&Vrh
z%nSLq@nHCXe;d!gjpx6eXZ$<z{5$d>82<l=JXIP+V$*jn*4k_QD@;Y7gO{O)icM0C
zP*P2jVXzytiCAR;p=>u@QzbSOEIN`5g<sqJD_H;G55xBTnv&B#xRQ7SpyBxSkz=P1
z1wmCuF~R(-2jltwc{GQsBoac<2iW~fgmPYIc##aUblsa6h645q>vm&m;9731yF?o>
zs_2e8TA`cpP#gw5kf-+96qQ!KIfgxiLT&&~QR0X9HN@cv>B1gN#tnH!{&!fLf8*qT
z<Kz*df8*r;QIg4+LsZ#YsqZSd9NE>+5}U?x5xm@a!Ia27FJ)H(PRefU*fpWU4fg~_
z6K&{!_U|N6M@QHMQ2pkXOJlOBpQFeG89{4Bq&1^RCCn0;keI$!!SAdIMXXaf1&@#J
zxkwLhU>btS1v3sK<l#E$T`_5+Kk|c^8znFeyvdS>Up%h!pNiAb9<%QoPnWtun)xEJ
zJ}^u@z27?xmXwM~$%^ki4u(^ZfYrru`yHNui5$UP0MXr}&sBXad?XBhG5?EvTJsO-
zQ{w|ucaL6u3@fYQHX1RvYxv$j@Q@M_T*!dvUY6|h?(d{w-WHUgs})mtx7TAS!v+4C
z@$JWi#KSMtE_jbkj%WTm2`mG`2hvIM*YEd;i;w^~QL+y|O|l*uMXG2R_mayGgnuXX
zKdNB>DiI8!Ne9zGk*(3ML8I1G>q8_9?Y=H+?`3~Z7~ZzdTSeRXk;!+b^^U<{3ks{n
zI7EfB7SZX8=Rr0_^oSc;mBOL3tnuURN|1lAHv=)s2+gr~MS4{Ku<dq0lW3ke{8=4k
ztiU`h3jI11&ELHV`Vpe+Y~cp?9W;|8+A)Z~=i_o{K<t?Zcq~PyCoFtO+Rr7sRl4R_
zO^`+yzs)s#)l28X2&&KJo1ZRZXLC9KP}$thZ5611i82Yt&fZj@<-B#?`#iVLUY1IT
z3B@&+uKl564q}r!_d>D%>Az{wE2lFo)UHOJ|4R!1qg+0!C+A?qZWFql$?`1Ar#SX%
z{K<h(g{tIejpEUn?#f(HookC1S50|HQfxh?8WoYLU8)YPlQRpaocBlbxL+12!hV5u
zC{)7qkN_{GI{L!C64p8Y_p?#(L;;`<0-9B|(AM;Z^G2{uJw^c0Q)>GP3UxA1W{;oc
zcMNsTwn<&pg*gR=3p<(PF;4T@P7|~lD%tlWAFqwdtIqzeA0KPneNA}3z7hJT(zdAD
z7SRBvV4MqT>&r{3reBJYX~<NyOb*aYhf5Qm4%g+kYlzayHG~;UYvuPVgc+f-LKc5a
zaSt?s!T_q1jk(P~4thoVUQK~=kBc+=Tkz03^-6|?&tF=@lK$mZ-Z0sPN=|V8SqnRr
zyJ+RU0yCyqx3#ycTCGDaNp`V9YwJ)B`79qAOd0DkPZ47Q;`GM@S@ASkR~!fU*hNH}
zp}UkxIU~we=PC>}0=wCDS}^HJ(hg&@U94TxElm>f@DpbhzrANQb~%{1vNX$e{czWO
zdq1w6`<ribg)$?qn&5_&Vc|mFZa+@QwTVgtf<Vr{v_)Gyx+T_@vvs?&AP`PNg0c>z
z^p`h@PcBYwLQ__9qt(l_R(7?FOU**M2IyH=H>mZc=i1I`_m&z3sa0;i;FN<_(Ekr_
zCJXB3A8+Trw@HCP6wPHm#4bZ!HzcZW;8t%gFObrOr)lLn<UL*frP%oHV&bX;re4zj
zW?}Z`%X2)T-y*MTRYqLaQ7W-sV21H2;m~~Qt>V7#jn8BFYndpUFBmP<!R)t1>0ZxM
zsSEWw%inbUkb4N}6su}i4Ahj|Mg`J5sOw+YC^Ly2Dj%;U+c9z3-F(NRPVN~F!i_w=
z-j3w4$yXP;c~V-V!k}$a6ZEsIJxklmies~HuW_tr+$qlao~o}O<MKYnu;m?(H`O1f
zb`j&$niQ@n9e$i%?>jX>1%Jyqz;U|bHYDIsZpAXAR1OW&G3Ab^vYAOtms^9*2=TRt
zEg?qdxU*bIxe@VlpNTLc30*7JwP%JcQN0yCQ15>*8O)GlKZ2dP?v^NjdW!dM98Ckc
z7}b9CE%E}Iy2y(qB7Q$x`lqBWyq`1ddm(Z7Z?WM=HR3b(sz@@4_^avsHm-9#XK!v_
zj<uT`%75|otziF_>r~FTYO=A~%mg$l`k!*WgHcS(yz4Y-aU_u|vYrZg(p#ogvAra(
zRcZSYQ<I-p1_$<FsK$rkPW(m81NY$9g=56;;(M0vuv6sj{(KLqeEwV27TheN#6;eP
z{#rjBo>;f|w|NU~)iY`?j_cuM!W)^Zy5E!R#*<H7PK%{1wr{Ubi$(jK7SK%zoE<2x
z{e=3g(LWBmsj^)$f=sub4B0?buGT8ZfG<0(xy{*Gmw1$cSv!2}CAJ;Zby|}fa^Bq5
zlm9bR>yEnxUN_dEcXR~%IVZf7q`K3;U8Vn4(WQ!Q00semPep~QUCXfWe%BQnibkzz
zt#+sBb3!Gnz_sG(PhZ34sK$!U`EnGa@=zJAUEuTQuh=NrHDirHpi1hxUXGa~xHSm<
z5}m&;FKK4qqwR59YE*sPQ<A^xkU!n^;CD!JcPpI|O60v#%oDVL@vP=Yy>j3B{J$g_
zF7wpKjvpc07j>RTz)L);f8-e5p;30Y08_=7Du}Z$zWBH7=q@D;Q&A_PY%uRZ<lCl0
z$+>%6ZsINudbF;!QU>;w%-#I?CGeG<R6v$%kGt>LTqAivZF38|TQi&vo5`miEWcOm
zHu^KsqZbLiQke08-DyaAXhtZg6t<g>5<snVLWc>%OfK1b<p`;lF}bcoYvU2Bl|$Fo
z%7x$YDu=Kr&v)$7n%hQbf$lO^F=k8O0Y=y#G5oMk;J6<hAxgtO+=<{)=wr%7&pAiY
zfqyILR;m3cH#z<Gnp1&psYYytYJwqQ@zbC0DW6@LtGqq8;J7}=F6gvs`*^b{j9s<h
zjx5Z)*H3GG5y8p;6BvBQzP`PU*`(`W*C7EjZp_mbKB=cNFQ2-EDc<*)^7*k(`fV;v
zM0`<v*Kl9*MPp`)a&zg4#IcRvKh<4G^nYYK1??RdSaLC=N^edJKr6&$VQclAOfgGS
z^YardhWD-WF1_Jxt?2oKj<G}IsW7KsB#9WRk5laKzYnjY4Ul4}szK5d=Ie}qCrV&t
z)PO8j?j=iVWBUc^(Xs?g%kZN{Rg4T$aGGZ0*Exs$adz9Io`t?dr#UXMYov$6;G!aD
zOjGCxVIV!;`gPE3vb+fA2;+LtRN_nty}sXK%<uW}Z&1}05#Cw?-5Ay<mHol7SjPdn
zA0q7B3xfYs=uV!x2xCsU<|^qLeq2o)hpXby_|@=Ad~1!4UQyp(biQPUBQ{;H$U+n&
z%$1M0^!rhwO~38Z!ysNJlkO+9J-p_9cc4{_ohoMWTlJZ#!9+h0U;Iec0}0N94yOhA
zm@<d*p<S5z#$~uj-&^94E8QU0W!#k{ojC-Gs$zPH4=@}76UgBhA8N%=jWpXU7MuA!
zFLa{#J9L|UMh(bjZevF6zyz1q(9|ZowKC;pHU-^rOEVvDhX{$|I}BG7Fsgm}E}D-)
zB{y7W-yn(|)j$Z!^6@r-D;fs=Fzl{(Du?`v$pe+j4JK$I5FLzc+J_)~xMeg_TQeO@
z7dI@hf)7W(kR~haCEJ}@US{DIK5>l)j;Q-nnewpzBdRM)3ID4rS_A^{U7CaO&t60h
z-oX4KIp^aGc7N-5|C^Zl9}!dkW_AB}SY0!39+zKV&)$IPfYdjwWuUcy8OB9~!oCy*
zOa}tzbIkNDWA^LU)nWK5E39eD>e7Q?jAOh2=9&ZB6Fvfq0Ns&7aV8%QZq){_!x+BD
zcQjWcU0^l<OWpb*2?fTWyp{GPUt+vHdHWwMB7u>)yy~P~5{1EaQZR;fEPoINdCLLb
z#IBftVF`xY8^6KFpA0g=%+!MJ+t)D1%-(bX1|VQsfnlkQvLTFHQI7_(zbveB#HkRb
zJVeDXyqjysd{;fxsLwTCG+0Vf`_wHRZON<jFYq-y>G_|zd)9qmjZ6@|Me&q{mE$;N
z^%+S#9)I^|9@Wo0J(!=dQt*&p<x6L|zf)(e;CSX?u<S#0W@eOCO?S$)b?m5<zg6ta
z(mTDOt?AT>48p<HiU~7{A9REt$e8AWjwM9l6pMw1eqg|&p#PVDJhmC*hUz6Ug6Ue)
z#IPAfFn{nOk68M6O2!rvb8>PP!l(k=nXu4MO_)FPZBRq0NJUMJ(iyO@UKVB<L&psu
zwak<nhV?+kSO|M@Ix&DAh6-x^+E_=rAxU8r;@1hcjas@V;M1?eu%*<rw1GK+2FmlF
zm5vhzA35|-m8+773+rRy`df2T!R#M`@6zpG;^BY$1iL%ZohTM#81O+{`1AR7Z{ViR
z)Lsrw<}97%(y4SU4+{(H#f-m|rhY16G48h28T+K}+3~efB)SErXg-8lZHPzbF~j+y
zEt@Wi4pw>Kn8I34^*eV?Is=0Ka#wJ@1klnPOap02vx7ahKcKIND>foL9Dl-wbBriH
z`}W?`JnT}38L(F48OdJFE{8Ty-jT^7`|rFlF&UBapy!Bq@_Dh0SGY3nm_PRvjueXp
zjGU_KfadSw)yeh?MIDeF_GcN?+LlhkBFFZ5m^(LY0uvQ;p(Xx-;sY2Id>wjG;@+2)
z4Fn3V{TQ6iES<jzb3}T+HlBcvq}Q7<ui2jrmG#2NG+LRnuBd)wA5#Q^!kMmE3~S&S
z;{2iS?Fb>`70j)L$-Mesd28;;ZogmX|M+k#(UTpfUD>6BCbd*|b-``d32sSeF&|{{
zeXvj^h9?Z>FSo_mj}o%8v*$u*$eda!@P3i7C~R@nZM)tr52U|%bPEH;oiO$w^dmCM
z0LRh?yJ)va;$J*_8B6SGaap$B^BO7))k6D^{qVnu;Oz=ATl$C<5f@AS`SfR3vBrq5
z`sy5!=hQ3v0fX(R5sxJ$eJCj@=WM&&&@=jT=a3sxi}}!<-3zNTbKZ}3Tbh7IxeF#>
zZ<ZVPWa^to=-O&6uEO-Z{y>4H2A2#!MEnsmA&$R}!a>(W5#zq45+Yajzje@H_ErHL
zF&$ai=cWTiPh&Nl2cFjB>0|a`J%K@^TDM_dcM=TtY=K#n#^C%H_42_hG#;f2zod1K
zhTnEz!m)vpX!zGp3fa9Qe9(2v(2rmo+sC>W2vHwg)W3FVSQM<@xZhE4;L}Gq#;E>$
zI{g>iVD`E*W>}X5O}Z~x?LK(T9tC#221BrW#~NRog8PR{7IH2shekOV50oX+mo<@^
zkWd57ap#;Jz+7ynKc>uE362rrSu8(&ewbN<-3Kq?e)kKxGb))8C+6w$FTC8I4?HP`
zJ?)|}M&x60+VbU}Pba^R-9UNoSmBXysSI)wOSUk7bs5TkVR$E1urWJhuyp5!B0dR)
zCSem4dlC_@iT-i!hh4YIQNj=FS6{K8tkG@Y3EB6|A_0W-8qcl{U~5tpi*YwJP$rB^
z9DWHR22AdV_!=r6vnMbYDHnVx{%+UD+bkPFJ;)Ox8C8QK*gF&({m7k%n5d8@>V<Fn
z{g(7*zl=xhrtr>B;aOPfRZe5wCThFVE`8dbYKLQ2cz0R&8_6upC`1O{_;tqZ+{MLf
zyFG5`2=u&NC9$h3+vUrb7rD1}cieW@-TI+d-%L_c(snkxerxYj-F7D2W@C4zVm*-;
zv<uC2haYd0I<KRe%-vA^!|O#kIb3_6SSvb#Z?U^OY=3g=8XZ!igL+_><9Ade9m)Da
z9%{W0%|EwO{%f2CYuzdpwb_Lpn09p?$9(A&g>q>@(@wa?{=|HVs1-z7wDJrrljylp
zShQ{qEDNniwF)lmeRH5+aM!lAd~n%Z&xyqy;Zf@O$AilZyDJ?juEBcAyY?ay2I#`3
zTbF8wH70V4^&Z&GK<5m{a-s0}1u4V9PH5Ih1Gfz)(*(97)#>F!Cv6Ta#lzQkgH5p4
zOcu0?U`Sc%SctqQCrte8P~sc${*n9P8{rwbPl}G4{A;P16*<D_DP?s8;t32!Ye3ed
zh2F;A-OAiGcH3;$pKTK-%fArFcRuC*#TI?+-R;)hC%a3WyZ2xQbUw4<yD@VE^`?s+
zuuHUc&3t#w9Kyvl{;^<j%bVe&+f0k~!aMCdXyoo7_$L{DXun!6yuv;ndgNtv)Tn>@
zn=fup+NJc~h&DFd`mEhR?~?XgN^by-n%#-E-4!ZzOL5qgtwNVgyPDYuXO_h3?0vcO
z%QeWVva%TY(;mJn*t++8kF6uTB4Tj|mSL)Dt02;<brZhnZjdxtoJz(dSs7x_{))XW
zk~8(SNCEETed7VT21;(eMFklz97{YBQp^`^*V=}wBDY53Ub(k$1hYTN5&?GK<1F$1
zcj-0YyT@Yi3C4)1s3(nltyC87m+UI0E=QQ|E>(_1h~fQTQ=E-HVu?5J-^ZBcylEME
z#Xu~p4tn#}9BW6Qt2!NM!RmF)`q&xh(CzM2e9QG2aOG+0W!RQEt5)i`YJ860_Q~QZ
z)B@xBc(>1Md?4wn5j<7wiSLB@-Ed_Vm@C7Ae;}aZr=otejhd*6OLD_EBRJM!@_)bg
zk3Z}I4}uzeP=dZ}Sy%(*=(mV2S$ZAtC*1R7n4hy}PTK##y}LV$`3*-1UgBEYdLTr-
z@Gwv4tL8ua+J}qWe3%C!B77~%YY$!ViL?EO&(2|lv)rF}osh4(8Zd_^6Wshm0E9@>
zVmLFsP=WKxysTUD{U%I>U$y=dItbiueNESeRfmJq6JOunhp?`{m=6unUxA#<ZCwp!
z|L$u%LJMx+OYpB3hPeWF_y?SqG$f?lJ7}xBDjmW&g*f<AJbPES_q~7o;i@aD)}#=(
z+cO!5<i?18|7xCQ489C8m};E>^K$|xI`%&h^To<B%ssk$NnzhC#XN6p%=3PDY5&Ie
zKKh#d{@aL)J=-FRL17G043z)jQne_+z0KW<#2q-|QXfd;#gtJp%~m=du4Ah+k16UI
z#rz-k-U6!1t?M2a5RgM&5u~IPMNmNz=`>JOKt(zQL_)ed#X?X}2}w~wQo2(S1O%k}
z(A{xp{_DZK<#)YTzw!OY_`PG?cZ`FGJp0*u?X~8bb1vJxzAU+5*lGn%D!M`)2^Y8S
zyT}XjSgTmXf%bYwb_0yHp^sDUAj}fK9!)v%3SL+9?#~bX`N3+MYtf>;T_X5+ENfgQ
z0vf(*U$^v^6+*t5X!ps%aAE%)Ymz<jClbhv^W&tjTi}-rH+A0J++0jwce-e`DDqQy
zuk8s>xg*O)VK@MT$m&{Tu_m^{GFbfhGPG^|fQ_5+9y&;s1Z40^wUALFFgE6}f)iY}
zNb*@31H-nt?BQOGi;Js7hAW15=C!Z!f_<fExXi_iR}jDCG=rx1?MY?OD%Y0EM61D3
zN~0IDlg+X0L!~`a3V4gG&OKyHd|sW+U8*Gkd&GHzj>><ox^Ub@%<k)h{%((O-rW)6
zzASTbj{R1~_AK$-rDT2r?Xz35+)CGwbAVIr@y**8!a;rtdNW#lFdmUeKtCoh!!1~P
zQT_g|=f^OC990cG>5sq799Ie7=7s9P74;>~GoFPrm?@+m>|$Ti4Wnqap$;j!_~y-<
zq76%9S?k0PA1*3qnna|5XM*`lFjHy<qJdjADE5s&qF?1O32rp$6&wYEvsr!zWG`RV
z5e9>*93il7g33g8yzxGJ{Ud!%dLQ`Z1-@O8|D98F`q{;ztG?`uI&LaO#_Pi=Tv`!d
zgG@kC-N&=GR%t@And@{D#eB)<${s)jHS%%TlLVe;Fl4UH5S$Eh4mQCADVXN5GB#C0
z+BH53aBe#EvV+O@?U#95^qC9b|M;;oxa3){tV7%xgF!bLV5+N|KM_SNl|7X=>BteQ
zP_zs2Qm2JUa3*8m<7vKxKTpKc-+L%-ji!u3KTK0tPBg*SXNN%no|$K>Zh#MkFMHqa
zH?4`TDiI6R16sH=0!yb~Ef~}+COY0oQ*{+9Z`~UZ)=M2#EqyOd6&Fq`d1du<8O4mB
z)^&NY1evz2v*v<ko~wNdZI>aC9V=R;tLD5oN7wMDfIN4Y`+o??_nj_@z&1Mv>slq^
zX!XM<@qYDImD&2W<Uuv?qPLJEaHGvPM!cYDcwq3yp<{X<Uc;Em`_=K1@o!`v;E{ZL
ziEQ3D$QQ1ST{8)vo(#irf3QxSxr_63;@9{3yX)!3{YY~e;7B>KOv^FL-{eu3+vjRX
zQ1iAvQv~@wbfE9ogA%Tb+-cZ!N4M9soMd~5I_9oY#6jMNa+;M63;EtH%q+i6_w<+B
zSM(92_9pheE*o2^Bxm5b!}0z4kNm8Q^Vh#8G3<464c2nxKKp;~;4hPx|Mw1lpN;;%
zbMOPPsO(@Dzz)q|@~k(Z%Z)L0$0Lpd7^xA)TY`m#n$evLs#BYR3itn?fhu`$)ajU7
zn*KusbU9|!er<wyM?;?E*|Y9EnW;t{tzckuMaXV03H-ZC34I&LL$)}cBX;=9n#e^3
zi-d+?XpDL7xf6urKt}ngVCUtrA1(;ox32ChlzD*EDagO`yWAA{!oN&plO`RIp@+dj
z_UQ*<NX?LGecxrMWMOhn22{4K$k1g!7T$p^(k{Z!@idTF`nSc-eaUBTRq%KfkmPo)
z*6He&ihs={Io)4;yycbyyXhX(yp8+&$`7@DDs0Q~GsxZer>Fekg!K6K8&I~LcYw0Z
zs=9IQfFN{J?ECIZEKp~Y@1--ZJY3`~vCGmQamsBkxHP;Wygc;Ok)FqPMw=EeP3~(o
zjKTqNPco6Bm+?4K(dvqSEh1e*U6IStq~^4!F7SoscmKnOhx+0Debi@=)Kwp;b>e^O
zm36up^6=POiQBV^yHeJA?r<PDVmkC&DtCsQ(_EbDK4vqeVF1%`xWT`goe1;19<sbP
zARWX57$UqnRdUV|#-okJya-K(>iR9d|3mVJ$R1bu{vLlQi5o2TPg40k5t{|y?ym)3
z15)-X|I}UX>k$z(Bu}o+V&<8cvQ}m6qy-anQeVD&iJmp;$Zi2&!ZASdQ^2^pp323K
zy)uZq0x?>Oy8z`9A?1N2aw*=3QUf!zs~_^{kG}ut|L}Mp-@XiJYBAr%FCe1Kd8CNp
zK3(XHO~kUKi?;e*QT62n{7{vCh6=Jq?&-_S@|<lzV49!o>SAMO$5|?Z*(k<fSNG0f
zi1wIa5*X&<tvvwD4$$O4ik&+L=jjeS%0>1%=lAz|j4WF-(Lc$fnFtUZwwvy2Z4$i~
z5QBD_J!lcE8xK~Y<o=RWew(Pdmfiz+W@DX?lXW=EwGGRC?(3=hl1OhBh*bOez4j0R
zMisQkcAq@}wsAF>^<8=P>{&WYvoru}j03JYJVnSPLU{9rK!QLJX@&PCk>zKQn8yD7
znD!6rh5zm6bO?#JH-dS@ss=Dw*g<on3mKKA1vZX0af6!E+IvJ9F1eE<HS6DkGA18{
zG2;Ihk7|3e<=Q>KyOhC%(n`PtY^E0gu7xpK^Kp(V3sz-JUVZ7D4Y+~GnH>A6XL9e$
z$mHY?F#BW2Se9ze0s^J8=x-Q4+Ju!E6#=|IP03+pudx^IVLbV7x9gWJ`9rnc*B~vP
zYFGfR-j#Jsficoogc(e2Fm)@CZwhAVB|#g`B*Sx}V8aQixl`Z7ur(uRG+g4l_t6iZ
zQTN-@!Y%q6>kaQ6<(j}GOfrZ&1&pyi+`fIAIe|*L#cgSJJbO}&_P{#&F7+|}`XL*s
z*DpT-b{bb9h7tdw7`Cn23dr}3F#06+<xA9U>xb-dfW*Tz(t>I*wVJyiu(3K@A}xBd
zXfJGgoK1l9Z@2yFf*6J@H}$<`6srSa!U9~BU*n1^wctl&tEQT0(ANWLH=5iNdqb_7
zuNUUHtar^4tlJHHqRt$%81fv5B3xPVRMB+a_kIaMZo`wH9V64cnq}t=h4VK!D6&ES
zYYd0yN5U42FAY!1%xunI>6pY5$9=5oLoZZG%#kAxv*5;oQ;`nFp<BZqKYSSI$FaD6
z{AjoQY0pI1D9e&gm|13k_6om?QR4m3vYeF761U4Twi>=dxHHcXm|?eUZmjw<$(Kpr
z`$T>qL!jYWv&h?9d(OE;MDf;n=N~ik98!Fv2vF~Pi>Ha+Dol2ArU<gZ)iGqSTmEL~
z<tGo1TJ@acS#CYL{#2Jjp2huvDNAr$HqnQ{NAfBSfV@i{%dou9-uJhks88JvmH(RZ
z6{iUG`(LV@=aZC_9E0{`8em#@_}5#K-@v86!@;47yQvvkWNT>BD!BdG7pwEsVD^o`
zaFk!MwD?J}&Hc0q{r$xKlwjs*JG)b%?!oiG-5Z0>>rGCWrNMNoaSlV!wge`UQuEgj
z2+kV5=IVPvlqK$DrcJS#D7s!lnum|bFYh7Kg+$>^pwV2~efAU8Z0`Y!H+@d)cpX+d
z<#q}nuTO?gsnceO&&Bn`MZF@|&8}^FKFuH$o5@D)f0w<by-~+kI3u^`CG<h%le6OQ
zs4)HQrwYK?avyL4>aE`s3(OXwwwEv2Mu9OYbM$H@RnFQ%8y9}%6TUh)g|+BeXt^-X
z;$L-|k5z90P79TT<NGIkR-LwkZ}5E|{-YY{NApK5nOCtYMXm?+8V$oF@?jd_v1_6m
zl^8Xp+-AFlF^cH}X&lEBWLAh2T|dTfJ4m%6bx*PoynYB3#^&BCqcE#rPtb=oM0VO=
zexecB{IjF$<`wMs^zm4FPjh3q0j?BE;k_rCKqm1rD-pIdrm}|@J4>7{W*{FTM?2S@
z-fi$hqk>j~pmk7vfB<Qn?9GRl)soVYtaFDL2EMY|4Fu}O!TjYw9HapW%mu4fy%#M2
zNk3W2Ug1jseOu8Wn5t%ImfZNqYxskSC?3UyepJFjzWrnxHK`C4o%L*dM(cS$<IX|F
z_KkpN&_Y_zddZeF8q%B|4^<N9hkNbE<Ds)upYF6uYtWhO8R9U*v)Sd0HuHS<PSU(!
zZgtv6T>-o<$D6f$(qL9C|A(yo%pd7ft`<nLyYm-a6lJ0DD_!|1@A=tTvwQCe7{WBc
zqPG)SjeLVo$Q>Nou4l9~ztZ9&%$sjiwt7P$zcq{l8n*dMRmP>iZiC*xqtYFpW^jE7
zP3YFUOiHD}k<06xks>R*`n1DzWjuYPiU-4Q51qT~rE!6cxwd!ot<w#MFXpUg6QslY
z@6f;DvzQJO8_SIf<{zO)N#6%(K0W2wF?X&&I6gW_&$>$|acxZ3KE4ZVTZ8SIIvR)T
zFYSIVPQBSr6^($#ctp+QmIQSsNVj*e!c`QmaRV9}Tfc2+i2g{6=bMT;S$A}XZ+)@X
zJrX*zZ6MQ(hha*`uD2eAAu?)H^Dsq38L}BJ!t){go1`1`EYiVb@}k?$ASx$ifejes
z6w`Mvrn%td`~Rc`a%M;i0K7pe**<1@1t6rUa+-*mJRzq%;5a|YjKd?_)!S~g@K|Ic
ztCb6eZ#EAUq?WyhhFP9IeF$IOM81K3l<MSu`Q~iU4vuyhaO^J$y>n3gRk4)F+TGKG
z;Wsy<#~<%_WaxV!ZT_J{hteqzzTEjtZ)~Bk1L^jr|C~#I;d7t!k^&T@moHx~8U(NQ
zS1_VrD??5JBarOY>*>L=6g`Vna4^w!kszA&pJav;7^xph{k3F}P5erNAuUEEU^^Yp
z!pqokFPLlMkPA~!XlpVO9cRiL(X&o#%WalC=ZJ#5DJa5PkJm9IWi%!b=Ubmhxw^3K
zRe<Vz^3cgq>4K(iXeZ0;Qq7%1$?OT4A4rT_>z%Spp9-z_z8y=E7O8S@md+|pBJ^qv
znwdeb2-z*9);@jP%+s2df;pCJP%VOak_Ul4(A;>bN{*e4?REf(&c`IwGYDvj;w;sc
z>?}xvPW)37benXks2Z@uyep&Gw43sPf`;ys>3N20SwI^duj1*dbXa*Pul5QQrCwn!
zx82Som8IQJtt{PdLwp4|QmHBBeP!J8YVOYKg@vv~gFGtEAyxL>p6K2?9Q2w#>x*yY
zz&!q3yn*&zTCP^Lm6mF^#14zugI2Q#Gqm%as}`phX3i42S0~a5wbDBbX~x1d;DHr&
zhiOmP`4#OOmWitUC?nDMxVeCH<B#H%<4@js<Sc>#ijmNJA)eh%HiLPXxbwl}yPqHb
z9AoxEjFBlf?~o+m^p6t5`R^U0uNeo~!8W*4fO7aC4|FC)SO;Oy9`r2Re3_0PAsl0q
zw}Els*N18%YAIj5)F2P{iE*Vz{`pV>y{}9TJ3J)EFBIF26`~q-F-C(6a{nWMQt@oe
zwFJKUM1nxVVI}(G-*R=j%Imdf4%k~B=0t2(57~J&#p@nCsJy>1AGSfgjkvQbvlb?N
z`YqWFUXo4=JE(31m-$hiXzO#aySchnOlA|u1GLr;37mHB&4}^0<QuO?!{7nhHe+YZ
z2DYo4eWsK4?A5?tk>#q!@cUVV73H)~UKi!TzcXgLE(Djc6Lf1A);XN1=~hC{a-;z%
zQ{tT0k&juR_<3NbMm!kIez;wO^^7~-w_*GXaCFoP@Zd#EwX4{f4Wf1us;H)~#Ejp?
zrjpaOe0wxm_b)fRmWLE3!_a!HSrf{Mw!w3C&?`p>WsQ0E)&`AZlU(PrLR?40C6S#C
zspj`^;2*?H+;78<yFg-k#Vu^T<Ouu0gT(KEIpy7$Xg!JU6?R;1U45+f(kigK<WTa=
z<yg1L7cAQ*@RRHKEs63QQ>=~c^=d0t1f5`Fh*gJmB5{5OWQ2~wW5p5a&vREtNBMfs
z1@jJ{T4~J4Zh^tHbo~!Lv$<XK5Zv|rFT!2L9a@r)5O}bNGH@M;Sete1L#^x^OiGzL
z$NKF@M)_@LuWdMlg%+)s^Nk$<WN>?{NS9X$e0ryNF-BJAh6<CU(sTo){v2&8a#u^4
zAE)-jo=hN9PtS_GtHOkQ(!t}%H#AqI&JsVQ_eTD#2$x{nm(3gbjzWq*Cf>VXL1|@y
z<*@?j%D7@TpcEQ^cmFYdn7U&Xx7DO0M&5ov*(kqdKyY5$lQ>rNGZ$cLt*O&yHyKlI
zo>2%fy@k_M8WM`<ycjwMr(60^!OrvSIg35r$i-@#p;gcjA52Um*nEiB*>_iMuI=j+
zth+yv=DGS%+y#W~WCbgV5o&pM-0B{?&lFZdp`1zlyN>tgkRAT&X_0Gbfinq_<T4<l
zg^YQB(S%06nd;Q-_e@_?Yi@w}a|fK{uC=Dd0G`?8z;y4x_in__deTjv)<2~Me1`cp
zw`}48MSY2*2I+10Sy)&gb2E=s&X^FEZ@+A3@+pT-Sg5RHuqk}LF=en+%vCL{yOW6e
zO5!2qt4|ZCs2#5N5c4#Lhy>8sh2ra0CS7=XYEn*KQBlwOe26|rL8?jETXhlB$PTNw
zA-T0&J&t0V;dTd7!W2(#!Q99urajjD{Cx0O38~0Y%yA1y5C%jsT(8gU3(?lm(UDV9
zqFDtPXP*H`Ef#xZeSs1ZXpgk>QJ+`&3-bCyJh*Ryvrt=zfORV&N3I5FAF~}7T672O
z7$z)7p@PUX?RE3%V4U?JARhxV`SUPpp;k8_PKE!P0G-5Q56kjMaRr#|p2zX<b-F@0
zizb4sq|?04Wot$XZTN+4?XqU}GS9Kjz;w20K)pqrf9z`e<%PnzVTc~`w@UK+P{Zz4
z5dR7kQc5A_>KZ55l(ds}4$FrLJ6>Nu%i*cIy=&j64ShTzX)?Hw8%sV;K@%#SWMEb`
z4oMBe&`DK?={E>e1*yr)S{gc8D&$fuqW;O3BBa)BFuI0I+*8%3^>PBIb{Sb)u5C)1
zUftdyPkO6n%~~nZ%fAG_IC;GvHNoKfewP$MBg$_l(O6UUF+&@kXh(xJ0jrtveZjP)
zBK@@c@YP3Q07hQ!;zP#?!IvtUP3|4;)EK;)ibG3Q0~M2NGmZiii@m>3A~cO>kgi0|
zM0Q2GQAf~xIxFZ7dU|@$U5fzS>l?IX7#l;jl6Fa2C{4zgD?wln)HFwpe*4pYM!xWG
zkyxAbghW1#LYEFyh+sryB=ce`05*@+?Dj9V=Rto=7bct8{L@7HUqG;}?<m?!3MnQ0
zwcn>tuaU-$W%e%cuOL*c_JqN$>LQVfTq{GpT?zn)8&>y<w67Wn3<PK`@UIWQ2u)Qs
z&gWZPcIUc^s5{(!1_jsrtJVu{4B!CaPso0ubrkfj38~Hs*+&<bD<zz@AFDdqzP9)j
zrCIBN`m-96Yv2L%$U7FGXE<RckXiJ!yTq#vi77yC-nQO0%aNH$*Fo#nffF!4+SJyX
zW-#7iT|jy8nL5mACc%3MU@>amsy93Kj7!8GZ{?qx42F(FSTSsPd0DKx?EdcSJ+E(B
zLH?%<!%DEvtR|S@%J<quB3dJv$*n|l93@<b>QT!9G=2BKOO{$bzxHDZp+393iGkp1
zjl0!G9tLl8ez>kFbg5iA4nUf~UEpX?cS_AFCVoE$X}(p7x8K;k{g;k(6^!Cv8k6u5
zrg0F~9+I)|DSr_M<x=3JF{pyx3uGt{%t8)ioT#kpjvo@nhasFDoNQ=cUB~QgF|QUR
zuNM?vIg?}a`sU4HnNyqM1DR+*0~dpGX+`rFS`E0wJ$ibs<P1gL87n5_NQE)5^+O9L
zCH+VflVNR0VxTj1T&*M9l2BL#sO9>pd+~P#Y=$L@pBa{Xg_JQVrT~(=MZ%a$yu7lx
zSpKYHNPMrq-l*CUukfn)iDBqYf-!b1cqy1oTJ+z;s{fe$__gvso`9x#pzAPubOrXV
z8@E81-AgdUpSP+!{C2Bz%(8^f`(%J0aJxo3pL$iPFFrtY5rMnFM<Z;Ec3+79QZ7tp
zv>NVz+*X9olT0dN(>3ruPz#2PmN_`fXSvz)b`4}ES7JJ{@JZ>f=!QBz%3?Tz%<Lc>
ztgfb8ncf$sFgtLN`FB-OQ6=~4DQ_Ab06_?i+(G@<?9J18&6|e%UB&h8&Lo(GTipyD
zmhEv(DZ0}35Ip0dFKw$BcJcv2fS@5lHtv^8`g4@~x499(jsR~EQ*kn~nhBLpbmZug
zL`x;0*KN*0bHzOyq^1YV9UOKj^2H#`9Y(L8LfQS)=LZCVG|NqSunFLwX!b--jJuH~
zhpvaS<<h7Xj4YeDoD7f`t<cE3(>a}&6VN2h0FbJhO;6ozkH|hr@1*@))l?_d{6y=v
zlOIccd_%~BDnlI?6hW?`RJizAK}p#O!(cODru|lfF0kIWDrb58+Kis^yc!_pdYe7%
zFP*y2dFQ|FG;3F<e^NB<IQfu0Q*$8I11n410W;y6bObt+w~;#QPXdWAWS}1hx=oFm
z%(3}g?bmvB_Zxup_w{bfA#>x!EF`czd~@eIkmPeH?owMnbevr2N*Sn9md$|@GOIS<
zx`a4zEfYD1ZI^o!U(EubGP{ByyoZdW@y_kJ-O*_3&UeX~^G#!dV#;If2zwv;g|%{?
zwm{ub#a@G6(T{a!u_UC9fwbEcVc6p?)7QT>0(U^c*aeZLwpafqg*K@X!+&FUh*DY#
zS?VP5&k~EzyB68T|9+{hpbOlX@3<0v4Io`B&}3<o41IWZ2U6aa_>4|{;44=+tbw#A
z!;9XIb<qK|QjMUMTHKOs7P$!uz~=iND9}~!^H12ar^OK^Ebm(db|6!XOFOSV-DNfu
zVO3u%p$G)H-C@<lA#0b|bi5w>H`huq>{`mS=!Q~yY{PLqYnMuU**)Q9Dn!C#4ibZp
zY7dkEw8%WG!eACC+?IbstN$Tl*Ef`xDZ{sSskQq1`^CENQga!W`7#x~U3tI`8iKvP
zoSE{brmp}^EFWo%r*+!ShB|@-<>v3-l>eAk{Ar;izKU92o&nfmPPrHOC!{wXkO+(=
zb*v}fS&3K%)Qn*L<ylxiH>PK?3EA&Rgyw37?p#u=K`tm)=+*v3<@ayvmC*4-=QRUb
zK^v3jNf7KC3!I&i9+rC|lC)b*WDT~0njU1kY8Cb4Y*)645K?#sAT)!K?;qwL?6~}a
z`V-kfBeFj2Gv4jRKyn*;LD!{)m$av*0a14sW5Ez^BqRd78!Y0SpLVU5xs@QAZ3yWw
z7b2>J-{~}dT$S*ZC3N%AIPlrEVRm0KWZI|kiD-_N!RS_sm`9Ptn^@+icIxLa|Nesf
zM&@LY3-7@SymWL?(B3~6bhP}@A=T{alZW!=E+Qcw$+#Dh=g!<@l>W3!u{OnWV}l2#
zs>Vh~M=yjUSrq&t*MT61h|?WS*$Ds1!T7-x@~eO)JP2}bk1m?yH;7&Va|z$GNyXfo
zPfr}EFO|eT0LC3&v{O`6<n*xUxwWqqHm1P@M@eQA#Pay4s6DHDWOrB~;TDZBL4MlJ
z*7qoWrNb0#8=wf|H?K~I9Z^X@aZhA@5zXNhYFbL&n5tLTPWdeRmjJGRSRCyFZcr@2
zkV3j0mY<~Cl~{@S%P$f2)1pI>8*UNf1N(#O`Ry=(6FL%bMpg!R3d+|cuoXc8aHbbe
z>}Rgc>&FM#{X`X@b5()>brK0l&SoS6gw-CKxZUTEW}ZnN3)Prm>anmVCGXu-m^L9l
zUikF%3Cm`*xbWe2A|9j*Ed$9%xG1xtDAW&{c`hbb>FD&KHa~IMOzQ+!yn}x98TNc7
zAkDVy{Y%Ou(@K2zfo!M-QMc)B&{(v>4mJZ@_Q{wqdp>xu9a11noKy&Z5vF}=Kv6e@
z!a-20l!*3-_BIRyf%bW%LZd|#X`8Cd&k51yKKl0&7OYDu=Yv6dX9QS1k&p%?m#%`H
zc`6%q^8&W_3-h-FNN=i+P-6Z}M=>7p+7t|$aAiz*{=kj=$BSk``RV7}tSS`D^X7)h
z9mayvU~1`=sp&U6)eS{fyGgkSv((o+&=2g_7T=1budl6`Z`>Dc+>9||zgvsXDa^l3
zyt`YTccmV&o=_RBeJU}8HL)RGFduJ>YbgRn;}Hfg`qN@XfD&KA;X|<ezpsdXkhlbZ
z-zQ0}tRM8n#xicu)*Ck^sLEKh=sa!#N%SrU6*V;@t<t*$!ky-)^*VEHkLkSgN81B|
zKONw&U$+_qZ1M^~tp}r+Lkf$o`1DDDFnEP|+;%&M^cJj;<^Gj74G|S*Aw)Ks9cq>h
zmjNZ!_Ys`A37I6W`pROjPdrrdz!^C2D^)CW;lghYfUATlLE%(_@PQBlJ|3|6zjDUD
z1l@lLHx+lbfFsxkxj2RUOQmph+<c@3##6%|2aflzXP5z6ANT-q9C^<_8uyE`**~70
z#rO*!w?&KYCddN3(jpAPva??veo>Vt)|Qu$*@IdsB6T8j!e&DWZ$fa02>AEXYUB(5
zeoeqNw4&WP&CwFZ%0nWc)TYC`zC{Yz9xA_fdyF>*@R?s_ly08yzu`@JNaY%U>_qtv
z^9}NC!N&R24(%}F9>@)$4T<U^zbF@L7H9({iIl+jQAm7((m=r}Y!mlnaZ`Z+`1vnW
zAdsy!HYaJiBjlKY8`{<UqX!^fdF`?riU`DgqSEb7Dx3uEz!m`X<MisD*Y13g9FAPD
zIH0Hei^}C+wjebp4Lb@pCb~lBV!_O+$P0mcQ>ujp*zbbZjN<G-RXnswrp2`SarPnw
z3+t~fSk{faK`7j!>9y-BNGGbgBI9JqHp`Nq3+IPkUp~(cVr=5A)48V^)d7B~lz)(>
zjGrYwK2y<DD@gwC+m9fOeW*R&7@;eZvpQpW)XdX?MKQ+`jeN4T*vv#{0`(^hfQpIm
z(=<w%@5!30L)|(N_{MarnJ4eXD#!Czr_8Dk+}jN<F8ASEKU5O|Kka{)sPCa`Uxd3e
zz&;-uycPl=xh^3MciYMgj7zR7GKU{C$=~Ed->jHD$NJ4Dpomh*R_e?VT_NG^naPb2
zLH?|WX~4x?K^OoP;D?%RJ9y(Fm;!kyxw8bmiWa+em=3b98!`q-d(1p(JSa<;D$#Gq
z^obvxNRV-_xx(w=bk!#M6N31S2$mbb)w1!%MbJr)4+3c@OMR-Ngp!9-z_jNCLcva|
z0iwtFtGDziw8pu$BTb26Z9TF(4UtrQla&4CR`{Gp{9EM1Ll=4;>Hr@G6Vvh5@LP>t
z111=O$W7Gto4#8dE4ML?du@ltGE?8S7wAA458s931ZJLVWM&?hpkYk*!HG3OH;F;~
zo(Zb6o`ET9O$OTw{_ypsC<O3ex}tITA*}QMX1d2ZrOa;&udqoZkX=gRI|PhS<dZHQ
z$8!yH70N8}d#-O}rJ%3e{Hd?}haCMx4tKlzLuBSD_+h0rVP$mM#Ui)+;xf#cH5~r%
zY+#+g61tRz;3Tuzm-_klsJKmfPQKnVu-A8`%6Hyaw}N`<2E#dA0&PU(Q9AzD1_Ze=
z3?H?5KMKeFLAS)T+GtWzj)O;(^zPj|N6JYy`AkG~-(Bn}*1_GRqQ%o;ap_l8u-z?k
znCB0Hbk~efZf{b8NU>yRq}$eo)5wD#{Obq*ht3O+k{RSaa{)H72E>KoucceC1kINN
zY5?yN4XA;x^Jv`*9|WF*u1wQw(2B;ztL8KU3)>K|y6%19k?76hjPg%~{C~j-J#>{X
zT+oEtIhm)^rUY~xxz#xQ))R)uy-0}do<My~s_u{4&dCKAM+VmSlkFdEKm0LxI2mMK
z4JY59$)hUpsu=P*gh^8*28Q-6XA{u*`EZ$uCZW~fU?UcCroX80$kI^;IsqVn3*bcD
z8pLg|U~2*uz_=UXp(I3M0{7aZHiGCw(MWEAKJ^Q83*WWI#ko3Z_kzwIH6Njc0Hh0H
zE^2A!iCnLGFG48mp-vMp7vy0gkbR7_J}^I(*c36)lC3)-g;!wKF9}k&7U7*EZ5fF`
z+A2fpROrXNTq@_CaoMat<bG*_i7W&nM8v@-A-WC9N?qMBN2>vskv^2s%>`H?(h&r9
zBicR93{DRKfPOTW`9kbMa7d(d{<nl({jhj@oIYjaJRJy0esDg=&5Ho@g1O#L95Fdv
zX_1kUtzrHYBsY;Aq46uTO<0KL^y|SPKzJ9c-DTab3GL(ebTT0--H1#BjIQx4CwjrG
z?^m4-kb33~Pv>DeQ<~JBI}jhe1k&We*woacz6Zya^N{0F8OSvb!?_b$Zt;z{Z1Ucu
ze(Bx-6m)L9t%;3|&8;|WV|6glD<ANBSvk2NT3$&~Mj+YllLMakl%LFnUjdE_wXupL
zpb<bwnUHO8`o7K)ZUB>WoCr7jSx<Xa+x~|LKrpoL`HagZCam=R)%Zac;2#vC-5I5T
z#a}P>AP6iDHp(uCh^f=H^xoR7pwA332n7Nt_H;3{6T*IDzsn%fiP%5>qIwi^3$T^C
zm$$w=nhs<3&Lx^vKLz3cRd;;Sbi||;C=Uxt^=pRKpmf1qs|Kz{D-cCWq|d#<3PZXF
zufN|t_^-J~Yy4qwg3STFLnKA8B9J%TyPtu&>4fl&V!-a9t+entYWyyY{QI_2tbLs%
zNYAj(I8=uUA@x`UAz#cYIJUa+?=!pxY_p-mJLsB`CNdf^9Q*ISPk)nfEXTjPT17)E
zWM?siwNu5!wZp3II?(WDYm`u@3lR!<spIdS7zv#JrAY!Zye6LbRO7Br@NqQ)Y$gR_
zwI@UF**AAM@~^?$*PVI@?4V|vV}=2B(>oY!kR{N#{oN%1if0n_Ke2`Q8{N2B4tGA-
zHvr4q>8eyJn%?fRoSYK0_AJMmYr(2;>nPlFA(oAbSqCL8i;%Rt^x)546KE_pK9wM)
z<u%c$Nr@Y-$a8I5yDR@fY8TR_KL5Bo6NeQk)j7Xks{gkZiiyEbbu9Wyag@n1?3jE2
z#eaMUGo5M@@<v5BJ8yq$X7*p-XmS?~+{?$V)r5x+fw5=0s`J`>``JCd7(k}q*++3J
zk!6W{U#VCT0~~-}&zlk|*{97jPGn}Dxe`iGalx~UH9eQ%gx0>v`;FJcXg0WSA56qQ
z%o^ClYmiIjKF59UP$E9Fe3`)$ZZ(h>dOxigb%mcqqwBpBlybd8Gj@#dlS&nP-vG6i
zUiGV#(yU@3#JckpXiNiW>8y?QP1oK-<{$v-pG}z;T$sw>Y8@XP&6?pEbEs@Hf%v{a
z`M()vAPK~0J_`-l<ATQMq5Z9`Gog?^+WMrPA_V8h3x>8L+p@$vcgNSdfiu|-<xW!Z
z1YgW)gH(7(nm3Oy?$^fpgg($5Jl$Jx>Q(<dBOc2vvJzUp`K7h}^P+tyTkn+8J52J?
zrWUqBu<&ZVano1eC()^@k%Am@b4`Im|Mct^yA4ostE$f;wrSwg%Q@!)z1tj6E{s1h
ze@_tq3?xL*{wUh)YX7Z9fww%&p6TB^iNL~`R89Ly@$YBVZ%dDd*4UH(3+rN&K2gOE
zSLU&%(dOC99|cV-Dt$<{2Wg(?FH+6?IjaEHY!xwORug+-?iFA!lOSM986u7|+s0ms
zU`IECOFke-(%*eLYPI=iG#iI+(3<MuvFyg9FsF8(JB&|fYTJkU&HZ*3oU2MK2^IP*
z@z>#34joS*GcWw@F<>i)qXR0CQ)Tk?R28R$fWhgh?UUN5iCL%-6`}3Qg`YDxiBz#*
zaH<TD$&{sh4tUT4yWD8;Of>61Ia*TdgK9rQYWxGB1087whbdQ8(>D}>1#?G0&?hkc
zn!JScXbLnF72)RF-EdJh6RA&%Hsv-*BKR5V`Y-K6&=-U8gKpmxSU3W$F;P)ZPcIFB
z94M9fYvaakKvCFHAE%br3dX~`evyLk4~6`;0&e|T-;7Vj?!PGYhQ|hBSE~yaj$0%m
zZh~Pz$2C6_BJeFC%}9o=;Yoj7OcPP0e>9`~`$i#xUFdUJ$C`7OcYvoRvDM#tP5n($
zQEcqpD%b}ilTZ$dtAJ^?<NnkPa;znLaPMHKy^+jO`vpS)ilkYIcye1{3Brv^!C6AP
z%(q61m9-MNLQMY0E2Qb_gxsM1gB<WWq!|nNpX6MB-soJq?^7WT+}Jtsv<J2v;>lb;
zq(H*<1nC58cz?^XaR7b_XmUvm8sh?YnUyio1hW;YLRRS_^&j-J!!;4^S;BAUo79bY
z+D(qL-hId}-wHdxJsYlC1z`0Z_lXGS+`Kk+eV@hlqtdoNti><Op~ynVKjFY~a&lKI
z9vwtD{raS4#y6gDYPuo3V8AR9-zjJ{lK)dK+W*mfaSCJDK}(I9Zw1$-5EwHc2LK!*
z+I<n`)OwG9Bsx!0m7}ke)|kixHIb%Kge}l}m#fG9?Ymo>{%Ydiuc&{-U+phgR=z9o
zub`V~PMX_ZLW#L^9@t($2E2+eInjwZQ_QX^fXVJ}dfgKPca?NPR>Ex+roa6pskIOJ
zvlr70@SSn*!nG0YSp}oxCZom7Qw8`f&^Y+pPmjP+yJhbe<ze@zVaFCT%tXg5jfJ9O
zVBS<QA$SSK<|b5J!Iwg0;tJpQFZn^4_#cA&O(z51m||Fqv8BPV#D#EZ?z91Aat!PX
zyz@C9;%<_$GeAG}^ZJ~~12ft{6+J_5VQb5mSC#w14t?M>1b3ES3QXU$GB9k<tUcvJ
ze|@5=Niz{q*Kp)ozyRPl|4BblUj%#Q!T!ll3gbiEopkcms|9E8B3{g070I1g4-ja?
z_xsSu4-zZ)<`)y61W4}&n*ScVz<a4{b$h3qUgLfw!dwG?Ii@G>_FBC#eI_1kOfESL
zKYQFtu<wZm$oHUcam>76ibEySglDN3K!mZelxh+YEQ(+8@|p4t{qmE^r5wPy{1`}$
z;vV;OZdnHUGK_Y2*gj`@_Uzg5C_kxWV~1W^goem>1DQ}_HPKF8Zw-V9@MQdLxLJL*
zXXijC-J}{cS5grq`JVmSd{foh<N%n)$AJ&S{l>PilXHhLx~&aigg^J@AYucGYV6vI
zygE<jf&;g{is4(jOZtdS)$4`@<CeD3#ul{LApX8Qr=AnRN9GeM@!Eq69~CTcu^%!r
z%v+gz1^C!xS5-rg;l^}EL5o~d=IW}s`G#o5wU%Oj>k-5FigyTYElnZt_{WhWksvW=
z5{ywc%6db2P-({w{_^7bm`gY@#i1NL^&9Z2TEWwNheIsrI~E|iP8loNyv9{8`sr{7
zh;a8LtTq*_H-O0gI%1&BZP2Iyc+1*yQ$fPQ#dPB?Bl3MxsUQcOxLgO`{NWk)&6-{(
zZ%3Yee2AK915``y`KHaEW}yV{M{GAiKeTUg6(FRf1l1fo25I2FB2>oocBc(t$I3PO
zC1L5C-^GyrseSqvEr#i-$HuL?VNOA5%Qvr98J5)$j+dU{Q34&~?gTn##ba5;sX5PE
z;{v(d&kHU$`-}@bR-@Utp>K<aaanl*WfP{|QND(?eYPRfREw7Pny(P&nwUAm>_>~2
zn;bv}YDuwNdIEDWi+n4gyK|Kze=!nK+bEJ|gJJ)57|SeH1?X-(bbqF?wEJ<G5fTw6
z65{^^PW{_XM<uxYX#ih@a2@>)F+GH4&rKE+%&BtVt^}@h)oofIUU=99CujVH$XZO^
z%sci0JN{w$V_9xF*2tWl2?fjupc*wfYd{O*O2)PJ<|tS-i>hcx1S*R|PkrJ5`c(AE
z14DH~@Hq+$0tMH^;4s2g$qfB8bBK9d%bBwFZF`uWyz`--d$}KuzR4`#Y#B2+n0E~a
zkK}HqU9JvjvU#LK4b8)x*qRILb6&J~j3(T%=1NoP5R%;mv(fXi4HbtZk$|zpk>@X8
z`{pc+dU{7;ymc^t?ViARX0H!v2R<$$u`yu;;}|9ZRgCB}2_Jf~`zx_5JJoD7hsM$L
zB$$x~_UJZC-o108DAY0J)z$oItipe3QdJ5sqH#b7sz7E2-AZ?Q?dITRbCzUCymNq?
zgwXQ|NgRQZ1s!FptV86=d46QjB)Qtiv420o)+Ja2XlJFubeFAf&w=mEse5#ReCvpj
zDZ~1dSJ9wUb4`}{U`-y_y#xq5+TEzgCs`j=-_V~3P}L!`U+_`&UdhUa*B3E}xgg3=
zCoy6lM*jWi`Ge|_@GJ6J#kos_ae8O!D(|bW51(D>^NU}23bP%!2|Hq899sIq_&g%t
zo+g@p2(y(k)g7*iOndCQsAAZpW*x$PeHk-)+gO5I-FD!v*LbL2-4Viev$pG2wI@r)
z%H-n5)Hf{cHSQE_gxVVdnjm%_pajDz<<S`{RqJ-A;3}upX^nBv^_RTo?X3(_Cz3#>
z6BS~CKHPJREW@zn!4e@8A{^v;&%4_{n|4B)lqRcy&QFK?k@9CQ0DUuokgprKoIrPB
z?x)s<i7AMR{Cev~RU7ZCLNHcAn)gUsQpt1DsR^c-KI^a@3~`Ms%=^rCj&H2O6iFo@
z%mZ`~Smfyekt$7s-gZx{isnpTdAiN?6?0p}JS0b_zjH?`3@Q|LFoB!@YI0TjB)Dzt
z;<re8cJ{HH{Y`S&b5D3pGbZ<)e=p6z)n#o~)d-MiO8boCj%tsYkZWH*0_SR<Qp)@g
zb^U=12L?|SrmkC!hC;mXiT9qF^OMRvgji)X$NkBl?dpL|PdmhVj6xU8Xg96!xNN?0
zYYPS*lH3<1Blwz_Xq;WpT(vr`F^HMeo$&Ubu<ReIU8pJHVh&}>Pc{Uu`1_!ZhaET#
zR{Jv23Rah@i+V(CHA9I7H&*kc`e=T`S)NbZsO}7Ok+|?|bYpbO@Px-n?`>{|Z12kU
zhL`nVClhQ-7TA3Uo0&1vEwU_<(S9q|No{!oPD6fHxA%;0H<P2Iw{1IuZqHJ?Ay8%$
zDB@=kIlL~?H7xrgMUJK8@}R+TJT=3I4&7Lc(2GYYtM8k<NMgG7o)0}Ieb14N4HsL5
ziR}pUZ>(Ez4>93xk!S6!gty}9f&x0<Gth<xWpBW%l>wg`*-V%#cL9iw=Xx1M9oSvY
zoH??JuOfDX)P=ol3d;nST6jwWV+npCh4!M0>n>_x4YYazX#i_X7tSH9y&o$6@GV<1
z-G~^r$oqEV?A@)1VWQm2q9{VUB95Kl8+*_ln~F+<4(L-6Meg`@0A(xoRB725)q~Dv
zSlW4+JVeO;nEwEvg5ns;Bahz-d&NI{5*jLX=FFLhLPT${UnK$}p}yZ^fMRN4m@`WI
zsMD$q_#Es8U5*>#7obFjlTavwEA^NZkCh6&wo1Sm-UA-mk<cZIabDWy#XiLce$t|j
z8vrw0072XN3be(RyITD5Hr-2D$WzV{lz;O;cd20o?ksn^6XEvx7c110X1b|KZ;`Kw
zEx0c*pz!VLR2KPl<DgMT913loXOX_*yho7fmgU3dL6M2=wK7w|F%(L&OZLg$^T8kP
zg)r<4!m*azCF1mCebm_b=@Fd@nLN9Kr!c_Jx1yhoEL6b4R-BmOA=_o<#HQH28tXuT
zvl!_+^U~_P<xBMf*X8`Ar@Wci(u}z#-EOx_qvm14Cq)q6AO`N(y1<PkhMr_~>orT+
z7goC@EppCN^v#6v&&w}&FA}^|h<QNc8?P8EcWW3U5-NN?<CwwA8Fux2!L{)MXSO4g
zLSYW#d3NnP=O)rAQ^!k435hH2I5m4YhYFpAbm}?nNJ9lzz`Og!^I^i{CzZmu7?(?x
zV}~0Ds`fJ#os?I-{7iH?Fi@D^aap4Ouz_5x)%70N;i)2}OVeaqP@-6@j4D`#6t{V9
z&I8jutM!@ZWQri)bNz;wCr|a9AtusT1kJE)fN{avBR1J+#$3v9n{0~0s68DdTW5d8
zew1&6xK;~l_M1B;Js1STo<S-kn`dXq9jf?DlH#SpE9U7GuC5nUY}JnUR=Z#%`^|kv
zy%?Ym^$cwGJt<e(2CrFMOvjez)YwK8MFo^Z*Sk9pshnPAsCIA7v(L~gx;v+^@#fCX
z*jLXY3yJqhhekm@9dq>3rAx<U?wVv`zcp@7ia?e04*|7MkNOFTi|M%+6dZygn+Hvp
z>Dyy>7zg>Zg+ZH@@x=}pP%7t%r6QKN&xL)cp{s0{`2p?4ug7ix{b>hl2-dZGDNw!L
zs#4T0K~c=6;<~e5o>ckhQh`Vq$Clrk=cnHu)hpi0Z`xxM+D=WCq`id721szmfq}%(
z1~k~i8>)*udAw<izd4rqMjUl)JRo`QTqSt{Z)Wk?81ri|35jhL3{av0x+qjxoNf#@
z{s8&v(4hGs${+J)m@9h21<TWIyNy^?=8Mt~Im+ofPS2Loj@DMTqzor)A1kfexe-i@
zcWd;j39j1f);t4wiiMyc?rSBb=WX8=;@rIy<{S#dEX8m`@E?oH;;4R6aVY29+QM+C
zQ2lKF#G6L{ltHKG$vPD;Ioq)c_8#=US{<Y)%C)|>v{NlyvqWMCK}nJV%Wp)R8&4cI
zUgdT4t-}xlFJswWA(qbXzQqYtigNNm>wVoOp!vJpm0{3y?-2|p3dItCorfLZzvn6H
zOXT~yzMF@<@E#EZ=Tu@B{yG2pNvy|P$cJ^lc?HO~Z21yF{qD!DkP-Slhzs*}WWthX
zjXqdypqOJ7PZQiX?S1-QU!S%e$R3BlV3}ijFZ=yIT0Ir6Ol*#2ZH=uA<^z=xpt+?i
zGXp*CQ5{K>^+&I^L}!|LmQXkdGni5@@|yLXcJ)@eS{We5E}yWc5!34<^1RI`=e#Gb
z3e&~GUM^wemyrnb{S=fpfBOJe<dX~OksZF5P+Av6&?q}0WJ9f=nh4Nh`WWgrAD9zg
z`qMSg8#o~Rx|nw_8Z{vNl1#1}=F6*ukLov}p4m;P7eL%XId&E}i*&T{aR@Rw|5hp;
zAS&%+zjw}(SEVQ}6J$tH-o^!fy4_BDOmJ^(6<k^zx{@;9H0h+2YoQm)+2ypxO-xr4
z208pC!*-Fp75Wa-!H}yjo;eMYMDcSQ)W9)n806!~J8_(W{_1`s8^#Gn=WA%uWeAP8
z?<&VDaks7y7SsUG^SHh6l84=VW@58LaW~3uuT(h8ot-;r*F)|3>qgQH_A@a>yzZCS
z3b$go%O1EEIj!CImEPSY@CY&7mqGjc?>N~Quab3Sy4WVvkUU?2XakntYF>bZRpa><
zH0mmfZ&m<}dOu|Ni12%#@T@9#m<?DHtqMFfH_g(BjB+B)+!}D2<D0eJyd%Htlz_Y1
z9bO6n{@QDXV}t~m;<c?aZljP~*Ftfm2NxB~5g3R_QlA4|Uq~oj&ud8f`#vv(qeI`D
zH~c(Uc9=@M7F0vnEUM6#0W07$j?Mt(3eJ|G1P<aPOuZ(TmI0>7Lo0`<=g%*KnU45{
zMMor#p&Smw4x$mXNm{P-ItttF-oXhpf2m_s?u8oY3&xjU*EU#`Nl@YI;WOo(V=Z(P
z7ks>3c&N6k?BU?Onc2O@QI{cP=6T-gZC_e1x+7+zMHBk;&T$`X!K;N@*93jCz<a?C
z<*L%qZliXf%z)UYcQ2jY4i{283yuTwYOgCL;+3*SP5b;0IY|~bu^8=iP(`T|Qi!0+
zcrWEk&#nbc)+ty=Rg*gz^$*HB8C4a$ip;<GM*aON{o6_NReD{+yL8TMLn2xeP3U#v
z3H6?JV)*Ht4(Rp9Roc|i{TCbt-mP`EPbz^kqghVJo7-fG7@v<J@ybdXO1?Q$6Gw>u
zN~UBQr2MJon0*m+>vl7H(h72}ZzGxNnWL_s@3e1lpIA}O_|SKYTwJqYafGZPYe8wA
zPedicVQJ>5Q}GG?mPp*Spf%dO938^E^;Uz3%$V7MS|CRq4?9aJkA&I!4C@IrV+m1f
zdS38@2Yz~k5)8Gk2TQ%)_ct_A)-llAF#7A}9J8(kh$&VWGt}a@yta<1pBvblx>1NF
zc~<$nfc2P6fvRHGkzE2##WN-AmDF5A{aGBIGsE^9lMN*38**}E4hw<0*ZOC4*oF>f
zbV_nag-JCvWIb|PO)RL5A|M~C;K-LLm}lU0q0G;|34+JVUi=IkRe{H$P?K>k$hX+v
zVO9~}CwV#?>||mmN$3SdRrxJZ6z)R#vFB-*xw-t(jU0U_4=Io>d)EyJn!s(o1^0>~
zgw?pLw;^oMKzad`^NOS5A^eutfOK6SE{0Q=v~3Hn0(^^hJq~iI{XT|%4Ui_dYjC@T
zBl+Z)^YG`~6aKa(!xhbo59U)|aqK~(8dLkr%lAn=2?vMPm^V}HU7?|&3449yqh(y#
zF29VTd<(;c!w_lxtY3g-F~zC7R1pLG#MDPTtR_3-OFa>93f~I=931kd<~rqgbrDzE
z7X}ulEgv9GC=A|)cEOg}%vm5%Y}xTQA5iixJOkcucT<)g#*$A`;EFG#m?_z&X1AmR
z2kJDdSK~pYnp@;=8wPpgU)1JxWcQalcC@C=Eowcjx5jLAlg_pFG&OWBb)y7CI!}5B
zA1x=h?!VnXH<oESB7jFpCv0}~MA-g=DiK!R2I5m5nDpx};6m&#HwTi3h4G+$y*1JP
z#VHOkjbgBXkhV_Mk6AZrOW1Y2J(Z92)kM#mJFoR<C3sI4SCWL<w2tOa0BtH?P%QZ9
zbxFYgp4szTlem(g&Kk6>OxC&MxQpW4P<P1eeJYq5Re6r#m9$_>u+JKPLHOusBQXoN
zUe8vgWSdvZxsVkOr?)Bfl@C0`ogID?bE(04H@&0(^Xh=WK@1SEg6XMgwyMt!*FAo8
zK;6jd-Qupz3s?!Zf#g+$n0IX)mH<Kv#mzE5Upx}J)8PF*spWL!V!5o?&}oV-aBbl}
zC1)`492%n1V{>6Y@lwO02Pc7S*RI{?aZNl=Q{0tuD5QvdsudNpC4nr)t@ajarnrU0
z-8~eA6wDVm>`bx1#r)CzsI8gedqz%j973aN>yA9|-y(nWMBdOFxE1Y`PCeL;M%|Cz
znV0FpuF!PkYmK52mj3FA*%>q{CMKpH@+|BZIiSA|0_)4=bpSh`=h$}IjmBH7uiD~X
zM%xHjPeg%KF=i210hiGzVepTRE%gJQqLdxXt-WQ9OgM~RK2M`k)O<NTGrQ1*q;q&j
zj^W7l!&94g?HCTjbhdH`(azJZ?r3)>9{3M#i771MG8xfR`)laYP<CkhV~_vc7i{S1
zeMC$Pcrea8t?OT2K6@%+*P)XK?rLEtXuP`UQ9^M_WSy7gF$cr#rRtQ8voK7T+tG1I
zW=P-$ac+(!dsYYid<V!rhbM9-WSzU5R>o6xMptmn27=G6bu~N<s}8y3;?XPeL{<|n
z(&Ju2;^r4G5x&-ObGV~yOdy6O-2TelD63zNBH^fsC-MsGQ%!eM6sUTUq-yp)7k@ZX
zJFeE6W1YA>UQoU2o~y<&EgqCuK%##E%98Ab>`~NfN5lH3sZJgI^J^coNGZw?M$m3V
zJ|3)kniXS?@;0v)3K_ot+wP%z0+R<!Os^zi<4`WL5>XX(y@*#kuN7*e;;Fbe!aO3v
zxJ?UPLX<FdafB|2%is}8nM%bqW}R@LTE3tu`hq(i361tr?r&t98}S0N5eHH3H*AV}
zVahry3ybGV`NVrgvmegfQaG_S)9tSQ-^VE=3lHytQh3h3kmcI|_D!<>>2D`Z96xYQ
zGTG_af+r;4!q>I<bRerMIIa#{vXLDx&IO9QqXN59uDn47@tN;s*|)C_CM4^!d11*@
zacXSIgIY-cuol3<J4}ieCt#vCY(Eo{hgcUiOdt=~HRJG>!N%|<?7oo|c#4Y|4#BGd
zlx414sNPzLY7;6>spP<X-ZR(hEvmS)Xqgpn-e$ZYy9I9j9b9fvHlYWry&)w#&;Wyu
z-TcY8x8p9-m$}g6dA}aTc0WCLM^5D~^@+3PWgogR4;h?SFH~740&1Xri^(d6!iDtN
zqeCOVWeFw0=FKs#$33Xyc7xPG^@#ETg?9(Ys@$*xv^2%`;JZzkvx^kWn6r!8l5A5u
zLHX&%hHD$r2p2vZJB#WtcFe4)GsEWpkqDunUQxk(saKfk5;Q1vRy_#jUi)c91L_nJ
zUh(+gv%yeDIY+1EKwZ7pW%oVz&QAFjrP?<gnh(Zehw5H%wag?)=!HqN=wk8uW#im4
z9rklF!~S>)NsevDXpV*#+zw;lBvYGWaN-r);GHF%|4_fY&_?K}(1%YIN@lT8Nu514
z=^Q&W+LZX>JZ)oaL0x0Q)Ay>`0p&_)%<SO%+K~q1+E#7@ahY3FqL}$1u|y6<$y-L&
zL!;~*1qbFZ(|*ne=ORYhjPoNph1^?(xF@LXjEX&E=(sYA0rH4G`<`*1gq=~(iIJ8R
z`3RR=+rv1SH*eCdY_M%aFUdq@UfSaKKwE+23ySjl8xcnU5Qf46CkD<77Yp!Ju+K$3
z{s=q##b!KrD)}$>V3;ysJ@we_poB+8Z=;?}jJ2fb!H^!=L^UC#X&yrdR}!5ju!!dX
zxrogqx)vbfEDW+TNvvhec-xBsZma|iwu9IKtnf?UWpn#;t*UWB#KAYh<;le-!j4K5
zcqX`cp>S~Iop)PTz5-<E%QFSI@B0KSO`kJ|%bkwg1lOG5^37EfPv}i}U74AvD?Myh
z&l+^h@sz9Vi}NAkggXx;1t@bi=ey&_7<JH=v8ibG-XNYEy4lS(QLk60SFhz0Q*ahX
zK7daPFHaD|Lg8H3HYwAVGkNGj3*Qtx^6>nd#M))c(c9k2N}1v|krMalA~2nfj~f$}
z&+5K^La<h!a2(%mHol>6-tN{;B~|5E?bL1%NPc+GUvYdmu!tga*0E=CI@PTIw&0)&
zR30PkS%mXL9l=37#w1r1ZyAsyZ<O&ek{Jn<`1yl~K%@?wzGAE=JL{pA5WKHj84xj4
z2Yi?3Fl3<JuDDoyX3G%tLWY1Ar=R>AIkR!@^r>t}>Lo2V&Pq$mli%XaQ+HbOgj^=}
z!%L_MUg^FM8GGx)u&=YD|2BI<IIU5p*m(N`e}CC)xzO(lnqV!#%tCvQ@Y0iQ0N*|O
z1x0L<ben=y3ra<^CR{AldQxqqCISZrVy6}kgYlg|kO@!1-S-S=G(qn!KrnvG3f}0?
zdh&r&a1=}!dJeyUF6#p@PB)zwLZhC4V0O8M4H;iF^AP!iZ?*>&*XCxK61#zICaHN~
z1W=$K13e&!6qY`hO`yANJB7v?`4Ho`Tv_9pNa`%FaiOnyUs!kp$Z!s4Xe8}o7?0Xp
z6{L8B-Ov%EN(07%Y!l?t!e{){10vTC5vz3Hs`Wt*zU-=Mj!47}Z`#MvV+J2S43)o?
z7`#=|Dx2s;Y%6HQJ*6wUKN3rx^GJ`_wnLaYE%RH`vpe&}aqx+m^KbF!)hC@8tbL`m
zPbow5IO{!Xm7;B#nrn7;Iz`wB2;;hHb9g9N&mbDmO%^sn?Bhs^y$1;l-17PB%LaBZ
zGH+;gX_gJ?yXv6}U2U0RPlZrXzLtPSMH-AmRO)dPSIsnW4YlbZXazev*NcGKNu9@g
zDI4>kfBOa$%aS}3WaZ9N+RU9SFrn*+ty2${0_-ASK5>wFiIIYHo4m`7)wfUs=mBv5
z=8<;<6-V9<59u@fNV$sl<>3B4JtrCiC=_R7*|G4%nKgP70?zwte}x{ylK^T$U7ij2
z=>GEMmgb$?O>kFIz5D$kalXsx5DL5e8Fn@;epimIIfXD-@ADx%{unyXA`0FQ(6^<C
z5?R%V#&Pdj+M-e<tF)E#!WP)ym$y2Ke~Y(h;US+klP0PCHkS?x17JH!02s$SkJ(!~
z!f&o>xQ0IcMXKtffK?-DJSXOYCo4%pVFBsb#umpU#~hTv$g8*4MpB1uFNO+RvK>_5
z6q&Oh6`0_x%F?NjlZ_C^tuXOSZHU#YBp1_PN~Pw~>wD_+ax(@A8BkW84|&>SY`3yY
z-yYNPyq_C;)n@r<M{ArOtDu3YbAgjZ|7Cg4eC4Sb!64!5LCb~|359-RHq(p@xlgUv
z-}raqY8PVTFfR_Z<nX{Sga^D%Awk^r*79-*=MoPnY1>I%W>ZHh2LjI&lsqRhosgaX
zg46PT$JJ@6)+{ZF(ACbibfFVrJO{U7Z{9N=$acy)oSXFO<Q+;|Y^mU5-piQDu)!Rd
zL0$vNV1spedHLLXfyo^xEY9i+(%TXU!L*bp<TzXz(cl_w0V52_3?ra72mV8Q&*D}l
z(vFspKN8+pHRpE{+{SUm7iVLq6JQJ<KyX<vPjuwUIA1*Un>luj0SwQ!rC2FR0}JW%
zGOZD^?<t{pevY6xcF!)@P9`|N>ojccl}(5Q&kE@~IIju+IEv!t*jj4#P7aOg?tLiu
zzFf<9|Ni}R5Oiz6n)MnKQIc+}XwOKC{iuW~uo(H^PKw7<*X<rLPjr`uq>$oD*7I^!
z0DF!&i2h{w3_(2mtnDk>J^j?_mV*$^oup&Q^88W#zHRfi%aw{puk@Y1!#B&=zSBb5
zi-c{p#E0lbi@95k`zn43ib|>QZE$SeP^VExeb+Nrc8|xHeq2I5nP$dN#UgddkmKf8
zt1cE%#T6#qT9wd4ql6|$rNRcrJn}48@aq9DWxi8P?mN<ur?#e+?_j&!=DZQLo?v}k
zb$O|sZyqC3y>Vyz_U)BY`>H2dJlQ=Ygq<hogr*mJ=fE5-I&r0Q!`@CvcUt!r%C&H_
zLKXv%RKutgaP%RV<t~RMU^#N4_pQ$hz+8|LZ<#up6DE1iEBoy|FFsvqUdsR|e}4GN
zWPv(`2i8_FokLORL-K*}Q0D{F(B@nMYWCyYK|CCbD&+KD`{)E0nzd4)@r)b6Yl7Ya
zJfRqq+{`>A^PL2;#&#TXBC1O^ONb984Hz$lGAD5Wq!9(qWi`x%TlS{R2rR)nlzORZ
zq4xWr^#zgOOxj(7PqaFU!6IjwhrGV<gxxnW;_F64c0!@{o>9O-qxOvIYN?+tq!_C^
z_UIDy0MN693@LrpMDo0#0~@NhJzx{{hEL;U5rvKGFeod<bgM%z4<{(4-KNqurgLF`
zZFb)8g4Hhq`iT+>HA5X7j>exkd#T%gZtM)ZT;6YzLUg_+z25WJFfYO`W|{S)s)XQw
zsi%E$Jl^i&ANwuHFGz`zp49EAzKqCLlIFA(a{cDaS15U!%wkuZm6%Z>O!OkrVT}MW
z&9{Z?q&4_$8L?sOE0rQ;qw^oMp3*;?A8m}8?37eKt~!~QAzF_xTjUZ{BJ!n`bMEn5
z4__I1T_^4Rj7L8HVt1(1fFjLCyZOn|rBSGBBA4PvtQ%KS=#(6~g!A;8-iM5=d`jI}
zj}nI}3|r+87Vf<5&aSO<^<pe#M$FuZiuJDRt#m4<X`MVCv(qhW*v$aY1TYQROMqzK
z(3ZH%G^sOqtfeAN!8k=N)PiEJ&EcvL0r@w44vR@{Ti+B<gY9b#K&uTN%$?8PxX_ri
z*via-LR)Ui9bBmDAh?~AE)P&a@K!r$RL^*9!0sOkeKP33S#8mU?-;D^M{5B$0+*2z
zWV6p9-MLT|#H|PXN!t$&;HP>G;MSuSLoz|UrjdF}05wBDfc7WuKn`=uiO*bs-|fa@
z;RHnH8xuK`w}l=;N%?r7I!s#dRvWKPu4!e!VGA&pR(w=MwV{1lsAQys6h}@Su+e3Z
zJp(UrrUw}!6pIF;)H4!3+PSIKWKc0iPnNtrcW`H!tIMb263#nP;Dt+<VckEdjg{$!
zd!KF_cBUH+vvL`>79QmZGsbOb6v<6PCc;JdPA@mAJIh$|Ca0&ElYgwsfJQl(W@l-d
z)ZF$VwH^ysHX=AQH7M0$b$ucd*8F8P5x$Mps*PEeimhZ4y5BZcW8Fb1+2Q21S`A(m
zCg<!^eJ7!nd`Znl%~3m`@I{z2y;80sO{VzzOoCd<qil=upcir7{a1Lgk8fZ6STFEo
zZks_m1wkU~hoy6&E&hQ^T8LsffwxS|<~2;dypVAy<hXi#SL&_Sj7gb7u?d@9Gd1q1
z<7=1(V^ZNcvZ~+$(Y3t!Jj}Hz_o9&0#5k3}^_g0!w8A5+Xs<3ON4rbl5;yelWa5Qq
zk`Kj2q=WfADGzOXKEM3oS$&4OiI-6?dd8IR&df0Ap6jF6&qu8KY?vgAE=}Vi5G3QH
z9a~f)Y%**PtAZHrGGi#2);YWV;P)DN9r~%L2ag_6-sZ?t1AErvMU1FmqSrbMB2I$W
z+cPhS?QQHA4Y<v}Pc5o5N%QzTm$czXJ0E7<__bcc%ZIIbI&iJe0o67pk-B(lc{K47
zg5v6uoZBzx12{qSlmlmYgkei^L|9vzfkZo#px%c)G)J^=T4c@olR~-LjQb19Rh2ey
z-MVixHhxcF;{W6A&Eui|*Y|O2Bh-kHl(9x6l{VYhDpGdRVyR?pv1W-emTXC~l$7kU
zRHVp~3{i-(M)t8q_I;Q!{O*_Py`0Z^pU?Te&*%L9(Ze)a=JkBu%XMA%b?fkk6UB^a
z`TU5Nn-P+SQ{2G&B-iHB!%zNr^l&PFJbI;^yMhLk*lzP2=6~tG>qUBxulhy?A2b}x
zy(|GW({OB$mR(_9SKzDp?*5)LwK-ym=MOTXjLUXhIPqW?ky&JO?GxeyKdZ<WA}6`*
z{n?o<_3dw4J!Ii!>3`rY@qm)9a@t42zF_J-DZi`5w|kZ7$EGBpDC|>4Pmj3~B%YR1
zAB^!z81Lv#L%+5&S^~4Gc<johFv0Mluu8epVLWp8A0B*jG?m(YU$UZ<uD=Q`A-2KT
zr-^)tbZw;Tm6}*rj&@k`!K)n+t>aH%)!QxxCnC+|l>#h--`B!fp(28IyiW1!@pj!b
zt;fUpJuidt9rx^V`fFIY8WT{M+<}U!O+wa90rQD3o?RgEDWq%M6W3tzN;Cza|M6i5
z`ON{>uQaFY4$o4l<i^k2<(jQp9Qy{Uo6{Z4XDk+niDmS;j_;Y*Dgp|x-Sa2cy50=g
z@~#UwAGReTJSz5xYuA@!lJ&-g7iARWt{IDs^C@`fRcevaJxj22oT-4$Ek~4B2B~3E
zze`)5m9=B=MbLD0LmGSkzQ;?zbY@)M7&{z>Ulu|JhM%088SpBpoZ5T2WmnPaN-;mC
ziD5tE9+$K3u$s@hB4`t%M%kOxDLm@|;MHAoQU~s&gVHE-514>Gf#n-qOg&)G152Q?
z)4_FSKTJx^%ME?%1s#FQS>UF84#(qHWWeo030GIQ&&UjSUF>!P4*^Unq3lT2c!b)7
z^xK&rBxE|9dc6DMtM@6wJX!yRo_SAe%NEfST3V;fA9cNPHR^vTZ?zt^Ip_%OZS!ME
zrgMFCS!@cDLdVzRRDMF!N3?6y^+3kMKA*(RZN6>|#(t5mxb`g;`Az+OT=Rg8XGDa*
zM;Qz3qb70kI_*kIy>#h2AmcG!4YxKFsN_c7-nG59EaW7?`u#d%fwLON?r;1c{b@eL
z-{B;1;y43=XYV-OHXVoUNW(xGh<BfZ4s`S_DZudp(>sWMhF7v!El$7jQZR98vk*7-
zDo}9<$FG*s=brDCaCf=5ThiEPHb&8I_ooNgw_j&U$n6)&<@D%*^^q9gyRcq*!<MZZ
zFftLAwXqh}>-jEiAvK>q8+qSyr>7THrZGm^${Jh*oQb6?7n@GMb`$}UTTXk67r!}v
z7NZy|t7&BH!00eUxosoW_%yp%?@Ifj?$cqfuk~d0{orRRUIJ{ed6G|&yAvD<#Onbk
zwV5K8J#hh$wH1>0)Jo+2`^R9a>0oHG91Z#gNQ8_y&4FdEAR?voM(BZ)N)8UcJ9>{&
zpQzd_ifWz%*Jw@+0X`W=Vd_#H{uEolJqf?N8HnHrgs2%%$L$AC8@g%?bXs6<{iI|S
zR=^zrr=?T)w6rvRC}(d)<v@G1AL_t7me2}%2#*Dj8~;GR{|?ptCup8=$2+d)d#rr~
zrdZDvEPZ>V%3JdwEr3mj-w4jr$Mg+rrN;kkj7yWe7Wq|aWm5NiyHA&u(8>W=_K4lU
z9T~1aw$M&fKiRrHaW;S<u2BjT$;_KJ8tvg~<mR0J;?H6;62;wIS8Q!JG@(7iK<y3W
z*zfR;p*_#ZDsEC{?6GUt(Yo9CJH@7U!}<0F?~n!tnBayG{j~ZzkfFUZ1~OA&;j8u5
z12>#~Xg~eTt%hGkD{rSBuT#X_;@+tJ^@Y1M02n2uHrwUhymw$p+YtUDt_M80j)W;p
zGvtAENGbMN?a8w_7a3DO$8q|K*(bnj4HeaOO`(T6mBu@|Oj3?nzP69)?p{8KbDyHY
zQO5HbebKyFUm!;cK4!o0ldF#2WqPva{%+kDjQ!__%eT9BA4j7-ZcYHtUSII&;I)MC
z^1z|_{iv+-o`p6|$Iene@K&@3Vq#Y!%|F!N4Gh$UO<|w3I0$QSO@#zafyy*j4whBz
zu*br#X@-=ag<;6;3J!{UL}R#+n!%QpLpygK_f(i#@^o&}Je1)G!!FTau3?x^3wb>m
z<_0n*wI9nGjxju|Q(TQ*$GRoq-9-1>H#(nSX5{%CGL;xyw!w2xb1(GNdglY0o15t@
z4!h3?gR<^8j^I9PX$!lT$dBYowluPN89YC0xMaC)4CBWOyr}SJ^hu3~3jl}w@p=E&
zdjBU#j?>jcSH3F2&?@bC+pDztQu%8i`t87ODG~l_F`_|mG}YFQCi7n$&EGJa+efLO
zY?@~P*qF>)Xnx2450|HOoBYq_43aU(YJMbR>vK#K{L2(Pm77Wk;r?DUnx!AIn?-J>
zoYS%{CfWC~B0lc(@*IbW!{9wc;nnfcM!0tSa@qU4M_Nr>74Au%YuT@jRV%SJTO8yz
z{1El=o@Rg4ej2IaOBw>Mp0jrvAr2i4jvz9gUQT#VhN8cN{c60Zsbid{*8$t+1V9vu
z>*Whi0%0f^FBO?-P<Tt+sN@!O(HaI=hJdxycM6ayCs&|vj{;S0M60i-ha|S<=jRS(
z0=F?7SI$wbNS)J1=1M>qXzV|@hlP9h{yHV4pwod8v2w0=Ox*`L87;TSyX}DmL&uiN
zLk80{A02~M*Faoxrb-AALRNAfvaY>jb(=NuFB$7!TsG4w{%+CsN@!%)e?i$Zj_!t`
z8|Bb56JK-uz?b!`b%pHp5iz1W2v0KL-`v8XR#jktU~RAIe@Q|A+!z1;><S~MyN8lH
zHkEQZ%dypBemhyewc9^+FTcx)Y|*-#jg>vhbZ7wYgnwX=2cpZ#rjzGCe0{{=>?=!6
zpVHzQ7C*>R_{FlG*@-<MjogQPH1-85wziq=g*#Sre$lkDOqU%w&&>R~H(tm})<lk1
zaB(!jmL*wkvN*Eab5@h{zNq6~exKPP#{osHIQipH@9LRBV2^ot@TzSlAEgx<KUt(#
zGzV9D?k5gO+o5!^mbf+d>jPXv)BedfL_M9~KG}Izd;iA5(vUthpM1I!i~O}}-qHa@
zka-?~E<mr}&M?zpr^&IP>&GEz__BJ?BBI%Ub}xVG{yrqFxJ}MBj6-i#w4Lc2Xi@)g
zFMdxd2!ryANy!U@*WWOT{X7qw6QMtDd5XCD*g#|aWE0@LYLTMaPaYn){4n4iyEm#M
zi?DLTFm|W@69D%8m^WXA;I`lC+er;AttX(B$oiUuhX~pX*fM8;>-!8df|t(}@R5c@
zf1o&;d>L7qCqKB#`;4vu%A)cnaZD~<*IUm-*aPYRkpp{Yn~VymdGGhha56<k#Of6-
zdTxoBA*@menRm?T60zDV)Jc33JiL>zVKoJWz<OrNeey$i>ZsWqewBoGhK<4X7SSeL
zL$<?mRQ$?pyz_M5QMf_-4AXU#f4q0O9}^WGt_+3V0r$7vhmBNwzMG#{i(lxKG5-hQ
zvd?6lXZ$w`XgnQ;b-fdl;k4`5Jzeg+1@fikl@F5+YhMu66P2ekyA1i_1HaWtsHA$X
zeL<MaYW0@uVgARDx72+oxeIEAEJ=d)L`QyDoaaoniU3P2J$*wU8lwem)NOgy6#Hs1
zka_Z)qWcT2u|4C@?0hhZ?*EbO7#9GX`x-6t+8y$yI|}5SN_FN3L>dBwaZ-68x+&Vs
z>v$(^OhkmrA=oMCU}X>gV{?~xi1s^3ZZ~pAz>0b&f9;?7K#!bv(+sD~`wV}u3`I(d
z2)H)gU-=y{kteX|CA|kKY<IY*8xGhs-s}b?0i6SOWzn274!uw|;@cC3B?s}j4{YL`
zjMT;^!ugM?b$g_0t{3r%?%YW}d&Urzwr#BTjE@*!KaeLfbNRoN*+OJK$Z}<`JM?hO
z7EXIu$G+}*@qS?Ml%1{^uiu5Fl+eEW{5B_3q<l^vT*qi!cFf_#-TlzAvDJJ?@Rs;0
zc5QvcI^#r!i)~vr+cWaMmsD;9d7a6#KgjF8=MCnd`FQ(t6kbg$2t|YJ^$yrcog$yy
zG#jBu)Bj-K7z3i;{1<c-^pC7kYq9L#5rVg?0{_`XxA~`}=#~xyQ-ckvKELWpxI?+l
z-y7-PvHqDp<C55hPC}|y{}_4qeH-}X4{N){EtlP0huxtSs~&q0bK?H4#O7v$yyPwA
z9AFd{E!usHQ^NXNZOq6UpzOnI2KDe@;%nlwb<6M`+vapS3(%_k&<ED_vU6}8<p~41
z|JWa+#~-lI|3vPuv+t^uX|Xy?gCxQcj7Q{^Dnf^>>%GAVUKPTv;6z|22=`%t=-}qp
zFQ(r{+@njB;$+-&XJ`5G{|y*L3J5wRvz-4oYJ+rzim){8CO}jSWB|2MBCW2F+G}q9
z;6osSpNDM2-&cJfgPRLKTh#-m(&r@BO)@!w$mf9W_spkRFAro#>{x;JvJuEP!(5m^
zivauWTRQCWdka88Ir8dDmn||0(+>LA>49f}xgBCqA?}AYhRSg1jJ_kQlAS>i^pt?!
zc326&SdMA#Vbv>uahTcIW3V@E^R`5onaqX4wcZZs+b3Y4no$Rq{mD?S4FtFT>TO|!
zAs1xI5gO(mZXhf%xp;yHfVks3I_QCoe^YUPA8=w3CtsuJjLTetB`qMOh{Rk$-}Kqu
zA@VwkcHN3(^`*=FC!=x=O>2V91>ag^T-m@>;QM^$tkyPr#u~l0t!(y;=LYj)4-=X1
zr@lPEPh@`m@v@8qs0em(zW*KZuFbPZpbPVvK7C17$sgv!Gjr+zh7aKX-n(;l%eJuh
z(`Eh0%7Zxf4@?f#5=gM)TB{lU$za8=V27MO?zN)u-%+yP{9TNPTqA#C-wI6jpWV41
zHi&GMw!AGlFCr-!YU<X@cy9p=(NrQMuT($V96Uq!8OB!A9{@<346Y738XC-0P&e$i
zZ5CtHAPOnE^}=2-L`&EJonQt~U5T;fw9K#+M0cx)JRcb_3mZs@%=^Oe7r9#1;_BZ=
z<{zFs)Z-Zm*2CKJXD-1&C38V(CEURbDESkMx5SpxFk-hD@4Z;T1Q##-R%Iy@eQ_yS
z5w;Jd>Qr`%fz~&><di-jPMLZO0rbXYrnu)%K=)yoI<^5-;QN+*R&%>O<5P_`-i`Ef
z3nP~gTxVTAXZW$i{(+cH{A-cpJRILoB;Chd0Og@}M??y1fy(jbmr{USE!dokhytB?
z@Yw|rfrIquM8rOr#W9ljgU&7MYI(qh;7XYp4Dfx;U>ycymT$JMo={g8I|xh0ar+sp
zh|~FqK0)5;W<d%kAZ<Sj6!OhK3OPTpBHz*d5PKk)3Cr5u{WrQvA(h`tsI^?B^8hpu
zjUW(g?jdzLh0)O(dyMDlW*l0srvhWdUcPP-gi+q)UDIwberOG=5)za461@eOKJ2~L
zc^KTME)7d-8(ak@Nj)Fb;(=cMJ_hS{LnceBnuA(L733=)h2DeJ=P~g8+_evw&#Tr;
zGlK>I0mx75>FaZ{y*upo^7Nwcz5vN9PzZj!FDapQ<G<G{&4yjxce@zy1m~g0uHuV@
zU(8{r;(jpV=3EAs`$UN1XG3q<N2k+msf@Y+PxW83knpLyAsGp?r&8q))cg63aX)KB
zfP8R4KOvtZOg{>3xJU_15dD~#%Of{|=Sm7!53d@~qQR?gra$mj4?5mU-#DE>9*W0n
zfdw|S8wdUS_MPqpg9h%x(jKvaH<KkNW{2uTCo1;bfeNw_#6-g-l!=;T`gkiSISjsn
zkxmn_%x`x2vtI`5W%Uy$Bxq#eP3r&*CFq!d^MVEpYNtSu4D_-(O{dBocVi@j?mXkh
z3i<$~SO*xT0sNO{E6l6tCvzhoJUA_gdCYwK_;IbBCZ5=}fbl=ui~oepgV<J}0#-li
zpsT1j@4t5Z^#lX}FH!}WkgmA{RIw6<TZ5c!b|Qhz>wl}_{<FYleBpEml)>rmmwMG8
zT6IBK1^V_x=BejfO<-+CMbC7K;GJ?7pSpNOZF%?m+{%21?Y+TSHv+Yz^gBE(&9bc*
z2Z^(N+yR%f3IkxIO6O9Jdjg^hej?X8m2xU>7_>xJK^A}i60usgv(OEelITKfwd;Ma
zQY<?9EsT|Yl=_a^AyRFR$cRAt_;U*I_tx(};O14P+h1bAT1UU%M*fLW&c&mYTBVN;
zX*3`9TKrJI)r$)MVOnC3<=S74NMZ+~klb&&_Rslu<Yb%Z5aH)qSuBRk0WmX|OHE2!
z)+WFZ_U3bT5s{HBG@F@2>Y-EI3VexSw(0hHHs;NlH1I!9-|}BLX17}JQ#2=vMt5@p
zPso=9_p2K#eb=#b?NHtS?`F%Sryl@<8iv_Rr06)~D|R!jg6I!yeEbd4geHN~HL0_j
zpp?UWUN7P{^M3)iOmw^I-m3xCjbQ?a>U5xe$64|Zg6a`!?p<qBe*b4RHxn&_CahHp
zYmM(WLqE~m+vHqsLyVFG*{5BwnWfviecF6OWwR1l1-^QEdc#oVJ%R8WgCupZD@drQ
zI5JxS2Z(JGav0YAcMik64b%s|?~R_Hy@v>C{(rj&ItLQGy%_iGJdP+y{}G@0C5-wS
z-b=r3WuD?496?qfvY!`x`xmGKRO9<1{xqTSt-S<T83YOEoC0Hf;H5n4<=G+cvoN3E
z)`ZY;w8mu!h3tbBU=fsI1Hcb;<n>)f=m8N5`2*`Vwl)<mkm$2j`|wX8@3cf%yTmIS
zfwf!f9i4Wq^@pXLSGc}joPl?4{`l=Ykan+1xgw#kO42!qDu;R8(qHqq|9B+Qx9TVn
zVA3z;U(BBTXOJj>g(sk>KV`n%(|Nr8-pH4yR(#<>$k+pf_T0@}K7HD>e3kNxU5eJz
zW}Q(F9;o}!gx4Ic7;hYO)O~-6TjcHu92A9QVYXGR3-Qw)DdgpEbvqV(4`|Q0C1huj
z2TA(J?i3^)5&ESCK=Xx(rj;anshuU9*xECR);abhjGb=x%no-4YJ)S?qQ?^(Z;LX`
z=5EDnk_cnoiUX=IqdVv)2!(Y*pH1RTXp@}H))g)viMy1na5!2qj&OUZjwW@;I6C6(
z@d8EbB1L=Lz%*}(wy=mu?@Ge=l~Qt`S@fc8YCkz>lp}+(KWuvFHL4S%L0-m$4)J>7
z6UMxYw1=*uhY3LeC8x5bj(HGCsEHn>)$lm7RW8akLiB4I_efp&e0B9G2WfV1?w))F
zCH$ND)xnFeixzH@>{b^>?dGi2FkS6awveo*TbJy5Z=0`4g;|aXGW|B2qf-D}P=cir
zEfoYw|Hd$p7mPsGBeR=-k=uSCab<rJD>_}xe!FmXR_W-?uX&fbp<sL3JiTeU@l>g|
zMDYsup?fDz3dh-PXOgq<bUB7D*=T8Dq3c_d>bYm*@Z{|kfiim9kF_85IC6Ln(or9O
zQA}~gV(R&PnGc&_WVGqYz6-?Sm0qtviuXc7p#qz3QpdQPhjS72#Aofiz-{o(xm;9B
zPjpPiz9B~2h|!Qcl(fhj2@1n+6?x}Fa70(@Lj=VsU#(*8%kJ@?J{Intc6us!%+}4z
z<t6omf}&Uax0MYGK9ocCe2!8~S}kapmisc88IK-U?wI$+O+8)Exx;R}-WvUIB8*^Z
z(U81d8hQxJpdZ6c1-X^!_Ab9BqOJgu3%%meKAqAC_|Q*BR4*t2?y@^4m6gWmg>dA!
z5B&148&pkcM8YYkMn{uH461z+1FfuhxDYLkk^K?NrjvmG-m40y@s>C&_{wGn(Cr!n
z>NFszuG#kc9POS~E`T~i*^-=@rw)JP?xFf|O{xpKCY>7}vv_v5Z>hCV4#(IkN_6#@
z>%}HMGkX<8x_;7GG?R0@zGsO%L_&#;8ky$CC|z?E9Kj3B*9VWP@>iltGTl4l<gtgt
z72D0G$mJnQFJJnGSZ%;0;O{C849v?6sFohR7S=JnTpmx~*MSe1yp(yhS0Ro#tG9B4
zt%v+|*3;lLwWfB4bA*1*b%7k!gBqTEw(?;<ko)R7y0(D@HwV1^;>tEJ95b0sYz7;;
z(0h_XBo%loGU0mZsoXcnb~6-j^5jWs-Kz1{xianGYv{s7{BTdx%<{@;cFX`tIySWT
zF(XciV*dm;wVWNk-4hs4Y3CnINYu44RL-xYr$p=Zjg_GpFTbU36(}RSD6eV3E;m(^
zVS1Q-RfS7Jyj#Dc?VnV2f54!JNnikhNP2&w_WzVLf(P@*0p~rf3r*UJhHu)Vzgc$`
z9dMVAYdmr^_OQ;{B?%8?uelfECw<@jmgn|?qqW7!=PzEg-^;Xd2qsHDUp75`r`E0d
z<6NSG^=o>p^+En!l-iT=<N=p{cdayuDdjYBp?f(B!AN;hl|0ran00UQGwf6f<~vkK
zx0}cRR=M6yPj%;~BpDb4C9a4}^uU+Jgi89)oY>(eti092g-eyYit@_72+)Mxj;P-G
zV_=Futt3JC*YUon1y$n3&-*qnvagXIPuA-Ezete4RQ-+5=!N#V6jsLC%}iySF2b2d
zAJG~qNgg4(RCBzTZsSoX&<=9V6>?<6d9R!uF{6d6pKFY+=euc)r}xU+auc235km2K
zJ*r%f3NUf|3eh&V6XQFzJ-&UqrC-^je#!GeB`O!CFkZ%)unYDv)40ncq5F;Ez?<Fh
z!CpZZ2erjJ;rS)&>fEqQ@0k5sMZDs7T%8x_rs#Wpsx{#CnW4~&KxD~8cM=9jC>8sI
zbCch{_beZnHJYK|S;%*Z@2JZ9c<H*;tqo<U0+qdf3_mh#n;6<F5aGMl3hrCTr)RKH
zEWr#u&;Na5s(upK52VKU*GKa7A5BGIU{9Tg`N7WfrJVP1QR)^>F1h^&ZMNCcx$u`d
z^;OrMSarholM?6}8bu4Nr6Y~A_C-B7y^%a5#wLlAZ0(^5m#RtgJmBJXgxcD);x1}g
zj;dMdC8uPyHWXo<WXDwL3e#id3i@sKH@Oz$Dy^4hDQuGXM0|Ce-4?H?n3%+Yq4&D=
z*_X&iXUS!)BIWQX<`m*7o{SyzS=tRa#TR-6>38iA2~6?*)Pffa=ie(9o2ljFX-R>@
z^V&!B@NFnBD<bLp&6^CxibtlY&xGsZOSXLtYRKO7Y2~T<h+6S{_U0D8g!tLI?9Lw9
zBvmfZH?p$-7{s?smj5wa`J=VbgAZ9p2C3-&oxG+@0DG5VlJ|+<o4G$+``?^R&i`pB
zy*l^P=g&`IH}Xw{GlONcLR8>u(!jwW^K70t0{$a}610%wXOft<=QE2HybH(IH-@oS
zM-B@RYP8q;Ff5PeZuC;LSb3PiwRbj2b1@-}&r<)Og@xtbgMP(R%I6en=Y6V17i=Ze
ziu22_Fyhwlz8HWePlPPTK1-0I)swqe>G8Jt`pT4Y9ZrVO6M!z(+Pi*Sd32t?sZy?@
z9Mv_c8B?+=&pu`nJupXMnPGW*s2qi>JKjqQHp88%sLSTdKBqt!xfVbDP?4Zbp-w61
zubzn^u-7T{d4(#e(2OhVE2j1O`MxScU7erGuQjtdO#zwAEgtF*@TAXWky&)(&%T1+
z5kBf5W7QNIMnOc{^p~Tl`;pO9!#%RoFq(SjPWThL0+kfzW1?Wq(9p0q!r-q)Q~#v@
zfq7UPp5q$8F#XU9oj0lZozL*Seia6@)byX6)IIOtcL%{Yp|yT4di$=!Q*T<M)32K}
zgC~xp`qfP8MP`T6$8WC}vYNia6CJ|N;TPGHh}WSN9mVv7x#jRvbUt$!NA+J?sgg=R
zBo%QH<7TB5Py(@_kZ;Sl56(VW!TJrK{Rf^Ho(j3xqAt^1lqN~7<RA}L_=ZCJ2z^!{
zE$GMU`55HmU!XnRAaI$YSuw@e4l%MDyWy*JOTQ11p0Q$<mayXvPlt@sX4SmPNb}2B
zBCdUjWb=71Q_uPY1?wU{o>uyDl=ekIT^_H<dVNeE6*6g{TdQj8(&|V}idwr>qvVFn
z@Q&?cqvhd7K5IjRw0T^=_xX8HmPDPEJ#v#yS0A2C`f(mz75M0c&6)*4Fm+(3kOq^z
zf6ze4*-J1=yu;$idfF_ua8KP3KvA1hZi@-P^NNrX4~OS<>-Hv5cwQCk$3)<QB?+2W
z1cSIL=cev)<j<|z;vfir?yd_4>@c`2zVBEpu(K^9w|^%DPd6R>2}fV{3AP5Q|9*R-
zQcdrsJy^~?MCKYr4Fiso)ZK#7A<dT-Zz|dQXz>e>q`mTw$M-Bp-Mg2{)h~RbtKLkX
zTC+oOTI<pJ0cOpDV^r4?suO1Cr2Hd-0+DRqG%uR=cChtOfvV?@Lb@Y-VJH&vR6cHG
z>v_6lFY0cOuXn~zy@3potUz2+ubaJ~J5EbNSxusiSEcviMs7q6O!pzRJex1S|3s4;
zzG;5tW5~f*^j=^1;Afri#D&sH^s?Pl;eoI4g8j-0@-3G8=43%VAteJJN;y!4(V=eb
zOiLUkZ<(Zq5G*Vk>{hPK6e(ol>7jllNloK=*DjMB1_@xe9|3Gy#>M~Dnmhv11sf+^
zrmA~;6%-z~=i6x)t0xJoflfUgX2}qdj4mi+5MW&-_|6L*r47zAm-HvnVIoC#b3+P{
z+7EBmMN9s(0Jer2%~2rAA+yzg(ZByJZdw2#{f)?daGCPcA4`Rn7btsR=u$6dzrBy3
z1i+)}nj@@f5<o~d-)Y9|^9P;uCB!%8Io&$r3-7fK-J2E8eC!?S=h{<YWi>Zth2q{D
z?I3cuBQkxT|H|i9MI(MC9_&Kd(LwoZ&3MgLdavE!TCv@`fp5+jZS0j)d$K!5o(We*
zEsdcluaNns;OC|1-uEB%sCQRTuRD(kVt>nr+&z@n!I{BDHsjokA!xuZ)T6NVe6e`b
z4cYi5Tq(tmPmvX~Sa^@St`8@h?%g!Mmw?t93S0Ia59{e)eEYB`ZRzdSab<0fs!95h
zv^WZVd0PQqsNu2t`t^mb_KUsGFk|H}Tw;(4le}q7Yf~{k#i_OJ=S73%3^d^DC7`{|
z4!FFEB$tuqU{lX&gphZvuo3WCL}*SP>|bg|);z}kPWiN_)dlvX<~j{&aoRVg9N+IY
zMU;<RDA!*EMh6ikj7Y4L@&psRs0Uk&pM}yh4;Xn@?j^`O2Hc-?e)^cPP+^_x{r>G6
zO%})Q@^y-)xNy~;k!PXKH!ChEkDr|AJ6davF3LiA;l05q<IAA<uwNWGVRSh)HoIu|
z^hGv7q?uN<ANJCzU-gDpNZrD@DBO6tcFAqxb;w4OvlpJ!1ui6v--z;1{9HTLyTVUg
z5_ZE+Maos5*iAba+)7e2pMFM*E2HGbtuQ1jxD}gTC){Zzr@vWAR2a@!T^f}mNi9*^
zWY~nc+x?!bd`duj?IX$+byyXDtHa8B=A-TXF9sa_q4KzWS@|cr=}ngkG9!QE@4JC`
zEe<)c{|<oq^{}Wu14jKC)Hm7~_rdexFNb33j~vcFUYoyT#_|3#rNfTUu;EZ=0^R&r
zTO^EDSlNDn8B`nC9wpuh-)4a6=Mx7u{<W|tp}3%vgksxhlINZ67sC@XpkbeJycOgW
zG?=;JI7OpH{`V+BQ~4T}>z$^?(auGECrEoe)XI+859`zXDB~B`L@~*mOIYK@nI_OT
zs7y=5g@LYH=j?L&c9WnZU^`o}&6SQx=E6iPQz>fv+LpU4=DLIhy7xA;Dp=v7YQqnl
zY2X|)ei9;*<?f#q)$Tsm->DIGBp^v_kjk>u)Nq_ix&;IE!5e|W1-E+EqliVK&EizA
z$Z_Ti{RWU3E^Ya1K@NhQ{~g-^086!F4=cl{@F^cykER0AX8!@d>}U{^81%wsWOZ1I
zEgkAdGo7Kd+qg{gnrSXiC%ddwpd&X{E(J9y_F%B)<C%(DxkyxV&s2FExeDh5&fZ60
z79;$j>Pq=!@w~|rvBscPaDkQ#34TiJt7jO$Vz_8^2y%FdMpN6dU!jpO85d9jTQ}y#
z;9_g^*=!Umt~VxrjK1A3ZlSbJ4SNmkL*xGT_}Nj_VnrzcgX;PAzeZuCc90@l`!~3V
z6LDv2=G#tJj17`d7WCa|*Nf{cEiKpyb?)+}mVVHW6!F;;0u<%gd?(k+j7ydln@A++
z!ifit>*Io4S6{t+X>HAm>1s^aTG&OS#&wX6{YNMo`pWrv>#tB`0J9O0fCJcjkD9r5
zU5_Tmg3QGXf|0Ydl5KPf)B{y7IR7Qo^S4Uk>Gptf&c?>Zbnu0HVhJibA8-pvdIzf%
zAHnIj+KQs>)2F4+dSM$K$gU7Pz^sKgLQNjrvi$7+j+?j-lMOAE7^d|1uhy?$Z=3eX
zIt{)0?2B2}Nb%{rqH(h~FE`^A#^d8z+)(Gc+ZvL0l$@JIw`LEU5|(5KW|yis?ZZ1R
z=c0^PAD3Wfw||Z1E8fi`7umn^Y-mZiJUVf!cV&MWRk>+apcQuw9i=od?*`f24ZmwG
ziIZ30*+Gt=D$i2OPRoaotR!2l%#N*-o>2*T;Dq!qTBh-=iyH~rq6O@0X<m|mE>IjU
zRJ=s?97v-n<mk#Ips7!9kfYlI1ze#Zn+LqecJ2pW6jYZZ5qsb#Hs_O$Xpsyq)kapq
zu3lyEuhQ=s?|%Epw&fWQ_2k_?kyOawKNUBBnW6tqcL);_y$Lse`W&46gkW|Xw#yp$
zcNDuzAGq4yyniEIMH*e9J)>*f_P)@^+S7LSC<EBzj1}m%X*w-`+0{#(U~kszCq3Ww
zY=sBQz+Lxk;^Z|hG(oLZ5nq~}Amw>;k`4Vh`ROZ81;F$$v8@WLR1Eg(s{Exqg{i(a
zVW|o9skxV<GWR>^J=yF{KGvovm1-aF7VhXVa&9^FX2c=4aegO;4zU`bBaa@<{VdS}
zo*OobOJ6ATn4D89CsK=*F?5gy787b(YoG0!p}eZ@pB5LspXFHLQF7+YnW%BnP-z>{
zFN<7?Wxdu<Z=Cob@rS{c0JbvAzU5ado|FV1v2OTYZNVP=s>1d0c0*h~OhAk@rk<FS
zR=yP-wRS(iec_+dd_Ob9-)I?q3t!9gxi2p|aN5Jlnr1L{7ZjS#o9XtLOa<on=^n(t
z33$dBD_=H;4Cqwc%)`{iQ@CDl%E?LGy0YQgGs~wN5uC_&y#;%at6Q#|Vv1Qod?B`=
zYJ8y-^=K5QJ751brql34s!QBaTpo$6pHi|p;kL6G6PXU<yrdKr9!HDWZxW_5ALr<)
z&Y!2gVO-e>aHH4Q=(8C;Jge3G^uCuw<YlJhw}%Z99rk03`MgXWZL+ziM_x$@flkTu
z#p>I_0+)#sR>LRw3xaqMw3L6quR}G90TPo5w=@nrgQ6R7cvF4vZo+fyuq=M((mT{!
z5@Ryoo;eG3Ud(}~W|CirZY6uutwAJo;=6xGtZgB~h~+sSJvMMW_ruLp;JWo;xnxrO
zdcEQl2xrOxkN@&ItVu=5IC#^)Aa8#D^q(eHYx5v!NGQNAp+s+(R!D+zM}5#ni0$30
zJ09US(J9ks56;8<d>p;~KjnQ7ti0Kvjr5h+rl4v!=JNC?Q(<5Zo%mv?1X}`)ln&GO
zMTLTw`((-X@oXMtAxgejr5@{%%XuqYa{{s}XFp-aCDN6=FbVN-quIWpi=H1j@;Ick
zR%MtEd*F5t`@LF9rZRSzK}SM{7d}n`SaNE0YDk}ta6vI5B4RCKovd?;|3Fo)q|kTN
z)ty*g-rCJ)k8@lh56oI*j<PG}tKf&`54FcP@I|2$vBJjju_f5)i!)dDofpb9lCq^5
zS(~+VaFb>&tgKMkCuHDnI@2n3+D3@rb;;7Qf%pa<!nLU%aZBv8^76XhX~U;*YZ|io
z!E`qDT31oV%^tV@4InOm^WS|$&unV?BOppjupO3>kzvqhTFrr(fLt%?4RNEa*gRG?
z@!d%8Xy?_Z`^I(J*v!aVjBO!X;3Pj=CmSb0%?vZa(f6JoQp&*fH;IHSGB*>Ol->z-
z`|#FrU2MV%iqrljm9kTbhesL1Ivf(Y)KBIv{!9rLlUDGflfe?n*+VOp*W)S2-S=um
zh`O2Vn<y{9%DCb*_>)$}FhLRWrk$AmU6?k9aukpj6u-D3ryl%11A1rC>5Iw=t!ioU
z+QO#zwm>Di@XE+mfW%_oDB4qvAgtx1w7*_-w2F@xY0*y0t^@z8WynIB(2)$iI<I)#
zvPfHbH}p00*ua(KVG`y{;c5=r%gDQPq8LkDA&ya%%a~skDij#vF>pxm{p51$b7)Nz
z$9}dZgY}$RztscINIf7c8<6(WbIB3ZDfh{?z{T0BZP})ia2W30U0ub0jcNa#rtx&^
zf*%^20JCH<$A)_dilJaExf>ko!3mG82cap9)avTb#TQhM&u1Q=D)VPrY}MWV@>TF#
zVpooP4*y)M0n8BwE!5#s&R{X^e&0r4^wRf;C>%dtu-j(FZ?k7*+Ij9`p@S1Z(m>H=
zVR@+(r8&-D++B|1srx?W*DipS;b|2K9aoWTpQC)C`b=`%DIr+P+u00NW78Li^O>I+
zZ3aW4X8_8HKiBJ5G9=;^)=y&6X3s~hH5v!L5TYJ$A2V|-Lz%QHFDL`=G#s*)YY3K>
zjR|tN=4W097`Z;^>ioo94sib?=2E006o<t<gdRTItKZ~2Vq78)`<|Vpm2IPA*Rl*~
za{rIBj7oLx;Pgir^AcxT26OSCN=4|>)4ix<XBY$1pX`47-IYKwsb)VqTwn++#Ix@H
z#3R}h3{4D<n<n|pntghbpM@zVaMjIdxs1`zg}y9V5_b$Ie_K>qzx%+__IZLm<5*Vw
zvhm%R-sB|D7jpO%%oTibO>%p1+n`|nA>b=9R@q>bs=RmykeARp(ULjVJfT-PZm(ZR
z2)75m9rrsR^%*s6mkrSJOSC7H5$n*yld&rS-w@-hKFWdap1EQ|=1{8A)JiF7eJ6%l
zoLDjMgCmld!1r>2&1;Q~dO@A`Forlvm~9>6zapGKK2Q+9eqO(hD$oghD%5dxR3FF(
ziHpAqfNO!-_I<w!06`<@42!qU9J$nzBCK}m6xZ~TGAf1C)LH1Hs%r*f$s4c;<wV5h
zcONp4hqMP|+5g863CuVIEx<+fXR8v$@tQuPy=!B<s+?qdhMJ4Z!5r>lrX!Lc*E9IO
zVNt=W%^jNiRwC1FBfXY&ji?mK+Q3V>sH?5?-RsXuuG0;%inLc~bXNE_3YI~WC+|@F
zN+?1kquI|>V}4nq=Eaow=R`SW%tt^h-|}q<dGNNn8X-5)o(fE4r2);2rqNR?2}9JK
zCXyEyo<h0xVPo%9`5DDU_i7-`^)}8ilI5Nf5?$+2gd2EuC69U+nAh5O4<7PH;Jp#h
zYpH-x=gr@{LTsE_{)lBQE?4_BVkDF=$Gz)Hixr<Xp>oYGciKS6A?w#uNO}edrO?;3
z*ex7n@S8dPN1HQLkuio0n6B16jt(|%U+d7#{(gs^`>FHwFD<|y1Y3U+W-Qo*L?wF1
z08}L~u8($?moMAzDSDtgmnPonK(030e0tZUSd|>hIy7ZQmFz#tYn<{e`6h$W9d!Dt
zR`cree8cHoRdRAW+;4BsY2b@3;hVjvnaA<UH*^X?Kh!*kCYJ72j`SsdqxmHi^BXsc
z+QVZLrPd%7S`DLdAJ-uC?u#F0BjPAR`6#S!$b;)&P>W_$MJZ|6;Q~bs+f^Q(@5)vF
zXDe<mBs|65Opp=)2F%$w-U&B#x8}VYW4|{>iyS^-zNn=%e>qAQtArPwKQy<o?3g@X
z-wGCpuU7g6T9`CeWBP%Rywc@c{)O4oFmKL4o<ZZ(r71v0)Qry+xr}Q-vP}ke>0N!f
zca=O5S2Nc5znsST+lXS+$#dP)BcN3lTvu~W29zLb;6I(izWG9*jt|&@OT`T?SdXOy
z;Qiz>WfJ|siHNIC_MX&C^{AAm{gaYMU*yVBrpu)v2S2^*clGeBnfKwY+fjxJoIv@1
zv6>Jaq{kk1H48v57#k%yyglYo-?8!bP#>}HOwz!mPE3++_6bT!na&I7KS1$YpnbVm
z8wGKw8TXL8`F@LbMaUT0a@WO;WTmMx&X~B==V6880!-BsS7n2^WAL4=mDEaWboloz
zHVUj{qR|T#Es4fCHiEO)OEmp8lI|<=m#T5g7kln3Gyecm((`|v_yna4#M0A9cA|M4
zrk*o$VRxkLfh%9{LP|ykb9aNBax-D=(0ly-L;qI?y(L${Yx(e}SeeL$iLT3%Dq86v
zdDKOm>^7r(`qhxe+$B4(lMldFw<)hj#o61ja>*#ETYc|!izByB?qUK=kYJ249++m}
z_DfJWj8`BI(M@n`*cVon%hmPWNEy1ZjY;Rmx=FT4J-NNf2um{cWsibFD?-1LP%iPV
zK|>p=-*yv|G@%S4DBkqs7qru3pFnS&4C~}u+{1M>N#Sr0-=bG3c1n)7Jl%Mpakkid
zRKVg=io{oSc15Y_P`b&cvsrb^ogXJRt$i7;t8a?uxH-vyqzB}031l@3@GY52T46Av
zL%>4K_+EO_tcWneqbOP~dhVZc!5jeF(`O<BROvN~E3roG@)~Ejrj2{B6V7{#3Q&n(
zv*BheT)rX#2A9v$FX6X<zfJ2`jg6r2(5+tC0}7AqoO|0q+L07Ny#T+MnM=rkZsVwk
zM>+iR?~2*&89nCn9?BA#Pu&x|^(VZ&%eAKgN9wZTdvTWy=o^jK1;J4)M)psS)_SJ<
zKk^|Kv6<dY;2KGn@_k7p4Ua~S*X`);4d=#8C2bqdPFr#4G3LYQtmft77koqss18+o
zwJXN>Si%aKo_1!sFa5>)R|P9-t7N-V1S)e$WTLo|Bh)<#t(66Y)uGa3Do|r446WRy
z?^#d2dz<3-fnvT+Y6Q(7wo`^@61BA_OeKUI8QC1d`y*SwAMnDT_9&&iYMTw+PM8Jt
znc`g*obsyw{n1xa<!WAd7dGF4zHZ^6`1tX3vm6)Ppw|Yk?1gWot{0y#M}MRcW(4HU
zm9-hK??gD31}rWHyS08RM6GplYf;O;fG6u+u*y$pH>d=%@)0xr6edOu#N<ZAur_WA
z9!T=#<NA!oi7B_*I3QztI7`}O!Y602*W(?1*7>k35lv2e{|IqQZ8vz74SB*DbXhv=
zd1EXr1(1#J3tNB{>c2BWQ1to_hHXw)J?4g$VWw>(<4IV|aqw!p4)8Q5g~E6b-C3)3
z?U~r(nYY;cUypaM>YuJiW1{=qe)^>84gp%M^_<_NS|<j&M7K0e5NMpoxDB1@cHqJe
zPkTFAq(ck@f@8=B$>-NfUFYuaC~>mFEUIg0+_DqcA5X;>D3qc;?PdeeFkgw223s`)
zW$cny=-Rwq>1Of81U0;n5hL$<hRwy1Jwx`xx_}lpDB!bLLoY3EB<1fA7OoOA*mmDn
zfSYPZ(rtPK6yo?DRmNIvnV;Ton*@GS&-e%;ZY#r?;g26{76*-jIb#LK`|LLpvPCQ8
z(F_%T=5%cx{!EBmY=$x?9>c^M_@ZWR0>&^iHdPBIKlM&<e+hzzX82i8bX|c;Mrw%d
z5g-u7tui<OrfF_GDk%t%Oys_#o5267m!uzsY;3D{EQ*cDys4TyuL^!t^J5S@_&*3P
zC2{fmMq-|hmim2=0}!s|E5-yb9A`Sr59PvQzj>ZWupy3|j@lPy&L?{#pvCK(ZU|d}
zf@9Y^!sn4vC+>Z?5~84Go^;`>B_TpWcX2YmcG0)1c=zdD&JFtL!m#GbkYu7?%cw&Y
z%CsVOTc-dY3AKTwMle%0+u{<=ipgzJ4G1koQCn#j6MAJ0s^-m>*qC%2muAj(SQPg}
zt6-<7K8p><k5Pm29ii;nu&7o1m=HA!=&zU8;Ls^-N|Z$R$4xUn7YufDd)7OfeDm6{
zCeq3Bn?8jGie;v360K~u_O3GOb2Lqs&X~R0ngs!yw$Q1=M!x`hU4-j+$Ee^u%mzjR
z=FSUaZFIEY@~sT|1YwaKJC3z&5a!Na%PcTQ_<v7$c+3nO2Rb*B8F3sL=^+q)2$_-o
zf>Nu>mmO%l`89taU0L1I>H)6Py`=Q-98;*~zBAp`cU*JzIUXn4HP3z04-3g4xO?tt
zrys$aVzybY8k3|Or5(=;nO4rKQCLjzi>t*#E^Oq8en0vZ)z#wGRe9{dSWqa%Z?;Y}
z06iec*i$we9yg@gqDWQzKH{#hQzjk_-8y->%4uq5k%qecOHTp%rf1a|`4IRS5~>9A
zfb6}{t4<*fotiKk7;0fKQkkIapL0C|{WQl+*{C6vS3rrEd}tfaYZno~7z2E=g1w>{
zTNW|#=FNS>W?z~KAAru#S-$)8p`gl7$?qHi$C#0m+0UIMP0aGIZHqmiHLYhvtZYjA
zK47Mu*>t64j7#JA@%4{q5~T<!@vGNOao1Y26z=WR|E3pBKZIh;g(Re+{2f+bslW)9
zWDA(Ztua>)xW-dXQqONA)tKl%5><b0Q2vIV)4wmz;<P91<}yeC^ZJm9g8q#^#McPe
zC8s*Na6_zZR76qR`BU2&DIa5mEo^IRtB`BYStz!S%nm_>grrA3+E_DtUHr>K>*sqC
z$z};9R+ODx(PflRdXD?rp%qbfS%ZqBv^AhAYvyySEu9jGaotf#RqmkfEl>|lS3%x3
zbd=z$n;I#h6lK6St~@kfdOG)vK%x9vt3O6?fHsj{KYVJ1xJ;opLx;Y9rHo;kY<dWf
z43UfGD}Wp~vc@0kWxS+Nc^cQegxG@+$Sci+YM52-;hrn=r}#ag&{L)YTd=k_^bdfN
z)}fVTH+b`hl2$^Cy#bu+cM1inKTu>Q90A+x$YRs%_sy{z7TUVsI-BKt7(NM8oMuo^
zw6IO5DQ3Dtc}?0WQz(CZ_-i=KybWFH)rdLw?7rOU_Zh(uFy~^^o>?7lHOu&%*D6kP
z?0I`$4zVTWT5*(Y;J4a`sVdJqUiiqmuui0us)41JO-~7KWRkG5c&KRXWsSy}CbkU#
zD@Y^!+fz2}Bj47mt&@x@lLGob73QKEVNMKjZ%kzR;nI$g4xX0Vya&;w>IZLI57ms&
zzDJfYyO43@4g;u6H^pd5gV6k+i%q{>gx~vr$51T_=v28Z>*6#4)s_zPX45H6f^Moe
zEZ)6Y%eMG|42g;OO7+H;5G!}9%Fd<G`kra>FuESUZ(sWDnxk>TaaOk$5(aM&Nr6ju
zqx2baQE8(>Qi4NAA1M#BwEH!Yd6#%Vbh@bZLK!HrsqzPxtLnM8FI_I=V|i+qrR2T)
zNt!<0CU+;UA0=mk!WK!rFj(FafF9)e{NbsU1HRr7_j$1nU!}eItbE95UfjY3C9~TI
zt$ia4fC|>h6owM>(G2wT1VKvS@k@HzFN6x}$?2@Xtl2{eQiWLfTixO<Kp-vVmB9aF
zyTReFP94wl>oW)|d0*=h|54b=leE{oQU~N-l25MSU-S`~o1SPT`m=DQs}#Q+K5!!e
zkEgI~_TP3fuk%BO^t1j{87J$S_!Wcnt@ER;X);bjx?pdfl+cnI!$4$?ev*Co=~qOn
zQyd3QebHP}rq4>o8dF0adK;8@F6kr?mItNw!z|@|Oc@Ib&1XRGe>g!&7)iguHyT1%
z3RLEDZwrfnZs*@y0dW5yyjSC?v2#Bte@qlkJlYBg+;Df%G$iA!xKzyzVBH|j-Q@;Z
z*r=}Y2_$fvdm-24p)elh`J)CIXyEu%n55B#k>+98dn;tFc4YPe%o*G=f=qB_u{N12
z(#gZ%O$H;Kt&i4(Rg!ne)EiAQ!%J$^L`~J1idY8f^)CcZfMt1G>8(2OOb1m~<KNEG
zL?)@PuF6S=u)K-9FRaMAg;peZi;nJkai(=TbxM2A3-9F9sFzMi2nq_4@fHi>rxU*=
z7MPyy9VaO6%WprlG<0~AtLWHEM>&Pnq33ZEk2PPtm6J9(P@5kg82C75WMpJAU&Zx0
zA>L6Z+4CBDfe%BC?_TA_+Ox@^BF#PTN@F9uOQM3xVzXCu6bDV>nZBw=1#x>+Eb?1<
z?ztee7qbUj#fzCIo)L8QU*ONiS&mX!C~U#D1Jy&M_(Z}pN^4^T?g@Hp^>>T|E<tr>
zk$f*ZI(DFR**|58SK)!Y_yoqSre)>K!ZHs<=gHBk$I;r`=!Bl)Yh6}h@$OFc;0IIN
zP0;SGc5OG7BO3LJX6E!{rx))>J$e+P#`s0-?)o}#>V0wgI`{_ny}EI|`!cxaDTWlL
z9Xcae@U9@o+@>W&Du}LgwbXCFV{`f(*9Vn}Z4X>Vt2PN*!06HUg}tr@Z71G4o;!RX
z{L+_9LK7#Kk$Aj4scZkYJ95u0ubz;VSox~U1~sz|Po+0q9%AZqG!%xunGu&UhQk*?
z`461k(;&B1Dya!fc*IK%HMV5!*HiL&2;Hu7XgkcQY(+?aWEL|WarLl8wx9g=QWYW@
zURsk?>mWmJ&B)HV1IW&(4RGmxe`yqZ>D>vime_&YNo$mD(g9w)_3ydOPQG!S<dV9D
z<~?}Q^BPPgKbJdnxrKGl(pkfg-3$<hLZ!Ce;v9GDH$3ES^5)|zuXr!1c~te`4qs)r
zqslo++vlS7R^6^;?SO9SI^&r2>anS3HN6P|?(Ru2dO?{xM8=r=yDj(_(Y&s~&*3>c
zVtVOO?_Qwm)jrR!C*hVqZyN1UXSjMlnw}boqjF#}UZU%Ju+;uhoLCDV>u~(`R@Crn
z<^sNx&#fkev953Bc^~ef301Wa?S66M{Zv_2e=_xZNgyM`PB;gPWKMDo55{>>s}P+Y
zpAoP4(h+}Uk^ftCtk%w1i2}UvUP8qz?jBBQ^^)Cc#pHGqhZ{SugS*2A6o1SV;ujxM
zm)+OPJo}BH1wP0JNz3B|LW8#A)kM*FH{W-?FBapBGFIkhr67!=^WARFiJV|C`da8D
zsz4fhHBeob)|-4xxBtW7(7h6Nk<T$^e6}8Adj)mDGH>{k$cd+82^R~W59e9baE-W}
zHIlXg%~voj?5lLy+&=66c52xP@tl<Y)KSx&DqVE_Rm59Kn`evWYRb?Zt6FTMXKv1d
zW{vXz*rWSBxP$@o9)+n=`Y+4{F5_pn?zg_XIQ~4pJL%4Lxt86?;bDMqmT+wTe;k89
zpNs)S&E~nLX8R{c>-U$gWA^o?f;DJlNfdPOP4^S0SR=AWU*DLwg;v4P#8s8NOP8N7
z>uz+b`ZFboQ+ZFP2tuz_oCYUD>lRJS%An1e(r^(;r5s^nLe;6PF5a*<ql!1}?^|Lr
z{T^l1-i&)OxoC|qn%ps<vUvU(o7w8Zy(^U37OMOEHXKEx!aAMeJ+1s<F+CsEh4KpA
z*6$ZP?L(neu#PkbN$4Kz*B-?W6yk?@n~2u<>O~_xy<Kxdr?=fk&wNlT50uY8H>W+=
zznPqNX~fkedv%`QGIVCP>tb=%=*qq<sj=qDtXYoM6K4&K^GBd>S3b5{OKN(^6|8Kw
z?SWaue!{6&=q;GBu~oM?sja;WrBmBQKcJ4!UQSJ=49_&t7^%;t3vt9Di&Ca97|I*_
zgkEiYcIKYKlE@2|&y$GPH9NsX&RI;;<4Vzcp%f{IDk|hVXIEnl*LP>H@)!_AwT~=}
zH$7UJ{$eCpwuGZJzN#beUt5u|YvOyXq0e_i-LnfOb=w!qcUY*eW-ihfsAOIioAINY
zM-rT4*P>+(;81-b!5pHEuqP^$a~>3hiQu3U(u0_u%fbqo5mD@dFWp`!fpn6^|2mMY
zJ?$BU1};G%Gkkv)NRSf*qf9YV$oiz?W*ViOwyiE85k?$p`-UD|@1ikEe|oX)UbnZz
zuCpCF&r$+3@6a9F<9?@UJ!arE|DBKhn^0=gCni~W%XX;wIAWZ?G98p*E=9={8Mzvm
z3Uqr<rt4>pNd)KYE8LVDgJVv2_yBus(i6S6!kC6m4NAeSCGl9|%NLtv2L!jWfTa6n
zCXMIaRL}SQTe16VYdA=oz7B{bsP5jsw{FN;c5pMD8Yi1!DJQ$p&694(D$VyFt}tem
zo}u<*%yi?O>NpEsu+vA*7LFv_hLt}43Z?<WW~<Ahg^tF}ug4vnVcoZ(N5i>Or;aVF
zY_P+|Ydd=_(|rRQ6&uRytIad@ssIBn9KbHCGZ+yAwlOgr>4uGIi6G%LIA@CO2C<q=
z>na7GM2{suNd8_WbSK5n(dn|`-5LUpQkQ$ZMtfj>2?-}@<>&GQqiYN=n0dKB&CQKE
zOp`LyW)<9{CA)O#;p|8!^U!C^v-^*vF5=1GMahHF_=Xill0Hnfe-9E0ONot*-C9HK
zuv-<`(f{q+H$7!#AN9&IWnKdH)VAn4YI^dWEZwIM_pQv-%)|aLyV;?uaxM>-jJgBo
zCmdBoL1-Vn`2AJh=#jRk9jEi-z1me)sdd+E+lytk<CmugNR-R+gppkHumUW#_`1Xa
zxyAFgxZ1sjG=kTsE9>u$a<ob;T<`w?Gq5+mx6kjVy`5f61>@ITbBYVue9}~QBt1F(
zddKT#SY*GoP6&ikyIa3$J__>N^$^xaU2T7z3dWnKJZcwRsyH6-g$17GxHg+g(a5mM
zHZ|lcu<vLu#JzE&73k@Iaw;%CGjHWfd%|5BW-(-i-eAB~4H2p(b~9KFeQ)=hv6r@8
zeS4`<`dXU^3iHkS&0u))-uS4)K21>7HQR$R(4WKKpO5%mWN2h&ZD{1LlI_|ZX~9+9
zjD{7Anq)n|z}~zTQoEBfSQGtd{kdFgWwmV%N8Y(!zFmRv0Py%*z1UK!G#D3Uz6D@h
z8+b4C-g32_<LtCG?%PC2J07nttWq4Y^>Tc4v{@7Tqk2V6GVh7qv&@g=F}jgxYs|tN
zT3)Rv%qUJIuw>@Sm1@IbyRelf-4Bn6yhE`|>{Z2k%u8jH9(tGPM2W?72S4>%e{nJL
z+q80E=w_Cs_ZM;ZJe4Rf(s0cK^mF-Y5O&RWwW~&TUPF^HyyW<Y6LlYPM6Y0}$C=%g
ziMSL3Zi{m5wL@n4r{-wMX=eCj+|+f69<{0KPnkpx8L3w;2Rv>K8^jKTP-JSQsx$B+
zg6WDXOYTcWs4bWjW5TSwnQ&6@(kUwuBqATej!8(S5}do#9*5cOym&Xq(2)N}n9TWh
z)?Z?I$!h2J#w7okQ9Qoq9HZb1a&p+Pookl}U0?s9xXtbp@1xVfY>2ZY40TXm7ANaZ
zr+njlAJtF;>pVQaAKaq8C-`m5oH_^5G>PWAP^1wow+zHQJV}^r(@!l%pL}@IZyh?z
z@lNbrdfSO@vqm>4&+{{*@-!d4o~w`A>Fjc4@S0YAwl?N0!OJA{PA4^=&@gU3!A3Z@
zlN5;YQsS6=n|<qZ@#^#Zu4Db8oraRzl5Bi7?ig-(%B}gBEY`JWP8L=LoBKOXs}2mA
zdWLJse!moQAjrB8M{10ewz@T!AIhgm>NNUNzF7Mqbo+@{rk={MZn+8U1OrYT<{~(|
zt-d9(QS{x-aq;d8XGWR}o$mF-dG@V;=(dXMqYPp^l}1Yzefb_7&e15+g&lnTJ31}s
zHjea#B?^@94KT&iZy*d>O0S|s6_1n$pbsh9b-cc};zH`mwH^E@ZZX_6<oR%=g4MQr
znJ7*WVKH)>0Ey{G)ySROHX2nuGJ1@6Sh!-_Rix=Z+27GS+>p;Ps(88Ogylm+%=3fu
z-?%qfeRhkrgs^ze(Wz^xLxI%zo_?J-zjfg}f8s|dEOaI|5}CzYo9W+NL26Q|f2>J=
zFC36El^@x1HSlB0)t_t9Ki|e@l)LMtV8!#Jxl{&Yft=T#*;O>|=7t|zO+7-j<i>O7
zczk1DX&^+4wTbG-%gyS=%Y3N?+{V*wTnb5N4H)*$YPb}qNAh^nP_H)h)Sv4ow)L?)
z7R6eFSJJMGmG5P*MD|u4y~21tc(A%<p(<iFFR=W3!g8^^&Ah-l5dC1xqL?sM%I-_n
z=$9k(q@ee`7hn5#vf{#<6+g=24L`S9qn8!SU0<4@V}_)<N7X#)=?{o3ppJPmw)=Hb
zTJ3ZAh6FwDp2l2iRcosp8WkxCV^gjzRw*7>h<RQKz3`1ag-tCK_ZVu9tylDBZjL&;
zfdd~oW_dI3NuB#>UV6+eu5QpdQ9=Eo-M6JwLhLDx$6<i(J_+ReS)7JFL+o`^;igzy
zd@C9Xd&f-MjF^0~e9mUlPB*?e4MwT1oiZ)Uve@)Dulr``KOf?f+JsiQEy+{xuDH<2
zX6|`1JKw@gO?HA+9KJ;5VJPpx`nzR*)*xnCPck7d$T@#IV->tVk8x7FfO2iCQ{`j9
zt5@y)wH23c?*5K<cxOIa-di|pmIgWUl)9BSEdy;-y2cdFvrkg-YU&fN^~-OI;;*V~
z#TqZU%1)<5vfsCZAeejOi+FfIQ=Aw1yCoTs2_*O!#SmJf8lp1vzX$NzWllLk)l{bt
zuEx4)u>&U?l(>6k%hppyS#AY%sF=CKlxO0^JB!q>flDks>GmsmUwl|7aoU$#vpCz9
zi)Z5pNTa2!<{q}+P8O|}cyNpmtf$#W8eXNvJbCS6UCQaUueXndY)I>9fc;v55^V?y
z7vi{2tEl3067hR-j0RZf=2nmM_ctM_f$<-Erazz0zf~*?w;;8V^Jkf%pd;Xjm$*sj
zSV|r1K<ssd);PoiC36~K_%g#yBEDlT=!jqiscd7KKEvK}l+65|B%542vtVobZQB?z
z1B<0jDeGVrO@;R%cCxu-CZ+U|Tu<l%zl~>eqSP@RSd!HurIwt6VqtghoKl8yOTGd#
zU$h>@LMW)Me?eVR?R8InDayU|_%xNjylt_lI_UDpg&R9ZmzRp}O$sd*-RqTl`7wOF
zQgUaT+C#3yWzR!0M8Dh{1=*J{)62)aJ`no)erW+%Ki?mp*K1jtmB-YP28RY&tp7jS
z-aH)Yw*MavX(Sm$c7s$(mKHlBWQ*);gp#skjk1gxOtSB!vX`}litNUkCD~;+_I+Q+
zF#OKZbzS#;AJ6ysKKFASzw4jtIGFj2uK9e<^L)Qw@7I!=<NR>XX=jNq{YU9CnF&|5
zPWT_iR)anW_;t8qqFn1xVl>%Yz4sA*P$yN>Hu$YWT-x(>HJ-Rv69kHHwtpPC_bp_(
zWKZDwl7SgYUWvms24^Ck6)zapfOQp3{8h+D5Y$$5z-*nB-rMY&uGE2fhP<S%7}+;5
zE3TOjhrh#^cm%#_I~NYWE$y+HR=$t8yS0Pq8b0$qerA2LtF2uRB-L9_$dVEuR4G65
z%A?e!Qm=n9#w1O*dd2F0GP%?#V)rWqIkX<#ZVsXs3i8rkZ0}e4<F}Xjkt>Mtz|ERq
z!9WbFsI?rZ0{0UsazWW9qq%dv?2YC9n^oRF1m64llH#A$o?wyLRzJh*h{RUj*eTp)
zu#vSCI_7!9yz0CQZp^>SpU<E(A?|U!koTZsc!uY48CIL$W)N@q6ay1+NCm!Ph68!d
z+{jfK5a4oG$V_mDR*6j(D!oqOy4V-Ey}yIm9N6F8>^wD<AKU{&$+1hgUi%v8&&R|u
z1Ts0gE0m!4tvFOyeDK+hAcmEA0E6!ljY#iaL|wLRwDZ|;aIK5%o=S@*POs}Y>9%(>
zlfMO6Y|TA|hq8FFvb#@47T688-LRWKS1{eB@zY~{>!m|I`n-jzE`+X{VZ?obpT%Ri
z@KI$KN4)yQWan#ZKhQ&AOuP?fOSgaI5#y$MzR4d%watN044yo!24N3M<GL8wklBTX
zN|{ezoo@Zy4a{){DlH`W?|pf3w(_9Vo!TtNOasjCvkj!H)HQDs#aq13fiI7qjpcSM
zi1HDZ0%k7%+rjZS7v`&(yjHOZsz@u~=>>et!Z+XeBz#pTo-b}*^1#bY<2cvr_(~c+
zI4fnE7L-=a)I?4oE}A8fVLXsGv_bx$XMr`;M%P4}TfgsNAH_T-VH?(S<FbGNS7sO2
z2wK4_whQLi&WW+8=6nBCh++VpuwB)$Kj!!u*o<L+*5k}kUXu#Pf@|L~JLYo^peMIS
zIh(`zTLTu(i}x;+H*z^B(p+DLJ)rCxl8M`^nkXRKfr<e83YmHUL_{}OSK7;YMs#rm
z)z*`4KfrTl!ylF%QjuGTG0C4}=6JK@(I|ncg(UTkifNh%HkFuOOA&MrWr^&XlJm^J
zk1Q<RJ-0pfB{$uhkH>93@;3&C>uaVoNxc>_+VQ(kd8;J$-qzrH1fuoh(>dQ$f;o<x
zyLlCgMPc11R}D;D8Kem<U&mLP9sNMnkf9DDQTm?$QWfkh28mDDtNEj4Fp&;f2s;nF
zmoe9|?!N!q)fdl4jMV{Y#lz1c*SIK5KnxR(TTYAC$Y6lYSH1WdFWU7cGx@^7GN`gD
zKF|K7WZXb}t#@ZNmQwb`OvL#QaCnB`-k^K2CSMAIRE5cZZPccmkth%yJK2>Xquy)!
z{GJ~HSju8t)WbO*y*=+xap!TO*S9wpIH(+_s(d!PyV`X7P{4Mpu6nN=NGw7}?rz(E
zD$L5s3Aua2)+S@HV&-{sQ&YApW}fbfhXvQ^G9!o^8)$Uoo>R|<W0O4ARZ0&>JnIZH
zlLlf(ybis((BS`F1HNZcMLk|b!f5u;_w;2?hx%l<(-RBM`&SjQ63xe%O^~|`H#X)n
z`K-R64w0p6_|(mjveL@uVXPVx-@`?}W<gDS%qV9a_njVbuvYFRQA;l7Q_jE_Um06<
z)R2#txmhVsJrmo=&a@s)k=45*QDmSou=-PU-1Ee9p{jGpG7F$9Ze8pj|JacHT17s$
zveb0zn4~O;9&zA26bQ~xGIyMrD=Vh_5cuc@Co}OrZRGOrwweL4G+DrL@<U&!GcS<^
zV8cZAZ=m9T7H~)1(BH)wL5N?#u?ElO693$fn_+jBJkOESXBm-@81$6~pUtyXcHed9
zdG+utExN<dn;Jfts&p%uChrQbZ<BZcGhQ_tb@$de<lNok(PbMQ96VbPQjrHZ&QZ$Q
z@J(+O&pit=e2xEE*%lEPtf7lAz3{N|#N-__TGl05Mb7{mCpb_IKP=QJfVd9G$eW3Q
zgK*6p5g`U&$5qL;a1=o%&~<B(spfZe&xHd89ibow-xwiPiL{&zHaAf&M!ph;e{k_K
z)cz9ghOFHrS(3f&$-BdK!b{dO!ns2Givvu7o0f!cau+T+&8RmI)fLAAuxc(!XNM#=
zVw6PXf>Z;DYaKrWDw&!rV+a0BI=T*rvO`tY%3<>px=&wGvATKoUu*tp#~Zc^_$pd$
zU)$(Vz4Q@n?8api1Dz|L+Y~ozUVR$8g~z2VFF2G3a=ei!yqzuXhFNI3NQ+5p84QZ$
zn@fvUKa1*x<gNmXx%R+Bi6DY!qNe~q!a}R?_7-N96u<bjt<K?aWD5qYBWayDf4)5J
z;kX;A#HOOe?&T8er4+`b4&rSYv2A9>5v`JWMQ^^}UPa#V*)l_xB;mJzZ9G`5VqEwY
z&6iYjMzWdp6l3SAvCGYBKgN5v1TpI$+!16{oSY2U!<&$)X?<RqJr~EW3*fO${=mSy
zJ(Y}l)yc(wH$X$`BuGFwe9P-zgB2)yc+9KZqfmLHGpE1%FiQ19TAm4PoP=`C(XaU!
z&AIn(V)9bv-l(E+jq;aR<c_rPldK{#iwQ;psO>IldS;#zvOfWGMrJ1kF1{^Y+MmK+
z;CTmk^ouh^_<Rp%=Ub0ILf@&`mFX~G%onRJIYqw)lu*S{NnXq1YtIpqi_fdcH=Bpt
zd+>Fmr%yPpiZ~oBbk88z>+V0Hf*F-Q48%2h$x8LTAD~)0Pp@eLu!H8)LH>Mc&EI-H
z8t8x-uXZf^x;S8sfMdym<liv%|Ew2}(1qQj2Iwe`{6BH~|6F3g96`;E7-X0xcz%?!
z&{pzM3)9_Fmuy3qDUfg7W58Z}f?PX=sK5VG$+Z^r3_x5}PvzKRCY;5`&}^sbv`)hk
z1Tqb+&&0El<4V2JBH}o2gQWTkN+dW=rJZIaVTAc?aD1v@U)m)aN<W2!4C<1q3##Bn
z)!m>5Kd23^DmZ)nmBaDqk6Jl7d<rGd&z#daIyXblOg~5OmIkiCaHS`~M^nL=ShB%b
zCpz^eK;U1?zq)^O@ikTGr2B;=hkBDrsdIh)sv7+1XToe%N@5>`PsQH;bnbD@Q(${=
z<<}dxVmZ6A5X^!=somxhG1UF~T(F>&#+mP-XOdT#B*W~PMREq7*fV(~GK)D>QI4Za
z9g623y#<c+J<F`HC-A)~aTl$_1MYiXK<tk74A13|QeHf)i`M8!sYZX42B4fw2kIF?
z$%H4V<CAeACmHqT45RO}l>r4GbIr-G=GCNk3mkoLp3AlybNiKEKleW!U+JYcgh8p@
z%sU^lz#rTyoSJ4dJj`>yzQ!ug^b55Gy`D&NB5U6Zp~ybSu2J@EiO!5*YN%@*o1$CI
zFkVfKXdm`OW&-rhCS2y}cPb)6F<ulmQ!dA7iujC^G(Gq7wvfrY^>4GGem52$vBR%g
z&g+(reUG1?)Uadu-fMlrR>=H)#*$#%z1trRKGDfI41DpUh8z0pc0+Q79=6}~K<zqz
zK73cNnza!qQOt#$I2H0s33k5nfpT*Y)F24+>09la>l~So3+nWHLWqfxz2(f2nM9>K
zZ|Am7v(k&T9~}Z(RSeVx1Bv1@#0}n*<o|V$bo4;}P5k#&9t0$otAbfl2C(952Zu}D
z_+@>Oa$S3c^u;@8pazX?ZD&sLJ134kv%d1gziqA;jTN1U^V+qvr9R<v;5-kYqmIfb
zy3fs*AYc%!JP+ljrHqRSs0={A?%<dN>hxf36{pXJPqcSrwY?hG*OdJ$>4Sw)!yM27
zbOD|wecbVCUa&gxr}BfFXI9xqq^v;igC2J@WW!EOAx}=AbN155$6rJ3!)KEn4>JVS
z?2BL?G+!0%i<CAso)M3amEPS_y<o*V6m-N=jnlX39PMXKk={GqZJTWu^`2vLAX`cg
zR@t{@)x8>@9fDqmD{1BF%+wk2L@Q|2bo_3`dsX#*;9%q10Q+m2bh(ycd@kYyZOB&^
zkq5`6#jKrUO<)ObGSXKqUe>>#Yx;%UJ<sm>#P)~m@b4a}gKYdFTr5yAgzeHnF4SZ!
z6{OJM3zX^)*j|jhe+)>xiDw)J3Idb7rmgP^p^!CRIwuWY3n8T{aQjck-SS!zl|V0*
z^4+4r6Q7LTek~L-P<1Tf{=G3ugjPq6laJ9W+(eH;9~QM2I`GY!{}~Wc^Ltg=-wQ1h
z^qgTYU4Hwqer0FKQ*ij%o>@KiauoxyC(Ety2;gn|S^KhM(w`%DP3n6%tCC>FYB`Qj
z!N51$ty30+Ss*i*?IAn?nAm&Erjo?N4J;;T6EuGN>x05*NEd#K0i^Nevfp#;P;hZN
zJm@ZUW&L4!Q;s*K6mSt^B<t?(?{BnSDqI9e^@p=2F`a16uOUEXKrVa*c&GngFa5i7
z?SPQO8ldNe7jrJuH^5M80Q7UK*sfQHR1!@W=HgD*-?jmJtoiY_QWF6jX9FoA>uyX<
zeLbmjWL)?*=MTzCfl<y!{#{(==ZJ5^k2-2rvcemkd~VU}^0HmXtUU=!dy@haW221E
zr)^Sbny;;e2rn|iDQ1I>LrE>IFNNTEpI3sx6u6ob5fH_cNm3LuK?2kB=TxXCkRc*w
z$!Zk~cuRJX17JWFaYg0}wO3%!?)fBa71-0+MF7xx9{jV&;FtFtn=TQ{`20WN)zkHm
z@vooPKDMKFr#$8d%ZiZaW}bDuT&c|T^<BT|ad43L-r>E0nS1?s$L2%6!^$9HrlNS3
zXaAr>mus)-x$O$OO{>zG%DsB*mJi>Mhz(DLh(l5zYO5hx(_cMtUU%F5=}hOWv65b&
zf1&tfgnah>S`(1<Ey*l;FZ%^w2;0@67vkj=i}xhn8yB(s7zQZo^<xMAKaI0MPAs<_
zVCyD0Aj}VoK*`|G;bE0{W2#OPB=SX<CGc(ol&{OGe|^Wc#o{MOQS}C9%@{M(#GTE?
z?(A^~hEd8qkU;oek&1DOS@b^Xu=q2R(3z`SkxEwc^z4;Fe;g3wD|j%=Pi4}tKdi`C
z<|(8!7%kX4+>hn}<5&;N)*qXDNz!`MJqtrm=lW-oG68iTXh1q;Ni2y6x{<AB{uOQF
zqt|lcA9?in$*>D$pG+&>f>2XE?C@tSN$xS3hW%$70wBSd`oXU_JpCanUrRl|lRvgA
zP2&b#>Ub2Lvsj{skT`MHt_EYHUJJVvu90;(O&9mA5S4UpD)w;+beutBV(<K>#`ad*
ziA_IY##6)T*@tM1-rgJBn&=1Xx|Pz^>1{V5xH1dOwNKeFhiYZ(_fHdEt91kNQ%)?s
zd3ehHxk}_1E{fNBat#OG%LZen{66ub;l~8opndq^T&~%hSC~~Umh(_E!8QHLTT%o5
zp-aF-pup<IkbPb&OZFt$fWI_>tj*TyE_2C-w8SLohN^ZhR{XUT-Prc%SwKx0)H&qa
zk*tB-IkSOiE#CG%$R3x{DP4HnROxkNbkd91kADBNAC0(7YvS{j>6#U11qM;lXjj)5
zd1I|wg~2)Lh7<SC*K5VQd(4lMj20p_B$r&qSzSKL4nH;XinYfq=|`@hqhasv*KUn&
zfrlYOYG3G1JU*Zg)iHj)8|<TZf7tQ_K#r|G&#7mKGgH44FDkn6`YPe-+s#q*_|wZ{
zl;LV`<ig?C6ecBCw#d6d8V}14c9_-S%Dux>kUbSxFz3rR<W{>?;Ij6>Ddf+#R_;!J
zk%Ge&dh1s49jVgMnp1&hIH{be!@w1ymsK)i+db6%%H7Qqr_1IptnIy)Z0LMZwoHfm
zc+3E|8LcrJb-)<El<MpmD3k3b)HI&%(9sXZxXEB|75k&>dvM73=x67}=`&B%o~-mN
zutnC`NQSiKf)4iAr+ccvp@96;{wmo<Ujotif3ssgoUb7Gg<o~J=1nc)^tYRdp6?^5
z31m-~{WDdoC&)K_dn&Cvsq{gRfvJ1FNlRMp9yh@!k0{69`>5E>8;<=kE_9rlz3%YY
zd<x`hTtwGY8bIJ@1+x#Vk0AUY-`(=gj5H#gxLeA}_6QcR?tcCejx*hC+E9!-$yF?{
zE~sx+HVk^Jj<4=%Rp4ME6qeQ_|1M&c>$W|R098RQ5qxeFgk(fVe@;~6IJ@FB#gyq?
zBL*if_!m42-23h*#=D&I)7*JTLzVd=`R4iN2^Y9Hj`S?NaV=HsmR2Y)_Gk6vs;s^=
zeLgL1ce0Xt=BXuFZIt;<v-OSjF?8KROjMN6mdvgO7%59lH@=tw5srokbv;&-`#)as
zcP|y>KC(CS`sx!VwXVFeQA2*psxIHSZbk(vtyV<E`e?237rK;Lzp9;dWV&3!;P}Lb
zKCD;{;hx#%=9^nN&GKU^6zVaP;{NiE?no!OK>&oZ+vSPCDIE`LnY47?vyeXG+4@#N
zjnU-({JHS<?n}_%2@`QgPU)@9>nDZTuOgWE5d_!B>HeAIOpFQA4=2e%xduuBO(4+z
z@be<ajkVd$IhSEqc?Aiuow9Yemsmiwk~Ufw?rbp5(*(|cLxTDZ*iF=F*j5^<Hn2ZW
zz?FgKD)QXRF5lga`U5JFS+|;#uNGWE5gvOT3)~OxIrXO(*!Bvnb+u$BW%!^^7zvQk
z$&oOC-IVJyAF(6^9KC4lO6J!#c-cUm%>F8RmQh`LOLu)2ad{x*+9e{d#fItlf4~p5
zNz$GHFbTj#QuAj0+(Zm#2mAo|<v%7(2taL$_-(lQKlEIG{VIQ1{z7@oL&B5JI66na
zP3z!<)SGrh;Jv7_nL)N?h$EDtb`?|kC6QfXHOTk;c_NISue#IR5NJhv`I0~w`PBu!
z=)p0WFdePO?4W>)u7wzF)vo$9(1tezZ*ykLw7+9v@UML!<`3Nt{n1lc=GaGZLCG_s
zM{sVH9mlDInkWtM8g+K7fQLY%zC+$i-@0_$6pD!G7XWyBUc6hv^ywX_^LN`Zd4NEG
z^5F?oDzAEj)jnM5rdd0&>>Wd&y_zbxDjNme3%aCzmex^Z8%Pz_QeCj{(%H15-BS5C
zgDq?6lE&iB061KqfH9BN$WY0H@B^|F?W$kRM4pC2TkMIIUiqUtp|Wdixa5nx9r&}D
zl`YYcTj6SnchkG~c2+XOmIgZj=n#O_N9~_<o$XfHzXt;|n6FPYB^@#opRw>8A0P{F
zpJu)hF=AF}vcLVuW~hZYw#Nq;n3z)nSzlI)C6`l-zM9fu+q~@HiP)mNH!pt^p~j#7
zMT9cbF(-UK&6;J<#=%V>!rKd#c*xY`q;5azF8~o*ys7Q6mTvUutxGina(9YR;<Jv@
zh8WfkA9?p%HwiSh=qBe)VDEL^-~{ge#@Xmi8Qh1DR`ry_;g6F%lLRnw{sMIlr~{+h
zi4rbC3$-%~zi4|UM|8dURuz`2@5H}WIGA5>m~900rZWf8ed}vkB3Gru0B{jmop{vM
zMyw#(0E@vPMJeOXNBzSuU#<n+YUUL!O5H7EC??G;nflIJ4=19a#3CeiAA~O`STuyt
zV$A^Fx7o7MW?*~*agzL+0ss#_JhuU*<_*hcdXOPnsO$*5@jJS0zB?S)0iD4OkbfJQ
z3&vTSV4Oh27OtgJrX)}jg@dFQXae;VaZ?NX`v?gT_0hwtd-fH;#f8=WXFR+T5Cj{4
z+c5sc4*XA);RwhBrk7_-Z+}6G%&DFPT%-bpR?QR<a;oAQ$wRAKq3i37W1QnX&7r50
zmpW=G9y}{ah>2_9JGQ_I7z8N!6)W8{E2I*M>Ljc_2ix-wv-kReK24lJ0<nE5&*dz^
z9+TWw&FMT(wjWMuC<7UH)TG`7C^arCRa3Ko4492>bAFZy*a29Yy65P#sukqg_v%R|
z*kovUs-tEO*{5*mKI1a%VYd=Trn@O{B3`&Kr19g8M*Em#N1rR-06OQu+pGPCJ=EUG
z49vbVrG=inSo!FV4D^c7gMArBZFA9e+-mXt0Z{IU8(0%<x{P2A{252T<It1W#>6iG
zWJP)^kYG=qySk8v={(6k5HFr<SQ14X-><zv7kawN#ETgw6iI#$d+#*S5Ui4ov-`f;
zVD)_>yz8l8<t?uVj%Zwpy*g`h-scsa>yJALJHvc%XBxs=!Ac>>2k_8bj@#*R&(p#p
z372DpD@~}B%#}$Upm&ngx-z9NA1o8+@;mqihV5XezzpmWM#^7c9*b406|Gk)lrTX&
z!X1;Rxa<%}x&Sdj(0<z8)cO45McGQm)#tM`<Q9W~YM6-KlR6`n4-nvNgS@9L*e-H|
zQ8Kmi6;luAY4A4`RA1?mT*==)=YRUWDAt6hQ}3lQF?G&GONL#s8h_<*R9<4UUH<3#
z#_8@!2rP{`T!Rto`kViBZe!=+7^VLH=XYZkT^#BD7d6gK0s7d;jlEcdtoyajuSw(;
z0pt<@4<o-2UP;K?Eb`ovXf+1s0GnC|I7P09D+I@Bh9^n$bwiQa+Zn96nP8~XS-!h5
z*JoiIj0FT+v8*pWsr~_*RA?MxNy4Txjg7k+D`@oPwSDP<N93dS(dtbA=je&S;WvHM
zi2Sw>VOKTB@P?A2NKnNKb;^J=7nc$D8Oyt_H{H(@#fCg%eC)ux`L7-SUwqfUe)acg
zJ<sjLad9(+#nS7Aazvi*Yl}?<ZMO-hkDz6CZDaC$m`Eh)FQF!*E@JPn(5~6`t{t+z
z(>)l$g<xIDqdG3K1Zozi8J4RW_Csdl%PaK>mjK@}4twu2=OcRvk>eVQY*^)jzm|Hl
zZP^2;v9b88ciw9{8J5c|xq2Se>7lVrB^-NFrXg)k@V<T-rFUALXptXY`5U;|<jsRi
zBM`u>4S_P`4K9_!86$$NV#-ZnfSNc#wj(>{7y*!zib~3zbF;~d6-b5&bjBMXZuZ;~
z#Y@-vBS^fQcwA9od;a(~hk%p=<rg;VBulk`+7GaGN%hQrjuebEo|VuE2O2cZB=42k
zh*O(_TPtSsAF-8D4@&b@FO5<<Jxz!`Y&oibc!Y!wF7i2&s~?Wm?ac);U$4vkb4YR~
zMUy$IYSf3T*HrZ<V8$hXvrnH|sZd=JG!xji1DJr<W>cmwr;fYK1^(fKUQB1;J#{*F
z%*HQc5M^!gk&2HvAlblAPK3{Ol1#OuF(XbFT~|8LEK}2+Ann4whD~g#yqEE{P=MaY
z19bzFXK##>I4V4}K!cy1b46}{a9;1@<t(_@_cJbA!o9k<<$zjhhO|c`--pCswMuQM
z(dLYNvol`1_pZw0gki$)64iAK#>DCTz3sRkKyla}9*<1hTd8Ph@m$26yzy+Pn6lv;
z>519CWj7*gu5V?hhC8@0zzY1e?x`2*(`&m4xfS+VZZtoq20uRqirSXz1%#Pog`~x;
zw}QVq@B6dsk1>f-RfLV)E!9OdxC7#m=WOvr_!(#+qk!Q}RYpM(lyM>6LSm9edNjER
ztj7c;y92|H2s2aZtu%p*Fe)D=;dy<h+(UdXX0{1zjG%i}cvCX+(=0!NT4I)SLu#JP
zU^H<;mS^7`v`a3_?iEe3(ehZkA!UavZo^W`p`uthsKy)aFl#`9oXcgt_Iku~=iX;%
zt>A(4?iA>a1TPc5#{5Dal=RE2u2AvZ7dk1z8_`50{d7n#&wz4HK>zjAcjy1)0_2N|
z93Xo13_40?l8is~V3B+L6{|I;3Lex4QDX9pzGlcBCN^yyx75f3NKcx9*~b!~Ce_Q{
z%m6F_kW2ORD3>Z-lzo(PuBX>#8Pw8xmn-G~trlp2pB@ET&8Y%V4PWp{wbh%iTjA4Y
zIuIax4g5O)xQb!^oj$&kG&cfnw-9xGl+sm;&&!&`KsouFYZEg_BDJyn7vnuYcZnEZ
z7%sid<i%p#Uf1^&xCy#Ugo*}*?^A8OwarZh=!6!CP|JB77Gp&8k22hLm2YnQk(qVw
zc32kK;b0C~+es&yuRo@Eo+q*52Xio5E9W{W{A%lCCS0_Ua7088jH&u-`Fh?(EE?2?
z(yLoWLTn+jW~1nw?UYExR88?oIeqajgknS_)2O*K1X$=OV0f|tNn_q5bEC{m-I+#S
z;7bK6!u?=>|2u8EA<b8bt#gCR7k_v;1{Z&RA_*u+MPl?9Dv>?trju~xx4pD$es^Qm
zhjz!|a<TYGyQxw4(=RJm%U{;|Ayr--o*#QKzFVodYY!Y)tO+CyVJ3*q<nC-c)#jf+
ze>U$P4ya2U5%M(SgFj<G)i8(!OxCHh{~X;lm~MTKWHd47@Z+KYHI0g!?#pZC-^@vN
z3CPIYYbIPBtp*@-;(F3+6<{g!=nEcPif(|#D@I?ubK7v_Vlwh&E{j;c+}ry_Lvq1q
z1+tuEUY=lDeGw1Nq$a4e2^YUDJv3w#<{!!=3srx6rSm*x&J323-vj+}*hQzt8Om|(
z1qbRu#z~A2oiPbnH)C#9gE?<)sJwqC=u7Bcg$s}4pFZ1J*6Umv{_1aExqAWcwl)8P
z1yeLmMlv6O)dup0pD;ca=Qowu;>g^xZI<!41>1q*{U5I|8m4(ga#7%4yuE_euvlS|
z-<WQ_lXZAnbXYAK=AnE{{c@4~fnD>taNRQ0{rg<QZiMz1BdcLl1h@IQ%%A&b&YqBw
zBk=>BP3k-GiH7h@kbNnS=>KRS_!dMe3OkGpMWGQ+geo#<0Ar-v0&wlQlMEm3tW=H}
zCera=9{!ICj(^o?f2XY>w;gDGeHHzvHNnVk9L#%V$c90kFf}t1JoEND_oZK9zPkMx
z#Qu9`!GyN1MK*zrre^8O`eFGmcBDo){H_tRpX%*ft0b846NIU5%(YJ;+YF4srO7L6
zx~n8x*zeo0zyNZcaWC%!k$Kp{p?hxWtt*uokhXV+8XAXf1h04apYT=Bq4L)3!G(Gp
z=NdjujGjAGx%?u#jQV@jmps%sr>s464IDmuo8fsoz^dSD??MB3<3aWigd_9hjzjFS
z#nL=%)7<$^NLM-YPRBEL*v<-mpWLiy-8FiQY%}f#oSsqV1|98A7paKv?)gi-D+rmy
zMo0nFbD#kX4T54~1Kr^d`jm5k<irzry*z>mENW8%B>pezoW>`h>o6`_NdensZ}DTq
zsz;`JqE$~rvaWKO>w<>M&b{Xy#DfCSX5A*S_k=|fNea@K8~6D+a;s#Afmdc4<idys
zAeUNXSc4uRlubNHF@!~r{A@l@UzFyr>~b&74j$e{mF<{5#kjfE)QDo!Oe<QmolS{T
z)a4{09}$og?1u&ORngG$B@qe2X4l8XuZL|i05LIrm#xDg!bO>o1yCE89qAqI_+Ovq
z5=^D*kv-ORf;3Lv__ty#NGX%*+a;)xZ=n~|n9LL&|FXfY(vtonX6s(I6s<aDH&Bq?
z)~g4-DVDu)l9Zx~tV8CI@Ui}`Zc+%@{$r^FF|XAF=OfZ8p#*`3oX*gCuN2)j^YJQ3
zx{zywZ&3YwBmI#wVH8ZptQY&7x>I#BFYn0^x^-Nz(x@{>?VQs<^I+8Z;JJ*2JVrAO
zuf?k@61s<jeKs2nK`#|e*^Y^>ReD;l#XIO{@$K&sdrOODCi$Q7Fq8C<!1*cw=3ZN9
zZ8bZ%!x5g@d;mk@NbVp()MbISjvuzvbwLpf&92@<p)2QoKilE(wh}uDrsEU*wf<dc
zP0*g%J4Qy#(js;&{HW(fvHRihX{J((MMD;$(I`rq7zqRJ#bf0304DHrK38l82O{oz
z#{EMOPP{;_Spt++a{zoev%AWqbq|&iK;V7JeY75F|AF=BH&A#FWXPX}!H3lPD!n`<
zrebugK%)m{;$U%N*g)_guJY+jYk}L^_yE+K-iYX`?zR$dViS`rsGrgkKqjqne3mKs
zw9l%i$7Y}+U=&eD*G|!y)6WWK9;{Kua|iU#bsG$X6hgXD_ejbHP?o^R38b47pk~Qy
zlvNUwHFoibvxk?rQRUq3y!1T&wago`>W5Yadj>ryd%rRBfOph%D<>Zy+VlJumy@@)
zHJ8!D4F-kCW~=1=Wkv^k2X{|z`1VfQkl@;PLR9Vj!?mSyxNZq@O^iJh3@YwXQ!^D}
zP`XC2vS~)S)O?Buz*hm!u+>$$SA@eeQuzn0%nTu9mR#;5RXX?IQnLmIxree{+);gv
zjdmgkq?o_GFum(0YaIfRj|NSrtM|I6j<7VsZ!Aq2fvA^#joDu?qo?$rn|&XCHu0{j
zv1M^hj1mWJ6YyS9EkhDwSw!t_`?EPK54627!w*$@l@-fM;AbtakiXmz2c8Of^t@N-
zEuVDeyqR)dC!YnWqO&_#<T*e{BaR#jg<cF?yWvWG!cU+7Zb828_Q3j`o|W|Ubl>^5
zsV6|tRN-so&h2BS+1AuVD{-~r#<1~+{XoGPpsJa}9PUEh%S|OF+vNcoaKBUo&2)Ty
zV|!`RS)9Ljp_D$ztkV*;TjN);wnuR7XSYuEUMJR0_O#*8A1AuL!aV?)wcQxhp~r5~
zqn|9L({F9-Dgkcz9(a@Y@WB>iq>moV-hbx7tk~>SwFYUO++#W#(h6P{!7d3PT6%mq
z4Lq8e_h)O;RHAR;VW|B`77?|>GWNn`a_y`vFr64Gwq&f>bImoZx`0#|c&pD;w}Wqf
zo!vc#ilkWL6FAG)?>;8qyj3{Qh+%DPi|IF}*8W-w>rDS9UFF|BZ-m7+J?(jL{*iM;
zZ}7IJ8GH0_-VlUth3#TIY&*|vFNmTqfTNBIrj25MSZK-ucl1tyEy>!TI5`<RvJ6u?
zKcJKiFb5YS?O#F_)ox#2(HM<$#e|F+;W!--qj($K=(Y!W4$YEm7>uosE%erdc18%o
zv2o33Mi^Hqft}!rBZD{21D%*#Wh__H9~{?9smP13K;<}Eed~y(BU^t_HMUvzj0qQ6
zP#E`btCT7*nE@J;6R3mTnHvuqY1Zn2#VPQFQ{Qry;pkl5?9%80`ITmQh<u%GB3{E{
zO7;&7*XeAH4Gop=mAcRdg2{tI5f)iiB7eux576a^4xhJ5K|-kx2;c5{%<0@}MZ|GD
zu{T1DT>=c~x(qyWkhLq>zm&ST>8Tlm{T^@DC#PUS@Q(pkUUg-EU2-1fN|}ZsY`Bu-
zNf}o_=VagmK)gE(f1%bFV9J_;8QyyT4mu=w9}#gC?l=rRQ6jxcxhBk?<G&qwfLA$*
z@IIL91=O;!=NLCWGb=j$U^b=$$^sXn4<WlawFv}66n?(+q3bwJqL}4b0hCN+e66@?
z%)H$9vn)z-Q?#4fUp~!R%Sq<v&eLL4gw7%OyOPNX>WoB*U3}plXD0HY@nPfVb6_rn
zMEsr$HF_&)dh<Q>R^jC)+MjZ&63ek6oFLFkoPcs%seCQ!z>x^p=35^aF#GGLTvtZ!
zElL9Lt#p6=$3iUhSu+Q57E){bzbo8i{}!6|z)sX|;1;8)TdMMAGhbf&o5xAk%bI6Q
zeDX2}3vDlUf^skszq67ICyRWl$fpU!7z~0K3qS1zzL*T>DN$3ch-6C^;`kvKy2uYv
zs)mTet!P7Q>hE9Ag29#7WxMJqtJp%Ow%$oMe(+~Y_%3Tx4qB2N=h0$`CogunO<{-#
zBiIY56|~a;F5>&z3l77lXC*idc(1G;uFAGHuYM<_&`Q}>DQdeX^M1wrEZFddIuH5)
z*FID9j3`x~az@X4vUCuh61uIatu1G1X*ucS**NB+j6q6j0`+7Y+G}>OBu1jpPNk%z
zgjqT~Ik)CFzo&BwNx1<!GrtGie7|i~l!@+tF+WNy8mJ{^5}wvEPJ9o24+0TOOz&b2
z5B7)x{Ld>nMqjglCF)i)MA9-GygzG9_@5Dz5F6%}nMm-IaBt1`{1{5TP+S9a3|S7?
zO73A0?R&=&fj7C;`sM?%^Q%ndA{NkF`Jt{|U_Ma!o?XJ~?u(kS2hIQuO<wu7RQxQ_
zEQ9Uh2WxOf-Dy<Fh}pZz_xQ$#K+Z>|_oGt<Ap^UX&AUvp@#_BQp>n#fcL-czI!;4l
z>G|l?h?A^7@a>Qvv98k#QpjFE%#K?HAduk6o|)k|Ih9vsAE9U{PSh_!A<;js__O!U
zT~3A-K}MuZIWpP54HaeO_~+nhsL0)m&sI+&hIu}+^&?FxO&<UTKLfn6#B}_Ci=LXc
zwpz-*s5r0nh~V!|ytnJaM}6Q{M5-X|opaBT@DdXN>!}DmsGhh$t>oUbgCmqw@Ha}z
zyt;YP(T_^#q{0hg0@K5zJIM-8EhKPx4mMmP_R2(qAb{YhB-)&qaRM>QouGuPLjp_a
z3b&@?tn|vnC=Hu#=s&Z{-2FZR31;vuU<1dv`kb0~{1dpHvmNi}5}%LITH{I{ZA}0C
z*M_*q>a0L>9pdM>RdcvKU&SZ+GB{Xal?1|d1c+^h-2%W|t~irF8kiOFz;1+!QTQ}S
z2qGf%q3*eF(avIqT?-0er~|X=$np+do!;<B?|~Qr^0<?0BRMcQ5Qym|!=*I4N<gBY
z`U5ldc0rYL)cBfDs;+4=2xj`IE%W6Q8=G3IY>R20M#!1|X9ph=91M?d*<Pif%cBW*
zKh4~$g^>BAz`ZK#OyCosKGSx64K(p%w>%>zAq`h<aa&%UJq6$eLB=@xuHB0<#AEBE
z;?c3iMaCh!H1rt_ikdIHbK)}zss<+RmM3CZe&4v8K2L};mmmQRAde)<fj2DQgUv}+
zZT)UPQ;yL6n&U){p>pfTn$>xsz7#MU1Eos5-1a_*iIkS;eMS$oy*iCaSYVK#G&2we
zvTN)p`!^(kv)io6pcc^i-r@2@0+5Cy@eDip-*O=ULBw%DC3%s~)U`+N26EqR&G!i~
zL@`s6*`17@-e|W7mwp8YvyZ<jWy3YQ+Mr-cCe<jG=FzW}n-*YXFV01M;dyDoWb5<j
zlH-nV!~FLxRP7Bqdnqo=#IiGsL<wM0QCoOc4{*%2DTyUeuNO-bSDe|l54!1eAH{&Y
z8c94MKs!dRIs)9^LKr^0j-Vv5b@DixTj=M)+5<#{tC!p@;8oxNvM!gZrw@25y#lw*
zahxCF%2Ft&W=b|0CLm27!{71`)w~j51iAk~Q>N4X@Wc4-+7_J|Cdl0RqLOyz%E7(*
z4TC9!>#S<b5QnHZyLtgcg&-?Ne>R^M5cS<J=*=sA+X|OzYk*Id4cBd`{eDu!Ow<VK
zyy?_-#@hDw_P^j{$}Z!-31+(Y{xq=COc^2GIxPw0+Iqs%Rxau<BHzYp{dIt~O*UvM
zW8&fr?n6#oUIb40`Z<PNHz_@LmW5F>jFC7$o+rfd&%fVGTS-bVD7o~oZH4Fx_tZ{_
z#3WV3Z*dnub)GJ{OS}Mv%ZQN15MAL~1HnV_|Jy*IJC}b41)|f_KpI6*-R|yg_t(c7
zcfUP(gBt?c5THvG_5w<o@&1g@6<fcIyMaf~@7sS<+=MG`h^_9*Nbxfo$kTP3sp%Oj
z-Q&;3cQ$8h`TG5WgPZ1Dz?V&IloSdmz+@JH?bJ!3yP<do+r8d`0PoP*>Pb`D1oT0}
z!GVE)<%_!4oW8HG!j+j}g;^Q3innOKLMPB^3uoBzbUdaccg^Ymaj@95pbQmO2+_wj
zELAU0sD40Q-o}7NX<=n!7hK8)+XCaK(KR1q5D@rqvrS5U!}Uyf*Z3<V#lwJuz?uvw
zVtBrafKJ<ur-4K(agW1Wn<7rN2&$AI1qG;ec%}i-3s|5q!^E?aXZD!zH5*<`FrFb9
z&6wLk!E^iSpz`s+{ZaW0G#H3E{dv!uh*lzcr!j<W<I+jMq6S2kTMrsZ9oXDhpgIBA
z`+ulfCQr*z8>JFA<36hY7_tA~aT3YTu;Zjjxev&JVE@0eB;+)Hi{;wGfb;_8m<r;g
z9V#M1-yTLu((<V4ZLUV_F_C?aE<SfJT>5jcW=l*apUoI}j7jY7k0lr4KSJ7G)~T+P
z*SsGA1Bl@*r7oaP<~&{&ZgzE)%abrOT4ydqk2V3kr8-Dfzu18jrf$X15jDBx>=^)6
zZW_T`KR;}_{S{h%^-10G!~|Xq8emcEH^KoN2EIdVdqwB6WDpK_KTGSL2uneId5_fJ
zPTfbI#t)`qQj17f$D9Vn0zLur-^YV9pj!yxeAHs5OWNJ<LTGMhtW4&EUI3`o1b)~X
zK&&U)uHOevYv_sz3rm;~=3(B!3CF-0<GlpU+w6k{X+uLpi(V8Fqb=8uhK^aK|FSTx
zAXcj$bKe}W>O=rB4|7neKJW~vQND+<t1b-|<#i#I6aGQ8aA9B>i%AA@o!cNvIM*pt
z;9hC_WK(oD5XAhtuGpNT=bdbU#DI1WbJd`H-@e>2^l*zYZ>cjC3{%R#q;!q(gfqhX
z(mkgpKnf0Z(D*2?(NyF1gd#VKU#*9x4CLzLGLA2;$ul3^O#{$A2sjR?e>)8>gp+?C
zLwPn>cfO;iAXh+ywLxJIdt`9t4iy@cUuo+WclJ62RTkrzLAPK7j!<&%y4F2LBZ7BO
z!)bE)w39Fwa02G9z$Gf-K%-8Dy-xvH6ch4d^cewXuin=s5+ufi*7jevO`La@Xy<s6
zfDK-W1N9o1*{gvKo+!Qge9lYamA3ykuzPJD<2gdUBMQU+&DJ`KXlwmecoO2X(3_VD
zh2y;8`>XN;6`s#y>&hjRh+Yegz-u8`u<|vKjfG6!k)<}uB(5uB#{B;_aQ}PCnX+#H
zkSK7PP+UVq&v@>>xggU9pa}*5GM6tiKM2n`av#U#{vifPQQ!upXw#HS)L<<ik)Q9)
zp~k@z*F_F{$Yjo@)5S|e8QC>QFH1ob4)i|We}bKJjA&Sh)uCY1JI?<Vdg96Ps79?S
z+E8sRp_|ms5u#_M_%eC=k=?xHq_WO5)sQAVE*gpeI;QH$sNm>Ae^JEh^^l<VO`lb?
zIGHGfJR7Jk#A#Eo>6!?xxkiVtz!KDXxmA2Lg_Q5!usIQ}dRg%o?3Z__+mO9;sfkgZ
z{}qy&R2qdFcUp={N6}YUdD*CSR@BqGKc60@6n^uY&=T?Mg`@eOd)*tNo$N2^ho9VP
zBFz-X`2__v)ZFf)Nt-T%J@5-<#v@b}gZ6uiFC`#DEXOyyALi)SJ^T8J0N6Y~n%itc
zOt^$4F2tW2rEI$V`Yi#Bh(g1fCP6uKZ9d%|7-VZ_T3!<eqMZ<r>_J9wsr4H*;=cRd
zbbcGOG_H3qM4thdX2q3yfl4UX@_*nItv+p8K@KRup0t35PV(I?Ez_y1EDR(PxF_Kp
zkzXkMf@>cU`I|b2RE>T|YiLPUe=l6|2IWh6@WKE(ZJX2lT&kf^3FCxM+FE1*FS(rT
z)r6-s*NM-r`Aq>ak6$y7VT&bjZ!7~LcOIR9KX#~6rPv3>U;!QZvkXO@ZxaD7Lz^ny
zSc;l*dYinqA-2Q=S<XEF^P*4!{|9T*%33ROqb;t%866y4fG&_m-i(d<BJmH?Q27VW
zh%!aZI6Goq>`F8DI#6lx2ggLVO)zYD^^eFjN*n@|F0q%^(eG9p#a}dv>Xm<OYN4R`
z@NOm{p9DwJe^U+oojJ$9)3;)=!aSxO)IgBZ%uNe+kLD&WP_A2$Mp6Wgr?AC!shFCs
z(Z|!1zkpV!7~a>(kqW*OM2hgzuY-%RP1e@j(3ToSQ^H6|XhX<gY5g}@A`SBcd;NCy
z5bKmtQ%Yyy^b99))QAXUW=b*=EpO5SNVeiCt}4EFhC!Baw18AeMYw&Nfbxb>c}ON7
zswh-)B!KRR@Ut-NI3Wl@!1CtAle(ofP4F=mq_pJnTtQZEUpxGCDoKkyHwbOXrv>!E
zUf&~;wA{C%hY2!&1|0DKf+p9=wR}E$<w)YlRJoDoD~So03W-huD7-JxU2A#*rlZ<b
z^h?ymazQWDuCZ1zM9~W=l#%5|aC1esoN)BxAy=zj2AAHfqkl+JEJt}uP4?`6`J=BZ
z?e%{-J;m7m_*lkoQmk1{ll0*e>hK^YIXU^mVniEB#!)R+&XJep$p)>_iy)I<?dOm_
zU<}k01MGJ+`muDonKog9fm}W{pSdms@1Q{dsk67ZS=NFwx!r#KAkg8@F%v##DDcvR
z?2c~Smx{Onx49eRrtsuk76AYBQ7KwloV>ZDr}mMcNM5QYI-CHn5*2+fU?}&&rP4za
z6+^jC4uFmUG_6{0BzA_85FN5WZX&2;Axl_;k0S3Xq8O;i$*;66Y@9qg0(RM`FU;&w
zB==sFs@jiAIN$_*a@*DG2|vdi-vQGFER|m^eP9eQFnJl8BHd^W9UB))>`IN1_-0MS
zIv{;5NE`Kwzt0VpyvS33-me^xOzf9az<%-5Ya)JeAB1-PZ$huXWrmSzVqAFu3}SU|
z*PB*&2p8J)TuyiA{z^u49bes9VGWAy&TrE4o_Qfg!PPLw4QQ}LC4vz3UX@^lr!<FA
zeItHi9bkNJl(0#C@@=lh>PdBfistGIDn7hgT0)$p??B@Vec&&w9{?7C^C_?h{Gm3w
z-Z!<p-%)cHKuVC{8|lG{m5!k~>RQBjo?N3J-Gfvj{h-&fxRnO}<N|aH%4C3$5seK3
z8*p?2oRK>%w!qhkV-={=hU`VBicOBz*Q3UIclO)a(qOOu_1lw4?v?1n1o)rd=tJTP
zVBX3Xq*o3lt^mb`hfl!@Fe2CaDl<x%-Ep<w1grr4>h48ov7C*Ing}CU0eV8hdte2y
zut)zScl3M6poRoTLR7C11F#j3pk#<{BXjhd6joE91|KL_Ke++^g!^foNKgc4YhK-z
z0v~8vt2+s{FIR^DSOCBc5<k!EoNMaiTr8JssKWp4xa002{gg0FAwq75&K5V^eog_u
z51a|=Q-#D$*t%ge@<HqVs9*Dfd5evFQtQoO9yHhIF(KP+e2Fi8xoEprcGjCGf9=a3
z>ZxS%EaXwMo?Msc^H_ai35#lhE&aHA$c-2^mj%0811^4it=H!8oxB<8J7#*EyPuow
zfe{En0`Fl6wUOBL3)n}>e1`;1oCC-ML12~fNZfi2p|s=E0O9x|o)05L5BKItsVlvE
z%aqwq3JU2lxO6Z9`ofp{bwZwTKUs^JSlVVA0%ib=6KA#}b#4R{J3n+HfQE<qrF`86
zD+54yzwNY*IlgwQY@1n&>Y6Gb0HZdK!!wtuyGoY8LAv?mcP-_eY5cGA;HbzQ>AbJR
z8*vS^mdbBpR4k7d%W1EtKLM-_?F*LL%;2<*L0lRHUeqxvZ*&#GX?xzR`5Ex7w$#25
zOFK%b(i9h!2tGeBMCCC!s5|L0c*ww|+!md0zzr>Uaj6L`yO_q;E*HS1{P%BP12^>i
zwF`+SiJ7@A|K`t>YX`t`VwDR9t+!3{;)s*~{lz96CMV}gsyJXpb3^sbHO$CcR})Sb
z*L;AnMD;ESpw<%6v|@5f<rEGH4^2i{ks8@>T3TX7#pf@@QAF|R<-vBZjC6oF4<{ph
zSybyVy#U3}l5Wm<lR8fIIM*yI9(G-*CgVW%c=S`6uihqZSK&-P_eJJ_e7_W`a7#UN
z8U3?CX|HP!R!L7uPkwyzo%j87z(pwp3SNF-=>{YAgdp)Nm@@csA%wO+e8C`oC7IG4
zVcr)&t7gBk=H!)Omb{Kj(b5g+0)`>C4+FMmILSn6BBU~FFMUF_Z10|V$$1r!BQp~P
z;;7xKaOQhBt188E4rob&z+iaznk)?FmXxQ~1p=}o`1}XSrVT7jFxQ_Pcl4`+3jKis
z9?($M{~5u~sY48={19#-PjZiFrj>Q_pBPa&+qvs~1_+hUbZa6}O_<A#_a-5;8m;oF
z%O`)L$;m(o3N08Yw5SZsDIosPpjeSL%qNK$Q2kQ-HO{$E22g?`3t9r5-UINA66*bk
z(v3Ude#jC)mWK-AGgxfjeP55EbC5>CHg&Q#9-0_%+Gu;Wb1{-Q%}wn9e)kdyypcV5
z!b{Y*iFNN(yI|9N9Pe!fDflhn%d3n5RYpS%O(o&NzD=k0B{s<c7n_TQDl$W%Zi}vA
z9hkPjU-)ue?&6l%tgjYmyrlFECdx!f+vc!JC;*DEhdus|ylRJ_w(_nNBdP}RXiYJ-
znF7A_ZM(ZfaOZMH7qnRF_qPu*DXcyDXB=z32KdewyI7QbNrj2DM;2G2FUJ4V<nymz
z{XNp7o-vZ-+0VDa1&(8K_)#?U1CJP(q+2&eaJh{6F-C<OwAG&=pC^)|a8^3<&SlcV
z0=!mNZWwm?qJhmLMSdmTkw#gF2^iU(=VXj!tb1A6G-s<P16*2D_Bize^4x~-c-t*p
zqgih}`Z$?S%E=OM<aYOA^OoR;IdCLpqRUOqD)vNiacL+vDPwveE=DHUWdWRxF@X+F
zKL@Y#eLT_NwTbN!3`np+xf%ZQ;#{xyeH>kKaNBkFOSacphO=+l8M{%QV63&pr>T33
z<tjo6`XJ1VhILD_X|4CZ7qG-Q_nK`&e%I@BB7w}TNb#N4x@X0tqeOJ6jMCm`)5DU=
zh8>OS*Px<vpTc&)7p-AF<`F>sKeHCFdpZRAS*5GkT~ZQ%@ulJ`YZiBlKLkx!*l{^7
zfR(!2|3Su|sf8{6EBkF#z99?OAgZ#T2b4OuYwp{0;SC$f$Wy%UfV$Z{y1kI?#6NI1
zBMb)tJl+*`UUhaV&Mc$Cb4OnVF%@e-cev2^*#fU7*9yrYT?3l4`I$TAOfcaQvG0#1
zH+lJjX|SlZ+t1+1jCg=`QGM(13LuXLn%p^PALM0dL>HGYc?Ya%E*!|n+NtINCh}P7
zA&g0+#v&5C0<;e|;EpnNvhn4g!4&Gt05EDL2UXg&2BoCD=?O-9`V?v9a??qGn62*h
zL&SSe%|cZ|pi-tAxT=U#lFKm5Zz#RC@H}G$p^|Vf8sRg9=obe7UE32+#ww}%pIMUa
z+-GUC&4*GoP3)dNBA)M6IT>>#$2lhm6hN$(xYVQvW3~50_%Dfy?sz9oXiV4rUQSJ7
zAzrD+ewP>zOF&ui(4D+$j*ke8-R`^j5A0=tm$k0?+4fgXYOfh8Q9swj$TD+#X|QXw
z8cmFq29>k}zfM}S2XSIM4`YoYF=+JA;-N@^L_;oJya<6Sw`0Z9C@w&cH_bUm^)AF3
zMlHe%KvPe{_oN2m?g~y8MshHji)fpPCh9}4?Nx2aNgzPwmqV@Kr@$@n6Nmw>sD9&!
z?`Kg^@Z)x4hBtm9e+LNjX*c~t&7<ER3x}4+f*BKWlPb*Ot#Xm0Rcj@j0fie=e&o8j
zvp9ft-e04?^1*s?%e{V!@8|{Eyav8$QDUu`8hMvTjw4U0#ew))n3c|odzW0TP8ZAF
zp?-KI_@69*u`&FS=vGBS{GK5%Ld629j%2-5|A?&j-q8a;ULS1Tnjl{Ad}ZV^vx(PM
zj|+I{wE=vykR-m{c$pk9!Px3rmLkdIRxuS4z?XJRQ~5Z|%?l1hXdH^%mUV&{R@oLS
z$o4lfd54#wFMMS?7<c#a&6Bfniz{)${Bmq;mcI?UH2o`&*A)h0QjRUj-bJNEQY4*!
zM~dV8%wa={r}Kk$HYiAE$=oI<4?X`2NF=`8o=By*(0il8jE=8+5LJ;91%NU$=zMSE
ziXhFzi=ze-U46`&cDuUmLKQfzd^oycz=am@N1rvd?VPi;ByF8`lmIR$g^)4%v=AaB
z7SY2|Ge(o>B{fPJ$l><;i~lko$)JAr&n#mbq719hgIknW6GlY&!)>y$5CC!5-c4o$
zM9Kg5$6n%_KR%dK0VTJG%O~4h0Hf)B-b@3?igf8OVFSR${b1<P2`X@odkb&*02f#9
ziu4>2EwTMKv;=SagCy(Um&Ez^t%;Ids)7|fzWn*JKJ)Y-ixTEwuMBKJ86W;4d%6k^
zcSjlu8TpCWMK=XW0PJ(H$hN4*1v7z&TwsYN>&w=iSE~rVB9F%2$3E}4X+zHWItvN(
zNeD1`Y~1eqw^ub4{QS5LqtPOkpaBp6xTnb@pgV>hTG*1ahfZ>$NCwa?&x{%YjXp<O
zY|^BtNeZR6Y`nXB=f>>^3D2C52`*=*heRuoiqJ9iep0`P0F%?xFdV#f$^|r!^H5T%
zk^rj*rnOVPVACUO+fd+s`+DYwQ%O6xTmI&}x1_@a)1Q4JPH+S`XmsD-JeuB-=>045
zFslgcN!`X0ixlMAL~GMa(buv=K<RwDGG>XYSgtuu?eaO$&_oGZN`f!>+NJ1b3P-=R
zN!9*V(9ozgr(FZ#E|+$-zW^HarO2yuYT(klH8BqXJa+q`n#37!=_{f0%%F6pV~%bG
zRbJY8HI)<K(p%rth=~TJFaFKXSNr`Ekumjc(EdFUpO$<1(I78F|I^*{Y0kzeZ=EBA
z*p<<1-9mody~5C4zcZ*0Fa_#%%)pSdn$wU(zx8&VWh9_}$kM7U`$IeDxzK3bn=iF<
zoR~JjPi*}o)L^b^@L<|}ofO#C>A}=s0h_T+=R<YCD4YKT>sVFJ_f^@u(l-#Jr<@BQ
z{x@L7GVSQ5_uas8GkYqcko3#t27XHVK=XCq@8rHYDYr|&d=*hqH&IAZ*z%1yVIz|r
zhF~x^tJrlf8GMVChh7MurQz`>g9|w-)NFYQ(WfaJ@tp8-s)4A$SBV~WbM1^^m?uN!
zC*MsF1Hg=Q_irv5n`3yoquif;%_2~wkna_Ik4(8qJh)R7hlx_!|1eqqtNuFDq5M5x
zvP}LwmQpZW_W;|L6(IKLUE2c|K16P46Z>&bSUz#8A{@^e)i4qGiR)29?&oi;@CC{=
z4JatHZVDKL85#)<6Wz)7vLRO?_03_WP_|cSyu)*^4liEr%&zmkG>dR}SY{Da+D(L0
z|Dea~re{P4Y!*%*RXav6Ym=2c#~yC`D=sTPKfnms^8*K^0?2YaZp5GLtC-tafX#S1
zQo!8!ct?>Sp%19IkSaUXW}_GVSGl})_^cd+i$np-XJ@a@jsGLjlMKLMGdqzwIPY!F
z_b3tbbMRz?p*8?hzR?gutm4Zj=|Dn6qZI(4>lU^Gc0rjgzT|Ts@O|p^Fg6E&$V;|q
zFn^|3d6S+5@Bm2<8D%5!B>69l@Bfwqk8AHM;l1g22dipdaw1dnGBX<zH|Da{W6%W}
zl9rw`3rPCK$kW7j<c{(4j*IcEVD8AwH{W!(L@j+{{q{4&VLe~J6U}u*z-=QVEq{~a
zW9S#L!V`n<0fZt2yh9@<{i#a;YJ1d-^soBlsQ~QDXsXJI*;$K6;Pe<ef#G$i6Dhp0
zM`i@F%*Y~Y9|Gu<V*I0$KHNbzi)7(Yo+&)@ggg;(cl$X(=5TrV@uO%N;2DRAkW^=a
zuX?c+k%KQ2=_ur$c17;QQLo}Nv+GtFPW%s)*txJ#cNy93XqEjUR!gF+8G8$eu%pSc
zpTuAg`(No*B=Vs7&}2;UMt}q4zfj%&t=_}@o^hps;kPHuKi^#Uf3`eiWZ3{hS39bF
z$mY6rG#CW!9-v7JFPT>{06u+$6o<pEM<#VAnM=sl(yI6;535KDa$i~J5))GAYCa2j
z)ZRie5nAM><D>MbfOn%*mSk9Zva)#1<phAPb`w$x^?OinlpJnQ7xw9S&_UC$gEvrp
zL*0i*FBd>^34VU40EQ;Q0l<F2LA*>>1nKm;iF#;@qR-ob`FRF5Uh-|aN(`<zb?TG?
zJ1=iL`nA)c`5}R<_ppY07y@RSU!bJ<oR7<!r?(q7EZ?4GsGgL9y*!dEZu)rv{Rblm
z+u=-?F`rfCc^BC>!?2-d1$7>f=gb0y9724NYycgzU3K-;<3fHgf~c1N11h%Da9@@D
z11KZm)qD>QjTGmbB)ecg;>7-cx=j5o@DVui=Cr*$%}QJfn_x-ks|>wUI8{m{RY$1`
zqyqLvW*hG$;^t)<sKKgx1wOcvP3Un>l?^hCJYaOEfH;{4@HZ`@N|vHs<^v?4-{cUW
z_T!J=u!T%K2DVN|l*3yO@@c8nCpd+@&QBYTa^o)!;{5|M0%Kp7@Sn|x&K`Dk9`@>E
zcHhX-?%mY7%o||L#X-<%fqLR0p#}khmjRR>dWsT2CLd6Gh$<YX9ikhJ7q;mvK1qbf
zEVMdc<E1GnPG@MF1Sjy!y%3)7ke3C*0#;W}oF^a$lGaY*<J!!C+x6b4pq1Jp=`w6`
zNM=r!U`gs*x6=bs0Ip-s(t{r-EnvlF|A)P=j;eay+Le-0KuML7Mmm&cA>ANKcPk<w
z-HoVphlJ9hGy>A0bVy4hi|%GESa9E^?sN9tcb~KO`NsXmy?=arFvb>^!1DLLbI#{^
zW<_&0`k%jQJ5$sCc7gsr63J1ap%G^d-AO=+@+|t9s^_PsQku{D&4k7?K}0`V3C$Gq
zll&1m5dR&K<54kNW8_(%(DpzISdW8@9M@C9+&xERcNQo_WHuOR1MEE$S>U$+kljs0
zRD`>Eyoc{y*voh07bp6f)Io5`3M>p%sn`W8F@tozMOXp{^A#V$5!<vkreM4nBdqSc
zI{WIvnKVMh13}abl?sB|FJXbvm&GaY_A$#KDJiJqb(j|hs9y++c<@@yc%BOCSlwYb
zr{Zy{aCqX}RAFe4RJViw6%XeO@cUk;OJ9Ny#`>AQ0*f*oNRSs5yEs^<azUK7Qw1>`
zU>xJ`6&2%NoJf$T%nOYiDSScTOvva=$~-WR@(r`&tZBWWg5HWKPelaG2VgNo9HSgU
zJ{&ggA)MaI2J6{z3e0MndNb#U;VehI*E75&3J|_m-}utPoA&O#BhoAA7|@pW!zh;A
zn^a|bRJCwS<et~+^^yOFL5H{!@hjx~u(NCRU{yP^@EEzt3K{=bc`yVl!;qZa8<skm
zsr8lp+~=C0dhfBc;8|LQsCg7O4hEWuxeRio*7L*OFK}XJ7FvV(uk((t=a}XL!jOui
zSA--D(G{XsjfnFva#b7$hKK8ol`rwU=FNQs9upou>^sSmx{E_Z{CfSmLDG*!8@F!;
zG}!6sn6_eu;)AY$T~Q+5(u<R7(R<s3uW>F25Dyj@lt3L!ozGxEC#`#9+w-$(NQ^zA
zZ-E!Gu>3rkZwk_pgv4*%z{F)n+^$yO>rP<Kw(lZR8sC=gT-sN#UmE*Se(JaqLI|pF
zj{5gKk%g!G#NcXu!4z1KU?R%0`Jj-mzmDA6^X9I@xs$-xpP4g#aw(nPa>S}{{gK{K
z{J+;5{v#DbTq@+eAq%FQ(1X$mrMfHipgM9lBK`iZLiekCGgV*`?kW#~fMo@;O?dx9
z4RjYC%6b2+IC%YAP5=pWCYWBpu8FtX<zG4$w%fQV`j`ld=ye=Ly(r|MN*k$LR$}dX
zl?<)Yq*EcQ*E4itU%x)*eD`xkb9SC|P*4!mj=$4T)z@22t+DMvcTkXr(zxu$F$L{q
ze5#FlQ6(r(qeI(mC`Q<=OvC75j#7xv*|mV}m(&(cYr(0<56a+~CkuO^rQ<pb_Y4ZX
zWN>SnR-GT&W2o9Bok5d0wMutFolm*vm69U`Rxw3&uLj}|BK2qKD-WD%kh*9ts^8nh
zs$+Mr*cj08I26n?c_!D6R;0SX6Z-RXq#^#|^S_BM9mu6>HSmQMRbN0!?}xb~Wz7HE
zdySaJJ~AM)`o%xzE5#|2j2~ap0Gny%_F)BvZlhZBS1)pvs0=#8)87fCD({^lo(L&d
zvh=rVKHM(j4)ec{w-$`Au0d8=nr63y(kfjIGKfIF8u{?@Spb!=CL1*=po*q|D_j6_
zq7VhT$$&6sg}>40t0(yiCmGDw-t<F1z}UR4v;TVIUMRk_$K1sm-Y5Rva`ugFqR1R_
z&pMwr!XKv{^l;uiF?x8hfALL-(Dg>)MTF0GJ)M*by$`ebs|=|wgKIe1YFVGvo;=i+
zpixu1BhJE1pDp$A_4Nlj1h8zi(TXl-zPJwk^Wy#+{jOV6NkaWSsY%P^`vS!Y2|_&m
z_G!n<to`3a8C3<V9K}vi+BqR~)oP-d6v0R2PIkeKaa(K@1C4>_SC=qd4#Xf-@Kd#z
zhxE5!Ek^6E+HKD?W_`{-eNv>_a`FOuA(2;;-ybvY<T0HXD)NKi87i;l%X`KK>FEB1
zZ)?Quq)YkzmvBnolAlrXYGU;<k;n|_-6n|*m<?FMX}<CKJ61AFo4@^z2ly&~rWW~q
zhafFgb{P1(c7|wezDqdnD`E~{`R3aie@ejtz5DnSkBi<0<MC<^NMI(j@Q*bI%E|Sm
zGq}qP>dkZNCbLL#r0#Z|V{0wp7}~HiB1hCr_#N3XL6^yP!I;5^A)PVNU090j!hUC_
zsgxh2dgSEff*p;#?J|XTRwCJ6y^`w!weroWdrjr8_hh24U#Alw7UYCfM^On2n#qZa
zXXs>oIh#}VZqny!Z{faW>}{7TEX%|is~AUR)Ucqf*mq3tGD8|gMKCz1%3c#gnb(-B
zCoUU&Lmk!8j!~rg0c0%;(&M6Pn46Q62N#@it3Eu7$9wV^LMM*7gvr-s*$t(kr`N7r
zo|4DkEo#h0gC`6$UfUL)a`y(W2*CJ9X4}t<uDyH)JJYl&;w^L#Q!dt52YV4Mhx~kW
z&=twrvuaR>Sg<26{rC_YM}J&Ia8EEz7WEpfm_yLZcdR2pkBe0AcwQ4qTEe*|p<RIc
zRqx%S6B=jkUSgUTWsgWRYQ*z*q&CdJle}V{&o1c@q&6SY(Fx8J>x-IU;1W)@G+7ib
zI4l}61+Qz#EU`C@CE1Zb+KBZ~3jAoRz-u*^z|Zn89VUHO<L?m2peS#D&ihp;dI=}^
zn~5SaUtl%XDjW15Q#zkQ>V|9+6-rhOm~NiHaW4)W&xce<sq0l-N6(Ap?X*;X+Fned
zZ^l=y3gMV=xn&jG>PNui-W%RGXn=0?Ud=;;NiiZ$b5u4QUrS-7eJ;<RITJfCowr>z
zP72c!jP$XFov!%`k_*L@d)sXz&_nK_tu~!qdvi9=b*nQzP&{h*pcMu#LhG!-xf!L7
zVz@H{tUax9L|MYSgM&3Tl(zy*@Sw{4D$1RYFkv&17Woi=FgX#@Lsi;MB_L1}tr^L&
zn*Ri~_}U8itqa?13HA;cn*t-@5(Y2DFJ8$l2I%&uzp2&4TUy5Mksj!8I~Q?*^L_0P
zJ{LXMkK6s~xA<_QE4SX`B048`E4M}*TY{D$)O1kK&s6u9F^QoXBW-AW#gztIG8Fk(
z|K$;lBaeuzOHKbJIHDHP(wHYj1YEJ%p9p%1<%2kA7>EAmiHYZ5lZGNq_}6jwT}$R<
z?t~3VZp(rz5y4ihh}w+x%et7`=?hzpH;rd)hmLQaiR^inoKOq#$#gNqMZNCqgc^#s
zgjv8_O~@-6OUg|n6fD$!s|B#Ke?6-uxqsf{leQ;=gG0x{sM|%ykS~RGBz7Lf;e)!{
z%fYG|l2}T{$cFLb@Msb9A_6=@3Y&ppQdaNN(KHFZ4(E#DjNt8RQ3p%CITz>M?mu(M
z^CpOT|6Wlp7Tx?_3w)l_Pb;@kL_5i!;wul{D#7|`x!3pGzV_G~L-=eac#p)@(pMTF
z`R+G!I8Yp^FIM)dPIN42M@{TmAmHYl=+>3n+s7KeuS`riGwq%oL_yqi!@!76PI(XK
z(}J8Z5^NqMrM_Vag24*Xi{DdGWO(@)%*I?8WlX$3LIHL$FlN=l&(KTkAGWvSa-ACG
z$A_OUFvzC1`>0#sT>VdPQeXb%$X4E=^%5Tp`2Eq}HG2VnH`j3aCCZ<^{7-jiR}_F9
z6P*H4Itb6I5kDB;>!KqF^_|v3i7CRx{aoHndlA8mxnY)2?y~*vGjzE5!+{GY#L(Ws
z0iTUQ#aPrXpL{1V3@WcC?yr-zq~Q)qJu-@KhGYtdB<2U`uFjX>Wst<w664R1GLU|=
z+O>8Ubh2X+fs&Hk86rhzU2|cftSfd^G{nKB7ZFJntUhQ6bWBW5rC(8zQ&Q1fB%FM{
zRblF2Up8W5AF--{>SUJ>X&$^y&!$x0$PKBEp#tv%eN!Ofn=Fl!9W&&uAuR-=68-QY
zJs4~ok9WKU{_V#U3DFtwQ!VzIhwR3^;xQ9HA`rFTj|hZyud8)d&KF(w#|P^5w>7AQ
znAp`SAbe~+^(Fg1!p0w-_Oa97Jd7H=-+8mIrrj(tVw|Y)H7&2%7U>qN&6pJlDmmK$
zeYr)c<>`BT&TZZ$Yj4jDqoN^LKL~CRScyzb%yXUyJw&)cRJ;T5w1h(_?!80nrp5P5
z%#Dx;NhD;A!5zgf8jf&P`7$orMbD~c>TSmenJXGVxu2v5!ca6-6NHE7p(?u@30EyL
zy2v^+><8ej_8YLT5>RQ*X!0^eIFyx%Fp%cu5)$gMP%XqYj`;W;1;_*wRpvo{#G9IL
z0tF($&U)f%H2VPxh^H%KzIg4~bcIp~o9tlMZNsTIXfYw4BmD_l46k6#*=Lu^qZlgj
z2lU<r-bW?;!Ug<_b!>2B%+CmO2^*ab#AgP)>vrkDKTVBY;`;MQ{m)0fwGO`F_^#NM
z-v{!4zWmR4??9oL7z;gnlHo$vOPtXjugTzNgwE;^q^{c~XU|Q-Wt#I8^&)}`-0EP8
zP2muDscXDobrfD{IW2?!Lrj+;DiSKA_J{o$-mGa(e4@MV7yhW=^7+%r7U;AoQcN)=
z;NXf_&|*D#vO3(H?f7`rH}(6_5V-A&C{6>p<X=)~D;9=^c)*Q&#D1HKauj9pI_l(e
zn^={+T&^z>?l)_r!7mv!{-`sYUfkm{5dIc#YsL2nZNh=`*8SRK!Rl-@lEdW(m<j7r
z2ORGj@hxaMBg~Me30>NX`%-x{^#9KTE&fQ!*4a+MXmuA$18?sl(Z1<>K*|)koctYH
zX5h!S)!^M6Opz%m)^}G$Ff3@<Khw@^>)Ji$ax*cB&dO26tQwTKZ~V^8(o)VuJj0UF
zVktOr6qm%7HM_5?>yZ#=?gPxR!FQUNa;hQslBlNK472dI?2Z#=czBNUF#K10@QdOx
zlai7OYL@jC`<zo)+_ipO-;%@>!Rmqlmj@6hJ1NX=>$Y0t7cwN2oj<<y2@tHFY<!Xw
zM#spgki>1S1*v{S30;E9F6dxFD<;&l^=j;!KXonax%|Ab334&`N<Z+a7;4mQ09QKf
zpy~(ICAPDou&vr{Gthn5l~fPftnJ~ex!s+N>F;IG(b@oRb?=b)*XZ-drJWiBPW$h8
znPtJm-$&ACb$T~&hkQ=vG4H-O0RzXn<QP-woYsaPEWAuhZB7XS&4}Whl&|cTk}SJ+
z+o`r!+EgHjN9U*85T^}o%T)R}7R{ry<7P}Mtgc>=Co7ce{S?%?gtItovM0{`s8*Q9
z(4@-VJN#-yU4WZE#pZCv`7qI*3o~MI(ZjKXB!&mk&VV?L=L0L+{GB;TazQ;g@WioH
z1DdI+F(1}YStov6RwjzFvJr;d)m3mz?2DMO54FE(TS+)(qs=COgJfkQ>T$X++Yj*b
zzSp#lVp>#M^Vyt<o6#x=vwoX=E)&J0CVK}Jj_QWxBAd!S;?B<DL_|=JUg<=tsZM<G
zTE#H0oU9`F{(K)cK1R)fMu6OapNpXyXas#pjLgjW(Xp`|XLD-a;{ZwB9GOya2)cfm
z{s++Yx5<<b#s7tM$s~cZzx?WRUc9UkSS)2f`K&4*`$5Ay(84(gCbUK}$b7!e*Gp_7
zC$v-lSB~ct5RGQ9s|0AtEPv*g{=q}$^e_n-=mmU|S19Bhf>uhyf>}&6tU%wj8EkLy
zGi4Rv{@gZG{LOgA$}Miosf?pr>0tR#BtX6xBF{h*qJ1ZQf@{PZVYf0pFo$go3<{Xc
z2F;Ue+kR-6U0~@0#esXNXcM=l7UE%zM9OvR2PIcX-WQh`a{557Fxh*8k)y*V_8_Kj
z+?{_pbtv*Y$GdsZ_I`sUmz!EfJG7<zlHV$1bQLosqa<<4^j<U=VUsg!w8}TwNNRG;
z!TBQ{1D&kZO-CabRoEUx>s&1a&clPB6qe<-kJg<_me3zWlcb$QSsr!3JBn{J5)l-%
zrcZ&JFoeejDrLij4j0mT6xAuSb2If!5OdN9Uk{yUV+R$y{e3H(?shCblvcKF3kbHD
zkc#0)a*B#(r_I?%51lpQiHJyW9DU_(tz){ZVOCIaF4Nzom%1L3m|Euf+8mY`lgb9e
z!03XGm<lSKmqKmhAo1U1<?YMXwoNahg%D3`1Ox{2mXH98bH(Tfz%miBYCDbk8IGE+
zA+Lc<Wa9HPCNPmdnn5Yq6<g13F|Nz_0Ia}>y?X0j-Zs}0oD0V*NZ>{MR|nhxh~|IH
zLvOoVM;x%wZaS_F%Qb)otiwDu-H)-L1F8!jayEBY_wjhiyPo8`-PdqxYfzO>fJrYV
znuas)PRUTZNg8<WN^NsFJ7CnQAm^KMO5X)DAXmprGc#S=_NYTm&#T>PJr5rW++EcH
z;S1NHgy-NL#pn0^4Hx?^{oyH5a{;LvCFO4|xoTuE_rk~xJwCBBdo3?7vc!b6Wl2^t
zF{;4@>mmE;j1XezGOlx)l44uNc?Hel_3qs9xPBPtt<FBtikCHcc&zCrnxe!cM6wzh
zA9ZTqJ2O}!=HwB1J<?@m!z?<|(t_*3SoIfyI*<t`+5R0UW<$FBT9DRQL{gHr8dFeo
zRMdPIf_C@Zi!O^QRzVBt8s@e6yN}+mES6U$k{?!--4qy3vw#sz?qP2RpZR;rsVE$~
zhMlY+3EJ`4Mhbane}4jS4<l(IPKdU%<xUqQ<w{7;h2J%Tw;WKtIoN)4ZVwn2!Ylu$
zmw-2C!@2leic>UAA%OLe*>M_^#{lVpoa=l2Ph==NhlQlUw2A}#UMZI8UK(E_sEX6P
z!2p&)uyNv$kEG5hI01}I=q_!iWC7zgaRi$?uLgoE5a7P+G5AOE;Savy7mCz+rWC6H
z^w>B;72yXFvY(Avk?v;Y&vE`AV!~#W_afLLq5yX8jhKetyesd1urlujMRw(a4lrG7
z&r&*uh9#T`$a%Hn)|9{;GnmXuni9ap#4_GXyh9P*?BSFxA6F6E3VcTS=3_Z!<x%eN
zT>@rS(Iy&;4YOQDb~3%&MyrvrkEGR%?VIOtP!6I@SP3m?^YinI+Wh#4D;HQDn@q^9
zy<6t+Q0f>>E$!Fl@O;*b;_<W+bAEic@3c41@x}vO^!xyp>#nx1z17y{iY`|Rtzkk#
zfc0l%1_+_QMMIrQ$O{m<Iad__?PX=+RDELGaq8D%KW9mKs{%TDhA(_qNYg0=p`=8z
zR`Rc{G<m8eE-jp{Sc?0wz)#7hZeOD4D|8c6E>uTK8_UXcyp4rFaQ=Yswbh&Tpb@T{
zG~I{c4WDh)SzUly;ZeT*^x;^7;HRf!@1sPt)1<}LN1thZi%(|a_#sMtr3Z(;vbQ*5
zD$$hOfy~o(BM%3f17^EMgP@<k?KrcG5u@~#NoYQh&;%{ag;^S@JkjC&Yya?1VitOa
zWN0M+&Qbg^P>2i`3j^sM!~~b&?*$-|lO(kUb{2vg`H@?+dj7>NvxAkd_n)66v!u8!
zC2@nUF5l();~9^^V#7w7#?xdL^!og6OeTjQwn_6|mBrx<@BS}UX%y3VwoG68zb-{3
zxTtQjK4xQxI6}C3U91XmZ~&%fPj??sJ#!Fhg^>$4HiVzDF<81g<q97qvY1in2)_Zs
zmYO#cQwJm~K-S&;^19{Nj0z4t3y%VuNneMor8i(^M8F?dXvDjF^mTxkUG9Cr%D^F<
zg*J(AQ<)B?;HuY0`oZsS+%hRgkaV9#0Ro5t!-!5p*-u6Pn5)00vctLtY`VfR8|9Rz
zE$%oDKuT~sKxq0A;gPS#3<HZVviOOUmt<#}g#js4yAFs7>^2{tX5WX>^d%hn(EEv;
z;UMI4UXF@9;j^8g0|i_$)3weDA0{fHDdo3hr5C%5^?K_b8l;NqUq0dxbkzj&^kL2j
z{A};UaEgiU*TgKtP9LpL1z4-BS@p(0nTHs)95r5S#lS67n8_mB!iTQ>lwhKeSEpkS
zI%1-7i7*Yh5zc7=={P39@?h5Mpc*y?%>U{DiReWDBg4Ju0;aCTL?iD5>%Y4XKLkuW
zLm*&Q7o(W`8-4SKi%D5GYRRHoRw1mX1>{TQqYON*xNc7#b~I_54aQ?|TMg%#L<oTe
z+is_uRoNgd#O<)u^Om300i(yb#p#;STh(F%k;Y}`)j_F-bNJIIApF3onr(`Z=oeHQ
zHo!#(_$>!yrC^u3_2$=~$rPpzm&`JgENS_ro3^5b;Fpl03w>*b`k#rQo1~r(@Fk?i
zvB}B3vfA@_zukZ8w)e*JflvI{583q0_qhChPmhEJ?Gu0(M<NDLLK4}^uK^u-4{a;C
zhVh}gBIlur8^xPrTAx)4go73@F2xThD0?x0asxG_6Yzs>e99PHm72D*IRkIsRR!bw
z@3OLU<!DI4%S1Ni-6c;^ww0bdZl`DXG?-@Q#uSYa6LN+sr=$><)h4-wnb3s>E{tDR
zPL`|*^4j1c6qxYKjKN}#VmPcTR?Y-@i<=}Xjl<A*HJOY<n**OKCbI-`$_C0A#H9Nu
zQ+gacXtZoLnp-lc&zkl1D|qfj_ri9xDDK_|jyrpgiSIm$oXAbP69O^NS(9N8t3hRW
z47un0zQ=uCsd2Z-2wHNDb`d1LnVp2)ekwjF_yDVL(kCj<fz|6#piU~ky{V4}j66{;
zl__Ij7npWp7*zx!?bGk)+cN)6R0D(+^X@CgKzX$Xf;f@K6u2YU=c$f^a(jU4pno>j
zx80d*-kWmh$NmzJdV|k;rtX_i<0@bsq-`kRq8RZ-$p{NNZ;<igm5R=l)QAhnDaont
z<GyFxd{3bT6S)8EIjIt*o12?|XG7vaT5|Hu!&9kKH^q8UkX`83Y3l)sxf_rXQZ}ps
z*jE+mPfku#1dC%aU|rU2I&IeQ{luFWE#T6mNg;0Z;6EseK#SwU2*QYtOUgDF;^yW)
zX@Cx%n#|v(D6zXCSmOP1>-347XK7xeDoBG!(}PprLp$i~>3ReZ?48??w>J{RMDzwg
zfuO3&+cb^BA-reTR76bPP>O`W_eB_Fv9ZD3jKlmU@Xh~7Pv>Tj^z|evy*u~=#eU~k
zvn5QBstD{h<5(sd92R{&CXq_73m^1&+4nL3keuEI{0K#M{8oY3Y?~7wuPLJ9krdUR
zySv%9ND6>;=C8@&b7-`Sps-gxu6;NmM{3H~c>3a;QAOmg+;q7^!qY6TV7%sxn|s?L
zwJtFj+l|G2wI|;dpbf^Y(9rTe9GIY=GS--$ac}a-V9_&OnO#@UGuIl}l0kU5lRd#@
zmeU!p1VN(k9ki_*P$(~@1d`Uupo3dRevSLfp~QRrS`9&$t@mWC+GUc!H9QEF0Rw2w
zzk;+;;5=w^84M={a#|!%^8cx{{DaZ_GqX}%3<Sx)Bj@xvaT=>d@8`ani2|xI<s>bv
zD-pa0=Vym6!93N(rqF4=I#3P*ycE;nA)v5CM8VT~#$fiu9+;6;=+JO+?jf+0X!<$@
z0=AmnWp~>sZSMl3w6dQsd|7jO*h@Tm?pcvV$2fUpUw)(~d~op&yTq#7qH^q}4@b+p
zSkK6`(sCo901SsaL)VqzT|lVVc+ZNIF7os5fkv|8%BI(_c5RrSs9LCbi#57Xe{_2L
z9R28O?%NX8GH#xF3)<3##$)g2X&2O97E6?sXb$c=H`g%}W+0Jh0O{-|hjDs+I`n4p
zKNsje2s#W9Iz$`1NE4}5N2ElhQSQTE!M5$rCA`IkSVd^{uj}2Rf_X<$cUfnZs16Pd
z(V>KNiYSv7)ir*0IPd7{iuLyw?>E`YlH7B7hwwc}h)bn^-2aXu;pJ!O2E=|5L4mjl
zgJBdHq9JZYZ8Vy|mg+n;Eoj|f(b35?=ByN2khVI{zRu407rEq-pDGLFYwQ>O!|~e|
zP<|v1nvJ_QJk=RtX5YA-9KobI^OKiR_Fx%b0bVwRkW1H|3M4LA214iIysgm=mNFO^
zcr1j`Xxh$Xy|SLFzVB59LcP-!X>L}%5;1qj+WY$UU`X(wZBvu1fr0+|)MZPLs|@k%
zr;>fbryDP4XvrNg6ybuWq3}I0JGZc!*Jeuc#TAM>hyDB#S4GdyPi^-`-`IAxF}8aw
zzz14Qp?$T&FR-$&J{Cr<Bhk+>FVxuUOR34Or|V}#x=K?lK)T8D$-Z7fZ#dgiSRMWF
z22L#0Wn_6{b|6=UO1s3!uj27naZWk;DrCSU0?DO6xwikr<o{Kf@kq9Ty9Zwxf^a;1
z31p#|!lF+F;|ri>{NYyPh4&!>j1~&8DKkxCIanW45p-Ik1LW?}vgrBAf&q`Kr?f{l
zp!fczjEPONjzdaoJpQFiIFnuZAf%$Pkt`9N&Q35VH_8OzJD0V3_^7Ex`%rYumJgZ4
z4jCGFr$Nn@T}fj+wq?$_=52RB_DFNOkcMRLq!HjEGE*BAYa7h%joD1@v7O7vpI16I
zC4UP&xH8(`a47b^3v+`YJt=?Ykel0Dux;)9LD5BM=WK&uWaHCA(<Mr9=j7w=NFfkC
zi3h9Vu-GIg+2AV>K~A4GRv$BScaoS)Z!xbA6GKoco^y>0DQAt3P*SLZ`=@s6z|G*5
zs&qtLKWA8*iG8+2hMNC&G5aw7ilO+0v`#_0b=FHHRn!m#>RUmLO#YMng2o7>mC!o!
zFGCT?Ap5rCN08+wTRnZUuJOdtM#9M~2!|LN(=VD3qas=}o|Ks9<z1dLBXz#*v-1ut
zJ!tcoiZUvSe5V&9#eGLTnu^Z`N04*nl5Lbk3zudh48A^iY!mT7JiwtZ>X?*0)_yUZ
z-FY3KggthPPj7o<_mql{Nkrim$VTe;3#X&YHkpBh7N@qz7YcMmPEEVAp{pZwzoPSR
ziJ3oq>gP(UnkgOT>H($ce+s}C1$st}Ki-{0(%{F*EK|?hDYyZA2R`{t9Lxg&KU@T2
z&7pWQ#HZm38K;<+0hm@p?lk;hu+GilP@B&IgK;6z<3cHNM7Jc9THH5vv0kNr7O_<)
zE2;?Tfv`ffyy3G+@r$(GGVu|tRNA6to(EM90_&Kg`0uH-ASK>Lh$eWmihz-N<c5#w
zh3@SknNoL}y0fo&8V!$F@zdyoT`Br`e{kJqwc?j`Tn;%0HS5YwX3Ks0W_!c=DE;nd
zrR~t&(ujiD;4AeiTU$diB_4NL%r_^oogYh_09f1=bOMHH#>Wyx82j1!62e|kc}Id}
z6;cI{J``M`D0q~wwowh{@yHs#>&U=|#Clvl&}=+joz%41-h9QA0{j~D!wuo;#Ao9r
z_q|~-OSwBSbWZDO42)^6CS0w7V4#~y$v)HNlzx5$uM<TZ#?m#cSFf<uYW8;5w!Kb|
z+|o(IRRLvYb2hvp*75=C_T9VLFRzL7FX6b%I_1_0IOKeqi6LZ^1M36O)*PPHI+t0E
z$RD0g!M3|#q<VA5<Ay#6^^Z2+GD5kn(%lP&!Q8m<^0^y3tVjtcg#AEod1}8eM$;hm
z-MO-|ay%IPN?Pk}V^d^3`AOX_!jwfLa*a_PTt$J;#nLELfe>W&+?N4l>fXL02$dd3
z-&n#)OnFrAerPhbHk2E|s#PM!UOk5jWF^g(2F+?l!K7HCtx7k_-_q{CrAB^b;eY!y
zQJ&g>kyhJ1iIZ6_xI)SSgW?e<2cEM-5ZE!N2ST>q#%(aDnHhM~M!5I-=!g4!c>>#Y
z`@=<Toa#+(VDe_^l>7RJwKG5jRn|rdbI-THyfsh6;n+;6T+gkiBL#8rUP%Xx{b9?{
zf8@e`=^nqO#(sTD&5i!uNqFd|S;{VyTQ<^G&Dw_uawpcblw~U{o*TCgmueb}$R$x~
zS>T@A1bs$mL2dED=#zwVuhWi;(IPfy`BOX!XmhZ%LRj+M5nD{WjRe9oGWKy5PuqFS
zL9pYIW~}Uc&GUs9G_#s{s`nXGydHp|_{)g%fFRuL)2m|%vR0ZF@!TP<W<6wX_EUsw
z<KG;XJA>GCNrbjXR)@@uz&N>6ITZ*kpX2(H2m=T<Wb%rTiUBV076W$|psCv1d8Z;L
zJCDK2g=bMGhzh5|DVJGQ7%0a!*`@TpKnzx0T#}RDtInScyLr~!yo-cO2yBZhDoQET
zDoV+ZHtZ7BrywR-dSCM&4m4|E%EbpG&r7Ta#G%_3d2X3Z*R-l^QjsE_{<P?mPVZXK
zU7xRS%-(orpTz&%B-W&*JNmby{liKB^HX03)c-AI=s{<A<JRbKfx3do_q+$0S%ANN
zrab;kY6u3{x=DtM9BCo*5&qvxdWeBw$bc_$5D8sgR)}Fxik<gAoCfu@NP6*LtSpqs
zXlmf&2TSi5n<bq4RLPkC{GI>eO|?;={78n(QES@(JJsQR_Fcrjvt40v!=dlFT~3Fo
zX?qu8MA%hV>ktw)vl)+V4<Db?4^_}UAsdd}2~M$-we{j``^5ze<<*h%V)<9?jkQMa
zc%P2;c=Q03X0hxjxR>xORoHQy^9HZ$OE|NhLy&g)vTR`p`yFRDvfE7rD7UXK;S|@M
zm0i)x?rr$37T_kom_9xOMo0oX;Qo(f;N$oc<xdmzh6}Q-XB$N3YS?ruqxojj=*_!g
zv8{^iW_RZ8``<RN>G)hAs`S8iDSwO<`XEdh2&>DqmrKX<Wo#sIpCbWyxLPXhIE=^-
z_$_y(Jd2*h+h8gxhw~~Pg&@`prftn4$qnZYNfx!^Wv4&4lHVH*H97Jeah7XnyzoF7
zh7zxL(O8+e0u1cU&Q?hm<u>xQG>8@nr4Z6EaGl4<*R3jI)vM-YA~STrNZA4F?mIxB
z%kK-i-x`QbXa=TQN2jH+vuM0m-H!p>kBANbSAD=A!qD$N9eC;clXpZK%@KLSvJ<)r
z)LH6fT0P&6u~l8xZ%dDfq5Y<<y;jE}Xt1PT-MCjc0x~Cb?c^Sz<UV!n<S5EeC##Wz
znM|Jx6#M6=&T1bfUhM%=!0psU^sV}N0K8sd?CBz`GiGEKh$)23tg-Y8B;8)eGldPc
z^)BFP#p{mDGCnF~kfCsjg?n@_^$sp&Xjqj(S|sozq7*o46|WN#E+UR+Vy?9YyKOhZ
z*DLMi!)|sp&G&CkVxaYf^*zh;F4n0m=z*BwL`5d%DPAR@yul-#Mt&R!7t&b50R@wh
z49ltOUOA!iab^dJTvjftAh0{XE$ILgL0J+Eo%7FZH+7smtG1>W!-ck^hlhz^?!9B&
zc49u?$~~&!n>C#ep~*%17{>^gS<!FxmQ{}Y(3`V!DGtz}e2#*J!NDPV0Re4<$di^B
zZuq<4;aMZ6{<+&-Uf$~}y5?Ic0(+ykY+V;%iv{ZTYxz#(pWk32vkJbGAP~%bM6L6A
zf;}fv4CKN!Zd&Qk$Tv2h@;m4+KtAs7Z5-p1o%un~2sJnpz5I{N_`kGBv3zWh3d|qI
zzu||hq(UWFIJk~X4D~}U^d>$&V|kdP$SjSr@B&1{7@!z*f)+TU*k}mQb41GS^|;OX
zVVX@<Ki>m?T^8`DY>?twO9r)dujBvP2|Si;`swu*Il)t{<)$wo8Q0CN1Z1FS#WB00
z{^U9+h-2Qh>V3nzn@qdW)uZ;}^3l#-_mJ66liyll6uvOE*D0x!$i?>%4(RJ{cJ;<q
zF{9R;Ua3CAY9qgc73ToB%@5Y#yR36$6w%63+!xs`=*+rz+B0UD(BLwg-LURH?X<Vy
z(C^{X?(2|U@#wHdIrY=t=dM-@!qNLSi7az7R9+RbMPMyrNBJWVI*LBQtyaNaEc<2*
zQunJ2XRmlY$Gx~0-TKRC+)pX?R>n)E@FpvsWb!_p((=MIeO273%?QARdiwFkH(IBs
zV`@HC)+6#WNjz2KY!e?FI-X8(E*vHeHb?~1v|ssT`L>SxSu)(FB`Y_}BZBfgqjMYS
z4a9^1WE@bwF3ofW6)^ew_j)yIYh%S6`^)_afr04T>LeTntjKZ8aAC_naskkU)mn|F
za{G4%`{x$z*Kr-tWi_*O{<^}idbfpbgcYExx#{uPgbYkXp!qSXqJo!$q=y&~_b9mM
ztk-ephbs4bP0Y+EJep0rpiMg-BnXKGh;#4~(*uDtX=DZy`U}_*>8t#+Fi;$enZe=M
z<_5P}Nl!Xo|F(9$O}&!MmQy)5<qoNT63ZEgq1LBvZv-pv2ROXG(luY}?~f_~2ws`j
zsk2j0{4)qCmm`)%(avVoY?l<N!P~xPUo(PwJhl-gU)#2N50wiG73n;$k~`khYzmlz
z!Kc3IjusmlZq)3sl7()JeyGjTEO-Px4#32h-@KXI0j9xzXqY`(w^b`O`D`*)y)de~
znCfDYzpd$AsbfVku{iOnM!X$w)BN*m;<c$Ui-y~q6IC4c2mpj0EcGQVj4b)%a$LD>
zzNd-=@pci&@)Og3A(?RBX|Z`wDjyH3tUJHTP_gBum(nU(SmbaUxE@ct(7HS{c=fAN
z=->E#`TI?vvNYSZ?q#YxvT!oA7I$-^QX!f5Nk&>Nm}toDwr3`%qLQ$&VO_IcR2%Ci
z<X^liPOa+KLo9l_!L$0UJomT)aK&ygn5RA+=(a9$5%`L~N)V7C>d!u;34f-njOj{2
zrm~}(qk+k`{xHYoeglF#vt5{`e!H%GJT4%K<s{8+uE`s=-%nBIu#ETZV%z(0zvP{S
z`NEg0YujPE9}Dgav7qy4Cc;~YYPM%QM&<)vOtH8eY;7K|+Sb4rkP5-!r0wKIEWpBr
zjZS=;CEu&hhE&Wa6gay4k3-(b%q6;zvc_8UCcC9ik2!viyHN~VMD>mkf#<=W9Zk8}
zgLRf`wv0<SNHm2na`IM?QW~F@ii|!%&+|D~W-w<o?N4LS#0IQh{jAO{5UWYAK(pAO
z%oAq6O}rb9@eqTh?r7qv)C?7k<5Pnde|;h?G(ZN=DxqX;VFZ@bBDSz$-!FRlK9mYF
zb2{8$`V!nLjW_lD*x&>>HQc~h_U>>Bp<(kJr8f+0_`Py1mY`htUAO7KIrE<{Io|%6
zSC)^`!J`yrGW6aJ0_LK*)RU&)_Sm>%;MA<+HZ9sZiE<Ay4i1jl>R`lTl3WaQzaPTE
z<@_$0CDhw4Rxz2MD~r)!cSKXI_9%aioUn&@1OFH}lFsj+sX9}%w>!X2X;o;=Y|32)
zfCdU1bj!?2^(M0wWc3&n-Q_<Wue|GfZc^lH>h8SGP^jUixBdYs;@52KbuYeVDUN-p
z@_|r|+?5k)`YU1}S0$L&#4qW8iGj`7WH|H&4>aB9eAi$P0FPKM(=S+S)|dYU(fysn
z8VK?Q6@-pPKZ%JD9@5nTx6}c;eAm1pW0VEuE?*&|*3^3*v=Ch0Lkv=rw*f`IV?Tq-
zQAcgs9v*i`y`Tf+Mi@W@nVI#0uQCE?9tIZ%)776$j`GYtnQib=YxMRyJO-NtvcNZl
zFSMZj1yKQ>nEF>)vv}Zee_vmGJC%oGj&jmQea3X+CBw_WD`qr!15WaW$C3mrM9h}A
z_gw5!%Tc_c4Z!<xm1-~X<)dxJV&!zoK|&6Ly;9!C<Ep8q$u<6n`^d!6@w7*=XPI>p
z{F8VPPTA(zEZyzf_bqzeb=_y3b!GJ^$q^+}PRG-0<lwIJZ#AM}4rlbP7T2)?4UOHo
zarD__*M3Z{td5S3?DP5NAIOsdi9F@fkHblj$WvZfIUKo0L9Ixy=JE84G5X&<@P82@
zN|4}yc_TPv?iCPJseAYvhiB?N7D3WC(rTnY4tT?bl*?2=*7!X>{j)!x{qiPwYPK54
zx(gyE&7I-l;p_b?UO>QD|G+oGwZNzto5nY@A|eWCm9A|Av&&(F1O>iC5Mvq{<1_XK
zt*!))?Rx247WRbxcn-~UiMyJvC(W4V-`lX)^vKY7As1(FRc0%m@NE0O4PU|mDFCZo
z+7{q+KPVESV(@=79H>h|Zf{?U<j^RJ1!`FrSP`>0!LC2-@<FF6UYCN5ZLSV**+Peu
zWEQPm@f6J>t=m9&$Ywo%9EF5?wy_`$e@7v~i{?fg3+Bj+9|*@656R5~a6-}kD)b=<
zUEMXLK#i9Ssz5P`$uR%g5UBlJf4KnvENRxjVm0PgkKrQ<p~bxG&YT82=cj|^9(+z`
zcgGy#mU9$$({A<Xy)z9yDl_?v<8=0&o=PF$#nq6{MZ8Nm&igNdsoWlItxOAL)sYp{
zw7e;|kON8QkZDsmOL2z?8oY3uQ3Me>HPG9N+uUc={V|=Mo<6&cAKVr-_NTMT6b|PY
zq#Z!$h<82PF+T2$T~60*SM*$avN~E{Yd!f<sZS`^4-WeAkM<^R*#@@JKXSmB4Y@d3
zh#0KgA3?_L!=Z=$!YpI6b`rAB=YHPM-?-6V-$j(`FD;S0XAlrfmX)`t3x5{0{us#!
zIDWzn|A1jvn}G5~u!v7XrY}uMg&p**&uJI;Cf-Jz9zAGuS#|#)3~?(v9yeOTaZ>rf
z_CuGpohnlY!g<KlGMI%jxOcXXjA`Bx+CR|cl6EY_1S-4AXJiz$KlWZ5<X_x-@WAXl
z7O+1%DV9xlbh~_GvPvZ!WE5x`1-LX_pReI^J9ZE_%>>G+$blWRuk|mI0Ni>&E0eda
z@U&<LNG~1QhwE<JrLf#*(I9iBnl5D9s6XR<`hn*7=<dJ?{Ed@Zy}MJp9so$brxaB)
z1w~_rpVrNGB0WO%Jtis=%sNDl^R~T|1jy+gP>LhtdeJpd0{e8u&GheFHGT$Ua+d-M
z<ZQe<oOpkHn1A-bcg25Uc-b(*FA*_Z_>lMEJ$aAhNZ1U%yX<-aq@y>OQ#tn1`1?Z@
z1;Cc-T^>*Gi6i|Xyv}*L%6?Fek+{aAHe|9Zd8BZ}<rlCRIu*KdX=`g*cgD>!{<wDA
zXNp?A;L)zP!OzGP0uMd?etzWplo}7nK$?d5H|>k3gdFqe=;(+9Y`(`Vn12t%=5|{P
z87$Hl+O`G3Q560-N^iEZP%!tG)Gt+p=$)t>%sG^r*_H=GLU5fveYb~M!|a`UH2_dL
z(6l7tdC_F+?11fQ02{H&SFimjXuDE>+!ey1$h>>AJDxp`UDJ?WBKT?y3fgv5Ru-Mp
z8SsqR(oPZa>V+C{wqqBn(4-64GF868Ci)@8U_U8~1_@7JB9G<AsnNm&!KD{A)3K}Q
zKfFdFGHNp9wekP8hI0v<{0TZJMb1KV_%B((%g_7IbPefrtE_h^r`Ja(v)sxpqT|!p
zPw_VroMt^~RaBDckZOkD<&YIkpL&fu8t+|CQr_6a!uFT)`@ziqY{&H(i7qOKP#}#<
zdL8db;CHrRtGGvO4<70~0TBEQl#rF}Adc&Dutre~i*)F7({$QB&Oo&pH7T!cjwn)q
zlNRCC0i@#gp)y2&kVRc>_VnfzWDe-ltZU{Yd6k5)H}^VQFt)ofaY+kI*GCE&6(IUs
zcdyx*6h+o}R1FJ^m}>d@TCO;%Gk#uNzxxz=c!Q@dbjO3PhZtGnR<qKATX)=6e!M<w
zs9dONct<0T8stp(ItR14pG_#tnC?s!*YCbK<_Uk|Ia5<+d2Dm2->Xw;)-mu-Z2|hw
z>@?k{3-}54hq;PJW%@^}_5#_`SGQq|=~}&~ddF8NX~2sO@@Sx-Qoa3PV@8Rj?xF#H
z>+%)-q8e!({b8N#RANKV+c6Bv2L?~Stn*}p4C_q)SpYIdIx>KCQR;~C)L+I+@E5`#
z{cv}FBE7_ps(#P^JVO8PA^asN>aXOR)l{iz@YHx_?R)Kd!Ic|Yk09IA$91^t9|)Iv
zlW40BKGk%<I5|%a_Bn=KIH?~`7nolo#GHN8%-_Uqmngb$x8|U%yDk{IxG1-uqx3rU
zVxosHOaJs}X2FP?6Po5B?-~9j>`liyh|=J{nS~TUmFKV*+B*}2sqnh6F(q5{P{y=t
z?6U{kxn-DEmzL99(t46ba$oKS4Luc`1oA5L0=CB`m0CA6?{%*+eQx+X*IEgZzf_L(
z?sb-#)7$&q_{`HUx(-IXp-24`KSGe=2aV@U@?XOZS!x?3a*@M){+|SAf}f1%cGed_
zHk0^li$LTreQ!{y<_!=$jiu?lSK~Qa)^ZqM7gswu=$8Tu0rr|Yu5rU^mg^e7fvPw2
zrLAco0>~`JJsEnP;xnpk*;&1-($%G2Xx6r4yjJCnIPHFkDNQV}1(x|iU#u6$fci0y
z#$zy+2p@#v*!k8Mon;XacIR|l_Bz!UAU^^yk0F$=w#MJKZWGgg=wP+DW6lpPBn98}
z<r|N~=<<FWYQ9;=O!(%iWqQndQR9q<-ai0R6#}lyg%%hMg@YSwh79trIT|BDO&=+b
z&ZSnA<15ie6oTly937pVQNhw8)D9N?N6A`qX^iQfWxO^Mk1k)Oq{&UOmoI$`*3QTz
zF={<;M*+p4o-bgZPo6KB&7W>}f<2cZdYKj<bhsaP5UdWb-eCrM5mtV5Fw&Fx)*=s#
z-Df8C?;M!u&jU06FC195Y?#)|i%E_~*_u6>ZfwR!F<=|V=+}|5vN9;hU?gOQ3(6z;
zUQgR4QUN=oMs8bvS56hSB^UQ+DIrp45Zg(Hi>*n<xNwNU9nB)vSFc`qFI;X7HuQl>
zox@LU^R>$@WRJ0rN;tKf94ss?<QMO#XMq%EbYvvKM#W16UcjqqfUfPWK!!?3eHV{@
zW2#2N`MgF#nSUN#uJ{r2N<LX+yU6jz1busUmMj>Gn`Qm2%)9>-yf<?oaH2}{vjeEL
za_II$EnksEa;Sn9{$F*(Kfd^{^gHs^AJHHH*}HWg<BQ+ldC~@0KP%Q;<-$Cbf8m0c
zsDLU+qTJz-`*Stm4_M$n_z}Rmu08n=pzkm1+Ks*mOZoNV2r!V{eW;HNqW{MG_C@yx
zKLVg<8c_ZEpQ7jQ^mq3Jei1xs9B?lQF!Ji?{sv?RO+^5J15_lL^`E1nHU%rF!>^z&
zMube};HbLE{S7FFavci*D>*sAm$JyzoDuoo2^il2X-4)yzf2hJSpJn%_G2OdO`Ak-
z_oDxBf`9%gLEsPGO%U~y#s8~Y_xrE6;r>kJ5OCy2_5XHz9#8{4kV$Nj{;xSTl2&7(
zfZl~wYMTE%(%m*tqfL+bb$c?9IO>6Km%`t{QITQ<Kk0<ze-5O?>$0Rp8Gqd#Nk5?W
zWn79&_=`OL&rt10{nKDy{*S@_nH~It?*5O#{<($zfrR~!!T#HL^&9{HbAuJmz<zJo
zXaLr*ay$VG;$HRF{H_NtIyIFI<f7t-R3Q4wqA+MAY-6_35R6A<h9C}Npi4_#uNc#q
za#Nj?hrwFyxk>_%TdYcOEe4RN`vNh05kyW^r2>lEHH8U|Z{D?vB})ZEZo5Iq=eTvx
zIuhh<z=F>3l;>Y=fcBJYd!|T;1r{M?Ix;aasp{N&JRpWd5A9>(Q&rC<85+;_Lckt7
zwdm+*^7O(<zfbEWF53p$l~!@4)&qpF;ffuQfa?GPI<jXAnZvlA8Bq~ZSK_vBA*Y}a
z1D2?&F9w^23ot<2@jwr6Dw^A4(3rLdaG^Y?%~Maa9xpNOI3C+XuW}s!<WyMj6d+#9
zeARdUcM`xrH*#LKIag=|kPr(#L6JHx06(iQ?m|zhvjc1;L4ybjXqi;|XsxY2dWy>=
zf$SqZOxyX@N0_yTHbbmfbZh55$f^=>t_-}Bcy&`c24!tkMHD7!7qJilG05IEx*dB!
zxS=C>W)qF4t*yP+c!5x<H=U=r2}9Y=XBh2nn5g~gyc32tfp6$_7zh7kGySQ6ZJr}g
zH+Lm+Cg5{39Yst2Lw}J*_C}$R+tJUe?e<zp4L#p=WkjRS)OROv6yxf&@7fh!UA}d{
zE+j+Af8f0~j{q1M9UzJ}IhegYWLE(G|9Q~YgXXtdfEZJ{$-(*9eQO1eyqXVa-|ezK
zW=}sB3e=sIF6$S0yhzxJ26#A;1UZWB50%=8T#<UNVw1R&J8mKI^TQX+f+t_d%{Ofu
z5e&K?tsi(5%!lT##i}@t8GkD?k4{Kf#?rR8FXIKvyT6uxqR6Vnb2b1aLTaW-Wc@Nt
zdgyj4Dk@`FpLXnW$zcvZAmcd!yMomP0(UoPjnA%R)VvF@HF+**LD1_x5lLtlsKP0S
zd73HotWkzcbC`Ykz>Nkrvv$g<+#dUtF|fumj|x;p(E{Y3;LtCk2{11CUD47{B@Zba
z$tLkF)70Mc#~+C@tj?XjpAUt_#%ose@kwE}5juR9$4QLQ9Gv?8m@Bl+N$G3zY<Wfs
z9Moci&YnA8`dz;22irElq<0$D=!|AufjSzR5|Io3CFh{Zs@NqJZB%Q{3)@TK?$c36
znwZh{#4NO#Zv!)>OMRy2)1YsZc$ED4wB&OM%y3J0wV&Pd18nWwqQ5+!5dpxYWOO8%
zYd29?BlW87-qr1Xxn*U%2c|@`6EZ4aA){g?Z`k}eIcy>~I{=y>RzX43LikPIo)`F3
zTgN(D75wf8kL8q<*qo`ROu<k%dTx)i-S%v-)4J&S)x$4ZJ9mA~J+skx-Jnr2(21wT
zS6!2UPNBM0x3ApTsFEhE&E9ZgBJ)5@00vg1GL4?2YDtVmleE$x>cDzptLwf$<c3PJ
zi3+3Fc%ViqMmbeb;EM++YX{Zs6693dOMYZ?pWD&|9F{sJZ5uyi>;W-a?t@O{nKUki
z1-SiL!WU=zpS{~rM}aR8+#0~=gS-_c7j(>96Fa=Bm2w2i;9i(L`p)39K4Y`C16&7g
z*Up%M#|JVT#U1yZW=sUTwG1Y0my*xn5Kq4_p(9rv-jvtETn^s3tI@kTkpKFQz{d6U
zL}Oq(1ofdeGEZJ0lYrIF7tjgmm2eWp>K#|rkbOU~`6wiE@w|z*o?T|T^<arw4Buyw
z${Y7CVx{QS6G30d%sS}!V&SaXx$3GyAz+{Nd|SchBgI+vS7dK!o!kDfN*>iG;E$js
zcI!mb`vFe`fnAb65tJ;rO8Qcv<ji-UQ+v`d$*hrq1Y*SP%iR3oUJ67s@zGbXb$t7j
z3C?Cjd4s8hO&=~Ars`y*3+F7A{g~a#w)`!g#5|ECUo_0liU0cKpiLDpa$DMO%SE~r
zAV*F|k@)o|5zxo3{&snZe`)@aaR#2oMyZxvOCWaF+aW7Ll{fd;-nx|(xuNWG%LN;~
z!5SAZ<vy$3ZYbn|(>&*q!({nBl&hkN$ZbGbpdhnFwmXH++e!^fQgEj2w-KrknTG8`
zbJN`A)zsATB(V0w&YJB9Wo~YI>+nfB@<0L$(fV*J5nGohRkv=e?Mv2jP>&~ae;F9y
z2of+oZvkymEFdrM!Gu-8fA0~+6y+qoOIkEZiNedkCxRy)v8wH!j>Bz|6b3#BryE=*
zlCSuS8{k%r+m8gT2$a2+oomdNu_Q2h=1)P^V#I<M3z>3n4!~T0Eo4-u*o6;@0I!FB
z6S~T2%D+{;kV3h&_MBnW$Pd2P&0#+9_Wq2p5$1TN4E{)tD10STfAQv8uhK9Iq9PG<
zTWA*J1;@&A>kHu=j4G!&*Br*rKPVx_kUigm!mo&W6Db`_n{eLIxz^OC&x+SZ(~Qjb
zztWXk!Wr*<3;H%@7LdI^l@h{&_(naxz8G;Qq^wOMB_N$P)A}C8gEhSDW}_d;6=buI
z0E`xW0^|A;`q4UONW`s1)3-PwY@Bb+`546X<heD)+HVLB5R?p%h487)7!!~M<Y4hw
z^hAOZGfXemQ%M|FNn4P=TSIT5!DkWPX+j$WJK;>m#9JwM5A-ihBl{&&nQK#%^IAC?
z&oagnh)N!Qj8jqMyafZ%#cXS;2HAyVLJ>uu#4`8Ih{@l#Q<EuERpT3@v0nfrlf=+_
z9vX}+3{@r3F@GD!IByW{hk;%_oKY9l-MH2Kj6yZOng2_{o16EnnSi;Z$#;YDnxpRl
z4Fi)ncIaCZm4%wYpf2W-l2}<nNTRUYXJXA2cE8u@lY%D!fiA&Mi)wOYy%wJqT|yY0
zp$1R{f_1(H;p<f1C(TbkUQ)8`O*Rk2bHyX8?*XO!vhAMW`F^!1aadMX*GxDlBC>&h
zRVRAr<O*5^%|QzV4$EbGBhMfg+TkaoeMX#GVj?*n1MfEHBCbvF@XdObA2S*{1OYqL
zKjc&owp)*-RSK5<IN#EV&yN|?v{74)Zl&M@e23ZxoxA$<s=I^lt}f$8)<5%~MN48S
zVWX(|y$yOf*$p}y=}t)WKBEY)_*jAWEZA;sQue53UCZwcQUI{|$ztv^q6${{352h5
z`E$Do-*|G<R2g_HpD1XU=u@%`lZ`KdMg@2-vtCu?!mcHfZ6Tx_8jWvC_`4oaG#w+2
zgxd$LHaX4p`zxt0qDC6{0oKz2oq|U1$0x4L$39e!!ey@(3nSLDSUka7NCxFJBl?%w
z)`IO$WizK$ZYk_KcHqyi5h$OE#9K?$Yx4IKZZ=$EH0{zNf7;vKG!+602bf!NPsgjV
z9l}`aTfW{8E=AZaF$X0}o4VEI3kC{~5-8-%Pj#D7lrWPk<`STWnP(u3dOu?YtGw^y
z(#GU$(Gy`c`?y5AAk^d4JZ0DOm4`kt5A9ymohL(7CG9C*Jrn^9>0U=k3s<jA5B5q@
zG~qbVa;fy=xLOJxPdQ-VB1+|mTiB|mXuv{y2i#|}$9L5+dwRdTNY$A3t!Z|(t?a)h
zL-i2!?@4^0A8i&~Y1-{+U3-IUD#WO=XW9PE9%U|pa7d0qvv(~+d=9vk7?A58@OZ|0
z`J-SnFd^5YZ<gj~C%bFHS8|N5iJ&q_8~LN(%v~AQ11OQ)p@)n9%QUxaQ$5$)2xUt2
zE0@5|z*hfeG;~%g&_YojqKAtn$a#rO#JwV_mPrdAjTW1KS@#{NFq^?ki2hLknj_fG
z*>patYbz%${o)h)<@SN+uTn2K$*4N?r#^vv`e|KAOzEu_@UG^Z1|-`joyPPT$9pkQ
zDDHzKyp*G_M9tk*j2N~#op60wP@k6>ZIkKrV8{up4a42Uo@|efBzt`;90yaAEKCc<
zf=ad<3lvX8D$l3A^2Ou1Qlhm=)Nkzs6?#4lqU1Ou-Qntx4E$(wJ**W#8b;6@@o=|w
z7F5NAXmE#*J57%ogWU9tJw*W5TvBA@+q8ZI7vry@<dz?N-CN<Ij)BV7=)=#D#Z-4%
zRr`(nqp=xCZPw>F?tdeFt&41G9p9(8%st;{jZvuBVtFbg*>>HQh~2E-Rx9D-Oage?
zFYlq9(vh}xr(aX&UuDDrL(Aj{otlKS0jefOt21pz?{Me)A}+r2xTc2#^gh)?R>>V7
z3!UsWw^%8ne#D1@UxCD~1wr5f{uV2jBSK=%=1$o$(1JjAdgZmi<GLxER#*u2MBj=^
zX|UK5j<teJj!I^QAiDfxYlYy^c)Y3<OI@AetSZ^VCxL~nQKRvr?>3EmEFE-yf>ipo
z78GR3FN#8`?k~|S6>DVx#7c{=qHbCELtkPxaYr~WhloB6rAREX`<6zf)Q|7iMPe=N
zEA;@Y;l+etoQ#H^;wXx#6`8~5@yqZ`kotE$)B+oCG(rdm+F!e2B5T3JS3=r4A5m<C
z<Z%@RaBbQzcI8`^Z}(Yu(O6J8?kK%i2B!K=<<|NYvogH-idoZMzSz^Cec`WLxLEgc
zLg8~@fcwLUS1=%tA0PJ}iYEoZ`0}WB&MjxrX^GfNMemXSik)ijzrC=B5IXG~d%g>W
z1-3A1v?sq0xI2rnov&qNW6!CL$+}T>k5gO-^-Z}kTD8~<Qo(ibEB&f7&L2-zm)^9z
z$z>8a1$tow72bZgD8QQwxp%7t%wpKkcbOMDe!AEdr&eQczGnAWNsfuyzrO0b&SM$V
zbB?9hM$ld{bI363xgVwn_CK#Vj}!Fh%wF$8O!I35pCJvl>!-o;+27gzO$3v{LK^IC
z@jWgY<t8g4<0?H~rdxNd=l~BS<=s)>)@<6ECllVS@@NBfL3Oynj7rILpo90|3+Rzn
zVGFM$5orx=*6HB#Jh58^*geX!!bKGVIEz2FqJ}RFm7$5+sHJwAnEU(N4A1+lST}eq
zLMO1vQ=_!BT-Ne)3u-Te-@qQCCHrE|)^1w#1mrN%6#(0-S9w0ygtAR7(h%su;3y-e
z=jrnJz9qpGRsv7b^KU|`nD~_MNwAY|DvsVJaCjW{Ii;f*?eY}@R`{5RksW$?O2;-?
z-e+YB&J!^#vm&F}d9;v6ARHP%xpt?t1_G7uZWNi}M|I&J=`)nR97>K1^mte2FK|V$
z%=o%5%9H7UNkPR#&iiTJ@Fzi?>G|CsKo*<91%~(CRP`!eCEtu|W+=Hp8J5NHGZ5OE
zn%*p$6qb{e4x?;$=jAFSt6FU<eipki$m?HRgX%nWzada`&W3NXbUFBzO?9(w<H~z9
z!Lrhj8#8f6GytP>U=RK;_TDlq>b6}MS5XiVP)TV-K%|jwK{^Gb8<Fmo5)ekDySt^k
zL0TGy?vA0mW8dTRJZryut#^6s|A+nQzdp%<I`f-*?yJu0yw1xIMAHQ(%TxsH)oI|7
z9>rt`lGu35cFS+flRlv$l(lGT;*%x(<S^X6O!Zh`lVIAM>rBt9bC1E*!wOAu?1@V+
zR&&0*?MSl%p^Fn|zI@<I!WR=hC~SQ5+?S~jwwOVm{s;AH^1gNL@7hu#h5o@x?X^Z{
zQuVzlXvpT!s{k~QXV0ggL`*4Vf9JF#_9gbTv}Q@dRh$GyW=4dQmJ7p`3n$e``3x)^
zzfs@h-xEFzXq-<iYf*cwBxQ`j)xH!!INEN$GsO(pYBI5Tf?_L=u&wF9&O^WheDTJh
zZ#d`S0X~kr-FT@%P%Mh)09aLB{;G>;t9=qaD*><plYHQ9Xf$dRwm*IUBE_5+AVM=f
z&Tt3C<vPG<^VK(yt>`U&>`7+6E*pM3>{#MDt5n4~UuQYF%W16LMisw?TuJ}a7frf7
zoVG>Ee^W2fZx<1(u>K_0Vb)vB?|~jm1u+$&_!|qEG47|*ZUZ`j-U$Y;^mvC!t!-#%
zBBM{e18f+Qa1Xyrf$fG!msi|nQ-GxPF%Oes^U1@S`b15@2~fyWe(&rmIda!kJi246
zKlq86p-Dn3;E(|wnAPEhfzJqEz6}%9#m5tX4e~aaQvkovd`>&w0`QHD$Bz-pEA23a
z{xV0ZmfzIk_2{tYlz-!l3||3G`}pbiL4OVp(BA{o)|d0_*ol$wODsh@@PeUR$^z`~
z>YBjQ0dd4Q`363PRBf{+4jMN13j)SH?g5l~FM)@|4g5k*D+OUjHQuNH1o;jir=9NX
zVcUFrTD5R<eL3=u$Yh_2a}7`<U4Vj<X4ZRm1Z6nES>3Yf!E1X<!!inq<U_<Tat8j>
zc6^Ih9s7JYXM(7qr0Vt)`r>5HMQn+T3sW1(KN%H~j6upU;<|-mNcM#yGm1e4!k@f_
zanyLRLEZW5*EgymOLHGz^U;D?c6VUdZ+o#o4uw3TgKfx$bs1Q}@TC~>Yrgl3GvZZ@
zhYPDnG|M6o7VP&arFc%=k51Z_Ew4K~o!|zUJUszG9|DJIE9?C>9Gn*Y?H7K;G*a8<
zH_BJ$&j-e3DmEx<S2<0dQWL_lvXRapLO-yW`N!k?E(o((3zh**65;1K8nz)MyQDxT
z;<v`lOSl|>F%H9=Hb+k!lL}M`3D+I4Kp#RpFbElBErBzl)<a3x3uhZ>O{x}PhjpZ1
zX?vmpp{Z1+E`gaZ+#a2uPPE;VSac{~S5Bcdz%cxpX%AWImQ+9K0M(I&VQ|0?<n4;y
zpk_!9e(<xj{q_-`ZW>gY*tDw4ENv~9kror_)Hd#a*=1H|7$x<gVE84-6ArCU3<`c$
z*gCr6-Ar0$43f%zHUJqeMR<j6)e83%G<EVr$i~n^5s0Iq1i+jgmN%eQ_Rpk$o`Sby
z_Wo`HaXx*RwT)#S(`D83vnwvoOP?gj9`A9S)Hn}A@H23s*JBtew9S&gG${CUtrLL@
z-Cl-ECipWGJ+ipIZK}Zv;X*zvEUY{dc$Fd!<eQN~tvN24b~KP|u{A9>n-Ml|lc827
zDUM0%fFSj}4>zxX^XnmZh>OMX%A&30#6}ic*_*n0_m(88?7+`o!wQ<8Po0jrJye2N
zu2I2$&3%{8v;B5NfWkE-+wKB<*GIxU?;enmH%_}8_SU?x$D{{GXW`H0dST0=)VU0j
zbB|~}-q*};)%wHFvlr^<7ve29V4`E_@Oje1*NlzN%s8EkEJTgO=X`w6?;?87)Y!?d
zUmvTDk4Z-BTBmrS5%hD%$4S8@Up+f5UikmR1Fw<<9T_^5pHuikB+=ELGi@^tDfP$6
z%FAEdq)!NQ^4s*;+hKimCkX^P&0pSrq8@j+@MgT@kJoU%iVw2J_wDyjG?oIM@pDV>
zHUZiy#`X2~MxYQyR+3xIXItA<<-Tak!?rItp7KijfZ&Nd-Nm^7&`WSMkPZ%|W#T?m
zUVrTBcC{}u(coIEx*T{Zh%WC%#Th>A@m&aJDcN@axnwvaBRiu~(R8<3nPG~3;R)(V
zAPalL?cD8kQnFVye8OUYKlAa8<AW}AP_U&;1H5D-ymI!l#Pew7CbwIDzZ<(TVK&0N
zw{DL!n;ze}tDmwWil6OP65l%ryIBsC*$AvxzDfo9d+QEhdTWM0nDm~1$WHYdkzJ1n
zv1>X-DldrW8>NNSp5-k*g^Z!c{G-c^^7ga)Sk0Zy@s_ykg9~8%DFU>hb2R*9cYZp)
z4u+Ef64Hson1DMUe?H}q6U*aV!E8A2^Chx^`iwExyv8XAeIIr?l(bySRl}9jgi*2J
zMWMFr^$1l{-{7{xknKZYHUV~G`^cGsWs{aEt4Q6J=(|6&hXyO!oiR7C>xkou(u7C|
zr%hWXaK8T3P60*K4;O(w7A0*p)tB*C^XaHK-_bmvPj^}>${^BJW-!?<r-}?7pORk~
zAv*v~7341ajh3p;`An^uLu*6fbl!PT(ZHLTwv<ou{<fZhaDX(LyhUplDJH!$`I7<f
zYv;XoMt~&ZO?sKwmr-%vZ~hdMpCWTl4=pqHEH2dxXd9Q@X>oKeT6MUudQ_+aJ;f))
zuq~1#D;8^~F07N=;@FDQ1abqdQ)_1T+^GZ2VNb+~jo7c{D2%iZ#sk7mYQ<FVJ0}`8
zR7QT1oal4h8ZS2H#cc)x+4YBQAh_?*EckD88S%XnhwvYUXM1J$zVhs~Ll%LE`m?NO
z%M@8tO<z4hCCn?nHAr+4j%79bvHGG#HXA^H){DNB*b_&hBBSJOotT70F=(qg0B=(=
z%Y-~wR@AVZG|I}6I^2qrc@L4n^fX*XayJEI2d=QG%EAle!*&-oR%Rh|`2&Pi(x#91
z@3xbj^e*K&1)rfFZc4?!vG7C#As!QVhXhauGL+Btk|e%3j00q$J=}CYAPb+<lKaq-
ziShT~ZM(jSaP;3T(IX%*_`tPHTk?qViD?l=z%5*!4+)t$d8*dIq8y*X9<@V2_dZP(
zF`rwVYI2ZR3s4n#_z(ezKulWR@tGpScGNB@cNOUc>~_h|CtEoMAz)Yxp#4GxNP3XV
zo!UZCN}rn}9!A>|l2&Vx_EMl{KDnEwlF$PJSD2c4wGiRqh>}*0_ph}?=Ynas%Wd)(
zP0KIVzY(%Moxf*lCp};4YDtWMwf^oH)m{%t{!DG3SqQ?f&WMcc_uy%An*K}eSTt#D
z1U<$x5bFyNdu0305Vy8;p8Jy|B-)LtYy<<yLmte(<oRoRZu?-+07c8yAKp*KHReH|
z;)w2`^~Hm5r*#FPbI4k;LqTjR1dTHp0dob6(A$LDKYWE!yobC1zJ-X-#~V3~j8#4}
zSS~Gq?D+sCnvoq1<MEI{ne81l+t+}|mjo9)(p_oWnW_Ci^!9>?-7-1$D<>e7H?BT9
z2{ewTSFY`vQqkK(^|E}}(Egah@L3)impWpT?H3NoQ$T!NQ34G0R;I@u#SiUkX{p%7
z_$c-&7Y%=)*|$652=aV=(C2u{Vs+|RIf;frA^9Zz?r=WtD`_by)J}C$<pf<hO@4JL
zC}}w7is%rjs#%rnA;P3XKhJ4=vmf`@iy0!K&+DYeZl=01%Zm7D`d#H?nz<DAIv)2B
zlXY%zf2n(z8TC7JOTH4=9(t973RD<8x^OEp(8G|kXbFuu`YXyh=INlWcq!{o(9Mk4
zCeczx;TdV%QNu?#(CYYi@i>EAHG)`S<9li)$#(fdV6bUc#*fjY+hx`bHF_+yzg9Aa
zsfN<EasLfD-<coxtO`Dxd7hhRCtqUQFo4L{(M#H|2XAe_nh)ez9zbg~dk)}+W<F5g
zcs%#@ZMsjG_<4g0%(JF4aa=EB^e<977txowfuZ6N0f8Y;HO{X9dNpqh7gLQ+_To!y
zn%t!@`cj4HoM?G@&$G9YdONzL?R>ZKR`KwLff&8^e%cNL<NYDh>EdhU^(Ur@p<<uk
zNk9yHioXpjdj(!Zry|%NR9G~xc9(z=8qb<rQ4L8V^J+}k)tBmKM+0wc=hK}JhgI8m
zeRRghU(wP^bu1GxOJ@SJMfbEPU?ubLczM%N8jUA8c=vFJk@(JC8&V`xymU#-z1asC
zJU!J#g;5Mr=oq#?DdM9$JijzvoBcF;{^@vkZq9^PHx%3aH_SuT`a4aH4o`co^mm#%
z0N2)L#`roo7|UPumi4m0Zk@a3XQ4$A!70La752kB*e1GnOX|tcxLzgiN5;piFEiK1
z)g5~kb_!&ljtSvXq6pAbc86lWfcF-E3{ed9E!-sHBn&Bk4fGuWEx0|Rdr}Lw#&e9z
zUg*5RwL3Mrzx0c~5GP<qW12spIVrOb8}lv>bBs<EOg1RC$29`(=4adV@cc){qT@UU
zx2Ai9bMqf@+M%mR@j*h1xXOEkl0Pk!+5HGb=M&9zE#;ALe?2DTR48gGblp#CEP3Gb
z2$y{?YG*;&<T)dpGdlmtMAcFPDOXeE`7MZSo$o~mu?E!da<yo8(BB`Pi;iEz-;!>Q
zexg0O*sD!AF{u6JqFO4B^@n*ozX!`8Af{jpH_z`jTox#E4t+qPPCao@seSKnv=WMM
z27!-bp*|rS52&NjV`Ohv6MosiEtn%O32lB!C;<QSjumRAATubqmXS;#wtn<o@9$qa
zE50%lO|Z4jMTK<kfN4tES4GNMz#j<pJj9_<CK+#P1GtNGm&KLe$0XrwfW6e3N)S_E
zNUL$iTPK>q=(^&`LxJUNSf*Ekkk{f3u$R()ji{PQc*0opcO_SY@o@Cy`zLt9*pkz7
zpO7K*OYt3Ne*F7OS?e-o{+ELtoYu>tGhq#LXEDiwBt^>Ff!?bW_+e`OpT46x_TRB7
z>$rX(f9WL&)qz1XW~CUl5$BTMdcBbQIlUObHY+=~;NJbEHT_;!z||9DVk72@4BMe!
z_X)2UQAXXy0&I%T;4!bRQdn1V;xnDe(j%94L{Z9kOMxPh(SuWM&UMyIg04CqS`Vae
z;bNTcjPu@#xJnK-nX~I#<;i7;hg9boifFt2*p1gEtiEgq(T%~v88Fv`Qo(q}oZDsZ
zr7Oq?N4S|T<8?8Z`3XR$kXWWRB(%}qn+h*F)2p6mt-A{7@EFTifjTtq>m0rk#sR|P
z%Y0Vm)n{||Q)WWS{YiXUV5TRzq2(5rnuWG11)<{&de*bwQ{vjH1)p60W)ks}!G|G5
z9}5dP-!p$)q9O~Qf!8n4Mjx-=2G@yp6!t}fL<<O4PE^}usm=$@#1-RnW3!~`_$QD&
zwUjI(gxO)V<v$>u--Ay;fhOdK$DL$B+%Le>(U#mf0ir~qU`i=lkMTLOpMLQk_Far6
zD{cykrY{J!Oi{FIifqH=?H!neS3F;57KmyySuJL#U!9!%swt1=9=`grRJ{It^^x-Q
zF8+Kh4~PwVGqE$ncZGT9jnQA(6t$pDf7-qqINr~F=zsBu(0%<~n{#q`^e9uq`fyIz
z#sDk)V|VR>UZF-x3HmP*9yr=F%QUC^JfIV)2DU6L!fL<c`5p~=19s)sA+!RjSAMm?
zOI!ZW?TZ{V)9)B&gm_2IkhUtmFcFv`YLO9wL7|jks+tHM@;30y0{Q<~Ksx2NPaH8r
zwm&CfSioMO9nkgtflP0C3Q0*UuX-6g)!0{4HRy8*#>ncoX)j55FJ2aa#*}yW7>FaV
zUvbo5(?GX8G2z3D>TJGgU<5{|cI;5lpetJt$hSx<P8O)-{9P_Fr2WO2`_H%kH%<GX
zi@H9<4XkS(rt>sJ(BsBj>W)<5zEIC^AfGw>!sAA<J|9H+m`KOP<Cbw^CicqwnKS5u
zY?qJSi}lq$oue+OYF2pedD07$<x8IH#hd!dcnhGsyj3~vJ``+gRlWEp9xKp$RwXgw
z?5^n{J6R))L#;J#4@HpNr#;K(>^^G9#e4F|Fn0m=s6I&FJ`lMcy+3xWqJW0ykVc~o
zT6m$?{lf)_o|DBR6o{!b2&Kqef09#-s8P-+1OYf6wLF8r793DC*5n60afQpf_#t)I
zCsU6YSHJ3*_LYH>7VKq_%T=VMp9EXtsAiSf1Luk+&{&_o{VA->5X4Fw4XiygT0ZFJ
zagRs>i%FyrfKta^62hq<T`w;)u|`|8XWLv)XAIH@A0{>d!@F%(#b*MA8wcneKWJCL
zO{+Mi)sfC+q3=(Byy)}05EJ-Il30u**6N?RnqELYeEa4tE@3|MSEgT|wtuZ(@{jHq
zTE1?R-j;3wL6Z*NvWJsUSiTffb8x<3NPY|%0@8$>HJFG=fSddy5VdSGE)AvHHW(j8
zAWuZd$ycM5@yz$G7eIuSQJ2Zi=x)3g?)6YVS?!4-1EY8LPj!K;a2RM2|Ja>%J=K7#
z`$@cOsm%w(2xm^3ufmY0J#?T6A-H7kUC9@Q@7LMVi9SAvu|i4FMv_mqt(2=M#laE;
zR1B`sam==uJQGZ%P|P>Jd|rT0pCKTjy*f3)tyab$Vl=dGL1lBaBI0(G1v(X(J(y4C
z6?O^*@wxm}R>H(oTUC+RZz_z2gfmR$W@-Ub{XQPQmk+!e76{^`BqeQn`CI@`_S=1g
z%SFjLd<`Iktf>hE6F(IshoNQD7u0OL{=nMQcAMZZ`yNpz(?_|IaBs)gLH7QfhBbJx
zuX0(@>AuLEU**A{cNg&_A)+#qv}SI59XMuJaFvcE$@qs$!uV))KYJYvB0(!<JTkBj
zARe5c*`@+Ib={zDIv!XMwUB@?J*RqR2GQPSxY<y<^!zS*T8-o<ljp_;hP3mP!)^bb
zdrIc=&^9YHjLaeE;Ev~%9Js3&59-m}??>OBk`3PnmC>%x#;(K6p=VgbLybcOil2OE
z^IngNeOCh;j9R{4ePIs*Vy>F5#~-k+0a}G(pW4=(jm~@avzDQ2c>hh<fmh*O2FY^T
zQhDb|&!!?@J*473^o64k;hH4Hj*DgxQ>@@ICB#n5>d^^zNI@1EOQ!$1lkz)1%Ne^d
zC$<^JfJUr2ZBC#9`(lt@LG{1dP3W19G&S~Evn2ZN`_U@~jTngh988vOWqJ7*fc4T+
zgE+*;?{xB3qHrejct{2A@ku&KqGYZjm0@V#_|9`ddYDn4Xvy0aH4=O9J*H!z$D&|h
zNH39mS**F3ofgO>{Yc(+9Mt=-!}895daNR<wWDMrKQ$rr-1n{Am;6hEoo3|VzwW{4
zL%xsyQ4PS5leE}(2@#JsMyTzra?_qCJOpGDTQ{2|vTee*@G;*qi@DkTavCoPA}U_C
z28YxmY3#4#NWNgqG)p%KVqFM|<qc=sS=;SN7SsDDgfv?i>hn9_+RBv~0^jn@1xG}X
z!>geSyjmLD^#Rf?_A0AXU=$^Q7v%R_eA}ezzTVxe&ZbUX>)f8Vpfw)g>Qz7O3Huts
z*1YiS6(0aZg@J_E0fPOrVj25ldL~9YB%&GHpUVZ_C^(Po?V9e3IrC3=i8)C`(H+~T
z>++icNeJT*5_=&QI|py&%`eCq4C8nCEDHd^3x~!2{GQDHa4w*N<ZJvQaYZxG_cN~K
z9;zat584jMv*_aU);BnsI7`Sn=K+ct1_qfQVJDQEO;spAM_Sul>5j_vK&Ycu;XFfF
zetBK>h_y8?E*qhXc-_}G^p}!jlyJR{^*8;gCWmI{{zM+X<kGH0BqB$Cz!xb%JWYtM
z3|GjCP7V0WfSTvN8!*7}bw5S7pQZ2wc7w31wezUhyk&y&{ZI7)^H*oRY;%qdMom_5
z=3S+_u9|B2`!xMX`AIlS1b`FaF^?#O-lftKn!~FaB2E%Mf=)A-as^?0L*v<KW$~7c
z173$Hu>lz07Ui>HA4>zKIP550_Y|I=>Bry|E=7ylP^@bw-Fe)y`r|_`b~l|Pj_@3{
zWE?T5u$D@~kU7r;yo;4eKlLgQ=lI6GJd=0{{yA}_2-jmj{cT{3XGC{bvWKMTZM&Gk
zU+l+nITX}g9dvtsZhfR2KAQcWjHR+=c)wJ641M7wM7TstJd0a9NP^~2unGY1IC<9v
z)VuuqaMN<J2pEnonc2IG|5~RQl>Pcrf?6*dnrsK`Oy_Q%c&t*zy!1!@ovayXNDee1
z^Y!R8N8k7K^--W$|56<o?GSKB?{$yOK5Dcxo7p6DxfRjlR!J0iSf%nmC>kVO#nTZC
z1(Rz-1NbU3dOMe3b*6$Qe_|0*4@%LhVShBEU@V)3c{~Nh3R0b55EyN*<-ph0!w`t}
z(g{RqP8ISScF6Qr-k1-U;tnu~{oSw5qKfMHkFf<zpl|(v;?XlpX_9f0DF8fV0E}+K
z(}VL~Uf@?aHUQpm^=j2Euxt@Q5Q+I)0^;SesXNMTf@Vj+QasJWrc~WrGHoDfCfDF{
z{^EVPgQac}ir4-E;udz0H_1c$DD%sCR0^VV`{AaP(T(K284cd)s@4N;dD}gGPwrD7
zyYNFOE}8~VHmj9&{m$y+X%LA3dx?Yxkx9Pkg>$&bLzA(Bi16_6qNV4r__SZ(V)vrq
zF^dBFSD)@!rTx!61H>oxA9Wp5%{j-H5L^LaYgw0B7BR&|5(syJL177d`wC{$aalqL
zvILOD)_II9ysB6{tOI($VDPXu_(kB`QaIJa-I5ahBL$QFma+#2g1w`#>nGKRqagun
zzL*G?$wl(g9u&NsVtmrODJ@o+urCg!0M!we8f|YCrD>)Om<U3{BS9-R<x*ZXl1?J@
zi)YLxpkW7GM~#;4IlHmDK3WT-ROY3qD>qHQF>uxMyZt8RYwtg$^s!R4mY_nAqYM)4
zBFB2Vk+ZmVssw!=KTn;cGi)I#qNUwP;F;zPfUeKyf(F%X|E%j5iT5)BOSj@5JiduK
z-+l0)n7pCA@j*cQILpbnnkl2y+_KbGeMa24v)^|4JH4$z+##CmafWAY&lq1}KY7oI
z^Xryl$%4(f+H7}aww~+Mt?zKJh|A{FYR?*1t+PR2%<iz1r0P!f5j38QJt}bPGMS~o
zh(?M)oDZFFU%e)D4Q=I$X!z7w4Q8^lQc=pXxuPR0XR>1<F-Bf3AhAL-7IQzA^Yq7&
zgR#L@N8S-jign=b#bPjGJ<hYntan%5_=4hNQK7HX-If#VC#jrOb!Wwi_|O3dL*{B8
ziSJi7vE#glF0t+Gmc&#Xggv}QCZ4^xF94`k^wIJvq*bHWXGe~&kfKSbx}GgS_WQVY
zKVIuoS-I=@ch_td#2u3^7b`HK(bfx3#*P`~vIskU6Lhs-iEmWOb&@#AV!1Up3*cR`
zO{lOuG`*;$3P7fD%@$1r@1@#j^&!CZGUIY!fIWk|Eq!un53nR!KgF4irt%V7Wosp~
zG(_Q*NTKswtg<!6^xkZ0-Qoc((>k#^IKes5{pLJ?V)%#8Zbma|Ib6kVuom;8q?@jr
z=qh5YRolr|FvkhcFDfuV0qT_n6%;wpJa_^D;-<{3pk3{M!Pa;#weR7TapJsN@4yWX
zV?r<++LC>s2>um$7=K^P8%j-}9=Ek%3M{Rg=$q1+*)J35FY)%2X+7J{eZhPuG<kFU
z*B|K7ucJe$6*dfu2=Cp0_=IHO?t_;~>tEiMOPEm%C{U`wP!FjPwsatbin+8@`1TuD
zQsg}3+&m8oQ$iDM6E@OAnPNtxsP@$6E)>%#d$Ul+L9bU&k*%E6j14taW^>NEn|9MQ
zbs&TjsAE+Dg{R4$Tv|o-K2%Z|;{FkHkOEXnFGJ>+<dFEA_^iOw;k$FP)gWapl`gi$
zxB<#nNjy$<W$C*E&AskawR#s(;x+6V-`rheh=u}Ije=cXvrStH?%$JFi!N{DJbVU$
zy3*HM4h~4&nCXl}ZqlrMng{j73yG@`y3wru_RyF^i6q{A;6Yd~FgGJzh{TZyGAQvg
znj9q}!56~>#W0o^W8=03q)*xjRo9t_K*8?@HS=|#JJx|r882(#E}rx-l5_cym^<Fo
zKGc5#rfWQ_8+?)<Y6Yk1l;StV$wR{epcd8}uS7dFDrW4bL_2OmGxoktE3naqRm$~w
zZ;dj&vK40Sc%|QZGrh*EWDsH<n6zq|Rlm7Pg$5F9KS4B(mjJbnD$el8%OR^F3l~r1
z!bGf%+Ef%R7{G3%TB%5pJO06g2Fo0byvbDPDq^V^QXo)0Bq+#8g4pVbUBtbLIGV`b
z%}Ma~V1fxlY&8?I<T`DtpeAH1cvzv->`^x~Fbxy+A>~;1@b+F{v<VWGN7JMlrE0*T
zl*qD2X<nG%(FO>*j(w2eBPLw<ZNQxc<c*d2PQCTha~a}e-7U%K;&H>3Je^oSNFPng
zZr_tia4uhU_~F*$6Xe6)sspwiw3%4Ke1KTjTw@;^mbtQ+SgCxYDlptdS>sr@HMx6z
z;f4&yq**WZ2ve3x(Y#;oq0XEsa1zZs&s}P!XQiy>gWm?kNXIad<70%0*NElsEz4UO
zI@Z0HC=96>waYOMlp^Othd-wq+*V63L(NQ#-Bk~FM>DqNrP)kCFD7vx5Oej}vS&bZ
zr+D!@^{Q`eQw1v)q)glSbo+MO!rf%Bs-F8n_T*A<J0%v;s9b?bN`Kb$#fWU-<dQ7z
zW@v#}mPwuw%{aiaK0xRK9`GIy%a_7(G=qqEet1-Fu`ZLN0nVv2oHneom|)9W{83D=
zV<@`5jsme;f<Sx*<(dUnXAW8sgMe655>#uP9}QtoxBB6||C8#y+QQ8@xgkMx9%ksS
z(*<qyQXtol2(B@A`Vltlk|IIa?#9ube#~5EMA887PQ9GvwUj;l$?3lg*Nm}CkS}xj
z(TM%9A^Kgo-Tn&sviykSQDkOCEx&w%X^w|CC(I|q)@Gckn?~N$LHuj*vlr>sV;T-^
zK;Lm}o;QM5h?|GBXz$~B^F8oA(Yv2_tE@?Ny^1bL#ug{V*Q}8ZNi=>x=>t8^^usgy
zVxK6^!S=N$p5u+P_@~zrlj%koIM76}IDk{egXZ{Ez{IZGY3<@?6g%<Ku&lW8$|>_&
zQ^gz`R~Z)C`WWsY6;HTrDkp+%&{pRwQ3heq<csi-H@g|}aUK$z>F*w?nU#OYpP_Tn
zN`DJ~NR70YwAb92i1Qh5b#j(Icgj`8aFd6Kb&4J+z9xh~cZ<rl$&<bXhi+q*Tt(XC
zMe%yP>_-TF{Ty<1YV-M?fFQZ+C~)(2rYC$i`$1c`!#Xj~jxgztMo%@E%_hsn4buWj
zE+`Xh<p=;p-06}%JVL0U{4w+aEH*Y4F#tLz4eK;kv#7TlEjT)r6^~TVqFOualxOII
z$!7bor{e-dVX$rY#u}q}nH)QU+d<SlF2fx)0$}r8aS?sgP!4`DJ5l;oBL6y0E}%H)
zggyPMFzvNej_|I}<nVvkD&X~e?97$p0DL_^grG;4M{r(plBLz45KbF-`1q_RALpK?
zi3IgcUWFxHy#z}9jhx#Sz3k~roY%byT4FLBoPaS~sscmKG087iJV^*|h>MpHQ4k~$
zUs_e?)HUkMh+3U)s<z#J`FR@);?uCj)m3dv-cJ~+FX3*Xwi)YOe&e_XA~DOjSb;3+
z`vD(g9K(%i>hi|&2Ki$>Ru^V)y}c=s3QD?O?*q=nr?rpXp?y<OsjoTdCNr@1kh+Mv
z)|7eGSW|}MF|5R@7`9XL-|_dxOlz)}1eTf8Y(O%@{=w1ODN#2J!p^)L)83Mfq@I40
zc;p%}_HsX?u?fJ`CUE-1@s730wRGhXo{@=W)Q{1A(Z5ampD=uyRnChpF_abG;02v~
zN7d8}dO4-VZm`=xxh{@^$y%A}jHU1c%rx%SlnhtiMcKxmP#5~^EdxG3Ag%mb&8o)3
z1u&<}S>-+_o<=oZk;{<&nv8|?3mO|-sL>tcWQE2L&E<GA0dX{%b0KkK<+-W_?)&8Q
zR<D#JHPgEEtfPDaeZgxpi`~MJMFN@k<5@=>qR1;lw?-~ML2(-f3F6OZT_r_BP02*^
z%-sC!Jr}@t4U=KiZT&XgmJDq~H*&ssV?s>fwB8Y}P8vmQ7C^!O<<8xEBcvqN0(Px$
zsSikHr9rS2y0#S*{v6r?@&J4|2|Kcv!>$f95mRk^)7E1Fw0{G5T`xYeMFZNY^+cY4
z&(IO)OfVdoGGIf@46CqR+5)`WxRF{gJ@K7QFY^?Jc))zd6H(R>ZpNVTGmg{F7)}|T
zz$ld$>&~iJ&Iz{>6rD_J4$y_!;VlQ7lgQXpO}yK1k<sr&F<R;f3bK{At|_(y8gacF
z>G&E$@*B{$gm4dT4NO{Y4hEhGN}hxl`sY&5Wr&@(ir1$qEkX|An+aysoq>R{P>l!o
z40l9e$gay8mrA{lIcwob^fDD%Cll&DQ5h#Os~$bM5T8JZwK<}6<002}nY?{`K^aus
z3Ur1HIxK4}BhAxg*eKJj0XF!l<8unoUUi+&uCX2ZQ1i2zISB#{OaL@+-b<SFxGXt*
z=;;SiFB{DyHw74b`flt|_^ARs{%&2G|NL@y;&NCgEHO1c@EDbCn!&vB`h*kG59Z-R
z?QU)llWzUPnJM%UrOC;c#Trpy&aZ<q@)v_SS%xfZFY=|4L&dpT@vL7<C5OdJbOTK-
z<txby{~jtvnG4g*z{KzmH#u2}T|c72aMSRX6r>>n5|34%K?GJek51)DtNWlXNs4I>
zf@WP31VHfnXc1%F?KoFU-yMfV0XjF7f!uQNBuG4oi}_Q@q;al(Y1CGa`s5s@RkkzQ
zSSUMlg`{31mD3)5S#f;7ph-dt%L;U0jg(f&@t*wWgd0U^-%cpU?A-0m>DKNS0DbXY
z&PcOy)5OgG$l0zqy%JAqVX0`$V1uRG9EGc=l(9#dPp|}B^eseEpc$#GLGx|sW<c;+
zgNBeB8Rh?u`a0EtpXp|Z*3f9r>&-e@PET&O&H7Fb8D8aZTn;JPkt-Qet88wI-dl-x
zE??&Q!1w7eFto0flsuXK<*dY*?9f~ibzYIcXj1rvtURB9X1|Ag>%lV!d0|5O&H53C
zRA(%gKqv4}7KmcL^FwpLyzfWA-l7<B{{-$f!kf(1{Ni*ssdfOw{s+Uu#797<wjKDr
z1RhlO<FpL7eg!B?8uJcWVFuL7uqUV3B%QWeIxZ_3I4X(QNSm9)EcWnHzWj3s6FpYc
zV=5f;dy;cPIq92)-u-={n-Z?kIrMKVGUD0G(k&WO4k3}PI!5i=E969GSda=Lz4v=&
zKl()oV)<6Hi;L+%4^}<>{-d1qL$C*_Vy9;Flipq*(4tyIEi;I>61Fl`(bNr|jEU+O
z+@K#fE$#iT_kAd!n@l9Ir`;`Mf6@KsFzL<7#l_phCqckXYO73E#<#blKWBQ0-Xm4P
zNN*+DxuofKzGC{=6%R?>@l5Rkm2V|nzQlweXPG7BqvoP4donaS5)hm^z`$MNHAVWS
zb58nxJFJqlFoS0?neUKKM1tsokzDE5W|mql@)HvNFZ@^!MGIsfydC&D{V;r}Gm=g+
z3m<~QmYbO%fgmF%=PdwN6EDTDM<Jh?j!z_r5$BAV0o6*$7%ZI?m4wa~JIfE<NW(j9
zMuBo>-l`dya+pbyO==6ELm_mT*j=G!qB1tpG6lVARHr_{Kp~pGn<$YEGd*-mj!HQ*
zPETI$JJf%X%G?_zuG1XMO7uiJt*1a<%p7SL$7n{iGuv%gRL<C!vkz6sc?N*h3nSg}
zli`VO#h_uZM*CQw=a_k0fu)tSoQxdpY(L07o+Hc84yJ1_@@i#TGV!GJh^iKL9Xf{u
zgRubujNN|DJD4*KDv>z(jAc^bkbqI=nhux<Q7MVGZ7Pt38WbJX(vW|KXH|GEKU`Qk
za(NalL5^<V%k+rcH7Wx?N!*<t@4}5rYFb{of%&;CiyGT#Ma6eP@w(CuBIl2B(v29f
zRCoD|9DE)55+7SKC)lny%tBoJm%M26&~U{MGdB*L68X3|lYvln(E>}ilT(=*(yA0_
zqLrv`2XqdI*@D!N3m-E$OAclOX*b2ge^t#4Z26mr=HfuGzC8TLx5j!LR))PckVrQo
z;K7_U7A$_0B_3(0UNkh=G=hM`)0cs7ZDgFBU;|rCl3=q(8-uc^uf$96z28KpmH^fp
z3b)>*obpwcfXLRAB1sXRDDxnjs>rL^ise{mBDW+IvmTJF8}9-0$4gB{9ifx$t5%Zu
z9pLE?K#e(>3&l6w<U*p`t~5^+xE$+~CxA-D!FGEU+%ATau!-*t+<cdq^8_ZY;eNA#
z?yfw&V0#lKZZs!VBla;$!(QccxV^HV=3=m++>7&J3l&v4K0{6iF|qDLb&#pG=izO>
zG3>OP<Zc7eR2f<}eRx{eni_v?)Z3_rZ)21#bDkMzZaj)=D8Xw>ieCJR63vJ&b}DOn
z;9O8*F*wqw6I9k`IFsXwR)(95*xn~>BWqz%${>g|p0&}J+*j}}`Ka{?Pss|5@2nmy
za5{Y##EXg|av75)h;-Rg)8s|TNdUjwkdQzhlDO`MQQU%=6B3!>fC?6RE62lLwo;_8
z5pLK}FA5aB)1e~-bZ&+|5YE-xDS&}i0W9!`gQ<o{)#xyh)j-mDQjqCi7Pq35CyW6M
z?vBUClVJ4}&c$S`^CzM*b?#u-O=%M<co<Eu0BJ&QSZ3$&pxkE+;Tp>r^F3*q0D4;Q
zx6LqtHBc52w?NS8`=oJjp%u^v{m@WzNog@GD2Cgn^Y>lAVkx17(mNHuvg1wyD|D*2
z&*<xQNO<1rgLxDq1~e)RQ*o00y%zMbA7LdYnIEyemyx|=ydP)6J{^Qx)dBdcZAA_u
zsQRh%9kO1#f2Vnw22-Z@0~2H8MX-P;0QlPS(c<95Z202O)q_rKqqzf2$Prf*U2<j<
zJwWjE?QKLws9=uph+8^yzC?UGt{r*B%*UfbPMGVRcVVP@(Z>P04@+RDV2)i~mXr5x
zEwkgwFp!KC8V&6iypR@0CV-woL)mg&598)~%vJlRhTKtJZ9j#8&36W3^iYfli7<t9
z){Mt1RGFaXlXogB)2IXUrQgi2)Xb|tnJfmLssj<<H25+|NUcrh;s~Zvae723w}W8?
zEl#8pXS3J4<T;%V(+{8z(7G_YZ9;c@0+Jpz^QHH=%7epF*G5QjdcZQ%cMF*x(qFG;
zj<YDn+FUJ@vIBJILc_R^f7rIpWdTL&7lM0nz_!)Sz!O=W<d5R%!IK|UBUjnT(eHLj
z5a5;2tg&T~wWYB1FQ^_kiFT)>L2c2Z5J#dSZF!T-ImN`94wNT12?}^~!BjG1!%2Ce
zekpXW3`XG6xv0)rk~PJ=2F8)rENOkcY+(Jvs)y<|4eZRvJiF>OoQuJ#gYWw@rZ%Tj
zKyBSyznYjex5@oj{0E}Uf0WhRR%m&|r91CKve?r{vv}8saWpvBd3M)+8a0A%44(b?
z3Dy+c08UgZz*&^Gwb=A4>1C`O0S&jbm;i>@1n$+kjB8$w7HuIp_&r#BQ$lH+xhd4i
z9nd1`ikx&gy>`&0W$NJEnnGIEe(@N})LTy%ku?u2ETf>8!@XaSyK5$CRTIU~^h!gJ
z4g}RX$EARYssd{XqA==ke8|Uv_=f9If5E0k@}=;u01f9clU(+)V_ZK^H4azaZ8LR{
zJYYhG8*hIipnqHn74Khyp1;F$k0N?83Thi```V2S@LtIDu519?Guj6;jySZ3yu4i7
zqKS)^@NyNbNsK#R+fShlaD50~i5Z(EptuSIACql4Jd~LB;!Mb{Euc<pG}v?*$tEra
zx9evW+rgY)X>^Mg4z&mg`{TavD^RpcIQi~%)6<XU$9<$HULZR{tP?=?R|ZZC&%irG
zHV^2*_#82um0l7yl*r@ES|w;yWD6)>rS8WO!#d&8P`OV{fKns`RvmRWizV$3`wXAQ
zL`pm-<x&%~2TK&BE2cV=nT?u5v6Ea5#6}slw3@#wINV&Fx7p>_9dzkyeUr8lH4|m~
zmcINvpgbk5JqvGf;JsN~sTK@3k=aP@XnTqcbe@LSQ(=ci&5x*=m9xl`AV(_EtY)e%
z0J)qv0jn72;#VD_Yx18%V%`{h>U;*>ZFavNb7wif4%HnPa8QTbrLz&~3J|=w0T{m~
zYf*7|Hz3u<wiTA%2vhc3qfRoR<r9u^7swF&AT!Rl+Zlk?8|_$#OH|5lcb7X5{Fupl
zwrv6rNEMX>J`Yf^-)$UOY`HXKOl6;}{2)c^%ixnRACEV|3rJ}BaLK6DyG?yMO}Z^8
zzXqk9kog^n3<%;SZr6U9!C&NNHuCaRRf5-IyI7J4k-Qwz9Xj=QAR>I9JiV)M9c_kx
zeG(`*S!;XvVWU>;I+_r+db9ej0Gv$xiT!ZRHX&q~IJ~b#UQ2bO7Un<p6<R!!Xk~eG
zoFwC5(w34jhtpe4Hv%<V)~N<BL*)N@P}nN_tM$;-tJ4};`89MYi<}!g+UHrrP_qw*
z)+_BzxPBD@x**F4kdW33Tsq(r{D%twNGb#Kf{v4lDc56~s8*tLPGH2}p4FT_pmWPV
z13b_3nW*VC@Fo{CU=@`3$zFMiAjH1w5=%~U@(mi*T^UUbm9i6qDwd^ziOV;K13^^P
z0w(UBc|oAcyZ_Mk#obOU&i6&zuYaR8@YwNRe&8Q@xC}4Hwf`!|5r4z6|Lz~&@#uRI
z3~`eLuh>0k$oE(7hYxbU0mN)Yv48W*|GZZ+vIpG3_>ce#00sa5yaPOI{^xN1<A?t_
zrT@80@J`6TUXA~;xc@(Tjp)*A^*TqZ9<bBpQc1p)1e;DB(@6ETMvbj65ULSA-Qm%l
z(2wf9$uN2Z_vWC>ZtdL_H}&Gbxc2|;WBzi$ul_%|_~@|fyqp|g5b@gqlPhjy5%7<M
zl6YNH0hPH|Raze&D3m!tfQjtuhyLfA`>)TU3c|))G1`g3QB7fM?@{b>-v2(v+`Wg2
zvYbLJZ~Z{Ta^zu8G$WZrUJ)}nxiWzHcA<IACGa;Icnsb()+6H&QSFY0;<I0%1XY|I
z$xsbgek9Rmp!279?S1y^cWa~fQBIc`sjR#_#!!|!CJOd&S=Wa1(K^xfMLs5A=vhP@
zt02Qa8#4__wP%{w|32Y={lLGin1AKL0l=>gUfWf^suo~*_ZI&@8TY^b4^BV+-!<Mk
zjfh^v&YI`>q25NBQ88Hgq-drSMW><5e|s~SX3(#wQ5f+QxCnkTZ~_ER|8(lF>EWjy
zp_EfA^jBj4ua4zk-y43QD)$ctf+k4AsDWq%*DRn#I)a6}O9>8h0Xl+^cAQZSHlHBe
zr?AY+x(IkL*c|jGac`k#<91^+x=|Vqy;F3<Q?sCraR#bGHJ)Mt9X+a1P+<9k@dk&7
z^jvR2&1#GZYF50oRH;8aG@%9wx>x8AQbf=i7Q`&``0tN5x%45pCZ&SpN}^&|1@#vj
z?7K>h{$Q?Ygro2C=?)>+R*~M-RaB!tmZCB#TgO5hjwY@_f|GD@y$sJAI^q0=&*qbJ
zvVwrjcCB2LoGEn*%7Pt6!-09$8J`GHWGBBt0f|jan#J7jJm=p($fN}PaVNVoZEOE;
zAGqbEQuN6Jq`2i|stqg)h~;h&4#dN1tUjy+gV}o&n~H+o^3uFiaE_0z{Lb07M)8WG
z+6TcQ)oCBlxoPc*d81b6VuQT}bY?)}UdiE?EdkFU^dA8Tjw0On4`+K{^*#J)RjnM<
z>RxwZsY)8W{i8u(1B3Vk5i2Nav7c%$1-RKGIZ%S=#hFzGoFA@r=(%62^~AE|vh(#i
zyKKob0?n^aNEJ{NcvsTuj8v=tnTToqcE!GX<uo2(bLZN=Q8jaBVPV+^iq4gj7hNiY
zpqY{eT*->U2MGLlW8poCH$@8Mf4ZmQ_ndIUhsA4a6mmn<b#l&VB>y9S`maAEtK0*P
zkF6)2SelMI)#LVY`F>3>K5c%mYtF2A=kulzyk7<bEPpGP-SxD^Q*>VCywm($7fLtK
z`eLQd-u}R0cj5+Uc*USBDpSHxHLC^39yC#Ez*f}&6s+4?eKAVUT`x}pKKP&)%AbNo
zSiY5%QeBzo#Ehw8QE+$J=yt7YMx6Hz{sDP0g4LTs{_yGelMmn@Pr)goM(yu<<qzLy
zf)EMdP!PVTZYIakA}~mFQ{AuPylwVdoG)~*@3V@0Mw8bt`J)X6I6A&j6jy1pOI84=
zWZaKX(mh!29ITZ|Qa0Hx*8}U3QAefNE^)fR0D$gbs?h#{1brJHWj)sB_37t9hc+y@
z)|E;GokpZDVBe0Yj5T|s=z+~1Z7?7p6nI2muHSh~U)sZTT#=EPNiq9*GiiUab?gN>
zrn1@cFI-krWya2Tdc+Muyce%Dowv)+=Ic*&e-))Lem=revGy9J0rD+@a50y`4}H<R
zJmysk7rF_8Xk2yDT(d4q0adpR&ZV4OyCo+61S~%~KY<lz%r&6${>Xy`cc;lNzz=p+
z%7y)V1O3Ypn;^pr9Fy%$Xr73*cgA2T&3|%#|N5PHtRnw*EH9O+u1dNW%jBi$gx9)E
z3VZ?XlRIljShU-)e}&R-aQOLj18XVKom3nHD?R<;TGDB5)pDwzE}&YMj}E&3{8Dvv
z(5(l6r5u*)jobqNFlqJ__U+2XS}rt>v*g7C(9wBU$8)Z=zfKl}xtZ>zmvI-tIDf6s
z{aj+Jx?`u!h%&)ioWN$w%4**mr(MM$@qPTwwBM2*;9izTCcH6_j(3_gvH~30(TUxs
zWWufeeLQRx6Q8C&OJ&L=5oIOW8&BJJ)7q`NgTB^MS8hRHD07*x*tVn?0Uoskg%U2W
z%e$?c^1>0-bn;FtMOC8=WzZH-(__o~9n)@-Kwls2!JiyN1P(mDcI6Jwqyk33lLu!1
zN9Ou}p71)&KbCmI>*iv59zpxPW8~NSw8aJ_qHo|<v0N&1Z4b*Yf~#j{Ta6*Z%Mr-4
zbEca>9!5=5z4uha?F|r$sXt3fYfy`~JC9ImpS|2t%LTF&@dQfh_9|ABdNP3l<)f;(
z($?MvT8@lz&0hu1*WxVNZ!Wj-sTTP4R?3ECf_87`Az({e0vFrKq+XCCFl;=HlM}Ap
zyfB5-iK?d|&p6<cNrOUBk_Ex9clSmL+wn~DRMZQ=0f7M?EI?>75i6w?ggY8kQ1;Fb
z{NWRm$U6Pbx$4AcX#X$E-X1jI(trUnTDR^+vzRFEk8gnJ>2m9S%XTvB&<Hmrm5%8M
zCH1FS@wU48cBT~*tBj4G-d>##ikRdt`GV!`vs+r=1j3|wIfU~slD<By-7OYTx0xw4
z$+wxY8w~_<+8>AHUU-xRD9|<RHM4K_y!mbiK5bEld2Kt~p<B7#-bK(2lVbG^0*<bO
z*u8F)^=9uEvEDT*>#t1mN(%xv<!OiA`Zi7~qZZDjTbH^wPS#*eQ3Jax5UJbWI;4LG
zHko#pm}Wzfi0g<!`ovrlco9ksRQ|~V&)T0BZ<TcGcUQcu76>Am(Hlr^k{EGAfkWE=
zkMfyN>U4yS3>+<g4Tp(pMNjW$kH}}J=`T@$Kal`Sjtgg(=xG~ABDJXcBsx)ds!wOv
z`7E_rx53)7?+NzfDeUebw+Yaiv(!6jXjpzU2X>&38|UWh{Td)Gp0@7pc%7T~3_{={
z%WZjk-DW50bnB&C;^~W_1<>K=^6?HA&kfp7Z%*AyPXox6&aS=C+nbPxWYx_9VjPrP
zP|qr7?W?fUuvq{O27<G;>+tigRcA(&{%({cMTkFL-FoW!V44W)E!gw={Y^i6ebrWf
zKMxx?#t@0)b1=i<ptrx+7EqAJTrDuyK;7>DoY>%a?7SIAH_oi0SF;ivGCXkv3Yq_J
z4_OBsvX?QC$SYnWs_iJtk;mt5Z#YiaZAEwAYf(1(`9;-En(H{c>Iy31H$>NX&^7Ly
z<Z3d)aTBe#2#Aoh(wBQ_un_ZcEvD*bU&<tc4k8Da1lDOVjcPTX0>R9hvpeP4U!kq|
zHLK+|p>H)wMTxT(;C$n)43u+zpDg=UaAAk*>8zUiPFrIm0T>mgZjec6)nlDxkPr^;
zg1Z@*RsW~L%JD6U7?l+6%Vs|~L1OU|=+Cuf>ao(%#XV!2w!Yj3$C|+HWF6KWMWHnA
z7$&utW<=bEU)UH)TRFyi`3d=%YN$FXE%*e~Y}Ky+kHZhhYZqd;9L%RJuaB*IKPa_>
zWN{-vS)9c3)b(^sTwpJQQBQZVRmtyIKGkEkn_kQ0d~W8tmL2vL<NJ`N+sX(ox1(jk
z@*^4EYg>P!df^1Ken8Dse9oE9emymJZGN@h!Phyv+tA&&4_4|J6gF1fT<rf!bALT*
zLQ~z`j&Ck2=~guHDNg^g{G$`tvAj58)&DW9_H_NZ2%)R3BoIOzRd-b=HlADsk~@k9
z6Bshwq&qh=yCtv;-{-NX@6TkmBVQ_=HRFu-F2;z%@8?^s+s~4K1qLE|f2jCYU3Y=X
zR2Nk!b$D7j8i*EMIG{Xmp=S9*y8W=shkql@dHa}6_k6ZK4a`<dc)f)->PM<jTxMN~
z@VjTG{h?y`!moe-02(y05K4{N9CvRIw4~a39Oeieu2$I?%{GQrLx`C^igND_w7jpH
zaBJ;qfrs*5PEMlF%OT_1UZ~yD1;L7L!w!uYm2;m>DiVf$KvqQt-;S>ATK>Ur>Slu8
z?dcr*L0sD@D!Gz!m8H&OqJc(bi$(;rZxVF%d3mnU3_1d)#S>t^shTRx%ZM1Bf5z3T
z>v(|lhYd`fPp==m$&?8K+C#j#rTY|dt<j8etrANe9Z9!GhOA~inQ_9m5f^M+)dF~;
z3}Ds+yK=@8o*>F9B{SesT{jvIriwO7*?j8#zL1+o&`noM!}O;BeqU9EgvW7ND{PL6
zLP>Oq{gE%$OQr09e7@2Mbl%**+7$mj{~Y+juX(}9WoqpWtxCt|*{xpNVP8oPGbUF#
zTPW^m>&%LO2G8`h5RjNJwHvkrx!^9zOwrmK@Zv(oEq3eurao_V7VlrQ`dXdoK(Mpw
zuex#>9rxxJFMUF(;YGi2K4+@(ZgyHwU}@j^dzH(5z*1{9=h{_JoPmm4T$@-Q0d>}i
zZY*rj4m<@3YOHWnA$_&L##Y01h1!zW>0E#0%(8^m_hK3DkosAtC=I>k?DtX?Ie!&-
z?&@*s{J)bML%C#I208IWdC`KsYAjwHFC;WmYp36~{a@>ezkg$x_|uu#<;feq1Qn1d
z5V4Y03tanLyoqx#&5`<V{}V`6GwwOTI(l5Ky~A-Af`Yi^{D%fe1$AeRM|0WC!6rIY
z(~?2qHYa@3Djn`4NPi?@@j($h4X~PZLn0XXxD~{C;jWusK57ik5wu8J*F$o#D(zM$
z)>^3xugJ_Bk4H_N;{cy>zt(vtzkC}UWIEdX-D^df(HZBt>%{}=0>hG-oMu2ceimm@
zBUZcv2E25^onoyq9i!7&oYuN|{rPB1Wt4Rzm)Z5=D4NIFKCOE!3V6J|!QmV$(6t^>
zshD1V1av~bgW<#Ss%`9-AaVAnxp#~v9Q%gS*ciK&6XePMe@MjvDuW%pw~;$o?;Hfr
zH{mu6j<4nC#T&Kr`BKh5U02kH%NfLPPCKyxqx)%^BH{bTE$#S0zDPu$vzriXmQdNg
zfl;0`cK0qMVqw6P)r~6L!3El(y_u)P3?!Pa+s7s7JGq55OwybSUv;l3liWCkgEZ5c
zR%F<3&Z<r}a!by&)ZMQgugk~2cVg33tuL~#&wH8BPRUw(D;RASnmz@@wEhjYvRxqD
z^44W<_EIIGV5YVM2>lWQ$tJ%PFC?7Gq4?Iv`YprqRzMK~&H`qs`40acyb~R-_8sk~
z-;_tvvsE{XQ|E`H(#Za<UykoXwbK=V@e{y~Q-x6UcBY;7J1LXi0Yh(l-QrU|+n(q9
zhXduO#Bp>!SUxkn=ztfg@OCUdm_7D``$UPNVDZoSS0c&9H$5KI`IsOuwh8^=f`0ia
z_h>oi_YuqG3FmR=MaPrWy8}Bd9#u6NL0$sVyt=(3A|pSz>@GS~I;@SFy~^f4jA`O)
zT}}e^3`U*iua3L*RK>llQ`l=PY}Eqdi@~8B!%CXYhe?A#?LxH_PXcUMB@6Ng9N9GG
z+Zcl+zY*cUyz(n)uB|5kR#IR!YyI|ge+z~FQ(=@OGb7+q>y3;k<__gS+-@&HIcXd~
z;s5INO_+HDJpIAXpH;T@_GV$RYB_E!z-qA$qXtp|W$e+((<eVf;2%^91vBv^v|$N{
zUKJC?*jN|Lk}__$pzGzcjC}(uR9WhuvHY$O|GNV=RG0^<2H%u46L7Bqm<2eH?}Bz_
z(j>+TCX~N1p9txCU!3D@_N&_j3^G<NFT6y1`=<+hKbA7M(hZ*FFGQ`~yl^`SOTr{$
z`S>gNtgW!m4{V-o7`M6tL+5Rsl!;Hk_C|~1Sv0OKTs9DGPHuombzq@sgNl_V0AZFw
zyXk@w945%)Dl8Y89nVrAi@{##T_8bPi6}k=sY+p7-0xDNxKGuj9i(I?gc=#!R0)IN
zya4@>$$kcw+qMDsG(f@WR-X_C^lW{n%<IVm!HD?cm0l1ZsWdk%ed`)X+~Ic++eli?
zf=VccJVF`H)i*Lam!Pj^ce@!%5<aN9Jw<O@<GVdyb$zjs!}GV}@Y*z@sTNRO*Rp6N
zY^>d^Y+LCTD;NN}ew<>|k)K8Ke&0eSk7n)kBX{wlV7E1>#V`LLzQ9wyGm=qdR|S7f
zS3A{zAAA0;)yrh(N5(Y$#^xN~Afn@8QlD(%bkkO<+iJWh_FR5+yu><^RDF>hQoOo8
zNbB$4_NTAeR?~y~M9==)@}ndmBe-=iLZ}C_S-Zf7kTl`8X$~7*pmuJzI^(+QT0F5D
zhm&=?o>#i)iPBg2fu7u0*=gm&BB&RBu(-nS?y|g$2&jPK64Xia*W*k3{88wul1DiU
z>sDjOZTjms%1VouALSf8g%IMMPP;nfugIl-1qDNXX+cK^FBTZp`ozjJb5%1G$khsm
z+*E*un{)fw{*sB*+}}=Ic|*ogN=m8@Osk+4tN|`YAb#Pk9jiO=<n6#8=E$F>%<<u3
zXkDA$+E3V3!a*3}sfa|T0f5$InAc*#8%+Ef9?ZB@5dzlUZGPB7z0KZ?&L?@%tlMcc
zF|zQ&tQ<s!y<pN}fh69EAsfs;Ug`}TQL$dW7>+ly&Zjeuo7<J}XuJ+kwxiufxucB{
zt{R6;Yz=YX1<L_M*{IKP9mC^%^6dizeJlwEmZbi7wg&>{Q;$G6C=LEAt}8R35QAI+
zo~%aM4QSeSW?237KpOqQ<*+l&zB8`32uL_awuEpOUUfV=m3sTrL#6&7cfZK=Pa2%I
zd3JfWU%aAJk^NyU-(4yY*z~YULC*3cs`pJH5Mpc)G0ZIE;K-JmyN!rxNhd}5hGZ-=
zRUr4`p5wy#8ot>sDTD}*@3O5rKQdVxR9%d~cuI83%OXPIYha`7St2RnVNv+Lc+yEI
zxr%bxt5tgCCxF!TJ)GI#LWH<2Z=zJMsm|$rsi98fHx&9WX#a2lQW~HGwr793_MEBw
zg2+$hN)F65YJ`LIqXK5(7-NJYJRl1Jv7}UkAR-lA?=n+ZW8nIb>Sa1#Y5B|i-|*_c
zw}9j~4{eu$PYP2fCH$5{cI0un3)npe5Zu$As%ZB85!DU@afYJZ8>H4-mtAK#$cq>>
z1JB~lU_ow}AR-oipd|k=uIpFW%Gg2p+XSs<%g59SDG40Z_piaqHJsc4f{A4Vy}tuA
zS#ISek#j4{*mcdUK3)BCDEm^Gyx*bb)n&KcWFzoqRa>DFi?O+d-vL;GxtW=TZF;jp
z4<CcVO;gmWpFPgfFRVG}s@jRoB_mgRMXP3BZ?{!8)MvG>17WG=>&*vjnq31KMZ@mU
z#Bg4K=T}UBwSyxJKW{Hl>8`L1I<c_n1KmNqg$IOL5T-k`lG^iP-sqi7SHCaSe#@#w
z`oGwF%eX4j?G1R;L1sX)2qjIV5v3#*L=YrIIu%3&>25^Dpp}va0qK@51pxs8r8bSU
zG)TwZ`&~CW=RfECW;`=`zP#@{-$XXgexCce?-kd&*0p{Q2mU*b1)I{v4WL;Vr~bha
z!WZS)zO0HdA&Ppoa;L>leS$&b%_o{SMc@rQc(9Xa9(y_3Z@AR&#(CEl$G%xAS|H#P
z0kB;%J@dvdWA8!^z-VkGZhJ`GKjfSC-xMnZV3l6lfm!OOQx?N-Rlq2O<vKYk!YF{7
zh=kwSLZqZ=-FB1fSV;WO!~nK?KRG78m0aXHSu&mMhbaV^4JMh=bngLbgYsc-SPP3a
z%Cn-~w@Z;o)IDWkQ6u$)WkI<9U4jK&+$O=3r|WTVh_~vC$YT8ADP1B4rZRk;C(xEI
zK*$C4smKppClo(*<vvr0@sm5R<Nn#_C^lr|Y|^*lj_4y>=RC%rnb#^s``YWxH4f{p
zmrAmke*2ksed-rRQ7QHpH3>LWB**3Y@5HgxRt$>G&$^1Us0HBgw)3^8Xl`Mqzjd!}
zN(Ur<J<wdfDCeaY^!QVAyp24;V=}dikn8A~1Red8=R+sa?`L>3(DLLnVndM#)zI-4
zVGjagL$!ETK?f^e7p#&8l(_Qi)>H4JB?>($$9I^KRW<bT^;-J|^_;G69_ELyp4J{9
zx);#g2Q^Nsnmf36@e4Ve|GDG-Z|%>Gk$w6FwM|;}4dqWPJAE}i@rKH%Dr?$bCY4LF
zg{Hk~CMMl^Jf4dyKrZHGW3%Z8%0E8+UoLI6%dO&0Tt#1NFx)jCjcyZjKE?VOW_@F+
zZ`?hNXml*1w7uu>sUgXsfOJpwt~;uX+>Sz6DPxuh+Gn}pb?6%J^R`RT%lXO07?-9+
z{NYyG`le{zUpYC?CFxG<ZA^RP-Yw_kZ`GLpc>B3+5)BtZo!EVo)|RGd1XU40)m0CV
z(vS*w&!f^(@t{}mAx$0gsjpO=rFbg4vz${Joo%-XazB-rqM=ypZ#-WcW9IOyxCtXY
zoO-<Q89c{J!f$*y@W9*KXp;o;Uo`qwwEpLh{(mp|%V%y8LS3V4TQB{$;E+E(nE!dJ
zZgszc?>&24{aZWz8;9UOe${mz2nROj@-KZeF!<J%`~96qTWp8oX=7K=U;TssT&sWE
zA8s~?8cp-w_~~C??0>t!zaPKEaHxX>=H#9D-#jYK&&QQ-5n6?z#QER9=o|O&r@vx4
z2^G_kRO5fP+@CJdAMdGuw%qq_=YO``cb?pTw%k8k?!RuGe;n(7U7|lR=>Is@|BU(m
zVtDb-miuSR{XQE1qqy{+^x==K&L6GSzaP8*zoid#7ovbb;RIl<lH+3N?P}<&(;j`A
zj2O#5p6^UELb?;OF7CX-Z@!V1e=~QsXd`m<Gr4*|Vca)~uYdXNopVGq+803e(Gy9!
z_&>PipOY^`s(gCKQMhrr|H(4AF#(G-=G~qDPWSz*PaRzcNh!mb!@yB`#-V!=bsea;
zAfXfdSYrg$0s0c^t9|x7Fawn~_M)#3kXpG4b6=*HmoLgAU7mI|$7!QZHqD|7*Qt7;
zK>@dekR0Qmw*WQF8?zf}1v-nLI?vF{MpCnv&55w|-(Kqg^6iAtncStoUk_wEFfYy0
z-A*mMxj5TjUYpktCCrXnYsw#-zT~e1<R%WMH;)j_M;F9<Of5Q*(gg5J(@>QWQMHZA
zLGrJC*dnO{*Z@N?7{GfEd;(f8_r+o~a#D@ygY)~G&fu0ZT*WekN_AJ6Ds|r^r(Dc8
z>8<NZm;6qL`TJ#k&#|?1KCpBhjv0bOO};{*X$H;1wu2pXn}<R9&qwVxV!&@Mj+H;c
z?%|E@V}0@S_Wrfy{J{_6v`INV8Kwms>G&n<`B&H#{e>6K0<kJ%gT(A!IgJ9x99`RT
zG1ZDd_iOT@QV!Qv<B={I{9HezFT7@sh}Z2l?Vt)%uwFC?Ys@wA(sZE0-F!isr>e<i
z-TxW4wPD0sLX`PM>a{e}8q}q$-v?AC+OcqFrL5_AGVX4p9NvZ09Np3-Oa|r#C})|s
zk0;bX!B1TuH{&?9uUueu6G^K?*fZ{{5~B#GqtLXw4nLf&OiGBLEuPL2X93c$-bHP$
z?+xsKw~}vj0A|s<m;v;HW8&T(sF43Ux6h`A1{IUrL-84|Smv_4?sN_qtevga0wwu%
za<(+bTF@*C(GTzY#QhsnzAf2ug7IVxS+HjNCkxaA(6j1_r-05G#&$=Tc&Yo)I6uk%
z?e$tRLFiP-`f!m76B@psj~d3`&c7EeH#I9pY-vI|oainp?o^eNC%ik1$0BrK4x)G7
zN~)y`DI!0q_A&hr4BELe5WHhJ<1zx=o0N@NJZ_eE?&Ce(%H7;v`qhF5c(h!dVY1ng
zZu!uaPue)O+bR9n_WVJf@<PF|c98X2{UGZ?ISJfQ?UI$g0K3)K{af!Y#YMN4tod`d
zQL(XC=M8@-6^sl<-`mp|RJt-#JTzBH(x8Rt5H4#e3p$nF+|YG=^UX-G79~%=)m3g&
zs9<s|hnNF9V`U0zHv%-;y)GMr%T2fszPg?nPA3dUn|xtP2M=4x$Gd|i#O!6qNd!Jc
z4{nr}<%w^OG`TkRnHDa!o39Rtzv-GxJ<ue8Rk#U4l^r^c^d+ASLBKY*VCvTzIy#J&
zv*NPLz1=)sIj)Pb2MZ?*=i9se2V4DRee`R*>qq0K<EP2%+{dCQV7uCwYx|s?Sv`2>
z=H-&LCY~W%+g>unz{;BOmldXo70<Xbx-XjY-~H})`I})yWUG%Un^?GWwX2*#ysuBd
z_cw1~bbIZfz3K#qjya5b<lY`=6`}2%#At;b3^OS)&zd<PD@bNQ6F)*BjJMw$)E8!z
zF$4~sHl6EHbVAkY%b{<4-aQw?B;z;`UtR;#pEXh%ZOgFJ1w+f-*#;Ea4yseGueNng
zdb05fHwsOrPA%n^Z}hHy@O72HU06J`ZtS%1=vcM^u;*<x%$M3aCs9vUa>}MY)d4MM
zE@<A?(6E8BN!AFt`kOb8Gj6t23oTquEnELIwX_2yA0AR~sy=-X;58T{j#Ih3?DqoM
z*)q<Xmr-FeWuf)VkWTAFihf3ZuR{u|apqunu>GuAL(1i9DWx^E3zY@9qRDK7F>Sjm
z)SF8gn9$kX|AXbW5<t{_FN4BbGFnFqqtx7X*Zqe`mC9#@9BX2I1)i4Dtn@5oO@KO4
z2D<>hgm-KzCkOM8*2Qk~v+`J5_j4}s4BD0#G7Y0#0U85iW06$iPD5|`>a{JG6wL?c
zYxG-W`9=bGM>~clTJ1sFNyp!tyY9to>8y+S8kzEqj3#VV)6keOmL*Hnxt0u=AqObJ
zU0t|^PZ%*AXMP6E%T$5ka*uA+(}g0TNb{n`vPmec?d-=_J9OcgbWR4S966yPG15m!
z>m|+8`%=cyv}nG1_4P{mO2|M}@EbQm=OC}^zj2VX`km_2vMPP}+tro>m9-xC_gX7+
z8|O4|d$OBmiA7k4{V(Dp8Y#4Yhg4zzx?T=H2<=zNIqi6CAO1}PPj7%UzC{~PKAB!@
zvb_Efzkw~7e?XOu*?nTa#6r8K{`50wE?3Hk873+(8>sHk!)Q(#ZG7CZ=TX1#>NRex
zPk$d7Dy{QbBc@WUxJ%I7b##0m;^tJ3K7!Fjd}T%0<*Ie?4z!L=tV&d8vo96?%PLG5
zm&`v~#qDw38)k|dQ86hTq14R7dpLV8Xgg!QKfzR^i1i^5vRLlXT`^jRIx^kK2q%l>
z_2<NmzBx^N%#OX#PQi=yI-|QWo#z?2bJwlxQl|fwwETq~daeewq`fQ1Q?zgwwCU!e
z-RSPmR{D(}?4bUVvz9CmS4Ym_vblPCh4Z=XY#)cgXMR;I=weqho{T(*(Q=ed8+o|v
z(0=}z)wT}jCPCd;Z*C7z>up!XOR<+7gi*M*m&5pS+e;eCH%B`3@_ThK5w<8uY7boj
z)=0Hsr7~l2TGAkN#?UBVkVvBcjSHaRY@PS+r9lf2dq_M$OCh<P4;hmVdyJ-Tey^?X
zhgi(5_I1TCa&A8q%D6c}r<>f(%`T?Giad2wGB|8b?H)WQOKFg#Rw=7m=rB=yeNbUB
z$Mn#l+~hu&Ze#Ng1Qf{7w5y6q{$h@m=BYspAijk@S3DLq6%6@wo2J;d^l#u+hJX>{
z30<pt3nw86)Ye!b9^pQd0)kB4HLUslS{gUOZq27?W0_0}a2V_T{Be@%rp3k@E>(eu
zGIrBg{2L{}zwnB`WF2o4P<T<DmiCmH`XwHRTz!+;e1(*&FC50gK5|xRV6y&9qO9p?
zya@5yhf)~AecPyXiF>I%1US0_xDMU<1Yto+U!l(uX?!a}bJvWD#$PP4@qlvQ>ZCSq
zKN@2z@Oe%Y#V0zY&BMRIbS*DM<+XRw_&eLoKb#2WJQQ<&$Ifb3*LhFt3094QQ<0SX
z+>uV7Ywd>j?4j^iiSs~#hcI@H{e$brSM->S?SJ{<{@m9Mt8W<uj8ZL`%-OZLg3q7p
zbCfuP!mk;?Iykr54gqJTHt)%PqSWF(2fZ2Vp*EpVKCUu+=`5MQ=+swB$yqq#ir?tp
zGJ)qeW|dPn-sLn^86FeAIg6n#b%5Q?<%k^+Z;6F!t8{u!I1$nhoGQjda_H3sq^^qv
zYfutW+g&^BnY`6F^Fv#8+xD~M=)``^g%f)_qmWMqM%Aa15z;uBX_$SevQ~R}?e*P*
zf)=@mH_L6>RRirUzcspKul&ohv1qG}JvvslPZ&SKKG{2oPBTz1fxV!YvqlUdj&zMt
zc&V24@Y{l+#{PEI8E=fXF9((JGwE4~<u8YB$}F!Vf(kPbtQ{lr@_}yDs=EBBlEm9_
zri?!<a+!bHmC127S06Rz<X|w^_4N+xmEK9?*`7j6#F3~PCT<eqXDf3aexlmzywWf1
z!;ibqSFdT?n`^$wQFEhZrBlDZV5*LJQZxVY4=xz`^Y`XkX-bfBpvHA*+{+rBi1kRb
zn;Uot)=Eg~mS0^t9y<%oRlXkGCWZ05Y2cAj#)b}S)yVAE9@Mrjm|yoXte^KN>f$R{
z3sTovY7^IAuw9$*;eZ%#YDv^rU_X@+I0SbQBvq1H+}PFGjoY#FO-e>-WT^}IWZisC
zn?@~=V_P<FVa>k)^!MAWj#C`MUXvNcY+*K?WXjb-8#7_0WwU*bLz$vwS{h??xYb*!
zAO)Hm<P06jx>2ReUR)TBGi*h}%_`U3$#fub;c)7BKWHKA<;;ZI*wpHwC(d*zOq}|O
zH2+-my}=4k_9U);sz1q6=I}YTV*^S)8~9hkyLlPo-icm#V*km^OZ@S@_t8%oMGrj<
zxgqhu>&TgtHzMl}5`{25J#v+#KUQSGk=o~UP}VvweZzcteLA;BaoTX!p%;_O?kLzK
zST>`d8!SAt@^|X(EH2wC$cTDc2*}d?9?ZJp?9F>~F{3vvp!cr|<nm~>VaA5QQtKnT
zfx@xRH_zq|5GBp;#%NNEMcJC9M-BN13)$eiX|E)h^xByM6W8qR4#dcv!d<CZ^pavP
zX4$~zz0R*bln@n(?Sod&Pw%sIH;sJ-bNc)3Ax|HhDb}56P3pu(mO4PXr~MQQeY)l1
z3rnHEGC7ltQ8zBNhCvla^182YtWM=L4MIcpTVk)(sK*C%0~M7T8Zstvnii8Xx=Yg-
zcJ6)<$R8QghFMZtzTG?b_!wxrMzoa=r5Ee=+e~No@0qlb@H!|Yu;J{@)&7WWW0o$>
z*7!jA=DJkLdL6U*G#6&Lx?rqqLpLMOnAmB%!nb-6{$k|h7Rq#3Bj#0vy59g1=!$Au
z@qc<{2N@x8XhX?;=1q{f{gAL?U_L9jqQG1IM4avbg|@||)}*T^Q;?A_SgpXB0~=Pc
z!=!Sz`Wt@;_`NB)>e@DdA3XR9Tl@xexUO99c2m|q@Q}vEPAj5yG;yYP2!zB_GN)Pd
zd&xJZF^tM%pegAc3$&pRu@@CP(xosv1|LwFzDvtFY!`@<;cI0-;~)_<E$h1dt+wX>
zic7ILxT)nDvaVlxSGnsxGwCCn&yP<I-~E-APUxr&2&8J%-z&25){mkIDaDz67SC#y
zWDcCjT`@?gj>zwi)N~yWG|!r^rW$Koo5pCzYL~lk04)&o+zu5wsvBjAX;@BMe~6bF
zd$zoU>0BBdAmZsW6Aj1AhEJ^vuJqD5<{GOHcr**J&-4q+&z+yoZjs@yDx2;W_dVvz
zl!FD~>4UcY=Hf{|J%YUD4QdtX^%Y<W(so&sH%^caBS+i0gww$)$<JLWO<jCeNdFB?
z^im#u#@KQFJ)j$`JbUVHhgJ8iWw?4D^X22SF=$Ix=x#On2wkC9E2CI)8<)bkJo|vE
zUE{MM2JAHA9_O~L)zu=9+{yHd$}{Cl)4zir{@i{3afJEmIR(R^R5|~<<oB6b*2hko
z?nLBiSs@&+3wApH7T8zBHA19N75y}>90w|sj-y)k)46Mr)<l-8pN4#6Wg@z=aO(|3
zB$N`b2|%;U9L9NMWKATeyn)Pcf9`Dz+btoOf@bW58&9~Bfy+kpdvWNxATkVQ!a^o8
z->DxZ2F<9tVCcL>`fq?bs3nX_Jn?i=?RFa3ZYpjTyUS#VH*~F!z~dnUDVFWl^*+Je
zAK{#MN=BEQb05SI3*t)?+x@D^(lZ&B@ccGJKcW8Yq0CBOhBLz-q2b|itmEQaLtDYQ
zR|WGg%9Zb_hJ6WS7}TS0JQH!yZ0B<M5r=lJVJ`!bECa4TJ6&<C?H6U0H^mTXh4Uth
zuh=<tWZvq1A>Cs!`BBBZip(;{VWDCEL!oXBLN#rs8;fTjJ1_Uz?rZ9r+q#8lBe%gL
zL}D>S<K@<q?cNTqYV<*>hDoRI-M8EScQ?iF!R<EnYv7dT7c$DL*~@X{i1<sIF1LBI
zp^U*ShA;g>LB-L&KzP5bB(v?Tk<K<ZOz2(vZiYegmYCD#2l4rdl#J2z+0rH<bBy2$
z+u$Lp$gQgfu*xZAR)hn07{E}^^`(jHKV%ij54ar?#*zx-c#j!klCJ7*hwZFz?;-mM
zD-EG*=XL?oXrXT@k#7PW!Njp3Ki77x`o$Mh`x%ZAGw4v9#F;jR-|8@PPt1RJy5I*+
z)K6|zmp_hayL!WTAR)uHbQ(AUjqWUQdhIYUrz=gVK!mI7=_P;q>ad}Hulzo0Iy$Gh
z^QncSp;^~Gy`L*i0-l-Ynso6D7ulAN_ha{~AoIY#3lZd}<V>WiZ_DuY`2G9&yZcY&
zGJy+pq}^=XWQ3LSCsvktO;kZf-m*KNW$XJgj}ynqxhpigBH}J1paPfEiatw9o%YP#
z((3%aINt4q$VcIp7d2B>d6_a1Q%={fWQtf5t0ZzwchBN@_a*&in?}zcc4s2R#+kV<
zZo5^ubGOdg&ZV&!9_b%?9ihkPu)b$>s^5iNNl+;eAyV3#F6VFaLE{S-(M^)TgAg`=
zAiv87c16WGFi>|qJ~;hl8qwcf+25bCa}DIH&;m2q4|!yemSIw&=Fw|0d}*oeFHOrg
z$|pFFSbn8t8~U6hQj*Yv2CFA7QG$+2o0|*lS%6QqhKoI8{JzEh@>i#{x6{dDIVajS
zu7cm^F>FgFLmP2js$4nvs76fD)P4J{Rd=Ig@Y_!2;UfR4B2_hK5OQ;m-R;^LJJYKJ
zeuS*)X20**;`~X}A%79PR?and(qy^CGwfK_N8GU8?k5XvUH#SmqjEP3D!dM5onN>q
z_2`b?57{bzdRNkV?pud7UdMioqgW!hS5=bTY>K2ohAZmkyGOfuZk5@wbtM1LmXhCo
z;G}e;J2Q%?U}Xb0lGrqIUpQ~{;uV8ypAmj}19CY(dsJ*eapU3zA`M-_Ip5NP`EP-r
z;t@FkjTjiY{=~&&J9+YReDWvJ0ue=qi7!limKX@PgWh}R8~sUU@ZYYFcDvl=a|L&6
zzBV1Jq!K_#(B6I9{09y~^x<s-L<Ag37rsP!tqSlXm-X1YupcmC3K4hA+>>)!4}4wb
z-Ef}@mC_tPLTb(QLl1kytnzCqgjo4pK}E$9_m2Sai9Ya3l84ft{dS{z=w~l^@gG^w
zYNB716SLIy2ftk8+!2&zU6KDrPt1RhulwK{<g?h^Fa4^SZ-^lh8Km3x(+}L|;rq;X
zzkE4jZdGcqmO7=S<XcUQ-+57@{b05C`hP8Ro|7hnAFtXrmi&N?I@k6qtR<h6;MaHF
zCU*{ea}Vj&zmw+v=DB_|C&a4oup&EosK0E^Of$5vG)!ZEpv2}j!2r1)-;BrEuNP6I
zho9>htiK+r|Gb62w8Dm|aEK_2t?6aH><`kTaLv6ZtbcoszjTp*|M06p*25at=lit3
zHrq>;z*n5W?fdDkn4UlTj7Y)VhhKN_KL+U^gY;c{9c|Np4ATEA4O0As>KFibNV`dZ
zr!Y`Sjj=1wm|xqUhQ~z1Y4L-2p%6erWYVFWAsIrq4Tq4JBOp8eVJ<KP4$5o!8A<gV
zrr#YADS+X9y+h=S{b6YbH)%Mti~}M6N6XXQW8{7$cwg$X7G>lxT;OCC$mNAh4kf3g
zdw{6hJLM>@-1*8q!qm`0UMpP=eYhNEA72q<hof5eSd=R*f<#ga20hT=4t;!@X7Td&
zL$V3qVRpYnQVfh>dpVrxn|TCfBLx^=Tn^c<jUSu5)n1}%R63%R)y$OAT0qtWa+shd
zL8gt{s7Ja*&mk4&GTBYPh0l4)L>E0^j<biUM<(djhs{jN)<%Kgl*U{o=}H9??Wtg9
zqO=kZjRGBq&V^P;XPfgxACh>Zp?}J=F#Jra$E<R9V4gZD88|(aC4xigevz~AutG5S
zCH)z%xz6P%q0&~J2}}kZ<NNC{h2gO=l+IqWDb0TGbF<8&*d<5&BWw__^RDHLJ2e~(
zLYUQcy}6!4SF3q5V*<I=PdR*Z0)Q%+p9^N|R4B3%Jd6{%C1?FC=qxfP=XUQ)OdlY6
zoB@wA4|)Y7$D4SEym&{S=`sa6<FPBTAV6Wigr>A1*&HTgM;PgH<NPkM5zylI@?<Y7
zXtwcue%H*MAf+t2f~*gO{SThHb`Hj*@)NLM16>DSm?K>S+d|EZY755tukqL)*|<|Y
z@SLL;Q$jHjpkqH(xM9L!J<%$u@9^q8VU;4_v{LM)R`J#p*6t@C?Dm`yr;e14ZI~&p
zc~3~E)_V1{5IX#=hutQq)6D>HsfpH!IS(V;9-|o+^1ZF}xvW}f(i`toW+jtxF_4tr
z00qr*3C4RTvkb@Zkq;0N+bEL**3$wUl^Pn`9s%hR=+Q<4%`U=8t2e@fphGnQg@#{o
z{wNS7Vfx1zS=|QH*kEm!vokRIMuTU(w7bx9Y;9V}@q3RWc{Icm1doa{i)Tu-YYqw;
zDsWGMj>A6ZjR-2&UcKO3J&9MG*4mWko1bx*e{jd@c44&jt(SW&GYVGR2+5Z@#~eyP
z5`odAWMF-Dg+lucDkXSxcil?gc)#^hf;7+q%?*0817uDc(j9J9u-OZmv3%AO3I*4Z
zUNMXkXU>pGQA!&Gggqm(7ae4PN2RnPK-x^)pI$n7WXDmB>#t3u6dy99US_?WyI@ux
zC!fvKK{Q^D1qO~i5!sJUCptJ_3r1Nja@&+VVRGqFRPK@Y#6#`*5Sm6h<KSS@vQW%W
z2TF|x7~jVwQd_(|@}b-nFUCQp`@Lzh99qNeG0Bd(2;$AdTGktd?xy5?^nu;i8_06`
ztuI?*>LP4Agg}+%NiP*{@k|!fwiQ=KLg=>q$20w{B?4&UVttV7CYFr}W;J<@HiQKi
zgZkD6TOJS^PtUqS*ZLLc-?!){p%W625tx6oU%}JwH!eUA7AAAnfC|J|r_FgD()7%0
z?kRj4F;^30&{WxBX{ecGc!7ZpK6LOijCiSmvV%4g=`hqLe2CdgGFu1TnOQo<&VR4X
zAh(4a)U%dE7*y`eE6hu?+pK1KPVDS;xLwFx>;yuWo7qx18_taa%<C|rD#ThCSP!eK
zvA)@dAB<8N?S(l~E-bmN@_Oykgo3Vcn5O#Ra8n}G92(P4(aUU}3gx;@3#wP=oi?Uz
zJF$!2RpViW^-Sa4p01noHB;>#%-qnny>=B5uwF=qDH(Jt48+#@54AK2d4~u$KC*6C
zJ=uP{orNkRTb{FDHbDk9;N%5Qa;hpM&XWsxL#BaYaM$GsJ}#HdfrnF6As9{5(p#;G
zSM)@SWYJD0z7);(koovs!R3x)Q2GpSK^6(k_t1y{atpn~()y68ORWVA=X&GAKciyO
z?a5ZeFnidMZ<i}foMMTKc(!r<KJ&ZM&YqWvb%4bcW+|p9*;lSiV%U9n2Omi${LA4f
z&%)b5w1cy=p=R!qjEcVp!TwH;AH99+tqje-J+`NY15RJsi)=IZD?mCyoH?cZN*9`;
zMWM9;q9~_L^Kk3-kogMBroiTL$HuefgS80(>&pXd5&Tt&P{y0^wHpoLO;yj|D(OtZ
z@nI%8JC(^h{Ax!whLGAyuE%UhTCa}IRU_k|1s>a3y76FF14($<X&a-L{kBn4U6(+%
z58KFJuFwthwZzJEnmm3zKp#+K+cRH-3OE5&*>b~A?jH6CMkSwUb;25$$f-K2QR78R
zGZxvx)0}@lnB}3>B)NXLwGGhLCOm5o+&lyxF0pWXo1jLFD;~EsY3a_@Oc5d#hKz7<
zE%UIugY1iu;y{9Iltp(QluZ!*qz7AfmzsPjomg2VlV2`yfCxy#uHlxAXYCI}f<G;M
ztx?770!}KcO-X$uw-l-_&%v<RW5ECZ4~~c{%uC5?S?(TDTG%9JuMSc-6~v^3El1(s
zq^GG@p(3G4H&nH1{0QkhimWF`CrI}wGjyJEXWmsd<a6soi7L`QlfU&k&R57MK3J7L
zV*;jukW;0WYo#|n^cVI(!yWAhh)zaY$%i}Q2<)f9{g!rE2bU`qw4<^Y#YOMNYBnuY
zq3_Vo$gVu#F%e<E-1%W+ar0iXtoOlv4{0sT+;!8lswp`p;)7%1by=3~q1^K7ZNDn4
zn7IR-$p>4!pyzHFr@?+;I<g(OhQzGU_(~9#jqC+hj>~dC7~-3F<GvDmFY2?|@A8rw
zp+X&G3qo*_p0K~mMW#rr{YVB9?oFeaG~CND`ZyA6R5D-vAzQEBsHd(D%7CQfna)?x
z7}A{bC&w;&J%Rzw$Etm3sGt(4*RGu$R@Vcu)jDF<^eJ%nTD6pjZp}^=SR3{)<kO=W
zWWUX7V8Yls2&UC1>1sl?ev~u0bQrfcYhK4uZs5L348@g(bbkg~c-2CaFdcizoXBX{
zy7WfT>z!0@AVv#53(_%XVemSSvSv91AM@*z8RF}vL@|<j-NyM1k#3w#aA~1#%;0ru
z8h#ru(9URV;}r`u1?o=$#GsbO%ns!Bl!plz<C?6*PE5DV1G80G!(0rRsp3tbET^<C
z^a7PuBMccRc-=}fn`1S6)AisYBPKT*c>3RknL6~(K=fF+0l|bNK)-B-7+c^5I>98R
zLX0@A{f*STE<-Z4et6BDIZ6u1n5bAba4{SCFY^obkE@2l0H5VZ$tD9pYqQ4~r_CMm
zzAe}D?+C>24UW`v@N`u-FmR-3rkDHpwOp~eJs$E5=b&)wL8h#c6|IQdTxj}W5>+|`
zh2q8uy5=<X#VKoz)B>GKyUB+9!PcuXTb2IaVuSY$S+1D$LKi7`hu7T7rwjFgF?BPm
zz3X-r$e+@d%JOr~fV)p^@OwyGmrlm63#|n*H2BpAgO$a$zRZMLfmmD}3@~=-ch2sI
zi)^C0_*CBQ$(|A)f%Rudn(df3-gl+X^GwsH19Yy7SK62F08@_2q=b=YSls`lzVX$M
zqD)x!BHrab{is9;Nq51Rv`?6oDUIHF(^48~j5@nxM0mTF?ov-FtvC(MG{4m&MJ27X
zk<QDV1<rG6h4;)fi)i<{(s3ppcKuSGfBg$OAy%vQ4{2=Psyh+kRrLZDCEeog+=J<-
z{I*DwtO;jAwnssNaJ-)HWyCs=qwiT5w`{{%Ju6j8Q`4(Rs2qj^=71D)o4v<@O@zjx
zUP+LNu$X*t$~{=ifzcKZr|%JjnOwGW<)1EwDid9j&@-tZlQ$D3I>JB{$}quB!znvJ
zD5hspN!HwtMT6ytl@e3qN((=M`m{S4{M&HZelSSg<nir{(!Ay(#`}X{{~kkppsdD2
zU=}9?T7&CEle9J+*E`)dASfM~Xpk+ai1ihs96!sT1@2E{;LMd06C(YCT!soW@@kVV
z8`Ht=N~CJ?d#f_9S4t{o5KW>m^{HyiNQbU(L!Yo%Jgo1NyOJJ~M0p)WPY=J8iQv;4
zI4Cv(91`E@ybb(y!>X~*i0^o3+m68y{m3LM4@gp7!+`)7_<&!b>&f@ljtrl{rlrig
zP9~jy<NdiSy~uZU*-q^(#vA+I>d3rasJSS(ky@}e>)JF!XMMS;U@^P?^Mp(&Cx^}I
zEYInLxx4v&5qqUra}|^l><TK@8$zoV*nK=;U_4s}HYKBsawD&oxj5)9ReB*C{(b+U
zQpXzO{N0T+!bm>5V92L)mdu@bQD7p`ZgoJotam-N%z5Z#A0EF~y@(r)d^UJEZ8<=E
zRT$rY3nl?8xz+%I_3;7WcP`}%Gmbh@FyJ<97Q50*agr8a!}IuS-CWoRlA@(s#Wl2@
zv*VegpMq;fX)a4YyprFivoPgC$?Tnk4EC$%2NGunh%UW=P~!>Cg)}hCwCt?BnMm!^
zieK1D7n^%Vq}U3NZ%|nQZ*(MG(|#ndGiLFr9^3|+g+0cWaQMz=l8+!8ss5y5ujEcL
zg_oY=?^hI+H5F&vrk@TFjVy7o4-i3+=?&dID7{%IqT#c;1v5vv?J=YD8UwIA9<e@r
zOtW%Mda@Qoc?AOxsF(zJqcosBK}*g|Y<~W!=|d9NpRWWeA`yL-kI{ZRmi2O@qRiY;
z;0L%w7{-{0LgL7d1+`{}Q67z$<kS?)0ucup;J-!5H@S+<08a53sZd8B_OtI5{$ARK
z0uO{rZN}oGmO?G%IKK78vx2njL+XxKF@ipPd_^mtAo%P!Y8uz?iWdycz;L2aUNh=*
z=U9BjzUHOD>pL?_IfO#FOe5RaY192GcGmIz5?pr4zP^Fmo4suHC^5}e;SS~==uhi6
zgpxIcriXc#H`g)O5aKsatw`6v7BMQTtuDj~t(xh??Fczh4<g>Q!I~DAZ0tJ@$X3h1
z*lp*lE9u3XT*Y~aE|YokVXz^O<MLF;jaYKkQ=*|Q5B=%&tv#Afx-)w@jE_vIS9%7A
z5$>)dDTv>Zk+3p;02mArO%ZM3$e@oZM$_MC4hK8N0pfx^`{6o=090Yj9ll4xx23_~
zvt;#=AL|S$pr!=|sIC+k4NK{yJVA%WM^|Dmj-<o9H(`>q!+!Eh@^3|n92rz8c}%Do
z&s~R!$Uatnz=ocWub_ZQZ?v+4OA0flcJo3+yFo!VuI%bsjWBK>%%y0u_FtzvYjLBm
zwRy~=F@nDa3`U487F?Yt(7l7z#A61C#&fPv@~7q6U5et8zb5KQ&N>Kwx@kG~Mxtmk
z9%fEg0i8v0RJR*s1Le2<lGG2h>gv$j>4$`ItGXr7h5{1=KFLqF(5B}!^64!*&R0>0
ztJ&5*-A<>LXB5(qv$}9KyKnP8b6k@J8uOl{e^juBQR4ZhGyOd!zE`8h!YyT%y%L@-
z+f8+3*=xp?vNJ*Sz)ChMr`V2ymbg1lpPvQ--7|qT-=+si$A=a}vJ<Be(vx3~WnJMb
zWryv8?U@7}|ALC2d=#>NOUJr;;Qu=vGws$Oe9(bVvq`9%oPB)l^1`L-`r~Jv;V4K=
zOFOuNfH<pOnfBPtsMhZ+bIM))`95=NKtyQ0{fm2dY<JO8LnvEIKu<c0NRN+o9hd4f
znGSKAjR~#<ogGZe@1fp-+wku672syES(_cG2ksXBjJXcbE0gu|%BPy8hU)4GZ>&J$
z%ZFQ~lj&f5qWgs$r$ewVpOX@*&Vr}t3Z_Uu1$GUEs!AD%z&2Y&QbI<z3G{C!+?p`{
z9h-69+USSGE3p!jypvvMvTv7egzpoqUsD=6R!p}q7Vo%sX@MO_voz7>sqKnA(XL^f
z+p|{_2B7*(ncpzVt0EU69sPV(5vfEGi=urDjaV!)f=jK`;(T$qx5s>k=OJX=lLZ!f
zG@Wb@<*k+%(un+2985BvaBmGTp4v8PxARHUz)-Qopk6>K<Cj<Z4vz2LhymTcp=$5?
zVi(9NYoI|foPs`JT@s^ZH{f1UM4@GOo!V*cb$ni42{?IP7v$u(6C;d4!cr3?*K(Ev
z-I<-BlLW|b!4htJtLk$>`xN$}X^5{fY-fzNtFwmlQk%VV-22C^wtSgd3e5|F6G6LP
zc0lx&GkKyOyn0|mq1`1dP|;K}=@nZ6<n@3!wfP0D-ebN3r{xcd*KUQY0F^}9o)sj{
z?{{&$sjlDx!63_xW77t;r-gy^nSnA=`Df>An?VxXs04yZK_#HVo?eOf^TcnC2_GvY
z4}^)h+epP$C<3e}@Q`aghVYi1Czw>>>2|3)W@09d0Tg@!OC}hJL_1c?zg4~hlTS^v
z^`{_$uTR+km}(STEdN$0@%u>Inb&^yXmp9Q<gL5AZ!h2#8Y$8l<LbdRrJp4Qgr>6W
z7N3ZJzDvFyZm+bsX8P(CoO=qw0Nzi^ok!ElmWw{we2P)c6{#enmkvG1zd6FL8Ya4j
zpC!F$v}<a`Wo*&Ayx&fDc|$70%hQ{ukC(>@QleNbCypYkF7^~#!`YUhsWNBgFpC+S
zJM=ALg67lu$gJlks7x;`j8ffDd_Zz&e+^CdnGA<}J9j^CFew&$=(7P~>1-qc2Lr-Y
zGd~d+iU9A0P=av9GkA~C>fu?_OY7I1-f`3nC&yJzh`H?=KV`kXbN%_#3QBH(czY(%
zz-(H_sV9z_N<WDftwEez18lem9$&yac}WE3UY+JSO>hK_+N6a&R#H~uL!&;i*I5<i
za&|i8@8z_T7&Hc8bh9T|xr=J*^YU5+qE{kBAn?1>0!AkcV@gC@07StB5oQl%2sR$Z
z%0>y<8$TeS38gUdGkIb5VDYK~7`{W$N5GihPi0!dv6F=QSxVI1{qp4}>cuED0|*#N
z17Ft23a#BpEuJaT`z(ZAY%vEuXrP+zeAehlZ#SfN1%OG_8HYwz<{5Wa1Gq#Dbi(kI
zBct3J*UzgaTv84OaHC9i7XSRIh?s}4c9q-JOrUH}`4j70T9H3|f#|`Os`1}PY{}Ek
z@d+ylXq<mlakq01pr_TjYCx;b@2?&K0(ly6J{vL^PJM(U?4>J3{UX(9ABBe973!6K
zQ$aRPjU!8)FWT4;-C5%L&;G(8Pig3T3aTD(OiyO$qG1*sy4tl=MR2SM0YlUh#Pi;8
zn2!&x;t*V@Bw-50C!LHUwe7c7){}ZyjPF@sf1|_-#-(&^bQOtF>MR0Iv}{>#oL}X#
zVI7*np@5oh+>$90e;pt)Xd8dOiJ;$~7&AXMx#BEmmf!?YLBpTv%+gkpd(DLjbwpTA
zwzJyKF2WQNU0*@&m7?L-cnA>RfOx(d(Z>A)G9bo%aX3By)`z2xngEwt@Qk7=PFh|U
z)2s{8Wr^3nR!P;GxpO`Q+2TMdCcmyAFvP&gojSJ)#wD2NBB%n#Drabs30-i%&x|~f
zIZTuuURnS)A#@6+t6lGBoVpH<8&YS2BXQU6lj>YiK%Rg6oRfY0jZ+tsgVW=iWW`1h
zoeBEcI5Rw7HZESh!gxr?Z~JkG&5jV5^Z*ano)A|bCb~{n0ug>ydhrY;1RiON4Z^@i
zC$1>E^|bAT#u4{0*zY^e77xZS>$wH>EWk2wq7n9z)87epshDlAx<}@5@shsj&nyb1
zg+ONE(L65b0+Qq$!2X<y?)6|!R~ex8neIG8OUZXU<;>i~?ZM2-J-z@pvypsiK2h9W
zBpt?^d?(s{H;>W2$<!Q~_M4DYnNT_14mV#PS1lH&r6Ol$DR-J`zloW$#(T2)Xq_k%
zD}*h>0XTJn4^6hs$tVZ4@Rkhi*UJ=|X6H358`@N{q<gc58u^vGYyh}?1THCEp%g`g
z%^F$`<MDP5Z{{Qjg*@xlu<Tw#vb-_PWm^m2MsQN@Y6Y1L|MW{V8QEel81$Re*#7bw
zgWcUG#l~z-F{o59Q#?CL(ve^qC%a8dEPgl!mjg{B4|c5$nYuEKpR@6$75w}jp8gO>
z>#O$V0(^P|B5L*V(Ex!=;EzpC-Ep3mKdo^c<~w!9tb0g;se#eozQ=rcj{=$;jNw#0
zky9smWPs>|=ze)WQ9KUIJjo~jQzZ-|4p*LqY|sO?hjLe52~qjxXDNi;*ysC8IqdYP
z1Gl3CNa(wis}ct<)V}vl{zaJ~^a7Dc0TiuthTlF3OfLnt=9BGbyYfx7ulv;ij-$Y5
z_L#_Bg@P-I4Zd(C)1c+Wlk~t9{El+$vU;2=yGLCVZZSdSW{BQskfif>)jQmn_A@Z6
z#3bI{Myz;WBb91^NYS+Dy<<3Z0;T4CmMk<cU;Uh-Qgl~T{@8;(zLiBZPun1XOE+(6
z;He2<ys8tHhF@(TNBQFn>+<dbca~eQL2wIE89Ja``>sf^#Bl`>V{;Ab5wgz76`|EA
z6)2f~e!#-65wjW&D#ZKm)vfNF`8+CQ_0|sri6c9wJ=qF59mqFqW<}c7wIWcolU}$U
zTA=evPc<+QkOtgYb9r|{f-!voV?@e{wr~sGpN{4_@WKYQAU1@^rf0ps-1x+vCfiT%
zkD%I8NmWAT{jCr^e$E{#NJ5Sg>yoZKo^>dDSBDAeS{q0t0p47&Evq+(>-S1NL49|Q
zQ(5BaT6`>^rTVGFMiDwpMCf6Em6epi$MFS_x)85Bs!J49AY2UN+7(8saz*0OHZsP<
z=ZP>wnmKEIB88%v6QyyhVC4?Lt$Bjjr@nFXSP3-ujpVXJ<#M^yP6dh_tV3X>ldaxC
zF;k9n73>Km<D<ie$ZZ*KTZ|tn0*niR6bzO#iigrqWweVONP#VZ$E`rcm&W$pf?-dA
zIjBZ66ZbGIcBU*|zw)h#9>0gL{=Fa?T}Qw~q{KjZ`ISgpHnDP|T9a6NcT|4Y=@&8)
zq2Bnnx|KS?N@;Zw^`%fNIvHgrVpF~q&EDIoN4Vla$XT*9b03MF*G(Oxxu_1&-@;6T
zbb*MWog5~8ek$i!EZE`B*G=fK+u$a(hq7v-7`Sdi90H{~$JDaAy25oj=@3dp#&5%o
zp1=2eR@K$Xe`!dT#Fxgli?Pqi(g|vkGo87}9>oHf5~OCBbho{GAu%?4ISI9(q8Pfw
z#y~5~INSX4#`@&c`fXD$-<u6#?AiL2ui$A_nh6Xg3q)$~++AOqthxW|f#<+=G>1ie
z<4&RVth)}-A8z2g_m`vrI^{S7<4zhhi@`?eKn2;;v}}zY2f^Z4TLhruN#%|w_I%0!
zsFA~@r{FGa)MDqg7HOV_lrWMC_Ny#YNlX=Fbzzrdj_gfx)*B!a-kcLn`UqaN`VACV
zH2uVg%0QB1#lrgP-Zv1tYTxWe^mY_`8_YISG7-};OvK%QJH3ZvJU#>&T#{88@iC2<
zTl*PV1|w|y9)taRQ4#G<&Z>4HRJpb(G%0HBSLH;e$>&Q75N~isA&+^{hgx;ig$GK5
zYWXHKU^=goSIG5^^-9u_ll?iS`R|+J-@}q*g=oKP?$5Uouqe=!B7USsoS>%QTwTHH
zbI<IvsV_g*aeOWutKTL5Ovu?`DoZ^~V{auFMw9O0=1R9;lfaPIL8tl#Rl2n9mye5Q
z$`V>%=b_?@Cf_uLKCt@3EhY>Qu$PJh^C!Szq+%sJI46)ZX<EXFG!x`~M%<a>JYXW_
z%^rt^=+uTRP|wD)moUt#r?fbz<E_V7N{$emy}Z8auL7<l=hS2FG@HjL6usSD+;qsi
zIz&Hcy?XL?I^{tOv<mMkvNl_uE>F@hU%PYAY&^bmb}Yj6e7ITjC3{Pm0V4kCOlQ<v
z(7D9ZZ_m>XjfP_DP6rWKAeDVi`d8&=Fiy@WtBTy7aH_>^9Ey`QC|5$mGmM8IX(3}y
zFVN}Bd*K%kf5~ObntK+%xe$BfmI&Vsgn0%#97jPd@4`FbibwJ=Gsrkwbk02pisCG$
zGfhGpMx0Qa!#JIPz>MNwus~PdD=-r)uMYdmX3KdDjsSDwoscl8yo}J=u-)KeJRP}p
z?TO$w+X$)Uk`0J7CAR%Co>SKo1dx=0*Xw(PV@2a&dLZUXXf~m^Ss*fB8yD>k$(Nw~
zPj8{9uV5JY6|D~{63PHCV4%sFG(nm^2T6vw!ycsTQ6VVn#u~wA?E&>>=v8xCkc`^%
zotuc<>s8Os%%lzHz|Ks$!!9z{7%q)7RqZQnNH5%hH4s4vlTFX{hqqb_pwDNLonxTa
zc4+-}hBqj0+*pu4vTLZ{fgixy!l@-N#dNNnqfIDm&B09a+$M*bDh$5MH*f;6YyF3O
zo_BZ2%e_wIU>9pyYOkMYG%gTXe=tdZJN?Pn@_ehTF0!k7s#gjsP~Uiyx^am5)eRDw
z!B<cRR#etHAr#KZu~Wn15}U+e!H};nG27;`J4XX~`l;!lZ`E;T2@*xJUJ_veC6gXr
zdYMpCs29=73NI<xxS|-EqNXIk{Sq2G@WF5_!eV;au$z0iC&k#P<io}J#{0HIk85b_
zY3@i*S9>|@JrSnc3X)H#M!x_AMi8nj$^r}T&J<1;K@OvvQM&9wsv)<Puj~<AlnYTW
zswClmgD|3Az-robzzKlPg)*vSN2T-wo@f;Qbi|F2_ASXRiojM37&P^{SpSNH9)tt}
zpWhzaD&}>uzXf9<Q9EB3W(P*f|D>!BD(7a{6KOEK47cerm<O<WBst-g2RKW<4ErwM
zm+X3hRzJBQRO_NQCF&JB=59i|r(MEW63P~Py$9V6K~iTF4sI_{#{P;sGig)@8lS_s
z3r!NSU!Va=l2N&mcTzwrSEp!5;Db*zj6=bxVfz)2hmHX&d#Au1n8O&8AR_sc#hCB(
zW!H9<zdimN7ohCt(Gw~$x6W-NUJ#4oB2Pbsf6(^gq17{JJ}<5c8>&&}OCU`>HTC#p
zEKE1Ex7LPAV5;x)JMP(hlE!rQMk?gIate^m9m(Zidvjp0&vB-<2z7$)D#QAm9@D%6
zE^ZEz*QzJbK1-~^km64(=mVUcVix{5m69G{V0{>S*}}BAUay_!302_7Aiy*_vD<O+
z18=tYie!Ygow<V1m8ok6@w*jJVcU&~BJmO+eRrJr7_=2gct75eptFN<%1?^hp=vvI
z%0V^$x8klz>FS^-N?L9lAr{kvX@bzz(;Z}p0|~L3>knyyiX+Q9T>#N1n67~W1|>pu
zw0a>Fs^XhW^)FU}N-qM7!Q8NzmXOlVL#7pcs8yjv2ety^Plm{wO%~sHc3zADN)_Jo
zRYIQecf0_Y91DfWmg>nef+1^)Y-b~<t!tx`z`%$DO@}$W34jvn9XofuZM)<g@0^jU
z@DTP`P4;E^_u}(oLTzE)K(M*4c|(n+lFVZ?NCeZou~pv(a?99uWl5nu$WfuZDXUdp
zN^v={V2f?=EwA*4zD$l_`@(@#InI(h?rYt@3=l1hDNm~<nDWqa1C}z=Ii|BYnNbC;
z6$_)!?(UP}TMOWwnyakGzUV>>ll3T9ErIp7$L!q*kow0ah^xo0j5|Mv7~CF9+nRe@
zU}Ng-R2M2Q16?plJ}is9oSLR<I;^eO^zD23{{5P*=hw;moV#ZNO9j>ft`3D;HnFw=
z9mr{)e#D29)n2p_JY%F@@0VWf7<#YsP)v$DlG8v3$}Up}mnw+u^YdUj#Ofql@r9@}
zO&*{PA4s`S3LK$&wo=Y&Z^w9rOwrGR19ASxLKxAyWZoh$lrN}&<d+WQg6iGC8YrQn
zF&bw#(*;?wB*7ul-phnZEw2H7A?ZnY<&H=}>CV8Q(Zgv<T_;FW%dKlmfhu*JoSTSb
zZC+9XWXKf2*?G&Ak!<Epy6#7kmyr7+`u?Dvui)~dFq0xiV2CKryab;lu{$697jpRN
zzA!@}h=`ZL^v+XbD8erbU_kn;3Ph3oZ<hhXM{fgYO!YyXdXPaO6r38UDuv7Au72_#
zMfBp6f!7AEu>is?i%KrAr)(v26?G4qinUJ%489lL(?CplDR2ydDk>DxML<0XxQ_>S
zcvSG%cnAZ|^n5Z8a34Q)WDRLd2iE=V?E(jH+jdKKIkMM8VzERj&m8g3$$<>ln||@-
z<@3Krxvm?qT%DE80^XSzAH!Lm5h&z%W#F)SsHg6O-ALfri}9mLVHGEYz|F5h2`@*~
zPtW~m08f^c-F%L$us5ClyGLM|UDH!xxFw$Fg)7#Y)2Nl9T}5|y|4$_nHvQ3X%h2&j
z@6H?`AQ6Q#NjMivTI46m_Yzl4Wg0+5I|r<|suy7<q4y-N|H^njIx+4Z9-wR11IekP
zo9yMA7R!gCvrof3Y+jiAX4zIpbTiSz%)Qk#^eW7-%E^LwmjdDr?Y>1os7iQK@5;pk
zP$t>91Ym~`s&iKFMI-{?=8@Ph$wR@0%E(Vss!3<v>q-d}YXNg9>M0|Jum`j~`nIhB
z6ND8J51`vC-K-Ikqf<}-f<pVT&()HaYM@rb#KoNa9tLsPeRLzVSVFW;o*pw%t&PH8
zl~v>*g9!yI02J06ZpXw%02A?mn6^+P3LzwLd;TewPy-Mr8hVB~4aoT?(13_L74W<n
zQuG3_aHF|W-&xioB1I|}Zd}AEN|5JOFeL|`MC4l-wT_5qK)&T-)Hq^{=5pvDrqfLA
zk%!d#u^THHX62GQcaUa;-z8|4wU39Q2U6<jnI?smB4T2y<ssNZN^mZ&2o-2GAoH<r
zNInYi&q;6Uv!^k$O~QEU@t@YA>hX-H9i|V_BKRSsh3&Y;kwg9VV-bbR20f7T6*Xtx
zeK`tY%?S*fJ2grn3r~5G;$9-wO#?Gcq&8?b)SbWqWkS~zMtc_HeO)(?vH#3O6WR~f
za$zEF$HMqWr!7BVzTBxlmTWcEfdEZj44xM8xNM;Jxx@wm<Z))cB2o@{HGpZPYyta8
z36Y@~CrIAO1FS#X2VWNhxY(1s+#YpMe0~lpC1jsp0$FI*S@E>S5&IMQ&!0x70n;L`
zLa4=YDB!A0ZQG>*R>T&G>5ijCONolDf1YXn(XZSnp|K<8qG?p^*A~#gUt3?IqC)wN
zQ|CWW67HeZnAq!ByVMWqn)!e`MNsWilKZnzP9Aw0C~zv0>4n)Hh$2dRxPgD;1A;VT
zz2#uKb;crW8;kP}SCBRTq(?I)8?$r#@CH)YH0%S+4<c~FEU@>ZxuxST!Vo~ig1NrF
zIF1zbhI?fRCt%ciMDcPxd-)qUgyG6#0}ttZwvK|!)z$Mv=b`d{`Pp7HL#r<rA$D*g
z!iw9$^4h_LEnkzIAY8?i<H(={{D^b*`Duu(bM%{h%CXa?_OGeEsd#(<z<dJ(apgPJ
zIRUp<s9T1S&EBNTaOC!S1DZU_)|R0yjQC2YF$IUyT7H%+Q*K_cfZ!{rxE=0F0Jvca
znM+_bDWJE#eli0xMk3Bj+jdpeLnf;fvj$lpc|wGZTKc8hS5GB*qzJz2)ok0&r2<_`
zyZZ#LqA^YIej!9L7$5=@Zv(W(!gucRm90<}F>?2e1SwO%=V<lXFA;vA;=CnivZ0!D
zQ_ncza>&z^7C^z!`PG4f5PKUN0sG=q=b4+0;UQ3nx}6}p1h{BJN;&YGn-3${4aTE#
zn3h=mf(McjyY*a|ADFW%FfM8c1+|lB2((dUF`gP(T!~5MnII;}59r&0$0ffYd1RZI
z9*SQo4oJ>S0%4yNP)(P(Irpb}5GFs_e%vECJ2K2_&gIpeZCUS5*AKTL=?-0RS<GDh
z_E49N5C+QB6C=;ymwAX;4atV;49rnH8TAHP1Y{|-B9yhAxzG%ulG{jT#0dV_9uw&>
zk%YR^L$C?@*UqaXylyUlTD+4<59#6@fJYZ0gQ^RcatLZZqgWERQhSlgSRol_*(69&
zLv49EY4SuR8LC`$p!3}4%J^{z{)R1gEGb7pSTF(2Qe2Agf@$v$ELLiEf9I?8^hcB>
z1D-VZFXxltgj`DnnG3v<(|a`X4cnMZ;6Ws9dDD1k3L?R&YxP1nCjc?4lEDV)FJ^D{
zi4V6)5!T4^4&0yebK+}_68RZePfG{kT_@opAs3Z+I3X2;Sozg_D?OG&uzMS*xZ&ub
zx)9W-fQ%Y+Hi!jyJb>!-a1e({SU0<^gFEG$z2j);e|H~=;NpAvX+VhvSyG?d8GOaI
za-<(FT#bSY$|ebUb_qZkCJU$&K@<GmJRqbaztLCbyrBX#Fr>NhM1;6`0Q<B_+>jHB
ze{kd)+x^zrR1pXQ-sCaT!a>>ND)4@DPJv>gs}S)ZgDNVRf=1)>4aBm&*$^72rrkAU
zCFo8_x<^~Zul)f1<+mjs!HBg)oF*|FjF3e3#Up99Q1fKSZAU<}V>up7%RDm6eNGDv
z5(9_y0wDuWYU~HB4!SUyKPM-QeM084F9S)TEMpOpLrNkqV04sA68|F3RsFk(Xm{bQ
zp12;I_T-Bvd%c~D6+Btnc|sae$Q;%B(gVpz<@)l1$T;7_f*_5?^Rg9C;Zl(E6RmAz
zEBJU9Y08D@vV1}|7quk#B2?6L6U{zE)W9B8T$I0;5b2QoP81h-<b~)mVnC1w$YpQB
zfH`DF5uH#;m1m@n4g$|9=*EbjkqzhN;Ip04FkukY+tDanATq&Ea1Rl<=7FrB$gNPg
z(haz)yCUlIc*mE7&)!ZgKSC;x)Z;XY2@E3cQsdS!<w1w!pU}St!lHZ(;dltb%tt$4
zq?)<k=mTSKvEvXEB@2O8+?{~z$QJv^xCh_ke!!?DXTcg8mYjX@RmJ#S`8nxb$`XW`
zE$62O^&lR|YUG<F{rM?LRD$TIDk*!y&-Ih1mdq!T63Ct8@K6f&0pzf>XN?t>kaG@!
zxM}M7jbWm|*gs0Zf>`;TOA!7@ECIS4PQVg}CzqFjQ)J|Ypl5X$buRR1m;*>BlEsi+
z<RC=2j!HOJdK;x)AVd%Xla4S`k!(5Q?k_%k6Nv>7Nn0$TB9k>IkX0m(`~*mV{p%)~
z4?m+6{#_A7-Xo1zz=^!Tkp$V7gKJ2Bc{ptr5bRHw4DAq0MrJ5G2~yh+Ke6AocZBt&
zUVV_Nir9RnUp5p_H;~9Fkj_Hf-AL7*4!m;Pp&OzX#Q5^D!*?#OA?nklEO#gW8W$)W
zmpf2NrUkWsUKmGgS#Jm;Fc9w(6PPXn(P{4%E{{c>5K0>6Rd+We$Utt(wFa10fiyeu
zprs_4n+EBMjmqX77!?iwom)|MwL_H1h=B=lL8qWIhAfZK-p>V`fH#zjpI2~$7qFtX
z?J>8vM#Hv%W7?R$G~RNO)@5~|2MeX3n4ZdYu|Q;gC6?r0iG^NO)kCKMp!zEMFe7=t
zd0<BzBan}Csb>O_Tv4EhtE##px6%Xtx6p9B4<RfwyaxEIw?sa(9s20EoC+*6RbEjw
z<@M6UI4;sX>I}Dzj3}%l(tw=jK;=VmhvhnE#=S8RLnHZEM6N$CT83MnRQ*M?Ha8F|
z4tyGN?c@DHq?vL`@5P`RWx&ShbaYzJK|9_)kR>H8PmS8@{rM+%>DQO1sQ~D_mM-aF
z0*f|j;f)&92-HbkqXJWVz~oA7I}B7e`}6JJE5oZ24!ju_nPLOhFB{+-qg&{~bUB)Q
z4w{ZF{c@lZp)Ru;XqI_`ZH1lBCu8f@Fb*k?x3ADT1L{UWJs`;VZlDpJV+QZ6I&j+f
zb>((#KBImZl&b<0{GLMwu+XYqdl9)<1e|pW<wAWI%(=T}8Sq9}5_MstJaI7vRO4nI
zR9KM6&!_<(Dj}d4*D?j5iqz8OE+haXM&!$o!NM^4(v;41)13TVHcb1y0H-l~rCMH!
zRdGh6xm*glZeUcNd~%mTJ`B;YE7mB8xWJ3NqqoO{U3(&O@~Lgt2FwP2@!q8MJLO|C
zJD>?%Wh$@r?w7#WZ4er*1onLAQQEr39W#QauK{+Z3hJd#&BqLWN7(&auzv15+!B$F
z{MWfyiAnII;Y4Ey&u<_2`elD7tWV_I23WFw(#bEON;D;s6?hP)^R>VJJFW=&Oh?ee
zzWw;%>#HD72fN}vY0UYZ;ShQUax~CCuTZ1O@!O5o!CqH56z}sR>*<Ze19bBn-+U1d
za1()Rl0J_k`GNIRDM5YyeH*vG4B@->m;!i0Z-lr1^dtBAi}Kvwui2VsF05shgCncY
zcfFb~Ssm$dNaGIEZ?V4t%-oWYdodGk|0BXa$p>I9t%DrCY9=JdAV*!m_~J*j3COe2
z#@S`U`(@)?8-UHJQqXttJCFF*xoEorX_9phndNUc3Q{K`fmbFT{lI#*s=y)QvYEWR
z#Zv{0=mK2xh~&iI&#?cs^W3V`K|f-!v|Q<nSVoW?e1+8Jv7i1ZFaOtH{g;2-HzU}y
z?aOEWF-ZRyq`!^-{I<Q${bP`};(~t+(*IWt5{}MsW!niw`;|SL;;MYjo{uERi0>Y5
zzjpq@zSfS%rPW%QwqnvcoR0~LvnWWju05v7+Dmq%*>n5R!~!cnt$uvSeAC<PfNeo~
zH&-m1IuDHYC2U4ES*{2!(66`z|DUIEyNkT0S<uC=&ge8!9@=T*@$^Tc1r&WT+%RkT
zDiY+*49?!HwBbkQ{+vcmlYYh{^viv@ZAZ6#Enw%52qdY(eI2=-FEj8pS>c0dw)sl)
zga2Ed-^|Tl{vT3faFSw<u4!L_BT`5Bu?k22)87e*|I;Xf?oilQpUcn;x9G9BtoBvY
z>ANl~Aq7jRcA4_)+vx=P-XrR^GQB^LXheTRacg+|ldo@Q7wO(~Kew>w$A2W=ev5LA
zLp@es-wq1B7&J_Cenh_NGP<wF#n0)#<{GciZ6AzxL${rL-Gc2mF2Hw&IOp2o9^ZDQ
zUFH3<ar}H<bpgLCkkwzt*7yew)K6|lp?o|4G*K=|K7dV=Pcn!lWRvmA^9!F(UiI1E
zqThfkzsz`%=IcV)KpOcr9V^fJw|DRVMT;HOu=v~$lR3WTC0_ef)C)uwro;3udlP-t
zi~PO^;?8)L-|y{B6v!k7Dgd!JYM<6d?LQ%T-1YPb1BY|_6uv${r}b;8?M5&}-&0-e
zZQrXg0q4W5;RwjlSSFIkB1ZF}W8z+q092_Nt`!!K=(5&<hGg&3<<656fNOdkZ!d2J
z85%K@8TQ%-di4R`Fj?vvHsU2Zk#5rDkVn<t-}#@%^Y1K!Dm&Z@vB|*GD$k*?*Y}2M
z=uTDz^e}?7c*L#dL~~A)F3x17v?2m#b$sh%3Prrb#xw|L+h*jN=htUEqB1Qqz}_SC
zC)ba%zqkmaS6U4dnnFvjFh@bT^>QdL2fa-AK`6sLj<7M=$Ex=7QC%RjX{#L{oS5iD
zWRfTNjhuhrlwZTbrf4@+_{a)`Lef3LtLFsPKgDu5cfI8Dah+Kks|i%rq=AAz^V}Mb
z^{bKkV3-zV?Ku|ZXc8fc9Wk|iV?P#Ep437Xf(xTeKXvQ<tJRHu9C_5@Wd23KTf(Zn
zd3vcI(wSd)!jZEV4k+n;c>8zdICuWQK7MNg2H3sC6_9M-78#+lJ9n)bmYz{gR$%Pg
zY~n}showB$cRTxcQIZnc3NSPUAkrZepV+EhRy3gl|1{`J3z@!g*_hRS7O%Ic5w<^l
zZccPhl{Ak=RQtL~S-hhL^lC@u0ZHyKEg(^?g}_7P2<7QNk~Yr?zUf>Ztoz$#8U^7W
zc!&-wc!)5QXUo3;2iQ||&spA`t_#wULcoFb(p1ayQaz)85m@F6nj6ClxF^4;y$u+0
zgZAJVp8f!)g#U-V_m0Q9{r|?>iAu5wEfFDPuS!v5W$#e-O!i78*-BPck<DrEnZ3{K
zO$gchG*9l=ySVQAcYl6=d_PzJ-hXsG9=XE%d>_Ya9IxX!woUSCL3KWSs~B#aHsGcx
z8m`)8N*y;JU3c*6&d3<S#e)2bFW<y3$2GbmOrJRW1xqQ}c@g@{q<x-gaJ5g~zz5!S
z-6%ne3G(=O!7?zET5`9Z%gy&V0$X3249U{My%+vsUtP?Ci3QQ<E`p`8sI=;i(|vU8
zTJg?wGF%Zl#I=l1Ow?49s*_>2FcJ}b3$O4-SzNHHmlO);6D4Q+I0QF-VC7<1b!zW7
zf8t<|D}BWDRHu?yVZAh4H7|d0R6H66xrwpYFjrblJ9VmlvC6=m{?F?pxS{rn30{X>
zE6zb9LDn$wH(?!$TuS?6^m;R&wPwpyhH#l_7}lW6HrNnRct_$#QM?>|^Ig|Eb79=h
zYWy>SL!r=da~bj70*zg%jHgQ<^!rkjZvmPGhWA-D7!O`V5TZ~aM#QJCzTN}yX4N4w
zG1@>&1J!cQ)|6h1OsrTSzs}WHH0Nt+@P%&F_)!M$*aXB$jQQjZN$wWGPp=pBB4zP}
zwT|BcwP!}LK!%(ed)-H2B*Jgc_`npu7FZHQYct(`kbJ8e3eHC;bmf0h&4GMO#%FEp
zO~c2TB$rBY210@2mVSDT3JJ3s8Qgh2l!UT#FM_ws?R*oW;B}gY8j-WDk@$2EpzG1b
zz0YTEJgfF3UczoHvD$YeB*@20KKCPJrX)o9+g{37STjuAH0(+uj;V2^q!kZpQmh<?
zyPN#&sJ#afE~`tmW93KrszxC_3YnD=cdJ>+Pxt9a@e^#%uDJgkqH|Of;#@5i%Z>u&
zDZ`NI&ZPU2p=|ZrS4V>L;}y;jDEHp9Nb|eE!GK&;_Mq;(*8iTaC6}sVRiYYU9tv=5
z?+dJ#4T{=Z_~<IHop%s~&m*@NIC9>I!W<^yOK>q${ZZ5TVOJg&)7<{ap`_XXBDe-A
zr}<1W=l&vs>5&L_ySIx-Q;kI6OEh<lr&o@KPDX0Z%z`Yx#_Igq<LRyPJtsmR3NA?}
z$zuAgS$1?4c72c%frOV@z@5@;exk#Af?VR`NFyZM@X|bgFg?(}P)cgHIz_nWy!zfz
zX8^=pEV_DKBund}a7gvL@>_Xxc&&JEMY=3iBlcrsZC)&5IoSMRy4L62>MN@f9gbj4
zSpEHr@JhJU8xH=R#VZ!(wXYvfI$)-WPtxo-G|%*B-b?>BKFI6?7u=IZeZ`w+Er72z
zL77%tvR-A9H}uI+=s93|7Q!uoV=UOnE^>L`M{Dga)i#ZJIYpywmQ+;!&rz@CH~Lp8
zG#u+`SusT!h_YGSmV_qlOKlS)u{R_giJJ}^-wI!GZh<vNxKmeX;uloW?pxc8Njz5l
zALTh8QU!-<h7<vy<OQB<EF9?9_(JFL1<YN3=VufYY*zh6|DR=qBZT+@i?@Lyg=KXL
zy!|#X0xht&lRvx67!4P-Mkz(ZwKTPxlM!KQ3txaYEmM1ea5CIVA!#`Ol+aJSM-Sex
z3^=y?EImd?Zq}HA-u-hI!aEdaj~w&#g*p_S6|AtYzW2Yor2iska4Ntst){``Ntw%l
zmEM3|EmfihT5#{~i}|)^sWG4*=)N?~m==f9v~9f)$N;aOlMtiTkoG>(IciB9rPT;u
z!1fuv$01U(J59DI|6;1+`rI^)Gr&XVH&6y{j8~7GJAVf!*`09}o3EK|ILON}$@Tg~
zb*m^<D9g(yCihK%f}(0xO0E}fJ#F8;4sHpxthE=y41wcnQ#+S87_=3R6AOuJNTpU;
zVD@tB;_mjmmuk^)=1_qm=L0&mORboX0g~P}!*+BWrk7Vo(Uaj}UHlPe=R>UXE8+$e
z;Wwvfs9nCLQ(k_D6|Nfdf55H&Yy2TiJuD)?QoKGQiWD9Gxk$UMsr=DQQ-f52R{b>?
zu7XEUhA0)W$M9<_suB%5THY5M0za<Io#ME9`{ETS3{QXN(*KRjJW&!X-`!Ek;&YL<
ztd8SLOYu?np^kDHV%(`6Z<>}az2$cT#6VhtMvT4VZm*u*-NPz*280Wxdv}mtyVuzS
z6!|W`1#!pUf#My;E%c(QPAOYoM$NhRS-nw-L&-<O0GvzQ*^OHDXuwE%uCxfbM2z4v
zDx|!_Y|l}GELoGH%V_nsSs7IT`s$#$n}tqojfTT)WV}m1i1H~E<@(y}tyn*b<mW->
z>=&|tNd<gGrQVwvaeyWrpK(~e9$!@=FfZl9H3ATn^})WM<Yl_4D)qO$?;JgeVokUN
zKbGS-E`q;ep6_A;vdA8k4&@oA)ijsgE5J*mAuOedqI-I&)dgH)MF)9v#)4E`@B({2
zZZp8QdNCJY)R^vNM`JB}2t=#E3}NNigR2xTigrA~ZX)cliKV4wOto*>Nw=%aSLe&B
zsQt)TFULuR1);S%&E1ezuU9XUz~hi_peV$t&Ll_<#M8JmSuW7cZ{Ha{?aTJ8(X?YB
zLGl>R(;!%mrat`6e-%c5nr&Am=;^=scSs42ya9fUjcgX}52KExoNrlZPzd_OVft}8
z*tTHDja1W9DBCEQp9?yF;LNv=1vq0Lo9sGwt6N~A&<~w8Wb^N)fob4bs<UDmQBWT)
zv@Lz+XG!wg!t{f%jig~QwjX<m*w-J2=GS(8yj|B)1<;RUNi{$6cCU{)w<cN5{G8k?
z##)D4H`FH@Nqpk;3D&gZ0Kiev&jLVD-=7pd+d?SfZ<>GC&tbu%-?W5-17pQCa86Op
zPJY>Pw7SoWrSK-&3(K-LPj!;2gVoLnBBH8s&8%!&<CgySi@jU~Di*8nU7BRqU%I}2
z995+L+=72^z%mi-vFPS9<Rrz`ahZVrJq}O)iZ9<XcPu3;-MBXsu_IgdE_?pDYS%_!
zqzarGb)rrB2a&UuQE~jxY&%^G|JZ6r4%d)9pB4J5r0KL%PMo=$WW-sYF@SK-+4Nj8
z_znvEJ%yNsb;oGTJ#*1O2Kf(GPD0L(v#r*7az4q!s$6O=>ik=am5DR%*7Fzq1a|Lz
zWYH9~n+JHEhb6#V&|8XU6cIZ5=-U~Tgt`!FCTg^lS|A!E1?nyFSAP)<nicR^VOszO
z)55!rHd=l0;gIVrNNfA6Z^x?q#oQpB2M+bdXFEB(?K)`u9+ZAATMprWW;h)?f9Cp^
zNj#P+T2l3p>E|m<gJT~|2bWK?I!$-<eA&b#TADyI9NPX-`E#<flDKf#+ClBbQnlR{
z_+EA{Rh7|*M>s50;s>zIr}1;rs*ON_eg}#_krXqjHbXuL;s?D0AR5DP%P!?a%c-}F
zj=-~EeY*HVu8dHUpLK22dGu+8PzFAupK9SS1z3|BERRi(;L<p5$YdMzb4sZ@%nxxQ
zjT|r6vn_9W`6M|u?$6df(}^n{-(N1&`1nB##kJ6C%nD4utBe6~|L<RNmG|mI{!|U+
z@*BJq=iyssrNRR*8kt(Bz6-AmKAyo-?CIDxggu3!;=PB4a0m|%mtztSy5SKY>BvT|
z@SYpd8kqx;2&q(cUMsPo7)HMVgZ6;K#2zstxoazLOdo};>d2wgc%=3i)AIQvotNu7
z3gn@^E-@oKbK(s3c{qbS%26+Mw42T9j!YDQW?cBP#R3n`xjJWPd3wv-75>$XYQM5_
z%0tzR!;R~8fzJ@-T<`OIydk!CdtH}Q!`yk*eyO?xxN^T6{}mt0RyWcraRE3m?6Fy?
zEZ<*;MWl9~%>X02v6WR#?ERggw9=qS+6|y({W34#Wd%OyPe%{ZenOV~G-m*LZd+(~
zqY~R;<x+ShNALHMx5rig92lr;#?q3os1dd6KJrUW%fH+?`)LN{m5eIAwrK}X^{w)4
zEg~ZjpKXLHW&>#3Qb)l<At_&6VupLBrl#3F7VaIJUMvMyO$*j?9cNSol(dB_h!xIq
z8rS*%Y8@-(KTMn~^`g>;tLB-aT0x6|(^zWW82(&eY@acNrG0+I;QA10e57?B@4^Dq
zN|AY%vU~F%ue0iGt!|VNGmZk<u#WQX2R>Tz$H;&~zs<a;!!|z3PIqTT(`J%#52IRC
z>$E-;##;uIWdyY<oE4Y2f*f;!XK-C}4<Mk|p7nn<0AWV+?<e+rr=jJYKw92n0U3h7
zX?cy2miMaj@+rD1fTo6hGU=(4L6kVpL^^f)zlHNiHNMbpb`7ijfP>k9wb6P<&cTT(
z8!-NxXcxq_SZs|6xJPgMyZr1{CTMHtJEp$dItPA!7f5I-mS6FKR(#Y)Fs=5efPGcn
z`zzg3MPGiKW;yXMe-}<<ReZ~Mn&Q??UaQ#<-aRz96t$zduM7_yCqSh?{|+ak>Y{~W
z!V=B-KsxUy<7@KWLEL%vPii10!|XMYeknggXKWaZ$LSKZO(;1w_dv%I!$vTjvAoeZ
zJpT@=ypU#IjvHgjkkFuJ@%47Sdx?)@+e}bYhmVjWGgV<O5#_%)6@Na5oQlt5I21KP
zC!Z~s(yV)dz@gdVEY;Z_A>?>I8;qm(;LWX+Dch~Y_|b+&7IF2hAC-R568*WVx74&Y
zm&aw|b$#R{YOS!c{5y45HXDY)Q;61!v^Es1>gcMp)yu&VZ*dbmuP%o_8DCn|@v8>d
zbd=fjtJ8`~R*OJ2ucmU@Rz(gckvw#dwpbYyQQ`b~rRHuDC24JE6gOturN(|;*$crq
zA)9OMkQX&RKN(%*s>7kWhQr+?s6~J@a_!nG1!qsH_nOOBo|#WM3NPmhyd0g}yO;jr
z<vj6%ElPiNi+X*CGH<X?fTO=pqg=E1$GAqx=&+x_CqtLo2pf_9+@e}#y>MzcAqDVj
z!s={{)JApXzxt;I2TZQO%}<<0x%VrH&sWc;J7t9kny6%=nBA#J(ERI;rCVH_Y9sY@
z)DZc_Y#bVh-0m`CnkPxo?0F#G`CTt4$mpgnibs*k<yQcOX7r^~e{4<3WGS^pLt^}d
zYIn^WMsErZhHJZv!iFhW%&-uHLP~y(K-sSfywTW50a@_tE|Eeks_W5zk~Kqwx!b*s
z`;F=<Uok>5ipbaxyx16EJV^;%mLDamh%?e<zMz9b0Se51J?_{n1C5Pv?4;!~PYRQo
z*6Od;4Dfo6@8dG=xryo1i?Z6q1T!eJ?Jj}xS7_!lys160khd@yr9~#A^%Vcdb<lqu
z@K61a?z%5|MA%(q`zS`LId^@?p;mRFxTvdlzdajH^CJ_uws~ahpOgL?<;t9mOqTVW
z<5<d8rsL@7n}<Ro;|+m%w)uC1B_lp?T=lKOn?G7cet}l(W1Z|?&0EG7y!kq(DY$R)
zC|tJHu3IFK0rA<6o`QmcR_$7<$5EiXqt%t7+?rw$(~*xD41!si$tLEh4oFeVIE$}>
z`bvjV+M3;!^M~<_c!$8ijC(A5SeVMRcq;Cx?VV92O{g<Nic@bGSGPCDxaUJ+WMhZT
z$9yb$iObxzt}?3~^Z+@^<fwF*q$QMD4R&m{qxso)H`9t%SdsU>G<rWnVsLnyrh83l
zY4M65QJYzr0nWJ|<kBX0^=wGg|M(i|KYL?iJ0zWEpY$N*Q_bn&L8Np)Ep>KpSM8p>
z;GgyiC{;DPbG!b$!+$cl^s?o`5DT1k!vhMf=hnKB(QJgCchv<Zo1yDgD625eC9Pq<
zfGEOmCp=!h4y>&N3IGt?9V2%afV*xnT~8O=vgW*&qwn&=6`IYy^BmWFL1*#)u#{kP
z`yQa7{lr;H>8(%;wOH^8>#9e4ta!{Y`f-r+Z#S`9*yV}Kn%MuIAvo6A+Zejfg;lQ_
zw11d8|Lx4{6ZrM*dUagGRd=YIHAU~h(RH#v*SRT-i-kw?a*x)kjZO@VuM#(dnbj#G
zc&Ukiz9bP5CTN7Q?_S-pMBmR7XO_(2+ucAdeUI@&Wei^dWqU3S7xihC^?p-7FXr9U
z1xVq^MP}1Zfs*-m(WDyh#F-0k$`2!RBvBftN7I(0Ha|ZSN;MHOWCBs8RlgG};YiIj
z;?6%p?qNBJ-9#@nFqX*bp!#&tgZ(ud7GsaQPwXy)Aw*-r#`Pg5E($J#3;kxpjwRbM
z0A}fh!^kB*%)`LH$!C^ubJP=FnCt_m{InV#y@<fcSuDOF5j5A~jt?DSvbeNV>jeB}
zln0IT#-+~rp!vL->fl`xPGmRs=;U$Q-KB`M-wNg4@pE~k5hZA47;at>rM<{C{B>*C
zX~D^2+8~}*$ZX2oEv=0DTm=560R0y@KrTT#L!>2ipj@=(Er=pLkexRq_g^o}Ysqez
zKS^4UMe|c4-kZxSKlZRJzJk+ra)<7Ys_oxMT(`pl#o4#ttca=8W-)yPA(u`hj@3}2
z{6wkk>8(uL&;c=b-EiyCHal}>OKC0xfrUXm?V{A%HgYLStjMG;f9mbb${Vq(>kK~T
zZa@&NMHOY&$*wEA2+}c^jV>q1#+yDbC1zB(clq4ds;pGK>_XBPl2hHNTI#UEq166o
z7M0Chq8{gIaetPI(W!kw#yl3a7b23hKsv!!PxBW!+)0R|7FhCzsr`h4xVW`PrG)6t
z5Q@T?%%|UUE;4?v9W6k^Vc79tSA&0}9BWalx%a8|NvF9Rz}i7KYt*x2ZKB!c-M#Wk
zpv6H21TW;DWHv(<qHGt(=4^&RU{B>IIr`+0W0|sWwQ4;dmh|V^?7z;YNZjAPgIshz
zXueg$JN}h$Y|v(?zMGAJ?Iv8aI8Ng04-49_InzS>6j+GCsG5yCyf1~RvJ6xvGSHBW
zWR(;g{|FAR)QQ2r@?PZMjRx+Mz_qQlxv=<_dsvTiud2i`$uvlhOKt8?Mz{3Av0!<;
zTi;<TRIf&8&&uX`p~M-*-?|LnQw&P`!fu&RjMe(6jzzqOSc)F=5^#W7yheJBL!8JO
z#S$?8$1MSvtiEbDGba}X=zdO2uO%8L)AI!k@<~;2X#FtBHI6LHL3(zaLDWMdZ@!nO
zJWa*QmJ6)VpNSyHU&G8d7h;w=!=}NZc8Or9b^N=e-4X8dW7qDIz%^Fbg3V+;%Ei;2
z#_p=mupzkc)gdF*&{E;)zk%X~X~Owpf~$qS5=PF^{jr15Hfh0Kd@C@aq>>WAKI%wO
z=hN)(tUT0pODSH`y$1FPDQMJ5s<*r`cRPis3QXJYs0g1_&=fBOohDLd@7H~KelX|B
z(&)eUx(j5e+?|9Za|b)%R8MAxnIhDSw6IsPq@#e7y1#z^iW}+Z2QTJFMzfGxtCO9E
z-T}cOu8&URhTy9I>y_hpDH^pf`Gl%;bz&O(JdGQU{_QHF(J}`^i=4e*G5BLrwN$~@
zdvGc{9|16R_l*^0y_z3prOK0J@e$7UJ6M#<JxNK)K1+iK(Apz6)B`0l<o{}K{wZMe
zH;`IHThhSq5zIgAvQT3C^UF!(M7qiFp!kBzcxQJN3|P~$3cu}bYyO_8!rXhpKoJ@+
z?!5}H(GTJ*KFi~clLee`2l%TaLuY#6AU8*HE|l##hp)z?5-pK(jp=vU>zMSVI{T<3
zywvdaw}ulept(t^X?rILTN~v}!latp#9lkwn>CiinD(w4xK`-Rdly0BBG=Cd$U;_v
zFx$H4j`aEwE_)7OHy>kHBM~yxKDL{my3Mrou*^Bph|pz=2ih{Se})pyJwuzz76({>
zKc^OcodNsCW(yZT>O@N+$=zo@rHUY{4x_zCIpVXmXSfE5fa>YP$UGCoAH}_1=_h3J
zeK0sIj1n!d{Rj>r^d}rQpCL7Fn1W@_TKNU2b0a7G(hR~czkPX2U%GV)Q*%y~ilx}>
zS-U)F?gjqZSXF?e%GlNx21}1B!}K|hP$;TdSs^1n->or%L}!>a$*Z|kp0TR|9>$}q
z-h_89B~u4m&yaX*PeY3@8KEJdcF95usU1Brel-Dpdwk@%>C>&H!tTG?#?!g6-t3(E
zX1A{0{(S-W6tkP~SCHPf&<R#ZYt&xABf0S|%4PRDNmCe2r%~6V((h$)q+{Lkx}(pQ
zXs$hacYI}1G>3vidnPr{w=GuOY$Pz2%PATI#B`d*;Iwxzti0cwIUap*!$9$)eRt0X
zNKiZ_hxc5P;nt|C%0sBC!p#fuj6oDCOr-ZDO!z@`9N`_yrD+I&txH*A<@ijLt;_~6
z>)?h|_bY~<j!v&+<?0sgU5dDg36W~Cz-Z7Kl8H0!<-qh0tao~Yw#THVvqu9QO|8#R
ziqwCg?N;4OI)mJN0jtgrcf65qo6gzHS70ka&Q|1d`RKMsKo^hc=sF8Qx^&@-ME$m}
zQz!Q3O{Bk35ME5LM#fOA_Jn@}Y4!$<M}JmT8AseuDCjQ)cJqHZ_s?Z4IB$<D+g|<%
zo-Tb=&{#d5w2YTPe@cHhn&qXc8;g)&#*lNrj-Sx`({Gj5$T*)qxX`ovvLg}bLsy|O
z%Xx;&!3ZZYH~?IV$rWb(o6f}x2RfI_v(+}Rl)*I?qBO)ng_gP;Zu9MUtLZQ{8Wh)9
z;o5oBmv5H@N{RU4h!@NC7Q<M4BF&qOQm2rqH`EM2<kD0Q?&YE4H}s^M^e4z=XghK|
zxjnGdU3N7sl^@Yg<t{Z+d<D-6LJg)z{$fOU8@weQK1&}5$*S}2Hd7zyZfltw??_f;
z5!@SXOn4kC_N7Zdvxx{~GgwC7F-NpB%ztl*7%L#PkLy&p0vAH1u+yW<Y84**OPmmr
zM!SGhuH|$WMVem@tQI)FGkYm&OqFzH@V%HNbJ^RDXicyfI}$bgvX}8DjQq!tapM<Z
zca#;u<ZqF@IV+ih=i{^L2@R*t(Mv-@KHgw(^Do|se;}MvGN1Q*inLaO{D>KN%R_Y3
zzzie?R<PB0djh$Qzqfr9{|1Fuw&xL2rD9tdIFZpKScIJgm)F|U9}`;>9**^t_F`I>
z{Dt9MW^-ea=L{4bYXk%_kChepo1%k*e8w;Or~iD$i#o{F&}<jI_g@^Uh&~~Q*BH+I
zIafL@60)bPEdK^>)P#(%mAAi8{CUpLFOezE&4iKv1}5}>h2w1!q-a-2$g=%;fBwk+
zTTRXW8{hH!Fj>7TGpIbX51{-2t3QDAfBoYB>eT|*Xnp@1q`x8`dTK6bpEmKY!o(lB
zD9R2&P&CMo%|sqJcRsxEZ(8eb$kd2i{K`ItkQ_|aE*<5%|L`w9_h-bem542WYX54g
z0%7#z59$6*TN;Wy7a`z#|2)@iSLCs8iXHtM=wk{zmw%3Gy!n3oP(e6N(Hs0b72-cj
z;+c!&!G8!Mo+a>CZ5O;l|HZZVe?-M4wQmypHwHuo@QC;Sl4$f5DRE5KeD+tz7<mh+
zeDS7#ktwCkAy#l(+8*q$&Iu$s%Ozya|4nv#3ZE5tMt^*7Z+}L-T8U73z5nrk{^vXO
z_BG_Ws?=o;Jb#}ckL}%d`+xo;{v-Y`8o_fto$I>3PcwQT3PH&$*7u+Ds{ip<T%!^2
zl>S0m=kML^stpjyFFnJ5OII@|+<$`mVEKFZ{g8&&-vp!q1mFX&hfw>G1-Yn-yoH&T
z#J{nQCJKjWd6ji*f7kfC!s@V@%YOVDwi+%t{@%UxI&8m<r&mKZ)r<+}Uu<@N59GNl
z6g&2xiwLm=ITCa0Z_rS6D)3y&MOL``Iw5UHm+Sk1^Dj2$XMF_U+IK*D{M>{56_a=9
z&|iG?b5IeF{duO_?*aTP{q--&vnuc^+qB#Ed46>Y@D_RtEvFGZzki!Ljzbsu<;M-5
z{ndGjc<P-VAfo-7N^uwYtaU%)_5%hN{KxN(*oXQ2>xTr;2jYPAXn>ew|GADMw$bJE
zXZ~ihX9A+?ZkK69#Xdy+1vGD8W4@mGx33abn!XQK$P=@x0#|s*UopsEu}p{l{rVik
z0mdWOKI8HKwMGB0E&7-F=>NYha@D3!f3g`JQt(3ekt!RXE^`D`R&a|)Xrr@FulQum
z!1#&|W_fdICi6I}%VtGLiMGrQrCjb4Oc9|$9n?IXG1^m^G6hcy5|ol0jpYmP$}!2a
zG6W|P$y+jru7x+q<h%$>h?M0p3{0fxv`i9pdpzDop}JoKk&rlk>BqMD9eRq_2btkw
z|M3YHm2(AIaaA3??b>~5?K*vF?AkR0y{wi)DIx58-62^&x;LywibINQotspPFHW#1
z6OBzik}~R*Nbc~&eb#V)Jd;>EIg>d0`KDNgyjyCtVRdS>eXOBO$@83q9Qif))1085
zqtKD6K*tc2?BCUMz+*xJ_JQj_udGf(O5#%EEc{6s2ocoNZPLuVNW!c^gcp3n`?wcr
z&8z!(ABH^?cbn9+FFLF93&k<3oTEkeUN;PG@|dQ59{s4EO(x^%RDyKoqmN9XgyUjC
zzTxM2WODCKB?M;4cQhmt<TT28sXR-%-~3Z*4c-tFL*TM{{>AkUr9agIUdIgS;y~4w
z&mZQ<8Wba?viBr^{_kxP<TO0mEX#ZNNVUR~hS8~|vFQ4xmC=Ea?3-N9YHYOEm_AXA
zkx2NAG*0M#Y-Em2zSsUdC;Co7UxrC<U+ZVJ!351*(+(Czmg$eFp)xrP{}9$L@*Q)e
zY4LS>OnZ<7%O{9847PrT_-_k83gKnF_6Q3kk?rf(S~hrU&>K9?kz9H!lBKROTnTba
z6kR>Mxycz4w^HPVD7s9~`Ai#=`b?XWt{HXom$%;9FV@fiony5b*&$=KklSH%5Zn2H
zBOMY*S>Ul3&O_@QE<jrv!NH-hGrTMj&0yE!8`dGzS|F2%+xpdbttal$n!ZY@^Q{|-
zEEFI6d2<=_B#hNjm}`D!|I}&M(d$17JVpx^6eNIiQvrM}>5#sO{WBo0I;8wB0b%~|
zh7Is`3XM&@RTqW5Rd2GEs&42w^6k}b=zjZ3mgjh<Pv`0L%D7mDdo!N>HD`$_sxaeu
zUU9?}_u6s$s}*7y^`7?{{?icBUp+kRj(4i>)<4Tf&UDjgD20q;s-JAFJ&$#|He+cH
zt)ugcW$c5?!#w&6IgRq(3aVT_6Ki2Ll52T;bMfEK%A`K-j85k_`segRf5^4UW^_cz
z+gB?<q&D3nM!T-+J*#a))e$ngL17}WFfP<hkhx5UK}idJ3Qi+E)7a_vc0A7){`kx>
za`w#{vF{fSxD>L+u{FKCf5}MiiPWW0l*)c*?++t~AG*lZkuJ^+^^6-LXd23x2_LVK
zmD=hbc4ILM74@MqYL^sSzc`lYt0z93eVk!1E0<_6tCXSq^WzQmI{A=)2EU(g9(SbK
zRqtOPsVH7)y1!rf>TbAJHwM-CFA3``z8P6+Uaxd<Ffg9}+Qg9QpJbq3bZ543u%$I_
ziMh3~l{v#GKtU$=h2*7X)BPa`tRxfd&1aZwvQQkE4J|pg2U_31zGt=H3bM1-wglvG
zbN=0rp3JHoKI)8|UJ;BOzEljH9wOs;gO63UH4ajy>)rDZR14oD!|1<;wIGY7<PJlJ
zypu4<yq>OI?TKJ=m-VLFXfup^mmh?SUw~1uH%uk(OG<{)E27kv=`31+S?0<C-MqOb
zH1baxahlXQS>Co#5eiTE`rffD^C5Mig5hZW2W6=q!+3qw0=roiyIOsDyV?Y`LhT?q
z)T4i%hU3(RV6oP^+d?JfL@dXCz+F^5HqjJCc(lfu@MtL&(b3wozBaY^EkSL04<g)e
z8BjTJ8c{iz40B?7N+skHm7aNZXg&VtC%z&K;nh=d6u`JF_12|DFC?&N_jJ(UnJ!9P
zFc1fvQR1wLSdb4UFzkME6-{D7&s7z(9Lo-RSt~-t1ipVFK8Oh3(%UHqQ|-#)Z0Ie^
z<KP_FBX<Xj%n4nQ87&B9>g?`pQr<EJqDBlr>fQ&8vG5q53$Hom=?aaSc6xmfOzmoL
zcFbB9$u?#dH%7ZhT4%b=*yB*fH@?m&H0wlxX8K@WAFXwArZ^|_o#y?>an+_<++H7f
z5C6Ee+7x@d;0XlQ<MxBR=vqPiOK3Uym(W)7hU2Q@(zkVCJe%dqoc-T?RI5w*=85Od
z3-K+;S1IW69Q?rO>%SxMmb1PicJRl>iw@G(1$P4SqVJDz6_p6vG6M7bgp=k792885
zn;ALll|<eCX?=H?A(Ol+qU7h2`NMB6{{$^!J`3C(lDWb)Gu>-q&hZD}dy>kKYAt(u
zjaIq?{y$L;RSxx$V{8wf^o^1)jfa10b!quw>oDO@R;I0WEl}~Pp~2%!;|mHU64}XZ
zyckp)uVG-S%+oI212~hbG0CD+zPU9TLdb#>Z+~5$=p1*BToQL=+gbU=SL{;Ew_L{R
zwDih{O03KZ2i8!KH&37R<a`@*-$JIDv8;}f#{W)67jN2(3~UT<d|@@8_1~}``0<N<
z+Us-zL&<qI0X3~o`B}wW(+et2>-t5VEv@#+5z)`5#HN@YGyb!&ni=3tG&h7%3|JDn
zjTw``2peHmj^+$2hy%tx2#^-+dM)oDTu2@`J!|-RZ*7|6G96v~?HYC*z&F4F{Zi4o
z)Ee~hk>&V!F5YOpGoGbcyQD0;ybLS2H%<^oq<8wZeo^V~$y4dqS90#xPS+Mcm`*<R
zeYsGn>dfLuGqmjR`Cx2c9uiekb5eM#`lPU+$9gUPiOl22&Kk7wo*i0y$!*(>$q>fs
zs(wBqdoYUiOe-&TTNxW0iK=lI7V^q_>qH`i4hsw<>jl?t2J?Uq<1ykn>N*PyOgd3X
zCefz7D#}x7`ulI-b}p{1sdnQ+_~f<R9qI%~0ka^A<BxSv`l@)-@z-}UPDfh+Q>lHV
zmtmVWD>9iat)<QYyTJPZD)3zG^J*Lox}kBQJx<CGPzXf7J^+B0Jjbxh8xXl9zw%F9
zxqWdPcFxn`$i$FCu1$m?`HS(txGZlMBYy<V)Fz0Pycv0u9=HFJb3*HDI-z?|j#%v*
zT2lv`yqWID_Tog=V8?qWnxWs3`lpCY;W={IITo}30vFgY{IM*LS2pdz{X0wmbcyFK
zmZ<$TkgH>?nN~j$_5Jk0&w`dve`<8Yw#UpBcaI#S{3wK-X@)qHLrqJ5qmcIb=o<=$
zn$pg`dqoT;(PAwM%4IAEVr%E>?j1%;JRL>tC<IJiW3w@n6M>3?G%K^%-mlX^Osc>g
zJMD|W0$BoFJV1}`en5>xv_*Ry0>+Y{aImzA<gwIMb7|&405sj)@<2#K_#k0L-W?l_
z!7P3Rz^xrUK3F9atC9mcX00chg-mCALbz;9Go?nW_kzGY>kigSdkjfZAi9mmucQ?#
zUr_+=8}9=GWQjIYJPx_ug4xU0Q?bbXwE|&C##8Inu+96$0%KmbON#gnx|L_1S19mR
zYjI#aFrDij6wlbU_a+-pNOA0Mq-xbC6CZk)G8QV8tq3;+!{z&9mHzCKi{i)PT0%+8
z&f0QqIbt=6g`CZU<kX8B`M*A#;ePHXX;BsFE;7fk`^s#olrkmqPtV&U=Q_?9Bs#1W
zRV@nJa{a9nMU38VW}>jJ++H;Bg&BTH#xmB*aA4kHlV(XA6#JPPf>vkEMF!11_gU1L
zlI50F%6ZR53Or`}*@@xea2)oMG0%20r{!gwAK;+%4gooW=)T4n{~&V_KXcKjXM$43
zsBW^3><PiSj{yi(uB7V{X3(t67VE>s_003kG~WTJT@djD1dOsMf=#8+8>w*17{fGc
zgTHhlCcrZO9>4+Hr#0m$B|<+?!nPhvX=IeWMmOD&Sfo686KL!RweeEcx+sWALGaVD
zpRD3z7xdbWa|yMpPNX++6*roviZGfbJt;TLJ|{?V5Ux1)HU!mf&A)0ioF|MhoSoS=
zZ|#vx-fxX^UzYQ|7W7sub!3d(o~UHHS#%vw?8iq=s<9rYvtBJlRBF<~6z=<n3h5ii
zw$AMB<lT0I&`(bkBI)HI%`tbA=SouV<!w#;opZu^k_~4r7rB!hC`<r-Ju<B4LXw+M
z+~hmF;Q?=W`afLqv^9kyfbSqkiZ1d;>CgQ?0k4NH%8A-)Mz_lgu75Y5T^QQ@-k}1x
z{P)}m!tP2kZj<*8umFXQc3^XH3-P%-Lt#v+zPB2`W=|yd8ldLq$1wYNIRlB-qV-0L
zU2q9AP#vfw)&<*V%gGjrMl)GTd4SR<DXaxMaCOSK9Qi+_7l`7@rM#}y_O}aq(8W0t
zRR*;%HzhXbgdSI!kn_o!zCh&O$$N1+I5{s=kDdRZ+2Dg-t)<0DJl=5Fz5Ra+S1g8=
z=MS7(65Hb%T|(Q}Ru!;k5M6Q=2~4gH-KHX~&D++wh3ZehNo{(3FkU`R=g(&(R?M@A
zwRI{lT54Sv#x?zMnmUmldb0-S0fpwVMGBX9N0aBMavHkoeo)C!9F(=jQ%Gj*HJc9=
z;L0d)^N|9|GctGXicl3F{D;~&J+7!heA0@a9tg4V8z7)JhA5*0n3Wmf5E)zE-o~^h
zuQSRd$t8NfxBWTdK2|f6Cf;QUBEi*HKo*rG%|v1ZSN$yCjYzxs&1}P&wnSNk1{axI
z&7-CTIs)&*!oq^o?{J8{dH3_@PofU<noGAYdLc=<Rrh+}A=kU4zl4mWS3|qF=A&3Y
zf1l*k8o^Uj(?N4*D!A(_rkadMnTi|~ixaqz7hJ<K$;FqQY}rRCKK<E=b%w6^piWCF
zI77v9dMdbcM%vN-2;E%YCCP!k5Ts;HS$#j?sYzEIFD1iT6|*i5+D^^bXfN+*dTki4
zFsJ3eVN6k5I~&VT6J<C@NtL`nY?7RPL&3o$;~;<MzzdDG9i)UVS7X~G=NL{3$Z*{y
zC=^CuAcbI>VR-+5Ei{a)2YlY590MwFR1nv2`1M|NYy+jvE;8D{$m|ynlB~+;-{3tO
zi>g0w&?8#Jo0`xg7}IU#4Km1mb0vzU*N|5Tt{bc_yE|+1GoX&318pI4`<$RwuuRbp
zGUp6I%*qtaVO)Nh;|-}+O`gPzB9K<P`QlFiOJ4xSnD@=3Qs03@0-;i-wsJAYTBYst
z2EL`%S5aIhH%qb}|M-mCUlnS_S4)t?D<WCnrd)91{sAn4Q=xo)#3zuE7wbsF%<Eu4
z`{zZJ*WlgI$h{i5u>PFCYkhM=x1q|1<^ei|SYI_yD|~R|EBEG0luT~6klgzm%EbLk
zttT<RyKl2Ijw~89iyFl|*A{3b`x6dlWy@ON0i-=l64iE@x4Va~PjQ$pX;QAfjY^L5
zU?-0q<LAn-Fuk7`JbBHt%~S<CH%btQ(b5@bOCQbvSVPq6_8iM8HLK<vi{_keR8B)A
zOYym2wHI2;TknCu=qI$<LD7Fr;{kZznCY~A^+0&tJz%gAtra68Q@GlvSsn@$n-rxb
z7nxk+-UNVrJs+rQTorad?ST+Gpjbv*j9r6Dx9$=yag6MSYQ|+$(Zn<uz;gv)5i~7;
zoy2yFfXiBMH`x*qX3ts%KLd#wj;>PMrD!sN=W>re-MaqimJtb1;l0?NHC#1942Uw(
zg<EO7zd(w_v~Y6*G3xHN;~KE7TwAIW#veDz0ziM1^VW5+m3lu57FPZDfp;D~pi*%Z
z$y@+#^lYOQ7isRx32-{kfv~GdZYZ5&vhJnLg@2np-#0Mu8+QZtGe3VrHRr)aAik3;
zLc}BeO_Yn|0xd{#7Vz;rjmE_I37Gm+3T@R@X6TPpaF2hKjj?b3G;>1>r0zX{%n>IW
z2bTaumyjK$&(7oqJL-H$=~LZew(*ku)p$itg9{N}LFG<settSL7cOu#;#_7_;WOgc
z-!jujO7V;6x~~4%PTzj@Cur$SkCZhv_~>nw5^-TCTSs$W%&5DUo47|1#?#np8>^?D
z-B)vb2_t?oerKgs@(t7C<+Y-v!IbOw?Ng_2ptvCit{Q~Oa`>igx^rh@Tw7D_#=Pjs
zK2Sk<n)-6`TBh|3r_l)1oRs1dbhj_QMlOgJCyXB$u<JIxn~(_mTIfyA$4oAgo~r|n
z06pMy{~?%BK8a{pD*WR@><Yf1t&nNSX3z$vpLO$X!A~#@?wdg&jIW6zg)EiMp9MhR
zs#3SXUTG0r@%|0;1cVZ&x9Bc*LBHR6y<;;F+oiDLPP69IRWwHutl=nA3~n>^x->3Z
z%Gt)fY*N7pop^ZnxdQ@)cNDfNTg#<aMH#EvG;`D&VFfpDSsSdW+Ey0&0*vr1fJ}+C
z5v~pyzww63QR?$|&hnWK-vIln;1@$y-RcO|uRgJh2<4xErLh?#_7mKZ&O|4PM!O&o
z>;NeqTFrc*l28*Ok_|1b3+?DG{m6v1dcDYcozm%zu^L|=zzcKiu3-8%>7kD#JyoRM
zpRG*OX`e<{L4AJRh_|)@aC`l)d8se(<>|jq>wgP&%n34A7~~TCTRPynQTh#XRQuAL
z4N};gVo%zlqhh*QfFxJ2U@Yen;ptwkIc@EMQnm3sF`j#!8ZTGuPjdg<g9Ckuajty;
z$@KQ(wWX;?e+C>+UCZ<9hik`Z1ZeiA*R@IHlB<|#&BtBoszOgjTxiZUEshnt$#Re>
zvTz(ZN4;z_&Cs@54~CoBoO92D@$Y&>vRd?0HPt-J3##!tw{AoY(PTAtIVtXIqe|~U
zev#S1IO-_O7I^r`w7VaIlOmi#nv3$p<~%OGAuO_%h@1k)pjG>Vb$dn3PeQ-iSDSd3
z#Xi2XY!ToBWr%?3mEQQMnpV+WiwK=;5Mhs;+0?$O(WkklME=3wwpGX?h5CHDVL$7z
zGbx8rw`8OWuo_O%I1`!l<@y{je0%kPw1!~lu7fwLlhBTN$&A#ko)B|4Z~<TrV$vjW
z(r^*r5#2|as*E`TL5djBa9QrNBUL-6BjP7{oIQmaJW~6zxo4W#ACKS}sg{F%8>yl?
zR+YP|LFZZi-BHU5C-sSaemkwy9vIr)i}yX5nxz?C$p<(;a81-x$u%;%1quuyLN3lK
zIw=$=Y2Nrp;nrJI^=qm2#t-uEBEt!LE0_0NOpZSPpQLc+d`P<a<JFz<xqOobQOXXf
zu~8;-%LreK(Ju99navZ`loiwamqIC|i%#4#dFEa>pvo{+nC=f-p0MM3Z%!52u445@
zU3b$=YLri_cN}9jw0RWnP?rd2&pEHYwv_!AlwSA9>sov-x-E>iXqjV7NGgBHIId#d
zLbgPGW^3yF7mG&`uXVznTeZLLIH>>rU!ec2`|eY}m}#2S&nlTT!!vq%_}VzZMd?E@
zyTd)iO8E94L585`UCMg35#TT_63n4p^^W_=uyx|@V4*sRD3yb;T(SbwTQDF8rjR^>
zm9xYC!J;|i@haJ+P=EN2C`ly5`1*p&LlrDG85oN_eH6vX)VtGWIyf4qT1dAiU@=;y
zl;LRi8;d*7SB8}zjE}VARLRzVzhi?11tg$_T7j7!G{voRAG~C9)a=$cTBiWR)$2LF
zG>jJVL*V^Vsgxk%p@fb?^Kkj{k1qaH@<0PgYKNkv=*2YA(G!k=#hBr=QqM+~xuC6L
zU@n>rnt4#K4+b0eBObBa=t)FJhXy3_-*IiNdeH4+l?;8;N~y^t!Z^g85ZJfH^5PZW
zcVoT_6hNi+SOAHTJnJ%A1k?O<8|l-(k5tBh!bsw7Ewz&z!|E3&_p=rgp?cMlV5h8!
zzrhd*7VsM&t}p8(>Pt-s5-BQU_U$}8&%{h`C}-Y^h|2)F2SG}@@ze+Xo&<}XrMfFC
ztAk(|!S?KVv?SHuGd-0J3Ih7O$aM9)t_m&;nNK}Z+mPkoYYe+f+}75nZ*s(A@A>M-
zLibwh@fqR$sWi^hz}utSi&<sG<SqnkLGs%{2Gv`F;RbxsFh@c<>?gv<OT+jDsqNS6
zZKV?`-nJQ(dEUPKbYw>u{cdiCW8^?rqK?5eqs);;YHf~u@7MNSg--RJYM62rZ9u<R
zZKq0eUbIt?dpampzDHF@aKBqEzjn&j*EV3|#qJ(#IdeuxjU7;Yh~8647QZQF<Nh(B
zT3AavSZLDGppc?OP&D6mnK*LsfDDONl8u-20L;2nj$JC6vi{u5z}ln{To>M@D%&65
z+?Q9SiW6LHCxrthku2>5d~x*Jy$AO$-?(hyxHF}P=qK@avlK4AvQ3;cb3L1^p_%#g
zVYW$$Q4(sK#*tnUT!#3aww-n?F4#1+CR)P&`Tj+x)^;gYBcs;T<gx4VN>LxgDuoxV
zh8VIqt@rZTnIf!>ydgU-UTf}~2)J;003HcZJ|Y2z!08A?0_8L%4+D5=Ci9O`*==aG
zmbvWxEa>dcHO#MAs<rXirm?4&I#dB2ZnR~*u=Y;AMg6YLu!Cl}eV;+S3p#?2i-Mzv
zlcT$iRcHCwxf{yG+<oB4<G4K+@-&R4Y?t>FNB>5d<ZoNUQ9<!ZC32McPZ?3ssBV{S
zaiApG_yQT^fz>c<9OzkUIQxwQ{-Y*!UBCHkY1P*Hc~m~@dfsQYldiAMZHNytTNsuI
zi9}>_;AwN~>;qJeafZQwEX*fY34eCmJY&e&>(5P#^7X}b@A{>37ivG3H3wG48O0a6
zxN5z-Z}QU{du7T*N}6s+%O9K?_E`M+91Qt8*Q;&Q7c5zyjW{yTApY>Xs$ZW;c5=tV
zyeP@KHbFVAZ;MZVUtR57&nx7V{A%OAtsz>1Xrwvk){$y8<gih2c)oC@C4XkY=BlD4
z+DTyaqpZ|mLZB0N?d31Wx=Zz?h|&Q|DTV(eEjI9V=|Hlgn)y&cy&odp#lO~+mADD)
z#Euks#<yo^2%a?rHOn>v-akgNnWEm(gHxxJGHh}SIDIJ^+rdXmeW3?Vra3q&F0TS*
zGUfD}e-44ZmSYlJ_knCw$KL6~rAFh&zp9#Eb-)+c(Ml_MeCc@dTgI!81h-e)p}A&^
z269Ym?%e$5^!!?zxCQ9m(4sY;PsLhTuB*zLD4bDL61brCEM|yh-E#$vH9?<0Oi-dR
zAF;Du;fANvZ(nv&I3;lpJep|sC~wjC?g9wk6O2tvJFtPjR>7AkZqVjge#MktBr#!)
zpC9-ITos%A=)sQWWp4;h^S_`6?C$d*sDfF)=#h=r>VL>J1*!6#{qeR(j<uarN_Uju
z=iAId+SxY!)KjiLg!yT^OBVJeS7Ou>pHp(Zgu(BQ5N7^ZOWfAp*hW8_HSM<PjW5|#
zesZ|)Z(MS4JKvini&4i>&boR&^NrZ0yH^{6IKJo`8_YUCquJT@vz(aZ)X8<wn}6O?
zkhWrL%RfJ`tu7cfx$a%d<%FKR{PNHdoQprM9L7`%zIxW9e`MCZ;L^F<hYlY*ce{N0
zNN}2FS5;bk^6;{O0)F6z@r|2bMU1RcdR3+#$LCm(yzxc88-9c&QT}smk}fJDKGA4$
z`p2d@UEHsLaC+1a!5P`a%w(&1ilnHl!pGOdN1R1f{`^k(F6VPU2Hw#4hu#ej`*96^
zXZ$H?wQrXgDRRJ;4o>_z-I`Kzx`efU-Je~LHkH11KPy{=nbV=7yL|a>L8czN5WDA1
z<6e@@A0-xp*HPx{+cGEZzgE5GwOjtW+0~0j8q@r~XB5|q#3?Q}RV7qsZMt1_uyFky
z2d0IJPk%m~XF|{8I!Zd}g+c0$bq+Wb#%tfl4IBH}5~0dxy&wY(R&$ikEAZ$l(FE?{
z<F}{DUo3vV6e}4a5-TPc2UL#`lV}pfd_L*1J3m$?(Tx23YLn=Q_PPGN9GeA=Gqb~J
z<Gwg`zB5!9RI+NvC~g@wf5L39WmO%xE*Uihu<NB5DU_K~rE2E2?0}7ALy~Mavptlr
zK+e?lJ$GAeFUF@$Au=Ma9_{fJ^4Urj^2r*5-oc}|8AB7r9*2&|9HU2-&mr%gMCrn=
zk4U6af&hUFACJWItamS$d`=6ja7dS2=)7^BKnqzRSf<<Qc<D4}F?{7^n^`oNG_I^m
zf4=^5`v|)Nx^*#)ZswOzD_SF8=m-;mx#s65HBI*M3aU8?165eb?0diW1pLR5{-)mG
zT?tJ-MIo$RoqHCyrM@SlZ7Ir%eJD-0K%)asIdZ9(U0{C`9Xd>db1yPX>8k+2&UQM!
zE%`F@;T8#V@ry5C2EZry;orHVzvVu?iRstnblSqm2b&HO1}djT3UD~}$z?6jSxzL?
zc(K&*v=GLMPc43_bMfApStWOS^Cl$isJxoi01U5Q)SY90TQ3`*2nXwonn-xnKokDH
zPRSLjlV{egfH#Te(qvJ}eh|ngWLB!N+Iu(0WU$Y1u)vaZjq03odbDlpwiTv{e8tMR
znpiRdx4V{IsH>x%Cd7?=wD7#F+Q|H-R1{y@&-#Ec+1cJ4aX4t1S6k~1f%&ikwABi!
zq(%%zm|2g)`1$!&u=e;=eR-gu#?NWkxGTjDZxF-|3eD%kb<w+3j%m87eGGE>>7v!d
z-i|9j>&IF;vhN%^d=lCBcf1}lKqQ{;vDGTN7NL~D!b~M{{BRjwN4@ktsuj)-+4aEX
z?SV({_9G653<*{IBiGBFx&61AeD=RAb6jCTEuKJ}&Y-eY)AdgI!VzNJkJ5g@eaQ_v
z#8^Qt!heGAZMoleo_>X=U-r*npO;r3zZ}K&coWdUY)Q`1qO2Y}?{szP^>;!f4<HNw
z;MJkYYad>Uc3;IaH@#f{<}_>_l5?N)UmYj;MtKQpB}2(pnf8%1E~7Y5;Gi|^$?MB&
ze`UAQR4QJk5f|SW=w%sBA)jp67}Pv5SvD*5Ih@Dx6S9Ke=u@5$DcwZzM77A~On2(|
z2qab$!$b)s5q4!|sL;wQsciApW*_}MEuybCHAOReF)L?@Z^+d-3YCuHinzX3;n4J!
zk-K#3R>zGSi&1+!qN2VRSZf~|Teu}0XWiwte*{`ievR}HoUc!u?TB{6)3%!FNer-G
zpNj`G`fJleh3)n97cIs_-l*yfsH=_mZc2r5UYF?0Htd=`)BI^I1EpS)6epo6JCUM1
zM#UwcbZ)$kz%J_frI)uCairBQ*>-(;M1XU`m9SgVu))KP!fC?&$%EhvOw8Y}^k*3c
z<b7F=t2bGCa0-9_O@?1Ccka2)IOWaXgU_c!Re$8q*ZFWS;NrJCL`ikj_LpYpY*fwO
zbe(vXG!wx~B}cE9P|0?MYJVltlgdNO(1vZE<n}h5H<I7#hvn0w{8wYAgR?v-CKFJv
zrk3fPZi@U#;jnZANRp*|aBC?HR&Yn8`5tVtqlY~iHx6-}6Q<_3y)6~YWF)B$gJ`GC
zwajCczuJp}nKcW)!hSc}sCzFK!RsU9OZG+PifD+_WQ*o!pd>;xUZJJ#s1KlPM*BtW
zh=U{*hvvzo{ECk2vK@IgEbMQu(>N!<0i=eah|7zS41YGrVfi8XZcWa5H@47x<P|jL
z*H<QSi5U%-CN=X%-zDc)z&LSjBgQYEA1J0txpV!E^gqof`-<(dG*U<ks6Cia=RUEd
zCEHepu8@9&?ww2oa&p`HOt;ZkjgLx+VQli}*RAPdfuy(0Mk<aiq;61z3%O_nvuIiy
zdG~lS4is96uS_<#7i8(ljgGimZG69!=f(I{DoO)9O|6YgDK5QyX^Etx@SLlJ$6l#F
z>53BX*y@S@)^dB7geWAk%tND5w)@q4g7bgs9S--ym)P_Gg?8nFbQ<d}`wwUSd|iQ*
zY`s%%Z9}`bv+`=`MIti!ya3*AW5PF~0c`u<xgq;x7hfFi+F#7!2u-66sQ5^$iHozc
zkAH}lUmxIDGemuA@MkNrIq{5Wf5mTKBtcT9s*?OmOF{*8^3l78TsMB_&h0Vqdu|Bk
z3uX*65n7P`cGqpRiFwvfNN#J7no9^e+dRzdb|;`bTJ;S3lL9yGzx#hN-0M=!@U<9k
zARb2(Zq9urXM6hn{TQ9v+!08po0-q-OAH9veKnl65>(fzGiv6WM{#S8!FBNW{=vdf
z%eAR~MLno;+1F*8qJ%=(6*)8<TZu*0s);#G1`_%>uJl*SmtTYs_I`EZ`0@nnB)!_#
zce%#>kv|5_`2CAvNWoz@{!FnywckbIONATZET!Vnu^}Ft`EXUN4kPNx3x3P#j}y&a
zyHB**<I=8McBL%&hS7?Xz!hLiYJtI<Lq}Q&AnRCmeRy;ZN5Pee)W%?TNouV+w(^_U
z?IF%{2?1Zy3n$E?+13ROU+bSD*pIr|s}OaP$;8DOnKWmIa_B7oyxJYw^xa?|isD~R
zSaajDvbd+z$M{L;qxKH3B@auC(>V8ymA?2VkVXl6>}>O{p+dg!@F^S}zYj5FOCbAU
zX`yNk(lh&dAZEVY`|W-nzQa;p;PJWaxbflgf>WwD2=82ed7B8ngZr1YZM=g`bI8*B
zP#LeF)LY9X>!VGkpe;keuP^<ypTx}Y=dad@nL$3Aq&7?9=I$?FzVsEF6g`f6M6MG~
zP9xFHCve$|v?Ebbs$J;Qh#_GDG!{F{UJU%Q%-?!^j+_>`bYe^;Z`VO!N52ApFI>P$
zrP_;_W19#pvBEgbtj9rFb4S!o7%xPK((M|vdg0U3mQPG!nE7q_OP4O8axI9#&*X_~
zU!G6OkKsZS)iVw@wx?IpN_QSN59{le4j(i$60f(`vQ6hyRwgwuG}0~MJUXjU*m}C@
zzJh>FXUO9mlkIjBGk$R{35fx8VQD_wpC89Iux{nr#)JkrZ^mx!=AR<$M6@YP2Asw)
zbNyRD9UnBLR<t-Cv*H)VY0%%rgt8d8j`F9IqNbIK9Qcp5=X5p7Lm7-_NOf{K+NH-z
zmU5DieM)}I`_m}p*7dd?ZoIpq`wa^tPC89)1;e@5@lY`Zh+_oy1M%ur^UW>!GwR%8
zG2P8l3D={pJRx_TN0%fypDAKgpUw{Q@VI@@2}d3YMya=bC1&S%QvG7E)T%x5p%S+t
zBvD-pkqJ~P*Gh-t+mBOD?1y9a>+9|BI8Z0`gZgAVo|{(4G(Kd*;Z}hXdsby=anW30
z^|pngi16Ez<lMQw>N@j<`N1TmFU2$1SWTAp_VLSJ=gAZ!`f^r5J8xp<Pbk)1#<fAE
zr{9!!_~O|T$)i)6W4<)1kN*?W?kj@EmB7e$=xUqtPn;o7!kCp1GhytaoRfUba%@T_
zeISCL3>LoVqRY~~AC_FpC$J`oj%*$Bg0x$>P%8V{-l{oQ#Puz<42#M(*uzFO@#UH+
z22SoV*_+!ec_&m8Yb42v$_j;3r_$FX%8uCY7EHca{`t_-S2=6)SM?{3=I$^~Q@OcM
zET7Vn<?QZQPBhDU5?zn39xPE+Z2rX4?r65$VPM#kAd`(2z>e%}u7KR_^H+nTj41P!
z2?-}&Jzr*x;wQcV(iU#3Q|*i}1U%L9@aVB~=8=c0iNo{ap1!$#6DLI|Px+{yb4nCS
zbiSbATzbImf{xw}mh1wCr_L3UT7-=I%c}GMGP4`WYiWLxCqlEV<W&1>c=4?3c)wy|
z_YOgyi{OPT$BgNuFIzI7aTurSq+feAr%m_dpuoN@Z)0lYFs(jq!k;@#ahT^OE-bXE
zjE~uzNmSmK$bz)&g=<<*_y4tdHk8#1CB?o{zLtc(n%d{@l@lBxQZ%n(+YPJgVU6K1
z{w3W_30YDGEuWO~{kt?43?%#VwO;EsZPcyVx%*OaJo)}ZA9ouwC%gGvs%XgQ`>$u6
zX40C#;qFM=cJ3_S#l8Rx+saCw1E#Hip_nk$<)Rnk?~aRN{M#NV?ItX*$iJA|;xGZ1
zU$W!piXo4$w?rhZs#WWs<y)VX2c6C65>iDAH@J09RC-^5%7sy?VoWgQ^|6w5!$v<L
z15m1Itx41@bB&XX+FhXNOpCWN>MnHV^t{?()N}hdE|GK(jf;NW=R2qhTsJSGR==>k
zd|di__wN1Ly?b2UNM(7cR=x-$&amAPz-v7lQmR^{fH%=>>4Tm5_PQZbK=gyNr8kd{
z_Qg}`OT>ydw<7sB<4Ks*^v|w<xXDcE4du}bY@k(!d+O9feKA3Z+mpD^5W9MbiQ#Z7
zl_#+AVR~+yIlb5QP5FaLI?m}PWqI}GvN#CyW8w`z;VAU`2>OudiBR~x+l8uPu>P?@
zub=!`_w>N>@fk&qCqw2w!{@N!FH=8UR64dx_kFYX1jVW$ORP9{fz<ou>w~Vkiq0Gp
zwL($)wD_9i9=Wt22^1SYS6ZJYbyc&8#I)1b+qa$BbPsC6@s?GA11x|j1bhWS<Ad{i
zgg*w3<sCVKqofQ0ub>feuZDAG%&)V=DEOE|xAPROL@4G9kcx?8=A!RMC7L8FEcv#6
zHIVh861oE%bFVIDe<+_P^|vuosRpufS3}BL%T?hk84U9DY2bhwwgT6D5|)!_KLTN>
zyWVdtC!1tI6JgYw5AZmsBRC>UZW3W!MSYz4$@zEHUX$rK?p6oe7t1B;OL)JcNV{eH
zgQ5JKA`Ibcr`B|v2QnoRTC2TC*T63FYDW`e6s6l8xGMY^m_c^z@UdCC+ZM;SQ^^Ug
zoJ%<(q_Lrltq|;}nbCU{__COaUYgnJ>=~w>$5KP<`A4&^(C){?V%(u^Ei*%yeIDz<
zSA9nN?&zN~yp5AGRH89BdAciYayL`z`#sOwM~>j@)~BwAVPs=P8K1cQvkZ*sx@h||
z>iimEzBIQR@FAiWk7j=5CC3F-3=#W@(qDRcSa!aw{gds>h-2JbTJfEi6>N@kbB&;g
z=3sg;{J-eB?r^N%s2>qg8QElKkFsS;q(ZVsW+5Xhdp=aiDiYa6*(-ZLO0=x(ElT#@
z^F3dWe(!a?*Y*CVE05>?-uJoB`JB)BobyFKR9=xXIauqQp;)__Eb?%#VO{nhDJ#YO
zZ7w7LIY?R}8h^F^Fds&ySPu`Bb`0Ead8INxP^vSyF;7lPN@^Y^@tJ&q?*wtFX;xI^
zGz^s!px=;j+EXaGT;;lu-k;)aR=2s|q{5~C_OVh5ZFo5L`Nc?j@;qIClFh<jpGqy(
zX?XQ3&~&TSi=t4Dr&o5+`bRX(hq;GUEYwLSN$4b9skvV#W&cZFD{DnQOr+x(cjA=`
zX@#G^+1II$j?~^tkcc(y8gCKpF7+ZJ|B}$We(;M$$pv`Pco`+${6dR)HySDHm)iMz
zYy*2RHmkGm^m(m9lLp;YDX)#(Q|G1%&d&BWb9}h{#_XDl-|mGNUIP(1ZZ(?3E9CjK
zqRf)h<Bo%xS@JJglvE>kJFu{D5?SET|K?tN%{X=srQAH3IhbNBCVtI{&<R!KF_V4w
zfK4u6cIW8U;WHA)!eK9*%>Zt}b%!9D0dpHiNT@zIygXHqIGxl$g^NW<uvX9`zfa>@
zZgTH2fViX2Y7<kfe`Z}jm^sP)m{jO8T>1K&Qfz7$O4~*izLM?VJiAYe`yWT41qW-|
z9mB+De;V$YK~xxA*%4B>o#m{&lC6-6xJ-6&-fxZ9g4r?J5Pc+{ZNMuWuDGsc9&GR0
zJBLBO$ps@h=)*}en|}TJWwB7X@>?B7gtc5sE?7%+UFb8dlXjmf{BZ9pY39;+;^x}4
z#+7xQ3V{)?0s=CQ)O%mY4}(e|6#7cJ-|jE|ds{)_@yCw`w-p*y$T{!m!dqq?CE8%%
z%hXm!+KmM1q?O5*jFJbPRl~i}PZh&5)KYqY7m}KubRC4eiW>$Z7g1n2dJ)qw`}@!1
za^#!rUS!3>q2qO!`bKj0?C$l|!-MV)k0?6qr)cg?$;>+3QOy^R-uNGz`w491f<1g}
zLTVyIcPmFFA9ED$Y)jue_GiQ`gS9V=OzSD>vzS~(Q4+*<ed*oFQ8*YE2}^!Xf^l7F
zN^Gylxz56i6G--7N0oee0)f?s_K~8C+*z&L2~!7;iu}}*4_V9<k1sWTiR|ynkm>lt
z%>&t>k9+uAhLDX&vs+-}5HHDsqoX(J=%U9imf2S5w&`*p*9fL@(bbK+A!GE@o7<+$
z_R7-W;>L9@6bFLxV;dhD*5?aawt3c~1Jrey40>{J#9S%8%MlEOgEuQ!A47ux4>mrl
z-dIkj&Dzc{&Z@VEY#uzPWYK)s(=TtOkUh-N@8=%8cyIh4EyZxUkYR&_=aarZ;{IcU
z#xU+5KNy`cE2FX6ANXjuzHVDSz@PPVIzB7ob4fj?7H=Panppc_@?+$HQ;BAurN}&t
zD!Ssay~r4ge`|+K2S0506Q|$<2P+M&HtoxourB?FGZYzDh8pkPExM(E6X3sy_#H2E
zBr<Fwsaf**JX_|ajy0n0)%o%m3Acy5x+S{svei`X6_D;_-(Q^^_;9~?+vt0bosf4U
ze!@Kpzc^REe3N?=BqVQuO`L8D$1liL%GPB1mM9)7FE3vsKpzO4SuJ8Li|Z_&IEh@B
z1m>=;6B$o;t$iUx;ozS7ll?yV4exndC4f#x$LxTZiDf>wUL`-IKR(>Y%qv`K`r=bo
zLz^k$aH+2{8lm|9&`#G{oK%;`KxPyp8GgOPjZd**y}wnAaZERQlwXe%pzel}R9a{G
z95mgCNi1$f-92rAf!K_fuoDyT!z7CJmB1u=^az>d7<FNt#JSvy?KRC%;Q&pG<9(fq
z>m)IJ8j640k~_;s^POt#$&C9-JVFI5eoWz?uBOzfD8{GcH|ml(+>1^ZzT6|E@&1-F
zO<*hV6+B4hWFz(U6jn9i<GbST5BzTRSRU?KY-$EGpjZioe&`wo5|*nslx#;!Qk?u3
z6r>>f44Nke|C9mXzd!MV2Xjqy)lCkUN4x$^`0CS^H9z}Bavs~4+`Vp$#j}2!n7qxP
zt6)`t`kzUtn*50<rTK6#u`F4Vtb#GFpDeXPe$4)H?}Cr+-Br=<lhn^}q^X$y0fKt`
zJ;y(BryL^s_<L@d`9RvP>lYqOjKxj}-tB7+ZF(iIaoMc`Q9Dx04K+!1ZFBZ8osPGk
z=~#Zh1dtv8h$;@3g3q{au44zti4mSxB&71VI+0^mVY0*s+k{W?nvA3{1U=v^lRf|D
z^cBzDrz*^Bw{X1qZ!>yWt8o65i}@h=XZLFyc=00}z~%yeFm><NLv>*IDeh8z#2hg?
z2>WJv?(Of?K988j<B2Ryt#IZpKEJ4?@6+d<X)UEbY=k<`d%OqkJeT$d`>jR&Dw_AF
z#%K}hsHwYCJv9A#!LK(3IoccFl3m~ZORD;AfeDBhT>7{kiqK6Tf3QM?2n85l!Ar;K
zFr!&f_Hg9w1qt7t4ZFdYmnWpS4rCo;c(yC7yK=L@GfHqRo}OrWu*mP#lGqeMTX2S2
zpijDfu-twY3XYR0!NIgu9;>gyHp9N_)&qUV!O9u~Z^1A>a2$vq@WoO-fklW=sq&$6
z9QZgz=pW}pyEeA=7%3QCaK<U)q87=8+Xhdt{kt8Ra65wdcpiADfXnFRpvK4S*-gT*
z?Uj@3hF8A+yi7`mjUuB`-{p1j%JN~nYVz>-vrBJe54Tx__6F6w#ZF%J;sTGQ_St*T
zS94)tMt96*RQ2Q3zwmeoi~uJrImC_`n1BQxGE?R;M#P-0E-T|6ACeisT~swNf!Lf5
zyY=P5Q<2Ivj-Eb@pWyp!nc5}1aM$^}5Nud{tp?{G-aQQgSG6yg0)L3aMCM2BF_rI(
z8^%vEb*VN(dT6iIIhs`vr-rpX+g3%zR#^UPwD{~zjhe<!moRJV(@y=I-WtEZ$~D-u
z*oEfIH>r)8k19=692)KRM3ImjpFgWU9BIh=G;?BtwN@kbeZtz$;^T~lUUw83i2-8a
zKfdC8ob>vSBCb!=nhgl5YMg^AihQFWcI$)D-69~lMRAQP|H_@^A5yRUdC#pFuLa|y
zWYO7hJM*dp8t>l+6V*1lV0QJ$3o$xkE2%N)>=KRkWPhqA6+KZ)j4yu_&hYY-vSrJ>
z<>I6`S&klij0a^y(yO&Q{C;QQi;?BU$>+A<C0m~4rW9qeQO@RhU0o=$@K^YUE*}z7
z{bd^wmsBSdSDGuMK1%|4eG@Rr)=daw2T>OE$A^p`40enCu{9kZrxv|XznL?!xM%}|
zrRD6gPGBb!yi|$NIv?uV!9vZjRKh*~FS0Vj<M4hUer$RZ9;eJuBtQ}KINGQdyt3(*
z2g5E);}0GKKD~;1yZNU*Ogl}h%$<|S>nGi@HRLicDQ%HxUFgs>JruWzc^*8$2lk@7
z`HF+uDP>Zs&-lqt^1_GD75-68%LEP&188wjjR-Tp?79XKaTC1nSRFa<zcoFDb1MAx
zmP7zsgi_aQLrLq<r=+Er(HjSwzwoV<o7T4#&9ReA5Xq1H*b<UKD;WwYGOEHO4AC81
zi-F1Xt3TN?rPa03jGj0=jD_hfRNbC$t8kf_aQ=N#!DOPYC0lIgtXfsO$O*(cPE-YH
z_#Vp2#I$Js{A46_Ov<2Sk;S%iqxV!{_aAF$M@bSFzK8A3t>pXfoQx277t2U}3P@~H
zq{c-Pq~eyt8%`|CXo~W{HOMw<wLUGHj(cpUy7I8>i?2|ObO_mpDW`yW$X&c-zD`&A
zdh_A!Kes;MZ{0DO$?@qL-)5^z3@G}yL7~`$qQ3cTf;;Yx3Qt#JU?JWYXNMgrDIXNX
z_j7r;-B!dH<q5151b$kUoS{ocg5J+3>~=VNjBx#B7zO_=1V<I@2vuxpffJxImUccR
zYkwKH;g!fX^O!S=Xr(q+bX8<+TN0#Zn1w5!hs0G##*^h3Nn`eM?&77H(2$w^?t5Oi
zDkb=RvL^0%8#6|Kd1)1H1Y=GFryL#kF1ma5dq_jLN!lFT-;~esQHxr_Z3d&#Sm!x0
ze_oCYm`KLE?mssw!6SRC{=mV<c?S;|;MA{7b7XR;F~ENEOS!_YnTfBXij<_a+v@Ai
z-NXM8?w^LM_&fU@-<uY?B$lt3a-oSO7=^2mlv#NoI@nOS`{LSJiN`m>j+ay_JE|7+
z;CFnboSp0nY<8;7pZ7FF73KUHCbq{$ay<ZD9Xi_U|EDwh687DFUf4XpP<FdING-DN
z9yBS_J|4mRF~%`L@SR&>uTUhH0A4kO!;Xz033>T7>VM@Fo{RADo4j}pjAPePOaKeo
zHEif!(<(EWTtxYbr|66Z*yWLt7X5<+tYFWl@VAt}Qv4EMWBf0wk>F8shZ2MBo@CMR
zbkGUxhXgfR`T0#{RFf7q@&9V1^*B3i3~zpo`i>V&$2H$Xa!b;5h9K(XocC3Cf_o#!
zZ(-bvzZckrLtBV8J}W}kE0d?oVB;&0r&eHZo;)_xBO)-u$SCS6;~2INQFv#jAT2gM
z9u^}p5BB0c?t+GES8#7u9TOY=e{dm(_6@;rHwDLXp)581h^rW*LiK1=J(%nvkN6s-
zKwMabPPlJvbz`tYn<#n<bB*z7P|3x3Hb1Ji<)RCsN#9ijNa;AswsOtfEew|mWVgl~
z2OS55B|JVZPCdlUzcQi^xQf<B+(ow&2_W#JjdRDuH>=1K*b4+T`@0<BGP}{$Ee~L?
zj7X=V);Yr~>Z@ZF&8hyKaPEoSUya{7h*0T(%2neTYBBe0sZ4e?<btqev$Z|ZcXxco
z=l-&t%{f*ULCa#t+brvkTlHfuM_GpFv;*0#6kTw9tlE4_`<@mBnQ~7gaHNTkp%&v8
zun3ahq9>;D5X6C%W@&~)huDG=FZ<Wy(?$=&bBrZ}Pcz1UbZD2(mOMBf`i2@(j3MHw
z=YLLz^X){?@;(SSzK3<hz!wr~H7THdz`_>{I!G}N*_c3xc2qTGLI3Y}PAXa~oN*GX
zJ>82fGeW0Xj-MC*x$NKr``NS>V>~O@_v=sLcGbM0s<?dRzR!)t<<Dd&gA*1<Q2^f)
z0Ru2W0-h6=KZa}Ki9?5Y4?G@b&f`_f4k4>vfK}TQE)l&Qp|~%JL&}bp31e#wH^Q6;
zSk}J79o*?ie>Z@*Ud=DmF(-aK_rw!&Qf?&~oEmOf6z-y@01f5@7YIt?x|ECk4tj<s
zONujLeLPi{=pT1qapqLv=ot*87rJ&#mfIsN7VWbzl<ZGf;fqIC6=fOY5G?;AM{VKw
zj-wFoVe&$m1WV>WYhbXv$Av>2td@GSCqpQ}-fWBwLOyH{+8)8)NY%08B6ww9HmI~A
z`#t7@nmjLI-5Swt#1M-`A`8)8g`wc>>kCcn`GU2W$B{*wqu9&`t$rmhN-Zei%_7jw
z(<Uk|IDT|9?mgLJN?iUL=37pn6cD<d#Oje8Alt-*B__VBEMpD`%<@JlV|)e5gc7`5
z;V9PcNdHZo9eSD!bxRR<ds#(5#0B^@(RnqeD5sBEucPlD2mbiSFv?#Txq!}hg9(nF
zrxH6a<5B02JnqB<#@9?H8Yt24UF|Q+((GuYOfhK0gaLJGQMfmDcUzudH&=J>#T~;2
zPHxWiuj+dHgr&}^^7k+n=YI`$*tFvbQ*J8d*pNay%s66v&Vg9`vvAd84`@OO|L(j0
z4)S6f!ZX|EAD$-bo6j?boI^2EOr@lK*m1bc7`%Am&QVxhDg{7mOeiRgt$cnecGY8@
zw@>6jU^|%X(esd!O-ZIjO80Gf1k78(A)rXya}1@z?Jf&liWWT1YULQ)Ev$)J`abaB
z3!F_R<IEq+Elqw|@Irsm?ssnb7l_2jpCUwJ;1S4fWNw#fUY*ehc0P~bgt0m>jiK_l
z7mpoB-))G5B8EcpifA)z^GNU9WIrFfqD*`|ESv=jsu$ooAJ<`>`R8Tyz$?efQJ=&5
zm&;>d<&q4lF6CV37h&gR`0h}`wd^6yK-$eR_m_{s0l`N3@8dM_B;_U>tCkp#DbN+b
z8WP<CfADwdyExa3)ii#=0DII41aqJX(QEh>oZ$3C-&g^JLO@3a$v=bZfV=0gwgSY9
zH09P*qouW<H>&NgDZ+6?pz*eidJ;TnJuNRO9-AFj5yK>#EZPWce7@93Arx5-9KX8p
zEzQLOwn26i=4;@np7vT7EVzsiIN|=pz#p{NQTDZ;HC!Xg$fBnRoAgSLpy1SpOb4&-
zZ$@8p%mt`0o6^7o!P~^h$EiFGg7;j7bz_*U34m;3DmRONS5^kO7i#Ud0{u_oQUv*>
zHJNr^h@<9Y8ngWel3G=x<}gpV6bL4A1XZMo<8(6L&HMqMcT)f95sQL<2NkK^ratJg
zc<RAMdbqz2?)$m{CEjFvvr(MjV{{sd?_KW}%~gN+{@PonGxkVYJNUMTdhz?NM7Dkp
zLC@*n>zHpU%z_2mRyjPru!aDo9fK1m0L4M@Hn=5pOfz6rBQ$?Lw-O8*)Ha##XVBW;
z>_D9j=m&SufzAEQRp%X#+QllF3z+DE?+R|Y!58m&{V?3fK_A=@hNBzF1)IsE1Dlyg
zdd?B70aDw6F!en4Y_Go1$>V$EpfvXPQ?-`s)OUX|UD)n(Muy7Y7Z=}u(@Sx6jk<Si
zM?`QTe_b_vs)!~+oXAN54Mr1Z<N|tQoj&?5aB1V<MX=rQvGLux3U?Rxxrz%SGlr4K
zNO8VzrTvoBt7WXvYuCgu->Yj3CcWMpj8EdAWHNa5(;EJ+savKMrrIEzi=9AZ+bPIm
zd=>74E#K1BHgPV4+?Pkd{Ad&R_?HI1e)6<%IGI%M+kF@<n1)HPX8cu3s&v()5-M+@
zCn4}1{qh{(ywlbBbdD^<cOfDUkwD^|f*7|9=0If8|7+Yvlv}g<6-FbyY6<p<t2=#X
zKvi@=&XK^CL-CR-+wj4MT{kle4B|yMfpOc_xId0S--VwlFJk`M^%`_XXS0@%g2uk<
zFU@hhH|$XFkWbz65iiN@r6d3Hs*QA+7zbm-uEfA5>4!I$cRo$qog?PE%q9m%po}h7
z?#;M!zc&oeGv{{Io=8aCrQ?IH0n@>*Kc(RBUk<$fFJ9#)IrMAfW=>W`{Uhu4)ZlLn
z5rEGD72M&7_Nwvj1IRRo=jA1Ehzlza+B7xt<{2%4i^cBg$BsgF3=9X)_bg1@vL~!@
zY75+{Xe8eFH1ZTeEb>@NghO>c2Bjl*xmrPP;#brFpvB=BaTwk)UVokQ`)d@Q#=!4q
zM=nS9Ee@Y?eKv%!sa2l@((V-14aBx<d$@}_>XN5PRCs!BW<_VH&JnL2XR}uDBqTyN
zRo=?6B6wWi_Rcl*Rj@60e8poi0&!t19M>G;M`RgsPthf(l4SJa3E)fubYQ@T)LZT(
zf!kWcmopd!z`qz`zXU>xp(L<ti*>sEKVCTT&o7DM4ybt<Fg!dMXz3Ax6;$Jwa2aSY
zl=!ys{UU{<La+wbdH2;ozMXr!-~3zJ8V>-X2Kd#U6dyz<YIWzB<j6in4`HmhPaf>4
zOqVS{0c{TW#r>8d9!`KfY`<L54_3@#WS8J7Gr9LB{~%dXFqsUwX6@x&$9~reJfaBc
zG4X;{BstH8`RW65a688K7FVH21Mq;i)%)n1T*;|c|KQD3K8m{gi5;kx>#`;a^W|Oh
z?>7F!hjiF!^?S0laE#sia*j_@^&hsJ@wprB+<h)T{VN3~JP{#AgGHf2QuqelwO23`
zF1c<;CC<d+?_YrM6Wn@D|6J!y;M5vOzXP|Xt8X%22@a^d<5k29;Eoxm|8qb-jEZ0z
zU?AxK5V$NIautLzS0UK=I5C#E1=i?*x@gy&sr`E9TwBx{<`<R>O}00>J*NXBlHJmS
z@(>1h_RmetrJT_9uHx6<S+n_*Fu&;V0SrH}rt0@obUiqrv4^rJP?-oC^u;Uyu~1lW
z$M>5~K#eobeY;#+xM_Ex)`#V*`DL(6U4vBFl`j4DFW1R$C5#TBNH1Wv+ZRfsb4s@F
z<r&ei?vphqZh^moNc8}<-|VNc%@mH1fbS+)#bC>;WM64MD6JdC1}0Q!I`A^oF%e@q
zM<PZ>|9;0@-+HuP=0X(7g9>hdt#0oUI~TGv`-N8<Mj-2Hjfy&r{JK9Sass#tPi4_;
z@EnC-<w@AEeUS^2lKT1>L*QUTk?9G#0+5F*iPg?cHJ^<(d)L#kV&MEku+J`VzOTIa
zl--f6>X_o81LxnWcT+$PeE~t|934l0hmi_5``p9yQd6&h%Pvlej2yVh{9D1=YsOSB
zE2D)lOD{TIBT|<%xu}n)N{m=3KIPq?v#;qp(#?Eca(P^Lz<w@_`9(K?H30_Ls4-H2
zV-9(u{mlQb163xaqTYD36I5{PC)FdkpS!2eeA7~qx@s`M@4$>9e9+%vuWQeIbHMLY
zfGD6s@eJeM_So9ZdrpM!9thUAG=mt=<SdGhoMyVV7f+vs>MiD=8U3+=eAhX=uW^zJ
zO9KzlW}>=?=7v5w)n+cdX*o%YQ+$jyvEV}LnvmdQp-vzO_{7w$5Pw|6!WynIv0?%P
z@e(4VsImNd9aL*bJ*8`G=^pz#1wOD=6#DJQc};Gw`$V4YWSHAy2`L*!(UwfW!!=}7
z`ax%<g!Y);a!5oEt*1<ftDO?#<0pkUzKLTYOq<*Ehqj_OP8;Jc#BTp1icSi$Ty#UI
zsQj0LgS@r%(b*Qfi$8vUIYQFF2qIQ;id2Qzp%CnzuBIaWsec0E=FdN~!2Bsj6E!6K
zIu8faU>Ot8RXHiVb93t?-|vm>yd(nluFIGd^<Xf~T$A-~=94s5A<P4Nvp}XHnjiKI
z%EAB?9+U=?A6;J^?0UN40)dmW-16l<!nhMqd;5$V#eOsY!pYc7sE<)ZzFa!Kv2|$F
z`TCrZUEcM<CmJIRi6nMNNpz4WMh%-ci7Qmv$HAW<y=69fnfiFwxCt}IW9t5C0f1k;
zF}Gm-hdAUc)UyD?on|;GD2XkC2xiYxgb-umoGjxqJni+G3sNKw*|NnxKEj8K#!2z?
z9w0_cz%CeCO|^)jn)#1|7^6d3?Cw}WkV}dtehqT&xA1iA|8j+Mr0$MW-1;u=v4H~2
z<ZzM0WJ^C@T-O@)2${aYfY}&Z-lds1ZT+?HL}jh0v1mTHfa$aYK9A4oeY1YlQ9hr1
zYWeuK6~Tc>vZbBGjvxbijwLoGo!G$utni^m2QkJ>aOOB*M<nuTF0+hD{3{Y~J;YW7
z>o+(Z_Ekg2{*S#`PTXmXQ%0qO3QP4Fy$^{)GP+OFr8{E3aFya!*wKEIk{uU|Uz<qK
zz=Jv9pULcz_n~zqihyz~=KGYdO4H^wjQ&7lW2qaW641nPuj)hM|6~!K!dzZC7DRBT
zXH9wy%?o#;;<Ew^4jm^fQHhUR`6%af*BAq#8NB`|ew&?n{OQAynu`-s6E~72D?wcM
z=J|8Y8_{gx+s*Eg-><;26t?OUpT<T}Y%PCm%XT->P5orz3&0`{T{Z5r*5z|(iAiIS
z^)CVwzfs4@!aRn9TK~K|^L3ZrO`hvFcum9?8erSF=IN9!+YMXa1i}EH9u<?6k@+)?
zJb>L);3yE`>!Z4>dvkWgHa^LDog9i01JHJU0pHf!#Q%n+CmAv3@aRBMc)FSY@@ZyB
z5?fV{lEgkEIFmACdD0`du@oZ<Rq2E6zYOpK#{M+UpBZWe(DcN`%G#LbE3^>~Uch_e
zTPA*=%Gf}jO?FXrw1|<6d3k#XC1RwY<q+ZZdsOo?{rbejYbyGqZAYQO8=Om&5@a!P
zL0M}2ZP$qm*BbZ@gngZM;}L3p{s{HGH-GA@v~bCxxBE{#bKrs<UZMl_oMtmjzrW;j
z(O3F&O#pM9704?*C*qB0maFOr2Tz_k&b=1!5s5p4bi3MS`VV{p%yCALS2)dPTQ4m9
z5I1YizZAms+#Px7k%(mcK15c75RjOp_ca>CD=i-hlq<uq3117`zwwQDZ9M?-c>Z6A
z@x_2Q?bAfWLs+k$LoC~pH!%SUOsg=Q|0%py{>c1zn806PP=Gf4Z#MjI%>4<LOPK$y
zx!CSvA)~TqT2%hjoDLo?PWJE0S>fz{#-RJxu3#Q)k9%oh+>xfxn}!v?0x$-;g;>kq
zk9`sow;ig`)utN4!Oo4U#uh7AA-9<eI<KOngky`u&_TWnsH0oACC|vrEdRGHr8AtC
z#E4oNq~`Zq6R$BbF&R-u%1J`r5%AYyO&0wCd$!H4hp@i(Z%N4)$Q){T3bUsMv!B1q
zja9l2Asn#<Y$*7OE!n_q=RP?Tts*x~rq%PV_%T!%$8-H9`hy*}mZejy!uq@O*!Vb+
z=-Bz@EX6F!|FuaPRCxVE?a%7=I4X6lGe`s(awd4M{r#D1=c-=vx%V%>9ywLU>j<u8
zB~*#WXH^H7sEm^?fh}?#*4jc5=0H-IfR30SblKPw7o3AOEbeR1$XstWL@m=0g%;ec
zRxGz4)qa2LwdVUXK}NMjw?*@fdtVn@s_57ofuKXDELSgv%f;IM+;`oFNT#U55zjPs
z8_|7c%`B+yOz%(!SzOnLD8`Fo*RbsTrqs->@=R!iCd%<>4~X$AfQIzv$HHPXp+z}m
z6+h@VpNJ6=-!&cNp+OyS3l+Q$+XLiM9T`v0B@?+-6P*R{A%;u;BkHEiS%dsXS)HfY
zPv{*Tj+pk?JCXvM?S{OFmdHj@P(?jytQ4=*$y>u+Uk(h6VY=_ho}v8k$Q<O@9RBoZ
zb@z2E%Z!N8-g_O*hh&Rzd(}Q$MgFVchf?e}1mZnfUy0Ebyzz?X^@n@k-y2ps^>6&z
z0D)+pZr!a&$(>Btv-#ARRbMVsQ`4QcCxnw|c<-fF&s_g-{O`UZ^DBNLD>770ldX9m
zZ>j3$uTvDx(dmR9w0k1rWUh@oIB4>_WAN&gj{GDEm+{8aNuY_}Uj3^B%4@9(2h(@T
z=Xd3LXhk1#xJ7(%@mcFoDs|o8G%_D9wu~&Z8-~WY6dfz8%-*Kb9a$0*k}EztCB1~)
zLth6u3ZF}Pxk3|;Zqi4`Wp%>_$D23g@!eT3aoIlIdCI?;NfZt{>5lt!GWQKVt^p4J
ziPxB2R0Sk7@#^Jc;-xHfp`mb>)XV)swHMS!<N_ljwv;7NPn^r@NdeJl2+sRBRWh5|
zPetb~>(L=p7=I*&)8s3xW$$;Ho&m=U&^s!DSp?+>l>@tjrZEJlf;mv3)J++(?6(M-
ze_v&We;a`3*y@SxASsLjGtMocQ4aeP^7GxJt@bxKN}QnFy5cgQeZ^(w8%LE%Y|fo0
zD+9G&<<tv3^D+rUDbAny+K*+ddrN<GjJwl`*s8B-)eUtHl-sBDyF!bEb$@oL!Tz|7
zg5#447f`Zh7MUx~1}aCJ*}Y`Cdg?60b}~)v-iI)})ik3zu6&1IA906`GgHO2dTjek
z><_U9Def(=O-i|N8Hzqsa35$%+sL}}ghMGJosxIi>JCjPq`6SCDL}sptzMfuXlNjm
z1y<uZ2P&LsO=tR6<i-Ee2Y9?)Q|`P|MF<DQKu?#7h~QKFLog5pg@e<x*q`~gxvcRt
z?B&vR6P4ab&4XVVQZrZ0F<v8=qj0~SPm6vzo^NzzzEX^PQuWqp$T*lx(@gA&=HIxj
zUvC<3h?n-j9OiYn@8|Sy-H}5_B6JChhz4{H0$#%*9v#%EHZc6v3S$ytdji@hI6=xW
za_%$x#I=^i!ET#1_pCccuPxjC4-mDeo|V~7*y~qZVntqmRaN4M^)6TV20qQ!uB|c<
zx9|U;C!DSAQYz)U!v9VsL1d&Z$oKH>{qHYbOZ(l%{B`KDGb-fg=HPmGR+^qHCwQxw
ztEs$7$)gGFdv^o3vn%A?-7Dxl$432#rKo*xWZlVdovkZ&W=U)R3_6pESTazbSS8fE
z?PHGzDFaf)yZ2re{T7>lasCZ7V3k=tdJJV9ZE~cofI?F8TlOy!N=$%yi0IuCo;?MY
z<(mKgrShZVj(;akGVN_889IqEjBkdpDt#EJFK87KX=&<?*=2A3_N{&G9ot2sx|CpQ
zTLhyR@Ff@rJdCa^X`-C{6I&Sv!b`-3LFHj+@a|3i{a={M!+*6JrXxuO-6I19Ug=A2
zBi{F0qxxfp=LZkFi_(-zO+RhwU$Rf0-H)B=>QEAtDSPtqy-I?RTPvN^MxVKLcU5Wc
zGe*g~Wx40*!z6Dx?hJV#3VQ*1?pOT1HYzj;%WJcv#z|F=T)0Ih<i>wS#&*H$B!6ra
z|MktD5w>m|bo()-P9tp_*Z<zS+d5vtug<{vVps4u!R05Qqs+EU_WW5YjdYcyGF{cG
zx<&ou=~J$~g8H>}otwh<mg+}KhI7;yTxLf;3C9&Y<EA?AeZ?(bWPd5pC|gHIE4$`-
zJL%xTYH%<<^|gz89)Etk)_@3jkSLJ(_icszZGM@rctz-3nb^$rBDFwW|1R(|oY<YK
zq8&CKGi>+qcQBkW@oh*FvHn;(;n*V5r;VG}F{gHT9@C%0yz>1_1+v9zxQe~=xvIhj
zUIXD9m|(7}XfpFnZ>G>8{r)%;@p09`>|O9ArFCAFc%t9az8jN`M-=|pUGOaKz0n=S
z_#*HV&fv3X`%6fqlFOkltq3S8)cbHhRJa<3=_ogyTy)ES5=xl^Z4l?8mUzh7DReI3
zG(}M7nO+Twr&=KE2=+Ym-ur6XovZa-@Qawfh9MK%kM@Q@;fHg(lX!}kpIo~stpg1{
zW<o<Hj%n7t-W}@)WhrhI1KS@e0(2-w6a$YNo+3oYjW-s$L2jsW2<WeA!1eIJnB0*C
znV+FCBlKYW0>97B+PB2*QEV}h@elVi0qg$xKq7>#Oe*F$pH8so&8=+SP7M|)X6O_J
z-D_u$X}mJ1Q`=TwWHG_vfu_U0sPFQ(k2Z`RpYDMB)@LuB%~U)U02rt^Y&@W$<;AbQ
zIj#Y@V(&&=xLx`}WxY4%W?5*G|30EBKGYj@eE%WqgSBbMn{Th#sxN$Ew?NDu#fX$c
zo{yeLkMxg4QpAhbpUT0Vgmq4RWM$)VgN`!udI{UO5eBJmiIYi2wO#PmMYE(8Bp`ZE
zJ%^^2^xaSjEtqXLu~)X<nV~klF@G4JV)-@d8oZjYb78m|Y17QM?PmvJ-dfO|eB=7}
zG6(pb9bn}_uLvJM&4!6^H=w^Px5%)@y@Rf^BFx?=a$cb6a+8G9?_fkv`lls9=gkv>
z&+ft7@HWC7=nijTGRoENwzW6(+St!VG@dH)Lg0fmqEyU6x1mdGpnQ=sNpd*@5tA}s
z3;pKaer3i5^iT)8#t*u`#mw})E8bRzZh-D8JBd{n5T?d}2;1HMJWIx%iww@C;!b;y
z1@3(zwn+g^?^NYVTYL(&-MKyAFG3Z&0`#|~-Ir1$E=Xk4_S$E<FOL)O>RuYr9p}m?
z1~nn5{$FbhIk!m_<yRLagA`R{kZSWu$3m;iU*DTaS4!b!T+*xa=h;=KdW|<Z0iki}
ztt{&@7>Q28VA!CC!&P|!xZz&;w-YxXb?t?F*&o*VT=Ctj_;9Z!+w5~_!tB`e{anAg
zp-RJH=|iWiWL{(GR?~s92Wi&`DdSQief@IdYnPvH4@85&EfLRmUrQ;HUaNJevL)c0
z<Ni5n^JWX18vC$SXiI8N9NoGg>f0N>=_}!YrmJ4s-%NOdyHF=;KT?x*67Sqp<kg^;
zf^K}|T$+8n)qs+oJb5x*P_N3R6p=W&7`iMm-}1epIjla7w5sW_fJzbi9yH5+19cPB
z60X3>8)+dOWyQ3cipi25KkDr(y!pWjM`;C5Vr!qD^0G=)OzJl&EeuA;cs8ValSZF)
zrM~&dO+e-s4Z&3+kD`d#<SzJ@p1ZWnN6fB+T59+2{2li}(FNi62suq0B)clmEu1$`
z<&A-%g-No_)3ri>n)&T0MX`2uAbUAjFPpGE>8zzu(EiHxOj6ttEDtbDZF^IMG>|gt
zF#13SpAAWP6xVe>oLodBVN(#P)ZuZ*@K?}TTFnesUgtgQ?i`!ejMcX->&?GDfr(}G
z<QrXJc`EI*n{ED=Z}Q}vdO_~yH3}9Et*Vmva(9jSff83A$$Nd()`NT>F8ME~t`CVj
z3z=<IU-6o}6}G%fM3wp~Z;-=oprk`Obm#d$k-6gT-tPKrcfCCW_!R!8I2iWOEm7;q
zt&{&HXke69{LW%H6@A8{V4HLf|0~~^d(o%XXCHu=eo{=)F>v8-mDN#qiSRS(Gk}DQ
zJl3^VebS~BlEt1W4NY&YKeJ!^9j(UZ?x!HU>(F$jJI{c>NBSxrQBTF8l;p_U``qE)
zi?vkqb^ER{r`8!#1M!F&w{p!hRA>5g%I~~Wy)aQ+@r*lncR@lpQ>WK<G_QGZrn}lL
ztge3F^|qSS^5bpaKt+C=Z(UiFvj*i4IhA^NCTF>{jBbNR>K+fbxV(@-dhy0oCoW+N
z-b!z-UY>NV=j+e%Z;g;Pm%iomYh4;@pQpuLzLAByyT$3<W1YDlCgU@Ci=0=Vr=hf>
z(*)inYrW^hvf3OKDU;uAQy*Hs*n2Z}CfuSR!47GgVrbdx^PX3A#GP<^<J^31pwe6^
zOgwCKS1vFp^Y*Wgu+#R2X=wEGhQO8$q*eN2DCL6<_LN4dYU9I$nXY#^Va#k&Rc@Uh
zw^z+UP@bRUxxR2dtuVM_seQ5D=F6Czex0pem@gvxN6Q7S_f14r+tC|eWoeSQCOvNB
zmQfMV@gDkvG{@frnF(!{R0OD}GUuBK7%4}{8G=h4vyf%1z!5R(%fEp)au&m(d$Seh
zyW2~-7;~nCx1ljX(cJ)$JEFTmjX_zQZfI5wiI)CJNV|E?%=wWI&IFAx41$7GcjUo`
zY)S17c@mQ2RDPMzyWBF+h-!Cn`)&<!Fe0)WqFunx<sMN|8{YI=5PEmqJo^giR7M0`
z#13I_*_wGShA<Leg<n5c#VN^|zXZcJvbDo!EH;`xeKYpmU%dLm5_I*><lIx>Zyjee
zGj-Jor47jDX=fJ6bb|9VU=V=M?i#f6M^D5Q=$FP@`0YF>v3H4_W%4mkCI22fTgnzb
zaX}E?6RBVR3y+#eD3b27e41iJaB*$<Eg0=^iGI9(x8WcYiw842puna#pVK}+ad~p3
zdxd<N;$%gq$3cz9OuO`l%qON-L|+9B*^k!cHPickDIMX~DbR))t7$Fu@U}j!&36OK
zO>0wWk=Cs>+X9JcMhj#*Qv<a@o}1I>SNSso@zx&of0*2b?#t^_I(-iII|H*cef7pQ
zD&>nq@7mkjsqENP;$RBKPV=B!M^u~Ea^+uAg3o*2Us6#tG7l5CJ;%nFJaeuFx$oYE
z*YG)8wuub>{_^_jSsFzOi|d&cA1z^^Ah!eQAgiKjWS-1nF3h2*kdCk)a$Jn;XlJ@Q
z^lcTwXo+hJjooM&Z|g=&ylC&#<wd34Jv8cM_Kx=-swX@P^!GkzYjJ6?eOOYwlMfR0
zS(xE+`W#7Vh5WbYnx3_Kg4Dk1{A&MoRjWEYq+z`ar>87>4+m$Cb!la!9Qt&pKEIqJ
zlPQAqt`ukH9>-f;qGldx%RG({OkDuw2PHaZQ7|o0+!+g=x7$QT3>)t`&5szoEv3|-
zXwLzMHJ!s-O`zr;b4L;2-mqFne~xI2#yN7Li7f3_YY98vqila!71*Q^BBIUeg76aU
zYx?dkyi;Oa>`_Oc#GwrR-OFn#^kz^}5^FyYuA?|&N^^*G6-Fk2wo9UNk!>x#LcR;H
zY1Fn`pG7f3=w!9$dbV|~?x%H?P4IzQ39j=lqdu?KRyR_*OK(~xNjW#!N_fl&3EPrw
zr<OYo-!*J-?;GLxc$={#^`JnLGloN59$b+6I;D}rI<@4ZxNka{sll_o>oEVclKzS)
zO<0PUa(IG}V`(^8D9faGrE}##sa5}tQe#i${^I)}n)l6l4IRJ;8gE;aOtqIR^!>Hx
zv06JIZ2X9vqOZm!;ZFMXH;<+}Ih7*5VB;xY4$(Jkp!$C4!B9!ojaaU{yumW-ja)q>
zaTSkT?jKkmO(^*E@nibofsRd2u6BXj$mLO+;j+9D@8WmcSJXyofPT;l5bYfGJIs^E
zU8x?}KTwJTxKL-c|298F-Oyw(A_?Ixa$5N7_udk;y>#9O$UxbhWjsn}+1r{lv+YV0
zYkb@d+|jfN-Mtg02N~a`%=33)cwl$ATLBf(RQ<-ztmj1d<Tr;lsVjhEPOZ((a=9<B
z<P=!{#Onz4^<MuIYki<t{AE|dK%|&hc3R-w{UI3*=`C4ke7h_oIOID}r2;v^>3rou
z5xWwrU)aUNKO!x&dT#Px>|-xGwM;H22L0vF$T{ikTCz2Bvf=%j(}P+$LOugR7bM*o
z2NoNXnv%(M+{Z&cSoiFmMdavw2Y=r-MPA6U*Uk;5$XB;DAA8PZL7Nub5Opo(!T96T
z`67e9BX0tp5LEi+8<$7)6c|_@7#7{RC~Q9>PekMAX4`LjP`9_%sg}RqSAOWfy&L~>
zwkykFxPk<Vi*AthJRyImICR^pL4I;n5OZs8kdN<pu{E5qdd><tG;2s?D}LV%6Xh*Y
zPhs1tJTo?3z#w(#8u>g;ekHA0yc>^?9J3rk^i6>vnRqD#d}d0a00)xk_!Hq;<R+(y
ztd6YzI&%hwgEVkl%5!88F4$Y7es3bgXnB-hdg1eI{c;vgqFxQnpCge{-$5w;1B&uR
z@6gZ^ofg}exr7rhj&gmRaP;_+eOH`wqg?R_>ofm)1efzan3RJ;CES*Ray3im@``}v
zmZd+*JhRX4Zw#qv)heD{{VQGT^<dy7=j1FP3#+YQk`A+j`SL)|nUF8`p`!Hh2Ohl-
zdr$sR59Jo}{6p?@N!%$hv-h#1xv+aX<7%GB{J?{$!l@t{=|k@j7!hvjYgF%hQYGnN
z@sp#YR60Ycn7=yObf1VejT}!5m;`#iH4^7r6A6=%bTTBoFm>dWi<FfwCcl*&_<M98
z-oU7A{YuYLr0axc)cyKlQ4oU@IhL5m%%hUGr~jqE^SkSd1*&(eJiUpo`Na8+<3+E3
z%PDAjZG4Dzvb)IHviC1gmm(7q$f%)_sm<o>ep-8lS-+h%POW_1j_%1-{@9uRl|Ogw
z_S6kcKc*9{Sx;Qgkm&tTP_JFw8xNhe^j*d!?#d-1fTA>`b&NztxiNDR7Iq+2KKS{G
zNP29?<8N~9HyB}2a&Wr8sZ3Wr6fak|^v3;f3J202o}YDaeoaJLW-Il6@p^aYk2TX*
zd9&n~sNF#N0KeivEA2Iwb9)=rv(8AiWMorkKsoPQ=dt=8dPo<!sLamL7)1Q}E;Vnx
zx}2+~S?p@(eBgJmt%SRJXj8L@Mp=EvLmIT6{rO()YwR~rrL{R~+@(=vHGjCbsz$x(
zA>W%cPQc%tmBU}ZHDqg4>ghsV-|NN)&Y#M!7lJYSo2>02Lc}t#nXfXMoJ4U0XS>(x
zI&j{x<5UMJGd6yoa_YS=wfe?R&!FC5o>3TrVUxc=Neiz(02otWGIv(iXkQNT*ZYMG
zEw7JChEOj<22!O-alxRXJqgEg@@bGC6rCpf5vNzJn5SOV^#BW_Ekb`lep4&lw7{x!
zIq+5Z3v@0b4z<Y(ib=~#mezE>c}8Q049XZas*Q+_9;X^<ZW9?ezwB11@f;Mp?s`CO
z8Jz+?orf7d7|Qcl^kXo1Q;xXj;x{RJ3q@I&e*}&Cjg+YfT6q8Vtp7a`Y199V9GRBF
z%*_1A?@d5H-u|bE3y~XRYe}kh`ej}4M)@BMqV~h@nKwu6>*_QhI_P@!Cf7pMX)=&K
zZG<-K#iyWzd1#MwfY}`3v=TjgL+;OOr)>%<%^)D`tI&#OyS7laxGFk6aiR4MR%bLF
z=*qeRo=xx3o901#Zs=~zcbwqPf36vg^eJvFvr8?Z>xpJZPp7JXI;CIjS-L#|j6tT!
z8~Oac8g;{8fa<jhT5nFqk#lKxjkncrZPrzIXj~(BTGiv-J7WA&)ZVD~uR5U)6;bD5
zg-0mF7Lp0qecNC1r8b=d-t`uF`a4_E{ipK>{|ymvy<5F`dr|sw&P4{8E7P<?rSpHV
z_m|z>g}3-_Y<0f-@hiW7Og}T9{_w|hXF4P8^TQ$g?bY9|wUoY-xw9i%$1|ZOEo*ny
z)XNv7%zp1fl0E%Z;J#TSWt!<rQESb-Z0KW6SY&-CChL8T_(05C*Hr1_5AhqXybWQf
zO9aKw;cJ5Do?K9e0>clH1%PuseY&&N1)22|2w09a<`3<#Sj*fL8Xx}hkxM=FsbQ_B
z*0$4Mr_%ar@MH}z=LSOi7iKC&xo|*WTNUT`=C+n6PM2M#fw>gzFxu(K1?k+ydgFqZ
zOj%tu*PMZ#Y^D3u2~&wustH{y$j^jJB4YLCdyiz%udp>D+cYxHhuTp~$bk@L9hYs=
zE>nA(nXuRqBZxJ*23e)HA-S16S{&*_NyV@3Asmy~U6aOf$C+~P_|8sN87Ln<M~_h&
zWa-pS89yXRy&ZR4UDd^H;@`bJ9IKFA|3@Aa63@6R(i9RTusc^o)r%!x{H?1z&PCrs
zPMKT5)%Y03-GB=}8h5jRs9@wa<pD1*q~Di(xwrkZ;3Z69E#6L+@>(<8wruHby4q1Z
z`6JvVZkj>Wnf$u$%I8=v<2M2Q3#!0*)4PfeDER1(ZuPrc)v6{{!GtS^0H$Uwn4A?f
zMO(Y_Y{Yi?J-zQ*ht)N*@pwj<+oUWE$mCaVAYP1=R|J*mqlG>>B$kgJF6^H5{QW}7
z&<?RrfC!#b4S0`WHkb2IrlalFfmgRrR@wH!ajHqqTNg6XY}1a$n)LcN9PYl*v)jMF
zCAaL&Ev!e{48tr0#NiK=h=0&+7}l|>tI7XJV#(ilFwfei<Ebj)Hg~C-es?wf=etnv
z+jS2nbk<v*kx$M7*A}ZD{CnX$$DP|H4)-pH-FbJ@=1=*HYXaldkQi(^ey2bZz&CtF
zzVyZ<kE<o9>RJ5u$@4WbKDx}$2(PZhKEC-+3otPv<@Jrj$kY&z=z{jELvnM+@`{g%
zYJaoz*Jm!9B?x+zRXv)qs*`c*;wW`5z8@w6S%!Mr&U(w{B44ih|1%)YK6{w$eT95e
z7<H*b19p-$dH&na&#LKQ5LBi?KYtPs*_0M+a*V0i8Tlz%2N&|NX--Ci*{$NLN*=uV
z@UC@cPvPrPAs_7u#%5Q34=2o@7g1F@_2VN=A^2RV^M6&dO*U`H#Rz@{uzrXe5oVMl
zsdunXN_41%K5qAD<a7AFc3F#l=UK#oGd(lT5MuCynnEwv9KLy#uDx)JVPCH|etYUz
z;;W7H`e<nfh!H!KfgL8+*4?A@hA83C9uMV$26w7jm1<Yd?HC<0Qqpl!-C~PUqlfKi
zmKQ}6?3v&PU;DttGm)Gc&9GF10Xpg>9!`H-^Q^nGXWx0QYr=q>ch_GqE7Acnuon`d
zfAny)Or-=NqHn+Z7PEdQsVaMKZ`Dyc@q#hP9^!T1R0N;|V02u#mtWZQ>PXyW>yer#
z+f_DyRpVih&Eza+=ld+VPl_F9yw>NkraRxqFZu{r=3CcnnI&#2b?q(|bXpp2YQrcF
zGJel`J<X35lo5bBZ059bBn##T%U-8k<ITUFCGRmmQad<58niVTeC5lmN`e)PSei62
zF4$63lip4rbXKs7yA4BcmOi<S=5?npPn0@NG`as>vT%H&_P13l<DC8Hir%-Uh>cCd
zrK(-COh28<H)C|$q5dpm-IJfE&)=g7#lZ9TDGV~8oT2elOTKrjXfZ)0UfBK(44%`W
zY)$H%>wi%%A#BqvLfGi8Z^-1a^7|XKAj@m4R#GBzxFea?ICk1c={uuKU*29fMBrlq
z4yJU+a%k|35L1lc1|>k*PitaA>{dj*H&l925I`iF^Iy>}De9aDeDWGD6z!ft(ayeO
z3jgS%&_A&A<HGyRo~DB*)(vy=3(HVaLP<1gpiC=`G&kEPlU@JK<dFvE_i<auYp7s{
z{S|cXz8!hHmBd+)aqMVx(*29!_8$CqZv+ut5D?S{7xXQj*PvuB%>I2_vQ#z5NX@G$
zcz15u8F*}j*9Sg5qqSSk%#iMyQSmX!Bis!Cd{cNQlw8dolhV*+>p4%(ya}RzwxQ>Z
zjL?7%)6QVGQ5T=t{o#{-V&+e0dh#gE>$U)hcQ<l<CO>1zqBh|P34(r|(>sJOHoNw0
z3SK2PxvQkMmjy#>lvX`*d?a||MBBXWr+dGzJ*sqaJZS35)Ymd7vlWp!ynl!VrHoE*
zyWVkv$d~T7+0~NQrtE`@Df!s?e2=sE{)Yof3|U6CJEu27^5kG$z`X*)B~j6{pz1fV
z_?WK07zy$n1WLMDF!aX;DqE+{(q#hA+GyQbq`|(vFxd8kC94-k^i(;rFgKVkKtuVX
zKA55BJ5Zwh;OBd-Vhek#p4>?AQCh-wJMjXRDqFPS8t(|yBj{e#vm4eS8c=&5>I=}G
zM_219f6dM1%p<BFAQqHkUK%t%ugPdP!ua)-&{3v6#|TA$b2$oO_+m<9<x%jTXLn8i
z=5l~C2^rG0HUHZ*X6pPVC9W8|h5+Q;-1u{}Ww)+5Q<lkdG#(Xd{rx!$*UK+>db*nn
z5icRKZ2IVq2C;&}b_c1%A}Wfb1P5PN5s(<j<FVx!IUq-;Bl~_UN)Ewfc)X7wVl{oV
zsDv>m@>%(M#rpiBRwg1jx>-^BRq9rV<LA1a>fhfC)U%seKV-ck2TOr<yASgaqLjC>
z;8j7phMLqLPyRRX3p6xDjehmMwIa5CsrIk<oymzVNi&GK2an9OGYv?>+?wmzAzF~R
zoz}^|J+dylpI=-5rO+Ozzs|Rg(QGs_j(5Tg?)?rXp%Hd^ynQgVO{fWPK@zi1%lwQV
zaXce$Z~!Ko{u|Xq7xs}3oKx_o4hL}V@YV(=`Fe|;dp$fZvp@T7doeXKmJw;iHz<<D
zbAp3ZPn52>&0Ew(6aa@;lkPJp@}fSr|HA`#Z&J45yJt2kVVkpE`R^D+Y%dM!=2d*W
zK%BM|v|L>SqYd+nO7Fl}L`OZCFA^}xYZ#a6CV#dyMWz5=!o=Qns|aTDJk$M=A_^WS
zSv@3(K_qn09hz1+ETY7nCvpD1m-`7KzUN3U5c(VTr-QiMhKwFvaRsDN7w`1i_wAY;
z3ftM#u<J+tbm#?$DD!mzjUaVE<aai;!3apfXG66L?o0)Sr{HOPLsZmQWbU)CJ!uBL
ztxm9*95<uAC9K(&qxAXUbCCz%od?c1^6M01mO)R(`ojJT%h&%v3^I!{w~(L_8Nmpm
zM`Q$J62j%<<vHF7<$nC+N!HrLMU@wT;2tdOZPQP)La6LI-I^qx2Di!j&o}!Y<+MVc
zdK&LlU4$VT%XeKafGh22-dst5Lq!z7D6^FSlbk25DKL>DtK#F2*Me)V<zM`M&<M=k
zogb;x2&Lo~@H5(37m$L<iDBzTB~yZ>`^GQA<*q)>-Z!xS?5PG~j%$EuMPN!TF`c+C
zbAyY)=CGUf?SlONe2u@YGomIYVMRprl8oj)3v~=(K?BbBTFmO~$+lo7f^)7TIYbqh
z^L3u(eP(!$wujMRxt-wXm5sm3$Rs@PeeGRWq{h3wQ|&Ul{>41fV{MmM$2=_+rQV0G
zK*HjM>P-%C7LE~ik~O1md?Z#^*;Ep&haQJa&VpA{*uSe+Yms;3VD#`a)#$m;<Zn;e
zNz&CHkLT+hG$=pJm46bwVMp9l>$NaciPI}m2EaB$FhljhNR3+By8XbKFicw!Zn#_w
zqfx3xNo{WhvO*&Yld|_CMf6W>Q=Q1Ht^6-<uN{SxdYp5TBC5EZlbgMdejIl{B!Zb#
zii6Uc7=AeUrZw^Cx-Xxm6I)K8U(lgN)T`(MY_A~icjF$5o3n|xkVFmCfwtJRzT4_C
zO(iGrPzuObs@pz_Dw%FTak(tA=px<+iZBjHJ=Xg){s~knC>RxP^GPU6Ak9eU^t;kw
zXfI^KP8PeHsIe5cd2JLnt{J%i{q?$4;+>>Zr^$6H9QUh|xpp7-*O>hJs1JEM9Mt|n
z^|x1?c6EyjS9g$fZe#uhQL|t5Mm5za4g*x#f^JG$N#C<KOelY-@nZLIpCJ+BGGf4G
z5Iv{lCf#QA1T9Sjow!+@2>sG%=_Vyq-6fkmsc@;dq;xvEEmzCtizu+;mOCERcBTdO
z=d0Fw#vgQ?>D6^4|J(<PoMi69-2Qyu{ZsK*d_2Rp-S%X>HnA>fb@MuS6SBU%eG-e6
zkrzK8nCzWf!)-EkIR&|NWqwj?*=#agEcIt(B<ac|*VGlBUB^?u{hUjx#GjGz;`7a(
z3({utY+qTOEhk5u5A?p5GK#yU)cWnN<gKo#y1FjBta3?q^p@TzJZpbOCr-%m?U@S#
zeMN2wB6jzG^cATd@=`5+fss_Kb_0+2_6tIa>YP3kIQ?ESZQfC{^kZuizOnT|ZO+ZA
zC!_e!Hqf4uv3(9tcCTIxbHO{uKr#`uW$s6H$Ofq#SJTonyk1rcw~u%e_ZpXeMOaR@
zCh)J%^hWBe*0jmQF5F!_`^(*aNbJGzm4m|xwhfc;@=u=M{g)h?cc?pMUSvhHOB~p`
z_vZT)Y!=B3)b!t|)2|y^<}`1AeA(e+QsmT>mAKE&qbMd)8bFX09-VCcMLq_%&gcYj
z<KW>*?7PL@6X3aCcH$FxluFY{{60nh2gPL%$U~S@U!KsgjIn0_jM!Bf#h9e+?8Xa8
z>@srrX|U&o7}#2Bu59G%Un|Q^_rLWhnS!8O1;wXj9JQRMq$?=?;fRlDzmYn-b|B!g
zTD$wmoAJ3J7R)Et30vR9{pj2s<whWW_{4|fxGz!#YeB_bBLP|<p_y)z&7G3?_ErC1
z1lDUE>QAaak%v*iJ5*w*Q*Jpo=IB+Id5c&+tYIS9^t)6w>W}qvb>1lIii>sgPWn@B
zDjT!I)cwsIotu?To2NL34ugY(pR?Z}tEc4WxW2(4Nw!-0*!TM3{$|scIQ2BT*;7Q+
zTz9M8BF}ej$*pk3a5e2++HE!Vb3Q{^aj0Ic=+Y0OsELAV*F_j(6|zfvefYAYTg68x
zdcCqxi5GJc^bH=`GIes39`R0lm%FtyE5@|5HVaaN4V6o_6N+u$+h|3^>PBQF4LzR>
z)4p{$oS5oJyR+C|b@>xF1+O0I-=OjHGlPG=$6ibytCgk-6xx^@W=Hb)5HFa1r!=&C
z6~9Kx@E4FvcXmReE^qS~Ro$}g$tKU(0R7ta-7>r1V-0~T+k4x0(!Zqfm0ChwZbiRX
z$ILpV+~I{LOt&2=F1BcS3FW=dxw|fHi%~!xG>@LA4ItJpkC+>Bv>*Gj<fe3^SvASb
zjP}!osz-Ai@cz4q?I8xgg;-#<*{ORwKOsX-Il_}|roN;-9Jag<!R7Mdu9HlEp^^Rf
zIlW>!za&YQcp;xZ$!QV{P1UY2=v(0`tB7I4r6f_ee8alEa+asupUAPXvB%E_IA)wm
zRxyO5tzp8?<a8LHe89P4qaz%e27R=JHRv}#qkq46)bQ$GVWSHyF885*))_1bd<Xin
ztFd2@*{1DR#~d1sS9IM^N<Djb13s9DK6t_XZs`*)Z!G2MBa@n9S^E1maOL+{6Y0KR
z#}1jwyY~c_3>!36=L7cjtZT@=jqSyXSqI5A9Qj{qlChD;YJL5n89QJ{*Pb@Q#hK$r
zJK*kaUV4u$_>>!>+ULvZOe-I8m4-etG5yRimf_S)O;tz~XMuBg33<|$I*UEoy{Z(E
z>!4Pl^FxN?|Df)CXTRtrlV~q_C_mA3XS4rybBf>adgzZNK_!qaOm2AwsV3cPtY$Hv
zxj7ZIcDOY`l%-yJ<42X}`s_`s+MPRlMa{o^hwH!g8v9Ov8QkIk(cWH(qefzWxkqt~
zcj?~9?-51*8peWhE6!=bd(R2Txx}RZMufnH0m(OeH<!+{Wf}q73NkLu>o>^w`T7F`
zqV_j@4~N}WJXdulB+GsN^54mH_=RIWKU}Sot+Ty|cNoru$1m!khrBgwcVi)%Y4J=H
zWai?@ZX%gXZ|bOL0c>5YUl{n~UiRp<Kt#h?x5W|iG@zXMLa1|1yoU$ju1d-5EM27*
z*h->GXuVr?J*leg1_*HOwJi*<eEx`gIZ%9{wp&gyoPOR(&5S7T620}{0k22ZUS|}q
zjYvpX4I>!f3lMZRH|}~j$e%uYHhkO5>=U`-8CtgUO@741J%ykqdX@+;5!3c9mJdsA
zI_RshOOV{LQg6;64V|6-MbO0flKBZiQ;k}aL`P-^;hi^ku8BL2KhC{dtVq$C!VtYv
zcM^})vel3;fxV=?Z*#7{IHXD07T7Nng~kVZHC8WJ6u-Z+zg`9@X1L{<;-%G9X9+j#
z3N|o^-bCFe{=+yUGFPsiO1}G`yyPpW$jL~kUR0yj`1%xISaTc={X<7!CkD;;2|Fpu
z{tspU9glSz{*U9iqO3AP)81Rk$X3bTdkawrDYCgLDV4oSp`ys%WL=fAl9G%FWo6Io
z^gYfO-S_?eecqqn_woIw#}${?>pYM17|&y#j6@&aj4wv3p-5CE#bVMijdwZbHp`+7
z&|2xjM{Sf<ao6c+!?W%f=<EPTk{rigbAbO;ZBph*-gda4;3oeHsa4d)dJ>6vp@?Fg
zv_nns9N_q;pd}}_UVx{el8EdhDOb+cQqDZB41dDY?g>nL;0Wa1;*12%>nKg!&&0Cx
zsKf_W^d8L~*bD`6yxTv!IX!z;bnFe)zBpmC;>2u|3egX4UfPqPiwVN!To-$awF;A*
zJ91+n3RG`8I@!HDR3xpv?%Q|ro5sUo^gk#MibVhM-^7vS7z;Q0GF!N>cL@3%Pji1y
zl?Ty##hTxn>l}juRvRH#T>9lcc><HN4sr+bP{}UpJoLQ%>muA`V(b4cj>?+SSY+3p
zMY0Lbl-5T{=fmFF+_<V79t$_0R_cY>wX`HjoU>WkabMQiD7uyMpp?eTD-#TkmbRy;
z@1EUX;@oj-xvy@o4dw9)dAh-(iWK$hH}^1FFAcks*ag|mzRA)|Qi1VOPlN{FX-7(!
zm8i9S_(B59i_bF7d-<|A$Mc;{bhc^HOZw}fG28_AkRhLfL!fF-_tkK`sx2-#^<oHm
zM9C>03Q3>xSlP{I!J3X~7nn)CkZ&k`%8K+SC&9-gFHj$ijj~a~-%@wv49a_8q;c;d
zwSodWejjsoLTFLNA9dE_Y)=ia^ivEmTb@<)i|dD*zt^@V(M5?!fnrju&rLGEe4<vt
zRM#n+c<mB%hm0W`_NsC|&_~AUCeU_}Ob1$u+w=Cl;8BtTxdT3Sc~d&oYQu^BDnYXi
z)|Yne<B%X5+<h-}&p`nY$a||qF6?Ij<)!(*4WsR-jGz-R5z*>ehogT*npEnlc}0CN
z^w+5WTIK<H3+DAVEBF~ESwFRj(kTuYMSH2Hqx{pt{KCyW;jN6a;N>yvg#RuWE$g>m
z%+M_aASrp`u=8E!*VB;BXaBQXe!8!k|9byH4t;Lz@YS~K@Dky)y0lgPyap=yY>&Ec
zK|k|{V2)(p=Gp4L@KvJqJxSu~b3fh=X0HY;yZYp;W?c&Gl1Ya@BfO(p?9cOj9U4=2
zAZ(zi{`;xWw4gtMg|00R$^)p#qqQDMsn>sa^tQEC*eWA!t@OfYuCc!Kq9f8?0w0P1
zIwcV8+^zaWjh->Zt)r^Ke{rswNl95*{lnyP;H^f}yy@M1OXq3oBdG_grM%{2KZ_o|
zakHuP;&NYS42>fPlnBms9F+CH+LfOeWWBr}F4<8^c5YYsT6}So{PAb8ceNotmq!}j
z-8($!|E*yaZZhQXA7J4%$<V2CeEQ_c(D#Rm;jIZU?ae69^sr;gTZ;Ym?LT$rZc4=R
z8LGVtUsot~?cuuqdbecqSl`o7%0n`BbE9=Xv>r(6!ey$HCK7Jn*?g9|9S4U?Y&QMJ
zV5;=s0@)q~kxj<KGa+-ID&6GAdh)CvN=8LRiQ3Of7oPpS=6#9*hKTW=4OmkPA*a`K
zN&a{pZbgjiDSN6BaacOFwl-y`DX!<KAGJ&kz&vk$Y8`Ex@y6A*-|e)&$e*%-CW#}Y
zRcWRN)Hswj-M7bL9PQL#bk8tn;y_`6(e>Nih}yvOYY9I&_t}3e`#fn)N)M_khvdxh
zNtOWXao34MDp=zTAsLslF?;`tmB`oR#+Z_G#0PS1?i+Q9N41hy@wPApekfgyLD(@E
zn(WIZ&i403oxt&txx1ZAch$QSj-xdGSTNC;-MxYzyzKZv&D}lUp6ccDn_h<iKqAVU
zYZJG6t9;ZwhMRa56;E&)zA$hNmG>Nv1@=uA6VaK6izOCAH<^2fAVOs;GdeRP3`PG}
z*G?@hr_80@F8Z<Oxt(%E)4iZSaj6y+9FAI-AL`*QQa+Wuv{7#Hdz6{%ebgy%Aq6kM
zXf@Rg$<_nE!vH!4-#s`SwXv#sd(2CZinu&rBL0Y+$7#LiTAU#ip@|Qke)nC>s~ze;
zEWrWyb7`)Zc};X^)(?bbWJrhOd5DOJ9E!Y;_dz9rAa?|F!XnW@4!1u4+nbeFBxvmN
z>tKD1Z=_}B&ThCR&AD}UQ`2fsD!=~&WFzzh2b<w^KV9V*EPduguOtTA#T@TUUqf9R
z+WV(A)P+Lf2Zmg%_7BKRdU}YThG8JYl2i-6m?yZRHqh~?C%V9r*ZN{>4SZ4I2!7)8
z@~xl;E46otw@1Or@aj1JY%bjFveI@{blC%MO;wDMwXl79H)QBew4H1f#dnMysBiJR
zORt67|6n?r2g9CBP6zw#W4J(kfh7_LwkB=IJ!LG*(oQF`>%7ISyT=0v*N&R7@+j|}
z(@rwdl)Pj7)}7>z#H~eYm1l&uqJGtdr=Me1>6+2ATS;MFg_Ttk{rLTX(_8Jygxfnt
z&stFczeU3be$VR`=;_tO4!Ozvj3W{4S?6EC7n{j7`~)q`<QHC^TVOwm>D6DvHD8x<
zs$|48s$XX`OaM2{N>xN3&gE%4H9nH@%>E)BHmb-5xf&)#!uBD-xwzh>k0lH3IoCim
z41ThSVYEx+qNb<kggV$*Bt*BzW@fnY`0lr@5&Z^d$<LEt6R}_=IWKc9IE3WT<TRiB
zrr+1s2cu!)%ufy-iBndly5pxFsXa5omc$I=vvg@^7YN4>fUhGVnC*s!wbj7Kg%iD(
z{yiLz3W|n!-TuehGg3N<t(f~28Kzbno!1MZUcz2<%F6n(vn@;8=5-4c`+B3dhQ%D;
z4;EoWc*iii%~7<iY}T~v3Zih5k(2`QSWWm(cK6l!a}`j-V@~4O6sub3&@ygB$>e1X
z5PbSDEfG-`smq4n^Y*@0H})bm`38V5(`4EF3_@{*aUt6Sj3dxCB##~jHX;Wed;a&t
zVLaLI38~CKXSvI4XGM?!EG1n1#@&2OyW_aDz}!~u?G|_baO;%bRJBB;B7qJVCh@fj
zHBGmkZDMTWhU9j%)7t`giiz6+MtG{=0omvUzhfsgQGhivoX2gA2r|)U;p1yMYV#fL
zRc%xgVPR3Y`-(g;FtE`#{B1IgP5CuPi`!wr!o;ulhDWLHFI%;BUP9wNVEjvb^|h)$
z=b3M8t!K6z*eYUQ5fP3wO(A%}o&2LW)^|V<#2f9CZmjC>r~oj4n6rq)%CE5W{q$y3
z_u1Q9voaK9@MVsBqE+RE6?YNoBlSkku6WvBWm;#<I$!qx!)DA`q@>KC7jtYym~Xrk
z)SL0$)`QGYITwBWg5I5!l-e|icg>~Dosi3B2iQ5Wcuj-aU3s9rg_L*0dH>auvuH@w
zz)?JVx_ori*u1xZ9DYky2V~w$gU@b+eD>k#$iwip)Of=8BIV(N&0k;m!khq>9K`Q@
zS`%}!f`Uh%Dg@(s6YYV;^kef^yic77TCkqrR6bKm2P75jacE3CrMJ7`tKJ}|@z*2q
z?<3MMDuRXRyKyKWjhxtk9zMNzlr9tpkR;XPY9_S)VqdudE*>#y2CK-gA^)+!u>P9V
zGZJ7?ei3sGU*wxw5Yx{S;lrW?`FG(!nv1WUhQQZf*$3*ok=?ZtRooRI-D2KTKn2@~
z6u{H$kyhzXc*#9+kO8aDVTn9~KbSSDR=>&~vq0)hqhf#@OBM(6_f3CpR>eP$y3cxh
zYd)F65fG2rlVEw`kmbQB^8r>&NWx>`wH-J$3P53FOL`B_;IyY)1pS@}IU5{JhaBJ|
zVzu>iQ8~kMC0h|(U~?GI_D0<Kz!+QVeOP<TA*~8z)2K*JzBG&<G!|YJ*;$IZ;b|Fo
z5_xs@29}e7okgNA!}amJ0fniL`}6uA`%L6P7=CtM);8*uv^#5RG9Q4{F!se3SmWbW
z3WZft6C@Z6Zq#F}1E<m6wpolNwHQ=ZtgG<b3vBtDZQ?#lgaeu{(xJ06KZ`K_<ae6c
zz-KSblq!rT1Ox~^U9VeM#b8nu4e&=Z7AqXMfRB?lR(~2%>EnC&2O_5{ng6$Q(e3=}
zcg>G_Z#A9~IpWNhW+I*J%&uJz&IC0i5*K5`R`}w)bta7o6DVo4D-EQC#?pvE+^9(1
z-Cpm^xN(|r9qC^dp~qWXsX$mp{|}&Q*g<raWbKHrHP;!}OA?f==)FwzKkq+{zAHpK
z@=2ByyIL*vIgnL$UF!=p?E=vLCUpkcFzAdk(;nx#d^M-k`iK499XK<xVgYkw2e11X
zhAnj16ruq}JbvL!QzG-Iuj4VVPiKH+UyHvwhb%Senx0`88!q|Xg-u0LU<P*h`PrFI
ziSPl8K>p?B2212P{p|8|+L~jafLyQh?JjDDdILYEnxjV(I@CJO=z=sQ6YhJYsHIvn
zY~d%M01QWDS~@6unEn4pKU&aAUR}L5G-cY7ULt^a-Cxk%;dN^?yZT=1=dU&~`%O-^
zae45C0cDWZ-pv55$1ix^k^`mkPwsDTKI@iA#ldlk=)doAd+oUB0$b;$mehBRCtf?J
z`6@;Rj7A>=h-=x~?!N;9tN1``<arbw#66?%zvPu(EGhM7u^b%{u?(w7o{hB6iL0{O
zH@LV!u!4i1fwwAlQRW=GjXvV+i$^Y?a}lRb+<bFntk@=Yk0_@SoV9|z(*jZ3Gc5`p
z?A)nEG;Kb;J2$`f-u?3r8dCf^EPTLn_6Fg`Kth_-9-7>LY5~~ueAtd3#aQ7u(ihL}
zJ$C`;7aW@;@$ljjq-x?XK0m+3PK!vH%T+(q6C*L3+LJ)?XCu?$k^zWu6IoS!MfrQa
zqbDm~@?ghExC#poaBTem+QA=I-Y79hhCQT{_)z$Hp{($Y@vpW<$c>U?Al<{u&i{IJ
zRg$6<>!8+AO?|tfRp{O-6{q%u;SMPThuH4v2;6fN9g1^P56CbvjKxCs1M0vkD|#s~
z%#Wo4cts`mzy!_gBM?7-?8WeK(8MIbE#5@;1*vBv33G>^4}I!?>BA#+7Hzqe^a!7<
zDwFE|$-fxqqZ%-^(bO{&;#iQ!Yz=;1WP$SU67Zixhv)FErd-Uls9e{AW@X`<8z+Z0
zt8skccA@ZTl1<6Y=dn!lY-*(5NF^|x<;=L{!h2Ms$v*JNwnX+a0Firc5X0M<kwotP
z>2e!PH^2hiai*>ABpBX-wk%i8rcca7ml)uiS><`HfAS5|hfB1Hn++3fqKOn*OXG*S
z5sv7f1AEd^6A7&z96|)2M2Rh%>4GP-){g75*7|GjBgpRt6og(0nih<hR&>YCLYBDC
zeChFxyu>HU1qNfDh)|C#lJ;;91*l4m_-Q8j@?xEugv&tO*@uErGz$NI6w!wrIylj8
zC*z3)z(*%(F1c}o+TAp@d!~B0*;(1bs`Vtih(L}Lb|8-;iKul9F=)UBK@&!RJudbs
zv?(hfzJ4H{T!;>YioBg^KH5dHruDisH7ffMu}(dMr!DlIrCr#$54$@_fuCsbgMJ*o
zwR!2*8?!H(1%3N~DVMW7dv4F{o9MVSj<Bi>iWIhX(?Zi2eDvwMTzdKpK?C-en5inT
z#mf+x1V$0)q@_Jc;KbWWXsH2XR2Ii8A*uTU>7f(4<Y}#rC0Iv0?BNVraJzt>(hj^g
zeDvYP1noU-SI~H5?2*MP)9<$sQ+gW?M9}c3op--wylju^5q1!j5Q|UsaEbM~r5ouQ
z*zv+DOkOZHaW0rQE)NyleHa?&EI@(;!3xC?_7`+RW#K=1n{Wj!T1!pg@1mn&(b?^L
zJQN9@_zD_pwVuJtmO;UBXwf0W4kK>7d80nBP9BWHS{)!9CP~$kV>bjExPSy)5V<WF
z%{lvBB1I)HeXxaG83qU_5VCO0RU4&OE`I!w<yVM}8V48WX+i+cbt4VkES?tyv4~b*
z_6|qi$JlR0X?Xkz3$~^ia1vkpbxgt?3L_No(O;j9%?9Ny-ZOAAAr%HhF;N3viFexF
z$TCo<kX8M?a3DqAa+^2QaCzs1go@Pe=If~qVHo>g8xFn^Fh><N_7n%Q<45LRWJ}E_
z{X=S&<7s!ZNmE9@$aYgAY@;9ugAT<LnD_p9@jpoYSyWy1zLkH5ho>$zrd5}T%O$?c
zI(vcUUqGOvhL?s$#2hj79ooNoT7VN6TD|1DJ+-^)!0Vhl(O37^Hr8_rFhFhoITEe7
z`$CErip<63X|b-W{9Hnac~taOW4{S56*Md+m;$)OQo$CRKcw&k_gpwR3U{_d2N@d|
z$dL7#HSSx<&v9n)!N}N8dZgA}@8nwhua=R?7x#dE#TQCi$z^AUPV+{}rL-<NZnZ?O
zle<TB)l{>?h^`fF03cO+V8{|IyknXQng%ey1fyCgVPs8YJ<Tkh&^a0u%cab<ZsS;r
zEX@0TCKlyIGATu+K18?S$iQgc1A~6iO!F}*k08X$0A?LQT9Y2%+8M;^7AW4u?^l5K
zFu;rN&bis>{3XeoPv#P4Fz6T(i@fl~_oX$ylk>LxHI5(7y1puHJAO5w<W8CtwzmkR
z=-9J~K{ACY1jxn&T1hTNbTv=9ga$XGrQQz<+2Rux8)WIb3Y>?sD-}{s%{13F2);a~
z1J$ox7O9TmYN9Vy5?iuRD;kKEHMng{AyR&T1G|CLEnDoCnxZhF`ptei_sbf+)?3(K
ztU`04=Q)Rj+iG7<AH`nNM{|Dt64k29DBq0BJE5;A#Mjf|movK;uiaSp<ac!`^I?pV
z8SJ1$JbhI;Nq-8!r$?3AQ(n}dYZzai4&PpHq%EvBEirsI&Fp=`(;ln1!B1uWrSbqb
zcHkUHZ=`8)`=unio#C;?#Na#^5V+{3z7Q^q+?~m&xF8lGU~gTPW%F}GKc)^_^+x5O
zoh^`fJZolo{(QqW(1s0j6?udsYt@x*mj{}zO7VUy1ES65)b6d6f4~(pDX@M!O*76Y
z)FTtqkA%};6ccZ$@<2!Zeel=(&$PZHE$0AUPDnJtP8`<eMGyP1lveJ0NxtDRd^NM!
zEkAcyUjj$U!<C<2C&C-Edg<+pCrC9wLo%#&DNP6_QxkfC&eeh+0ug&l;SMjmMm?}I
z&(f!kga3EnCj46Co8C4%UsRaG$kVv5tJp28-TP0=kZhe3u^tNqap_X$R0>JN_cQaI
zD~i=vx-5gSY-%1Xba6^Hjy?4Wd@`8i6U$_S6&p&aGHz3P0P`OXkans6jgk3rYL>z;
z;liGndGWZV)d%0V^7z10Ab8JgS%GW7i_G8i;B**TuoB4`q5CY?Yacm$np8nnOC_0b
z>n3B`jQY2jW$G-9ql+01Y`!%)xb#gUXAe)GG@^5O(R8JMbZtmg)boOA%64o{StKRU
zm}BRibZ|I);G;>65=TY>$n0@fxpZ{)z<1Z-zgK>WioM|Y=;0P*y4XsDzzihFOa|iK
zM>Ia9opBOS7~3KgWYQj59PNO5$T-l_<`vRIsImZtr}fP`%nw>u=3pH`J8(ke?ShMG
z{?h01cd|^kiVuQSeklq!jOh0!0luq(cgncE-^*rMl#oymu@tg>muCX#xbLF$6mW#Q
zaCr`a8V;8ux^_KcQ({D(p<QPtYOaQ(zJ~%$x<$NSmT<;17BNSp&A!&`C5K-S+frEg
zJLTGI?Ax*3L#GN{p%s0L1SoI{0aKSlylCTc3~=po*w9bCSM{d(=n4j#T*BLkGSv~v
z`z?Faw#H#`l6=?*Fk<qld=_1z8~Y2n>ea~^iMkhRT?$KjHR#o!ZbiZV@mK)H!|TT{
zHzsmjZ(U%4wcg?f?&u@M7EMg8V+IOPtt{aO-M+4sWv$HWpfp=U-MtX^5z5asDK}^`
zGP=5J9D|nbiog*RDguDCdcZX(wQN>F?$m4r;e~al+8ZkAbr~vbcF}vfmE3hYpOMBx
z4mUX%U?ai7PjJnpf$Vu26FKKSW6y~pJD$TnKC+;kNtLE@6F1JFat=GrXUHNRSHppw
z2mw2D_OU}GIj#V<NtnP`1OEBPqqW5`KT71U)(Xnp0<|wG?otKnO3BW@{L5<tP+N3%
zf20YR#?pO&^eW?{P&@}Fw|~FWmvFYfb>4@G13fp9SEStP@WHO*@83t(VeY$*fz7~1
zl&Hfm3#F{50$F4LDxDa0B~nO2`l9z=md$d-8(>Ui^8kcS<0%K&M!2gEoLZ+{nJm=m
zK-8+e*p7gm|2nn2Tpyig6ijDZ<+c>WN6S>7_#g8Z=4iGQHPGo_!`Gz+)Sfas^BR$_
zmE=&kx1kZ^YRjlkBoYyuXA0+44w}-)wf?){)K{~{!=bg3RQzA9n&Tik*<5nE`^MTX
z!-TV}-{Nv2UL!UID+Wl(C;l|-ast^FscM#ez@j1+_~pOXjKm_Zt8FS>GKBcalNptF
z7d7c$+|q-;#{VJCH8c?jq)NZJHPiwwssUu=0V`|*#bG!tRD!hs2zhVVOTmLZ38E4_
zpU_M1kXoeFC~tgTG37Yih897c|3cwwM}+#~pKm2jzC-DWAbfPr86nM?(c%f&yvN>d
z#UA0g^oR>Wgd$-ghqu~*Z^+x|n|^i4KRAVOytFpuC&RkDw=eo2o<v%&@=BPD=l-tC
zzqEbEBiz3o%zzL-9evl_ii!`L{!w(47~dZQY?t&{g%T|USR~8qW))iJ1ewdXTKyN{
z7tU61%^4O^w6UvgP51v)$aR_xo175*0#_Na$vS*fOt(a4yf76OF3?36qAz9Xb#rKz
z%AowD+EypIF)+h4`MeD9g{jTxAbUE;@~xa+HjmFbz#E6eA4OwIllr47{8!2|$!tm>
zfA)Rn{JVl~FCly{{1Rv@$3Oe*xZlc&8`#NFtLWH#zfTWe(WXH>8Vk-#w!Jwo>ZX~!
zMTnhoP%RVgTUK$ohU{Jq!^+RNnt7x1{Qo%R3=At*ru;9+Uo8(g#v%3vDJ(PP9Lv@S
zrFHc$gy-4Ynv!(IAlR=?ZrBlU(riBAA<nIdzn6U}U-UbTN;2#>di3pfg&%ePefYmi
zhe+EOBbJR>?}L8d9WPEi2M0;VJoT!M*g=}MQ&Vi2dtreJXpq|**SR?mK#2Y<<i9<9
z+842Q2=Ui|UVVp|jlON<ZIet$(*6>oEfrv6rLdJO<l+8!(KqORp-%;%&`3{Eyf)wZ
zG7`J%Aj5O2#(^*Xj3y>)Tu6IxsJw>9aw2HjSQ;5S0*2`021%;_mcldG54=6j_)N}_
zc>GU?Qb+GCo%AE)h$nxLwrep9@TWYyv8|@bKuwPf!>^EG$?COqLI?Yvo~N@ccTz5>
ztvB^F`hftO4wrFYxA+4hQHBe<FCefIPnU5#6+bDtkidDFomULm2?y&OGs6iN?WS1U
z851$tc}&OT2ZQbq_(-e=?}$K4w<{(-!}1muta6l*3Ii{&6Go)uLxrNAPUHUcR`4lG
z_kDbXU!ze_xP+(BZi#w-L6pyma~MNiX{RCbtJdxfPW2?<r7l-Sc56iXb-3_!Q?TNt
z;r!;iNyz*HZW?&4Y|i1VU?e=<V1&`mi)Ll?ond3&*oDe8_2e+{q7|dgd`-I>*-lir
zJXRt8w^F!D5b&Jaog!v5ehqlMM#oVbLV`BsIJezM)x*;P47-!0_o!bABb{6uy_#8m
zHJ|N^4jSz@U}2+v`>Y<<!r(0SO%`hH-~|z3NWc7K0elxKq|c7Nl}vb7ZJs{TCGm~o
z^=HH+Z%I0qlLh1MB$Ro_r(rSc0SbJ|pDuxtcO`RgJ0>%?07OlMn!JH;v`n;6mvUth
zcIDB30;8mfocSdH&{|||izIJf5AFd%yC+5N*jhA;%{gS15Pl%Y;)Ort#xf{75>ObG
zM^L29#{9yA%9=JY4B!VVG@*RK`+LuUwpO6{roIRlBG=iUb+++EYudu=Pc>Z+WRZa9
zk!b{$)D~y;v_ZxLyMre<fEaEa<~rNV)deF14NoHTTl~pL$=@(7^u|brL)Jr8tPO}D
zjRFVZ$0}j_ZX_f0F8sm(Jjyg}t`ggVHNtli5#1p_t*qP(l?04`l$5^3OJAK1n>#Vc
z4jIH~E={Mog@pvTYxKnCF}Zr|WEA{igR@2~HUW4V<>w8vMOis1JO>e*xsp;gSt{>h
znEZK$m<er!S_f4Ep!hf71#oQ=w`>CoFP`bxo8iHG&CzD>I??{jDX!$KMf-pBz44DX
z)=FCZpi61wcj>!huWp9{#DwtKm)TN6C6z>MJ}#%aT5ug>RsfiO`^3-F@`4l6gS&pY
zGm5B}-K!^R2b>e|PZ0+kkt$ACSJ&g$xM4-$Z{I?;UBtvH&;V8kNpjQH0t7yEEP;M6
zt|qP-P<saeRNQDKqE~yo3z(io5pOKIKkfwQ8P+Z2t{{W_VLA+6j-F+Fsc{c+mLKl%
z8>=WW<>m7IH=d&%-Jy`t&xrMxIRE%<5r-_MG^|Mt4(M11p19n;-@NGgJETy`SLOJA
z4{N-&?;B(fD3<QQgcYs`_1kAOy|)6;iz%F*h<danX(CE=Tt0I9S}-pT-C#~><Uac5
zKz^i{v(a|G1F8}s=nYkgJbXH~>k}R;)3sqn%BHY7V8qDwgZ49@Q{HUF^Z##qc*WS<
zw3_6f(j}{u41wM(iXn~t-~>$;`#u=j5|^F$_fu+(_oT}L@{gI13&5HlRnAm?bu+XW
zsch-SFf6oLLd@93Sq0(&8gxAIQVL%3vYmCeZh*473QA}ooT-(~CR)M3AlBmL6<yc<
za8b@DkclVW<*;8~US9tP4HoY!g56B^%6fDv4)o@z_}Cl!F{-7X0YWNh#jc+ANN>S!
zk03e<lH+p_e$EXCgG?YYdP8In!|q02t9Is|VKqXiSe#x`-0L2(W2@cgNmcCj1HwKW
zO~MDYO)D{3ng@xb94IDiMQu%bL|9hS<2l7V=mTtywT&)vFN%+*fv3nsBWdXHk~qC(
zI;snNX?P9fJAJIO&k(NQd&*oJLmE_Whlh)cc|qwu$5xKFqrIFMDR|JNfGa%j`g`tM
z8E#?%fA5y-IelRq>3P2ViWO?!q+v46EC~D}8|{db&YO&Cf_*_Pw8B2v*Ms8^MA5$J
zNH;d>9WupoHOZ5QXyD6)K%Da%2h}gM^iv6v2QkOTTf?U3m33NEMyD)83W1aZIi7uc
ztVvx2k7}qn2KEB?aU&HA?pV39%cpmdfUUhx+gzS|tS7Fn8d1ju-QpbDAP|iUg)QS~
zq|4(|yN97N)8qRF2^lXf+qq-`!4n=M#hQDhI1WKJ7{*gd1mwRCkhUY7gj>I%_(XfR
zmJ^C~JOs}kzkes(Q{nHqx%+~z{fm+q4w%KRK;Xa&lV6QJb7CTq?%vkbV|)-yFnWBa
z9S$oOOs1D%m?v6fAntO9P^9?f&@p34dT`I;aYbf(;~B(~E|^LyVf&TbZ&J0&e?hLA
zS%%ab39=Qp<0%@`Lv4nKc73Va^1tv0;1Fj;;dxrXogXuM+MQ6W)uj4V<NFyHlOyWc
zWPk9OQ|xE%g`r0FoSx#SY1#hxP$plV`=3l*O9>U19fy~uc#7V<yA7oi+!Y?fOFx;2
zkw24-gn<8QXfHMO{VTTNHy&B-MRz`>h7h_2-nIRTVlZo0i-L{7uE;c`<dk2tNm5ll
zdy5J>D*-cBUX9#9`l6ML(sCvFuF0>=QE?Vgcz_KnUh%P8lXTu<fzFvUEGjqPjK5^9
z86Vipy(+b5sdEbfe#3DF#pc~FZtiKvVbe@ukA}o>uyI<Eps&48*;u&SjlGt&b<-)@
zjZ=jKVO3>Y7r1rzZtO>?)`kMR`e==prVAtUuU5!@%*><=nN<px2mXdSvbJvBcQ9T>
zNY*dJ^hp}Dh1@wx`Q|V)j8jELVZL_!OR(<$1f6fOe;oa|E_&31f)5=W15Wm`LG&l3
z?75&ACn7CGgWx?V7@De@2H*i)G$!$T(F*9t9=IHC&zOozBYxxkSRD2Pu~~d3|FKFf
zVi>#x5`jN}cRjYNAy(6x?OJdrAfW*$>Y$4vI^o<j@Y=Eftpil`88j;i-hYg3>-})h
zPg>|M?1O{uO4H3vTb;ji@7(W~p5f`x?-n(yIHLk%C^-FWQXk4*)e_%WjJbP2PJ>O@
z!abX8PY!pAu*rbhdGoxZH?`>aX@6uqKGX7`(Ek2REg2*5ykl$fuNThH1p(aNx*f5#
zL3s|7#}q@s3a@c3fivvZR??KnTBn964Blle%pdam4>JIZx7;>_U)}^Z5L;8BM~mhr
zcB1l86+hBHdi!G?k{|(Y9rmD0rn2^#!}D;b8qyB^WXBJEIcdbyJ61{DWoi!ZJm2G+
z!q6w9PPSUS;+`@>fLV~hZymJYqLr*EiUSlf#qU2B(r~T5LV42k+!OYJ2cTUoE*EaR
zsD&;sxboO@=>Ac=Gp2tQ&hYA_DpXZL7Xq&#zhNw@Zmn5rx!SJ|^-}`YDbi$Sm&#v5
zyU7p~8mPwqs-LM<zjCFRPQX9~-4A``cS_K7Oh%8cUh#Qd)g&RyYe#qDa2z5cB8{@9
zuq4t9qy@i7smZ<|i|v_vwh=fQ=5$UMC9nq!QtclI6fR_Hf7;5yu$)1d4ji_h9DwPb
zyXvFsXd-3suPyl-Zae#@NcuQsgOREvmx(@_bmV@Wn_aQ<p9ZAbA;~sa?bL)<@B4ku
zGCAXV;u6YF{Pulz@*Vxg<p%9@^16@doG_*lQ3YGerAP}<*M)V~{=xggsm$)uhByuy
z3=)K0@qPuJ&n1_+mBoZ>dr!kv=*c$cX6_wipSj00yyBY@_&Z&@zecMwS@P1!@FQ}Q
z2kLZ&J}IZeJkKAaqodJXP@gxna(mF@_qbSNihL~{IoTztBLi^Vvn{2(h}>P~O^IEk
z7B&8+Uemp-5^lY*W+l$*Hz^PPn7lxFxT`j(_K3WfhTd~k!M9<uT&wfLF-RkQkYfJ;
zXl;07bwMx7SFFCXN%mLl`{ZMtbE5*Lg(_={V}oBVFHM@B@LkM!cw!$bC@Zg_6lmN}
z8236C74>KA^K(m6zJ2vU1165`%RibmAIcrOI8ImLGkCN3{3ku!<sp^hu25c<rWV(f
zUTunCPsZO+ARqaL-|{p2o<57WZ5e1}sEW=&)8_?F%kdk#2Nf}lkQxE}9N?=7k-6Cv
z_}GVF)DHY^lHC3c<3g{h<vScJi1t@#%4Iwgh|}%`IjSbCWx@?y(B2@A@45PfBlX+9
zNR|O4w<|XuX(|nwtqRu(8y*rs+)qqR4Vs)5WF;JF@`8zW7bPTi1^m1X7oaO(-l(TE
zoIB=FZocc3*+EI0V7n;_Ve$CBfFFB}S0);0#`<ehvQ4X{thm1K+^tr|B+KbJ-mX;y
zwR1(3hdx?+&Ga$OOgyT*5|u9(Fi2@Ca+BvqN9LeO&r@Y>R44QvirPoI#hg1;GuzVb
zHUs6CckW)Qznucob6+ap=8c;--}%=lp3iXUDHT)Hd>Wrz{o1z1mGZ^`IhPFo^%jY_
zWGG_^LzTM80{UDe-)^rr)c)DzhdXYs@P7CW)!9EB$J^s*BjlN8DuyVH8=%|1>MXqw
z=WA3X0r##z_WRO;ilq-;UxGbtHqSCPF9wHzK^IP0Er`SC^Dxo&1)|?&-m8PeNr5Tt
z03tzF9CDNHL+^EY#Z%?rQi|YUBi!yYIk8aa;$(R2ErvWLp<M2L(sy-4cs=Wx>Q%Xd
zzTeM%;ms_i;A46-0~%3AD9h{7gB%`Y_q;esPE7UJTE8&Jrd}9|aPD|^o?2lDF{Z<w
z+qZ71h}=0O=G^pJm_hx)@k`uirn`%joecBh&o70XI%(hX@|P{;DG@naDr5I0o5}Cw
zs3QC3ug$~B11<rzL_0aMuQJysL?6oih;@kk^2!$5I5{E14g(w2kN=6wGHU#+ouI84
zy6K0C8a;lmc_!G_G37?SYqjn>|Ap_}bYL)$kdzeWBM=l4mK-ou90r=tV2r~vgJ*U^
zem(7VAAZ~KSGb1jQNJ6hcmEFi7Say}znv2}juHI!iS5z{+WlSgqh6UyeTPMm_hCln
z@>5!wkHJqZ>jCeUzg0nK^(#}!DaiS*NZ^L!nkAD?3TqhoaVpIvo;x37VC1n>?F7xA
z4n!^9Vg9W5Z!Lg}w30b8>kKYxYI-mImUCtLQ}KwEMlRWXR7is2W9S?f3W5I3n=<|R
z_>Gs&33k6H1kF^SRf5yJG<&}JgZ0o<vMdMmV$^qXX+Pr9wD#fTnue>$hwht++12!w
z{x)yhDCy(?1wX%@EZdgn#(ctKCEqTfXryKMX#{jkO+u~z(W=MLLLYs?*~sU6$h+_j
zDrTvnTR}l9ukvYT)S!kOm6y)LR0L5Te+3O8>A-GI5(@h0BF9#&fRrL?f7)hIt5glN
z;~ZSIU!$x~*;(Y60Ln>nbK|cKmha5AG&d`AWq+$48wtJfO%Gw56;!>4=M9sRM^{6G
z4XSasA9wk*jlB|*Yvo~bRkl0#cqtu^iOQks*^>_)V~$z8>hITvve&7$KCFzy098ov
zJxbe4Ptsx0EAWdd+_2!d6N;43(wVHDPi+5SMaGI$5)ttYFfdT*_LBz;Ont8YF=SxM
z37tJgP3ro7uMiiU=gco2l=RsgTQmEjQGl7%4<t3+6>5iqdUrAr`y;)Wl3$d0Yc{~v
z3hMJf64ya34On7)Q{z`$*4|{LTi*uZeRUN4)thn`zQ23-k=_V~LuT5C!~zw^+XIZC
z?C`+==%cmfVqX0t)^5v2yAO)_UU^uun~Et?ZMa!l&XH1cWw`7cGAb*6p<Yw=jnQwz
z<(H|b60FWv56T=qc#zkS&+zWS8u!T|-p0hEc2(cWnFALK?0DW>XO81Hhy*PqEhp>u
z!Q#S7@8wJJsIm8@=h);*FMnPQAG3Ciap>IHNy}`NTZ66d25xdT*W6v0{E}syKES?e
zD_3^)&!*%~QrG^MoX~m_(H+#hG=*BKcwIZdm~cu-eN7*op)&S<Ja?yXqxoF8<H?E6
zgeOXO-pZsr1eGQdHZWlGf68C};^ft~jh|Pxvkl;BuZDbWRIeD{_OycqWS1Wu|8r+S
zBoBu4|NKuY!9W<{{g=z>Z#JTG1<s*CfvI;1?VYdFTaM-N|1H`}v#{CJzB7EUdnQe0
zhc?^5O_2Lu!k}&$F$0~iy48Ennf=`Jm^++W24c84E&qi*HH)xua%wo;;_=IP?Qf{d
z9CGFtLQdSasB%{XyDDfcXgz)028O()dnR>U3Y6?OIRIEtiJTq-O3Bi`Kho@Bz^m2W
zu2XcSuKld6N@0>6GP+O7q02&Y7uV#sAP8jOe#lBM{a&_TZ1789iw~+k`NAOQkYo8t
zkgH+n(Wv)xh0z6=WgpEl$Yg6a_TT5$0u7bvb#`x$ygBSaOwzb{J=C^?L(Jkk)Y?Z2
zx4t<#!F(jw#{Vp8aBKeXC|vB_Y$%R|JgxjJ%oMn?+6`?DW+krd$`MDRQUc9{FKlcu
z%4(#@U1!(wfKHf+h2eF#$Q#YK^U?T^d=vz8>6Otlwz65vRB9U@VjG@FL)8x~r3B^G
z2db4-nu=QxO#!0zTbB4?sOO}V7;?vMQ&g3?L_<LfC0ruFk{U;77?oC?d1qPj;=V0%
zbci2PXso)%Us?YV;Em>!L8Z{^56{>{Ijt{Wc(i<O+r~$ZJ+Fxr;@;1OPUt-6?4=rq
zws^lfvtJKwb9h1KoR{8CWiQS23#WWYWWB>6c=uo;we-)w&3bab26kNU*1CD*z@6to
zqMGmS9vb#`9ZP6V_q}(B*3Vlp#`r;FY^MIBk)X|u6RVf|Q^ND&{C|*<QBvMLX7Tvq
zdYS!V;?cQev8BoWvb@0s)II=HcptrU>siw@t#y4g=*-Rj0Rb(>AT1}D={z#L|8TvG
zd5u5G*ru0urdf%Z24&e{T7Ct!Q2qmNgct-Zct%?v#VOxmh=Jxc=_jHVuij5nLju$Q
z6?cVMrgIshrYZeh$-j-_JTg#WvAe3x>FHf<l{SYHItsU{@-Bkqby`js2OI#m_MYv7
zv;&5#)>;m74R#3bKs8Vw)mXAevP55S)}~uzJ<~^Zu#v%pjP!lOkK7*iSCH%>(uN$(
ztIx0Nv{h`{-?TRNkn|C6r#`;-5pQe5YBI)3trjD+IQmLkTP=v56+(OLs?%yhq03mC
z<aGwDjdN3?c%YuySiOi#GrDA9<u<e0op`}>Fy*yvD1AR;YYk(E`K}wGl}8*$KQPjo
zJrB1FIQfSDCKV&wK5h;76VD3Vx7A3vqs778eCVD@gLV~KpYJCh2D~uJf=*#4j#deO
zEsvr1_p^`Cn)$CSUV!L|7jH-19J6FciPN_;h4zhXLDp3~mq+|ZK(Dn*M4t?y;C3zt
zk;>$dl<fLH;cL}p?<aRFW@EzAbrF9?rYiKOj*AMUNuR`&J1HrY*W-YWx)8Vww|wq^
z*!~heT>rKGJFlCw^T~jltZ)}oTv_y`!oO@)+rwe;eGHm*KUnD{Cq=q~%Fg7@I_lGW
zU$3j$g*|l{vIws#|AWT<LRO}xv6<RG@yqY-MvZ;mO!DvxB7ODat+h)1(o{^z!pHCI
zX_pg(=HEV1YRi0M9`4xBC}swuCteLp=29AaS1Mn<ztCNc$K?iQZ(h0=D`ehL&>IK(
z_9ZgJFu~J)?n#JN*;q$)CFKE06=>WTbULKf`AGVz5d_^lc;BHuq|j2gelBzIi_tJ4
zQa#Jat!c75rK#nxM4Hl_c-lmE<tLYZ|NhNkoZBlj)q)_X0zH7kj5gJA9o^J*e3a;~
zHm!g4cNwm^F;r<c%Qk+xA}yl#>=M(6CWw6tc>c~E?oB8xY(afqF1K1>bI@_WQ6UQU
z=_sd;4H}-a%F}M=y@mAx66*<kykzEfzu;FAoqX$c(sC63yt?S!!H6&IR%@<*yQ^Z~
zHAhUJ(4p>BwtHzH4l3~qp#%@nD8IT!QM;qKWK=4`Z4f}c0Pv8Okx>v}P`pcbA?E|d
z`n`;{yGZXImRAI%s1~?!spPnGTiu*R%h!_hM-<l?!Waa(p#LNxr6VsP;ZW^>cWHf3
zwfz7~XKnZQCif7UQ=v^a$Oakb?w#EWI8;-w-1e<nG_O8ay%cnh_fq*zeHByIM9r^X
zvT73S>ciho8kbEMi3WXo!m+IFg8!5?(V16C_omxDr1I)a)3w!wVcQ`RUfsg9BPaa3
zhQE_TZw&2$13&*yNMkm|$V0K&{oM9KJEAfN&#cqP57Ejx(i<3}p{9o5G%@Jir=TH_
z5Ci`y{J`x|KAvEx92kN;Ht0LI`rbDGOCeCb!btNujF41dA;Ndcd8^l~1niXi4+CF#
zc=R+wyg$`;-6ZfZDxNnZhnA$~QvG5Qlt6p+j6)(FQU)s1sYi}RC_R+r-UJ~&Fw)~z
z6D46*HND~s1GXE6E_@z>0OGvC{kHJdkeeMbt@{PsPu%Njt=aI{2Y%Db=GK>@7H2=b
z4r!~f+pYYbhFw_|G_Ga1n}Ei&dq~%-d&~`%B~Ecwn@&ZE+HU=;cj)*mBu!7$S#5y)
zG{I#*mcD)6?j(b+C`Latf@A!n?);}G>BJ)|GqUcbic6E-oTqM5{x2-tm~1uw>(|qN
zU4Yizbg^%>@1FXr6aP0aN+&>vz1x4BW!sC2o0sF0-}C1`F2IgA@4S!sBRge1K2d!&
zuDHTp^FFUHyACSH2o64l@INVbNXuMTz;2rBg3d6SR3rD`GhS0Y0aGgn8`G_Y65wV9
zjswFB6_?YM%W{|ZKFK>C!>j+i>H5w?fvXqGhFVklFHqV^Doiqej0g*h4!ykVZMLlc
zVxoP^1F^oM&(E~tW;cHyN%`aSRzj~rjsDU(xD`W835?J$`9A{C93nLAAfV<{{`&4%
zN&^f;W}JI>myy53S$?0eSCWKzqj7VBw4D6+H>&f#cNlnowpA-XdHQr1<{AmfrhEii
ze{V?=Z-kqCY=4xCTChq=n&_pg4ga4UdopN3V8ZpG?mr+r<NoH^)y>8TEc*-^<$nbc
zu~YiWOBRwO+aO|}qR()`vXS$@o@&OC&4(@#l9W_9IRyBjJ>B5+{Bt$o-OcsCIj<A2
zyx>n>NHSuT@;`;()3^Q|<7LSI%Wfl+SU4c>nq4JrdxKpqJe9??WKH?`8ydK%g{M_c
zU)q8C)TAQOKT{Plwx=pQWF>z$+L>d?uW9A0ySC>5i){ZiCny!K?3w<&6pa+|FLR^e
zkEEOPzq1daK~kAbU1bg>FKB6KSPvd^h`p}7NgEUtlmL+HI<r$}hLGR#v}YZ~#AoBR
zrHTFAHFK+E%y(nR2J4&K$BuCvKYrX{1`XgO9}cRUTbA*eZ%D3Q|8d^!Yq{<r+0Ku1
z6)!zg;wlzK>)Snp&YI+vor5vH;k8=HQkoBH=EKYxE3b@2Ths>1HXgXW$5_N-q~#HR
zg7BZITQTkKA;G~r0PSdaXfq%}y#Uulu_RnCLJenlwKQ%@H^G4Kwi!Yf93)L^yPHM|
zk40P5gINSc{)^<rMw^jW?}$ux;PXrXjJDAKG!lT29ksX4KmpU2q1iYJjQ(b1H|)ux
z<+)uxzHkV`@`3I`I@yk5Cp_*ih|Gk#p=8kEt6tUI?pZ%Xx2xv=4en^K?ru6WO*7Hu
z>r{#gI|Mo+W1rbkQfKH_#veJc(NEk1qhQsC)#5lr{JbiBCZ0`hPD$K{aU>R%UM&Up
zj@~$1FI>q1m&}CMTEp0#CV4|GHsRj&GZ(){QjdMkOQGY_(P8`WFzVi6iFcGbBD*-U
z*DqX$KxRXMxTvUJQ(T}Zm)Fz%R*}ZmewrR6!?C}2Q#B+;vD@vEx-#9SbaQX51gY&d
zuo-N<*i*~-wEpfTHEO>{1uVyllZ(NuTq|@;*twgksmZN2YQ`w{ij4V_(`2UWpKnU;
zq$M9}J{)77*B6imj&}Ik9eRE)Kv{ZeI<FG*P>bv#F<(VKgBLv9S`Q<kkGlbldY}Ia
zx7z?1;!n@<ka3*!0ky_qhek<wOS1ha7O*OApm~0-S%SlSX_D;S`$y7cE32!V72Fi)
z*tW|wGL<>;#pYH9nMa%ugtuTAhz@Qx5I~XUSZIpMzT(FVWfruk5oQ8&j;PHEGcEPl
z9kRuAx7HT51t*?itqAyX9NsN1KC8^_^|fGabd>wN#DAyk=;t0W#F#+@N^V~H0e8Jb
zAt-1hyvT{-beV@;M{GCp1GC}<?MK5IRnLg-q7eAw8)8?kFd30!UM6MR%bY(T5IHy5
zCY&IB^FZC^%3S@Iwxt#cyPI^9ex;g8rSsE2KS65xP<?_WW3Em1BQfV^i(_B-KYeXV
z$YWVx5Q>HL#5+?*8AloB^`~~DA4L7@D#NwW6bGw|Ur)m*R@!^=t{cQYPYts;0xV7c
zwgB?0f3vcq{OJ9$ZYq@+ZNUY3_esaYj+f94Bt0=Jee{GzA-JDFKvocfoAQ9itKhQX
z)T|u|#8;+dJdykJPutW>RMgt}0abLeP#d$HN{XhX57^D{Psm{G5AllJQRLZzMPLQ(
z)Cb{%k0@WB`{=nVKMEG8eG_3#fGIVmH5=-tzu!1@7hKFjo!nXmb|NR2nPeGv;^6v^
zfh)>`p__l(+K=%(R>0%*YHXFrCcY_?GYI@#G_{jdg!?&$p8uK{lyRn%^&b9WoIZTm
zt<Gl}MrTAxwYGct=bn15CHmuA)NQ^aFs1eNZpuhc=Z-p4;}-_JnQ-aS;#j9O+#JX(
ze8%2Bt=RdqSzup2>xgp!xHl=sJ17rsgu9s3%JoHtK(tTIB&A00@kx?>FBh$E!962Q
zQ$4!R-ua6p{@ZPhuJ+0=M2fhV(c`mauv^&p<}Ro)UL&8?)D7^{9!99e1(BBuBk$;0
zOKI@Ofl!x$g=QV#LoS5YP<JYfu_mpfC-u)Nwx|x+_y3W+vkF4*Qg6i6N2q^Y90PwL
zkC>R4!+HN;=%3a{C-`5zdKE3p(=hCKkCh7C=vc^v!YoOphkIq*Pb9{Kz-*7Wef1H|
zUz|JBAl@(Z<=lpQ&e09l`3;}OhhkYna2w3V#>T^EbIbif(!FiF?IU5v`2FNRzco=W
zJYW=CZ=WAnmBlf~55yCTb;(%5CmUr*vOI72qvCS6uz7K8v;O)9|L_u|Mcg3w{gV%(
zR@*-uz-GoA#E1nouiLzMiDcf(SM9^M@?8}F7|F#ToPSE9@m2>2^eGb0pa9tRqsrny
zj&0IiBk#oH%G|z1Q$$5QqcRcM#ZNrkzzVp|X-w@CoB|;Loq`YxTzXQ&>-4QJ6518K
zjbO399SJ|tDOsX4U%LJf<j)<zI*6OcdZQm#BfvPb83iaP4K0|rY)}=s6r3oh(|FrC
zD9eDhq)P>UBkmM`EptA=mLy3{75);sbIK*6wz_jT;o1D3&V=Px0ROl^`-<@?Xnj=^
zvV6%?=B9jKFY^ChN??pQ?M2_&@l!kSH;7lB@yuZNgo5-zWeUjq6*NxAc{CH{klcmf
z7?6t%BKe*CrC0Jx6lE{Rz4bMUVNVbypfsdauAzE-$ium{8kbu@lN#;!m6&F*fr7|u
z|9xPO8gOgAo<xI^A0G0k%@A1o=Ft$#8v{t~OU?lq6r9gMY5KUAs)8@bKnPHZ402*G
zcJ$MEZYRROLY>2xY2h!dD7y%y0n!-Y|EJ{g3aTeZssrKqT!qa1uZ1(V#4s|?F!&X@
z)v!YmF{W?+?)ZP#H!S;!Pjmd+NIVa*b85T%Ybhz#g~{Mh0e`&&svFFR{OUFZT7IqY
z8-kX^X;N4*IA<sTuA>YZOsYDK78Q5z82yfo4Eaxi4J?ioagQqo&<@~+*JSxCTOaM%
z2{le4Ca;{^U1Dz_8$yponEtOeWayfL03K9h1<cwQtj);if!PF>N97#-A!(%so~~eE
z;AXUtrBr>;yHPCLM12cQEb1dC&gLgbDCP7V7KNgWR-|uQ*Jv4$KDq-Q6RP`!3T>o%
zw%bth%V5Kk-{cFGci>|obiz99C4<UBGB|WjY@Fz3x@3|bo$>ZHj?yUK{qk{*do%l-
zyRN9AF3E?83p%0v;4fSK!v)(J8fY<sBSWpBgyTq%4sqfkwBvyD*Kc>&!)^)ZNH_%t
zElaG9#{5^o@|w$TVK-Xjfo*w})$0PK!wgWqdM)IEB9?NeB5|tvY$E=scjgUcm)U-z
zUHm`WF8H<IUuO+EVRiPgEDSKjFkA$<aIc?Mq51_1)G&nFUoV2_r)p+xwVUlAl11f)
zj{TWmnQ(Cc2_NYuOhyTqqAU>?nanUV&*A0|BD{yrVmvsBT4+CfW4{V#o(X3j+cbw7
zSW<Hp3YZLs8{$+vDbhsIc5W-E#Ivkke!a^D`#b8$m#2~%UfKn*;DeP(4rCALT3vgt
z0BPWCNCTVldPi@KPB1{F#!igsOdyp?;5y~<6zn2uMPaOkcaxaF!9Q{+SVcA0eF)D%
zJigIkD&8x3eam-HXj!CcUe*rG{-+HV>PAJ}KoI_C++U$v&eOg%M1MQ6BXclT8<LgR
zjl{4h8kipZP4)-PFW75eUk|P)hSeT5!&S2C2>yOk_`q+UE9pGCWFa*iV#)1eoTwdR
z0ull4-@@WZz4btaB)4;7GmL<DR*>?Ob0Z={;inkc>Y<4VWy~2WruCLfO%({VefaNN
zkrhOW{eL?2Uv`T{w>;nbdMihvbHYv6RNlYh-@n4|KT{U#Ml~6{n<#=5<O*7U#1scA
z?uOW_HWvI-g!~Ovw=VCEhVGs;G`E6Rckm$bd&HHi&rTyuh>nQ@L6MU!EcC=o)aOgC
zrV6Y$G7BMfZUlV{&^D%i_doC+H9tc5@(QXc-fn78u?X&OZ$1naEK=m{{1#?4Op?}E
zLIj>ZK!opzdD+-&nRQ7K`s{XLeRlgu9ys!{rZ6zO+MYhSRpVy}i}RW~0(VRXqk2Yn
z<p@U_5mcfyVoHl*8VIckpoAoact|YuN{T|+Z}xLv`=#g5FN$e@Qk!UTF)*h7%K@o9
z5WAY9g(xZ&sCaeISysQFnIRsf$BzttZT=x2=yi_Q89n$M@q_qmzJ<Qc)AxOOuzGct
zVO+H%RXmw|K-ByWncKnpVBxc7CYA#^1dn;vWv=W#u6b1QRmDb-wapVLg5E6?4cGyL
zGwIlQ)HZR^T>Cpv5Ln?SEBse>O(SlJ4hB4*K6v>%w;z{w2WIm~wrlS7SB^(uWB?Q4
zV*<lqC~%}O_sFNqkhcT<e2w(VLt3t5r9oNRuMA*_D(Nkir1?GePN4<cgD+XO+XxkL
zM4y3iZ9vh;@K7@t820TM8+*k_iZB$5&3>qm>e@EiNIz(3+OkG^fUZvK4d=!pZ9tt}
z$dD<<sOXyGmm@wz;vJ2h%;iJiSdww<Os*`|6vdy4ykB5V;<wm=8TKRnN4GTqtO1g2
zeOpPkNQK%HZ|r+tlI+;ZqTcx8Yj~!_Tlqg()c4Ht340g%LUyA`64_{yL=}q&&sD~Q
zCizeId)aQqq_U9q8fRpKA^5X5K=NcBt7#BNgQgD|N}AiQ4<y}26bzY8+#<i**~UCP
zqP#ryp@96SAeL7Uchj$?$=DjvgP_2E07w6mfd_t{i?Jt!HEyehyZ$vXi>|$f|5>eZ
zPfc9H^P8`*a$qA=4s1ntAm(}0V#A-C`>)#bV=S75$ok?Dt1zrK4Xrj)-G$f!iQ9xx
z_Fr*3jCA`=P4;saiQ|)hYdv6ol&e`yhmQ3CZh@jCA;BZ$+Ex|k|DK;ttXR7|CXxao
z=LaI^OQsPZXz^8M;iZ)lHiauVSRa3Hy;QAbx&QQTqB5k%7?`Qn6$YOAx1=%F#=hP?
z?}F@`3F>U@m>@d{MW~~oCcgXFd4X^MJCr}EJG3Qn)cH9GgY`(!b}HDkylv6@GhniZ
zFa0$97797yB5tZqO~$eO|4SA5S6@u8I$pAWJCdd@9Ue29lAHIhoZ9@!ysqb=!|qM3
zQn2GXy`Dz>bvZidpNx@7Svbh-KtPfL^E^-p*icH52_Tau4C<N^EGaZz9EqQVl1(kJ
zYXs*liv6eSr-dZ&w_}Pym-NRG!$>*cf2b^);yk00`Tp%ct!V%0jEIJzPw)A$D!kcL
zLcDyLddYI%cE-i#RR0ORf-e34WQadl-;Nz%GW@Q{q6El5h2}7oslveMkL$x@0_g&g
zWW1Q{ub2UeYo>RsgZKyo!2M3)nV`}C&s>0|(=6LVsgM!_n0x_<&-2YHtf+#JnM9+v
z(kUdKcWn{D(jl@VyuYJ{G!wXes9-`H`m!q64Yks^CxExekO^VK2t`GH<iurzuss81
zWedoQvie&BGH!VM%T@^py~woKYMFzGbe{4&*yKq6W6Am91nYEeb@!LO9jdo9FlFn{
z1s-e4ry{_FD>?&tZOp17%eMl$h)T~4pxzGeeb~4D=b~$`x~Y{;wOq6!8AG0O<G%9w
zMSs-<Da&~#TQN9+;NWP0J8>@jN&s<b5yVx(p29>|9=KrL__aU)6^eq{Nq9aT9b7#2
zPezfJfppBsG~BwHm<A_A0oLvuAA^|z*5xzuxSgRTycl~<6^aJBITh^(?p7M`SY3^l
zqladiHmdoL#$Za;mXe#c)Z9l@O>b6wpY5W6j%)ql`SnLx;<@Nn*&RfkB+0YQ0@6(_
zUcZTqFoN+2gHm2)&}RWZloo|ekXmPnj8wqq(hn_`@Na22Qo4pj&Apmmvz2n_u&UyL
z2MVZxzVvgbh538FDWG)fZ+;uUV71K?=PbK3OY^SdutmTBPoEW1c5AY1rveaE)6UD>
zy2F`B5J9zbJ-lDfprS)TC_028RjTOj9F>Z{b%(rEgcytinxO2`C^wxBfWvJxbm<qy
zTq-K5OOXloZ{`BFm)qW8ebR`^^vQpgJ9so_DCu_(T5b+nuIG9j@8&Ooi01b{-o$2x
zp2U{hi>95d-#iUZT_>$d<UP$G^Fh{j{mNYpL(~n{^etU{TX#@{6F|#ia}h5W+Lv%U
z%KUHJ5Et3vdtKEt`^k>|g_j0s;M&RknV^;}z(bpSK{tWk_0PPMjy!ihusDJwX7M>t
zGpf;E=oN-pAa|jUqeZNufxp>6eHefnRK@aw^v385&KbJ#Cu%3!F{NO04K%Ta0tZ+N
znDFbj4^8-Wf<9T2Jr6W)V<bbp$EeO7^&Tf)@ejYDBv7_B`jE6-P(-M_;EGRLNY5ow
z?BG+w32FN-b4(r|J?kl@#tEE|2*4eo43N_s#5aZfwa;X)(V@nD1q!I}%^7}V?CY${
zuY@sEIhV-PdUxBoPX{^~iqzBrSDf$mI(KJNvOlX$+-={viKimigN7*FBP3THWMBtN
zXk<u$pYq5!3gT8L>!B(qw3IsV3~+fnaUBdR;~P|Miwy?O+^Swkf>d$VbkjWdJUWj4
zzmj+)+mhwt$llL?N$gN^L_p9<{PVvgo*i_XNbjo)pM?reMB)Q4$OQP?G!G4BJT^0J
z-x?Bf6G)6|FTjm?MELQVaoA^?rYF~pBl{WXiuOr<Lk!+PU;!KMmIc=Ul6YBlv&Sv(
zDe#K6M^%N198e^$!<&?zruvB#duS?Z%A|j(vIldMN6&5zfh7IOJ-fi1l-^M;zTJGD
zPI#Gbs+WFRNzi$FhRP^T`NNSo+nwWYu0taPKsUV%p8V=MQr@_V^6j)RL>$28MV*vn
z0vu<K%y#@m_6tf#(9YZO{++im4HU;q5J7eO!%BMIh)E~6DUL?er6!^}U~qqoHdegy
z|8=$Qe4;1GmvVEgzZ;;LJ>*9YR~lU_lFvRjMTfz%0SiKT&rtsZ=Hny3q2<;FT5b(V
zgk;2&MV~ijIQg`r_H{IBZd!9|)EuD{@Nxdd2^9-PWG=c4)UX~gV7|YD^L~-2xdd76
z?f=~gGn1i1n`PjpLIHGVt&df>o*sZR0@*S|t!iIQ$4{cdLQup|_y;y9nwE6h#OOo+
z(0ZNfi8)U=%`%1DMIsNUc`d*Fic1*VG12h!%Nuw-l0_X7B`ILDCp(XcdTFM%{VBTI
zKPT1shq*qbfwHkrx=7SaMYoiWwMp%CgFsKgsNxw8(IVw1*^wCrMn+LlG@^y%Ax~yz
zyetDPAAL6MJkh!4-<MMVt99n#gl|OW#O7LWP3^Mg%!Ft3xsG?CTz(RXy4VWBQQ7m;
zCe1=pNh6Twa6#GI<_5td<P3t8XSew*IEeUs?f|p0ks^>zvvwxutuYm`2So?c8YhK5
zid@uf5t2JTbcq@f7cOQZelR(a&S|{YOjv{sk#hqI#=0UB1rYHM@abIEIh7+{+WB#-
zr@fqAM=XdeXS|YnFGfq^C#1(2d$cH)T~F^K`ecF+CD`M|$Cy8@ysp;Jit5EEOUpx$
z{XzWtD2xYl;RGvX9(TuvkwxJ$$!@y)bX!Kry>Leh{X>fYkFq<2NV^%Q+3sInWC@bU
z{1cNcwwftbFO+D0wBW+Fm<Y{QU6X6kj5yL>6w8mnbQ5)gLc-YD2jxB&EZ(eOG1wA?
zQ0{SOjXSSOKi~(j_u$w?Y!u6H<|ff6zBT<KjyrCYubD}D9FH6H=rHcFxJN6QbO9qX
z7qUh}<IylfZG-)zytCo251qTHfhTUkItBDdUn7n|N{>ML(SlVZH#;m?o`fOAGUr+S
zv(?M09f*$q4^!72Pxb%(>qagrD-mUntSBRu6&cCM-rSO8g=EjGB_m}gGufNS2)7bt
zXKzYIWM%K)dEcwg_xDeaTix+`zh38c#`B!>Jp9~3f+N{ki6v>{KiLqKcmUf5c;PYc
zqXF>0D6p*J3xp8A*90?NvDS6(Bf2vE$~G)OCI>ZN-FZD<*X{{5LE&i-P1qX0JyA@;
zGKM+Gz$ad|eoWcB%iBKdeqH_Ph;x~E1?$F#_yDQ&pi^8B8ld=W#XnqRZN?vKv%(O#
z0NE!u5DwgDWFD7`>4uuc+RA&Mq^n4~<2p-0>N-oLvS$qipAddF9Znm3t2EsxX!~V(
z1Nta|1pg3aK(<&TPpeo(-6JFgAPcaKEV!>3@aip}Gn$0?6v)qDsn)IcbahU3NeBfM
zXN?oz&B1I?Qza!59g8@X@5SS^VI>+xz`(9yCL`x{T+F1yHQDIk`&j}(ow}W&EQo@g
z&e5TGL-4Q<9F!)92Wd^>e=2i;C~vSLOJ%_97_NaI@6IcZZnGChuI6=ilLjc^WsV=>
zv)=QmEO2J%BtUHr{45fI9l!+O#%*eNot_pwxh=<l?DR5flG`WcfouB1{br0az@!qd
zlW-wXwhjvd;(+;nI`%#<=lAiV>!)HRtq|u9T?=CTtn3jYW-63r3tw$he=rr2rgD(T
z!R}&|Sg-A~ClbA(ODadHA4aWGW|UV}i5W}Vg<_sjgXjdL%cMqJd{^=7kz30x0xxPf
zV853$`+o)cEg`S+ClH=9G>7)+cc!j)Gto4p@huXtK`?3}wfNWfZmLB6OA7u-Bu<IW
zl}T6)onD^TlVc>RB+>D!BfA2aC?$EPnu$yhGd=CkGYAhQe6|76pZA>u;3|3{rZwNc
zNfEb)646_z;o-x}5NL$Q$U`LGq6AU_^zw#djzZ!dH9PWYCG5Rd37s$e<3pN4-r~1;
z8`);*=Q$8N5NM(*D3OWaz=qr%KHSzcYm-CIa1Ob&QsnQv-llQA_iUVW)<@PXgEPkJ
z4f~ilxq9EZ=YRXeHCVI+r5ept__)<d<H)d;RXDVd!2wA?@IXbu|AfuYZx&wOtPG<n
zID}|8KeliftB6RO+KHrc|L|<}ITvbuw>ytbrKCF4SZR=siqR6>pAY#NH%l$6m|Br4
zzXJy+!AEp4ZT?1okQ;fWS@I1L_61eUUvA;9o8Og2PTWMGEQ|*B*-_7_lIdmvhSLPq
zs(%I3&~IQ}BQ!{sOeyCFLQRRmM7@8Di}T9Qy3!pR6&#X;-<2FB<7Lx{g{&`&5bQWQ
zm@k`cGzbLR>$~|`!kW?grl7W?1gQ?Pjh^WBTp^MC>&+~Je4L%QbVOQ(B8}(P?Ry+}
z3pmOQ7jf6|HZ3TiG`NU1-H$Vnck+?hN|wouD~godx?78YW$XM4&aLGhZx`gG@;?)P
zXM*gHRE1vXk$ZPxmnTjn6{0BowTP>I7X*e}U8T~~)Q9m~Xo}DrkaIkN<F_Mr8HC>l
z8lch@b_Zc%5QaM@-;f4+_(`H&Gg!6+8M;?)G=FbMb6Vi&A1ZzgM06I9m+9Vl7RIGa
z-D+?I(F>Fg2#qVZ&TC^T2SCejPIkowBO3h?*|z(P;Ly<Y$46?G2!#{I3OkZMr&ClJ
zX81pm_M3UG)m=(4)7~sC%ZRQdQ2_xtm|}4=i2S%pnDQ1=yv^bnQaqOuODD3&&cwaI
zV}RmW@O;Ht5#(8m<+x)<^ix2_>9Je*IebP4mh^`M%+6(<ApQ8WZMV!~CQSO~9~}M*
zi~UT*kS>sR^2<~DDB9n6MM)$Jec~+I2GF`83kFBLlNRHPh^-H*^_bmTb)P|t8r(Ca
zy*5BT$>U?Y;de_W1^iZ`YkAt-nrsZWhv*!in*(zpD8HIms=_^@{#0LWbMm$25&s<I
zv{*1XGE3e!4FN|ppSgYuEv}RFUGj@)aW4jcEc&{LfCwDL{<G`Sh}2WacgwJdqiEEd
zx?W5B(#JLTB7i$O4A*<gx$CTJILmCE7=9UG0VHfEr>QQ3x&mk|#uBfSSgKJE=|b9*
z)bG@~GK?Wc@jCf({&&rrM=So@`+_I9^~m|mnfAhN^pi8&Tr%dwH5x@PREh8W@-_%5
z?kcrfeuQ`5C{@5SBf^jFV9`g;AWCG5g;M%pEMIMF5Ryy7Kcq1Hy*CH*Xyz`qIodU&
z9eeY+7(z-Vq>eFvDaGqLFE_!dK-fATgwfbl^8~;}<Pg7=%21(^lPh?Is~BQjX<By?
z3yO6>M5vdz`$6p62F^r(0zirtC$8S!wUOM>Z4|FRhm%4qyLxVbhy!ZmIP=?ft9gpS
z!#RjLWx)i4eF^5_d<Lq82x*%Xhw&w_LjB^iSMiq(7VSd~`XrIX;4qd2ZCtfddH$X~
z!=w0Kq}dXkfcv62ac0HDmBd~Sq4$E-<$`PvL_Nm=OW+B(s1g9wAlHF*eRgdmqR{)*
zx|%sKTp&^&G;gcZuWco8n*AgGQ1#_T8<_PXs?6PoKI}w`qS(k1L0U#>n8S}!eSL8z
z^O*Gc>#p3_tdtbq;=?&gC1k@jqf6kYv{7`-@!6f%G#^`gu0ppiJxB*G1?v|=<TBTr
zOdfr<f;~?=vnY(?+O3o+QbflA6xvKHJJym1MkT4QTFUUj_|tzkkO%w3D#+SpF*z#m
z8HS+55HG8Lg%v2a0-)3B$GZDDJoqwdhP6Cg^VV6>RSrRn=vl!byao;-F2Gm`-;N5>
zx$^1t%-A8Lhs7r=iT>T&*QD=M^fbc*SBnigAK@80DV5=A9^vT~aU&?fRDmo5pwPI$
zH^Vwg2Pd-r_`65Y_UeHBC9m}tFf$`<sU}YE;}%)ggKwG*F&B$h{GBmZ-`^W*pBt)t
z@UxaQ{-U=6j8D<TZWBk;V6H$L-&uv1mNwmO7e>6scDL)z>&;Kk$mnV!e()Pwu*(!+
zm#JgC?pI%m-^7_-p+UG1C?Db;#U1Uu)DyH$5Z}=fINkhAdT^1%AXK+~$VP=&9WW16
z%)weCI$Heu=3$YBUOPL)qig1P&9z`cg#Hfqg45n=blU2<Sb^tX5J^wsXCsOKoXzcW
z4ja4_&?DtrpUG7`(BcS?evD82cfT^+{Zd}N!H=deqcwaa{_Vn#&nc(lBt2bVJ~~Wx
z{E&S08TFSc7WQpkhpkn+=D2ev_MwdF9qH<dl`fNK?K2u*+fT#b^5=gqHq&k!9y<Y!
z!c*{7Ke9gNQZ*;4-kH4|IWRI3<D~?kf1JRA>LQjme)XUw`wM&(pUekvLF$8oU_=VW
z5oG#=AmtBattVjSx^GYd!%E;|b`FGX3FnDb9lA5Uc+28LB2Ec!BI?O=`U_2+hksAG
zkyN7E^grfBvd_to<_HYR(RN6m$QU<(xf$?D8904<eQixy+{b^n)V1J1COahF;X1w-
zTYUcK(_`{1)6}Bp%+gGggLI6d?J<R85l9=LImzmLIt{m48Ka;|ywt<PM;w(sq(?)g
zcW(^z7}|6-L^`T9#PEcRc`v3y`w4>;e>3gRx8}(Gr<6zR*Ku^OdeYZYg-b45Pj*n;
zw_rUi{xa1ZJP$^{Z^RHzp3)v3e38o>idgh-Kn{gCNLC4MwqG+*QHi?}-M!tL#Tlf?
zqXh83IOonA|7u%+pP=(<uaAD}y3X5|65C=@b0XjU$g!#eA+)k)hu8|DWC|<Wr<OEn
zz*`mRCJVlczia%0AOVfh0S6#GOOExwrg@inEuiYfEi@{bDydxd?%<&!o1KbQn~u7W
zxe};<&Xe-q`uz<WGg!Sn;-S6Q%xky&$q}Zv<ddzH_1gKSa!z#o0mmE1EE=XpKOUM}
z^C@?`_Kb%6m{N|K@jJWMVunR`let$eRJdr3^G52tyL-+AYRHUAy;5LUko&aOVrKfg
zyWdEZ!#JK<9)q}S{nra&a4vYkcA62t3YA$Pu3%=$U8Ji%wojF^u90-T?mmN~nVxjs
zS55pTs6k}*Cqg-#n@}WCS&c_Jh~$#KJbE5m?Bp#}dJBP#STLw&rmU>rv-Kpl-Y4+a
zMo2GdytXBFXV%b(Mnp)Mfe#UqzXnN)X=DuA1>vnT1;{zVXjdXwMJlYq(G*V!tbnk?
zWZVx62De>L=xqk{gM3e+kp9)e1wD}c%j0*(p|4cg1&UodX~r9-`%5mLw$sboxC%4l
z7K2mDWid<vM;WDbK5wo_1_>G$U5(_^dsfu<WodHd#&6ApO_f*)`J)VC%lNlWf6juN
zQ40FBDNnHP70<$=VB+*+_V6Z^=Q$wS=TO(lKIBcF*SoJ$&4FY$SVob0s@>w-oS=r|
zL7TSq6~mUYU;=R;RD-&<cXrd>${_&%4Xi;kNv7jty8mL0bv7Z(F}9KzNnA8%4C7S@
z{)nhv=h|`>Y*#<edRh1;_ZAmY<$U0v4dTKvIJ1x;-t6c@|NNOg70{=uFZ<9$Y9RF3
z;-k|I<P)uWPkRQ+*K*AEh*c9ViPr5XK6z^ME8xdmYvtOX)Ya3MrWzvo=0<F~GV;di
zLo0oUEA4Bjxz%!x^Jtzisd(@`&vm+!r<~!kafO=(6p`yCv&j#RnS1PP&g54>=ib&B
z+|MbfTkgglB6+YddXSdiEs@D<;o})CL9=R@9=)YjV_Ka9wC8;4)n4c7XdM5}4!n0>
zo}xP4yZ5l@c4O8pnCr`^K3L&=o$jo$14Y$jf@cJ@U*G+_!(E#AoLMidGAu*s<r`RK
zG&QI4@%jGl{H+f#rfMpoCs$E@WvWlOPIRL6b^7yJGgn{J$&E=-yE>Itef!sZW%niS
z|57}C$>E08e0lwB)Ma%h&TC;DExpi^lnr(4zhPc!Ll|c^jFU)-yXaJRaekti@sh`K
zjIrt2N(uKRUbAX1<w#zgI42tG+1Sbc)|DpHs{3C~TMln;L`r#Yim%;<vldr`&2GsQ
zeHF{@usb0?KG@d~_vkCA*;70YS<BiM$_XD|mWLzJD3I0w{^Y%64grV09H<!4X&K;N
z0p4+9pK3P+_ev?d$>RY?{YIO*y`A>zvcXHl1&3QRjH>s&n7rko9keFFMPvr9@y836
zik|4>N^zQIQL!0EzRi^=;;!Pscnl9HTK%k3M1U-k9$()`wrYq8o)_nO5o(1dGKRGt
z<UZDN_<FQYQje*3SCxTrGp(4<>Z?y4Yc8R=T5Ik*^S*yYi~`Q~b0>IdHcD-Zw<|uS
zVAj-6l<F_=@s8l>%I;~4SsaVF=oED(vFb)mg4n&@Q6Jwf?!>9_G*#yx+wN=gdG4T*
z7MeEPHtru~5XW`=Vf}gQ^d%SV^t1N0y|;gSrih*nQHy^t+h3w|uFTf--gntNF5<i%
z=n+{qd@ZK&bG!a)*D~wR#;&-Ve><(ROsgt-9#^?7z9FOIA3f<ix)9m`U4g+%t?`$$
zf651zNxROvE~nGXana@J!Q(*r)Z2UZ)ybhzf}uq|KR(He*w&(TGU&ZY+L$SryGO4a
zDuEf9XPlsVDIZ42WZwSWt|8?ldOzl}<#UB2%oCXwwO4jF*YvV``fGb@*^;{x?fc*Q
z-1L5DKT>_>oTyd5wxq|3ZmDhGhdi1?pu&y8fW;UYofkGr+Nc&1C@UKIgNIIoY2A42
z&NcH&)%I>91Tt`t3m^c8fKd?)lQ?JyY_Wv}{4>r9Rq{lny`Q}@E=p_zB41XNC|N{%
z{mrGL-=5%uL?T(%HjMUlfq^~eGo^Rb1tAz6<vjlR6i*wc`Nfd3{A_k7ZY#W6*hAC;
zAw*B6x*Jy-a|h6Mk@Y`;e$hzWPu(#6`PeD(q`wx8ZlAUve75}VLnT!q@kuebEn|V|
zT-wy;t)0KLdp<vQVIrtU)~E3AJ}-9@<&9MjP6!(2KxeAF;e}gHkN57at2+_*M6YZ;
zd2BTu@vX3^GFHlK;m3L8g0+{uR|suiNS3SOHF(fW3mf&uQ1q64LR+z`z4L7MP_|@u
zu2HtaQO1gT-7HP0;TL@7G#vc9W4V6bSLqpb=88=|k3rGxxr>FOdcDOq(XnDyIpFEk
zS5#+fJZU`pvvFlxJ74pnvT)$u*>@hZhLW38<}Zhj&2$)rbE^hAtLxcWw!WUUqF!tr
zePoz#TB6(>EArgA6^4J=jM16#${pU-w2h-Ub%;_3xeib0VwQtxW1Ku*neJFUFWh)Z
z4+y=0kfge>=r_}P!b!r(B_Su*(D)Nh4g)85@bDdkXcu<{MWd&t6P;>)3XjS`I>LOq
zCiz(FyYoDp_wiU3x(N5StE0>6+Z4-ugUc`(ct}P(br*Fo*RVY+#uLhF|H%8dS->lh
zW+{T?%_GDyWK98%-VX@Y(WBkX<OXh^<XV$(KTJF3zM*%>FDk#Zy=rZk(Pp7$cQgB}
zS;a3Vt*t)81i?xBzS5zgGM28P%m~iwx@(g)JFBm)b+gkRl2DZSx_Vnx%T1~^L<=S!
zW8T$BQG7DfC|K>_8+A^L%e&I%{Tz%BZr$Cp%NyN9d38;9Iq&UIoUzP{%Q7wxWD{d|
z$o-z_M5mLdY4F~DFIR_8@9wAd#RRSc_Uc}WAq;z4oLh2Fk7W&-@A+)hxWr$w-c=?~
zZGCYChP!suzOSEIUmQzt+Z{0eQUCd=&c^R_i5Uup^V+SQS>yM}3ShM6%52Agu<O?Q
z%aMY<yW-5j?oN|gT2EK!90iQ3vlhOS?$yur#`0-r>0j|&{o^>V1?s+Q^b4I%#cdwD
zz6u?fX4U;<Wk%Au&vz8_R)J(?Mk*gVmnx)vvotwNfDhtJAYD&su91jmH^28%^M!=+
zEg$hwtGk7E1G;NV3$2agI?1=>cbu2fbaU4A$Ld3tyu^GyT@}68Uc2Nen+rp9^Njn7
z-Mg*&vPz7dTjF@aL6Xx?cBFY&Z_9qBTbcXS`}#qxfy`l0>az%vvPB){CrA9;Ogi&Z
z<>iYap6%fBRFa?Kzi8^NHBscrP>bh(rIZDUVy(5b0aI=OcA@nVKR%XT*h7)1o$fy5
zo%k7v<_l7BYjV074$u8dgX5EsV4f(4bzx|6hgY&7LDZi$PzmDTQLGG$3--vfx%NEG
z@CZ(K1w3>F>C*xTgsD~Pp`f9_50@Nf&!^rHcOu{sCCD}xC@}hETNt$0FhoBJ)%h=r
z?u*J~?0B8l$uv~`-JTjG3Vj?Aiy~_4<3CfC%y6!%e+CO5PPCLS(LG`mxtsBR#9h&K
z$T`}w85z=^YgpQr70EX=?>zHeOVVR?*^7yMTj%6IUVy@KS*$<t%5O`?NG{b_rE^vN
zKWPQbN}G0ur%P;Brc(CAt~*p+@aR+up%-h~*$4_@u=;s9Tw-aUYBlzRpy{vOp%wYv
z!m*L(5ubfSK$ci<?H1o@)yTC>3^_iq?Y`7mxHB`i#!$T+HvDS&UYvT{dZD?9TN}$7
zFaeQdKncBL%QGt(m1bI>^&cdX8hJUMvDp_t{p4hZp^H}&Eb>e$(>|2%?)ZMCVw5w6
zaBSoL-d1X&H_0)#SgW!V>q`@=k~+!$ljZAo2E>M3%~;p^Ar#BLa)_kD_g+U{{F5V9
zTG76y%syq>xkjZA_6%!w$zvs)vnGol87kUN-T2_<Xt#Oa>8-JPoOp6OC)0!ZaF}R%
zTH2lW<FE=KA;Jh8t8n_;r&lOJpB|IOyq&40U*8}Wx8=KWLG_A2neSV>F>c_Kg!2cs
zQl?ThfdKF}J|I|16)ihnEI!a=oKLD2+j-Yo`7s!uoM5|g&fYP1eh(}Eh7}5d;j@>?
zwHZ5aB%U6ynLHjG6kkVH7a8#g#j@b>q+TTLM(BZ@rZ9qMk0k9oc-5-WF$m5nJgszM
z0>S1B7|bMmO`(;$L$NVh@wGvtZf@5b3v$}C#vJ{v<~Df_Kw&Z7kkBk_-!nW9_2!*5
zweEkWG$jAtuv!!Ei5>`z7yrHS*RytlEKl$YjLq87_}N=%Ug@(ndtq%$U2^3?#9@m1
z=chZ^Q?Hjx3&K21G26|-oh9h1h!E|lIepgEcdhFFL~#EP?pqHZ1vJyH&JAU!^GW<R
z&Gy>(YgqkL?O{MbK8(H3cKgmYclg9fVT*RG+|w~He}#Pq*fH-8h3ae3ASX4IL$|E+
z9Dr{H9Fh)60kdJR2D2oY2+sbRVKs=cTx+C#zq9G&8aD4N`Oa*Pz>3cSmr&RH%PwX0
z7pw>M-Ipeu_av-umwkFV@=c&(g3Nb&@o8Pi>6zWZm7MMHO2KY3yWyPv*6#cHzpe8M
z7J~#+B-pi}G!A<GhFVSD&keDQ9=IkXMFY-6DOl+OyWi+j2b*^{<Vr4`qa#J^j4n#c
z>4HY_DQ7!c;g5LaUSA9GAZKK?!6G5#TM3Z+fMfL~58iSsst{nDpSLhT@KSUJZmJ@_
z>vvxds)8g4pU)7N!>qS2PQSkotxzRbq5!G5@)G@>8b$uMCauC?ZcuBI0FC(x0?M}_
zA6gDS!Ha-5$_d_7fDS=)J!$d!JIS$AZB14kz_TN3Qt2X~JoxbGF|7fY**71Ujhu+}
zIv!5zWR*>pRmaS4`unKl2dExr^D&VAxwS>Xq&?AO@KdA;IA~fDBvZ^<c7EPVT7cey
zna3Wk)fqpnsTaGV1m+Tf*dtSuLTYsPV%h{cuQiI_^lfSW&;~^e)oVT#Z>Z5<DeK@Y
zwpnAc?kKf;SBPj5yZ*ApmW1?HWHxx=1Z83Qrx?evu0P|^V@(&+4xSU$Tc3A}?s!a2
z_h5C|YR6?faBB?yV*TyS<GIAirq}t<^x=`#1tA7^dOZ_gikkg{?=<QXCoS&{l-lVu
zTkq|T>E%m#FK;h7r`XL=o>MT(u^;}Bd<r<kqHNaNuX~h?XL}@FC5=79vHtBA8$`o!
zRUmm8--nVmkxrGZyc~<Cl=X8&JyovCmEd_Jwkdp8gBlMlqRSvu^urIVA_A&$hXXeZ
zkmQj=87{d)QTsz{{KOU{=fHxX|1ef)J}y$+`FzIZSt61*1yjJjutG7Qee?FG`8Y#v
znk_|HbK<R@7f1ZrU$8r#_cr-yXQBG?qBvs_R9u32`VL1cRPll1sb3-L>2=i`bH^_R
zH;2|z3L$_=n)dl85-^2N(0iv#Z}aZPdGE3ZR&N!^hdfs`*Y@nW7Fw6V4CfdZ$~M0i
zb*AvnwKF<;T1-NrDnZiYZojA2U}FB}FPie|f_V>jF!n&NWmx1^ILvfGw?33P)G-mR
zE5R$ws;n2g*M4=3TP4`V6jbtIic?98V|8C<p6zSbWc^8%*P96*F7tCt9o+mXCc}Ri
z@+H}hJ<l%xRPDXBJonc1ox|?7{@S{|)8nd2*X%0~=^p&p-cVXfaQk~r(x|dDA$uj~
z{GI2Up~iV!$GkmOJE7^5t+_ElveLRUBlFVA^zZMA%sPOZvU$&Cue^CozTz<;_Oe?g
z{!$6APF~KX)*hX4UY(z|M_!Jy2>~U(EjQpI1ChagQ~?}qUS=^TjQc_nc3ccOw$3WZ
zN@0<;G$4`%e<XjP0<)LNnN6995_-PfW4Q5o36>lGynR%O#0+wmeP}aG3*PB2znbh3
zHNXc7xIUDHM^EQ_%jXvvS!??`^jT|(F`h=G4_b{i9+EHAKd{vi@khE4`4KQNh%R6O
z%y^hgif5qJopW<kOZqGr5-{q$$;v)~i+{%(8BQ|gWomJG>TcUR`N7fg$4Hx<HnpEj
z7)a3*be<Vzuls7e6@1DuedAN`tKwzj_)Bw%RaSVND7iOSd|#9-VEw-LO=;*roO=(g
zdSkmaa0P9*{|Hyz$j{r_f$l}CuWdKK*U@P?J-%?swf)c9NNDuxruv19PC1G%mn?@W
zN~}8zl0BP%n{_6)aM5Oz(s2<Mf(%HGzw8olJSh8z49t#?WRt&t`r`fC4&$+!W?JKL
zP!HMILx=Ce{ro=BQK-eea%?8Ma;}1}VKVOy34(!wS9^7XA1-06sAb+<&7M!I<!-?+
zSP~c`oCeOH0^_`AM|$?XA&<o@?uVdZRgiGaK(FZja~z4KUiM<)*O0ilaLHE?cMTCu
zjN7Dc8rbv-*#5*fc@`9aY9*(8+6Ma@2rrocZh?e^45^Bdw4&Xl;@-&Kp%QNVDU#C0
z3}(DH)Gc4Cw{asRaYiYy$=B<wanoztg~x3;WFT-Sl`#)YA?`jgofmj=Zd*ga6mMkF
z>qsB<?v2|=L19OMr{>Su4BhKzLDWW$3KaThvwj2<nago4Y--qZK14LF)UMyHT4sLp
zP0bAX-rk2>HhBwQCKI#o#rMx8=fAhl$38TldqcC>xO6>QK<{xN?a<N(tGu?|6&FKs
z-)hfo^Uz2Q;Cox{H4iO!a;myFQk~0xQn<|bd9U%!`MDvF&CJVNBAy!-Atx_L8N%>O
zz9T2aZ;aK2to&MAr%|sp7$~x6<WY?kDSYlEddi`^!W8D3_xz>h8#8{dK5x3Y(=W=Y
z7N`ID^XEtjce1rO_<~cHJ+wn5wEK(mvc--virlDcdL=m@!nhO#K<1xaNidpwM?SdB
z#!8L6yY~8mefMTb;uI1sh-T^LrfmeB_(ETk&004hSkq~lXx9c#K6}WPTbDJUb}c&z
z(z)u1QnSz3f&{DEVs-c=k8&7q9ibP|pS^tbo;Ve^)FH5-;)s*0r%8Q32A5jnqf>fX
z;8c|8Z#Z-l;uZ-Bx!>Vw#Ww4;g!1t#;E$i+Cu4=$&0vW8+{F>CON8QFXtbw`NO2n6
z+mX7lRg9!|DVec}_1>9HYqx`2kJk}W>Xg~IY8n#lqP?XvkC7v1m9e~TM6Rv;N{%_2
zKE0B9sC=n)zwF8viPo6|b0FRGky?CdK_yk)L%pEXoEaj4E1-y_Mhz^c_g$Vnjk)DM
zC*>#!_uwD7hUJ=q7wmrSez@}RNvw!Pprx&CGp*XbxnyGOiT;zAX=(x-WR9Ube`oBq
zfx>XD)lpOrVZ*#{(K^BO8l28qX*VT=!7buCsNS;)()phr&pCyL<UYFse+QzMjGlo~
z$5v*TD-Kg}XQHVUo4%EduG+iun(c0%%R61DAq%RY#C61{wHHn}nBim|q%DTVj6-OR
zn+12b{+5=@*1G2ja^#y->Oz<K_oda+(<8jTSd?Rb+4T2Jb4BmJ-(oM9*ss4Cj+f}$
zaZ1A5Qb+T8EA4gkniS%)QIJsZfLrcZ*LVO@h<dOk6WviwaqMkN3wJ}R7D}9`xwMeT
zNG3XXT;ykU-v1(_|K+p(zwT{A32;AX{}VrhsyaG@I73pTBAyvpY41aKLqD#+6AH&G
z?o)zo*6ob3B|9x9DyAQ)k_u%V;`+YuV+$`%XPV5_-QkocBweGB;fS0KGL#?)Pmw~F
ztCR)N;2!<a$)`{8F4MktTH0rDXQSPs5#q`(^f1gAuk9RsnHI_C^G3i+rYy|F+Ssb7
zqF{`BI@vh0YySM^{jIev-!>Bns4QzXSKc{(KD^et?=!J|asShMPExZXVyo)Y<DjW*
z0apf*t6uSvp1Nyv0@N14GmXWs+DB$iR(MaIg*z$OuniOIvlQRon_GK&j5)cdf6ywU
zz`Wi?CtveR@m!i<jW#rxr8sW`H|iS^?*J-e&Com(QSVKWwHHyjhJ0SXzS2Lfk-V34
z_~<D&OWQ_0S}BirmbM@s|9s<6Pu~_}Nv&+%h!yraA<JQ}t_*_?$vgd>Ya;IL9BZw4
zRlGV`r!4L@>c!5aj5iL=hkAPY$BNixN!t%=m!A(UA8FJ}@{95+5NY@T=$!5=MP|pE
zdFv?0?O!~Jz+G!So)<Y&a__UHa-x*?Tkkz^N+fT5h&dZ4J@4b&SUSt=HWHu42yPMX
z6?o1LcZR<8^J7(`OSAevIuwVoF@n^nVZ47Nc%0u!sT-G<#jD$72$oK5GEhRhXf2ZL
zzsIhCPXeuT6>JVTXGs=@+Xo3Dos;MST>UI}MxC6-{1B0wQ52L8fIsGki?x^Ta-x|Z
z+#08KLm>L$nA1(idpBgt0@Ej2N?&zxB25x3?~o*Uu5=~4pPwt@Nw+-HfNE`!VcpC}
zp^m}cHt%2-^iR_-U2T}zP4!4fRh-E-{otn2#jE#M<ktFR(BHiyIogH(c!TRanNZaL
zd^c}JhZ!W5KR-R@T%%WFE!yn1=bftb@{@2~*MlU3@VfqYjwxGJEhfV^^lN+)TF0#O
z7PjVV_|#iYB`h*Z4P;QK&WRW~RGl?0OX@GN{*B~|M#zuzXXFmJx=AsgcSr&ju9@AT
zE(~UR`J{3b|EtL*K=(~)6VJ?VNCNT)D&<>bP4>k{GhHQ~6ac?#J)`Cfye)LE$%x^C
zOAgTVr2z%8r%rjmQC4G`!xX2}N@x4!Uu_M6YnXM5xOIy;S3k49agWg+ga`(>XPrw?
zET7cbPh!1W4L;e?wbOh-a=tm{;`P?9%(2~_?B>@xTYZ<C>5WC>g?+2RRin1@>A5h{
zmUB{ga9)*=sClq=>Rf_)cYe=jiV>@~3#~KY=6Mvjom<P#oBWGQ{ydlHUC1PQ-uTDo
zr<Fawr7=mD9t3(}>$;4Sy~>L&{T&OPJ9pV-R(JS=dsP<ALlCF`+=K)i`(?ws^JX=d
z1Rc)<eq)4=Q1-|#m5>-ZQAo{!ccvww#B`we-qjF4Eu@w!wH@geMn5u5x=~;6{AW6~
zjYJlBZ2V+IQ0^Uf+I}p)E+mw>K{`z5aCMSueGNtLCcl>=7z+tfG>6J)<O5ET^1FMF
zRPO+vH6oh-E7+0wid0CQ_YhNH`3MrPBotr5WeWK`9bU=V4cT(O3b?m3i}%MPq~s0{
zmAT7#y3BV!S{!o*79ZDzJi$u)J(qNZKIvN8IA8P1_rK$i{OQR|;Zl9gW09rJtCbeK
zRRx4TGlfr?!)C58<>>)8XjihF;&?;kb?KeuaIO!M!yR$SKeg1Yc0b9#jAg9tGX7YS
z#usXG+12BgZErzx;BkR8zy*-&4z9Sn`UhYY>0S&^m#8sYAE%?`G5)&b*;i!ImE-P|
zs`5&?(#0nml$85l*Q0^G#vfO<o}V7jsZyqG_0mi6Piub7r}gB>CAX;;y7`8gz}QzQ
zEol0oOloU8=u8OumdANEF`Pq)qo}W2g{H+C-JZ$H!1foqSSjyVOAlb(>GB;-QfmCt
zX?*kZ6ZI}gV6^t8^Xh1pSa&^`>9#AE8YsId_tv>Cm@)s3V9g(&)~?{u>g^4Qvw5-I
zc_xY$4Ut`tNL}uGauo5KEO&Pwl0;r~I<Yq2k*=x}dT(e@y3$$$KuDbuL+7>Dv-1~=
zEj=0B-&ysj$vru?loNhqW>4&EhDLE(R!>IeE%_kpo`j)Ix4!ds!(Nlpx|P<;8x#4r
zcuD6$Lm;(;qc3E`(-u+T>SwjnwSq!g!=XbKCau%l7rQZIEZ8sX_6DCaEqDx`s8Pf-
z7Al7vcvT;jPzz=Yn?xSGj)~jMi=|%n?nBt`78Ec_xnk2Af`6IOi+7mJ@m>t&g6_ZC
zH~Xi;XAc5qsC0lqi*nr;OT1x}eecBl?p@Zq1h13>X{038Fo)SkMAzZv$FMuhMB7LJ
zv}f?dD-}}HS?<MY{e|A1afM|JeEfTEj{}eMP+R@^OCjBvEnsxjW4^}h#@@YFrmFUB
zi`M9glz}Eu%P-TS%CE)j-iAViQD8qJrE_M_E%;(tb=jW!Lv#;Ik6aw97FX*!g|u;2
zw}4Td)hNRPg1M~SX^P34v#&lmvyDXN?&Ng5kf1c3U207-5Vp*kVKn&}H)d_SI2W<T
zCYt7;8kkw`KT`~jG7>zPmREI`<~}*bICpa9yl>`5@`SXL=LG(C_d0r%yF0bkBZVbx
zA0LYRn0;^Foayj`&9Km;1YwD=GM3Fv@l;D8$9%SA)On+wDPDCF?&E)Py%Ukzka#Yt
zvi~xSu7Hrii1d_z=(UTQw@Y-Ii12kU7(wtRSF`B8vyF<tE46HKNbwv%CDVv|td^0j
zWl>ce=tYJN1jvt$E{HZHiVE%*mJzAIsODncf&5anJs(btr?~q~C<QLx{56*?^O3`K
zW+`ke@|?jhPjGu0_eZ&~L3zLbB!rp3<X%O}r}wm%G5{$&d?I-g5VrSGf@WzeGu<{@
z-2xg6EM>9052gpd>=18gXKKoS+XWY7dL%!eOFj12#vdg5Vm1c7a%gL<qn$!3pmPeh
zf`EK0cX}?s9f&$JbHTdz#!PpvbIreu+&fwa?>^}qS3&QMFLW=ZeA9FV9)~jI=9yGX
zg{ya$NgI{je#WbpM{PA&YG>3n8*<^7;bdZTHqYnm{8G(T<BO8bG@lehG#mAd<e&X$
zOMW=rQTZOSi<G~MA@e&01rVK8mV%%%&R<b)O)#kxvHqoGH@t0e{IXuhli`~;JwAAC
z-0ktHUUgy$H|JL4h4>`F(RcVmrd3Cp6{Nghb~i)Rzqve{{^>DU=Ka+4p)nJ8+umjO
zw~~lCJh-#<J4p5Q8xezy^-itn{;H?Ieo13zd_9W4`_C)kmF5d0S2qVOhRd(hmAIAY
zL?|%s9Z|_x86K(>y|wP(y|bdHamu9C71(PdF9_~^zjTFyC!A791=)SthzF+x+E#9q
zaTyOz-#rutZo~}fgQgn_DP+#?O)*yq<$-Z<m&cTqWueFlaD#yJVMx;_h7Wpp2W*Dt
zzV4kK(Iuq>7DRfUwzt|A&40u{ejQZ87i!`RQIeJv?M94r`g~^&y-6<gKPb=f_yrl1
z((6DeJ*m|ZTl}=;QDo4ZcuLFdXAtT_aqas+DnXPh0ywXSFU;iEO#f1s=5cR0-tdw=
z9Z3Y`pRWeqCAIiVsld_7187{K7`3?PYEDc1#S{^%4qoUzQBII}tmo+_{I#q0$FFbU
zND&Fy@iR$puZ4REHw#aIFL23cIio#QJs(o+yx__+oOdgz3vq9hyfges9)df=V4I3q
z)wuQF+$L2n%~dt;eTEOa13O~8w5!^0Aezc1_2*MJGs}xHDcPF+Ycc-yrQFH$7J+MF
z$m9^|3q12`sqoG2LrOm(7X#V*fO~^wnfwOl`LxoSl;gw;^|rQd%{Hw4+*q2sRC#J_
zE6$CU1+nk{0j=0GsMmt?H&PFMet}qJe$IkICFaP=HP-82t|Co(aM^+MN31yS_G7;x
z#L!py<I^_1>X@Oq5RW@vm$!)3YT=~b;bPV1v+jQjRG3t{kN;pdW$%55rwR1mI~hLG
zQxk{K9^v7zdZdjpT4d#YS*ovOj)8en5L#LyVc<z;uItETjVjVgonSYrGImh22}EN=
zNOu1Gov%qG$`Ju!1Bt%7ncPf*>Fm<GQ@gf=OqtKv5hXmw+o%}?xeFpJm?)gE=cTC*
zX&*5@o+5av0WxjXNG(3)4|W6Vq)4{}QrHSZdh~?Z6mYjeD{<*X4<akEA&;2Vk-OZ&
z^xoygRcI`DPUR+UBjqjZRbu{^6W>n*T@4@Bb@>E#e4M5Zont{k!Oo4Vn&@)e%t@xM
z7+Fa<CX$1AXBrA4JZX@^2sXf?pdC9|xi$dm??v=RzX>U0fG#P^FtzA%`blBS-{qH_
zB{ocId`xyee-bgTd$8sS$as%sqHi)F9`qJ6=kdGw5;AHy8Z69_x!#(qk&>d-tQ-jB
z3viN4OYe27_`B>FrLlN`yB9_%73^3m)S_b$ItM~$2hyMSJF!LQwYyyIX^!vE3v5o5
zCUQ(Gs3GKZxZpE<?Ec6U^L@g?`h1n^)S*ImB0$F750Z|YN7;}$cXXU=FyvxF;XOAY
zGkCU%o|q$41>q3){m~Y<CC`F1wYaebQ}?d-S$ZU!ny9Nm1gi;5_d_)RPZ`j)B(8Z)
zSm!K^KBQoXl>Ua_q^n3}qB=3^4(ayFnn3DsKQ8C(SA@Wy&mp(z7N_ci=>L*ETTs7V
zYStV;e=r=R@U^kYeWV*8N5EmJ+e~>VaIf2bmY3=@s)cIZd)kz<k}s1G8-ru;g1l@_
zR)<O7%xwFe^smBR(E|*8y(RZ+?L@H^R%BKmci3}IoLI!K=YPeCy(*)IuQ-)s1Eja@
zii@buqV6HG#X`^R098JsK8x}Y+e-8g8Xu(_P7v47$<`G<>q>yJ1CYwG1Tq+_2i2Cz
zm*Nd=O>f->6<10f^P(7QIO*|S_Z$tv=IZBn5`?fhgWZ4y;|fCPlFzb;oZl)Pef5K!
z&0Me6-DfW#M(Z^s_%Zq6xlSx@_#5L%*0gDhHEce4yLD9Vlqi(j86POUpzK%EZliti
z8p0l15D5okt8><09;XlDM{i_E?S!=RoYK6Tp1J`sk<CDN?&j*i>Hcc(%6q0Yd7tEi
zGL^owdHi^MSQ)_I4yCV1wI6s`@EIcy>I?d#pAw@Z#s>6`w!G*Bu{(y6mKISx8J_xH
zE~6G{sbRq&?UA3!lrN!swMQqPrtz5<dD<~Z-o(pf42#3W-;3iuDQ`$Kk<op<`lG*M
zS|eA6o5WiD+6Z_t@4{qmjkd)o`Q~QlmC7{AurjM0N@^D|QSBt#zbb}{qejY3bgqAo
z3Y@b-0LCb!>nF8Q&H*isbbCJM5q-vh?7bZMbwm7(L9;j@)kzRjz%<9{-UpB4O)T!*
zzYW=)C_4Js*^|!A1MPnusaf!6QI4ENuD~l+xUO&(8Pw;HE73wZCF=P?!QOZ@`1Uu*
zM(}gD&Hh$k=zf>~ug&S;B$@z*QaGu7lDea8PRxAp)pMLL(K=t11T}sg$*|C?8GN{1
zw73zX6!N6|UbDhNk!0fjLMb02w?~9hNNcn<B++>!@7NtKMP1lacPx7<7q4aDpQzAq
zD3}D1Z-T~I+k1B3jvTy<<Ui#i1CU9z4o`4DgcWsi)`VM>qWHmYzK<e#lB<ig-QcIA
zJBY_)#T7?GU-#&^W4!I8ojNaG;}+6l;NzftZiTL8dBLioX~%O>p<L@1j=-0ReE}7Q
zY`2$fp^!Wb=-<r!{C1F>{vJaZ$Rz%@)Uv@tFj2sY=slKAj$V2{JV*q~BI4(1yI@26
zc-+S3TQ8bmp$%Yn<8|zd<Z-;Honl=L`<BnTJS2|zuTh#lFR4OvLGTN{<UH$NAKR6o
z@MeO`9-#KmWp}s*XcQ`x1hq>?AD5d}G3nj4M_#<&7_$fyzpqMsqz7B?gRlsg(HjuK
z<%gEFUz{v}pCOw^iGB+kjmm87M?caX?OmbaEvj_7`w&K`Q98uoK7vbm!QyQFxaueT
z6LupbLaSmasZeTA4gKd4Z#XiH4kL&?lz!|twz_1NR^&TCsI$b?jN65Qzdp3C5@vBC
zTa~x%D6dZ8b;Z-?;?2F=s22xAXi<I*Vb6&?hTQ(u0?>U87ccLYqR)dSvCG3K{2GzA
zIeWHcQ5F<Y+!?Tj+`92`s>h)W=9vyB_x?jHKy5Sj>A{1=#7|Cn>OE}DyKwnh5vapP
z^m4PI{LSr1)5gw+GWZAPfD(OTz~@vzs6Tez0lo^*i0kMFub9%Fy^gN4Br`{1CnE9(
zZf_Fm-qDARZXj8Bco!6@)99*pFfxA_pSQ59VG5zOHIt<-$iNw0OwijJRQ<0}NL&Lm
z_1#r;>eO05yuRms1(xH46P}}b>YpG<wNMEgzOB~azc1++PEe%!nGCi5etX0|6+X(3
zU0j#<KII@P<SM&EStrrB+RH-#Tp`Exzs9yxh*L;q!F3H;S`_N38nectREh1$%U2+H
z+#&LzuTUl~o_udMdX>=lkb_Ijj$ZD>(Y@RIX=UydY=28cHz1#WjA}t`^yAw#>o14c
zBShV~=DCCjy*|+V0NalKY71C26DZ6DAr{PYSb0+>=PSIF;_(Zx-i0zaFRVs=8sDEk
zyh}8kav)NfxEHpq8AiiVtRdKD{2iqXfLX0VtuQ@`NDgzi)Uq>j$w4TikI<BYMOEFQ
zXrBrp-*3PKbj&32-rFClTOR)!U(rMwm_PO5UEY1`EOU2<a-peasGsuH4l&o{y|;Sz
zJKy`V-3ILhvKR+yKA4Y(lofLgR;^#ePxM&EAMWW3%q1?oO$Re`8gX%-@=~#*s!8K2
z-LI6pmaf`S-9hxSBRY;(Qs-5eC2pU4rx7u;#@Ep3gJVRRJTH$$`h+eOI7V`^BKyvd
z)uL19gVDYO2pGeIt$jv4GnJtp$u1{${fj)oUqqJ?wd{D9>Kwk%NfF&5&hV&??D<*g
zZzTGo-y-^!uPpwk;I`^NFkkz3UyC5l#Nq{WU~#HNm`WCxZi%2=C_&;+XI%~6mzozC
zkQ$Dd=g-i+%9y|3Hl`m;A2Rx)QUE)^j3vFunBkm9H%lY*6935J$e`RYWwlReA|PRO
zxKU1+XOAQK*TvwakIjTHmT5xCS(j*pdc?Ef6VNg+?@p_yS+|n-vjC%6(xH?>*`&t?
zBfnAeliu=zcRag)ANhr^Si;=Ie&eRg>d5?Z;`s~6jp14V-z;!i2{?_NLcFwaeE$k;
zuL6?)p86Yh3dMwFd~ZMX%w+c6TE3YE;ze!q-r)T$*{|<Wq{*c=*W*k`eL@KXxZA7g
zT+l5ca}}$3ZN96nJsfy-2?RjBvZHID!`~QL>^xWr6ZpvqT?hrCGQ;mqzO(%0k*b`~
zE_H>52L!{<kDWN-biaP$c3FpGd58W-M^5e^EaVc<2G?BW`zVZCjp0{(AJX9t_iP?v
zg~3<Pu=t={=TtwWL_E`~wP#BKJJOC+WIS+3@4po~DdA-Bos?4l98to?`w0+DOxovq
z7-S8w>H6c9h(jrO1eQICf2hzAklUB}R)i#t{A7}d(()6t#g?8Pws!9Z)Zi(Ziq)yK
z6OoLU2{mHyOyRg``<~3zS~VB4zDa$noKay`au&*TTo`J0*?6J>dd(2=hb{h}ag9Mp
zL4;?NbrJ1oiC1FqM=(-C_<fx7A~bJ*ST}JMs9a@79BMx^qUkiA4C1xW<wiq(JROXm
zj1b_LByz7LDIK1}$|pNxRgml4L6mhQBVAQ`_JV-G-zx{Ol%(2CM#eK+zLal<`tYM-
zK&6tudo`%j@jfqb?<!+UQlbCRAce1`G;Y8t=27WjKk!8rhhJ_B(unG0qdtL#mOD=x
z><tT5C}RUVO6Z`(ubM>$_8d*g-^d1yH~U>=CqkYVfS}z&F$OJblzTE48THoU@s&}e
z9`o2)sZ4gt1Mupgj0K`14`7qfIRjN1t-+A8tLlXcsU|x8j^8FaXAQn@U;T!_V=_2;
ztfXR1$Jl3v-xIS&b-#|Au!-m*MG=;)*xWS=oo^!Y0>`P63EB^eY#_k{%pkZ#1j|R{
z6C;3V@@%H7P-=~THXmfG6R#K?JIIKBv?H#T(&Bsbp%N*$Cpr9W0v+KDngzv?avb}#
zA#cEsX?h4ZWf!rnNT(n2@aR;T*VpW=H&?rok6^1n{tjSIgm!mEl-i&CN46ubiuoG$
zUc_NV#JnS|(7!O1^IQ;VaI=Q`?EMR+`r3~O%aIv`bp{LsP=WD7rh@zwyF~<z;;=%b
zQ5?Ts_@8u8@jp3k9YEEQ##J~P61$XKI4cN#Ja&|9AILg7m-c6WI6N~*$JW7@oWS=1
zSy43JLj5`Gu>8l7c24K>oE0UIuRYQqZ37r9TGT!u1>=doT|_?xA#*yZW3F#LyEA@!
zo7>3ia0o5GDa$8eg{1BwchT%#meg{-l5-bdqVYG^3BZXTafabMC@kXAus9nqf>!{3
z4Bjii|18qy4Sq~OV>?=3AG6xZoYnQLd|w$g{418qJ;hc?$i!1-gE%umiPVBTs767L
zCPH>U3|AJ)ojp*rs7v-tAC6W5l``X^n{H`VtWo<2-^t-8a~u1LaUy$V@S{Q@)b1i3
zCtrwlPfWkzJ(*D87V!vS^uTM<VqeoNUG9l12$;ix%snT)Wljx24{UgDgFGl|yuG4C
zLiAd_;6<2%y71F==-r=wDko|-8aVhs+)^g_-5-Zi{EO&b@4s6KBpTZZ{8>%3Zc@%y
z1iUbB%Spq4qZID%7*WEUnVwm~`bS6iaG(HN=UTX(aI0SklewS00(l}wcb;A>(mgeJ
z2dm^ofvqE}W-LOXhRFzpBoCHd#K#ERS&#!F!f(WYk^_YYx*V_YYDhtQ+eh%@@hMoo
zF5-sKX3MIei4-vd_LVEOyH`H;1)Jcnl3>tEPs&<^5EnBwK1O!P!>yXRW^Yq~<GV%l
z;v$L^oXI$$3wQ7*qOXVPSbMEAo~zq^^u<^Bf-n^0a7-FEv)f=;A=PoheOjc_fA5)+
zaB}3VlotQRs5-JJe)20Pd2euh8!~j+yD_dFInZ|G8a|hfy9TRvz_)krA)P_KQ8|xb
z&@tHk@o7rnb-?fEIzQ-{L{bBQX~}~xiJ9EA)a$!M;;#tOPI~0qW^l#0&B+f(`}Uhm
z55Rk*;60!bV_uC@2`S(m8BxK>o91N7Z1`_v!kQM7SS{BP2O!^XO8UUF;^h<3*_kf=
z!vwj*kYGOsDO$C~o^(Nr_S0MCU<TT$%2bKdCau!A`eu4XJU-zeeHoUl18V{9ypT1N
zLauG-33Do->x5LYiS!$M))6$CIJhx5c7MNO;(LSD$(E}R+9zI5#veu4N+{E1Hh#T&
zSM<v*RV9wCrSJ$|m&oAGA}Eh0&(EtY%c${i%kR@+V-XULf7^h%V1G*t@b<LSRdvVV
zcTS?-or{n$RZY@=V%vY-wnUR_Y~-10w!jARcxorg7JCvsZvNui{8b-cY7RPnR#^cj
zM(4(9LaKVUe`Lad5@8>Mx4tAcUgNU<GnbRUw@r*Ntg+}KE~OvKC_jk5c=qsZyy`||
z7_uH^VIaO5L}DiWS=J<<Un0_Ti&o#L>?v=W?-6LBLY^fUiA0RAT|;C2Am}@W<_p4m
zI{HeOuID9LOKO(n@>kD*GbE1<HT5+TWzM_xr7d9JrAtI8EOclUMc1rCFzRWAvISrI
zT7RPqXgIsFem;EQ8~aHuodxOkK5+05v6#u=8|$YE3^6Bp03wn`90PULZdu$W;s*GH
z1mG<PEXWIS&?wwg<Z&$6AN9i>e#MFO5mcFQFQthO-_Ff5-7wtRrv?G()`W8q&^hLR
z1;WyYMY?(vEuW*Z$q8ZUx>?dplMln*7wSF1ra*XxM>3OSM@6zWWZ3Vsk`f;O4GsPK
zTSXP#;=?Dz0hN+}g>DzZo^&_U9kVSt+8FqNaEaITFujG}7~EV=bHFjkAo=Ifk1{xS
zSh@qA0|EbKipZ_j80Rt|x^=wFaqCG!Ux)l_`vf^;w*okBNV%WL<-e%QLz6Cp;3%*u
z=72Xb0)8Tgv&3?P5Y=<m^H}`+C6)hW|6T!I<l5_+nZ@B&>ycDpU5dzcIPtHjHOsGg
z`A>5-8*Xo3c6{-h;B3Lahtz*a`!eE9^~+@J{pk=WCjD}kXqy#=yqpX<+d0I1y%10A
z3m^q;nUnpSaIp~y`#yS7h^uAUfrz86te6j+9%z)rBMSJ7%|dwt<ccUF`U_P-B<@1A
zYt~OJYiZys40KK}pk4<)%KTH6dZ>o#^8UMTfm&rfdtiVa{0mk2&)Q<ACvOHtJp~5?
zP8P*d;M2<0b*e|~0ADdAczX>-!&~OFG@k{!s9}2v;mv~bXyw?Jw)t(R_)4GV?8T2v
zSIr+|kP-0hhg^qJzI-7$<C`VnK=?V#2V75dO_vtQ6NW@?QZ_%CZ6t*&EvUeb34|-I
zlF8vtcq4LT5Mh0UyB>fFS8LLVPLw7>8vY%~!My8%dB3txHBt|kz(pnV+VO+=V3R$+
z)Uxc0?_oiP)GLWiLPEltV8kDx_q+YMZu2@3WCXehmenV-nk8nulY{HXO1<LH{Rgn}
z8v_|?QCWv?%K`~JTwt^tx6oqksj7{o^Ye#=AwmpB$j}x!xvqfFAkEbH@#*kBdZ1h&
zPHDV;A8g)!`;+t)r&nMxCeR{kMk>OA6z8~E&*LqE4DLGYyQ%ECBL_bdGYn~|2nRVb
ziG65#i?^YaK{C0lA@5edo(+Zz^8?jI9@QNvwR9>^W)r_8wc~EHLwT`<c99mE>4p9l
z%2!y9(M-K6e{=Z6)Ko#vHGG@#frHOHX^?n-6qu8US`VUH5QnFDMjdn{@>ukOu-vih
zD*otNqtSZl=QA%Q?WZYr1c#ko!GGUDbErlrc`~0$+0OhM^ODkla4eJ*u<S+Ltuv@6
zWP{mPH!FxHZ^||9V{E2me=a-9q>^-YjO=X<G@d*HFhmDY7?;|c*&XQ{i-Yni*F(Gr
zTOXh`+FPEe?FkC>NBb-B`okX3CyWwk+C*O!M6O*kkCaSbxFvRfUQ0dcVEKi`C%X>D
z6C4oJ@1fsbi%=RUQ*1hf^-BTEHahh;9AO%Oh2tyow;94&QKVGs>(S~fpI%-gebsOZ
zbh*raZ)oI^uaAxs)}aJA<&Q_@=g5JM6p&=iYkv{3r(Dp%45xju-u3Y{i@php96-#S
ziHDsTpUA~R5(@U^-URde0^jma&mnKKuTN>A4ebz<7S)0V#v=J_R@e_xX1$x22umVx
zx!EZG`hT^Je-L5u><OJBe3=Z(F}Sr00idc>Q0&jub@qg94nQFKl=MiGuAJmj>3#j~
zw**5WgOC$R(4xh)Fb<^*(=G13ufA|YzYN@zyTlc()A@yof(k(CbBb$0;mZ>;Uw6OH
zMO+B&G(6ZFvfyn8|IHk9Gjke%XX+e~dj%vq*>KXDen0mLZwo>Pi%ZGxwC0p3i9EvB
z<Bc*o7QF2vft(2FO9C|lVV^VrQ<XxUKMhhG>oZ~$l+Pq2alIXg*nNo@(gbq)zC1ld
z2&drCfcGgz@!&yAgnUM~>KkFMrYCm#A%pej!m43)45DBRlkV?Q8+N!R|A%iAZS%BE
z$DfTY8Kdz%dvekcu$%CJgJ>d^BrWK?b~o$s%WeHc5b0jkq~B|jCF|3ym5)_Fpjm*e
zk*@tjxA7bm_YLUzjNybmFP^?8MtC>N0yDDbO0eg)sQSFb8zohe%N-*Zu(0o+iT`q_
z<&{u8;WKL(d}68WLHLLpJVUQ1p8^}k6^nWnZbJ*);?XbH@n?wQa2V}mmAsgde0I;7
zUFLED;QIRVEOJE={hh8a5k!!em1<vCu+oV;ZN!<LT8gcfauzxR-Zbl(CR=~dc{*C-
z?VW5l8)7ABWdAL54~fGc^r-vpJtKvCdlqO@@T3W~TCn?zMCN!FCAiVO*WvH@^g1OO
z_9$JAZnIp9T%o8Zs98$l?&H&G>B135e?GU}Z)uPOi62N&yZX#8A55}0?QOir;`bZH
zY;Th55k4X!srpwAw}@gcJ)L67ocqI#<N)E)tmotOw%%ve^>$bI@D-SyNhw6NGNF=b
z*FW4fi@c`C`|e5saIYYj@dU&ykMQ&XM96ehd_Zc8c%F=Op#-2GtRs?5skN&`6H&gn
z6KD9Ql$%ZlgzgEMO3RQ^{;v%CyDo3{S3Hlb^TKUnB&YA*+t9^I2p{=KKa^~rUfI6;
zCQ_E|1l-;f8MpXj9w{!D|7*&Jvlp5vCbkx}ynzdQQz(nOYd{b7Vz_lH(6nhaN6-8u
z!Lj$FLA;#WtnlJ+B=CA`9nOauMx2Dp+zJFY*3VBBaiu#xQHh~gDe2vQ*&W@o&_cW1
zxejs5TbcPL^-N#vG3=l}P?aF6L<rb)3aBhNNC9&IV$NjzKgs~MlCS<dZ>=;ZV1z>f
zV9Rl0Q@*V@uF_-gz2b=QDHK1M4B}4{N43_|owk`ENW|l&wbzsEyLrhPd&Eqg=<(>L
z-~X0OgDe>jOfLfamh5(O%s=c&3<<qL0_8IxCdIAP(B=P`&nDJeeJV~}3LdpD>4ymD
zjy=Jgb5;3QKBobJ59~i*#|bI?CZS8jGo=zy^DnIJ?RGoKG1|<&93nM+2yB`d0W1Tt
z^6wO>rHC_Bduq114V1|EPCq|dV&lmlb@o+h6svZtMs6ay3yhrPtS?yboGY3yrIh12
zbo?iT_nlL2M9Wj95$pLlXd-N2|7*-p2VY>}S?IU@8-Z~Kk<qV`t$pfOLew(2E-yGo
z-Vr4&sLv<#1~3^n@`&qE8svc#8r{cVjY&q65<Vu5OkvUDQy=C+lGue=zwk#+$&XEJ
zNz`usq3S&Kw;W^lO$tH?7A)J^o$pzuPLY?jS`N(OiU{8j!|gD&OjRY6R<dd)G3#_6
zp6AsIV#<YUNh(Fbv4(G>$%f)v)171X4<?*wZt(R~ih!@_1N`&6MCEzXECo?$h|N(k
z8kmL2;`HD-)_K3~m#k10yaOMI--O9u4q`yh{M{tQ>UncQ-sA&aug~5M$(Xc^H5z(+
zcRO6Kdx#}KBi(53y}_5l0AdDRHbqo=syCVY)9WW^54b=?RfD#jyQmmS>(eV}Q-}u@
zAbz3NFLrvE@Vad{Jp%AFpxvQbFkp!cyX*Yjl=pSsyH=Y*&?m?ZR-@^48Yhvg2=%O0
z%f7r3%MG~NlC`n|dL2<dyPdZM2$qGiAP!l(9yLl9cLK$D)+aaisR9A~!)E+T8q5Ae
zhe&})K2AnFjTJ)$k8pyA=qBF1=rtW3%gxrY|NFYM^&z-=S-AF6^X0)5(YRPCAc;qo
zG+K=F7mUv83oanal{0@#RCtc`U=5kqje@F#=H+*0J-5#h))U8p<V%2oOBGQ;_<YGW
zA1IzZk0J)blOg2oKp)A6{=tG_$EI5LWPC5o6bp>G0YDR{khHH&SEJ@>LW3Zv6l8E@
zsGo`=%T>@pazw4A_}!@^Q!#_)hY1Q{F=>biw6Q!PTN(1>Txn^F``rvgs{7Pw5~f?<
z^;u1gk0`LP`~zhU6^RjIH<nQjEJaJ6hWQ-T<;-8dtOEdnKnf&Spu-xRdHR^~e{KTe
z72^wO!2(&OpO{$*C!b9?yvROEk9BpbdVAucnZrNk4Zv0*S|KrvS)p3Uhb#QQN8dvS
zn~G^vN%@cf3{>z87tlYuawopWj#}U*Ay0tu#x7XU9A91J$Va6X`s=A2k!49j{phpF
zc1nmo^sjjiRt=%7I578F<JopI*e<eAo<bH}{|bN*MEl9We!+sNBnH?pFL1qM#hpt{
z^@lC4@<JMxGGXVUb4$ly)32}lc^68uU`Z)0$<`e7O(I+9KNtp$xvKE&9O3qH7_-<8
z3qAI|#QlR@2*}C&+1iSgg^%9r<U8Y82!;_auGCY)t{DpVVi;{2fWoky=1QI}?NoSb
z*yecp_ZXcSIb;0W{`1IMsOew+A8X$oPj&zQ9Z@1tR@ozzS@tGE5i*ZW$(|+i*d<qG
zmCWqDNA{L3l<alvk&r!(<Jj)^2dC?M-@p5DKYqWi`;X+*IiK?$uRWeGunGWTSo}u0
z3_w8w5}{j*I*E4yXg?rF{ZQ6-U*ZkkG5%WQ!oR)bF8Wd-5Kl<$R1Obd5G~GNe+IEj
z>WijZQuI@RMo8>h9-NTk52h|t_b3)SL&}7kfdH?H9>2sJB-qNXUiq75=w#=>C@S$T
z$Vm4<s+Qab0eYQI>>*wCNz}y<%Lhrc0~do&TbFM^TJ#+0JJLWX-+dg(#s-O3f1kon
zH!xIvQdN!fl-}6e*Gn=Ow!PE2oPc)?q~xVS9+2^68nb@+#7J|pv|LsoIo$af7;*H$
zlHD$yTpC`!)QC&9)o_{S=dllC;0~32BSOSezS+vP2nS=GTn7E*N2%iV<q~6b^S!qq
z7$~T2#sqqNU_IeoKa&p*K#$KcM+14p0lD7mQVlWS??N+!zwohgAS-f#j8Wob5kP(d
zMwD2;4NCtGG3^ZeU>1e(WnZpq-!1?4G~m2Kcp@R_jq3m<Bds62+5)KDHU;jNA?zw2
zA7N}xmgjx3af|H`lzCyLRB=GImHXbhK&Ri@3F{OFGz8V#Wl#Om()F~c7BvQSA1QWs
zEz5x40U_C(MB-Eu_oh@Sy{D)aapmsf32A`SzQieJ$utSIkZm7_dylEQp$brSp`Gnt
z7qP1GpNo^`U!W)-=J)s^2jb|#*IF$!l2)33$}pZB)gTmSHDHsCO^1di)i(Y-_VJ9J
zPOI4nwTQyDiEkMuKK-T;({Gu)?)IMk<Sw<YfZ^Z-Rzm6FpUB(ti3sA0)GR=%bQ;G{
z8793-w!B(Vb05Ot1D5|oC{cV2)VBh1mwr%tod*C=^23C80W*GwPJM%!Q3}WAW`ktl
z@FyD_+t4#d^i~gV-#;E*15&B60k%2<eggNvg6}k42dInSb9w|_#-9gfm|Ow&WUjH)
z<@?92d!W?F=%~cN-bg3c6cIcqa2{K}VFeV>LP%c#jS#r4E6{yIxL=rG=>8vpYa#u_
zxv6eS_>^@3JHYM#O!4b|QLNl3f`6N;7|OFlvi~lG!+zFR$^zJ}0nKp+C-?f-eE_Va
z41kqrq=4dn;%i2v*}u6p{i23_<kVmTsWbNS{47L>3IFm27r=M}aTo3k_`_8)8seV@
zn7kLxA%r0tf8jqOE9sEoSMugP(eDL7?mj3*#8FF}2$?4HIz&p@eI5p1d*>9RiG<~p
zJAUgmP>zBuG*M7WKK>5@5{o@Mn9@jDtC=bZ7XbOT*cs%F88s{MBq1a)M__6J=%1Z%
z#>Fe!35OY2@+?+=b5jwvzR@5qgy=QbfG!!h)<8kV13eK7bL6>{2Y!)W>|6ne+K_dv
z<p^rLod8aT%THm)S+%0aO*T=u3?~}&9|`U72?IH-%tG%1$<vck4XTqY(XlZ2-Aups
zpV<N^lw^<|VEJP<&3EE28qk+3wa2<(Y4euh5{%ySWbwJIw^lOH{nMNB0|bG8LFJ##
z$K{{Lj}5$hQYO*@5FkMWIReUrnJUT{;|;0-S-`+Ck|1brHJ5K7;<oX!BThVnL#H@X
zs&2p4s4x)>{iQH@a&7ehUEHh`W3m78HA9<U-YJtqz*NV_(?IH5)MB1J7fp7IFQu(a
zFSh5n5Svl?yH@9SC#r7)um>;Ya_5{{7~H;I$XAw-*<DJ#Nbdv6cigos(?18fPhnhH
za<Zr$q*|%)?at)x%jBR)>(>WBt>cLPlOipMT3<ov;$4mJBTRu&{wP|F7!SJ{LQKX<
zs{vS1<DTZp=?|il365IE;~IuEj=ZV8^;&pd-R2D}3M%4$muE9{;ih6Lakzl2<s*xC
zWk&DtZ&trgyMFT%>8DiUp*Ks_MeW)xfuGmBW2aYRZjZ#>b`eE8(S^`PJJ!$b9eBh~
zOrwSB=SR`vZahQy@$+MP1zU9V-rh&oS4r|G{gh0O^MY6*Wc2!<P0E8CFRuytz7DAG
zMF!NNDynW?#d4vzs=j|&Ts612I`Y2f2~oS&o<V;x^uBOrk{)X%fClG#$;rP9-80^f
z?WW{IJDzXvD8X|rXb4!|{T05|3Fkf&cY3A_*u^2-YKYot@l@T`yA6&wbvL>-Yu`9;
z#QI_89dMIPR$ky9a~*cBIMb;l6dMH$YXz)Eve=sCckkXU4AoYHK7_E@*1Ed77*TIu
zP%j%}kt_O&9Y6zWac@@c(A}o<C=8>un2>0vh3eA5;y`Q&59UyE3(4doCG9)ZLY}=?
zcOenzB$f+pcyL`Ja=Y;R#kY@L74Uu`U7x*2@&vr~<rf?zmuy9q>yP)RbvdfUH6}i8
zy-ssDi3mrZ>sJ2AqI<HNOC;hBMj09>G;pidFU}jJI4upE?kO9CtW7H0n&OTFKbNbZ
z!pS+&PadCw2BKC>eu-g3Hky{c!I6Zv@cxItd;;)^^Fg&&^|P5bx)UR6RDw45N~|m_
zGFLKnH8WJ=da^Zh-q)1xqcwT_$n9!IZ|hG1gotdlBEP)mwL35Ryrn8goODjDsGnfd
zldV8<n-g#Z?W)^4Uvk;{lpEkPgF_y%Sdfn8#EGCFJk7~Cft$>$`?5L50e*>NZWlSd
zQaR(5VO)2ICHCOxSe?sjjJ`v)lHF%rO1F}OEsr6xA=I^fC+FgG%hz%=pSI+66C2P^
zGWzz1PpA^svvKLhnPM!~6l^iUcdEi2GW12@UL9n?wJ<@~lDfj_7(ykgRX{{(A!>!g
z;vonxTd7(!i%Gq#)>Yn#)Gd3SWjk8jDV~8IKT23O2b54@$#EPBm|Vwx$?m#O-UI4$
zZWhk$doNTY)$=Mz=ii~!`LOdzGb4E)GJUU2&E8?F`gC#NB&~GDcZ7J-Yg=GVsDBZ+
zf^KV9@ytmf7{P_yp&~<-Ah_m;3euN{z?MBv=zgM~_ah|_vx*fiqwn|GKV3Xk0Z+;r
zR-(?jTdxXvdV9gmRN6fNoN?m)72+T+bav~{3#A?fd?((!k0!3GU1PSWqEQDiAZ+s+
z#UPXqE;-eD5&*cdsk3QxcXyYOc^^5JvS~foee~`t39Ckq8R5uaXecp2@M(88w3@;P
zAOXFl)`$SgDZ*yS^18q?0aV<Ql9Dsu!dSmuO&LGf+nR6qe74F#LbvG+nfmLlhq&j?
zu~1TxkfeYSo%6rmF<EujL@$do5htrmP_!iwP;lh}l)CFWOklPm81LP;o+3}CmYWGy
zRDg|(f4!Q?yfa?Y#wK^i5OkoE5)&taPgopOIf=Mz<t|J(hCq`?Q^%fMI~MUOSAh5k
zbAGFPxiF%k`z<S<MduAq$CcUIno^NeDjXi8$;<T$yNR0wZ0~a(&Z=}^3V0?pAYyB6
ze@uS))=GdR$AO<;C0*Iq;GWZDM~`n<z~+91!@(zWCTd^?W=Jje^z-jVKVrMA(bmCx
z^&|xk1{AV6ENommu%B@CBrk0?P)y~*8C3?f(ZA_Dh-6y|+m7}uXaC@LtZ;zVSHg<_
zcn=C4UcU@3gbTE<J4BqB!dHF|kVZ>a?0bjHhCOXZtXlglZ|0Bh4Vm*>&z6^=5eKz*
z(i$7v64dcw6{Hjyp_7eej_%?p(6C4qVG%^a8k_?Po6Ahjp1aiJv*s|;2`ez{j}?~u
z^#VQKdw8%H)`zH*Iqy$InF<=kqgM}r-a>s_3sKV?t(c)B<2D=>nC;6_r`(^V+I4OY
zybk*RRAr`{RUT^3_q-m5m*~Mb^$Q!s%mU{REr@D2)FeluUWc*dc(w#94=Y6+=MvVg
z11TwHS)NG-S}F8<`D=^kcn?<pezwRjFOT=+Q-igCjD^FzL~C;Dlt*+8X)h*@6^4^P
zK@>7@q|D*i^M>Pv&m2AwdzEl`XiO^*hpEgCs9{YMjpV~=M4O`Zja8;e6n1Byr&NMC
z>d_~oA3sn+XO7=UKlvG(Zi%XZp@rPd;rxeSA4eR+3%Q{EFkXG!rZTRWKIi0ZK0aR{
zmYDjR!<YeFMPZj&4?Z?6y;Ox?n819>BN_h97eqEWp5nGu!=o-nZ*sVGK4}-%C)mP|
zb|gGC(iF&$a~~SXe*ECdws0t1riM3??FJBOY&ZCpIgYy{2|Xp;pU1G}XcegX<CFE!
z<P%d-<tWpLSS%0ssau$P9o5G0TifL@J*tp?)}(Z}!7koa=NaR~dt%S;;o!m6>clfl
za7I;)H>PwJJbzKSa0JDGbdzrpbJfCna@=S#`I{4;_Ka^E#iW-IQYpGy7kiXQ&suW+
zBt7W+0Y~C+-H~wr=JMQa;=2ucxUb4qb0SB?=kk_&p^3rZTq7u=T(?EVy?@O{cIebS
zqP$BVhn@1)rCYtJDiz7`>O^1q_+;RDxc!8S!*9(;lEM`Z`d$NF1`e;gu?<w6l|$Mh
z)%r(x<gR5a%xFk!&$dYcpz`p`<cPBAKLT(=R{hETc`QaoMxeb<*Vo^V58XmXcKPxn
zc){~%9^GoYS}-;|2bX~S#_ql_ATavwJ$|bJ9`D1+FGQM&QdmtbEsNh+X$3ng*YODn
zA=HoO+g%K{<26IhV%M+VT@<v@P^P0pYU@tn8+q}|qRXu#8B~-(+#G}x$^cIdj2l(S
zG=$+q$Q@*jS4;N#<~)tp5GZ8?D4*|jJo(Dn2&^a{B9azw37^W<3PYfK5vy2a6$!w|
zSSe@KIE}}q;LaYFN~x&0%cw>^rl}=GGELsb#u9e4mM%a$9U0__r<>s)7q9>)DDc9*
z>pskBNL0Xt)sY;VoGdf`i_vO?yEG^Ef?kQt@bUV<`>23M`dsQGr3R>QG8^0}>;gE?
z>pLqUV#xr5Z&-_W@~od9Pf1luBiZ=1jR?6QYRjDY5uM_`njKW3e-5l*A>JKT0(!?s
z_NdDDQ+_nP{U}K%>ij^HO{=h$Lc$_+mk3X#Z=#~e1ht#!TV@hhEtdN(Mee3~N9=4-
zcZ!_lSG^aut3(ICm{9H;H<5Ec!S}eWdiG}<D7qncv%xrGHtj;=S7O4)fzgIxpzXBb
z-t(8RR7eIX;16G*1N&X(?8jligz0-LWp?5D7JGrq7xx^El`GNw%t#EoeIx)3Jxg`h
zO_}W151667qvVo?BZP+xxn~AAWpv|Nk*xJuO?zb(iue0`eZJ$w1ZehVgw*HYH?>yf
zo+Ce1oLF=C`(EyG5)wi(1SXe+Tpnr3G!WvtlV@fhGSjIKi6z--(=cPC3KLG?9LxBq
zs9bT!vcun-ZLfXgFRYEel((g5Vl)<p?75OOnql$830Qtf9{JP#mz)~(wah|n`cpv&
zquxR8y29{cn;rZy)x4PHIRIsCu@WLV?B!K7p@`3JFuXq$@8B;-xL^&s?aGh{`_a^{
zu8;K>--Lv~YDHYEJ6FbLqarw0`vaqS+a)I`^KZ>%R90m?`m)(``(zFT0Wdw*8kI6k
zam1u1zZ{Tk4s?H<vZj5=!^{|(g}q8{nTM5x__BG5TH@n_hHODkxN^&DU^C2O1OS$d
zal;3O-RC<fb4FK&$slZQ!Ik7B@c>to#m&>;FM{B%p-39{rOvLs7H_0G!I>J^WbNeM
z=HqX)t<n4eXvVHn+Bf6?R-j?cPKh1<+9(bM09~%o^>M&uU2e#m!Vd_cRnOP2JfTH$
zE^XsiS4Um_U%ve1?{&~u@suPS%#;TJk@t(nOB%@-nV2+_Y_5&$^jr5q*xw(Y)cKzM
zf|`yMo_%W4Ub;B&(Oday{^a6f&OyK>^RK~SCmx;(__oy%M-jOOb)4CF?d*7X-NV3q
zH-&F~uN!O$etv&1YZT$7j6Tm_y<8b}Og!L+m>yu*&T+}?&M2SyPZrYGRswj_TXarT
zhqk)$?i(HV$F0Pmk*z<5u!ju$8{W^aF-j!xnzZ~Nk!egE*pTbi-Zo>c*QE9G+xlNK
zS4viuu(5PLSwGJ*T+rS&w72?bh%qCtLCpGTO%5xbX{*^F!yIQ+{rHp=(ekw2$+Cj=
z(azroY<U_9cs8DCR7gK~5GdlZlnHF7>o?hN-MD89+HZ-R=97m@R~4?5glbhZf*!g4
z%sU6q%i&@?3ZMy_NuOctS?san;2;AYosSC)1asf9+k2?-y4Sn2qXI5mVZ+2<NqzHo
z*yr23GDssbo}{<6K=mb%w=uZ`bOHR3w#WAX{4!$SbOH*FQ=??O_<5Of6D6u!VV+W6
z3Q&M=bY(vv^xXbstjVQ1PEZYq@x(^Cr)+G!$rU8VXQ19;gM|k|HqX~M^RSrV*{_Vq
zzM~ahoPL#Y0<fe9=l;H7jR#nZf9o9=ap4=tlo|fE1~ckUy-#AB!+BsEovm3ApVUu7
zmTyc-0<<B;?pAl~P_cS$o@UMfrQp-#joEf<sxWXCbl&?(&bF(HF7<ntXw~XGcJN^L
z%Bfk8H#SO4ukULOf<9t*Cf~m3-RyZsCzhmPb(dZSJAr&Tb57xTXIEwHiMWO$rjuTS
zyYQuDnrD(r%dj&CCkhQXNbm_l#0UZF5LDOhn%JP12cHiLFhn)9-h^6yA<at7=`f>P
z(@eW7R{*w^k`+DSk1ZoJJpU~@4veUqMWVSl0@6<Dp`jfIsKa)Fm(O?%eCAkq;yzrs
zEHx<rxVu703a&!O|M=y&8~iWZZ2-{QUx}2t8Gks|79DfTD|Y#S=+z~lEKA!HXs+cu
znA~CFc+}nKA0v5W&Z$?$cR#Mw3NesuL@^SaL6*M;u!iR2-JNWwWn^SDGYo4rc0QT5
zXNSD<&W)9jc*#BpPr7|v4Nd<VoWDLPAcLFOIV$#Dlb$3cJS!C$A0EWvrQYo7$|xMa
z09SA#=)330arV?AZK#I)kd=dSD>SeooXqD>p>SF*aE#UHbE|m5Mv@t+%kg-bCZG7S
zVKGo1{sQQwc|~EzrD?~u$QqyTM6#CkVA8xU`S*jujAa^BI!D*%@{)M&0a^4m;&e&`
zIN*Dl;Fv0;a&G`>qcy7OF5N&0)QXTL-O*5ujuNHdr#!84JA-z;!dp%K)sh>3k#kn<
z9M&J%!W<k5g(cD){1u-*#lOI1^AR}(U{Q9F+*k6R{`mW;CY#Z?bFTNcls^%5RJJs5
z9RM_4Ze6Ej1{mW#GU()O|1hiY7IF@VC&+U9b%d}FTpgWx6m(5=!0tf4+Nr-0m!NGO
zIQ7HczY53ZcuvZZt06JHa*zSX5mTbyT96GAS}T1;t@qP1O`RM2KF;_ByEF=gEsd32
ziC?GM4orRmqS}Un<b~MXh6=hB*ryB+aJr#1DW_rhQF(e6E-iacWRhI&c8BMi<SRHl
zH@XVCW!y6s>1R5k*<bKFU{XV_9~;&y?s>XB4;~kZ+29=*H<PZ9XTQal8W+zoe7|l8
z>261&aok4?SYH_mTx2{ej(UOX8a(*9;Q?f!F-ui6+O7|Ie_H?CVWr8&&iKPDW?@NK
zGFx>zHERh#hiImpL)nH!0{Lx?$SXgHRjcs3O<&@ATknjt@x#!=ks@^<*Nft+O?z4R
zZJ#-|Q%&K^`ADyaGL}6Zqw~~YlJktn{M;!YGN5N)_efO0Y*fg}EA#CR5-5#=O}fN8
z1+@{s_N%QCJ@I4Jwk=m)@m{B{u$Yqe55J^d`AkrT9uHP{q-z37E<iZsF;L4DjKC-$
z!Hr1J&2d4i3}jb?#cNCO!z-oECN#S9Zr%ogjPgjuuG6YUyeAqydsBg}Pvb%3ndH)?
zYAM1K*`zIFe7I}0Ib1GN%DIrqPnk?ma3z!U;axg0v3s^wrEA%BmM2y6SU5Z?4cp@D
zgG|Nzth=+0EzyFaybP1tzL)CK`ZKgC_}2<%2K}QT3~-3jIoJW+MvUneSOD{)=J7|%
zD_9{E!2Nu!xBZ2v81=ls@U_<d5|X>GN{Nc>#zQGszJ9lTJ!il5)YNdjcfIYXp3Jz`
z1cgz_L9A|t^jkBfQUE42qRn(B$ul6h6*R*KcD+)j5xueTvz^Fd3=eio`B&Ep)<NB~
zwB=E<oWq9z^TSp$faq%CeUj!8uXurJs#2@5;eBBdk>QKZ73)=dD<UzxF8R-9+bl%|
z+%~Qgy3UY|bk2N-b#31dv$6jB@4tT`yAv#bou~VXK)@uq^-}>DP}KAVn8OeMRyA;T
zK25*{DI9#&a|zq<x^Zf!mzP78p`^&f+p2U;6$;n-ub%F8cU@*?N8H3c*|UyA>}Rkd
zAq#JVGtuWFxP@3OKIN0*vNOIKxQ~B4My<Gf;omR6c8>wr%m*Kx`#&1&vb%KX)2j3O
zpXB*`eBk){e}(iTE<5(EuAx_S=rtKa0~@+Ro!viKu<n?3zQx48=^gZd)%;Y?BX)@q
zXkv%UV&6eoNfltzdxAsDaiO=a(@#C{y>sWaG?85mqT)VDdn~FJc)Vs*@wyd_@?T!X
zOyOKGl6&a8&Vx;C=gE8#7PX5)xX(9HTp`Q?p*%K??9|d67%RTVt=Z8slMH}FZ$f4N
zlKr~=m#fora~Z31ZK{>eX2|I13ifo%dv=``ujD;?$?>ywCIt*PU=<m!{QiZK*E!cM
z(7}JCdPN9=ELt-IbY0_yo~JntR!Im8DLE#iwNn_X3R9)dPw==`-W41Rua9BgOSyTf
zgB{|41Cn2CZn_7AbJ@h3cPDgBA9~xD>}Ws9#mqZ7{Ct_I4R(ig!v$<YMXjF6^F~@J
zq6?yr_#=*GGWcPCWzb>8NJ(tt1xwt}PbJ&loPY~rKVUj4uS#HNk78)Ggl8}pP)z`I
zUG*w4>Kf#gI01PQ&jPu`E*xAd$-A|KD#d1AA7@*g76<wxjg(Z4lcZlar<3Ocq(`?g
z)vU*#?%;ppjJl=&d3$Z%oJoEmt~?-BXQXYl9#(ADP7<^?vA4PyHbuuQ>@u`LR+Tc0
zA{tzps5eqUxl2PqMyH_o5b<=P0MArv;b&3P;5Ho<uO6E-p?;7;qXgj>GT(xb{ltt*
z%Ebzzn~xZLFECf-$ae>mFZ`v2QDijWtejg6l2~MbRhWMkbCl@~U)`oR7l@c*p@}cX
zkqv9X2b(_*ItRfFywhX#k&?qrr#ra+<&tN?@;U{N2<{w1=sfn!r#W@k?%)OT4WCap
z6w^C9Ut-?hKnNLvx(+ai3K4NhTtKxc0dtK)pRPGT%v-1Ao=N?-evVe2g4!M6{BADz
zIF#D;vJ5R;dBuK}0f){zW?M2={_fphX<pn`^FNwicNAz=m&pNSffd{FQS!Q5Yo&-y
zt0Sz}&72_qK++t781Byrd&ws@TAH(qg5Ni7jZjh>0YIsw5{dP7akrVe;q?H=2?S_|
zgP~y}04lrp=WCL-LjRWqEbTG#b$i1LMJ;qH&-d5k#rf=4^pV;?zLx<V=ofbyhF2j4
zf{er^C<c`1GW#-7F!9Z<x$OS>sSrx+P$_kk_-esm=@A(yfZx!)fw8}9pp#x5G*_8_
zzxPOG=;p#{r=~kLJY*TsC7fWnVMLINpr&z)Z6I+eRdo%h!zZ|esu%{r{gdkvQ#W>L
z^J*6oFj}QET8JimSek}o$UXW%{7s3v#meJ|g|}vy>-B^}51!~|D)#Bh3-+T<?s5$x
zz<8)|<u-Zz`1#MTkDBfpJ^b7t1sszbdSy1zYT>uh0Fo47u9N%w``-kzcs>TPeQN<4
zjIq*oZRb1=m}9{Rq%J(hF;>D;S3a2fHi8oX8v}gK$REOTL2?Zco}Nb4^XLbQ;_Zwl
z;rvN{DC*m;)q4Zmka=xxzMg+!?LqtN@nucV-ds4|^EQ~A=UZo0@uQd(Rbowy6O6cU
z75ycFCOV6*1NgsAA6L&2g1^swlsc^nqBq9p7%F)n<Gru{oybNO2P=bs?^0gwnzLu$
zen+#i(MQ}<i}MU{`j(@WV!Uj8o8t_L@UWFBenl0;#$TFGWWil^-W}#R3H$<I;Oa3e
zPbxqpnkHclvJYk;!Vs$Sz76B}*xdv?u4hL8&BO-D2#LCTbTlzpL6MziJ%JBiNVQ`3
zJN|?n{V>=xp3*uVPk&7Qb_@*%g?ctG5Tu_E3K2H^K_^0F@+o#$<b&P-#}<o;9d%lm
zC@wr+D$4_xf6aGp^DfdZ9wtVHi7PSV&dPHkKBOQ~>YKERTk`5F%ny02?FiWhRL8)@
zcjQ`nKT3jYs_>uko3Sj|MB$J8Dti?%!Kpg9j43Fq^a66V$G-X6>3b&cKo`?xrpktm
z_vGH><9%6An)Q@j+CwgxImav5TX-H?OAO+=B`=<tql(OhPQjOen9P8jYd)(2!@u?(
z6^whuoOE|IFyR2@#lJDPPPvcN4#|vU6jz_DE$hs-AIS)BVJ$Zokm|>*PRCaf#=Tf=
zLa^D??Y6sjCCMaW%z{F2OUr@XiEC8N6#25M;>rnD9VDBt0AY&*d&vv=4%b>CtjP|D
z_o9b$Pbv(7F$WnH^FN`x<hmksjUuan(W{55WwtsKJEAnXVNZ5Ny_0d7>?etF)7G!k
zx-}e*>)>Ae1$u*Yr@RJ(1YW3N7>CQ3N%b;it?~O;M*?5+*Dp#p(E7qYI%_5fsAOA6
zU53BnJ?$$1u4XhaIm32m2eJL-+rpo>n>rO1mL4-C5xG@XYn^Fc|J5-JQO`gdc&4{N
zPPjh$QqSfrlvFtj><5Q4Z0Z=rvIk`wB;a?Lflos1dzOO8dZF9R9X<GXj^is^1gR@;
zg}*zgn-udiveGBse3<<YkO>jPwbetOO4^LkI4hfv5{b4%Yhw2E6kC*O%c3orn|~KQ
z6s-3$nv=T=9e*CBpTnxba=mS%wuk;Spr@^PEL}v4^hs1Wx>vTZTJy^bDwE(5S*0rb
z>t$Qjy;0T+^FMtq2&jS_$?LX<Pc8x3P6=)*hk!WW7)6sVc_OQ7^nrxuu0LZzhs8|}
zg}{14+F74`ep}!hSYo%&Qv!F;^PlC4f7dH~TDu6&lL{mm#?08ovWZs$#I34tV9d@X
z;z2Lh$mRnP|4>}f+^f&j8}Kw;t4viiZ!`-cpBZ3|*qng+wP>~*tCq#WI<v0#&IfZr
z8I&@K>&-%65eloMn4MLJ;TR5#+lwb84csg0B&!2qH@n7N_=5ldIAH)q5pYhGA*k(}
z!jBj?i~;dCQJhOgV#)TwTo7fA+>T)wXIt}nx3}rwU`_U&>_^@nb&DpZ7651S7>E_<
zWO6d#S|?L|{AT-9GWJ{IgOheUPzA_ZIQL6JNuNjQi}%MV=Tg;BFr$6ABq!cx+#v1k
zhi3`NnV{$M<fy;m_+~0*l+r(|Oi$3xHZ8gweTzw5TXk~BryBJzDI!}vv5IUY<u|s#
zW8W7PAr>s1m*MMV#zu=`f{zkNQh=WTNq=o~?s?2}-(LnXg6|M!Lj@PH+x!PFp~D=&
z|Cg@d*kC7+!SB%!Oyo4g9%lab)c{_H*I>`c$En#0x{g~ktQevVz^4}V)K~Y~)3V<e
z8;}uAw2{ZFL2T)uY<3I%4hTdayU(5|I>5}Ma+A^?x#aQs`K!u@=?Tf`3MB*5A0oaB
z!u$QqYqX^ob2D1&X7pir?5DyHa5t2SW2J{rUID_)_oEyrC=I;{_VNUuDGYP*)lhIf
zUsT2b@C}>qcSOF$%4_D`g+c5CO2<J>)53fLT;185=`DUEzkH?J!<iJFDYP1UP6ZMe
z&IOr5b(Ph5Uk?ham+?@T$Fk#a8C2$4emA#j?3vf~wy9@VFjk@<=)>nq%ZPDOM>iAQ
zG~c4;%729^^#cQ2@j*6+^NoIz|2uE1(RoydL2Uo1G?Y}Uk}UL%A<tz$qTU%xX89eJ
z#EE4FUQ)+<=Lx4{h5f1(+?5;HpHOE^IEIID!Rv}Mam=91(FEsE?4W!$RzF)+)mjWh
z(%UN<2(X;`7&4<5b`Wjb*JCl2rg+--fW1Lrn@*Dlob2;gWH3)-$BnSjO}At>v))Zl
zGaRZf=O3$ecXYDePK=ot8XVEhFgm3?DS91W?+$xJa;7BT^iMY1>SyH41OzxwzU7<y
zQ7(-8>_W8XFPg@Wd4Gc!q<JP<@tFWe;aA@y0(YeY-BrZ(-w|#-=&mA0q*cLPnPCTT
z%UOK>79QiVPhnfr_66InOuSrE8AW~Qp6oy{M$xA&3oxVy^kYvVv_Ma5Yl2PXtmOWE
zQ0Rn?=s4XIJrZ||cBDYZdq4F)dtGlGGK0q(%j|iyRHl(nyv?9a++w-9wnOIk1>;A*
z*BXb*$Q?J(qwZ~C_md5zhBHJX6>R58E#|1wwGN&7#0v8jezL`M6ko#x4e(q8KnzdY
zB>`-%3a)4l#04B|ZZw|G9HXi~0vR|7h3~=UoUz$e4$^Q{*-@516YOAAxI^4)YR2NF
z7c4Sg;jVr<x-NIhL10%vnOf`PfQXU_-Td)fO28}ntc8=SM*MJ;hvxyn0cH0Kx7SOQ
zZ;x2eKzo(u5AB!DJ;wgMnU6SHafSs(DTiHMVeB<owu&g-n{Y3uOEr2*`>SeW*!&#*
zRPDc6IhY*qlsti`xfif@f_Xu*4`dR-%KynE(i;Z=+2>4u8xj}y<R<%Ocy~FiO1*-2
zWhP=rUcEby_q^TcKAJ2S6eplGZpnKQWky~3ZFQj`vFC|qNoxh+oEq^IXk;N|1v_~A
zl9)5`qYM0Fs-2U_SB8Ea;;JX<hG!*hxs-y|vvRFaBYH**UxJVf1My`SeebxTTupO9
ztAQ*+5$EL%+qUMc4r15V`gC3L8b!kW)gK^L?*pakkN2mo3#7W3JseyTax3r+U>PTf
zdphF7F=5CH;I$A|H0T3w*uXyjn8>;*tG;Bij}q9WwmV+pS)YS<S~E+%Y4|Ty=mAxW
zO6|!yt)Bq?=~YNYx#R$WF;SbubGom>_=b+Z#C6xukK2#nuOsLNt!mGSSER5cg*zDq
zkyjO%5rkj3fSgpmfeDQeI~e(fJyq3pv@6z17|Kjgw(kS_7R@>Eoy|I|{H5+5LUY=$
zRFjJvRPU4>l$>-C0a<tjl7)B7jjzRj{Cb8m1KRL=P&vYLe7fL=BBX=om(xHStb=dE
z;h>DJ)2=<IaIGP@v{^rV?VfuPwpxi1l-mdmi<KWfzX<|QNENUZ>*I_<4Z(T^tA);k
z!bKN9e2m2Si0e!}lxHN!*~?88IUgxbRU6%CT3gPhE|a%nlRN7opt_T6s;_mP;J4Hs
zzhUh0V%5l8&>A(=9^-A5a#;Cnfa;q5uw%%+OJ=?iS^s8Eu9a7~zAnMre?G(lL}C8K
z(|9K51KNiGrpUDp5Mg|M!1H7G7W~Kp22#Te)FL6I+^}u-s^462p|kiSAG%L&xsr0R
zqN&DpmS<?=m)DV~X1$bC|9Z9h9SJPM+&haHqVm~;f?u(<fIx*iaxv9mAT~z-qfeD{
zZ_eeQY=($)uu9?GQ;!$+a-8a-1rPJZtTZcqW5&9rf>tZ!8E{|F6kT-uhj~-gC-=h%
zhF$G)4n@!fT5$*RAmx_oc<$8*(?eGC#2E65FBjD_qYK`@`T4_ZkXEqy_pzVyp;1D@
z982tU8yk=s27owS5njE=HL{>7n-w@62wP!7&~HM3D-e4i?;SUiE!laH5<Pe5_=q{a
zev`?IOtW+KQh%$FEdPGCtC!60)53H01%Z+1@^7O==JCwDr|CXmK$CBqj8Nw7+m~wD
z?kU!<jQw1i;Vd1mO<U~~CtJ+C(<G8@G;gPflH>h-YMQvthJzX4xaUKP_4sDm%yP=+
z*XlNIydB=r)S#(X$ew}e^zUcikdLsrWE6>eN;rV$?Np4vRC;eBbmE!n#G4k)k)wCb
zZty@oRiU52<?7R%euc3ma8NjEYx#hQWXD15IpbFrJCUz6chtL!9N|A06%foHK&3hH
z(&BxE-Eo=C$pnQ$Uj^ZY2nt!yFNvX#YrsYk@_ar@l=06@XDBfr`&KxEU-W3e2>cl~
zpenUMpHsOx#_UuENZ2JZFJENFYCiuN|If&lPG+Y<OkFkzv(Dn_2i9lun+q-iGDEdg
zdY4|Gb(no%^I7MOS$kHx7nuf=y^iKOXAUr1NJEQ#a7EKjTfTvGfdiAD(G%Y8NHPzB
z;sAY74e5(~`Z<ig(1Y~Fz=+IKaPzX*kp%|b-rd!uobHi_wT1Fj$!H79rOVt`Du%3z
zM`bm?l$Wf0)zc04_@13?uVXq#MP9R^n`n6|gVq4-Q9vc#R(wvJGDZ;le!zt+m>_tW
zMQ<JFE__vT*u&wY0JY>~_!EBoNDb7La82>0OUMLKMHon54b}GerDHyeWq-MXm@b8e
zVr!wE0A9lHUN8_hkrw{6r6%p*uBX=5*_`Gb_822+)&BAtwmJ4rkPvla?mC_n3E0y$
z45-S{QCpDtOJ`328Nmhv5O+Kc{v1oIucY9@dHmnqhiD}LFShzh9?0933eF}vH`8`)
zMZFmIm?|u5F>?6o-Vt9ST_%<tQC`9J^JdbsO2zEw@mJX5ST($cJmU=T7k?8rUPY2m
z`4~~a%*`a8QKIUp@O$?$wBcio+o3O%Vtd}%V&u_ug2C|9Cy@elV|mj>1KZ+Hll0v*
z`BMYg$T@Qqnp(5f);F>>l56mP&gi)sz-Nk1n?k`Q(PC$CC-in45$WHm%X}=qboqb=
z{y-JMRW0vZt|JTL?%AQNchelnKsbgtyiM~i&>xziDh;+BZS$Cw03ZtDdxw>;Wrk_#
zO#HY0cKkbHP%Z`>!dsw%jk|-=Fzq=NTv8R-FpylPpLD}!on~}e`=Lq`ESfGu5i;*E
z`jqA`(WKfU){^;F;c}~A!Am=uEU-{%M=~|lghsY^?AlFj-T^nhvUcTJrCr6?31_f6
zK|$Rh@78O!-}j6|&F*l0A#;mnq`;H)lEuX97a|Tn{<<Vb(><PvM-wQqJlNDL48LIH
z?T`C1^RAR?IERKt8h-dgi=_AX1YB9kSPb*AK~w+i4(}f8bn^4fo(nXuMU$8)g1qSv
zhZWPqWbg-zT(Xsfs(IA7nxh$sZ)Q0%r4r7NwN4d)8e6t^qR?5rQ_-R;&kC3RM}COO
zL+aeTAd?i>4{I8LX2hK4GNDj0L`6$bIU5(tF<b>Llf&)9WJc};wZ1goH#Ht|VD4Yo
zy3!?ZVThe=i@2cr#A4Xv=L`~Ba|MPP&pl!X3`9&}-p$^dosnbmJD+CNK<U#=q<9Ga
zlkYhmLmry+@)Bfi?^JL<&B2U=vGKp^Ncjrmv%$*ro!i?_8rDx1!6Vb~4*iASk^F;^
z07$8uBt)IIxr6_1D8i=r@z`m9^EQnnNmkgL^1{zbbrGk-5@p$hfq8<t=Mv4^th#eQ
zz`D5Px+A%)&_iL)WSS!0i5s(RX&w@8Gjn0`JJ0r7xkD20w|BD=3+nM_k+4vsJGeWz
zSq{EZWLrd9h6$tpWl58*rLJ++9)@#2I=^qHPw+-|F6OS+{5^vdah$2?_&cHAYpE5t
z$)GwJ1Y<rP1@j(yqTX;B*5*1Q@{e}<O24<}<l=vgm&Y1%WcMx`ZH=5v7#(`{P0*Sa
zdF_o4bu;qHA%5$;y#)8=&|V{*;wSBa5&yAkFyslBdS?`;^YTb7;YG;%6Eg&kb;yJ?
z6exgB&9@JPJ|=fhU!C6OKezrr`3>a3&Yiv=fWH7I*Bx$&LA&~&Jm=&xe}AGH%I&;;
zjR|^BW<iR1p+ohwChR}x{kQh{@BUjfQ0mgNIy@w&CTm3!(1dmsH$VIiP5h4^iTP@u
zFi6bu2z|%Y_BcYX^96JMk&%D;?8#to0u|Hw4>8Mr5(AbUE%)s%=F5TH|HFs7=7LAj
zRy&bme61~D=oyDx`6ur9f85T0|K&f$ZO4??um}!h?RO#ZfB!lE7gD`jflUFd)Z;w^
zx5EKf(Vn~g-ygJbBsdJ`+qX}F6mY~e!J}2igcmTiU4Oo4dL*FguVRX3r*(B$f>11#
zP|*MVZ@T~EhdV&_obowy;CmdOl|w#w-GMUu9UVB~{6FFKQB`mPE~8{tm~y}eB=q_W
zy*HvUNAxdN|4&23$qhHq0v)rY`WRC_{)ZF|eQban9PaR*qRR=1fM$#-e5e@%W3B!v
zw*Yq?2v0@~MgE7=hxw;Jy~O|2r(ktH8BkOpOH_XB&zFi33Qyv}?xW4WJve>T<SR&=
zOr<}(^2bu+_thvv2mNi50~22DfSP0~$8#}N=YPI>A5rK8f~%#KPM;BK36}kYl9}Y+
z^Z8^Eq*9g!RDXj(Fac*zTp{qZBH&Lr<&+WrqyF@m6bhge$s#w_DH_DTAroTYwBei{
z#(z3(e}2Zt6ygIpzJnMfp#O`h_vb9`+XhJsBu6wR_cQtsh!eq4QU#0@{8M%T_T4wI
zY@uthGnj*~gkB>)_W${EG1u-O4+PQZQ&=Wu**qX;?*Aa=3FDtH7bAkjw7?03jEUf%
zr0>pP!69o$9@Dn{o3Z}jQnmHKqperD$4(doG#~&XKVUwCkputY*^K(WZ!tUI-~_yq
zRvtO~?+?0A5v;g6>MF+iif03l&RC&#`W=}1gJU?^W+)WNfAUZ4#fJ(KC$BzA|MpA&
z{8)r^z_M9iz#E@Y4HUqBX5A?6Gi#4w2g&^Shh+#vh5f4G@^J0<=b1Xi5!l$+HRIPg
zecn=VTg|kR%@$5hGG^<RTIpu2f$A{VL?D`JD=a_!j<WypB}uV>h(_qQ#1+0VFx;@j
zvR95q%=Mu>Q*idfB>M16?0JPerW%P-zNCt^^-9)xhPA^U-srl6tYD`MF9V(L@0jGD
zZ)~qWQT#eJodOE`MMl?8yG+_B&DvtKK%Kag&^It*i44xbGUW8htTR7!(ioSV?SmB!
z1($x8-;N}^y`fR5#gLltv!4#GV}j(juy0x+avvQIf|eeo*!?tHTiC!1-x+f021P*g
zYwv^7mHs_HsexqLXTL~!509F<Sh4#la)A%;-o5*YW(z)VTD#fG-U^07zDHkx-8+)K
zEMe@!qI5N3;Wa3r1a<B*C?dK{P>Pc7{f@80LAIiCtkl{P6vbz0kzXZEbzT<zl@@8F
z<>27(zG$^h{4SGx;H{7l%7e-(=f#M5ftyNEx)pxxi_a*}5HL(KL%jA)u9xNCt5hh`
zYFzZ4iG@Y3Ho;97>3t~N-VsPt%Wbp+e@|3XZBo%V8$`u#)pxHrLphF4ZBf9sXQ?y#
z>=M|dcIVrJ-TC(NS5K^7uTbWP7JlpZK1c(VWy}krNn@cd<C+O|p1l3crQg&DU=F4R
z%4dxkaBA)Xa^@bg82+6s{A13hCj*j`!`W@qYfGm+W+yK%C(>xSV3so`=W&yQh|5as
zK(0<6;yj@m82K_A1$89P=B|cw>IsYpuUyS9G(Pk|{Tgr2U2p&V0`)_YySl%Fd7u8U
z0b!{AMJ~t&b#3MR)+z#F<e3I$TMh@S#7Quz%P{KG<lnMw7G%5nuxqJvo8D35$%iuA
zk!;X9auXCBih&_#rkpxu`hYA8g_lOkRZLm}RqJZpQ2G;fY}#wP)E%yA<oT1WRk7Wo
z*7TD~&`tK*^|Jr_oBRgl1d`ZIz=ZIHo~*FE6npb_HRLSk`{!4kHd3tyGVS&n_9#qR
z=99P#Y@l+oBiVPi^dEtqx~c-(k?Uc9x3sW(NO^nmyM5X*1pTc8_M;yTo79B9^iSb8
zA4TEd;4)`%F)~V{R_eYx*K!_thG%PJy|?t7=(wBZ&pz5w6ARK8E1<a6559c9|Bofh
zZ$UYU4{ldKX(f?g)M+Vk=6ghRF&ePYn(tY4eaq&}dH1AF<m}$E=<}|>zZnfTr<3M8
z>};6I%F0Gh@9*z_0CNhjBaLd^HCdHoZ-r2;Qcb^yLlY?XwwAg-g8^xR2?YufH?q3a
z(msg8x9)xkp_5FvMx+{%bM~-vqj)D4_ZkV@)6tHz31`oq4U09Qu6JEeJ{+mi47fz2
zCS{!13d@vrJHLXd1uza)S|OvNVo#x+*6f-v687|HLkifAW{SBXfnc7sT!|6~$9Vnr
z?c3QJb+Mcl#uJ}qTETFjPe?im4{bPlsXHt42B^r&()Y&)EuXMArGr%Y#!KB`+?A8@
zk(cTBcqKA64UP35P2tRn5qx_!P7S95WOfR)-UXu1)oi?BQHg&NOvUR}BjV!qRX|hv
z$j9dl7)A7DYy34yixX;re`kC9>%_!_nAbwzP22I3`^|1?-#=(+YtP@EOYQr+J4L?K
z4QaOXvn}gQINMDjA#HH6LOEPa9*@6AaGDu}=V)jpN&B~x+ik{+y4cNhCLEO=(x$;p
zgt4&Rf+{NGBEqy&^pZd3X`uIcK;NPCxvtT5Ql`yBkLaGVp0d^9xW`dGx4+_XX6h&T
z36Fz1T{sc72H@{@sQFWSYs7wG-&o$Ujs4)fMVEB}bJAd?W5B|gXSrLAV`Koo+0x)$
zla5&76jdgP{>*nwVX;({l-Yvg)Va<yB2jdkA#bZQlRtmXde*5|_z=`{D)E^uMcv+A
z^IjdnzGzpY1DIMVN=ye-8msUf7QbUcZH1P%nM|`P^=ucJlzNScj6{9yHSZaH2LD24
zhcc*nl9i3fjkY*6sCHfey;F#urnh0aBiWkPo;=T9E}z}LaDI>k-0l=rL2WvXXc=qF
zNX5Bk<)}<BXew>Ux)E#Z6?@Iz7I6^u?M5+F*kz{v6myjkzN~(lUq%hoh*TY3LaMEI
z@g6^(^3pR*eXp<spG^d6o>gxT$f8ZxPTDf!zo=e-aehgl1%1<Du46VyPezW~08xK*
znA1YLoPV%~X3ee!ABowXfn^({RJqkSeH4fh@sxXYM4M(Ub1l#Z<Xd2cznXhaXFL9}
zZ3MjFdC;fAK%>1PwuvzE22pf_wksb?Es~-q+7*gNzlE`|%}NJ;V166#HG6HQExK2%
z1$2@@q8wr9E&h$NIbdrMk!3<#&#%uQBBHxIJRbS;%X+!;##Z&}Jm^1tzWzg&jQzcP
zMdRoWfkuI$_y}o=d{9ql`MHeYz1$(m%=^9RWw$SUA$u=+yZ8%P48PqI-fi2VXJF`<
z^2jIo5L(SJIYKhGjVEu!uinAqHS>zhv^Q}8{gc)MxvC=rSplpUJ(l@vhrOj@5FJ5S
zTQAx5tDfKIj1lMteM;@U0td)~H)QN)dSBv+&!(79o9fHltSws|%xaMKzfxQKtO?)A
zW}+kCi|0yyXm{0>bK$9)qo5OD{s8`AV815BM-VCoBdmT9@^4P~<g=+Dli(+t9|{Il
z&NtP0w%NI(+|^_Ph&mn2gYjWkcjj5$(Qz(qRnjstD1{@eZ1s%bt);OPVaff(=m`&#
zoSn{6Yt4Lpw`HKWs+^UenR1D14#)#@cl1D*iiGK5rA5)>vWI_FN*-pi(t5Xv(E`(D
ziq1QE*rk6Un%A6f7TL*fyPz>LoO7g`0hKL7jef=+#&vFQ$+OkV^PkPM=B<QC#H5>U
z`(VZJJ*pA5JJml=I)|#wLsqgid$-0{JolhZSL7Tty0N_$-HMla%Mf%0X-#->1D&Hb
zTxwnZiij#3>Qh9a(alQ0>?*L$?~}%NUL8)GRr)yCcmZnKEN;%#DPEX!LvGG477Wem
zpwZ{T@d*@*%}u1h?XoIUBPJ0OUFZoTqP<MRlvm{32b|rb;Ce@eK4(_S1O$UYa4)?K
zYP5|!g@?%Ru0O8#a!2MdlvQ#Y)#b*xXsO@5`_e5JY>9GnmkOVqCf)YPu7C4dZ>i0^
z+Q@bwa0pVlm~4`@P@=X@;oL@d>@U*V44C3P^x!p-ORlmbgnj)w!Bi~}b_Za?1DlAz
zo-6O)2OEqtfQ|1gUAb5IlCFYwe}K5QtH9`$qBH2bJMF9}&d=&K|GM4f+K9+0sL2JB
z6a|PpMV@`2UGDy}wdJ>i>`#FUBIg9p6AirOu8sXQnj#;v5UfCE+ah4MBM(NNsqm$v
zi#x3b+U(m+5<Cz6Y3GMgy9x5aeIqjCpMngE7Ko59w&&f3fP}-L-gMu;jXb;Ayf{FF
zM8lH`IM4h@3aGN^n@eDaZ!MMa1QN|i_Ag#&KiV-zY9Fon;?oIrZFyNS;G!1$iu?sU
zP$-Sk+M~m}%k5DT2Hcx&<6;9d@8makC`^{DBtgUYi*tlO!$ixMYrdQ(8XDlcG~Qd7
z#PT326Jox0Tl<Q}F9u+M>73DZ5f{`#KTkev+BElQx@J+Jnf;MUKOi?1$<D~ju}`N>
zU7Z(q|Kj{gp8|L@?>pYkt*v3#Ylxv5T!NXoIhW%63L&V_Ukd?vw;YN7ny+L^3_vs?
zf8e8n;{ONU1wE7g&;2SF*B;3PSPcfyMa_&+J_sF;0X>4D4&#=*b*ec72uV`!X%uLD
zv+N*}jFP0J`(Qtq`EI!uv~aN~UoG%GdoF7FeC=VCp<Ai<`!bj1;jAi`F;iMhSJ%E{
zql14EooA|{ibS{}59su;K-AT;X=Ok8IK4DfJY4CR5y53>BWmXH^{9M?om8u;#EnBh
zK&wgS&EU8S7j>hn<HUGvwn6bL;f^R1$bxy#{C3AtfdLnIqpH1fgtqw?&f?i|Tm`Kl
ztz_(=W9L5ZIb6%V4g=?F*Du2EExue2W61)XRpxFVSk9{dIn(mH<Plp&h)S|)U=_jn
zb5SjJdDSx2=QsCS!)M{@>B_wT_JQSQH(pJqBg_`*DhE=@YOsu8ni7v89!I4wsU|Jw
z!}>~HI%&s%XXUm(06I)|fLx_rm%!G7f`bsq$G^XuL2e*d547yWc^*|XvNFkK%Xh|K
z%SWhA;it%XWV?)ejpTmcez-eX{_59w1Sc6W=?AksOMiB;;k+EEF}Q=*dW$IAaN7OM
zokm1|4ooxud6ZkG*7C6K<|3-_#Y@nsue_s+mRysHL5+&g1FF_#rK0;mx7+Q2i=$73
zd&>}vI#$mi=WLTKw{a@~4s!GlzBp0wOjE_km{t3+Is<=#^PqwFW~y=H_ESnyTDxF3
zC#j0~<uTEr$^>8~j07AK$x>^sj8^tq$pS?fScUxAZX(JG)UNZ&Xc906MuJfuOScKB
z4vV11AW<`w3h8+s(-P;g-6xA#x|Q!485!Hqj4BC5LHAwv2fy7j?Ti=ywsYYN8_;SF
z)lRb1l1X5`B}>*~gYVgFH*<dE_6eKZXeTs<%45M*BvUEs{rjs(1^vJN&y6dQU9U-+
zttWl3%w8ANufH;MpXt9CxtQtT|MlxV)Y7<tH6s7Mh8{53`nP<~_vL%SflVzjRMm?Q
zvlys&CtyEr<I;KB*(f}I8JOn#f`$<4izHQTzBWq!y@+?bph^hJwNLEu!RomCkvCoH
z;P-|#2PJCB4iE3cWLc=KY!(=wH(k-o43xr;UycbhH=O#vX>Q7m4!G0a58e~BY6Aol
z+SMVMcdRNg$e;wi`!u2w79U5zS4RH$L3%}hP@jp9Ph(NgPN9s#Jb+!l&O=8Q-++kZ
zHntq-L<zSsICickQuqWvVBu+N07dcEj>8sG6yy|x)h-3V;4^d9sc?AIpKmbogQk}j
z<4GEOVy&#_*0((W-TMI57XT2MelRNCj@-_}QU<i*h!tF5`;UAR7*MgkzP>vXY4pTn
zDsJ6sxFl=iXXQ?ljWXK{(|?S54o2fqJ<5bq9z*n~W5~u_r~SJQi{or~!x)r^MALjK
zt~2sJkTs}&ep?<5NXv8Ia#!L(g2Od=fA*`^SLxi3wx>h*XL7i0>B>|poQughfypgI
z#-V*nbq=tOMxOrt%a<=ZTN%)iyX^+<thQZ(Me#VrtblolTHh-j=brSrFg=;daFfjO
zdU5Wx)qz>_MU>~EFj9Lv@y>!Iy;zeWG`9T_ogtA?)cy?2J<$`6?7ZnuS~I#T>nU!k
zP-R2Tt&_dLZ=LQIeC(NB03}_=9Qk-;G#C#i^z=ssTX;QfpDMua;54XX95Rfh$v4(N
zo7D6+y7U83=ia&ZsrjCzeC=x_vzuF0jiG8igTn!Z6lDb?%7~>V%Wxi>n3#?_UPX7Q
zs;aVSWQHn)v!#Jx7aI_k<^1LSDgsM^0k%PrAt53A2M07g8x>Ed`JVrJ=(ysJTCf~0
zvAm=caQ}Dth6@Q;(#z$fwwI-*-`>mO;*;K5{VaxR5|97iLzorP4clD<-;R#1oS!}-
zy2?-z>}oq&p-Lp-iX>okULI~*{YHb;9{Ud`rb~f_{J^<4>hPJ4xDi`P4Kp!r)mnEa
zy`AQOsn!V2?<@b5zzIF1pITK2(`(*7u#}SWxkkHaSx{JbOYhr+CpylmKRZ0rpVz#@
z0stOCv4OM|(V)ErnSe{tNBR{GpGWH%W#43a>}>FCg;79M>N5?|N==cv7C_9ZUH~?J
zet+Vfvj;+}b9@NTgVH-y#58%33HKsNW@b9<yI9M+DSW{<RRD==AlEQY@@QZEEub;b
zELYf1b>&L(L<A=cG~tz*00Jtp80Zsd0S%r%7Z*QT9W|eChA?J=pFXefD{2Ol=J{^y
zyBqthKRRlv=j0u;uhGiaP6}QgiI$X@$OswtLf4Wms$7k@1@8#4>Z>Rc7Dx;ALyvpu
zG0AyYeXKqdN2j{k_T}lRfVruPj<K~<_;Z~Ju&gUhw#YHOvU_=U)3s7Z*t5dGyY3!#
zS`5o$eFTjY4q9Xvx^b)BF%D3YM}uhQB#LO_8e%6R4^jVmdjJNEQo-g7^nax#(9aLt
zlzsq4)b1T<)Xa=t=uQbRbf0G~KOjO~vl1gw+5PdBo6lq0!Lb<(p|$|4iWb^y&)S}h
zlhKZbDr%ri(5QX`-luFZEjwG2^61XccE~qi=fl8^bFl@gqKXzrBthuLKP*0~V0^HP
za{rYSV8ef{GZN?gd2{z5VAG1+B>9IPQW<YO{u?idlAlc}rN#}JE$xq=t(NvC-fPzq
z`9f=DjZyzIjk7Q1=~Ej<Z~`5CTj;#S+RK8>b%P51;H$NWiyu%g3;h8XaRIZMlHY1D
z-X&hbvua@=?_>H4QKDO3bO%!bbXH?kPTwLd_b=4|$qwc<M+SEBpWyfggRIZzr)A1<
zL$1F{T)(y(#pdn7Unnr&v#%<RdP&DtkCGV&Mt#j-LBhC)^}YABB(KDtuWS@H2hvza
zegOl=Gq~bt`Raucu0bc^Rx?q-JO_UX&?j$i-gc{n>hnd-)tcUXr=U9>c(A`fq+l2<
za`z<6Qny3w^Nvrmc7evMol|c-2h0gh*FN&h)3sb4=AYfGKdRIvW7pz40zKr7ZT9v3
z$l3({mKt<D(WcGnxbsLVf7iH!zg|J-^gGoud-r=;b|%Y#pc!&*AloZrYjwiD%wg%t
zlTSw(4MU*EoKp_(%{uyTS6OP&{Mc_Ez43tV%2!l$y+eA2RmSBTvOzFW`vj|?huv7r
zb+?VTGxchAsDs3`WRLg$dW#jn(r}L~+IIzE)B2`UG&ImnMOw(JKQ*xNijXQDjM1(v
zwAzbg(f{nl4hswn4leW0xQ5l<e3tcs%zFb>66@c$Kh6P!o#3iO?eF}_09m1+{*;z4
zg^`D9EgY={A}$7RWGeg=cXW=&IRhfB(P#iWekmr`)mXh+mjhqg_A`Wi0$sDl9%b40
z!&u5T483+tQS-em;WK8g%iG(ogp_>ufW=#D;P`<}Q^BMqSQG4GnKEJg&Z}i00!-q`
zuU^d*IXd#6n2!rshr|jiRBidK+C_1Bs-O;fXpB7k6cy~T%c;e-w>xO4V)g6D8=1ZC
zs4#_pYQVNTia0Ig7Ll-AkM{nui?SL@u5=RvM&B-KadSysCAy_rY~wEoLg?8F2rBbU
zhQr#XiNyP4jRL96A-E3dMxU2@d-p54fVn|R=PfHCQE3wpcRAmfLtwEwdf}jrceY9{
zvB?NvFXZbZ7H`?T$3K5=&`RMZwF!XDvFb~#6XpVtC`WdCo#d3EYWI8}O=QawAY(UX
z*e!Ne>)Am&<~Kts5JjBdO&0{gCM^!5{PUtEf(X7kH@l{6Nt;E0GL^K)6k^ex>_00)
z!m6aT7fchj8M_u^H<9#$MftF2$_eFBQayXLUtHM{^>n&#CyDF+!Y+EkyMH_W-0b>*
z?Xbnd=Hh3D@;&s8A*DHbY(oeKjKYS86LgiwV1uB*?fP%@Q{T6n^x9+i+l^}CM4S|w
zUt|MLa!J1ZmYh=!G=ulVPJBEEZb7M9so+%AOxpPB0n^j|XVto`{?n&VdAuYk$;iS}
zbM3~eEWd^_lu5zN5w@%DAU(`J6Z5ng<#cp_9w8U>n*B(xUrdpU0e%K8oG;lOX#NQ>
zgB~eh_mdwTdDu4^GBGikdZaApaZgu<fS%T>5B?6gksHOB)VpgI1l>bOCGbH70Pyn1
zXMi{%a3@3~?tXRk5_;t0TYVYo;6^QImfDVJjg%W5`Hi?CXQLDDBmYJKX_W!c{aD#*
zfliwpznZ|wS6AW&gsq6{TB7X(fX3mqzb+5Lv^RS7;=%Oy@x!CeaLUg2oiY6Ey$EAz
zAcisKk%GKuv(m%xH)J;EHG79geS4L2@7vZoXWOlMD&8$`t029!4$dJYzuMNQ;lqR+
zX9HV5;Pba^@9tUwB%KW;vN+D%gFXjU%UNoUwnJ(Iw+^5IW<DuOo_)$hIvLV$O-k&*
z`=CMS@DzbzHp*_S+WMz?imfAr-A3fHVskip&@IpZxX=9cE{`2!HmvrGv(3N~U0<qY
z?_HC?^NtB#pCaA92-!AY4CjO&$UN@Ahuy*^r5q?Ipb^cV=p%I7qd~b%;pzp^5gpy5
zt2wIMar_>Ew%Yh`vuq7_I_k1V7l<Qp8kMzC_pYWzqM9c^mmz_<d<*-3vG&$+QLkIu
zxT1t0AxcP^pbjBQw<w?pA|ebqAfPl1A}t^#pb`clEh05^Hx4MMNOv=!#L%0r;a#)0
zxX<tTozHpBd*1WUcJIx|eB-{?z1DSI>sn`t2%NODRRxNjE(_p%BA|Uu`n2?h)@kXT
zyT;tgcOfsOuZ(D;g|I!-Uyhuev&94iP}oN?p&qOG`0LTGUPJ+&wGLTo$1H9dOG-Ru
zD>jxiQg7euFRSBs?jLZ=ww8&3!g)c5hMKywnTqLa39fRntS}3TEm+w9zv?}d&#OH}
zwP9U8-HsoyfNi;%Rz*&gOU>EUgmlw*_b$f)3e@^kN<95wM6#tF6%B;Pe<=G$gh`5@
zB9x;9&$kxSG5f_yy4>+3Y@`f1j|E*@D~Vg6CItyh<A-polkn#n;WqoP9Njq{z?z}r
ziATQ)S!W+vs2olkIzz4YwaEH$s1+do<MTB~pVFwtifgP)8|=OkMpi)D<R`utiJufx
z4FJk^&<+53nM2PPB|pOzC!4n?_YPg26Px({cC5%i^Ci%St-f{!R*z|NOuoM2*!oG~
zwl=4+G~QkPrO#O-8>RoJ->t6D{4VFNU}|WR+IjiFM`7B>%=r?p)6+jodO3dOXyaM=
zB*EKvC?YQT;uVx$K1*^LQ7Tp*G`X<5JGQf;JDpY8G-NvOE*{$?R#_F|U!R@d?UcEq
z-(1+d<KFD#-n}Jpuf{jP>Fe@FyeDCbgjwMQGp^ejQ2bBLQ!C|w`n%qE2-ASRe1jcs
z^0S=j!z{38MJGcfM{P@s)J|hG%7drQ0y?<b>wh!6=gs-%^?nIQyvYGF>R{138E8_C
zblviB_ackV;oau#8mdgo;<@COC;V0GHK?~+d7K#uvsg6g&OrLlSz*s1$zt2Dug+%n
zHj3yr>J-iv4}0cAJ>6GQ&#}}mFt(wc9PzF44_IP-8l72anF~GlMn?Sg#nnI9Hy75(
zKQC*JXO<ZvqgglTk=>$U&#<Z73`aQG=$1bSsubNK)y;npgmF{t-?Hjiz|9RGXUIyh
z=ha#W249kSCV~Td{Ntj&XUEQudUSolHSkq^p*<ODTOS;o@n{OhD%8`sJ>C|r-a&R}
znCCxe&XsieV_hN5@7Uu%zA9PLT`#t7NqARSv2+WeQ<7udQ_?yVBhw5viz-e$ADnr&
zyI=W=H(}9!ag}bmUL?EIG4uUv`O_b(#GSH+6-X@~ujB3@=&v`5-@#G3zAd}eh;hH{
zK2i2))*>ZV^P6ynfvx?6=2ahtj*l-WkpX>K<eUZVN@2l$S%xJwI0A?KcH+_jlKN0s
zxb-cK<9EOpA^qc3S}Buenca$Nl>@d&19u1I%-(!c-FRvD?b)&V5T~!%Z>k~FABp}g
zh+`A;x(5Cq`H1g@V1~L18*7vLj*%yn>mhmvXqUeDBG|Y_jts@3{Z1eLj@zq&yw1RH
zxlaEA|9A1CEq4Myl6j+oht}v|f5z@eY4=UFa?KisU=}IvJ#$%OE#ikl&Pm#8J@2;2
zE&Q%E>W46?6Xx#cB1OGmm*^U{hLl3HVttp9mWET+zC<XZAAvw-Dd&E4$g`&ChU5rM
z+6%rec|LI4y*R$7S@$*z%)4f><fAC<F)o#vv=naniiGS~;JI6N4|K0yQxes?f*2oa
z-?Y)KFjGq}x2)#oQVwt~-5tUDXwLqTegsD?{^h$izn0Ha&*F&?8A1-nU|HYy<CpJ9
zc|^PQ_l3T@x-({KQX<z=Y+ddsY%+PVx-vdn+t_Ka_gj(eFvk+hF^`41Xj^SB64F!n
zB*r@l&(u?H<#OnkCtKL}-q)Dj=*`bG#Cit~7*Rb%eCoflpYt`Bj4=dIyP8?Phu?;0
z&mpTS+$;Wgotl!WH>D>NYBV1rBj2H2?NK?{vhLbnZmQbh&VbJK-1R8t1+&FRd@60$
zu2)}2&Qb~svt^-0s}&dLj`Sb-l11FB-4YEBV3%-;1Q*e6(UoDYvm;WNxI1`PN-6<a
zI$P8~0~!3PQ*VL!>*@>Mo6b-l=JV<nl|=M)glKrKluc*dw4?k`pB_w7vV3ab26wCp
zB+Ui(O=8@gSLE2QZ=HXs@w0}C|B+|yq*vvp22=or!ya3Wq~BuQ=1Pf_<TbN4J?>t#
zA0(Yogy7A!>fKqAd7xKqArcmCRl^A$)EjKZKg2GI{wQqKV@Mg_zW6BfkFJr2;NUlk
zdhNX^_$7TocyRdWEm7<(nVm->W?5UZzx8>+MY5N0lolAx>9QZMZf-y52B-zN))@T#
znW4)5aDIci&1?9rbp9m5+s)Uxn|HC&Ih#2;`$uJVH$tYP(^NON=Bvv+-VzXMiP!G9
zS9GvomM&b>a+hH!RNoOM{X@ZW8g|WnnVsb|=CnFz_35#xO~7t{;^Ul0109E4CQ3aq
z)o_x_l)#_bskcwIM<xYldZcdRbb1p3R5-u6_{Ttzbu>^U-wHS0sNb@~DC#|4{5;1N
z_@=f}rYs(k1IM*%)`ab)=D}f3{8~5y*~C{id8*;<<&@!LL9_@-o%>7Uja}8dyCg9T
z%0Np?7pou?uT57sT*Y{&dh)9JouAgbq%>O|8bIo>S0j2E>!0XFlLj5-*Dvc>Y3wkN
znJs7^U@q7Uz-=&G(OsE{61K*BCV7-RBV=#B*{sI*r-h_Q7j-MXaPnL(_FmO+6BNdH
zR1oHF4_|t@IN)4w`fD^5Y;W1FW7mcCt{~Io1q$My)#(V$9mkxJ$YPrnjmpnlw2f8V
z(QdqP+d#{>j-?(M--Sr4Os!ux@7fM-v-qX*`SO_L>r=$!@#?rBxBE4|hq@Mahbo^t
zI^eg=ZM-)<T$`2LWg1nl&%Sj+qvr2N=#SH2c2+ndf>Z47@&><isf;o{g84*+q=-|j
zZ?EXqlJCykC>wsf6cjy?AYjyZw52C&oQM04py`$F1eb$&CK;R2fjuoi#08CSO`>Cm
zC3d%$+9k94bBz_FWjw1SDzmOo`6p=#^0})RVl8-coHl+&C=SZ+EYV7@e{3A?dVC~%
zK1=KyF4w9tc47P}Mrx?WJ!<UY_AX;iS4DuKr;PKRx{9M4WNP4~koO8gk@l3$+14(h
zc=reI6@m+BWwt+hx(xK|gYm;ucQZH)a;yZn9^dgfdlOcNMD?v!ua?@$CicD*ihV6N
zN8C51OpvI>wcXmPpIy4MfrnHTVy?137kIDOAH6h$etpYFp1;Luy0zA(1gFptE8+C4
z=)Chtk*@AKe;Y;)Y>oQwVZEKKzKmec2ZPSSp*+jZ*m7_@F2GpTdGrwL!flzg-WL<5
zZ?jJKwv|Kk$@cQK;{NYU4|IXDG2$@#{48WPYI9|0mbKW*;ppAUM5Zh<>PcIB0}rv!
zm6q<!m0g9pNQ5TOeYwsaf%n#5PKT7#es|fpkI^r`^-S1mpai?QI%WKP$Wz8BnyUt-
z@&4(`WM_Y{3}M}uzgl6%;(UycM7;Z|m?k0P56yf{>+;#v{@IeT;G1?c9euNYh)L0#
z5&R*2S<m@JhuxVvy@m-ZBIoflLp!ljEou2vZbx`1nT`us6vWzVx~wg#hzR8edIfeX
zmgy6rE{C~})*;We!2n17{?wO+)=t&>p0mTlwdfLWX^EKO_rA7#3`f2w5JThp=&v7O
zJ-3lSf?gnO-M79~x&222U(5;AaY3`t^I>;?cBrcshDdLI8UEQMF<)?YcWuqP%~~j7
zb8|X-t6%8ER@+T}`Iyl`r(uT!wyv!gbkrhiQ`O#|+Wd@l#bVomkn3l)t+;1g_ae|W
zLt?I^)^&OEC4Qep#k8umTOy7!>dZx}o{MgapP7s~Yz9i~)O^krTou*B5w_-w0X**G
zuikz&>ddkpD`@_z9GUygo0Q7xQ^1k5As;XS;#fpKtIajta|-xEAa1JbXGGKP%G4{(
zbl+S)tr%PY%&&r9NA10p=4C@kJ#TlzmGWge{fQt=odUCa2gqq&h%>VA$|Cv%j-eOe
zJp#Ao!Mwueiq2j_d_Sq>P5VO#>j>nW0O#DW>vSfciQL&9|LUF9{vATK<T2(EscW<%
z3YZTnF`})0@w_?(U!X)kR#=^$b6`c@vNN4w>1GUSZ36Oj2P}PFK$laNPGR~Mhx3|t
zvxH8O)$z56=|+*^7ZjM=Jxec+UmoxsH=AhPKVP+Fqb?&YO5j|(cK2_c^a3e8HS#vv
zORh`sim2wW@=hL~e%ZCy=kzql+ryeWH~2xWb+e;6PS`q%itf3F;G%}RnJt@?p6Wf?
zO4pT#C+m;>78!aOtDfM6$Itz4Q6c-9?v!xm*f*R+0{SV4Jl>9%C`>odu#0y9DmiZZ
zj4|uu`c&>(<v8@Q|EYW(`9gVyH7lXZ>>VYq*1N=9HK}IW2#}$bl^(*|Dj>i?HlLdL
z;t9Ol1Ds2x&ZpU(mU4?BflmL5pW(WRai>uwauu`Usf>K>l20b$-1zWff?1g9lEpgK
z(~QOxnq4I}TdT9iO}U+tgJ1>~#dPN7clK`Q9FYjEB`G5@m--GPdaQKu_^KvGlXvuu
ztD=H&Cjc)&Vya_{^_(J&FBg;+Y+q{4hA@uTMLJz_iY|jT-!Nj!iINi{$XX+>1)L2t
zZ@)aHnP>7<ko&Bk>h4aQ6yM~?r|pf|<xBSyrG0N@evLYZiNF+iXL4P#s4=ccjQCb;
z+y9`NL)1|IIg=CS2O07$<=k%le0BdguPzTVD@HR*ZzHLnDVz6ruD;Lfa;Mq6*ObR{
z+LdA-xGWJWmAY_@DttYq#{N4_yB-lWVUy|i{N0A$msXQm7AEFZL2I-&U;AUu3P+Hb
z)E3^{f9yFUU%>+v+edn9gPzq=mrTr*%L=wR*c-P#mL3r$I&iX4J2ZjI##?z={)<zj
zd|}QQri1+%H{RP;u7q!0$C^S+T-_SPGBqUXn~Lh4WL5}`dX6e-`_X-qzfw@XaAYKv
zE6x?+|5-eaW7+b=^7S{6^HvcyEnll=TnscU7hKPXn6EjMi)EUpFQwU-`k7^hIf~HN
zyuuuK%nv3{hX3wbXQTEi@I`DxS|j9F?<(&;GII5SdsY}J%w*sz##>p)yN{d3xo~~1
zU2t|ESr8Dqaqruk^L%u|TJ(pIEzd~s&0KemJ!3pf)^cFoZEnM$WC1|+Qyg#H>JMk%
zd3S@Rc+fGrpAGogBx=y-RO+65=QKZLhe4d-WutgGw5E9U$mmM#iilqgeSr>Ir-or!
zdCZHP1O3i+@mbRf9+S<HyHM;r@%QN+8b(U|;$gZd=8Px9&hlOsQOfBqm$9&kT82q;
z<yb0qj7TT&enlOOV-#^ntf5MjU|_dZ(Qh1)!sIgXhJEV=hTZ0+ice)CX-xIRzC?ew
ztJtZ*QND<Okk8K(v1i!zR*sm4RLXz};eF4Te8>*@L{Df*?<}i}Gz$%BrN&_`=dLV{
zzI=X=eCvJSiSs-e2G!L}3N+!)xI>FY^MmExq%Y;E8mQxME;+pC<$LEhU687K>ONH9
z$+_buO3pOdBu7|8Y+}BjJcTE0OvLkjMA{!2Wq9j$#oGK3((t=P+{Jz<gAhbTbl5zH
zH4JL!IiF)at-1AhR;OIL?pmOYK4-y{dP<q4+vA$oU87yP`9B=m%nn|94rln=pSN0Q
z4${GbW1(9iYZkn{*=L!}?s(a#QY#rNSJ`7w_Q)KN(yalPW!c>!xA~Rkv>RzUi_;ZL
zO_wv3F`dVfRpU8w^)X9vP#zwceIZPNnQlGPncpnk51DSLk;bL7Q-H@$`MX!*4nRV4
zJG7TtWPncKwr;hDd--^jWyZBY`Z+&ozY_-!oJyqDQ=~$Qu5_rY)VDRbx}LnXpPAEr
z`Q`8@G?-}30DoMNn1g(DSf!_v3hnyVYN*0R*lpFyvz)AkAt%B5ckny$p0tfVD?vED
z`n^YpQn}-727nD7?Lsf}!Nk4j;ZLRA%cO@oAd6mck>1_5XO(h&l)m%M%-t|{=^G;Z
z5&wfsgX$r_^9Q-vA5C{P7Kq#A5U)Ja4o->FtAK0-QC<H6nx9Pl@~#d}>NqfO7t8WY
zO+0~IIaE38G+^gX^#>)>j{d@k5A7yrwpMP<pS5-{V^)InBm+_pC-+JO7+|PPLrVYf
z%F^Ch15Dv9SLcOK9}#6VDrFSmryU?geL_GjXpV(Oud%moRDPudusNTYVhi2qh9`Tm
z+C^1z(YKn!zYkEq`f}@gGV``aGf~^1DCq^J#u{)zg5B~C>m`%x3cKQVdlS`UPc%@S
zfoJ0pzB!6&WiH$-0KhQEwrZnpyg8mTmojp*5Gb@4IfwiaX7B6r02Q9z#8RHn+-=g;
z{@$;>^JV1JDSUrdx<<pi6P~#n<(8@M(5YcF3W3>^ZL!!tI3JCZBX$RbS0nX)i)o+8
zj*`G)ZHauZd2IC=icJFNdvqYgUm|OUU43jx=kRG!!s9`Q?ovB6FH5rB4+sNNpL@`v
zdR~j|pQ@=kervVq8Hj25jy&(15eBI-+m6(iyZI!CpyWH=TC863gz;tzn^xmV>Lx@d
z8x?OK9Z&1{ip5;Uc(R3u&$yXyy^&B|`UE~V_;vWKb$?M1#c-z{ojzv#u-OZ(<{h6U
zhgvLIln+MWezvo{l~5K&x|rlk-HYQ#bM@D*y8pO#)0rcCwS9nbhY3}1`la!OZRD<t
z{8&$!B1?9cPzak?Th%VX&9l4@Q#vT&IFmy>E}MmRwcgQR$oqq_py4%lhz3Tp(Y-0s
z>6DWXjMITQ1xMC5rx1udvf)Q>lNWl#_7%BrIZn6z+&|q}oE`n*T_V#*gGiwUaffw-
zQv;@!GET8tlrVq;{KNbT`g6I#RnOgP<hh#bBs-h(&FM}*1D^JS>eOsc$=7MvL=8bV
zzd$~@+(v*7i8}{5cp!PvDYlsv;noqicBU&*jh9Z2`0jmHk~ss5jkYN}pBZu7zS<c_
zSynf4B9AOa$T|A7BF%1O)Qgrhb?){;H~9kvEN@o+1Q&)bEDBF%T(MF~a9-^--PsXL
z$UH>b8vOoi1<M)UyQ#N7t@x?i37Mt0P{Q^81(t`ll9*E?DOS~1a-`P{w?0Im@*u_A
zj7TJ(psb<{2YJ)m%?4B}K|B~)<33`BJ>*I;2ptOnOliv`;hTo7n-5x1cuJXNq>SoO
zq>nspS*Pi$Hwj@e#Ir<Jh@b7|J<4XOwU~bS37FdA@N9&K^h5<@aaqA!2M-=-hPdrR
zP8%F~J;A+dYffVAm3B^Qb++TNbGJ{7E-f_J<gLn4-d(&tz_}BY=;3zpBG2|(AVITb
z_;8v#ZH;x%s{3u`rvx&JxSPgm`1xsh>3QjM%%|5yt|;u<{KMWtP!a>hZ5^}&zn^y+
z|9quMvL&Q(NBw<_$5`An;#(1|H4Mk-lM|jAx{L*hWB~d^P^9FUZh7ako4<*7z;`Tq
z(vZD#;e1-3D-@n_Bl~wq+vjDhNIYj6#WZ@dnOx~;a#cd??oatoh@0`%WWMvmc1&n+
zN-}?>qd`&xr(E`Moq3#HdgoU*D4Iv|)fZug%THE`Ryas`ZoLrr8IRLGRK?~fET9Cc
z#Q}0Tz7t^<RhDlr-QT{@ibrUj)GD|hH7??OR#N6lJbB1#s}eb9LT;VyN`~~h6#?M3
zNA_<D7owGLHGZcVCn#1^gt#)q4r5(7`V`$!q$i!_jXzT+UQhO&P%ty#Pe3kd2+oVV
z{76PBZ^ko#z<aLE_KO%bc{9ExW`(dBt+RB%mX?_LA8G7-{N{=eS!r`3?@V&@@ugei
zH0m(7J};42axP}IJ^+X|k0fgOvGLfneu+2IqC0b%i`{eMvv_|F4zat0JFTb_?M5hW
zvk$K{V+sDK25p<TbHn>?f%~?ihV0k;sEo9S^Ob8l*{DjIaw#l1&ecoFC%yHRy3mH8
zXs+OPn`h2Rz{E;)#kvr{H`!rEUC)X-yDl|~^e^CQ-=h=(tk}7tO8ttAyNqMiZ+Cb<
z0D9+Ex>!SB6kW>hrlCezobnQxIuSF&dKlTVFCF#$j<{6`o1}Bg*&WyO`L1fW`479w
z`^2Nxy}9(v<e#I}%B;dJXlxgmCE6|gtXa+*6WxOtWhK1|o+6g#hldRoPq69G&A?J(
z@}5=Wv~NqgG54N|ujC`CuFKgT@~$(!YVQ@~E8i?UBddK%eR)N#l742)um3m=4@Gq<
zgXB9d=>oIXn%#3fp6&QjY-lbM${EX7K69zsrbm?R%n{JywIu~gZBD*d%hot*>Eqt8
z;8GD=aKW4FIxK-!;mUc{jIT7})u{CLPxr&jULUAA$(mck;O*|Q6ZE0Fu;wQwyXqOm
zB85K;4beCJ8%cShU4iyP=k&mAK6PJrmtfcP$~e;tET)}FsBGU_h8i3d)~yxh_7&@7
zD~WzrhS=#e?C!Aw&ds`Ts;UosGwjhWU>Gi0+j}DWNP2ZoyhW2{zQW}8j3||3pJXkw
zAZeP9w=hovC;EOUV1fCO^Y@6w_L-fXpZH&B(a0nPe4A#5);;d{$9cn%P^Z@}TM^)}
zbg;Lp+(=4K5V*-pKOP3-4qB!7*Pfxux*OJTiPDMVhn?+1g*dgAm@DXGx}*Dy%%Ym<
z4p+Oc4LW6lmO+iUF}%kq5R<a<OK%-!%#8DJ9{JvkO5r?HtL>LPZJV;kZ+?oBaQk{T
zVm-@Tf7==k6k)@UPf`s|1&LVRdfs;%@WV(0!C1G^Pk}b&bs!qhL3>fz)&pp!zynTM
zqlRYJPC?S?!Wld4)C4T#aiXn5owhv}k<UA{z1*(q=-FRXWQdgzkSC*Iv6}5GR?SUk
z16$<K3fM7UqjSLq$%GS*2_+?!*`dm<dj@(7pYzNRtFGKFvgss@ca1(oxjHZiCNT9>
zBzjeY`e#F?{$}#Zg;k)zkBuhKTc7Q#t#ZCxOfomw`hM_T&1-Zm|84UV1)$#-P-T5w
zI-QZ<^l+*Obz}B(`NDo5hgxgbpJ7PlwXcX=di%mx*<`gEf-Nk1E+SF`qI>>nCqe^c
zb!r)oIW7SHP^v!ZRiqi9q1KW{l3bDa(bus0a!>Neb6wYj4DtrljRM+?O{{c@rc4Xv
z{=ntM2Td{Nlz|J+xKbHGu*Ic&QA-&iwLIP3+}SA_u$d6WmOz|}7vR5y3uD#HMzJrF
z=v>r$2hy`-4VFZPmGaKr)o*n{th`Qh1LxB@#2<a>=w5lo(PH58GfeR(;T-cEvAmd|
z$yRvR4CQ#sr`Hh%9=+^}_h=wODcNN|;`GK8%Tpyicd_sNO(~ohISA<cZJ8wiIoG!I
z*d-j7w_ID-!+CWdP+nU220b<U@wd;iWhF3m8wG_toyL~{auU*49VCQZ1@c=YGd%ef
zw<^aP=br;t|0=?Jj!*!Em=1jaZ%0ShW_rg^3zWeE>94%01Z6(D-Q%gO3xi5&meFD1
zndW(#Z1EXus^)nLf5b&%^pE%*{lAEMp-bcvO{>O&CG?zSVTQ-HevQ472msOb>`r<e
zSIH(CP;Rq@$$lLbuO=&o0LAWu!x=xHBF~TSNPE3tXB5jV$#hcly06ozM!%NAbmhp4
zClgfyoyjK5l7u5p4doWu4B~5!REUwc;w^J&NOw>G|DG2nzshmP(w{^`FdmD*dAPwU
z#)*l%aH%gZw}K)i1I*0jG|P<(h_T)8iTEG!9-D#gMfl6QrK83X^hiQR{!C1MbM7>Y
zNYSPH-%OrQ|2ReW<uDP{dRi{a3KBQ7LkA6J+APvp&PWZsntXmA+exuZ@|vqSS<{=}
zZt9*J+AsSW`8^-ZL~_xEMI3VyW7Yz6>O^a@FDY60G^HPnV`Gach*pM!%?OQ_FIYH3
z5xW*;nPunGu7fRsvc$g@TeTN<WXmX%gdp|Q%QQ^51Nj9Y{}Th%g)Eug<Q115e2<KL
zO>!)N<*<lWxnrga|0nJ~@-COBH0&15l1ncn?t_$Rr-d8_3~<`EBwR`M@4f)3pacI*
zil+BY8z!sl8&pwqNZO~)e#mx>o?0sYiV?i9S<6R1f6|+YI7&Eg@`=hA{r98{2SZ!{
zlHYj!Bt<3q0VH^$7uFOpcb)GY@jsfC5XRY8Y|DvDzHz>cHfrEDbih8^sT?ufyNQpv
z7eaxEMG3dBCnG!RsR?YtRH_A?pE}_STQqKR>0QB60QIp<n;rOt(q%yjt)~}%ejw9s
ztS&3W0M<<^CYc=rfYxutX0XPeON)k*s=bC1%kZq-QcrAvTa(VZpwqUq3o^+U@m#Ko
zX?unV6leHCAza4!V}_4g+g+?YksYz6AsBDilXFjiHP7fXrFuey60mTyh25y7X)f_>
zq=Z>hIwQZj8fVe{hVVn2++8j;_Qs&>bl9qwA-oi|coRi=W*tJHHE<$xGC^0}o`+X%
z;xU8@|Jp;yg<F_a%Ur?6%9ianX7W^c^LtX+L=>YC1}v=0Sn@p=X=1kqSl(^RI!@fd
z;?wAvKwrdUB!t>7<g-|)sbBxuWo%2=_}65teO|R7_QEY}_kb}}UeOb>&Nss8520@9
z1?eQsmN&h7E{|x!aYUwIPozJG>z9H}FC_>W%IEV?Hy+Wgn)xHXM+(#$Fo+IOJtz~V
zt|BAPUio7f*vC0O2{_Tt_L9AR4CIFm@KZ}Wf;mI)uKFLt=%m&hH;utngk6BPpQ&1c
z2l}tslo0(#&<ERCvgq_qjwDChTw0OQAZqg3ug(@6BQ*sv0(Lgaj8n_Ohc=;*@?*4Z
z)l|H6p)@LIo}=QamUZ{l)uvd9@<v>hX^H1#r5Ph?5Q(Lv)S?J~aTxh!a_cn;N6BK@
zX7c*atU^jhJ`sdWFb8HZAh5}NgCp<n=?^?qu(5JHc3ef0r^2AV{;dCT1W*~_%z_Vz
zBSNIh>1SYJZekZMW}>@t?p>{h&^UwMZ>w`(RIkGpDU%CdU~}pr43!N2+22t38-%IP
zkcE|xmw^b{l_~7jt?#6b9`f~%K#hIFE<UI<TmvYizCvcPhJjf|>Opm%-k!#W?Fy_(
zZ@Ggo!id#Q!H>lG=XkVj5w6x>(OL~wiOQAzU&GNd0<A8U;vtMzT9#bH7Ub*}gO6I4
zlVAn;`w)-<<TCK;2=+EST=Cra$yB_rF6qYW8Q{=D++HkG03~y6tSjn$qOh}Z&(P|~
z_Vj{YXbCm-UFUV2zlxVN>V}}6m%zNqn>6T0)h2o=WH{EF@&77<&On2z+#S8U3j4gQ
zxagE4J1MoH29TOTDF66;>1?3|17G$vH*>@Q9rX_j!#nb?^}=4^!<>C!ywH1gI6E>b
zm^O~-EC6<%f@hC=l(6-FE9sSTi8q=0{qZmu+IMYz+MYVyBGJ~uXB3|EBMj}tx3KA)
zYHqeaPZZ)mu0JQ9yL_cT=y&%Q%YEQ@yl};7^SpX;Pw2_3ZEeSjN4-(bcWxxn&ct5B
z2on>}9cCJ->zN@;l8T^<*>1_w3Nk1`zbiCvuN%%FpmHWZ@Y*^Yn0JOBULu8Zp$~6-
z{5Z6lt#Ma^iCQ(0TUzOtfxI$uSYRjUHssub?&Q6DW)pOxU8HbsQmk1sgwp9@MWXc4
z4h2xZmENeh08szIT>`WCqtwBN4ZKHE+VS^Tj&=`|MZICo?8wk=uM1|k1Rb(ym+j?l
zNbUa$a%}b_AhKvg+@`QD`Oy&3d`lGPTOvFql$GIkvEanhZ)quUQTRyH3N&eU>x=lh
zO839fcX~!RJFl_QQa3Smc@<vl*EWp}8)btsUf8cQ`NP49vu7Y6O|(kV*xq|)!esE=
zA#R~$j>w$4K%>cKo?u*m-u;`N9)3>y{BD>v`4iMzH!5BYfx^a)mP69ae*F95*7&BR
zD3i9mtRT}F-Ve6JRmpDiVb^LI?#2tu7X;+Po-!eYuH(EK{luVOF*}qvsiaN0J{ZzD
z>VpMxnPi{t3bv$p6<*V<)d6ikB+AW1$f;g?ZElbkkf^zdYX&@2StN|gw}L*WGi`w~
zcwX4@^TkZI@h~_ILmW%wEHLDX<#Q_0!rH`hNd-!wxaz)ZKrtIUUi8!V+*u*my^($V
z?R?6$4?{2^$DH2hjw?gW0%Yd$9qsrs*Zn*%=WhtFGvMfdW!EQOA4)o_cMo<KkPAY)
zN*wOXYP<LTKx9`Kfo^uGIEYh58i%ODr(?F6V(DiOOpmw*S}aet&Ph_5-oEaGyfZy!
zKAO&zlYVX=mTLA{r(vcRw2jFWi?NL+G<(0kw^ICMa~*Gt$&Tm~yL3tK<okJ5SAT@_
zn!+#^#9KYkGotrVXPs1hkUJBl{F^qXyMF6LArQotD7()Lg#ALtOO)SUN{br-=yGYx
z;<Unxiz=fUH-z<0ilQ<<jsUB3O==!O?to|pq5X#`|MquG#*JK-T7IY+9$xJDedf`9
zX(KMNOwny%$Wk_3+bs38$D)Xh2$qV@@}uZ6$Qc(_jkg6GizC?gv?KcsPP|0>5vvQq
zW~>`3^9hpInT}7&bvcKaTe@cuQkmpfLv*pESU*zw*lx@i*~G~KkTf1y5*=md?pn32
z-swt5X3vSZO|^Z{OuQE89P!d<3%XrqODE!%WNf>$Vuh^xI^r9qt*<}glW(IA$h(TJ
z@)x$mlKUn2F&Rw{mOIsSXDlv`FuTHwMjeH+I;6Zo0EXXQhSurOw{v9HzaE^|BXIFK
zIe0_t1T4ps`>7c(sC6PPKlmQtyvWn_;UMQna&=V=nO3HT<q>__5e+apm?7NEJc#V7
z1ejR)KnW^P#2Mdt)3O9u@1s`r!R&JvDg9a~ALKsMlwKu^sTBtCRjH88K+o_>1Anz(
z=D8yn9#n<s=vj=AWmgZVFMgzRAI+k(?HuhGVEBIV@%lnQ821~x$4z1rChu&;RrY3j
z&YTJjhu1(sr`L-pk-NHnHVqJ@Uce#a1(AvFhU}s}5t{qLxxTrcEtDPtL{w!*JM1}M
z**Uz$eeBZ^7NKu(uK4q7Y6XW%i1J=@dHrk%W!h8s%D(|xmZ1>Da-N4imM-BUNV~;L
zci#I+9HeD?9LVcD^rA{e@q*q-=gcVO1j5FX{Rg&BT;?A*1+z?Uc&_!pIK01h#TOeA
zcxy$|{AnN@{x+|!P=3p=m5h7!!uNFN#nCK0WHI+)sL7gBw3z*aYdv!7&Xlnl>u-@A
zyIop2O7N0!Oka;N>*X4K_O*FUa`KoXV@#@q^MavBZsc!f<^+0%BFPklYe5Lhu;CHO
zLyhh&CG*iT)_Yoj2L-PHxLII+5ziqpY@fBK#cxBxawLsa8w<huu`RzMfX<AgHFBiF
z@7g%mr?OYqCRQwVM~tjNXIiLhQ~FuPs$%R@Uslym2#G&AO@W$l#F8?dA@v;jxL;(r
z20@8fkgKmDSAv!2TwOfm+5lPTyk~}3Id=?NE`4^O*fu^E6p0?}yl2`{)lO3x*jLys
zcHDXuj`mwvWL~<3pH_fDhhKb&xqVHv++WitVQKCFr*~cEW-wUhXsgN|@N~VW#IKoV
z_T&z2w>pC5F$S2{YE^)!Ga-}`_yVi6lEbP6DKHN=r&7uj{IvLwg0Si{DEX)3#{#+I
z0-VvDwhJBo0wBS~o(QnauI%CfS$gC(>~yw4b=9t1v?GP;DP{>rE8^QofRihs`jwq%
z>PgWjnOpC|0*%8!-PHq)ih~dQPMu@JT80!~%JtAR`}~zVK4$cyYhW()w-6c(%7)A4
zf8%yQMZBU$YJsjPZFihOg>cuP4WaY)%Ip0Vm!Rdld;UhznLcvDQnSn;l|E{>9G-Zx
zbUczM<N|0zI?}tOBP3XphC^~vGp5DIf<fw2_f2ga{mjHS91*+F5InER9}0~#5}&05
zZ&6$iLHoh#oH~+~5J=<dbxYpeawYeDSP-j-4yYcsRkABrbv`vb{^~)V_WQszVcPF!
zEw#N+>rs7|-}>_fEFph0hccxRv^fU)_a5Nm)66bqas8~j06NA*AV3<1*$!L4L7B?W
zl$o6oySvfs*>`|ea)i?q+F3Po46m%^*E9=GX~=t~9OV8<*53*8lWNuDmMbMQ535Uo
zYWl@?d%Yo<f;<7zxm?uHGsj)HWy9?^wvu~jG1}xH1X7CT<6V#2M24JC8_n5>b~pm7
z0pU0|i8T%i)rEZf$_`I}8a5}MJH>PqS<=h{z&Vgx<}`0J+gJG9g`Gu)02SY$V<!gs
zf%=j43rZGCf;N>any<s2F&3Et>?rqunC}4|T9b|WeARnNE0O&Ngk%9;BV3q(aa|9P
zRU;l970iC`(;zI=33`h1o`tPbSJ8f|LHcjn`FYW=z64NOz-Tg+IvV&{<H6-Nck}`e
zn;u=&0FfazqPGC^nNF4E&v{U0T}x^RW)*45DxWJ$EyHy_t^Jy@NTyoplPsi%13AHp
zK~4J^ed=pWAn2CYtv!&|N@nbHAeB-X1^{2_xE%=jT_jhND-6QrJAx@7<)*<jL7tic
z(dvBPG1SZTx$^lUkDbj@SDEbvAAKmu3DPW+hiMK%V>OHc)rC5BYZ6VSm*1OB`<u%=
z&JzmRB!|xQhco<NWK}eV5hbpf(&~{lpwt)$JC`vM>ok-Loi+-Umok}iEW7!-C#b6m
z7-kM2a+FU}w|dtulek}0J~<F^i&yW;(K|2?*~ayHR-*s()u)F8`<ftG>MV1d#oMaW
zMUa%%$iLI2bf$<Piblw2*qB#(AaO*WnNx)-V+K;(5LatR0nfb{1xZ<;Xn2(|R+d!7
z_Z+A?o-Lg>8=J{*UX@X`%uyuUrF<y9x2{G4s2(q1$$_9k>`Jz3-fCCav2KB~qaTF!
z7);e4_RUgEt<pgbmR8+}T&}7MG0Mi6p<H4*9DUg|xY_`S^se>PI5A;3plBbpq?>JS
z)gZ8e6`QPyp1TA!Da9a`pZ=?4wGTr?rMdqWZhSfR=W31{`vz&1!@G(Ll$7nxPUx6{
zTB_`)8Pd7MMi<9Y-i{&^PVc2mtdwV1vJ!4~_n6KPRl1V~y|eI0MHU43Fa|9=L-lnx
zY_)zPo)Aa5l+pZ~mRZ+w4nj~S$boR;J;&8|#gx@6-vG*_7myJd+8*gBBA+;HIS1xL
zu$mXo_br0tq=b~GBC+%sOEh)!A<Yt-iya>^yRaD)zh4CuPw~4Sa}77G|7(3TmUI=w
zjar}@H}X(t2xu*}H}!POY0mT$A%YUN&xKX%`cn<5dJz}3q_OmekpV)t8Y7*Aw>gjU
zK^A`sLi7j~(JG%v^7Mi|sh^d*Td61%8nP!O?e3NzX1@4wSxy7$yY17HKRM4Py7G@(
z`k-2(1dJ6vJvR<~iZJu6{PN+-_3X)$ZXjaWju%=;zoK2aJkRi<^n%q%tx;;2vf2*M
z>P9i;*@b6vw1QY6=A0bh$wWl)XRFd}3cT)GBQIqj1rst117F_~|GKMuATLUGCQ~qj
zn#dl<y5iG3VxcA!HVeJX9G>I0X47u*X$WtXz682Z9Z+HKj2$Ew0fCeih>`Nb&Z~3P
zATb4lj{VjI(^`MpVyK<Pylj~?euu7Qh5#lQ0J}@*F0$$!)pUuybYJPy*TPNf9Mv)F
zyA(boIiM%WQwZURHTvl{LRkihiO`CECE;NXZN`|{L$A%}*uW3?<~06kztfYr{J!He
z_9;LPj{)L+d6bmLPjS-AWkC}6H4WN$ilEz6f!dA2&6O-l`5n`@#IP4M$m{c4_M(s>
z+&EKau*rAu`Q`}3ESFDfQ*aa&Y;P=W#hddeZNW2d+f~MR9^B2kF+9u`{M)C}gxw3R
zl|j<dv8K7(i@>kREVo=;CF;H6rzRj8Ax7mohdX_>_|Yo$cbw4|(JF`qM|{WEa31Z^
zc}(?LZ)`Crk~Qu!za>;H$aNCd$7rYfi?gTQ+|II@u(8E!#+vQd#oH764+uRuTtegr
zPUSVlCVkk0q4trOGhA;*lNO!?1he*v8IeV19a~1-YA;Fg_7oyx<-sylGRvq;7klsg
ze&!vduMYir98{<Ug^*n(uM6R{#Yeb)fM=Whxz3w^dly1RGTr{l$!vO#_tY}G9Ku$S
zLbgMaqjCkQk>l@O&z3kxu4z|nVAHH=Lqseqw3ZxHr8i7=WAN`Sta_ujFoqW!Aps?p
z0NV){XVI<lOr>ItES8!ZAkJ6DQex$WmrKX#{kJ}+4PI$fYpo#3HbdpgaYJh@U2gRF
zT}zuQXvnrtWq{ipCx!rt=wL~Sh=}}Bun>7U$YhVyx5*u$q}P<<J(eQt4+6vuhnoE~
zxE3l6lkd^H_vQ9^&47Q3oMUyZ9_L@XslEj8`}%dJCk^1A$W6y~X6d@%Nb<5aHHn1-
zs`F6RCT5l;34y9`_BA3FZ=O4aoseA_c~*W;{-HtLGeufpsO8m{*y&ySHJ5m@93>){
zTmC*L9__Gv?D+UzQ?UI)F_uV$m0=sr<PopTNqmrkqL~b@RV8KxL7-8|YDFD><g|ho
zpjfA*pTiQRv<M+n5R$zhWBcT8zhEztpMmVAsHj}O;60>IUep)NA^IVuroQB9%^tah
zpBFuXe!spK^c4R4Q#myfuN`u7UD5X0=`@U9mNmeVVNdvsIA*>|xDk(1i&uPS;Q9p4
zmj}8aJNcBW3j#hkITok=YZ(fzSgU*HLW9C806+bJ#&BYj$j6{NFQB(x-9WO(^sc;A
z3G#MCO$qG1?|0XHkKRJlerHH#;KA!Y<t!mD_D6c%E@v<ssXW72ReT)Kl%<r39kCcl
zK|dWToQ2izw2I%20JO<22sHV`%rIcST}5Q@2f?vzSOj+2)>P}9gTl@&JC41>=EP-6
zUjxD&Rt85X1VH~fQpe-tzS}|adAu=tqUNZ#ygQyKgehR@t?{Ee9n4_OP-KRq6ps^8
z$T;+w<uditpXr&D(p0OMLVcVbu4)8OcZ;Zi43Cmx`kd||bb`%;3WI{*P>JjbchWWq
zy^~V)VbC?p(rVi2{1E0?>g_|9#LuN2tOX!UWq6)a@fTRR|DdFoNex3m$fg-2LreRG
zQckVcRLLC>jK5-UT$#909u=*Vbo~giRRmOx=SIoS6^wuseo5weQOOf;st(T%wh^<j
zcR2Ykk8+%se8#M4$wgCXbwQF>e7zSy(^+^AAtk}kY7t#$Re6e)SBH@&D&-w%CkW+^
zuiRvgQ>UMgPA|Qvb6usIlZVp&9BAltDQ=yli#kdl(~K#z@I>#Ya8F)MAH*i+PQkg{
z9prCGqr4zm#xeW8lor)0)#Y4@{6WMF)mw7L8_Z^+1?HWd!e=3~>Le;B@J^wtzu-ck
zv3wB=q{IrAzzE&k{;WLIPmh1fYn6>ct;@_;EZw<#1JG@WY~A7}B0?@e!8%*9yIwD&
z>=Q#tOA+Dh^B%PWh;d7je&zM>09C+62B|b4*?g|FJ`wL(cGutowhjR~bRNKw$*GJ$
z>pscvW17A%H=7}RUO+^2eTw}Nz_!UIxRInGt=YDHct0i-b9OHf9lz?q-~d_3ErxC^
z%e~%wf+PQm+X02fh~`xa|Kryrsx-&izU2ZN6H_e)Lx?S`r+f2LsN5(b3_1C`sMhdH
zQzxCB6Xn*mTw5)Hl5qq!G3i@U#K&VbKN(aaDP&A&IY!KU5lMe8Xi~8k&=GAR;{lyb
znuQh`@p!-p>@mmd5u3pl4;5My<;OJc|7K{>-zm&icr(2j56eDxSY%=CEU^O(fYGKe
zvgetG+EID%o3kJ`Fr*SSsGJgAN!qii(nF97Z+A9$ldGSLAuz5(_xI>f^MaDCol^pF
zki=iCm~0W<^?5YuyQJ=tJe0J$r!X5Oqi^@)S0feA;4sEt@`&QCO4mF1>+>e3yi95t
zmI=OfR{=+wHt?&HTp_7M7C1-6Wv2);;yY)%v*QPWcRg|nG!#ZJ%{^*A1s>I3kSqBV
z&B<n4UQ;KCL@r6*L6iY)nWFnaDeP3bIVzJ;pTeKzAR=vt2&zw;4e0EQm^^EG|GE8G
zNwisO%!uJW@8Wn!oGzNZ5JRc$>f7I}vCn_+u2^Ag-IIfjzg!#XBzcc0(9r}H!AZoh
zRNtO=ydA8;fScDyK|J^L;BsCR*}1|#>jHmV)Uou4Oq+_ux=2JX{;d1Fe6|*UklziV
zbEy$;3SJ>W8q(SRL?3qWOt`L1Aj{zdaV!>+u8BSvR7<y#b)HU+KO@cTXAhW^ayd8&
zec1#_TFHnnTEgK3^(Bk8Y)!SBN#}MnjzYKMa{IB)Lf5EQW>DVHuiREoR$fHj)I9eT
zH90+8U0v>k4LwM`jwdYvrSGQ-Q*ke{n)(pVd9oTG^V*@W4z!PK3;Xzf^Npf9Bsz_S
za4rd`W><x9+yN$HC^G;J!fjnhB<O9jG`rerCq@pE*qW{g%!BmPvLjXP*_hvfy5$`A
z1(4x$WMQnqajp;u<j=EX=AX%>N<uW3^LmM@=h_9xi$A0$dPH;ay*a0LYOW9yf^l^D
zxzcSQLK+QKrzMyHWKW+~KoBvLK|sE2UT-er7#O{`&J{FH*W$|(RU&Wi6b!{*+f`^C
z78qKYEI(%bD!`jVaR15eL`d7O%ytUNY|Z3D`(666D`w(Vnzy@#&+3Hv{0)|b-WeGS
zktw=Y`&5259wYOCknC*^=sSCas&Sl-%1!qI^p}jyO+2|pXQr8_%;dZemr7KL{oO3R
zULvuw=HyeC=;Ku!B@4BawYuRP<XUX`DlGopS{Zfz@BMhp<V8v8{ka$GDz9JowFMw8
zHlf<T!XOm#aoV$Lwa;?up*|6d)_B37lq}F@IIOdSgOZh~L^-7?<^d=1sqsh7OttIg
zWdoWtzpq?$e~=Iv(_&lX1H$%(dgmejPYLqOf-<67g7LCgEuGX;I-q^qY1`Haihg<%
z`bmiVVV#_ij95iLWQ|p!nF4x9Zb55toV>n&j{Roytk4i!T(%paB>iDX)Ks0xdtO5F
zPUpOaY%SQVy&V-7>UR40WWUW&!DbC=0|;#u_a7z=AQiWQ1U0#3#EdF=Dw3ty1`Ic1
zAAUQZ#^C`~iH#muYy3PP{9(GQ!m82d5IKz-d1s<KRH@1W!R&{TxAp5PURO4B5Siao
zMCP|tz2NAt*w}Uk{zp_#4;*#D`@KM?)dvUYEGP;KUY)(!XPy!p-g2h1_QM8HWdl@3
z(BJ)#-{*Xz#%`09JimrJ=yHlon>o4_s0Hg-3}19RQp;M7xBwh(^I1nb<^FAriB?|<
z(zDxJ!@G`0j~P*~CU+%+;Bte1YHG-|%Z;u%433mvAxnp}L#F-eD5u9d7A6i)kR*4g
zKG&!Lz%=#A<_q0o8wc7~44)j@Zg77nydkjGp4(|V3<&vjF@`o496x=V-!pt#&M}a8
z?*n$9yJEgIJ#uD8jDEIbct5^&TE6Pe2c^<^MT;vO`045LghM>|dCON<FJU<qM_ELF
zyXl5%92C^dTx=p@zAI@BZ_e9mxm#u?eW=odZackQu@V;DJT4;cVg<ICHitEEpTz9P
zmGN|xq3WI}<2-z`rKCva*!LT;k>B?2YadB{!AD#$f=bnX?wC<>RoP}upzltdoay#*
zBtiTk(YAnC!G+2n?C|f<O05&DoES<Y6+L*B7MOhbV$rA1#?MTPMm<*pu}adoND_J2
zIICH3W?gh4+P}{6C~qHf>1ikVYMpOL$M%ERo7My13}ikR*pwphqu@KQ=CHoI4ZEuR
z602bI$(LeOQLi&B!?m&Aq=O!5epHvoV<(FPUE$jqpqBhX=@cluhowXj8!j)iOZ@hH
z*t?%6Z$DGQM@4ls)_P6j9aP*$yvPUA5Bx^m_72^>^m7lB{i|R<kx2s5r8ZZ|)xT0D
z!06zM&Fq@?c<STeqa*k9q5a<Az29|yUaYJpC_=uG5S5kl_0W-TiakWrJEvf`H^Aku
zb@Zzo-n-o2|B3zt-y}NvDdx`$9H9Vy8SU#Owg-B#=>yploF!xWJ8SrL11B(4CLhp#
zfSmU_&h*?vXlCR<*GnJZe(bwK-Fn6#1-_<P%}@YMqW}Ds|342Tm^ea1af1x)O8m4}
zEm0qrb4YCODou!#)1{@sch>*&`b|8%GQj6{r4za3MR}#yX~?C%Nqjovdx#3vZ=&O0
zUBC%-BB7pUOB?j(gTF2dXu-kI)V(;TjU=+AZu4ehzjKIR*Yx(v35-8NIZm?I0+^2D
z=gbfM&rkf%OZ{^}o7fTAv~}vFjX!^^P(os`H_P%%7ZGfp?r-?~KTQwe9SwPGSwq{L
zzeF>1<~@J}kZ?rCR7aI)Hlv$s<i`%Rfg|WY`q-TY?m?oVG>z+_{kNVxT>xDqI5U7*
zd5b#{g@fWvRPL`!H#twd){fc4++Vj6N*q@6^_kkg_fG%SYxkNVO2$^pQ}mAfdTa-Y
zsLk}hUaSA!Pa*AQ|Fu25tiUW^uBfU~kL}-jJAa>%|K#5e5m_m^qhY@{065x*YRt3E
z{>{Vv-j)CA-v7yK`A1se&u9G>1~vF8JFA=h7iNSU2Ui+7G9UXrK=O+gaWi#A=l{=T
z_U}F3Uu)sd4~HHnhN%}$e!{<gmuwmFA=$iP`+uKL<Hdu3>khAU5ZrUhp$D(|lSj_t
z|H-@g$BX(mZX>jkc-=#55tzTi?MNgLjJU{M%6<RFU;bY{^5jU?$B4b)mRATnrgwAo
zq22%G75<YiIYUfI<dpC3jRMLb9toP2_62)0;r=fd-QG3AU-Mc9717BZ9<jaUW+F#i
zBRG|J|Alc4COPm7jvsEC+S@qB#D}kC+w>d!`;T9!>;teHJ$ZSEp>J=5#S~G(SElyx
zAIH@FhtDOC811xIyIRq|4v_0$)bDrgP3m5o)qnm<Wmk!%o7=EK)?f45yo_N=oS!iP
zv2X9h`;Q;VK9Ya$O!+4Z?0@;rP@=`fApx~L^d~Q!_<UBHT5bN-0s9ZD?4Ja_y`Q$J
z!u>Dj|G56^nT8%Bt`T1mKd%2mkirtr)r-!WqJ!zG(z%r~kLROw${pDo0Ls=hTNN0t
zvxaE~$&Jx5wen2*R-kg09#`2%4CS!lNQMvmzuz6v?3>k-95_=m4AS#~gwtGs{_q^A
z3!mwfUT)}p`?En8Qcq*lhC{bt0jLT~XQPX)RSRu|$8X}>2s`th{m?!7e$HNRsKOCy
z4|cnHwbP0{0rzV4SRXXLH3kY)70;4Nw9GL<5|8ZZ*q>$p;iCVCzjj>@-pQxTJmp59
zfO`wl)UCFSLwbvcJy;6|^*NkdI41i#Z%HnGI@S-9F9@1o*k7Bh9QOtvys<P<jL0tg
zR<<^CAD;0o!Wp|&cmlul8#TAqy!W&KM~PSaHR#8sfB4$}@C+3_48M!!0RQDVSC9Z$
zcCVtMWo%Ic;|%9@IvDvkKHidA=?Ex$E1-9;(KNnyeQ``r!q&nuU#Ma{s-!#OB?I(l
zQWT}wNARt-Jn@?9gT~ahu-86d;UNr@Hczq+D*p{j{D)TvVOEfsGANXMFVijGn#+$E
z|GpZ%W>`F@nPS6^(OT5&2UP;ELDl!o)j4YzfMDm4m8IQ2Ua_190@Q|K?#tkTFXmY_
zXt!mZ6-2u-ZyU?$d{KSS+pt6~TiSglokeJS^{adR>g?*k@)YQw#dnvEH#aMFhf+W+
z??igT_+?ox;@un_JRG%`;r{1A?4ug|F5EdRXJ9+A&8%xXIePnQv&Ym~jCzXAGj;cB
z(-8efIMO1bVan{+K-K=n#^|jTD4z&(fDFgQ3bbcgcbxlt1)v}kDYr+(#C}j~Sp9{n
z(z>zRUyWw2>_ze~4~RQBpY_|%|0P8I8$m6U4Ax28lW=XP(y2ODtHnh5ESEvI)x5Y$
z*Uwh?jEVT-TkL)1vnn<v*toaijoGXSJsh+a6@W$TP$%Mc!jo8Z&7t$byU-BW>q%JR
zTq`ZYpbGu~xkP^vuddZZQ>^3Yjg8FjQ};7wj+<(MFy(amJa{PVRPUOuHuc-;c9WNt
zShGtw<Q2`%IqmY@NxJ^beR%^a>j%@_nfYL^)kn#6-pDlGJ{ZHANfdM?ucjUo|9Pz8
zwMcfq?Fua3L)>wOg_hlcZVg8PAHG6ttDA_^$I=${6fIdwOeMWe<k$s*FgH`TsE2mg
z(-wICWDU^?wg$k@z84WWUbp2=q(LvZd-5XZ^c<VS7&3vy2nXkayV>en=J5c0^+P*U
zK41gdy_cH{z{K+N$~z*AiWY>pEE=^L^Iyn0zMq7ndc1_ze~{9TBSya}#xo{c*gE()
zSAr5HZ|b8au`Cb3maM0PW5X|--deNIK>Nv4G3n$di<F7$m#^gvxo;+!twGns%(DhQ
z`*;yckLOZCc1G7?LAC$2PDZ$^E`&A0Xc(k;I@SK0x?`+1KwASPXY1IPmXd6-1ZF|K
zM3s@6>8QGD@4~yQ+xrgK8bk49^+!jV=DV8SBP*PoB28q}Y$MXqg7=@PM2WUaYnQfV
z=dabrj{@umy+T#<RclrHK+GMfA1*L|zcSt5O?1IHHbHcxk`kX2fV$ZEnKe<w&9OS&
zUN3C5e!<Aoot*2IM;(ix8QqG`ZlQDT3JleO$q5lgTeG~nI?Y4w#13S;*i_<jW}}An
z8vImz;&;dCe;g}M*b|fU(mBN_-F)cHakN|-x7h_V*1i}fgJ*6TY3gyg2dddFHoUBz
zv+nQu<Hy&r)f;E@a9EqcOx5A4^G)v}RxuixcxhUH#LRH@FpEf87vTA?E&9o%wgU?1
zTd*EmvmywMQ!8k{?ulx1q@JChX9ag%NU_&}%@o(|i18{TA<ND`reXId&PIX^wJ<vi
z$I7Eu&~qW)v&yp%kXr3V7G&>`l$#OC$D8g!ql>_3nT8muqy~_$Otsoc+@Ybbt}9c<
zgJo+0qHEDh6aDPP!{O=XK$u&%zM{=Q<7(`xo&MC%ULx}TFBm5t|K|a2FBdbBhF5TD
zSn7uQ^SF4ic5$bfkyY!#vY;SlDRGth)>|OGyEo9IIE%yj=$C^(uqAPILc332c&6@5
zClZw_2H<D$#(MyIDH)nTw^H<$7!3eg&03l3ZMU}V&x$QHw-4D`GykBp@s2LLdNpd$
zy*qYp>6HBQzDa?QzOxZ1BQQgHEhTi%yD>(fR%Q*<Iz;aldl}#%kD+d-*yv+iH-3im
z4=*~pHH6#ox~)#$Q|D5BxUv^#@zT1*R=GF%tG)~ux%4|Cv~m)*fG+bavcz|bklsxd
zG;3)Qcbu{^jj?-b-B-}75W;qk6WDcw;gtByqNA#ktumSxILc@d>pXE7l0w3FmrUl;
zr$PbH_X^JkiOjsKa^D`y*nSiiYd8LOZUU&^PNfJQob8{+H6?&6XcnaMYUO-PmcHBz
zeqD1#{<VUmiE2b`;+GS|=SvaQ{$GghfyBJ=lL+_QWKtihO<HENSeQ)mU@f2wUeY_8
zS)JA1bd5Q^%W?7dsk2MDMk@x(q|Mq>ZaKsUv5O4p4B3IrO5?`TY;eD=y^Kspb+v=X
z2sXeSyr=F@#Ok*0&g2)y>w@0(G`^sGUfRvP$!e{4>}Xs8WAPApY}E(lUpYX&?y$Rp
zy94~kojV?|@z0GUtmr%Sf#PByH+lf=BX!v!$}^5HR(x|moyhROK%Hu&A#g3L#k;`I
zJE~5XTN5f==JMyH+_alfmD{sv;Qfu!>7=!eBn%w3d^G5Aq+4WqV<J=Ce|0W@oL8sE
zmplI9E-H7_m}x!X)a%cjkIi7z*23B#$cyx~KICm_zdP1nP2f5&a)C%q9w$a!g>&|Q
z%ijJ)TK=y?&81=}0N!p9&J2{jJgw041y`%LgT8pBhJ2&?*`IRMfw%dn95QNF1wm_|
zFIVxv8a0Dt*aq2|in9#?y~_6=H@Yy2w8(0w;VN)9T00g|Y2L0-zTI|naH274*hp0+
zW|9C%J+pwtn?f6V)jSj6In4%=0yQMp^mdtv{sUm;O*9_T2mgd4JbK&w68U;!YrSxc
zT70+}zEG@4<=^sWet(upe-b~%-0$cy>(BlPCM1E{tTWv%Y<{zk)zkm-!3GdnWZd~|
zZ#5q$rI}==wq-HKRqQeaYMilYmQqiI-aQB~Jh0l2Y)MPmCAxzZYZm*U+j0Pf?{$_}
z?C_+#PJ=CM%@Nt3q5p-DBLG_>uZQ}1=K#12z7Gk?m(VFxS_)%NL;Ed;1QlYT8QF1)
zlt4H@rnBR^l7VhbwCiW#*L(NVy0}jl8f$`=+6Is_-c-9ZCn&<J37ZWU-bl2=V4$-R
zJ^fS!8VP9QQ+8VwE1%n(9xLJos}_(qPjHD07@k%LDys3L+R~8OF!>;qs@uJzmyL3d
z7Bao{y;iV1EsfW8*S*+%5NV*jIGR%CSx<?Kl$<i39?Va{v}Y=+mS^jir`Frpujv;#
zx1K7Vowju%3ZQLa%u;l$BYwCZX+D(bS7<(1*Mzy_N9X4(5=CUs&51a>V6pep|Mw7p
zCJtB^wOF2V8#U!p%|l7KmiVmBb~i)0!rRC#dIv`d&KrfA#ltq7|A)P=46ABg+g;XD
zKnxI2KtKhh5fLN=6h#Ci3_1mo?(T&OC`bqbl2aO`yTKr&yGy#6^aLhza-LzVz0cWu
zoxRs${W#ZkzJKJHW4z;ipS+*@b}hLYV+>=?S+}}0Ont&HXM%b5?OlK&G4M<eVaQQ@
zBWwkz{NeaibqJFHPNGZ!IH=J(DqULuQB2UAEV(k6A%NDK7D8+|@hN`RiQLthp0=pa
z)to+|o%#Ivth)E#7Rk=8`5G0bTbrOSX#{NdTuL@`f%8Otl<|Du07YhbTDnanf9IG7
zRjTwr5&LsDBsza2kC?^T$Y`~{VLwH{Q9Y&We6uO%hv#3QPF*Nzt9mK5ptGep>ieMJ
zN#hbiE%b&{d#-1?4LJr(cVLd)P)5qBmynG4L?#<>D2+=@_Cf|2{(5PU*41LIO+a<H
z=M>j`?=7G0Jka)QY8T>oG>kH>&o<~t7Ry<4SISP&#$pF_1sySY3xW<+CBfe<g{vpW
zok*U6G}G1!oPd16r>AQCeU?o^;jbHt(WRyos#dScn=YVIa)xhs_Kt{p$I$4uzGku+
z^^pqXKNtjseYclL9uphK_xsS-e-Zls!JmX8HU4@>(*T1W4`L0a-1l+=LZC^K-!=G#
z!gi<3*`bdEi$O-ejk}*8558h5l;8B~u)-px_2Sp-DrH8Y&Z{kA>kCh8=d$IJx7PuY
z)=JK<Y$OWJePM5kG}(L`ww;p>EyAw&?RV;~z^<5LGtZya_zI|h_|D5X^g3X+1ujMd
z8f$&wlW5}rizI%Hqc~Gs8>0;@sz%M9{VI%HFS0&dNKRMsNlv%1)&?1sOM3o->)nbw
z-5qHqmlkYCm+R6q0A|P}DtJI~+i*!sCF{|PQf}8M+LO^<`wj{lo#wZB>1gz=1$+vr
zh~M(I{GEN}X9?#2ZtMTuZ!aNay`ku+xObvpVUmN`l|BvGjwdG1z2s_oX`g~rRS>J2
z$5O93U&Mhc0%vHo&{|1DdGTW9($h0Xe^~f8&1=9vG#ED2-oCnAR=aWGe0OU8zyz8K
z%-Ibr)_6TdDXr|uDTonWL?-3pUmjA}z+r~w0*E+P)6wq$U#yfJj^lB`t##R4A7ANj
zf^tZ{lI28&(M~QgWp_0#hi#wmhF+*#iek&Ry%qsPpw7iu)kraqBiY#AT*>b9xn4yH
z)m1`38hF^Y!|Mc_!R!^I98l|ut6Snb1Zj`IIwYWRA@tS%nB@7ZMF6^4qy}J(R`UwR
z%yl*-+_A569^8s@G_LsaiZk70TU*<B@$GfjF5`i!TQ6zmyL`yfGHm9RljTO470?Oc
zVLcT!f%mChJ1(FUON*@gCxO>iMo38?GXU{p35beymWnl<zyjpD(!pweMyPyqVq$%)
zO$KWXgb@4pk$mbRy^5$k&I7*(vX^&8VLh8`)E&%yb3sWYQo)U!MMzC&a~U__3uPar
zrL*oho=U=M#e9><jwJPlj{9#uQfQ>*_ZM0gqhKq3DZ4&Ul-39>Pi=4EjSs$noK70@
z0gAhBf(sE}P1^+9@XSPm8hY-8WM189B#~ZWjx<Dy8z>Hq%+^|zwS2qw${8fJ%t7q7
z@^S<WU;n$^_9uSkRu6jOA`^uao&y0e0n~`UyF|Uid-UijgZYJW;YxF1jqEA|b+yks
z+doVdRv7#k!e*VaeM(2I6yU0Tz1AAa(A?g}xoiv{G*m2)GVUqqafa{%A=ys3^RBIb
zlJJ0Hkx?NT`*!)oJ<j-A7R&j;&Q!I?K9ll+Dna}+*E!6fW0#43XFbjdV)FIwjp}o0
zv$N^tc|^>pN!N97&?%2om5*D))>SCZmon@tFpq7B;I3=rPkz!D1zJjkvIXyzxe*Ex
z+d;Rdzp8jjM{e`@o)WC}AU-wXlBSSeCgr@YB<yq@#kBDiLe}g`Z}LKZq&By;hDM`l
zSyZpPksz*&@UiT4XKdoyTt}V7*q7tOE8Vf$bD5di#v^08DL`yuqO$mA->*lqd?N+K
z=3>p<XB1QyhE|{s1N9g@?sPQbl|w}lGih-_54an4>!rnza&N4z>&?ciHuZW`%U{mn
zGt-URzZi6+jjG!XK^e@s;L!`I(B+rqrP_(oJetj4pXWi)CL3RrYuKZkEMK@qp=uXx
zJ>NNSf^xBvLZh3-Qe#~st7~1e;E9V#$FdC+|DyWxf!DipZX!JOacb{+AG*9JD;|IV
z+J2k!Z<e-M4ec7Z@l6^ooAGLL^Msh}C#Qcs;?muCb>&X76_Dr_=-tI^l8#pQeb}=@
zM5PB>0UfCdLl)zW#)e%fnH0L^nh+qETch<IQN&b2{Wt-H6FBVv(O{-Z_!Uh0jfeY1
zy-t`5vuqD%d2?hT$O+7RcV=J^yIL>OF!%GLoy^~v3F9{IoZ|}yo`oSs`GP0R-x#fB
z^V2l)uRrzZTy7Ld)f@hl_i*%<qb2^TBk(p3tb?oQ`Q*x$30xnASckQs9iqWzLH*`M
zN`ZVWQLIsefg`R%VIIhFS25TwPf5Qon6Re^T)`6##i!w^%%6k5yLgE`i00IsIqkVL
ztv{rFR?IUB?Tfk%tX<n6Z1gR$fnwXcg*05$n~NVy`_Vyws!`6ZOTP8&ieBH}$o!o4
z2h7hdrCsXwmAyG-0t;-euES@OEj}JFpZ%VJ>LH<)a>UBt&~4a6LRlvay_#~)M0S%=
z`<GYifa&kX<FMy^-%(6qS7%`?Nx{z{jfzsk6v?omAh4MmY1Jxzd@Yz=%^*@BN9Oo1
z&5OW8CsXb@SIfd~yJlLrChw^ADeyR!nf_t@RLlBA$rU4*V?Ewi8^mEc05h9ZCIu}P
zP<)Ir20ionPV#j?h;Q{hfl*&iBJvXL8^0cvHs1!7m_BPCDwSCt%uQ;?Poy&4zj<yI
zHa)&7TxWH<CU~&ap=T`dLeaqEvWtC4b!z1pi@cLjS9?0zbf`cl8EDzQ?AQ;LIrHdU
za}CEX*D)=q%{ngRrVSJ+!%QG}rMWjPJY%oK`X?>bT@YMEU`!*_=Tb~jLU~g-%(*<d
zclRpO-rog6))`~KQaO3yI@8pRKYJ2q`w1zB#YiC`DZkBv7F2<yf_=8Y&Rp{VF;M?A
z^%47b?-lMKp-)1Y;B*_W`|-J+(mp~mCM}rO&4H5?U*}dnlwEz`bi^Cs@<{cBJMGt=
zwM(ypweE%YGY9!(7E%p`HqB_B<nZCXeB*45qtqEOmEHiqs6_I@yBO>!X2^IYm<`CJ
zrGYHnsde7F@6F*PWJ<YbL9KW$ZtsD)oO_8%gC(1-<0*h*&59JT>2}4S^FcDR2gU*4
zESiJArfMtYP)zd23IUeGoB%B;3hwZ$9xQ{|<#s;cSKGz8{r111l87O<7S<#Fajm#)
zh~uUY*AD*)7yAcq<I5AIQvWghR^Six4IP4aA<2*V9ZL2GLHK|1R6TNt(Q(i%Wd9K#
zn89Z)ivHC=?4RS_Ph=ZMek|*?Jft<NGNjJ_y*2v>5Bgtys@pTL1-GBSkofU*{&Gll
z>b<S6&F`EN|HX6v`#<q_K|)d#gV;|vz#T@|-RDb~F8}P${`I%%b{JWMryu!#%5pqH
zTH&W=8+!iwHGi(-mzT&6sVWu;|8Xt40c4S`NF4du!vFWr`)~Kn2dJVpj^<LY2><3P
zFi#*=%r?(05@SRvp<QR<F*mDt_B_`k0__V}_6LW#ZUu+Vy?RE#fW1h_L?6$nkG9%Y
z#|%VF+U7OdzrWx34zuPE8G<cD8#-&`H*QXDUEP1^7~Qqse%Z4Z`9fA76iXiTrgE8o
z`}P_g)gAzLFuuF-^ACRi%m4n1P7}C>AqKB}`rBtHPQpi|tfc?)%lD7?OIJPyA`$?l
zLhk&7G8>)h!_+}_?{okCJ^k}DfBP>b0@$)%;tb#K>1`I_A%&zA0o}p>ZFT<K_1|vq
zf5!3}6(9Be!`uiN=~Sclns_lC|Hpd&xhwwmiyJp9JS_23D&OxfOfh@!C$i3z{FZ-t
zp#T2HuZf;GmL_}Lwld<!jarbx_a?9T&;HrF`@V<1{a27Y9Mkv#5Tg2ik*wq3-+Ti2
z|NGneu_OO+51RAj#~?{Wr+0i?KsRf3I$_l_n`j`oJ9p*Em5HWEs_-j)tbjt#ZN&ca
z*VlN@Uc=%KpWKN?>(a}7`K@Pf!KhCRT=g#W%<5%Cm0W{DvmfuM-aW5P^ZjYAjgv5*
zO!E&32_aDE*8EHyqd!^|WXSng^5@omFELs76ASQ<=lS{D|NN7bj1M{JGH*WN#+qj=
zV`F276citd693#*Y_eJfpSCwMAJvRZHJ3TNM-|uXVu$V7o6Nqrw6O$AkUmKuEdrWM
zY;azS-qHO0yz~ArXU)LD!4WVUFKMa$@rnBqfctNa0=qv<ZN1av;yJyGlYQ-N$^Npi
zOAL=)c5WCI413&#0(O#et}^r)7>E^bOIWDgl|WtqhXC2TpN30bgpNS&woAZo?j`Y(
z+DicpOE98eSr1F5k#9-?B-2VS)Va_6=XL&hy?;GS%vm2+r`tvYmq=qCj#g#jw`RqB
zfRZ@TpyRUQ83MVa+aC#EKtk!Y%@a!X?Gz;K-@7?XxVeW2hQxgUDN;SBl&#gfI^B{c
zHLKT`AjP2gf{A1|d$i}!%bnG>jk%Q<Eji+W8*(_1zp<H5Ql?h~JONL@%#UXYx`ix_
zgiC?QU~7CPJsgvUa4Ifc7g{de`sXlMaI<crA-3igm1rq3Pm-Db{h(j_ZW8?QI{fR(
z{O>>cz(MC9aVA1gSNcvkKlgd(O&y@V<)!2?I04dY&(}JWsXCJ7yd(AkzV?JW%l2L>
zo!j5{isl+2z3U0GZSlS2<ZSBHFdX8el>N98`uen%lMUXLL=;s4@rC*W0kz8u>4QD9
zk^f>I{`=!}?Dqa(is$};futQ4?{E1i=f*5J%!=ZEC60lq{meo5x`C3rRntAr_#?{e
zyt2+jN)H3dBt?&loA!r$_(VA7d3Nj|>)7~sWs|*qrd>^dBCo5<HZQafaMOuz@-?rs
zDwXgCOcMT+N&M5MPnK_g02C>>4Q>wbTWdiXO#3r2&vRv<%YnTYD<LgS-?Z|SEP#xS
zBW^fE6{IUQ?hSQ+`xH$!5=P1lf2T&3qRYV(<CP#jtF<&DnyJ?^@};3c>M6yEU7b*i
zL-czHfpo$f*+3uy8vD2*>@GJP17&W~_x`j=vd5p2k?0H)292t5Nq+kzS*HCGgo?Ls
zkS_;UH3^Hcs)cQ1CRfFFcP2frk-YKWejxSv#90dqLQm!gtD5dNm7scW*Hs_zZGSwV
zbbGRgs3wlcgXx5`ygs>3%%6S<|F9aGr^y*9qx@;}{QVzzXu4ZPap^X!ceKndN*Yan
zUv=w4W1fuk&Kw-F(VCGRoClqEb;6U`{b{58hwh6%Bov)Z*-9E8dTQpre5K>u_dT^J
z>=v_!a4%U2<u0D-?J^-NhhFrhl-mU&I^7JG^xq!W(Cs%(_gqa<Hn+ci$~x`g_K1QG
z+=L7FFs*#Q@GkE3+wqo{fZC2krvA-8aoGRZ$UY#4z%)oFu|DvxKjuG~KSd_E97|=w
z@!g#H-?y8r5=4&=f+H`<?B=NczD}C)aJiHdKtlabcl^go^B+9GH5~}&WR+}cukONE
z{A1DGf=D2;yJtkXtGMO&CkqmV*z^CVO{bJ4_2!}wd3`vl(*!fCAqG?DlE#Hl72eno
z-VvWQ${6-&$&yQE6}#v2k44|bE@hN~ovviC&>U}hXM1}k#|F*S_?#uJ<b8Xv#+`_h
zeYS(_scit=JGs8frQ{n&xr>kb#}<{1f>bA~ofRVO%cq32Zdxt$>lCJfo*zN--|_*9
z4aoKPvs0!uzqg*XGhUraQp%QpAqaUPi9Gk;aR@WQAoG1hpn6&LjJ}O@`O3&P5j$h%
zL0HO9?{EEnQg`u%d^VJhSluKE6>f)>Eu&j9K@^C5R!8&`nT4gL_DDt3XxkF0)>Gmu
zFTr7pW;a~%1Nc@jFQ|-!)7aY!i-D}~s6zRcoU$&+$Se)*xJ2Ylx9j&MX_UKU<^flm
za|vd!IMYgB9SF^@0vpgN=pS?3{|d5B&zDB4t8Lp7M1e3j))>2fH&HtBQXdW~;+*;;
z6&t`xs#Ur+TQ$+Z;|Extn~+g?<w_j}I_c2CA+yiKvB2L2`AYyoD62i9i>j;&Hz7IA
zZxlM%l)$Q(L07edDPMwy)U7t3E7Fq#FavKCRu#c#InpL`p`x8>C~n1Mph(K7XgZ;8
z!0$=qdBez!%}GvRnbvE|GtM#SU}hO5%d9mx&ipqRm}|Gdx&(9FfR1FET5%On`m_bZ
ztnJI;bLz}CzX^q#xzp!-?HAr*ilXL8>1OTCHKbM0a5SC+<YTlhk`0_Eri#O?_gkj(
zj;3Uf#F6^?g>pSU@xBX?IUCq>H`-)>3sI*$j^ikx6I|8E$T1k;Hz`}o>$abalzi~!
zimAFPkPvV_`tnt)=_vok*Mi}M@L1sOtc+@i5)?2g9-n}^xQe%+q{tEWqKyDvkV1)t
zR!ZokX}KW#`k=Po>dM-cffK?w-V5yIbFEtQFu@pCupDL>1H^j_jhm3l`IhNMo<f&m
zO)@93t8=G9)LcY!j5^*|<atxDc>!}E>#u{>3Yn8HI()7SP^;PY#8>3ixM-Mt+~l;V
zc&^oi)v&r7(SeyG`Fu*gin&hVZ#g_0C}eAExI?Kw-Pc8MeZVpOjexC5?^Zy$Dy8n)
zyh>7H)+aI{J9H`U#8j*nP&LFie$|i>A}gLNGE9($mz9+ewSO<Q<(#?sGy_G5^4dIR
z(2sugt!7O_gU_fR-+7Ott}cbfKzKH4x8P3E_KW9sz#Hm<p|Yiq2WemPPv|J9p3+^N
z4t#eX7|m0xLGe&}X^M2`CA?pX_ghoV(dJwFiNU=kuo0I!1<*G~tE31!5a{9P>R{<;
zX0+eyUVLz$iC?TAUxI98C`iv0+oI)X)NN)51!?S8Gn3>~dzn>&#z*=725Wf&Dkc8o
zRCh0`4v#L4j;3asRuWX74%f#`sF;cZ0Rk7Qj!<E$#W?@YFCVWTq^0&e?P6zCER}eY
z%f{&HYV%X%MdqY?_)u25R?9q(h=^FV6dxv>R5QE2oiNMZQgAo+B-i6RssMWr{pz_*
zaN4oo-24;4g<AuVpAe9quh3vGV?6JIx8K@WJm>dPV4)=0zrr53RrwXWAceMGXk}n8
zU#`{bh|#&TWnlrAabH?5FrUtj^%debDaHBT=>u#RQ(D3H@~S0C_u`}_wh}t-CrQiS
zoZQ)(6xN;s2I_a%s_x8|Jmcb3%N96t`-iuQu+`G=SCYXKRe_&9DhF%_L-id8e6CbM
z%i;CrHh?L_iaS#;p|I<M0_**{=x(dFhLK7N_2<}yLJ(;^i4qdd=^8f2d~kE`be!kz
zsvzznzKv#xKE5xl{0taECUSPgW3H}K(FNnd;aqDPv|Q)m<)d8GffbHA12)QFF**Si
z_|?5lTKJsHTC&4ZV;{N#)wlrpcKvPC0QX`PZ;C>?TpsgfbK1Wl3VVA8ys!=lTe9qB
z)oAg+1oKvc>O@a`+oZtUNf|+`(F0(F#i=S6d_vgDiswr1E2lg9(JW1A`-uS<>=IWf
zoS(}>Ms4+z=I9b2k;%IwOhK$rFz+ic`X$zvImb&k%7x!oc>PU%>7$p`G_EnSk-+6#
z-6BREHE7sTWc~6q#%5wOyXh)v^=V71twIor<8-Q!gu>BU{R+@gSDD)Mb0TV~gH$V>
z1$qMsQVykJegj<B_Z`LIhPxAWn?y#VRwjij_ucS_!yq<}ccNQo51Hs^vRh?WnfYyI
z9wg0wy^g80pNtA0loYujv^_Nn0*JS^Ht|@`ibB_|`wq@E8h8@jHNj%pK190cNWbaO
zoxUZMORzm2uo_j;eWoaT9*5Q0mJIVzk$F?ZI&NpxwK}@;PxcpNxbCbL?YL7^2-*%s
zs-v7{^vxS`yT}bN(}|>7lc#Nvmrsl?*|}b2p_58T{B_^oa57&rK@s>)j1HLuAPR+?
zmFJoZE$JT~5<g{zTQhH^m6lGIBvJrAYub@g%%Ie4uHN8T<vas9BXZ|PUa%7z!>jnu
zH$1DN92bJrDGn<zQhNChiIccwh_@w#3Za}PdNvwNUGD3>gp!k3wiHiee>ji!W2A<M
zi`dUXzlTWNex_$qYckT7ou}NB#_3`sepG21r(#-u&X?ao>Evg;Am#;#404s?`#$eH
zFU9mE%J$JKj%e&`>pG-^!dm96NpXDFfzM>p{F|>&nhjW2R@H+6JzZ?o_>BKBE$3Na
zr43k$x@>>XVc=a`-raH+oXGsj^0HQVYTnCt_Y)H^!l=u9(4h@c7ha!go^qafH@y}g
zqDJG~sGOJfL<c&LnLSlh@%hLEnB7+4q&9%wTM~4<>+v#MGqZ}ok?fr-I6oGM2og%7
zDGtXdDkW>}E4aRku<7SnjEAECm*oRYOc0+bFKW6hZ$@H-p97&^NxPYQ%#HKWdk}#x
z{ribkewGt)ezf*uuk4Jb&P}h~aCPNfpYGu*Wj~qLoTi4gbFP0wqR{M=Eyd-D*KG__
z(~1;yn4>|L7PF2GCz~eRisZL$o%JYJCg=Bmy@Ya(B2Z)Ot~m(ITIB*8Z&y1}P4g50
z{CMc#+{bpMdOSoeF9mhWX9RI|j`M}Om-X6{9!!HLbmbjyFR=OW8_BGO>%ea(%^J9;
zv(I3Jj~%4WF*+hDNpf*%KELfO!3V_x&4*hXpH`au2uQ0EyGVslCxO1}b~?w5>%+q(
zvuUeEnj6<!goYdpjac85)A7J6PXP<x5^Te&h2r@zdC4bdY3!y<85+mS9MLuPn=f36
zy`e9!!jOFLjNspp+Pi5Xv9}XbFo30D#Hf0>^oTbgDB}dJ5%1_Yg5sR^=Fq}6_QhiY
zo?<>nxg>Po2EIk}ei$EE`ttc`2)}m_fr8#po>YAV=Q-e=r3x&Mx~H|{h%OW>5j0WV
zVii_>2++nBi<QSp?^%=Au|u?!`_RQ4rP3m2eFe6rP736iO#u+>v{w1PBhU98<!6L`
zxI)T~(PuK6)BKmEh3DIIa6dzUX%;ActGn1g>NlTF<pkB$dtI^+6wrGb{i5!mf0No}
zD!S)ELwn(7XWz&hZ9g@JWHL%woxdT2I0UIe+5S2r2=8S=FEQlx7}VX7$se*;n9KNl
zB;JE%dp_DT2Cbw^PANzr()}n<Dpo!<jMIFi0tuD2oTNNhoB%%9qCcCO^*~A97(~0g
zJUx#z<S2nuc|ULlE_EGTkl9D$6-?tecii@9$%PqUezJdUT=1z)M(ET9YFE|X1wUtO
zRi$g;<x+JZirZdF;qpEpciE_&G3>GlHBu4;@?JVFb%?jN>Ac2<>y@&z)v?-sf|R8)
zd<?T&;*~LO$5^y;MfSbF^EaGW*fh=uC15?a?7rf$qY=W9kv1XE=(p#GT`R61oI|-R
zfQLTpxD{G28(6k+w#X>oc*4@+YgyMrPtng+K3o_Rn2sx0_F`#mGQ6ZZoQQJqB5&Z4
ztd@F0U{XBld+9~kWdmv$Vq=!)fDTht$>w8Vm!jf?s9~hkcBrAf2NrE~{BHWA&Inkf
z8%Kps>h3J1<e*s6iufH+E)EWYtFOdHUJfSeOgQ7#u2h&}`nkUGXsmqQcl5by`MUB}
zApqauP@M+vDUNpK8xL0mmC;&N%X`D|A-5`qJ!!%^=LciOA|gbaMWDd14V*g~49O|y
z6G{FCZ}e#Y`}zoOtS*fX(Q7iKgGJ#<ZFlV@jUfMg3Q&)60>A!hkzT>4wJzf4d%9Eu
zg(RPlHBPl9cJFrqg#M$m^L=?QAbE+i+*-iWp1p7((daF!0bsi>w9I14y%BStYg#<o
z$h({r+d2zpDd5A4it|iIuWrcB<?m$u;*E1$AO!`)#}0xc@vmC+i|4%>^z4TTfBL!{
zJe79!t-ieZEJdjbpxBM6%c~P%SRZsmZS+A1C|7L69P~Iy%F+6#1^>MS^yk0$x`QO=
zn>@%mSaE^5iK(;cBcILGD-ikkdE3=_$}|)0f+aJw9ORp<`1<i_EB0p;v+4koGA(fr
zpRN|E6|XOCz2Rg?qZ6i!hD?BSbC!vrv&XSXaAe+mv{hHbnTs0{_ED$Z!VXm?y*k%6
z``un!$-bDUU{yQ@MC|p?IOz8fBt|+}DCc(_7po}5HL`S?eDVL-f^Kq^M$_6TrWedc
zIkwJ%1Go_BByqT4p-9V^f<v8J#kA)P>Gs8$AO-DY-_val2lkyg?<B-Yd0FxCYYhNw
zlMLAOFd%{MAhY6RXSk^s3w!z1QrE!)6t8*Fan9kvY+5kK8Jh93zrSCvH|gQym$rjD
zbUYw_PLc{5m8hi#4Roz?5btl{e|~xY<*;X{A~mEk>K<q&s=*kTnz{K75z(6RW!2%C
z<TS5vlLDdCY|J3GVhF$FC$dKL>oNMHguha!yfAZ5L^&`^^DcB-NfT3Xdr@dmo`S*!
z%jIg|kiB#Si$li%$CP>BY1=9fDwC5?knjdLA${Az+Lh`PM0^{Q!l>u>0Ysi^+1?^n
zoti)N3JIic3myF)yxh~Phb)?n9aqONT?&!UkZH*)0vpDYC(JA56vWVNGEF&BBFDB?
z7fypvo#Mox80w`T5Q!zA0MZmbRiNX!%1;n`a;>*K7D8b6Dv+ZdFmG|Eh{L26P4x1v
z<+QcVt~3d7{5nv~N*9B~<6Q@7nNP&{_tUN|*O^bDkGxpnD1or74HXML=j2CndRjtI
zjeSc(0F}0;AicZ<iGNwk-;2io`HR=|vIuVu!8z44b;fld!NB*Wyh+`$$`NWn(}i%<
zzr5lQO&{73TDi*ix*YgnMNJl3Z%6r1@?|xrm=uk7@~#(*wmKS~RXuYm5zJ`Sm*eMJ
zIRihq;VCqzRcz-@5>c?e%patrdU}x93o#8%=$+Z8nLB$9#&scS!c}ZN*YsKyl_|9+
zjg6w!P^lOUMqV5Qzf`amta8cFaSDC3T1e0_0p;z%La!Z#OBAlm>$CP9b4^S1AoixW
zI$M6?aK!BeHT%tR^SXvBI#IN}vx~R;6YqqQGzqR)Ie{dr`<<ba0zBZrLkeww<Z)k8
zFs*gz&)N8mUU^)(y6op#0ZGTB8S=xAHz1BYXMbgxO*z-(G_FxtSeeK4`2BJm50D6-
z#td*>Y(pn0Xn2#esiXzS1*fMNz}`<fwpVl?*?!gs&y6_={-j^8@hIQ<i3Rv)vz2jg
zujo@U=KIZ0pw5whwa?5wt{7Ny>1}%K6Yn%ZP84vkR7QY}hHC4Jg_z8z0~3vr;X=Z>
zw&;SH8N=3DZnCtCAY#e8SwX5j*UcGEI3QqWMs4v0eaRYXePkC<R$3*O3?96j4_JH(
z`8d~mhzvSeDAQz>M?d>ry<}3jmIoCG<pgD|j#$V1H&8xP3dOHQmsgfy=R@8Jm=2ck
zCO4g08q0WCXFQZ~H`Z>orCMv&IFIRpE=VhxZ)a9N+Dk4mL#L0eDEC09E9HBBmVUNl
z_8z!#VmbW)+jfkKmf4?Num59>>WCgN+Ld2=#tNaj1=e<UD|`crjBUN7LO52+%LWe&
z>ZnW$gwhIU-sec?FAR(>x#E*$aR3;ve0%-rNReTB%`--NG9IY%Ot~&Gw4@pLZ5aCv
zwDBMnyjSTZVd|6P<D#R#uC>jMy~QWTYH*m-fRhtHioI}#_*+aF>5Lf^AdOmFYd1xz
zmhLm-6BAV*iWj^b(Wg#|cZ;})Z}sbRsf`}JfFdcjo|R8Q$3YFE{}{44t60nLC3mKd
zM!4WcK%toFgfGO6!$%V%C{;{LtyNum;@$TW1^o6z$hq+)SL0PKi7nJD_7vAhm|^;h
zgC2*OE+<x?J*Z5*IJK**DsdclP`FG$tZs0GkcVTD;3I#~={`_(@vX3)%EvAUj>LF#
z_)78g#NDg|u2{$;@C<m^AMWef;M+4lOAA!;O|HYvR(|dMb7yZ<?)UOwqDM&<VZ5c9
zKkUZNe;_0nL!sF>h5{B+WfKhxvdrAM535@h0BwHNYo_}n)k@i|Pq8}gJlpr$B4P5~
z3CPX9HQz~2`Wst(d2)bA3zRnX87n|yixP%iSj-9F6r`QLNSBI%T26I4)BPBi&mMKe
zJdC}=F``6mX3rQTE!wU<ebmUJ3@C??Z$)U58^<MPO}AF{IdOgZEG4KO<<u$Vb^s-P
z2s^=eGRB|wz5jMT$SK|}mTyQ>Ds_l9i{$3JqP?p+F$;%(gpWps-d!+lyij>><C;9+
z8W5E&=vlU$t+*NdiA;V_y3XQ+B21d`9f@W^P6Tux7!I(Ev8ho~8D+SnC={<7(5PW{
zwf<owZv+67u-exD<(+bF>wY*giuX-D%_Yc=rF}gBt@mr=(9ljnqCVltanVu-s$28m
zM=>MyQM>69F`m!RY>9azh^<Zv2qfj>;|uk7kJEyR6LZ8HGk3y#hS`Z{(25Mlnsn?x
zlp?rS90Dv9;C5n72G+E2Yn>{N<oXP|dGKpz-1saftANZJ!RLU;AV~_H>PK%8O+H96
zzje!#O7@B;iQEg=nSjGilHyN)hg-irW0}3SemCt*x0L;5;hWB^QjO$bT%$PZkIE<M
z?IDtT+!$6mcQa1pE5(U7tCbYyu+QVUHs(z+&(%F?@kEVP&B)VcoJH;lFGG^%zr82N
zWuPeY`oNle9F_I1Zb^c1aa6`qd!fYsZZ5Pfkd=rgF-c$|{oYrrqhLIl;-7D&&#In9
z&tuTfXwaVIwyPeYV%-692t|inuADP?kWRxVx|f`}wKW;ZGA6w)pRxRb_+a+C2J8O1
zq@?6_S_pfC4=AYJN}dQ;h!TCnw41ypLt-!K1=my1d-Q_VmMH8x$Vx8Ea}=gAiWZ27
z_7JRmfAAn#Is!oX1KJ4bi~;{fOP*YvL;>af^Zz-7`s3cX{H?ETFEnmKbteW)ihhO&
z$$S5u>`S;*UmiH~p6`Xey~_{$XA#6+e_>0W)U5T*50`fJhGm4YS7+K&SyVqJ|G4#(
z$h}aXgBc6T!oosMS7?HD<u&vcY9{Xn&$-`=;LgTsHk>9%^1n5dP+p(p5NMRJ!t0th
z2fx2G*~0zHpUIY&m(Ok<Pm?WNZ!+4&vt6@4bOIC+YieGMT@coczPiQXCj@|6&lsU^
zF~J9ZW`M$;9<Zz1%{w~)un4=;--8UdTxEclD3_L!i|r!B&H^lhKUtu}cN2C^2du5E
zl5JzjZdPIw(8-L#l7c_n5}7QV<pcdE?(gP}8Y;rWQvP~{`unTPc#OcZl}uxI;riUX
z5Qy{H1uwoI7a2bf-}f_G?*^~KoC=*kiDK*X(%)aoqjLb-r()Pm&i|nofsD@&Y9xP$
zjL(+9M_A*@e%a087b$oW@?+a5CL?Rv(PwDB3qMB3f+WbC?|!V^19|v1$a=Cqd>797
zHPS_0&Tc3Daa{MneLnag#rXsF{+D)rh6nPn56wRRc;|+I{QeZS#<LqxM$&U|)yyMl
zZ+_mW34CAcb5Cp+>-n}7!Sv^-=#Kn2nLJ3%`R+Z>U94xy09>PU0hi1FEvw0BB!U=g
zQe)3AySPs}Fh~UdW02_n#~}TWLHd8vAQ?tpQ&(4KRV}!PQ_6Z|J~qMbGp2se!omWA
zzW3k8CO~3*E3p6mp<|4+V6?|alPGpk^pFijjP%3+m+jvD%q1U2D!sL#O3Miq8M3fh
zhuKsL7~XVw0OU39z3=Y)cFi0<anLJQR1-8JmO$h|H#mDT%JEiPf>c-VxYCa}?JxK_
z`DAb%9kt1pd-r$hxFPif8DU(G#D4J)BGB-ce|OY}AZ2#1;f;b%Fgl~XwK~lS^jb+k
z+<zIApaPDO>kN?af?m}q2#nXUI)D~?CU&7XUFDGc?^7~=_NLr|U~VZRz$^?LkEZ=z
zZwd}yrEHhymEIw*iSGGOcEq~ienr3t7Sl2p_IGl-)l#PUKVv!!?K~Rj++KbVt)~yS
zVKvo!2E^IQdB^;3K(3&x*4N8jGzdissQ(FS4VKu4ng`<ad$PtU!#$ybam$$QufEGp
z5qLF*!wJf*Gh`c!IE;3$ZCl&*BHJP7RKCS1Y9SiF<@hgkb>4`I2aNG&IGpKf9i-q;
zKEd_4@y_YGY<kZGDsH2b+y<SjO(tuinvutnjD`utuhjv`;b~~QX?9|>A$_g}Wr<Uu
z9jeo5{6Lk{jb1ex1VG#=1wpe!|3hUMGdQf*Ip*IT%%4xS6sZtzFIvq1@Y9CkMN^le
z7@Kmubvq#8+B?{kvgn2IO|Gr{R7M340WxO5)~e_%$(N;&ZU<r}t$T#F9ywh$?zIX!
z2$Fx&PD`7Ub@Pe0Qk7eP+XS}C0<&Lk$&rB1B~(}RBZL+}P3Wc5c*mWNv1`*T=`X$X
zhorroF?}4w8jOAcPNY~M(ji4E&XEGPOn&UHEkXf1iDj^<ERM>5(Re_T(G1$~x#ycl
zDF#@drr+Ni#H9KVc>K%(S5OJRkvH&5E1G%FJM#RT{QJ~f@!+`^J^nbg`w#2&)&l-N
zsUNGLw=Q5cO-;IEd#xOEO1FYcL0xWUrtA$bXCAslO*s(|6r6L@x}9fzI`Ut490zK!
zHks<BYMT2Kaa1rQ<2awI5aIf8r&}-9r#7YhEE)7R?WW_8n{PyWCJda0N_T<d*AHaV
z4u#f^R()(j8(*KUZUT7Y{`5W}&<rGpGr&X<K5l(4_STwS>!Xf+g7UNU*3xgE5Ig|I
zS4grefV+?)@VpfBd0^EOsN(4}A}z<Sr6comW!uYj$ZOKx-dL)f5!%^aX@R#&m`4=k
z$`8TV4vq4jKfhhRXWO%RU^{a4c8H*)Uq|^9yUU^)IZSwi)}CJ7>7gCJ&5k#F+N$RS
z(OG=JFyVnob8Mt-<#90@B@<IK{b52GVk+_rQD#p3@_vHr&!hc><k?5bopd#*m+l#X
z!erqpR?_N{<N6%JZqoUs8L^4&$qJ@EFLjRXHGFzahd`kKhPFmQnv?w|qM>y1(xcls
zAYR)oPw$DNb)3sASo}mpBxneB@-P(-D>P|Kd5kpNm0;w8Fq`bW$Y1hAV9|a;+sU%;
z0!&RlRi)Z6Rt$i)xe^hJGlvxll6KrV7t@Mc%~7X?uG(}ztoC}5N0O~PFiePD$k&Jf
zl0o;!JTP|u=Aw&8zp$O`xAN}XICLaZLGG79{%(mltPZeu`3ay41j{1%xuu2Ha#q9J
z>S9aaftT_<X(Y;haIf#n_%O@8e=U}8SmFm<02QzVol^xhZnFTzNpImKz6B$%4?N7=
z{e-p{kMMr|O{78%7zIC*0|G#U83&+H8lbjgc`zB{&F%#(iJ4g@O70Q)usDTm=SBa@
z;v`+(E86r6u9dWWp=j1+n&~9!10@C6^Qsz!q2G{p$E(I^TlEOnj|Uiz0P*Dbx|X#k
zOGIz6t*Z4JH-oeZ0ENtZnJ!cV{wz=koim@usWn!|lJ9>u70wJ}$ezv-X`r<6L;$nz
zShiiNUT!>|X<rQ=>&r1#(HiIx-ae+`jI)M4!VzX%X8#U{ET;}lfx34Mn-7$(k+moT
zsKb33K{-7&?W&hAfZ-veu=9~KqO4p3f<mE1AlPVlb@9VKojkcSj$qq+RNjgIm8GDQ
zRlQd5B>%|=4h~=%4jFoC5q=%umg1A?+m2R7h2z1MRZ5^?4vgJZ7ie9nfpgOOvR?Pa
z-ds~!n5tuK*EKOQsRseeQrmH|km_?sg(K95cDfG6)~)x6NlORm^%scOqlASg>O%vC
zl6R6dM18`zy&H_d7{WkUOcF#Z4$UQcN+9`HAI2?ES~~1Om2j|A@;%pZ;L_6CYo@!|
z@(tZu-bXS4`@qpv{B=9<DZ=mLQV)RRK^I3=R@ID)Ht3df(Ag%{ac4OZp>jzP&QV?e
z=uZS;jyi18niU`y7V6D437TG+eK!<bw*^o)M!moSdZ9WNl<T^Z(`H8qCpxh(6FRA4
zb)BjA>jET3!b?<i_;gnALG7*(bvg0bTOdckC5-C=&wy2%-e8tap$7@QwiDnYbQYGd
z=u(RGvP;aVnBp5pB`5FYY-7rIe2#M*_Tw?`6K!(Fuw^$vM}!`twc3=#y>8ZOZ(}@J
z=y$4&Gb_p6^QODC{d^=jN-xi*I)cndj0{T1ea4SgSP1H(uL?1pDyEg*9A$4dOTf)k
zHwvJsq2+9WKtiTvTF-Bmu0bn`17kY@hie3MgnhuZU%_G4lGDq)pv!U-6xm||V>CTP
zEijjHBh-?E9|esJ;rVl$R1a6DT9!aYvswUMLJEwj>X!{W5$HI@H|w1F4iNaExDZ=+
zIRb@^saU^zfXCUSF9Z3vRohLtt4KV(V>!sCBG}&Ah-GMLYB1i^hUn(ioOTw4_{nOZ
za7Ni-0Sz{kDvpBsq?d7C&-s9iZ#JRF)x{m48dc5FH%4J@R>~E`w@x7VFq}%B(J6p=
zNxJ^EaY45^h!q~0#-DfVV1Rmybq#(m4w$8;;JF+wax&FiuLR7z7Z@OlFuA;8!hPs6
zfwa=C_Xt=idc9^(Ef%DUft4g4vxDn3G+%T(__}CWpX+he*XvJXb`DG?uKmD_Y7^y(
zANgq0pLK)&AQoxkYFC%4r8Hf~3{XvCW<v(c@d@E0ph{WaF5Ww2kDWLFyw*h)ZV68|
zx<zIB^2X6wxs)dQn-9@~>$lOEc}E-QnaFV3Exx@|`ijHP%Quogh%zlh^WziVIa|*P
zpqviPbj7<<NFMfQ<aHwhR`}leV$2|?&D@(D@4M+Glq%M91+}vrY^uX+EwQ5?a2Uzz
z4eg;a^Cb;0+6}2A<LXYs2M|>GiEP1G85D2gkbR{H`8v8#rpjPsjHB)C%NT|}OuAmN
zf`&Z<dts6*($lWoy1Mm7d!&Sj{iP32uU^oOjMOKQfE!slK>!1(;rA1o=uVO!+o>TV
zR=9nn=)4;(OrFLQJy->3bpO|*t{XR^MN773k~4cAhwGH)iWjs%%&U=v2V_<-O-2(3
zrr%Nq^n&SDHv27`q+DeNLGG`zN?hcma=wY$l*_WfLRKBS<WsU*X4v_rs`leS4EW-*
zl1)|TwGKo=ul+26k)pczUKbOX!RQ`!EzhnCle8Dq2nCeT=@%;yZ`DRr@l8gMCPq0J
z05I9Q&>H&thpBll27L7ZGPT%tJVdZx3ufLYw>H0Tl~~S~Sr($l1<Ms#O_SiT7@2)%
z|Kc9Zf<5@!IPO=s4y5L1O_cr-4`E0N|JGW!ExPp5@ZON^@mAhs(;<=Un)9l|zI`U%
zk~<dS?~?82Ubx=E4A}a0sXKEY;hXw!Z}vPa^%XkwR(NEa!@<)|W``*)T%&nv9&QX2
z;m=!|_6wkIc?Yu*b?_~`i5>0HjS@%u*c+<murC@ni6?!^RnSnIxq4*Y+OFTB&)B`J
zrTAjShn$~S0L=msaUVeCD*_ge+Oodo8wB5;<nU7eB1NmI1AB4`fHSUR(IEs)b^zgR
zHKl3dU@67}sH$;mly)>gl7l5D4wO(Y+6)<Y-3tk|dr7?}LBEG$GadkDlY!^OAQK{7
z%RGzL_~_9D=x}Ps)w}VHx}!c<eD9{?1d?$~sj(owb_P193Z3L)0N{&Twuvmh*`;Q~
z)NX<}<b74;75Vugg^FZ{9$a+uqDeEG&+V!Lm~!}C$-Tz|G@p^Ng#iB13Dzw1vH0ze
zd3`3~n=tGYor8yWeFr5ZC@r)(wo2!k7q8!zFde<~#FDW)Z_0_^dgcUT^700%0sBci
z-^)g1r%b8?A2|p!FSkD(%i28sN_Yoof;fqNZ_i0E!*Apt4ZJYb8q9e3nIxPIGI4~E
zFXagxq0Qo0piGs#igE7Q`*%T}=FjJ98PbGf6BF`D)(Xk;sUi*4j}D~}AbFdJJ+aUK
zIZts4*N{Kx#bez2SSW-nZLvM$q4@}4@Yj$~{z|{yeXE`_NyJGml&v&w^xZfb-xPMm
zl*Y7-o86_c&KrPl=SyvIzwKF?ioMY`TZ}He0N`m7ISY%{qM9>Z8u^Cb1_zGz%0z7I
zM4RfDZB|i@yk|+TuV1N6PJhwnfN6A+cCpVfX}JpPvgL>^#c(yz;ITuaDMGrBgoZ5o
z=9j|L)U@?YOyKCVm=6|CK8{l3(!3VoRQoQpiNT%43edGSJvt%XZ`DhAr`|sOHvC21
zldMp(F+!wY>?d>zMf2O839FeJ*XI{Ji6zk&4q`n0?3i$-JjhTPV8Uosaty->8aL3-
z2wDov1Fhc3Dect4%La6+OR*!yN;q)Y^S-ptIX`}8HLR=9_QgiwbPZ%?aJ6SxjOLVW
zzrBJ-T#lJLnez@XCP%G@J7sS@rZRnfYBVlT<^_VorMzNrqUPc7nWqchHGvlrn*#lP
zinBLt7FyTMpsSy0w-j(GpHEmdT6vA~Rq-Qp<#NEx-E2$P5$*z02-5-%m-X*0@9DpE
zAr8F#ZN%HJ&i7r30%h`gUuvu7>(hI%%j_&9X^YEs9Es)Hfmtwy#tT6mk_Ndayxv~|
zk^u~eaxD^efuQDj5P`sIwYk9FN9ZotY|2wM=Q68lS^%GT`^jlUdRyzvfq`OMKcJrs
zxzc8VRe{(oy=;pasIlc!(&^2Z2xPmBvK#I-nU7YHsVIQU9s!wHmeu^bE@JWSEQseH
z@QXu23{L&lIIU5Ln(zQL&JQlAl4LKW$FJv?lQ{&}LvVrdftjsJxTz7y`CmLTJ|KBd
zcVlrlnOZ)lil_D3UoAqXd?S^KN#%fo33ZXs^s`Z}gLqrWO~CNza(S*nfV~0kLpzzx
zC9=gH{dp(u;2xsj!Nf>%KVoP4QtKa?Td2L$-5nzBuWEHiT7(6h?C7;ASSKSbr4Q3w
zWh`A=PEM~xA{YDq*gg})8$N<49%iamEt_<OTp@DL#F`W*pd3-=w^Yr?<)*DIo@dnM
zMP6D{-^5IHThy@;`CvO$v|}gL9RU=s>4`uUEl*~Eku<jL5B1o8f(^_B<rNcZ-N>E`
z$l%1Ca*pz41E@+c&*rlLyo$bJxWuyQMY+)8wO(65){d@mYS-%ESg6v>dTTCJLnMdw
zSR>lP_z9y{cJ`3hl!ETxt*%Jh+GiYh@D36NsMq7}EGe~E1v5VZtEpo(jtH=>UY*`k
zB!9kO&RKHeRlTm91PNn6NQlB?3LpbffxqJ8lN*iQaXMN4eu&POe`~6KClEkb2o*)R
zQI>e9cJeh%HHxGu5DBEQe?)o5Uqc%B@OdXAENh+nf+-&RQ?C!{qMTcwZl(fH_6-A`
zZq29l8^BcT*bf1)`$XXWgY=%OFbRXJ$5rsXbF5>_Kk+`Cx>06<f~_uGhJ@W5wADo+
zljD*?k|SQwXVx0~^2)vF6t}?xqq5D3aTB?Fo;{GJmy`Me_3q_kF`A(1D?@*svZj1s
zQwPdn)1@)9MI&A;BS|FqUzI?!Akud56a>q<(bqhXpfpmf<%2i)0Vd@<BPBf(xc&Q9
zbKRNErNGp9HQ<9gG{$unF1RATKckxlrUnm~170}&mGi|zf5BQK8FsFmX2tX4)2#s<
zX>#&@NR@JQ%X?M%Uco1zY|-*;j6~|C(-FU_x;jU!dg^!%!Tvo7$U}3Nau@y5fFt!6
zFd$#s)~%17Z{zn|=fAo@!+SA%0mcc{?S|cXXBO4<alZq)Bb`>P6I1gg(gRKFqpsRp
zI7F5t5mRzYq@#;5Q3YR1R$6B-;JI0CutQgF4B6B*m~ZNY#ACkAST0miN%ngRNA+C5
z<I7DSvrmCLc{qey_bwNDu+bO3BEWJoZ4tHOLXzL_WO=v@J-BLap|}$|=}AFk%{c20
z6hj#@O;P4mp}J%S-%1@8%VTyB6>EKZwzD&__{g_LH8AV_tVWNSd#ZrZap3Ne>cTH=
z5WI2<v~RJ1n70xlkjO!r_4c+F>kzfp+3))ovo+OX{uN($2e?Kc5-4uI-Z_RB+;=d+
zQ!238-4eUz4LH=GT+uq`sFLiS*AQ+(-m3z6FD}#U<CE@(iIG|$pDj_W2=$FPsg~wI
zqluU!Zq`!Y607S6#1|!93YTkH&Jn0GqVL^%bDbmwMpBQmV}?G`)9GS&aA{4bCOH1o
zU23*!(NDJzOm0CIC04$JBYp+LcFocHb~irWYjv`LV89N<MkOL-meDpXLJMFOyN&Y)
zYQx`G;Ikm={X`_qH~w10S=G8j&b;Ed7;F9zkWp60`U!>EM{Tp87Id&e_=MbhU!O=@
zOn1d4D_#_FiG@g{67nt$M$KWEq3||LFU^xJ7oF?}w4fcNlp$DkdTjWdrOPx_y!*|o
zPa8g>J^UAoL7K)VZa*O-^k6xps3=&>s`_xP0DrbL_(Yojov}<Y&s*sGG7a_9FmiOe
ze7q2RqP8#pr6|{h!kh+enQbn9<6`4XZib=y{=AMXQ=x_ac*(=A=1P<j_iAC>`x8x=
zX`a4vel?9_MY9;KWV+{JniDuY#(1EqbWvor-!Od@A8C8^B_NKX)F~qRUYjQBl-=EI
z9@=5Qg+o)NYEW)k7~TIA5x8zz%FWY;76<g=zO-WY`Fw~TX{GtN0eAPd!Wo9|&3dO3
zs{!v=+b%g#f?F3zS;PZ;`b(a9OS89}+D<LNxjjw#^7SL73-vzS`e+T|;OfR$IVvtc
zuh(I=KK~U5hw4MQ!E$6k@Vr#`V-K`-#qlN2K>RTzZIU=cSl1T<vpn6}O{H3`6dD!x
zWsXP|3vNwmw=N!o5=$9w=C~p!5`Fsb|CRpZp3U(=N3_onI7ODcFRTU>#9Vs4Ir>*u
z>bXK)10`ohV1&uno4qKhId-hs848~gr!y7O)j3W23+_Zd@`2{X$9q;n03Y{;A;~Po
zx7R-MIB%`Kn8af+;ubqzENRbUefgQaJJKD3kVqS@Yqt(Qa34r}2*E_%7Hc}f`q~2N
zvxpx^F;nSA%JCY#gP8#|4E;hX#b#}O1F~59j9AUh#m`6EWaG923Q*4LJ)uoCs!?_$
zFUHrg0EVuBYC)v^Akg%j+$=BuD6gh`^e;N^PBynE9|<>EWIh2t`Sp$?;4ikNTr+7x
zD8QF93zl>}gv26i@u|r`aiSYR&G5p!fN99!?9VZo{-0&#l&%2k=J4&c*LQGW2m`zh
zeEy{@l!wirGli^Nc<ig4PJ7Z6jHO&%-ynTep5W}T{?ZeVH-pIe)+~9$IRf1;<srg)
zAJ;B$*jOl*#syHX4#lVyzpNbH*;a6Xtc&mfcIct!>Cw<h6vx`)*z&b(Vg<eKq`Ovq
zsVWg|=^8mEZ3(ir$wheB3MYR6<HaYJ5-l5jh_INZtw?cZc4Qw7l}GzsCDC0KN^MpR
zu+6D9b)|yD?Dn>epI{82b6GBTjmzOD!cET-P%<T#><l_C&9KBmDeLrENZV_PKBN4W
zU^o^u5u`rfsPdzwJ*R$>#<(}nI|{p?A|LYVr(a%sK$nq5^dQg79fCSB5V)>$?(_0E
z6#*LD=J?IY5Ps<v|7T;@a6nO@KG7fWi$_fKLC~(X-$Ki~D1~mS!qlQUq(!=0U(Tz(
zt*?2kbOvYw0EAl!nTlLeH6$<R9M<QQCK#azX-F@;$zXplz&2Wwi8Ae?Uh~^-NX8}S
zi{rj}!2GRPU!F17JdD+<rl261X3p!ks3XBjvj&t`E=vMTHWoP1b<*x0`16_1_x>9p
z(d!c_{u(zvh-{X#0qA0Am15Q$W^!ttB>=>}&uDGu;FwAIN?JF(zF?}f3~Ns|WZIr3
zCm2ZCbZ2x)(=LL<uKD0jnepcIWR%}ncw}FW(W`ay(T4mA^J-e!eNb6Xqct;jK*J<t
z)g;P=5(eReUCPGu`bMX;eQRF!lo^M=;nRjO-(s{Yqt$QOUqzsLb~603aoC{2kGW%q
z()UmxrBzUOmWt>s#t;@V1VL6$ZMFE(d>z%q)Gh`LURr?=o^v15l<O*o4d-{{G-V>n
z#(=*oIjxXKS}@h@?RBMNFiWS{f#Gl!PA}b>xttOkXMz6u(frGqau!1`9U&A9=(4Jp
z#ML`Mvc#%*QP|@!4N0LSc{O|S9A)lIyHd27J0<sfvB2|ngF5cNxQ&0?B1T8*)9YQ*
z@4UGVD&a)L+|Xg10**rY&lk?@6Ysv}Vh=NT+Oa-7wNC1xoBa^Rn>TQGJ=)?$6wP)B
zf5krH-XvkxAx&EZqfoi$Ahm4L8VsgU0`88*vb#wL%L>J3r48wOK)ywuUa~9^ZNowe
zGfQT`NL&T77MGlfPhFyi;mmc+0~c{2SAd(kFF=a}vuEOF2i|!*;am(|WIVH)Y!Tha
zx#!P6#Qydmo=NoPby=@_H^b=YBy#DVoRtr2eR$oAPU^VPTPyNo)3-U6UDF-ybfapF
zvO=Y@Bm;0!vm;tpK>WO3_i<oNO~g==>1dTtJji+NaTnVh(EBFA@FxgPe@al%A@rxW
zfqFUc!Ncy1hvL0LJ_p(TWiy`iFz+F9!#b!yjMD5d*xX4%sL<@|eA)W_s?)S+ED&hu
z22Z1$*@<Z#+c%)lF|)i@vMIk~*ySMW(p%EAp>`qK5cf<X?6Q8Ge5z*(v&knin}zN(
za_B;#>nr0z&M)6S)$Pr{;<7W2F|OKQuaRdG6vj<+k){nl6B&fX%xiC#!O>;_ZHrF+
zS>fg9M%`x4BVT<79LJ!@vC=zUP{7ONidid`P<XGZM9$&E?Q#U_9{MZfmqzP2QmiZ4
zRoKT_<nOd+Y93XXYA?(#5t?%)6&v6=F}Hq@BrU^WTtdG;DY~U{fn&`dpI$bTSA0uQ
zW0>$GjqAF!-tFh>mT<7M^gcTI2^b%xzIwCBYCbGUNPq>!YyL@lIU~KQ#GU12^$g0j
z_S1o`opomU_pHMB3~?_qjx%dBU6{Ufs97q3K-@$=4cW2V(|d<$(qv&I96}nu-0)kz
z)J#B;NU&)lY4qkJXbqhM8OD{VYQWFNU31%;w$+*O@Wv((S)>+$;@rD_kY4XZznJ%9
zKe+&OSMn*xi0Lm%LMS|jMVH%-TjRIwneI=xURNw?hT1JXc)!kNHxHK8nGQ)9MA6CR
zvYL`TXZBGYW~R=Ae!^;R*IZ9F)x*PJ9#QQnO7|iE9x(_{`U@<%zi*<i8gFgUgLsw$
zcW+Fx-2Ei;K?*jI;a+l){GCGzha$&`O=~m?J^@B}Z0T3O8aPHT%gEVPyAQE6k3e;L
zdE0WiQWtfq$+=i7zJLCW>a?l$z%v#-s-W5st}RIN<Z7q_70RNx#A+3i=rZfdx#got
zwd#VI*!ZuP$<20J%uR7BmDs&{&3N}-XYay?6l;x{L8%1i?aWM7kv#{K6;cDLsdz5V
za2vJXJ}(n$uuXlt;FF4Wl|*=+aeNa?`WKi3*Ucd%B|Vqi<-!3Zh-=l41Zlm@+%@xs
z{ml+U9#$<BvDX%Wz08buUUZu^?({1AMD|1w?_@pF8t;8+VxIGoK?T*VAZk9#+B{+W
z;Te;D{!{B91?rODr%>>Oo!4|hwWriDvBRSeE;kp(bpL$$Y{K5XOloxfpUI#E#VQ%h
znrU+%+}yZ3h5DiI8)IRhcs$w@PZ1G!y0^@^I8FvNC^uv!0Aomo9Uae#!9pvRU&s?K
z(k$>~K}I<s<WE=ZQ!KOqk&QYIHGBPdNE_<TW$41N<h>ldyM~+Bfal@m$ul#?<bo5I
z%|0qcl$G(Tr>g_U|64b`i?_k4sF~7|{a5n#|4efIPpTRti0J*YuUEx>mN)$SS)Wbt
zo>4t>+4o_KSGn1N`LU>h;&_Wn!lkWQklqruNjXfp5q3A-8GGc?NW+y<lTlzd8Xs~^
zm+&}zN-)ZnDs9nV$7Ok;;ss4z8IPI2)qH1zgHf~LzDL^y<}}voGd+@9>$8(f-NopV
zbLs1|hF3eY<XBD#xIF0+5+2C&;S5!)o64`g-Io}3$>j(L4t7CD3N7Kh*~;)vW%6N9
zk#%xQXRM##`TIg!-D`0;*=H>Ki*atxSb(-&ba|pypAX%i-DQ|m0X?n@xGhzb(N;sr
zriBKa@W`2tAnV!AQ^I{A#1k8idD>#y8U{*5+bT7|Y~j`BZ=K7MS0iCx-W^?9qq-vA
zqE)#UPu1BR0LlbgYC_<|fNrx!?0#Zx2TO>LO}_`rSY3#pc&f|zyWc*ny`{k=x~6Z*
z3>7z`1X&oo4&w7^B@`wrFmRk}s7zIlx)JDzgXQo&Ef5E>2aQ_uhXeWXVtzE2bQ`IY
zi#(1X!T3Kc282b0tJ#q#;G~cO$ihPKoy#vj(sXk{)r(03@9_LpFzky}JJ{X<9nw&i
ziF4h-t7GG_iut3^dRsi?uqa;$io(kf)Ja5(xT~6;+tn7idSGk4ROkxNJFmgZK_o(Z
z-C(PfUeG+VfdfXwMURJVPr_lVq&Sn5_1Nnch^VSYye`MG8}>b}4`bt|b!ygD;ZQB0
zYqHYgaK&#X-r1SsVv<iOSljl$zE5ZF4QCY^UA9wp*|@Vmx$S)rOT2lk2TfC|TDiK!
zYes#+yoaA1-tBxjM`KOSs?I9+{=u5v+*nQEEmTvKpy5^gTEG2093Cq;!>U5g!WPDp
zOVcL&+Z<oI=f3@<X>aS$1H}pk{Tc(xJJ0XN#yNZXruq8)zG<ea*6hd0HoxL9FX!i=
z-g?RIi>#k4K_tEMiZBKdfujfKy*!yV(5cqs43asP+c4rOa_cay$!hhf_Gmx-0+BTX
zOl?}EKsp+O%DX-M$z5&!f<};Z1n;ozUIUR~!rlcaOtNQ6l2av{k*1kJvRqB%d&uCN
z;z>6~@<SN21C!63oMobTjFn?BU+P1-#@pZB@3c57xawa$tD^P!a3e~XL#Ouj(iAec
zdv<GUGy#xesyxO;G&Zq1P?Un<FVa~|#kv^9VT_qO=-WucM5m$gD98-3L4hlmioMWk
zI^Z?4Ty5-v7a7adCq#RR6`D1@q10Mypwf02$+Gri<Im6o<|b%uwyO>t+9Sx()Ms^@
zqSU}{u|NQBog4X6X#OX2`?WtXCjXujo-UqnKWU0)*zt^G{Vo5Cy|<35a^2R3m68wz
zk(RJPN(2R@LlF=GMd?!MMw*GFh@g}pBGP36lWry<2-2Z+mox~>NeX=9ap_*`?DL-Q
zyl1cT{<r_}CsTnr?`Pa2u5pcPTq%~Z^SoD(kN8z?jiT0?)i2*#)c1krvR&)<V8UqB
z5<f$v&1Lpf0So%HdFPwRgd&^Btcp!t*kWuUHj?utkAKiPYLVl%#EW5Z6kQuEQPD=N
zdus6y#VRnnCi<r;#dKS&0Ru2x(w2GNC2kTOF|-ISYCrPSV=}EILJ?`N>39tD;wv1;
zubsl^qZ+h-Kz5Vb@6i=JQmKQ{9zG%b5!FghM`=~;D_Cw<jc5MlLs~%yHJ3(%o^jK*
zxUvi-I+2USWCx#I<1+L!?{FHl_Dhm82)<y~E_^X4?9i|-xgSPZ<4<2rrH!RyxMcKh
zYK%+w<g1Bg038Kn&Nr(T>5IFi+K89r-Qn0WpQniyH4OoFSDlEUMyA%h%l>A1q7V6#
zqb$nV{oOn|MpI91r&{@qQ=J!|V7hlv>sEb5wpr<RkHy?p<)QWW!zp;0QcCLTM{!+g
z_Us~?p?*UH^K(AR+AheVveU*)%R(Rnk~3&aMo)UCIT7|tB%c&E0aj+<aW3^{wW8Q2
z<!F9cXx`uBVU+hmKHM}lgYRA5xfjsmCMass>8*t^v7ogRdB~<$Lq>rB8GMex<I}mN
z&9KACihwHmY&#gTJtVgg`+FOeHl@a0!YJ%J%G?Y0J`!|P^eY0-!MHYHKhE&%hkHL4
zPyVY}FKZYcfedBFU4F2n&4XY`qt5q=Qo)iIHzALj+_Tuw9vJ0;V;I<2>bvsBYgNH_
zpnoh{d38Jc9&^Mor%t`cxi0lOOKo~(XQ6M;99m?vmCCJM-0qs;zCoL|Z<+N;XK88}
zGgWhxjXqS!yz|cR&M1DCN9Sn3$wx$uwIo!>7S?KAMj}9;&-E*bEEq^{rGbIla-2(0
zp#b;zfLi(#;Ppz`l1Zc*#6K;hom{7oTU|tKH=jCt)Y@>MXqh#ua>ZZn+%<3y)hE0d
zRNIq0L@T{gnkw~98aG94=(H&jVsy%tZInX*z%P<V*6JFnW#Id~qd*)6x#@ctoO^-;
zKYtFE<T@=@KHRdO?afJ%^B|9Dc)<~Y(`3Cz)T)4NkuHQqu2r^`<<?)|I;6R-j7#I#
zkAou4E-nfwsh9_{Q8<f+1W7O7fwXC5xc(dOQcjX@txn}Je;Fk*-So=~$%+J4i~(T0
zg!AUM)rTR{nkB$k^c-b49}<jMMt2eld(sqXI}*v=`(Vo`M7RFs9BIP8BpCl^pYZ?Z
zKva{xTMr&FR)DV0xfn%0Yf3bQY}vNY+(rYk8r$mmQtyJW16#3E%E*bcHK6MA?skfa
zQnavpNY6HC2R`pPbhNNvkjtF4CWV|qe&<MhgmBBW=|fza<I>lL6eZg+(u5l^Y`o58
z647>J;b-mJ#MQ=ehFy)3oyE7VOsu%DD}_VieYV(Iq|a-!Jt-GjQlTi6#_|$xg%Nf@
z%X520?)~mfo{2Hj1b1cs3W?@<k%fB{mHR7CCL1FMQii7#qf$LFrHEgvn@}mRWVa3R
z<f`5~ub(fkExzS<YkKRvo>6;Pk~CAakJWx8m&O@e^nCq|EmG<;&Ra$5EFgl&&fu2_
zEr_FZ6j@#{Cmt@ryFoLg0Y14PK1((2!zHhA5_3>(EH`ElaJ^BXgXwpD*tU1Mqy2y>
z33hYGt%=6XaMKPHzzSAmSo$S!FCY&aBCaGh-r8BNvEN#ayeUYZl?lkd!qT8yxFgf0
z5UG3;Klfr^)W+g~22f_mp6Ro9+YT1r0;&R=Mp?=qnacifJx&}2&>?dZ(J_E9zTe#f
zo=t}HrOPnPD(lJKQ3)&`e)CS;%`-fpit-$)hwC5iyw9k|n^igYks6qiY=CIuvbO*Z
zoB}{urCr;jtB<=h)N^mkG}O9t8bI{3z)#GXE3h6=*Izq!!q_01IfX$x$%oFwygMU0
z_@e9lZ!W;Q6wGBvjzgJwf}ypLJu>Vog!K@2S(=~bh22LHNFtpQ48@oNQY_`^d9?Ky
zHtS<uTb`eOl0FgndkxF~ah1qFilqPgU#o&CfQEMMo!pFwz@@v>XuWVYB?}JK)OW=S
zmrCr$d>4i>I@t5|grvvA20$r8t4M#R+;YRFW7PYVnA;gSv~EM`9wR1~F=toAT;Tk9
zW#t43>p{%GV(ncob)OSnCNYPOoCuqc3%%ZL)pv%C?HXVs)3#0r#k1=Bo}ZSxN*<m(
z!&L16MX1rP%2SCiY<Od=6eMG$5Hw!GA-dTK*bHj=A7xqE*meH&l)AIR!#&hkAOljG
zBg~<M$4nBFlz_zeP7at<YawE=b4|i!5!6Z3AUH6$NdnQOGtaawafj+DxK_V@3vX{N
zhz}=kzqzqeq68``mkQnX_jc9epe$?zVN*KWXr!y9|H_w0ak3?*$8-l)9=!l)(M@cb
z=X*6hIx&elCnqOa`e;RCgo*^md{0(U{Q28&f)GNQ`Z>R%Y!a`XO-SlgbMDKAs_g*?
z9L}RtXtx>h_UOMHD*kwO-WsrT=<)^dK|U0uX2i7}hV?Sc*@@Mp!VZ&RSbBcH?4nDL
zr5Y&${Okyas8X&4hl6A6F?{=DT5|t6s5Ht0ArP~~9hVR5p4%FM#FH`Y^l=y5DdOjG
znru*PS|<YWY!zyM_k02K&NFT^Nl(Uc3N=ob4%~$l6*5`vf<|Jk+$gDSst<OL;Sto4
z-JTh#tn6^{z!cDuKV`UVmk9C@H4_gqmk(cUCk5y|66hYTbjP_h+llX=Q%#i@yJ)*}
zvnG%R#BX>tYv4SC)iSlaF54ic-BGx1Smk|i6*k|wilO~MHFnkYM$r{~=H}#k<RDxS
z4jT;J#g`BS0|+GXa=V#2MRj?K^jR0I&i?BQq{8y?L{!csjej$lQy93SEyrpPn|lIc
zJ!DlVrC4PMV72KfcI6XMO;K5XsrAqujj-y=RfJ?krjt3CHLR21)LGpz@IR^;lv8LT
z!H@>S%S36Ssivr?SFh+w9&Y8HxNIi{EE{$(mCzzlxX@gX1_y4qLTu~*oMTu&3F3Z%
zJ@Lw)D<SC(sydLFXADjc$a@nwgGVIbqNu|6{5W;Tz^GQioSMM6#kbX<&^8|~FB$s*
zS$X3y#$C3j#B1L(6g4Lb!7L%GiGgheSZ(gyDL#Y{TO;8%(C^&AKPPC_J4&f~_xz|O
z3yMsm-8k2@&4xhy&WAe+=k?3YusQ>XK8pDE&0HgeXh|>6ateaX9-ue6?!1Hb!mH58
zyAJ1ZI21VejqtJ&1XyM#QGgHtgu8Ce%VYI7w(x~b;xS~j7uk*w^jx&+&2|;qy0IFP
zgGX@c4)l15haNaG9whi^FbZXbJy>$02<lf#@yO!QV@g1|o*zRe?#zNpPZ%V7wPfe)
z%8nj7%FGQmyQ(b?X`Qtd6gA*{Xp4rj=en{C4C;dDAuCS}EV5$VB~dH(bvF6KzwBJK
zjX0le)Nl++J5ArFBTOQ901FSFSwBS1a0X0ny)-t<j<ASp3l11*N8z;f9`QjpVY!ea
zT_1SL#_;ySPs@c|<!$=ctrG4$3BVaul)h4CuwIKelRXpJ;>V1qf!5{2qiKy3jXFn<
zsVO1iN`*w>R?{u|g9PJbS5=FB*F6DH?JRS#?aMchm>+`dSYa0KC=}o=)BHYu^u3G&
zIfhRtvlI8rI1tkS-6{nDUoh%NQzerQYqTr3L|>F6I!rgZEubBTuwXb0D#{u00)vAi
zq0isov}2)K=4_o{Em}jJU$Jfq-jigV9YP(y)7%{n@PuusZ5MtdT@E8GlEr6}`0@P;
zBxaQZvhSY!Uqqw->c4~$BOBLzWYq|CVQ1VZULYs9Q>kpc9<*Krj6pE$gI#iKWbJWn
zzoLnAjTN+JP>4E@F=~F*u{mwYZ=bz;*Ns3mSt|80*NjA`1g~bc6sS>iq-$iYmkc=O
zK7{-%6{JQX^t~o<$x=qM@EZlF$vryeIPP`75t!IPB%6SJhAj>hx$ETvNY`2FWXS=P
z`OiBSt@|(0gWv12fvcSc9xt%Z&(#UsB^O+0Gy;v;|JZzxWlhbkc@ua=ybxYe4NOh(
zk<_&u=69}X`WI0Ukbjwl)wQ6rErYB(94&O5``SQkbpbjGIzb!Z_n-pXsqOQ!-tjra
ze8E>}b+Tci(H#CGzuT(O#O50H;nb5<yyf40DGA1wiyaD7IseYaM^|cAT_1dWpLSU3
zOQEfzedUh?*XIINK&>62=ot9GV1+GUH&c=0wJWS5i2-0%L+z|D!4d<NYexWQHfoL4
zTAgY#{m}&4FRz#mE|sNJJb3V+PLc->lZITqy*=jU3xH7MU}@+{BrODW@9Q^i1g-GG
z7+I3p@a1bz1+h)HB}Bn~Li&0I$i46^bR=Du`wN=P)@lQ(x+S{z=JwwF>>&J&Kc2I}
zXnpD;-}bX#h8K7&07$e~t+|nX-2WOz@aMNxrNe@`6Lh}<KSdXwAJ<jflJUg<ypH(i
z@31=yBLrM*zn`;ID)Ow}yN7uG{S|x^B5>1WOcfM=zioeb+kRupNxxtCuT#nY>hk{M
zJI)|G85<6_&i(p4tZv}j<n?X4{r}r<{qG*K)MexdLfjuq{IY$i&k)Cn>Cck?oxAYI
zZ>7jVp4<XDW#ZSFj9&A$BNV#+^?zY;b}5`dz|wA0_aARFY#cd}l_v)d{Q6b@IJ^Ju
z0RHm{f_~@;g5OW^-^TZE<NIfi#`<sL`|B<Hx99uoY5a6N|Mq<UAqV((*!|~l^zX3y
zpK82+hu!~>iu^n5{#Rj_ab2hATiNpDkH>4_Cq0PV60ZekFY_{8MGA-jG04JC*(P)t
z{;mGQ&pcZO*%1Fu*7mMDG|%+T$BNow6R*BkwTF3@v%N6@aDKL}{Bi$liGU(aNs9b)
zqh*hV@lTVz9Vy|$4kmq!F06e$ZKOZTp=1NVVrE9_txo<YtN$OTr+bi|e`h}~-KOzg
zSHXF4&>UO5w$|1ZmXyWbyE9bg+#nvw$>0QILgx+IViFc~6pLkYBl2Y6I9NZC0MTRI
zS(q{CKUmuT_$@%VlS0lpc_uOY3D=AXPe^biEKk}Ql!4dGrt>&{#zP6n$VW&2`62#U
z<^A9P4f#!UcK%$)IkfMnXK9_L=QqNZMnY-P(Q118=c9TEMNCz-&)@!72atlLgKre@
z9Hsfb9b>mN6_zX=(B3@0_)w4#iD^}Dk=pdce~S43?BM_Vw*tm>oC$yUBemn2x@XZf
z*d<0~t4IYLf!R*kEyDrlKv6p>exqhqmtigK`}gnb&c^}I(sQ^}4e9B^5KXx6V^Rf#
zt7o)wA7QOD#0uvv1dER5VW`-ZKd&ziOnn}!Q7yK+$DyB_YSj3mVR_pL<L<l|4uhgi
zEk#BzWeCX>#s+Mo0Fm6*drA89BXyh{g+{fZKei*s$BOXpTPyJ<b+PMgu2Exb-z&>_
z5hsfY1HdGLyv9^jnMB>@_CKaw92-394m66nE@L2=UvmNMhU=MOlmbA-Vx`M$(8^6!
zJ|U?;d_q9AHC}u^r<~|i5QDh(YeCDU2!t%Ls{2+s7sg*hMTG6Yz1U#)V2z8PeFc1c
zfa;Cfy$|vmH$GYE?#RA%+HEbf=&WUT#!CDbTnOV@VGyIJ;IIQjYx{oJ!Op~6DcK_J
zHCw&OwupJ30T2;}l|n227k~i<1Q?j0qsi=riOftbE*#5yL&8&sU9A(#+c9Nwk_c_?
z-ABe6|Fgv&N-;%YITLjX+t_%Q1ClUYEjFC(v(R7iB`cIj0C~E%mSGZn_0D{EuItLF
zgr@r1+Rq=)Dk7XqbtZBjv+pC@(5>ty=n*yheABH$k+#w!1rK?QQbuH(q#EaLm1`Q=
z(qZKO?=Rnf=|_9;ynd8i;WuvOhUt(<coK~J06H1}Ad3p0>utEbPkTO&WZDxxv*$pC
zo}f+dIh7)7LnpVPx?t4|%?I-?UeJa0*nVH$KIN9a_v*pKRK;A^)JVF9G0f4d+Gpu^
zJJiSpg@v>^u8z9xm9(x-O(!shn!A3?7P=-6ozh7F{&F1~RJXoAQc(ARmM-tcl6BYn
zJ0-b?nMLkA9rS#%&{w3fy|Kt8Y1MDUJ@SiX*45oxG!lOD(ILi4+Vi@aDC`^$C_6;z
zmAN#;_T^<t%&v{t_OgOH67lrV^^u>>#rHT!DauRH{QW~?B}IB9zHw$Yz87^*x-5xx
z?#;fPjLE7LgiE2S_U*hTD<JE9o+{^b?*SC53KT{~(<v9rRG1WH)@Bs42}3!}(S@2{
z{uruLczu1LFL=b|CqehURhL2KgNWli-`t*j7m^EpA>>b<_i}{MrRqcF-MxqA1ErBG
z?tQt&#t#<w0pN|p{Qy9Js^Wv1F-&088LqGY<^a3?h)|J?D8<dWVarTIqb5^0ZU@y5
zGm9!~7i}3FkUh?H#EKL#r>cEgKs&D-{10jVzvk=VM3N1wbc#R166=?ok(>=cxDDoE
z;<I>>zuexjDGbEB2ZqBhs~-{3<6r=T_q1H-I%ij=CGD2uHrCZT)Xg&gFcW{RYx(Wz
zR-k!|=|}NumA^V6iuy`y3gO8t+n0#jEV}G&60+ZEc=eCYzk9Xo!-Y+f&fG5C1%J8u
zU&KI_{RIc0<>-YP7XggwVA3YYoUV^4{W0xxD0$}G-9KVYEW`-A8~;ks{O6c3MtaNf
zuq*VFT4GkZqB=`%vs)^94d$wmQggnzTP*X1E!g<e>Qo(n(@QU|Db73JISU?45WUxU
z8?vIi6VmoM;Q8s`gtE$ZHK4f!uB?ssYQDeoKDTEIh-#C?Jn3p)J0Wr5Fm~<QWIL2A
z3lqX-V#6sKwzFS~vR3lM=}yVD#`2FA_^3{gJvr;%8hb0hsPFjC+g=2pusAZA`R}{`
z4lX3hE$RSETjYJd?3zigm|%BrKLd1)gS7ID+m?pxRnnf;83KniDr>r>=+c7qtn@h7
ztI^NTE2mnIoy~AIZH+hl@xu&Lnrky8GBIu7Il=~nG#uw5kM64SvoF870AoOyd@f2#
zedB99+@Sa68`X#E_yKE=D9qGu@F$-a??0zk3Nj}-^{LV|{;K7hIEg===Kqt_YzKJv
zN|)_My<e222NeiRuveT0+Tsd5`mR6o44zy_LKwJ9_sC+$+2qNlh<aDFd`EKby)Q@W
z+SV&hh&|NgH~Ku|<OV(suz%IPrLtpZ_rKRTP3G}d=D#d?I2#VDXS5~u%szmTU((kp
zu;_W|GU9Fk)b*F|a5tf&1-afT;%Uk~u7&=6Jf64!Ql2CljL+iP<LJbpZL_&Mvs<0d
zt{sIvU)*0LcXSyf*59qTLj<3ihZsBD<26aymwgYjvh$nzUuwM0>UTYot7$wf=Ng7B
zR46=>OPx+~ztE#>veiS}yIKpV`OwO^X2Yvl_3rg)Q)POgd%gx;K&4aYTb-KdDnsEu
zWEd1F!&JF@pkC=!WL)6`LjE2>YjOzNPpu9}Q2+GRr!*kb{ygM@J@L0alg~{^mnk?K
zE|}H-6AykEc<`F*OGB1F77lB;zIPXjUSFxNbI56Wskrr&8e=myr<Ojs;!hql%^+xT
zCgSZ40neqOlqWZ$SCjs7O)-zT%w*Rd>~4Ktp$dm~e;BdtK%vrWA#-kM?C|$93f)T<
z1D7q||ArE|l|J8*FeJ7?hLQQ(!JAbWLCcjF&*(=1#anOpH^mzT%zoF6IG4#TPmf>}
zk4`~&&IG&b;_esgfzRb74#CscD#foMY@(Gsk1b$#G<^o;79OvyRbvkQ$s@w<>lsJ`
zYrT#sd+w5Tr=~i$fz1yI<2kui%^H9G9<Q;FgbiUQA5m98KR#x%FN7($v?ak+28Ht!
z9=2!LP8>U`4SbUGuuIVM*fRa=pYgW%IXI(1d5`YkfA*gLWA7y83N26y=ADygFhIpk
z<jOt7@`}sZpDR|(O|@~vBZ~52;?#V}TI%-hhC9}wFIUsNBmX__74wZghi{iWCG96|
zOY*Lg%$KC)G^NU<UGH8N=_qJgYio!~@Ujv61|>rk5xGr!I9RV%sZ|NW-7wq*CT)a?
z5`!YF=QAGk3k*N2NF(gB6nnfep-tOnu@o0B?(Q5qWzrUZwk_Y*R_x_XyQ}ifq`^O<
z%b*=3jy9X;6Y+nh=6~yt-#?33?+_5zbulQlxo$U2<Qi$0T-23Lcm-ldu%YQ}dTW!%
zwtT_P2gXXTB2+=Su)QB{5L|WIw?{`&R?Ue$M4vYwOk~vS&kkrbz9>;V!Xm*96q6TI
zIXT@9t#*VS$!>XX)R{agM$)qyhm4yVKatTIPt=jG0uKWzQc{B7v#3PKvA8#HmRQfL
z=R$HaF%66l^ZtzJuMe|d>Xtj+>dw^TGOQ2E>E3C0o1id+!pRg-nUVbTY70njs!UJj
z$<NFFxBifKhSLp?6Ps0^5!97-&$b>AEUE0rsGEW-G9#`*nCatwBqYwL@v>!wH5#7r
zE@6-D{Cw*!Rp4VzxTL`KJt5*KFH&g9&M26nVz;Hh;(0Dqa=7<{!|J5MY;Q$ehHlQO
z>Z#X)wkN6BlwVvj@7!Eu`G4r8rhn5Tu~%KJ)?<aK7P@AH<Ql&B7zoXMeW!KXq&0q`
zU@zA=hyUTsO=OOuehmUfBybwfgbJFCI*3Q{8ocZwIvmy}8FwBb8qP&#-IT5iV&sJ-
zMaTml2VO0gWmSzkOm0LBd#PNqs^-?--`oEoC*t_<8uPnbr-!$lN;+UCE!lKi-i_w#
zvQKFu<1y}vDc3?3fsj*kx2@wREz~C!ab+A%=0HvPTh9=@;%8vto#bD?t%+S-O;gMT
zhFyvM)YIC@hSLxh?1zwLoDEBQWs|FsT=qZ?YElv!nnY>kjUy9WI~&VU$jlch?RoC^
zs%iFJb<kxug2X%7<1<h%j9OlIb=m(xd=EH+;2nmNxzvB_8veZ31g9Y>x`5*T-8;X>
z3t#sxpArf9`z|gVndO<R&G;Q6Y*Hb13#leJ{V&w9%;1Ur>OB)_e;q;CRe0eHC3nlI
z|2g>aPv1cy4L|B?duwv~@1N}o=Y7n!?%3Zy?yE6y1RaHPeayd%?K_x^4?f=Cw!MSk
zj7I5x6+J%hXuuFZxbQOm9lFjR$KuTeA6}R5)=!@YPx6!+BsKCw4%q*N`_hgiH6n`I
zzmf=_3&>SG>_V#dzmQc#BUy!so%-(+Xh5?6RaBnf-@WC)V7moJU^mEx{e31f2m|Hw
zIdkH_{TO`$fVgw=z6%r6?*d;4jIsDu@{#{>hVke9tqMMltS1iY()e&^_L}pfpZD(;
z0w~{E))zeT>rMZ~etx~8`lbr>o2I^x)pXa<@@U@y;$0Ls9lLUD7zlX`Xlvx$|8xeZ
zJ`K4x>b`&eHs~hRe){yYa7G({4wGI2+1l*6Z!l{%324!^1RD%ay#d_2{C2(Rqp%B|
z#PG=|R`6i_CA@NPyQx3ql<ZS^5TicrS=M{tFApnOmUXb+j;`$K%hSP&;A|PsQYaW+
zH1NPhzJe_aTpBNdB|m&lup9AYSCJ~=7RJ5r@~<BNhdRZKj}XmZfKK~>(2!#U%qyLi
z4uc(@4G1?(1oR+|^nHrpaN*6K`pZ2Jco32~-EY#dW-l(OGMDSTs0~V&wi#X6g}&QB
z$c+4&F3@jKVxPvXTimYQ!<AKj3esf7mri-d{_@rbiD&4x5u)^!25bV+^G~(4@-TgS
z21a;oUd!K!0~tLj>?u3YVm5m2xx0PVVk;H>V-9i_IPajYL8l%)psLM>WrVj8oxGO{
z2{^Hg)FW$0-D~Wmvuz@R$ypl=XRatn_#hKgFqxZ4ji^k93)v1&&L6OpIpA~rWMbAD
z%Ep$4{O}h`0~;e@&mYAZIz_FQdn!O@9GMsv$`#E(?sLGogXGUEA!c=$G8J|3#k^3*
zdR&!knyK{K-|e~lq}z-BqRC-lpjdJl0mWXu41_nHBZTtFd6InTIy7FSp)kQIl~LgM
z*5Q^Jh!T4SW(wE<LJ>mysGu32UX6df&n(y28zin-J;;ei^JCe-0*OLCNG=?}(DVz(
zkg7$#<}2fzWa{D#0uuRB2fFg$GEkv40A@1exoAK6Ic(z@(O;@bd2>9FEsA&u$`0Ko
zML@yhyz?$>@-T!1VLq-up`ZY%gXC(PFc%*5>=W*zqiveq*vHP|2ZjwmhW%U^X7_mh
z1wq#1g|Ot41Qg#-C(@33L6}aa4RPl}#?@hrT7wxib5bFalR933n}UP(J3AkK%V}?^
zV`L9OhB?=5&BT(2NyIS>7}@MA+Eg~4!17z2PVi!g#A4pURHTsD_c4FpY<sW`R!Y3A
z%DvK936FlwQzssAQsr<2qDz7Qi;O~1f1R~rHEoRrDtsv2!RRDT7%7c1THw4RcYKjG
z%=Ms0i$TT1lD3@K!}R>}Ac_eHJg363u-Hvzx$a}nF9_zDe_@N}GxXQ!g^5oE_}5cp
zal=StymuaM{i|ix(%){e8gap~24{Ey!x#g3)E6L7(Ku}aGcFD8v3~)a{SX?QuHP|q
zJ=^X-ytC?SZz4n`P|tH0r%@S$rnM+E|8fni<699rh7{hj#yFmnkQ|v4d|XW*Sn=5a
ztUo;g2N)bzT>I8ivX;b^S;Zy$k?@C)EtBFYZ>h_~GfdV7?u!DU=oefX%JHz5_RM^I
z#YhH_)-5VwRCNWfADOWLb1YIb{XSZ)U|+OyW<Z|d8bl_WM5#0WTvjk90#YwF@5}>q
z0KTVU`mhG$hYc_@rrXeyuAu^x17jc1mDl~aE;vsu(~Y?igsYBL`QQUIe;g?qN4j8U
zKm$gqPdu3Jf<3Ci)C{QuH-Rl%Il$0JIwm0)0on$$?fK@n-veXvoR%3G+#C50@Y1O>
zLv3|`q&5`0ND8qpv0m^PdMf!g^WB*qY&0PGU>{0b_$L~`Itx+zE}mK^lV1LxZLl!9
zgP4hg;jKok>o2*@bpuLF+nDFaujRFZ(kl-<%j?Y+<=sG77a<!Xm1enq2_CB_0n&#7
zzVZv8Z@PVLh8g1H01IHZU`L{>m`3(pX*bZuJtjUI7&oTRI><ZfQhE04)dN0u)a?x!
z$cFSDj1T^y>j*_UbpW!_Jj!8{mvGz)&rivUbr*nLgZ+oBRHR0{4R^;=3%9x)j962{
z8Hzv{lzd$YaG0VQ$k+vzmTd$0#Sy`-62h*VD0Q$Q`r=#4UWf0a(xKDP?Jyr~5bu>K
z{^$hG!dE<8li8=13~qonR$v67nzDndpv5ptoIl?>F$-Tefo%2j&B&puv!KyOF8pBJ
zuj3Ku{tpoc$hRJAHN0r!OMQb2k0yNW-90@BB8$kO?=YL}{E^4Yk0B3b5Wh;JSO)0a
z2(K4umwu{&iSj9CUMt~$gjA_cxCK?R=M-EVJNW<cs<)00^i>0f&vr}nsW0Exf#uor
zHd7!am^Jfw63)5cbxWLRQ8~6#v2KXy5eJxi&jcRsZpf*ZvIh<d;Q=rC<<{D?j@mP7
zF1BDsAsTXx3r!FNg33<5rp=$9fXMkAjILOV&<T%%c$#bzzxM=<^Z`hM=p;QKmXm1o
zx74$E=^|S{&xkuC7(sU%Jw&iP370bpre?<xcP-=df(}_CdZ(|@I;KF#5~gCd+nA51
zwpoh1BZTomST-Te1ahjn(}oM2?`i@bQxeOMf;9Nc5zn0#ZS^bEm$1EirOu;O2Rl#<
zwRc|vW0zrK=ea7hbt~S2-rS)rh(pH;7)dnckJJ97(<Z>7+S&c~)OV29R9Bf$b?_QB
zI*|;z7fK9*R&=&owSHVPQI)8%j*b+$;6x$}>ntL>fs&)enBhJ?ChOjAK9~hVJ&hob
z6Z}le=>j*>3)@bm6#(}s-}zRBSJ-~?LigCWQ|fxiRss8!aoN)aT2V?-=k*%JS$h!=
z`bSye!^lR_Xh$gS(k&W3v*igplY`dm3}_oO^vcvh9goqn40!G4v5fO2x$#ftg`I(*
zj0o?ct$==S`jBW7ymOGl23%z~a_cX3>S$dKGTQU`{WvGer}{ThK>JQnDYfoL54%-a
zC+IrG{&i9-;4`R|8GrO6dHFa?RA+XBQ$)SOWm!Mn2FUxE5Ch90&~u}oo)IxYPqd>X
zfS%s(`VDEZx``L<gBW*^G4`SO`}(RZeT>CJ=5`0W#dLqUnNrAT)VN&7(Pc~FFnY&0
zkT|^{^3s+@Ttg*-Ex3Mtws3x$Fwg9>1MvNW4Td}g+e^3geAktfE*gDig)ui0)cpg8
zB=Lw-#SW4y^@8j}y=y?oz01$mLb3t&<&&YypXq&~g~iG53qQjs!~8_>0~%9>h2kd_
z!*l%F*d2{so7?q@*n(T^M`tVxD>PnZ<&Z4ud4zUAHxtv7;H1SQw_2Ey)q`4d(i%y3
zY`)gB$Wt{E6FjV>(Gv;E?GpvDc8_0d6n&;S9TtnXjS@m(&9c(JTHb;b=3A*KBz}T*
z)i~VROC1}&))kzWyRg?@`HUM5f*~g|BaVCFUo-@&ZFO6@!gZNFjWhG_X?7;oHz++Y
z8|&M1<=u4yCB=nJI6kxsFUSb6ek72A38d+Mk-g-eV{^UFLIR70i@JL5V~9Eqn|yJw
z*q#0nbhiSHObcMk?&Zz6q>3yhC(vRY9#uMQMj3eaeMp|*649Sn)NTNg{m<Za#D^a>
zMsm?+ZPf<pZ2@@B$0A;-LFQrb)vGn<r0oFp%np^I2Icyb>n@bUs#5i0!>D<lbZX3z
zH=tmmpS3XzlNmFY%d|K((A**o`p?z|wc5sT0yhmRv9Di1X2h6f(0XjfGO}>u8|IUQ
zGup?_<nmP?Ji@CrC-cp`LyDG<`_l9FY^2H4#gLqVJn0DmH^EkY{Wv70-T~mI?t$a|
znV|m4;D-r>&L;tInhh>V6+C^Y;2?7M2=h!@!eKV#lTM}ni`$^l!2!Dj>K$4Y^u$rv
z3#x1r<Ktp;vx%Aj3I>z035<DxDKNWGerbf6NCBc6tl|+{*-C<FA=~(c!IF!^U#L0n
zT#z~Y!{gR-`%s3z#xM?;fkr1r;9<oyYFc7t+bSX0S;oo@JX;g{5y&1-foZSv)VP*u
z0L_2c$&yCdJ(@Z5I2lzhx2yU^3rl8T-LrKzzmnw6wifh?Goh0_?z-FI^nyo69X2{x
z6I{Oe`=*1#BYx~X+-EUZ{6PKox<Y>II_~}|OlY*CiXn}!o4lDfvz4KItV@b74m-yU
zODA4Y+FK=5!On*E@4hgzQ9Gfm(;qT?Pp`fT^O$me%_qcXzE*2jEOFo)H;;CH7>Fae
zf*!##-murchb84=kw0&56DS?rw|b@(@Ai$}klWx{WgC&U9GqFvNF#_7jJwTU^@YJO
z#lT}{WggJA6T!VZ-~+Ra@}B#<E|!WOgp)J#8v&H3Gf>+iDOo}y&*h@{o)xukL(Kgg
zcJfMwh=_mE{=zbqPmue}<iWfd%~1VRTQ5oegfA4t9xQ8WSSPJ|-SXhm$gC6S!SB1?
zXomrmgd4G!J1iig$6u^S*UK|eDpx~ht6f9a1gjO<ug>iFIAA_KqorlKlB=?Zg3MHW
zSm$<CQUe>LSjR|bEaT%<UZ+8LuPe#Y8Z7@dBOr(hep+OygdJ4R65y*(7sywt8F)y|
zWVzgvm9T<^sWn-AkNj7m^91P<9^0DF<_iQ-Ou>2FdZl+@xWz>L2TUU}jFFp=VDqGp
zEs?%PvN0J>3Q#Nv8OhMc^wZg9ACh|=R}Qgr3Uni}4BO~?qNwvWUXnSsx<Is;LPlcP
zYAuGqpRyM(k_2CgCY##~@aKE=Y0q=qO1Iup0yIfOHzamU{iN#9v16n#>R+C-+q!X$
zJgPnC%x*}Z4heQQFeg21Z>yaSkMeY)A>n$Dw)k@QgF^<!kSBIqmWD7LrMpn|ZmwM7
zT0QnH$QT9-jX*}<34+6kZD~|H!{diHu!VZ4mSBJBfsvzlOuV6~IrIkAr0@nWexvJs
z=4qOo&=dRE`*Fb5?YAkAZ@hs}=r<dZr1Ps@r1(Xy2+V|0;7dGxp3mQU3J+l1T|$rF
z1A;*-*%^-#GloiWl0IRx$gsCZoYgWkJ2q8oG&;(XXK0&RMbphnXFv|DT))|(FzwL}
zi2kqAw^9V|yq5SAG4m^ux-dqHqExW5%BcS|T~SyFc}*P?K}&e=nw_{xcN@uivcjea
zNwa5<zU_QZ*rgpKb}y=TmolVzO;$Cq<s*IUUQOS{{*mPzz#AsO4sOGar!_js?q{`R
z(C<BWL0m3g!lTq`ppd6}%JJ0uc=nhGmBlgAJ@t3fRU!wu?--7XxGC=ZfMje-r(mVr
zpWQ6Lmj>hQ2?`+H_6n5f(Qj+jpdQPOXosZl-3FjUwa}XguQ^V%N2dLNT-@fwx7H7(
zH(?BWupB*G8au(fZb#_lo&(~@*JdzzGnTuM`z&mT&%th(!W)i*(;!*9QgnUZ4fpk?
zyZeI*gH6lkmaC>-);~W<A|5JU5=5#jebu7*jVEFJkv7iJm?rMWhcW(&r||<`AOK0C
zZ<*ZmdW;B!t$NwLW{pm|C+7I`T(;%shX4hG=#{}X^8%8Oh{$s#PTP4Lu17*BfzREK
z)aOAg#^B+~<B=6c@-JUw?m$uAddg{M_g%<{<6?i8=6TRC=nsi+8mPCuG`IlUj1<2v
z9dTS}q(_h1rVaZp;CXo6UuaAaY&%VX!E2rGb~?Nd2*P?vH7c$F#&0vG1-w-aYIgNl
z43D-Q#ujjfZM>9%V+rDNV?-=4+Rv97*1();<;#WSu@OLya-a~<Jvx8o=irKbIn-r=
zLWU&25~2WBfa^|~nLaK~Z?$_2BER*Us(pJ?8Txi9w8O8?LZHCZd<K&jLuo;*K!*DG
z61_l`J9K&hU$=rN^Actg(k=anq?Wq;koAG+?d5W_>A?~Qe$OASp=HB!OgAr83qyXM
z;`RFbdxeBQdh~z%?(i$Duj~kI4bCAN@X56I=9nlJ4_cu1EcL5W2Bzl4ba{_;lJUj)
zkn}IXiWcMNGj7GhD_5^{!(^~AA0J<Gg3u9WF*9-W^bq*mTtqm<l^fo#cu~(Ym6l`=
zz9NO?r)K+BN%trj7^MF)wZnQGPvo8j)OyTHvwFLbFLT03t3v_lbX>k;5;VCOsP4p#
z5$^9Udj*$0vRt7?+d)y!Nc*V2ZLz=;zD<^$Am;2VzV9tDLX1?T3$kqmwg6Feh%$*N
z+WT`|W|y9yegv2lT|`Wa=#SUCrysU-oxFaQK(*XkS*EMu-For_JwtmkmCZ$y=2wZg
zvd2h2l;NKK<^og)xg(?sK31lt4(GUK>Q-;O=~AaF0t<5WmRQ_y#X}G{y;>>RJ<g>o
zUGMI=yUxd&nH4&JmGh#Me0>=9)CTb9Tzlu{OF~Wxv-CjKnz|{ec7TF7x(Y~jFoevZ
z?ruW&O5#nMd51$Y)Nm;Bek7qf%px&3A)wk8iCgm-b{jY>)b5NGxK*DHz@2-Cr5P4Q
zyHmiuUHUfbdC{Q#GwN>_U<h%(yqg*Q9q!#{7@{}B>ENHlIs|IP_WYO`>SFQ0-kO-b
zE5Yb@INl!uvX2o3F`I5R{r!|>LXqJlD#N%5A%L+Gk>UMr8sW<6uRZGk7dF8Rb?~y%
z;&hjYmWDwBAQ~K~Omw`<K;`_``Qy0q5?E$~X7jY^&6WnBf_k}JJ8R`D<S%uEBF<BA
zA|q5?EpGbD<zx>pEUN_RovmRxo-W0DgK!}W*DuRtK%81ku0i|_xid7oVo6z9+Sr0t
z?(K@yWgcxT=4w`b&#@U-x76SkSNE*kCuiV6++?vmNVd(4UY`1Cxln#Wi^BEd%iqNW
z@i9OOeVx?<%I0`<lVGfN6{KEW4}YI0c!y}-SppfVTG&<ptuoVlwe*)cvCO9M)V~wk
znDwCJ9!S5ZnNEz<Kad)@hX9O}v5B;KBD@P<rQI;;QJy6kvX!y0-zkgdtoze<5;Hff
z3%yn{%$q@)O_h#z!Ee($Mfe|8&A|k`YCo{OyU{LnosqMj_F(hCoBGGxsA*2|wsmJ_
zv_Y%$^6-$zK6HWu_^O*ceL{D|`nJ+Cho5Hy1Fl<E6jmXG!}c)Efg#WWoKQ62Apt#1
z04ZIEx!2o{Z1;`B_N3L~yIliJWtRv4nqpm*;*I^<pwz06-2YNJvD0A~U{0;+=2oYf
zl05wda~e!>1=KY#9DQWsBxa%uNp7YWBi_bNuQObDbC49J!GjS^&=<31!7oyY?<B%!
z!rySdmF6Ln8IoW*u+I8ul2ij>qXaPuwXSxGN_=>`h4FUC&B7S?EO@<y`uD}@(RpQO
z&ctegZSAZi{PnUguSKf;xd<*Ujg{LCN^~bLQ*V1@?8-cJPb{y9pV#YOq{1MIFsIKM
zG$D<&Wzdii2uaN<5c!r&1mzaiz5m$R>vT<XXE@0l#Q@=Pq5$F0^t#D=JgtE@TbJG9
zr~;hmE7FyOy+W-x@Dz9w4^}f=wW1L>=;;xhwu~Smn-?z5YmO080pBh<KL)ffMjtT|
zO7*rhnBKM2&ALys<Htfyh6GGpY<!bNl`jU^jqN>7<PR?x6ydfRn7D+VIoL14rVQT4
zq}2TJM<7j7T_)>CAbuGh3bSJ0in_THv=&xWmHg1f$}3%VCw3<F#Jv`~Gh@`eK#85%
zP!6ByaCRLhwj2fW+Uj~tjIiV@0k;D*6(fNEx|bP7C)g;eb)`n!p?%K-<h-Ez_XD>;
zzoMh<pa@CNVbMH|!zK%jZXWM!Vk-8LW}@aN*p+28UK`jw=XgTy(S?>{KkJ&Ly{05_
zf>VlB5;Wrv^%R<4BHnA%kZHf8Cl3@7nn1pr=6i`__A*Z?4{Eo9{!U6#6M(1dy|s7i
znod8ks$<T+yC0i&t^y8Tc&C`9nlx~WE9pF>8x+7hCk!F|9j7di9wusot@r`*jC>nF
z6zUf2vs1LxV!AvBbjlTXP$WX#QUdw50$o78GI&p5s}aotSlW;=J>Qki{`ytMCt<TR
zgKNFZcyI70x6>Z&`kpXl!px|#KaKu0Y^$ftOT+(c&4y#Uc<mYf4pWWl(yfm#|IDP$
zJV7!khO5rsn(0$wP}M<ha?*Jth%(52Gx#oAu8v_hX7uzfirJdCzhW5E!@W*X0K)wP
z#TTQr^g*hvLsa~=Y}*7*ISlpWJc7)HgXn8NLJ}mL{`8^M!3#60&wE`!5faGE28)KA
zO3g$6NV}vQ$!6l#CAMcyBa)tN<Xs9HD4PuF>h<x%2R%VuKbWL+J^3KXdV>Zqq@#3f
zF<r!h$jtvOwYEjv$A>$q`nwWxHDN9HB`c4Z9M-MJ)rYd!7Noma+kSZyESKOU6Qvw3
zplJV?3lU6G&(gQfEP}%BTGeCBW%jdXu8)fv@H;%d<~qT13GjAkuIclypqaPC3|n_e
z^l|ipa%G+P0&U2^$f4#6%Mt93s=K%ER_P|BNsP<3CLMfdc5Qm~9anRdWds!glS+dg
z!pcW#FiPH|V&A2Fmu=Vi-a$vD5%8pp?O|UkC==MAK2^$AX5EQ41~}N5>~hxW4wAPJ
zbcJprx)rewF`ow9vL)V5SAU!TK!nCE^nICl_{A+VaQ7N3_`;dexCADUb-e#jy*)W=
zcDo<_$&>uXg#>cd^^T9-fWe;uRX23v!9yb5$+GP8B9*7RM)@$zo!la00#0*Z>$0|Y
z-wvDWJ}croK|Uq?a5H<QJml7lQew05BdGZV3r0jt?jPNMup~LehUs{D@$$J>Ib5d2
zzTz1zx|J8Ds(*+bYewq+=bJqW36#Xa-ue#7JxQ-V>5O_02nc6|!nTSh!R?paNxl_a
zuc7vJv+eNQBm>c{axv9<lS_A{C6{Mn3EUOV=}OP<0^{gf*vzA&5;N-*Nk55=-n4KV
zE_45K!>k{mcNs7@6f;_f;17l}yyIUl5ahk0^=3PczH1O&m}H<jAN5(}auV(8Ok#wm
z@LignsuvFJ*DHfsBe|mF_65F6KVoUVuku8Yg;Bubg}{TRc)DH4)#=TXO*-;#UF@x{
zIEKMT(~sWW|0p`eeD<$Us68<p<K5*1&zy|uk!=-xTI>dFMq#{XVv;jL-_+t(?C?=4
zl2a`eHlfsQRfrGX;LR6$M77|tjkLwed}klO1sxIocx4EbZhL5h7Z%<!&?gL{AY{9K
zw*FRw$nQ|&^MWVQa1f>cfeO}Jc8aQrI4_vRzI`pbtX*c(!Z5!9dI<`^(-5Z-g>F@S
zoP(2n`Y_WVGkUZ<J*m&z<FM|s)H^DT0)mS~OR?Y6rg0+odbAcI8pFACt0lCgcT#9O
z=a_02WZCiNr;p^lx<}2iLu@inDOHu}9g;KyhQ2$%EPvNPpZzpQ)HI^Rj|ze$-h-n%
zk0($<{p|6sr-t7^;@?i^@}T0p$Q33;$8czDFe810WdPsBu?$d$CD$?1QhmKj%;gc4
zg_H5H{fyy8DpYy7p1Y`tBjqM5G*zR{m8wSpwzxp(XdkgF5(z9d1t4GXu#&&%SX0RB
zT^2)!3bSjt#dxRTngd0*^FkiYZ{@zc3u>Bq0m@4P&nlb&@6<kTP{EBFwxo%>km_R8
zb*$MGKjZ|sQPxfZkWaL;nTF<P#<C_(^d=K+=LW?NE@GXJdAh_2q*7$F1h`dG13+(_
zhlJn%ly0@I&v5lakfml`Hg1g^c(jHqx%;!8hDILW(y9%w$Th=#8*STnX@<hp<&u2P
z)aG8%SX!TU5~yggxOG4r$jk_B(4k=FoV^<~dcy|59+{Zx5EPu?)jgT`$nWvb=R1zz
z>C(SPVEzQES`jhZRF{`s&n~qjlQfCYp$`(SmpKXJAGzdqyVA8=+I@$~3gdJpXN(l`
zsxa7stEJ>drjb1&+yhVk$H&1I{hmt}n3*Sk?Ki8E5x@c%5HU79<~<x&dzfskYr58-
z%S;qny@mZ<frcVJH`+FEKSXmrm8UBrQRUtYKpGh3`(G4HQHS_2HLsM}PMe*~arfT-
zv-2BB-G0H(z;o*p@xH+Fbu-%<3Aa0KhOlB)Wx`zCrC@}lX9NYq61}|f`A;A@AzBg>
zTJA`B@}T~jX$j>R>AKVQ+Qo#T5ssln{;!Do#-$7QfC5~%5gQ|98*(U_>cK$1xgkJ%
zjA)AH;wPXj4=sX5(A><lhGl!{X6L>^v<+6M2;=}N>qWfzxCnP3d0l2_eYG6g8c2bV
zrNF1w%@aZO*LU$NbR3HC00fJK&&<$;D~&?hIWUit@hL7#4?)6U+w>3$QI+9;Fn)D@
z128K_!!I_9P_3YpdJrUP#f{v=5|nhH=2ybD=9$bw@-ZX8ukE{KHR@dUQ}@O1nH2K>
zgH!#D<}BY<-ao2w8M4pvjbV5F%BZfeI7k!~Ai+5Ufcwg8a^qs(zG6>}A4tqdFkbMX
z__nq_f9Vl@nLQPH^l<zI#7iQT@kmF*8u8UE@A#vYu+Fxd$fW6I3-Ks<YB33t+BYuT
zPJ~>eywdKmRDILhbldV64Y}b(5ZYbUsN#pmCG}Hmp`2dvcT0i*>1axea@Fc7fw$Et
z06{{erCOklxsvJ02NOloyk|O}**hi<D=9#U3@6zD(SFFW=|c)F{p_b}|DmMShLZL%
z0^`%VKz`S+CWKF-k!|2@F|20?TFZ5^R|0t$zJ~D`UYj`b6vZx^H$ywREnBRGJ;KM3
zT?iUb3F+;ka<D=zVr5A;rdQ$?3wVRy?dT#rk&^4n-)U)SO?mDg75?tLv{1MRfP*hR
zerRwo^{(klAOk2sLu1@Yv;+X9X00m;R64OPr<E60zaqIK5;h0TyY|H2e|UB8Amqqq
zIzA!paBg-X7Yl4h5W(7$AT3p~&|koHOSBj&ELG6sOoR@E4i58)dpphnL^3CEurK%O
zA_FL4dXpWrJy?y3Ab0PmVk8gad*&Zx-up@`_9T&tIPS$vasI$Dfb`I&(E3k~&?+#K
zs)dy+L2YM1%@nipN_l*-D?O?!4T{9#q4RTy6vo&oiW|kg{uDP}UuwX;f$1B^Bq(R;
zgg#uKA-aR|FaljCv5(^s;Fl^WQA+PTUq0}!iyrA9y68-O1N;h7@|8&3cpo5jhqM>}
zkR!fa5FI6O*#X}sSkq4PAX~=(paH2$)3f6o$D9zWxH^>}%J>-i+~=UrO}BKs^tUK^
z5)~A7jxV2ghXctNb3uOjYC6a3ibmjoWWJ3JjC=hw%iu^Y@G_tUItjOs-{R}JbWf!G
z=dCN*T_3=(T^T4^+s|=fX}@)6k)=N2xQyI&Ut-dvl+8|ksn?y6tJkSsobS9^g?CEz
z_|1dWcuxZ~rP8<(1AK{zNl%?)3haEr*(sYEwJF)w;?>>PV&fb!<k#}ey=_I_8CD&w
zMK>&bTN)fOv(H~o_^WTTAlro7vi-Fhxm%D&D&3R@#%Bwavm|7W_2*O1=t|obB5iB)
zE4C6{4Fqx_C!RxO7Vhs_q~=oRR``&eeE~t;-5OJh><H770C#?Mpa>+8MB@)wjRbg{
z(y?G+|5=FqVV1<!2jlEMP+1hrn5xGG%%NupxG|JN(4|m`=n7Ou-Ns1lsw;+^5H<p-
ze~FYWcyDcV#mbG^*>`<X5}-y2g9ZotoQpP$x*XC?s6`~svf^EaoT84OyIEx^4oe24
z>W;TRAaa)q@eGY-S79!qV-&Os1I4f2oDAtlM9CwzM5lC5rcE$c0PV@sbO*M(27=r*
z^luU2%lf^Uh#sd5w)gh1T&>Y-Z;hoA+Up($+e*bUbwA>avMA-1e0VE1Wz;jZBNvo3
zdzAE6Hb%UJ5_U7~_jfm*@g^u_Zu<~x*ezZGS2zVJm|alch(nvW@<!q2T9I^ajwUii
zRNRWk0ZCySmf_`HkNx*$x1fE}!R|KQ7^w&yTO(g9&mSvt^~|OIT$*H9(c4U9oy+{V
z*NfWNy(<`XolglM-q#JxDJJVkZmmv3V$2>-iq{uSL|{7^w@Y8P%C1|Tu)$u3Mz8TQ
z#K?_`kRd))dE==WYu4MG6N_`ulUyRc`Q^b;jNG-Xc{qtphfLC1cSTjmIBfTVqMr2k
z9v&m@*`kd=$S3}kVA?e&ES!;+FhDaw9ANu(VoRkxP+8@Nuwhl;`kf9J*S!bTo;|dB
zZ)@0|Vghlj=w@STjFveNp+XYA@Pj2i?RuM|nFdi8X6GV<+`soZ{KH%MBp#DDFa8MN
zXLHnB^$y1Smo}?B4Iios*>0~+<;;H}Ojk>1gZq5_((^?4?#@DModi7(a*b@EcOHFE
zw?y|Q?$|^k^^v9P>o%s8Q-4-M{?yr$B`TCyA`i@Lr`{Iy5}I3Hsm~6T71h?&H3F4J
zDeRTnU_sK@;q|*j9wKOeVdPGL-T6n)PI9Naq8PH?+7b3xm&Mq<NwS62XD(JLKp9p|
zzDly@pz6hlD0JmQU-mX{$vtZN^{XcJ&^A;!*ux$sWYv2UE9o)?4Qc*|n|Af5FgCNe
zCIJ}p?3*iS)4$}X|HvgH{Ht?@NJWtQrv2%1Wjt8%w|rutJCOzBUn=2oE5RPEBD#?V
zmO6;m6Me6lll<j_NYV{<3oY6DcNy%pmWh?Pt0OTsr3%})`6#nIc$D^M-aR^iS3x>+
zTMzu%*rkw#`BDb`!E!f;+e0`^)fb#Dd#Sdx_4ap4%Ulgsc!Dh3tW@*1#F)Y*5YEaG
zMfW&(?FoMG3P2&zFPk{^lCE@CiilPZCt6xyyOikGT&icfE2&1dPOPYlvY^f2Ifn0s
z)VthhL(cAvqCL1)A)<Zt8oHr@^O`q6V)BN!pQND%yuP`%SKF(W{iCkqC;>XuJLJKP
z<`cDrjrg+la}pBzMC1&Uu39X|?(Z%%?egvErsJ&)0|~o2VP*9uW6Vk2vF#rcxoQLy
zpIxCVVpML}%KS&A9hL+fm(Mq!449jGkZ80c8z^}te|&$Wa}ESvcg+je4{}(_dXP3V
z+Ln(wdpAW%r^BplBb*k~{6LX4#*F0$2T-}h_BJO>o?B)=8qWC8g!NZ*@9+^&ibdZ{
z@`c@xXD8xMEc}Jd@tPFQWDKZA_xE+J2w8eXvsAw2j#Q<*{{c-gAvImeC!kO`{E()Q
zcK0wk;Zr6eTMor)$X18vmA88f9FtPEu7M#T&ZzCow<LGa_l_V#nb3<D#Wgr3T>2_q
z!*uS?Jdt?w^aW7OM}+!PNOn(rNRS(%CO_TYR-&FGK{mg+3dExmS!HAlnx&5Kqem?w
z0rGDo7aAOeOjyzoJbMk|uD2ZqtcwDPxO<;j?ra}lgVtO$Cwjgt#;6=5k=JT3q;E2y
zM@61j4~=m5zftbp1@-_khPfAumjQG~dMPRPH*>E3YFN=0=%AH(^v}a@F#=*jNGU3K
z7ShSBKIY34B3jp@%FvcdbvT#78qbMhf2+AKri-!zJ<C>$NiQII6rd{6W#24il<O>X
zJe8wd+nI>6#Cuf<xwvWT3lL2dDYfw8EXO5RsLbp<R=eaa{fG`Z2&wA?y6pGniZ`Gs
zx|GAggkOY?+rB_a{wBw_d!gsy?jTyFk^JaUmwaT=2-W0W>K$AcuHRBzU~rgnC&E>n
z@Tmu^*IDh-FgQC`xm!VJnI!4Om|FW9SYro#<~hPT?H<F<^j8;L(u+fcX2c5^PMEOl
z<b0$CF5pkF&rr{0<TkS6Gr8JEJx9`bNI>`Gdpi{kot_78Q$H^2)!%<DXw3=gzk(ar
z-aump+_Tqk0$o{Ye5J7!qt86=C@QPWQ=jF+U2po^E<EtX@S05|gMfuR43jj6Rt&yf
zYAa|=*q}+TT(^4+zCsaVN1SuVpO(LG(}@q3Pls53&_uKT9~|_sdr-!I&VHi*5Ml|h
zFZ7UPivsu719c$>dI5V>E=%F+uFp4_gOc7`n?Bpgjx$C|SJ$1|kvBL5-S~^mN>|i7
zDuBJ_flTJCg-b|ZJJf|$e6C|t@=0t(2pBW;8wB^-{-i;6-lziSRXONHE^N0L<asYc
zWd!vt+BB9%E27jfdN?0VRlD$M@2gY~Z)ichKksoK?XQDivCDdr^#l0FyU}`FDEu(B
zOSLy_C30;Z_OP#7Q1~h%8+E=s%rsUIk5jjm?_`X~7)M>i%+uDz$7jTt918o3Hk+Rx
z=zH(70sG6jpLW*@9if;RsJ7l#tS-Bokxr%Mg!e&NzAI)iGsiCO1g`zc(P%zXas*w-
zf~|A|A=cpTU$-@AWAh-jE^Dd8)!ii5v*Ur~03S|>qrR3epd8ZR%0R>9SlngH$hu(0
zn41Da?7QcsYtCe_hgdR!Ls?2!zMSVilghW4u&0-7xP(N5erf~AJYyI>SlJ@li*^q;
z65sUifzZGWYTq82agFD3QmkEsSdk2sQ~B4Skv|D~piZwpXN?g9LCIO{tnR!;94Hfi
z$#~<l3LugicKde4L${0Z$y8q0*PgHgtloYnqIH*k!w&O6cOcWCvZ4=7#5Hp{jOesx
z8YCi}8Cn<DQYxO9XZ!hgXv!w6Yr=x=z<_`Yyt7Uk?9ZXgd)?7KyW*(Dz@9(X%udW}
zP1!3vSj;J)cz(mk)QC%NO;WuzR4JDEu+Nzdh_SX*mNCp?hIo8^Vrxd>^LCu!d-6uv
zjHx~kx|#^(VFi-1CC+n`Tul4jfgjX!4xIx62WTZnk88f^(Z#6Lk!E!eBH5Kcz7~1^
zNX){{x3&?YlOFf89RLip$Ad;J)1!`tLIrBf-rTM?T7|Y}`5Mc^@6yO-68bMlEfwvD
zOg@KPO0q)xm~Z#31I@!u?6X2Wrz3X_LuH5HB|o`=?qusM&76-N`9#HA3^cPMOR2##
zwf8VbFM{~#8zl^j<_Laf&N0g?>Q&Kygda1>A4omOIqB)qcak9dY@#6%@If3hQhI&>
zcl<S<naAgN{TL@J>E*LIQ9whG2X11s;vdP;>NMulT;9Cv7vQQhZ4_HFdDS&tv9|Ju
zRpz^-h^#7wd=B(UIo=q`{>o_NkHTe5eUkD*!~+X=rl<mnwP*oL_2dvJQ*;vw(;{(i
zR57z(J=emz0>m>%qNKUJ00L38#@zeN{5{d5BSyOo2xK<La%o*ujw{BUmi|300(B3)
z9^Auf+N1LvrRbBUrD)~a+>vv(wrzWp)GlMB-P4=gTDfN|CSYM^*34D5^qCfE)ahs9
zMoLlUpM5=jcA;VxU3|Jb%c1a?t5||hma&7;fb96WyKE_al4bKFCq$kr+L|Q)s&^4G
z&}f#oM8VC33sc(IYi@C3X%Vk=pDAm1HKeOQAV2w~$MF9B=31_vm04h*z4}hX17@}f
zfQ85`*ZWE`$7op8;N=PVbhD|GyTaV^F}N-H7-+$&V!wIx6t00z>2czuCfw!OtE9W`
zen@rVdaRwX!%3_L_d3JyFp8-|%DHD*(5Vlq!4pFHyapA6H{KM`W~O{9(DP^k+@`Jg
z$$aoc_d0Gz*}eA>ZX4i+GcHSmAvVD5yYfak?)AG72LJcx(H_e{S)>nL5z>_wnh}w%
zDzz!|l(TdSu_N?+0x4S>9*W6p>@n?$^!Wn4tT6>@ritzx=k%E~8gUCBWZ5ld@f8-9
z$x$sm^XVSr8QooNRi!*!`QM<OjVw00Y^}}iJ6k)9@SDq*6pMYk-685w1(%fRPiK;E
zLGpinNDBe$ikXosU{ILVW9t#x{zS=q)W@=8<FHDC%3_Z$`TZ};E{ka(kid3Vx?Xc3
zAsy#LURm^X{&rX9#!-*ujzh9;TxgYRMRW5z&m@fI0K^HD=mCxLL4pOHvuTiL!Pz5u
zR%Fq|M^nUpK#HhAI$?_*7f`znE}`4v8-s>;9GT-y9&_44X+4}?BRY-)OTz|O%zG%0
zRH2^A<3cKcPNV`z+7)dZKItv>9pTH1)%(W(#y~jXg)q{0v#AY}fSjN2t86cD?qEhI
z8k|#kb>U=3RDJwqEL(yci^o^)b>sHN5ePUTP}yBMHAtS?w_{$JBoKE(xis(>(Ttci
zEQC-Mq?v_!kbSD-OW&GP&tV(RZX0pCB-G&iPq|PX$VU^g%>+xL9NuAO$ge@d;OLHD
ziHToVOK>(Dy7T%@vF~2oHo}^Md>+Hxg$NeIRw+#PAA%sieo+OnnRhP)*eSRH8)>D0
zS?R$_;@LYI301p&rU}C03Qc;3+gq9m=gp|$Hs;5@00x)ocW7)h02%9HzikiH0S#vV
zAA4^dRn@xh4<7>+6+sYDN<czN6h)*F5NQ-p8l+1?x)DJUL^`EQLQ1+8i%==)k_KrO
z4U3N7ce=Od?0fIo_dWOQ-#f-T-f{nNC^4OD&gc0)-}uBZskltZOV`b10FRX6p>oY1
zpsnmd2VKPcLkjYQ0Ps@A;j&}xKNhlqwW&x30F8_+FWP=3aYp32?D)0pfnqP%A&X;-
zYSlvrDmo9cn_z;%y5qT#?6a7!@e$jfK}P^00!Nh5<{KAI&GlcYA+Ct|!U8=R*`r|b
z9kVTE9tthu0Vz?5m;wH@Us!;QnL>y4nRc1pG)T|5zt&=1#-RcgTh$=K%V-xov3sek
zXcxNZ^rx@&R4Q!_AUR)|Cd{J{A!z^d&<-@--Fze`TBn7a2xq7c3N_H#v2q?(-?a+@
zVC6-;nL((#f-sm%uZFLr9|?TY?j;Bd%F4TkS+yvWcWcyxA6qA1^|Cyaqe??yz$DlI
zu^bHA%}ZXI38Wz1mTha}hq&$m7u!~j<N0=3h?(E7TY!G$^|7%rzYIu(%pS|k{!E32
zHo!jN+jno1PbYbIZ)s3UAk7#1UDl^a8cuKtrWr@a#h8E3k_nO_)*hdA7xyrm6%2N*
zei{m<0OBy9<~37hkbZah)>ora2tp)=t5YBwAf@yYHA98sS5{<rurQ1o_+$tL>J)Ci
zW76D9oHOJ(nD__Q)&=rp&<iAyHY@VM6k%<g<bcopD#d)H(tG0pkyJQ~G7Ulp=_DE1
z(G!L7g9rum!U9h`cp?3Vs2M<&3qhagXjrs1{_)NiI4ETWv|(X5(rE#Um}dFHOzp$y
zXNTn3ab7T-d~S6$VE<NmHn5)V-_nwbEBXP=k=v+G@&i^b@89yjn*@7x&ba)A`wXTo
zfVlGuALP@LjQfygI!9!o&cJNQ<OYM<W}+9r=~4amWR9zhwj~Hp;d<^|u!wm$r(#yV
zaHoBgecyQ@9a^Dm`YioeeOVX6gyBI4h|k<v8Jw@@44$&a#%9A%#QuR(EWP~ptrOX@
z^1U}*cRwpGygk@YXv$1w4`b8R;I^I_?K*_vVHBFd?~1_Ux+B!|$?)J2z3Dm(x43fM
zc;VJ+v3rkv6k>JX-sx!b!yJmKX8C%A3o#?_z5z1^Pn>oAbs!c+JwJ)+DVN#l{e;K^
zL|91Tky)^+Xrj>t;74WYV%~=Nz<*?jwAF(16DJ*@xyb6UDwzW+Q1o<`c>9GKzVO!|
z<0Gb!?087wl9NZG4ji4tDL$E;LpY+^jYcX_3TY3kjnqvs`<o+n75excpESBs1u`Nr
zw%tmHom6fgd7+6)KOc-7KeUR1IcUeByv7$tj?uau>}f=`V-UIk1=d<hO`uryzJLLy
z&<c_V@9grO%bGdZ#bGv?SYD%8L6fE6BBP<T#9kRpSz7g3(z(&>lHu{B&CL?O^78Cy
z$b&Sh(;z~eI_~~rxM^l*NLOyCqjjtHHJ+6M;wQ81*KNZhEbL%C_yYiG&%3&xpL980
z_ISNgb>CHC>7F$OPsgSQ00g2QHiN?e-CU4s>c{GH8z)8R7}V~Ob+z_zKS^3*Tdb7q
z-sQlSE9}Si@Rxocj-2pQH@aI{Nuu(FQbZT^p{X$T@%n*6?+WS9I_30BP2RE>RW=ve
zK9S=^v}1hBF=)S1Os(kct#5@}mT_e+F(Dcs_h96>Q0^CwF(JM12q2-U>Jqc|4r#v4
z1lbl8Zs+@MA3dde4fZ8_*O<P+ZzaR8Qa$#fQ|9c~9h^_+bOEo^I!>EeFe529&_+80
z>2nm@&3WAR-g3=nf9PGihn$+h+ugyjR8oq-Wq#}HD<yu*5<B-8p=gx0iw>+<*S;(N
ziWO(=_X^3xr04J0VSpB5R5OTp6~yj^M)Rkfau5Bj<@mE5zU6iVkEk<h9&2R@OqOQ1
zoydXSAFb0Sn#E)38WMF?*b_|vT^jI>Dvvro+Eh}0f*G@U%>7{A%;hltuota(N@01E
zMa$(lLGJPO_vz#K+~=7f!{FD{v}O@OlXP#MKrPa3mW4#agzw!r>FYjd*0f`7YO*#o
zkDZ^FO~%?<XW7`ug=a?%np75V@Uixql=$%}>nORq=7<@gm5{t(`LUn?8^&$NLAfpy
zMT{C&iTi|g5$%<n-9i<c;_R4vgqZnbe+$p?abDP4g(sRZ(?2GBcV}Ex;>>N%UW3Fp
zk^0<lf7=TE{;n{?lCg_ATT0wpxX6-w7aDinMSQ^L&70+If*ZEjrQih@QOQIa9Yyzt
z$#};r&dlszbzJDdqz?-x_I7kJF<v&<oJQSWLiIi;(%fK8=_UWFFNb-SpbqIRRRJPQ
zkTu>g{Clu_@fLF5=zod5e7yKYxy7r|#ha+#72|)l6#vs7?(0Z*-I3RL{inPOOd_0t
zZ(MD_#PqL_uPxN!_DZhLKl`m+`Jb-+^Plc#8Q?#7%`-87<F_{9Wl3P%`r1_Vss6no
z`Okjuw_jdIetCySfBn*b^E3Y+{{%Pe7J-s7=`(8&FyAgvGuU4^&WFIN|FCC%&5@9=
zxyOS97WEAN`QMZ$;ahI-l$Rg)+x(+D@F&0er`P=TjZ=6KHiX9S=KbQ@kKO|$j||?Q
z-OI1v`{Vun$=87UZUrAo?(x&k*Lapcy2SI}?O@5oL_|a~%>2J1xBk;GhvDD7^*`JK
zEFc2zlQ3+dCTWSWD}SJ+r4__RFA9!QAFO#w_hAr}XWvdDm+kBTygrFj6s1*5h$qWr
zj=<q<Jm3K~6UGRjWy!bzx)#m-yrzrwVQxG!)JVk!WmuaBe?_Rl@_MbqE<rqYX6S)r
z<P%eILE=OE;BDFOi4bzK{2>APpZwGF1MFdHYqg~`Ic3+O{5lL}C@>@_mqs)pL#87w
z3(%0*=PuNPL+?Ym0O;F&@gb3AQ<q(HJ!hYXcD`Yg(PuWWv7q-OD%g2WctM4O4lul3
zF3;zcX4}`a;(8=A2**yl5_P~0Zo&BAW!#HQzkmN`fB%evr;xhj=*jke9H=QXcS1iZ
z1ae(z4Fx!H>KUBf16K7SHKxbe<N>Y%oX!#8u~T(ix`Ic~_#uwWv!M!QdMW#%c>~Oy
zP04Y3Y3KgwE3Qfm(qtT#U3~Ui_=pE^5N5FtrJC_L>qi<<v5wcEz0Q%iqHqPe8sa^A
z<oPel!#Wi>qD=88tM3o1<Ii{2&);<?K$Ja>pGzz}v$5=cIbUCL*x7-?iR8+mKRH<L
zJ;~a6GWG5Kq&@0>Q`qWo*JkId8n{2*uj{jN2|_rt+sm~_&fH5=&Uz26nA%I^JPr~y
zwY45!bygDZca-X!?2I$;!V9k3#crmXa|f14r1<2SkMPU8_4`J4BpY?o_5#U0eDceq
zB&iqx$T#`+<-7EU6$2R9o=6)K?&Km^8|kc4yZ`Ru`p23)j)qHByZJgVCO}4x|Ex0N
zQZWWn{U_En<&XK_bIQ*3nvbs83T0_ugI?85(!)7scH;>#s}g72_S`suCAYiMi>5s+
zR9^2bUcLCq?cbt?<#fe9)90@*r#HxQqB$vNR||Ds7HH~SyS&-hq`wqL$*UAgx>ca+
z4PDjx9H)(Xz|^Jarpw7y*gr>12nWgldJ(#{<@RmWd3&`1rU0-}SXZISlmzro%G2tX
zG8iy|dE~llnlnFAEc;`8JVoqTCiF)Ypdgtl+DG!BJB7%0H>EIrFfafVoIRJRpF~1J
z)yxRQWi0&w$exohI-V*#<S+w(MBl~Dd`~YgFlJUpx*e`jC73l(8lb&yR!+{pUVed5
zPDCPvi4JbnuD=IZk`r-mB9$t6BC+$Ep2{0DI{po{{_A%R{rvpG>g(%iTQ!DK8;P0k
z&du}Kiva<C%r?e!phz6mZx^YjVo<lp_qD2U=J+InkaRz`JGq+DB=<q;vNx;B?S@L2
z29>~J0@_j?&uAbGG4n5{Y=wq@B)6l6A>T)(X;ql7(#gj1PECR(TSKcrow$gIr$VL@
zWBc=7?y_b8=`|FZtjHCl#aeygjqTjn@3mSAFS*MFnxGSJ{lYr*8Y9L>vuHPYH+v|X
zpjESt#Jv$;j=vtaPjMiJ&&(To1~n~g#^a7Whg<oZ@1kx8&fYTM65rdv<gnW>Q*Ar;
z<%tLh$2o{nIwi(MR++K2I}p~KVp2?}Q7^X%A4XByvbbt>89F4}3Eijyfj>Rin(R|w
z+AV)<t%xk(lkuxL@(xPo={L_6eB&2C>~-0ld`)I%p>nXmIZ~f%@LEDmO)c>bkL?_-
zEIuU-g6>w{==lC=wIhOrk8+=9sZ5f8|5?Hay{XCw12g)dzaVMs#IYT0FvtUP7k<<_
z!RF^8-d|{LuF>1D^@`W?ffBQ8<(6bR=sEW0_nK|AgfMnwbi0`KUf$kYTkYR^uCH87
z$)`6j$wrq^Y(1;EI+#0_XEp67(nRUB_x$p0`!^zbEzyRNsTQw5yiP1?S0!>smY?I{
z3H-}JhC{&mlX%Cocq6CSAwH{u!y#{b6LC)eI^#Sw0>cFVb%*(zvl|b?MW*Eu8P2I_
zf2sPfP(SI;j8@aLeAe&@zeYW-8Aruo+_gNzwVhS0`)%eCz3yj?f_=MGnNS$-GC*%?
zy0q6r0wk2gkm%Duuk+VTHh-=ZA(@}2baDf(;uaV(rYLvP>o1vr3*#C7!y4-6Kfd2g
zS1k4;=Xd^|Bok9+qt{YrMaRzG@u=>!qD3(bxW^(BgmqVw#l;&rjk}aSG)FTcjSI(E
z`dO1#U*296pZ22&dX^8{J<qb+7&J)Yd?{{;YEbfg)!7$}MBpieXv}9<r;}6PVwmwr
zZ-;;>Rbw+Jv6!Xi#p^23x|d!QuFfmxPqg#nCR{Y;*4daBS@>F4C;94daPjW2WEg93
zW9Y}b-KyAy;*N~_YqYxxFeixQHz`WXM{N;ix4Bixv+K^Zi7c1|2saydf5XH=-)R5z
zN2k;l{Khw0t@O$^wNtEwWMolkEnx1d`*~SQJe$YvfB|vnP330fYeg;K|G&1qs`<4l
zoLar~zJ32B`U9G99rJF|dTSq~r>6Zt2q0(Jg;q9pFz<P-=<LW6F4yzD66HHas{@vY
z$MEkSSBGbphkAYEf;TJEVV0V5Bj_dz9Bg^qE}f>V<8JjQrz^yC1u}<UZ<vl_3+dH#
zYW_5j<)oMJ@}r;-aC)Dd<5HP2D(&Yu<hULJX0~Dn5to#qbs*)kqz>-Famr@WZ2};8
zw&ySx;*hnCI<z`|CUf^W3i3p;qWQjwuVh3=&+Xm(1gH~L<BkM*hIF}7pS_ZU2ay}q
zCkX*xRg~0Jc`&8AwuExp^x0eUXVI*bIw7!M;IJ_EfHH7#$SJ~&q-<N?+s9|saU&MA
zAAN`!=hKRJi%~&<QAx$l*NN2P^qBXvK-TET4dFkW+pfoQZ|^hFeli>-A7WUeIGf_#
zWx4i9IgMyK4O%RX1+r?0W8q*j?kVde-vnxF!!6+xO%Uy4b~?7JPfjLyl}Y%imFgl6
zV0(QA<nAP<1I6Lq=G<PcENZ!eW&B-V3eHmyUCpWBmdQ}aqH#Q^z)nT6>+D$POAYlL
zlxQGG6xWSu-c84c>5xe_Ad*jgx|#ozr1Br<{vZD)SdSp+guJ?XEnb0sgjm*GH@OqP
z=~pSEj)L@Uhnaxt)eTkiNViS<lJJVV`o6(!P)(<NrLc?WJ$;eo8d>o(8>ws1LFH}B
zj;Y{cOrUUzT<*6A+2rYOk|@W`u)riy9@fK&;O&llRn9dPOpmGVYWWg(7_0;HxcclP
z=SDIQS{TU@Q4YCuXRb~e1aCA_Ei5yT`FjRcVLLy;hzlcSl|_GVKD7kvS@t~LK6XTG
zBFQBtS#wOFm`CVu=dSQgU3i~s-%c|-_{k&va6VUS)gFD&z^`*<wp((_^>$t6=GUm;
zWcA$*%1!g{%jZ|W6Up8UtE;PvI-r0UQ?b!lveE%BD!NC&c0TQPnriQ(>0q3=2K7P{
zCq6R(-3Hv*EM&*-;M+^QK1=c5aAdt?W~E&lM`s3|1Lm@vqSIDgaW__^jYg=e8<;em
z55WC=uwlh&Xa}peSg|c*1E~QG#XuoP4l&y!Ay*}I^`||=`|xnk_T%_;^MGp*GU+vP
zku5rio^If;Lf)+g%#@cUME-9CTaBN=_A?AS@TBUamPQ(;6?4>X29I!NYqH6IsF?na
z@c{v3lD8z1Q{R-qOPE<MPw7#e$RX<FIc}UIO3c`~c45Ggnz*WMjyp0w%1hoZCe9{+
zC97JrPYYv0@#NiANgciUw`}iwhd@$Qz)eGgOkkL$*LyyO+s?KC+Ur`)b|d0zPKO3_
zfGui#{E-NUwt~+g4@p!!uk&(P#EXcEa`#I!sa0zdIhEARE%i2L6(8^@kIYpa+bj;u
z31__}kUdf&?sJiOYDN{nGL`#NWTiQJXFBzf^I@1Fj=LWXa;+iPNHKS(R9*Y8bB;LY
z>y+}92-Tjf)ZFxd2tv!9eZ_4(aD5S*>##qp-#oF8pX$J8<_>2H-u>J=&Y*zLs1W}m
z=}Mf-Co$um%-JqGzLC=;Of&WiAeQQ9HIA|y3A}gg<a<32uXCXcCwW5+(VzrC*ZuJc
zN6tX)l|8OjB2!NiQ0q5`ROYwJ<X^8m{(0%rfr2x4_JH7^{1`H;vSq$==L!Gzvjh-*
z`K~YmS|D8?UBb8R0FO1{F?(z9&e|f6InPnTDYr5~<KA?gIpwj_vGnC86uY`E`^pSi
z#n1XAe2Cc=3!C6XQe$WrfSqf-)T4eNUs)ml=4C1#Ephf}4(znC=@=f6cPAsV8TYQE
z487c$8r7@lTrL5NV>*rK4XmVxCHqCHlb=_{Kd3tiJaO60Dll#ztZ<!Hw*&o5R_nPD
zvK;jF)_0f8G@M)~uFVdm`m2iKC6q9_`6^F2?(tC+3%+6wxvnnSlc_pgr1`0MaQ>9v
z-IZyhVjI$)9EK=PQ}(8Fd#*~5mg^r3r3*W4TdruYEtReboX4Yi&bqR)B9~z=bV+oQ
z>9KA@hiAZ9w-&1$^eF}Ckmw>*zh~@E{_3-bvVH<-uq6o3nUuVg5nbvoFD@|cm4SFX
zL7-IW99dx6Nv}+UBv7!-?_l8Mk0;vqI!8*2Y^s777-C3_f0a)D;<70YNPIdP8k$D}
zywV-LK3AF}uewmqP8J{$FWJ@OL`R|?vr$`a0>al?sH8()g7^&>=*jpykKs6&4t~@>
z)O5r?282)4w%s8EWw;R#HxKrE2FxX+cCT2llkyq{RP1i(uJwC$8i;is?zfI_YY7}4
z+_fEiZl>O9@rpe~;{8KhK9UUz-ie~6cZ+7%$a-=(o94$(V=-M}0QuS3+kHCnT41`g
zl`I(`ds{3}%(W^g{IoauOAnGt7XlePLzB2c{=-fjLJFes0z2UC1_OXp(%!yg02Rx#
zspF7r(5maryICWK2!$)xg#(85Ii7IDa=*#Xba>z`IGW;rXbnJAfsB*^AF1-Z_BEDW
zA1K}WlM=<d%fDyV-eJEzy<AV`wEV@?FrLLU`nO>$fxt<Um<7lOkUOWa`(Cc$@E4x#
z^@UETh~DdI?9Q*TCF^IYP`3Jict_fRFOYewsrWEY_%ux84`MWGi5o*v(jYq<ojKw~
z<Q8k25f`+^t4x**B0^iV@Tg>^epBrHYmX}V=cB4M!B=cM7S&3pRy~jnln|-@A|suQ
z?kr7B$1Q?_hh^56!SMTyG6UDx=_i^$e*Bmy@BXOw#V2PHqt_H&R$|evo&G54^*9G8
zc|W-yLvV;xHZV1vXu7X?x8|7j_M2(VfJ%S<xq_Hv2vZ!mVK8DG+p#fj0_0nBrTMl|
zd76t?5q?A*kM;bu9Q4hb?TqZU-!3^g%wJmD@$IuhyjLk@uR2|-uC8?x1C+A#&^l>$
zTdpf#UxiU{-$}eF=&?NrLJOTge_jsldaT$c$ST%pmroBm7_^8d%|z5E(9if|Ci3sJ
z3=$A6##0oJU_K10*vyZa9^a+`OZKqK`34M<40OQEz>DT}Rikv9zp0!zA-QH5b+W%v
zHJE`X1Lmzy&DT0o-a-M^OMc`?`^}rHO)ct#7cWkwg~0$DO<#Qh5nH-&d21qAAFX+b
zL#4=Um<5E)I0W1_wn^mjpJa*DIV}$QPX-?1_t`JL3hYQV*DRj?44r`#i-ec@k*^7$
zdauVkS1r|kRZyA}n!dS3BwL?f`+(NiX}X0Xv91p5Tw=TMe(+LEYen{vD<%Md8OVWM
z+UPxAM}%$AC~Y6Y)2rRVPNf_}UkQU56Qp6kFV+K;_9UlVwh%yG`0X?17kKgOMGcQ1
zIUWtcYSi;Dt-#;AV@M%RzRamM20D&%RP_DSdC!}kAd60wI!4M|TBw)_$f6}63E!1w
z>y@riVE;Ul$J{lsXmfs;wL9a<&756sakQd8WuBIB&BRuUW=;TrBe@HmCL4*jW%~xc
z(K@kWT-Dg<B*Lt_#E~;U_$hFO9afV=u0I-_w}Vdj{6KN*UO7_0O{OjoQc}jw*c<*$
zc;C^60+XqVzDINQDp7aT>Tvn$y1Z;;uj;T}T*dD2g$ER}36}<nOoJT@0jI4}Y<4wx
z#D()wc@!Ye%gOHCfK&QT2aVd;yI#%kY0<Ns1B*Rb<-RVH#Kq_{j(%$8wvX8jTC~G<
zonp&}PO;Ivc%cdHjjb<rjsL^NI?)$%=@%B@pQP!Yo^YsBKfgp|TLXX$Q=PU>*(Q)T
zHtqkYimr6NYwDOt@T=Nyh^H1#);wf@!=t8a^I~?q%{<XUIEyNMC^N%xMkPeDQ!abn
z6nEjv=XyW&a*8H6U);7+KCy3nA(2LnU5y3RYq!C4X*|WW$4O;-Wd{BZE>L>Xt5q@m
z9{As1;WQnhhkli<%E%QW*i0}}rZ*iZxVb<3Jw3SM&KMrL<+~T<JWCv#+DzBis(T)K
zqu^EktXL0x6&$;n@|~C45>_W(coN`zoF6JzBptCTzFP4k$zd(ob>CC)IBTrm0GJS`
zh_ri-$KN9z_~9A`0}rkq9-Fxkqh4+^BZ_PbP>oAhS`_d*_!e{M-Ib--YBa(IVjO(s
zcEQl%XaFVfWZeci?+vcf=~B&;5g<=il?9J5`j=VnKY7Oga&$q0NX#*y3Ty$^R!XcE
z_TM|H6+$}Q(fE6EEJbPL2jlqLfCZlzDrSh%<ED0<EdH2m_(^-pK(mJUL&at`@4iCK
zgtIytI>MHleDA)YInDd8b*4%OgA8Ki<gYr&FCbNX=T|-1WipuTecO0Y#H<|qq_4u}
zEz91ze5W}pLiRF8tBzZDmGgDo=U2_Gs_3b>e+FJezHW1vGz4*djkUVZBNne<$f~@U
zp<Fx0@nf4LS?QCu+(yv=t)`SzUh6QOrYj@GK(Up|QXL*yiqgst$^oCZZ-e^_jk&{2
z>hEFhWYHmtlU9SR?AqV+Edke<KdAoDBX#@(7LtOWsTbx+rb5GUPS_FB>k+Q(Zn0OD
z?uDn?0DQy><jL8!w{Fx`Zh{y)>9C8xh=^!oQI_iDI9EPJH8~&UA|0FGWu3Vlt5}BJ
z_&l%yLM*DQna>mdU+57!{Ol1DoTO2^#|5VqgF3gJ<#Cpht3H0-f!lG{Z)o8>SpmUB
z2wUuPucjy8;SvRfu&I~%I#=3%LVCB4*wV#!&hT%Gl-XhCu!gQE?UaxlrS|mLavOEw
zOLE3P03qYpovG2xs4K`LpwsirsH@~t@4iiz#dZfB<Kx7Vt7pgjcrqFi=_D(PZrLr?
zt%|kAiuYh(r}(<Ly!3qaimO|4t|SZTqnENxI)WZwrL*#hbM|ujQgN}mB;}jVN}}&5
zS>a^-5DUo`+eL6CcAtPUJb;(Y_#ce*e|h!(r<G6O0|Cpk?NOHc#}A;*8_Cy?#hA-f
zA8#0HhR$}=+SS)h3~SRo^gm3<0B&UY06WJ%n(i)FVE8CiKMRt2QKft{^`NM(hMmq~
zH%)6x6bc|Y!m%^GvSqeQ)G(*CROx}ntTM_t)WLMg-6QChflTV;K+&_nn{1WWM%>U}
z(_2+$tFNn1wAaPm*tcUvgm}klV?!H)>A5bJ!X)8kNJN3#=n>_zb>_}RaO$At=H_nS
zILX_m$sfVpT~TS=ylDv#d9LnlBg~W8w#pc!3Ao}2RO<qFgV*Pt&tpu8h6(WQFQ?4I
zNazGUB`wm0-7cy7EVeZ4G7-q{0@=5e_xn}bLC8$5`fn~=1raYRmEz~Y^z0Ln29qtM
z-OZTaIxzI)Nn2a?4RLJL_O(Nw@<^HFGm>#}+t-Yt2VrKHZ<HjuT8oc6jrl#zA?ohb
zxjVN#O#ySDS1N_Z4Jgn9D_-OqEQ$$Q8w}UEM*%(3Sfod~mU!p?LVklxuCGyc|81!g
z85+!7d64`tK?p{f^zm7mV5Q)?yP#NVzY+w~FjsHy1~%w`x|)vz%*b+e>v=;AXAa^8
zv5@T6`z{&*9;4FIt|3SGfcQoace>FJv*~W5kzthO*q(!T>53=_1l^Efbnm(0a}12y
zMhsfShGz^JAI86c!u&%rW2()%z0nJi4JcPE0%?vIbuP)2-bOY>-x?-|@cjAf;9a#`
z>Yr{Cd(!dH5a0bF@$!Z206Hs$v_<w^py~Y&577U#tl^*6kCL#dhdtx6jNq!_PE|iV
zbLPygLmWw5o|WlYx0flm){p&OKzD>A6*I=Z{a-*3{PUXoA8|@f7_!x_hbhv(Pry%+
z9+4e8ogx`}_C0^cPk)sErz`y9TL1KKV(RWO<+hSV<Xp7u>~b(FY<7dj;}rTSqZY#f
z@4jrV^=sGPV}alfqFCcX!RGi&!T;ZXrh>)@Y?L&k;1}@o9%2sAMt++650u1z^QBeU
z00DEXtUX`r_lG8S27-2nP^9U<8`S=>7zhR-ydB?MNwE9<vyURah^|NTxc~YBqozVK
z0df)BU+!YO&_<~0`$cX4_a8Rm?r3rD*IN{Ws}gj0g~$9iu$zBzQB^U(gLT$UB>eru
zCnFGw4oqOu$X~hH-+uQvGN7qa?)Y`>;|cJf@7X_``Spdr@G^~{w;)97k^f5sNlX>F
z@1CeEgh~9@Zk@mvSs>$&5@dhB4#5q$_EAxB;lFlW<i?VJ-sVC=()jP!8b#1nmDe7f
z{1@NXpF<Da+mN1qfj^tmZ))9wuMv<>ZQRkn{e{Q;`(0AO>LdK$)%W)Y`M<00Kd;08
zU48#C?)-1;`!7-We`DW&z(D@*$@^c9)BpdRyr;fcylU#ruK#+>L~p6V#q!7eO|IvQ
z5nL_peQT1|ewVzP$(TdWD2Auir=4}%JM!22t%A_?ALaf1I>5;}6$%Y`{~TMEpw=Qc
znlqcuj1R6~kzFkze&Z9U|AkCEe?V0tNp&eSH#awczh$2MzwFk(pLPG`E&azp_uJ0}
zoX0^tB|r>6gwJUsVu<ZgqUUXs9x0&5gr4UL8Z-dGGP>WZ7pi0&A!;?Pp~|I+S9+}t
zLAA{C)|sTk3J+d$lGAs;9S%*zD*y6I`lkiYzw)%GwvOLc(%Rcvv0NPFN^Q|=ja3Jg
zfCp7Co2aj<QE#<qIfB*;Bf%Sg|8T(Vyg$rVD`f#@7m<rJGEahf6|`L*A)be8ah0Ob
zUh$<4h^-~Qu8Cq1Ccz7Mu1b$H@f4f0{KnUKCqv}EC{8jT>53+m*&#8P^Xhw}H2uD7
z4Pjg*BXKR!hYwu8KW|vy4BHEoo0<|kJa71`IQY{KCwG4owB`d@Rg3C@p^q4U%M}_w
zM(|&n106+BvvYQeBGO5K!E-JAZyU>_aaBMK*M)Yr85yHucC_{U_jWX%=l6c-@O(d_
zXGc(PcoZOhfk2nwd6ekKc~W{1!9^gR>#C1I{ZNpbL@a0QG(&4lK<pL1YiG{661QD#
z+Y2k7jM)_knIXS<#FR7Xj_sm$g>&gaqHZhUbv$Ohu=+Q-x{r7dHW-z$Yxnb8zA@-b
z6xFypXs#A(#@cGvE;e=O{J_mGG5Ye1Jx_8`cY*DvSHypaj=%DYm%^hpug>H-ZJHsB
z8r)nq(52sIBOua6w6!|3i*kq@U@FH7AkA=?Z)_K?A(}P-Rul)F9K^4Ox-U$V=L^z%
ze<3{zExpyfwbr-8Qbue5hYW?5$gUoTR?TsTg~DDbGU)jPg73giHzo7WF4`7DfJz*C
zA46>N$EKQ~<#B6}%g$CuR6@95-f)3QLCog@qxRQ@t28u0ogqot2U+pdk=&v=I@oH3
zmN)@6xI>N+vM%tGp}FcXs(FLr$_~`Xv+_?rzd4`St7vyWr?@P7H3uqzXgr`#n&HUA
z@teLR-eV-qjprNzNqZ`5oDQ9m8t?qN$>H>O6LkW`9~#}$-=|hM58L1#Idi0qf@|0J
zo2Fe)!Mb%5S+Z%&e1kDZAq?gg!c$|Q3Q+b6|FiLf;KS31C(mo}O)4@++=vX~T%IH*
zCI$^{!fi*|OgBeO+p5QW`xxvfuTro8&Mp!F6wn2+Jx0^7nIxH}+lBI(h#k%M<3P@3
z0;0Dyd;7^i>%~FkSjRa=bS5BB-ufdi*!=}=^2YSi3!4x`6Zr4-PF2#27Mm>~ur)`Z
zUNe=1!DPJt3|j>iBEgJeGX6dV8pAAz><^%#yiZ&-i4<_F1h8p4X2(c*EG1kc2()ve
zr03A8#bz;KQ3k5;ss+VPLu;a<RsuZSD$>Ay^&XW4jE%T#=8~b6N=JqA_GzRAuw}4R
z<k7W)<rmgIqVSBL9-ReOqt))F)haJm-LZs}BeyJiAFin`hH=G^h$-l<n)^w0`=#W6
z^>VdPxo9pUW{c^&5zf1cCU5BX=sK;qjI3@NpnA5p?n$1DtzbH@MPrU_X3)}Vph<!m
z?>~>IFRmPQlz&(J^eC!9PWWt|Zo`kYFvM(xe%@@jf~&!%%yxmPm3Pgzb)lb`AK00z
z;LY})AsG|gvCmlDA11K-8Q}}Opd+|)g$?*vB&a(kv!JYHJ=Z0UuoYfVfjJX_C@G?V
zy+<hawspkSCg4A8w<-pAMGc4h^wRGq3KxOoON;nDD=p2mCv_B?YxaTPRU&uwrR=AN
z+1enD-;wkHKj(zeqkC~%{1&5v`RO1w`WXDzf-gqtks*&>@HhxtQ$xV98h8S|-elN|
zNBU&aZVQzNrI9yK_4!Ma-KqDM#}!w`VmJfdym>=4tGsM099&goDrwK|(3e*%nIQD)
zWpVz!w)`f50Im=*h@elM(**!mc*KmMcVjeHKy$}Mgmfq9ct+9Q@}8!Hsfo~O9pmr=
zV#>hqD0E<d6z=TCCS@u866>~Vp58gm>eCKZuNh3-<U#In#MPnSThNpFHo2pMOf*XW
z&ZpVJmw-RU_$K_>I|{ILhY6B6sNay|&2+|tlL94R|JXUz`1h7;!9m1P*Z}CM&coj`
zmGj9HZ~>Qai_>H7^Dvx-^*~_O0})=oBE&1^zR!h~{vv)oW(0<64&>fd5RVWCi3&tn
zSEILB@l;PyP$7{5Lfvt`(B>2f_ETEMpiZO?T>J}dC;bSrN5|dcNntGo_#91N+2$cG
zm+buG!WtEQ3c6qP1f5Kzr!&V_xnr%slg45E9j6FGqcNjeNiJv!d^Ww7=eJ}x+wtXQ
zWe%3ddWH&gn!-T!SPagTAmR_v7f)gkiz_e+%FhA4jc{HFa$odOX5(P}jd054b3ms;
zqc#I|M+`xhQQ`eO`^W42?HmQ#nlXh%nrPP`FhjaMFTHH;0|YSvQT|N}m{?nmsnrAr
zt3#`@Z!%2vv?MgwUCh|%h?l@|8T3R<o($#N#ZAEKr)%D-XaN+m?rxE3B9Vc*Brpec
z8>9OMLlQ_{B>T9gm;9Z5(`OYF-bx`U`lT;lzah!RF^WTjl2eA#G3}$y0;VrVcV6iI
zV-&#I$$4y9MypTvoHMKvI@sGjw)4vJ{a7wF@II~u0FLR&VVT_AH^T^~2l<leMXO@X
z4^k#G!z{NtZr0tY#8e1nkf4|!7l|hg<H*4x+6|L`0z!BprJrCS{?mO;aQ5g1!#!Xt
zi!P!MT~p2WA;5Kj4cM9rLYjT|eg{=voH+6Yj5q`lJMN6@szp*hBy5WX{U8FM2j*B)
zg+Qd>et9X#xEvVkQ?VYPB?Wwn9P^`O>jEz7wO8&u`%V?-yz0FNBH`>n8K5n{oN4Ni
zj{qd70tnp!g&$>-8V0hDjURI=-v{aQW($`H333^og~%&bBxvk%AY=RBr-0etgYh2W
zrMnjKAYR>Ca1$i$j6kMb-f5>#Q<xCuWCj|&D;9VXxg;@)spHe6PvY+%3$<aX1T9}z
zENfCWNbrgBt<G~EO}H9=<jk)`Fs36Q29yNPXO2!05P^H=G-~isO5WbiAp<IP2pPCt
zWK|VMAM67t_t@b*#;jUm8FC(aJ&EvD#|v)(SRQj_9>L^Wk==NNmN7-Fe~qS*fn-F}
zJ4y}C(Fd;peUfc}-us@Spo*PoziPR?8meHTN#^I%7{Y`mOYb)#eegGTTAU7$aM;Li
z;K9?K4KzRID#D>OmUTy-j)`634&~mX_sxdaAwA|CFtV4Y*v_kCk2CW-YhNc<T5Ym&
zSpTVWMW4Ae&r5vc+gM`GzT?*W`Gb8Qk!kOM!wcRa&mwDyu(~7dCWOUHc@y;)uirQK
z4XD{ZbYTxet!_)MtoD|A2Bb!i)zGom>`Q+L&)K{B{A6~0^>}Zxp}QEP`Zc*k_E+M7
zMS38s8N6j5$P!sYE8F79AG^b&QM8C+Az|~rfFip_X7CFOz$hm%cwx*os&WI<G3hoj
z?SZ?`<SL&W!gPT#lBV`^<-xnstF(KE-h*HU{k7YDymw-HUy)W)KTsQoU3@I!)Ta@1
zr$xDn=xw*uA|3yx$hWw4lW(;+CF~=_!qRRu1YccwE;cFeIrS%0K=-p(<41(QAHxUR
zyz7X2Wx*k-5Mn{S2GVX#DKJIWc!%JLAhK~_*TrXhf(z!E53s$OazKS&ldE*z*4^L1
ziWix<&6Sn=IO?SJd}@TeECt3=W&>w?iYjX4ko;KeLlwf10YOSw!9`$f$gAB0G7yCb
zv3qI+@S=faW+m08A5&%HF5>mIA0nK)DWf;Bb33G<Jn?*Spjh@C1-CAxuT>LkafH_d
zKsW7&@<H)k9+dD+DQgm4+Q|fmQ05M%Z%!k})~VCUU#FJ{bhX3(kei%xJVGH`{I!(t
zU7s5$Hm?p^wMM!)%%+5YQ}RbSgH6bk(S!;(m|X)MqoR@BEO$JxJH4?0l8~Lg4KpUB
zxtYN>*o30uVaJaH+YY3w%OL6=g|#LZtBV{Ag)Q>NkHV;Z=`79FLzJQ>TDAl<C6sL;
zSie6s*#|6jJqQVCeT`V(J!hwLzh^6=+&0VAaG(s2m2??|9Q4=nE3<b^T}Bc{j0{Kf
zFS_)Xr=HZnd=KvjCAXIKk3gB1*&UyKfv6#QYR_=Re<;%giU0N8t@LgPEfb^F9`w4x
z1BK)$j%=59G*?n$BBByTNJOOb1o8ZIc$i0;_A1qKYgy|SWg0ax%zE{uWb0@VNdmze
zkYEw`KA?N$vI+>Z;q`*cw^AAo1#D<uMM)K?<bu>81uKlqSu{%_86+(q>d<RSk(+FE
zr&;NjfwkV7uc^Tk`;~aTNp=6|T~;60H@*1vAf<W=&wZURJNK?x!XQu1<Er+B>eElg
zWnDHRd<TM-y(+`l`kk5HnM;<;-VA9hiwU0$6vsWrgU|VmE;6Y`w<gikoxmwwjW@qy
zTTFw<_Qpy+T5l>N-*UxR=;_PHW^5PelFBAzF61rG?cHM6=~k9sn7r<ga_|1MzySyO
z*cbnn`U)FdoB5R9p;Fyl_ome$KhNs8NZGITrmt>sWhglB<!*19;w0%#csL|4B?nt>
z<$RPeooFPyo@3j}94aZwg<8zgBxS$p*fO%(fbYHAopeveyYa$xbJxhH*lMD7xk^K!
z-R!Z`Hq82g1|RlkdrY2f^2*&XuX*<<r-kS0ttSk_VcoNGIEfQU)$QKC_J3L@Qr!U2
z84oB`z|li~@D4AC^j_vPi&nm4H6`_vC3G%RtyB)auRn)(nH_KnON+KK-~hrCo0~#p
zk9~b#_P+U3XOOtmgTrX*gNQ6hp!Yy^va`8lZq{Y3__B~SCl^q#M~(+E-mshyi{!S+
zr~~d>1|3LUSgBOnuV`E8RAQ}#cWYw#oZbhV=ncRDpx{pIEl`Un=3Fy*SOa1Uz(xFE
zcI9vJoK^lH+F|<8KRao6hH;%bQcVHTqwUBNG<H6aDZXU=4~xscxm&Y<-nl?T+Y4BV
zh=l3TVgr(sf>80Dru9QGBeUr0tnxtQQhXCIO55NbN*+A6uLWsp5@>XNy`7+Qz#S&w
zytOPMeaEQdvvXWL(TWX=7}^d&hRLHqjiMelVca!c>hzVA>*{3)s8Nask^eYL!QI9C
zYDmM{txz^wi>Uv~eyng49L7UsEs?kC=EK82>D0Y<={~eZ^AY2*Ep(>(cWUFEZ*xIJ
zSO~K|V4bjYlXrC2LGnKsig)EoaE%bbAQp$9g-8o+5XlYdu4P>H-qUSGoblCUjt7RL
z?&XOieKU9CF_*?b?8b~2d)Ij7!srTMh#J9kXHcaJe7wNGlp?_DR^PRsTn$>_M*`G{
za>IM;mVR?s#r7)q#^U#O9l*Dqa~Q|=PR{pvdYgh9V!&gQO3v9~cc$K3YSi5Hq92+g
z#=eJw%Vfi+s}Cl2fo?k2<z{|%wkIjo*JYM2Rb3-r|J}C;es!?IrQ*BddRIDbI7XqQ
z20O19-{LJ;U<LJ4YO3GyL}_zVL+<bccOhtstg{7Z)DSzmblo2wT3OmvqM8`OVV2sO
zBA(q`ph}%`8txY#E<4;8e8!&EpX<eJkBK<JGSP7HdXsC}=qKahXHaa_lhLu$e0x+!
zslD9c;gF)00^qT1jok-jXj_RQ%907wHT_cHtx0L&4wSF@Ta9|4+EZGI10n{;__3JA
zZntDiNpRl&W)nZQNxtM|ap;*zzmV1k6C?`<%xf+6-)L)yB_>*Ft-R=IRptH=+5evM
z{QTNcws_8>S!r_>M7Z5d*Gh4olXy=04Y<55_g~&^j)BxR9JmYR>eGmJ+2G%{;cdN7
zrQ4R<SQ;@md)Ote`=lMW#__5S;_84!ndKHuzCC7xT-y97u+!S2mawm<!SIHvK_83j
zv*Y>s%^S~$Hmu@9d)cxxCXi*#bY2W*TCA}zkag_b?$vZ#c>Wj_XE0phaKynUj#Kuh
z4MjCmKz|(C!v;M|@`s%B@*_cyS0pS-Pi^;6o5Q!XYM&^>F=0K^R=t-7J%~>lwRoT-
zPsc4PpP|4=WK2MLu*5f2c?t2*K@wBV3?J}^BA5aoGhYvzN<kVf;TvCH>#h}0IqQ{X
zdZFwgn&o}iUjp>rx`M@uwHA^6j!NUF9v6Y4y?%FnVW77?>@_!t3$iqnn(gqtel0do
z*9|8uEA$B1>lo4#$2E8My>ceOjFuSBS}eo<^r#ZbvGAw3kZGfONezH}kyJtYLZ+7a
z!{V$lGT1R#Bc7i?=nf&69~V57Niqet-Fns3TXEid3rI!)lv!HPwELi_US=Drs3C1X
zCqmVTJ*#*Pj+{*8;+6$7gtFCt;AR~5T4J8h;)e9G3qg564522dqrK377f^$}_<m(^
z18zIw2zwWhcnAooxcs1rO`s{XNio@awj+q^?ONv-b%Bz}=3R3^@oRVU@K5O~xUYjk
z%J!Td<BsKdF3WBEs&m0P)u+p<k3PDYx0$|ANPL+%cj2V4Fob!o#G1*36I>}0v)6F(
ziIhtgE1dUSez<#6;#o?de3b9sy3liA`H0?irTFUir}ZwSDb4DA<mKV8=^l(k2j7f4
zm`od3$tIV}5xQ7<k!^LqHGE>9*p26=1E{q!J!T=LYhJ3q&RHkY=+jIx5o|L(@uS<b
z>eX(>WPm~c<Z8O+EydVi#fy6bIU9wRVjdE>`zmC1;vcfD7sHD!UL8Jeq{lMr5x;w(
zv_9^jT(mIq!Y90ZBJ>1te*J9zisjsreJA>4T}(iJIMD&$=Iq{-l5P_rJ<jT$lkk%p
z(E{s#b~v4)JK}OQOvbi*btcJQ0`0m#xHt@o>CK;?uma!OdXI<kE$6Vk@NI>AZ&MlW
z&9d(%k4y|++JYueM5=k8`JJwYLLfm0s+As4kZn%d<Cv&cuE%gg&hdiN9f6;L>nELR
z(X;1j(^z_Q%=<V{;X{1MjJ_UptvPS6Mly6lb~7+&m&93)Msy-Ei;`@piS-Lr$!4x@
zh;Ci*X2HxcxAhNe;FA^+H40Ysv>*;;H~+eFI^^1;nw2&1C_>s>Q`2y`ypI|LwQ%j&
zh}0!&khX#|Nc^SaI1dhFsP$<_)AzS|lFIV_2$eV<{G!EuYirye@e%x>%1xi0@MXiR
z9%@>}Sl1n+d^Lt1OoX4wXo`$++-;+vfq)~jyBJ7W2YNnTjhWB6cLan#Um0~48kPuy
z0+e)whbzO%kGE{xU&9d(86u{qh&*M%0dic_P_DZ-a`PvTo#L^bzac%F2l!i{KLIxi
z`kIr_c%Y|>ho0F7sD2w8;7l<)hyi+H-R60c>uNVfib1-+nWeK5exlh^YNjOG&&Y^J
zMFZ?)5e4uhH=u@xA#Ry_&b{h(kruv4TMk4tn_WS&a+sxa1+t4CE}UET+!}5N+o^k-
z=tCQp9-YT%R~I6gGVL#?iJ~(S&Z!iz^)q~&sSU7^dU%YmAcRF(?!?(kRFF!3RjONs
zF2ZEm5@|N*bzi>q#Go)|pnEC8T5TDQP@?@^ED-MP=7VEv`||dANNPLzR}g?sz(oLO
zB)_sGHLV4D$3o+4JWNXap+I1wc8WyaJciiJDecN<(CuJ6d2T)&`bSZmnD2@AV}cUZ
z6cOb{0gF9C5{8rblp)UT?Q&&6dH3^^DeCgpsY{lcmD5K-Ice=M=|ijwqOBhmr%VO7
z_;7^LYF+$B?f5QFN`V|^_&(%fOlHm%rox$UTkb$jv^C3<iV}xT{9S>K#bew)#{T15
zaRHv$1cYyH-y=99eSsi^au&r%Ly;o+=pI3ecww7};Ct<~L|z}9$w!X^Xrv!G2GS%j
zbG)jsJFpwl;{>($dV2b(B|a}5+o_fqCjmRE@%eA&2M!+#KHi%N_lN#=*gksyx`WVK
zBUDAkGMR*@6~(+=jplaYwM(H_he??H`Bj8&zo>DYcYK+uWAkMFxCHud`)jSYf;i37
zw&mo5n=2l7EkJ5R$-(K6NOw(S#G<1@k2!U~`L<5kV3~tFXi~A=GxIA&<k`6snv?wG
z5KBe{DppVCXZ&T4GCaK;n(1yrGbQGr%{4}WNv_+(MGOz`3!Y-cp~Rbz5`n4&6Z7VB
z8qLKDE!CbB{d2QJpKrz+eBMLrZre(p65h{K*0ZjQF51ZkS0|kV29A>tz6%|H%^xoL
zo^Nui+<KfXu*1A)vc@~ivxYc>|GhH3oz>a>z6t>eN9p3|)C)~SRFYnUxIL={njY_`
zL#8vhG~$)en_(5~(?MC9U|n|B*fxh(amdnDmo@mn>hY9m?(y5!X|cjP99HX@9JE5$
z)yhqKmZC#s2cv~jUJHBk|I;2047!XoMiJdj2dmJFsGHf)iIb_*J$#+$DRgO`vxhSd
zL*`X5(;N%gomGF)Fs~76j6H$i#O^!n?mTqtzMEa^BD)O8QIibBaCI<Z+DJUh)S=()
zr`<v9X^{8mv?a0!PVZzh=ZJ4{`T<#v)=8CUoZ;^RB_BCMOsZZM(ps-MLDFr?8D=8r
zF>GO~iTDSD8Kb*$GUs;z=m$?3>{?twF}gx2er_}Ez9@(Ya@&04Q&m~t>_3LjJIaWQ
zMG}!XLa~-L^SGDVH~!GCN~U%PKxZV6UG_{q{!aWM_%A&>a&)JvT*ILK<nY2<4Yp$b
zy(P0Wq`Y+q7zri>HU|WfJFOS`!{Oj=WQcRtR-ItUbodr=lig|KnfwD`oZCvBD!d?J
z{0VdHU?(~X0+}H^9@A>Po%tjV>mOzy?P7{)a?cuhKEt1RFMdO(7(WP<J(H01yLt+!
z2=q5p-ts4<jU7KYIIvvk=OFt2l$A90DV|Wbp5xiu#$ELn6>`DzhY^yM0me=fQ^#iM
zxA_ja_#-`SCrn;=^z<%S-@YLHwq*sTcjOwjnJyhmVVOtHJO|Rbs;Tf>4U(?5$9SW;
z7xBzNu*@I#pe=D^NeMmvoaYAk4OFS)8qRpXZka*fSGhf^Bpg9RrsSr`BdbGpK0Dwm
zJxju(BWX6lWe3UC0i07JY9*K08fKsv2|X|D)!=?CjFw>+A@N+ky@iMSErfBHTegN6
zK-<^Hzxv)`z}ZL<@g`(9SyW@x*rWD0pu0JCTC4kG1C&rw15w3hHsAeS(Ej8CS{;c6
z-%ma|OU5rG5ynKvS7sM{W}0Gzh4RVAFsb*v_kl;ipX#Dn>Rh_+P-<6kv)D1aP`rhd
z{ktX2>Y^uZN4mU$Dp|u&j$Tt`fa1=^yWSjVp@@66#N6M^(OduiykjA*I9Q3tZmW&j
z!D-^u_FNO&_&a4;Dlh*_jQ)HFC3RM_89%^Z=9#zpB56MOgrE$JyP-cU`E`I6ZrQOz
zj3$i7rsrzF4o-(qNlgvKTJn&hdbBpb>rztQTFwaX>&mF7IHtT6)#OI<*&cPf;%A5#
zYKcihnwgU3h0bU0L)w|V9%+Po_f&nry&m6lp-%aF7MF(o(f1{m{8?-$OW7V?JXc0^
zYLe-5mFq}#->pWwq*ZRb^D}%4L3{R9gv%3<$>qD9=(~Ge;pj2)U1BokRguG6`l?y^
zllwf=)Y&_Q*ry@Zhi!!Q1R>qB2R!s$Mre&#S8><x=Ck1+EnYFa)eE}JHtlD3ZO{3x
zipE}*W%dNig_n?QE*E?8|8rTg7df~y()MsB->O};1ugn_p2O!9bJ5k7;BC>7AbfId
z!xGh?&{Xn#{F`b5FJpQktL%;pfVl;!ZXS&V7N+XKI=v(-%vQWNSI^_!OoL&r@|8`z
z7r0OaXyNvd6(Dw($e>5K7axpGht1Mbw7>YQb^$dh4*SlrCn^(kVOhXe`wgcqs&rtd
z=<CXOT~zUpN3gp=Vl5zgdStde_~subl>wy3Z{LWAspv{sA{#Cg6Zy5rmU<+>cjHF&
zv7SV>b3G=vAlv4^pTiVh#$YdI5p8O@DvlQcanNMd(Uji|Ldsj#%zL|#%?NyTvgkcX
zI4HS?6Z@JOT$)vUNQx^$`YH|MXI|rxeM>|{A4zab#1}1aTmnC}bYd}KB%C13-Alby
z-CqaRG?89Wg-XIg=ED_?JM+nfccc6vfoOoAkS50C?dGykT)*FibkDkPS5U)5`drkE
zq<^=jW_ITNoHHtMQC)3suefeiv-HNF!?Sy%TCfj_N$<aGjGca7mozrC6Et3OfA>j}
zC|<sjKQV{Z=1UVh9euu|r|y!pnH+$Edci)KURH|RCUiJttAxn!0OobZJSY`bbIs#|
z+{xs7P1};;6t0Y>{UwjybD9RlL;FFG)_IHu(fttS1081hRH?wRT5_VuAB%>wBu&X*
z1<=+*(*AIXRGFBdItgXUg5Kn8igFeP(w-j~BXDQc)YL0N#Pb8!-~p}<x%GbC#Szf!
zpuNoXL#FJBkdDMPwXx+-<3YDlC#Cy_XL@&+P|P|H{B0jR>#4(2{El`*cV%IvDjvQr
zdFQgfP%M{F6HK{K`<PC8KQGq0%%q-Qty+NUA-DDXr6pPp*q1wRuU@NPVI5oCsd9w=
zsmoC#09iD?-b_9em2C5KNsr6<@XfqfA#72NYN%)Z`CF&r>eKzppN+?pWwE`3i&t46
z=i=Wr+!MKTxqX;0R#)>}j9;L^2$#V{z7;|G$RSQwrK;|z!{7{$gWEQX_^aWQwX5IX
zTM%n6Z*Owyu1_mUp~7PusQJhyEhKt3lO*$Ii#@@H=(yIx_lKziikB^(WZ(bt-lm*>
zgp19pJBQ7+ggPlqWv4sA@!V|hHwUyvjE!>7zGG*X6%d!1a({d-9q6#O_Ur>%h+yQv
zlFX%7*8#Y}y3d-J^XmkA;p85!;V9lxhf7mv#^HA0oT^DxW*$oV>-z{0c+}Lr0GOIC
z7E<P?x}rp|?;eo0<=|uH-n{?`r$B1q*Y=-7RR&hm)_zu;gw&(rB|?K!>vUW@Pef2H
zR=XRf?NQm-DF@b_*MhrbD@0}6E+DqQ+QPFGv9O*(pMyRqD|JwDlS$)Ut~yrK?RX5m
zPqvuJ?7ELtM8+rE$Y47v>fX<$spAD0#q+gr>xd$%yz%%xGGMhb8xX}|qR%5MD@*T7
zj5NOSkM0aAfU~sJwU=0GdrS#Oyj)K41rU>Rui>AN%RzyN`##4dR3#KcSGHmH(`*~7
zAzKWamcRq#3T_QwAm_6D%xjpF0_}2k)BXZ`8*3@(ORzU_1XS^#s_6uVj^Qa>T<_iu
zP~aA+jV;VnDQvu`5->P+8d8;f9D<n&00a!pj&Yd}^A0SnEiYR*?98T0^X=a70ING8
z$BlWTqhk3ms4lGKg+V6x6!)+;S)GQ-e+cM7MFOjA+d%bi9w*{d{EMOF6B85^tZ)U9
z204U!7B&E~D`LWkSAr$#fYYFbJX~i6j{j%<1r3>-w<l^%sBU`-auc@ga&T0AR&HNX
zfl+dl-|azs05oli8hv;TJ1&k@nTD@ibyzHc8rOvLS;4zUXwM9dl)MEis5euTo5H5T
zrxw-Ab=#_rSWfv);x%CBdc&7-&QLf*uB-$Hr}bi2dslD#%gy09s!8UMa2QtBuj31Z
zY>$oU$GpDstgmQjmTjUWcuX8j>C?@ZG(d@zGT#BMs1eFJ;@FhrI^cCliPJt^)z0ci
zs$O?S=xT$2`RBIQx8c`A4Prk<lN)n6&jcuBJ{;aCRepOB&W8sL#209Jip+s@FB5vz
z3xA+zM7pGAXdN?JeQdQW*iH!l{cTew3LcxV_`y;=7<;nYH0rkNGMadkWw!xasxQ|S
zrL2CHMT*;Qk;Xsl8cf&^XyaU0y$z2>+Qe?|SB}h*#6F+y=$?M_CZCX)c;S%^=nb4;
z{w(r9e2fPFjbC#mExj7`jT?fiQ#J=TK0cs8Apgmy-3th^Z>)cGXLqbSev-{3w+0o-
z>i)NUPFcwtPpKIpLL3BG=G51p2#Zp4PO&G<w%C&LEg&_=RlKHnJNVli(cy<!OyDOu
zhj_a5c34`w79L|+R^q`DEo}D5)+IF)lZunUSjA?gVZ%UqmB-C<)@8wjU>jX}$%wsQ
zTcYG;&Yr0@`L7N8!o(eBNKF9diFuNH$bL@vkC31(JDl}qF&M;i#Mn=UDkg(!h73=#
z`NcebDWF7ZwhJsa0%pOKv$@o9prmL8no50UxoVIpD`Y4%sCVk4Hq=MBQ}8!cnjp>n
zhB_lX?tEoFySl4CtlTx964`maFJNu$*p`A9)|(SFdteNI-7XMJ%3ZuAzzOY}bpOUA
zfG_TBs&+$P7McT7xr;ElnxZWF90HYbx$`K?&4q^~$d%q6ZE!h=xhOqz3kgAzM`2Ht
zo+ZEAHXESEH##RdZou;MBWnw>Vd-k~^_vM%VP>q)Jx<ir)J%W^y?)^d62lkw2DPue
zB;Xva3N2)S@t{8?2X(#5x??L$;m0{r?={d#s%V7FGlMDZ%Ve}ak^EOb3T9Hzg!^&N
z=ix^xoU(3D#A~1&<-mR#_nfWsrvyk&bwq2==(j{0)tn(@>e(&T*49q8U-|JN<F)0p
zk;<W2eJIFo`xe6grB7xzeeJ5KF9BY3Tb}i-T>Dep)4;;id<vs!`s86{P*nUl<Jd@n
zut#PLmuc0s_RDNQ$I5CTZQ;sPuV%7;D3j3{S$p#u5rhKl(N=18epTunX%Tl*SWZC3
zVKTnaeZ{fUNbexTas9liYWc<i4UDI(4a*;FF6LP`Xy?y+;HNgM!HFD0u?q@*<QuYc
zp$E=9^rC)Oc%}#l+fW9wm${#n96xb_yI>(>1QPsctjUkvrG^=hK6LW%Ivc2{N%qua
zz*UL@dKq>jPMYkx^-ooEIGx~N^=)2*QiO0ICw8c;!61(H=DvM`scPh12cNC&?Y^B9
zhOySJOlpz?2TZ&RsKX~HC%46v4ivkgh5vR>K{vT8?TPd`^6%#T19_%Vyj$^;x)`%Y
zU??{qUb2_V96K!?#SuPvsH}e{9oX2s>ut3~%|zfgOAj;6P2FCEuc^Qi@C1_Li5$i=
z{jS%!*hh3aZHRLNx}M?;9T_`4jHhUCGEBT}nL6nvF}!ezwl$=Ae%)ML!i(8geKp*<
zXuE8->AUScx#H+GS13(<4j(0%{Mtr>Ohj$RHxNjlM$S5E#0Mba&F@9u3dQqS{6n2P
zx^^^n@ND|2ofFI^%P%V%>Vr8WX2{ZS-@Vra6Bk`4)yHZID6MJe+;Y6N5!i`mMVelM
zRl7(wix5%~7wtauh^3o<q37$@{br**QK&+QG50VSvWwu^B&=Lwk<j_D1-3{Nv~tXy
zgky)v6yPKhxmV&urjbbc6B8Bi_4wUG866@~I|Lyna(c#LOHtEh()#0RVx|aAVfml^
z`40aoaDmVTCqezH=f?s$x~d#a9~_cxDsz35OP5QT0AyzntLmNY$#BiV9}cT7LXJ>?
z#&;m@MjQn>%V5f0|CX)NQ1!z3^VEpp_ujO?;q!jK6XBH`{U(&?nJt)&fiU3H_80WK
ziSD@6)YLzgmdu4HGQU7)uFjK^Oy!5hVZM3Y<C2#yR0?p$d~?yxZUk4*`-g_@ROk3?
z;dmc)fvrGj0FbjE6>>JFyB4p)ch>`-_2m!jI4wT&obN|T+Aa(lsXhVCSmjT~p}LK_
zrPU4tMOkua8HzQlcI_{^YqF~UhrPE9t8&fzh6P0h1XM%>1Vl<&rIZ$=O9bhZmQDo(
z1O!wh1OaKJk?wAll9p}(=`LXr&;P>ho|$)M-_PvX^L%-adw<vmA#1Jcy3X_b*Ds<D
zt{#{+o}cZnh)C^CvC`dn5<T_()OrcXVn8y!vjYjEv%1NJUswR7YrVd{pu(!(&X4)Z
z>iFsOK{77ed-M-dwD}65ER>45QJ3*}$kOvU$7x*5HvlA&RH2;}fhWjj)+1%mwts7c
z*?y^yqQFF@vrx6jm{OiU(!d1~kwmRM@0&Z^MY(jaT$u=gxY(K1)@-l}9;Q@<TH%ZY
z#MZQ*9&NK!Nw}e7eA_e`cgN^Ve$0|L#HW5oejfXKS(_riIk-QzZ=}XNUbt>IP`=`h
z$PF#3mwt$))rr1nQY={CsxjFILb_HHCs*-Kzirjvg2rzMrwuK#hU#(9R`XfF3)Sr_
zWxz!s$(ufr-L<%U0Wagu!F82(dt-Mr?2*%o?WD5l95TBKu1uR!k%W$GU2fNAZ!EeS
zr>^4n>)k~;O%ymD1uWNAMwX+16~wI>bri71RPy!?uDGi3G5Tk;qO|sy);Tp;V@7As
zQWcODMJh?FSUup=eB8aqlPk?^yrFk7nNnib(lbm;D`<99mF%fg-UAt9x&AfO4RZ?h
z8thY7{@yF#9}v>1VgjRLnRt1Rj0f^lrQThyF<xfdtKRK7k0akzL{$PNN@D=fdGrA)
zZkcH3EtTYm8Iso<WqM4I_>`p;v6ReXgA*|fOz-l*D2a1i)uOnE^Apac>(%8qm~}tD
z_PS@$)D!WcfQm!ChU?UT*MU=(YfqLIi_`W}fwcdKP=WQ7#Cq8n^z`nR+8XD{SnT#h
zG!GLDw>qvDm6fI=qu8g?&(<xpBIG`U)!eT`1Y$904<Mj7DNnG41h<=z4C}UNUVU(w
z{k{%0A3`LSA?cjo^Ts8;Igfk!))h1~G|WK!%zLdr6f)KOFJ3akkcZwDcZ5GwnZba@
zDCT|Y15tCMpACoe2SnE?F!&3ED)6O?zb?~D%!?X@reT=6?Qy+5Y`4^^@R|arTGz3O
z6Dl0m4dm-#C${w?9#o87CU!lWR;Qo|aA#iacqu!Npb(Whfkx4joGH&CATY0Objg<4
zAyy$&n%V&M!tEVjRBJa`iGDsu>yl;s7#oO!OGBULOW<HH)4_3^z?mJ)s;a~6I2A<O
z{9?TBOA@81Z%A|nBVJEE)7E=5;@WJxvMCBjrc6Psfr@sK%AH*kc|)WIT$u2$H{k>|
ztyhH3)r`Gk-rb`aR-9)bWsALYd<$v8BdW2@p6k<QKKzk<LeVC}1Mj0Dn6ua~(oB5z
z_wP-H+Oz@RKlny737hG)_1fu(n8i?U7_>|Bsm<B)_*`Uu8|t*lHopY9Th4xGP<U=4
zQ{#QdxT2@sp)#m~jXdhk_z3E|b+GODi%dtPIMTH&dU$vAglAC_u5dJdsCyYY*tniu
zJM6`Pu<%0|H5sR`wo0selZ7}QCa9jv9HZdrKD$DJ<bm0i^*qMg4+xXze6hcVtQ1O8
zIVD{#+=OH>$lPT2MUgu}{`ksCn*{0G+lMwWA-KM-tm-<SLLzQHUDdDKe5i~&+x??;
zub(6d62IO-^Tq&-P$@z#g*J-)@Y~CT<5<SCV#&W3Z+}~9M_)lL*U%v5F!@GQO1Q$o
z05Fs?oW!gKufIg|4yJc`o0C6Y8+IAO*~B=ryJf>f92<)_!^N;=(a}kAI|FZ}beWg^
zC{moK9Aj3$qm_=>Id&yf=2(Knbs&41?zJ+`T7qv|I{<p=%+VFS?bLJLG>ZZYphax_
z;Dw^O!N<bnjYocwpTFwknJ@%VD^PlVY>!(*n$rW^l7GuXSLECPWegg@@^@qG8lW?f
zZ_?X3D+bn1w2(8h&41Gzblo0)EG!gQK($d_dQxG|V-J&8z@o}V3sdPGv{{*K2V9;)
z?Gp%v=R09!tPC@denqWPTXAS1lV)m@>ydIUT&45=Kz52ad!<v7r9Zr*ExLT+2Y6`*
zfe~xOBHQaMDWYapzpYOyaK0AdjUb%@$bmi&_B<%AMMP30g6Weg%dVeh@40u1iTE_g
z8m}f;<}jh3E<XDMmZLskO}~#mMa7LC-vB{y1kJjzfXKhUucI(876hL>v-qy(7ACVD
zX`$u3k8I1|;E}P3891}mG4?(?hJ$4ZE{~hjCF_L&CzU8LersUz^z>Ac^E)(|IYZ#{
zCUaDF*_%y%GB^|J>_f;DSjn<on1ONtNG|y9nZ-Z_5KAlKADWYp4AtP?k2<{0gg2kE
zZKj#mT2af~q_WoFWHlE`qspGH)Vnd|S!kxec1k{KivjF=E6N@>=d~4DpU!9(0ijEJ
z-*C1!pK(aUEu*<DHto6JU@Ei+G2x7?BuGUYIh08tF$OAu;AYTfO^#`0Z6;<nzlwK(
ziT)*=r7VvShv>%4R5<ohm5-(yw+qGTT~)gh9|pM>Q15xRQK=<yR}EI}?=z&XYBOPO
zRIT%8%X5^|?sMXnruF}Lzt5GbkT9oV7NN?y%UMTYPwpEi6U1^UJT~1W*T6RAR@q^4
z*GHdR)RTnNqOtC?4*Bg-RPDLWZGDAW+#Fx&Y=Y4Yr&QlgZBJ%4?wHz*9DcJ1t7^19
z*p~6WlDhfCV11pXK0a~(uH?*D-mrbW;lA>~4i=&ELT=g8D`kGdVN)?1*daHC8SDG~
zgyhybq5XK&W##(*x@eJn`e8!jjE#Xq|5dk}MOxWHQK~{$Cu<7^4f<Qfcc_H+hLd}Q
zUb*}cU)or8EHybgm$!Xxfk|<9xOC*Sq4UfG@<JR;Oe^m1VA=Fe+m*@D<~tt$-r42%
z%FeglM%0t3mq^-&m!2Vrx?|`s&s!2^YP;eWr@00JGa><$fMpJcdq@sxrNi}lS^!kD
zwTuEJ+83N~)o`#40$2H$y~|JoGytYtKZMh4K!HZ;$FydQAE`c!Kn!-Esu4c!5J`aJ
z)$o=Me;oTI*VPnY9#qm)?-XUVT$?~J?nkG<Suua~t(uVC_B1}5X-3n|11?!8vL>C&
z47(K5m37K4#^W`rd0brJ-Sqqf%DvZpJ}6}|6W<!kOqjCtl;z)705*iV*Dd=6<&H78
zVts%q8$^YGNqk>hgn5<Kgb1B-cC36S38(q36XB0Qe-!GZ06<558q9>EbZwKLrHBmR
zSUjkOyrraOihPCRXJ7<7l`SnL_4@WnwhdJuXHuLm2VeozVqGDV+&lm6B1$&}PJ*=#
zQSvZ)D<%lv%PZ+g1*AA;*_!jsQQSo{Hong-%AyqMuUPh?6K7{bOvitij-V|&0if?r
z5cvX1^ImV2xxse66#-g~qG4%V$RC1t!F@-@#Ih!{qUs|`zrRdLR;AqXeQMsr?$EUj
zeop>dB*uUv)1OzA45-PfTIS>wGqNJMf3Ngod>o-IzC5#f<+s982v|KLBbV2_zP#gT
zdHU3@T7YQpGfClA5T&|KcT;dD2rK6KSMKjNs?{;l8d^z0k&>=eB%@kjWM0~VRB7yv
zue)5RFJ#7&%;2z7df|m8N?zn1u9O|ET>Bhh@v^F_YS2L{Mey!N6~NVRrT7+ubMYH8
zl$y()+)cyAs{n-zl;zt|HXkmhTO23|jn%IA=ABrg`j^d&vjq6m!Xp)0ts*L9j*k_?
zFMePcXJLGk?$#ffDJzjJXr%q(GKpm^MGD0ODb4fTs}^1id&{m@alE5~SY1E8liNsl
z@-J6dmbvA{td@UJTAsJZGI&iMw1OTd?Q=PQ>dZ1PSbDRBLy9VRQfEhW7{k2};{ZXA
z_m9;T&ookcu2C(jQ@r%XjQG1o{6D0Fvm)AX#NIS`J%!S#ppdm7`=TBC%*2(_07eV?
z1N@^|PUv3~B?&u7rt?2mpvhLHIjpyE3Xh&l6t*C?-Mq*wyCsZF6^^+*#{h)yjPEeD
zWJo@H+~L7I$(an{(e`a1I1QQ?GlNP?x<*+~;RsT+lsU$4fR;Dm@<Bf2V&X8|mR8&S
z%vIs0;ZvD|j5WU-4l9o4D#Z$*dArT2t#R2e7>$@F53YtV9ne55bi4?$khhIb7s(cX
zZm|^tv<i+myiyY@`(gF0jQNr(FKUyQsBC8ig}0be*(YfRy|o`XJEv3vzNv6=lgk-W
z!Qr*UDNBs~Xu+0zqigvmiTgr9VVUd1>5n){#fa`Io&0ChxHbud_!1r3+FkAtLWri6
zq1yd4G!S4O-j0ZMJOXWct~JBXf`i|F&kd%m?;MFmcx}Fac|viVSmMKYf-0Ms&~f&m
z;EPPEFTA23z2vSZezr1~mKA;~BLlRtm|zI5xi06=G=D=b<sJoMP-zyG+3TIZd8^<g
zYo9m6j3bVCfmia}J79MRHAeQY-4|nWtjLCRn&z#VkJs%pka-UWDEmX&lJEj3TXeON
zH@U^Hso!yGU-INwYvG?2M)bPQS@>Je^!>1!m>gc6_>#NhbJ1snar{G{H+3Y>dNTMB
ze^Ri6oyL%!v@lT8^)>9ap&#ZGv6LBcA>}?+^YQcenJc4*nQwYBRKqxa%MAwyWWn7K
zCE&x%Vi&x+Ts~pTLr0pK{dn6vRVBW3RuY9vs#lxPD1(|}R<9}TK=>0AUO3<H8nzUr
zP5oG%DBOC~n@Ncs%4o&ykNKdT#WYK+YDtcywU%Jx?mb@?&08R*7aR!9NvF%1v9lI;
z?%W|;jF14#g(EWPbD!J%kskDAkC*38!}smpPzSS%pRkq1B(mL?vgaum^>*{flSjnM
zo1^z5#<2#b*tsp5svSbjDza2=`g~=KQi*$bw{XuzvS-h_OGl56AT!%wnu+Mva-i8L
zyM*4G?3-aziW`S|^9K!2kR4SkDbL*GNBPF!aO#yoAV+tec!-qC{nhu?Ws$}le<*vh
za(4_m@`0fDI`Cmm+F{pVwYplM9~#JYBv~8ZdFM%*d5uv3HL^V|)lPDfK_NwZL_Gno
z!38YX3Jn0Z)^a>2I`%%I#ZfGY21B2L^h!?|3!2_Ios+xVcZ9H!w*C&RrAbKb3oGXL
zS*!Ned=~T4pgpC1Sjb(0rm-!bC_(V@^=q~&6W~GVn23&ACv)nl`HVD}IV%fn?+ln^
zg`Ir?S!CEL9FXcU+wY9%!7nXZWS;FiB4)6nN4h45rN+hos>5KJ6<^49&DLP3SgFPC
z1aqIpH<aE0XMg9tyy^Co$uUZ}j&8zBdcd2;qypw_jnJ@Rf|ND{jIjp_drwUR3QFzB
z)`Cd98RlKmX@HU{yfMd~1vT6&K2#xew(-fd4_~Ve0b}@{kXVMDrpt~#VorYI)Tw5$
z95fo}u6BbGaL|q(hvva!_8y0>+o;JPSt*T*&zsP4X#x{Ai(2LlZeo)`gh>S5n23XD
zkc(mq7zeCv(WWyb;pZQ2e=}3U--h9J6Ch7WKc_qQgzC*lf{Ev-jy%rYZq9y_4nwnW
zHsgnxn5zD)I37rTeVOM;`_n32@I2mx_8y!I#*FD`<Xkj38x4T@GP?JHtgfe!eL?WJ
z06IGQ5ShmjX8Aq>8+?0D=Dl+<wo<#6S1`ka{7nN?t43T^b%y?IXIp}3Z|3*-lPpHZ
zJo4gF?|80Fv!=08jsIwrFMI?wp5yi$oev>1+h$M3=#@lrr!Ndg+2XNh7hA%^_Z73`
zg!r_!$cy$za&*hS?oUgW6PDQrSsf-M4n96W1i9;*-*WgY2$38BLzQlGhSI>nH~YHE
z?oL#M@IsL+G!cBJ+nR+wG11yOKFmexxM^f41E7%v3EA=izR`igCxd=5Q*Lp>%Z`<s
zPx20HIo^9k0-Ixh{oJ`+%lFhJ&8kNTothfVEy*e#zX&q>-s3vZEdSAaqEn){ma{4&
z&`WZd7Q3*#%I)cp!Fwiciqsk`t{Yl~yZ&FD@;j<HL>mhxT)EZ9T@Ueza>iIxa)$E)
zV&7sZwY%V8A4)3jFQ`<N!_o4vS(>Qwhs@0LR#zjx*J~};B++S(+JL`@0i-eUGa!JE
z$BBi}GfR(H948_x8?Om@ogsUCx5~eR<i`SexLsjRCdix@)-T>ahy2Br)uXAnv!3I6
zVOkug%iyR{r8CMNzc!W{vV54wh{f<Zn_9%%bXSh_9l*HlR(X`HMQsmBPlko5ZNVZm
z-&#CQ0%btp3NN<hK~%J1OwQjz?vKD{`*tDEGrNqg<nk4h6(L^HChWVk?-w_94q=E@
zOIex^XWVh%@8OZwCg2n2=UI9pUh8{1k2Pn~2Z0<X>~)6dp^1bqn;zTy>ER94a4%1U
z?pL_D5gvK+wQAjI^-VK`!3W{iiA~E9Ckvd}trz-oPWYqE7gQFHb{WOMLz?c$b3%|O
z-o(-E;LF)D&7eWR-mZ;}gZmyykyC|XseZkQuQ}sg2D?wVijSpv&$3x9CxXL-CU1Jg
zL2@%%ql_xu04FaK$job9TcpsLB+oLmF=z|yJ$2@KGXQKT@(kK?x~&K@S86635m`m~
zEXhzp{XM7U+oU;3*M}=fDPfqsC5C`ECO-QGZ;udJ3@rYv?(zp+XsOljj8?zl>|0BW
z3(;_LeFKuypGkVt!^j)QdbK#4N29La0oZ(G`hKU+9L1dyQ`8HRTpbM^{<ipfzaaDB
zvWN$HhAnT2x{|_T?8xeBqhE3+F-LJVy_#xnSreD%3n*M1aA1pRrJsFy0Ocv~0FsfI
zm+#b*!<Z|h&>rb(B{1^y^ZRc}Q^V|}0^Jxs5lY2Ekx6BJ`ef0&3@pwN|G_VzD*Q4*
z2PCITGGgv|s%}3Bwa`=zN+F>N%CEaH^rZg%H3#E4jJ$dSg51V-!X@9LZCyhP$@QFb
z1`dhe!t_+LxU0%Cf-UZTZt6PT7Va<Xeq66#jiS(=W`Fv_mqE+!r!HAG0ndY9y5izj
zZk2vfcYXl#>Vd*$vKiVe_9`VAtru@p4hu}H^aRN0G{;&?l=>?TzpRZd5b3uVP1hXn
z*5qe!9eox2><p3KU;^rVcb4p-leB@eQ_Fj;uzl8s>hHJphesmT>JHSBDjfDb5^cu?
z*4JAp<vR6WeaipYt^ARc%=}R-zNjsX3kiBE&X=Wib%jN~z=j;~<OW8wyX%cUg5NuI
z|Ik56a6;O3jewt;;4S}Pq0y<0;VjuP90KWHV}f|lx8aY;oMv-;l5ekB6-nojA}{jH
z8@=rDatHw1BL=K2_6jWoEh5R-AH4-j@c#Exh;OHB9?+_!5kR?0vIQ5QK1z4`4^D2v
zA*T$p-0#^HBdqMe5>2-F+(n3H{KLKS#&u{&u8JfK&XFu^c)6k?zOXNhLm3$e4fcp4
zmY)cGMhI~>RDU;#2-w0vFzWE9R>Zd;TC2^1v-4z=-SqA2hLi^oF}@TyRE+3q&GlrM
zWP-zVP`&Q8MOkR0NbN)U*c5wbHAd-{)wkzBmUTEOCv=_t46AvG!+O#pH`>0RHW&vN
z(qn39b<V5I_hxb0v46aB?b<cXL5qsb5Tmi@Ar_T8B4my;6l$c-xMnb7h_hSp(bT%%
z2IXql^<zxL2MEc{+cA_`<7RKxLRQ%Avd>!p(SPa1I&&D>@BQ{7(Epo4Su6zaZcY~q
z50XRWhe_*8k{in+*W(P6<<^Ov&R4{1vFjG>Ip*qMbl`wmENaO~>_scET^`XmiF<jb
z-31Jk&Vc;~hpFY$5aBF*dth&?78RC1?}sK2GvY}=)CH>fq>Q#vnr-ty?|%M#$l)ZV
zoX5`@iWFdCsqh!7I?|z3`w2%0&bPDJ3}?TesqQd1Z6HnDydA+2*7kEKmiPRcvQN^b
z?lgHd=16{vi%dIvHs0Rz8sNGBQ~IV5W_^>R_NGWnIIh{exO^{RSwoG-DgA?5&$Tg+
zPs29>1DEYG%w^nNyO#Jq#8WavY;nNOG)7~Sn+|fOA1`!-raW9btJuCg+!bY|zH+6y
za1;`KiIztX%wmp8DUL@UPlvG?$Msuyc;V>xM3$VtWaMCU-zQ1rLDv2Lt$sfB@p^KX
z02*K7aJxsBDlK)&S-7>FHVJn0mel192VVP6_D@IKaEC$`i!X}8msYaFhuAgdhcP}5
zRA0c;EJ042(BF^wB=BVI=hIhKvQ8%ee&AETwP}#T!PnL8c!qqelBR~jW~V^YT_Kd+
z{nUo2QDJfOfRpN2krhwXu4WE}2-X|~GKkJ$F6V49XqmfWmehA<dDXQx&NAHiK7Ck8
zN?&rQveYtLVau*4qw)HU6w!WyHW`0oINj#ECpMA!e<WC$por%D47jTCah$|+I4)3t
ztg0$)qFkLN-|*c^!|UX7de&pY9Z!LTRW~ZknU=QQZ}{_7{jHjxZHl<F5BS<g*`Yle
z<h1NdKC<+|Y%z3XK52Vp2HOnAo0dhx+T8G$)zcWa4!3sb44(ZhkDL{_!o{V!u~P<(
z3o%Q}Y|ygh?C2G;Rde2AaoSqAA1mNy>ujc(B^m{mHXs>qO12>TI+@QSuI3bi81K#7
z0N7IR7wG8I?oL;tmV$;#CaM-Xy2lYoZkv6{s+bOEs!gYG=;N*rzvdHq3<NWT;*Gz_
zDe8ZR*JXn%(xoU~_W<!~0-#7z6fzqS=z0F?BzuZ5co@7EO_B;b-+hW6WJfvy{fV-`
zw?){8UH8C~IROc;ZM@r589L-c;g%TW;R=AQv@N#qzr-9wD}9sFb*=H$+7#z#pG@Hf
z4na5lsQ9+|rn-r7|A)jK&#l4AQN17SMUxPc4F=sjPBvHfYCS${OK?9nI7tR*v)(ub
z-H0{A*AE(^H+NCZBfL(Nd7pgr+Q^!P;#lnFnRV-ZZMeAs)#dn&^GQRLR=eZX_<7fn
zojj)Nf+Xph@m`E7yCrp)521A#$xTS%Kai+p?EV#daX=hwTl9NdWAs}W`Z;75)g(L_
z`pRZq7#@6}TI9C3?Pr16Hm{uHirdvfmr&<DE91_DRE4J>0&k<K71?JnY8JP1Jgy?W
zb;V)rmg`{QAm%}``x2`;acG_yvgCIGH5ig88S+kguxR;8$@yD4I5;?Vr)yX8vyNtG
zv;iTt1PT__uR`@}muBhEcbas0Cx>as6B;V}#OKbR)^gIA3u$|ZEuXzSoRe3SxYKt!
z?-~NFTsv@1O<UhM`FnQvw><BUzjCv^8f!7ygXBcXLFZVdknGGE>*M}*bemt*;mS&;
z_ohYvOAvI3p#>H}WmnY`<Pc_5&aO^(nvQy$0Ok4j>4a9%-95F|lyhR5XgG@RZdpAn
z4~;Z=W_5V5kE#5kP8Kvh$o%OBN|VR2;7ksLY`c*6GC#}HN;adu_MYBEN&X-*@YCtr
zhP<QkW25{xYHeseoh2ZkKCb2T;JddsZQquUMp@&`4P73I`d1|9$8gm>2>5o5k|uF6
zty03(q4^XP+#D)7EkinN*OD%q3Yl4NuD+I7FS7>ETqsP9%wuV#+xQ2YsGd+OjKtg$
z=d#@}U0C9ZGgc25i#ab`ch?#m^3In%B!}7=9o?8oor0c5Le+IZK{0ZVS;a2=LOPSr
zAWNvgVYS{co^LXr+wHWh=C2k9feUUfYaPucQyqe6g)-5VPt-J{?Zy2xUT`!M^F==x
zS*l+C_?6RV<Mf|-D%GJU$exU$d5;4TSYd+<*bqM9Q@deDBCQa4&+l&YL8=ZOf#(LR
z4xes)5%R}MOWWM0j$xW6$mFpd22qhjl{|y*`pv+;3;?N+Pg^|6(H>8sX1)muAcI<^
zK*`cvn{Kn<qwVHgJd`##aXNv|4Ui7a;D{P!pAKBAPJrBe?VWYa5q-|E=ksG^q`<kj
zwuVxa`r5UIDQ3QRJSrk*$PIcz>EuOv%=>2UZLho+LY(?ks_ZlB*2V(P&i3bpZp?H`
zqN6YIyfDo8nl7%p<I+X5zS>7lD@=ahUk%P9H6mW?1P6i9N|-*X5VIR!)zEy}s2h&h
zvI%`+B*cyk29{g1$0r}jj#IBB(t6s&q0=HWUoy9y8RHtF+V(umtaN*UE?&g{Wzjw|
zNRethZ{QG=Bn{4SF(1?NbnERM3bgpWZ<vfCLe}hcwFx>Er3Mk0K{QC~#dMJNaTQ!A
z{c%kPYRxLmr>oSBO4-lOJl%ZI6}q}yNn)YN40`l%)C7YB%13OK_Om{{Co7p@a<uV;
znK$*)IV;fJVZ?KyQNlcP2FwnGg3=rYgpawo-no+D$#AX1(_}iaW2iKDaV=W!Tv|Zd
z>-0I}{I2+4Sb%a>_dISd9O~v)Berf#DNUCLd@8QA+1IY6#k^&_d@c0wAZE{+zOzRQ
zN9)I<yP74mCSD4hC%Hfd>u(|A|N7N47LXYqlgw*WMvA^($UC0!^9U9M?Pj|=4r;c@
zL~-ep74}$Sm>@J{2QpjOwAM526oYHyb>5NyFNERG+^4E@M{tRKC&!7;ILSDME#VJr
zd8hoKmv$Kk6Kkl_S?%DKm0;$<e$fexQ<6qTDL+ssCt)V~oA+_aZ(k*1-4*YM`&8bO
zsl*j3<*N=V)_&x?^d;8QA?O%bR9%|qN7D<mZhN>(Rk8J(ejT)EPQYA__<WI3^Qzt4
zSF8SPng>xlR)V>D&GZ;p7l4wKOI3+aW_pg4lnGjtL4AG7c#mi+U&X}4AepAIrPwz$
zU2LdJn9z-HsNY#+(|$j1NUHa#ak*TgKSA3pY-fSTouK?f_!cqBagd29cPy~kj}Q|#
zz$(gGd=-7<_Ohgt;QwGQ{javNo2!=g>bFlx_~5B?u+1%mcT`~qN?%#3+J0)kx9{!!
zm^b~@8bXE3Dqnk*4veg+9A2aLE0F8@=zV$Dp-7v${>IexjnO3_R0Cu98%>O*=SK%Q
z6113e%2no3C#GAO5}V#ar3U<uRPevBo?Ow%Ge@;?CpH|%OL&!Ia;<&`o3NZLJGKUk
zqNe8jJ39FfmuRElnJ;4|bX#J8jNHpW3atuye0$k#tOf@E&43P^5jfEVvhqbKjn&2$
zrUrBOwcjpqU8Z*O6BaL&a#_<pIOdRU^o%V%K=`Jf*x*F`_WyOc{n6SSQx(u^t$@ze
zx*<F>IBkg#I>-eEMJYfV(ZUGnIe4&lKC1=-lm7BZg^ZIbKp%`@AVPdexXJDfw1@Hx
zWKSm$yG4Ox-J)vSyMr(LKk$u*@>4S`I4wrr>R43L*-W?IXqI?;jbfg|+*&Mjx9HS)
zSRxQ|-ln7&W!X~0^ugWTT2esZnbJT!=y;21pc~&-uc0rQ>Z2jbF-S<?v8mG-?<vhH
zJ(I?+Ku?hBs5F>&?$2zte|7Z&bNIi8xYql-cHXTJGo=C5&H_{**}3_Rsy@nEf&<~F
z_P*6s)IXE-xDvDN8VU+Txo3UH8`5g*>9)Zh<7{`Du7uApm?8jL+oQnJ5K2*8(0(%v
z9MIN<s~JYGJewI?%jMTyl@%CVbs(xprov<xzqF^eXnIocxKM&sM`>rV9&0K}jIt5X
zS##0X9DfQA|ErJvZ~iR62n|PBxx_jV5$rcrOIN;OJX8!sGZ`vOC9#e1PbW|R@B(Qf
z)RbpW2GY@%IhEjsEuSP4JWw#7Foz~8DjM<3v-l;~5?97cZsPQ_XU~ph(gS+tiZAvL
z0GsZ!-Tid8v5nR>P?ylZ8P3zm+D#h+JIg|z^O3xFu}%?$SbNfo$GU10$MBXS4gS9?
zQvYFy^Y8uQ*<)m^?njw%C4dHlEkJv)Cu42Bjav`S!Shg_@@zE3udPtxNv0{bNx)2~
z>r3%NUEL{=+W9VPYy0-&$DxZFNuS!<WcT)2B?JUw^;#qQ_d4{U=OsptUU?}qfX~2B
z?q8Et{>(=o;|1VaxuLk^Zx<DS1yYh?o<V|tuY~e<ZN5KF|Ni+X6Vrj$zJDol__ryu
zKocU&mOHY5^UweGPrilQSH#-jQ6$0cuL!0In(;LzZ`po*|L;Ade|4(_!oh8XqD6+3
z^w+#g7I~6)Um`r@fAt4{;%7e)1Kdj9s@J$jx4_Mo1umnM|HQFBdHw(51`2=#=#^hD
z69a1CHOa}LHGeeV|MxFt><xTmvKw;0L^(S@!1u;>-)A`g>JB-EK7u?nr;z+#4=wc`
zbVL<y(b@ibv)`J_e`eMFb_?7tAcE+gHT_53E_g%<>F~Mf=37So^Vj@!*TsAh8uDkA
z-!<aL5a;Rg|Bgny3cOV3!q*Nfqy+%)xN;Yq>1E%h{2e;)Pb|2<U$M_Dz&T)SaJ_lv
z=PQeCBbR{^I(F>0xB9hu{)2CyTVmj%|N6wna0yQx9f|&`t}N^}G9=?XhaddgL%WiJ
z93hH^elCA&_y7GR{+T=TzenFc-MRlg`u^ce``@GQpH71RJ^FqHf!`0y|9>2P>YfaG
ztry;5IZ6H(GCzSUw@;W0i-`9u^nV&1)!N(J`x0}8=;k~A)I_~v%bljf`;vw;r+(XO
z2~0@D>v{U$uv-d5?3O0~X1659jt-<IGWrAU53`h{e}f4A{_uW_EB|(a;WkNd%W@?^
zuO(VzZ+{>1^R_*xe>`@AR3*HyLEe$2;P3pF1`xj`vlhaNzk!JV(>I123VAv1g8?Z*
zbi{XUzK03aIk+SqJ~a1X?uw(MJ~$wPS<5|epENy~xe0770B$uwyboCWzHl^i|F<vk
zpB6aWBe$=JRqCUNbGt!v7;*9OQ&4F`1-f~6lO5!E0-<=sJbha1tNoF9?OCyKNVUY*
zbxr>1`1sS8|MU)IKU(jEKL<QSq{^Wh6bD`G06?H7u+<bEWw9^M!d*V6tnk-wa<wQF
zKPw$C^_52mUH}aSB(NnE6!MjbaiJv_8#{C!D$3w3#3&VJECq0lmr4KqJo*ny2Z3Vr
z`e#ZQ2or~pS%b~Y%afOqh}B@@5$aGxSMJRl>w{X1m%hH6b4&YsdsI}nl+juB*B+Iz
zc_GQp7}P=Nq9^_#Z2jRo{g1zZJWHtlsJ#BZNg^ZqmfeX1kgfrMRijoB9ZLDhLF%s`
z*R4mq9~(=nCe3+Zq6A}{=}m16lPY#?3Q(knTNE%P^xhfn(3N2%S2ItJcKhqOnl@4>
zc;kA}HirfQM2+@V9JGav2hvM6TobD%TS(?MJ5Z{{zc8ewLCzj-ZfK1+2^)_jV4)in
zfD|o8xij>C{Z2K4TeINJngfy+$Mc!mqgk@kECIVX#7_#+DlcRrO5=!7kdm`H`>&qL
zs|BAZB-NUghQn!tW8yW!68+OV;UE6O?FXdpKicJV$TP3Ij$g%WBGn@qE_q>NJyz|q
zqrIkA0>;29AT46wzcFDzr;rlRd*LZHNCCq0isqeXCzK_|!odlC_UxGKha<q7z?F0G
zf>h`}AO8A+{*eOrnvX39#${YNB|?JVd=a8-XSSwBf00FuN^g#hp~Lb%rl$N#u%#z#
zu|`mjz_%@Va!?-0XCnd{=vVPBf)w&nuw>|@e-JIQ+V0OBpzuvu;HWu&!It)Hok@@&
zV#fvk1hDm^$d8>N|I2q2?Hn+<ym5~o%@w)rO+!ly9)-O@W^yWd_EGW}&X+b}bF9^q
z(^7$MFqz8_9Xj=d7tot7Q&?wHABVop8miLSdTmm?k@PYn9`9Z@0O-o1d>b0ntT$%B
z|6{Kha7a!2p4gIat_o9utAlybX1;r&)9!|GQTOBJ0csM?bk0rHd`Cra3_oiTG3tVn
z?s;0KO2&8)@YSNd+AIQwDujTPDcVdq+Q?%iaG#^q<naIcwQC{%s@?`Yh&;fx26Ey@
zBn}@veFAUjikx~0GGK}#XGm#4Qp=zA>mTUbgaFR>wy75IZo=3fXI@}AxL0nk`|zQj
z%ah{QB-|nZG$6OwZ`Y}t1YH7vEHjEncfcIF0l417g}UUKmdh2}5`*@OpZKp->y!c3
z9%R4=)9#!zKXvCwW1JK*8^omvqxdg0yhI?NkaOJyl_JEhH^FEeWk$*GI-9H45Kyz_
z(Dm836D-J2=!3W_<v2E>I7k*>o-4stddH>z>I^vt1f5Wq9H~cN(`WBZw@_F#yf*GS
zKa^=c?6@}Tj`3}JIy6D0!ge-Ly~<_Sj0CoT>ds5+sYL5wdfY*34t0v7C46Dhe)I^e
zcy>h{K22Lj$}bni|9tm7%YxH(Oo(+J6yOX2lhL*`{H1}NN@vl_m%|fg1rI(brJACK
zvb0={dvX&eL6MYAO8ZD6;R{h-rRM(b`AY5g9@>KASPY>op{-F|;kz{y6l)_W{Dh~T
zYe=Iw>|oscCO^+mIs+)lgGhn~pf0~mgOi5DK9`*-is<&Ee1$YkjW|k5L=)krLnqZ>
zX(PE*FyTO<bZ5HA-N;~QofnxY*AeU;N2jLYYWnKBv@=c3w!t@8_!39y^v|)^@KVH2
z0!cK|tSBL1{{toJKe6an9w7Y)BLiMcC1m`O|EOb#W9~7nQ~(UDBHAFET2oF9EL?fM
zO(XTzFN*8-=_r`tw*j6gEzfiZD^)ckJi`xkgAn;>3Etfo86&`_5UX*=ARSohs3>F9
z$n9f9jnx^iJ&oY_K1~-y)6{T|@=M#W)7D$L`1)I>MW+3PoduGFdFlGiiZ^w8(y3bJ
zV8H0>S@sZk-uZViSJ#`bRUPCiSz}CbjN?M+XN#Z(Iw$mgVXnGt-h0H-JS&D+e!r}a
z`!7T=K6-&-cRcBI7{fL@?}`;7q%ZEr9D??XBh+Q~OZiL;N|oj5$^{Z2`)3*gPx!%H
zZ>p{fvugS~(*xr)CaUV_**t2=1jB7}1G)ImzEcwpF$0QaSW54BO_I(K-)jF#!lU=1
ze0Sj4lQrOnzLfwr_f$r-2~(Hhm+SmhsMaS${PyWP0B@=V-m6~c$Cm~bCpq#>M)}0^
z9N`4@F9b!C6xD+8r)!P%*7M(`9dhqe1134pm@)_0C^w#bMWa7zY(9Zd>@F&Gq~7um
z@$pZrj-P?JIvGj*-p>}`DOqx+-?1pCa7Jy0LV#53#-ou9IalW$*7lPa>Ui6X2IA;a
zGycOK<I{CLi`=H0P(0;3z4v{(zS)~J(#aAc-d|7d-)j#p^cPrmpQ&Wl;H6cm>ADo+
zIk&eFx3;IN*f_)*$vv(sPuqM9l-V?U(%beMDe3AtLkoFkgZ6>kRL?Cv%fit(1R-lL
zXMl@*%xnB#=$hvvU31k)c0y-AlFR@|57b)V;O=)>`o;EBJc&n4mB$yZ6Viqq!-7N1
zVVkO3mBrr{RpiN5jHPrsO;Z|X6%#pyTl)Z*PI3WG(-|T*F#tR)W;?@CnV?y*+nFzn
zoqF%RJ2Hx#*uwwt1R`8V?5W54+u)jGRp;mcOTNPrgK0GLKxFIiplq^{gubo7oC&qP
z9LheL8FI>ppK6nY&9XNE#2CbZ!aLl9(0Ku}I1M?<6LaBTUb=rFg?jn`i2~s&sOsZU
zeM1x!g&jXvdCrMrMn`-pF|dTXEHe5VWlE(Gp-kCMH8I-}f6ZWkxvX9fLXXG9!C~iz
zb$?Cco7`=X-;T>?0nXGt*T!$3Zi3j;ZA)#}a(gU7X2zK3ZK0q@NArlhm0t9>lW_4C
zwo<Xfy4RN|R;7n=@d*;afcr7&x$DUQgif)M@{5v3Rovg^NdHs%E+g``;TIO*-wGlD
zA;_SoIgc=T86*>py6su=-&j;0448JOJ+>fP-MZ#|@v}b(?Xn-aVMvQszB0fs=kM3^
zF^*4$@gosDDHD!FRULLfH$^42ez|QURV^flpg7N8+<M(b4^yrn^2$R^$cq?Edef~^
z^48L_rT`2o(V4CZgx5?UpA_O40@|kIy~nAk`K(H|L4LW+^1X81G9KkUiqz3qw?U3P
z{bm{<qL|Oi9SP1>+rUB2Qxr$@*OU0lqa&~-z0A^cAGIwxB|%_DIZ|m8dV%i#$1R6n
zG=aRIGy!WsD$u><k5Ngaz^s>z&V2wXRqemnbVcU-C+YV4bT!{pK?=LE*d?l%b?`aA
zcdn%8Ca6VG6=Y15fwcc12OJVJUTKP%Z{tOA2M1Qz)G5HX1EDq*p_2Yzt#4qlaD8=g
z)<iTM48DRcNl?EHe<9{Ve}QD}qn_(AU_-#jZ#GH+YKyDSzki9Q&ceH-9l~kSA!yJN
zt(!JMuRiY47^MGkMJGu!l$oXJ$M%Q~Jvlx;WsyZac%+53?4|&3`@^@O@6%U>eVRJk
zs$LWgj|+JxJoH>Ma2U$=E(;q0OvP>I-TXmmfUFg}?3X@WTdhBjPpUt#3b(-ZU=Na}
z>HmlMka%%zs(kWf&V6dLc+Cm}-?t2gm^AI3zc57WV-!M@-Mx$ySUmvXzmckxT&RA_
zb%arMZD$%;%4QX?&Vy)WCHgxPO*cb+%l+E706v*G@1ubjDcp1&7j#&u`DRez9ASk@
zn{NXzyhKT!M{_5=pEn$Mcn9*N0dU|vj+j^q70@6DL73Pg_xoUX5+)QIz*a(*xcCw`
z&QUx57Nl|2=l(mM(LdU6fTEc@?)KujI{mc-af3-&J{7sjz3(JPJ*#qyQNC2g9peaz
zv}skzW<@4yke6Nid$8nw^&JoWvH2|S)1?46l=!KF=QS|5JvXfOs5_IAXn$XSIhuE^
z|C{iUM%DqO_xcOPR^O*@=NUH6A7`Y%>(4U`O=<}jU*xiDX)CioU>uKep|AHR=bSJ5
z3AYkoOBWFpZH9k`Z)ylxYp%{dmqWguc<O_+!miThP^KV!T0bYi@DUT!gT}=Fvl|6@
zGw_!tS8pboQDA}=gCu~H&CW}Py3p{J+DqR{GApycX|;Ai?V3k{HDt+ha&k9U3Y7F+
zo;-0ktLiI=cumGCa?{|8(cGtx9~)+hM4L{@Cs7p-3*qrHrd1xOy1ToV-%NuR)*F!F
zcT8k@>}&Ky7+e#FALxQoA)-ABHI5~rk?CLePk-i*49$e_A3<TY($H~2=;SYqorqSF
z6p>1qPQ1rQ*ra+ZV|Q|07FE5cAk**6Gh{(X|0hnI_}FFAlaTYY$~Z{HWx+ov?me1S
zGw??l;z8pLXa={_Kd6`FvOVg&TU!1juuG+*-CGto0fnah-?I4tO5B;{>N>mkO%eg@
zKCu&_1i=ZUi8lCpP+43188mCc(^0X=bQ8EcP}cn;cjssi{0INjK6gdkjgsPy8>oRb
zlY^{AHz>u&j%h=LCUA9i%}Nm#7HJx%6s6J?;Rm$PyZXh?@R&d|d9o)%tTBSq|M~OD
zb5LAoZP1xhc64+g#*xr;lMdM`7<E{iv?5k`!^oW=hkR;Mq^*TZ8%6Qg+gfKuAq~OB
zJTY|I==8_`59A8p<|y6=Ab#Xjl+4n<zuTeVvdoz2heLip*XykI6q0Y8UkVQ3V+y}w
z3=U)rPOL~V?GU`n0Nl-n^TA>}iE+|tg4m5@xy$ok#txsj?zb&|iE=VriX!^5w#!FG
z_I(7!J8ILq9(j8@nspj=@E=#$0vF*CQ23Z$ySV-Xi;9Y>4?;g9A0LI#MJi_Io>zqY
z9e{6P1*goTF8pZ#KA=1O8Ug$V5B&FJ2#!m>X95?{;lUSyKAi9k;k6H-g<c3q*Q7KY
z8pKWQ><cKfJsbWTWwwAl0uCuNSLvBg!Gx<Ue&)&Rv~`!=A9z#Y?gVg&@!@_=M;X{G
z^eicyU8KN)@ZZYFe!rrBx*G!aNQ;}>RJdon`1EBi+Xir+SU#Yp`l$Bs+np{adLVli
zzI(@Wk%Yt$xB)hY8)Qc`y|F%Qy?RT}A0C(-7MqU?A2v%2mOI6pjpTLIgj`c@lDI%`
zOyHxGZ`0J9SNyJ67q9j5U$3<rp2Kq0tM#qD`U~{)8B-6m+B518FScdlxw?)fG3|fs
zske|gH=9r#*z-Zc#^ga-278u6A_zq@Ox!d6%g~Q2@~07P?Ih_41L!W=HOqs0stI%?
z2<Yxp$unvhsGhDRxY^aCt@2yNc%=>_SE#slo1rR4)DR~(Y~CQbF?qJpcVRpUPo+Wv
zr;Cjj|1ZO6^!U&)7+znxQ48f$klr}fMMk3v$IYwS6h=WH;I^}+6Y>kzee>QG25*Ls
zw4Vo`5p55$u4^@&ed9DgVj!f(V`g>3il|f5z(Q|&q;9M3+i~+7&B3p7h?75F&J&I<
zg5J~;k5P$r82fF?n5kB0y&iA82<IH_DzL&*Ot@#xUFF!?cd`CVG|~U<as&jlfeXa}
zqN-{IkAkP#Vn%_3$pe8)v-J7b9#Co2AOYp30+1+9Oym8z#eOfwtaGa&SQtVzS5#bl
zD-GNLWs<aq|F*I^DXyCj-BK&I)M>al_cc`)^c|!`=ld=0LoPJRq3`?KQ>ms6cu+?G
ztqD_J8oQj-!#x(EBExy>mW2Y7(Zchd5(Y+PVL3T5hkiv%ET;B8J>R~db4-4Yt2e!o
zMV8wbVj*F<9>Kdo#h^MPRw^j?O^18A(sj5^U*<&)k%uH{p8i9TKi-s2&|%>e0BLD}
zE;;fcG%5YD3;;g5)y99Q40T~Th;=L-zI{c88^dW4J>O0O|8<wUGXSA}gu{Hu2!z%O
z;2w1;mY#Tb3GGB~p1{M0aX4f=eH+&ktMV;IN64HOa%?kpZQ6JZ5yw=s^3~5IJ)j+J
zTTuV;x1*zdd%fylw;AEV5GL5nr6#Ke(?3WDyS-VHcd17=^QLb#aJbd0!w$f=wE_0d
zwBP0~Ka)OaWEAQ*U*rTM2mQs5__9)xtWrUD(5IuFG6%_s<$i#_LUXL5F>pI_J)Tug
zli#w`i>(3ul9FZA_$v_xEs)_tCCAt;Yi+l~12-?JkV9uZ_v(Oebv8MsbUp-}LY1Yy
z<dEFGfqx_W8hly-FD#z52Fj)7s`sz_igqK{VxUj808X|)!&e4I?!)5R@52!bO`H*f
z{(~1U2b<Yw=CGRXwy@?oSEGZrrT+GNB(VO=0i~Pim3CmgtATCI=F;$>dD&uNN{><X
zGc*n`?%l2~62xcwpqY}ZU4xDq^T1mG7o0pekNe;vO+cUCT45b4a}Rzoz`b0q3t}(X
zH*`O@|NdO6BP=S7f&L(#`-;mPim`rDRF^zd#r|YnNEjrdjg?W{b>V?taDXqpl<0dd
zgmHY#EuA6TZeGy|Btp&BCL1Y~;-Gi1gxVLUjk>TZ0c!Sj%oQ7*&}advz;qDPJSQvr
z=`}K_n2<I;=eBTVrJ1FwkG)qNUzuRokbnIPYfy%&prHFKUqCD2`&UUFc8K=}D?u~9
zERPNX@K&SQU(o86Du`t~1A!#K69&OA%yq%oHHxs{w{3OB2UD*APWq2e%9a*6ILum-
zMIV&fm4LnJx`K}n=6>~rT-45uN0FAEx+hvp|KL``f{3i94po21pqPFggW49<_rFak
zi3!4j(%6SP)emIFcY3P62|qxnrXTRP8mNQ7bK_W`R-6m>d(by9v!k<1-da#?c2!3e
zEK*9*i5s_Gv$k5+aL^+zcmTks8%E=dK0S`5@_1Cc5s<m4(=(T{sw1I4&HgDEYcq-$
zbuF6)SyWpWmBG<h!@ghNZFzINN3jMAal4GNti?R%c1>!0`0*&tR~TqrEsR%vY3Ui?
zBsp<fPaF*+Rm18Nf%sC6H@IR*N##R>f5h`jvLbjBKZ17`&ltFYQYU>@acm0IA=S2*
zhW-1?<-^~IJY5DefVBI02GV5{e%v=dS?8QZJ_Hr|#An|;NG80}KiCM=`;k%_)6{>Z
zP^YLjeWZBdsK@9QNf*#vORyB-nCz==N#(g}6p9?yvV|@OMs44V3uKFHt>O)Vg!l*1
zJxodfPX$uZ6Co0K2F#k}eJAnAE_Zvd0js8R*!6HfGYa^&ec%Lp&S>536j?U#r@S=Q
z^Pe-EU?~zAB?ZE+Q}%`@q2>#T+qC%v1gF8=_sSp^!U<q5UlA;F0W>_Duk9rgk_er7
z$znk-xz4l5A~Hbp40E_+2xRy;SgVrE%7&l{v*c7N__Z9da!3Ppzwqf#&yPNKy{3Sh
zF;)j+6cJG(LW+1HF6MX1u=3)kIWfW^SqM66#chKHCWQ7Mtq(iXD#mahJZHF!S|s5S
zttId~<j}@E+hB^`#)nFujj4K$rS#-rXW9(RuQS6lvAu9fA0hh^WGVVV;AJtBsC>*5
z4$na_q7Io{K2dK|0a3>cXu3&dkGnI}IAL-2t*S>>mxCzpqv=Q+KPM(hmSb1t882fa
zMRUScP!f}QthwSIS~17fvo+V<4DQ_S?`0v;wm<dTDbvt{u0jW97W#P^9mPqa`c6a2
z6&1sZhs-A2l^Ge_**C8HTX4DRY|^vy(6951_=37pdC{@;UvS`mI;$Ga9A%$*tz6BS
zmAj8jK-V)0v~8CRebsM1{b5<Q*2Ex9nz>>59r|CymxAfO=FaOl^S)L|Q)G(ZFjEbr
z*VOhH`I_<)ymq3}^1wbviG^t#3)H)FAc-xVs+bIvR8PLK--VLp-F&+b{JNxSZ$SR{
z14TuCvK7-z-)rAj9}cDomRPwjc0&psR)=s{x3+s;Ri_a8>G}FXRiI5!!*MpzZ5ga`
zTXMnvh|1Uy6bmx(Gn>GF<nrl<FB}b|j#jCq`iTnx_ATta#SZgi&C@Zi<}i7b&1F1T
z-k)PkMDc*JGgetS@k_O7JkOjR>~XAmeSF$5Aph38l4PGatw)3Ad39dX$r2M+>E1g_
zP>ej@&9^g&|JZd@>uaOpc6Y_~=zDfIyGjkc^kFZtnqq`NcdwH&R=4VauME_Nd!@QR
zJjej<`U!^T0<g(>orsUlV`NJv5jN1nP_30gv+OIM#-YAf1ikY3l)Z(jx>RHfYFgBU
zJ+mOge{}MD*T$sCmiV>`-H1Zl3I>-5ju)2FEua-_CV6a4e>l+`+MB*6o}*Z)M<zLL
zf#sH{QE{UqBttg80)?yAeKSWfQHso`5r5bJoDyEYUNa|kv9Tc@Z{w?rO^YrvVmzkP
z!`oS?k}sGyICL#jvxx`o$#biEXa>A8PG#tI@F?b~za~H(+WVcO$ooUkQNu}eP;oDE
zS}LK<rXj9ra(Z_kZ)SO*fZ@9POHHTvt0%J%Pt{?eAM_BSazH_oDmAW`cwd6lVe{S-
zFu2zc&4iwFv15l9!w*qSyaJ;9^aETpI7$nGK@NBFVlylZ4~^glurO?~Qu5yV&4S=v
z5roi|f+SoOP%4Z;sl;E5h9i|?I_^p|WG!I_{8Mk`hgNyihsD5i?d&vU6=q<=Xnvs<
z27o1Rx)A#PT(~)SNBL$$z9Le@=y)t2l9E&z(W5yn?dc=k>?_h!wb(5AK-#5NTZH_s
zSg!TK#{MA)el}sUrBfmYklBenire7pSm;N}?WNA?+OGd-TjN4DqL72pN<Ok5vjIoQ
zEz4?1we*Rd_uAhJEtQoW2(JxmY;Hzrb-{_L43?Bb&QWjCukxJG*iOmo1Igq0Om=#u
zOj8KhFK1MRrp2Vobm~qr$i+RMe{p$fKy+PxADX>oD$tD^*sp@_m;AJ0i&pP#tlO{j
zqU?MV){8^5*1HQrGySgu<HX<YQPm|7ud(U%pjRa~6Vl*MQp6?WnaSJ%Qtvm@e3=0<
zN7wc5E#}s~ewQzw`BsoNom9YN+j5DVe0j@FEQ?59je}40N*dP8c0IO84_Bn~RzLHC
zGW9L>8uHrM^%}6bKWkk;?zC`&1degkLcd`Qj=E%m-sB-KPzAHOKhN@F(9LfbDx}_5
zge@CTHOiHFxHBD-G`qo_p{tP+r<>~MLtkppQBut?dwa`qyI!zhz94I&^!xib%jt55
z^^<<vTrLj1YNbi{`)nT7vy#^9#lQJxCzArN7`TaPm|^p#d}A9sZ0=I}x{9NZsh#No
zY<6|Apn=U+oz#L1{f-iPX69DJh8#Nnwn2zWf7HC4RBsNiddF?y>64xc3hBxn!(Bd;
zk%0r&tBCisB^#tCw}?OF|C(rriCjs0&hT`vo~_Kf=>gHwcRa-v;^qDE;jJ%wl!UwV
z<OQf|X8y$na*aHBI53Q!8t{?aGKg4|<%!f|HwpI5t1lzSyZK3o|6|_5=v^nh1$&gU
z+0&cR%)VHI!x`9WOO*YXZh_I3o>5MCg8{39W<3_Dz?Q7L?|HWLdLJqlS*zO*D5PV<
zNBfr%xLWQ)yN4wr3r(kY2XEVx!SPuR?1ZiA<9NlVrrn$6WqApn1l)_KOxhSL;WTpu
zWr4F3h(aMC(9XPWB6-xm*=`RW?hBwZX@_UxMSuH!Mtm`L2OIiny>n<7qvbo_BXmLw
z?|7W#07WRO7+2UJTac9(pDOW?^e5w07ZX}p<tqRdc;rD7LslP%0f(nc+jSyZnZr9Y
z3dwZ5$FgL!-g9A@5NGI8O~)|iHYy)ctEJKN4BHAp0;AM;bGQODr6>mFe)MmTx-Rp{
zdyCs$iaWYsJsdP=(cZ_8f-&)F`e5;pTh}0wdd4>5{>&uwEYvS0Nz{4aXw+-4ykLc(
zGpEgM+(|`p<Kf*a)m>H3K$S5Ed{Un;DrD(*KX&qD_~Em(`ug(iPTyRz4=KkhO$A}=
zQKk)~Ly&GT2K_@bcrlyk8sVs2yU{ez^=RZPgW_fpF3WoP5c=L6+SSK6&s(logGP8A
z^ANK_2YcX>+U(^emQupx&Bgw_WSg(MCS(VJn)8-U<pbRXQH&nTgpY0m$;|@7qefpf
z*0AB%?SL_3cKS6O&Y`iS2he&ywU`uPE>U<Xx4l4Xg)jD1(U7$d#2tpo{l@fFk}vnK
z2H2zR%giY!!Jgsz;Iu8~UPn;*<C{-)!Ly};As5slg<-k?#=d-qRT<Q^sm!tHq_%!?
z9m}Pe)V7h>%vg3$zK0nOEvL1rS(LAe<gN=M!pL{-)KFm44QolX<tQ~zU`Ss}PeBy8
zLYzQi)x1K1%yrMIDD%MP(X}g{p(9rHq~d({Up(t+!G5>pnz9S|ut~#2ihDYwwc@DJ
z!-G&$MM8B;x7i_eknm6_lDEXbFgF^2+><7v5Ug~U`ZB9M?g{t4F2%d_)IS@J#a8)2
zIpM|UrPF{fxJklgYb1sp)l0B8j=_Gn;^9#szf29|GQabTEx+~j1iqg|f@hITX@{m(
zB#$^B@2mIj1kn-eZ#Q>ywE_*CzAosoXrUAx4T9;CH@z7W3ZLoweD2#2l~Bo47dJ5<
zaB0XSF72?dC&wDR+Y&TkY8r#jB)fD-BLjNgP-2&@&N6LHmrmZnJ-{elU&Bu~S$9v(
zxES+$=klNS;Mue7LS0y@?Z=&oof{bDcm|WCNjOW@i#yQp@$rZ2W*ytr@Fu{Xx9ePE
z5-m919QSok@xHK+_dYEso6LY`K0S|-gM%Y(N-i<7UGd{3g}cYxOsUUG7rVD&I*vJj
zKocFY(Otxpm%GtpjE;9N(~lj*TPpTJgo3V+<O6GVi1>60RP{Uy`NU=x0Qn)h`AVyB
z;72-CT9en%><k_xUkZN9C7K$a)Vs3|b(?K`@J|_=T>obxiG1+Mjx!|4%sH%4k!#aa
zP}Havni9=?%(QW@y|`3~GUqf?1qNK%*1fVhvDDVk5)YBgUD$++5apz;gi>_(H69NK
zC-_BUC{B+f4zZt%yLI@BorypihWBjX*-ST4GKY`g`4Ks(>v~EH<Cc-$nx$}5Tt#cL
zW)u_$y`a?i?whUV@V#-Y*&N)W$kHlWEtcnW>b%aOD_i)kq;|Ovrl-UtQY<~8MaUKO
z_7&GUB6@HB(GCm!wy;3dK!vWDFERVjV~1gUJi^SgsXnzbF1xd|N*ZQ!+YANg8*>Is
zgwU|DYR?d8PIPyy%HKi1apQ)YiYVBiE#~x+XU00I5^C7W<#u=H(ld%ucUoe2P7XOt
zN4XVVm`N8PIviDXH%zF~xh62+>e92b`ynk;;>KyU#hHW9gROJM9XoPvxO4<jh8LR7
zUAB&Gr}Vrkd|%L$p<xV;!ZSq0ll=8`Pba{4)<=&6Tocev_`QVQLjCiwu-^{z>ecfN
zSmRi$FIN?38?g%cT;#oO2otBr5=CE7>Qvm&)VI3PDEhuB8-oiM#}iA*$UzaUY%+Z>
z>C$r|{-pvH>}`yYg+>ye!9>IF*ySTmV*whdJ_EHf-j0gi1Vxwmj`HlNd)GquOWA5p
z$_^Qz@bSvp$cjr-3QUx*Tt^-)E;+~i&VV9nt_=#ct2@?%9*aH$vjh*#Cj2}&cA6_V
zCVDH}99}P})V8L)ttjlb>XUv){Rg2aApXQ&{E#DqOTT_-Ke(1&;84D^xz|;(-pZ{b
zigxDnmlOyRFGkW;@~H4G&yCLkSyvU1gmD925OPuk5G~w(5p9^eC#92Riv7X@oRgbw
zi&+-gQRomF8EJz&z6g|!O1Agw?R-N%yqRUL{PB?6b|%27Pa`U}{G1s3&2-ljJ#Wce
zT)|FZxWS1Y^dBDMMa4jpnn~I5nut{@p3xEU^DO`gsFRv$lwI#`=nl=Zw()fFPHMgv
z#Nd1w&2?cPjER<5eW_ATjUHJa$q*nVpGJziMDZKt&9Ev~gM3mO>kmxxNNZe=+6_wF
zTkVbVq}|<UoC*#gEpeP8OjC5*pKteC%QzOOEJ_B>A9uFsO&MEVU0vey6=B|f)vMF(
zl<}sN{bA|jjQ7TNRd9<+aaTo5wlh_1dB=jmpfEgBSix4-s6F<MVwt@ex8>Ng3e-|r
zlF7NOlnkWb73%0!Y%yAy8T8>*raas3u5ogd0hD9bz1QZR&IgbA)gM@5bju~{d2)Wu
zQ0vu*Pw~hU!P@3qclRxaWNV4E825g%VvAb*oB4ycna$-USGw_Vk*rYym0Re;IaeGa
z>~<cjr>h`zi{bDl<bH;VP&f(LAU)~9FAQ@E&UHAPAmRH-syR*I#9_*G4S2Z_RY3CL
zHfzW90k;IcvZKtHFKwSsxomE`k-p*7lza7T>NCFw;PH6V(?3NjimRKH0o1GB+XA#e
zIbJval_1szHz~7re^olX8rRa?_JgQ>f(x<hFAkE<s$b~q0=eMF>WAQCV+zJ~Zn_7M
z-b@K%l%F>)7R;|7$@gM_pVuJM1$6Xsl=i?$q-a;uBb_d<623MjHXg@io;p+BUSOg`
zc=J8VnyV_6lmO!aL-qgz*LN3Cs$J5D@IQP*L5CRfVw>p;ET@IG=P$V9)8C@&bA}G8
zJ=_J_+lBO#Dd4ciEOlr4wkKE032#G&XJXqYDs;12W3X8N4{L87R%O3!4L>4?f{IG1
zNC`@VqJ$vb(%mK9C@yLVOHf2nLJ$y;2I+1VjS7f#cd5hz7Txj9^~AfM@0`7__w2LZ
z|L_u#`(D48bBr;^$OP|6!P@!zyM5Zm1jFZrd9eWIk7cb74?HE0%Up-JhDz_vExVjB
z@i-!~oxBdIlv)OGyMe>uB^(Yi65+gmfnq(U&HdoyYppGQ^VKNS)Upeo&Hc{dr*%rL
zJhjHN`Y*qCsyG8mSIRVq2qe0xTl|i8v9N4*@i7)*qcP}N%5iPyAn~@K{a%&Oa*6mA
znkBWnEyeQvjKc_J$0u0wfL4bh|H#r0_X8Ym$;+2FywBSn?qnGm+xSBKqm+f@ec?kt
z7pAD$R@$Y~0n4Q)SWVW8cGz?5HWfkNL;p3$D;j|3$&a&sN08iEFclIiUqn3f+USxQ
zlXyB6K=ZNp`Ml>VwdBiEYohVP-(EQr1e%Y7b77r?pXZ0wIOOu9H<|tgo6bflHvkRF
zAb{{sx_zP@!O1!P`_7Yf=4@H256E2;E@d|6)XwD6Fl*QOYO8tfR4c~t`VhAE>B^88
z?7tD{XHJokA{n&XkR&JIn5(xVM`(G1n^V|Z%k=Z=L?_n-=JDNDT59yecyO;hlo%J@
zd3QQ3Kp-s6rTrd#RIf)1X63!w>63rJUb@PnvCMt-W0-PKH?e2I`BO-)DkI|+yj5dm
zr(u_;z6faE(zv$FAdQfx<lBT5eC!@w@8(x93O%{)K(_Ts1wYSPx2ipoNMa?TZQo$v
zCRC-5xbkZD7V5mR00$w+<><Y=9;Pf@aOuVaMqSI}$1Fb-8Qx~4KQG)a5}?QmOBYz%
zZv`xHIagVu_nzjgcHVk{h=CZj5|3A+xF22^+oTdh7}Dn=>Tomi%h#`!9eo)Z+tXE-
z76iVcmdLN=hR|S~sWi5~a+Xixm0_*D7gqGjS5O^owgO}R>i$OIllelr-!!CRZGL`I
z>NU~@;F7p=WlIrN?%Qx+{u42&`QhcSpIk&$of}56&=glp5)$DJ8P=f=)S0{x?b>q6
zkTEn1k;;}}WPE0K|6{0)bGfgt_68pTN;SO$%)(AO&F?IYjjWD8T`Xv_?@d=-P8BC0
zOPCIaHa$sb>l2Sby?!p(g`CPQc=COXu-zSTAm%EdY%RF^M&y+=N?ny-43v6H<JBX6
zmhMtbdR(V9u`KDbsIt}e@Tqoe{fN@`@RKUdGbPkyPZDpPCXbb={*AD@|DN&$fkts4
zIJUq4QI%lPy^YUhLeFm?){}XTe2lVp;^P5IM9uwqjmsQXo^@{|XnQ+$@d(+rNAFyP
zPv)6a$3^`{gUmS_`?Kq1A8p=Gk%;vh22(n=cewsU(D;Ah=|W85L5Gum+7&~I;g5(0
zo2}L$5e8Rz`F!82v?J5!FwRPmuV%x@S@#;r+w-Caj4Cjn&EE()+4v%m-eJhvDVyEJ
zA^iY!JShoHDKS>x>5M-KdcgR+;7|aWY}`ZVCV72_W#fIr*cLB&-9GNy%d>!;KDk^o
zL~%%k{e(*Kx@~93g)02n_t<c)?$k)damc>?X!VVy4I&xG&wu0({ZqL7G*bd$8h}-o
zF4N1B^z~-z_5`YJK)wRHWy53-V7}<=GeW&j;nqWMZ~j(7qY_+fE?Mq-OfMg}oVK|l
zQpFFrARo5|BW|C*K8b*RiX@hVWQ2=an<1&+q$myFr`&lvuKr34I*rj;BEgm5n&|FE
zERp;QO=thB)T1CtTRWJ{aeN{{j+k2&XmO_(_C!JB;X3Xydt*e_vmA{&K3YDUyy#rC
zO<}Qwqb*YKj<5|c*z(<Q#nU}yy4$zAdf)X>5mbT$cy7-_=dNnHF|IB*6uDp4yirI%
zO;{Q%E0oX$Rs&OTQTe3uTR3QyPT}<(?aYu2nD(M6E{k|SZMN7FINBFP?VY^T;3sBH
zwhFbuSc%7S#cXAJBJ0t`hLS~qhtJ+K4lG{stJoF1xZg;Qiy-UE(pKiJK0X=%SEd|s
zKcd_q@gOqSluMjD?fOPsi<3~Z6Boy8VcvVQ6&qVmsHWK=@&$2RiKg~otTcyq#m@-+
zY`DFbtrWAA+KsxJF;~fj%69}`!_Pk$$Rw&%X*Np#P22C;D3Fo4Ltt}B*pQ^A$0aO5
z$40y(@viTpu^2lz06Ay9kAtF>3=<y^ltaX}>Ytcm{tMz158cNiNjN9Gwhig>bxk>7
z7{j432z{h<ST9EK?j@Tfa#3g)Zdek`;Jn`gyFvLaxw)X(l=UJvkv8Ii)%Yw8F4!kn
zFQ{d3Eb72pJmpq!G+tP)2Je0xr<#?v@)GFN8&Nm;N2MpuDe+I?Yd4|ddXJ`KvkuRt
z9|Fx*UUmR6qL^e8$JqVnZz6Kw<XCoCV&h&Hf2(GA58{eNHSj8DMIL^BRd@Saj7}}`
z4?<Zs%-Jv9l?#0Ie%Bp{YLVhf<c>CvZ=PNrjH?~Sxy(JEzapaT!%!Ygj#1$UzucS;
zi%+qo$6ll)DMM3HS6qoU3=lC${1QcA-yA5{^Rgr^i<hRDSAwrxQ@BX&WA)IwZ1ieF
z_-en!XUlDuKDC0aJ)xH8S2l*Ijz=73YKE5<0_R+lcrs%L4zD?sHzZ0}T5ao5CLDWw
zZi!%WTf0T5=|0tHxb>A1Z7^0(9WWF=%S2+@%sCRW`40}T`2cSW?Z$^FCeqyS*F8?B
zjzT%;i2n_FFU)&JV?Q7f0)>YBn#u+M<=Id$Iew7{yqvzx!<sAIq<LoB*?_;|E$F%h
zg69)O1J9@X=avXB<Y%ca9x!;MmJ+y#>t|e90ockM<s;ib?n{36aU9LB0WTWFhc1Z$
z0jKoz^|ySLAC1yBR?sMOO~gwzrfWj?bK=!m!`ZaYKg}lGkwE0DURHsQ-Jlx1T-hpg
z_5rR<d7K25$h}8dMeWe>)?GXyL;}^PXv{5BUnH&$jFHX?dh<qJ`mXEZps3a0h*Pal
zr>+rs4{7dX?YN3Q(X@t%*p~ou^-%>}^fs^~&3&r*jf#9@WQ8>~n5>?f0K6+O84%BC
z-h)ZFYWt8QM!<8ysn_b`Bk96hzXjscEa*u%?B-d337Hi7V6AnG9Tw68Be;*Ym=|pY
z4-3KlDcbz}*lVnZh}=BkE7_@w5UHHg-*r#}w#7AGXf(|zxTd2ifN2nMfI>0%3X1tN
zm?s+Y#|H@5`V%#GS{>awiz;sbSZBd^P2<$r%ahCVeyj`Si+(!HFL1u!!It6aZ$u+V
zJ8$cqz+)BA@~pM;jO};!gTRnm&J&W<w&dAQzp<oA+Ru<^pQb!t1Q^CZm(dM_3juhi
z!KZ#{VeWFeS)%s!bK0-A29d>$<i3r*8*bq$QX}A1_imXXHVo`svEEz$SLW{LF6EhJ
zw!2-?gczy|<sD_H<9A|=gd{Zf0wkGpSV^Pbp8G0qx>10Q(O&CAvoMmq9ccLnzfc-4
zF6=atlXW|9_GzQH5y#3Xc_QtD*&da|OIJ#ki=T@sQFg9J6Wuzax#89iIQ6e5NsJif
zay<0OKU+9+JD=<exhtJ-g?Tq-twQYyxpbypJe5&9A=Bo?^5vP|20mN*;fdK%yXX4%
z-{oxi!5Y(YQYh}1;H%u+@@IRxh4ID+dD>~vRO`o^P)CzJ>5-($&9~X7x7%8IM@4#r
z=x2ehguH+3_FLMmp}N(P(OEt|PJ6c!mTP^F)vo+w#=++;*$U0Z>Ap|L!H=%oQy#`m
z4g7U$`4pc?FUqFz>~C}&Z`QVzBl%&c@fb@lgTm|yz7ao*OGG(G#aj$YI2oRG*eji9
zHz%v457&c(wjua=7^;$Ns18**)RnB+STEq*IZH`j-8B%44cf@B7P#oaQ2est)lCCa
z0LnQ(%WV4{q)G=~T^8GC%Pnun)XIteQ3Rr_iXi2#_kdXuz(r^&uz<s(hQvhct&Gyb
zfzTWVz<}~`$z8Ql>F-*qO(UM03l{!;R@Asl>l()-t)D@1Ocnzwovw(-uD^VrpY`gh
zUaak5EHCVsgnfA;Ih7_3RM*-ZO{jF0FknKVewXjBekNTWW{Bqgqv8xeN2Z?t$Vz0m
zJ~8khqZ+ikgzaJV13dLT8D>QS<(V6QNDFwkT>#+CMK25N1Ak^92qs`WSNvF~U_9NH
z`t>Tre2#gEd!?;N8<X(F)~c7(79r5COL$^u>U;c%wN;vou;WQvewJ;~eulmBoE4wP
zf;Dgn6CencEY#~2qia3G{JmRnyx3u+KMr6PModTqz<i8IpD0^<P!e#yWs1H8a%CLr
z^T=3g8wnwce&$6gvV})m3897!<S=G2<7<_~LX_QgPfTj|Ho;jIjV5EV#|b9!t(@rZ
z58m^0>zLn_n&LP1+6=D-py$(y@B4u5`;j8wr6-uGT(nk-;aLv$oysqq&*SiNQ<;?1
z+itODhn=cK;ST9r2BKc+N!ZSRCgQLy7k^WzxELFxp6y(7-DioE(}cddo+$bROnNtx
zkMCRNor|gx%A5$)kESTl*Qa>=`&xc@D2BEjJjLhmGqhl9yza;R*YSp@hfOEY`y~u~
z8oB&M&(2jBSZlP(S^S>`djg+ZP4vv7pxd%Szd5LFMqe?2sI9emsEgw7$jLRc6UWUG
zp8RSga?<MDaDGL5sNv>no9FS~y<oGJ?51)ouczQL`uIXV)~kxJd^5l7!QCmMOj=r6
zr>pat)CgZ%vVmCuzaGaDR9##<NRF4TTvDSt$JOncj&m|ImpVaklbK&kia`{a{N+^M
z8=4QakVuByhh4!7Q3=2Aufp7CHO3?m?V9sUnjQeT?XVXro_3$CEMZyLE*xYeUBC}~
zwZwJD@_RlYC{5LUklKvtO7`Es2WpdxCvA=dNIa5F_L(#io*xAn0LfD~LUMoQ84DS6
z^jbY3Z8;q;YO+>fU0M(J&QIxXEmbO@8i)kvp{AM5eW!6ZvwUEcU1*Bv=-D&4{B$AZ
zU7}sYpxjsco*t(6>609{!_5IEV$DuhHVA~-->;>to5iwYu=%lSOvBD#);s_b{%H#3
zeU}yQd1FUEKKDegVct}Ef7*QZlFgqk_}p1_aPArK`z*)Km4mj|p3SJrJ@ktgNB|5~
zq6559FclIry{cC`L6ou)AnrltN$NmvFm+9)AJV1kc*3pH6S^UUR!S<<#RT|zydE69
zKqio~Zjhcd*$w5gh^~ric@*p0G^kd6%(AtWea_&hrV~8lUcz3#!1vOiiFizj<pnc5
z)Rr9eh$iGu&&QDxYag6Ywb|8I*O=6hrXvIy@rALkOfcWfW&2mzL-Dt=XNW7x{!L-z
zpdd9<+U5L^i?D20U%l}k84FzQc&N|!^UL8b)*W-yV5yyfD|%#KUGVLrBF)+C49snh
z3ZGtVi<1eZ5s9yzSVq}p?e7+IKXNteVMsi~626f3S<g?+!yw$ck$j7W-+XgF+pQ-~
zgFo1doADsf1hvw*xd{RGcFM92T|3wQaVr0puYB&F!3E3QRQNDSv)r35)paTzRDm~L
zZ{kk!?i&|C#9yoaMw+X)IeSk;IgSB^?UfkvOxL?H>`dS^)%O(uw7H{<=XDK!#3wPS
z7yN-RsG#$Q0!kmCqERc)Ien7IG_AX_+beFih+W+8(d>w~@XQ73+ls!c!cWT$kxM1?
z+Nunbwv4Le)NgvY_iS8?%)D?Xa5n1-9EQU=W#d<Mo+3)O1qM&$_25JS@Z*(xGHbTS
zk&fo8)&Y1Uy}O3g*lJNiCr>|?k8a~0%RiwfpU0!r=&dh?Rglpxop{oZh@2ZGgG8L~
zOGm%MsmX`nhc9Qcn#-C>Oa;^yEdnA=KF1$}E6VRa1xU#;;;K{?5SH{-@p|RHe5xt^
zEJJewOG$4y3pX*r_wzEb7l~$8a*sER%9Z+#ltv&XudIm%$^Ij|0oW?R{+gpb%%_#t
z&Qc8J$krW5f6;-7GKQfaa2(5@nRBy-X4*y%>}?~WP6@425_~I$O60;vZm`qDK;l^R
zFs!Plz$YN~(Ed20EC=AbjH|d<BH+d&v*Q}h)j-0ETM&>*TzK`onU@vw(`zW1--=0X
z_k)yYu|e^$sU7yv@MwjLAvKqQ*r9!<M#l7bPqhGceUjiDWp2Wrt+v#xtDo!(wxf{L
z0<$JP@YPWNJ;73vE5U^4*vlP7TuF#MY?q#Ry!Fx7*>ADJP?zn`^Ku7;D?x4@&6ef#
zyv?OA)6G(k9vTb^gYfYNpAM))S{$PgWfmIHPSgC+PA^by>)JFu0AW(VCgD=1Db?sg
zoT_kMU=8+jx|R?uC?0QB>}ILpQAkXOa>qye+a96g8*3Dk87zWJv3YLjNFjZS0?v#0
zB9bL5f7pHeqiX-#S9RaFmdEUXqkl}n5-1&ci2_7{4{+sh0i`U5LH$I%?9@G6PH<tn
z+!fHWRsDjQvfBuSHGyVk$*E|&+(&%}3|&Ay-p#z|5?p=DMG|&GP~J0?xdQ<+GaZvg
z#dH9hLhLO~I0GpYT%Jb8Rs6p5CD|silbJT^m=J#N19vKZXOrThN1Hr&o4Qu9;h$`H
z-bou{2lC=sCdE=gwYP-}3ynXd7NLE*B8Hy-6mvZ;Smc_L80kXFRhw0}?g5_H(%AEw
z2h_*3UK^_Dsh3m+B_K?INN0&p=N(yD2(%@y=1v+fzt2`LR3#k8rJS-(2`s<FXyka<
z>T2TfqMjOx%ooJkD}*}u!PCo5O(<oxfoxnVPfART=V^1669g6CKip<eY`u03O23|)
zl#)eY$T?sHVXI3JexRg263vW$!G`0JInC+HnN{@ayIEnsmlv&n1BLz4N0$bFw&p=Q
zb^6;xZ(3d@33CzYtPnEJBXAvr!%-zB*JWyum1stA=IxzOMN)`O4d+BJa=TThCt;e(
z%gfDsUJ`5TK*$5}qTKw)X`Wvs52Ek6eA3J_66)Jbg1IzFE}Ww3cShK{$xdt{16Q6&
z1(3b2>9W61Fhw-vK2vD>C$nb~LEb=KqrV!?bGe6c@t3V(Zd73Plp))PGL?k(V~V!?
zuYJ*a2H#PX`G54ILtKh6hcWHOI={=T9V}y+;W8s6p)PgtJfzYo$vF8y-%m|O+U5)=
z^8B?zUk?{14?!TQ`Gl*#P-F{F4tq>4B=zT-!er*jRsS5-<IPf$)%+~JL^qbKM-S#=
z4x<q0e1reSI{wiZ|Awb4QFq+AkAoQ*4yB6VbCpb%GK76aXNIo^pO^@KZkJrOYTKd9
zM82tn3FFYD08F%e3<UOD6EzdaXW)M=94B17Rf*BmHY8u8KY}x_srTK3R4ACYzTfF6
zhm{q93(8japHz{mzu>X{>&8=hGgopwNC0PN&37CVu<K0l(f17G%)D3tFL`e?KsskL
zsADQ<Q}@ZHu08H|kvYSBb`nCT&OZryFpn-IOvdgLQ?Sc+$x+{`Ryy8W&It-<U7*t~
zw(iRB`P$T^4@Jc2?84$b&y6{A1SCN@MjCl$ASWhn8x0WaQIf~T^d|BfbovMkP%^Jf
ztcP*c9ux}g{s?m%cBXy_r0Wv=-cPiSf{qtb7W{;m=fr$S>VJaq#qwz8%5UU`3^rFZ
zyP@h<ss>Hcqos89Ea^)moM+CQ;p`M|UD|#C><85Zs+P;(!vY+&_V7Z|?7kW|i8NFQ
z_slH;nWW4sNbu}FaR19*sF0W9m-NaUm&OO4409$n#2@q+d;ARlG)WBTsH$kw7pV4A
z%54R-kg>nWBUB(+Ya2OJ>r{x`cBG8PMeCwVD*=Gpp;pM!*E+9#8LBfO5F$JF`Jbb*
zB%(RZNhH~6#fno$os{D_j5PMPfe8a*IqIjvJ%#h53AiI34aatvV%khzP$O%jKS`Ng
zUNvuD+Z+i;EC{>7nw!1lu7FIbb=UO^Nt1cWb;8*3gyo)jZ$oEz-|u3KQsJK6g3qQh
z{yB$bN1OvWgn{r@i&Is3;Upe+2@WqDMJ`yTf(bl@N?k*-O^*WoS5~5%FpNMB#>$eQ
zF<N*0`iIC8BvIt}h2rJnPajrkdKUVEhK($uSaJ6k@77B>ExKHjW`X%LTKp`zDLHf1
zta2(6T7#t-9A?n2^lsI4jW~SGLyp-iv5{KkZL-I)OPX#q9J*qu^mEi3#rumKF0LPG
z#YO-Z@@9G|NShbEi(@ZH_agGu9~@AAbl%Ay%9j(gUvonm#1=}KEhdYls+mo?{H-Ma
ztDF3@Zs}&63}n;*XtJ*HX&0{~kVg-Daq7r!t`NASQDiD@ipl={xrTzb%mO=cMJORn
zc`jVy33ozSp;KBZ%OXtWNwQyQ93{d)wk>kB>PcMJ$wk(y1<RljaTBrA3oLX4c!06K
zli6coFy-CSUFu}}RFrWd$jm@j3@s%O!a()R@^8sjsdpb%NSkS@rp4m?$H&4gKvxWX
zBkKxCXe*UejQmlEZtdBjx6HUBobD_{4|w+{%LKoQ*$fUk1l3N3=t-1rt#`E{G+RE{
zEu%COM4g6=2O?iXmC4kQ3Y;?7S~j?<H$qty#C#mDUNn%R0K*zL5w>Td^=Ip2_a;0s
z97tej45?B6N3^JeuHiB#?6@{_7X%t+1I^{*u~4<!tFBz(kqHGw6G)M-?%aoC?kbG7
zuXm6Xr<y<pC+2398$@0y1dUg+JgZ}~DN(X9gSfeY+?f(Sk=-91@glccz|LCH)Wc{V
zDv5-!!g2LxKdV%g^M<rvzkWTnurD}y%89soEBK=~c&VHczgBgM?0nLN^G>w`uIKu8
z`BM=;?%)@O)xkI-+3ChJi0_&g<e?%rn2Zi+ry>fKb86bmhD<CBqajxYGrx?_siQ)O
zoMJqI2RtG)Glh5B`5P6J*1y7k9=4=b`PCC*Y{vEhIk+2(K1dYxoDdwhO>rMv@8(ra
zf9A%ieR&-AQiMGydp<d<g*zvT))S}9d}<KTc*2oh+v+YgI{{p52cmfE8}u?(FnH<8
zMgD%KZ=eFvog(Mcu~8vlgP|G6DS{UO(cRFiS2l9b?4JkFrWmBc1iw=E{csW*6I#s=
z5`az@_2jW&fK}7gfk7|!s#TpQe=c5GLpnBS2RR&(+c%L8U4vxWbD2cigCo>886mz<
zIp5cEFxip`xjS5@*7W@$PdDH%W*w$>N1dJ{@$Q2;9;<j2OYIR%I(}hmgL@qQi)g9+
zrDWrv7hIozeX|JL3om@Y^z%_(4<PsRj$Ynx4)Zsj*)bR^aH6xME@l~V_LpLX&9NP0
zW)mE{*rJw0`I~2qn;*vbfBBbYWzC=Qj#N+aWX91vRgwpJEQhTE&iOS(nGQr^CAq3|
z8@DO~8qVJJgsHx}-x38_J*agzDo`65)#ss>>^Mjsn?LcSO(uE5mQe=*7o<Gh^}n<L
zKf|^0*wR#&H$+PT<~rN94l<ZBy%O6Y5W_1nEZA(QIaO?QdIF-_L-?f^u1!%2iXGUG
zVfZ)G8`}Y-nUy}TDH=E+r=FFr6pG(%J{8!O1b|Qw*<gX0KW4H9l*?sDdyZpeP7@j&
zcUg;Tlab|TaMuO)C*Xehc6t*dJfR3^VY5MBUJ5fC11##)KQuR}jbrauCk4eX{I)>u
z$HY9C<GwoWXg&tH6BQ^{qJ0him;o^zQ{qaB)n6mED3rF$)L9~q6@jD$7gU;RbqyvL
zJ&Fhl$VENLNyO0J!&GJLy2od%&$lqeU(@*t_j>xpK!M!$BBQQ*XaHwQLAVOxyd4H<
zT6y@!$kZl*(b5UPJ7WQx^$E^`XscX8n2Wb3YFKfr(Y%4^ji}b<bsAr+adDSQPPL<A
zO%NL~ZmqKFcz5En#(@~6=MrtTK^~7&o5cEn)m6Fi7^5jFBYxxZ%_%SZLbRyu6cJ3M
zD6Ap(;Z8{Lq*0lB)6T{cj@xZW83A4osivq14*lWfG4#n<mg7gPIDU=gMQ>KJOEUqb
zfys>r?{87x(In$faQWaC|DZl)n1YB2FxltCs+Wa4i?g!K(Cuirc=7>cqI~e9BuA7s
z7F|*W{!)*8&Jvwi`vz~`1bS)(1m8B{gnN?~$2uH0i>Tv$W4gg+J6WIft1U)SUJkg6
zc==4G^@Pgh7rw7>3fJ~9qkLas&@>E!ZC8;>d1yetT%sa$N<0Lq3)kjKa`NBsjk`1S
zdEM<J|J}eKL<~3kcY(3(Pj!yyFEX6oEdJo$n4Xej4C^!xx!#~Y^;beXif$?p>3H`p
zpF|%Nv#H0rX=R0sI}_w!w^3j8^9D-s@hHTvFyou{j@?+?AUaOP0>f##9wgzq-Ky`<
zRl90hLH=V!D=%fe)pq3N&wss_M)9r|C{t@|_9pVU|5%lc1evI8>L2jVM^Q##SE%)T
zXLAW_4@si4!U6^8Gg8QM^C5_k4=;!B;luKh?&nLMlM^DLNi+@pCouxp6pc8qEnU88
z4%~cYa|@m)%>!!dgG8Rh`x_omcs=GO#{}W9Be@e^O#RGVT@;94?3$SxnPI6+24Z5u
z0))FKPl~sxP^&O0ef+Q(7b<?CcS<-lsr?wP(n3-tetH!}2IKAdo+e=++44bZ{S(^m
z$Mg<IN$q(=JhJlwQUjvkMd0dl?kE)A7ox83)z~m^M))N7%IW#XOrWtfcF;W%qxp|8
zVh%Eh@0*l<s*+bdFTi4R#U<L738}FT7$I|r^;FzX5%_#$4^hJrH2!$hKay{I0$a7T
z*2<;)C=|Ck$$JEF0=J6=FtV|NMh3z_P#+-u7p&E#iLPuCzCYEWGJC_XeW!z?k}0h=
z#@!TuiUQ(35;?1Gh9)81i85Ekqr??wL`n&bnQWsVQSSY8rMtr^$k_GrWBOer=A5ds
z9_fSkf$Wn6jyB<b1GGt$g?#?CKTCFJ4g5kd?vGes8;BXsMjgv1o+IqeeaME)YUD>A
zjzne;L{2$5OXCgysr4UPJN1LBbvg&*5<@MKRYW`tO~;t^wtc_7QZXCt*ql+E`i;D5
z@9lSlz6TZ~%M!d#8qV)81Rq8??>J8;gMLeY?AxRMqRlf}^C|b`K2<n^7_9I}R<t3q
zQK|GgLD1-=;(hnQ_UdipZI_{>+gn`;KTys5Pns9|g55?w=edovANq$D>z6$=!VG=N
zk5y&i3~iJDJ+Jw{;5~o-F^QscP7ZXcE+pLq!Ag`4W&o*_0XH$KNO9lRq}W0AcUwC;
z?h}D3xvGwuzO)BhWk5UoLpCKq(~8|I7LkUQ!S~l*QJMA&zO027u^(pTv^$QURSIw#
zLPn3=CvCz6N+WmrAI<JpTa>4WuioyY&7R~*u;KBImEK+#G0!Ee<AOmU%xFbXU!JiD
z_i0<)Z0J2v(O4>;=qJuhR}l~T3J#!6?l?h|eH{SUkVAZ24la6cAuHMFHi}vA0V#xU
zF}XHTyOpypFlS<3TE7u!4yF|uzpISua&trQYBIGsQ!|6+ej!&1G#gorJ*;G66Z?IS
zM8N!mo>Gqbj<NUdPey9~K93U9#+R-DqmJN??#BX#c5{`|Q|Dm}QAtgPT8eyw;@Y=K
zL-n>ep^-jqnPG_GWwJ9qfd}|WX<D48ZKwdQ5n&dcI(KwIFmPE2D0a&Gd{*t(_$qgS
zNsGun+|cnK$&L5giW)iPP26TYqDXCiNKyHfT`fg6^b^@anw_+vwx?7NCR#B$7J1?-
zOtw9CI28$P%Lv$fge{#Mju@r|g|H=vAiI_$dS&QF&ddoO;v{gMiXg^%GP)A5M+0^4
zjRiyy<Fhst%>wW$&7!y*MqL;s8#^HP&A9b_vJi;tI-b|Ls!y(MJb17j`Q(}`Xo%}c
zNpC91Qv6Du(ST9291u@0>!c-_t-z>Yn0XfzYYWT9yVxkd%BE7Yrt|9j&vRQ3nznJX
zQcyx;+Bx>_m8W}AACvEqUMmFA+etnwsBxGw9kOa?=Y~54X+20W?niUU!Iihvskb%B
z_LA$aqlVxj*~Csv#0DQoZJ%+foWE%|QB#c+)F}5IpD3}5)K7yJ=SD%Nl>pxyQU(ME
z$$Ct`Gs`miP-rD{DD3~WRSgJmTQ%gb=Kp%$dO)nHh@<`m)v@=iUOl_SS=t$<l_M=I
z=dveUJ2$ZJNzJl9pQ#Amv&D`g2elj(@;{7LEWW>V+b85@vap%uUrqXd>)u1m2sS#C
zwpFU7HIqo~g2u>oz)PZ;9?x^f111$Y7e%KCuMGJ}k#uDh1<}}Q6H*;F7iFy4RzMcr
zjKF0eZaMYOUk-^r@w+Vf9g%yJK30c@weDtj>F*Z<R6Td`h&WW5JA6(O8l<&=q)2CZ
z^qr7?hRtRy3PuK(^-^Hs<zj~?l%30Z5<M>#%A?gJD*HQ&E4R83-wLiu=?_Rjgza5F
z4(q5!0@)Y(Td?fxTwoym)A<r2W!Y9lWNB<a*qJ?S=LSEJE$9t!de0x0_iTHa?YbEc
zT)M`E6C9Ez1G)i<KRf-#y(s~=^Cn3<AGyJ3D5OmBx&?LLmTt<B4cJRy-Z6oSZP_~_
z=n>1<ossfK$@B5z-ehE?HbX$=3Q{h7Oz@CII-ZUTZf_E3Vv$6H+Cnu}zb~R)RUogm
z1+BcZIbf_0+jBJAv1ZqjGB-@E%R`Dnp!OSs(|Fap$0`t}!!2q8Njsc#l0KHKu$B>~
zd-bNeS8ipoPvFBWr#ETgU(8HMsHhe=#dvNUt#BeOk6K~kWL$rn7g@Nu-ehj{{debF
zIO+dOJNXBf^0E#(rcv3Sp0BX5{eSrU$}SkvdGO!9w|N@xs)hbfkeIq1uU`%RUM%8X
zYqVgVb&DYIC5=HZOBui{xn{Wm;s$*cd<<K&>_?ckX@(2$erxgy+HYDb$1c6k(#k0m
zIofH=EuRhu*`LRyT;nD{_7`6>#pT=OR=k|?l&tO25C;PVW*t+QRD_u9IL15L&mQF&
zRiD;5J<N!kZ}fV9?@wWU-EFdFDDyyu-0!VGwZ9Ut9Gs~Jv+DK_XEP`$N!>JNC1(EH
zI{udn{I9=YA%-ZkAx)i{rxpA01McRZ4#irzK}>>P$jll&+Jy-##`#xhm|~*hwf_J<
zdhK3D$<pUyguOiJ%6Y2y?=+D>!}n}^e=;X5Xn$cH2cWb9W({(jw*#u4&f{;7kk7xv
zVzLAvv;_1xBMxO_mVo9vO_t|)t>GrAg}wIRuqVq`2XB|NyK$kh-f6m&a7{m}@#g@^
z%a3VXLyOa(>r(KjvlGJQ{qRmcZgLi<JaI0@F9a~)8ZUO-T)Spy)O)maGClvJ_Tt$X
z?{x(>)$|{#Hu2JbYBm4Gn)qky<T|CS)2z!Urnh3qkuIWHm5~JvT=00ElGpTWreP?V
zCyj7STqzW)byh@L{5Xw%UJn{2eH0_9h|gUMHO3WMn#7#A@fiiB7$Zwur5u|>o;w*1
z#I^2JgP#M0Z*9RG4dFNnDA8=VX|E03Ii`Pk<9j{co)BEoPO?6bHTFR`?SKhqV)A!2
zz~$V8b4kzqXt1sYB*(jVCCZflv@E!(LocCeg9~~88%F+re`;BD-RIY&W1oT5_&=*1
zSt>9LY4t*KG6u&+d3AocMC+@NJNqM&zIxwf7*+J)l20~6$oK^5r`f8DZ61yLZMgny
z42iAg1$&<ST6QQAi(qg_FYdkv9-<pvYY{u45J3k22!__5j08CQ%~hrU<yxYvK$rEB
z?bSWu+vBIcmv_WP9Y21VJ^_20YIxe_&70S)A%7ZT|KA_x|NrEVgPuuC#sSXO7B4b^
zD=DD0s|DD343y=TxY<{jPWpB2Y(H+!8b&2S&ruA+%;hMMgTDc(V>{3&58*5-fvJp9
z92ax0KU5RcuEcL)Cs1%2Tz)JC1P;z!;``BQ)ogljY%)<L|MUG9#)$%AxKdmTQ1!WJ
zo<Yk)K_*42g#Y)Z9}qF-HvH-$gFV3cauiDS+Mv-Yye<`BUgIYmBrgfW;h(Mg|JpDc
zI3E(<_r)}KC>6_WYEdRV5pBhrt1)Vy1p)Uf$?P80>$A0Mvoo>*A-TZb;P>B6@&4WS
z{`Unq`GJVp#B{jWrWD3*`6l4a>%rN0TI+NHIZW|=Lf^deyTX^~f9g4tMB2;=Y;;MG
z^4l_x<EKt+rP;-8XujcJLR4c-H;5t%!MH>3%QX4Y$F)s%&YPS9?0@mKxD(^AgYVz`
zDnt>S44XeuMf8dP=JTB+BqYQHhgjikc}fys$rJ-Cs&8*^uhFA=1=sOVH<CYI+cN)~
zCCT4k$-nbDWpNFQjjGvI*wu8@xEXM_dZKw2A{}PEVr$Q66FvOLZ{a)cS*jN${hJT<
zPu|4~a31oBJqb&gUm6c8-BJXG;!Ut}bI84~U%u$APBZDjL%xInzSHK~F!)u7iLj{t
z-#*ztw(8%llTvi)j_OW~6nhkb<p^_|!;9!!pkvS~lsxmMHHJ@OB=t7jIPkzjHg<)a
z|M>%_;QZ2yD=hXhKqzO5I<EeVQ!B;rIu>U3We)2iI*Ko)KCsxcATg?gN#fy;_lg`2
zYcV-etr1#4hp?BOM{X~d+;~HY{wbWHa7A!FC9H5%AivIrQdU+rA1+Kw_k7<nN%*uh
zGv9;k`;!-a)FmH#Tw)^cczO2K|NV;m>%+SUPGJ}5HMBBH?FKlJKYvCpu9`NAb3TsZ
zwpjd?Yq%6=w5<mUm%`7s06nqWP2|Sv_qz_1ltmhQ+>mE4L(xxM-mKgN;dgak)$UJT
z$A%a1Q0&gb1ibb-POGbDY@FzPS!Sjm<~*?x7rdU3^x!-h*o+W5KGFJ{IPBlOa{m12
zedus&sEf0}W8Knjd_zqi0t7Sd`f4Nyk(Qrj-++FxWO+6BmcxPudiN96*h7Qv;tWMk
zx3yKHl=NBDqvv~DKmg%?+V|>uC^*k3&>(Xz>Kp!Z8t-PUJfkIF2_w`@o5Dr9LI7LT
z=UNJw|8(r4d82z9%9i)Ah;(gT3iAK+MRbiEo+F3|vud*uoi#lCaj0nQd+U1^vy(JW
zo39!@Er`{rD$kk7udmr#lc!pnGZ_K*@2s9bU-wK=J{T%Mp}#dv+%Zy%>DS%XcPxqK
zv6H^Nxtg~(;!Dt9-t|R};>WxC;Ne)eF~k8SXAFnfAu(ru?UCMMzwJy!P6Q~KW-4Fe
zHY|*XnpK`9T6z^2DD-LF-14-!EBtcY`xFm%|MQK?zX#~sHLn>nZvUU)4dF5Sap{+4
zx(a>F`X-+ij2W4)<EFb8lZY`xfHjU;(Ry+B0730*R`~WF;^yK0X3>DL*Nv71?F_xX
zn&VX_s1>!9Ebg&lVuu>YOTladY6m%lp?0p0DLheeXzGLE7N*EEy2iEWky6JJ^=}a+
z(>ETxa40gV_tmO$U)7kEBfx(giaY;o?22;#^H1^xF3>Gz@e1kJ;4<`b`B)A(R1_C!
z8=-_2qlH#?X12hkba`F)a8EzJ#!I5#5G;c@^ecM_Zi6fN7_M3Xr*C?U<3!CEZoo;H
z&9Jf<=bQu@F?;Y#7zDARWm=rx7*xc|!dx(bpK;PXJt=4o?vlr}zy<cM{c5v%{rYt&
z^cNawntrLMV}~rQyh0(gt3Ie&vLE+lI(lc2J9%j57}$6`T+;z<S&l))<N5O<A##DX
znz4xuoSY7>QGuRInq~a7$5<3jtDjbCy}bV71-?EIiaGk|{voXly)WSOWc~;;A_bsO
z!;HC(=0AFlDL2k}K+dKLU}8^31FS%WdTRYL`vRzZ^f#~aup8GrHBE!xJ%$=g6W(7@
zt=y2K$FNA6;F{DT7`f2}!-%ntsnVjY#tGDZ8!oUpJWHbh&;zC+PFs10%;Ku53ix%q
z535#!MGQyu#z9eiQ$GUgr@;V=R)r->c7tZt_jxAdY?_51K74p(ua=dvR16?RZ)QbD
zn%7QZj!w<@hYx4qVB^z2Iv@yD+@3$S98MBBF1{IQU|WLel`9y-4G<VG=>5h@AJT@q
zw0}{3=)+YQ|JmxN!-HLP9nvK=p?L`y>&}VM@9k|Mw?wV_oqIZYLc6R@(;>$#J_SV3
z3KO*`k^QIr+2&coCX=FQv=vt?0IH!K!-g&;ZAS+#+v9Je?&Qd)DV2Kk+}y78SZ~cS
zi{$KI-P>A5K+N-^AEhx-i{~tL*~sVBnK3J@!bkH+L)R#;{WiY-y>AiA)kx2+VnSMP
z#-U<p97+gj=bUhK{nik*+qlj4_B<7@dHuS|g%`DCtQyTm9$xQxoW}3Bq3en>)R%t6
zI6mnS+3A#U?UFi|quV1thG{pf9K6F2uUN8FCKFt08hq}YyC<pj?kSQhwtP<(KiDJF
zgM2TZ+Q3@ffmz9+`_Vk;?=R2OI)Yai(Y<2`=6-mR@a*Xd5^JRJ`l2kP&Oa%%iQ%)e
z6*=ArLmtN?jw?l9Og^^TUgov<X1=|(EplY8nWgChPWS7|{Z%&V+v|<NXAAX8?4UOs
z54Er6vKj7`7T*6D3&!lZxgzY0z26La^Ao*Rri$xii10idf1E}x5B=C8s=K^1DbZi)
zF!F@Zj(NkhHG(6<(O7c@+!I^^qj{DJe?>CIa7H`(fyY%B5t%Ga=Y_5Yl`}r}IDc~9
z(e&&~|M}&sio1Mo=vd~|xUW96Q^ESyO?z$aQfh5y7bO{uwo&ovg?$aQ2Ry|z&7rrv
zK=G+tAqaKxaguOfCJn0tRWNzr$<!=?hA&3^L<GB`C2Yx?8CO9++LxtqzE}5PTMcG9
zj6=bx9b3^v<7uuEIuDJ9wIZkEhv`b#$9=-_LQQQW#x=)BNIMUYZ&POuY253Uv13fO
z@`{sgQG6($a4zHVb|H)c+^(s1PJPiOTKOjR`3}KUg8iQ3UfKb;ac#_Es<yGBn#>72
zj%dEJ$+}mQFTuiBUl1DGu&P5~x%Fn=P~9ZvS<w!i*^$EzgBujsbb&g5p#&rDx`G|g
z$?{qOkzOSzK5smTP<V7?6^DrM+8dhX{B3G=s&T2M$={#H7L+K8vEGa(;`_#!2oCX=
z&O20>H|8#=Gs}45ghmd~!Cd5-g3%cK9KEuF2jOf?QM}R41WW2Te?04P4RJaqTuKLN
zDL3ZTe^AZ;Q9Fr#!%<0LLO6Tn{!A(2{V9L!NxKx4XSrjQ`f!<D*J}mspl((K$Krso
z_oGcg*9G&kac_UzIsNPKe#i1s-<{5>!&Ggf61zM!XQv|!dP3Eet-Jn9D@)5kFm;s0
zbv{*b>1cnsq|2#h{!<jcM<KGqxaQ-Xrd-F7uhoc|Hog&cWsw>0qpcXH?9FhFu@0cZ
z0W2txkGXrEUAv5?Ovj(f@mAY$nICbE@q}=xJ+x2`f1MHEAJ0#q&^CQjMiwg}iTz0y
z@~yFgWnOo^DuwtbeMHCNe;tNq7a?ua^-3#C>?&-51t^-QMNNCt?0)az{Q(1?9rZy+
zyjF0Am7w=B>-2*~c2js9M?Vvhv0KNZwxZ6>O>pHecGT{K8crlW&&mo3zziFj8KXAC
zkvYyj-X~A#fr*l#^;goymqXv9WFn*zNnL98hH;4!Mp*Eu%Pn6l6lH$ydwY4oBN#ZU
zmZKwNhS28c86Q{jXSc8eyK)WmAgiv|pI<H;wQY-`JyZKZ*h|mkxXaFoRxRXnX^y@j
z^%9fOtyjKOpj|g3Afm|cPE~#!FCsX71^HyfWZMN4XiGKYUW>j^4q3ED4iRE&ox*M^
zoObUxoFdFJI_&M`bs6m7`=ge<sEGAr`~3N<?nCjapRMr|j#aBSTVuG4P4=uC$fu_t
zp2S@1!owXAoVX)mqAr`}KR+Ta!h*eULQN~<(zUyj9AyH{W$@8Q^P;~8P;gvzMVz|d
zIbr0rYq4D+P(nf_d|wWtYmN$uJ47a`(^h;v)+u!$-~qWrqOIb8*irMr0cuz!?n9iO
zLEGq21yZ^G978-(xMkK0TRSoCZuTCDZ49>5fjfPygT;?+bhsL=7{xu*hY>M(Hs*%H
zGCDYpR}Eb?(BZmJlfM?vqXosAcG?jECB8Vmbnq2Bj=U=Fmg1QSkEZ3C_4C`~hyi0K
zu9_#GZ+1_UsJg?^w)irLdMpK?=VF)kYz)lCaN?Kg7mTv_th}(fBV0->V9{6qmllAl
z>XuwMoE_tOM&69>lOJ6=N}}T1ABzN2-}&k}=2Es_v3etNaOVu^$q_j$u1v~Bm&W2Q
zNNuY%Bvyasrs8Oa5VofEYalho`}aet0;CyG7}Px_AMLEhwDHa)2ah7F_qU2_4)+Lz
zJDQydP$n<<o?lcJv5@dT`-n@z!ReTHtlT1t_}fb4r^vf!UiiQDvZ^xl1_M9gZNg`7
z-M8*xdMjK~Vgz-oOY8;&FtP!Zxy~)HYeCCZ;GkcolQWE143+0Pr$7UiAN^?ip~83H
zqXka?I1Tl{<Ik3sH~xKe@xN9gvZ~O7+Lu1JA1ZFy+n9Ht1^Le7wn|s5DW6;Qkdjb|
zbZ7_ZrAyg*KOgwCAFyd1hp}H1Bi(5{iz}hCAUejb2_m{?F-|zs(3W3$LB9}o1BGBR
zQ}OKijn)W#1A~uQksm%-YqDuRS?5wMOgSvDF8J9J*5nnTRxTdfqfA`9-85aB4Mla!
zul?RI<-wIE8W*f`EbrJ=gD39*hV6_tfEPXhginmXp{&lc+H3dSJC*Wu8wu`MM^SL?
z3Qkvlsm+bHo(~9@^W`ApPRu_OPK%1Og7QzU8~pLIma^|Gly7sw)qb-Y$tZfgyttw;
z)eASxzl7>Pw8MG7T?)D7($6jkc6(up+e>8=dT>LG?tATTmyLVv!Nk~pwn0?bNd(Gp
zCk98b3>C9QaFw}q2)9<}Ev0+i0G4AJAq^QRHY5Gg)w^1S9>)-c-k&}HuFhwRT40cv
ztLA-*5+LZ_+mB|Lbk<vgUwFA&fCKGT{XP~QIm`u(+9TO*+3^GDV6JEUT5z8tYJ<BF
z2*BUVuzhXA9?tx8NoTY>ixW!?KNCwz;TJ~XfC&5Nh5rvyyHg;9(C==7g`XU*S#S!x
zY5^LSv-mf6BKNxzgNGc-CTQH*`0Y(L1|QLDLk5gdNt6FMm-y=KdJS~BD#Lb>h{03`
zB>X@f?*GwyC*O3dmoymNakF;2hR3n{^Wnka_Jn?GYYaLbIgX4!_jIMcZeyx}97HGf
zP=N?>A7h3`TJx$dJ&uFWtb8dH=i~UkT=gb|(SYX$c4VO14HaMGig76O`&c^C#y5oP
zajlHp#TZ8>XpK566{(OjIbCu$kyfMp=-FJsG355<ve_Z6J6+2xZN~@GSi$khapa%p
zheW$;OK9!l1eAu(&mq;WT$G5*gf3O|)y_#mys7g*g_gn9KLRARd0PxGV%?^Hk()}y
zMr}}Y(+Mj=!BvX80}yvu4HET(_3d|NWWa_-7v^1K4Y$v3YrTo!SXxRrybE5Xv(iEN
z_0LaL%>P{PYz!W>Xp0_teM4TlP&YX<4CVx*d6bKAaU{PE55jP+pZx{uR&QPh@-&bq
zO{a0=$$`t5iT^)Ps{j300CMaK<1j;)+QWX~k9$7V$KyyjUy8jAjFZ=qh{<G8ho$bm
z>rztp<<&)({tOo@K1Jvxh)$NT9ITIl`t3=9m9#L%+uM2aH{|XY%CQb(FTnvN!KLE5
zLePDGIQ&A{zr2uTP>sZ59Y{bvvAQNAFn1B@`lI<3CTrSF<j5K>>R{_=L2UWh%^+Ir
zLQu@Du4q1yOV_5t0ruDLdq6%Wk61fC?2w`Wf$q*hL88P`R9f7VyhD1jjJBshNov6%
zpF0c&?sj)XV#9|SeL6&<g~uEhM_a0EewL2d&zZ@H-xUw{_Szp#A234DwtcwQ(=Kw1
zx4qtVURwwH<XD6>HD6xw3pVDEWcj9`twxdwCfyv|D7Rjztp!m-I$YMT+SD@3U6=I0
zE=EPtL2-XYLcic?6p!8bC|PdEhY*vQuR#U4ZZXO#*5Mpi4S%MyABY9@!G)M1nlJo9
z^BJh<e!R%}F7PL5_8-)UA%!?p!J1?U`rY3<|Glg{{QhC$vmfs78lrP#g46Gw5)$~l
zT)wXK`-hc@luLf&0Eu0=D|H{aO9VY%aIDsh1`h1W2-}aGcp77V59URx1Z_gcyfGZP
z%aB#K6rt}F=)Q|x@(2#}*k8hZTG<`KWp_G+1^aAVmq%^F+1``%s-G4;db%5?$Y=5G
zM;(%sNx4*>%i*fKSBIh7upoFn3>3{iwJGV~XXx9_Y=CZk>Ej(tWo4xCBfmheS=l-X
zMvI1>Ro4OPGIZvj=jqE>h5atl#^4uRRlEJxc72}$_wN<?vsqu6A-R?h9*V=`G=~u*
z;7xZ!F=iN!1zTJJ{({3k_8e8e{?n)8k`DOr-Pir@D0sMq#vBcAEiFNb>d+OB(hHO4
zEEz@w;VZmgd-SM43qXR4Z7~l{|G>vxm<?K%)c^g$^f@-e3fI})$HfguEDAmB2#HQr
zvn?%6a&-{H*)3~keO6M{u+wmOn5ULvc>(!ZOI%fO=P+-7wPWV~EaSadMyBY-{R++j
zky-EM-AZiO1QumjyHEOW_WZAK!cLMOFGg!o#xUlVOhBF@`|f&!Cc=8cD1u8rvoGqd
zN5I|fEnHgJgGSHI;=;n8t@2b<z7*hG$pK2jzTrXA+*?k|*X9S(g8Lo6WcG!!+o)xz
z)O_6X_%V08yFi_(@t~1dd$8Ir@~Qs*QtHvN5V8frVeH4-x)`LJ-?N03?6J}%{fIQy
zbI`AHKO+~)_`1&%q%3|6gX_K7n)1Kej1%~Fy%%+&_`TtW?goUbm5%Du+I4_WAEV35
z4ZRZaxVS<<5$qH<wo!}Y90=RKUPTReY4>0oe!t<yZi{c$nz11He4+?6bLh$a?N+#1
z%`p*ek2jhxdR1KEHV>f|bdy`SYh%B4CojDw4DwbBGQ4zPs&T5FTJVQ^-EFzJ`+nuA
zatyN_u_Y`9^r}gcs^|UlZKgHE>u^V=b7<hh=>HsvlT3#F*Y#?@rcx{Nb5BKTzdzbz
z-|00Kmr;46lTNKsG~Z_T_(0x-sO8??H@GrVUs=)TWIz7Ny4D(c!&PwtWO#yZM-f#O
zk8KW-W%evA>YqYsZz^>P(~{i3vG5Q*Pij=|JO2?zikXULzZZD4w?=S=D^U;IZOWkd
zw1(a0OkDKs$Q4hX0vmnif`?7#%U;j>9o?Dbl3nO^+U|PdEuygc&ay2=pGpfA53XHj
zYLMEOn3UMX269J6mtl}yExj&H@9;r*O~jYh2)~i7m~Y`<CXSzNd3V$thB7I~m06{!
zN!@$0lCZU&%BFq8raOhgtJr4jfmV)AVmR#%CgI1%N~gE*leq+qTpiW@3dD%(+F^Ow
z)TK`yK%{>uGC7em7h~IJK9yvA7AsG|b`$giUEh{R(Ol5G7J3|}DaS{gLez%G@HyE!
zd{T<14~)56P*Lsi1^(h2SSs7w(i%ZFA0?N0R|oOW)tM$wk)PkRLzIcDcur&G!db%^
z6+U!+D#&<I*F+~;-q4ian*IME<M|apayz0*vQy&maw;kzrP1VBTJrPU77d0&TyH4k
zAik}5d-Lku_qs(^Z#+aBr_4@3dR70eeU-?sZCs8cpz{@Q7)|hjGF+GVHx<g2KEExl
z+C6w_x^}lMp=6_{rw<hlj4?WH_(=x~wL%IxF;ryH`Rqt<HyVLSHP29c`Q`wq%?Lx}
zmh4CVNA^Ze?&S*)Ybz)7;^2q2)HBF@`SRt)X!YgJ+S>1{u{qVWe5Ss|wqw%!x&)Nz
zzn$D9<1#Yn-*q@!6#Pl?YOAz}$kJFzOc|q?FTPrtlEYAmOPXo*uRvvdeAyxH)RO6=
zlY|ej!d^c?&mYQ*V69%LZ<Jv~qtRc=eSCb>DmCPC?w7>Ge7uj)GcYtP>0m9E@N-MI
zIyOeV_HSaMSfc99V;U)Q?E5xhRqjjVWIgdK$LYCrV2bjDH-!sKkb88OX>;Y=zw6F8
z+E%nS4O8d1AhDQee-LV4HLiXvrIquPN;;87A2<LA4${tlp%|8O2~P<aC|^=18ufqa
zH~l}ZcIt47T>jH*wab=kDX+OLH>@45E;Q`_${A@mD^u=<jeBaCSVi;smc_!|Roh_=
zyMbC`k*NLTye*fZwVxJK9dFph$#A*Un>9JfhRxWnqR7ud)cRRYPUQ{5eOaj%#7-wi
zim%*BRh{`t@qWsWEj{4V6h5^8BJ^FdG*!ddUe8wV%~Xo<1mA1zhE<GUVA9vX_$`u!
zgOyoS2wKB1Z*XD9r&riD4ONJ`uWQ*6#TI@nvPhRyO~doBd`BTFN%IN>Nj|~uZY6oU
zcf5mKF|{v5!x)$VXj!gC*^0z;U}ufJ!!swIn$1c35#Tl>Tb5c$Ci@<uU~7F3f%%Lc
z8WG}vydQSsithYiR>{OvHy0s%)7jjyHJf^0y+b)trsl!hX2tPrntOWQdgUt9O~HA=
zS-w2c9z0!*RF&IvEYJPV_e}&}6IS@Nw__def0mkc%yZ-J_o2I0qSek%%6*4>o;~}`
z;XA{LCXiXP@9n^;{4P6++cv(>?MKHUA){udo9U&@r;wo9U8>2JqeRNZwHn1MbkJ5b
z)dqINQh|0$ubB<RO2!I3!afQk9$>ygl68{gYeuj!?tl412#+=#j$7J3*CL&N^V0k$
z>!bk~!l{$@E`#-KXu!|bmM_GV8{{RnJz5VUnCV&6Q$uID;^gZJ%(&Z{WN1XZv-?yj
zzmw1iUx(YSOIYOTj!FOp3wymA);8Yd$9EQ}SSYvchkpLb(Jyqv8b!?r>Lb&9iCmYD
zBnr`JyZEJZ+A5J7Mdsg4I%_XKk%9z7%L0ar5O7FHC=aL1yj><hc(^2~?#k46cV^qa
zm1Apqo-+y{mf0DktIs8<z|H8h2P6u)&B79gV}@GGkjw06r$*1Ax!JTn&3ZyX*W*Ng
zxfcj~adGj_jY4SQ$mcRa4<KWO;lAlYgVV(h@x5zqi=#IPg!dKfijV`GyQQui)m|Or
zUMUJgg`spt_jkdp#9}AkE%8(>yKbhxNV;&AX2$iSBf^aeNI8?i#j|ZMPef)2tDASw
zqUNyTC#f~+;YNqx;Es}8M4M!58}DIE^#OP@-~w#89WsMyj1qnoy3ccSWMAI^4PMOM
zbbamP`zD=qyV)xA6^{;I^2S@pM_j&tjXJk8)2}RBw_1-%B9<WUQyZgL!wa=+o!dFt
z9_m~|8rNaSPA$*di$y=TYU^<DcsAbi*2~PS238GgDGeILP2jQ|O5OmV@GbQXWs2I*
zZ*X@Rz1f3lp)fyUisp5zj_j9gDe{p@U<_r3P++B7xedu+E4P<;?f#`^{-3Ow|B8wH
z@hx=rP&5iBge7u5Lh{+M`k$vMu4E<8&i7mrXaT4*aT)ZJ#lqqzDH;}JOAHHaODOm+
z><v=oCJZC6!&2V5#j=<rt)*e^?X+FfcEKd@S~LOQ{O(FAVxeBTY$cdW;V^>$NjQ1W
z<)QX$;x?B0*u?XIm1@b8k9+`-BSSVw{VZ*|^L?~rN`~@n!uq^a$e-Rkrc0I%>Rl*x
z98s#F<x_Iv^XQhma%azwPEv<jDdx8NRUSuscf@Y@jaA!G9Y{kbUB1?P4P{g;t5#8Q
zW#QxL(;*b&ZJTxe`2s4)+IFX8M#bpfX~a@A&&J9ryWfIv4b$V)V#mJjTiMZe*3Uiz
zS;F9;SMuIa&`p}Z#Pi(MZyQ(cTtC~BUs~F^O+s@&1ZULRzo43#=Bt(++rxZL)C~Wl
z2E-9Cjq!i_OJ()HugRXBgj?I0&Qf7+0WO$A&rQ~$N{g&(8zLr;#Eb|So?yl$qLE1X
zh8JfVKNeP=6@I*POSj^oAALR@L{Y01yFZ#AOUpCwh#TuHef0bkEO*PC#qYbsp#lio
ztZT^a#dmr<nRc7rhLsAqN%~tOixaiRnc6u?)tK?*w6in<y-DNn|5}LF))d0_YW%4A
zOcZwq0?<CyJ`1XHZtF?Wp$ac_q7w99KeM`1Q=N`agwl!OWntz!YpU6eOEt2#8_D8N
zH{D%YgblQ|Yei6!1fsXrpIHN+zkHF(TN^Mw;<m2)?Vjh4SElE~S-m)7(TFh6<-WLA
z1};dgAG(swLEn9)f%`EWNzhD(0S7F9u(R4|zdzT-aOJjrdiKtt+nde+Er;O;dE?da
zi58oddaeC<{r1{z@n3DbT`NYh)o^9C&a3-ygQ8(+?9W1AYrU({KNYephdY)8UEg<^
z)fCMggAI(@t>Y1u;OG+Dma1Livk0SFZ;r;7=id$8v0C`~3Ci&mr~<idrX^SPYnAX$
zo;<e{u86JiN_AZlpb)#JMIwq%4#7U9RZp*63g^r&1u05UiegN=tq^X90&TT&ds)El
z_u#Vs@oxNQBx)V7X$^$l*ELicO4zg+jeK_?(fy{}d**kBY+8{G$2ACjs5_W5Mn@NI
z_l-5QrY;TS8ix6k&<6PX`zt1%PF&ZZT+cJAxPC0`&3^CkkNgqV$^oiNm#$NC8Igsf
zLl|U~(45B;Xr#8rEwPshQT9YNw+vgCMi$PFhBC^9J^1?nvG<-~Rc*_*s0jn87zly_
zA|fD31OdsQNS4eb2LS<*B$C4v6i^XR$yp@loRflp2m+FGQqm-6n50)jai9I}x%Yc#
z!+QVj`nA^gEyf(9_v+PKRkdm*NkXkzl5v=%zGG)$MB)T)5kq5S`CA5+EKxYV(V?QV
zJJ5OdWD9Hc>LN#)-uIAOy_R!RU95$U>sbkwz7Q1{hDLW61KYsx=iQp~(2gtSd(8_>
zgNCapUiwIwCLE&p0U@Hlbep{&A^|@*L@#erk|7+lb{x$zTS}Yf&&kL$KDZM0%Ebp1
z%nz$X9=Ua9O%#F1q8t(W|7T6>|LNOkUjg!H4MO3wl|DpCN%>@Fo7Zmr<`+sTFfb9h
zI7w=Y;V%}V=%=oqJYZODg-20#3f_K8<p&P-z!zlny+)$IXLpW}^VnVnrFk<ytT=?T
zR{^?+J2hQ!@ezh-+ebfMg=YUnmLX7Q`80tT^7dhuw{OodY7f==(pY;%(8^ws{frAA
znVC%He|9YhrveZ4l7e}rroN*4zvm(T(=T63I1*8AOLyWt4G{{3dPPVdu+j+LWP@0q
zJa7<AzR4UX>28N?w>N?9;;0u7dRu*i_}qdV2$e7<N%CTdvyzP;gQ=x`@uAS#i2r7L
zM&J`4+;~%qAKCZ6C=`f79K~>2*0o(o*Mxli*X38o5RHs|q{e>#?cBTLVZ1h)=dRsn
zNJ~rWrnrmRQCC;bL9>iloY)@wyz}6jUeMpsi=2V*CJnh-^+f;a3ja6X<T8$oDdbX^
zIKTU-2MGI-<sp60@%^vZ4wBE`A>lo|d-6VQz>f_%(Xt-h|Fc<;W|p8*{`%9qFa8nX
zArKriLYn#Zw;i93Ap!caj8_bQ$+{IV3e2VDpBeCLesmX`4L%2Q)X?*OO(I0QYJac%
zObUX=&M$YVcTLk=3CupsYAlFjzfXq41~V}~TLdh<*nLYD8CdxX1$2`8p89yeWfkJ)
z3WuWxoV)LBTMpk*qGfjPA7B_=L&zlOZQO3}PELGQiDc6*P?P<CO;Y^--i^T=Bu1ZZ
zXF*2dBG-5ZIA0t!zXYW1dw)Cm$%7HOI7-V?{us844_ujUKHJ9+?AygWdj?*ea@Pg8
z;H$!O@$DT{F75Y~4;*5L5Jmg^dH-F@{-lE7+xBqX{(UY6tS0AuSlJqt=JUI6`9%OM
z`@vw`jlZV;-(1@N+$Z*DgMXSO2^;!*BDWAA=Uhs1>VN)>-9P<bv7Ac~;*KPH2}l1P
zo72cK((!xx_rL%1rQr*IyYrU|@b|BuwZJP6=BU+t*}Z;05yARAmi>5o|GP?&2g^gT
zvYo~C$IAKa;n93psssBr@&kv23J!VvT{AvI<hkS1`WAn`YVSYLc@+|IQj!XP<una|
zfd5&=#@lZH;BSx<Uh|THnDp*jo<X9xmoA|de*Xs>_z#T8wh{4r2IlU&e$Qo<9=yQD
z@<X;=2eS_=e}Lc?77J9+-y_5+2}jC9w)yP-P2@hjrfZ8S+4;YDPc`td8N#prfdal`
zCoG9$=SCgo&+@K~BRGEC=fHveTM10FymV-HW!F9+&;5`eShfFqK^y6$U}us2dox00
zZH{BmcYAcNIfG9d=Vey$VYJv~(B}w%ekxIj(yjt=czASlW&7G^(bL38pIB5Q40-d6
zkB_gcwp+&dLmpm;hll4X;Plgzf!_Tmv@bcu4?#)d$@Zq*Iy8n?wYA;C9>u<N@Mii+
zCE{(kqoR-Xqesn91>`wR0FW>hmfBq%b0IMLF!Pq6n|m`B049`_l;;QtuFlNNoa45B
z9NN7Z=-;|i&CkiHyaPcgk61WYE=1BwkQ`Wwl$wU-YtTGCS7<x`QRg(!vEM`MYZni5
zTO)L3<t&%lE#8ALiw>$gKem}0(Nt%`fg#)s<%Sd{>15A|>p3pZaB5~)tG$=mrlrEw
ztepKbx$-fa=Q0MBXUEyDsZ%aE2p0(bnl}79>+C*YJ=gP(&&eZVb$d9-84`m~oO-f0
zr!zg^3B{kmPcH9y?4A^3Z3q0#`iiKbH><hga)muIyb)R+12`>)OJ);mp;7J^bYc?y
zgf>mNCu0pJR(uf1A=B({+s<hRS+&KEz+Z^MQlzX1<J92ZML~5fcBhHte8ymBX=P_-
zL|kdGCKjKOM*DMS{|^&M_^4G+7?|Gk<J|6dgb9H0(R5yo+atA8TX7IJ<H=Mf%lztU
zV6n|CDW+!0+zsX*)`6^1Y8nfeVRMQKs|A#$RXbz}6~-&U3YTXv9qG(KKnjFuvpsBI
zpvy-O<bhPb3g7j?RT_t3VOK@peu{HW{B^-){5b0PWHWmFF$`v7ASWmH4&D^$#jE~N
zyk6r&5jZ%g?J0O%**whQ>BaMDXVyz$GUkGH&fk5afmq`63HDcXd*mkErOg2C8%71n
z5}Ios^a<ttyfEUL*YN{LD9OQ49I<y-++MtR@%8ibW59E{g>5Efe@q(@5ivV`_sEeW
zU(?ICle_{s%rxg$R`To~TN&sygx!8JRDqK!1v)G-AX)RC^3KueMOcUt(8WKm{~-ce
z2t}cl@bOIKYgu9_LI~Xr+=j(uwu7V=HimzJ{D$}T;WO`84&r&w`<UtiJ-%ET^zHh+
z19lzW;1L9Me!j*cyca_Sfvw{>*Q6sDK$V~wa~0HOV451<ZRiB<Ep<TAd)EFIjXDPw
zXcB?QEwGvPc0NdjZ4Us&D8muZ-9N+3oW5#(MY2Ze^Rep(KDQ&ICU5FipLEi~u1wQ|
zvteN?w_i?@jO5dxhocYyGw0+WhJ8%tYA;J*u2*m<a67tygq^LX^XS!Mimztsc20-H
z$=jR{uZGXuHUzY8$E~`%o6pVz&vWod=of-LrWLLb%q=hbgRa9XaEp*D)hG_z0dh<&
zj9|*KX1T4d15~vq!(UFAMDW@#y#+x*wUp(FmUv|LYbr85y15*^BO3k^ioms?XvGM%
zmvhS<9c{`d&Rsp8&3r4aXsrmUC$b06U=royy?=cVMQy0$vf_*1m^Fm4ypYp<lnTt7
zZaL_xxlwcTRL#p;2SU1~3;kbZhj7)gKHFa2UpZmtyJz{y;dGCUplcdh?HoLrkbOsA
z17J}?#`qV~oj?K?SE&cD_jvPJ<8i{U8_=@*1+J<aTm6RQ{6lR)QPGztN!dh`eHm14
zZW*Y_M)0GVpe_9j8jbe61`-nfM^BN8g4poMSr}{(gTwM-6;@ODTL9z5A%e}#%_VL3
zmFXVO;$nxOWrKz=Izd6f?&5=okBY+V-p3lG%O7b6Vb+Z+;m3j#>})=1c;oCRw|<~L
z^I?4io?bxCvlG=ndY(HO2N{NN^BAUpVK_WFnXCvY?sQuRhn{B1<VEbVaWFr+ER5TR
zse&B@PT#|AGj4V1Y?^l6RjKDx3J4`%6J|T;OUPq51uiEI;U1yq)IOi`^eh>1V>G&*
zqW$=k;L>b-wATsL%gqQ7Km7+yb&6>1EvU?=Ycj$lu$Ge{Y(`g*7TDT5eI$sG05tN7
zCP&`X7f)2lj?=3TlHJ}~)k@t2I$!GsqUF4DpBJBkkHD%+(W}^?kvvs0_dC>bRxFWn
zr1Rz)`**63;)p*5#TMaYut$qTkmB>(h&kMY^YL7oK!)pd!@JapalEm2;m4-$Za5_{
zP4PQ#cDho*i5{Mqpo4UjjIiLRcgQJqruxS%6TJG>t9PNL^1*87^{1ER<0P%~@sb6B
z%upY8TizkI;w%jAGFimYv?_c$(HyI)#=*fc(VFOs&?#=zLt7j&ze-gF?$MY#9;b(g
zhd*|76<WqW?k$kr=!NU4Hj=;mPJ1ku9d;>EGK^EUJSC+);F=Vv$Fj6YJI<Ah$O>5X
zB($6V5?)Mba9c6M>GU1vKjD4z{|~UB_6dfsLvblzGK8&mCKGZ0;C?cS!|k3UIeZ@<
zA9B7X&|s{6N9FN-t09<Gq#=?&z0IsS<`n^ha?{6YV4vtgnFJEgPSfEb`61}>^BP0A
z>00Fh(Bf7LZ1$We1Zg1RVs<79Pu~dWRS+ImGJoTAx0Dm(YPZz5^z))i>8ovCn-?rY
zxbFsNz}=XMNc=^6NLN;vwr>!kU9yLK!?V6a4diKao9mYI;CzAjYG}+XANNK9q?aEa
zBMfN*A-K|QkZC|DHMrSZpl9%<u~FKgBgaS{fu+m#KhCCon7NsvUMRP@wUujuRC0kF
zMhMy9&<+vdn&VK5gzeJprNUI5C9aD`2T-gYpORggMJxP1nB@QT!8C^fK-hs^e!GP)
zGa&Qq%?R#4qgcc6uvOwy(4<E2bSf=Kt^f|oHm^KeK{^g78){mj(~8ic9}5#!p`r%W
zk1Wt5opyp2uNWZ3*!KbO=`6BJPC#SC0vLjyPPR({)#;KEGwD6ePoSdhN_b`Vv2k63
zCT+geC5*7fv(nc^QMu$FA4nFs-s+nh0Pp#ax*y~#`<`=saKR3&Giwwnc$4!cEeG7T
zd}svK-7lWRjcNU}eZ@4OhSbuHT%}x3$IqB<fZpC$5H(IHWrktRtx1X!>67E;ZikPZ
z{tCDtce^bFhG3?+@y~5?0BqUhm>KdS^{@NIVoXi3{kSuEHM<63RKW~fm6LIY?09&2
zk)Wjh6`+9iEg;nWgGdi<hLj;(m^~5*0y1~h(nCW-pH6kk!WE#mioGKwqzB4Ns>J{S
zkm0@+(|2%gL%Hj&gBGB`M1{onnjP<kaDiL|;+jIGW`rqksU?VtJMJB>IRWg%5BI#r
zg$lV0;3~K1{l(WDQIJEi$N`vw-+`b@8|M}`0^>yfQ5biy7$=NHUC`}%f;rA|Lix8o
z8108pv-*tjO>R7_zhJjE7qwymW8xv)n!2$8<3JEYLr@9<y^>`57)%!Z@ZoYW2uAmt
z!R*8@m6cS@#?eu_N2Y-J5e<>jg^ic?LkrGJ7e%a(tX#`_vXbj54qD`|%yBkKq>TS@
z<I4k4DiNP=Ks3p*s`ez727%x!5Z`4w^u?VbVo<&elX{w8@1k#_Ef{wS3i#nX&YQ{(
z9myzWu~7C@%|`I5NPtYj`tU0t&m8B{k`hGmNmliu7a7%=U=T>Z`5RUz5Hrn-lxLPw
zWzej=7EW_kcuv@w0K3zmnfuR17hrReL%1No<O@?=F~(EfxygFp{Ay=zg>n=;op@g#
z!K+4pA36J&Rxx0Jq@m<(aG`gAA&Phkf}s>Qt{^_yQz+ZHK^K@9sfcfu@MrrNz8Oa!
zt~q{}U0u-Y{wG)6mCGMB3+gGhs`I=*X?9*G%(eGEt|Y?>C7p#0$Upv*ajx1Yl?p=B
z-U3QKK0YiKm+<;k_%d(vQgC>IJa!A6dJ8bEPh3FYnGy#82RV=)5DR1q=W)U+6g%2O
z5V;kOYjxw4mJBn14y0ln%;!{uL>?FK;P4<91f~R!fc7#t**sMrTv_6mpiD*@{>&|5
z)+Lv`pw&!@7CVrA?1x#(J#!Go#~`8ZED79T`O(O5)<KzrRtGns^ZK0aLJXuo)Fb%p
zu1qu=yq%iqioN^lefN%K4dmumpsuN1PQti{I3G#CJt%vY{enKoowzdzGdhZlG|WuI
z{;cuQ2az?n3f9dhYruX%T!|JUiTs4~{{K2@Qj2V<Y!KLsg|H>|O&e;L3n)|)w!S>V
z&^c>rhR3wpLqA%8?c{E_`7z=WNy>+6!~t&HLpJbZ@4|>D@snTUvW3>uNt;d^W@4dC
zslUF?FwNYyRE^ORw!6WVas2~R?y-Tw^ACB6iHXI6xpG&uA~ZBKQXzFPc1C7LXKA>L
z)w8zx6|uBLyhQNL*o0Cvg%1`zToQWAA2=}X+`Ys4bun_W>115t(4$#9tc8Ae66Pw~
zcoHFDY%vzSH2!Y0MBC-aCH%Lfw;qW@`})))Y5gPp9!LiLPB6<JSF}I>({3iDJA-9C
zYkL>YS<fRGAw;y^5&%#C*9cw*J>VT6sOL^GFbTz=dH<?z^&6cP11^3uGqYNN`rm&-
z8CWq+I?~i~tLZgB!4dq-?o^_}qu$3+GF0a?&fG>js0!<)972IYro2N@blRyyN9a4B
z{d#uY`?QjbJaYao-a(f9O5Xy6?Kh39pCTw`u-K+@Dqh3mbaSz^7Gwp4V``$JoDT68
z+xSKjGv##CiZp~Z$C;=B8B-F7h-SHbgb&gLTpaC2V1V7(`x!bvtD95oEZ2uUKmN#j
z3-TsnmDuH9<L{`>dS~j6G11L+8JrHSLHOp4G~^#$$y(*hoeu|3Od6whS{xnqKp??B
z^e~#tFN~brdRb8a$Va5`IZhOZ-dhp?tl0ZmQF;8#Bti?_p!(W-(DSy#qE`JE*&*CV
zGe;Qi?wo#bX{$Pl>P*U<b4oOovf%eH<gig7hs{%=4$?A4Gb7Z%woA#A4&%&B=^Lbh
z<Uoe%s*}RnBr`gg#UzBU_0#9)&_dQbt2@4W(>-+vH_BIRdi2^PgqQd}(*1Rt7rx9N
z%6mco!aGTb=$d5MRlrr|Yj@+ML$6hOoMu^4%X7373%cw=RB(p$fW`DEqlY(z<Cyoa
zhUJ+}A||=J>?U1FjX#GfJ(_bZX|@*g2ipBfb03k6-ZmUOFdu$Pf?2KXL98Dms$uBf
z)0YAY5I?_sO>VNsR03k#V}y{vaFrWeKrcn&yxCFHwaV{mX^{t}TQvF##oF;7gef07
z;a4_?eq$Hwe1-C+WJitK;q(@Rx&SFYMj3(aLbMh#Ut=6q+LLRLo}hJaXF1z?`H@jq
zg<53wE}MF1Ip-34nH_MGrA5PN-?i`jq>;Y5HlyL0sZj7GFPxjqeyC3e?;}<6p;1VD
zZma-DhqwMy$#XbG->_bxm&yiCVLE)L)dt*1A9oc=@!%1+d!XSKQ7?2<!6mw`XC<|w
zG(M0XSr4&zt6d~dl}M68YLbn`#)?U8<e0`Y@$!R*5i+zpr8fmX6JsccFJJ{at;~;`
zMYbn)Vr%=QJ~-zfvwNn$oZLfz@VBt@Mf9KuB;ADXJzeLA0jk48LuaWN!;IuEh|HS0
zS+Qt&iDtO|>;+OJGtir|$D3q-2cPLk@EP96=w#3sAb1!%Io(P;m`_Om%ai#vMjvz2
zGO!_BZ)|1SUS-3ZOn)h8c8a|5$0<I*7nL=Ku0k6)*H1WRUmDGxFJbyM5T<OPPb8--
zv`bAJnqnRB4*?AfY1sJb5}zXrlJkrJ-~GvY^2N&eoKCVDwZ)~rxyawIlP$kP%^a@w
zsI+{S)6A8ER^zgVEFJ=tuMm8O0by<BMFrbHWJBORW2NjdmsMziu5h3+5ZLRf1+}Vs
z$M1?1xT-2E2kwA#uWD&wy|<Y;eZhsIN=*Bb@TcP;$=q3(CuKKJJ6*Dx;Kx3kR_7JT
zN1{A_d<1|tqy=DzB^#!?P6jTlPW2#p$INk>wFWY}&BA!ij-}>&3=JgZ&3qx%fRMYQ
zd_XDT8?c?1vmjILu^#wKQTY?3uzz9v=~ep}RI(rG9KsNPm;f^F4uZP$DzR4Xo}>H?
zp)??X?FWf&QBZJUXpdq_h`eoi51<1RvsMY>$A)KSOj!n++>^FJsDZIP&e<gl?lM!&
za>~MmUjbpad9Q+al>0nf1~fH?5B&mXJRDJ}k!6674x3|7GgviUSgdfv8ZVl=H4#s?
zr@TYRpZ1zkq2K%xTPmiMNFsTiR3!q%!mhshRU3)|MNWg|sRXCfMUE<I>ZMntx1AV3
zSKvKESJta;3AG3?@WOKhS9f~LnW6FRypMX}Rp`OdVfVrW%NaWYnC`cMST5Jx)wjl{
zF7`v+g39N{FT5hBJu}-P5*ICIXEaQ_yL$VOjuWN8)zR-4Q^Rrj*9Jm4-a}jM^i<N$
zu+c2i9Am_f1U%RMualM)_t;GNxw_%HarZ*+?XTu4&xP4&k>Lo|_+RzG@^Fh#jIJs;
zp~|nTRG3F#@h`<VDe2&Vi)?bmi{Nug@-M7@O`X^h^J9|Vc20nM6(f7_1f5(=lXIEH
zPxmk$JIK1;<#}RncyDyzqT*~rc=^cp&>bU_RuZKDi9LXHu^s4;nL>6>41`O~g%YUg
z>}~@94kwIv6z!Cy$5)52UKh`CXsQDz*vC3g7c>D(x0<qJizGu=rfo!0*MGe_|IwKv
zG25Tj;Pflv#&P5Rs3)h3o{FVul{3A1e>EUQCF{|((Q^K2-aD-}r;(I`Ze$Pw)Ar~w
z1`S=taZxghY^9r^{vT~KV}iaQ;**SNTUy}%jQiu~rQaE3=f>aeL4$F1c7VApS?NcQ
zqkL)zgZh$0fz#97ma}qx+qIW^Ha3B!(5{k7+P1u~jz=WE9CGW_R*G7&k}8{7Twtnd
zwo=(9hJGs>OTWzD5J9bb&*!w|=1iZ1XndN+vP8E(y`tZpWBBgesFt~7ieefM6e)39
z9OGUV{W9CmdDN!rev-oU?6CRfngtyS+sA`eDY*+mwz}prPKjF0=dVe<w_m>avS_Uz
zXw$bHR^I4bxE0@JIV%3@+$>Y7TF(u&N<x^}#zZ1@=p523)nhZw{xrP;=i1H<u{i1Q
zM+JWA*JG`V)f8m^ase!TNwOb`tuGKV#KpKChMsjgT@jztEos2iZZ`XLV191xYW+yU
zB8zqXh51!}?Rm{`ms&pg+{=esXp#&bHTaa>{Gi2OT8DHFEyihLi-2TI{gXzjd0?l|
zCjIGT^X>ZO#G=DT@!K0C)~_gJRKalTU&BCFpS;NT#P8`;D_yTAR>!3a<|%Z44_}Oi
z_GZ-VN2%hKn=2c$j717MNADax<;RQO)R|AyeC~eJx#9?8i2yHzp6Al<ouc9ih^}^|
zA>*<pSR6R^d55Q|r!7@p&3d{w(J4(~!g!)3Kb_62T>*3!jK+%%e>}M9G%7j0`f|dT
zOZdr_uA$6V8{O)!_~&Wva^^?ZNQ(leUq8gh=gkE^$@Gg#w6AcDgV=OR>O;9ZhBrQx
zHQw>SC!Qr@WLz=D_|@Kg^5uBx>?c-(7#MU<REFUm+4y;hP9yG3RhVK>#S4ppy7Y48
z?J~vbqbDz2g?6tWLJw^D)WM$ldQ0{7_iWD31nwUCL6Y{NS}|~^t?#Qe-};x~hO68^
zFC2VB_Va=gGiG52LMtSGeTO~V`GX@HKYncdcRJGG1ybSbYI{<#W^vPWO1boVWBKNF
z#q#xQy?mg7b)DW>E2@09wJ;l|k7yMus24vxRoV+PWc-smzM^6!j7?g#ywlZ+t%Cw*
zrD%NVQKns4PQ@#MQ`09<GCP!Qv6cp&0!J3zlIEU|(4$_H(k!vyqcV>6X4_COUKQGU
zaANlM)1@HcAOTw|lT)bUCr-RuGU{D2t-wWHxM};gK7@s;f_jO9Q^tPP&PGQ|k(^yG
zqdthQue(`)cKh&q?p1E?Htp@r$QbFy2&J9|t+i~0^!b^S!poAu9`r%d9~49LZkle|
zrgm;RoN3o<b6W*fb(+N9ev)K+=Zoy3tm)Uzrlmh#U&ykpl?!G5)<c^1p^U?hZ@#H9
z1oue6(~%^~lY<Mf5^{M<sIw6wgpV_yd{>3Y%u{LzmrBIv$04f6r%)Mr>yI|K&}3|D
zLGJWy^9$!9jasN-;KArXA=2JxZ-o)n*4BQ}B0oe?&ZKhv#QAHjlk1Y(g7>^GC8CvP
z&N>a;xnn4Fu``P%$#lFZb$!0y4(J2s{iV92d$)(bsEAV>Dz+kGsuS@jpP4N4&xcCe
zz5CFHVoWQ1vZcq(wo#*sUj_Zml7NfrqrcUi>+V?>6*x>I6?U1JN!_n5km+00^JB|&
zf!7tqn+@u(PBh28)1m6ud=_zA*Zm|J&)19;XvGlwra+ggeZ0l<hZ_&C{?AcH`w%H;
z^n-bwzJPb?y0Q%_M!vmcjn``kQ-M=xl<>1HCs8t(>-)8b;F%QWgrQS+iO;w#jnNVv
zl8#;p=T$p;YCIjSL|h@^kCoGWQQ{ZglYen^Va(;Q{iiQccaFtAse0{h4Hw<JR-<0M
zX-wOb#ZjrPaMkpk&v&q6R34|rVqX)UbV?q4-D~#*X=DPrfS#=l&zxUEDN0(Q(GTJW
zsEqiM4k+YuUYuZ!0q?ykKG#=_<<6ZE_9O;jLr<lLrqSON-U^j)TIhq$uDj)}E`uaC
zllJ;J-uzqYf>v=tQhti#(av`6M+J~hrV;qX28<*9&u9_v3oB`+efBpU8ZO<oTZkcw
zncwV^SIM_d?N7%Qpq0xBS}6n(K)F2iLQ&|Jo7K=B6!W~{s!~=4Z9a#cN-|)alOxo_
ze$AKr=tW0H4)xkOYbtN>fb*jUi1lEbyNXBsbFwT|SB_D%4*xe)3T?VpY1Ud<(wX41
z(f1~;zE=_oX(b5wA{BP^Htxk)hti?}(lW~=jo>W(k)^~Iq`{*y%sHf7;8AOmeoJB0
z`$gc}4LUkhzu8Ab^Ec(60};G8(W!X;MZD@b;_T^QAqD1&KxTQ>Lx&D6Q8tG0(jZ8K
z4~m*<3uCpZ<?_UpZPc4hA{ujM5V-7=JnXZlQ%UmMUXMg?pT%FD!Ws}>|FC_|$uJx$
z8sf=B{qA_sibuhm+LP1P9R#3%Ws<}6JunE2XB7*CY9E*}hlldT2@>wMZ*Jw<9T&XY
z4zc0mfifvBt8wk)hi;VmIc;{b(4q3)@V&w1RL-_eHJzG83zQ|QtDv<?@0|)RpEH<V
z{5n*rm*nHKZ91_qA{SNBli`Ns4g#sgFC4n&P0k;MBc2fdVEsuq^>&j%YtU@Wof>cZ
z9+v2PuN(d7up4I3gyQDu{DV(qS<;O#ttm>Lh7OfhqW3jO@Z42VT1YMWiI3EgH1zML
zN^);+!aOs%cqOSy($mmw*VWfI0!a0J4^=$nRqdJv4LOjZ$jQU>DkaOQ;IoTD_$zYQ
zTf+6oi7VZv)8Q~ps;}7kofZ*e^G0v!s<iB93XD;AOeW<E?FxK;QBNYqT$@MRWZk*9
zj?f0>IY9{bt3E<%HeYRZ=B8e!d1Wtmju~@ZAY)sd>yF)r9d+oHt+WxxA!bls%g)<I
zkoy}WdHwov8yB3^o;=^#8n2cf55lxF*yc?ep}#?1p)djXQ07yZ_O{97*~+W|bRbN>
zGSbIzYoy;NyCYiBpiw;1;);{IibR_>@3G-X@>@1=q^(PF?Aj8`R#|9qQidmEPu`>p
z*~Rwsz)`8vr96;%38aWC+1OU$<xw!dj^MvX#X$^v$A5oe;}2-R5X#9=wSKgXnl;;Y
z5*e=cGF}}A-<V!;qSfu;a>ATz%UHujrl`h<TN3vpaa;R~3ktr*)XF0PMYn<R5UwYB
zOR>m$CMMlzJY%Ri*TJTe^!aS>yWT>+A9c9IbXP+29=Gv@deFZi<GA0QV`5-9kg37F
zKAo>`ucB-v*^zL)zw9DH&{s-@W811#C=H0ZeP$gpbfZf~l{jccfNmBlxz^$RJ8wTf
z*K2=6f>q9Tbc)s7I_jRev4WxI-(r(yF1DO4`|_Gl;wU~TZMH!}Yn>ExaI%n<tj4t9
zcuT4Sz6JEnGHI01Y7uO!Gea(;gki_YO-Iryvp}fprn~ub`VKQuDDPe(PisOC3LxEJ
zI*yA?c(VbF`ol34C#~umQHF+9ab6dzk}ar8(@-sOH=$klPEQ*>N_<kutny@QHnhLf
zEv<9=&aoq{{U?6b)D~pwE~g1q3eWVF(ig(5TBms6Q|5V^T;5Yo0KO7&ZolB8y5|*e
zKb+f`f(+nGS&NH7!=nvSY|yc*L6JV=Cs8->-R62qRLa&qCg^ZOL6*VmV#$X05~c+O
z04kvkz(i-3Rj4fy(_=%e98sM@+aXuY6`MKUX`6ucvV_a{gyUziCHBkWN0(=r8?|^k
zUi0wPQiEE{iP;31nO_L`W&P+)r@cqee;Hnv5YE@(GbR%iJnBQ()Sh$v&W>s!q?o(6
z)IV<?LjU+!6{Fb0E|;W02hB?+FBUV2(wY)=kE!J8z3Q(CUL?M1g=r;nvYu&`4Peqt
z2^=W0L?PXpP`liIU4k`Uh--Xb<rymx?`<!u95{Y#X_nd2(O}YwNu%&OJTUi>33-}!
zs$l+1U+m5&!S3EW6pPv(cSL-|hF_dGrID&yDt>fnGCmM;=l39XrMbAZ8Dr#IZC_Xv
zlU_mh&5w@$_LI@p3Z@GCdMW4a5mX}fI|q^C_enR+r#_hAkj3b99o~)2Eg0ncgrr)l
z+%(*l!#F80Ri#`|Jb=L{VG&YB!MAja5+s^1vXk5OEiG4`3Z>3^UJ*WNlCDvFjga22
zqfY2KNy>B-_^1INGWzp1J}t%S#h<0c{b(t7k(j-m$NlgawGLCFI{-K2Txa{+zNzIJ
z(f_RW>2S7&R2dg*&0%SkHyQ;^25_Cn_=g@1NoWMr`xdkvoW3K90sJ7164V3v-K%CZ
z>h`=4OF=-t3*k>WElu{RK>{^7P@~jB{@nJCO~dAfa=PH1M6L2NN7<YN%4Zebw}(m>
zAs02c>F^bIj|u31`?Hrxa1+WB=46(lqVHuHwcIPsD>{(MB-FEUclpX@p`}6Wz1&Aw
z;fF2rZ8+OzlkL8cpBA&WvGGh)!9(3R^%mq0GLL8!laDUM-4DJ(C33Q3V7e<`3lZ9r
zFQ_o93lOVWnO@4%aif28fn6a^Dm<y<mAAPYoTs{%veAs~fsB^d>^9djHF}DSCY9*a
z3tl3{6HHqo)%JD(ag%&;p;#`aE!O$@QMs6}#O@#5==dey|A@Xfp}Rdl#)qW9t1fM0
z>$H-bw{kW4<~?eM`#!qeU6zEvOuKCCn9n8usjlpvU#)-Im%HPNqWs-YQBZ0WsT{o&
zWb;6}K&Zxg`d9uyz=XyNchOBYv$Q3Uu})hLK6<>w#~i2St;;H5+8m~hUTkcINj>&q
zs_IR%ZPy#&n6@n?Ytw<WQr4|L9f<;0JMA|{1r<fNjAPvLSw2udJ#<|;&h$A}4m2DQ
zQk}+zi2fMDg<oHJL-G%>vJvw5B}UTw=uxzW(}s7rT!su~v4{^w*!I>3EZ)lZ(hvmE
z7yMjB0uvC?D)?f?s2=4Q+<flLnGef}u2c%o?kYFBt}n*gG?HVJ8P)P%84Ojt!$lo8
zG3N4)t{_xc6Tt4^e_DeS=|tC7pT1LW88obm0<mj33aZCfok%%~SD*gI974jWeUM^|
zF%E3VdQ|n=d?Qi4@by|lIQ^@0)XkVTq%7)=agskKkA<D|dqcvinghAdH-6VOC7CIZ
zNP4Dur1S;-n?I@r<GPXMPrF9(rgM`}zJPbTN4iTL@JV<c2eq-Uyr5TL(7NwUe*5F9
z-O!V_&;zJ`?fwPk0rYBkTc#vE(%+uiV`C^x@u;8zW~5S!<fUM<N<-NF>Ez?xCR&U1
z@l;A5`EN6=MIP&JggT>)(^PNf9mswV>5RXcuxU#3ipgq02zYF2Rd@G~F<-L79)0v`
z@0@R?lh^z8a>#xtg#zsd=f{H^3kRb%jKXPoRky~=x5CZy?)sIIiDyvsegFO9mflv8
zl|8NN#70Ev#@A1R&zG*i9iFOcTNl!noQsV^JM}xh18r$v3*8z_)v;|Z+S|N557Y}P
ze(Rh}7S|0)g|Y>BIXk=a8nxtw>)3VOG`OigY}#3n*>)au!HAJaDyknOyYySCy|Q#b
zqyXBUg(=)T3EoMm<vkkV{~k*3<gnU4In{?2Kxn!@MjJ~VVjnI)vM+4RnP~n}NB_-0
zJiO)L7ItE5W^px8ny*&>!hp@nV-mIx<(exUQI*3HR33^K6+dqdJ3*86$tVgPtA*tb
z|5$r3Ql$+fHklUL=9!h0s=PDWxFd#Lno9Ih1PoCd!t3xt7wCr?c+9em9uVucKg2pE
zC>H0{Zy7lUF+qas9pq+>XXT0uYlAJvawEy${=p*j@3oB$&jI)4EYt6#g`h}X#dBOa
z18Zf0!G#NSd4<L9AGkmPh`HXmkZSYf%4LCX0d%P-1>%ej5OK+m`r|u`S81dp-vM8%
zwx8D_M#&3fUu?wsP@F0oZ*#Iet!-P*VLbcEGU<BKQgLP_DI27n0~j@~SGu2U*GiUX
zh;NK&Va`&+L#>(CUs%@}K2o|BoIQ5cDuj)wGT8k_LSSIJrtej;_g~h`-9CL1pwmc-
zDI+JmYylA?^oc7l<ITP=SU!Kw*$ZKBg6Ju76}u0*Klktv1%KUDsO!<Xk>}n2*)@_F
zT<UCt=s4cu8TY2TU$VUNNZ<itIHVkg+RKtqBT!f0Ugb~Ktga8H23F`f%?lz5l6QK#
zNz<CrZOno>%+mPu{-Ei6mvcjIN}XKg__x)gp2WU>GCnBibp?up!|1uUI1<3Nv@I~`
zXtbu3mhLKY@=$7odfVu8O-{5Xa4Z=lh?(295}Uk9SPi<0Oj<2(BB=RsWf0RpfSLjA
z2(f)|Z;LJJRJnoXtJIRz0%-?7Ci&`*MeEegEfTdzVwzckpreQFaj$Y*W029f?n;Wv
zP20f(r3`H9Iv}DUiijyJ1ZO+Nmeso1EDLEoLlF<%iQE-X=@wZu$5~uw*4hqzYS^P>
z*7FyYnqru%lkujbd?th+S!I@~Poyu|><T?y?B2<H9Q^e0z<uVP9IIpkCiO2e246Cw
zkY@hUsb>FV_X98H@=E?@`zLp6IPMs-o?PDnXSKM%<(VF7EWWKlU%HuAFvpn4)|SuW
zD6|s{xEIy{$=MG$3Xf(Lo(YYfocLFH;N<i}$w<@V<v}Bp^vf8Ix5gc5Vo`@8F;)`(
z*Qt{`QaN&*ptG2O8SAEAVlK#BZhl)7=ow71x8;*qLGuULcr;bzYeE#oNG8*G<#FXD
zo7ryaf%Y_g9Ruf?616<PSH8{}Hy|T?UHNWTVL`!*{O|5h;4g``HnW$;+uNFEnttfM
zXH;WPodWvodwyxtEhiv9>W|IzLCT%yPH0EEmM3Pir^qVz#=EAP;0i+f<q7)3M^Ce*
z81LpanOSpLcJBWHbdJO_A4!8}%~m5y_2%AEs-k6201O{Fev0Zu_&AiKs8J1J_6eX#
zLXwj~5P>g`^!!<BsSxhptXAND(DqRxn1r_%>ITWdasBQ$!E&*W6sO;B!1zDC8t>_w
z8Cv`&aB-U_PhI2_DtbB@=LCe*Ouf1=F?1lO#RHYXN4XFUFkqNJnJp~(67^RLxHf?y
z;ca4`tTphjj1!l(t;I_CzlS?@d@HipRt$PS5}o>Y^;ysz$c@PMG{O1Z7DV0)RbvtE
z2VU(a^mExi+suf<aIFz2wcAs~9mH)olV(0KEWG}4Zp@vR#}4}jQCXqqhLn%rdX}FK
zI<7H{x-ALS@y&03R4OzE)Lf=54Fz1WDmYpR2i`OptoHL$L(2o!U~$l0i-`H%H^n5w
z*`9nOs`8yO_4J-p2OAPj+m}dHott<IyTpD(q%~Dd8U&KgkFdsaWl*bArYt9B4<uOV
znw$p0^gE_-F4Bg3hP2fnW*@UgEPQfI9LEOH{(x8_y4V5q*vdGrJL>eVo#^gP<%Qa0
zVqdS`z(I6sEsRpinf;tZNRQ;3qCzdsUlUDkH#w=ldoeC&A-N1O-*}K#OU%te@|qES
zMRjpf7lm<NGiYVXZ8Rh!Jr6-UWpp63l%iU!1c7vN`YjN2SsXk~sGTvjN(fd@p1Ord
zX;`O**ne`l-ji)szRd@z(qpGDy?vy3eR5I3g<L*fs->|Ww75pHr57h>+iawq#%%c{
z!Flo3JLxO#KPB1;^Q~NYRZl1M<cR5d)^#VTS!Hq~_3*Rb{21x$0(MLbXf;b85q7~K
zs;IQ097mX|cf;TUT$h?5S`{dL(6A1S5qtl2#iZwCV3^|i!T@UADT3QZNt}T3(S<wT
zxmB|C5C^SP=G@0MZ`$7az!d%gXsAuQ3hG+dHYD3BNx~@A1sOl==4721VH(@}dEaXj
zks>}9D1on>cjIf=ZO^q0iW`2(&+x3G_)SY}v&P3FV@2}Q+*g6h?bmC!_!{^t?w?K(
zCRt#nZi@xoh*H`WB`LmqR51?otHBqp3O<ugl+`Q8@PT^>QHW1Tp#jN#?q<gDh!wS+
zt=ojxK+A2?Dj(AQrzYE2a}*~*(Z2l1(FnE_X~mnRA1Howw6m#y4oJ7LG&2ictJK@7
zch4(y+Q=iIm+O2$eqD4Za%1(BLwtA8QHd|VfEkA(9Q`OnBt$Wi*3dAUtc1+*d;bz(
zZ|K3Tjk-$%HV%p35Ix3p&GPr2#7q}D4H{PbL1lJaA6$)$;I;L|QI<_jMay)V%#S>d
zOQH}8m|lR!pXz{Y0kW}k0Q3u2JiGSTr1NhT!!u-%0J!V%=!g>x2T(7vnPh_OS1#8R
znEa-{?dtZPON#VPAJBfpA+?*Dho7oVnl`sIAwSWa7!7JoToo(V*>vjirh#TiR2oqf
zraCeyj$F~6c}UHvuAcd>$1RzWZ;E=KKMD_HFiGXsP{v;@w@oK9A54G#zNPYxS{(xI
zrDrv>p3V;+_iC%!0PQf$MzUj@@bWt<ceTDA{qh~Akvi0kR{4WRQq^)Y3I@$o#oWvv
z_hsH`j*}Y8VAVGUQrnG`11A=%lC*IsC@2`sE0%(9S;n0tVY?x8(aO%b4RcFwe6cZ=
zGzk|_e$de?FWS~Aiftr%*i$P{im{~5vYHe@*`nF=fqg;6Zskjv!ERR@O{tO)X%1jy
z(_2nbJUb(%JaiP<q~{uCjw&V4O9vltmopFdy~<KuI+FAVZ8+s0CJjZ0u^!fkZ~m4c
z{%z6!X5Rj12l-hvQVYpRIJK215fRE^^1h4J;A?-W1EVUC*P$vjO{18kbSgi;e0u??
zfm|w^Bdb^_g`yTm<$i|Rm~^BJT!tlW-GFiCUYp~S^ibPBi{3fx&eA%vbYG)LbdueK
zTKF{q(NC?ir(#?=W(H?7V3$9TlJPn!yPqau*jSy-A1}WX-_V?^#v%6hvdfT$w)O`<
zre)Iz`S`}S)lwlBFe%FO#W}`(s?2z$gC?p*tuKd$S@mCQJ{`fHLR5Cz!YBHY;~CZ_
zXi7Cd)e6+YoY<i0ziGMw=p0e4mI^aWNUk_t?M=>j@ZdrBCxl5dMNdg4+TwlOT#^#H
zzpu}W%ny_gT%nCZs9$hJ@qYd6_ynP+em;EcE5K34Zu?s%*Lm%ip-`UfUKsZ^BGJxr
zOcYoqOME+APnCNue;x1GKy;Wg&}c*eG3x#h(9RyFb~nQ)Cup}jk&WDUdYyxmze@uf
zmu_3W#-(~?=%iz%{3qW+FsckG7NXTlGjgT(q!N`%i;#8+42hiJi2*NCYU7U7TQ3+A
zGR`fNEt&q1L#o|(_>mT;)s$Hw$)eRM>gOIOSz0H06Qe0pDwj6eKREMtm02Y#@k4F+
z$@n;nr(M#lKh`-h9tyHqIxW{q?_&sRmm@<R9O`0fXUn)TRmi0V6BdYcC_(Ry5(r{%
zNm}CTGAN%f^LdAJ(g6V@E2uInRze@+M@J-h>|3E_M_M!7jh^f+@%R0QD%~+7kU)Bc
zdz{7T-pPyCTjK7wd8YN1=&xz=0`<4rnd6@I^cw%l%wh3lOfSV;-AOWnv$DE^R39(+
zU#xO1y&Mu`T;pz-MktYT**fzsoAPIOS(f%7fj9T4NpIzKrV&QJB0LlQK=91Oji2ag
z%bms4^*Gl0PmYz@9U)bYV^a$=29Y{Z#^D1z8b;H<ZmrcvSqSWG|0uGWRBc3gR1ls?
zlPNHWe{$%^@iUhNo*g*&pZ`mf%%KWGQt_;a#rj}Y8orGweinoFDP=o<#VleEsAx^{
z^gzefaCRe~=gM?<RT2NTMGizJ4Z89*(B@GMle#X!l$w`qD6J(o>XyG;0LCI~jofbH
zp1N!InG@pz*UCe<ZgD-Gx&Sj%JljpW6$)pd1o&VfMvTQ^Woo=PR$_BpgkN=vl-T%=
zREFhEm@X;Dpqz07dfUjM@gh~;zjobMn(tLG>%-Q%8BgZ2uMLK7gs3;S+SRigCYdH!
z7304P-^E=Q-PqXP01Ar_x#CeN1rAh}SmRdyfa7`N^z8fof|spQqcgG8HH|xqk;+CR
z{<_n-9i}Pz0o^6g0Ml46KPQY0*3xk!#N@7&*eyN){PS+xG+}b!_OfciYe72N2hc#;
zMJ{*XE@TBrA3a)Rvp6_}E4BH|Ph?Lk|7X7fTmcKmK6`xP&(>*ooj8tCwq8-Xwzuv4
z{Z~@L5NgTaK4G<M6kb;@t4GNyONsB}J#oe1nSx}24^I4ks7n<gEgnh~9pLBp1=-4m
z6qU@Oqr5~m*SG%s4|_00cz2gWgtQcCGV1D=KzZ}4(=C6-+_i_;Hxwb_ESOyb$Cdct
zSRiC%WW=Pd^PGH=xc#1j#6G_3c&pmrbA0~SD`edF>H-*}6B0xVgi5JTUH!BEAu$5}
zL%5csUyk;57{6b>{(3KG?C(|@+PdKLMO=V94{=)4T+YM4zu_u?ixN%E$zf|=rKa|L
zFw<-I!>P|IM9A*Z9uM`O9}IB)RO8G43fe#KSy<E=LZ>MKA)$V9+-#`0@%;BClATqh
zn0vcRm*63Qt0<~PryZ3ObCrle{la8Q?nB;(H(%`Mdui{wNN+Eyfa2lx*RMUZwcQAk
zn*3Y|-zS>82{~r9O8)-skhcOV1wtyHgv7+eQVOw;q!NT;_v*}kf43KKnOm8o3xqOU
z&E2XAI5_^8Vn!>DT!PRe{UO{~YU=suHYE*=mGayDe4aA<AuY#sMFM{~2#RoO*$s3Q
z|D56vXK~~*gx1puGH#$hy9V7dR)TJ1-m-9Z#)sb{$nZwLd%973W|b-CV$wJsOvLTy
ztRLAf7qD_UE-WnkBP)SZHQ(eS8TZqd{>4vU`J*&%BP~)Us`(ABgw34`T2iNSt2kN=
z6t=8&<&zb7|6CdZzHpL-Y4Mb485zAO#3gh;SGcj5HH591j@Ab)Z>_R8%=9W3XbZ+{
zknZhF|M@GK3y0{`qZB9Ge`Gpsj5lTKK2^1-GVCdHLaalTfKa$dizwx-wStCdWma#h
zxto5XnaS_PY<hF#`ca0MM%Xo3IaSidu|^-5?pw3Dj`sj8T4m1luL<wztPr>h;K~>R
z;Sw%6F4cU~^DsX6)i6PljCvTJA}yYR;p@-1Vql*-JjO|Xjw=qOjN&IDqAVHJbNriU
zWaZv(Z&GeF@A>`(lXa;$BkFQuBAF9U{w3}8Z}^IanE&>pR5E<pl!O|5l2OB@u3dgY
z`*5<Ko-oL;@I)~@rhG>rlp&-v1}3rA_M>k8&g047Ch>vg$TuN^=H51(>wdE>7j6al
z?(391amku{krkYTE1%G5P>V8IBY8p3R+31vdy(ug%diLtesC3ezK>raNE5IU#B<A_
z8p3rm7k~6;r@jjaWC*cx-c{R^W&FA3Ml?S>_#_nd>^O?n&sUCSKPTYtEpS<e8F0h$
z1J;-O_~8HYkhBEwG`A;mnBCiCKb8oehoJ_np!xXd*}X5?zb%p*f;?pIi-+$Wp#E#w
z1fB_$9(h6E>iPZhe-3m1?J0j({euiVjo_PD;=auLU(1vb2tdw0ljQDxz{tP0mEbiz
zP3ShA)wzHDz<&N^`5Z(F%<RwiX&it4+(qatJdKtn_WnP!51J5xV5%OT`8T`SySd2F
z!qad^Vp_%ik$q^D0N7jFdGgBt#(@6wAHYR`c~qDm*FN0$U-N}~!yaOV1maM^y|324
zeU(7e@&D`O_H;h}uan!;vK=}8f1TVOeft06<Z#soJt&-M=g4Ry|I0i4=iU^F5CyM*
z6Zont&-VMzX-~SmcELSFg!{8sVL$#f>0H8v6d6%Lyb3~|mOtJ~;5nWjzAWvAW|Po!
z*3kXLVQfVZ0O5|L6AOKXfbSk!f#Hu=3t)D6t%EyZsn`*~Oju0)Z?5h?T_iVp8KMZ8
z?Z%|ETO(w+D8p~@(d@skJ{j#pBX<bC2@y6&LN(@%wMoz2P^HwY*<1U$7(ZkjA%ax(
zA~DmO!o^V$ET0>_-;Q`O9iF=3Ywq)DO$5>)i-(-J4+n6PaFu8o>0S|{Ks-6e81;->
z?&g2K@Bd|lGX9^Y3N3X<>t~}A3JSCj5xt<d4cNu$)I`W0s;ZLm`vp{s(_6i^HtA-V
z-@Nu;f4zql4hi_wyS@l5)UzLjWo02fF(O1H=MT9bL)EIdkg{ODpB~px{;s>Y!}Xl#
z5bj91xP<se-I~*xLLR4aa`CJ7g^;X>*PK_TAVRk$AS52EAe2Lr21OUydm_wAR#Y7q
zr*j^ooi=8OV0zGZ>vZ<tv1Z-xTnXcr3M>YlG9|TSYP*&H$l*^+`?%F1D4QGU7|@#~
zj(g^|<gBBTAtaBdZ1^Wlb1x=O`4CXCU+4GRvjR=yoR;IZa7xjmj`1?hRb{iSW!+eR
zr6lXL(v?lSlBH&et}UNyQfZm94+vvef188yy+d>gQB(9=KjUL!t}2apvM5b;>X0bv
zsqDv4wT({Hhuz{Xi@Zhuy3UP0MjK}cS7P!AsZsb+#W<O+sgG=j1~Jg_?fjF&tg$2(
z*ul>~qV9|Yio4OXHGd8YK#pNRu)w;uTl4$(${FT5n}%&^NN!tS$=7WkYk9yWmI`KJ
zyRHo<r$<AzKvscLTW3N+CSOt2k=3ah-)b_c13Ep2UkKJzMf>o`(N|yBD6VF0<fTYX
zFSFMih`W$>W9U1FZfn9jmGCWm9$M$Jv54Fm>0`ea>+KOp?L3N&jqUpPWZi*%#Y=Us
z{&$%=Zs`FI|7+?xEcb_B{Pgk3L>KUL48Nf?s5afQ_Vi-Mih(i}tETgMEaz;P<#1?v
zc>{K;q>gFcBlG9Sf&xyCI68OwH|V7woDT+dRJ@4QZFR!zu_T^RAL$XJU}!u<Cj&Nt
z!@!`LLo0XT2V^+aB2=cr|5NYyZ|IW&b%?@|how8;i~{^&y(=MP+`3TmE)Xu%_}XF;
zX?_lFZ&{YkQgE|d_oQmY{%9%N=CU^{Q>hQRMPF>wGOjlK;W>W8^7%9w5%a#^KJN07
zq?4$iTlDPXna+Z(>7x5G*jgOEwYg{@(?^@TQOB#Vur3Xt%WX#|;<JSscqXSfC#SNL
z88KxJvtIJfR&v(pfvpwKp6cFrlWH0T6%}rHy3m2EQV!mhMPekOv)Sy(4kkH0t8T&>
zgHqg>DV}}MTtiXgM<@TW5|>Oj+;s8_QZ8A!9AKv9eEXL38s+eO4Y}v%_{e}hu5~~8
z2Tdnv9uA~ueY@^o9Wx1x0Z(-KhN&ZVBL0WIzv6?+2;OW+5ke2%y(F4ke{LIZsGR8i
z?6+V1Za5I-v@~7Zlf|!2h=hy+r8wU_=>7iRxp)k3yvx7s&A&p+|LMO7=$t6o`Rq|>
z?gnaR2sW5WPMnHC5{R2k3a^cltYVs;pX!*6pr0+p=TBmnylf>Ng>!LrDtH-&gzHLf
z>WL%i=E!6`lr44^?Q<BvlYf#GsbDn}jwubV4L)Dh?McmVNTaZwqqJBY|6%9!us-N)
zbXqYxbh)V*O%+Y1T^!Rg*O|&5aPGRpiQX<zwp?yAzKXWp)Y1(#$*Y}Y#g2yld_5Fc
z1qIB7G_#WVYKzGrmdwvbFOF)IJOBDxu=Y`>D|evZ*<sUqY20?Y4Q1&BcS>|3d2!Ki
z<2ro^(!q2GXq`@=5)Owj?PIk*1fTH3M~Tk1$ERmKbBoJT9KyBYd{w?RJ%7P`?z0LE
z2gFuUY;)$d%j%kzGmh3roQDOy#9=6tW7@}cQ9jVzjnzGjWGuo)Gxk<LdZ)BAO*(SQ
zzRKK<z&fK5y>sQ7WRQ%m39%M-l5+x8{u)%)s#N)tZmSP5`*{19<oB_244jI-S0!A@
zlwz@+iMGFN-DTCG9=R}tt9XhaO=dDW<}e)kkQ~S=Tyx@iO|^%+`p+eN@Q?%qu@!PU
zrklburDGAC%fGbr@yMK(Smr~M(~?#{dJ(4GSm-t$ZkAxG#i-i!S?SIN--(uv<eQ)W
z;`6f+pXUsEZEM!@R{7dDdSt7rW5j%~z}bj!TzJJfmXe*d@%%m~rT6X8&Z&)C9jf%i
zxbuO>DBeVSZ$?gG5l5|v(mJnZnyX(Q#6o3SHeX#ZHdAbAT)tGEeh*Y`vl<C22|@ej
zLh<q>u~S~xweCC<;=}m-CH(<M5v1@bi}*}h##EyK&OUZqTLlmD{p~bO0+WIGOa<nh
z!WQ3*;@ccXt8r1|9X1`di(VXAMKfiqWozpZ4x??HdUGW6#Vop6#vR_52t6n)?#^tl
ziBNb^9VHKNDjTf8``Oyk`1RsO6|vTrIQ}kLo9XZQJ0!;GrPi8}=e_y)s<(%>r@EIp
z`UyNvUzkI~NI4Q>EjEUZ)h=|&nTuv67NuJ!k@TNS9Fn~=3io*QceD2Jk)N{8zzQ+6
zUex)1wtQXcO~LTO<I&fjk9ZcV>jD&wT#eXprr_ULZ(J1LSS{ZnLpu+;Om(mHm{D-g
z<jBuBn}7&bAGU|nVZ142=k{1Q@pF$b6{8*s=QY8{*=<T)%ZKs#u9}kba&443LPJ7Y
z$xUy*(atLBmfyikNCsk}j-2BAGEp(aL|sj%^uaBvTlRhB91bi`S$&V#CZ@>v=X+1)
z28?Q~aR;(>nKd)TB7tcd#;Li8MhE`IGiWk?zEFdyNb;B8*#}CR!{D;d6a@W=Nwvp?
z`aCQ7G+DEC9`wByV;Y$q{SF<fKBtjomf=J)Ph%+x`zf=MBKaoWTBZ>@v*P7^i<PFR
zuB5SWv~w7rt!OE|VT!q%S=stE=iBDmB@5r`>~c-O>CF!~%#v+P6`MWI`0TFOuAx>S
zG!Sm{8fhA~YlOMVZ)zjAX(pM~qZ%G_!4ddy83*#7zcT4U_Hom*CBQZv9Z|RT-I_M@
zsd)ysHtyQU&Ze}w)3ntx(|7Wm;J;jexJ-c6f_S5iJ^-({W;XlC=D&Anp^`Gq%ALXQ
zt34R;M>Q0q;H}fW(B}Xzu0NPw51nAm+6KC+r<4KQ_yl3_Yp&ckanA2O+Hg4v2ft}B
zrtV<{BK?>**+Qe{xG|mYbBw|{rd_Ckdo?VG*H{Vetf~<(d#DGoUu+2)!qpdsaD-OV
zc_P+!zKZzgt8!j)v$FYnY5lj_m7yhOi8b?EQu1h88#HI7&!!dLc6Qj9{sH=7q^nv`
z#)jA-VEHWKfIlJ*7*`dkqEkc;?*rZnJcmS`;hAcE{#uxltvh|o*^mBLTgSjliu8QV
zTsNr@PL{l>QafvYH<FUAner!2ljqXRF-GxKIF(FEZ0Pm39=ivy=sxGp_G&p`vSVMy
zBGD1c6jqg9EQ1-9Pjroe^xh^$Q@yp?7q~3_`DCdxwuLJ-lnd@jR)24>c3M%WI^ftn
ze!ZXC<*Do7tpslePU{(*A~^^8)M`p!e$<c?my@u3>~_7UVPm5HWWH*rV|842m;<HZ
z{~Lz&n3a<i&*bQ~rvoQTcPTYrDP+g1L({WwV>&>CnIdhj+c>=%a8{@W|60?XpY>4&
zilp2R>!(?s&J9js1&@(k;^=!KktPjpYUJ>_>of72LP%)!{=M*zIH{gq00ea_g}Gd?
zS)^*nS;Pz7Pf~@=3E_zByuqjsfqIRuub2HOR?EI?j&tbCd3vv%u@@&Y>l(O6()gF=
zs51LjddB!r#A!DmAXeU~nS8i~Tx4eD8|lgxRfLv5%eGc}*4D|3YicN*{50q((r!4c
zOeq_r-pZa#emYIcT(a~8dL5|K^Nx|P$zQTr`q7nJdGz#~cO3(7i+6tcN`Ij|Mjqru
zZo4*Q(U&l}SnUi@GgBp9%Ce(+d%~qtze8gYTOZEN;mtid4)_dzIAUYQlbo0R>kJ+$
zVUa413b9~0#Dd8~KkmzdalwLR8ua<Qa#31@fm_&)LLuk*fgQ5ql|IIH4V%6oQ2pHe
zSvWQf*GgR<KLVCJs{(%!YHAb+VOrsw&5vF*)7#?caa_E>^Q)egj_#FBza0(vT1$a?
zhES0fpE{+}_Q=rTpFc#%Ypc^Tt4S>e1&>uR6|Z>NEsj-5FqfR6N-t(Y)%30Q6Y~#P
zHujF8w<fhRe_HoEjFiu)6b@7;olMQwe7xx!c^B@6>`9I{q=dw$if?d?#%OI_$4-}t
z5ad55F_R8DgD%-wWzng4F}0of+}o!vz2M3QOkmDJn<^qVay0>XouH!8{hSjwN;oGs
z8jLcNz<JtydCPh~-Kw5%W9A~qz(S89aH=#1LMjL~?I&VIS0|gVyVE0V18-hz0utI7
zUy7*iGymx&tF9h4nGZO=(=?RNZs^p+DDUbPpYzJ%PO<^aS7dqmbr3;P#$h`_KaW=F
zS9*+%5~s-owzR^4ltXUx@CN3M_eb`CC;r|tAEKb%#^$GYKGdKh)U4W{>fRUr?RiHe
z^h+;F&7V0x7J+ttoWHfAs8l+@=TNiQ$Q#%f$~MxX44kY5Z0TGDo&_fT{%dHK8q?ST
zTvc5-rget<aj}&3*4u-JhutrleVg<ZI+s?4NxHD}wQ?Q;veCXtm_5m&H{R4~R=yRj
zUl-v2Xaf$NMd!0SKS437u@6p>jP<-3+JT3u_}6>!Mfl%VGCTM-z!6;v<yiIN=si=(
z#K~W5y;`~|-0kr@0rXu2&cNbr32w@L!02U!yr)%oh%~U`c-i(s9YVQ#;B~A0B}7|C
z6P>#|v<$#maaq4HolKF}zbqt$2YT8Zpn*<+z>#)U<0^6bR0U%Vx-cDtM`zOzHeS^I
zC=-*Ed{0(Z*8e9_eIx~i)20OhF|qLK%p|k5Q!Y_7at9qJc!AueoY#c+kvVg@2e03h
zP;!mt&k_XW!ZY=q4z=(8_nz=)ohHDxEdIm4V_Gm9FIup=vldcP|9PeDU%!ug7xv2K
zlHbig{>lZ5)XXA7W%pyqx8WIv_v4M2|2#y18hkuC?tU^8&|P4#`;mt203$<|=esW<
zd-XpJ*8d)|-G?Oj!gg@6Ozak;36kJHg?MjU?FT=(pNAbc4|up+3Jv)H&%9<!E54u7
zsDugv)Q{%xerv{4fTj!@X36`=rn$r+Rznv7b1Hu?p370>y|w+W?dLsl5dWv`bAM=e
z$2AZlg0L9H-goG7Qwe-4+w5X4_wR>f^dceU48_3%d*1ZR0+%6Qe|-0|A2Px#t5BqW
z-_Kfd{XeX|by!yW@;<C?Q2|l5fI$ctbcb|^0g7}<OP6%FpeTZXfV6;=^h0-w(%lWx
z-QDjjH=eW4`F*eVI!Dic8#b<IJ)fAlXXc){k=ugfFM9m7qrh)dH28->)71VL@lg%l
zFi`n>^pjID%$bvZ-NU(P(UB;rg%G=(I)3+Kr|HGEwd8!X$G%j&W`;><(Q+41kQ~d9
ztM+ev)W0u_8^pRxrF&I6k&dzpYQU_g>QXXqd}_atqk$M>+T5NSRy}HODCp>na?jEz
zMfF}!_4?%%eHH@H{VCb}<>P8pU?4v!G<p`!d}ahBS9wF;aieo=`Rhd=5U@a4#+MDA
zlUiIxiJyy)efY~q4c8kkY6S;%z_GdCz}7`USc6NcsRk*OR@gziX_i4!FglC9Gz)dF
zFA(8_)QF=|FLhcm69CZs?E3WUziNxnU}vMsFN*IRpP<H5ZdXw)(C9hcm8xi@0W-9f
zp9C|IeijW^SkN}kA9>wl-pmu$I0pZ!mvG{ev1Z9eSAE!6T#$-Kr>vsk+bPzQzxpcm
z2tj9Ju6W@`;o%&OHS#JZOC?)Xclw`8&7>gNN6_DJ0=*a}$f{2~-XeBfZ|%{I@d~ZH
zhAF3exw?lW3`_~hJF;K&`~P;wKiOik#GANf`cnaXg)9yus%WvW`0E_V9dWO>+-rqV
zYOZ|J5N0{Q!pa2~gY{7F#xI<LXV);!6LDHxL#f!#{CV>sOQId_y=QvJLBy}?I*zBI
z3}b#?j^eAs=v#7im_u)y8y{|^@X@S}vc91x>N3Q(;(l&?K5&ls?s5G}41NPF6UI3j
zd-xjlhv%h_aT7~4zxf3@q342xruTms6m%<yUy#Lz`-YN%`6h{`a6~E<jZ5&5P!-9)
zw?b3rd@{6DXVlXbee-czkHMdMgl-8<2sOJY1(Tts<GzAbkgFfdfLuEQ>Je<dJ;ir)
zjXEV=V103r3${C}$Ex2jYsWx;14}NLSw|FE@0AAT=5HV!HTLx)-#g9BoyoB3Dgt9d
zzMWbzbtF#!+aX)9Pkgjpjl@P~TX%Y%y=0&M^in^kcq+m^bEB@WOVOC<V0WXQw-kzS
zD;-i|6N?K)OQjjLWMSW+Dll3w72%15DML<s3pQ}@G8MWZ)|u|lGoFXwH=|EKc_KA@
zmv_1Rj}-`FD<LtezB%6;q6IB6nH<pXcy$5hx91G4619DF-u_CQxklB$=X}uZT=_Z7
z2%o?xUu_<~Giy^wL`=U?5iOe*eqJ;0-hJRzb06)m^$rc$jCt7{Y;-ekdEM!w@H2o`
zz+{IDi=}&u+YlU@t$AHzCNt)%jWeHW>dlFcj-Gd>L0UcPc;cr>7if9j;E;<pq;OeG
zzfTPlAZT052lZ#cxvtbJ^-qu-&3}zl%16PQJXK;mKxZk2oB5iJ6^Sq5IW4bFhuY^0
zV9*KCX9gKlGDJc0xHF;xW_68uP@~+rmWs2g{2$Xtse-l4fU=8RKYht3m993-L%k;G
z65+7-E&XiOs})ok_2#;QVNfNOoY0g*H3UvM-6~;d7dkrHJU3z<dU<SgtCmUT;a+C6
zTb~}-(0uQDQXvQ0hCe_hre1)cE>D=ggyjO)eENKw7u!%UM_^9&Lzosh3j3PcdGwmV
z$UWSukFxC$RXCfJ52wX|Fl%=<S?56V#REfHw;LZFH+$vF?}^Zc8zkL4ke9JvYh)XH
z@yCUl!9M$?k}*GFy0;(%#S;NRIR4aiCQTtwL872Pf6GlQmj88OZbu&IeAo^O3kzq7
zyBVMg$S|=I6K`jkH*t_}!r>^SOC<gkL-;HML0ES}PM*eB0$}{oKlGS-q5Jq$BaafP
zJhA<J#*d@h0|zd+WI#nGj8Ws^Cet1y?-ZsqIA;@LMvK>)AZ4N;jV}dp_TUq>(>ZPg
zA4JT){VDhj?TXU-Ep^A<l1g;Br|Hk`euQ)$Bh1|8T%xpmauVk(k%jnBu=TKGUYqbH
zC4>4KBC7<eMV$y+GCzr(%{uC|`^cbWVMyU$POfo>M8%t|7LUqa)ucpF=;)-|7_wig
z9C<^mVzA7=gZ|K)P+sfAU8G1N3u-k*!7O@`;kmnWsz;n>&R=~$*N;7dfp?E-R<Z{2
z>K{XNf8mTm{Eq!JTUSEkiQ*CmG@Z#WWt_Q0Aq`f{&CYE07>3N=O6Pt>t>k>LVG12Z
zliVN_L<F0cIxZzCdFc(InNacJ?wsvbTm3R6_b0eqE705eZOn&HMQ<Kvm}+bd!g$jX
z^?ZSy3(AESZ+RVezd?eMxS3~5DPYQSqf@RL%!S;{&?tO{Me74ouo*I;8d;5ZJl9#F
zfm=xJtW3$g^H(gkZxQy3A#7GYJe%$p`SuyCX+yAxd5im|XwmKuz>zE1<66wu*k80R
zt9L}vDv@4`BYAbSKgG8)>Pg?Vt3=+Nnm5GBl_th_ko~wn`%Rc}X+d2<DI96UK*eFd
z6S>oS3(|m*58=+=bfcG+sfP=Ko1B`fFjNd1MnxC837zm;Nb2VDEF;+NVmiwAH^aqX
zW@6Udj64DwQDT+iZ()kz1Hd+!d(g9BIujR!RBg--h;7Gx*(W|oQ7!QB=**>Li6V)p
z!!73{HpxLe#odBOe0;y$f6yp~#OqvAT*o0m9Xid$5sZtx+s{6lR$VJlj!%D;r1Gu|
zOo>KMx|(fswP`g`ke3L3M^Fx>)Mrilc*qI#7Z`v<k~_#u2tw=Q&~_3`MA)3a2C|j!
zz>e?%W5pK|r57lLNK4pNOXI{{;v?*m+KMefJ!5AgNTdA4$$-h?h1~wkjrzQ@qk|>W
z2FB`fWno#p1L)70Kn>f?rJBMYPVvSE9Swt_F21r|Z}izQj^7nVVNUI;T6W50fWiHd
zAAIjhgxI&@96s<w><iiLnI<oj`reb?8=a2v@xEi&H*OT4?g}k?MUpiYkmVo-`=K4D
zC(6C@%?4b=DoPH|Y^4H|UNh%O*d5yLE%%$=?zq|#r81E4*(8kBiBF+b%4hJaPLPOM
zoxIAZet&&wxU7yx&Y>y^!-j$n{L{q-OzcNde}dPtw^-<7H9jPdu(<(3Z6B-+r^2nh
z88xb;<==Sz%7p`?hA%}@vgD_*I}xiehNQX)<+6^UtH}Llw&&y!A9k}uT&2_z?1QZf
zT9$UB2Z%0AY&@b5jI`{Mmx<_ru||k(slmj8&I-Wtaw<n2^rf)Rrejr=RLLol6UE?&
zb(9=dDs8tUYs!(EW1R}HSWjt(#C83~(ZSX*F-U!)%nmx(<O43=yUJ~2^3kI0QNbZX
zXn76?!gfq*ur@|Lnd&Kt@*L!LQ3g=+4N|ewBZPQCrYrc=Wv9)oNSQ+G)mrlEnfOSR
ziQu%-U8>#n8Gq{~_`J7B)pkiiMh%zJhQy6qx>Ln=B7hxm$eIz)-h5UDSotZGj8;pW
za1de#Z@S4zKcCTILZgf|)mnIkBkIoF%$-$-f0<lK4W8KwV>^p&uRHIrP!KPRA8Oml
zzPUgYTJ*t{1uDnbaMMJ_jTyB5Yajh1tw3|}6y?(>hkVx;ZdDwXBN$#|`m%pH{7-Ms
zAva0YVdcT|yg@75QA(32hjM<q)&p>ojj$gjd^_X*t)-58`eI4y*aEv}cWCnl{JP6V
zJ(p&PVRWi>npIO<TN@3BA@o)j@KT;2K|A@u*b-e%=;S4EM1n*4(yE3>BMkZ-3HghK
zbE{QxS7zlPA2^VML`WDnC=3w$dLGPNTj>u!Jo7ostXqmgV5fQJAvgxr{n0C?a9p~#
zahOcLmm?J%bH_H}Bg%K5AQ#x_&9(9k2LX!pgK1RdBd(Zq?qDd{y2;(7Vof|l6);99
z_AX|17=u+<saHK@Vv9{OaeH&!j^fUsMZ12y2y3iDoq`CNCk_haGa_X$zHE1w9pWJ!
ztC^r%HTjJ!?75#cefVBdGOF+X;Tfqjzv8lA@S9(uAWjj_?OykmHe7ndY8_P76A7(t
z;;hI0C@q?&1K*gqK^RMiU|a4rIaNni&@b{UvV!YgB_+lau!qn}s=@Injd6%XaC2A<
zBJ_akJa&j9ieUSUY{-K>(QwXA_N7Sh3dng!i6t?2DwcNMR*F&=s_=2%AEP<_DIp=D
zYC{J?CGZcnDv@W29T;GMRzT4maPn6<Ep!*nG1$O-u|>-y%i4~CB4^kYTwfppl?&|1
zGAfPyJh)X*tyr!oE`MA2ie!J1t*jQaEFr%MV0)Hha|91po|V}USVV)Axadj=K_WaT
zPdOPqfei%-mMTzmHTbv&3+{E(hnuOJyf>aXA&FKrUtrgE7;+Kn5F`{N(iM#R38~?A
z=7ccoJj9pl(zkaCYfv@9__ffD!p0@Z6|e5j?PpOVK63d2U&BIu|4O;(3Y@CHmtS#3
z)#1;6!#w4PU63ET4wj=yx!<B)WKAWh47Md25G-qiG$8R<ez(;HSaNT`Pvdl*f4{s?
z#VtXS`HKq56?lj(b))={gWF@$_K3W5W=8nSB_G~hUDQ&I?@f)glFd3tQTl<S^>`Q!
zHrK?p^p41?ht!%@Uiyi%JphUr&{nh^n*|;fBm3y~m`^jNeS*F}G)8+v1UPPVJ2I<@
zlX}Y*TAVW=RG7d@O&anrN4#7HyzL}iJkPLMJ#9hr2D+RLltI+N95y#fNRfO63=)e@
zpa0!8e{0BoE!Ve#@&`aJpg#K8IiuG4_TSQw|52pa;(iL^C!?E9*BL?P;9>ai_{Nn4
zFgVX;PhxItrRv8*Y_P#Xa2y+a`*GBf1Ac*b`#bjzf^<AQJ+lljfiH{2HjsW-lq|Iq
zjOKt6yuHv%YH$0=5S?g%j|H|+2u+9gu7(K0pTNA4wR_y{L`U{WGOCcu2y!q=LG7Yk
zw4xjnABsuw{<wO9XT2qVKC|A;(Fl?d`TMK&=8+fKzrV;|t)r%<?U#m%3s`I+`=@Pz
zr`Qn7JHR4Bs|3L&dd9HRo=j0An7yjpexoonjg*`&1>rh1?q9k7&)%MfluY6MF#`gn
z!ywzPuI__4a`B*NZkhV0X;=mdz(KMLGasj<M8tnM$nP#^)ob39avb0~y%)f)>jU?c
z6;w+Q&9lG!HDjfUVCr*{aef6H8$y^HQ`=|``&$j!m4H1ZAR>vd4YFuAM}!lYL+Je=
zlGkxIyD?j3N4gBR!vw6xgqI_jk}*IUP0DjEQTJj=TmoqowYw#Q1$LFX5K&h>RXjy0
zSbH7o*~Iv++C}Lv-aokj@wuW%6ltla4|9al;a2lDv5&nAzGJB1r8oobz{(qO*0F1y
z|9v<KM^6|EwiRucRX68oMbic3b532xpB#WB>$@2Fzn<qpMuk9iB*W7tCqLJjEXNH9
zs-PLBM0i6ao^w}p8e&EdTz&B_d@7|8Z?453F&>+-V+CH77r_<8=7n#9SaA<KKvXkF
za5NZ#6vLP4l!6=Oc*{qAUc^#3EIry`hGv89o;$!xdkA_ANo~6#Fnno;rNj9-+lGmo
z#W^JT6^rc!MKB*mQ0>5v^u!f1gHx%g^K1F<z|Z_Usw90^=PrOhWc<vk!-F=91AgPf
z3pcyyAOc{L)?zjO%)F?%Opq##^l12a0Z^r~#(*JyK8S7L1yjWX5lp!C<EfA4qCiix
z%MdeySM>ttFj3XXrbLRy^5G&af=M*M&NnqG!kPKw0z1i&!&>7&u*XR(RzstX1PN2*
ztQ5u;pn$0I_#PdoJPWyCXf3qdyXXap8yc$D%;yQ&84xo~74#hDIf4FwCZY9!sV(aT
zkpInybO9Xujr0wnA3;zP$xcAdKP>+i#3>$t&&otKsCYH#OV%Y*a{Kf>Wwzj2<3PgW
zd29xK>9%@~MtueIWdpPDUo2F2+<o>4O#bI9>EdUn@e3hU!NeDHTtp(HYZ>^8hoo_Y
zT+UAPFXRnhFPhI39?J1hI|FXigFdx;iee52#Q^bHkEXxKYM?zVl{&Dr>y(p00~xN3
z#z4Ml0VCx)i5qc8TsWXsd42(TF7S_|kcLWO$yPVv2LzYN|K{$?GnJ4i2%iJJ)*rW2
zW}*!a(nyRCug9SEFpr!@Up?Q^PIIA2XHPtK1zw#o36FDH@#^E)NPmyJnBY+AT_1ym
z4C<*o{fmIS?lk@lu*Y;@kDXCa_!w?Frr~}%fn;hbzMLf{1Z=Cnc&iO_jWXdA;`-y6
zpOwErLLc*P#I|ntHaq2hBYz6GWnJJ1#*FyqZGs@_8gKV)CAIbGRz~%2?gRPvE^yp>
zeUVsYF5<DU@Xdp>-yj8M<_KHd#y+3^mC8$`Sqvj77=(cqRWO9vXJY-$B8vd#^vZ4t
zIDy4M5)SL2>1XUisrd;;>g9xXc0{$nk}Tauqlp#wUR{7UeFvcet?%0}zq%HfK$lLq
zdshJlOMhCUrT2%ART1su{c$qN&8S*Fe#N^E(3KsK<(lYbLX5WuL||oYdaB2<`vl53
zw^y4HYzPGvl|nRm4DSdA%!~4Z$Yi2Rgnr+Ln2$HjyYLk?_u=-KX$3m@xR*V^Rt-o5
zq?w9AIb?V&Si`$^Zf!oRxe78t$`knjIe3Bm-={x?{F|E#iG^L@og^JWL$47tK*$O5
zE0dRa{t$r%e0BF4m?fkRK^n@`8C<_1=sL1?Pfdmyd-H7eXuN%L{#R=&pJtG%sGUyq
zagO@aNwiRnd}OM_JK*}EAd$eGNT*!*4Kj4s!Z|IIZf!%1Pzl&O%-Zpr`=704&PVt;
zU}pxAa!=-!<ve)1$Bxvmsg+E=pdm?JSuP#Bw>%{cDy89evx&Z?b$PHz$j}<AKD~Iv
zg&0lKJMYwAz4QEO&RkGnV3o_+>sKkUKc#HIu;A+s%U|@XpBy7!{iUM`dgr&0(TMHa
zgJn_MULG+8_%_iQ8WG|#_0*Kv`EV^Vi@}>3m45>o5(2I5_1;j&ihBWImYxZZSXoaA
z%IS-E(_vgso7Z6fx~;hj$Oc0%oH0XwbwG&AXA-D+P=0j9KXz3QadbstP&`nR0J6|y
zUZfztApSb&6nZWIV|`k{g3~tOhu0QW0mvYzO_pQQ?TU&!B(J%xji+0pO!rr+r#4b&
z<Mw9-2*CP!3bDrWd@xQcJG8S{9N<_&P-fc;=o`zIWcW%M|MAjHazX-yaTD;(wMqX3
zImzZCr{koO{1~%M`N^}=dJ(Q?;3$RQSKo;<aYKML$T6%{oNl|0Dm&cm0lb?$P~FHj
zOem*ft7Vl2r`oh#gsl=FA|&H_z~c|W-0_Jn;8_T(e=m2D=>mwKS2Yo&8ezQzL?0hz
ztKPV}!<i{k9{-7c)uY{R5E#HBSXjD+^GkK>%Yq~&Qqocey_plEPvYraCV+fbVdl7h
zN9;$H9E2=LUsFSXSmqAfs`&=?e199@`&hX3P$KSQ@xyh*X%&;aN)ok#apxIpO<Zz?
zkV3ZC8abuch|B+8CD0kDi=(ZA#Eo-BfSs!WLIhZ+LWtNw>h|Yz$k6p-?jf{(U}Am)
z*uJJRD|R6H^d5#`LeDHd3hAXfd)?+)-1nF30*8><BqA`(mY{*m%UThnqO$nv^WaL}
zl(gYDT!8=Ug-MtHNiq+CsF-F6iL9^#(mFCOxHG$N$s>Z@%u@i;BUv{a$U%-G!4ZOy
zjqUO7-NEOAdru)0M5jE8`1{n{J}S_sypDt`2>U#F1q391aL5tVCua_2fw507FL(fE
zrG~WDpOn*M2q*&Y%ABT}rcyErMl@x?)Z~|Fap}^~K2rgO5XCVC7zusxB&P5LJ5Aep
zgc|hnUN+isUct^q;Jn<^k8AVbDF>ib(<{7Usn_Xty5mkRAo*V5DeBa0NtN!|3OxNV
z`av=C!x=GWkM&H4O4)7`H<rbh7kS-}b|Q~zPo2CRAII?4ezAbO&}u<pE*<DScXE5w
zJs%$&ZswI$!gi~UZGXOudhbLg%6G874N<=2Tq(7c5Gf&2B7iE$Kx!3~s7{`v<c=-e
z1a)v77i=wBGyy`$S9+G@v3!TPSR-IcDXsR`dc<j>p!RY5G|NYRG=xR+*7eF?+_#;n
zu`%%Q^kutDvI~X!>ria!u_{`KmWmfeE8`<TA}g2MI7lUzQhEddRe%RL0mJ813Lv*i
zefj$r1XOZ*^#e-L00Wx=nOwP9Rfxf1bL&*Z(^3r!CIXS#$Misfd4Td2awSrcWk3{_
zw!qnj`=4ewGk=K02uO|-Pxfh)=z&x`f<|z}xP9l4%0FjncL#XaJ4izCTe{j;q*`Uk
z#116_B>F(=m&J!(L?{MOCWjI_5fYfobjdR+ky?TQj~~r$7foIpYHJ1?G58@h=9jAK
zp~#$s&t{iqb?Fe=O#LI-44?HYlTa|c2BFPcdfuZOvdTFI7OH9XDS3yx0ZwxkQkp_#
zj&}PoKKIj(cGKW2&?eKY_`V_bCVkoLZd`g;ShuIKxUD>2vQ#Q!YOjyvj9ubxiJya&
z*8Nm?rMf;?G9CIBo@39Uij0tYBIy0f&D`FqB!#fwXaG#s3Y62Tz_LD_Xn}10eGK6q
z2<>6AR6-puB+A=7H<2<kB(1m+1o>D49L#0Dz24^0cg#)hP!^X{T+KHfQwJMfu!mGe
zk*t4?5hEJcK61+8TIbZ2Qc{f8-1K=zWIezL*v=q4&EX9ckEzpML;0KynkRx4rt&ws
z6vtNU>6<r%=?@~Il*{TZ`~`=yB|7CV|EaGJXj@PTSc3(0<dF_$AE6S(>b<kS);tFJ
zDvu!OS!ydQNzz9mG6br(nJdWH18~UHiA^yC2-AD5qhkpCwa{8%4q&QExO7h!-U9%q
z!4yVPwA34kRIt^LT?l~A`WDHW?QNOJqzVVoA*cp{_LpE1R@w%Q<$shWI1XI?k;0@A
zf%_sX)vr+h5{`hjP2KI=w@s^q`!zZ&yC2x8p^~inW^}&IygVzoOIsq6voUBJAIzX8
zAUkwax@ngJl?s)_8Mj7d>%NStRpRSM-AKF^I(xbE0pc8l?|uR(9eC=VmvBQQA0NWH
zQ+3+WLX0!m5qu<{o&tSaIf1eu9)uJ#OlSCp$iyNDA-a7Bfy;e6mr|(o<TUkS6SbAS
z0jb}1q-YG2(k=rR)j(5KIMc}v{b;3{xH(`8R$NE4F|HB1`M|5k(0m{X0UNFFTfq=o
zS9S#|fH&P}9Kf41LNxIdx)jvG!lT+loFK8>yB03+L{ePH?s8ji98_s#ezj}j(+<#&
zbhULps<3dWwV19<-}LDy%mR%XFP#W`-ZtY3l|Dnb-KKSEqIH3T5YmjUf4N5$kiHS9
z`0WQ9`KTX9tZGv6xo@{lnd7GSRHQv!QCFU7*;T97%3e&XnTeJ>@+a;{11lY&l|)MZ
zsE4q<eJ9F#B^@(s_~S>F(IS`$uQF-CL>_|;jY?Utr&T<IKx@Ufo`~bxgHw+OLf5sl
zeURwB3X1Y=v=#cl2;l)>i5tV=+4yV_`iB_%;r7+NH+$xl;f&)AJ*mS+8Lbcb-mdq%
z!-oIgos~9;M$?c9cpJgf)!fOj=)xzbaD+fF`^8c&q(D|>`tr;K+Mlt*O2zs?0p=Pi
z4if=jzOjO4ug?PU0P1_-aD%W8^!xI9jYYc<y!XizA%mfoRxhC#%*JbkRJ9f$lWckZ
zD#IsJ(?-!_R^Kn&6D%@7m0u`=4(^NbY-kb=lsSX+Nwv4vpw*mQV!EEHGf@fKFpYL&
zXux2R-a4&m%a^nComd@^^8M@zq#XRP=N-&*ZH@;UV*zriib)&Y)}Z9N5y0#Xmt+GP
zD#V?O3g0PRufPL@Qi5=I*4R~`5Q?}IW%u=8OSb;-ZDa@>Mkf@w7tjKM?`TMTWYcG^
zwUn%}l&ofy)$HD437hCn=cC>O$E|*PBLZ{507vAel!$NFj@L>IWU||B4p4Nd*e@WR
zi*bhtj>ZjruK+Q%x*MLXJLqVAgZ?V~waF$=<-JWW7?1o7hCV{aaH$8_1jf0d%0R`c
zrNu(7y;5+wtx#T`-($J6Az}z|So7gWu=Ea)XJrIwwQWe4(-h@?_2#N-%-g@SR|@(6
zjJC(r5A1w5>*>oHP;onL#hp309m^|%#Fas+j@S5hTk%_C?6;n3b;`_H&_M9+JPM$*
zb{7R0ZUu;S?8#9MVL(ek8hndB=!@pWZ*CSHA!tOYQHFLK@(tRDsv_a|hzEM!lBJVv
zJbZYRVNJe#N9KUI+IcdAg6<l#V8kU~jx}!2`}ZdqUl~Ny28U>#|8vHd36}|nG)gd}
zj`bm(80o!>2S;hcZM_T31NKb?V+C7IU2~mtmd!&3OC??Qk(>)9-G_9MeGhLVY7H)e
zr(pK+5*sP+YwBs^yu&kdN1pS8MRIU_ZbSa_4O(xU@Rb>u9KT+XY5lwM4lWdUBub=@
zIW&xQ;E6#xs}ni+CZp@ue$2wfDzw}1z@>ZIk|Gv%Cw1RpvDmhCSS8oEpA1Ak{UDvk
zPTRd}K1KgNl$F?xfZgLYMMsKkqr-e>a^66pr7$Gyo}~^K8Wx?$XBRKs(RL1Az~|O<
zUtetRPDzt13Y_oHYu-PQs^P$S&tTt0bB)(RD7YVF3Gd0KC}^EJ?{UTPOGmO)9*RbO
zGphd%{yPScDCkXhD(UAOZ0=bZ6M5=t(2D)`5e|9X-cqA4l+TNL-(6)@0Ey?@5CO5y
zk%<PAfSeI#RwMp}l^LB#uGH=;?1C2v$l#b-^oxFFAQKDG7q~_7W8U!)Ofz0K!VSS+
zVN_C^@5#tCiP|$x=hS=A0h9Z`9vr3A*kscF?jU{sb(o`%&4Xer?QRTXd*rFz*kGD0
zolKU@tFn-T<$0OzJ(u&qpN~EWaazsZ0tS9wE;8!8BXxo>;(OuOlP}La8g}~9rEZ_^
z8vk++jF`#tvzhj-)+a5S(AlbU?@4fZN(i$S=qjjfHnwg7c6|I+{eeh{LXJUw<^=V}
z+}4nUxsH^X%Y-9^W8wCjk4GxpQY*XDl>My?hd=PxZ@!xQA?9#pV7McM!KwI3C<AZ9
z?nGUHf6m+?x=qXS>pQ6mwE$WEoV+8Sr5)fEc1IZ8RY`;n6$uQFMpp)RGJSC7TeXQB
z)TV2|4|7+fs+1_GKmmCAf!5N0Hdy-qXEL<}2x|*`@ULpR5ahfawLafENLZ{4+Ouk_
z<LB7M8)n)ibIfid<Ij7m6Bsq(L<bA~5aod~qi{qKvv2E*@kQZ9ZrcVOG2pCF%lNHM
z)Yp&Av<rWI?KOUQuxGZ_L{xCuPDH;uK`obBAtksWtgL+hK=bu^KRRX3wLG8^LR|D{
zI>+GBrAs$NRP~<E>al<6m|<=h)&u!XP}36zaZTXj#IqRm-M3om(=z0Hwv1gHL?5XH
zL%GSk33Sj1#v6mgtmgY@6D8y9G#S<N5z$nA>%9v^6B8JC4J*8$OnkX1Qm1#G&qRE6
zqM06le0i9Ftzq@d#%!pDZtDifI)k*Pr0`^en0)`n#S6KcQpNYtud!;s8*dC3Y>L42
zC4G6O7PLV{VA4SDhZ$y_2ix3Pq;PcKi=PJ3<RRt-e3Z#}&7Zaac4D?ZwH8~$YQTu;
zAZVw13<K6<cBbdApZrb3Lc)oB)`iZeJyYw6Qkv@t5|cGwU;Dhz1B+rpT^C4on_Mh{
zq2D>(BBUc#u31l&I*>jnuh5#gK9tp%E^De-=g<mBgNz2b*)|83J`3ltumV7~DZ~=L
ze7QDMY;e{VL(W9H4Z7wZs4@^E0;TnVX(oNV#n2xi9Q1f8!Z>6%AW7O6k2v*%X04xm
z{}J#<+U7eyXFATwW<B31>lTWu3z+!w^6YAw4rYkS8|Xx=%NXO!FX8S>S5XEwh)=K4
z<UB`P@dM0wt6oFr5~r`HWqayhZ_LG6CI@Ou_}+LhUQesak+X1kU?08La%f<Bn*IK^
z=3grf^m15f|CF+sU4q2hpfK(Sh3aXZXXodYopmk}vXg+B3jq4W<Dp{P3E)k!L<!;k
z=8B(i$)|+dF~DtXlp4XV=K6$?uZbp-)A4n--I&+84KQgMk_8p@+Wj!!zqZeEZg6vL
zdE_3YQo<+nYc*GKZ;^|J-?5yBhWgpAfZO%F=d-XfuAy4yQm?O$WNLjjR5j|oQRx|E
zVlV|W-sA2La%$Tix%?5QYU14LwA5E1b+}trb_<wQ*Ygx}%;G>uy7&2(Y;y$D^KU}&
zj`o;xEzi)fp0=#+y!HZFk85DqzLFvu9BFwDxK;dj5wX5y8vguK!{>i@8Q@9a(IOnq
z!grDSEE2?~kmoJlJlSlodS-LUICp_yK$X*aX4I5#p}&-pE7zE9j!x<Dfn?m{30zc5
zsRsEqJ~e@0L-$4y=Ph^PxmuAE<vdhI5A-T#PxHwJ%7V3V(>c%56#KC%ESS3PF_7=1
z48$|~9T<s?Sl-V@Qz&Jvh92vWxoeQ{Sb4iHdw>()ECkGpL2vtYxOQ<8_p*w`%AQ?g
z*A;)&#7aPln9c`aI$xQ6o+1BT7jxp28YcJ{u~H)F1@=Gr<;!O_81L>o<hc7VK?n42
z-_Nvv-pN@g{p0K{=fhK`H<U&YWg2QhtM;<d+mCC4!t%B|<x(9sX7S{Ubu${mnH4RZ
z)$p9Z;(;tArENshjGTQaiyoEvRP&Yr0Tm+YhAx7<yH(W;{qMi~B0!&S{>GIc1{nJw
zOZzh$2+8_d$M0Tw|NWUwk(`)(q2^mvD#g-1st2kLjH0ioU%h%Iv=U7peAt<!tQbhE
zIwGg)L&R}oW3JN@Q>G?>ItbByaXLD%Zq?9TVN(K!hbg(fGqtZTwlT}9S(zl`WOz>t
zjvPr8sO-LPX<|Qk@KZSQZ)$=3|JCox5kF|Nn#yjw`sxF%Ox^ltr2?}|t3kUo9s+LN
zPy42Oxwk|=KCKc7CZUv!{lIurur6Cqsxf!4&^jn{qTYT`Y^F_X93fWYj9^$V4FwR&
zX9e@((aJu_eLgsu<Lr%b@jCZ=^#>6_AO;flfL1Zbk8ZHAmbn=>do#oN$SF}V`SZ>^
zl%7F4=9YC6p?3efyLXv1x@gi2>j^(R^1!8?&AE<;Ak9~B<pczH_tuGi*WUkyT4C#4
zd06<1ESCGf`f-7Qx3}H|X_RlCl?}TvJp?hZ!DVu(N|b|z7I&O|Y;`_@4ql~B6r$wO
zsNebI0Oo_&ZlmK=4BTO1k;a&8*6ET<k$%K0zm}*tXqRJ93&sA1RX{qoAWD@DfBznv
zQe_=&tw466FZ1~hM*IS>TBvV(@L&*`D66LPJE50YiGUafHR%<)-GQ<a`%R&jc9tRs
zvz-Pt9x}-Txn585T^Ac#?;PxP&#^sOMnglEfy4~K-%UQL{{t<&i^zF?leKM4yt}nP
z4de-i$Ue(y3LG-g^I6u+pG5*BZVK`y^`lCj1atT98(tK$nGA8w)Yvk56i5?NeE{*D
zpk%zLVX7xJ^f%+P`4RQ!g;_c08kKyYm1|0M9wz3Y3ZRl@s6Tri|CZw(8W)<F#cbPy
zss}ose{un;N|~Dsi<-Mp0lCJxjP+dB3sf3arDM|Z&l4rhR>#q^8l-Fl+R4&tHd7TF
zcOQ82z2C(mu*>dd@WQ2(#4g45IXsA?K1YJ>h%8DZt^LFQ>MHzSe@ucxK(JiXhl>lv
zU_kei#qTChPG>9$K?m?)ZuZ%;(~s@T%U_<o82h*q!)$-sG)sB-`(c}N`3Xd`quuGV
zh^-t5YJv$u0uO^w%fnaH1I4ydtK8x3&x2qJIEU5#**vSRWMyG6Z90LG90WIJ+T-(P
zf7*)X9R2P<t$I0jL+8zTc}j_tglZ5qO7*{EoXs=`vZ){qmST$W)@FM-D%-GK;ZBOG
z@$B>A45<ie$@@s~g8;w4IFT?}CvHmxa2#4hTgy@RBuf-z=Ca~nVCDdWH6hV_dz!H}
zWX;zlCS`Bm+%{{2U{a&%6G`uWr)(bQR8zRWTv+i9L@wxBmbNgk$Oh)0{?K1p_5op1
z2ZCQVKL1>C#0YH?1@A6uUgOe!*O|;|Irn&iO6Im4N-5gqjJ?%@A4p3)owG0A2s}^B
zQTOP}b-z#4`dulvQ~R=gKb^leKAtF*Y5LV}M}6#JmIzo*t^Ouuzgv$kl~v$b^eb^>
z)<a^k(P?)bGZ1ie82?Eutd>j4BN)4WhJy+@<6*{|ijLFmd6A5TPGheD<%%GHIJLh(
zCv9gBlDVr-N{a(K!DxNZPGj}2Zj19bE**jlX=Yz-#v}jFOxA}E@mdQ*&u>PiDjNi{
z>h_2$<l5bnj1#4edmNBC%W9vK_<S(4(xD6c&6j&`>ee23)RYu$jhDL^YmT_0U9wvU
zl`pfYl}wZ?bK>5++)jktY<&pw+!e$&U;qEa82?$2!mor2D1$D7mEQ31*^2tio|SPL
zPkYebu)T8xD0B{_g7gOF?R>FFlP!r%O-lJvv$$BX$f1s`H%!?}J&&rOqkVC+(3!`(
z#A2pP<e|?sgUb)(z!>e#H}eVCU#1-&uf<WzmDtO(=w+(K#?|cHG3jNR*^u>N$ZKUd
zE%@x!Yx?=YBZ~4b5?v_yn+yFpmI|Lw;(4Dqt8BWnsx{M+n~Hac-SuUXR*Axkplo!5
zTk0g(Hlb;_#kbatPaFvT^PK$RfAPP9^R-LMzB_2mq&IpW5Odx}W?4)!K0bqP4K}4B
zN-4jD&vG{Q{B;(gT;su6=`<nV8>?n+7?-%8eTsb?P^Yjpm^b`5CrPGZ3Y5p|f-{z0
z6&<y-h|jd3Qs;+q>XURX%IS7|D$QA(-@#mknwtCuol-u@gGlEl2b5e{DUC{I$IR2s
z4g4D!CM#!+3=4qp`;LfNLDqRc<CRL0c4~7NePjnD`gb>oNq}K)(Z5(vU-}-RqsO4n
zm?L@*uP?`#-WY_6#B`dqX^$w!KLS{2+T90Oe2w>c0$`tNg-MVcqQ1^;^K7=k-Wi3i
zXoAZlx)Y=txJktM*v$iPY$h+r2mx>s)Zj@w>@wMYAHI%8g9R{MN!jVucH}tf>r7tN
zta|4Mb`2uGx2pCn{4ds~nrc(~^KL`M$B#?|zbyA+T4w2T(gNnehMX<8qg`zTPth&m
zK$^PEr8#euY7rR}CH+!*vxI>+=GZsit(sQXsfw!60L4z=ywHMP?W!JEss(~*ZC0X@
z<NMs;Vxq}lEhH%>pdqM=2W*BDQT5ari9g{KxmP1zZOmV|`}eKXvIGcH5l1Ebypg7e
zXkotXkS^=*gGmV_9+KA2q(9!1bL=2hcWUuN3(4<qlDZPS=T-8l7suuT+aFnz*gMq%
zzj&Sg`Oiogz)GEKSQAJ-US1LpB$~V-WcBj*%@*NhFk2TQxkJ5=pY>PX>ps@+FUe>T
zoZFRy^X+_pJ?m0F{EWVj$-njcKnnZM3cPK6B*_Hp&0mas36)3{&NsikATPvV-?qQq
z|B-n`&UP}gkDbhdMZf>j?woMmqMQ795Ceg{_X!LDJ}=1K$c}&U8*h*O6?snv_BZ$b
zIyf%DNFG<agaiNg?~Mxu+#8YzyuMe*FDO9<zxW`LdGmj8NKz2vw%O5Ya{R1ih<wph
zKP3DQ&h|cXESw@$?fyCz{H|Bv=P%A^C;q$e?VmUCpZ~>wPVPJCAN{qqD+&m-a<rQv
z{Qb2CMjPro4o<+&tByjBh+H$_!v6qg&mv}nQ+V^|Hl9TG^+W`2=+9sLXHe(=I;H&Q
zktD;{?}QhShzZt7T^80Pcw<uc*Pr?Gb50}v&&5Vo7w33+?}xxIBp%j!|Gv9%&qA(E
zuaw}|<Lh011@5SWMD&H<-^vw5Sb}Xwrx~KZo`tRgKc7CrJMqtB^vnN6s^mg{^7s|M
z8Ne%#Zp_4)|NdHU--4MaVo#)xy_QQp6}D`?Kpk%Fn0}Bh+wZT*xot|5rNc-+PD2Gm
z<P_2#J^TI?5;xYwK7F_!b#$<BbSjQ9`;X&8G#ZE)hdGB<h2J+c(f45Wr^U4*j~5A>
z;gp&iHMbOrb9uJ!>tj#y^T_?mkNoQxACdSkUW6K|O#wi&4RgM9`?2OB`UgLX^|G=9
z)lV$1t$w<!0nkPzH43L!@cf<6{PA!3Es*$`C}|$&c-c-pgs=L71CQnO@h^V;p13^4
zf%oj1=3w}F*j~YwFh(^n{`xb2zSOzr2>jaHZ{a-NUH4dcw(n_8^WWd?Q5SgB%J*As
zXvfbw2bU48l<4<w2<WMw8vgke+`AF;G1o3U_4~`Q{0QDKGC1L<F*cQfUCg(e{9jx<
z339OX9rBsvKUaevS^DMJmRrBS)ap;+J+GdbGWmJ2ewfr0Ho;>g@^h_z!ReA<Bgpq#
zmO$9?@{-gcE{y51)z3xx_5I}khybLf2u}Q;$hQ=((Ra^FmcPH1?!(BjSXvWa`s-Oj
z%kcB9?X(joe*Jxanh7ApIiUYs4i&`frisyq|NdH+lOv8#J^Iqmi!OtBmD!M(!QX%9
z`{8gKC3I>de!lk!WM9ku1^oX9Ypn+Fsebk2*Po!e0YOYzLxfnraq#}~%P#y#P6xXg
z!|<m&q(H1;9Yyb-zwZf65rD*QKO3Dk^5!CuUkgEZ<H;oHL@FexFMXMz^Vh|UmWRL6
zJ)^z#`<w9XB(kC9k34j7h`DV@1ic-|r<x;!ROyaxgfO8!8sfISEmrE_2h>RhYsEAx
z+TJ|lNO|YU=R*0GH~Vt8a|eOMOGe6f^t>?OwxVq9$DPFOt_QmaO#dd2Jb6AbX5{zZ
z@)+A)W9PDibSsTYwz&3_FtQ+e)y<xCm6G8=s9Om^y=kBe2lf4^U|+WqW2QAVxi?+)
z=p>R6KC-U3{Np8BZ-B+iPS2G3eFHc80Zy;!tc9)dJWx$zh2y<5)eh{^0+`RB)p{!z
zO(e!gm?aUok6;Lv?TNxTBcs0F*qLO>WGln81J7Cvums0xfPFYUU-;<tks{getrRvf
zlDO2-$q}Av%CzfzoGgc=tz?pA0tDP50>apg>wvwWxm@moq&*X*G9+)y=j`GjM=M8!
z<Tdqk=+_+5-6_-?Yf<|etFx5%$85u&C~WcgmsJQp5d~|t?Dh-x`u~Bma4cG_pUrip
z#mf7W$@<8mRA`|~$$V~P!=QV-QvJaMB;>URKNc+2CpU)5Zvf-wNce8P>yh?z7vx+a
z3(t7F(e(GN#5pB6qNlb7wg)rGya;N&7y28m4t6iTKm6m&s{$Xq`k;En!J?22ECN<P
zG|$V5mR~XCwug@n$$<mKwgFwHrjNoobNUaDkisqy2O7<k(>AyRhMkX;n-16gKk_-N
zv~dT@Ml|hYkJp7OLK1FP8mdavtIkK{nKSkDaUdM8t?ZLG<OfRTp=He44b!<^bY+mB
z+_%}!SIRfJ%cR*r(Tq!@I}2TbOG9{uK7r(sHUfU}LTb5OtAo}caIX&pk)&?(5m1re
z{fLR~3&pMi%eBv%%@N9G6SX&?kuSDe0}6`|nxN)Ywr?iSq~r7$=G^FImBgD(0g=Ua
z?X!FU>Af>ZDM^u)br<+-4Xfl4LiA8{T+gRBTziW{{-ntNmIzXY@FV0f6N<k7c3_sz
zW|?2$-o3_E7QMC_4IdtDZ`0|Py9L%;5z;8h%CW5~gQ-O1K;IVtQzi60gYq}eHau(P
zK0M0C>;~)l_Yeo$)S-{;j${oCCsSji(A+RDvuw0O36C$5iymJ1P9$tqPpM%Ti(_0y
zVtc%5`guZ@8j+=rM1RT8nvb%I^|HFhOA5@xXQw?kkpdeCkrx?;QOnU?W3mWl(e0=y
z&UZdK<f+~4kQ#}IvLq;b-xep#)fuukWY2UMo?*7PX&65Ng^|D=&&!WoPBpXBMshe7
zz9VEDpb5(}iE0SrlDj~}t=oxyuoQE`b=iY{1cS?Z{=M40GxadFWYDTJQ-*qm&*VLj
zPAUxtL)zoD))RaY1CnQn5UKvWDOihH>A{g|uQUHNgvr)Vesf8z8%ZS(<|;#RyBGxN
z<#`<^X>3chg!4G<n%+QV52!LG3h~1s1#4G?8bevb0}b2-pj_IJ354)^DDrBKRG`U*
zr}pOx`$j(~G0jBSJMNNj1EN3phyUlfCjJ-a2>0!a4Im$UD)s@(&#3HQZlg;%l4MD5
z_GwP-FShm1*6nKONRvzrP1&`{={CGVt3+abn19oc!q;NH<B=b^m{INubWtvp9%#0F
z|6)|#60}?&NTn56^qN|?=kCiw%W;^^Gm>jKKF!#cYHy9C@HLw+IptSO5!`tUvhgVg
zjiHS99-b$@ym%;gWbY-Nq|}?FaZzqLTTS}aPrGK9zfc#-n*4k?N0CXh=2<6~>F6sU
zB6iYJR9FfUuo?QnybxUdsLJc8?|rI*;kSt$NF439n234YsON{vRA;-)E{K`%EWWt=
zGS;~4nL!4R(ibTmbh+i-wA)Z6C&5QB=ox9NxBq6vUl5-{^6FrHLuvhP3zO}vPONFn
z)yR}U4jtX4GkU9hZSsITmfg%=+u&ck63OK0`ED5`XoTE)^}rX7V+@8a#7~aB2aQ@O
z*XIuISNHVsYd$Tp%jx-w7kbAK-@P$b<p1;{rxCMx(vtJWQ1ArklkwPFuyN^j|0pSQ
zRB(BsOx$Lq;%lZQVxANM_2;(ZE}Afymht#VXFsv-6ki!)N6nm_Ipb2_Q)m&sz!~(|
zA3my;Q#JH;IoJ!^2rsno-CW=bF3ZwtHX6)7bXZW(+tVh<;?@v<|HR4K<AY7&tLetY
zE$!yOi$Szm-X%-rcbVPgJPq;%pb;fbKSy6O$wKc@2vb1z^Uk{D2|;REAs-`UkrJna
zvqDEF|41=h94eva$kfi@&6{hHz-M_*5#s8q2@PGDx?dd7(a{;_l>eX%Wih(-gR4U&
zlXwG|zy3OKL;o0_4~m1$L`EO&+V5B6AjQcwj?57Z9nr|ZqyTF9s0%Sw?*fp*C(K~b
zIw-VcvREcb<~v))Ljyb>#z;5;(!ejM3!<m@i5H{CBDmuRBX%m1$$zjT5)e2@#X8mn
z!;R<YTV1rh{itN95N2$CIPlT%4i>ti%j`kb*i$k5bI!l)4L|!SyR?o!Sw3~HhYF@S
zMi<e@XWsWF<}<qBf8znhH6A+)3*xrEBUd!cahMt~nKiUWbcbf&Waz5F)w6%EAh<le
zV&WJ$-uLPL+e;yH?l5=!?IBT^792HE|Bxpi*%|MIea-lh$~wjWy(yea`^l@JwRY1B
zh<6C-c~t#?J%DlZ=pS5whiCYi$CPj^B$HSTx}Gj94i@EU)~+^hH}lWF=Xv_26$J^5
zb0;xfECO{gPoazPJ4d2a%Zx0!DJX=1wH2~VGR^p})}EgqiAY-FtGB9pUt+$-A|^H7
zn4Q?GqGOGrR*F&xs9PNz`8uf!+`RWdLggYVFpkWdc=^DyAv3XEM<|(XD80-07@X{I
zTl6r@^zIqP8?sVv7wBNh*Ozi_mW<c<eoYh&Y6{odND9#IZRj<Rwe`I0a~Q#^{LuTV
zQRg7klX2;kdg#lREATE5Za+lGo15`_gBkWd?f14o$XYn#MswK4t~l>_#e=oH3uaB>
zYmvN!e5L~6FzfWYBe#}><1p}$f~$7#F)eCxspd5`Lfz?GIx8IXXwYusBeyJ#DxI<A
zl6D}g!H|-6vu*P}@F*EHx}NK;?8dA;L?~?P!r;ex{Cp0^V2a{V0Q4GjuxdgJ=E#|Y
zVrVb*sR%!$JO9M<U`+_~??#nm_VnSwl5;)Vu!F{e3Cyt4Zn3nu0@hnG_~7r@k^lZ_
zZXRI_1HN5JEjM^$q#MHbJ!iKSY=JLx!yPz*{QJ1u(6p}w!^5IUPegdU4(m#i5e80!
zo=6ui-|gslIa4sl-@m+!9>IvH0~$V6rRNo&>m-{VVBBo}Y?%_@<*t)}i+dC4Ff#g=
zGYx<7H&gQ#hpgt?ijT^53oNo_>$Fxp)U)BGH`Kg-p*i{-tP9n|&L6~%ME7asP#=qx
zqFi%^6!R;9z^Tb^lAg%-gSVU)sh9_25N^k*+SSq+_sz4~8ZRoX<?+C9kJv|TD95wT
zwYPxIdCb~r<YiS-+d~Z+UF;i<<m!&Kn0<2g!1d*A=)NNp;S}t0zT~6)70<#MW(WEi
zUnFAM>%x8s=qRM@CJxGEzK1bUX+$fFnCGHFcdGRoLhZn%lNJ{M>N9Yo%tkx(q^hr@
z#N&;W<um8+mC^Ph(AHfaaiIz<i}TIxFW4Q$V=g|gpaOUwz9uaE_v%o&GyGj!9kk}{
zztO<_yQy~%ItAnu_7j;}^<>C^ihQ-9R+k6)0u~9GV(@n)i|9(lHWDzT=2o8Z@MfP4
z)|pvABOk+P_hGCU4%YjYXvYNE)X?tIhgxp=u*)jxu3uq3RKmV&IutdR1tEjvoSpD*
zDMf5WBpVUvfJ@wc9mSy4XJH#-Id_hjw6FpXVk@echu$m;ZC6&`z-47kk_$S2_pVC+
zEUi*h=N#?0rx!t^lPow|Tw2)%!${~c3Bs)jtEQn>iGJl!VC%Wle;t+n7ptPQdoy45
z9KF&A@L&BF65~@u5aup05rU>Xa2ZK4MgoqJw@3hZ$4AY1_QE@>^uiGHRt(ZHjbN-z
zmC*mOx5c)%bj-+Hc?yh7y_|)L3DqZIK;B&7vhrKOA=@^rJ%gNVX~fcWMw{w5t6{kt
zbS4FGZw;7V=Mn(QD@R#2?%$*TeJK36n4le%vHplFe&%5J@s`(VW?(u~HfIWs7`w`1
zHuZQzNPBTg=&eV7SHF@fkya&eV1t3fPCvC9#$q-9G;dRHS?u-sYxkYIfqL*gyA;}7
z+Mt2u#e#qQYcFCx6&S~)COgp--oHOtrHQ@{l`L00LY31r-^SVAXpp{m0ZC}IQp|t5
zMy7YcOyrvcI_Qr5yb&BWHP|zQ@o5(oZBYn^CMqhbtx!uC=3O3$o`sK2??_cuMSLR~
z2KQKo#83rZl5`4*pwIP<f@Zz;&jIf-uZSE>Uyy6jNKq(|EVP`N@8C7O7my?qrxsHs
znWMn!<APr8P3Q}5ohqsu#bKy;I1v=5^74#inGsKIFr~jDa!(lS#?OWD8iqCpDwqzt
z{Ncxk9PE9`7^Z*3W<)mC=+sJgonP*4%uTK2!Az2JE}!gke_#A)QTWbqZx;K%{mlRT
zxJ-MeP|bdzo`Brgw^G%Jg{+1Ce`07P@PdY^VFkH(QKCfgD1mpRu+bVFgve9RJ$1P)
z99RR$I(1Vop#u8BD1G=2^K<4$D?Ot(=12Ge{az-Dxh97(f}s{k=?trHPx_1$<*=ql
zerg5ohugL}-3<D_I4$f*B$y`Gv0j@LX^WO;ZVv;+x0)iU1AC64CTv)IyLWs`!$B}U
zQ!daUy@!^8zgsR*R%9q_ue3+!RLcY`egyq~3NZS6)3UDZ4i7&$2tFs*GDgU0AzoFs
z<~`q2I;g=lb<DiUU91bBW-|MBPQFAxu6ki;wpZ#5)-@_Xe>q)(WB`p-c(i8xZac{v
z?dT`tI<7qUzgJvQ0a(*|J?T-3F$d^!ExjI2!1XAwS_nngZ#i<dg@MAiOh>;N?RC0X
zLp+%i$aRKopwv-uJx}HA*i8AG^_lh}!(?Wr>7yy2cPKGwH|To%LLDaUdtvx%2!*Z1
zTwProa%=r=uN4v@;O8GZN^*#CUn}2LrCO=PuCu`%5HF{>h$eB3p<MRGeNo>VZZLO3
zVZK}1j`qWC;meU}^7{ot^6Af9K5|;tu?T+Me2qmgxpI2WGEC(jhjwNA;WS^L3dY~}
z<D1w?)e1a99zNUESm^w0ajl8uE3=qx`Es*?*m++qf_TO=6^3mFYu0_JRr1-ET<`s?
z5;nbdbMOw(u_rk`qya~Eae%S^2xc2h+Etkv`U477y&#4VzD~HDz-t+H1M<())b>5o
zFJHb~Uy2XsbyS#ajx_G1m56@DV%XQ=U`15)sf=~E-yFsw7dRahLX185j@E?saKOiW
zuq$ZK-7ZbsnJ)+W#M&|5z=(l2y6mq40k?5^`C1SP?#1$Y50@hIeH!*YpbU#3?w%>~
zUTfL&w{u3?{K=$iC1BK#VOOQqTcLE<m_{%Uo4sS(=WfxQG#<g=R9S>+5lj^Dk}Mjd
z>(=~fQR~D9UeE`T-0!@$QMSeTS~M+dol~&->(1)=>Y(AM^rrW@GS1}LCA)jk%~=)$
z5r<Cfk0D8RD`k%Mz_5MAO+huU)8Jl7>6)yK_JoN0#=qDf{&D2^7pw8lj{xM6%$25W
z4?J!OD9JTg{^YV+z0f~dwVaQRbL)Y}2ko%w^KvFEv(PD#={(H41HJrO^^+n9u9LOj
zcwLjbz;#RG^OG(n_$r-A(z%;aq-aCeAJ2)rqmoGqJ*bw>ca34T)6kjnCIVeHx*hee
zcC7^T-c0Hpx-&yDZ>r7XH!O;v^{6ILL>1v>$)wqB;Ag6LQq7rb!Z@gRgp?5dv+m7y
zl@xuTRUMkMPPCX|nv5zvBZTytbr=t4_`i!}_%fF(jU3u&qy{^E`NF`#n=7bKsSsKe
zAtpZYkJ4Av(=S*YNnu2!li6JH1(RguqFh`m=^DL3=x3M!cbgTsG1D%{d$_GpU^3z=
z#pB4{fl}sLW0-`-iA=i<{doEJ*=D5<I}PP$vE-MfVS4rz`8=a=kT|U}w9HVie3I~r
zH#qw5l|=pu9Cr^BH)vK4Hn>3aeNtgv0lc}wWN4L&5<nHQr;dy@Iny*5c8%&6{c^hB
z)@*p^nYi&C?MqoL4bcLSS>1L^kWTaq@sd4jEcGv!(g}SV2la`En9C|<BQw7A8?$}~
zMLhp=$CY*Hh5P`c1oH3B)bs5+kOM_b?Z)ek=R#?Z*74_|TRuHEoZU3K-D%ye4a7s;
zOKoNpEY6E~;j_lttc<FauH%$7(Uc%yb~Lgay5z$bRcClu!liGdM3+f;o4(yFm*~#G
z#K+CHn2|J45}0X=i<5|X*kyFnjISvpgKz6kRzjJjF*mtTHe)(y!_G;X_C)pP8u~*f
zwa_cMg_q5s>j?}ux#m;U!SEV}Llz8<(TIO~q5J8j9oJ(JR(OS%@+k_PbMu=DH*Na{
z+?28-x|W-#Psx-k=DWWBgX1x12RzBI0IM=kC<T*(6IIJfL!Rn(Cdr6)-}A16iA)~T
zS+~V-@OIX?#_dc>a@&W|v1HS)U|F;b2Z5`R_Z)Uu6UobP#kb3II<Vt_Iopb5>(&pQ
z+qvDYtu#=Hmvv@i{=@ho%Mb(6^~!k4?2{Uf%tL=~`~R2PZimIpZnYnIHXRPx`h2JG
z>kGsqxz6@A_u947YVFOZc5m&&EW*cGWNE?oAJH;vHwIo#D>E{j1I%Tghsrdo#E?>b
zc`d?u1TE4#IY6CL>B~_1-quoWc4E6`+p86AQ{WBntc+8pWl79=R&e&@X{~jq3=*-g
zr;hLJkro4Bo|x^F%$bcT|HEE>^~>3|cx(DB-Q5QHRlEAY$t4+TxyN~Q;f=!@L)XZ|
zi!4@p{h;uenBacm6eGe2Ij?@UCrat;w;2*Pk!UMiEP?6H<e+vE<U&Kjv&7b9G&Nhd
zRX`>E;K+UMgxhj%_nUnf{S|%f1h#DJSyud(Po(mj(aeuv%59_J_ZKDJ7lx2Yt-&Mb
zhjy#%{sj&fo$>|e^`&k%+S~D&>C;Ov#+{k@42K6~T*4w=f47|PX+8hh(_=0iVmXUR
z;_%Am>zZ?kj&=t<F@hKK?%2*@&ix&Dlcb~VLz5V<V_|zeD~vzLK;bk+@)@J(=bNLs
zH%iqjJ;)OJbD;C-9?Z?0W)6mr37WcBsIk{D!AtD!@xv^hB>m1Ah)gDmX4ZNmV=+oz
z{q#v{41FY-aNv_-FXfi<Ggw9~qxDOk@hfNlEbzJNYl7yeC$o1=B~hiMP&##2_Y$38
z>su;lSeaV0^;$4-TXw}`VXr;(%d~oYM0{6u(h^I##qu=GwnJYcthg`sGP%;1el-^M
z5g_-Q!O$dz<U;Ru&zhz8j#H&7{T#WbSaQo7z5b%*nio&5T5?6m+wOINGQ{84aTz*p
z(1t&b-cLPr+^ef_^J%m1N4g4>Bxe`GgBcBz-r;ksN(@>pXjP2YcFm?&;IWXFnYjgt
zl)#9EI*<Y%RJuUSd8;#-r|_ELMY)!sMK0^<XMt=G*zTfjS@&DDM!Q`ai1(2{oK0@j
zY}#8=v@CX`?)l@A(w+ui3o!G?N4}o*yHUxP#VTl>@4BhDm!`GWWf*-Ccm9F#Yi_x1
zdGrJO&v^%DFFY>Y-_iQAZ_5O2C{i-bVgXc5Y&(qw_E}yIxmKx(%!XA@^m>y5b`<l7
zmaQ|Vpp`PVlfXFNwmFnT>fw0;{lNaOc=IRGo4KXLt>%Xeucz2hg{J65W_X#P`8=Vy
zf5PP{l8y`%<EObkgv4kz>SC|Dz8G-2H%e4M&)GE>_`>5IHyvllLHPseB{2AWLlAB6
z+3WN(6ytRP!jR}ry>^q^RFB9ok2gOf2<8rnc;MON2F6VQ&U_EUmpsUHxID;|<DrcR
z2?08I!yE77q*MOgrM^!;eFMr<di;yvMyT<zt=Fd|;;*=`E8PEjj_`Jh30lce>lGi1
zGu-xxa%mAC=v8?iqpaceOdM?=rA1;~p`+nse*b!|SJfl)B8}M7VSKy4MRfcSwU8^_
zO~ZjOL|sicA+HGo#T+~PiemSCE#tj>**1eXI7szStkaHY?-2&CaX&4d@PVpIID?w2
z6wx3r@PH?G-p7}pfv(|$LP2XkTE#oH0I_UOJ|gGJ2!g4Sb;$5)XE7=sq^dlcSPl*^
zJYuKc`Rx8oCZH?dYtGodd+xhoIgWc)?Ex@Pi0fcz_JEVt&RMitR~KoObU56Z65Uvx
zY^3Jom41mo|9~9Taz!F%x(72S%O|;IqA>N)*=5d5`AYu?2I39q%l6w6#Wvrc78}7(
z=xw)6kk9%ojZ*53OgnFhT<|iq8<$X@nsp*<M&FuzP2a$O6v=l013W~#g$frw-F=zz
z7VG9J*Z6d-H*4oxFQrJunKhb{#Wmd3XK<Q_Lni8j!gQW^M=xPb-w)p9LSUUiL2eP`
z{rzBgebzf2StsYt9{93<^QrDg7S(qYGsP=Sso=&Dm2``K$Iqq|{GEf=7|BF+G=m+T
zxh~;evx$^uAQMghG3-!a9%5(ra<pfKcpS!z<mI*#)aU3+2Sql0WUPl6)-LN{X1=#!
z6_N~@*27M<z&@Ai?@HOpvv}U!L}L#*{<Vs-7>A9{%eJX{Qfm@_oMsU!S6RPn(K;2G
zbvgBL3qNt(4Ckq_zQyz5rUC9FlS+)*$g&rS#DgOk{$!%>(Z{MnG_Z&nCGFPdXF8x`
zmO}1x_Jq}R(amT!wavxen^?1*td^kVL0T`HViGE^7__ypmg|tN>zl}|v$(gapQSyy
z^rIEM><INV(a$0C|6}j1!?Mh`Hc+KhKtUy>QA89FRHRcB8392;x}>|i5eY#;r9@Ii
z8bm<4C8WDU8tHoJIO|bnM)&#l-rvmpbIx^r|LhCc&hx&{FIL>^UiX@mPSB*}bdpb&
z-I}_T&#Qck>Y7ZFe0kADgMiZmYTJ0{)Ca9B=Jfi4ZM8x06uLCfT3;_H9+xxIm_!GF
z$OplqEiP!pkwjyC2Cpny9Z0pf<|afX#j#%sa1N$(&;j(j%JU{kzV(txl7jw?#on3D
zl&HsKeV>dOFmd>{U0J%1Vso8K2W1xoZ(Uv5hmiZD#e@hQEyd>h6P?=!DvE%}8Y=AA
zCcbd7an7tkX~%<ZD1vG?eA+%BD{$TMc-=#J1RqE3#HpW9dmx1RK*Lv4nZx#)e*J?C
z{gv@AntZdoRnTeAeUguo)8bwJWb3Fy@f+rI-%#T4|28@l6DL`d3uSm<og&xsEV(=B
zKnL&8t)T0Dl1xX%V-VVotcVnaTW^_wRTN(uK7ZurBPD@W0um0a&CsP38I7)g<P+8-
z!&YKSRF$wW)Zlzxk@Q`EUiCc(F0e{!XKi)^INb0JV7GTpk#nf0b@wWuI3)nNZe&S>
zJhu*fOw=?5bLWiwxs$s#1kSyQjvEVI=kU5U!x$CX8dSx<x6%42p{)~7vtAZJN53G&
z<H=A2DydSj0!LZQJ%%#c!<1+&`I&BPoX(NpdS7|kB6j06XgiK}bovo9*Fi&as`gB4
zk~H0Hi7Le64O@;<3~6fvmd*E4O6k(tzGCh4;C7pnKs_oLN@QFV%=p!^J?KPp<=A~K
z;AO0$_AoUc6JA&`#q9^g<_-pU=MM+A_t9sGm{sS99wb<=k&0zJ2iTbor1a9Ir-QIY
zIEVCo8Ww|QQPK|{1ldPVgv(0~cZTyieroTz4HnCAGw@SBARJwr2M|KmLEOjK1^*Lq
z-A&O>hw!;68GO*sb(zx$=XccRX#PZpEnU5QzgzQR+f!rxHrF|;=5&>hW+P}R^Snb2
zqF#aI6CGjjy|blq=tCw7OJBPC5iwkH-d=y{jYs7>BqqPQD3R)RB+U@4N^_c0PVmXu
z?$?_7XqxSEY9S&aDYeBr8(PCd#W$S$Zl+Kig4{|muA3vr?DOZ|zCOnF!RB*ftIk)G
z5#5*&0NQl6Qb|~}J}*7$Vndoe4LS{fd-3kxL{ID6mF2p?23!M0E~^>FvFbo}SH!XQ
z$uJ&B*m<s}=%n?n7{v*$47Sp&Y$e1*T-3fA@v+FVS#>qH1mhLIgo&XJI?ALaHZGW6
zy01a(gYm4aLcT^7|6Mu>k@sSOXF@Ze38a~z)-<i%vNh41CMyFV(iao;p`4B3h{^Py
zJAYz3U#C&AE%`p#iMpU$;?Z2RWbCP7%xosveMQDoOqOFHeeSl~jOH&$T@FZGkXb1j
z;BY&TbZf&kCwg}3jNWib@fNvi-eW$u+-63ZB0KY0q4R_5pdER`bcn~WG{>+z)R&MU
zqB$L%0ERl~>zuS8fR^wun>iNJ{I1py^v;}LB<JS4=B;cl3Y*^_@0ut**e{$mA_|bo
zHBo83b>^22`QJFc$C3~7K#_rjF)Hq%+InUflF{ssUEaPCsCkLAyS#_y?z12yPdCnB
zrk@`!9aenr@!opLN-G0#zb)mq0SaE(5~S&0?Y8cbeRSL~X?3?yv|>}NslR_>itM(;
zPq8LYya2wsNnQvDplkwa%fE{gs*LS^+=_89gyaSI^s{e_U8~=A6G1O)&f~M>-2Hjx
zZ(lv_kmRzOrUrEd_K_2$7z>vRioIw#beKCQ6oq4MfnJq_EU$3h<5^beI6==lY76EB
z#=|fpO-FD!8}N>M^fH^ef}xwvUf(&z`1}}ar4yueW0#}RjycUI&GvYL<rIbGk75g)
z+smsR5bp4@!;zCObt#_f%c(cW@}l@wpR&FJNpBr=&ZY{Ty(D&RV`I&85RjEt#f2*z
zBTxdcz-GmMVuoq_0gG|kuaZl)N)=fg2htC*n%)eBVzQI7wq6bp@3@sBVD@z07NmvT
z6oMX8H{F^fc{-6K*xqaGGDzUQgyg!<=~=^K3p50#*`Bmg3($SIjy1C{*HgU+ksL@J
z(U<P7_&ro{Eu|>OEqLJCj_U1zb0J2tgCc8A-Q9aHN%gB&jzqljDo$-0zkHGWcFADB
zVLt+cE*A4Q&%2v|+J-}=Lidgo<kM^JmfkkT+BNI*BPQwnjS;;4BKjS5+d;WT-=xGx
zP8RG|5>nl3R1EA}1wm{Pvtd3&*I;C!)VW6d#(I=(>K=0A*mUM2SldcelroHza*e|-
zd^(2W(o|ZNdtC=HMdjf7U{d=#>(^}J*2*4i75(nO&FE6e){Db%yqCwM@G+QCEnliF
zLBiBVBJXjxv>1?4eJ}w+)i}y4aEe4W@39Nr%{awMeDZimjaOha$P==3^~KPI+m)wo
zeh{D%oIOaHK7#Hnuy}d>)^WHcpzCjlmC@^m#izIA@s<Ots&`f_;^r5Jyf-7bq-C*H
z)}eAI@0($8_vFUh(Do(#8k^J|;d1}G7dS-l+@H|kzcRxtd~s^O&G7u5Fgo!X1bYWY
zk0;25bp7gIvuAAS!Tl%pyc<Y4@0H%)9L3!YgJ$e4SEZzX+!8Yir-buW4r%Y^U0}+=
znI>Y7=nH>Z+#mr=<rvznx(9FXo&@*nn*?KLtXqlMDB_*AR-`gid2?0ryDXnr&02?e
zv2gfeQNeAjF?Q?@bDC>@KF2&V?X~?lY5#3E2Nyc$kLGI=oILQEuET{O02e2|b;IWT
z$BnVMldBtiZ%iO#E=So)s3}|T6}R8ZyQy3&NzM|{zmXOvLK^v1@#Ya(4|NLK2Ni@B
zTqA(eURV=)gtV+spZR`pEvcO;wV2bp#iK9bw>`xJB-6mS>yxq475NXbN-2AL6cLa}
zDi>INnG?Q!dT!)yK$PKcfnF#MUmE3d>(O^Wkm0}_=A4;be5v`dHa3<TB$#3ps#sEf
zbNbfvOZfrc#|=*HX#qc+*W`N(+^=q$znSaJ>et88GA=B^=l{_i8CjEl)8K)c%|X<h
z<N7XU?yYwY9>uyFCU3IX`$g0Ga<p55;-pH%^s_c|h^}gN&2frbuT@pr(n*B+&vw7M
zmAU?cU5)P>895_BH#Q<)Z9BI1rzP!+g)9?dkAmNPI|R{!)?A{b$qqA=;5rOj1p0Co
zzgi9SX6bx^Zsi6jNy+)FR}O#N9(&jpFHM)#d&qytRUzlLxKkZSMyKXl+&v$ucTF%b
zy12o^xcdw#DLsuB-b)p3n><fOq;S5CwGjpl(D}v*>`y`&w*<C}_dc~3fRu_zzs)?<
zCw)cw*{LvZG(_?WN95{_d<q1Suez_dJhXPY(!^(d39ejVmP@2AN5|r7?AiO#4H}4r
zZ?(|(u=<&Ejhe^|QvUp1^yd|Y7h!rVMa!D*NqRE^=X_nLtWJ8y0AoS1UIqOWC7+WX
zrODhte)|>ezO%liBiIo3hC*28WpAYNNFw)>H-p}hP~M*Mu$M9r4(WrpVt$zPOWV=%
z9cmyC0GfQ7f*>L5sD7EUUDdFeCmFj*xO;nmREq4?Bm|Co#B`&Zd&HAr7qHMvE#=Z`
zRsyfRmcHTKBe|jFLpOY+03oye5ti5-1@VkETCrl;%+l<)n!1w>Te?PKAba}G>YMPG
z&Ri9$N}j@Y8J<-SZbG{&RYA5BqFG0B^fNHv8fH{6*H?u5+^LD1wr+&G%bX;gFp2a1
z2I3#Xv>FfvggGtL8&E)Il~qu_hue}(ak@A#vEKnl4n~C}BDIyU1x4!u+ePY@y^7zt
z08Eg#**e_oT2`7Xpn;mhn|P@5P=CFI-wW~Wlu&d9p)&d@Fsm1~xwQ`b?bmyC<NfPD
zd-wH1yo6w%ET5W(f&BoKETU+IEe2udpOdNIH58b|jhvw!Io}4A%=7B{Tdl^3hX_Z5
zcD}@AKEl42|9)Tgi`8!lyjT~W*v5k7U_=-(>gdOzJn<O5;%*y#j@z}pS%@gpiMq(%
zhRsxV0-g}0G{eHb2Nk=Ep-_q28sy9He|pCg!dKtzc-NJCmf}!toNOOjE8q9DoVxfh
zqT>ax<EaF7j}JDnB@RUgs-;Y?q8&t{9cHc|asm=HmNIR`_nKq4>2ghm*|I*x-+Nh|
zF`x7dw(#?NxW<`DRE0ICn3ZoSeX^dF?akJI*;xyp5aCULWPk_WPN2}g0&>us9hu>{
za+@<L83=cUFQ;DeUVEnF+Vn^_o6OI>T<&>S!6JLY?27v!1bh_<aU_oKgUQ<)9jWwI
z+JUtV6FSx)wEjKQ;0-_3)*j1Cu|_1@I?Eju(lxx3%y&!j#LrGr<9-=R;YCSmGII-u
zuPXX922p|XL2KsK^lr>_=B^@`aCE7mOgghP@$J!*+h{F-X=s6km$i<{d8lh@eH9L}
z-XPq|S8kq5s%$3>*}CPqkCLB5KA}wasN+{Rlbeq!o*W-cS^06gE?81Y?hrwk7ogek
zlx6qoHd*2r<uN=;BjaSvJ20z*FjwVt`qvC56cRn@x+k8JOO#FskV$+{{*4+w>&}{O
zEi1l6#_Za5Q_d5@^d&gcuLVq9>tPJmMeVv^9TqrFDgSz$MxmsAXCUC}VMIoK3Tc5k
zCN6c8wH3jIY4sG>AdILmDu*_lH0$&%7Oncw#v<jnx9)MZL*$;T1@b$xd$2)f&UrDQ
zDwx5NGSiUK=kiM>>LR&&?Gxao4S*09BV!Z_8Ou0{`4+O&r%k~HFtgUM7_16H5%s8`
zh=+k<Qkfb;Pv;QS9<ydS9bki+K&mig*qa3)4!O*ps{Eaak~AYu3e!K6Bu@yG^=DmF
zJFcutXFQOX8BG7M&RE)+iB+$K+Ax1ih@yM`^-cW?Ajkire;vG-6}mIY<%<_TEB8;M
zUMHCGpb<H7rgR`q9!;XmB~Vl;;V8NU&+?t{lPVC2ZQXBqQ!e0;Ax`J^(|+}n!G5LZ
zdJ}$|g2JgI?<3Oj<d;&I$Brpkvo`#8+g}-H1Y4E!JFW8x13rK>&$lSrVm&}o@AW>+
z_B?pOK4e#!mVumj%lAk%4TaiLh~}}c$Y~p%zUxn#f1mmb3&TF`uWbo$)R1Bf`{eOM
zV~FpE5ECxAFjDn}9X00)S8s~seDtXUND78sjGV6fMM<xL9K~`(T#ecy7$G$S(<-(3
zI!XExbg6#<HBVEDLP!OrfTk+Xhfe+rCW>~S8YnGXt4XI6ZGwSTCkmvnD4m*iVq2@S
zh_{<$>1L4gzv6c-$#DktKZH6HRI9qUNt&+CFNcUKI>GGGk5CXW%xscP!Aj5S!0O|C
z&-<qp2h&*S#@zg(Xnr2zr{MFqz2rNguuBKRA-4SutaswT4I&N#bln4<ox5I<oWb&O
zrXe-GDh$l2@lACn_&yfXE$0n8{g_KG1Br9B>uT3`at}s$84TSRhij0ls7)34wNIw|
zRW53x2}W;)8$d<j&ZLX7)*_7oSuy1Dz#_5$&60MiVqJElo@+79q2gt6rC$_3YJIr?
zQvq%ILjl_7M1bbwb_Aed<ypIb>KlikFvs(Km-WTr;raXr@=z(qoDo_#tYAs0#s0|q
zldFQ4g#H7}5|ZCHECVSOb|<h8G;MKFH=!mj?1;~gV6ST#?0iKR-UB(CTFCCw8Z~by
zm$UYqhk9&Vmaasuj3LDx^RHz`S077(qWjr}Fpub;XiN|?ULZ}!hgf2LmL|&cp{{05
z7|c=P^gIpLAhv&6-K04EV^|1-TpifMG@-+^Lh*uQ@mbltibLzwwG5i0tgWv!=e0qx
z?v2Mdc~$>2w-alILb*RDZCPj~e4;B|<#3_vKn>dDAsJvi(gL~Z@`W~OPN1GFOK~!l
z0qRd%MltS6=p`sx$taZpNeCq_lcKpGu;HsQ(s{^{UI0d>RF9g7!6msNAA`cAG7c=!
zdPfU-XE*GY)J;`1zAvMI+ljn=oo|amAlTpN+O6U@E1Cu-?KuKi{IZp>h@b}-3_u9C
zbt{U!^K{$HOze5=?Hy&9tzj5qDBlXw+O&v=?z4ggKvGk~S6J8d@NdV4e*LPR@V<9(
z49noPJ~22cQ}-TRIiI=37RUuBfZ5e`Vx}d|L+@)|ao+kOj0p%9^u&He|MJrPGbi&c
z3A$%lYF4ORHg5q1;4%<wZ}<U>QhE>-Yy0zA#}9{_iZN*)_we_VAcPp;(;#i@pMgGV
zbvG8cZ3-TBb1FIfR$aFYp|K=aHrJq2WFM8``l^{UHI^ln3+w&2k8njq;jlM4s9{~s
z<BMEgE9>X;6NI52Vs4M$PUB{BNvFQm>qoo>5F-2)tY*8ewh||;jfe%1b2cz$At{B2
zZs?_-jt{^}m`L?>>4Rad`)moSU<8JB#I%d0D%M=57E@c{1o0g`j>pA4Y6NgAo|5ys
z3@B0%5L^V(XpZWpIfc)A<F;Gn2$Q`34xo8}&d<Nx^Sr>T1DgA()LbVM+6_NI;HWs?
z)vE<wkwVht)6Z7T{m9uR@V2=+g{tk-_3QvRWJg!(EulcTMq~c2Zg1D@a|lhswMheF
z&z}g8$}@YUKU9>Da4rzkYx_mQ9wt@VlwH8PtmK)w<bXGE=J#K-<*e`Zo0fh7?SIWQ
zJi|~EQ)jIo=V=ZHRI~2F#a&!;d{fF!Di8$twI!Z}EAvgKGF9^P?+Y5jGI11{-)xNS
z13doQpm2xg>^mYZtV&53@M7Zc*rH7u5xX%@F640uKu8_`;g%f-E+!2q+rIbZl|cb5
zM90Yc?KJN#XLDJPr)zu(+eul);97TvofRR*G#902gAj0s8<}PC3IXLzjUh3+Q}gZH
zVm+XyLLT|^K&$>>3d8`wGSWJ^ZoTk2!YSyG?My10-tD%%)0tx^mldEZYd*^@ZuryH
z6rgrNTsVIdP4Vxk>NVh5|CXnA(iQ771*gRw*;M%vFKs*yGm4(~A*l1-P2^U<&CfNS
zXUX5bA#ff7buPyz@74OzDYGR>-z@>*u-2c9J+co8!4MhCvkSyeez7}8kaOd7zJ+AT
zYLdLWjB`*{w>qo2$zV9fxtgOJ<o<XERn-VAiUZ7xRi8GX#KBPZdBFsb-(YkzHyu_K
zCmRx;xJ4GL6ey$9{7{Yk{d%}!?AnJCsAiyOUxU=t>oDGVp_ta`>)(^y7LJ)2%gE<6
z!UX`De4ERP?qlGHe)KJ~<{8PD4Q^EY4x9{&nT{(7dtK=&O7ya+=Ul}v@FEWWOpx2Y
ztuxqA%EcOev%my%99DylAmCNVi<CT5X{mdjPeuG{$LG;tRy+Qa<cBGWn&dD`1E;sd
zxv;&r+tDAwf+u=QLB-Rb90H}$FK6d@u}|Mf8{>Lkk%?D9c&4RP%Zd;<6L*kJ&PIQ}
zNAZzg&cf{pibu2?(3-VvvC74{vmE*qCly+T<3LfKlf;lC+UtlXYNv)J<?@!u$Fsi#
z{bfk0-0AmDVd}$XMbo^fRa=3`gkv=8W|;SVqOWUuwWr39unHV&Kuxz+$}DTU32MQo
zae(gn_4B8rvF`WuC$kWR06S^Kg>#zoC;xOph8l>2Fa#w9M$Gi;<{w&@`+Ja+@XV)z
zzK{;}D@`mp;V2)~#V0@jVZm?)ky8t(0GsW^d$gmr#gFO!N~G97zPZDAr6}6)_~WLP
zdD0JG3+{tB7p+7zk4a(M?3ux#ZVgv2YXCL2Kv=$rud<EUQZd)W_;KZr3ZS{PfQL9S
z3>idi+;x;Iu+rCWiFHT1+-FjmHHj}ceuvsoJ*2qrHrA9yq1+u0oK&66fZ>)`<#-fa
z1Pf0)%*nRfQig^tgTd-V?0FNC&KBH;KB~!5hHO%x6iZNl`hEl7b<1rlk;%41rKCbp
zrdwaW88Ehq3QwGo=qHemh*Wx=Oq+VdljU2y$SC|v!tn%=!KvU`T!Y6!b;2Ek27Z6c
z*=a)2d29s0%bd_K`iCN<>?Y)weE53K@w*hYJM5I*R56DpB81$2Li9rzM8aU8?`w@!
z`&&RDWf;;#5X@t5@tq9><I=lUz$*bU{%t#-vYLej?<d(Vg+THXU58Gt5GAaevI#>H
zCLoBj#a3u3N8^&0pnw+$Gb=r}M*e3u<Bq}jL8p-vQ9V{egXKCKb@id&so!?MxDD#?
zIYXH-9tNb{Fd5)599}mJ1p>({LxQVZIDx8RdS#K$>Jh40!B>@JZw8+S%~i_&bI)g^
zfZ$vYwOqaR1Qwi=lsrB9!w$phpcDAsIX$cI+p~{^^fEy=wCjGG=}6kMK&Xy?WbVf?
zO592z<U>sZ`Dv1~4dRhO)t(M@^e9dq00|x~+|_08oDy1h!zyNK{mK<JA=9njstw~G
zZTgyF(3>{ofs+pR)kt%QYm9~g@w3MHxY|W`81+TFVd3Z{mH}tK5hpS|9(a$FxinC#
zHJNoHDO4Z6d|_kEYR6|t*oxc{hIJ#MX~MeUgC|4$*<nB^s(pX|^?(jq_XAIebzcvw
zO2i4Wn-1M9O$pfX3UHqBOWzI@FB-WFDv8%w0*)E9F4L`#>Zg7=$g-t+VDoTd*lqaY
z%e&ZKX9Q2uQd3_L3TC1%UQO@`rapf8vYsH}JM81XNjnf9FZMp;D}`}KAFU1Jod>?4
zgdo?jgG7nrt5;(0o5!2RdkwX<Ef)C-d8Wpr^I2>UY~lk3^N!<BN20-c+bwg)N+nV7
zJ=n8maMcZV@9(S!beNPb(oAqGZf1ll{@5ytA01yr8zyi+b83D_f3+BIVvqT@)Av#B
zno2Nw+0P}}_0)&;-4!>8`Uy)N>vl}$9jz%#2Q2CdOBqsBcAJtd_hYUx{Fr9rhD^nz
zmxi;g9Zmf9a0a#FJ@}pBmce_kGC&?_q?1=~<A8j=?HUA27d!!GA>P7CP{z>m?)2pm
z!umdx;`_LR*xT6SZ=!au$$L?2nJF`^=!<{BOVH+q^?YjTG)8vc;LX*c#c{`Ckh#9Y
z<TEo|>YDj>u;DRf#7+5-pC;jj&tr%z+7<wCfKiMBGvA5@2>fLiyw1oCk=}a?b`dqY
zUp5r)e=BVDkoi98lwOdU-KX|Ltn%kq8?SfmWtBoEcX`rj`Gp&rHOHH0NLg~*bU9WQ
zckQ)R+_A0mgIy@)w>fp;fb{!H6e8dJ8V-h{1y$Y1ByXY>GyNXl9LUlJ0z)fAm&K^(
z0~fl#2;s_}!aft@;`QFUnv1M1x~w=%=Tr_SKYxFM5=<BiPZQ7m^8JtQy)f3hV$Qay
zF&tT7WQ@Z1mHy8^v=F#M%v}wYUh>z*pA;Z!epekw@&uXEEZlV^1ZLZ0wz{9VPvTwh
z%M)8Z!FZXzF1gtse=TDq!cV{EC*ij6)0+O*&nINO1_PS%rr-FD!U%BF>vhP8rBHc|
zr{}Jz3m{X{7GN;a=29hIJ&U|{$U_at{4&0hko-FLyg>|vQ4BqPyz+Dhd@U~2H&)L7
z^#TaE3HV_k^T3cfYX%sX8&b<Try^M(Dx-uv%|tTh)Grg@+!bi3l^=EG&4&E=L_Io~
zoH37)M)p@e@EBn@sGSeMfUxBZ*FD4cEb=gQMiWNI`@#zsdNj3t_+=T97d+g`zxRSE
zCyHQN*K=27hVVIPX@WT#)KDis2bgO>e5hh_=XNXpFGr?<6y7SUS|#Jh_6l$#v+U^f
z2LE?w>VG_U?$~fd9+cD7wEQ@b?xDzpmHarO|9n3G$7lWiT?K?;<VH(tbL{frKr|FK
z@EhF!!M8jL=SLa+@U0Wz8@D7$WPJHsqnHj~^DeS<1TRGnpD9cT&y;MAH2+&8+zy}F
zbrv4t5UO}+JLw;Q?Zk{GxPAEh-&)amMi?*>Rc<Z(<D_M003@`I>N=b={2#aB-<g}l
zJ8+6Z>|~!E&Oz2=h2PWeCY}EacjaH7-SP+~!&vo5>wZ04P)%f1+TD8;|KyqZ$TJsK
z4Q;+ZQ~eX1s%!mfXh;6mLLPoEIEbeY4`LJy+7nFRE53BNwtwq<lG4KdNQ%)Po<)j>
z@JwM|%j*083nTyUc25yJhTyD%!QuWS3c&sl+DYO5t+~~QACirXDzd@qrucD5TS^c|
z(XC|qV_E)nJOAA``(@>0&%pl3j4E8e^kb7_J7LeWN#nhK`B#5!9R$3Qi}*+)%Kh*n
z`k#j1&(T`{lV?sL1|z>YqxbtJx%aAqLpE|fapb>x!vC;1=atKa4p+&_0QM(pdo6<e
zcLVr0mQybn_UG>Pq&q*>%Sr~GNr7r0VgD!3<V7yFZW8U`{-7cI_4VHMi~r<OHX#Rx
zMA`Q6KJ9>M*Hbes{wKCrgaBO7Q{AfYADiqhi`Y?vVA6kLHz{P{4teuhV;xSVx_K9V
z*9`9X`?H>oqD8^rZow(OQk@?LL&p)8H*1gf$X`3+zaEY|-pA!OyR#1V>+%m@w@*%e
z#FN-$_*8#l?ki7*wVB?x{tg|C|KJ=@KhQ@5#dKfJ?REd;<mBnT9K&Vc<1$snh+I*D
zBT<)h?G$n(!lU2<H;C)@EB_Mb{I%B;m?E0SAHmiHKr5xmnX~~J!3EFOV{p$X*`{A<
zhT^s_KQi=i8RA>^FvX8)1szQP=;a=v9oTP$gugW%PE1brg%MapuAm1lwVM>&2Cbs;
zk=SEDE;<EbR%^I*?~47kH~MA66p=Gv=w}f4<FARA;S3O3bK!dZ@~{4ywQ4wn9Hb{I
z35R#e5s6Kh_4odkLpr=ebznyy<WE)C{(h(M;Z9-uMEnz*N1+VwevIGU>&Il;;~mVP
z&qFBq4_5OyxZ{)m|8&R4L!L1H&IR~C*Zeon02qt^bIox6WB<=J|9{Ul1E-Vt=nv1-
zl7yrpGwp^JKTP!BGWM~O5IT`oy*qRGOiARK9W1&7|Kyn{B<7Be4?Q&V*hnblPFEH5
zS3FP-2B4utP^`PUKi<7X$A2stUoTw%_<e5-yVF~N{Xy!=p37VFQ;65HjC}W9OFgVZ
zm&J=D=#+oqMcnHMYN<V;1XdG#MH=IZ%;c3BtG9J!o=AKG4W*|GVt?{}*AR~wUfh)1
zdkCqCBN4o9-Tl7+sU@1Z<4T7^`A;kFv7ox_39URqFUD~y&p)@)z4tbP)R{*&zWDyf
z1_Vsg>6bPg{olWrfaeLV@CqQ&c+$)C*uNU|et8}TnscA+D*Y6A###c#GCeTWJ@<W=
z%8bB|KKfLOapb30{%;u=A@wz26@^0$0rS~s{No*0TL3q|pmpo#k6DG-e7b0=tKsl)
z_<&yLjlU8AG;p~Caty;jT}ZZa1!LPVk*UJPFoDiwu;AhL1OLMy2zjKt4)}6Ctccr(
zpA`UjT-;bB0}btedy_vGmn*Cc4uh{crl)}L*=cC1mwEWmI{OhBC^!G{k4_>X!_$8d
zGRP#lse5AcUia$Ma|ih^p^b$>G8HwUKR*G3UJb&Wi5ME1i$A`)A~NF@)9%z?c$4Ed
zZwq`7WN9IndX5HgWdNLNU-H+te!f9g5cAz<x5PL!2JUc=tzutlC;suK|Mdp}Z{lz^
zW5s7=?CF)wl^Dn0Ay@VSIuXF-SWkXB*5b(bKO1>R`f%%Ym>_KHy!97cwjRGbu57Iv
z?2GQ{T6IsD+x<36tcK^uRwFOa(1l!;*>=;F@83Fh700UD%=4Z!UCm2VUeXNLwY$$q
zxVfsIk*P%1+Hd1Nv)^ta^J~h{bFzKj`9}C*V3X_P#-KmH@=yEyKdwUJIrkH1FMS^W
z@{&P^2TL$E2LtBApN4y8ls1`t`_C6EV?2Z4-(RgkdLDUZcAx<0lGWM|?6pyt&swrq
z)yfH1?Y!hmB{q8yXs=mM%NB4otp5_5s*c|@=*aB2&HiK_{@a%dzlw>BB8HLlF;}Nd
z+OoXM$SoUA1N-DP?<K>~Ki-2v<SS5>0->B;4ZIk|XO1v~K64^e=`Qe4xjT6JG@%yT
zcUyt#$A3`9cy=0h1pB~lY-Dq=xaPCU;@~i2&B;kMx`4i~werT9Ij^mYJpSB>|87A}
zp3wRrh{bprgDXYg;lqb88NM(}yt(L)M{p$yU@;&=)~|y$3n|NVdx8Wm8Jk#{VA?9Z
za-4_iwAUfDbyGZ+#+yMb;>MLzrDJ6r^WQ8<*?X}JPO3eM;c&^4ehb?wt1m(G$BX~R
zAF>0=j!`+`GZ!rhw)V7%GE=}Bxz659B}8`ZC1Msvp)ubmVaV#Xde;xzefiG^(hI47
z_Bp*gm(|?G843Dtd{F!f6Cp7WdUiWcP$&}1<M8D7iNwD3VsN@?A~xqdZ(?5GZ<|Zs
zD2royj(E;Yp`qP&NY+?R^Uufru_k}~z?EDE`Rk}Z`;ZTaO=WFz+b)yv*qJfrbVyxS
zFLRTP>H>D!IT-94;EsN*8X7GlI&7HooL~~VFF)rbkmfj$I?AZ&_hY4_=8kY3uY>Lg
zn)(;ouvA;R3FV~-)T+xyD~w<k#JNh~$5fza-aOkDUq9z3f1agu#EWbc>gY^&R||*t
zm~4jZr?5$0J%UY-HAjPk7YN*DwsZ^6?z#<SAYSMp#Tu8*N-CQk71h<~m^k9wUby<!
z%g`Wq5gC6iuOA;0(P^W~utmu!ibbgP;elm6v6_?QGungkfMOiR4+6`ooKu5944q`-
zZXdHKBKh!>S572we;dfhwZf~Qq8-3F>Eooj1%T?~6!#zZ7)l}(FbTM!2T#*alr5l!
z&;I@Wrp65{Cpwe<F{Yz9#&1$2e=@p%Eb)&Y+ygEy!7->hElhqIzOGhOB_*4Y{2bI_
z(mv{q4%!a;Ls2Sanr>&nd1H`F2nD^PHTUSE2)fl=oug2>y*jTsrei%K$h%q+n;s&-
zin}k7-Aqz~M&bM?hQQ@&GSg>-a>|)a*N3gURm`C=qZ%sf{FSRI=>-Pl)*X_|jixSH
zZ>IWtkI^Z|WyL&NrD@5>w20enAX>5d{EB~fsWKBf@Q7}M7((ONle6N}*V=1i-C?*m
zyGg;f_Zm}uAQoC;hu23+>p@CsKmI%q)ulAX?7Ah&nD_PZb%TyX9aiUW@nO}_S)|Hm
zqf<E7)otfRJb9|Pvp-3d-*%dJJm~gl|M0#|R<-=_t$akL$0Thi9qUhE=B6-ssrC*)
z*&9WTe=KCI#|f)!#Oz+G3S{c%x?5r?@mj<*XUWUFu|)|nvuyLavh4e7hA&6w`b#f+
zWzNqyYm6<fM|9q%-*BA^iK*(Ry8qNf<wDcm#K0qTA74&Ztbd!`H(Wx4$>M6KBU>Ky
z!qoUtC}kNg2Mp;(S<6P+^yv%Pg652T14}c{No$J5;tf@!?AE)8NpYAxMS3$)zU9VL
zq$OL=du-&owQyow5|2Fh+N3}~^R{JD1EcZ?kdOj^6<$>Sbn3zvD1#Q2JJ4tQ14jDE
zyp#SY+B^*s{?vLdM8!jQC9nBc_hUru3YLwmW096kNz+N%c~u}8K?y=0&wv?LTrICe
zqdWqZA%J@!k0!l%y^r)fY2!&byD@)ujryy(sn?s{dogIWR8l(5otEI=v+|glOioGn
z1-qPH?r=W|39hDrPAGj!GVBjGCGh%$)^txpNkUUgrix8(eB<_l&q*A)X&>Fj@E`l+
zeisMX5Ok9*?a1W@d;e%PQTkJ0A2%yybw9m(>dSA_F?M$J!)Yqwu>s9Nm(1a=J$ju6
zGV=Xf;4X8{HB0Lv)gO(fXaBx-mgP|<Oyx{4o0=ugnN4lGHw2CB8gZUPzR)6mBORzd
z9FyUibp)WUV_=lk$kzD&izky|T8?a{(k5JjfkaPEkcaVu0g~0j2m2duh6kSV*b=IN
z{iJclizxJ@v}(Ea-15r{93644Z|`&hTiw6!S0={(W)1({{Up^HY&knP2Y!wZl6JwE
z1;*^n>9&@-9@xPE`mqm{r~HtKbaq_)dd{%SR*XL4Hx&UapVo@NcJF<l4#c9Wo!};^
z73UG{Fcl&yr=?qSaFDKR)du-S^??tdD&4GN9vurzaFzXNqkk{2Vsm*+6Fx5x>{Mpc
zr`KoGgBGn>2u46tI=NLxx{|O7<X<>;=Cb_QCL;{fIYxbGG~k;sqv7rE3?Ec4x@;6$
zEC~jze(E>zgP=^7I}oU|{-EKVt?2j@-rRD=9azdd;{1DSBozg#j$Mx`y$JbnWJ&<8
z_-b(IO}KIdgyHR{OE+q`XxQ{#t}effw|VB=)x-QL-{7^K>FBft6&_wOv#gTQJlnUd
zGo*y+4^HTopZgb6_fuRELT3ghy$Tf8lyQyxu6_!CWNyIcQjSUd`6*qre8-ol@@B5t
zR2_+n=x0O<(Nth6c;-UEEL)E()6Fj}-i#htCw)tSLD~wPAfz=2@7&iockq)PBR_SR
zpCn+SZR-8>NQ59zLu3cm$JbGMUP>-c5QVvue|wEYH&Sx!10q}4rRKV4AulnMwNmmn
zyA&xnvUk%QMN6Xz@|&pfC+p_&*N^{#hR3rcFbC}y6Jst*9#o%!IXeanC1y%P*d>Ii
zVwkaq(iIC+(0O&iZV61}<vtVfJi(#G0N(W;lF8m+GelPEvj{_)j0sKYF-40nw1(MR
zaMKAEH$>ykT6gN-ut`H-akle<Smlo;qrXLsPINbbTmd6l=SxuDu6?Y!CrNXFnWspe
zhX0}G(PMEBIFlYUHn8>>H5R==Wn}G#E6ZWKBZ`<nyOsGGjr!9{NZ7}?-K)NDt<j;n
zVN-x7UwrVTqZWV8F(v{(VR&8Pdbe>&H{E*QJJV%Uk)@4)vI&bzB4eQa^8A<OuIZ%K
zG{evA#L2#%Q)#|le6FE2#mnU#cA9JBn@$6AnJq;RGkcr{HPT&JUG?}(Mzcq^7`da@
z9y#$nQd~yO3pWv~6y8~zX{E(lLwT&r9!SLA`nSGN;Ho?LICj|R^wCzJxUz(T2pq{X
zi_`b?GpjH7F`mg+kI&Zz0hTK9uLw0~cZ}-52NE>ao(^zvr-do3Wh9x2qk}6*45-5W
z3@x7<hYC~LU!06_-N)*e{k~>g=?J^WPd%y)?Q@8nDrdCQ$`=hmYflDpa9!6mKKqPr
zy~5muaQ1rD!hpicBI0|$2;^sN0Lz*Xc;PO%<Q&(CRP9FO)!i{kJDcEJo&`-Vhs<lX
zPiaGas)&?QTe(F`p_67A`kjeubYkp{hD+M{sif3i0pp@*rH)~F$Z=69kdoJT5pxD7
z<hKnV1`*s}pY3J_^A#{UOTL4{T=W2g`f9=So6HtL9M(<FNaZJytIp8vgOh@gCG@f~
zN3gGErZ-=-)o;EYudDcO3Vd@nzV@<H^u_>Zu@)x~Nr(cWx7_>r>iw8)zS@|n5eVci
z6P3N!blEJ0f#Uu%N>D1(DK3M=LbKw@i8Q_-<#WLq-3lTZ480O1vJ<o7OmofMdu@gm
z&giwDRN?-Ox;*z=TJ2FLP@ADCZQ3x5f03~hFSM2KR^mX_NFmom8`$__@x&CEA`-92
z7}~3YrYm1kr5z5!7bRCEO2lQE@%VSmBJC$%2~C${kr_Q`7y~nGi`YP+oX{r><8}v&
z2m8#QfFaVO_42;&j#Vf)v69Wgq!Da;y!z`pUyk_T3S8!7ht{GDcd2s_ADWy?h_n!i
zO5mqr_7sb>YP(lOu9&q3{gZhcSN^<5$E_G4|D*t}+|?iUr{xZEY0RcpX*B)F_A{Pl
z8Rj{l)IFu<Jxm7q#T~aJSITouT`i41&Jmqt@496m7P<B?)uH8JhGM>Vr{Qc0G|wID
z+u-LuFP^uab&kcxz+bb__S>17`ECCmvx$hpBO&y>ON&p<+j3&6chov~m}1mS^M}mK
zKJ96`=f8L5Sm+?*3p|bIAN8##l(d5;eXo&+;!fYSKjWQ$&1@*-sENITiA=^H*A@^h
zPM}qqI?pOqU9@z6v@kvxDaHHl{B4R;JWFMFSuKGyRbxLDCD&2BJ(Ds9e!wNFW<u~)
z+nYXbN{2-Gfj8f6;uK-t_zTg|ys-d=OLj};$B0Lc#4kMo(a(=2lrJZcXyBooiZxcG
zvYlNMXFI>B#YBi)wLwZ+mtGkzI|SML_@H>Wfm@@c22a(qKdLj2ogdDJ{$vLG8rN4h
z^wBB)gDo-irx0OeR*XO(`#NrzcVi%{r@Syd$a9ym6|w_)M!~e=dIzTHy}?BnIY#O<
z6{H`4Fpfy!6z6!5JmQrrU-E5Fza@PL5*kq&?2E53S+x?SDb)%WmGKJ^Uf-VXmr_wb
z4N;2h&jlrCBhKHqkDgKNh`>>I1)5{ShoIaJRVJAsXp#3-_n)DivglIK6>`w}VuSci
z60c=Aee41J`<q-D?o|6r-k#d}x2)eXix8f`*RyrU<*9Y^>|(N~x?GIsxYjD{*In&I
zk*0cMjan_?Q=dT!S7GyprZ<I+yw;Ih^JC)N^VxY|wMK#d%@Ccu&$YQZ7FZ+Uy4^my
z3@(7i1sqfup6Nnf@-a#+O-QFKIa6ahHldBpcjr!MWIu)NfaDX}amNyf_KWR!4v++(
zcp!~1{aTiI1X=nA=m4zpz!M*S!iXNVGElU$P{^{$Zgo|gtXDR4*D<4bJ$W@~cmMrb
z$u=luIvaiJ)j7#J_-+b(BNJ}oJq`LlnLdfQa2G<%DW5(55!>m}Aa`MD)zI|}amh{R
zFt;vxYfOgSZ|>3>Js#d&(;AD~HvX2jdD%GyQ4{k{oZnL9i{s2ZW18U_tXk()@b9x+
zS?AQ<UO;1EC`=z@_cHA-t!{ry8H4ZbznM2Qw!J=0noEBD+T_A8t9bs%YTn0aGtcwr
zg*7N|35f-{Kb+nF`v;x0GXDMLz#jdCDBoM-qb15dy^$~cWC9`18Eq-uonX!c#vFUX
zE3UvK$|KJSEsia;rN2+>ditG`5vze=anw;ia~sL8Au?vHI5C4GSNrv`GC>3_u|_D-
zh0seOF==0-Vpw>nMZE}b>Kt2YbEdP+N~a)rKsE=a#V15oF{!#TpJ5|Z$wXm}hcD|R
zL|N7GVX9n}#q(QJF@aY<CA!i)ANa!KeB)Z2!<Pr1(0NuoWEpYm80dm)j6a5X!j$Pj
ze#(a4^fIQ`h$AN-_cEyzbWGC`+v?a!X^MdUS5XancR|U%MI?!qq}shoWjkf=aq8Pq
zHvPuA)nW-vW}ZA7_LQ?(4JDwVHo7^qQPQ30B6C4Nz3cchDt<nIV9YJwga*8K@F_<^
z5@_Iw)PI@p!?#G*DT;-!Eg-1B>~eeTl|r82{56lzXAJ01)AL4sH7;-Ug)Xv)ZulXz
z%gNWKlvJ)fdn`|D$SuXjd9R2L;fZc!WarI)>Ys@cr}bhOfV5HQnoKCw!Dfxn<?2hX
zjoMPpJiVH<ziq|rj?*o7NJ|hN6v5*7n!W2{+}bb99A?kaDee1-(h#c+n3>|_l-^<T
zR)NVSm{;-c%1ez*e%yc!I_DmP2>+9^wWp4u!r4{%ryHjwQPw>IDJQjvSl709q-mP>
zoSVg-WeGdWKGX0E+4(HN7QT<O>Nzz}G??=K0Bxsp<NarGI@fbAOSh9ZH=5b!sK_$f
zxC?By=og%f1S4&mrzR8z?54})o%WMQhsWr|{a8=!ZxipnPUjFdTHoW;P(Mgt?oOcl
z{Lqz*EJh++wnN48o2vOFpJi2oW<phsnwYCmZhQ6To_p=3CHq0{tvRBf$%_j<#~vNj
zc^+Z%?@c#GG7h=(TB|wuZeqN>ZxXKbMEN%p#w%Kt6AK^|s6lnB4M$$maS&VR+pbsJ
z|7hnDrebr2sE7VXu86r}iC?%-U}%4AQOP8q*5dTRb74vaQ`k`IXvp8`WmT*@(XJ3z
zOg=u4mf+3V+<?eQiBZech=j{Z&z^26r(2a9flg{$ya!ZvkVJC;#VzV}T1!vz%8|=8
z!G83je)6_GkGwUOXCa#;LGnRzm(7t0%ni;@Z53@s48(Pl3*+&aTlsnXmFJN_s<y?m
z$Q6>US)tM`JJdA~T>HycXBwth1kPUt+4nPnJS)E;sKP|jRClKbda^e|F#W{iMqKr}
z7dUrW9wf;y<&VFxz`x4}5mH7Kbh4|t@ZH9=88ELwD7UAL%v*(sLu#Tz47?d`!ridk
zf((IRI3~D`Z)Z-rLDwCV=yC;th43=2b?u9(SgWY<QcLe`s@<>0Cd{7EhAH1b{Ghy5
ztI!zSR9`aFqU-zXxuqffLrC5ZodL`TI|w9+Ko$co>#zMnh!wP+SJ2<SCQ{frg?h;y
ztW?z3bMR{Bw4SRwE@thHjA7W!d92>`8}*FRMU>7{+`~_GqwU|@xjuA=s+;<rUEi*)
z+OZul7haYx@fzp-iXa)^nZuATAU?sM!xVA>>6(y@GTizrn0%2IbyqSWcp(}~q%8UX
zUb+Sxq|zx>J2)bm;8m|yyTE=BZUk+M#CtM~^U`?`-0;y%&!6;#?4B27KKkE}V3UkW
ze{2-+#Z^hBaO!9?`~<}-77Wgu?E5u;ntJM%b+~nXL-Ke(Vxcldf@zo#=IT0ME<fx0
ztyIt0zbzQT9@pO!x31}uH+|<&n@>25KCcl>@pjD<?-&o7dMz89Z63R>Gq=_;H)bo_
z%<A<!7a*E}ZBI3W)H>Z>T{+Tfb<NEyCv2Y3b+=c!s{6pnUTSxD?s`?X$F{W}w=27v
z%&^(lv{q@2lrdrAX4}O!T1sxsebRZ^#f>BuqC|5eq4T7;KP8Ai1#l3vsIw8&3dQAr
zWfo;xDV&OSd?OtA-aABYSb>|kar{C=7kxelEwOJfQ5eM5#hIVah-S;K_8|o#ckHu?
zl(<2+Fh~S~;=yyJzVz#GUC)ZC$}=DH)wH;^_ZT?s`AZ)O?tFllq6(8(86R>>gN_Ev
z^TuA>!6IIC5b%H4U4)hvA*|!UM8&eD65y`QpO2s`+=!)~dQe;hdpJ=Q#2KypPVFJ9
zGs`ozgYE9B(OO1Ozhm~s4GCx-EMf1{d%LoCeX1uxBF1huE!W@)#kfYlvX4^ncvBZi
zZ4hnX7Z;XYYEkeBxW<<|ujZJ8h(Z|paf85lH}q3Jpk<w(7;&C}#7D;2U6<)d<Ko$s
zMaIrbLPZUg;V%u>d}snV-Xy-j39vkEiCSrP-OoB+Ui;$cvG@<qc5Rt{<6CRF?KgGf
z0S)oZjoA&<l*P&}z*IvMZk~M*TN~+1u68MzsxV$=@-)?YO)~W1V1K6uA`z9f<rKBO
z<juGE)DK>vsW~kRy~a&-$g3FjV^)1~V&d_x)R)*$Cy8L3^{nxoJOI~;)pQ?-mXrjG
zlwftclm?GrZY9V>oK0`(FxOT?+Rg!cq!h{}xf!(aE_c|4`-V}X%#CciN|WR;q-n!l
zz~A0fQ6CQX@#pT?3O9<(qO7~Flr)ujO10dvJ_uEPpdWJU36ey#$_&Y|L?&GoLG7q1
zWoO*~GoSP)tlju+%Q9=XS1}a&uJ2&EZ7dF#X5MdLLjm23EurtucT-(9cclfUM5jB9
ze(XU7#B|v|mW{CNwVTNzCUstkIGY;eua?<cmDz4<YiPw!5wCF@$`US`7P!27mETNB
zv1|fo@nUSflAw~DS$*rk?}T)Tuj)gU(N^gM?~6RU6`y++cLRMhX0hdJYnaJd+4%OI
z3{FR0bL!uh>`W8QcZO_ag8qj1pI`f5&brOnS|R`ZbJ+xnK{$AFO2#=l*JadrwgLUi
z=?kdOkG(|vHq^$d$@6{w5y|goyy*%A@l>A?Yx;yntEWtDe<f^%H~#tvcG61AZM-Uz
z!p^<kAlx%{<Ija7)^5!X*zYI}Z_APt+2jfGnS;@(g4ji+;|uj;T*f-b9$$uZ`BM(H
zp23~Ob)lrGly8Do8>><jEa(=C<fg(cmt7a`s1_obocZ>*1Y*3fg|Vq9TU9M;!B7Mn
zJkFk&LT*uezDj&r0l@O`9*7_OGE%%5kht`@a|aV=w^Wc+Q*MV^lYLTrD7~C3#Mhc7
zpkF_-IpdBAr#ixLu;suDbOdOIAg_I+h@~C;_@YS7L`4T{w{jNwW)PNT6Q}O-T1(vR
zdK_5@OZbU~xjUJ9_o2B!jz^hSId0u)rLW;bU>|MGCosW8cvD+VhVePJ<fgT?s~E?j
zoWol|_#M4|^kDuYpxdEpffmayLxvxf!F5z!*k>e(l*4|R<m|+>(ySiM*my!tZzfM<
z4`9R6KqzGuZ0eTe*1N?>9Uzc{5diJ}l`;3yL}0_+Ja{A&Zs5{*921RCs~~KGPL5hf
z*H8qFt3tIveSzpz)13MUwsA%BA2k8@OW07T+UH3nNLS?IaeaRS+HWrH4P-o3v8|nf
zZjy0*mfs_%Of-t~$|DkZk!LC?BcsPvi;W7(9Ik70&yH;;q(6%p>|Z(-7eSU9<Q%>4
zaaQxd`jio)p?6aEgS-kMTYo<!fNIc9VBM)!eeD!wpyK>uCmLm5v{`zu>ULlx&*jPK
zUe-(E+w`)$)2<T+hRpp8HcF+YPP&;3t!cB}=doET&j4eYi3a`8`tXBgw5{@)0qgYi
z7u-vc4l_xF{KwD_tI6MkdV%=k<4rA)AW3WC3x+zChWIhQmcAqwj-QhHQDphnrvcO!
zBul2^EG*<NOVRh{O<k2#eO?v@PF1v4&#Cs&qqiJKyh3)N0Ml;`6scLtkQ!!oDH?{<
zw1k^^Dif4~&Ow-m$I4e_r)@A}A^l&f;<t{@wT*67i+$Wi+bN=&;DBVd6N>B`VtB65
z7Fdt7oMnQds7#>>Uga5k#^URZgvIij{;a-L8TkS?>e>2@SlVNpArA6h2Aq!=g`DdP
zH>ru!_u=a?P!<AK?t9I>K!nMpQT+)cXDJki3N{NIfMy{xUeVo0YfEuZj_2}#r>ONV
zS;&;^-m+B*<l8fIJ4j;Tfyb9;mk$3}pD}(gm&|Z5+)}={33wDVu0xS7Th3ykxN&xn
zaQkLh3U5jsxqW5)0@VT7bm^fhB@T|AQz~%23$(rHlmU}rp)f$L%F4M3OHU>89Yr&y
zX`uxB*#o7B)rM>CPQ1vi@~dHarvnfuQ%RFsBt%4+n@CpV?=+v9qGi_#GqwB@ei-SH
z>Y&B5xscpi49C}$ZWJ#f-mqnq+D+tyTq0jH?wtb22{eZ6ONTI0u2v8(0DQ0swIk^u
zofs0g%rZ2b?8Yi8FspsfWT8ZV2x8pFKX+Z@j{nBZPQ1n#5AB}Bl^l?bkV8L&Vv@dR
z0?%#9$!qw{75!HqV9SPQb+2V_`0cxh7azsBdP25#9q(XaiNhxA+qd1Qq?-ikW&@ou
zHU0<Z`rlnqvxR8SqC9yteD;8iPdsnAowNoCElRTN0(-W1EI$`8tT8@5H$z`R81Xs%
z#!uk|>bT5saf(e25;HE8?3lRx@r{umT8_Je!>@{VTu>N7t$FkBKFVy@&NUe%HD7!7
zZ~-8z%?V~#1)k@Av~r62@j5xuJFx>4TnAcT2J0=&>%dSC(i<CoCnnHKP`j4o0@O@^
zo&xF-5P{TCIx-^h?&#(~5|gc8lge9A)jWfgG_#txQi`%Hv6#jme@^WVfAQ!};bMuS
ze~T9n6Y<cL#uwakiN*Nq?#C#7091H;y)kTdd|`-xyESk$&YRK~m#y~2Mh`TevKK@Z
z0VD|#`W|$;JH6j%!X?@S%ca(#gj9_X<hsNJgwYY`(lDdgMzRz+xoBE;(xJQ5j#xw;
z4<T393$WHS1Fn?p6Y+7uA#z>kc!Kn6(9|w(kQDEmyv6&QL)SwcqVxxQ5lx2YZ@<-%
zwJ^8BGS<q6kJT;UD7bF<(EEt{r?ZKl%{-k<!#2tow}y<MR+D^IT^6ER_5H18*J{w^
zc&Moi@>afZ&^}brrASo}it{Xg&YMY2@!c9XbZ}voF3z^es{p8GV-x-h)rAX-=NZ!T
zH2ipH4WTCZdc`2}_Zn5~b2JkC2>#iW6s>9bD+1Zi8?Cnuz<BOmVY~I+(_VALvFb4M
zY$Q@<P9K=?n(j_<-NI;MRF8`<$L=kkBTYB^>KXG{EoSHAy@Pv9L$1;C`cEk*G^6db
zr6O&{rj|z!E_L=cN%E88D`oJF1>pV<N6HDJwh27`?sPV@uVtf^jo3dOI1Jzr2jSpY
zx=(^ct)FkcUo*hZz0+0k);X$u`u3SsM1BaWQFWm!G*mfQO3^JGN6qqB6K<C@a+P8&
zvB#VDEn26b0wy!?asiTyaKrR`12Hz+xh6;1Q02(d3Ty@fHQRYEXBHpj4mHJ_u8>Jp
zfk$LV?;7!@qLfo}wqD+R<V_*_<Rt4SCkPnK0W1u&J(=M=(Co6F#j#X|UjIlacgVpI
zND!%+jos&@7sOo3jvgZjq%i+{`u=wB6n#pn)G2qQ-lbbWvk4|k^Obh!mF-%`O(f<W
zodp;dK?}aui|5B5HzTI5X{(z!J?PlY&VuvfP_rlEcGN8ec;eD{`Y3QRp2wYvmjbt`
zQd<h9pBS&3c!@j9%yVXS7tlZoC{!Pac`NeD(0d554O+E(y`QiL)Y=`9ou=VW>FuLc
zW3kM13I#yS)T=DoiD%Kn-nG_Z(7L+{Oq`0-9@GaoqQT~m&LVXHoli$xWW5;1XU)70
zoS@miii4#CO0!M+gw-O)<?JAs(VT9Ht8%(wv;;A3^oaAa&TC^L2oFpo>1Lt(wyDwn
zU>BqqgVEzZM!gj0N;>XnQ2%0V4z!PyY~l_p(+K^>AGkOzm)~2^0`F;6>h+H!I<5Yb
z@8+?>>TM+2eWaXUk3wNFX5alFXydevC;n`&oAZN5)S#C)_ssGM^B$jXrFK1s^-=?J
zt6i{sClAgk@q9wjJ8Ph{9oc%OH^LT3_NKy@Jxmu}Zn9GDZ#=Qvta`fKd?5DhOQ(xM
z_6F9TW=x~u{t=ZtL645_MX}%S%%Aij<S%{qzk(-bCIXDqGdO?R6sC(cF7Ok3r$P;+
zYWcp(JFYD8MMzdjxy^Jw2<jg-&N?<DfLyIaJ@>QX9OrM~$8mxV>z?WOn?|He!NEh^
z0Ql;dH5;mqA>;F1GGiH@TnNWP7oXn$#!fsiHQI@5QH%M(v=}A3wKQYQ2PY6R1V@7A
zG^ko<_L~&4_A~~azpVj1B20Y<d%<s;L^deyr2kb&g`KrH1VWKXDkaPQrXBWrC`Y>m
zD`zNj6QLBLB(?|TKpP?M{8}p=ZcH|U^arG7nrUPozbw*<c-cFX12Uc2#5H?oaY)Vd
z!pC~1!eC;yunNMJRe4dy%sZ{Sz-Osz?p`p}8Ntqfz}4UQ;uhsraa)53pKT*+H-Utj
zc@<%1HL2mvn^&99B8}7*wjD)N+26~yE<5wYczm1c*WcmhD?pKGhI}X$S1u2vmB)gm
z#gne5LnAD+teP{5NLm(9FeuNGZSmff7PS<-w6YUGVbc>=ByBpxkGP2UHiP5aK&$c_
zz?A=!?RYH(^X{{Ar@^NfMOD@cEVngl=%6?l;#~pRwYc=`un}4Bta|`{x>@Jhu&Q+1
z-R!0<)BF}M^D3t9yTj3H-e}5e8<wNG8w*rvgsDLkhv^R4zP9!2$aic;+2E&s_ox~e
zJ4PM+>qFVrXP(eOaM(n?C8WI7vi8*r$$1tN8mKziX&^52qEl`E#fkpRhIGGleEdzP
zauJ}fM4;Dm13{85Wna_m1Q~p8ab8r%=u>4aF0h(JIUAqPN)X@(iByeN5P|X+oJ@+l
zQ2!V*uc2rpH3d!+gk_oFA&6?^@URmHzXHH7%M+swtfFV&E(;Z$Lr>K;&uW!bAnwJ4
z?w}aDyNTj(^4<7F7rLC`EU^`2%+#3VPlTFRljz>u?wRphv-DnFbeiI}rc`nsab0-t
zJo!rZ`!QOAmiRE@I-S_hF~DEq+A%SL60*l^mdWucVg7ANPBTrNOHe!1DkQ0vRJ^tW
zMh7YE=}eozx#>h_B*k7$r1X96_g3`L`IC)}ka}cils!3dRs;0H(}wg#!QJs~jn`HQ
zDKHhUwaMF0gv^o;r$V6}j`4*>?VNgL%SJ*-l^xgS`#(0{fa4<Qg7>1F?EY2z0VFn?
zuB?7WBK?GUVvkl7>)J$4J7qk`e7Ax+$ojO%A*~L%*)xQjfPIaD>`ox=M5^lc+PAZy
z0pbUPpwFgW0*2(o;Z|80AZKQ2de+sCm08X7{nVorPxfaFHYH5kYrEUt6Sk#x!l{Mh
zSgmhoX4S;@532-hvrc?GYb8GzdPcNV9guCD%@Fe~ZX%TydlX$VsL_#${x(@Dj4R<L
z)Q6|rvkbTL)go8Tc{V2BjSjOP*r+#jF3wJ^WL}Xj_02iu!hcC@D>>0}uN+;o_VL4s
zF_^r$5~6AJ?+#bl+yyhhREVhP>t9e^LxS@<?(6K`)V4+{K>xTvEM@Yc9LpR6fA-v@
z(L7-Ia$3|hw;daW`=8na9q>vW?>!J$AXfAE_~U)sA^U`(^2v%;h@FZOp<8W-cq4N_
zh;xw;VUGZ)5WHxKz@*E{^D7YOg%I0y<!+X4o9FkhLo6x9W7TlI<})7f1W5Y!AV?&E
z=jkqQBBTZk%n9ck=;R`_z&f!T@tlp+WU5UqAzK5+p8;dKL=2>gmR_2cr{|Gmada8*
z-Q?rpwV9NFHdSfns~^03DW06wtQ_>pZ!?P=gy@#RyX9>bfRo9Y+C|cQfU-Dl9{_-?
z@aPq7O)1zJVl^l*#HBceJd}M3EV;zQ_3@Vy)u0`3K>lKg<eDV5WTGnEpY<!=W(boh
z6R2CwErUSplP8af-`=>B!;3^3=XmUvaBFn+Zhv!(#x1KWOD;$s_L}?#uDDN?+Jo?h
zdR&euoMpf$BP@J|AbXN_aZcl_CbuoIWxzZlGd#h%n8v^NZS8)R4PXr`JJq|kqSYZa
zQ?p-93g=~q9<Bp^<%26!2XTzkfo+GRaE?#b88F7E;<(uhi;lDhZN;3GCv=ItB+0Z9
z8jXFOqj+eM>A@s>ss3{n=~GSWp1AT4e$O~Cj>|k2z+%*L+eApGxOA>e;c+I933Yh5
zD+uXFd|9!6;4ZO^82?g);E?uCBktu$@7d}Le=8irHJg1={t=L6$50+asi!+ybm-ni
zk?q%)Uiy5?bw6*~x_H8&CdsjLn|7%qL&NXw-I^UWv8yw4**e1<W`+B$@v<cqRHj=O
z(w)?e$a81eH7Y|KiLE7ymsig%=Vn%QJMMo_+tsLdVbuv6!6w^V_t>=C%^qETjrW?F
zC~9#Q@3N82__W<()|D#DTuQ!cL?oNmOM=`i-wwMB51BcCzBLGXC}EFRR4cbg(UW8^
zL8e+*_5X19mH}0++Zw2#f}(^XAShBI(uyL|C?XxAbSfa--6Dbt3P>ZJg0yrC2Hn!B
z)TEn9bH|6e7JKbDXP<TNpZgCclP}(Pyd$6S3}OTtX@6CF?rUU;1xLa5yz3q#-@3f=
zdZ_np+g|;5<2NR5BFlk#h6xUmw!Q8gk}{W9HUC1Ev)$_J@&HfcCe&aNw}?He`H&}6
zaj#vl8+QA#sOnb;15ns62b~xYM<;-7F6e$(yjF!)WpaSnmDo5EQUPzgRdPme*PT3F
z<Npv3gj?!0frnG6Rdf?U!bzUXdCmwH5z(tZx>Y6YA?Ym?VnDI74if5hbcfU;uu@c-
zclALwY7vrC%)~9hRbCdVz)+$5+CHfgO3U|Lm`FOu<93;t0p~n&O*Jm}gsl&&?di1l
zo0~b*fN63v0;hVc95PS)1>!JoTT68%m#w~`&QM2|ZC)r;d*P3Uh`IP)185`BUYbc>
z4Yl`YD4D3ZutYcGFYCS#q7RL=8Ghg?q;pv?xYVTyY7k`Ht`oQWR7(LCiBDq9*6=;X
z9nWB)_<`FY;N|c``}dZ_=YJJZKK;lK?LJk>Px>GS{PMu(LD9^Oj(X+zOhIel?PeoI
z0HK1R&CUWZN1e?v=V1i)HMj_YrFVydMj4hC7SZVR2x$KfN>f03@xk4wvyz2<GdZ^3
zX9gg+2s^G%Pk~LdW7zJo{KEjr8!w?EUtm{U?7F&%KoA?C#?3y5-q=nM4WM?9SmFz#
zJ!~&^^ZPUCh#kMH)ObOa2CreBy*H=g?nzMudHgF}KSD+YFuYSD?|=PHt`I}>j4@%3
zuWR-KNvWMsS<4=WU3;O?yHwp{ih82pwHBh;O1>6xtM-~pTkz7jeowE>UQTHjWGn_q
zL`8q8#>uEmM<>HKb61-q+FhUQer61Kl$rB2P-UZunpbPWdg4XVroxxhc?qwQU3RJ{
z7p+H&+c7Q!KYX+%ytjL{DuzPO3rg>C5omb`IeztIT=6nxY2%G@Hn!+r>|VFCUKw37
zkM{}Rtsj%^nU<#bLbw+>IA<GzBIQnRr*lBhkfplhm{&xg0_hqO{&>fK`eF8>j3b5?
z*4fdj@=dY1nRb~-9v46vnFEgR%n2^b%15gn0g_<|lz?~-?Yc*T0DjE7!AJbzCy1w?
z^-@*l(L@7Q*aHM__U@G4W!3Lcri1L=KpxK!q>gBBfPkTZ4EB_OUnLfT@m+KpESZB8
z{Ew)18DLfvJ2fh!ED`R_w0t4Ajv@6kMCSLO(e#^r!X10OA1Q-isBCkS4C=1S(DUda
zu_6+1z42b*UmtdV^hTRrfU4RG$Z4vf4(zRE*{aVH%)A=zYyv*;RmcUMDRI%&s{{m-
z+_%P-7bi6?2Z1N%hM(x~?6S8t#JU?+i2+!J=(=W|bwSUofnwsHh%8zSQZkJ!JLD8z
zgG)*ULkY>@LK2`Eh}elQDc~#Uy|i|oSj2Z-7mRS6D;i@Ub$K&VCzJ+aXj{6{CeDsm
z0c9F5a{Qc8-46(2!Vai(yj&;P1E|g-aBF1Li1~6OM~FMo(gu_vG+Z`x%yCEALuoUk
zVPQ%X6OefkB)85a=6At4D1>6avuk^ct5`E(=od_&B4buRr<{{}QI)Ft4f>fl>&|A*
zn+>i!xN|j7!R`YwunPmf_Cr2wW0ysPUwjNoql{kzX*F~K&G+%g^hueTEe#;w^md)-
zUb+x9rckjdck0Rm4Slh~D!>Px3Q@HXJ!KV$jt8s$p|ZUjE@aQE<9EN@wR!$9k~=0t
zKNZC1y^dsqmK3i&Nr^>Q4eiX?8a~5dzuD@*pj~)>ayvJHyn4Tn>t`aMWf!T)4XOJ6
zJZ}QrI97lSyvN#49InC78(C5QVPLrNM_XhD12$9cbw#SJV&|=JtpJ@0sd7`jljM^d
zDedK6xcGaNd>8oBzh+6F=c2r!Tx7eE%|FD=vTL`cyDDXzZC_kX`)S<AbY+LDW4%+j
z;#GX+M#3$BaaVTfv@E;EmS@F2jSHT=R3~w7WMKY7g5tLh*gqcv0Y@#U9<p3E607xq
z;l9%v)4UfCpAzHtEU<b$riyyY&Bu{9`t%!s|8J~bS>5-a+;Jc~=hwaoeu?6?e)8zk
zI`&S*_*jFn3CqPDL}RN{^5+}|!msu9MPFCdkx2kbP%o(~;V33gcSB%VqByFgY^D5u
z`Qu^y&k#l_%(F}u9a>F}_d&X_g2JP?tPK#D7g8hc;I8hM<T>o~J|q~>%qm5PuG@B-
zNFa!dRh37)IlF8z)Q6MAZb?~p)SG$B`U%a&l|#|B^X49D|GgnjCb<mq3_o98yW0+d
zRad5__?veSz5mP&@Rtwrf4S(B;ivNC_4Oe)wt;{@5ugLRfrv5uBRY1#rZ4@NSPdHt
zAGHX*t^cHBq7;&&#OM!9B<gk#k=n?YE^wplPN5X`B??dzr;$WLtEwmWXdxNH?5PYt
zH*x#D%RxvPA0Q@0KcW%;l1N@LHuhoD!Zx6MmE#*PamdU*IcWh?_7ue5njIuY$Ps}C
zKBlK#zcFomnB)MAt1hbbIQO}1&oSm!=q$+q8_R(H9o6+3&Z{$(g6GmSG(3=Yn!B^s
zrrJ+UbeWq=`RHBjo2swcv~^*e$b&;a$69fX)~9Hx-R^stDEnpN&>V*Hy~Zf>VVj*t
zK2aLjP|WAu=}ovf`<3-aqAlH*QRUjcb513;GbKWMidN;BuJ<&!OnP%)Xx()prinhU
zFehDjTel3S(feO#93XXY-K`&Y10p`7wk%+8@BdO%F6%5jGgZRPkrKbBQM5_jlyrU%
z(h|ZfcjXYd)LbJ#Jd*t^=B4lx%;MhUhRu8=!MjLl=Hz^e8pP8jXZf7$P6G74Ru6`k
zn43#GL&&ImOi2;apWZ_0MdDU!w1O|$W`^Orsiy+75VMb@wvJpL?XnI68hw7GZWTAw
z_G2%t08kom?*WKDb-6-L>fW5qZTI@J(;?2%-SF|bs<v_oq}s1#H{NLHkg64UIRtQn
zYu`2?VX1)k4hb$s(sG*K#!3wiLE&<Nnkn`H+eb|V)V+_)0H5c_cSxN)^yJL_?C|(3
z=_^0(;0g4VJZ83Gs?3lPAMOl029oUykga2%8msCW+8*b4lhjd<q*5AEtS(G}FR_Uf
zX3ckA!ORKItXHc2TizPm)Z>x1gO@Zy@F1w!Im&iZb9;R;z1O@Piw7#fLg7eu0tmP?
zJ=d1=rl4rZdZ7Z^L}-Qz<XC~Y(Mwgv6~d{`vqJ!SAhgGC?Amd1Zj|L!rJ4`t->8-L
zszz+Z*G!kyg<}!Uzp((R7CDXNU6LFF4_3l-4xklOv`R^D=0F)DgyI|&0?bXDvu8oS
ze>o3C$MU6LI~4#*>#<~LhIM|-aJ8W>dUxd=wVfW)WHVz5?P9o5)oti=z!JtXH`2(g
zVw5dZ3fH=}K5=-XsP|+%lC$$(c7UAB9W1iIsI4a3^7c`a<tWHvPP1<m7UPLzPEkpv
zw<X^_VDt4z00TE$l}7l}?STeaL<_IjudG&lc^kqp_dI{-+(M+?On|O(!{$QE)}y>H
zohIhoL4zLyQ#8Juo0ooV9+33qBWKAMfd4#tY=4^6VPPDVa@D3PSJ6qP0M%~zRlp;x
z5gmE;{-cJ8_D2FkCfURNY7hZ`iY20Oy~;eep(nO7)5%VJp*yeX&~q^~JKq5h?7)*E
zKEB%|X3>@<%QwXGdVBExOerJBMs6EWEG)zyCgN5>3E%C?c)e$I$9Wkc*BycFe+jL{
z)tD!kWVQ#o*`Q~zh9BuO3%LE%Vq&V_nA?`FIkGgoO_!w*$(eaYc1{4uAQZ4IWZeD4
zUFW!Mj9P73G9*)zf`b*iI=YbZ6v>KI7#poctP#suV=>WB(0^3cJ*<N`BhX&(=#~|W
zS0h`FfY+3>wv3?qVPNEB%y0*~@*6tGrcP7JU|<$4@Cy<%WRLDpYfLQVxguG;ITFr6
zfSTr=H5n9SOGx$?_i+X=GSXBbPw{wAVQIDC^e0TnakOWkQD29X?%$sedabW;fN6{Q
zR86$6&XX}D)Vm%~slVZvns0~S>TfPzm5qdZOlN;rnjT}4)2mXQ!Yj6}KpOb^8sZ&3
zeNyPA+s*0-n{5k``pdHagJHC?aZ|l$-*O9^sJ(&wqbt&8wniULfqW<T%}4Oq)p8@a
zC3P1~F9ccf2C{7R>u)0nK{yS$O?$_M&zs*-h1|{;OK1?WSlqd1sM>72G9;A){|%99
zt`i`C(pzMwufGA5N@&*3T3;6_*%fG<x(S_8UQHI2t)P6mxX29?+fQiU6vjG!0Nl(V
z1OYhGyFo3J=KyrVzZ)0{X;ouoGgN=k!5rzm6BF;T-@s^7>NH)rI_uc`IsO|8=?CmO
zSw`#dU{$Z(<@zuFpnq@!{;IfJK=OFG>!EHWzdbv|!!YSklMN7hI?#Z9XG%WKLq6}S
z)B3_v)!24vCt%LcLa(FQMwKfn_W2{|?l20PF4Er%|8_|rrtB!p`=fwXeB*f&U6g5W
zuKt(l76>p2VJ{sJGk+CA#^7mQ=y1t~8n3VqM?GLciKoH&W}+y-cu+0?1-VC{DU!F{
z$f$nr*GD7TD}ds!L33IML7cST9@$eDA6tu~peKS9|B<&7cutJc`;POH_wmg0>@T$E
zs<ond+Apmk$G*_mx8zY&`EtJK7TKRw?t`h!-*@`CGJ54tt{i=cW54>qpzyBGEF3&~
zzQE}3IEf#S^m2vE&JP5Lrl4-0xV;Xoj^r@%i+QgkvCDROPnXmGklPvobQ#NP-f~>w
z$l<#r9d#b*YN7e0CPqtgh8ciNivZC43fMk57pJn-PVZ|?H?`#P6o$w}_7g7$df;V5
zF*lY&!pcbM=N~THj~RlF%lMt@xPQV5>To<%q*+;L>yj_&rbF%TCv=hA-U*vRiLBeH
z?+sr4b)*0Jm0KJz!4;Qm?S{@W#b29$S#1*1M@lCt_;`>^QJDHRf(YMUdB>lgeJn4r
z%W`^0x*b>`jA{3q*v#CO)DQv&2n|dkpe}QbybjVugxKfJ1XkvUT;=f<_Q(Zde&sOn
zuE+}hfg}hWfUfcDv#+2s`8K5Y*EV7kqLRPk)bi-pCEVQhIs7B{U9&OK>UYK&!fI0+
zgO%i|R)$&q1O4IuxOM-KL2>I*ptMbPg~YEHf6<9;K#?iT;P69p7SfD>R3M_9%^M;<
z8nIk~#=aUecd^R=yH@4_;rtSfq!h7m$sUx-r$eNZ4FUgyDuUOshmRo~^%m6{e|A<2
z(Bi<vhd8_D`wB`hy+sRhbt#`8Hh;K!Tp?6vh3gm3XRjdAZXD=z!Fk8jyrHc6E8@^8
zX`gGTkUF1N`6j#fks-&l9rl41`+wf7zkEW*=vRq@^t7UwFcD^2ppLQ$o(#qQy&?j1
zguhe7(chgFT`0H#gMtFCTDoxa`Xn0FSRI!}J}y_8g{gYhYOoZf^QBuROu55P7iY&p
zd@H?Klow44)m>-v)|V4QK0|p<t4r<qR~*LlZ${YIKbb7@iIMhh{lMkI=`VecMlCt2
zYxV|-=A}2Y)QfNNj=yFO>Asn-Y7*XU7seb1lwHP>>CXS&EdGA*Kg3pm3Mo$`%+dM;
zsD<BD1bF=Te<C7L{g|X#S1d+rkP4>vOFUAxi~0Q);*~ho5jNlvY`ank60wvoRNb8Y
zcHhhFX>X$GP<i&^*YMAx?;=hkkRxv24D$iwih+FdJ&ir(2T{6%_9I0k>MM7%&8-ZO
z?fA$93k<3M$xD)9XQaz_eC>APIUY51w_bhRkD5e}@g3Fz-SRcgl9_BsO*;>DuS1LY
z#q>`Oj{m53|JY7S%}RElBsp@Bk_1@;1BA=8+VD{Wsx^D@?m1|9EN#`y6hBFNx@*8p
z>*NKV!ph>;>1JQXLaH_9%HAap0u-rm;fMI+V?uT_*{)xEbfc6^ma>L+Z<KE|CK_60
ze|?|&73Ph~Ze({2I*D6|YDqtJK#pC@9A@NI)!2bk)*}B{KKxGxlt9n(kH+?|Z}6zD
z7{VJgD7%*ZxjA}_ps|c;RfJ1msPiqJ#q|;Ps7a`-rd3p8A${X^C{tGiu^t@VJaNHg
zg#u}f%B#DK&$;jsNe<K*m!T_BfMyx@>7+3&qFw9Wp&R2W7_@Or%N~ErzF9HXYdA7|
z82|EDhZd^mU#Xs7=w%pb--i|v=$$}r9sB+OknpF1`9rw=`3Hd!gh@vJ2-D~gj++<>
z3I-h_MA6;f9{gFT6Np(x=*`|)Zf4R&zryX@dstLpKOV`EQNH<B(Zz#^ddN;^1Ja$3
z_B3{>?+)1O77aG9_0ak7e@CaY)pde%UkNk(=n<-gu+Q)I<-<)3+A?Kob*sDo<8uE+
zwFzm0S9R5XX|zYDc)SPWXtC|Q`Vqzhy@toE)L{u`txTG^mK$zv*3i_IMebJff5{Mh
z-qhlV#l%#!{%EY41bW`=);36{&g)#_*q!)7G6Ei`Px;Q~7q)tqa{!xt8#{+hQA(lV
zOk}=tO87G_hpL9lZtc71m*588jplQH1oH`yy(}DA>-*v7j>phdH2lL`Yqg{6g_HYD
zbiXBuuPb=;Z}`8}$jZqPL0~0a<gz;PVHO75oM|qDGXEl!T!cbcPKo0wu@RH<6rN|e
znsfh(%l0~?mt3o{_Z<0yl{dq|ZVGzs@<HvHx}QoMjIh^YmmI+0BkdsLL^HuZ<OE4G
zA>x-F#LAb8M=8&Mn%U-Gn>*5!w7EC3u1kE)J=>E&=psW<qJP;P9dEzex4m<Fgk+CV
z>Ch)6<cbSj{7}H4Jt<5@U3<euE1Yy>Z{2Br@B9Rd)?7n>SdndMx$kpq%Xzd@Gn%KF
z9X)7SK7=N5^S%r1rQYKYEMpGP##8<|AMxM*L@<h3Tod1<)>1)#?1=XhmbYX?L^|VX
zG6%*73sCAJgI0wmY?l&5+4P1j*9Ma$A{o+^^VW*cHpYE*Z}SWrEVJ#G>)x{)4q#%e
zP*-(#sRwaflJHw!w=1~eb%vRN5atD9;m%$0H58~E3kfP6zGvfvqS}Doa_!aka`c^+
zo;<nw17g9<N{^--Jo$6W3lf<$@*8-%l3OF&3N-lblSkZ<=`#iSrbUUKrC0U+1Iw1g
zGMx>g9j)i*h>tvEdZeY(7Jk1WJ5z0B$v(-^*8brFLBS3AOm$j8b-P>05RZ;ET#kOq
z=8A>5ew(dXC9ClsT!ds_zy^7{0o^A%2dBFnoSgS>mvj!ZSRjF=SfmCs^VQ6mmMcfq
zUIof{%<!C;Id@=`KpGK@0`@N5D{v|6m#>H_E3g==ukW{CPEgDiZ|`@%)r=olOGu{<
zWu0bTIvDy}zhZV2*RnfzjJ1Rn+H}6*rAdUbeRwp+uq^bA0ej@f=wL82G5{gP*dz)K
zquw45@=SKeI=}BT5c%Y6+?S;6i?jd4v8;e%LPZNgP3IrRWBiZ5S|mO3WW0Fkl9wkl
zDpVQ=GmM$w!UdD6Gb_?}?%a7i@3Zy~^HXYITuMzGVVuT#eNfTuA0s2PykEb56+>U(
zO_1!{N`$FpF00yg;ih#TF?I%elhsOmB19$pbi{)T^A_7#D@1xeD2O#*7@+0ch}d5F
zghqC`L~6Rz_#zYa?WxXm#uD2-I$&)Gm~}M`=t!0Cu{P++V5VhZr2WFme2Ep0)Zl_?
zdvQ=1D@->u0ogF>FRYwh&r7eppCl5#)%5&45B~zEy=B|Qf{{XK3!%MnBO2x<vZ~*O
zrG@xFG!aLkXm%tY3wP9W+7uouq-Jw<dLUn8Yikb%BeuB|-QOQ_M`;BksE!R-3O65o
z`Tub#2?U0JoDz|eB93&7bzK?SeE!kHdtzJn>l;rGkC&eGC<<KJtlg$p&aIaY&U<*~
z2?I=&?4n#W3Z&k07)}vgiBUtCFC=Sjw?A%7F#BG`=a|?x<f7udRg{{Uaap4=j7G?d
z=$fzox<Ek5+=pn>&eEb%?j7f?3Ei!gH@1Ue279HBLoP49ye#^<B6@NX#V4fJv@{xb
zlnpvEX65OazvJMN-3UY{Rj|U~u;6FUj)bjm9wFs33LO}v@wE<m6Mr`>8a>lP6O@@U
znxDz~xG~saRjt}-1$9r~*;HJq<ne2@YSN4>v+o6M8M7NPShyKySAJ-g%zd1|stK$O
zn2n~ZSPjnAx6~jm$LuEhdF){Bjvx8d4B>w%od-43&-Hg3K8>8P=4zOukSJGAY(dGw
z@`cxSwo}q!b%r+N4D*z{Zp-pvou$t&*R%rONxZp%j>IQyq1#-YV{T6>)9UJRUGNj_
zZ1?YgF^k#RAI#ey*TO{FfoPzds<RGa=;a^kjB#t&-afIsTrw{eP+sQH(~Rr1Yd_gj
z;u~HG%?V?hhMCzEmVh6*W*TKR(=zB{g39{7^f^GfmwyjZBTK!Z3Nz8?IE*hL6?@_e
z%x?1iHIPSCPsfiL{Qno$fDqQ;TvIK;;Iua#=WD+eB-Qwkb33iYfc9W>oa>T(|A2mL
zLz&&61}3u3L@Q*f(Pi5&6&mv!t}&4=%;c<To!jld2vbTp_;sxdZ`b<Mj-g+>+L3Fl
zGH~=(tL-F(YgbkYB{hi)V%4vkkIZZqr{{lX6860iWTBIhMPcE|c>boD0E4>RV7iO1
zdRgM)fNlLM^o759^QOlvzlZj3>e_!&!hSn23QT*1v!ynwVkcj@{4KA_W0$qC^Dn$D
zr(a{8Xi!;54`fm6<xx+vqJQb@D}CRWgh}~gN9vGv{&AR2rz`U8nriH_Ai2(51n1f!
z`Aw(K(~7KTGGc<T`8WiUB%)^8lSSK;+SYclM<FKlOGcrtbIOt;8})zI1^+@_91Db_
z?&ja1$t@}>y40bNqci*j!-VQY+2%^n1QuT4=g)WO@1^OzMK4V@gjrOR<2Kq<UdU)k
zvSw7u*M2!^_$E$Br#-l$)Q2O_?C5}IRiQbXRn733bZ~}fu2rnd)~Va;yyflLzcb|u
zsOn>7mUn&sOC9#Fo;w$LZsOI}C@dN#_1qel@ed#{o99ediY6*{d#MWsopN?mSHn&G
zkDgHL3#L~SLoCC@oM{(J#~}a4w|3bSS=#%o-Jghxd3OsNA{JAeC9v@*7P<IbVbmmz
zwQ{~yN<%oe0x?tQ{CE-^?XPvLsq*45PwPH=0_MIf>A~S4=$-H#{IBiyKgkloF_?~x
z85=5gPT1%Cn<bt4?mWbnG^k`zen~eeN+~w#EADV{L6`5GCL*G3BpYI8lux_jOG2;w
z;D+%AqhuNWnwdvy{M}mA8`i$+m94M*3EH*(Ce<j@!l#z;2?-ZBW(zu&e#G4R;LyRa
zmC{8g<&V96ELnt*Eogr$o=SoH7Q;<zb?ome0wxkf8P?PXvd}IrF0Ku_tlN7$c>kc*
za31=@g1r=iY*WwKqOzWOc+}?XY}Rs{R_K^6cXH3yl%eyN479+p_@LWtQZ(Y@Y0_-(
z$+%tO=sVgJ*_Yn*r`>3H%e*?(Wt-amOAPHBu8qd7mNDyWe9#%^#J$_{<Vdq@>RsHP
zQu_e=!c9qz+NU1g4Hf+1R|TW&N>kO!q$_k2_dw3WO?y5l84Ox@?{r@qD5*c;{ya1~
z@;f0it58EeJ-DVuq+|}NEL7Hp9l5S^3&ZYgCRNi)D>#}Q`&-yU3m%S5ZH~r&=imIZ
z1;IG-R2X)EiHk%_os^kI_*E7<sq%2VhO;D8V5JBnVsv0o(~|0*E}|@K%Ajjjg>QS5
zaCsRD4GAuhy=#_WH<rF8)VAd+U0YU^mGyTj(RAZk(ZpU}9;LsZ(CBPDyZOlzFUVX=
zBgb{uYFr}okSDD;v3Or+`Yac(!%CnVYpEvsUUUs~KLc7{e9Vxc=%~0v7?+%Kp2g}!
zW<|b8DvaL-l0}=ni0?Qf>W*@rFqn0xKUJ%`Rxq*&TgVPe*vfH9)Ly@Pfyv=$*17!=
zTQi7ZEE(-#MGnmW%BB6c->XEXbrDB;Lv>s<=c{c!*xIr+#SABVPV1!v6}=~N`fCwI
zvL#aFj^PglJ!=ZhwFY`yVm#XtSwl2jcfQOn!fdOW=8A2Gd#$bGi|BXKA?m!vj>e9{
zpFEd(3m3;1nN@CxH>#MJr`}J124a|nxm|3KXU~&UMU*>xeB^6w3zhr8S|-)$t3{Ue
zZiP2lxpfPxz>+1%za~?!R(Pk*+w;LbCrvHq>uk|cZ(`BaDGr@h#wP>&@2wpI+Ny`P
z+2#KQ#diTz#fJse^RK)Eo|jk!gLt-PmPy%Z#pN0f4W`e5{Y@~99$cENrqIZG%^;Ur
z2Z?zG@Xm6k$$!~L!;+G79KrZ}7J2UoW#-Fs-lVDL)uj%)eG+ca3M0*ksYdICuzb+0
zbgFm-dtF@lAyGUL3>7UO-|o{sv~zw1PhUla##YSf|F6`b=MAf;6VT=n{KcEN?tM@y
zOp=x~Q2`w+)`#6&+uqDWlPDG>mOTc}LT&vg&sxM|p3+Oc4V0#dwnOFq$YA4HcBh!W
z5w$S^)rg&lYpS;>`ghSoNj|zCpAu!XWEiU`6)vdcIREl8x{dS7GG8+(<<@MgCP|Pg
zmDxlpP)v1X(89>`>%K!4;<#Z2nr<qQFk`(gR6+fX?Ypv(&Su2*b;rUF#>4M7?Se?C
zg>H8+U-Irric5^HJ90MjgR`A5962vhA-Y_)K)vjG1p9kx<P<#n0MZcaw1(pT`^UoV
z6r8XtK9eS6Kz8%NdCMke2N<|69X&xTabM--%a<Rts%=C?L;@|w>O>_ZB;NPY(bCpd
zaNE{p#|w}7#|b6gd3pNusZ-zcBc<*DQ)}kTP>I447&|C0u)s-4$tOqQaNEuW0?$O~
zPHJOaP=(kC_k6DHHHU_?lS>OU^mA*_A3f8XSAYJKPNLYx$%tcC(fa%TBxNCD?lYEe
znf@z<_uqY1gNI1HV5D=><(NwRNQ$Y;c?Ml?s!Obw-=j6RY}od~O=qe}Sd|z!<kP(_
z|6Epj9D<CG-iQCTMZ<vC7-lDUfXV86mMXKHt#@T|?(6GBdv9Xdls5L$1+EoPw$)bp
zp!a5A=%<p&2uw~+j^V=Maz}I?fhstPN4hp*ej1H`tKt4Pf6#u8D3aJFzWZlT&{42|
zNS_h^eD5g*H3lj~zEn%$hN`6#Q8dE;!gCV%uRi+-8r-exw#@O1baeFzF9~%PPPog?
zC=@M?jRjrJ6dQ0@efoah3Txjjy@`aVP0P14|GT~YR}WMphU~X&xbp^cmR2>MQl3F#
zno5a$XSx!j2M&=xj)H=pSeGgdI#-YW-o1M+1wumm_QqQUtf=?aw&lwIW-<S>NlJ#5
zF2&n_6`?|mp5IsiaKD9-s3~5W75n+$GimUQPc&ew*1z1L{pCR%lY{rZz1q-f`uAN5
zOggZb!%X`7`2*PWr!ufOlsxoSzd!iDZ<8AnG2-M^_Uwm|unOAguv$vfjf4O9YyLi`
z$L_)sJY7s{q5Hiip#oyxajv%B!|21t-52oxym9~2Uj@ugMDPVr+CS2wWn+`A`t+$W
zIxFkSGM%DWH<-YtqvE<K>|cucSumoht;<o&e_vCFQNeaRPHy|1X*u#5c`XHnLI%A}
z5#hhTZUU5+M{k&Jh%bHqDyFTS@a*~XaQ=r6AC60B1!f(7?i+C;xTyvI_mVOrVm9s6
zs`B^6j7<>4szD}E^7pmLko_Bf&~obUU;Be3T-zvKxBAy{_9KGhqV2)9^{;fsfA<+>
zA)>A3mIdd3Ej^_>a%}>?#=q~Q)nLG-MxO-KQ2mlcfjanLVd}qo!hfx&tBCAye_z!H
zIfcT}>Uem+56}Po4i#YK7QA1I{aR^)_wdBero!Tf{=OzXf<%`emD=|GMNk$;V&PQX
zvXe#q{@{N)vHwBMDls8pfqM@3FJY@u2I>3I8D94H6$Qa7Sb`%XO0m+v*W?OZ8}qKH
z;NM@8XKAnmRE|@qo4*vxI)pb*`Nh87`q#VuUmT^M)smcMR^gxK>7x+j;j4u9P9OT)
zmp+6+rRqk4@#~RC^<X(HRwl=W|Gx5C5QoP3iqPa|zqUG-0k$<cigWYzf7tu~-8Klo
zC_{x~5wy&|Btn1y{6d0fbRH~!Uqt-AfQV>cy;&mob8X%BYb}OlJ?H+uy{NnlOK>HM
zX!G})U?3S*&A{uwfB)aT{=Zs3ff{59KD_hs`IWkQ!VmAU9)E}YzmT(kBTW|hAlaN-
z+ZI+opHFoKF0H!4igD=gO9=rezf=D|Rek~@ClD7K$f+ACb_#Y|=Z69#7zv1pFMa?1
zeH;p3&o<)slK!KjbUQQ5_kfaJU;Jp=mTKn?^PJ^k@juvu|BdOO^geQ3gzD<md;b3Z
z$7E}$mo<l8<K6Lo^(qhswufaM#raQy?RNoVPB2mUwJ{s@N9T-JsO*Do(?691Sttbx
zF<F1RB!4_<8*9u%oa4uj$GP`jK9+DX<~t5}_?L{_p8hLI{{7iH%}3|Uu7Sw`J(v#B
z;-5aR;vYR|5?PS&k;P}Z;og1#PHEN(2f(Z~$^q}d%=P^k<}fB%lG%6z>22uzv%6~Y
z-n}_4K3?d5So!iJh4^2lsm~rQY$kf8>%n(GvG{Q!8p4M${pXFJ2>3zSiQppLQ<J~!
z<+E2G0pdt|_3BmaO>tp&X#s^b2;YyF`?S*hheKH-4=b+2$j^-yq-0>Id-n4F!Ba*#
z0k7$2*~~2L`D>x5Z^M!w{_6#|386$74Asb&yOOsk<1s<xkQ_=Y)a3v2lm~t_Ge2QQ
zG4+FQFV<$o!ByP-GYvKM?eystl7kDsO#mIZ_!r;*`ab~_qIilYe4_r6GuMt3fTZPd
z`4~z9Jq%pM7q4EOw93i-Pw^EMh*&ZK=RK=-@h4lVrI!!9cTE_q`Dnv(-MwEM@o^6#
zwvXZ%2cHbS?{?zEm6+EGB9Bj8SzyZX(5Lvz-~as8Z5TOQW>F*#V-*4t60b(<g6j8h
zlVAQ8KjigpA?5CtXlkw(zdj{JQZqCTM&1X%b&S%l{pi`2;Pz&-h4T~`Cn_yjP{;rM
znNp&Hw@j0HOo9B6f&6e_N3<hB)hg*WM*Vts%5z}pYOt(q{^7YG0dX3$wzk&d$LE)R
zD8|SJQcU~h@t}o;g$VO2=a2sTdml@<42MenJf|on6O+VsO)6??YC3Y_>H`PyqYxwF
zTR2W}n*EfizaF$dlD-LQ0`5dsn&*zXrJZikJc_Frb3l~-_||VRX(EQ@ZsMyT8EMte
zx*f%1&+=7pBJ_Y`USp1IapC<sj9**)<US=GfCeHY1BYxf{ARIjYuwg%EQUY3Sk?$F
z5eHCb3nfZ?XOrDoQlVvF^CCI?*VpDdDizJg3?~jn={JU1WHII+8XC$p#L9i=-`F`s
ze$r0CV|L!m2}vV);pOFzLZQ-zt~wt454R_Xz{^OH{dN#E32W%T<2aljGI>j<VZ1Io
zZWPJtNce+AM2+Wt@^x0*kn0s0iT!dZVNf4A+Lsc`e_+3n)#<rtwl<^0X}_d>V>WVt
zn)0z6h1$UL16%Ts!Uq4r3FkwGbK1$``XDCIQpmae@eP7B%xWL<08Y#C8bEkSlGKN=
zvNncuglumtV;hF#q-%iYI>*a>_qT6DP;>k{PQ}dnJ$2>lcZg@ygIPX!(oWTT<7)V+
z)OSjDtr`8rHSx<ia$WHjcK$tr8Ws#(`4%_bGk;Y*2al~1X8-d#rHO#}MPg6@f&E36
zg8K=ypW-1Pb6hX03ecBhfY&$Kse=kR&|wEWIqI7O<3VN0oF-5H+SDV;l!2d!PWzwM
z9xmlu>Ma(<csOaT#X&kaD)-Xs6^@AGb&JL0+gXdRBKRz&;w(Hw%j#NhVJ!4@-r=;G
zNqgq;vfoAU)wAc=LItQJ2jt`yqhDa)#dlJXIK8{A+1|ne*pZXN*Zz}196brzdF<74
z&AkK`IKJOrC;z$letDP_F6*(|K*GRh>#(!hCH@?b{6oIrt#S?spSO>+^8Q+?noxmc
zsBQC@3tR|a^lR8f_r1cfGjf)myt~xt+@2_6)cPb}Tx$^15ic_6XsWdM*oUHoO*u}Q
zmLHvij-ys>oV7&6ml&&qj(N2Y8Yo6=lZWVSelW5#r#~xRd|M{sEZ3jUM39S_Mtmms
z-K7p6<KA3R5DGd#QU=Q=iX|%ZcQXR|Mg-2{)3WfDKLG>7)TeGbuB93E<xB4FZkhJv
z8HSvpm%Rh5V>m@X9(j1TXcgL(_v^^=X`yFW)p;bVdJA9<N*#3Z(zLd=Ciwz`S<ocw
zzQG>;LDXGppA*4p`SlQLtI9)Owv%XPg;#nHRk6y|jwGdt7#{d7P^vZx48;RYfN)QR
zYsGbgZz4EnE}Jbz>G>e`{1}E?gcSt?C#Mp?t{x7$lU>&%_>fvU*PShReI?FmV+q6c
zC^?^#V!r7Ri(IO_q(a{&U*^!8JUvR=FJ46L9X=*j+w11-Bs=lZ=3>E2^oimjH>x8^
zqs?<GNH!aS<_<p;JRrtx^jGW_G+XDj%e{PB+a~BIAg?go@mr;FDpQ{MM1=RbS~N%B
zwzlrm^tG}6epM7!Sf36C#)+^v$MV)otTQ14!T}A3qtUFF#>AfO8brXsTk`fCKdA7u
zG00;A+i(LV2H6{RWrhI^D*H}~yj|>jm50t`TVfa+0h9ZH#PYbqh?F4l<pWwn``t&V
z5{^R82D<32^kAvI4zwP%#R+*oal+aI4x*XnH9$A|H$`%9S);brW&>K|h3nIla-2F{
zVbIPfOyt40BY36}8UM4~laB*`yQ^GaVvPO{O@Mw3a_{X{McthNFnS5tu9kW<2JQ}p
zo0KkoHR8R{9LcItt_l+?9$hf$`H+aPiQekq|CtsyQ>T14@Vw0|8X6_5&TB%0pbiXw
zqOvSz*VAl`6Iz1Jemh?ba(H!q+3hmfw*}~wuLYtfT5l58U?8=T7;lb_&PW2%1vOG`
zo3t`xvD6v$WM~$PXI$axGw<voazN1gDd4vjZ`#Ga2H(s~mh4aET=N91r~W4zRVrik
zZ@+aM0pYPcGmmEpNA$VNJQ{lPuG~+YrymgEo4u(LM;*^*%}-)Ef{Qg1BuE#4Tlwvs
zw^-g%(d{UAGY>z04^plt)~<9lpEG^KZzy*(Fxtxb*2*{<z4}An`mJI@3H(NCyzFgh
zfCx3Ed1(hB&5sWrpj_WI2Qh|x{=6_iy`uhR<?L_QqlOa`UNBMv0~>(t*>oM+qo^Uf
z5nOwiL?uDUsE`pzE##HZ+Yjwfi7?s(G4Url)747yC8GJ%s;a7FjRSsS@i+yC8^W%&
zK~*&8c8;8r2P5iY4fX{)0cb=mc!2M;Hq#RqK;WJTjFcR4RJWC<x-v~Msh`H`y)XuV
zse}S-@<pVz`-+t}-@X-M@N1tFWL7PdSt*Gj-YI9-Z%Z&*l{B6pGs!mSU<kXW>*E9}
z&7|Y-sf;Y0dg3q+)2N2ftDl$~c+0-yaNErILFKe$^;-IOoJ~?;!BEgNA!NP?Z56_A
zm8i_hOthk|W@Tlid?S|SfC>(~6cejO@0`>*?M%*PRg>%d{Lv>!Q~gkiZ~i6m!vzA#
zFl;+&C-9ZZUeZu?$Q!RRlbK7I{mTw_-)i=qIJUh~O}epCLTKR}cG-S3L$UVwNcS;?
z!a|LuWrfJ#2|gZeg5v&Q=_r#o^FOe@qkbPjH-a-Se0@oFq9l$>VyMN+(`gLAG!I$m
z(rMv2=BqxPklEececqhu{GS#>0CgNeBmoV`4es0+s9U$Ct8f%S6L;gCQ#&W;RC|_z
z>1n@3b^!Z5q1x296dJN%vo1B;4c@E5bd`z$4-LO1Q^6>;rw@{4ZsnFi7x|a8k156m
zq?{HB{m_d(IY)EuXF)OeBh1qg+PmqUY32c~YXj<y8~)-fZ-6f^Tr`f%VFNy^1sIrV
zMVBgcW;`aEs;Q}o`PhO+NXy=$i=`sD!q6WzFM|d02b_0!M)DZ2lTn-;h{K0v70AaK
z&E1j#!^ehUgD41~X%^pD8q4WG-{u}FG><>N*@~vqprwJ$R0pH2y8*Xy&W{8#{LxWu
zLa(gHjbsHk+Q|@#y)!T;Bu+mb5QO90PK|HbC5J2Xjr&HSjp&0rNp7^|L=!GbH)3JI
z3;=MZE#)kzvw!UV$1k*IGu>A$aa*pXsqp83$lhO?Xm&MsOR&g=<f_H50MhL|GXdn)
z`HfUAt@0a%(oe+S_t;8QNq?6(R?Vz~4%=DdbD1f8V8R@J?UJ@O&iU8H#~~Cnub@PP
zpqXFT_t$ZaWsPwUlvNqKzT)dob4&=M%<Y|f^FQd-ypI#nt|pl`2hx<TW!9$jM#C&a
zz#WW8bYY!5ONo$^6qg`N(U*!@26Q!-x~cM(z!Y|`T75{(7>uNozEIG3T{9M%RmQV5
zm0P*<v_|X^yW;lhxDi-iG7giOju*OxPcu+6CohKbyOyguuXdR9O@5q)ew><0ckITI
z@+s}K0!~vy$ioeCj=g}|losMcg=*X_P%n2XLb`WtuB}dW1OTsK72aO0NMRKWEbPBs
z!3YPMStUR46wTexokTj-TNS?e<XqpTv)WH*#6+9Fmrpk+h>dpRIef~Of}ds6c?c(R
zL5?ndt$(5}nX>QC;O&U4K<08|*frsNlL3Rb9e#yyt_jnI4~Lm~2$U~D@4-()`BaMX
z0pKX2Uk?=v63^|h411ELT`6k34(^!$(5@PNBY&yz+NIB7JJ*@+X^it1i&!PrM94Q?
ziVoNj_HTSR)=YTGUQ3mb-DXbO|MlKQQHk6d=s2t$6Qa48_eolcxF?@Z^v0}M;3E&}
z(YI|y7d7Uth;lhf{qQMXyGLmnI{K22pLEpB=|hCnP2FA=^~(U<5UKd#Ln|)pZy40`
zG#kR*x~)=jZhI-I2%A;W=q?9+W?|`wfFaw9BHOi=7S<^u^p^SwC>|0(`QnjF2TPXt
zU!1E^Dk@cc_TVxRy*>Gjrrijh0H$Jo<}Wy&;&<#qC-<WFF4fMt>n1wYinL=p_bceL
zGfD0Gh+mgxKBvy}Wu)VaeZh>FzbpPl(c5t%9`)3TMlX*=&l>DCUo75yaM87J)N7?|
zzU+CkSN=3l^_EWrk#pJSQJjF=8>(w1co%DvTmvpLsV39~-IHD4qp-cuT&Y$2!A9k&
zlF+)>qoUEe)2B|8zS-QX&sC&&DII+OLZ;~Ip4Pj1<>n4KTAJBCM)|$85!KxB+*gr~
z-+20$#!Ht_0~sAU-o(eyshRrD<g$N;!<1Q=5E)qjwbsWQQ?0$=AP8YwPfNb_rxh0i
z-{XGi)p+Mt3`u1x+OQWdj^(hW4R*K6p)yLB#OPJ>)9m{dTAdM(PNJ@>V=WgoY^tU&
zt#G;x<45oFKrffI&SEZ3Q3cfUJJkEE&S6IK%Q}*Jy=9ICoF>M?*zYG@?r%k<J9q6&
z=L0P3YV})21r|#mCK6s2UDT6|_o+KR5P4x9#pzbFF}a^CLzVNxXKfYSn&8>K0`WK0
zLJfT1dX%hU;@LITDbW4Va_EKcpW+UG%N?x`X*OkbmB{lcp3FX&HK{Rh1MaYT;6r(A
zvjxo4BG711S{#$=I(6qHGx)8+@cQpc!U1dI56Qal=0UO-er;&-3B25LlXqh<2=E5u
z347w5D47gZ&gHE9GJ}ryR_Hgl`-bGUpg`tMu0e-b+VK}1@8tqu_DQ4F;5F4s(yEw;
zCrwKiJ)7OX9ruS!414oy3jRTtJ#op4EG$whTmcybYFV1M?yF_m8xNNDsP+{j9H^N}
z_QYl5xh^{nIqB;0?b8YlYV|p&>?!N3%nrtNq-+UYH0g#>A?gk(De+xctDyj)*2<8c
za!k;@@}{$WTCFqhYO_r`pWe{Qdam9%<>uaZYqguNWD>=Q!mjK4r@Ui4G!D=^x<2Tr
zYgpyNt?Y1_WWS|RJyVpO5n66JA!Rv`tC;<0ypY9e_FA6hW8O@8m3*T&u6sKQUL>q0
zy?N*F8w!#`rwYC$bIzkLUI+x(vYeS>CnCO!_CABMbmr0NY<=FcsOi%2u-;w!3m8Y9
zN>k>{2`Zu8S6+A%GaKNkx}vA&S$E2k3Aa|!DVam7QDVKFz^|w8f<JxHX+Yl9cB6PA
zp)biwLnK<<v|?q~&m>jIRl#Afq_ujLJ8E_C9lr{?b!CXmD#mrixn0QxVg`F~O(apb
zfF-Wc_S4?ZylY#zv*UecuwT7HNN=Qat{xS_IJC2Ke`q8xfnD{ME837E59Q46%$n^P
zTB!6J3ouuaNUM5F<M1Z0nmG8r+Th~w?P;M#K>W(>O}-`H8$XMwv~taFuq6IqwnIP<
zOb&tag!ka@q#)VR+qA0R!(Uq_^h}_W7E!X9b0_7q4A47Mr1r*<(@7b@nSBlZC7I^9
zIQ61Bs~X3bQ0Fqv&G=rgq3a5)rEQkvXL`5CAMuf^bDG85|DNv|e}4~W>F%(dWqQ)Z
zo>QXVlvaFXm#5C^yE>-vaQ5W+(#_SGO5f;;jttlh@xA=8iX>M%L4#a_^YUJw_1E0{
zC68W}4mLVJl6cg{S!CG4$7$6@lwqdPSjrYNyK$T&B~k<T8H#Tss|-KYMM68Yv_B>5
zq}{yVV*SrhbHPAL@Ra)IdZ<&$ZbFx3L7;E&o5&OP9uyK0ma0iC=90;8H?8i4<u4R&
zm-aYTDGWK{h?Mj#JLFAE7e4jGe6{-{`TPt1>Aan?g3on1#!I3P07Zl)HKE>kqQ)J!
z6kXyxuT+E{b57!2UAHzmPM9l`K4G$~I40ZLmM5CFVqdK@&h%wjsHTsX<&CTmwN7nu
zJKLkLr?w)LR&gedhlFqu2fqz+8nP4hwcfgiJ?cAf{4vRpFB8?y5bummdUacgkc+;`
zkadIZ=_b+F<&G@tZDHN%FTSPK;KqI1bzS87?UVQoU~;ucVCU=HRVp-#eMQbK579h-
z<~X<Y)J2#T@<O4e3RoKr^IMmIq_z$?_l)E<SD9emO&savIi(9g-_a_kVVxBr<vG<?
zkV#4~!Nk?F4&)iv4j10<Rj1G>waX?Aj8JaHPy=uGN{7|$0K9c)pc<ON(CA!4B6Dy8
zwv6s$|Cp>RaM+F#>idSF2tcjt(v6{41+7*om>uS<{7Q+PC8Be@+GVkyPYO7YADUNM
zQRRWoyvG#ERtuWIi7~T_Ps;ZBWU(bNxnjC?+7dKni-Bu)KVGbTnJjJC^rO&QvLv?O
z?+k%$$}!ZPlabpgWAM#2PEy^zeB-qQUjX6N!%*F}vG)NQX+-SNc0Z0oLfcnk7L`Ca
zUE;&OQQhSk#Hes1dNEHg`u+*0Wy6UFw~^G+F=Y&AezF@zp_3XAY&2|zscW_WfMyP>
zNm)y0Dev+<)RtdnTvtGvp_s$K9MD#auCA{thveN}0UFdxFrGA&XZ72C6St_|7gFV2
z!&taST7vR4942WA*@l_8uC75Kd1Jn|DbDQ<fbp*3g9hVOPerX}z$qQvP9_w=#yhVk
zKW<5kE81cBs&iC)x(E_8w=OuKsFt<FFz#|~XwVrNv`#<HEZ=+|7GZEyX&rNFproJ(
zYk~<PnJcN5)7g&1>6z7Ij8>wb?rYeO5p4jwQ(1oMy?9SOnZQiL=#<EtxX~@f&XSrP
zwHb%8PA<I7HOxziJ=?3>taVQpH?(ECRNggjFA5NrgAo%DXnmgMbY`ABqPU|fc<Yc`
z3t>&#mQ3dkC6QA0BM*E0#nR{mwAYHQg4n#;rnAKSgx(>y9F&a%h3NdX$*n}<iTS&@
z8IC{;(>S75Z1v^>uS0kEy8?}-kB5zoI@6SF6x}-3A;&k?qZ`f6Z$L587_M7&dS&Mw
zc;DmZJADf4QOoO?L>Yc<saGLd+brK2u+0#vNs^8>X?kt#dli~>dOh<Kh4x%vwt=&a
z+)(t&ZZNSkzQrIK=kwn6Im@HB-`qHu*K>g4%ZI@T-rw4e80Q)AP>o#Us_hF`<tRQZ
z=X8`&LXq#TgG<+tF^R97gUqF&3EmVMnVp&pn+Pf_GQ45V%7LEDdYrp;{gq!X&TMZx
zEUy$QRqJe8bba3YR_9Sg6pYJi@*D@0*xpxK(dCC*vl$Xjr7!wMw>T<%Lg>9!Ydbfz
zs&sZ+9{JO8@#JNMPuP-+_&-<Y9cHf`>iSv^!wkULd|rLQf0bM9JAS#C(St&#C8JY>
z44Oo`g|`jJjpb<Mqg*K~RPw%65tVNZkxpJ+9X=Y)qC_b>IOXzE)#fFm=EyRIRNX?e
zZ>X!n<qNdeu<SCEu2@$d54*XSoMMT_wb#BA^3*@ViBFX(Ppfs|S!dp(vGhHD4f>Ag
z)&4};aar`R?}{?_CnBpo`D4#BoqZ=&70LR~(!2vL)ChOwQGcF7&fWZ{^R4asu{MCN
z5r^B2sW%F5t^*^7gn^54GreGtEp<=v3+XXG<!B!4G=1lZ7<O{Sr0Nh^QVx@deu(+k
z+IvmaB%2txF83-^P26@i_hdvd-0EcDD$g&1CbiezmbU}2E?UhG4j3+|i)~3DYWdF0
zkn65vylx-YF_|q*B621@T&xGe<m)r4R8rVarv)sTCBttJsa0NS5yJM_%87drgBEu@
zkcV2Qi3u>WT8br(ykfA^7i}DA4HNKaNU!Vp*^3+=1ZS}>_r{w?&XI+7)#SFJ6V^-b
zGlz?x%)av67o`tsniEZtac=yb^Uk=0Eibp|Js8*fzC-ZnB}Ls4XRK~JV4Y$zby7hj
z{evf6Ke!-|Wk)=`q<SlWi*1$xn(e@c=?##~dkR?KKJ-Z=vpM0z^h_Mi{Q!7&BLHu1
zX$qN_N{djW+V>Bc9W@s2%kj$KfrOc5PO*cS&?n_phm>oYx6tXS&s4sP(i?9<O05q=
zDkbu;vpU_P!ObcUFDzP=wV<JgUFsa%O=3N*9BYR@3ex?~59rF3-OkeI#a8B#bK9)w
zk^s=djq-HOt1TG^yQZyM3aaKFz+%f!e<4pQu4^czDGuX~gXw1lfx=8rpb%d;d96mI
zVr8%w2uCz+GSSfBwPn2J;_uml+BrLYA@JJSK6_J1W^mRVD-{H;crr36W_`pHbAWNm
z5|_WixSPlfv!kvWyPNh8L9-`q!dzDdpu2co5xyzsyQS)K_1*zYpj!+AG(brmC*N1k
z5ReMsJOg&#+p<psoyTx`!U;&S1koIdw`>)mW??kH<$FhHJS}J<k_wC1sQtZt!mW<}
zI8vNt`KUmlis%oG8j}wc=aNrr?Um{%_~$y0Z9fZ~8jDNRa#y53e~zVM$NKJ|(izrj
zDZ0MZc9;Vk<x*C${_Iuc^xJP57jIM@xqRpDvoNz~k69z<=SS(hL|&)v@V^^)ciw+~
z@1}8Y$HFsp=B4^og}b#;pLBI5d)t>9dzT4=AjNgkY5s-UgjdxYwqduYvU6=BJ=y%C
zp3Y8pb~yvJd&_5g`<HsPJd8M+%{+c=P$%5~<Rn{U#L{CsnkJz_z<O?1JZsvuJ2hF=
zQHW)0;)Dm|wyAKO)p^I=J-KPJ?6$baCWKatTSG6|e&o=cjvnTE&Jp}F*w#_~(XR8%
zC}#?Xrf-?AhoF~u>(e<ZB4f|$+RmK}IafLxMrwA(yBjAJP%<3yCS{lIdX3?SXcR=e
zS=1m8_-r}RznjTX$Wp*#C#+r@&3$`!ll9hJXP0kye94ZIuU^e7cc;5Jq(_1Zj`0-B
z&4^TZuO1}s(&vBqn(K>@vTC(}*_9%DK{ZCS$&jP`itS|Es_u-y%f}r{V(&cd8<!Kk
z?}}uI_-gw<*|`x<^+y)lP2f06lW9klq$bW?Gu^F<>_&`xyH(3uy!V}z1zegvIJ_+w
zgUrggS+?_VTvGifpD5wdwwN6vhcwnL5o{QtAyYXx$f+ku@$Kauu5JnJfXNs&HT@d0
z%kP}qTb`g$dXA2U*4GCz*Jxc`(3Bh+QcY$@r|s3)o5=#p^jfLII4zUPQYI+NVcNB<
zm1dTl)fGE9k{6K_eugSN;Ux*PK4S;SAYkySll$2KgV$TR6V^gBhDRx#)%VnrTQ=r(
zihHB+9=FH2qpUsnnVW`>8e2k&NH$BeQlR{qgbJC!sdMMfE!gN2{7$VRi58qRl>#YX
zAiL!#t9AGGDJ$7Aq@hMR&%k8p99yq&WOB-oZ`yGIm>RyO9L62LrRlhzpcy{ZGVQoI
zxB>?@TxxQaOpSdLrhe7{H8gMmB*>>LCrRScx1f1+_4LFr!M0ql$pJc3*#wbON@Wgt
zN)P+5Q3?nWuN1#k4`?UAz+K6GdI}Qi%$qKci6Fm_TaI-bN$*(zcU4_)p5a)4G~XN0
ztzk(koVc&E#2h{mK?aVlm}?8%zge^@FE(`Sa7a#Db4)9bKtiv<nrqrwc`K<)hQ0p*
zzb?x9rm?U$)<=UU?s6;2Db~)pz&D6QJcMxxsln6cO1I7y`xlXMx|7OsX*|cLxDhRs
zhGZ)BTVmV-nUva8Pkih6wCbdnU3D?SSl{ef`FO70A$Kg{0buaFbn_8(P^=lY^nL}o
z$W&AFP|I94Xg%~A#(K9(n7#J)4ghbrYG#OG7t85L^PZFgR4T*FDa7P>=dtCWDQw%P
zZHRxmE0bd=Gi^w1Gh$H1oEQdtpha`_T5<*nA$k9yh$PRbhpknBS639wkV$l~%jA|j
z7D^GF4cu8YugTci2F$QnzojYN2ZkY|3OZ=%5{d%nvmFgYJWbDt)sl~>6h1A-*Y|rm
z$o*|g3Y2_a5r1G9cs3VwdZu{qIJ+)RT$57X6*ep^EoYTI;JFA;<|5d!^kpH_UwL54
z*O;+DBECE{BpQiNmateOn-LYPc{DYMf}14>ilDfP6i;KRK%?w3pAhNWoFmDuZscNV
z524@~a87pNn`~u^9$0;MiQGT>MoAUcb%Nmz;S-{vTDygwq`CH-Qc`q9m*^5XRH@Q;
z+KOb*zC4sFYsHw@X*+ye-(%7SZNBn!mMW{0wq-vVdiQYJRkZE#%7&(ASTk|J5-rU@
zzU!>F)>0*Uar`PgfvJ2{up0$ATk~YXcBVR$0VYM7#ij2N*U565@#4+$=b>LE>jmkK
zx7c^53HOu!O;LorBo!vs<SLD+TG~GdCq7|;;gNY)ytCH({Wx#<Scs2pp>${Kf@kNa
zkr}R$3q^OP<ZLAKEu!|y(P#W@3Zh+SKa-0G-*s0_75jY0vsOAYkU;GT2d7eka`V8N
zIe*`WC;jt_Z!MMezZi<$trc!2HqTLC@1wV0+xaw}U1eXTQ(OOKcH-Kj*^>$~)2vv;
z0o(RX(eG#$Yuiv8&Nl0x>J-EaJuWq9SSv?uwOB`$>}ToCclW%9SZ^@=@+~2Gs~!Gv
zaU^4&&y5L6CT~1Wki5M#<htj4O|M4@W;jw4(n(#%AAkYdk16xykoKlW(-8Ad+%VU`
zemt$IlDY$pW%V${WOg>vee&&fed<ro@kz)_wTZ}M5)b>O6TPyEF-etA@87fqlu*G(
zk8egipNLlMRth7=!13~j!Cs$u5-JIcKco|@1xZ58^@M}DJip`CqJyfusA=I-T>_7M
zbPbJf=pk%ogZcA!X3sYyHBZ0i<$6)Bl=Ile6$Z1@A*}cYcP3r<H2BIj63+SlOdjnE
zCg!D>=tOIaAs~xEI2hKR-Hp7s2sDQ!={AwUkp?Q88_M2NZ(BvLPwuyf23%d;Y5*r`
zM)Y=Xl#6it{F$ctyORU>efzM9Bk!J+D@-QHFms6x;nX&W6h6groyv<Js}BjcX+QmK
zgfwH=Pz9H_Lv&ldHRezmF$%(|Js|pG$Dg#O-|1o4^<>n0@m{LM*3%AxjBn2>mA~Ub
z-ac5hNY$G&fkU-&DkS5wdYOaua{QcNrmsUV)TqJ^DKi%v<VVrz_7q#E@_x^;Tl^9C
zFdw?K;|K%Uvnusv(n1Z*k1zuQY&^$<JxozhqaI3QQ{HPZh>FeanDUDCXen`u?+(25
zrIWY4J#Q#t;BDsQWNzj}DX`lT<A!G4zO-Tvd2>%Ty_@dDywwgFJnpL2V>Y;7I^w!m
zt*b0!=sqTS-8p)MK%_w6asTtSrknHFlRFo2Cv0{zy5>!}><4kSItj?8ZOe8qSYWv}
zzh$qVMkjibpeRxk==RU1v;LubAuMVQChU3whbeb=&>DoNwTW=Qb{;yf+lrorhTE53
zV$Q9JnkN)m1dic8Xo+(hk+-vd?7^5EG?<!G<>fRGE{;Ais3i!|l9<2EpE`$)A!g{!
z^#>A}V|w%&<)wOu3i(gq>sSrN=JP@)g3VXd?^enLQOYw_M11PJY8N8VS<NHwm50fc
zELZR=d^ve5aeCLWB?sTwbWkig^2f@wl4h8RZ|K=CPl}fo?*PuhesuNbvfY5;BW)*z
zt_0`E7T5ckyf!;U?p~rP)N>CHZ;rmJm##@x5|%7m0fy{64f*H0J+AV~Cx>*=nbO{v
zY>)F(DIlO43y=MB(R5`)R464fb1}!a-mzYlF#WAuJ)_|LV~-2-&=&|VeJ9Om(doxf
zDj6VJyRx`QEt}(yZVdMgiSkn@w^+^A@Wx#FXq=IS3GI|EHXaE*%td9zzY;vl)g_Nr
zMY&PbiDn)e1s7{Z2=PPnug7S%F8sK3s4}NvdpF_L`i~d(g}p(oY<VTq)*rM7^e2}y
z7)4@kFJ2D2I_z|)YJxu^@OyMgzW#my_c5<39n!7W&Q$hhVo82OIqv4I-t7`k=wzQz
zXzp;JYq}^t>yoj6#hj|n`0%-$_UB&GjD>siaTbkZ8MkPfmWEOPPkY}Tk9FVnAId5k
zqO4FMyUd(+k`M|JPAhv0r!6a#M48zV$=-XMY1(^l*<1GZJI=bg>bb7xzMuQPpXblt
zKfMs=d49j&&*%6Y$NP96?>A2Fh)7q-uJyYlg+hl%d)y<0gIP4^{-kYRlcMFqEto#U
zl{Ns9)E%bSfyCHt!#HfQX-D{>vb$Rd35L@HL{S$b3i}0*R5kxgIXv|<Y-;VM&X@pG
zkUw>365P4;r$R8l9v>^`x6In;VbUl{Fkj{)WYiM+pmKYLC5|LE8mF$6By$OhhBBh^
zyzOM1PA%too|V^GRl0~nV2(XFv4znw1S=3S=iws5Yzdzeirp{83?p7iNByeGj7giD
zDm!O78_l^&t#fVeWAdMRlay&T3PkcNi&*`o;i`4}fYrhVyYGKf#g=V3Bn-3J0=I6v
z%YDQERC}>OFRYGCKH8+<F?lJKwvW4Z^#iG(_(@h-qQkAGUdk8^sQLm%!xn-ZXl=&q
zJ@>)Ae!Y0%?ha*UJjrbqrMJVVQ>d@0q*Sk1LS_s2*&?Xn=UQn>DfjUNrV1n`^|aGo
z!+`Q-oWX)A{tklD(u5Mt*Li*v@Gh(0fSD0Fo1}(Go<OJ0F_mK&s;h3De2T%_&<ZFr
zw>_1rDcNzivLIcfOquYs72Dh^l0Xy>iVd0r_D5S$yw+_n9FA$Fi9<qK!D}LG(LqoE
zxz^fDR%I;kMrdL7k-Nzi+Tsd1_dh8GK81Gr399cYOklmE$W$E%nw!K+u#QAtQ0E|^
z#aX;_@gt_EDz&Qynvc48^$r$U!Mi-%k}{CJw)S$E9#C9*z4%m(`;j3OV(a^^-ag4|
zx9}7pLBX4HZ2jsO$OZ$)tChnbLub66;&F4^X=wwJlZ=w4P~|H#zt#Re?zk*~ICfT^
z)1Ma?|LD9vC-u$~4>3X*@r^n0*DQ|5ZG4rN*)IO8yP4>4)zP4$I^W}sArYp+L77iu
zr8>APAXY4OJ6#x$*mhMIki2x)%7=wJB}mc-#XQyFYIsvDH1`f?hOa619{Pb)tIJDM
zo|ffL);0AWgTc0|{F4`Ve#D1H90&Umf{4paq{_prvB7I+vV_=14QN&zXVm&5RnC>L
zWUW5j$z~m}s%?(|=r=`q(7CljI9#FlTIfRA{Q8+nC8YHh{*`-0LU)|xPy?cF@yeRh
z_Hnbg<y=Uedu7*JKS~yRf=bh+dK#CM(;Q<IH(w|ed*%&%p&Sp-l)djtan*}E+5>;v
zp<&RO{#!qP-oSghPf12%T^{^6#Dnvi*DcChNf}0tsa!fmN%z!8YsMyyZ=+kcsLZb1
zxwN=ItnJK3ottD(eV|AHyM?d*_kEwOU7ciYT(wd~(D^VX%X`C_EVNd?5lsejGL8tx
zKkEp5a*uk7_KCyIq#d@QT{w8ekBJ|3R26s57$Pp+Q(?^W6B!{?>!P^z=D^P9(p9{+
zY0<CeB^vP(RCk&^`VcQwo)SmK0@>E5F&vNy6)Vci+U_dO2YVZFQ?!@aAQLF_r{rtg
zRac?Potb6k$H1LUl~daM8vIh2HKjn9YK1FnB$7@#6&=%j*WwI2a;lRfW|hZn-zCeV
zliYJP=ZaS&Hk<TsP|Wm6FiJ?9^6Ny<HLH!N^|cVBBhEJ1oPR5_bJcY_e@ioAetHtx
zWWGCjs(vU)n(i|U898@;lt|0<xjH3$Z-ig`<9Axi;S6`Vo9&0N*g%^#9D$nYc9n$;
z2iJY(oe3MFS}hAFl=*J0B@RS((7~mLW>-d&IgnP&&_xKwegT%*+OM6Dlnu|mKm)CC
ze><(|Q0JeWx1=t-jAqYzVwG+n7;u|**3YSkvqYyQ2n4D(C83DEf&1EXsM8{nV{{Hf
zCyk3lp&+Keq~c8a(#|7CrS{omir!aUwrgBZ!(NH|`uV6EwR8++9Kt2?-UA8YhSBW}
zFqEIODdI8h%>O{1ZZq!^Gj*eJ=~&YZ+f#GEt!nrHd18K6!JCb<JuqCAD~IVyZP|!a
zJ6cM(O{!P1iu)XUfhlchr(Bu#TxZgZ99s7GGIKnq2~=)Q3*VLA%iWG2n&p1m*ITq!
zydThUyTTuaWMzsySFWyA23OJuh_`WFKvp?w$!(-you!xAK9_vv@d17RB;lj;=D(Un
zdP<_=iZMgR(euX520+i?EPYB<0GR;)jIH(MKf?Gh(+R>6LXP@b#t$lG%7OWQr0KV5
zKl5O@&NKzHpUr;$Li>ohoA#O}Xa1Af2|YQc{YNZw{c#sJj@b{K1>kQtmtU+@7NLC(
z{R0tMFy0Hh1DQ%<JI7>63;)5!v&X?1J0wkLi`20fBj@N&aa9U1T|f(dUCHOo3RCg1
zWgRBFeR=VdOp>0?qSQvOJ8)2R8Jnaku$)_0b5k5q{<mBbvU@%cS$S((QithNYG9pM
z6jZ#P8fJ5ZA`y%ijkZs2IW<Tr8anK}Z{3`Dd3vW?`<*7gEoYA)dZysiDe{vB`+Hw^
zB=s9D8SBwIgNmZP1F<S{u~K1bd&o5Iu|R_G#T%qWeQQuRB|RrJ#8W@k!*M`meO#sb
zEe}w<oFab6=3sgaz#ER>c`J)IFms4rV_w4RhywF8kxH}2i1MWm;68W}aYFs6h}U#}
ztW5!(Mh)8qoR(bzm2PN8W32z)1Oki*J5pWKZ4cFDA2RY`-lHQ{vj<9Fk~~bQP^u7r
zSAozJf7R^-Zp;z2koDj5I;+hkoh>-7B~(ro)Iy`A-rhg|w8jHfoX&hBXABLoZsJUO
zTHFBY{#&`TxymmWIy0ic8jDYRC;mH7<1u`qxfy$pIx9)PE-azTESetHL8BFxx#>iG
z1d|*>R;mh6OCpL^Q+bNvcoHGkPyixo06%C@<flXG0AZ&Uj!W(e_f;E7=-8Nh0priv
zo5|S0L+%=epW=$!_@+>t=;I#ruo@CIh%$?BV_@Oo9q6|9D0S)PDSL1952`?3{Y_2h
z*crl+=0a}Kk7_+gk+yqTJM95aCr^sf?i}Hq6%G;E@KPYWf-z*)8?Oz;l|)A+ou&=Z
z0MLqq2+s++1_N^OKGa|yqE9ZIQgtd5WJ_;ijB*>kO>L;`v5vBO5UVtAu(0fEY`hk`
zfx!u~C%q|#g;m}xxBeWMgW2ggY|u`(qudzpza{=<)v?wQ`V0;{e{3Gn05bdzD{qGI
z0d^YHCUW`HSW%O_G}cja;2~3=$Q(YGnLW4B);b#_{&|p)c4>`<9+3BZkvMh{y4MEO
z1!e0N8|SS@Lo=JP($a@wX>F8?mCr7*@-W|!`jC3%>#;MN<DsWcQI8XzSz@ichPD4p
zCTQXV5{q;{tTriOe6KS6<qT9u7zolOual>0GE~lcJb*bf`%%by(o%W;i$ez^h=r~)
z&GQ9WPvml(H!4pv_8l+2#yoMnQpxX(wYN<AKp3qCL-93U=FrDMfjehjNSMk=p{IQt
zbg5@POD`%<9t0YI!}W~}0+po=Qt6*;VGv6s{P^X|(}$A8di>U7j|IV9XI<Jrxeu7F
z!7}U*TqiJkU=2f<Rgd+llsPR7vP~&yj5VP5$ZsXD*`kU;y7-IPYp<01y1H$$&tF)1
z1Fz}jAwo7lnZm(;putci7fvdHM3!b(Xr#ZfbW)s$E@$x6R0vu=iLx!{Rc30`i<MK4
zg`07IYZ@{UO!-BE!UUiEEORpA8#h}LupA7qb$fF4^+8oBA<hj)!}hLG%rU*twb`zt
zBm&qOw=idx=sE!v)Rw!kMehm1*wh)kkCu^fW&3F=wrVS|QB2qXNEYdqe40CT<Op!r
zi;B8t?>bSlWq5<nrq8V`)k^R<vv2`J!cZWKbIB$;naeR^tLuX|3h2fgMevx0HQANg
z%`;=Lg2(tnM~xgT5+_aHxnoW6d}VcFQ&Bk)=<m;6MWzgUA>XLwz2??!akG_45fSD0
zJz=U2grq;Y09lYf3Y%&i?}&d!&Sj7|m3#jaq47{<g<~Z!|Bh|Tx3N5~#n;RFUT|Jm
zo_u&4NNQl#;tqO&E$?>WP-1#0Ukgd--avo67!JQ}HIMS0A;r~)_h_XrKVq43_SqNi
zO3?9IEME!e+PF`&Ux?jbP)WA85FNYN1Vm_GOv{6J=<S`?w=Uf=AX~7}f5UG6D_u;K
zfDzn$qbD#9#LHpw$InF{69BIN{?WK@;-vjvg<cf0Q&f27@`@+cQ4f6BC4m`y3b83e
zj2{~pyvxeAvkp715_NstWVpLroh=91a(9V{)B^beA?{lRUg<Y$m+tRZEG!<L791=v
z_nNh?dntKzt6$X)xa+__D%0v`Ob%|84`5cm815pR{q~V>^1M<ZrK9M6f3P;Mwa-z9
z!mljIk?tBB1<QBm6nPjpZ}}8%n2(#K8C6*c9DWbS2O}fkW_)GuPes$6g7%O9*6vG}
zRq^r^kyKqeV<k3wze}j?h0x7MdMmr~ub;}q8l8!66et@lsj!|(oGp<Me_B`F6i^#P
zlw9A$wM`aGm~?*Lj!OVZ_qr2m-1&ne1%Hw~qZ#5^B4-X|h=z%I;XWZg)tP`(h<g7b
zbN4<`Z|B|SbdP@6KcFCuR+YW^)Q1)6JYO&|w14bPn-h;odp1c4%JYsB?tN7Qasn0b
zFgiX4Zn#%ujkO;UpI*5Oo2QDux^bpYH&DnRE0?mmD<F@JdN)Ii`1j!m&pV=vJYg&<
zjSIa%j#Z3)JJaJ9LxrJyuVhc^)riuhWzM9hMVhuO8bec^c$MAghvrJuVX)8C@wIzX
za1?_4O6j>bBm+^r=FE(8(U%*h30pDt7-~@8K$^n;^H4Z5s#Ij5;Rq`B3OwupI$&h$
z(qdy-VovWueNzp`hCcM(?5K&@nxCZZhX6+3`sj*Li>NoGR?=XFKySaWGRlOoozlK$
zQUG<C?cFtcnXs2%+@J-0T19CCs3SA&Ogp6(5QFAtD=N3=jwNBtE!wDVj|AeNfVF6I
zm~&J(WW7CZM+_e9)Z$5^7oDJOg3Y9wo7m*l1lxjW5_XlpI(pD$MYd%qnVhW(Txe78
zvSdBCa|>V*q9fVfcL1hz&&H88=VC6Ss<^#3$;2Bat*<}x{;GB(=$3$p(L3@ob{<gR
zwS+F$OMhqU{|2h8G?yz~*oyyf?8&o6LlKd+NvT#;3)iW)kWg)UF)ZFJn@Jg}CQ3RZ
zbK^ZJF_mnX562vjuX^P@_6Yv$w@u>kxqqfS!MiczPs*0-UfU;|(|7K-1ymQ!%10Uu
zK1_YAgl4Xt{I*S~((Kncy1mFVDlM%>rm@V2d^P=aXB>S&>W$V>-_vJ^jGBWKir=3R
zi4D==3VeyspqvQ*61C0C|A0Z&WWy$A7OA6?YmFo*(sgrPe-KePSL~QB*|y91VDN#I
zpuL>m<kRO{AJ|c8Q9WRyUci8)3wh|(qVlr?M7xBcriXp}_|csweSQFV;BSOt&StSp
z@Z*iljC$a!SY<LN?lg;`)pp^Oz}ezPiq(;-An8iKn%$6wtG6A_DNq;yDSvtjwc#{9
zmE!ln0Z&BDb|!eu3O(g&KY!sNlX(<S_kc%O<NwC^H_=UxqlD!kew^!uW_g6cEer|_
zv?Nqc4ph39IZ87ok2OSfar8VPVXOt~1e2K=y=owmZ571i1<A!D3rs>C-$J>bP=%`W
z%e<kN@iODf-7Jt=T6{|MJ@@id6lL^jjN;?ah*>$N^7!dfu0_Vqv0XqbtHDP;II|G-
zIvN<ST@*WOvy<aX7@jn^92lR2CPLC)Wv0k1;b=!%GF4{$X9{GzgosQz7+6f(*;%|D
zjbB~y@S(mZ;l{4`=2q%_k$GR|KJtobCu<2<F_jleF(GxjvvoMld$|=4U~-`#i^!RG
zm<1^|dzEG=S6{|2t_&O^IJPD0WH>4=0vsW~R{R#YHC1#crhw~l2WpK=fO-Mf@TnYo
zYr;@)>fN*n5|*;}q;_-Nba2vb%qYU>$2d4fgmri4Kf_uzyL9$FX*AuGv18JV9oP<s
z4MhR{{M{o7<LXyom>G+HnR>tXe;p#+$EOmoyY)GM+SE5yt#8Vejk+jI#O<M5WQoxX
zW<)mHg!uILj+w_(MGWAmY<8e&f_8KEW1Na@eKzK`9w#+8wQ{Boy=N2KZ+BPxiJzbd
z!Nd2<S6Wxf_NNgoB6djTqOgppOmi>PYyU?q(E^ML1z#+7nk%WSQbO3yjiBDPRSMB%
zx!JU%#0D?4(<VtBkWYtqcziOIml@h1j-b(f{a$~DOJZ#QN@kUtn((65t=iBfp+n7G
zTala`nuAD(dO_4AkSp}UJvBQ{1vg4%2s_JWyBp$r*tG5s?;NcWDvH(Wc-PZh!&MU`
zz}(N~QbnG5dCcQlYq`%xVU!(x4Ng|Hh_Io%xOC&}zTET1(c>=%CZVXHzrY?^{rGa$
zsM8N<14V3^ae^&4)>gJXw>H4lFlqd;t7f0j;3c%J`PYXyEG+LyIq%CBU(4PvOwjrn
zbVNJxjj}z7&5kN<f%j4pBwKIzWBR$A*Uhrtpt1{zsn+jG;^j;?P_dPsmj@1Ed0|)8
z5W=X38Jc26D!n$uZ`y`E6C^6czg2F2J({;1OQuoPKoJt9=><2_449zDkX_b2`r#2`
z4@!fc8Ma`}BhIST`IB=c!qnEpkkfv;nA`SCVMEg7B)NW*?(A18Wu+n-uO#chC-pj1
z)Dq_DqzkJ^OnK9qroyq)KfMnF&uudHRr8q9z1TayN|+PCjP<2?*nRkuam(FX804<w
z$R6uMup5Z_!ZT+MnZ72A`_4>}9B+nVa=_d`S(nR=IPm`~C6*USK29UtZ|3}pz$XTQ
z3c@h2+SSV)9{AB6o1QsL`MnvTm-Y^d75%PEjWcsz;05vCft&Re4DU?zDng@UejfBY
zlYlFqtMdVOr5nuYE+WWzF3`iEAFoCKB>>a7e6vW@p?fkZkz+A{C;?ZMhEZc86|3H<
z^-^mmpeegro8C;v?N*b(2~MZQsi>T0;g-TdqPHd}^J<{s(;z*N5*lSuDn)!w&?pu5
zxupUILzIO<_<9~KqR^%E6<`B*XPp@cUueslntTI0vKMC)@=MDyKOeCv6q3z}sLgSp
zD>V@-yHug1<BKJFPdT%6CbgaTdu?>{Ft#gAEg~HroYC3($0sk$4UKjRU0{q@S4Wpk
zFWzT!;;3fc9!wpgEU;bZ?;&pKjN@wM7|<MIT&?Kt9Rf$j>x)laVMfNl4JgUAOFOoh
z#L#}BeL;T4F=tou8HIj;)&~Mb!VgO>HM53PLh_KwCp$_ndQ4Yjr!xa}pV@f**FfcP
zpgS%r3<Z6s?x%)xXbmEF&flw24+N%&<{dHRNw?Xqx>(oD4wP<!ZX&z!ikO|x6fq{F
z7rl(h8?U`TD6nU=;th49`r?+?`x#%C!}*RL6a9V=YmylOz3TZV=sD9ndQu8uk4_Ul
zIYD=t^t^g5=~f;4PIt{qkd@z#nT{>lXtXn2h$(BBbgU>Zo{Y7Loh*+VwV31|V&qkm
z_Ge;9e%(YbvvI3sn{($=)<tKdR<4n&B<Z&=bH`CF*tavht%};dTw(rz_oMb$KTEFF
z3eW59TKa4HGp3I87q5;?><$HfyxI4Fz;z<i%3G%E>sSh%;YH^4!j{4-9OExaL-T6C
z3~2_Zq>bX7lD__^`n}lJ#mmiCD!9Ter1t0tu&~=o$Aj@?82h^ubV!6mN@ztEpP^6I
z2}9x(M#;HZ_w-wwycf<`8rD{#(ZfC~-`9qgQoau+6YqIwlW$0C)`VUdY(*gH<kv;F
zOtc?9sSa(nB0@Q=y<W*3waU+V_yI4sZpn^d<aiC_Jf%&6ej$6wqeZ4FEXk{8k!`qR
zOVjGDCiSXq%X`F*iE^Jl<|PRW>_$@s<j0KIPY>@}s|fe$+5#@h)!FF7a?jVPojp!g
z*x{31ytl3)rRg7o(a;ffkcMe9_B+f4T;?reatKrZr1}^EmD*4iL*Yt?ZwXhL>p9&E
zfybQ-efAZ{S<yqT762(EaDBVyM{EFbD2|*v9tVv_d<*|{{<-`&I)@P5u#82$sBM=*
z^vQam73tR~sHd^Yz(}NjlX;AmiP8`<0=M3C)cF|_hMzjbY&s=yn8CG-&E^FhVCi^W
z#^Yhxen63`1=8rVb=$e_mK4=viij?5YN6&9j_k(h{NJbM-DBL>>Z>U(^TL$b^(q2{
z;+ye_Dsc0<v0CPRK_3POCvMdt6btAb8ef=abma`nS9u<hu;i?dXj^yk9kfm38#I!V
zIdomE@BQ}ousp~Tk7iOenCN`h0ym+Ln-_uT-E=hsKKN&A>f0H7#RA)9_pBus>P84*
zTkyuLZlpY;<m)Z}GP4+knU98!Fr}|0O{Ue_%-xiGISJpQD<x;w*Ci~;I);P_elihA
z65{LDHu&~pZW|tNS1l}%=d~O(JFH{W(tK}E@cxjB6A5U!+W4b_j<RH120qkmZX!~{
zJ${ZAL-kc@scau&MJ-h%O-(+B;fAxvIgrJ)0EAqLQwOH;$wX}?gfON`O{io0gg}bn
zq^cE~89PloLA$%KM^oG(89-aswA-()1$k7~#5`pMA;6}i#oLIG@yF2wSDL%5XWc1?
zvQm^%f*MQ%D}C8jb3Y<sj~p?7TDf4{GHbdW`EYL=bzxId%ccM`mZtzs+^EKmc<hQB
zhOV+~C4=&&#h#k#n9l4YABJ0-p{)@~SsiNJN-l5=ObZjlIn6NfKlu76r=kG8Ml2sI
z$ON)|(yK8VBBMsb&nxXsTC|yn+N~y0jF~n`WwSkhqUkWj6$m5q!*?FOsLnGqSMaV=
zc}rVW#ni;vKk-R9cX{Yz4~Vt#TMLdW-9JuqzT-zJJA4OA3t#1SJo`#t9iv;LT+2+)
zefhe2WgC(stPn5aN$pCDp51a>;0jz<yrHyUR{Xw1=E3sE=bNG|Z1gMM)kg!zpU<gc
z>+e(<sg{nHel(hShyDb3RfR~&CDZl(%O<YbdSnru7qY%BcB>bSrxZ0xj}@qY*4<f8
zG!Qgv)K@KED=krriquiaba)(H;vl1J85krY_tE#XQO<FdW_|O)r`%mFlL8&b!<Xr=
zjTx+(_Y@wyVeNMqICkZ13v&_o+sKCQa8$9UZ~*?%pfjf4QYH84tiR2$MO4m|l0T1c
z;&A3d_mjU^a^#1kP)JfYajpB&A%6<}yjre~JQ;^V(XEwx`7W#Tck_;`i%>AQM*1?=
ztd7ff>DLF<P1sOq=1etw%==mjh%>pVA@GOJJ$-RT<nczk@WTupIVNS=>$RjrIRqbX
z&Le-!p#308H4#kJvuz9Y-2H@L6~%kNW7ggLQp#*`u;Me3NLZDYT3lnf0eN>~U<UN!
z9sm*O*%DUF$#tj~KWkf2TbVMIicoXwGj)1R+eS1pC+4LNfJ=!r%<$>H;g`ww^x>O&
zcXif7$#rKv6!1@SuO>1M&1j>r!bJaQK&MpoQ10PLQ_oa;EvPq>xIU>K7wkm!pUjNU
ztD2_$29zv{1}6Z2>ctun7ZTRyd=TmifN^S|w$JVm;NzdDXcYUiDSJZn9SJr?F_>`(
zaXps98G}}ZUjOyCe77*;uM^KwdxiHjA3)1RpuHU?X({;*&&ZNFk?5M}dIa^Q3{Jh}
zJ3nKO%O>%ZEEM=%6kJ5pHZbOr6Tz=$`PHoL%`<Uxy&w9G2Pbc`A;pFS(k&z1z^MA-
z#fv)cy%R5Drs*ExCMvn`BgFz`+~V^3Kc?_Kp0TudvdM0A$<PD>kw%v=QY?IW61(E0
zvJ4EB`d{vaNvcsk1vZ3YJT7aDh})n8GT}PGs4H@)sVSOYcUN;8=%<uT(}uWvbFa|)
zV0l4Nbv(?~v~ShE6l}_>&swH?9P32W&rD(wy^zg-jPUa@j%=#nLRHIq9Yb0h^L>VS
zNB8!WL~QQ);r7D>XopMs7i%b?pA7n!Ijxzfmf2-AtapwOl41BDl(R;(A^SI+n}jwV
z<7!M<=7(8ny2|ZkxE+_9?{<K>opSMa9bK<h-$oOtG|xj8W{3>VJx!F0ng6<e;|2xR
zP}neC-O2(!;JV=qvXL*%BVnMig@J9mH!UkrZIvRdlJ8#T>w8+sGcB)uG5*O+b}nkr
z2`%k~PwqeK2+F&>Lv;$N@2G)JtD%VF%UzBfx&V!Hy%q8sUOg(i&RWk3QBZNEJp9~}
zO)KN@Jnz7!xN$uF_i07iVSa#!1r06RcZXE8Lbq1Xoa#Blvl7b=^Sw-kepW}0+f)3A
zD4QYfS&vxK`^#=oup33Dny=g^8p~7Gio`nFh|6N+Jydv)ReqrBQb(z)`4QMps}ATM
z2l2uEnFMj)g#asW8oTRK=%&%&6qp`Kb3a`}sV6*`E24&w_v5DFpn9n#O)AY_T$j5%
zK3kMDx_Oh|ikG2dRF)Yz@^MSO)qME~KUKu?x}{K@dZcpTapmUwG?~v8#w#c%gLqNa
z-RXb>cxG;{`MBwQ^ps&br#QddGqx8{LQhLO-NCN;EV$Q;#FN*FhcLVlMKZKI3aJm!
z$|*CgSQZKeuT1$PHyImoX9fyO#%u6Mwz)e<9+Un`@&y^<^LjphOx%wcYQbF?LJt*R
z5h+Q)$+lgml4+?b2#c_t`#`FYY6BVq6RhcBYnbm$yc$oLy5fWo%N54nmBsV#kQ=vm
z96;v*!;aFMSi7+P{L9EZf%l}WUgP;}ke6o}xqGg$Iv}3Qb+sgTb=o%Dg|VtCn3jHM
znx)+bbpb@VFv~AK7wxc#2LK6DFnO#vFb|3PGtsM(ervb7F|!SDO7Z8a=FS@7KWfx8
zDY?Q`Lb~=wK4weFa^Z)-j2^oOAnx3(@3wIrCG}zDT|@-iN`LD5K>BcRO~rA4Ym)lB
z6f?4_cOaLfq6O6)FE$|zwLHVNBW=>g17Mm{s<QEQ&U~h@ZGI(=*V2T=6q@gHqb1u1
zXkvYjZgelIi=ShCMU2qh#!vt<6XG6lKb9V#Vp<;|G-*y#$-2(RslF&PtCg+o@yz=I
zDhCp12VeKJEb-|({J?+^;{!-M9Lj%zM<Fe6zXp3UH3Yc&lg;}I4PJUCd31j1hw0*$
zSv|E?CyY<&GdEMC65Q=1rB*;K7Pl~{o?Y??ac^e3AKYMW|C{0`AtAs=ij0EfK2w1K
zgVR2AO0#<mBki>du)0d3TXcVy{1gQF9#6bI)OtoMy<cB`ym6kv@^t<*Q(-OKAcLkz
zdXaQZeX7@ur`M-f$*1L}Hb5hu2U7yL2jXu^7kd`2q{z?K%qSKzEl6D{x-@uC*mTX?
zWxGyqy1*h{QRq(AZ8p`dS`##tUcsJre)+DBOS9-Go=tV1xea~pwg9Ix1(Ap;YnB4@
zQ<q*L%LEj6w)Rx|Q|s*+wiSM&Ge!zLzNeqy2N4Wu@&dCO5pL_iIr8~nQc|LJzpdr7
z&Fl@*pryHQI6bX>>=ii`H_&aTNGV0?(p_JAB|X?n)(Gi94_!VN#&L={Z%6W~OTfpE
zgJC*0>~$Lg7B~Gn%nBtI@WWcDt?SCPG{QvWuFEJuqy9<ZgPCPh&W*`gYc|9Pu8Rg5
znRDA%h3}ThfTc4@0IK+X{Dgfqjij#Lr$RR~=&%ai#zkBC3To1QBjT&!SEpI^2+rZu
zTc_`F=ByN9r8l*5FTcli3&D3RcsM=;kD}0tPhnq>6umd2bA<l9iuQRGdgu5_DP6~^
zXt7-D>mC>9)7JR)S9PreN?Y<iG)0J!qRUlo=Njf@a0qppe~AtsI;b?xH||*S4B`;{
zc4am0;T`4001>x|)f&bP(t?-_y{-`>M+hNN`}D}Fk%Rl`Kjo<K9gw1UW~#o_#R*~*
z+3{Qh<^!c22KE%n@m`NnK4&XbrRqRJJPC-(pV4rjgQFO=Zg%!yvE_hpMa02cmsU7P
z12CGTuD#==zL~`JMs+49J)Ns*Dm?>6FH{odcQzI|Fj^I3O>skK)1!bmqr{(%_iFl9
zw$uP^l2;5HPQaRFMNUnnk!$Z@p5Z7u(4?iAz&yC|d1BrP<DA%(YQ%{IsP{ST7mzl6
z03Z4hA8zB+d4Jdu@=uZukYti32W~_Taz_I1+3c`EOiYu4ZCt74Y=RC|lkiSDrb~1$
z-7Ai|<QwbVdN-BkL&UR}@g$3M|7?vx0~pB^pT{$6XcBX!r?NfuZr!Hl{RofV7fzG)
z5f>~gx8CHW?)f(bn8mdtwl$1_!SlI+JB;!i+pKY)ZDC_#<<Z0<;ll4yPD^YafPU9P
zwDP|(`z$Ohih3<4K#~bk^vL7Y`=7TH?X;=;<EsvJa!IOZ9W;v{Cm+Ff8ZF=d9HwO4
zlHk1y@WN+BgaE40>>JiWCl>ztD+vlcj8cNG5Yd(F!)0oVT0_BW6{=77ZzzKzebh{m
zS<n4l3jqJFM2$OLFa*Q7L<oMLt%)K!hQu=JAo2I7wBxhrH)1b@jFXW&M0<6r1yj*Q
zZF~c<7r$Qc>y%v`T9?>3SSVYhK$G|SvQ90gs}=3zMusKq#p|S!k<=B!Q6CP(4@y_?
znZ?)5*~d*otEz<qf4^nO1}GY)QMxVjsFHm<BZ8o8c$>W`%XW&X)HO!^OtMlAkV4vg
zBYFerI|KBRbS?DYp_W-uDUGI<E{=-z1PQIUIW&6OH2mSDdamA+2Gk{@n9hycu5K+|
zNH)kbD5{rQWjM&|*48S()W_gUVvz<+0CUc?CoHNv$zEcuw+o_ibp_|nSE}JYcC*f9
zg|gxnt2?hQbeXO%46uNj0r&cA9gpn+-V)5XCB+c`TIsXS$(xsh$5(tbo7y&tSILM-
z@{zu|>s@=(lV^!ucbC{Cw`8qMG>{N+XA7zT!HZjE)@Z8qg1`hK{DO4)FRaAf-5yhv
zR6T5Y?g6$Dj3!lDzQoB_pSMAn#9f_d0saeD;Lcb?-YE)-nX1@$lkd2?8`)B*)scBG
zSzos>iaZm6cIxAknU~Z#7Oag1LX>-(*BMik6W+A#)EpBiUT!kycVW1({OCw+%*m>R
z;C=t?ncVszhk>iR8@=OUPRBoL^>3^t&|%@pf0DMHGiTDIz0~q-FMuk}iCTz~MMo9q
znd?P9sUQeYkCjW3#5&9p)=ZZ^d7C~^;MU3>BbK4U9==IA*Y)Hn3BNUia%TVI;Kxg%
zOd*UnJ+T$zDwx(g%~J*^^G|L*?|kRCn$MNdchw}ObC02@(us=SRVGvNi_|_+OyRQq
z^4@GJqUZRZon80Y!?y22i7jkUC3f?XQ$$h}Zvol+ri6onAi~P^ams!Z8olIR&z_!U
zIuF8vHN0FY5q{k6qIl8MLx|@rGGu*Ld^<7Iv|7}UlFiqz^V=^(L&hi#HGG39HlkP-
zFVIxV;(0t{Z{$go$y-li#P74z!)(~w8d8Rz+7}78UB?;)7H_GXec6b=2eY;}p%Q&Y
z>5SA^eM7UiaGHwBtpBlb$yR&ETDHiKwg+dhd*#9GPTJsbs!m1#uIG$pB!x>ndIkPa
zhVTq~^jFK*6ve4-grv+D9ak7)4_)N9iK(9l@RE0Mqk!0O=)iKY+;~OZM9nR^P5T)P
z-aa18PLBf{l)d?$Q~vRM?;b);!4!K<B}<d1H$KjI^`$l7DiL!00i;-H((1Rfw=)m5
zb+Nk+w7@?ZU0n+1ix&a~@6T0&ch8NRFZj-wJ1Z$E`E@n7_C0jXYU#Q!IfT=uF7H&>
zw$bw#{|jS;v^=%(fX^(_m{iyGXD8<nmOVa1QHd~i4Q7~Zy`0)M%w1s-+Im&cKEIA~
z7UUScDipHh%zJWNofF9X$pw^qix!`o)d8zbJNb{py@_BGQp~UG>aDV$7oxwCO%8^Z
zR=;E*8Bhq%QqDE74;iZ=zeFl?k=WDkNd?>5kl=+g`%k!t7iT@TlJs6_YY8a@76_zR
z9SP)Ni0})ysH790(BzJ#Zr>#~-oM0m;Gj;^a_-mX{c?ocVHnb>0L$lMrVKE58kPzI
z|2ON_W7SkF(^CQS4Z^DX5=avcvL|O{+j{&uGc{&Y3`&zUsq^3BB>%2axf$$^+XVE1
zrmGiYMliBA`?d~LN53a5lt*AX&b0lFPPCeXzb|7GUWU4xiY9<5AjiO5LurZXw605E
z0312^itgu^2fEQhZUdWIfvHeCN?}=+5bN_FBRb#w?hzTA+QqHjf}f{R>7W%igi6LE
z)g>3LesTf21@rK&Vp#H4xxf4=#kd)OA#76e$z^H<#))<+fKx9Wj5wXwuF7Nq3P*Fv
z9{OND_+U56+GyyJA1O<1plKI<Uv45~b>2&03m)VJ!-?LDtmk2M+Fy-OZqp4s$AA6|
z2lBGP>9Vq0<Shr6rAYUx#Dfo5CGZ@4e0m4X-kP_BxX84Gh*Hx!PShLgl6`$;S;=(t
z4EyD{19LF+#J!RcJf?a)=D89^qH;6GJ<FTr`j;Crb*fF(L8ED$`6`k9Yme$pcb+}M
zWh5r5ZuWCEnnY7Sei1;@M9%hb$Gg9E^M#qg>_G`R<A(|4i$(iAT~?NtTsOmxv(TQ4
zoNM=0BH`=k`#{>L;TJsdy0JF&?NtH-{O2@-OqWJ_a9nz$KmTGV&<+#j;p%_3IzlZf
zXwrVECQbwm#&Ht1>%1~8JrCA!(_;keDW2N8FTeA^*<07s=cPf<s}Udj0aW~2Oox#d
z<MRwn`E943f8z`MwluaCpH~50MGcUGqXV{I$hXlib=3C#I<fN@87df!i1gZ6+h_ul
zoK}~?o|P_%gN$zQ<t&zZN0});{c6Tk<zRnLA1H<x2#j3FDIcT#sf3|~+0L{}<yWXd
z?~DcN6IAf2j?LUdT_r9h8%BQ`y9}eTwOqb=Pi;geN&^Ch>4@$-FHK+N1U9h8gddp2
zP%?~udB$VUW3;4AZX9Y`Z1I5uyzNUarsW=2IV&<EKD}w}dwsUhqV2|wK=KQ!xq7nJ
zB9xt3;dd@b)`qb~kq8|aHAI3fmG6yiPgIL}tZ{!ea<ylYE9p)!1Me)WdZ|)xk*O)W
zdbwVT;Jqa9LRGjbQCc|PThslG1X)!l{G;@{e8dHi3(9kj^U>UqceDyM`$Or3wyYNX
za??N9pE?=FA-=xIA)t{bAnhbCkMCbgK}AdY^o#GEIm9WpJ2^!S;xRoe*O+&AqR~|7
zvVaeiA4vU0vwOnF19e-hr;z?qEt$%4(>>hDWkzrDemydeV<g3>*)aawtRI-A^uI)0
zL5@JHG!&Y>k(?O5l5{9Dxy~odcv!gUre|ZqX)>~jl!cllCqM&Y$Bx}0*Stddi!1r(
zSHkCq=NhKW<j;D=&SVl!K7R7#1#sQ!B6&>f55zDM1lW4ej$*}7PD_yDq}<4=(yPwG
z+tqIBk+5A42pvA4E}8pP+O5s?v`tX>58lSqQv6P<Z_S1(2j=piOGR0A<@8~ylf!>W
z6NW7?Ng;y(!)=idGb<s7F<^rg??>=0+S*wNt+x5bMaO5<eH&H`qyB=_%cNBGjRnrJ
zc^#?3MrachOsF`5C#};rzMu<|#8G!ecFcTMX9old8piV?@)GZiex7ieb=y~s<dt%m
z10|;f%dp3VAU&s4qWWFgmKNu*%N3*;IcQ3??b_vzZ8C?aa+k~!Y>kyf9A>%twsdjv
zo+IjhBJzo!jP+3><k>+)QF}(T?aNTF4!xO<@+(L>cDb=CO-A$WB-{NH5p5#Zu8CuF
zqTC)V{p@BQ!rs4d0t|YOF|R1q_(O@i2M)T@&~OjZ@5(+>@m!zWY%XQLrrJsT+O><O
z%9WCaiC1?1(AN9)*s+GryaYkG2PZH&+y2CrbFqRn`4$zb+aHdL<P$tEIEY&ZC*&Gv
zZCh}0m9sQz4IR)loTPoeby(1qy7v6JGiMABSKf+2@bt(T_2#FnPPa*diwBpM<b#jK
zWWxxR$eQjSlBJlpd?yP^v57>HK!0*9(VM4vc#n-uJ^%8CKEWl2{Sva}(V33V)-f+k
z4ywc<c@q)HMM<$EUzv1BjzJO&PITv@)+Echq!ISh_u2a@&7%bGWMwuWK#C|dcOxuR
z1DupVQOhj0ufj0vG&{2UUf7_Ow<JjWXbL&sME09+>F+gJFYCQ;FlmS?dhQ-io1&Wc
zro1^dRK~yO58YofEG>XL*CoH)sEZ$W)ti&+<K9?Zw^)?c(9`oeev$j?x5=lg3tU`g
z_Cm~Zg$sdU)NT@W0bVVqNNv;?m`<JFI86{{Xgc;hx~I5jFk(e}ZJjdLp-tp7yJkw9
zB6Ili?v~?D;mrX)xjJvRuNTj=-kcG6E?dfdEEo{)7=EQfiQjJ4?BPr;G&|yLJ&FE6
zDJs`x%lh>U#7JpCR@>SEi8H9Kblvec_c=x$bV>WFtbol*El`7kAvV`SUc?Uk4c=bO
zQd{E>@o@N_Iy;3P5?bw^`w%}+FOT}Qh<^WS_z?tjJpUm+`?+qN-5cuAb1eZn$T*Cd
zg@QuiyC*_<OmH|wxie;o_o$x()xTnf*KX^JLmc376#`9esREOZ>t0z*_*c)LIDPse
zV)TcS=pPqlc^drFIs6v|r9vT(yE)sLQIXSg&Xi<?@Lc?2_p1t*Jck_Bm2bhx7Xi}E
z)!tWW9q&+S7}u(gVT3$FzWv$`Q1TQ+EUT{Bh<>dlWx3v!6Y|()OK);vs39VLrXz(-
zpwN;pjz)NydU|>2fFck@J6}EWLGS(Mw}};ur)@+Y`trGCVDn7q21e{qHWy`qHe-W}
z%W{3sMe&P*%{)rqQ-on(>`JOk?dbqau~4LPJh&sd^G%xX3~4I8_)G<Thjja`zw7G`
z$6;?fXA_&frX9xU>n=?$;oI{o{L0PYRR1$5e*bEa{T=F(<sw~gxH1+rUhev@{iM8M
z9qwnc8m}b<g$QKAH}`G+LdaTAojbSCIN{)`@rb3k<Y{A^2#3COIH#%WzV{iu*0If=
zw`*f;s_AdHqET->P+arSSD+ER2u|!d{6UqjPIZ%91~2QvGVU2)WI2a$xP2~jIlg4~
z8v+GBu36@V9Z|Pug*9dD=6m(oMYcBxE|hy%9pQ_+tn^*=dpO@+<Ppmy&vRew-PnVZ
z+*res@X*0+Et3lQOlKqIDZ*1Zp4IV%Zg21gxw{`qX6yOsO7X`9yB`oh+^vPa-R|PM
ztLL*wnx9V(4{K+co+0`})!?^y^k@3u;SVug>2q<e%EnQvn7X}*_CL`R+UIsy6_T#N
zBd{KRhow6TT@D%GB@igz^bCU75~n3+enoeidwQrSt0d6zDA~<{(zW_8)B^e8mSh~f
zG>bc6e_S0m^hR#h%KLi<Yj^Rwc`s(T!D1=D#06aXZayVzs_ExIhgfJFn6k&MeWG$K
zg`R(3UsloAoyGAH-?USi!%B;JSH9=7jE8pt;OS*Y@Txr&s8l766FL8)3))g^d7s-(
z@-NF=zbDKTn_R5Kq$YdKOI%1yF6J+5L73s)J6@XE%QR-}IE^mZZAQOK{QTv2*-s23
zLXMv3@s>OSnEIWE%)c3n(TZbK$4_*Q*{daY>gJkuvFjcoy3q}m#?Tq;-z>hrWo_KI
zEn$OqL9&7+%WlCePh9dnX#f@f`Mb<2oJG#2)hDJ0^TPdUc0Byg3il)TS2!rgD|Z%T
z+J`}Ht-4KK*qGhTZSJaLimUT`(tel9+uu#6+*h#o&t?vn6FUFt9PkH<{Z854!#w&V
zIsH5LJpUkl^k1&!w{JIn4t2e9c^zk@e;>BP1LfZ~3v4Y|^f_7>)9JvD%|O{_fn6!O
zE1PkqT|mEYn8*dEw_1)Ul5?{p0pM>@>7pu4%3-jOEYp?A>GJU=`TqLth|3SlOI*5W
zoD*-pIRE4{W@eu!Rp>rD4Z^IryfcGxgwR4z>n-8;Ly8CUZl7ON{Pqbj3c{OcQ6w_D
zzxaXpswE+IBjI6OTtDKgZU0o4|9Q!gV&c$}ouRG(;Y*ip<{C8AqS&=&ulD|?L+_69
zI=YHK?$_Z{&VP@=b@fi9{o1I!Y2y9y+6g<jASz+oo9CRCuxz4=e2#@K2szjKPq!ty
z4OLDo6GidL0BM_~U^*PM5~N=HOe_<Shy<NcF9K3wL&X=|?>9IWtcj}Hghcm#yWN<J
zt7L%u0poH|*=g20D}hZ%NB7zNpNeSHYO_JmYQ(cV1L;=L#)<hqq}0FPHw@)Jn$Ong
zI0#8w%clfc&-e29b{1)-=q9U-55OFc1Y8WpIWCgN^>hD3@N^rf9!1qe#yt!oYl!6u
zcM~=(<Th)+bSG*~{OknVJz7Z6gNcCn!u5=#Gw!N!F6O9iSg#9X4_%+{jjSVc&AV<Q
zy#8{_L3F5+({-DB<y#GxAw4%YcLTc_=7|9`egSiD6FwsTa^?8lg#D!`8H>Skrft3>
zSdvF<$>La5b034{!mk7P?_UL-8b+L+^yVX+T4SroqQ82zn=(o=>Q}=CG8}Kr;yJ;U
zq~Tg*os@5}=2;?*v1z~a;o~dZFw#<c=Z0hV@sA!2c6Fn^Z0MK^vlVMa^W99~o>`Pq
zDKpuaJDlb?kxM${#&KK(c{czAKSNpiE!nd`zse<VPCd$e^y}9|wGQ9$VGo>%W$+TK
zh60KXLoO0jtB5Qq*H2SkZb_`+?Q;{<_dE7*6lJ4oGD7%8J~qg#C$}Vp@$C<Lz&rwA
zpZ7RLkN%c$V6N9HNz}|N-N@lG-O)^?HMHxM?)ro6kPH7fOw+!`tne0)l{kq-q=-*I
zK&Mo7lC|@<+xSi%Vv?1jWG~+Nbk#Dsg{*s5dV29HzLnmJ;r!&XpVwq4{hC46|I7Lg
z^WD<?`Y5!hbjT$gK@ro5Thjx1z9kvB9A^8ds4e}h6_%{(_ufbAC!JU4m@JPyY<nri
z%)oF1cXifu?t?-kpCuiQ+jh#gB`69Mb~6PUCb>6tTE1G2c`)DgH%F`IT<b-*H%=5o
zo9t()*M+eXZO>3|k`)r;`MyRXFfM2HougDgXS@H10-`tYjfy?@anrr}SIc;hc(}VC
z8ZGrA=53oj`a4zp_qFhS{m=?wBYmX<Df+HnIC1u@5puFs1UYGaBgp*MVSi#t7Isd5
zvn3Q#FLppz)3i0)%Ur<j&ApXEbF}oH6M+W~3Up($CcfaE@AhT6XQxzbr2`ne-${3E
z4F<VLR*rlVeRc#;Jd{|q8V#t4q%MJsLhfRdh<PE0N@g^xdd_!iy){aqy%3PItub)U
z*n$3n)VW~SVo%piFN?&!t_&6V&jE46KIdK$Vvb;s`io$pVK8G3_}HIE^7m~{js4)k
zg9Nw@f&1zQCyIxO9h*8{i4h{IZyih>;@bP4oN+Qw!|}z!(-ThEtu>j8T)g&M4T^P`
zGYf>kEv9x-Xxv!6G--@FxtE^tC0e5QnL5*P?(iI{LS$=i#8%wE7qcEAl$u|P0HyNf
zFN(0~+b5<m^#nDrcTa!Rt_bQZ0A-~_Q4devzFs_$#2ZF5nJ37}ne-RgV~p~WV;`y+
zG;MJf4Ez)jG{(3i%OcZ%DTM!sAb(5S{u)XCa!O!qBr))`k4478b)la1*(?Lus6vZS
zn95=7h#aEkksfrj%r6;qUPN<HYc5=x?<)w^mkFn+Qx_ak&@?#+vUQv1;ddBzFR{2@
z=>keYa;<6hae9V<2$%-N?B^|=wVCU5M>G2JUue2+O9N0IWHt$735n`mnY^eOKVSuv
z=Ua5iQSdqR_FL2x)s2fBYy~zv?A%=qww>Nhy&fxI$PUU09g3bmTFtE(FGNIh_u>Eg
zoc|vE{<gON_A4SFR#g><SX~~kvtFIL1G>>!;6HFtR?-e;4)~q7^T&=I4}UM=cN3KF
zsC)N8_YPFj32I{5qE2(%x#sERMcpf>;`i)X=;)V#n$Ws%ddo@|4DpkIkkHz}S^4_+
zH+**zb_>;=`_%tsS^n*_{44*v3l^nE4i>Zmet7nI+``z#yb(Ea=&xzazyIo@U_5Z~
z=gXim2XIzdxYuvT<-h-uKdzn*bM^P{|1>FG!kCo06igcN{k6XM9~bK1mUbrQ@u9-z
ze(H~vgGuQTj=9s3f3Xtz4|axo6gV+hab4~BX%XX$`96!U;1@IUZyV`vpYOlFqTy$7
z<T~hPH8cG2$gLtEhOocZll<?0|KIuan;2_A;XV}iPirbF@DZvyN&ox#_MbjTG~9uu
z#r^TAAN#5r<ISeGt$66rzp`@w`Cfcvbwm#PkC$08g$1%(>db%jfB(8v5G1SU7?gje
z16ri;y^3>y-EYwGzjJ$kd*s6i_?Sq;nxFnj?~Y<_&wII7Qvds>SgZ=`n9ob`r$KJ9
z3Vgrer1*be3^)kJfS!EogyuhQNjM}{!<^D~{|8&933HC*X-IzfBUSkSf$#qZzTY>)
ze-rpbAuCeNdsLcE{C}_j4`C0ooj`G^<@$O{Sy^R6y-VSSjg9RuGN^!ko<p;Ap6%Hy
z>OVfvusTGqO=Y(hwf}vT;k*VZxc_baxSy}hgAJtokdjG@EaMAAzf~6hVdMp^LDJ2k
zee^}=doK^;;mK%g$A4p_rG2+K%0^GS{57d>u=Q;3Pa~#Edf4EWYiBb4QYigA+W(Eq
zrM-XwXYlW?|Lj9*Vti)1Y>)gOT+=&U%pvF>>-RHOP{a4d;t_~{eo*`?|GQ)Xk-5Cg
z&FE+NyvhV0JJ{VU;9oqT|M7|7P6Gyv!+0^jyqTBbV_Vt%b}szmKmH%yeS|O?=jQ_I
z!YoeIhPBo2+vh)f<*QH@d5Ygk{~6ya!5r5!Yn^KT@12!@V`=<I?NFF!))*x8Ge<gu
zIRLz4t_A-qkLjN;NUJ<dU4@&B_~S!aVd|`fwKu%~?uY#Qo-4ltr>W%}Y46Wl!j4HJ
z^+V?H|Mvw&945gqEDP}YBf<EGc+NjwF$|(#^9~(4)FpLYOz9sz^35W+8~X!jsy~)^
zgeF9wTW*Ah{?Q-&<G1_kU$}$WrPR+KK4gQ%qGiv4_s`5U|Ft#hE{<IZ;+Jk0QkJ=P
U%C*Vh5)Vm9$X(C8rtSIv0EPSIuK)l5

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/first-ui.png b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/first-ui.png
index c86981f104db9c2c5fc5f8466cd45dea17138be1..ba7fec54088ee4333242defe6d97e9e06a50e9eb 100644
GIT binary patch
literal 44374
zcmb6AWl)^K+BJ*<K?4K}9^8YwTNnZa2@>4heQ=i`!6j(0A-FpXPO#vEyUXD2GKcKF
z-{<>%rfRCX+V7UDuhnaHq_UC>=3A1taBy&#a<TwbIJh@ZI5>E3)Hkm&?Fzw7uMu#{
z3g4tpPEHOF51*f&VK1=b<KwflGuVHAT=u&!FE3AzPxtqCtE;Qe&o2!PbwW;S9Cpxy
zgM<D3{fo=X-QC^A#l@qeqs`6DXBcc}X9xED0)xF)^>lM{Gc`3eFgV!O*4EqGTT@e0
zS62sndV;}jA08fIu(N-E7;NtacKcf51$y%y;r8whc7F$ZS$%$lJ#G&_AI!mSx0his
z1B;-S+tZiR!Rw3D<MZo>Rj`(twy|^4=;O=poV@JRw2S+fOh5a~{N}Uk`>dKV*yH5G
z^?Amx64>QZcKg~uLDZe9w5G1Jb8NkVz6tE0@o#08zk|cv>C3Gaux0(}d9_SMUTI+S
zzGQI2*(snkKmGaOd1~*$#Y}&zGu_@FWMgZ8XQ21@HNTvW%{TeSsk+shm+HdbHU_|h
z>88`={^u)L`_aqR@m0&>@kU=!qLs?+C#lE9=hASOyvpvUnSOp&X79|NIH38<;em{j
z*{#d3Yb5yo<>Px(`R81txa3?}&4AhF)STFmxTx4iH<`oH-&1WRv4#EN7KUZnY2O0^
z)<zn3E}!q@*~|S6TgwU@H4NI*y=ST;8sqFsIv_dDn)icoKhkR+{+!(!M4ALwK6Nxd
z&#vw)PbD_a4d=N(MJj!@NYr)ztrzjf;^)ZK>3&f8WW)5s!)W2n$!37Q%H-C`WA9Y+
z!0bk;OKoPv0XW#%JKpcduUkQy{QRn?=CH?T^QYE~m&d{Efs^{t-TU&<{)Uo)M61%$
z+LEc$jp_cb$rZ>Su&|Kqg9*>eLdw(1DT9z+WY3Xb!{*FLpIh$S)YA5Yo6dc1>+0U|
zUD7x;xy1SY>V5h4T}=7$)_hl()~#>t<;xjp6IOW!do1<JnR&jmcTjRIhuwnjTq8#y
zOR$6dn&w_DaY1#~4=+RRk(y%jInI<s<d469M^8LGX2iQlGrct0-mnYD)EzarOS8#%
zK79AhG2>>`j5|8$oY|i~a{^owQy$$f&ZO$tR2=YI<Oi8j&%wb_!pQ+7zj?wRwWEDg
zpIc>!z-ULG{w70hAUH?mrFTLkz3Y{&9oQAF!1_mqN{y=aEyYDm&qrlK0Z8!MMGE}`
zguY03mJ88_tm9-;c3n;DvT?5CDWFMF#g|F;zutf4VK0x%=(k<%sHhRU4(H2td+h;_
zu%*j|r2|9lWF&ZWgi}!jjZ?pOti<({Mw07>+7S*o2<Ql%ZxC4kFtYcxbWsGap{Bt=
zq@Xo;1OgE3-P?skY4q2Su31-b*C`x4IwSz)yWL+95_}nK6~uz7h3$EYQ~fYUU@rNZ
z!6z<o2Ic<?Vno&cYo=YMYiRcW^42oG)`$47Wc6!eS8(9Je*OOyA%dVZC01XoLcMNg
z8(LH`#ptK|E8uQ}#}u)Gg-gIYJ$^7ZK_J8DdBO%9QWo+C7DwTo7XS)kPJR;*p|Sjn
ze7omN{si+BWC=-1Ag$e1Ix}@*JqN%;?HN%k2W3wc9Y6J7*_7k2o%6Is$YD!OFsvBK
zD>2eT60_ek!02F4WLPJmZ3nD>KRwZ4nTecA75R(UivzdW_9dx)z~s1%x?=vCbp;i3
zBHBenK5}~U5?!qSWjE+`V)`HjchwWq5@|)F^W%I=ziQ@jy#zZ3!0eZ+C$$^44saFN
zOXt7ib14jv76~ivHEdVPA$XB;@DvCmEV6z^)rsVi<pb$H%ygbl6ZM%!kacdSwNmrz
z$)q3$EF0AC_Iopk7(p1cCrO)j$y*`~;ygs(Jr{1G$NiAX_n-uCk3Ig8qFioRtx6-C
z>}nRL6QTDbfQApqbRu&*2;^?O^f6+G)nL4nuzs<RWv(k$p*h<q_Xk*xk~BC*q4e*L
z9?MMFR7xWcP~v{(5`ZgM;9nwsXBx5PanhGPnlTjzm2pjfKK&2}v0Te$&49$^N+Zi)
zQJRg(B0uKwz)XafR5N2qEPQStAB5i&y6$O3h}j@QK;wLHR^|!aoa+n;-TsWDomvw9
zYVoW9iZ{Uopg1%hny&;P(jZQiD%^jOcq1tUehSssK8b_5_hD^o{ga?uDgFyWw87WR
z9|UMp|C2dPGZN!wYT+sBJJj)Q?RTiD#Kfc<1)kOCY!(1Nf+@&=j#4*5j6RK(^&!pZ
z@Rl|~@)FalGp0cLG~8jE{XY!}I(=qi{g)Y|3YYk(sO~;hjuO0H>v?WMxW{Q`QR<x#
zXh-#s_G2G2k}cpg)Fzqni`j%o=cBy>&dO>pa=bsc&%&V^tusv%j;KJV__x$Rku>Po
zP2y1}Ijaj*bocn+r|i<o)d*;?WC}*78gD9ID%<}$jRrc5WRjy9X|AE<<gG|(c5XBt
z5`P{Rf7ycFQkWfOvEbVt=6T9WkOQtZxc2Sr3saIMEJ$WN=B5|TDo62Fyb2@R-u4H<
zna06x17HKN3)mA@dCmp>Qycr|U?xO5F01UdXFjP&hd<thCCH|<SM!O{Z|%;@tGnH$
zuA(fZNk+D#kDual{E@Hs#h;2i683v9s1#BIS?Ivrmm_~GKiDgMPw2Agx*~fd3(ijS
zzXSx>zv!i%7>d#5JzP1$y#89{`P)O)#)9B>Aps?cgGS<6qn#L3VBg5L1C*G$Xkzc&
zn;X6!+`hRO8$zFSblvkA%tFVl2^svYMnXe7f!*LJy9LdFxzo4OJ};-@&qr#NVvmln
zsa8!!zN6K;>i=|x3QXzx_~2kdP`4Y8>Kz)05&m(PhLvj9?rRS_kwSXi8{w-NHw#wK
zeYU9ikr?)e(h)pSi<A^^0ctZ07u0$)u{W5}=uwYrS6tWomar$spe>&Y#B`He`(x}v
z`TtHOG7i~@830&Q6dFWBAq;i`y-`9@0tzH>25qYbK5dd=i7uLTMMsRil*zh$OdEe$
z>LmR{+?+i$l+hAS2(b1dh?!)9*Zu?~ypbMV!({VvOcF;Wd!#Ebsf=I9fA>9%{O+qK
zPP`(eP!;;wivg46C#N_Y=zQ-7i1`t~lqB;n6^i=@Mq68V#<K)+%9a?_Z9#@dOIYd%
zrOzq8!<+OP3-g9m%Z2sxXaMr#zTJ!T7a)ee$uBJw9U%SPf=znh`g3^?5sv=MRu!%p
za|f7ho^3Np<}Gu;d&D0T<4hQSQGG8X?5h3m8;#+^2=t9QU<p6A9AU$qPK7XTFyd)4
zbv(Lz2})EVq8SrJeZZ#j*2<3>sg(nsNXI(;mtve5r+ejyWP%gFZGu9-392>$UjNfm
zgTn3z!BQ#w;iDYThag_3I*cDOnaD2#^cty}8v_S#hT?vdHX`bOzlg`nUl^6wTs_{x
z@l5K$rknFzbwq~uk?CF4%&1wJDmsYBkt6!U|E7W#;E}@QKHYZ3_8|FZxy;6<(wuX5
zA!yCB@D9w@wrj3QqH~oCN}anYF4tC5QB+jUpu8-vENStU7;c=~o&}b^F=%f~v7rQ`
z3!O|S!;aTp(lt8+9z9Oymm`hxtzz}XLW6PRV<Ol_k{zo`O73fR=4_=s9Gx)^*%qtY
zHRswr@Bc{BQMPB$syWaA)Q3(3wj<u!AyG0Hdwq=@GyBk;r<Pn8$)+id_vJBt{2k4`
zaK0y;mN4)1h%h&q<AnGl$^wkBkz9WDbgZ>*gqsfJ>Dzk3bu&8r8)=4D+-BL}+38Ak
zpaIwyVynX6+3_f=a?J(Z+G4-Wm+mAucb-|{w$oOegSZ+#7vpqvlJfeXV9a*d`L34v
zxE<fOfKvGd_`7UslCGOzzZo82=an-ZAJ(WsBwPUl*!|a;8KhI8hK9(Zh9@@%I*&iA
zP7CYWCBkwaitIg>o)_+0NgdpmMT_rV%qJkB8Ga+TGgyHba2+|Oz*SUC$%!KZEz<i9
zl(|~!9jrjrnFipEXlmzBpO3ABKxr|!ODm8h?yLAC{}-jJubh-0bYh5j{Z5~l$5*gl
zP0jq8LuLS{0|cqi=bE%IisQ59n1gX`VXI|wz_ViiG9TGD-{+7Frk4lOhcu#KaQlJ9
z8f^VL@pZ=G#R7Bs&~w?d-Q$Xk!cBmb(c=I#xK4|}3gYE>I5qw<?oocqHkdq$nNH&X
zAwH<d;$7p~fDdvl-$gTpRAtw;doZV+9X7meBw#n}m>&qd6oV_4lqpg1!Dz0LI<=2t
zV^k$c$;<`q6J!~)cpvG|=R+u>{A<D_x6{~)68{W^myFq^%L1jMUYa~ycrCYQuyn3|
z>09&U(Wp3nzMA5-ofi@8hmPbQ*z`xWp4%O3y0x;EH3Ps00uV<I&6_z2-YRfIR6`L}
z1Na~#Iyx0_1q_n>^;74M*{>jI&dYJYuIbh5u#KM*L1e@~Tjqp7kGip}qZUGJ4Wj-e
zlZg-AtYW%TnZc>hJx*!PB_<^qz7#&Z$c&m~Jlu7R+14DiXSq>a6X_#^it5^`4p0jm
zW+F3eF;mThqYu7zK$pG(pNXEQZnL0x9G?m2Q+b=_sgZPmz!mn#s?tcya$kKFMGsEa
zDppQxzrwCaHr?_c$PnSmhANglR&Sw<T3h_LGjNc;%12AB%lEb$9u<cU<07T<`QP%>
z-55am(qCPTb*sEutnkUitt5dKfUC+;WgkTB6>VCu1!s<10DJ4n*a%G<r2$`twg>gY
zVuszP68+(!Il>tc`wdobHgwu8Tm&K{)ZTuo?_sMUwpw?B;QDAo@z}(3_=40RKWwv!
zUtv8h32XHYgw7GGb$FK|%<VXxdu$3t`Sj@mftpnX!|Km<Cl7xGUgu~*n4dU&rz=}9
zUt4A%xw=DIv)Zvz%;IBHRe;o7dk!?+S5L~1<9jxA(Xa}6m~-I1qcWe{-Sgd=DCNFq
z23dZ7)EE6*DMQJZ+-0%Ar=6K)juY@9!`90vMW6O<fd4qdR+@tU>ATrh<c(W;eUFIi
zH`9giRsIt!&j%&2=g!s9$@T~5mRSiP#ysa|Sd9myrj>s_G8Lsqq_aaKqEY;KRiox`
zEbUY?O9zQwsn@u|-|M)p^Eo_#T`9i9RMcbfebc-l@6+9&)$EE@v;m7I>+?YqK~6h+
zmFcYh*Q*APx)jE;N_`;9*BC<GtJ2TcwHba~JF%&jVIznb9~V5-Z99p|s-<Q)Os`rk
zRm2U-ax}BO`;XO4Gc;%)FbSPIEnpWq%crJZF$<`i2~w>9N5HFjzP(=Q>LRgAThP6%
zrN_R~zXt6dtWW}10&*)K;|`<@XY?z)7D|jS?0Ge9D~%6WPs>ty-3*`UmtMHYxS4Ei
zE0H@q7dp9>mN{r{YFE24xm^e}v$6^{ee|Nu)DbQyK>;tg_K@4TNko*C+f9ej6<(c@
zI>I0N9=Dq8!saK2oozZ(X(bY=sQMlw&i-m@D1)n01S{z@5u*qpKLtTc+_zPf9s%2o
ztd@%GCk7Q>rN$7$PT!%_xoUp-WsdyQ7TD!ur*Wakli7}dV_J=+*dE*TsaR<P4x66~
z(7?6*2bq}12IGy#vPfyIik)EDh2A^@DX*Ws+kVoXHO3>}u(;Ljn#(tLM`Lt*Cq{O!
z7syWqKbpHr#~`;2QVSlMH4Yj}a`dS*<#(ZGMC$=(a-xm>%K?>PD#Gp)$pJ3f{l1mH
zla&@1wfQ=h@0eS^O}<vJ6Ow-B50w!m4v$q7R8I0TXmR=$bI)&tdS7QjUXgk&{QjOm
z%XxC|)r4)duOSF0@y0!d5!(#_*yXW*Wm(IAVCsP2x9ZhI?<s8m%%=%@MoY`W?d0r1
zO!R*jd0<D{{up#Bai%hyv$_$dQ{9&0QtB^TwCEc(HkW|PN}}d$rZ<tXFt3aa@T2@=
zc@vtB$O9LGB07D#^G?fbo&g>;woRJQTxJ)+*UFTB02`kbQEu5T#_+EU>*+iJ3vEF1
z+xDTYt+uw$Ow}Gv4TV*kh_;%xJ}85^yp^FrA||bzjbP#RHyE$RUxICryt!3q{!f4Q
zukO6EkOnIyp+&^1r>Ouh4{<eK-{wEurk)s5KzfhB2=GLRzZE+JB@a<cGXkd|_71X>
zWHoO5?7LIuam+N#7v4EH24z$_RB99z_5ia%&H^W8`=@L%HEC|nZ$h+OR{l8(oiXQO
z>D}g>V&0`ud3LLi5C#m2^T-zL9Nc(1Q=qA4iifDqlWBXm6^7JRw^H~4B>EDm)#F=X
zn1z)m9-fE{Aq0w>;4hRJknRcM9#&EPL%4N1brTa2>yWU+Si&T8b^A4*uA!trnnDe}
zlL|8Me(!NxjyhzQ^uj+=&I+=|;MvzEE76GUr-1a&@&6BO=>At<4R$*PIHB`DY1>`I
zE%n$dsL`Bl|APZ8fPnv@ncb$YSf=W=JO*?KL*B%H5lHX<A&~AD_ob)dc!CvwaK50q
zrKQ=QH9Gp|6pk#07B{~%jz`h<8}o;WhTa#wuNP5>+f)D#Ei-y{ca46y3@4uV0&`yU
zzc4L%9N%{H*p*<&T;U84Q->RGdFHVG&)pA+Jh8DfxBV<A-7j#htF3t2{Yc#jpXAT%
zVrkCn7?@h={_Nh*PLXkDYbOp}c{@<4h(ibO#Q`DIPM4fu!Yw+K<Kk5W)iq@8p{#$n
zx8TTDvmKCp*F3u~rB>LeRA-^$sS$e`c7`PdtmA^3VdUVsFyquQQGZBE#`rI+8Kwla
z>cER6eq*b6iZN(OUrE`c^#onFi(lQ$lfSGtW+li&;*!>W=D&El@oZ~hs9}7@Nc*6p
zt$0flgfAMY;$$kf-Op6rkn!;qiiku&FXL%&sLcQ)WTNMLo#uXYoaqYE!ZN1e8jYfw
zW1t`P4cy-nZV=gSZBT#s+dmf_wnuFoX3cLhw-P~~B@~SrgPHDZv!Nm8@fRaIe`d#U
z*q?K8y+51qAzcb2$R!R^Qk|2~(SaKb>Ip`rhPfQUS*+y#N-q<VO5fWhZHlBh8ynrD
zOpg5D`W|haE~U`rHr#m7-RmRXyZ+)I|C^)kVI#Xq5PAQ;Z)OdvvGL{1VW)X;+(sq3
zQwFLn9uVrV*UX5_%Wcy5opbwFtK_yuV?r_d(e9`#K<Ej36Ap<Uw;Lyv6<+(x)qb*T
zAg?I03Dc)w5us0v&s(v;o3YG2%U0Cp3x!)2#*-S}?b%sA)wvo&LCoyE{Uo@WFv>Rw
za5563nU+Y!$3rAPvH~$s-kr_EYrU;*<MVoR?<r%p#sayX$?Rk%{JB5)?k}ZLwcGNu
zT>@Tw*Ah@1=7X-|je59G!&rSg5eYy>3!h_Tf)F}$UZ1vHjC5M|k0N<I?T*0i8n>SB
ztt>xyunS~YiTUoNXRWj|r_uxr*&9|b^SfOK3%k4DZuAeG?m~W^U5=bjKAq80gDdjq
zxq@IC8t%7_x+|H-0jFD*v9}iN%_||F#ZQtR_FKhI+}ilJcFkeg_a2nx;Z=I>z)(_{
zHTN!ivnlWC<Un#TQr+qNXxg8$Tqf0G-1q{(oLUT*v*XPu5+d3~vk#w5NgH@5djZ|s
z)aZcU@;2Bqc2s)q*xP~p8U+DeV{t)W2ird?!oi%uy+i-p#+KhQ47R-R5||dR6}cw8
zL#XlKY=#{MYrpp>_qJF*&*W^%ca>j~F2$-SR2a7u@K2``N|juaW&7Al2-m%GDSmRj
z<hL|*;MCwjPsk@TIQl2FH%jz%A?fLz=4SzrOC}8Se*^YRY}^Dy1h)cxR7_NqheIe-
z58sgsc?}G8mNRnZKN_RhiIgRA&pusHpZ85cY22jshlly;87%kRX)TZ9gk9VewN<*K
ze#^2snh+*F)HWt4##l3ecf(NVv$b!iYy5OwAYyCNcY&bo-YYy!bgp;3_G3S4MB8`;
z&jMxaUDnCh2v^y`GfPQtLNu~Fy=&cbY7bK4oON$g<dqO=L!q;XO%>vlXd-n-Htsl-
zawEq&9XHAS`)9EkV-4&i;|^FDBXf3Ag-gcOE{;a)LFU9r#90Roo<9Ih_~DGS=SqvA
zl%tI&hNTF2=uP^gIfj{fglpdp8u$cT%F=owJl1}l6rmgDm#sLJXnAad=e_1`3s$+l
z{E=}?fwoadq0VMmdvB1XU7c0Mw8V5T@c}*|R-Lq9(Y_-eQgmq3Q?Em&0Tg?f{N@rN
zGOhkONI7797mfy6S~;Eibyp#BD+hFVy7xPh-20=g(I_UIU3<CG86V>VA->%cCluAz
zxxGvv1=FZ3ffrUQH-FW$lLRbyN<d{zbd#n5K;0VSO(aXwrgM|)u!hx)V@Ywkt#28J
z9V#6q+Pb$iS6MLz1K=mlI^6U*XoKC{3HrgYB&wgbzSB@Qw2>vWW94zL@omiw`5S7y
zb!mj!WT?niY%1H}m<Ky11~P!uk&&-b8xiq2HO2ebPC=K%bE4vSWR>kYR;ei_E)_|G
zMSdAK&7bkyeTG&4r!0^mp*YG)WDPg|+3wI|O~f4Q#_>=iz(BKk$13TTU8a(`^c^i_
zwC^=bnf1YOR;uch8yY)U^P<N+gMa(aA{yKVW{58)WLRUE{D_&ERWC(v!C5NE`$dYG
zVP?^HVb#Iie~n-Nz%^ZQp&MpKYvGvo%VVq+fE>Oj(8MbV)NM^(2CX5~j)T8D&Nmvi
zh{}fC$Nhn7&~KOF8R4~*7S~KRv5Mwi?M<^tUss;J`JrBb@6{qr>D{JllMKr6Sc!>@
z^?zzq%N##xCrL}_EC9Bwq|mq#`l;m$RX&zu>MW5pidq$9{ZyN;86yuE$PQhOcEA?S
ztw+coD@$#nE73Ho8onhY=HVTZLa0Rp>5_?M|AO4BS)a1E$k?LAag0#iv&*xHKxS&|
z4#)mf@WbsiK0UU?xg#X>yRN2(x8=-;MNYkTBf??lH@c&2#U1(Btew2gzT6;G$@b!<
zq+aaEck)~*G%xR6@8r=$QbzVlMTyDW^9q9ycz@}w!I9z5tdne#&TH^^qu&o}jYdxB
ziU=i+w^mld@4uJ3KRYEy3d7743_j9w3DAR<KA)7Mi```U1VpVqW4Bx6kUh@dkFg)L
z#frAWB6k5><MweWDKEa;U<cFbSf$4H!@cMMVaY4ep;%tK@Oh9fW<8YBdm$=!^LUjc
zZb`A=J2@ebFzM+f!LzTWf#!S-C69Dt0s~1q0;rL}`xx^fy);2s#^INPFgj>JeQtR@
zWIQPS>F=BAZwmkHAj4o*VSbI@gtZmqr@HNgKnSz|aAp2?-wF~5l@o7JiK=W}0RTEz
z&a-Nz*4zk-sPBy2bmk+Ym5xJ{7M_1fn8*tsLRs<&^q~S>%;=aIensKB+zy_V@|FSZ
z8*h%g?6OPhzv9;!>t0zKTh&8A44PL>P|Am^P|BJ6qS8l?jPZkx)v0aPMrcaqBdXQA
zyfphZ3+Y<(Lkg$fR_MTr3~m%yhkUwVR{u9A*i>8BUFCM4y0+wtg25$T1o<5|MPSMf
zJ;T6&I^C|pqt_PsacScb;ilOy|8&&DA>|im!&9}qNVfTquwy3~mlLtIWzXn6JgjV}
zD#anVN$Ep=6B(nhs`B);>(W+WR}WcGiRO|AP%L`czd`kvc?NaJ*GoXt-W&V@^|WH>
z!@jgTM2vrZGEL4D2s00&d>Bfz|J$-c<etCud{*^Ud^tg{+Ctl8H?Mc3t!tW)8giXv
z%|jeMdFJPA$|=EAu?#7(wqcfyb^LO*nEmUJY~;_KxvMwU$B;7oY+<96NG8u>CN4`s
zyDXCwsILumEfdG%%v3Gms&p1nKE;M9uxL=7-65HRiBTYlP%B=G_{>J!F#E_b<^v!2
zc1)Ezq-{DpKsNG3B9^ne!>Ri?FgPO4$Il&TLjCj-{F9@t-l_X&aD`%IK;g7ykJ)Fp
zN<<`J_9%1Q=lFw1fYSox<fUhLVy)&Pq?K5N==mcK*3{6f^(~q3fDd|HWgGw6Ul<40
z##oztK(pxS3pebs$;aVlae;b0|K$v3cT;}v)Od0BGj4Bu!EZ_9x#)?fBaut}qa)g2
zB0<)<#r#{NQJJ}&`^%rs4Xp&L{b20fnE3q1al2#hN)f|IIWw6j{RdAvpodYAcxNVh
zj`4ob8DT-9CJFTN%{K|(_vFx9F8ami=Rh9}tS#~sQS2)_X5mieai2c_abc<li^$5<
zZu#-O+scm-51u<4vApO$rfiVd7;=`|W!O4&C`~?~*yE@LIIT6ZDoo!=FNI4?OKI?W
z%o6TQ&q9n1v?MMhTYgd$4r3fb6DqadgkiGoP9_RI3$nR%l@@mLHjdo4j%8ZzMdZ2v
z{v%SJt}A#QmC5+1@lwBe!m%>uK%T**$&w_zC@8H%11!gV)TXj?h$a_l^jkcisL(5-
zk(Ft!ZN&5?p=fGW!lZlk(ttiPt6s6d7&NKj)_L&<SrKgD?<~}p*sJiqs(tr*mgr8|
zbtrfqD}wS*V-%{<nV$Hzu|lUSVlF~6k!Q7wOD{V-(SBEI3fV>~iSygJlp%!E#s|5_
z68N7B-_q#72FNsI9~!(0zJDqEqdtcu%<wKoT`L+7fV$B1S%aqL8KD7W?31vNw)z!4
z5(6P(u0#@GiA|lmx4j(zOL`z@=-g!y$B316|BI~$bm?(QS~Ut&{Bnid4h`pH4Bl8K
zD-HDzB#eB_0LXy8LNIU9#P9Mc8I3r}f2c%bsN7YoG~l|P%qvY%Z0h<aywU(du3aaR
z?}Ei=TeIx2nhYA>m?R5JeD3_f-8Nw;o?@1VGG<l8?mipO4@v6gz7N*rgo~yBUV@cs
zl*z?`srzL&a;&*cKv40L9cJbgXaDt!`B(Aa&~&lKQ1r$zjEIG5NV`YM>x}Mu$B-xh
zcYh#<CTB4>U>W-w-|!lzRlDn%=|M<(cs866KQ|h?G}pTFWGi^K?$E<~VMEfNscjnb
zo@y*fS@|3-TDoP)-7lk4zms|Th~fqy^SfWJ;{2rugCZ06`b&`1SeJxY>B#jR9l!0P
z9bik4oPx?KgkzKKH-y(Fw2lEA2lgvHqa`u_UK8~|Z#UO}%u!KwNWVcF42i5n!ImpD
z6BZsh8Xu4~2-~)y&5mBdKr{M5f*}J`K|HoE*Eb)`c!LJA=9RwWBmVnJSA|X%@)kyj
z5%2pJZN&%L1w&7PyYx)wfAIVganIk$(7ZOkoRX#!Ar{t?@{e00!mj_t!A(CAEh1;8
z{K<MMBLRCQV{OXl{a+$Oq;s7RW53~;@M7H5CyP+{qy$91b#LD_TFSUkD9zyAU7-_g
z9wq{i)}S9U3e^D`x3M)l5o@G`<9t-3^~^+l1*besbcG=i4(zVvTqK3I+@Do?P~iyc
z(v<~V0tR=gct}D_eMtT4Bdnmuq9QCrq>qIjKfYtFat0=C#H_tHrQUSrPyELS8GXEc
zsLzla_)Vuv(h0BJqXZZH0E!pN5XkZZEe(ey)Be1HnoUI84(-H?P~C#kC5ywF*FpTf
zG{2ItMkpot&?H4<=^3Q|_lc5#xgwk-r)HzS3-H&)>mPsr>T8gno_yPE_jfT{dx|zI
z1Y@?XV3R~ooYtUsdR)!cAuuz`i4I2)n9%p#6OC(fJ(d^+1zav$^&q_x^s_>PikA3<
zb<<e)4{>my<1RV#YT@5!R4#ohsw4<+5rP9>2*{)>;H|%Gq!atrU3?%56*$d@7ByX>
zG(l01)Z#cPiLH53REj#73qCzqRQuAWycv0&MBkh@wuG1Ly#s3uD}fp4_XUWOs4v+S
zs^~+?uXYJ2VvMI$$))tfMy{y*oh|5uNJVrr`-}>P<4J_qTSoN6ME&{vPVxU~0bGJ4
z7^#1IezNfL5~x=9ahl62=4?J0Pt@DdPGtHlWrF^ehAl{b3)lQ`p<6vvZ<n+zXoAXL
zuqp#pUQa=`MoA<XmzZbNKC&bf%GYxf-5UaApiKVdLOK7YvjRmnPS?o@P8tEduS%!Z
z8GUq{<W0-3bRYZAVx5}!yEoertupchprv3uwnW>>b-8Y)rfGwLnPKU_=Miuf8)KBL
z6<Fu*+AchW4D`<o9mefa=)KP$(emgzA@*@WHPw%Nm9ZTjOCO`jvMKtVe3+Yd#v^@X
zCHUyUdIW^oILY)8bBIfqLpYjYXk=@uCd#%KJp0b?xvjTI-&#u&2sS^@(0T|YVA;AC
z^Js}B;RGu*iw}rnaFk;9*fEYp$_EL8wkka-i%;LX+&d#1fMc|ilhYqwvJoYBSK~jY
zJiU_-o)05a5@^v&V*)ASvJ6pPlf)fIIWW@Cy`rSOOQ%m0E@mI-)>FL0M4T6g=K7Ob
z>1Zpt3Q^Z+QV7!{zpy=0L(pH|x1O#aKps8H>n~QC)Wc57iCVgk?_gj4v*}1oLBk8G
zi?J2%7Ppnj^|t93dH_x}9vGDy7BjkFlyJgNe(`3J$9Jv3z17iK_liB=`9p%rwk9|d
z4e|?TQCf@0>g$x+1LPzocXj~l$TEMH`R!lcC|g!0Ob50$kEGyOW-qavHI}1}7ATxe
zAj5E5luAr$YWeWo#|)eb%fkbLzLxcsz3j3Tsj;CnpTC86Xpoh~kBC1_bX_h;Qc_jU
zHg(sg%}y2QJ5?{_{%VWn^;78kMZ8j3ksYBGqngLECQ;h=1G31q#0ALFgnVK+8KwzB
zV6K)I)tb#hi(5s?w?vv{qOe@L7=`&skE_O(py4~qzKn`NWC#+aXW%jBNQH1SOB3T@
z)ctS0yWdrF%9(KiZDH7>*!pAc?j`5WJb%BUrsm}5-nY!Y(zf{6^%mh(Pa8K+9OL)K
zw}fyT7x#3>ALG8W?ofp1b}vlcI<p_h`=lghq{WtL5jtwmhs&2|(oBY~@XL>tYAt*}
zcy<`4xz6Z7x-NciH@~>puTU??mE$V7fI@W;;Vy3{y5yqav6EzQ-x5La-q_aWNf`v|
zTas7aFHOSRS}^!UuUyl}${}Z;FFbdP=8cS}XZgw?{<C%c0K)mn$@Q!i9oxod8`%?h
zV;N=p_+7x}1L52om$|)coO+0KOsXwbb&OA=p)SSU@nl(1>`@e(toY{)_9!L4=gha7
zADMTXsw?=@zG%)gu+{YNyZP;JwL4)~9io<2TprvJWJG)F<MVuX!FM(28KW=?IA?QT
zikKD7J)Xw#T_%6OT2d~iy>x#zxK%L+TE^+^gVHeY^Ld}Q0$YBga#0HjCx3V{moy)6
z>ziA9X^GO`H$QqBPGxr_TBHk6j=8NuG&2Qpx9AfsH6jB7CYqVfB6W}dPSY;j_qq|s
ziQO8cqN-f^;ars;=r+;B3HxhlYNmNye}e=~MP`(Kwt9z@{qdj|&aw^9mR_VDy3qZ0
zrnYx|ssP=EB1=gL=0+i$+MgWYcYkq`)b#n4v>x@pk&f3XOwDOjYvG@Ncj~6eocU#r
zL1WN7pj2*ARi~N9`96eV7D?ktr-|)MPGbL})BQWYH+;9|V}wz&q$n@h7EPRH*2b#A
zQr(|c{U(IdEAzlR!+-_oT9wzAd!TVq-BkLuLf^Ynr*9rehw|uHdG!b5r-nL7YpsOA
zj7w3}Jc>ZeUn#j_p>OcWbKaF#f%9~Wad6rMO1K#F>aAlqA<iDRA!VB594L*VImaUR
zu9>MWrWympv(D{IHD~@Axj&Q?EulT3O^&AkFW+?Nb!sJaTEWVHC18{3u}ydQQIUnc
zm<V70j=1r9wx*~Q<#FA}aq??H2D^MnlYb`MXhsgM98Iwk9`_PF2nD~jK!dB%gF+Z`
ztO2AKI&+zUA15A)i8J=<(0!&X5sYBHB%cNqwdOugH-E2Es=#hEkco4Q(O`4+xxV1%
zMgD^KszF%EKzcu;j#_#2#OiJrU=aT>9Gp)|!CXd8b{PAM3=Ncu%q*O}-itQ<y}?og
zsYD3~Q!RZLUg$T#>Mmx@71;sGose+@;k8eOjdnvyP*!>lH&w{t4cnIo2ITSHQgKg#
zTB|PsK+LJ{0VwzP78H-5L!k95{M@-=8$BT)yeUe`C|LL|UpEz~IdE+%K(uoTzc4JE
z4UHA?heN!@gY0m5PzzncU6C%8Rkk*$_gv4CcAi+S9X(Dibw0o?J&?^|Lv~8pBcZi{
z%WrefjB-F*r#T+@<7rK|v#O4x`;818LE>{_D$^NIaDI@Ba;|~L*JoPY{H3&$4$c}}
zx@HX2A>^=hypVhVvZAZ5iH!nKa4<QA@VB!u)BOQ{=6KdOVaFKMDzh$gbroeQ9bmNz
ztvBvcD@@+8iaj_2I<fq)OCV*~g*0Wyl6ysI<cbbcns40o{p_-t9ZFm8qA2;%LkZa4
z-<167^`J2b=>Vsx5att71Hg=eg00kSBF<P5vBhQFiAhWmwcYx+Mq$Q<bNkD6MDUvW
z>{Xf{7TySox_ijZ2%pHxOQh68dw{k(jkGf+2SvYRzsRb}I2vS;9MxUxN`Ep^jgkP|
zmivKdK*N9PG<Iy~cJUxp%soqGou-33zZ;<j(SDHPNH+a6U1#u>k+v}qf+tya_u}x~
z7(?V_5EIcV1sX;`c2VasdQTcyezfh<v>1hfN)Q6Qr-r1S-YIol3-z8n#RML$#>#y2
zGO%1LPk?+V4uUqsxy{tbASAW>l-)9x-u~*0T}+MWkkM}6>&C>GPiHQC0Dz{H>Af$z
zPY+$%w-y#bPqIo^1@Rq8skKvXh5gWga}DlBGJECyar<tF{ZD@0J7iL+u+yr7ub!#0
z)FHTEGG}EYW6vRzy+(u|X!As8pXHZKM?CZPOTaaBKQ@H<lz<rBalLp=w*lG**GP_#
zqzV7y(6}O<42w%e(TI|F>6KeywFkmHM9w5iz%@R0ARYvS2k~19?v!Qet&i-|1p?}L
zaPU4ZwJz|l4AI2R>%}Q<gMUQ4C^B4LIet_>{V)ycJX`gx^^lR2Omz2I-z8i-QCL0F
zk2Fq}VJy5s*|z?)N=r$K=SMHE{pZHL4C1yn(6JW4$a#l;x?0NMAVXf!UM%49*$z_H
zA*zq4^?k8iUD6x07C&ckeB4W{mn3(E&mOFrq~lJzTZz+1S2$ZhA-^2GxEw^bC?Q%G
zsbLYpX2}5lW;LMheZQ}o<#~|uh-mM!O58U$hqRER<n5QP=gi1yKY)3)rOd1xwL0u0
zN91F-B7@fuMj(1Jm^5WiD4bm_ICSvlN5vZ1A)w`qAd5#JJ4%l<qVl2-uJD+W#2X89
zccb*i2_(~0P$%fnu*SrnVFNKVa}>Ll_mqTx$dafwkukC9KnAcc6=a{i)uj$8Y+>c(
zr57><A9P9B5I8FvuShrYaoocR@gNb;iIyUSaP<*9E2~I;PLaK`tLj9QcHCus@V}o0
zgNn#8tr2{j8YnsBkU(?zZuzEJ30kNQTUdBvkp{Xs@yKQp@}~`zi3^tmSvyoZ@8c|G
zOkA4EOBgxiYFKH~{|N_hLOlwCW7Rnhz}%Al)*C(FNp^nb>qyr4_|LdCK86_RpmlvX
zM)X*=ZXAF**qDNJxo=~FiXA81s)p@ZzS*JoieSddq51-gS*w$Du8xcl_|KfLF@u_*
zUM5j&SaBX@U*7!!fVg*ET{n92Z9c`{j~J+XD>q+>#LyQZ&V;^+(CNj1)Hr~7vFnIG
z(rq)y=A&a>DKQ`(eth!-;j)iFzXo%?a`~Jr!auqR%HY!kk`8$9M|<8^A$~GBSn--p
zaO-BGlISk&V8oE&+7~M-fb`o6mMUol!Jk>%FFp8i!@hz~AHga_zjtZ%h0ELYv$B(f
zgOLY1gAhR|!d$V_I!YL?FOyX+!h5q1k`;SB!yk9KVHQiKeLweDdH9;Nxi;)$z9G{k
z^Hn5ZlQrnZiA(*g=j-$&A6g!#pdqIyljcr0A(^eLE{xUdy=yheix(6?t>kK9CTE*q
zId2JxRZjA#F%lQG$Vlo`2;)pq9X4}W{@SC@oj0(izMJdfWd4quFo0G!;ST+ye8hW#
zI4^~I7Eo9CEZ6SVZ}Vu}%~F>xlE`I(5Z&${cG2(W=GU33k8Ni`1Bk-E-{mQ^rDf0w
znFq!9$X<4}aj?)_0jT{XFcLWw(Gho`9}zU*IPr)*ocoZGC{bg|$}Q>sIO|U;knDJT
zGC-0Q#GbO(X=fdjhXaO|jv|f|MhS9C0kwv*0@nkdLY>dMxCE)Ju)3-nO$qmnq)<)9
zk;q*%eNga?MA{NX1*%1Jbkuql(!Hj|eyE`7Wdn%6t>^pUIHIUy=)s-=O(el@Xhh7u
zabUXv#tHJ@6ADwlCtdylA7N5{*8{G{7Rb!9Mq1GBV6`EoC&-n3pwFxD;s!}ECRnkM
z(Nn^-z=doA3|OLfQE50(WahQ$(Z7Tq6zUKH0!B-Gu<%I6aI~yQ`*-Mg(SzAZ1@z{H
zjk*ue(ab8{>(K)Zp_cO7UN(SLhb0Q?n!fqE3{HZQPLML;DP4>89}kE?ypG~Ohec9x
zAPYJX2ooiL#6kTtzCN8?;J}u3mzSkd9t<yOt3mE>BbZqt;{+<=>Z47g6G96TrFU(4
z!cINvL&T)CvSO3I=h#NI<ygqXJ7k|BrG*2m-9?OU<FW|x5@344>1lSk1vJnj53fu}
zou(0HbZld&5c>-TgSK13b9y#AC6Py)`R_>M3?nfz9D3;r6AAQl;7IMVl&|*!0422p
zxOe8wzYk)V%R?%87$&>UoS228+YC58i5}T0lu1%I=0iyGzM>8G>wAO*Sh@$aEG(0L
zkn=|(-I)At5CW7dr#JXBtn(!kEpD0x(w7$glVU2e&Nwu;nMnt@!L4iBIGgA^H#U}^
z<T}L})zA|k)4Ka1E~*9apOwxj4a9AN?B*PB_;lbaj3BGW?MjDRF%2m7JOAZ+u=aJ`
zzC+|oRHmiOq!#MtAJWNcV$eGBVjf!jiEN%!Y9Ix~%~qivTv;OZYY6_t!Sh02+fO$;
zUG$NDxnp&(?<W|RRQyW+XDs2WB>^mbm)4=Gimj7$V&&n?43FKFbOuG>&j_`0pe>(3
z70Vu^{IRt-Z!!qy2`Mkp-FvA`6dwy(?-Gk@+mhpNbN{_!AejQ>9JKfj?<WP?Wk4MT
zzpIHq%;EYSSZ-7lD*xBQ{={9m3KAtyi|vwV`67{myAnL(go+_y<=_>A97teJ5CjiL
z_g@Dz8Tw{JYc)(#;venv=dM<Zn8wH&5(6Q6ex+3Yc{d;Fz$@WXEJGLw6z_h0V*V!v
zwM7rKSPwa8k;zv_s(V%1=XxQI{{7G8kSeH^t(LJ46~iu?>nqTwu7i~ziU9N5PYaL!
zjm5X<s=GKuX`4R>bFCfZ6$$_peps6x`>!m?Z)uo*4`-o5rv0mEVexc4>Ay2mgYAdG
zMGe33>57w5Kp{%3aKb+z`+sAJ4jG`N`H#%`|3ucf#L3Ew_5GiKG-sb5KK?6~&_nNR
zxeu0KCu;co-+>_mTm^N%6q{xPu{Lp%lE_)9lV7iZ9+u>%i2^5bYDAH998daKAgrjd
zsCtnYUl{FmxFeu6KTK@|K;!6Zs$Xa+<s)7iRe9(s<L4oc++=DB^djkWV6-N+*$DTk
z&VpXK|3WoY5VMmRD__Nyfv`~0uXj7nT}`=9Mn_G_ImRG;yKt=USxi9!#XhR7)UVnP
zfMrz0Hwh<t?BAyS_irea)_wXn-1V`N{-V|QgfG6JW@Fc<KT-3^11YUAx3AWTsqSt*
z(p`SX-oheI?!-)#{eLhYeS|eRCq5?neB8g+;C+Df3U5QQD6?=Rd!QFc7LlGi=pUwb
z7=4)^h@;@3m3{h>7|<rXljblwn>`u9uyIM9tw)_s1?EPNP(P%L;ZLCsZUZv#2R#5V
zZbPK36QNMXVmX=rZ-sI99>$^bHyAEXlNUC>U##r6J`V7#oXv{z(>45(8LnMuWe}j<
zFT$tqxeBs!XckHTuj&EkfHeSB(3|P1{0rnmMuEB=+Wj9Ddp#w@tVy1N_hasZXo`fW
z-QW9$Tx;<Baa(w9Eh10I^V%;Y2O+Ey%3gHu8NS;`KCc)5pb;op;j?y8JoLp?y5@@C
z4!Pl=oDbOkZauJN`!PWhtw7N>3|rK3u6&F1#J=>Zc_J}!hd`(0Ao*cgI}W{1O+m@o
zS9Wa_wZTD6W8q<w^;onb9nb${S3*)wg8b7}Xz}AA=p>w=(&~0Od7peKvsN-w&9DOu
z6UYj3T0O`_f807?E>jm1l&E$()?VvKky9Mw0BDjiAP!4S4dsZB$lcmQS2{i~yhU{0
z8u(3r?v}7o|8qtc^v#)4PF2fwwjI4MDNW+lBJMW!0vRE7S_TBRg^%hkn{W6y)*=jJ
zt2%1^Rc*`Ws4#piH3-IC-ult-fD?t$aQNrUF~wRP5rd*<BLC@V#66T{1qW3pcj_F&
zG#sqMd7f%tpg*s>lNga`2Gcmy{3}(pRgWMjh>jG7ey*b8-HwQ20|S4Z0FH{573mkV
z-pf_B`$lRax;Q%>mF>iY?25dgDpBZck#>#F4k_oM=k(8Olr;@gntzCu={0G1EUVqa
z*k6eNr~Nclahy=(&waGomxaN&oR15>pJ}~^4v^3_luXwA1VB|9MIXNX{*YYs8>Kwk
zk<uGFKq0R7m6g*i#Y=-f*{(8r3s6LzEyU_=OQ%(7b<Enyu_kdfaf37ttsiCj?PPQ;
zM49G5`4BvukTie%f0n}o{d(xn{<SvCj-7UBz^7zgtLM^JN?2R0sfcLMWp~NR=OiU8
zeEOVa6_?k~eRv7MOE&5qXzxQZ!?$f|ugX^FDy931sHLg5`$s0yWp;N<jmt3Uw!`ei
z9d6R_93>Ff5(wpJa`)Si>j6Gpdl}!=2l1^XC(C1GecR`aCAIRylb#If-4XqUpd{K_
zL1tuzX+;CYD+|EDjEZ@)er5Jbc`E+^o5)93ET+gA&qhAI{*o3oxsCP7x@e|Kmbj&F
zlktUi{k?e$rf>t|EC1P+<07#(jut~zW^Xm$it5sc6%S<j`IXI()1{T9>m)fhPvfMb
zd9&G_v+ScYO*ioU%37x8lL9Kd6Vue!X4BJ-?U`w~VQm{3GI8ZA7I85->=U*b=oA<r
z0%2->LbZ`dj35|)Psu2F;2GT=JCXTnVC|c%W1OR68SP$#{XqrB-fH*JNPzWbjY|~K
z4tKx#yE7h3ok%CXee=7mc19%C@7DxiHv>*XQZiiyjU+jm*V7m<aMn#ss7TFPyy$i8
zf5)eb|2=82poD)CEnk4Nf`WF#Eu7@0mFI``1al&P683UMfBSVccTTS)`GAaV7&IA!
z<_<g6QgnFf&(^OI{OJTU-2HmwVDOS%A94q+Kss9T|2rtceFM`T#8D2@FLo!8^~hqL
z8JkOAMKtvo;~euOHkjVsbl8Q#8^iIxi0JJViHFFXTuOMCYAf>+Aq4o4m{7QzXU@#G
z>zE_|taq#p#_d>S0Pvt`gu&boP!o7e!8iM6t&UU%GcZgh{=*izE2BiwDQQpmw_;>-
z{FE?*-}f{w6=>b*pBB6+BdBL-7+WNJ%(4{Zyj;y=q4WNq=8Ezjww65g%!NM153gs+
z2#rx;2Xm(yWi{ocLg*>T+v+%jdqT6|S^sO3egh~F5kt*6Pt-z~UgYWIflNtjhJq5?
zk{xokGy~@+-Z^~bdweIt*Xg6JsJH{c3WAGNpk}o1*_+u|<m9>Jl(*P?vLIi)n162?
zP>`a^*)^Q$w?=!BGMg<j*tGp(K4qVUXW7;Lxr6Kb+_A$I|KW`HcVk3)1%CQi4Zn-v
zdN>V|Of`?t@&_u+=KiI?{=q%ZwhX!lN;#=14#yvgj#rjB!z9?;8qjvq1Ff1yGBd}c
z8^zUE5#B!^h6&O~o2aY;kFKzw6T!boxp%KOsumqiNux{ZJ(#TPxKYX{+PXfHzWgpa
z<yifT9)D}7p4xrI^(>>=FmC&L_OAss{9r;o6;|OD4R}IST#urCOr#UpUTahx7qC9!
z(w)d`!{OWvc3Mo^Jr@$gEK5)L%kq!Ps62^*uX3-ROqPry+!<l?g1GgDmGS7$%JRVA
ztS(2an(*%&cylPYnF1Kw;R@1Zg7kPsd;ZDG^UZr=1l5AXbrL};sL{n^&uAD;I4a?i
zp=eaebQfjxdAGl9?be;DgY#K4JsNV0!tf<NqMj^$cCG}83y$n|gb_p|UVR-P?lu-v
zQy)=L>F<ro%caWWNO<YK_d@sf`Gk#%#$<VYXw#*;dylrJ|B>MPX1;8#OJU*$E~mra
z*A@JaGgAd^8B}usGfbRL)7=zkk)8H}(-Cxs^tB8al9pIMMJAE4b@nvayuM^9>t&4y
zrqGX*c0mvZXIA9w^VxwJDl^r)c>nNuHy-?+6KP~2y#))_^}R5P3fh&wa;kROj_!FM
z7%-_A`;VM%Q~aW7c#WOR+UIea&<6|13|mH;?4{gN`}y7G$VMQP4KJuFbb4O>df3R|
z02fX3Yh?V*&paafTgaR>!y|N2gQ?43qp~d(XjMhn72>^E?5GgG(_L(l8WqXRrRRUd
zdm>=Xi`qa#<{-G2m=#2&zBB?=Q(rmza7+w{F7JyKn^!D^Jdc=zX}-W||J;zS;g9V4
zR+IkzJzk;X-<u0(Hz$kPp^AIKf^WK58uOoiwSftmjJ?}l_1#AT!wF_zu3J8JX9qV}
zuyMOJtZlM={`gINnTnq$y4yJRvtyw&q0^x|M=E>l7YX-jm2i8WjjwIGgv*Q1Z8ka4
ztYr&v!k63J@T5)`dTI0mcaoKsT!i*OPm$iZloccH$}j)(jj{C$=T$V<E3Ahw_3$p|
zz;8Y-e}>I_m>OBuP*(Ya(5sjazEy#S>6|wTJivj6Dy<s9&?PS1DM=rn&o5@%5&_ob
z=*)j+%FZ3gh*!UZ52E{f3ZsLgx#iCVx||Hn6Z`Y|{s`YiMfZm=aJd||;ohwG&-8K+
z*@W)-hkoGQu~<*si5@NSNe-zjO5tWX4@ieL+-~m>&^JN4z5G4<{oUKz(KJoO9=Mil
zt#4Wg-Qq+`xe}+Du`yN(_#M6=)H+A8rM9>s((jcup&<J=)fb-#7rveUg^YL^<t(Z9
z-N9DhA)b$&A3JHVA&6lrdBS6#ukcM~E|26ci`wSR40m%dKL5gju8khuQrh2Tz9Ps@
zz1*#nFqA|++NQ6}R(oa;?-xaMCF`J;+Ur}Jf=Zfv-FDWN;u_@^8jcouHGOTr&%~?#
zY83((vP6sbeHS|Kg|{nI$l1TB8mBHN1b3-55Tm@`i2F*rH*21f^{q;1;Xz$<u~zSW
z?;<GrjqF-8d_<rEo_?jvVX>U*DP`nB0>l$|xWa4GGA|HoxxIy(g071{?(SaZwt>{-
z6mX){MUbI;+iU8&!5`TYW3aY9w$8g`OTz0V-5jY7aMIhvf0OXvebx_1tz*Y+7jpzI
zdD447+v@@BSo4>59BW>+O4c2_fYja06Casuz@FH>YwFSbR6!8F;lxfu!1=8IDyvl7
z6s9{v06mJOr?_ft)P(~ywii|pKd0e;9wJm#TQYX2b(<Q5Ka5K;yQ*xrtVS-)7t_~#
z=B;gH9NkzlUB<M3#r8@#+=679^?Zd-`rfTVBAF*eRj2ymP%xBn9B)t5>?-8#N8YD2
z<NNtM^fgiXyL~grf0*+#OhJbA>DJj}m38#ljQe&P603@2uZaIUVRQaAqF9e_S=|39
zxEH4@GW}LZEsQzJ&X(#ZR3HQ?7M$Igy`cqH;NBKG=uaW~<-3?}+$iZ0kL#6dOBhK@
zB<q$xTo!GrrlJd<=VL6Ty3^N~>K`~}BlxW~$_xtX+?DDcU49-NtAx_5u_>~N)Z}Ez
z@XU>i_w}t3eaN!95-LZEUcmpcyR6i}6dNq|R!@8_xw8=ufMw<L)HgF==xJL@{@fz(
z=MPIsI%uO*AD~(3XK*MGr?}?>e>D|hGGYv?fo0GOJrHyhWQ?~i)I2jIgkYIVr^dS0
zn|?i0&VfcTH<BBnwc_5??b|VYxkMS|e-u$g5AYijs-(!LRtXaq%+jr?pFTWv%%|yh
z%Mbp)D|f<W-;org=g_JiExlu!dxdn}1M@4EufX9($3T|<A5m`^6-TgzYX^7tAi*7i
zLvVL@cMHMY9Rh>9+u$z2HMq;*1oy$+?c>~Y?)`qwTD7KobyauOe&1*BJ@)Q;Y}t(G
zeG<>Ud7A7yIeW^-*ZoraNtL#9Fgve&s{Hb6)&x~$8-XG%T`^H(+%NeJ-e_{tldWMx
zHYnpEw|gJS)u3YLi79iRB=x$d7d#~urtlm^CUay=p*acdrZ(%3Z`^Q&OSmn}O{iK$
zm8lkK*<XE|IyuL0m|ZKodMlP#tXk%W?aRYJp8%Wh-VO(i_Z{q7P>zpV+=b*th$+^O
z#=0T%&)_x!+$TTw^6!;N<e2IUCY13C;6GydNUP0-TQi>P^l#S64RrtT{e3aP%wX5@
zF1|qH#Kl3w5@}&>IH(?AX)7ZMl%LP3q1;BkYE_gK-(sE6{$_3UOm)=qzx1aQCa*IB
z_jlYV#jcE;qpZxx;FoS@?%l;^s489?J4}Z0d)2bkTw8%+O?_RDS@oqH`{513BB#~I
zJ@Hb_DNV<}Pz_zYByT?={r((K>)w*uEwmWnQXLw0ExS^}w^YX>Fu3GSpr6(Hm;YZD
zAgBG@u*VV`TL1?C*ZfSh!<#Ad4>L9+QFvH$JfN{bFQz+C?e35g-S2|wehZeSz2;v2
zZ&Wa_9U#^w5{5<df0TQCEQ2XU*LsVMQaOfDtB1aCCdvoR^}u7~7q>j;H=X8|B){Aq
zK5p$5r?;%P)2JG1he=h3MlfFo$HTdHhvL$6D(rY347NHg%f}Gh8G1jBsOM{>{qO3Q
zonsv0ma>eIkMenj_D=$o#u$8WFEPB?1J*3Ki(!TV-2`i|opmzT-n^`<MS?ds{}Qb?
zL$OInU3+j8TNTZCY!XeBNuePIg5%ay8KNU{!C@>;n|^0ZgUBCpOyiJG*hvW=+}@m0
zu0>9In5(gjHp$beu%IGj-CI=UPPMeJ6R`!dNY8An3f=VruYBp%XO?_jDdk<O*9#9?
z6(ve}E9^$@-9A4}FY8M?D`O1D-wZ7lHvN{qOI42uUUarx)!Xl8w66ZUX$k%3>0Xt@
zboWljmlM&Q=htJzDi)KVen;}Rb%IcC7f=neNhdT@SK+WSQ^V)E;VL_sYC+l4>K#}h
zia3;)3vO^&w7t?ig9d$*Xt8*jsL!gMl0z=3oF7&~5p%sI>OZgM_tmTCJmS#3b&7F+
zWeb#WjWs4g?+jnp<Lj`Xxo)CC7XLtXyLftQ|3@R2G$&xipIs{%VBhDR@?V9&{qIg}
zc9osF!#L`6p4y%G22m~F_2Z{iJ$oB?XNa$n$9t{b(eGmrzcl+FZ`QR*WLv0e&3oK#
zm#&dVxi2>VlJt)2;xd1ygm(LJSBy|Q_@Sioitj|!@JugtE#Aj6rR7<CM(MkvoiDxI
zrQxB0Cpqih!uxlBHM;(r%37FRv$lU~O)aS~=g-ea-&{h{sNjSy4L$Cz7CEDdJD#<9
zCz8h%du-O`(S2#XTy{j72dYspGf37Ca7a>q+i$8_XebY(Wp+jOdchQwrskpP9t!+0
z@VM<>RU|%Iv=`9nxcDA3j`QP)L3ZvsaS4zAUt1pQCPiti>u5z#V)z8J<hLIh3uV9L
z&_?XEjbz~4KYw-{j04p)gpRqGzUxh5qMpkmk9M`%q^0(~Js)*xtv4AM*WHA?^$nd&
zc<h$PwD`)+`K``+EaGsba8;oV;gh|7ku53&op|!{xie|E;bd?x04d5jMY7y+pw>#+
z@S1_7o&@ihUEThn&%3YP{nEb*k6%hNyEY0sP(Aj3AI7=N*`$I&5^%l{BNF+E-ha;)
zAVzt~3pg~Ak@W60Jglq25qusBPGTjm#nX<bbI#jv@Fn~{9xQ@TYFUI&ytVz<I7C;R
z=sR6@4k9T(Edo|*-gaD)Jfeqt)sg{R276qjH0C)Mq<b|=+rN%~UcKDnCDVe}k*fG_
z%c2M0$a;OeyuJ%s8`^bHwEcal3O?QX5tCw+Y9!+#RH2%C;?u2aeXbW66J2n2y1~BC
zWrc>99rah<mA%_Zi$jXBEUsT`--#-ZC?^&rj3lcr#Z7K=IL+svQUK3-$2m7Zzq2E)
z{(F1VtVxMJ?t_T5wJlk2^)L^_k@|+M3bXP>x61{A%dpYNP2n+*Z$~>-vT9IV_0#Dh
z&uGL7F7f*6HQM5SrGSg(FaEqR6TH&HSC*oJTn(epoEMtmka_Z8Jy8)maK}8i-WMw$
zeNPb)_k!UPTFz!)e_tIhs<U^M6&zbB)Jav%JPgpZL))#0(bufVx1O#(1zo+h`I?1E
z2hh50uc4!;wtIQnHd<RiNmoNQv46OqUUmJrLK7v|siBNC_!zhC^xYzb{e|X>VtS<m
zZpWtO{@vrq^Amf@OBe^Xx<LQZ7E=kN7Zm>_I&r=2&!u(;U1G^HVf@PgeHw^O($SF4
zu?(MI($=9vI?D!ei|e~=H=fitt;8<u$d?AkIGTgZrzvelGhk<BNZ~rqo&SrK9MVi=
zUnGN!k>xtUY%455-V@sOnC1}m9?dlgCWunXAg&au<?)^tJuzZ@S4@xTybokK6KyXb
z9AuzU|38M#h#D5JAQ*{R#QXVg{cOpk@j*PuSho7cwDypHwxcE*v-(N8Q60Ki@hSa|
z)Kn9`h>v~PMoi793Hu5}s7{N0Q_7`avP@la?2|vOiiP5s5QhButnAB%$9Kx*=%5{m
zo0dpvD0c?&CJ2TX*|#N?{=>O9O49T-USx_cfZ5%89@2fXFPk<Qg$*#FJfn`x>^S=2
zNee^^{jK-h%HGWoR7X(ZS-*Uv?5R%s9eQLu1`iu1cJDHne3KfA;OnWh!URSRtY7CN
z?TPx>b0W#l)+BK3<!^GuWi=C#@1=VbAZh*-_KfRWH4HRd6Sl7%|05xX#HA3I4i4~k
z^LZHcL&93sa#5pQ1{waes8CYwt`Yr$<ISBM#HkFebY>L`@e8=Gc~%IxH$RlmZBt?#
zL_}o)!ifemq>og~Ac0&R2UTp$#TfSBA+sC?^JxJY%jj{{q0U-7ZcfJO4}|1a@PX&K
zEs`u>l4fNB7VnpFquTqzAO~!C^>x$|M?jBs2qTh7PRmz?^3sNdC5)t;%Y$@clDF`@
z<9i5p>A!Yqo!Cu$n9<$p3g!VEeMtOdXP42@Uoc_?xm3yZohzpihVeL|Uwf(EAiQ|?
z1#jD=$}t+3>20ZR?!TaeOm3*-$^JflBY_u24r${dHGh=K9E6Vj7H%0iMMMOT9t%L>
z*d@Mtv<NcsVg3H&FHF8nYsQVdG+8gV+V}f-Q{Z4L1?_*?P}ztnRu+vA)t-zm+|3~o
z%21^A?T2na+0f@NLl`H8zEMK|5yP0ddP^{WfmNhW&F_7`5lthISyRh}o*Lgy^7wf~
zPh!2TkM^(1m;cu#AP{%Ov!R-#<tV`9YvsILi;lZuYfhEqH|&l5L4+`(3S@^9JFz9d
z?RB3g&vLY!wXQQtirpX+LjrA9)&18^m=h5X_%jmly_<>@jr{onCWL#k^t0|tc>e$I
zLwL&lCvg%PK64e4uO#0;?SDSR90;9wPAnvuM?!GK(Z-sUhK-htgO5v47V_FULJ+&Q
zAU#$IbC?WU4IXvK^%N9cFM+qj5M9VAxH7Qpi`a?AbpAPlGvmM3g`}*j7_a<B08FNF
z(_d{6;=e$D?P;i~p%WDL)n|+v*GPkJ@8}6dKUpYB2(=yTVQpK@|6}eD!zo3Kskb&R
zlcV5KOO_wfT>kC->(Q;cv|H%{8~prlM&GoURF)c(Rj*dc#r98~W#k50aJe{{Y#|#Z
ze^L6_T`u)u61T1aD=BRlAT62WXZQdr4+pxX{E7YlxXfg5JZt8gMC6W|`UK=|&qRh2
z-0mpqW{Fxywv#n%TOTl;5taJhH3BwZ291NwY-RsPZY!J;IgX%2bWsFC|D0q{4n02~
zzeeMHRrWghM3HNMre%GCw$Gz@s$}JVL^(x^aglsS1ona8Ha86NQ>k`^@!3$)(-F*c
zo2xOk{+_JgtU<^fpQ<@}@w`btq-szo0HLtxWul~u{+1ee%s4l>gxUCMSInEx)$GLa
zHXTI7X2vH98%Mya{=}e%E=IYB#^Nf%!LpfD*a{^)-Y%VfOX!T$d<Mi_LQt6}E1N;r
z|CTgb3uV>e-JQp2iXcTUn<~wAZjRxt{-3Lq4u+g#Vl2V80O-(<Nd%bnd$iRxz-J%{
z<;NLI{3Fl{|K5F9J27-)W}6qJ`-<@}u}O0b@vk{Ne8}?Jt)-vI*DSKY+RMYdgt;;O
zY5;gy5RbE7BJWLM>|{DLxv$@UP!VxksP>=5k4hg<RZ?eu-R4_}Dg{7}AaQo5Ma(Ns
zAc#vub)}8l%D+mYUG9R}(=pC{E4_|iid308byT#a<?00KzDT{s8+C0#lE-F9!K2pZ
zbLS$6a(;agD0mFwxOcYg3P~KbiaF9(WEU^(CmV#~^|ibr7BRgdBj1?BxCSaOs?T;d
z{tQt!<PRD}JI1P`Qe&LR-9{4({>`nmoTCFtz<8iAC{Te72QRjVzKq!36f#rz;kjd4
zfPSTpIF>STh$v*DSJFvAoyqt0NbLVvkxU%R!}de6nv3zH*bf&YxT{lFarK!&x3?1!
z=4qPa`pO_NLNjiw;^?P|6-=s|EEvMY5U7OYo2HwQmDHI&5#sp-YX7}+#}aqzuDM39
zX5BCiCB;qvaV`e+qaVkw+|BHiMwN?LSv*x_UmSMLG3?K5Olz`<j_>C5R%9-0+T+-N
z^swDs&PVt~Pox5#%m2e5npx?G4h{d5j8Z1~$Dl^uFeu>idg#Xk)fMIAS@i|v1jOBV
z^|pN6RsP+^tySqGm<a`<hW4@i^=4}&j`*urh<Stp&U~KvEW^jza(e8jnf_Zq+{_;~
zcZXO_dv1?n?KMH^_F<Usby)zP_RTduo_;e$uRQ8-JZ>GN4n0%v%ahp2PBV0McJV`x
zS|`WM`jkxc+YBz6S&T?5i~*W0e71byFnm4H%gdaDstf^_cz#TX0}z8pHYbJr?^P#i
zA`v40S;s@MRWEn?Z<Rj7(-nK9(R~i*vhiOKPBPBob|lf@;cNCnMX-1tX2VSL{Gt6U
zTS&1IjP)+SFDd`;bF<c!x}-ci)8X#Y3H(9XIP2jukP~W<<-RSx8V|4VBZB$H7A4Y7
z$E~7>49mwe&O!NLAXVI&pDS#jq-{`eB61xYBctJm92ZC)4kR|yPU}KHPVQd2y0Aln
z`L$S@$E}T^+^9zW2uVO%JdG|(Oq8u~>0!Gvi>aV)l<!XF)OoNie&)~E;zZzGURCX8
z!w<mHU?DjGdaqYp%K^^#eKPA$GToO!KZAkO-TH#c1&jJD&0mq=<pL7S0>z(y;i!Zi
z=fZ!VFxvuVG5-#p<IVec*a6brU*`vmqM?9B%DYA73Sqwrn{8ufQo}+U8J0NL6qhv`
zDtT%si%h)MV7|8j03FMIZ((;<FtTj2_)>%?x?-Zo`#*X^-Tzfgq93aC4ijflwflr3
z)}3ai{%M;%)R!K)w#d@DK<yHy!pCgTjq=gET#$fozN?kk8zd?4JDF;&)gw*}tG+@9
ziCyIi6LRzBWIj?8i^mDS?GPkp;JN+039r*2jXt~zx9YTB?}bOf$Z>+sieHxh(IT_F
z@U`G-0wHqpmQjYn`KeaG%k>sc;(z$BSY-F_>Mnc_ku#D?r;C?1B??M?^B*`5X-KXC
z_<}CFFfUb1l^`?S`XFLR(45ZH{sBAByfz&0n|i8w-%V(M*o4EVaGOsk2X@0j$aQvz
zw2>^;uUON`Gr&^?4k5S-;pJM}P8iz0_%fyyPZf;YKy=ny@fc`u3|{_y$Oc8OJxAg-
zI<wwXo1%*_A{LSB9KKI9fA{n1&Tx+80X=55MBYGJ*DI5m17F<Ad6`DNCamze0baBD
zdAr1TzoZX)Efgo<BbawPf5&qWPzGAMtW~%rg~PX~iW+Q@*)PBt99!gAr{0>&QX9dH
zue)tst@?3t3G*G>1AF{e&$mj{2;rV}?t7D8R0iku5T${YBDbE_*wsH9g#sFFw1GzE
zS%~X-<2-^9j9;l*<vKcGSc1WFJo#Or#=HjH&O=>FSa=<n!RgM95}j7kCi+z+wwU%{
zNYK)7xaGDP5I%;SW*P5MoQN4B=TB(%SgT=bJc+P4TyW)17S|S#9jz6fuH>YhnM-0j
zq9}K<F*K_03IK+GlgTaY{j|jY0~{h#dE-W$gS7O!yG`DX*YV~7$*!*j_6D0sKt6c7
z6S1YdL9gJ-22G3lKw67m-^&&<>5`3R!uV|mGhQ;z{RZC(yFiqF9QNfW{$A(A)qxks
z`l`(Iaokl7WkOnLSK>Cy#qr9DuA1Qkl5ex6R}zW<0ll<Z-u|)Gmd46tDi@JkT20*I
zf&8EI#GkB;ScHFUjk$Bw!XDYRr*9Xwhe?~&sIv{_4-gIlN&(8<WQypox75Pc^fMEg
zI`VxsV|@&mRyF$MAEeLP|3*MtQvH$-@y|aPG{%lS55oU>8T7XsxX2<pr6dPp_Fy*T
zV&&j@ES@hMUoQwrjP5*>>@c)3NI9`@Ze!MFi{|^CSJhCuFb)b3fsSNL<n=3B5#gKD
zB(`-~njAv^6>>HPMbwDuiV>dYdn=XmYaxh059Q+7r+Fe+TruqIJ_B}{8}lXch6f9w
zEYxd6ZkJa>NxcaLf8an!+d_}&des;P>75DVCxCw`h1E>!N`yj0lTZ!P9eLUbRsv$v
zS2JPDT<CpSRSBCu&+7kyO(rpjC)*^?!5gKLqvJ00stwqk5+1@G{k|nGz`}Kre!8C^
zJ$AS1@zKMwHukaT<BoIm#br_bpAon@PuoKZrd~HHaoSA<5^*#1uTF@Vy0?iO1|!at
zg5ODE5|)9r2jUN39e_6-OOB-T1+*pVV({y-sk`6Fh_Ogbqx=(|eu7@CtA}Y0A*?}2
z<q|>+&0xACQeNL#+sRORza?UUjR;eNQD=_O2}LbYV?;U}>%hhP7O<eMV~y|Kk#;as
zY2to1%)<b#0VQvDHnE?ol&~worAnw1un^iUYj)i<?FLtXGU*3><`J{p8eC>t*i`9v
z2N2c_aQLn`Qk=WWC06h!#jS{eN1{t3cu;ojp-qmd(GjRcKeZq>3#;q;jgyA={Ld{s
zog&W&W|@SM$bZTk6@C){lCVDqtA1u~eWe54dDP~pki_+^qxhw%q>Nz+7Xlh)kWLuJ
ze=ZUiMs=qopL<#;ZeD#>(oLPi?~029v8(i)#11PB;rkhgNgFvRekQIUnBC6AFU<c#
z2d%O?)cs6z#)<(=58f}_2$p)w!N-7p!pE_CkLVaETK=_x?Zo1Wejj4|T*|tx{tubg
zkGa3;(n%dJZU9I+iiP3fiFaYX(XrdBHVR`Bi@N2uXZ`qZp5oTYvP6Xs<yaBmZk`z{
zAmOLfNL+&A?m#~gg{kUZJ}xTuPvy|Kh?=sf!wkIYUyEj?pzKtdB2_j{(MVTM)j?vK
z9(nTH*>sSVHzJox>F>Z2I7R1^22kBT=R7vkzx^3=rWcDreu49gmBJAaasI_7tWim+
z4IVgb*IsuXJ=~527BP$N{%Yn*?k%nR1$95e8ro|~!2E8Sc9pi-PfXjzc0?z+sR0L$
zT^*J~U;9CvsPJ&$9_Jc2oO9UThIXiq$jnvV?~;{Q_ttg&>VA~CaQ8-yFU9lN0gW2{
zVpGH=f+CVNhnRY;!>q-+odOqqKt|l3qi#AIjUuIb+R>FWFF9=$!C#m6r45e#8mnec
zk==6Qa=7%LrY?-;Z*P{lvqM>$lbva+*q%ZGRH31&7b5dM#W10#uC{ls%AE^P6`$qm
zzJE=WM9a6B?kw9>u)Ovu?QURwE+0J=bqF3`1$L}%Hbji{S)(A2XqM&r+flyd>(fLA
zPB}w)p4^}FbpJ3j47(~+h1)7VGt>vmiPl|f8a-R8n~X}FI(p$!&#2EM$|q*IRfZX*
z7cRf8#A=n=({RUz!=2~$Fb8RqZF+hG;=v?Vn|t?$Ml+j)gnt&FU0J^6wo1)m01mVd
zngm)%gE?+9y@h6{+lR&JPgBvir1wK9z*Xs-W<x}=`G};n=X32atinp^b%UL)ewJ$q
zk<M+NQ&O?l$$wnxVa4FdbG&sjBsLr46hDD2R|;lUPWw-A(7FpVh0I9o(11<82_M!3
ztbF{E45S#sD}7Rg@Pk2gdF{OkeGs@S$9edre8wa>i8aKn{5OIvsL@OnU#Zg!Qc7Ry
zux*#F_-+bB|LNW^@sj;!rci=1lEO2SoQH*0$-pc#)%D5>AraW@qaYFPO^cFP1(n#$
zpJSlNBJ?xzKhZa73!x3f&a1HkgoxNIP|tC&TS^^=`Qe??25Aeq=YVRorjP^kR}H%&
zXxLavmEc&4$6-OD!vU<`CiN|8qF1HHzHL%%RGMgbkwlgO2FXdYLxf_ENM?As5@~6v
ze_)*PV`a%H89r00|H25c7zS%KA&ocd4n$5x(5tVHQzWqz_qU{Ko^GityN+=BZO~S(
zD@5W%CE7gLI^qtUV}I2g*mm@z2gp=Inbf2S;v(D?F#dUx->m^4F+3Qq%;Q)5{8Q<;
zL(TRQn#*D+*~$t36N9Tk+;EU`i2_Ks10t~L_9F)fvm+M@Ik`^D>0E<`l6U-NPm2qU
zsrAW-h2ys<&>yFG4Ar444B@)cZHtHyhH#;~Z3pKRO-X?QsmYl%ym+LtP&lZ=6JLOa
zG$lCXV^RMy-{x$)C&XkV0my-IR4Rpc6e7xKfZPQl5yNO$=mg$>a4j9_6=Ypzdtb^)
z#={N%hh3qA4Adb?IUZ+xsdIAc#p}<3`5KhstiEVdJ?g_wR6K&Po5g0?^ZC8irh?14
z<VgY2Z$%^l<{&HF^&h}T$INv`8m6cWoT1ZFrL27+-7ivGhWvJ6d3nLm1eiRXQd@$|
z$e%f;WbK@KgpcCsvAYubN7>j#NQW^qKe$~rk)uP8Y#sP}3D{9`6kxVP3||<B(S+t9
z`PP)N*zFcujR2;w*hG|}p_jWJ;AUa^oh5&g@6AG%kVGl<I=~K6CfCkrhF;0iUG(IB
zx{A$&nwESpP>Cglgy#jWJX`#;c;Wv^GWrbP+lyV5S(>Jl0Wq69K@_0`AKHPNy@OWT
zIT_L4Xo&*(lsVdogCg+=m}w%1+lqoj%IZ=Na1Bt95$$b|Zl}~WEhyp63vBH5Q<f8U
z|GexxLdpdAc@^Fhp;1Asq=Q?nDeuS!zu-opx7Qtr`upO?WpqP%IU>0$NCe3ox5f%z
zh*IBx;X46offTJC5>IXh&g&$mAE68+!@>!w{jv8iZlJH-=3Y4+OaHPc+S4I1g%Y}~
z2fgyF)4w>uF0wRZS%tCh<a?@?cRKAdkO0YkPL?^zR{al9CF4Ec)$N(m+x2=?|9->o
z-=M1EW8>FZ$K>OejO)_as)WilzEZ3_0jk*~D*DNE-dZr;6#=!O1ikH?Xc3c1{6Y{b
zIS>>k*QK|7L{5b8k!8Az)m+8wnSG)UQTq2Fd#niBqTyPJ*6w_paG*nS@(X|L&}X0?
z5sO9`YoKuaqeaj#x8bQOy+*^xt&|Q^(UQI<*>=iwEL2TnX<dtfuX~Qz%Xx=xN`qSD
z>0|W;v#cz((GKQ%3BqiOHR@>FeS)oVa+cx+6Gt6W#T)}e1p^P=u^&d6Vg#Y4tkrl8
zh76Ed#)^+eUN&Hj9iu}^omj?N#+orO&ErHpMM;x!@sihK&wVfPwF5(XSUsntt>w77
z-7T-?P;<SaWkU-NElKd_x4M>trxFA6DA?vYggeO#q8Bl1gUloNUNj>e=>w~@yD))e
zE=1~x8q1{jcH=@M2m616yFuhxuxsZsd0Z7uR~E)F_X%BuTEbW0zs7evhstuX#+Bch
z#@&<~MPP~vg;=TEp~rU#wWeG$x}Dte$5ZW0{JT$D&T|B=!JUViZ*ykzLt6@8bDeMB
zwz0JA^m`WWQa0J*>YK6-<5Y@IKP-YPnH|{l$LuopOWd7f?+6i=aHg8uYn!~F+GA7w
ze7+XC<_%vW-JDgWq;WC~pN4roK3JW;(^7g%UZQrR><C72QFK6>QveHTHfCII3Ic2i
z+lCxo|K_|X0u3QXYujuI*vaeWdRorUe%x1kO~361bXk^ZO$YZ6eE36Geq7G%AY|R{
z<%^%a51jlIYMplYX@n57ff4PKtDlHF8fYAPF_vd|<i%*yN8$L<H!Kx%V7(%ZCH}i5
z{~>SnP2>w_OKJCJGcUQd*cQbl?mVs;5t749q#e(b=vQA3@jm3|o|f?51?@EokX?S_
z@JYFKNQ{df#xHqSPn$O6Z{KS20{Fc*MwnJf-o=x=!uN@TjOsYew(!Wz7t)g1?2$T$
zV}jVpkgwuk1#iyaZifGUlbLxQsY?>SJrQ?BK8*yM`xs@pI~xydr@j{m-y(D`LB`R@
zYr;8%<CXZWK1}*Nfdih`GBTSkwf;!!Lo~307N&mR#|dC_Pf$Fw_*Tk`bus@*5%Q$G
zc>LjIaA{(<QGX}&R|l=8iPj6uWre)+17s&4d>e`7%X(PQKO@k$6}klE)uFeY-g5q_
zvQ?lV;<(cMOwk(oui<VqCG98AB6Tk%=)o>{w~2FAzh<BdZpope=XI&1=k=w@r$?<(
zrWgkg0@Tv$H^m`j^txvBN?L5d-+q@AkPuMW3=iNc%Xi(S84~}kB=l%_<AM;<k(%(Y
zPQ^^0ZQ7bWu8P{j^jCBLrxP!$BO)GWKK@{aRcL?FhtOXx6^DeV-OSR5N0R6nHx=1!
zQi+8023t+|uukq`Ectj8=}*oqE#QaHrsrd~In&DHHCL6O%|J{qtcfW=Z@*m7O7<J*
z(ZHDyC334^`-Vm~ir@t2k04kzPDJvG^Fvzw$$V$;(v6&#3%Vi#yvMYBc;xOlzj$rU
z2@4fb;}JjDz1(ZiY?skx8^F%N{gq)YnrBXYGj@ucarR94Ha7)td*8)Re2uNkLx&w;
zCx$`ZZez5!^HxLB3)TJjY2`Vcomz~;YIhSf=(uS%_71gGM{rWNXAVk2pJjQ_K2<KS
z^lJv-%-)ROSv7h|#o8}a1u)T@o`S1?Cw|Y(6u@WvCII0tVjwj9UN7M<LWdRHZ0qvJ
zLTY==Dv8UE{ZE3=ZTx!Hf|35>LGQG56k4Y_@Z~M_VLDKQZ+qjs`V2oZl*?@R=q+R|
z5R4U0oLQ$v_?pR;<eT5s6jS{n{O3LIG*a1-@1pXfyF}*2=tIf(`u!*YuGWqDvhknF
zjzGKpu7k^G+l>GA2oUIWuy<2<5s3+l;ey9+hwC#r4r^rpt?Ae1j_d7;{I7Gf$Zeeq
zfjSZu&26crR6KgU<u2(CPryCE%a1SXRwhe*v@dEze3RoRHql4y8(zdaR5qh`&uGh~
zp0+ysz{PK{JWSppLeS-T&K9?=%JnJL>}`K0%*CV<KK#S_FYo8G<i2<|%v_D8N;qnw
zR&-yLv>y)i>R-a2QOtyB9CUj{Ls*f};utDOUf}w_AJFo^F2S}8?cyK*e(@{3?=Y?K
zW+&`QIEykj5o3MW<Z_Wgj873q<6*g;=`%sj-Lz_pi7oOzi^9i@=jNET>Q!97%^~x`
zDD;>9vBidQzHKn_{h24Q=31Le$J8)G0BZPnYc+9ti)**Eg)vG%&;KusJ+4o5ALEDN
zv-MVr@A8GxEyz=CfM&&^g4r`d>N3p{1I;6aNr18uxk|D)XSqgtAzXR^yce-Odt1vf
z*E8!3y}I`!#$)^7q@B>dltjJtBglgGQSh)(##3ol&XJcap#`x9nWFM?v<04SEI**(
zs2JIzWjP?S6XgnV+q4WFn-|<*hl%}}g-9$Xx)vC--I7`v?r==QCu$a4aR|SU#rqu4
zd9!CUlU_C)E7jO*mya13^N~y>7+YLXT{9(r3x-C{Ck-)&4=f8y`=yJit&YPy<QeG<
zWy^l)s31Y8jy(IhHITHcx$FKscov*F+^(D|Dw2@mp&GZ<UMxycc<%qoxP%0HVGO+g
zLdUb*Z%jhBu$2Y5^!iiA6~)42C9Tr6fO_Vn@3+xJ{J-`O98!jeDXl`MxllvDu08hP
zX<S5=%RF%zZ~6UZ5otAS@qab-U)Z67UrX)eptD#W^gn(%v&;;^%bp<LX{2aytTt8v
zxR!ZZaOzPaP~Y%vVOgR76#x_S<2R+jflO$=OyM8MHps#jWV5ETgyeOLo23aI^^CF*
z4T<1XoLibyu7$#nNV0nHB95K1$kC9}SM;0`kiH2VzF%xi2n|zh+fNoXF@QgpGQhbp
z2*=Ln`fa$bV(T0kZ+LlcOTa%a>z__X>xa>BPt4NX6}zS|LE%zINVV!@?`N7gJcBT<
zICqfh94Hv9u<KH*E<tFUy$V={6{o?`o+v)qT<1{EkJm8X*TQ%g1YVTV44Dx7x%M?g
zm=t)uNcF1Kou^oAKHrhdn$5pY2&XO399oKY-9Vhp;gBK$H!BsmGMOVbXc;Y~=>O#h
z&&K4@M%W|8+^O8?)12oD1bXdHZWK((OUEW_q7gOO5fSE`!d0WnW(cv&xXCH`D&)Nm
zel*-=mBKWj_;-KR7VD?4_ugkL8PEFK9Kxz=&EByQKq~?>5)7Vv{)9@hVD$W`|9k)1
zpHe%q-_~Bsfq`}%`=Y}dUTqlTjlwF)jLR{o8gDVc)naSUPtOa$py`7r5xw59aMyYQ
zY%O*&vj`(_ld{U22xve@hU6DmIgW6+m((uaF%?jKaLWIpgWjbh{fU-QZ;D%EL+oNS
z08!{^*B>KUK^Bv(Jow>=x!lgKeL)HM?Z2=yosxk|(R$d24D}KSAphM(M;vW8sT4(}
z+nVU=+%EJNjDL~@bvkFK-E4H9v*3W6S`xWYwe#+pfo)gkWY1vwX-S^6!@c8nns;wX
z=l$*{4-RfaWISr0rZIRZ@69?K7f*9rmpM6$BA&Tj!#S*MJ``UveaN)z-K*0PeuwZA
zD<x!C)kOdN=TUjguJzqGfH7pyFzEMj$p5?RdLO%mgC-%b)7++mH<Mo!r4rD^A~5cc
zpuAk2yXklhxkY=#l`iw~mykHghGdl!%_$eZK@YdBNR{7El9TYU=E^JKrlm!?9Ca7R
zUfq@4ZEn_;e#+r`4jmte@i3oL(kTN>x{=3_Cv_~nQ2)PM3$J%Y<oH3~&*6qPmf{}*
z=MlG4ERzflBu4GFkw_;AUdBX9xsbp1mMQojvXCgKPwt28+%2&Rxf7{0mi38Y36aJN
zAJ9V1F1S>m>@+DlHs$|&tx_2vcV(lH(dQyiS8l(;f&uOKaxDS&=p%BYqYG!$#G6?{
z1i#t@X#4Dru`2UYt$(ed6EnJ9QrVbB7HPvy^uG*-G#9zGeEa*kqJpahlYl5(Q+5(n
ziD2^zIfoNuu3cU>INwu~Q)EPTMPe}0XtSa=M@U0uNEeh=&_Y&{7z$-Xf1@HCTl{?>
zbJZvhgD@<J*jBs_9b)k;^4WbkA7!z{!f6H?62PU6R(u2n;f!URDf`(G0gR=Tk%)Cw
zg5i0+{Vcg6PRP*^XX70Kwr0psoL>s;@YY;B*vLq}9%Ij4E%P3mmz+AkaQ46{vktja
z&J?tU-0K*_#qfs4CiU>&IV#P==@o^}J-_z!D^zb5X~Kep({)a42|rR9)-y{o{~0<C
zz^#<#<}ElG#Z!;iwHZ5MP`xtW9tC{;N=Zpm3}fX@a_M1+$<po|f<?*Y6%xMl6d*xZ
z^?UX<2-93bWoG~z5;6Xa1ZGa64mrrGgMX#1TjlfZmWO{X>0$KfcgP=QBab3W{77q1
zeS5i*A)E6iRD9RjY5;Dgz3%tzk9d=8&}9O#f1Fbm*uR&d-6(MaDurx|7|mxa2}lsb
zKkf*k(Y}t`X4~_89!0!q6~565b77OebH@Z?n)A(p0iUk+GC_gm8Y~sA_wK>u*Oa6r
ziW@rBlxz#vfoyHt#81g7Yky=u*7t98K<qq3g`Hd5VfT2r*hR+R1VTdc1QziTGBK@r
z`a^b~>4QIyhzX|O)9^1eYMcUnsRK7GyhbXM0T&3~W*E+>9j{1!G(bUvXHe{jM;%Ky
zt=p8>fufG>)o<xsl(eNO`9X?&!>>x@5jg;v6jHM70!pJu=CEOygT@Q>aRH=1o0c#Z
zgd8w8Ii6<mlkI`%Hu)?raB@!b{Ls;>`I&wmC-<M_LaVU6lOjHq9%FT2X}Ccfy+=Vl
zp+w<BzmygvFvPoq-iujhZHC}x153OoImfLo{4lX&0-)>8QiA=IvrMF4Hx!=&NP)^F
z<=(v;mRx5Pa)k!fTCPXug&Z%G67brjYs$JZ3l0CdwqfH<5OxJ5qUP?qzwg_2T!tpb
z?SZ6)iAk)UqqyEK-Xmg1T`}azW_&He4w^oM6l!3_rzMe=rs$#~(aI@+M)VBPY0UeF
zlwNEG=bJSZ%=^RHB_y1z{M4NH6;`JU{@LL3Q{xydMa9{eiXuqOggo`J&Wc1#hT`i6
z+sAvi2SLAzQ_Y~}qAE?C_#`7j<@;a70rlQX8Y$rzdOETircPeZUUpvZ3-e`{1GB3z
z6LY)G55)tom1)<1_@0xK4HOoVOApu72M<c|@<U)j4#U$j6@aVgNg4X(lsv-<I)onG
zoNbkyUgn(j%a)?(vWi>P#X|b7Yf{C7><-*rg!16!1|zaaS(v@l1=zh0K&hIrftxoK
zQuS2r!omAlCk+8<yGN@Ku!X(An+6ype6xV|!I5mY5yM65{T!1;K&Pcabtu*+AU9<n
zp^~x$TV(Z`KCjYWLpA6i4d}s6LiENJ-O-glF2{!gjsG%p7@TfPVJ%hG!uudj{3CYr
zi=}M3I@#y?+LntZYacf``=Ly(%QfZsvdR?s>5y{0m7r%^GrZ=QKMQL&SC7!GQkb1x
z!}%8eVQTW8R*V&<bm~t9q<%Z)kWlHD5G3+;4^P<0Jb}+)T4_Pv>N!h$xm~G6vl>=g
z!dYsLR6{+-wj*bcYkzDlU&}@FuA|jt=;uXhB%9COVb7;>BvNpE@d_oIoaqbuc2|p}
zdLBZ=rN2PP<&{kS`UuF>M~U!1aW{Zib>n;Wwe}oNltr!@uOaEII2I9m_!UV!{%a*=
z0D0)r+qZ&cF&*q;qh_jJ`dB(Vxz;zc23g)o&3)v);)T8rN+Pq;Q1x1QTF$O4C5VW{
z^YQ}c`gbrF0u}dF4DtuXO!^m+d7Ytw&3DqbH8shyQ{^tx<qY;|DO2SZI9gVz3;W3y
z))C+z1o+6dwEP<2$cNXp^r~Z*h%VRMK|>9hw!@m_1&t5y_F!gM;OY+X`rL`7TOtj;
zp+pK`vYf#ZCmS4@yJXsliL_jN8kjxbOy*tKu`5m~wKc`Ah~6dfO%x@<FrwRC%)rU5
z8ji+W{-?@fujmu;n=Z0jgjOOOCHb=lDR25&&9`>Ki0%Rw%F<ia0wsG0hH|<#-alZD
zyi0Q6q2)B=*cg3{bX?CT3}zNBe*xxjtu2$gD}ybbHce%sO0fOo0!+(ZNY0)!ZmylF
zJYFldMPFg)X(;1J`NZ|XhbwU_rHE>1`|5@};&EdN-!1o3ki~_P4b{|-&kcO(=mgVx
z3h}%T)k);{#HBbD3%|+`5F(aKDam)??&hfd9s2`?nZs!rv&M988!gg3mpG`B1P>2v
zp$3_$zn>a=t7w>5cUzsWEDy|P6_agqQXS#98;uTcHJ9*aZB!)zuBS=HY9|$(rv)A;
zu8KRksAQTT^3uhgIH|zAN%Uhjid4Akl)yr@yrexZ7R!UlIjWV8*<J1;D^eRvl<O2q
zoON2k^mIT1J72mhMJXHCsE!AP*fp}u!<0ajNNdUQT6Q|H;ZOY$r$!iRTayHL{E0DH
z_&Jpf&eI{wxI0ykrJ^eCW7TNa{*j7DW__Zlf}6WaHFL{7DeP-lE)M>xPuNoOCg6jW
z?#>vQUc=u_%X6q)uawH2N#O2l1)&;-A$np!Y>ySk%Bv@^*iIS!Z6key%7ku&Nj3_u
zmSvZ#%u>KcU0bR{-Q&;5M|cG=`K)3p){1U{+hJL@dA3(qL)OiXo_hCSAbH8V!N9HM
z*BS#NkRBsR_1I5rUqdVp(4NJu%9&<=IBz_QY6_q3_5J%_otRQ3F9W(8k(QGY@3lIO
z!qfI+-CA;`vzR&g3h6490{nFaez->N2715(4$LEXtad|O!(MBtT$HW@>qI5PjY4qW
zl9T$uMpY#)3%w*rviaDUEA_y8ZR(O#<iZ(w#z$YkK*h04G6k~yQF%bM*pt(BKRp_$
zYn#BC0;ffPtVpiOj*XzydiL1cjZ8;E`pocKK|K2*v|PACD4&*%=!m$gnpa!j-1@VE
zHc?v-X~YIliO>wF7I1(ny9?JqrS_JOJ+u_j*fdxH2YhN{itsm#UHVA$z+EFH<!%N-
z#yNJ6P}Lf#P`*?8OGfGNM^WlY)w{VCd6;#J#z9I;8X@pg#S7n=sBp9N4lixjsVZS~
z(qg84hi8pDR@KZ73v(t?BdMrnN<D954Pch=qD?glmQ~q}5TsPZOg5IRYeb<JwoK%M
z?4bkGjVujvI(eyw(EqKpkz|U8fLRBTiYF*~0PMBD*r#pgh_j(E7r6KBhT#oG%z7Nr
ztFC`dEfp&Ljbu{wk#So;qsWpoC@zCiNEm3lWC$&X(OQVNRFl(yf{8=~!p_dVe2?Bl
zmuij{yk*#WNSm$?4TFPhqQ~4(@}Z%5O%jTC8ovHlt&8IzbbV1Oxhe{&rbdDg@O&U%
zJ%xZ4Q1)jl4jPQFfQ#Yk_pFTMI-g=Tsnktr;pW=lHXEhZ=2}BHI)ol%9UMg#_in0q
zP8)F!tJ*wkupo^1p`3DVv*o;g@oql@d-1fV5y+?ptG<Ow>z&Ld#YqztfPqVxjt2W(
z8InBan|@mN6Ue|Qd01F5L$f(E+0;-YS#+fpI;AfuM_ZV#nd(xN5LaGn7B8IqXjFzO
z=^AU#sl>8C0{>)$rjx^v&hKX{6wLv|8+C-5i2i1z$S$A}v$at_@zt6F;U*Y!@7_Hw
z(wGhst*NK*YpHd}jCx0moAayTE5%2m;zXtT6UFF}!kfPS`v)hLiAm;KNy>tC6}-)Q
z^|xfZ%UpgfeuV=6bSx4>Jf)_2BF4YSa3rkaH8Zcs{LZqbJbD*vu!lr3f;>{hPZ&L7
zQjuQjzkeGk>|@f3j8$Kaj1~Y@$kWu!Ur>>-;s0G<5;3xYKR+#s6CJ#rnmD3i<*N3c
z4S=uKLduA>VbFcUruzwbm$K5ne+Q<UxY_+DB;RU7=Ngd&NcX_18n(RmpgHBp4_EAQ
zwad+k{4Z@?Ajpo4r!agoG|ujF7(l7Uiq4k^$yskzmGS2q^zYq6+Z(QldGAAB=MUPo
zeyifF;TshQ3AnPVjlDiM`Xa8JQSBPMf0i|&s!b+qkilQ24F~B<=oCjs<88%m7`7`5
zI8vT`@JiVbHYWls`N2Q1lA_;lC8RR_H`vvB_r+T1tu*l}JjrkFD{7+KHTeJFS9CpI
zO2?4F-O#<)&#1*Pc<pITF)CDlPnUfttH{xDyO;IepIEy|$G6xIqi0FBNk|z)qOFmZ
z*Z9MDkzq}w?htO(LnAb+KJbx#=JvI+rt~d?I_iK&RHX@U8(lWAW6H17>6oVDSpb}6
zG;4?48~#RPBuTCv{^exxkxN4gH|ojpnTqQ4$EfpX8F%(f_({h|M>q%x!p3+oW)z@T
zKct4Aze_b{a8%Ttj=w8>Qf69aTKNwm?e$>z?_tkR#Zlmox^v}y%-Us9bo|<-tGsOZ
zq1LgZtD;s)^0yF)4>6f3WI19gTEN+u5@Y3_gj8`J^A9wQ-b-0K8Ba_O%(;Ff{`f*=
zHx_;&y(}m@V}#5g!L}zE0uow*cRqF6=6hKnJIRsuagmHdq@6I6I#t=iPdj^Wf6VzJ
z+1bh@MKLkfPT0sN)(W}pr>4y8;BOB5YxJ$ETG+YX^rHlG4I^n9*DboW4dS#aL<3!6
zsl{okw)}S&2XHVWeSOhSe+gu`>^&i|PWA)FW2IawOcqiYOEHB^+Pfp+frPytMkin}
zXdKgJ%6sjvY7w9j9kqDaNQMzHP6#_zLn2izzr4b{Ed|bOrc!oBG*>O6ZCcC|Gy8!)
zDvtgQ;~$btd&M8#2{+#G{GwME!o=)aswZJ2h_36}$VkppRc|28<2Su1hSzkIuKaIE
zDr<3JnH7Kjk$=1v5m_@XCIXCQnC7u$r#_@t6P2qeU)Koh7y=`hHL#_h2&iT(t5#C>
zd;wU*V^N1rm|?|}H>crJ?>`I@0&u!~U$s4{>UkcB4y*;-epu<)S4#n1)V*JuDA(pv
zid2zL<PbG*ZgCw%(8XK6Fk%6z<z=>uzhm^2-=w$_qIb1l4~uF#<33kC(!qdY3e+1#
z#(i#YXMuC75~%Ik=x?u0Y_9+5*Ml0rhp@gb7CA#)6($J8nhOL|wOkiu2Sm0H177i`
z6Tjjn?im<-L7}kpq3vpb=M`<Dj~gH_!%bZhFR+fD`Up2bTv_f`GfXv16)0uwWb7d7
zax55Q;Qs7ZWW@eQ9k_{i)uist<ZnuY;!dD$%IGmOQwXOnhJdjmYeRo|kc%HjLTq8a
z*@?(B<U-PhFLwKP3ifkz$~A~;OT-U2vT=hj`z<|sS)t`=qYiYjm1kVn!?2$yr6gu(
z8N%PV(S~RMgDxVq%pj>FNziivn+k;fnOMYMi(RIs%1t&cd=P<zyPtt`Di$%6y*q#-
zf(KOaYox(D)F)gy4i)$dq;<H64yun2BoWAZDgu7{UOq`L`ru!OF3^rvHWZmFo^`D}
zl|t!Yjl4f5=3&i0IO9kb7!K3!|9BlKMYoA#6UAR!oL3W!%8o(2ist*Qa&)ycyX%y}
z&{?M@bH(_;e}K$lJu)3AY9_N^Bd%dfj<W6*ms{31uv+sN|GGmyPbrw@eS0xeXm$H{
z6}lae?ShUB?-45-Z104<o~5M-OHIM@rS6o<0HT4k-RXt>rIil28+NAbO@BL8paWnc
zwPGy?&~%fwv$g`btjR#Eu1ZR7RuJ26Pco>!f7MBHwJYhAs=8AO?&mdAc3^mDsP8bn
zb@Z%ZO$*pq>q)sfYpP~C=vm=zjw82I+Ou86X>Y+-+EMfS)H_XW<ei<Tw)3@aKeW`q
z#0GK+(lU&9y;{X^%vxnbp+3z@{z1v~B3X3wG_3VJ`SkTQfs+WesMD?CPXsi2or{N*
zA~`CVNrrC>_oODCwUgDAvpt2Sc-ECzE-a@?O3_!fLwsLQ)*Up`a-g1?o(_LHH9{sm
z8{a*V9OW)0W*=^CbY4PtBpVX<AMVGP*gk(wHL3TUafURf!tJf6ftxAMeblZMHPB2C
zj}t@06(;e&55UV%-u=Ea3J_)2x$DRBJ2zOu+D_#s>p@kqY5HA8<PD=WBHJh-)_H-1
z_WCV7y<kl7kt$9%OPoP=MFAzs<gdz%*q!1GiNULXKp=3o%5<XM<;U1IU4R!J$kq>I
z@t8Hsfx+vcFgS{}CAOfuI`f|LaXjp2ITyb9FXaMH2l+HB6^OxHMNf&p#Th~d(OMXI
zaw(l^egKtF++x$@t%xVC?|Z{loj&zU_Q~flONlj(-~OBjg8{JC=aC4&aV9tgR0?j6
zEPrd;jmP{*ZH_2Yd#3kR=Lad*?#5`zX(^c*R7%HsM0<P=P$qA6sEe+2^Hz3MKlv5K
zKa?V)H;z|YY$aa0PIxKK#<$xOu#MYWAJ_M2=zRoMz1O4#oBVj%s})CPkvJ4R`*W<O
zZBEffeGHmTr5QI*xA@ImsT<x)Sy>mB>e$u5ukoQ&{+Rv0XHh=9U}agp)BZ<0Mr(vs
zrH+i<4Al+MHH6>R#ZpY2OyO#s4e_e54#9l@XOA`vGI1u1B_O*y`DhCxh3+3Tn-_lp
zHfA!gBmlk&B`R4oe`dX7>5qi{y+e>u{T{8_YyDioeMwdMRqe_Hu$!skfw&t@Ij7gG
z9@}jnYm1lss4PMsgSk(UC;~%u;L@S(PdP(J0#6$oAdPN*SdZHT`yWXd*Tf2)OX2p}
zC^0jpdvGQIBO2q=HI9n3*Ps0cUS=7w?i>S?*VX1zh5R4QPvlo3c#{5XI!y)y`@tyQ
zGpzaLpX3Zs1mapC(jE<u8x=K1>u+z+MYs+BRZuLBcu!BB*5^nL@gAWG#;NKrPln<&
zS&6WvZYZ^(9CuLDu6pOgwcFK5KyLAY1{VoJZ1EOkewSh#(#;U?r81vMdZR@Wp@(F7
zXRrVg-`4XMyMfo-GrP#GqzNmZDhL(^G&wX${;6%t0_7ZS*Kz(tvt%of&`|xhx4r!!
zT6{ebs!0^^D&e@@bktf|*a&|+@iU_F>%@|LlvijQNhubY0($Ed*99yGrR}#VOWf(^
zfQR@xequK31UXQ&@X)w&F(RjnHnaQ&q96kGB62f!5aV&gmpoRvvP<t9<c=irNW|I_
z1u%>*oOBJD6N#34EMIs<2rx#IZRA$Y+TI=|p93&o`eA$)DR@m%38}>ip_9Z9e{rCM
zDrB1`44Qv&I&Onv-BlY?%UhI&c$Oe3y1c%q>F7+3y5&n88q7bHyarQ6pZJzyw#NH1
zy<PX^NWlK>Rg3;EJPhEXjo3iXP5q%2Xe;m9^k?{%$_Gk{?V}6f#VC9>(B7eMNJ~(F
zI!vOSbuu5^O2s^2T<7iO+Bf8ciIKB|m3nJ}wJXV{@wcHrT0u9Jbi7I4E?`NONC$k|
zx*c;lh7Ga+NSoJ%O^j~E)m|l@;iPBR7i;M1-cUiT;d_}6Kr($Sek2WUw-$#dbJ4bx
z!rqe|;hUNZg*SkeXb~BDc%*`86WGkQ(*Y$6(m2Hh+&@FuE%uD`kw-@c7>v~k6Spl`
zF0#tM8sh4677(>l8YDC*YZ{{OIO4T_dsXB6x&QTRE?RtvjkAflEhFu}d{S>S^!0#j
zNOLL>)ce)Z%->#;&4A3yvzOs?=Ciq#(eHlV@;4WG`U}5|0MhSy<IIZqtAC!pPm<it
zDv5}@uJ;JV;NQ(!q%HRZ{9V?|^B<H{`)8r0W3u<o@Y0dCwNa+`6H8p{kJ_>wc0Wo&
zpl%ueTM&_caYc9OUWNXwh_>`r<So;M)?vF|=kQ=RxB31&D7^nk6>N7}G=pcwQ+~m7
zm$hE5oo+;?mPF+5=B6ObGl79|)mDsTNWj_VRY;pk{t~-0=twZoD=!)6XnULQqHpl7
ze7FCtQ3|4mA{S9Y;W<u7!4sn9OG@0D@9D->vb`7-GDO=e!!hDs)K&WP_y4>dwZp{{
zXxO9-ktEk~AFV9+n-4VXXAd948{S9AYQ!+0t5}lDxU*=3Jb?@w;M>DTulv)?w+Ju<
z=r_UY!x8$xk6*I~ZN$&_Y-SyXyc4#%jZ-~FCV76Riz9;yn8bX#YXW|%_Sn;%5OI>+
zCL7Sh*2g@dH=<_~RT&a2OBLm<7}M@Jp{bhcqDjw^DnC1+B~}RQ$}6e^H8fM5q4)|%
z!hpEJ%W=gFlNAwCQ>Hp&rQ{nOx3IUiRvWbR_uoY=^JdADr3a5??Qud(UlI2?AtG}<
z_wR!VIN$fxbe$*`3h7zJ{)Op!E?9eUNz$;7nloKw`0UN+GwT0XD4kynu&kI?m`8f!
zR`sjcQl^LT2phBiyP?Fn{<|4S{>pKhUslf<EkEwlaQyXbl8{@jUIANAMlS-4+9wRK
z7*aW9jl6$MLL<lpqC|G*ls9fpuilKz{k-U?`50Y@+$PS6IKO&(Ink^u%{KBoSP{tl
zE@;4(*w!=h``p(5wqZ}HwBdwi*zoB-V5K{aT*;Rmd{GP9eU1B8=R(e7;zB{FDv#BL
z{++wtB8+`o$WF`Cz*FS!=191X?c>=k@G_X;XwZUHgM}$kn>Yy&qjkBfT0W{UHrUK?
zzgwO4<k%XY?t+6lYk!CZvRiO5tuUMaQQUTD65d5$!Y^<)Tb;F?Qoy3`SlL-cO8;Tw
zU+`gP9!uY$n^K+m|F!qke@(vcqaq*;1C)>sL8;Ll0t1v%1f--(q+u``1f?Vdq@)BS
zq`Mm>BuD2EBt~t-$T@cQIp_WH{XPG}d7b_Cy!JfzbJcy_S3eOpomy^5mAxlzD=PPR
z+wRa;lL0A+yIDdIKdX&S*9#x*idWy#9y)a)`X+g`o61BpQtJ{U7X9B^fJe#x95hUw
z`(E|<R&5Hy`E8WN0A>@l7yd7t?sZ6hoawc!r%Jn5rbpiK>_O_<&(hLfU_yNELK%^k
zrbOGxvX2BGIn|7eAPA*S^fL4h-CP^w=*W^>-W?(ZHGwNx$oijbY9Y~8*u*R@rm+}U
zlz&N%yo`Ia!<H6r=>3Wx7YBHwbP8?07%g<5eK=fiEqBqwOSE0r|5+F6^ZUR}vx|@{
z^R}WC&!ggNXTO`)((is$;vNTf*(nrcw|}ihex1q8-D+&F+M5znNv`S6Sd~^F;(27{
z$u0RPRl5+N*2TY)`l*Zz_&%T7#XGX_g)73}^&1Z_n=Xa7=;OlV`t+*4o3{t{4=x1W
zwa`lf6i5&+93mZiurzTTy&GV?AcFuUU2uk0#rrggpDSUjV+&WMeRr-hOH}*Fbnn^7
z9i}qmmDRHvralbT&Bw1ug-&8L{oYWIX1)H&56pS*`U&}qlcpGc=vY=WAHu_DK*B^W
zyWlnil)h{64wEVl9$Y4B^IkCJC=jdD(W*f=kVBUhR<?!*v7F&*#PT<wbX^^4^NU0s
zH%zXV!{;-lR%v)3m>#u;p~L>h41abrR@fgGADLF%QoYazuCE4BM^`;vZaTrPEST|j
zPstNTC5Q)~-XchK@Wdv;$M4^nRtO-^erNe%n0WZn(NOO=yj+ZS-ET6@CF^@$?Aum+
zV|h*OZ>ode)Dsg9_jVw&{(Ysy(Yn6sRvy}B=3+a{i&AfqUh2MT;)X|ke6+#iCepTT
zbo!&1;?!)y{Ajpe{Z2?ytW_8QS7vRHK~(-^R0NRY!rkMyWOAt*N!H>lGA<lhQ+{7P
z@i90+(a)$TiZ`{7@Y9`KBkQX#8k})iUs<&)G?9KszCHsG`x;l$cE(Sn=`Z-I_x9>u
zENGJqE6~57%e6F4dIF^PGit6xLfwrbH=|1Cll>o<lTml-r#s&8h1(O$pP*782gz%z
zh2=H!tnctv0uQcBEJbG(VTJ8qxkCwUi`k{prd7JvdKXgDEeiAH)M^XaW$zsFQnQ@V
zz_w=DC<ku;#HWt_9WURYO`8*mV3$3Ex7vYw_@mBQ-Admoh??J2UIG9L!*V;>2+1=z
z2ppGaU3&`@<=CWROe=Rc<i3K0OT0A?x#Bq0s^-|E_wO6B<M<ZD<sdO%H(5J31+-H}
zTg!f)%v``N3^!4D3HK$MIP4jXP@pI*@1^BiIVn+Xb#*O+t)2DaVSG^HI_N^#5wS`I
z>Ne=H`VQi0gD}3i7y3{shFR&&(Mi4{G3{%@QpS#^mwJigZ1#i|3%qPEX-HSlP&rxh
zuh55i<atvk<g3bL)T>p&yz6%tUl1&<t@}shqdBx&tr6SH7gPk;U^!yU4Ow6}2351Y
zhV`Vlx|zl&>%t5hdHI6pZuX}!ohfT<Dx_jjH^(6>Zlj}OhC^#>Y>_b;g}^Jpm3VPe
zlh9k?4mYnx0>FElHv1b2G+K<WGUtC>JmD@N>VfY#WiT7Pg>yXp)?PNb=2>9d6S7NJ
z@hKc`_avERG|EZXSY=o#^a0a3xzJWgUR2Ix>DLzk7JF$+z6b+i$VX!@x;r|@Kh5Ju
zJ2alHeoVB%|M|v1_ss&RGqosGgX)`ZqRe4RRxUAF-%Md1pB&_4Ec62Yt=4eYXjK_3
z{TNt*gs$r-u;dz8pW5k$NXvw&?9I;TH;?CV+J1vWCA_DG?PXaxcVn72fW6BEWTl!>
ziNqSdw6xgk2WM%V0T_S*vpCh;I|>0y8l%u$e@DtgnQ|(gaIvWCGgAq}`g1R~ZL#2o
zFJYw+Zv&^k<fv;M`z8&{t4t%<aF0gv1pE329icaYsp5Gh3Jff5MMyaOvJQ}alzfn2
z$nToQ`zH%vCp;G4ye5-+^fsK^Oq6MSB}W`Fx~iN~6syx0w3N6AsD01jfr_{>!DP5R
z7v(2A(MA2_-+HO?YiiaH!uM`NKDdq{02~@83y7csrd?eWc8QngwHLOh+~0l)-|!nO
zzTbmS9<%<C{{xNQJsC5;!b<%cZr=3wOdQ>+x|>e73=4YnG1kH?CVBvF`7P;B53acS
z($*W_n-c4i%X#a#48N%OBVN4~`-+akN*i278nwnG>-i`B2S>Q(d%X;6?gY!E4BfRA
zg>*Y$$(Lyrni;2>m00q+Tj|%Tp~of{c-s?g(_<<>Ky1XcjH-X?)5SfMwI6Z-UY<}d
z@>WNjSyAW=c&e&AQReBG?U$A(fwB#28txn|QQ9#51Swg>XMz_gZ>PqxDW?^S)Zb{{
zr8=bd!|$UiswOWWr!TPsjpQz|8|8&@mWqG9&!_o~+rI>mTd&AcckMj0CIRe(0+qoZ
zjF)crkrs#zM<%wgxH2=tZ(&_sn7^33cP*pYa3Mcb4Lu;RH%YFAe4$)<Y9U+FKvbwS
zsPJvU@tJW=f^Pg$1~IsbDxv8<19`g~wOgy(j2|bSkXoERUgPm22I55aSDGQDzv+8N
zgwq-*K%4V=b|SB?tFVzY<Ro`a?%yzNoME&08k9{Vrtc80%G?9F;~`89-X+5!AtavM
zT(_1j;wheKYY#}gzfWB!!up(f>gd_9(hCj=$|2ZuQktev?O?)xa0rJF*uB|YP={?y
zvllUf20xaBJg<JJQ>`_gYJlq^(`^}OeG$uFD+NHSW|I~)-+~D8so=_TzQ3k}X89Bm
ziKVc&sR_8^S>q}>M4saQsF`)7`3D^KfZ*Ttn~wpjG!2Nfd!Xj%B0+Y6=nx3MIF~wL
zmHgvp0QKKHX~&@8WcD^Em(i!x|L4viDX6Oz6`~8@(pc*HhqcFeoz)iqaX4IE$xV!s
z5Na0IjvM^=5l)$?U^joo+FND5bFP`>OL4N$7+8@7ome}ojl4bNHeUl!O*&kLG&x^<
z^b9F1sMy41tZqVx|G}Oj8rF#W9xPeo{!G>KDQT@PWb5|qewIq}09kNtUIBUkQ#9h)
z`s6r5#2GPj4+OE2#6^C?B5IFm`+>llX3pE11<Uf^8JAo2(Z0Ti%Mo3ddvU4;VS_$z
z5=#e*uLyJePB}D{YxYs_*itwbMwWxBXru6%FlzXuztDTf_wu=EVDiDtRsL_J!dxqD
z6*QCcQsSYvT=PWtc4|$%Ll!5F<mI7XWAMGHYotU&reep;?z%pH{1jEPNl~$yf!<$b
zVV;?2-rxSR=Xha5baeG2LAScQ)GJ^Jq1H46e2uK#K?{SLo##6X+nyQpC51>g?w<!a
zg3sJuD78kUv&bwesXO|vUi%>C5=(sQkw?#s=GL#Sv{?5M6(O)HGo#dYbI9Gf&i>Ow
z*^VwL|NWtPf4mw?>&o6}_+jn=r-~Th3rzK$r0Qd3aNy#nm3?ake2sHsIu;RmurjL0
zBzW8X74+tZMBxTcqAq37w33TexaB0uHh(%wUDpW<SEW7Wyb}fo2Uz!d9K!Hmne}Kd
zx8{^~Fi{)5TwdpXLm>K^;9_OH9%8WRJ{>h~DiZp1eyfl(5`ADUDeU#50snVfpx_E)
z&CyWIZU|T2&cq#l#8i9?Y&XU+j~Z8*)Ar}b&_k81#&f0P_qeFQdUlYf=}H!V^I$G>
zmjlebor|~X{?S$as$6T3NZ?)piN2AB5K<=Su;bAh)+2ZynAu-@cDYt9Ncu;{dhd@&
z9#Zji?GTR^mZj)y(<ibweP)ZS0xgZRymY@7KpsI4m7e(lU6(&KnuW$Fp3H51G?d$(
zKtFKZKQYAb=-P!Xa=D*=f5%bL_ZTJTe)V#`mWg(Ce7s8R22?|UH`*LKnMV9DMyL=w
z8B^3Qg^{=R7%ICEC3-T=WuDvYjPw$py1G7Sbvivy@a&fhSfXmDp=9<CM&4Y!M7uIa
zvaasr6b-YPlQD~LuOsp4$uUnpyftxb)j((_BF6cB4@0?y;OHLM8iE)$y3Nb%SG}Kh
z$kbFdx#da;s~B0y_aCYX&f8Do;ska`UsI{0n*OwYZzQ-qruz6Pn6Dr4&4~nA>>8T`
zm<fXm&2wE}EY%0ZiBV&Y_Sq0DEpC%57dKv<e)|(pjk$wR`&kXeeN0-=IVR&67^H3M
zj)IGOjt8QAa}>g99sIcychCBOnOSo338NY?Q9y7MQS?oaTsuO62b6b=<cfxM<h|IW
zA<j_8N!CpQtW|ZP<6=q(D-S+h^6xHkHC^$({ObN1-t}#wfTW+E%ChUt>XN_m8n))a
z(d?@5o!yisTU1A$5zCd${_*Dg3^q8lWa8(L(HhHu<Mbv3RrO~h2mLB^mk8UK6~c(s
zf>Dkwi3}Q1e91>w)cAMXA&#Cbzs+wq-yy@^Jc6GoqRADm*)~~L#alSl*sTPKA4ZSA
zrWvb3J5KWoEKAoqHmuc7b`VIv{GH-?iuMh4xp~;lh1ur)?wVb9k#T`~TVD*`PVtPw
z59mHf-EFR^UOs7!$ivF}{YpmsIY-qaf`-Sd(BE72S+89JCQRG~R;T0bEWX>Ve3$R$
zQq&S*lL~^a;0niC`$0iydfxLq&S#`I$_}fQTP1hT0RN%VQ*dWj9Fw<~#pVvb0$s9H
zHuU5^UAyIhV^pfd?$vm3#!P+=(@SWETx{chl?|p165Q2ZZ#P|iYD<Y*)+=p(b#K1+
zijSFY;`Mcos84X$sp@5-jU3nMsjoSD(I@yu4f1;Si2pcMl5a6~XCvd-F5AgNE%tGb
zDd0Ix&akG-p`6cN*F(gZuD*)cyh5>&!`mjZPqt6Ge|))r`p}YO%TrpV!lJPlQ^@`1
z>*Dz*7M+t}K9MI8rrPc2LoP)Ae1M&d#_jh|H9KW_;flq;EcUiWaVtHlQ^4!T;JGu7
zPE*+h4bokTPYV>+@Qdp;M1Dz}xUn1qX{S-sHMre(;HnZ=h>n79HwtmsOAw25%hn^8
zDhXAHt}rV-&zZEyTtBWoPni8fuh2HzV5LW04`}%Sf7$<_yegW#&7@L`*o5LXt`ITc
z3vq#&4jJ7&5i&gQXt%Wt`%{PGLPD`#?-?Wm0d(w*xysO+|9})#MHye)Rx6$9@S^af
z@|p4p#H#IOWk|3xxZJ6?fYX8F3%9JE#_C6<y@~6Ov@7cU$U!M=cS~=5Oq;WjUueXL
zZ|dfxA+l%omsA;)wE6khzfj;NT*}sMJ$FyZ6k6<i%lT>c&~T}NjeF+~>|INVl9@C$
zY4CSKMfwMZOpt0xm-%<>jbaz3+||v~h0%FUfYdA@+~NAhw5BxLgqVT0lPgQIX1;VR
zE*oI&ul*xiIuA1+`eR1AB=?1@N8tG4d(<SvoZ&aGYuTDj|BH?A=b5bjA^paQ@D}`j
z`C_V-IHGC&)i#CMJ7x9Za0eW1?IdukuBNf%{hW*Q^mUx4RVSoO>r3W}tXCVxj|#c>
zQ3jk+{$0gaqarH=%5^$2OEUbnYWijT=g!l~kn~+J&1XqrYc2)GC7v(1K8`8rsJNvL
zhkbXadi6YJFHD^g%5M7<nQjq)6;>!VmHL+%wgrWb=ddh~I3IgU7e{_2%@~IEUSvvx
z7~U{FHqgXWHm)`-pT5z_(*NMbYs+^PVf(=W?Y0Ph9ln2k*k(A`<f31>HZun@a$VT2
z7&~C2zf05Uje189vtwEOjJ?XkUcw~CCO0bRK~m*DBpl_+zuXF_tPlrq$|j(wz|;e~
z#W*-S`D(4yA%nLK9&LD#X!pqw+UuH;PCjUfVFzj(lJ$!wNS)L|3X>-wP$w9ZkS}M;
z)FgrrZ5+I~j!(^2?Z%?WFJVi{|ARZLFJ%?u4#~itj+Q~+VM~filUtg7x$xo7XO{k<
zQ?|1rC^&66*ooeU{hEk|dR2|*nrQErkF%1E+0rL?`yJN6v#~J4tew+*^Z|#45~;C|
z-ri5x=O{?rORE3DEu0J})fk~@P;kppro2C@Phf9<>9}d&YXk)zSN0h3Xxk^x_pp!s
ztPFe>(t3mc$h`;tI9=jx_Ze6R{WwR;N^jz3*!2lGa62bc_|0ewYvJuEk!m<RI)@`O
zBhLGifg)E9A+)mCKPJ|g>^5#<IOn3csfD+d#>It2i4BYl7b8{-L@S9J%e`KwE_P6y
zXsLUijSji21KVuw1ZFF(d9O1z)AoO*b+2>k6kYxZ4|<?uPo=4)eNo{&^KN)1W~BVu
zwa2?QaLjb6x-=>iCx7O168h!Y3-oMZ5)BrSMLyTQ+X9@di(;v<bW8G&SgD(uPKHmq
z+8U@#Lz}Xy_=qH0z4eu?2lN#l`ky;&&ltYUaAKM@76D7u2a|~KE8~usJ7=P$4NEl=
z_{K(mkV~^^;EA^6CB{nQq%MA?=G`HegG1L}vBY}Pp3kp(o_u05a9mP+Y*@mkz1DD8
zghT!-CiYE6Ojt5J;B!Gqlg9|L*DsmLbAcTrf<fF^C$4BW2Q-b%%kamAAV*y~;Pa=F
z=F0{W2uMINgAjkT+k-<RgMMv-`@C)W3LmgM008K}fB{wsQnM21K+VbL{AJcWI1QyE
zwgf6;Z_7N?iZ&s+O<J(r9A+{^)J*(a$1@!Maw<ekVibhKCrkHGP56CJVIrfT8gW6^
zV%NKjRQ50IZ84r@(OqPC%3yw{?t=RcoL{)xI*E1Itw0cEu-I}spq_@{6G-aK&yAW#
z1O$KaVh_*{lFa1!FB)O&ZBIp|QrZ7P{s{zWFg|O1B-!A#gfubvyVPCK4*L0_ljVJr
zfMTFVwv~IC#Pu6x`)^&PUt$*_E@ZX{bt<91u;5(5!0j`NIH^-Bt>t-cUAAkt{Z;F0
zQ}N?xV?5&?-k+pKt(iHE8cD9wbZGudqMi)6q{}v0RW-Iq>tepW!s>wH`ow=DB`SNi
zI^<xkPQDd8#r@1@;caiS=IP#G4!UMS$#>mh2ig5fObeI1|A(*?F$kI_&md%X0us4D
z>l}pjRMc9txDH=#xY3I8Ue<A_`y%*#rYx*^jd6VD!%l*wbdv_QD0o;|e;MaV{X;nf
z=k=Eyfdd9IrVR`alZek1Ir+!XeFdSf7cG*K>t4X|zVgu{DVWb0;@)O0YK*$SL0E1r
zt$Oz_<Gye}(H-^rV#IkIZIA%L>^48DEb-sX?>p(ctn5J$1E-6sK%e!Rux9gMiz`25
z9}F}28BE|`?WpcOg-c?&SgMR_0$x7>)7xC>o_!fUCHkU~cX``P{I?3waxP(1)l{#i
zV?Dfi5Xf9*COcOs6#zc(IEK~DRhP22r8ZdVQHW6sE2C;S6au<Ce`WZBurRHav<pPH
z#*fOrM#YHHj_}F`zgx_jC`e9A&HPHOLcoRTeAD!MoU&;GayUG|ZOt5!ixLCO%GZ(=
z?x1ePt=cNx35dBOepFtAVEm|6`%HCtO2qY}s1RUC6IdV+0}LJ=nhxjuO97l6qf5wO
z_#^6>tAF>&!PGaMHqrKGzWAAAH?7ghJ`u{zlGbA@QM`@w47M48n{5_>l6gnB@^Al&
z?|s0kus6lt!g9Y^zvD#5!9l54120QMfFvW!W7x+Z59cmFI_xt|r8<fTO?>~<wM!J{
zl4$BW5u|&t+ix(Hv!m1R%s5}PmGF00KgKWU$HY)vy=JF>I4R|gOi;RX`zTxri3Hvy
z(%dh-I1M|kYP0WWfLuRjR(TgI<I|JQAq_tKMOWj&kS)KitgOopr^*HNr%5aA@#yJ&
z8szm8O-Les24LY($69$T;lZqOMbE~qCK{-oaSVzOABifTsjGj}XG2)^!QL*)Ei6cX
z+=)pT?Q%BSBJO+MxsAo0QU53|9JTa#8$w|}WQD75BEJ3pah`O=B(v4RCxBFhW^ww(
zeb&Uzpwy`EY(ra_`wMvDX4uyC!k&0pbOp>YVS=BAFNa?YwLdXZR!VFQJ~{hda+xIl
z$nRJB3d`LXzVJ>yaqnL}c%wQgzL`(YR3T$94(`Y)xMoDSpF>Ez92J|I%$NesUH@kf
z{l{?8JWU_N3<$FOVHYNg$fCp?kvjuUeH(X#9aqEqT})qL8Qt>9&Z%raD|_x|FE+q$
z#K2Jf<Iwu76jJvST+>N{ZHg#W+%%I>y+#@g|8_yTU{)-`M9yaYmZWUJt?5WXrpDiA
z5OW2(gS?*|;e+INpn4k)XB#<F8(g0|J&k{5$-45H$@};t4SAvycqbT|CMHsK&}d(I
zhYk&a1?<@#reB<Epje)sd3WzDe)+3A><Yc*+16QFWhC5X+Vt!%Y5%ug(VJj&N(X)&
z!+lk3Z+YlZGM|0lujW6wj6RV%rrS)*-UHYEduK_wHfZOE2+fn^R3)cV9%O8w@8T^#
zYkmLtCHdeq4OCld(h0ib^N;g`_8Y89GMAA?oZ1fdu=vr3jok6}7T`waW@1P#07WQY
zgH3C-^Vxjg0i?PU((-0+?}^Tm(L5JDk*<u$!L{!gqF+0ztLyk)(C!t&WsJeG+MbMa
zb*5slS#B;jTSQ^<5d9$?hIP0g8o|6$M`KPf8fA@1E$T-VH6m4hcN?w#Rd?zjji@eM
zhvv^b%&P{=!8=t}<|djeLuX21&t1keaPMleHv6<Dowg`-nHOzVA9F}Lqu$->yAO0)
zUdeVbfca}FhUj7T<~4x*sxkvdl=356VJ+5eqhq{XSMmX(==mlgr{xm&fyv+(*+{6X
zWg==Q?$5Ov3a)6LfK*JW>mCVNMVJhxObE}}Vkgk+g)$SMMBVH|5o=;I%<Q*AhT@X%
zglZ26)O3!_Lyuo@w=3@VV}uIv4flbO+&~jW@Fhyb5`wekGbvP}6*6${Sk*cxj{)9i
z?DEUX<Iw}e*qLSR6*|Yr!p_XX_QL=GYa~RXII5mVvRuU*@V(C-H(iG)^#b;8jJ20&
zO6YW)7C5e9Y0D%Hjc`0z#o~h7?u&1$BZ$J_N`r(>L~4niXCzt~MPq0$qgTjHF;+4$
zCDNw}W|9zwrZJsFvyC|dXpRA%f0W5VGa51xxlJCO@GMbU7d(4rGIG%_ND9_MuLDvg
zU((aD>=twl?uFT}cEX`-+OqO35PJ~VEB!#qZL4X`m(5I^=coHuRGG8p%CEvK@V-)u
z=s>(+EU|3ctnEc+X|#2Dvr~jpY&=6?aIWv{riAT^Vra@m&B&{2_jbwUi)*Zm(#lSJ
z;^J3Nrfmwv02%J9yjpw_jqTb!E#F{TIYhgCoCC(0p{*LTr#T@s5-xdpg}6ESaM-rW
zRx8L0d^6|nV9tsTA~ieRH7F*PkN`srt~L*!cV7;~IKCVYG_iR^qFj5aeWcTVImhFR
zY5a{p$hx|heg0PRG!E4WIodR*R^A)1#1r@p>1<%Xj?juBIvtOT5%QU-V3qcW8!6DE
zmMf$rpA(YaZuF>mCd{12h6$6=G7Cr`1wUoHCvt1mb>fLpQ}Iq|B|RPabOr1E%j2jC
zMKsFRS``!ddVV|swpnYn&=6lX8?~6WSSS=F^aS3T>2riKmQ33%rlJ7FkdWXjTEg3%
zXAZ`uK5s^IwGpP^`=Zs{9cpb~WkR+mO_n<Gjep`D6ds!hw;n^lfs&r^o?J7Lyl!Wb
zNQ4;u^|>*8zi|?BoqkVi;WNv5c_0t7N8pIN%VXGqN!isfb^nh^Os`A#M%5??rzIv6
zuQFU0LFRd}i%T}Qsy3$IByT4@5(XVh1da$lEP3RTSH0NfYV2L;888&y0>@-{Oz#gc
zL?ZHmYr`t#j`F$HD^LAC@Ol=jWLI*fmTY_g2NjW*7}KT@`m+j^U2c#C2y<_J34bV>
zkDKxGwxWZW_|*7{Pu@HUtN09*_>W;3CIS`7OIw_FCw7>0b$Rf*=-7RDAQEhxACV>_
zY{OgB8=V~=L2*jL%HSE7#Ne<Z<NAm##|Pvf&?)y#<s%`#^Cv<Bu1Cp5z(AUOzrgE_
z!As;5lzPZOV$8;nEvIyWv8G{)f|dp!9-%7h&hr|z`?_(})&&_3>SP6GPto^gg=z6{
z4jR?L#rN22R%kRnT*@_5X$mp=8hUj%Lg4Q56aFe?k4+Qu;5QN9mCnEY5Bt@dRUf%*
z%-(muL_*%3n~I_!zFwU3geaco@3DfbU)4a%1^cQ}YEn#D5w_(&=|7D$xnGR6p7_`1
zd5lsLI9+Pl_}7rY#iA2&Vcx$+?auzInG>YUL-%*AC*u;_D-!(k(MQ1=(3MWuS2f&F
zLvp!=EGZ*g%j`ea_+3!?e4&ol<gO5YoUXe5;ip!ehi<Qwrs)ls40XoyqeUwAnCKmP
zYySr>VpxsUnIM*Srb-XU_iJ$(oBlG%vpj(!pl`WHo=bH9Nh5`ea=WyiXj+9_UC1+)
z-z>Zch~DV!JDGxeH*eCZx)EH9WrwpYR--BweI-8&Y%U#O$m@;P!fuiZWO<J2n(uoC
zz7KY0yTkXSdu^0NrMPhZ@n7=yKhO^~g6%a<SRqT2WEm?{L{hcE%*UDjlTWrJ`rp6s
z6Ak?BboG5d+S)&7%9QtG>keaeP<?pAZo>rSwmVtm*=@zD=bi=nQNYBpUiZZ2tFhsJ
z%Co2jrzjCD?PSB223;`8e?5uGFu2&OwC?4=9J<H{D?I0j{SC~|*v5~$w{DTlJ_RWo
zEVJeLRb5b@4@9?W_$5|N2@F7EGy<x<rv;F+&XFT>6K4ULPV^TRI|rDCk&W(iRzy7n
zo8-{>+pJF<kdrIII?<~8O3HOnoj#A+JIZNo_Y8K@UBLNytJARs0F~1m3B2$@A0!=P
zH0qvq2D)~5*aTH8xV_<SFMAdzcQZ7_7_6=VbV?B8{p(%eKnAwF6Z9{<5Juko?y&GM
z3Ht85E}Yld&wIuu<?8sv-4X?l(=jUvwilp3*;BH=NhTwU^gBDxnY-wV{+8E$SQk(a
zLDqgqYv?+(2XtNpnky#Jg^Gog4PK@<R%@SyG^4}UX$)ON4@SskPX^k%bSnnQo0auD
z=@MS8%okpa&`Mb_i1aw_j#yxf1P~+YaXH<`XGQwKX_U_6oB4m`2ttj?$(j0+!-_Fi
zp9pq9QUV!*0w6VRf1Vsh@owLthDuli<?DY9ZG1aOO;4}xm%Dy{th}cT>^>1~LmRF6
zFp8Uq*?4JM8lD!{3BsoiGo|Dk4?O2|)(+zK-V0?MkFO+Jk|f`uu)gfLM!k@Bz=zUL
z1p6YljT~EaJ|Cab?0jqne#!lC(Q~Hy8n{NS{2{RhlJI&k@vbU_-|0ia{mN*ZMQr;}
zS12<Y4g~LtW<)E7a4SyFu^=mX1J;BryD!HLhH+n1jE1*ghfo$!L201Nn=Baf&(uem
zuz8AEvct}jk-_RjwhxY<#9yC`LfBaId1c*f2pz~{;C%Sd5(+C=XAlvgAS-3T{s2|l
zYqPlb$|!i{0*@NBG7R_b?#Es8>IWz|#l?GfRyLVa+>j3oE`@-2awbKmbz?=arD7o_
zswyI(S0oEkEk$GvR}8v(HSYwJ?*Nz0FAG_#HU#pPxQN64*l<LQ-Yv;T&lo8oq--Xl
zxt6H=8<7WB2m54NgPPWZUu%H8Zb3oFFsXnm*>3?IN5jXDQY<_&QGM@=^wTFg0dp6#
zFs{z)Q2Ez6;x+=&imzLIo$7h+5<t!J1!FnQsBubBP83<PnviG^Dox|Q;g*s%Zv6I2
zVs)Co;aT+&D|SrmcL&Tn%^)Lu`FGGCo%8jqgUj}{4v6)xw|k;pbkMW2fqAzPB4<VB
ziog<+6_J#Ux(u#UMwD+gBbCzrM&qFWRC|>o5*2E4ijv;Fe6ri0wDbd)qc}c&*8Zhj
z5w_1nKeJz7lG8b$RHq>aKRj-UdMeI!vEK3<D7G^AopCHv57)8&L-J9q8zBMim`-f5
zkDy&4C9r5bzOBVpK%X=G#@%?RkEndVsY%hJ@#m!*y#(iwDPiY{jYxTF#MeBP{*%wj
z`WjXDsuFyZG}Y9eQw1%Ks2E2F+B1AldiPl$^KoVLGcJjxVs=-pi4zyENZBG{@cu$Y
z$&8v~wtCn1l0uBiZW^zbgwpWI?Ku`^W`nk!JN@5CDWA6AY2x|FoiwglPNeZ_wU;$@
ziYdc`9eoewsY1xyVox@s+(lCMc?qw0Yt27Xd;U2$_b%lD<LJC(VO98lg#{Oo8HFXa
z$yS}XO*HmW@U8O<_q400e5=gt3A8tn%cFYqc~M5HJQnxBB%NB)|Ca2+*;9qhlgYHi
zEo5)rS|S|9^R|4tJbZm|Mqo;kH-$Zbzv-zSn4kR%cR*A~Vjnp-`hYfdrjqT7dH&DV
zk2y<zXUge}e*K){QkO-hJZUYK>-;qBQ#&>jsb-TOCK<RK>Aj_bhjsU;g?ZX|v)06{
z&qWqIS*1S^YH+)=5S@;O^nXSrx^XC*YBIa6M)Huaj;d1~Fb>aAGE2DQCRUZM8Gnv&
zPQi7U#k#(@yGn}77j-$5FGGhu8m6e?#;)8*j3I0b@z(>N&epk&n7)f<SuF7HLf`gj
z@18pBYB?7*>-I-Up4^(PsC+$EnuJ5AK~2w&pVLYkl^`IHTp9CDjH@Kou{aM(K(*%O
z^=nc`@F1^-v7t?lECAeM6p<xu<O?3$V{y4oF67mqSlwKCIl--rdg+o<0Dp<gOoG8{
z&YYpSzsi?`$w3p$T|AS5&as-X_W@GNA%hG61po-^I%}8a>u{#w60jziwZNpmge$QB
zzo<gCT)ZTz-Z%&Jre#idI=S<1`_NJ{J1w_T5Nub7d8L7FbvYg(2b)~oH*4jxo4K(c
zTyl|B#x1e@^<mpR0FJPNt#;Q3wyEbi?yriBN`CcsST0U$SajD3l`YrJEBS`}wsjnf
zVf?*No;Nw@{3mz&K)@Y_JKg>(rUM|};OFGiPc=UIf|L4~UR%Y>@0684cQM>AkBvPo
zlT2(J8+!0B2cpLh)?4DhCc{1)icO=r4QiF53;oRn6fQrK_R9Y_jg<Yn0W=HD9u!s9
zzW7%}*#qixx&8_uF0_VYi6l_3p^=?ES}590&{c1y@E$b)M3392+Ye%!=x}j4Tx_C9
zFgBop6BiKt&q^I2=v?@J9&KyHaWnBH=rQ0w6wOM1xMT{r1zi_5Bp3l$t>)IGu|1zr
zWw)Zd9qQj=qOg>wpf9Hk_BKubSbLvfN$D80Gkz%d!3yv8p`6mv*3<GULNzsl+YaoL
zSHmT2{<;KY)PCDBx(-(SAcEU-5s!B?*ywv-5U{$sJ1TU4DUEsjn4KK}ASNatxP2S%
kZP@?6{C|WRfZJF$>vI~x)~JGsTe#m-HC<4ZidFdk0{T#0MgRZ+

literal 60664
zcmcG#bx>T*x;IJ!Aq2PJ5*&iNLjnYMcbDMqnh@L>T!XtzU~miW1P=_Zfx%^vLGI+;
z-`@4rxpmJUx6bLRwN~}&)vNpIeyo4}bd;*H3<fF*DgpumhMcUFIs(Egas-4Irzptq
zH%kXT5cmVhT|!P11)c&>EF<B0VvkR{9vaTp9^PhdRtPpu&W={B?iOxVR!;7pojpzw
zyTuR?-XX|Iebn^HIa&>lB(>=}y=%6xX>-E@EV#Wkc<yID`B_R-TA)kT_Ktpf4Y{uV
zyn4{`12LC3Gwqn&nVxz-q2bksLL~a(dgAvk5+1+Fs#o#Me;Nw4;o&xZu}%$b814_A
zo9R;>3J?9$Q|J`_F^hX#bI7$LSa!AMsep1dZPo2&{}nP=>%FK}iC@=s0K_*>=xY73
z?s;8Q>OV<(2iVCL68Z0R#4axs{qM}MEYkra^}iEMNpaD?OCn=alH>nfK+UE8zgcN6
zX=(o{zmqNWKaC&J$UH%vpS|kF-u<T!u;C<&q4;A@;{Q-)Nh!$1$q8Jv!p8YODJgJg
zxIi)j+J^q0YCjVG9MAtJ_rFWXe=}s{#Mj8DtL@Fu{r1x?((AoXQad3&N5CNgk3YYb
z^H)_BadDE=)C}QwSI+2+D~?#61E141(UY~#F^dGz!JF>qKze$5=~iDH9KjD=k5B{s
z8UpXrwcWGLK4Hw#XgO+XF8OE$_?_*9pI(%OhTJ$1UR_&T8(#|ER2R9R+qdq!>~1qF
zt1$nYljGaV|5p_(+JoE9(?I8x?6){ch@%{_FsBtJ`l!g^az-}zy`?2T<EkFst=m=a
zb=UpLTs0?kDJjerVegY8yEWzkS{xi-Z2WX7DNDm6zP~*P_P-W5t&WTo@jGFtW&Gzy
zO#l3d=%$71;{W0_GKc?7=K62u<iGNMtZrz#yBM>0^Ig^3ZT9CU?BKf_<Y1uU)BPpO
z`uO~<Q(erzgvDRh5g8{bbYs|<@B=g^@>J~lc2B%}%zG?5y{2dJxwo_KIm}rc_PXnF
z_qk{Dxu)l4l1`wJ@Y7qIB~WC&eyKWI6gohYFVyPDGZW6u6mRXgBO}RZ6HHZxNaAhH
z=`X)wUHMD6HAUIBB1u-0TPi7XM?IUOU4NKEV^W;$uaItEkqC8Om&bi9J9eUI0zL%0
z-iT*PIcr@bX-H8}VT|f!d+^B==oacSsyf2k82kuu8|>$qP4N(sk}75Z!9@s@<k}+z
zHn#&_qFsOJ>pnVjXI}BY>9(P}@8(=nK0GKHF8WTa%9d8ai;g>juKfPzm%|;xoe?b>
z4)W+%Si)V4uk2KrQcx`9eh@=UbJ1{cs1H-AOYCwPod8}lx^Rs%D>+xK#<I}k<#P18
zds|JlP}R}g`bV+X+vhoJ?4(Cl)G>So-b31YZcJMZ@BK4bs7H$H#cEDNOm>9l%@ftc
zXxSkN4c8NOuUn=*&C9I0suIM-u{vY4C<I|h{KsCL@5&?Ws*DQ)rezXRNF-YF^Fm7R
z?B*EL!Jb!N)Yvr`@flMfSi2As5OvsB729-^GQQBrBWH~FB_!7<k%x2gZ&&lZ84noS
z7c1TN)1N_8s8i>i!JR|hu*C$JNUFp6YB2P+iT8dhDl%4c&USL}Y7WlsmY@HbDc$W{
z4+muY6`m$r^DO$2Sec52BM{d|rU*b2r!WM3!1Cl}<XRX~xS!a#49V0+WzeDibMC`~
zT6Md`vtTEfL)J<0UV4J$6MuuYweYq&dK0^Q=i#<>G6X!)g70@^Ql#DQu5J&>8bNoW
zGTmOz^<{KSa1)HM$j&HLs<l@i^`nab{8+dF*ZumvYq5E{=e|O2Etd8%?HTK293mJp
z?8D75Yg^s&qF<Jln|7$Md0kTVMlO@SLZUsdQZV;^)n2DojV{zS%QE^c>XNc(E|YV4
zeni!&u%{1~ifY}K_xv5{wsMF~W=5%GO;vz(<%ht&z4to}2N>s{FTHEiRx9{W<S8<D
z><kqFtGE^jB$|N{b9N7kLOYoHr_?yaSm(5vmS2fX`&nmfFHIG>f%^O2TZ#=UwL`}%
zgL;2R=U+NmgN!TzUKg5&2K<C!R&Lo~qJiuCU{4rR_v7X~Q3kp73=9*_rk2k!fYINy
z=smKgHtJ+4r8Dm$o^FT4*GT6FPgYv{D4)(=2i^8ju00PHh8Vt|%}Wt818`aJKzQxU
z7?1|ZN42o<Lg=;lKQ+yK`=%shiyLz|H>%Y;{7$c2U3Rd^f#0kQi1!QSy=ET@E@nw|
z#H&WqU|V^mP$Ha(Z%Q+<IP+C=y(s3y@*qQ-RcMSQ*ZicoIYATo(C2VXd(U@YG%7c0
zYSEE`vJ|P1`e-wML~4|2*QyQmOlmP&F9a9HB};PY*w<w@amLYq1S!^Fo-0PlJ9)Cz
z&2!Ze^bN*m(~2f|bl3~`*C+G2W+BaAoB4WCea|3+dew|Hi$6Kv?u`XOM22pjK%+RL
z57*)k-@3#bpKm!;9_VX)^`$Ih)}Nnl9yVT!Z=4TNu21hv695Vm<y)my&zTmeac$FM
ziD|4$WDPhA<&npZ8@pnWnjCSP$=sH_Rz(5=yY(Z6B4>-IxlefBjK2LU{b8DYmcxOJ
zUyj-dpbR2iRZC>ZWm0E|&s9$T{!z6S7neq>e8by(OMhvb^K(5N-|tpCox3c}RoW$a
zr0}R*MQliatJlmltqv<-nmjG?$laeLU5K*+Cv7BMqMpl#$(@z{#kVkYTk((#rT132
z_DCsJFL3x;?OZ$aFwu%<#i(45G?S&OKk8QC@=&F*sZW53uAv-IKaeo;Am^-Yc(%Oy
zU!D8fwwd$5j2KKf^6gc+I->c(%hZ76`3wRA@|nBk!BkSK=y`fhVU^Yl<0(cP1<Pc?
z%Aic?87fREt$cOFttGCvi$~ReJW13)Jwz*T&gc5XL<-YYuGyK_$qfKq?X99eVs<kp
zp_u;meQ#v-S=%t#Da^b!Qo||z3rB(h3RPZ#=7?EMP_6-0wp+!Xq5O#Ye)zj$T~v-O
zribV$edS;7X8>DNy8KEVOUWe8`pdV`2eoM?nge6=2x!fQ)a`AM2@>Pwf{xjUaJAg_
zX7Ag~pdg*ycE*WK#PdjfDGH`=x%U?4e9`#!7+VJ{@tqTXZz9x}4C-dhBCa1R={d`!
zN^Dl5%u2X*X_wDgodB+6xc2#2!!|K<z!9xzOKrjytDIt)fy*~-6j`9|UTPE8dIG+$
zA|r}P`W5mt0NbJ3cL_RCO-DBPx5eDqetOZ7!=ckra!6ER>L^h>@v~Y*i-CsX2(u-I
zlRx~%PPL8Hmr(Bv<2-&kiQ_ZlqeLaKX${wD9~yrUOD)iy)NmUUh@vHaeW(^?Ub7~Q
z3@wDK*x@gHrF~VBqr1qao4$}YG6=IHKj<b0$fG~X)(CIPN?B$cpVVBt)bN|kWdg>2
zb1>+{TGq<`WZ!V|?Nd$8S$x#~MdY>olA7dt0&!}~vg0b;sS%hGVgJ(1_qYV@BTx!a
zc8{M|d7J4%5DkT~Hm->KeDuXf5HtMO_ya&(1kc`yH<C0_*=xV&X)E7Wya2{F=eZz7
zE?F+>7Yk4CtTFCu+Rnqo=kb#|7ttAEf+FlH1?r25%SwtvOS)wZv-d&s%3G7#YBe7!
z-nb4~NM2K@Y?oqu)~@(QDh_aQcR(T4Mg=2~{M3IykA9o=fotFCH({UKu#+DG1NFtm
zr#a?V7kM(1?6VepMTiWHY2_A)qcsd<FU;lA70C+qqr6ZeBeQT!u`MJ^;vs}g_#IUK
zT$q2yjSO8)w>0tc%<a`^fxdjzU_+V3+-HUvT)u^0KWjhMBo47_p)}EME~xmh93=7>
zR^H(sWJwC;_BT0>XMExUO<2d(Bur~R+w*>DHCsx1j<U$)M1jnaBu4S0d_}2m3Jmib
zmrs88-M9+R3eO%~r4w)whCA<)EnG<zG<B^{j=*gNH93FrEAGp1(62}6VfiD}Zj7d+
zpfT{MwrkyXWvSZun1=yEcX1a7w&PpgMHR-FSTnJ0e0DyDk$k&`b`>`*5#l68)IyHu
zdF)cg=u6!{?0Ftle8lE?5o#@{(lyh`LVeVs1zJO5wl=kz?T5=+CaoF0q>z;bn80<6
zzV&s9PWDGB3L_)ux>9)K!s!bg@v)9Gz@^C|V%P97K|V%7IX7NeT5^%8!Pp^=LTvGD
zi$2pM-DnAr6lZ>!E?aUP!3&ORp4#-jr4=PBq~*@{*||*y4VPPKM8IP&wuPmA>ri^^
z*S!*1jg((Ask0T#=(hS}BlXvQQo7;p&ogA6JCZcC<8A+<{pGFxhaK+Gp$l%0T1vP#
zL=KBJT;2!a7fQo6H5>E`f7|Dh-=IW)ZbIZf4_z%J#38m&%2Eo6)URj(Vl-NV#7-5_
zw0;c3KFQPN>sLHJM-?lu<&&$a$o%7Y{Ww<?BFR;LQsY@U>+E4LL8Q?tJ_3{GxzMAR
zJFdx&_l~5yT>L_}*JP$c4dc2~{7_{0lhoCwr+g`B>-Xf%K;%$}G{c6oQ->!>e!uzg
z;Ac&`(}-ij{gh6OKH5TZo(FBbd>T?;b6SCbuhSh-m>W{bLvx95i7j%QbqL3hFt$xQ
zJN*{Dbk`Gx53i^y)a$L*HetWtA5TaZ#n4bw-_YdI0;)AC7osp{z*Vql&qKRx3Du*l
ztP1|V(L`qJ;pt+Ex$>0gTPsQituoz-=Cb7$O1M`v{N-1Wzh{wVQT&?ms-wuh2hWzS
z>-Vl@QBb$FDDBJforUbUz3?d+q>`6G1wZ&U1IHWX+QoLiV$3n6^C@|NBn@KPg*w>2
zkVimW>=9AQkqj1{khKm!tQ;OG(0oqkO|rCL^BDf-Ak(Xi0O_kfHHjU{*+;IvBwL3q
z`aiS>Kl*IojY!7Vl%-K`vsov(y6;?4ENM!_wSW0b>Y;%nUL*>i%8F00!2l1&cV)-F
z%bX?NP^tGZ=~DoAZsCk%TXBN~;n00NG$z6T)ZO~o(#WKGb<0aSc_zdxt7w{v(|Ne#
z8v2uC*3#YgqV=drgPB}&JJX||Hdh%z>p?xRFS%UX+Wmoh>$pAkyP;9`8ATS-9a*Z<
zIbY>Hen3Kim4!*1HG?p5d!4HVhI~+K75cC0y>m!NrZMELr6BQ^l%|^)>2kru`_=%2
z41ubK=ONr&e&ck$tKSZq?mI#j^x<-1Bu$dI<%DS2enATr+K|4J4djH09f1H39m>@|
zf1dldx&1KTQNyO<4`Jlo%Oj)K7LsJ2r;O0!%;S4YnFL7Y$>I%`=d(*|6r+ih<b$j%
zoQJIAE)q2YBO`|+JxUeroQ}-C>=sAisGai-kY~*WL^yE%`70#Akkeg8=M1c1&)e%k
z<6C=oG=A^3b)$clLG~gMI*3sY6lKW;87hD`4aLVq6W=8&G{IbrWA#QkKH=sQG?^>_
zo&w^zg>`d6USUZvy2Dgo?OsJ2pRI75)nMcy@B4Y|`jJw+8=bRCnHjdEMm(a45cwKR
zS{JuTzZ?D8zNv*_{AkM~l97~8IYJ<}I3ZJivB|?xApVkOyhF)Xi;{Z4o6mFQHKLt{
zx!ev2G;(Y<fbmpUbqq3wPhXKiZf0W!iV=L7JLe{k2`i8J&-Mv#moFOvW`k)&pj9F=
z^xk^NIKDnvFLuo{^=*7WMQib)$HiUiKmj?tO0%fy*?vBa7USraB-+z5Ih(Ot;uv|Z
zu(uJ`ozf)>2w?E)q8`PaW~##g-L9pJIswo+&aEKUEuQ+~3~mqxCeQ4$8v$avo#c3O
zit=-nY;e!d%x1(2*VGq3Cqxk_J6LI6=BQXCr(2_HAChU5d)(JMMpx0I<u-z!ni5AG
z;ip<aB4uhd;-xf=)69Z?h-94RK=&ne0zmF1{~oSWb`T<axduR+^YMPdUa__+GClQY
z@^l@VU;UOC_IDYPk!{x*8cM!cZ>Gky$l(>K73tSZ%NCEMj_$CABp%wCvu>(Z6S!y)
zOng_Y&@DD}G^cOCulzJ~bA2{Wt;4ppjPtQXu|%7}y7Wxmszd40PR}VbI-f4{vnp#k
zV=5xGaGXxHx(Dv+>#xNo1slI<V}(F=srr^lBk7E-Z{AUpxea@WXcTV=|DI#qbKkkJ
z$|{wiYKF;mQ?#q@_)iA6L#DP<GF!egzy-Gsc04};1y_+Giqjs!$G<`#Gaw$?P>!1F
z(m7<ol3Auc3IJ};RawcGaHaa?q!<+Id;DH)9+bVeie91xe*cz#Is6vV-|*_ej2;sY
zhq$D+Sw|+0WEW)C`&w%M1;Cc4LTePs-d&wo*Elo!G?6EJZj>&%1l5csYFme~9dh#s
z)cj&MLgOf@%B04UR=%+PJ6@$VWtE7TCE=?DPRz^7R1!oPXXn2b`^Xt?s^XWO>$Ej0
zj(<@;-wyc~E&t9H_J%J=o_er?Z~N37)hXU!bmc0YPl!Ks3*U|-MLeZ*;W?KL3S6>M
zL#TVr^S1PvX{2YaWktWip8tzGj}MTNf&!((I!ug6Usz>e=3TlN(-*Zg8vIqZLG#~p
zE*Hywa67CR-WPNzTK{#6)mB+)u=j_-ys^)ZT9_EzCS%k40uRCAL~Xv<zTZ67jLG>!
zGS-Y)sj2;$;YwZ+8xg&;^B$+*FEKjD%{mO|J-@(J?G<H3vD$MRCpMqD9$Ut}`6W+S
zn?v3RWNrMapp6LLa@nb#uxMk(Pok=jiHeMj#TzKWQH7gsOWMKCvhCkpveFc4(m8#E
zBA6z>cVkfhLF+7oHQ-<Dd{9;K{5MpGL(D`+{^{RXo@H^02mZf{l9JSC)c#!}B`q%}
z^Y4=XpOq?T{Eb4)RyzID;b@i1{v`QdSgq6l2HGYIn}Oqn0s*%i3F1!zf3FBE%C5TO
zgAP&MA~6$cF0y&Y_A&u({b)q$m#{iE%~g8pAHlJKGp=wTt@~k@-QOq{adWNHKLB>z
z{P&Vl>&H_O`Ptv!U)xl23Ehah2#6YX(QIC&9LStjCxas&x`dTZcsNVqgML2O`Ogpg
zfrL_&Z*NXkx7ma5(1M>X^SvMRa+@PggC^4>(PccrpP43O)3!o}f4XBIO3XV_QztY5
zm4s@mtKo#?cCrm>H?QsAT{{1$hhVU9`0x3ynFL^iDO`O+;I!8N_`!9xFbM4+#}*ca
zQ<LLb1$GMbNV=Sz6@e}H#Sygwd2Xnuj2|lZ-Tu`-K_X0jqw+Q-shw$_G`XR6@6!`l
znO8z`_tSM9d;q;S{QLvg3L$l_d%J>Z&}yV@v)`9=)O|~kHpiF+k<+gB{_)o)XH(sI
zB%9$h1bbrUL0IpnWvC}vCS1?QKh?@$-T51!bp)S_%+Ag#io--2+?$buq+CB(29wsc
zG!B>Ph?mGbhf!e=25UA)!Lh?Zu7leN{`DhIoZ`PT7B0j9Z$DN;Z_U+4psB3nw|`$A
zI}Y*WZzGkOPigcjT-;W%K7C^=59K{&V>D|=*c4F$?hfHP>%OTPMPf&RpA7Rmhizoo
zFYn?=S8mU28Xxp(F+Z;|W5UJR!ZWbhiQC&V9$W)k8g@CC@yw1KF0x?(#IFazj(a@Q
zYGH;V;uBX_Jp1fjQxawSKWA3PL||JigeD?W4YRX3-9Db>RyB7qIlkwIO)3Xzdv#}9
z4YP_W`TOSQ-VYU3Ho<jnJ=FPKchpnL-eTUKU#=%{m{+=>BvamLoqUVeH8r31jQzV-
zi#8wZ1Lo!nsPu0m7xRMC4i0Q5J09pSSHp}RQus~8W}j9rjq=;C#iqnz)PyEteOH;x
z#|7XR_i?dxw#!SxI-r15U7XqE$ahcu{I2l^!hO9?2E8o*OdED%XUg;i9f+u4UcS|F
zqJzfM=gmiuMbO?ZGeqSR;o9z2>h<w@R`zjDvyHE-SG<AIy8m9`RBFue_Vv-&lWKS9
zf)4!Ed0?0RW8vp73D)_}`4AfuOX%#pN^?YQ_ra7?aBYN$O}<HB-a+lQ*O>TJ=3-aj
zx-IG6Uoi-8%eyz4vSGVe9@rOrcJN<X;TTI3+uG$Oyz_9UaXO$e4g&Tp*7zD{icMvs
z9dC}!PMJ6?s^prDcW!^G^RxZJKlPl_yT}}HH`-vB1JSG&J=_brW|RupHQ5=z;+eHE
z-dnx13Ma<)es;Bnf1E$mJ%4@5JyrMUe?H4E%(;n9_*f_8dHAxyX42(+D@IX8d|i1D
zRO@baZJ5_R468~Fga|ns1$YOdrkq%~KT$tjFD&0cYhlit;=$odb$s(1F*?3a<45;R
zgzKjd{$V2xY<2BrnMeXp=u>1SdwbZOYHwdlLF;}ldiVFvLwU$%XKj4$Mz57~30)tz
zc=k>F<I<<{ZP^W~uwbkZHSblwe8Q=zi}uuYPXDI?(0vnms5V#za$Iu^S)@3(S%k4s
zQ*T?sIS{dZqFHRWW+^+z4~FKna*M(48n@JI$7~Unx+|A+Bet3E{E)_?lNso3w((;`
zL(jN7AZ;5QxR|{tcn)=Lb=^kH87TqnsC2tE?$x>MLeVJ$Tti8puU;Akx_8=0G>)I@
z@84b%^4}hV8Cnhq7f48$nN1qFF73No&IKuRjP_QSZoqHq7d)-mjrwi}B34??U!CR{
z?@TPNozl(_wB9ejO`8hri6iB|Epw0QfGx<__r>aH>yrf@Aa>n8aA~l(c|uW}m4kcs
z`MWk22~B+?7dGnq*6uS!0>9uj?+fu$um<rz^J);5a_DZ&E-8%X`{YhJ2mBN_`mB~=
zr1Id%^31xH`<U_O#vM+6j!ACEWVW->dU8k%!P-vp`d0626PNA52*b~J53AW#QR{E@
z`3VKG9x?d4ZbJz57h7gpe;(WjXLRyRMJ)=i`#*3834)*2!n|#mF3^J9w~<Xc_y>9o
zbTUj7WP>Ks$GE{ckj<&3%uII?P`%$uT8nSPKonu=pT#9<Nfjw+o3m@44L>JVS85nl
z{=+54(}5vccY6>7bo3kj1fr*`;&fkWA-+v1K7KK`gHE|}`;A{)Mu%O+1)9s=a=tc;
zxb;f(u!L#tc8A|GKWifs>nZbwjV!dw)BV(s=l+nDZ9?hn(79`4(AiK~s?RgH^;v*>
zAWXw0khjkd!tEsHo7KSZC5+iHz&jI-GU#XARPez0oyo<X-L{||&|^zWtoz)==fJ05
z$9dB2aYs17bsM?cli~I@{fW<=m7ViunQkwkd(zo?W#e*D#U&8RE2b}cAPRW`7`8kx
z=S*~JCQNZ$?!0u*W!G<eq6-$feyO3z<$3Z_#XIPAO_<<bdf76}!(>Qaioz<i_ViDc
z9@_-@{`Hiz%l74%Vvx{SYHf7&fZ*EGj=NL9lhBY@d!sQW)NrBbMCcAp>|w_-i07OJ
zUMjf)_~4P-%w}Y9LD;=J7`L9B+p=Kmd|heM93$So?u~;(%x;nC(cyh+{QQ<)#r>}D
z#>aLPA^vild&t)F`XFE6oKl$o&yYa6=)|bb;v$KGXu6WJtDl{HVhn+p#pbPor3xit
z{P~rNwU3>7i`y^#9moKR@>A@M*t3kW{)8p5$~oW&eF#Iq>yV5=*Bp2Wj4GNs>uud8
zQslZ;PtzDPadUrDn7!EIdqroQD~L&?*tx@XSvGZhM9||p`E<|U;a>3giXmTcVtN-`
z9j}@p;1`Wnme35)RN&7v5eduAHOCFz=4N-Xb1(8DMVuPpfGFl|t!Ol78brR+H$8#A
zVav(-R>I!e#4*7BLxnr)=SaTb!)M>18it|p3q(ArY8JL1{j@43PZ;?f?tTg{PoVSc
zn_)VwE<XaD*bIZdFm!i}9?v`Gj9$#l(GqFo1l=>%)CtQ}EuL=d*|6mJM5X8DA<_HZ
z&o}#CAJH=RyxA9hI=F_`J6RmEFwm#BfbO~f_||&6OvX=fxHr15=)=36w-xrH?|p>e
zUw`4};_P>bZ}e=gJ#+_+ofA~>m&b`T%F2ie{hXX_4qr{?IyjdFcYJq7Up7@;T`8jI
zd^}g8XSWpeUI`gtn#>da+0U1~?tt%Veb~#S-IZg5qnq;_9W`qs_=d$WJEEb^ZL{SC
zK;^PGtmxrn8*D#hvDZ7BYvE{0gv_ka+`9VJg1dXKxw~~dEt5NaFSA`V40bq6hDe`3
zxuv|i*Dzmu6BvJfUY5VNllJ~WVBea)<!*`9G>U!SAjhu&VnA5y66BY~U5C$^GnPZD
zwnC6311AWa;dZwXI(E!AwZom0{j~%X9rP8CyKH$DM=5XcPEIHAx6KmNb5VPG!roB)
z{^e4p7x-XBf%|OU(+R_%du_ifCUV$E@W<k--??z^IDMFpk^grrfSW7S4@Tbw8ket&
z<UPk%d8!!tRU0%Wq(8=*5l}fK@}+Z(Q}B}Sl=TjuO?2pJ^o@1SSjSU?BdXxXQwsY*
zS{VkKH2q)t%ZBlC@#0J71@6xrOIiChG43oZwLPO;V>!n_Nd+l@OlCm2yLye#AoqUW
z*5OdIE$7fy6x#8({Tb?-)a-FF{#DS4M$T_&e@=hkDMr9Es(60aM1KXLi-~vUQoT6N
zSWRTnQ2XTajvReaHcRuypHfz3MFd2lt;U4s>1(7A&Vg3<s$i3?!=vo+bz@}h+qP?3
zh9>ZEsk`Wv;I;rax5~x&P_v#8jMyZ<rDwRz4KE4Cb#?8a$Ym?V;;7SoZP0`mx;23O
zXs&91+veLz5%(EH9WT}((*RL6+Rz-^-`hg3Vc)!hFbG@O0Y#qOOY1yq{NJ0mcjo&&
zp88&|di!2JyiH3G>qARl-yl?R)~~zftr^)i0?wIU-0s{XRy#e$yQXjNTW9zjb33u-
zng;ozmI)^+8tnl{)1#awIAPv(n<|flD{5VmvQkh&L?=QvF8{zJf?xN3VR)jwGdrB2
zf4spe%d^gU>@@=f%+2e&L$jw|j(=E~(e=9F$aohQ-2at~z`PEQ2A#2`*Gd~co#82~
z^v=kzU(B-mSGQmA2K!x99Q*5C87y%6df*mX>DPmX<nrC56ciMVeL`=7pvWviqxN-%
zTcdOP5XsGO9FVRPaZbj!5eoozpi<2I8WAhOGtUSoVq}*&bcSqb{Vq|Z6uo8F{pr-t
za+*HDtT9NYG0>o@4Bib4(B${BgrPjaq3MKLPH)GgZ5tKPjnxGs05ElS?;Jdl28(B9
zKX3pJC%6PZQn9fTJfyb@_<z-S_Nj$D5Rr*m|I$Aavac~{%-H!;zZ%Y$DZ=-r=4AaR
zE*csKuhrSX5uKCR<qOKEds<|)@jPGmGh}bK$q)c{neW96@1A~4j;^RvAi8^(l%)V7
zq$$^MYMQHNcw-L9A(ybwekt$|DZ5u=!J6mg%!Dx|S4IxcGS*S}N!b!#)<33e>^6V$
z<CTYhIVCax50En))Dyw(m?vV9{bhCxxs1JgsCBH~<59`Dm1k^j|J1e3zhtB=!y!=4
zo;6Lnk-$JPFUxX6quLm*ruqy59+n&l%5o<AN(j&{`7?d2!vV-d4D4sUZ}PpJ*?;nN
zUbHj89eR_{!`^|a2E*3Jmy{3b?qm#G_XFI9$3Q20VAymKzeKlHC(#gn=It~%;39$B
zpzy=gy=T88F5Ku)S_pRB!y_vmbt2O~*HnMN$6*Z`Sb1>N*44A`u333%d2~zq{H5wi
z1WyI7c)nZJyz0{bE#wO1^h~P&FW#1OBVN?7J6~Meu_uV_>UMZV5wcH!_Peq~Mt6`T
zm5RH6JkTwQ8POIF^v=KJPndMMCn73i<M4#N4{ASKxi9Z|0NC7(;Mf09ta?>1G1oTm
zFtn%_?-u|DYUGG^eE@P-1U7PXi{ZB<eA%}g_7s4k@6+!y1^C7`Q~^@Sg(t?RvpWp_
zC~9|Jz14Yabu`(NfY9q0cSLsoa{8rAmiw*Nz5B2qZR)Hnp^n3w`6a>K+;fKbL`P#F
zRzC*#^juirFBv+mZNFaXv)rb)cwF=0u%@MJn_7jXevS%LsdH@r{ou{4Us9eV?ip#w
zvCi9?C>lrSqzEc^r=pf5_7TNs$<s-5zF5-9Z7Vtx<4>4!IsE<IN`WN+R9|(aweB;$
zhy)mv-~WOkT$SCPb34NH#N!RR{897CX>y(7{ZrigNkt=pfyDuP7V$tY$KPvFgv!8x
ziTzmv9Bd%R{^ipiAvHpM|HDyC$Aa%2cxPw&m{O4<d$Tv{)x#t(iU1X#K-mR)lt%oe
zS@+?P*~yWVMwyFy*1Wd9Cn~>s5=`m}E8_Qs*zGsh^GppjV<_hktpGIPYtUyBkHF?M
zgJXkfMsr)UczZPF>gsAx%I&Jn<?;S~jC+Uh;+BlKAg7DoRGYo|ON$Z^Us(T6MT6oh
z^t`V5w9EjF(sj4!)%{{!_SRJ3Q9B$RNe3zlQ3!H<N8FobOIKm#f^F~noR}x20#ts^
z+&}0kN(J~G=#}RChuKS~HJcpU*<R}|v>9*Aq)s*QmC{e0-;-(t_?`=vPUY;6eg!_w
z)v5?8Td&g#pX0DAt8fSIrL#;uM2|^cx#bA>eI2=5^l`dJuM6->(OD0wcvJ_B5U=^3
zz8rf>$jl3h@6HyVBt3mB%;m@x8QRrJaDPnY7V!>BQ(;hc^C%f2Ga}o!aW=7bJ1J8X
z_YWsTi&4a!uCm?`BzDV%Vngs0AO1KjqT$A0&ImiZA41u|&cctrUk32Xn!3hcnYx89
zt_Nj-)0dsQ{H;!iPIl1@!n;W|oX>8S<iz}T1xw3JcCwOoPuKrEU%dVEEbIfzon6Uu
z?4EFjLb*FGp|<Gpm%XHzgDcEAz9;*)CKS8<mNDR(7kWeFx!fUuW7^{=cXVz$*A_UB
z^%4EUV+{24dhff&udaxVGsP#X>be`XyRQwKZi#i+-nMjQS6g($IgK-~)g`)aU8pZc
zhj2-4b!EWk-g7NeZ!g`Z)ED}YJ?@-2XYNlE!>vIm!0VebYqJ<ydwvD!*zTFv$+Pgg
z7qs4ISlpXg`9mb`591ozXFp%L;+ZmP8<``mbDl-pCn5}b<SP>%+G||`=lJa}J~)^@
zcJzRngXCPzU_`EN*5O5XWo>)MqJv@0>!yc$B~ZcJ1DMpLu;i)=<3CEO_O#;2YVy<R
z#q56Gc53e;nfQyb=Ebt$j2$7JNk#5Qjr>2o!X4A|xq&dNz(Y2RXhLgk#)qo_m=!Nz
z-v`#&z+!Ue3dc>IpW@4ubH4{awh2BR1+9OQvg{zc-==&P__5@3`hN#YEPDNgzq%j6
z-N$x?8zrrTcLxtu510Nbr=K&gy#D;6$_u!Vqwuc|j=v9@%trTuJQDiaUyzHD{i-B~
z21JRx4|;~JUxrdXgbYyz2gu};Mr8EY-1t7ta5)ED3@(gZz*vP%@ol6PTtDpm^z+zO
zw<*6~Qn?*sbuK<^b`T*G@`yYQeuf<$Gg8l3{j;4v);`@AfprN-&W=1ei?^c~@`x%o
z3*qRQRLmv5c=pE8_=Z#bKR{3XVbg0BSL;T6_$s?ORG(1nydO_qAUaaSd=MJ%VQy~j
zzzupmvYjA4+24QW%=^pNAAz9uY&+k$z;pAWr@;Ro6bz2(Va0Eae})?gGW6Fq|A2ZI
zpGn3x=U3qYbGHza=gI<2tR*-w=(82Y;6=XTxkgb7gX3r04s{VgPmNVRp=j=+5`lLY
zXN+v3B9&k%se96!&3OxPywm=EB$;@!&1~ncO|WzK?#XI9jIaCz1UKNWw`XSYWP-hL
zXfP0CV#e41OxpLaF|7ojB>by0!$H+(T5#0sh|(h8<6Ee(^GK2MzLFG_X5MjIa$iD9
z%Ci8jQP@TK;5O=C>3;|*MR;i_9A>f(aU+vTI0Iq@s>>yq){Su<S`cZuj^hsuMm8}}
z3*)PKvT*J0852rbqVq78C~>8Ju0x}CbBUV}J^eY$SOUyhHYO}812V1mJ;Wiid2z|y
za&#$JQWAlSEgI5>fJ*SlwaJ}wvK}N^%?WcGd67gTXXIOD+*uyZ3EFtd`kUrU&j%0O
zn=hYYkUuUBO%$K=1rDt}tWjJ&MGu!teN1u~wOh=Ti;$?l;oXy5WZe9XIgi)^fdeFT
z)QkeON_ex4vh7xf{zk>3*gkUVcdyg$D;DK<8f>|qe2UX4K7+9%d*2V_NG|)jtOIw2
zDbK{BhSx}^iY+wz#?qp8E5DgxtXFUOzQxqf$LjN9@?qMdS$6|OLsXS_%EPG4mcE#$
zt>iIu<663j)n31AT0Oz|lPXDK7HIL6w=&6{x&M;4m*czXJjKlE@yC<X(3$VaW2V{k
zrJ21<9&}YjArcHpjwMDNv7bukTEjkTk60anzQvh<{XDWK_7=qDorZN$hON*NS@FWD
zw5GoQ*~2nUNbo_e+b|>bH^NTxT*X2<ij^tpYAcpwU60c7LY`7E6Pi~Zuhf9f=vHAF
zqZv?kNP`DxU(pd079<!THIv|m)2YXioxC6`G;bC29ST4&a8h?=nYlwX6D{VXPk#!v
zCza^T`00f@cj(z0@%v9uBCL@i3v?YXDi;v|f|xESv{ZO8q-!qp0X3@k8v4xBH20|_
zMp+#%v8k4uYIx|ym6Ey!xetD$+nR0`Z+$=)cEqcC4HkLv#^sn+d4bBxAVZs^u03YC
zp0HD+c+GP_`bz?U>=%UfN>0x<CpOM@9|dK2`QVzWVgi+zS+ZnFk3W;{)M}Z(rAd<N
zXj!?=>LUfiqFm6mLEUNGwHL`;9IX?d9D0u;fRpAht_G)6ZPc{HD8~bLj7LuBRh#hb
z+!%%JSU-<rPCyNy97210;Z$~^n9MpKAprH1H%^nN?{jphY;3kkszTO`rWm;`C2-fJ
z;!qbDAu=_!nxXAI&L`r3-#Yo!M9M_EOu5?KoHFL;>d))McUl*>UCcRwA13r6^w93>
zlso|PL<PNj6q7AD-3a3g)0frtj7lZ@kvge2)qblMuFhJV)@=Jt%|@KYE>B^e1=|Cc
zuY~nYc1XbJU=#n7tNiOzWc@)^OVf5=w*w@Eb4%m~V)b=(D``z~fF+*-y{$zSUna;8
z$1Ay!-P>eNlJ>ZHfeI%zcAl3Oq)cU%M6TNn)my0E60BNudKPL^J70jvPtn=7zh;+X
z#xib*&So`l*@a5>S(39u@LsA-&=_#JjJ+@$pi!%<3$9M4AuMHlmHWExRUMx9;==bm
zr#QJLgTM@bh8c}ceYzh;Gp-1LSPS(!Bm;^JthNL!1*fvwCfW89jJ{8>)k{pky9y!t
zrtL&7C9YliICB!_c8WJ&4U;X)h9rwpetKQ(<akv#aNQ{jf@kB3FYiE2dZSgf$2J=_
z=knKIAlHE$T{T1_5+79Aw)9>7#O+D3Z~Q?R_e~ILJ71d`qx3qSh10hbx?pVFOzMv{
zQdHT08oCijW$K!!I!~?mPG`fRp7|ETAzn*)pH)Y#D`+n?`x5oniVv-Y@4g7V;+OeM
zSb_W^%tNY0f5Y#^RD#QUDl=7Dt*LFtr@-)6T-g@MxfH*i-V$TMckW{iexE0rm%QMq
zfbU{5%bB-(79sx@d=Cow{u$4Q;@Gx6yyXvo&d%%umE<B`bz+A>@0p!ZCrfi(aZ$OP
zhyiu^F43GGtKA$*4H>9jnn`PDN@t;I$$5zb{Kwm(QxxFv^K_*gK~1(K>7DIh6HL2M
zI@SRwkFD*>w6Q15kNy#pVf~#3CW^gSRCJ6EBt@iB!?BnViArm|IPFFlV=`zc=u!vk
z_n=p*7bVabho^Ejc0dmd^La^Q_k->=m}T2nOR-y?C~bI<gf#h$6~Ds3xCR>HXeND^
z!S_jyxa@g19@`8GP`w1-i)#r2enoW@iLd5AAkCej76R&2yKaEuee;13pXeNW+!Q;W
zHx-&R>c#}j$l;lTKy9p+FJ?qiaf$VB&fy!PR+qdMn@%Sew#CC%&<S@H-xOl{1H~Vg
z_+r#7gl{G^VM4#90X#t<Y27hAcALe+fsb-9iIf8TZ*v!NSrFC|s$^(Yl~c9k{h?kr
zrY_$&UzU|fvpls46^guN-1z|=HB3R1Sv|()T>VW?&!}H<menZLw~`RuK^hAZ>;~Dg
zi8zb{>s&w4m$L=B%#Ll==CqwhrLakX_;kM>e_E~_Yti06evuS0LmXMxj?xELT?q*<
z6CAqaO7XG7t+*yc;un317EbfLGmu8?1ZlDZSc_9ma5&mWm#Sa&ucDf%_SzDR)Hrfe
zS4%YE<7&J0Gq=|6EDt(f>DS$ap0CA{UmdQCo!mH)_H20N>ex0z#>>5%`=&t{5$l^>
zyO1S5vL|C}3s~C}=Mk6<OcRG%@~ijKVe7-V*LiiKTgi(!lGL_1$WlK>sMP3BW5*m4
z<X^>W<#@ydP8ITI?xe#WXGcowHvX2BQZgn<IB=6hL!dWRxJM6Gk&}1r$mx94Af)+{
zs@V8!CnyjV;)adkIqhHjDRw@l%O1W*d@Y1w{<{@*UcwE0%C`lNarj>LG1t?AX(cx5
zBRaFAInSZJC_jvq)S490xf*7tel5~#iODcsbYxxW9<WusN~=~QkAgISS}e--2GN{P
znO<4-P|BO;<DgO!$2+GoPTNNRR~Q0N((aaLzNVT+?}^_Rb*z##U%5U~$7IJMx*jRE
zJ0S2>;v=Fhf}+e!h4iYW!<O}@7K7rluOF4Hj+8IBi#44RuYTxC?>9TvJ~er}pv$~3
zT#KE~&5oxt|5ZLqTZl8TkT68A-4#h#w?U^=t(hj#a;?pt2mRB<z-xpB2~w#VMwyQ}
z@N!Nx1jOz;JikLn<erZg?oYOaGuux&7zh$LBnO+<YKJ7g@SCp-O~U}jF*4$197`pd
zIaD%#k}hBREWt9(%fc>Ay->Us`<buED|T6$Wmm)FdkTo-n8(R`F;lBF6ujD_v8_Bf
zdZyy$w>lIN_Ff<tiui_0FhUpf>x60L9~P4H|5UA5x{uh#Y7b`9gUidOnfTf2I#5de
z54|IS#CqWN1Vvx4f6e0Q&s)Z;NEqTWawpi6*PJ-r!`!9)<YyxW45HJu=GeCh*Jq7&
zFtWa`?&;2%>e*PjHla46eq11Y!)ECnm$?Il%j*v-1*)>sXWY7_O7uFb^n|~Hh?;^*
zK$PD^Q|P}B2a>?umxfr#{7A}jCx!ys&Z-%GMqE<l$GKQ!lPjQ4LY_0dF=qntj%+r)
z+>i}8$wAoa>dvOy3ULt<Y#}NO*U2Q9L6anGM8t2*Cy>=_jH9GESAB`&<VLZY^G}EW
zy!TtTSU>gWcP!E=>9n6t3wB(4SQu2g=@ptN54X?E-QHAnl;$a<BIO6Cl&LwZk5oHN
z4WboJI{T*&opllC4zAok^YkJ2;~wwWR4=(_co&%^j=!xyqI%0NEeLT6Bo3RN2T#jx
zR-_ljW`3K^n+0xVr!=sEsFnkOEz@025wgq9;H8|+Wa!PnA4>1=7z_vm1d-R^@4e_5
z*aAX7hk>4L)tv_;Ns)mWAKk$Yf>LqFK*c<BURoAGsj%ZcP<)cU{YHf=!?v~k1R2IW
zn)#zx*K}+oL)!_+oE|tSo8NWQAxS5Dk^o$teTF7e3GaB;Ek6IeEw34P6mtw!#^FzG
zF<P+Zrgp;g#d<(k4u8C6HhFH^tUa;1|JTgnDq!0$w1@l3@IWTKs-p)u3n?z=WjwQ@
zSb{2~iST9T-CKeJA%3f!<k#;MDX8Ff2Yn3b9G#dMxxb$5H8&$x(u2MDG?)3{Moibz
zyX7W$fd5c0b4o=GW}VlVq}O7+pTp(H!(fY5m7<)1nhgACOvy#P+=5|bWKNp!18tN(
zmq!&>_wG}rdkPrUbycHx-{)uT1*Z%W&n)TK+fv<Cr<JQeZIm&1F?3AGMnlxq8}#9h
zD-KNf=RP@#Oe-z{3I`v%*I$p&=Ekdyc<&+FX^#*d>c%Uf11x909}>Qy{wKIdE|f%b
zg=cB<!4s%^+Ulz9FPv3dm98~>8~O6Rk-HV0I<W&yu|DO)v~}lFyc}XO^jx<w&{-l}
zaoKq&M6{f7*>kt4??Fm>te#uf>`Oq&3#o6P^5t2S248Yp;H5r7AIc{}+yo8B%;sYB
zW|k&JJaQv^z{X5f7$UqUmgD`noQ1XDr>n6tLk`*!5{CFelvz|t%QxMDr@j$Ni4L%(
z&J6pa=g@OCgBV!gGV<dnNeuDvx8>U7E=Pf@re@avGG!`BoQM}e{%m86XXl6j51|*X
z*_zZn>_|LO<vP)G+N2Ey2>`DOJ_H)&YMX_?YqJcBZzDxkB7k_;7@tnX5<nyTGbB!c
zBjs-?&&pIUt|GN-rf&qcV?;jFWq2>bloJ{l%d5R-ofn2n$S*$PMVj?n^lbQwzYBj`
zrBM?u#q&nK1Oty(T=vna+CS<mSv;08C%+4dJ$~9U`)t%p)H~Gh+<qj*p;EPR4NP#S
z&sTMdVAaKZxI>`(`2Kjce&)AYm^nz!Uwo8j{3@*g5S}`S8e>1wSg&u;{UwS)ZouBY
zo1cUi_0B8Q`p@75GJOSpim;qWxyHyoc;5_v$mP4xU2!Y4c!mdXOO@gDC7@7#fr}I1
zo0Ul&rU~n9G|XrD#FZ9xtQA$Gk{q?YFRS@Ow=^oX#%%YJwmG+<r*~o>9==wzMwPT0
zLy{tr9sqj$T&TyaVLu4O1J^35);2P1*QF1qXXz3H;I4oNZe^G}Y*VITp+d)uK@JwT
zj4@ija`I)SJhfb;m>}J(1bF!B!4C1WDzg@azJ&_3t_Rd+o-Efk7XlCO<&>n!@8@C7
zk^dSnJ%EHRoRII7te}@sA@T(nglF3(R;xzqn3d6_K(h+~drf{Ns>o3>juR&4jw)8F
z*8bC>NmHze&Zz-T&_4{M%rDj(RYRrut}JL$m^s>1mmdU|eg;{-Xn3?VI9ImNFI64H
z*<U7IunuRXKR7qAMvVJ3K8snFw?es&hjZ^k!Jc48i!#T)T!(g@JHKWOZ(sJ=eIn>%
zoEVZ?(Of)LRWM6>h(P976)q2;65bdF5baftz=yBZr%C0O^-3`gZ?>vdU28<b6aj`m
zX7_rj)**7~nFCY1e^mpM473daEZ=gQ7qhRsL&Je9XSfdGjL?eJO=Pe_=HZZog-v$2
z9LIE>wEecm+u~DR{B(LN_|*Y*HX*6L`nsSJi0|7So(|&7Hl<bf39^o?1s}JnRxa^q
zuk|R>M<oQ*|Aa2{FJLaEgb_CIbzqmCl(~@jR^FWyEq>ogE$8o1@|xEzl>r?&tm@Dd
z=73!KA~TNF&#FPEtd?NskW1=FFk6tBD$0TTQN%)RW1j<ZJHi`bkg=^sA248M9v5-H
z+SnqA*>bpz&l=HOJG`S?36Um^9)3VUh~O1XycJ#Bf?Oi&El=m<DXVo7^y0X`1hU;m
zVaqKeg$_PHZ+_%-exIsCyWc9Hofj$41n8r@f|0+Xk>f=7XHiTXO_$wmhUI)}(xpTD
z06)%F+NfVIl@%a3;YA5%$x}>NRDF}Ai`tF7<tI0;yd`dM)~u3)$XU5_MD}sE#|`y1
z*QveK;N7XOC2M|Z(z{F}mF4W(1c0Yp7KQ6<uVH&RSPu4U!u&3`jcy&*-md2qpEA2<
zJuYt+=cOFIW^Q|NN213cMLYlmM2Ti#N<b3?GTmfLht&H<)vK+W4Za?yqI5vJ4}+rh
ziR}43Fwn|We-iIO@R(-W89~E{R&6^*g#1>?eeaSk{Kl(fPhmdHD$|~>+yt$|J&L~g
zm%05`-TubRDpY_0rL0ED!WeNWxOs5*Nei{e&c#FmCQWb)MDE^OHn0&hCz#R84gR@G
zv{#pBsPK6aifn(~5V&$W%lD_R{t{nZ??;myesevZa5wXsFWAKfe4_Q&+gM#2yAli!
z1Y2Qc?BZS7y&p*S86a8n8p9=ikY~vH#7ic;n2Fre;})a2YSy*VGrBUApk;~m4}$39
ztV!DLzK;nHX{5Z}#0nOuRKmpGSf+@Y`CfbYT47Zs3G))^RZNdUvI0I6RzT_jl%#~G
zB3i~pJn8l$M044zRf12O9#FZVjYg6OOXMBJG+rI>W{rKPBBVj1!E_VwF=@E|zkrJV
zx13CchrjV>=Bd`^d_#~Zn(S4}p*}C-heK7_H+C$1f{?i@w@Qpij8o0!7fV;VW$4&M
zac|DCjP`%FXcVQ`smluTT+CB+=Dzmj*?M9GhyO6Z(c)KN1q?M<e0vq4I8vy29iG3Z
zSRAoBSR7#mk6|90oI?{>!ZouQHZEA{k!J`Aam#oIP(E_JlV&SC6xy+exC^`j(vBeU
zR9R(>RImAUyxtmN(f&oOyfIgQ@rsV@6J~Kp&bC?w;v5s~ZM}M1MOp-N5<OmBV;Le)
zl!S@W<c&-cVuhNQ%fol>UF|Otrpa6us&%To%a=VT%&%)5Zy7o2b7`*)QD+;6Q?`BJ
zf7~@Cn%bQI!5zhu*&?$rI;~6Il^y+ppjF*<SSLYDemT`^M8RyK2#S3>FE4ELJ%<mv
z&L)m(&gTRiRi#0cvZQPnE>_s#qIYT#?Wjy_)?y!%Bw$EoP98n>6qK^88vy9BEDrFI
znr0L)QpDOYrQMim9Q1%NC^5o!Rm%nZjnI=KPH-syMvTH%i@0Ky;O9n>2k78CWP~Jt
zU;dx;I{JV3s5to&<fVg+tE+2W4E+2zjoZWRc_&+Mpc?#;^peTH&KQdva@r=s_f}4B
zLg6t|377-L&-tCtVZc-!#HZ6!fCxi{6xkQ4<f8XUvKJb%w75}H)JcCIexXv-Y7D8e
z{UdT#0Gd3Vp7H9;&V?*-f9QIv*vMqyR5g>w3mpS_gKyXp56Z>HxDqJmWr+v#5-3#g
zH~-usRp@f#|G)B^aUX~N9SZ=j@ZWy>KT>|3?Iq-duGH7~d>DXoo~oDDR7lZml8ZwX
z#2Im5w><E47>jaVa;zaauPA$|8sH0)(!g@)7NV30u$ug}$lK}KEyN)4un;t>EJM}L
zZi5k{)#7OeXwyW2=Rgg$1XeoQ2cG!wQHW`Ew04hoTuU^dqjG|EcMBobxo6axUGR>w
zIB0Lm5Zjs(4TY`xBDpH(-7+Gyb7A5^tbZ=j>PhcV8vL*>rkvza3*k-FB7U&}-IZ+)
zB^=z*i>(V<Z6?^#X@Go1!%GgdULyZ^hL4S_u*KY<pwN!|t-3n956%2XzXdVF!s_Nh
zib%}ai<L<(Ohrh%hM3UANaIaCRrpinTNC>Z$G#~ATuK+xS&sUQ2DUM7>QllXTdE*X
zpcx%?9ABvwgWO};)XJpDmEvGwK%92CQ96DS1CX{WB(8w?-PMwI=zvTalV3JbI!4vY
zLJ<a0u<L>%`gX7NPc-TuBAd6vKqb+>4ztb>MvrQL39WC8J+(BC+nqYnc}TLC$^k~0
z+y)OkVZMVc*fn`#0A1Xz5lXI^X*2KqMu+k-B+%7WjEXkzT*)9S4SY*?{BgJz?Xa}q
zm+)-8>5G+74x)$Z!df(3ucJPiH#S5t;?xu#CAmTZzf3S|S7WY~CsLBM466Gbl8U(;
z%E}2!Lv$(IFQ-ycJ`dyBxmTNfoVgl~&<Y#+0tb>q5mVCF@d+&M;=tE}T1H9sLr+Aq
zX`oZiAnExz{3NRr8%ww5+tH?_ka(0L?C}Q&{R6S<akj#8(n^+|lauNO+O&ScO_ug(
zCP?`EYYxewV%*WvQbkkpeVZFeGvjF<I!?5{fX3Msz8UuDmTKEkB<J<~<sg_Wzh2>w
z(hBYePtz1z4*2{rU!LIDD;*t=Lo_C+fwcYZ!LnsVy$L*BFLxt8o8Zu5iQB)lno`EX
z%1z(dr*RNRS35y*Yi2z%R>bvV+{KaF-2TJdJVEppFJcWCC-BWNl{d715mZ;r_wM4Y
zG0~>u<u<;36dl!vS2)WW-(PxcY=&_b44pS%L61IMZGEN25EPq18YKr>VpLtrB_pVi
zyAt@=ywmIJfYG{!NNmcy`C`C1qe0#Ez8UC%ZTCzxGCX+U188a>K>=iJI1oyA^(Wt&
zr>GE-7nO8y^y<7g@AIS#_nD-~jek$ejAm}~f}#NG0=r9eSW;DU>rX)awH!<q=;?9K
zAZ61@C=>0Nw2*t-R;^bbr1%~G<B<j7<?ROrbGgX<r;vmB#R}5U#8lqczFuqcjrz|B
zIiBAisw#3kTLOzK2FpzRruS|1BgOl>s#`dOh48dwca+8laqQ^egQ$R-$GYc^Lng1c
z=i1{Sqv6pUP1K{ON^$7-ZgWN2M2E2ZDv7vYtI7@hm8$scMSus&YRBdUc35BG8Ex7(
zA8DgIaReLswgECkzMO&ohqkv2YpZM8K-*F%PH~4K#VKw<i@UoPC<KZZ3leB4?(PsA
ziaQi7?(SYR1b3H{KF{}la<1$AJU^4Yv-V`InOQS)-)lDF3rrw6QzMBizfF~m0*{HU
z=);2$+9|NIG^{6T%zENuxC6a5DYh4mf_TeCpBun<o441rV+gfajNHL(KT7c9Hlw3p
zq{Ez|YNj~i?Ir+C+}n=y{EJh0t}&aBaD^_p91F^+Wn|s)g3HI4TL#|1or7qdK7HrW
z(=(rw-S7);sT8NW5vJ~>jd_9}HIeoDnLcF%yo5MR0foy`oRmp_CANp`0%eCnRWoex
zNM8h;jlLOLQ)L+IQb8TmZ8`|}WTNX9ME<3C9X98-5Q1w0pJ2i#xUY7wpd`&0JxuQT
zv{F?bg-Y!$$VG~#Ti@e2O2;p<Bvatr7O_MiO}xX>#?Zh@gs;YpG1Aq})YE`gk^r~d
z!_mlSXYPTv%-j?5KLJ(_z*IgmOdAU6T?mA+>!vcXcqO?|YBn3!ByK60Ps-4ET24u>
zl-F_-M09Ia5U}!nNhi?=E=fsx*LvjhVuVFq<GJxb)GJ+}_Wp0X()}rbix1wP#7zt9
zKl4c;a(@S!ZYytOFKlbnDL#MO@ZmrfK5vt2Jd<kHlilnWJX|7xvr`HHbpqWG?_GBG
zSBmdfnFSjRN}0##5(*aNgLAYgPYG+1!6sWoYB??+9dB(^;%;!K%tCPC_OaSaBTq9t
zuBH+yX5&3(nt>p+A!K^&wRday<Ho7HP9`1LXqr{d0(z+yI}opW`d)ym#)~7x_tpTy
zaHX4Q{<@74+AX1C5XE4EE6;-BWE35ZBrKuvgAgZx;>(hgKj@=;f!AGu<;kns<7^5_
zroye${_z=fWw<q_B(8UDFfZz9BiBH=+BDzda#kKh!^b!se!l$+|2~V@n8R`8=bJI#
zr>?)J3&s|=qH3bJg}1aqpZ6%ysO)2PaYX0apC28bZpVDjqI@4VjbKkjfC0OU5n0v5
z{%}&NwjlFElElUw<ZWr?2O^Vf<7y2B8;w1dn;AXqjVQV*TA$jeSvk=m6W-Rl%#141
zF+KwQS?d6?p(%T+RVDZ$9Yf(Ru2zqtV9u6FX!RSbKZvmT>SBr`V9}22{3sg?bHv*)
zI#A>z8^Zg8e*WdOPDq(xW96@A?i{BYgOgP7I_9-5uE++{eeS8zsk&|8mu`GQ-_4dv
zDAYj|u(v|O2?#b2TG)F{-lPt0#H+;bNKSrd>%Ir2>SA1s1iMmvOph6|GNoFDyY^sU
z+tI}rc$neqU%?)s1mA!m5_|9ApWD$=j9Eo22PR-Az!uYqT3V-`yLF7xcs23n$6!0(
z-xc$P@L*;1K(^R9(Ig{^a*zX>YU^!2VguaM#0_Lzxsu?zLOGhQ`8Q^HcxO^H<&>*r
zK6rgW`zu8#W|aQ)($-vxB*5P^Sed!^um`Fkk!dAv<n8NyfZ!3&)qK3r-#Z^+yOu^s
z<&#qvDo1i2i6<zLDBm|BQ;ILgac<Nzj8;%W+?u)&j@LnN4}$ClU22@)QMu)hn0K<%
zPNQs}WZGOh|EepLy@*L-C`_qvL2piALWQ%mHRimtT5s$ub%QdkpGQlPou+`bUU`SK
z-F*kcO3Gw`{@HYlo^53wEE*Iz1;T3v_$}?Npq}H&`nM*NgnKUN{d<Y(?ZN>WURMm8
z<Z}Ku=P7|Xt8(}F<^+INRjn@b0P8}(Qr_;7?k2Z2N=hH`87;}Rn&}W8^cBapW$9qi
zA0G@-g}lA|z-BHe)+b%n7fD}BALXNEAWc`LJc;ijMSRIe!Fh*C$8B=AB9Xs_i62vY
zh=!BR)6NJZb`5`qVTNLxqdS)o4V|UE(Xuf(o&8vR-P+!IQ<jnMK%76N_P_v{IEtx{
zdrMh;{eC;gTIYwJS8Qvx_o?JOE6*jp5|)R%*J<injvZB7@ml?q6NE{f94C;&LkmY{
zdo!4+xpwQ61C@EufB>zpwkVomOs?}}@S-Rpn`t+b_w3@eXxr8FGAC9dzo0>eeZJtc
zap8Ndf`P!G%9WJ8a0YagF8>y<C%g{y?OP*mYXL(clq!~yln;YN#r|;q7|teW(AOKv
zf2?cbrC6mht#@(r*cA4<;r!g~UQ;v!V&7xD1%#yao#R3erHuJ{nWTbLV41N3iYC$N
z5d5yI+K<f~cmuaasCQxLCXqhD)uAxzg);903Hju$KH%-w=lcU;y?D`;{$-)^$T~03
z27b)Uxd6{oa(NQ3iiceBt@UDy0c>cCpAL}kO{U(cE{*Mxi4%yj@?1eTi#XJEG#krM
z?%U5`*ev)^DnuxB6+B7g%Lja4H_;H-xIa+m3q|tD4>t?lTTiBq-@L=42jm)$=6(Ve
zw+OU_S<7ws6%0n2<7~TNL6^9@ogQ6U%Mk&vc|`@1q*D9*a19EI*Q?>gf}(;!hty?u
zr$|d;9>ywiYB4e>hh06OT*F4~SwsCLzrCDNuQJ=!UhK*EKTZt|`vYDUn=4<>M|mN?
zN+sfAhp6w11)bcRM?ocCu4pokcH&>lGJV?gAk8$Q6HXMFgJ;lLPC65^f{=;Z-%r)U
zB2j&1&P`avYOAWyK8^{!uDwr`UtM@N>l0~x09Q*lj>gnymICK4iYeu(XPzq_9wR%#
zOPe1#xaA~&@y`Qdhn!pLpktV9Wmd&RSnq;Eeq?OxESDXSDnm7a4$Y7)E4N__<N8QX
zOvX3^qu(;596yWuoYQ7;_qUzwD9h7^t~Oc$-uc1mcZKv{KLgCGnYGf#?IQ)Iwy@@A
zN0L3Z@9;PBNe?skw_nc<t&uLh6>qU$!?)JT!q4Ki#;FwDZ#A*ri>PgRtaLusaM4z?
zy!)xLdA7Q3cClsQb*g>;l1!supdg6kbFKn+k7tQp6_@C0QvNid#QBQn#9ZtQ=NA+2
zhP9fhiAc?D#c{>beX;D})4|*Gn(AcaG(>ZP#ZP%G5Wrq(m=!@+^s1NL`lu?N;>Rvq
zbOl__q#lhf>`3hQ@a|HSOr=V4`<#J2mE73PPEq&VcFGpiO+BA>a2)y>3u=a}%NR%$
zcuR@6Viy8i03`ADKN*mu1j>_tQqR}#FSv4PO>8D`^$y1u7up`V^4VQT1%wD{n<q0z
zwebUrj<%sA2eMit{)gcl2muWy+_uuiU#Y(6gr_j<GL8v43(ic_nd(NV;kwLB6`?fL
zEXLdO4BPcj)~fK0*>}AsFVQ2K%qXyp`uWbSfW=c&z-(Ba&_Pqm3vb;0?B(xr*=GDH
znd|l_-{tY1RpvfdM#jKzmK@3Xy`&0zeHvTrTzEe^6nUOBMcwksl;mUvKBL=I=#`|x
zOrfLILHJ=Q3{UOxx@F-&09Sbt!y{F$V{2nUMP_|V8M89I{|h(M1^jwpLHSL;CvB|n
zOAC*&6GR2Qz;aGNg&8NaIg0s;Nyg;n6=JRpK@B@CsU6o!yGU28ll_GJ)F_Qse@3zs
zi`D>{NV-IiDsQ#FAE-xKXEwPAXspvTZF-=Qd!+sAg%F#~5vbL6m55&IZv5xhhRhZn
z-ZpLf)%hJRL32I!0E{p_VlD*(H}`_wm5}DS!9Bi4gN7IOumzVV{?t2TFlMEL$o6M;
zjUS>3nmV&S<A;irjGbRB4{OY8H!V`gTile%-Skd}P--x@>I*5{9!i1aW}2#;BZq3e
z6+9j_aS_ax)+hzBd+R9iOUc(;@+%(3HK)JLw41`ioQY#+SOc`*($cODIvQ8r3z_GV
zMFc6=^zn%;xqe!_G*8<tJkwY#2OZb~GZtEccTWigC4}E<&XhQmu3kld<t;T2A(1~*
zn_>xc?VoSn>Fw`ca=md)wajEdkP<4rNEvHQ_Be#w2<hCSFyBxJ>GpA*9WvFbq>k|A
zCLZfhldcPnkdOUh>igm-&nrwIi&M>~+3&W;{b32UT*>+LoU9`=b%o^(lt;g2>*t&N
zCc9lqOb^Xx_e|@*Wi!6fbiJzc=hC|TH8d4m0c|*NaoO)DA<&fjrY@qE_*MvARX1`h
zv>!nzr#N4}mFq1YU}(I88?Zo+l>4*TTtA*LL35Ga*k$whJUC)1Hy5#sTQIg*%qy$&
z!n*r)pi^zPmdC-IO3_fXD}N??s(oM!H5z_jd<L1r5&Jh{?UsXw;i)`p(4}>-fv2UY
zDCEz5p46)$Z!iB15iWadi*mJZkm*{j@UPeB=i2t<dO!R)Mb4Z(d``^vszlKizVTyL
zCaL%w^wtX?JKtG=^xr5Te%`Jk7nMg@SQ!007&S2UA|U94d=5O#kJ_xh>2rOBYNSc)
zCIr|q9tfHgur4xw7P;BgrKAx)BGbud4$Ky@2el+?c0HXSs_y2zJNy2Q`s{F1GqG})
zIPEp1D&YOaRiX6<rgsB5=4)1yM2Sv_ygNPFHIx(EH-4}pKvXpVGJQzeyySH1w8{NB
zvfj4BM3m{Ba+EnCEiqN9&>V=NlfSoNXAhZr`+d9~DE*jQ@^GoS@YQl8aez8%18F#-
zC@i^9KT-AV^&#36ftogUoBC@x<*kf>?u@T5Gn06(Tl9I;zAq?*jEVH!Uv3>%pB@3-
z>u(=G!xtq5EV(q9=dW5-+@(AI8o^$8Lz7m+pXB?)oR$_H2&Ko2htD+hqj<_~=_aX7
zKhWZ8AF3(!KHy5sdZWM3eh%x;qDr*(=kKrBsK>l#gD&wMW-_2W1_?4LUWPR)OXxYl
zo7L#DxILUCpMaSxYCdYz<vdPAI2Po^MZfNau7QrsN<7%p+vdOQ3PU4f@2L3g)pxn2
zm{m>1ahP0UaF|p9bZ3x7^0mBXwV?I|8xH4lxKi8MC*e*WVQ<JR_Qm$@Xky`S&1yuw
zbj?3CwtiyFh(kh+rwj3J;ipG=!A6bo+qfcrb=jwJggspFR6t(?mM&ySJQqZPAGE~l
zCY0l8cC?{llqu~k+-^~ryTS^hnp>>z13paw<>NBRNgdWY0x$i-{KVD~SEYU*DbmnJ
zp#cTlphoStomF~KC)5bWe>&PsoepN#-w<M$vUNKrt^i71`_|f0jl#G_1eADahmqWx
z*L*fUxtBt7DbDw?^HH*!k{~)YPE{Ug#*XIX%mD`aXWVp==GC)8J5vh!cVvO$xYCT<
zWw)TvCB(F|6X8DlitR3%lLL<_M?uQtdy%oHlU^s`Guyj#?vRkUEo;2N1h&EtZRzTQ
z5-Bm=9CC(^c6JYM0AWr;;R^(oq%qIC1i2XuVc)Z?2PiNjo&OYS{*o464qiy{@B%yU
zowYEzLdn)1Pwn*Dak-jcKOaJvFel_b0=E`2KmjXGgI(=z9IMQPs|T0W3*l(SsX~bw
z6?1WOL%nmN&21x4!TC!2>}jBPfIy8apR^Q(ec#H`(4N83EUTMkCAP|#)zJ)8r=A?d
zZ{uX+@gW-rM-;=neG`0HrtbI{CRkc`0QRKVkIv)K_1cbN8`5pw6ndT^rTF$vNp&cA
zfv~_R&L|Qz$y38oY96tNdZb)^v(6is^C`q&@uo$7MSO+-3;;F}JjtU#xGsBn--78|
zBgk>SQy=q|Z-tFMZ-u5iYCSQv<$E#n=y!QR^OfA<yGNTDX5(d=Hjagnt1jV4aE;=E
zL<XK(8NAH!R{auVT|X{!XtiHnbHnQ~F(Webm>i=v4PvC|YXLM`TWCH;1i3Zq292BY
zdD)VFA|?K1SZYGfXQ6|jZ{*@aUb+wk&N=~KJ}?IG=n8qOtb6S3;D!UePK4v_qk5Jp
zpIAo@3*$4Rpl-`O*Gt+zTGRg31gvGB%ZEx{ybPLS;EsnS14P=P3EVeCa<}j)kZcaW
z1-5z^TXUej?tyjN*rLpmCM<|_w6$rp2EC<R<u9*veP1VMU6|sLYPF_0rQ2KmDdbD9
zhh?f@tQYhnP}0qeNX9MWR07!9m_S!iC8dIE@_7*JWckS!LuLAnL#Ie;9pA%9Yx07-
zl;O2viD|J=@5T}#4)SR@G&g-)Uv#YX>-wQFbDB=z0!?#pkIw!8sl{dqWMzJbZ*3tA
zHWzloiEH5~I55)aC8Gx(YHjKnMYvi(TmQT8XRUhi*DXRR`wc>;x9N8Tc$sI&L$D3q
zG@Ziz&07X952ICVT3QzL&HjQK^9UxEeeTn7zU<C$p=G^c!6gGoZ?&dChC9piDgRHq
zFDX|EJBA3%q*u9{?;)$iKPb0X-NKK%hYM>Xx(VIe)1%#@-im&MG0ICUUgu$r5jK3c
zU(g$L#+b1cLHfA60cF|F`(u|7+j$MH?hs<;irj{=kfs)s!t-jKq)nA#jh?kV_-3XF
zka8eDY(WqlVi#V0SHvKd7HMDi&B6{f^r*KV8K_(CDtm{b*Em_*hiBDLUuz@ldBthJ
z>EA@8_KM1>G<hj=<~!GB55SGedXIw#8pd>>IAyo{kZgv(!{Js$9FD--Yx$e5Zz`HS
z%+Y+PQJ|7}6ZGf>QVZq981eRo=k?Q%8975yat{IZqV)}9JRTmU5O+3Fwy3$b4=QMP
z4roIjIPuC81-?Q^md2U(f0iR%G1I&3(7HZ5lI>gAfj{b__cfV7k;5DC!t5ciK8zrX
zLwy2Ks;iGu#EUN6Q=_NUsfhy$QP`~RXQz`Z$6cdMr7|DAppA<w6iaTAVDep^Ag{Xd
zhJ*VQnTDE3;V@Ts%uu>0x4_Z2pYJ4SUaVP~Gsq`4<_`HmDQ{7%E5~b@34&mP1o-4r
zqdwfC-D`w9G|0rw+b~tefUhbU&kg35Kqie)=WL&`=4(zeDrFx@oYLAArxk}O;u6OO
z!<$4flZtVp0dECD7{qzu*|$Bj#fW$H@c^E>P)2PEicV)Apc!#3>rI_1FRw6{KxX9F
zB3Gm`T$=3{Qlu3gY^gfEE(OROnvV2XD<f*VBA@<<2fB~Jj8I)q9qET@uG&nwkNVff
z$5+Xee9vemKjjO`jQn!-<b4k^Ajm`#44@6Mu+r)5Yw9t*3oRCmx)tFdk|KHv?|d>S
zU}m^ZZ&S*Qu)3IBzs1nl*@V&*sEBZ%oq~mG8#u;xtRU!JJqpoyneab4>Tb4^Ye#e1
z(`t3S{DJ-`zMZX}${&>L%$vM+g_o4z=~z1TtjmVM!Bm<&cSO%(?I?7>y*Z3|F!cMP
z6x)5F9$5~DXsrINt)h}Myb$wY+FH3r|F^^~#d2d1!A6<Skg`lmd_f4ig(8uq%Y6?X
z6<hwHnIbWE;6&AnFJ9n`mksstGj$DI_n(avY$IXnP27@3GDir>=8^+peDC(E^Rwuu
zsML5ijcP5ss&i2+QOR+7F?jc3qf|EXd>8pL5bI9%e4Y1TXYM_%>G6U@z=XeCSFt^J
zOly3-%EJC;S&&m5j^wqy!K=`6s&r=;qFC<47QtDEUr7*XpN)CxP#<YpT}dXv^|gAc
zG#50LJ@lu}<#b~d)1FmsI1k|1(ewp0Evl<JUsKqc2uJ$8*W_8^OPWEf(}Gvz(w}ox
zW-`$Ry-<uGReT(#MFWN33fQ7Zn*?tg-Mk%qAa;2l7M&N*4>ya4Qm1)n_2cSDKO*0k
z(1^b}D-gpVj#0L@gpAh^vK8HECrdGKFEsZZw0AA4vI!OluDv6taJXa9c>!s$8@Ex$
z`!d;)yH`vpxOetFNi{)4q5#EppvbQfJ5fH4K9V;i3Y(hGyqDg=#_y+C5LJ`zxRL~m
zaMVWmx12KMf^dduJcOGl!nMP%>!kOJ2HZMpuRs;H#`g*Dd{2?On=iLA{wumV1G%tH
z=miB@4-rVKu-)DCW;8ZyXp5G_8Iv^+0brIZ)hgk<w>#VP*L%*YuNNojs7%$(;}Um%
zAa=Jpd+H>|c_Qe!gomrDN$7|r!E#wLg*J2u3WL72l${3ptIFgZx;cH&xhwYe9s-CZ
z)7~&O>8?%E+mK$UlR^2dousY{0QXbBV4(3jZm2=inDtTngKKjiAfuKM5dKr=c*C?#
zC0)u^OLEa}IV>fr9_~J`b5@+2(;GFO+H3_;s8+jOc&6GocJ8W_QM=M%gxABcYPtpH
z4R%^P_lF_Z@5Z&PE;AbUG`~d7L>w`xPjOOtJMkt2e*7*hu9-`s!rh2`KL6V%=oviQ
z`vh+aeG2a&6Xg52Zvv?s=+ehd2(^DgL8GkTu`Yq#d+j6W^|F}t69zV)o2~(EaMh<O
z-5l-{4Ir^Cwl4PqU4{d%CVWfksIAQdA)KKS!E0UruWGB0ZpIeDSrHvcA?0)Dn+DYa
zgoXK46Utqg>A2&S0_)(Zr=G5i=r1G#KgI^9m+XwBrMeuiX&;mC43SUW?+^beUYg9x
z?B_wYugPHj@)<gcq`!OTm9yd?T&ePN;W_}aYYuvcIcI>IOhX{;y8CLDEx88=nMOLi
z=6bYS7(i=+zqNT@XAs^Y8??DLL>%bW(GC(Ue!Bs59JWxd5mJ&fZcXODL21^;K6EMT
zI)w|i_G_fl%twzt#bjz7`7K`83}zptIt1-s^tSC3j+TC@#=B#oMaR`gZKAu&x2d>w
z`Yy6&{PP@f#bwQx20!oflZ)a|B-2%1enJevMsa{)p-XXAqK#xQL=k(N!yw~r;GOQy
zI*^swaVn~a-nYH!TIPo8^4GuU@CK=G?>|LclSD;xTsUkh7~?4iFXbMK7wG(#5dYxF
zZFn#jII8;Jpt3j9|No!8*%~Hi$(OJeTa5Jgo@DHdg4=_;bKbr<FqaTqpsc-&$hN*U
zO(Wc>Filwubb9`nwno2bxg}#~9IR5~I(_JOPetmUTwY+{J3Je3llCxwmED~KYJR>i
z;c{H*9Y+UwNNub=D>Sf{TIGm6rk6gV9Ei^mZ*bDLc<GYeSDSSOkKgO1;I<0`clVys
zMqA!hFdiAI;)Jbzwam&u2&LZe3D%qSpb5TY_NDj12!fH&8L3NGWKanttyL@91t~FC
z|9LWz7ocvl&?|S@VKh=*YtAY)<)8qZ#gxFlcW;=OL#zM_+Q8TD&#H@ea|h;KSzia|
z?78#Fu;*+MTpQYUb+6@0VwXlFLwamz3EBhKYNt*Q4**=aZxJgDi%dca<!W9W&jh<9
zTbNzvpWw1FKx$iboO~3_P7RoX2h@)*N9h}ChS8WN9fA!`4dR?V0%YPXP6Bg24q`iH
zQ1_QKW3{!J>J;?Q$CJjR;e?rZxsS5^hYJu@ds%V18Gc~*{oQtOqr3-)R6@%(6F`o|
zn5OE6=iy~WBosOBU8eydJnbB0nEYmE1=B&R<>oCMmcS$6!VDh@)PmOl;sRGWSo66+
zZC&%x)$)}(4Wtx=)kefYA+9xlY+_kxJb5UN4w@VMvn}*^(+Q)u5UYH>+wJy<cQE!5
zt)4eh21F*VNZX+EZei!0z}xwx@22_-8J%+|dIaQD`{)ww(X)shBVdPcr7<&d7am?#
z#?`4V+BVu|x4!;X&JK4{^QFy6oL09r?6A~d#A=H`18p~G_LSejy61x|OH+h3k?wE`
z-B={%G*)kp5n!>0=9761=62tfN4W2-C!e_!B}_(1OS;J5-ZJOV((Mg+3WspJgr=pZ
z!Xhcs9s^lVk2eg}>`aKNa&9c&NaoJT)cr3&LjQ8FbV(XNi}#1T4d<N6TKUHAFxi^|
z*FHwdjGfPSmz?)^ZG3^v91ZLjxcitsM1GqG{Gygrjla9>1!p~WgBk;&PEbTiYh@g!
z-__^{A4+5&uV-Q6%cj7^*|!OZF>ny5tLW=j-yBjtvT<HP57%&{W^ycqS)Bu<jpE;w
zN3~d@cwu~dT{>nHsWCqM=Ox0+T@ee+hY}5JGOfP^Ti#KROrFzSa}qcl8ko`&JhL~9
z=C`iSwogb`!)Xklo6*X9L|3z;+LYg^A*P1&ETE5)SE?o}r!IDWa2CYEL}HU(Mdsz&
zzuW|+n|UF@eKodjcpB~Ay@x$_!g<um|2`~g?8@VlDx$^4%5p=4TdmF@HkG||a<+vg
zu>}d4-LpLn6YkZ~l5Pt*)^UhbA1@YqO$Q+Ao&3Pm+|a@PecOz*SMjrtAxm-Ey<1rK
z2IL4!Z)$=Zqa&x_C(bm0^Ei~fgn<T&jp^qoQcQ+dpfGI(>7LMMQY4B*635Z?9z@rK
z%#nJVrT<G_I9UuucE7g6Xojfs@JLyu$oxR~OAMfp)0&D$Y4d6$gpwKStIqHQ)GKy{
zgJt;ya&ii+<*E55ARRX&6U|M>-)foUyaPUbf#Ylr8?f-?1gE-#q5i%1wAt`Ze7kPp
zGh12`32&0E0fp|qv;?d+YvvCJjXN|$%VSa2A_QTWP&_9!wYm2psjx!x@-_Fq9Ehs6
zz<1PsW|-px7ym)q`uq1vMmWC$oa!784UcG6K8FmZ7L1<EeRpz>T5|gEu7m`&%-(@;
zzA!VzzuLO!{F@yadj)H*v%{LZxxE>d^IidU)NiAsJ^{mMHEo`mn#Ot-aMUU1U_tia
ztKsn)LyXymIk+Ni_k3RDR3UYP5H&<|qnzaWHH|ZfW_vdZ{3697fEH>h$sKeYUaj|;
zof?BdTm&m{#)n^Njx{RIcIFJYVKIomYkn*m&iPQHI6{AP0kig(+$ZWj&=?6P%`M(l
z)WzVb8EZg0ZqF}yr@AhQckq=oaBA3xbt<aEgec|;<mFQfXw`<y4fba4#-!pe)f)J(
zh5nGGmKGP4;5i&pZhAsI1BKs}kfw5eWEJk3`PACxaI7yt-E9=gE_X8AZ^pXcD3*@x
zp<{MxFVrGTu)@p9LZLS^KFzoaV7IUMe4e1&V(|R<N4KTkA*4rijdBuJguIdb8=)n7
z-1$I<6eKvbha9)b_#M^E%oixY2HFmg%yypuHPspYWp@B&(kTNO8rrMho!Q*a(#AxI
zWADBgJv<x=3^l7Q6hpLnZ0Y;>^92~Q@GO^Tt(*w$-t3)xus0$|(%PSMXhwRw42<R!
zw?v#4S`2uu!@^LH;-6})Duhst+LvkFjOuEN08mcxK;L`&%tT4TX4#KL<jAsAZ`8#9
zL^cXsJ$C3`T;9H3ljx(eWfp`x<pflm4KeaL`z*&f=J#+OjB@bkK2s##(wU<x!vljS
z8Hblcv$3IS9u-B_E2S*5C1%3074TZ9fQ{~<#skRIWjZE`_yTz}CW0wAxP_~{%ya=9
zOUr*w6!-d`BX(yg_qrEg6#OQ#tOBx^SL}6Admb15iFEfKpH0rb+~QGR$Y1Rw@M>Mg
z?9>MgVkTIruk_+@+I>m!5l<xTn_CHZx1KoHEOs0L&nG=+Wze%uy-DjjRCLr}Y}>{z
z@118$`5)zGsesQGAHD0r;)g4xZzzQf)3D|)EDZMMuj}p{fILDyQ59oXv$&!{d*qt3
zrLA1$?z1!4bWkffHd-a``rA8+^#-{26LNGbD9b!bNDT@I5>_JUSauEPr4FlDV{E0s
zatM>!rpJ@=G=wsV-G4G+>_0xf*M7X_GE-X&@+}el<aya})H3+WhSf%=%J_j7wAthN
z%g6#_v$9gp-InlCe((CwAj3M{735$v|B+D$ks#=rGXquCzPEL~c@Wp;wAjlAaEBek
z$5s4rWHzvd8#Y#bwyNtw0Oh@FY8t*6am5!U2%{MMwGV@D)0yVc8~B(&RyVt!J7J<&
zYwbq)Ea&{6>YcZOw7T7KeI3_E{m#}JDe?gTMRJ+VYdt^!RCu{@Wi7e;J7^_?hg?gn
zG}}l#G!5RMkBtCQhb8(pjPfT|hU=e|^5#t7Nj4b7n$fB8b(2o{*p{Z%g&1vA(Ird(
zz?ad3SaG<xeic(d0`Y-KHMqN=|Lo2=Sz8tAvI7FHg)+`sYI1iHez)rtqMdH7rbZga
z|4|YC5Mf`geNzr<tbY!BUVvt<9sr$(*W0U8t`F`RcYJ+V<nK?8Pi5Qys|6?VGMbus
zY%~uE*w15)5l*@%)qYH>eWV+Ab6+4)2L{<fuH0|eaI{BF$zNl^J~-?w2X;xwNiq7c
zH;fFA_BG(1Q>-RqKA@Sac`&GG#4j}1pn>&S^wZBWCs#tHPJ0;Rq3iUB+k7fbYZ|J8
zvu(gBM5!Io@`0OEu!DOnxrWbjn)v!bzv{O$wWG#cAqsE7Qdb6#^Rk<XbW`IFoj~g<
zzQnNGPeR_!HCR0xBX=jpOe*BA7!D{sL09V%P2_!D{Ue)!Dtojqm+fd;>%*tH?j=Pf
z^tJu>41bKa)Y}B0el6ZuV!Us-2D_xTyS^@m#{xzw&@1xzL=maeuEX>0qx&Kc%PH7Q
zow6ta)>^gmSYsbvey`x1cDjk2v)7ukncBl!-~Nj|LA=HqH6#)JF2DyUu2EPDUHRxy
z)4sL5pR=GPhc46@B{b@ADeBcSCq%=UWhw0SXsR=6q<I>>n+mSy9~mk*TH*Fach<TG
zwxptAuht^++8~%-@Z9QTDqTp8WwYllv|WM4lS-esH^}tf%{<fCB<^xXcR5Nb!b$M_
z^SkjIZ(|k_w?Dz{zo&i)m6vP=VE*Oq!0J3Ebn4wPFA#wXbIx1G%xSmdZLQJ$OUa{k
zwab?C5LQ|s$NnkzN@~i&o#c1G<SpqGvAca*3NK_AgRR+PM-T3UZOE4Rs{@FoDAspQ
zt;;0EeiZ_?=6W{z_9XBnZ|;Y^3Fw*^GAm%9TyT+J@+U}2B<jAduO5uA1^v_l2_9<@
zj4j?#+R}i#1jvqVDpqv0!@TmrZiZ8v9(EK8$l*gHg&p*i<bEk5zbs+BcL!}fRTa=$
z)n<0q$aiN^F8WoGeM2jbf!6h}olX*EhQ`hhKQFvI#dI?@#FI0QMhZMNE1Me9eSnu-
zhZeYw(!1=LhmP9xY);>YNS)R^p3;zm$=BV5m6Fu(NkkcC`!dTZoc6qb#P!`v>o6*%
z5(Tzd_R7eJtdh?Dy6tb%ijIY4X8&{=r1!4k^;1XXbDdto%%mIGG)I+;j_pH`(BaB-
z7#^9rMyik@LL8P*vMFI!dG1MaEr)>wd}#W=a0*tw)d-}ZV4RrbDD8`{U!x}w-Vo}-
zKybB)YS^V)DA5Qqj*$9vXmhu+j)<}#(5(TMW-0#0?{cB^gLRFMMEU_<*&BNIK1wFA
z+|m)1Eqvg@3vx(d6Ofvnn~C>*_9nBdjgt)CB;=a;eo&*nEk6@4lTwJ1Dj)9)rS(3>
z&?&*Hc^rjWrs@6n9jc=<F9mkP>uR!?4!sRWxQMqUm05DyNSkq*FXeCZOo!M>I$0!d
zvGp%qB65qk{IGhu6t2xq>(egRh2`TcNWpWJ3;~oNA*>$KLkaxYZS1b`ul_l7Llr77
zThf3bJ?-5Mc8>;jdG4-4NGR5hwJ9LoLNCDrh1C}Ac)GFc^F<d1leo_ntR{#)>9`oe
zc899QVka%?;#C~HG-+CJ8m=2A^LbplE!plqN{P2idfbZs#pTYZNj%N50_&4mUuxue
zkAwFHQy(RrttQ$28+s0BL3Ww<Rq!|#Zj5ZVa-l~ush-_v+}RcLCZs*@su+B#|G$e5
z6?PCSFB$kNbL^<PD;yO`<tf+R(fgFciC$|D=aA>Ezx|P$C*?9O79xM<8LP$ib1_l*
zkXuteeN|_B#2o#ZrzUlJ^afcxcnqEom4IuN@ARG?{x9u%Ez|{o`ripNGL=YzVg&&_
z!#0SswuNWXKJ@BrC{+G8MsR;I_DMgs(d_XANqdkXd&Q@_UQ|Hz?=2F7<|%IjscvtM
zuDzc=M+(e+ZU>75{F}M^)`;d#oiZ;V4Z=xNRDhC{4{I0ADw<HBY5LTMtNSToU7H+s
zp{Jdm_CC@%aKQ+!3lUBrwjNKlaGpEYZJ3LiHb=6GFaR!)O)17D&LnG~$m4KB5&vwq
zud(H`YGfUAa91?@bl$d<K&1KM87V}#GJN5(i8_4m{AH#&IaBrSO{+3$(`EMR0`Vjv
zY$N>+O8(;CzuT=soe|ld5K(Vc3H$wpz_V2~0imxf*`k<fwg|`*n14ky7)06<RnVMe
zLtxI{%bxI(X^#UsCb9RDSxK8c2!HAeyMj!M*4E{AqImH@I?S@kDtENvKmnQRiQR39
zN-;#_v1~+8VU6>tRD^Fz)h*JDGr5j_m1)pNP}GLeivjq917W~e<BE-ICk7L1+gl~?
z)nL$9-=7n|MF_Ua-X9W#>k%vTMB}3qriCtUFZT{=zG1OYZg`BRdG{}A{zlGcNx2VP
zEaxgq)VsA3>PiS1!SL`7j}AUhygaRmsFELx0m(EKe#V?4q=f=|DuwOF?a`&aMm93+
zvPnb#VUBI~x5D{FBi_l0l7(A(7u;v&qzrMJ4sk6&ui@luIqJcljyCqCU}`Ki&~CMO
zT8xM2lf5oNwPEfHwo$q1L8}{3le?qykeISY&kgDcw^TxhkkGNFCf4(2ZdiJMIT7*i
zGav`6oZ-0U0=9yhvb$4ja<-7UMqDDoP6VvJ3NR(LHR7lEfai-UxJ^3~YJlnz&m}k?
z6wf{o1$bxjP4Kd3WM22@hQFILJO}pOO{hV$qo8zES3grVI+T!(=bQF$iTvV_xkuhG
znPKgs&ncqCS!yBaE%NT`QXmFb><iUYZj|}aiQ^@q&79cjH^>8L(RTW4#3iH>4LSRP
zieBHSWxotsnHzp!Lbz1bWAJNyhX&uC;f&oa-PnRJgQRwiVW1G_)P*+273>NuyT+p&
zR>tn*V|(!LQB5Eey<ls@XIIyg#xC>7B=$=i!>0RAkP9FIdslq<-6?(d{X=F(q+4FG
zWv5$j^7qaq$g4>>MMr$PoQO+pT%%rQEHLBCmpJxPB(9xtEfpI2<<T!1O*8BbR0>lf
zZixa7>#>nDEa)(0jrzWLPC*R<;bJll%lt6D;v8Xs9vo7eFX&-In$4H4nMmNFqtG3e
zPwIHmWe@o5s*sI;lG9Tn^vVHP^KHcm^g1fn*8A01wLu%r%97m>lBqc8R>6pC4CC$#
z>JR|E)L3k{-N9sI&iUSNf+tLmC^n)##qpZ~b7*fY26J!t=X$D&Ou)56zIoX|T86D5
zhk^oof@awAdWh(cqzlCeX({skNnFv3q{Gl!0}ilDd)psvTdP!$9CW<X%1NL|-(n1+
z#(ZUR0!K})g}bt|+q^{&8~rdKdMWenpvW*ScGLpB#MIjCK#G`>fK|ySewry9rT+T>
zza#VJ=LxwN-&V-rq`I&EP%nn&){3bKyV5k3Qnny}&%DRZXyXd>E7wolBI`YE0ia&H
zVXv?G7!6!_h#KSUq+OH#!xkNzFIEg-%ZgeTpzUxDuKYbl(v&2sC)$R6gsB}(x*P*^
z%MYi4>1NeYuwnF`PwW~IqBBug!42hE+#D-kbnlbvilg(t2Q*4=s03f%unLl|0IHD?
zEe;U=;g2kbfjBPbAsH?&oyb0oNJ%b6*g3!5xfl||PH)$Fspnza7o{#fsw^OO%i%#n
zmisy^)(WEM=BO~XL8#dm{nkY-X8x4u{f)dxJY`Hz2giwnNpgK~@id6RkJgu0iY=I0
z9PtJ_reWNT8ME)sY;dLS14*BIp4S_wSSz4xe7qZL-$iOGH)q%0RX%hr<qT)=fJ`7Q
zun27aMv+g#I3}Ra6*42Rx-9Hgx-8#tg`0=3m-RcWp9`Wz0Jl2+eCNrNqV%I#!sW;a
zhXbz1V#Xn4EU9F|UGRo!bXKT5>f!gv?igRi`(E~u$VR4dRL$hr{X$G3d}+y!TZw43
zLQ>aa6j$j&)V)3)Ceihe-<<jJR+%4z6tXGjT*AWwDvydf@2$HD-AXVTRM4e0w6I0~
zNWD+s4acI9w9j)^7(0N*4@`_IhP_TC{+ZAX+0q8HM<zBhO;G%ypSI`+2o1BV{fDQ*
z+IJXcN_1W5DGA+LA7qgD7SJdUUy_D@j?K)?ulNx<f))KcSus2WL?gBYz3N)>^4CZg
z#Wk9u^NJ{C+*{^f^Bo7p2OSHzd9hMbd<P25cC}|jF`FPmZ!1>)Kg!M|;#maR3%jJg
zWxD2<Kh-}o4_uU)YRx$N-MUDE^>Zi2P@4DYcDjy|yxH}pqX*?mT&O`PBE2<cRDVb$
z-~X{EC`L1H<JhU8jo*@3)VT(^o^+Nq{;vAXhj%SFALL&`t*%!*{2g>1CRy>f$tFfH
zs(?g;e$^2~LnmL#m%ZLlG6nbn6><!5U75iTs}X1&=e+4FmBx+}ZR()!?yC<g%0Rv_
zE)1u6A@ET?Wa98cH=C0lrS0tI*UDdnph^?cy7CW4Z^-T~Q>srEO6ly#-M_F<y~gns
zZ`o-egYDi@G(O(Nm)B+Ql6i=7jd4j3iv;E@xwn*NLoh7+os2qauG3or{sY{z(6Xdm
zM)F`BZ*2||iZ75~C(ha?Pbndp69gKX3P)VMWc#ggWd`of81Yo05fe>4ig-o-`^pUO
z_hK~dSx$0=#QHsIvyo&0oLTVDoI#GN;^Du2ar2ehe3;|CR&aaw%H0N-wDa8T?vh%2
zSdw^IArH<SajTp39t~$^8Vv!91$+*$gjn)M239rC2d^9nzi3HFctLJEyi?s-qv)ad
z;oQF)c>YSL*~sOq;DKcns0EHb$~Q!@jSCw4({gcjuZdxU5}`_UkHHB#lecXuyvabj
zIx2A26bn_i99(Z~{(_YG8nrOk7*!8Egf(v2a4U80!z;HlO-9EILa1+h#~NsUSmOM7
z-QezaS!61T6mw{?j>Sj(;72HDEzGJQV^fNoH7+R@c7J;lNEw5~yz=YYF9Z4yK!1lJ
zKaUtklQ)BAzuC^tLuABA?8CdNd@?h<=nCaJ$K<X_@RRb&3+<E4<+F@nsV@ohCuN_-
zJB4~Nd44#-!5sAYygzkAjQ`@nn2x0q63jM$(Dr`#r1{7TZD#_`ACtRHtQMV_M%%`D
zfURyCvLs#0O2FHe^eQ(;OH*OKKQ<6B#TfRz;CbbrR}omRo%|bIpkX%X5)R0?kE6hY
zmwMSzb-|;cwSqv)OF5C}nYE3QbKGi2a5&*VG=Wqk_c)J#VE)ry;e$nu>oa7n2MqDa
zY4b0mNi+*71xw=|7xINNva!GCub^lgyafdxS1qWzy<{IyoJJfLV8Ka~+^GU{{%VS?
z#f4%K{|i`cHht6izkpTs_G}r&TdGyftgc|&i=T^rFMccR-i5b@phzf*Aaa8}Tq>6b
z`WjxH)%TL(h?B?EFZF0<CA2ZYDCTT+8C+xym5Xu;hbVfJL9|K=wFJBDw8bpe1|}{y
zVD1$I>%D9$L*|Y1n^9Ax=R^dSCzAgIAD?>``iGJ<Z9I>yJ_a?qu7#}nQa%!qTUg6<
zm`W=J>!9!pqi_hDV(5e+Ohi!4Z2INCHrx_z(fRI=-~EXd^QZkF()#;WdA%PG(P*fw
zx`tim!mRvX-bphymiS4yhAGtY=Pf1|3?>Wdm`_T|H|19NWJ05IZ`X<CxHiK#s~$Z%
zz6np>W*(2lTufZQ`J77^Xd26Khn$j@@rtgSmlt+vMlG6c6|K)HOKX7es=J2RZ^j?&
zXG$wEg1lHEhf5TK&XGX(IoaP#V0tnvJSSEung~hrVFDfYDF8GsGQy`76|3;(ki(W%
zmfoe>6rn3v9hp{6hL2}#qD_WY;X`?#FTEml3etpO;=ZhWu<K2TC6|BTW{;vKie=5d
z!}&&7^ng@R;ekel!~p8|EL$cfdn{>c1%N8GJqb}ZcZ5}>E$ERAJp4H_zFlmXn?0P!
z!|!U<Sv(jc4j%pJFG3-{_I6rkEA~laBKP4k6ds>TV&V9lQ_%fM7uGLmrk7*$N?Mb$
zaU49LT}D1@qV<1k*4(%{m*+5el@4S0H_ZJfk!ZA#8&~@uU=O(}pLX|uU!PZRkRGo}
zr6QC6`UpkUmVMpz`3oQQA?s+=f1NM=``d;_1DahB{ZB$UsUJjv-?2ku82QRQSco}f
zMC*%Ut5t-^PjOjUMB1gP@M~1EdC|qIxbu6=8?-{^i}(E|Xm9r-J~aN%aE(T?<4y+F
zs<L#9X?lY*O!;}rBAGd*2YsOfv<aUg<?G}HwrL=;Wf|Gl1q?bRnk8DHAul}HWn6Eb
zy}REq42CfL)Q?vDDPN~gZ5JQh$2pyd!y!vh(zP%D`3H}B74|j!l<a>JGc$iXQkPOf
z4M|0WE@bQ>ZL1>usD#OG@vxc;PR&G$5;a+A_K5BML^cggXQ$4tzKz?(uYM6Ew;&Mz
z4|Zkyo>CF50c@-^1+J%1<`1N4QC|WpiKz%M%w7j|H0ftb&imN&C+612S24jHqb2oT
zx)$?Lc2tI7odlT^O&9SVK)0D+=5XMWp9GlsU!n$#jEdRf_2WI#PB|%xeuI3XmMT)q
zsm!t64SPN@?=^o-ieG#=69P{g|1()tvsdT<UR2t+_u+~mUwBlObqcG_sw7iB6^PgA
z(<(<w_C~hwgfgnnu;0oje4#>Gpj}uz0caIY21l1^GFqSy!iFb@h4a4@IVQ^2DT=7m
zXAq6v*~H6sJMV_Pn)wo7TO`eyncbu;a==Y`v+2RKjYr2*9fCKbn)$U(oEP;nKP&em
zcLJ6Dp4hi&lx^`8Bvs~}qT3&Cj+JUM>ok81T1HiV&t-|21zbwjaq_eapz~wGK2~qP
z3i;jNn-x2zaf-<PkV`@MKkKofzr?v)#DvK7oj)X+@&q?L5QSy5<vc(Z|Lf4lCe?4!
zu2NfNYPs4PpSt@K&btx1*7jfKpa_!tvip6^SUllep`<22$=d7+r$?Suh~Li|6c~Ks
zA8>pz&ao-i8Q~|~?3m%b`}A%?^>-$_E}KRvq8y!~_wMUX4!^c-mN$MM(aFW=lNJAr
z^&yiWtxE=cV*36|mo0bi%XwYcBzOpySf)4@ll2HjM5{d>0-RE~{m(+cm&6QbZe;W~
zLxd-S_e*J&(kZoV?kdRvOcLI`B2(^R!qMoG!hvojoWXZwDlw4}$O*7;tR|SqgNRfs
z2NR{pt2U&B-YxHNhPQ*zK0blTH`D#^C!>coB2$XKrh+&>Rz<%b-WA&4FZi{C>XJW;
zqD?}pfM~{9^S^A@FvyPB<>D5cb?|<sZ3atwvb!c!Gh4F%&84Bg<A9Is%>GS|_17xy
zY1HmqCw0q|3(JDtpGcR1k?RJ-G7(4}rXnQMBq9%Y|48AP>!+?5?Di@GwWs)_5bzi#
z%P!qbNM{n@$o@^mLA6YR;e~49><R1Gi<Kg=Xfa`x{L!<o)>?Gf%H~_B-S5Z$^&#E$
zJbZlaH8t?W+AQo~`PaE6a6ND_@uSR2_$O`WEhbZ(0_8f*f`V69KZ=zlU|D#@+EgZ`
zIWAs1#;k<&`VkuaQYh#^0{hRmRmDmD_+Rp9M2Z*CEqs&XDK9?Zai!3~&-`QF7wvH3
zfw9l%R4E`)JWgW1(X#K9cui=C(6X4MiZO^1gY|!fbN(P|d-1YWzD<_~4<(BUF_cG?
zN>uDyuo_KV#ao5cBK61|&H<9NQbQAe5WfU<N>_h3JJ@wF1y4%Y_88W9d%5_pk_J2U
zA3nX*f^#Ge%?*xV!EE9HJN3{MqK>yeL)(NlIg)AdOJk5zlB-w-k;Pi&$=Pv;aXce~
zO+UTHo$ex5Cr#ciy2tSD;V;0Z)jx?F?mqmM#iqzhn4gJhN<>#>_RZzP_bO$PS=6^f
zc_-UlM3&LA1@&e>T>}g`Ki22GfWL+tX#qLV^iyxxYxRZows?_F7<z|1*%Ui69jPSe
z&;5Cz8h!jg%mrb{o5Q%4xS6*LhGvY&O#kgLsJiE}!B4l)S?%|;hi<nAHDjQy7@2w|
zIk*D5H)4rCM0*|mdeiVKf?4uET!5w4pZi-pe_0_B?<y4Fvrr$l4_3M>upLYJKYaxZ
z5?_=5S8?i}sWOoF`+MEq05j-^c8P0E4g3)syr(ldChLy<G7Nt$hGq+213s?Zz`Elf
zx8~a^$Wu3=iMLZt4GsKOg6p~Vrvw#|+t&?Ctlwq+-j86&Cx`$avpXWonuH=M==ovn
zc?-@f5;g%};{WJ)F|=5HKJ|CYqe@q%U%Q)axEXbC`_Z@gajG^g<L}u-v!%GKTzH>@
zrAf2#)1&6&-p$i-m<tg)5}%;KUs*rGW&Qb+5niqTfbviEj+FM}-zPV`SDJDJWGuVR
z8G%}jQTXA7y&HWp%r~h8tdGl0c#nh#wLk@s3D3NvoF>YpE?Hkiv7)dG&3S{!zIX8K
zDZ`z^rWNxOn3=_s^79Xu0u8Ieul#GHo0APs6tnrS_dX-@S>MShfZW!;r7d6eM#Xh7
z;<|o_xK3J+h=LeIyM{%uRtf*JPj}ndY`>8xobrfshR>0>H+VLHp{($EO{*RJ>bmd!
z@|5`pbuGXe78j^2^yvnpf66fP==Q}C)NhF%*;y&2L1SDg$YDS0{-8-+t7(BV5`+$Q
z1=f6g){N|EdwrDAWumk{K0P56hog02!eP~ZJ5bl&_RNs^b;o84=v?}XW$zx*aC_rM
z#9M>$j*Y~n0Bu*4!@*u8@(pa+M9lZYH&+pbDC8sX(>{g!4^~-oh2H1H@E<eM;b^B3
zao_6x%UdqXABl!SHNu*os&BZc{vc<)am?uFsDmO&#q6A2tg=*<xhb_xShU##QZYfV
zvJgg4TjTVQMk?YgGoI2I@0`ED_!b{U?u|)NHiXX|K+n}VqFQagzR`TE=jxmun{2GN
z_>C>rcbZG4ajG<o-iEE2u<Ais{`is`Z}t~=t8-mN+#iCxj@j^MR^m4$W#oh#Y4rcB
z@?W)WB<CJ-$>h_W&#pT876Q;9M|$<;B2p6O!@k$$9&uFlXOiczrY`@__e(Vb{As=U
z>?uHc4~f(5AI;#|sdm4iXL1W^7^7I3?71;Q0x@|sQ95e%i6q{o<hKAXR|3pD7}gKW
zAEg7G>plB;kLE84A`|$q=XKRAwZw(V#9E0g*H=w5N8`2Q1!eEO!HkC;f++e0Mn?e%
za-PhusD9LN=wn&293W>IhgYARR1P!T0SPG2r#$ofiz19_bt8Yaek@p(%`%doM5XAw
zJM*2wNUddCz_&FTW|_I~?AQiW?V!~{&XzoQCEPN#Lh7w2o0mVI)Iw%|k{l>=TpGTG
zhLDx(iD_BAc`Q1Qz?h@p-X$N`<F}gA+gBvtSD!r6QMuIv@hh8r=P}81X0J>ybPv2N
zk}nE+ti?=aIbh%Q&f66}rd$a;mjVRgx_Ktyun3VAfI;(7BkUPyh=4bN*T~Ya(XxJX
z%lQJqhuTQ|#QhdM<Iy=>wMCU%tBhjSh#)7h4|mU>ONPVcP^i(sl+Pfruqr1CT{(s2
zbyuxoM8FRzmfq_^8_50hI9R?gL64#)gWkJ#bT;X$DLC4K9k)+lDa)N-Oz;|I>nU^g
zWApM{trWZbHBDXovkxz4DLrKwwB}-_h?}l<BDsk|;E6swpd)~GaQaY41iw)5&1|w$
zrRI@>oW7<1Rah6V7r!L1$NAut(>AQo%<Y#<c$nQ~en0tVgAWy%X=w(}a(~?hilF<T
zClcIGZ1ieeM9IKnq@TG%-8hu@gPc575*^1P+lwI~<E?l-=T0bx>Y-QbM6Ipwmus||
z*k~&=S#pvTOP!q-+x5I!H-F)*8e!|RAx;d*kulu$b-A!fCEr#0*BE7i--&wx@gMb`
zQ-z#of=V>Ic#Lwr=JUWp{@0R@%*>Xc5|v6z=Uqy|KV`^!{k}bbJBM9Js_rlLLrNgg
zfx>3;*o26B=j{;SNM`@ShbZsd6A!AQ_|LbJUYk+7_bz`Q7vH)(+mxIIZi&2KVRKYU
zf_aNd15NP3kmFQatGh}}mvPG}&=6hOCnTL;whbCJV)u?nhjmP=kK<lc{H3@*o)kFl
zn$dRKF*_F+_GDu_;IFJsK+X6R-O)aqlo-3jMMijR@yC<(jaT`|(B0xV`npH^H*@VE
zh2KdSwYl$G?$NnhrLV=}pN@p?3aLPBa`(5$D=QWSmM?g)n!oNAN?0{v$~Y@}3||7#
zjLXDp{jY(5M{~N2LR@}dwa$CA-PTW&;MVYcU!-;KaODrbr|$`r&uV{g0LG>#DElbT
zM))--=^PD5CIl*5-gn%Hw1*U@l&piA1A#gbN9%7hHnG#g9^H)lF0Tk1-R=XymWsam
zmxlYp&q{m-o$^Fh=N5O)Nad|z=F%MeTH=E7z2C9=U?htiKX^S_=>4pwciZ0PKU+~e
zy1Zp3%zhL{>T`(W7a1J)X#L(i-N|E+?e$I(sz~(cf-%Np{jEMHLK_KI>g3vL`Jh6C
z=4Im&we@F)WEGh0%OVTaeL2S_6aGW1l=*$B@cS0}hYMe_yz|Xh<qf&~JBO#8{|{&H
z9o1B~ca4fDMVbl-NL3IJkX}NKio%0573sY<>Ai*`AOb<@y$VPN=`|E7(tGa_LT@32
z5R%;BIp;m!_x^G37<Y_hj6JfmSK0fw)|zv!x!1C{Y#qI1u;{AAJqpWDV3FkiCE=t`
z#JovZ^6y?Y+GUgD0IkN4(e^tS-9EVi&VPMoOBg}9AGwhNHWv$a>7>!jO|FDq%-$NY
zWoA)dTd*91%yrbYyaMrm-aGi3xq=0NQ!g%kG&Fs!838N*tfx%}b87$xa$KJfjVjFY
z*ZGNtxIJJC+OtVHRK88LOSDf>45G7kujUgHRVSPUF5nunqH{9&%%6@GcB`~8_MUvD
zqF^1t5H!OgYKHl@syv^Z$k+?ic=SGYt_YWnFS{{H<0AV<o;_N6OEI(9<bcefgl{H{
zJT&#zWetI7hll7(<Uhf|Z-NygN;S(+Y$Mk2ZNJ2}4}O>~=n@?Z?pPm}IHNy^^SH_j
zYo{`Kc+f;YqKoEy(1CemfDbI@vZkADgPe!P;Rn9U$z5$+&yfZcyy9i>xnrTA<@K1`
zY*sHD&u@>pJG0#BVkJl8g4`f4kSY`;U0I@84TRlT>fR<sU+srEyJsW3Oimp8asbAj
zI%y?3&T}6mmH54c<@8@|eG%c2=xLHR7<>@psm?TexSo|6e>u4elVecyd!h)E1E0U3
zwAcQqBmO*b2h-Vsh#&W<-THFIpW3KKwI`kQ%SHIN34f&gY%ozMub4OYXY>INe=KWE
zoknt<i-TxIg)aJa*IaegEHQUk6Hn5eb>H%k{I*V$HI-Y)N0W!tqbbL6vTiQNM&X?*
z_XAv1dPM-M(Gx8hT}^)GN>PmV_z3wAMvE5O%Ap$6$oJw<z`bX-2Shoa2I^6iHTe*!
z`|0YO=pQKG9)39Eej~!VCe_|VEC67YBvQ0|6j54-5Xhu_UekU!S^sOmb?34U7l?1D
zVR>y3132}ZInct;q2ugF0ET8}+Q)lONYAO_0ui6Ssyxy>5k!S0t%GJKfh6IpH<)K5
zAJ3d{WSZQx7mvno)U{;=i-8Y8)-kBvwQZu)l`=C`MjK_1;{1a%Q^S=F@w1C0_*Qj|
z6#*p``OkY&5C(pw_N7<Sx5hf`(9Y3I?5;1fAx5j>V+*u=I*SsVXGPPs^LHx@NiXT_
zZJad6vkc{!7kvc=*Tw-F(DSyBTGj1W&z6bBq#N&ac)4(ov3!A|n)2YjpJz<RvXn$T
z9@iH?wlm-Jts^ymA(49dI%x#L@s>)<RGkUQxD&(7B6@f<Hcd2iD{0RVnX4*6Z?Nn<
z{)>Xs??1D?zn)d99ffgY+H}v}#Iy|fFp2CLLgmv@`WZ*{T1;=u*Jb}i?A*|+0Z*@d
zl-sAm%zR-3do&TPQkH>iYltR!t<;L0us2Bd%;L_K!uIGi4@;)TKxb_QeYFhP%+ZE!
ziC}TrsPj=!>-qB}<8TR}xmzzW$crezQVKM*K1Cbq!wj>3-3oHd!PUgBz^e-|EKXl+
z3Cnf$#}#R249vYh568@oD(o16H=a&6mKvDa9hsdCM3^@VZM}^n4Z!*umYet}WMgHD
zf#tLvKHME_$pv2H5%AwVCVHWP6(JAO1qr>Sg2dsX8myHvCM5$?@+M;TIxY9NAr(+O
zvVm>h%FNc1sOww5Xf|@_(s}DabSqWLaJ>Ro**lg0x_K0)co@)ZTH5#hC**8yjNr`%
z<D>tguuZY53ZA!jN_F#bT1lOnw+~2zrI$PESTFl(JdfXK?zG3{NE0uN+#SiZZ0_#1
zDT@jtt%-1dD<<8a&)ArS7zaI(huE?PPRQzZ-=m7b9;04>S2DWnl6F`GI#x(1nQILL
zFWA&UMy3HDzI$QgD|La4Q)P=DGg{<wJQLFTh9&Y2>f{dms>sZTNhRZ>wBgh@Ju<5A
z&ZH~(CO^~>-Ohe9Hs9a*teNtFNK0d0Wb?e&*+6Xpd4q^fxVFZUZ}%Jvo)>-~wXi?H
zmP*MI=20NT`Sm+}hJd3_(ECM(&ZbfoB;qmQ?NG9(&2$tQqhPts`Q{Jbk>gso<7f@4
z_h#+z@zg)wGF6L)IIj7>w?3Za!xVNkCp55zMg|0GtSC>m&2`vmZDVUm(0PM{{n}|`
z*$U(5J!64zDMHz3cy5pAn=^i5m-3bPNkW4<s>5;5aF>yUq=l|D-U**4%EkoA?`t8f
z`4UBAGJ&<W%UPstJQVb^3e>v~8}XyjL$cxf_@=&N@WXsve$iH-p+3IRlj&oExf4_0
zrs#5w7}}_b1GB?jq3AKgipS4v|HqSKXvB&ICz0i{kWWY+^$AT@5yqPD0F0k)v;!5<
zFJi)oyU$40mu!n*SY4uL))T%Rv6r?K2aEX{<DPvkYOw8;d%kb_P_6{Xikk<-VtSn%
zT4h1j!;ggJSzhC+vS&g;>gwu3h~4AoQEd!MesA1aP9`o*iR@uoW$Z@T^%60DPKhJt
zUipD3oeRuW$al9=V%8<^nK}O<&_jl88zH&{$G#s7Zb;r~BlMbFST70~i8W^@Zcrh1
zInqAEuH?AA%N_1bkz($-tbSo15$;<YT|fJrJqT^hz~uDW=3vZ*nSWj8TaP5g-40qZ
zQ)Uz;kBAvjddZmVgM2?1mAhx<xHt9@R@vAVdGqz)6y`EL?HkA){F=FDKhUC6-|m33
z>6~L_@^W9`ETTu!6QA9=u>&v~S^LOo3*1)3)PAWS3`M+P9&^ER#}3BlVsesazCBj)
zOR8X8g-HZDv53(#k&XEt3;F&^zC5s_Mo<2L9YwD#-Ii%;#qF&5Kd^W5pZ2^X1(tWI
zg^%V?{-HN9n0!!vR8-};=$B*{Yn>`Jl|y~@(>eP^@+}QT)mkyzX#0F6k2c?H1XA;^
zaD_z3`_Xgzh-6RxAoQyteprc1m1)g8nIfo89|hXTnqmp^55=Bcrpu%Dd)F#-yQRnK
z|BH^W7*JF57|&A;Bv56wGiwQvQpvr3vV&h62=>gPXW&v<uAal#G&AYq$pD_`0!H1^
z{1<HwQ`>U1R?c}L)(w<XJ1it3-gVK|vF^gvGoH9I4w3&Ezdj>=2p<p%HM2fNCmha_
zRdEUX>XtVa6IpltfIcDWSbLeaLQFKG*x=XkP6&`)h_s}it>{tP?8A7zz6st)dQ$Y?
zH(d6{RShC?;I+wznp85WX1l-2C6(cxMY5?KF5=+}C#3#pKY%)oGq4uxA)x^@pOD+>
z_G#u8vF>q@Pr6QJZl--Cj$rU-QXo-irH6PHUSW{NFR1l=vbG?5IBxU}o+H#Rcp4i8
zERML>jzrin$L8V0+atyPQ1}wxbf?lhVbPODEHr<8)pjhE1Y@;a1*=x^Ke1)5fIfxQ
zTV^ir`u$##iSHX67A$^NdF0eZRD6H88UQxdOkLPo%~?_68_Zihf;s~(W*XYV`k=bF
z$Jbg%v{9vE&HQ)#8F#5l-s48i_MOour-8b7{RA<W<tHUhHk*}ICvR>V0d5vV(Xj7j
zl8~ueHVL`u+PQ-=g7c4{<x2zveeWEOKSUoEsAh1~jk|l<)UGhN#Vypo%ZLA3@E2(P
zsaaGxk4IJqp}m3uz;Ze_Wv)J5y1dfEqkIp5Y9*;BUM5T|FYk}d^BU{xI$1=0=YNgs
zxl#ViF#;jBojov?iB@pp5&!*@Z{eW+784$vd?ZaC>{-1UULA96s4h!K9qv-14e&v<
zkyIxe3citbwC=mQQ32t@a-a2aLGtWki&8F?{`C5z3wL!?f#9~@O!z?-%&#$UwhK*1
zc2oqi+CAY}X5~x@F)`*{wqKa(LKChgS)h7Pb1;<x6~B>&K%s^T;1A(U!goY16Wgr%
z-oPPfD^n2$I^p{K0GsbESGO;Ys`{)^u*39psrN+>VjB>cV9tY8jUAN2NNAkF+7C_c
zO5i0W7dyLME9=+SlGe*vL^`W`D>X3rT2y%Au$lwaq3}%=BtueKhcNT<4S%fV=iFvu
zWDct4w|e^`GmKe^jCk@ay_-1AQi_=He5jhs>`dYIy$@mMNcpo$|Chi&MIK98nwG<K
z$(3UAwX4O8NUbMR-GO?<st-Kr-Q}9an>wGyhnb`#6<0e~*%XQKgW?CIjdL&wAQToB
zfm9p^(iR{(oW+;m^PBUo$#JzqBnNb%=N?oM+bU^oKlW^b3W=SWRdd7!&nng0i96Ol
z`d{eW@c2o7aMGaDyruFv%w$5XNH-5tMTJmX9zhxezSiw_=jR`Z{%|(>D;#->mmwPS
z0<~(@1?{qh8+3{)KZS2nO-O1Re<OPhWMr5@F1W^s{%ph39E!aQg81|KO@`0Vg$1eX
zJoSuXZFWH6i*$;0tP=SMjJ|9jl*p#$#gd}Db8+p~2_j}s8{bs?YmJn0RHS3e>5|b)
z;k|>-Gn-xOB+n*CyV_>!$?RS)FWKh^^M;g^yg|Np!<RkrsQ_~4+d&?ED@#G9zEC&(
zP1d=FoOBG~?{$?i+O*eGgaivwn0DRgvQ?fLU1s{IB<st-@6Qu$(mC4(Rf*Kmws=8e
z)8*Le(@a};AgH8SEuCs_Cuf<mTm(V7Ni%CMNI!Pq>EtPXEjd~>FCPvsa(OSo;@%zU
znq0_Df3InjGM7`|3uaqJA>`;(d?9@JKYko~Mu+bN`nLbvRB3Zs#|VaciYr)WTF#1+
z)lylH8C7iHM*;oOF*&2&m*YT|g4t*&sxb^1BPgo)s?VKzwB<<#68CK6J@Zj1=R+~y
zi2O4zt8t)1Znhu;QzV~2!v}a3Zw%Jf^6aTDT&iNycn+NxJ-qt;RD2sklMj)O#U?+v
zES0-dj3cMfp~G*WD&gFYxxJ!3*qElY(3eCgJ(GBUCW~)H9Y>{swm%Cr&;cnmmrMfV
zd(y<6hsxYyQA`KsubG^#7><hYawDT({DwDY)L?u*Tq_1!d<$b}TNt=TT;fjE$FMK3
z#++2=1$d!8AG~#bB30o9=|G!O_BGLG!YOhTuCcM9?wLBIgSvDw;E_CQ)kxn?#>qN%
zna*3;mT4GOAfv--x!t<bVQ9CGY5WX#jT=c_xD+APuJZy?=lVSjfk7W!?g)mO3;DuT
z_M<|PB~{WP<~^T`9MqFqc=C~5wQ01zPD!TPcOBvf?KoreIcJ<Y5T1lbN5anhLIzrp
z&Xb=UUy9!Mp#vWrly6rV(qOW~cZ}``Axz1fByTs79MpKSGGs(eV%WaG%*l>gNXz2!
z!;QmF!!0{N;QMa$3A(X=Lei-H+-LHIL9E0!M3cE)X;cUgI1FUfU<dUZo5Cv)|6prS
z;vw++Hg%Uq@!En|3{=~rb@cYWF3~PE(J*%wuzn0=B@D>IZ?n=D>trJ@@(G4{aQO&_
zKmvu5m{{;CuUYBx)NInbY~|iI>-i44WaximY3iIpsveiQV$OSBDgCv9(A;mrdu3!T
z?Y4t>w3~#EHs=wsjbXoFiqcx3xL`&#T`=+v`9n=#7%f<v8c^g>yZp|erAQ({*1qET
z(N8>a6{Ixms}>0JQ%}S;nFc+_@sFfn=K3wE{5J4%$Qb9Qx++g4B@1(fR`pir$w!v9
zgw9;vOQ#3xO`?a(a-z!}2tB62c-=s#5Orrj|Eoz1AX{jCHzlWcK)mrtx_0!!Idfz~
z55_Xn!!$F(amYHi>C*dnjUoP!GA7I<O)kiBP3~Tg?-La?2OdL)6IS7gG3;eyHd$US
z)LXoJs?@Z$J}>)Ohls5K6>7|?yU{$5$eM@zU-UVUrZ*Su+#3g|*kTxZdTIT}nOm%t
z^V8lKG6`O|_dK*S@gW}LK@5A`Z0JAa#UQA>1Yqc3?zSE&!}*nxmjcGdyV~GB>PAn^
zZR3wBj(g(A2OfD5+G-Q+PK{Jsp^ut*dZ!r2hpGNVLTw%%*xa90V?M~eJ2Fo+qxsyy
zs&(52Ef1)g^kV(F*z^9cU}B_-7fi-I6;dz1b+T#e38nuWFsUGDq25l6W3J7f<1gJ;
z-B`gBLU9+!!(cc{Q{+VeApZqGyEe4VnzstrT1ZKJWJy27k?K41ygNc9t8;#6vPEW#
zxfN?@AfV`?vIjU<82@1^Hp{T8k}pfwEh&8^U7hOs*K_R5e59-O5Y=Roi5$d(k6%RB
z<IipYZl#`(H;ouSg;Z`56qcieY@4>{n*CWJx)ut0`HV&H6eE$VOZ-sBffby(Hy6;P
zi*NK}Ng=jU3u>%0o5KRK^w|)l&1siR?v1RcW2BclcriD?WK^MMi*|t@_de%ky7>49
zX8V(gn5?3zW{N<46T4WaWj`HlMnREBZ+}WHyWWSHN%`Gx^u!YHt8Mt&%<<zThFZ{T
zL$nL?myHZ99c|e9a9<K-(L3Df(bxx1v_DF}nTnrC6(>NXO`G)ISu^+GJa#C%UIYw-
zy(^oQuRTQM8$GQc>91IrJQ?*dU~f?)w0F$voLn&tI+b?Ejs3cOulmuxFj!#L#|^MF
zIX)sE+7g)BD<+MKdnYajKBL8K`u0VEJt36Z2Mo<x@CDIYG{(7(Xs#1p3^=1i+sb~N
zkTb^xy0)ksI}nx|8p90^P5@w(3?{bZ44VV>xB8X!Pbs?kP(Gc7$YfUFG%nJiUCMY?
zUkwkzUM@AYkN72h%O>N57~{>~kHqcJM9h8L*7@!NiYEznOPUpebzX!b)YksTUe;sU
zEH_U3nADad#LKH@$j+jL9dhuDTDer2cE*740J{gcYxxn&nW!z4GV9W=^$QInx&)%P
zWm)rAr^Y>Zb&?qe2aD5b`L1jj(|<J)#2@7jU*t52kJa3p38QH%U6pT1$ZKdU8glQT
zWO_F35sK}(Ls*cnI+}-pvz}CxwHSww7ZTctsEZ&@1_<r(6IkE7qbcDr-%vGaVr7P;
zXU4N9*y<p-YsiSYgx_TimBW^kOZ#H;c~yoymeipfdLd27Pgj|mXl<x6cBfaON=6~V
zcA4^m-_}HocHuMIx<?Fqg;y(g*&s#B3PU@o(YNrwa>pDls}u@I=+=Md4N44(zb8dE
zjc6F0zLRAAi*ak`?#Qx-FN%+lwyVzm6`Mz|HF0b57gM|iQx?n_eKcKPh`Y8!Y=D0r
z`aQUv?u!;jVSeHT(CT*$I%DrTok@R8I|?>_&G#xMeWU9CV(KqXp9ts+6k;*x9~()k
zb|;*T9|KA*wOF*jIy$`+;UcKbyqD23;BMRy`szRQ+!0IDRE<j4S&?d^3+aaK*wkQ6
z?W9I@=tnrV4ejOzb#YIK(bVjrOtaRfvbC~8Ovxf={0n{;6eG#v?qA7ERA2><!LxU~
zjS!R4Nd;6k(%k^-H}2}1`<qoq95%pg(;%?OgDzhYTUaO&MuSue#yB`jzS#F~s=foD
z3afIpy@UsqOaQeF@f%6g92_kYf45-)F4Q_UbQhNN{Yx1+4}OG)K8d%Mo0J?V7TRgl
z5)0syrdcp$cjMot2Qfx9qtHfimsg?AJYr>JJ!_dX%T(kU>J?cYz5&qBsxir&GxH&B
zOW1s-Wf2Od2o=Al*c!RZN{elYgYK`*T=syCM@-!KzQgY1IAMKXOS!tq(?>uRX+~J8
zn~R=&yw9i!lFJYx-20QR<7dvkH(M<MhPtL5&ZjLmxGG&vzB7p3ofCO}kXpLe#*jU=
zW&iOt4!`8UqhHLH8-5R#W6hfta1yj-J+ccB1A!io6@lvo2pHX?ZZmr@30OOe$Jer+
z<p=7$Ufk@wG&zm4auDyG+ToswrO=ZWol>@}Z6kUpHNv{-Qp~Yy#9Gd3W$K$hnR2sH
z9p>zRSAMxD7yQBbsx`<Dwxulg6a*b)?7-BJgBu>#dfL=dCOc>KZ)6Z1obY8O2b@tZ
zsqVG2$*SKOjT}qjk4^E8ou}8}3OS>?)b*arfk$ZG%bfO;IvlgfEFK^2-SLZ4k!9>~
z;SPllP95K+AVlu)f!$2?q+5T0Y}ceRI}1YV1)^Zwo^qZSw%Ks#9F#EHexV3~*GCWU
zg4f0HFw31~QkSH68wx2j(1>{G9%A(1P-HvKWcNqY@8(IDcD-K#An<wULo%xHoqJtP
zZtwL8eZLkr)ByN<4`hH3@Te{nRu@y32_^O^46N0mGn$Gm1%R~ZUA~SZV%WvSjAWjF
z8!>-a4pBE_9uTP;wJtjOzvUH}F3$DRH~c){VY#9i`8h1b*I@Nk%l7e)&NZE&oXAYg
z|9AmrLSx6-N2W?Uzae0AjEZoT#m=#JuTx?+B$@l99OnY|%7W2!#iqw{LA(#Tq)wSX
zSe>f;!gq+5P5Ki!e1AydqL_M-W!Z?l+>0G=9?gLh<HGCp($20)>8CmF1NbO#^`|cU
zfBD*$TpylM-r8m<Sx_EmD77L$ykePkf;ZNG+#_&d_rF+=SaKVcZCpN7HRP)NJ0Ew;
z#}M!Fsx~w@vY(LHe2{+acr(r}*gaD(q~DK(CIsO<0Qd~A`-#neSqe^uOBO|hAkiDx
z=^01qf4>KUKc9Z>Y0w{v*gNPI$3i#yF!nv?8UFm&m;UYFSuA}1Gpl|5gPHRGmz(bX
z|Fw?B$EW|Y8AuqWrkI+1n)pBm(j2}kMBcSCpxUn<`f{p6@G;FpiS_e;W%pTs<y_W8
z3!hVCe6f_r^J&^UV@{rd_<Z%>O?{C(EqFM<%5gu+<kHbI>u>GihW=((&n}|c^gcI^
z^i2oeFQiq9-|Wav^oFK@2KR?|64L6|i8qG-b#Ht=c$4h>@4K@x^Dpy*8FLAJk05zo
z)8lz>`bj~-yxUriUOEDnO0TZXex|n~e@)QXv){M>(9ik!76oCqAj#|aKZESzYGvQ?
zE-EY6=`3)`OMV7+i-lQ6s}vm`b<2DW|MnRK1rLg*y5CHaBIFw&^?ktW%Yt=m0>caq
zB#qO8p8n*tP9(16^~A}h6sZEWh2nJN-Isi)5ud|vUffuAx*tg|%xkdpcBX)X%qkj-
zP$|~LlVPIF*m@cLhHMm5Iq}Ogn&*jXW9sO<A@h2%ZRX=~DGg&>af1khdIQbB%^e?<
zxcU=1$-^Q)-Bf0EE}iGj^$s^1W@C!EM{)Z{q8mq-&?)aKUCEu|e-c!x->~21V4|dc
z`{aG~t<4yV=bHb7<$ou$bQgIk`tT9W4~>zc&k7S|et(8$o7-PJy~mk0prJ+dO($AM
z^b<tuF(VbV07d90->*6(Kj>y}8QS+e_F$tCN#0e{ocP2}>RLdg!0|@(ewXpnxX3W2
z1de0wPxOjhcfs*0MM_Wdyru%dc&7)Mbgd?kGqWi@v!>j%joNg*m@hOv^PAJBJe*n3
z3@>e2dRi|<PKmon(;nHx3Jt|&k+8djAQ<o4D39oNPnVF>UR+-DPZ~j8dLU%&`PE?`
zP(<g8L>QHnFh8*eo)<Q<z(SxnS?yt479{seCyMW&o3k9c`0>ht-Sunqb#r+aOpkhb
z-)+-9O)vaa;Z22*myf_gR~~r@Y)k@iYKf5+2LTMF^S4k^7mszn?A(pY{#M#V|LyG3
zR8e!_Yh@_VC?`dyRU_{G<5#UI>>4Ux$zrqj;B^(1bp44BFG6hZG?8F?R{P+u<e$Dt
zy@_~B4wUNDA$jxUPS3*=Z<Fdg?gx805s}X{O~Tw|6l2(m&A{6m8q~MVayfb|!rw@S
zH8~Dn4=7uB(Pn@lqhb9_?cjt)qb3k<|H0oSFjP^pP_SLWr{Qr7V~%dFmvGeH+x-VS
zMIM(<_>SQVbVX9Kdtrn`14y=!f(`#!@9?zD&DJ-i5s8`wUD~<%_&O1}$kMew3Ycw9
z$ir|p4n8vw(QGDu>F)aI%zJGC?c**=l|Ce&dH5pqaGDM5NxO$%>F?6vwbj48L>9ly
zW{H@B-|(wbWIEePu92*fJ^6h3A`$+9;KzIJDS~(lSIIS-B1W#pU^K5KNVXKMW!0s~
zoyea4J5G=jqJ-6(MVtTO(H!6<1al`i-W?0pOYBj~Y-V6DlP}lNyJSY(?|HbLOW(Qf
z@Ig|!odBzYPmg3R_Uq^EG46L|YJ72cpj7aKw&r`h()-k#w5jwI9cu}{Uka)WPU!%2
zES#VI?jq#eeF`MQ&ua5lZAH0L674g@S$#g2j;cw(_rcqIOtscT<%V6w+t%#7Ruq;y
zy!0024=Ddch)~mFv~Th;@taX3Kd(2AoM_fIH&wjhQPM2RXyYswDeNK5N*s5#b+D>W
zN9_)#tqSTaW+NlMUrTjy0FzD3X%KBGQ#(q`!Js2TYmG&90B?0f7Hyn)`n#y#O;Hm(
zIGol6d@Y0|gy(^H-s}b257xRL%wHT=-`KTaSlAQABcp)vTDZH@jYI~qs8R)FPIed_
z8Tngsqu7a&>8b~NIOk7EJJ#z)z;f*`-M*P;a|5C?#WhwwO$XVZCjti)_dZaNy*}~*
zlJ(7O;UDgIO9dN9qt5IjspJQ|w(b~Ryj&I%QPqC6>K@8@pln~1tjoG-0~8xF7yS8n
znBqNc^C;EcB>^<8-O_L<C#2mJW$q4qA3vD)rdBn6Ws@_s2-7VU{MXDg(nYy^m>-1z
z;0-i@YJ-_-L`_Pv=|f^V^vdVz`rLN&*(Q%i`2DS<%IV0IYeE!fZ9`W~f#n|^d@@+i
zo+Y}tV`o;}4(6Q3q?vLu(YIVd>U(Q~ti!^Yuo%;plpiA9p6~uE3)UJ_jr(3|JEI`^
zL)*@hZFwM0@qKk(Gyt!xB%jXXtxI~lA+!rGfV)=<bitjd$9PV<P@KQRS<x8m;c3ve
zyH-89CzHDf;(Y*OA*sA*sp*g1gL$+<o~>b9_DC96Ui`}~ZqOi=xX!h#@JLmv?Uc*<
zDE^1t)IL<RcqaJyadR@k<x8QLQd1MAk55FK%u?+Lk5fN&JsP_4Jk*t6p0j3yOS`ao
zeUB@-Aw%^p1qCuxRAtB{q3bwi<G$=aeBb5kp1WM6)*11<ea%IqpVgqlJAd!B=3r$>
z%bByTZ>AkINjLe)rwh*CJJZnNy+$=qFf!THZ)@aVj*=s5m)-xZl9lPaUkJA%8AU%k
zlb;RzTK_)|4YbQW*d|A&h}aw}o-CP<-TE;Jstjfq&uIFN4aH8A{Et}kGt?I@DK$zr
zrZ#mPcnL~bNGx*uE@-Ay7ZPPzo6PGC#4=Y1)VPn5hdzNp-A68*6WcrV-{c!&V})q*
z)=H>m1?-j(F0>6?s^~^$?<)RZwyaKT{%Eq+>?9Yl_}bXS{hVL^;PdLoU<qtAa`OJ+
z4gxvO_`jtnUSy{I><%;8qyyJU#^-31AWM%%F*E=eb*_~#BG#Fp6kD!s{RMl%-DZ_h
zOr^i=^r?zpK;gZ62Hrx0$(MAkPxdJIRL5oCFpYiK#=7VrR)L+%?A4bGJwL#Ov>0^O
z_#u+hG@Ef>O`LyxLJB;S8RuzZPuG24xy>3o=FofMZ?_&G4fc>RBc_90i<fKvr{0wm
z@|%4yFXH$EPot+Q^g@&Q$c>-{6Pw_SZ3QDI?>PQ+H)3u3<Y|BztA*#a8T6oSX&bV1
zcl}EH7McUBl^F5d+P5Vb>BRs@&hb-H{h`4+@*~ot-e$Eyw-EW_2CV(Y!mq1x?$!S4
z)efKLaIW))yJ+SWV+CivbD{U!*?QjU#0*SP0s*-}X%U9DXX?Bv7<?tP)w?Tj!A8HK
z69)oJ3w?WyE0~){5t2+Wvu-(~0`$w9d%quF7I_p>1|v2FRj&mtN@UiwQw6PomSD}5
zpF=N|@eHTev*llysE3zm-oOE$40fwJyUEM*G{aU^2h^!uME8r*>8?G5qsIguR~-so
zTT?0fJh6dgFY*a;xM6PQ=awJlTx!BG!8%B{W&K!GmxVHZXLZr0mtgm&#6gY<|8Qt@
zTMmkS(e)!*KlPyKs%C4aFa)Y)`t!XiArF2VZ6W-59hqColj?1!IzOyK(x&tMZ3%VM
zZUUL+7<<`g$-Ld}Acv>wjzfltL--xRKG#)bd=FUty@^u<MIb?xu%V+!=)!?Kp|rO%
zh-6ldP?h-K@?WwklT_8U`WJNA^iXSw_}{Y92IBeuvZF+>bV{b@dQ}I*$M0iGJ2!6x
z{nexnEPwdr+gMbk33?0knP}e+$Zm^XK-jVDEu~bQtk4|xVQem(4-u0s2E<oqqY3M8
z?;#yoA3idOXjeQc7eXLxZo&AT-<Ta2Tu#12o)C$!x|gM|(jBo^2Uso=InyM8{YN%b
z7Rsz9$yn_mU>W8KZ6X3Mlb*eyDP#x~D5AGuKU*OaMlAkHdD17ffc?rGok0PW`%@H9
z7*aQyaXk0A?tcERir99hHr~;+mNsoF{>9!a?(q1&gO|6zvk7Mi`fFriD4c=X=x1n3
zC@Dfha_nvg0>abC@^f#dT7cY1E6KXDTv2l;lMpr<q1@orchZ_WNlf%tsvFO)OHP-D
zGGsU@>=>#EiPiJj+fJGmu24X|`}xz|KtYF%=dAIC9*??BID@fehHA6pB+Kl#iFkhR
zR$CF@QasBPD;x(e)F9bDxrzT?+x;WuA;Z#l@;)5v&vf9L)u|F)oN3Y~!Vl`SN5fL8
zE6Y(OihVA%pXD6pK*r~<TvYn1)8;J4AyFdYSBo_|Tbl|6*K+CWYq^vJ3P!!dtEHZr
zJEON<+L(V<F0=LtQ5!cGxfy%Aw?w0O>>T{|%48x{TFmRcF04M<j*b7<mK}gx?pyX+
zZA<)(XXTBdSBOf`X1uywCqB-h9r;v#1+HH|K2fxJKct4*M~b`&XqyM%Hx`pp=c9<R
zOMNe-F0RkUT>e&oM(H7Ev1{U#hcR%g`AxVx!<jSqC8ziB(`o|dfl@NdUJ~>dnmd-e
zrkO8q`+wUOLyPe9!zp3B78X#2N58Bt<X_2);aSeEnoOJTP!@QP#bWHQODL<yc-uxg
zKqq;xYDC*?VFZws%_~)jpJ*jINEOxKGJAdl7RcHrLR)5is?%cT`PIci#%z9?sO-uF
z$own7hS2i(hU)&WN}k%b*%Pr9_Zw**&rOGUYcYeUu|ic*%`UqTk2(U8VAb2KOru+=
z&1v8L=F}S;)&OZe)T|@)n%RQ=pqnDW6orNP%az^z@#$Q$^#kuS#i|zC_ZB0@M0S(o
z_nd^8D;{jOCRhp<<ros@rT33j@vR!|e~<#R{&Kkyx>{x@ffxRks|ejhpaa4@QBtkR
z-!U)8vw9Y<Zk<Q_9Hxkt^HN-_Wxtii+M<$0a1MXmxXv?AQVm>=NIj&OyAU=ZD?Jav
zs|n+j1^WU|#8V(A=Ac{ZF)QEbG0Glg>wM6dwkYjufwjEPrmbmXR-MOYrmBz-Aim(K
ztkB96z1-sBa+G~1^N4uI(8x#ibMc#dv&@hP7-D`RC%@3vTZRP-2jb$d*Yos8Oly-9
z5%MXIoZQ2c0vENSc&C6peSetrYA5t0$955cRsa^}%9p>)Eg?}&d-?+{gn3($SX@kx
zRRu|DeK?hT6LaI6cgl@5k&su>Y^EaN3<4Vc+De7JuPGoah?ulC_i^%aj0w>9cCC`=
ze*V`{4esrPlY5ayjJjvU6#dD?G^Hls!G^mpqlNL2uyl(~XrVTEhR>{yA+T3V$1R59
z_EDJ?g}wGo%&bzGRqA1<U}iSaxUrbC40U+7uJ16<Lhjh*i*N?kp+!HXg~2NOGvJNB
ztPUcwyzXeQ2TH22Tf*LR?H;p3QD%4;GoU7o7QH%|b1kPnj%73%o_1jxSdW42V-Q*3
zv3ZSdICswIhIjsF5!O7nvLGl7nxrl8-V<e|&}N!)HV2Snnv7W&z9<)L!lt-qTYVcL
z)2+=;JdryLRVLK~E~)5Wj>%Az3D8D$KHhtu+BvdTwQR?GsYO`2Qv<Iho$28?i2qXT
zRoZCfL8MFV5$I+s2o1$+KG?nOl6uE6{Q!tdfb}TRqPJP*rSmUxq9&O(Ua1jKZRpRL
zxvTPl#kp!$9mEh`y39L6CXcBv64)Sg{6EC8Z`(}P*x(FasvG!m$BAjn+iPiEEiah(
zw)h`MY|a<YBwjl2S8ny8ROTrA_c#w5>>De5oJyUVai1+EIJUi!%U;kE?`?M}aw5jn
z)E9US;fCMV)zlP?*Rsc~IF(cgL)04Y)<JwyrR03`3(0sknDW=i)NT4#j|qOx-%s_A
z@#m{b2<M@j>-TwDlJH1>qL?VeqI;0_E@StPY^ThBwq~1*kc*?0G;gNZqauEb{`jsz
zle`Ky?vDO+vI)1C2oe}5Nr5`Y{uVAU`0^2;?%xANy#Hd+$(9&-AFnc8i-!dVcyCN%
z9@_U_U#V$hN}k_%hfmjY^UR!4yo5?;vb)Sw!Emjij#}KTH5AH_Q8;SDg`j_3M)279
znFGKDJ4PfT2ms#Ey=|bBo4v9<^pY8tdzVRRJZjTfReL)Vg*+jMq;fsmdf8aW>mEyI
z;zSxzA<suHz_BeG-&a?vc4X{Y1&q}o#+%9dHp$zf?iHSIlaD0l$nKB{`=Q*?uJ=cG
z0AO2SS_G|fcmTjNwGk(#2&5^3tKG#Amxi{fmet(89R1}ow7H#SyLN%vkc*0ES^OuF
z0gyelgAr8*c`@}FWUUl%%9sN`8uCmaKRL_Rj{g9I-CknGXL6T2?0CxNHT_nLrL?I1
zd=CA?j4DV53_yj4Uw$^8%cBu8m`NcfH^~K{3iRT2SaF*RQ(v6>XgGe#sgEuBJCL~t
z{(~}^i}McN!PY~WH&I44m_zUXA<wJ+&gIrj$s9&T37N^J0VFXo>>tCh^?&g90P0m9
zee96(*!7kHL;FR}tZ~Gb@_U<3)3y`Ty>cvT17^<c!5*5y?{$VBhPvtEXLZ2mjUn4P
zcI0VmDKjp;FWtc$I|qa73lyRFS4^ZeR1V12mr}p`6@C$M?C7}}S{g;1z)b{G*757I
zKR28@4_mWHTTy&uAYFR)Qxgk1Ka~4W0q=lcA>XvOD+Z6qn#O#{jpTl?FKPd{K3wzI
zmXEWCL^w><xAZmgqa=rXn0Lw@N_U6WGBS!eORBwR-GC1{s&_bJ$fP)W&T}eu?rPZI
z{Xj*jzkI@a`%YG<s(jt4x)MFI3F_`&VWE#!G&D5)jZ}TFq%E*YWiZwT%YeziHotv<
zpj-JqNa#M5?yteUvc(+5hHYj%f-()ux-UUMz-;sq4B)&L6r9ho6MnGR5E~X2hNzU*
z%6(BJRXB0*{waCnpwPRoapc6&g?Fbb{D}r;^*#{OHkS)0episBRO%!2Z5vl(MFa&k
zj<d1U)6bX>xTL<MiBnY|4=25=!3%SmKY3wLlvX;%EXMr+O~d|AUp_ByuhmXjAGCLr
zC+yCqLF^$-*Zb5i>pRaT?2@0(Ue@y7ChEB##`Hb@Ug$W@Mlaaw^#q2;TzI>Jq7wX6
zdr+eFpIO751xaR<wahW@Ny~+Evh|5Tv%zJ9=Fe3ivGFAj8nk46ay(LG0GL_tEaEZv
zOyz9qL5j7EC&sxyJG=9k1rYdIeWl_jNCLm@$LU&ZUs<5Qs3L>_Yne$r>x(@Q_tpcf
ztak!=T-K@DJ9<K6tB(dF>WvJ2pF-oEHXASYXuYp+Tb;1kkO*_;B<v^;9rl>a;Oc0Q
z@9JGtfp%1lLqv(p#qQ^6;O~<bw!W@#qm<;8iqmoA<0J)&^Gckk3C>NH<-#a&dKJg-
z{5cFXYq_K2jCc!|w`94BmHmm!@9oKNv-eGTMnK4a1wV4#xe_MBRrF1q-2JCvzJAfd
zt~^j(TL;66^SU_24YY3#LNztyP^O7wg8}D|W+m>Lu&{%}Ro9^nY6dzi+r|Vg-C)`L
z=xrEr_EF7cC8S?b85bR(PHW=vGs<+Hv0@V?7qwdY^Af!pK8hRN2Q`gue7o_Z>Wq$B
z3qp4?4!Mm@=83|o$74Fxj<m9fOJ2)iSLl9^U?f8HqI&vx4K85DK>`@wbJo#rf%v^$
zRI~Gsfl$yl=XJk(teA97?+Xw#824fM&xONE=JLW}7Ey=mH;iI()0sDF!1=;(#;K(q
za#Z|~47VHGk3IGXfmED!fXd)I$S)SSM;7a`Jp0lqr#mQemX$wPrs8T))32~D8mxXc
zG1yDza&qu!a=|B%>E@#-T=8%buCPO~@)I9Zr0&I)-lO@Hs8Ow^GrKM<bX{yyLf5xq
z!0zM*owoH6EL7d$G%6<X5ncPV$ts8ezQ*1H*<8pBqmsMms2+{`?l;mCMdyRVAbrlp
z6`h*PKEBO;%StU4amJgDTuUL>tCb1}|IHUhmj8HDFI3?v2m#(naja3Y{yL<U0RHm9
z&T>L4lST8go9JFgqmseSw?w~aeQghd?~}V@jNnwO8<KZ=gzKy_H%2m*J$?M&K<-b{
zE7mFm3?$>IlEK@edhX#hxid{KQ}y!SjPXp;M||*QPn+e4QY!tYiEJ9{JcxQ+<C3k_
zA`cQx4R9Zz<<{I4wG(P-;!r~7?gVN1HDbxq*-9pUtYrBxulm54S$wx2J)onj+-vl~
zwz$K7U;HUZAtOfLs@qE^KC${p9wg`U)C|!^NsP_&o<;!!+Mb^)><!qhzyU`)_gUNC
zKk}|=9z^YWvTs6xLvAO<p9s|r(Uq&7i;hzXQO1LC7l*E3YOFo)a=GK#>i5N-v3GIq
z>dg(nC8ddgk+BoXIG3Gexl&y7a65$MWR2ff3O{$~rH_BUe>#Ds)dG8N>&BW*XZ|mp
zRfEKFV?vwIB6GPwvx`)>W%s5Afcw>%^%MTq*|kns)Uj6PG)UG0H@0FpvAnNF#e6ii
z`TU7e9EYu2)8j<5th*$Kebc2!Z1^SzA7`Cv`f#vsmvY|9$5e6L(aBPZo4m;?s|TIr
zYL@ZV_uUWM$JN|Z_A)){2m|R_ucq?M<EoyYmp?)q9n{#Yaqm3%S%mKzv)qr)xxaB7
zJn@ry6L&~+?w-Jb&rm7O-B{>9hoaiy;On38pRECW?f)K57%<>3_<NYfE3f$XEQgYt
z<u>=f4s9#QnXikE{|qPQ=KuX;-1jEo|0YVc?{S+$sX5*M^f#A5tM|7kIsyDqw)4(J
zL0iRyti7peFb0jRX>9D@*m#Ua9zlvv50TaqN9d>cG#&cz1^I5MXK1+T1wk(xX+zsx
zb|#+4VK2<Dzd!k)9l?Zr&z>#6)s<^Ot*GNKvE`zyOyaPm3q&ujt{`)#jhfwe?&GgL
zx;StG`7QTd?#u029TwqBTFZD{;R6#7k3@W-4n4#iCm7TM4`NZ{^ZIYkDzny&{oypc
z4LRHPhWK(%Pfr^jft+Mo^kKe7Mc>nFoL1%JF1PdBD#AH-SdP~tSbsXLW-{+B&)3Cs
z*v1CnD~U7_XsWr|PB(`ANo}j>i$QJY$6ox2SNB|Us?0V#pFyG)ywqGAsYU|MwTo;(
zxO9J*;?ZH_k>h{T$HzMg4Z-<gPgrp-m8I-T%~6>12FNBWcAZtnz@RlhR1t>1)3%Is
z{04J-JWDqtBu|zG%UI_3e3w#`llfiNyKYl50jdrH{V@9>`C>+fa=&sHeP?LZfN&2Z
z1Iey$`?4dfE2z)Q_**Aojeisc1y8U$+1N-3x&;F5rUL$%R0p;lJ*bQ0SkAydCb%C2
z>F0kEWo%(<8;Kuj@lP=6Isg`W`&dD(a5ZaCXOsZ;t3+ViO=I5-U;v8PA9`<Xnf0V^
z6)hIQD%a;{9oUTujfF1_0@r@2EskIkj{NtMGcE>ay<L5vk-{s!TcxeP-pS$47x{oV
zP7wBwur=u9F_*DVC{im~@^T8-Gl;0HB6mKg;ez1q6oCkhrF=8kLIs9-hKlL3H?PQ?
zPP^`zY(6tWVU;s35qFqm-XKuPs6*`}RJ7rt*I~K1K-;OviX0Vjtd<XI`pA_7&>dwA
z{C!#qEW(m>Fc@7eMDgL~L4{ZnedBIbnPg_9Bw7k|b>`Q4yfw%~06?>2FLqYT@UzGb
zMv}jkivouSCb~1c*EO@G18vTivanAgSmZ_*A(A7ptN!4K(W}qa>YhGm89or|)@a)m
zQy&$9bzr{;P-bKl<QihhCJon6YoA+BhUi+N2Gx(3$ON3P1Z#w|17gh;wE>9UN?k*_
zHwU9e(8a}8GG539r7;M~cy(0=<s*ct1w;TPF%B#K2lTO!OJh_eL59!CUTY)NZ~=o!
zaChU602^O)(dp>vZFGf^`Csl7`58V_nlQ9lZ4Z#SSPS((bjudO2hfgVJ-lkNrWK3P
z2H;|{j~hUNDPG1n^LE69x+FH<$(cmQP_nPPF8er?o#3b)%bX>Ll2XLM8zfto>*f23
zfuK*_`rjRS=ieCxz{S9Pgw{susjOMBMIee%jW2sW(FyBk<bPF(>eL>AU;ftiM$X0h
z)L;d9i;OpR8YFn1LA3?4{*)^kL7lKyB)mnC(FSZly17$($2Z1#r%k$6_frRO`?*A`
z=O3A(EEFe~bRWtGL&62_iYgj?5Bek6iY9UbVd*R7elCmMk~lH&tR7v5GU2YCs$~YV
zE3Pf+L;gTm1HkMZ^RwBTe_Hx{4xF$V5v%BX>OlB?2;lOe`pwc(UZ$(_SX8=s1gUqj
zwi=dJ86kmMgdUe_xBspYkR5?mGDAxiDqDMgTZ0sim((v7p~RB#OA#43hV`TXcV);z
zpfw5^_EQWTN*7?-Xv1GN36vSusAT4v+c4CT^9+dqd4Ca^cLCq#y}CSevY#7x{~s>^
zz;&a4KSO`Do)MxQ=eW?-bratc!rZdaOvIE-g3bvX%T)pB^XjUqDy#>79`d@$OH=tt
z4^aazl(VE{7+<0Lp?!dh8YF;<>1Glo%lh0m-8*Of8mn9Vd(10x5@gH`OP<?z6~PW-
z++L9a*#IFjreG1EG==&V0~aN6hqm|buNPU^QsmmPUxu7t!ewl16*(U(=u7@!I>L{P
zBqV6s?dW7>;2xL>M*s>CUF2w3*bE%(^FHM21NZ}OP{J>u5w<wj`d>resPQ{iZHih$
z&<+3$ZxXm|h<(wpTf3eG*OtEixy8p*oyB+~RbnNKeemk^?2h7|Vvv_4A_~srx4y_k
z8pOW3RvZBtVYC*`k|9whj&<FbTSwR%KQ>3~>yEg5s+2({U&)Zkxf%a#0QD{sLxzo6
zvSYmDP7kE|K%Q|DE16+n<-xw<Oz%%O0H?pY`P#gb;2oy*-gHT^r+<<I`-?>w`oJ0M
zQ+`x#8{3`%@=oVQN@)=>tdz*3RY+gmH;$c|>-)RI`K&TytH4^#Wow_OEDI*1{;}P>
zYRL7gi(^esNW)@%L3Cmw?MOEEK`iEDcWkUxl`HroifyoE8{zo}1%#@DF651_E_pM6
z7XWox<jqygz@4IYctq=|eNes(Zp&V#X(w<t%OrCDfc13fcLSj1W?2SA*z3<XY9>Ql
z`1w4v?CL&P7T141>&(a$cnVNn1%-Nz$`0+o6@SQ)R}G+6%bYKF`n*4Ow;LPjhK0^1
z9g`qtjdGR)!<=N#S(FvC^RWJz(AlM=L^s~5s{#tRG{4&goHs+4ASt+@6uFA3X5KjA
zg8bS8Ay{}bHuk%@8Y73UNBuPE>v6vRI@kgPs`j-r{Lg73j4`A@;QfvkhjwgR;<Izv
z(KipA-ANn8H5MBkW^X1XC;2p<n+KjA*lUqXA{j#xjpHr%Q%o|YS)KQrX1z}(0mzvs
z8O**CxE1w~3wz}xS?vO;Nk8)XXl{z{4Qnc`WsvdNZXX#&FlXskzXb%GWV#~rVYavp
z8Vh6H^hK9+`?+4n@NfGU`zGSQ(vmMqC03yO-*(Ha*_D}OyuVTl;4)wp2Om+XJvrKd
z!Q^5beq}!0brrO<jN7Rx7>kP69#(4dw_*6XTGh4L#G?&BuO>^n6UyfbNS|HAGhOYB
z0uVJdOo1EQ^=>AIf7Do#*p=eGw@hZXRMc}Qc?B^?K+3bMEpMA7e%v%v!%gdFjA}`I
z3`~~@th-s}TnJ}hk@L^UkMLaZ1dBkVx*v>hYO)0Ga>GC~TXaWO&wEof90Jcu$tjsP
zBfG7)v!uwLdv1vyIqI!Rs%2ksu7WV+3{|cE#|vs+vkk_c;KXUoe&L@rkd3Jwq>iPB
zthub~1~+5}8x1%1F$>`De^zPA*us$1*peF+>wI-_r%1}$`yzH`>(!roVAcp@_rQTv
z@-@DqMF+L)#XrZ14L+Ocqhm&UKO5bh8N>~aEIY@knS72s7K%m*7>=;D-8-YePS%6Q
zkPGpnuG~H!SCnX`G0R4zxy0=7xM|jPP)Pg@ijxjPY4STdfpIYGnV^#_My&l35r1X2
zbC0qjE1lvQQBqQp<Sd3VR`y&hOD-S<7!W9)4Xs}sY47A6_4Kx<D>gq)g!$CnsRUv)
zS^V}(Gi2IY#nu0qwx683@nv69v!LmWp?F6IpHtd>mJLP$VBh-W=;?GH3$%2!efS$)
z7HrPickRFxQaR;wxUH*(UDrnKiWq9KqV8v;54(^Kh3g2g{+XlJo~SRcG_{wOOEx?t
zJnlb%G8sq>XfTfWe8)Z<W%duXZoj0*7m~aP(9H6{*b)U8g<R3D_?_F!oX?rd1nk~L
zz|@XY4U=QxyY^gwRjmAVVf~NJOpUx9u4_~uKu39U5l>Zfw#n7_d&p%Lc@2^m%KwtD
z)b1xr$c$^8i$x#7@tAMrgJib<DJg5<#d^%M+LOcB3#j!dylb@5kkmKA0sj(B*G>Fp
zPO$j~C-iFO%2Z8D?EZP+n=~I-rkD42ZUi3bE$x;36X&i72PNY%u{jQlVFEatRF>va
zT%)_vpdsr9>6W%^d=VxP$DovJP-~0dnev&}=boO|NlBiN1@Ne&->e@H57oafyL#8*
z34v(k`ZQyC1)kL_vPv3wQStHdIj?mDGg9{Zduq4Lqn|F1G8y5)!Xd!EkwdAawzl>c
zA(c!=7#ZEg1vD0ghq2_<j=5oBx6hAON3YLJOiZX!5S-5sBLlB*hV(VD*pULLuPqN+
zbK!ycvK;n{KK{gYDgXboiXCvAP}zeYXOnFepWTU5CU_M;5X~EDzrv?F`}>+KFk3+R
z>)r=*fBF1HQwoX}ypekTqgOK=xn7`*|4(z^HRgA)SE-o^*30Hlq8Go}jCcTTtC%@R
z;vL@>{TzCoZcnc<$*)AB(BGTSp5|+X0ls|RxD%rg`9sPgDOG)2Vt^*^GdIusgXku4
z<<W_RGZACX!|VLJuk$~!AaH4WU6Vn~rd@WofHZzII&g$ui~UR8!$dO`nw}4O>=pas
zmSYBFFY+d)Unq(fYCOCD`d*l8Ce}i}@f)SB)&{~T>0sQdyP|IjnqpU{LX)_yB21Ln
z75=E0TB_h?-N|NvvZ$WN8~a@4a*6r3BM%lQ9>wf#R(Z4tn@HKb<uAJ}6(iNt7>En2
zZAMHyLg*#utZ*syx__a5SSL>UHRj=zF98CZVll=BOf``FIQBg?VLOI8E|6A=LMp!W
zj@5_QNT_}LZug>(2fk8XvVR*s^{WKl*RD4#I57N5AM)-xw)?$FJ$HU3Z1-(%)+XAj
z(|Dp{;vX}q{7)7-T>F~E6jlTqjhaRAn)s9z${+9eR-_2oO))4i_u9Ad`ROBm4!tjY
z7y3>(Cuwy(?I&rsZR7~RbPh~kx1c?+<hbZK@DEyaSN^n|0O}H}_f@biG{rIa<CJAW
z={WahaL~*07f%l+)!BApNO>uE-rX<_c9q;HQET4$^qV8}#~ZJymcrprG>l>um-i$~
zVkVxoKgNf>U(_`{Z4ul_ip;yYY4xVyT^r}uMm{#4o|+(GzW1en=#lr?a#z)#itpA`
z32W!+#?m7dzH^X=GxR9Lyu9(^L!lnY%ph4v(8si|-@o#D&{L+-h|79py?<gA#djux
z*4lk?O7Lex_}(P1tOOn)L<#?N$#xMX3khLUG)O&QAJ&&reKb^wd3l44gSAj)B3g8q
z1fJdyUNu#yA7)hkoF=*0X}h3>zvO+agg>jqkJoPH?f8}=JNlOa_iJ0bNl`A`!{}v>
z^ZOo!H3jhv2SqDAyzkKeyvv_tlJqIV<o>P$Bdwm{!zO|lvsbwv^5ch^7ENyGTZJq-
zESf=d@6sIbUnMxcOd)%e{xPMC%`z_hPe_m;`9Bh>gOAeHNO_+%cYpe>{bX;-Ca_T2
z>7U|v`edTkZA<}0_+FzT_WJHE{_Z6wf+9@VjZ5wllXm|ei71RuU?UGQDJPx@clb@y
zCG&`&NpP`M;*nq`5ly-w5%kjw_V31}M~=65ZuC3i8n*=LUN#Gn#5u;WRlNO2s+LHD
zjeVz{;gcoL?aw?yx)9lPRx#$uBd$HSA8O5F19dFaL4u0($Ejf!H$In$n(c4mWe4}r
zzl>8&ykPdn<U=)re-r~0Y{3A?&PX(x@P3d|td>B*+sL5Lu96mGyMiM@?*EjE<i3p|
zjpU{?onsKp%nZW%I`uvc^-Wz^$P+P5Su`A#zv<c(^c`q%M@3PVD1MRpIZ>E!m{P>K
z^Boli1kqBV#vY4!#i-Vg_AAXp)kl2eJ6b9A|4)108P(*vtt%)UloC2fk=}&R6hwMS
zOn?9i(v(gDfdvFm5JfuDLkmGvNC+SXkPZ<GC>@l9A|<e-r~!dx0T!aJ^M$?d9p{{J
z@7`mNbIzYTZvK2@d>LPP=R4mypZUz^8}A(}#O-xihk6fX)}&5r%3Z34a0XPf|3&f5
zJBS{*$w#ML`Kr$G)=5$q<1U+Abzpf(j}&0Yu)(A8UMvvoR<KWIjB@3oiXi;9CyY!Z
zby|NH1rx;$#cNnnQRy+~=5-#%2J1^qa-*rT4v(j+ow;Y)+v=v*K?L@$S~HNh);ZfY
zx<cKIN-J$PNsLT>-GiuHB)U`-i;F-(ksV0iS52^b{i;i+1q045``&wVRyw*b(&al>
zv1U7ass!B!-J<z2=j2NNCklk}QiUt1GQsh|oVX)>jPX@**w8Tqh|@26Ib?49hHO-q
zgHWF^Igq`jTlZ~c622K!==iziFpAQ@4ew^T8;0@E95w3G6nS0{23QTHPMm1q53rP2
zGotn9hYhvYmG6xkZ~yVe^2FoL&d!;O0LIRJ{|5?!)wA`(Pq8O+Jx{qAe<W4VKC@<C
z?FtDi>8NgH6_JdrgU>$)04bxLnXn*u0&8((UZ7&tJqxV{8uAt8Zk7|iRH{0#)G4ZQ
zLk{qZzy6lkFbC<b7qD9#hcr+uGlv0T4B&<SDO2@N=&yQ?-ELMOjSY?8Goj2}%vTtj
zc-NP{*Ub%_6FqdvG#Ps)7smL0_KEx9Gyf}z?(nVu0Vmf=&L+}`CeXcZd1?aMD0m{6
z54RO<&E&Pz4@c772N%zCPQr}7on%@OAP>D=%>YabF+$N!e#jKlz2~2@FJJ65SZjLq
z+!!ZMz{6skl$k-m<hG8O!%&h`YGg4~?ujRV&sO4RP-H6WJAaD?_nM-k&0NXec?hgU
zgIS%s-0{6Xs;YYoq;-@?QVwF-q@v+2_4#JiKJQX<tl%m)C@BS5X|H)4&CI>=gZF^k
z>s1qq7q}?Vir43!&9@J?sGK8CJraPk^I~}u84pJC1$QoG1?s;hF8Q^q2E3Kl9&<(N
zNxJZe)AT&lO#&7+v8!r&?r>DZaFg-N7xeD?@H8%vZ`GM3|3Ux0cHjouS#|mzdTQ6H
z$o@zAvn7B%cCpOZHKRH>0O~!GbT0LVotSW@Mc~p0SuY;`KHnVov%c+hX6FZS{$_Y>
z`=}!5^<G)oY~L?F+Un=vV!(+z*I8L3BQkFoDCww9{8TH~#+$hej>Un&K6+hJR0nZo
z{^C2UM>!+emhYmO^Kbt<)4RiLj`+{qxV4{WKHRi)s%+FL7b)R*Y|x3*B8l&yVZ^C9
z)S_ed?H_$oxtvqLO|$JXYS)fLg5*E)D*I1mBxV;Sz5z-PEN0*kNR<qV#ZqA0`lw<l
z7NI!uuTW?0@(`_&PBr3_Cz_l*lk37?%Gp$@35tGT=pZ#a#t*YL@FD{uBEZJtlV1>6
zE`?%ZuQ_Mts$i73@mPRmFO=ol!l<FU31SG&8s0P^FqrC(mJFFsO8NC0c*CsBUhKHd
zxMj_Ovw_bUE|qDIR`=3p>!4(=K82OY*8~3AzIby3X<hsr)5crJn3OW3gcIntK^iTi
z`14PL22;h6B`k8UP?^Y%3sIb1D)MeJA<|BdE)B++;B$av5mC3C??^9g_8-*Ka2i7Y
zK<0LefhBSvJUU&z#lDRfD6`6g!Wp4V--%6OLhIkD-mVr{;&sZk&+^;P{yLur5U}2^
z0YS4VVf7AAy=#Ky<>@Ke5jC%B-#!pIOLFh%H{O2IXL-Wp<?`~fx2rXlXpHZxSA=wL
zg0bG|FBI6oBmzsJES{XG$>=7oXwhGUaz-17gYTw+BH007g~X4&n*x@149mXn?TALW
zA6{UUyXc`}q_K<&L&C>J!EkE=Mf5k%?etVMcwP$FH;QRrdg0bX;5s5Djrp)SX=Xek
zZdNA@r>X&T@jx_wcNp}rqkGzKJtA}0|6~9>xYSo-<$4h_cx-Ai@z(D1P6Tlh+OU$L
z+5^3A|E?q~hifyk;JcT!guVFQ{G|GtvC@yxelJutD*`0&>Y{rerllhIrNFBVlyiC6
zfbOW+UN<kv@Uk$oh`q~n|M&-v;k1V~6w|9l5AGMMd<ef>jG=vT!K2p!5_cd6zcUy5
zO^7rU>QmBVNV>dXMs~m|@RqaujH`I3Uo6=n`OR=hzH#Z?y>~^34)_v)NfhWG4ujqh
z(Y6O9U@cJXo{aLWO6anj!kD!PzK-(|uE+GZ==sm73l%?f$r6}Qvb-^{DUq}2|MP(8
zTH~3K0l=`hypV$s`1b^r(xJxt?T_1U6`%<AIt@`>QPchRd?Kn}{636qr?-2Rxk7AP
z>tD_4m#&9)W{*|()o&r<F^bao;~p*XAZt)Px__nuQ=RQDysRRBM_o@sv1<J{6YUXF
z!g_Jr2EF-*&dwQ<yQYw}qEX0<F5}8m8J(%=j2-vz8!`{Qlr{qFKkB0}T1%~(jqw)G
z5F~ywePjIE*TmD3G;(R+f$;F;LCc-$pWLbIS9{LWyi<GELKc^2iOFgaU41Fp2u;#L
z&)p1QcL=uO9#zK&XQgyM8mKI))|)yg`=_eqw6&VJK6JVYZPs~HjtM?~YQ36V;yVn~
z1kfDzscYmMeU5Cy^GmyHK~0~<8|dZJ#j&lEVh!{?owm-=?`Rl@3%4*k184KtDjq0(
zK()KmF>jm4K7H}Z2g(^9W_zZU%vBLrsIUc=%3~DiV)Z<hrpfwtccl9vy-fmCvVP;S
zXj)=q5R97BVPa_z<``1#66c2{Iw+zM=ulo6rEeT8Ya^A=xf+BFHk?l^FMcv9g|Sva
z`;WE5uExuSn0bQ$?*QmCZ$JJvF-5=c#YHhaef}Huev`Gj*;-44MDHGbiY@ZKO@h_J
z$wGyrC`?^PWB9dD1C-+i+vI^C);#&gDjp9bfh100BkoIhp~#y3V}Yu)+7~L~jw44`
zl%}SOptoRPRH4iyG8;U-l<u2{0F#`3vJP5zqHB_s#)wwock{p1zd=6YsF2L@h&GxO
zSKwL+yB$Fol1*)LlY_>Eu%L#oX;(U`@`rv6?d`O$zpUh7Rw<|>&0EIm?-vKT7a6e|
zmKtj}-KphDqSukrH?z}Wy|`;XIh^ChPVU?I4G7mO(=xtm`z$mHeOq@qU~?y=L^Src
z(&nmyd~Luf?x*F%^@jNHnDzu~p4POZ>-&km;jj*@AH|?$KGqz_0Ac<>gNzzOI>lay
zi#w$xdTjN=#pRKqQH<R!LFYyh&P2~T2nC_w##5POQ5@MCb*B)M=7@I8WDV>yu21P3
zFJ8=r<oUP-YKqEB?upy#OH`jT&p*{rG}u_7BpEHf7C0~az%j%Tdho4Kx*hHOernIp
zF4psbcODm4#zTE>8Vf-)9m{^q+{^%O=QLPs#LEHaKH^gl`0N5%o3iDr<AC>E5}PF&
zDm{8cr!<*$Nj-i%XYNUG=akK;oxY$gb%P|z2pu?A4IN!uKrKj{b(t&5n29-)fg%aJ
zvsZ~Y%^$g+&^f-rZl?@W61Te8O<2_U_{7F#gBo5u$YNdz1KC5IWV2O22*s_0YU*Xz
zzI?a)T1mrEV|989QXCAvTEq&uuizRuVxJU?4TaU~$Syr<TpGZ<d0<%)7*WH+sZumD
z>YXZBt@6N8U5JezbmwK4Y9ahe4^aEr+&%h5Cqiq@=*mRJ{HWF<8#Bfg9F`}L8h`Ua
z5&=$AMdD7mEr|%0Uic&*v>@w;4_y5sX;G*x57eC@?`)_t0wqE3XrEdcq4(kSMHaXZ
zP^8?xb^vxOaQ=OOcR~^u(xA#4$7h&RrPil6U)8Y$tDLGXkbI+J1A^)s4XsriZAO%%
zy6hgi5vleKQNc(Xd|=AHbcl)2d#)DM%LYUV^3<~@mrsvn>%q%nMnY!95GZ9L(jZ=@
zccCHfSXeaOrw-o1-Q#{+May}~_eLB)j4`ENbjKR{O2T#8VF;n|0TRc>=p0aZIGXgD
ze!g6mBmw`JSCf6PQol$xo=Nd0_t(B9d3nY!&SnIv6XrCwe=LT{yM=dB&`mGW+HXp?
zU)Q1}h%z&?&EGq)gw(T1p)maC*--gWfxuJEJ81F3&nZp6N%Oqq&mUnU7J{^Fm5~-u
zJFR14G|4m<l&f#Cw&-{g@AB&uYagwY&~|i;)v!WED#<u(zH0QfXOtUJ{}cZ<II+zB
z=$$dGH6>U&pIVzyDx%bvS~WcsyqgZP#KnvhrBT$Qlw^5NFHyW+1|lsaRymX8>HdDV
z213$3Ie;BaT(&2kwa?FDEb?;=&wVAMqv;VwijP`9Uh>dpIM+`Gi`cX_xIa;-zS5|p
zw)-(wp0$5+rT_c1=VMsIeDzF4{^>@O*IuUOiJkbG*-hGg_M(TeajQ5m%7u{v|DMzP
z9qqt@W~b>SJ6VM!EP)Z!z)7HA%zr(hc{aYO5Pk200ey@j3jnQHW~UseabFdE@tdpA
zQ57#VFP&IBD;;GG?Go7BdX&D1c}sNP4%2z&Gki@iu%)03(PlRnLcI_e#lGudLUqdF
zyt?35RPVHq|KQlaFCaIv%8o^(T2L$XajfEyjxkvcXVp(l=yGu5Q<;{Ku(lbIOJ%tq
zTjS<O8D|0<Pdj^f$e!Yja&7Joh2jJ91N;jGddw|s3^q1#irM`eD-MlMV+#ccZNt{Z
zxJOGQ(;-=)WWGZ8082)H%+(zf?B0|!fBZ5`{#~tv?q>T(W$}ESt+wDi@ZhVWuYN`$
zCe-H7SF_%=dtBKgdJsH4C_y1TN~ZDk&Lmn}d?8$XZ)TA)V*LJ2Q6I~uPwtnsQa?&i
zVXooA>skJdAD!?#!RjAcVS^{3M*8bCHTv$9xv$$+fx^&t*GB9q*UiF(lIJ=^egHcP
zft~t$7SpWnu=dJ&@bt~@c7579%vr{N%US2zVv>J6u#gh2-I47$-w$>m)8r*CsagqC
zUxK!^_$)rnAz99~i6q0{pXcS)?B2-_t2P4_GuWfM$(QpQB4S}rC9crxv@~d_R|-4w
z2$xD-y7q$Me=5%Jv!Un1=1HR=+qO0EyOTlcHl_2hsy~M<WbPLb=EATtlPXpMsdE_?
z_0~E^mf6RyS@gI)aNNwdzK&CZ-40zKExLKUI>5&pZs|>n-sM^r*^Gp?xX7xtiE&7-
zkP@5ngBG$gxdV(`kcKfcsTvs`7}T3O5CCm<%<Ur3TSF)c<gL1Zu<!8ZkjNf#V<UGR
zy>4C_31GHpQnkU@YZrBgwu`4eUd-SLaPN~s;KJNqs@Oi35&#WLvNFi`;YOj(A-jz!
zede$>08*E>Uyq4R3^l7aQIc*`@j59eV-50{>G=K4kFodO)m|iiVPtL}UjjM`q^?tF
z1MAZDp?qkj9A>1g)<0fw$av0eK<%)4;i9L#SAXs;eE_)Mitrb+8K?z?trKBClTOTL
z#C6$LFD>5e{M2dgdEz5)2j{u)mpdh8tturH&x$%5J@$l$``0g`f(m0YBdNX%I$Z^r
zkSAZqjn931W2vE~wH194fF*=k8bF1j19&$sx)anbu>(E@zP}9a8f73)81P69=+*PF
z3ng;>+&#igku-SHR<5Co(q7P>jNXlwWE}t~1hOrbg^_Q63tD-j-a!q3#YkmlO^a5S
zZ4fEby8uuxP*Yn1t#c@GJ5ac`sL~@dqe>8s!nl8KnEAaYAz+bxA6&eU=q@LJM-p}c
zJy-2vN&whi0EIJ4b3oS<z(nSI`b=crYW%;|F#n+31}+9Th<{N6!_YF=><B(V^>F!~
z;$1(csqWn!MC6^*{7&<5`GGN`OntZn><)~@sGn<^5zbd&jF%K(+<Cd9*CRUno~o|A
zOS$p*xqbYisT2F=aU_s~pZ&Zy>;DqR8gaf;Q=dkc4QPenL_sLMj`&Jy3PR8+BkE5B
zuRsq#+tX3XOo(5xaB)7{V-dICyj~BnScbAi8gG~7rt=O7eTaSBvUQ4OAC>Hmk<L+*
z))iaJ;FUIP(u87(^CL{kaU(z12-AOEzCT+@)%>X)umQ;Z<H50MFx`*sbD)rD=vljg
zgzldLG!2C-j~q4ExTfPAc9YM&P>@qGtn;Ujjqu@8%YL3r{#>Lnh){8@1I27z=-Tg6
z{^p*LWRW`*JgUc|S`^}<wYLnj{nmZ7AK0Bh!2i+C+}$@JJA+^382(UvDhT*Ib7C%H
zHpRSgKm{T<DpXouRCUBod?(Jon0;-*y>a3O?99mmVt$tT<nVQ+9s_y=cPp~`;`-EJ
zlimD<^wxQ<h#niMK!qNWpAVq=h7V}>^I0~hi%<lMdz*8Xd3vJS@CR>e3pUWZxeYye
zhLa-B*qeF3f`Js3F*855i`IdE$Ha&1Xr}m=(s~(*F|ig}qd1szvv!qB9e*QwoOJ4Y
z56cSD2A8MmIy{PJ^tX3TbsZI)uL4{}h^fqBbo&!&Tt0OG22~!n`8J@s3Z0a^_{IDl
z%1`7Bc#|ehe7U1U4ot=KV}Cz#gx3IKW$v=jX?qJxE-ehWu9hRxX3-Sg^&Imiz%CPz
z*|y+=sM`hp9#i3CF(1ZB3dq|if;9oJEY6ENk`MlL9A|S8PiCJIYtH#F1a7{O8b^Q-
zBy<=%VnHn{HgqkBTje5ZqIMM$=Venq&Q><oTj5@KiD0F@rF)m%s+fJ}j6(K?9`D&!
zNuL6!T)-JzzCFh`Wq~!Pd!C+z%j*2V%g?Y5Y|dLkOVnw>Q>tlA`^HA|J2rE^MxUtV
zHZJ9wc-J<`_OPs3ocC$DE66vfDHS$x$#UnCfRr_foWMeNxqvs4<LyCQKezay(e7lW
zsbFZM@!K0(gYegArrUn?W8&s$?k|dW_KyG*)D1HO`nhNvuaHVnMjyc4ygG9g-2LOT
zsjTS0YEs1rUzR><ErXx)3)>g-e*g3be)CZrXSu60v=g<j$l5~jEXdw7V+ghPT%4Q)
z+>d^HPjkDQ<RHKNyv#mT0>q%)G#pQG8E%|<Y^Q2ku@m>>6aCZ`jqzc=Q&rl2S@X)|
zAsnV$Pa>zSaXc=#RQ=+hLmY<U*Xxu?wz;}Jd9v!vGda)s@6tWL+Rp^&jb}iuBVRm1
zgQ7w<12-4S+g^o&eI-OxZRGf|d4zf!YYy{!y>nMic6HimNf#3H;b{uy1x_GV7T_yR
z3xmKXm)AR|mW~2JCTjVRJ?ei{xU2+j)>D-3K=K-XI_Y(*%N&^FJv*fk6B%0Kay!S;
z?_DjRqy?=H1m3{gNOu30N|I|X4`<&<C1W>rHVbMzA80=SaK}eB5mx9CpK-$(5yN}T
z*}{{ujrsZ|Z{nBa7DlMNy$f3+L~hpJBUE@E59iV31b{*`WY+fGimXZ63a$?kr@bYm
zJsns991&9nLQSf5?VJ@4|FKYrKF%X|A<*(+EbQn^QuYzf$YYl+@Q<gXbWg!`SzVt_
zkxLYL2l9CY*$G8+B=ymytMPw+8Vak`Of$Fh3~_v#tA9C38^?DLXb9IiH75J)=0Z{S
zh>4*tRYSH(6$nHohdkQ*b!cOi=UrvVF%e8+HY51?)tZQj@}ko5<LMd!MkjS3Ez(gV
zl18y&0_j5RAyJUP!W70up`mJp71fr4x0Y!@Z$M@=cLXlR8<Z96UnrLh$-O3;MfX%p
z4Al%Sh$+!w?3Gywqo#17Z=Zo(<@x<x(|ESMJVp^J&pS=s58~w%#d+Ui-rwd+x&aF_
z^6%U&9nvfFG^z2!KjNDh$MJH&`dATXB%fB?KQ6Aon2X*O=SbbL4vZOV2bvY{pEEhn
zu?zV%VgVQrO=?_n<WpGN+nO09b%eFI)~>o~?b;{Jl$UEb;!NdP&OuS`)!uAO`c}q^
zk`IgTJg2~gVdd{-Wk=T<x8#J69iyG!e4kP@tM;Tt-f|h0+B#2|a`Wivb`PN02h9%(
z`$kr1k?m7$$iKe{Azv=1MXcmiNsy^HZ!BSQQ0Um%VMMvNsoX=WV_i6lH`TP^T7C7^
z@LChk5K4Pzn`fO(*HSg@Qz4t&ekUxtrd<G3>!O4)*0eD<(~|Ml9W|Df#01-u_(fDM
zX0^yonOjv$&^Fr2^k1<SqcS(fq|jMFo<1o8&~(Wc;=Q<l!EY|V%6jtGuY+@dPBPxB
zIR0g*3ev6KxqDn2L6w4Yv{J;2ZT7qSti}fZ&paKl8vdiM^luFRDzHGP<U{9(8DQF%
znVbKSXtiCRbh0$Kb-n1YZ@U3+2(<_3B<m^_d9_POKH7$9gG<ng5~P%l-!09dOhN?^
zAjG2>v7nBxc;LocCz#k{Q=we@Zpp`Np|s5mME#gpqH2$Oj``D9+7Pie`LrDgI%9lb
zXG5PIkp=J-S0Kn4W7zKdb)xb7lldzKM8t;Rbh^S&e%zbtMTzaHDd3IiEr<LWB)`V#
zbioN((b7yD7;>AD=<W1iB4dcf$Fl}u_wfYDSjv!StmW7^kaEmwN+Ok!IDsiQvfHaa
z+wlzOh~ny<POl|Ot+{jASYl0{STP%&6Mye8sj(a@{p+s1UEevM-vaz_Cm_n@#Ppey
zr8%{tReZ*)nNrKD=<ws4rz?p5kSyQH?q(AWzpsTr>N?G&Aj4d6%CK~zcu1y=jS+-v
z1yJsv)v^^6LGl5-`!ofReDbwFlNA*N&GE)7_RhOp1Ri}*aLBGAx&(`ZVf7~RY|Rnn
zyJxCA$G3m;EN}{Iy(vW#sJQg{taSB8MDph8>=6)Fg#7N2t-sM0^^*~^`l3ELM2?ar
z1S(RuZYGleiqx61Pe+B-tbCa?LR0(aB7kl$!TOiMq+56F!qo$wkyeV(`i}erDCtIK
z93|2Nr2zmc)60Mpp3vHiRs@FA@$aM<hwyYSKX&nYdiu#YKpyd`r{NAjFY7Up;GrM=
zs~GRl_x`(q<3GFU*5!lU%@so4`MC|09d=6qke0|D?CuKyL6iQ+6&TPqMgkH~0FHmz
zyY<)Jj}_BjE8ecQSWM{wAc7t-{n2OI)Y%#Q2as#E{ti7axw*LkqLIv7-)n9yZ~xlb
z{u9{!ZvPw2p$o$RSa&#Z?JV%Q4Iux0HX!=!Pe4^t0$c%zj+q?_riPSW_<vKI2LC6u
zDYBFqBaTvT0B;T{)$(%x3(QnFX8$jRBS3?<2RYaRg9usS=mS*8+YxBy)G&U%;~o6x
zi~VpG{}qKgb9EmY{J&H7{{L_KKVwtIU*Q9}Y)60}`@V;RZ;;QiBS)IBxy%#Kp+>CC
mqdJ3=d3Z!T#XS7K|0ioKygsj6Eb=LHxDac5s|Jg!N&f~qp8Wg(

diff --git a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
index ffa029a73f..345394f809 100644
--- a/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
+++ b/content/en/blog/_posts/2021-03-09-The-Evolution-of-Kubernetes-Dashboard/index.md
@@ -15,6 +15,11 @@ The initial idea behind the Kubernetes Dashboard project was to provide a web in
 
 The very [first commit](https://github.com/kubernetes/dashboard/commit/5861187fa807ac1cc2d9b2ac786afeced065076c) to the Kubernetes Dashboard was made by Filip Grządkowski from Google on 16th October 2015 – just a few months from the initial commit to the Kubernetes repository. Our initial commits go back to November 2015 ([Sebastian committed on 16 November 2015](https://github.com/kubernetes/dashboard/commit/09e65b6bb08c49b926253de3621a73da05e400fd); [Marcin committed on 23 November 2015](https://github.com/kubernetes/dashboard/commit/1da4b1c25ef040818072c734f71333f9b4733f55)). Since that time, we’ve become regular contributors to the project. For the next two years, we worked closely with the Googlers, eventually becoming main project maintainers ourselves.
 
+{{< figure src="first-ui.png" caption="The First Version of the User Interface" >}}
+
+{{< figure src="along-the-way-ui.png" caption="Prototype of the New User Interface" >}}
+
+{{< figure src="current-ui.png" caption="The Current User Interface" >}}
 
 As you can see, the initial look and feel of the project were completely different from the current one. We have changed the design multiple times. The same has happened with the code itself.
 

From d13a76989f5567204fbcc4ce8ea8418d4006170e Mon Sep 17 00:00:00 2001
From: "Edson (aka tuxpilgrim)" <edsoncelio@users.noreply.github.com>
Date: Thu, 11 Mar 2021 10:15:46 -0300
Subject: [PATCH 173/788] Small fixes

* Remove reviewers
* Add suggestions by code review
---
 .../docs/concepts/containers/container-environment.md | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/content/pt/docs/concepts/containers/container-environment.md b/content/pt/docs/concepts/containers/container-environment.md
index 8670f0fdc4..af28e2dd3f 100644
--- a/content/pt/docs/concepts/containers/container-environment.md
+++ b/content/pt/docs/concepts/containers/container-environment.md
@@ -1,7 +1,4 @@
 ---
-reviewers:
- - femrtnz
- - jcjesus
 title: Ambiente de Contêiner
 content_type: concept
 weight: 20
@@ -28,14 +25,14 @@ O ambiente de contêiner do Kubernetes fornece recursos importantes para contêi
 O _hostname_ de um contêiner é o nome do Pod em que o contêiner está executando.
 Isso é disponibilizado através do comando `hostname` ou da função [`gethostname`](https://man7.org/linux/man-pages/man2/gethostname.2.html) chamada na libc.
 
-O nome do Pod e o Namespace são disponibilizados como variáveis de ambiente através do [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/).
+O nome do Pod e o Namespace são expostos como variáveis de ambiente através de um mecanismo chamado [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/).
 
 Variáveis de ambiente definidas pelo usuário a partir da definição do Pod também são disponíveis para o contêiner, assim como qualquer variável de ambiente especificada estáticamente na imagem Docker.
 
 ### Informação do cluster
 
-Uma lista de todos os serviços que estão executando quando um contêiner é criado é disponibilizada para o contêiner como variáveis de ambiente.
-Essas variáveis de ambiente correspondem a sintaxe dos links Docker.
+Uma lista de todos os serviços que estão executando quando um contêiner foi criado é disponibilizada para o contêiner como variáveis de ambiente.
+Essas variáveis de ambiente são compatíveis com a funcionalidade _docker link_ do Docker.
 
 Para um serviço nomeado *foo* que mapeia para um contêiner nomeado *bar*, as seguintes variáveis são definidas:
 
@@ -52,7 +49,7 @@ se possuírem [DNS addon](https://releases.k8s.io/{{< param "githubbranch" >}}/c
 ## {{% heading "whatsnext" %}}
 
 
-* Aprenda mais sobre [container lifecycle hooks](/docs/concepts/containers/container-lifecycle-hooks/).
+* Aprenda mais sobre [hooks de ciclo de vida do contêiner](/docs/concepts/containers/container-lifecycle-hooks/).
 * Obtenha experiência prática
   [anexando manipuladores a eventos de ciclo de vida do contêiner](/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/).
 

From 9517a9ab0117e18015bfc07e60398977e3cf3f02 Mon Sep 17 00:00:00 2001
From: Jason Gilmore <wj@wjgilmore.com>
Date: Thu, 11 Mar 2021 11:22:49 -0500
Subject: [PATCH 174/788] Corrected port designation in get service output

Port 6379 was errantly identified as the mongo service port however mongo-service.yaml defines port 27017. I've updated the service command output to reflect that.
---
 content/en/docs/tutorials/stateless-application/guestbook.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/stateless-application/guestbook.md b/content/en/docs/tutorials/stateless-application/guestbook.md
index 0a84483716..36772253f6 100644
--- a/content/en/docs/tutorials/stateless-application/guestbook.md
+++ b/content/en/docs/tutorials/stateless-application/guestbook.md
@@ -104,7 +104,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
       ```shell
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP    1m
-      mongo          ClusterIP   10.0.0.151   <none>        6379/TCP   8s
+      mongo          ClusterIP   10.0.0.151   <none>        27017/TCP   8s
       ```
 
 {{< note >}}

From 2df5a5226b3ea44e3032e6e4e0ff63760eab20ba Mon Sep 17 00:00:00 2001
From: Enyinna Ochulor <eochulor@vmware.com>
Date: Tue, 9 Mar 2021 01:05:56 -0800
Subject: [PATCH 175/788] Remove Docker Version Pinning

This commit fixes the packages not found error during
Docker installation. The packages containerd.io 1.2.13-2,
docker-ce 19.03.11, and docker-cs-cli 19.03.11 are currently not in
Ubuntu 20.10. This commit instead points users to validated
versions of Docker.

fixes https://github.com/kubernetes/kubernetes/issues/99831

Signed-off-by: Enyinna Ochulor <eochulor@vmware.com>
---
 .../en/docs/setup/production-environment/container-runtimes.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index 15f3e3a9b6..9875ee8fd9 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -347,7 +347,7 @@ in sync.
 
 ### Docker
 
-1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server)
+1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server). You can find the latest validated version of Docker in this [dependencies](https://git.k8s.io/kubernetes/build/dependencies.yaml) file.
 
 2. Configure the Docker daemon, in particular to use systemd for the management of the container’s cgroups.
 

From 3ae3c7c7e7c1b6740869cc11702fff66919d6302 Mon Sep 17 00:00:00 2001
From: Federico Gallo <musicapidae@gmail.com>
Date: Thu, 11 Mar 2021 18:18:18 -0300
Subject: [PATCH 176/788] [es] Add
 content/es/docs/concepts/policy/limit-range.md (#26816)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* README.md Added description/suggestion to install git submodules.
Created _index.md for es/docs/concept/policy.
Created limit-range.md, content-type:concept for es/docs/concepts/policy

* Changes to the README-es.md file discarded to apply a separate commit for it

* Fast fix, missed word

* Update content/es/docs/concepts/policy/limit-range.md

Suggestion, Remove "en" (fix). Personal note: I'm not sure if the suggested change makes clear that the system administrator can force the users to follow specifications with new politics.. Not always the user have control on the cluster

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

lgtm

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

Nice

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

look at that trained eye! Good job thnaks

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

lgtm

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

Not sure about the translation, it sound better but it should be clear with terminology. A pod or container request resources it's not a requirement. But the same time we have [this definition](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/))
"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value."

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

Lgtm

Co-authored-by: Rael Garcia <rael@rael.io>

* Suggested change discarded, reason: Contenedores is not defined

* Sorry my bad, Contenedores definition was there but as a singular noun not plural. Fiexed (line 51).. as well as pods (line 53

* Apply suggestions from code review

Wrong button last time. Added suggestions (as single commit)

Co-authored-by: Rael Garcia <rael@rael.io>
Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* · Added: description/overview,         file: content/es/docs/concepts/policy/_index.md
· Added: description,                  file: content/es/docs/concepts/policy/limit-range.md
· Midified: structure and dreafting,   file: content/es/docs/concepts/policy/limit-range.md
· Added: term to glossary (es),        file: content/es/docs/reference/glossary/limitrange.md

* Added Container word I deleted earlier today, lines 25,26,27.
Unnecessary repeated tooltip were removed allowing only once possible new concept per paragraph. Too many tooltip

* Fixed weight property commited by mistake previously.

* Added Suggested change manually

* Fixed Last suggested change

* All right I found the suggested change. Done

* Update content/es/docs/concepts/policy/limit-range.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/policy/limit-range.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Replaced occurrences of "Peticiones" by "Solicitudes" as it was suggested previously for line 29

Co-authored-by: Rael Garcia <rael@rael.io>
Co-authored-by: Victor Morales <chipahuac@hotmail.com>
---
 content/es/docs/concepts/policy/_index.md     |  6 +-
 .../es/docs/concepts/policy/limit-range.md    | 70 +++++++++++++++++++
 .../es/docs/reference/glossary/limitrange.md  | 23 ++++++
 3 files changed, 97 insertions(+), 2 deletions(-)
 create mode 100644 content/es/docs/concepts/policy/limit-range.md
 create mode 100755 content/es/docs/reference/glossary/limitrange.md

diff --git a/content/es/docs/concepts/policy/_index.md b/content/es/docs/concepts/policy/_index.md
index 3182c94f7d..d5ebfed4f5 100755
--- a/content/es/docs/concepts/policy/_index.md
+++ b/content/es/docs/concepts/policy/_index.md
@@ -1,4 +1,6 @@
 ---
-title: "Políticas"
+title: Políticas
 weight: 90
----
\ No newline at end of file
+---
+
+La sección de Políticas describe las diferentes políticas configurables que se aplican a grupos de recursos:
diff --git a/content/es/docs/concepts/policy/limit-range.md b/content/es/docs/concepts/policy/limit-range.md
new file mode 100644
index 0000000000..22d4c74f51
--- /dev/null
+++ b/content/es/docs/concepts/policy/limit-range.md
@@ -0,0 +1,70 @@
+---
+reviewers:
+- raelga
+title: Rangos de límites (Limit Ranges)
+description: >
+    Aplica límites de recursos a un Namespace para restringir y garantizar la asignación y consumo de recursos informáticos.
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+
+### Contexto
+
+Por defecto, los contenedores se ejecutan sin restricciones sobre los [recursos informáticos disponibles en un clúster de Kubernetes](/docs/concepts/configuration/manage-resources-containers/).
+Si el {{< glossary_tooltip text="Nodo" term_id="node" >}} dispone de los recursos informáticos, un {{< glossary_tooltip text="Pod" term_id="pod" >}} o sus {{< glossary_tooltip text="Contenedores" term_id="container" >}} tienen permitido consumir por encima de la cuota solicitada si no superan el límite establecido en su especificación.
+Existe la preocupación de que un Pod o Contenedor pueda monopolizar todos los recursos disponibles.
+
+### Utilidad
+
+Aplicando restricciones de asignación de recursos, los administradores de clústeres se aseguran del cumplimiento del consumo de recursos por espacio de nombre ({{< glossary_tooltip text="Namespace" term_id="namespace" >}}).
+
+Un **{{< glossary_tooltip text="LimitRange" term_id="limitrange" >}}** es la política que permite:
+
+- Imponer restricciones de requisitos de recursos a {{< glossary_tooltip text="Pods" term_id="pod" >}} o {{< glossary_tooltip text="Contenedores" term_id="container" >}} por Namespace.
+- Imponer las limitaciones de recursos mínimas/máximas para Pods o Contenedores dentro de un Namespace.
+- Especificar requisitos y límites de recursos predeterminados para Pods o Contenedores de un Namespace.
+- Imponer una relación de proporción entre los requisitos y el límite de un recurso.
+- Imponer el cumplimiento de las demandas de almacenamiento mínimo/máximo para {{< glossary_tooltip text="Solicitudes de Volúmenes Persistentes" term_id="persistent-volume-claim" >}}.
+
+### Habilitar el LimitRange
+
+La compatibilidad con LimitRange está habilitada por defecto en Kubernetes desde la versión 1.10.
+
+Para que un LimitRange se active en un {{< glossary_tooltip text="Namespace" term_id="namespace" >}} en particular, el LimitRange debe definirse con el Namespace, o aplicarse a éste.
+
+El nombre de recurso de un objeto LimitRange debe ser un
+[nombre de subdominio DNS](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names) válido.
+
+### Aplicando LimitRanges
+
+- El administrador crea un LimitRange en un {{< glossary_tooltip text="Namespace" term_id="namespace" >}}.
+- Los usuarios crean recursos como {{< glossary_tooltip text="Pods" term_id="pod" >}}, {{< glossary_tooltip text="Contenedores" term_id="container" >}} o {{< glossary_tooltip text="Solicitudes de Volúmenes Persistentes" term_id="persistent-volume-claim" >}} en el Namespace.
+- El controlador de admisión `LimitRanger` aplicará valores predeterminados y límites, para todos los Pods o Contenedores que no establezcan requisitos de recursos informáticos. Y realizará un seguimiento del uso para garantizar que no excedan el mínimo, el máximo, y la proporción de ningún LimitRange definido en el Namespace.
+- Si al crear o actualizar un recurso del ejemplo (Pods, Contenedores, {{< glossary_tooltip text="Solicitudes de Volúmenes Persistentes" term_id="persistent-volume-claim" >}}) se viola una restricción al LimitRange, la solicitud al servidor API fallará con un código de estado HTTP "403 FORBIDDEN" y un mensaje que explica la restricción que se ha violado.
+- En caso de que en se active un LimitRange para recursos de cómputos como `cpu` y `memory`, los usuarios deberán especificar los requisitos y/o límites de recursos a dichos valores. De lo contrario, el sistema puede rechazar la creación del Pod.
+- Las validaciones de LimitRange ocurren solo en la etapa de Admisión de Pod, no en Pods que ya se han iniciado (Running {{< glossary_tooltip text="Pods" term_id="pod" >}}).
+
+Algunos ejemplos de políticas que se pueden crear utilizando rangos de límites son:
+
+- En un clúster de 2 nodos con una capacidad de 8 GiB de RAM y 16 núcleos, podría restringirse los {{< glossary_tooltip text="Pods" term_id="pod" >}} en un {{< glossary_tooltip text="Namespace" term_id="namespace" >}} a requerir `100m` de CPU con un límite máximo de `500m` para CPU y requerir `200Mi` de memoria con un límite máximo de `600Mi` de memoria.
+- Definir el valor por defecto de límite y requisitos de CPU a `150m` y el valor por defecto de requisito de memoria a `300Mi` {{< glossary_tooltip text="Contenedores" term_id="container" >}} que se iniciaron sin requisitos de CPU y memoria en sus especificaciones.
+
+En el caso de que los límites totales del {{< glossary_tooltip text="Namespace" term_id="namespace" >}} sean menores que la suma de los límites de los {{< glossary_tooltip text="Pods" term_id="pod" >}},
+puede haber contienda por los recursos. En este caso, los contenedores o pods no seran creados.
+
+Ni la contención ni los cambios en un LimitRange afectarán a los recursos ya creados.
+
+## {{% heading "whatsnext" %}}
+
+Consulte el [documento de diseño del LimitRanger](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_limit_range.md) para más información.
+
+Los siguientes ejemplos utilizan límites y están pendientes de su traducción:
+
+- [how to configure minimum and maximum CPU constraints per namespace](/docs/tasks/administer-cluster/manage-resources/cpu-constraint-namespace/).
+- [how to configure minimum and maximum Memory constraints per namespace](/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace/).
+- [how to configure default CPU Requests and Limits per namespace](/docs/tasks/administer-cluster/manage-resources/cpu-default-namespace/).
+- [how to configure default Memory Requests and Limits per namespace](/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/).
+- [how to configure minimum and maximum Storage consumption per namespace](/docs/tasks/administer-cluster/limit-storage-consumption/#limitrange-to-limit-requests-for-storage).
+- [a detailed example on configuring quota per namespace](/docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/).
diff --git a/content/es/docs/reference/glossary/limitrange.md b/content/es/docs/reference/glossary/limitrange.md
new file mode 100755
index 0000000000..9311ddc557
--- /dev/null
+++ b/content/es/docs/reference/glossary/limitrange.md
@@ -0,0 +1,23 @@
+---
+title: LimitRange
+id: limitrange
+date: 2019-04-15
+full_link: /docs/concepts/policy/limit-range/
+short_description: >
+  Proporciona restricciones para limitar el consumo de recursos por Contenedores o Pods en un espacio de nombres
+
+aka:
+tags:
+  - core-object
+  - fundamental
+  - architecture
+related:
+  - pod
+  - container
+---
+
+Proporciona restricciones para limitar el consumo de recursos por {{< glossary_tooltip text="Contenedores" term_id="container" >}} o {{< glossary_tooltip text="Pods" term_id="pod" >}} en un espacio de nombres ({{< glossary_tooltip text="Namespace" term_id="namespace" >}})
+
+<!--more-->
+
+LimitRange limita la cantidad de objetos que se pueden crear por su tipo (vease {{< glossary_tooltip text="Workloads" term_id="workload" >}}), así como la cantidad de recursos informáticos que pueden ser requeridos/consumidos por {{< glossary_tooltip text="Pods" term_id="pod" >}} individuales en un espacio de nombres.

From 3c204eddf93b0632a2d144aedcbc1bdca3a6eef8 Mon Sep 17 00:00:00 2001
From: Kenichi Omichi <ken-oomichi@wx.jp.nec.com>
Date: Thu, 11 Mar 2021 23:53:58 +0000
Subject: [PATCH 177/788] id: Replace redirect links of kubeadm

/docs/reference/setup-tools/kubeadm/kubeadm/ is redirected to
/docs/reference/setup-tools/kubeadm/
This replaces the redirect links of kubeadm with the direct links.
---
 .../docs/concepts/cluster-administration/cloud-providers.md   | 4 ++--
 .../tools/kubeadm/create-cluster-kubeadm.md                   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/id/docs/concepts/cluster-administration/cloud-providers.md b/content/id/docs/concepts/cluster-administration/cloud-providers.md
index 9a32af1eb8..4eb6a474b8 100644
--- a/content/id/docs/concepts/cluster-administration/cloud-providers.md
+++ b/content/id/docs/concepts/cluster-administration/cloud-providers.md
@@ -11,7 +11,7 @@ Laman ini akan menjelaskan bagaimana cara mengelola Kubernetes yang berjalan pad
 
 <!-- body -->
 ### Kubeadm
-[Kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) merupakan salah satu cara yang banyak digunakan untuk membuat klaster Kubernetes.
+[Kubeadm](/docs/reference/setup-tools/kubeadm/) merupakan salah satu cara yang banyak digunakan untuk membuat klaster Kubernetes.
 Kubeadm memiliki beragam opsi untuk mengatur konfigurasi spesifik untuk penyedia layanan cloud. Salah satu contoh yang biasa digunakan pada penyedia cloud *in-tree* yang dapat diatur dengan kubeadm adalah sebagai berikut:
 
 ```yaml
@@ -347,4 +347,4 @@ Penyedia layanan IBM Cloud Kubernetes Service memanfaatkan Kubernetes-native *pe
 ### Nama Node
 
 Penyedia layanan cloud Baidu menggunakan alamat IP privat dari *node* (yang ditentukan oleh kubelet atau menggunakan `--hostname-override`) sebagai nama dari objek Kubernetes Node.
-Perlu diperhatikan bahwa nama Kubernetes Node harus sesuai dengan alamat IP privat dari Baidu VM.
\ No newline at end of file
+Perlu diperhatikan bahwa nama Kubernetes Node harus sesuai dengan alamat IP privat dari Baidu VM.
diff --git a/content/id/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/id/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index 8a345296a3..6bbf23b53e 100644
--- a/content/id/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/id/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -134,7 +134,7 @@ tidak didukung oleh kubeadm.
 
 ### Informasi lebih lanjut
 
-Untuk informasi lebih lanjut mengenai argumen-argumen `kubeadm init`, lihat [panduan referensi kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/).
+Untuk informasi lebih lanjut mengenai argumen-argumen `kubeadm init`, lihat [panduan referensi kubeadm](/docs/reference/setup-tools/kubeadm/).
 
 Untuk daftar pengaturan konfigurasi yang lengkap, lihat [dokumentasi berkas konfigurasi](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
 
@@ -569,7 +569,7 @@ opsinya.
 * Pastikan klaster berjalan dengan benar menggunakan [Sonobuoy](https://github.com/heptio/sonobuoy)
 * <a id="lifecycle" />Lihat [Memperbaharui klaster kubeadm](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
   untuk detail mengenai pembaruan klaster menggunakan `kubeadm`.
-* Pelajari penggunaan `kubeadm` lebih lanjut pada [dokumentasi referensi kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm)
+* Pelajari penggunaan `kubeadm` lebih lanjut pada [dokumentasi referensi kubeadm](/docs/reference/setup-tools/kubeadm)
 * Pelajari lebih lanjut mengenai [konsep-konsep](/docs/concepts/) Kubernetes dan [`kubectl`](/docs/user-guide/kubectl-overview/).
 * Lihat halaman [Cluster Networking](/id/docs/concepts/cluster-administration/networking/) untuk daftar
 _add-on_ jaringan Pod yang lebih banyak.

From 4062beca2d10d6485766a248e507f36eb21c8568 Mon Sep 17 00:00:00 2001
From: Jose Almaraz <jralmaraz1@gmail.com>
Date: Fri, 12 Mar 2021 11:29:57 +1100
Subject: [PATCH 178/788] addressing section title content afer review

---
 README-pt.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README-pt.md b/README-pt.md
index 3525302e8b..e27bf544d1 100644
--- a/README-pt.md
+++ b/README-pt.md
@@ -144,7 +144,7 @@ sudo launchctl load -w /Library/LaunchDaemons/limit.maxfiles.plist
 
 Esta solução funciona tanto para o MacOS Catalina quanto para o MacOS Mojave.
 
-### Troubleshooting for Out of Memory
+### Erro de "Out of Memory"
 
 Se você executar o comando `make container-serve` e retornar o seguinte erro:
 ```

From 40950997bee0d673f46cb810902ea8d09373324a Mon Sep 17 00:00:00 2001
From: Sergey Kanzhelev <S.Kanzhelev@live.com>
Date: Thu, 11 Mar 2021 17:19:23 -0800
Subject: [PATCH 179/788] Update content/en/docs/concepts/architecture/nodes.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/docs/concepts/architecture/nodes.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index cd2c2291c5..11343a2d8a 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -71,7 +71,8 @@ The [name](/docs/concepts/overview/working-with-objects/names#names) identifies
 cannot have the same name at the same time. Kubernetes also assumes that a resource with the same
 name is the same object. In case of a Node, it is implicitly assumed that an instance using the
 same name will have the same state (e.g. network settings, root disk contents). This may lead to
-inconsistencies if instance was altered without the change of a name or deleting and re-creating the
+inconsistencies if you modify an instance without changing its name. If you want to replace a node, you should
+make sure to remove the existing
 Node object from API server.
 {{< /note >}}
 
@@ -367,4 +368,3 @@ For example, if `ShutdownGracePeriod=30s`, and `ShutdownGracePeriodCriticalPods=
 * Read the [Node](https://git.k8s.io/community/contributors/design-proposals/architecture/architecture.md#the-kubernetes-node)
   section of the architecture design document.
 * Read about [taints and tolerations](/docs/concepts/scheduling-eviction/taint-and-toleration/).
-

From 465d5dcd7a81bd5fcd50b357958aeda2da0beb96 Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio2020@gmail.com>
Date: Thu, 11 Mar 2021 22:54:11 -0300
Subject: [PATCH 180/788] Starting translation to pt

---
 .../containers/container-lifecycle-hooks.md   | 128 ++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 content/pt/docs/concepts/containers/container-lifecycle-hooks.md

diff --git a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
new file mode 100644
index 0000000000..fab8e4cd86
--- /dev/null
+++ b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
@@ -0,0 +1,128 @@
+---
+title: Ciclos de Vida do Contêiner
+content_type: concept
+weight: 30
+---
+
+<!-- overview -->
+
+Essa página descreve como os contêineres gerenciados pelo _kubelet_ podem usar a estrutura de _hook_ de ciclo de vida do contêiner para executar código acionado por eventos durante seu ciclo de vida de gerenciamento. 
+
+
+<!-- body -->
+
+## Visão Geral
+
+Análogo a muitas estruturas de linguagem de programação que tem  _hooks_ de ciclo de vida de componentes, como angular,
+o Kubernetes fornece aos contêineres _hooks_ de ciclo de vida.
+Os _hooks_ permitem que os contêineres estejam cientes dos eventos em seu ciclo de vida de gerenciamento
+e executem código implementado em um manipulador quando o _hook_ de ciclo de vida correspondente é executado.
+
+## Hooks do contêiner
+
+Existem dois _hooks_ que são expostos para os contêiners:
+
+`PostStart`
+
+This hook is executed immediately after a container is created.
+However, there is no guarantee that the hook will execute before the container ENTRYPOINT.
+No parameters are passed to the handler.
+
+`PreStop`
+
+This hook is called immediately before a container is terminated due to an API request or management
+event such as a liveness/startup probe failure, preemption, resource contention and others. A call
+to the `PreStop` hook fails if the container is already in a terminated or completed state and the
+hook must complete before the TERM signal to stop the container can be sent. The Pod's termination
+grace period countdown begins before the `PreStop` hook is executed, so regardless of the outcome of
+the handler, the container will eventually terminate within the Pod's termination grace period. No
+parameters are passed to the handler.
+
+A more detailed description of the termination behavior can be found in
+[Termination of Pods](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination).
+
+### Hook handler implementations
+
+Containers can access a hook by implementing and registering a handler for that hook.
+There are two types of hook handlers that can be implemented for Containers:
+
+* Exec - Executes a specific command, such as `pre-stop.sh`, inside the cgroups and namespaces of the Container.
+Resources consumed by the command are counted against the Container.
+* HTTP - Executes an HTTP request against a specific endpoint on the Container.
+
+### Hook handler execution
+
+When a Container lifecycle management hook is called,
+the Kubernetes management system execute the handler according to the hook action,
+`httpGet` and `tcpSocket` are executed by the kubelet process, and `exec` is executed in the container.
+
+Hook handler calls are synchronous within the context of the Pod containing the Container.
+This means that for a `PostStart` hook,
+the Container ENTRYPOINT and hook fire asynchronously.
+However, if the hook takes too long to run or hangs,
+the Container cannot reach a `running` state.
+
+`PreStop` hooks are not executed asynchronously from the signal to stop the Container; the hook must
+complete its execution before the TERM signal can be sent. If a `PreStop` hook hangs during
+execution, the Pod's phase will be `Terminating` and remain there until the Pod is killed after its
+`terminationGracePeriodSeconds` expires. This grace period applies to the total time it takes for
+both the `PreStop` hook to execute and for the Container to stop normally. If, for example,
+`terminationGracePeriodSeconds` is 60, and the hook takes 55 seconds to complete, and the Container
+takes 10 seconds to stop normally after receiving the signal, then the Container will be killed
+before it can stop normally, since `terminationGracePeriodSeconds` is less than the total time
+(55+10) it takes for these two things to happen.
+
+If either a `PostStart` or `PreStop` hook fails,
+it kills the Container.
+
+Users should make their hook handlers as lightweight as possible.
+There are cases, however, when long running commands make sense,
+such as when saving state prior to stopping a Container.
+
+### Hook delivery guarantees
+
+Hook delivery is intended to be *at least once*,
+which means that a hook may be called multiple times for any given event,
+such as for `PostStart` or `PreStop`.
+It is up to the hook implementation to handle this correctly.
+
+Generally, only single deliveries are made.
+If, for example, an HTTP hook receiver is down and is unable to take traffic,
+there is no attempt to resend.
+In some rare cases, however, double delivery may occur.
+For instance, if a kubelet restarts in the middle of sending a hook,
+the hook might be resent after the kubelet comes back up.
+
+### Debugging Hook handlers
+
+The logs for a Hook handler are not exposed in Pod events.
+If a handler fails for some reason, it broadcasts an event.
+For `PostStart`, this is the `FailedPostStartHook` event,
+and for `PreStop`, this is the `FailedPreStopHook` event.
+You can see these events by running `kubectl describe pod <pod_name>`.
+Here is some example output of events from running this command:
+
+```
+Events:
+  FirstSeen  LastSeen  Count  From                                                   SubObjectPath          Type      Reason               Message
+  ---------  --------  -----  ----                                                   -------------          --------  ------               -------
+  1m         1m        1      {default-scheduler }                                                          Normal    Scheduled            Successfully assigned test-1730497541-cq1d2 to gke-test-cluster-default-pool-a07e5d30-siqd
+  1m         1m        1      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}  spec.containers{main}  Normal    Pulling              pulling image "test:1.0"
+  1m         1m        1      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}  spec.containers{main}  Normal    Created              Created container with docker id 5c6a256a2567; Security:[seccomp=unconfined]
+  1m         1m        1      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}  spec.containers{main}  Normal    Pulled               Successfully pulled image "test:1.0"
+  1m         1m        1      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}  spec.containers{main}  Normal    Started              Started container with docker id 5c6a256a2567
+  38s        38s       1      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}  spec.containers{main}  Normal    Killing              Killing container with docker id 5c6a256a2567: PostStart handler: Error executing in Docker Container: 1
+  37s        37s       1      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}  spec.containers{main}  Normal    Killing              Killing container with docker id 8df9fdfd7054: PostStart handler: Error executing in Docker Container: 1
+  38s        37s       2      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}                         Warning   FailedSync           Error syncing pod, skipping: failed to "StartContainer" for "main" with RunContainerError: "PostStart handler: Error executing in Docker Container: 1"
+  1m         22s       2      {kubelet gke-test-cluster-default-pool-a07e5d30-siqd}  spec.containers{main}  Warning   FailedPostStartHook
+```
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+* Learn more about the [Container environment](/docs/concepts/containers/container-environment/).
+* Get hands-on experience
+  [attaching handlers to Container lifecycle events](/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/).
+

From 51f72c50ff04a85f3dc9f29bdcdfa2ae364d8717 Mon Sep 17 00:00:00 2001
From: Akihito INOH <atoato88+github@gmail.com>
Date: Fri, 12 Mar 2021 14:47:43 +0900
Subject: [PATCH 181/788] Fix transferring-ownership link

This commit fixes transferring-ownership link on `/docs/setup/release/notes/`.
---
 content/en/docs/setup/release/notes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/release/notes.md b/content/en/docs/setup/release/notes.md
index adbdb7c48e..54146007a0 100644
--- a/content/en/docs/setup/release/notes.md
+++ b/content/en/docs/setup/release/notes.md
@@ -1906,7 +1906,7 @@ filename | sha512 hash
 - Promote SupportNodePidsLimit to GA to provide node to pod pid isolation
   Promote SupportPodPidsLimit to GA to provide ability to limit pids per pod ([#94140](https://github.com/kubernetes/kubernetes/pull/94140), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node and Testing]
 - Rename pod_preemption_metrics to preemption_metrics. ([#93256](https://github.com/kubernetes/kubernetes/pull/93256), [@ahg-g](https://github.com/ahg-g)) [SIG Instrumentation and Scheduling]
-- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
+- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](/docs/reference/using-api/server-side-apply/#transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
 - Set CSIMigrationvSphere feature gates to beta.
   Users should enable CSIMigration + CSIMigrationvSphere features and install the vSphere CSI Driver (https://github.com/kubernetes-sigs/vsphere-csi-driver) to move workload from the in-tree vSphere plugin "kubernetes.io/vsphere-volume" to vSphere CSI Driver.
   

From d1025ef5abdb1e7bc18ebf79861e7c8090b6f4aa Mon Sep 17 00:00:00 2001
From: Iceber Gu <wei.cai-nat@daocloud.io>
Date: Mon, 8 Mar 2021 11:14:14 +0800
Subject: [PATCH 182/788] [zh] update access-cluster-api.md

Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
---
 .../administer-cluster/access-cluster-api.md  | 179 +-----------------
 1 file changed, 10 insertions(+), 169 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
index 59b4fa758f..4f2ee3b05a 100644
--- a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
@@ -251,11 +251,12 @@ Kubernetes 官方支持 [Go](#go-client)、[Python](#python-client)、[Java](#ja
 #### Go 客户端  {#go-client}
 
 <!--
-* To get the library, run the following command: `go get k8s.io/client-go/<version number>/kubernetes` See [https://github.com/kubernetes/client-go](https://github.com/kubernetes/client-go) to see which versions are supported.
-* Write an application atop of the client-go clients.-->
+* To get the library, run the following command: `go get k8s.io/client-go@kubernetes-<kubernetes-version-number>` See [https://github.com/kubernetes/client-go/releases](https://github.com/kubernetes/client-go/releases) to see which versions are supported.
+* Write an application atop of the client-go clients.
+-->
 
-* 要获取库，运行下列命令：`go get k8s.io/client-go/<版本号>/kubernetes`，
-  参见 [https://github.com/kubernetes/client-go](https://github.com/kubernetes/client-go) 查看受支持的版本。
+* 要获取库，运行下列命令：`go get k8s.io/client-go/kubernetes-<kubernetes 版本号>`，
+  参见 [https://github.com/kubernetes/client-go/releases](https://github.com/kubernetes/client-go/releases) 查看受支持的版本。
 * 基于 client-go 客户端编写应用程序。
 
 <!--
@@ -339,9 +340,9 @@ for i in ret.items:
 #### Java 客户端    {#java-client}
 
 <!--
-* To install the [Java Client](https://github.com/kubernetes-client/java), simply execute :
+To install the [Java Client](https://github.com/kubernetes-client/java), run:
 -->
-* 要安装 [Java 客户端](https://github.com/kubernetes-client/java)，只需执行：
+要安装 [Java 客户端](https://github.com/kubernetes-client/java)，运行：
 
 ```shell
 # 克隆 Java 库
@@ -522,168 +523,8 @@ exampleWithKubeConfig = do
         >>= print
 ```
 
-
+## {{% heading "whatsnext" %}}
 <!--
-### Accessing the API from within a Pod
-
-When accessing the API from within a Pod, locating and authenticating
-to the API server are slightly different to the external client case described above.
+* [Accessing the Kubernetes API from a Pod](/docs/tasks/run-application/access-api-from-pod/)
 -->
-### 从 Pod 中访问 API
-
-从 Pod 内部访问 API 时，定位 API 服务器和向服务器认证身份的操作
-与上面描述的外部客户场景不同。
-
-<!--
-The easiest way to use the Kubernetes API from a Pod is to use
-one of the official [client libraries](/docs/reference/using-api/client-libraries/). These
-libraries can automatically discover the API server and authenticate.
--->
-从 Pod 使用 Kubernetes API 的最简单的方法就是使用官方的
-[客户端库](/zh/docs/reference/using-api/client-libraries/)。
-这些库可以自动发现 API 服务器并进行身份验证。
-
-<!--
-#### Using Official Client Libraries
-
-From within a Pod, the recommended ways to connect to the Kubernetes API are:
-
-  - For a Go client, use the official [Go client library](https://github.com/kubernetes/client-go/).
-    The `rest.InClusterConfig()` function handles API host discovery and authentication automatically.
-    See [an example here](https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go).
-
-  - For a Python client, use the official [Python client library](https://github.com/kubernetes-client/python/).
-    The `config.load_incluster_config()` function handles API host discovery and authentication automatically.
-    See [an example here](https://github.com/kubernetes-client/python/blob/master/examples/in_cluster_config.py).
-
-  - There are a number of other libraries available, please refer to the [Client Libraries](/docs/reference/using-api/client-libraries/) page.
-
-In each case, the service account credentials of the Pod are used to communicate
-securely with the API server.
--->
-#### 使用官方客户端库
-
-从一个 Pod 内部连接到 Kubernetes API 的推荐方式为：
-
-- 对于 Go 语言客户端，使用官方的 [Go 客户端库](https://github.com/kubernetes/client-go/)。
-  函数 `rest.InClusterConfig()` 自动处理 API 主机发现和身份认证。
-  参见[这里的一个例子](https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go)。
-
-- 对于 Python 客户端，使用官方的 [Python 客户端库](https://github.com/kubernetes-client/python/)。
-  函数 `config.load_incluster_config()` 自动处理 API 主机的发现和身份认证。
-  参见[这里的一个例子](https://github.com/kubernetes-client/python/blob/master/examples/in_cluster_config.py)。
-
-- 还有一些其他可用的客户端库，请参阅[客户端库](/zh/docs/reference/using-api/client-libraries/)页面。
-
-在以上场景中，客户端库都使用 Pod 的服务账号凭据来与 API 服务器安全地通信。
-
-<!--
-#### Directly accessing the REST API
-
-While running in a Pod, the Kubernetes apiserver is accessible via a Service named
-`kubernetes` in the `default` namespace. Therefore, Pods can use the 
-`kubernetes.default.svc` hostname to query the API server. Official client libraries
-do this automatically.
--->
-#### 直接访问 REST API
-
-在运行在 Pod 中时，可以通过 `default` 命名空间中的名为 `kubernetes` 的服务访问
-Kubernetes API 服务器。也就是说，Pod 可以使用 `kubernetes.default.svc` 主机名
-来查询 API 服务器。官方客户端库自动完成这个工作。
-
-<!--
-The recommended way to authenticate to the API server is with a
-[service account](/docs/user-guide/service-accounts) credential. By default, a Pod
-is associated with a service account, and a credential (token) for that
-service account is placed into the filesystem tree of each container in that Pod,
-at `/var/run/secrets/kubernetes.io/serviceaccount/token`.
--->
-向 API 服务器进行身份认证的推荐做法是使用
-[服务账号](/zh/docs/tasks/configure-pod-container/configure-service-account/)凭据。
-默认情况下，每个 Pod 与一个服务账号关联，该服务账户的凭证（令牌）放置在此 Pod 中
-每个容器的文件系统树中的 `/var/run/secrets/kubernetes.io/serviceaccount/token` 处。
-
-<!--
-If available, a certificate bundle is placed into the filesystem tree of each
-container at `/var/run/secrets/kubernetes.io/serviceaccount/ca.crt`, and should be
-used to verify the serving certificate of the API server.
--->
-如果由证书包可用，则凭证包被放入每个容器的文件系统树中的
-`/var/run/secrets/kubernetes.io/serviceaccount/ca.crt` 处，
-且将被用于验证 API 服务器的服务证书。
-
-<!--
-Finally, the default namespace to be used for namespaced API operations is placed in a file
-at `/var/run/secrets/kubernetes.io/serviceaccount/namespace` in each container.
--->
-最后，用于命名空间域 API 操作的默认命名空间放置在每个容器中的
-`/var/run/secrets/kubernetes.io/serviceaccount/namespace` 文件中。
-
-<!--
-#### Using kubectl proxy
-
-If you would like to query the API without an official client library, you can run `kubectl proxy`
-as the [command](/docs/tasks/inject-data-application/define-command-argument-container/)
-of a new sidecar container in the Pod. This way, `kubectl proxy` will authenticate
-to the API and expose it on the `localhost` interface of the Pod, so that other containers
-in the Pod can use it directly.
--->
-#### 使用 kubectl proxy   {#use-kubectl-proxy}
-
-如果你希望不实用官方客户端库就完成 API 查询，可以将 `kubectl proxy` 作为
-[command](/zh/docs/tasks/inject-data-application/define-command-argument-container/)
-在 Pod 启动一个边车（Sidecar）容器。这样，`kubectl proxy` 自动完成对 API
-的身份认证，并将其暴露到 Pod 的 `localhost` 接口，从而 Pod 中的其他容器可以
-直接使用 API。
-
-<!--
-#### Without using a proxy
-
-It is possible to avoid using the kubectl proxy by passing the authentication token
-directly to the API server.  The internal certificate secures the connection.
--->
-#### 不使用代理  {#without-using-a-proxy}
-
-通过将认证令牌直接发送到 API 服务器，也可以避免运行 kubectl proxy 命令。
-内部的证书机制能够为链接提供保护。
-
-```shell
-# 指向内部 API 服务器的主机名
-APISERVER=https://kubernetes.default.svc
-
-# 服务账号令牌的路径
-SERVICEACCOUNT=/var/run/secrets/kubernetes.io/serviceaccount
-
-# 读取 Pod 的名字空间
-NAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)
-
-# 读取服务账号的持有者令牌
-TOKEN=$(cat ${SERVICEACCOUNT}/token)
-
-# 引用内部整数机构（CA）
-CACERT=${SERVICEACCOUNT}/ca.crt
-
-# 使用令牌访问 API
-curl --cacert ${CACERT} --header "Authorization: Bearer ${TOKEN}" -X GET ${APISERVER}/api
-```
-
-<!--
-The output will be similar to this:
--->
-输出类似于：
-
-```json
-{
-  "kind": "APIVersions",
-  "versions": [
-    "v1"
-  ],
-  "serverAddressByClientCIDRs": [
-    {
-      "clientCIDR": "0.0.0.0/0",
-      "serverAddress": "10.0.1.149:443"
-    }
-  ]
-}
-```
-
+* [从 Pod 中访问 API](/zh/docs/tasks/run-application/access-api-from-pod/)

From ba4cf5f99e7c559071a7f3c5bdf05d2366046ec6 Mon Sep 17 00:00:00 2001
From: "Edson (aka tuxpilgrim)" <edsoncelio@users.noreply.github.com>
Date: Fri, 12 Mar 2021 10:08:18 -0300
Subject: [PATCH 183/788] Update content/pt/docs/concepts/scheduling-eviction/
 (#26924)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Move pod-overhead.md to schedulling-eviction

* Add pod-overhead.md translation

* Update content/pt/docs/concepts/scheduling-eviction/pod-overhead.md

* Fix name: test-Pod to name: test-pod

* Small fixes

* remove reviewers
* change 'fonte' to 'código fonte'

* Add the suggestion by code review

* Update the references with the original doc

* Update the _index.md
---
 .../concepts/scheduling-eviction/_index.md    |  8 ++
 .../kube-scheduler.md                         |  5 +-
 .../pod-overhead.md                           | 87 +++++++++----------
 content/pt/docs/concepts/scheduling/_index.md |  5 --
 4 files changed, 53 insertions(+), 52 deletions(-)
 create mode 100644 content/pt/docs/concepts/scheduling-eviction/_index.md
 rename content/pt/docs/concepts/{scheduling => scheduling-eviction}/kube-scheduler.md (93%)
 rename content/pt/docs/concepts/{configuration => scheduling-eviction}/pod-overhead.md (54%)
 delete mode 100644 content/pt/docs/concepts/scheduling/_index.md

diff --git a/content/pt/docs/concepts/scheduling-eviction/_index.md b/content/pt/docs/concepts/scheduling-eviction/_index.md
new file mode 100644
index 0000000000..e9e036f0c3
--- /dev/null
+++ b/content/pt/docs/concepts/scheduling-eviction/_index.md
@@ -0,0 +1,8 @@
+---
+title: "Escalonamento"
+weight: 90
+description: >
+   No Kubernetes, agendamento refere-se a garantia de que os pods correspondam aos nós para que o kubelet possa executá-los.
+   Remoção é o processo de falha proativa de um ou mais pods em nós com falta de recursos.
+---
+
diff --git a/content/pt/docs/concepts/scheduling/kube-scheduler.md b/content/pt/docs/concepts/scheduling-eviction/kube-scheduler.md
similarity index 93%
rename from content/pt/docs/concepts/scheduling/kube-scheduler.md
rename to content/pt/docs/concepts/scheduling-eviction/kube-scheduler.md
index 575a8e7839..8c8b0ec39a 100644
--- a/content/pt/docs/concepts/scheduling/kube-scheduler.md
+++ b/content/pt/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -91,4 +91,7 @@ do escalonador:
 * Aprenda como [configurar vários escalonadores](/docs/tasks/administer-cluster/configure-multiple-schedulers/)
 * Aprenda sobre [políticas de gerenciamento de topologia](/docs/tasks/administer-cluster/topology-manager/)
 * Aprenda sobre [Pod Overhead](/docs/concepts/configuration/pod-overhead/)
-
+* Saiba mais sobre o agendamento de pods que usam volumes em:
+  * [Suporte de topologia de volume](/docs/concepts/storage/storage-classes/#volume-binding-mode)
+  * [Rastreamento de capacidade de armazenamento](/docs/concepts/storage/storage-capacity/)
+  * [Limites de volumes específicos do nó](/docs/concepts/storage/storage-limits/)
\ No newline at end of file
diff --git a/content/pt/docs/concepts/configuration/pod-overhead.md b/content/pt/docs/concepts/scheduling-eviction/pod-overhead.md
similarity index 54%
rename from content/pt/docs/concepts/configuration/pod-overhead.md
rename to content/pt/docs/concepts/scheduling-eviction/pod-overhead.md
index 78ba1d6ffd..c3788b22fa 100644
--- a/content/pt/docs/concepts/configuration/pod-overhead.md
+++ b/content/pt/docs/concepts/scheduling-eviction/pod-overhead.md
@@ -1,9 +1,5 @@
 ---
-reviewers:
-- dchen1107
-- egernst
-- tallclair
-title: Pod Overhead
+title: Sobrecarga de Pod 
 content_type: concept
 weight: 50
 ---
@@ -12,10 +8,10 @@ weight: 50
 
 {{< feature-state for_k8s_version="v1.18" state="beta" >}}
 
-Quando executa um Pod num nó, o próprio Pod usa uma quantidade de recursos do sistema. Estes
-recursos são adicionais aos recursos necessários para executar o(s) _container(s)_ dentro do Pod.
+Quando você executa um Pod num nó, o próprio Pod usa uma quantidade de recursos do sistema. Estes
+recursos são adicionais aos recursos necessários para executar o(s) contêiner(s) dentro do Pod.
 Sobrecarga de Pod, do inglês _Pod Overhead_, é uma funcionalidade que serve para contabilizar os recursos consumidos pela
-infraestrutura do Pod para além das solicitações e limites do _container_.
+infraestrutura do Pod para além das solicitações e limites do contêiner.
 
 
 
@@ -23,27 +19,27 @@ infraestrutura do Pod para além das solicitações e limites do _container_.
 
 <!-- body -->
 
-No Kubernetes, a sobrecarga de _Pods_ é definido no tempo de
+No Kubernetes, a sobrecarga de Pods é definido no tempo de
 [admissão](/docs/reference/access-authn-authz/extensible-admission-controllers/#what-are-admission-webhooks)
 de acordo com a sobrecarga associada à
-[RuntimeClass](/docs/concepts/containers/runtime-class/) do _Pod_.
+[RuntimeClass](/docs/concepts/containers/runtime-class/) do Pod.
 
 Quando é ativada a Sobrecarga de Pod, a sobrecarga é considerada adicionalmente à soma das
-solicitações de recursos do _container_ ao agendar um Pod. Semelhantemente, o _kubelet_
+solicitações de recursos do contêiner ao agendar um Pod. Semelhantemente, o _kubelet_
 incluirá a sobrecarga do Pod ao dimensionar o cgroup do Pod e ao
-executar a classificação de despejo do Pod.
+executar a classificação de prioridade de migração do Pod em caso de _drain_ do Node.
 
-## Possibilitando a Sobrecarga do Pod {#set-up}
+## Habilitando a Sobrecarga de Pod {#set-up}
 
-Terá de garantir que o [portão de funcionalidade](/docs/reference/command-line-tools-reference/feature-gates/)
-`PodOverhead` está ativo (está ativo por defeito a partir da versão 1.18)
-por todo o cluster, e uma `RuntimeClass` é utilizada que defina o campo `overhead`.
+Terá de garantir que o [Feature Gate](/docs/reference/command-line-tools-reference/feature-gates/)
+`PodOverhead` esteja ativo (está ativo por padrão a partir da versão 1.18)
+em todo o cluster, e uma `RuntimeClass` utilizada que defina o campo `overhead`.
 
 ## Exemplo de uso
 
 Para usar a funcionalidade PodOverhead, é necessário uma RuntimeClass que define o campo `overhead`.
-Por exemplo, poderia usar a definição da RuntimeClass abaixo com um _container runtime_ virtualizado
-que usa cerca de 120MiB por Pod para a máquina virtual e o sistema operativo convidado:
+Por exemplo, poderia usar a definição da RuntimeClass abaixo com um agente de execução de contêiner virtualizado
+que use cerca de 120MiB por Pod para a máquina virtual e o sistema operacional convidado:
 
 ```yaml
 ---
@@ -88,9 +84,9 @@ spec:
         memory: 100Mi
 ```
 
-Na altura de admissão o [controlador de admissão](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/) RuntimeClass
+No tempo de admissão o [controlador de admissão](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/) RuntimeClass
 atualiza o _PodSpec_ da carga de trabalho de forma a incluir o `overhead` como descrito na RuntimeClass. Se o _PodSpec_ já tiver este campo definido
-o _Pod_ será rejeitado. No exemplo dado, como apenas o nome do RuntimeClass é especificado, o controlador de admissão muda o _Pod_ de forma a
+o Pod será rejeitado. No exemplo dado, como apenas o nome do RuntimeClass é especificado, o controlador de admissão muda o Pod de forma a
 incluir um `overhead`.
 
 Depois do controlador de admissão RuntimeClass, pode verificar o _PodSpec_ atualizado:
@@ -99,44 +95,43 @@ Depois do controlador de admissão RuntimeClass, pode verificar o _PodSpec_ atua
 kubectl get pod test-pod -o jsonpath='{.spec.overhead}'
 ```
 
-O output é:
+A saída é:
 ```
 map[cpu:250m memory:120Mi]
 ```
 
-Se for definido um _ResourceQuota_, a soma dos pedidos dos _containers_ assim como o campo `overhead` são contados.
+Se for definido um _ResourceQuota_, a soma das requisições dos contêineres assim como o campo `overhead` são contados.
 
-Quando o kube-scheduler está a decidir que nó deve executar um novo _Pod_, o agendador considera o `overhead` do _Pod_,
-assim como a soma de pedidos aos _containers_ para esse _Pod_. Para este exemplo, o agendador adiciona os
-pedidos e a sobrecarga, depois procura um nó com 2.25 CPU e 320 MiB de memória disponível.
+Quando o kube-scheduler está decidindo que nó deve executar um novo Pod, o agendador considera o `overhead` do pod,
+assim como a soma de pedidos aos contêineres para esse _Pod_. Para este exemplo, o agendador adiciona as requisições e a sobrecarga, depois procura um nó com 2.25 CPU e 320 MiB de memória disponível.
 
-Assim que um _Pod_ é agendado a um nó, o kubelet nesse nó cria um novo {{< glossary_tooltip text="cgroup" term_id="cgroup" >}}
-para o _Pod_. É dentro deste _pod_ que o _container runtime_ subjacente vai criar _containers_.
+Assim que um Pod é agendado a um nó, o kubelet nesse nó cria um novo {{< glossary_tooltip text="cgroup" term_id="cgroup" >}}
+para o Pod. É dentro deste Pod que o agente de execução de contêiners subjacente vai criar contêineres.
 
-Se o recurso tiver um limite definido para cada _container_ (_QoS_ garantida ou _Burstrable QoS_ com limites definidos),
-o kubelet definirá um limite superior para o cgroup do _pod_ associado a esse recurso (cpu.cfs_quota_us para CPU
-e memory.limit_in_bytes de memória). Este limite superior é baseado na soma dos limites do _container_ mais o `overhead`
+Se o recurso tiver um limite definido para cada contêiner (_QoS_ garantida ou _Burstrable QoS_ com limites definidos),
+o kubelet definirá um limite superior para o cgroup do Pod associado a esse recurso (cpu.cfs_quota_us para CPU
+e memory.limit_in_bytes de memória). Este limite superior é baseado na soma dos limites do contêiner mais o `overhead`
 definido no _PodSpec_.
 
-Para o CPU, se o _Pod_ for QoS garantida ou _Burstrable QoS_, o kubelet vai definir `cpu.shares` baseado na soma dos
-pedidos ao _container_ mais o `overhead` definido no _PodSpec_.
+Para CPU, se o Pod for QoS garantida ou _Burstrable QoS_, o kubelet vai definir `cpu.shares` baseado na soma dos
+pedidos ao contêiner mais o `overhead` definido no _PodSpec_.
 
-Olhando para o nosso exemplo, verifique os pedidos ao _container_ para a carga de trabalho:
+Olhando para o nosso exemplo, verifique as requisições ao contêiner para a carga de trabalho:
 ```bash
 kubectl get pod test-pod -o jsonpath='{.spec.containers[*].resources.limits}'
 ```
 
-O total de pedidos ao _container_ são 2000m CPU e 200MiB de memória:
+O total de requisições ao contêiner são 2000m CPU e 200MiB de memória:
 ```
 map[cpu: 500m memory:100Mi] map[cpu:1500m memory:100Mi]
 ```
 
-Verifique isto contra o que é observado pelo nó:
+Verifique isto comparado ao que é observado pelo nó:
 ```bash
 kubectl describe node | grep test-pod -B2
 ```
 
-O output mostra que 2250m CPU e 320MiB de memória são solicitados, que inclui _PodOverhead_:
+A saída mostra que 2250m CPU e 320MiB de memória são solicitados, que inclui _PodOverhead_:
 ```
   Namespace                   Name                CPU Requests  CPU Limits   Memory Requests  Memory Limits  AGE
   ---------                   ----                ------------  ----------   ---------------  -------------  ---
@@ -145,12 +140,12 @@ O output mostra que 2250m CPU e 320MiB de memória são solicitados, que inclui
 
 ## Verificar os limites cgroup do Pod
 
-Verifique os cgroups de memória do Pod no nó onde a carga de trabalho está em execução. No seguinte exemplo, [`crictl`] (https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md)
-é usado no nó, que fornece uma CLI para _container runtimes_ compatíveis com CRI. Isto é um
-exemplo avançado para mostrar o comportamento do _PodOverhead_, e não é esperado que os utilizadores precisem de verificar
+Verifique os cgroups de memória do Pod no nó onde a carga de trabalho está em execução. No seguinte exemplo, [`crictl`](https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md)
+é usado no nó, que fornece uma CLI para agentes de execução compatíveis com CRI. Isto é um
+exemplo avançado para mostrar o comportamento do _PodOverhead_, e não é esperado que os usuários precisem verificar
 cgroups diretamente no nó.
 
-Primeiro, no nó em particular, determine o identificador do _Pod_:
+Primeiro, no nó em particular, determine o identificador do Pod:
 
 ```bash
 # Execute no nó onde o Pod está agendado
@@ -163,15 +158,15 @@ A partir disto, pode determinar o caminho do cgroup para o _Pod_:
 sudo crictl inspectp -o=json $POD_ID | grep cgroupsPath
 ```
 
-O caminho do cgroup resultante inclui o _container_ `pause` do _Pod_. O cgroup no nível do _Pod_ está um diretório acima.
+O caminho do cgroup resultante inclui o contêiner `pause` do Pod. O cgroup no nível do Pod está um diretório acima.
 ```
         "cgroupsPath": "/kubepods/podd7f4b509-cf94-4951-9417-d1087c92a5b2/7ccf55aee35dd16aca4189c952d83487297f3cd760f1bbf09620e206e7d0c27a"
 ```
 
-Neste caso especifico, o caminho do cgroup do pod é `kubepods/podd7f4b509-cf94-4951-9417-d1087c92a5b2`. Verifique a configuração cgroup de nível do _Pod_ para a memória:
+Neste caso especifico, o caminho do cgroup do Pod é `kubepods/podd7f4b509-cf94-4951-9417-d1087c92a5b2`. Verifique a configuração cgroup de nível do Pod para a memória:
 ```bash
 # Execute no nó onde o Pod está agendado
-# Mude também o nome do cgroup de forma a combinar com o cgroup alocado ao pod.
+# Mude também o nome do cgroup para combinar com o cgroup alocado ao Pod.
  cat /sys/fs/cgroup/memory/kubepods/podd7f4b509-cf94-4951-9417-d1087c92a5b2/memory.limit_in_bytes
 ```
 
@@ -182,10 +177,10 @@ Isto é 320 MiB, como esperado:
 
 ### Observabilidade
 
-Uma métrica `kube_pod_overhead` está disponível em [kube-state-metrics] (https://github.com/kubernetes/kube-state-metrics)
-para ajudar a identificar quando o _PodOverhead_ está a ser utilizado e para ajudar a observar a estabilidade das cargas de trabalho
+Uma métrica `kube_pod_overhead` está disponível em [kube-state-metrics](https://github.com/kubernetes/kube-state-metrics)
+para ajudar a identificar quando o _PodOverhead_ está sendo utilizado e para ajudar a observar a estabilidade das cargas de trabalho
 em execução com uma sobrecarga (_Overhead_) definida. Esta funcionalidade não está disponível na versão 1.9 do kube-state-metrics,
-mas é esperado num próximo _release_. Os utilizadores necessitarão entretanto de construir kube-state-metrics a partir da fonte.
+mas é esperado em uma próxima versão. Os usuários necessitarão entretanto construir o kube-state-metrics a partir do código fonte.
 
 
 
diff --git a/content/pt/docs/concepts/scheduling/_index.md b/content/pt/docs/concepts/scheduling/_index.md
deleted file mode 100644
index 577dbb8c87..0000000000
--- a/content/pt/docs/concepts/scheduling/_index.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: "Escalonamento"
-weight: 90
----
-

From a8634b88c5c1aa14ea20be2ffd02e393db6030b0 Mon Sep 17 00:00:00 2001
From: wardenlym <wardenlym@gmail.com>
Date: Fri, 12 Mar 2021 17:47:19 +0800
Subject: [PATCH 184/788] fix format mistake in
 zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md

---
 .../production-environment/tools/kubeadm/kubelet-integration.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
index 8eeb160775..4dd6304c6d 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
@@ -150,7 +150,7 @@ such as systemd.
 由于硬件、操作系统、网络或者其他主机特定参数的差异。某些主机需要特定的 kubelet 配置。
 以下列表提供了一些示例。
 
-- 由 kubelet 配置标志 `--resolv-confkubelet` 指定的 DNS 解析文件的路径在操作系统之间可能有所不同，
+- 由 kubelet 配置标志 `--resolv-conf` 指定的 DNS 解析文件的路径在操作系统之间可能有所不同，
   它取决于你是否使用 `systemd-resolved`。
   如果此路径错误，则在其 kubelet 配置错误的节点上 DNS 解析也将失败。
 

From b87508b7fbfabff3af59fa75ae1b944279664643 Mon Sep 17 00:00:00 2001
From: vaibhav <t_vaibhav.goel@india.nec.com>
Date: Fri, 12 Mar 2021 21:31:00 +0530
Subject: [PATCH 185/788] Linking a page

---
 .../tasks/extend-kubernetes/configure-multiple-schedulers.md    | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md b/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
index b0e272afa0..3f75467f96 100644
--- a/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
+++ b/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
@@ -202,4 +202,6 @@ verify that the pods were scheduled by the desired schedulers.
 ```shell
 kubectl get events
 ```
+You can also use a [custom scheduler configuration,](https://kubernetes.io/docs/reference/scheduling/config/#multiple-profiles) or custom container image, for the cluster's main scheduler by modifying its static pod manifest on the relevant control plane host.
+
 

From 70db6c1fcb7238d87e2115741c68ce77adeaf6e4 Mon Sep 17 00:00:00 2001
From: Kenichi Omichi <ken-oomichi@wx.jp.nec.com>
Date: Fri, 12 Mar 2021 22:10:58 +0000
Subject: [PATCH 186/788] zh: Replace redirect links of kubeadm

/docs/reference/setup-tools/kubeadm/kubeadm/ is redirected to /docs/reference/setup-tools/kubeadm/
This replaces the redirect links of kubeadm with the direct links.

NOTE: The pull request for `en` language has been already merged as https://github.com/kubernetes/website/pull/26919
---
 content/zh/docs/setup/best-practices/certificates.md | 12 ++++++------
 .../tools/kubeadm/create-cluster-kubeadm.md          |  8 ++++----
 .../setup/production-environment/tools/kubespray.md  |  4 ++--
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/content/zh/docs/setup/best-practices/certificates.md b/content/zh/docs/setup/best-practices/certificates.md
index 3a72705416..f8a79245c0 100644
--- a/content/zh/docs/setup/best-practices/certificates.md
+++ b/content/zh/docs/setup/best-practices/certificates.md
@@ -17,12 +17,12 @@ weight: 40
 
 <!--
 Kubernetes requires PKI certificates for authentication over TLS.
-If you install Kubernetes with [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), the certificates that your cluster requires are automatically generated.
+If you install Kubernetes with [kubeadm](/docs/reference/setup-tools/kubeadm/), the certificates that your cluster requires are automatically generated.
 You can also generate your own certificates - for example, to keep your private keys more secure by not storing them on the API server.
 This page explains the certificates that your cluster requires.
 -->
 Kubernetes 需要 PKI 证书才能进行基于 TLS 的身份验证。如果你是使用
-[kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/) 安装的 Kubernetes，
+[kubeadm](/zh/docs/reference/setup-tools/kubeadm/) 安装的 Kubernetes，
 则会自动生成集群所需的证书。你还可以生成自己的证书。
 例如，不将私钥存储在 API 服务器上，可以让私钥更加安全。此页面说明了集群必需的证书。
 
@@ -144,13 +144,13 @@ Required certificates:
 | front-proxy-client            | kubernetes-front-proxy-ca |                | client                                 |                                             |
 
 <!--
-[1]: any other IP or DNS name you contact your cluster on (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) the load balancer stable IP and/or DNS name, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
+[1]: any other IP or DNS name you contact your cluster on (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/) the load balancer stable IP and/or DNS name, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
 `kubernetes.default.svc.cluster`, `kubernetes.default.svc.cluster.local`)
 
 where `kind` maps to one or more of the [x509 key usage](https://godoc.org/k8s.io/api/certificates/v1beta1#KeyUsage) types:
 -->
 [1]: 用来连接到集群的不同 IP 或 DNS 名
-（就像 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/) 为负载均衡所使用的固定
+（就像 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/) 为负载均衡所使用的固定
 IP 或 DNS 名，`kubernetes`、`kubernetes.default`、`kubernetes.default.svc`、
 `kubernetes.default.svc.cluster`、`kubernetes.default.svc.cluster.local`）。
 
@@ -193,11 +193,11 @@ For kubeadm users only:
 <!--
 ### Certificate paths
 
-Certificates should be placed in a recommended path (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)). Paths should be specified using the given argument regardless of location.
+Certificates should be placed in a recommended path (as used by [kubeadm](/docs/reference/setup-tools/kubeadm/)). Paths should be specified using the given argument regardless of location.
 -->
 ### 证书路径
 
-证书应放置在建议的路径中（以便 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/)使用）。无论使用什么位置，都应使用给定的参数指定路径。
+证书应放置在建议的路径中（以便 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/)使用）。无论使用什么位置，都应使用给定的参数指定路径。
 
 | 默认 CN                   | 建议的密钥路径         | 建议的证书路径       | 命令        | 密钥参数               | 证书参数                             |
 |------------------------------|------------------------------|-----------------------------|----------------|------------------------------|-------------------------------------------|
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index 6fa2bb7158..c6619d0034 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -266,9 +266,9 @@ kubeadm 不支持将没有 `--control-plane-endpoint` 参数的单个控制平
 ### 更多信息
 
 <!--
-For more information about `kubeadm init` arguments, see the [kubeadm reference guide](/docs/reference/setup-tools/kubeadm/kubeadm/).
+For more information about `kubeadm init` arguments, see the [kubeadm reference guide](/docs/reference/setup-tools/kubeadm/).
 -->
-有关 `kubeadm init` 参数的更多信息，请参见 [kubeadm 参考指南](/zh/docs/reference/setup-tools/kubeadm/kubeadm/)。
+有关 `kubeadm init` 参数的更多信息，请参见 [kubeadm 参考指南](/zh/docs/reference/setup-tools/kubeadm/)。
 
 <!--
 To configure `kubeadm init` with a configuration file see [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
@@ -802,7 +802,7 @@ options.
 * Verify that your cluster is running properly with [Sonobuoy](https://github.com/heptio/sonobuoy)
 * <a id="lifecycle" />See [Upgrading kubeadm clusters](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
   for details about upgrading your cluster using `kubeadm`.
-* Learn about advanced `kubeadm` usage in the [kubeadm reference documentation](/docs/reference/setup-tools/kubeadm/kubeadm)
+* Learn about advanced `kubeadm` usage in the [kubeadm reference documentation](/docs/reference/setup-tools/kubeadm)
 * Learn more about Kubernetes [concepts](/docs/concepts/) and [`kubectl`](/docs/reference/kubectl/overview/).
 * See the [Cluster Networking](/docs/concepts/cluster-administration/networking/) page for a bigger list
   of Pod network add-ons.
@@ -816,7 +816,7 @@ options.
 -->
 * 使用 [Sonobuoy](https://github.com/heptio/sonobuoy) 验证集群是否正常运行
 * <a id="lifecycle" />有关使用kubeadm升级集群的详细信息，请参阅[升级 kubeadm 集群](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)。
-* 在[kubeadm 参考文档](/zh/docs/reference/setup-tools/kubeadm/kubeadm)中了解有关高级 `kubeadm` 用法的信息
+* 在[kubeadm 参考文档](/zh/docs/reference/setup-tools/kubeadm)中了解有关高级 `kubeadm` 用法的信息
 * 了解有关Kubernetes[概念](/zh/docs/concepts/)和[`kubectl`](/zh/docs/reference/kubectl/overview/)的更多信息。
 * 有关Pod网络附加组件的更多列表，请参见[集群网络](/zh/docs/concepts/cluster-administration/networking/)页面。
 * <a id="other-addons" />请参阅[附加组件列表](/zh/docs/concepts/cluster-administration/addons/)以探索其他附加组件，
diff --git a/content/zh/docs/setup/production-environment/tools/kubespray.md b/content/zh/docs/setup/production-environment/tools/kubespray.md
index d436dbad6b..eabd14c7f5 100644
--- a/content/zh/docs/setup/production-environment/tools/kubespray.md
+++ b/content/zh/docs/setup/production-environment/tools/kubespray.md
@@ -48,10 +48,10 @@ Kubespray 是一个由 [Ansible](https://docs.ansible.com/) playbooks、[清单
 
 <!--
 To choose a tool which best fits your use case, read [this comparison](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md) to
-[kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) and [kops](/docs/setup/production-environment/tools/kops/).
+[kubeadm](/docs/reference/setup-tools/kubeadm/) and [kops](/docs/setup/production-environment/tools/kops/).
 -->
 要选择最适合你的用例的工具，请阅读[此比较](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)以
- [kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/) 和 [kops](/zh/docs/setup/production-environment/tools/kops/) 。
+ [kubeadm](/zh/docs/reference/setup-tools/kubeadm/) 和 [kops](/zh/docs/setup/production-environment/tools/kops/) 。
 <!-- body -->
 
 <!--

From ca5680fa4954f94d50ed095818a83efdff803d35 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sat, 13 Mar 2021 01:05:36 +0200
Subject: [PATCH 187/788] [zh] update link to Cinder CSI driver documentation

---
 content/zh/docs/concepts/storage/volumes.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/concepts/storage/volumes.md b/content/zh/docs/concepts/storage/volumes.md
index 66e8d34718..6db5ade818 100644
--- a/content/zh/docs/concepts/storage/volumes.md
+++ b/content/zh/docs/concepts/storage/volumes.md
@@ -355,14 +355,14 @@ spec:
 <!--
 The `CSIMigration` feature for Cinder, when enabled, redirects all plugin operations
 from the existing in-tree plugin to the `cinder.csi.openstack.org` Container
-Storage Interface (CSI) Driver. In order to use this feature, the [Openstack Cinder CSI
-Driver](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/using-cinder-csi-plugin.md)
+Storage Interface (CSI) Driver. In order to use this feature, the [OpenStack Cinder CSI
+Driver](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)
 must be installed on the cluster and the `CSIMigration` and `CSIMigrationOpenStack`
 beta features must be enabled.
 -->
 启用 Cinder 的 `CSIMigration` 功能后，所有插件操作会从现有的树内插件重定向到
 `cinder.csi.openstack.org` 容器存储接口（CSI）驱动程序。
-为了使用此功能，必须在集群中安装 [Openstack Cinder CSI 驱动程序](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/using-cinder-csi-plugin.md)，
+为了使用此功能，必须在集群中安装 [OpenStack Cinder CSI 驱动程序](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)，
 并且 `CSIMigration` 和 `CSIMigrationOpenStack` Beta 功能必须被启用。
 
 ### configMap

From 22415dbc29805dc744109caee1b7430e9f1d131d Mon Sep 17 00:00:00 2001
From: houjun <hou.jun2@zte.com.cn>
Date: Sat, 13 Mar 2021 23:34:31 +0800
Subject: [PATCH 188/788] Remove deprecated scheduling plugin NodeResourcesFit
 from config.md

---
 content/en/docs/reference/scheduling/config.md | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/en/docs/reference/scheduling/config.md b/content/en/docs/reference/scheduling/config.md
index 7754d7cb7d..8d5cc24208 100644
--- a/content/en/docs/reference/scheduling/config.md
+++ b/content/en/docs/reference/scheduling/config.md
@@ -181,8 +181,6 @@ that are not enabled by default:
 - `RequestedToCapacityRatio`: Favor nodes according to a configured function of
   the allocated resources.
   Extension points: `Score`.
-- `NodeResourceLimits`: Favors nodes that satisfy the Pod resource limits.
-  Extension points: `PreScore`, `Score`.
 - `CinderVolume`: Checks that OpenStack Cinder volume limits can be satisfied
   for the node.
   Extension points: `Filter`.

From 3f6343225d1c1d8ed6a7051152cb3db6320aaf12 Mon Sep 17 00:00:00 2001
From: Jailton Lopes <jailton@gmail.com>
Date: Sat, 13 Mar 2021 23:03:21 -0300
Subject: [PATCH 189/788] Rewriting the description in the background section
 of how the volume behaves when a pod ceases to exist.

Signed-off-by: Jailton Lopes <jailton@gmail.com>
---
 content/en/docs/concepts/storage/volumes.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 8d84a519c0..8ed91067e0 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -34,8 +34,9 @@ Kubernetes supports many types of volumes. A {{< glossary_tooltip term_id="pod"
 can use any number of volume types simultaneously.
 Ephemeral volume types have a lifetime of a pod, but persistent volumes exist beyond
 the lifetime of a pod. Consequently, a volume outlives any containers
-that run within the pod, and data is preserved across container restarts. When a
-pod ceases to exist, the volume is destroyed.
+that run within the pod, and data is preserved across container restarts. When a pod
+ceases to exist, Kubernetes destroys ephemeral volumes; however, Kubernetes does not
+destroy persistent volumes.
 
 At its core, a volume is just a directory, possibly with some data in it, which
 is accessible to the containers in a pod. How that directory comes to be, the

From 59e056c086254486665e5dc7288434e2d9588ddb Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sun, 14 Mar 2021 14:27:57 +0200
Subject: [PATCH 190/788] [zh] update invalid web page link for api group

---
 content/zh/docs/reference/glossary/api-group.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/reference/glossary/api-group.md b/content/zh/docs/reference/glossary/api-group.md
index 3c23f3dd0d..a219943be7 100644
--- a/content/zh/docs/reference/glossary/api-group.md
+++ b/content/zh/docs/reference/glossary/api-group.md
@@ -2,7 +2,7 @@
 title: API Group
 id: api-group
 date: 2019-09-02
-full_link: /zh/docs/concepts/overview/kubernetes-api/#api-groups
+full_link: /zh/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
 short_description: >
   Kubernetes API 中的一组相关路径
 
@@ -17,7 +17,7 @@ tags:
 title: API Group
 id: api-group
 date: 2019-09-02
-full_link: /docs/concepts/overview/kubernetes-api/#api-groups
+full_link: /docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
 short_description: >
   A set of related paths in the Kubernetes API.
 

From 3a71a0064f535b6d447ae0cba8bef48825f0f3d6 Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio@users.noreply.github.com>
Date: Sun, 14 Mar 2021 09:55:39 -0300
Subject: [PATCH 191/788] Add partial translation

---
 .../containers/container-lifecycle-hooks.md   | 48 ++++++++++---------
 1 file changed, 25 insertions(+), 23 deletions(-)

diff --git a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
index fab8e4cd86..e7c925866a 100644
--- a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
@@ -28,12 +28,13 @@ This hook is executed immediately after a container is created.
 However, there is no guarantee that the hook will execute before the container ENTRYPOINT.
 No parameters are passed to the handler.
 
+Este _hook_ é executado imediatamente após um contêiner ser criado.
+Entretanto, não há garantia que o _hook_ será executado antes do ENTRYPOINT do contêiner.
+Nenhum parâmetro é passado para o manipulador.
+
 `PreStop`
 
-This hook is called immediately before a container is terminated due to an API request or management
-event such as a liveness/startup probe failure, preemption, resource contention and others. A call
-to the `PreStop` hook fails if the container is already in a terminated or completed state and the
-hook must complete before the TERM signal to stop the container can be sent. The Pod's termination
+The Pod's termination
 grace period countdown begins before the `PreStop` hook is executed, so regardless of the outcome of
 the handler, the container will eventually terminate within the Pod's termination grace period. No
 parameters are passed to the handler.
@@ -41,37 +42,38 @@ parameters are passed to the handler.
 A more detailed description of the termination behavior can be found in
 [Termination of Pods](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination).
 
-### Hook handler implementations
+Esse _hook_ é chamado imediatamente antes de um contêiner ser encerrado devido a uma solicitação de API ou um gerenciamento de evento como liveness/startup probe failure, preemption, resource contention e outros.
+Uma chamada ao _hook_ `PreStop` falha se o contêiner já está em um estado finalizado ou concluído e o _hook_ deve ser concluído antes que o sinal TERM seja enviado para parar o contêiner. 
 
-Containers can access a hook by implementing and registering a handler for that hook.
-There are two types of hook handlers that can be implemented for Containers:
 
-* Exec - Executes a specific command, such as `pre-stop.sh`, inside the cgroups and namespaces of the Container.
-Resources consumed by the command are counted against the Container.
-* HTTP - Executes an HTTP request against a specific endpoint on the Container.
+### Implementações de manipulador de hook
 
-### Hook handler execution
+Os contêineres podem acessar um _hook_ implementando e registrando um manipulador para esse _hook_.
+Existem dois tipos de manipuladores de _hooks_ que podem ser implementados para contêineres:
 
-When a Container lifecycle management hook is called,
-the Kubernetes management system execute the handler according to the hook action,
-`httpGet` and `tcpSocket` are executed by the kubelet process, and `exec` is executed in the container.
+* Exec - Executa um comando específico, como `pre-stop.sh`, dentro do cgroups e Namespaces do contêiner.
+* HTTP - Executa uma requisição HTTP em um endpoint específico do contêiner.
 
-Hook handler calls are synchronous within the context of the Pod containing the Container.
-This means that for a `PostStart` hook,
-the Container ENTRYPOINT and hook fire asynchronously.
-However, if the hook takes too long to run or hangs,
-the Container cannot reach a `running` state.
+### Execução do manipulador de hook
 
-`PreStop` hooks are not executed asynchronously from the signal to stop the Container; the hook must
-complete its execution before the TERM signal can be sent. If a `PreStop` hook hangs during
-execution, the Pod's phase will be `Terminating` and remain there until the Pod is killed after its
-`terminationGracePeriodSeconds` expires. This grace period applies to the total time it takes for
+
+Quando um _hook_ de gerenciamento de ciclo de vida do contêiner é chamado, o sistema de gerenciamento do Kubernetes executa o manipulador de acordo com a ação do _hook_, `httpGet` e `tcpSocker` são executados pelo processo kubelet e `exec` é executado pelo contêiner.
+
+As chamadas do manipulador do _hook_ são síncronas no contexto do Pod que contém o contêiner.
+Isso significa que para um _hook_ `PostStart`, o ENTRYPOINT do contêiner e o _hook_ disparam de forma assíncrona.
+No entanto, se o _hook_ demorar muito para ser executado ou travar, o contêiner não consegue atingir o estado `running`.
+
+This grace period applies to the total time it takes for
 both the `PreStop` hook to execute and for the Container to stop normally. If, for example,
 `terminationGracePeriodSeconds` is 60, and the hook takes 55 seconds to complete, and the Container
 takes 10 seconds to stop normally after receiving the signal, then the Container will be killed
 before it can stop normally, since `terminationGracePeriodSeconds` is less than the total time
 (55+10) it takes for these two things to happen.
 
+Os _hooks_ `PreStop` não são executados de forma assíncrona a partir do sinal para parar o conêiner, o _hook_ precisa finalizar a sua execução antes que o sinal TERM possa ser enviado.
+Se um _hook_ `PreStop` travar durante a execução, a fase do Pod será `Terminating` e permanecerá até que o Pod seja morto após seu `terminationGracePeriodSeconds` expirar.
+
+
 If either a `PostStart` or `PreStop` hook fails,
 it kills the Container.
 

From 2b18c86f244edb577fcc78d003ae3174dd4d9ac9 Mon Sep 17 00:00:00 2001
From: Yecheng Fu <cofyc.jackson@gmail.com>
Date: Thu, 25 Feb 2021 16:23:47 +0800
Subject: [PATCH 192/788] add VolumeCapacityPriority feature gate

Co-authored-by: Wei Huang <weih@hey.com>
---
 .../command-line-tools-reference/feature-gates.md          | 3 +++
 content/en/docs/reference/scheduling/config.md             | 7 ++++++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 51c13f528f..8c606d001d 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -346,6 +346,7 @@ different Kubernetes components.
 | `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
 | `TokenRequestProjection` | `true` | Beta | 1.12 | 1.19 |
 | `TokenRequestProjection` | `true` | GA | 1.20 | - |
+| `VolumeCapacityPriority` | `false` | Alpha | 1.21 | |
 | `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 |
 | `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | 1.19 |
 | `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
@@ -777,6 +778,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `TopologyManager`: Enable a mechanism to coordinate fine-grained hardware resource
   assignments for different components in Kubernetes. See
   [Control Topology Management Policies on a node](/docs/tasks/administer-cluster/topology-manager/).
+- 'VolumeCapacityPriority`: Enable support for prioritizing nodes in different
+  topologies based on available PV capacity.
 - `VolumePVCDataSource`: Enable support for specifying an existing PVC as a DataSource.
 - `VolumeScheduling`: Enable volume topology aware scheduling and make the
   PersistentVolumeClaim (PVC) binding aware of scheduling decisions. It also
diff --git a/content/en/docs/reference/scheduling/config.md b/content/en/docs/reference/scheduling/config.md
index 7754d7cb7d..d963d56c92 100644
--- a/content/en/docs/reference/scheduling/config.md
+++ b/content/en/docs/reference/scheduling/config.md
@@ -145,7 +145,12 @@ extension points:
   Extension points: `Score`.
 - `VolumeBinding`: Checks if the node has or if it can bind the requested
   {{< glossary_tooltip text="volumes" term_id="volume" >}}.
-  Extension points: `PreFilter`, `Filter`, `Reserve`, `PreBind`.
+  Extension points: `PreFilter`, `Filter`, `Reserve`, `PreBind`, `Score`.
+  {{< note >}}
+  `Score` extension point is enabled when `VolumeCapacityPriority` feature is
+  enabled. It prioritizes the smallest PVs that can fit the requested volume
+  size.
+  {{< /note >}}
 - `VolumeRestrictions`: Checks that volumes mounted in the node satisfy
   restrictions that are specific to the volume provider.
   Extension points: `Filter`.

From 365af1356b79424c097119361db72224026949c5 Mon Sep 17 00:00:00 2001
From: Federico Gallo <musicapidae@gmail.com>
Date: Sun, 14 Mar 2021 15:09:04 -0300
Subject: [PATCH 193/788] [es] Fix/Update
 content/es/docs/concepts/policy/_index.md (#27043)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Fix: title is put in quotes. Update: Added description, probably deleted by mistake reviewing change suggestions

* Apply suggestions from code review

Realmente no estoy entendiendo por qué el "Commit suggestions" no está realizando el commit al fork. Lo voy a intentar nuevamente, pero esta vez haciendo un review ...

Éste mensaje se corresponde con el Commit suggestion al utilizar el "Add  suggestion to batch" no creo que funcione tampoco en cuyo caso voy a intentar hacer (como mencioné en el párrafo anterior) un review para que los cambios persistan.

Co-authored-by: Rael Garcia <rael@rael.io>

Co-authored-by: Rael Garcia <rael@rael.io>
---
 content/es/docs/concepts/policy/_index.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/es/docs/concepts/policy/_index.md b/content/es/docs/concepts/policy/_index.md
index d5ebfed4f5..d0f16fc4ad 100755
--- a/content/es/docs/concepts/policy/_index.md
+++ b/content/es/docs/concepts/policy/_index.md
@@ -1,6 +1,8 @@
 ---
 title: Políticas
 weight: 90
+description: >
+    Políticas configurables que se aplican a grupos de recursos.
 ---
 
 La sección de Políticas describe las diferentes políticas configurables que se aplican a grupos de recursos:

From 004df073c410dd4151752305362cce48c2aeae80 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Mon, 15 Mar 2021 00:29:41 +0200
Subject: [PATCH 194/788] [vi] update invalid web page link for api group

---
 .../vi/docs/reference/glossary/api-group.md   |   4 +-
 .../vi/docs/reference/kubectl/cheatsheet.md   | 760 +++++++++---------
 2 files changed, 382 insertions(+), 382 deletions(-)

diff --git a/content/vi/docs/reference/glossary/api-group.md b/content/vi/docs/reference/glossary/api-group.md
index ce2cfd4532..66c215e0a6 100644
--- a/content/vi/docs/reference/glossary/api-group.md
+++ b/content/vi/docs/reference/glossary/api-group.md
@@ -2,7 +2,7 @@
 title: API Group
 id: api-group
 date: 2019-12-16
-full_link: /docs/concepts/overview/kubernetes-api/#api-groups
+full_link: /docs/concepts/overview/kubernetes-api/#api-groups-and-versioning
 short_description: >
   Một tập những đường dẫn tương đối đến Kubernetes API.
 
@@ -18,4 +18,4 @@ Một tập những đường dẫn tương đối đến Kubernetes API.
 
 Bạn có thể cho phép hay vô hiệu từng API group bằng cách thay đổi cấu hình trên API server của mình. Đồng thời bạn cũng có thể vô hiệu hay kích hoạt các đường dẫn cho những tài nguyên cụ thể. API group đơn giản hóa việc mở rộng Kubernetes API. Nó được chỉ định dưới dạng REST và trong trường `apiVersion` của một đối tượng đã được chuyển hóa.
 
-- Đọc thêm về [API Group](/docs/concepts/overview/kubernetes-api/#api-groups).
\ No newline at end of file
+- Đọc thêm về [API Group](/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning).
\ No newline at end of file
diff --git a/content/vi/docs/reference/kubectl/cheatsheet.md b/content/vi/docs/reference/kubectl/cheatsheet.md
index 38e51750e6..079b36a42b 100644
--- a/content/vi/docs/reference/kubectl/cheatsheet.md
+++ b/content/vi/docs/reference/kubectl/cheatsheet.md
@@ -1,381 +1,381 @@
----
-title: kubectl Cheat Sheet
-reviewers:
-- ngtuna
-content_type: concept
-card:
-  name: reference
-  weight: 30
----
-
-<!-- overview -->
-
-Xem thêm: [Kubectl Overview](/docs/reference/kubectl/overview/) và [JsonPath Guide](/docs/reference/kubectl/jsonpath).
-
-Trang này là trang tổng quan của lệnh `kubectl`.
-
-
-
-<!-- body -->
-
-# kubectl - Cheat Sheet
-
-## Kubectl Autocomplete
-
-### BASH
-
-```bash
-source <(kubectl completion bash) # thiết lập autocomplete trong bash vào shell hiện tại, gói bash-completion nên được cài đặt trước tiên 
-echo "source <(kubectl completion bash)" >> ~/.bashrc # thêm vĩnh viễn autocomplete vào trong bash shell
-```
-
-Bạn có thể dùng một alias cho `kubectl` cũng hoạt động với completion:
-
-```bash
-alias k=kubectl
-complete -F __start_kubectl k
-```
-
-### ZSH
-
-```bash
-source <(kubectl completion zsh)  # thiết lập autocomplete trong zsh vào shell hiện tại
-echo "if [ $commands[kubectl] ]; then source <(kubectl completion zsh); fi" >> ~/.zshrc # thêm vĩnh viễn autocomplete vào trong zsh shell
-```
-
-## Ngữ cảnh và cấu hình kubectl
-
-Thiết lập cụm Kubernetes nào mà `kubectl` sẽ giao tiếp với và sửa đổi thông tin cấu hình.
-Xem tài liệu [Xác thực giữa các cụm với kubeconfig](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
-để biết thông tin chi tiết của tệp cấu hình.
-
-```bash
-kubectl config view # Hiển thị các thiết lập kubeconfig đã được merged
-
-# sử dụng nhiều tệp kubeconfig cùng một lúc và xem cấu hình hợp nhất
-KUBECONFIG=~/.kube/config:~/.kube/kubconfig2 
-
-kubectl config view
-
-# lấy mật khẩu cho người dùng e2e
-kubectl config view -o jsonpath='{.users[?(@.name == "e2e")].user.password}'
-
-kubectl config view -o jsonpath='{.users[].name}'    # hiển thị người dùng đầu tiên  
-kubectl config view -o jsonpath='{.users[*].name}'   # lấy danh sách người dùng  
-kubectl config get-contexts                          # hiển thị danh sách các ngữ cảnh 
-kubectl config current-context                       # hiển thị ngữ cảnh hiện tại
-kubectl config use-context my-cluster-name           # thiết lập ngữ cảnh mặc định cho my-cluster-name
-
-# thêm một cụm mới vào kubeconf hỗ trợ xác thực cơ bản
-kubectl config set-credentials kubeuser/foo.kubernetes.com --username=kubeuser --password=kubepassword
-
-# lưu vĩnh viễn namespace cho tất cả các lệnh kubectl tiếp theo trong ngữ cảnh đó
-kubectl config set-context --current --namespace=ggckad-s2
-
-# thiết lập ngữ cảnh sử dụng tên người dùng và namespace cụ thể
-kubectl config set-context gce --user=cluster-admin --namespace=foo \
-  && kubectl config use-context gce
- 
-kubectl config unset users.foo                       # xóa người dùng foo
-```
-
-## Apply
-`apply` quản lý các ứng dụng thông qua các tệp định nghĩa tài nguyên Kubernetes. Nó tạo và cập nhật các tài nguyên trong một cụm thông qua việc chạy `kubectl apply`. Đây là cách được đề xuất để quản lý các ứng dụng Kubernetes trong thực tế. Xem thêm [Kubectl Book](https://kubectl.docs.kubernetes.io).
-
-## Tạo một đối tượng
-
-Kubernetes manifests có thể được định nghĩa trong tệp json hoặc yaml. Phần mở rộng `.yaml`,
-`.yml`, và `.json` có thể được dùng.
-
-```bash
-kubectl apply -f ./my-manifest.yaml            # tạo tài nguyên
-kubectl apply -f ./my1.yaml -f ./my2.yaml      # tạo từ nhiều tệp
-kubectl apply -f ./dir                         # tạo tài nguyên từ tất cả các tệp manifest trong thư mục dir
-kubectl apply -f https://git.io/vPieo          # tạo tài nguyên từ url
-kubectl create deployment nginx --image=nginx  # tạo một deployment nginx
-kubectl explain pods,svc                       # lấy thông tin pod và service manifest
-
-# Tạo nhiều đối tượng YAML từ stdin
-cat <<EOF | kubectl apply -f -
-apiVersion: v1
-kind: Pod
-metadata:
-  name: busybox-sleep
-spec:
-  containers:
-  - name: busybox
-    image: busybox
-    args:
-    - sleep
-    - "1000000"
----
-apiVersion: v1
-kind: Pod
-metadata:
-  name: busybox-sleep-less
-spec:
-  containers:
-  - name: busybox
-    image: busybox
-    args:
-    - sleep
-    - "1000"
-EOF
-
-# Tạo một secret với một số keys
-cat <<EOF | kubectl apply -f -
-apiVersion: v1
-kind: Secret
-metadata:
-  name: mysecret
-type: Opaque
-data:
-  password: $(echo -n "s33msi4" | base64 -w0)
-  username: $(echo -n "jane" | base64 -w0)
-EOF
-
-```
-
-## Xem, tìm các tài nguyên
-
-```bash
-# Lệnh get với một số đầu ra cơ bản
-kubectl get services                          # Liệt kê tất cả các services trong namespace
-kubectl get pods --all-namespaces             # Liệt kê tất cả các pods trong tất cả các namespaces
-kubectl get pods -o wide                      # Liệt kê tất cả các pods namespace, với nhiều thông tin hơn
-kubectl get deployment my-dep                 # Liệt kê một deployment cụ thể
-kubectl get pods                              # Liệt kê tất cả các pods trong namespace
-kubectl get pod my-pod -o yaml                # Lấy thông tin của một pod ở dạng YAML
-kubectl get pod my-pod -o yaml --export       # Lấy thông tin của một pod ở dạng YAML mà không có thông tin cụ thể về cụm
-
-# Lệnh describe
-kubectl describe nodes my-node
-kubectl describe pods my-pod
-
-# Liệt kê các services được sắp xếp theo tên
-kubectl get services --sort-by=.metadata.name
-
-# Liệt kê các pods được sắp xếp theo số lần khởi động lại
-kubectl get pods --sort-by='.status.containerStatuses[0].restartCount'
-
-# Liệt kê các pods được sắp xếp theo dung lượng trong namespace có tên là test
-
-kubectl get pods -n test --sort-by='.spec.capacity.storage'
-
-# Lấy thông tin phiên bản của tất cả các pods có nhãn app=cassandra
-kubectl get pods --selector=app=cassandra -o \
-  jsonpath='{.items[*].metadata.labels.version}'
-
-# Liệt kê tất cả các worker nodes (sử dụng một selector để loại trừ kết quả có một nhãn
-# có tên 'node-role.kubernetes.io/master'  
-kubectl get node --selector='!node-role.kubernetes.io/master'
-
-# Liệt kê tất cả các pods đang chạy trong namespace
-kubectl get pods --field-selector=status.phase=Running
-
-# Liệt kê tất cả các ExternalIPs của tất cả các nodes
-kubectl get nodes -o jsonpath='{.items[*].status.addresses[?(@.type=="ExternalIP")].address}'
-
-# Liệt kê tên của các pods thuộc về một RC nhất định
-# Lệnh "jq" hữu ích cho các chuyển đổi quá mức phức tạp cho jsonpath, xem thêm tại https://stedolan.github.io/jq/
-sel=${$(kubectl get rc my-rc --output=json | jq -j '.spec.selector | to_entries | .[] | "\(.key)=\(.value),"')%?}
-echo $(kubectl get pods --selector=$sel --output=jsonpath={.items..metadata.name})
-
-# Hiển thị nhãn của tất cả các pods (hoặc các đối tượng Kubernetes khác hỗ trợ gán nhãn)
-kubectl get pods --show-labels
-
-# Kiểm tra xem nodes nào đã sẵn sàng
-JSONPATH='{range .items[*]}{@.metadata.name}:{range @.status.conditions[*]}{@.type}={@.status};{end}{end}' \
- && kubectl get nodes -o jsonpath="$JSONPATH" | grep "Ready=True"
-
-# Liệt kê tất cả cá Secrets hiện đang sử dụng bởi một pod
-kubectl get pods -o json | jq '.items[].spec.containers[].env[]?.valueFrom.secretKeyRef.name' | grep -v null | sort | uniq
-
-# Liệt kê tất cả các sự kiện được sắp xếp theo thời gian
-kubectl get events --sort-by=.metadata.creationTimestamp
-```
-
-## Cập nhật các tài nguyên
-
-Theo như phiên bản 1.11, `rolling-update` đã không còn được dùng nữa (xem [CHANGELOG-1.11.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.11.md)), sử dụng `rollout` thay thế.
-
-```bash
-kubectl set image deployment/frontend www=image:v2               # Cập nhận container "www" của deployment "frontend", cập nhật image
-kubectl rollout history deployment/frontend                      # Kiểm tra lịch sử deployment bao gồm các sửa đổi
-kubectl rollout undo deployment/frontend                         # Quay trở lại deployment trước đó
-kubectl rollout undo deployment/frontend --to-revision=2         # Quay trở lại một phiên bản cụ thể
-kubectl rollout status -w deployment/frontend                    # Xem trạng thái cập nhật của deployment "frontend" cho đến khi hoàn thành
-
-
-# không còn được sử dụng kể từ phiên bản 1.11
-kubectl rolling-update frontend-v1 -f frontend-v2.json           # (không dùng nữa) Cập nhật pods của frontend-v1
-kubectl rolling-update frontend-v1 frontend-v2 --image=image:v2  # (không dùng nữa) Đổi tên tài nguyên và cập nhật image 
-kubectl rolling-update frontend --image=image:v2                 # (không dùng nữa) Cập nhật image của pod của frontend
-kubectl rolling-update frontend-v1 frontend-v2 --rollback        # (không dùng nữa) Hủy bỏ tiến trình cập nhật hiện tại
-
-cat pod.json | kubectl replace -f -                              # Thay thế một pod dựa trên JSON được truyền vào std
-
-# Buộc thay thế, xóa và sau đó tạo lại tài nguyên, sẽ gây ra sự cố ngưng services
-kubectl replace --force -f ./pod.json
-
-# Tạo một services cho nginx, phục vụ trên công 80 và kết nối đến các container trên cổng 8000
-kubectl expose rc nginx --port=80 --target-port=8000
-
-# Cập nhật phiên bản image của một container đơn lẻ lên v4 
-kubectl get pod mypod -o yaml | sed 's/\(image: myimage\):.*$/\1:v4/' | kubectl replace -f -
-
-kubectl label pods my-pod new-label=awesome                      # Thêm một nhãn
-kubectl annotate pods my-pod icon-url=http://goo.gl/XXBTWq       # Thêm một chú thích
-kubectl autoscale deployment foo --min=2 --max=10                # Tự động scale deployment "foo"
-```
-
-## Vá các tài nguyên
-
-```bash
-# Cập nhật một phần một node
-kubectl patch node k8s-node-1 -p '{"spec":{"unschedulable":true}}'
-
-# Cập nhật image của container; spec.containers[*].name là bắt buộc vì đó là khóa hợp nhất
-kubectl patch pod valid-pod -p '{"spec":{"containers":[{"name":"kubernetes-serve-hostname","image":"new image"}]}}'
-
-# Cập nhật image của container sử dụng một bản vá json với các mảng vị trí
-kubectl patch pod valid-pod --type='json' -p='[{"op": "replace", "path": "/spec/containers/0/image", "value":"new image"}]'
-
-# Vô hiệu hóa một deployment livenessProbe sử dụng một bản vá json với các mảng vị trí
-kubectl patch deployment valid-deployment  --type json   -p='[{"op": "remove", "path": "/spec/template/spec/containers/0/livenessProbe"}]'
-
-# Thêm một phần tử mới vào một mảng vị trí
-kubectl patch sa default --type='json' -p='[{"op": "add", "path": "/secrets/1", "value": {"name": "whatever" } }]'
-```
-
-## Chỉnh sửa các tài nguyên
-Chỉnh sửa bất kì API tài nguyên nào trong trình soạn thảo ưa thích của bạn.
-
-```bash
-kubectl edit svc/docker-registry                      # Chỉnh sửa services có tên docker-registry
-KUBE_EDITOR="nano" kubectl edit svc/docker-registry   # Sử dụng một trình soạn thảo thay thế
-```
-
-## Scaling tài nguyên
-
-```bash
-kubectl scale --replicas=3 rs/foo                                 # Scale một replicaset có tên 'foo' thành 3
-kubectl scale --replicas=3 -f foo.yaml                            # Scale một tài nguyên được xác định trong "foo.yaml" thành 3
-kubectl scale --current-replicas=2 --replicas=3 deployment/mysql  # Nếu kích thước hiện tại của deployment mysql là 2, scale mysql thành 3
-kubectl scale --replicas=5 rc/foo rc/bar rc/baz                   # Scale nhiều replication controllers
-```
-
-## Xóa tài nguyên
-
-```bash
-kubectl delete -f ./pod.json                                              # Xóa một pod sử dụng loại và tên được xác định trong pod.json
-kubectl delete pod,service baz foo                                        # Xóa pods và services có tên "baz" và "foo"
-kubectl delete pods,services -l name=myLabel                              # Xóa pods và services có nhãn name=myLabel
-kubectl -n my-ns delete pod,svc --all                                     # Xóa tất cả pods và services trong namespace my-ns,
-# Xóa tất cả pods matching với pattern1 hoặc pattern2
-kubectl get pods  -n mynamespace --no-headers=true | awk '/pattern1|pattern2/{print $1}' | xargs  kubectl delete -n mynamespace pod
-```
-
-## Tương tác với các pods đang chạy
-
-```bash
-kubectl logs my-pod                                 # kết xuất logs của pod (stdout)
-kubectl logs -l name=myLabel                        # kết xuất logs của pod có nhãn name=myLabel (stdout)
-kubectl logs my-pod --previous                      # kết xuất logs của pod (stdout) cho khởi tạo trước của một container
-kubectl logs my-pod -c my-container                 # kết xuất logs của container của pod (stdout, trường hợp có nhiều container)
-kubectl logs -l name=myLabel -c my-container        # kết xuất logs của container có tên my-container và có nhãn name=myLabel (stdout)
-kubectl logs my-pod -c my-container --previous      # kết xuất logs của container my-container của pod my-pod (stdout, trường hợp có nhiều container) cho khởi tạo trước của một container
-kubectl logs -f my-pod                              # lấy logs của pod my-pod (stdout)
-kubectl logs -f my-pod -c my-container              # lấy logs của container my-container trong pod my-pod (stdout, trường hợp nhiều container)
-kubectl logs -f -l name=myLabel --all-containers    # lấy logs của tất cả các container của pod có nhãn name=myLabel (stdout)
-kubectl run -i --tty busybox --image=busybox -- sh  # Chạy pod trong một shell tương tác
-kubectl run nginx --image=nginx --restart=Never -n 
-mynamespace                                         # Chạy pod nginx trong một namespace cụ thể
-kubectl run nginx --image=nginx --restart=Never     # Chạy pod nginx và ghi spec của nó vào file có tên pod.yaml
---dry-run -o yaml > pod.yaml
-
-kubectl attach my-pod -i                            # Đính kèm với container đang chạy
-kubectl port-forward my-pod 5000:6000               # Lắng nghe trên cổng 5000 của máy local và chuyển tiếp sang cổng 6000 trên pod my-pod
-kubectl exec my-pod -- ls /                         # Chạy lệnh trong một pod (trường hợp 1 container)
-kubectl exec my-pod -c my-container -- ls /         # Chạy lệnh trong pod (trường hợp nhiều container)
-kubectl top pod POD_NAME --containers               # Hiển thị số liệu của pod và container chạy trong nó
-```
-
-## Tương tác với các nodes và cụm
-
-```bash
-kubectl cordon my-node                                                # Đánh dấu my-node là không thể lập lịch
-kubectl drain my-node                                                 # Gỡ my-node ra khỏi cụm để chuẩn bị cho việc bảo trì
-kubectl uncordon my-node                                              # Đánh dấu my-node có thể lập lịch trở lại
-kubectl top node my-node                                              # Hiển thị số liệu của node
-kubectl cluster-info                                                  # Hiển thị địa chỉ master và các services
-kubectl cluster-info dump                                             # Kết xuất trạng thái hiện tại của cụm ra ngoài stdout
-kubectl cluster-info dump --output-directory=/path/to/cluster-state   # Kết xuất trạng thái hiện tại của cụm vào /path/to/cluster-state
-
-kubectl taint nodes foo dedicated=special-user:NoSchedule
-```
-
-### Các loại tài nguyên
-
-Liệt kê tất cả các loại tài nguyên được hỗ trợ cùng với tên viết tắt của chúng, [API group](/docs/concepts/overview/kubernetes-api/#api-groups), cho dù chúng là [namespaced](/docs/concepts/overview/working-with-objects/namespaces), và [Kind](/docs/concepts/overview/working-with-objects/kubernetes-objects):
-
-```bash
-kubectl api-resources
-```
-
-Các hoạt động khác để khám phá các tài nguyên API:
-
-```bash
-kubectl api-resources --namespaced=true      # Tất cả các tài nguyên được đặt tên
-kubectl api-resources --namespaced=false     # Tất cả các tài nguyên không được đặt tên
-kubectl api-resources -o name                # Tất cả các tài nguyên với đầu ra đơn giản (chỉ gồm tên tài nguyên)
-kubectl api-resources -o wide                # Tất cả các tài nguyên với đầu ra mở rộng
-kubectl api-resources --verbs=list,get       # Tất cả các tài nguyên hỗ trợ yêu cầu "list" và "get"
-kubectl api-resources --api-group=extensions # Tất cả tài nguyên trong nhóm API "tiện ích mở rộng"
-```
-
-### Định dạng đầu ra
-
-Để xuất thông tin chi tiết ra cửa sổ terminal của bạn theo một định dạng cụ thể, bạn có thể thêm các cờ `-o` hoặc `--output` vào lệnh `kubectl` được hỗ trợ.
-
-Định dạng đầu ra | Mô tả
---------------| -----------
-`-o=custom-columns=<spec>` | In một bảng bằng danh sách, các cột tùy chỉnh được phân tách bằng dấu phẩy
-`-o=custom-columns-file=<filename>` | In một bảng bằng cách sử dụng mẫu cột tùy chỉnh trong tệp `<filename>`
-`-o=json`     | Xuất ra một đối tượng API theo định dạng JSON
-`-o=jsonpath=<template>` | In ra các trường được xác định trong [jsonpath](/docs/reference/kubectl/jsonpath) 
-`-o=jsonpath-file=<filename>` |In ra các trường được xác định bởi [jsonpath](/docs/reference/kubectl/jsonpath) trong tệp `<filename>`
-`-o=name`     | Chỉ in tên tài nguyên và không có gì khác
-`-o=wide`     | Xuất ra ở định dạng văn bản thuần với bất kì thông tin bổ sung nào và đối với pods, cần phải thêm tên node
-`-o=yaml`     | Xuất ra đối tượng API theo định dạng YAML
-
-### Kubectl output verbosity and debugging
-
-Kubectl verbosity được kiểm soát bởi cờ `-v` or `--v` theo sau là một số nguyên biểu thị mức log. Các quy ước ghi logs của Kubernetes và các mức logs liên quan được mô tả ở [đây](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md).
-
-Verbosity | Description
---------------| -----------
-`--v=0` | Hữu ích cho việc hiển thị cho các người vận hành cụm.
-`--v=1` | Một mức log mặc định hợp lý nếu bạn không muốn lấy quá nhiều logs.
-`--v=2` | Thông tin trạng thái về services và các thông điệp logs quan trọng có thể tương quan với những thay đổi quan trọng trong hệ thống. Đây là mức ghi logs mặc định được khuyến nghị cho hầu hết các hệ thống.
-`--v=3` | Thông tin mở rộng về những thay đổi.
-`--v=4` | Debug level verbosity.
-`--v=6` | Hiển thị tài nguyên được yêu cầu.
-`--v=7` | Hiển thị HTTP request headers.
-`--v=8` | Hiển thị nội dung HTTP request.
-`--v=9` | Hiển thị nội dung HTTP request mà không cắt ngắn nội dung.
-
-
-
+---
+title: kubectl Cheat Sheet
+reviewers:
+- ngtuna
+content_type: concept
+card:
+  name: reference
+  weight: 30
+---
+
+<!-- overview -->
+
+Xem thêm: [Kubectl Overview](/docs/reference/kubectl/overview/) và [JsonPath Guide](/docs/reference/kubectl/jsonpath).
+
+Trang này là trang tổng quan của lệnh `kubectl`.
+
+
+
+<!-- body -->
+
+# kubectl - Cheat Sheet
+
+## Kubectl Autocomplete
+
+### BASH
+
+```bash
+source <(kubectl completion bash) # thiết lập autocomplete trong bash vào shell hiện tại, gói bash-completion nên được cài đặt trước tiên 
+echo "source <(kubectl completion bash)" >> ~/.bashrc # thêm vĩnh viễn autocomplete vào trong bash shell
+```
+
+Bạn có thể dùng một alias cho `kubectl` cũng hoạt động với completion:
+
+```bash
+alias k=kubectl
+complete -F __start_kubectl k
+```
+
+### ZSH
+
+```bash
+source <(kubectl completion zsh)  # thiết lập autocomplete trong zsh vào shell hiện tại
+echo "if [ $commands[kubectl] ]; then source <(kubectl completion zsh); fi" >> ~/.zshrc # thêm vĩnh viễn autocomplete vào trong zsh shell
+```
+
+## Ngữ cảnh và cấu hình kubectl
+
+Thiết lập cụm Kubernetes nào mà `kubectl` sẽ giao tiếp với và sửa đổi thông tin cấu hình.
+Xem tài liệu [Xác thực giữa các cụm với kubeconfig](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
+để biết thông tin chi tiết của tệp cấu hình.
+
+```bash
+kubectl config view # Hiển thị các thiết lập kubeconfig đã được merged
+
+# sử dụng nhiều tệp kubeconfig cùng một lúc và xem cấu hình hợp nhất
+KUBECONFIG=~/.kube/config:~/.kube/kubconfig2 
+
+kubectl config view
+
+# lấy mật khẩu cho người dùng e2e
+kubectl config view -o jsonpath='{.users[?(@.name == "e2e")].user.password}'
+
+kubectl config view -o jsonpath='{.users[].name}'    # hiển thị người dùng đầu tiên  
+kubectl config view -o jsonpath='{.users[*].name}'   # lấy danh sách người dùng  
+kubectl config get-contexts                          # hiển thị danh sách các ngữ cảnh 
+kubectl config current-context                       # hiển thị ngữ cảnh hiện tại
+kubectl config use-context my-cluster-name           # thiết lập ngữ cảnh mặc định cho my-cluster-name
+
+# thêm một cụm mới vào kubeconf hỗ trợ xác thực cơ bản
+kubectl config set-credentials kubeuser/foo.kubernetes.com --username=kubeuser --password=kubepassword
+
+# lưu vĩnh viễn namespace cho tất cả các lệnh kubectl tiếp theo trong ngữ cảnh đó
+kubectl config set-context --current --namespace=ggckad-s2
+
+# thiết lập ngữ cảnh sử dụng tên người dùng và namespace cụ thể
+kubectl config set-context gce --user=cluster-admin --namespace=foo \
+  && kubectl config use-context gce
+ 
+kubectl config unset users.foo                       # xóa người dùng foo
+```
+
+## Apply
+`apply` quản lý các ứng dụng thông qua các tệp định nghĩa tài nguyên Kubernetes. Nó tạo và cập nhật các tài nguyên trong một cụm thông qua việc chạy `kubectl apply`. Đây là cách được đề xuất để quản lý các ứng dụng Kubernetes trong thực tế. Xem thêm [Kubectl Book](https://kubectl.docs.kubernetes.io).
+
+## Tạo một đối tượng
+
+Kubernetes manifests có thể được định nghĩa trong tệp json hoặc yaml. Phần mở rộng `.yaml`,
+`.yml`, và `.json` có thể được dùng.
+
+```bash
+kubectl apply -f ./my-manifest.yaml            # tạo tài nguyên
+kubectl apply -f ./my1.yaml -f ./my2.yaml      # tạo từ nhiều tệp
+kubectl apply -f ./dir                         # tạo tài nguyên từ tất cả các tệp manifest trong thư mục dir
+kubectl apply -f https://git.io/vPieo          # tạo tài nguyên từ url
+kubectl create deployment nginx --image=nginx  # tạo một deployment nginx
+kubectl explain pods,svc                       # lấy thông tin pod và service manifest
+
+# Tạo nhiều đối tượng YAML từ stdin
+cat <<EOF | kubectl apply -f -
+apiVersion: v1
+kind: Pod
+metadata:
+  name: busybox-sleep
+spec:
+  containers:
+  - name: busybox
+    image: busybox
+    args:
+    - sleep
+    - "1000000"
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: busybox-sleep-less
+spec:
+  containers:
+  - name: busybox
+    image: busybox
+    args:
+    - sleep
+    - "1000"
+EOF
+
+# Tạo một secret với một số keys
+cat <<EOF | kubectl apply -f -
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+data:
+  password: $(echo -n "s33msi4" | base64 -w0)
+  username: $(echo -n "jane" | base64 -w0)
+EOF
+
+```
+
+## Xem, tìm các tài nguyên
+
+```bash
+# Lệnh get với một số đầu ra cơ bản
+kubectl get services                          # Liệt kê tất cả các services trong namespace
+kubectl get pods --all-namespaces             # Liệt kê tất cả các pods trong tất cả các namespaces
+kubectl get pods -o wide                      # Liệt kê tất cả các pods namespace, với nhiều thông tin hơn
+kubectl get deployment my-dep                 # Liệt kê một deployment cụ thể
+kubectl get pods                              # Liệt kê tất cả các pods trong namespace
+kubectl get pod my-pod -o yaml                # Lấy thông tin của một pod ở dạng YAML
+kubectl get pod my-pod -o yaml --export       # Lấy thông tin của một pod ở dạng YAML mà không có thông tin cụ thể về cụm
+
+# Lệnh describe
+kubectl describe nodes my-node
+kubectl describe pods my-pod
+
+# Liệt kê các services được sắp xếp theo tên
+kubectl get services --sort-by=.metadata.name
+
+# Liệt kê các pods được sắp xếp theo số lần khởi động lại
+kubectl get pods --sort-by='.status.containerStatuses[0].restartCount'
+
+# Liệt kê các pods được sắp xếp theo dung lượng trong namespace có tên là test
+
+kubectl get pods -n test --sort-by='.spec.capacity.storage'
+
+# Lấy thông tin phiên bản của tất cả các pods có nhãn app=cassandra
+kubectl get pods --selector=app=cassandra -o \
+  jsonpath='{.items[*].metadata.labels.version}'
+
+# Liệt kê tất cả các worker nodes (sử dụng một selector để loại trừ kết quả có một nhãn
+# có tên 'node-role.kubernetes.io/master'  
+kubectl get node --selector='!node-role.kubernetes.io/master'
+
+# Liệt kê tất cả các pods đang chạy trong namespace
+kubectl get pods --field-selector=status.phase=Running
+
+# Liệt kê tất cả các ExternalIPs của tất cả các nodes
+kubectl get nodes -o jsonpath='{.items[*].status.addresses[?(@.type=="ExternalIP")].address}'
+
+# Liệt kê tên của các pods thuộc về một RC nhất định
+# Lệnh "jq" hữu ích cho các chuyển đổi quá mức phức tạp cho jsonpath, xem thêm tại https://stedolan.github.io/jq/
+sel=${$(kubectl get rc my-rc --output=json | jq -j '.spec.selector | to_entries | .[] | "\(.key)=\(.value),"')%?}
+echo $(kubectl get pods --selector=$sel --output=jsonpath={.items..metadata.name})
+
+# Hiển thị nhãn của tất cả các pods (hoặc các đối tượng Kubernetes khác hỗ trợ gán nhãn)
+kubectl get pods --show-labels
+
+# Kiểm tra xem nodes nào đã sẵn sàng
+JSONPATH='{range .items[*]}{@.metadata.name}:{range @.status.conditions[*]}{@.type}={@.status};{end}{end}' \
+ && kubectl get nodes -o jsonpath="$JSONPATH" | grep "Ready=True"
+
+# Liệt kê tất cả cá Secrets hiện đang sử dụng bởi một pod
+kubectl get pods -o json | jq '.items[].spec.containers[].env[]?.valueFrom.secretKeyRef.name' | grep -v null | sort | uniq
+
+# Liệt kê tất cả các sự kiện được sắp xếp theo thời gian
+kubectl get events --sort-by=.metadata.creationTimestamp
+```
+
+## Cập nhật các tài nguyên
+
+Theo như phiên bản 1.11, `rolling-update` đã không còn được dùng nữa (xem [CHANGELOG-1.11.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.11.md)), sử dụng `rollout` thay thế.
+
+```bash
+kubectl set image deployment/frontend www=image:v2               # Cập nhận container "www" của deployment "frontend", cập nhật image
+kubectl rollout history deployment/frontend                      # Kiểm tra lịch sử deployment bao gồm các sửa đổi
+kubectl rollout undo deployment/frontend                         # Quay trở lại deployment trước đó
+kubectl rollout undo deployment/frontend --to-revision=2         # Quay trở lại một phiên bản cụ thể
+kubectl rollout status -w deployment/frontend                    # Xem trạng thái cập nhật của deployment "frontend" cho đến khi hoàn thành
+
+
+# không còn được sử dụng kể từ phiên bản 1.11
+kubectl rolling-update frontend-v1 -f frontend-v2.json           # (không dùng nữa) Cập nhật pods của frontend-v1
+kubectl rolling-update frontend-v1 frontend-v2 --image=image:v2  # (không dùng nữa) Đổi tên tài nguyên và cập nhật image 
+kubectl rolling-update frontend --image=image:v2                 # (không dùng nữa) Cập nhật image của pod của frontend
+kubectl rolling-update frontend-v1 frontend-v2 --rollback        # (không dùng nữa) Hủy bỏ tiến trình cập nhật hiện tại
+
+cat pod.json | kubectl replace -f -                              # Thay thế một pod dựa trên JSON được truyền vào std
+
+# Buộc thay thế, xóa và sau đó tạo lại tài nguyên, sẽ gây ra sự cố ngưng services
+kubectl replace --force -f ./pod.json
+
+# Tạo một services cho nginx, phục vụ trên công 80 và kết nối đến các container trên cổng 8000
+kubectl expose rc nginx --port=80 --target-port=8000
+
+# Cập nhật phiên bản image của một container đơn lẻ lên v4 
+kubectl get pod mypod -o yaml | sed 's/\(image: myimage\):.*$/\1:v4/' | kubectl replace -f -
+
+kubectl label pods my-pod new-label=awesome                      # Thêm một nhãn
+kubectl annotate pods my-pod icon-url=http://goo.gl/XXBTWq       # Thêm một chú thích
+kubectl autoscale deployment foo --min=2 --max=10                # Tự động scale deployment "foo"
+```
+
+## Vá các tài nguyên
+
+```bash
+# Cập nhật một phần một node
+kubectl patch node k8s-node-1 -p '{"spec":{"unschedulable":true}}'
+
+# Cập nhật image của container; spec.containers[*].name là bắt buộc vì đó là khóa hợp nhất
+kubectl patch pod valid-pod -p '{"spec":{"containers":[{"name":"kubernetes-serve-hostname","image":"new image"}]}}'
+
+# Cập nhật image của container sử dụng một bản vá json với các mảng vị trí
+kubectl patch pod valid-pod --type='json' -p='[{"op": "replace", "path": "/spec/containers/0/image", "value":"new image"}]'
+
+# Vô hiệu hóa một deployment livenessProbe sử dụng một bản vá json với các mảng vị trí
+kubectl patch deployment valid-deployment  --type json   -p='[{"op": "remove", "path": "/spec/template/spec/containers/0/livenessProbe"}]'
+
+# Thêm một phần tử mới vào một mảng vị trí
+kubectl patch sa default --type='json' -p='[{"op": "add", "path": "/secrets/1", "value": {"name": "whatever" } }]'
+```
+
+## Chỉnh sửa các tài nguyên
+Chỉnh sửa bất kì API tài nguyên nào trong trình soạn thảo ưa thích của bạn.
+
+```bash
+kubectl edit svc/docker-registry                      # Chỉnh sửa services có tên docker-registry
+KUBE_EDITOR="nano" kubectl edit svc/docker-registry   # Sử dụng một trình soạn thảo thay thế
+```
+
+## Scaling tài nguyên
+
+```bash
+kubectl scale --replicas=3 rs/foo                                 # Scale một replicaset có tên 'foo' thành 3
+kubectl scale --replicas=3 -f foo.yaml                            # Scale một tài nguyên được xác định trong "foo.yaml" thành 3
+kubectl scale --current-replicas=2 --replicas=3 deployment/mysql  # Nếu kích thước hiện tại của deployment mysql là 2, scale mysql thành 3
+kubectl scale --replicas=5 rc/foo rc/bar rc/baz                   # Scale nhiều replication controllers
+```
+
+## Xóa tài nguyên
+
+```bash
+kubectl delete -f ./pod.json                                              # Xóa một pod sử dụng loại và tên được xác định trong pod.json
+kubectl delete pod,service baz foo                                        # Xóa pods và services có tên "baz" và "foo"
+kubectl delete pods,services -l name=myLabel                              # Xóa pods và services có nhãn name=myLabel
+kubectl -n my-ns delete pod,svc --all                                     # Xóa tất cả pods và services trong namespace my-ns,
+# Xóa tất cả pods matching với pattern1 hoặc pattern2
+kubectl get pods  -n mynamespace --no-headers=true | awk '/pattern1|pattern2/{print $1}' | xargs  kubectl delete -n mynamespace pod
+```
+
+## Tương tác với các pods đang chạy
+
+```bash
+kubectl logs my-pod                                 # kết xuất logs của pod (stdout)
+kubectl logs -l name=myLabel                        # kết xuất logs của pod có nhãn name=myLabel (stdout)
+kubectl logs my-pod --previous                      # kết xuất logs của pod (stdout) cho khởi tạo trước của một container
+kubectl logs my-pod -c my-container                 # kết xuất logs của container của pod (stdout, trường hợp có nhiều container)
+kubectl logs -l name=myLabel -c my-container        # kết xuất logs của container có tên my-container và có nhãn name=myLabel (stdout)
+kubectl logs my-pod -c my-container --previous      # kết xuất logs của container my-container của pod my-pod (stdout, trường hợp có nhiều container) cho khởi tạo trước của một container
+kubectl logs -f my-pod                              # lấy logs của pod my-pod (stdout)
+kubectl logs -f my-pod -c my-container              # lấy logs của container my-container trong pod my-pod (stdout, trường hợp nhiều container)
+kubectl logs -f -l name=myLabel --all-containers    # lấy logs của tất cả các container của pod có nhãn name=myLabel (stdout)
+kubectl run -i --tty busybox --image=busybox -- sh  # Chạy pod trong một shell tương tác
+kubectl run nginx --image=nginx --restart=Never -n 
+mynamespace                                         # Chạy pod nginx trong một namespace cụ thể
+kubectl run nginx --image=nginx --restart=Never     # Chạy pod nginx và ghi spec của nó vào file có tên pod.yaml
+--dry-run -o yaml > pod.yaml
+
+kubectl attach my-pod -i                            # Đính kèm với container đang chạy
+kubectl port-forward my-pod 5000:6000               # Lắng nghe trên cổng 5000 của máy local và chuyển tiếp sang cổng 6000 trên pod my-pod
+kubectl exec my-pod -- ls /                         # Chạy lệnh trong một pod (trường hợp 1 container)
+kubectl exec my-pod -c my-container -- ls /         # Chạy lệnh trong pod (trường hợp nhiều container)
+kubectl top pod POD_NAME --containers               # Hiển thị số liệu của pod và container chạy trong nó
+```
+
+## Tương tác với các nodes và cụm
+
+```bash
+kubectl cordon my-node                                                # Đánh dấu my-node là không thể lập lịch
+kubectl drain my-node                                                 # Gỡ my-node ra khỏi cụm để chuẩn bị cho việc bảo trì
+kubectl uncordon my-node                                              # Đánh dấu my-node có thể lập lịch trở lại
+kubectl top node my-node                                              # Hiển thị số liệu của node
+kubectl cluster-info                                                  # Hiển thị địa chỉ master và các services
+kubectl cluster-info dump                                             # Kết xuất trạng thái hiện tại của cụm ra ngoài stdout
+kubectl cluster-info dump --output-directory=/path/to/cluster-state   # Kết xuất trạng thái hiện tại của cụm vào /path/to/cluster-state
+
+kubectl taint nodes foo dedicated=special-user:NoSchedule
+```
+
+### Các loại tài nguyên
+
+Liệt kê tất cả các loại tài nguyên được hỗ trợ cùng với tên viết tắt của chúng, [API group](/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning), cho dù chúng là [namespaced](/docs/concepts/overview/working-with-objects/namespaces), và [Kind](/docs/concepts/overview/working-with-objects/kubernetes-objects):
+
+```bash
+kubectl api-resources
+```
+
+Các hoạt động khác để khám phá các tài nguyên API:
+
+```bash
+kubectl api-resources --namespaced=true      # Tất cả các tài nguyên được đặt tên
+kubectl api-resources --namespaced=false     # Tất cả các tài nguyên không được đặt tên
+kubectl api-resources -o name                # Tất cả các tài nguyên với đầu ra đơn giản (chỉ gồm tên tài nguyên)
+kubectl api-resources -o wide                # Tất cả các tài nguyên với đầu ra mở rộng
+kubectl api-resources --verbs=list,get       # Tất cả các tài nguyên hỗ trợ yêu cầu "list" và "get"
+kubectl api-resources --api-group=extensions # Tất cả tài nguyên trong nhóm API "tiện ích mở rộng"
+```
+
+### Định dạng đầu ra
+
+Để xuất thông tin chi tiết ra cửa sổ terminal của bạn theo một định dạng cụ thể, bạn có thể thêm các cờ `-o` hoặc `--output` vào lệnh `kubectl` được hỗ trợ.
+
+Định dạng đầu ra | Mô tả
+--------------| -----------
+`-o=custom-columns=<spec>` | In một bảng bằng danh sách, các cột tùy chỉnh được phân tách bằng dấu phẩy
+`-o=custom-columns-file=<filename>` | In một bảng bằng cách sử dụng mẫu cột tùy chỉnh trong tệp `<filename>`
+`-o=json`     | Xuất ra một đối tượng API theo định dạng JSON
+`-o=jsonpath=<template>` | In ra các trường được xác định trong [jsonpath](/docs/reference/kubectl/jsonpath) 
+`-o=jsonpath-file=<filename>` |In ra các trường được xác định bởi [jsonpath](/docs/reference/kubectl/jsonpath) trong tệp `<filename>`
+`-o=name`     | Chỉ in tên tài nguyên và không có gì khác
+`-o=wide`     | Xuất ra ở định dạng văn bản thuần với bất kì thông tin bổ sung nào và đối với pods, cần phải thêm tên node
+`-o=yaml`     | Xuất ra đối tượng API theo định dạng YAML
+
+### Kubectl output verbosity and debugging
+
+Kubectl verbosity được kiểm soát bởi cờ `-v` or `--v` theo sau là một số nguyên biểu thị mức log. Các quy ước ghi logs của Kubernetes và các mức logs liên quan được mô tả ở [đây](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md).
+
+Verbosity | Description
+--------------| -----------
+`--v=0` | Hữu ích cho việc hiển thị cho các người vận hành cụm.
+`--v=1` | Một mức log mặc định hợp lý nếu bạn không muốn lấy quá nhiều logs.
+`--v=2` | Thông tin trạng thái về services và các thông điệp logs quan trọng có thể tương quan với những thay đổi quan trọng trong hệ thống. Đây là mức ghi logs mặc định được khuyến nghị cho hầu hết các hệ thống.
+`--v=3` | Thông tin mở rộng về những thay đổi.
+`--v=4` | Debug level verbosity.
+`--v=6` | Hiển thị tài nguyên được yêu cầu.
+`--v=7` | Hiển thị HTTP request headers.
+`--v=8` | Hiển thị nội dung HTTP request.
+`--v=9` | Hiển thị nội dung HTTP request mà không cắt ngắn nội dung.
+
+
+
 ## {{% heading "whatsnext" %}}
-
-
-* Đọc thêm về [Tổng quan kubectl](/docs/reference/kubectl/overview/).
-
-* Xem các tùy chọn [kubectl](/docs/reference/kubectl/kubectl/).
-
-* [kubectl Usage Conventions](/docs/reference/kubectl/conventions/) để hiểu làm thế nào để sử dụng `kubectl` trong các kịch bản có thể tái sử dụng.
-
-* Xem thêm bản cộng đồng [kubectl cheatsheets](https://github.com/dennyzhang/cheatsheet-kubernetes-A4).
-
-
+
+
+* Đọc thêm về [Tổng quan kubectl](/docs/reference/kubectl/overview/).
+
+* Xem các tùy chọn [kubectl](/docs/reference/kubectl/kubectl/).
+
+* [kubectl Usage Conventions](/docs/reference/kubectl/conventions/) để hiểu làm thế nào để sử dụng `kubectl` trong các kịch bản có thể tái sử dụng.
+
+* Xem thêm bản cộng đồng [kubectl cheatsheets](https://github.com/dennyzhang/cheatsheet-kubernetes-A4).
+
+

From f553cbbebcf145cbd5a8c5cd4ccc3532487b5006 Mon Sep 17 00:00:00 2001
From: Akihito INOH <atoato88+github@gmail.com>
Date: Mon, 15 Mar 2021 08:22:29 +0900
Subject: [PATCH 195/788] Replace redirect links of install kubectl

/docs/tasks/tools/install-kubectl/ is redirected to
/docs/tasks/tools/
This commit replace the redirect links for installing kubectl
with direct links.
---
 content/en/docs/reference/kubectl/overview.md                 | 2 +-
 content/en/docs/setup/production-environment/tools/kops.md    | 2 +-
 .../production-environment/tools/kubeadm/install-kubeadm.md   | 2 +-
 content/en/docs/tasks/administer-cluster/cluster-upgrade.md   | 4 ++--
 .../tasks/manage-kubernetes-objects/declarative-config.md     | 2 +-
 .../tasks/manage-kubernetes-objects/imperative-command.md     | 2 +-
 .../docs/tasks/manage-kubernetes-objects/imperative-config.md | 2 +-
 .../en/docs/tasks/manage-kubernetes-objects/kustomization.md  | 2 +-
 .../service-catalog/install-service-catalog-using-helm.md     | 2 +-
 .../tasks/service-catalog/install-service-catalog-using-sc.md | 2 +-
 content/en/docs/tutorials/clusters/seccomp.md                 | 2 +-
 .../stateless-application/expose-external-ip-address.md       | 2 +-
 12 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/content/en/docs/reference/kubectl/overview.md b/content/en/docs/reference/kubectl/overview.md
index a9f1550659..dbad6f5cf2 100644
--- a/content/en/docs/reference/kubectl/overview.md
+++ b/content/en/docs/reference/kubectl/overview.md
@@ -19,7 +19,7 @@ files by setting the KUBECONFIG environment variable or by setting the
 This overview covers `kubectl` syntax, describes the command operations, and provides common examples.
 For details about each command, including all the supported flags and subcommands, see the
 [kubectl](/docs/reference/generated/kubectl/kubectl-commands/) reference documentation.
-For installation instructions see [installing kubectl](/docs/tasks/tools/install-kubectl/).
+For installation instructions see [installing kubectl](/docs/tasks/tools/).
 
 <!-- body -->
 
diff --git a/content/en/docs/setup/production-environment/tools/kops.md b/content/en/docs/setup/production-environment/tools/kops.md
index 13a2474600..4afab697e4 100644
--- a/content/en/docs/setup/production-environment/tools/kops.md
+++ b/content/en/docs/setup/production-environment/tools/kops.md
@@ -23,7 +23,7 @@ kops is an automated provisioning system:
 ## {{% heading "prerequisites" %}}
 
 
-* You must have [kubectl](/docs/tasks/tools/install-kubectl/) installed.
+* You must have [kubectl](/docs/tasks/tools/) installed.
 
 * You must [install](https://github.com/kubernetes/kops#installing) `kops` on a 64-bit (AMD64 and Intel 64) device architecture.
 
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 7d74a862f9..4f9d9c6ce7 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -160,7 +160,7 @@ kubelet and the control plane is supported, but the kubelet version may never ex
 server version. For example, the kubelet running 1.7.0 should be fully compatible with a 1.8.0 API server,
 but not vice versa.
 
-For information about installing `kubectl`, see [Install and set up kubectl](/docs/tasks/tools/install-kubectl/).
+For information about installing `kubectl`, see [Install and set up kubectl](/docs/tasks/tools/).
 
 {{< warning >}}
 These instructions exclude all Kubernetes packages from any system upgrades.
diff --git a/content/en/docs/tasks/administer-cluster/cluster-upgrade.md b/content/en/docs/tasks/administer-cluster/cluster-upgrade.md
index 1e2cc422e4..6e9dc302c4 100644
--- a/content/en/docs/tasks/administer-cluster/cluster-upgrade.md
+++ b/content/en/docs/tasks/administer-cluster/cluster-upgrade.md
@@ -34,7 +34,7 @@ If your cluster was deployed using the `kubeadm` tool, refer to
 for detailed information on how to upgrade the cluster.
 
 Once you have upgraded the cluster, remember to
-[install the latest version of `kubectl`](/docs/tasks/tools/install-kubectl/).
+[install the latest version of `kubectl`](/docs/tasks/tools/).
 
 ### Manual deployments
 
@@ -52,7 +52,7 @@ You should manually update the control plane following this sequence:
 - cloud controller manager, if you use one
 
 At this point you should
-[install the latest version of `kubectl`](/docs/tasks/tools/install-kubectl/).
+[install the latest version of `kubectl`](/docs/tasks/tools/).
 
 For each node in your cluster, [drain](/docs/tasks/administer-cluster/safely-drain-node/)
 that node and then either replace it with a new node that uses the {{< skew latestVersion >}}
diff --git a/content/en/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/en/docs/tasks/manage-kubernetes-objects/declarative-config.md
index 75c9d56a83..643b57cc3b 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -16,7 +16,7 @@ preview of what changes `apply` will make.
 ## {{% heading "prerequisites" %}}
 
 
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md b/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md
index a51b5664ba..8e0670a89f 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md
@@ -12,7 +12,7 @@ explains how those commands are organized and how to use them to manage live obj
 
 ## {{% heading "prerequisites" %}}
 
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md b/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md
index 2b97ed271c..87cc423da7 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md
@@ -13,7 +13,7 @@ This document explains how to define and manage objects using configuration file
 ## {{% heading "prerequisites" %}}
 
 
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
index 7c59052ffa..3ea3c50e8d 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -29,7 +29,7 @@ kubectl apply -k <kustomization_directory>
 ## {{% heading "prerequisites" %}}
 
 
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md b/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md
index d558a271ad..b75493aae1 100644
--- a/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md
+++ b/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md
@@ -19,7 +19,7 @@ Up to date information on this process can be found at the
 * You must have a Kubernetes cluster with cluster DNS enabled.
     * If you are using a cloud-based Kubernetes cluster or {{< glossary_tooltip text="Minikube" term_id="minikube" >}}, you may already have cluster DNS enabled.
     * If you are using `hack/local-up-cluster.sh`, ensure that the `KUBE_ENABLE_CLUSTER_DNS` environment variable is set, then run the install script.
-* [Install and setup kubectl](/docs/tasks/tools/install-kubectl/) v1.7 or higher. Make sure it is configured to connect to the Kubernetes cluster.
+* [Install and setup kubectl](/docs/tasks/tools/) v1.7 or higher. Make sure it is configured to connect to the Kubernetes cluster.
 * Install [Helm](https://helm.sh/) v2.7.0 or newer.
     * Follow the [Helm install instructions](https://helm.sh/docs/intro/install/).
     * If you already have an appropriate version of Helm installed, execute `helm init` to install Tiller, the server-side component of Helm.
diff --git a/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md b/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md
index 52a55457a2..0789997309 100644
--- a/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md
+++ b/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md
@@ -23,7 +23,7 @@ Service Catalog itself can work with any kind of managed service, not just Googl
 * Install [Go 1.6+](https://golang.org/dl/) and set the `GOPATH`.
 * Install the [cfssl](https://github.com/cloudflare/cfssl) tool needed for generating SSL artifacts.
 * Service Catalog requires Kubernetes version 1.7+.
-* [Install and setup kubectl](/docs/tasks/tools/install-kubectl/) so that it is configured to connect to a Kubernetes v1.7+ cluster.
+* [Install and setup kubectl](/docs/tasks/tools/) so that it is configured to connect to a Kubernetes v1.7+ cluster.
 * The kubectl user must be bound to the *cluster-admin* role for it to install Service Catalog. To ensure that this is true, run the following command:
 
         kubectl create clusterrolebinding cluster-admin-binding --clusterrole=cluster-admin --user=<user-name>
diff --git a/content/en/docs/tutorials/clusters/seccomp.md b/content/en/docs/tutorials/clusters/seccomp.md
index adb3d9c500..376c349f72 100644
--- a/content/en/docs/tutorials/clusters/seccomp.md
+++ b/content/en/docs/tutorials/clusters/seccomp.md
@@ -37,7 +37,7 @@ profiles that give only the necessary privileges to your container processes.
 
 In order to complete all steps in this tutorial, you must install
 [kind](https://kind.sigs.k8s.io/docs/user/quick-start/) and
-[kubectl](/docs/tasks/tools/install-kubectl/). This tutorial will show examples
+[kubectl](/docs/tasks/tools/). This tutorial will show examples
 with both alpha (pre-v1.19) and generally available seccomp functionality, so
 make sure that your cluster is [configured
 correctly](https://kind.sigs.k8s.io/docs/user/quick-start/#setting-kubernetes-version)
diff --git a/content/en/docs/tutorials/stateless-application/expose-external-ip-address.md b/content/en/docs/tutorials/stateless-application/expose-external-ip-address.md
index 8368d24132..5b01913859 100644
--- a/content/en/docs/tutorials/stateless-application/expose-external-ip-address.md
+++ b/content/en/docs/tutorials/stateless-application/expose-external-ip-address.md
@@ -11,7 +11,7 @@ external IP address.
 
 ## {{% heading "prerequisites" %}}
 
-* Install [kubectl](/docs/tasks/tools/install-kubectl/).
+* Install [kubectl](/docs/tasks/tools/).
 * Use a cloud provider like Google Kubernetes Engine or Amazon Web Services to
   create a Kubernetes cluster. This tutorial creates an
   [external load balancer](/docs/tasks/access-application-cluster/create-external-load-balancer/),

From bf312020cf442fe9b37e863dffa97715f4bc2618 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Date: Mon, 15 Mar 2021 11:14:11 +0900
Subject: [PATCH 196/788] Fix broken link

---
 .../tasks/tools/included/optional-kubectl-configs-bash-mac.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md b/content/en/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
index 4f4a1771fe..9854540649 100644
--- a/content/en/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
+++ b/content/en/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
@@ -80,10 +80,10 @@ You now have to ensure that the kubectl completion script gets sourced in all yo
     echo 'complete -F __start_kubectl k' >>~/.bash_profile
     ```
 
-- If you installed kubectl with Homebrew (as explained [above](#install-with-homebrew-on-macos)), then the kubectl completion script should already be in `/usr/local/etc/bash_completion.d/kubectl`. In that case, you don't need to do anything.
+- If you installed kubectl with Homebrew (as explained [here](/docs/tasks/tools/install-kubectl-macos/#install-with-homebrew-on-macos)), then the kubectl completion script should already be in `/usr/local/etc/bash_completion.d/kubectl`. In that case, you don't need to do anything.
 
    {{< note >}}
    The Homebrew installation of bash-completion v2 sources all the files in the `BASH_COMPLETION_COMPAT_DIR` directory, that's why the latter two methods work.
    {{< /note >}}
 
-In any case, after reloading your shell, kubectl completion should be working.
\ No newline at end of file
+In any case, after reloading your shell, kubectl completion should be working.

From b274911ceb9f975ab3af96a57a4dbb88188c5298 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Mon, 15 Mar 2021 10:18:10 +0800
Subject: [PATCH 197/788] [zh] Sync setup pages for
 production-environment\container-runtimes.md

* Sync with english version in 'Update Ubuntu/Debian installation instructions to use Signed-By option (#26952)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../container-runtimes.md                     | 742 ++++--------------
 1 file changed, 165 insertions(+), 577 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 08f3ea9fc7..061fb880e1 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -9,7 +9,7 @@ reviewers:
 - bart0sh
 title: Container runtimes
 content_type: concept
-weight: 10
+weight: 20
 -->
 
 <!-- overview -->
@@ -108,7 +108,7 @@ configuration, or reinstall it using automation.
 ### containerd
 
 <!--
-This section contains the necessary steps to use `containerd` as CRI runtime.
+This section contains the necessary steps to use containerd as CRI runtime.
 
 Use the following commands to install Containerd on your system:
 
@@ -134,7 +134,7 @@ EOF
 sudo sysctl --system
 ```
 -->
-本节包含使用 `containerd` 作为 CRI 运行时的必要步骤。
+本节包含使用 containerd 作为 CRI 运行时的必要步骤。
 
 使用以下命令在系统上安装容器：
 
@@ -156,7 +156,7 @@ net.ipv4.ip_forward                 = 1
 net.bridge.bridge-nf-call-ip6tables = 1
 EOF
 
-# Apply sysctl params without reboot
+# 应用 sysctl 参数而无需重新启动
 sudo sysctl --system
 ```
 
@@ -166,306 +166,77 @@ Install containerd:
 安装 containerd:
 
 {{< tabs name="tab-cri-containerd-installation" >}}
-{{% tab name="Ubuntu 16.04" %}}
+{{% tab name="Linux" %}}
 
 <!--
-```shell
-# (Install containerd)
-## Set up the repository
-### Install packages to allow apt to use a repository over HTTPS
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
-
-```shell
-## Add Docker's official GPG key
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
-
-```shell
-## Add Docker apt repository.
-sudo add-apt-repository \
-    "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-    $(lsb_release -cs) \
-    stable"
-```
-
-```shell
-## Install containerd
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
-
-```shell
-# Configure containerd
-sudo mkdir -p /etc/containerd
-sudo containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
+1. Install the `containerd.io` package from the official Docker repositories. Instructions for setting up the Docker repository for your respective Linux distribution and installing the `containerd.io` package can be found at [Install Docker Engine](https://docs.docker.com/engine/install/#server).
 -->
-```shell
-# (安装 containerd)
-## (设置仓库)
-### (安装软件包以允许 apt 通过 HTTPS 使用存储库)
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
-
-```shell
-## 安装 Docker 的官方 GPG 密钥
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
-
-```shell
-## 新增 Docker apt 仓库。
-sudo add-apt-repository \
-    "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-    $(lsb_release -cs) \
-    stable"
-```
-
-```shell
-## 安装 containerd
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
-
-```shell
-# 配置 containerd
-sudo mkdir -p /etc/containerd
-sudo containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# 重启 containerd
-sudo systemctl restart containerd
-```
-{{< /tab >}}
-{{% tab name="Ubuntu 18.04/20.04" %}}
+1. 从官方Docker仓库安装 `containerd.io` 软件包。可以在 [安装 Docker 引擎](https://docs.docker.com/engine/install/#server) 中找到有关为各自的 Linux 发行版设置 Docker 存储库和安装 `containerd.io` 软件包的说明。
 
 <!--
-```shell
-# (Install containerd)
-sudo apt-get update && sudo apt-get install -y containerd
-```
-
-```shell
-# Configure containerd
-sudo mkdir -p /etc/containerd
-sudo containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
+2. Configure containerd:
 -->
-```shell
-# 安装 containerd
-sudo apt-get update && sudo apt-get install -y containerd
-```
+2. 配置 containerd：
 
-```shell
-# 配置 containerd
-sudo mkdir -p /etc/containerd
-sudo containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# 重启 containerd
-sudo systemctl restart containerd
-```
-{{% /tab %}}
-{{% tab name="Debian 9+" %}}
+   ```shell
+   sudo mkdir -p /etc/containerd
+   containerd config default | sudo tee /etc/containerd/config.toml
+   ```
 
 <!--
-```shell
-# (Install containerd)
-## Set up the repository
-### Install packages to allow apt to use a repository over HTTPS
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
-
-```shell
-## Add Docker's official GPG key
-curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
-
-```shell
-## Add Docker apt repository.
-sudo add-apt-repository \
-   "deb [arch=amd64] https://download.docker.com/linux/debian \
-   $(lsb_release -cs) \
-   stable"
-```
+3. Restart containerd:
 -->
-```shell
-# 安装 containerd
-## 配置仓库
-### 安装软件包以使 apt 能够使用 HTTPS 访问仓库
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
+3. 重新启动 containerd:
 
-```shell
-## 添加 Docker 的官方 GPG 密钥
-curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
+   ```shell
+   sudo systemctl restart containerd
+   ```
 
-```shell
-## 添加 Docker apt 仓库
-sudo add-apt-repository \
-   "deb [arch=amd64] https://download.docker.com/linux/debian \
-   $(lsb_release -cs) \
-   stable"
-```
-
-<!--
-```shell
-## Install containerd
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
-
-```shell
-# Set default containerd configuration
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
--->
-```shell
-## 安装 containerd
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
-
-```shell
-# 设置 containerd 的默认配置
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# 重启 containerd
-sudo systemctl restart containerd
-```
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
-
-<!--
-```shell
-# (Install containerd)
-## Set up the repository
-### Install required packages
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
-
-```shell
-## Add docker repository
-sudo yum-config-manager \
-    --add-repo \
-    https://download.docker.com/linux/centos/docker-ce.repo
-```
-
-```shell
-## Install containerd
-sudo yum update -y && sudo yum install -y containerd.io
-```
-
-```shell
-## Configure containerd
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# Restart containerd
-sudo systemctl restart containerd
-```
--->
-```shell
-# 安装 containerd
-## 设置仓库
-### 安装所需包
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
-
-```shell
-### 添加 Docker 仓库
-sudo yum-config-manager \
-    --add-repo \
-    https://download.docker.com/linux/centos/docker-ce.repo
-```
-
-```shell
-## 安装 containerd
-sudo yum update -y && sudo yum install -y containerd.io
-```
-
-```shell
-# 配置 containerd
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# 重启 containerd
-sudo systemctl restart containerd
-```
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}
-<!-- 
-```powershell
-# (Install containerd)
-# download containerd
-cmd /c curl -OL https://github.com/containerd/containerd/releases/download/v1.4.1/containerd-1.4.1-windows-amd64.tar.gz
-cmd /c tar xvf .\containerd-1.4.1-windows-amd64.tar.gz
-```
+<!--
+Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), and then run the following commands:
+-->
+启动 Powershell 会话，将 `$Version` 设置为所需的版本（例如：`$ Version=1.4.3`），然后运行以下命令：
 
-```powershell
-# extract and configure
-Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
-cd $Env:ProgramFiles\containerd\
-.\containerd.exe config default | Out-File config.toml -Encoding ascii
+<!--
+1. Download containerd:
+-->
+1. 下载 containerd：
 
-# review the configuration. depending on setup you may want to adjust:
-# - the sandbox_image (kubernetes pause image)
-# - cni bin_dir and conf_dir locations
-Get-Content config.toml
-```
+   ```powershell
+   curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.gz
+   tar.exe xvf .\containerd-windows-amd64.tar.gz
+   ```
+<!--
+2. Extract and configure:
+-->
+2. 提取并配置：
 
-```powershell
-# start containerd
-.\containerd.exe --register-service
-Start-Service containerd
-```
- -->
-```powershell
-# 安装 containerd 
-# 下载 containerd
-cmd /c curl -OL https://github.com/containerd/containerd/releases/download/v1.4.1/containerd-1.4.1-windows-amd64.tar.gz
-cmd /c tar xvf .\containerd-1.4.1-windows-amd64.tar.gz
-```
+   ```powershell
+   Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
+   cd $Env:ProgramFiles\containerd\
+   .\containerd.exe config default | Out-File config.toml -Encoding ascii
 
-```powershell
-# 解压并配置
-Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
-cd $Env:ProgramFiles\containerd\
-.\containerd.exe config default | Out-File config.toml -Encoding ascii
+   # Review the configuration. Depending on setup you may want to adjust:
+   # - the sandbox_image (Kubernetes pause image)
+   # - cni bin_dir and conf_dir locations
+   Get-Content config.toml
 
-# 检查配置文件，基于你可能想要调整的设置：
-# - sandbox_image (kubernetes pause 镜像)
-# - CNI 的 bin_dir 和 conf_dir 路径
-Get-Content config.toml
-```
+   # (Optional - but highly recommended) Exclude containerd from Windows Defender Scans
+   Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe"
+   ```
+<!--
+3. Start containerd:
+-->
+
+3. 启动 containerd:
+
+   ```powershell
+   .\containerd.exe --register-service
+   Start-Service containerd
+   ```
 
-```powershell
-# 启动 containerd
-.\containerd.exe --register-service
-Start-Service containerd
-```
 {{% /tab %}}
 {{< /tabs >}}
 
@@ -505,7 +276,7 @@ Use the following commands to install CRI-O on your system:
 
 {{< note >}}
 The CRI-O major and minor versions must match the Kubernetes major and minor versions.
-For more information, see the [CRI-O compatibility matrix](https://github.com/cri-o/cri-o).
+For more information, see the [CRI-O compatibility matrix](https://github.com/cri-o/cri-o#compatibility-matrix-cri-o--kubernetes).
 {{< /note >}}
 
 Install and configure prerequisites:
@@ -536,7 +307,7 @@ sudo sysctl --system
 使用以下命令在系统中安装 CRI-O：
 
 提示：CRI-O 的主要以及次要版本必须与 Kubernetes 的主要和次要版本相匹配。
-更多信息请查阅 [CRI-O 兼容性列表](https://github.com/cri-o/cri-o).
+更多信息请查阅 [CRI-O 兼容性列表](https://github.com/cri-o/cri-o#compatibility-matrix-cri-o--kubernetes)。
 
 安装以及配置的先决条件：
 
@@ -569,31 +340,31 @@ To install CRI-O on the following operating systems, set the environment variabl
 to the appropriate value from the following table:
 
 | Operating system | `$OS`             |
-|------------------|-------------------|
+| ---------------- | ----------------- |
 | Debian Unstable  | `Debian_Unstable` |
 | Debian Testing   | `Debian_Testing`  |
 
 <br />
 Then, set `$VERSION` to the CRI-O version that matches your Kubernetes version.
-For instance, if you want to install CRI-O 1.18, set `VERSION=1.18`.
+For instance, if you want to install CRI-O 1.20, set `VERSION=1.20`.
 You can pin your installation to a specific release.
-To install version 1.18.3, set `VERSION=1.18:1.18.3`.
+To install version 1.20.0, set `VERSION=1.20:1.20.0`.
 <br />
 
 Then run
  -->
 在下列操作系统上安装 CRI-O, 使用下表中合适的值设置环境变量 `OS`:
 
-| 操作系统         | `$OS`             |
-|-----------------|-------------------|
-| Debian Unstable | `Debian_Unstable` |
-| Debian Testing  | `Debian_Testing`  |
+| 操作系统          | `$OS`             |
+| ---------------- | ----------------- |
+| Debian Unstable  | `Debian_Unstable` |
+| Debian Testing   | `Debian_Testing`  |
 
 <br />
 然后，将 `$VERSION` 设置为与你的 Kubernetes 相匹配的 CRI-O 版本。
-例如，如果你要安装 CRI-O 1.18, 请设置 `VERSION=1.18`.
+例如，如果你要安装 CRI-O 1.20, 请设置 `VERSION=1.20`.
 你也可以安装一个特定的发行版本。
-例如要安装 1.18.3 版本，设置 `VERSION=1.18:1.18.3`.
+例如要安装 1.20.0 版本，设置 `VERSION=1.20.0:1.20.0`.
 <br />
 
 然后执行
@@ -605,8 +376,8 @@ cat <<EOF | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cr
 deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /
 EOF
 
-curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | sudo apt-key add --keyring /etc/apt/trusted.gpg.d/libcontainers.gpg -
-curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | sudo apt-key add --keyring /etc/apt/trusted.gpg.d/libcontainers.gpg -
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | sudo apt-key --keyring /etc/apt/trusted.gpg.d/libcontainers.gpg add -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | sudo apt-key --keyring /etc/apt/trusted.gpg.d/libcontainers.gpg add -
 
 sudo apt-get update
 sudo apt-get install cri-o cri-o-runc
@@ -619,36 +390,36 @@ sudo apt-get install cri-o cri-o-runc
 <!-- 
 To install on the following operating systems, set the environment variable `OS` to the appropriate field in the following table:
 
-| Operating system | `$OS`           |
-|------------------|-----------------|
-| Ubuntu 20.04     | `xUbuntu_20.04` |
-| Ubuntu 19.10     | `xUbuntu_19.10` |
-| Ubuntu 19.04     | `xUbuntu_19.04` |
-| Ubuntu 18.04     | `xUbuntu_18.04` |
+| Operating system | `$OS`             |
+| ---------------- | ----------------- |
+| Ubuntu 20.04     | `xUbuntu_20.04`   |
+| Ubuntu 19.10     | `xUbuntu_19.10`   |
+| Ubuntu 19.04     | `xUbuntu_19.04`   |
+| Ubuntu 18.04     | `xUbuntu_18.04`   |
 
 <br />
 Then, set `$VERSION` to the CRI-O version that matches your Kubernetes version.
-For instance, if you want to install CRI-O 1.18, set `VERSION=1.18`.
+For instance, if you want to install CRI-O 1.20, set `VERSION=1.20`.
 You can pin your installation to a specific release.
-To install version 1.18.3, set `VERSION=1.18:1.18.3`.
+To install version 1.20.0, set `VERSION=1.20:1.20.0`.
 <br />
 
 Then run
 -->
 在下列操作系统上安装 CRI-O, 使用下表中合适的值设置环境变量 `OS`:
 
-| 操作系统      | `$OS`           |
-|--------------|-----------------|
-| Ubuntu 20.04 | `xUbuntu_20.04` |
-| Ubuntu 19.10 | `xUbuntu_19.10` |
-| Ubuntu 19.04 | `xUbuntu_19.04` |
-| Ubuntu 18.04 | `xUbuntu_18.04` |
+| 操作系统          | `$OS`             |
+| ---------------- | ----------------- |
+| Ubuntu 20.04     | `xUbuntu_20.04`   |
+| Ubuntu 19.10     | `xUbuntu_19.10`   |
+| Ubuntu 19.04     | `xUbuntu_19.04`   |
+| Ubuntu 18.04     | `xUbuntu_18.04`   |
 
 <br />
 然后，将 `$VERSION` 设置为与你的 Kubernetes 相匹配的 CRI-O 版本。
-例如，如果你要安装 CRI-O 1.18, 请设置 `VERSION=1.18`.
+例如，如果你要安装 CRI-O 1.20, 请设置 `VERSION=1.20`.
 你也可以安装一个特定的发行版本。
-例如要安装 1.18.3 版本，设置 `VERSION=1.18:1.18.3`.
+例如要安装 1.20.0 版本，设置 `VERSION=1.20:1.20.0`.
 <br />
 
 然后执行
@@ -661,8 +432,8 @@ cat <<EOF | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cr
 deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /
 EOF
 
-curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | sudo apt-key add --keyring /etc/apt/trusted.gpg.d/libcontainers.gpg
-curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | sudo apt-key add --keyring /etc/apt/trusted.gpg.d/libcontainers-cri-o.gpg -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | sudo apt-key --keyring /etc/apt/trusted.gpg.d/libcontainers.gpg add -
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | sudo apt-key --keyring /etc/apt/trusted.gpg.d/libcontainers-cri-o.gpg add -
 
 sudo apt-get update
 sudo apt-get install cri-o cri-o-runc
@@ -676,33 +447,33 @@ sudo apt-get install cri-o cri-o-runc
 To install on the following operating systems, set the environment variable `OS` to the appropriate field in the following table:
 
 | Operating system | `$OS`             |
-|------------------|-------------------|
+| ---------------- | ----------------- |
 | Centos 8         | `CentOS_8`        |
 | Centos 8 Stream  | `CentOS_8_Stream` |
 | Centos 7         | `CentOS_7`        |
 
 <br />
 Then, set `$VERSION` to the CRI-O version that matches your Kubernetes version.
-For instance, if you want to install CRI-O 1.18, set `VERSION=1.18`.
+For instance, if you want to install CRI-O 1.20, set `VERSION=1.20`.
 You can pin your installation to a specific release.
-To install version 1.18.3, set `VERSION=1.18:1.18.3`.
+To install version 1.20.0, set `VERSION=1.20:1.20.0`.
 <br />
 
 Then run
 -->
 在下列操作系统上安装 CRI-O, 使用下表中合适的值设置环境变量 `OS`:
 
-| 操作系统         | `$OS`             |
-|-----------------|-------------------|
-| Centos 8        | `CentOS_8`        |
-| Centos 8 Stream | `CentOS_8_Stream` |
-| Centos 7        | `CentOS_7`        |
+| 操作系统          | `$OS`             |
+| ---------------- | ----------------- |
+| Centos 8         | `CentOS_8`        |
+| Centos 8 Stream  | `CentOS_8_Stream` |
+| Centos 7         | `CentOS_7`        |
 
 <br />
 然后，将 `$VERSION` 设置为与你的 Kubernetes 相匹配的 CRI-O 版本。
-例如，如果你要安装 CRI-O 1.18, 请设置 `VERSION=1.18`.
+例如，如果你要安装 CRI-O 1.20, 请设置 `VERSION=1.20`.
 你也可以安装一个特定的发行版本。
-例如要安装 1.18.3 版本，设置 `VERSION=1.18:1.18.3`.
+例如要安装 1.20.0 版本，设置 `VERSION=1.20:1.20.0`.
 <br />
 
 然后执行
@@ -725,7 +496,7 @@ sudo zypper install cri-o
 
 <!-- 
 Set `$VERSION` to the CRI-O version that matches your Kubernetes version.
-For instance, if you want to install CRI-O 1.18, `VERSION=1.18`.
+For instance, if you want to install CRI-O 1.20, `VERSION=1.20`.
 
 You can find available versions with:
 ```shell
@@ -740,7 +511,7 @@ sudo dnf install cri-o
 ```
 -->
 将 `$VERSION` 设置为与你的 Kubernetes 相匹配的 CRI-O 版本。
-例如，如果要安装 CRI-O 1.18，请设置 `VERSION=1.18`。
+例如，如果要安装 CRI-O 1.20，请设置 `VERSION=1.20`。
 你可以用下列命令查找可用的版本：
 
 ```shell
@@ -751,7 +522,7 @@ CRI-O 不支持在 Fedora 上固定到特定的版本。
 然后执行
 ```shell
 sudo dnf module enable cri-o:$VERSION
-sudo dnf install cri-o
+sudo dnf install cri-o --now
 ```
 
 {{% /tab %}}
@@ -762,272 +533,89 @@ Start CRI-O:
 
 ```shell
 sudo systemctl daemon-reload
-sudo systemctl start crio
+sudo systemctl enable crio --no
 ```
 
-Refer to the [CRI-O installation guide](https://github.com/kubernetes-sigs/cri-o#getting-started)
+Refer to the [CRI-O installation guide](https://github.com/cri-o/cri-o/blob/master/install.md)
 for more information.
  -->
-启动 CRI-O:
+#### cgroup driver
+<!-- 
+CRI-O uses the systemd cgroup driver per default. To switch to the `cgroupfs`
+cgroup driver, either edit `/etc/crio/crio.conf` or place a drop-in
+configuration in `/etc/crio/crio.conf.d/02-cgroup-manager.conf`, for example:
+ -->
+默认情况下，CRI-O 使用 systemd cgroup 驱动程序。切换到`
+`cgroupfs`
+cgroup 驱动程序，或者编辑 `/ etc / crio / crio.conf` 或放置一个插件
+在 `/etc/crio/crio.conf.d/02-cgroup-manager.conf` 中的配置，例如：
 
-```shell
-sudo systemctl daemon-reload
-sudo systemctl start crio
+```toml
+[crio.runtime]
+conmon_cgroup = "pod"
+cgroup_manager = "cgroupfs"
 ```
-
-更多信息请参阅 [CRI-O 安装指南](https://github.com/kubernetes-sigs/cri-o#getting-started)。
+<!-- 
+Please also note the changed `conmon_cgroup`, which has to be set to the value
+`pod` when using CRI-O with `cgroupfs`. It is generally necessary to keep the
+cgroup driver configuration of the kubelet (usually done via kubeadm) and CRI-O
+in sync.
+ -->
+另请注意更改后的 `conmon_cgroup` ，必须将其设置为
+`pod`将 CRI-O 与 `cgroupfs` 一起使用时。通常有必要保持
+kubelet 的 cgroup 驱动程序配置（通常透过 kubeadm 完成）和CRI-O 同步中。
 
 ### Docker
-
-<!-- 
-On each of your nodes, install Docker CE.
-
-The Kubernetes release notes list which versions of Docker are compatible
-with that version of Kubernetes.
-
-Use the following commands to install Docker on your system:
+<!--
+1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server)
  -->
-在你的所有节点上安装 Docker CE.
-
-Kubernetes 发布说明中列出了 Docker 的哪些版本与该版本的 Kubernetes 相兼容。
-
-在你的操作系统上使用如下命令安装 Docker:
-
-{{< tabs name="tab-cri-docker-installation" >}}
-{{% tab name="Ubuntu 16.04+" %}}
+1. 在每个节点上，根据 [安装 Docker 引擎](https://docs.docker.com/engine/install/#server)为你的 Linux 发行版安装 Docker。
 
 <!--
-```shell
-# (Install Docker CE)
-## Set up the repository:
-### Install packages to allow apt to use a repository over HTTPS
-sudo apt-get update && sudo apt-get install -y \
-  apt-transport-https ca-certificates curl software-properties-common gnupg2
-```
+2. Configure the Docker daemon, in particular to use systemd for the management of the container’s cgroups.
+ -->
+2. 配置 Docker 守护程序，尤其是使用 systemd 来管理容器的cgroup。
 
-```shell
-# Add Docker's official GPG key:
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add --keyring /etc/apt/trusted.gpg.d/docker.gpg -
-```
--->
-
-```shell
-# (安装 Docker CE)
-## 设置仓库:
-### 安装软件包以允许 apt 通过 HTTPS 使用存储库
-sudo apt-get update && sudo apt-get install -y \
-  apt-transport-https ca-certificates curl software-properties-common gnupg2
-```
-
-```shell
-### 新增 Docker 的 官方 GPG 秘钥:
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add --keyring /etc/apt/trusted.gpg.d/docker.gpg -
-```
+   ```shell
+   sudo mkdir /etc/docker
+   cat <<EOF | sudo tee /etc/docker/daemon.json
+   {
+     "exec-opts": ["native.cgroupdriver=systemd"],
+     "log-driver": "json-file",
+     "log-opts": {
+       "max-size": "100m"
+     },
+     "storage-driver": "overlay2"
+   }
+   EOF
+   ```
 
+   {{< note >}}
+   <!--
+   `overlay2` is the preferred storage driver for systems running Linux kernel version 4.0 or higher, or RHEL or CentOS using version 3.10.0-514 and above.
+    -->
+   
+   对于运行 Linux 内核版本 4.0 或更高版本，或使用 3.10.0-51 及更高版本的 RHEL 或 CentOS 的系统，`overlay2`是首选的存储驱动程序。
+   {{< /note >}}
 <!--
-```shell
-# Add the Docker apt repository:
-sudo add-apt-repository \
-  "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-  $(lsb_release -cs) \
-  stable"
-```
-
-```shell
-# Install Docker CE
-sudo apt-get update && sudo apt-get install -y \
-  containerd.io=1.2.13-2 \
-  docker-ce=5:19.03.11~3-0~ubuntu-$(lsb_release -cs) \
-  docker-ce-cli=5:19.03.11~3-0~ubuntu-$(lsb_release -cs)
-```
-
-```shell
-# Set up the Docker daemon
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2"
-}
-EOF
-```
-
-```shell
-# Create /etc/systemd/system/docker.service.d
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
+3. Restart Docker and enable on boot:
 -->
-```shell
-### 添加 Docker apt 仓库:
-sudo add-apt-repository \
-  "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-  $(lsb_release -cs) \
-  stable"
-```
+3. 重新启动 Docker 并在启动时启用：
+   ```shell
+   sudo systemctl enable docker
+   sudo systemctl daemon-reload
+   sudo systemctl restart docker
+   ```
 
-```shell
-## 安装 Docker CE
-sudo apt-get update && sudo apt-get install -y \
-  containerd.io=1.2.13-2 \
-  docker-ce=5:19.03.11~3-0~ubuntu-$(lsb_release -cs) \
-  docker-ce-cli=5:19.03.11~3-0~ubuntu-$(lsb_release -cs)
-```
-
-```shell
-# 设置 Docker daemon
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2"
-}
-EOF
-```
-
-```shell
-# Create /etc/systemd/system/docker.service.d
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
+{{< note >}}
 <!--
-# Restart docker.
-systemctl daemon-reload
-systemctl restart docker
+For more information refer to
+  - [Configure the Docker daemon](https://docs.docker.com/config/daemon/)
+  - [Control Docker with systemd](https://docs.docker.com/config/daemon/systemd/)
 -->
-```shell
-# 重启 docker.
-sudo systemctl daemon-reload
-sudo systemctl restart docker
-```
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
+{{< /note >}}
 
-<!--
-```shell
-# (Install Docker CE)
-## Set up the repository
-### Install required packages
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
 
-```shell
-## Add the Docker repository
-sudo yum-config-manager --add-repo \
-  https://download.docker.com/linux/centos/docker-ce.repo
-```
-
-```shell
-# Install Docker CE
-sudo yum update -y && sudo yum install -y \
-  containerd.io-1.2.13 \
-  docker-ce-19.03.11 \
-  docker-ce-cli-19.03.11
-```
-
-```shell
-## Create /etc/docker
-sudo mkdir /etc/docker
-```
-
-```shell
-# Set up the Docker daemon
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2",
-  "storage-opts": [
-    "overlay2.override_kernel_check=true"
-  ]
-}
-EOF
-```
-
-```shell
-# Create /etc/systemd/system/docker.service.d
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
--->
-```shell
-# (安装 Docker CE)
-## 设置仓库
-### 安装所需包
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
-
-```shell
-### 新增 Docker 仓库
-sudo yum-config-manager --add-repo \
-  https://download.docker.com/linux/centos/docker-ce.repo
-```
-
-```shell
-## 安装 Docker CE
-sudo yum update -y && sudo yum install -y \
-  containerd.io-1.2.13 \
-  docker-ce-19.03.11 \
-  docker-ce-cli-19.03.11
-```
-
-```shell
-## 创建 /etc/docker 目录
-sudo mkdir /etc/docker
-```
-
-```shell
-# 设置 Docker daemon
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2",
-  "storage-opts": [
-    "overlay2.override_kernel_check=true"
-  ]
-}
-EOF
-```
-
-```shell
-# Create /etc/systemd/system/docker.service.d
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
-<!--
-# Restart Docker
-systemctl daemon-reload
-systemctl restart docker
--->
-```shell
-# 重启 Docker
-sudo systemctl daemon-reload
-sudo systemctl restart docker
-```
-{{% /tab %}}
-{{% /tabs %}}
-
-<!--
-If you want the `docker` service to start on boot, run the following command:
--->
-如果你想开机即启动 `docker` 服务，执行以下命令：
-
-```shell
-sudo systemctl enable docker
-```
-
-<!--
-Refer to the [official Docker installation guides](https://docs.docker.com/engine/installation/)
-for more information.
--->
-请参阅[官方 Docker 安装指南](https://docs.docker.com/engine/installation/)
-获取更多的信息。
+有关更多信息，请参阅
+  - [配置 Docker 守护程序](https://docs.docker.com/config/daemon/)
+  - [使用 systemd 控制 Docker](https://docs.docker.com/config/daemon/systemd/)

From 9c7c311ec28a2d3dc4c6c7d0e116c7f9e7fcde86 Mon Sep 17 00:00:00 2001
From: pacoxu <paco.xu@daocloud.io>
Date: Mon, 15 Mar 2021 13:27:51 +0800
Subject: [PATCH 198/788] correct the version of beta annotation for storage

---
 content/en/docs/concepts/storage/dynamic-provisioning.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/storage/dynamic-provisioning.md b/content/en/docs/concepts/storage/dynamic-provisioning.md
index bedd431dc9..63263fb370 100644
--- a/content/en/docs/concepts/storage/dynamic-provisioning.md
+++ b/content/en/docs/concepts/storage/dynamic-provisioning.md
@@ -80,7 +80,7 @@ parameters:
 Users request dynamically provisioned storage by including a storage class in
 their `PersistentVolumeClaim`. Before Kubernetes v1.6, this was done via the
 `volume.beta.kubernetes.io/storage-class` annotation. However, this annotation
-is deprecated since v1.6. Users now can and should instead use the
+is deprecated since v1.9. Users now can and should instead use the
 `storageClassName` field of the `PersistentVolumeClaim` object. The value of
 this field must match the name of a `StorageClass` configured by the
 administrator (see [below](#enabling-dynamic-provisioning)).

From 75fa920cf3f05bdbc43d975ddabd6a39407c2ab5 Mon Sep 17 00:00:00 2001
From: Vaibhav Goel <79974025+vaibhav2107@users.noreply.github.com>
Date: Mon, 15 Mar 2021 12:39:28 +0530
Subject: [PATCH 199/788] Update
 content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../tasks/extend-kubernetes/configure-multiple-schedulers.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md b/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
index 3f75467f96..96f55c3950 100644
--- a/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
+++ b/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
@@ -202,6 +202,7 @@ verify that the pods were scheduled by the desired schedulers.
 ```shell
 kubectl get events
 ```
-You can also use a [custom scheduler configuration,](https://kubernetes.io/docs/reference/scheduling/config/#multiple-profiles) or custom container image, for the cluster's main scheduler by modifying its static pod manifest on the relevant control plane host.
-
+You can also use a [custom scheduler configuration](/docs/reference/scheduling/config/#multiple-profiles)
+or a custom container image for the cluster's main scheduler by modifying its static pod manifest
+on the relevant control plane nodes.
 

From 402a2f90024504c225000b429cc57ecfbe3f6e3b Mon Sep 17 00:00:00 2001
From: vaibhav <t_vaibhav.goel@india.nec.com>
Date: Mon, 15 Mar 2021 16:25:49 +0530
Subject: [PATCH 200/788] Update the link

---
 .../docs/tasks/run-application/force-delete-stateful-set-pod.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md b/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md
index 83f7b52c85..2bef0d1299 100644
--- a/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md
+++ b/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md
@@ -33,7 +33,7 @@ kubectl delete pods <pod>
 
 上記がグレースフルターミネーションにつながるためには、`pod.Spec.TerminationGracePeriodSeconds`に0を指定しては**いけません**。`pod.Spec.TerminationGracePeriodSeconds`を0秒に設定することは安全ではなく、StatefulSet Podには強くお勧めできません。グレースフル削除は安全で、kubeletがapiserverから名前を削除する前にPodが[適切にシャットダウンする](/ja/docs/concepts/workloads/pods/pod-lifecycle/#termination-of-pods)ことを保証します。
 
-Kubernetes(バージョン1.5以降)は、Nodeにアクセスできないという理由だけでPodを削除しません。到達不能なNodeで実行されているPodは、[タイムアウト](/docs/concepts/architecture/nodes/#node-condition)の後に`Terminating`または`Unknown`状態になります。到達不能なNode上のPodをユーザーが適切に削除しようとすると、Podはこれらの状態に入ることもあります。そのような状態のPodをapiserverから削除することができる唯一の方法は以下の通りです:
+Kubernetes(バージョン1.5以降)は、Nodeにアクセスできないという理由だけでPodを削除しません。到達不能なNodeで実行されているPodは、[タイムアウト](/ja/docs/concepts/architecture/nodes/#node-condition)の後に`Terminating`または`Unknown`状態になります。到達不能なNode上のPodをユーザーが適切に削除しようとすると、Podはこれらの状態に入ることもあります。そのような状態のPodをapiserverから削除することができる唯一の方法は以下の通りです:
 
 * (ユーザーまたは[Node Controller](/ja/docs/concepts/architecture/nodes/)によって)Nodeオブジェクトが削除されます。
 * 応答していないNodeのkubeletが応答を開始し、Podを終了してapiserverからエントリーを削除します。

From 6cb22c90a514874dc0fb0c7b65e4353794bd6cfd Mon Sep 17 00:00:00 2001
From: Vaibhav Goel <79974025+vaibhav2107@users.noreply.github.com>
Date: Mon, 15 Mar 2021 16:59:50 +0530
Subject: [PATCH 201/788] Update
 content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md

Co-authored-by: makocchi <makocchi@gmail.com>
---
 .../tasks/run-application/force-delete-stateful-set-pod.md     | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md b/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md
index 2bef0d1299..ac20713a8d 100644
--- a/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md
+++ b/content/ja/docs/tasks/run-application/force-delete-stateful-set-pod.md
@@ -33,7 +33,7 @@ kubectl delete pods <pod>
 
 上記がグレースフルターミネーションにつながるためには、`pod.Spec.TerminationGracePeriodSeconds`に0を指定しては**いけません**。`pod.Spec.TerminationGracePeriodSeconds`を0秒に設定することは安全ではなく、StatefulSet Podには強くお勧めできません。グレースフル削除は安全で、kubeletがapiserverから名前を削除する前にPodが[適切にシャットダウンする](/ja/docs/concepts/workloads/pods/pod-lifecycle/#termination-of-pods)ことを保証します。
 
-Kubernetes(バージョン1.5以降)は、Nodeにアクセスできないという理由だけでPodを削除しません。到達不能なNodeで実行されているPodは、[タイムアウト](/ja/docs/concepts/architecture/nodes/#node-condition)の後に`Terminating`または`Unknown`状態になります。到達不能なNode上のPodをユーザーが適切に削除しようとすると、Podはこれらの状態に入ることもあります。そのような状態のPodをapiserverから削除することができる唯一の方法は以下の通りです:
+Kubernetes(バージョン1.5以降)は、Nodeにアクセスできないという理由だけでPodを削除しません。到達不能なNodeで実行されているPodは、[タイムアウト](/ja/docs/concepts/architecture/nodes/#condition)の後に`Terminating`または`Unknown`状態になります。到達不能なNode上のPodをユーザーが適切に削除しようとすると、Podはこれらの状態に入ることもあります。そのような状態のPodをapiserverから削除することができる唯一の方法は以下の通りです:
 
 * (ユーザーまたは[Node Controller](/ja/docs/concepts/architecture/nodes/)によって)Nodeオブジェクトが削除されます。
 * 応答していないNodeのkubeletが応答を開始し、Podを終了してapiserverからエントリーを削除します。
@@ -76,4 +76,3 @@ StatefulSet Podの強制削除は、常に慎重に、関連するリスクを
 
 [StatefulSetのデバッグ](/docs/tasks/debug-application-cluster/debug-stateful-set/)の詳細
 
-

From ec5b641a38ac304b24ba1d4ddc8ce66450a4bf24 Mon Sep 17 00:00:00 2001
From: Naoki Oketani <okepy.naoki@gmail.com>
Date: Mon, 15 Mar 2021 20:54:50 +0900
Subject: [PATCH 202/788] Translate
 docs/tasks/configmap-secret/managing-secret-using-config-file/ into Japanese

---
 .../managing-secret-using-config-file.md      | 183 ++++++++++++++++++
 .../managing-secret-using-kubectl.md          |   2 +-
 2 files changed, 184 insertions(+), 1 deletion(-)
 create mode 100644 content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md

diff --git a/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
new file mode 100644
index 0000000000..170fa6bd9d
--- /dev/null
+++ b/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -0,0 +1,183 @@
+---
+title: 設定ファイルを使用してSecretを管理する
+content_type: task
+weight: 20
+description: リソース設定ファイルを使用してSecretを作成する
+---
+
+<!-- overview -->
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+## 設定ファイルを作成する
+
+先にJSONやYAML形式のファイルでSecretを作成してから、そのオブジェクトを作成することができます。
+[Secret](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#secret-v1-core)リソースには、`data`と`stringData`の2つのマップが含まれています。
+`data`フィールドは任意のデータを格納するのに使用され、base64でエンコードされます。
+`stringData`フィールドは利便性のために用意されており、Secretデータをエンコードされていない文字列として提供することができます。
+`data`と`stringData`のキーは、英数字、`-`、`_`、`.`で構成されている必要があります。
+
+たとえば、`data`フィールドを使用して2つの文字列をSecretに格納するには、次のように文字列をbase64に変換します:
+
+```shell
+echo -n 'admin' | base64
+```
+
+出力は次のようになります:
+
+```
+YWRtaW4=
+```
+
+```shell
+echo -n '1f2d1e2e67df' | base64
+```
+
+出力は次のようになります:
+
+```
+MWYyZDFlMmU2N2Rm
+```
+
+以下のようなSecret設定ファイルを記述します:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+data:
+  username: YWRtaW4=
+  password: MWYyZDFlMmU2N2Rm
+```
+
+なお、Secretオブジェクトの名前は、有効な[DNSサブドメイン名](/ja/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)である必要があります。
+
+{{< note >}}
+SecretデータのシリアライズされたJSONおよびYAMLの値は、base64文字列としてエンコードされます。
+これらの文字列の中では、改行は有効ではなく、省略する必要があります。
+Darwin/macOSで`base64`ユーティリティーを使用する場合、長い行を分割するために`-b`オプションを使用するのは避けるべきです。
+逆に、Linux ユーザーは、`base64` コマンドにオプション`-w 0`を追加するか、`-w`オプションが利用できない場合には、パイプライン`base64 | tr -d '\n'`を追加する*必要があります*。
+{{< /note >}}
+
+特定のシナリオでは、代わりに`stringData`フィールドを使用できます。
+このフィールドでは、base64エンコードされていない文字列を直接Secretに入れることができ、Secretの作成時や更新時には、その文字列がエンコードされます。
+
+たとえば、設定ファイルを保存するためにSecretを使用しているアプリケーションをデプロイする際に、デプロイプロセス中に設定ファイルの一部を入力したい場合などが考えられます。
+
+たとえば、次のような設定ファイルを使用しているアプリケーションの場合:
+
+```yaml
+apiUrl: "https://my.api.com/api/v1"
+username: "<user>"
+password: "<password>"
+```
+
+次のような定義でSecretに格納できます:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+stringData:
+  config.yaml: |
+    apiUrl: "https://my.api.com/api/v1"
+    username: <user>
+    password: <password>
+```
+
+## Secretを作成する
+
+[`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands#apply)でSecretを作成します:
+
+```shell
+kubectl apply -f ./secret.yaml
+```
+
+出力は次のようになります:
+
+```
+secret/mysecret created
+```
+
+## Secretを確認する
+
+`stringData`フィールドは、書き込み専用の便利なフィールドです。Secretを取得する際には決して出力されません。たとえば、次のようなコマンドを実行した場合:
+
+```shell
+kubectl get secret mysecret -o yaml
+```
+
+出力は次のようになります:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  creationTimestamp: 2018-11-15T20:40:59Z
+  name: mysecret
+  namespace: default
+  resourceVersion: "7225"
+  uid: c280ad2e-e916-11e8-98f2-025000000001
+type: Opaque
+data:
+  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
+```
+
+`kubectl get`と`kubectl describe`コマンドはデフォルトではSecretの内容を表示しません。
+これは、Secretが不用意に他人にさらされたり、ターミナルログに保存されたりしないようにするためです。
+エンコードされたデータの実際の内容を確認するには、[Secretのデコード](/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret)を参照してください。
+
+`username`などのフィールドが`data`と`stringData`の両方に指定されている場合は、`stringData`の値が使われます。
+たとえば、以下のようなSecretの定義の場合:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+data:
+  username: YWRtaW4=
+stringData:
+  username: administrator
+```
+
+結果は以下の通りです:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  creationTimestamp: 2018-11-15T20:46:46Z
+  name: mysecret
+  namespace: default
+  resourceVersion: "7579"
+  uid: 91460ecb-e917-11e8-98f2-025000000001
+type: Opaque
+data:
+  username: YWRtaW5pc3RyYXRvcg==
+```
+
+`YWRtaW5pc3RyYXRvcg==`をデコードすると`administrator`となります。
+
+## クリーンアップ
+
+作成したSecretを削除するには次のコマンドを実行します:
+
+```shell
+kubectl delete secret mysecret
+```
+
+## {{% heading "whatsnext" %}}
+
+- [Secretのコンセプト](/ja/docs/concepts/configuration/secret/)を読む
+- [kubectlを使用してSecretを管理する](/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl/)方法を知る
+- [kustomizeを使用してSecretを管理する](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)方法を知る
diff --git a/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index fb8c89c1e3..9e498de8ac 100644
--- a/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -142,5 +142,5 @@ kubectl delete secret db-user-pass
 ## {{% heading "whatsnext" %}}
 
 - [Secretのコンセプト](/ja/docs/concepts/configuration/secret/)を読む
-- [設定ファイルを使用してSecretを管理する](/docs/tasks/configmap-secret/managing-secret-using-config-file/)方法を知る
+- [設定ファイルを使用してSecretを管理する](/ja/docs/tasks/configmap-secret/managing-secret-using-config-file/)方法を知る
 - [kustomizeを使用してSecretを管理する](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)方法を知る

From 69172dfd8e923e631f235051d5ed8188c55de359 Mon Sep 17 00:00:00 2001
From: Tobias <tobias.gabriel@sap.com>
Date: Mon, 15 Mar 2021 15:38:29 +0100
Subject: [PATCH 203/788] clarify: add that binaryData is base64-encoded

---
 content/en/docs/concepts/configuration/configmap.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index ad735388a0..74281e1ec1 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -43,7 +43,7 @@ Kubernetes objects that have a `spec`, a ConfigMap has `data` and `binaryData`
 fields. These fields accept key-value pairs as their values.  Both the `data`
 field and the `binaryData` are optional. The `data` field is designed to
 contain UTF-8 byte sequences while the `binaryData` field is designed to
-contain binary data.
+contain binary data as base64-encoded strings.
 
 The name of a ConfigMap must be a valid
 [DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).

From a71d623916d78c0c0142923f1ff0023dafa11bd1 Mon Sep 17 00:00:00 2001
From: Federico Gallo <musicapidae@gmail.com>
Date: Mon, 15 Mar 2021 12:25:05 -0300
Subject: [PATCH 204/788] [es] Update
 content/es/docs/reference/glossary/limitrange.md (#27041)

* Fixed a misconception that I had and I forgot to fix before the merge

* Update content/es/docs/reference/glossary/limitrange.md

Added suggested glossary tooltip : line23.
Thanks

Co-authored-by: Rael Garcia <rael@rael.io>

Co-authored-by: Rael Garcia <rael@rael.io>
---
 content/es/docs/reference/glossary/limitrange.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/reference/glossary/limitrange.md b/content/es/docs/reference/glossary/limitrange.md
index 9311ddc557..686ed9c342 100755
--- a/content/es/docs/reference/glossary/limitrange.md
+++ b/content/es/docs/reference/glossary/limitrange.md
@@ -20,4 +20,4 @@ Proporciona restricciones para limitar el consumo de recursos por {{< glossary_t
 
 <!--more-->
 
-LimitRange limita la cantidad de objetos que se pueden crear por su tipo (vease {{< glossary_tooltip text="Workloads" term_id="workload" >}}), así como la cantidad de recursos informáticos que pueden ser requeridos/consumidos por {{< glossary_tooltip text="Pods" term_id="pod" >}} individuales en un espacio de nombres.
+LimitRange limita la cantidad de objetos que se pueden crear por tipo, así como la cantidad de recursos informáticos que pueden ser requeridos/consumidos por {{< glossary_tooltip text="Pods" term_id="pod" >}} o {{< glossary_tooltip text="Contenedores" term_id="container" >}} individuales en un {{< glossary_tooltip text="Namespace" term_id="namespace" >}}.

From ddf1157e47b8314a6b9e592071cf1368b5f40fca Mon Sep 17 00:00:00 2001
From: "Lubomir I. Ivanov" <lubomirivanov@vmware.com>
Date: Mon, 15 Mar 2021 22:43:24 +0200
Subject: [PATCH 205/788] container-runtimes: add note about restarting
 containerd

Add note about restarting containerd when the cgroup driver
is changed to "systemd".
---
 .../setup/production-environment/container-runtimes.md    | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index 15f3e3a9b6..9e60076c5e 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -147,7 +147,7 @@ Start a Powershell session, set `$Version` to the desired version (ex: `$Version
 {{% /tab %}}
 {{< /tabs >}}
 
-#### systemd {#containerd-systemd}
+#### Using the `systemd` cgroup driver {#containerd-systemd}
 
 To use the `systemd` cgroup driver in `/etc/containerd/config.toml` with `runc`, set
 
@@ -158,6 +158,12 @@ To use the `systemd` cgroup driver in `/etc/containerd/config.toml` with `runc`,
     SystemdCgroup = true
 ```
 
+If you apply this change make sure to restart containerd again:
+
+```shell
+sudo systemctl restart containerd
+```
+
 When using kubeadm, manually configure the
 [cgroup driver for kubelet](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node).
 

From 45f1017f86f9e9d243fd9009b4a61845148722e2 Mon Sep 17 00:00:00 2001
From: Akihito INOH <akihito-inou@nec.com>
Date: Tue, 16 Mar 2021 07:29:54 +0900
Subject: [PATCH 206/788] Replace with relative path for featuregate link

This commit replaces abs path link for feature gate with relative
path /docs/reference/command-line-tools-reference/feature-gates/
---
 .../windows/intro-windows-in-kubernetes.md                      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 3998b48501..5c33b0a94b 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -221,7 +221,7 @@ On Windows, you can use the following settings to configure Services and load ba
 
 #### IPv4/IPv6 dual-stack
 
-You can enable IPv4/IPv6 dual-stack networking for `l2bridge` networks using the `IPv6DualStack` [feature gate](https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/). See [enable IPv4/IPv6 dual stack](/docs/concepts/services-networking/dual-stack#enable-ipv4ipv6-dual-stack) for more details.
+You can enable IPv4/IPv6 dual-stack networking for `l2bridge` networks using the `IPv6DualStack` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/). See [enable IPv4/IPv6 dual stack](/docs/concepts/services-networking/dual-stack#enable-ipv4ipv6-dual-stack) for more details.
 
 {{< note >}}
 On Windows, using IPv6 with Kubernetes require Windows Server, version 2004 (kernel version 10.0.19041.610) or later.

From c1fb44eb23d8253a1d0a7dc4b32f022064bdde87 Mon Sep 17 00:00:00 2001
From: AlexDamiao86 <alex_maiabr@hotmail.com>
Date: Mon, 15 Mar 2021 22:18:32 -0300
Subject: [PATCH 207/788] [pt] Add Expose Your App Publicly in Portuguese

---
 .../tutorials/kubernetes-basics/_index.html   |   8 +-
 .../kubernetes-basics/expose/_index.md        |   4 +
 .../expose/expose-interactive.html            |  38 +++++++
 .../expose/expose-intro.html                  | 103 ++++++++++++++++++
 4 files changed, 149 insertions(+), 4 deletions(-)
 create mode 100644 content/pt/docs/tutorials/kubernetes-basics/expose/_index.md
 create mode 100644 content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
 create mode 100644 content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html

diff --git a/content/pt/docs/tutorials/kubernetes-basics/_index.html b/content/pt/docs/tutorials/kubernetes-basics/_index.html
index 90e0592c18..aabad1f782 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/_index.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/_index.html
@@ -24,7 +24,7 @@ card:
     <div class="row">
       <div class="col-md-9">
         <h2>Básico do Kubernetes</h2>
-        <p>Este tutorial fornece instruções básicas sobre o sistema de orquestração de cluster do Kubernetes. Cada módulo contém algumas informações básicas sobre os principais recursos e conceitos do Kubernetes e inclui um tutorial online interativo. Esses tutoriais interativos permitem que você mesmo gerencie um cluster simples e seus aplicativos em contêineres.</p>           
+        <p>Este tutorial fornece instruções básicas sobre o sistema de orquestração de cluster do Kubernetes. Cada módulo contém algumas informações básicas sobre os principais recursos e conceitos do Kubernetes e inclui um tutorial online interativo. Esses tutoriais interativos permitem que você mesmo gerencie um cluster simples e seus aplicativos em contêineres.</p>
         <p>Usando os tutoriais interativos, você pode aprender a:</p>
         <ul>
         <li>Implante um aplicativo em contêiner em um cluster.</li>
@@ -46,7 +46,7 @@ card:
     </div>
 
     <br>
-    
+
     <div id="basics-modules" class="content__modules">
       <h2>Módulos básicos do Kubernetes</h2>
       <div class="row">
@@ -82,9 +82,9 @@ card:
           <div class="row">
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/expose/expose-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_04.svg?v=1469803628347" alt=""></a>
+                <a href="/pt/docs/tutorials/kubernetes-basics/expose/expose-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_04.svg?v=1469803628347" alt=""></a>
                 <div class="caption">
-                  <a href="/docs/tutorials/kubernetes-basics/expose/expose-intro/"><h5>4. Exponha seu aplicativo publicamente</h5></a>
+                  <a href="/pt/docs/tutorials/kubernetes-basics/expose/expose-intro/"><h5>4. Exponha seu aplicativo publicamente</h5></a>
                 </div>
               </div>
             </div>
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md b/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md
new file mode 100644
index 0000000000..28a8de2f24
--- /dev/null
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md
@@ -0,0 +1,4 @@
+---
+title: Exponha publicamente seu App
+weight: 40
+---
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
new file mode 100644
index 0000000000..c31f81d7d9
--- /dev/null
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -0,0 +1,38 @@
+---
+title: Tutorial Interativo - Expondo seu App
+weight: 20
+---
+
+<!DOCTYPE html>
+
+<html lang="en">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+<link href="/docs/tutorials/kubernetes-basics/public/css/overrides.css" rel="stylesheet">
+<script src="https://katacoda.com/embed.js"></script>
+
+<div class="layout" id="top">
+
+    <main class="content katacoda-content">
+
+        <div class="katacoda">
+            <div class="katacoda__alert">
+                Para interagir com seu terminal, favor utilizar a versão desktop/tablet
+            </div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Terminal Kubernetes Bootcamp" style="height: 600px;">
+            </div>
+        </div>
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Continue com o Módulo 5<span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
new file mode 100644
index 0000000000..1bc37a6c59
--- /dev/null
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
@@ -0,0 +1,103 @@
+---
+title: Utilizando um serviço para expor seu App
+weight: 10
+---
+
+<!DOCTYPE html>
+
+<html lang="en">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+
+<div class="layout" id="top">
+
+	<main class="content">
+
+		<div class="row">
+			<div class="col-md-8">
+    		<h3>Objetivos</h3>
+				<ul>
+					<li>Aprenda sobre um Serviço no Kubernetes</li>
+					<li>Entenda como os objetos <code>labels</code> e <code>LabelSelector</code> se relacionam a um Serviço</li>
+					<li>Exponha uma aplicação externamente ao cluster Kubernetes usando um Serviço</li>
+				</ul>
+			</div>
+
+			<div class="col-md-8">
+			<h3>Visão Geral de Serviços Kubernetes</h3>
+
+			<p><a href="/docs/concepts/workloads/pods/">Pods</a> Kubernetes são efêmeros. Na verdade, Pods possuem um <a href="/docs/concepts/workloads/pods/pod-lifecycle/">ciclo de vida</a>. Quando um nó de processamento morre, os Pods executados no nó também são perdidos. A partir disso, o <a href="/docs/concepts/workloads/controllers/replicaset/">ReplicaSet</a> pode dinamicamente retornar o cluster ao estado desejado através da criação de novos Pods para manter sua aplicação em execução. Como outro exemplo, considere um backend de processamento de imagens com 3 réplicas. Estas réplicas são intercambiáveis; o sistema front-end não deveria se importar com as réplicas backend ou ainda se um Pod é perdido ou recriado. Dito isso, cada Pod em um cluster Kubernetes tem um único endereço IP, mesmo Pods no mesmo nó, então há necessidade de ter uma forma de reconciliar automaticamente mudanças entre Pods de modo que sua aplicação continue funcionando.</p>
+
+			<p>Um serviço no Kubernetes é uma abstração que define um conjunto lógico de Pods e uma política pela qual acessá-los. Serviços permitem um baixo acoplamento entre os Pods dependentes. Um serviço é definido usando YAML <a href="/docs/concepts/configuration/overview/#general-configuration-tips">(preferencialmente)</a> ou JSON, como todos objetos Kubernetes. O conjunto de Pods selecionados por um Serviço é geralmente determinado por um seletor de rótulos <i>LabelSelector</i> (veja abaixo o motivo pelo qual você pode querer um Serviço sem incluir um seletor <code>selector</code> na especificação <code>spec</code>).</p>
+
+			<p>Embora cada Pod tenha um endereço IP único, estes IPs não são expostos externamente ao cluster sem um Serviço. Serviços permitem que suas aplicações recebam tráfego. Serviços podem ser expostos de formas diferentes especificando um tipo <code>type</code> na especificação do serviço <code>ServiceSpec</code>:</p>
+			<ul>
+				<li><i>ClusterIP</i> (padrão) - Expõe o serviço sob um endereço IP interno no cluster. Este tipo faz do serviço somente alcancável a partir de dentro do cluster.</li>
+				<li><i>NodePort</i> - Expõe o serviço sob a mesma porta em cada nó selecionado no cluster usando NAT. Faz o serviço acessível externamente ao cluster usando <code>&lt;NodeIP&gt;:&lt;NodePort&gt;</code>. Superconjunto de ClusterIP.</li>
+				<li><i>LoadBalancer</i> - Cria um balanceador de carga externo no provedor de nuvem atual (se suportado) e assinala um endereço IP fixo e externo para o serviço. Superconjunto de NodePort.</li>
+				<li><i>ExternalName</i> - Expõe o serviço usando um nome arbitrário (especificado através de <code>externalName</code> na especificação <code>spec</code>) retornando um registro de CNAME com o nome. Nenhum proxy é utilizado. Este tipo requer v1.7 ou mais recente de <code>kube-dns</code>.</li>
+			</ul>
+			<p>Mais informações sobre diferentes tipos de Serviços podem ser encontradas no tutorial <a href="/docs/tutorials/services/source-ip/">Utilizando IP de origem</a>. Também confira <a href="/docs/concepts/services-networking/connect-applications-service">Conectando aplicações com serviços</a>.</p>
+			<p>Adicionalmente, note que existem alguns casos de uso com serviços que envolvem a não definição de <code>selector</code> em <code>spec</code>. Serviços criados sem <code>selector</code> também não criarão objetos Endpoints correspondentes. Isto permite usuários mapear manualmente um serviço a endpoints específicos. Outra possibilidade na qual pode não haver seletores é ao se utilizar estritamente <code>type: ExternalName</code>.</p>
+			</div>
+			<div class="col-md-4">
+				<div class="content__box content__box_lined">
+					<h3>Resumo</h3>
+					<ul>
+						<li>Expõe Pods ao tráfego externo</li>
+						<li>Tráfego de balanceamento de carga entre múltiplos Pods</li>
+						<li>Uso de rótulos <code>labels</code></li>
+					</ul>
+				</div>
+				<div class="content__box content__box_fill">
+						<p><i>Um serviço Kubernetes é uma camada de abstração que define um conjunto lógico de Pods e habilita a exposição ao tráfego externo, balanceamento de carga e descoberta de serviço para esses Pods.</i></p>
+				</div>
+			</div>
+		</div>
+		<br>
+
+		<div class="row">
+			<div class="col-md-8">
+				<h3>Serviços e Rótulos</h3>
+			</div>
+		</div>
+
+		<div class="row">
+			<div class="col-md-8">
+				<p>Um serviço roteia tráfego entre um conjunto de Pods. Serviço é a abstração que permite pods morrerem e se replicarem no Kubernetes sem impactar sua aplicação. A descoberta e o roteamento entre Pods dependentes (tal como componentes frontend e backend dentro de uma aplicação) são controlados por serviços Kubernetes.</p>
+				<p>Serviços relacionam um conjunto de Pods usando <a href="/docs/concepts/overview/working-with-objects/labels">Rótulos e seletores</a>, um agrupamento primitivo que permite operações lógicas sobre objetos Kubernetes. Rótulos são pares de chave/valor anexados à objetos e podem ser usados de inúmeras formas:</p>
+				<ul>
+					<li>Designar objetos para desenvolvimento, teste e produção</li>
+					<li>Adicionar tags de versão</li>
+					<li>Classificar um objeto usando tags</li>
+				</ul>
+			</div>
+
+		</div>
+
+		<br>
+
+		<div class="row">
+			<div class="col-md-8">
+				<p><img src="/docs/tutorials/kubernetes-basics/public/images/module_04_labels.svg"></p>
+			</div>
+		</div>
+		<br>
+		<div class="row">
+			<div class="col-md-8">
+				<p>Rótulos podem ser anexados à objetos no momento de sua criação ou posteriormente. Eles podem ser modificados a qualquer tempo. Vamos agora expor sua aplicação usando um serviço e aplicar alguns rótulos.</p>
+			</div>
+		</div>
+		<br>
+		<div class="row">
+			<div class="col-md-12">
+				<a class="btn btn-lg btn-success" href="/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive/" role="button">Iniciar tutorial interativo<span class="btn__next">›</span></a>
+			</div>
+		</div>
+	</main>
+</div>
+
+</body>
+</html>

From 71c463ae18e709b30d6417edcfa419ef4af2129c Mon Sep 17 00:00:00 2001
From: DevLazio <val.mariette@gmail.com>
Date: Tue, 16 Mar 2021 14:44:16 +0100
Subject: [PATCH 208/788] Fixed markdown links in french translation

---
 content/fr/docs/setup/_index.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/fr/docs/setup/_index.md b/content/fr/docs/setup/_index.md
index 37161dbc0c..5424c448a7 100644
--- a/content/fr/docs/setup/_index.md
+++ b/content/fr/docs/setup/_index.md
@@ -35,7 +35,7 @@ Vous devriez choisir une solution locale si vous souhaitez :
 * Essayer ou commencer à apprendre Kubernetes
 * Développer et réaliser des tests sur des clusters locaux
 
-Choisissez une [solution locale] (/fr/docs/setup/pick-right-solution/#solutions-locales).
+Choisissez une [solution locale](/fr/docs/setup/pick-right-solution/#solutions-locales).
 
 ## Solutions hébergées
 
@@ -49,7 +49,7 @@ Vous devriez choisir une solution hébergée si vous :
 * N'avez pas d'équipe de Site Reliability Engineering (SRE) dédiée, mais que vous souhaitez une haute disponibilité.
 * Vous n'avez pas les ressources pour héberger et surveiller vos clusters
 
-Choisissez une [solution hébergée] (/fr/docs/setup/pick-right-solution/#solutions-hebergées).
+Choisissez une [solution hébergée](/fr/docs/setup/pick-right-solution/#solutions-hebergées).
 
 ## Solutions cloud clés en main
 
@@ -63,7 +63,7 @@ Vous devriez choisir une solution cloud clés en main si vous :
 * Voulez plus de contrôle sur vos clusters que ne le permettent les solutions hébergées
 * Voulez réaliser vous même un plus grand nombre d'operations
 
-Choisissez une [solution clé en main] (/fr/docs/setup/pick-right-solution/#solutions-clés-en-main)
+Choisissez une [solution clé en main](/fr/docs/setup/pick-right-solution/#solutions-clés-en-main)
 
 ## Solutions clés en main sur site
 
@@ -76,7 +76,7 @@ Vous devriez choisir une solution de cloud clé en main sur site si vous :
 * Disposez d'une équipe SRE dédiée
 * Avez les ressources pour héberger et surveiller vos clusters
 
-Choisissez une [solution clé en main sur site] (/fr/docs/setup/pick-right-solution/#solutions-on-premises-clés-en-main).
+Choisissez une [solution clé en main sur site](/fr/docs/setup/pick-right-solution/#solutions-on-premises-clés-en-main).
 
 ## Solutions personnalisées
 
@@ -84,11 +84,11 @@ Les solutions personnalisées vous offrent le maximum de liberté sur vos cluste
 d'expertise. Ces solutions vont du bare-metal aux fournisseurs de cloud sur
 différents systèmes d'exploitation.
 
-Choisissez une [solution personnalisée] (/fr/docs/setup/pick-right-solution/#solutions-personnalisées).
+Choisissez une [solution personnalisée](/fr/docs/setup/pick-right-solution/#solutions-personnalisées).
 
 
 
 ## {{% heading "whatsnext" %}}
 
-Allez à [Choisir la bonne solution] (/fr/docs/setup/pick-right-solution/) pour une liste complète de solutions.
+Allez à [Choisir la bonne solution](/fr/docs/setup/pick-right-solution/) pour une liste complète de solutions.
 

From 088f97591675bed6f6c5f2751fd4f07fde063811 Mon Sep 17 00:00:00 2001
From: Alexandre Maia <alex_maiabr@hotmail.com>
Date: Tue, 16 Mar 2021 16:11:33 -0300
Subject: [PATCH 209/788] Update expose-interactive.html

---
 .../kubernetes-basics/expose/expose-interactive.html          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index c31f81d7d9..a816afda10 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -19,14 +19,14 @@ weight: 20
 
         <div class="katacoda">
             <div class="katacoda__alert">
-                Para interagir com seu terminal, favor utilizar a versão desktop/tablet
+                Para interagir com o terminal, favor utilizar a versão desktop/tablet
             </div>
             <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Terminal Kubernetes Bootcamp" style="height: 600px;">
             </div>
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Continue com o Módulo 5<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Continuar para o Módulo 5<span class="btn__next">›</span></a>
             </div>
         </div>
 

From 57fd2ffa476bdaef8564e035f4f34083679987b4 Mon Sep 17 00:00:00 2001
From: Alexandre Maia <alex_maiabr@hotmail.com>
Date: Tue, 16 Mar 2021 16:12:49 -0300
Subject: [PATCH 210/788] Update expose-intro.html

---
 .../docs/tutorials/kubernetes-basics/expose/expose-intro.html   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
index 1bc37a6c59..548892d678 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
@@ -34,7 +34,7 @@ weight: 10
 
 			<p>Embora cada Pod tenha um endereço IP único, estes IPs não são expostos externamente ao cluster sem um Serviço. Serviços permitem que suas aplicações recebam tráfego. Serviços podem ser expostos de formas diferentes especificando um tipo <code>type</code> na especificação do serviço <code>ServiceSpec</code>:</p>
 			<ul>
-				<li><i>ClusterIP</i> (padrão) - Expõe o serviço sob um endereço IP interno no cluster. Este tipo faz do serviço somente alcancável a partir de dentro do cluster.</li>
+				<li><i>ClusterIP</i> (padrão) - Expõe o serviço sob um endereço IP interno no cluster. Este tipo faz do serviço somente alcançável de dentro do cluster.</li>
 				<li><i>NodePort</i> - Expõe o serviço sob a mesma porta em cada nó selecionado no cluster usando NAT. Faz o serviço acessível externamente ao cluster usando <code>&lt;NodeIP&gt;:&lt;NodePort&gt;</code>. Superconjunto de ClusterIP.</li>
 				<li><i>LoadBalancer</i> - Cria um balanceador de carga externo no provedor de nuvem atual (se suportado) e assinala um endereço IP fixo e externo para o serviço. Superconjunto de NodePort.</li>
 				<li><i>ExternalName</i> - Expõe o serviço usando um nome arbitrário (especificado através de <code>externalName</code> na especificação <code>spec</code>) retornando um registro de CNAME com o nome. Nenhum proxy é utilizado. Este tipo requer v1.7 ou mais recente de <code>kube-dns</code>.</li>

From 552566fcfac4977b12676c203cf5225e7b764200 Mon Sep 17 00:00:00 2001
From: Aldo Culquicondor <acondor@google.com>
Date: Mon, 8 Mar 2021 15:28:08 -0500
Subject: [PATCH 211/788] Documentation for Indexed completion mode

Signed-off-by: Aldo Culquicondor <acondor@google.com>
---
 .../concepts/workloads/controllers/job.md     |  60 ++++--
 .../feature-gates.md                          |   7 +-
 .../coarse-parallel-processing-work-queue.md  |   2 +-
 .../fine-parallel-processing-work-queue.md    |   2 +-
 .../job/indexed-parallel-processing-static.md | 176 ++++++++++++++++++
 .../job/parallel-processing-expansion.md      |   2 +-
 .../application/job/indexed-job-vol.yaml      |  27 +++
 .../examples/application/job/indexed-job.yaml |  35 ++++
 8 files changed, 291 insertions(+), 20 deletions(-)
 create mode 100644 content/en/docs/tasks/job/indexed-parallel-processing-static.md
 create mode 100644 content/en/examples/application/job/indexed-job-vol.yaml
 create mode 100644 content/en/examples/application/job/indexed-job.yaml

diff --git a/content/en/docs/concepts/workloads/controllers/job.md b/content/en/docs/concepts/workloads/controllers/job.md
index 2c99a704d1..d5f505473a 100644
--- a/content/en/docs/concepts/workloads/controllers/job.md
+++ b/content/en/docs/concepts/workloads/controllers/job.md
@@ -145,8 +145,8 @@ There are three main types of task suitable to run as a Job:
    - the Job is complete as soon as its Pod terminates successfully.
 1. Parallel Jobs with a *fixed completion count*:
    - specify a non-zero positive value for `.spec.completions`.
-   - the Job represents the overall task, and is complete when there is one successful Pod for each value in the range 1 to `.spec.completions`.
-   - **not implemented yet:** Each Pod is passed a different index in the range 1 to `.spec.completions`.
+   - the Job represents the overall task, and is complete when there are `.spec.completions` successful Pods.
+   - when using `.spec.completionMode="Indexed"`, each Pod gets a different index in the range 0 to `.spec.completions-1`.
 1. Parallel Jobs with a *work queue*:
    - do not specify `.spec.completions`, default to `.spec.parallelism`.
    - the Pods must coordinate amongst themselves or an external service to determine what each should work on. For example, a Pod might fetch a batch of up to N items from the work queue.
@@ -166,7 +166,6 @@ a non-negative integer.
 
 For more information about how to make use of the different types of job, see the [job patterns](#job-patterns) section.
 
-
 #### Controlling parallelism
 
 The requested parallelism (`.spec.parallelism`) can be set to any non-negative value.
@@ -185,6 +184,33 @@ parallelism, for a variety of reasons:
 - The Job controller may throttle new Pod creation due to excessive previous pod failures in the same Job.
 - When a Pod is gracefully shut down, it takes time to stop.
 
+### Completion mode
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+{{< note >}}
+To be able to create Indexed Jobs, make sure to enable the `IndexedJob`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+on the [API server](docs/reference/command-line-tools-reference/kube-apiserver/)
+and the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/).
+{{< /note >}}
+
+Jobs with _fixed completion count_ - that is, jobs that have non null
+`.spec.completions` - can have a completion mode that is specified in `.spec.completionMode`:
+
+- `NonIndexed` (default): the Job is considered complete when there have been
+  `.spec.completions` successfully completed Pods. In other words, each Pod
+  completion is homologous to each other. Note that Jobs that have null
+  `.spec.completions` are implicitly `NonIndexed`.
+- `Indexed`: the Pods of a Job get an associated completion index from 0 to
+  `.spec.completions-1`, available in the annotation `batch.kubernetes.io/job-completion-index`.
+  The Job is considered complete when there is one successfully completed Pod
+  for each index. For more information about how to use this mode, see
+  [Indexed Job for Parallel Processing with Static Work Assignment](/docs/tasks/job/indexed-parallel-processing-static/).
+  Note that, although rare, more than one Pod could be started for the same
+  index, but only one of them will count towards the completion count.
+
+
 ## Handling Pod and container failures
 
 A container in a Pod may fail for a number of reasons, such as because the process in it exited with
@@ -348,12 +374,12 @@ The tradeoffs are:
 The tradeoffs are summarized here, with columns 2 to 4 corresponding to the above tradeoffs.
 The pattern names are also links to examples and more detailed description.
 
-|                            Pattern                                   | Single Job object | Fewer pods than work items? | Use app unmodified? |  Works in Kube 1.1? |
-| -------------------------------------------------------------------- |:-----------------:|:---------------------------:|:-------------------:|:-------------------:|
-| [Job Template Expansion](/docs/tasks/job/parallel-processing-expansion/)            |                   |                             |          ✓          |          ✓          |
-| [Queue with Pod Per Work Item](/docs/tasks/job/coarse-parallel-processing-work-queue/)   |         ✓         |                             |      sometimes      |          ✓          |
-| [Queue with Variable Pod Count](/docs/tasks/job/fine-parallel-processing-work-queue/)  |         ✓         |             ✓               |                     |          ✓          |
-| Single Job with Static Work Assignment                               |         ✓         |                             |          ✓          |                     |
+|                  Pattern                  | Single Job object | Fewer pods than work items? | Use app unmodified? |
+| ----------------------------------------- |:-----------------:|:---------------------------:|:-------------------:|
+| [Queue with Pod Per Work Item]            |         ✓         |                             |      sometimes      |
+| [Queue with Variable Pod Count]           |         ✓         |             ✓               |                     |
+| [Indexed Job with Static Work Assignment] |         ✓         |                             |          ✓          | 
+| [Job Template Expansion]                  |                   |                             |          ✓          |
 
 When you specify completions with `.spec.completions`, each Pod created by the Job controller
 has an identical [`spec`](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status).  This means that
@@ -364,13 +390,17 @@ are different ways to arrange for pods to work on different things.
 This table shows the required settings for `.spec.parallelism` and `.spec.completions` for each of the patterns.
 Here, `W` is the number of work items.
 
-|                             Pattern                                  | `.spec.completions` |  `.spec.parallelism` |
-| -------------------------------------------------------------------- |:-------------------:|:--------------------:|
-| [Job Template Expansion](/docs/tasks/job/parallel-processing-expansion/)           |          1          |     should be 1      |
-| [Queue with Pod Per Work Item](/docs/tasks/job/coarse-parallel-processing-work-queue/)   |          W          |        any           |
-| [Queue with Variable Pod Count](/docs/tasks/job/fine-parallel-processing-work-queue/)  |          1          |        any           |
-| Single Job with Static Work Assignment                               |          W          |        any           |
+|             Pattern                       | `.spec.completions` |  `.spec.parallelism` |
+| ----------------------------------------- |:-------------------:|:--------------------:|
+| [Queue with Pod Per Work Item]            |          W          |        any           |
+| [Queue with Variable Pod Count]           |         null        |        any           |
+| [Indexed Job with Static Work Assignment] |          W          |        any           |
+| [Job Template Expansion]                  |          1          |     should be 1      |
 
+[Queue with Pod Per Work Item]: /docs/tasks/job/coarse-parallel-processing-work-queue/
+[Queue with Variable Pod Count]: /docs/tasks/job/fine-parallel-processing-work-queue/
+[Indexed Job with Static Work Assignment]: /docs/tasks/job/indexed-parallel-processing-static/
+[Job Template Expansion]: /docs/tasks/job/parallel-processing-expansion/
 
 ## Advanced usage
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2cae7be4a0..84dbe31dbe 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -259,6 +259,7 @@ different Kubernetes components.
 | `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 |
 | `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | 1.20 |
 | `ImmutableEphemeralVolumes` | `true` | GA | 1.21 | |
+| `IndexedJob` | `false` | Alpha | 1.21 | |
 | `Initializers` | `false` | Alpha | 1.7 | 1.13 |
 | `Initializers` | - | Deprecated | 1.14 | - |
 | `KubeletConfigFile` | `false` | Alpha | 1.8 | 1.9 |
@@ -628,10 +629,12 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `HyperVContainer`: Enable
   [Hyper-V isolation](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container)
   for Windows containers.
-- `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
-  support for IPv6.
 - `ImmutableEphemeralVolumes`: Allows for marking individual Secrets and ConfigMaps as
   immutable for better safety and performance.
+- `IndexedJob`: Allows the [Job](/docs/concepts/workloads/controllers/job/)
+  controller to manage Pod completions per completion index.
+- `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
+  support for IPv6.
 - `KubeletConfigFile` (*deprecated*): Enable loading kubelet configuration from
   a file specified using a config file.
   See [setting kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file/)
diff --git a/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md b/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md
index ce7da0b453..951848b1b4 100644
--- a/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md
+++ b/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md
@@ -2,7 +2,7 @@
 title: Coarse Parallel Processing Using a Work Queue
 min-kubernetes-server-version: v1.8
 content_type: task
-weight: 30
+weight: 20
 ---
 
 
diff --git a/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md b/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md
index 7f3c30121e..b4cb4e641f 100644
--- a/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md
+++ b/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md
@@ -2,7 +2,7 @@
 title: Fine Parallel Processing Using a Work Queue
 content_type: task
 min-kubernetes-server-version: v1.8
-weight: 40
+weight: 30
 ---
 
 <!-- overview -->
diff --git a/content/en/docs/tasks/job/indexed-parallel-processing-static.md b/content/en/docs/tasks/job/indexed-parallel-processing-static.md
new file mode 100644
index 0000000000..57d771ef14
--- /dev/null
+++ b/content/en/docs/tasks/job/indexed-parallel-processing-static.md
@@ -0,0 +1,176 @@
+---
+title: Indexed Job for Parallel Processing with Static Work Assignment
+content_type: task
+min-kubernetes-server-version: v1.21
+weight: 30
+---
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!-- overview -->
+
+
+In this example, you will run a Kubernetes Job that uses multiple parallel
+worker processes.
+Each worker is a different container running in its own Pod. The Pods have an
+_index number_ that the control plane sets automatically, which allows each Pod
+to identify which part of the overall task to work on.
+
+The pod index is available in the {{< glossary_tooltip text="annotation" term_id="annotation" >}}
+`batch.kubernetes.io/job-completion-index` as string representing its
+decimal value. In order for the containerized task process to obtain this index,
+you can publish the value of the annotation using the [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/#the-downward-api)
+mechanism.
+For convenience, the control plane automatically sets the downward API to
+expose the index in the `JOB_COMPLETION_INDEX` environment variable.
+
+Here is an overview of the steps in this example:
+
+1. **Create an image that can read the pod index**. You might modify the worker
+   program or add a script wrapper.
+2. **Start an Indexed Job**. The downward API allows you to pass the annotation
+   as an environment variable or file to the container.
+
+## {{% heading "prerequisites" %}}
+
+Be familiar with the basic,
+non-parallel, use of [Job](/docs/concepts/workloads/controllers/job/).
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+To be able to create Indexed Jobs, make sure to enable the `IndexedJob`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+on the [API server](docs/reference/command-line-tools-reference/kube-apiserver/)
+and the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/).
+
+<!-- steps -->
+
+## Choose an approach
+
+To access the work item from the worker program, you have a few options:
+
+1. Read the `JOB_COMPLETION_INDEX` environment variable. The Job
+   {{< glossary_tooltip text="controller" term_id="controller" >}}
+   automatically links this variable to the annotation containing the completion
+   index.
+1. Read a file that contains the completion index.
+1. Assuming that you can't modify the program, you can wrap it with a script
+   that reads the index using any of the methods above and converts it into
+   something that the program can use as input.
+  
+For this example, imagine that you chose option 3 and you want to run the
+[rev](https://man7.org/linux/man-pages/man1/rev.1.html) utility. This
+program accepts a file as an argument and prints its content reversed.
+
+```shell
+rev data.txt
+```
+
+For this example, you'll use the `rev` tool from the
+[`busybox`](https://hub.docker.com/_/busybox) container image.
+
+## Define an Indexed Job
+
+Here is a job definition. You'll need to edit the container image to match your
+preferred registry.
+
+{{< codenew language="yaml" file="application/job/indexed-job.yaml" >}}
+
+In the example above, you use the builtin `JOB_COMPLETION_INDEX` environment
+variable set by the Job controller for all containers. An [init container](/docs/concepts/workloads/pods/init-containers/)
+maps the index to a static value and writes it to a file that is shared with the
+container running the worker through an [emptyDir volume](/docs/concepts/storage/volumes/#emptydir).
+Optionally, you can [define your own environment variable through the downward
+API](/docs/tasks/inject-data-application/environment-variable-expose-pod-information/)
+to publish the index to containers. You can also choose to load a list of values
+from a [ConfigMap as an environment variable or file](/docs/tasks/configure-pod-container/configure-pod-configmap/).
+
+Alternatively, you can directly [use the downward API to pass the annotation
+value as a volume file](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/#store-pod-fields),
+like shown in the following example:
+
+{{< codenew language="yaml" file="application/job/indexed-job-vol.yaml" >}}
+
+## Running the Job
+
+Now run the Job:
+
+```shell
+kubectl apply -f ./indexed-job.yaml
+```
+
+Wait a bit, then check on the job:
+
+```shell
+kubectl describe jobs/indexed-job
+```
+
+The output is similar to:
+
+```
+Name:              indexed-job
+Namespace:         default
+Selector:          controller-uid=bf865e04-0b67-483b-9a90-74cfc4c3e756
+Labels:            controller-uid=bf865e04-0b67-483b-9a90-74cfc4c3e756
+                   job-name=indexed-job
+Annotations:       <none>
+Parallelism:       3
+Completions:       5
+Start Time:        Thu, 11 Mar 2021 15:47:34 +0000
+Pods Statuses:     2 Running / 3 Succeeded / 0 Failed
+Completed Indexes: 0-2
+Pod Template:
+  Labels:  controller-uid=bf865e04-0b67-483b-9a90-74cfc4c3e756
+           job-name=indexed-job
+  Init Containers:
+   input:
+    Image:      docker.io/library/bash
+    Port:       <none>
+    Host Port:  <none>
+    Command:
+      bash
+      -c
+      items=(foo bar baz qux xyz)
+      echo ${items[$JOB_COMPLETION_INDEX]} > /input/data.txt
+
+    Environment:  <none>
+    Mounts:
+      /input from input (rw)
+  Containers:
+   worker:
+    Image:      docker.io/library/busybox
+    Port:       <none>
+    Host Port:  <none>
+    Command:
+      rev
+      /input/data.txt
+    Environment:  <none>
+    Mounts:
+      /input from input (rw)
+  Volumes:
+   input:
+    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
+    Medium:
+    SizeLimit:  <unset>
+Events:
+  Type    Reason            Age   From            Message
+  ----    ------            ----  ----            -------
+  Normal  SuccessfulCreate  4s    job-controller  Created pod: indexed-job-njkjj
+  Normal  SuccessfulCreate  4s    job-controller  Created pod: indexed-job-9kd4h
+  Normal  SuccessfulCreate  4s    job-controller  Created pod: indexed-job-qjwsz
+  Normal  SuccessfulCreate  1s    job-controller  Created pod: indexed-job-fdhq5
+  Normal  SuccessfulCreate  1s    job-controller  Created pod: indexed-job-ncslj
+```
+
+In this example, we run the job with custom values for each index. You can
+inspect the output of the pods:
+
+```shell
+kubectl logs indexed-job-fdhq5 # Change this to match the name of a Pod in your cluster.
+```
+
+The output is similar to:
+
+```
+xuq
+```
\ No newline at end of file
diff --git a/content/en/docs/tasks/job/parallel-processing-expansion.md b/content/en/docs/tasks/job/parallel-processing-expansion.md
index 8f5994929e..fdd309cafb 100644
--- a/content/en/docs/tasks/job/parallel-processing-expansion.md
+++ b/content/en/docs/tasks/job/parallel-processing-expansion.md
@@ -2,7 +2,7 @@
 title: Parallel Processing using Expansions
 content_type: task
 min-kubernetes-server-version: v1.8
-weight: 20
+weight: 50
 ---
 
 <!-- overview -->
diff --git a/content/en/examples/application/job/indexed-job-vol.yaml b/content/en/examples/application/job/indexed-job-vol.yaml
new file mode 100644
index 0000000000..ed40e1cc44
--- /dev/null
+++ b/content/en/examples/application/job/indexed-job-vol.yaml
@@ -0,0 +1,27 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: 'indexed-job'
+spec:
+  completions: 5
+  parallelism: 3
+  completionMode: Indexed
+  template:
+    spec:
+      restartPolicy: Never
+      containers:
+      - name: 'worker'
+        image: 'docker.io/library/busybox'
+        command:
+        - "rev"
+        - "/input/data.txt"
+        volumeMounts:
+        - mountPath: /input
+          name: input
+      volumes:
+      - name: input
+        downwardAPI:
+          items:
+          - path: "data.txt"
+            fieldRef:
+              fieldPath: metadata.annotations['batch.kubernetes.io/job-completion-index']
\ No newline at end of file
diff --git a/content/en/examples/application/job/indexed-job.yaml b/content/en/examples/application/job/indexed-job.yaml
new file mode 100644
index 0000000000..5b80d35264
--- /dev/null
+++ b/content/en/examples/application/job/indexed-job.yaml
@@ -0,0 +1,35 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: 'indexed-job'
+spec:
+  completions: 5
+  parallelism: 3
+  completionMode: Indexed
+  template:
+    spec:
+      restartPolicy: Never
+      initContainers:
+      - name: 'input'
+        image: 'docker.io/library/bash'
+        command:
+        - "bash"
+        - "-c"
+        - |
+          items=(foo bar baz qux xyz)
+          echo ${items[$JOB_COMPLETION_INDEX]} > /input/data.txt
+        volumeMounts:
+        - mountPath: /input
+          name: input
+      containers:
+      - name: 'worker'
+        image: 'docker.io/library/busybox'
+        command:
+        - "rev"
+        - "/input/data.txt"
+        volumeMounts:
+        - mountPath: /input
+          name: input
+      volumes:
+      - name: input
+        emptyDir: {}

From 40a5b3b9a53e34d8cca5b8e05f143629376eefc3 Mon Sep 17 00:00:00 2001
From: santachopa <santachopa@naver.com>
Date: Thu, 4 Mar 2021 10:33:05 +0900
Subject: [PATCH 212/788] Translate
 reference/glossary/persistent-volumn-claim.md in Korean

---
 .../glossary/persistent-volume-claim.md        | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 content/ko/docs/reference/glossary/persistent-volume-claim.md

diff --git a/content/ko/docs/reference/glossary/persistent-volume-claim.md b/content/ko/docs/reference/glossary/persistent-volume-claim.md
new file mode 100644
index 0000000000..122b754d23
--- /dev/null
+++ b/content/ko/docs/reference/glossary/persistent-volume-claim.md
@@ -0,0 +1,18 @@
+---
+title: 퍼시스턴트 볼륨 클레임(Persistent Volume Claim)
+id: persistent-volume-claim
+date: 2018-04-12
+full_link: /ko/docs/concepts/storage/persistent-volumes/
+short_description: >
+  컨테이너의 볼륨으로 마운트될 수 있도록 퍼시스턴트볼륨(PersistentVolume)에 정의된 스토리지 리소스를 요청한다.
+
+aka: 
+tags:
+- core-object
+- storage
+---
+ {{< glossary_tooltip text="컨테이너" term_id="container" >}}의 볼륨으로 마운트될 수 있도록 {{< glossary_tooltip text="퍼시스턴트볼륨(PersistentVolume)" term_id="persistent-volume" >}}에 정의된 스토리지 리소스를 요청한다.
+
+<!--more--> 
+
+스토리지의 양, 스토리지에 엑세스하는 방법(읽기 전용, 읽기 그리고/또는 쓰기) 및 재확보(보존, 재활용 혹은 삭제) 방법을 지정한다. 스토리지 자체에 관한 내용은 퍼시스턴트볼륨 오브젝트에 설명되어 있다. 

From c2df21af41cff7f3ba3f92550faaf6f74864761a Mon Sep 17 00:00:00 2001
From: Xudong Liu <xudongl@vmware.com>
Date: Tue, 16 Mar 2021 17:59:21 -0700
Subject: [PATCH 213/788] add documentation for Service LoadBalancerClass

---
 .../reference/command-line-tools-reference/feature-gates.md     | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 5500c19412..a26a9ebd38 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -160,6 +160,7 @@ different Kubernetes components.
 | `ServerSideApply` | `false` | Alpha | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | Beta | 1.16 | |
 | `ServiceLBNodePortControl` | `false` | Alpha | 1.20 | |
+| `ServiceLoadBalancerClass` | `false` | Alpha | 1.21 | |
 | `ServiceNodeExclusion` | `false` | Alpha | 1.8 | 1.18 |
 | `ServiceNodeExclusion` | `true` | Beta | 1.19 | |
 | `ServiceTopology` | `false` | Alpha | 1.17 | |
@@ -729,6 +730,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints.
 - `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
   field on Services.
+- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.
 - `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers
   created by a cloud provider. A node is eligible for exclusion if labelled with

From b891ef312a38ca83ea997a9655ff8bb0d493339a Mon Sep 17 00:00:00 2001
From: CKchen0726 <chenchangkuan@huawei.com>
Date: Mon, 15 Mar 2021 15:53:16 +0800
Subject: [PATCH 214/788] [zh] fix spelling mistake in
 content/zh/docs/concepts/storage/storage-classes.md

---
 content/zh/docs/concepts/storage/storage-classes.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/storage/storage-classes.md b/content/zh/docs/concepts/storage/storage-classes.md
index 3cffd19a17..57b58006b3 100644
--- a/content/zh/docs/concepts/storage/storage-classes.md
+++ b/content/zh/docs/concepts/storage/storage-classes.md
@@ -225,14 +225,14 @@ mount options specified in the `mountOptions` field of the class.
 
 If the volume plugin does not support mount options but mount options are
 specified, provisioning will fail. Mount options are not validated on either
-the class or PV, so mount of the PV will simply fail if one is invalid.
+the class or PV, If a mount option is invalid, the PV mount fails.
  -->
 ### 挂载选项
 
 由 StorageClass 动态创建的 PersistentVolume 将使用类中 `mountOptions` 字段指定的挂载选项。
 
-如果卷插件不支持挂载选项，却指定了该选项，则制备操作会失败。
-挂载选项在 StorageClass 和 PV 上都不会做验证，所以如果挂载选项无效，那么这个 PV 就会失败。
+如果卷插件不支持挂载选项，却指定了选项，则制备操作会失败。
+挂载选项在 StorageClass 和 PV 上都不会做验证，如果其中一个挂载选项无效，那么这个 PV 挂载就会失败。
 
 <!--
 ### Volume Binding Mode
@@ -1279,7 +1279,7 @@ parameters:
   通常存在的 `default` 池。
 * `description`：指定给动态创建的卷的描述。所有卷描述对于存储类而言都是相同的，
   但不同的 storage class 可以使用不同的描述，以区分不同的使用场景。
-  默认为 `Kubernetas volume`。
+  默认为 `Kubernetes volume`。
 * `fsType`：请求的默认文件系统类型。
   请注意，在 StorageOS 中用户定义的规则可以覆盖此值。默认为 `ext4`
 * `adminSecretNamespace`：API 配置 secret 所在的命名空间。

From 814b9f92cc0515d5b8f0d46535895bb0a0afc5c0 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 8 Mar 2021 17:08:48 +0900
Subject: [PATCH 215/788] [ko] Update outdated files in dev-1.20-ko.6 (p2)

---
 .../ko/docs/concepts/architecture/nodes.md    |   2 +-
 .../concepts/overview/what-is-kubernetes.md   |   2 +-
 .../ingress-controllers.md                    |   2 +-
 .../concepts/services-networking/service.md   |   4 +-
 .../storage/volume-snapshot-classes.md        |   2 +-
 content/ko/docs/concepts/storage/volumes.md   |   2 +-
 .../workloads/controllers/deployment.md       |   4 +-
 .../controllers/replicationcontroller.md      |   2 +-
 .../workloads/controllers/statefulset.md      |   4 +-
 .../concepts/workloads/pods/disruptions.md    |   2 +-
 .../concepts/workloads/pods/pod-lifecycle.md  |   3 +-
 .../feature-gates.md                          |   2 +-
 .../ko/docs/reference/kubectl/cheatsheet.md   |  20 +-
 .../kubectl/docker-cli-to-kubectl.md          |   2 +-
 .../reference/using-api/client-libraries.md   |   3 +-
 .../docs/setup/best-practices/certificates.md |   4 +-
 .../container-runtimes.md                     |  13 +-
 .../production-environment/tools/kops.md      |   2 +-
 .../tools/kubeadm/install-kubeadm.md          |  17 +-
 .../windows/intro-windows-in-kubernetes.md    |   3 +-
 .../administer-cluster/access-cluster-api.md  |  97 +--
 .../change-default-storage-class.md           |   2 +-
 .../define-environment-variable-container.md  |   5 +-
 .../kustomization.md                          |   2 +-
 .../run-application/access-api-from-pod.md    | 111 +++
 .../ko/docs/tasks/tls/certificate-rotation.md |   1 +
 content/ko/docs/tasks/tools/_index.md         |  21 +-
 .../ko/docs/tasks/tools/included/_index.md    |   6 +
 .../tools/included/install-kubectl-gcloud.md  |  21 +
 .../tools/included/kubectl-whats-next.md      |  12 +
 .../optional-kubectl-configs-bash-linux.md    |  54 ++
 .../optional-kubectl-configs-bash-mac.md      |  89 +++
 .../included/optional-kubectl-configs-zsh.md  |  29 +
 .../tasks/tools/included/verify-kubectl.md    |  34 +
 .../docs/tasks/tools/install-kubectl-linux.md | 174 +++++
 .../docs/tasks/tools/install-kubectl-macos.md | 160 +++++
 .../tasks/tools/install-kubectl-windows.md    | 179 +++++
 .../ko/docs/tasks/tools/install-kubectl.md    | 633 ------------------
 content/ko/docs/tutorials/hello-minikube.md   |  16 +
 .../create-cluster/cluster-intro.html         |  10 +-
 .../deploy-app/deploy-intro.html              |   2 +-
 .../ko/docs/tutorials/services/source-ip.md   |   2 +-
 .../stateful-application/cassandra.md         |   2 +-
 .../stateless-application/guestbook.md        |   2 +-
 44 files changed, 967 insertions(+), 792 deletions(-)
 create mode 100644 content/ko/docs/tasks/run-application/access-api-from-pod.md
 create mode 100644 content/ko/docs/tasks/tools/included/_index.md
 create mode 100644 content/ko/docs/tasks/tools/included/install-kubectl-gcloud.md
 create mode 100644 content/ko/docs/tasks/tools/included/kubectl-whats-next.md
 create mode 100644 content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md
 create mode 100644 content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
 create mode 100644 content/ko/docs/tasks/tools/included/optional-kubectl-configs-zsh.md
 create mode 100644 content/ko/docs/tasks/tools/included/verify-kubectl.md
 create mode 100644 content/ko/docs/tasks/tools/install-kubectl-linux.md
 create mode 100644 content/ko/docs/tasks/tools/install-kubectl-macos.md
 create mode 100644 content/ko/docs/tasks/tools/install-kubectl-windows.md
 delete mode 100644 content/ko/docs/tasks/tools/install-kubectl.md

diff --git a/content/ko/docs/concepts/architecture/nodes.md b/content/ko/docs/concepts/architecture/nodes.md
index 2bcdd9faaf..4ad2a7aaaa 100644
--- a/content/ko/docs/concepts/architecture/nodes.md
+++ b/content/ko/docs/concepts/architecture/nodes.md
@@ -57,7 +57,7 @@ kubelet이 노드의 `metadata.name` 필드와 일치하는 API 서버에 등록
 정상적인지 확인한다.
 
 상태 확인을 중지하려면 사용자 또는 {{< glossary_tooltip term_id="controller" text="컨트롤러">}}에서
-노드 오브젝트를 명시적으로 삭제해야한다.
+노드 오브젝트를 명시적으로 삭제해야 한다.
 {{< /note >}}
 
 노드 오브젝트의 이름은 유효한
diff --git a/content/ko/docs/concepts/overview/what-is-kubernetes.md b/content/ko/docs/concepts/overview/what-is-kubernetes.md
index 4086e27cda..344c266d1e 100644
--- a/content/ko/docs/concepts/overview/what-is-kubernetes.md
+++ b/content/ko/docs/concepts/overview/what-is-kubernetes.md
@@ -55,7 +55,7 @@ sitemap:
 
 ## 쿠버네티스가 왜 필요하고 무엇을 할 수 있나 {#why-you-need-kubernetes-and-what-can-it-do}
 
-컨테이너는 애플리케이션을 포장하고 실행하는 좋은 방법이다. 프로덕션 환경에서는 애플리케이션을 실행하는 컨테이너를 관리하고 가동 중지 시간이 없는지 확인해야한다. 예를 들어 컨테이너가 다운되면 다른 컨테이너를 다시 시작해야한다. 이 문제를 시스템에 의해 처리한다면 더 쉽지 않을까?
+컨테이너는 애플리케이션을 포장하고 실행하는 좋은 방법이다. 프로덕션 환경에서는 애플리케이션을 실행하는 컨테이너를 관리하고 가동 중지 시간이 없는지 확인해야 한다. 예를 들어 컨테이너가 다운되면 다른 컨테이너를 다시 시작해야 한다. 이 문제를 시스템에 의해 처리한다면 더 쉽지 않을까?
 
 그것이 쿠버네티스가 필요한 이유이다! 쿠버네티스는 분산 시스템을 탄력적으로 실행하기 위한 프레임 워크를 제공한다. 애플리케이션의 확장과 장애 조치를 처리하고, 배포 패턴 등을 제공한다. 예를 들어, 쿠버네티스는 시스템의 카나리아 배포를 쉽게 관리 할 수 있다.
 
diff --git a/content/ko/docs/concepts/services-networking/ingress-controllers.md b/content/ko/docs/concepts/services-networking/ingress-controllers.md
index 8554d9a87d..41524039f0 100644
--- a/content/ko/docs/concepts/services-networking/ingress-controllers.md
+++ b/content/ko/docs/concepts/services-networking/ingress-controllers.md
@@ -66,7 +66,7 @@ weight: 40
 다양한 인그레스 컨트롤러는 약간 다르게 작동한다.
 
 {{< note >}}
-인그레스 컨트롤러의 설명서를 검토하여 선택 시 주의 사항을 이해해야한다.
+인그레스 컨트롤러의 설명서를 검토하여 선택 시 주의 사항을 이해해야 한다.
 {{< /note >}}
 
 
diff --git a/content/ko/docs/concepts/services-networking/service.md b/content/ko/docs/concepts/services-networking/service.md
index be1f3ecaae..b01a971cff 100644
--- a/content/ko/docs/concepts/services-networking/service.md
+++ b/content/ko/docs/concepts/services-networking/service.md
@@ -311,7 +311,7 @@ IPVS는 트래픽을 백엔드 파드로 밸런싱하기 위한 추가 옵션을
 
 {{< note >}}
 IPVS 모드에서 kube-proxy를 실행하려면, kube-proxy를 시작하기 전에 노드에서 IPVS를
-사용 가능하도록 해야한다.
+사용 가능하도록 해야 한다.
 
 kube-proxy가 IPVS 프록시 모드에서 시작될 때, IPVS 커널 모듈을
 사용할 수 있는지 확인한다. IPVS 커널 모듈이 감지되지 않으면, kube-proxy는
@@ -1120,7 +1120,7 @@ VIP용 유저스페이스 프록시를 사용하면 중소 규모의 스케일
 않아도 된다. 그것은 격리 실패이다.
 
 서비스에 대한 포트 번호를 선택할 수 있도록 하기 위해, 두 개의
-서비스가 충돌하지 않도록 해야한다. 쿠버네티스는 각 서비스에 고유한 IP 주소를
+서비스가 충돌하지 않도록 해야 한다. 쿠버네티스는 각 서비스에 고유한 IP 주소를
 할당하여 이를 수행한다.
 
 각 서비스가 고유한 IP를 받도록 하기 위해, 내부 할당기는
diff --git a/content/ko/docs/concepts/storage/volume-snapshot-classes.md b/content/ko/docs/concepts/storage/volume-snapshot-classes.md
index e5b6002e6e..862c900fee 100644
--- a/content/ko/docs/concepts/storage/volume-snapshot-classes.md
+++ b/content/ko/docs/concepts/storage/volume-snapshot-classes.md
@@ -68,7 +68,7 @@ parameters:
 ### 드라이버
 
 볼륨 스냅샷 클래스에는 볼륨스냅샷의 프로비저닝에 사용되는 CSI 볼륨 플러그인을
-결정하는 드라이버를 가지고 있다. 이 필드는 반드시 지정해야한다.
+결정하는 드라이버를 가지고 있다. 이 필드는 반드시 지정해야 한다.
 
 ### 삭제정책(DeletionPolicy)
 
diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index 7e1646820e..54c3669fad 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -1332,7 +1332,7 @@ CSI 호환 볼륨 드라이버가 쿠버네티스 클러스터에 배포되면
 * `controllerPublishSecretRef`: CSI의 `ControllerPublishVolume`
   그리고 `ControllerUnpublishVolume` 호출을 완료하기 위해 CSI 드라이버에 전달하려는
   민감한 정보가 포함된 시크릿 오브젝트에 대한 참조이다. 이 필드는
-  선택사항이며, 시크릿이 필요하지 않은 경우 비어있을 수 있다. 만약 시크릿에
+  선택 사항이며, 시크릿이 필요하지 않은 경우 비어있을 수 있다. 만약 시크릿에
   둘 이상의 시크릿이 포함된 경우에도 모든 시크릿이 전달된다.
 * `nodeStageSecretRef`: CSI의 `NodeStageVolume` 호출을 완료하기위해
   CSI 드라이버에 전달하려는 민감한 정보가 포함 된 시크릿
diff --git a/content/ko/docs/concepts/workloads/controllers/deployment.md b/content/ko/docs/concepts/workloads/controllers/deployment.md
index 1407bb28f0..f6b9979d47 100644
--- a/content/ko/docs/concepts/workloads/controllers/deployment.md
+++ b/content/ko/docs/concepts/workloads/controllers/deployment.md
@@ -341,7 +341,7 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
 API 버전 `apps/v1` 에서 디플로이먼트의 레이블 셀렉터는 생성 이후에는 변경할 수 없다.
 {{< /note >}}
 
-* 셀렉터 추가 시 디플로이먼트의 사양에 있는 파드 템플릿 레이블도 새 레이블로 업데이트 해야한다.
+* 셀렉터 추가 시 디플로이먼트의 사양에 있는 파드 템플릿 레이블도 새 레이블로 업데이트해야 한다.
 그렇지 않으면 유효성 검사 오류가 반환된다. 이 변경은 겹치지 않는 변경으로 새 셀렉터가
 이전 셀렉터로 만든 레플리카셋과 파드를 선택하지 않게 되고, 그 결과로 모든 기존 레플리카셋은 고아가 되며,
 새로운 레플리카셋을 생성하게 된다.
@@ -1060,7 +1060,7 @@ echo $?
 이것은 {{< glossary_tooltip text="파드" term_id="pod" >}}와 정확하게 동일한 스키마를 가지고 있고, 중첩된 것을 제외하면 `apiVersion` 과 `kind` 를 가지고 있지 않는다.
 
 파드에 필요한 필드 외에 디플로이먼트 파드 템플릿은 적절한 레이블과 적절한 재시작 정책을 명시해야 한다.
-레이블의 경우 다른 컨트롤러와 겹치지 않도록 해야한다. 자세한 것은 [셀렉터](#셀렉터)를 참조한다.
+레이블의 경우 다른 컨트롤러와 겹치지 않도록 해야 한다. 자세한 것은 [셀렉터](#셀렉터)를 참조한다.
 
 [`.spec.template.spec.restartPolicy`](/ko/docs/concepts/workloads/pods/pod-lifecycle/#재시작-정책) 에는 오직 `Always` 만 허용되고,
 명시되지 않으면 기본값이 된다.
diff --git a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
index ff48730a13..06ce543012 100644
--- a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -49,7 +49,7 @@ kubectl 명령에서 숏컷으로 사용된다.
 
 {{< codenew file="controllers/replication.yaml" >}}
 
-예제 파일을 다운로드 한 후 다음 명령을 실행하여 예제 작업을 실행하라.
+예제 파일을 다운로드한 후 다음 명령을 실행하여 예제 작업을 실행하라.
 
 ```shell
 kubectl apply -f https://k8s.io/examples/controllers/replication.yaml
diff --git a/content/ko/docs/concepts/workloads/controllers/statefulset.md b/content/ko/docs/concepts/workloads/controllers/statefulset.md
index 6b8299a0c3..3a1f784259 100644
--- a/content/ko/docs/concepts/workloads/controllers/statefulset.md
+++ b/content/ko/docs/concepts/workloads/controllers/statefulset.md
@@ -107,7 +107,7 @@ spec:
 
 ## 파드 셀렉터
 
-스테이트풀셋의 `.spec.selector` 필드는 `.spec.template.metadata.labels` 레이블과 일치하도록 설정 해야 한다. 쿠버네티스 1.8 이전에서는 생략시에 `.spec.selector` 필드가 기본 설정 되었다. 1.8 과 이후 버전에서는 파드 셀렉터를 명시하지 않으면 스테이트풀셋 생성시 유효성 검증 오류가 발생하는 결과가 나오게 된다.
+스테이트풀셋의 `.spec.selector` 필드는 `.spec.template.metadata.labels` 레이블과 일치하도록 설정해야 한다. 쿠버네티스 1.8 이전에서는 생략시에 `.spec.selector` 필드가 기본 설정 되었다. 1.8 과 이후 버전에서는 파드 셀렉터를 명시하지 않으면 스테이트풀셋 생성시 유효성 검증 오류가 발생하는 결과가 나오게 된다.
 
 ## 파드 신원
 
@@ -173,7 +173,7 @@ N개의 레플리카가 있는 스테이트풀셋은 스테이트풀셋에 있
 파드의 `volumeMounts` 는 퍼시스턴트 볼륨 클레임과 관련된 퍼시스턴트 볼륨이 마운트 된다.
 참고로, 파드 퍼시스턴트 볼륨 클레임과 관련된 퍼시스턴트 볼륨은
 파드 또는 스테이트풀셋이 삭제되더라도 삭제되지 않는다.
-이것은 반드시 수동으로 해야한다.
+이것은 반드시 수동으로 해야 한다.
 
 ### 파드 이름 레이블
 
diff --git a/content/ko/docs/concepts/workloads/pods/disruptions.md b/content/ko/docs/concepts/workloads/pods/disruptions.md
index 02647adb70..bcfde559cb 100644
--- a/content/ko/docs/concepts/workloads/pods/disruptions.md
+++ b/content/ko/docs/concepts/workloads/pods/disruptions.md
@@ -103,7 +103,7 @@ PDB는 자발적 중단으로
 일정 비율 이하로 떨어지지 않도록 보장할 수 있다.
 
 클러스터 관리자와 호스팅 공급자는 직접적으로 파드나 디플로이먼트를 제거하는 대신
-[Eviction API](/docs/tasks/administer-cluster/safely-drain-node/#the-eviction-api)로
+[Eviction API](/docs/tasks/administer-cluster/safely-drain-node/#eviction-api)로
 불리는 PodDisruptionBudget을 준수하는 도구를 이용해야 한다.
 
 예를 들어, `kubectl drain` 하위 명령을 사용하면 노드를 서비스 중단으로 표시할 수
diff --git a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
index 1066e3eb83..aa154a4b42 100644
--- a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -38,8 +38,7 @@ ID([UID](/ko/docs/concepts/overview/working-with-objects/names/#uids))가
 타임아웃 기간 후에 [삭제되도록 스케줄된다](#pod-garbage-collection).
 
 파드는 자체적으로 자가 치유되지 않는다. 파드가
-{{< glossary_tooltip text="노드" term_id="node" >}}에 스케줄된 후에 실패하거나,
-스케줄 작업 자체가 실패하면, 파드는 삭제된다. 마찬가지로, 파드는
+{{< glossary_tooltip text="노드" term_id="node" >}}에 스케줄된 후에 해당 노드가 실패하면, 파드는 삭제된다. 마찬가지로, 파드는
 리소스 부족 또는 노드 유지 관리 작업으로 인해 축출되지 않는다. 쿠버네티스는
 {{< glossary_tooltip term_id="controller" text="컨트롤러" >}}라
 부르는 하이-레벨 추상화를 사용하여
diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index cece4022ef..93683ae9b1 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -351,7 +351,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `VolumeScheduling` | `false` | 알파 | 1.9 | 1.9 |
 | `VolumeScheduling` | `true` | 베타 | 1.10 | 1.12 |
 | `VolumeScheduling` | `true` | GA | 1.13 | - |
-| `VolumeSubpath` | `true` | GA | 1.13 | - |
+| `VolumeSubpath` | `true` | GA | 1.10 | - |
 | `VolumeSubpathEnvExpansion` | `false` | 알파 | 1.14 | 1.14 |
 | `VolumeSubpathEnvExpansion` | `true` | 베타 | 1.15 | 1.16 |
 | `VolumeSubpathEnvExpansion` | `true` | GA | 1.17 | - |
diff --git a/content/ko/docs/reference/kubectl/cheatsheet.md b/content/ko/docs/reference/kubectl/cheatsheet.md
index 0020d7b574..d5870bba30 100644
--- a/content/ko/docs/reference/kubectl/cheatsheet.md
+++ b/content/ko/docs/reference/kubectl/cheatsheet.md
@@ -293,12 +293,12 @@ kubectl get pods  -n mynamespace --no-headers=true | awk '/pattern1|pattern2/{pr
 ## 실행 중인 파드와 상호 작용
 
 ```bash
-kubectl logs my-pod                                 # 파드 로그(stdout) 덤프
+kubectl logs my-pod                                 # 파드 로그 덤프 (stdout)
 kubectl logs -l name=myLabel                        # name이 myLabel인 파드 로그 덤프 (stdout)
-kubectl logs my-pod --previous                      # 컨테이너의 이전 인스턴스 생성에 대한 파드 로그(stdout) 덤프
-kubectl logs my-pod -c my-container                 # 파드 로그(stdout, 멀티-컨테이너 경우) 덤프
+kubectl logs my-pod --previous                      # 컨테이너의 이전 인스턴스 생성에 대한 파드 로그 덤프 (stdout)
+kubectl logs my-pod -c my-container                 # 파드 로그 덤프 (stdout, 멀티-컨테이너 경우)
 kubectl logs -l name=myLabel -c my-container        # name이 myLabel인 파드 로그 덤프 (stdout)
-kubectl logs my-pod -c my-container --previous      # 컨테이너의 이전 인스턴스 생성에 대한 파드 로그(stdout, 멀티-컨테이너 경우) 덤프
+kubectl logs my-pod -c my-container --previous      # 컨테이너의 이전 인스턴스 생성에 대한 파드 로그 덤프 (stdout, 멀티-컨테이너 경우)
 kubectl logs -f my-pod                              # 실시간 스트림 파드 로그(stdout)
 kubectl logs -f my-pod -c my-container              # 실시간 스트림 파드 로그(stdout, 멀티-컨테이너 경우)
 kubectl logs -f -l name=myLabel --all-containers    # name이 myLabel인 모든 파드의 로그 스트리밍 (stdout)
@@ -317,6 +317,18 @@ kubectl top pod POD_NAME --containers               # 특정 파드와 해당 
 kubectl top pod POD_NAME --sort-by=cpu              # 지정한 파드에 대한 메트릭을 표시하고 'cpu' 또는 'memory'별로 정렬
 ```
 
+## 디플로이먼트, 서비스와 상호 작용
+```bash
+kubectl logs deploy/my-deployment                         # 디플로이먼트에 대한 파드 로그 덤프 (단일-컨테이너 경우)
+kubectl logs deploy/my-deployment -c my-container         # 디플로이먼트에 대한 파드 로그 덤프 (멀티-컨테이너 경우)
+
+kubectl port-forward svc/my-service 5000                  # 로컬 머신의 5000번 포트를 리스닝하고, my-service의 동일한(5000번) 포트로 전달
+kubectl port-forward svc/my-service 5000:my-service-port  # 로컬 머신의 5000번 포트를 리스닝하고, my-service의 <my-service-port> 라는 이름을 가진 포트로 전달
+
+kubectl port-forward deploy/my-deployment 5000:6000       # 로컬 머신의 5000번 포트를 리스닝하고, <my-deployment> 에 의해 생성된 파드의 6000번 포트로 전달
+kubectl exec deploy/my-deployment -- ls                   # <my-deployment> 에 의해 생성된 첫번째 파드의 첫번째 컨테이너에 명령어 실행 (단일- 또는 다중-컨테이너 경우)
+```
+
 ## 노드, 클러스터와 상호 작용
 
 ```bash
diff --git a/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md b/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md
index 1679059871..12b41b1d98 100644
--- a/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md
+++ b/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md
@@ -7,7 +7,7 @@ content_type: concept
 ---
 
 <!-- overview -->
-당신은 쿠버네티스 커맨드 라인 도구인 kubectl을 사용하여 API 서버와 상호 작용할 수 있다. 만약 도커 커맨드 라인 도구에 익숙하다면 kubectl을 사용하는 것은 간단하다. 다음 섹션에서는 도커의 하위 명령을 보여주고 kubectl과 같은 명령어를 설명한다.
+당신은 쿠버네티스 커맨드 라인 도구인 `kubectl`을 사용하여 API 서버와 상호 작용할 수 있다. 만약 도커 커맨드 라인 도구에 익숙하다면 `kubectl`을 사용하는 것은 간단하다. 다음 섹션에서는 도커의 하위 명령을 보여주고 `kubectl`과 같은 명령어를 설명한다.
 
 
 <!-- body -->
diff --git a/content/ko/docs/reference/using-api/client-libraries.md b/content/ko/docs/reference/using-api/client-libraries.md
index ae0404239d..f8c1cb91c8 100644
--- a/content/ko/docs/reference/using-api/client-libraries.md
+++ b/content/ko/docs/reference/using-api/client-libraries.md
@@ -65,12 +65,13 @@ API 호출 또는 요청/응답 타입을 직접 구현할 필요는 없다.
 | Python               | [github.com/fiaas/k8s](https://github.com/fiaas/k8s) |
 | Python               | [github.com/mnubo/kubernetes-py](https://github.com/mnubo/kubernetes-py) |
 | Python               | [github.com/tomplus/kubernetes_asyncio](https://github.com/tomplus/kubernetes_asyncio) |
+| Python               | [github.com/Frankkkkk/pykorm](https://github.com/Frankkkkk/pykorm) |
 | Ruby                 | [github.com/abonas/kubeclient](https://github.com/abonas/kubeclient) |
 | Ruby                 | [github.com/Ch00k/kuber](https://github.com/Ch00k/kuber) |
 | Ruby                 | [github.com/kontena/k8s-client](https://github.com/kontena/k8s-client) |
 | Rust                 | [github.com/clux/kube-rs](https://github.com/clux/kube-rs) |
 | Rust                 | [github.com/ynqa/kubernetes-rust](https://github.com/ynqa/kubernetes-rust) |
-| Scala                | [github.com/doriordan/skuber](https://github.com/doriordan/skuber) |
+| Scala                | [github.com/hagay3/skuber](https://github.com/hagay3/skuber) |
 | Scala                | [github.com/joan38/kubernetes-client](https://github.com/joan38/kubernetes-client) |
 | DotNet               | [github.com/tonnyeremin/kubernetes_gen](https://github.com/tonnyeremin/kubernetes_gen) |
 | Swift                | [github.com/swiftkube/client](https://github.com/swiftkube/client) |
diff --git a/content/ko/docs/setup/best-practices/certificates.md b/content/ko/docs/setup/best-practices/certificates.md
index 5595e0ac3d..3ada64a469 100644
--- a/content/ko/docs/setup/best-practices/certificates.md
+++ b/content/ko/docs/setup/best-practices/certificates.md
@@ -155,5 +155,5 @@ KUBECONFIG=<filename> kubectl config use-context default-system
 |-------------------------|-------------------------|-----------------------------------------------------------------------|
 | admin.conf              | kubectl                 | 클러스터 관리자를 설정한다.                                              |
 | kubelet.conf            | kubelet                 | 클러스터 각 노드를 위해 필요하다.                            |
-| controller-manager.conf | kube-controller-manager | 반드시 매니페스트를 `manifests/kube-controller-manager.yaml`에 추가해야한다. |
-| scheduler.conf          | kube-scheduler          | 반드시 매니페스트를 `manifests/kube-scheduler.yaml`에 추가해야한다.          |
+| controller-manager.conf | kube-controller-manager | 반드시 매니페스트를 `manifests/kube-controller-manager.yaml`에 추가해야 한다. |
+| scheduler.conf          | kube-scheduler          | 반드시 매니페스트를 `manifests/kube-scheduler.yaml`에 추가해야 한다.          |
diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index 42c8bd8095..827b407b84 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -219,11 +219,16 @@ sudo systemctl restart containerd
 ```
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}
+
+<br />
+Powershell 세션을 띄우고, `$Version` 환경 변수를 원하는 버전으로 설정(예: `$Version=1.4.3`)한 뒤, 다음 명령어를 실행한다.
+<br />
+
 ```powershell
 # (containerd 설치)
 # containerd 다운로드
-cmd /c curl -OL https://github.com/containerd/containerd/releases/download/v1.4.1/containerd-1.4.1-windows-amd64.tar.gz
-cmd /c tar xvf .\containerd-1.4.1-windows-amd64.tar.gz
+curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.gz
+tar.exe xvf .\containerd-windows-amd64.tar.gz
 ```
 
 ```powershell
@@ -236,7 +241,9 @@ cd $Env:ProgramFiles\containerd\
 # - sandbox_image (쿠버네티스 pause 이미지)
 # - cni bin_dir 및 conf_dir locations
 Get-Content config.toml
-```
+
+# (선택 사항이지만, 강력히 권장됨) containerd를 Windows Defender 검사 예외에 추가
+Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe" ```
 
 ```powershell
 # containerd 시작
diff --git a/content/ko/docs/setup/production-environment/tools/kops.md b/content/ko/docs/setup/production-environment/tools/kops.md
index 05fc21f32a..dbea03b735 100644
--- a/content/ko/docs/setup/production-environment/tools/kops.md
+++ b/content/ko/docs/setup/production-environment/tools/kops.md
@@ -39,7 +39,7 @@ kops는 자동화된 프로비저닝 시스템인데,
 
 #### 설치
 
-[releases page](https://github.com/kubernetes/kops/releases)에서 kops를 다운로드 한다(소스 코드로부터 빌드하는 것도 역시 편리하다).
+[releases page](https://github.com/kubernetes/kops/releases)에서 kops를 다운로드한다(소스 코드로부터 빌드하는 것도 역시 편리하다).
 
 {{< tabs name="kops_installation" >}}
 {{% tab name="macOS" %}}
diff --git a/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 9e28b5b509..39f31dd8af 100644
--- a/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -18,14 +18,7 @@ card:
 ## {{% heading "prerequisites" %}}
 
 
-* 다음 중 하나를 실행하는 하나 이상의 머신이 필요하다.
-  - Ubuntu 16.04+
-  - Debian 9+
-  - CentOS 7+
-  - Red Hat Enterprise Linux (RHEL) 7+
-  - Fedora 25+
-  - HypriotOS v1.0.1+
-  - Flatcar Container Linux (2512.3.0으로 테스트됨)
+* 호환되는 리눅스 머신. 쿠버네티스 프로젝트는 데비안 기반 배포판, 레드햇 기반 배포판, 그리고 패키지 매니저를 사용하지 않는 경우에 대한 일반적인 가이드를 제공한다.
 * 2 GB 이상의 램을 장착한 머신. (이 보다 작으면 사용자의 앱을 위한 공간이 거의 남지 않음)
 * 2 이상의 CPU.
 * 클러스터의 모든 머신에 걸친 전체 네트워크 연결. (공용 또는 사설 네트워크면 괜찮음)
@@ -121,7 +114,7 @@ etcd 포트가 컨트롤 플레인 노드에 포함되어 있지만, 외부 또
 {{< table caption = "컨테이너 런타임과 소켓 경로" >}}
 | 런타임       | 유닉스 도메인 소켓 경로                |
 |------------|-----------------------------------|
-| 도커        | `/var/run/docker.sock`            |
+| 도커        | `/var/run/dockershim.sock`            |
 | containerd | `/run/containerd/containerd.sock` |
 | CRI-O      | `/var/run/crio/crio.sock`         |
 {{< /table >}}
@@ -180,7 +173,7 @@ kubeadm은 `kubelet` 또는 `kubectl` 을 설치하거나 관리하지 **않으
 * Kubeadm 관련 [버전 차이 정책](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#version-skew-policy)
 
 {{< tabs name="k8s_install" >}}
-{{% tab name="Ubuntu, Debian 또는 HypriotOS" %}}
+{{% tab name="데비안 기반 배포판" %}}
 ```bash
 sudo apt-get update && sudo apt-get install -y apt-transport-https curl
 curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
@@ -192,7 +185,7 @@ sudo apt-get install -y kubelet kubeadm kubectl
 sudo apt-mark hold kubelet kubeadm kubectl
 ```
 {{% /tab %}}
-{{% tab name="CentOS, RHEL 또는 Fedora" %}}
+{{% tab name="레드햇 기반 배포판" %}}
 ```bash
 cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
 [kubernetes]
@@ -223,7 +216,7 @@ sudo systemctl enable --now kubelet
   - 구성 방법을 알고 있는 경우 SELinux를 활성화된 상태로 둘 수 있지만 kubeadm에서 지원하지 않는 설정이 필요할 수 있다.
 
 {{% /tab %}}
-{{% tab name="Fedora CoreOS 또는 Flatcar Container Linux" %}}
+{{% tab name="패키지 매니저를 사용하지 않는 경우" %}}
 CNI 플러그인 설치(대부분의 파드 네트워크에 필요)
 
 ```bash
diff --git a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 67283774af..bd4a3503e8 100644
--- a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -303,8 +303,9 @@ CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템
 다음 네트워킹 기능은 윈도우 노드에서 지원되지 않는다.
 
 * 윈도우 파드에서는 호스트 네트워킹 모드를 사용할 수 없다.
-* 노드 자체에서 로컬 NodePort 접근은 실패한다. (다른 노드 또는 외부 클라이언트에서 작동)
+* 노드 자체에서 로컬 NodePort 접근은 실패한다. (다른 노드 또는 외부 클라이언트에서는 가능)
 * 노드에서 서비스 VIP에 접근하는 것은 향후 윈도우 서버 릴리스에서 사용할 수 있다.
+* 한 서비스는 최대 64개의 백엔드 파드 또는 고유한 목적지 IP를 지원할 수 있다.
 * kube-proxy의 오버레이 네트워킹 지원은 알파 릴리스이다. 또한 윈도우 서버 2019에 [KB4482887](https://support.microsoft.com/ko-kr/help/4482887/windows-10-update-kb4482887)을 설치해야 한다.
 * 로컬 트래픽 정책 및 DSR 모드
 * l2bridge, l2tunnel 또는 오버레이 네트워크에 연결된 윈도우 컨테이너는 IPv6 스택을 통한 통신을 지원하지 않는다. 이러한 네트워크 드라이버가 IPv6 주소를 사용하고 kubelet, kube-proxy 및 CNI 플러그인에서 후속 쿠버네티스 작업을 사용할 수 있도록 하는데 필요한 뛰어난 윈도우 플랫폼 작업이 있다.
diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
index d6e567e674..b2ea227718 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
@@ -353,99 +353,6 @@ exampleWithKubeConfig = do
         >>= print
 ```
 
+## {{% heading "whatsnext" %}}
 
-### 파드 내에서 API에 접근 {#accessing-the-api-from-within-a-pod}
-
-파드 내에서 API에 접근할 때, API 서버를 찾아 인증하는 것은
-위에서 설명한 외부 클라이언트 사례와 약간 다르다.
-
-파드에서 쿠버네티스 API를 사용하는 가장 쉬운 방법은
-공식 [클라이언트 라이브러리](/ko/docs/reference/using-api/client-libraries/) 중 하나를 사용하는 것이다. 이러한
-라이브러리는 API 서버를 자동으로 감지하고 인증할 수 있다.
-
-#### 공식 클라이언트 라이브러리 사용
-
-파드 내에서, 쿠버네티스 API에 연결하는 권장 방법은 다음과 같다.
-
-  - Go 클라이언트의 경우, 공식 [Go 클라이언트 라이브러리](https://github.com/kubernetes/client-go/)를 사용한다.
-    `rest.InClusterConfig()` 기능은 API 호스트 검색과 인증을 자동으로 처리한다.
-    [여기 예제](https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go)를 참고한다.
-
-  - Python 클라이언트의 경우, 공식 [Python 클라이언트 라이브러리](https://github.com/kubernetes-client/python/)를 사용한다.
-    `config.load_incluster_config()` 기능은 API 호스트 검색과 인증을 자동으로 처리한다.
-    [여기 예제](https://github.com/kubernetes-client/python/blob/master/examples/in_cluster_config.py)를 참고한다.
-
-  - 사용할 수 있는 다른 라이브러리가 많이 있다. [클라이언트 라이브러리](/ko/docs/reference/using-api/client-libraries/) 페이지를 참고한다.
-
-각각의 경우, 파드의 서비스 어카운트 자격 증명은 API 서버와
-안전하게 통신하는 데 사용된다.
-
-#### REST API에 직접 접근
-
-파드에서 실행되는 동안, 쿠버네티스 apiserver는 `default` 네임스페이스에서 `kubernetes`라는
-서비스를 통해 접근할 수 있다. 따라서, 파드는 `kubernetes.default.svc`
-호스트 이름을 사용하여 API 서버를 쿼리할 수 있다. 공식 클라이언트 라이브러리는
-이를 자동으로 수행한다.
-
-API 서버를 인증하는 권장 방법은 [서비스 어카운트](/docs/tasks/configure-pod-container/configure-service-account/)
-자격 증명을 사용하는 것이다. 기본적으로, 파드는
-서비스 어카운트와 연결되어 있으며, 해당 서비스 어카운트에 대한 자격 증명(토큰)은
-해당 파드에 있는 각 컨테이너의 파일시스템 트리의
-`/var/run/secrets/kubernetes.io/serviceaccount/token` 에 있다.
-
-사용 가능한 경우, 인증서 번들은 각 컨테이너의
-파일시스템 트리의 `/var/run/secrets/kubernetes.io/serviceaccount/ca.crt` 에 배치되며,
-API 서버의 제공 인증서를 확인하는 데 사용해야 한다.
-
-마지막으로, 네임스페이스가 지정된 API 작업에 사용되는 기본 네임스페이스는 각 컨테이너의
-`/var/run/secrets/kubernetes.io/serviceaccount/namespace` 에 있는 파일에 배치된다.
-
-#### kubectl 프록시 사용
-
-공식 클라이언트 라이브러리 없이 API를 쿼리하려면, 파드에서
-새 사이드카 컨테이너의 [명령](/ko/docs/tasks/inject-data-application/define-command-argument-container/)으로
-`kubectl proxy` 를 실행할 수 있다. 이런 식으로, `kubectl proxy` 는
-API를 인증하고 이를 파드의 `localhost` 인터페이스에 노출시켜서, 파드의
-다른 컨테이너가 직접 사용할 수 있도록 한다.
-
-#### 프록시를 사용하지 않고 접근
-
-인증 토큰을 API 서버에 직접 전달하여 kubectl 프록시 사용을
-피할 수 있다. 내부 인증서는 연결을 보호한다.
-
-```shell
-# 내부 API 서버 호스트 이름을 가리킨다
-APISERVER=https://kubernetes.default.svc
-
-# ServiceAccount 토큰 경로
-SERVICEACCOUNT=/var/run/secrets/kubernetes.io/serviceaccount
-
-# 이 파드의 네임스페이스를 읽는다
-NAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)
-
-# ServiceAccount 베어러 토큰을 읽는다
-TOKEN=$(cat ${SERVICEACCOUNT}/token)
-
-# 내부 인증 기관(CA)을 참조한다
-CACERT=${SERVICEACCOUNT}/ca.crt
-
-# TOKEN으로 API를 탐색한다
-curl --cacert ${CACERT} --header "Authorization: Bearer ${TOKEN}" -X GET ${APISERVER}/api
-```
-
-출력은 다음과 비슷하다.
-
-```json
-{
-  "kind": "APIVersions",
-  "versions": [
-    "v1"
-  ],
-  "serverAddressByClientCIDRs": [
-    {
-      "clientCIDR": "0.0.0.0/0",
-      "serverAddress": "10.0.1.149:443"
-    }
-  ]
-}
-```
+* [파드 내에서 쿠버네티스 API에 접근](/ko/docs/tasks/run-application/access-api-from-pod/)
diff --git a/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md b/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md
index 08c2e2cef4..ff6379ee1f 100644
--- a/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md
+++ b/content/ko/docs/tasks/administer-cluster/change-default-storage-class.md
@@ -70,7 +70,7 @@ content_type: task
 
 1. 스토리지클래스를 기본값으로 표시한다.
 
-      이전 과정과 유사하게, 어노테이션을 추가/설정 해야 한다.
+      이전 과정과 유사하게, 어노테이션을 추가/설정해야 한다.
       `storageclass.kubernetes.io/is-default-class=true`.
 
       ```bash
diff --git a/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md b/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md
index 22372813e9..5e23ba831e 100644
--- a/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md
+++ b/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md
@@ -70,8 +70,9 @@ weight: 20
 {{< /note >}}
 
 {{< note >}}
-환경 변수는 서로를 참조할 수 있으며 사이클이 가능하다.
-사용하기 전에 순서에 주의한다.
+환경 변수는 서로를 참조할 수 있는데, 이 때 순서에 주의해야 한다.
+동일한 컨텍스트에서 정의된 다른 변수를 참조하는 변수는 목록의 뒤쪽에 나와야 한다.
+또한, 순환 참조는 피해야 한다.
 {{< /note >}}
 
 ## 설정 안에서 환경 변수 사용하기
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
index c9ed347c56..16b2cd05f0 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -7,7 +7,7 @@ weight: 20
 <!-- overview -->
 
 [Kustomize](https://github.com/kubernetes-sigs/kustomize)는
-[kustomization 파일](https://kubernetes-sigs.github.io/kustomize/api-reference/glossary/#kustomization)을
+[kustomization 파일](https://kubectl.docs.kubernetes.io/references/kustomize/glossary/#kustomization)을
 통해 쿠버네티스 오브젝트를 사용자가 원하는 대로 변경하는(customize) 독립형 도구이다.
 
 1.14 이후로, kubectl도
diff --git a/content/ko/docs/tasks/run-application/access-api-from-pod.md b/content/ko/docs/tasks/run-application/access-api-from-pod.md
new file mode 100644
index 0000000000..d12f3b2f00
--- /dev/null
+++ b/content/ko/docs/tasks/run-application/access-api-from-pod.md
@@ -0,0 +1,111 @@
+---
+title: 파드 내에서 쿠버네티스 API에 접근
+content_type: task
+weight: 120
+---
+
+<!-- overview -->
+
+이 페이지는 파드 내에서 쿠버네티스 API에 접근하는 방법을 보여준다.
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+## 파드 내에서 API에 접근 {#accessing-the-api-from-within-a-pod}
+
+파드 내에서 API에 접근할 때, API 서버를 찾아 인증하는 것은
+위에서 설명한 외부 클라이언트 사례와 약간 다르다.
+
+파드에서 쿠버네티스 API를 사용하는 가장 쉬운 방법은
+공식 [클라이언트 라이브러리](/ko/docs/reference/using-api/client-libraries/) 중 하나를 사용하는 것이다. 이러한
+라이브러리는 API 서버를 자동으로 감지하고 인증할 수 있다.
+
+### 공식 클라이언트 라이브러리 사용
+
+파드 내에서, 쿠버네티스 API에 연결하는 권장 방법은 다음과 같다.
+
+  - Go 클라이언트의 경우, 공식 [Go 클라이언트 라이브러리](https://github.com/kubernetes/client-go/)를 사용한다.
+    `rest.InClusterConfig()` 기능은 API 호스트 검색과 인증을 자동으로 처리한다.
+    [여기 예제](https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go)를 참고한다.
+
+  - Python 클라이언트의 경우, 공식 [Python 클라이언트 라이브러리](https://github.com/kubernetes-client/python/)를 사용한다.
+    `config.load_incluster_config()` 기능은 API 호스트 검색과 인증을 자동으로 처리한다.
+    [여기 예제](https://github.com/kubernetes-client/python/blob/master/examples/in_cluster_config.py)를 참고한다.
+
+  - 사용할 수 있는 다른 라이브러리가 많이 있다. [클라이언트 라이브러리](/ko/docs/reference/using-api/client-libraries/) 페이지를 참고한다.
+
+각각의 경우, 파드의 서비스 어카운트 자격 증명은 API 서버와
+안전하게 통신하는 데 사용된다.
+
+### REST API에 직접 접근
+
+파드에서 실행되는 동안, 쿠버네티스 apiserver는 `default` 네임스페이스에서 `kubernetes`라는
+서비스를 통해 접근할 수 있다. 따라서, 파드는 `kubernetes.default.svc`
+호스트 이름을 사용하여 API 서버를 쿼리할 수 있다. 공식 클라이언트 라이브러리는
+이를 자동으로 수행한다.
+
+API 서버를 인증하는 권장 방법은 [서비스 어카운트](/docs/tasks/configure-pod-container/configure-service-account/)
+자격 증명을 사용하는 것이다. 기본적으로, 파드는
+서비스 어카운트와 연결되어 있으며, 해당 서비스 어카운트에 대한 자격 증명(토큰)은
+해당 파드에 있는 각 컨테이너의 파일시스템 트리의
+`/var/run/secrets/kubernetes.io/serviceaccount/token` 에 있다.
+
+사용 가능한 경우, 인증서 번들은 각 컨테이너의
+파일시스템 트리의 `/var/run/secrets/kubernetes.io/serviceaccount/ca.crt` 에 배치되며,
+API 서버의 제공 인증서를 확인하는 데 사용해야 한다.
+
+마지막으로, 네임스페이스가 지정된 API 작업에 사용되는 기본 네임스페이스는 각 컨테이너의
+`/var/run/secrets/kubernetes.io/serviceaccount/namespace` 에 있는 파일에 배치된다.
+
+### kubectl 프록시 사용
+
+공식 클라이언트 라이브러리 없이 API를 쿼리하려면, 파드에서
+새 사이드카 컨테이너의 [명령](/ko/docs/tasks/inject-data-application/define-command-argument-container/)으로
+`kubectl proxy` 를 실행할 수 있다. 이런 식으로, `kubectl proxy` 는
+API를 인증하고 이를 파드의 `localhost` 인터페이스에 노출시켜서, 파드의
+다른 컨테이너가 직접 사용할 수 있도록 한다.
+
+### 프록시를 사용하지 않고 접근
+
+인증 토큰을 API 서버에 직접 전달하여 kubectl 프록시 사용을
+피할 수 있다. 내부 인증서는 연결을 보호한다.
+
+```shell
+# 내부 API 서버 호스트 이름을 가리킨다
+APISERVER=https://kubernetes.default.svc
+
+# 서비스어카운트(ServiceAccount) 토큰 경로
+SERVICEACCOUNT=/var/run/secrets/kubernetes.io/serviceaccount
+
+# 이 파드의 네임스페이스를 읽는다
+NAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)
+
+# 서비스어카운트 베어러 토큰을 읽는다
+TOKEN=$(cat ${SERVICEACCOUNT}/token)
+
+# 내부 인증 기관(CA)을 참조한다
+CACERT=${SERVICEACCOUNT}/ca.crt
+
+# TOKEN으로 API를 탐색한다
+curl --cacert ${CACERT} --header "Authorization: Bearer ${TOKEN}" -X GET ${APISERVER}/api
+```
+
+출력은 다음과 비슷하다.
+
+```json
+{
+  "kind": "APIVersions",
+  "versions": [
+    "v1"
+  ],
+  "serverAddressByClientCIDRs": [
+    {
+      "clientCIDR": "0.0.0.0/0",
+      "serverAddress": "10.0.1.149:443"
+    }
+  ]
+}
+```
diff --git a/content/ko/docs/tasks/tls/certificate-rotation.md b/content/ko/docs/tasks/tls/certificate-rotation.md
index b23bf2a600..037f99d87a 100644
--- a/content/ko/docs/tasks/tls/certificate-rotation.md
+++ b/content/ko/docs/tasks/tls/certificate-rotation.md
@@ -70,6 +70,7 @@ kubelet은 쿠버네티스 API로 서명된 인증서를 가져와서
 
 서명된 인증서의 만료가 다가오면 kubelet은 쿠버네티스 API를 사용하여
 새로운 인증서 서명 요청을 자동으로 발행한다.
+이는 인증서 유효 기간이 30%-10% 남은 시점에 언제든지 실행될 수 있다.
 또한, 컨트롤러 관리자는 인증서 요청을 자동으로 승인하고
 서명된 인증서를 인증서 서명 요청에 첨부한다.
 kubelet은 쿠버네티스 API로 서명된 새로운 인증서를 가져와서 디스크에 쓴다.
diff --git a/content/ko/docs/tasks/tools/_index.md b/content/ko/docs/tasks/tools/_index.md
index 74abf8d981..47c90ec7fd 100755
--- a/content/ko/docs/tasks/tools/_index.md
+++ b/content/ko/docs/tasks/tools/_index.md
@@ -7,18 +7,19 @@ no_list: true
 
 ## kubectl
 
-쿠버네티스 커맨드 라인 도구인 `kubectl` 사용하면 쿠버네티스 클러스터에 대해 명령을
-실행할 수 있다. `kubectl` 을 사용하여 애플리케이션을 배포하고, 클러스터 리소스를 검사 및
-관리하고, 로그를 볼 수 있다.
+<!-- overview -->
+쿠버네티스 커맨드 라인 도구인 [`kubectl`](/ko/docs/reference/kubectl/kubectl/)을 사용하면 
+쿠버네티스 클러스터에 대해 명령을 실행할 수 있다. 
+`kubectl` 을 사용하여 애플리케이션을 배포하고, 클러스터 리소스를 검사 및 관리하고, 
+로그를 볼 수 있다. kubectl 전체 명령어를 포함한 추가 정보는
+[`kubectl` 레퍼런스 문서](/ko/docs/reference/kubectl/)에서 확인할 수 있다.
 
-클러스터에 접근하기 위해 `kubectl` 을 다운로드 및 설치하고 설정하는 방법에 대한 정보는
-[`kubectl` 설치 및 설정](/ko/docs/tasks/tools/install-kubectl/)을
-참고한다.
+`kubectl` 은 다양한 리눅스 플랫폼, macOS, 그리고 윈도우에 설치할 수 있다.
+각각에 대한 설치 가이드는 다음과 같다.
 
-<a class="btn btn-primary" href="/ko/docs/tasks/tools/install-kubectl/" role="button" aria-label="kubectl 설치 및 설정 가이드 보기">kubectl 설치 및 설정 가이드 보기</a>
-
-[`kubectl` 레퍼런스 문서](/ko/docs/reference/kubectl/)를
-읽어볼 수도 있다.
+- [리눅스에 `kubectl` 설치하기](install-kubectl-linux)
+- [macOS에 `kubectl` 설치하기](install-kubectl-macos)
+- [윈도우에 `kubectl` 설치하기](install-kubectl-windows)
 
 ## kind
 
diff --git a/content/ko/docs/tasks/tools/included/_index.md b/content/ko/docs/tasks/tools/included/_index.md
new file mode 100644
index 0000000000..4ba9445002
--- /dev/null
+++ b/content/ko/docs/tasks/tools/included/_index.md
@@ -0,0 +1,6 @@
+---
+title: "포함된 도구들"
+description: "메인 kubectl-installs-*.md 페이지에 포함될 스니펫."
+headless: true
+toc_hide: true
+---
\ No newline at end of file
diff --git a/content/ko/docs/tasks/tools/included/install-kubectl-gcloud.md b/content/ko/docs/tasks/tools/included/install-kubectl-gcloud.md
new file mode 100644
index 0000000000..f3deae981c
--- /dev/null
+++ b/content/ko/docs/tasks/tools/included/install-kubectl-gcloud.md
@@ -0,0 +1,21 @@
+---
+title: "gcloud kubectl install"
+description: "gcloud를 이용하여 kubectl을 설치하는 방법을 각 OS별 탭에 포함하기 위한 스니펫."
+headless: true
+---
+
+Google Cloud SDK를 사용하여 kubectl을 설치할 수 있다.
+
+1. [Google Cloud SDK](https://cloud.google.com/sdk/)를 설치한다.
+
+1. `kubectl` 설치 명령을 실행한다.
+
+   ```shell
+   gcloud components install kubectl
+   ```
+
+1. 설치한 버전이 최신 버전인지 확인한다.
+
+   ```shell
+   kubectl version --client
+   ```
\ No newline at end of file
diff --git a/content/ko/docs/tasks/tools/included/kubectl-whats-next.md b/content/ko/docs/tasks/tools/included/kubectl-whats-next.md
new file mode 100644
index 0000000000..70532cd2eb
--- /dev/null
+++ b/content/ko/docs/tasks/tools/included/kubectl-whats-next.md
@@ -0,0 +1,12 @@
+---
+title: "다음 단계는 무엇인가?"
+description: "kubectl을 설치한 다음 해야 하는 것에 대해 설명한다."
+headless: true
+---
+
+* [Minikube 설치](https://minikube.sigs.k8s.io/docs/start/)
+* 클러스터 생성에 대한 자세한 내용은 [시작하기](/ko/docs/setup/)를 참고한다.
+* [애플리케이션을 시작하고 노출하는 방법에 대해 배운다.](/ko/docs/tasks/access-application-cluster/service-access-application-cluster/)
+* 직접 생성하지 않은 클러스터에 접근해야 하는 경우,
+  [클러스터 접근 공유 문서](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)를 참고한다.
+* [kubectl 레퍼런스 문서](/ko/docs/reference/kubectl/kubectl/) 읽기
diff --git a/content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md b/content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md
new file mode 100644
index 0000000000..b9597857bb
--- /dev/null
+++ b/content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md
@@ -0,0 +1,54 @@
+---
+title: "리눅스에서 bash 자동 완성 사용하기"
+description: "리눅스에서 bash 자동 완성을 위한 몇 가지 선택적 구성에 대해 설명한다."
+headless: true
+---
+
+### 소개
+
+Bash의 kubectl 자동 완성 스크립트는 `kubectl completion bash` 명령으로 생성할 수 있다. 셸에서 자동 완성 스크립트를 소싱(sourcing)하면 kubectl 자동 완성 기능이 활성화된다.
+
+그러나, 자동 완성 스크립트는 [**bash-completion**](https://github.com/scop/bash-completion)에 의존하고 있으며, 이 소프트웨어를 먼저 설치해야 한다(`type _init_completion` 을 실행하여 bash-completion이 이미 설치되어 있는지 확인할 수 있음).
+
+### bash-completion 설치
+
+bash-completion은 많은 패키지 관리자에 의해 제공된다([여기](https://github.com/scop/bash-completion#installation) 참고). `apt-get install bash-completion` 또는 `yum install bash-completion` 등으로 설치할 수 있다.
+
+위의 명령은 bash-completion의 기본 스크립트인 `/usr/share/bash-completion/bash_completion` 을 생성한다. 패키지 관리자에 따라, `~/.bashrc` 파일에서 이 파일을 수동으로 소스(source)해야 한다.
+
+확인하려면, 셸을 다시 로드하고 `type _init_completion` 을 실행한다. 명령이 성공하면, 이미 설정된 상태이고, 그렇지 않으면 `~/.bashrc` 파일에 다음을 추가한다.
+
+```bash
+source /usr/share/bash-completion/bash_completion
+```
+
+셸을 다시 로드하고 `type _init_completion` 을 입력하여 bash-completion이 올바르게 설치되었는지 확인한다.
+
+### kubectl 자동 완성 활성화
+
+이제 kubectl 자동 완성 스크립트가 모든 셸 세션에서 제공되도록 해야 한다. 이를 수행할 수 있는 두 가지 방법이 있다.
+
+- `~/.bashrc` 파일에서 자동 완성 스크립트를 소싱한다.
+
+   ```bash
+   echo 'source <(kubectl completion bash)' >>~/.bashrc
+   ```
+
+- 자동 완성 스크립트를 `/etc/bash_completion.d` 디렉터리에 추가한다.
+
+   ```bash
+   kubectl completion bash >/etc/bash_completion.d/kubectl
+   ```
+
+kubectl에 대한 앨리어스(alias)가 있는 경우, 해당 앨리어스로 작업하도록 셸 자동 완성을 확장할 수 있다.
+
+```bash
+echo 'alias k=kubectl' >>~/.bashrc
+echo 'complete -F __start_kubectl k' >>~/.bashrc
+```
+
+{{< note >}}
+bash-completion은 `/etc/bash_completion.d` 에 있는 모든 자동 완성 스크립트를 소싱한다.
+{{< /note >}}
+
+두 방법 모두 동일하다. 셸을 다시 로드하면, kubectl 자동 완성 기능이 작동할 것이다.
diff --git a/content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md b/content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
new file mode 100644
index 0000000000..7acb5d3621
--- /dev/null
+++ b/content/ko/docs/tasks/tools/included/optional-kubectl-configs-bash-mac.md
@@ -0,0 +1,89 @@
+---
+title: "macOS에서 bash 자동 완성 사용하기"
+description: "macOS에서 bash 자동 완성을 위한 몇 가지 선택적 구성에 대해 설명한다."
+headless: true
+---
+
+### 소개
+
+Bash의 kubectl 자동 완성 스크립트는 `kubectl completion bash` 로 생성할 수 있다. 이 스크립트를 셸에 소싱하면 kubectl 자동 완성이 가능하다.
+
+그러나 kubectl 자동 완성 스크립트는 미리 [**bash-completion**](https://github.com/scop/bash-completion)을 설치해야 동작한다.
+
+{{< warning>}}
+bash-completion에는 v1과 v2 두 가지 버전이 있다. v1은 Bash 3.2(macOS의 기본 설치 버전) 버전용이고, v2는 Bash 4.1 이상 버전용이다. kubectl 자동 완성 스크립트는 bash-completion v1과 Bash 3.2 버전에서는 **작동하지 않는다**. **bash-completion v2** 와 **Bash 4.1 이상 버전** 이 필요하다. 따라서, macOS에서 kubectl 자동 완성 기능을 올바르게 사용하려면, Bash 4.1 이상을 설치하고 사용해야 한다([*지침*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba)). 다음의 내용에서는 Bash 4.1 이상(즉, 모든 Bash 버전 4.1 이상)을 사용한다고 가정한다.
+{{< /warning >}}
+
+### Bash 업그레이드
+
+여기의 지침에서는 Bash 4.1 이상을 사용한다고 가정한다. 다음을 실행하여 Bash 버전을 확인할 수 있다.
+
+```bash
+echo $BASH_VERSION
+```
+
+너무 오래된 버전인 경우, Homebrew를 사용하여 설치/업그레이드할 수 있다.
+
+```bash
+brew install bash
+```
+
+셸을 다시 로드하고 원하는 버전을 사용 중인지 확인한다.
+
+```bash
+echo $BASH_VERSION $SHELL
+```
+
+Homebrew는 보통 `/usr/local/bin/bash` 에 설치한다.
+
+### bash-completion 설치
+
+{{< note >}}
+언급한 바와 같이, 이 지침에서는 Bash 4.1 이상을 사용한다고 가정한다. 이는 bash-completion v2를 설치한다는 것을 의미한다(Bash 3.2 및 bash-completion v1의 경우, kubectl 자동 완성이 작동하지 않음).
+{{< /note >}}
+
+bash-completion v2가 이미 설치되어 있는지 `type_init_completion` 으로 확인할 수 있다. 그렇지 않은 경우, Homebrew로 설치할 수 있다.
+
+```bash
+brew install bash-completion@2
+```
+
+이 명령의 출력에 명시된 바와 같이, `~/.bash_profile` 파일에 다음을 추가한다.
+
+```bash
+export BASH_COMPLETION_COMPAT_DIR="/usr/local/etc/bash_completion.d"
+[[ -r "/usr/local/etc/profile.d/bash_completion.sh" ]] && . "/usr/local/etc/profile.d/bash_completion.sh"
+```
+
+셸을 다시 로드하고 bash-completion v2가 올바르게 설치되었는지 `type _init_completion` 으로 확인한다.
+
+### kubectl 자동 완성 활성화
+
+이제 kubectl 자동 완성 스크립트가 모든 셸 세션에서 제공되도록 해야 한다. 이를 수행하는 방법에는 여러 가지가 있다.
+
+- 자동 완성 스크립트를 `~/.bash_profile` 파일에서 소싱한다.
+
+    ```bash
+    echo 'source <(kubectl completion bash)' >>~/.bash_profile
+    ```
+
+- 자동 완성 스크립트를 `/usr/local/etc/bash_completion.d` 디렉터리에 추가한다.
+
+    ```bash
+    kubectl completion bash >/usr/local/etc/bash_completion.d/kubectl
+    ```
+
+- kubectl에 대한 앨리어스가 있는 경우, 해당 앨리어스로 작업하기 위해 셸 자동 완성을 확장할 수 있다.
+
+    ```bash
+    echo 'alias k=kubectl' >>~/.bash_profile
+    echo 'complete -F __start_kubectl k' >>~/.bash_profile
+    ```
+
+- Homebrew로 kubectl을 설치한 경우([여기](/ko/docs/tasks/tools/install-kubectl-macos/#install-with-homebrew-on-macos)의 설명을 참고), kubectl 자동 완성 스크립트가 이미 `/usr/local/etc/bash_completion.d/kubectl` 에 있을 것이다. 이 경우, 아무 것도 할 필요가 없다.
+
+   {{< note >}}
+   bash-completion v2의 Homebrew 설치는 `BASH_COMPLETION_COMPAT_DIR` 디렉터리의 모든 파일을 소싱하므로, 후자의 두 가지 방법이 적용된다.
+   {{< /note >}}
+
+어떤 경우든, 셸을 다시 로드하면, kubectl 자동 완성 기능이 작동할 것이다.
\ No newline at end of file
diff --git a/content/ko/docs/tasks/tools/included/optional-kubectl-configs-zsh.md b/content/ko/docs/tasks/tools/included/optional-kubectl-configs-zsh.md
new file mode 100644
index 0000000000..e81403300b
--- /dev/null
+++ b/content/ko/docs/tasks/tools/included/optional-kubectl-configs-zsh.md
@@ -0,0 +1,29 @@
+---
+title: "zsh 자동 완성"
+description: "zsh 자동 완성을 위한 몇 가지 선택적 구성에 대해 설명한다."
+headless: true
+---
+
+Zsh용 kubectl 자동 완성 스크립트는 `kubectl completion zsh` 명령으로 생성할 수 있다. 셸에서 자동 완성 스크립트를 소싱하면 kubectl 자동 완성 기능이 활성화된다.
+
+모든 셸 세션에서 사용하려면, `~/.zshrc` 파일에 다음을 추가한다.
+
+```zsh
+source <(kubectl completion zsh)
+```
+
+kubectl에 대한 앨리어스가 있는 경우, 해당 앨리어스로 작업하도록 셸 자동 완성을 확장할 수 있다.
+
+```zsh
+echo 'alias k=kubectl' >>~/.zshrc
+echo 'complete -F __start_kubectl k' >>~/.zshrc
+```
+
+셸을 다시 로드하면, kubectl 자동 완성 기능이 작동할 것이다.
+
+`complete:13: command not found: compdef` 와 같은 오류가 발생하면, `~/.zshrc` 파일의 시작 부분에 다음을 추가한다.
+
+```zsh
+autoload -Uz compinit
+compinit
+```
\ No newline at end of file
diff --git a/content/ko/docs/tasks/tools/included/verify-kubectl.md b/content/ko/docs/tasks/tools/included/verify-kubectl.md
new file mode 100644
index 0000000000..b935582b7a
--- /dev/null
+++ b/content/ko/docs/tasks/tools/included/verify-kubectl.md
@@ -0,0 +1,34 @@
+---
+title: "kubectl 설치 검증하기"
+description: "kubectl을 검증하는 방법에 대해 설명한다."
+headless: true
+---
+
+kubectl이 쿠버네티스 클러스터를 찾아 접근하려면,
+[kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)를
+사용하여 클러스터를 생성하거나 Minikube 클러스터를 성공적으로 배포할 때 자동으로 생성되는
+[kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)이
+필요하다.
+기본적으로, kubectl 구성은 `~/.kube/config` 에 있다.
+
+클러스터 상태를 가져와서 kubectl이 올바르게 구성되어 있는지 확인한다.
+
+```shell
+kubectl cluster-info
+```
+
+URL 응답이 표시되면, kubectl이 클러스터에 접근하도록 올바르게 구성된 것이다.
+
+다음과 비슷한 메시지가 표시되면, kubectl이 올바르게 구성되지 않았거나 쿠버네티스 클러스터에 연결할 수 없다.
+
+```
+The connection to the server <server-name:port> was refused - did you specify the right host or port?
+```
+
+예를 들어, 랩톱에서 로컬로 쿠버네티스 클러스터를 실행하려면, Minikube와 같은 도구를 먼저 설치한 다음 위에서 언급한 명령을 다시 실행해야 한다.
+
+kubectl cluster-info가 URL 응답을 반환하지만 클러스터에 접근할 수 없는 경우, 올바르게 구성되었는지 확인하려면 다음을 사용한다.
+
+```shell
+kubectl cluster-info dump
+```
\ No newline at end of file
diff --git a/content/ko/docs/tasks/tools/install-kubectl-linux.md b/content/ko/docs/tasks/tools/install-kubectl-linux.md
new file mode 100644
index 0000000000..0e8a6ac6ee
--- /dev/null
+++ b/content/ko/docs/tasks/tools/install-kubectl-linux.md
@@ -0,0 +1,174 @@
+---
+
+
+title: 리눅스에 kubectl 설치 및 설정
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: 리눅스에 kubectl 설치하기
+---
+
+## {{% heading "prerequisites" %}}
+
+클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
+예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
+최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
+
+## 리눅스에 kubectl 설치
+
+다음과 같은 방법으로 리눅스에 kubectl을 설치할 수 있다.
+
+- [리눅스에서 curl을 사용하여 kubectl 바이너리 설치](#install-kubectl-binary-with-curl-on-linux)
+- [기본 패키지 관리 도구를 사용하여 설치](#install-using-native-package-management)
+- [다른 패키지 관리 도구를 사용하여 설치](#install-using-other-package-management)
+- [Google Cloud SDK를 사용하여 설치](#install-on-linux-as-part-of-the-google-cloud-sdk)
+
+### 리눅스에서 curl을 사용하여 kubectl 바이너리 설치 {#install-kubectl-binary-with-curl-on-linux}
+
+1. 다음 명령으로 최신 릴리스를 다운로드한다.
+
+   ```bash
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+   ```
+
+   {{< note >}}
+특정 버전을 다운로드하려면, `$(curl -L -s https://dl.k8s.io/release/stable.txt)` 명령 부분을 특정 버전으로 바꾼다.
+
+예를 들어, 리눅스에서 버전 {{< param "fullversion" >}}을 다운로드하려면, 다음을 입력한다.
+
+   ```bash
+   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
+   ```
+   {{< /note >}}
+
+1. 바이너리를 검증한다. (선택 사항)
+
+   kubectl 체크섬(checksum) 파일을 다운로드한다.
+
+   ```bash
+   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl.sha256"
+   ```
+
+   kubectl 바이너리를 체크섬 파일을 통해 검증한다.
+
+   ```bash
+   echo "$(<kubectl.sha256) kubectl" | sha256sum --check
+   ```
+
+   검증이 성공한다면, 출력은 다음과 같다.
+
+   ```bash
+   kubectl: OK
+   ```
+
+   검증이 실패한다면, `shasum`이 0이 아닌 상태로 종료되며 다음과 유사한 결과를 출력한다.
+
+   ```bash
+   kubectl: FAILED
+   sha256sum: WARNING: 1 computed checksum did NOT match
+   ```
+
+   {{< note >}}
+   동일한 버전의 바이너리와 체크섬을 다운로드한다.
+   {{< /note >}}
+
+1. kubectl 설치
+
+   ```bash
+   sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
+   ```
+
+   {{< note >}}
+   대상 시스템에 root 접근 권한을 가지고 있지 않더라도, `~/.local/bin` 디렉터리에 kubectl을 설치할 수 있다.
+
+   ```bash
+   mkdir -p ~/.local/bin/kubectl
+   mv ./kubectl ~/.local/bin/kubectl
+   # 그리고 ~/.local/bin/kubectl을 $PATH에 추가
+   ```
+
+   {{< /note >}}
+
+1. 설치한 버전이 최신인지 확인한다.
+
+   ```bash
+   kubectl version --client
+   ```
+
+### 기본 패키지 관리 도구를 사용하여 설치 {#install-using-native-package-management}
+
+{{< tabs name="kubectl_install" >}}
+{{< tab name="Ubuntu, Debian 또는 HypriotOS" codelang="bash" >}}
+sudo apt-get update && sudo apt-get install -y apt-transport-https gnupg2 curl
+curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
+echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
+sudo apt-get update
+sudo apt-get install -y kubectl
+{{< /tab >}}
+
+{{< tab name="CentOS, RHEL 또는 Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
+[kubernetes]
+name=Kubernetes
+baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
+enabled=1
+gpgcheck=1
+repo_gpgcheck=1
+gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
+EOF
+yum install -y kubectl
+{{< /tab >}}
+{{< /tabs >}}
+
+### 다른 패키지 관리 도구를 사용하여 설치 {#install-using-other-package-management}
+
+{{< tabs name="other_kubectl_install" >}}
+{{% tab name="Snap" %}}
+[snap](https://snapcraft.io/docs/core/install) 패키지 관리자를 지원하는 Ubuntu 또는 다른 리눅스 배포판을 사용하는 경우, kubectl을 [snap](https://snapcraft.io/) 애플리케이션으로 설치할 수 있다.
+
+```shell
+snap install kubectl --classic
+
+kubectl version --client
+```
+
+{{% /tab %}}
+
+{{% tab name="Homebrew" %}}
+리눅스 상에서 [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) 패키지 관리자를 사용한다면, [설치](https://docs.brew.sh/Homebrew-on-Linux#install)를 통해 kubectl을 사용할 수 있다.
+
+```shell
+brew install kubectl
+
+kubectl version --client
+```
+
+{{% /tab %}}
+
+{{< /tabs >}}
+
+### Google Cloud SDK를 사용하여 설치 {#install-on-linux-as-part-of-the-google-cloud-sdk}
+
+{{< include "included/install-kubectl-gcloud.md" >}}
+
+## kubectl 구성 확인
+
+{{< include "included/verify-kubectl.md" >}}
+
+## 선택적 kubectl 구성
+
+### 셸 자동 완성 활성화
+
+kubectl은 Bash 및 Zsh에 대한 자동 완성 지원을 제공하므로 입력을 위한 타이핑을 많이 절약할 수 있다.
+
+다음은 Bash 및 Zsh에 대한 자동 완성을 설정하는 절차이다.
+
+{{< tabs name="kubectl_autocompletion" >}}
+{{< tab name="Bash" include="included/optional-kubectl-configs-bash-linux.md" />}}
+{{< tab name="Zsh" include="included/optional-kubectl-configs-zsh.md" />}}
+{{< /tabs >}}
+
+## {{% heading "whatsnext" %}}
+
+{{< include "included/kubectl-whats-next.md" >}}
diff --git a/content/ko/docs/tasks/tools/install-kubectl-macos.md b/content/ko/docs/tasks/tools/install-kubectl-macos.md
new file mode 100644
index 0000000000..b0747f8a1c
--- /dev/null
+++ b/content/ko/docs/tasks/tools/install-kubectl-macos.md
@@ -0,0 +1,160 @@
+---
+
+
+title: macOS에 kubectl 설치 및 설정
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: macOS에 kubectl 설치하기
+---
+
+## {{% heading "prerequisites" %}}
+
+클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
+예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
+최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
+
+## macOS에 kubectl 설치
+
+다음과 같은 방법으로 macOS에 kubectl을 설치할 수 있다.
+
+- [macOS에서 curl을 사용하여 kubectl 바이너리 설치](#install-kubectl-binary-with-curl-on-macos)
+- [macOS에서 Homebrew를 사용하여 설치](#install-with-homebrew-on-macos)
+- [macOS에서 Macports를 사용하여 설치](#install-with-macports-on-macos)
+- [Google Cloud SDK를 사용하여 설치](#install-on-macos-as-part-of-the-google-cloud-sdk)
+
+### macOS에서 curl을 사용하여 kubectl 바이너리 설치 {#install-kubectl-binary-with-curl-on-macos}
+
+1. 최신 릴리스를 다운로드한다.
+
+   ```bash
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl"
+   ```
+
+   {{< note >}}
+   특정 버전을 다운로드하려면, `$(curl -L -s https://dl.k8s.io/release/stable.txt)` 명령 부분을 특정 버전으로 바꾼다.
+
+   예를 들어, macOS에서 버전 {{< param "fullversion" >}}을 다운로드하려면, 다음을 입력한다.
+
+   ```bash
+   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
+   ```
+
+   {{< /note >}}
+
+1. 바이너리를 검증한다. (선택 사항)
+
+   kubectl 체크섬 파일을 다운로드한다.
+
+   ```bash
+   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
+   ```
+
+   kubectl 바이너리를 체크섬 파일을 통해 검증한다.
+
+   ```bash
+   echo "$(<kubectl.sha256)  kubectl" | shasum -a 256 --check
+   ```
+
+   검증이 성공한다면, 출력은 다음과 같다.
+
+   ```bash
+   kubectl: OK
+   ```
+
+   검증이 실패한다면, `shasum`이 0이 아닌 상태로 종료되며 다음과 유사한 결과를 출력한다.
+
+   ```bash
+   kubectl: FAILED
+   shasum: WARNING: 1 computed checksum did NOT match
+   ```
+
+   {{< note >}}
+   동일한 버전의 바이너리와 체크섬을 다운로드한다.
+   {{< /note >}}
+
+1. kubectl 바이너리를 실행 가능하게 한다.
+
+   ```bash
+   chmod +x ./kubectl
+   ```
+
+1. kubectl 바이너리를 시스템 `PATH` 의 파일 위치로 옮긴다.
+
+   ```bash
+   sudo mv ./kubectl /usr/local/bin/kubectl && \
+   sudo chown root: /usr/local/bin/kubectl
+   ```
+
+1. 설치한 버전이 최신 버전인지 확인한다.
+
+   ```bash
+   kubectl version --client
+   ```
+
+### macOS에서 Homebrew를 사용하여 설치 {#install-with-homebrew-on-macos}
+
+macOS에서 [Homebrew](https://brew.sh/) 패키지 관리자를 사용하는 경우, Homebrew로 kubectl을 설치할 수 있다.
+
+1. 설치 명령을 실행한다.
+
+   ```bash
+   brew install kubectl
+   ```
+
+   또는
+
+   ```bash
+   brew install kubernetes-cli
+   ```
+
+1. 설치한 버전이 최신 버전인지 확인한다.
+
+   ```bash
+   kubectl version --client
+   ```
+
+### macOS에서 Macports를 사용하여 설치 {#install-with-macports-on-macos}
+
+macOS에서 [Macports](https://macports.org/) 패키지 관리자를 사용하는 경우, Macports로 kubectl을 설치할 수 있다.
+
+1. 설치 명령을 실행한다.
+
+   ```bash
+   sudo port selfupdate
+   sudo port install kubectl
+   ```
+
+1. 설치한 버전이 최신 버전인지 확인한다.
+
+   ```bash
+   kubectl version --client
+   ```
+
+
+### Google Cloud SDK를 사용하여 설치 {#install-on-macos-as-part-of-the-google-cloud-sdk}
+
+{{< include "included/install-kubectl-gcloud.md" >}}
+
+## kubectl 구성 확인
+
+{{< include "included/verify-kubectl.md" >}}
+
+## 선택적 kubectl 구성
+
+### 셸 자동 완성 활성화
+
+kubectl은 Bash 및 Zsh에 대한 자동 완성 지원을 제공하므로 입력을 위한 타이핑을 많이 절약할 수 있다.
+
+다음은 Bash 및 Zsh에 대한 자동 완성을 설정하는 절차이다.
+
+{{< tabs name="kubectl_autocompletion" >}}
+{{< tab name="Bash" include="included/optional-kubectl-configs-bash-mac.md" />}}
+{{< tab name="Zsh" include="included/optional-kubectl-configs-zsh.md" />}}
+{{< /tabs >}}
+
+## {{% heading "whatsnext" %}}
+
+{{< include "included/kubectl-whats-next.md" >}}
\ No newline at end of file
diff --git a/content/ko/docs/tasks/tools/install-kubectl-windows.md b/content/ko/docs/tasks/tools/install-kubectl-windows.md
new file mode 100644
index 0000000000..e1c67af9ce
--- /dev/null
+++ b/content/ko/docs/tasks/tools/install-kubectl-windows.md
@@ -0,0 +1,179 @@
+---
+
+
+title: 윈도우에 kubectl 설치 및 설정
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: 윈도우에 kubectl 설치하기
+---
+
+## {{% heading "prerequisites" %}}
+
+클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
+예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
+최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
+
+## 윈도우에 kubectl 설치
+
+다음과 같은 방법으로 윈도우에 kubectl을 설치할 수 있다.
+
+- [윈도우에서 curl을 사용하여 kubectl 바이너리 설치](#install-kubectl-binary-with-curl-on-windows)
+- [PSGallery에서 PowerShell로 설치](#install-with-powershell-from-psgallery)
+- [Chocolatey 또는 Scoop을 사용하여 윈도우에 설치](#install-on-windows-using-chocolatey-or-scoop)
+- [Google Cloud SDK를 사용하여 설치](#install-on-windows-as-part-of-the-google-cloud-sdk)
+
+
+### 윈도우에서 curl을 사용하여 kubectl 바이너리 설치 {#install-kubectl-binary-with-curl-on-windows}
+
+1. [최신 릴리스 {{< param "fullversion" >}}](https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe)를 다운로드한다.
+
+   또는 `curl` 을 설치한 경우, 다음 명령을 사용한다.
+
+   ```powershell
+   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
+   ```
+
+   {{< note >}}
+   최신의 안정 버전(예: 스크립팅을 위한)을 찾으려면, [https://dl.k8s.io/release/stable.txt](https://dl.k8s.io/release/stable.txt)를 참고한다.
+   {{< /note >}}
+
+1. 바이너리를 검증한다. (선택 사항)
+
+   kubectl 체크섬 파일을 다운로드한다.
+
+   ```powershell
+   curl -LO https://dl.k8s.io/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe.sha256
+   ```
+
+   kubectl 바이너리를 체크섬 파일을 통해 검증한다.
+
+   - 수동으로 `CertUtil` 의 출력과 다운로드한 체크섬 파일을 비교하기 위해서 커맨드 프롬프트를 사용한다.
+
+     ```cmd
+     CertUtil -hashfile kubectl.exe SHA256
+     type kubectl.exe.sha256
+     ```
+
+   - `-eq` 연산자를 통해 `True` 또는 `False` 결과를 얻는 자동 검증을 위해서 PowerShell을 사용한다.
+
+     ```powershell
+     $($(CertUtil -hashfile .\kubectl.exe SHA256)[1] -replace " ", "") -eq $(type .\kubectl.exe.sha256)
+     ```
+
+1. 바이너리를 `PATH` 가 설정된 디렉터리에 추가한다.
+
+1. `kubectl` 의 버전이 다운로드한 버전과 같은지 확인한다.
+
+   ```cmd
+   kubectl version --client
+   ```
+
+{{< note >}}
+[윈도우용 도커 데스크톱](https://docs.docker.com/docker-for-windows/#kubernetes)은 자체 버전의 `kubectl` 을 `PATH` 에 추가한다.
+도커 데스크톱을 이전에 설치한 경우, 도커 데스크톱 설치 프로그램에서 추가한 `PATH` 항목 앞에 `PATH` 항목을 배치하거나 도커 데스크톱의 `kubectl` 을 제거해야 할 수도 있다.
+{{< /note >}}
+
+### PSGallery에서 PowerShell로 설치 {#install-with-powershell-from-psgallery}
+
+윈도우에서 [Powershell Gallery](https://www.powershellgallery.com/) 패키지 관리자를 사용하는 경우, Powershell로 kubectl을 설치하고 업데이트할 수 있다.
+
+1. 설치 명령을 실행한다(`DownloadLocation` 을 지정해야 한다).
+
+   ```powershell
+   Install-Script -Name install-kubectl -Scope CurrentUser -Force
+   install-kubectl.ps1 [-DownloadLocation <path>]
+   ```
+
+   {{< note >}}
+   `DownloadLocation` 을 지정하지 않으면, `kubectl` 은 사용자의 `temp` 디렉터리에 설치된다.
+   {{< /note >}}
+
+   설치 프로그램은 `$HOME/.kube` 를 생성하고 구성 파일을 작성하도록 지시한다.
+
+1. 설치한 버전이 최신 버전인지 확인한다.
+
+   ```powershell
+   kubectl version --client
+   ```
+
+{{< note >}}
+설치 업데이트는 1 단계에서 나열한 두 명령을 다시 실행하여 수행한다.
+{{< /note >}}
+
+### Chocolatey 또는 Scoop을 사용하여 윈도우에 설치 {#install-on-windows-using-chocolatey-or-scoop}
+
+1. 윈도우에 kubectl을 설치하기 위해서 [Chocolatey](https://chocolatey.org) 패키지 관리자나 [Scoop](https://scoop.sh) 커맨드 라인 설치 프로그램을 사용할 수 있다.
+
+   {{< tabs name="kubectl_win_install" >}}
+   {{% tab name="choco" %}}
+   ```powershell
+    choco install kubernetes-cli
+   ```
+   {{% /tab %}}
+   {{% tab name="scoop" %}}
+   ```powershell
+    scoop install kubectl
+   ```
+   {{% /tab %}}
+   {{< /tabs >}}
+
+
+1. 설치한 버전이 최신 버전인지 확인한다.
+
+   ```powershell
+   kubectl version --client
+   ```
+
+1. 홈 디렉터리로 이동한다.
+
+   ```powershell
+   # cmd.exe를 사용한다면, 다음을 실행한다. cd %USERPROFILE%
+   cd ~
+   ```
+
+1. `.kube` 디렉터리를 생성한다.
+
+   ```powershell
+   mkdir .kube
+   ```
+
+1. 금방 생성한 `.kube` 디렉터리로 이동한다.
+
+   ```powershell
+   cd .kube
+   ```
+
+1. 원격 쿠버네티스 클러스터를 사용하도록 kubectl을 구성한다.
+
+   ```powershell
+   New-Item config -type file
+   ```
+
+{{< note >}}
+메모장과 같은 텍스트 편집기를 선택하여 구성 파일을 편집한다.
+{{< /note >}}
+
+### Google Cloud SDK를 사용하여 설치 {#install-on-windows-as-part-of-the-google-cloud-sdk}
+
+{{< include "included/install-kubectl-gcloud.md" >}}
+
+## kubectl 구성 확인
+
+{{< include "included/verify-kubectl.md" >}}
+
+## 선택적 kubectl 구성
+
+### 셸 자동 완성 활성화
+
+kubectl은 Bash 및 Zsh에 대한 자동 완성 지원을 제공하므로 입력을 위한 타이핑을 많이 절약할 수 있다.
+
+다음은 Zsh에 대한 자동 완성을 설정하는 절차이다.
+
+{{< include "included/optional-kubectl-configs-zsh.md" >}}
+
+## {{% heading "whatsnext" %}}
+
+{{< include "included/kubectl-whats-next.md" >}}
\ No newline at end of file
diff --git a/content/ko/docs/tasks/tools/install-kubectl.md b/content/ko/docs/tasks/tools/install-kubectl.md
deleted file mode 100644
index 70a6a60409..0000000000
--- a/content/ko/docs/tasks/tools/install-kubectl.md
+++ /dev/null
@@ -1,633 +0,0 @@
----
-
-
-title: kubectl 설치 및 설정
-content_type: task
-weight: 10
-card:
-  name: tasks
-  weight: 20
-  title: kubectl 설치
----
-
-<!-- overview -->
-쿠버네티스 커맨드 라인 도구인 [kubectl](/ko/docs/reference/kubectl/kubectl/)을 사용하면,
-쿠버네티스 클러스터에 대해 명령을 실행할 수 있다.
-kubectl을 사용하여 애플리케이션을 배포하고, 클러스터 리소스를 검사 및 관리하며
-로그를 볼 수 있다. kubectl 작업의 전체 목록에 대해서는,
-[kubectl 개요](/ko/docs/reference/kubectl/overview/)를 참고한다.
-
-
-## {{% heading "prerequisites" %}}
-
-클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
-예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
-최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
-
-<!-- steps -->
-
-## 리눅스에 kubectl 설치
-
-### 리눅스에서 curl을 사용하여 kubectl 바이너리 설치
-
-1. 다음 명령으로 최신 릴리스를 다운로드한다.
-
-   ```bash
-   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
-   ```
-
-   {{< note >}}
-특정 버전을 다운로드하려면, `$(curl -L -s https://dl.k8s.io/release/stable.txt)` 명령 부분을 특정 버전으로 바꾼다.
-
-예를 들어, 리눅스에서 버전 {{< param "fullversion" >}}을 다운로드하려면, 다음을 입력한다.
-
-   ```bash
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
-   ```
-   {{< /note >}}
-
-1. 바이너리를 검증한다. (선택 사항)
-
-   kubectl 체크섬(checksum) 파일을 다운로드한다.
-
-   ```bash
-   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl.sha256"
-   ```
-
-   kubectl 바이너리를 체크섬 파일을 통해 검증한다.
-
-   ```bash
-   echo "$(<kubectl.sha256) kubectl" | sha256sum --check
-   ```
-
-   검증이 성공한다면, 출력은 다음과 같다.
-
-   ```bash
-   kubectl: OK
-   ```
-
-   검증이 실패한다면, `sha256` 가 0이 아닌 상태로 종료되며 다음과 유사한 결과를 출력한다.
-
-   ```bash
-   kubectl: FAILED
-   sha256sum: WARNING: 1 computed checksum did NOT match
-   ```
-
-   {{< note >}}
-   동일한 버전의 바이너리와 체크섬을 다운로드한다.
-   {{< /note >}}
-
-1. kubectl 설치
-
-   ```bash
-   sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
-   ```
-
-   {{< note >}}
-   대상 시스템에 root 접근 권한을 가지고 있지 않더라도, `~/.local/bin` 디렉터리에 kubectl을 설치할 수 있다.
-
-   ```bash
-   mkdir -p ~/.local/bin/kubectl
-   mv ./kubectl ~/.local/bin/kubectl
-   # 그리고 ~/.local/bin/kubectl을 $PATH에 추가
-   ```
-
-   {{< /note >}}
-
-1. 설치한 버전이 최신인지 확인한다.
-
-   ```bash
-   kubectl version --client
-   ```
-
-### 기본 패키지 관리 도구를 사용하여 설치
-
-{{< tabs name="kubectl_install" >}}
-{{< tab name="Ubuntu, Debian 또는 HypriotOS" codelang="bash" >}}
-sudo apt-get update && sudo apt-get install -y apt-transport-https gnupg2 curl
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
-sudo apt-get update
-sudo apt-get install -y kubectl
-{{< /tab >}}
-
-{{< tab name="CentOS, RHEL 또는 Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
-[kubernetes]
-name=Kubernetes
-baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
-enabled=1
-gpgcheck=1
-repo_gpgcheck=1
-gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
-EOF
-yum install -y kubectl
-{{< /tab >}}
-{{< /tabs >}}
-
-### 다른 패키지 관리 도구를 사용하여 설치
-
-{{< tabs name="other_kubectl_install" >}}
-{{% tab name="Snap" %}}
-[snap](https://snapcraft.io/docs/core/install) 패키지 관리자를 지원하는 Ubuntu 또는 다른 리눅스 배포판을 사용하는 경우, kubectl을 [snap](https://snapcraft.io/) 애플리케이션으로 설치할 수 있다.
-
-```shell
-snap install kubectl --classic
-
-kubectl version --client
-```
-
-{{% /tab %}}
-
-{{% tab name="Homebrew" %}}
-리눅스 상에서 [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) 패키지 관리자를 사용한다면, [설치](https://docs.brew.sh/Homebrew-on-Linux#install)를 통해 kubectl을 사용할 수 있다.
-
-```shell
-brew install kubectl
-
-kubectl version --client
-```
-
-{{% /tab %}}
-
-{{< /tabs >}}
-
-
-## macOS에 kubectl 설치
-
-### macOS에서 curl을 사용하여 kubectl 바이너리 설치
-
-1. 최신 릴리스를 다운로드한다.
-
-   ```bash
-   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl"
-   ```
-
-   {{< note >}}
-   특정 버전을 다운로드하려면, `$(curl -L -s https://dl.k8s.io/release/stable.txt)` 명령 부분을 특정 버전으로 바꾼다.
-
-   예를 들어, macOS에서 버전 {{< param "fullversion" >}}을 다운로드하려면, 다음을 입력한다.
-
-   ```bash
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
-   ```
-
-   {{< /note >}}
-
-1. 바이너리를 검증한다. (선택 사항)
-
-   kubectl 체크섬 파일을 다운로드한다.
-
-   ```bash
-   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
-   ```
-
-   kubectl 바이너리를 체크섬 파일을 통해 검증한다.
-
-   ```bash
-   echo "$(<kubectl.sha256)  kubectl" | shasum -a 256 --check
-   ```
-
-   검증이 성공한다면, 출력은 다음과 같다.
-
-   ```bash
-   kubectl: OK
-   ```
-
-   검증이 실패한다면, `sha256` 가 0이 아닌 상태로 종료되며 다음과 유사한 결과를 출력한다.
-
-   ```bash
-   kubectl: FAILED
-   shasum: WARNING: 1 computed checksum did NOT match
-   ```
-
-   {{< note >}}
-   동일한 버전의 바이너리와 체크섬을 다운로드한다.
-   {{< /note >}}
-
-1. kubectl 바이너리를 실행 가능하게 한다.
-
-   ```bash
-   chmod +x ./kubectl
-   ```
-
-1. kubectl 바이너리를 시스템 `PATH` 의 파일 위치로 옮긴다.
-
-   ```bash
-   sudo mv ./kubectl /usr/local/bin/kubectl && \
-   sudo chown root: /usr/local/bin/kubectl
-   ```
-
-1. 설치한 버전이 최신 버전인지 확인한다.
-
-   ```bash
-   kubectl version --client
-   ```
-
-### macOS에서 Homebrew를 사용하여 설치
-
-macOS에서 [Homebrew](https://brew.sh/) 패키지 관리자를 사용하는 경우, Homebrew로 kubectl을 설치할 수 있다.
-
-1. 설치 명령을 실행한다.
-
-   ```bash
-   brew install kubectl
-   ```
-
-   또는
-
-   ```bash
-   brew install kubernetes-cli
-   ```
-
-1. 설치한 버전이 최신 버전인지 확인한다.
-
-   ```bash
-   kubectl version --client
-   ```
-
-### macOS에서 Macports를 사용하여 설치
-
-macOS에서 [Macports](https://macports.org/) 패키지 관리자를 사용하는 경우, Macports로 kubectl을 설치할 수 있다.
-
-1. 설치 명령을 실행한다.
-
-   ```bash
-   sudo port selfupdate
-   sudo port install kubectl
-   ```
-
-1. 설치한 버전이 최신 버전인지 확인한다.
-
-   ```bash
-   kubectl version --client
-   ```
-
-## 윈도우에 kubectl 설치
-
-### 윈도우에서 curl을 사용하여 kubectl 바이너리 설치
-
-1. [최신 릴리스 {{< param "fullversion" >}}](https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe)를 다운로드한다.
-
-   또는 `curl` 을 설치한 경우, 다음 명령을 사용한다.
-
-   ```powershell
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
-   ```
-
-   {{< note >}}
-   최신의 안정 버전(예: 스크립팅을 위한)을 찾으려면, [https://dl.k8s.io/release/stable.txt](https://dl.k8s.io/release/stable.txt)를 참고한다.
-   {{< /note >}}
-
-1. 바이너리를 검증한다. (선택 사항)
-
-   kubectl 체크섬 파일을 다운로드한다.
-
-   ```powershell
-   curl -LO https://dl.k8s.io/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe.sha256
-   ```
-
-   kubectl 바이너리를 체크섬 파일을 통해 검증한다.
-
-   - 수동으로 `CertUtil` 의 출력과 다운로드한 체크섬 파일을 비교하기 위해서 커맨드 프롬프트를 사용한다.
-
-     ```cmd
-     CertUtil -hashfile kubectl.exe SHA256
-     type kubectl.exe.sha256
-     ```
-
-   - `-eq` 연산자를 통해 `True` 또는 `False` 결과를 얻는 자동 검증을 위해서 PowerShell을 사용한다.
-
-     ```powershell
-     $($(CertUtil -hashfile .\kubectl.exe SHA256)[1] -replace " ", "") -eq $(type .\kubectl.exe.sha256)
-     ```
-
-1. 바이너리를 `PATH` 가 설정된 디렉터리에 추가한다.
-
-1. `kubectl` 의 버전이 다운로드한 버전과 같은지 확인한다.
-
-   ```cmd
-   kubectl version --client
-   ```
-
-{{< note >}}
-[윈도우용 도커 데스크톱](https://docs.docker.com/docker-for-windows/#kubernetes)은 자체 버전의 `kubectl` 을 `PATH` 에 추가한다.
-도커 데스크톱을 이전에 설치한 경우, 도커 데스크톱 설치 프로그램에서 추가한 `PATH` 항목 앞에 `PATH` 항목을 배치하거나 도커 데스크톱의 `kubectl` 을 제거해야 할 수도 있다.
-{{< /note >}}
-
-### PSGallery에서 PowerShell로 설치
-
-윈도우에서 [Powershell Gallery](https://www.powershellgallery.com/) 패키지 관리자를 사용하는 경우, Powershell로 kubectl을 설치하고 업데이트할 수 있다.
-
-1. 설치 명령을 실행한다(`DownloadLocation` 을 지정해야 한다).
-
-   ```powershell
-   Install-Script -Name install-kubectl -Scope CurrentUser -Force
-   install-kubectl.ps1 [-DownloadLocation <path>]
-   ```
-
-   {{< note >}}
-   `DownloadLocation` 을 지정하지 않으면, `kubectl` 은 사용자의 `temp` 디렉터리에 설치된다.
-   {{< /note >}}
-
-   설치 프로그램은 `$HOME/.kube` 를 생성하고 구성 파일을 작성하도록 지시한다.
-
-1. 설치한 버전이 최신 버전인지 확인한다.
-
-   ```powershell
-   kubectl version --client
-   ```
-
-{{< note >}}
-설치 업데이트는 1 단계에서 나열한 두 명령을 다시 실행하여 수행한다.
-{{< /note >}}
-
-### Chocolatey 또는 Scoop을 사용하여 윈도우에 설치
-
-1. 윈도우에 kubectl을 설치하기 위해서 [Chocolatey](https://chocolatey.org) 패키지 관리자나 [Scoop](https://scoop.sh) 커맨드 라인 설치 프로그램을 사용할 수 있다.
-
-   {{< tabs name="kubectl_win_install" >}}
-   {{% tab name="choco" %}}
-   ```powershell
-    choco install kubernetes-cli
-   ```
-   {{% /tab %}}
-   {{% tab name="scoop" %}}
-   ```powershell
-    scoop install kubectl
-   ```
-   {{% /tab %}}
-   {{< /tabs >}}
-
-
-1. 설치한 버전이 최신 버전인지 확인한다.
-
-   ```powershell
-   kubectl version --client
-   ```
-
-1. 홈 디렉터리로 이동한다.
-
-   ```powershell
-   # cmd.exe를 사용한다면, 다음을 실행한다. cd %USERPROFILE%
-   cd ~
-   ```
-
-1. `.kube` 디렉터리를 생성한다.
-
-   ```powershell
-   mkdir .kube
-   ```
-
-1. 금방 생성한 `.kube` 디렉터리로 이동한다.
-
-   ```powershell
-   cd .kube
-   ```
-
-1. 원격 쿠버네티스 클러스터를 사용하도록 kubectl을 구성한다.
-
-   ```powershell
-   New-Item config -type file
-   ```
-
-{{< note >}}
-메모장과 같은 텍스트 편집기를 선택하여 구성 파일을 편집한다.
-{{< /note >}}
-
-## Google Cloud SDK의 일부로 다운로드
-
-kubectl을 Google Cloud SDK의 일부로 설치할 수 있다.
-
-1. [Google Cloud SDK](https://cloud.google.com/sdk/)를 설치한다.
-
-1. `kubectl` 설치 명령을 실행한다.
-
-   ```shell
-   gcloud components install kubectl
-   ```
-
-1. 설치한 버전이 최신 버전인지 확인한다.
-
-   ```shell
-   kubectl version --client
-   ```
-
-## kubectl 구성 확인
-
-kubectl이 쿠버네티스 클러스터를 찾아 접근하려면,
-[kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)를
-사용하여 클러스터를 생성하거나 Minikube 클러스터를 성공적으로 배포할 때 자동으로 생성되는
-[kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)이
-필요하다.
-기본적으로, kubectl 구성은 `~/.kube/config` 에 있다.
-
-클러스터 상태를 가져와서 kubectl이 올바르게 구성되어 있는지 확인한다.
-
-```shell
-kubectl cluster-info
-```
-
-URL 응답이 표시되면, kubectl이 클러스터에 접근하도록 올바르게 구성된 것이다.
-
-다음과 비슷한 메시지가 표시되면, kubectl이 올바르게 구성되지 않았거나 쿠버네티스 클러스터에 연결할 수 없다.
-
-```
-The connection to the server <server-name:port> was refused - did you specify the right host or port?
-```
-
-예를 들어, 랩톱에서 로컬로 쿠버네티스 클러스터를 실행하려면, Minikube와 같은 도구를 먼저 설치한 다음 위에서 언급한 명령을 다시 실행해야 한다.
-
-kubectl cluster-info가 URL 응답을 반환하지만 클러스터에 접근할 수 없는 경우, 올바르게 구성되었는지 확인하려면 다음을 사용한다.
-
-```shell
-kubectl cluster-info dump
-```
-
-## 선택적 kubectl 구성
-
-### 셸 자동 완성 활성화
-
-kubectl은 Bash 및 Zsh에 대한 자동 완성 지원을 제공하므로 입력을 위한 타이핑을 많이 절약할 수 있다.
-
-다음은 Bash(리눅스와 macOS의 다른 점 포함) 및 Zsh에 대한 자동 완성을 설정하는 절차이다.
-
-{{< tabs name="kubectl_autocompletion" >}}
-
-{{% tab name="리눅스에서의 Bash" %}}
-
-### 소개
-
-Bash의 kubectl 완성 스크립트는 `kubectl completion bash` 명령으로 생성할 수 있다. 셸에서 완성 스크립트를 소싱(sourcing)하면 kubectl 자동 완성 기능이 활성화된다.
-
-그러나, 완성 스크립트는 [**bash-completion**](https://github.com/scop/bash-completion)에 의존하고 있으며, 이 소프트웨어를 먼저 설치해야 한다(`type _init_completion` 을 실행하여 bash-completion이 이미 설치되어 있는지 확인할 수 있음).
-
-### bash-completion 설치
-
-bash-completion은 많은 패키지 관리자에 의해 제공된다([여기](https://github.com/scop/bash-completion#installation) 참고). `apt-get install bash-completion` 또는 `yum install bash-completion` 등으로 설치할 수 있다.
-
-위의 명령은 bash-completion의 기본 스크립트인 `/usr/share/bash-completion/bash_completion` 을 생성한다. 패키지 관리자에 따라, `~/.bashrc` 파일에서 이 파일을 수동으로 소스(source)해야 한다.
-
-확인하려면, 셸을 다시 로드하고 `type _init_completion` 을 실행한다. 명령이 성공하면, 이미 설정된 상태이고, 그렇지 않으면 `~/.bashrc` 파일에 다음을 추가한다.
-
-```bash
-source /usr/share/bash-completion/bash_completion
-```
-
-셸을 다시 로드하고 `type _init_completion` 을 입력하여 bash-completion이 올바르게 설치되었는지 확인한다.
-
-### kubectl 자동 완성 활성화
-
-이제 kubectl 완성 스크립트가 모든 셸 세션에서 제공되도록 해야 한다. 이를 수행할 수 있는 두 가지 방법이 있다.
-
-- `~/.bashrc` 파일에서 완성 스크립트를 소싱한다.
-
-   ```bash
-   echo 'source <(kubectl completion bash)' >>~/.bashrc
-   ```
-
-- 완성 스크립트를 `/etc/bash_completion.d` 디렉터리에 추가한다.
-
-   ```bash
-   kubectl completion bash >/etc/bash_completion.d/kubectl
-   ```
-
-kubectl에 대한 앨리어스(alias)가 있는 경우, 해당 앨리어스로 작업하도록 셸 완성을 확장할 수 있다.
-
-```bash
-echo 'alias k=kubectl' >>~/.bashrc
-echo 'complete -F __start_kubectl k' >>~/.bashrc
-```
-
-{{< note >}}
-bash-completion은 `/etc/bash_completion.d` 에 있는 모든 완성 스크립트를 소싱한다.
-{{< /note >}}
-
-두 방법 모두 동일하다. 셸을 다시 로드한 후, kubectl 자동 완성 기능이 작동해야 한다.
-
-{{% /tab %}}
-
-
-{{% tab name="macOS에서의 Bash" %}}
-
-
-### 소개
-
-Bash의 kubectl 완성 스크립트는 `kubectl completion bash` 로 생성할 수 있다. 이 스크립트를 셸에 소싱하면 kubectl 완성이 가능하다.
-
-그러나 kubectl 완성 스크립트는 미리 [**bash-completion**](https://github.com/scop/bash-completion)을 설치해야 동작한다.
-
-{{< warning>}}
-bash-completion에는 v1과 v2 두 가지 버전이 있다. v1은 Bash 3.2(macOS의 기본 설치 버전) 버전용이고, v2는 Bash 4.1 이상 버전용이다. kubectl 완성 스크립트는 bash-completion v1과 Bash 3.2 버전에서는 **작동하지 않는다**. **bash-completion v2** 와 **Bash 4.1 이상 버전** 이 필요하다. 따라서, macOS에서 kubectl 완성 기능을 올바르게 사용하려면, Bash 4.1 이상을 설치하고 사용해야한다([*지침*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba)). 다음의 내용에서는 Bash 4.1 이상(즉, 모든 Bash 버전 4.1 이상)을 사용한다고 가정한다.
-{{< /warning >}}
-
-### Bash 업그레이드
-
-여기의 지침에서는 Bash 4.1 이상을 사용한다고 가정한다. 다음을 실행하여 Bash 버전을 확인할 수 있다.
-
-```bash
-echo $BASH_VERSION
-```
-
-너무 오래된 버전인 경우, Homebrew를 사용하여 설치/업그레이드할 수 있다.
-
-```bash
-brew install bash
-```
-
-셸을 다시 로드하고 원하는 버전을 사용 중인지 확인한다.
-
-```bash
-echo $BASH_VERSION $SHELL
-```
-
-Homebrew는 보통 `/usr/local/bin/bash` 에 설치한다.
-
-### bash-completion 설치
-
-{{< note >}}
-언급한 바와 같이, 이 지침에서는 Bash 4.1 이상을 사용한다고 가정한다. 이는 bash-completion v2를 설치한다는 것을 의미한다(Bash 3.2 및 bash-completion v1의 경우, kubectl 완성이 작동하지 않음).
-{{< /note >}}
-
-bash-completion v2가 이미 설치되어 있는지 `type_init_completion` 으로 확인할 수 있다. 그렇지 않은 경우, Homebrew로 설치할 수 있다.
-
-```bash
-brew install bash-completion@2
-```
-
-이 명령의 출력에 명시된 바와 같이, `~/.bash_profile` 파일에 다음을 추가한다.
-
-```bash
-export BASH_COMPLETION_COMPAT_DIR="/usr/local/etc/bash_completion.d"
-[[ -r "/usr/local/etc/profile.d/bash_completion.sh" ]] && . "/usr/local/etc/profile.d/bash_completion.sh"
-```
-
-셸을 다시 로드하고 bash-completion v2가 올바르게 설치되었는지 `type _init_completion` 으로 확인한다.
-
-### kubectl 자동 완성 활성화
-
-이제 kubectl 완성 스크립트가 모든 셸 세션에서 제공되도록 해야 한다. 이를 수행하는 방법에는 여러 가지가 있다.
-
-- 완성 스크립트를 `~/.bash_profile` 파일에서 소싱한다.
-
-    ```bash
-    echo 'source <(kubectl completion bash)' >>~/.bash_profile
-    ```
-
-- 완성 스크립트를 `/usr/local/etc/bash_completion.d` 디렉터리에 추가한다.
-
-    ```bash
-    kubectl completion bash >/usr/local/etc/bash_completion.d/kubectl
-    ```
-
-- kubectl에 대한 앨리어스가 있는 경우, 해당 앨리어스로 작업하기 위해 셸 완성을 확장할 수 있다.
-
-    ```bash
-    echo 'alias k=kubectl' >>~/.bash_profile
-    echo 'complete -F __start_kubectl k' >>~/.bash_profile
-    ```
-
-- Homebrew로 kubectl을 설치한 경우([위](#macos에서-homebrew를-사용하여-설치)의 설명을 참고), kubectl 완성 스크립트는 이미 `/usr/local/etc/bash_completion.d/kubectl` 에 있어야 한다. 이 경우, 아무 것도 할 필요가 없다.
-
-   {{< note >}}
-   bash-completion v2의 Homebrew 설치는 `BASH_COMPLETION_COMPAT_DIR` 디렉터리의 모든 파일을 소싱하므로, 후자의 두 가지 방법이 적용된다.
-   {{< /note >}}
-
-어쨌든, 셸을 다시 로드 한 후에, kubectl 완성이 작동해야 한다.
-{{% /tab %}}
-
-{{% tab name="Zsh" %}}
-
-Zsh용 kubectl 완성 스크립트는 `kubectl completion zsh` 명령으로 생성할 수 있다. 셸에서 완성 스크립트를 소싱하면 kubectl 자동 완성 기능이 활성화된다.
-
-모든 셸 세션에서 사용하려면, `~/.zshrc` 파일에 다음을 추가한다.
-
-```zsh
-source <(kubectl completion zsh)
-```
-
-kubectl에 대한 앨리어스가 있는 경우, 해당 앨리어스로 작업하도록 셸 완성을 확장할 수 있다.
-
-```zsh
-echo 'alias k=kubectl' >>~/.zshrc
-echo 'complete -F __start_kubectl k' >>~/.zshrc
-```
-
-셸을 다시 로드 한 후, kubectl 자동 완성 기능이 작동해야 한다.
-
-`complete:13: command not found: compdef` 와 같은 오류가 발생하면, `~/.zshrc` 파일의 시작 부분에 다음을 추가한다.
-
-```zsh
-autoload -Uz compinit
-compinit
-```
-{{% /tab %}}
-{{< /tabs >}}
-
-## {{% heading "whatsnext" %}}
-
-* [Minikube 설치](https://minikube.sigs.k8s.io/docs/start/)
-* 클러스터 생성에 대한 자세한 내용은 [시작하기](/ko/docs/setup/)를 참고한다.
-* [애플리케이션을 시작하고 노출하는 방법에 대해 배운다.](/ko/docs/tasks/access-application-cluster/service-access-application-cluster/)
-* 직접 생성하지 않은 클러스터에 접근해야하는 경우,
-  [클러스터 접근 공유 문서](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)를 참고한다.
-* [kubectl 레퍼런스 문서](/ko/docs/reference/kubectl/kubectl/) 읽기
diff --git a/content/ko/docs/tutorials/hello-minikube.md b/content/ko/docs/tutorials/hello-minikube.md
index 8f3f515f31..39e57ff501 100644
--- a/content/ko/docs/tutorials/hello-minikube.md
+++ b/content/ko/docs/tutorials/hello-minikube.md
@@ -61,6 +61,22 @@ Katacode는 무료로 브라우저에서 쿠버네티스 환경을 제공한다.
 
 4. Katacoda 환경에서는: 30000 을 입력하고 **Display Port** 를 클릭.
 
+{{< note >}}
+`minikube dashboard` 명령을 내리면 대시보드 애드온과 프록시가 활성화되고 해당 프록시로 접속하는 기본 웹 브라우저 창이 열린다. 대시보드에서 디플로이먼트나 서비스와 같은 쿠버네티스 자원을 생성할 수 있다.
+
+root 환경에서 명령어를 실행하고 있다면, [URL을 이용하여 대시보드 접속하기](#open-dashboard-with-url)를 참고한다.
+
+`Ctrl+C` 를 눌러 프록시를 종료할 수 있다. 대시보드는 종료되지 않고 실행 상태로 남아 있다.
+{{< /note >}}
+
+## URL을 이용하여 대시보드 접속하기 {#open-dashboard-with-url}
+
+자동으로 웹 브라우저가 열리는 것을 원치 않는다면, 다음과 같은 명령어를 실행하여 대시보드 접속 URL을 출력할 수 있다:
+
+```shell
+minikube dashboard --url
+```
+
 ## 디플로이먼트 만들기
 
 쿠버네티스 [*파드*](/ko/docs/concepts/workloads/pods/)는 관리와
diff --git a/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html b/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
index f51d68e866..da8cce3e17 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
@@ -33,7 +33,7 @@ weight: 10
                 </p>
                 <p>쿠버네티스 클러스터는 두 가지 형태의 자원으로 구성된다.
                 <ul>
-                    <li><b>마스터</b>는 클러스터를 조율한다.</li>
+                    <li><b>컨트롤 플레인</b>은 클러스터를 조율한다.</li>
                     <li><b>노드</b>는 애플리케이션을 구동하는 작업자(worker)이다.</li>
                 </ul>
                 </p>
@@ -71,20 +71,20 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <p><b>마스터는 클러스터 관리를 담당한다.</b> 마스터는 애플리케이션을 스케줄링하거나, 애플리케이션의 항상성을 유지하거나, 애플리케이션을 스케일링하고, 새로운 변경사항을 순서대로 반영(rolling out)하는 일과 같은 클러스터 내 모든 활동을 조율한다.</p>
-                <p><b>노드는 쿠버네티스 클러스터 내 워커 머신으로 동작하는 VM 또는 물리적인 컴퓨터다.</b> 각 노드는 노드를 관리하고 쿠버네티스 마스터와 통신하는 Kubelet이라는 에이전트를 갖는다. 노드는 컨테이너 운영을 담당하는 containerd 또는 도커와 같은 툴도 갖는다. 운영 트래픽을 처리하는 쿠버네티스 클러스터는 최소 세 대의 노드를 가져야 한다.</p>
+                <p><b>컨트롤 플레인은 클러스터 관리를 담당한다.</b> 컨트롤 플레인은 애플리케이션을 스케줄링하거나, 애플리케이션의 항상성을 유지하거나, 애플리케이션을 스케일링하고, 새로운 변경사항을 순서대로 반영(rolling out)하는 일과 같은 클러스터 내 모든 활동을 조율한다.</p>
+                <p><b>노드는 쿠버네티스 클러스터 내 워커 머신으로 동작하는 VM 또는 물리적인 컴퓨터다.</b> 각 노드는 노드를 관리하고 쿠버네티스 컨트롤 플레인과 통신하는 Kubelet이라는 에이전트를 갖는다. 노드는 컨테이너 운영을 담당하는 containerd 또는 도커와 같은 툴도 갖는다. 운영 트래픽을 처리하는 쿠버네티스 클러스터는 최소 세 대의 노드를 가져야 한다.</p>
 
             </div>
             <div class="col-md-4">
                 <div class="content__box content__box_fill">
-                    <p><i>마스터는 실행 중인 애플리케이션을 호스팅하기 위해 사용되는 노드와 클러스터를 관리한다. </i></p>
+                    <p><i>컨트롤 플레인은 실행 중인 애플리케이션을 호스팅하기 위해 사용되는 노드와 클러스터를 관리한다. </i></p>
                 </div>
             </div>
         </div>
 
         <div class="row">
             <div class="col-md-8">
-                <p>애플리케이션을 쿠버네티스에 배포하기 위해서는, 마스터에 애플리케이션 컨테이너의 구동을 지시하면 된다. 그러면 마스터는 컨테이너를 클러스터의 어느 노드에 구동시킬지 스케줄한다. <b>노드는 마스터가 제공하는 <a href="/ko/docs/concepts/overview/kubernetes-api/">쿠버네티스 API</a>를 통해서 마스터와 통신한다.</b> 최종 사용자도 쿠버네티스 API를 사용해서 클러스터와 직접 상호작용(interact)할 수 있다.</p>
+                <p>애플리케이션을 쿠버네티스에 배포하기 위해서는, 컨트롤 플레인에 애플리케이션 컨테이너의 구동을 지시하면 된다. 그러면 컨트롤 플레인은 컨테이너를 클러스터의 어느 노드에 구동시킬지 스케줄한다. <b>노드는 컨트롤 플레인이 제공하는 <a href="/ko/docs/concepts/overview/kubernetes-api/">쿠버네티스 API</a>를 통해서 컨트롤 플레인과 통신한다.</b> 최종 사용자도 쿠버네티스 API를 사용해서 클러스터와 직접 상호작용(interact)할 수 있다.</p>
 
                 <p>쿠버네티스 클러스터는 물리 및 가상 머신 모두에 설치될 수 있다. 쿠버네티스 개발을 시작하려면 Minikube를 사용할 수 있다. Minikube는 가벼운 쿠버네티스 구현체이며, 로컬 머신에 VM을 만들고 하나의 노드로 구성된 간단한 클러스터를 생성한다. Minikube는 리눅스, 맥, 그리고 윈도우 시스템에서 구동이 가능하다. Minikube CLI는 클러스터에 대해 시작, 중지, 상태 조회 및 삭제 등의 기본적인 부트스트래핑(bootstrapping) 기능을 제공한다. 하지만, 본 튜토리얼에서는 Minikube가 미리 설치된 채로 제공되는 온라인 터미널을 사용할 것이다.</p>
 
diff --git a/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
index 5b41fe207a..4c250c1272 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
@@ -31,7 +31,7 @@ weight: 10
                     일단 쿠버네티스 클러스터를 구동시키면, 그 위에 컨테이너화된 애플리케이션을 배포할 수 있다.
                     그러기 위해서, 쿠버네티스 <b>디플로이먼트</b> 설정을 만들어야 한다. 디플로이먼트는 쿠버네티스가
                     애플리케이션의 인스턴스를 어떻게 생성하고 업데이트해야 하는지를 지시한다. 디플로이먼트가 만들어지면,
-                    쿠버네티스 마스터가 해당 디플로이먼트에 포함된 애플리케이션 인스턴스가 클러스터의 개별 노드에서 실행되도록 스케줄한다.
+                    쿠버네티스 컨트롤 플레인이 해당 디플로이먼트에 포함된 애플리케이션 인스턴스가 클러스터의 개별 노드에서 실행되도록 스케줄한다.
                 </p>
 
                 <p>애플리케이션 인스턴스가 생성되면, 쿠버네티스 디플로이먼트 컨트롤러는 지속적으로 이들 인스턴스를
diff --git a/content/ko/docs/tutorials/services/source-ip.md b/content/ko/docs/tutorials/services/source-ip.md
index 9d47599589..dec30dc54b 100644
--- a/content/ko/docs/tutorials/services/source-ip.md
+++ b/content/ko/docs/tutorials/services/source-ip.md
@@ -412,7 +412,7 @@ client_address=198.51.100.79
 HTTP [Forwarded](https://tools.ietf.org/html/rfc7239#section-5.2)
 또는 [X-FORWARDED-FOR](https://en.wikipedia.org/wiki/X-Forwarded-For)
 헤더 또는
-[프록시 프로토콜](https://www.haproxy.org/download/1.5/doc/proxy-protocol.txt)과
+[프록시 프로토콜](https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt)과
 같은 로드밸런서와 백엔드 간에 합의된 프로토콜을 사용해야 한다.
 두 번째 범주의 로드밸런서는 서비스의 `service.spec.healthCheckNodePort` 필드의 저장된 포트를 가르키는
 HTTP 헬스 체크를 생성하여
diff --git a/content/ko/docs/tutorials/stateful-application/cassandra.md b/content/ko/docs/tutorials/stateful-application/cassandra.md
index 8273f3bcd9..0a420100ce 100644
--- a/content/ko/docs/tutorials/stateful-application/cassandra.md
+++ b/content/ko/docs/tutorials/stateful-application/cassandra.md
@@ -114,7 +114,7 @@ cassandra   ClusterIP   None         <none>        9042/TCP   45s
 kubectl apply -f https://k8s.io/examples/application/cassandra/cassandra-statefulset.yaml
 ```
 
-클러스터에 맞게 `cassandra-statefulset.yaml` 를 수정해야 하는 경우 다음을 다운로드 한 다음
+클러스터에 맞게 `cassandra-statefulset.yaml` 를 수정해야 하는 경우 다음을 다운로드한 다음
 수정된 버전을 저장한 폴더에서 해당 매니페스트를 적용한다.
 https://k8s.io/examples/application/cassandra/cassandra-statefulset.yaml
 ```shell
diff --git a/content/ko/docs/tutorials/stateless-application/guestbook.md b/content/ko/docs/tutorials/stateless-application/guestbook.md
index c91ecd2e1b..24e05ab77f 100644
--- a/content/ko/docs/tutorials/stateless-application/guestbook.md
+++ b/content/ko/docs/tutorials/stateless-application/guestbook.md
@@ -133,7 +133,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment
 1. 파드의 목록을 질의하여 세 개의 프론트엔드 복제본이 실행되고 있는지 확인한다.
 
       ```shell
-      kubectl get pods -l app=guestbook -l tier=frontend
+      kubectl get pods -l app.kubernetes.io/name=guestbook -l app.kubernetes.io/component=frontend
       ```
 
       결과는 아래와 같은 형태로 나타난다.

From eb4b67d8a22466c72cef5a0b2b7442b4d82b36aa Mon Sep 17 00:00:00 2001
From: Sergey Kanzhelev <S.Kanzhelev@live.com>
Date: Tue, 16 Mar 2021 23:22:10 -0700
Subject: [PATCH 216/788] Update
 content/en/docs/concepts/overview/working-with-objects/names.md

Co-authored-by: Celeste Horgan <celeste@cncf.io>
---
 .../en/docs/concepts/overview/working-with-objects/names.md    | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/overview/working-with-objects/names.md b/content/en/docs/concepts/overview/working-with-objects/names.md
index a74b59c71a..8e74eb5c0b 100644
--- a/content/en/docs/concepts/overview/working-with-objects/names.md
+++ b/content/en/docs/concepts/overview/working-with-objects/names.md
@@ -25,7 +25,7 @@ For non-unique user-provided attributes, Kubernetes provides [labels](/docs/conc
 {{< glossary_definition term_id="name" length="all" >}}
 
 {{< note >}}
-In cases when objects represent a physical entity (like Node represent a physical host), when host is re-created under the same name without deleting and re-creating a Node, Kubernetes will treat it as a same thing, which may lead to inconsistencies.
+In cases when objects represent a physical entity, like a Node representing a physical host, when the host is re-created under the same name without deleting and re-creating the Node, Kubernetes treats the new host as the old one, which may lead to inconsistencies.
 {{< /note >}}
 
 Below are three types of commonly used name constraints for resources.
@@ -90,4 +90,3 @@ UUIDs are standardized as ISO/IEC 9834-8 and as ITU-T X.667.
 
 * Read about [labels](/docs/concepts/overview/working-with-objects/labels/) in Kubernetes.
 * See the [Identifiers and Names in Kubernetes](https://git.k8s.io/community/contributors/design-proposals/architecture/identifiers.md) design document.
-

From 607e086ffdbd0e2c1a3896236b5ddff41eea573e Mon Sep 17 00:00:00 2001
From: Sergey Kanzhelev <S.Kanzhelev@live.com>
Date: Wed, 17 Mar 2021 06:26:30 +0000
Subject: [PATCH 217/788] converted Node to a separate section

---
 content/en/docs/concepts/architecture/nodes.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index 11343a2d8a..6f623ccc98 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -66,15 +66,15 @@ delete the Node object to stop that health checking.
 The name of a Node object must be a valid
 [DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
 
-{{< note >}}
+### Node name uniqueness
+
 The [name](/docs/concepts/overview/working-with-objects/names#names) identifies a Node. Two Nodes
 cannot have the same name at the same time. Kubernetes also assumes that a resource with the same
 name is the same object. In case of a Node, it is implicitly assumed that an instance using the
 same name will have the same state (e.g. network settings, root disk contents). This may lead to
-inconsistencies if you modify an instance without changing its name. If you want to replace a node, you should
-make sure to remove the existing
-Node object from API server.
-{{< /note >}}
+inconsistencies if an instance was modified without changing its name. If the Node needs to be
+replaced or updated significantly, the existing Node object needs to be removed from API server
+first and re-added after the update.
 
 ### Self-registration of Nodes
 

From b1ed2166e731f2e4643d677b86e57b00d79cb20a Mon Sep 17 00:00:00 2001
From: Andy Zhang <xiazhang@microsoft.com>
Date: Wed, 17 Mar 2021 15:03:33 +0800
Subject: [PATCH 218/788] Update volumes.md

---
 content/en/docs/concepts/storage/volumes.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 664ba515f9..fff6fd9ae6 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -161,6 +161,8 @@ Driver](https://github.com/kubernetes-sigs/azurefile-csi-driver)
 must be installed on the cluster and the `CSIMigration` and `CSIMigrationAzureFile`
 [feature gates](/docs/reference/command-line-tools-reference/feature-gates/) must be enabled.
 
+Azure File CSI driver does not support using same volume with different fsgroups, if Azurefile CSI migration is enabled, using same volume with different fsgroups won't be supported at all.
+
 ### cephfs
 
 A `cephfs` volume allows an existing CephFS volume to be

From c78dbec7ae5c62bcb2dcc41845af1e36b1314795 Mon Sep 17 00:00:00 2001
From: pacoxu <paco.xu@daocloud.io>
Date: Wed, 17 Mar 2021 16:00:06 +0800
Subject: [PATCH 219/788] add kubectl.kubernetes.io/default-container to well
 known annotations

---
 content/en/docs/reference/labels-annotations-taints.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 8f4327ceca..3d62069d40 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -254,3 +254,8 @@ Example: `node.cloudprovider.kubernetes.io/shutdown:NoSchedule`
 
 If a Node is in a cloud provider specified shutdown state, the Node gets tainted accordingly with `node.cloudprovider.kubernetes.io/shutdown` and the taint effect of `NoSchedule`.
 
+## kubectl.kubernetes.io/default-container
+
+Example: `kubectl.kubernetes.io/default-container:container1`
+
+If a Pod has the annotation `kubectl.kubernetes.io/default-container`, consumers (CLI, operators) know which is the default container. For example, `kubectl logs` or `kubectl exec` without `-c` or `--container` flag will use this default container. 

From 74ce07a55e89e424539be16b8bf259dd01004d4d Mon Sep 17 00:00:00 2001
From: Jeremy <hantmac@outlook.com>
Date: Wed, 17 Mar 2021 16:05:47 +0800
Subject: [PATCH 220/788] Update dns-custom-nameservers.md

---
 .../zh/docs/tasks/administer-cluster/dns-custom-nameservers.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
index 330416050c..5bf200e88c 100644
--- a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
+++ b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
@@ -155,7 +155,7 @@ data:
            ttl 30
         }
         prometheus :9153
-        forward ./etc/resolv.conf
+        forward . /etc/resolv.conf
         cache 30
         loop
         reload

From 34f1f44e47699642985265c69d9aa359586c4f30 Mon Sep 17 00:00:00 2001
From: vaibhav <t_vaibhav.goel@india.nec.com>
Date: Wed, 17 Mar 2021 14:00:09 +0530
Subject: [PATCH 221/788] Update the link to install service catalog using Helm

---
 .../tasks/service-catalog/install-service-catalog-using-helm.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md b/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md
index d558a271ad..af67241fc2 100644
--- a/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md
+++ b/content/en/docs/tasks/service-catalog/install-service-catalog-using-helm.md
@@ -33,7 +33,7 @@ Up to date information on this process can be found at the
 Once Helm is installed, add the *service-catalog* Helm repository to your local machine by executing the following command:
 
 ```shell
-helm repo add svc-cat https://svc-catalog-charts.storage.googleapis.com
+helm repo add svc-cat https://kubernetes-sigs.github.io/service-catalog
 ```
 
 Check to make sure that it installed successfully by executing the following command:

From 4dcbe54fb6e6034493d43bb3e2726c56f92be9c4 Mon Sep 17 00:00:00 2001
From: Naoki Oketani <okepy.naoki@gmail.com>
Date: Wed, 17 Mar 2021 20:26:20 +0900
Subject: [PATCH 222/788] apply suggestion

---
 .../configmap-secret/managing-secret-using-config-file.md     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
index 170fa6bd9d..fad8ab80ac 100644
--- a/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
+++ b/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -15,7 +15,7 @@ description: リソース設定ファイルを使用してSecretを作成する
 
 ## 設定ファイルを作成する
 
-先にJSONやYAML形式のファイルでSecretを作成してから、そのオブジェクトを作成することができます。
+あらかじめYAMLまたはJSON形式でSecretのマニフェストを作成したうえで、オブジェクトを作成することができます。
 [Secret](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#secret-v1-core)リソースには、`data`と`stringData`の2つのマップが含まれています。
 `data`フィールドは任意のデータを格納するのに使用され、base64でエンコードされます。
 `stringData`フィールドは利便性のために用意されており、Secretデータをエンコードされていない文字列として提供することができます。
@@ -60,7 +60,7 @@ data:
 
 {{< note >}}
 SecretデータのシリアライズされたJSONおよびYAMLの値は、base64文字列としてエンコードされます。
-これらの文字列の中では、改行は有効ではなく、省略する必要があります。
+文字列の中の改行は不正で、含まれていてはなりません。
 Darwin/macOSで`base64`ユーティリティーを使用する場合、長い行を分割するために`-b`オプションを使用するのは避けるべきです。
 逆に、Linux ユーザーは、`base64` コマンドにオプション`-w 0`を追加するか、`-w`オプションが利用できない場合には、パイプライン`base64 | tr -d '\n'`を追加する*必要があります*。
 {{< /note >}}

From 04c41cb89fe0f3460a07035675a032dab567d545 Mon Sep 17 00:00:00 2001
From: Naoki Oketani <okepy.naoki@gmail.com>
Date: Wed, 17 Mar 2021 20:27:58 +0900
Subject: [PATCH 223/788] apply suggestion

---
 .../tasks/configmap-secret/managing-secret-using-config-file.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
index fad8ab80ac..f9572ca1f4 100644
--- a/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
+++ b/content/ja/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -60,7 +60,7 @@ data:
 
 {{< note >}}
 SecretデータのシリアライズされたJSONおよびYAMLの値は、base64文字列としてエンコードされます。
-文字列の中の改行は不正で、含まれていてはなりません。
+文字列中の改行は不正で、含まれていてはなりません。
 Darwin/macOSで`base64`ユーティリティーを使用する場合、長い行を分割するために`-b`オプションを使用するのは避けるべきです。
 逆に、Linux ユーザーは、`base64` コマンドにオプション`-w 0`を追加するか、`-w`オプションが利用できない場合には、パイプライン`base64 | tr -d '\n'`を追加する*必要があります*。
 {{< /note >}}

From 5805ef3738aa4bfe0bf510cacd642fefb874807e Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 17 Mar 2021 20:21:46 +0800
Subject: [PATCH 224/788] [zh] Sync install-kubeadm

---
 .../tools/kubeadm/install-kubeadm.md          | 99 ++++++++++---------
 1 file changed, 52 insertions(+), 47 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 5e2e21d97b..3e2b2c63d6 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -30,14 +30,7 @@ For information how to create a cluster with kubeadm once you have performed thi
 ## {{% heading "prerequisites" %}}
 
 <!--
-* One or more machines running one of:
-  - Ubuntu 16.04+
-  - Debian 9+
-  - CentOS 7+
-  - Red Hat Enterprise Linux (RHEL) 7+
-  - Fedora 25+
-  - HypriotOS v1.0.1+
-  - Flatcar Container Linux (tested with 2512.3.0)
+* A compatible Linux host. The Kubernetes project provides generic instructions for Linux distributions based on Debian and Red Hat, and those distributions without a package manager.
 * 2 GB or more of RAM per machine (any less will leave little room for your apps)
 * 2 CPUs or more
 * Full network connectivity between all machines in the cluster (public or private network is fine)
@@ -45,14 +38,8 @@ For information how to create a cluster with kubeadm once you have performed thi
 * Certain ports are open on your machines. See [here](#check-required-ports) for more details.
 * Swap disabled. You **MUST** disable swap in order for the kubelet to work properly.
 -->
-* 一台或多台运行着下列系统的机器：
-  - Ubuntu 16.04+
-  - Debian 9+
-  - CentOS 7+
-  - Red Hat Enterprise Linux (RHEL) 7+
-  - Fedora 25+
-  - HypriotOS v1.0.1+
-  - Flatcar Container Linux （使用 2512.3.0 版本测试通过）
+* 一台兼容的 Linux 主机。Kubernetes 项目为基于 Debian 和 Red Hat 的 Linux
+  发行版以及一些不提供包管理器的发行版提供通用的指令
 * 每台机器 2 GB 或更多的 RAM （如果少于这个数字将会影响你应用的运行内存)
 * 2 CPU 核或更多
 * 集群中的所有机器的网络彼此均能相互连接(公网和内网都可以)
@@ -211,7 +198,7 @@ The following table lists container runtimes and their associated socket paths:
 
 | Runtime    | Domain Socket                   |
 |------------|---------------------------------|
-| Docker     | /var/run/docker.sock            |
+| Docker     | /var/run/dockershim.sock            |
 | containerd | /run/containerd/containerd.sock |
 | CRI-O      | /var/run/crio/crio.sock         |
 -->
@@ -225,7 +212,7 @@ The following table lists container runtimes and their associated socket paths:
 
 | 运行时     | 域套接字                         |
 |------------|----------------------------------|
-| Docker     | /var/run/docker.sock             |
+| Docker     | /var/run/dockershim.sock             |
 | containerd | /run/containerd/containerd.sock  |
 | CRI-O      | /var/run/crio/crio.sock          |
 
@@ -289,7 +276,7 @@ kubelet and the control plane is supported, but the kubelet version may never ex
 server version. For example, kubelets running 1.7.0 should be fully compatible with a 1.8.0 API server,
 but not vice versa.
 
-For information about installing `kubectl`, see [Install and set up kubectl](/docs/tasks/tools/install-kubectl/).
+For information about installing `kubectl`, see [Install and set up kubectl](/docs/tasks/tools/).
 -->
 ## 安装 kubeadm、kubelet 和 kubectl
 
@@ -308,7 +295,7 @@ kubeadm **不能** 帮你安装或者管理 `kubelet` 或 `kubectl`，所以你
 的版本不可以超过 API 服务器的版本。
 例如，1.7.0 版本的 kubelet 可以完全兼容 1.8.0 版本的 API 服务器，反之则不可以。
 
-有关安装 `kubectl` 的信息，请参阅[安装和设置 kubectl](/zh/docs/tasks/tools/install-kubectl/)文档。
+有关安装 `kubectl` 的信息，请参阅[安装和设置 kubectl](/zh/docs/tasks/tools/)文档。
 
 {{< warning >}}
 <!--
@@ -332,22 +319,50 @@ For more information on version skews, see:
 * Kubeadm 特定的[版本偏差策略](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#version-skew-policy)
 
 {{< tabs name="k8s_install" >}}
-{{% tab name="Ubuntu、Debian 或 HypriotOS" %}}
+{{% tab name="基于 Debian 的发行版" %}}
 
-```bash
-sudo apt-get update && sudo apt-get install -y apt-transport-https curl
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-cat <<EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list
-deb https://apt.kubernetes.io/ kubernetes-xenial main
-EOF
-sudo apt-get update
-sudo apt-get install -y kubelet kubeadm kubectl
-sudo apt-mark hold kubelet kubeadm kubectl
-```
+<!--
+1. Update the `apt` package index and install packages needed to use the Kubernetes `apt` repository:
+-->
+1. 更新 `apt` 包索引并安装使用 Kubernetes `apt` 仓库所需要的包：
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y apt-transport-https ca-certificates curl
+   ```
+
+<!--
+2. Download the Google Cloud public signing key:
+-->
+2. 下载 Google Cloud 公开签名秘钥：
+
+   ```shell
+   sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   ```
+
+<!--
+3. Add the Kubernetes `apt` repository:
+-->
+3. 添加 Kubernetes `apt` 仓库：
+
+   ```shell
+   echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
+   ```
+
+<!--
+4. Update `apt` package index, install kubelet, kubeadm and kubectl, and pin their version:
+-->
+4. 更新 `apt` 包索引，安装 kubelet、kubeadm 和 kubectl，并锁定其版本：
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y kubelet kubeadm kubectl
+   sudo apt-mark hold kubelet kubeadm kubectl
+   ```
 
 {{% /tab %}}
 
-{{% tab name="CentOS、RHEL 或 Fedora" %}}
+{{% tab name="基于 Red Hat 的发行版" %}}
 
 ```bash
 cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
@@ -391,7 +406,7 @@ systemctl enable --now kubelet
   配置是 kubeadm 所不支持的。
 
 {{% /tab %}}
-{{% tab name="Fedora CoreOS 或 Flatcar Container Linux" %}}
+{{% tab name="无包管理器的情况" %}}
 
 <!--
 Install CNI plugins (required for most pod network):
@@ -411,11 +426,11 @@ Define the directory to download command files
 
 {{< note >}}
 <!--
-The DOWNLOAD_DIR variable must be set to a writable directory.
-If you are running Flatcar Container Linux, set DOWNLOAD_DIR=/opt/bin.
+The `DOWNLOAD_DIR` variable must be set to a writable directory.
+If you are running Flatcar Container Linux, set `DOWNLOAD_DIR=/opt/bin`.
 -->
-DOWNLOAD_DIR 变量必须被设置为一个可写入的目录。
-如果你在运行 Flatcar Container Linux，可将 DOWNLOAD_DIR 设置为 /opt/bin。
+`DOWNLOAD_DIR` 变量必须被设置为一个可写入的目录。
+如果你在运行 Flatcar Container Linux，可将 `DOWNLOAD_DIR` 设置为 `/opt/bin`。
 {{< /note >}}
 
 ```bash
@@ -531,16 +546,6 @@ or `/etc/default/kubelet`(`/etc/sysconfig/kubelet` for RPMs), please remove it a
 `/var/lib/kubelet/config.yaml` 文件中）。
 {{< /note >}}
 
-<!--
-Restarting the kubelet is required:
--->
-需要重新启动 kubelet：
-
-```bash
-sudo systemctl daemon-reload
-sudo systemctl restart kubelet
-```
-
 <!--
 The automatic detection of cgroup driver for other container runtimes
 like CRI-O and containerd is work in progress.

From 4cff5d40c77d666aaba90051eec2f05740efe9b9 Mon Sep 17 00:00:00 2001
From: Urvashi Mohnani <umohnani@redhat.com>
Date: Tue, 2 Mar 2021 13:37:54 -0500
Subject: [PATCH 225/788] Update docs for CRIContainerLogRotation

Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
---
 .../en/docs/concepts/cluster-administration/logging.md   | 5 ++++-
 content/en/docs/concepts/policy/resource-quotas.md       | 4 ++++
 .../command-line-tools-reference/feature-gates.md        | 9 ++++++---
 .../reference/command-line-tools-reference/kubelet.md    | 5 ++---
 4 files changed, 16 insertions(+), 7 deletions(-)

diff --git a/content/en/docs/concepts/cluster-administration/logging.md b/content/en/docs/concepts/cluster-administration/logging.md
index d8c0a0615c..e75fdea4a5 100644
--- a/content/en/docs/concepts/cluster-administration/logging.md
+++ b/content/en/docs/concepts/cluster-administration/logging.md
@@ -83,12 +83,15 @@ As an example, you can find detailed information about how `kube-up.sh` sets
 up logging for COS image on GCP in the corresponding
 [`configure-helper` script](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh).
 
+When using a **CRI container runtime**, the kubelet is responsible for rotating the logs and managing the logging directory structure. The kubelet
+sends this information to the CRI container runtime and the runtime writes the container logs to the given location. The two kubelet flags `container-log-max-size` and `container-log-max-files` can be used to configure the maximum size for each log file and the maximum number of files allowed for each container respectively.
+
 When you run [`kubectl logs`](/docs/reference/generated/kubectl/kubectl-commands#logs) as in
 the basic logging example, the kubelet on the node handles the request and
 reads directly from the log file. The kubelet returns the content of the log file.
 
 {{< note >}}
-If an external system has performed the rotation,
+If an external system has performed the rotation or a CRI container runtime is used,
 only the contents of the latest log file will be available through
 `kubectl logs`. For example, if there's a 10MB file, `logrotate` performs
 the rotation and there are two files: one file that is 10MB in size and a second file that is empty.
diff --git a/content/en/docs/concepts/policy/resource-quotas.md b/content/en/docs/concepts/policy/resource-quotas.md
index 034458b8e9..1d0e9d4ecd 100644
--- a/content/en/docs/concepts/policy/resource-quotas.md
+++ b/content/en/docs/concepts/policy/resource-quotas.md
@@ -124,6 +124,10 @@ In release 1.8, quota support for local ephemeral storage is added as an alpha f
 | `limits.ephemeral-storage` | Across all pods in the namespace, the sum of local ephemeral storage limits cannot exceed this value. |
 | `ephemeral-storage` | Same as `requests.ephemeral-storage`. |
 
+{{< note >}}
+When using a CRI container runtime, container logs will count against the ephemeral storage quota. This can result in the unexpected eviction of pods that have exhausted their storage quotas. Refer to [Logging Architecture](/docs/concepts/cluster-administration/logging/) for details.
+{{< /note >}}
+
 ## Object Count Quota
 
 You can set quota for the total number of certain resources of all standard,
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 415c5a57b5..6c72ef1569 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -62,8 +62,6 @@ different Kubernetes components.
 | `BoundServiceAccountTokenVolume` | `false` | Alpha | 1.13 | |
 | `CPUManager` | `false` | Alpha | 1.8 | 1.9 |
 | `CPUManager` | `true` | Beta | 1.10 | |
-| `CRIContainerLogRotation` | `false` | Alpha | 1.10 | 1.10 |
-| `CRIContainerLogRotation` | `true` | Beta| 1.11 | |
 | `CSIInlineVolume` | `false` | Alpha | 1.15 | 1.15 |
 | `CSIInlineVolume` | `true` | Beta | 1.16 | - |
 | `CSIMigration` | `false` | Alpha | 1.14 | 1.16 |
@@ -199,6 +197,9 @@ different Kubernetes components.
 | `BlockVolume` | `false` | Alpha | 1.9 | 1.12 |
 | `BlockVolume` | `true` | Beta | 1.13 | 1.17 |
 | `BlockVolume` | `true` | GA | 1.18 | - |
+| `CRIContainerLogRotation` | `false` | Alpha | 1.10 | 1.10 |
+| `CRIContainerLogRotation` | `true` | Beta | 1.11 | 1.20 |
+| `CRIContainerLogRotation` | `true` | GA | 1.21 | - |
 | `CSIBlockVolume` | `false` | Alpha | 1.11 | 1.13 |
 | `CSIBlockVolume` | `true` | Beta | 1.14 | 1.17 |
 | `CSIBlockVolume` | `true` | GA | 1.18 | - |
@@ -449,7 +450,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
    for more details.
 - `CPUManager`: Enable container level CPU affinity support, see
   [CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/).
-- `CRIContainerLogRotation`: Enable container log rotation for cri container runtime.
+- `CRIContainerLogRotation`: Enable container log rotation for CRI container runtime. The default max size of a log file is 10MB and the
+  default max number of log files allowed for a container is 5. These values can be configured in the kubelet config.
+  See the [logging at node level](/docs/concepts/cluster-administration/logging/#logging-at-the-node-level) documentation for more details.
 - `CSIBlockVolume`: Enable external CSI volume drivers to support block storage.
   See the [`csi` raw block volume support](/docs/concepts/storage/volumes/#csi-raw-block-volume-support)
   documentation for more details.
diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet.md b/content/en/docs/reference/command-line-tools-reference/kubelet.md
index fdd85997eb..772da7f45d 100644
--- a/content/en/docs/reference/command-line-tools-reference/kubelet.md
+++ b/content/en/docs/reference/command-line-tools-reference/kubelet.md
@@ -224,14 +224,14 @@ kubelet [flags]
 <td colspan="2">--container-log-max-files int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Set the maximum number of container log files that can be present for a container. The number must be &ge; 2. This flag can only be used with `--container-runtime=remote`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Set the maximum number of container log files that can be present for a container. The number must be &ge; 2. This flag can only be used with `--container-runtime=remote`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--container-log-max-size string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `10Mi`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Set the maximum size (e.g. 10Mi) of container log file before it is rotated. This flag can only be used with `--container-runtime=remote`.  (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Set the maximum size (e.g. 10Mi) of container log file before it is rotated. This flag can only be used with `--container-runtime=remote`.  (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
@@ -462,7 +462,6 @@ AppArmor=true|false (BETA - default=true)<br/>
 BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>
 BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>
 CPUManager=true|false (BETA - default=true)<br/>
-CRIContainerLogRotation=true|false (BETA - default=true)<br/>
 CSIInlineVolume=true|false (BETA - default=true)<br/>
 CSIMigration=true|false (BETA - default=true)<br/>
 CSIMigrationAWS=true|false (BETA - default=false)<br/>

From 449d06ec0ebb96614cb47b14de6b358747c07577 Mon Sep 17 00:00:00 2001
From: "mengjiao.liu" <mengjiao.liu@daocloud.io>
Date: Wed, 17 Mar 2021 23:05:50 +0800
Subject: [PATCH 226/788] [zh] Sync content/en/docs/concepts/storage/volumes.md

---
 content/zh/docs/concepts/storage/volumes.md | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/storage/volumes.md b/content/zh/docs/concepts/storage/volumes.md
index 6db5ade818..5711035c23 100644
--- a/content/zh/docs/concepts/storage/volumes.md
+++ b/content/zh/docs/concepts/storage/volumes.md
@@ -56,13 +56,14 @@ can use any number of volume types simultaneously.
 Ephemeral volume types have a lifetime of a pod, but persistent volumes exist beyond
 the lifetime of a pod. Consequently, a volume outlives any containers
 that run within the pod, and data is preserved across container restarts. When a
-pod ceases to exist, the volume is destroyed.
+pod ceases to exist, Kubernetes destroys ephemeral volumes; however, Kubernetes does not
+destroy persistent volumes.
 -->
 Kubernetes 支持很多类型的卷。
 {{< glossary_tooltip term_id="pod" text="Pod" >}} 可以同时使用任意数目的卷类型。
 临时卷类型的生命周期与 Pod 相同，但持久卷可以比 Pod 的存活期长。
 因此，卷的存在时间会超出 Pod 中运行的所有容器，并且在容器重新启动时数据也会得到保留。
-当 Pod 不再存在时，卷也将不再存在。
+当 Pod 不再存在时，临时卷也将不再存在。但是持久卷会继续存在。
 
 <!--
 At its core, a volume is just a directory, possibly with some data in it, which
@@ -179,6 +180,11 @@ spec:
       fsType: ext4
 ```
 
+<!--
+If the EBS volume is partitioned, you can supply the optional field `partition: "<partition number>"` to specify which parition to mount on.
+-->
+如果 EBS 卷是分区的，你可以提供可选的字段 `partition: "<partition number>"` 来指定要挂载到哪个分区上。
+
 <!--
 #### AWS EBS CSI migration
 -->

From 09cf80c310bbf2f1adcbca14112e28e017f9e260 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Wed, 17 Mar 2021 18:10:18 +0000
Subject: [PATCH 227/788] Tweak task for Indexed completion Job example

Tidying for changes in commit 552566fcfac4977b12676c203cf5225e7b764200
---
 .../job/indexed-parallel-processing-static.md | 44 ++++++++++++-------
 1 file changed, 29 insertions(+), 15 deletions(-)

diff --git a/content/en/docs/tasks/job/indexed-parallel-processing-static.md b/content/en/docs/tasks/job/indexed-parallel-processing-static.md
index 57d771ef14..08ada55471 100644
--- a/content/en/docs/tasks/job/indexed-parallel-processing-static.md
+++ b/content/en/docs/tasks/job/indexed-parallel-processing-static.md
@@ -17,7 +17,7 @@ _index number_ that the control plane sets automatically, which allows each Pod
 to identify which part of the overall task to work on.
 
 The pod index is available in the {{< glossary_tooltip text="annotation" term_id="annotation" >}}
-`batch.kubernetes.io/job-completion-index` as string representing its
+`batch.kubernetes.io/job-completion-index` as a string representing its
 decimal value. In order for the containerized task process to obtain this index,
 you can publish the value of the annotation using the [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/#the-downward-api)
 mechanism.
@@ -26,14 +26,14 @@ expose the index in the `JOB_COMPLETION_INDEX` environment variable.
 
 Here is an overview of the steps in this example:
 
-1. **Create an image that can read the pod index**. You might modify the worker
-   program or add a script wrapper.
-2. **Start an Indexed Job**. The downward API allows you to pass the annotation
-   as an environment variable or file to the container.
+1. **Define a Job manifest using indexed completion**.
+   The downward API allows you to pass the pod index annotation as an
+   environment variable or file to the container.
+2. **Start an `Indexed` Job based on that manifest**.
 
 ## {{% heading "prerequisites" %}}
 
-Be familiar with the basic,
+You should already be familiar with the basic,
 non-parallel, use of [Job](/docs/concepts/workloads/controllers/job/).
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
@@ -57,7 +57,7 @@ To access the work item from the worker program, you have a few options:
 1. Assuming that you can't modify the program, you can wrap it with a script
    that reads the index using any of the methods above and converts it into
    something that the program can use as input.
-  
+
 For this example, imagine that you chose option 3 and you want to run the
 [rev](https://man7.org/linux/man-pages/man1/rev.1.html) utility. This
 program accepts a file as an argument and prints its content reversed.
@@ -66,13 +66,21 @@ program accepts a file as an argument and prints its content reversed.
 rev data.txt
 ```
 
-For this example, you'll use the `rev` tool from the
+You'll use the `rev` tool from the
 [`busybox`](https://hub.docker.com/_/busybox) container image.
 
+As this is only an example, each Pod only does a tiny piece of work (reversing a short
+string). In a real workload you might, for example, create a Job that represents
+ the
+task of producing 60 seconds of video based on scene data.
+Each work item in the video rendering Job would be to render a particular
+frame of that video clip. Indexed completion would mean that each Pod in
+the Job knows which frame to render and publish, by counting frames from
+the start of the clip.
+
 ## Define an Indexed Job
 
-Here is a job definition. You'll need to edit the container image to match your
-preferred registry.
+Here is a sample Job manifest that uses `Indexed` completion mode:
 
 {{< codenew language="yaml" file="application/job/indexed-job.yaml" >}}
 
@@ -96,10 +104,15 @@ like shown in the following example:
 Now run the Job:
 
 ```shell
-kubectl apply -f ./indexed-job.yaml
+# This uses the first approach (relying on $JOB_COMPLETION_INDEX)
+kubectl apply -f https://kubernetes.io/examples/application/job/indexed-job.yaml
 ```
 
-Wait a bit, then check on the job:
+When you create this Job, the control plane creates a series of Pods, one for each index you specified. The value of `.spec.parallelism` determines how many can run at once whereas `.spec.completions` determines how many Pods the Job creates in total.
+
+Because `.spec.parallelism` is less than `.spec.completions`, the control plane waits for some of the first Pods to complete before starting more of them.
+
+Once you have created the Job, wait a moment then check on progress:
 
 ```shell
 kubectl describe jobs/indexed-job
@@ -162,13 +175,14 @@ Events:
   Normal  SuccessfulCreate  1s    job-controller  Created pod: indexed-job-ncslj
 ```
 
-In this example, we run the job with custom values for each index. You can
-inspect the output of the pods:
+In this example, you run the Job with custom values for each index. You can
+inspect the output of one of the pods:
 
 ```shell
-kubectl logs indexed-job-fdhq5 # Change this to match the name of a Pod in your cluster.
+kubectl logs indexed-job-fdhq5 # Change this to match the name of a Pod from that Job
 ```
 
+
 The output is similar to:
 
 ```

From ebd67aaabda0c4f1e6bc79d5649035df54f400ea Mon Sep 17 00:00:00 2001
From: AlexDamiao86 <alex_maiabr@hotmail.com>
Date: Wed, 17 Mar 2021 15:31:29 -0300
Subject: [PATCH 228/788] Add Scale your App in Portuguese

---
 .../tutorials/kubernetes-basics/_index.html   |   4 +-
 .../kubernetes-basics/expose/_index.md        |   2 +-
 .../expose/expose-interactive.html            |   4 +-
 .../expose/expose-intro.html                  |   2 +-
 .../kubernetes-basics/scale/_index.md         |   4 +
 .../scale/scale-interactive.html              |  40 ++++++
 .../kubernetes-basics/scale/scale-intro.html  | 121 ++++++++++++++++++
 7 files changed, 171 insertions(+), 6 deletions(-)
 create mode 100644 content/pt/docs/tutorials/kubernetes-basics/scale/_index.md
 create mode 100644 content/pt/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
 create mode 100644 content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html

diff --git a/content/pt/docs/tutorials/kubernetes-basics/_index.html b/content/pt/docs/tutorials/kubernetes-basics/_index.html
index aabad1f782..b397afba37 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/_index.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/_index.html
@@ -90,9 +90,9 @@ card:
             </div>
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/scale/scale-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_05.svg?v=1469803628347" alt=""></a>
+                <a href="/pt/docs/tutorials/kubernetes-basics/scale/scale-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_05.svg?v=1469803628347" alt=""></a>
                 <div class="caption">
-                  <a href="/docs/tutorials/kubernetes-basics/scale/scale-intro/"><h5>5. Escale seu aplicativo</h5></a>
+                  <a href="/pt/docs/tutorials/kubernetes-basics/scale/scale-intro/"><h5>5. Escale seu aplicativo</h5></a>
                 </div>
               </div>
             </div>
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md b/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md
index 28a8de2f24..c8f0d50a0e 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md
@@ -1,4 +1,4 @@
 ---
-title: Exponha publicamente seu App
+title: Exponha publicamente seu aplicativo
 weight: 40
 ---
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index a816afda10..747dd711f7 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -1,5 +1,5 @@
 ---
-title: Tutorial Interativo - Expondo seu App
+title: Tutorial Interativo - Expondo seu aplicativo
 weight: 20
 ---
 
@@ -26,7 +26,7 @@ weight: 20
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Continuar para o Módulo 5<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Continue para o Módulo 5<span class="btn__next">›</span></a>
             </div>
         </div>
 
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
index 548892d678..4e66601116 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
@@ -1,5 +1,5 @@
 ---
-title: Utilizando um serviço para expor seu App
+title: Utilizando um serviço para expor seu aplicativo
 weight: 10
 ---
 
diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/_index.md b/content/pt/docs/tutorials/kubernetes-basics/scale/_index.md
new file mode 100644
index 0000000000..9e6d5b418e
--- /dev/null
+++ b/content/pt/docs/tutorials/kubernetes-basics/scale/_index.md
@@ -0,0 +1,4 @@
+---
+title: Escale seu aplicativo
+weight: 50
+---
diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
new file mode 100644
index 0000000000..a4ce38ded1
--- /dev/null
+++ b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -0,0 +1,40 @@
+---
+title: Tutorial Interativo - Escalando seu aplicativo
+weight: 20
+---
+
+<!DOCTYPE html>
+
+<html lang="en">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+<link href="/docs/tutorials/kubernetes-basics/public/css/overrides.css" rel="stylesheet">
+<script src="https://katacoda.com/embed.js"></script>
+
+<div class="layout" id="top">
+
+    <main class="content katacoda-content">
+
+        <div class="katacoda">
+            <div class="katacoda__alert">
+              Para interagir com o terminal, favor utilizar a versão desktop/tablet
+            </div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            </div>
+        </div>
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/update/update-intro/" role="button">Continue para o Módulo 6<span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+<a class="scrolltop" href="#top"></a>
+
+</div>
+
+</body>
+</html>
diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
new file mode 100644
index 0000000000..e5fd4b943b
--- /dev/null
+++ b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
@@ -0,0 +1,121 @@
+---
+title: Executando múltiplas instâncias de seu aplicativo
+weight: 10
+---
+
+<!DOCTYPE html>
+
+<html lang="en">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+
+<div class="layout" id="top">
+
+    <main class="content">
+
+        <div class="row">
+
+     <div class="col-md-8">
+          <h3>Objetivos</h3>
+                <ul>
+                    <li>Escalar uma aplicação usando kubectl.</li>
+                </ul>
+            </div>
+
+            <div class="col-md-8">
+       <h3>Escalando uma aplicação</h3>
+
+            <p>Nos módulos anteriores nós criamos um <a href="/docs/concepts/workloads/controllers/deployment/"> Deployment</a>, e então o expusemos publicamente através de um serviço (<a href="/docs/concepts/services-networking/service/">Service</a>). O Deployment criou apenas um único Pod para executar nossa aplicação. Quando o tráfego aumentar nós precisaremos escalar a aplicação para suportar a demanda de usuários.</p>
+
+            <p>O <b>escalonamento</b> é obtido pela mudança do número de réplicas em um Deployment</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_lined">
+                    <h3>Resumo:</h3>
+                    <ul>
+                        <li>Escalando um Deployment</li>
+                    </ul>
+                </div>
+                <div class="content__box content__box_fill">
+                    <p><i>Você pode criar desde o início um Deployment com múltiplas instâncias usando o parâmetro <code>--replicas</code> para o kubectl criar o comando de deployment</i></p>
+                </div>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2 style="color: #3771e3;">Scaling overview</h2>
+            </div>
+        </div>
+
+        <div class="row">
+            <div class="col-md-1"></div>
+            <div class="col-md-8">
+                <div id="myCarousel" class="carousel" data-ride="carousel" data-interval="3000">
+                    <ol class="carousel-indicators">
+                        <li data-target="#myCarousel" data-slide-to="0" class="active"></li>
+                        <li data-target="#myCarousel" data-slide-to="1"></li>
+                    </ol>
+                      <div class="carousel-inner" role="listbox">
+                        <div class="item carousel-item active">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_05_scaling1.svg">
+                        </div>
+
+                        <div class="item carousel-item">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_05_scaling2.svg">
+                        </div>
+                      </div>
+
+                      <a class="left carousel-control" href="#myCarousel" role="button" data-slide="prev">
+                        <span class="sr-only ">Anterior</span>
+                      </a>
+                      <a class="right carousel-control" href="#myCarousel" role="button" data-slide="next">
+                        <span class="sr-only">Próximo</span>
+                      </a>
+
+                    </div>
+            </div>
+        </div>
+
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+
+                <p>Escalar um Deployment garantirá que novos Pods serão criados e agendados para nós de processamento com recursos disponíveis. O escalonamento aumentará o número de Pods para o novo estado desejado. O Kubernetes também suporta o auto-escalonamento (<a href="/docs/user-guide/horizontal-pod-autoscaling/">autoscaling</a>) de Pods, mas isso está fora do escopo deste tutorial. Escalar para zero também é possível, e isso terminará todos Pods do Deployment especificado.</p>
+
+                <p>Executar múltiplas instâncias de uma aplicação irá requerer uma forma de distribuir o tráfego para todas elas. Serviços possuem um balanceador de carga integrado que distribuirá o tráfego de rede entre todos os Pods de um Deployment exposto. Serviços irão monitorar continuamente os Pods em execução usando endpoints para garantir que o tráfego seja enviado apenas para Pods disponíveis.</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_fill">
+                    <p><i>O Escalonamento é obtido pela mudança do número de réplicas em um Deployment.</i></p>
+                </div>
+            </div>
+        </div>
+
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <p>No momento que tiver múltiplas instâncias de uma aplicação em execução, será capaz de fazer <i>Rolling updates</i> sem indisponibilidade. Nós cobriremos isso no próximo módulo. Agora, vamos ao terminal online e escalar nossa aplicação.</p>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-interactive/" role="button">Iniciar tutorial interativo<span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>

From 06abcf6b4e8b237dd073bc7ae9dd2f3492efc6c2 Mon Sep 17 00:00:00 2001
From: AlexDamiao86 <alex_maiabr@hotmail.com>
Date: Wed, 17 Mar 2021 16:09:58 -0300
Subject: [PATCH 229/788] Update link explore to expose and expose to scale

---
 .../explore/explore-interactive.html                 |  2 +-
 .../kubernetes-basics/expose/expose-interactive.html |  2 +-
 .../kubernetes-basics/scale/scale-intro.html         | 12 ++++++------
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/pt/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/pt/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 08dd5736b2..d4d93e7f7d 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -29,7 +29,7 @@ weight: 20
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/expose/expose-intro/" role="button">Continue para o Módulo 4<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/pt/docs/tutorials/kubernetes-basics/expose/expose-intro/" role="button">Continue para o Módulo 4<span class="btn__next">›</span></a>
             </div>
         </div>
 
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 747dd711f7..cf24ae985e 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -26,7 +26,7 @@ weight: 20
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Continue para o Módulo 5<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/pt/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Continue para o Módulo 5<span class="btn__next">›</span></a>
             </div>
         </div>
 
diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
index e5fd4b943b..e90de368bb 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
@@ -40,7 +40,7 @@ weight: 10
                     </ul>
                 </div>
                 <div class="content__box content__box_fill">
-                    <p><i>Você pode criar desde o início um Deployment com múltiplas instâncias usando o parâmetro <code>--replicas</code> para o kubectl criar o comando de deployment</i></p>
+                    <p><i>Você pode criar desde o início um Deployment com múltiplas instâncias usando o parâmetro <code>--replicas</code> para que o kubectl crie o comando de deployment</i></p>
                 </div>
             </div>
         </div>
@@ -48,7 +48,7 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <h2 style="color: #3771e3;">Scaling overview</h2>
+                <h2 style="color: #3771e3;">Visão geral sobre escalonamento</h2>
             </div>
         </div>
 
@@ -86,9 +86,9 @@ weight: 10
         <div class="row">
             <div class="col-md-8">
 
-                <p>Escalar um Deployment garantirá que novos Pods serão criados e agendados para nós de processamento com recursos disponíveis. O escalonamento aumentará o número de Pods para o novo estado desejado. O Kubernetes também suporta o auto-escalonamento (<a href="/docs/user-guide/horizontal-pod-autoscaling/">autoscaling</a>) de Pods, mas isso está fora do escopo deste tutorial. Escalar para zero também é possível, e isso terminará todos Pods do Deployment especificado.</p>
+                <p>Escalar um Deployment garantirá que novos Pods serão criados e agendados para nós de processamento com recursos disponíveis. O escalonamento aumentará o número de Pods para o novo estado desejado. O Kubernetes também suporta o auto-escalonamento (<a href="/docs/user-guide/horizontal-pod-autoscaling/">autoscaling</a>) de Pods, mas isso está fora do escopo deste tutorial. Escalar para zero também é possível, e isso terminará todos os Pods do Deployment especificado.</p>
 
-                <p>Executar múltiplas instâncias de uma aplicação irá requerer uma forma de distribuir o tráfego para todas elas. Serviços possuem um balanceador de carga integrado que distribuirá o tráfego de rede entre todos os Pods de um Deployment exposto. Serviços irão monitorar continuamente os Pods em execução usando endpoints para garantir que o tráfego seja enviado apenas para Pods disponíveis.</p>
+                <p>Executar múltiplas instâncias de uma aplicação irá requerer uma forma de distribuir o tráfego entre todas elas. Serviços possuem um balanceador de carga integrado que distribuirá o tráfego de rede entre todos os Pods de um Deployment exposto. Serviços irão monitorar continuamente os Pods em execução usando endpoints para garantir que o tráfego seja enviado apenas para Pods disponíveis.</p>
 
             </div>
             <div class="col-md-4">
@@ -102,14 +102,14 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <p>No momento que tiver múltiplas instâncias de uma aplicação em execução, será capaz de fazer <i>Rolling updates</i> sem indisponibilidade. Nós cobriremos isso no próximo módulo. Agora, vamos ao terminal online e escalar nossa aplicação.</p>
+                <p>No momento em que tiver múltiplas instâncias de uma aplicação em execução, será capaz de fazer <i>Rolling updates</i> sem indisponibilidade. Nós cobriremos isso no próximo módulo. Agora, vamos ao terminal online e escalar nossa aplicação.</p>
             </div>
         </div>
         <br>
 
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-interactive/" role="button">Iniciar tutorial interativo<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/pt/docs/tutorials/kubernetes-basics/scale/scale-interactive/" role="button">Iniciar tutorial interativo<span class="btn__next">›</span></a>
             </div>
         </div>
 

From 46af548df037473b55261b827cd4c691928705e6 Mon Sep 17 00:00:00 2001
From: Aldo Culquicondor <acondor@google.com>
Date: Wed, 17 Mar 2021 15:53:33 -0400
Subject: [PATCH 230/788] Add well-known annotation for job-completion-index

Signed-off-by: Aldo Culquicondor <acondor@google.com>
---
 content/en/docs/reference/labels-annotations-taints.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 8f4327ceca..8671e1c8df 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -198,6 +198,15 @@ The kubelet can set this annotation on a Node to denote its configured IPv4 addr
 
 When kubelet is started with the "external" cloud provider, it sets this annotation on the Node to denote an IP address set from the command line flag (`--node-ip`). This IP is verified with the cloud provider as valid by the cloud-controller-manager.
 
+## batch.kubernetes.io/job-completion-index
+
+Example: `batch.kubernetes.io/job-completion-index: "3"`
+
+Used on: Pod
+
+The Job controller in the kube-controller-manager sets this annotation for Pods
+created with Indexed [completion mode](/docs/concepts/workloads/controllers/job/#completion-mode).
+
 **The taints listed below are always used on Nodes**
 
 ## node.kubernetes.io/not-ready

From b407a0103bac3bebba2a93d928aa4da9b0e828ba Mon Sep 17 00:00:00 2001
From: Jai Govindani <jai@honestbank.com>
Date: Thu, 18 Mar 2021 03:13:19 +0700
Subject: [PATCH 231/788] docs(configure-redis-using-configmap): update for
 clarity (#25712)

* docs(configure-redis-using-configmap): update for clarity

Signed-off-by: Jai Govindani <jai@honestbank.com>

* fix(configure-redis-using-configmap): incorrect volumeMount index

Signed-off-by: Jai Govindani <jai@honestbank.com>

* fix(configure-redis-using-configmap): show Pod status as Running, separate commands from output

Signed-off-by: Jai Govindani <jai@honestbank.com>

* fix(configure-redis-using-configmap): typo

Signed-off-by: Jai Govindani <jai@honestbank.com>

* fix(configure-redis-using-configmap): configmap name

Signed-off-by: Jai Govindani <jai@honestbank.com>
---
 .../configure-redis-using-configmap.md        | 228 ++++++++++++++----
 .../pods/config/example-redis-config.yaml     |   8 +
 2 files changed, 189 insertions(+), 47 deletions(-)
 create mode 100644 content/en/examples/pods/config/example-redis-config.yaml

diff --git a/content/en/docs/tutorials/configuration/configure-redis-using-configmap.md b/content/en/docs/tutorials/configuration/configure-redis-using-configmap.md
index 7555a58201..b29b352aca 100644
--- a/content/en/docs/tutorials/configuration/configure-redis-using-configmap.md
+++ b/content/en/docs/tutorials/configuration/configure-redis-using-configmap.md
@@ -15,10 +15,8 @@ This page provides a real world example of how to configure Redis using a Config
 ## {{% heading "objectives" %}}
 
 
-* Create a `kustomization.yaml` file containing:
-  * a ConfigMap generator
-  * a Pod resource config using the ConfigMap
-* Apply the directory by running `kubectl apply -k ./`
+* Create a ConfigMap with Redis configuration values
+* Create a Redis Pod that mounts and uses the created ConfigMap
 * Verify that the configuration was correctly applied.
 
 
@@ -38,82 +36,218 @@ This page provides a real world example of how to configure Redis using a Config
 
 ## Real World Example: Configuring Redis using a ConfigMap
 
-You can follow the steps below to configure a Redis cache using data stored in a ConfigMap.
+Follow the steps below to configure a Redis cache using data stored in a ConfigMap.
 
-First create a `kustomization.yaml` containing a ConfigMap from the `redis-config` file:
-
-{{< codenew file="pods/config/redis-config" >}}
+First create a ConfigMap with an empty configuration block:
 
 ```shell
-curl -OL https://k8s.io/examples/pods/config/redis-config
-
-cat <<EOF >./kustomization.yaml
-configMapGenerator:
-- name: example-redis-config
-  files:
-  - redis-config
+cat <<EOF >./example-redis-config.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-redis-config
+data:
+  redis-config: ""
 EOF
 ```
 
-Add the pod resource config to the `kustomization.yaml`:
+Apply the ConfigMap created above, along with a Redis pod manifest:
+
+```shell
+kubectl apply -f example-redis-config.yaml
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+```
+
+Examine the contents of the Redis pod manifest and note the following:
+
+* A volume named `config` is created by `spec.volumes[1]`
+* The `key` and `path` under `spec.volumes[1].items[0]` exposes the `redis-config` key from the 
+  `example-redis-config` ConfigMap as a file named `redis.conf` on the `config` volume.
+* The `config` volume is then mounted at `/redis-master` by `spec.containers[0].volumeMounts[1]`.
+
+This has the net effect of exposing the data in `data.redis-config` from the `example-redis-config`
+ConfigMap above as `/redis-master/redis.conf` inside the Pod.
 
 {{< codenew file="pods/config/redis-pod.yaml" >}}
 
-```shell
-curl -OL https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+Examine the created objects:
 
-cat <<EOF >>./kustomization.yaml
-resources:
-- redis-pod.yaml
-EOF
+```shell
+kubectl get pod/redis configmap/example-redis-config 
 ```
 
-Apply the kustomization directory to create both the ConfigMap and Pod objects:
+You should see the following output:
 
 ```shell
-kubectl apply -k .
-```
-
-Examine the created objects by
-```shell
-> kubectl get -k .
-NAME                                        DATA   AGE
-configmap/example-redis-config-dgh9dg555m   1      52s
-
 NAME        READY   STATUS    RESTARTS   AGE
-pod/redis   1/1     Running   0          52s
+pod/redis   1/1     Running   0          8s
+
+NAME                             DATA   AGE
+configmap/example-redis-config   1      14s
 ```
 
-In the example, the config volume is mounted at `/redis-master`.
-It uses `path` to add the `redis-config` key to a file named `redis.conf`.
-The file path for the redis config, therefore, is `/redis-master/redis.conf`.
-This is where the image will look for the config file for the redis master.
+Recall that we left `redis-config` key in the `example-redis-config` ConfigMap blank:
 
-Use `kubectl exec` to enter the pod and run the `redis-cli` tool to verify that
-the configuration was correctly applied:
+```shell
+kubectl describe configmap/example-redis-config
+```
+
+You should see an empty `redis-config` key:
+
+```shell
+Name:         example-redis-config
+Namespace:    default
+Labels:       <none>
+Annotations:  <none>
+
+Data
+====
+redis-config:
+```
+
+Use `kubectl exec` to enter the pod and run the `redis-cli` tool to check the current configuration:
 
 ```shell
 kubectl exec -it redis -- redis-cli
+```
+
+Check `maxmemory`:
+
+```shell
 127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+It should show the default value of 0:
+
+```shell
+1) "maxmemory"
+2) "0"
+```
+
+Similarly, check `maxmemory-policy`:
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+Which should also yield its default value of `noeviction`:
+
+```shell
+1) "maxmemory-policy"
+2) "noeviction"
+```
+
+Now let's add some configuration values to the `example-redis-config` ConfigMap:
+
+{{< codenew file="pods/config/example-redis-config.yaml" >}}
+
+Apply the updated ConfigMap:
+
+```shell
+kubectl apply -f example-redis-config.yaml
+```
+
+Confirm that the ConfigMap was updated:
+
+```shell
+kubectl describe configmap/example-redis-config
+```
+
+You should see the configuration values we just added:
+
+```shell
+Name:         example-redis-config
+Namespace:    default
+Labels:       <none>
+Annotations:  <none>
+
+Data
+====
+redis-config:
+----
+maxmemory 2mb
+maxmemory-policy allkeys-lru
+```
+
+Check the Redis Pod again using `redis-cli` via `kubectl exec` to see if the configuration was applied:
+
+```shell
+kubectl exec -it redis -- redis-cli
+```
+
+Check `maxmemory`:
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+It remains at the default value of 0:
+
+```shell
+1) "maxmemory"
+2) "0"
+```
+
+Similarly, `maxmemory-policy` remains at the `noeviction` default setting:
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+Returns:
+
+```shell
+1) "maxmemory-policy"
+2) "noeviction"
+```
+
+The configuration values have not changed because the Pod needs to be restarted to grab updated
+values from associated ConfigMaps. Let's delete and recreate the Pod:
+
+```shell
+kubectl delete pod redis
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+```
+
+Now re-check the configuration values one last time:
+
+```shell
+kubectl exec -it redis -- redis-cli
+```
+
+Check `maxmemory`:
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+It should now return the updated value of 2097152:
+
+```shell
 1) "maxmemory"
 2) "2097152"
+```
+
+Similarly, `maxmemory-policy` has also been updated:
+
+```shell
 127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+It now reflects the desired value of `allkeys-lru`:
+
+```shell
 1) "maxmemory-policy"
 2) "allkeys-lru"
 ```
 
-Delete the created pod:
+Clean up your work by deleting the created resources:
+
 ```shell
-kubectl delete pod redis
+kubectl delete pod/redis configmap/example-redis-config
 ```
 
-
-
 ## {{% heading "whatsnext" %}}
 
 
 * Learn more about [ConfigMaps](/docs/tasks/configure-pod-container/configure-pod-configmap/).
-
-
-
-
diff --git a/content/en/examples/pods/config/example-redis-config.yaml b/content/en/examples/pods/config/example-redis-config.yaml
new file mode 100644
index 0000000000..5b093b1213
--- /dev/null
+++ b/content/en/examples/pods/config/example-redis-config.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-redis-config
+data:
+  redis-config: |
+    maxmemory 2mb
+    maxmemory-policy allkeys-lru

From 1b12bb9cc4bc498008cd048fb737f4c3297204ae Mon Sep 17 00:00:00 2001
From: tibetsam <tibetsam@gmail.com>
Date: Wed, 17 Mar 2021 21:23:20 +0100
Subject: [PATCH 232/788] remove usage of the "certificates" API for cert
 renewal (#26841)

* remove usage of the "certificates" API for cert renewal

"--use-api" option is removed from kubeadm alpha certs renew command since k8s 1.19

* Update kubeadm-certs.md

* Update content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md

Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>

Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
---
 .../kubeadm/kubeadm-certs.md                  | 31 +------------------
 1 file changed, 1 insertion(+), 30 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index d9d8a5929e..56a6c25e9a 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -170,36 +170,7 @@ controllerManager:
 
 ### Create certificate signing requests (CSR)
 
-You can create the certificate signing requests for the Kubernetes certificates API with `kubeadm certs renew --use-api`.
-
-If you set up an external signer such as [cert-manager](https://github.com/jetstack/cert-manager), certificate signing requests (CSRs) are automatically approved.
-Otherwise, you must manually approve certificates with the [`kubectl certificate`](/docs/setup/best-practices/certificates/) command.
-The following kubeadm command outputs the name of the certificate to approve, then blocks and waits for approval to occur:
-
-```shell
-sudo kubeadm certs renew apiserver --use-api &
-```
-The output is similar to this:
-```
-[1] 2890
-[certs] certificate request "kubeadm-cert-kube-apiserver-ld526" created
-```
-
-### Approve certificate signing requests (CSR)
-
-If you set up an external signer, certificate signing requests (CSRs) are automatically approved.
-
-Otherwise, you must manually approve certificates with the [`kubectl certificate`](/docs/setup/best-practices/certificates/) command. e.g.
-
-```shell
-kubectl certificate approve kubeadm-cert-kube-apiserver-ld526
-```
-The output is similar to this:
-```shell
-certificatesigningrequest.certificates.k8s.io/kubeadm-cert-kube-apiserver-ld526 approved
-```
-
-You can view a list of pending certificates with `kubectl get csr`.
+See [Create CertificateSigningRequest](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest) for creating CSRs with the Kubernetes API.
 
 ## Renew certificates with external CA
 

From 10162f7776ba34f804146b1bc466cf6ee17b23f1 Mon Sep 17 00:00:00 2001
From: Mike Dame <mdame@redhat.com>
Date: Wed, 10 Mar 2021 12:16:54 -0500
Subject: [PATCH 233/788] Add description of replica controller scaledown sort
 logic

---
 .../docs/concepts/workloads/controllers/replicaset.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/content/en/docs/concepts/workloads/controllers/replicaset.md b/content/en/docs/concepts/workloads/controllers/replicaset.md
index e45d20c8f7..cade83afa5 100644
--- a/content/en/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/en/docs/concepts/workloads/controllers/replicaset.md
@@ -310,6 +310,17 @@ assuming that the number of replicas is not also changed).
 A ReplicaSet can be easily scaled up or down by simply updating the `.spec.replicas` field. The ReplicaSet controller
 ensures that a desired number of Pods with a matching label selector are available and operational.
 
+When scaling down, the ReplicaSet controller chooses which pods to delete by sorting the available pods to
+prioritize scaling down pods based on the following general algorithm:
+ 1. Pending (and unschedulable) pods are scaled down first
+ 2. If controller.kubernetes.io/pod-deletion-cost annotation is set, then
+    the pod with the lower value will come first.
+ 3. Pods on nodes with more replicas come before pods on nodes with fewer replicas.
+ 4. If the pods' creation times differ, the pod that was created more recently
+    comes before the older pod (the creation times are bucketed on an integer log scale)
+    
+If all of the above match, then selection is random.
+
 ### ReplicaSet as a Horizontal Pod Autoscaler Target
 
 A ReplicaSet can also be a target for

From 1c237dabfa1fa87eedcd539c6fcd5aa8b758ba0d Mon Sep 17 00:00:00 2001
From: Mike Patterson <mpatters72@users.noreply.github.com>
Date: Wed, 17 Mar 2021 15:15:34 -0700
Subject: [PATCH 234/788] Update
 content/en/docs/reference/access-authn-authz/certificate-signing-requests.md

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
---
 .../access-authn-authz/certificate-signing-requests.md          | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index 18a1afa2d0..c6a1d87490 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -256,7 +256,7 @@ Export the issued certificate from the CertificateSigningRequest.
 This example assumes the key and certificate files are located at "/home/vagrant/work/".
 
 ```
-kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > /home/vagrant/work/john.crt
+kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > john.crt
 ```
 
 ### Create Role and RoleBinding

From f7506a3d9841993a62b88d9998da481b59496491 Mon Sep 17 00:00:00 2001
From: Mike Patterson <mpatters72@users.noreply.github.com>
Date: Wed, 17 Mar 2021 15:38:56 -0700
Subject: [PATCH 235/788] Drop vagrant path and use generic name.

---
 .../certificate-signing-requests.md           | 25 +++++++++----------
 1 file changed, 12 insertions(+), 13 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index c6a1d87490..a8d782e3d0 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -196,8 +196,8 @@ O is the group that this user will belong to. You can refer to
 [RBAC](/docs/reference/access-authn-authz/rbac/) for standard groups.
 
 ```shell
-openssl genrsa -out john.key 2048
-openssl req -new -key john.key -out john.csr
+openssl genrsa -out myuser.key 2048
+openssl req -new -key myuser.key -out myuser.csr
 ```
 
 ### Create CertificateSigningRequest
@@ -209,7 +209,7 @@ cat <<EOF | kubectl apply -f -
 apiVersion: certificates.k8s.io/v1
 kind: CertificateSigningRequest
 metadata:
-  name: john
+  name: myuser
 spec:
   groups:
   - system:authenticated
@@ -224,7 +224,7 @@ Some points to note:
 
 - `usages` has to be '`client auth`'
 - `request` is the base64 encoded value of the CSR file content.
-  You can get the content using this command: ```cat john.csr | base64 | tr -d "\n"```
+  You can get the content using this command: ```cat myuser.csr | base64 | tr -d "\n"```
 
 ### Approve certificate signing request
 
@@ -239,7 +239,7 @@ kubectl get csr
 Approve the CSR:
 
 ```shell
-kubectl certificate approve john
+kubectl certificate approve myuser
 ```
 
 ### Get the certificate
@@ -247,16 +247,15 @@ kubectl certificate approve john
 Retrieve the certificate from the CSR:
 
 ```shell
-kubectl get csr/john -o yaml
+kubectl get csr/myuser -o yaml
 ```
 
 The certificate value is in Base64-encoded format under `status.certificate`.
 
 Export the issued certificate from the CertificateSigningRequest.
-This example assumes the key and certificate files are located at "/home/vagrant/work/".
 
 ```
-kubectl get csr john -o jsonpath='{.status.certificate}'| base64 -d > john.crt
+kubectl get csr myuser -o jsonpath='{.status.certificate}'| base64 -d > myuser.crt
 ```
 
 ### Create Role and RoleBinding
@@ -273,7 +272,7 @@ kubectl create role developer --verb=create --verb=get --verb=list --verb=update
 This is a sample command to create a RoleBinding for this new user:
 
 ```shell
-kubectl create rolebinding developer-binding-john --role=developer --user=john
+kubectl create rolebinding developer-binding-myuser --role=developer --user=myuser
 ```
 
 ### Add to kubeconfig
@@ -283,20 +282,20 @@ The last step is to add this user into the kubeconfig file.
 First, you need to add new credentials:
 
 ```
-kubectl config set-credentials john --client-key=/home/vagrant/work/john.key --client-certificate=/home/vagrant/work/john.crt --embed-certs=true
+kubectl config set-credentials myuser --client-key=myuser.key --client-certificate=myuser.crt --embed-certs=true
 
 ```
 
 Then, you need to add the context:
 
 ```
-kubectl config set-context john --cluster=kubernetes --user=john
+kubectl config set-context myuser --cluster=kubernetes --user=myuser
 ```
 
-To test it, change the context to `john`:
+To test it, change the context to `myuser`:
 
 ```
-kubectl config use-context john
+kubectl config use-context myuser
 ```
 
 ## Approval or rejection  {#approval-rejection}

From 3ff5ec1effb3d204a3c77e74b2a2dc39c88eb901 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Thu, 11 Feb 2021 15:51:47 -0500
Subject: [PATCH 236/788] clean up use of word: just

---
 .../en/docs/concepts/architecture/nodes.md    |  2 +-
 .../cluster-administration/flow-control.md    |  2 +-
 .../manage-deployment.md                      |  4 ++--
 .../cluster-administration/proxies.md         |  2 +-
 .../manage-resources-containers.md            |  5 ++---
 .../en/docs/concepts/configuration/secret.md  |  2 +-
 content/en/docs/concepts/containers/images.md |  2 +-
 .../docs/concepts/extend-kubernetes/_index.md |  2 +-
 .../extend-kubernetes/extend-cluster.md       |  2 +-
 .../working-with-objects/namespaces.md        |  4 ++--
 .../scheduling-eviction/assign-pod-node.md    |  6 +++---
 .../concepts/security/controlling-access.md   |  2 +-
 .../connect-applications-service.md           |  2 +-
 .../concepts/services-networking/ingress.md   |  2 +-
 .../services-networking/service-topology.md   |  4 ++--
 .../concepts/services-networking/service.md   |  7 +++----
 .../concepts/storage/ephemeral-volumes.md     |  3 ++-
 .../concepts/storage/persistent-volumes.md    |  2 +-
 .../docs/concepts/storage/storage-classes.md  |  4 ++--
 .../concepts/storage/volume-pvc-datasource.md |  2 +-
 content/en/docs/concepts/storage/volumes.md   |  2 +-
 .../workloads/controllers/deployment.md       |  2 +-
 .../concepts/workloads/controllers/job.md     |  2 +-
 .../workloads/controllers/replicaset.md       |  2 +-
 .../controllers/replicationcontroller.md      |  3 +--
 .../concepts/workloads/pods/pod-lifecycle.md  |  2 +-
 .../new-content/blogs-case-studies.md         |  4 ++--
 .../contribute/new-content/new-features.md    |  5 ++---
 .../docs/reference/access-authn-authz/abac.md |  2 +-
 .../access-authn-authz/authorization.md       |  2 +-
 .../access-authn-authz/bootstrap-tokens.md    |  2 +-
 .../certificate-signing-requests.md           |  2 +-
 .../docs/reference/access-authn-authz/rbac.md |  4 ++--
 .../kubelet-tls-bootstrapping.md              |  6 +++---
 .../glossary/cloud-controller-manager.md      |  2 +-
 .../en/docs/reference/kubectl/cheatsheet.md   |  2 +-
 content/en/docs/reference/kubectl/overview.md |  2 +-
 .../reference/using-api/deprecation-policy.md |  2 +-
 .../reference/using-api/server-side-apply.md  |  9 ++++-----
 .../setup/best-practices/cluster-large.md     |  7 +++----
 .../production-environment/tools/kubespray.md |  2 +-
 .../windows/intro-windows-in-kubernetes.md    |  6 +++---
 .../access-cluster.md                         |  4 ++--
 .../access-cluster-services.md                |  2 +-
 .../extended-resource-node.md                 |  2 +-
 ...aranteed-scheduling-critical-addon-pods.md | 11 ++--------
 .../kubeadm/kubeadm-certs.md                  |  2 +-
 ...k-if-dockershim-deprecation-affects-you.md |  4 ++--
 .../namespaces-walkthrough.md                 |  2 +-
 .../tasks/administer-cluster/namespaces.md    |  4 ++--
 .../calico-network-policy.md                  |  2 +-
 .../administer-cluster/safely-drain-node.md   |  4 ++--
 .../managing-secret-using-config-file.md      |  2 +-
 .../managing-secret-using-kubectl.md          |  5 ++---
 .../managing-secret-using-kustomize.md        |  2 +-
 .../assign-cpu-resource.md                    |  2 +-
 ...igure-liveness-readiness-startup-probes.md |  2 +-
 .../pull-image-private-registry.md            |  2 +-
 .../translate-compose-kubernetes.md           |  4 ++--
 .../debug-application-introspection.md        |  2 +-
 .../debug-pod-replication-controller.md       |  2 +-
 .../debug-service.md                          |  7 +++----
 .../logging-stackdriver.md                    |  6 +++---
 .../configure-multiple-schedulers.md          | 20 +++++++++----------
 .../custom-resource-definition-versioning.md  |  2 +-
 .../custom-resource-definitions.md            |  2 +-
 .../setup-extension-api-server.md             |  2 +-
 .../coarse-parallel-processing-work-queue.md  |  7 +++----
 .../fine-parallel-processing-work-queue.md    |  4 ++--
 .../manage-daemon/rollback-daemon-set.md      |  2 +-
 .../tasks/manage-daemon/update-daemon-set.md  |  4 ++--
 .../docs/tasks/manage-gpus/scheduling-gpus.md |  2 +-
 .../run-application/delete-stateful-set.md    |  4 ++--
 .../force-delete-stateful-set-pod.md          |  2 +-
 .../horizontal-pod-autoscale-walkthrough.md   |  2 +-
 .../horizontal-pod-autoscale.md               |  2 +-
 .../install-service-catalog-using-sc.md       |  5 +----
 content/en/docs/test.md                       |  2 +-
 .../en/docs/tutorials/clusters/apparmor.md    |  2 +-
 content/en/docs/tutorials/clusters/seccomp.md |  4 ++--
 content/en/docs/tutorials/hello-minikube.md   |  4 ++--
 81 files changed, 130 insertions(+), 148 deletions(-)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index 823dddf710..2c0f206e45 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -17,7 +17,7 @@ and contains the services necessary to run
 {{< glossary_tooltip text="Pods" term_id="pod" >}}
 
 Typically you have several nodes in a cluster; in a learning or resource-limited
-environment, you might have just one.
+environment, you might have only one node.
 
 The [components](/docs/concepts/overview/components/#node-components) on a node include the
 {{< glossary_tooltip text="kubelet" term_id="kubelet" >}}, a
diff --git a/content/en/docs/concepts/cluster-administration/flow-control.md b/content/en/docs/concepts/cluster-administration/flow-control.md
index e8fd3e4061..3e94277d93 100644
--- a/content/en/docs/concepts/cluster-administration/flow-control.md
+++ b/content/en/docs/concepts/cluster-administration/flow-control.md
@@ -427,7 +427,7 @@ poorly-behaved workloads that may be harming system health.
   histogram vector of queue lengths for the queues, broken down by
   the labels `priority_level` and `flow_schema`, as sampled by the
   enqueued requests.  Each request that gets queued contributes one
-  sample to its histogram, reporting the length of the queue just
+  sample to its histogram, reporting the length of the queue immediately
   after the request was added.  Note that this produces different
   statistics than an unbiased survey would.
     {{< note >}}
diff --git a/content/en/docs/concepts/cluster-administration/manage-deployment.md b/content/en/docs/concepts/cluster-administration/manage-deployment.md
index 40320e4285..f51911116d 100644
--- a/content/en/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/en/docs/concepts/cluster-administration/manage-deployment.md
@@ -278,7 +278,7 @@ pod/my-nginx-2035384211-u3t6x labeled
 ```
 
 This first filters all pods with the label "app=nginx", and then labels them with the "tier=fe".
-To see the pods you just labeled, run:
+To see the pods you labeled, run:
 
 ```shell
 kubectl get pods -l app=nginx -L tier
@@ -411,7 +411,7 @@ and
 
 ## Disruptive updates
 
-In some cases, you may need to update resource fields that cannot be updated once initialized, or you may just want to make a recursive change immediately, such as to fix broken pods created by a Deployment. To change such fields, use `replace --force`, which deletes and re-creates the resource. In this case, you can modify your original configuration file:
+In some cases, you may need to update resource fields that cannot be updated once initialized, or you may want to make a recursive change immediately, such as to fix broken pods created by a Deployment. To change such fields, use `replace --force`, which deletes and re-creates the resource. In this case, you can modify your original configuration file:
 
 ```shell
 kubectl replace -f https://k8s.io/examples/application/nginx/nginx-deployment.yaml --force
diff --git a/content/en/docs/concepts/cluster-administration/proxies.md b/content/en/docs/concepts/cluster-administration/proxies.md
index 9bf204bd9f..ba86c969b8 100644
--- a/content/en/docs/concepts/cluster-administration/proxies.md
+++ b/content/en/docs/concepts/cluster-administration/proxies.md
@@ -39,7 +39,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - proxies UDP, TCP and SCTP
     - does not understand HTTP
     - provides load balancing
-    - is just used to reach services
+    - is only used to reach services
 
 1.  A Proxy/Load-balancer in front of apiserver(s):
 
diff --git a/content/en/docs/concepts/configuration/manage-resources-containers.md b/content/en/docs/concepts/configuration/manage-resources-containers.md
index 2668050d26..fa683e97f3 100644
--- a/content/en/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/en/docs/concepts/configuration/manage-resources-containers.md
@@ -72,8 +72,7 @@ You cannot overcommit `hugepages-*` resources.
 This is different from the `memory` and `cpu` resources.
 {{< /note >}}
 
-CPU and memory are collectively referred to as *compute resources*, or just
-*resources*. Compute
+CPU and memory are collectively referred to as *compute resources*, or *resources*. Compute
 resources are measurable quantities that can be requested, allocated, and
 consumed. They are distinct from
 [API resources](/docs/concepts/overview/kubernetes-api/). API resources, such as Pods and
@@ -554,7 +553,7 @@ extender.
 
 ### Consuming extended resources
 
-Users can consume extended resources in Pod specs just like CPU and memory.
+Users can consume extended resources in Pod specs like CPU and memory.
 The scheduler takes care of the resource accounting so that no more than the
 available amount is simultaneously allocated to Pods.
 
diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 0a3688df71..7f47aeeaf5 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -109,7 +109,7 @@ empty-secret   Opaque   0      2m6s
 ```
 
 The `DATA` column shows the number of data items stored in the Secret.
-In this case, `0` means we have just created an empty Secret.
+In this case, `0` means we have created an empty Secret.
 
 ###  Service account token Secrets
 
diff --git a/content/en/docs/concepts/containers/images.md b/content/en/docs/concepts/containers/images.md
index 1166d4106a..6d0db16fe8 100644
--- a/content/en/docs/concepts/containers/images.md
+++ b/content/en/docs/concepts/containers/images.md
@@ -135,7 +135,7 @@ Here are the recommended steps to configuring your nodes to use a private regist
 example, run these on your desktop/laptop:
 
    1. Run `docker login [server]` for each set of credentials you want to use.  This updates `$HOME/.docker/config.json` on your PC.
-   1. View `$HOME/.docker/config.json` in an editor to ensure it contains just the credentials you want to use.
+   1. View `$HOME/.docker/config.json` in an editor to ensure it contains only the credentials you want to use.
    1. Get a list of your nodes; for example:
       - if you want the names: `nodes=$( kubectl get nodes -o jsonpath='{range.items[*].metadata}{.name} {end}' )`
       - if you want to get the IP addresses: `nodes=$( kubectl get nodes -o jsonpath='{range .items[*].status.addresses[?(@.type=="ExternalIP")]}{.address} {end}' )`
diff --git a/content/en/docs/concepts/extend-kubernetes/_index.md b/content/en/docs/concepts/extend-kubernetes/_index.md
index 429912a9ed..cc5ba809ec 100644
--- a/content/en/docs/concepts/extend-kubernetes/_index.md
+++ b/content/en/docs/concepts/extend-kubernetes/_index.md
@@ -145,7 +145,7 @@ Kubernetes provides several built-in authentication methods, and an [Authenticat
 
 ### Authorization
 
-[Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It just works at the level of whole resources -- it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
+[Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It works at the level of whole resources -- it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
 
 
 ### Dynamic Admission Control
diff --git a/content/en/docs/concepts/extend-kubernetes/extend-cluster.md b/content/en/docs/concepts/extend-kubernetes/extend-cluster.md
index 84d14cee3e..2bdc74e7e9 100644
--- a/content/en/docs/concepts/extend-kubernetes/extend-cluster.md
+++ b/content/en/docs/concepts/extend-kubernetes/extend-cluster.md
@@ -146,7 +146,7 @@ Kubernetes provides several built-in authentication methods, and an [Authenticat
 
 ### Authorization
 
-[Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It just works at the level of whole resources -- it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
+[Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It works at the level of whole resources -- it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
 
 
 ### Dynamic Admission Control
diff --git a/content/en/docs/concepts/overview/working-with-objects/namespaces.md b/content/en/docs/concepts/overview/working-with-objects/namespaces.md
index f078cb8636..b7ae176d7c 100644
--- a/content/en/docs/concepts/overview/working-with-objects/namespaces.md
+++ b/content/en/docs/concepts/overview/working-with-objects/namespaces.md
@@ -28,7 +28,7 @@ resource can only be in one namespace.
 
 Namespaces are a way to divide cluster resources between multiple users (via [resource quota](/docs/concepts/policy/resource-quotas/)).
 
-It is not necessary to use multiple namespaces just to separate slightly different
+It is not necessary to use multiple namespaces to separate slightly different
 resources, such as different versions of the same software: use
 [labels](/docs/concepts/overview/working-with-objects/labels) to distinguish
 resources within the same namespace.
@@ -91,7 +91,7 @@ kubectl config view --minify | grep namespace:
 When you create a [Service](/docs/concepts/services-networking/service/),
 it creates a corresponding [DNS entry](/docs/concepts/services-networking/dns-pod-service/).
 This entry is of the form `<service-name>.<namespace-name>.svc.cluster.local`, which means
-that if a container just uses `<service-name>`, it will resolve to the service which
+that if a container only uses `<service-name>`, it will resolve to the service which
 is local to a namespace.  This is useful for using the same configuration across
 multiple namespaces such as Development, Staging and Production.  If you want to reach
 across namespaces, you need to use the fully qualified domain name (FQDN).
diff --git a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
index f0437a9b8b..beab67f2fc 100644
--- a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -120,12 +120,12 @@ pod is eligible to be scheduled on, based on labels on the node.
 
 There are currently two types of node affinity, called `requiredDuringSchedulingIgnoredDuringExecution` and
 `preferredDuringSchedulingIgnoredDuringExecution`. You can think of them as "hard" and "soft" respectively,
-in the sense that the former specifies rules that *must* be met for a pod to be scheduled onto a node (just like
+in the sense that the former specifies rules that *must* be met for a pod to be scheduled onto a node (similar to
 `nodeSelector` but using a more expressive syntax), while the latter specifies *preferences* that the scheduler
 will try to enforce but will not guarantee. The "IgnoredDuringExecution" part of the names means that, similar
 to how `nodeSelector` works, if labels on a node change at runtime such that the affinity rules on a pod are no longer
-met, the pod will still continue to run on the node. In the future we plan to offer
-`requiredDuringSchedulingRequiredDuringExecution` which will be just like `requiredDuringSchedulingIgnoredDuringExecution`
+met, the pod continues to run on the node. In the future we plan to offer
+`requiredDuringSchedulingRequiredDuringExecution` which will be identical to `requiredDuringSchedulingIgnoredDuringExecution`
 except that it will evict pods from nodes that cease to satisfy the pods' node affinity requirements.
 
 Thus an example of `requiredDuringSchedulingIgnoredDuringExecution` would be "only run the pod on nodes with Intel CPUs"
diff --git a/content/en/docs/concepts/security/controlling-access.md b/content/en/docs/concepts/security/controlling-access.md
index e025ac10e3..9d6c2b9617 100644
--- a/content/en/docs/concepts/security/controlling-access.md
+++ b/content/en/docs/concepts/security/controlling-access.md
@@ -43,7 +43,7 @@ Authenticators are described in more detail in
 [Authentication](/docs/reference/access-authn-authz/authentication/).
 
 The input to the authentication step is the entire HTTP request; however, it typically
-just examines the headers and/or client certificate.
+examines the headers and/or client certificate.
 
 Authentication modules include client certificates, password, and plain tokens,
 bootstrap tokens, and JSON Web Tokens (used for service accounts).
diff --git a/content/en/docs/concepts/services-networking/connect-applications-service.md b/content/en/docs/concepts/services-networking/connect-applications-service.md
index 402c3c57ca..14bc98101f 100644
--- a/content/en/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/en/docs/concepts/services-networking/connect-applications-service.md
@@ -387,7 +387,7 @@ $ curl https://<EXTERNAL-IP>:<NODE-PORT> -k
 <h1>Welcome to nginx!</h1>
 ```
 
-Let's now recreate the Service to use a cloud load balancer, just change the `Type` of `my-nginx` Service from `NodePort` to `LoadBalancer`:
+Let's now recreate the Service to use a cloud load balancer. Change the `Type` of `my-nginx` Service from `NodePort` to `LoadBalancer`:
 
 ```shell
 kubectl edit svc my-nginx
diff --git a/content/en/docs/concepts/services-networking/ingress.md b/content/en/docs/concepts/services-networking/ingress.md
index 7a189a401b..b6be91cb9a 100644
--- a/content/en/docs/concepts/services-networking/ingress.md
+++ b/content/en/docs/concepts/services-networking/ingress.md
@@ -260,7 +260,7 @@ There are existing Kubernetes concepts that allow you to expose a single Service
 {{< codenew file="service/networking/test-ingress.yaml" >}}
 
 If you create it using `kubectl apply -f` you should be able to view the state
-of the Ingress you just added:
+of the Ingress you added:
 
 ```bash
 kubectl get ingress test-ingress
diff --git a/content/en/docs/concepts/services-networking/service-topology.md b/content/en/docs/concepts/services-networking/service-topology.md
index d36b76f55f..66976b23fb 100644
--- a/content/en/docs/concepts/services-networking/service-topology.md
+++ b/content/en/docs/concepts/services-networking/service-topology.md
@@ -57,7 +57,7 @@ the first label matches the originating Node's value for that label. If there is
 no backend for the Service on a matching Node, then the second label will be
 considered, and so forth, until no labels remain.
 
-If no match is found, the traffic will be rejected, just as if there were no
+If no match is found, the traffic will be rejected, as if there were no
 backends for the Service at all. That is, endpoints are chosen based on the first
 topology key with available backends. If this field is specified and all entries
 have no backends that match the topology of the client, the service has no
@@ -87,7 +87,7 @@ traffic as follows.
 
 * Service topology is not compatible with `externalTrafficPolicy=Local`, and
   therefore a Service cannot use both of these features. It is possible to use
-  both features in the same cluster on different Services, just not on the same
+  both features in the same cluster on different Services, only not on the same
   Service.
 
 * Valid topology keys are currently limited to `kubernetes.io/hostname`,
diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index b7a7edcd38..b57fe5001b 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -527,7 +527,7 @@ for NodePort use.
 
 Using a NodePort gives you the freedom to set up your own load balancing solution,
 to configure environments that are not fully supported by Kubernetes, or even
-to just expose one or more nodes' IPs directly.
+to expose one or more nodes' IPs directly.
 
 Note that this Service is visible as `<NodeIP>:spec.ports[*].nodePort`
 and `.spec.clusterIP:spec.ports[*].port`. (If the `--nodeport-addresses` flag in kube-proxy is set, <NodeIP> would be filtered NodeIP(s).)
@@ -785,8 +785,7 @@ you can use the following annotations:
 ```
 
 In the above example, if the Service contained three ports, `80`, `443`, and
-`8443`, then `443` and `8443` would use the SSL certificate, but `80` would just
-be proxied HTTP.
+`8443`, then `443` and `8443` would use the SSL certificate, but `80` would be proxied HTTP.
 
 From Kubernetes v1.9 onwards you can use [predefined AWS SSL policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html) with HTTPS or SSL listeners for your Services.
 To see which policies are available for use, you can use the `aws` command line tool:
@@ -1107,7 +1106,7 @@ but the current API requires it.
 
 ## Virtual IP implementation {#the-gory-details-of-virtual-ips}
 
-The previous information should be sufficient for many people who just want to
+The previous information should be sufficient for many people who want to
 use Services.  However, there is a lot going on behind the scenes that may be
 worth understanding.
 
diff --git a/content/en/docs/concepts/storage/ephemeral-volumes.md b/content/en/docs/concepts/storage/ephemeral-volumes.md
index 9b0b9464f5..bc391a3f36 100644
--- a/content/en/docs/concepts/storage/ephemeral-volumes.md
+++ b/content/en/docs/concepts/storage/ephemeral-volumes.md
@@ -135,8 +135,9 @@ As a cluster administrator, you can use a [PodSecurityPolicy](/docs/concepts/pol
 This feature requires the `GenericEphemeralVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be
 enabled. Because this is an alpha feature, it is disabled by default.
 
-Generic ephemeral volumes are similar to `emptyDir` volumes, just more
+Generic ephemeral volumes are similar to `emptyDir` volumes, except more
 flexible:
+
 - Storage can be local or network-attached.
 - Volumes can have a fixed size that Pods are not able to exceed.
 - Volumes may have some initial data, depending on the driver and
diff --git a/content/en/docs/concepts/storage/persistent-volumes.md b/content/en/docs/concepts/storage/persistent-volumes.md
index ef46b7f99a..54e42bae9e 100644
--- a/content/en/docs/concepts/storage/persistent-volumes.md
+++ b/content/en/docs/concepts/storage/persistent-volumes.md
@@ -29,7 +29,7 @@ A _PersistentVolume_ (PV) is a piece of storage in the cluster that has been pro
 
 A _PersistentVolumeClaim_ (PVC) is a request for storage by a user. It is similar to a Pod. Pods consume node resources and PVCs consume PV resources. Pods can request specific levels of resources (CPU and Memory).  Claims can request specific size and access modes (e.g., they can be mounted ReadWriteOnce, ReadOnlyMany or ReadWriteMany, see [AccessModes](#access-modes)).
 
-While PersistentVolumeClaims allow a user to consume abstract storage resources, it is common that users need PersistentVolumes with varying properties, such as performance, for different problems. Cluster administrators need to be able to offer a variety of PersistentVolumes that differ in more ways than just size and access modes, without exposing users to the details of how those volumes are implemented. For these needs, there is the _StorageClass_ resource.
+While PersistentVolumeClaims allow a user to consume abstract storage resources, it is common that users need PersistentVolumes with varying properties, such as performance, for different problems. Cluster administrators need to be able to offer a variety of PersistentVolumes that differ in more ways than size and access modes, without exposing users to the details of how those volumes are implemented. For these needs, there is the _StorageClass_ resource.
 
 See the [detailed walkthrough with working examples](/docs/tasks/configure-pod-container/configure-persistent-volume-storage/).
 
diff --git a/content/en/docs/concepts/storage/storage-classes.md b/content/en/docs/concepts/storage/storage-classes.md
index 6834977d70..0abdf6b545 100644
--- a/content/en/docs/concepts/storage/storage-classes.md
+++ b/content/en/docs/concepts/storage/storage-classes.md
@@ -37,7 +37,7 @@ request a particular class. Administrators set the name and other parameters
 of a class when first creating StorageClass objects, and the objects cannot
 be updated once they are created.
 
-Administrators can specify a default StorageClass just for PVCs that don't
+Administrators can specify a default StorageClass only for PVCs that don't
 request any particular class to bind to: see the
 [PersistentVolumeClaim section](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)
 for details.
@@ -569,7 +569,7 @@ parameters:
   `"http(s)://api-server:7860"`
 * `registry`: Quobyte registry to use to mount the volume. You can specify the
   registry as ``<host>:<port>`` pair or if you want to specify multiple
-  registries you just have to put a comma between them e.q.
+  registries, put a comma between them.
   ``<host1>:<port>,<host2>:<port>,<host3>:<port>``.
   The host can be an IP address or if you have a working DNS you can also
   provide the DNS names.
diff --git a/content/en/docs/concepts/storage/volume-pvc-datasource.md b/content/en/docs/concepts/storage/volume-pvc-datasource.md
index 8210df661c..9e59560d1d 100644
--- a/content/en/docs/concepts/storage/volume-pvc-datasource.md
+++ b/content/en/docs/concepts/storage/volume-pvc-datasource.md
@@ -40,7 +40,7 @@ Users need to be aware of the following when using this feature:
 
 ## Provisioning
 
-Clones are provisioned just like any other PVC with the exception of adding a dataSource that references an existing PVC in the same namespace.
+Clones are provisioned like any other PVC with the exception of adding a dataSource that references an existing PVC in the same namespace.
 
 ```yaml
 apiVersion: v1
diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 8ed91067e0..a00b22fcbf 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -38,7 +38,7 @@ that run within the pod, and data is preserved across container restarts. When a
 ceases to exist, Kubernetes destroys ephemeral volumes; however, Kubernetes does not
 destroy persistent volumes.
 
-At its core, a volume is just a directory, possibly with some data in it, which
+At its core, a volume is a directory, possibly with some data in it, which
 is accessible to the containers in a pod. How that directory comes to be, the
 medium that backs it, and the contents of it are determined by the particular
 volume type used.
diff --git a/content/en/docs/concepts/workloads/controllers/deployment.md b/content/en/docs/concepts/workloads/controllers/deployment.md
index 0380889414..22b95255c5 100644
--- a/content/en/docs/concepts/workloads/controllers/deployment.md
+++ b/content/en/docs/concepts/workloads/controllers/deployment.md
@@ -708,7 +708,7 @@ nginx-deployment-618515232    11        11        11        7m
 You can pause a Deployment before triggering one or more updates and then resume it. This allows you to
 apply multiple fixes in between pausing and resuming without triggering unnecessary rollouts.
 
-* For example, with a Deployment that was just created:
+* For example, with a Deployment that was created:
   Get the Deployment details:
   ```shell
   kubectl get deploy
diff --git a/content/en/docs/concepts/workloads/controllers/job.md b/content/en/docs/concepts/workloads/controllers/job.md
index 2c99a704d1..be4393d891 100644
--- a/content/en/docs/concepts/workloads/controllers/job.md
+++ b/content/en/docs/concepts/workloads/controllers/job.md
@@ -99,7 +99,7 @@ pi-5rwd7
 ```
 
 Here, the selector is the same as the selector for the Job.  The `--output=jsonpath` option specifies an expression
-that just gets the name from each Pod in the returned list.
+with the name from each Pod in the returned list.
 
 View the standard output of one of the pods:
 
diff --git a/content/en/docs/concepts/workloads/controllers/replicaset.md b/content/en/docs/concepts/workloads/controllers/replicaset.md
index e45d20c8f7..edc96e4c00 100644
--- a/content/en/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/en/docs/concepts/workloads/controllers/replicaset.md
@@ -222,7 +222,7 @@ In this manner, a ReplicaSet can own a non-homogenous set of Pods
 ## Writing a ReplicaSet manifest
 
 As with all other Kubernetes API objects, a ReplicaSet needs the `apiVersion`, `kind`, and `metadata` fields.
-For ReplicaSets, the kind is always just ReplicaSet.
+For ReplicaSets, the `kind` is always a ReplicaSet.
 In Kubernetes 1.9 the API version `apps/v1` on the ReplicaSet kind is the current version and is enabled by default. The API version `apps/v1beta2` is deprecated.
 Refer to the first lines of the `frontend.yaml` example for guidance.
 
diff --git a/content/en/docs/concepts/workloads/controllers/replicationcontroller.md b/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
index 23d87f81fd..9bfb1264a4 100644
--- a/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -110,8 +110,7 @@ nginx-3ntk0 nginx-4ok8v nginx-qrm3m
 
 Here, the selector is the same as the selector for the ReplicationController (seen in the
 `kubectl describe` output), and in a different form in `replication.yaml`.  The `--output=jsonpath` option
-specifies an expression that just gets the name from each pod in the returned list.
-
+specifies an expression with the name from each pod in the returned list.
 
 ## Writing a ReplicationController Spec
 
diff --git a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
index 832785923a..778bee6c02 100644
--- a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -312,7 +312,7 @@ can specify a readiness probe that checks an endpoint specific to readiness that
 is different from the liveness probe.
 
 {{< note >}}
-If you just want to be able to drain requests when the Pod is deleted, you do not
+If you want to be able to drain requests when the Pod is deleted, you do not
 necessarily need a readiness probe; on deletion, the Pod automatically puts itself
 into an unready state regardless of whether the readiness probe exists.
 The Pod remains in the unready state while it waits for the containers in the Pod
diff --git a/content/en/docs/contribute/new-content/blogs-case-studies.md b/content/en/docs/contribute/new-content/blogs-case-studies.md
index 6628925694..8f2f6baaf7 100644
--- a/content/en/docs/contribute/new-content/blogs-case-studies.md
+++ b/content/en/docs/contribute/new-content/blogs-case-studies.md
@@ -39,8 +39,8 @@ Anyone can write a blog post and submit it for review.
   - Posts about other CNCF projects may or may not be on topic. We recommend asking the blog team before submitting a draft.
     - Many CNCF projects have their own blog. These are often a better choice for posts. There are times of major feature or milestone for a CNCF project that users would be interested in reading on the Kubernetes blog.
 - Blog posts should be original content
-    - The official blog is not for repurposing existing content from a third party as new content.
-    - The [license](https://github.com/kubernetes/website/blob/master/LICENSE) for the blog does allow commercial use of the content for commercial purposes, just not the other way around. 
+  - The official blog is not for repurposing existing content from a third party as new content.
+  - The [license](https://github.com/kubernetes/website/blob/master/LICENSE) for the blog allows commercial use of the content for commercial purposes, but not the other way around.
 - Blog posts should aim to be future proof
   - Given the development velocity of the project, we want evergreen content that won't require updates to stay accurate for the reader. 
   - It can be a better choice to add a tutorial or update official documentation than to write a high level overview as a blog post.
diff --git a/content/en/docs/contribute/new-content/new-features.md b/content/en/docs/contribute/new-content/new-features.md
index a0e3600562..268c447402 100644
--- a/content/en/docs/contribute/new-content/new-features.md
+++ b/content/en/docs/contribute/new-content/new-features.md
@@ -77,9 +77,8 @@ merged. Keep the following in mind:
   Alpha features.
 - It's hard to test (and therefore to document) a feature that hasn't been merged,
   or is at least considered feature-complete in its PR.
-- Determining whether a feature needs documentation is a manual process and
-  just because a feature is not marked as needing docs doesn't mean it doesn't
-  need them.
+- Determining whether a feature needs documentation is a manual process. Even if
+  a feature is not marked as needing docs, you may need to document the feature.
 
 ## For developers or other SIG members
 
diff --git a/content/en/docs/reference/access-authn-authz/abac.md b/content/en/docs/reference/access-authn-authz/abac.md
index 99fce41aba..3e2aea6b36 100644
--- a/content/en/docs/reference/access-authn-authz/abac.md
+++ b/content/en/docs/reference/access-authn-authz/abac.md
@@ -19,7 +19,7 @@ Attribute-based access control (ABAC) defines an access control paradigm whereby
 To enable `ABAC` mode, specify `--authorization-policy-file=SOME_FILENAME` and `--authorization-mode=ABAC` on startup.
 
 The file format is [one JSON object per line](https://jsonlines.org/).  There
-should be no enclosing list or map, just one map per line.
+should be no enclosing list or map, only one map per line.
 
 Each line is a "policy object", where each such object is a map with the following
 properties:
diff --git a/content/en/docs/reference/access-authn-authz/authorization.md b/content/en/docs/reference/access-authn-authz/authorization.md
index 04963e10ee..af73a23350 100644
--- a/content/en/docs/reference/access-authn-authz/authorization.md
+++ b/content/en/docs/reference/access-authn-authz/authorization.md
@@ -138,7 +138,7 @@ no
 exposes the API server authorization to external services. Other resources in
 this group include:
 
-* `SubjectAccessReview` - Access review for any user, not just the current one. Useful for delegating authorization decisions to the API server. For example, the kubelet and extension API servers use this to determine user access to their own APIs.
+* `SubjectAccessReview` - Access review for any user, not only the current one. Useful for delegating authorization decisions to the API server. For example, the kubelet and extension API servers use this to determine user access to their own APIs.
 * `LocalSubjectAccessReview` - Like `SubjectAccessReview` but restricted to a specific namespace.
 * `SelfSubjectRulesReview` - A review which returns the set of actions a user can perform within a namespace. Useful for users to quickly summarize their own access, or for UIs to hide/show actions.
 
diff --git a/content/en/docs/reference/access-authn-authz/bootstrap-tokens.md b/content/en/docs/reference/access-authn-authz/bootstrap-tokens.md
index 856669a5d8..f128c14a7a 100644
--- a/content/en/docs/reference/access-authn-authz/bootstrap-tokens.md
+++ b/content/en/docs/reference/access-authn-authz/bootstrap-tokens.md
@@ -167,7 +167,7 @@ data:
     users: []
 ```
 
-The `kubeconfig` member of the ConfigMap is a config file with just the cluster
+The `kubeconfig` member of the ConfigMap is a config file with only the cluster
 information filled out.  The key thing being communicated here is the
 `certificate-authority-data`.  This may be expanded in the future.
 
diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index 6d05d0436a..d398a4b7ce 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -363,7 +363,7 @@ status:
 
 It's usual to set `status.conditions.reason` to a machine-friendly reason
 code using TitleCase; this is a convention but you can set it to anything
-you like. If you want to add a note just for human consumption, use the
+you like. If you want to add a note for human consumption, use the
 `status.conditions.message` field.
 
 ## Signing
diff --git a/content/en/docs/reference/access-authn-authz/rbac.md b/content/en/docs/reference/access-authn-authz/rbac.md
index 4bc2b86dd6..bd9aba1aa8 100644
--- a/content/en/docs/reference/access-authn-authz/rbac.md
+++ b/content/en/docs/reference/access-authn-authz/rbac.md
@@ -219,7 +219,7 @@ the role that is granted to those subjects.
 1. A binding to a different role is a fundamentally different binding.
 Requiring a binding to be deleted/recreated in order to change the `roleRef`
 ensures the full list of subjects in the binding is intended to be granted
-the new role (as opposed to enabling accidentally modifying just the roleRef
+the new role (as opposed to enabling or accidentally modifying only the roleRef
 without verifying all of the existing subjects should be given the new role's
 permissions).
 
@@ -333,7 +333,7 @@ as a cluster administrator, include rules for custom resources, such as those se
 or aggregated API servers, to extend the default roles.
 
 For example: the following ClusterRoles let the "admin" and "edit" default roles manage the custom resource
-named CronTab, whereas the "view" role can perform just read actions on CronTab resources.
+named CronTab, whereas the "view" role can perform only read actions on CronTab resources.
 You can assume that CronTab objects are named `"crontabs"` in URLs as seen by the API server.
 
 ```yaml
diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md b/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md
index 89ad711a56..a441f8ce5b 100644
--- a/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md
+++ b/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md
@@ -185,9 +185,9 @@ systemd unit file perhaps) to enable the token file.  See docs
 further details.
 
 ### Authorize kubelet to create CSR
-Now that the bootstrapping node is _authenticated_ as part of the `system:bootstrappers` group, it needs to be _authorized_ to create a certificate signing request (CSR) as well as retrieve it when done. Fortunately, Kubernetes ships with a `ClusterRole` with precisely these (and just these) permissions, `system:node-bootstrapper`.
+Now that the bootstrapping node is _authenticated_ as part of the `system:bootstrappers` group, it needs to be _authorized_ to create a certificate signing request (CSR) as well as retrieve it when done. Fortunately, Kubernetes ships with a `ClusterRole` with precisely these (and only these) permissions, `system:node-bootstrapper`.
 
-To do this, you just need to create a `ClusterRoleBinding` that binds the `system:bootstrappers` group to the cluster role `system:node-bootstrapper`.
+To do this, you only need to create a `ClusterRoleBinding` that binds the `system:bootstrappers` group to the cluster role `system:node-bootstrapper`.
 
 ```
 # enable bootstrapping nodes to create CSR
@@ -345,7 +345,7 @@ The important elements to note are:
 * `token`: the token to use
 
 The format of the token does not matter, as long as it matches what kube-apiserver expects. In the above example, we used a bootstrap token.
-As stated earlier, _any_ valid authentication method can be used, not just tokens.
+As stated earlier, _any_ valid authentication method can be used, not only tokens.
 
 Because the bootstrap `kubeconfig` _is_ a standard `kubeconfig`, you can use `kubectl` to generate it. To create the above example file:
 
diff --git a/content/en/docs/reference/glossary/cloud-controller-manager.md b/content/en/docs/reference/glossary/cloud-controller-manager.md
index c78bf393cb..874d0925cf 100755
--- a/content/en/docs/reference/glossary/cloud-controller-manager.md
+++ b/content/en/docs/reference/glossary/cloud-controller-manager.md
@@ -14,7 +14,7 @@ tags:
  A Kubernetes {{< glossary_tooltip text="control plane" term_id="control-plane" >}} component
 that embeds cloud-specific control logic. The cloud controller manager lets you link your
 cluster into your cloud provider's API, and separates out the components that interact
-with that cloud platform from components that just interact with your cluster.
+with that cloud platform from components that only interact with your cluster.
 
 <!--more-->
 
diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md
index cbb579908b..5b60aab8a8 100644
--- a/content/en/docs/reference/kubectl/cheatsheet.md
+++ b/content/en/docs/reference/kubectl/cheatsheet.md
@@ -360,7 +360,7 @@ Other operations for exploring API resources:
 ```bash
 kubectl api-resources --namespaced=true      # All namespaced resources
 kubectl api-resources --namespaced=false     # All non-namespaced resources
-kubectl api-resources -o name                # All resources with simple output (just the resource name)
+kubectl api-resources -o name                # All resources with simple output (only the resource name)
 kubectl api-resources -o wide                # All resources with expanded (aka "wide") output
 kubectl api-resources --verbs=list,get       # All resources that support the "list" and "get" request verbs
 kubectl api-resources --api-group=extensions # All resources in the "extensions" API group
diff --git a/content/en/docs/reference/kubectl/overview.md b/content/en/docs/reference/kubectl/overview.md
index dbad6f5cf2..f8ec7e5603 100644
--- a/content/en/docs/reference/kubectl/overview.md
+++ b/content/en/docs/reference/kubectl/overview.md
@@ -69,7 +69,7 @@ for example `create`, `get`, `describe`, `delete`.
 Flags that you specify from the command line override default values and any corresponding environment variables.
 {{< /caution >}}
 
-If you need help, just run `kubectl help` from the terminal window.
+If you need help, run `kubectl help` from the terminal window.
 
 ## Operations
 
diff --git a/content/en/docs/reference/using-api/deprecation-policy.md b/content/en/docs/reference/using-api/deprecation-policy.md
index 17840f195b..4de09ee82a 100644
--- a/content/en/docs/reference/using-api/deprecation-policy.md
+++ b/content/en/docs/reference/using-api/deprecation-policy.md
@@ -327,7 +327,7 @@ supported in API v1 must exist and function until API v1 is removed.
 
 ### Component config structures
 
-Component configs are versioned and managed just like REST resources.
+Component configs are versioned and managed similar to REST resources.
 
 ### Future work
 
diff --git a/content/en/docs/reference/using-api/server-side-apply.md b/content/en/docs/reference/using-api/server-side-apply.md
index d91497f8f2..a6684adb24 100644
--- a/content/en/docs/reference/using-api/server-side-apply.md
+++ b/content/en/docs/reference/using-api/server-side-apply.md
@@ -209,9 +209,8 @@ would have failed due to conflicting ownership.
 
 The merging strategy, implemented with Server Side Apply, provides a generally
 more stable object lifecycle. Server Side Apply tries to merge fields based on
-the fact who manages them instead of overruling just based on values. This way
-it is intended to make it easier and more stable for multiple actors updating
-the same object by causing less unexpected interference.
+the actor who manages them instead of overruling based on values. This way
+multiple actors can update the same object without causing unexpected interference.
 
 When a user sends a "fully-specified intent" object to the Server Side Apply
 endpoint, the server merges it with the live object favoring the value in the
@@ -319,7 +318,7 @@ kubectl apply -f https://k8s.io/examples/application/ssa/nginx-deployment-replic
 ```
 
 If the apply results in a conflict with the HPA controller, then do nothing. The
-conflict just indicates the controller has claimed the field earlier in the
+conflict indicates the controller has claimed the field earlier in the
 process than it sometimes does.
 
 At this point the user may remove the `replicas` field from their configuration.
@@ -436,7 +435,7 @@ Data: [{"op": "replace", "path": "/metadata/managedFields", "value": [{}]}]
 
 This will overwrite the managedFields with a list containing a single empty
 entry that then results in the managedFields being stripped entirely from the
-object. Note that just setting the managedFields to an empty list will not
+object. Note that setting the managedFields to an empty list will not
 reset the field. This is on purpose, so managedFields never get stripped by
 clients not aware of the field.
 
diff --git a/content/en/docs/setup/best-practices/cluster-large.md b/content/en/docs/setup/best-practices/cluster-large.md
index ccb31fe108..a75499a811 100644
--- a/content/en/docs/setup/best-practices/cluster-large.md
+++ b/content/en/docs/setup/best-practices/cluster-large.md
@@ -69,10 +69,9 @@ When creating a cluster, you can (using custom tooling):
 ## Addon resources
 
 Kubernetes [resource limits](/docs/concepts/configuration/manage-resources-containers/)
-help to minimise the impact of memory leaks and other ways that pods and containers can
-impact on other components. These resource limits can and should apply to
-{{< glossary_tooltip text="addon" term_id="addons" >}} just as they apply to application
-workloads.
+help to minimize the impact of memory leaks and other ways that pods and containers can
+impact on other components. These resource limits apply to
+{{< glossary_tooltip text="addon" term_id="addons" >}} resources just as they apply to application workloads.
 
 For example, you can set CPU and memory limits for a logging component:
 
diff --git a/content/en/docs/setup/production-environment/tools/kubespray.md b/content/en/docs/setup/production-environment/tools/kubespray.md
index 4fac65ab88..5ba4c995dd 100644
--- a/content/en/docs/setup/production-environment/tools/kubespray.md
+++ b/content/en/docs/setup/production-environment/tools/kubespray.md
@@ -68,7 +68,7 @@ Kubespray provides the ability to customize many aspects of the deployment:
   * {{< glossary_tooltip term_id="cri-o" >}}
 * Certificate generation methods
 
-Kubespray customizations can be made to a [variable file](https://docs.ansible.com/ansible/playbooks_variables.html). If you are just getting started with Kubespray, consider using the Kubespray defaults to deploy your cluster and explore Kubernetes.
+Kubespray customizations can be made to a [variable file](https://docs.ansible.com/ansible/playbooks_variables.html). If you are getting started with Kubespray, consider using the Kubespray defaults to deploy your cluster and explore Kubernetes.
 
 ### (4/5) Deploy a Cluster
 
diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 5c33b0a94b..446bf11d3c 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -333,7 +333,7 @@ These features were added in Kubernetes v1.15:
 ##### DNS {#dns-limitations}
 
 * ClusterFirstWithHostNet is not supported for DNS. Windows treats all names with a '.' as a FQDN and skips PQDN resolution
-* On Linux, you have a DNS suffix list, which is used when trying to resolve PQDNs. On Windows, we only have 1 DNS suffix, which is the DNS suffix associated with that pod's namespace (mydns.svc.cluster.local for example). Windows can resolve FQDNs and services or names resolvable with just that suffix. For example, a pod spawned in the default namespace, will have the DNS suffix **default.svc.cluster.local**. On a Windows pod, you can resolve both **kubernetes.default.svc.cluster.local** and **kubernetes**, but not the in-betweens, like **kubernetes.default** or **kubernetes.default.svc**.
+* On Linux, you have a DNS suffix list, which is used when trying to resolve PQDNs. On Windows, we only have 1 DNS suffix, which is the DNS suffix associated with that pod's namespace (mydns.svc.cluster.local for example). Windows can resolve FQDNs and services or names resolvable with only that suffix. For example, a pod spawned in the default namespace, will have the DNS suffix **default.svc.cluster.local**. On a Windows pod, you can resolve both **kubernetes.default.svc.cluster.local** and **kubernetes**, but not the in-betweens, like **kubernetes.default** or **kubernetes.default.svc**.
 * On Windows, there are multiple DNS resolvers that can be used. As these come with slightly different behaviors, using the `Resolve-DNSName` utility for name query resolutions is recommended.
 
 ##### IPv6
@@ -363,9 +363,9 @@ There are no differences in how most of the Kubernetes APIs work for Windows. Th
 
 At a high level, these OS concepts are different:
 
-* Identity - Linux uses userID (UID) and groupID (GID) which are represented as integer types. User and group names are not canonical - they are just an alias in `/etc/groups` or `/etc/passwd` back to UID+GID. Windows uses a larger binary security identifier (SID) which is stored in the Windows Security Access Manager (SAM) database. This database is not shared between the host and containers, or between containers.
+* Identity - Linux uses userID (UID) and groupID (GID) which are represented as integer types. User and group names are not canonical - they are an alias in `/etc/groups` or `/etc/passwd` back to UID+GID. Windows uses a larger binary security identifier (SID) which is stored in the Windows Security Access Manager (SAM) database. This database is not shared between the host and containers, or between containers.
 * File permissions - Windows uses an access control list based on SIDs, rather than a bitmask of permissions and UID+GID
-* File paths - convention on Windows is to use `\` instead of `/`. The Go IO libraries typically accept both and just make it work, but when you're setting a path or command line that's interpreted inside a container, `\` may be needed.
+* File paths - convention on Windows is to use `\` instead of `/`. The Go IO libraries accept both types of file path separators. However, when you're setting a path or command line that's interpreted inside a container, `\` may be needed.
 * Signals - Windows interactive apps handle termination differently, and can implement one or more of these:
   * A UI thread handles well-defined messages including WM_CLOSE
   * Console apps handle ctrl-c or ctrl-break using a Control Handler
diff --git a/content/en/docs/tasks/access-application-cluster/access-cluster.md b/content/en/docs/tasks/access-application-cluster/access-cluster.md
index 400a54ffb2..4f20545190 100644
--- a/content/en/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/en/docs/tasks/access-application-cluster/access-cluster.md
@@ -231,7 +231,7 @@ You have several options for connecting to nodes, pods and services from outside
     - Use a service with type `NodePort` or `LoadBalancer` to make the service reachable outside
       the cluster.  See the [services](/docs/concepts/services-networking/service/) and
       [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) documentation.
-    - Depending on your cluster environment, this may just expose the service to your corporate network,
+    - Depending on your cluster environment, this may only expose the service to your corporate network,
       or it may expose it to the internet.  Think about whether the service being exposed is secure.
       Does it do its own authentication?
     - Place pods behind services.  To access one specific pod from a set of replicas, such as for debugging,
@@ -357,7 +357,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - proxies UDP and TCP
     - does not understand HTTP
     - provides load balancing
-    - is just used to reach services
+    - is only used to reach services
 
 1.  A Proxy/Load-balancer in front of apiserver(s):
 
diff --git a/content/en/docs/tasks/administer-cluster/access-cluster-services.md b/content/en/docs/tasks/administer-cluster/access-cluster-services.md
index f6ba4e4fc0..927e05b77a 100644
--- a/content/en/docs/tasks/administer-cluster/access-cluster-services.md
+++ b/content/en/docs/tasks/administer-cluster/access-cluster-services.md
@@ -31,7 +31,7 @@ You have several options for connecting to nodes, pods and services from outside
     - Use a service with type `NodePort` or `LoadBalancer` to make the service reachable outside
       the cluster.  See the [services](/docs/concepts/services-networking/service/) and
       [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) documentation.
-    - Depending on your cluster environment, this may just expose the service to your corporate network,
+    - Depending on your cluster environment, this may only expose the service to your corporate network,
       or it may expose it to the internet.  Think about whether the service being exposed is secure.
       Does it do its own authentication?
     - Place pods behind services.  To access one specific pod from a set of replicas, such as for debugging,
diff --git a/content/en/docs/tasks/administer-cluster/extended-resource-node.md b/content/en/docs/tasks/administer-cluster/extended-resource-node.md
index a95a325d5d..797993f116 100644
--- a/content/en/docs/tasks/administer-cluster/extended-resource-node.md
+++ b/content/en/docs/tasks/administer-cluster/extended-resource-node.md
@@ -54,7 +54,7 @@ Host: k8s-master:8080
 ```
 
 Note that Kubernetes does not need to know what a dongle is or what a dongle is for.
-The preceding PATCH request just tells Kubernetes that your Node has four things that
+The preceding PATCH request tells Kubernetes that your Node has four things that
 you call dongles.
 
 Start a proxy, so that you can easily send requests to the Kubernetes API server:
diff --git a/content/en/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods.md b/content/en/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods.md
index 0d5b6d4ebe..a9aaaacd46 100644
--- a/content/en/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods.md
+++ b/content/en/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods.md
@@ -9,24 +9,17 @@ content_type: concept
 
 <!-- overview -->
 
-In addition to Kubernetes core components like api-server, scheduler, controller-manager running on a master machine
-there are a number of add-ons which, for various reasons, must run on a regular cluster node (rather than the Kubernetes master).
+Kubernetes core components such as the API server, scheduler, and controller-manager run on a control plane node. However, add-ons must run on a regular cluster node.
 Some of these add-ons are critical to a fully functional cluster, such as metrics-server, DNS, and UI.
 A cluster may stop working properly if a critical add-on is evicted (either manually or as a side effect of another operation like upgrade)
 and becomes pending (for example when the cluster is highly utilized and either there are other pending pods that schedule into the space
 vacated by the evicted critical add-on pod or the amount of resources available on the node changed for some other reason).
 
 Note that marking a pod as critical is not meant to prevent evictions entirely; it only prevents the pod from becoming permanently unavailable.
-For static pods, this means it can't be evicted, but for non-static pods, it just means they will always be rescheduled.
-
-
-
+A static pod marked as critical, can't be evicted. However, a non-static pods marked as critical are always rescheduled.
 
 <!-- body -->
 
-
 ### Marking pod as critical
 
 To mark a Pod as critical, set priorityClassName for that Pod to `system-cluster-critical` or `system-node-critical`. `system-node-critical` is the highest available priority, even higher than `system-cluster-critical`.
-
-
diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 56a6c25e9a..e8eda88b03 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -35,7 +35,7 @@ and kubeadm will use this CA for signing the rest of the certificates.
 
 ## External CA mode {#external-ca-mode}
 
-It is also possible to provide just the `ca.crt` file and not the
+It is also possible to provide only the `ca.crt` file and not the
 `ca.key` file (this is only available for the root CA file, not other cert pairs).
 If all other certificates and kubeconfig files are in place, kubeadm recognizes
 this condition and activates the "External CA" mode. kubeadm will proceed without the
diff --git a/content/en/docs/tasks/administer-cluster/migrating-from-dockershim/check-if-dockershim-deprecation-affects-you.md b/content/en/docs/tasks/administer-cluster/migrating-from-dockershim/check-if-dockershim-deprecation-affects-you.md
index 766db38485..fe9fd8b0c4 100644
--- a/content/en/docs/tasks/administer-cluster/migrating-from-dockershim/check-if-dockershim-deprecation-affects-you.md
+++ b/content/en/docs/tasks/administer-cluster/migrating-from-dockershim/check-if-dockershim-deprecation-affects-you.md
@@ -50,7 +50,7 @@ and scheduling of Pods; on each node, the {{< glossary_tooltip text="kubelet" te
 uses the container runtime interface as an abstraction so that you can use any compatible
 container runtime.
 
-In its earliest releases, Kubernetes offered compatibility with just one container runtime: Docker.
+In its earliest releases, Kubernetes offered compatibility with one container runtime: Docker.
 Later in the Kubernetes project's history, cluster operators wanted to adopt additional container runtimes.
 The CRI was designed to allow this kind of flexibility - and the kubelet began supporting CRI. However,
 because Docker existed before the CRI specification was invented, the Kubernetes project created an
@@ -75,7 +75,7 @@ or execute something inside container using `docker exec`.
 
 If you're running workloads via Kubernetes, the best way to stop a container is through
 the Kubernetes API rather than directly through the container runtime (this advice applies
-for all container runtimes, not just Docker).
+for all container runtimes, not only Docker).
 
 {{< /note >}}
 
diff --git a/content/en/docs/tasks/administer-cluster/namespaces-walkthrough.md b/content/en/docs/tasks/administer-cluster/namespaces-walkthrough.md
index 1d1461ade7..5d99875527 100644
--- a/content/en/docs/tasks/administer-cluster/namespaces-walkthrough.md
+++ b/content/en/docs/tasks/administer-cluster/namespaces-walkthrough.md
@@ -232,7 +232,7 @@ Apply the manifest to create a Deployment
 ```shell
 kubectl apply -f https://k8s.io/examples/admin/snowflake-deployment.yaml
 ```
-We have just created a deployment whose replica size is 2 that is running the pod called `snowflake` with a basic container that just serves the hostname.
+We have created a deployment whose replica size is 2 that is running the pod called `snowflake` with a basic container that serves the hostname.
 
 ```shell
 kubectl get deployment
diff --git a/content/en/docs/tasks/administer-cluster/namespaces.md b/content/en/docs/tasks/administer-cluster/namespaces.md
index 08b2868806..2934e1c0f7 100644
--- a/content/en/docs/tasks/administer-cluster/namespaces.md
+++ b/content/en/docs/tasks/administer-cluster/namespaces.md
@@ -196,7 +196,7 @@ This delete is asynchronous, so for a time you will see the namespace in the `Te
     ```shell
     kubectl create deployment snowflake --image=k8s.gcr.io/serve_hostname  -n=development --replicas=2
     ```
-    We have just created a deployment whose replica size is 2 that is running the pod called `snowflake` with a basic container that just serves the hostname.
+    We have created a deployment whose replica size is 2 that is running the pod called `snowflake` with a basic container that serves the hostname.
 
     ```shell
     kubectl get deployment -n=development
@@ -302,7 +302,7 @@ Use cases include:
 
 When you create a [Service](/docs/concepts/services-networking/service/), it creates a corresponding [DNS entry](/docs/concepts/services-networking/dns-pod-service/).
 This entry is of the form `<service-name>.<namespace-name>.svc.cluster.local`, which means
-that if a container just uses `<service-name>` it will resolve to the service which
+that if a container uses `<service-name>` it will resolve to the service which
 is local to a namespace.  This is useful for using the same configuration across
 multiple namespaces such as Development, Staging and Production.  If you want to reach
 across namespaces, you need to use the fully qualified domain name (FQDN).
diff --git a/content/en/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md b/content/en/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md
index 9efdccfb6e..40733c4c96 100644
--- a/content/en/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md
+++ b/content/en/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md
@@ -20,7 +20,7 @@ Decide whether you want to deploy a [cloud](#creating-a-calico-cluster-with-goog
 
 **Prerequisite**: [gcloud](https://cloud.google.com/sdk/docs/quickstarts).
 
-1.  To launch a GKE cluster with Calico, just include the `--enable-network-policy` flag.
+1.  To launch a GKE cluster with Calico, include the `--enable-network-policy` flag.
 
     **Syntax**
     ```shell
diff --git a/content/en/docs/tasks/administer-cluster/safely-drain-node.md b/content/en/docs/tasks/administer-cluster/safely-drain-node.md
index db31cceb8b..0fc0a97ffc 100644
--- a/content/en/docs/tasks/administer-cluster/safely-drain-node.md
+++ b/content/en/docs/tasks/administer-cluster/safely-drain-node.md
@@ -128,8 +128,8 @@ curl -v -H 'Content-type: application/json' https://your-cluster-api-endpoint.ex
 
 The API can respond in one of three ways:
 
-- If the eviction is granted, then the Pod is deleted just as if you had sent
-  a `DELETE` request to the Pod's URL and you get back `200 OK`.
+- If the eviction is granted, then the Pod is deleted as if you sent
+  a `DELETE` request to the Pod's URL and received back `200 OK`.
 - If the current state of affairs wouldn't allow an eviction by the rules set
   forth in the budget, you get back `429 Too Many Requests`. This is
   typically used for generic rate limiting of *any* requests, but here we mean
diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
index 23f85f109b..b405d57baf 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -184,7 +184,7 @@ Where `YWRtaW5pc3RyYXRvcg==` decodes to `administrator`.
 
 ## Clean Up
 
-To delete the Secret you have just created:
+To delete the Secret you have created:
 
 ```shell
 kubectl delete secret mysecret
diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 1e6d88ede4..340cfdc0ae 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -115,8 +115,7 @@ accidentally to an onlooker, or from being stored in a terminal log.
 
 ## Decoding the Secret  {#decoding-secret}
 
-To view the contents of the Secret we just created, you can run the following
-command:
+To view the contents of the Secret you created, run the following command:
 
 ```shell
 kubectl get secret db-user-pass -o jsonpath='{.data}'
@@ -142,7 +141,7 @@ The output is similar to:
 
 ## Clean Up
 
-To delete the Secret you have just created:
+To delete the Secret you have created:
 
 ```shell
 kubectl delete secret db-user-pass
diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
index 5cbb30b99b..fb257a6026 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
@@ -113,7 +113,7 @@ To check the actual content of the encoded data, please refer to
 
 ## Clean Up
 
-To delete the Secret you have just created:
+To delete the Secret you have created:
 
 ```shell
 kubectl delete secret db-user-pass-96mffmfh4k
diff --git a/content/en/docs/tasks/configure-pod-container/assign-cpu-resource.md b/content/en/docs/tasks/configure-pod-container/assign-cpu-resource.md
index 243072eff2..21b02cc000 100644
--- a/content/en/docs/tasks/configure-pod-container/assign-cpu-resource.md
+++ b/content/en/docs/tasks/configure-pod-container/assign-cpu-resource.md
@@ -112,7 +112,7 @@ kubectl top pod cpu-demo --namespace=cpu-example
 ```
 
 This example output shows that the Pod is using 974 milliCPU, which is
-just a bit less than the limit of 1 CPU specified in the Pod configuration.
+slightly less than the limit of 1 CPU specified in the Pod configuration.
 
 ```
 NAME                        CPU(cores)   MEMORY(bytes)
diff --git a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
index 0cdfd28258..918a5bf33e 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
@@ -204,7 +204,7 @@ seconds.
 
 In addition to the readiness probe, this configuration includes a liveness probe.
 The kubelet will run the first liveness probe 15 seconds after the container
-starts. Just like the readiness probe, this will attempt to connect to the
+starts. Similar to the readiness probe, this will attempt to connect to the
 `goproxy` container on port 8080. If the liveness probe fails, the container
 will be restarted.
 
diff --git a/content/en/docs/tasks/configure-pod-container/pull-image-private-registry.md b/content/en/docs/tasks/configure-pod-container/pull-image-private-registry.md
index 32b857c156..697a4c6e0e 100644
--- a/content/en/docs/tasks/configure-pod-container/pull-image-private-registry.md
+++ b/content/en/docs/tasks/configure-pod-container/pull-image-private-registry.md
@@ -118,7 +118,7 @@ those secrets might also be visible to other users on your PC during the time th
 
 ## Inspecting the Secret `regcred`
 
-To understand the contents of the `regcred` Secret you just created, start by viewing the Secret in YAML format:
+To understand the contents of the `regcred` Secret you created, start by viewing the Secret in YAML format:
 
 ```shell
 kubectl get secret regcred --output=yaml
diff --git a/content/en/docs/tasks/configure-pod-container/translate-compose-kubernetes.md b/content/en/docs/tasks/configure-pod-container/translate-compose-kubernetes.md
index dc4fba3480..384b709720 100644
--- a/content/en/docs/tasks/configure-pod-container/translate-compose-kubernetes.md
+++ b/content/en/docs/tasks/configure-pod-container/translate-compose-kubernetes.md
@@ -67,7 +67,7 @@ sudo yum -y install kompose
 {{% /tab %}}
 {{% tab name="Fedora package" %}}
 
-Kompose is in Fedora 24, 25 and 26 repositories. You can install it just like any other package.
+Kompose is in Fedora 24, 25 and 26 repositories. You can install it like any other package.
 
 ```bash
 sudo dnf -y install kompose
@@ -87,7 +87,7 @@ brew install kompose
 
 ## Use Kompose
 
-In just a few steps, we'll take you from Docker Compose to Kubernetes. All
+In a few steps, we'll take you from Docker Compose to Kubernetes. All
 you need is an existing `docker-compose.yml` file.
 
 1. Go to the directory containing your `docker-compose.yml` file. If you don't have one, test using this one.
diff --git a/content/en/docs/tasks/debug-application-cluster/debug-application-introspection.md b/content/en/docs/tasks/debug-application-cluster/debug-application-introspection.md
index 730b9fb00c..03ba9d2c02 100644
--- a/content/en/docs/tasks/debug-application-cluster/debug-application-introspection.md
+++ b/content/en/docs/tasks/debug-application-cluster/debug-application-introspection.md
@@ -177,7 +177,7 @@ kubectl describe pod nginx-deployment-1370807587-fz9sd
 
 Here you can see the event generated by the scheduler saying that the Pod failed to schedule for reason `FailedScheduling` (and possibly others).  The message tells us that there were not enough resources for the Pod on any of the nodes.
 
-To correct this situation, you can use `kubectl scale` to update your Deployment to specify four or fewer replicas. (Or you could just leave the one Pod pending, which is harmless.)
+To correct this situation, you can use `kubectl scale` to update your Deployment to specify four or fewer replicas. (Or you could leave the one Pod pending, which is harmless.)
 
 Events such as the ones you saw at the end of `kubectl describe pod` are persisted in etcd and provide high-level information on what is happening in the cluster. To list all events you can use
 
diff --git a/content/en/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md b/content/en/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
index 8a972e1365..c99182b854 100644
--- a/content/en/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
+++ b/content/en/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
@@ -57,7 +57,7 @@ case you can try several things:
   will never be scheduled.
 
     You can check node capacities with the `kubectl get nodes -o <format>`
-    command. Here are some example command lines that extract just the necessary
+    command. Here are some example command lines that extract the necessary
     information:
 
     ```shell
diff --git a/content/en/docs/tasks/debug-application-cluster/debug-service.md b/content/en/docs/tasks/debug-application-cluster/debug-service.md
index 3613e5b2cb..3b3b1c6081 100644
--- a/content/en/docs/tasks/debug-application-cluster/debug-service.md
+++ b/content/en/docs/tasks/debug-application-cluster/debug-service.md
@@ -178,7 +178,7 @@ kubectl expose deployment hostnames --port=80 --target-port=9376
 service/hostnames exposed
 ```
 
-And read it back, just to be sure:
+And read it back:
 
 ```shell
 kubectl get svc hostnames
@@ -427,8 +427,7 @@ hostnames-632524106-ly40y   1/1       Running   0          1h
 hostnames-632524106-tlaok   1/1       Running   0          1h
 ```
 
-The `-l app=hostnames` argument is a label selector - just like our Service
-has.
+The `-l app=hostnames` argument is a label selector configured on the Service.
 
 The "AGE" column says that these Pods are about an hour old, which implies that
 they are running fine and not crashing.
@@ -607,7 +606,7 @@ iptables-save | grep hostnames
 -A KUBE-PORTALS-HOST -d 10.0.1.175/32 -p tcp -m comment --comment "default/hostnames:default" -m tcp --dport 80 -j DNAT --to-destination 10.240.115.247:48577
 ```
 
-There should be 2 rules for each port of your Service (just one in this
+There should be 2 rules for each port of your Service (only one in this
 example) - a "KUBE-PORTALS-CONTAINER" and a "KUBE-PORTALS-HOST".
 
 Almost nobody should be using the "userspace" mode any more, so you won't spend
diff --git a/content/en/docs/tasks/debug-application-cluster/logging-stackdriver.md b/content/en/docs/tasks/debug-application-cluster/logging-stackdriver.md
index 1703bbbe42..29ace662f6 100644
--- a/content/en/docs/tasks/debug-application-cluster/logging-stackdriver.md
+++ b/content/en/docs/tasks/debug-application-cluster/logging-stackdriver.md
@@ -294,9 +294,9 @@ a running cluster in the [Deploying section](#deploying).
 
 ### Changing `DaemonSet` parameters
 
-When you have the Stackdriver Logging `DaemonSet` in your cluster, you can just modify the
-`template` field in its spec, daemonset controller will update the pods for you. For example,
-let's assume you've just installed the Stackdriver Logging as described above. Now you want to
+When you have the Stackdriver Logging `DaemonSet` in your cluster, you can modify the
+`template` field in its spec. The DaemonSet controller manages the pods for you.
+For example, assume you've installed the Stackdriver Logging as described above. Now you want to
 change the memory limit to give fluentd more memory to safely process more logs.
 
 Get the spec of `DaemonSet` running in your cluster:
diff --git a/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md b/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
index 96f55c3950..7ad7072fd7 100644
--- a/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
+++ b/content/en/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
@@ -12,7 +12,7 @@ weight: 20
 Kubernetes ships with a default scheduler that is described
 [here](/docs/reference/command-line-tools-reference/kube-scheduler/).
 If the default scheduler does not suit your needs you can implement your own scheduler.
-Not just that, you can even run multiple schedulers simultaneously alongside the default
+Moreover, you can even run multiple schedulers simultaneously alongside the default
 scheduler and instruct Kubernetes what scheduler to use for each of your pods. Let's
 learn how to run multiple schedulers in Kubernetes with an example.
 
@@ -30,7 +30,7 @@ in the Kubernetes source directory for a canonical example.
 ## Package the scheduler
 
 Package your scheduler binary into a container image. For the purposes of this example,
-let's just use the default scheduler (kube-scheduler) as our second scheduler as well.
+you can use the default scheduler (kube-scheduler) as your second scheduler.
 Clone the [Kubernetes source code from GitHub](https://github.com/kubernetes/kubernetes)
 and build the source.
 
@@ -61,9 +61,9 @@ gcloud docker -- push gcr.io/my-gcp-project/my-kube-scheduler:1.0
 
 ## Define a Kubernetes Deployment for the scheduler
 
-Now that we have our scheduler in a container image, we can just create a pod
-config for it and run it in our Kubernetes cluster. But instead of creating a pod
-directly in the cluster, let's use a [Deployment](/docs/concepts/workloads/controllers/deployment/)
+Now that you have your scheduler in a container image, create a pod
+configuration for it and run it in your Kubernetes cluster. But instead of creating a pod
+directly in the cluster, you can use a [Deployment](/docs/concepts/workloads/controllers/deployment/)
 for this example. A [Deployment](/docs/concepts/workloads/controllers/deployment/) manages a
 [Replica Set](/docs/concepts/workloads/controllers/replicaset/) which in turn manages the pods,
 thereby making the scheduler resilient to failures. Here is the deployment
@@ -83,7 +83,7 @@ detailed description of other command line arguments.
 
 ## Run the second scheduler in the cluster
 
-In order to run your scheduler in a Kubernetes cluster, just create the deployment
+In order to run your scheduler in a Kubernetes cluster, create the deployment
 specified in the config above in a Kubernetes cluster:
 
 ```shell
@@ -132,9 +132,9 @@ kubectl edit clusterrole system:kube-scheduler
 
 ## Specify schedulers for pods
 
-Now that our second scheduler is running, let's create some pods, and direct them
-to be scheduled by either the default scheduler or the one we just deployed.
-In order to schedule a given pod using a specific scheduler, we specify the name of the
+Now that your second scheduler is running, create some pods, and direct them
+to be scheduled by either the default scheduler or the one you deployed.
+In order to schedule a given pod using a specific scheduler, specify the name of the
 scheduler in that pod spec. Let's look at three examples.
 
 - Pod spec without any scheduler name
@@ -196,7 +196,7 @@ while the other two pods get scheduled. Once we submit the scheduler deployment
 and our new scheduler starts running, the `annotation-second-scheduler` pod gets
 scheduled as well.
 
-Alternatively, one could just look at the "Scheduled" entries in the event logs to
+Alternatively, you can look at the "Scheduled" entries in the event logs to
 verify that the pods were scheduled by the desired schedulers.
 
 ```shell
diff --git a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
index b48d44a078..671637c084 100644
--- a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
+++ b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
@@ -404,7 +404,7 @@ how to [authenticate API servers](/docs/reference/access-authn-authz/extensible-
 A conversion webhook must not mutate anything inside of `metadata` of the converted object
 other than `labels` and `annotations`.
 Attempted changes to `name`, `UID` and `namespace` are rejected and fail the request
-which caused the conversion. All other changes are just ignored.  
+which caused the conversion. All other changes are ignored.  
 
 ### Deploy the conversion webhook service
 
diff --git a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
index 62251eb222..3230b7b73a 100644
--- a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
+++ b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
@@ -520,7 +520,7 @@ CustomResourceDefinition and migrating your objects from one version to another.
 ### Finalizers
 
 *Finalizers* allow controllers to implement asynchronous pre-delete hooks.
-Custom objects support finalizers just like built-in objects.
+Custom objects support finalizers similar to built-in objects.
 
 You can add a finalizer to a custom object like this:
 
diff --git a/content/en/docs/tasks/extend-kubernetes/setup-extension-api-server.md b/content/en/docs/tasks/extend-kubernetes/setup-extension-api-server.md
index 626ddcab5c..64c41d9094 100644
--- a/content/en/docs/tasks/extend-kubernetes/setup-extension-api-server.md
+++ b/content/en/docs/tasks/extend-kubernetes/setup-extension-api-server.md
@@ -41,7 +41,7 @@ Alternatively, you can use an existing 3rd party solution, such as [apiserver-bu
 1. Make sure that your extension-apiserver loads those certs from that volume and that they are used in the HTTPS handshake.
 1. Create a Kubernetes service account in your namespace.
 1. Create a Kubernetes cluster role for the operations you want to allow on your resources.
-1. Create a Kubernetes cluster role binding from the service account in your namespace to the cluster role you just created.
+1. Create a Kubernetes cluster role binding from the service account in your namespace to the cluster role you created.
 1. Create a Kubernetes cluster role binding from the service account in your namespace to the `system:auth-delegator` cluster role to delegate auth decisions to the Kubernetes core API server.
 1. Create a Kubernetes role binding from the service account in your namespace to the `extension-apiserver-authentication-reader` role. This allows your extension api-server to access the `extension-apiserver-authentication` configmap.
 1. Create a Kubernetes apiservice. The CA cert above should be base64 encoded, stripped of new lines and used as the spec.caBundle in the apiservice. This should not be namespaced. If using the [kube-aggregator API](https://github.com/kubernetes/kube-aggregator/), only pass in the PEM encoded CA bundle because the base 64 encoding is done for you.
diff --git a/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md b/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md
index ce7da0b453..62ddf56aab 100644
--- a/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md
+++ b/content/en/docs/tasks/job/coarse-parallel-processing-work-queue.md
@@ -19,7 +19,7 @@ Here is an overview of the steps in this example:
 1. **Start a message queue service.**  In this example, we use RabbitMQ, but you could use another
    one.  In practice you would set up a message queue service once and reuse it for many jobs.
 1. **Create a queue, and fill it with messages.**  Each message represents one task to be done.  In
-   this example, a message is just an integer that we will do a lengthy computation on.
+   this example, a message is an integer that we will do a lengthy computation on.
 1. **Start a Job that works on tasks from the queue**.  The Job starts several pods.  Each pod takes
    one task from the message queue, processes it, and repeats until the end of the queue is reached.
 
@@ -141,13 +141,12 @@ root@temp-loe07:/#
 ```
 
 In the last command, the `amqp-consume` tool takes one message (`-c 1`)
-from the queue, and passes that message to the standard input of an arbitrary command.  In this case, the program `cat` is just printing
-out what it gets on the standard input, and the echo is just to add a carriage
+from the queue, and passes that message to the standard input of an arbitrary command.  In this case, the program `cat` prints out the characters read from standard input, and the echo adds a carriage
 return so the example is readable.
 
 ## Filling the Queue with tasks
 
-Now let's fill the queue with some "tasks".  In our example, our tasks are just strings to be
+Now let's fill the queue with some "tasks".  In our example, our tasks are strings to be
 printed.
 
 In a practice, the content of the messages might be:
diff --git a/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md b/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md
index 7f3c30121e..268eed7f9b 100644
--- a/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md
+++ b/content/en/docs/tasks/job/fine-parallel-processing-work-queue.md
@@ -21,7 +21,7 @@ Here is an overview of the steps in this example:
    detect when a finite-length work queue is empty.  In practice you would set up a store such
    as Redis once and reuse it for the work queues of many jobs, and other things.
 1. **Create a queue, and fill it with messages.**  Each message represents one task to be done.  In
-   this example, a message is just an integer that we will do a lengthy computation on.
+   this example, a message is an integer that we will do a lengthy computation on.
 1. **Start a Job that works on tasks from the queue**.  The Job starts several pods.  Each pod takes
    one task from the message queue, processes it, and repeats until the end of the queue is reached.
 
@@ -55,7 +55,7 @@ You could also download the following files directly:
 
 ## Filling the Queue with tasks
 
-Now let's fill the queue with some "tasks".  In our example, our tasks are just strings to be
+Now let's fill the queue with some "tasks".  In our example, our tasks are strings to be
 printed.
 
 Start a temporary interactive pod for running the Redis CLI.
diff --git a/content/en/docs/tasks/manage-daemon/rollback-daemon-set.md b/content/en/docs/tasks/manage-daemon/rollback-daemon-set.md
index 05e8060cc9..704b01cc9a 100644
--- a/content/en/docs/tasks/manage-daemon/rollback-daemon-set.md
+++ b/content/en/docs/tasks/manage-daemon/rollback-daemon-set.md
@@ -25,7 +25,7 @@ You should already know how to [perform a rolling update on a
 
 ### Step 1: Find the DaemonSet revision you want to roll back to
 
-You can skip this step if you just want to roll back to the last revision.
+You can skip this step if you only want to roll back to the last revision.
 
 List all revisions of a DaemonSet:
 
diff --git a/content/en/docs/tasks/manage-daemon/update-daemon-set.md b/content/en/docs/tasks/manage-daemon/update-daemon-set.md
index f9e35cb0f5..2f3001da0f 100644
--- a/content/en/docs/tasks/manage-daemon/update-daemon-set.md
+++ b/content/en/docs/tasks/manage-daemon/update-daemon-set.md
@@ -111,7 +111,7 @@ kubectl edit ds/fluentd-elasticsearch -n kube-system
 
 ##### Updating only the container image
 
-If you just need to update the container image in the DaemonSet template, i.e.
+If you only need to update the container image in the DaemonSet template, i.e.
 `.spec.template.spec.containers[*].image`, use `kubectl set image`:
 
 ```shell
@@ -167,7 +167,7 @@ If the recent DaemonSet template update is broken, for example, the container is
 crash looping, or the container image doesn't exist (often due to a typo),
 DaemonSet rollout won't progress.
 
-To fix this, just update the DaemonSet template again. New rollout won't be
+To fix this, update the DaemonSet template again. New rollout won't be
 blocked by previous unhealthy rollouts.
 
 #### Clock skew
diff --git a/content/en/docs/tasks/manage-gpus/scheduling-gpus.md b/content/en/docs/tasks/manage-gpus/scheduling-gpus.md
index 4f8fc434f9..997005e9ce 100644
--- a/content/en/docs/tasks/manage-gpus/scheduling-gpus.md
+++ b/content/en/docs/tasks/manage-gpus/scheduling-gpus.md
@@ -37,7 +37,7 @@ When the above conditions are true, Kubernetes will expose `amd.com/gpu` or
 `nvidia.com/gpu` as a schedulable resource.
 
 You can consume these GPUs from your containers by requesting
-`<vendor>.com/gpu` just like you request `cpu` or `memory`.
+`<vendor>.com/gpu` the same way you request `cpu` or `memory`.
 However, there are some limitations in how you specify the resource requirements
 when using GPUs:
 
diff --git a/content/en/docs/tasks/run-application/delete-stateful-set.md b/content/en/docs/tasks/run-application/delete-stateful-set.md
index a70e018b85..94b3c583eb 100644
--- a/content/en/docs/tasks/run-application/delete-stateful-set.md
+++ b/content/en/docs/tasks/run-application/delete-stateful-set.md
@@ -43,8 +43,8 @@ You may need to delete the associated headless service separately after the Stat
 kubectl delete service <service-name>
 ```
 
-Deleting a StatefulSet through kubectl will scale it down to 0, thereby deleting all pods that are a part of it. 
-If you want to delete just the StatefulSet and not the pods, use `--cascade=false`.
+When deleting a StatefulSet through `kubectl`, the StatefulSet scales down to 0. All Pods that are part of this workload are also deleted. If you want to delete only the StatefulSet and not the Pods, use `--cascade=false`.
+For example:
 
 ```shell
 kubectl delete -f <file.yaml> --cascade=false
diff --git a/content/en/docs/tasks/run-application/force-delete-stateful-set-pod.md b/content/en/docs/tasks/run-application/force-delete-stateful-set-pod.md
index 28de1865fd..0001f4c9f4 100644
--- a/content/en/docs/tasks/run-application/force-delete-stateful-set-pod.md
+++ b/content/en/docs/tasks/run-application/force-delete-stateful-set-pod.md
@@ -44,7 +44,7 @@ for StatefulSet Pods. Graceful deletion is safe and will ensure that the Pod
 [shuts down gracefully](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)
 before the kubelet deletes the name from the apiserver.
 
-Kubernetes (versions 1.5 or newer) will not delete Pods just because a Node is unreachable.
+A Pod is not deleted automatically when a node is unreachable.
 The Pods running on an unreachable Node enter the 'Terminating' or 'Unknown' state after a
 [timeout](/docs/concepts/architecture/nodes/#condition).
 Pods may also enter these states when the user attempts graceful deletion of a Pod
diff --git a/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index 49009e1268..84ae1addd2 100644
--- a/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -382,7 +382,7 @@ with *external metrics*.
 
 Using external metrics requires knowledge of your monitoring system; the setup is
 similar to that required when using custom metrics. External metrics allow you to autoscale your cluster
-based on any metric available in your monitoring system. Just provide a `metric` block with a
+based on any metric available in your monitoring system. Provide a `metric` block with a
 `name` and `selector`, as above, and use the `External` metric type instead of `Object`.
 If multiple time series are matched by the `metricSelector`,
 the sum of their values is used by the HorizontalPodAutoscaler.
diff --git a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
index 763d9ab996..3d83a82f3c 100644
--- a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
+++ b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
@@ -162,7 +162,7 @@ can be fetched, scaling is skipped. This means that the HPA is still capable
 of scaling up if one or more metrics give a `desiredReplicas` greater than
 the current value.
 
-Finally, just before HPA scales the target, the scale recommendation is recorded.  The
+Finally, right before HPA scales the target, the scale recommendation is recorded.  The
 controller considers all recommendations within a configurable window choosing the
 highest recommendation from within that window. This value can be configured using the `--horizontal-pod-autoscaler-downscale-stabilization` flag, which defaults to 5 minutes.
 This means that scaledowns will occur gradually, smoothing out the impact of rapidly
diff --git a/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md b/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md
index 0789997309..a724d5b17b 100644
--- a/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md
+++ b/content/en/docs/tasks/service-catalog/install-service-catalog-using-sc.md
@@ -12,10 +12,7 @@ You can use the GCP [Service Catalog Installer](https://github.com/GoogleCloudPl
 tool to easily install or uninstall Service Catalog on your Kubernetes cluster, linking it to
 Google Cloud projects.
 
-Service Catalog itself can work with any kind of managed service, not just Google Cloud.
-
-
-
+Service Catalog can work with any kind of managed service, not only Google Cloud.
 
 ## {{% heading "prerequisites" %}}
 
diff --git a/content/en/docs/test.md b/content/en/docs/test.md
index aadfc9a9e3..ae5bb447f1 100644
--- a/content/en/docs/test.md
+++ b/content/en/docs/test.md
@@ -113,7 +113,7 @@ mind:
     two consecutive lists. **The HTML comment needs to be at the left margin.**
 2.  Numbered lists can have paragraphs or block elements within them.
 
-    Just indent the content to be the same as the first line of the bullet
+    Indent the content to be the same as the first line of the bullet
     point. **This paragraph and the code block line up with the `N` in
     `Numbered` above.**
 
diff --git a/content/en/docs/tutorials/clusters/apparmor.md b/content/en/docs/tutorials/clusters/apparmor.md
index 54c8a0f44c..b220647e62 100644
--- a/content/en/docs/tutorials/clusters/apparmor.md
+++ b/content/en/docs/tutorials/clusters/apparmor.md
@@ -184,7 +184,7 @@ profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
 ```
 
 Since we don't know where the Pod will be scheduled, we'll need to load the profile on all our
-nodes. For this example we'll just use SSH to install the profiles, but other approaches are
+nodes. For this example we'll use SSH to install the profiles, but other approaches are
 discussed in [Setting up nodes with profiles](#setting-up-nodes-with-profiles).
 
 ```shell
diff --git a/content/en/docs/tutorials/clusters/seccomp.md b/content/en/docs/tutorials/clusters/seccomp.md
index 376c349f72..971618cf55 100644
--- a/content/en/docs/tutorials/clusters/seccomp.md
+++ b/content/en/docs/tutorials/clusters/seccomp.md
@@ -67,8 +67,8 @@ into the cluster.
 
 For simplicity, [kind](https://kind.sigs.k8s.io/) can be used to create a single
 node cluster with the seccomp profiles loaded. Kind runs Kubernetes in Docker,
-so each node of the cluster is actually just a container. This allows for files
-to be mounted in the filesystem of each container just as one might load files
+so each node of the cluster is a container. This allows for files
+to be mounted in the filesystem of each container similar to loading files
 onto a node.
 
 {{< codenew file="pods/security/seccomp/kind.yaml" >}}
diff --git a/content/en/docs/tutorials/hello-minikube.md b/content/en/docs/tutorials/hello-minikube.md
index 4bd6a9a82c..035efcb8f2 100644
--- a/content/en/docs/tutorials/hello-minikube.md
+++ b/content/en/docs/tutorials/hello-minikube.md
@@ -152,7 +152,7 @@ Kubernetes [*Service*](/docs/concepts/services-networking/service/).
     The application code inside the image `k8s.gcr.io/echoserver` only listens on TCP port 8080. If you used
     `kubectl expose` to expose a different port, clients could not connect to that other port.
 
-2. View the Service you just created:
+2. View the Service you created:
 
     ```shell
     kubectl get services
@@ -227,7 +227,7 @@ The minikube tool includes a set of built-in {{< glossary_tooltip text="addons"
     metrics-server was successfully enabled
     ```
 
-3. View the Pod and Service you just created:
+3. View the Pod and Service you created:
 
     ```shell
     kubectl get pod,svc -n kube-system

From 5ae7283deb375182b74805dacb45c33fb6d451b8 Mon Sep 17 00:00:00 2001
From: "mengjiao.liu" <mengjiao.liu@daocloud.io>
Date: Wed, 17 Mar 2021 21:47:45 +0800
Subject: [PATCH 237/788] update volume rdb `Rados Block Device` link

---
 content/en/docs/concepts/storage/volumes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 8ed91067e0..97e8466291 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -932,7 +932,7 @@ GitHub project has [instructions](https://github.com/quobyte/quobyte-csi#quobyte
 ### rbd
 
 An `rbd` volume allows a
-[Rados Block Device](https://ceph.com/docs/master/rbd/rbd/) (RBD) volume to mount into your
+[Rados Block Device](https://docs.ceph.com/en/latest/rbd/) (RBD) volume to mount into your
 Pod. Unlike `emptyDir`, which is erased when a pod is removed, the contents of
 an `rbd` volume are preserved and the volume is unmounted. This
 means that a RBD volume can be pre-populated with data, and that data can

From 686327077692f31bb7555c8d602f5221dec2afbb Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio@users.noreply.github.com>
Date: Wed, 17 Mar 2021 23:29:01 -0300
Subject: [PATCH 238/788] Add the content of
 content/pt/docs/concepts/containers/container-lifecycle-hooks.md

---
 .../containers/container-lifecycle-hooks.md   | 79 ++++++++-----------
 1 file changed, 31 insertions(+), 48 deletions(-)

diff --git a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
index e7c925866a..d0419bbc4e 100644
--- a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
@@ -24,27 +24,16 @@ Existem dois _hooks_ que são expostos para os contêiners:
 
 `PostStart`
 
-This hook is executed immediately after a container is created.
-However, there is no guarantee that the hook will execute before the container ENTRYPOINT.
-No parameters are passed to the handler.
-
 Este _hook_ é executado imediatamente após um contêiner ser criado.
 Entretanto, não há garantia que o _hook_ será executado antes do ENTRYPOINT do contêiner.
 Nenhum parâmetro é passado para o manipulador.
 
 `PreStop`
 
-The Pod's termination
-grace period countdown begins before the `PreStop` hook is executed, so regardless of the outcome of
-the handler, the container will eventually terminate within the Pod's termination grace period. No
-parameters are passed to the handler.
-
-A more detailed description of the termination behavior can be found in
-[Termination of Pods](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination).
-
 Esse _hook_ é chamado imediatamente antes de um contêiner ser encerrado devido a uma solicitação de API ou um gerenciamento de evento como liveness/startup probe failure, preemption, resource contention e outros.
-Uma chamada ao _hook_ `PreStop` falha se o contêiner já está em um estado finalizado ou concluído e o _hook_ deve ser concluído antes que o sinal TERM seja enviado para parar o contêiner. 
+Uma chamada ao _hook_ `PreStop` falha se o contêiner já está em um estado finalizado ou concluído e o _hook_ deve ser concluído antes que o sinal TERM seja enviado para parar o contêiner. A contagem regressiva do período de tolerância de término do Pod começa antes que o _hook_ `PreStop` seja executado, portanto, independentemente do resultado do manipulador, o contêiner será encerrado dentro do período de tolerância de encerramento do Pod. Nenhum parâmetro é passado para o manispulador.
 
+Uma descrição mais detalhada do comportamento de término pode ser encontrada em [Término de Pods](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination).
 
 ### Implementações de manipulador de hook
 
@@ -63,47 +52,41 @@ As chamadas do manipulador do _hook_ são síncronas no contexto do Pod que cont
 Isso significa que para um _hook_ `PostStart`, o ENTRYPOINT do contêiner e o _hook_ disparam de forma assíncrona.
 No entanto, se o _hook_ demorar muito para ser executado ou travar, o contêiner não consegue atingir o estado `running`.
 
-This grace period applies to the total time it takes for
-both the `PreStop` hook to execute and for the Container to stop normally. If, for example,
-`terminationGracePeriodSeconds` is 60, and the hook takes 55 seconds to complete, and the Container
-takes 10 seconds to stop normally after receiving the signal, then the Container will be killed
-before it can stop normally, since `terminationGracePeriodSeconds` is less than the total time
-(55+10) it takes for these two things to happen.
 
 Os _hooks_ `PreStop` não são executados de forma assíncrona a partir do sinal para parar o conêiner, o _hook_ precisa finalizar a sua execução antes que o sinal TERM possa ser enviado.
-Se um _hook_ `PreStop` travar durante a execução, a fase do Pod será `Terminating` e permanecerá até que o Pod seja morto após seu `terminationGracePeriodSeconds` expirar.
+Se um _hook_ `PreStop` travar durante a execução, a fase do Pod será `Terminating` e permanecerá até que o Pod seja morto após seu `terminationGracePeriodSeconds` expirar. Esse período de tolerância se aplica ao tempo total necessário
+para o _hook_ `PreStop`executar e para o contêiner parar normalmente.
+Se por exemplo, o `terminationGracePeriodSeconds` é 60, e o _hook_ leva 55 segundos para ser concluído, e o contêiner leva 10 segundos para parar normalmente após receber o sinal, então o contêiner será morto antes que possa parar
+normalmente, uma vez que o `terminationGracePeriodSeconds` é menor que o tempo total (55 + 10) que é necessário para que essas duas coisas aconteçam.
 
+Se um _hook_ `PostStart` ou `PreStop` falhar, ele mata o contêiner. 
 
-If either a `PostStart` or `PreStop` hook fails,
-it kills the Container.
+Os usuários devem tornar seus _hooks_ o mais leve possíveis.
+Há casos, no entanto, em que comandos de longa duração fazem sentido, como ao salvar o estado
+antes de parar um contêiner.
 
-Users should make their hook handlers as lightweight as possible.
-There are cases, however, when long running commands make sense,
-such as when saving state prior to stopping a Container.
+### Garantias de entrega de _hooks_
 
-### Hook delivery guarantees
+A entrega do _hook_ é destinada a acontecer *pelo menos uma vez*,
+o que quer dizer que um _hook_ pode ser chamado várias vezes para qualquer evento, 
+como para `PostStart` ou `PreStop`.
+Depende da implementação do _hook_ lidar com isso corretamente.
 
-Hook delivery is intended to be *at least once*,
-which means that a hook may be called multiple times for any given event,
-such as for `PostStart` or `PreStop`.
-It is up to the hook implementation to handle this correctly.
+Geralmente, apenas entregas únicas são feitas.
+Se, por exemplo, um receptor de _hook_ HTTP estiver inativo e não puder receber tráfego,
+não há tentativa de reenviar.
+Em alguns casos raros, no entanto, pode ocorrer uma entrega dupla.
+Por exemplo, se um kubelet reiniciar no meio do envio de um _hook_, o _hook_ pode ser 
+reenviado depois que o kubelet voltar a funcionar.
 
-Generally, only single deliveries are made.
-If, for example, an HTTP hook receiver is down and is unable to take traffic,
-there is no attempt to resend.
-In some rare cases, however, double delivery may occur.
-For instance, if a kubelet restarts in the middle of sending a hook,
-the hook might be resent after the kubelet comes back up.
-
-### Debugging Hook handlers
-
-The logs for a Hook handler are not exposed in Pod events.
-If a handler fails for some reason, it broadcasts an event.
-For `PostStart`, this is the `FailedPostStartHook` event,
-and for `PreStop`, this is the `FailedPreStopHook` event.
-You can see these events by running `kubectl describe pod <pod_name>`.
-Here is some example output of events from running this command:
+### Depurando manipuladores de _hooks_
 
+Os logs para um manipulador de _hook_ não expostos em eventos de Pod.
+Se um manipulador falhar por algum motivo, ele transmitirá um evento.
+Para `PostStart` é o evento `FailedPostStartHook` e para `PreStop` é o evento
+`failedPreStopHook`.
+Você pode ver esses eventos executando `kubectl describe pod <nome_do_pod>`.
+Aqui está um exemplo de saída de eventos da execução deste comando:
 ```
 Events:
   FirstSeen  LastSeen  Count  From                                                   SubObjectPath          Type      Reason               Message
@@ -124,7 +107,7 @@ Events:
 ## {{% heading "whatsnext" %}}
 
 
-* Learn more about the [Container environment](/docs/concepts/containers/container-environment/).
-* Get hands-on experience
-  [attaching handlers to Container lifecycle events](/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/).
+* Saiba mais sobre o [Ambiente de contêiner](/docs/concepts/containers/container-environment/).
+* Obtenha experiência prática
+  [anexando manipuladores a eventos de ciclo de vida do contêiner](/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/).
 

From 243317319dbc8e33e3f0da538e9f8fa8f3e743f0 Mon Sep 17 00:00:00 2001
From: "mengjiao.liu" <mengjiao.liu@daocloud.io>
Date: Thu, 18 Mar 2021 10:32:30 +0800
Subject: [PATCH 239/788] [zh] update volume rdb `Rados Block Device` link

---
 content/zh/docs/concepts/storage/volumes.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/storage/volumes.md b/content/zh/docs/concepts/storage/volumes.md
index 6db5ade818..ad79480a44 100644
--- a/content/zh/docs/concepts/storage/volumes.md
+++ b/content/zh/docs/concepts/storage/volumes.md
@@ -1479,13 +1479,13 @@ Quobyte 的 GitHub 项目包含以 CSI 形式部署 Quobyte 的
 
 <!--
 An `rbd` volume allows a
-[Rados Block Device](https://ceph.com/docs/master/rbd/rbd/) volume to mount into your
+[Rados Block Device](https://docs.ceph.com/en/latest/rbd/) volume to mount into your
 Pod.  Unlike `emptyDir`, which is erased when a Pod is removed, the contents of
 a `rbd` volume are preserved and the volume is merely unmounted.  This
 means that a RBD volume can be pre-populated with data, and that data can
 be shared between pods.
 -->
-`rbd` 卷允许将 [Rados 块设备](https://ceph.com/docs/master/rbd/rbd/) 卷挂载到你的 Pod 中.
+`rbd` 卷允许将 [Rados 块设备](https://docs.ceph.com/en/latest/rbd/) 卷挂载到你的 Pod 中.
 不像 `emptyDir` 那样会在删除 Pod 的同时也会被删除，`rbd` 卷的内容在删除 Pod 时
 会被保存，卷只是被卸载。
 这意味着 `rbd` 卷可以被预先填充数据，并且这些数据可以在 Pod 之间共享。

From dd892357088d165fae23d4ce0c899470da155188 Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio@users.noreply.github.com>
Date: Wed, 17 Mar 2021 23:32:40 -0300
Subject: [PATCH 240/788] Add extra space at line 90

---
 content/pt/docs/concepts/containers/container-lifecycle-hooks.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
index d0419bbc4e..5c54c374d6 100644
--- a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
@@ -87,6 +87,7 @@ Para `PostStart` é o evento `FailedPostStartHook` e para `PreStop` é o evento
 `failedPreStopHook`.
 Você pode ver esses eventos executando `kubectl describe pod <nome_do_pod>`.
 Aqui está um exemplo de saída de eventos da execução deste comando:
+
 ```
 Events:
   FirstSeen  LastSeen  Count  From                                                   SubObjectPath          Type      Reason               Message

From 1aa40b810ea5803082f2ab9934587b7e999d0d3c Mon Sep 17 00:00:00 2001
From: "mengjiao.liu" <mengjiao.liu@daocloud.io>
Date: Thu, 18 Mar 2021 10:35:18 +0800
Subject: [PATCH 241/788] [ko] update volume rdb `Rados Block Device` link

---
 content/ko/docs/concepts/storage/volumes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index 7e1646820e..f6c78ffc0f 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -924,7 +924,7 @@ CSI 는 쿠버네티스 내에서 Quobyte 볼륨을 사용하기 위해 권장
 ### rbd
 
 `rbd` 볼륨을 사용하면
-[Rados Block Device](https://ceph.com/docs/master/rbd/rbd/)(RBD) 볼륨을 파드에 마운트할 수
+[Rados Block Device](https://docs.ceph.com/en/latest/rbd/)(RBD) 볼륨을 파드에 마운트할 수
 있다. 파드를 제거할 때 지워지는 `emptyDir` 와는 다르게 `rbd` 볼륨의
 내용은 유지되고, 볼륨은 마운트 해제만 된다. 이
 의미는 RBD 볼륨에 데이터를 미리 채울 수 있으며, 데이터를

From 90e2984666e1d08512cbbaca9cbea140d22ab22b Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio@users.noreply.github.com>
Date: Wed, 17 Mar 2021 23:49:02 -0300
Subject: [PATCH 242/788] Fix title

---
 .../pt/docs/concepts/containers/container-lifecycle-hooks.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
index 5c54c374d6..ec7a7fd55c 100644
--- a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
@@ -1,5 +1,5 @@
 ---
-title: Ciclos de Vida do Contêiner
+title: Hooks de Ciclo de Vida do Contêiner
 content_type: concept
 weight: 30
 ---

From 9c9366a36e7fa479bad38ba467bda6799ea5ff1e Mon Sep 17 00:00:00 2001
From: "mengjiao.liu" <mengjiao.liu@daocloud.io>
Date: Thu, 18 Mar 2021 11:02:08 +0800
Subject: [PATCH 243/788] [zh] sync
 content/en/docs/concepts/storage/dynamic-provisioning.md

---
 content/zh/docs/concepts/storage/dynamic-provisioning.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/storage/dynamic-provisioning.md b/content/zh/docs/concepts/storage/dynamic-provisioning.md
index ae6d82ec4e..14b72ac157 100644
--- a/content/zh/docs/concepts/storage/dynamic-provisioning.md
+++ b/content/zh/docs/concepts/storage/dynamic-provisioning.md
@@ -112,13 +112,13 @@ parameters:
 Users request dynamically provisioned storage by including a storage class in
 their `PersistentVolumeClaim`. Before Kubernetes v1.6, this was done via the
 `volume.beta.kubernetes.io/storage-class` annotation. However, this annotation
-is deprecated since v1.6. Users now can and should instead use the
+is deprecated since v1.9. Users now can and should instead use the
 `storageClassName` field of the `PersistentVolumeClaim` object. The value of
 this field must match the name of a `StorageClass` configured by the
 administrator (see [below](#enabling-dynamic-provisioning)).
 -->
 用户通过在 `PersistentVolumeClaim` 中包含存储类来请求动态供应的存储。
-在 Kubernetes v1.6 之前，这通过 `volume.beta.kubernetes.io/storage-class` 注解实现。然而，这个注解自 v1.6 起就不被推荐使用了。
+在 Kubernetes v1.9 之前，这通过 `volume.beta.kubernetes.io/storage-class` 注解实现。然而，这个注解自 v1.6 起就不被推荐使用了。
 用户现在能够而且应该使用 `PersistentVolumeClaim` 对象的 `storageClassName` 字段。
 这个字段的值必须能够匹配到集群管理员配置的 `StorageClass` 名称（见[下面](#enabling-dynamic-provisioning)）。
 

From d0645e2384815b02d7c35bc06646b779b31984ec Mon Sep 17 00:00:00 2001
From: pierre villard <pvillard@ilki.fr>
Date: Thu, 18 Mar 2021 15:58:06 +0100
Subject: [PATCH 244/788] Update control-plane-node-communication.md

Kubernetes Service is located on Default namespace. Not in all nespaces
---
 .../concepts/architecture/control-plane-node-communication.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/architecture/control-plane-node-communication.md b/content/en/docs/concepts/architecture/control-plane-node-communication.md
index 2e7235a89f..b4adab6f71 100644
--- a/content/en/docs/concepts/architecture/control-plane-node-communication.md
+++ b/content/en/docs/concepts/architecture/control-plane-node-communication.md
@@ -24,7 +24,7 @@ One or more forms of [authorization](/docs/reference/access-authn-authz/authoriz
 Nodes should be provisioned with the public root certificate for the cluster such that they can connect securely to the apiserver along with valid client credentials. A good approach is that the client credentials provided to the kubelet are in the form of a client certificate. See [kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) for automated provisioning of kubelet client certificates.
 
 Pods that wish to connect to the apiserver can do so securely by leveraging a service account so that Kubernetes will automatically inject the public root certificate and a valid bearer token into the pod when it is instantiated.
-The `kubernetes` service (in all namespaces) is configured with a virtual IP address that is redirected (via kube-proxy) to the HTTPS endpoint on the apiserver.
+The `kubernetes` service (in `default` namespace) is configured with a virtual IP address that is redirected (via kube-proxy) to the HTTPS endpoint on the apiserver.
 
 The control plane components also communicate with the cluster apiserver over the secure port.
 

From 1b56b273dafd73f5d1bd43820af3e2de253dff84 Mon Sep 17 00:00:00 2001
From: Alexandre Maia <alex_maiabr@hotmail.com>
Date: Thu, 18 Mar 2021 14:16:32 -0300
Subject: [PATCH 245/788] Update scale-intro.html
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Replace "Rolling updates" for "Atualizações graduais"
---
 .../pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
index e90de368bb..351f4e01fe 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
@@ -102,7 +102,7 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <p>No momento em que tiver múltiplas instâncias de uma aplicação em execução, será capaz de fazer <i>Rolling updates</i> sem indisponibilidade. Nós cobriremos isso no próximo módulo. Agora, vamos ao terminal online e escalar nossa aplicação.</p>
+                <p>No momento em que tiver múltiplas instâncias de uma aplicação em execução, será capaz de fazer atualizações graduais sem indisponibilidade. Nós cobriremos isso no próximo módulo. Agora, vamos ao terminal online e escalar nossa aplicação.</p>
             </div>
         </div>
         <br>

From c5e0cc66d812886ffe69f64fc1aae415011d12a7 Mon Sep 17 00:00:00 2001
From: Cristian Klein <cristian.klein@elastisys.com>
Date: Thu, 18 Mar 2021 21:10:04 +0100
Subject: [PATCH 246/788] Update
 content/en/docs/concepts/overview/components.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/docs/concepts/overview/components.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/overview/components.md b/content/en/docs/concepts/overview/components.md
index 3d42d83616..39798eb74b 100644
--- a/content/en/docs/concepts/overview/components.md
+++ b/content/en/docs/concepts/overview/components.md
@@ -33,7 +33,8 @@ The control plane's components make global decisions about the cluster (for exam
 Control plane components can be run on any machine in the cluster. However,
 for simplicity, set up scripts typically start all control plane components on
 the same machine, and do not run user containers on this machine. See
-[Building High-Availability Clusters](/docs/admin/high-availability/) for an example multi-control-plane-VM setup.
+[Creating Highly Available clusters with kubeadm](/docs/setup/production-environment/tools/kubeadm/high-availability/)
+for an example control plane setup that runs across multiple VMs.
 
 ### kube-apiserver
 
@@ -132,4 +133,3 @@ saving container logs to a central log store with search/browsing interface.
 * Learn about [Controllers](/docs/concepts/architecture/controller/)
 * Learn about [kube-scheduler](/docs/concepts/scheduling-eviction/kube-scheduler/)
 * Read etcd's official [documentation](https://etcd.io/docs/)
-

From a9918c4af3364f72f7b3e236b0a70e8eac8a6453 Mon Sep 17 00:00:00 2001
From: ravisantoshgudimetla <ravisantoshgudimetla@gmail.com>
Date: Thu, 18 Mar 2021 18:00:40 -0400
Subject: [PATCH 247/788] Update Resource reservation section

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>
Co-authored-by: James Sturtevant <jsturtevant@gmail.com>
---
 .../windows/intro-windows-in-kubernetes.md    | 41 +++++++++++--------
 1 file changed, 24 insertions(+), 17 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 5c33b0a94b..1bd54ff30b 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -233,23 +233,33 @@ Overlay (VXLAN) networks on Windows do not support dual-stack networking today.
 
 ### Limitations
 
-#### Control Plane
-
 Windows is only supported as a worker node in the Kubernetes architecture and component matrix. This means that a Kubernetes cluster must always include Linux master nodes, zero or more Linux worker nodes, and zero or more Windows worker nodes.
 
-#### Compute {#compute-limitations}
 
-##### Resource management and process isolation
+#### Resource Handling
 
  Linux cgroups are used as a pod boundary for resource controls in Linux. Containers are created within that boundary for network, process and file system isolation. The cgroups APIs can be used to gather cpu/io/memory stats. In contrast, Windows uses a Job object per container with a system namespace filter to contain all processes in a container and provide logical isolation from the host. There is no way to run a Windows container without the namespace filtering in place. This means that system privileges cannot be asserted in the context of the host, and thus privileged containers are not available on Windows. Containers cannot assume an identity from the host because the Security Account Manager (SAM) is separate.
 
-##### Operating System Restrictions
+#### Resource Reservations
 
-Windows has strict compatibility rules, where the host OS version must match the container base image OS version. Only Windows containers with a container operating system of Windows Server 2019 are supported. Hyper-V isolation of containers, enabling some backward compatibility of Windows container image versions, is planned for a future release.
+##### Memory Reservations
+Windows does not have an out-of-memory process killer as Linux does. Windows always treats all user-mode memory allocations as virtual, and pagefiles are mandatory. The net effect is that Windows won't reach out of memory conditions the same way Linux does, and processes page to disk instead of being subject to out of memory (OOM) termination. If memory is over-provisioned and all physical memory is exhausted, then paging can slow down performance.
 
-##### Feature Restrictions
+Keeping memory usage within reasonable bounds is possible using the kubelet parameters `--kubelet-reserve` and/or `--system-reserve` to account for memory usage on the node (outside of containers). This reduces [NodeAllocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable). 
 
-* TerminationGracePeriod: requires CRI-containerD
+{{< note >}}
+As you deploy workloads, use resource limits (must set only limits or limits must equal requests) on containers. This also subtracts from NodeAllocatable and prevents the scheduler from adding more pods once a node is full.
+{{< /note >}}
+
+A best practice to avoid over-provisioning is to configure the kubelet with a system reserved memory of at least 2GB to account for Windows, Docker, and Kubernetes processes.
+
+##### CPU Reservations
+To account for Windows, Docker and other Kubernetes host processes it is recommended to reserve a percentage of CPU so they are able to respond to events. This value needs to be scaled based on the number of CPU cores available on the Windows node.To determine this percentage a user should identify the maximum pod density for each of their nodes and monitor the CPU usage of the system services choosing a value that meets their workload needs.
+
+Keeping CPU usage within reasonable bounds is possible using the kubelet parameters `--kubelet-reserve` and/or `--system-reserve` to account for CPU usage on the node (outside of containers). This reduces [NodeAllocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable). 
+
+#### Feature Restrictions
+* TerminationGracePeriod: not implemented
 * Single file mapping: to be implemented with CRI-ContainerD
 * Termination message: to be implemented with CRI-ContainerD
 * Privileged Containers: not currently supported in Windows containers
@@ -257,15 +267,8 @@ Windows has strict compatibility rules, where the host OS version must match the
 * The existing node problem detector is Linux-only and requires privileged containers. In general, we don't expect this to be used on Windows because privileged containers are not supported
 * Not all features of shared namespaces are supported (see API section for more details)
 
-##### Memory Reservations and Handling
-
-Windows does not have an out-of-memory process killer as Linux does. Windows always treats all user-mode memory allocations as virtual, and pagefiles are mandatory. The net effect is that Windows won't reach out of memory conditions the same way Linux does, and processes page to disk instead of being subject to out of memory (OOM) termination. If memory is over-provisioned and all physical memory is exhausted, then paging can slow down performance.
-
-Keeping memory usage within reasonable bounds is possible with a two-step process. First, use the kubelet parameters `--kubelet-reserve` and/or `--system-reserve` to account for memory usage on the node (outside of containers). This reduces [NodeAllocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)). As you deploy workloads, use resource limits (must set only limits or limits must equal requests) on containers. This also subtracts from NodeAllocatable and prevents the scheduler from adding more pods once a node is full.
-
-A best practice to avoid over-provisioning is to configure the kubelet with a system reserved memory of at least 2GB to account for Windows, Docker, and Kubernetes processes.
-
-The behavior of the flags behave differently as described below:
+#### Difference in behavior of flags when compared to Linux
+The behavior of the following kubelet flags is different on Windows nodes as described below:
 
 * `--kubelet-reserve`, `--system-reserve` , and `--eviction-hard` flags update Node Allocatable
 * Eviction by using `--enforce-node-allocable` is not implemented
@@ -413,6 +416,10 @@ None of the PodSecurityContext fields work on Windows. They're listed here for r
 * V1.PodSecurityContext.SupplementalGroups - provides GID, not available on Windows
 * V1.PodSecurityContext.Sysctls - these are part of the Linux sysctl interface. There's no equivalent on Windows.
 
+#### Operating System Version Restrictions
+
+Windows has strict compatibility rules, where the host OS version must match the container base image OS version. Only Windows containers with a container operating system of Windows Server 2019 are supported. Hyper-V isolation of containers, enabling some backward compatibility of Windows container image versions, is planned for a future release.
+
 ## Getting Help and Troubleshooting {#troubleshooting}
 
 Your main source of help for troubleshooting your Kubernetes cluster should start with this [section](/docs/tasks/debug-application-cluster/troubleshooting/). Some additional, Windows-specific troubleshooting help is included in this section. Logs are an important element of troubleshooting issues in Kubernetes. Make sure to include them any time you seek troubleshooting assistance from other contributors. Follow the instructions in the SIG-Windows [contributing guide on gathering logs](https://github.com/kubernetes/community/blob/master/sig-windows/CONTRIBUTING.md#gathering-logs).

From 04cc5ed8c6692b6c08a5ffaf82d60d77d2cac765 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Fri, 19 Mar 2021 00:42:49 +0200
Subject: [PATCH 248/788] fix indentation

---
 content/es/docs/concepts/workloads/pods/ephemeral-containers.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/concepts/workloads/pods/ephemeral-containers.md b/content/es/docs/concepts/workloads/pods/ephemeral-containers.md
index 1b939c969e..a880e1cbc8 100644
--- a/content/es/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/es/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -100,7 +100,7 @@ efímero a añadir como una lista de `EphemeralContainers`:
     "apiVersion": "v1",
     "kind": "EphemeralContainers",
     "metadata": {
-            "name": "example-pod"
+        "name": "example-pod"
     },
     "ephemeralContainers": [{
         "command": [

From 525192372f5c45c430c2c07c48dcd38ec42c33f9 Mon Sep 17 00:00:00 2001
From: Derek Tamsen <dtamsen@gmail.com>
Date: Tue, 9 Feb 2021 18:55:27 -0800
Subject: [PATCH 249/788] chore(access-cluster): update references of port_name
 to include usage of port number

---
 .../docs/tasks/access-application-cluster/access-cluster.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/tasks/access-application-cluster/access-cluster.md b/content/en/docs/tasks/access-application-cluster/access-cluster.md
index 400a54ffb2..50e2d0e055 100644
--- a/content/en/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/en/docs/tasks/access-application-cluster/access-cluster.md
@@ -283,7 +283,7 @@ at `https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-l
 As mentioned above, you use the `kubectl cluster-info` command to retrieve the service's proxy URL. To create proxy URLs that include service endpoints, suffixes, and parameters, you append to the service's proxy URL:
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`service_name[:port_name]`*`/proxy`
 
-If you haven't specified a name for your port, you don't have to specify *port_name* in the URL.
+If you haven't specified a name for your port, you don't have to specify *port_name* in the URL. You can also use the port number in place of the *port_name* for both named and unnamed ports.
 
 By default, the API server proxies to your service using http. To use https, prefix the service name with `https:`:
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`https:service_name:[port_name]`*`/proxy`
@@ -291,9 +291,9 @@ By default, the API server proxies to your service using http. To use https, pre
 The supported formats for the name segment of the URL are:
 
 * `<service_name>` - proxies to the default or unnamed port using http
-* `<service_name>:<port_name>` - proxies to the specified port using http
+* `<service_name>:<port_name>` - proxies to the specified port name or port number using http
 * `https:<service_name>:` - proxies to the default or unnamed port using https (note the trailing colon)
-* `https:<service_name>:<port_name>` - proxies to the specified port using https
+* `https:<service_name>:<port_name>` - proxies to the specified port name or port number using https
 
 ##### Examples
 

From 388a2730f175a2e81ed370230d2229307e9c212a Mon Sep 17 00:00:00 2001
From: sdwerwed <51335355+sdwerwed@users.noreply.github.com>
Date: Thu, 18 Mar 2021 22:38:48 +0100
Subject: [PATCH 250/788] Avoid using namespace that is a reserved object

---
 .../run-application/run-replicated-stateful-application.md      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/run-application/run-replicated-stateful-application.md b/content/en/docs/tasks/run-application/run-replicated-stateful-application.md
index 36e5334f3d..893ef463db 100644
--- a/content/en/docs/tasks/run-application/run-replicated-stateful-application.md
+++ b/content/en/docs/tasks/run-application/run-replicated-stateful-application.md
@@ -39,6 +39,7 @@ on general patterns for running stateful applications in Kubernetes.
   [ConfigMaps](/docs/tasks/configure-pod-container/configure-pod-configmap/).
 * Some familiarity with MySQL helps, but this tutorial aims to present
   general patterns that should be useful for other systems.
+* You are using the default namespace or another namespace that does not contain any conflicting objects.
 
 
 
@@ -540,4 +541,3 @@ kubectl delete pvc data-mysql-4
 
 
 
-

From 352e776eed470e7d147963c697120b3d0a446691 Mon Sep 17 00:00:00 2001
From: Paco Xu <paco.xu@daocloud.io>
Date: Fri, 19 Mar 2021 13:14:30 +0800
Subject: [PATCH 251/788] Update
 content/en/docs/reference/labels-annotations-taints.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../en/docs/reference/labels-annotations-taints.md   | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 3d62069d40..2c2a4c001c 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -198,6 +198,12 @@ The kubelet can set this annotation on a Node to denote its configured IPv4 addr
 
 When kubelet is started with the "external" cloud provider, it sets this annotation on the Node to denote an IP address set from the command line flag (`--node-ip`). This IP is verified with the cloud provider as valid by the cloud-controller-manager.
 
+## kubectl.kubernetes.io/default-container
+
+Example: `kubectl.kubernetes.io/default-container: "front-end-app"`
+
+The value of the annotation is the container name that is default for this Pod. For example, `kubectl logs` or `kubectl exec` without `-c` or `--container` flag will use this default container.
+
 **The taints listed below are always used on Nodes**
 
 ## node.kubernetes.io/not-ready
@@ -253,9 +259,3 @@ Sets this taint on a node to mark it as unusable, when kubelet is started with t
 Example: `node.cloudprovider.kubernetes.io/shutdown:NoSchedule`
 
 If a Node is in a cloud provider specified shutdown state, the Node gets tainted accordingly with `node.cloudprovider.kubernetes.io/shutdown` and the taint effect of `NoSchedule`.
-
-## kubectl.kubernetes.io/default-container
-
-Example: `kubectl.kubernetes.io/default-container:container1`
-
-If a Pod has the annotation `kubectl.kubernetes.io/default-container`, consumers (CLI, operators) know which is the default container. For example, `kubectl logs` or `kubectl exec` without `-c` or `--container` flag will use this default container. 

From 41dff008af4b32c0420dadde63d1b5ee9023a814 Mon Sep 17 00:00:00 2001
From: Shubham Kuchhal <shubham.kuchhal@india.nec.com>
Date: Fri, 19 Mar 2021 12:41:19 +0530
Subject: [PATCH 252/788] Improvement: Managing Secret using kubectl

---
 .../tasks/configmap-secret/managing-secret-using-kubectl.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 1e6d88ede4..f8f8d587cc 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -125,10 +125,10 @@ kubectl get secret db-user-pass -o jsonpath='{.data}'
 The output is similar to:
 
 ```json
-{"password.txt":"MWYyZDFlMmU2N2Rm","username.txt":"YWRtaW4="}
+{"password":"MWYyZDFlMmU2N2Rm","username":"YWRtaW4="}
 ```
 
-Now you can decode the `password.txt` data:
+Now you can decode the `password` data:
 
 ```shell
 echo 'MWYyZDFlMmU2N2Rm' | base64 --decode

From a3e344419bb7bd3f78527571124e33e3a2412bf3 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Fri, 19 Mar 2021 16:07:31 +0800
Subject: [PATCH 253/788] id: remove unused templates directory

---
 content/id/docs/templates/feature-state-alpha.txt   |  7 -------
 content/id/docs/templates/feature-state-beta.txt    | 10 ----------
 .../id/docs/templates/feature-state-deprecated.txt  |  2 --
 content/id/docs/templates/feaure-state-stable.txt   |  4 ----
 content/id/docs/templates/index.md                  | 13 -------------
 5 files changed, 36 deletions(-)
 delete mode 100644 content/id/docs/templates/feature-state-alpha.txt
 delete mode 100644 content/id/docs/templates/feature-state-beta.txt
 delete mode 100644 content/id/docs/templates/feature-state-deprecated.txt
 delete mode 100644 content/id/docs/templates/feaure-state-stable.txt
 delete mode 100644 content/id/docs/templates/index.md

diff --git a/content/id/docs/templates/feature-state-alpha.txt b/content/id/docs/templates/feature-state-alpha.txt
deleted file mode 100644
index 35689778fa..0000000000
--- a/content/id/docs/templates/feature-state-alpha.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-Fitur ini berada di dalam tingkatan *Alpha*, yang artinya:
-
-* Nama dari versi ini mengandung string `alpha` (misalnya, `v1alpha1`).
-* Bisa jadi terdapat *bug*. Secara *default* fitur ini tidak diekspos.
-* Ketersediaan untuk fitur yang ada bisa saja dihilangkan pada suatu waktu tanpa pemberitahuan sebelumnya.
-* API yang ada mungkin saja berubah tanpa memperhatikan kompatibilitas dengan versi perangkat lunak sebelumnya.
-* Hanya direkomendasikan untuk klaster yang digunakan untuk tujuan *testing*.
diff --git a/content/id/docs/templates/feature-state-beta.txt b/content/id/docs/templates/feature-state-beta.txt
deleted file mode 100644
index a70034e056..0000000000
--- a/content/id/docs/templates/feature-state-beta.txt
+++ /dev/null
@@ -1,10 +0,0 @@
-Fitur ini berada dalam tingkatan beta, yang artinya:
-
-* Nama dari versi ini mengandung string `beta` (misalnya `v2beta3`).
-* Kode yang ada sudah melalui mekanisme *testing* yang cukup baik. Menggunakan fitur ini dianggap cukup aman. Fitur ini diekspos secara *default*.
-* Ketersediaan untuk fitur secara menyeluruh tidak akan dihapus, meskipun begitu detail untuk suatu fitur bisa saja berubah.
-* Skema dan/atau semantik dari suatu obyek mungkin saja berubah tanpa memerhatikan kompatibilitas pada rilis *beta* selanjutnya.
-  Jika hal ini terjadi, kami akan menyediakan suatu instruksi untuk melakukan migrasi di versi rilis selanjutnya. Hal ini bisa saja terdiri dari penghapusan, pengubahan, ataupun pembuatan
-  obyek API. Proses pengubahan mungkin saja membutuhkan pemikiran yang matang. Dampak proses ini bisa saja menyebabkan *downtime* aplikasi yang bergantung pada fitur ini.
-* **Kami mohon untuk mencoba versi *beta* yang kami sediakan dan berikan masukan terhadap fitur yang kamu pakai! Apabila fitur tersebut sudah tidak lagi berada di dalam tingkatan *beta* perubahan yang kami buat terhadap fitur tersebut bisa jadi tidak lagi dapat digunakan**
-
diff --git a/content/id/docs/templates/feature-state-deprecated.txt b/content/id/docs/templates/feature-state-deprecated.txt
deleted file mode 100644
index 599fe098cd..0000000000
--- a/content/id/docs/templates/feature-state-deprecated.txt
+++ /dev/null
@@ -1,2 +0,0 @@
-
-Fitur ini *deprecated*. Untuk informasi lebih lanjut mengenai tingkatan ini, silahkan merujuk pada [Kubernetes Deprecation Policy](/docs/reference/deprecation-policy/)
diff --git a/content/id/docs/templates/feaure-state-stable.txt b/content/id/docs/templates/feaure-state-stable.txt
deleted file mode 100644
index ee4e17373f..0000000000
--- a/content/id/docs/templates/feaure-state-stable.txt
+++ /dev/null
@@ -1,4 +0,0 @@
-Fitur ini berada di dalam tingkatan stabil, yang artinya:
-
-* Versi ini mengandung string `vX` dimana `X` merupakan bilangan bulat.
-* Fitur yang ada pada tingkatan ini akan selalu muncul di rilis berikutnya.
diff --git a/content/id/docs/templates/index.md b/content/id/docs/templates/index.md
deleted file mode 100644
index 9d7bccd143..0000000000
--- a/content/id/docs/templates/index.md
+++ /dev/null
@@ -1,13 +0,0 @@
----
-headless: true
-
-resources:
-- src: "*alpha*"
-  title: "alpha"
-- src: "*beta*"
-  title: "beta"
-- src: "*deprecated*"
-  title: "deprecated"
-- src: "*stable*"
-  title: "stable"
----

From 811018f8ab74c36b526b40e63cc9820e53692236 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Fri, 19 Mar 2021 16:14:18 +0800
Subject: [PATCH 254/788] id: remove unused sitemap.md

---
 content/id/docs/sitemap.md | 114 -------------------------------------
 1 file changed, 114 deletions(-)
 delete mode 100644 content/id/docs/sitemap.md

diff --git a/content/id/docs/sitemap.md b/content/id/docs/sitemap.md
deleted file mode 100644
index 56b0ac30af..0000000000
--- a/content/id/docs/sitemap.md
+++ /dev/null
@@ -1,114 +0,0 @@
----
----
-<script language="JavaScript">
-var dropDownsPopulated = false;
-$( document ).ready(function() {
-  // When the document loads, get the metadata JSON, and kick off tbl render
-  $.get("/metadata.txt", function(data, status) {
-    metadata = $.parseJSON(data);
-    metadata.pages.sort(dynamicSort("t"));
-    mainLogic()
-    $(window).bind( 'hashchange', function(e) {
-      mainLogic();
-    });
-  });
-});
-function mainLogic()
-{
-  // If there's a tag filter, change the table/drop down output
-  if (!dropDownsPopulated) populateDropdowns();
-  var tag=window.location.hash.replace("#","");
-  if(tag) {
-    tag = $.trim(tag);
-    for (i=0;i<tagName.length;i++) {
-      querystringTag = tagName[i] + "=";
-      if (tag.indexOf(querystringTag) > -1)
-      {
-        console.log("in mainLog: querystringTag of " + querystringTag + " matches tag of " + tag);
-        tag = tag.replace(querystringTag,"");
-        selectDropDown(tagName[i],tag);
-        topicsFilter(tagName[i],tag,"output");
-      }
-    }
-  } else {
-    currentTopics = metadata.pages;
-  }
-  renderTable(currentTopics,"output");
-
-}
-function populateDropdowns()
-{
-  // Keeping mainLogic() brief by functionalizing the initialization of the
-  // drop-down filter boxes
-
-  for(i=0;i<metadata.pages.length;i++)
-  {
-    var metadataArrays = [metadata.pages[i].cr,metadata.pages[i].or,metadata.pages[i].mr];
-    for(j=0;j<metadataArrays.length;j++)
-    {
-      if (metadataArrays[j]) {
-        for (k=0;k<metadataArrays[j].length;k++) {
-          if (typeof storedTagsArrays[j] == 'undefined') storedTagsArrays[j] = new Array();
-          storedTagsArrays[j][metadataArrays[j][k][tagName[j]]] = true;
-          // ^ conceptList[metadata.pages[i].cr[k].concept] = true; (if rolling through concepts)
-          // ^ conceptList['container'] = true; (ultimate result)
-          // ^ objectList[metadata.pages[i].or[k].object] = true; (if rolling through objects)
-          // ^ objectList['restartPolicy'] = true; (ultimate result)
-        }
-      }
-    }
-  }
-  var output = new Array();
-  for(i=0;i<tagName.length;i++)
-  {
-    // Phew! All tags in conceptList, objectList, and commandList!
-    // Loop through them and populate those drop-downs through html() injection
-    output = [];
-    output.push("<select id='" + tagName[i] + "' onchange='dropFilter(this)'>");
-    output.push("<option>---</option>");
-    Object.keys(storedTagsArrays[i]).sort().forEach(function (key) {
-      output.push("<option>" + key + "</option>");
-    });
-    output.push("</select>")
-    $(dropDowns[i]).html(output.join(""));
-  }
-  dropDownsPopulated = true;
-}
-function dropFilter(srcobj)
-{
-  // process the change of a drop-down value
-  // the ID of the drop down is either command, object, or concept
-  // these exact values are what topicsFilter() expects, plus a filter val
-  // which we get from .text() of :selected
-  console.log("dropFilter:" + $(srcobj).attr('id') + ":" + $(srcobj).find(":selected").text());
-  topicsFilter($(srcobj).attr('id').replace("#",""),$(srcobj).find(":selected").text(),"output");
-  for(i=0;i<tagName.length;i++)
-  {
-    if($(srcobj).attr('id')!=tagName[i]) selectDropDown(tagName[i],"---");
-  }
-}
-function selectDropDown(type,tag)
-{
-  // change drop-down selection w/o filtering
-  $("#" + type).val(tag);
-}
-</script>
-<style>
-#filters select{
-  font-size: 14px;
-  border: 1px #000 solid;
-}
-#filters {
-  padding-top: 20px;
-}
-</style>
-
-Pilih <i>tag</i> atau gunakan <i>drop down</i> untuk melakukan filter. Pilih <i>header</i> pada tabel untuk mengurutkan.
-
-<p id="filters">
-Filter berdasarkan Konsep: <span id="conceptFilter" /><br/>
-Filter berdasarkan Obyek: <span id="objectFilter" /><br/>
-Filter berdasarkan Perintah: <span id="commandFilter" />
-</p>
-
-<div id="output" />

From 669322a78c1643188d21591b977d07cab13219af Mon Sep 17 00:00:00 2001
From: "Lubomir I. Ivanov" <lubomirivanov@vmware.com>
Date: Fri, 19 Mar 2021 17:48:29 +0200
Subject: [PATCH 255/788] kubeadm/create-cluster: add warning about admin.conf

Add warning that the file must not be shared as it has super powers
that cannot be revoked.
---
 .../tools/kubeadm/create-cluster-kubeadm.md                | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index a9b37e8167..565c9ab846 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -187,6 +187,13 @@ Alternatively, if you are the `root` user, you can run:
 export KUBECONFIG=/etc/kubernetes/admin.conf
 ```
 
+{{< warning >}}
+Kubeadm signs the certificate in the `admin.conf` to have `Subject: O = system:masters, CN = kubernetes-admin`.
+`system:masters` is a break-glass, super user group that bypasses the authorization layer (e.g. RBAC).
+Do not share the `admin.conf` file with anyone and instead grant users custom permissions by generating
+them a kubeconfig file using the `kubeadm kubeconfig user` command.
+{{< /warning >}}
+
 Make a record of the `kubeadm join` command that `kubeadm init` outputs. You
 need this command to [join nodes to your cluster](#join-nodes).
 

From 7be3cdcc91c689abe0440f4963a42a1fb580c847 Mon Sep 17 00:00:00 2001
From: Anthony Ross <anthony.s.ross@gmail.com>
Date: Fri, 19 Mar 2021 10:19:43 -0700
Subject: [PATCH 256/788] update assign-pod doc

General grammar and spelling fixes.
---
 .../concepts/scheduling-eviction/assign-pod-node.md | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
index f0437a9b8b..75f3859505 100644
--- a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -11,18 +11,17 @@ weight: 20
 
 <!-- overview -->
 
-You can constrain a {{< glossary_tooltip text="Pod" term_id="pod" >}} to only be able to run on particular 
-{{< glossary_tooltip text="Node(s)" term_id="node" >}}, or to prefer to run on particular nodes.
-There are several ways to do this, and the recommended approaches all use
-[label selectors](/docs/concepts/overview/working-with-objects/labels/) to make the selection.
+You can constrain a {{< glossary_tooltip text="Pod" term_id="pod" >}} so that it can only run on particular set of
+{{< glossary_tooltip text="Node(s)" term_id="node" >}}.
+There are several ways to do this and the recommended approaches all use
+[label selectors](/docs/concepts/overview/working-with-objects/labels/) to facilitate the selection.
 Generally such constraints are unnecessary, as the scheduler will automatically do a reasonable placement
-(e.g. spread your pods across nodes, not place the pod on a node with insufficient free resources, etc.)
-but there are some circumstances where you may want more control on a node where a pod lands, for example to ensure
+(e.g. spread your pods across nodes so as not place the pod on a node with insufficient free resources, etc.)
+but there are some circumstances where you may want to control which node the pod deploys to - for example to ensure
 that a pod ends up on a machine with an SSD attached to it, or to co-locate pods from two different
 services that communicate a lot into the same availability zone.
 
 
-
 <!-- body -->
 
 ## nodeSelector

From 64c16a5836853e8df5e37226a842c9b5b299cd01 Mon Sep 17 00:00:00 2001
From: Peri Thompson <perit@vmware.com>
Date: Fri, 19 Mar 2021 18:40:30 +0000
Subject: [PATCH 257/788] Updated Windows doc reviewers

---
 .../windows/intro-windows-in-kubernetes.md                  | 6 ++++--
 .../windows/user-guide-windows-containers.md                | 6 ++++--
 .../administer-cluster/kubeadm/adding-windows-nodes.md      | 6 ++++--
 3 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 5c33b0a94b..a941c785e3 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -1,7 +1,9 @@
 ---
 reviewers:
-- michmike
-- patricklang
+- jayunit100
+- jsturtevant
+- marosset
+- perithompson
 title: Intro to Windows support in Kubernetes
 content_type: concept
 weight: 65
diff --git a/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md b/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md
index 9133a2de1b..ce7aee8a89 100644
--- a/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md
+++ b/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md
@@ -1,7 +1,9 @@
 ---
 reviewers:
-- michmike
-- patricklang
+- jayunit100
+- jsturtevant
+- marosset
+- perithompson
 title: Guide for scheduling Windows containers in Kubernetes
 content_type: concept
 weight: 75
diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/en/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 2f23379400..aad5f13909 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -1,7 +1,9 @@
 ---
 reviewers:
-- michmike
-- patricklang
+- jayunit100
+- jsturtevant
+- marosset
+- perithompson
 title: Adding Windows nodes
 min-kubernetes-server-version: 1.17
 content_type: tutorial

From b12cbb5a0d20c22b070d3202fcff430b55e30b96 Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio@users.noreply.github.com>
Date: Fri, 19 Mar 2021 16:26:36 -0300
Subject: [PATCH 258/788] =?UTF-8?q?Fix=20the=20typos=20suggested=20by=20co?=
 =?UTF-8?q?de=20review=20*=20manispulador=20->=20manipulador=20*=20dentro?=
 =?UTF-8?q?=20do=20cgroup=20e=20namespace=20do=20container=20->=20dentro?=
 =?UTF-8?q?=20dos=20cgroups=20e=20namespaces=20*=20tcpSocker=20->=20tcpSoc?=
 =?UTF-8?q?ket=20*=20con=C3=AAiner->=20cont=C3=AAiner=20*=20Os=20logs=20pa?=
 =?UTF-8?q?ra=20um=20manipulador=20de=20=5Fhook=5F=20n=C3=A3o=20expostos?=
 =?UTF-8?q?=20em=20eventos=20de=20Pod=20->=20Os=20logs=20para=20um=20manip?=
 =?UTF-8?q?ulador=20de=20=5Fhook=5F=20n=C3=A3o=20s=C3=A3o=20expostos=20em?=
 =?UTF-8?q?=20eventos=20de=20Pod.=20*=20failedPreStopHook=20->=20FailedPre?=
 =?UTF-8?q?StopHook?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../concepts/containers/container-lifecycle-hooks.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
index ec7a7fd55c..984f248256 100644
--- a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/pt/docs/concepts/containers/container-lifecycle-hooks.md
@@ -31,7 +31,7 @@ Nenhum parâmetro é passado para o manipulador.
 `PreStop`
 
 Esse _hook_ é chamado imediatamente antes de um contêiner ser encerrado devido a uma solicitação de API ou um gerenciamento de evento como liveness/startup probe failure, preemption, resource contention e outros.
-Uma chamada ao _hook_ `PreStop` falha se o contêiner já está em um estado finalizado ou concluído e o _hook_ deve ser concluído antes que o sinal TERM seja enviado para parar o contêiner. A contagem regressiva do período de tolerância de término do Pod começa antes que o _hook_ `PreStop` seja executado, portanto, independentemente do resultado do manipulador, o contêiner será encerrado dentro do período de tolerância de encerramento do Pod. Nenhum parâmetro é passado para o manispulador.
+Uma chamada ao _hook_ `PreStop` falha se o contêiner já está em um estado finalizado ou concluído e o _hook_ deve ser concluído antes que o sinal TERM seja enviado para parar o contêiner. A contagem regressiva do período de tolerância de término do Pod começa antes que o _hook_ `PreStop` seja executado, portanto, independentemente do resultado do manipulador, o contêiner será encerrado dentro do período de tolerância de encerramento do Pod. Nenhum parâmetro é passado para o manipulador.
 
 Uma descrição mais detalhada do comportamento de término pode ser encontrada em [Término de Pods](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination).
 
@@ -40,20 +40,20 @@ Uma descrição mais detalhada do comportamento de término pode ser encontrada
 Os contêineres podem acessar um _hook_ implementando e registrando um manipulador para esse _hook_.
 Existem dois tipos de manipuladores de _hooks_ que podem ser implementados para contêineres:
 
-* Exec - Executa um comando específico, como `pre-stop.sh`, dentro do cgroups e Namespaces do contêiner.
+* Exec - Executa um comando específico, como `pre-stop.sh`, dentro dos cgroups e Namespaces do contêiner.
 * HTTP - Executa uma requisição HTTP em um endpoint específico do contêiner.
 
 ### Execução do manipulador de hook
 
 
-Quando um _hook_ de gerenciamento de ciclo de vida do contêiner é chamado, o sistema de gerenciamento do Kubernetes executa o manipulador de acordo com a ação do _hook_, `httpGet` e `tcpSocker` são executados pelo processo kubelet e `exec` é executado pelo contêiner.
+Quando um _hook_ de gerenciamento de ciclo de vida do contêiner é chamado, o sistema de gerenciamento do Kubernetes executa o manipulador de acordo com a ação do _hook_, `httpGet` e `tcpSocket` são executados pelo processo kubelet e `exec` é executado pelo contêiner.
 
 As chamadas do manipulador do _hook_ são síncronas no contexto do Pod que contém o contêiner.
 Isso significa que para um _hook_ `PostStart`, o ENTRYPOINT do contêiner e o _hook_ disparam de forma assíncrona.
 No entanto, se o _hook_ demorar muito para ser executado ou travar, o contêiner não consegue atingir o estado `running`.
 
 
-Os _hooks_ `PreStop` não são executados de forma assíncrona a partir do sinal para parar o conêiner, o _hook_ precisa finalizar a sua execução antes que o sinal TERM possa ser enviado.
+Os _hooks_ `PreStop` não são executados de forma assíncrona a partir do sinal para parar o contêiner, o _hook_ precisa finalizar a sua execução antes que o sinal TERM possa ser enviado.
 Se um _hook_ `PreStop` travar durante a execução, a fase do Pod será `Terminating` e permanecerá até que o Pod seja morto após seu `terminationGracePeriodSeconds` expirar. Esse período de tolerância se aplica ao tempo total necessário
 para o _hook_ `PreStop`executar e para o contêiner parar normalmente.
 Se por exemplo, o `terminationGracePeriodSeconds` é 60, e o _hook_ leva 55 segundos para ser concluído, e o contêiner leva 10 segundos para parar normalmente após receber o sinal, então o contêiner será morto antes que possa parar
@@ -81,10 +81,10 @@ reenviado depois que o kubelet voltar a funcionar.
 
 ### Depurando manipuladores de _hooks_
 
-Os logs para um manipulador de _hook_ não expostos em eventos de Pod.
+Os logs para um manipulador de _hook_ não são expostos em eventos de Pod.
 Se um manipulador falhar por algum motivo, ele transmitirá um evento.
 Para `PostStart` é o evento `FailedPostStartHook` e para `PreStop` é o evento
-`failedPreStopHook`.
+`FailedPreStopHook`.
 Você pode ver esses eventos executando `kubectl describe pod <nome_do_pod>`.
 Aqui está um exemplo de saída de eventos da execução deste comando:
 

From 7d1e4408fefc7d46e3d0bad56155ae1c9e63cd79 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sat, 20 Mar 2021 01:13:42 +0200
Subject: [PATCH 259/788] fix indent

---
 content/id/docs/concepts/workloads/pods/ephemeral-containers.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/id/docs/concepts/workloads/pods/ephemeral-containers.md b/content/id/docs/concepts/workloads/pods/ephemeral-containers.md
index e952bdd19b..2d0c515859 100644
--- a/content/id/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/id/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -106,7 +106,7 @@ deskripsikan kontainer sementara untuk ditambahkan dalam daftar
     "apiVersion": "v1",
     "kind": "EphemeralContainers",
     "metadata": {
-            "name": "example-pod"
+        "name": "example-pod"
     },
     "ephemeralContainers": [{
         "command": [

From 343b9125501fd238a5de0037a0a3892df71db333 Mon Sep 17 00:00:00 2001
From: Leonardo Murillo <leonardo@murillodigital.com>
Date: Sat, 20 Mar 2021 01:10:43 +0000
Subject: [PATCH 260/788] =?UTF-8?q?Nueva=20iteraci=C3=B3n=20de=20revisione?=
 =?UTF-8?q?s?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../declarative-config.md                     | 36 +++++++++----------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
index 05090d3a3f..7a99547761 100644
--- a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -30,7 +30,7 @@ La herramienta `kubectl` soporta tres modos distintos para la administración de
 * Configuración de objetos imperativa
 * Configuración de objetos declarativa
 
-Acceda [Kubernetes Object Management](/docs/concepts/overview/working-with-objects/object-management/)
+Acceda a ña [Administración de objetos de Kubernetes](/docs/concepts/overview/working-with-objects/object-management/)
 para una discusión de las ventajas y desventajas de cada modo distinto de administración.
 
 ## Visión general
@@ -112,7 +112,7 @@ Despliegue la configuración activa usando `kubectl get`:
 kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yaml
 ```
 
-La salida le demostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
+La salida le mostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
 fue escrita a la configuración activa, y es consistente con los contenidos del archivo
 de configuración:
 
@@ -194,7 +194,7 @@ Despliegue la configuración activa usando `kubectl get`:
 kubectl get -f https://k8s.io/examples/application/simple_deployment.yaml -o yaml
 ```
 
-La salida le demostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
+La salida le mostrará que la anotación `kubectl.kubernetes.io/last-applied-configuration`
 fue escrita a la configuración activa, y es consistente con los contenidos del archivo
 de configuración:
 
@@ -309,7 +309,7 @@ Despliegue la configuración activa usando `kubectl get`:
 kubectl get -f https://k8s.io/examples/application/update_deployment.yaml -o yaml
 ```
 
-La salida le mostrará los siguienes cambios hechos a la configuración activa:
+La salida le mostrará los siguientes cambios hechos a la configuración activa:
 
 * El campo `replicas` retiene el valor de 2 definido por `kubectl scale`.
   Esto es posible ya que el campo fue omitido en el archivo de configuración.
@@ -372,8 +372,8 @@ Hay dos opciones diferentes para eliminar objetos gestionados por `kubectl apply
 
 ### Manera recomendada: `kubectl delete -f <archivo>`
 
-Eliminar objetos de manera manual utilizando el comando imperativo es la opción
-recomendada, ya que es más explícito en relación a lo que será eliminado, y es
+La manera recomendada de eliminar objetos de manera manual es utilizando el comando
+imperativo, ya que es más explícito en relación a lo que será eliminado, y es
 menos probable que resulte en algo siendo eliminado sin la intención del usuario.
 
 ```shell
@@ -390,11 +390,11 @@ podrían ser introducidos en lanzamientos futuros.
 {{< /warning >}}
 
 {{< warning >}}
-Sea cuidadoso o cuidadosa al usar este comando, para evitar eliminar objetos
+Sea cuidadoso(a) al usar este comando, para evitar eliminar objetos
 no intencionalmente.
 {{< /warning >}}
 
-Como una alternativa a `kubectl delete`, puede usar `kubectl apply`para identificar objetos por ser
+Como una alternativa a `kubectl delete`, puede usar `kubectl apply` para identificar objetos a ser
 eliminados, luego de que sus archivos de configuración han sido eliminados del directorio. El commando `apply` con `--prune`
 consulta a la API del servidor por todos los objetos que coincidan con un grupo de etiquetas, e intenta relacionar
 la configuración obtenida de los objetos activos contra los objetos según sus archivos de configuración.
@@ -452,7 +452,7 @@ A continuación un ejemplo. Suponga que este es el archivo de configuración par
 
 {{< codenew file="application/update_deployment.yaml" >}}
 
-También, supognga que esta es la configuración activa para ese mismo objeto de tipo Deployment:
+También, suponga que esta es la configuración activa para ese mismo objeto de tipo Deployment:
 
 ```yaml
 apiVersion: apps/v1
@@ -501,13 +501,13 @@ Estos son los cálculos de unión que serían realizados por `kubectl apply`:
    En este ejemplo, `minReadySeconds` aparece en la anotación
    `last-applied-configuration` pero no aparece en el archivo de configuración.
     **Acción:** Limpiar `minReadySeconds` de la configuración activa.
-2. Calcular los campos por ser definidos, al leer los valores del firecho de configuración
+2. Calcular los campos por ser definidos, al leer los valores del fichero de configuración
    y compararlos con los valores en la configuración activa. En este ejemplo, el valor `image`
    en el archivo de configuración, no coincide con el valor en la configuración activa.
    **Acción:** Definir el campo `image` en la configuración activa.
 3. Definir el valor de la anotación `last-applied-configuration` para que sea consistente
    con el archivo de configuración.
-4. Unir los resultados de 1, 2 y 3, en una única solicitud de patch para enviar al API server.
+4. Unir los resultados de 1, 2 y 3, en una única solicitud de patch para enviar al servidor de API.
 
 Esta es la configuración activa como resultado de esta unión:
 
@@ -590,7 +590,7 @@ Campos primitivos son limpiados o reemplazados.
 
 ### Uniendo cambios en campos de un mapa
 
-Los campos que conjúntamente representan un mapa, son unidos al comparar cada uno de los subcampos o elementos del mapa:
+Los campos que conjuntamente representan un mapa, son unidos al comparar cada uno de los subcampos o elementos del mapa:
 
 {{< note >}}
 `-` determina que "no aplica" debido a que el valor no es utilizado.
@@ -599,7 +599,7 @@ Los campos que conjúntamente representan un mapa, son unidos al comparar cada u
 | Propiedad en archivo de configuración | Propiedad en configuración activa | Campo en last-applied-configuration | Acción                                   |
 |---------------------------------------|-----------------------------------|-------------------------------------|------------------------------------------|
 | Si                                    | Si                                | -                                   | Comparar valores de sub-propiedades.     |
-| Si                                    | No                                | -                                   | Usar configuracón local.                 |
+| Si                                    | No                                | -                                   | Usar configuración local.                 |
 | No                                    | -                                 | Si                                  | Eliminar de la configuración activa.     |
 | No                                    | -                                 | No                                  | No hacer nada. Mantener el valor activo. |
 
@@ -619,7 +619,7 @@ Trata la lista como si fuese un campo primitivo. Reemplaza o elimina la lista co
 Esto preserva el orden de los elementos.
 
 
-**Ejemplo:** Usndo `kubectl apply` para actualizar el campo `args` de un Contenedor en un Pod.
+**Ejemplo:** Usando `kubectl apply` para actualizar el campo `args` de un Contenedor en un Pod.
 Esto define el valor de `args` en la configuración activa, al valor en el archivo de configuración.
 Cualquier elemento de `args` que haya sido previamente agregado a la configuración activa se perderá.
 El orden de los elementos definidos en `args` en el archivo de configuración, serán conservados
@@ -644,12 +644,12 @@ en la configuración activa.
 #### Unir elementos individuales en una lista de elementos complejos
 
 Trata la lista como un mapa, y trata cada campo específico de cada elemento como una llave.
-Agrega, elimina o actualiza elementos individuales. Esta operación no conserva orden.
+Agrega, elimina o actualiza elementos individuales. Esta operación no conserva el orden.
 
 Esta estrategia de unión utiliza una etiqueta especial en cada campo llamada `patchMergeKey`. La etiqueta
 `patchMergeKey` es definida para cada campo en el código fuente de Kubernetes:
 [types.go](https://github.com/kubernetes/api/blob/d04500c8c3dda9c980b668c57abc2ca61efcf5c4/core/v1/types.go#L2747)
-Al unir una lista de mapas, el campo específicado en `patchMergeKey` para el elemento dado
+Al unir una lista de mapas, el campo especificado en `patchMergeKey` para el elemento dado
 se utiliza como un mapa de llaves para ese elemento.
 
 **Ejemplo:** Utilice `kubectl apply` para actualizar el campo `containers` de un PodSpec.
@@ -704,8 +704,8 @@ Esto une la lista como si fuese un mapa donde cada elemento utiliza `name` por l
 
 - El contenedor llamado "nginx-helper-a" fué eliminado al no aparecer ningún
   contenedor llamado "nginx-helper-a" en el archivo de configuración.
-- El contenedor llamado "nginx-helper-b" mantiene los cambios a  `args`
-  existentes en la configuración activa. `kubectl apply` pudo identificar que
+- El contenedor llamado "nginx-helper-b" mantiene los cambios existentes en `args`
+  en la configuración activa. `kubectl apply` pudo identificar que
   el contenedor "nginx-helper-b" en la configuración activa es el mismo
   "nginx-helper-b" que aparece en el archivo de configuración, aún teniendo diferentes
   valores en los campos (no existe `args` en el archivo de configuración). Esto sucede

From b0192d224e16d45a84ed223515a68c50f7669dfe Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Fri, 19 Mar 2021 23:53:33 +0800
Subject: [PATCH 261/788] [zh] Sync setup pages for
 production-environment\container-runtimes.md

* Sync with english version in 'container-runtimes: include note about latest validated docker (#26966)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../container-runtimes.md                     | 28 +++++++++++++++----
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 061fb880e1..99739e8b10 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -240,7 +240,11 @@ Start a Powershell session, set `$Version` to the desired version (ex: `$Version
 {{% /tab %}}
 {{< /tabs >}}
 
-#### systemd {#containerd-systemd}
+<!-- 
+#### Using the `systemd` cgroup driver {#containerd-systemd}
+--> 
+
+#### 使用 `systemd` cgroup 驱动程序 {#containerd-systemd}
 
 <!-- 
 To use the `systemd` cgroup driver in `/etc/containerd/config.toml` with `runc`, set
@@ -251,10 +255,8 @@ To use the `systemd` cgroup driver in `/etc/containerd/config.toml` with `runc`,
   [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
     SystemdCgroup = true
 ```
-
-When using kubeadm, manually configure the
-[cgroup driver for kubelet](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node).
 -->
+
 结合 `runc` 使用 `systemd` cgroup 驱动，在 `/etc/containerd/config.toml` 中设置 
 
 ```
@@ -264,6 +266,19 @@ When using kubeadm, manually configure the
     SystemdCgroup = true
 ```
 
+<!--
+If you apply this change make sure to restart containerd again:
+-->
+如果您应用此更改，请确保再次重新启动 containerd：
+
+```shell
+sudo systemctl restart containerd
+```
+
+<!--
+When using kubeadm, manually configure the
+[cgroup driver for kubelet](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node).
+-->
 当使用 kubeadm 时，请手动配置
 [kubelet 的 cgroup 驱动](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node).
 
@@ -567,9 +582,10 @@ kubelet 的 cgroup 驱动程序配置（通常透过 kubeadm 完成）和CRI-O 
 
 ### Docker
 <!--
-1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server)
+1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server). You can find the latest validated version of Docker in this [dependencies](https://git.k8s.io/kubernetes/build/dependencies.yaml) file.
  -->
-1. 在每个节点上，根据 [安装 Docker 引擎](https://docs.docker.com/engine/install/#server)为你的 Linux 发行版安装 Docker。
+1. 在每个节点上，根据[安装 Docker 引擎](https://docs.docker.com/engine/install/#server) 为你的 Linux 发行版安装 Docker。
+   你可以在此文件中找到最新的经过验证的 Docker 版本[依赖关系](https://git.k8s.io/kubernetes/build/dependencies.yaml)。
 
 <!--
 2. Configure the Docker daemon, in particular to use systemd for the management of the container’s cgroups.

From c5d601093514124bb49c244d75271e1ddbc3b680 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Sat, 20 Mar 2021 16:13:03 +0800
Subject: [PATCH 262/788] [zh] Sync tasks pages for
 configmap-secret\managing-secret-using-kubectl.md

* Sync with english version in 'Improvement: Managing Secret using kubectl (#27136)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../configmap-secret/managing-secret-using-kubectl.md     | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 2039a68e19..7aaf473337 100644
--- a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -173,11 +173,13 @@ kubectl get secret db-user-pass -o jsonpath='{.data}'
 输出类似于：
 
 ```json
-{"password.txt":"MWYyZDFlMmU2N2Rm","username.txt":"YWRtaW4="}
+{"password":"MWYyZDFlMmU2N2Rm","username":"YWRtaW4="}
 ```
 
-<!-- Now you can decode the `password.txt` data: -->
-现在你可以解码 `password.txt` 的数据：
+<!-- 
+Now you can decode the `password` data:
+-->
+现在你可以解码 `password` 的数据：
 
 ```shell
 echo 'MWYyZDFlMmU2N2Rm' | base64 --decode

From eb75932e01e472e5c9bde1b37e865ac791557fa8 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Sat, 20 Mar 2021 21:11:52 +0800
Subject: [PATCH 263/788] [zh] Sync tasks pages for kubeadm\kubeadm-certs.md

* Sync with english version in 'remove usage of the certificates API for cert renewal (#26841)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../kubeadm/kubeadm-certs.md                  | 60 +------------------
 1 file changed, 3 insertions(+), 57 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 94dde7991b..09af5d8b2f 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -324,69 +324,15 @@ controllerManager:
 
 <!-- 
 ### Create certificate signing requests (CSR)
-
-You can create the certificate signing requests for the Kubernetes certificates API with `kubeadm alpha certs renew --use-api`. 
 -->
 ### 创建证书签名请求 (CSR)
 
-你可以用 `kubeadm alpha certs renew --use-api` 为 Kubernetes 证书 API 创建一个证书签名请求。
-
 <!--
-If you set up an external signer such as [cert-manager](https://github.com/jetstack/cert-manager), certificate signing requests (CSRs) are automatically approved.
-Otherwise, you must manually approve certificates with the [`kubectl certificate`](/docs/setup/best-practices/certificates/)  command.
-The following kubeadm command outputs the name of the certificate to approve, then blocks and waits for approval to occur:
+See [Create CertificateSigningRequest](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest) for creating CSRs with the Kubernetes API.
 -->
-如果你设置例如 [cert-manager](https://github.com/jetstack/cert-manager)
-等外部签名者，证书签名请求（CSRs）会被自动批准。
-否则，你必须使用 [`kubectl certificate`](/zh/docs/setup/best-practices/certificates/) 
-命令手动批准证书。
-以下 kubeadm 命令输出要批准的证书名称，然后阻塞等待批准发生：
+有关使用 Kubernetes API 创建 CSR 的信息，
+请参见[创建 CertificateSigningRequest](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest)。
 
-```shell
-sudo kubeadm alpha certs renew apiserver --use-api &
-```
-
-<!--
-The output is similar to this:
--->
-输出类似于以下内容：
-```
-[1] 2890
-[certs] certificate request "kubeadm-cert-kube-apiserver-ld526" created
-```
-
-<!-- 
-### Approve certificate signing requests (CSR) 
-
-If you set up an external signer, certificate signing requests (CSRs) are automatically approved. 
-
-Otherwise, you must manually approve certificates with the [`kubectl certificate`](/docs/setup/best-practices/certificates/) command. e.g.
--->
-
-### 批准证书签名请求 (CSR)
-
-如果你设置了一个外部签名者， 证书签名请求 (CSRs) 会自动被批准。
-
-否则，你必须用 [`kubectl certificate`](/zh/docs/setup/best-practices/certificates/)
-命令手动批准证书，例如：
-
-```shell
-kubectl certificate approve kubeadm-cert-kube-apiserver-ld526
-```
-
-<!-- 
-The output is similar to this:
--->
-输出类似于以下内容：
-
-```
-certificatesigningrequest.certificates.k8s.io/kubeadm-cert-kube-apiserver-ld526 approved
-```
-
-<!-- 
-You can view a list of pending certificates with `kubectl get csr`. 
--->
-你可以使用 `kubectl get csr` 查看待处理证书列表。
 
 <!--
 ## Renew certificates with external CA

From 15b5e44680d1a1dc515781e1cf48d0a3ae24fddc Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sun, 21 Mar 2021 02:19:52 +0200
Subject: [PATCH 264/788] [ja] fix indent

---
 content/ja/docs/concepts/workloads/pods/ephemeral-containers.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
index db69d83fcd..beb92b3b88 100644
--- a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -59,7 +59,7 @@ weight: 80
     "apiVersion": "v1",
     "kind": "EphemeralContainers",
     "metadata": {
-            "name": "example-pod"
+        "name": "example-pod"
     },
     "ephemeralContainers": [{
         "command": [

From 392b1e5cdaf393699886944d3f6b42d0464c3484 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sun, 21 Mar 2021 11:46:27 +0800
Subject: [PATCH 265/788] move the search.md from `content/id/docs` into
 `content/id`

---
 content/id/{docs => }/search.md | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/id/{docs => }/search.md (100%)

diff --git a/content/id/docs/search.md b/content/id/search.md
similarity index 100%
rename from content/id/docs/search.md
rename to content/id/search.md

From 71c5a8ee22a040b9a6bd11d91f41b60be6eb1adf Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Sun, 21 Mar 2021 19:11:59 +0800
Subject: [PATCH 266/788] [zh] Sync concepts pages for
 architecture\control-plane-node-communication.md

* Sync with english version in 'Update control-plane-node-communication.md (#27123)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../concepts/architecture/control-plane-node-communication.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/architecture/control-plane-node-communication.md b/content/zh/docs/concepts/architecture/control-plane-node-communication.md
index dc31269f47..0501507898 100644
--- a/content/zh/docs/concepts/architecture/control-plane-node-communication.md
+++ b/content/zh/docs/concepts/architecture/control-plane-node-communication.md
@@ -47,13 +47,13 @@ Nodes should be provisioned with the public root certificate for the cluster suc
 
 <!--
 Pods that wish to connect to the apiserver can do so securely by leveraging a service account so that Kubernetes will automatically inject the public root certificate and a valid bearer token into the pod when it is instantiated.
-The `kubernetes` service (in all namespaces) is configured with a virtual IP address that is redirected (via kube-proxy) to the HTTPS endpoint on the apiserver.
+The `kubernetes` service (in `default` namespace) is configured with a virtual IP address that is redirected (via kube-proxy) to the HTTPS endpoint on the apiserver.
 
 The control plane components also communicate with the cluster apiserver over the secure port.
 -->
 想要连接到 apiserver 的 Pod 可以使用服务账号安全地进行连接。
 当 Pod 被实例化时，Kubernetes 自动把公共根证书和一个有效的持有者令牌注入到 Pod 里。
-`kubernetes` 服务（位于所有名字空间中）配置了一个虚拟 IP 地址，用于（通过 kube-proxy）转发
+`kubernetes` 服务（位于 `default` 名字空间中）配置了一个虚拟 IP 地址，用于（通过 kube-proxy）转发
 请求到 apiserver 的 HTTPS 末端。
 
 控制面组件也通过安全端口与集群的 apiserver 通信。

From 62e83f84a02a14512e02ca2f7464576edd9e6d70 Mon Sep 17 00:00:00 2001
From: Ryuichi KAWAMATA <iam@rkmathi.net>
Date: Sun, 21 Mar 2021 22:39:06 +0900
Subject: [PATCH 267/788] Update ja/docs/concepts/containers/_index.md

---
 content/ja/docs/concepts/containers/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/_index.md b/content/ja/docs/concepts/containers/_index.md
index 5b10416c0f..fd3506ea40 100755
--- a/content/ja/docs/concepts/containers/_index.md
+++ b/content/ja/docs/concepts/containers/_index.md
@@ -21,7 +21,7 @@ no_list: true
 ## コンテナイメージ
 [コンテナイメージ](/docs/concepts/containers/images/)はすぐに実行可能なソフトウェアパッケージで、アプリケーションの実行に必要なものをすべて含んています。コードと必要なランタイム、アプリケーションとシステムのライブラリ、そして必須な設定項目のデフォルト値を含みます。
 
-設計上、コンテナは不変で、既に実行中のコンテナのコードを変更することはできません。コンテナ化されたアプリケーションがあり変更したい場合は、変更を含んだ新しいコンテナをビルドし、コンテナを再作成して、更新されたイメージから起動する必要があります。
+設計上、コンテナは不変で、既に実行中のコンテナのコードを変更することはできません。コンテナ化されたアプリケーションがあり変更したい場合は、変更を含んだ新しいイメージをビルドし、コンテナを再作成して、更新されたイメージから起動する必要があります。
 
 ## コンテナランタイム
 

From d0c5dbd808156a0614b726c2276a4d26daefecb6 Mon Sep 17 00:00:00 2001
From: Leonardo Murillo <leonardo@murillodigital.com>
Date: Sun, 21 Mar 2021 17:13:33 +0000
Subject: [PATCH 268/788] Arreglando typo

---
 .../docs/tasks/manage-kubernetes-objects/declarative-config.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
index 7a99547761..cb1ef2e7e5 100644
--- a/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/es/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -30,7 +30,7 @@ La herramienta `kubectl` soporta tres modos distintos para la administración de
 * Configuración de objetos imperativa
 * Configuración de objetos declarativa
 
-Acceda a ña [Administración de objetos de Kubernetes](/docs/concepts/overview/working-with-objects/object-management/)
+Acceda [Administración de objetos de Kubernetes](/docs/concepts/overview/working-with-objects/object-management/)
 para una discusión de las ventajas y desventajas de cada modo distinto de administración.
 
 ## Visión general

From 918ac7ecae86084d35a130c543b68f5b06bc6ae4 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 22 Mar 2021 11:09:30 +0900
Subject: [PATCH 269/788] [ko] Update link href to translated page

---
 .../reference/setup-tools/kubeadm/_index.md    | 18 +++++++++---------
 .../setup-tools/kubeadm/generated/_index.md    |  6 ++++++
 content/ko/docs/reference/tools.md             |  2 +-
 .../container-runtimes.md                      |  2 +-
 content/ko/docs/tasks/tools/_index.md          |  4 ++--
 5 files changed, 19 insertions(+), 13 deletions(-)
 create mode 100644 content/ko/docs/reference/setup-tools/kubeadm/generated/_index.md

diff --git a/content/ko/docs/reference/setup-tools/kubeadm/_index.md b/content/ko/docs/reference/setup-tools/kubeadm/_index.md
index 683f78000b..9211da1e0f 100644
--- a/content/ko/docs/reference/setup-tools/kubeadm/_index.md
+++ b/content/ko/docs/reference/setup-tools/kubeadm/_index.md
@@ -16,15 +16,15 @@ kubeadm은 실행 가능한 최소 클러스터를 시작하고 실행하는 데
 
 ## 설치 방법
 
-kubeadm을 설치하려면, [설치 가이드](/docs/setup/production-environment/tools/kubeadm/install-kubeadm)를 참고한다.
+kubeadm을 설치하려면, [설치 가이드](/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm/)를 참고한다.
 
 ## {{% heading "whatsnext" %}}
 
-* [kubeadm init](/docs/reference/setup-tools/kubeadm/kubeadm-init): 쿠버네티스 컨트롤 플레인 노드를 부트스트랩한다.
-* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join): 쿠버네티스 워커(worker) 노드를 부트스트랩하고 클러스터에 조인시킨다.
-* [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade): 쿠버네티스 클러스터를 새로운 버전으로 업그레이드한다.
-* [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config): kubeadm v1.7.x 이하의 버전을 사용하여 클러스터를 초기화한 경우, `kubeadm upgrade` 를 위해 사용자의 클러스터를 구성한다.
-* [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token): `kubeadm join` 을 위한 토큰을 관리한다.
-* [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset): `kubeadm init` 또는 `kubeadm join` 에 의한 호스트의 모든 변경 사항을 되돌린다.
-* [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version): kubeadm 버전을 출력한다.
-* [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha): 커뮤니티에서 피드백을 수집하기 위해서 기능 미리 보기를 제공한다.
+* [kubeadm init](/docs/reference/setup-tools/kubeadm/kubeadm-init/): 쿠버네티스 컨트롤 플레인 노드를 부트스트랩한다.
+* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/): 쿠버네티스 워커(worker) 노드를 부트스트랩하고 클러스터에 조인시킨다.
+* [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/): 쿠버네티스 클러스터를 새로운 버전으로 업그레이드한다.
+* [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config/): kubeadm v1.7.x 이하의 버전을 사용하여 클러스터를 초기화한 경우, `kubeadm upgrade` 를 위해 사용자의 클러스터를 구성한다.
+* [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token/): `kubeadm join` 을 위한 토큰을 관리한다.
+* [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset/): `kubeadm init` 또는 `kubeadm join` 에 의한 호스트의 모든 변경 사항을 되돌린다.
+* [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version/): kubeadm 버전을 출력한다.
+* [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/): 커뮤니티에서 피드백을 수집하기 위해서 기능 미리 보기를 제공한다.
diff --git a/content/ko/docs/reference/setup-tools/kubeadm/generated/_index.md b/content/ko/docs/reference/setup-tools/kubeadm/generated/_index.md
new file mode 100644
index 0000000000..7ebf753ae9
--- /dev/null
+++ b/content/ko/docs/reference/setup-tools/kubeadm/generated/_index.md
@@ -0,0 +1,6 @@
+---
+title: "Kubeadm Generated"
+weight: 10
+toc_hide: true
+---
+
diff --git a/content/ko/docs/reference/tools.md b/content/ko/docs/reference/tools.md
index 97206f3be7..a38158bf14 100644
--- a/content/ko/docs/reference/tools.md
+++ b/content/ko/docs/reference/tools.md
@@ -16,7 +16,7 @@ content_type: concept
 
 ## Kubeadm
 
-[`kubeadm`](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/)은 물리적 환경, 클라우드 서버, 또는 가상머신 상에서 안전한 쿠버네티스를 쉽게 프로비저닝하기 위한 커맨드라인 툴이다(현재는 알파 상태).
+[`kubeadm`](/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm/)은 물리적 환경, 클라우드 서버, 또는 가상머신 상에서 안전한 쿠버네티스를 쉽게 프로비저닝하기 위한 커맨드라인 툴이다(현재는 알파 상태).
 
 ## Minikube
 
diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index 827b407b84..ba06b3d023 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -265,7 +265,7 @@ Start-Service containerd
 ```
 
 kubeadm을 사용하는 경우,
-[kubelet용 cgroup 드라이버](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)를 수동으로 구성한다.
+[kubelet용 cgroup 드라이버](/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#컨트롤-플레인-노드에서-kubelet이-사용하는-cgroup-드라이버-구성)를 수동으로 구성한다.
 
 ### CRI-O
 
diff --git a/content/ko/docs/tasks/tools/_index.md b/content/ko/docs/tasks/tools/_index.md
index 47c90ec7fd..8c2b3e1aed 100755
--- a/content/ko/docs/tasks/tools/_index.md
+++ b/content/ko/docs/tasks/tools/_index.md
@@ -53,7 +53,7 @@ kind를 시작하고 실행하기 위해 수행해야 하는 작업을 보여준
 {{< glossary_tooltip term_id="kubeadm" text="kubeadm" >}} 도구를 사용하여 쿠버네티스 클러스터를 만들고 관리할 수 있다.
 사용자 친화적인 방식으로 최소한의 실행 가능하고 안전한 클러스터를 설정하고 실행하는 데 필요한 작업을 수행한다.
 
-[kubeadm 설치](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/) 페이지는 kubeadm 설치하는 방법을 보여준다.
+[kubeadm 설치](/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm/) 페이지는 kubeadm 설치하는 방법을 보여준다.
 설치가 끝나면, [클러스터 생성](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)이 가능하다.
 
-<a class="btn btn-primary" href="/docs/setup/production-environment/tools/kubeadm/install-kubeadm/" role="button" aria-label="kubeadm 설치 가이드 보기">kubeadm 설치 가이드 보기</a>
+<a class="btn btn-primary" href="/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm/" role="button" aria-label="kubeadm 설치 가이드 보기">kubeadm 설치 가이드 보기</a>

From 02fe081de404a0b571fedf6841ca7aca6e391fa1 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Mon, 22 Mar 2021 09:52:07 +0800
Subject: [PATCH 270/788] [zh] Sync concepts pages for
 extend-kubernetes\operator.md

* Sync with english version in 'Update operator page to list tools in alphabetical order (#26676)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../concepts/extend-kubernetes/operator.md    | 54 ++++++++++---------
 1 file changed, 30 insertions(+), 24 deletions(-)

diff --git a/content/zh/docs/concepts/extend-kubernetes/operator.md b/content/zh/docs/concepts/extend-kubernetes/operator.md
index fb9323d0dc..ca3d0f790f 100644
--- a/content/zh/docs/concepts/extend-kubernetes/operator.md
+++ b/content/zh/docs/concepts/extend-kubernetes/operator.md
@@ -185,57 +185,63 @@ kubectl edit SampleDB/example-database # 手动修改某些配置
 
 <!--
 &hellip;and that's it! The Operator will take care of applying the changes as well as keeping the existing service in good shape.
-
-## Writing your own Operator {#writing-operator}
 -->
 可以了！Operator 会负责应用所作的更改并保持现有服务处于良好的状态。
 
+<!--
+## Writing your own Operator {#writing-operator}
+-->
+
 ## 编写你自己的 Operator {#writing-operator}
 
 <!--
 If there isn't an Operator in the ecosystem that implements the behavior you
-want, you can code your own. In [What's next](#what-s-next) you'll find a few
-links to libraries and tools you can use to write your own cloud native
-Operator.
+want, you can code your own. 
 
 You also implement an Operator (that is, a Controller) using any language / runtime
 that can act as a [client for the Kubernetes API](/docs/reference/using-api/client-libraries/).
-
 -->
 
-如果生态系统中没可以实现你目标的 Operator，你可以自己编写代码。在
-[接下来](#what-s-next)一节中，你会找到编写自己的云原生 Operator
-需要的库和工具的链接。
+如果生态系统中没可以实现你目标的 Operator，你可以自己编写代码。
 
 你还可以使用任何支持 [Kubernetes API 客户端](/zh/docs/reference/using-api/client-libraries/)
 的语言或运行时来实现 Operator（即控制器）。
 
+<!--
+Following are a few libraries and tools you can use to write your own cloud native
+Operator.
+
+{{% thirdparty-content %}}
+
+* [kubebuilder](https://book.kubebuilder.io/)
+* [KUDO](https://kudo.dev/) (Kubernetes Universal Declarative Operator)
+* [Metacontroller](https://metacontroller.app/) along with WebHooks that
+  you implement yourself
+* [Operator Framework](https://operatorframework.io)
+-->
+以下是一些库和工具，你可用于编写自己的云原生 Operator。
+
+{{% thirdparty-content %}}
+
+* [kubebuilder](https://book.kubebuilder.io/)
+* [KUDO](https://kudo.dev/) (Kubernetes 通用声明式 Operator)
+* [Metacontroller](https://metacontroller.app/)，可与 Webhooks 结合使用，以实现自己的功能。
+* [Operator Framework](https://operatorframework.io)
+
 ## {{% heading "whatsnext" %}}
 
 <!--
 * Learn more about [Custom Resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
 * Find ready-made operators on [OperatorHub.io](https://operatorhub.io/) to suit your use case
-* Use existing tools to write your own operator, eg:
-  * using [KUDO](https://kudo.dev/) (Kubernetes Universal Declarative Operator)
-  * using [kubebuilder](https://book.kubebuilder.io/)
-  * using [Metacontroller](https://metacontroller.app/) along with WebHooks that
-    you implement yourself
-  * using the [Operator Framework](https://operatorframework.io)
 * [Publish](https://operatorhub.io/) your operator for other people to use
-* Read [CoreOS' original article](https://coreos.com/blog/introducing-operators.html) that introduced the Operator pattern
+* Read [CoreOS' original article](https://web.archive.org/web/20170129131616/https://coreos.com/blog/introducing-operators.html) that introduced the Operator pattern (this is an archived version of the original article).
 * Read an [article](https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-building-kubernetes-operators-and-stateful-apps) from Google Cloud about best practices for building Operators
 -->
 
-* 详细了解[定制资源](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
+* 详细了解 [定制资源](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
 * 在 [OperatorHub.io](https://operatorhub.io/) 上找到现成的、适合你的 Operator
-* 借助已有的工具来编写你自己的 Operator，例如：
-  * [KUDO](https://kudo.dev/) (Kubernetes 通用声明式 Operator)
-  * [kubebuilder](https://book.kubebuilder.io/)
-  * [Metacontroller](https://metacontroller.app/)，可与 Webhook 结合使用，以实现自己的功能。
-  * [Operator Framework](https://operatorframework.io)
 * [发布](https://operatorhub.io/)你的 Operator，让别人也可以使用
-* 阅读 [CoreOS 原文](https://coreos.com/blog/introducing-operators.html)，其介绍了 Operator 介绍
+* 阅读 [CoreOS 原始文章](https://web.archive.org/web/20170129131616/https://coreos.com/blog/introducing-operators.html)，它介绍了 Operator 模式（这是一个存档版本的原始文章）。
 * 阅读这篇来自谷歌云的关于构建 Operator 最佳实践的
   [文章](https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-building-kubernetes-operators-and-stateful-apps)
 
-

From 8e8b2819ac51230d2139d0f74e402b632347d15e Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Mon, 22 Mar 2021 11:52:56 +0530
Subject: [PATCH 271/788] Update configure-upgrade-etcd.md to give an example
 use-case for snapshot using options given by etcdctl

---
 .../administer-cluster/configure-upgrade-etcd.md  | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 25cd61a710..d393fcb013 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -269,6 +269,21 @@ If etcd is running on a storage volume that supports backup, such as Amazon
 Elastic Block Store, back up etcd data by taking a snapshot of the storage
 volume.
 
+### Snapshot using etcdctl options
+
+We can also take the snapshot using various options given by etcdctl. For example 
+
+```shell
+ETCDCTL_API=3 etcdctl --h 
+``` 
+
+will list various options avilable with etcdctl. If you want to take a snapshot by specifying various options available here, you can do so. For example, to take a snapshot by specifying the endpoint, certificates etc is as given below
+
+```shell
+ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> snapshot save <backup-file-location>
+```
+where, <trusted-ca-file>, <cert-file> and <key-file> can be obtained by looking at the description of the etcd pod.
+
 ## Scaling up etcd clusters
 
 Scaling up etcd clusters increases availability by trading off performance.

From 5214deb8a8136f59e2220c62cf3301289491dbc3 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Mon, 22 Mar 2021 16:14:06 +0800
Subject: [PATCH 272/788] [zh] Sync concepts pages for
 configuration\configmap.md

* Sync with english version in 'clarify: add that binaryData is base64-encoded (#27066)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 content/zh/docs/concepts/configuration/configmap.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/configuration/configmap.md b/content/zh/docs/concepts/configuration/configmap.md
index 1fe9f0c2bf..1f2f34b1e3 100644
--- a/content/zh/docs/concepts/configuration/configmap.md
+++ b/content/zh/docs/concepts/configuration/configmap.md
@@ -66,7 +66,7 @@ Kubernetes objects that have a `spec`, a ConfigMap has `data` and `binaryData`
 fields. These fields accept key-value pairs as their values.  Both the `data`
 field and the `binaryData` are optional. The `data` field is designed to
 contain UTF-8 byte sequences while the `binaryData` field is designed to
-contain binary data.
+contain binary data as base64-encoded strings.
 
 The name of a ConfigMap must be a valid
 [DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
@@ -78,7 +78,7 @@ ConfigMap 是一个 API [对象](/zh/docs/concepts/overview/working-with-objects
 和其他 Kubernetes 对象都有一个 `spec` 不同的是，ConfigMap 使用 `data` 和
 `binaryData` 字段。这些字段能够接收键-值对作为其取值。`data` 和 `binaryData`
 字段都是可选的。`data` 字段设计用来保存 UTF-8 字节序列，而 `binaryData` 则
-被设计用来保存二进制数据。
+被设计用来保存二进制数据作为 base64 编码的字串。
 
 ConfigMap 的名字必须是一个合法的
 [DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)。
@@ -361,7 +361,7 @@ kubelet 组件会在每次周期性同步时检查所挂载的 ConfigMap 是否
 的 `ConfigMapAndSecretChangeDetectionStrategy` 字段来配置。
 
 <!--
-A ConfigMap can be either propagated by watch (default), ttl-based, or simply redirecting
+A ConfigMap can be either propagated by watch (default), ttl-based, or by redirecting
 all requests directly to the API server.
 As a result, the total delay from the moment when the ConfigMap is updated to the moment
 when new keys are projected to the Pod can be as long as the kubelet sync period + cache
@@ -369,7 +369,7 @@ propagation delay, where the cache propagation delay depends on the chosen cache
 (it equals to watch propagation delay, ttl of cache, or zero correspondingly).
 -->
 ConfigMap 既可以通过 watch 操作实现内容传播（默认形式），也可实现基于 TTL
-的缓存，还可以直接将所有请求重定向到 API 服务器。
+的缓存，还可以直接经过所有请求重定向到 API 服务器。
 因此，从 ConfigMap 被更新的那一刻算起，到新的主键被投射到 Pod 中去，这一
 时间跨度可能与 kubelet 的同步周期加上高速缓存的传播延迟相等。
 这里的传播延迟取决于所选的高速缓存类型

From 66e666f3072f43dd5c099a35ae9c3dc408382fb6 Mon Sep 17 00:00:00 2001
From: Juampy NR <juampynr@users.noreply.github.com>
Date: Mon, 22 Mar 2021 11:36:40 +0100
Subject: [PATCH 273/788] Add indentation to the cert parameters

---
 .../tasks/administer-cluster/configure-upgrade-etcd.md    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 66c6c0f94a..4bfd4ddbe3 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -130,10 +130,10 @@ communication:
 
 ```
 ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 \
---cert=/etc/kubernetes/pki/etcd/server.crt \
---key=/etc/kubernetes/pki/etcd/server.key \
---cacert=/etc/kubernetes/pki/etcd/ca.crt \
-member list
+  --cert=/etc/kubernetes/pki/etcd/server.crt \
+  --key=/etc/kubernetes/pki/etcd/server.key \
+  --cacert=/etc/kubernetes/pki/etcd/ca.crt \
+  member list
 ```
 
 ### Limiting access of etcd clusters

From 955acb710d50c2f62b0298943a21e3a66c850a52 Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Mon, 22 Mar 2021 17:16:56 +0530
Subject: [PATCH 274/788] Update
 content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../docs/tasks/administer-cluster/configure-upgrade-etcd.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index d393fcb013..222a1687b7 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -277,7 +277,8 @@ We can also take the snapshot using various options given by etcdctl. For exampl
 ETCDCTL_API=3 etcdctl --h 
 ``` 
 
-will list various options avilable with etcdctl. If you want to take a snapshot by specifying various options available here, you can do so. For example, to take a snapshot by specifying the endpoint, certificates etc is as given below
+will list various options available from etcdctl. For example, you can take a snapshot by specifying
+the endpoint, certificates etc as shown below:
 
 ```shell
 ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> snapshot save <backup-file-location>
@@ -339,4 +340,3 @@ We also recommend restarting any components (e.g. `kube-scheduler`,
 stale data. Note that in practice, the restore takes a bit of time.  During the
 restoration, critical components will lose leader lock and restart themselves.
 {{< /note >}}
-

From 483857e11b6a4199bb80e2891b3f863c497334a7 Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Mon, 22 Mar 2021 17:17:04 +0530
Subject: [PATCH 275/788] Update
 content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../en/docs/tasks/administer-cluster/configure-upgrade-etcd.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 222a1687b7..232b260c53 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -283,7 +283,7 @@ the endpoint, certificates etc as shown below:
 ```shell
 ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> snapshot save <backup-file-location>
 ```
-where, <trusted-ca-file>, <cert-file> and <key-file> can be obtained by looking at the description of the etcd pod.
+where `trusted-ca-file`, `cert-file` and `key-file` can be obtained from the description of the etcd Pod.
 
 ## Scaling up etcd clusters
 

From 57b7232ccbf389f575fcd977b8ad4b3db0795718 Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Mon, 22 Mar 2021 17:17:20 +0530
Subject: [PATCH 276/788] Update
 content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../docs/tasks/administer-cluster/configure-upgrade-etcd.md   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 232b260c53..7fb4fd67bd 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -281,7 +281,9 @@ will list various options available from etcdctl. For example, you can take a sn
 the endpoint, certificates etc as shown below:
 
 ```shell
-ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> snapshot save <backup-file-location>
+ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] \
+  --cacert=trusted-ca-file --cert=cert-file --key=key-file \
+  snapshot save backup-file-location
 ```
 where `trusted-ca-file`, `cert-file` and `key-file` can be obtained from the description of the etcd Pod.
 

From 4871b02de82c95f6ee645375216bfd068e5f084b Mon Sep 17 00:00:00 2001
From: Derek Carr <decarr@redhat.com>
Date: Tue, 16 Mar 2021 16:27:24 -0400
Subject: [PATCH 277/788] Promote DownwardAPIHugePages to beta

---
 .../reference/command-line-tools-reference/feature-gates.md    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 5500c19412..16e7a50fdf 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -99,7 +99,8 @@ different Kubernetes components.
 | `DevicePlugins` | `true` | Beta | 1.10 | |
 | `DisableAcceleratorUsageMetrics` | `false` | Alpha | 1.19 | 1.19 |
 | `DisableAcceleratorUsageMetrics` | `true` | Beta | 1.20 | |
-| `DownwardAPIHugePages` | `false` | Alpha | 1.20 | |
+| `DownwardAPIHugePages` | `false` | Alpha | 1.20 | 1.20 |
+| `DownwardAPIHugePages` | `false` | Beta | 1.21 | |
 | `DynamicKubeletConfig` | `false` | Alpha | 1.4 | 1.10 |
 | `DynamicKubeletConfig` | `true` | Beta | 1.11 | |
 | `EfficientWatchResumption` | `false` | Alpha | 1.20 | |

From 7e171dfcbec47340d72b14f34d8980bac6bd4e6f Mon Sep 17 00:00:00 2001
From: Kenichi Omichi <ken-oomichi@wx.jp.nec.com>
Date: Mon, 22 Mar 2021 21:13:45 +0000
Subject: [PATCH 278/788] ko: Replace redirect links of kubeadm

/docs/reference/setup-tools/kubeadm/kubeadm/ is redirected to
/docs/reference/setup-tools/kubeadm/
This replaces the redirect links of kubeadm with the direct links.

NOTE: The pull request for `en` language has been already merged as https://github.com/kubernetes/website/pull/26919
---
 content/ko/docs/setup/best-practices/certificates.md        | 6 +++---
 .../ko/docs/setup/production-environment/tools/kubespray.md | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/ko/docs/setup/best-practices/certificates.md b/content/ko/docs/setup/best-practices/certificates.md
index 3ada64a469..71e16b7675 100644
--- a/content/ko/docs/setup/best-practices/certificates.md
+++ b/content/ko/docs/setup/best-practices/certificates.md
@@ -7,7 +7,7 @@ weight: 40
 <!-- overview -->
 
 쿠버네티스는 TLS 위에 인증을 위해 PKI 인증서가 필요하다.
-만약 [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)으로 쿠버네티스를 설치했다면, 클러스터에 필요한 인증서는 자동으로 생성된다.
+만약 [kubeadm](/docs/reference/setup-tools/kubeadm/)으로 쿠버네티스를 설치했다면, 클러스터에 필요한 인증서는 자동으로 생성된다.
 또한 더 안전하게 자신이 소유한 인증서를 생성할 수 있다. 이를 테면, 개인키를 API 서버에 저장하지 않으므로 더 안전하게 보관할 수 있다.
 이 페이지는 클러스터에 필요한 인증서를 설명한다.
 
@@ -72,7 +72,7 @@ etcd 역시 클라이언트와 피어 간에 상호 TLS 인증을 구현한다.
 | kube-apiserver-kubelet-client | kubernetes-ca             | system:masters | client                                 |                                             |
 | front-proxy-client            | kubernetes-front-proxy-ca |                | client                                 |                                             |
 
-[1]: 클러스터에 접속한 다른 IP 또는 DNS 이름([kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) 이 사용하는 로드 밸런서 안정 IP 또는 DNS 이름, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
+[1]: 클러스터에 접속한 다른 IP 또는 DNS 이름([kubeadm](/docs/reference/setup-tools/kubeadm/) 이 사용하는 로드 밸런서 안정 IP 또는 DNS 이름, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
 `kubernetes.default.svc.cluster`, `kubernetes.default.svc.cluster.local`)
 
 `kind`는 하나 이상의 [x509 키 사용](https://godoc.org/k8s.io/api/certificates/v1beta1#KeyUsage) 종류를 가진다.
@@ -97,7 +97,7 @@ kubeadm 사용자만 해당:
 
 ### 인증서 파일 경로
 
-인증서는 권고하는 파일 경로에 존재해야 한다([kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)에서 사용되는 것처럼). 경로는 위치에 관계없이 주어진 파라미터를 사용하여 지정되야 한다.
+인증서는 권고하는 파일 경로에 존재해야 한다([kubeadm](/docs/reference/setup-tools/kubeadm/)에서 사용되는 것처럼). 경로는 위치에 관계없이 주어진 파라미터를 사용하여 지정되야 한다.
 
 | 기본 CN                      | 권고되는 키 파일 경로         | 권고하는 인증서 파일 경로   | 명령어         | 키 파라미터                  | 인증서 파라미터                           |
 |------------------------------|------------------------------|-----------------------------|----------------|------------------------------|-------------------------------------------|
diff --git a/content/ko/docs/setup/production-environment/tools/kubespray.md b/content/ko/docs/setup/production-environment/tools/kubespray.md
index f068061a7d..d838845c61 100644
--- a/content/ko/docs/setup/production-environment/tools/kubespray.md
+++ b/content/ko/docs/setup/production-environment/tools/kubespray.md
@@ -22,7 +22,7 @@ Kubespray는 [Ansible](https://docs.ansible.com/) 플레이북, [인벤토리](h
     * Flatcar Container Linux by Kinvolk
 * 지속적인 통합 (CI) 테스트
 
-클러스터를 설치해 줄 도구로 유스케이스와 가장 잘 맞는 것을 고르고 싶다면, kubespray를 [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), [kops](/ko/docs/setup/production-environment/tools/kops/)와 [비교한 글](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)을 읽어보자.
+클러스터를 설치해 줄 도구로 유스케이스와 가장 잘 맞는 것을 고르고 싶다면, kubespray를 [kubeadm](/docs/reference/setup-tools/kubeadm/), [kops](/ko/docs/setup/production-environment/tools/kops/)와 [비교한 글](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)을 읽어보자.
 
 <!-- body -->
 

From f755079d155f9dc8b1b4380a77c5a8f60d5eb857 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Tue, 23 Mar 2021 00:22:35 +0200
Subject: [PATCH 279/788] [ja] fix column alignment

---
 .../ja/docs/tasks/debug-application-cluster/debug-service.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/debug-application-cluster/debug-service.md b/content/ja/docs/tasks/debug-application-cluster/debug-service.md
index 5daefb2f59..fa8ce7109b 100644
--- a/content/ja/docs/tasks/debug-application-cluster/debug-service.md
+++ b/content/ja/docs/tasks/debug-application-cluster/debug-service.md
@@ -365,7 +365,7 @@ kubectl get service hostnames -o json
 kubectl get pods -l app=hostnames
 ```
 ```none
-NAME              READY     STATUS    RESTARTS   AGE
+NAME                        READY     STATUS    RESTARTS   AGE
 hostnames-632524106-bbpiw   1/1       Running   0          1h
 hostnames-632524106-ly40y   1/1       Running   0          1h
 hostnames-632524106-tlaok   1/1       Running   0          1h

From d0544c2f6431ca5e3dbb038f5e8480f60d092fe8 Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Mon, 22 Mar 2021 19:35:35 -0300
Subject: [PATCH 280/788] Default Namespace labels (#26995)

* Adds namespace default label docs

* Adds namespace default label docs

* Apply suggestions from code review

Co-authored-by: Qiming Teng <tengqm@outlook.com>

* Add feature gate page review

* Add common labels review

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../concepts/services-networking/network-policies.md     | 9 ++++++++-
 .../command-line-tools-reference/feature-gates.md        | 2 ++
 content/en/docs/reference/labels-annotations-taints.md   | 8 ++++++++
 3 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index 32421a0beb..a1948c5227 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -264,6 +264,13 @@ Your cluster must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} p
 supports the `endPort` field in NetworkPolicy specifications.
 {{< /note >}}
 
+## Targeting a Namespace by its name
+
+As of Kubernetes v1.21, an immutable label `kubernetes.io/metadata.name` is added to all
+namespaces. The value of the label is the namespace name. While NetworkPolicy cannot
+target a namespace by its name with some object field, this label now can be used to target
+a specific namespace.
+
 ## What you can't do with network policies (at least, not yet)
 
 As of Kubernetes 1.20, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
@@ -271,7 +278,7 @@ As of Kubernetes 1.20, the following functionality does not exist in the Network
 - Forcing internal cluster traffic to go through a common gateway (this might be best served with a service mesh or other proxy).
 - Anything TLS related (use a service mesh or ingress controller for this).
 - Node specific policies (you can use CIDR notation for these, but you cannot target nodes by their Kubernetes identities specifically).
-- Targeting of namespaces or services by name (you can, however, target pods or namespaces by their {{< glossary_tooltip text="labels" term_id="label" >}}, which is often a viable workaround).
+- Targeting of services by name (you can, however, target pods or namespaces by their {{< glossary_tooltip text="labels" term_id="label" >}}, which is often a viable workaround).
 - Creation or management of "Policy requests" that are fulfilled by a third party.
 - Default policies which are applied to all namespaces or pods (there are some third party Kubernetes distributions and projects which can do this).
 - Advanced policy querying and reachability tooling.
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 1bb8bee315..2c181ca331 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -135,6 +135,7 @@ different Kubernetes components.
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
 | `MixedProtocolLBService` | `false` | Alpha | 1.20 | |
+| `NamespaceDefaultLabelName` | `true` | Beta | 1.21 | |
 | `NetworkPolicyEndPort` | `false` | Alpha | 1.21 |  |
 | `NodeDisruptionExclusion` | `false` | Alpha | 1.16 | 1.18 |
 | `NodeDisruptionExclusion` | `true` | Beta | 1.19 | |
@@ -673,6 +674,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   the volume mounter.
 - `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
   For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).
+- `NamespaceDefaultLabelName`: Enable the API Server to create a default label `kubernetes.io/metadata.name` in all namespaces containing the namespace name.
 - `NetworkPolicyEndPort`: Enable use of the field `endPort` in NetworkPolicy objects, allowing the selection of a port range instead of a single port.
 - `NodeDisruptionExclusion`: Enable use of the Node label `node.kubernetes.io/exclude-disruption`
   which prevents nodes from being evacuated during zone failures.
diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 41f84c6540..0399bd561e 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -30,6 +30,14 @@ Used on: Node
 
 The Kubelet populates this with `runtime.GOOS` as defined by Go. This can be handy if you are mixing operating systems in your cluster (for example: mixing Linux and Windows nodes).
 
+## kubernetes.io/metadata.name
+
+Example: `kubernetes.io/metadata.name=mynamespace`
+
+Used on: Namespaces
+
+Kubernetes API Server defaults this label to the namespace name during admission. This label can be used with any namespace selector, as an example with NetworkPolicy objects.
+
 ## beta.kubernetes.io/arch (deprecated)
 
 This label has been deprecated. Please use `kubernetes.io/arch` instead.

From 119233c47baddb7f8c3e96b143bb74e36aad4767 Mon Sep 17 00:00:00 2001
From: Xudong Liu <xudongl@vmware.com>
Date: Mon, 22 Mar 2021 16:38:03 -0700
Subject: [PATCH 281/788] add KEP link for loadBalancerClass

---
 .../reference/command-line-tools-reference/feature-gates.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index a26a9ebd38..68ea25e628 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -730,7 +730,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints.
 - `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
   field on Services.
-- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services.
+- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services. See [Service Type=LoadBalancer Class Field](https://github.com/kubernetes/enhancements/tree/master/keps/sig-cloud-provider/1959-service-lb-class-field) for more details.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.
 - `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers
   created by a cloud provider. A node is eligible for exclusion if labelled with

From 81be1fe0f6e18713d45fb0e8149a9be86b00c3d7 Mon Sep 17 00:00:00 2001
From: s-kawamura-w664 <s-kawamura_p@nec.com>
Date: Mon, 22 Mar 2021 02:58:36 +0000
Subject: [PATCH 282/788] delete a illegal code in fr.

---
 content/fr/docs/concepts/cluster-administration/logging.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/concepts/cluster-administration/logging.md b/content/fr/docs/concepts/cluster-administration/logging.md
index 465ec742b1..0932de7406 100644
--- a/content/fr/docs/concepts/cluster-administration/logging.md
+++ b/content/fr/docs/concepts/cluster-administration/logging.md
@@ -82,7 +82,7 @@ conteneur a crashé.
 
 Si le Pod a plusieurs conteneurs, il faut spécifier le nom du conteneur dont on
 veut récupérer le journal d'évènement. Dans notre exemple le conteneur s'appelle
-`count` donc vous pouvez utiliser `kubectl logs counter count`. Plus de détails
+`count` donc vous pouvez utiliser `kubectl logs counter count`. Plus de détails
 dans la [documentation de `kubectl
 logs`] (/docs/reference/generated/kubectl/kubectl-commands#logs)
 

From 9d18f320ee124aa6ab041a7e85137f66b18be7c3 Mon Sep 17 00:00:00 2001
From: s-kawamura-w664 <s-kawamura_p@nec.com>
Date: Mon, 22 Mar 2021 12:42:40 +0900
Subject: [PATCH 283/788] delete a illegal code in ko.

---
 content/ko/docs/concepts/services-networking/ingress.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ko/docs/concepts/services-networking/ingress.md b/content/ko/docs/concepts/services-networking/ingress.md
index a55302f059..ec705e6a7c 100644
--- a/content/ko/docs/concepts/services-networking/ingress.md
+++ b/content/ko/docs/concepts/services-networking/ingress.md
@@ -167,7 +167,7 @@ Events:       <none>
 
 ### 예제
 
-| 종류    | 경로                             | 요청 경로                       | 일치 여부                            |
+| 종류    | 경로                             | 요청 경로                       | 일치 여부                            |
 |--------|---------------------------------|-------------------------------|------------------------------------|
 | Prefix | `/`                             | (모든 경로)                     | 예                                  |
 | Exact  | `/foo`                          | `/foo`                        | 예                                  |

From aaea5d32d0f77834c861823428e7ea2d25d9e00c Mon Sep 17 00:00:00 2001
From: Jose Roberto Almaraz <jralmaraz1@gmail.com>
Date: Tue, 23 Mar 2021 12:45:35 +1100
Subject: [PATCH 284/788] 
 Add/pt/docs/reference/access-authn-authz/bootstrap-tokens (#27163)

* adding glossarry terms used in authentication page

* adding bootstrap token translation

* reviewing alternate-x509-schemes.md

* reviewing bootstrap tokens page

* removing files from wrong branch
---
 .../access-authn-authz/bootstrap-tokens.md    | 169 ++++++++++++++++++
 1 file changed, 169 insertions(+)
 create mode 100644 content/pt/docs/reference/access-authn-authz/bootstrap-tokens.md

diff --git a/content/pt/docs/reference/access-authn-authz/bootstrap-tokens.md b/content/pt/docs/reference/access-authn-authz/bootstrap-tokens.md
new file mode 100644
index 0000000000..67f23e2bb6
--- /dev/null
+++ b/content/pt/docs/reference/access-authn-authz/bootstrap-tokens.md
@@ -0,0 +1,169 @@
+---
+title: Autenticando com Tokens de Inicialização
+content_type: concept
+weight: 20
+---
+ 
+<!-- overview -->
+ 
+{{< feature-state for_k8s_version="v1.18" state="stable" >}}
+ 
+Os tokens de inicialização são um _bearer token_ simples que devem ser utilizados
+ao criar novos clusters ou para quando novos nós são registrados a clusters existentes. Eles foram construídos
+para suportar a ferramenta [kubeadm](/docs/reference/setup-tools/kubeadm/), mas podem ser utilizados em outros contextos para usuários que desejam inicializar clusters sem utilizar o `kubeadm`.
+Foram também construídos para funcionar, via políticas RBAC, com o sistema de [Inicialização do Kubelet via TLS](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/).
+ 
+<!-- body -->
+## Visão geral dos tokens de inicialização
+ 
+Os tokens de inicialização são definidos com um tipo especifico de _secrets_ (`bootstrap.kubernetes.io/token`) que existem no namespace `kube-system`. Estes _secrets_ são então lidos pelo autenticador de inicialização do servidor de API.
+Tokens expirados são removidos pelo controlador _TokenCleaner_ no gerenciador de controle - kube-controller-manager.
+Os tokens também são utilizados para criar uma assinatura para um ConfigMap específico usado no processo de descoberta através de um controlador denominado `BootstrapSigner`.
+ 
+## Formato do Token
+ 
+Tokens de inicialização tem o formato `abcdef.0123456789abcdef`. Mais formalmente, eles devem corresponder a expressão regular `[a-z0-9]{6}\.[a-z0-9]{16}`.
+ 
+A primeira parte do token é um identificador ("Token ID") e é considerado informação pública.
+Ele é utilizado para se referir a um token sem vazar a parte secreta usada para autenticação.
+A segunda parte é o _secret_ do token e somente deve ser compartilhado com partes confiáveis.
+ 
+## Habilitando autenticação com tokens de inicialização
+ 
+O autenticador de tokens de inicialização pode ser habilitado utilizando a seguinte opção no servidor de API:
+ 
+```
+--enable-bootstrap-token-auth
+```
+ 
+Quando habilitado, tokens de inicialização podem ser utilizado como credenciais _bearer token_
+para autenticar requisições no servidor de API.
+ 
+```http
+Authorization: Bearer 07401b.f395accd246ae52d
+```
+ 
+Tokens são autenticados como o usuário `system:bootstrap:<token id>` e são membros
+do grupo `system:bootstrappers`. Grupos adicionais podem ser
+especificados dentro do _secret_ do token.
+ 
+Tokens expirados podem ser removidos automaticamente ao habilitar o controlador `tokencleaner`
+do gerenciador de controle - kube-controller-manager.
+ 
+```
+--controllers=*,tokencleaner
+```
+ 
+## Formato do _secret_ dos tokens de inicialização
+ 
+Cada token válido possui um _secret_ no namespace `kube-system`. Você pode
+encontrar a documentação completa [aqui](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/cluster-lifecycle/bootstrap-discovery.md).
+ 
+Um _secret_ de token se parece com o exemplo abaixo:
+ 
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+ # Nome DEVE seguir o formato "bootstrap-token-<token id>"
+ name: bootstrap-token-07401b
+ namespace: kube-system
+ 
+# Tipo DEVE ser 'bootstrap.kubernetes.io/token'
+type: bootstrap.kubernetes.io/token
+stringData:
+ # Descrição legível. Opcional.
+ description: "The default bootstrap token generated by 'kubeadm init'."
+ 
+ # identificador do token e _secret_. Obrigatório.
+ token-id: 07401b
+ token-secret: f395accd246ae52d
+ 
+ # Validade. Opcional.
+ expiration: 2017-03-10T03:22:11Z
+ 
+ # Usos permitidos.
+ usage-bootstrap-authentication: "true"
+ usage-bootstrap-signing: "true"
+ 
+ # Grupos adicionais para autenticar o token. Devem começar com "system:bootstrappers:"
+ auth-extra-groups: system:bootstrappers:worker,system:bootstrappers:ingress
+```
+ 
+O tipo do _secret_ deve ser `bootstrap.kubernetes.io/token` e o nome deve seguir o formato `bootstrap-token-<token id>`. Ele também tem que existir no namespace `kube-system`.
+ 
+Os membros listados em `usage-bootstrap-*` indicam qual a intenção de uso deste _secret_. O valor `true` deve ser definido para que seja ativado.
+ 
+* `usage-bootstrap-authentication` indica que o token pode ser utilizado para autenticar no servidor de API como um _bearer token_.
+* `usage-bootstrap-signing` indica que o token pode ser utilizado para assinar o ConfigMap `cluster-info` como descrito abaixo.
+ 
+O campo `expiration` controla a expiração do token. Tokens expirados são
+rejeitados quando usados para autenticação e ignorados durante assinatura de ConfigMaps.
+O valor de expiração é codificado como um tempo absoluto UTC utilizando a RFC3339. Para automaticamente
+remover tokens expirados basta habilitar o controlador `tokencleaner`.
+ 
+## Gerenciamento de tokens com kubeadm
+ 
+Você pode usar a ferramenta `kubeadm` para gerenciar tokens em um cluster. Veja [documentação de tokens kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm-token/) para mais detalhes.
+ 
+## Assinatura de ConfigMap
+ 
+Além de autenticação, os tokens podem ser utilizados para assinar um ConfigMap. Isto pode
+ser utilizado em estágio inicial do processo de inicialização de um cluster, antes que o cliente confie
+no servidor de API. O Configmap assinado pode ser autenticado por um token compartilhado.
+ 
+Habilite a assinatura de ConfigMap ao habilitar o controlador `bootstrapsigner` no gerenciador de controle - kube-controller-manager.
+ 
+```
+--controllers=*,bootstrapsigner
+```
+O ConfigMap assinado é o `cluster-info` no namespace `kube-public`.
+No fluxo típico, um cliente lê o ConfigMap enquanto ainda não autenticado
+e ignora os erros da camada de transporte seguro (TLS).
+Ele então valida o conteúdo do ConfigMap ao verificar a assinatura contida no ConfigMap.
+ 
+O ConfigMap pode se parecer com o exemplo abaixo:
+ 
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: cluster-info
+ namespace: kube-public
+data:
+ jws-kubeconfig-07401b: eyJhbGciOiJIUzI1NiIsImtpZCI6IjA3NDAxYiJ9..tYEfbo6zDNo40MQE07aZcQX2m3EB2rO3NuXtxVMYm9U
+ kubeconfig: |
+   apiVersion: v1
+   clusters:
+   - cluster:
+       certificate-authority-data: <really long certificate data>
+       server: https://10.138.0.2:6443
+     name: ""
+   contexts: []
+   current-context: ""
+   kind: Config
+   preferences: {}
+   users: []
+```
+ 
+O membro `kubeconfig` do ConfigMap é um arquivo de configuração contendo somente
+as informações do cluster preenchidas. A informação chave sendo comunicada aqui
+está em `certificate-authority-data`. Isto poderá ser expandido no futuro.
+ 
+A assinatura é feita utilizando-se assinatura JWS em modo "separado". Para validar
+a assinatura, o usuário deve codificar o conteúdo do `kubeconfig` de acordo com as regras do JWS
+(codificando em base64 e descartando qualquer `=` ao final). O conteúdo codificado
+e então usado para formar um JWS inteiro, inserindo-o entre os 2 pontos. Você pode
+verificar o JWS utilizando o esquema `HS256` (HMAC-SHA256) com o token completo
+(por exemplo: `07401b.f395accd246ae52d`) como o _secret_ compartilhado. Usuários _devem_
+verificar que o algoritmo HS256 (que é um método de assinatura simétrica) está sendo utilizado.
+ 
+ 
+{{< warning >}}
+Qualquer parte em posse de um token de inicialização pode criar uma assinatura válida
+daquele token. Não é recomendável, quando utilizando assinatura de ConfigMap, que se compartilhe
+o mesmo token com muitos clientes, uma vez que um cliente comprometido pode abrir brecha para potenciais
+"homem no meio" entre outro cliente que confia na assinatura para estabelecer inicialização via camada de transporte seguro (TLS).   
+{{< /warning >}}
+ 
+Consulte a seção de [detalhes de implementação do kubeadm](/docs/reference/setup-tools/kubeadm/implementation-details/) para mais informações.
\ No newline at end of file

From d7c2dd670bacfafe7520832eeea3f9ac49bd7294 Mon Sep 17 00:00:00 2001
From: Akihito INOH <akihito-inou@nec.com>
Date: Tue, 23 Mar 2021 11:13:46 +0900
Subject: [PATCH 285/788] Fix errors of linkchecker.py in tasks folder

This commit fixes `Should use relative paths` errors which are shown by `linkchecker.py`
on `en/docs/tasks/*`.
---
 .../docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md  | 2 +-
 .../tasks/administer-cluster/kubeadm/kubeadm-upgrade.md     | 2 +-
 content/en/docs/tasks/tools/_index.md                       | 6 +++---
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 56a6c25e9a..ea2c0a9c7f 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -170,7 +170,7 @@ controllerManager:
 
 ### Create certificate signing requests (CSR)
 
-See [Create CertificateSigningRequest](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest) for creating CSRs with the Kubernetes API.
+See [Create CertificateSigningRequest](/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest) for creating CSRs with the Kubernetes API.
 
 ## Renew certificates with external CA
 
diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
index 5af9d27b82..47ea403e9a 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
@@ -37,7 +37,7 @@ The upgrade workflow at high level is the following:
 
 ### Additional information
 
-- [Draining nodes](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/) before kubelet MINOR version
+- [Draining nodes](/docs/tasks/administer-cluster/safely-drain-node/) before kubelet MINOR version
   upgrades is required. In the case of control plane nodes, they could be running CoreDNS Pods or other critical workloads.
 - All containers are restarted after upgrade, because the container spec hash value is changed.
 
diff --git a/content/en/docs/tasks/tools/_index.md b/content/en/docs/tasks/tools/_index.md
index 4f43a92af7..5f1b517141 100755
--- a/content/en/docs/tasks/tools/_index.md
+++ b/content/en/docs/tasks/tools/_index.md
@@ -17,9 +17,9 @@ and view logs. For more information including a complete list of kubectl operati
 kubectl is installable on a variety of Linux platforms, macOS and Windows. 
 Find your preferred operating system below.
 
-- [Install kubectl on Linux](install-kubectl-linux)
-- [Install kubectl on macOS](install-kubectl-macos)
-- [Install kubectl on Windows](install-kubectl-windows)
+- [Install kubectl on Linux](/docs/tasks/tools/install-kubectl-linux)
+- [Install kubectl on macOS](/docs/tasks/tools/install-kubectl-macos)
+- [Install kubectl on Windows](/docs/tasks/tools/install-kubectl-windows)
 
 ## kind
 

From e4041be5917e8461ba8a82b14ec4b4331077bfc9 Mon Sep 17 00:00:00 2001
From: RA489 <rohit.anand@india.nec.com>
Date: Tue, 23 Mar 2021 11:05:10 +0530
Subject: [PATCH 286/788] Update setup guide

---
 content/ru/docs/setup/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ru/docs/setup/_index.md b/content/ru/docs/setup/_index.md
index 17b6efd198..69428da89c 100644
--- a/content/ru/docs/setup/_index.md
+++ b/content/ru/docs/setup/_index.md
@@ -29,7 +29,7 @@ content_type: concept
 * Пробуете или начинаете работу с Kubernetes
 * Локально разрабатываете и тестируете кластер
 
-Выбрать [решение для запуска на локальной машине](/docs/setup/pick-right-solution/#local-machine-solutions).
+Выбрать [решение для запуска на локальной машине](/docs/setup/learning-environment/).
 
 ## Управляемые решения
 

From 5927f9602927bbd447ee33f3b3357ebb458fcc3d Mon Sep 17 00:00:00 2001
From: Cezary Zukowski <c.zukowski@samsung.com>
Date: Mon, 19 Oct 2020 18:10:59 +0200
Subject: [PATCH 287/788] The Memory Manager official documentation

Signed-off-by: Cezary Zukowski <c.zukowski@samsung.com>
---
 .../concepts/policy/node-resource-managers.md |  22 +
 .../administer-cluster/memory-manager.md      | 380 ++++++++++++++++++
 .../administer-cluster/topology-manager.md    |  10 +-
 static/images/docs/memory-manager-diagram.svg |   2 +
 4 files changed, 409 insertions(+), 5 deletions(-)
 create mode 100644 content/en/docs/concepts/policy/node-resource-managers.md
 create mode 100644 content/en/docs/tasks/administer-cluster/memory-manager.md
 create mode 100644 static/images/docs/memory-manager-diagram.svg

diff --git a/content/en/docs/concepts/policy/node-resource-managers.md b/content/en/docs/concepts/policy/node-resource-managers.md
new file mode 100644
index 0000000000..ce9e6be98b
--- /dev/null
+++ b/content/en/docs/concepts/policy/node-resource-managers.md
@@ -0,0 +1,22 @@
+---
+reviewers:
+- derekwaynecarr
+- klueska
+title: Node Resource Managers 
+content_type: concept
+weight: 50
+---
+
+<!-- overview -->
+
+In order to support latency-critical and high-throughput workloads, Kubernetes offers a suite of Resource Managers. The managers aim to co-ordinate and optimise node's resources alignment for pods configured with a specific requirement for CPUs, devices, and memory (hugepages) resources. 
+
+<!-- body -->
+
+The main manager, the Topology Manager, is a Kubelet component that co-ordinates the overall resource management process through its [policy](/docs/tasks/administer-cluster/topology-manager/).
+
+The configuration of individual managers is elaborated in dedicated documents:
+
+- [CPU Manager Policies](/docs/tasks/administer-cluster/cpu-management-policies/)
+- [Device Manager](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#device-plugin-integration-with-the-topology-manager)
+- [Memory Manger Policies](/docs/tasks/administer-cluster/memory-manager/)
\ No newline at end of file
diff --git a/content/en/docs/tasks/administer-cluster/memory-manager.md b/content/en/docs/tasks/administer-cluster/memory-manager.md
new file mode 100644
index 0000000000..60f2ded206
--- /dev/null
+++ b/content/en/docs/tasks/administer-cluster/memory-manager.md
@@ -0,0 +1,380 @@
+---
+title: Memory Manager
+
+reviewers:
+- klueska
+- derekwaynecarr
+
+content_type: task
+min-kubernetes-server-version: v1.21
+---
+
+<!-- overview -->
+
+{{< feature-state state="alpha" for_k8s_version="v1.21" >}}
+
+The Kubernetes *Memory Manager* enables the feature of guaranteed memory (and hugepages) allocation for pods in the `Guaranteed` {{< glossary_tooltip text="QoS class" term_id="qos-class" >}}.
+
+The Memory Manager employs hint generation protocol to yield the most suitable NUMA affinity for a pod. The Memory Manager feeds the central manager (*Topology Manager*) with these affinity hints. Based on both the hints and Topology Manager policy, the pod is rejected or admitted to the node.
+
+Moreover, the Memory Manager ensures that the memory which a pod requests is allocated from a minimum number of NUMA nodes.
+
+The Memory Manager is only pertinent to Linux based hosts.
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+To align memory resources with other requested resources in a Pod Spec:
+- the CPU Manager should be enabled and proper CPU Manager policy should be configured on a Node. See [control CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/);
+- the Topology Manager should be enabled and proper Topology Manager policy should be configured on a Node. See [control Topology Management Policies](/docs/tasks/administer-cluster/topology-manager/).
+
+Support for the Memory Manager requires `MemoryManager` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be enabled. 
+
+That is, the `kubelet` must be started with the following flag:
+
+`--feature-gates=MemoryManager=true`
+
+## How Memory Manager Operates?
+
+The Memory Manager currently offers the guaranteed memory (and hugepages) allocation for Pods in Guaranteed QoS class. To immediately put the Memory Manager into operation follow the guidelines in the section [Memory Manager configuration](#memory-manager-configuration), and subsequently, prepare and deploy a `Guaranteed` pod as illustrated in the section [Placing a Pod in the Guaranteed QoS class](#placing-a-pod-in-the-guaranteed-qos-class).
+
+The Memory Manager is a Hint Provider, and it provides topology hints for the Topology Manager which then aligns the requested resources according to these topology hints. It also enforces `cgroups` (i.e. `cpuset.mems`) for pods. The complete flow diagram concerning pod admission and deployment process is illustrated in [Memory Manager KEP: Design Overview][4] and below:
+
+![Memory Manager in the pod admission and deployment process](/images/docs/memory-manager-diagram.svg)
+
+During this process, the Memory Manager updates its internal counters stored in [Node Map and Memory Maps][2] to manage guaranteed memory allocation. 
+
+The Memory Manager updates the Node Map during the startup and runtime as follows.
+
+### Startup
+
+This occurs once a node administrator employs `--reserved-memory` (section [Reserved memory flag](#reserved-memory-flag)). In this case, the Node Map becomes updated to reflect this reservation as illustrated in [Memory Manager KEP: Memory Maps at start-up (with examples)][5].
+
+The administrator must provide `--reserved-memory` flag when `static` policy is configured.
+
+### Runtime
+
+Reference [Memory Manager KEP: Memory Maps at runtime (with examples)][6] illustrates how a successful pod deployment affects the Node Map, and it also relates to how potential Out-of-Memory (OOM) situations are handled further by Kubernetes or operating system.
+
+Important topic in the context of Memory Manager operation is the management of NUMA groups. Each time pod's memory request is in excess of single NUMA node capacity, the Memory Manager attempts to create a group that comprises several NUMA nodes and features extend memory capacity. The problem has been solved as elaborated in [Memory Manager KEP: How to enable the guaranteed memory allocation over many NUMA nodes?][3]. Also, reference [Memory Manager KEP: Simulation - how the Memory Manager works? (by examples)][1] illustrates how the management of groups occurs. 
+
+## Memory Manager configuration
+
+Other Managers should be first pre-configured (section [Pre-configuration](#pre-configuration)). Next, the Memory Manger feature should be enabled (section [Enable the Memory Manager feature](#enable-the-memory-manager-feature)) and be run with `static` policy (section [static policy](#static-policy)). Optionally, some amount of memory can be reserved for system or kubelet processes to increase node stability (section [Reserved memory flag](#reserved-memory-flag)).
+
+### Policies 
+
+Memory Manager supports two policies. You can select a policy via a `kubelet` flag `--memory-manager-policy`.
+
+Two policies can be selected:
+
+* `none` (default)
+* `static`
+
+#### none policy {#policy-none}
+
+This is the default policy and does not affect the memory allocation in any way.
+It acts the same as if the Memory Manager is not present at all.
+
+The `none` policy returns default topology hint. This special hint denotes that Hint Provider (Memory Manger in this case) has no preference for NUMA affinity with any resource.
+
+#### static policy {#policy-static}
+
+In the case of the `Guaranteed` pod, the `static` Memory Manger policy returns topology hints relating to the set of NUMA nodes where the memory can be guaranteed, and reserves the memory through updating the internal [NodeMap][2] object.
+
+In the case of the `BestEffort` or `Burstable` pod, the `static` Memory Manager policy sends back the default topology hint as there is no request for the guaranteed memory, and does not reserve the memory in the internal [NodeMap][2] object.
+
+### Reserved memory flag
+
+The [Node Allocatable](/docs/tasks/administer-cluster/reserve-compute-resources/) mechanism is commonly used by node administrators to reserve K8S node system resources for the kubelet or operating system processes in order to enhance the node stability. A dedicated set of flags can be used for this purpose to set the total amount of reserved memory for a node. This pre-configured value is subsequently utilized to calculate the real amount of node's "allocatable" memory available to pods.
+
+The Kubernetes scheduler incorporates "allocatable" to optimise pod scheduling process. The foregoing flags include `--kube-reserved`, `--system-reserved` and `--eviction-threshold`. The sum of their values will account for the total amount of reserved memory.
+
+
+A new `--reserved-memory` flag was added to Memory Manager to allow for this total reserved memory to be split (by a node administrator) and accordingly reserved across many NUMA nodes. 
+
+The flag specifies a comma-separated list of memory reservations per NUMA node.
+This parameter is only useful in the context of the Memory Manager feature. 
+The Memory Manager will not use this reserved memory for the allocation of container workloads.
+
+For example, if you have a NUMA node "NUMA0" with `10Gi` of memory available, and the `--reserved-memory` was specified to reserve `1Gi` of memory at "NUMA0", the Memory Manager assumes that only `9Gi` is available for containers.
+
+You can omit this parameter, however, you should be aware that the quantity of reserved memory from all NUMA nodes should be equal to the quantity of memory specified by the [Node Allocatable feature](/docs/tasks/administer-cluster/reserve-compute-resources/). If at least one node allocatable parameter is non-zero, you will need to specify `--reserved-memory` for at least one NUMA node. In fact, `eviction-hard` threshold value is equal to `100Mi` by default, so if `static` policy is used, `--reserved-memory` is obligatory.
+
+Also, avoid the following configurations:
+1. duplicates, i.e. the same NUMA node or memory type, but with a different value;
+2. setting zero limit for any of memory types;
+3. NUMA node IDs that do not exist in the machine hardware;
+4. memory type names different than `memory` or `hugepages-<size>` (hugepages of particular `<size>` should also exist).
+
+Syntax: 
+
+`--reserved-memory N:memory-type1=value1,memory-type2=value2,...`
+* `N` (integer) - NUMA node index, e.g. `0`
+* `memory-type` (string) - represents memory type:
+  * `memory` - conventional memory
+  * `hugepages-2Mi` or `hugepages-1Gi` - hugepages 
+* `value` (string) - the quantity of reserved memory, e.g. `1Gi`
+
+Example usage:
+
+`--reserved-memory 0:memory=1Gi,hugepages-1Gi=2Gi`
+
+or
+
+`--reserved-memory 0:memory=1Gi --reserved-memory 1:memory=2Gi`
+
+When you specify values for `--reserved-memory` flag, you must comply with the setting that you prior provided via Node Allocatable Feature flags. That is, the following rule must be obeyed for each memory type: 
+
+`sum(reserved-memory(i)) = kube-reserved + system-reserved + eviction-threshold`, 
+
+where `i` is an index of a NUMA node. 
+
+If you do not follow the formula above, the Memory Manager will show an error on startup.
+
+In other words, the example above illustrates that for the conventional memory (`type=memory`), we reserve `3Gi` in total, i.e.: 
+
+`sum(reserved-memory(i)) = reserved-memory(0) + reserved-memory(1) = 1Gi + 2Gi = 3Gi`
+
+An example of kubelet command-line arguments relevant to the node Allocatable configuration:
+* `--kube-reserved=cpu=500m,memory=50Mi`
+* `--system-reserved=cpu=123m,memory=333Mi`
+* `--eviction-hard=memory.available<500Mi`
+
+{{< note >}} 
+The default hard eviction threshold is 100MiB, and **not** zero. Remember to increase the quantity of memory that you reserve by setting `--reserved-memory` by that hard eviction threshold. Otherwise, the kubelet will not start Memory Manager and display an error. 
+{{< /note >}}
+
+Here is an example of a correct configuration:
+
+```shell
+--feature-gates=MemoryManager=true 
+--kube-reserved=cpu=4,memory=4Gi 
+--system-reserved=cpu=1,memory=1Gi 
+--memory-manager-policy=static 
+--reserved-memory 0:memory=3Gi --reserved-memory 1:memory=2148Mi
+```
+Let us validate the configuration above:
+1. `kube-reserved + system-reserved + eviction-hard(default) = reserved-memory(0) + reserved-memory(1)`
+2. `4GiB + 1GiB + 100MiB = 3GiB + 2148MiB`
+3. `5120MiB + 100MiB = 3072MiB + 2148MiB`
+4. `5220MiB = 5220MiB` (which is correct)
+
+## Placing a Pod in the Guaranteed QoS class
+
+If the selected policy is anything other than `none`, the Memory Manager identifies pods that are in the `Guaranteed` QoS class. The Memory Manager provides specific topology hints to the Topology Manager for each `Guaranteed` pod. For pods in a QoS class other than `Guaranteed`, the Memory Manager provides default topology hints to the Topology Manager.
+
+The following excerpts from pod manifests assign a pod to the `Guaranteed` QoS class.
+
+Pod with integer CPU(s) runs in the `Guaranteed` QoS class, when `requests` are equal to `limits`:
+
+```yaml
+spec:
+  containers:
+  - name: nginx
+    image: nginx
+    resources:
+      limits:
+        memory: "200Mi"
+        cpu: "2"
+        example.com/device: "1"
+      requests:
+        memory: "200Mi"
+        cpu: "2"
+        example.com/device: "1"
+```
+
+Also, a pod sharing CPU(s) runs in the `Guaranteed` QoS class, when `requests` are equal to `limits`.
+
+```yaml
+spec:
+  containers:
+  - name: nginx
+    image: nginx
+    resources:
+      limits:
+        memory: "200Mi"
+        cpu: "300m"
+        example.com/device: "1"
+      requests:
+        memory: "200Mi"
+        cpu: "300m"
+        example.com/device: "1"
+```
+
+Notice that both CPU and memory requests must be specified for a Pod to lend it to Guaranteed QoS class.
+
+## Troubleshooting
+
+The following means can be used to troubleshoot the reason why a pod could not be deployed or became rejected at a node:
+- pod status - indicates topology affinity errors
+- system logs - include valuable information for debugging, e.g., about generated hints
+- state file - the dump of internal state of the Memory Manager (includes [Node Map and Memory Maps][2]) 
+
+### Pod status (TopologyAffinityError) {#TopologyAffinityError}
+
+This error typically occurs in the following situations:
+* a node has not enough resources available to satisfy the pod's request
+* the pod's request is rejected due to particular Topology Manager policy constraints 
+
+The error appears in the status of a pod:
+```shell
+# kubectl get pods
+NAME         READY   STATUS                  RESTARTS   AGE
+guaranteed   0/1     TopologyAffinityError   0          113s
+```
+
+Use `kubectl describe pod <id>` or `kubectl get events` to obtain detailed error message:
+```shell
+Warning  TopologyAffinityError  10m   kubelet, dell8  Resources cannot be allocated with Topology locality
+```
+
+### System logs
+
+Search system logs with respect to a particular pod.
+
+The set of hints that Memory Manager generated for the pod can be found in the logs. 
+Also, the set of hints generated by CPU Manager should be present in the logs.
+
+Topology Manager merges these hints to calculate a single best hint.
+The best hint should be also present in the logs.
+
+The best hint indicates where to allocate all the resources. Topology Manager tests this hint against its current policy, and based on the verdict, it either admits the pod to the node or rejects it.  
+
+Also, search the logs for occurrences associated with the Memory Manager, e.g. to find out information about `cgroups` and `cpuset.mems` updates.
+
+### Examine the memory manager state on a node
+
+Let us first deploy a sample `Guaranteed` pod whose specification is as follows:
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: guaranteed
+spec:
+  containers:
+  - name: guaranteed
+    image: consumer
+    imagePullPolicy: Never
+    resources:
+      limits:
+        cpu: "2"
+        memory: 150Gi
+      requests:
+        cpu: "2"
+        memory: 150Gi
+    command: ["sleep","infinity"]
+``` 
+
+Next, let us log into the node where it was deployed and examine the state file in `/var/lib/kubelet/memory_manager_state`:
+```json
+{
+   "policyName":"static",
+   "machineState":{
+      "0":{
+         "numberOfAssignments":1,
+         "memoryMap":{
+            "hugepages-1Gi":{
+               "total":0,
+               "systemReserved":0,
+               "allocatable":0,
+               "reserved":0,
+               "free":0
+            },
+            "memory":{
+               "total":134987354112,
+               "systemReserved":3221225472,
+               "allocatable":131766128640,
+               "reserved":131766128640,
+               "free":0
+            }
+         },
+         "nodes":[
+            0,
+            1
+         ]
+      },
+      "1":{
+         "numberOfAssignments":1,
+         "memoryMap":{
+            "hugepages-1Gi":{
+               "total":0,
+               "systemReserved":0,
+               "allocatable":0,
+               "reserved":0,
+               "free":0
+            },
+            "memory":{
+               "total":135286722560,
+               "systemReserved":2252341248,
+               "allocatable":133034381312,
+               "reserved":29295144960,
+               "free":103739236352
+            }
+         },
+         "nodes":[
+            0,
+            1
+         ]
+      }
+   },
+   "entries":{
+      "fa9bdd38-6df9-4cf9-aa67-8c4814da37a8":{
+         "guaranteed":[
+            {
+               "numaAffinity":[
+                  0,
+                  1
+               ],
+               "type":"memory",
+               "size":161061273600
+            }
+         ]
+      }
+   },
+   "checksum":4142013182
+}
+```
+
+It can be deduced from the state file that the pod was pinned to both NUMA nodes, i.e.:
+
+```json
+"numaAffinity":[
+   0,
+   1
+],
+``` 
+
+Pinned term means that pod's memory consumption is constrained (through `cgroups` configuration) to these NUMA nodes.
+
+This automatically implies that Memory Manager instantiated a new group that comprises these two NUMA nodes, i.e. `0` and `1` indexed NUMA nodes. 
+
+Notice that the management of groups is handled in a relatively complex manner, and further elaboration is provided in Memory Manager KEP in [this][1] and [this][3] sections.
+
+In order to analyse memory resources available in a group, the corresponding entries from NUMA nodes belonging to the group must be added up.  
+
+For example, the total amount of free "conventional" memory in the group can be computed by adding up the free memory available at every NUMA node in the group, i.e., in the `"memory"` section of NUMA node `0` (`"free":0`) and NUMA node `1` (`"free":103739236352`). So, the total amount of free "conventional" memory in this group is equal to `0 + 103739236352` bytes.  
+
+The line `"systemReserved":3221225472` indicates that the administrator of this node reserved `3221225472` bytes (i.e. `3Gi`) to serve kubelet and system processes at NUMA node `0`, by using `--reserved-memory` flag.
+
+## {{% heading "whatsnext" %}}
+
+- [Memory Manager KEP: Design Overview][4] 
+
+- [Memory Manager KEP: Memory Maps at start-up (with examples)][5]
+
+- [Memory Manager KEP: Memory Maps at runtime (with examples)][6]
+
+- [Memory Manager KEP: Simulation - how the Memory Manager works? (by examples)][1]
+
+- [Memory Manager KEP: The Concept of Node Map and Memory Maps][2]
+
+- [Memory Manager KEP: How to enable the guaranteed memory allocation over many NUMA nodes?][3]
+
+[1]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/1769-memory-manager#simulation---how-the-memory-manager-works-by-examples
+[2]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/1769-memory-manager#the-concept-of-node-map-and-memory-maps
+[3]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/1769-memory-manager#how-to-enable-the-guaranteed-memory-allocation-over-many-numa-nodes
+[4]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/1769-memory-manager#design-overview
+[5]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/1769-memory-manager#memory-maps-at-start-up-with-examples
+[6]: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/1769-memory-manager#memory-maps-at-runtime-with-examples
diff --git a/content/en/docs/tasks/administer-cluster/topology-manager.md b/content/en/docs/tasks/administer-cluster/topology-manager.md
index 7d3f017940..e8d2e7c19d 100644
--- a/content/en/docs/tasks/administer-cluster/topology-manager.md
+++ b/content/en/docs/tasks/administer-cluster/topology-manager.md
@@ -69,6 +69,10 @@ Details on the various `scopes` and `policies` available today can be found belo
 To align CPU resources with other requested resources in a Pod Spec, the CPU Manager should be enabled and proper CPU Manager policy should be configured on a Node. See [control CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/).
 {{< /note >}}
 
+{{< note >}}
+To align memory (and hugepages) resources with other requested resources in a Pod Spec, the Memory Manager should be enabled and proper Memory Manager policy should be configured on a Node. Examine [Memory Manager](/docs/tasks/administer-cluster/memory-manager/) documentation.
+{{< /note >}}
+
 ### Topology Manager Scopes
 
 The Topology Manager can deal with the alignment of resources in a couple of distinct scopes:
@@ -263,8 +267,4 @@ Using this information the Topology Manager calculates the optimal hint for the
 ### Known Limitations
 1. The maximum number of NUMA nodes that Topology Manager allows is 8. With more than 8 NUMA nodes there will be a state explosion when trying to enumerate the possible NUMA affinities and generating their hints.
 
-2. The scheduler is not topology-aware, so it is possible to be scheduled on a node and then fail on the node due to the Topology Manager.
-
-3. The Device Manager and the CPU Manager are the only components to adopt the Topology Manager's HintProvider interface. This means that NUMA alignment can only be achieved for resources managed by the CPU Manager and the Device Manager. Memory or Hugepages are not considered by the Topology Manager for NUMA alignment.
-
-
+2. The scheduler is not topology-aware, so it is possible to be scheduled on a node and then fail on the node due to the Topology Manager.
\ No newline at end of file
diff --git a/static/images/docs/memory-manager-diagram.svg b/static/images/docs/memory-manager-diagram.svg
new file mode 100644
index 0000000000..43832f140c
--- /dev/null
+++ b/static/images/docs/memory-manager-diagram.svg
@@ -0,0 +1,2 @@
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="861px" height="368px" version="1.1" content="&lt;mxfile userAgent=&quot;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36&quot; version=&quot;7.6.8&quot; editor=&quot;www.draw.io&quot; type=&quot;atlas&quot;&gt;&lt;mxAtlasLibraries/&gt;&lt;diagram id=&quot;3ea4a502-58a4-5028-28a5-2721fd70108b&quot; name=&quot;Page-1&quot;&gt;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&lt;/diagram&gt;&lt;/mxfile&gt;" style="background-color: rgb(255, 255, 255);"><defs/><g transform="translate(0.5,0.5)"><rect x="0" y="5" width="120" height="60" rx="9" ry="9" fill="#eeeeee" stroke="#36393d" pointer-events="none"/><g transform="translate(33.5,27.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="52" height="14" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 52px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;"><b><font style="font-size: 14px">Kubelet</font></b></div></div></foreignObject><text x="26" y="13" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><rect x="250" y="5" width="120" height="60" rx="9" ry="9" fill="#eeeeee" stroke="#36393d" pointer-events="none"/><g transform="translate(251.5,19.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="116" height="30" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 116px; white-space: normal; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;"><b><font style="font-size: 14px">Topology Manager</font></b></div></div></foreignObject><text x="58" y="21" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><rect x="450" y="5" width="160" height="60" rx="9" ry="9" fill="#ffff88" stroke="#36393d" pointer-events="none"/><g transform="translate(469.5,19.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="120" height="30" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 120px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;"><b><font style="font-size: 14px">Memory Manager </font></b><div><b><font style="font-size: 14px">(MM)</font></b></div></div></div></foreignObject><text x="60" y="21" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path d="M 700 14 C 700 -4.67 860 -4.67 860 14 L 860 56 C 860 74.67 700 74.67 700 56 Z" fill="#ffff88" stroke="#36393d" stroke-miterlimit="10" pointer-events="none"/><path d="M 700 14 C 700 28 860 28 860 14" fill="none" stroke="#36393d" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(741.5,30.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="76" height="28" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 76px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;"><b><font style="font-size: 14px">Node Map </font></b><div><font style="font-size: 12px">(a part of MM)</font></div></div></div></foreignObject><text x="38" y="20" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path d="M 60 365 L 60 65" fill="none" stroke="#b3b3b3" stroke-width="2" stroke-miterlimit="10" stroke-dasharray="6 6" pointer-events="none"/><path d="M 310 365 L 310 65" fill="none" stroke="#b3b3b3" stroke-width="2" stroke-miterlimit="10" stroke-dasharray="6 6" pointer-events="none"/><path d="M 530 365 L 530 65" fill="none" stroke="#b3b3b3" stroke-width="2" stroke-miterlimit="10" stroke-dasharray="6 6" pointer-events="none"/><path d="M 780 365 L 780 70" fill="none" stroke="#b3b3b3" stroke-width="2" stroke-miterlimit="10" stroke-dasharray="6 6" pointer-events="none"/><path d="M 60 92 L 301.88 92" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><path d="M 308.88 92 L 301.88 95.5 L 301.88 88.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(151.5,76.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="66" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: consolas; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><font style="font-size: 12px">Admit(...)</font></div></div></foreignObject><text x="33" y="12" fill="#000000" text-anchor="middle" font-size="11px" font-family="consolas">[Not supported by viewer]</text></switch></g><path d="M 60 319 L 521.88 319" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><path d="M 528.88 319 L 521.88 322.5 L 521.88 315.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(143.5,303.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="112" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><div style="text-align: left"><span style="font-size: 12px ; font-family: &quot;consolas&quot;">AddContainer(...)</span></div></div></div></foreignObject><text x="56" y="12" fill="#000000" text-anchor="middle" font-size="11px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path d="M 310 104 L 521.88 104" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><path d="M 528.88 104 L 521.88 107.5 L 521.88 100.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(350.5,88.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="139" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><font style="font-size: 12px" face="consolas">GetTopologyHints(...)</font></div></div></foreignObject><text x="70" y="12" fill="#000000" text-anchor="middle" font-size="11px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path d="M 310 277 L 521.88 277" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><path d="M 528.88 277 L 521.88 280.5 L 521.88 273.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(376.5,261.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="86" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><font style="font-size: 12px" face="consolas">Allocate(...)</font></div></div></foreignObject><text x="43" y="12" fill="#000000" text-anchor="middle" font-size="11px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path d="M 530 118 L 771.88 118" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><path d="M 778.88 118 L 771.88 121.5 L 771.88 114.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(560.5,102.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="188" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><font style="font-size: 12px">retrieve the counters (free memory)</font></div></div></foreignObject><text x="94" y="12" fill="#000000" text-anchor="middle" font-size="11px" font-family="Helvetica">&lt;font style="font-size: 12px"&gt;retrieve the counters (free memory)&lt;/font&gt;</text></switch></g><path d="M 530 299 L 771.88 299" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><path d="M 778.88 299 L 771.88 302.5 L 771.88 295.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(569.5,269.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="171" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><font style="font-size: 12px">consider memory pre-allocation </font><div style="text-align: left"><font style="font-size: 12px">in Memory Maps</font></div></div></div></foreignObject><text x="86" y="19" fill="#000000" text-anchor="middle" font-size="11px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path d="M 530 341 L 771.88 341" fill="none" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><path d="M 778.88 341 L 771.88 344.5 L 771.88 337.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(566.5,311.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="177" height="26" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><font style="font-size: 12px">update <i>cgroups  </i>(<b>cpuset.mems</b>) </font><div style="text-align: left"><font style="font-size: 12px">using CRI API<i> </i></font></div></div></div></foreignObject><text x="89" y="19" fill="#000000" text-anchor="middle" font-size="11px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><path d="M 530 239 L 318.12 239" fill="none" stroke="#000000" stroke-miterlimit="10" stroke-dasharray="3 3" pointer-events="none"/><path d="M 311.12 239 L 318.12 235.5 L 318.12 242.5 Z" fill="#000000" stroke="#000000" stroke-miterlimit="10" pointer-events="none"/><g transform="translate(371.5,223.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="97" height="12" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; white-space: nowrap; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;background-color:#ffffff;"><font style="font-size: 12px">Hints (<b><font color="#0000ff">10</font></b>, <font color="#ff0000"><b>11</b></font>, etc.)</font></div></div></foreignObject><text x="49" y="12" fill="#000000" text-anchor="middle" font-size="11px" font-family="Helvetica">[Not supported by viewer]</text></switch></g><rect x="350" y="125" width="400" height="90" rx="13.5" ry="13.5" fill="#eeeeee" stroke="#36393d" pointer-events="none"/><g transform="translate(369.5,130.5)"><switch><foreignObject style="overflow:visible;" pointer-events="all" width="360" height="78" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; vertical-align: top; width: 360px; white-space: nowrap; overflow-wrap: normal; text-align: center;"><div xmlns="http://www.w3.org/1999/xhtml" style="display:inline-block;text-align:inherit;text-decoration:inherit;"><div style="text-align: center"><font style="font-size: 12px">Compute NUMA node affinity for a container:</font></div><div style="text-align: left"><ul><li><font style="font-size: 10px">adequate amount of memory at single NUMA node 0 =&gt; attach hint <b><font color="#0000ff">"10"</font></b></font></li><li><font style="font-size: 10px">adequate amount of memory at multi-NUMA group =&gt; attach hint <b><font color="#ff0000">"11"</font></b></font></li></ul><div style="text-align: center">(and so forth)</div></div></div></div></foreignObject><text x="180" y="45" fill="#000000" text-anchor="middle" font-size="12px" font-family="Helvetica">[Not supported by viewer]</text></switch></g></g></svg>
\ No newline at end of file

From 5f943c1ff40e6013b14ea7f8ee9dc821c1ea7cb4 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Tue, 23 Mar 2021 14:01:49 +0800
Subject: [PATCH 288/788] [zh] Umbrella Sync: task pages for
 kubeadm-certs,kubeadm-upgrade,_index.md

* Sync with english version in 'Fix errors by linkchecker.py in tasks folder (#27172)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../kubeadm/kubeadm-certs.md                  |  5 +--
 .../kubeadm/kubeadm-upgrade.md                |  4 +-
 content/zh/docs/tasks/tools/_index.md         | 38 +++++++++----------
 3 files changed, 23 insertions(+), 24 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 09af5d8b2f..4a2006bfa5 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -328,11 +328,10 @@ controllerManager:
 ### 创建证书签名请求 (CSR)
 
 <!--
-See [Create CertificateSigningRequest](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest) for creating CSRs with the Kubernetes API.
+See [Create CertificateSigningRequest](/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest) for creating CSRs with the Kubernetes API.
 -->
 有关使用 Kubernetes API 创建 CSR 的信息，
-请参见[创建 CertificateSigningRequest](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest)。
-
+请参见[创建 CertificateSigningRequest](/zh/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest)。
 
 <!--
 ## Renew certificates with external CA
diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
index 905d236d6d..c90700aec1 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
@@ -74,13 +74,13 @@ The upgrade workflow at high level is the following:
 <!--
 ### Additional information
 
-- [Draining nodes](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/) before kubelet MINOR version
+- [Draining nodes](/docs/tasks/administer-cluster/safely-drain-node/) before kubelet MINOR version
   upgrades is required. In the case of control plane nodes, they could be running CoreDNS Pods or other critical workloads.
 - All containers are restarted after upgrade, because the container spec hash value is changed.
 -->
 ### 附加信息
 
-- 在对 kubelet 作次版本升级时需要[腾空节点](/zh/docs/tasks/administer-cluster/safely-drain-node/)。
+- 在对 kubelet 作次版本升版时需要[腾空节点](/zh/docs/tasks/administer-cluster/safely-drain-node/)。
   对于控制面节点，其上可能运行着 CoreDNS Pods 或者其它非常重要的负载。
 - 升级后，因为容器规约的哈希值已更改，所有容器都会被重新启动。
 
diff --git a/content/zh/docs/tasks/tools/_index.md b/content/zh/docs/tasks/tools/_index.md
index 244191cc89..028f22fb38 100644
--- a/content/zh/docs/tasks/tools/_index.md
+++ b/content/zh/docs/tasks/tools/_index.md
@@ -15,34 +15,34 @@ no_list: true
 <!--
 ## kubectl
 
-The Kubernetes command-line tool, `kubectl`, allows you to run commands against
-Kubernetes clusters. You can use `kubectl` to deploy applications, inspect and
-manage cluster resources, and view logs.
-
-See [Install and Set Up `kubectl`](/docs/tasks/tools/install-kubectl/) for
-information about how to download and install `kubectl` and set it up for
-accessing your cluster.
+The Kubernetes command-line tool, [kubectl](/docs/reference/kubectl/kubectl/), allows
+you to run commands against Kubernetes clusters.
+You can use kubectl to deploy applications, inspect and manage cluster resources,
+and view logs. For more information including a complete list of kubectl operations, see the
+[`kubectl` reference documentation](/docs/reference/kubectl/).
 -->
 ## kubectl
 
-Kubernetes 命令行工具，`kubectl`，使得你可以对 Kubernetes 集群运行命令。
-你可以使用 `kubectl` 来部署应用、监测和管理集群资源以及查看日志。
+Kubernetes 命令行工具，[kubectl](/docs/reference/kubectl/kubectl/)，使得你可以对 Kubernetes 集群运行命令。
+你可以使用 kubectl 来部署应用、监测和管理集群资源以及查看日志。
 
-关于如何下载和安装 `kubectl` 并配置其访问你的集群，可参阅
-[安装和配置 `kubectl`](/zh/docs/tasks/tools/install-kubectl/)。
+有关更多信息，包括 kubectl 操作的完整列表，请参见[`kubectl` 
+参考文件](/zh/docs/reference/kubectl/)。
 
 <!--
-a class="btn btn-primary" href="/docs/tasks/tools/install-kubectl/" role="button" aria-label="View kubectl Install and Set Up Guide">View kubectl Install and Set Up Guide</a>
+kubectl is installable on a variety of Linux platforms, macOS and Windows. 
+Find your preferred operating system below.
 
-You can also read the
-[`kubectl` reference documentation](/docs/reference/kubectl/).
+- [Install kubectl on Linux](/docs/tasks/tools/install-kubectl-linux)
+- [Install kubectl on macOS](/docs/tasks/tools/install-kubectl-macos)
+- [Install kubectl on Windows](/docs/tasks/tools/install-kubectl-windows)
 -->
-<a class="btn btn-primary" href="/zh/docs/tasks/tools/install-kubectl/"
-  role="button" aria-label="查看 kubectl 安装和配置指南">
-查看 kubectl 安装和配置指南
-</a>
+kubectl 可安装在各种 Linux 平台、 macOS 和 Windows 上。
+在下面找到你喜欢的操作系统。
 
-你也可以阅读 [`kubectl` 参考文档](/zh/docs/reference/kubectl/).
+- [在 Linux 上安装 kubectl](/zh/docs/tasks/tools/install-kubectl-linux)
+- [在 macOS 上安装 kubectl](/zh/docs/tasks/tools/install-kubectl-macos)
+- [在 Windows 上安装 kubectl](/zh/docs/tasks/tools/install-kubectl-windows)
 
 <!--
 ## kind

From cd6159455980f7648a9d203c580b9b316938c5c1 Mon Sep 17 00:00:00 2001
From: Adhityaa Chandrasekar <adtac@google.com>
Date: Fri, 5 Feb 2021 13:38:20 +0000
Subject: [PATCH 289/788] job.md: add section on suspended jobs

Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
---
 .../concepts/workloads/controllers/job.md     | 104 +++++++++++++++++-
 .../feature-gates.md                          |   4 +
 2 files changed, 107 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/controllers/job.md b/content/en/docs/concepts/workloads/controllers/job.md
index d5f505473a..97a865fc22 100644
--- a/content/en/docs/concepts/workloads/controllers/job.md
+++ b/content/en/docs/concepts/workloads/controllers/job.md
@@ -16,7 +16,8 @@ weight: 50
 A Job creates one or more Pods and will continue to retry execution of the Pods until a specified number of them successfully terminate.
 As pods successfully complete, the Job tracks the successful completions.  When a specified number
 of successful completions is reached, the task (ie, Job) is complete.  Deleting a Job will clean up
-the Pods it created.
+the Pods it created. Suspending a Job will delete its active Pods until the Job
+is resumed again.
 
 A simple case is to create one Job object in order to reliably run one Pod to completion.
 The Job object will start a new Pod if the first Pod fails or is deleted (for example
@@ -404,6 +405,107 @@ Here, `W` is the number of work items.
 
 ## Advanced usage
 
+### Suspending a Job
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+{{< note >}}
+Suspending Jobs is available in Kubernetes versions 1.21 and above. You must
+enable the `SuspendJob` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+on the [API server](docs/reference/command-line-tools-reference/kube-apiserver/)
+and the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/)
+in order to use this feature.
+{{< /note >}}
+
+When a Job is created, the Job controller will immediately begin creating Pods
+to satisfy the Job's requirements and will continue to do so until the Job is
+complete. However, you may want to temporarily suspend a Job's execution and
+resume it later. To suspend a Job, you can update the `.spec.suspend` field of
+the Job to true; later, when you want to resume it again, update it to false.
+Creating a Job with `.spec.suspend` set to true will create it in the suspended
+state.
+
+When a Job is resumed from suspension, its `.status.startTime` field will be
+reset to the current time. This means that the `.spec.activeDeadlineSeconds`
+timer will be stopped and reset when a Job is suspended and resumed.
+
+Remember that suspending a Job will delete all active Pods. When the Job is
+suspended, your [Pods will be terminated](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)
+with a SIGTERM signal. The Pod's graceful termination period will be honored and
+your Pod must handle this signal in this period. This may involve saving
+progress for later or undoing changes. Pods terminated this way will not count
+towards the Job's `completions` count.
+
+An example Job definition in the suspended state can be like so:
+
+```shell
+kubectl get job myjob -o yaml
+```
+
+```yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: myjob
+spec:
+  suspend: true
+  parallelism: 1
+  completions: 5
+  template:
+    spec:
+      ...
+```
+
+The Job's status can be used to determine if a Job is suspended or has been
+suspended in the past:
+
+```shell
+kubectl get jobs/myjob -o yaml
+```
+
+```json
+apiVersion: batch/v1
+kind: Job
+# .metadata and .spec omitted
+status:
+  conditions:
+  - lastProbeTime: "2021-02-05T13:14:33Z"
+    lastTransitionTime: "2021-02-05T13:14:33Z"
+    status: "True"
+    type: Suspended
+  startTime: "2021-02-05T13:13:48Z"
+```
+
+The Job condition of type "Suspended" with status "True" means the Job is
+suspended; the `lastTransitionTime` field can be used to determine how long the
+Job has been suspended for. If the status of that condition is "False", then the
+Job was previously suspended and is now running. If such a condition does not
+exist in the Job's status, the Job has never been stopped.
+
+Events are also created when the Job is suspended and resumed:
+
+```shell
+kubectl describe jobs/myjob
+```
+
+```
+Name:           myjob
+...
+Events:
+  Type    Reason            Age   From            Message
+  ----    ------            ----  ----            -------
+  Normal  SuccessfulCreate  12m   job-controller  Created pod: myjob-hlrpl
+  Normal  SuccessfulDelete  11m   job-controller  Deleted pod: myjob-hlrpl
+  Normal  Suspended         11m   job-controller  Job suspended
+  Normal  SuccessfulCreate  3s    job-controller  Created pod: myjob-jvb44
+  Normal  Resumed           3s    job-controller  Job resumed
+```
+
+The last four events, particularly the "Suspended" and "Resumed" events, are
+directly a result of toggling the `.spec.suspend` field. In the time between
+these two events, we see that no Pods were created, but Pod creation restarted
+as soon as the Job was resumed.
+
 ### Specifying your own Pod selector
 
 Normally, when you create a Job object, you do not specify `.spec.selector`.
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2c181ca331..e03c973e1c 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -170,6 +170,7 @@ different Kubernetes components.
 | `StorageVersionAPI` | `false` | Alpha | 1.20 | |
 | `StorageVersionHash` | `false` | Alpha | 1.14 | 1.14 |
 | `StorageVersionHash` | `true` | Beta | 1.15 | |
+| `SuspendJob` | `false` | Alpha | 1.21 | |
 | `Sysctls` | `true` | Beta | 1.11 | |
 | `TTLAfterFinished` | `false` | Alpha | 1.12 | |
 | `TopologyManager` | `false` | Alpha | 1.16 | 1.17 |
@@ -775,6 +776,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
   options can be specified to ensure that the specified number of process IDs
   will be reserved for the system as a whole and for Kubernetes system daemons
   respectively.
+- `SuspendJob`: Enable support to suspend and resume Jobs. See
+  [the Jobs docs](/docs/concepts/workloads/controllers/job/) for
+  more details.
 - `Sysctls`: Enable support for namespaced kernel parameters (sysctls) that can be
   set for each pod. See
   [sysctls](/docs/tasks/administer-cluster/sysctl-cluster/) for more details.

From fbdd3880057472f36d19d8d9ea9514a631701e49 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sun, 21 Mar 2021 12:33:09 +0800
Subject: [PATCH 290/788] remove minikube instalasi guide and add index untuk
 tools. remove minikube installation guide and add index untuk tools.

---
 content/id/docs/tasks/tools/_index.md         |  62 +++++
 .../id/docs/tasks/tools/install-minikube.md   | 254 ------------------
 static/_redirects                             |   1 +
 3 files changed, 63 insertions(+), 254 deletions(-)
 delete mode 100644 content/id/docs/tasks/tools/install-minikube.md

diff --git a/content/id/docs/tasks/tools/_index.md b/content/id/docs/tasks/tools/_index.md
index 9bbd67d8fb..8d9056c50f 100755
--- a/content/id/docs/tasks/tools/_index.md
+++ b/content/id/docs/tasks/tools/_index.md
@@ -1,5 +1,67 @@
 ---
 title: "Menginstal Peralatan"
+description: Peralatan untuk melakukan instalasi Kubernetes dalam komputer kamu.
 weight: 10
+no_list: true
 ---
 
+## kubectl
+
+<!-- overview -->
+
+Perangkat baris perintah Kubernetes, [kubectl](/id/docs/reference/kubectl/kubectl/), 
+memungkinkan kamu untuk menjalankan perintah pada klaster Kubernetes.
+Kamu dapat menggunakan kubectl untuk menerapkan aplikasi, memeriksa dan mengelola sumber daya klaster,
+dan melihat *log* (catatan). Untuk informasi lebih lanjut termasuk daftar lengkap operasi kubectl, lihat
+[referensi dokumentasi `kubectl`](/id/docs/reference/kubectl/).
+
+kubectl dapat diinstal pada berbagai platform Linux, macOS dan Windows.
+Pilihlah sistem operasi pilihan kamu di bawah ini.
+
+- [Instalasi kubectl pada Linux](/en/docs/tasks/tools/install-kubectl-linux)
+- [Instalasi kubectl pada macOS](/en/docs/tasks/tools/install-kubectl-macos)
+- [Instalasi kubectl pada Windows](/en/docs/tasks/tools/install-kubectl-windows)
+
+## kind
+
+[`kind`](https://kind.sigs.k8s.io/docs/) memberikan kamu kemampuan untuk
+menjalankan Kubernetes pada komputer lokal kamu. Perangkat ini membutuhkan
+[Docker](https://docs.docker.com/get-docker/) yang sudah diinstal dan
+terkonfigurasi.
+
+Halaman [Memulai Cepat](https://kind.sigs.k8s.io/docs/user/quick-start/) `kind`
+memperlihatkan kepada kamu tentang apa yang perlu kamu lakukan untuk `kind`
+berjalan dan bekerja.
+
+<a class="btn btn-primary" href="https://kind.sigs.k8s.io/docs/user/quick-start/" role="button" aria-label="Melihat Memulai Cepat Kind">Melihat Memulai Cepat Kind</a>
+
+## minikube
+
+Seperti halnya dengan `kind`, [`minikube`](https://minikube.sigs.k8s.io/) 
+merupakan perangkat yang memungkinkan kamu untuk menjalankan Kubernetes
+secara lokal. `minikube` menjalankan sebuah klaster Kubernetes dengan
+satu node saja dalam komputer pribadi (termasuk Windows, macOS dan Linux)
+sehingga kamu dapat mencoba Kubernetes atau untuk pekerjaan pengembangan
+sehari-hari.
+
+Kamu bisa mengikuti petunjuk resmi
+[Memulai!](https://minikube.sigs.k8s.io/docs/start/) 
+`minikube` jika kamu ingin fokus agar perangkat ini terinstal.
+
+<a class="btn btn-primary" href="https://minikube.sigs.k8s.io/docs/start/" role="button" aria-label="Lihat Panduan Memulai! Minikube">Lihat Panduan Memulai! Minikube</a>
+
+Setelah kamu memiliki `minikube` yang bekerja, kamu bisa menggunakannya
+untuk  [menjalankan aplikasi contoh](/id/docs/tutorials/hello-minikube/).
+
+## kubeadm
+
+Kamu dapat menggunakan {{< glossary_tooltip term_id="kubeadm" text="kubeadm" >}} 
+untuk membuat dan mengatur klaster Kubernetes.
+`kubeadm` menjalankan langkah-langkah yang diperlukan untuk mendapatkan klaster
+dengan kelaikan dan keamanan minimum, aktif dan berjalan dengan cara yang mudah
+bagi pengguna.
+
+[Instalasi kubeadm](/id/docs/setup/production-environment/tools/kubeadm/install-kubeadm/) memperlihatkan tentang bagaimana melakukan instalasi kubeadm.
+Setelah terinstal, kamu dapat menggunakannya untuk [membuat klaster](/id/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/).
+
+<a class="btn btn-primary" href="/docs/setup/production-environment/tools/kubeadm/install-kubeadm/" role="button" aria-label="Lihat panduan instalasi kubeadm">Lihat panduan instalasi kubeadm</a>
diff --git a/content/id/docs/tasks/tools/install-minikube.md b/content/id/docs/tasks/tools/install-minikube.md
deleted file mode 100644
index b674c52b6d..0000000000
--- a/content/id/docs/tasks/tools/install-minikube.md
+++ /dev/null
@@ -1,254 +0,0 @@
----
-title: Menginstal Minikube
-content_type: task
-weight: 20
-card:
-  name: tasks
-  weight: 10
----
-
-<!-- overview -->
-
-Halaman ini menunjukkan cara instalasi [Minikube](/id/docs/tutorials/hello-minikube), sebuah alat untuk menjalankan sebuah klaster Kubernetes dengan satu Node pada mesin virtual yang ada di komputer kamu.
-
-
-
-## {{% heading "prerequisites" %}}
-
-
-{{< tabs name="minikube_before_you_begin" >}}
-{{% tab name="Linux" %}}
-Untuk mengecek jika virtualisasi didukung pada Linux, jalankan perintah berikut dan pastikan keluarannya tidak kosong:
-```
-grep -E --color 'vmx|svm' /proc/cpuinfo
-```
-{{% /tab %}}
-
-{{% tab name="macOS" %}}
-Untuk mengecek jika virtualisasi didukung di macOS, jalankan perintah berikut di terminal kamu.
-```
-sysctl -a | grep -E --color 'machdep.cpu.features|VMX'
-```
-Jika kamu melihat `VMX` pada hasil keluaran (seharusnya berwarna), artinya fitur VT-x sudah diaktifkan di mesin kamu.
-{{% /tab %}}
-
-{{% tab name="Windows" %}}
-Untuk mengecek jika virtualisasi didukung di Windows 8 ke atas, jalankan perintah berikut di terminal Windows atau _command prompt_ kamu.
-
-```
-systeminfo
-```
-Jika kamu melihat keluaran berikut, maka virtualisasi didukung di Windows kamu.
-```
-Hyper-V Requirements:     VM Monitor Mode Extensions: Yes
-                          Virtualization Enabled In Firmware: Yes
-                          Second Level Address Translation: Yes
-                          Data Execution Prevention Available: Yes
-```
-Jika kamu melihat keluaran berikut, sistem kamu sudah memiliki sebuah Hypervisor yang terinstal dan kamu bisa melewati langkah berikutnya.
-```
-Hyper-V Requirements:     A hypervisor has been detected. Features required for Hyper-V will not be displayed.
-```
-
-
-{{% /tab %}}
-{{< /tabs >}}
-
-
-
-<!-- steps -->
-
-## Menginstal minikube
-
-{{< tabs name="tab_with_md" >}}
-{{% tab name="Linux" %}}
-
-### Instalasi kubectl
-
-Pastikan kamu sudah menginstal kubectl. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-linux).
-
-### Menginstal sebuah Hypervisor
-
-Jika kamu belum menginstal sebuah Hypervisor, silakan instal salah satu dari:
-
-• [KVM](https://www.linux-kvm.org/), yang juga menggunakan QEMU
-
-• [VirtualBox](https://www.virtualbox.org/wiki/Downloads)
-
-Minikube juga mendukung sebuah opsi `--driver=none` untuk menjalankan komponen-komponen Kubernetes pada _host_, bukan di dalam VM. Untuk menggunakan _driver_ ini maka diperlukan [Docker](https://www.docker.com/products/docker-desktop) dan sebuah lingkungan Linux, bukan sebuah hypervisor.
-
-Jika kamu menggunakan _driver_ `none` pada Debian atau turunannya, gunakan  paket (_package_) `.deb` untuk Docker daripada menggunakan paket _snap_-nya, karena paket _snap_ tidak berfungsi dengan Minikube.
-Kamu bisa mengunduh paket `.deb` dari [Docker](https://www.docker.com/products/docker-desktop).
-
-{{< caution >}}
-*Driver* VM `none` dapat menyebabkan masalah pada keamanan dan kehilangan data. Sebelum menggunakan opsi `--driver=none`, periksa [dokumentasi ini](https://minikube.sigs.k8s.io/docs/reference/drivers/none/) untuk informasi lebih lanjut.
-{{< /caution >}}
-
-Minikube juga mendukung opsi `vm-driver=podman` yang mirip dengan _driver_ Docker. Podman yang berjalan dengan hak istimewa _superuser_ (pengguna _root_) adalah cara terbaik untuk memastikan kontainer-kontainer kamu memiliki akses penuh ke semua fitur yang ada pada sistem kamu.
-
-{{< caution >}}
-_Driver_ `podman` memerlukan kontainer yang berjalan dengan akses _root_ karena akun pengguna biasa tidak memiliki akses penuh ke semua fitur sistem operasi yang mungkin diperlukan oleh kontainer.
-{{< /caution >}}
-
-### Menginstal Minikube menggunakan sebuah paket
-
-Tersedia paket uji coba untuk Minikube, kamu bisa menemukan paket untuk Linux (AMD64) di laman [rilisnya](https://github.com/kubernetes/minikube/releases) Minikube di GitHub.
-
-Gunakan alat instalasi paket pada distribusi Linux kamu untuk menginstal paket yang sesuai.
-
-### Menginstal Minikube melalui pengunduhan langsung
-
-Jika kamu tidak menginstal melalui sebuah paket, kamu bisa mengunduh sebuah _stand-alone binary_ dan menggunakannya.
-
-
-```shell
-curl -Lo minikube https://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64 \
-  && chmod +x minikube
-```
-
-Berikut adalah cara mudah untuk menambahkan program Minikube ke _path_ kamu.
-
-```shell
-sudo mkdir -p /usr/local/bin/
-sudo install minikube /usr/local/bin/
-```
-
-### Menginstal Minikube menggunakan Homebrew
-
-Sebagai alternatif, kamu bisa menginstal Minikube menggunakan Linux [Homebrew](https://docs.brew.sh/Homebrew-on-Linux):
-
-```shell
-brew install minikube
-```
-
-{{% /tab %}}
-{{% tab name="macOS" %}}
-### Instalasi kubectl
-
-Pastikan kamu sudah menginstal kubectl. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-macos).
-
-### Instalasi sebuah Hypervisor
-
-Jika kamu belum menginstal sebuah Hypervisor, silakan instal salah satu  dari:
-
-• [HyperKit](https://github.com/moby/hyperkit)
-
-• [VirtualBox](https://www.virtualbox.org/wiki/Downloads)
-
-• [VMware Fusion](https://www.vmware.com/products/fusion)
-
-### Instalasi Minikube
-Cara paling mudah untuk menginstal Minikube pada macOS adalah menggunakan [Homebrew](https://brew.sh):
-
-```shell
-brew install minikube
-```
-
-Kamu juga bisa menginstalnya dengan mengunduh _stand-alone binary_-nya:
-
-```shell
-curl -Lo minikube https://storage.googleapis.com/minikube/releases/latest/minikube-darwin-amd64 \
-  && chmod +x minikube
-```
-
-Berikut adalah cara mudah untuk menambahkan program Minikube ke _path_ kamu.
-
-```shell
-sudo mv minikube /usr/local/bin
-```
-
-{{% /tab %}}
-{{% tab name="Windows" %}}
-### Instalasi kubectl
-
-Pastikan kamu sudah menginstal kubectl. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-windows).
-
-### Menginstal sebuah Hypervisor
-
-Jika kamu belum menginstal sebuah Hypervisor, silakan instal salah satu dari:
-
-• [Hyper-V](https://msdn.microsoft.com/en-us/virtualization/hyperv_on_windows/quick_start/walkthrough_install)
-
-• [VirtualBox](https://www.virtualbox.org/wiki/Downloads)
-
-{{< note >}}
-Hyper-V hanya dapat berjalan pada tiga versi dari Windows 10: Windows 10 Enterprise, Windows 10 Professional, dan Windows 10 Education.
-{{< /note >}}
-
-### Menginstal Minikube menggunakan Chocolatey
-
-Cara paling mudah untuk menginstal Minikube pada Windows adalah menggunakan [Chocolatey](https://chocolatey.org/) (jalankan sebagai administrator):
-
-```shell
-choco install minikube
-```
-
-Setelah Minikube telah selesai diinstal, tutup sesi CLI dan hidupkan ulang CLI-nya. Minikube akan ditambahkan ke _path_ kamu secara otomatis.
-
-### Menginstal Minikube menggunakan sebuah program penginstal
-
-Untuk menginstal Minikube secara manual pada Windows menggunakan [Windows Installer](https://docs.microsoft.com/en-us/windows/desktop/msi/windows-installer-portal), unduh [`minikube-installer.exe`](https://github.com/kubernetes/minikube/releases/latest/download/minikube-installer.exe) dan jalankan program penginstal tersebut.
-
-### Menginstal Minikube melalui pengunduhan langsung
-
-Untuk menginstal Minikube secara manual pada Windows, unduh [`minikube-windows-amd64`](https://github.com/kubernetes/minikube/releases/latest), ubah nama menjadi `minikube.exe`, dan tambahkan ke _path_ kamu.
-
-{{% /tab %}}
-{{< /tabs >}}
-
-
-## Memastikan instalasi
-
-Untuk memastikan keberhasilan kedua instalasi hypervisor dan Minikube, kamu bisa menjalankan perintah berikut untuk memulai sebuah klaster Kubernetes lokal:
-{{< note >}}
-
-Untuk pengaturan  `--driver` dengan `minikube start`, masukkan nama hypervisor `<driver_name>` yang kamu instal dengan huruf kecil seperti yang ditunjukan dibawah. Daftar lengkap nilai `--driver` tersedia di [dokumentasi menentukan *driver* VM](/docs/setup/learning-environment/minikube/#specifying-the-vm-driver).
-
-{{< /note >}}
-
-```shell
-minikube start --driver=<driver_name>
-```
-
-Setelah `minikube start` selesai, jalankan perintah di bawah untuk mengecek status klaster:
-
-```shell
-minikube status
-```
-
-Jika klasternya berjalan, keluaran dari `minikube status` akan mirip seperti ini:
-
-```
-host: Running
-kubelet: Running
-apiserver: Running
-kubeconfig: Configured
-```
-
-Setelah kamu memastikan bahwa Minikube berjalan sesuai dengan hypervisor yang telah kamu pilih, kamu dapat melanjutkan untuk menggunakan Minikube atau menghentikan klaster kamu. Untuk menghentikan klaster, jalankan:
-
-```shell
-minikube stop
-```
-
-## Membersihkan *state* lokal {#cleanup-local-state}
-
-Jika sebelumnya kamu pernah menginstal Minikube, dan menjalankan:
-```shell
-minikube start
-```
-
-dan `minikube start` memberikan pesan kesalahan:
-```
-machine does not exist
-```
-
-maka kamu perlu membersihkan _state_ lokal Minikube:
-```shell
-minikube delete
-```
-
-## {{% heading "whatsnext" %}}
-
-
-* [Menjalanakan Kubernetes secara lokal dengan Minikube](/docs/setup/learning-environment/minikube/)
diff --git a/static/_redirects b/static/_redirects
index 4186c547b2..8ff4ed3722 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -286,6 +286,7 @@
 /docs/tasks/run-application/update-api-object-kubectl-patch/    /docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/ 301
 /docs/tasks/stateful-sets/deleting-pods/     /docs/tasks/run-application/force-delete-stateful-set-pod/ 301
 /ja/docs/tasks/tools/install-minikube/     https://minikube.sigs.k8s.io/docs/start/ 302
+/id/docs/tasks/tools/install-minikube/     https://minikube.sigs.k8s.io/docs/start/ 302
 /docs/tasks/troubleshoot/debug-init-containers/     /docs/tasks/debug-application-cluster/debug-init-containers/ 301
 /docs/tasks/web-ui-dashboard/     /docs/tasks/access-application-cluster/web-ui-dashboard/ 301
 

From 290a652991534e83d12b27ab679bc1ecff95ddd2 Mon Sep 17 00:00:00 2001
From: Abdullah Gharaibeh <ahg@google.com>
Date: Wed, 10 Mar 2021 14:31:32 -0500
Subject: [PATCH 291/788] Docs for pod deletion cost feature

---
 .../workloads/controllers/replicaset.md       | 30 +++++++++++++++++++
 .../feature-gates.md                          |  3 ++
 .../reference/labels-annotations-taints.md    | 10 +++++++
 3 files changed, 43 insertions(+)

diff --git a/content/en/docs/concepts/workloads/controllers/replicaset.md b/content/en/docs/concepts/workloads/controllers/replicaset.md
index cade83afa5..4c75b20234 100644
--- a/content/en/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/en/docs/concepts/workloads/controllers/replicaset.md
@@ -321,6 +321,36 @@ prioritize scaling down pods based on the following general algorithm:
     
 If all of the above match, then selection is random.
 
+### Pod deletion cost 
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+Using the [`controller.kubernetes.io/pod-deletion-cost`](/docs/reference/command-line-tools-reference/labels-annotations-taints/#pod-deletion-cost) 
+annotation, users can set a preference regarding which pods to remove first when downscaling a ReplicaSet.
+
+The annotation should be set on the pod, the range is [-2147483647, 2147483647]. It represents the cost of
+deleting a pod compared to other pods belonging to the same ReplicaSet. Pods with lower deletion
+cost are preferred to be deleted before pods with higher deletion cost. 
+
+The implicit value for this annotation for pods that don't set it is 0; negative values are permitted.
+Invalid values will be rejected by the API server.
+
+This feature is alpha and disabled by default. You can enable it by setting the
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+`PodDeletionCost` in both kube-apiserver and kube-controller-manager.
+
+{{< note >}}
+- This is honored on a best-effort basis, so it does not offer any guarantees on pod deletion order.
+- Users should avoid updating the annotation frequently, such as updating it based on a metric value,
+  because doing so will generate a significant number of pod updates on the apiserver.
+{{< /note >}}
+
+#### Example Use Case
+The different pods of an application could have different utilization levels. On scale down, the application 
+may prefer to remove the pods with lower utilization. To avoid frequently updating the pods, the application
+should update `controller.kubernetes.io/pod-deletion-cost` once before issuing a scale down (setting the 
+annotation to a value proportional to pod utilization level). This works if the application itself controls
+the down scaling; for example, the driver pod of a Spark deployment.
+
 ### ReplicaSet as a Horizontal Pod Autoscaler Target
 
 A ReplicaSet can also be a target for
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2c181ca331..180a9aab7f 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -141,6 +141,7 @@ different Kubernetes components.
 | `NodeDisruptionExclusion` | `true` | Beta | 1.19 | |
 | `NonPreemptingPriority` | `false` | Alpha | 1.15 | 1.18 |
 | `NonPreemptingPriority` | `true` | Beta | 1.19 | |
+| `PodDeletionCost` | `false` | Alpha | 1.21 | |
 | `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 |
 | `PodDisruptionBudget` | `true` | Beta | 1.5 | |
 | `PodAffinityNamespaceSelector` | `false` | Alpha | 1.21 | |
@@ -682,6 +683,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `NonPreemptingPriority`: Enable `preemptionPolicy` field for PriorityClass and Pod.
 - `PVCProtection`: Enable the prevention of a PersistentVolumeClaim (PVC) from
   being deleted when it is still used by any Pod.
+- `PodDeletionCost`: Enable the [Pod Deletion Cost](/docs/content/en/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)
+   feature which allows users to influence ReplicaSet downscaling order.
 - `PersistentLocalVolumes`: Enable the usage of `local` volume type in Pods.
   Pod affinity has to be specified if requesting a `local` volume.
 - `PodDisruptionBudget`: Enable the [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) feature.
diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 0399bd561e..a4a9a78d5a 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -56,6 +56,16 @@ The Kubelet populates this label with the hostname. Note that the hostname can b
 
 This label is also used as part of the topology hierarchy.  See [topology.kubernetes.io/zone](#topologykubernetesiozone) for more information.
 
+
+## controller.kubernetes.io/pod-deletion-cost {#pod-deletion-cost}
+
+Example: `controller.kubernetes.io/pod-deletion-cost=10`
+
+Used on: Pod
+
+This annotation is used to set [Pod Deletion Cost](/docs/content/en/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)
+which allows users to influence ReplicaSet downscaling order. The annotation parses into an `int32` type.
+
 ## beta.kubernetes.io/instance-type (deprecated)
 
 {{< note >}} Starting in v1.17, this label is deprecated in favor of [node.kubernetes.io/instance-type](#nodekubernetesioinstance-type). {{< /note >}}

From 40210057451cbf7f22b715bd1eb1dacfd97c7280 Mon Sep 17 00:00:00 2001
From: Patrick Ohly <patrick.ohly@intel.com>
Date: Tue, 2 Mar 2021 14:58:24 +0100
Subject: [PATCH 292/788] generic ephemeral volumes: beta

The feature is scheduled for becoming beta in 1.21.

In addition, the commit addresses some of the review feedback.
---
 .../concepts/storage/ephemeral-volumes.md     | 22 ++++++++++++-------
 .../feature-gates.md                          |  3 ++-
 2 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/content/en/docs/concepts/storage/ephemeral-volumes.md b/content/en/docs/concepts/storage/ephemeral-volumes.md
index 9b0b9464f5..dc715d7c46 100644
--- a/content/en/docs/concepts/storage/ephemeral-volumes.md
+++ b/content/en/docs/concepts/storage/ephemeral-volumes.md
@@ -131,12 +131,16 @@ As a cluster administrator, you can use a [PodSecurityPolicy](/docs/concepts/pol
 ### Generic ephemeral volumes
 
 {{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 This feature requires the `GenericEphemeralVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be
-enabled. Because this is an alpha feature, it is disabled by default.
+enabled. Because this is a beta feature, it is enabled by default.
+
+Generic ephemeral volumes are similar to `emptyDir` volumes in the
+sense that they provide a per-pod directory for scratch data that is
+usually empty after provisioning. But they may also have additional
+features:
 
-Generic ephemeral volumes are similar to `emptyDir` volumes, just more
-flexible:
 - Storage can be local or network-attached.
 - Volumes can have a fixed size that Pods are not able to exceed.
 - Volumes may have some initial data, depending on the driver and
@@ -242,14 +246,16 @@ PVCs indirectly if they can create Pods, even if they do not have
 permission to create PVCs directly. Cluster administrators must be
 aware of this. If this does not fit their security model, they have
 two choices:
-- Explicitly disable the feature through the feature gate, to avoid
-  being surprised when some future Kubernetes version enables it
-  by default.
+- Explicitly disable the feature through the feature gate.
 - Use a [Pod Security
   Policy](/docs/concepts/policy/pod-security-policy/) where the
-  `volumes` list does not contain the `ephemeral` volume type.
+  `volumes` list does not contain the `ephemeral` volume type
+  (deprecated in Kubernetes 1.21).
+- Use an [admission webhook](/docs/reference/access-authn-authz/extensible-admission-controllers/)
+  which rejects objects like Pods that have a generic ephemeral
+  volume.
 
-The normal namespace quota for PVCs in a namespace still applies, so
+The normal [namespace quota for PVCs](/docs/concepts/policy/resource-quotas/#storage-resource-quota) still applies, so
 even if users are allowed to use this new mechanism, they cannot use
 it to circumvent other policies.
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2e9db5fce0..5ef4d6d8d4 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -117,7 +117,8 @@ different Kubernetes components.
 | `ExpandPersistentVolumes` | `false` | Alpha | 1.8 | 1.10 |
 | `ExpandPersistentVolumes` | `true` | Beta | 1.11 | |
 | `ExperimentalHostUserNamespaceDefaulting` | `false` | Beta | 1.5 | |
-| `GenericEphemeralVolume` | `false` | Alpha | 1.19 | |
+| `GenericEphemeralVolume` | `false` | Alpha | 1.19 | 1.20 |
+| `GenericEphemeralVolume` | `true` | Beta | 1.21 | |
 | `GracefulNodeShutdown` | `false` | Alpha | 1.20 | |
 | `HPAContainerMetrics` | `false` | Alpha | 1.20 | |
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |

From a198e2de6f95b9ee47bab5af60ea1dab1e4c361c Mon Sep 17 00:00:00 2001
From: "Lubomir I. Ivanov" <lubomirivanov@vmware.com>
Date: Wed, 24 Mar 2021 01:08:14 +0200
Subject: [PATCH 293/788] kubeadm: remove page about self-hosting support

The command "kubeadm alpha self-hosting" was removed in 1.21.
Remove the page that talks about self-hosting support in kubeadm.
---
 .../tools/kubeadm/self-hosting.md             | 68 -------------------
 1 file changed, 68 deletions(-)
 delete mode 100644 content/en/docs/setup/production-environment/tools/kubeadm/self-hosting.md

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/self-hosting.md b/content/en/docs/setup/production-environment/tools/kubeadm/self-hosting.md
deleted file mode 100644
index d860a88bdd..0000000000
--- a/content/en/docs/setup/production-environment/tools/kubeadm/self-hosting.md
+++ /dev/null
@@ -1,68 +0,0 @@
----
-reviewers:
-- sig-cluster-lifecycle
-title: Configuring your kubernetes cluster to self-host the control plane
-content_type: concept
-weight: 100
----
-
-<!-- overview -->
-
-### Self-hosting the Kubernetes control plane {#self-hosting}
-
-kubeadm allows you to experimentally create a _self-hosted_ Kubernetes control
-plane. This means that key components such as the API server, controller
-manager, and scheduler run as [DaemonSet pods](/docs/concepts/workloads/controllers/daemonset/)
-configured via the Kubernetes API instead of [static pods](/docs/tasks/configure-pod-container/static-pod/)
-configured in the kubelet via static files.
-
-To create a self-hosted cluster see the
-[kubeadm alpha selfhosting pivot](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/#cmd-selfhosting) command.
-
-<!-- body -->
-
-#### Caveats
-
-{{< caution >}}
-This feature pivots your cluster into an unsupported state, rendering kubeadm unable
-to manage you cluster any longer. This includes `kubeadm upgrade`.
-{{< /caution >}}
-
-1. Self-hosting in 1.8 and later has some important limitations. In particular, a
-  self-hosted cluster _cannot recover from a reboot of the control-plane node_
-  without manual intervention.
-
-1. By default, self-hosted control plane Pods rely on credentials loaded from
-  [`hostPath`](/docs/concepts/storage/volumes/#hostpath)
-  volumes. Except for initial creation, these credentials are not managed by
-  kubeadm.
-
-1. The self-hosted portion of the control plane does not include etcd,
-  which still runs as a static Pod.
-
-#### Process
-
-The self-hosting bootstrap process is documented in the [kubeadm design
-document](https://github.com/kubernetes/kubeadm/blob/master/docs/design/design_v1.9.md#optional-self-hosting).
-
-In summary, `kubeadm alpha selfhosting` works as follows:
-
-  1. Waits for this bootstrap static control plane to be running and
-    healthy. This is identical to the `kubeadm init` process without self-hosting.
-
-  1. Uses the static control plane Pod manifests to construct a set of
-    DaemonSet manifests that will run the self-hosted control plane.
-    It also modifies these manifests where necessary, for example adding new volumes
-    for secrets.
-
-  1. Creates DaemonSets in the `kube-system` namespace and waits for the
-     resulting Pods to be running.
-
-  1. Once self-hosted Pods are operational, their associated static Pods are deleted
-     and kubeadm moves on to install the next component. This triggers kubelet to
-     stop those static Pods.
-
-  1. When the original static control plane stops, the new self-hosted control
-    plane is able to bind to listening ports and become active.
-
-

From 11365d493b5a031e7acd6ef8761bf71ef1fa60ae Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Wed, 24 Mar 2021 10:09:29 +0800
Subject: [PATCH 294/788] [zh] Sync tasks pages for
 run-replicated-stateful-application.md

* Sync with english version in 'Avoid using namespace that is a reserved object (#27128)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../run-replicated-stateful-application.md        | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md b/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md
index 05503836ab..e70c1075ac 100644
--- a/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md
+++ b/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md
@@ -55,6 +55,7 @@ on general patterns for running stateful applications in Kubernetes.
   [ConfigMaps](/docs/tasks/configure-pod-container/configure-pod-configmap/).
 * Some familiarity with MySQL helps, but this tutorial aims to present
   general patterns that should be useful for other systems.
+* You are using the default namespace or another namespace that does not contain any conflicting objects.
 -->
 * 本教程假定你熟悉
   [PersistentVolumes](/zh/docs/concepts/storage/persistent-volumes/)
@@ -63,6 +64,7 @@ on general patterns for running stateful applications in Kubernetes.
   [服务](/zh/docs/concepts/services-networking/service/) 与
   [ConfigMap](/zh/docs/tasks/configure-pod-container/configure-pod-configmap/).
 * 熟悉 MySQL 会有所帮助，但是本教程旨在介绍对其他系统应该有用的常规模式。
+* 您正在使用默认命名空间或不包含任何冲突对象的另一个命名空间。
 
 ## {{% heading "objectives" %}}
 
@@ -280,21 +282,20 @@ properties.
 The script in the `init-mysql` container also applies either `primary.cnf` or
 `replica.cnf` from the ConfigMap by copying the contents into `conf.d`.
 Because the example topology consists of a single primary MySQL server and any number of
-replicas, the script simply assigns ordinal `0` to be the primary server, and everyone
+replicas, the script assigns ordinal `0` to be the primary server, and everyone
 else to be replicas. 
 
 Combined with the StatefulSet controller's
-[deployment order guarantee](/docs/concepts/workloads/controllers/statefulset/#deployment-and-scaling-guarantees/),
+[deployment order guarantee](/docs/concepts/workloads/controllers/statefulset/#deployment-and-scaling-guarantees),
 this ensures the primary MySQL server is Ready before creating replicas, so they can begin
 replicating.
 -->
-通过将内容复制到 conf.d 中，`init-mysql` 容器中的脚本也可以应用 ConfigMap 中的
-`primary.cnf` 或 `replica.cnf`。
-由于示例部署结构由单个 MySQL 主节点和任意数量的副本节点组成，因此脚本仅将序数
-`0` 指定为主节点，而将其他所有节点指定为副本节点。
+通过将内容复制到 conf.d 中，`init-mysql` 容器中的脚本也可以应用 ConfigMap 中的 `primary.cnf` 或 `replica.cnf`。
+由于示例部署结构由单个 MySQL 主节点和任意数量的副本节点组成，
+因此脚本仅将序数 `0` 指定为主节点，而将其他所有节点指定为副本节点。
 
 与 StatefulSet 控制器的
-[部署顺序保证](/zh/docs/concepts/workloads/controllers/statefulset/#deployment-and-scaling-guarantees/)
+[部署顺序保证](/zh/docs/concepts/workloads/controllers/statefulset/#deployment-and-scaling-guarantees)
 相结合，
 可以确保 MySQL 主服务器在创建副本服务器之前已准备就绪，以便它们可以开始复制。
 

From 5544c20819bc07e529c68dbb4f9c2f51e2f9f053 Mon Sep 17 00:00:00 2001
From: WenxingLai <wenxing.lai@outlook.com>
Date: Wed, 24 Mar 2021 11:12:26 +0800
Subject: [PATCH 295/788] correct misleading Chinese translation in
 dns-subdomain-names and dns-label-names

---
 .../zh/docs/concepts/overview/working-with-objects/names.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/overview/working-with-objects/names.md b/content/zh/docs/concepts/overview/working-with-objects/names.md
index 678adea96d..6075e0273c 100644
--- a/content/zh/docs/concepts/overview/working-with-objects/names.md
+++ b/content/zh/docs/concepts/overview/working-with-objects/names.md
@@ -61,7 +61,7 @@ DNS 子域名的定义可参见 [RFC 1123](https://tools.ietf.org/html/rfc1123)
 这一要求意味着名称必须满足如下规则：
 
 - 不能超过253个字符
-- 只能包含字母数字，以及'-' 和 '.'
+- 只能包含小写字母、数字，以及'-' 和 '.'
 - 须以字母数字开头
 - 须以字母数字结尾
 
@@ -83,7 +83,7 @@ This means the name must:
 所定义的 DNS 标签标准。也就是命名必须满足如下规则：
 
 - 最多63个字符
-- 只能包含字母数字，以及'-'
+- 只能包含小写字母、数字，以及'-'
 - 须以字母数字开头
 - 须以字母数字结尾
 

From b81f63776e31972f731e9f55c5f418e288eb1889 Mon Sep 17 00:00:00 2001
From: Akihito INOH <akihito-inou@nec.com>
Date: Wed, 24 Mar 2021 11:34:41 +0900
Subject: [PATCH 296/788] Fix errors by linkchecker.py

This commit fixes errors which are shown by linkchecker.py on en/docs/*.
---
 content/en/docs/concepts/workloads/controllers/replicaset.md | 2 +-
 content/en/docs/reference/using-api/deprecation-guide.md     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/workloads/controllers/replicaset.md b/content/en/docs/concepts/workloads/controllers/replicaset.md
index e45d20c8f7..ef17457537 100644
--- a/content/en/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/en/docs/concepts/workloads/controllers/replicaset.md
@@ -237,7 +237,7 @@ The `.spec.template` is a [pod template](/docs/concepts/workloads/pods/#pod-temp
 required to have labels in place. In our `frontend.yaml` example we had one label: `tier: frontend`.
 Be careful not to overlap with the selectors of other controllers, lest they try to adopt this Pod.
 
-For the template's [restart policy](/docs/concepts/workloads/Pods/pod-lifecycle/#restart-policy) field,
+For the template's [restart policy](/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy) field,
 `.spec.template.spec.restartPolicy`, the only allowed value is `Always`, which is the default.
 
 ### Pod Selector
diff --git a/content/en/docs/reference/using-api/deprecation-guide.md b/content/en/docs/reference/using-api/deprecation-guide.md
index ee8328cbdd..a8ad3494bd 100755
--- a/content/en/docs/reference/using-api/deprecation-guide.md
+++ b/content/en/docs/reference/using-api/deprecation-guide.md
@@ -116,7 +116,7 @@ The **certificates.k8s.io/v1beta1** API version of CertificateSigningRequest wil
 * All existing persisted objects are accessible via the new API
 * Notable changes in `certificates.k8s.io/v1`:
     * For API clients requesting certificates:
-        * `spec.signerName` is now required (see [known Kubernetes signers](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers)), and requests for `kubernetes.io/legacy-unknown` are not allowed to be created via the `certificates.k8s.io/v1` API
+        * `spec.signerName` is now required (see [known Kubernetes signers](/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers)), and requests for `kubernetes.io/legacy-unknown` are not allowed to be created via the `certificates.k8s.io/v1` API
         * `spec.usages` is now required, may not contain duplicate values, and must only contain known usages
     * For API clients approving or signing certificates:
         * `status.conditions` may not contain duplicate types

From f2657734f89c0319dcbf7c8af2a27057ccf7de4c Mon Sep 17 00:00:00 2001
From: Giyoon Park <74027224+pgy11@users.noreply.github.com>
Date: Wed, 24 Mar 2021 23:20:01 +0900
Subject: [PATCH 297/788] ko: fix typo in
 content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md

This PR fixes typo
---
 .../stateful-application/mysql-wordpress-persistent-volume.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
index 5c27b55183..fd893ca5de 100644
--- a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
+++ b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
@@ -91,7 +91,7 @@ EOF
 
 ## MySQL과 WordPress에 필요한 리소스 구성 추가하기
 
-다음 매니페스트는 MySQL 디플로이먼트 단일 인스턴스를 기술한다. MySQL 컨케이너는 퍼시스턴트볼륨을 /var/lib/mysql에 마운트한다. `MYSQL_ROOT_PASSWORD` 환경변수는 시크릿에서 가져와 데이터베이스 암호로 설정한다.
+다음 매니페스트는 MySQL 디플로이먼트 단일 인스턴스를 기술한다. MySQL 컨테이너는 퍼시스턴트볼륨을 /var/lib/mysql에 마운트한다. `MYSQL_ROOT_PASSWORD` 환경변수는 시크릿에서 가져와 데이터베이스 암호로 설정한다.
 
 {{< codenew file="application/wordpress/mysql-deployment.yaml" >}}
 

From d00a40c724ecd7f25384a7454d143f5889b9734f Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Wed, 24 Mar 2021 21:34:58 +0530
Subject: [PATCH 298/788] Update
 content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md

Co-authored-by: Rey Lejano <52760880+reylejano@users.noreply.github.com>
---
 .../en/docs/tasks/administer-cluster/configure-upgrade-etcd.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 7fb4fd67bd..a7ee17f5e4 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -282,7 +282,7 @@ the endpoint, certificates etc as shown below:
 
 ```shell
 ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] \
-  --cacert=trusted-ca-file --cert=cert-file --key=key-file \
+  --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> \
   snapshot save backup-file-location
 ```
 where `trusted-ca-file`, `cert-file` and `key-file` can be obtained from the description of the etcd Pod.

From c10d270dc309761d035305215ba27275aede7041 Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Wed, 24 Mar 2021 21:35:19 +0530
Subject: [PATCH 299/788] Update
 content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md

Co-authored-by: Rey Lejano <52760880+reylejano@users.noreply.github.com>
---
 .../en/docs/tasks/administer-cluster/configure-upgrade-etcd.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index a7ee17f5e4..f0f6f5def9 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -283,7 +283,7 @@ the endpoint, certificates etc as shown below:
 ```shell
 ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] \
   --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> \
-  snapshot save backup-file-location
+  snapshot save <backup-file-location>
 ```
 where `trusted-ca-file`, `cert-file` and `key-file` can be obtained from the description of the etcd Pod.
 

From 02afb71016ac558fc5836738711e78e77b1ad44a Mon Sep 17 00:00:00 2001
From: Swetha Repakula <srepakula@google.com>
Date: Mon, 15 Mar 2021 11:59:30 -0700
Subject: [PATCH 300/788] Update EndpointSlice Docs

 * Deprecate `endpointslices.discovery.k8s.io/v1beta1`
 * Removes `content/en/docs/tasks/administer-cluster/enabling-endpointslices.md`
 and redirects requests to that page to
 `content/en/docs/concepts/services-networking/endpoint-slices.md`
---
 .../services-networking/endpoint-slices.md    | 45 +++++-----
 .../concepts/services-networking/service.md   |  7 +-
 .../feature-gates.md                          | 13 +--
 .../reference/labels-annotations-taints.md    |  8 ++
 .../reference/using-api/deprecation-guide.md  | 11 +++
 .../enabling-endpointslices.md                | 89 -------------------
 static/_redirects                             |  1 +
 7 files changed, 54 insertions(+), 120 deletions(-)
 delete mode 100644 content/en/docs/tasks/administer-cluster/enabling-endpointslices.md

diff --git a/content/en/docs/concepts/services-networking/endpoint-slices.md b/content/en/docs/concepts/services-networking/endpoint-slices.md
index 6abf1f6ed1..a398e61d07 100644
--- a/content/en/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/en/docs/concepts/services-networking/endpoint-slices.md
@@ -9,7 +9,7 @@ weight: 35
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 _EndpointSlices_ provide a simple way to track network endpoints within a
 Kubernetes cluster. They offer a more scalable and extensible alternative to
@@ -52,7 +52,7 @@ As an example, here's a sample EndpointSlice resource for the `example`
 Kubernetes Service.
 
 ```yaml
-apiVersion: discovery.k8s.io/v1beta1
+apiVersion: discovery.k8s.io/v1
 kind: EndpointSlice
 metadata:
   name: example-abc
@@ -69,9 +69,8 @@ endpoints:
     conditions:
       ready: true
     hostname: pod-1
-    topology:
-      kubernetes.io/hostname: node-1
-      topology.kubernetes.io/zone: us-west2-a
+    nodeName: node-1
+    zone: us-west2-a
 ```
 
 By default, the control plane creates and manages EndpointSlices to have no
@@ -135,30 +134,26 @@ For pods, this is any pod that has a deletion timestamp set.
 
 ### Topology information {#topology}
 
-{{< feature-state for_k8s_version="v1.20" state="deprecated" >}}
+Each endpoint within an EndpointSlice can contain relevant topology information.
+The topology information includes the location of the endpoint and information
+about the corresponding Node and zone. These are available in the following
+per endpoint fields on EndpointSlices:
+
+* `nodeName` - The name of the Node this endpoint is on.
+* `zone` - The zone this endpoint is in.
 
 {{< note >}}
-The topology field in EndpointSlices has been deprecated and will be removed in
-a future release. A new `nodeName` field will be used instead of setting
-`kubernetes.io/hostname` in topology. It was determined that other topology
-fields covering zone and region would be better represented as EndpointSlice
-labels that would apply to all endpoints within the EndpointSlice.
+In the v1 API, the per endpoint `topology` was effectively removed in favor of
+the dedicated fields `nodeName` and `zone`.
+
+Setting arbitrary topology fields on the `endpoint` field of an `EndpointSlice`
+resource has been deprecated and is not be supported in the v1 API. Instead,
+the v1 API supports setting individual `nodeName` and `zone` fields. These
+fields are automatically translated between API versions. For example, the
+value of the `"topology.kubernetes.io/zone"` key in the `topology` field in
+the v1beta1 API is accessible as the `zone` field in the v1 API.
 {{< /note >}}
 
-Each endpoint within an EndpointSlice can contain relevant topology information.
-This is used to indicate where an endpoint is, containing information about the
-corresponding Node, zone, and region. When the values are available, the
-control plane sets the following Topology labels for EndpointSlices:
-
-* `kubernetes.io/hostname` - The name of the Node this endpoint is on.
-* `topology.kubernetes.io/zone` - The zone this endpoint is in.
-* `topology.kubernetes.io/region` - The region this endpoint is in.
-
-The values of these labels are derived from resources associated with each
-endpoint in a slice. The hostname label represents the value of the NodeName
-field on the corresponding Pod. The zone and region labels represent the value
-of the labels with the same names on the corresponding Node.
-
 ### Management
 
 Most often, the control plane (specifically, the endpoint slice
diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index b7a7edcd38..2f8a75d515 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -187,9 +187,14 @@ An ExternalName Service is a special case of Service that does not have
 selectors and uses DNS names instead. For more information, see the
 [ExternalName](#externalname) section later in this document.
 
+### Over Capacity Endpoints
+If an Endpoints resource has more than 1000 endpoints then a Kubernetes v1.21 (or later)
+cluster annotates that Endpoints with `endpoints.kubernetes.io/over-capacity: warning`.
+This annotation indicates that the affected Endpoints object is over capacity.
+
 ### EndpointSlices
 
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 EndpointSlices are an API resource that can provide a more scalable alternative
 to Endpoints. Although conceptually quite similar to Endpoints, EndpointSlices
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2c181ca331..0cd069489d 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -103,10 +103,6 @@ different Kubernetes components.
 | `DynamicKubeletConfig` | `false` | Alpha | 1.4 | 1.10 |
 | `DynamicKubeletConfig` | `true` | Beta | 1.11 | |
 | `EfficientWatchResumption` | `false` | Alpha | 1.20 | |
-| `EndpointSlice` | `false` | Alpha | 1.16 | 1.16 |
-| `EndpointSlice` | `false` | Beta | 1.17 | |
-| `EndpointSlice` | `true` | Beta | 1.18 | |
-| `EndpointSliceNodeName` | `false` | Alpha | 1.20 | |
 | `EndpointSliceProxying` | `false` | Alpha | 1.18 | 1.18 |
 | `EndpointSliceProxying` | `true` | Beta | 1.19 | |
 | `EndpointSliceTerminatingCondition` | `false` | Alpha | 1.20 | |
@@ -180,7 +176,8 @@ different Kubernetes components.
 | `WinDSR` | `false` | Alpha | 1.14 | |
 | `WinOverlay` | `false` | Alpha | 1.14 | 1.19 |
 | `WinOverlay` | `true` | Beta | 1.20 | |
-| `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | |
+| `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | 1.20 |
+| `WindowsEndpointSliceProxying` | `true` | beta | 1.21 | |
 {{< /table >}}
 
 ### Feature gates for graduated or deprecated features
@@ -249,6 +246,12 @@ different Kubernetes components.
 | `EnableAggregatedDiscoveryTimeout` | `true` | Deprecated | 1.16 | - |
 | `EnableEquivalenceClassCache` | `false` | Alpha | 1.8 | 1.14 |
 | `EnableEquivalenceClassCache` | - | Deprecated | 1.15 | - |
+| `EndpointSlice` | `false` | Alpha | 1.16 | 1.16 |
+| `EndpointSlice` | `false` | Beta | 1.17 | 1.17 |
+| `EndpointSlice` | `true` | Beta | 1.18 | 1.21 |
+| `EndpointSlice` | `true` | GA | 1.21 | -  |
+| `EndpointSliceNodeName` | `false` | Alpha | 1.20 | 1.21 |
+| `EndpointSliceNodeName` | `true` | GA | 1.21 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | Alpha | 1.5 | 1.12 |
 | `ExperimentalCriticalPodAnnotation` | `false` | Deprecated | 1.13 | - |
 | `EvenPodsSpread` | `false` | Alpha | 1.16 | 1.17 |
diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 0399bd561e..08cbf017e6 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -221,6 +221,14 @@ Example: `kubectl.kubernetes.io/default-container: "front-end-app"`
 
 The value of the annotation is the container name that is default for this Pod. For example, `kubectl logs` or `kubectl exec` without `-c` or `--container` flag will use this default container.
 
+## endpoints.kubernetes.io/over-capacity
+
+Example: `endpoints.kubernetes.io/over-capacity:warning`
+
+Used on: Endpoints
+
+In Kubernetes clusters v1.21 (or later), the Endpoints controller adds this annotation to an Endpoints resource if it has more than 1000 endpoints. The annotation indicates that the Endpoints resource is over capacity.
+
 **The taints listed below are always used on Nodes**
 
 ## node.kubernetes.io/not-ready
diff --git a/content/en/docs/reference/using-api/deprecation-guide.md b/content/en/docs/reference/using-api/deprecation-guide.md
index ee8328cbdd..23c33db16a 100755
--- a/content/en/docs/reference/using-api/deprecation-guide.md
+++ b/content/en/docs/reference/using-api/deprecation-guide.md
@@ -25,6 +25,17 @@ deprecated API versions to newer and more stable API versions.
 
 The **v1.25** release will stop serving the following deprecated API versions:
 
+#### EndpointSlice {#endpointslice-v125}
+
+The **discovery.k8s.io/v1beta1** API version of EndpointSlice will no longer be served in v1.25.
+
+* Migrate manifests and API clients to use the **discovery.k8s.io/v1** API version, available since v1.21.
+* All existing persisted objects are accessible via the new API
+* Notable changes in **discovery.k8s.io/v1**:
+    * use per Endpoint `nodeName` field instead of deprecated `topology["kubernetes.io/hostname"]` field
+    * use per Endpoint `zone` field instead of deprecated `topology["topology.kubernetes.io/zone"]` field
+    * `topology` is replaced with the `deprecatedTopology` field which is not writable in v1
+
 #### Event {#event-v125}
 
 The **events.k8s.io/v1beta1** API version of Event will no longer be served in v1.25.
diff --git a/content/en/docs/tasks/administer-cluster/enabling-endpointslices.md b/content/en/docs/tasks/administer-cluster/enabling-endpointslices.md
deleted file mode 100644
index d984652de8..0000000000
--- a/content/en/docs/tasks/administer-cluster/enabling-endpointslices.md
+++ /dev/null
@@ -1,89 +0,0 @@
----
-reviewers:
-- bowei
-- freehan
-title: Enabling EndpointSlices
-content_type: task
----
-
-<!-- overview -->
-This page provides an overview of enabling EndpointSlices in Kubernetes.
-
-
-
-## {{% heading "prerequisites" %}}
-
-  {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-
-
-<!-- steps -->
-
-## Introduction
-
-EndpointSlices provide a scalable and extensible alternative to Endpoints in
-Kubernetes. They build on top of the base of functionality provided by Endpoints
-and extend that in a scalable way. When Services have a large number (>100) of
-network endpoints, they will be split into multiple smaller EndpointSlice
-resources instead of a single large Endpoints resource.
-
-## Enabling EndpointSlices
-
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
-
-{{< note >}}
-The EndpointSlice resource was designed to address shortcomings in a earlier
-resource: Endpoints. Some Kubernetes components and third-party applications
-continue to use and rely on Endpoints. Whilst that remains the case,
-EndpointSlices should be seen as an addition to Endpoints in a cluster, not as
-an outright replacement.
-{{< /note >}}
-
-EndpointSlice functionality in Kubernetes is made up of several different
-components, most are enabled by default:
-* _The EndpointSlice API_: EndpointSlices are part of the
-  `discovery.k8s.io/v1beta1` API. This is beta and enabled by default since
-  Kubernetes 1.17. All components listed below are dependent on this API being
-  enabled.
-* _The EndpointSlice Controller_: This {{< glossary_tooltip text="controller"
-  term_id="controller" >}} maintains EndpointSlices for Services and the Pods
-  they reference. This is controlled by the `EndpointSlice` feature gate. It has
-  been enabled by default since Kubernetes 1.18.
-* _The EndpointSliceMirroring Controller_: This {{< glossary_tooltip
-  text="controller" term_id="controller" >}} mirrors custom Endpoints to
-  EndpointSlices. This is controlled by the `EndpointSlice` feature gate. It has
-  been enabled by default since Kubernetes 1.19.
-* _Kube-Proxy_: When {{< glossary_tooltip text="kube-proxy" term_id="kube-proxy">}}
-  is configured to use EndpointSlices, it can support higher numbers of Service
-  endpoints. This is controlled by the `EndpointSliceProxying` feature gate on
-  Linux and `WindowsEndpointSliceProxying` on Windows. It has been enabled by
-  default on Linux since Kubernetes 1.19. It is not enabled by default for
-  Windows nodes. To configure kube-proxy to use EndpointSlices on Windows, you
-  can enable the `WindowsEndpointSliceProxying` [feature
-  gate](/docs/reference/command-line-tools-reference/feature-gates/) on
-  kube-proxy.
-
-
-## API fields
-
-Some fields in the EndpointSlice API are feature-gated.
-
-- The `EndpointSliceNodeName` feature gate controls access to the `nodeName`
-  field. This is an alpha feature that is disabled by default.
-- The `EndpointSliceTerminating` feature gate controls access to the `serving`
-  and `terminating` condition fields. This is an alpha feature that is disabled
-  by default.
-
-## Using EndpointSlices
-
-With EndpointSlices fully enabled in your cluster, you should see corresponding
-EndpointSlice resources for each Endpoints resource. In addition to supporting
-existing Endpoints functionality, EndpointSlices will allow for greater
-scalability and extensibility of network endpoints in your cluster.
-
-## {{% heading "whatsnext" %}}
-
-
-* Read about [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/)
-* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
-
-
diff --git a/static/_redirects b/static/_redirects
index 4186c547b2..cd69cddb69 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -235,6 +235,7 @@
 /docs/tasks/administer-cluster/default-cpu-request-limit/     /docs/tasks/configure-pod-container/assign-cpu-resource/#specify-a-cpu-request-and-a-cpu-limit/ 301
 /docs/tasks/administer-cluster/default-memory-request-limit/     /docs/tasks/configure-pod-container/assign-memory-resource/#specify-a-memory-request-and-a-memory-limit/ 301
 /docs/tasks/administer-cluster/developing-cloud-controller-manager.md     /docs/tasks/administer-cluster/developing-cloud-controller-manager/ 301
+/docs/tasks/administer-cluster/enabling-endpointslices/ /docs/concepts/services-networking/endpoint-slices/ 301
 /docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-13     /docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/ 301
 /docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-ha-1-13     /docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/ 301
 /docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-14     /docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/ 301

From 8d7396eb147caccd88e80e8ee4b5ba4d381768f1 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Thu, 25 Mar 2021 13:42:12 +0800
Subject: [PATCH 301/788] id: sync task-tutorial-prereqs.md

---
 content/id/includes/task-tutorial-prereqs.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/id/includes/task-tutorial-prereqs.md b/content/id/includes/task-tutorial-prereqs.md
index 3c8abb5b09..5afea1cb95 100644
--- a/content/id/includes/task-tutorial-prereqs.md
+++ b/content/id/includes/task-tutorial-prereqs.md
@@ -1,8 +1,8 @@
-Kamu harus memiliki klaster Kubernetes, dan perangkat baris perintah `kubectl` 
-juga harus dikonfigurasikan untuk berkomunikasi dengan klaster kamu. Jika kamu 
-belum punya klaster, kamu dapat membuatnya dengan menggunakan
-[Minikube](/docs/setup/learning-environment/minikube/),
-atau kamu dapat menggunakan salah satu tempat bermain Kubernetes ini:
+Kamu harus memiliki klaster Kubernetes, dan perangkat baris perintah kubectl
+juga harus dikonfigurasikan untuk berkomunikasi dengan klastermu. Jika kamu
+belum memiliki klaster, kamu dapat membuatnya dengan menggunakan
+[minikube](/id/docs/tasks/tools/#minikube),
+atau kamu juga dapat menggunakan salah satu dari tempat mencoba Kubernetes berikut ini:
 
 * [Katacoda](https://www.katacoda.com/courses/kubernetes/playground)
 * [Bermain dengan Kubernetes](http://labs.play-with-k8s.com/)

From bd18b152ab9c6cd8f2de5117e8f5e4d828098213 Mon Sep 17 00:00:00 2001
From: RA489 <rohit.anand@india.nec.com>
Date: Thu, 25 Mar 2021 11:16:55 +0530
Subject: [PATCH 302/788] Update hello minikube page

---
 content/en/docs/tutorials/hello-minikube.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/hello-minikube.md b/content/en/docs/tutorials/hello-minikube.md
index 4bd6a9a82c..fc5b716bc2 100644
--- a/content/en/docs/tutorials/hello-minikube.md
+++ b/content/en/docs/tutorials/hello-minikube.md
@@ -46,7 +46,7 @@ This tutorial provides a container image that uses NGINX to echo back all the re
     {{< kat-button >}}
 
 {{< note >}}
-If you installed minikube locally, run `minikube start`.
+If you installed minikube locally, run `minikube start`. Before you run `minikube dashboard`, you should open a new terminal, start `minikube dashboard` there, and then switch back to the main terminal.
 {{< /note >}}
 
 2. Open the Kubernetes dashboard in a browser:

From 1abf84e7cd4e5a304d8e207a07b06d49bd64a61b Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Thu, 25 Mar 2021 13:55:28 +0800
Subject: [PATCH 303/788] id: sync supported-doc-versions.md

---
 .../id/docs/home/supported-doc-versions.md    | 29 ++++---------------
 1 file changed, 6 insertions(+), 23 deletions(-)

diff --git a/content/id/docs/home/supported-doc-versions.md b/content/id/docs/home/supported-doc-versions.md
index 6cecfdaec1..c28dec9fab 100644
--- a/content/id/docs/home/supported-doc-versions.md
+++ b/content/id/docs/home/supported-doc-versions.md
@@ -1,29 +1,12 @@
 ---
-title: Versi Kubernetes yang Termasuk dalam Dokumentasi
-content_type: concept
+title: Versi Dokumentasi yang Tersedia
+content_type: custom
+layout: supported-versions
 card:
   name: about
   weight: 10
-  title: Versi Kubernetes yang Termasuk dalam Dokumentasi
+  title: Versi Dokumentasi yang Tersedia
 ---
 
-<!-- overview -->
-
-Situs ini merupakan dokumentasi dari Kubernetes versi saat ini dan 4 versi sebelumnya.
-
-
-
-<!-- body -->
-
-## Versi saat ini
-
-Versi saat ini adalah
-[{{< param "version" >}}](/).
-
-## Versi sebelumnya
-
-{{< versions-other >}}
-
-
-
-
+Situs web ini berisi dokumentasi untuk versi terkini Kubernetes
+dan empat versi sebelumnya.

From eb9ea620416b76c89fd3ead9bde2f05cbf740017 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Thu, 25 Mar 2021 09:15:02 +0800
Subject: [PATCH 304/788] id: move monitoring.md to system-metrics.md and sync
 with upstream

---
 .../cluster-administration/monitoring.md      | 168 ------------------
 .../cluster-administration/system-metrics.md  | 166 +++++++++++++++++
 2 files changed, 166 insertions(+), 168 deletions(-)
 delete mode 100644 content/id/docs/concepts/cluster-administration/monitoring.md
 create mode 100644 content/id/docs/concepts/cluster-administration/system-metrics.md

diff --git a/content/id/docs/concepts/cluster-administration/monitoring.md b/content/id/docs/concepts/cluster-administration/monitoring.md
deleted file mode 100644
index f4917496a9..0000000000
--- a/content/id/docs/concepts/cluster-administration/monitoring.md
+++ /dev/null
@@ -1,168 +0,0 @@
----
-title: Metrik-Metrik untuk Control Plane Kubernetes 
-content_type: concept
-weight: 60
-aliases:
-- controller-metrics.md
----
-
-<!-- overview -->
-
-Metrik dari komponen sistem dapat memberikan pandangan yang lebih baik tentang apa 
-yang sedang terjadi di dalam sistem. Metrik sangat berguna untuk membuat dasbor (_dashboard_) 
-dan peringatan (_alert_).
-
-Metrik di dalam _control plane_ Kubernetes disajikan dalam [format prometheus](https://prometheus.io/docs/instrumenting/exposition_formats/) 
-dan dapat terbaca oleh manusia.
-
-
-
-<!-- body -->
-
-## Metrik-Metrik pada Kubernetes
-
-Dalam kebanyakan kasus, metrik tersedia pada _endpoint_ `/metrics` dari server HTTP.
-Untuk komponen yang tidak mengekspos _endpoint_ secara bawaan, _endpoint_ tersebut dapat diaktifkan 
-dengan menggunakan opsi `--bind-address`.
-
-Contoh-contoh untuk komponen tersebut adalah:
-
-* {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}
-* {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}
-* {{< glossary_tooltip term_id="kube-apiserver" text="kube-apiserver" >}}
-* {{< glossary_tooltip term_id="kube-scheduler" text="kube-scheduler" >}}
-* {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}
-
-Di dalam lingkungan produksi, kamu mungkin ingin mengonfigurasi [Server Prometheus](https://prometheus.io/)
-atau _scraper_ metrik (pengambil metrik) lainnya untuk mengumpulkan metrik-metrik ini secara berkala 
-dan membuatnya tersedia dalam semacam basis data yang _time series_.
-
-Perlu dicatat bahwa {{< glossary_tooltip term_id="kubelet" text="kubelet" >}} 
-juga mengekspos metrik pada _endpoint-endpoint_ seperti `/metrics/cadvisor`, 
-`/metrics/resource` dan `/metrics/probes`. Metrik-metrik tersebut tidak memiliki
-siklus hidup yang sama.
-
-Jika klaster kamu menggunakan {{< glossary_tooltip term_id="rbac" text="RBAC" >}}, 
-untuk membaca metrik memerlukan otorisasi melalui sebuah User, Group, atau 
-ServiceAccount dengan ClusterRole yang memperbolehkan mengakses `/metrics`.
-
-Sebagai contoh:
-
-```
-apiVersion: rbac.authorization.k8s.io/v1	
-kind: ClusterRole	
-metadata:	
-  name: prometheus	
-rules:	
-  - nonResourceURLs:	
-      - "/metrics"	
-    verbs:	
-      - get
-```
-
-## Siklus Hidup (_Lifecycle_) Metrik
-
-Alpha metric →  Stable metric →  Deprecated metric →  Hidden metric → Deletion
-
-Metrik-metrik _Alpha_ tidak memiliki jaminan stabilitas; dengan demikian mereka 
-dapat dimodifikasi atau dihapus kapan saja.
-
-Metrik-metrik _Stable_ dijamin tidak berubah (dijamin stabilitasnya); Secara khusus, stabilitas berarti:
-
-* metrik itu sendiri tidak akan dihapus (atau diganti namanya)
-* jenis metrik tidak akan dimodifikasi
-
-Metrik _Deprecated_ memberi penanda bahwa metrik tersebut suatu saat akan dihapus; untuk 
-menemukan versi yang mana, kamu perlu memeriksa anotasi, yang mencakup dari versi 
-Kubernetes mana yang metrik tersebut akan dianggap _deprecated_.
-
-Sebelum _deprecation_:
-
-```
-# HELP some_counter this counts things
-# TYPE some_counter counter
-some_counter 0
-```
-
-Sesudah _deprecation_:
-
-```
-# HELP some_counter (Deprecated since 1.15.0) this counts things
-# TYPE some_counter counter
-some_counter 0
-```
-
-Setelah metrik disembunyikan maka secara bawaan metrik tidak dipublikasikan 
-untuk _scraping_ (pengambilan metrik). Untuk menggunakan metrik yang tersembunyi, kamu perlu mengganti (_override_)
-konfigurasi untuk komponen klaster yang relevan.
-
-Setelah metrik dihapus, metrik tidak dipublikasikan. Kamu tidak dapat mengubah 
-metrik tersebut dengan menggunakan _override_.
-
-## Melihat Metrik tersembunyi
-
-Seperti dijelaskan di atas, para admin dapat mengaktifkan metrik tersembunyi 
-melalui opsi pada baris perintah (_command line_) untuk _binary_ (program) tertentu. Ini ditujukan untuk 
-digunakan sebagai solusi bagi para admin apabila mereka gagal memigrasi 
-metrik yang sudah _deprecated_ dalam rilis terakhir.
-
-Opsi `show-hidden-metrics-for-version` menunjukkan versi yang ingin kamu tampilkan 
-metrik yang sudah _deprecated_ dalam rilis tersebut. Versi ini ditampilkan dalam bentuk x.y, 
-di mana x adalah versi _major_, y ​​adalah versi minor. Versi _patch_ tidak 
-diperlukan meskipun metrik dapat di_-deprecate_ dalam rilis _patch_, hal ini
-adalah karena kebijakan _deprecation_ untuk metrik hanya berlaku terhadap rilis minor.
-
-Opsi tersebut hanya dapat menggunakan versi minor sebelumnya sebagai parameternya. Semua 
-metrik yang disembunyikan di versi sebelumnya akan dikeluarkan jika para admin 
-mengatur versi sebelumnya ke `show-hidden-metrics-for-version`. Versi yang 
-terlalu lama tidak diizinkan karena hal ini melanggar kebijakan untuk metrik yang
-sudah _deprecated_.
-
-Ambil metrik `A` sebagai contoh, di sini diasumsikan bahwa `A` sudah _deprecated_ 
-pada rilis 1.n. Menurut kebijakan metrik yang sudah _deprecated_, kita dapat mencapai kesimpulan 
-sebagai berikut:
-
-* Pada rilis `1.n`, metrik sudah di_-deprecated_, dan dapat diperlihatkan secara bawaan.
-* Pada rilis `1.n + 1`, metrik disembunyikan secara bawaan dan dapat 
-  diperlihatkan dengan baris perintah `show-hidden-metrics-for-version=1.n`.
-* Pada rilis `1.n + 2`, metrik harus dihapus dari _codebase_. Tidak ada jalan 
-  keluar lagi.
-
-Jika kamu meng-_upgrade_ dari rilis `1.12` ke` 1.13`, tetapi masih bergantung pada
-metrik `A` yang di-_deprecate_ dalam` 1.12`, kamu harus mengatur metrik 
-tersembunyi melalui baris perintah: `--show-hidden-metrics=1.12` dan ingatlah 
-untuk menghapus ketergantungan terhadap metrik ini sebelum meng-_upgrade_ ke `1.14`.
-
-## Metrik komponen
-
-### Metrik kube-controller-manager
-
-Metrik Controller Manager memberikan pandangan penting 
-tentang kinerja dan kesehatan Controller Manager. Metrik ini mencakup metrik 
-_runtime_ berbahasa Go yang umum seperti jumlah _go_routine_ dan metrik khusus 
-pengontrol seperti latensi _request etcd_ atau latensi API dari Cloud provider
-(AWS, GCE, OpenStack) yang dapat digunakan untuk mengukur kesehatan klaster.
-
-Mulai dari Kubernetes 1.7, metrik Cloud provider yang detail tersedia untuk 
-operasi penyimpanan untuk GCE, AWS, Vsphere, dan OpenStack.
-Metrik ini dapat digunakan untuk memantau kesehatan operasi PersistentVolume.
-
-Misalnya, untuk GCE metrik tersebut adalah:
-
-```
-cloudprovider_gce_api_request_duration_seconds { request = "instance_list"}
-cloudprovider_gce_api_request_duration_seconds { request = "disk_insert"}
-cloudprovider_gce_api_request_duration_seconds { request = "disk_delete"}
-cloudprovider_gce_api_request_duration_seconds { request = "attach_disk"}
-cloudprovider_gce_api_request_duration_seconds { request = "detach_disk"}
-cloudprovider_gce_api_request_duration_seconds { request = "list_disk"}
-```
-
-
-
-## {{% heading "whatsnext" %}}
-
-* Baca tentang [format teks Prometheus](https://github.com/prometheus/docs/blob/master/content/docs/instrumenting/exposition_formats.md#text-based-format) untuk berbagai metrik
-* Lihat daftar [metrik Kubernetes yang _stable_](https://github.com/kubernetes/kubernetes/blob/master/test/instrumentation/testdata/stable-metrics-list.yaml)
-* Baca tentang [kebijakan _deprecation_ Kubernetes](https://kubernetes.io/docs/reference/using-api/deprecation-policy/#deprecating-a-feature-or-behavior )
-
diff --git a/content/id/docs/concepts/cluster-administration/system-metrics.md b/content/id/docs/concepts/cluster-administration/system-metrics.md
new file mode 100644
index 0000000000..f731ccfd77
--- /dev/null
+++ b/content/id/docs/concepts/cluster-administration/system-metrics.md
@@ -0,0 +1,166 @@
+---
+title: Metrik untuk Komponen Sistem Kubernetes
+content_type: concept
+weight: 60
+---
+
+<!-- overview -->
+
+Metrik dari komponen sistem dapat memberikan gambaran yang lebih baik tentang apa 
+yang sedang terjadi di dalam sistem. Metrik sangat berguna untuk membuat dasbor (_dashboard_) 
+dan peringatan (_alert_).
+
+Komponen Kubernetes mengekspos metrik dalam [format Prometheus](https://prometheus.io/docs/instrumenting/exposition_formats/).
+Format ini berupa teks biasa yang terstruktur, dirancang agar orang dan mesin dapat membacanya.
+
+<!-- body -->
+
+## Metrik-metrik dalam Kubernetes
+
+Dalam kebanyakan kasus, metrik tersedia pada _endpoint_ `/metrics` dari server HTTP.
+Untuk komponen yang tidak mengekspos _endpoint_ secara bawaan, _endpoint_ tersebut dapat diaktifkan 
+dengan menggunakan opsi `--bind-address`.
+
+Contoh-contoh untuk komponen tersebut adalah:
+
+* {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}
+* {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}
+* {{< glossary_tooltip term_id="kube-apiserver" text="kube-apiserver" >}}
+* {{< glossary_tooltip term_id="kube-scheduler" text="kube-scheduler" >}}
+* {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}
+
+Di dalam lingkungan produksi, kamu mungkin ingin mengonfigurasi [Server Prometheus](https://prometheus.io/)
+atau pengambil metrik (_metrics scraper_) lainnya untuk mengumpulkan metrik-metrik ini secara berkala 
+dan membuatnya tersedia dalam semacam pangkalan data deret waktu (_time series database_).
+
+Perlu dicatat bahwa {{< glossary_tooltip term_id="kubelet" text="kubelet" >}} 
+juga mengekspos metrik pada _endpoint-endpoint_ seperti `/metrics/cadvisor`, 
+`/metrics/resource` dan `/metrics/probes`. Metrik-metrik tersebut tidak memiliki
+siklus hidup yang sama.
+
+Jika klastermu menggunakan {{< glossary_tooltip term_id="rbac" text="RBAC" >}}, 
+maka membaca metrik memerlukan otorisasi melalui _user_, _group_, atau 
+ServiceAccount dengan ClusterRole yang memperbolehkan untuk mengakses `/metrics`.
+
+Sebagai contoh:
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: prometheus
+rules:
+  - nonResourceURLs:
+      - "/metrics"
+    verbs:
+      - get
+```
+
+## Siklus hidup metrik
+
+Metrik alfa (_alpha_) →  Metrik stabil →  Metrik usang (_deprecated_) →  Metrik tersembunyi → Metrik terhapus
+
+Metrik alfa tidak memiliki jaminan stabilitas. Metrik ini 
+dapat dimodifikasi atau dihapus kapan saja.
+
+Metrik stabil dijamin tidak akan mengalami perubahan. Hal ini berarti:
+* Metrik stabil tanpa penanda usang (_deprecated signature_) tidak akan dihapus ataupun diganti namanya
+* Jenis metrik stabil tidak akan dimodifikasi
+
+Metrik usang dijadwalkan untuk dihapus, tetapi masih tersedia untuk digunakan.
+Metrik ini mencakup anotasi versi di mana metrik ini dianggap menjadi usang.
+
+Sebagai contoh:
+
+* Sebelum menjadi usang
+
+  ```
+  # HELP some_counter this counts things
+  # TYPE some_counter counter
+  some_counter 0
+  ```
+
+* Setelah menjadi usang
+
+  ```
+  # HELP some_counter (Deprecated since 1.15.0) this counts things
+  # TYPE some_counter counter
+  some_counter 0
+  ```
+
+Metrik tersembunyi tidak lagi dipublikasikan untuk pengambilan metrik (_scraping_), tetapi masih tersedia untuk digunakan. Untuk menggunakan metrik tersembunyi, lihat bagian [Menampilkan metrik tersembunyi](#menampilkan-metrik-tersembunyi).
+
+Metrik yang terhapus tidak lagi dipublikasikan dan tidak dapat digunakan lagi.
+
+## Menampilkan metrik tersembunyi
+
+Seperti yang dijelaskan di atas, admin dapat mengaktifkan metrik tersembunyi melalui opsi baris perintah pada biner (program) tertentu. Ini dimaksudkan untuk digunakan sebagai jalan keluar bagi admin jika mereka melewatkan migrasi metrik usang dalam rilis terakhir.
+
+Opsi `show-hidden-metrics-for-version` menerima input versi yang kamu inginkan untuk menampilkan metrik usang dalam rilis tersebut. Versi tersebut dinyatakan sebagai x.y, di mana x adalah versi mayor, y adalah versi minor. Versi _patch_ tidak diperlukan meskipun metrik dapat menjadi usang dalam rilis _patch_, alasannya adalah kebijakan penandaan metrik usang dijalankan terhadap rilis minor.
+
+Opsi tersebut hanya dapat menerima input versi minor sebelumnya sebagai nilai. Semua metrik yang disembunyikan di versi sebelumnya akan dikeluarkan jika admin mengatur versi sebelumnya ke `show-hidden-metrics-for-version`. Versi yang terlalu lama tidak diperbolehkan karena melanggar kebijakan untuk metrik usang.
+
+Ambil metrik `A` sebagai contoh, di sini diasumsikan bahwa` A` sudah menjadi usang di versi 1.n. Berdasarkan kebijakan metrik usang, kita dapat mencapai kesimpulan berikut:
+
+* Pada rilis `1.n`, metrik menjadi usang, dan dapat dikeluarkan secara bawaan.
+* Pada rilis `1.n+1`, metrik disembunyikan secara bawaan dan dapat dikeluarkan dengan baris perintah `show-hidden-metrics-for-version=1.n`.
+* Pada rilis `1.n+2`, metrik harus dihapus dari _codebase_. Tidak ada jalan keluar lagi.
+
+Jika kamu meningkatkan versi dari rilis `1.12` ke `1.13`, tetapi masih bergantung pada metrik `A` yang usang di `1.12`, kamu harus mengatur metrik tersembunyi melalui baris perintah: `--show-hidden-metrics = 1.12` dan ingatlah untuk menghapus ketergantungan terhadap metrik ini sebelum meningkatkan versi rilis ke `1.14`.
+
+## Menonaktifkan metrik akselerator
+
+kubelet mengumpulkan metrik akselerator melalui cAdvisor. Untuk mengumpulkan metrik ini, untuk akselerator seperti GPU NVIDIA, kubelet membuka koneksi dengan _driver_ GPU. Ini berarti untuk melakukan perubahan infrastruktur (misalnya, pemutakhiran _driver_), administrator klaster perlu menghentikan agen kubelet.
+
+Pengumpulkan metrik akselerator sekarang menjadi tanggung jawab vendor dibandingkan kubelet. Vendor harus menyediakan sebuah kontainer untuk mengumpulkan metrik dan mengeksposnya ke layanan metrik (misalnya, Prometheus).
+
+[Gerbang fitur `DisableAcceleratorUsageMetrics`](/docs/reference/command-line-tools-reference/feature-gates/) menonaktifkan metrik yang dikumpulkan oleh kubelet, dengan [lini masa (_timeline_) untuk mengaktifkan fitur ini secara bawaan](https://github.com/kubernetes/enhancements/tree/411e51027db842355bd489691af897afc1a41a5e/keps/sig-node/1867-disable-accelerator-usage-metrics#graduation-criteria).
+
+## Metrik komponen
+
+### Metrik kube-controller-manager
+
+Metrik _controller manager_ memberikan gambaran penting 
+tentang kinerja dan kesehatan _controller manager_. Metrik ini mencakup metrik 
+_runtime_ bahasa Go yang umum seperti jumlah go_routine dan metrik khusus 
+pengontrol seperti latensi permintaan etcd atau latensi API Cloudprovider
+(AWS, GCE, OpenStack) yang dapat digunakan untuk mengukur kesehatan klaster.
+
+Mulai dari Kubernetes 1.7, metrik Cloudprovider yang detail tersedia untuk 
+operasi penyimpanan untuk GCE, AWS, Vsphere, dan OpenStack.
+Metrik ini dapat digunakan untuk memantau kesehatan operasi _persistent volume_.
+
+Misalnya, untuk GCE metrik-metrik berikut ini dipanggil:
+
+```
+cloudprovider_gce_api_request_duration_seconds { request = "instance_list"}
+cloudprovider_gce_api_request_duration_seconds { request = "disk_insert"}
+cloudprovider_gce_api_request_duration_seconds { request = "disk_delete"}
+cloudprovider_gce_api_request_duration_seconds { request = "attach_disk"}
+cloudprovider_gce_api_request_duration_seconds { request = "detach_disk"}
+cloudprovider_gce_api_request_duration_seconds { request = "list_disk"}
+```
+
+### Metrik kube-scheduler
+
+{{< feature-state for_k8s_version="v1.20" state="alpha" >}}
+
+Penjadwal mengekspos metrik opsional yang melaporkan sumber daya yang diminta dan limit yang diinginkan dari semua pod yang berjalan. Metrik ini dapat digunakan untuk membangun dasbor perencanaan kapasitas, mengevaluasi limit penjadwalan yang digunakan saat ini atau secara historis, dengan cepat mengidentifikasi beban kerja yang tidak dapat dijadwalkan karena kurangnya sumber daya, dan membandingkan permintaan sumber daya oleh pod dengan penggunaannya yang aktual.
+
+kube-scheduler mengidentifikasi [permintaan dan limit](/docs/concepts/configuration/manage-resources-containers/) sumber daya yang dikonfigurasi untuk setiap Pod; jika permintaan atau limit bukan nol, kube-scheduler akan melaporkan deret waktu (_timeseries_) metrik. Deret waktu diberi label dengan:
+- namespace
+- nama pod
+- node di mana pod dijadwalkan atau _string_ kosong jika belum dijadwalkan
+- prioritas
+- penjadwal yang ditugaskan untuk pod itu
+- nama dari sumber daya (misalnya, `cpu`)
+- satuan dari sumber daya jika diketahui (misalnya, `cores`)
+
+Setelah pod selesai (memiliki `restartPolicy` `Never` atau `OnFailure` dan berada dalam fase pod `Succeeded` atau `Failed`, atau telah dihapus dan semua kontainer dalam keadaan Terminated) deret metrik tidak lagi dilaporkan karena penjadwal sekarang sudah dibebaskan untuk menjadwalkan pod lain untuk dijalankan. Metrik yang dibahas pada bagian ini dikenal sebagai `kube_pod_resource_request` dan` kube_pod_resource_limit`.
+
+Metrik diekspos melalui _endpoint_ HTTP `/metrics/resources` dan memerlukan otorisasi yang sama seperti endpoint `/metrics`
+pada penjadwal. Kamu harus menggunakan opsi `--show-hidden-metrics-for-version=1.20` untuk mengekspos metrik-metrik stabilitas alfa ini.
+
+## {{% heading "whatsnext" %}}
+
+* Baca tentang [format teks Prometheus](https://github.com/prometheus/docs/blob/master/content/docs/instrumenting/exposition_formats.md#text-based-format) untuk berbagai metrik
+* Baca tentang [kebijakan _deprecation_ Kubernetes](/docs/reference/using-api/deprecation-policy/#deprecating-a-feature-or-behavior)

From 56857688479eb32d7d8cc834c586f6826b06b5c6 Mon Sep 17 00:00:00 2001
From: Anynou <62398733+Anynou@users.noreply.github.com>
Date: Thu, 25 Mar 2021 09:13:29 +0100
Subject: [PATCH 305/788] [es] Add
 content/es/docs/concepts/configuration/manage-resources-containers.md
 (#25920)

* content/es/docs/concepts/configuration/manage-resources-containers.md

* Apply review comment

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Apply suggestions

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Rael Garcia <rael@rael.io>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/configuration/manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update manage-resources-containers.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>
Co-authored-by: Rael Garcia <rael@rael.io>
---
 .../manage-resources-containers.md            | 757 ++++++++++++++++++
 1 file changed, 757 insertions(+)
 create mode 100644 content/es/docs/concepts/configuration/manage-resources-containers.md

diff --git a/content/es/docs/concepts/configuration/manage-resources-containers.md b/content/es/docs/concepts/configuration/manage-resources-containers.md
new file mode 100644
index 0000000000..f936b9107e
--- /dev/null
+++ b/content/es/docs/concepts/configuration/manage-resources-containers.md
@@ -0,0 +1,757 @@
+---
+title: Administrando los recursos de los contenedores
+content_type: concept
+weight: 40
+feature:
+  title: Bin packing automático
+  description: >
+    Coloca los contenedores automáticamente en base a los recursos solicitados y otras limitaciones, mientras no se afecte la
+    disponibilidad. Combina cargas críticas y best-effort para mejorar el uso y ahorrar recursos.
+---
+
+<!-- overview -->
+
+Cuando especificas un {{< glossary_tooltip term_id="pod" >}}, opcionalmente puedes especificar
+los recursos que necesita un {{< glossary_tooltip text="Contenedor" term_id="container" >}}.
+Los recursos que normalmente se definen son CPU y memoria (RAM);  pero hay otros.
+
+Cuando especificas el recurso _request_  para  Contenedores en un {{< glossary_tooltip term_id="pod" >}}, 
+el {{< glossary_tooltip text="Scheduler de Kubernetes " term_id="kube-scheduler" >}} usa esta información para decidir en qué nodo colocar el {{< glossary_tooltip term_id="pod" >}}.
+Cuando especificas el recurso _limit_ para un Contenedor, Kubelet impone estos límites, así que el contenedor no
+puede utilizar más recursos que el límite que le definimos. Kubelet también reserva al menos la cantidad
+especificada en _request_ para el contenedor.
+
+
+
+
+<!-- body -->
+
+## Peticiones y límites
+
+Si el nodo donde está corriendo un pod tiene suficientes recursos disponibles, es posible 
+(y válido) que el {{< glossary_tooltip text="contenedor" term_id="container" >}} utilice más recursos de los especificados en `request`.
+Sin embargo, un {{< glossary_tooltip text="contenedor" term_id="container" >}} no está autorizado a utilizar más de lo especificado en `limit`.
+
+Por ejemplo, si configuras una petición de `memory` de 256 MiB  para un {{< glossary_tooltip text="contenedor" term_id="container" >}}, y ese contenedor está
+en un {{< glossary_tooltip term_id="pod" >}} colocado en un nodo con 8GiB de memoria y no hay otros {{< glossary_tooltip term_id="pod" >}}, entonces el contenedor puede intentar usar
+más RAM.
+
+Si configuras un límite de `memory` de 4GiB  para el contenedor, {{< glossary_tooltip text="kubelet" term_id="kubelet" >}})
+ (y
+{{< glossary_tooltip text="motor de ejecución del contenedor" term_id="container-runtime" >}})  impone el límite.
+El Runtime evita que el {{< glossary_tooltip text="contenedor" term_id="container" >}} use más recursos de los configurados en el límite. Por ejemplo: 
+cuando un proceso en el {{< glossary_tooltip text="contenedor" term_id="container" >}} intenta consumir más cantidad de memoria de la permitida,
+el Kernel del sistema termina el proceso que intentó la utilización de la memoria, con un error de out of memory (OOM).
+
+Los límites se pueden implementar de forma reactiva (el sistema interviene cuando ve la violación)
+o por imposición (el sistema previene al contenedor de exceder el límite). Diferentes Runtimes pueden tener distintas
+implementaciones a las mismas restricciones.
+
+{{< note >}}
+Si un contenedor especifica su propio límite de memoria, pero no especifica la petición de memoria, Kubernetes
+automáticamente asigna una petición de memoria igual a la del límite. De igual manera, si un contenedor especifica su propio límite de CPU, pero no especifica una petición de CPU, Kubernetes automáticamente asigna una petición de CPU igual a la especificada en el límite.
+{{< /note >}}
+
+## Tipos de recursos
+
+*CPU* y *memoria* son cada uno un *tipo de recurso*. Un tipo de recurso tiene una unidad base.
+CPU representa procesos de computación y es especificada en unidades de [Kubernetes CPUs](#meaning-of-cpu).
+Memoria es especificada en unidades de bytes.
+Si estás usando Kubernetes v1.14 o posterior, puedes especificar recursos _huge page_.
+Huge pages son una característica de Linux específica donde el kernel del nodo asigna bloques
+de memoria que son más grandes que el tamaño de paginación por defecto.
+
+Por ejemplo, en un sistema donde el tamaño de paginación por defecto es de 4KiB, podrías
+especificar un límite, `hugepages-2Mi: 80Mi`. Si el contenedor intenta asignar
+ más de 40 2MiB huge pages (un total de 80 MiB), la asignación fallará.
+
+{{< note >}}
+No se pueden sobreasignar recursos `hugepages-*`.
+A diferencia de los recursos de `memoria` y `cpu`.
+{{< /note >}}
+
+CPU y memoria son colectivamente conocidos como *recursos de computación*,  o simplemente como 
+*recursos*.  Los recursos de computación son cantidades medibles que pueden ser solicitadas, asignadas
+y consumidas. Son distintas a los [Recursos API](/docs/concepts/overview/kubernetes-api/). Los recursos API , como {{< glossary_tooltip text="Pods" term_id="pod" >}} y 
+[Services](/docs/concepts/services-networking/service/) son objetos que pueden ser leídos y modificados
+a través de la API de Kubernetes.
+
+## Peticiones y límites de recursos de Pods y Contenedores
+
+Cada contenedor de un Pod puede especificar uno o más de los siguientes:
+
+* `spec.containers[].resources.limits.cpu`
+* `spec.containers[].resources.limits.memory`
+* `spec.containers[].resources.limits.hugepages-<size>`
+* `spec.containers[].resources.requests.cpu`
+* `spec.containers[].resources.requests.memory`
+* `spec.containers[].resources.requests.hugepages-<size>`
+
+Aunque las peticiones y límites pueden ser especificadas solo en contenedores individuales, es conveniente hablar
+sobre los recursos de peticiones y límites del Pod. Un *limite/petición
+ de recursos de un Pod* para un tipo de recurso particular es la suma de
+peticiones/límites de cada tipo para cada contenedor del Pod.
+
+## Unidades de recursos en Kubernetes
+
+### Significado de CPU
+
+Límites y peticiones para recursos de CPU son medidos en unidades de *cpu*.
+Una cpu, en Kubernetes, es equivalente a **1 vCPU/Core**  para proveedores de cloud y **1 hyperthread** en procesadores bare-metal Intel.
+
+Las peticiones fraccionadas están permitidas. Un contenedor con `spec.containers[].resources.requests.cpu` de `0.5` tiene garantizada la mitad, tanto
+CPU como otro que requiere 1 CPU. La expresión `0.1` es equivalente a la expresión `100m`, que puede ser leída como "cien millicpus". Algunas personas dicen
+"cienmilicores", y se entiende que quiere decir lo mismo. Una solicitud con un punto decimal, como `0.1`,  es convertido a `100m` por la API, y no se permite
+ una precisión mayor que `1m`. Por esta razón, la forma `100m` es la preferente.
+CPU es siempre solicitada como una cantidad absoluta, nunca como una cantidad relativa;
+0.1 es la misma cantidad de cpu que un core-simple, dual-core, o máquina de 48-core.
+
+### Significado de memoria
+
+Los límites y peticiones de `memoria` son medidos en bytes. Puedes expresar la memoria como
+un número entero o como un número decimal usando alguno de estos sufijos:
+E, P, T, G, M, K. También puedes usar los equivalentes en potencia de dos: Ei, Pi, Ti, Gi,
+Mi, Ki. Por ejemplo, los siguientes valores representan lo mismo:
+
+```shell
+128974848, 129e6, 129M, 123Mi
+```
+
+Aquí un ejemplo.
+El siguiente {{< glossary_tooltip text="Pod" term_id="pod" >}} tiene dos contenedores. Cada contenedor tiene una petición de 0.25 cpu
+y 64MiB (2<sup>26</sup> bytes) de memoria. Cada contenedor tiene un límite de 0.5 cpu
+y 128MiB de memoria. Puedes decirle al Pod que solicite 0.5 cpu y 128MiB de memoria 
+y un límite de 1 cpu y 256MiB de memoria.
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: frontend
+spec:
+  containers:
+  - name: app
+    image: images.my-company.example/app:v4
+    resources:
+      requests:
+        memory: "64Mi"
+        cpu: "250m"
+      limits:
+        memory: "128Mi"
+        cpu: "500m"
+  - name: log-aggregator
+    image: images.my-company.example/log-aggregator:v6
+    resources:
+      requests:
+        memory: "64Mi"
+        cpu: "250m"
+      limits:
+        memory: "128Mi"
+        cpu: "500m"
+```
+
+## Cómo son programados los Pods con solicitudes de recursos
+
+Cuando creas un {{< glossary_tooltip text="Pod" term_id="pod" >}}, el  {{< glossary_tooltip text="planificador de Kubernetes " term_id="kube-scheduler" >}} determina el nodo para correr dicho {{< glossary_tooltip text="Pod" term_id="pod" >}}.
+Cada nodo tiene una capacidad máxima para cada tipo de recurso:
+la cantidad de CPU y memoria que dispone para los Pods. El {{< glossary_tooltip text="planificador de Kubernetes" term_id="kube-scheduler" >}} se asegura de que,
+ para cada tipo de recurso, la suma de los recursos solicitados de los contenedores programados sea menor a la capacidad del nodo. Cabe mencionar que aunque la memoria actual o CPU
+en uso de los nodos sea muy baja, el {{< glossary_tooltip text="planificador" term_id="kube-scheduler" >}} todavía rechaza programar un {{< glossary_tooltip text="Pod" term_id="pod" >}} en un nodo si
+la comprobación de capacidad falla. Esto protege contra escasez de recursos en un nodo
+cuando el uso de recursos posterior crece, por ejemplo, durante un pico diario de
+solicitud de  recursos.
+
+## Cómo corren los Pods con límites de recursos
+
+Cuando el {{< glossary_tooltip text="kubelet" term_id="kubelet" >}} inicia un {{< glossary_tooltip text="contenedor" term_id="container" >}} de un {{< glossary_tooltip text="Pod" term_id="pod" >}}, este pasa los límites de CPU y
+memoria al {{< glossary_tooltip text="runtime del contenedor" term_id="container-runtime" >}}.
+
+Cuando usas Docker:
+
+- El `spec.containers[].resources.requests.cpu` es convertido a su valor interno,
+  el cuál es fraccional, y multiplicado por 1024. El mayor valor de este número o
+  2 es usado por el valor de 
+  [`--cpu-shares`](https://docs.docker.com/engine/reference/run/#cpu-share-constraint)
+  en el comando `docker run`.
+
+- El `spec.containers[].resources.limits.cpu` se convierte a su valor en milicore y 
+  multiplicado por 100. El resultado es el tiempo total de CPU que un contenedor puede usar
+  cada 100ms. Un contenedor no puede usar más tiempo de CPU que del solicitado durante este intervalo.
+
+  {{< note >}}
+  El período por defecto es de 100ms. La resolución mínima de cuota mínima es 1ms.
+  {{</ note >}}
+
+- El `spec.containers[].resources.limits.memory` se convierte a entero, y 
+  se usa como valor de 
+  [`--memory`](https://docs.docker.com/engine/reference/run/#/user-memory-constraints)
+  del comando  `docker run`.
+
+Si el {{< glossary_tooltip text="contenedor" term_id="container" >}} excede su límite de memoria, este quizá se detenga. Si es reiniciable,
+el {{< glossary_tooltip text="kubelet" term_id="kubelet" >}} lo reiniciará, así como cualquier otro error.
+
+Si un Contenedor excede su petición de memoria, es probable que ese Pod sea
+desalojado en cualquier momento que el nodo se quede sin memoria.
+
+Un Contenedor puede o no tener permitido exceder el límite de CPU por
+algunos períodos de tiempo. Sin embargo, esto no lo destruirá por uso excesivo de CPU.
+
+Para conocer cuando un Contenedor no puede ser programado o será destruido debido a 
+límite de recursos, revisa la sección de [Troubleshooting](#troubleshooting).
+
+### Monitorización del uso de recursos de computación y memoria.
+
+El uso de recursos de un Pod es reportado como parte del estado del Pod.
+
+Si [herramientas opcionales para monitorización](/docs/tasks/debug-application-cluster/resource-usage-monitoring/)
+están disponibles en tu cluster, entonces el uso de recursos del Pod puede extraerse directamente de
+[Métricas API](/docs/tasks/debug-application-cluster/resource-metrics-pipeline/#the-metrics-api)
+o desde tus herramientas de monitorización.
+
+## Almacenamiento local efímero
+
+<!-- feature gate LocalStorageCapacityIsolation -->
+{{< feature-state for_k8s_version="v1.10" state="beta" >}}
+
+Los nodos tienen almacenamiento local efímero, respaldado por
+dispositivos de escritura agregados o, a veces, por RAM.
+"Efímero" significa que no se garantiza la durabilidad a largo plazo.
+.
+Los Pods usan el almacenamiento local efímero para añadir espacio, caché, y para logs.
+Kubelet puede proveer espacio añadido a los Pods usando almacenamiento local efímero para
+montar [`emptyDir`](/docs/concepts/storage/volumes/#emptydir)
+ {{< glossary_tooltip term_id="volume" text="volumes" >}} en los contenedores.
+
+Kubelet también usa este tipo de almacenamiento para guardar
+[logs de contenedores a nivel de nodo](/docs/concepts/cluster-administration/logging/#logging-at-the-node-level),
+imágenes de contenedores, y la capa de escritura de los contenedores.
+
+{{< caution >}}
+Si un nodo falla, los datos en el almacenamiento efímero se pueden perder.
+Tus aplicaciones no pueden esperar ningun SLA (IOPS de disco, por ejemplo)
+del almacenamiento local efímero.
+{{< /caution >}}
+
+Como característica beta, Kubernetes te deja probar, reservar y limitar la cantidad
+de almacenamiento local efímero que un Pod puede consumir.
+
+### Configuraciones para almacenamiento local efímero
+
+Kubernetes soporta 2 maneras de configurar el almacenamiento local efímero en un nodo:
+{{< tabs name="local_storage_configurations" >}}
+{{% tab name="Single filesystem" %}}
+En esta configuración, colocas todos los tipos de datos (`emptyDir` volúmenes, capa de escritura,
+imágenes de contenedores, logs) en un solo sistema de ficheros.
+La manera más efectiva de configurar Kubelet es dedicando este sistema de archivos para los datos de Kubernetes (kubelet).
+
+Kubelet también escribe 
+[logs de contenedores a nivel de nodo](/docs/concepts/cluster-administration/logging/#logging-at-the-node-level)
+y trata estos de manera similar al almacenamiento efímero.
+
+Kubelet escribe logs en ficheros dentro del directorio de logs (por defecto `/var/log`
+); y tiene un directorio base para otros datos almacenados localmente
+(`/var/lib/kubelet` por defecto).
+
+Por lo general, `/var/lib/kubelet` y `/var/log`  están en el sistema de archivos de root,
+y Kubelet es diseñado con ese objetivo en mente.
+
+Tu nodo puede tener tantos otros sistema de archivos, no usados por Kubernetes,
+como quieras.
+{{% /tab %}}
+{{% tab name="Two filesystems" %}}
+Tienes un sistema de archivos en el nodo que estás usando para datos efímeros que
+provienen de los Pods corriendo: logs, y volúmenes `emptyDir`.
+Puedes usar este sistema de archivos para otros datos (por ejemplo: logs del sistema no relacionados
+ con Kubernetes); estos pueden ser incluso del sistema de archivos root.
+
+Kubelet también escribe
+[logs de contenedores a nivel de nodo](/docs/concepts/cluster-administration/logging/#logging-at-the-node-level)
+en el primer sistema de archivos, y trata estos de manera similar al almacenamiento efímero.
+
+También usas un sistema de archivos distinto, respaldado por un dispositivo de almacenamiento lógico diferente.
+En esta configuración, el directorio donde le dices a Kubelet que coloque
+las capas de imágenes de los contenedores y capas de escritura es este segundo sistema de archivos.
+
+El primer sistema de archivos no guarda ninguna capa de imágenes o de escritura.
+
+Tu nodo puede tener tantos sistemas de archivos, no usados por Kubernetes, como quieras.
+{{% /tab %}}
+{{< /tabs >}}
+
+Kubelet puede medir la cantidad de almacenamiento local que se está usando. Esto es posible por:
+
+- el `LocalStorageCapacityIsolation`
+  [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+  está habilitado (esta caracterísitca está habilitada por defecto), y
+- has configurado el nodo usando una de las configuraciones soportadas
+  para almacenamiento local efímero..
+
+Si tienes una configuración diferente, entonces Kubelet no aplica límites de recursos
+para almacenamiento local efímero.
+
+{{< note >}}
+Kubelet rastrea `tmpfs` volúmenes emptyDir como uso de memoria de contenedor, en lugar de
+almacenamiento local efímero.
+{{< /note >}}
+
+### Configurando solicitudes y límites para almacenamiento local efímero
+
+Puedes usar _ephemeral-storage_ para manejar almacenamiento local efímero. Cada contenedor de un Pod puede especificar
+uno o más de los siguientes:
+
+* `spec.containers[].resources.limits.ephemeral-storage`
+* `spec.containers[].resources.requests.ephemeral-storage`
+
+Los límites y solicitudes para `almacenamiento-efímero` son medidos en bytes. Puedes expresar el almacenamiento 
+como un numero entero o flotante usando los siguientes sufijos:
+E, P, T, G, M, K. También puedes usar las siguientes equivalencias: Ei, Pi, Ti, Gi,
+Mi, Ki. Por ejemplo, los siguientes representan el mismo valor:
+
+```shell
+128974848, 129e6, 129M, 123Mi
+```
+
+En el siguiente ejemplo, el Pod tiene dos contenedores. Cada contenedor tiene una petición de 2GiB de almacenamiento local efímero. Cada
+contenedor tiene un límite de 4GiB de almacenamiento local efímero. Sin embargo, el Pod tiene una petición de 4GiB de almacenamiento efímero
+, y un límite de 8GiB de almacenamiento local efímero.
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: frontend
+spec:
+  containers:
+  - name: app
+    image: images.my-company.example/app:v4
+    resources:
+      requests:
+        ephemeral-storage: "2Gi"
+      limits:
+        ephemeral-storage: "4Gi"
+  - name: log-aggregator
+    image: images.my-company.example/log-aggregator:v6
+    resources:
+      requests:
+        ephemeral-storage: "2Gi"
+      limits:
+        ephemeral-storage: "4Gi"
+```
+
+### Como son programados los Pods con solicitudes de almacenamiento efímero
+
+Cuando creas un Pod, el planificador de Kubernetes selecciona un nodo para el Pod donde sera creado.
+Cada nodo tiene una cantidad máxima de almacenamiento local efímero que puede proveer a los Pods. Para
+más información, mira [Node Allocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable).
+
+El planificador se asegura de que el total de los recursos solicitados para los contenedores sea menor que la capacidad del nodo.
+
+### Manejo del consumo de almacenamiento efímero {#resource-emphemeralstorage-consumption}
+
+Si Kubelet está manejando el almacenamiento efímero local como un recurso, entonces
+Kubelet mide el uso de almacenamiento en:
+
+- volúmenes `emptyDir`, excepto _tmpfs_  volúmenes`emptyDir` 
+- directorios que guardan logs de nivel de nodo
+- capas de escritura de contenedores
+
+Si un Pod está usando más almacenamiento efímero que el permitido, Kubelet
+establece una señal de desalojo que desencadena el desalojo del Pod.
+
+Para aislamiento a nivel de contenedor, si una capa de escritura del contenedor y 
+logs excede el límite de uso del almacenamiento, Kubelet marca el Pod para desalojo.
+
+Para aislamiento a nivel de Pod, Kubelet calcula un límite de almacenamiento 
+general para el Pod sumando los límites de los contenedores de ese Pod.
+En este caso, si la suma del uso de almacenamiento local efímero para todos los contenedores
+y los volúmenes `emptyDir` de los Pods excede el límite de almacenamiento general del
+Pod, Kubelet marca el Pod para desalojo.
+
+{{< caution >}}
+Si Kubelet no está midiendo el almacenamiento local efímero, entonces el Pod
+que excede este límite de almacenamiento, no será desalojado para liberar 
+el límite del recurso de almacenamiento.
+
+Sin embargo, si el espacio del sistema de archivos para la capa de escritura del contenedor,
+logs a nivel de nodo o volúmenes `emptyDir` decae, el 
+{{< glossary_tooltip text="taints" term_id="taint" >}}  del nodo lanza la desalojo para 
+cualquier Pod que no tolere dicho taint. 
+
+Mira las [configuraciones soportadas](#configurations-for-local-ephemeral-storage)
+para almacenamiento local efímero.
+{{< /caution >}}
+
+Kubelet soporta diferentes maneras de medir el uso de almacenamiento del Pod:
+
+
+{{< tabs name="resource-emphemeralstorage-measurement" >}}
+{{% tab name="Periodic scanning" %}}
+Kubelet realiza frecuentemente, verificaciones programadas que revisan cada
+volumen `emptyDir`, directorio de logs del contenedor, y capa de escritura
+del contenedor.
+
+El escáner mide cuanto espacio está en uso.
+
+{{< note >}}
+En este modo, Kubelet no rastrea descriptores de archivos abiertos 
+para archivos eliminados.
+
+Si tú (o un contenedor) creas un archivo dentro de un volumen `emptyDir`,
+y algo mas abre ese archivo, y tú lo borras mientras este está abierto,
+entonces el inodo para este archivo borrado se mantiene hasta que cierras
+el archivo, pero Kubelet no cataloga este espacio como en uso.
+{{< /note >}}
+{{% /tab %}}
+{{% tab name="Filesystem project quota" %}}
+
+{{< feature-state for_k8s_version="v1.15" state="alpha" >}}
+
+Las cuotas de proyecto están definidas a nivel de sistema operativo
+para el manejo de uso de almacenamiento en uso de sistema de archivos.
+Con Kubernetes, puedes habilitar las cuotas de proyecto para el uso
+de la monitorización del almacenamiento. Asegúrate que el respaldo del
+Sistema de archivos de los volúmenes `emptyDir` , en el nodo, provee soporte de
+cuotas de proyecto.
+Por ejemplo, XFS y ext4fs ofrecen cuotas de proyecto.
+
+{{< note >}}
+Las cuotas de proyecto te permiten monitorear el uso del almacenamiento; no 
+fuerzan los límites.
+{{< /note >}}
+
+Kubernetes usa IDs de proyecto empezando por `1048576`. Los IDs en uso
+son registrados en `/etc/projects` y `/etc/projid`. Si los IDs de proyecto
+en este rango son usados para otros propósitos en el sistema, esos IDs 
+de proyecto deben ser registrados en `/etc/projects` y `/etc/projid` para 
+que Kubernetes no los use.
+
+Las cuotas son más rápidas y más precisas que el escáner de directorios. 
+Cuando un directorio es asignado a un proyecto, todos los ficheros creados 
+bajo un directorio son creados en ese proyecto, y el kernel simplemente
+tiene que mantener rastreados cuántos bloques están en uso por ficheros
+en ese proyecto. Si un fichero es creado y borrado, pero tiene un fichero abierto,
+continúa consumiendo espacio. El seguimiento de cuotas registra ese espacio 
+con precisión mientras que los escaneos de directorios pasan por alto 
+el almacenamiento utilizado por los archivos eliminados
+ 
+Si quieres usar cuotas de proyecto, debes:
+
+* Habilitar el `LocalStorageCapacityIsolationFSQuotaMonitoring=true`
+  [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+  en la configuración del kubelet.
+
+* Asegúrese de que el sistema de archivos raíz (o el sistema de archivos en tiempo de ejecución opcional)
+  tiene las cuotas de proyectos habilitadas. Todos los sistemas de archivos XFS admiten cuotas de proyectos.
+  Para los sistemas de archivos ext4, debe habilitar la función de seguimiento de cuotas del proyecto
+  mientras el sistema de archivos no está montado.
+
+  ```bash
+  # For ext4, with /dev/block-device not mounted
+  sudo tune2fs -O project -Q prjquota /dev/block-device
+  ```
+
+* Asegúrese de que el sistema de archivos raíz (o el sistema de archivos de tiempo de ejecución opcional) esté
+  montado con cuotas de proyecto habilitadas. Tanto para XFS como para ext4fs, la opción de montaje 
+  se llama `prjquota`.
+
+{{% /tab %}}
+{{< /tabs >}}
+
+## Recursos extendidos
+
+Los recursos extendidos son nombres de recursos calificados fuera del
+dominio `kubernetes.io`. Permiten que los operadores de clústers publiciten y los usuarios
+consuman los recursos no integrados de Kubernetes.
+
+Hay dos pasos necesarios para utilizar los recursos extendidos. Primero, el operador del clúster
+debe anunciar un Recurso Extendido. En segundo lugar, los usuarios deben solicitar
+el Recurso Extendido en los Pods.
+
+### Manejando recursos extendidos
+
+#### Recursos extendido a nivel de nodo
+
+Los recursos extendidos a nivel de nodo están vinculados a los nodos
+
+##### Device plugin managed resources
+Mira [Plugins de
+Dispositivos](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
+para percibir como los plugins de dispositivos manejan los recursos
+en cada nodo.
+
+##### Otros recursos
+
+Para anunciar un nuevo recurso extendido a nivel de nodo, el operador del clúster puede
+enviar una solicitud HTTP `PATCH` al servidor API para especificar la cantidad 
+disponible en el `status.capacity` para un nodo en el clúster. Después de esta
+operación, el `status.capacity` del nodo incluirá un nuevo recurso. El campo 
+`status.allocatable` se actualiza automáticamente con el nuevo recurso
+de forma asíncrona por el {{< glossary_tooltip text="kubelet" term_id="kubelet" >}}. Tenga en cuenta que debido a que el {{< glossary_tooltip text="planificador" term_id="kube-scheduler" >}}
+utiliza el valor de `status.allocatable` del nodo cuando evalúa la aptitud del {{< glossary_tooltip text="Pod" term_id="pod" >}}, puede haber un breve
+retraso entre parchear la capacidad del nodo con un nuevo recurso y el primer Pod
+que solicita el recurso en ese nodo.
+
+**Ejemplo:**
+
+Aquí hay un ejemplo que muestra cómo usar `curl` para formar una solicitud HTTP que
+anuncia cinco recursos "example.com/foo" en el nodo `k8s-node-1` cuyo nodo master
+es `k8s-master`.
+
+```shell
+curl --header "Content-Type: application/json-patch+json" \
+--request PATCH \
+--data '[{"op": "add", "path": "/status/capacity/example.com~1foo", "value": "5"}]' \
+http://k8s-master:8080/api/v1/nodes/k8s-node-1/status
+```
+
+{{< note >}}
+En la solicitud anterior, `~ 1` es la codificación del carácter` / `
+en la ruta del parche. El valor de la ruta de operación en JSON-Patch se interpreta como un
+puntero JSON. Para obtener más detalles, consulte
+[IETF RFC 6901, sección 3](https://tools.ietf.org/html/rfc6901#section-3).
+{{< /note >}}
+
+#### Recursos extendidos a nivel de Clúster
+
+Los recursos extendidos a nivel de clúster no están vinculados a los nodos. Suelen estar gestionados
+por extensores del scheduler, que manejan el consumo de recursos y la cuota de recursos.
+
+Puedes especificar los recursos extendidos que son mantenidos por los extensores del scheduler en
+[configuración de políticas del scheduler](https://github.com/kubernetes/kubernetes/blob/release-1.10/pkg/scheduler/api/v1/types.go#L31).
+
+**Ejemplo:**
+
+La siguiente configuración para una política del scheduler indica que el
+recurso extendido a nivel de clúster "example.com/foo" es mantenido 
+por el extensor del scheduler.
+
+- El scheduler envía un Pod al extensor del scheduler solo si la solicitud del Pod "example.com/foo".
+- El campo `ignoredByScheduler` especifica que el schduler no compruba el recurso
+  "example.com/foo"  en su predicado `PodFitsResources`.
+
+```json
+{
+  "kind": "Policy",
+  "apiVersion": "v1",
+  "extenders": [
+    {
+      "urlPrefix":"<extender-endpoint>",
+      "bindVerb": "bind",
+      "managedResources": [
+        {
+          "name": "example.com/foo",
+          "ignoredByScheduler": true
+        }
+      ]
+    }
+  ]
+}
+```
+
+### Consumiendo recursos extendidos
+
+Los usuarios pueden consumir recursos extendidos en las especificaciones del Pod, como la CPU y la memoria.
+El {{< glossary_tooltip text="planificador" term_id="kube-scheduler" >}} se encarga de la contabilidad de recursos para que no más de
+la cantidad disponible sea asignada simultáneamente a los Pods.
+
+El servidor de API restringe las cantidades de recursos extendidos a números enteros.
+Ejemplos de cantidades _validas_ son `3`,` 3000m` y `3Ki`. Ejemplos de
+_cantidades no válidas_ son `0.5` y` 1500m`.
+
+{{< note >}}
+Los recursos extendidos reemplazan los Recursos Integrales Opacos.
+Los usuarios pueden usar cualquier otro prefijo de dominio que `kubernetes.io`
+tenga reservado.
+{{< /note >}}
+
+Para consumir un recurso extendido en un Pod, incluye un nombre de recurso
+como clave en `spec.containers[].resources.limits` en las especificaciones del contenedor.
+
+{{< note >}}
+Los Recursos Extendidos no pueden ser sobreescritos, así que solicitudes y límites
+deben ser iguales si ambos están presentes en las especificaciones de un contenedor.
+{{< /note >}}
+
+Un pod se programa solo si se satisfacen todas las solicitudes de recursos, incluidas
+CPU, memoria y cualquier recurso extendido. El {{< glossary_tooltip text="Pod" term_id="pod" >}} permanece en estado `PENDING`
+siempre que no se pueda satisfacer la solicitud de recursos.
+
+**Ejemplo:**
+
+El siguiente {{< glossary_tooltip text="Pod" term_id="pod" >}} solicita 2CPUs y 1 "example.com/foo" (un recurso extendido).
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: my-pod
+spec:
+  containers:
+  - name: my-container
+    image: myimage
+    resources:
+      requests:
+        cpu: 2
+        example.com/foo: 1
+      limits:
+        example.com/foo: 1
+```
+
+## Solución de problemas
+
+### Mis Pods están en estado pendiente con un mensaje de failedScheduling
+
+Si el {{< glossary_tooltip text="planificador" term_id="kube-scheduler" >}} no puede encontrar ningún nodo donde pueda colocar un {{< glossary_tooltip text="Pod" term_id="pod" >}}, el {{< glossary_tooltip text="Pod" term_id="pod" >}} permanece
+no programado hasta que se pueda encontrar un lugar. Se produce un evento cada vez que
+el {{< glossary_tooltip text="planificador" term_id="kube-scheduler" >}} no encuentra un lugar para el {{< glossary_tooltip text="Pod" term_id="pod" >}}, como este:
+
+```shell
+kubectl describe pod frontend | grep -A 3 Events
+```
+```
+Events:
+  FirstSeen LastSeen   Count  From          Subobject   PathReason      Message
+  36s   5s     6      {scheduler }              FailedScheduling  Failed for reason PodExceedsFreeCPU and possibly others
+```
+En el ejemplo anterior, el Pod llamado "frontend" no se puede programar debido a
+recursos de CPU insuficientes en el nodo. Mensajes de error similares también pueden sugerir
+fallo debido a memoria insuficiente (PodExceedsFreeMemory). En general, si un Pod
+está pendiente con un mensaje de este tipo, hay varias cosas para probar:
+
+- Añadir más nodos al clúster.
+- Terminar Pods innecesarios para hacer hueco a los Pods en estado pendiente.
+- Compruebe que el Pod no sea más grande que todos los nodos. Por ejemplo, si todos los
+  los nodos tienen una capacidad de `cpu: 1`, entonces un Pod con una solicitud de` cpu: 1.1`
+  nunca se programará.
+
+Puedes comprobar las capacidades del nodo y cantidad utilizada con el comando 
+`kubectl describe nodes`. Por ejemplo:
+
+```shell
+kubectl describe nodes e2e-test-node-pool-4lw4
+```
+```
+Name:            e2e-test-node-pool-4lw4
+[ ... lines removed for clarity ...]
+Capacity:
+ cpu:                               2
+ memory:                            7679792Ki
+ pods:                              110
+Allocatable:
+ cpu:                               1800m
+ memory:                            7474992Ki
+ pods:                              110
+[ ... lines removed for clarity ...]
+Non-terminated Pods:        (5 in total)
+  Namespace    Name                                  CPU Requests  CPU Limits  Memory Requests  Memory Limits
+  ---------    ----                                  ------------  ----------  ---------------  -------------
+  kube-system  fluentd-gcp-v1.38-28bv1               100m (5%)     0 (0%)      200Mi (2%)       200Mi (2%)
+  kube-system  kube-dns-3297075139-61lj3             260m (13%)    0 (0%)      100Mi (1%)       170Mi (2%)
+  kube-system  kube-proxy-e2e-test-...               100m (5%)     0 (0%)      0 (0%)           0 (0%)
+  kube-system  monitoring-influxdb-grafana-v4-z1m12  200m (10%)    200m (10%)  600Mi (8%)       600Mi (8%)
+  kube-system  node-problem-detector-v0.1-fj7m3      20m (1%)      200m (10%)  20Mi (0%)        100Mi (1%)
+Allocated resources:
+  (Total limits may be over 100 percent, i.e., overcommitted.)
+  CPU Requests    CPU Limits    Memory Requests    Memory Limits
+  ------------    ----------    ---------------    -------------
+  680m (34%)      400m (20%)    920Mi (11%)        1070Mi (13%)
+```
+
+EN la salida anterior, puedes ver si una solicitud de Pod mayor que 1120m
+CPUs o 6.23Gi de memoria, no cabrán en el nodo.
+
+Echando un vistazo a la sección `Pods`, puedes ver qué Pods están ocupando espacio
+en el nodo.
+
+La cantidad de recursos disponibles para los pods es menor que la capacidad del nodo, porque
+los demonios del sistema utilizan una parte de los recursos disponibles. El campo `allocatable`
+[NodeStatus](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#nodestatus-v1-core)
+indica la cantidad de recursos que están disponibles para los Pods. Para más información, mira 
+[Node Allocatable Resources](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md).
+
+La característica [resource quota](/docs/concepts/policy/resource-quotas/) se puede configurar
+para limitar la cantidad total de recursos que se pueden consumir. Si se usa en conjunto
+con espacios de nombres, puede evitar que un equipo acapare todos los recursos.
+
+### Mi contenedor está terminado
+
+Es posible que su contenedor se cancele porque carece de recursos. Para verificar
+si un contenedor está siendo eliminado porque está alcanzando un límite de recursos, ejecute
+`kubectl describe pod` en el Pod de interés:
+
+```shell
+kubectl describe pod simmemleak-hra99
+```
+```
+Name:                           simmemleak-hra99
+Namespace:                      default
+Image(s):                       saadali/simmemleak
+Node:                           kubernetes-node-tf0f/10.240.216.66
+Labels:                         name=simmemleak
+Status:                         Running
+Reason:
+Message:
+IP:                             10.244.2.75
+Replication Controllers:        simmemleak (1/1 replicas created)
+Containers:
+  simmemleak:
+    Image:  saadali/simmemleak
+    Limits:
+      cpu:                      100m
+      memory:                   50Mi
+    State:                      Running
+      Started:                  Tue, 07 Jul 2015 12:54:41 -0700
+    Last Termination State:     Terminated
+      Exit Code:                1
+      Started:                  Fri, 07 Jul 2015 12:54:30 -0700
+      Finished:                 Fri, 07 Jul 2015 12:54:33 -0700
+    Ready:                      False
+    Restart Count:              5
+Conditions:
+  Type      Status
+  Ready     False
+Events:
+  FirstSeen                         LastSeen                         Count  From                              SubobjectPath                       Reason      Message
+  Tue, 07 Jul 2015 12:53:51 -0700   Tue, 07 Jul 2015 12:53:51 -0700  1      {scheduler }                                                          scheduled   Successfully assigned simmemleak-hra99 to kubernetes-node-tf0f
+  Tue, 07 Jul 2015 12:53:51 -0700   Tue, 07 Jul 2015 12:53:51 -0700  1      {kubelet kubernetes-node-tf0f}    implicitly required container POD   pulled      Pod container image "k8s.gcr.io/pause:0.8.0" already present on machine
+  Tue, 07 Jul 2015 12:53:51 -0700   Tue, 07 Jul 2015 12:53:51 -0700  1      {kubelet kubernetes-node-tf0f}    implicitly required container POD   created     Created with docker id 6a41280f516d
+  Tue, 07 Jul 2015 12:53:51 -0700   Tue, 07 Jul 2015 12:53:51 -0700  1      {kubelet kubernetes-node-tf0f}    implicitly required container POD   started     Started with docker id 6a41280f516d
+  Tue, 07 Jul 2015 12:53:51 -0700   Tue, 07 Jul 2015 12:53:51 -0700  1      {kubelet kubernetes-node-tf0f}    spec.containers{simmemleak}         created     Created with docker id 87348f12526a
+```
+
+En el ejemplo anterior, `Restart Count:  5` indica que el contenedor `simmemleak`
+del Pod se reinició cinco veces.
+
+Puedes ejecutar `kubectl get pod` con la opción `-o go-template=...` para extraer el estado 
+previos de los Contenedores terminados:
+
+```shell
+kubectl get pod -o go-template='{{range.status.containerStatuses}}{{"Container Name: "}}{{.name}}{{"\r\nLastState: "}}{{.lastState}}{{end}}'  simmemleak-hra99
+```
+```
+Container Name: simmemleak
+LastState: map[terminated:map[exitCode:137 reason:OOM Killed startedAt:2015-07-07T20:58:43Z finishedAt:2015-07-07T20:58:43Z containerID:docker://0e4095bba1feccdfe7ef9fb6ebffe972b4b14285d5acdec6f0d3ae8a22fad8b2]]
+```
+
+Puedes ver que el Contenedor fué terminado a causa de `reason:OOM Killed`, donde `OOM` indica una falta de memoria.
+
+
+
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+* Obtén experiencia práctica [assigning Memory resources to Containers and Pods](/docs/tasks/configure-pod-container/assign-memory-resource/).
+
+* Obtén experiencia práctica [assigning CPU resources to Containers and Pods](/docs/tasks/configure-pod-container/assign-cpu-resource/).
+
+* Para más detalles sobre la diferencia entre solicitudes y límites, mira
+  [Resource QoS](https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md).
+
+* Lee [Container](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core) referencia de API
+
+* Lee [ResourceRequirements](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#resourcerequirements-v1-core) referencia de API
+
+* Lee sobre [project quotas](https://xfs.org/docs/xfsdocs-xml-dev/XFS_User_Guide/tmp/en-US/html/xfs-quotas.html) en XFS

From 8cf40d5dea28db1719d8becb257b314bcd75aad1 Mon Sep 17 00:00:00 2001
From: BITLIU <mixdeers@gmail.com>
Date: Thu, 25 Mar 2021 20:50:54 +0800
Subject: [PATCH 306/788] Complete Scripts Description

Add 4 new Scripts to README
---
 scripts/README.md | 71 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 71 insertions(+)

diff --git a/scripts/README.md b/scripts/README.md
index e90d65861d..11bb9f4866 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -7,6 +7,10 @@
 | `test_examples.sh`      | This script tests whether a change affects example files bundled in the website.                                                      |
 | `check-headers-file.sh` | This script checks the headers if you are in a production environment.                                                                |
 | `diff_l10n_branches.py` | This script generates a report of outdated contents in `content/<l10n-lang>` directory by comparing two l10n team milestone branches. |
+| `hash-files.sh` | This script emits as hash for the files listed in $@ |
+| `linkchecker.py` | This a link checker for Kubernetes documentation website. |
+| `lsync.sh` | This script checks if the English version of a page has changed since a localized page has been committed. |
+| `replace-capture.sh` | This script sets K8S_WEBSITE in your env to your docs website root or rely on this script to determine it automatically |
 
 
 
@@ -88,3 +92,70 @@ Options:
   --src-lang TEXT  Source language
   --help           Show this message and exit.
 ```
+
+## hash-files.sh
+
+This script emits as hash for the files listed in $@.
+
+      $ ./scripts/hash-files.sh
+    
+## linkchecker.py
+
+This a link checker for Kubernetes documentation website.
+- We cover the following cases for the language you provide via `-l`, which
+  defaults to 'en'.
+- If the language specified is not English (`en`), we check if you are
+  actually using the localized links. For example, if you specify `zh` as
+  the language, and for link target `/docs/foo/bar`, we check if the English
+  version exists AND if the Chinese version exists as well. A checking record
+  is produced if the link can use the localized version.
+
+```
+
+Usage: linkchecker.py -h
+
+Cases handled:
+
+- [foo](#bar)                         : ignored currently
++ [foo](http://bar)                   : insecure links to external site
++ [foo](https://k8s.io/website/...)   : hardcoded site domain name
+
++ [foo](/<lang>/docs/bar/...)  : where <lang> is not 'en'
+  + /<lang>/docs/bar           : contains shortcode, so ignore, or
+  + /<lang>/docs/bar           : is a image link (ignore currently), or
+  + /<lang>/docs/bar           : points to shared (non-localized) page, or
+  + /<lang>/docs/bar.md        : exists for current lang, or
+  + /<lang>/docs/bar/_index.md : exists for current lang, or
+  + /<lang>/docs/bar/          : is a redirect entry, or
+  + /<lang>/docs/bar           : is something we don't understand, then ERR
+
++ [foo](/docs/bar/...)
+  + /docs/bar                : contains shortcode, so ignore, or
+  + /docs/bar                : is a image link (ignore currently), or
+  + /docs/bar                : points to a shared (non-localized) page, or
+  + /docs/bar.md             : exists for current lang, or
+  + /docs/bar/_index.md      : exists for current lang, or
+  + /docs/bar                : is a redirect entry, or
+  + /docs/bar                : is something we don't understand
+
+```
+## lsync.sh
+
+This script checks if the English version of some localized contents have changed 
+since a localized version has been committed.
+
+The following example check a single file:
+
+      ./scripts/lsync.sh content/zh/docs/concepts/_index.md
+
+The following command checks a subdirectory:
+
+      ./scripts/lsync.sh content/zh/docs/concepts/
+
+## replace-capture.sh
+
+This script sets K8S_WEBSITE in your env to your docs website root or rely on this script to determine it automatically
+
+You must run the script inside the repository for that to work
+
+    $ ./scripts/replace-capture.sh

From 4538d24527d31d9a28a3202c4e6567826d874df2 Mon Sep 17 00:00:00 2001
From: translucens <mail@w-st.com>
Date: Thu, 25 Mar 2021 22:08:45 +0900
Subject: [PATCH 307/788] Apply suggestions from code review

Co-authored-by: Kei Ak <kakts.git@gmail.com>
---
 .../concepts/configuration/pod-priority-preemption.md    | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/content/ja/docs/concepts/configuration/pod-priority-preemption.md b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
index eb2ee65956..b83d1c6867 100644
--- a/content/ja/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
@@ -56,7 +56,7 @@ PriorityClassオブジェクトは10億以下の任意の32ビットの整数値
 クラスターの管理者は割り当てたい優先度に対して、PriorityClassオブジェクトを1つずつ作成すべきです。
 
 PriorityClassは任意でフィールド`globalDefault`と`description`を設定可能です。
-`globalDefault`フィールドは`priorityClassName`が指定されないPodはこのPriorityClassを使うべきであることを示します。`globalDefault`が設定されたPriorityClassはシステムで一つのみ存在可能です。`globalDefault`が設定されたPriorityClassが存在しない場合は、`priorityClassName`が設定されていないPodの優先度は0に設定されます。
+`globalDefault`フィールドは`priorityClassName`が指定されないPodはこのPriorityClassを使うべきであることを示します。`globalDefault`がtrueに設定されたPriorityClassはシステムで一つのみ存在可能です。`globalDefault`が設定されたPriorityClassが存在しない場合は、`priorityClassName`が設定されていないPodの優先度は0に設定されます。
 
 `description`フィールドは任意の文字列です。クラスターの利用者に対して、PriorityClassをどのような時に使うべきか示すことを意図しています。
 
@@ -66,7 +66,7 @@ PriorityClassは任意でフィールド`globalDefault`と`description`を設定
 
 -   `globalDefault`が`true`に設定されたPriorityClassを追加しても、既存のPodの優先度は変わりません。PriorityClassのそのような値は、PriorityClassが追加された以後に作成されたPodのみに適用されます。
 
--   PriorityClassを削除した場合、既存のPodは削除されたPriorityClassの名称を引き続き使用しますが、削除されたPriorityClassの名称を使うPodをそれ以上作成することはできなくなります。
+-   PriorityClassを削除した場合、削除されたPriorityClassの名前を使用する既存のPodは変更されませんが、削除されたPriorityClassの名前を使うPodをそれ以上作成することはできなくなります。
 
 ### PriorityClassの例
 
@@ -94,7 +94,7 @@ description: "この優先度クラスはXYZサービスのPodに対してのみ
 `PreemptionPolicy`を`Never`に設定すると、これが設定されたPodはプリエンプトを行わないようになります。
 
 ユースケースの例として、データサイエンスの処理を挙げます。
-ユーザーは他の処理よりも優先度を高くしたいジョブを追加できますが、そのとき既存の実行中のPodの処理結果をプリエンプトによって捨てさせたくはありません。
+ユーザーは他の処理よりも優先度を高くしたいジョブを追加できますが、そのとき既存の実行中のPodの処理結果をプリエンプトによって破棄させたくはありません。
 `PreemptionPolicy: Never`が設定された優先度の高いジョブは、他の既にキューイングされたPodよりも先に、クラスターのリソースが「自然に」開放されたときにスケジューリングされます。
 
 ### 非プリエンプトのPriorityClassの例
@@ -143,7 +143,7 @@ Podが作成されると、スケジューリング待ちのキューに入り
 
 Pod PがノードNのPodをプリエンプトした場合、ノードNの名称がPのステータスの`nominatedNodeName`フィールドに設定されます。このフィールドはスケジューラーがPod Pのために予約しているリソースの追跡を助け、ユーザーにクラスターにおけるプリエンプトに関する情報を与えます。
 
-Pod Pは「指名したノード」へスケジューリングされる必要はないことに注意してください。Podがプリエンプトされると、そのPodは猶予期間を得ます。スケジューラーがPodの終了を待つ間に他のノードが利用可能になると、スケジューラーは他のノードをPod Pのスケジューリング先にします。この結果、Podの`nominatedNodeName`と`nodeName`は必ずしも一致しません。また、スケジューラーがノードNのPodをプリエンプトさせた後に、Pod Pよりも優先度の高いPodが来た場合、スケジューラーはノードNをその新しい優先度の高いPodへ与えます。このような場合は、スケジューラーはPod Pの`nominatedNodeName`を消去します。これによって、スケジューラーはPod Pが他のノードのPodをプリエンプトさせられるようにします。
+Pod Pは必ずしも「指名したノード」へスケジューリングされないことに注意してください。Podがプリエンプトされると、そのPodは終了までの猶予期間を得ます。スケジューラーがPodの終了を待つ間に他のノードが利用可能になると、スケジューラーは他のノードをPod Pのスケジューリング先にします。この結果、Podの`nominatedNodeName`と`nodeName`は必ずしも一致しません。また、スケジューラーがノードNのPodをプリエンプトさせた後に、Pod Pよりも優先度の高いPodが来た場合、スケジューラーはノードNをその新しい優先度の高いPodへ与えます。このような場合は、スケジューラーはPod Pの`nominatedNodeName`を消去します。これによって、スケジューラーはPod Pが他のノードのPodをプリエンプトさせられるようにします。
 
 ### プリエンプトの制限
 
@@ -238,4 +238,3 @@ kubeletによるリソース不足時のPodの追い出しでは、リソース
 ## {{% heading "whatsnext" %}}
 
 * PriorityClassと関連付けてResourceQuotaを使用することに関して [デフォルトで優先度クラスの消費を制限する](/ja/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
-

From 34d5b38801fc12e80c2b9691b9819647de57510a Mon Sep 17 00:00:00 2001
From: Federico Gallo <musicapidae@gmail.com>
Date: Thu, 25 Mar 2021 12:03:30 -0300
Subject: [PATCH 308/788] Updated README-es.md added note and step required for
 build and serve the image with docker (install git submodules). (#27042)

---
 README-es.md | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/README-es.md b/README-es.md
index f5b1e870dd..3f00746125 100644
--- a/README-es.md
+++ b/README-es.md
@@ -30,6 +30,17 @@ El método recomendado para levantar una copia local del sitio web kubernetes.io
 
 > Si prefiere levantar el sitio web sin utilizar **Docker**, puede seguir las instrucciones disponibles en la sección [Levantando kubernetes.io en local con Hugo](#levantando-kubernetesio-en-local-con-hugo).
 
+**`Nota`: Para el procedimiento de construir una imagen de Docker e iniciar el servidor.**
+El sitio web de Kubernetes utiliza Docsy Hugo theme. Se sugiere que se instale si aún no se ha hecho, los **submódulos** y otras dependencias de herramientas de desarrollo ejecutando el siguiente comando de `git`:
+
+```bash
+# pull de los submódulos del repositorio
+git submodule update --init --recursive --depth 1
+
+```
+
+Si identifica que `git` reconoce una cantidad innumerable de cambios nuevos en el proyecto, la forma más simple de solucionarlo es cerrando y volviendo a abrir el proyecto en el editor. Los submódulos son automáticamente detectados por `git`, pero los plugins usados por los editores pueden tener dificultades para ser cargados.
+
 Una vez tenga Docker [configurado en su máquina](https://www.docker.com/get-started), puede construir la imagen de Docker `kubernetes-hugo` localmente ejecutando el siguiente comando en la raíz del repositorio:
 
 ```bash
@@ -73,4 +84,4 @@ La participación en la comunidad de Kubernetes está regulada por el [Código d
 
 Kubernetes es posible gracias a la participación de la comunidad y la documentación es vital para facilitar el acceso al proyecto.
 
-Agradecemos muchísimo sus contribuciones a nuestro sitio web y nuestra documentación.
\ No newline at end of file
+Agradecemos muchísimo sus contribuciones a nuestro sitio web y nuestra documentación.

From b07e515787e56c3ee5d8ff9e9cf7271f129c7c02 Mon Sep 17 00:00:00 2001
From: yoyinzyc <yoyinzyc@gmail.com>
Date: Thu, 25 Mar 2021 10:50:46 -0700
Subject: [PATCH 309/788] update the doc for disabled_metric(#99217) and
 metric_cardinality_enforcement(#99385)

---
 .../cluster-administration/system-metrics.md   | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/content/en/docs/concepts/cluster-administration/system-metrics.md b/content/en/docs/concepts/cluster-administration/system-metrics.md
index 073e0c7236..9852f9cc99 100644
--- a/content/en/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/en/docs/concepts/cluster-administration/system-metrics.md
@@ -152,6 +152,24 @@ Once a pod reaches completion (has a `restartPolicy` of `Never` or `OnFailure` a
 The metrics are exposed at the HTTP endpoint `/metrics/resources` and require the same authorization as the `/metrics`
 endpoint on the scheduler. You must use the `--show-hidden-metrics-for-version=1.20` flag to expose these alpha stability metrics.
 
+## Disabling metrics
+
+You can explicitly turn off metrics via command line flag `--disabled-metrics`. This may be desired if, for example, a metric is causing a performance problem. The input is a list of disabled metrics (i.e. `--disabled-metrics=metric1,metric2`).
+
+## Metric cardinality enforcement
+
+Metrics with unbounded dimensions could cause memory issues in the components they instrument. To limit resource use, you can use the `--allow-label-value` command line option to dynamically configure an allow-list of label values for a metric.
+
+In alpha stage, the flag can only take in a series of mappings as metric label allow-list.
+Each mapping is of the format `<metric_name>,<label_name>=<allowed_labels>` where 
+`<allowed_labels>` is a comma-separated list of acceptable label names.
+                                                                                           
+The overall format looks like:
+`--allow-label-value <metric_name>,<label_name>='<allow_value1>, <allow_value2>...', <metric_name2>,<label_name>='<allow_value1>, <allow_value2>...', ...`.
+
+Here is an example:
+`--allow-label-value number_count_metric,odd_number='1,3,5', number_count_metric,even_number='2,4,6', date_gauge_metric,weekend='Saturday,Sunday'`
+
 
 ## {{% heading "whatsnext" %}}
 

From 9ad6f7a17f767b9aa40aabfd94726a938c60827a Mon Sep 17 00:00:00 2001
From: Mike Dame <mdame@redhat.com>
Date: Thu, 25 Mar 2021 13:17:12 -0400
Subject: [PATCH 310/788] Add documentation for LogarithmicScaleDown
 featuregate

---
 content/en/docs/concepts/workloads/controllers/replicaset.md   | 3 ++-
 .../reference/command-line-tools-reference/feature-gates.md    | 3 +++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/controllers/replicaset.md b/content/en/docs/concepts/workloads/controllers/replicaset.md
index cade83afa5..92d8fe7707 100644
--- a/content/en/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/en/docs/concepts/workloads/controllers/replicaset.md
@@ -317,7 +317,8 @@ prioritize scaling down pods based on the following general algorithm:
     the pod with the lower value will come first.
  3. Pods on nodes with more replicas come before pods on nodes with fewer replicas.
  4. If the pods' creation times differ, the pod that was created more recently
-    comes before the older pod (the creation times are bucketed on an integer log scale)
+    comes before the older pod (the creation times are bucketed on an integer log scale
+    when the `LogarithmicScaleDown` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled)
     
 If all of the above match, then selection is random.
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 3aed56e80e..3e9cac23a0 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -135,6 +135,7 @@ different Kubernetes components.
 | `LocalStorageCapacityIsolation` | `false` | Alpha | 1.7 | 1.9 |
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
+| `LogarithmicScaleDown` | `false` | Alpha | 1.21 | |
 | `MixedProtocolLBService` | `false` | Alpha | 1.20 | |
 | `NamespaceDefaultLabelName` | `true` | Beta | 1.21 | |
 | `NetworkPolicyEndPort` | `false` | Alpha | 1.21 |  |
@@ -670,6 +671,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
   supports project quotas and they are enabled, use project quotas to monitor
   [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than
   filesystem walk for better performance and accuracy.
+- `LogarithmicScaleDown`: Enable semi-random selection of pods to evict on controller scaledown
+  based on logarithmic bucketing of pod timestamps.
 - `MixedProtocolLBService`: Enable using different protocols in the same `LoadBalancer` type
   Service instance.
 - `MountContainers` (*deprecated*): Enable using utility containers on host as

From 576d580264947cca7783b4196975f3c2a062afe4 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Fri, 26 Mar 2021 00:39:27 +0200
Subject: [PATCH 311/788] remove command

---
 .../run-application/run-stateless-application-deployment.md      | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/es/docs/tasks/run-application/run-stateless-application-deployment.md b/content/es/docs/tasks/run-application/run-stateless-application-deployment.md
index 4bbe221adf..f6e82d85a9 100644
--- a/content/es/docs/tasks/run-application/run-stateless-application-deployment.md
+++ b/content/es/docs/tasks/run-application/run-stateless-application-deployment.md
@@ -49,7 +49,6 @@ Puedes correr una aplicación creando un `deployment` de Kubernetes, y puedes de
 
     El resultado es similar a esto:
 
-        user@computer:~/website$ kubectl describe deployment nginx-deployment
         Name:     nginx-deployment
         Namespace:    default
         CreationTimestamp:  Tue, 30 Aug 2016 18:11:37 -0700

From 4f0fa3b008af81dd39c88cffa782ca0a2ac528ed Mon Sep 17 00:00:00 2001
From: Shihang Zhang <zshihang@google.com>
Date: Thu, 25 Mar 2021 17:38:02 -0700
Subject: [PATCH 312/788] update doc for CSIServiceAccountToken

---
 .../reference/command-line-tools-reference/feature-gates.md    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 3e9cac23a0..beb68fa511 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -83,7 +83,8 @@ different Kubernetes components.
 | `CSIMigrationOpenStackComplete` | `false` | Alpha | 1.17 | |
 | `CSIMigrationvSphere` | `false` | Beta | 1.19 | |
 | `CSIMigrationvSphereComplete` | `false` | Beta | 1.19 | |
-| `CSIServiceAccountToken` | `false` | Alpha | 1.20 | |
+| `CSIServiceAccountToken` | `false` | Alpha | 1.20 | 1.20 |
+| `CSIServiceAccountToken` | `true` | Beta | 1.21 | |
 | `CSIStorageCapacity` | `false` | Alpha | 1.19 | 1.20 |
 | `CSIStorageCapacity` | `true` | Beta | 1.21 | |
 | `CSIVolumeFSGroupPolicy` | `false` | Alpha | 1.19 | 1.19 |

From a6f829f29a9fd3db0760e48da297b95bfff4a3a1 Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Thu, 25 Mar 2021 16:17:28 -0700
Subject: [PATCH 313/788] update denyexeconprivileged removal to release 1.21

update denyexeconprivileged removal to release 1.21

update denyexeconprivileged removal to release 1.21
---
 .../reference/access-authn-authz/admission-controllers.md     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md
index 8841723344..9e45e57d37 100644
--- a/content/en/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md
@@ -176,7 +176,7 @@ The default value for `default-not-ready-toleration-seconds` and `default-unreac
 This admission controller will intercept all requests to exec a command in a pod if that pod has a privileged container.
 
 This functionality has been merged into [DenyEscalatingExec](#denyescalatingexec).
-The DenyExecOnPrivileged admission plugin is deprecated and will be removed in v1.18.
+The DenyExecOnPrivileged admission plugin is deprecated.
 
 Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
 which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods
@@ -190,7 +190,7 @@ This admission controller will deny exec and attach commands to pods that run wi
 allow host access.  This includes pods that run as privileged, have access to the host IPC namespace, and
 have access to the host PID namespace.
 
-The DenyEscalatingExec admission plugin is deprecated and will be removed in v1.18.
+The DenyEscalatingExec admission plugin is deprecated.
 
 Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
 which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods

From b222a1352575aa7aedba8cc2fef4d253c217a07f Mon Sep 17 00:00:00 2001
From: David Porter <porterdavid@google.com>
Date: Mon, 8 Mar 2021 18:15:10 -0800
Subject: [PATCH 314/788] Update graceful node shutdown beta docs

---
 .../en/docs/concepts/architecture/nodes.md    | 33 ++++++++++++++-----
 .../feature-gates.md                          |  3 +-
 2 files changed, 27 insertions(+), 9 deletions(-)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index 823dddf710..7f1f55b91d 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -334,26 +334,43 @@ the kubelet can use topology hints when making resource assignment decisions.
 See [Control Topology Management Policies on a Node](/docs/tasks/administer-cluster/topology-manager/)
 for more information.
 
-## Graceful Node Shutdown {#graceful-node-shutdown}
+## Graceful node shutdown {#graceful-node-shutdown}
 
-{{< feature-state state="alpha" for_k8s_version="v1.20" >}}
+{{< feature-state state="beta" for_k8s_version="v1.21" >}}
+
+The kubelet attempts to detect node system shutdown and terminates pods running on the node.
 
-If you have enabled the `GracefulNodeShutdown` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/), then the kubelet attempts to detect the node system shutdown and terminates pods running on the node.
 Kubelet ensures that pods follow the normal [pod termination process](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination) during the node shutdown.
 
-When the `GracefulNodeShutdown` feature gate is enabled, kubelet uses [systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/) to delay the node shutdown with a given duration. During a shutdown, kubelet terminates pods in two phases:
+The Graceful node shutdown feature depends on systemd since it takes advantage of
+[systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/) to
+delay the node shutdown with a given duration.
+
+Graceful node shutdown is controlled with the `GracefulNodeShutdown`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) which is
+enabled by default in 1.21.
+
+Note that by default, both configuration options described below,
+`ShutdownGracePeriod` and `ShutdownGracePeriodCriticalPods` are set to zero,
+thus not activating Graceful node shutdown functionality.
+To activate the feature, the two kubelet config settings should be configured appropriately and set to non-zero values.
+
+During a graceful shutdown, kubelet terminates pods in two phases:
 
 1. Terminate regular pods running on the node.
 2. Terminate [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) running on the node.
 
-Graceful Node Shutdown feature is configured with two [`KubeletConfiguration`](/docs/tasks/administer-cluster/kubelet-config-file/) options:
+Graceful node shutdown feature is configured with two [`KubeletConfiguration`](/docs/tasks/administer-cluster/kubelet-config-file/) options:
 * `ShutdownGracePeriod`:
   * Specifies the total duration that the node should delay the shutdown by. This is the total grace period for pod termination for both regular and [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical).
 * `ShutdownGracePeriodCriticalPods`:
-  * Specifies the duration used to terminate [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) during a node shutdown. This should be less than `ShutdownGracePeriod`.
-
-For example, if `ShutdownGracePeriod=30s`, and `ShutdownGracePeriodCriticalPods=10s`, kubelet will delay the node shutdown by 30 seconds. During the shutdown, the first 20 (30-10) seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical).
+  * Specifies the duration used to terminate [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) during a node shutdown. This value should be less than `ShutdownGracePeriod`.
 
+For example, if `ShutdownGracePeriod=30s`, and
+`ShutdownGracePeriodCriticalPods=10s`, kubelet will delay the node shutdown by
+30 seconds. During the shutdown, the first 20 (30-10) seconds would be reserved
+for gracefully terminating normal pods, and the last 10 seconds would be
+reserved for terminating [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical).
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 3e9cac23a0..96347fb2bb 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -120,7 +120,8 @@ different Kubernetes components.
 | `ExperimentalHostUserNamespaceDefaulting` | `false` | Beta | 1.5 | |
 | `GenericEphemeralVolume` | `false` | Alpha | 1.19 | 1.20 |
 | `GenericEphemeralVolume` | `true` | Beta | 1.21 | |
-| `GracefulNodeShutdown` | `false` | Alpha | 1.20 | |
+| `GracefulNodeShutdown` | `false` | Alpha | 1.20 | 1.20 |
+| `GracefulNodeShutdown` | `true` | Beta | 1.21 | |
 | `HPAContainerMetrics` | `false` | Alpha | 1.20 | |
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |

From 357a1225f6dfc69d30262a5d102212fb7fb0c0b2 Mon Sep 17 00:00:00 2001
From: BITLIU <mixdeers@gmail.com>
Date: Fri, 26 Mar 2021 09:27:01 +0800
Subject: [PATCH 315/788] Update scripts/README.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 scripts/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/README.md b/scripts/README.md
index 11bb9f4866..08de0d04ff 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -144,7 +144,7 @@ Cases handled:
 This script checks if the English version of some localized contents have changed 
 since a localized version has been committed.
 
-The following example check a single file:
+The following example checks a single file:
 
       ./scripts/lsync.sh content/zh/docs/concepts/_index.md
 

From 2eee57c425662a13a476ac154fd4b79b61ef8c86 Mon Sep 17 00:00:00 2001
From: BITLIU <mixdeers@gmail.com>
Date: Fri, 26 Mar 2021 09:30:33 +0800
Subject: [PATCH 316/788] Complete scripts descriptions

add lsync.sh hash-files.sh linkchecker.py  description

remove  replace-capture.sh description
---
 scripts/README.md | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/scripts/README.md b/scripts/README.md
index 08de0d04ff..4f7ee7eec3 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -97,7 +97,7 @@ Options:
 
 This script emits as hash for the files listed in $@.
 
-      $ ./scripts/hash-files.sh
+    $ ./scripts/hash-files.sh
     
 ## linkchecker.py
 
@@ -146,16 +146,9 @@ since a localized version has been committed.
 
 The following example checks a single file:
 
-      ./scripts/lsync.sh content/zh/docs/concepts/_index.md
+    ./scripts/lsync.sh content/zh/docs/concepts/_index.md
 
 The following command checks a subdirectory:
 
-      ./scripts/lsync.sh content/zh/docs/concepts/
+    ./scripts/lsync.sh content/zh/docs/concepts/
 
-## replace-capture.sh
-
-This script sets K8S_WEBSITE in your env to your docs website root or rely on this script to determine it automatically
-
-You must run the script inside the repository for that to work
-
-    $ ./scripts/replace-capture.sh

From 10be302dcee60cb522ee0fd9288231241b462b43 Mon Sep 17 00:00:00 2001
From: Alec Rajeev <alecinthecloud@gmail.com>
Date: Thu, 25 Mar 2021 21:03:53 -0400
Subject: [PATCH 317/788] Fix link for Horizontal Pod Autoscaler enhancement

---
 .../en/docs/tasks/run-application/horizontal-pod-autoscale.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
index 763d9ab996..b2643ff282 100644
--- a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
+++ b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
@@ -356,7 +356,7 @@ and [the walkthrough for using external metrics](/docs/tasks/run-application/hor
 ## Support for configurable scaling behavior
 
 Starting from
-[v1.18](https://github.com/kubernetes/enhancements/blob/master/keps/sig-autoscaling/20190307-configurable-scale-velocity-for-hpa.md)
+[v1.18](https://github.com/kubernetes/enhancements/blob/master/keps/sig-autoscaling/853-configurable-hpa-scale-velocity/README.md)
 the `v2beta2` API allows scaling behavior to be configured through the HPA
 `behavior` field. Behaviors are specified separately for scaling up and down in
 `scaleUp` or `scaleDown` section under the `behavior` field. A stabilization

From 88e88a4c83aa004b33107bae4584c4a9a9d01f1c Mon Sep 17 00:00:00 2001
From: Ryo Nakao <ryo@nakao.dev>
Date: Fri, 26 Mar 2021 10:59:18 +0900
Subject: [PATCH 318/788] Fix typo in Japanese doc

---
 content/ja/docs/reference/access-authn-authz/rbac.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/reference/access-authn-authz/rbac.md b/content/ja/docs/reference/access-authn-authz/rbac.md
index fee25f323e..04409b3b8e 100644
--- a/content/ja/docs/reference/access-authn-authz/rbac.md
+++ b/content/ja/docs/reference/access-authn-authz/rbac.md
@@ -43,7 +43,7 @@ ClusterRolesにはいくつかの用途があります。ClusterRoleを利用し
 2. Namespaceに属するリソースに対する権限を定義し、すべてのNamespaceにわたって付与する
 3. クラスター単位でスコープされているリソースに対するアクセス許可を定義する
 
-NamespaceでRoleを定義する場合は、Roleを使用します。クラスター全体でRoleを定義する婆は、ClusterRoleを使用します
+NamespaceでRoleを定義する場合は、Roleを使用します。クラスター全体でRoleを定義する場合は、ClusterRoleを使用します
 
 #### Roleの例
 

From 3d7aaefe217be0018ff862da9915ff91b9f5c726 Mon Sep 17 00:00:00 2001
From: pacoxu <paco.xu@daocloud.io>
Date: Fri, 26 Mar 2021 10:23:04 +0800
Subject: [PATCH 319/788] promote sysctl to GA: update sysctl feature gate
 status

Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-authored-by: Elana Hashman <ehashman@users.noreply.github.com>
---
 .../reference/command-line-tools-reference/feature-gates.md    | 3 ++-
 content/en/docs/tasks/administer-cluster/sysctl-cluster.md     | 1 -
 .../reference/command-line-tools-reference/feature-gates.md    | 3 ++-
 content/zh/docs/tasks/administer-cluster/sysctl-cluster.md     | 1 -
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 96347fb2bb..33791bf36a 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -174,7 +174,6 @@ different Kubernetes components.
 | `StorageVersionHash` | `false` | Alpha | 1.14 | 1.14 |
 | `StorageVersionHash` | `true` | Beta | 1.15 | |
 | `SuspendJob` | `false` | Alpha | 1.21 | |
-| `Sysctls` | `true` | Beta | 1.11 | |
 | `TTLAfterFinished` | `false` | Alpha | 1.12 | |
 | `TopologyManager` | `false` | Alpha | 1.16 | 1.17 |
 | `TopologyManager` | `true` | Beta | 1.18 | |
@@ -346,6 +345,8 @@ different Kubernetes components.
 | `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 |
 | `SupportPodPidsLimit` | `true` | Beta | 1.14 | 1.19 |
 | `SupportPodPidsLimit` | `true` | GA | 1.20 | - |
+| `Sysctls` | `true` | Beta | 1.11 | 1.20 |
+| `Sysctls` | `true` | GA | 1.21 | |
 | `TaintBasedEvictions` | `false` | Alpha | 1.6 | 1.12 |
 | `TaintBasedEvictions` | `true` | Beta | 1.13 | 1.17 |
 | `TaintBasedEvictions` | `true` | GA | 1.18 | - |
diff --git a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
index 60af560e30..0a0dd8bd1b 100644
--- a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
+++ b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
@@ -6,7 +6,6 @@ content_type: task
 ---
 
 <!-- overview -->
-{{< feature-state for_k8s_version="v1.12" state="beta" >}}
 
 This document describes how to configure and use kernel parameters within a
 Kubernetes cluster using the {{< glossary_tooltip term_id="sysctl" >}}
diff --git a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
index 4a302d4793..c61d5f3696 100644
--- a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
@@ -204,7 +204,6 @@ different Kubernetes components.
 | `SupportNodePidsLimit` | `true` | Beta | 1.15 | |
 | `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 |
 | `SupportPodPidsLimit` | `true` | Beta | 1.14 | |
-| `Sysctls` | `true` | Beta | 1.11 | |
 | `TokenRequest` | `false` | Alpha | 1.10 | 1.11 |
 | `TokenRequest` | `true` | Beta | 1.12 | |
 | `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
@@ -353,6 +352,8 @@ different Kubernetes components.
 | `SupportIPVSProxyMode` | `false` | Beta | 1.9 | 1.9 |
 | `SupportIPVSProxyMode` | `true` | Beta | 1.10 | 1.10 |
 | `SupportIPVSProxyMode` | `true` | GA | 1.11 | - |
+| `Sysctls` | `true` | Beta | 1.11 | 1.20 |
+| `Sysctls` | `true` | GA | 1.21 | |
 | `TaintBasedEvictions` | `false` | Alpha | 1.6 | 1.12 |
 | `TaintBasedEvictions` | `true` | Beta | 1.13 | 1.17 |
 | `TaintBasedEvictions` | `true` | GA | 1.18 | - |
diff --git a/content/zh/docs/tasks/administer-cluster/sysctl-cluster.md b/content/zh/docs/tasks/administer-cluster/sysctl-cluster.md
index b8bffbc61b..20e8cee3d8 100644
--- a/content/zh/docs/tasks/administer-cluster/sysctl-cluster.md
+++ b/content/zh/docs/tasks/administer-cluster/sysctl-cluster.md
@@ -12,7 +12,6 @@ content_type: task
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.12" state="beta" >}}
 
 <!--
 This document describes how to configure and use kernel parameters within a

From 5a6c4244c44b3d3e474f62731919ec0d2637518c Mon Sep 17 00:00:00 2001
From: pacoxu <paco.xu@daocloud.io>
Date: Tue, 23 Feb 2021 17:24:36 +0800
Subject: [PATCH 320/788] Add docs for dual-stack via kubeadm: examples

Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../services-networking/dual-stack.md         |   2 +
 .../tools/kubeadm/dual-stack-support.md       | 154 ++++++++++++++++++
 2 files changed, 156 insertions(+)
 create mode 100644 content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md

diff --git a/content/en/docs/concepts/services-networking/dual-stack.md b/content/en/docs/concepts/services-networking/dual-stack.md
index 20cbcb5f33..7f5c7ca523 100644
--- a/content/en/docs/concepts/services-networking/dual-stack.md
+++ b/content/en/docs/concepts/services-networking/dual-stack.md
@@ -242,3 +242,5 @@ Ensure your {{< glossary_tooltip text="CNI" term_id="cni" >}} provider supports
 
 
 * [Validate IPv4/IPv6 dual-stack](/docs/tasks/network/validate-dual-stack) networking
+* [Enable dual-stack networking using kubeadm
+](/docs/setup/production-environment/tools/kubeadm/dual-stack-support/)
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md b/content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md
new file mode 100644
index 0000000000..fb3ffe1284
--- /dev/null
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md
@@ -0,0 +1,154 @@
+---
+title: Dual-stack support with kubeadm
+feature:
+  title: Dual-stack support with kubeadm
+content_type: task
+weight: 110
+min-kubernetes-server-version: 1.21
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
+
+Your Kubernetes cluster can run in [dual-stack](/docs/concepts/services-networking/dual-stack/) networking mode, which means that cluster networking lets you use either address family. In a dual-stack cluster, the control plane can assign both an IPv4 address and an IPv6 address to a single {{< glossary_tooltip text="Pod" term_id="pod" >}} or a {{< glossary_tooltip text="Service" term_id="service" >}}.
+
+<!-- body -->
+
+## {{% heading "prerequisites" %}}
+
+You need to have installed the {{< glossary_tooltip text="kubeadm" term_id="kubeadm" >}} tool, following the steps from [Installing kubeadm](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/).
+
+For each server that you want to use as a {{< glossary_tooltip text="node" term_id="node" >}}, make sure it allows IPv6 forwarding. On Linux, you can set this by running run `sysctl -w net.ipv6.conf.all.forwarding=1` as the root user on each server.
+
+You need to have an IPv4 and and IPv6 address range to use. Cluster operators typically
+use private address ranges for IPv4. For IPv6, a cluster operator typically chooses a global
+unicast address block from within `2000::/3`, using a range that is assigned to the operator.  
+You don't have to route the cluster's IP address ranges to the public internet.
+
+The size of the IP address allocations should be suitable for the number of Pods and
+Services that you are planning to run.
+
+{{< note >}}
+If you are upgrading an existing cluster then, by default, the `kubeadm upgrade` command
+changes the [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+`IPv6DualStack` to `true` if that is not already enabled.  
+However, `kubeadm` does not support making modifications to the pod IP address range
+(“cluster CIDR”) nor to the cluster's Service address range (“Service CIDR”).
+{{< /note >}}
+
+### Create a dual-stack cluster
+
+To create a dual-stack cluster with `kubeadm init` you can pass command line arguments
+similar to the following example:
+
+```shell
+# These address ranges are examples
+kubeadm init --pod-network-cidr=10.244.0.0/16,2001:db8:42:0::/56 --service-cidr=10.96.0.0/16,2001:db8:42:1::/112
+```
+
+To make things clearer, here is an example kubeadm [configuration file](https://pkg.go.dev/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2) `kubeadm-config.yaml` for the primary dual-stack control plane node.
+
+```yaml
+---
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: ClusterConfiguration
+featureGates:
+  IPv6DualStack: true
+networking:
+  podSubnet: 10.244.0.0/16,2001:db8:42:0::/56
+  serviceSubnet: 10.96.0.0/16,2001:db8:42:1::/112
+---
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: InitConfiguration
+localAPIEndpoint:
+  advertiseAddress: "10.100.0.1"
+  bindPort: 6443
+nodeRegistration:
+  kubeletExtraArgs:
+    node-ip: 10.100.0.2,fd00:1:2:3::2
+```
+
+`advertiseAddress` in InitConfiguration specifies the IP address that the API Server will advertise it is listening on. The value of `advertiseAddress` equals the `--apiserver-advertise-address` flag of `kubeadm init`
+
+Run kubeadm to initiate the dual-stack control plane node:
+
+```shell
+kubeadm init --config=kubeadm-config.yaml
+```
+
+Currently, the kube-controller-manager flags `--node-cidr-mask-size-ipv4|--node-cidr-mask-size-ipv6` are being left with default values. See [enable IPv4/IPv6 dual stack](/docs/concepts/services-networking/dual-stack#enable-ipv4ipv6-dual-stack).
+
+{{< note >}}
+The `--apiserver-advertise-address` flag does not support dual-stack.
+{{< /note >}}
+
+### Join a node to dual-stack cluster
+
+Before joining a node, make sure that the node has IPv6 routable network interface and allows IPv6 forwarding.
+
+Here is an example kubeadm [configuration file](https://pkg.go.dev/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2) `kubeadm-config.yaml` for joining a worker node to the cluster.
+
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: JoinConfiguration
+discovery:
+  bootstrapToken:
+    apiServerEndpoint: 10.100.0.1:6443
+nodeRegistration:
+  kubeletExtraArgs:
+    node-ip: 10.100.0.3,fd00:1:2:3::3
+```
+
+Also, here is an example kubeadm [configuration file](https://pkg.go.dev/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2) `kubeadm-config.yaml` for joining another control plane node to the cluster.
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: JoinConfiguration
+controlPlane:
+  localAPIEndpoint:
+    advertiseAddress: "10.100.0.2"
+    bindPort: 6443
+discovery:
+  bootstrapToken:
+    apiServerEndpoint: 10.100.0.1:6443
+nodeRegistration:
+  kubeletExtraArgs:
+    node-ip: 10.100.0.4,fd00:1:2:3::4
+
+```
+
+`advertiseAddress` in JoinConfiguration.controlPlane specifies the IP address that the API Server will advertise it is listening on. The value of `advertiseAddress` equals the `--apiserver-advertise-address` flag of `kubeadm join`.
+
+```shell
+kubeadm join --config=kubeadm-config.yaml ...
+```
+
+### Create a single-stack cluster
+
+{{< note >}}
+Enabling the dual-stack feature doesn't mean that you need to use dual-stack addressing.  
+You can deploy a single-stack cluster that has the dual-stack networking feature enabled.
+{{< /note >}}
+
+In 1.21 the `IPv6DualStack` feature is Beta and the feature gate is defaulted to `true`. To disable the feature you must configure the feature gate to `false`. Note that once the feature is GA, the feature gate will be removed.
+
+```shell
+kubeadm init --feature-gates IPv6DualStack=false
+```
+
+To make things more clear, here is an example kubeadm [configuration file](https://pkg.go.dev/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2) `kubeadm-config.yaml` for the single-stack control plane node.
+
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: ClusterConfiguration
+featureGates:
+  IPv6DualStack: false
+networking:
+  podSubnet: 10.244.0.0/16
+  serviceSubnet: 10.96.0.0/16
+```
+
+## {{% heading "whatsnext" %}}
+
+* [Validate IPv4/IPv6 dual-stack](/docs/tasks/network/validate-dual-stack) networking
+* Read about [Dual-stack](/docs/concepts/services-networking/dual-stack/) cluster networking

From df3eabc37c178c3374232c764e5961fe02cc4d78 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Date: Fri, 26 Mar 2021 11:39:58 +0900
Subject: [PATCH 321/788] Fix line separation in concepts/architecture/nodes

---
 content/en/docs/concepts/architecture/nodes.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index 823dddf710..fdb268896c 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -237,6 +237,7 @@ responsible for:
 - Evicting all the pods from the node using graceful termination if
   the node continues to be unreachable. The default timeouts are 40s to start
   reporting ConditionUnknown and 5m after that to start evicting pods.
+
 The node controller checks the state of each node every `--node-monitor-period` seconds.
 
 #### Heartbeats
@@ -278,6 +279,7 @@ the same time:
   `--large-cluster-size-threshold` nodes - default 50), then evictions are stopped.
 - Otherwise, the eviction rate is reduced to `--secondary-node-eviction-rate`
   (default 0.01) per second.
+
 The reason these policies are implemented per availability zone is because one
 availability zone might become partitioned from the master while the others remain
 connected. If your cluster does not span multiple cloud provider availability zones,

From 487bd4fa46b8a47722156d002d0a2a5bb81e57ed Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 25 Mar 2021 19:59:42 +0800
Subject: [PATCH 322/788] [zh] Resync security overview

---
 content/zh/docs/concepts/security/overview.md | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/security/overview.md b/content/zh/docs/concepts/security/overview.md
index 19ce78672f..68ef8ba63d 100644
--- a/content/zh/docs/concepts/security/overview.md
+++ b/content/zh/docs/concepts/security/overview.md
@@ -164,7 +164,7 @@ areas of security concerns and recommendations for securing workloads running in
 Area of Concern for Workload Security | Recommendation |
 ------------------------------ | --------------------- |
 RBAC Authorization (Access to the Kubernetes API) | https://kubernetes.io/docs/reference/access-authn-authz/rbac/
-Authentication | https://kubernetes.io/docs/reference/access-authn-authz/controlling-access/
+Authentication | https://kubernetes.io/docs/concepts/security/controlling-access/
 Application secrets management (and encrypting them in etcd at rest) | https://kubernetes.io/docs/concepts/configuration/secret/ <br> https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/
 Pod Security Policies | https://kubernetes.io/docs/concepts/policy/pod-security-policy/
 Quality of Service (and Cluster resource management) | https://kubernetes.io/docs/tasks/configure-pod-container/quality-service-pod/
@@ -178,10 +178,10 @@ TLS For Kubernetes Ingress | https://kubernetes.io/docs/concepts/services-networ
 容易受到资源枯竭的攻击，则如果你不限制服务 B 的资源的话，损害服务 A 的风险就会很高。
 下表列出了安全性关注的领域和建议，用以保护 Kubernetes 中运行的工作负载：
 
-工作负载安全性关注领域 |  建议 |
+工作负载安全性关注领域         |  建议                 |
 ------------------------------ | --------------------- |
 RBAC 授权(访问 Kubernetes API) | https://kubernetes.io/zh/docs/reference/access-authn-authz/rbac/
-认证方式 | https://kubernetes.io/zh/docs/reference/access-authn-authz/controlling-access/
+认证方式 | https://kubernetes.io/zh/docs/concepts/security/controlling-access/
 应用程序 Secret 管理 (并在 etcd 中对其进行静态数据加密) | https://kubernetes.io/zh/docs/concepts/configuration/secret/ <br> https://kubernetes.io/zh/docs/tasks/administer-cluster/encrypt-data/
 Pod 安全策略 | https://kubernetes.io/zh/docs/concepts/policy/pod-security-policy/
 服务质量（和集群资源管理）| https://kubernetes.io/zh/docs/tasks/configure-pod-container/quality-service-pod/
@@ -199,6 +199,7 @@ Area of Concern for Containers | Recommendation |
 Container Vulnerability Scanning and OS Dependency Security | As part of an image build step, you should scan your containers for known vulnerabilities.
 Image Signing and Enforcement | Sign container images to maintain a system of trust for the content of your containers.
 Disallow privileged users | When constructing containers, consult your documentation for how to create users inside of the containers that have the least level of operating system privilege necessary in order to carry out the goal of the container.
+Use container runtime with stronger isolation | Select [container runtime classes](/docs/concepts/containers/runtime-class/) that provider stronger isolation
 -->
 ## 容器
 
@@ -209,7 +210,7 @@ Disallow privileged users | When constructing containers, consult your documenta
 容器漏洞扫描和操作系统依赖安全性 | 作为镜像构建的一部分，您应该扫描您的容器里的已知漏洞。
 镜像签名和执行 | 对容器镜像进行签名，以维护对容器内容的信任。
 禁止特权用户 | 构建容器时，请查阅文档以了解如何在具有最低操作系统特权级别的容器内部创建用户，以实现容器的目标。
-
+使用带有较强隔离能力的容器运行时 | 选择提供较强隔离能力的[容器运行时类](/zh/docs/concepts/containers/runtime-class/)。
 <!--
 ## Code
 
@@ -262,6 +263,7 @@ Learn about related Kubernetes security topics:
 * [Data encryption in transit](/docs/tasks/tls/managing-tls-in-a-cluster/) for the control plane
 * [Data encryption at rest](/docs/tasks/administer-cluster/encrypt-data/)
 * [Secrets in Kubernetes](/docs/concepts/configuration/secret/)
+* [Runtime class](/docs/concepts/containers/runtime-class)
 -->
 学习了解相关的 Kubernetes 安全主题：
 
@@ -272,4 +274,5 @@ Learn about related Kubernetes security topics:
 * 为控制面[加密通信中的数据](/zh/docs/tasks/tls/managing-tls-in-a-cluster/)
 * [加密静止状态的数据](/zh/docs/tasks/administer-cluster/encrypt-data/)
 * [Kubernetes 中的 Secret](/zh/docs/concepts/configuration/secret/)
+* [运行时类](/zh/docs/concepts/containers/runtime-class)
 

From f0de1c3e2b511f7e5ebd5c614c33921c05e69d37 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Fri, 26 Mar 2021 10:21:49 +0800
Subject: [PATCH 323/788] [zh] Sync tutorials pages for hello-minikube.md

* Sync with english version in 'Update hello minikube page (#27212)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 content/zh/docs/tutorials/hello-minikube.md | 43 +++++++++++++++++++--
 1 file changed, 39 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/tutorials/hello-minikube.md b/content/zh/docs/tutorials/hello-minikube.md
index b3a23e348b..c07f99998b 100644
--- a/content/zh/docs/tutorials/hello-minikube.md
+++ b/content/zh/docs/tutorials/hello-minikube.md
@@ -81,9 +81,13 @@ This tutorial provides a container image that uses NGINX to echo back all the re
 
    {{< kat-button >}}
 
-   <!-- If you installed Minikube locally, run `minikube start`.-->
+   <!-- 
+   If you installed minikube locally, run `minikube start`. Before you run `minikube dashboard`, you should open a new terminal, start `minikube dashboard` there, and then switch back to the main terminal.
+   -->
    {{< note >}}
-   如果你在本地安装了 Minikube，运行 `minikube start`。 
+   如果你在本地安装了 Minikube，运行 `minikube start`。
+   在运行 `minikube dashboard` 之前，你应该打开一个新终端，
+   在此启动 `minikube dashboard` ，然后切换回主终端。 
    {{< /note >}}
 
 <!--
@@ -97,13 +101,44 @@ This tutorial provides a container image that uses NGINX to echo back all the re
 
 <!--
 3. Katacoda environment only: At the top of the terminal pane, click the plus sign, and then click **Select port to view on Host 1**.
-
-4. Katacoda environment only: Type `30000`, and then click **Display Port**.
 -->
 3. 仅限 Katacoda 环境：在终端窗口的顶部，单击加号，然后单击 **选择要在主机 1 上查看的端口**。
 
+<!--
+4. Katacoda environment only: Type `30000`, and then click **Display Port**.
+-->
 4. 仅限 Katacoda 环境：输入“30000”，然后单击 **显示端口**。
 
+<!--
+The `dashboard` command enables the dashboard add-on and opens the proxy in the default web browser. You can create Kubernetes resources on the dashboard such as Deployment and Service.
+
+If you are running in an environment as root, see [Open Dashboard with URL](/docs/tutorials/hello-minikube#open-dashboard-with-url).
+
+To stop the proxy, run `Ctrl+C` to exit the process. The dashboard remains running.
+-->
+{{< note >}}
+`dashboard` 命令启用仪表板插件，并在默认的 Web 浏览器中打开代理。你可以在仪表板上创建 Kubernetes 资源，例如 Deployment 和 Service。
+
+如果你以 root 用户身份在环境中运行，
+请参见[使用 URL 打开仪表板](/zh/docs/tutorials/hello-minikube#open-dashboard-with-url)。
+
+要停止代理，请运行 `Ctrl+C` 退出该进程。仪表板仍在运行中。
+{{< /note >}}
+
+<!--
+## Open Dashboard with URL
+-->
+## 使用 URL 打开仪表板
+
+<!--
+If you don't want to open a web browser, run the dashboard command with the url flag to emit a URL:
+-->
+如果你不想打开 Web 浏览器，请使用 url 标志运行显示板命令以得到 URL：
+
+```shell
+minikube dashboard --url
+```
+
 <!--
 
 ## Create a Deployment

From 7a461e5f13ec3c6275441032ad5eb309d8372da6 Mon Sep 17 00:00:00 2001
From: Shihang Zhang <zshihang@google.com>
Date: Thu, 25 Mar 2021 17:33:48 -0700
Subject: [PATCH 324/788] update doc for BoundServiceAccountTokenVolume and
 RootCAConfigMap

---
 .../access-authn-authz/service-accounts-admin.md          | 5 ++---
 .../command-line-tools-reference/feature-gates.md         | 8 +++++---
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/service-accounts-admin.md b/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
index dd13dfeecc..4aaf6da0a2 100644
--- a/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
+++ b/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
@@ -60,9 +60,9 @@ It acts synchronously to modify pods as they are created or updated. When this p
   1. It adds a `volumeSource` to each container of the pod mounted at `/var/run/secrets/kubernetes.io/serviceaccount`.
 
 #### Bound Service Account Token Volume
-{{< feature-state for_k8s_version="v1.13" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
-When the `BoundServiceAccountTokenVolume` feature gate is enabled, the service account admission controller will
+When the `BoundServiceAccountTokenVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled, the service account admission controller will
 add a projected service account token volume instead of a secret volume. The service account token will expire after 1 hour by default or the pod is deleted. See more details about [projected volume](/docs/tasks/configure-pod-container/configure-projected-volume-storage/).
 
 This feature depends on the `RootCAConfigMap` feature gate enabled which publish a "kube-root-ca.crt" ConfigMap to every namespace. This ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver.
@@ -140,4 +140,3 @@ kubectl delete secret mysecretname
 
 A ServiceAccount controller manages the ServiceAccounts inside namespaces, and
 ensures a ServiceAccount named "default" exists in every active namespace.
-
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 33b923b4cf..aef2a301cc 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -59,7 +59,8 @@ different Kubernetes components.
 | `AnyVolumeDataSource` | `false` | Alpha | 1.18 | |
 | `AppArmor` | `true` | Beta | 1.4 | |
 | `BalanceAttachedNodeVolumes` | `false` | Alpha | 1.11 | |
-| `BoundServiceAccountTokenVolume` | `false` | Alpha | 1.13 | |
+| `BoundServiceAccountTokenVolume` | `false` | Alpha | 1.13 | 1.20 |
+| `BoundServiceAccountTokenVolume` | `true` | Beta | 1.21 | |
 | `CPUManager` | `false` | Alpha | 1.8 | 1.9 |
 | `CPUManager` | `true` | Beta | 1.10 | |
 | `CSIInlineVolume` | `false` | Alpha | 1.15 | 1.15 |
@@ -155,8 +156,6 @@ different Kubernetes components.
 | `RemainingItemCount` | `false` | Alpha | 1.15 | |
 | `RemoveSelfLink` | `false` | Alpha | 1.16 | 1.19 |
 | `RemoveSelfLink` | `true` | Beta | 1.20 | |
-| `RootCAConfigMap` | `false` | Alpha | 1.13 | 1.19 |
-| `RootCAConfigMap` | `true` | Beta | 1.20 | |
 | `RotateKubeletServerCertificate` | `false` | Alpha | 1.7 | 1.11 |
 | `RotateKubeletServerCertificate` | `true` | Beta | 1.12 | |
 | `RunAsGroup` | `true` | Beta | 1.14 | |
@@ -309,6 +308,9 @@ different Kubernetes components.
 | `ResourceQuotaScopeSelectors` | `false` | Alpha | 1.11 | 1.11 |
 | `ResourceQuotaScopeSelectors` | `true` | Beta | 1.12 | 1.16 |
 | `ResourceQuotaScopeSelectors` | `true` | GA | 1.17 | - |
+| `RootCAConfigMap` | `false` | Alpha | 1.13 | 1.19 |
+| `RootCAConfigMap` | `true` | Beta | 1.20 | 1.20 |
+| `RootCAConfigMap` | `true` | GA | 1.21 | - |
 | `RotateKubeletClientCertificate` | `true` | Beta | 1.8 | 1.18 |
 | `RotateKubeletClientCertificate` | `true` | GA | 1.19 | - |
 | `RuntimeClass` | `false` | Alpha | 1.12 | 1.13 |

From e6aa137ac242f751f59796ac2e29da2075ed9003 Mon Sep 17 00:00:00 2001
From: konglinghang <konglinghang@inspur.com>
Date: Fri, 26 Mar 2021 14:35:21 +0800
Subject: [PATCH 325/788] fix a word translation

---
 content/zh/docs/concepts/workloads/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/workloads/_index.md b/content/zh/docs/concepts/workloads/_index.md
index 743d452d99..7130758cd3 100644
--- a/content/zh/docs/concepts/workloads/_index.md
+++ b/content/zh/docs/concepts/workloads/_index.md
@@ -38,7 +38,7 @@ all the pods on that node fail. Kubernetes treats that level of failure as final
 would need to create a new `Pod` to recover, even if the node later becomes healthy.
 -->
 Kubernetes Pods 有[确定的生命周期](/zh/docs/concepts/workloads/pods/pod-lifecycle/)。
-例如，一旦某 Pod 在你的集群中运行，Pod 运行所在的
+例如，当某 Pod 在你的集群中运行，Pod 运行所在的
 {{< glossary_tooltip text="节点" term_id="node" >}} 出现致命错误时，
 所有该节点上的 Pods 都会失败。Kubernetes 将这类失败视为最终状态：
 即使该节点后来恢复正常运行，你也需要创建新的 Pod 来恢复应用。

From 50b14656e23a3e689b5fadaefd79c3e49cd9b901 Mon Sep 17 00:00:00 2001
From: Yuiko Mouri <yuiko-mori@nec.com>
Date: Wed, 17 Mar 2021 10:35:02 +0900
Subject: [PATCH 326/788] Replace redirect links and fix link to use localized
 page of reference/index

---
 content/ja/docs/reference/_index.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/ja/docs/reference/_index.md b/content/ja/docs/reference/_index.md
index 0496a730c4..aca4c278b5 100644
--- a/content/ja/docs/reference/_index.md
+++ b/content/ja/docs/reference/_index.md
@@ -16,7 +16,7 @@ content_type: concept
 
 ## APIリファレンス
 
-* [Kubernetes API概要](/docs/reference/using-api/api-overview/) - Kubernetes APIの概要です。
+* [Kubernetes API概要](/docs/reference/using-api/) - Kubernetes APIの概要です。
 * [Kubernetes APIリファレンス {{< latest-version >}}](/docs/reference/generated/kubernetes-api/{{< latest-version >}}/)
 
 ## APIクライアントライブラリー
@@ -30,9 +30,9 @@ content_type: concept
 
 ## CLIリファレンス
 
-* [kubectl](/docs/reference/kubectl/overview/) - コマンドの実行やKubernetesクラスターの管理に使う主要なCLIツールです。
+* [kubectl](/ja/docs/reference/kubectl/overview/) - コマンドの実行やKubernetesクラスターの管理に使う主要なCLIツールです。
     * [JSONPath](/ja/docs/reference/kubectl/jsonpath/) - kubectlで[JSONPath記法](https://goessner.net/articles/JsonPath/)を使うための構文ガイドです。
-* [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) - セキュアなKubernetesクラスターを簡単にプロビジョニングするためのCLIツールです。
+* [kubeadm](ja/docs/reference/setup-tools/kubeadm/) - セキュアなKubernetesクラスターを簡単にプロビジョニングするためのCLIツールです。
 
 ## コンポーネントリファレンス
 

From e181b9330baaeffb9318de55ad75966a0a003229 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Fri, 26 Mar 2021 15:50:17 +0800
Subject: [PATCH 327/788] [zh] Sync tasks pages for
 change-default-storage-class.md

* Sync with english version in 'Update change-default-storage-class.md (#25804)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../administer-cluster/change-default-storage-class.md      | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/change-default-storage-class.md b/content/zh/docs/tasks/administer-cluster/change-default-storage-class.md
index e2d6bd6ad9..ca4efbb7e2 100644
--- a/content/zh/docs/tasks/administer-cluster/change-default-storage-class.md
+++ b/content/zh/docs/tasks/administer-cluster/change-default-storage-class.md
@@ -43,11 +43,11 @@ dynamic provisioning of storage.
 如果是这样的话，你可以改变默认 StorageClass，或者完全禁用它以防止动态配置存储。
 
 <!--
-Simply deleting the default StorageClass may not work, as it may be re-created
+Deleting the default StorageClass may not work, as it may be re-created
 automatically by the addon manager running in your cluster. Please consult the docs for your installation
 for details about addon manager and how to disable individual addons.
 -->
-简单的删除默认 StorageClass 可能行不通，因为它可能会被你集群中的扩展管理器自动重建。
+删除默认 StorageClass 可能行不通，因为它可能会被你集群中的扩展管理器自动重建。
 请查阅你的安装文档中关于扩展管理器的细节，以及如何禁用单个扩展。
 
 
@@ -107,7 +107,7 @@ for details about addon manager and how to disable individual addons.
 3. 标记一个 StorageClass 为默认的：
 
    <!--
-   Similarly to the previous step, you need to add/set the annotation
+   Similar to the previous step, you need to add/set the annotation
    `storageclass.kubernetes.io/is-default-class=true`.
    -->
    和前面的步骤类似，你需要添加/设置注解 `storageclass.kubernetes.io/is-default-class=true`。

From 80391efa7ecc1aead27c91da8ccabf5c2157c4fe Mon Sep 17 00:00:00 2001
From: Harry Bagdi <harrybagdi@gmail.com>
Date: Fri, 26 Mar 2021 13:34:46 +0530
Subject: [PATCH 328/788] KEP-2365: documentation for namespace-scoped
 parameters reference

---
 .../docs/concepts/services-networking/ingress.md   | 14 +++++++++++++-
 .../command-line-tools-reference/feature-gates.md  |  4 ++++
 .../service/networking/namespaced-params.yaml      | 12 ++++++++++++
 3 files changed, 29 insertions(+), 1 deletion(-)
 create mode 100644 content/en/examples/service/networking/namespaced-params.yaml

diff --git a/content/en/docs/concepts/services-networking/ingress.md b/content/en/docs/concepts/services-networking/ingress.md
index 7a189a401b..fe09b9a8e8 100644
--- a/content/en/docs/concepts/services-networking/ingress.md
+++ b/content/en/docs/concepts/services-networking/ingress.md
@@ -220,7 +220,19 @@ of the controller that should implement the class.
 {{< codenew file="service/networking/external-lb.yaml" >}}
 
 IngressClass resources contain an optional parameters field. This can be used to
-reference additional configuration for this class.
+reference additional implementation-specific configuration for this class.
+
+#### Namespace-scoped parameters
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+`Parameters` field has a `scope` and `namespace` field that can be used to
+reference a namespace-specific resource for configuration of an Ingress class.
+`Scope` field defaults to `Cluster`, meaning, the default is cluster-scoped
+resource. Setting `Scope` to `Namespace` and setting the `Namespace` field
+will reference a paramters resource in a specific namespace:
+
+{{< codenew file="service/networking/namespaced-params.yaml" >}}
 
 ### Deprecated annotation
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2c181ca331..2bde94270e 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -124,6 +124,7 @@ different Kubernetes components.
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | Beta | 1.19 | |
+| `IngressClassNamespacedParams` | `false` | Alpha | 1.21 | |
 | `IPv6DualStack` | `false` | Alpha | 1.15 | 1.20 |
 | `IPv6DualStack` | `true` | Beta | 1.21 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
@@ -642,6 +643,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
   immutable for better safety and performance.
 - `IndexedJob`: Allows the [Job](/docs/concepts/workloads/controllers/job/)
   controller to manage Pod completions per completion index.
+- `IngressClassNamespacedParams`: Allow namespace-scoped parameters reference in
+  `IngressClass` resouce. This feature adds two fields - `Scope` and `Namespace`
+  to `IngressClass.spec.parameters`.
 - `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
   support for IPv6.
 - `KubeletConfigFile` (*deprecated*): Enable loading kubelet configuration from
diff --git a/content/en/examples/service/networking/namespaced-params.yaml b/content/en/examples/service/networking/namespaced-params.yaml
new file mode 100644
index 0000000000..dd56724787
--- /dev/null
+++ b/content/en/examples/service/networking/namespaced-params.yaml
@@ -0,0 +1,12 @@
+apiVersion: networking.k8s.io/v1
+kind: IngressClass
+metadata:
+  name: external-lb
+spec:
+  controller: example.com/ingress-controller
+  parameters:
+    apiGroup: k8s.example.com
+    kind: IngressParameters
+    name: external-lb
+    namespace: external-configuration
+    scope: Namespace

From f73f6c33e52364ce57655d79d3a26205b7616d11 Mon Sep 17 00:00:00 2001
From: Marc Bihlmaier <30314040+rdxmb@users.noreply.github.com>
Date: Fri, 26 Mar 2021 14:00:43 +0100
Subject: [PATCH 329/788] Update kubeadm-init.md (#27199)

* Update kubeadm-init.md

fix anchor

* Update content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md

Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>

Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
---
 content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
index 3d4b977102..cf578a0657 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
@@ -125,7 +125,7 @@ If your configuration is not using the latest version it is **recommended** that
 the [kubeadm config migrate](/docs/reference/setup-tools/kubeadm/kubeadm-config/) command.
 
 For more information on the fields and usage of the configuration you can navigate to our API reference
-page and pick a version from [the list](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm#pkg-subdirectories).
+page and pick a version from [the list](https://pkg.go.dev/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm#section-directories).
 
 ### Adding kube-proxy parameters {#kube-proxy}
 

From 31dcd91c9f7e3b60142a4bec849af9bbbada9857 Mon Sep 17 00:00:00 2001
From: Jordan Christiansen <jordan.christiansen@target.com>
Date: Thu, 25 Mar 2021 12:09:25 -0500
Subject: [PATCH 330/788] Document using configMapGenerators in Deployments

---
 .../kustomization.md                          | 139 ++++++++++++++++++
 1 file changed, 139 insertions(+)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
index 3ea3c50e8d..c28e5123ec 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -114,6 +114,98 @@ metadata:
   name: example-configmap-2-g2hdhfc6tk
 ```
 
+To use a generated ConfigMap in a Deployment, reference it by the name of the configMapGenerator. Kustomize will automatically replace this name with the generated name.
+
+This is an example deployment that uses a generated ConfigMap:
+
+```yaml
+# Create a application.properties file
+cat <<EOF >application.properties
+FOO=Bar
+EOF
+
+cat <<EOF >deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-app
+  labels:
+    app: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - name: app
+        image: my-app
+        volumeMount:
+        - name: config
+          mountPath: /config
+      volumes:
+      - name: config
+        configMap:
+          name: example-configmap-1
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+configMapGenerator:
+- name: example-configmap-1
+  files:
+  - application.properties
+EOF
+```
+
+Generate the ConfigMap and Deployment:
+
+```shell
+kubectl kustomize ./
+```
+
+The generated Deployment will refer to the generated ConfigMap by name:
+
+```yaml
+apiVersion: v1
+data:
+  application.properties: |
+    FOO=Bar
+kind: ConfigMap
+metadata:
+  name: example-configmap-1-g4hk9g2ff8
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: my-app
+  name: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - image: my-app
+        name: app
+        volumeMount:
+        - mountPath: /config
+          name: config
+      volumes:
+      - configMap:
+          name: example-configmap-1-g4hk9g2ff8
+        name: config
+```
+
 #### secretGenerator
 
 You can generate Secrets from files or literal key-value pairs. To generate a Secret from a file, add an entry to the `files` list in `secretGenerator`. Here is an example of generating a Secret with a data item from a file:
@@ -170,6 +262,53 @@ metadata:
 type: Opaque
 ```
 
+Like ConfigMaps, generated Secrets can be used in Deployments by refering to the name of the secretGenerator:
+
+```shell
+# Create a password.txt file
+cat <<EOF >./password.txt
+username=admin
+password=secret
+EOF
+
+cat <<EOF >deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-app
+  labels:
+    app: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - name: app
+        image: my-app
+        volumeMount:
+        - name: password
+          mountPath: /secrets
+      volumes:
+      - name: password
+        secret:
+          secretName: example-secret-1
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+secretGenerator:
+- name: example-secret-1
+  files:
+  - password.txt
+EOF
+```
+
 #### generatorOptions
 
 The generated ConfigMaps and Secrets have a content hash suffix appended. This ensures that a new ConfigMap or Secret is generated when the contents are changed. To disable the behavior of appending a suffix, one can use `generatorOptions`. Besides that, it is also possible to specify cross-cutting options for generated ConfigMaps and Secrets.

From ea0c1bb04b02b290e2dd781697442991440c2696 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Fri, 26 Mar 2021 14:19:44 +0100
Subject: [PATCH 331/788] add infos about docker setups

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 8ec876eef2..20e960935b 100644
--- a/README.md
+++ b/README.md
@@ -45,6 +45,8 @@ make container-serve
 
 Open up your browser to http://localhost:1313 to view the website. As you make changes to the source files, Hugo updates the website and forces a browser refresh.
 
+If you see errors, it probably means that the hugo container did not have enough computing resources available. To solve it, increase the amount of allowed CPU and memory usage for Docker on your machine ([MacOSX](https://docs.docker.com/docker-for-mac/#resources) and [Windows](https://docs.docker.com/docker-for-windows/#resources)).
+
 ## Running the website locally using Hugo
 
 Make sure to install the Hugo extended version specified by the `HUGO_VERSION` environment variable in the [`netlify.toml`](netlify.toml#L10) file.

From e9783b0cb459cbfc9edee0f61fdd49f220ceeba7 Mon Sep 17 00:00:00 2001
From: carol valencia <krol3@users.noreply.github.com>
Date: Fri, 26 Mar 2021 11:59:28 -0300
Subject: [PATCH 332/788] feat: content/es/docs/concepts/security/overview

---
 content/es/docs/concepts/security/_index.md   |   5 +
 content/es/docs/concepts/security/overview.md | 152 ++++++++++++++++++
 2 files changed, 157 insertions(+)
 create mode 100644 content/es/docs/concepts/security/_index.md
 create mode 100644 content/es/docs/concepts/security/overview.md

diff --git a/content/es/docs/concepts/security/_index.md b/content/es/docs/concepts/security/_index.md
new file mode 100644
index 0000000000..cdc487195d
--- /dev/null
+++ b/content/es/docs/concepts/security/_index.md
@@ -0,0 +1,5 @@
+---
+title: "Seguridad"
+weight: 81
+---
+
diff --git a/content/es/docs/concepts/security/overview.md b/content/es/docs/concepts/security/overview.md
new file mode 100644
index 0000000000..c045b32614
--- /dev/null
+++ b/content/es/docs/concepts/security/overview.md
@@ -0,0 +1,152 @@
+---
+title: Vista General da Seguridad Cloud Native
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+
+Esta descripción general define un modelo para la seguridad de Kubernetes en el contexto da Seguridad en Cloud Native.
+
+{{< warning >}}
+Este modelo de seguridad en el contenedor brinda sugerencias, no es una prueba de políticas de seguridad de la información.
+{{< /warning >}}
+
+<!-- body -->
+
+## Las 4C de Seguridad en Cloud Native
+
+Puede pensar en seguridad por capas. Las 4C de la seguridad nativa de la nube son la nube(Cloud),
+Clústeres, contenedores y código.
+
+{{< note >}}
+Este enfoque en capas aumenta la [defensa en profundidad](https://en.wikipedia.org/wiki/Defense_in_depth_(computing))
+de la seguridad, es considerada una buena práctica en seguridad para el software de sistemas.
+{{< /note >}}
+
+{{< figure src="/images/docs/4c.png" title="Las 4C de Seguridad en Cloud Native" >}}
+
+Cada capa del modelo de seguridad Cloud Native es basada en la siguiente capa más externa.
+La capa de código se beneficia de una base sólida(nube, clúster, contenedor) de capas seguras.
+No podemos garantir seguridad aplicando solo seguridad a nivel del Código, y usar estándares de seguridad deficientes en las otras capas.
+
+## Cloud
+
+En muchos sentidos, la nube (o los servidores o el centro de datos corporativo) es la
+[base informática confiable](https://en.wikipedia.org/wiki/Trusted_computing_base)
+de un clúster de Kubernetes. Si la capa de la nube es vulnerable (o
+configurado de alguna manera vulnerable), por consecuencia no hay garantía de que los componentes construidos
+encima de la base sean seguras. Cada proveedor de la nube tiene recomendaciones de seguridad
+para ejecutar las cargas de trabajo de forma segura en sus entornos.
+
+### Seguridad del proveedor de la nube
+
+Si está ejecutando un clúster de Kubernetes en su propio hardware o en un proveedor de nube diferente,
+consulte la documentación para conocer las mejores prácticas de seguridad.
+A continuación, algunos enlaces a la documentación de seguridad de los proveedores de nube más populares:
+
+{{< table caption="Cloud provider security" >}}
+
+Provedor IaaS        | Link |
+-------------------- | ------------ |
+Alibaba Cloud | https://www.alibabacloud.com/trust-center |
+Amazon Web Services | https://aws.amazon.com/security/ |
+Google Cloud Platform | https://cloud.google.com/security/ |
+IBM Cloud | https://www.ibm.com/cloud/security |
+Microsoft Azure | https://docs.microsoft.com/en-us/azure/security/azure-security |
+VMWare VSphere | https://www.vmware.com/security/hardening-guides.html |
+
+{{< /table >}}
+
+### Seguridad de la Infraestructura {#infrastructure-security}
+
+Sugerencias para proteger su infraestructura en un clúster de Kubernetes:
+
+{{< table caption="Infrastructure security" >}}
+
+Área de Interés para la Infraestructura de Kubernetes | Recomendación |
+--------------------------------------------- | -------------- |
+Acceso de red al servidor API (Plano de Control) | Todo acceso público al plano de control del Kubernetes en la Internet no está permitido y es controlado por listas de control de acceso a la red restrictas a un conjunto de direcciones IP necesarios para administrar el clúster.|
+Acceso a la red de los Nodos | Los nodos deben ser configurados para _sólo_ aceptar conexiones (por medio de listas de control de acceso a la red) desde el plano de control en los puertos especificados y aceptar conexiones para servicios en Kubernetes del tipo NodePort y LoadBalancer. Si es posible, estos nodos no deben exponerse públicamente en la Internet.
+Acceso de la API del Kubernetes al proveedor de la Cloud | Cada proveedor de la nube debe dar un conjunto de permisos al plano de control y nodos del Kubernetes. Es mejor otorgar al clúster el permiso de acceso al proveedor de nube siguiendo el [principio del mínimo privilegio](https://en.wikipedia.org/wiki/Principle_of_least_privilege) para los recursos que necesite administrar. La [documentación del Kops](https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md#iam-roles) fornece informações sobre as políticas e roles do IAM.
+Acceso al etcd | El acceso al etcd (banco de dados do Kubernetes) debe ser limitado apenas al plano de control. Dependiendo de su configuración, debería intentar usar etcd sobre TLS. Mayores informaciones pueden ser encontradas en la [documentación del etcd](https://github.com/etcd-io/etcd/tree/master/Documentation).
+Encriptación etcd | Siempre que sea posible, es una buena práctica encriptar todas las unidades de almacenamiento, el etcd mantiene el estado de todo el clúster (incluidos los Secretos), su disco debe estar encriptado.
+
+{{< /table >}}
+
+## Cluster
+
+Existe dos áreas de preocupación para proteger o Kubernetes:
+
+* Protección de las configuraciones de los componentes del clúster.
+* Protección de las aplicaciones que se ejecutan en el clúster.
+
+### Componentes del Clúster {#cluster-components}
+
+Si desea proteger su clúster de accesos accidentales o maliciosos y adoptar
+buenas prácticas de seguridad, a continuación los consejos sobre
+[protegiendo el cluster](/docs/tasks/administer-cluster/securing-a-cluster/).
+
+### Componentes del clúster (su aplicación) {#cluster-applications}
+
+Dependiendo de la superficie de ataque de su aplicación, es posible que desee concentrarse en
+temas de seguridad específicos. Por ejemplo: si está ejecutando un servicio (Servicio A) que es crítico
+en una cadena de otros recursos y otra carga de trabajo separada (Servicio B) que es
+vulnerable a un ataque de sobrecarga de recursos y, en consecuencia, el riesgo de comprometer el Servicio A
+es alto si no limita las funciones del Servicio B. La siguiente tabla enumera
+áreas de atención de seguridad y recomendaciones para proteger las cargas de trabajo que se ejecutan en Kubernetes:
+
+Áreas para la seguridad de la carga del trabajo | Recomendación |
+------------------------------ | --------------------- |
+Autorización RBAC (acceso a la API Kubernetes) | https://kubernetes.io/docs/reference/access-authn-authz/rbac/
+Autenticación | https://kubernetes.io/docs/concepts/security/controlling-access/
+Administrar secretos en la aplicación (encriptar el etcd - dato en reposo) | https://kubernetes.io/docs/concepts/configuration/secret/ <br> https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/
+Políticas de seguridad de Pod | https://kubernetes.io/docs/concepts/policy/pod-security-policy/
+Calidad de servicio (y gestión de recursos del clúster) | https://kubernetes.io/docs/tasks/configure-pod-container/quality-service-pod/
+Políticas de Red | https://kubernetes.io/docs/concepts/services-networking/network-policies/
+TLS para Kubernetes Ingress | https://kubernetes.io/docs/concepts/services-networking/ingress/#tls
+
+## Contenedor
+
+La seguridad de los contenedores está fuera del alcance de la guía. Aquí hay recomendaciones generales y
+enlaces para explorar este tema:
+
+Área de Interés para Contenedores | Recomendación |
+------------------------------ | -------------- |
+Escáneres de vulnerabilidad de contenedores y seguridad de dependencia del sistema operativo | Como parte del paso de la creación de la imagen, se debe utilizar un escáner de contenedores para detectar vulnerabilidades.
+Firma de Imágenes y Aplicación | Firma de imágenes de contenedores para mantener un sistema confiable para el contenido de sus contenedores.
+Prohibir Usuarios Privilegiados | Al crear contenedores, consulte la documentación para crear usuarios dentro de los contenedores con el menor privilegio necesario para cumplir con el propósito del contenedor en el sistema operativo.
+Utilice el contenedor de tiempo de ejecución con el aislamiento más fuerte | Seleccione [clases del contenedor runtime](/docs/concepts/containers/runtime-class/) con el proveedor de aislamiento más fuerte.
+
+## Código
+
+El código de la aplicación es una de las principales superficies de ataque sobre las que tenemos más control.
+Aunque la protección del código de la aplicación está fuera del tema de seguridad de Kubernetes, aquí algunas
+recomendaciones para proteger el código de su aplicación:
+
+### Seguridad del código
+
+{{< table caption="Code security" >}}
+
+Áreas de Atención para el Código | Recomendación |
+-------------------------| -------------- |
+Acceso solo a través de TLS | Si su código necesita comunicarse a través de TCP, ejecute un handshake TLS con el cliente anticipadamente. Con la excepción de algunos casos, encripte todo lo que está en tránsito. Yendo un paso más allá, es una buena idea cifrar el tráfico de red entre los servicios. Esto se puede hacer a través del proceso de autenticación mutua o [mTLS](https://en.wikipedia.org/wiki/Mutual_authentication), que realiza una verificación bilateral de la comunicación a través de los certificados en los servicios. |
+Limitación de intervalos de puertos de comunicación | Esta recomendación puede ser un poco evidente, pero siempre que sea posible, solo debe exponer los puertos de su servicio que son absolutamente esenciales para la comunicación o la recopilación de métricas. |
+Seguridad en dependencia de terceros | Es una buena práctica comprobar periódicamente las bibliotecas de terceros de su aplicación en busca de vulnerabilidades de seguridad. Cada lenguaje de programación tiene una herramienta para realizar esta verificación de forma automática. |
+Análisis de código estático | La mayoría de los lenguajes proporcionan una forma de analizar el código en busca de prácticas de codificación potencialmente inseguras. Siempre que sea posible, debe automatizar los escaneos utilizando herramientas que puedan escanear las bases del código en busca de errores de seguridad comunes. Algunas de las herramientas se pueden encontrar en [OWASP Source Code Analysis Tools](https://owasp.org/www-community/Source_Code_Analysis_Tools). |
+Ataques de sondeo dinámica | Existen algunas herramientas automatizadas que puede ejecutar en su servicio para explorar algunos de los ataques más conocidos. Esto incluye la inyección de SQL, CSRF y XSS. Una de las herramientas de análisis dinámico más populares es la [OWASP Zed Attack proxy](https://owasp.org/www-project-zap/). |
+
+{{< /table >}}
+
+## {{% heading "whatsnext" %}}
+
+Obtenga más información sobre los temas de seguridad de Kubernetes:
+
+* [Estándares de seguridad del pod](/docs/concepts/security/pod-security-standards/)
+* [Políticas de red para pods](/docs/concepts/services-networking/network-policies/)
+* [Control de acceso a la API de Kubernetes](/docs/concepts/security/controlling-access)
+* [Protegiendo su cluster](/docs/tasks/administer-cluster/securing-a-cluster/)
+* [Criptografía de datos en tránsito](/docs/tasks/tls/managing-tls-in-a-cluster/) for the control plane
+* [Criptografía de datos en reposo](/docs/tasks/administer-cluster/encrypt-data/)
+* [Secretos en Kubernetes](/docs/concepts/configuration/secret/)
+* [Runtime class](/docs/concepts/containers/runtime-class)
\ No newline at end of file

From dba902447c0ab4de0e673d2d7cca548706a8eb1b Mon Sep 17 00:00:00 2001
From: Maciej Szulik <maszulik@redhat.com>
Date: Tue, 16 Mar 2021 17:44:53 +0100
Subject: [PATCH 333/788] Update docs for CronJob GA

---
 .../concepts/workloads/controllers/cron-jobs.md | 13 +++++++++----
 .../feature-gates.md                            |  3 ++-
 .../tasks/job/automated-tasks-with-cron-jobs.md | 17 ++++++++++-------
 .../en/examples/application/job/cronjob.yaml    |  2 +-
 4 files changed, 22 insertions(+), 13 deletions(-)

diff --git a/content/en/docs/concepts/workloads/controllers/cron-jobs.md b/content/en/docs/concepts/workloads/controllers/cron-jobs.md
index 3624135a20..7127924411 100644
--- a/content/en/docs/concepts/workloads/controllers/cron-jobs.md
+++ b/content/en/docs/concepts/workloads/controllers/cron-jobs.md
@@ -10,7 +10,7 @@ weight: 80
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.8" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 A _CronJob_ creates {{< glossary_tooltip term_id="job" text="Jobs" >}} on a repeating schedule.
 
@@ -116,12 +116,17 @@ be down for the same period as the previous example (`08:29:00` to `10:21:00`,)
 The CronJob is only responsible for creating Jobs that match its schedule, and
 the Job in turn is responsible for the management of the Pods it represents.
 
-## New controller
+## Controller version {#new-controller}
 
-There's an alternative implementation of the CronJob controller, available as an alpha feature since Kubernetes 1.20. To select version 2 of the CronJob controller, pass the following [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) flag to the {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}.
+Starting with Kubernetes v1.21 the second version of the CronJob controller
+is the default implementation. To disable the default CronJob controller
+and use the original CronJob controller instead, one pass the `CronJobControllerV2`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+flag to the {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}},
+and set this flag to `false`. For example:
 
 ```
---feature-gates="CronJobControllerV2=true"
+--feature-gates="CronJobControllerV2=false"
 ```
 
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 5500c19412..d293c78631 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -91,7 +91,8 @@ different Kubernetes components.
 | `CSIVolumeFSGroupPolicy` | `true` | Beta | 1.20 | |
 | `ConfigurableFSGroupPolicy` | `false` | Alpha | 1.18 | 1.19 |
 | `ConfigurableFSGroupPolicy` | `true` | Beta | 1.20 | |
-| `CronJobControllerV2` | `false` | Alpha | 1.20 | |
+| `CronJobControllerV2` | `false` | Alpha | 1.20 | 1.20 |
+| `CronJobControllerV2` | `true` | Beta | 1.21 | |
 | `CustomCPUCFSQuotaPeriod` | `false` | Alpha | 1.12 | |
 | `DefaultPodTopologySpread` | `false` | Alpha | 1.19 | 1.19 |
 | `DefaultPodTopologySpread` | `true` | Beta | 1.20 | |
diff --git a/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md
index 693e730a09..26c7c91134 100644
--- a/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -1,6 +1,6 @@
 ---
 title: Running Automated Tasks with a CronJob
-min-kubernetes-server-version: v1.8
+min-kubernetes-server-version: v1.21
 reviewers:
 - chenopis
 content_type: task
@@ -9,6 +9,10 @@ weight: 10
 
 <!-- overview -->
 
+CronJobs was promoted to general availability in Kubernetes v1.21. If you are using an older version of
+Kubernetes, please refer to the documentation for the version of Kubernetes that you are using,
+so that you see accurate information. Older Kubernetes versions do not support the `batch/v1` CronJob API.
+
 You can use a {{< glossary_tooltip text="CronJob" term_id="cronjob" >}} to run {{< glossary_tooltip text="Jobs" term_id="job" >}} on a time-based schedule.
 These automated jobs run like [Cron](https://en.wikipedia.org/wiki/Cron) tasks on a Linux or UNIX system.
 
@@ -170,13 +174,12 @@ After the deadline, the cron job does not start the job.
 Jobs that do not meet their deadline in this way count as failed jobs.
 If this field is not specified, the jobs have no deadline.
 
-The CronJob controller counts how many missed schedules happen for a cron job. If there are more than 100 missed schedules, the cron job is no longer scheduled. When `.spec.startingDeadlineSeconds` is not set, the CronJob controller counts missed schedules from `status.lastScheduleTime` until now. 
+If the `.spec.startingDeadlineSeconds` field is set (not null), the CronJob
+controller measures the time between when a job is expected to be created and
+now. If the difference is higher than that limit, it will skip this execution.
 
-For example, one cron job is supposed to run every minute, the `status.lastScheduleTime` of the cronjob is 5:00am, but now it's 7:00am. That means 120 schedules were missed, so the cron job is no longer scheduled. 
-
-If the `.spec.startingDeadlineSeconds` field is set (not null), the CronJob controller counts how many missed jobs occurred from the value of `.spec.startingDeadlineSeconds` until now. 
-
-For example, if it is set to `200`, it counts how many missed schedules occurred in the last 200 seconds. In that case, if there were more than 100 missed schedules in the last 200 seconds, the cron job is no longer scheduled. 
+For example, if it is set to `200`, it allows a job to be created for up to 200
+seconds after the actual schedule.
 
 ### Concurrency Policy
 
diff --git a/content/en/examples/application/job/cronjob.yaml b/content/en/examples/application/job/cronjob.yaml
index 816d682f28..da905a9048 100644
--- a/content/en/examples/application/job/cronjob.yaml
+++ b/content/en/examples/application/job/cronjob.yaml
@@ -1,4 +1,4 @@
-apiVersion: batch/v1beta1
+apiVersion: batch/v1
 kind: CronJob
 metadata:
   name: hello

From 2df104f9396581e70d7d99c24aaea737194ff26b Mon Sep 17 00:00:00 2001
From: carol valencia <krol3@users.noreply.github.com>
Date: Fri, 26 Mar 2021 15:46:18 -0300
Subject: [PATCH 334/788] chore: content/es/docs/concepts/security/overview

---
 content/es/docs/concepts/security/overview.md | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/content/es/docs/concepts/security/overview.md b/content/es/docs/concepts/security/overview.md
index c045b32614..fdb3828cfe 100644
--- a/content/es/docs/concepts/security/overview.md
+++ b/content/es/docs/concepts/security/overview.md
@@ -1,12 +1,12 @@
 ---
-title: Vista General da Seguridad Cloud Native
+title: Vista General de Seguridad Cloud Native
 content_type: concept
 weight: 10
 ---
 
 <!-- overview -->
 
-Esta descripción general define un modelo para la seguridad de Kubernetes en el contexto da Seguridad en Cloud Native.
+Esta descripción general define un modelo para la seguridad de Kubernetes en el contexto de Seguridad en Cloud Native.
 
 {{< warning >}}
 Este modelo de seguridad en el contenedor brinda sugerencias, no es una prueba de políticas de seguridad de la información.
@@ -16,8 +16,8 @@ Este modelo de seguridad en el contenedor brinda sugerencias, no es una prueba d
 
 ## Las 4C de Seguridad en Cloud Native
 
-Puede pensar en seguridad por capas. Las 4C de la seguridad nativa de la nube son la nube(Cloud),
-Clústeres, contenedores y código.
+Puede pensar en seguridad por capas. Las 4C de la seguridad en cloud Native son la nube(Cloud),
+Clústeres, Contenedores y Código.
 
 {{< note >}}
 Este enfoque en capas aumenta la [defensa en profundidad](https://en.wikipedia.org/wiki/Defense_in_depth_(computing))
@@ -28,7 +28,7 @@ de la seguridad, es considerada una buena práctica en seguridad para el softwar
 
 Cada capa del modelo de seguridad Cloud Native es basada en la siguiente capa más externa.
 La capa de código se beneficia de una base sólida(nube, clúster, contenedor) de capas seguras.
-No podemos garantir seguridad aplicando solo seguridad a nivel del Código, y usar estándares de seguridad deficientes en las otras capas.
+No podemos garantizar la seguridad aplicando solo seguridad a nivel del código, y usar estándares de seguridad deficientes en las otras capas.
 
 ## Cloud
 
@@ -76,7 +76,7 @@ Encriptación etcd | Siempre que sea posible, es una buena práctica encriptar t
 
 ## Cluster
 
-Existe dos áreas de preocupación para proteger o Kubernetes:
+Existe dos áreas de preocupación para proteger Kubernetes:
 
 * Protección de las configuraciones de los componentes del clúster.
 * Protección de las aplicaciones que se ejecutan en el clúster.
@@ -84,8 +84,8 @@ Existe dos áreas de preocupación para proteger o Kubernetes:
 ### Componentes del Clúster {#cluster-components}
 
 Si desea proteger su clúster de accesos accidentales o maliciosos y adoptar
-buenas prácticas de seguridad, a continuación los consejos sobre
-[protegiendo el cluster](/docs/tasks/administer-cluster/securing-a-cluster/).
+buenas prácticas de seguridad, a continuación sigue estos consejos sobre
+[como proteger el clúster](/docs/tasks/administer-cluster/securing-a-cluster/).
 
 ### Componentes del clúster (su aplicación) {#cluster-applications}
 
@@ -134,7 +134,7 @@ Acceso solo a través de TLS | Si su código necesita comunicarse a través de T
 Limitación de intervalos de puertos de comunicación | Esta recomendación puede ser un poco evidente, pero siempre que sea posible, solo debe exponer los puertos de su servicio que son absolutamente esenciales para la comunicación o la recopilación de métricas. |
 Seguridad en dependencia de terceros | Es una buena práctica comprobar periódicamente las bibliotecas de terceros de su aplicación en busca de vulnerabilidades de seguridad. Cada lenguaje de programación tiene una herramienta para realizar esta verificación de forma automática. |
 Análisis de código estático | La mayoría de los lenguajes proporcionan una forma de analizar el código en busca de prácticas de codificación potencialmente inseguras. Siempre que sea posible, debe automatizar los escaneos utilizando herramientas que puedan escanear las bases del código en busca de errores de seguridad comunes. Algunas de las herramientas se pueden encontrar en [OWASP Source Code Analysis Tools](https://owasp.org/www-community/Source_Code_Analysis_Tools). |
-Ataques de sondeo dinámica | Existen algunas herramientas automatizadas que puede ejecutar en su servicio para explorar algunos de los ataques más conocidos. Esto incluye la inyección de SQL, CSRF y XSS. Una de las herramientas de análisis dinámico más populares es la [OWASP Zed Attack proxy](https://owasp.org/www-project-zap/). |
+Ataques de sondeo dinámico | Existen algunas herramientas automatizadas que puede ejecutar en su servicio para explorar algunos de los ataques más conocidos. Esto incluye la inyección de SQL, CSRF y XSS. Una de las herramientas de análisis dinámico más populares es la [OWASP Zed Attack proxy](https://owasp.org/www-project-zap/). |
 
 {{< /table >}}
 
@@ -145,7 +145,7 @@ Obtenga más información sobre los temas de seguridad de Kubernetes:
 * [Estándares de seguridad del pod](/docs/concepts/security/pod-security-standards/)
 * [Políticas de red para pods](/docs/concepts/services-networking/network-policies/)
 * [Control de acceso a la API de Kubernetes](/docs/concepts/security/controlling-access)
-* [Protegiendo su cluster](/docs/tasks/administer-cluster/securing-a-cluster/)
+* [Protegiendo su clúster](/docs/tasks/administer-cluster/securing-a-cluster/)
 * [Criptografía de datos en tránsito](/docs/tasks/tls/managing-tls-in-a-cluster/) for the control plane
 * [Criptografía de datos en reposo](/docs/tasks/administer-cluster/encrypt-data/)
 * [Secretos en Kubernetes](/docs/concepts/configuration/secret/)

From b8be2e723c39846e7f9dcbc54ac07c25b7783435 Mon Sep 17 00:00:00 2001
From: Neha Viswanathan <itsnehavis@gmail.com>
Date: Mon, 1 Mar 2021 16:25:50 -0800
Subject: [PATCH 335/788] use targetPort instead of containerPort

---
 .../docs/tasks/debug-application-cluster/debug-application.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/debug-application-cluster/debug-application.md b/content/en/docs/tasks/debug-application-cluster/debug-application.md
index f665accb18..5c2e89a1c6 100644
--- a/content/en/docs/tasks/debug-application-cluster/debug-application.md
+++ b/content/en/docs/tasks/debug-application-cluster/debug-application.md
@@ -142,7 +142,7 @@ kubectl get pods --selector=name=nginx,type=frontend
 to list pods that match this selector.  Verify that the list matches the Pods that you expect to provide your Service.
 
 If the list of pods matches expectations, but your endpoints are still empty, it's possible that you don't
-have the right ports exposed.  If your service has a `containerPort` specified, but the Pods that are
+have the right ports exposed.  If your service has a `targetPort` specified, but the Pods that are
 selected don't have that port listed, then they won't be added to the endpoints list.
 
 Verify that the pod's `containerPort` matches up with the Service's `targetPort`
@@ -157,7 +157,7 @@ check:
 
    * Are your pods working correctly?  Look for restart count, and [debug pods](#debugging-pods).
    * Can you connect to your pods directly?  Get the IP address for the Pod, and try to connect directly to that IP.
-   * Is your application serving on the port that you configured?  Kubernetes doesn't do port remapping, so if your application serves on 8080, the `containerPort` field needs to be 8080.
+   * Is your application serving on the port that you configured?  If your application serves on 8080, the `targetPort` field needs to be 8080.
 
 ## {{% heading "whatsnext" %}}
 

From 3105d524e3568c88e4ec63663ec6038e407f1cf8 Mon Sep 17 00:00:00 2001
From: Elana Hashman <ehashman@redhat.com>
Date: Tue, 23 Mar 2021 15:43:21 -0700
Subject: [PATCH 336/788] Add documentation for probe-level grace period
 overrides

---
 .../feature-gates.md                          |  4 ++
 ...igure-liveness-readiness-startup-probes.md | 41 +++++++++++++++++++
 2 files changed, 45 insertions(+)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 2c181ca331..7790caa102 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -146,6 +146,7 @@ different Kubernetes components.
 | `PodAffinityNamespaceSelector` | `false` | Alpha | 1.21 | |
 | `PodOverhead` | `false` | Alpha | 1.16 | 1.17 |
 | `PodOverhead` | `true` | Beta | 1.18 |  |
+| `ProbeTerminationGracePeriod` | `false` | Alpha | 1.21 | |
 | `ProcMountType` | `false` | Alpha | 1.12 | |
 | `QOSReserved` | `false` | Alpha | 1.11 | |
 | `RemainingItemCount` | `false` | Alpha | 1.15 | |
@@ -697,6 +698,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `PodShareProcessNamespace`: Enable the setting of `shareProcessNamespace` in a Pod for sharing
   a single process namespace between containers running in a pod.  More details can be found in
   [Share Process Namespace between Containers in a Pod](/docs/tasks/configure-pod-container/share-process-namespace/).
+- `ProbeTerminationGracePeriod`: Enable [setting probe-level
+  `terminationGracePeriodSeconds`](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationGracePeriodSeconds)
+   on pods.  See the [enhancement proposal](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2238-liveness-probe-grace-period) for more details.
 - `ProcMountType`: Enables control over the type proc mounts for containers
   by setting the `procMount` field of a SecurityContext.
 - `QOSReserved`: Allows resource reservations at the QoS level preventing pods
diff --git a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
index 0cdfd28258..4f78ee2493 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
@@ -427,7 +427,48 @@ For a TCP probe, the kubelet makes the probe connection at the node, not in the
 means that you can not use a service name in the `host` parameter since the kubelet is unable
 to resolve it.
 
+### Probe-level `terminationGracePeriodSeconds`
 
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+Prior to release 1.21, the pod-level `terminationGracePeriodSeconds` was used
+for terminating a container that failed its liveness or startup probe. This
+coupling was unintended and may have resulted in failed containers taking an
+unusually long time to restart when a pod-level `terminationGracePeriodSeconds`
+was set.
+
+In 1.21, when the feature flag `ProbeTerminationGracePeriod` is enabled, users
+can specify a probe-level `terminationGracePeriodSeconds` as part of the probe
+specification. When the feature flag is enabled, and both a pod- and
+probe-level `terminationGracePeriodSeconds` are set, the kubelet will use the
+probe-level value.
+
+For example,
+
+```yaml
+spec:
+  terminationGracePeriodSeconds: 3600  # pod-level
+  containers:
+  - name: test
+    image: ...
+
+    ports:
+    - name: liveness-port
+      containerPort: 8080
+      hostPort: 8080
+
+    livenessProbe:
+      httpGet:
+        path: /healthz
+        port: liveness-port
+      failureThreshold: 1
+      periodSeconds: 60
+      # Override pod-level terminationGracePeriodSeconds #
+      terminationGracePeriodSeconds: 60
+```
+
+Probe-level `terminationGracePeriodSeconds` cannot be set for readiness probes.
+It will be rejected by the API server.
 
 ## {{% heading "whatsnext" %}}
 

From a6333facb457351406f5f77ab74752a47bf3415c Mon Sep 17 00:00:00 2001
From: Neto Deolino <netodeolino@gmail.com>
Date: Fri, 26 Mar 2021 18:04:37 -0300
Subject: [PATCH 337/788] renamed incorrect word in Portuguese

---
 .../tutorials/kubernetes-basics/deploy-app/deploy-intro.html    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
index a5bdb75e8d..1d927cf038 100644
--- a/content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
+++ b/content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
@@ -31,7 +31,7 @@ weight: 10
                 Assim que o seu cluster Kubernetes estiver em execução você pode implementar seu aplicativo em contêiners nele.
                 Para fazer isso, você precisa criar uma configuração do tipo <b> Deployment </b> do Kubernetes. O Deployment define como criar e 
                 atualizar instâncias do seu aplicativo. Depois de criar um Deployment, o Master do Kubernetes
-                agenda as instâncias do aplicativo incluídas nesse Deployment para ser executado em nós individuais do CLuster.
+                agenda as instâncias do aplicativo incluídas nesse Deployment para ser executado em nós individuais do Cluster.
                 </p>
 
                 <p> Depois que as instâncias do aplicativo são criadas, um Controlador do Kubernetes Deployment monitora continuamente essas instâncias. 

From 927b5af65f2a5264a17d86ceb0db5650d0665412 Mon Sep 17 00:00:00 2001
From: Neha Viswanathan <itsnehavis@gmail.com>
Date: Fri, 26 Mar 2021 14:37:54 -0700
Subject: [PATCH 338/788] update

---
 .../debug-application.md                          | 15 +--------------
 1 file changed, 1 insertion(+), 14 deletions(-)

diff --git a/content/en/docs/tasks/debug-application-cluster/debug-application.md b/content/en/docs/tasks/debug-application-cluster/debug-application.md
index 5c2e89a1c6..f927ba5e5b 100644
--- a/content/en/docs/tasks/debug-application-cluster/debug-application.md
+++ b/content/en/docs/tasks/debug-application-cluster/debug-application.md
@@ -140,24 +140,11 @@ kubectl get pods --selector=name=nginx,type=frontend
 ```
 
 to list pods that match this selector.  Verify that the list matches the Pods that you expect to provide your Service.
-
-If the list of pods matches expectations, but your endpoints are still empty, it's possible that you don't
-have the right ports exposed.  If your service has a `targetPort` specified, but the Pods that are
-selected don't have that port listed, then they won't be added to the endpoints list.
-
 Verify that the pod's `containerPort` matches up with the Service's `targetPort`
 
 #### Network traffic is not forwarded
 
-If you can connect to the service, but the connection is immediately dropped, and there are endpoints
-in the endpoints list, it's likely that the proxy can't contact your pods.
-
-There are three things to
-check:
-
-   * Are your pods working correctly?  Look for restart count, and [debug pods](#debugging-pods).
-   * Can you connect to your pods directly?  Get the IP address for the Pod, and try to connect directly to that IP.
-   * Is your application serving on the port that you configured?  If your application serves on 8080, the `targetPort` field needs to be 8080.
+Please see [debugging service](/docs/tasks/debug-application-cluster/debug-service.md) for more information.
 
 ## {{% heading "whatsnext" %}}
 

From 79577607c8306dad04594d96aeb3650840d017c6 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sat, 27 Mar 2021 00:11:06 +0200
Subject: [PATCH 339/788] remove command

---
 .../run-application/run-stateless-application-deployment.md      | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/ja/docs/tasks/run-application/run-stateless-application-deployment.md b/content/ja/docs/tasks/run-application/run-stateless-application-deployment.md
index 963df78524..da7c286f89 100644
--- a/content/ja/docs/tasks/run-application/run-stateless-application-deployment.md
+++ b/content/ja/docs/tasks/run-application/run-stateless-application-deployment.md
@@ -49,7 +49,6 @@ Kubernetes Deploymentオブジェクトを作成することでアプリケー
 
     出力はこのようになります:
 
-        user@computer:~/website$ kubectl describe deployment nginx-deployment
         Name:     nginx-deployment
         Namespace:    default
         CreationTimestamp:  Tue, 30 Aug 2016 18:11:37 -0700

From fa5ef755a2439c1e3665a617387e6e2b88baedf4 Mon Sep 17 00:00:00 2001
From: Bharath Vedartham <vedabharath12345@gmail.com>
Date: Sat, 27 Mar 2021 13:52:54 +0530
Subject: [PATCH 340/788] Explicitly specify kubernetes system daemons

---
 .../docs/tasks/administer-cluster/reserve-compute-resources.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/reserve-compute-resources.md b/content/en/docs/tasks/administer-cluster/reserve-compute-resources.md
index b6249f50ef..a5661263f2 100644
--- a/content/en/docs/tasks/administer-cluster/reserve-compute-resources.md
+++ b/content/en/docs/tasks/administer-cluster/reserve-compute-resources.md
@@ -90,7 +90,7 @@ In addition to `cpu`, `memory`, and `ephemeral-storage`, `pid` may be
 specified to reserve the specified number of process IDs for
 kubernetes system daemons.
 
-To optionally enforce `kube-reserved` on system daemons, specify the parent
+To optionally enforce `kube-reserved` on kubernetes system daemons, specify the parent
 control group for kube daemons as the value for `--kube-reserved-cgroup` kubelet
 flag.
 

From 2c530c295aab7f94b0ba2c16572957b8219e3345 Mon Sep 17 00:00:00 2001
From: Henry Liu <henry.liu@daocloud.io>
Date: Sat, 27 Mar 2021 16:50:43 +0800
Subject: [PATCH 341/788] Improve "look and feel" of tabs to make it clearer
 where they start/end (#26828)

* improve "look and feel" of tabs to make it clearer where they start/end

* add border-radius to tab-pane

* remove the .td-content .hightlight margin when inside the tab-content
---
 assets/scss/_base.scss | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/assets/scss/_base.scss b/assets/scss/_base.scss
index b1b112cb38..4113b49bee 100644
--- a/assets/scss/_base.scss
+++ b/assets/scss/_base.scss
@@ -869,3 +869,22 @@ body.td-documentation {
       display: none;
     }
 }
+
+// nav-tabs and tab-content
+.nav-tabs {
+  border-bottom: none !important;
+}
+
+.td-content .tab-content .highlight {
+  margin: 0;
+}
+
+.tab-pane {
+  border-radius: 0.25rem;
+  padding: 0 16px 16px;
+
+  border: 1px solid #dee2e6;
+  &:first-of-type.active {
+    border-top-left-radius: 0;
+  }
+}

From c2ab7156ef70041151b49cfb7a79031ee57b34f1 Mon Sep 17 00:00:00 2001
From: Stefan Scheidewig <59603579+stefan-scheidewig@users.noreply.github.com>
Date: Sat, 27 Mar 2021 10:15:54 +0100
Subject: [PATCH 342/788] Fixed typo in german setup documentation

---
 content/de/docs/setup/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/de/docs/setup/_index.md b/content/de/docs/setup/_index.md
index d7f074efb3..2203fcc19c 100644
--- a/content/de/docs/setup/_index.md
+++ b/content/de/docs/setup/_index.md
@@ -9,7 +9,7 @@ content_type: concept
 
 Diese Sektion umfasst verschiedene Optionen zum Einrichten und Betrieb von Kubernetes.
 
-Verschiedene Kubernetes Lösungen haben verschiedene Anforderungen:  Einfache Wartung, Sicherheit, Kontrolle, verfügbare Resourcen und erforderliches Fachwissen zum Betrieb und zur Verwaltung dess folgende Diagramm zeigt die möglichen Abstraktionen eines Kubernetes-Clusters und ob eine Abstraktion selbst verwaltet oder von einem Anbieter verwaltet wird.
+Verschiedene Kubernetes Lösungen haben verschiedene Anforderungen:  Einfache Wartung, Sicherheit, Kontrolle, verfügbare Resourcen und erforderliches Fachwissen zum Betrieb und zur Verwaltung. Das folgende Diagramm zeigt die möglichen Abstraktionen eines Kubernetes-Clusters und ob eine Abstraktion selbst verwaltet oder von einem Anbieter verwaltet wird.
 
 Sie können einen Kubernetes-Cluster auf einer lokalen Maschine, Cloud, On-Prem Datacenter bereitstellen; oder wählen Sie einen verwalteten Kubernetes-Cluster. Sie können auch eine individuelle Lösung über eine grosse Auswahl an Cloud Anbietern oder Bare-Metal-Umgebungen nutzen.
 

From da8012d6844f86e48477ba14bb4d312f2876e19c Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Sat, 27 Mar 2021 21:33:28 +0800
Subject: [PATCH 343/788] [zh] Sync tasks pages for
 reserve-compute-resources.md

* Sync with english version in 'Explicitly specify kubernetes system daemons in doc(#27249)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../tasks/administer-cluster/reserve-compute-resources.md  | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md b/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
index 381697d352..f03e2bde30 100644
--- a/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
+++ b/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
@@ -160,20 +160,21 @@ kubernetes 系统守护进程记述其资源预留值。
 kubernetes 系统守护进程预留指定数量的进程 ID。
 
 <!--
-To optionally enforce `kube-reserved` on system daemons, specify the parent
+To optionally enforce `kube-reserved` on kubernetes system daemons, specify the parent
 control group for kube daemons as the value for `--kube-reserved-cgroup` kubelet
 flag.
 
 It is recommended that the kubernetes system daemons are placed under a top
 level control group (`runtime.slice` on systemd machines for example). Each
 system daemon should ideally run within its own child control group. Refer to
-[this doc](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md#recommended-cgroups-setup)
+[this
+doc](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md#recommended-cgroups-setup)
 for more details on recommended control group hierarchy.
 
 Note that Kubelet **does not** create `--kube-reserved-cgroup` if it doesn't
 exist. Kubelet will fail if an invalid cgroup is specified.
 -->
-要选择性地对系统守护进程上执行 `kube-reserved` 保护，需要把 kubelet 的
+要选择性地对 kubernetes 系统守护进程上执行 `kube-reserved` 保护，需要把 kubelet 的
 `--kube-reserved-cgroup` 标志的值设置为 kube 守护进程的父控制组。
 
 推荐将 kubernetes 系统守护进程放置于顶级控制组之下（例如 systemd 机器上的

From 6a3c783af66571e9daad1d9e61b9f9187f37a52f Mon Sep 17 00:00:00 2001
From: Andreas Deininger <andreas@deininger.net>
Date: Sat, 27 Mar 2021 20:59:28 +0100
Subject: [PATCH 344/788] Fixing typo.

---
 README-de.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README-de.md b/README-de.md
index b570f43671..b6f4491e70 100644
--- a/README-de.md
+++ b/README-de.md
@@ -9,7 +9,7 @@ Herzlich willkommen! Dieses Repository enthält alle Assets, die zur Erstellung
 
 Sie können auf die Schaltfläche **Fork** im oberen rechten Bereich des Bildschirms klicken, um eine Kopie dieses Repositorys in Ihrem GitHub-Konto zu erstellen. Diese Kopie wird als *Fork* bezeichnet. Nehmen Sie die gewünschten Änderungen an Ihrem Fork vor. Wenn Sie bereit sind, diese Änderungen an uns zu senden, gehen Sie zu Ihrem Fork und erstellen Sie eine neue Pull-Anforderung, um uns darüber zu informieren.
 
-Sobald Ihre Pull-Anfrage erstellt wurde, übernimmt ein Rezensent von Kubernetes die Verantwortung für klares, umsetzbares Feedback. Als Eigentümer des Pull-Request **liegt es in Ihrer Verantwortung Ihren Pull-Reqest enstsprechend des Feedbacks, dass Sie vom Kubernetes-Reviewer erhalten haben abzuändern.** Beachten Sie auch, dass Sie am Ende mehr als einen Rezensenten von Kubernetes erhalten, der Ihnen Feedback gibt, oder dass Sie Rückmeldungen von einem Rezensenten von Kubernetes erhalten, der sich von demjenigen unterscheidet, der ursprünglich für das Feedback zugewiesen wurde. In einigen Fällen kann es vorkommen, dass einer Ihrer Prüfer bei Bedarf eine technische Überprüfung von einem [Kubernetes Tech-Reviewer](https://github.com/kubernetes/website/wiki/tech-reviewers) anfordert. Reviewer geben ihr Bestes, um zeitnah Feedback zu geben, die Antwortzeiten können jedoch je nach den Umständen variieren.
+Sobald Ihre Pull-Anfrage erstellt wurde, übernimmt ein Rezensent von Kubernetes die Verantwortung für klares, umsetzbares Feedback. Als Eigentümer des Pull-Request **liegt es in Ihrer Verantwortung Ihren Pull-Reqest entsprechend des Feedbacks, dass Sie vom Kubernetes-Reviewer erhalten haben abzuändern.** Beachten Sie auch, dass Sie am Ende mehr als einen Rezensenten von Kubernetes erhalten, der Ihnen Feedback gibt, oder dass Sie Rückmeldungen von einem Rezensenten von Kubernetes erhalten, der sich von demjenigen unterscheidet, der ursprünglich für das Feedback zugewiesen wurde. In einigen Fällen kann es vorkommen, dass einer Ihrer Prüfer bei Bedarf eine technische Überprüfung von einem [Kubernetes Tech-Reviewer](https://github.com/kubernetes/website/wiki/tech-reviewers) anfordert. Reviewer geben ihr Bestes, um zeitnah Feedback zu geben, die Antwortzeiten können jedoch je nach den Umständen variieren.
 
 Weitere Informationen zum Beitrag zur Kubernetes-Dokumentation finden Sie unter:
 

From 72b37b1c6a678604d07f8e914555f87503692715 Mon Sep 17 00:00:00 2001
From: "Edson C. (aka tuxpilgrim)" <edsoncelio@users.noreply.github.com>
Date: Sat, 27 Mar 2021 17:42:43 -0300
Subject: [PATCH 345/788] Update
 content/pt/docs/concepts/cluster-administration/_index.md (#27255)

* Update content/pt/docs/concepts/cluster-administration/_index.md

* Update title

* Fix typo MOnitoramento
---
 .../concepts/cluster-administration/_index.md | 66 ++++++++++++++++++-
 1 file changed, 65 insertions(+), 1 deletion(-)

diff --git a/content/pt/docs/concepts/cluster-administration/_index.md b/content/pt/docs/concepts/cluster-administration/_index.md
index 75c4425176..67051766ed 100755
--- a/content/pt/docs/concepts/cluster-administration/_index.md
+++ b/content/pt/docs/concepts/cluster-administration/_index.md
@@ -1,5 +1,69 @@
 ---
-title: "Administração de Cluster"
+title: Administração de Cluster
 weight: 100
+content_type: concept
+description: >
+  Detalhes de baixo nível relevantes para criar ou administrar um cluster Kubernetes.
+no_list: true
 ---
 
+<!-- overview -->
+A visão geral da administração do cluster é para qualquer pessoa que crie ou administre um cluster do Kubernetes.
+É pressuposto alguma familiaridade com os [conceitos](/docs/concepts) principais do Kubernetes.
+
+<!-- body -->
+## Planejando um cluster
+
+Consulte os guias em [Configuração](/docs/setup) para exemplos de como planejar, instalar e configurar clusters Kubernetes. As soluções listadas neste artigo são chamadas de *distros*.
+
+   {{< note  >}}
+   Nem todas as distros são mantidas ativamente. Escolha distros que foram testadas com uma versão recente do Kubernetes.
+   {{< /note >}}
+
+Antes de escolher um guia, aqui estão algumas considerações:
+
+- Você quer experimentar o Kubernetes em seu computador ou deseja criar um cluster de vários nós com alta disponibilidade? Escolha as distros mais adequadas ás suas necessidades.
+- Você vai usar um **cluster Kubernetes gerenciado** , como o [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/), ou **vai hospedar seu próprio cluster**?
+- Seu cluster será **local**, ou **na nuvem (IaaS)**? O Kubernetes não oferece suporte direto a clusters híbridos. Em vez disso, você pode configurar vários clusters.
+- **Se você estiver configurando o Kubernetes local**, leve em consideração qual [modelo de rede](/docs/concepts/cluster-Administration/networking) se encaixa melhor.
+- Você vai executar o Kubernetes em um hardware **bare metal** ou em **máquinas virtuais? (VMs)**?
+- Você **deseja apenas executar um cluster** ou espera **participar ativamente do desenvolvimento do código do projeto Kubernetes**? Se for a segunda opção,
+escolha uma distro desenvolvida ativamente. Algumas distros usam apenas versão binária, mas oferecem uma maior variedade de opções.
+- Familiarize-se com os [componentes](/docs/concepts/overview/components/) necessários para executar um cluster.
+
+
+## Gerenciando um cluster
+
+* Aprenda como [gerenciar nós](/docs/concepts/architecture/nodes/).
+* Aprenda a configurar e [gerenciar a quota de recursos](/docs/concepts/policy/resource-quotas/) para clusters compartilhados.
+
+## Protegendo um cluster
+
+* [Gerar Certificados](/docs/tasks/administer-cluster/certificates/)  descreve os passos para gerar certificados usando diferentes cadeias de ferramentas.
+
+* [Ambiente de Contêineres do Kubernetes](/docs/concepts/containers/container-environment/) descreve o ambiente para contêineres gerenciados pelo kubelet em um nó Kubernetes.
+
+* [Controle de Acesso a API do Kubernetes](/docs/concepts/security/controlling-access) descreve como o Kubernetes implementa o controle de acesso para sua própria API.
+
+* [Autenticação](/docs/reference/access-authn-authz/authentication/) explica a autenticação no Kubernetes, incluindo as várias opções de autenticação.
+
+* [Autorização](/docs/reference/access-authn-authz/authorization/) é separado da autenticação e controla como as chamadas HTTP são tratadas.
+
+* [Usando Controladores de Admissão](/docs/reference/access-authn-authz/admission-controllers/) explica plugins que interceptam requisições para o servidor da API Kubernetes após 
+a autenticação e autorização.
+
+* [usando Sysctl em um Cluster Kubernetes](/docs/tasks/administer-cluster/sysctl-cluster/) descreve a um administrador como usar a ferramenta de linha de comando `sysctl` para
+definir os parâmetros do kernel.
+
+* [Auditoria](/docs/tasks/debug-application-cluster/audit/) descreve como interagir com *logs* de auditoria do Kubernetes.
+
+### Protegendo o kubelet
+  * [Comunicação Control Plane-Nó](/docs/concepts/architecture/control-plane-node-communication/)
+  * [TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)
+  * [Autenticação/autorização do kubelet](/docs/reference/command-line-tools-reference/kubelet-authentication-authorization/)
+
+## Serviços Opcionais para o Cluster
+
+* [Integração com DNS](/docs/concepts/services-networking/dns-pod-service/) descreve como resolver um nome DNS diretamente para um serviço Kubernetes.
+
+* [Registro e Monitoramento da Atividade do Cluster](/docs/concepts/cluster-administration/logging/) explica como funciona o *logging* no Kubernetes e como implementá-lo.

From 229a65e46f5fa83d099dcb6ee1554c39fb01ff66 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sun, 28 Mar 2021 01:38:43 +0200
Subject: [PATCH 346/788] [id] remove command from output block

---
 .../run-application/run-stateless-application-deployment.md      | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/id/docs/tasks/run-application/run-stateless-application-deployment.md b/content/id/docs/tasks/run-application/run-stateless-application-deployment.md
index a069188de6..74e76c827b 100644
--- a/content/id/docs/tasks/run-application/run-stateless-application-deployment.md
+++ b/content/id/docs/tasks/run-application/run-stateless-application-deployment.md
@@ -51,7 +51,6 @@ YAML berikut mendeskripsikan sebuah Deployment yang menjalankan _image_ Docker n
 
     Keluaran dari perintah tersebut akan menyerupai:
 
-        user@computer:~/website$ kubectl describe deployment nginx-deployment
         Name:     nginx-deployment
         Namespace:    default
         CreationTimestamp:  Tue, 30 Aug 2016 18:11:37 -0700

From 3c1216c7cec81c2690a2a7279a6bfb254a368061 Mon Sep 17 00:00:00 2001
From: Harold <xudongliuharold@gmail.com>
Date: Sat, 27 Mar 2021 17:38:42 -0700
Subject: [PATCH 347/788] Add detail documentation for service
 LoadBalancerClass

---
 content/en/docs/concepts/services-networking/service.md  | 9 +++++++++
 .../command-line-tools-reference/feature-gates.md        | 2 +-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index b7a7edcd38..3bd6709fa0 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -628,6 +628,15 @@ is set to `false` on an existing Service with allocated node ports, those node p
 You must explicitly remove the `nodePorts` entry in every Service port to de-allocate those node ports.
 You must enable the `ServiceLBNodePortControl` feature gate to use this field.
 
+#### Specifying class of load balancer implementation {#load-balancer-class}
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+Starting in v1.21, you can optionally specify class of load balancer implementation for a Service Type=LoadBalancer by setting field `spec.loadBalancerClass` value. By default, `spec.loadBalancerClass` is `nil` and type LoadBalacner Services will use the cloud providers' default load balancer implementation. 
+If `spec.loadBalancerClass` is specified, it is assumed that a matching class load balancer implementation is watching for Services and any default load balancer implementation (e.g. cloud providers) will ignore Services that set this field. `spec.loadBalancerClass` can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. 
+The value of `spec.loadBalancerClass` must be a label-style identifier, with an optional prefix, e.g. "internal-vip" or "example.com/internal-vip". Unprefixed names are reserved for end-users.
+You must enable the `ServiceLoadBalancerClass` feature gate to use this field.
+
 #### Internal load balancer
 
 In a mixed environment it is sometimes necessary to route traffic from Services inside the same
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 68ea25e628..019b9ff8ee 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -730,7 +730,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints.
 - `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
   field on Services.
-- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services. See [Service Type=LoadBalancer Class Field](https://github.com/kubernetes/enhancements/tree/master/keps/sig-cloud-provider/1959-service-lb-class-field) for more details.
+- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services. See [Specifying class of load balancer implementation](/docs/concepts/services-networking/service/#specifying-class-of-load-balancer-implementation-load-balancer-class) for more details.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.
 - `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers
   created by a cloud provider. A node is eligible for exclusion if labelled with

From c38481d348cf18705a2ba9485347b1057e976f5b Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Sun, 28 Mar 2021 10:17:30 +0800
Subject: [PATCH 348/788] Explicitly specify kubernetes system daemons in doc

---
 .../tasks/administer-cluster/reserve-compute-resources.md     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md b/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
index 381697d352..ec8272af3e 100644
--- a/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
+++ b/content/zh/docs/tasks/administer-cluster/reserve-compute-resources.md
@@ -160,7 +160,7 @@ kubernetes 系统守护进程记述其资源预留值。
 kubernetes 系统守护进程预留指定数量的进程 ID。
 
 <!--
-To optionally enforce `kube-reserved` on system daemons, specify the parent
+To optionally enforce `kube-reserved` on kubernetes system daemons, specify the parent
 control group for kube daemons as the value for `--kube-reserved-cgroup` kubelet
 flag.
 
@@ -173,7 +173,7 @@ for more details on recommended control group hierarchy.
 Note that Kubelet **does not** create `--kube-reserved-cgroup` if it doesn't
 exist. Kubelet will fail if an invalid cgroup is specified.
 -->
-要选择性地对系统守护进程上执行 `kube-reserved` 保护，需要把 kubelet 的
+要选择性地对 kubernetes 系统守护进程上执行 `kube-reserved` 保护，需要把 kubelet 的
 `--kube-reserved-cgroup` 标志的值设置为 kube 守护进程的父控制组。
 
 推荐将 kubernetes 系统守护进程放置于顶级控制组之下（例如 systemd 机器上的

From 0a1759001497f64f8df0d44705cf0eb1024e3f2c Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Sun, 28 Mar 2021 10:40:20 +0800
Subject: [PATCH 349/788] Fix line separation in concepts/architecture/nodes

---
 content/zh/docs/concepts/architecture/nodes.md | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/architecture/nodes.md b/content/zh/docs/concepts/architecture/nodes.md
index 908b8ddde6..8536916268 100644
--- a/content/zh/docs/concepts/architecture/nodes.md
+++ b/content/zh/docs/concepts/architecture/nodes.md
@@ -432,14 +432,16 @@ ConditionUnknown when a node becomes unreachable (i.e. the node controller stops
 receiving heartbeats for some reason, e.g. due to the node being down), and then later evicting
 all the pods from the node (using graceful termination) if the node continues
 to be unreachable. (The default timeouts are 40s to start reporting
-ConditionUnknown and 5m after that to start evicting pods.) The node controller
-checks the state of each node every `-node-monitor-period` seconds.
+ConditionUnknown and 5m after that to start evicting pods.) 
+
+The node controller checks the state of each node every `-node-monitor-period` seconds.
 -->
 第三个是监控节点的健康情况。节点控制器负责在节点不可达
 （即，节点控制器因为某些原因没有收到心跳，例如节点宕机）时，
 将节点状态的 `NodeReady` 状况更新为 "`Unknown`"。
 如果节点接下来持续处于不可达状态，节点控制器将逐出节点上的所有 Pod（使用体面终止）。
 默认情况下 40 秒后开始报告 "`Unknown`"，在那之后 5 分钟开始逐出 Pod。
+
 节点控制器每隔 `--node-monitor-period` 秒检查每个节点的状态。
 
 <!--
@@ -506,8 +508,9 @@ the same time. If the fraction of unhealthy nodes is at least
 if the cluster is small (i.e. has less than or equal to
 `-large-cluster-size-threshold` nodes - default 50) then evictions are
 stopped, otherwise the eviction rate is reduced to
-`-secondary-node-eviction-rate` (default 0.01) per second. The reason these
-policies are implemented per availability zone is because one availability zone
+`-secondary-node-eviction-rate` (default 0.01) per second. 
+
+The reason these policies are implemented per availability zone is because one availability zone
 might become partitioned from the master while the others remain connected. If
 your cluster does not span multiple cloud provider availability zones, then
 there is only one availability zone (the whole cluster).
@@ -518,6 +521,7 @@ there is only one availability zone (the whole cluster).
 驱逐速率将会降低：如果集群较小（意即小于等于 `--large-cluster-size-threshold`
 个节点 - 默认为 50），驱逐操作将会停止，否则驱逐速率将降为每秒
 `--secondary-node-eviction-rate` 个（默认为 0.01）。
+
 在单个可用区域实施这些策略的原因是当一个可用区域可能从控制面脱离时其它可用区域
 可能仍然保持连接。
 如果你的集群没有跨越云服务商的多个可用区域，那（整个集群）就只有一个可用区域。

From 0721959e1f25e44906d0c50dfe87faef86f238cb Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Sun, 28 Mar 2021 10:51:02 +0800
Subject: [PATCH 350/788] Fix line separation in concepts/architecture/nodes

---
 content/fr/docs/concepts/architecture/nodes.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/fr/docs/concepts/architecture/nodes.md b/content/fr/docs/concepts/architecture/nodes.md
index fd211a1a35..b6718c6750 100644
--- a/content/fr/docs/concepts/architecture/nodes.md
+++ b/content/fr/docs/concepts/architecture/nodes.md
@@ -141,6 +141,7 @@ Sinon, le contrôleur de nœud supprime le nœud de sa liste de nœuds.
 La troisième est la surveillance de la santé des nœuds.
 Le contrôleur de noeud est responsable de la mise à jour de la condition NodeReady de NodeStatus vers ConditionUnknown lorsqu'un noeud devient inaccessible (le contrôleur de noeud cesse de recevoir des heartbeats pour une raison quelconque, par exemple en raison d'une panne du noeud), puis de l'éviction ultérieure de tous les pods du noeud. (en utilisant une terminaison propre) si le nœud continue d’être inaccessible.
 (Les délais d'attente par défaut sont de 40 secondes pour commencer à signaler ConditionUnknown et de 5 minutes après cela pour commencer à expulser les pods.)
+
 Le contrôleur de nœud vérifie l'état de chaque nœud toutes les `--node-monitor-period` secondes.
 
 Dans les versions de Kubernetes antérieures à 1.13, NodeStatus correspond au heartbeat du nœud.
@@ -157,6 +158,7 @@ Dans la plupart des cas, le contrôleur de noeud limite le taux d’expulsion à
 Le comportement d'éviction de noeud change lorsqu'un noeud d'une zone de disponibilité donnée devient défaillant.
 Le contrôleur de nœud vérifie quel pourcentage de nœuds de la zone est défaillant (la condition NodeReady est ConditionUnknown ou ConditionFalse) en même temps.
 Si la fraction de nœuds défaillant est au moins `--unhealthy-zone-threshold` (valeur par défaut de 0,55), le taux d'expulsion est réduit: si le cluster est petit (c'est-à-dire inférieur ou égal à ` --large-cluster-size-threshold` noeuds - valeur par défaut 50) puis les expulsions sont arrêtées, sinon le taux d'expulsion est réduit à `--secondary-node-eviction-rate` (valeur par défaut de 0,01) par seconde.
+
 Ces stratégies sont implémentées par zone de disponibilité car une zone de disponibilité peut être partitionnée à partir du master, tandis que les autres restent connectées.
 Si votre cluster ne s'étend pas sur plusieurs zones de disponibilité de fournisseur de cloud, il n'existe qu'une seule zone de disponibilité (la totalité du cluster).
 

From 579aa6d0a42976fed37be7bae549f04ff9bc0927 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Sun, 28 Mar 2021 11:00:26 +0800
Subject: [PATCH 351/788] revert

---
 content/fr/docs/concepts/architecture/nodes.md | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/fr/docs/concepts/architecture/nodes.md b/content/fr/docs/concepts/architecture/nodes.md
index b6718c6750..fd211a1a35 100644
--- a/content/fr/docs/concepts/architecture/nodes.md
+++ b/content/fr/docs/concepts/architecture/nodes.md
@@ -141,7 +141,6 @@ Sinon, le contrôleur de nœud supprime le nœud de sa liste de nœuds.
 La troisième est la surveillance de la santé des nœuds.
 Le contrôleur de noeud est responsable de la mise à jour de la condition NodeReady de NodeStatus vers ConditionUnknown lorsqu'un noeud devient inaccessible (le contrôleur de noeud cesse de recevoir des heartbeats pour une raison quelconque, par exemple en raison d'une panne du noeud), puis de l'éviction ultérieure de tous les pods du noeud. (en utilisant une terminaison propre) si le nœud continue d’être inaccessible.
 (Les délais d'attente par défaut sont de 40 secondes pour commencer à signaler ConditionUnknown et de 5 minutes après cela pour commencer à expulser les pods.)
-
 Le contrôleur de nœud vérifie l'état de chaque nœud toutes les `--node-monitor-period` secondes.
 
 Dans les versions de Kubernetes antérieures à 1.13, NodeStatus correspond au heartbeat du nœud.
@@ -158,7 +157,6 @@ Dans la plupart des cas, le contrôleur de noeud limite le taux d’expulsion à
 Le comportement d'éviction de noeud change lorsqu'un noeud d'une zone de disponibilité donnée devient défaillant.
 Le contrôleur de nœud vérifie quel pourcentage de nœuds de la zone est défaillant (la condition NodeReady est ConditionUnknown ou ConditionFalse) en même temps.
 Si la fraction de nœuds défaillant est au moins `--unhealthy-zone-threshold` (valeur par défaut de 0,55), le taux d'expulsion est réduit: si le cluster est petit (c'est-à-dire inférieur ou égal à ` --large-cluster-size-threshold` noeuds - valeur par défaut 50) puis les expulsions sont arrêtées, sinon le taux d'expulsion est réduit à `--secondary-node-eviction-rate` (valeur par défaut de 0,01) par seconde.
-
 Ces stratégies sont implémentées par zone de disponibilité car une zone de disponibilité peut être partitionnée à partir du master, tandis que les autres restent connectées.
 Si votre cluster ne s'étend pas sur plusieurs zones de disponibilité de fournisseur de cloud, il n'existe qu'une seule zone de disponibilité (la totalité du cluster).
 

From 23173257c5af4f409a924a0cb675e941a2b5ca4a Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Sun, 28 Mar 2021 11:10:52 +0800
Subject: [PATCH 352/788] Fix line separation in concepts/architecture/nodes

---
 content/id/docs/concepts/architecture/nodes.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/id/docs/concepts/architecture/nodes.md b/content/id/docs/concepts/architecture/nodes.md
index ab13cf122a..a4cae113e6 100644
--- a/content/id/docs/concepts/architecture/nodes.md
+++ b/content/id/docs/concepts/architecture/nodes.md
@@ -134,6 +134,7 @@ Jika sudah tidak tersedia, kontroler node menghilangkan node tersebut dari dafta
 
 Ketiga, melakukan monitor terhadap kondisi kesehatan (<i>health</i>) node.
 Kontroler node bertanggung jawab untuk mengubah status `NodeReady condition` pada `NodeStatus` menjadi `ConditionUnknown`, ketika sebuah node terputus jaringannya (kontroler node tidak lagi mendapat <i>heartbeat</i> karena suatu hal, contohnya karena node tidak hidup), dan saat kemudian melakukan <i>eviction</i> terhadap semua pod yang ada pada node tersebut (melalui terminasi halus -- <i>graceful</i>) jika node masih terus terputus. (<i>Timeout</i> standar adalah 40 detik untuk mulai melaporkan `ConditionUnknown` dan 5 menit setelah itu untuk mulai melakukan <i>eviction</i> terhadap pod.)
+
 Kontroler node memeriksa <i>state</i> masing-masing node untuk durasi yang ditentukan oleh argumen `--node-monitor-period`.
 
 Pada versi Kubernetes sebelum 1.13, `NodeStatus` adalah <i>heartbeat</i> yang diberikan oleh node.
@@ -154,6 +155,7 @@ Perlakuan <i>eviction</i> pada node berubah ketika sebuah node menjadi tidak seh
 Kontroler node memeriksa berapa persentase node di dalam zona tersebut yang tidak sehat (saat `NodeReady condition` menjadi `ConditionUnknown` atau `ConditionFalse`) pada saat yang bersamaan.
 Jika persentase node yang tidak sehat bernilai `--unhealthy-zone-threshold` (<i>default</i>-nya 0.55), maka <i>rate eviction</i> berkurang: untuk ukuran klaster yang kecil (saat jumlahnya lebih kecil atau sama dengan jumlah node `--large-cluster-size-threshold` - <i>default</i>-nya 50), maka <i>eviction</i> akan berhenti dilakukan.
 Jika masih besar jumlahnya,  <i>rate eviction</i> dikurangi menjadi `--secondary-node-eviction-rate` (<i>default</i>-nya 0.01) per detik.
+
 Alasan kenapa hal ini diimplementasi untuk setiap zona <i>availability</i> adalah karena satu zona bisa saja terputus dari master, saat yang lainnya masih terhubung.
 Jika klaster tidak menjangkau banyak zona <i>availability</i> yang disediakan oleh penyedia cloud, maka hanya ada satu zona (untuk semua node di dalam klaster).
 

From e08c5a5333d9a53f140981b950f5e6f2a3da94c3 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sun, 28 Mar 2021 12:58:48 +0800
Subject: [PATCH 353/788] update the kubeadm setup tool index.

---
 .../reference/setup-tools/kubeadm/_index.md   | 30 +++++++++++++++++++
 content/id/docs/tasks/tools/kubeadm/_index.md |  4 ---
 2 files changed, 30 insertions(+), 4 deletions(-)
 create mode 100644 content/id/docs/reference/setup-tools/kubeadm/_index.md
 delete mode 100644 content/id/docs/tasks/tools/kubeadm/_index.md

diff --git a/content/id/docs/reference/setup-tools/kubeadm/_index.md b/content/id/docs/reference/setup-tools/kubeadm/_index.md
new file mode 100644
index 0000000000..6e858c541a
--- /dev/null
+++ b/content/id/docs/reference/setup-tools/kubeadm/_index.md
@@ -0,0 +1,30 @@
+---
+title: "Kubeadm"
+weight: 10
+no_list: true
+content_type: concept
+card:
+  name: reference
+  weight: 40
+---
+
+<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">Kubeadm adalah fitur yang dibuat untuk menyediakan `kubeadm init` dan` kubeadm join` sebagai praktik terbaik dengan "jalur cepat" untuk membuat klaster Kubernetes.
+
+kubeadm melakukan tindakan yang diperlukan untuk membuat klaster minimum yang layak untuk aktif dan berjalan. Secara desain, ini hanya memperdulikan tentang *bootstrap*, bukan tentang mesin *provisioning*. Demikian pula, dengan instalasi berbagai *addon* atau tambahan yang bagus untuk dimiliki, seperti Dasbor Kubernetes, solusi pemantauan, dan tambahan khusus cloud, tidak termasuk dalam cakupan.
+
+Sebaliknya, kita mengharapkan perangkat dengan tingkat yang lebih tinggi dan lebih disesuaikan untuk dibangun di atas kubeadm, dan idealnya, menggunakan kubeadm sebagai dasar dari semua penerapan untuk mempermudah pembuatan klaster yang sesuai.
+
+## Cara Instalasi
+
+Untuk menginstal kubeadm, silakan lihat [Petunjuk Instalasi](/docs/setup/production-environment/tools/kubeadm/install-kubeadm).
+
+## {{% heading "whatsnext" %}}
+
+* [kubeadm init](/docs/reference/setup-tools/kubeadm/kubeadm-init) untuk melakukan **bootstrap** pada node control-plane Kubernetes
+* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join) untuk melakukan **bootstrap** worker node Kubernetes worker dan menggabungkannya ke dalam klaster
+* [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade) untuk melakukan pembaruan klaster Kubernetes ke versi yang lebih baru
+* [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config) untuk mengonfigurasi klaster kamu untuk `kubeadm upgrade`, jika kamu menggunakan kubeadm v1.7.x atau dibawahnya untuk menginisialisasi klaster kamu 
+* [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token) untuk mengatur token-token untuk `kubeadm join`
+* [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset) untuk mengembalikan semua perubahan yang dibuat untuk host dengan `kubeadm init` atau `kubeadm join`
+* [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version) untuk mencetak versi kubeadm
+* [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha) untuk melihat sekilas sekumpulan fitur yang ada untuk mengumpulkan *feedback* atau umpan balik dari komunitas
diff --git a/content/id/docs/tasks/tools/kubeadm/_index.md b/content/id/docs/tasks/tools/kubeadm/_index.md
deleted file mode 100644
index e342c2da51..0000000000
--- a/content/id/docs/tasks/tools/kubeadm/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Membangun klaster menggunakan kubeadm"
-weight: 10
----

From 753ec3f74548418ecc0d89378b14d8cd8b26ae0c Mon Sep 17 00:00:00 2001
From: Akihito INOH <akihito-inou@nec.com>
Date: Mon, 29 Mar 2021 08:30:15 +0900
Subject: [PATCH 354/788] Add example java link to tutorials index

This commit adds link of "Example: Configuring a Java Microservice"
to Tutorials index.
---
 content/en/docs/tutorials/_index.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/tutorials/_index.md b/content/en/docs/tutorials/_index.md
index 630c04f5f6..acd2a4363f 100644
--- a/content/en/docs/tutorials/_index.md
+++ b/content/en/docs/tutorials/_index.md
@@ -27,6 +27,8 @@ Before walking through each tutorial, you may want to bookmark the
 
 ## Configuration
 
+* [Example: Configuring a Java Microservice](/docs/tutorials/configuration/configure-java-microservice/)
+
 * [Configuring Redis Using a ConfigMap](/docs/tutorials/configuration/configure-redis-using-configmap/)
 
 ## Stateless Applications

From ab8b27fd6ea3d9887dfa4d8598c5ce258c0bc3b0 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 29 Mar 2021 10:11:35 +0900
Subject: [PATCH 355/788] [ko] Enhance consistency of Korean translation

---
 .../concepts/overview/working-with-objects/annotations.md     | 2 +-
 .../ko/docs/concepts/overview/working-with-objects/labels.md  | 2 +-
 content/ko/docs/concepts/workloads/controllers/deployment.md  | 2 +-
 content/ko/docs/contribute/new-content/open-a-pr.md           | 2 +-
 content/ko/docs/setup/production-environment/tools/kops.md    | 4 ++--
 content/ko/docs/tutorials/clusters/apparmor.md                | 4 ++--
 content/ko/docs/tutorials/stateful-application/cassandra.md   | 2 +-
 .../stateful-application/mysql-wordpress-persistent-volume.md | 2 +-
 8 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/content/ko/docs/concepts/overview/working-with-objects/annotations.md b/content/ko/docs/concepts/overview/working-with-objects/annotations.md
index 944d7340ba..245da33db3 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/annotations.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/annotations.md
@@ -37,7 +37,7 @@ weight: 50
   자동 생성된 필드, 그리고
   오토사이징 또는 오토스케일링 시스템에 의해 설정된 필드와 구분된다.
 
-* 빌드, 릴리스, 또는 타임 스탬프, 릴리즈 ID, git 브랜치,
+* 빌드, 릴리스, 또는 타임 스탬프, 릴리스 ID, git 브랜치,
   PR 번호, 이미지 해시 및 레지스트리 주소와 같은 이미지 정보.
 
 * 로깅, 모니터링, 분석 또는 감사 리포지터리에 대한 포인터.
diff --git a/content/ko/docs/concepts/overview/working-with-objects/labels.md b/content/ko/docs/concepts/overview/working-with-objects/labels.md
index 2044cf5135..da3cff2a89 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/labels.md
@@ -32,7 +32,7 @@ _레이블_ 은 파드와 같은 오브젝트에 첨부된 키와 값의 쌍이
 
 레이블을 이용하면 사용자가 느슨하게 결합한 방식으로 조직 구조와 시스템 오브젝트를 매핑할 수 있으며, 클라이언트에 매핑 정보를 저장할 필요가 없다.
 
-서비스 배포와 배치 프로세싱 파이프라인은 흔히 다차원의 엔티티들이다(예: 다중 파티션 또는 배포, 다중 릴리즈 트랙, 다중 계층, 계층 속 여러 마이크로 서비스들). 관리에는 크로스-커팅 작업이 필요한 경우가 많은데 이 작업은 사용자보다는 인프라에 의해 결정된 엄격한 계층 표현인 캡슐화를 깨트린다.
+서비스 배포와 배치 프로세싱 파이프라인은 흔히 다차원의 엔티티들이다(예: 다중 파티션 또는 배포, 다중 릴리스 트랙, 다중 계층, 계층 속 여러 마이크로 서비스들). 관리에는 크로스-커팅 작업이 필요한 경우가 많은데 이 작업은 사용자보다는 인프라에 의해 결정된 엄격한 계층 표현인 캡슐화를 깨트린다.
 
 레이블 예시:
 
diff --git a/content/ko/docs/concepts/workloads/controllers/deployment.md b/content/ko/docs/concepts/workloads/controllers/deployment.md
index f6b9979d47..7e1cc742db 100644
--- a/content/ko/docs/concepts/workloads/controllers/deployment.md
+++ b/content/ko/docs/concepts/workloads/controllers/deployment.md
@@ -1037,7 +1037,7 @@ echo $?
 
 ## 카나리 디플로이먼트
 
-만약 디플로이먼트를 이용해서 일부 사용자 또는 서버에 릴리즈를 롤아웃 하기 위해서는
+만약 디플로이먼트를 이용해서 일부 사용자 또는 서버에 릴리스를 롤아웃 하기 위해서는
 [리소스 관리](/ko/docs/concepts/cluster-administration/manage-deployment/#카나리-canary-디플로이먼트)에
 설명된 카나리 패던에 따라 각 릴리스 마다 하나씩 여러 디플로이먼트를 생성할 수 있다.
 
diff --git a/content/ko/docs/contribute/new-content/open-a-pr.md b/content/ko/docs/contribute/new-content/open-a-pr.md
index 516c22bfea..8697159261 100644
--- a/content/ko/docs/contribute/new-content/open-a-pr.md
+++ b/content/ko/docs/contribute/new-content/open-a-pr.md
@@ -224,7 +224,7 @@ website의 컨테이너 이미지를 만들거나 Hugo를 로컬에서 실행할
 {{% tab name="Hugo 컨테이너" %}}
 
 {{< note >}}
-아래 명령은 도커를 기본 컨테이너 엔진으로 사용한다. 이 동작을 무시하려면 `CONTAINER_ENGINE` 환경변수를 설정한다.
+아래 명령은 도커를 기본 컨테이너 엔진으로 사용한다. 이 동작을 무시하려면 `CONTAINER_ENGINE` 환경 변수를 설정한다.
 {{< /note >}}
 
 1.  로컬에서 이미지를 빌드한다.
diff --git a/content/ko/docs/setup/production-environment/tools/kops.md b/content/ko/docs/setup/production-environment/tools/kops.md
index dbea03b735..0c0b0f5a15 100644
--- a/content/ko/docs/setup/production-environment/tools/kops.md
+++ b/content/ko/docs/setup/production-environment/tools/kops.md
@@ -44,7 +44,7 @@ kops는 자동화된 프로비저닝 시스템인데,
 {{< tabs name="kops_installation" >}}
 {{% tab name="macOS" %}}
 
-최신 버전의 릴리즈를 다운받는 명령어:
+최신 버전의 릴리스를 다운받는 명령어:
 
 ```shell
 curl -LO https://github.com/kubernetes/kops/releases/download/$(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest
@@ -84,7 +84,7 @@ brew update && brew install kops
 {{% /tab %}}
 {{% tab name="리눅스" %}}
 
-최신 릴리즈를 다운로드 받는 명령어:
+최신 릴리스를 다운로드 받는 명령어:
 
 ```shell
 curl -LO https://github.com/kubernetes/kops/releases/download/$(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)/kops-linux-amd64
diff --git a/content/ko/docs/tutorials/clusters/apparmor.md b/content/ko/docs/tutorials/clusters/apparmor.md
index c28f41a7cc..ae3fce6cb8 100644
--- a/content/ko/docs/tutorials/clusters/apparmor.md
+++ b/content/ko/docs/tutorials/clusters/apparmor.md
@@ -103,7 +103,7 @@ AppArmor를 이용하면 컨테이너가 수행할 수 있는 작업을 제한
 AppArmor 지원이 포함된 Kubelet (>= v1.4)이면
 어떤 전제 조건이 충족되지 않으면 AppArmor와 함께한 파드를 거부한다.
 노드 상에 AppArmor 지원 여부는
-노드 준비 조건 메시지를 확인하여(이후 릴리즈에서는 삭제될 것 같지만) 검증할 수 있다.
+노드 준비 조건 메시지를 확인하여(이후 릴리스에서는 삭제될 것 같지만) 검증할 수 있다.
 
 ```shell
 kubectl get nodes -o=jsonpath=$'{range .items[*]}{@.metadata.name}: {.status.conditions[?(@.reason=="KubeletReady")].message}\n{end}'
@@ -396,7 +396,7 @@ AppArmor가 일반 사용자 버전이 되면 제거된다.
 AppArmor는 일반 사용자 버전(general available)으로 준비되면 현재 어노테이션으로 지정되는 옵션은 필드로 변경될 것이다.
 모든 업그레이드와 다운그레이드 방법은 전환을 통해 지원하기에는 매우 미묘하니
 전환이 필요할 때에 상세히 설명할 것이다.
-최소 두 번의 릴리즈에 대해서는 필드와 어노테이션 모두를 지원할 것이고,
+최소 두 번의 릴리스에 대해서는 필드와 어노테이션 모두를 지원할 것이고,
 그 이후부터는 어노테이션은 명확히 거부된다.
 
 ## 프로파일 제작 {#authoring-profiles}
diff --git a/content/ko/docs/tutorials/stateful-application/cassandra.md b/content/ko/docs/tutorials/stateful-application/cassandra.md
index 0a420100ce..7b1888a15e 100644
--- a/content/ko/docs/tutorials/stateful-application/cassandra.md
+++ b/content/ko/docs/tutorials/stateful-application/cassandra.md
@@ -270,7 +270,7 @@ kubectl apply -f cassandra-statefulset.yaml
 기반하였고 OpenJDK 8을 포함한다.
 
 이 이미지는 아파치 데비안 리포의 표준 카산드라 설치본을 포함한다.
-환경변수를 이용하여 `cassandra.yaml`에 삽입된 값을 바꿀 수 있다.
+환경 변수를 이용하여 `cassandra.yaml`에 삽입된 값을 바꿀 수 있다.
 
 | 환경 변수       | 기본값  |
 | ------------- |:-------------: |
diff --git a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
index 5c27b55183..4c5f690d70 100644
--- a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
+++ b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
@@ -91,7 +91,7 @@ EOF
 
 ## MySQL과 WordPress에 필요한 리소스 구성 추가하기
 
-다음 매니페스트는 MySQL 디플로이먼트 단일 인스턴스를 기술한다. MySQL 컨케이너는 퍼시스턴트볼륨을 /var/lib/mysql에 마운트한다. `MYSQL_ROOT_PASSWORD` 환경변수는 시크릿에서 가져와 데이터베이스 암호로 설정한다.
+다음 매니페스트는 MySQL 디플로이먼트 단일 인스턴스를 기술한다. MySQL 컨케이너는 퍼시스턴트볼륨을 /var/lib/mysql에 마운트한다. `MYSQL_ROOT_PASSWORD` 환경 변수는 시크릿에서 가져와 데이터베이스 암호로 설정한다.
 
 {{< codenew file="application/wordpress/mysql-deployment.yaml" >}}
 

From 194fe9953267e6049bfb7101e49c1346eab0e897 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <46767780+jihoon-seo@users.noreply.github.com>
Date: Fri, 26 Mar 2021 14:59:24 +0900
Subject: [PATCH 356/788] Update concepts/storage/volumes.md

---
 content/en/docs/concepts/storage/volumes.md | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 8ed91067e0..4c944b6909 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -33,10 +33,9 @@ drivers, but the functionality is somewhat limited.
 Kubernetes supports many types of volumes. A {{< glossary_tooltip term_id="pod" text="Pod" >}}
 can use any number of volume types simultaneously.
 Ephemeral volume types have a lifetime of a pod, but persistent volumes exist beyond
-the lifetime of a pod. Consequently, a volume outlives any containers
-that run within the pod, and data is preserved across container restarts. When a pod
-ceases to exist, Kubernetes destroys ephemeral volumes; however, Kubernetes does not
-destroy persistent volumes.
+the lifetime of a pod. When a pod ceases to exist, Kubernetes destroys ephemeral volumes; 
+however, Kubernetes does not destroy persistent volumes. 
+For any kind of volume in a given pod, data is preserved across container restarts.
 
 At its core, a volume is just a directory, possibly with some data in it, which
 is accessible to the containers in a pod. How that directory comes to be, the

From 1b1382bd12eae1f79bfe1e3fdd75fae2d6f65587 Mon Sep 17 00:00:00 2001
From: santachopa <santachopa@naver.com>
Date: Fri, 19 Mar 2021 11:26:46 +0900
Subject: [PATCH 357/788] Translate reference/glossary/volume-plugin.md in
 Korean

---
 .../docs/reference/glossary/volume-plugin.md  | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 content/ko/docs/reference/glossary/volume-plugin.md

diff --git a/content/ko/docs/reference/glossary/volume-plugin.md b/content/ko/docs/reference/glossary/volume-plugin.md
new file mode 100644
index 0000000000..779f0303ca
--- /dev/null
+++ b/content/ko/docs/reference/glossary/volume-plugin.md
@@ -0,0 +1,19 @@
+---
+title: 볼륨 플러그인(Volume Plugin)
+id: volumeplugin
+date: 2018-04-12
+full_link: 
+short_description: >
+  볼륨 플러그인은 파드 내에서의 스토리지 통합을 가능하게 한다.
+
+aka: 
+tags:
+- core-object
+- storage
+---
+ 볼륨 플러그인은 {{< glossary_tooltip text="파드(Pod)" term_id="pod" >}} 내에서의 스토리지 통합을 가능하게 한다.
+
+<!--more--> 
+
+볼륨 플러그인을 사용하면 {{< glossary_tooltip text="파드" term_id="pod" >}}에서 사용할 스토리지 볼륨을 연결하고 마운트할 수 있다. 볼륨 플러그인은 _인-트리(in tree)_ 혹은 _아웃-오브-트리(out of tree)_ 일 수 있다. _인-트리_ 플러그인은 쿠버네티스 코드 리포지터리의 일부이며 동일한 릴리즈 주기를 따른다. _아웃-오브-트리_ 플러그인은 독립적으로 개발된다.
+

From ecede1568a06038091ff5f46a6118b940d421656 Mon Sep 17 00:00:00 2001
From: Xiaopeng Han <xiaopeng.han-IOG@daocloud.io>
Date: Mon, 29 Mar 2021 11:54:32 +0800
Subject: [PATCH 358/788] update the correct operator link

The original link of `operator pattern` is a meaningless page. This commit updates the link to the correct `operator pattern` page.
---
 .../extend-kubernetes/api-extension/custom-resources.md         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/extend-kubernetes/api-extension/custom-resources.md b/content/en/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
index 5457dc9204..f37a71f278 100644
--- a/content/en/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
+++ b/content/en/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
@@ -44,7 +44,7 @@ desired state, and continually maintains this state.
 You can deploy and update a custom controller on a running cluster, independently
 of the cluster's lifecycle. Custom controllers can work with any kind of resource,
 but they are especially effective when combined with custom resources. The
-[Operator pattern](https://coreos.com/blog/introducing-operators.html) combines custom
+[Operator pattern](/docs/concepts/extend-kubernetes/operator/) combines custom
 resources and custom controllers. You can use custom controllers to encode domain knowledge
 for specific applications into an extension of the Kubernetes API.
 

From 81b8394561bf8a88f647550f09946c164e34c150 Mon Sep 17 00:00:00 2001
From: Xudong Liu <7lxd@tongji.edu.cn>
Date: Sun, 28 Mar 2021 21:35:20 -0700
Subject: [PATCH 359/788] Update
 content/en/docs/concepts/services-networking/service.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 content/en/docs/concepts/services-networking/service.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index 3bd6709fa0..05d91e075a 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -632,7 +632,10 @@ You must enable the `ServiceLBNodePortControl` feature gate to use this field.
 
 {{< feature-state for_k8s_version="v1.21" state="alpha" >}}
 
-Starting in v1.21, you can optionally specify class of load balancer implementation for a Service Type=LoadBalancer by setting field `spec.loadBalancerClass` value. By default, `spec.loadBalancerClass` is `nil` and type LoadBalacner Services will use the cloud providers' default load balancer implementation. 
+Starting in v1.21, you can optionally specify the class of a load balancer implementation for
+`LoadBalancer` type of Service by setting the field `spec.loadBalancerClass`.
+By default, `spec.loadBalancerClass` is `nil` and a `LoadBalancer` type of Service uses
+the cloud provider's default load balancer implementation. 
 If `spec.loadBalancerClass` is specified, it is assumed that a matching class load balancer implementation is watching for Services and any default load balancer implementation (e.g. cloud providers) will ignore Services that set this field. `spec.loadBalancerClass` can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. 
 The value of `spec.loadBalancerClass` must be a label-style identifier, with an optional prefix, e.g. "internal-vip" or "example.com/internal-vip". Unprefixed names are reserved for end-users.
 You must enable the `ServiceLoadBalancerClass` feature gate to use this field.

From 469b890e6c9d4270662884f778d910072cb96f4c Mon Sep 17 00:00:00 2001
From: Xudong Liu <7lxd@tongji.edu.cn>
Date: Sun, 28 Mar 2021 21:35:31 -0700
Subject: [PATCH 360/788] Update
 content/en/docs/concepts/services-networking/service.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 content/en/docs/concepts/services-networking/service.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index 05d91e075a..8c3b5c40ac 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -636,7 +636,12 @@ Starting in v1.21, you can optionally specify the class of a load balancer imple
 `LoadBalancer` type of Service by setting the field `spec.loadBalancerClass`.
 By default, `spec.loadBalancerClass` is `nil` and a `LoadBalancer` type of Service uses
 the cloud provider's default load balancer implementation. 
-If `spec.loadBalancerClass` is specified, it is assumed that a matching class load balancer implementation is watching for Services and any default load balancer implementation (e.g. cloud providers) will ignore Services that set this field. `spec.loadBalancerClass` can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. 
+If `spec.loadBalancerClass` is specified, it is assumed that a load balancer
+implementation that matches the specified class is watching for Services.
+Any default load balancer implementation (for example, the one provided by
+the cloud provider) will ignore Services that have this field set.
+`spec.loadBalancerClass` can be set on a Service of type `LoadBalancer` only.
+Once set, it cannot be changed. 
 The value of `spec.loadBalancerClass` must be a label-style identifier, with an optional prefix, e.g. "internal-vip" or "example.com/internal-vip". Unprefixed names are reserved for end-users.
 You must enable the `ServiceLoadBalancerClass` feature gate to use this field.
 

From fcfcc73a00a5a66449c4718eada8e77b307960b2 Mon Sep 17 00:00:00 2001
From: Xudong Liu <7lxd@tongji.edu.cn>
Date: Sun, 28 Mar 2021 21:35:41 -0700
Subject: [PATCH 361/788] Update
 content/en/docs/concepts/services-networking/service.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 content/en/docs/concepts/services-networking/service.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index 8c3b5c40ac..dd0925eae0 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -642,7 +642,9 @@ Any default load balancer implementation (for example, the one provided by
 the cloud provider) will ignore Services that have this field set.
 `spec.loadBalancerClass` can be set on a Service of type `LoadBalancer` only.
 Once set, it cannot be changed. 
-The value of `spec.loadBalancerClass` must be a label-style identifier, with an optional prefix, e.g. "internal-vip" or "example.com/internal-vip". Unprefixed names are reserved for end-users.
+The value of `spec.loadBalancerClass` must be a label-style identifier,
+with an optional prefix such as "`internal-vip`" or "`example.com/internal-vip`".
+Unprefixed names are reserved for end-users.
 You must enable the `ServiceLoadBalancerClass` feature gate to use this field.
 
 #### Internal load balancer

From 5ee23f2c7c19e7d7bb5be54cf11093fbf0093cc1 Mon Sep 17 00:00:00 2001
From: huyuqing <huyuqing@inspur.com>
Date: Mon, 29 Mar 2021 16:27:10 +0800
Subject: [PATCH 362/788] Fix line separation in concepts/architecture/nodes

---
 content/ru/docs/concepts/architecture/nodes.md | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/content/ru/docs/concepts/architecture/nodes.md b/content/ru/docs/concepts/architecture/nodes.md
index 7c10f75e1b..075c3140f5 100644
--- a/content/ru/docs/concepts/architecture/nodes.md
+++ b/content/ru/docs/concepts/architecture/nodes.md
@@ -235,8 +235,9 @@ ConditionUnknown, когда узел становится недоступны
 например, из-за того, что узел упал), и затем позже выселяет все поды с узла
 (используя мягкое (graceful) завершение) если узел продолжает быть недоступным.
 (По умолчанию таймауты составляют 40 секунд, чтобы начать сообщать `ConditionUnknown`,
-и 5 минут после, чтобы начать выселять поды.) Контроллер узла проверяет состояние каждого узла
-каждые  `--node-monitor-period` секунд.
+и 5 минут после, чтобы начать выселять поды.) 
+
+Контроллер узла проверяет состояние каждого узла каждые  `--node-monitor-period` секунд.
 
 #### Сердцебиения
 
@@ -274,8 +275,9 @@ Kubelet отвечает за создание и обновление `NodeStat
 если кластер небольшой (т.е. количество узлов меньше или равно
 `--large-cluster-size-threshold` - по умолчанию, 50), то выселения прекращаются,
 в противном случае скорость выселения снижается до
-`--secondary-node-eviction-rate` (по умолчанию, 0.01) в секунду. Причина, по которой
-эти политики реализуются для каждой зоны доступности, заключается в том,
+`--secondary-node-eviction-rate` (по умолчанию, 0.01) в секунду. 
+
+Причина, по которой эти политики реализуются для каждой зоны доступности, заключается в том,
 что одна зона доступности может стать отделенной от мастера, в то время как другие
 остаются подключенными. Если ваш кластер не охватывает несколько зон доступности
 облачного провайдера, то существует только одна зона доступности (весь кластер).

From 5c589626fd27950e231022b089eb0ff3fa166671 Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Mon, 29 Mar 2021 14:04:48 +0530
Subject: [PATCH 363/788] Made small typo corrections

(1) the help option for etcdctl is -h and not --h. Corrected the same
(2) in the snapshot command, the --endpoints option's value has been corrected to reflect the right endpoint.
---
 .../docs/tasks/administer-cluster/configure-upgrade-etcd.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 5dee2ae185..f626d4d1b6 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -283,14 +283,14 @@ volume.
 We can also take the snapshot using various options given by etcdctl. For example 
 
 ```shell
-ETCDCTL_API=3 etcdctl --h 
+ETCDCTL_API=3 etcdctl -h 
 ``` 
 
 will list various options available from etcdctl. For example, you can take a snapshot by specifying
 the endpoint, certificates etc as shown below:
 
 ```shell
-ETCDCTL_API=3 etcdctl --endpoints=[127.0.0.1:2379] \
+ETCDCTL_API=3 etcdctl --endpoints=https://[127.0.0.1]:2379 \
   --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> \
   snapshot save <backup-file-location>
 ```

From a67181d4290d87bb186bdf2f28e3802dc3eefc79 Mon Sep 17 00:00:00 2001
From: huyuqing <huyuqing@inspur.com>
Date: Mon, 29 Mar 2021 16:43:04 +0800
Subject: [PATCH 364/788] Fix line separation in concepts/architecture/nodes

---
 content/de/docs/concepts/architecture/nodes.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/de/docs/concepts/architecture/nodes.md b/content/de/docs/concepts/architecture/nodes.md
index b790e68035..e717885339 100644
--- a/content/de/docs/concepts/architecture/nodes.md
+++ b/content/de/docs/concepts/architecture/nodes.md
@@ -148,6 +148,7 @@ Wenn ein Node in einer Cloud-Umgebung ausgeführt wird und sich in einem schlech
 
 Der dritte ist die Überwachung des Zustands der Nodes. Der Node Controller ist dafür verantwortlich,
 die NodeReady-Bedingung von NodeStatus auf ConditionUnknown zu aktualisieren, wenn ein wenn ein Node unerreichbar wird (der Node Controller empfängt aus irgendeinem Grund keine Herzschläge mehr, z.B. weil der Node heruntergefahren ist) und später alle Pods aus dem Node zu entfernen (und diese ordnungsgemäss zu beenden), wenn der Node weiterhin unzugänglich ist. (Die Standard-Timeouts sind 40s, um ConditionUnknown zu melden und 5 Minuten, um mit der Evakuierung der Pods zu beginnen).
+
 Der Node Controller überprüft den Zustand jedes Nodes alle `--node-monitor-period` Sekunden.
 
 

From ed7c4e7046c0b02df3f7e133a62fe17fe2ac2f53 Mon Sep 17 00:00:00 2001
From: pacoxu <paco.xu@daocloud.io>
Date: Wed, 17 Mar 2021 11:34:40 +0800
Subject: [PATCH 365/788] init container image change or container GC will not
 restart Pod since 1.20

Signed-off-by: pacoxu <paco.xu@daocloud.io>
---
 .../en/docs/concepts/workloads/pods/init-containers.md    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/concepts/workloads/pods/init-containers.md b/content/en/docs/concepts/workloads/pods/init-containers.md
index 363c38a39b..1c67e357e5 100644
--- a/content/en/docs/concepts/workloads/pods/init-containers.md
+++ b/content/en/docs/concepts/workloads/pods/init-containers.md
@@ -313,16 +313,16 @@ limit, the same as the scheduler.
 A Pod can restart, causing re-execution of init containers, for the following
 reasons:
 
-* A user updates the Pod specification, causing the init container image to change.
-  Any changes to the init container image restarts the Pod. App container image
-  changes only restart the app container.
 * The Pod infrastructure container is restarted. This is uncommon and would
   have to be done by someone with root access to nodes.
 * All containers in a Pod are terminated while `restartPolicy` is set to Always,
   forcing a restart, and the init container completion record has been lost due
   to garbage collection.
 
-
+The Pod will not be restarted when the init container image is changed, or the
+init container completion record has been lost due to garbage collection. This
+applies for Kubernetes v1.20 and later. If you are using an earlier version of
+Kubernetes, consult the documentation for the version you are using.
 
 ## {{% heading "whatsnext" %}}
 

From 1dbdda9d3448f5b1edb506e8a201717babf4a334 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Mon, 29 Mar 2021 18:57:31 +0800
Subject: [PATCH 366/788] [zh] Resync cluster administration

Main change is to the certificates page which has been migrated into its
own task.
---
 .../concepts/cluster-administration/_index.md |  10 +-
 .../cluster-administration/certificates.md    | 505 +-----------------
 .../cluster-administration/flow-control.md    |   2 +-
 .../manage-deployment.md                      |  28 +-
 .../cluster-administration/proxies.md         |   2 +-
 .../cluster-administration/system-logs.md     |  13 +-
 6 files changed, 32 insertions(+), 528 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/_index.md b/content/zh/docs/concepts/cluster-administration/_index.md
index d1fde6c86c..36e27269f7 100644
--- a/content/zh/docs/concepts/cluster-administration/_index.md
+++ b/content/zh/docs/concepts/cluster-administration/_index.md
@@ -51,12 +51,12 @@ Before choosing a guide, here are some considerations:
 在选择一个指南前，有一些因素需要考虑：
 
 <!--
-- Do you just want to try out Kubernetes on your computer, or do you want to build a high-availability, multi-node cluster? Choose distros best suited for your needs.
+- Do you want to try out Kubernetes on your computer, or do you want to build a high-availability, multi-node cluster? Choose distros best suited for your needs.
 - Will you be using **a hosted Kubernetes cluster**, such as [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/), or **hosting your own cluster**?
 - Will your cluster be **on-premises**, or **in the cloud (IaaS)**? Kubernetes does not directly support hybrid clusters. Instead, you can set up multiple clusters.
 - **If you are configuring Kubernetes on-premises**, consider which [networking model](/docs/concepts/cluster-administration/networking/) fits best.
 - Will you be running Kubernetes on **"bare metal" hardware** or on **virtual machines (VMs)**?
-- Do you **just want to run a cluster**, or do you expect to do **active development of Kubernetes project code**? If the
+- Do you **want to run a cluster**, or do you expect to do **active development of Kubernetes project code**? If the
   latter, choose an actively-developed distro. Some distros only use binary releases, but
   offer a greater variety of choices.
 - Familiarize yourself with the [components](/docs/concepts/overview/components/) needed to run a cluster.
@@ -70,7 +70,7 @@ Before choosing a guide, here are some considerations:
 - **如果你在本地配置 Kubernetes**，需要考虑哪种
   [网络模型](/zh/docs/concepts/cluster-administration/networking/)最适合。
 - 你的 Kubernetes 在**裸金属硬件**上还是**虚拟机（VMs）** 上运行？
-- 你**只想运行一个集群**，还是打算**参与开发 Kubernetes 项目代码**？
+- 你是想**运行一个集群**，还是打算**参与开发 Kubernetes 项目代码**？
   如果是后者，请选择一个处于开发状态的发行版。
   某些发行版只提供二进制发布版，但提供更多的选择。
 - 让你自己熟悉运行一个集群所需的[组件](/zh/docs/concepts/overview/components/)。
@@ -91,7 +91,7 @@ Before choosing a guide, here are some considerations:
 <!--
 ## Securing a cluster
 
-* [Certificates](/docs/concepts/cluster-administration/certificates/) describes the steps to generate certificates using different tool chains.
+* [Generate Certificates](/docs/tasks/administer-cluster/certificates/) describes the steps to generate certificates using different tool chains.
 * [Kubernetes Container Environment](/docs/concepts/containers/container-environment/) describes the environment for Kubelet managed containers on a Kubernetes node.
 * [Controlling Access to the Kubernetes API](/docs/reference/access-authn-authz/controlling-access/) describes how to set up permissions for users and service accounts.
 * [Authenticating](/docs/reference/access-authn-authz/authentication/) explains authentication in Kubernetes, including the various authentication options.
@@ -102,7 +102,7 @@ Before choosing a guide, here are some considerations:
 -->
 ## 保护集群  {#securing-a-cluster}
 
-* [证书](/zh/docs/concepts/cluster-administration/certificates/)
+* [生成证书](/zh/docs/tasks/administer-cluster/certificates/)
   节描述了使用不同的工具链生成证书的步骤。
 * [Kubernetes 容器环境](/zh/docs/concepts/containers/container-environment/)
   描述了 Kubernetes 节点上由 Kubelet 管理的容器的环境。
diff --git a/content/zh/docs/concepts/cluster-administration/certificates.md b/content/zh/docs/concepts/cluster-administration/certificates.md
index fe2d6e4ba1..b900e77ec9 100644
--- a/content/zh/docs/concepts/cluster-administration/certificates.md
+++ b/content/zh/docs/concepts/cluster-administration/certificates.md
@@ -12,508 +12,7 @@ weight: 20
 <!-- overview -->
 
 <!--
-When using client certificate authentication, you can generate certificates
-manually through `easyrsa`, `openssl` or `cfssl`.
+To learn how to generate certificates for your cluster, see [Certificates](/docs/tasks/administer-cluster/certificates/).
 -->
-当使用客户端证书进行认证时，用户可以使用现有部署脚本，或者通过 `easyrsa`、`openssl` 或
-`cfssl` 手动生成证书。
-
-<!-- body -->
-
-### easyrsa
-
-<!--
-**easyrsa** can manually generate certificates for your cluster.
--->
-使用 **easyrsa** 能够手动地为集群生成证书。
-
-<!--
-1.  Download, unpack, and initialize the patched version of easyrsa3.
-
-        curl -LO https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz
-        tar xzf easy-rsa.tar.gz
-        cd easy-rsa-master/easyrsa3
-        ./easyrsa init-pki
-1.  Generate a new certificate authority (CA). `--batch` sets automatic mode;
-    `--req-cn` specifies the Common Name (CN) for the CA's new root certificate.
-
-        ./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass
-1.  Generate server certificate and key.
-    The argument `--subject-alt-name` sets the possible IPs and DNS names the API server will
-    be accessed with. The `MASTER_CLUSTER_IP` is usually the first IP from the service CIDR
-    that is specified as the `--service-cluster-ip-range` argument for both the API server and
-    the controller manager component. The argument `--days` is used to set the number of days
-    after which the certificate expires.
-    The sample below also assumes that you are using `cluster.local` as the default
-    DNS domain name.
-
-        ./easyrsa --subject-alt-name="IP:${MASTER_IP},"\
-        "IP:${MASTER_CLUSTER_IP},"\
-        "DNS:kubernetes,"\
-        "DNS:kubernetes.default,"\
-        "DNS:kubernetes.default.svc,"\
-        "DNS:kubernetes.default.svc.cluster,"\
-        "DNS:kubernetes.default.svc.cluster.local" \
-        --days=10000 \
-        build-server-full server nopass
-1.  Copy `pki/ca.crt`, `pki/issued/server.crt`, and `pki/private/server.key` to your directory.
-1.  Fill in and add the following parameters into the API server start parameters:
-
-        --client-ca-file=/yourdirectory/ca.crt
-        --tls-cert-file=/yourdirectory/server.crt
-        --tls-private-key-file=/yourdirectory/server.key
--->
-
-1. 下载、解压并初始化 easyrsa3 的补丁版本。
-
-   ```
-   curl -LO https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz
-   tar xzf easy-rsa.tar.gz
-   cd easy-rsa-master/easyrsa3
-   ./easyrsa init-pki
-   ```
-
-1. 生成 CA（通过 `--batch` 参数设置自动模式。 通过 `--req-cn` 设置默认使用的 CN）
-
-   ```
-   ./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass
-   ```
-
-1. 生成服务器证书和密钥。
-   参数 `--subject-alt-name` 设置了访问 API 服务器时可能使用的 IP 和 DNS 名称。
-   `MASTER_CLUSTER_IP` 通常为 `--service-cluster-ip-range` 参数中指定的服务 CIDR 的 首个 IP 地址，
-   `--service-cluster-ip-range` 同时用于 API 服务器和控制器管理器组件。
-   `--days` 参数用于设置证书的有效期限。
-   下面的示例还假设用户使用 `cluster.local` 作为默认的 DNS 域名。
-
-   ```
-   ./easyrsa --subject-alt-name="IP:${MASTER_IP},"\
-        "IP:${MASTER_CLUSTER_IP},"\
-        "DNS:kubernetes,"\
-        "DNS:kubernetes.default,"\
-        "DNS:kubernetes.default.svc,"\
-        "DNS:kubernetes.default.svc.cluster,"\
-        "DNS:kubernetes.default.svc.cluster.local" \
-        --days=10000 \
-        build-server-full server nopass
-   ```
-
-1. 拷贝 `pki/ca.crt`、`pki/issued/server.crt` 和 `pki/private/server.key` 至您的目录。
-
-1. 填充并在 API 服务器的启动参数中添加以下参数：
-
-   ```
-   --client-ca-file=/yourdirectory/ca.crt
-   --tls-cert-file=/yourdirectory/server.crt
-   --tls-private-key-file=/yourdirectory/server.key
-   ```
-
-### openssl
-
-<!--
-**openssl** can manually generate certificates for your cluster.
-
-1.  Generate a ca.key with 2048bit:
-
-        openssl genrsa -out ca.key 2048
-1.  According to the ca.key generate a ca.crt (use -days to set the certificate effective time):
-
-        openssl req -x509 -new -nodes -key ca.key -subj "/CN=${MASTER_IP}" -days 10000 -out ca.crt
-1.  Generate a server.key with 2048bit:
-
-        openssl genrsa -out server.key 2048
-1.  Create a config file for generating a Certificate Signing Request (CSR).
-    Be sure to substitute the values marked with angle brackets (e.g. `<MASTER_IP>`)
-    with real values before saving this to a file (e.g. `csr.conf`).
-    Note that the value for `MASTER_CLUSTER_IP` is the service cluster IP for the
-    API server as described in previous subsection.
-    The sample below also assumes that you are using `cluster.local` as the default
-    DNS domain name.
-
-        [ req ]
-        default_bits = 2048
-        prompt = no
-        default_md = sha256
-        req_extensions = req_ext
-        distinguished_name = dn
-
-        [ dn ]
-        C = <country>
-        ST = <state>
-        L = <city>
-        O = <organization>
-        OU = <organization unit>
-        CN = <MASTER_IP>
-
-        [ req_ext ]
-        subjectAltName = @alt_names
-
-        [ alt_names ]
-        DNS.1 = kubernetes
-        DNS.2 = kubernetes.default
-        DNS.3 = kubernetes.default.svc
-        DNS.4 = kubernetes.default.svc.cluster
-        DNS.5 = kubernetes.default.svc.cluster.local
-        IP.1 = <MASTER_IP>
-        IP.2 = <MASTER_CLUSTER_IP>
-
-        [ v3_ext ]
-        authorityKeyIdentifier=keyid,issuer:always
-        basicConstraints=CA:FALSE
-        keyUsage=keyEncipherment,dataEncipherment
-        extendedKeyUsage=serverAuth,clientAuth
-        subjectAltName=@alt_names
-1.  Generate the certificate signing request based on the config file:
-
-        openssl req -new -key server.key -out server.csr -config csr.conf
-1.  Generate the server certificate using the ca.key, ca.crt and server.csr:
-
-        openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
-        -CAcreateserial -out server.crt -days 10000 \
-        -extensions v3_ext -extfile csr.conf
-1.  View the certificate:
-
-        openssl x509  -noout -text -in ./server.crt
--->
-
-使用 **openssl** 能够手动地为集群生成证书。
-
-1. 生成密钥位数为 2048 的 ca.key：
-
-   ```
-   openssl genrsa -out ca.key 2048
-   ```
-
-1. 依据 ca.key 生成 ca.crt （使用 -days 参数来设置证书有效时间）：
-
-   ```
-   openssl req -x509 -new -nodes -key ca.key -subj "/CN=${MASTER_IP}" -days 10000 -out ca.crt
-   ```
-
-1. 生成密钥位数为 2048 的 server.key：
-
-   ```
-   openssl genrsa -out server.key 2048
-   ```
-1. 创建用于生成证书签名请求（CSR）的配置文件。
-   确保在将其保存至文件（如 `csr.conf`）之前将尖括号标记的值（如 `<MASTER_IP>`）
-   替换为你想使用的真实值。 注意：`MASTER_CLUSTER_IP` 是前面小节中描述的 API 服务器的服务集群 IP
-   （service cluster IP）。 下面的示例也假设用户使用 `cluster.local` 作为默认的 DNS 域名。
-
-   ```
-   [ req ]
-   default_bits = 2048
-   prompt = no
-   default_md = sha256
-   req_extensions = req_ext
-   distinguished_name = dn
-
-   [ dn ]
-   C = <国家>
-   ST = <州/省>
-   L = <市>
-   O = <组织>
-   OU = <部门>
-   CN = <MASTER_IP>
-
-   [ req_ext ]
-   subjectAltName = @alt_names
-
-   [ alt_names ]
-   DNS.1 = kubernetes
-   DNS.2 = kubernetes.default
-   DNS.3 = kubernetes.default.svc
-   DNS.4 = kubernetes.default.svc.cluster
-   DNS.5 = kubernetes.default.svc.cluster.local
-   IP.1 = <MASTER_IP>
-   IP.2 = <MASTER_CLUSTER_IP>
-
-   [ v3_ext ]
-   authorityKeyIdentifier=keyid,issuer:always
-   basicConstraints=CA:FALSE
-   keyUsage=keyEncipherment,dataEncipherment
-   extendedKeyUsage=serverAuth,clientAuth
-   subjectAltName=@alt_names
-   ```
-
-1. 基于配置文件生成证书签名请求：
-
-   ```
-   openssl req -new -key server.key -out server.csr -config csr.conf
-   ```
-
-1. 使用 ca.key、ca.crt 和 server.csr 生成服务器证书：
-
-   ```
-   openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
-     -CAcreateserial -out server.crt -days 10000 \
-     -extensions v3_ext -extfile csr.conf
-   ```
-
-1. 查看证书：
-
-   ```
-   openssl x509  -noout -text -in ./server.crt
-   ```
-
-<!--
-Finally, add the same parameters into the API server start parameters.
--->
-最后，添加同样的参数到 API 服务器的启动参数中。
-
-### cfssl
-
-<!--
-**cfssl** is another tool for certificate generation.
--->
-**cfssl** 是用来生成证书的另一种工具。
-
-<!--
-1.  Download, unpack and prepare the command line tools as shown below.
-    Note that you may need to adapt the sample commands based on the hardware
-    architecture and cfssl version you are using.
-
-        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl_1.5.0_linux_amd64 -o cfssl
-        chmod +x cfssl
-        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssljson_1.5.0_linux_amd64 -o cfssljson
-        chmod +x cfssljson
-        curl -L https://github.com/cloudflare/cfssl/releases/download/v1.5.0/cfssl-certinfo_1.5.0_linux_amd64 -o cfssl-certinfo
-        chmod +x cfssl-certinfo
-1.  Create a directory to hold the artifacts and initialize cfssl:
-
-        mkdir cert
-        cd cert
-        ../cfssl print-defaults config > config.json
-        ../cfssl print-defaults csr > csr.json
-1.  Create a JSON config file for generating the CA file, for example, `ca-config.json`:
-
-        {
-          "signing": {
-            "default": {
-              "expiry": "8760h"
-            },
-            "profiles": {
-              "kubernetes": {
-                "usages": [
-                  "signing",
-                  "key encipherment",
-                  "server auth",
-                  "client auth"
-                ],
-                "expiry": "8760h"
-              }
-            }
-          }
-        }
-1.  Create a JSON config file for CA certificate signing request (CSR), for example,
-    `ca-csr.json`. Be sure to replace the values marked with angle brackets with
-    real values you want to use.
-
-        {
-          "CN": "kubernetes",
-          "key": {
-            "algo": "rsa",
-            "size": 2048
-          },
-          "names":[{
-            "C": "<country>",
-            "ST": "<state>",
-            "L": "<city>",
-            "O": "<organization>",
-            "OU": "<organization unit>"
-          }]
-        }
-1.  Generate CA key (`ca-key.pem`) and certificate (`ca.pem`):
-
-        ../cfssl gencert -initca ca-csr.json | ../cfssljson -bare ca
-1.  Create a JSON config file for generating keys and certificates for the API
-    server, for example, `server-csr.json`. Be sure to replace the values in angle brackets with
-    real values you want to use. The `MASTER_CLUSTER_IP` is the service cluster
-    IP for the API server as described in previous subsection.
-    The sample below also assumes that you are using `cluster.local` as the default
-    DNS domain name.
-
-        {
-          "CN": "kubernetes",
-          "hosts": [
-            "127.0.0.1",
-            "<MASTER_IP>",
-            "<MASTER_CLUSTER_IP>",
-            "kubernetes",
-            "kubernetes.default",
-            "kubernetes.default.svc",
-            "kubernetes.default.svc.cluster",
-            "kubernetes.default.svc.cluster.local"
-          ],
-          "key": {
-            "algo": "rsa",
-            "size": 2048
-          },
-          "names": [{
-            "C": "<country>",
-            "ST": "<state>",
-            "L": "<city>",
-            "O": "<organization>",
-            "OU": "<organization unit>"
-          }]
-        }
-1.  Generate the key and certificate for the API server, which are by default
-    saved into file `server-key.pem` and `server.pem` respectively:
-
-        ../cfssl gencert -ca=ca.pem -ca-key=ca-key.pem \
-        --config=ca-config.json -profile=kubernetes \
-        server-csr.json | ../cfssljson -bare server
--->
-1. 按如下所示的方式下载、解压并准备命令行工具。
-   注意：你可能需要基于硬件架构和你所使用的 cfssl 版本对示例命令进行修改。
-
-   ```
-   curl -L https://pkg.cfssl.org/R1.2/cfssl_linux-amd64 -o cfssl
-   chmod +x cfssl
-   curl -L https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64 -o cfssljson
-   chmod +x cfssljson
-   curl -L https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64 -o cfssl-certinfo
-   chmod +x cfssl-certinfo
-   ```
-
-1. 创建目录来存放物料，并初始化 cfssl：
-
-   ```
-   mkdir cert
-   cd cert
-   ../cfssl print-defaults config > config.json
-   ../cfssl print-defaults csr > csr.json
-   ```
-
-1. 创建用来生成 CA 文件的 JSON 配置文件，例如 `ca-config.json`：
-
-   ```
-   {
-     "signing": {
-       "default": {
-         "expiry": "8760h"
-       },
-       "profiles": {
-         "kubernetes": {
-           "usages": [
-             "signing",
-             "key encipherment",
-             "server auth",
-             "client auth"
-           ],
-           "expiry": "8760h"
-         }
-       }
-     }
-   }
-   ```
-
-1. 创建用来生成 CA 证书签名请求（CSR）的 JSON 配置文件，例如 `ca-csr.json`。
-   确保将尖括号标记的值替换为你想使用的真实值。
-
-   ```
-   {
-     "CN": "kubernetes",
-     "key": {
-       "algo": "rsa",
-       "size": 2048
-     },
-     "names":[{
-       "C": "<country>",
-       "ST": "<state>",
-       "L": "<city>",
-       "O": "<organization>",
-       "OU": "<organization unit>"
-     }]
-   }
-   ```
-
-1. 生成 CA 密钥（`ca-key.pem`）和证书（`ca.pem`）：
-
-   ```
-   ../cfssl gencert -initca ca-csr.json | ../cfssljson -bare ca
-   ```
-
-1. 按如下所示的方式创建用来为 API 服务器生成密钥和证书的 JSON 配置文件。
-   确保将尖括号标记的值替换为你想使用的真实值。 `MASTER_CLUSTER_IP` 是前面小节中描述的
-   API 服务器的服务集群 IP。 下面的示例也假设用户使用 `cluster.local` 作为默认的 DNS 域名。
-
-   ```
-   {
-     "CN": "kubernetes",
-     "hosts": [
-       "127.0.0.1",
-       "<MASTER_IP>",
-       "<MASTER_CLUSTER_IP>",
-       "kubernetes",
-       "kubernetes.default",
-       "kubernetes.default.svc",
-       "kubernetes.default.svc.cluster",
-       "kubernetes.default.svc.cluster.local"
-     ],
-     "key": {
-       "algo": "rsa",
-       "size": 2048
-     },
-     "names": [{
-       "C": "<country>",
-       "ST": "<state>",
-       "L": "<city>",
-       "O": "<organization>",
-       "OU": "<organization unit>"
-     }]
-   }
-   ```
-
-1. 为 API 服务器生成密钥和证书，生成的秘钥和证书分别默认保存在文件 `server-key.pem`
-   和 `server.pem` 中：
-
-   ```
-   ../cfssl gencert -ca=ca.pem -ca-key=ca-key.pem \
-        --config=ca-config.json -profile=kubernetes \
-        server-csr.json | ../cfssljson -bare server
-   ```
-
-<!--
-## Distributing Self-Signed CA Certificate
-
-A client node may refuse to recognize a self-signed CA certificate as valid.
-For a non-production deployment, or for a deployment that runs behind a company
-firewall, you can distribute a self-signed CA certificate to all clients and
-refresh the local list for valid certificates.
-
-On each client, perform the following operations:
--->
-## 分发自签名 CA 证书
-
-客户端节点可能拒绝承认自签名 CA 证书有效。
-对于非生产环境的部署，或运行在企业防火墙后的部署，用户可以向所有客户端分发自签名 CA 证书，
-并刷新本地的有效证书列表。
-
-在每个客户端上执行以下操作：
-
-```bash
-sudo cp ca.crt /usr/local/share/ca-certificates/kubernetes.crt
-sudo update-ca-certificates
-```
-
-```
-Updating certificates in /etc/ssl/certs...
-1 added, 0 removed; done.
-Running hooks in /etc/ca-certificates/update.d....
-done.
-```
-
-<!--
-## Certificates API
-
-You can use the `certificates.k8s.io` API to provision
-x509 certificates to use for authentication as documented
-[here](/docs/tasks/tls/managing-tls-in-a-cluster).
--->
-## 证书 API
-
-您可以按照[这里](/zh/docs/tasks/tls/managing-tls-in-a-cluster)记录的方式，
-使用 `certificates.k8s.io` API 来准备 x509 证书，用于认证。
-
+要了解如何为集群生成证书，参阅[证书](/zh/docs/tasks/administer-cluster/certificates/)。
 
diff --git a/content/zh/docs/concepts/cluster-administration/flow-control.md b/content/zh/docs/concepts/cluster-administration/flow-control.md
index 7dde282034..dd994b358b 100644
--- a/content/zh/docs/concepts/cluster-administration/flow-control.md
+++ b/content/zh/docs/concepts/cluster-administration/flow-control.md
@@ -762,7 +762,7 @@ poorly-behaved workloads that may be harming system health.
   histogram vector of queue lengths for the queues, broken down by
   the labels `priority_level` and `flow_schema`, as sampled by the
   enqueued requests.  Each request that gets queued contributes one
-  sample to its histogram, reporting the length of the queue just
+  sample to its histogram, reporting the length of the queue immediately
   after the request was added.  Note that this produces different
   statistics than an unbiased survey would.
 -->
diff --git a/content/zh/docs/concepts/cluster-administration/manage-deployment.md b/content/zh/docs/concepts/cluster-administration/manage-deployment.md
index 71ece48b8a..e28da08081 100644
--- a/content/zh/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/zh/docs/concepts/cluster-administration/manage-deployment.md
@@ -72,7 +72,7 @@ kubectl apply -f https://k8s.io/examples/application/nginx/
 <!--
 `kubectl` will read any files with suffixes `.yaml`, `.yml`, or `.json`.
 
-It is a recommended practice to put resources related to the same microservice or application tier into the same file, and to group all of the files associated with your application in the same directory. If the tiers of your application bind to each other using DNS, then you can then simply deploy all of the components of your stack en masse.
+It is a recommended practice to put resources related to the same microservice or application tier into the same file, and to group all of the files associated with your application in the same directory. If the tiers of your application bind to each other using DNS, then you can deploy all of the components of your stack together.
 
 A URL can also be specified as a configuration source, which is handy for deploying directly from configuration files checked into github:
  -->
@@ -80,7 +80,7 @@ A URL can also be specified as a configuration source, which is handy for deploy
 
 建议的做法是，将同一个微服务或同一应用层相关的资源放到同一个文件中，
 将同一个应用相关的所有文件按组存放到同一个目录中。
-如果应用的各层使用 DNS 相互绑定，那么你可以简单地将堆栈的所有组件一起部署。
+如果应用的各层使用 DNS 相互绑定，那么你可以将堆栈的所有组件一起部署。
 
 还可以使用 URL 作为配置源，便于直接使用已经提交到 Github 上的配置文件进行部署：
 
@@ -113,7 +113,7 @@ service "my-nginx-svc" deleted
 ```
 
 <!--
-In the case of just two resources, it's also easy to specify both on the command line using the resource/name syntax:
+In the case of two resources, it's also easy to specify both on the command line using the resource/name syntax:
  -->
 在仅有两种资源的情况下，可以使用"资源类型/资源名"的语法在命令行中
 同时指定这两个资源：
@@ -138,13 +138,14 @@ service "my-nginx-svc" deleted
 ```
 
 <!--
-Because `kubectl` outputs resource names in the same syntax it accepts, it's easy to chain operations using `$()` or `xargs`:
+Because `kubectl` outputs resource names in the same syntax it accepts, you can chain operations using `$()` or `xargs`:
 -->
 由于 `kubectl` 用来输出资源名称的语法与其所接受的资源名称语法相同，
-所以很容易使用 `$()` 或 `xargs` 进行链式操作：
+你可以使用 `$()` 或 `xargs` 进行链式操作：
 
 ```shell
 kubectl get $(kubectl create -f docs/concepts/cluster-administration/nginx/ -o name | grep service)
+kubectl create -f docs/concepts/cluster-administration/nginx/ -o name | grep service | xargs -i kubectl get {}
 ```
 
 ```
@@ -399,13 +400,13 @@ For a more concrete example, check the [tutorial of deploying Ghost](https://git
 ## Updating labels
 
 Sometimes existing pods and other resources need to be relabeled before creating new resources. This can be done with `kubectl label`.
-For example, if you want to label all your nginx pods as frontend tier, simply run:
+For example, if you want to label all your nginx pods as frontend tier, run:
  -->
 ## 更新标签  {#updating-labels}
 
 有时，现有的 pod 和其它资源需要在创建新资源之前重新标记。
 这可以用 `kubectl label` 完成。
-例如，如果想要将所有 nginx pod 标记为前端层，只需运行：
+例如，如果想要将所有 nginx pod 标记为前端层，运行：
 
 ```shell
 kubectl label pods -l app=nginx tier=fe
@@ -419,7 +420,7 @@ pod/my-nginx-2035384211-u3t6x labeled
 
 <!--
 This first filters all pods with the label "app=nginx", and then labels them with the "tier=fe".
-To see the pods you just labeled, run:
+To see the pods you labeled, run:
  -->
 首先用标签 "app=nginx" 过滤所有的 Pod，然后用 "tier=fe" 标记它们。
 想要查看你刚才标记的 Pod，请运行：
@@ -482,11 +483,11 @@ For more information, please see [annotations](/docs/concepts/overview/working-w
 <!--
 ## Scaling your application
 
-When load on your application grows or shrinks, it's easy to scale with `kubectl`. For instance, to decrease the number of nginx replicas from 3 to 1, do:
+When load on your application grows or shrinks, use `kubectl` to scale you application. For instance, to decrease the number of nginx replicas from 3 to 1, do:
  -->
 ## 扩缩你的应用
 
-当应用上的负载增长或收缩时，使用 `kubectl` 能够轻松实现规模的扩缩。
+当应用上的负载增长或收缩时，使用 `kubectl` 能够实现应用规模的扩缩。
 例如，要将 nginx 副本的数量从 3 减少到 1，请执行以下操作：
 
 ```shell
@@ -505,6 +506,7 @@ Now you only have one pod managed by the deployment.
 ```shell
 kubectl get pods -l app=nginx
 ```
+
 ```
 NAME                        READY     STATUS    RESTARTS   AGE
 my-nginx-2035384211-j5fhi   1/1       Running   0          30m
@@ -653,13 +655,13 @@ JSON merge patch、以及 strategic merge patch。 请参考
 <!--
 ## Disruptive updates
 
-In some cases, you may need to update resource fields that cannot be updated once initialized, or you may just want to make a recursive change immediately, such as to fix broken pods created by a Deployment. To change such fields, use `replace --force`, which deletes and re-creates the resource. In this case, you can simply modify your original configuration file:
+In some cases, you may need to update resource fields that cannot be updated once initialized, or you may want to make a recursive change immediately, such as to fix broken pods created by a Deployment. To change such fields, use `replace --force`, which deletes and re-creates the resource. In this case, you can modify your original configuration file:
  -->
 ## 破坏性的更新  {#disruptive-updates}
 
 在某些情况下，你可能需要更新某些初始化后无法更新的资源字段，或者你可能只想立即进行递归更改，
 例如修复 Deployment 创建的不正常的 Pod。若要更改这些字段，请使用 `replace --force`，
-它将删除并重新创建资源。在这种情况下，你可以简单地修改原始配置文件：
+它将删除并重新创建资源。在这种情况下，你可以修改原始配置文件：
 
 ```shell
 kubectl replace -f https://k8s.io/examples/application/nginx/nginx-deployment.yaml --force
@@ -700,7 +702,7 @@ deployment.apps/my-nginx created
 ```
 
 <!--
-To update to version 1.16.1, simply change `.spec.template.spec.containers[0].image` from `nginx:1.14.2` to `nginx:1.16.1`, with the kubectl commands we learned above.
+To update to version 1.16.1, change `.spec.template.spec.containers[0].image` from `nginx:1.14.2` to `nginx:1.16.1`, with the previous kubectl commands.
  -->
 要更新到 1.16.1 版本，只需使用我们前面学到的 kubectl 命令将
 `.spec.template.spec.containers[0].image` 从 `nginx:1.14.2` 修改为 `nginx:1.16.1`。
diff --git a/content/zh/docs/concepts/cluster-administration/proxies.md b/content/zh/docs/concepts/cluster-administration/proxies.md
index 808d8b31ec..be933ccc9c 100644
--- a/content/zh/docs/concepts/cluster-administration/proxies.md
+++ b/content/zh/docs/concepts/cluster-administration/proxies.md
@@ -73,7 +73,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - proxies UDP, TCP and SCTP
     - does not understand HTTP
     - provides load balancing
-    - is just used to reach services
+    - is only used to reach services
 -->
 3. [kube proxy](/zh/docs/concepts/services-networking/service/#ips-and-vips)：
 
diff --git a/content/zh/docs/concepts/cluster-administration/system-logs.md b/content/zh/docs/concepts/cluster-administration/system-logs.md
index 799b566f6a..4fb9ba7c89 100644
--- a/content/zh/docs/concepts/cluster-administration/system-logs.md
+++ b/content/zh/docs/concepts/cluster-administration/system-logs.md
@@ -59,7 +59,7 @@ Migration to structured log messages is an ongoing process. Not all log messages
 
 Log formatting and value serialization are subject to change.
 -->
-{{<warning>}}
+{{< warning >}}
 到结构化日志消息的迁移是一个持续的过程。
 在此版本中，并非所有日志消息都是结构化的。
 解析日志文件时，你也必须要处理非结构化日志消息。
@@ -68,22 +68,25 @@ Log formatting and value serialization are subject to change.
 {{< /warning>}}
 
 <!--
-Structured logging is a effort to introduce a uniform structure in log messages allowing for easy extraction of information, making logs easier and cheaper to store and process.
+Structured logging introduces a uniform structure in log messages allowing for programmatic extraction of information. You can store and process structured logs with less effort and cost.
 New message format is backward compatible and enabled by default.
 
 Format of structured logs:
 -->
-结构化日志记录旨在日志消息中引入统一结构，以方便提取信息，使日志的存储和处理更容易、成本更低。
+结构化日志记录旨在日志消息中引入统一结构，以便以编程方式提取信息。
+你可以方便地用更小的开销来处理结构化日志。
 新的消息格式向后兼容，并默认启用。
 
 结构化日志的格式：
-```
+
+```ini
 <klog header> "<message>" <key1>="<value1>" <key2>="<value2>" ...
 ```
 
 <!-- Example: -->
 示例：
-```
+
+```ini
 I1025 00:15:15.525108       1 controller_utils.go:116] "Pod status updated" pod="kube-system/kubedns" status="ready"
 ```
 

From 89a2aec131d5fceeab3ae7ad03c3ebd2023ff631 Mon Sep 17 00:00:00 2001
From: huyuqing <huyuqing@inspur.com>
Date: Mon, 29 Mar 2021 19:19:15 +0800
Subject: [PATCH 367/788] Translation optimization of
 /docs/tasks/job/automated-tasks-with-cron-jobs.md

---
 content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
index b3e08e73c0..1d417c6e65 100644
--- a/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -360,7 +360,7 @@ By default, they are set to 3 and 1 respectively.  Setting a limit to `0` corres
 ### 任务历史限制
 
 `.spec.successfulJobsHistoryLimit` 和 `.spec.failedJobsHistoryLimit`是可选的。
-这两个域声明了有多少执行完成和失败的任务会被保留。
+这两个字段指定应保留多少已完成和失败的作业。
 默认设置为3和1。限制设置为0代表相应类型的任务完成后不会保留。
 
 

From 66617a0633b518fe9e062d94ef8576620ad4d0be Mon Sep 17 00:00:00 2001
From: huyuqing <huyuqing@inspur.com>
Date: Mon, 29 Mar 2021 19:25:30 +0800
Subject: [PATCH 368/788] Translation optimization of
 /docs/tasks/job/automated-tasks-with-cron-jobs.md

---
 content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
index 1d417c6e65..ccf573b155 100644
--- a/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -360,7 +360,7 @@ By default, they are set to 3 and 1 respectively.  Setting a limit to `0` corres
 ### 任务历史限制
 
 `.spec.successfulJobsHistoryLimit` 和 `.spec.failedJobsHistoryLimit`是可选的。
-这两个字段指定应保留多少已完成和失败的作业。
+这两个字段指定应保留多少已完成和失败的任务。
 默认设置为3和1。限制设置为0代表相应类型的任务完成后不会保留。
 
 

From bf2cfd8dc303aeef50091b7777960ff0e72687d3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Mon, 29 Mar 2021 14:36:23 +0200
Subject: [PATCH 369/788] Fix

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 20e960935b..d548cd32aa 100644
--- a/README.md
+++ b/README.md
@@ -43,10 +43,10 @@ make container-image
 make container-serve
 ```
 
-Open up your browser to http://localhost:1313 to view the website. As you make changes to the source files, Hugo updates the website and forces a browser refresh.
-
 If you see errors, it probably means that the hugo container did not have enough computing resources available. To solve it, increase the amount of allowed CPU and memory usage for Docker on your machine ([MacOSX](https://docs.docker.com/docker-for-mac/#resources) and [Windows](https://docs.docker.com/docker-for-windows/#resources)).
 
+Open up your browser to http://localhost:1313 to view the website. As you make changes to the source files, Hugo updates the website and forces a browser refresh.
+
 ## Running the website locally using Hugo
 
 Make sure to install the Hugo extended version specified by the `HUGO_VERSION` environment variable in the [`netlify.toml`](netlify.toml#L10) file.

From 29d6c1135d50b9b01de10686d00ef1ff40f18e9c Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Mon, 29 Mar 2021 20:43:52 +0800
Subject: [PATCH 370/788] [zh] Sync changes to workload controllers

---
 .../workloads/controllers/cron-jobs.md        |  8 ++++++
 .../workloads/controllers/daemonset.md        |  4 +--
 .../workloads/controllers/deployment.md       | 27 ++++++++++---------
 .../concepts/workloads/controllers/job.md     |  2 +-
 .../workloads/controllers/replicaset.md       |  6 ++---
 .../controllers/replicationcontroller.md      | 25 +++++++++--------
 6 files changed, 42 insertions(+), 30 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/controllers/cron-jobs.md b/content/zh/docs/concepts/workloads/controllers/cron-jobs.md
index a987270233..21eb03385c 100644
--- a/content/zh/docs/concepts/workloads/controllers/cron-jobs.md
+++ b/content/zh/docs/concepts/workloads/controllers/cron-jobs.md
@@ -154,6 +154,14 @@ at least once.
 如果 `startingDeadlineSeconds` 设置为很大的数值或未设置（默认），并且
 `concurrencyPolicy` 设置为 `Allow`，则作业将始终至少运行一次。
 
+{{< caution >}}
+<!--
+If `startingDeadlineSeconds` is set to a value less than 10 seconds, the CronJob may not be scheduled. This is because the CronJob controller checks things every 10 seconds.
+-->
+如果 `startingDeadlineSeconds` 的设置值低于 10 秒钟，CronJob 可能无法被调度。
+这是因为 CronJob 控制器每 10 秒钟执行一次检查。
+{{< /caution >}}
+
 <!--
 For every CronJob, the CronJob {{< glossary_tooltip term_id="controller" >}} checks how many schedules it missed in the duration from its last scheduled time until now. If there are more than 100 missed schedules, then it does not start the job and logs the error
 -->
diff --git a/content/zh/docs/concepts/workloads/controllers/daemonset.md b/content/zh/docs/concepts/workloads/controllers/daemonset.md
index 60f8f656fe..6ad8c561d9 100644
--- a/content/zh/docs/concepts/workloads/controllers/daemonset.md
+++ b/content/zh/docs/concepts/workloads/controllers/daemonset.md
@@ -278,8 +278,8 @@ the related features.
 | ---------------------------------------- | ---------- | ------- | ------------------------------------------------------------ |
 | `node.kubernetes.io/not-ready`           | NoExecute  | 1.13+   | 当出现类似网络断开的情况导致节点问题时，DaemonSet Pod 不会被逐出。 |
 | `node.kubernetes.io/unreachable`         | NoExecute  | 1.13+   | 当出现类似于网络断开的情况导致节点问题时，DaemonSet Pod 不会被逐出。 |
-| `node.kubernetes.io/disk-pressure`       | NoSchedule | 1.8+    | |
-| `node.kubernetes.io/memory-pressure`     | NoSchedule | 1.8+    | |
+| `node.kubernetes.io/disk-pressure`       | NoSchedule | 1.8+    | DaemonSet Pod 被默认调度器调度时能够容忍磁盘压力属性。 |
+| `node.kubernetes.io/memory-pressure`     | NoSchedule | 1.8+    | DaemonSet Pod 被默认调度器调度时能够容忍内存压力属性。 |
 | `node.kubernetes.io/unschedulable`       | NoSchedule | 1.12+   | DaemonSet Pod 能够容忍默认调度器所设置的 `unschedulable` 属性.  |
 | `node.kubernetes.io/network-unavailable` | NoSchedule | 1.12+   | DaemonSet 在使用宿主网络时，能够容忍默认调度器所设置的 `network-unavailable` 属性。 |
 
diff --git a/content/zh/docs/concepts/workloads/controllers/deployment.md b/content/zh/docs/concepts/workloads/controllers/deployment.md
index 14214e7066..0f6ea1846f 100644
--- a/content/zh/docs/concepts/workloads/controllers/deployment.md
+++ b/content/zh/docs/concepts/workloads/controllers/deployment.md
@@ -102,24 +102,25 @@ In this example:
 
 <!--
 * The `selector` field defines how the Deployment finds which Pods to manage.
-  In this case, you simply select a label that is defined in the Pod template (`app: nginx`).
+  In this case, you select a label that is defined in the Pod template (`app: nginx`).
   However, more sophisticated selection rules are possible,
   as long as the Pod template itself satisfies the rule.
 -->
 * `selector` 字段定义 Deployment 如何查找要管理的 Pods。
-  在这里，你只需选择在 Pod 模板中定义的标签（`app: nginx`）。
+  在这里，你选择在 Pod 模板中定义的标签（`app: nginx`）。
   不过，更复杂的选择规则是也可能的，只要 Pod 模板本身满足所给规则即可。
 
+  {{< note >}}
   <!--
-  The `matchLabels` field is a map of {key,value} pairs. A single {key,value} in the `matchLabels` map
-  is equivalent to an element of `matchExpressions`, whose key field is "key" the operator is "In",
-  and the values array contains only "value".
+  The `spec.selector.matchLabels` field is a map of {key,value} pairs.
+  A single {key,value} in the `matchLabels` map is equivalent to an element of `matchExpressions`,
+  whose `key` field is "key", the `operator` is "In", and the `values` array contains only "value".
   All of the requirements, from both `matchLabels` and `matchExpressions`, must be satisfied in order to match.
   -->
-  {{< note >}}
-  `matchLabels` 字段是 `{key,value}` 偶对的映射。在 `matchLabels` 映射中的单个 `{key,value}`
-  映射等效于 `matchExpressions` 中的一个元素，即其 `key` 字段是 “key”，operator 为 “In”，`value`
-  数组仅包含 “value”。在 `matchLabels` 和 `matchExpressions` 中给出的所有条件都必须满足才能匹配。
+  `spec.selector.matchLabels` 字段是 `{key,value}` 键值对映射。
+  在 `matchLabels` 映射中的每个 `{key,value}` 映射等效于 `matchExpressions` 中的一个元素，
+  即其 `key` 字段是 “key”，`operator` 为 “In”，`values` 数组仅包含 “value”。
+  在 `matchLabels` 和 `matchExpressions` 中给出的所有条件都必须满足才能匹配。
   {{< /note >}}
 
 <!--
@@ -347,7 +348,7 @@ is changed, for example if the labels or container images of the template are up
       deployment.v1.apps/nginx-deployment nginx=nginx:1.16.1
    ```
    <!--
-   or simply use the following command:
+   or use the following command:
    -->
    或者使用下面的命令：
     
@@ -355,7 +356,7 @@ is changed, for example if the labels or container images of the template are up
    kubectl set image deployment/nginx-deployment nginx=nginx:1.16.1 --record
    ```
 
-   <!-- The output is similar to this: -->
+   <!-- The output is similar to: -->
    输出类似于：
 
    ```
@@ -429,7 +430,7 @@ up to 3 replicas, as well as scaling down the old ReplicaSet to 0 replicas.
   kubectl get rs
   ```
 
-  <!-- The output is similar to this: -->
+  <!-- The output is similar to: -->
   输出类似于：
 
   ```
@@ -1179,7 +1180,7 @@ apply multiple fixes in between pausing and resuming without triggering unnecess
 这样做使得你能够在暂停和恢复执行之间应用多个修补程序，而不会触发不必要的上线操作。
 
 <!--
-* For example, with a Deployment that was just created:
+* For example, with a Deployment that was created:
   Get the Deployment details:
 -->
 * 例如，对于一个刚刚创建的 Deployment：
diff --git a/content/zh/docs/concepts/workloads/controllers/job.md b/content/zh/docs/concepts/workloads/controllers/job.md
index 6180d3bd28..a2a6982e54 100644
--- a/content/zh/docs/concepts/workloads/controllers/job.md
+++ b/content/zh/docs/concepts/workloads/controllers/job.md
@@ -139,7 +139,7 @@ pi-5rwd7
 
 <!--
 Here, the selector is the same as the selector for the Job.  The `-output=jsonpath` option specifies an expression
-that just gets the name from each Pod in the returned list.
+with the name from each Pod in the returned list.
 
 View the standard output of one of the pods:
 -->
diff --git a/content/zh/docs/concepts/workloads/controllers/replicaset.md b/content/zh/docs/concepts/workloads/controllers/replicaset.md
index 46877b02f6..7ad68c9e53 100644
--- a/content/zh/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/zh/docs/concepts/workloads/controllers/replicaset.md
@@ -345,7 +345,7 @@ pod2             1/1     Running   0          36s
 ## Writing a ReplicaSet Spec
 
 As with all other Kubernetes API objects, a ReplicaSet needs the `apiVersion`, `kind`, and `metadata` fields.
-For ReplicaSets, the kind is always just ReplicaSet.
+For ReplicaSets, the `kind` is always a ReplicaSet.
 In Kubernetes 1.9 the API version `apps/v1` on the ReplicaSet kind is the current version and is enabled by default. The API version `apps/v1beta2` is deprecated.
 Refer to the first lines of the `frontend.yaml` example for guidance.
 
@@ -357,7 +357,7 @@ A ReplicaSet also needs a [`.spec` section](https://git.k8s.io/community/contrib
 ## 编写 ReplicaSet 的 spec
 
 与所有其他 Kubernetes API 对象一样，ReplicaSet 也需要 `apiVersion`、`kind`、和 `metadata` 字段。
-对于 ReplicaSets 而言，其 kind 始终是 ReplicaSet。
+对于 ReplicaSets 而言，其 `kind` 始终是 ReplicaSet。
 在 Kubernetes 1.9 中，ReplicaSet 上的 API 版本 `apps/v1` 是其当前版本，且被
 默认启用。API 版本 `apps/v1beta2` 已被废弃。
 参考 `frontend.yaml` 示例的第一行。
@@ -375,7 +375,7 @@ The `.spec.template` is a [pod template](/docs/concepts/workloads/pods/#pod-temp
 required to have labels in place. In our `frontend.yaml` example we had one label: `tier: frontend`.
 Be careful not to overlap with the selectors of other controllers, lest they try to adopt this Pod.
 
-For the template's [restart policy](/docs/concepts/workloads/Pods/pod-lifecycle/#restart-policy) field,
+For the template's [restart policy](/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy) field,
 `.spec.template.spec.restartPolicy`, the only allowed value is `Always`, which is the default.
 -->
 ### Pod 模版
diff --git a/content/zh/docs/concepts/workloads/controllers/replicationcontroller.md b/content/zh/docs/concepts/workloads/controllers/replicationcontroller.md
index dee9e01912..c35032aa28 100644
--- a/content/zh/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/zh/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -174,10 +174,10 @@ nginx-3ntk0 nginx-4ok8v nginx-qrm3m
 <!--
 Here, the selector is the same as the selector for the ReplicationController (seen in the
 `kubectl describe` output), and in a different form in `replication.yaml`.  The `--output=jsonpath` option
-specifies an expression that just gets the name from each pod in the returned list.
+specifies an expression with the name from each pod in the returned list.
 -->
 这里，选择算符与 ReplicationController 的选择算符相同（参见 `kubectl describe` 输出），并以不同的形式出现在 `replication.yaml` 中。
-`--output=jsonpath` 选项指定了一个表达式，只从返回列表中的每个 Pod 中获取名称。
+`--output=jsonpath` 选项指定了一个表达式，仅从返回列表中的每个 Pod 中获取名称。
 
 <!--
 ## Writing a ReplicationController Spec
@@ -305,7 +305,7 @@ delete`](/docs/reference/generated/kubectl/kubectl-commands#delete).  Kubectl wi
 for it to delete each pod before deleting the ReplicationController itself.  If this kubectl
 command is interrupted, it can be restarted.
 
-When using the REST API or go client library, you need to do the steps explicitly (scale replicas to
+When using the REST API or Go client library, you need to do the steps explicitly (scale replicas to
 0, wait for pod deletions, then delete the ReplicationController).
 -->
 ## 使用 ReplicationController {#working-with-replicationcontrollers}
@@ -317,16 +317,17 @@ When using the REST API or go client library, you need to do the steps explicitl
 kubectl 将 ReplicationController 缩放为 0 并等待以便在删除 ReplicationController 本身之前删除每个 Pod。
 如果这个 kubectl 命令被中断，可以重新启动它。
 
-当使用 REST API 或 go 客户端库时，你需要明确地执行这些步骤（缩放副本为 0、 等待 Pod 删除，之后删除 ReplicationController 资源）。
+当使用 REST API 或 Go 客户端库时，你需要明确地执行这些步骤（缩放副本为 0、
+等待 Pod 删除，之后删除 ReplicationController 资源）。
 
 <!--
-### Deleting just a ReplicationController
+### Deleting only a ReplicationController
 
 You can delete a ReplicationController without affecting any of its pods.
 
 Using kubectl, specify the `--cascade=false` option to [`kubectl delete`](/docs/reference/generated/kubectl/kubectl-commands#delete).
 
-When using the REST API or go client library, simply delete the ReplicationController object.
+When using the REST API or Go client library, simply delete the ReplicationController object.
 -->
 ### 只删除 ReplicationController
 
@@ -334,7 +335,7 @@ When using the REST API or go client library, simply delete the ReplicationContr
 
 使用 kubectl，为 [`kubectl delete`](/docs/reference/generated/kubectl/kubectl-commands#delete) 指定 `--cascade=false` 选项。
 
-当使用 REST API 或 go 客户端库时，只需删除 ReplicationController 对象。
+当使用 REST API 或 Go 客户端库时，只需删除 ReplicationController 对象。
 
 <!--
 Once the original is deleted, you can create a new ReplicationController to replace it.  As long
@@ -373,11 +374,13 @@ As mentioned above, whether you have 1 pod you want to keep running, or 1000, a
 <!--
 ### Scaling
 
-The ReplicationController makes it easy to scale the number of replicas up or down, either manually or by an auto-scaling control agent, by simply updating the `replicas` field.
+The ReplicationController scales the number of replicas up or down by setting the `replicas` field.
+You can configure the ReplicationController to manage the replicas manually or by an auto-scaling control agent.
 -->
 ### 扩缩容   {#scaling}
 
-通过简单地更新 `replicas` 字段，ReplicationController 可以方便地横向扩容或缩容副本的数量，或手动或通过自动缩放控制代理。
+通过设置 `replicas` 字段，ReplicationController 可以方便地横向扩容或缩容副本的数量。
+你可以手动或通过自动缩放控制代理来控制 ReplicationController 执行此操作。
 
 <!--
 ### Rolling updates
@@ -463,11 +466,11 @@ Pods created by a ReplicationController are intended to be fungible and semantic
 <!--
 ## Responsibilities of the ReplicationController
 
-The ReplicationController simply ensures that the desired number of pods matches its label selector and are operational. Currently, only terminated pods are excluded from its count. In the future, [readiness](http://issue.k8s.io/620) and other information available from the system may be taken into account, we may add more controls over the replacement policy, and we plan to emit events that could be used by external clients to implement arbitrarily sophisticated replacement and/or scale-down policies.
+The ReplicationController ensures that the desired number of pods matches its label selector and are operational. Currently, only terminated pods are excluded from its count. In the future, [readiness](http://issue.k8s.io/620) and other information available from the system may be taken into account, we may add more controls over the replacement policy, and we plan to emit events that could be used by external clients to implement arbitrarily sophisticated replacement and/or scale-down policies.
 -->
 ## ReplicationController 的职责
 
-ReplicationController 只需确保所需的 Pod 数量与其标签选择算符匹配，并且是可操作的。
+ReplicationController 仅确保所需的 Pod 数量与其标签选择算符匹配，并且是可操作的。
 目前，它的计数中只排除终止的 Pod。
 未来，可能会考虑系统提供的[就绪状态](https://issue.k8s.io/620)和其他信息，
 我们可能会对替换策略添加更多控制，

From 3252fb1d9e1869624a7e8f3204b8bb4ad920f787 Mon Sep 17 00:00:00 2001
From: SataQiu <1527062125@qq.com>
Date: Mon, 29 Mar 2021 20:56:15 +0800
Subject: [PATCH 371/788] kubeadm: update create-cluster-kubeadm page as
 kubeadm will not do e2e tests against Calico CNI anymore

---
 .../tools/kubeadm/create-cluster-kubeadm.md                     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index a9b37e8167..a5cdecafd7 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -229,7 +229,7 @@ Cluster DNS (CoreDNS) will not start up before a network is installed.**
 {{< /caution >}}
 
 {{< note >}}
-Currently Calico is the only CNI plugin that the kubeadm project performs e2e tests against.
+Kubeadm should be CNI agnostic and the validation of CNI providers is out of the scope of our current e2e testing.
 If you find an issue related to a CNI plugin you should log a ticket in its respective issue
 tracker instead of the kubeadm or kubernetes issue trackers.
 {{< /note >}}

From 3ccdb3426ab8151b99c223f4c1e2fca61b1ba2fe Mon Sep 17 00:00:00 2001
From: Marc Bihlmaier <30314040+rdxmb@users.noreply.github.com>
Date: Mon, 29 Mar 2021 15:00:45 +0200
Subject: [PATCH 372/788] Update kubelet-config-file.md (#27192)

* Update kubelet-config-file.md

add note and link to kubeadm/kubelet-integration

* Update content/en/docs/tasks/administer-cluster/kubelet-config-file.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../en/docs/tasks/administer-cluster/kubelet-config-file.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/kubelet-config-file.md b/content/en/docs/tasks/administer-cluster/kubelet-config-file.md
index 54cd837370..252e140097 100644
--- a/content/en/docs/tasks/administer-cluster/kubelet-config-file.md
+++ b/content/en/docs/tasks/administer-cluster/kubelet-config-file.md
@@ -53,6 +53,11 @@ For a trick to generate a configuration file from a live node, see
 
 ## Start a Kubelet process configured via the config file
 
+{{< note >}}
+If you use kubeadm to initialize your cluster, use the kubelet-config while creating your cluster with `kubeadmin init`.
+See [configuring kubelet using kubeadm](/docs/setup/production-environment/tools/kubeadm/kubelet-integration/) for details.
+{{< /note >}}
+
 Start the Kubelet with the `--config` flag set to the path of the Kubelet's config file.
 The Kubelet will then load its config from this file.
 
@@ -80,4 +85,3 @@ is considered the default "last known good" configuration by the automatic rollb
 
 
 
-

From d7f272061672e0ac7fb1b242136238a40eb39730 Mon Sep 17 00:00:00 2001
From: wangyysde <net_use@bzhy.com>
Date: Mon, 29 Mar 2021 23:06:56 +0800
Subject: [PATCH 373/788] Update system-metrics.md

---
 .../concepts/cluster-administration/system-metrics.md     | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/system-metrics.md b/content/zh/docs/concepts/cluster-administration/system-metrics.md
index cc3cb44fa7..a7053da87d 100644
--- a/content/zh/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/zh/docs/concepts/cluster-administration/system-metrics.md
@@ -22,7 +22,7 @@ System component metrics can give a better look into what is happening inside th
 Kubernetes components emit metrics in [Prometheus format](https://prometheus.io/docs/instrumenting/exposition_formats/).
 This format is structured plain text, designed so that people and machines can both read it.
 -->
-系统组件指标可以更好地了解系统内部发生的情况。指标对于构建仪表板和告警特别有用。
+通过系统组件指标可以更好地了解系统组个内部发生的情况。系统组件指标对于构建仪表板和告警特别有用。
 
 Kubernetes 组件以 [Prometheus 格式](https://prometheus.io/docs/instrumenting/exposition_formats/)
 生成度量值。
@@ -37,10 +37,10 @@ In most cases metrics are available on `/metrics` endpoint of the HTTP server. F
 
 Examples of those components:
 -->
-## Kubernetes 中的指标
+## Kubernetes 中组件的指标
 
-在大多数情况下，可以在 HTTP 服务器的 `/metrics` 端点上访问度量值。
-对于默认情况下不公开端点的组件，可以使用 `--bind-address` 标志启用。
+在大多数情况下，可以通过HTTP访问组件endpoint的 `/metrics` 路径来获取组件的度量值。
+对于那些默认情况下不暴露的endpoint的组件，可以使用 `--bind-address` 标志启用。
 
 这些组件的示例：
 

From 87707ab95614ffd3e55d9dd63ab3b14a20891dac Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Thu, 25 Mar 2021 15:09:50 -0700
Subject: [PATCH 374/788] update config.toml for 1.21 release

update config.toml for 1.21 release

update config.toml for 1.21 release
---
 config.toml | 38 +++++++++++++++++++-------------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/config.toml b/config.toml
index 04329284d8..c20fcbb9e6 100644
--- a/config.toml
+++ b/config.toml
@@ -138,10 +138,10 @@ time_format_default = "January 02, 2006 at 3:04 PM PST"
 description = "Production-Grade Container Orchestration"
 showedit = true
 
-latest = "v1.20"
+latest = "v1.21"
 
-fullversion = "v1.20.0"
-version = "v1.20"
+fullversion = "v1.21.0"
+version = "v1.21"
 githubbranch = "master"
 docsbranch = "master"
 deprecated = false
@@ -178,40 +178,40 @@ js = [
 ]
 
 [[params.versions]]
-fullversion = "v1.20.0"
-version = "v1.20"
-githubbranch = "v1.20.0"
+fullversion = "v1.21.0"
+version = "v1.21"
+githubbranch = "v1.21.0"
 docsbranch = "master"
 url = "https://kubernetes.io"
 
 [[params.versions]]
-fullversion = "v1.19.4"
+fullversion = "v1.20.6"
+version = "v1.20"
+githubbranch = "v1.20.6"
+docsbranch = "release-1.20"
+url = "https://v1-20.kubernetes.io"
+
+[[params.versions]]
+fullversion = "v1.19.10"
 version = "v1.19"
-githubbranch = "v1.19.4"
+githubbranch = "v1.19.10"
 docsbranch = "release-1.19"
 url = "https://v1-19.docs.kubernetes.io"
 
 [[params.versions]]
-fullversion = "v1.18.12"
+fullversion = "v1.18.18"
 version = "v1.18"
-githubbranch = "v1.18.12"
+githubbranch = "v1.18.18"
 docsbranch = "release-1.18"
 url = "https://v1-18.docs.kubernetes.io"
 
 [[params.versions]]
-fullversion = "v1.17.14"
+fullversion = "v1.17.17"
 version = "v1.17"
-githubbranch = "v1.17.14"
+githubbranch = "v1.17.17"
 docsbranch = "release-1.17"
 url = "https://v1-17.docs.kubernetes.io"
 
-[[params.versions]]
-fullversion = "v1.16.15"
-version = "v1.16"
-githubbranch = "v1.16.15"
-docsbranch = "release-1.16"
-url = "https://v1-16.docs.kubernetes.io"
-
 
 # User interface configuration
 [params.ui]

From f6a5a55a5564c3fe16bcd06d2e9edc4f70d6038b Mon Sep 17 00:00:00 2001
From: carol valencia <krol3@users.noreply.github.com>
Date: Mon, 29 Mar 2021 09:29:08 -0300
Subject: [PATCH 375/788] chore: review fixing text - 3

---
 content/es/docs/concepts/security/overview.md | 22 +++++++++----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/content/es/docs/concepts/security/overview.md b/content/es/docs/concepts/security/overview.md
index fdb3828cfe..f61b99c242 100644
--- a/content/es/docs/concepts/security/overview.md
+++ b/content/es/docs/concepts/security/overview.md
@@ -16,7 +16,7 @@ Este modelo de seguridad en el contenedor brinda sugerencias, no es una prueba d
 
 ## Las 4C de Seguridad en Cloud Native
 
-Puede pensar en seguridad por capas. Las 4C de la seguridad en cloud Native son la nube(Cloud),
+Puede pensar en seguridad por capas. Las 4C de la seguridad en Cloud Native son la nube(Cloud),
 Clústeres, Contenedores y Código.
 
 {{< note >}}
@@ -30,13 +30,13 @@ Cada capa del modelo de seguridad Cloud Native es basada en la siguiente capa m
 La capa de código se beneficia de una base sólida(nube, clúster, contenedor) de capas seguras.
 No podemos garantizar la seguridad aplicando solo seguridad a nivel del código, y usar estándares de seguridad deficientes en las otras capas.
 
-## Cloud
+## Nube(Cloud)
 
 En muchos sentidos, la nube (o los servidores o el centro de datos corporativo) es la
-[base informática confiable](https://en.wikipedia.org/wiki/Trusted_computing_base)
+[base de computador confiable](https://es.wikipedia.org/wiki/Base_de_computador_confiable)
 de un clúster de Kubernetes. Si la capa de la nube es vulnerable (o
 configurado de alguna manera vulnerable), por consecuencia no hay garantía de que los componentes construidos
-encima de la base sean seguras. Cada proveedor de la nube tiene recomendaciones de seguridad
+encima de la base sean seguros. Cada proveedor de la nube tiene recomendaciones de seguridad
 para ejecutar las cargas de trabajo de forma segura en sus entornos.
 
 ### Seguridad del proveedor de la nube
@@ -47,7 +47,7 @@ A continuación, algunos enlaces a la documentación de seguridad de los proveed
 
 {{< table caption="Cloud provider security" >}}
 
-Provedor IaaS        | Link |
+Proveedor IaaS        | Link |
 -------------------- | ------------ |
 Alibaba Cloud | https://www.alibabacloud.com/trust-center |
 Amazon Web Services | https://aws.amazon.com/security/ |
@@ -66,15 +66,15 @@ Sugerencias para proteger su infraestructura en un clúster de Kubernetes:
 
 Área de Interés para la Infraestructura de Kubernetes | Recomendación |
 --------------------------------------------- | -------------- |
-Acceso de red al servidor API (Plano de Control) | Todo acceso público al plano de control del Kubernetes en la Internet no está permitido y es controlado por listas de control de acceso a la red restrictas a un conjunto de direcciones IP necesarios para administrar el clúster.|
-Acceso a la red de los Nodos | Los nodos deben ser configurados para _sólo_ aceptar conexiones (por medio de listas de control de acceso a la red) desde el plano de control en los puertos especificados y aceptar conexiones para servicios en Kubernetes del tipo NodePort y LoadBalancer. Si es posible, estos nodos no deben exponerse públicamente en la Internet.
-Acceso de la API del Kubernetes al proveedor de la Cloud | Cada proveedor de la nube debe dar un conjunto de permisos al plano de control y nodos del Kubernetes. Es mejor otorgar al clúster el permiso de acceso al proveedor de nube siguiendo el [principio del mínimo privilegio](https://en.wikipedia.org/wiki/Principle_of_least_privilege) para los recursos que necesite administrar. La [documentación del Kops](https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md#iam-roles) fornece informações sobre as políticas e roles do IAM.
-Acceso al etcd | El acceso al etcd (banco de dados do Kubernetes) debe ser limitado apenas al plano de control. Dependiendo de su configuración, debería intentar usar etcd sobre TLS. Mayores informaciones pueden ser encontradas en la [documentación del etcd](https://github.com/etcd-io/etcd/tree/master/Documentation).
-Encriptación etcd | Siempre que sea posible, es una buena práctica encriptar todas las unidades de almacenamiento, el etcd mantiene el estado de todo el clúster (incluidos los Secretos), su disco debe estar encriptado.
+Acceso de red al servidor API (Plano de Control) | Todo acceso público al plano de control del Kubernetes en Internet no está permitido y es controlado por listas de control de acceso a la red estrictas a un conjunto de direcciones IP necesarias para administrar el clúster.|
+Acceso a la red de los Nodos | Los nodos deben ser configurados para _sólo_ aceptar conexiones (por medio de listas de control de acceso a la red) desde el plano de control en los puertos especificados y aceptar conexiones para servicios en Kubernetes del tipo NodePort y LoadBalancer. Si es posible, estos nodos no deben exponerse públicamente en Internet.
+Acceso a la API de Kubernetes del proveedor de la nube | Cada proveedor de la nube debe dar un conjunto de permisos al plano de control y nodos del Kubernetes. Es mejor otorgar al clúster el permiso de acceso al proveedor de nube siguiendo el [principio de mínimo privilegio](https://es.wikipedia.org/wiki/Principio_de_m%C3%ADnimo_privilegio) para los recursos que necesite administrar. La [documentación del Kops](https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md#iam-roles) ofrece información sobre las políticas y roles de IAM.
+Acceso a etcd | El acceso a etcd (banco de datos de Kubernetes) debe ser limitado apenas al plano de control. Dependiendo de su configuración, debería intentar usar etcd sobre TLS. Puede encontrar mas información en la [documentación de etcd](https://github.com/etcd-io/etcd/tree/master/Documentation).
+Encriptación etcd | Siempre que sea posible, es una buena práctica encriptar todas las unidades de almacenamiento, etcd mantiene el estado de todo el clúster (incluidos los Secretos), su disco debe estar encriptado.
 
 {{< /table >}}
 
-## Cluster
+## Clúster
 
 Existe dos áreas de preocupación para proteger Kubernetes:
 

From 7f66bfd0595ff77a0db12a69a039d2ed2657ef8b Mon Sep 17 00:00:00 2001
From: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
Date: Mon, 29 Mar 2021 18:25:04 -0300
Subject: [PATCH 376/788] Add pt translation for extend networking

---
 .../compute-storage-net/_index.md             |   4 +
 .../compute-storage-net/network-plugins.md    | 209 ++++++++++++++++++
 2 files changed, 213 insertions(+)
 create mode 100644 content/pt/docs/concepts/extend-kubernetes/compute-storage-net/_index.md
 create mode 100644 content/pt/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md

diff --git a/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/_index.md b/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/_index.md
new file mode 100644
index 0000000000..6b6090a666
--- /dev/null
+++ b/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/_index.md
@@ -0,0 +1,4 @@
+---
+title: Extensões de Computação, armazenamento e redes
+weight: 30
+---
diff --git a/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md b/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
new file mode 100644
index 0000000000..3d61ab72cc
--- /dev/null
+++ b/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
@@ -0,0 +1,209 @@
+---
+title: Plugins de rede
+content_type: concept
+weight: 10
+---
+
+
+<!-- overview -->
+Plugins de redes no Kubernetes podem ser dos seguintes tipos:
+
+* Plugins CNI: Aderentes à especificação [Container Network Interface](https://github.com/containernetworking/cni) (CNI), desenhados para interoperabilidade.
+  * Kubernetes usa a versão [v0.4.0](https://github.com/containernetworking/cni/blob/spec-v0.4.0/SPEC.md) da especificação CNI.
+* Plugin kubenet: Implementa o `cbr0` básico usando os plugins CNI `bridge` e `host-local`
+
+<!-- body -->
+
+## Instalação
+
+O kubelet possui um plugin único padrão, e um plugin padrão comum para todo o cluster. 
+Ele verifica o plugin quando inicia, se lembra o que encontrou, e executa o plugin selecionado
+em momentos oportunos dentro do ciclo de vida de um Pod (isso é verdadeiro apenas com o Docker, 
+uma vez que o CRI gerencia seus próprios plugins de CNI). Existem dois parâmetros de linha de comando
+no Kubelet para se ter em mente quando usando plugins:
+
+* `cni-bin-dir`: O Kubelet verifica esse diretório por plugins na inicialização
+* `network-plugin`: O plugin de rede que deve ser utilizado do diretório configurado em
+`cni-bin-dir`. Deve ser igual ao nome configurado por um plugin no diretório de plugins. 
+Para plugins de CNI, isso equivale ao valor `cni`.
+
+## Requisitos de plugins de Rede
+
+Além de prover a [interface `NetworkPlugin`](https://github.com/kubernetes/kubernetes/tree/{{< param "fullversion" >}}/pkg/kubelet/dockershim/network/plugins.go)
+para configuração da rede do pod, o plugin pode necessitar de suporte específico ao 
+kube-proxy.
+O proxy iptables obviamente depende do iptables, e o plugin deve garantir que o 
+tráfego do contêiner esteja disponível para o iptables. Por exemplo, se o plugin 
+conecta os contêineres à _Linux bridge_, o plugin deve configurar a diretiva de 
+_sysctl_ `net/bridge/bridge-nf-call-iptables` com o valor `1` para garantir que o 
+proxy iptables opere normalmente. Se o plugin não faz uso da _Linux Bridge_ (mas outro 
+mecanismo, como Open vSwitch) ele deve garantir que o tráfego do contêiner é roteado
+apropriadamente para o proxy.
+
+Por padrão, se nenhum plugin de rede é configurado no kubelet, o plugin `noop` é utilizado,
+que configura `net/bridge/bridge-nf-call-iptables=1` para garantir que configurações simples 
+(como Docker com _bridge Linux_) operem corretamente com o proxy iptables.
+
+### CNI
+
+O plugin de CNI é selecionado utilizando-se da opção `--network-plugin=cni` no início do Kubeket.
+O Kubelet lê um arquivo do diretório especificado em `--cni-conf-dir` (padrão `/etc/cni/net.d`) 
+e usa a configuração de CNI desse arquivo para configurar a rede de cada Pod. O arquivo de 
+configuração do CNI deve usar a [especificação de CNI](https://github.com/containernetworking/cni/blob/master/SPEC.md#network-configuration), 
+e qualquer plugin referenciado nesse arquivo deve estar presente no diretório 
+`--cni-bin-dir` (padrão `/opt/cni/bin`).
+
+Se existirem múltiplos arquivos de configuração no diretório, o kubelet usa o arquivo de 
+configuração que vier primeiro pelo nome, em ordem alfabética.
+
+Adicionalmente ao plugin de CNI especificado no arquivo de configuração, o Kubernetes requer 
+o plugin CNI padrão [`lo`](https://github.com/containernetworking/plugins/blob/master/plugins/main/loopback/loopback.go) ao menos na versão 0.2.0.
+
+#### Suporte a hostPort
+
+O plugin de redes CNI suporta `hostPort`. Você pode utilizar o plugin oficial
+[portmap](https://github.com/containernetworking/plugins/tree/master/plugins/meta/portmap)
+ou usar seu próprio plugin com a funcionalidade de _portMapping_.
+
+Caso você deseje habilitar o suporte a `hostPort`, você deve especificar 
+`portMappings capability` no seu `cni-conf-dir`.
+Por exemplo:
+
+```json
+{
+  "name": "k8s-pod-network",
+  "cniVersion": "0.3.0",
+  "plugins": [
+    {
+      "type": "calico",
+      "log_level": "info",
+      "datastore_type": "kubernetes",
+      "nodename": "127.0.0.1",
+      "ipam": {
+        "type": "host-local",
+        "subnet": "usePodCidr"
+      },
+      "policy": {
+        "type": "k8s"
+      },
+      "kubernetes": {
+        "kubeconfig": "/etc/cni/net.d/calico-kubeconfig"
+      }
+    },
+    {
+      "type": "portmap",
+      "capabilities": {"portMappings": true}
+    }
+  ]
+}
+```
+
+#### Suporte a controle de banda
+
+**Funcionalidade experimental**
+
+O plugin de rede CNI também suporta o controle de banda de entrada e saída.
+Você pode utilizar o plugin oficial [bandwidth](https://github.com/containernetworking/plugins/tree/master/plugins/meta/bandwidth) 
+desenvolvido ou usar seu próprio plugin de controle de banda.
+
+Se você habilitar o suporte ao controle de banda, você deve adicionar o plugin `bandwidth`
+no seu arquivo de configuração de CNI (padrão `/etc/cni/net.d`) e garantir que o programa
+exista no diretório de binários do CNI (padrão `/opt/cni/bin`).
+
+```json
+{
+  "name": "k8s-pod-network",
+  "cniVersion": "0.3.0",
+  "plugins": [
+    {
+      "type": "calico",
+      "log_level": "info",
+      "datastore_type": "kubernetes",
+      "nodename": "127.0.0.1",
+      "ipam": {
+        "type": "host-local",
+        "subnet": "usePodCidr"
+      },
+      "policy": {
+        "type": "k8s"
+      },
+      "kubernetes": {
+        "kubeconfig": "/etc/cni/net.d/calico-kubeconfig"
+      }
+    },
+    {
+      "type": "bandwidth",
+      "capabilities": {"bandwidth": true}
+    }
+  ]
+}
+```
+
+Agora você pode adicionar as anotações `kubernetes.io/ingress-bandwidth` e
+`kubernetes.io/egress-bandwidth` em seu pod.
+Por exemplo:
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  annotations:
+    kubernetes.io/ingress-bandwidth: 1M
+    kubernetes.io/egress-bandwidth: 1M
+...
+```
+
+### kubenet
+
+Kubenet é um plugin de rede muito simples, existente apenas no Linux. Ele não 
+implementa funcionalidades mais avançadas, como rede entre nós ou políticas de rede.
+Ele é geralmente utilizado junto a um provedor de nuvem que configura as regras de 
+roteamento para comunicação entre os nós, ou em ambientes com apenas um nó.
+
+O Kubenet cria uma _interface bridge_ no Linux chamada `cbr0` e cria um par _veth_ 
+para cada um dos pods com o host como a outra ponta desse par, conectado à `cbr0`.
+Na interface no lado do Pod um endereço IP é alocado de uma faixa associada ao nó, 
+sendo parte de alguma configuração no nó ou pelo controller-manager. Na interface `cbr0`
+é associado o MTU equivalente ao menor MTU de uma interface de rede do host.
+
+Esse plugin possui alguns requisitos:
+
+* Os plugins CNI padrão `bridge`, `lo` e `host-local` são obrigatórios, ao menos na 
+versão 0.2.0. O Kubenet buscará inicialmente esses plugins no diretório `/opt/cni/bin`. 
+Especifique a opção `cni-bin-dir` no kubelet para fornecer um diretório adicional 
+de busca. O primeiro local equivalente será o utilizado.
+* O kubelet deve ser executado com a opção `--network-plugin=kubenet` para habilitar esse plugin.
+* O Kubelet deve ainda ser executado com a opção `--non-masquerade-cidr=<clusterCidr>` para
+garantir que o tráfego de IPs para fora dessa faixa seja mascarado.
+* O nó deve possuir uma subrede associada, através da opção `--pod-cidr` configurada 
+na inicialização do kubelet, ou as opções `--allocate-node-cidrs=true --cluster-cidr=<cidr>`
+utilizadas na inicialização do _controller-manager_.
+
+### Customizando o MTU (com kubenet)
+
+O MTU deve sempre ser configurado corretamente para obter-se a melhor performance de 
+rede. Os plugins de rede geralmente tentam detectar uma configuração correta de MTU, 
+porém algumas vezes a lógica não irá resultar em uma configuração adequada. Por exemplo,
+se a _Docker bridge_ ou alguma outra interface possuir um MTU pequeno, o kubenet irá 
+selecionar aquela MTU. Ou caso você esteja utilizando encapsulamento IPSEC, o MTU deve 
+ser reduzido, e esse cálculo não faz parte do escopo da maioria dos plugins de rede.
+
+Sempre que necessário, você pode configurar explicitamente o MTU com a opção `network-plugin-mtu`
+no kubelet. Por exemplo, na AWS o MTU da `eth0` geralmente é 9001 então você deve 
+especificar `--network-plugin-mtu=9001`. Se você estiver usando IPSEC você deve reduzir
+o MTU para permitir o encapsulamento excedente; por exemplo: `--network-plugin-mtu=8773`.
+
+Essa opção faz parte do plugin de rede. Atualmente **apenas o kubenet suporta a configuração
+`network-plugin-mtu`**.
+
+## Resumo de uso
+
+* `--network-plugin=cni` especifica que devemos usar o plugin de redes `cni` com os 
+binários do plugin localizados em `--cni-bin-dir` (padrão `/opt/cni/bin`) e as 
+configurações do plugin localizadas em `--cni-conf-dir` (default `/etc/cni/net.d`).
+* `--network-plugin=kubenet` especifica que iremos usar o plugin de rede `kubenet` 
+com os plugins CNI `bridge`, `lo` e `host-local` localizados em `/opt/cni/bin` ou `cni-bin-dir`.
+* `--network-plugin-mtu=9001` especifica o MTU a ser utilizado, atualmente apenas em uso 
+pelo plugin de rede `kubenet`
+
+## {{% heading "whatsnext" %}}

From 66206ab1415fc76e03371aa434e3b8537ba41eac Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Tue, 30 Mar 2021 00:38:49 +0300
Subject: [PATCH 377/788] [zh] fix: errors in base64 and sed commands

---
 .../tls/manual-rotation-of-ca-certificates.md | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md b/content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md
index ca9601eeb3..87e9b5eb64 100644
--- a/content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md
+++ b/content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md
@@ -98,12 +98,12 @@ Configurations with a single API server will experience unavailability while the
    也会获得此更新并且同时信任老的和新的 CA 证书。
    <!--
    ```shell
-   base64_encoded_ca="$(base64 <path to file containing both old and new CAs>)"
+   base64_encoded_ca="$(base64 -w0 <path to file containing both old and new CAs>)"
 
    for namespace in $(kubectl get ns --no-headers | awk '{print $1}'); do
        for token in $(kubectl get secrets --namespace "$namespace" --field-selector type=kubernetes.io/service-account-token -o name); do
            kubectl get $token --namespace "$namespace" -o yaml | \
-             /bin/sed "s/\(ca.crt:\).*/\1 ${base64_encoded_ca}" | \
+             /bin/sed "s/\(ca.crt:\).*/\1 ${base64_encoded_ca}/" | \
              kubectl apply -f -
        done
    done
@@ -111,12 +111,12 @@ Configurations with a single API server will experience unavailability while the
    -->
 
    ```shell
-   base64_encoded_ca="$(base64 <path to file containing both old and new CAs>)"
+   base64_encoded_ca="$(base64 -w0 <path to file containing both old and new CAs>)"
 
    for namespace in $(kubectl get ns --no-headers | awk '{print $1}'); do
        for token in $(kubectl get secrets --namespace "$namespace" --field-selector type=kubernetes.io/service-account-token -o name); do
            kubectl get $token --namespace "$namespace" -o yaml | \
-             /bin/sed "s/\(ca.crt:\).*/\1 ${base64_encoded_ca}" | \
+             /bin/sed "s/\(ca.crt:\).*/\1 ${base64_encoded_ca}/" | \
              kubectl apply -f -
        done
    done
@@ -205,13 +205,13 @@ Configurations with a single API server will experience unavailability while the
 
       <!--
       To generate certificates and private keys for your cluster using the `openssl`
-      command line tool, see [Certificates (`openssl`)](/docs/concepts/cluster-administration/certificates/#openssl).
-      You can also use [`cfssl`](/docs/concepts/cluster-administration/certificates/#cfssl).
+      command line tool, see [Certificates (`openssl`)](/docs/tasks/administer-cluster/certificates/#openssl).
+      You can also use [`cfssl`](/docs/tasks/administer-cluster/certificates/#cfssl).
       -->
       {{< note >}}
       要使用 `openssl` 命令行为集群生成新的证书和私钥，可参阅
-      [证书（`openssl`）](/zh/docs/concepts/cluster-administration/certificates/#openssl)。
-      你也可以使用[`cfssl`](/zh/docs/concepts/cluster-administration/certificates/#cfssl).
+      [证书（`openssl`）](/zh/docs/tasks/administer-cluster/certificates/#openssl)。
+      你也可以使用[`cfssl`](/zh/docs/tasks/administer-cluster/certificates/#cfssl).
       {{< /note >}}
 
    <!--
@@ -249,10 +249,10 @@ Configurations with a single API server will experience unavailability while the
    ConfigMap `cluster-info`，使之包含新的 CA 证书。
 
    ```shell
-   base64_encoded_ca="$(base64 /etc/kubernetes/pki/ca.crt)"
+   base64_encoded_ca="$(base64 -w0 /etc/kubernetes/pki/ca.crt)"
 
    kubectl get cm/cluster-info --namespace kube-public -o yaml | \
-       /bin/sed "s/\(certificate-authority-data:\).*/\1 ${base64_encoded_ca}" | \
+       /bin/sed "s/\(certificate-authority-data:\).*/\1 ${base64_encoded_ca}/" | \
        kubectl apply -f -
    ```
 <!--

From 1cf3ed6403283f1dc48987c00a32082078343a30 Mon Sep 17 00:00:00 2001
From: huangshanhui <1137852140@qq.com>
Date: Tue, 30 Mar 2021 10:10:26 +0800
Subject: [PATCH 378/788] Update kms-provider.md

fix the translation of "cloud provider"
---
 content/zh/docs/tasks/administer-cluster/kms-provider.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/kms-provider.md b/content/zh/docs/tasks/administer-cluster/kms-provider.md
index 0c103543a0..e18e174fc2 100644
--- a/content/zh/docs/tasks/administer-cluster/kms-provider.md
+++ b/content/zh/docs/tasks/administer-cluster/kms-provider.md
@@ -79,7 +79,7 @@ Refer to your cloud provider for instructions on enabling the cloud provider-spe
 -->
 ### 启用由云服务驱动支持的 KMS
 
-有关启用云服务驱动特定的 KMS 插件的说明，请咨询你的云服务驱动。
+有关启用云服务驱动特定的 KMS 插件的说明，请咨询你的云服务驱动商。
 
 <!--
 ### Developing a KMS plugin gRPC server

From d341b96fb3a6e459a3d97870e5152003e8709f91 Mon Sep 17 00:00:00 2001
From: Morten Torkildsen <mortent@google.com>
Date: Thu, 18 Mar 2021 14:50:56 -0700
Subject: [PATCH 379/788] Promote Pod Disruption Budgets to GA

---
 .../docs/concepts/workloads/pods/disruptions.md   |  2 +-
 .../command-line-tools-reference/feature-gates.md |  5 +++--
 .../docs/tasks/run-application/configure-pdb.md   | 15 +++++++++------
 .../examples/application/zookeeper/zookeeper.yaml |  2 +-
 ...eper-pod-disruption-budget-maxunavailable.yaml |  2 +-
 ...keeper-pod-disruption-budget-minavailable.yaml |  2 +-
 6 files changed, 16 insertions(+), 12 deletions(-)

diff --git a/content/en/docs/concepts/workloads/pods/disruptions.md b/content/en/docs/concepts/workloads/pods/disruptions.md
index d0a8bbf5a9..c791ed42f3 100644
--- a/content/en/docs/concepts/workloads/pods/disruptions.md
+++ b/content/en/docs/concepts/workloads/pods/disruptions.md
@@ -90,7 +90,7 @@ disruptions, if any, to expect.
 
 ## Pod disruption budgets
 
-{{< feature-state for_k8s_version="v1.5" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 Kubernetes offers features to help you run highly available applications even when you
 introduce frequent voluntary disruptions.
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index a55daa71aa..cf03d2212f 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -145,8 +145,6 @@ different Kubernetes components.
 | `NonPreemptingPriority` | `false` | Alpha | 1.15 | 1.18 |
 | `NonPreemptingPriority` | `true` | Beta | 1.19 | |
 | `PodDeletionCost` | `false` | Alpha | 1.21 | |
-| `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 |
-| `PodDisruptionBudget` | `true` | Beta | 1.5 | |
 | `PodAffinityNamespaceSelector` | `false` | Alpha | 1.21 | |
 | `PodOverhead` | `false` | Alpha | 1.16 | 1.17 |
 | `PodOverhead` | `true` | Beta | 1.18 |  |
@@ -299,6 +297,9 @@ different Kubernetes components.
 | `PersistentLocalVolumes` | `false` | Alpha | 1.7 | 1.9 |
 | `PersistentLocalVolumes` | `true` | Beta | 1.10 | 1.13 |
 | `PersistentLocalVolumes` | `true` | GA | 1.14 | - |
+| `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 |
+| `PodDisruptionBudget` | `true` | Beta | 1.5 | 1.20 |
+| `PodDisruptionBudget` | `true` | GA | 1.21 | - |
 | `PodPriority` | `false` | Alpha | 1.8 | 1.10 |
 | `PodPriority` | `true` | Beta | 1.11 | 1.13 |
 | `PodPriority` | `true` | GA | 1.14 | - |
diff --git a/content/en/docs/tasks/run-application/configure-pdb.md b/content/en/docs/tasks/run-application/configure-pdb.md
index 3823cac4ee..3110c2f807 100644
--- a/content/en/docs/tasks/run-application/configure-pdb.md
+++ b/content/en/docs/tasks/run-application/configure-pdb.md
@@ -2,11 +2,12 @@
 title: Specifying a Disruption Budget for your Application
 content_type: task
 weight: 110
+min-kubernetes-server-version: v1.21
 ---
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.5" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 This page shows how to limit the number of concurrent disruptions
 that your application experiences, allowing for higher availability
@@ -17,6 +18,8 @@ nodes.
 
 ## {{% heading "prerequisites" %}}
 
+{{< version-check >}}
+
 * You are the owner of an application running on a Kubernetes cluster that requires
   high availability.
 * You should know how to deploy [Replicated Stateless Applications](/docs/tasks/run-application/run-stateless-application-deployment/)
@@ -112,9 +115,9 @@ of the number of pods from that set that can be unavailable after the eviction.
 It can be either an absolute number or a percentage.
 
 {{< note >}}
-For versions 1.8 and earlier: When creating a `PodDisruptionBudget`
-object using the `kubectl` command line tool, the `minAvailable` field has a
-default value of 1 if neither `minAvailable` nor `maxUnavailable` is specified.
+The behavior for an empty selector differs between the policy/v1beta1 and policy/v1 APIs for
+PodDisruptionBudgets. For policy/v1beta1 an empty selector matches zero pods, while
+for policy/v1 an empty selector matches every pod in the namespace.
 {{< /note >}}
 
 You can specify only one of `maxUnavailable` and `minAvailable` in a single `PodDisruptionBudget`. 
@@ -160,7 +163,7 @@ Example PDB Using minAvailable:
 
 {{< codenew file="policy/zookeeper-pod-disruption-budget-minavailable.yaml" >}}
 
-Example PDB Using maxUnavailable (Kubernetes 1.7 or higher):
+Example PDB Using maxUnavailable:
 
 {{< codenew file="policy/zookeeper-pod-disruption-budget-maxunavailable.yaml" >}}
 
@@ -206,7 +209,7 @@ You can get more information about the status of a PDB with this command:
 kubectl get poddisruptionbudgets zk-pdb -o yaml
 ```
 ```yaml
-apiVersion: policy/v1beta1
+apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:
   annotations:
diff --git a/content/en/examples/application/zookeeper/zookeeper.yaml b/content/en/examples/application/zookeeper/zookeeper.yaml
index a858a72613..4d893b369b 100644
--- a/content/en/examples/application/zookeeper/zookeeper.yaml
+++ b/content/en/examples/application/zookeeper/zookeeper.yaml
@@ -27,7 +27,7 @@ spec:
   selector:
     app: zk
 ---
-apiVersion: policy/v1beta1
+apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:
   name: zk-pdb
diff --git a/content/en/examples/policy/zookeeper-pod-disruption-budget-maxunavailable.yaml b/content/en/examples/policy/zookeeper-pod-disruption-budget-maxunavailable.yaml
index a62bef140f..ef0b8645ba 100644
--- a/content/en/examples/policy/zookeeper-pod-disruption-budget-maxunavailable.yaml
+++ b/content/en/examples/policy/zookeeper-pod-disruption-budget-maxunavailable.yaml
@@ -1,4 +1,4 @@
-apiVersion: policy/v1beta1
+apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:
   name: zk-pdb
diff --git a/content/en/examples/policy/zookeeper-pod-disruption-budget-minavailable.yaml b/content/en/examples/policy/zookeeper-pod-disruption-budget-minavailable.yaml
index c4776ad4c0..49a66ee669 100644
--- a/content/en/examples/policy/zookeeper-pod-disruption-budget-minavailable.yaml
+++ b/content/en/examples/policy/zookeeper-pod-disruption-budget-minavailable.yaml
@@ -1,4 +1,4 @@
-apiVersion: policy/v1beta1
+apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:
   name: zk-pdb

From 557a69e9597d86ca1ae06125a89ebe6d656c66f9 Mon Sep 17 00:00:00 2001
From: KLH <ling_hang@163.com>
Date: Tue, 30 Mar 2021 11:21:21 +0800
Subject: [PATCH 380/788] Update content/zh/docs/concepts/workloads/_index.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 content/zh/docs/concepts/workloads/_index.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/_index.md b/content/zh/docs/concepts/workloads/_index.md
index 7130758cd3..a61176f660 100644
--- a/content/zh/docs/concepts/workloads/_index.md
+++ b/content/zh/docs/concepts/workloads/_index.md
@@ -38,7 +38,7 @@ all the pods on that node fail. Kubernetes treats that level of failure as final
 would need to create a new `Pod` to recover, even if the node later becomes healthy.
 -->
 Kubernetes Pods 有[确定的生命周期](/zh/docs/concepts/workloads/pods/pod-lifecycle/)。
-例如，当某 Pod 在你的集群中运行，Pod 运行所在的
+例如，当某 Pod 在你的集群中运行时，Pod 运行所在的
 {{< glossary_tooltip text="节点" term_id="node" >}} 出现致命错误时，
 所有该节点上的 Pods 都会失败。Kubernetes 将这类失败视为最终状态：
 即使该节点后来恢复正常运行，你也需要创建新的 Pod 来恢复应用。
@@ -172,4 +172,3 @@ using an [`Ingress`](/docs/concepts/services-networking/ingress).
 [`Service`](/zh/docs/concepts/services-networking/service/)
 的形式使之可在互联网上访问；或者对于 Web 应用而言，使用
 [`Ingress`](/zh/docs/concepts/services-networking/ingress) 资源将其暴露到互联网上。
-

From 68032faaccbbcf23870e941924cae22fc85c203f Mon Sep 17 00:00:00 2001
From: KLH <ling_hang@163.com>
Date: Tue, 30 Mar 2021 11:57:56 +0800
Subject: [PATCH 381/788] [zh] modify: zh/docs/concepts/workloads/_index.md
 (#27308)

* fix a word translation

* Update content/zh/docs/concepts/workloads/_index.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 content/zh/docs/concepts/workloads/_index.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/_index.md b/content/zh/docs/concepts/workloads/_index.md
index 743d452d99..a61176f660 100644
--- a/content/zh/docs/concepts/workloads/_index.md
+++ b/content/zh/docs/concepts/workloads/_index.md
@@ -38,7 +38,7 @@ all the pods on that node fail. Kubernetes treats that level of failure as final
 would need to create a new `Pod` to recover, even if the node later becomes healthy.
 -->
 Kubernetes Pods 有[确定的生命周期](/zh/docs/concepts/workloads/pods/pod-lifecycle/)。
-例如，一旦某 Pod 在你的集群中运行，Pod 运行所在的
+例如，当某 Pod 在你的集群中运行时，Pod 运行所在的
 {{< glossary_tooltip text="节点" term_id="node" >}} 出现致命错误时，
 所有该节点上的 Pods 都会失败。Kubernetes 将这类失败视为最终状态：
 即使该节点后来恢复正常运行，你也需要创建新的 Pod 来恢复应用。
@@ -172,4 +172,3 @@ using an [`Ingress`](/docs/concepts/services-networking/ingress).
 [`Service`](/zh/docs/concepts/services-networking/service/)
 的形式使之可在互联网上访问；或者对于 Web 应用而言，使用
 [`Ingress`](/zh/docs/concepts/services-networking/ingress) 资源将其暴露到互联网上。
-

From cbff017b691c6f1bc4bffa3775c2d22009c3ecfb Mon Sep 17 00:00:00 2001
From: konglinghang <konglinghang@inspur.com>
Date: Tue, 30 Mar 2021 14:14:36 +0800
Subject: [PATCH 382/788] fix a word translation

---
 content/zh/docs/concepts/workloads/pods/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/workloads/pods/_index.md b/content/zh/docs/concepts/workloads/pods/_index.md
index 57b933b9e8..422ee139c2 100644
--- a/content/zh/docs/concepts/workloads/pods/_index.md
+++ b/content/zh/docs/concepts/workloads/pods/_index.md
@@ -54,7 +54,7 @@ for debugging if your cluster offers this.
 除了应用容器，Pod 还可以包含在 Pod 启动期间运行的
 [Init 容器](/zh/docs/concepts/workloads/pods/init-containers/)。
 你也可以在集群中支持[临时性容器](/zh/docs/concepts/workloads/pods/ephemeral-containers/)
-的情况外，为调试的目的注入临时性容器。
+的情况下，为调试的目的注入临时性容器。
 
 <!-- body -->
 

From 8995eaa2484277e269382487fbf1fc416118c431 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Tue, 30 Mar 2021 00:18:42 -0700
Subject: [PATCH 383/788] Correct typo in page create-cluster-kubeadm.md

---
 .../tools/kubeadm/create-cluster-kubeadm.md                     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index c6619d0034..eabdd1bc1f 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -128,7 +128,7 @@ Any commands under `kubeadm alpha` are, by definition, supported on an alpha lev
 <!--
 ### Installing kubeadm on your hosts
 -->
-### 在你的主机上安装安装 kubeadm
+### 在你的主机上安装 kubeadm
 
 <!--
 See ["Installing kubeadm"](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/).

From b6d0d5111150a4fd528d67c7b55591f7da2d58c4 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Tue, 30 Mar 2021 17:13:37 +0900
Subject: [PATCH 384/788] [zh] Fix custom heading ID

---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/zh/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 1fd811f789..2af5662965 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -269,7 +269,7 @@ to do so are available at [Install Docker Engine - Enterprise on Windows Servers
 All code snippets in Windows sections are to be run in a PowerShell environment
 with elevated permissions (Administrator) on the Windows worker node.
 -->
-### 加入 Windows 工作节点   {joining-a-windows-worker-node}
+### 加入 Windows 工作节点   {#joining-a-windows-worker-node}
 
 你必须安装 `Containers` 功能特性并安装 Docker 工具。相关的指令可以在
 [Install Docker Engine - Enterprise on Windows Servers](https://hub.docker.com/editions/enterprise/docker-ee-server-windows)

From d39d4b4bf7100d3510dae5d365077d2a4fa7d818 Mon Sep 17 00:00:00 2001
From: Shubham Kuchhal <shubham.kuchhal@india.nec.com>
Date: Tue, 30 Mar 2021 17:03:10 +0530
Subject: [PATCH 385/788] Corrected the description in 'Restrict a Container's
 Access to Resources with AppArmor'

---
 content/en/docs/tutorials/clusters/apparmor.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/clusters/apparmor.md b/content/en/docs/tutorials/clusters/apparmor.md
index b220647e62..32f25ba483 100644
--- a/content/en/docs/tutorials/clusters/apparmor.md
+++ b/content/en/docs/tutorials/clusters/apparmor.md
@@ -322,7 +322,7 @@ Events:
   23s          23s         1        {kubelet e2e-test-stclair-node-pool-t1f5}             Warning        AppArmor    Cannot enforce AppArmor: profile "k8s-apparmor-example-allow-write" is not loaded
 ```
 
-Note the pod status is Failed, with a helpful error message: `Pod Cannot enforce AppArmor: profile
+Note the pod status is Pending, with a helpful error message: `Pod Cannot enforce AppArmor: profile
 "k8s-apparmor-example-allow-write" is not loaded`. An event was also recorded with the same message.
 
 ## Administration

From a8adf49a78d31674285f5812ae75b0b58b05324d Mon Sep 17 00:00:00 2001
From: Zoltan Vajda <vzvzvz2@gmail.com>
Date: Tue, 30 Mar 2021 14:24:34 +0200
Subject: [PATCH 386/788] Fix typo in worker.py example script

---
 content/en/examples/application/job/redis/worker.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/examples/application/job/redis/worker.py b/content/en/examples/application/job/redis/worker.py
index b8abbee917..c3523a4e21 100644
--- a/content/en/examples/application/job/redis/worker.py
+++ b/content/en/examples/application/job/redis/worker.py
@@ -8,7 +8,7 @@ host="redis"
 # import os
 # host = os.getenv("REDIS_SERVICE_HOST")
 
-q = rediswq.RedisWQ(name="job2", host="redis")
+q = rediswq.RedisWQ(name="job2", host=host)
 print("Worker with sessionID: " +  q.sessionID())
 print("Initial queue state: empty=" + str(q.empty()))
 while not q.empty():

From f3e31e4ce9f3170fc03cd73ce18cf2ddc966e37b Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Tue, 30 Mar 2021 06:36:33 -0700
Subject: [PATCH 387/788] Correct translation connect-applications-service.md

---
 .../connect-applications-service.md                    | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/zh/docs/concepts/services-networking/connect-applications-service.md b/content/zh/docs/concepts/services-networking/connect-applications-service.md
index 2476d56f73..e75422a41b 100644
--- a/content/zh/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/zh/docs/concepts/services-networking/connect-applications-service.md
@@ -44,8 +44,8 @@ Create an nginx Pod, and note that it has a container port specification:
 -->
 ## 在集群中暴露 Pod
 
-我们在之前的示例中已经做过，然而再让我重试一次，这次聚焦在网络连接的视角。
-创建一个 Nginx Pod，指示它具有一个容器端口的说明：
+我们在之前的示例中已经做过，然而让我们以网络连接的视角再重做一遍。
+创建一个 Nginx Pod，并且注意，它有一个容器端口的规范：
 
 {{< codenew file="service/networking/run-my-nginx.yaml" >}}
 
@@ -314,9 +314,9 @@ The rest of this section will assume you have a Service with a long lived IP
 本段剩余的内容，将假设已经有一个 Service，它具有一个长久存在的 IP（my-nginx），
 一个为该 IP 指派名称的 DNS 服务器。 这里我们使用 CoreDNS 集群插件（应用名为 `kube-dns`），
 所以可以通过标准做法，使在集群中的任何 Pod 都能与该 Service 通信（例如：`gethostbyname()`）。
-如果 CoreDNS 没有在运行，你可以参照 
-[CoreDNS README](https://github.com/coredns/deployment/tree/master/kubernetes) 或者 
-[安装 CoreDNS](/zh/docs/tasks/administer-cluster/coredns/#installing-coredns) 来启用它。 
+如果 CoreDNS 没有在运行，你可以参照
+[CoreDNS README](https://github.com/coredns/deployment/tree/master/kubernetes) 或者
+[安装 CoreDNS](/zh/docs/tasks/administer-cluster/coredns/#installing-coredns) 来启用它。
 让我们运行另一个 curl 应用来进行测试：
 
 ```shell

From 33a84d66df8ab26f9634e8ec5e40e7c1ec212be5 Mon Sep 17 00:00:00 2001
From: Jose Roberto Almaraz <jralmaraz1@gmail.com>
Date: Wed, 31 Mar 2021 00:51:58 +1100
Subject: [PATCH 388/788] Add
 content/pt/docs/reference/access-authn-authz/authentication.md (#26928)

* Add content/pt/docs/reference/access-authn-authz/authentication.md

* fixing markdown links

* wrong reference for adding bearer token to request

* wrong reference for adding bearer token to request - reviewed

* addressing review items from rikatz

* addressing review items: typos, wrong reference link for webhook authentication, etc

* fixing typos, adding placeholders for glossary terms

* Fixing glossary reference and adding glossary content

* 2 more reviewed items

* plural for transparentes

* fixing wrong glossary term_id for common-name, using tls-common-name instead

* fixing webhook and proxy authentication links

* fixing wrong gramatic on groups description

* review items on multiple syntax and context/meaning errors
---
 .../access-authn-authz/authentication.md      | 888 ++++++++++++++++++
 .../glossary/alternate-x509-schemes.md        |  27 +
 .../pt/docs/reference/glossary/kerberos.md    |  27 +
 .../pt/docs/reference/glossary/keystone.md    |  16 +
 content/pt/docs/reference/glossary/ldap.md    |  28 +
 content/pt/docs/reference/glossary/saml.md    |  36 +
 .../reference/glossary/tls-common-name.md     |  18 +
 content/pt/docs/reference/glossary/uid.md     |  13 +
 .../pt/docs/reference/glossary/username.md    |  16 +
 9 files changed, 1069 insertions(+)
 create mode 100644 content/pt/docs/reference/access-authn-authz/authentication.md
 create mode 100644 content/pt/docs/reference/glossary/alternate-x509-schemes.md
 create mode 100644 content/pt/docs/reference/glossary/kerberos.md
 create mode 100644 content/pt/docs/reference/glossary/keystone.md
 create mode 100644 content/pt/docs/reference/glossary/ldap.md
 create mode 100644 content/pt/docs/reference/glossary/saml.md
 create mode 100644 content/pt/docs/reference/glossary/tls-common-name.md
 create mode 100644 content/pt/docs/reference/glossary/uid.md
 create mode 100644 content/pt/docs/reference/glossary/username.md

diff --git a/content/pt/docs/reference/access-authn-authz/authentication.md b/content/pt/docs/reference/access-authn-authz/authentication.md
new file mode 100644
index 0000000000..7882b4974d
--- /dev/null
+++ b/content/pt/docs/reference/access-authn-authz/authentication.md
@@ -0,0 +1,888 @@
+---
+title: Autenticação
+content_type: concept
+weight: 10
+---
+ 
+<!-- overview -->
+Essa página demonstra uma visão geral sobre autenticação
+ 
+<!-- body -->
+## Usuários no Kubernetes
+ 
+Todos os clusters Kubernetes possuem duas categorias de usuários: contas de serviço gerenciadas pelo Kubernetes e usuários normais.
+ 
+Assume-se que um serviço independente do cluster gerencia usuários normais das seguintes formas:
+ 
+- Um administrador distribuindo chaves privadas
+- Uma base de usuários como Keystone {{< glossary_definition term_id="keystone" length="all" >}} ou Google Accounts
+- Um arquivo com uma lista de nomes de usuários e senhas
+ 
+Neste quesito, _Kubernetes não possui objetos que possam representar as contas de um usuário normal._ Usuários normais não podem ser adicionados ao _cluster_ através de uma chamada para a API.
+ 
+Apesar de um usuário normal não poder ser adicionado através de uma chamada para a API, qualquer usuário que apresente um certificado válido e assinado pela autoridade de certificados (CA) do _cluster_ é considerado autenticado. Nesta configuração, Kubernetes determina o nome do usuário baseado no campo de nome comum no sujeito (_subject_) do certificado (por exemplo: "/CN=bob"). A partir daí, o subsistema de controle de acesso baseado em função (RBAC) determina se o usuário é autorizado a realizar uma operação específica sobre o recurso. Para mais detalhes, veja a referência sobre o tópico de usuários normais dentro de [requisição de certificado](/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user).
+ 
+Em contraste a usuários normais, contas de serviço são considerados usuários gerenciados pela API do Kubernetes. Elas estão vinculadas à _namespaces_ específicas e criadas automaticamente pelo servidor de API ou manualmente através de chamadas da API. Contas de serviço estão ligadas a um conjunto de credenciais armazenados como `Secrets`, aos quais são montados dentro dos _pods_ assim permitindo que processos internos ao _cluster_  comuniquem-se com a API do Kubernetes.
+ 
+Requisições para a API estão ligadas a um usuário normal, conta de serviço ou serão tratadas como [requisições anônimas](#anonymous-requests). Isto significa que cada processo dentro ou fora do _cluster_, desde um usuário humano utilizando o `kubectl` de uma estação de trabalho, a `kubelets` rodando nos nós, a membros da camada de gerenciamento (s/painel de controle) devem autenticar-se ao realizarem suas requisições para o servidor API ou serão tratados como usuário anônimo.
+ 
+## Estratégias de autenticação
+ 
+Kubernetes usa certificados de clientes, _bearer Token_, um proxy realizando autenticação, ou uma autenticação básica HTTP para autenticar requisições para o servidor de API através de plugins. Como requisições HTTP são feitas no servidor de API, plugins tentam associar os seguintes atributos junto a requisição:
+ 
+* Username {{< glossary_definition term_id="username" length="all" >}}: um valor (String) que identifica o usuário final. Valores comuns podem ser `kube-admin` ou `jane@example.com`
+* UID {{< glossary_definition term_id="uid" length="all" >}}: um valor (String) que identifica o usuário final e tenta ser mais consistente e único do que username.
+* Groups: Um conjunto de valores em que cada item indica a associação de um usuário à uma coleção lógica de usuários. Valores comuns podem ser `system:masters` ou `devops-team`.
+* Campos extras: um mapa que pode conter uma lista de atributos que armazena informações adicionais em que autorizadores podem achar útil.
+ 
+Todos os valores são transparentes para o sistema de autenticação e somente trazem significado quando interpretados por um [autorizador](/docs/reference/access-authn-authz/authorization/).
+ 
+É possível habilitar múltiplos métodos de autenticação. Deve-se normalmente usar pelo menos dois métodos:
+ 
+- _Tokens_ para contas de serviço;
+- Pelo menos um outro método de autenticação para usuários.
+ 
+Quando múltiplos módulos de autenticação estão habilitados, o primeiro módulo a autenticar com sucesso uma requisição termina, o fluxo de avaliação da mesma.
+ 
+O servidor de API não garante a ordem em que os autenticadores são processados.
+ 
+O grupo `system:authenticated` é incluído na lista de grupos de todos os usuários autenticados.
+ 
+Integrações com outros protocolos de autenticação, como LDAP {{< glossary_definition term_id="ldap" length="all" >}}, SAML {{< glossary_definition term_id="saml" length="all" >}}, Kerberos {{< glossary_definition term_id="kerberos" length="all" >}}, alternate x509 schemes {{< glossary_definition term_id="alternate-x509-schemes" length="all" >}}, etc, podem ser alcançadas utilizando-se de um [proxy](#autenticando-com-proxy) ou [webhook](#token-de-autenticação-via-webhook) de autenticação.
+ 
+### Certificados de cliente X509
+ 
+Autenticação via certificados de cliente pode ser habilitada ao passar a opção `--client-ca-file=ARQUIVO` para o servidor de API. O arquivo referenciado deve conter um ou mais autoridades de certificação usadas para validar o certificado de cliente passado para o servidor de API. Se o certificado de cliente é apresentado e verificado, o _common name_ {{< glossary_definition term_id="tls-common-name" length="all" >}} do sujeito é usado como o nome de usuário para a requisição. A partir da versão 1.4, certificados de cliente podem também indicar o pertencimento de um usuário a um grupo utilizando o campo de organização do certificado. Para incluir múltiplos grupos para o usuário, deve-se incluir múltiplos campos de organização no certificado.
+ 
+Por exemplo, utilizando o comando de linha `openssl` para gerar uma requisição de assinatura de certificado:
+ 
+``` bash
+openssl req -new -key jbeda.pem -out jbeda-csr.pem -subj "/CN=jbeda/O=app1/O=app2"
+```
+ 
+Isto criaria um arquivo de tipo CSR (requisição de assinatura de certificado) para o usuário "jbeda" pertencendo a dois grupos: "app1" e "app2".
+ 
+Veja como gerar um certificado de cliente em [Gerenciando Certificados](/docs/concepts/cluster-administration/certificates/)
+ 
+### Arquivo estático de Token
+ 
+O servidor de API lê _bearer tokens_ de um arquivo quando recebe uma requisição contendo a opção `--token-auth-file=ARQUIVO` via linha de comando. Atualmente, tokens têm duração indefinida, e a lista de tokens não pode ser modificada sem reiniciar o servidor de API.
+ 
+O arquivo de token é do tipo CSV contendo no mínimo 3 colunas: token, nome de usuário, identificador de usuário (uid), seguido pelos nomes de grupos (opcional).
+ 
+{{< note >}}
+Se uma entrada possuir mais de um grupo, a coluna deve ser cercada por aspas duplas, por exemplo:
+ 
+```conf
+token,usuario,uid,"grupo1,grupo2,grupo3"
+```
+{{< /note >}}
+ 
+#### Adicionando um _bearer token_ em uma requisição
+ 
+Quando utilizando-se de _bearer token_ para autenticação de um cliente HTTP, o servidor de API espera um cabeçalho `Authorization` com um valor `Bearer TOKEN`. O token deve ser uma sequência de caracteres que pode ser colocada como valor em um cabeçalho HTTP não utilizando-se mais do que as facilidades de codificação e citação de HTTP. Por exemplo, se o valor de um token é `31ada4fd-adec-460c-809a-9e56ceb75269` então iria aparecer dentro de um cabeçalho HTTP como:
+ 
+```http
+Authorization: Bearer 31ada4fd-adec-460c-809a-9e56ceb75269
+```
+### Tokens de inicialização
+ 
+{{< feature-state for_k8s_version="v1.18" state="stable" >}}
+ 
+Para permitir a inicialização simplificada para novos _clusters_, Kubernetes inclui um token dinamicamente gerenciado denominado *Bootstrap Token*. Estes _tokens_ são armazenados como Secrets dentro do namespace `kube-system`, onde eles podem ser dinamicamente criados e gerenciados. O componente Gerenciador de Controle (Controller Manager) possui um controlador "TokenCleaner" que apaga os _tokens_ de inicialização expirados.
+ 
+Os _tokens_ seguem o formato `[a-z0-9]{6}.[a-z0-9]{16}`. O primeiro componente é um identificador do _token_ e o segundo é o segredo. Você pode especificar o _token_ como um cabeçalho HTTP como:
+ 
+```http
+Authorization: Bearer 781292.db7bc3a58fc5f07e
+```
+ 
+Deve-se habilitar os _tokens_ de inicialização com a opção `--enable-bootstrap-token-auth` no servidor de API. Deve-se habilitar o controlador `TokenCleaner` através da opção `--controllers` no Gerenciador de Controle. Isso é feito, por exemplo, como: `--controllers=*,tokencleaner`. O `kubeadm`, por exemplo, irá realizar isso caso seja utilizado para a inicialização do cluster.
+ 
+O autenticador o autentica como `system:bootstrap:<Token ID>` e é incluído no grupo `system:bootstrappers`. O nome e grupo são intencionalmente limitados para desencorajar usuários a usarem estes _tokens_ após inicialização. Os nomes de usuários e grupos podem ser utilizados (e são utilizados pelo `kubeadm`) para elaborar as políticas de autorização para suportar a inicialização de um cluster.
+ 
+Por favor veja [Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-tokens/) para documentação detalhada sobre o autenticador e controladores de _Token_ de inicialização, bem como gerenciar estes _tokens_ com `kubeadm`.
+ 
+### Tokens de Contas de serviço
+ 
+Uma conta de serviço é um autenticador habilitado automaticamente que usa bearer tokens para verificar as requisições. O plugin aceita dois parâmetros opcionais:
+ 
+* `--service-account-key-file` Um arquivo contendo uma chave codificada no formato PEM para assinar _bearer tokens_. Se não especificado, a chave privada de TLS no servidor de API será utilizada
+* `--service-account-lookup` Se habilitado, _tokens_ deletados do servidor de API serão revogados.
+ 
+Contas de serviço são normalmente criadas automaticamente pelo servidor de API e associada a _pods_ rodando no cluster através do controlador de admissão [Admission Controller](/docs/reference/access-authn-authz/admission-controllers/) de `ServiceAccount`. Os tokens de contas de serviços são montados nos Pods, em localizações já pré definidas e conhecidas e permitem processos dentro do cluster a se comunicarem com o servidor de API. Contas podem ser explicitamente associadas com _pods_ utilizando o campo `serviceAccountName` na especificação do pod (`PodSpec`):
+ 
+{{< note >}}
+`serviceAccountName` é normalmente omitida por ser feito automaticamente
+{{< /note >}}
+ 
+```yaml
+apiVersion: apps/v1 
+kind: Deployment
+metadata:
+ name: nginx-deployment
+ namespace: default
+spec:
+ replicas: 3
+ template:
+   metadata:
+   # ...
+   spec:
+     serviceAccountName: bob-the-bot
+     containers:
+     - name: nginx
+       image: nginx:1.14.2
+```
+ 
+Os _tokens_ de contas de serviço são perfeitamente válidos para ser usados fora do cluster e podem ser utilizados para criar identidades para processos de longa duração que desejem comunicar-se com a API do Kubernetes. Para criar manualmente uma conta de serviço, utilize-se simplesmente o comando `kubectl create serviceaccount (NOME)`. Isso cria uma conta de serviço e um segredo associado a ela no namespace atual.
+ 
+```bash
+kubectl create serviceaccount jenkins
+```
+ 
+```none
+serviceaccount "jenkins" created
+```
+ 
+Verificando um segredo associado:
+ 
+```bash
+kubectl get serviceaccounts jenkins -o yaml
+```
+ 
+```yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ # ...
+secrets:
+- name: jenkins-token-1yvwg
+```
+O segredo criado irá armazenar a autoridade de certificado do servidor de API e um JSON Web Token (JWT) digitalmente assinado.
+ 
+```bash
+kubectl get secret jenkins-token-1yvwg -o yaml
+```
+ 
+```yaml
+apiVersion: v1
+data:
+ ca.crt: (APISERVER'S CA BASE64 ENCODED)
+ namespace: ZGVmYXVsdA==
+ token: (BEARER TOKEN BASE64 ENCODED)
+kind: Secret
+metadata:
+ # ...
+type: kubernetes.io/service-account-token
+```
+ 
+{{< note >}}
+Valores são codificados em base64 porque segredos são sempre codificados neste formato.
+{{< /note >}}
+ 
+O JWT assinado pode ser usado como um _bearer token_ para autenticar-se como a conta de serviço. Veja [acima](#adicionando-um-bearer-token-em-uma-requisição) como o _token_ pode ser incluído em uma requisição. Normalmente esses segredos são montados no pod para um acesso interno ao cluster ao servidor de API, porém pode ser utilizado fora do cluster também.
+ 
+Contas de serviço são autenticadas com o nome de usuário `system:serviceaccount:(NAMESPACE):(SERVICEACCOUNT)` e são atribuídas aos grupos `system:serviceaccounts` e `system:serviceaccounts:(NAMESPACE)`.
+ 
+AVISO: porque os _tokens_ das contas de serviço são armazenados em segredos, qualquer usuário com acesso de leitura a esses segredos podem autenticar-se como a conta de serviço. Tome cuidado quando conceder permissões a contas de serviços e capacidade de leitura de segredos.
+ 
+### Tokens OpenID Connect
+ 
+[OpenID Connect](https://openid.net/connect/) é uma variação do framework de autorização OAuth2 que suporta provedores como Azure Active Directory, Salesforce, e Google. A principal extensão do OAuth2 é um campo adicional de _token_ de acesso chamado [ID Token](https://openid.net/specs/openid-connect-core-1_0.html#IDToken). Este _token_ é um tipo de JSON Web Token (JWT) com campos bem definidos, como usuário, e-mail e é assinado pelo servidor de autorização.
+ 
+Para identificar o usuário, o autenticador usa o `id_token` (e não `access_token`) do _bearer token_ da resposta de autorização do  OAuth2 [token response](https://openid.net/specs/openid-connect-core-1_0.html#TokenResponse). Veja [acima](#adicionando-um-bearer-token-em-uma-requisição) como incluir um _token_ em uma requisição.
+ 
+{{< mermaid >}}
+sequenceDiagram
+   participant usuário as Usuário
+   participant IDP as Provedor<br> de Identidade
+   participant kube as Kubectl
+   participant API as API Server
+ 
+   usuário ->> IDP: 1. Realizar Login no IdP
+   activate IDP
+   IDP -->> usuário: 2. Fornece access_token,<br>id_token, e refresh_token
+   deactivate IDP
+   activate usuário
+   usuário ->> kube: 3. Entrar Kubectl<br> com --token sendo id_token<br>ou adiciona tokens no arquivo .kube/config
+   deactivate usuário
+   activate kube
+   kube ->> API: 4. Emite requisição incluindo o cabeçalho HTTP Authorization: Bearer...
+   deactivate kube
+   activate API
+   API ->> API: 5. O token do tipo JWT possui assinatura válida ?
+   API ->> API: 6. O token está expirado ? (iat+exp)
+   API ->> API: 7. Usuário autorizado ?
+   API -->> kube: 8. Autorizado: Realiza<br>ação e retorna resultado
+   deactivate API
+   activate kube
+   kube --x usuário: 9. Retorna resultado
+   deactivate kube
+{{< /mermaid >}}
+ 
+1.  Login no seu provedor de identidade.
+2.  Seu provedor de identidade ira fornecer um  `access_token`, `id_token` e um `refresh_token`.
+3.  Quando utilizando `kubectl`, utilize do seu `id_token` com a opção `--token` ou adicione o token diretamente no seu arquivo de configuração `kubeconfig`.
+4.  `kubectl` envia o seu `id_token` em um cabeçalho HTTP chamado _Authorization_ para o servidor de API.
+5.  O servidor de API irá garantir que a assinatura do token JWT é válida, verificando-o em relação ao certificado mencionado na configuração.
+6.  Verificação para garantir que o`id_token` não esteja expirado.
+7.  Garantir que o usuário é autorizado.
+8.  Uma vez autorizado o servidor de API retorna a resposta para o `kubectl`.
+9.  `kubectl` fornece retorno ao usuário.
+ 
+Uma vez que todos os dados necessários para determinar sua identidade encontram-se no `id_token`, Kubernetes não precisa realizar outra chamada para o provedor de identidade. Em um modelo onde cada requisição não possui estado, isso fornece uma solução escalável para autenticação. Isso, porem, apresenta alguns desafios:
+ 
+1. Kubernetes não possui uma "interface web" para disparar o processo de autenticação. Não há browser ou interface para coletar credenciais que são necessárias para autenticar-se primeiro no seu provedor de identidade.
+2. O `id_token` não pode ser revogado, funcionando como um certificado, portanto deve possuir curta validade (somente alguns minutos) o que pode tornar a experiência um pouco desconfortável, fazendo com que se requisite um novo _token_ toda vez em um curto intervalo (poucos minutos de validade do _token_)
+3. Para autenticar-se ao dashboard Kubernetes, você deve executar o comando `kubectl proxy` ou um proxy reverso que consiga injetar o `id_token`.
+ 
+#### Configurando o Servidor de API
+ 
+Para habilitar o plugin de autorização, configure as seguintes opções no servidor de API:
+ 
+| Parâmetro | Descrição | Exemplo | Obrigatório |
+| --------- | ----------- | ------- | ------- |
+| `--oidc-issuer-url` | URL do provedor que permite ao servidor de API descobrir chaves públicas de assinatura. Somente URLs que usam o esquema `https://` são aceitas.  Isto normalmente é o endereço de descoberta do provedor sem o caminho, por exemplo "https://accounts.google.com" ou "https://login.salesforce.com".  Esta URL deve apontar para o nível abaixo do caminho .well-known/openid-configuration | Se o valor da URL de descoberta é `https://accounts.google.com/.well-known/openid-configuration`, entao o valor deve ser `https://accounts.google.com` | Sim |
+| `--oidc-client-id` |  Identificador do cliente para o qual todos os tokens são gerados. | kubernetes | Sim |
+| `--oidc-username-claim` | Atributo do JWT a ser usado como nome de usuário. Por padrão o valor `sub`, o qual é esperado que seja um identificador único do usuário final. Administradores podem escolher outro atributo, como `email` ou `name`, dependendo de seu provedor de identidade. No entanto, outros atributos além de `email` serão prefixados com a URL do emissor issuer URL para prevenir conflitos de nome com outros plugins. | sub | Não |
+| `--oidc-username-prefix` | Prefixos adicionados ao atributo de nome de usuário para prevenir conflitos de nomes existentes (como por exemplo usuários `system:`). Por exemplo, o valor `oidc:` irá criar usuários como `oidc:jane.doe`. Se esta opção não for fornecida  `--oidc-username-claim` e um valor diferente de `email` irá conter um prefixo padrão com o valor de `( Issuer URL )#` onde `( Issuer URL )` era o valor da opção `--oidc-issuer-url`. O valor `-` pode ser utilizado para desabilitar todos os prefixos. | `oidc:` | Não |
+| `--oidc-groups-claim` | Atributo do JWT a ser utilizado para mapear os grupos dos usuários. Se o atributo está presente, ele deve ser do tipo vetor de Strings. | groups | Não |
+| `--oidc-groups-prefix` | Prefixo adicionados ao atributo de grupo para prevenir conflitos de nomes existentes (como por exemplo `system:` grupos). Por exemplo, o valor `oidc:` irá criar nomes de grupos como `oidc:engineering` e `oidc:infra`. | `oidc:` | Não |
+| `--oidc-required-claim` | Um par de chave=valor que descreve atributos obrigatórios no _ID Token_. Se configurado, a presença do atributo é verificado dentro do _ID Token_ com um valor relacionado. Repita esta opção para configurar múltiplos atributos obrigatórios. | `claim=value` | Não |
+| `--oidc-ca-file` | O caminho para o arquivo de certificado da autoridade de certificados (CA) que assinou o certificado do provedor de identidades. | `/etc/kubernetes/ssl/kc-ca.pem` | Não |
+ 
+É importante ressaltar que o servidor de API não é um cliente Oauth2, ao contrário, ele só pode ser configurado para confiar em um emissor. Isso permite o uso de emissores públicos, como Google, sem confiar em credenciais emitidas por terceiros. Administradores que desejam utilizar-se de múltiplos clientes OAuth2 devem explorar provedores os quais suportam atributos `azp` (parte autorizada), que é um mecanismo para permitir um cliente a emitir tokens em nome de outro.
+ 
+Kubernetes não oferece um provedor de identidade OpenID Connect. Pode-se utilizar provedores públicos existentes como Google ou [outros](https://connect2id.com/products/nimbus-oauth-openid-connect-sdk/openid-connect-providers). Ou, pode-se rodar o próprio provedor de identidade no cluster, como [dex](https://dexidp.io/),
+[Keycloak](https://github.com/keycloak/keycloak),
+CloudFoundry [UAA](https://github.com/cloudfoundry/uaa), ou
+Tremolo Security's [OpenUnison](https://github.com/tremolosecurity/openunison).
+ 
+Para um provedor de identidades funcionar no Kubernetes, ele deve:
+ 
+1. Suportar o framework [OpenID connect discovery](https://openid.net/specs/openid-connect-discovery-1_0.html); Nem todos suportam.
+2. Executar TLS com cifras criptográficas não obsoletos.
+3. Possuir certificados assinados por uma Autoridade certificadora (mesmo que o CA não seja comercial ou seja auto-assinado)
+ 
+Uma nota sobre o requisito #3 acima. Se você instalar o seu próprio provedor de identidades (ao invés de utilizar um provedor como Google ou Microsoft) você DEVE ter o certificado web do seu provedor de identidades assinado por um certificado contendo a opção `CA` configurada para `TRUE`, mesmo que seja um certificado auto assinado. Isso deve-se a implementação do cliente TLS em Golang que é bastante restrito quanto aos padrões em torno da validação de certificados. Se você não possui um CA em fácil alcance, você pode usar [este script](https://github.com/dexidp/dex/blob/master/examples/k8s/gencert.sh) criado pelo time Dex para criar um simples CA, um par de chaves e certificado assinados.
+Ou você pode usar [este script similar](https://raw.githubusercontent.com/TremoloSecurity/openunison-qs-kubernetes/master/src/main/bash/makessl.sh) o qual gera certificados SHA256 com uma vida mais longa e tamanho maior de chave.
+ 
+Instruções de configuração para sistemas específicos podem ser encontrados em:
+ 
+- [UAA](https://docs.cloudfoundry.org/concepts/architecture/uaa.html)
+- [Dex](https://dexidp.io/docs/kubernetes/)
+- [OpenUnison](https://www.tremolosecurity.com/orchestra-k8s/)
+ 
+#### Utilizando kubectl
+ 
+##### Opção 1 - Autenticador OIDC
+ 
+A primeira opção é utilizar-se do autenticador `oidc` do kubectl, o qual define o valor do `id_token` como um  _bearer token_ para todas as requisições e irá atualizar o token quando o mesmo expirar. Após você efetuar o login no seu provedor, utilize o kubectl para adicionar os seus `id_token`, `refresh_token`, `client_id`, e `client_secret` para configurar o plugin.
+ 
+Provedores os quais não retornem um `id_token` como parte da sua resposta de _refresh token_ não são suportados por este plugin e devem utilizar a opção 2 abaixo.
+ 
+```bash
+kubectl config set-credentials USER_NAME \
+  --auth-provider=oidc \
+  --auth-provider-arg=idp-issuer-url=( issuer url ) \
+  --auth-provider-arg=client-id=( your client id ) \
+  --auth-provider-arg=client-secret=( your client secret ) \
+  --auth-provider-arg=refresh-token=( your refresh token ) \
+  --auth-provider-arg=idp-certificate-authority=( path to your ca certificate ) \
+  --auth-provider-arg=id-token=( your id_token )
+```
+ 
+Um exemplo, executando o comando abaixo após autenticar-se no seu provedor de identidades:
+ 
+```bash
+kubectl config set-credentials mmosley  \
+       --auth-provider=oidc  \
+       --auth-provider-arg=idp-issuer-url=https://oidcidp.tremolo.lan:8443/auth/idp/OidcIdP  \
+       --auth-provider-arg=client-id=kubernetes  \
+       --auth-provider-arg=client-secret=1db158f6-177d-4d9c-8a8b-d36869918ec5  \
+       --auth-provider-arg=refresh-token=q1bKLFOyUiosTfawzA93TzZIDzH2TNa2SMm0zEiPKTUwME6BkEo6Sql5yUWVBSWpKUGphaWpxSVAfekBOZbBhaEW+VlFUeVRGcluyVF5JT4+haZmPsluFoFu5XkpXk5BXqHega4GAXlF+ma+vmYpFcHe5eZR+slBFpZKtQA= \
+       --auth-provider-arg=idp-certificate-authority=/root/ca.pem \
+       --auth-provider-arg=id-token=eyJraWQiOiJDTj1vaWRjaWRwLnRyZW1vbG8ubGFuLCBPVT1EZW1vLCBPPVRybWVvbG8gU2VjdXJpdHksIEw9QXJsaW5ndG9uLCBTVD1WaXJnaW5pYSwgQz1VUy1DTj1rdWJlLWNhLTEyMDIxNDc5MjEwMzYwNzMyMTUyIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwczovL29pZGNpZHAudHJlbW9sby5sYW46ODQ0My9hdXRoL2lkcC9PaWRjSWRQIiwiYXVkIjoia3ViZXJuZXRlcyIsImV4cCI6MTQ4MzU0OTUxMSwianRpIjoiMm96US15TXdFcHV4WDlHZUhQdy1hZyIsImlhdCI6MTQ4MzU0OTQ1MSwibmJmIjoxNDgzNTQ5MzMxLCJzdWIiOiI0YWViMzdiYS1iNjQ1LTQ4ZmQtYWIzMC0xYTAxZWU0MWUyMTgifQ.w6p4J_6qQ1HzTG9nrEOrubxIMb9K5hzcMPxc9IxPx2K4xO9l-oFiUw93daH3m5pluP6K7eOE6txBuRVfEcpJSwlelsOsW8gb8VJcnzMS9EnZpeA0tW_p-mnkFc3VcfyXuhe5R3G7aa5d8uHv70yJ9Y3-UhjiN9EhpMdfPAoEB9fYKKkJRzF7utTTIPGrSaSU6d2pcpfYKaxIwePzEkT4DfcQthoZdy9ucNvvLoi1DIC-UocFD8HLs8LYKEqSxQvOcvnThbObJ9af71EwmuE21fO5KzMW20KtAeget1gnldOosPtz1G5EwvaQ401-RPQzPGMVBld0_zMCAwZttJ4knw
+```
+ 
+O qual irá produzir a configuração abaixo:
+ 
+```yaml
+users:
+- name: mmosley
+ user:
+   auth-provider:
+     config:
+       client-id: kubernetes
+       client-secret: 1db158f6-177d-4d9c-8a8b-d36869918ec5
+       id-token: eyJraWQiOiJDTj1vaWRjaWRwLnRyZW1vbG8ubGFuLCBPVT1EZW1vLCBPPVRybWVvbG8gU2VjdXJpdHksIEw9QXJsaW5ndG9uLCBTVD1WaXJnaW5pYSwgQz1VUy1DTj1rdWJlLWNhLTEyMDIxNDc5MjEwMzYwNzMyMTUyIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwczovL29pZGNpZHAudHJlbW9sby5sYW46ODQ0My9hdXRoL2lkcC9PaWRjSWRQIiwiYXVkIjoia3ViZXJuZXRlcyIsImV4cCI6MTQ4MzU0OTUxMSwianRpIjoiMm96US15TXdFcHV4WDlHZUhQdy1hZyIsImlhdCI6MTQ4MzU0OTQ1MSwibmJmIjoxNDgzNTQ5MzMxLCJzdWIiOiI0YWViMzdiYS1iNjQ1LTQ4ZmQtYWIzMC0xYTAxZWU0MWUyMTgifQ.w6p4J_6qQ1HzTG9nrEOrubxIMb9K5hzcMPxc9IxPx2K4xO9l-oFiUw93daH3m5pluP6K7eOE6txBuRVfEcpJSwlelsOsW8gb8VJcnzMS9EnZpeA0tW_p-mnkFc3VcfyXuhe5R3G7aa5d8uHv70yJ9Y3-UhjiN9EhpMdfPAoEB9fYKKkJRzF7utTTIPGrSaSU6d2pcpfYKaxIwePzEkT4DfcQthoZdy9ucNvvLoi1DIC-UocFD8HLs8LYKEqSxQvOcvnThbObJ9af71EwmuE21fO5KzMW20KtAeget1gnldOosPtz1G5EwvaQ401-RPQzPGMVBld0_zMCAwZttJ4knw
+       idp-certificate-authority: /root/ca.pem
+       idp-issuer-url: https://oidcidp.tremolo.lan:8443/auth/idp/OidcIdP
+       refresh-token: q1bKLFOyUiosTfawzA93TzZIDzH2TNa2SMm0zEiPKTUwME6BkEo6Sql5yUWVBSWpKUGphaWpxSVAfekBOZbBhaEW+VlFUeVRGcluyVF5JT4+haZmPsluFoFu5XkpXk5BXq
+     name: oidc
+```
+Uma vez que seu `id_token` expire, `kubectl` irá tentar atualizar o seu `id_token` utilizando-se do seu `refresh_token` e `client_secret` armazenando os novos valores para `refresh_token` e `id_token` no seu arquivo de configuração `.kube/config`.
+ 
+##### Opção 2 - Utilize a opção `--token`
+ 
+O comando `kubectl` o permite passar o valor de um token utilizando a opção `--token`. Copie e cole o valor do seu `id_token` nesta opção:
+ 
+```bash
+kubectl --token=eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL21sYi50cmVtb2xvLmxhbjo4MDQzL2F1dGgvaWRwL29pZGMiLCJhdWQiOiJrdWJlcm5ldGVzIiwiZXhwIjoxNDc0NTk2NjY5LCJqdGkiOiI2RDUzNXoxUEpFNjJOR3QxaWVyYm9RIiwiaWF0IjoxNDc0NTk2MzY5LCJuYmYiOjE0NzQ1OTYyNDksInN1YiI6Im13aW5kdSIsInVzZXJfcm9sZSI6WyJ1c2VycyIsIm5ldy1uYW1lc3BhY2Utdmlld2VyIl0sImVtYWlsIjoibXdpbmR1QG5vbW9yZWplZGkuY29tIn0.f2As579n9VNoaKzoF-dOQGmXkFKf1FMyNV0-va_B63jn-_n9LGSCca_6IVMP8pO-Zb4KvRqGyTP0r3HkHxYy5c81AnIh8ijarruczl-TK_yF5akjSTHFZD-0gRzlevBDiH8Q79NAr-ky0P4iIXS8lY9Vnjch5MF74Zx0c3alKJHJUnnpjIACByfF2SCaYzbWFMUNat-K1PaUk5-ujMBG7yYnr95xD-63n8CO8teGUAAEMx6zRjzfhnhbzX-ajwZLGwGUBT4WqjMs70-6a7_8gZmLZb2az1cZynkFRj2BaCkVT3A2RrjeEwZEtGXlMqKJ1_I2ulrOVsYx01_yD35-rw get nodes
+```
+ 
+### Token de autenticação via Webhook
+ 
+Webhook de autenticação é usado para verificar _bearer tokens_
+ 
+* `--authentication-token-webhook-config-file` arquivo de configuração descrevendo como acessar o serviço remoto de webhook.
+* `--authentication-token-webhook-cache-ttl` por quanto tempo guardar em cache decisões de autenticação. Configuração padrão definida para dois minutos.
+* `--authentication-token-webhook-version` determina quando usar o apiVersion `authentication.k8s.io/v1beta1` ou `authentication.k8s.io/v1` para objetos `TokenReview` quando enviar/receber informações do  webhook. Valor padrão `v1beta1`.
+ 
+O arquivo de configuração usa o formato de arquivo do [kubeconfig](/docs/concepts/configuration/organize-cluster-access-kubeconfig/). Dentro do arquivo, `clusters` refere-se ao serviço remoto e `users` refere-se ao servidor de API do webhook. Um exemplo seria:
+ 
+```yaml
+# versão da API do Kubernetes
+apiVersion: v1
+# tipo do objeto da API
+kind: Config
+# clusters refere-se ao serviço remoto
+clusters:
+ - name: name-of-remote-authn-service
+   cluster:
+     certificate-authority: /path/to/ca.pem         # CA para verificar o serviço remoto
+     server: https://authn.example.com/authenticate # URL para procurar o serviço remoto. Deve utilizar 'https'.
+ 
+# users refere-se a configuração do webhook do servidor de  API
+users:
+ - name: name-of-api-server
+   user:
+     client-certificate: /path/to/cert.pem # certificado para ser utilizado pelo plugin de webhook
+     client-key: /path/to/key.pem          # chave referente ao certificado
+ 
+# arquivos kubeconfig requerem um contexto. Especifique um para o servidor de API.
+current-context: webhook
+contexts:
+- context:
+   cluster: name-of-remote-authn-service
+   user: name-of-api-server
+ name: webhook
+```
+ 
+Quando um cliente tenta autenticar-se com o servidor de API utilizando um _bearer token_ como discutido [acima](#adicionando-um-bearer-token-em-uma-requisição), o webhook de autenticação envia um objeto JSON serializado do tipo `TokenReview` contendo o valor do _token_ para o serviço remoto.
+ 
+Note que objetos de API do tipo _webhook_ estão sujeitos às mesmas [regras de compatibilidade de versão](/docs/concepts/overview/kubernetes-api/) como outros objetos de API Kubernetes.
+Implementadores devem verificar o campo de versão da API (`apiVersion`) da requisição para garantir a correta deserialização e **devem** responder com um objeto do tipo `TokenReview` da mesma versão da requisição.
+ 
+{{< tabs name="TokenReview_request" >}}
+{{% tab name="authentication.k8s.io/v1" %}}
+{{< note >}}
+O servidor de API Kubernetes envia por padrão revisão de tokens para a API `authentication.k8s.io/v1beta1` para fins de compatibilidade com versões anteriores.
+ 
+Para optar receber revisão de tokens de versão `authentication.k8s.io/v1`, o servidor de API deve ser inicializado com a opção `--authentication-token-webhook-version=v1`.
+{{< /note >}}
+ 
+```yaml
+{
+ "apiVersion": "authentication.k8s.io/v1",
+ "kind": "TokenReview",
+ "spec": {
+   # Bearer token opaco enviado para o servidor de API
+   "token": "014fbff9a07c...",
+ 
+   # Lista opcional de identificadores de audiência para o servidor ao qual o token foi apresentado
+   # Autenticadores de token  sensíveis a audiência (por exemplo, autenticadores de token OIDC)
+   # deve-se verificar que o token foi direcionado a pelo menos um membro da lista de audiência
+   # e retornar a interseção desta lista a audiência válida para o token no estado da resposta
+   # Isto garante com que o token é válido para autenticar-se no servidor ao qual foi apresentado
+   # Se nenhuma audiência for especificada, o token deve ser validado para autenticar-se ao servidor de API do Kubernetes
+   "audiences": ["https://myserver.example.com", "https://myserver.internal.example.com"]
+ }
+}
+```
+{{% /tab %}}
+{{% tab name="authentication.k8s.io/v1beta1" %}}
+```yaml
+{
+ "apiVersion": "authentication.k8s.io/v1beta1",
+ "kind": "TokenReview",
+ "spec": {
+   # Bearer token opaco enviado para o servidor de API
+   "token": "014fbff9a07c...",
+ 
+   # Lista opcional de identificadores de audiência para o servidor ao qual o token foi apresentado
+   # Autenticadores de token  sensíveis a audiência (por exemplo, autenticadores de token OIDC)
+   # deve-se verificar que o token foi direcionado a pelo menos um membro da lista de audiência
+   # e retornar a interseção desta lista a audiência válida para o token no estado da resposta
+   # Isto garante com que o token é válido para autenticar-se no servidor ao qual foi apresentado
+   # Se nenhuma audiência for especificada, o token deve ser validado para autenticar-se ao servidor de API do Kubernetes
+   "audiences": ["https://myserver.example.com", "https://myserver.internal.example.com"]
+ }
+}
+```
+{{% /tab %}}
+{{< /tabs >}}
+ 
+É esperado que o serviço remoto preencha o campo `status` da requisição para indicar o sucesso do login.
+O campo `spec` do corpo de resposta é ignorado e pode ser omitido.
+O serviço remoto deverá retornar uma resposta usando a mesma versão de API do objeto `TokenReview` que foi recebido.
+Uma validação bem sucedida deveria retornar:
+ 
+{{< tabs name="TokenReview_response_success" >}}
+{{% tab name="authentication.k8s.io/v1" %}}
+```yaml
+{
+ "apiVersion": "authentication.k8s.io/v1",
+ "kind": "TokenReview",
+ "status": {
+   "authenticated": true,
+   "user": {
+     # Obrigatório
+     "username": "janedoe@example.com",
+     # Opcional
+     "uid": "42",
+     # Opcional: lista de grupos associados
+     "groups": ["developers", "qa"],
+     # Opcional: informação adicional  provida pelo autenticador.
+     # Isto não deve conter dados confidenciais, pois pode ser registrados em logs ou em objetos de API e estarão disponíveis para webhooks de admissão
+     "extra": {
+       "extrafield1": [
+         "extravalue1",
+         "extravalue2"
+       ]
+     }
+   },
+   # Lista opcional de Autenticadores de token  sensíveis a audiência que podem ser retornados,
+   # contendo as audiências da lista `spec.audiences` válido para o token apresentado.
+   # Se este campo for omitido, o token é considerado válido para autenticar-se no servidor de API Kubernetes
+   "audiences": ["https://myserver.example.com"]
+ }
+}
+```
+{{% /tab %}}
+{{% tab name="authentication.k8s.io/v1beta1" %}}
+```yaml
+{
+ "apiVersion": "authentication.k8s.io/v1beta1",
+ "kind": "TokenReview",
+ "status": {
+   "authenticated": true,
+   "user": {
+     # Obrigatório
+     "username": "janedoe@example.com",
+     # Opcional
+     "uid": "42",
+     # Opcional: lista de grupos associados
+     "groups": ["developers", "qa"],
+     # Opcional: informação adicional  provida pelo autenticador.
+     # Isto não deve conter dados confidenciais, pois pode ser registrados em logs ou em objetos de API e estarão disponíveis para webhooks de admissão
+     "extra": {
+       "extrafield1": [
+         "extravalue1",
+         "extravalue2"
+       ]
+     }
+   },
+   # Lista opcional de Autenticadores de token  sensíveis a audiência que podem ser retornados,
+   # contendo as audiências da lista `spec.audiences` válido para o token apresentado.
+   # Se este campo for omitido, o token é considerado válido para autenticar-se no servidor de API Kubernetes
+   "audiences": ["https://myserver.example.com"]
+ }
+}
+```
+{{% /tab %}}
+{{< /tabs >}}
+ 
+Uma requisição mal sucedida retornaria:
+ 
+{{< tabs name="TokenReview_response_error" >}}
+{{% tab name="authentication.k8s.io/v1" %}}
+```yaml
+{
+ "apiVersion": "authentication.k8s.io/v1",
+ "kind": "TokenReview",
+ "status": {
+   "authenticated": false,
+   # Opcionalmente inclui detalhes sobre o porque a autenticação falhou
+   # Se nenhum erro é fornecido, a API irá retornar uma mensagem genérica de "Não autorizado"
+   # O campo de erro é ignorado quando authenticated=true.
+   "error": "Credenciais expiradas"
+ }
+}
+```
+{{% /tab %}}
+{{% tab name="authentication.k8s.io/v1beta1" %}}
+```yaml
+{
+ "apiVersion": "authentication.k8s.io/v1beta1",
+ "kind": "TokenReview",
+ "status": {
+   "authenticated": false,
+   # Opcionalmente inclui detalhes sobre o porque a autenticação falhou
+   # Se nenhum erro é fornecido, a API irá retornar uma mensagem genérica de "Não autorizado"
+   # O campo de erro é ignorado quando authenticated=true.
+   "error": "Credenciais expiradas"
+ }
+}
+```
+{{% /tab %}}
+{{< /tabs >}}
+ 
+### Autenticando com Proxy
+ 
+O servidor de API pode ser configurado para identificar usuários através de valores de cabeçalho de requisição, como por exemplo `X-Remote-User`.
+Isto é projetado para o uso em combinação com um proxy de autenticação, o qual irá atribuir o valor do cabeçalho da requisição.
+ 
+* `--requestheader-username-headers` Obrigatório, não faz distinção entre caracteres maiúsculos/minúsculos. Nomes de cabeçalhos a serem verificados, em ordem, para a identidade do usuário. O primeiro cabeçalho contendo um valor será usado para o nome do usuário.
+* `--requestheader-group-headers` 1.6+. Opcional, não faz distinção entre caracteres maiúsculos/minúsculos. "X-Remote-Group" é recomendado. Nomes de cabeçalhos a serem verificados, em ordem, para os grupos do usuário. Todos os valores especificados em todos os cabeçalhos serão utilizados como nome dos grupos do usuário.
+ 
+* `--requestheader-extra-headers-prefix` 1.6+. Opcional, não faz distinção entre caracteres maiúsculos/minúsculos. "X-Remote-Extra-" é recomendado. Prefixos de cabeçalhos para serem utilizados para definir informações extras sobre o usuário (normalmente utilizado por um plugin de autorização). Todos os cabeçalhos que começam com qualquer um dos prefixos especificados têm o prefixo removido. O restante do nome do cabeçalho é transformado em letra minúscula, decodificado [percent-decoded](https://tools.ietf.org/html/rfc3986#section-2.1) e torna-se uma chave extra, e o valor do cabeçalho torna-se um valor extra.
+ 
+{{< note >}}
+Antes da versão 1.11.3 (e 1.10.7, 1.9.11), a chave extra só poderia conter caracteres os quais fossem [legais em rótulos de cabeçalhos HTTP](https://tools.ietf.org/html/rfc7230#section-3.2.6).
+{{< /note >}}
+ 
+Por exemplo, com esta configuração:
+ 
+```
+--requestheader-username-headers=X-Remote-User
+--requestheader-group-headers=X-Remote-Group
+--requestheader-extra-headers-prefix=X-Remote-Extra-
+```
+ 
+e esta requisição:
+ 
+```http
+GET / HTTP/1.1
+X-Remote-User: fido
+X-Remote-Group: dogs
+X-Remote-Group: dachshunds
+X-Remote-Extra-Acme.com%2Fproject: some-project
+X-Remote-Extra-Scopes: openid
+X-Remote-Extra-Scopes: profile
+```
+ 
+resultaria nesta informação de usuário:
+ 
+```yaml
+name: fido
+groups:
+- dogs
+- dachshunds
+extra:
+ acme.com/project:
+ - some-project
+ scopes:
+ - openid
+ - profile
+```
+ 
+Para prevenir falsificação de cabeçalhos, o proxy de autenticação deverá apresentar um certificado de cliente válido para o servidor de API para que possa ser validado com a autoridade de certificados (CA) antes que os cabeçalhos de requisições sejam verificados. AVISO: **não** re-utilize uma autoridade de certificados (CA) que esteja sendo utilizado em um contexto diferente ao menos que você entenda os riscos e os mecanismos de proteção da utilização de uma autoridade de certificados.
+ 
+* `--requestheader-client-ca-file` Obrigatório. Pacote de certificados no formato PEM. Um certificado válido deve ser apresentado e validado com a autoridade de certificados no arquivo especificado antes da verificação de cabeçalhos de requisição para os nomes do usuário.
+ 
+* `--requestheader-allowed-names` Opcional. Lista de valores de nomes comuns (CNs). Se especificado, um certificado de cliente válido contendo uma lista de nomes comuns denominados deve ser apresentado na verificação de cabeçalhos de requisição para os nomes do usuário. Se vazio, qualquer valor de nomes comuns será permitido.
+ 
+## Requisições anônimas
+ 
+Quando habilitado, requisições que não são rejeitadas por outros métodos de autenticação configurados são tratadas como requisições anônimas e são dadas o nome de usuário `system:anonymous` e filiação ao grupo `system:unauthenticated`.
+ 
+Por exemplo, uma requisição especificando um _bearer token_ invalido chega a um servidor com token de autenticação configurado e acesso anônimo habilitado e receberia um erro de acesso não autorizado `401 Unauthorized`. Já uma requisição não especificando nenhum _bearer token_ seria tratada como uma requisição anônima.
+ 
+Nas versões 1.5.1-1.5.x, acesso anônimo é desabilitado por padrão e pode ser habilitado passando a opção `--anonymous-auth=true` durante a inicialização do servidor de API.
+ 
+Na versão 1.6 e acima, acesso anônimo é habilitado por padrão se um modo de autorização diferente de `AlwaysAllow` é utilizado e pode ser desabilitado passando a opção `--anonymous-auth=false` durante a inicialização do servidor de API.
+Começando na versão 1.6, os autorizadores _ABAC (Controle de Acesso Baseado em Atributos)_ e _RBAC (Controle de Acesso Baseado em Função)_ requerem autorização explícita do usuário `system:anonymous` e do grupo `system:unauthenticated`, portanto, regras de políticas legadas que permitam acesso a usuário `*` e grupo `*` nao incluíram usuários anônimos.
+ 
+## Personificação de usuário
+ 
+Um usuário pode agir como outro através de cabeçalhos de personificação. Os mesmos permitem que requisições manualmente sobrescrevam as informações ao quais o usuário irá se autenticar como. Por exemplo, um administrador pode utilizar-se desta funcionalidade para investigar um problema com uma política de autorização e assim, temporariamente, personificar um outro usuário e ver se/como sua requisição está sendo negada.
+ 
+Requisições de personificação primeiramente são autenticadas como o usuário requerente, então trocando para os detalhes de informação do usuário personificado.
+ 
+O fluxo é:
+ 
+* Um usuário faz uma chamada de API com suas credenciais _e_ cabeçalhos de personificação.
+* O servidor de API autentica o usuário.
+* O servidor de API garante que o usuário autenticado possui permissão de personificação.
+* Detalhes de informação do usuário da requisição tem seus valores substituídos com os detalhes de personificação.
+* A requisição é avaliada e a autorização é feita sobre os detalhes do usuário personificado.
+ 
+Os seguintes cabeçalhos HTTP podem ser usados para realizar uma requisição de personificação:
+ 
+* `Impersonate-User`: O nome do usuário para se executar ações em seu nome.
+* `Impersonate-Group`: Um nome de grupo para se executar ações em seu nome. Pode ser especificado múltiplas vezes para fornecer múltiplos grupos. Opcional. Requer "Impersonate-User".
+* `Impersonate-Extra-( extra name )`: Um cabeçalho dinâmico usado para associar campos extras do usuário. Opcional. Requer "Impersonate-User". Para que seja preservado consistentemente, `( extra name )` deve ser somente minúsculo, e qualquer caracter que não seja [legal em rótulos de cabeçalhos HTTP](https://tools.ietf.org/html/rfc7230#section-3.2.6) DEVE ser utf8 e [codificado](https://tools.ietf.org/html/rfc3986#section-2.1).
+ 
+{{< note >}}
+Antes da versão 1.11.3 (e 1.10.7, 1.9.11), `( extra name )` só poderia conter caracteres que fossem [legais em rótulos de cabeçalhos HTTP](https://tools.ietf.org/html/rfc7230#section-3.2.6).
+{{< /note >}}
+ 
+Um exemplo de conjunto de cabeçalhos HTTP:
+ 
+```http
+Impersonate-User: jane.doe@example.com
+Impersonate-Group: developers
+Impersonate-Group: admins
+Impersonate-Extra-dn: cn=jane,ou=engineers,dc=example,dc=com
+Impersonate-Extra-acme.com%2Fproject: some-project
+Impersonate-Extra-scopes: view
+Impersonate-Extra-scopes: development
+```
+ 
+Quando utilizando-se o `kubectl` especifique a opção `--as` para determinar o cabeçalho `Impersonate-User`, especifique a opção `--as-group` para determinar o cabeçalho `Impersonate-Group`.
+ 
+```bash
+kubectl drain mynode
+```
+ 
+```none
+Error from server (Forbidden): User "clark" cannot get nodes at the cluster scope. (get nodes mynode)
+```
+ 
+Especificando as opções `--as` e `--as-group`:
+ 
+```bash
+kubectl drain mynode --as=superman --as-group=system:masters
+```
+ 
+```none
+node/mynode cordoned
+node/mynode drained
+```
+ 
+Para personificar um usuário, grupo ou especificar campos extras, o usuário efetuando a personificação deve possuir a permissão de executar o verbo "impersonate" no tipo de atributo sendo personificado ("user", "group", etc.). Para clusters com o plugin de autorização _RBAC_ habilitados, a seguinte ClusterRole abrange as regras necessárias para definir os cabeçalhos de personificação de usuário e grupo:
+ 
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: impersonator
+rules:
+- apiGroups: [""]
+ resources: ["users", "groups", "serviceaccounts"]
+ verbs: ["impersonate"]
+```
+ 
+Campos extras são avaliados como sub-recursos de um recurso denominado "userextras". Para permitir ao usuário que utilize os cabeçalhos de personificação para o campo extra "scopes", o usuário deve receber a seguinte permissão:
+ 
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: scopes-impersonator
+rules:
+# Pode definir o cabeçalho "Impersonate-Extra-scopes".
+- apiGroups: ["authentication.k8s.io"]
+ resources: ["userextras/scopes"]
+ verbs: ["impersonate"]
+```
+Os valores dos cabeçalhos de personificação podem também ser restringidos ao limitar o conjunto de nomes de recursos (`resourceNames`) que um recurso pode ter.
+ 
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: limited-impersonator
+rules:
+# Pode personificar o usuário "jane.doe@example.com"
+- apiGroups: [""]
+ resources: ["users"]
+ verbs: ["impersonate"]
+ resourceNames: ["jane.doe@example.com"]
+ 
+# Pode assumir os grupos "developers" and "admins"
+- apiGroups: [""]
+ resources: ["groups"]
+ verbs: ["impersonate"]
+ resourceNames: ["developers","admins"]
+ 
+# Pode personificar os campos extras "scopes" com valores "view" e "development"
+- apiGroups: ["authentication.k8s.io"]
+ resources: ["userextras/scopes"]
+ verbs: ["impersonate"]
+ resourceNames: ["view", "development"]
+```
+ 
+## Plugins de credenciais client-go
+{{< feature-state for_k8s_version="v1.11" state="beta" >}}
+ 
+Ferramentas como `kubectl` e `kubelet` utilizando-se do `k8s.io/client-go` são capazes de executar um comando externo para receber credenciais de usuário.
+ 
+Esta funcionalidade é direcionada à integração do lado cliente, com protocolos de autenticação não suportados nativamente pelo `k8s.io/client-go` como: LDAP, Kerberos, OAuth2, SAML, etc. O plugin implementa a lógica específica do protocolo e então retorna credenciais opacas para serem utilizadas. Quase todos os casos de usos de plugins de credenciais requerem um componente de lado do servidor com suporte para um [autenticador de token webhook](#token-de-autenticação-via-webhook) para interpretar o formato das credenciais produzidas pelo plugin cliente.
+ 
+### Exemplo de caso de uso
+ 
+Num caso de uso hipotético, uma organização executaria um serviço externo que efetuaria a troca de credenciais LDAP por tokens assinados para um usuário específico. Este serviço seria também capaz de responder requisições do [autenticador de token webhook](#token-de-autenticação-via-webhook) para validar tokens. Usuários seriam obrigados a instalar um plugin de credencial em sua estação de trabalho.
+ 
+Para autenticar na API:
+* O usuário entra um comando `kubectl`.
+* O plugin de credencial solicita ao usuário a entrada de credenciais LDAP e efetua troca das credenciais por um token via um serviço externo.
+* O plugin de credenciais retorna um token para o client-go, o qual o utiliza como um bearer token no servidor de API.
+* O servidor de API usa o [autenticador de token webhook](#token-de-autenticação-via-webhook) para submeter um objeto `TokenReview` para o serviço externo.
+* O serviço externo verifica a assinatura do token e retorna o nome e grupos do usuário.
+ 
+### Configuração
+ 
+plugins de credencial são configurados através de [arquivos de configuração do kubectl](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/) como parte dos campos de usuário.
+ 
+```yaml
+apiVersion: v1
+kind: Config
+users:
+- name: my-user
+ user:
+   exec:
+     # Comando a ser executado. Obrigatório.
+     command: "example-client-go-exec-plugin"
+ 
+     # Versão da API a ser utilizada quando decodificar o recurso  ExecCredentials. Obrigatório
+     #
+     # A versão da API retornada pelo plugin DEVE ser a mesma versão listada aqui.
+     #
+     # Para integrar com ferramentas que suportem múltiplas versões (tal como client.authentication.k8s.io/v1alpha1),
+     # defina uma variável de ambiente ou passe um argumento para a ferramenta que indique qual versão o plugin de execução deve esperar.
+     apiVersion: "client.authentication.k8s.io/v1beta1"
+ 
+     # Variáveis de ambiente a serem configuradas ao executar o plugin. Opcional
+     env:
+     - name: "FOO"
+       value: "bar"
+ 
+     # Argumentos a serem passados ao executar o plugin. Opcional
+     args:
+     - "arg1"
+     - "arg2"
+ 
+     # Texto exibido para o usuário quando o executável não parece estar presente. Opcional
+     installHint: |
+       example-client-go-exec-plugin é necessário para autenticar no cluster atual. Pode ser instalado via:
+ 
+       Em macOS: brew install example-client-go-exec-plugin
+ 
+       Em Ubuntu: apt-get install example-client-go-exec-plugin
+ 
+       Em Fedora: dnf install example-client-go-exec-plugin
+ 
+       ...
+ 
+     # Deve-se ou não fornecer informações do cluster, que podem potencialmente conter grande quantidade de dados do CA,
+     # para esse plugin de execução como parte da variável de ambiente KUBERNETES_EXEC_INFO
+     provideClusterInfo: true
+clusters:
+- name: my-cluster
+ cluster:
+   server: "https://172.17.4.100:6443"
+   certificate-authority: "/etc/kubernetes/ca.pem"
+   extensions:
+   - name: client.authentication.k8s.io/exec # nome de extensão reservado para configuração exclusiva do cluster
+     extension:
+       arbitrary: config
+       this: pode ser fornecido através da variável de ambiente KUBERNETES_EXEC_INFO na configuracao de provideClusterInfo
+       you: ["coloque", "qualquer", "coisa", "aqui"]
+contexts:
+- name: my-cluster
+ context:
+   cluster: my-cluster
+   user: my-user
+current-context: my-cluster
+```
+ 
+Os caminhos relativos do comando são interpretados como relativo ao diretório do arquivo de configuração. Se
+KUBECONFIG está configurado para o caminho `/home/jane/kubeconfig` e o comando executado é `./bin/example-client-go-exec-plugin`,
+o binario `/home/jane/bin/example-client-go-exec-plugin` será executado.
+ 
+```yaml
+- name: my-user
+ user:
+   exec:
+     # Caminho relativo para o diretorio do kubeconfig
+     command: "./bin/example-client-go-exec-plugin"
+     apiVersion: "client.authentication.k8s.io/v1beta1"
+```
+ 
+### Formatos de entrada e saída
+ 
+O comando executado imprime um objeto `ExecCredential` para o `stdout`. `k8s.io/client-go`
+autentica na API do Kubernetes utilizando as credenciais retornadas no `status`.
+ 
+Quando executando uma sessão interativa, `stdin` é exposto diretamente para o plugin. plugins devem utilizar
+um [TTY check](https://godoc.org/golang.org/x/crypto/ssh/terminal#IsTerminal) para determinar se é
+apropriado solicitar um usuário interativamente.
+ 
+Para usar credenciais do tipo _bearer token_, o plugin retorna um token no status do objeto `ExecCredential`.
+ 
+```json
+{
+ "apiVersion": "client.authentication.k8s.io/v1beta1",
+ "kind": "ExecCredential",
+ "status": {
+   "token": "my-bearer-token"
+ }
+}
+```
+ 
+Alternativamente, um certificado de cliente e chave codificados em PEM podem ser retornados para serem utilizados em autenticação de cliente TLS.
+Se o plugin retornar um certificado e chave diferentes numa chamada subsequente, `k8s.io/client-go`
+Irá fechar conexões existentes com o servidor para forçar uma nova troca TLS.
+ 
+Se especificado, `clientKeyData` e `clientCertificateData` devem ambos estar presentes.
+ 
+`clientCertificateData` pode conter certificados intermediários adicionais a serem enviados para o servidor.
+ 
+```json
+{
+ "apiVersion": "client.authentication.k8s.io/v1beta1",
+ "kind": "ExecCredential",
+ "status": {
+   "clientCertificateData": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----",
+   "clientKeyData": "-----BEGIN RSA PRIVATE KEY-----\n...\n-----END RSA PRIVATE KEY-----"
+ }
+}
+```
+ 
+Opcionalmente, a resposta pode incluir a validade da credencial em formato
+RFC3339 de data/hora. A presença ou ausência de validade pode ter o seguinte impacto:
+ 
+- Se uma validade está incluída, o _bearer token_ e as credenciais TLS são guardadas em cache até
+a o tempo de expiração é atingido ou se o servidor responder com um codigo de status HTTP 401
+ou se o processo terminar.
+ 
+- Se uma validate está ausente, o _bearer token_ e as credenciais TLS são guardadas em cache até
+o servidor responder com um código de status HTTP 401 ou até o processo terminar.
+ 
+```json
+{
+ "apiVersion": "client.authentication.k8s.io/v1beta1",
+ "kind": "ExecCredential",
+ "status": {
+   "token": "my-bearer-token",
+   "expirationTimestamp": "2018-03-05T17:30:20-08:00"
+ }
+}
+```
+ 
+Para habilitar o plugin de execução para obter informações específicas do cluster, define `provideClusterInfo` no campo `user.exec`
+dentro do arquivo de configuração [kubeconfig](/docs/concepts/configuration/organize-cluster-access-kubeconfig/).
+O plugin irá então prover a variável de ambiente `KUBERNETES_EXEC_INFO`.
+As informações desta variável de ambiente podem ser utilizadas para executar lógicas de aquisição
+de credentiais específicas do cluster.
+O manifesto `ExecCredential` abaixo descreve um exemplo de informação de cluster.
+ 
+```json
+{
+ "apiVersion": "client.authentication.k8s.io/v1beta1",
+ "kind": "ExecCredential",
+ "spec": {
+   "cluster": {
+     "server": "https://172.17.4.100:6443",
+     "certificate-authority-data": "LS0t...",
+     "config": {
+       "arbitrary": "config",
+       "this": "pode ser fornecido por meio da variável de ambiente KUBERNETES_EXEC_INFO na configuração de provideClusterInfo",
+       "you": ["coloque", "qualquer", "coisa", "aqui"]
+     }
+   }
+ }
+}
+```
\ No newline at end of file
diff --git a/content/pt/docs/reference/glossary/alternate-x509-schemes.md b/content/pt/docs/reference/glossary/alternate-x509-schemes.md
new file mode 100644
index 0000000000..307479595d
--- /dev/null
+++ b/content/pt/docs/reference/glossary/alternate-x509-schemes.md
@@ -0,0 +1,27 @@
+---
+title: Esquemas alternativos x509 
+id: alternate-x509-schemes
+date: 2021-03-16
+full_link: 
+short_description: >
+   X.509 é um formato padrão para certificados de chave pública, documentos digitais que associam com segurança pares de chaves criptográficas a identidades como sites, indivíduos ou organizações.
+
+aka: 
+tags:
+- authentication
+---
+
+<!--more-->
+
+X.509 é um formato padrão para certificados de chave pública, documentos digitais que associam com segurança pares de chaves criptográficas a identidades como sites, indivíduos ou organizações.
+
+Introduzido pela primeira vez em 1988 junto com os padrões X.500 para serviços de diretório eletrônico, o X.509 foi adaptado para uso na Internet pelo grupo de trabalho Public-Key Infrastructure (X.509) (PKIX) da IETF. O RFC 5280 define o perfil do certificado X.509 v3, a lista de revogação de certificado X.509 v2 (CRL) e descreve um algoritmo para a validação do caminho do certificado X.509.
+
+As aplicações comuns de certificados X.509 incluem:
+
+    - SSL / TLS e HTTPS para navegação na web autenticada e criptografada
+    - E-mail assinado e criptografado por meio do protocolo S / MIME
+    - Assinatura de código
+    - Assinatura de documento
+    - Autenticação de cliente
+    - Identificação eletrônica emitida pelo governo
diff --git a/content/pt/docs/reference/glossary/kerberos.md b/content/pt/docs/reference/glossary/kerberos.md
new file mode 100644
index 0000000000..7752654082
--- /dev/null
+++ b/content/pt/docs/reference/glossary/kerberos.md
@@ -0,0 +1,27 @@
+---
+title: Kerberos
+id: kerberos
+date: 2021-03-16
+full_link: 
+short_description: >
+   Kerberos é um protocolo de rede que usa criptografia de chave secreta para autenticar aplicativos cliente-servidor. O Kerberos solicita um tíquete criptografado por meio de uma sequência de servidor autenticada para usar os serviços.
+   
+   O protocolo recebe o nome do cão de três cabeças (Kerberos ou Cerberus) que guardava os portões de Hades na mitologia grega.
+   
+aka: 
+tags:
+- authentication
+---
+
+<!--more-->
+
+Kerberos é um protocolo de rede que usa criptografia de chave secreta para autenticar aplicativos cliente-servidor. O Kerberos solicita um tíquete criptografado por meio de uma sequência de servidor autenticada para usar os serviços.
+
+Kerberos foi desenvolvido pelo Project Athena - um projeto conjunto entre o Massachusetts Institute of Technology (MIT), Digital Equipment Corporation e IBM que funcionou entre 1983 e 1991.
+
+Um servidor de autenticação usa um tíquete Kerberos para conceder acesso ao servidor e, em seguida, cria uma chave de sessão com base na senha do solicitante e outro valor aleatório. O tíquete de concessão de tíquete (TGT) é enviado ao servidor de concessão de tíquete (TGS), que é necessário para usar o mesmo servidor de autenticação.
+
+O solicitante recebe uma chave TGS criptografada com um registro de data e hora e um tíquete de serviço, que é retornado ao solicitante e descriptografado. O solicitante envia ao TGS essas informações e encaminha a chave criptografada ao servidor para obter o serviço desejado. Se todas as ações forem tratadas corretamente, o servidor aceita o tíquete e realiza o atendimento ao usuário desejado, que deve descriptografar a chave, verificar a data e hora e entrar em contato com o centro de distribuição para obter as chaves de sessão. Essa chave de sessão é enviada ao solicitante, que descriptografa o tíquete.
+
+Se as chaves e o carimbo de data / hora forem válidos, a comunicação cliente-servidor continuará. O tíquete TGS tem carimbo de data / hora, o que permite solicitações simultâneas dentro do período de tempo alocado.
+
diff --git a/content/pt/docs/reference/glossary/keystone.md b/content/pt/docs/reference/glossary/keystone.md
new file mode 100644
index 0000000000..6a59f1d1b9
--- /dev/null
+++ b/content/pt/docs/reference/glossary/keystone.md
@@ -0,0 +1,16 @@
+---
+title: Keystone
+id: keystore
+date: 2020-08-03
+full_link: 
+short_description: >
+   Keystone é o serviço de identidade usado pelo OpenStack para autenticação (authN) e autorização de alto nível (authZ). Atualmente, ele oferece suporte a authN com base em token e autorização de serviço do usuário. Recentemente, foi reprojetado para permitir a expansão para oferecer suporte a serviços externos de proxy e mecanismos AuthN / AuthZ, como oAuth, SAML e openID em versões futuras.
+   
+aka: 
+tags:
+- authentication
+---
+
+<!--more-->
+Keystone é o serviço de identidade usado pelo OpenStack para autenticação (authN) e autorização de alto nível (authZ). Atualmente, ele oferece suporte a authN com base em token e autorização de serviço do usuário. Recentemente, foi reprojetado para permitir a expansão para oferecer suporte a serviços externos de proxy e mecanismos AuthN / AuthZ, como oAuth, SAML e openID em versões futuras.
+
diff --git a/content/pt/docs/reference/glossary/ldap.md b/content/pt/docs/reference/glossary/ldap.md
new file mode 100644
index 0000000000..2a15eaa6ab
--- /dev/null
+++ b/content/pt/docs/reference/glossary/ldap.md
@@ -0,0 +1,28 @@
+---
+title: LDAP
+id: ldap
+date: 2021-03-16
+full_link: 
+short_description: >
+   Abreviatura para "Lightweight Directory Access Protocol". Se você deseja disponibilizar informações de diretório na Internet, esta é a maneira de fazê-lo. O LDAP é uma versão simplificada de um padrão de diretório anterior denominado X.500.
+   
+aka: 
+tags:
+- authentication
+---
+
+<!--more-->
+Abreviatura para "Lightweight Directory Access Protocol". Se você deseja disponibilizar informações de diretório na Internet, esta é a maneira de fazê-lo. O LDAP é uma versão simplificada de um padrão de diretório anterior denominado X.500. O que torna o LDAP tão útil é que ele funciona muito bem em redes TCP / IP (ao contrário do X.500), de modo que as informações podem ser acessadas por meio do LDAP por qualquer pessoa com uma conexão à Internet. Também é um protocolo aberto, o que significa que os diretórios podem ser armazenados em qualquer tipo de máquina (por exemplo, Windows 2000, Red Hat Linux, Mac OS X).
+
+Para dar uma ideia de como um diretório LDAP é organizado, aqui estão os diferentes níveis de uma hierarquia de árvore LDAP simples:
+
+O diretório raiz
+Países
+Organizações
+Divisões, departamentos, etc.
+Indivíduos
+Recursos individuais, como arquivos e impressoras.
+A maior parte da conectividade LDAP é feita nos bastidores, então o usuário típico provavelmente não notará ao navegar na web. No entanto, é uma boa tecnologia para se conhecer. Se nada mais, é outro termo para impressionar seus pais.
+
+
+
diff --git a/content/pt/docs/reference/glossary/saml.md b/content/pt/docs/reference/glossary/saml.md
new file mode 100644
index 0000000000..e283179742
--- /dev/null
+++ b/content/pt/docs/reference/glossary/saml.md
@@ -0,0 +1,36 @@
+---
+title: SAML
+id: saml
+date: 2021-03-16
+full_link: 
+short_description: >
+   SAML significa Linguagem de Marcação para Asserção de Segurança. É um padrão aberto baseado em XML para transferência de dados de identidade entre duas partes: um provedor de identidade (IdP) e um provedor de serviços (SP).
+   
+aka: 
+tags:
+- authentication
+---
+
+<!--more-->
+SAML significa Linguagem de Marcação para Asserção de Segurança. É um padrão aberto baseado em XML para transferência de dados de identidade entre duas partes: um provedor de identidade (IdP) e um provedor de serviços (SP).
+
+Provedor de identidade - executa autenticação e passa a identidade do usuário e o nível de autorização para o provedor de serviços.
+
+Provedor de serviços - confia no provedor de identidade e autoriza o usuário fornecido a acessar o recurso solicitado.
+
+A autenticação de logon único SAML normalmente envolve um provedor de serviços e um provedor de identidade. O fluxo do processo geralmente envolve os estágios de estabelecimento de confiança e fluxo de autenticação.
+
+Considere este exemplo:
+
+Nosso provedor de identidade é Auth0
+Nosso provedor de serviços é um serviço fictício, Zagadat
+Nota: O provedor de identidade pode ser qualquer plataforma de gerenciamento de identidade.
+
+Agora, um usuário está tentando obter acesso ao Zagadat usando a autenticação SAML.
+
+Este é o fluxo do processo:
+
+O usuário tenta fazer login no Zagadat a partir de um navegador.
+O Zagadat responde gerando uma solicitação SAML.
+
+
diff --git a/content/pt/docs/reference/glossary/tls-common-name.md b/content/pt/docs/reference/glossary/tls-common-name.md
new file mode 100644
index 0000000000..afa5af96e0
--- /dev/null
+++ b/content/pt/docs/reference/glossary/tls-common-name.md
@@ -0,0 +1,18 @@
+---
+title: TLS Common Name
+id: tls-common-name
+date: 2021-03-16
+full_link: 
+short_description: >
+   O nome comum é normalmente composto de Host + Nome de domínio e será semelhante a www.seusite.com ou seusite.com. Os certificados de servidor SSL são específicos para o nome comum para o qual foram emitidos no nível do host.
+
+aka: 
+tags:
+- authentication
+---
+
+<!--more-->
+
+O nome comum é normalmente composto de Host + Nome de domínio e será semelhante a www.seusite.com ou seusite.com. Os certificados de servidor SSL são específicos para o nome comum para o qual foram emitidos no nível do host.
+
+O nome comum deve ser igual ao endereço da Web que você acessará ao se conectar a um site seguro. Por exemplo, um certificado de servidor SSL para o domínio domínio.com receberá um aviso do navegador se o acesso a um site chamado www.domain.com ou secure.domain.com, pois www.domain.com e secure.domain.com são diferentes de dominio.com. Você precisaria criar um CSR para o nome comum correto.
\ No newline at end of file
diff --git a/content/pt/docs/reference/glossary/uid.md b/content/pt/docs/reference/glossary/uid.md
new file mode 100644
index 0000000000..c5e34fd185
--- /dev/null
+++ b/content/pt/docs/reference/glossary/uid.md
@@ -0,0 +1,13 @@
+---
+title: UID
+id: uid
+date: 2021-03-16
+full_link: 
+short_description: >
+   Um identificador exclusivo (UID) é uma sequência numérica ou alfanumérica associada a uma única entidade em um determinado sistema.
+   
+aka: 
+tags:
+- authentication
+---
+Um identificador exclusivo (UID) é uma sequência numérica ou alfanumérica associada a uma única entidade em um determinado sistema. Os UIDs tornam possível endereçar essa entidade para que ela possa ser acessada e interagida. Cada usuário é identificado no sistema por seu UID e os nomes de usuário geralmente são usados apenas como uma interface para humanos.
\ No newline at end of file
diff --git a/content/pt/docs/reference/glossary/username.md b/content/pt/docs/reference/glossary/username.md
new file mode 100644
index 0000000000..30b516eb5d
--- /dev/null
+++ b/content/pt/docs/reference/glossary/username.md
@@ -0,0 +1,16 @@
+---
+title: Username
+id: username
+date: 2021-03-16
+full_link: 
+short_description: >
+   Um nome de usuário é um nome que identifica exclusivamente alguém em um sistema de computador.
+   
+aka: 
+tags:
+- authentication
+---
+Um nome de usuário é um nome que identifica exclusivamente alguém em um sistema de computador. Por exemplo, um computador pode ser configurado com várias contas, com nomes de usuário diferentes para cada conta. Muitos sites permitem que os usuários escolham um nome de usuário para que possam personalizar suas configurações ou configurar uma conta online. Por exemplo, seu banco pode permitir que você escolha um nome de usuário para acessar suas informações bancárias. Você pode precisar escolher um nome de usuário para postar mensagens em um determinado quadro de mensagens na web. Os serviços de e-mail, como o Hotmail, exigem que os usuários escolham um nome de usuário para usar o serviço.
+
+<!--more-->
+Um nome de usuário geralmente é pareado com uma senha. Essa combinação de nome de usuário / senha é conhecida como login e geralmente é necessária para que os usuários façam login em sites. Por exemplo, para acessar seu e-mail pela Web, é necessário inserir seu nome de usuário e senha. Depois de fazer o login, seu nome de usuário pode aparecer na tela, mas sua senha é mantida em segredo. Ao manter sua senha privada, as pessoas podem criar contas seguras para vários sites. A maioria dos nomes de usuário pode conter letras e números, mas não espaços. Quando você escolhe um nome de usuário para uma conta de e-mail, a parte antes de "@" é o seu nome de usuário.

From e6e3f00a44cc5bd70e21ca1f20fe81c13c3eefa3 Mon Sep 17 00:00:00 2001
From: ganeshniyer <ganesh.vigneswara@gmail.com>
Date: Tue, 30 Mar 2021 21:30:49 +0530
Subject: [PATCH 389/788] Corrected a clarification based on the review

removed [ and ] in the command ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 \
  --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> \
  snapshot save <backup-file-location>
---
 .../en/docs/tasks/administer-cluster/configure-upgrade-etcd.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index f626d4d1b6..ffa688e1b7 100644
--- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -290,7 +290,7 @@ will list various options available from etcdctl. For example, you can take a sn
 the endpoint, certificates etc as shown below:
 
 ```shell
-ETCDCTL_API=3 etcdctl --endpoints=https://[127.0.0.1]:2379 \
+ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 \
   --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> \
   snapshot save <backup-file-location>
 ```

From 05cae37d5600537fbdd49cec72a234488fec856f Mon Sep 17 00:00:00 2001
From: xing-yang <xingyang105@gmail.com>
Date: Mon, 15 Mar 2021 04:44:44 +0000
Subject: [PATCH 390/788] Add doc for volume health monitoring

---
 .../storage/volume-health-monitoring.md       | 32 +++++++++++++++++++
 .../feature-gates.md                          |  4 ++-
 2 files changed, 35 insertions(+), 1 deletion(-)
 create mode 100644 content/en/docs/concepts/storage/volume-health-monitoring.md

diff --git a/content/en/docs/concepts/storage/volume-health-monitoring.md b/content/en/docs/concepts/storage/volume-health-monitoring.md
new file mode 100644
index 0000000000..d31778fdf8
--- /dev/null
+++ b/content/en/docs/concepts/storage/volume-health-monitoring.md
@@ -0,0 +1,32 @@
+---
+reviewers:
+- jsafrane
+- saad-ali
+- msau42
+- xing-yang
+--
+title: Volume Health Monitoring 
+content_type: concept
+---
+
+<!-- overview -->
+
+{{< glossary_tooltip text="CSI" term_id="csi" >}} volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on {{< glossary_tooltip text="PVCs" term_id="persistent-volume-claim" >}} or {{< glossary_tooltip text="Pods" term_id="pod" >}}.
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!-- body -->
+
+## Volume Health Monitoring
+
+The Volume Health Monitoring feature is part of Kubernetes implementation of Container Storage Interface (CSI). The Volume Health Monitoring feature is implemented in two components: External Health Monitor Controller and Kubelet.
+
+If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the PVC when an abnormal volume condition is detected on a CSI volume.
+
+External Health Monitor Controller will also watch for node failure events. This can be enabled by setting the `enable-node-watcher` flag to true. When a node failure event is detected, an event will be reported on the PVC to indicate that pods using this PVC are on a failed node.
+
+If a CSI Driver supports Volume Health Monitoring feature from the node side, an event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume.
+
+Note that you need to enable the `CSIVolumeHealth` feature gate to use this feature from the node side.
+
+See CSI driver [docs](https://kubernetes-csi.github.io/docs/drivers.html) to find out which CSI drivers have implemented this feature.
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index cf03d2212f..a6411f7c83 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -221,6 +221,7 @@ different Kubernetes components.
 | `CSIPersistentVolume` | `false` | Alpha | 1.9 | 1.9 |
 | `CSIPersistentVolume` | `true` | Beta | 1.10 | 1.12 |
 | `CSIPersistentVolume` | `true` | GA | 1.13 | - |
+| `CSIVolumeHealth` | `false` | Alpha | 1.21 | - |
 | `CustomPodDNS` | `false` | Alpha | 1.9 | 1.9 |
 | `CustomPodDNS` | `true` | Beta| 1.10 | 1.13 |
 | `CustomPodDNS` | `true` | GA | 1.14 | - |
@@ -370,7 +371,7 @@ different Kubernetes components.
 | `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
 | `TokenRequestProjection` | `true` | Beta | 1.12 | 1.19 |
 | `TokenRequestProjection` | `true` | GA | 1.20 | - |
-| `VolumeCapacityPriority` | `false` | Alpha | 1.21 | |
+| `VolumeCapacityPriority` | `false` | Alpha | 1.21 | - |
 | `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 |
 | `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | 1.19 |
 | `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
@@ -555,6 +556,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `CSIVolumeFSGroupPolicy`: Allows CSIDrivers to use the `fsGroupPolicy` field.
   This field controls whether volumes created by a CSIDriver support volume ownership
   and permission modifications when these volumes are mounted.
+- `CSIVolumeHealth`: Enable support for CSI volume health monitoring on node.
 - `ConfigurableFSGroupPolicy`: Allows user to configure volume permission change policy
   for fsGroups when mounting a volume in a Pod. See
   [Configure volume permission and ownership change policy for Pods](/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods)

From f98a672883538d32084979db2a0f1b6766adfcd7 Mon Sep 17 00:00:00 2001
From: Kenichi Omichi <ken-oomichi@wx.jp.nec.com>
Date: Tue, 30 Mar 2021 16:58:04 +0000
Subject: [PATCH 391/788] pl: Replace redirect links of kubeadm

/docs/reference/setup-tools/kubeadm/kubeadm/ is redirected to /docs/reference/setup-tools/kubeadm/
This replaces the redirect links of kubeadm with the direct links.

NOTE: The pull request for `en` language has been already merged as https://github.com/kubernetes/website/pull/26919
---
 content/pl/docs/reference/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/pl/docs/reference/_index.md b/content/pl/docs/reference/_index.md
index d598908162..fd4ab2bff3 100644
--- a/content/pl/docs/reference/_index.md
+++ b/content/pl/docs/reference/_index.md
@@ -33,7 +33,7 @@ biblioteki to:
 
 * [kubectl](/docs/reference/kubectl/overview/) - Główne narzędzie tekstowe (linii poleceń) do zarządzania klastrem Kubernetes.
   * [JSONPath](/docs/reference/kubectl/jsonpath/) - Podręcznik składni [wyrażeń JSONPath](https://goessner.net/articles/JsonPath/) dla kubectl.
-* [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) - Narzędzie tekstowe do łatwego budowania klastra Kubernetes spełniającego niezbędne wymogi bezpieczeństwa.
+* [kubeadm](/docs/reference/setup-tools/kubeadm/) - Narzędzie tekstowe do łatwego budowania klastra Kubernetes spełniającego niezbędne wymogi bezpieczeństwa.
 
 ## Dokumentacja komponentów
 

From 39c82936d90119c88b6a69354c55b21530f2b694 Mon Sep 17 00:00:00 2001
From: seokho-son <shsongist@gmail.com>
Date: Sat, 27 Mar 2021 18:34:09 +0900
Subject: [PATCH 392/788] Update outdated files in dev-1.20-ko.7 (p2)

---
 .../configure-redis-using-configmap.md        | 251 ++++++++++++++----
 .../expose/expose-intro.html                  |   2 +-
 .../expose-external-ip-address.md             |   2 +-
 .../stateless-application/guestbook.md        |   8 +-
 .../pods/config/example-redis-config.yaml     |   8 +
 5 files changed, 208 insertions(+), 63 deletions(-)
 create mode 100644 content/ko/examples/pods/config/example-redis-config.yaml

diff --git a/content/ko/docs/tutorials/configuration/configure-redis-using-configmap.md b/content/ko/docs/tutorials/configuration/configure-redis-using-configmap.md
index 34095ef424..c1b21d1404 100644
--- a/content/ko/docs/tutorials/configuration/configure-redis-using-configmap.md
+++ b/content/ko/docs/tutorials/configuration/configure-redis-using-configmap.md
@@ -1,22 +1,23 @@
 ---
-title: 컨피그 맵을 사용해서 Redis 설정하기
+
+
+
+title: 컨피그맵을 사용해서 Redis 설정하기
 content_type: tutorial
 ---
 
 <!-- overview -->
 
-이 페이지에서는 컨피그 맵을 사용해서 Redis를 설정하는 방법에 대한 실세계 예제를 제공하고, [컨피그 맵을 사용해서 컨테이너 설정하기](/docs/tasks/configure-pod-container/configure-pod-configmap/) 태스크로 빌드를 한다.
+이 페이지에서는 컨피그맵(ConfigMap)을 사용해서 Redis를 설정하는 방법에 대한 실세계 예제를 제공하고, [컨피그맵을 사용해서 컨테이너 설정하기](/docs/tasks/configure-pod-container/configure-pod-configmap/) 태스크로 빌드를 한다.
 
 
 
 ## {{% heading "objectives" %}}
 
 
-* 다음을 포함하는 `kustomization.yaml` 파일을 생성한다.
-  * 컨피그 맵 생성자
-  * 컨피그 맵을 사용하는 파드 리소스
-* `kubectl apply -k ./`를 실행하여 작업한 디렉터리를 적용한다.
-* 구성이 잘 적용되었는지 확인한다.
+* Redis 설정값으로 컨피그맵을 생성한다.
+* 생성된 컨피그맵을 마운트하고 사용하는 Redis 파드를 생성한다.
+* 설정이 잘 적용되었는지 확인한다.
 
 
 
@@ -26,91 +27,227 @@ content_type: tutorial
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 * 예시는 `kubectl` 1.14 이상 버전에서 동작한다.
-* [컨피그 맵을 사용해서 컨테이너 설정하기](/docs/tasks/configure-pod-container/configure-pod-configmap/)를 이해한다.
+* [컨피그맵을 사용해서 컨테이너 설정하기](/docs/tasks/configure-pod-container/configure-pod-configmap/)를 이해한다.
 
 
 
 <!-- lessoncontent -->
 
 
-## 실세상 예제: 컨피그 맵을 사용해서 Redis 설정하기
+## 실세상 예제: 컨피그맵을 사용해서 Redis 설정하기
 
-아래의 단계를 통해서 컨피그 맵에 저장된 데이터를 사용해서 Redis 캐시를 설정할 수 있다.
+아래 단계를 통해서, 컨피그맵에 저장된 데이터를 사용하는 Redis 캐시를 설정한다.
 
-첫째, `redis-config` 파일에서 컨피그 맵을 포함한 `kustomization.yaml`를 생성한다.
-
-{{< codenew file="pods/config/redis-config" >}}
+우선, 비어 있는 설정으로 컨피그맵을 생성한다.
 
 ```shell
-curl -OL https://k8s.io/examples/pods/config/redis-config
-
-cat <<EOF >./kustomization.yaml
-configMapGenerator:
-- name: example-redis-config
-  files:
-  - redis-config
+cat <<EOF >./example-redis-config.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-redis-config
+data:
+  redis-config: ""
 EOF
 ```
 
-`kustomization.yaml`에 파드 리소스 구성을 추가한다.
+위에서 생성한 컨피그맵을 Redis 파드 매니페스트와 함께 적용한다.
+
+```shell
+kubectl apply -f example-redis-config.yaml
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+```
+
+Redis 파드 매니페스트의 내용을 검토하고 다음의 사항을 염두에 둔다.
+
+* `config` 라는 이름의 볼륨은 `spec.volumes[1]` 에 의해서 생성된다.
+* `spec.volumes[1].items[0]` 내부의 `key` 와 `path` 는 `config` 볼륨에 `redis.conf` 라는 파일명으로 지정된
+  `example-redis-config` 컨피그맵의 `redis-config` 키를 노출시킨다.
+* 그리고 `config` 볼륨은 `spec.containers[0].volumeMounts[1]` 에 의해서 `/redis-master` 에 마운트된다.
+
+이 내용은 위의 `example-redis-config` 컨피그맵의 `data.redis-config` 내부 데이터를 파드 안에 있는
+`/redis-master/redis.conf` 파일의 내용으로 노출시키는 순효과(net effect)를 낸다.
 
 {{< codenew file="pods/config/redis-pod.yaml" >}}
 
-```shell
-curl -OL https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
-
-cat <<EOF >>./kustomization.yaml
-resources:
-- redis-pod.yaml
-EOF
-```
-
-컨피그 맵과 파드 오브젝트를 생성하도록 kustomization 디렉터리를 적용한다.
-
-```shell
-kubectl apply -k .
-```
-
 생성된 오브젝트를 확인한다.
-```shell
-> kubectl get -k .
-NAME                                        DATA   AGE
-configmap/example-redis-config-dgh9dg555m   1      52s
 
-NAME        READY   STATUS    RESTARTS   AGE
-pod/redis   1/1     Running   0          52s
+```shell
+kubectl get pod/redis configmap/example-redis-config
 ```
 
-이 예제에서는 설정 볼륨이 `/redis-master`에 마운트되어 있다.
-`redis-config` 키를 `redis.conf`라는 이름의 파일에 추가하기 위해 `path`를 사용한다.
-따라서, Redis 설정을 위한 파일 경로는 `/redis-master/redis.conf`이다.
-이곳이 이미지가 Redis 마스터를 위한 설정 파일을 찾는 곳이다.
+다음의 결과를 볼 수 있다.
 
-설정이 올바르게 적용되었는지 확인하기 위해서,
-`kubectl exec`를 사용해 파드 속에서 `redis-cli` 툴을 실행해 본다.
+```shell
+NAME        READY   STATUS    RESTARTS   AGE
+pod/redis   1/1     Running   0          8s
+
+NAME                             DATA   AGE
+configmap/example-redis-config   1      14s
+```
+
+`example-redis-config` 컨피그맵의 `redis-config` 키를 공란으로 둔 것을 기억하자.
+
+```shell
+kubectl describe configmap/example-redis-config
+```
+
+`redis-config` 키가 비어 있는 것을 확인할 수 있다.
+
+```shell
+Name:         example-redis-config
+Namespace:    default
+Labels:       <none>
+Annotations:  <none>
+
+Data
+====
+redis-config:
+```
+
+`kubectl exec` 를 사용하여 파드에 접속하고, 현재 설정 확인을 위해서 `redis-cli` 도구를 실행한다.
 
 ```shell
 kubectl exec -it redis -- redis-cli
+```
+
+`maxmemory` 를 확인한다.
+
+```shell
 127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+기본값인 0을 볼 수 있을 것이다.
+
+```shell
+1) "maxmemory"
+2) "0"
+```
+
+유사하게, `maxmemory-policy` 를 확인한다.
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+이것도 기본값인 `noeviction` 을 보여줄 것이다.
+
+```shell
+1) "maxmemory-policy"
+2) "noeviction"
+```
+
+이제 `example-redis-config` 컨피그맵에 몇 가지 설정값을 추가해 본다.
+
+{{< codenew file="pods/config/example-redis-config.yaml" >}}
+
+갱신된 컨피그맵을 적용한다.
+
+```shell
+kubectl apply -f example-redis-config.yaml
+```
+
+컨피그맵이 갱신된 것을 확인한다.
+
+```shell
+kubectl describe configmap/example-redis-config
+```
+
+방금 추가한 설정값을 확인할 수 있을 것이다.
+
+```shell
+Name:         example-redis-config
+Namespace:    default
+Labels:       <none>
+Annotations:  <none>
+
+Data
+====
+redis-config:
+----
+maxmemory 2mb
+maxmemory-policy allkeys-lru
+```
+
+설정이 적용되었는지 확인하려면, `kubectl exec` 를 통한 `redis-cli` 로 Redis 파드를 다시 확인한다.
+
+```shell
+kubectl exec -it redis -- redis-cli
+```
+
+`maxmemory` 를 확인한다.
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+기본값인 0을 볼 수 있을 것이다.
+
+```shell
+1) "maxmemory"
+2) "0"
+```
+
+유사하게, `maxmemory-policy` 도 기본 설정인 `noeviction` 을 보여줄 것이다.
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+위의 명령은 다음을 반환한다.
+
+```shell
+1) "maxmemory-policy"
+2) "noeviction"
+```
+
+파드는 연관된 컨피그맵에서 갱신된 값을 인지하기 위해서 재시작이 필요하므로
+해당 설정값이 변경되지 않은 상태이다. 파드를 삭제하고 다시 생성한다.
+
+```shell
+kubectl delete pod redis
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+```
+
+이제 마지막으로 설정값을 다시 확인해 본다.
+
+```shell
+kubectl exec -it redis -- redis-cli
+```
+
+`maxmemory` 를 확인한다.
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+이것은 이제 갱신된 값인 2097152를 반환한다.
+
+```shell
 1) "maxmemory"
 2) "2097152"
+```
+
+유사하게, `maxmemory-policy` 도 갱신되어 있다.
+
+```shell
 127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+이것은 원하는 값인 `allkeys-lru` 를 반환한다.
+
+```shell
 1) "maxmemory-policy"
 2) "allkeys-lru"
 ```
 
-생성된 파드를 삭제한다.
+생성된 자원을 삭제하여 작업을 정리한다.
+
 ```shell
-kubectl delete pod redis
+kubectl delete pod/redis configmap/example-redis-config
 ```
 
-
-
 ## {{% heading "whatsnext" %}}
 
 
-* [컨피그 맵](/docs/tasks/configure-pod-container/configure-pod-configmap/) 배우기.
-
-
-
-
+* [컨피그맵](/docs/tasks/configure-pod-container/configure-pod-configmap/) 배우기.
diff --git a/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html
index e44e68df85..aac6298a7a 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/expose/expose-intro.html
@@ -37,7 +37,7 @@ weight: 10
 				<li><i>ClusterIP</i> (기본값) - 클러스터 내에서 내부 IP 에 대해 서비스를 노출해준다. 이 방식은 오직 클러스터 내에서만 서비스가 접근될 수 있도록 해준다.</li>
 				<li><i>NodePort</i> - NAT가 이용되는 클러스터 내에서 각각 선택된 노드들의 동일한 포트에 서비스를 노출시켜준다. <code>&lt;NodeIP&gt;:&lt;NodePort&gt;</code>를 이용하여 클러스터 외부로부터 서비스가 접근할 수 있도록 해준다. ClusterIP의 상위 집합이다.</li>
 				<li><i>LoadBalancer</i> - (지원 가능한 경우) 기존 클라우드에서 외부용 로드밸런서를 생성하고 서비스에 고정된 공인 IP를 할당해준다. NodePort의 상위 집합이다. </li>
-				<li><i>ExternalName</i> - 이름으로 CNAME 레코드를 반환함으로써 임의의 이름(스펙에서 <code>externalName</code>으로 명시)을 이용하여 서비스를 노출시켜준다. 프록시는 사용되지 않는다. 이 방식은 <code>kube-dns</code> 버전 1.7 이상에서 지원 가능하다.</li>
+				<li><i>ExternalName</i> - <code>CNAME</code> 레코드 및 값을 반환함으로써 서비스를 <code>externalName</code> 필드의 내용(예를 들면, `foo.bar.example.com`)에 매핑한다. 어떠한 종류의 프록시도 설정되지 않는다. 이 방식은 <code>kube-dns</code> v1.7 이상 또는 CoreDNS 버전 0.0.8 이상을 필요로 한다.</li>
 			</ul>
 			<p>다른 서비스 타입들에 대한 추가 정보는 <a href="/ko/docs/tutorials/services/source-ip/">소스 IP 이용하기</a>  튜토리얼에서 확인 가능하다. 또한 <a href="/docs/concepts/services-networking/connect-applications-service">서비스들로 애플리케이션에 접속하기</a>도 참고해 보자.</p>
 			<p>부가적으로, spec에 <code>selector</code>를 정의하지 않고 말아넣은 서비스들의 몇 가지 유즈케이스들이 있음을 주의하자. <code>selector</code> 없이 생성된 서비스는 상응하는 엔드포인트 오브젝트들 또한 생성하지 않는다. 이로써 사용자들로 하여금 하나의 서비스를 특정한 엔드포인트에 매핑 시킬수 있도록 해준다. selector를 생략하게 되는 또 다른 가능성은 여러분이 <code>type: ExternalName</code>을 이용하겠다고 확고하게 의도하는 경우이다.</p>
diff --git a/content/ko/docs/tutorials/stateless-application/expose-external-ip-address.md b/content/ko/docs/tutorials/stateless-application/expose-external-ip-address.md
index a8a2c0653a..2b8ffff7ff 100644
--- a/content/ko/docs/tutorials/stateless-application/expose-external-ip-address.md
+++ b/content/ko/docs/tutorials/stateless-application/expose-external-ip-address.md
@@ -11,7 +11,7 @@ weight: 10
 
 ## {{% heading "prerequisites" %}}
 
- * [kubectl](/ko/docs/tasks/tools/install-kubectl/)을 설치한다.
+ * [kubectl](/ko/docs/tasks/tools/)을 설치한다.
  * Google Kubernetes Engine 또는 Amazon Web Services와 같은 클라우드 공급자를 사용하여
    쿠버네티스 클러스터를 생성한다. 이 튜토리얼은
    [외부 로드 밸런서](/docs/tasks/access-application-cluster/create-external-load-balancer/)를 생성하는데,
diff --git a/content/ko/docs/tutorials/stateless-application/guestbook.md b/content/ko/docs/tutorials/stateless-application/guestbook.md
index 24e05ab77f..04230b4f3e 100644
--- a/content/ko/docs/tutorials/stateless-application/guestbook.md
+++ b/content/ko/docs/tutorials/stateless-application/guestbook.md
@@ -1,5 +1,7 @@
 ---
 title: "예시: MongoDB를 사용한 PHP 방명록 애플리케이션 배포하기"
+
+
 content_type: tutorial
 weight: 20
 card:
@@ -15,8 +17,6 @@ min-kubernetes-server-version: v1.14
 * 방명록을 저장하는 단일 인스턴스 [MongoDB](https://www.mongodb.com/)
 * 여러 개의 웹 프론트엔드 인스턴스
 
-
-
 ## {{% heading "objectives" %}}
 
 * Mongo 데이터베이스를 시작
@@ -87,6 +87,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.ya
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
       ```
+
 <!--
 컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
 kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
@@ -103,7 +104,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
       ```shell
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP    1m
-      mongo          ClusterIP   10.0.0.151   <none>        6379/TCP   8s
+      mongo          ClusterIP   10.0.0.151   <none>        27017/TCP   8s
       ```
 
 {{< note >}}
@@ -289,7 +290,6 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.ya
       deployment.apps "mongo" deleted
       service "mongo" deleted
       deployment.apps "frontend" deleted
-      deployment.apps "frontend" deleted    
       service "frontend" deleted
       ```
 
diff --git a/content/ko/examples/pods/config/example-redis-config.yaml b/content/ko/examples/pods/config/example-redis-config.yaml
new file mode 100644
index 0000000000..5b093b1213
--- /dev/null
+++ b/content/ko/examples/pods/config/example-redis-config.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-redis-config
+data:
+  redis-config: |
+    maxmemory 2mb
+    maxmemory-policy allkeys-lru

From a7fdd1309029298e108f887ff07eb5f2c1564bc8 Mon Sep 17 00:00:00 2001
From: Indeed <indeed@indeed.moe>
Date: Tue, 9 Mar 2021 06:56:33 -0800
Subject: [PATCH 393/788] (KEP-2436) task: Controller Manager Leader Migration.

---
 .../controller-manager-leader-migration.md    | 118 ++++++++++++++++++
 1 file changed, 118 insertions(+)
 create mode 100644 content/en/docs/tasks/administer-cluster/controller-manager-leader-migration.md

diff --git a/content/en/docs/tasks/administer-cluster/controller-manager-leader-migration.md b/content/en/docs/tasks/administer-cluster/controller-manager-leader-migration.md
new file mode 100644
index 0000000000..8b141f9da0
--- /dev/null
+++ b/content/en/docs/tasks/administer-cluster/controller-manager-leader-migration.md
@@ -0,0 +1,118 @@
+---
+reviewers:
+- jpbetz
+- cheftako
+title: "Migrate Replicated Control Plane To Use Cloud Controller Manager"
+linkTitle: "Migrate Replicated Control Plane To Use Cloud Controller Manager"
+content_type: task
+---
+
+
+<!-- overview -->
+
+{{< feature-state state="alpha" for_k8s_version="v1.21" >}}
+
+{{< glossary_definition term_id="cloud-controller-manager" length="all" prepend="The cloud-controller-manager is">}}
+
+## Background
+
+As part of the [cloud provider extraction effort](https://kubernetes.io/blog/2019/04/17/the-future-of-cloud-providers-in-kubernetes/), all cloud specific controllers must be moved out of the `kube-controller-manager`. All existing clusters that run cloud controllers in the `kube-controller-manager` must migrate to instead run the controllers in a cloud provider specific `cloud-controller-manager`.
+
+Leader Migration provides a mechanism in which HA clusters can safely migrate "cloud specific" controllers between the `kube-controller-manager` and the `cloud-controller-manager` via a shared resource lock between the two components while upgrading the replicated control plane. For a single-node control plane, or if unavailability of controller managers can be tolerated during the upgrade, Leader Migration is not needed and this guide can be ignored.
+
+Leader Migration is an alpha feature that is disabled by default and it requires `--enable-leader-migration` to be set on controller managers. It can be enabled by setting the feature gate `ControllerManagerLeaderMigration` plus `--enable-leader-migration` on `kube-controller-manager` or `cloud-controller-manager`. Leader Migration only applies during the upgrade and can be safely disabled or left enabled after the upgrade is complete.
+
+This guide walks you through the manual process of upgrading the control plane from `kube-controller-manager` with built-in cloud provider to running both `kube-controller-manager` and `cloud-controller-manager`. If you use a tool to administrator the cluster, please refer to the documentation of the tool and the cloud provider for more details.
+
+## {{% heading "prerequisites" %}}
+
+It is assumed that the control plane is running Kubernetes version N and to be upgraded to version N + 1. Although it is possible to migrate within the same version, ideally the migration should be performed as part of a upgrade so that changes of configuration can be aligned to releases. The exact versions of N and N + 1 depend on each cloud provider. For example, if a cloud provider builds a `cloud-controller-manager` to work with Kubernetes 1.22, then N can be 1.21 and N + 1 can be 1.22.
+
+The control plane nodes should run `kube-controller-manager` with Leader Election enabled through `--leader-elect=true`. As of version N, an in-tree cloud privider must be set with `--cloud-provider` flag and `cloud-controller-manager` should not yet be deployed.
+
+The out-of-tree cloud provider must have built a `cloud-controller-manager` with Leader Migration implmentation. If the cloud provider imports `k8s.io/cloud-provider` and `k8s.io/controller-manager` of version v0.21.0 or later, Leader Migration will be avaliable.
+
+This guide assumes that kubelet of each control plane node starts `kube-controller-manager` and `cloud-controller-manager` as static pods defined by their manifests. If the components run in a different setting, please adjust the steps accordingly.
+
+For authorization, this guide assumes that the cluser uses RBAC. If another authorization mode grants permissions to `kube-controller-manager` and `cloud-controller-manager` components, please grant the needed access in a way that matches the mode.
+
+<!-- steps -->
+
+### Grant access to Migration Lease
+
+The default permissions of the controller manager allow only accesses to their main Lease. In order for the migration to work, accesses to another Lease are required.
+
+You can grant `kube-controller-manager` full access to the leases API by modifying the `system::leader-locking-kube-controller-manager` role. This task guide assumes that the name of the migration lease is `cloud-provider-extraction-migration`.
+
+`kubectl patch -n kube-system role 'system::leader-locking-kube-controller-manager' -p '{"rules": [ {"apiGroups":[ "coordination.k8s.io"], "resources": ["leases"], "resourceNames": ["cloud-provider-extraction-migration"], "verbs": ["create", "list", "get", "update"] } ]}' --type=merge`
+
+Do the same to the `system::leader-locking-cloud-controller-manager` role.
+
+`kubectl patch -n kube-system role 'system::leader-locking-cloud-controller-manager' -p '{"rules": [ {"apiGroups":[ "coordination.k8s.io"], "resources": ["leases"], "resourceNames": ["cloud-provider-extraction-migration"], "verbs": ["create", "list", "get", "update"] } ]}' --type=merge`
+
+### Initial Leader Migration configuration
+
+Leader Migration requires a configuration file representing the state of controller-to-manager assignment. At this moment, with in-tree cloud provider, `kube-controller-manager` runs `route`, `service`, and `cloud-node-lifecycle`. The following example configuration shows the assignment.
+
+```yaml
+kind: LeaderMigrationConfiguration
+apiVersion: controllermanager.config.k8s.io/v1alpha1
+leaderName: cloud-provider-extraction-migration
+resourceLock: leases
+controllerLeaders:
+  - name: route
+    component: kube-controller-manager
+  - name: service
+    component: kube-controller-manager
+  - name: cloud-node-lifecycle
+    component: kube-controller-manager
+```
+
+On each control plane node, save the content to `/etc/leadermigration.conf`, and update the manifest of `kube-controller-manager` so that the file is mounted inside the container at the same location. Also, update the same manifest to add the following arguments:
+
+- `--feature-gates=ControllerManagerLeaderMigration=true` to enable Leader Migration which is an alpha feature
+- `--enable-leader-migration` to enable Leader Migration on the controller manager
+- `--leader-migration-config=/etc/leadermigration.conf` to set configuration file
+
+Restart `kube-controller-manager` on each node. At this moment, `kube-controller-manager` has leader migration enabled and is ready for the migration.
+
+### Deploy Cloud Controller Manager
+
+In version N + 1, the desired state of controller-to-manager assignment can be represented by a new configuration file, shown as follows. Please note `component` field of each `controllerLeaders` changing from `kube-controller-manager` to `cloud-controller-manager`.
+
+```yaml
+kind: LeaderMigrationConfiguration
+apiVersion: controllermanager.config.k8s.io/v1alpha1
+leaderName: cloud-provider-extraction-migration
+resourceLock: leases
+controllerLeaders:
+  - name: route
+    component: cloud-controller-manager
+  - name: service
+    component: cloud-controller-manager
+  - name: cloud-node-lifecycle
+    component: cloud-controller-manager
+```
+
+When creating control plane nodes of version N + 1, the content should be deploy to `/etc/leadermigration.conf`. The manifest of `cloud-controller-manager` should be updated to mount the configuration file in the same manner as `kube-controller-manager` of version N. Similarly, add `--feature-gates=ControllerManagerLeaderMigration=true`,`--enable-leader-migration`, and `--leader-migration-config=/etc/leadermigration.conf` to the arguments of `cloud-controller-manager`.
+
+Create a new control plane node of version N + 1 with the updated `cloud-controller-manager` manifest, and with the `--cloud-provider` flag unset for `kube-controller-manager`. `kube-controller-manager` of version N + 1 MUST NOT have Leader Migration enabled because, with an external cloud provider, it does not run the migrated controllers anymore and thus it is not involved in the migration.
+
+Please refer to [Cloud Controller Manager Administration](/docs/tasks/administer-cluster/running-cloud-controller/) for more detail on how to deploy `cloud-controller-manager`.
+
+### Upgrade Control Plane
+
+The control plane now contains nodes of both version N and N + 1. The nodes of version N run `kube-controller-manager` only, and these of version N + 1 run both `kube-controller-manager` and `cloud-controller-manager`. The migrated controllers, as specified in the configuration, are running under either `kube-controller-manager` of version N or `cloud-controller-manager` of version N + 1 depending on which controller manager holds the migration lease. No controller will ever be running under both controller managers at any time.
+
+In a rolling manner, create a new control plane node of version N + 1 and bring down one of version N + 1 until the control plane contains only nodes of version N + 1.
+If a rollback from version N + 1 to N is required, add nodes of version N with Leader Migration enabled for `kube-controller-manager` back to the control plane, replacing one of version N + 1 each time until there are only nodes of version N.
+
+### (Optional) Disable Leader Migration {#disable-leader-migration}
+
+Now that the control plane has been upgraded to run both `kube-controller-manager` and `cloud-controller-manager` of version N + 1, Leader Migration has finished its job and can be safely disabled to save one Lease resource. It is safe to re-enable Leader Migration for the rollback in the future.
+
+In a rolling manager, update manifest of `cloud-controller-manager` to unset both `--enable-leader-migration` and `--leader-migration-config=` flag, also remove the mount of `/etc/leadermigration.conf`, and finally remove `/etc/leadermigration.conf`. To re-enable Leader Migration, recreate the configuration file and add its mount and the flags that enable Leader Migration back to `cloud-controller-manager`.
+
+## {{% heading "whatsnext" %}}
+
+- Read the [Controller Manager Leader Migration](https://github.com/kubernetes/enhancements/tree/master/keps/sig-cloud-provider/2436-controller-manager-leader-migration) enhancement proposal

From 063edc95c7e1b2c0221d9925509741f18c2d0fcd Mon Sep 17 00:00:00 2001
From: Indeed <indeed@indeed.moe>
Date: Tue, 30 Mar 2021 11:51:58 -0700
Subject: [PATCH 394/788] add link to leader migration

to the "cloud controller manager" concept.
---
 content/en/docs/concepts/architecture/cloud-controller.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/concepts/architecture/cloud-controller.md b/content/en/docs/concepts/architecture/cloud-controller.md
index d97fc94a4c..9b64289e82 100644
--- a/content/en/docs/concepts/architecture/cloud-controller.md
+++ b/content/en/docs/concepts/architecture/cloud-controller.md
@@ -206,6 +206,8 @@ rules:
 [Cloud Controller Manager Administration](/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager)
 has instructions on running and managing the cloud controller manager.
 
+To upgrade a HA control plane to use the cloud controller manager, see [Migrate Replicated Control Plane To Use Cloud Controller Manager](/docs/tasks/administer-cluster/controller-manager-leader-migration/).
+
 Want to know how to implement your own cloud controller manager, or extend an existing project?
 
 The cloud controller manager uses Go interfaces to allow implementations from any cloud to be plugged in. Specifically, it uses the `CloudProvider` interface defined in [`cloud.go`](https://github.com/kubernetes/cloud-provider/blob/release-1.17/cloud.go#L42-L62) from [kubernetes/cloud-provider](https://github.com/kubernetes/cloud-provider).

From f219e4e61aed79cdd3e925b2e4cff4bc122e1fe9 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Wed, 31 Mar 2021 01:49:46 +0300
Subject: [PATCH 395/788] [zh] update control-plane-flags.md to fix
 bind-address on scheduler

---
 .../production-environment/tools/kubeadm/control-plane-flags.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md b/content/zh/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
index 57bf6aa21d..5ee1199d64 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
@@ -130,7 +130,7 @@ kind: ClusterConfiguration
 kubernetesVersion: v1.16.0
 scheduler:
   extraArgs:
-    address: 0.0.0.0
+    bind-address: 0.0.0.0
     config: /home/johndoe/schedconfig.yaml
     kubeconfig: /home/johndoe/kubeconfig.yaml
 ```

From c3af732d1aada1b4e161521f6581eb310b9bc1aa Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Wed, 31 Mar 2021 00:53:04 +0100
Subject: [PATCH 396/788] Fix docs for volume health monitoring

---
 .../storage/volume-health-monitoring.md       | 25 +++++++++++--------
 1 file changed, 14 insertions(+), 11 deletions(-)

diff --git a/content/en/docs/concepts/storage/volume-health-monitoring.md b/content/en/docs/concepts/storage/volume-health-monitoring.md
index d31778fdf8..c5fb9c1929 100644
--- a/content/en/docs/concepts/storage/volume-health-monitoring.md
+++ b/content/en/docs/concepts/storage/volume-health-monitoring.md
@@ -4,29 +4,32 @@ reviewers:
 - saad-ali
 - msau42
 - xing-yang
---
-title: Volume Health Monitoring 
+title: Volume Health Monitoring
 content_type: concept
 ---
 
 <!-- overview -->
 
-{{< glossary_tooltip text="CSI" term_id="csi" >}} volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on {{< glossary_tooltip text="PVCs" term_id="persistent-volume-claim" >}} or {{< glossary_tooltip text="Pods" term_id="pod" >}}.
-
 {{< feature-state for_k8s_version="v1.21" state="alpha" >}}
 
+{{< glossary_tooltip text="CSI" term_id="csi" >}} volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on {{< glossary_tooltip text="PVCs" term_id="persistent-volume-claim" >}} or {{< glossary_tooltip text="Pods" term_id="pod" >}}.
+
 <!-- body -->
 
-## Volume Health Monitoring
+## Volume health monitoring
 
-The Volume Health Monitoring feature is part of Kubernetes implementation of Container Storage Interface (CSI). The Volume Health Monitoring feature is implemented in two components: External Health Monitor Controller and Kubelet.
+Kubernetes _volume health monitoring_ is part of how Kubernetes implements the Container Storage Interface (CSI). Volume health monitoring feature is implemented in two components: an External Health Monitor controller, and the {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}.
 
-If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the PVC when an abnormal volume condition is detected on a CSI volume.
+If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the related {{< glossary_tooltip text="PersistentVolumeClaim" term_id="persistent-volume-claim" >}} (PVC) when an abnormal volume condition is detected on a CSI volume.
 
-External Health Monitor Controller will also watch for node failure events. This can be enabled by setting the `enable-node-watcher` flag to true. When a node failure event is detected, an event will be reported on the PVC to indicate that pods using this PVC are on a failed node.
+The External Health Monitor {{< glossary_tooltip text="controller" term_id="controller" >}} also watches for node failure events. You can enable node failure monitoring by setting the `enable-node-watcher` flag to true. When the external health monitor detects a node failure event, the controller reports an Event will be reported on the PVC to indicate that pods using this PVC are on a failed node.
 
-If a CSI Driver supports Volume Health Monitoring feature from the node side, an event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume.
+If a CSI Driver supports Volume Health Monitoring feature from the node side, an Event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume.
 
-Note that you need to enable the `CSIVolumeHealth` feature gate to use this feature from the node side.
+{{< note >}}
+You need to enable the `CSIVolumeHealth` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to use this feature from the node side.
+{{< /note >}}
 
-See CSI driver [docs](https://kubernetes-csi.github.io/docs/drivers.html) to find out which CSI drivers have implemented this feature.
+## {{% heading "whatsnext" %}}
+
+See the [CSI driver documentation](https://kubernetes-csi.github.io/docs/drivers.html) to find out which CSI drivers have implemented this feature.

From fe2f1e2da68d8aea156285bad5150d76a0316056 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 30 Mar 2021 21:03:57 -0400
Subject: [PATCH 397/788] fixup rc text

---
 .../controllers/replicationcontroller.md      | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/content/en/docs/concepts/workloads/controllers/replicationcontroller.md b/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
index 9bfb1264a4..2b06539fd6 100644
--- a/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -54,7 +54,9 @@ Run the example job by downloading the example file and then running this comman
 ```shell
 kubectl apply -f https://k8s.io/examples/controllers/replication.yaml
 ```
+
 The output is similar to this:
+
 ```
 replicationcontroller/nginx created
 ```
@@ -64,7 +66,9 @@ Check on the status of the ReplicationController using this command:
 ```shell
 kubectl describe replicationcontrollers/nginx
 ```
+
 The output is similar to this:
+
 ```
 Name:        nginx
 Namespace:   default
@@ -103,7 +107,9 @@ To list all the pods that belong to the ReplicationController in a machine reada
 pods=$(kubectl get pods --selector=app=nginx --output=jsonpath={.items..metadata.name})
 echo $pods
 ```
+
 The output is similar to this:
+
 ```
 nginx-3ntk0 nginx-4ok8v nginx-qrm3m
 ```
@@ -117,7 +123,7 @@ specifies an expression with the name from each pod in the returned list.
 As with all other Kubernetes config, a ReplicationController needs `apiVersion`, `kind`, and `metadata` fields.
 The name of a ReplicationController object must be a valid
 [DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
-For general information about working with config files, see [object management ](/docs/concepts/overview/working-with-objects/object-management/).
+For general information about working with configuration files, see [object management](/docs/concepts/overview/working-with-objects/object-management/).
 
 A ReplicationController also needs a [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status).
 
@@ -139,7 +145,7 @@ for example the [Kubelet](/docs/reference/command-line-tools-reference/kubelet/)
 
 The ReplicationController can itself have labels (`.metadata.labels`).  Typically, you
 would set these the same as the `.spec.template.metadata.labels`; if `.metadata.labels` is not specified
-then it defaults to  `.spec.template.metadata.labels`.  However, they are allowed to be
+then it defaults to  `.spec.template.metadata.labels`. However, they are allowed to be
 different, and the `.metadata.labels` do not affect the behavior of the ReplicationController.
 
 ### Pod Selector
@@ -197,7 +203,7 @@ To update pods to a new spec in a controlled way, use a [rolling update](#rollin
 
 ### Isolating pods from a ReplicationController
 
-Pods may be removed from a ReplicationController's target set by changing their labels. This technique may be used to remove pods from service for debugging, data recovery, etc. Pods that are removed in this way will be replaced automatically (assuming that the number of replicas is not also changed).
+Pods may be removed from a ReplicationController's target set by changing their labels. This technique may be used to remove pods from service for debugging and data recovery. Pods that are removed in this way will be replaced automatically (assuming that the number of replicas is not also changed).
 
 ## Common usage patterns
 
@@ -207,8 +213,7 @@ As mentioned above, whether you have 1 pod you want to keep running, or 1000, a
 
 ### Scaling
 
-The ReplicationController scales the number of replicas up or down by setting the `replicas` field.
-You can configure the ReplicationController to manage the replicas manually or by an auto-scaling control agent.
+The ReplicationController enables scaling the number of replicas up or down, either manually or by an auto-scaling control agent, by updating the `replicas` field.
 
 ### Rolling updates
 
@@ -245,7 +250,6 @@ The ReplicationController is forever constrained to this narrow responsibility.
 
 The ReplicationController is intended to be a composable building-block primitive. We expect higher-level APIs and/or tools to be built on top of it and other complementary primitives for user convenience in the future. The "macro" operations currently supported by kubectl (run, scale) are proof-of-concept examples of this. For instance, we could imagine something like [Asgard](https://techblog.netflix.com/2012/06/asgard-web-based-cloud-management-and.html) managing ReplicationControllers, auto-scalers, services, scheduling policies, canaries, etc.
 
-
 ## API Object
 
 Replication controller is a top-level resource in the Kubernetes REST API. More details about the
@@ -260,7 +264,6 @@ API object can be found at:
 It's mainly used by [Deployment](/docs/concepts/workloads/controllers/deployment/) as a mechanism to orchestrate pod creation, deletion and updates.
 Note that we recommend using Deployments instead of directly using Replica Sets, unless you require custom update orchestration or don't require updates at all.
 
-
 ### Deployment (Recommended)
 
 [`Deployment`](/docs/concepts/workloads/controllers/deployment/) is a higher-level API object that updates its underlying Replica Sets and their Pods. Deployments are recommended if you want this rolling update functionality because, they are declarative, server-side, and have additional features.
@@ -284,5 +287,3 @@ safe to terminate when the machine is otherwise ready to be rebooted/shutdown.
 ## For more information
 
 Read [Run Stateless Application Deployment](/docs/tasks/run-application/run-stateless-application-deployment/).
-
-

From 5467cf82a0ddc9cd47452022458d1d8722e815dd Mon Sep 17 00:00:00 2001
From: Jim Angel <jameswangel@gmail.com>
Date: Tue, 30 Mar 2021 21:08:05 -0500
Subject: [PATCH 398/788] updating hugo

---
 netlify.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/netlify.toml b/netlify.toml
index da51edfc94..2d936d48f3 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -7,7 +7,7 @@ functions = "functions"
 command = "git submodule update --init --recursive --depth 1 && make non-production-build"
 
 [build.environment]
-HUGO_VERSION = "0.79.1"
+HUGO_VERSION = "0.82.0"
 NODE_VERSION = "10.20.0"
 RUBY_VERSION = "2.7.1"
 

From 2885caa95ce392c8e958e08b10bdf128c93a23c3 Mon Sep 17 00:00:00 2001
From: Jim Angel <jameswangel@gmail.com>
Date: Tue, 30 Mar 2021 21:14:20 -0500
Subject: [PATCH 399/788] adding header config for netlify

---
 netlify.toml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/netlify.toml b/netlify.toml
index da51edfc94..45d248d8c4 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -27,3 +27,10 @@ command = "git submodule update --init --recursive --depth 1 && make deploy-prev
 # DO NOT REMOVE THIS (contact @kubernetes/sig-docs-leads)
 publish = "public"
 command = "git submodule update --init --recursive --depth 1 && make production-build"
+
+# adding in headers to prevent clickjacking
+[[headers]]
+  for = "/*"
+  [headers.values]
+    X-Frame-Options = "DENY"
+    X-XSS-Protection = "1; mode=block"

From a11be7c52d555b3ef652978d4a342521ccd3cefc Mon Sep 17 00:00:00 2001
From: Kobayashi Daisuke <kobayashi.da-06@fujitsu.com>
Date: Wed, 31 Mar 2021 11:52:02 +0900
Subject: [PATCH 400/788] Update
 content/ja/docs/contribute/participate/_index.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/contribute/participate/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/participate/_index.md b/content/ja/docs/contribute/participate/_index.md
index 9e79bf0b98..c463dcaaca 100644
--- a/content/ja/docs/contribute/participate/_index.md
+++ b/content/ja/docs/contribute/participate/_index.md
@@ -70,7 +70,7 @@ Kubernetesプロジェクトは、GitHubのissueとPull Requestに関連する
 これらの2つのプラグインは`kubernetes.website`のGithubリポジトリのトップレベルにある
 [OWNERS](https://github.com/kubernetes/website/blob/master/OWNERS)ファイルと、
 [OWNERS_ALIASES](https://github.com/kubernetes/website/blob/master/OWNERS_ALIASES)ファイルを使用して、
-リポジトリ内でのplowの動作を制御します。
+リポジトリ内でのprowの動作を制御します。
 
 OWNERSファイルには、SIG Docsのレビュー担当者および承認者であるユーザーのリストが含まれています。 
 OWNERSファイルはサブディレクトリに存在することもでき、そのサブディレクトリとその子孫のファイルのレビュー担当者または承認者として機能できるユーザーを上書きできます。

From c8c2227d8c028ed30d826faae7fd038aba066f20 Mon Sep 17 00:00:00 2001
From: Kobayashi Daisuke <kobayashi.da-06@fujitsu.com>
Date: Wed, 31 Mar 2021 11:52:08 +0900
Subject: [PATCH 401/788] Update
 content/ja/docs/contribute/participate/_index.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/contribute/participate/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/participate/_index.md b/content/ja/docs/contribute/participate/_index.md
index c463dcaaca..6b71383710 100644
--- a/content/ja/docs/contribute/participate/_index.md
+++ b/content/ja/docs/contribute/participate/_index.md
@@ -87,7 +87,7 @@ Pull Requestがコンテンツの公開に使用されるブランチにマー
 公開されたコンテンツの品質を高くするために、Pull RequestのマージはSIG Docsの承認者に限定しています。仕組みは次のとおりです。
 
 - Pull Requestに`lgtm`ラベルと`approve`ラベルの両方があり、`hold`ラベルがなく、すべてのテストに合格すると、Pull Requestは自動的にマージされます。
-- Kubernetes organizationのメンバーとSIG Docsの承認者はコメントを追加して、特定のPull Requestが自動的にマージされないようにすることができます（`/hold`コメントを追加するか、`/lgtm`コメントを保留します）。
+- Kubernetes organizationのメンバーとSIG Docsの承認者はコメントを追加して、特定のPull Requestが自動的にマージされないようにすることができます(`/hold`コメントを追加するか、`/lgtm`コメントを保留します)。
 - Kubernetesメンバーは誰でも、`/lgtm`コメントを追加することで`lgtm`ラベルを追加できます。
 - `/approve`コメントを追加してPull Requestをマージできるのは、SIG Docsの承認者だけです。一部の承認者は、[PR Wrangler](/docs/contribute/participate/pr-wranglers/)や[SIG Docsのchairperson](#sig-docs-chairperson)など、追加の特定の役割も実行します。
 

From fea85c8611b44ff0a8536cabfd410259f3dc33e6 Mon Sep 17 00:00:00 2001
From: Kobayashi Daisuke <kobayashi.da-06@fujitsu.com>
Date: Wed, 31 Mar 2021 11:52:13 +0900
Subject: [PATCH 402/788] Update
 content/ja/docs/contribute/participate/_index.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/contribute/participate/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/participate/_index.md b/content/ja/docs/contribute/participate/_index.md
index 6b71383710..524b3b6bad 100644
--- a/content/ja/docs/contribute/participate/_index.md
+++ b/content/ja/docs/contribute/participate/_index.md
@@ -15,7 +15,7 @@ Kubernetes全体のドキュメントの作成、更新、および保守に重
 SIGの詳細については、[SIG DocsのGithubリポジトリ](https://github.com/kubernetes/community/blob/master/sig-list.md)を参照してください。
 
 SIG Docsは、すべての寄稿者からのコンテンツとレビューを歓迎します。
-誰でもPull Request（PR）を開くことができ、コンテンツに関するissueを提出したり、進行中のPull Requestにコメントしたりできます。
+誰でもPull Request(PR)を開くことができ、コンテンツに関するissueを提出したり、進行中のPull Requestにコメントしたりできます。
 
 あなたは、[member](/docs/contribute/participate/roles-and-responsibilities/#members)や、
 [reviewer](/docs/contribute/participate/roles-and-responsibilities/#reviewers)、

From 0565b3bca4163e64fef779596918d747dd8e6f3a Mon Sep 17 00:00:00 2001
From: KobayashiD27 <kobayashi.da-06@fujitsu.com>
Date: Wed, 31 Mar 2021 12:16:08 +0900
Subject: [PATCH 403/788] Fix the pointed out sentence

---
 content/ja/docs/contribute/participate/_index.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/contribute/participate/_index.md b/content/ja/docs/contribute/participate/_index.md
index 524b3b6bad..bf21148c40 100644
--- a/content/ja/docs/contribute/participate/_index.md
+++ b/content/ja/docs/contribute/participate/_index.md
@@ -46,9 +46,9 @@ SIG Docsの自動化は、GitHub teamsとOWNERSファイルの2つの異なる
 
 ### GitHub teams
 
-GitHubには、SIG Docs 
+GitHubには、二つのSIG Docs 
 [teams](https://github.com/orgs/kubernetes/teams?query=sig-docs)
-の二つのカテゴリがあります:
+カテゴリがあります:
 
 - `@sig-docs-{language}-owners`は承認者かつリードです。
 - `@sig-docs-{language}-reviewers` はレビュアーです。

From ae1650b2dbe5b1f392bc864656b59e23789472bc Mon Sep 17 00:00:00 2001
From: Luo Lan <luolanzone@gmail.com>
Date: Wed, 31 Mar 2021 15:28:47 +0800
Subject: [PATCH 404/788] add antrea in network addon list

---
 content/en/docs/concepts/cluster-administration/addons.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/concepts/cluster-administration/addons.md b/content/en/docs/concepts/cluster-administration/addons.md
index 8a356a826a..e194674d59 100644
--- a/content/en/docs/concepts/cluster-administration/addons.md
+++ b/content/en/docs/concepts/cluster-administration/addons.md
@@ -16,6 +16,7 @@ This page lists some of the available add-ons and links to their respective inst
 ## Networking and Network Policy
 
 * [ACI](https://www.github.com/noironetworks/aci-containers) provides integrated container networking and network security with Cisco ACI.
+* [Antrea](https://github.com/vmware-tanzu/antrea) operates at Layer 3/4 to provide networking and security services for Kubernetes, leveraging Open vSwitch as the networking data plane.
 * [Calico](https://docs.projectcalico.org/latest/introduction/) is a networking and network policy provider. Calico supports a flexible set of networking options so you can choose the most efficient option for your situation, including non-overlay and overlay networks, with or without BGP. Calico uses the same engine to enforce network policy for hosts, pods, and (if using Istio & Envoy) applications at the service mesh layer.
 * [Canal](https://github.com/tigera/canal/tree/master/k8s-install) unites Flannel and Calico, providing networking and network policy.
 * [Cilium](https://github.com/cilium/cilium) is a L3 network and network policy plugin that can enforce HTTP/API/L7 policies transparently. Both routing and overlay/encapsulation mode are supported, and it can work on top of other CNI plugins.

From f6d44d37acd60cfdf417a4f6241331a16810077b Mon Sep 17 00:00:00 2001
From: ooeunz <yuns994@gmail.com>
Date: Wed, 31 Mar 2021 16:56:27 +0900
Subject: [PATCH 405/788] Fixed broken link in
 content/en/blog/_posts/2019-11-26-cloud-native-java-controller-sdk.md

---
 .../blog/_posts/2019-11-26-cloud-native-java-controller-sdk.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2019-11-26-cloud-native-java-controller-sdk.md b/content/en/blog/_posts/2019-11-26-cloud-native-java-controller-sdk.md
index 2474d07a95..80926b6bc4 100644
--- a/content/en/blog/_posts/2019-11-26-cloud-native-java-controller-sdk.md
+++ b/content/en/blog/_posts/2019-11-26-cloud-native-java-controller-sdk.md
@@ -58,7 +58,7 @@ Take maven project as example, adding the following dependencies into your depen
 
 Then we can make use of the provided builder libraries to write your own controller.
 For example, the following one is a simple controller prints out node information
-on watch notification, see complete example [here](https://github.com/kubernetes-client/java/blob/master/examples/src/main/java/io/kubernetes/client/examples/ControllerExample.java):
+on watch notification, see complete example [here](https://github.com/kubernetes-client/java/blob/master/examples/examples-release-13/src/main/java/io/kubernetes/client/examples/ControllerExample.java):
 
 ```java
 ...

From bc9a3a215ed536428dfd03220b2b4245ad342117 Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Wed, 31 Mar 2021 19:27:20 +0800
Subject: [PATCH 406/788] Update kubespray.md

---
 content/zh/docs/setup/production-environment/tools/kubespray.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubespray.md b/content/zh/docs/setup/production-environment/tools/kubespray.md
index eabd14c7f5..3fcc0a6ef7 100644
--- a/content/zh/docs/setup/production-environment/tools/kubespray.md
+++ b/content/zh/docs/setup/production-environment/tools/kubespray.md
@@ -39,7 +39,7 @@ Kubespray 是一个由 [Ansible](https://docs.ansible.com/) playbooks、[清单
 * 支持大多数流行的 Linux 发行版
    * Ubuntu 16.04、18.04、20.04
    * CentOS / RHEL / Oracle Linux 7、8
-   * Debian Buster，Jessie，Stretch，Wheezy
+   * Debian Buster、Jessie、Stretch、Wheezy
    * Fedora 31、32
    * Fedora CoreOS
    * openSUSE Leap 15

From f9bacb20aee58f475947fec1115841bdadf494d3 Mon Sep 17 00:00:00 2001
From: Han Kang <hankang@google.com>
Date: Wed, 31 Mar 2021 04:33:00 -0700
Subject: [PATCH 407/788] add deprecation policy for k8s metrics (#27202)

* add deprecation policy for metrics

* Update content/en/docs/reference/using-api/deprecation-policy.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* amend stability language given review comments

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../reference/using-api/deprecation-policy.md | 43 ++++++++++++++++++-
 1 file changed, 41 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/using-api/deprecation-policy.md b/content/en/docs/reference/using-api/deprecation-policy.md
index 4de09ee82a..ef040b1b8c 100644
--- a/content/en/docs/reference/using-api/deprecation-policy.md
+++ b/content/en/docs/reference/using-api/deprecation-policy.md
@@ -301,7 +301,7 @@ Starting in Kubernetes v1.19, making an API request to a deprecated REST API end
 
 1. Returns a `Warning` header (as defined in [RFC7234, Section 5.5](https://tools.ietf.org/html/rfc7234#section-5.5)) in the API response.
 2. Adds a `"k8s.io/deprecated":"true"` annotation to the [audit event](/docs/tasks/debug-application-cluster/audit/) recorded for the request.
-3. Sets an `apiserver_requested_deprecated_apis` gauge metric to `1` in the `kube-apiserver` 
+3. Sets an `apiserver_requested_deprecated_apis` gauge metric to `1` in the `kube-apiserver`
    process. The metric has labels for `group`, `version`, `resource`, `subresource` that can be joined
    to the `apiserver_request_total` metric, and a `removed_release` label that indicates the
    Kubernetes release in which the API will no longer be served. The following Prometheus query
@@ -428,6 +428,46 @@ transitions a lifecycle stage as follows. Feature gates must function for no les
 is deprecated it must be documented in both in the release notes and the corresponding CLI help.
 Both warnings and documentation must indicate whether a feature gate is non-operational.**
 
+## Deprecating a metric
+
+Each component of the Kubernetes control-plane exposes metrics (usually the
+`/metrics` endpoint), which are typically ingested by cluster administrators.
+Not all metrics are the same: some metrics are commonly used as SLIs or used
+to determine SLOs, these tend to have greater import. Other metrics are more
+experimental in nature or are used primarily in the Kubernetes development
+process.
+
+Accordingly, metrics fall under two stability classes (`ALPHA` and `STABLE`);
+this impacts removal of a metric during a Kubernetes release. These classes
+are determined by the perceived importance of the metric. The rules for
+deprecating and removing a metric are as follows:
+
+**Rule #9a: Metrics, for the corresponding stability class, must function for no less than:**
+
+   * **STABLE: 4 releases or 12 months (whichever is longer)**
+   * **ALPHA: 0 releases**
+
+**Rule #9b: Metrics, after their _announced deprecation_, must function for no less than:**
+
+   * **STABLE: 3 releases or 9 months (whichever is longer)**
+   * **ALPHA: 0 releases**
+
+Deprecated metrics will have their description text prefixed with a deprecation notice
+string '(Deprecated from x.y)' and a warning log will be emitted during metric
+registration. Like their stable undeprecated counterparts, deprecated metrics will
+be automatically registered to the metrics endpoint and therefore visible.
+
+On a subsequent release (when the metric's deprecatedVersion is equal to
+_current_kubernetes_version - 3_)), a deprecated metric will become a _hidden_ metric.
+**_Unlike_** their deprecated counterparts, hidden metrics will _no longer_ be
+automatically registered to the metrics endpoint (hence hidden). However, they
+can be explicitly enabled through a command line flag on the binary
+(i.e. `--show-hidden-metrics-for-version=`). This provides cluster admins an
+escape hatch to properly migrate off of a deprecated metric, if they were not
+able to react to the earlier deprecation warnings. Hidden metrics should be
+deleted after one release.
+
+
 ## Exceptions
 
 No policy can cover every possible situation.  This policy is a living
@@ -438,4 +478,3 @@ leaders to find the best solutions for those specific cases, always bearing in
 mind that Kubernetes is committed to being a stable system that, as much as
 possible, never breaks users. Exceptions will always be announced in all
 relevant release notes.
-

From c50b15e44097bbd68c6dd158ad7e4a2caea5cbaf Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Wed, 31 Mar 2021 19:36:25 +0800
Subject: [PATCH 408/788] Update container-runtimes.md

---
 .../zh/docs/setup/production-environment/container-runtimes.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 99739e8b10..f93b9b4136 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -136,7 +136,7 @@ sudo sysctl --system
 -->
 本节包含使用 containerd 作为 CRI 运行时的必要步骤。
 
-使用以下命令在系统上安装容器：
+使用以下命令在系统上安装 Containerd：
 
 安装和配置的先决条件：
 

From b4f485a6b0b22cfd83fc44ca55598b4a3aa0fcda Mon Sep 17 00:00:00 2001
From: Francesco Romani <fromani@redhat.com>
Date: Wed, 31 Mar 2021 13:39:00 +0200
Subject: [PATCH 409/788] Actualize podresources 1.21 (#27203)

* Actuallize podresources description

This commit updates description according to
https://github.com/kubernetes/enhancements/pull/1884

Update content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md

Signed-off-by: Alexey Perevalov <alexey.perevalov@huawei.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>

* podresources: document the new feature gate

Signed-off-by: Francesco Romani <fromani@redhat.com>

* device plugins: add clarifications after review

- fix the AllocatableResourcesResponse comment
- describe the NUMA ID and explain the meaning of the field.

Signed-off-by: Francesco Romani <fromani@redhat.com>

Co-authored-by: Alexey Perevalov <alexey.perevalov@huawei.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../compute-storage-net/device-plugins.md     | 64 ++++++++++++++++++-
 .../feature-gates.md                          |  4 ++
 2 files changed, 65 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md b/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
index 8b1747b857..8f39284a96 100644
--- a/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
+++ b/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
@@ -193,9 +193,69 @@ for these devices:
 // node resources consumed by pods and containers on the node
 service PodResourcesLister {
     rpc List(ListPodResourcesRequest) returns (ListPodResourcesResponse) {}
+    rpc GetAllocatableResources(AllocatableResourcesRequest) returns (AllocatableResourcesResponse) {}
 }
 ```
 
+The `List` endpoint provides information on resources of running pods, with details such as the
+id of exclusively allocated CPUs, device id as it was reported by device plugins and id of
+the NUMA node where these devices are allocated.
+
+```gRPC
+// ListPodResourcesResponse is the response returned by List function
+message ListPodResourcesResponse {
+    repeated PodResources pod_resources = 1;
+}
+
+// PodResources contains information about the node resources assigned to a pod
+message PodResources {
+    string name = 1;
+    string namespace = 2;
+    repeated ContainerResources containers = 3;
+}
+
+// ContainerResources contains information about the resources assigned to a container
+message ContainerResources {
+    string name = 1;
+    repeated ContainerDevices devices = 2;
+    repeated int64 cpu_ids = 3;
+}
+
+// Topology describes hardware topology of the resource
+message TopologyInfo {
+        repeated NUMANode nodes = 1;
+}
+
+// NUMA representation of NUMA node
+message NUMANode {
+        int64 ID = 1;
+}
+
+// ContainerDevices contains information about the devices assigned to a container
+message ContainerDevices {
+    string resource_name = 1;
+    repeated string device_ids = 2;
+    TopologyInfo topology = 3;
+}
+```
+
+GetAllocatableResources provides information on resources initially available on the worker node.
+It provides more information than kubelet exports to APIServer.
+
+```gRPC
+// AllocatableResourcesResponses contains informations about all the devices known by the kubelet
+message AllocatableResourcesResponse {
+    repeated ContainerDevices devices = 1;
+    repeated int64 cpu_ids = 2;
+}
+
+```
+
+`ContainerDevices` do expose the topology information declaring to which NUMA cells the device is affine.
+The NUMA cells are identified using a opaque integer ID, which value is consistent to what device
+plugins report [when they register themselves to the kubelet](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#device-plugin-integration-with-the-topology-manager).
+
+
 The gRPC service is served over a unix socket at `/var/lib/kubelet/pod-resources/kubelet.sock`.
 Monitoring agents for device plugin resources can be deployed as a daemon, or as a DaemonSet.
 The canonical directory `/var/lib/kubelet/pod-resources` requires privileged access, so monitoring
@@ -204,7 +264,7 @@ DaemonSet, `/var/lib/kubelet/pod-resources` must be mounted as a
 {{< glossary_tooltip term_id="volume" >}} in the device monitoring agent's
 [PodSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core).
 
-Support for the "PodResources service" requires `KubeletPodResources` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be enabled.
+Support for the `PodResourcesLister service` requires `KubeletPodResources` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be enabled.
 It is enabled by default starting with Kubernetes 1.15 and is v1 since Kubernetes 1.20.
 
 ## Device Plugin integration with the Topology Manager
@@ -256,5 +316,3 @@ Here are some examples of device plugin implementations:
 * Learn about [advertising extended resources](/docs/tasks/administer-cluster/extended-resource-node/) on a node
 * Read about using [hardware acceleration for TLS ingress](https://kubernetes.io/blog/2019/04/24/hardware-accelerated-ssl/tls-termination-in-ingress-controllers-using-kubernetes-device-plugins-and-runtimeclass/) with Kubernetes
 * Learn about the [Topology Manager](/docs/tasks/administer-cluster/topology-manager/)
-
-
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index a6411f7c83..8caf95ef1c 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -137,6 +137,7 @@ different Kubernetes components.
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
 | `LogarithmicScaleDown` | `false` | Alpha | 1.21 | |
+| `KubeletPodResourcesGetAllocatable` | `false` | Alpha | 1.21 | |
 | `MixedProtocolLBService` | `false` | Alpha | 1.20 | |
 | `NamespaceDefaultLabelName` | `true` | Beta | 1.21 | |
 | `NetworkPolicyEndPort` | `false` | Alpha | 1.21 |  |
@@ -675,6 +676,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `KubeletPodResources`: Enable the kubelet's pod resources gRPC endpoint. See
   [Support Device Monitoring](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/606-compute-device-assignment/README.md)
   for more details.
+- `KubeletPodResourcesGetAllocatable`: Enable the kubelet's pod resources `GetAllocatableResources` functionality.
+  This API augments the [resource allocation reporting](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#monitoring-device-plugin-resources)
+  with informations about the allocatable resources, enabling clients to properly track the free compute resources on a node.
 - `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and
   node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the
   feature-specific labels provided by `NodeDisruptionExclusion` and `ServiceNodeExclusion`.

From 72d48798b00e3547e61a50607e3370c187748b8c Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Wed, 31 Mar 2021 19:41:33 +0800
Subject: [PATCH 410/788] Update high-availability.md

---
 .../production-environment/tools/kubeadm/high-availability.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
index b0247ec776..d03c1e7e76 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
@@ -30,7 +30,7 @@ control plane nodes and etcd members are separated.
 -->
 本文讲述了使用 kubeadm 设置一个高可用的 Kubernetes 集群的两种不同方式：
 
-- 使用堆控制平面节点。这种方法所需基础设施较少。etcd 成员和控制平面节点位于同一位置。
+- 使用具有堆叠的控制平面节点。这种方法所需基础设施较少。etcd 成员和控制平面节点位于同一位置。
 - 使用外部集群。这种方法所需基础设施较多。控制平面的节点和 etcd 成员是分开的。
 
 <!--

From 12b9296906c7a95b7b5eb5abc67ad18bff293322 Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Wed, 31 Mar 2021 19:52:39 +0800
Subject: [PATCH 411/788] Update kubelet-integration.md

---
 .../production-environment/tools/kubeadm/kubelet-integration.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
index 4dd6304c6d..aaf8caf3e1 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
@@ -96,7 +96,7 @@ clusterDNS:
 你可以通过使用 `kubeadm init` 和 `kubeadm join` 命令为 kubelet 提供默认值。
 有趣的示例包括使用其他 CRI 运行时或通过服务器设置不同的默认子网。
 
-如果你想使用子网 `10.96.0.0/12` 作为默认的服务，你可以给 kubeadm 传递 `--service-cidr` 参数：
+如果你想使用子网 `10.96.0.0/12` 作为services的默认网段，你可以给 kubeadm 传递 `--service-cidr` 参数：
 
 ```bash
 kubeadm init --service-cidr 10.96.0.0/12

From e77f73025627613844e1b974e3babfd4c1698a92 Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Wed, 31 Mar 2021 20:05:29 +0800
Subject: [PATCH 412/788] Update self-hosting.md

---
 .../setup/production-environment/tools/kubeadm/self-hosting.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md b/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
index d02d2b7a0c..97a366fd87 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
@@ -104,7 +104,7 @@ In summary, `kubeadm alpha selfhosting` works as follows:
     for secrets.
 -->
   2. 使用静态控制平面 Pod 清单来构造一组 DaemonSet 清单，这些清单将运行自托管的控制平面。
-     它还会在必要时修改这些清单，例如添加新的秘密卷。
+     它还会在必要时修改这些清单，例如添加新的 secrets 卷。
 
 <!--
   1. Creates DaemonSets in the `kube-system` namespace and waits for the

From 96ab2b0dacfd6232098ee6f31f6536bc21edaf9d Mon Sep 17 00:00:00 2001
From: bryan <fancc24@vip.qq.com>
Date: Wed, 31 Mar 2021 20:06:36 +0800
Subject: [PATCH 413/788] resolve some format erros

---
 .../docs/reference/access-authn-authz/bootstrap-tokens.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md b/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md
index 23538c8787..08b79a5d8d 100644
--- a/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md
+++ b/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md
@@ -43,7 +43,7 @@ Controller Manager.  The tokens are also used to create a signature for a
 specific ConfigMap used in a "discovery" process through a BootstrapSigner
 controller.
 -->
-启动引导令牌被定义成一个特定类型的 Secret （`bootstrap.kubernetes.io/token`），
+启动引导令牌被定义成一个特定类型的 Secret（`bootstrap.kubernetes.io/token`），
 并存在于 `kube-system` 名字空间中。
 这些 Secret 会被 API 服务器上的启动引导认证组件（Bootstrap Authenticator）读取。
 控制器管理器中的控制器 TokenCleaner 能够删除过期的令牌。
@@ -66,9 +66,9 @@ only be shared with trusted parties.
 启动引导令牌使用 `abcdef.0123456789abcdef` 的形式。
 更加规范地说，它们必须符合正则表达式 `[a-z0-9]{6}\.[a-z0-9]{16}`。
 
-令牌的第一部分是 "Token ID"，它是一种公开信息，用于引用令牌并确保不会
+令牌的第一部分是 “Token ID”，它是一种公开信息，用于引用令牌并确保不会
 泄露认证所使用的秘密信息。
-第二部分是"令牌秘密（Token Secret）"，它应该被共享给受信的第三方。
+第二部分是“令牌秘密（Token Secret）”，它应该被共享给受信的第三方。
 
 ## 启用启动引导令牌
 
@@ -275,7 +275,7 @@ verify the JWS using the `HS256` scheme (HMAC-SHA256) with the full token (e.g.
 `07401b.f395accd246ae52d`) as the shared secret.  Users _must_ verify that HS256
 is used.
 -->
-签名是一个使用 "detached" 模式生成的 JWS 签名。
+签名是一个使用 “detached” 模式生成的 JWS 签名。
 为了检验签名，用户应该按照 JWS 规则（base64 编码且丢掉结尾的 `=`）对
 `kubeconfig` 的载荷进行编码。完成编码的载荷会被插入到两个句点中间，形成完整的
 JWS。你可以使用完整的令牌（比如 `07401b.f395accd246ae52d`）作为共享密钥，

From d9bdc192a7e6e1afdfe7d4802bacffd08e442189 Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Wed, 31 Mar 2021 05:26:19 -0700
Subject: [PATCH 414/788] follow-up PR to update deprecation policy for k8s
 metrics originally in PR 27202

---
 content/en/docs/reference/using-api/deprecation-policy.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/using-api/deprecation-policy.md b/content/en/docs/reference/using-api/deprecation-policy.md
index ef040b1b8c..eed4341628 100644
--- a/content/en/docs/reference/using-api/deprecation-policy.md
+++ b/content/en/docs/reference/using-api/deprecation-policy.md
@@ -457,12 +457,12 @@ string '(Deprecated from x.y)' and a warning log will be emitted during metric
 registration. Like their stable undeprecated counterparts, deprecated metrics will
 be automatically registered to the metrics endpoint and therefore visible.
 
-On a subsequent release (when the metric's deprecatedVersion is equal to
+On a subsequent release (when the metric's `deprecatedVersion` is equal to
 _current_kubernetes_version - 3_)), a deprecated metric will become a _hidden_ metric.
 **_Unlike_** their deprecated counterparts, hidden metrics will _no longer_ be
 automatically registered to the metrics endpoint (hence hidden). However, they
 can be explicitly enabled through a command line flag on the binary
-(i.e. `--show-hidden-metrics-for-version=`). This provides cluster admins an
+(`--show-hidden-metrics-for-version=`). This provides cluster admins an
 escape hatch to properly migrate off of a deprecated metric, if they were not
 able to react to the earlier deprecation warnings. Hidden metrics should be
 deleted after one release.

From f03e3aca6299c196d50bc157d47cc9be3762b9d4 Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Wed, 31 Mar 2021 09:04:37 -0700
Subject: [PATCH 415/788] follow up csi migration of cinder vol plugin in PR
 26992

---
 content/en/docs/concepts/storage/volumes.md | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index cadcdfd1b5..696e03254e 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -218,9 +218,10 @@ It redirects all plugin operations from the existing in-tree plugin to the
 `cinder.csi.openstack.org` Container Storage Interface (CSI) Driver.
 [OpenStack Cinder CSI Driver](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)
 must be installed on the cluster.
-The feature can be disabled by un-setting `CSIMigrationOpenStack` beta feature
-gate. When disabled, in-tree Cinder volume plugin will be responsible for
-all storage related tasks, as it was in the previous Kubernetes releases.
+You can disable Cinder CSI migration for your cluster by setting the `CSIMigrationOpenStack` 
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to `false`.
+If you disable the `CSIMigrationOpenStack` feature, the in-tree Cinder volume plugin takes responsibility
+all aspects of Cinder volume storage management.
 
 ### configMap
 

From eea1c895acc3dd1941d72bf8ca42fcb87a7fd7c5 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Wed, 31 Mar 2021 19:31:02 +0100
Subject: [PATCH 416/788] Reinstate missing word

---
 content/en/docs/concepts/storage/volumes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 696e03254e..1386e836d6 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -221,7 +221,7 @@ must be installed on the cluster.
 You can disable Cinder CSI migration for your cluster by setting the `CSIMigrationOpenStack` 
 [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to `false`.
 If you disable the `CSIMigrationOpenStack` feature, the in-tree Cinder volume plugin takes responsibility
-all aspects of Cinder volume storage management.
+for all aspects of Cinder volume storage management.
 
 ### configMap
 

From 66cb8f917d13602a199873f82a655634854b71f3 Mon Sep 17 00:00:00 2001
From: Fangyuan Li <fangyuanl@vmware.com>
Date: Tue, 16 Mar 2021 17:20:08 -0700
Subject: [PATCH 417/788] Add documentation for Service InternalTrafficPolicy

---
 .../service-traffic-policy.md                 | 66 +++++++++++++++++++
 .../feature-gates.md                          |  2 +
 2 files changed, 68 insertions(+)
 create mode 100644 content/en/docs/concepts/services-networking/service-traffic-policy.md

diff --git a/content/en/docs/concepts/services-networking/service-traffic-policy.md b/content/en/docs/concepts/services-networking/service-traffic-policy.md
new file mode 100644
index 0000000000..d69610eabc
--- /dev/null
+++ b/content/en/docs/concepts/services-networking/service-traffic-policy.md
@@ -0,0 +1,66 @@
+---
+reviewers:
+- maplain
+title: Service Internal Traffic Policy
+content_type: concept
+---
+
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+_Service Internal Traffic Policy_ enables internal traffic restrictions to only route
+internal traffic to endpoints within the node the traffic originated from. The
+"internal" traffic here refers to traffic originated from Pods in the current
+cluster. This can help to reduce costs and improve performance.
+
+<!-- body -->
+
+## Using Service Internal Traffic Policy
+
+You can enable Internal Traffic Policy for a Service by setting the
+`spec.internalTrafficPolicy` to "Local". This tells kube-proxy to only use node
+local endpoints for cluster internal traffic. Importantly, for pods on nodes with
+no endpoints for a given Service, the Service will behave as if it has zero
+endpoints (for Pods on this node) even if the service does have endpoints on other
+nodes. 
+
+The following example shows what a Service looks like when internalTrafficPolicy
+is set to "Local":
+
+```yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: my-service
+spec:
+  selector:
+    app: MyApp
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 9376
+  internalTrafficPolicy: Local
+```
+
+## How it Works
+
+kube-proxy filters the endpoints it routes to based on the
+`spec.internalTrafficPolicy` setting. When it's "Local", only node local
+endpoints are considered. When it's "Cluster" or missing, all endpoints are
+considered.
+When the feature gate `ServiceInternalTrafficPolicy` is on,
+`spec.internalTrafficPolicy` defaults to "Cluster".
+
+## Constraints
+
+* Service Internal Traffic Policy is not used when `externalTrafficPolicy` is set
+  to "Local" on a Service. It is possible to use both features in the same cluster
+  on different Services, just not on the same Service.
+
+## {{% heading "whatsnext" %}}
+
+* Read about [enabling Topology Aware Hints](/docs/tasks/administer-cluster/enabling-topology-aware-hints)
+* Read about [Service External Traffic Policy](/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip)
+* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 5500c19412..aded7a0450 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -159,6 +159,7 @@ different Kubernetes components.
 | `SCTPSupport` | `true` | Beta | 1.19 | |
 | `ServerSideApply` | `false` | Alpha | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | Beta | 1.16 | |
+| `ServiceInternalTrafficPolicy` | `false` | Alpha | 1.21 | |
 | `ServiceLBNodePortControl` | `false` | Alpha | 1.20 | |
 | `ServiceNodeExclusion` | `false` | Alpha | 1.8 | 1.18 |
 | `ServiceNodeExclusion` | `true` | Beta | 1.19 | |
@@ -727,6 +728,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery)
   for more details.
 - `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints.
+- `ServiceInternalTrafficPolicy`: Enables the `InternalTrafficPolicy` field on Services
 - `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
   field on Services.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.

From c72828aadf385718e4a3886d92cfcc1b6718126d Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Thu, 1 Apr 2021 01:28:21 +0300
Subject: [PATCH 418/788] fix bind-address on scheduler

---
 .../production-environment/tools/kubeadm/control-plane-flags.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md b/content/fr/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
index 746602d8b4..34ae40d7cc 100644
--- a/content/fr/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
@@ -81,7 +81,7 @@ metadata:
   name: 1.13-sample
 scheduler:
   extraArgs:
-    address: 0.0.0.0
+    bind-address: 0.0.0.0
     config: /home/johndoe/schedconfig.yaml
     kubeconfig: /home/johndoe/kubeconfig.yaml
 ```

From b9ec368cfc1d6bb05764a5b20ddf8e25c5def131 Mon Sep 17 00:00:00 2001
From: Rob Scott <robertjscott@google.com>
Date: Fri, 12 Mar 2021 16:32:35 -0800
Subject: [PATCH 419/788] Adding documentation for Topology Aware Hints

---
 .../services-networking/service-topology.md   |  11 +-
 .../topology-aware-hints.md                   | 156 ++++++++++++++++++
 .../feature-gates.md                          |   5 +
 .../enabling-service-topology.md              |   7 +-
 .../enabling-topology-aware-hints.md          |  39 +++++
 5 files changed, 215 insertions(+), 3 deletions(-)
 create mode 100644 content/en/docs/concepts/services-networking/topology-aware-hints.md
 create mode 100644 content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md

diff --git a/content/en/docs/concepts/services-networking/service-topology.md b/content/en/docs/concepts/services-networking/service-topology.md
index d36b76f55f..1278e89dcd 100644
--- a/content/en/docs/concepts/services-networking/service-topology.md
+++ b/content/en/docs/concepts/services-networking/service-topology.md
@@ -15,7 +15,16 @@ weight: 10
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.17" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
+
+{{< note >}}
+
+This feature, specifically the alpha topologyKeys API, is deprecated in
+Kubernetes v1.21. [Topology Aware
+Hints](/docs/concepts/services-networking/topology-aware-hints) was introduced
+in Kubernetes v1.21 and provides similar functionality.
+
+{{</ note >}}
 
 _Service Topology_ enables a service to route traffic based upon the Node
 topology of the cluster. For example, a service can specify that traffic be
diff --git a/content/en/docs/concepts/services-networking/topology-aware-hints.md b/content/en/docs/concepts/services-networking/topology-aware-hints.md
new file mode 100644
index 0000000000..ef1d3217c8
--- /dev/null
+++ b/content/en/docs/concepts/services-networking/topology-aware-hints.md
@@ -0,0 +1,156 @@
+---
+reviewers:
+- robscott
+title: Topology Aware Hints
+content_type: concept
+weight: 10
+---
+
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+_Topology Aware Hints_ enable topology aware routing by including suggestions
+for how clients should consume endpoints. This approach adds metadata to enable
+consumers of Endpoint(Slice) to be able to route traffic closer to where it is
+originated. For example, users can route traffic within a locality to reduce
+costs and improve performance.
+
+<!-- body -->
+
+## Motivation
+
+Kubernetes clusters are increasingly deployed in multi-zone environments.
+_Topology Aware Hints_ provides a mechanism to help keep traffic within the zone
+it originated from. This concept is commonly referred to as "Topology Aware
+Routing". When calculating the endpoints for a Service, the EndpointSlice
+controller considers the topology (region and zone) of each endpoint and
+populates the hints field to allocate it to a zone. These hints are then
+consumed by components like kube-proxy as they configure how requests are
+routed.
+
+## Using Topology Aware Hints
+
+You can enable Topology Aware Hints for a Service by setting the
+`service.kubernetes.io/topology-aware-hints` annotation to `auto`. This tells
+the EndpointSlice controller to set topology hints if it is deemed safe.
+Importantly, this does not guarantee that hints will always be set.
+
+## How it Works
+
+The functionality enabling this feature is split into two components: The
+EndpointSlice controller and Kube-Proxy. This provides a high level overview of
+how each component implements this feature.
+
+### EndpointSlice controller
+
+The EndpointSlice controller is responsible for setting hints on EndpointSlices
+when this feature is enabled. The controller allocates a proportional amount of
+endpoints to each zone. This proportion is based on the
+[allocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)
+CPU cores for nodes running in that zone. For example, if one zone had 2 CPU
+cores and another zone only had 1 CPU core, the controller would allocated twice
+as many endpoints to the zone with 2 CPU cores.
+
+The following example shows what an EndpointSlice looks like when hints have
+been populated:
+
+```yaml
+apiVersion: discovery.k8s.io/v1
+kind: EndpointSlice
+metadata:
+  name: example-hints
+  labels:
+    kubernetes.io/service-name: example-svc
+addressType: IPv4
+ports:
+  - name: http
+    protocol: TCP
+    port: 80
+endpoints:
+  - addresses:
+      - "10.1.2.3"
+    conditions:
+      ready: true
+    hostname: pod-1
+    zone: zone-a
+    hints:
+      forZones:
+        - name: "zone-a"
+```
+
+### Kube-Proxy
+
+Kube-Proxy filters the endpoints it routes to based on the hints set by the
+EndpointSlice controller. In most cases, this means that kube-proxy will route
+to endpoints in the same zone. Sometimes the controller allocates endpoints from
+a different zone to ensure more even distribution of endpoints between zones.
+This would result in some traffic being routed to other zones.
+
+## Safeguards
+
+The Kubernetes control plane and the kube-proxy on each node apply some
+safeguard rules before using Topology Aware Hints. If these don't check out,
+kube-proxy selects endpoints from anywhere in your cluster, regardless of the
+zone.
+
+1. **Insufficient number of endpoints:** If there are less endpoints than zones
+   in a cluster, the controller will not assign any hints. 
+
+2. **Impossible to achieve balanced allocation:** In some cases, it will be
+   impossible to achieve a balanced allocation of endpoints among zones. For
+   example, if zone-a is twice as large as zone-b, but there are only 2
+   endpoints, an endpoint allocated to zone-a may receive twice as much traffic
+   as zone-b. The controller wil not assign hints if it can't get this "expected
+   overload" value below an acceptable threshold for each zone. Importantly this
+   is not based on real-time feedback. It is still possible for individual
+   endpoints to become overloaded.
+
+3. **One or more Nodes has insufficient information:** If any node does not have
+   a `topology.kubernetes.io/zone` label or is not reporting a value for
+   allocatable CPU, the control plane does not set any topology-aware endpoint
+   hints and so kube-proxy does not filter endpoints by zone.
+
+4. **One or more endpoints does not have a zone hint:** When this happens,
+   kube-proxy assumes that a transition from or to Topology Aware Hints is
+   underway. Filtering endpoints for a Service in this state would be dangerous
+   so Kube-Proxy falls back to using all endpoints.
+
+5. **A zone is not represented in hints:** If kube-proxy is unable to find at
+   least one endpoint with a hint targeting the zone it is running in, it will
+   fall back to using endpoints from all zones. This is most likely to happen as
+   a new zone is being added to a cluster.
+
+## Constraints
+
+* Topology Aware Hints are not used when either `externalTrafficPolicy` or
+  `internalTrafficPolicy` is set to `Local` on a Service. It is possible to use
+  both features in the same cluster on different Services, just not on the same
+  Service.
+
+* This approach will not work well for Services that have a large proportion of
+  traffic originating from a subset of zones. Instead this assumes that incoming
+  traffic will be roughly proportional to the capacity of the Nodes in each
+  zone.
+
+* The EndpointSlice controller ignores unready nodes as it calculates the
+  proportions of each zone. This could have unintended consequences if a large
+  portion of nodes are unready.
+
+* The EndpointSlice controller does not take into account {{< glossary_tooltip
+  text="tolerations" term_id="toleration" >}} when deploying calculating the
+  proportions of each zone. If the Pods backing a Service are limited to a
+  subset of Nodes in the cluster, this will not be taken into account.
+
+* This may not work well with autoscaling. For example, if a lot of traffic is
+  originating from a single zone, only the endpoints allocated to that zone will
+  be handling that traffic. That could result in {{< glossary_tooltip
+  text="Horizontal Pod Autoscaler" term_id="horizontal-pod-autoscaler" >}}
+  either not picking up on this event, or newly added pods starting in a
+  different zone.
+
+## {{% heading "whatsnext" %}}
+
+* Read about [enabling Topology Aware Hints](/docs/tasks/administer-cluster/enabling-topology-aware-hints)
+* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 08ef19c068..75edfc135b 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -171,6 +171,7 @@ different Kubernetes components.
 | `StorageVersionHash` | `true` | Beta | 1.15 | |
 | `Sysctls` | `true` | Beta | 1.11 | |
 | `TTLAfterFinished` | `false` | Alpha | 1.12 | |
+| `TopologyAwareHints` | `false` | Alpha | 1.21 | |
 | `TopologyManager` | `false` | Alpha | 1.16 | 1.17 |
 | `TopologyManager` | `true` | Beta | 1.18 | |
 | `ValidateProxyRedirects` | `false` | Alpha | 1.12 | 1.13 |
@@ -779,6 +780,10 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `TokenRequest`: Enable the `TokenRequest` endpoint on service account resources.
 - `TokenRequestProjection`: Enable the injection of service account tokens into a
   Pod through a [`projected` volume](/docs/concepts/storage/volumes/#projected).
+- `TopologyAwareHints`: Enables topology aware routing based on topology hints
+  in EndpointSlices. See [Topology Aware
+  Hints](/docs/concepts/services-networking/topology-aware-hints/) for more
+  details.
 - `TopologyManager`: Enable a mechanism to coordinate fine-grained hardware resource
   assignments for different components in Kubernetes. See
   [Control Topology Management Policies on a node](/docs/tasks/administer-cluster/topology-manager/).
diff --git a/content/en/docs/tasks/administer-cluster/enabling-service-topology.md b/content/en/docs/tasks/administer-cluster/enabling-service-topology.md
index 998bb8b2e5..6043c9fdec 100644
--- a/content/en/docs/tasks/administer-cluster/enabling-service-topology.md
+++ b/content/en/docs/tasks/administer-cluster/enabling-service-topology.md
@@ -8,9 +8,12 @@ content_type: task
 ---
 
 <!-- overview -->
-This page provides an overview of enabling Service Topology in Kubernetes.
-
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
 
+This feature, specifically the alpha topologyKeys API, is deprecated in
+Kubernetes v1.21. [Topology Aware
+Hints](/docs/concepts/services-networking/topology-aware-hints) was introduced
+in Kubernetes v1.21 and provides similar functionality.
 
 ## {{% heading "prerequisites" %}}
 
diff --git a/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md b/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
new file mode 100644
index 0000000000..4222738a4f
--- /dev/null
+++ b/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
@@ -0,0 +1,39 @@
+---
+reviewers:
+- robscott
+title: Enabling Topology Aware Hints
+content_type: task
+min-kubernetes-server-version: 1.21
+---
+
+<!-- overview -->
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+_Topology Aware Hints_ enable topology aware routing with topology hints
+included in EndpointSlices. This approach tries to keep traffic close to where
+it originated from. This can result in decreased costs and improved performance.
+
+## {{% heading "prerequisites" %}}
+
+  {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+The following prerequisite is needed in order to enable topology aware hints:
+
+* {{< glossary_tooltip text="Kube-proxy" term_id="kube-proxy" >}} running in
+  iptables mode or IPVS mode
+* Ensure that you have not disabled EndpointSlices
+
+## Enable Topology Aware Hints
+
+To enable service topology, enable the `TopologyAwareHints` [feature
+gate](docs/reference/command-line-tools-reference/feature-gates/) for the
+kube-apiserver, kube-controller-manager, and kube-proxy:
+
+```
+--feature-gates="TopologyAwareHints=true"
+```
+
+## {{% heading "whatsnext" %}}
+
+* Read about [Topology Aware Hints](/docs/concepts/services-networking/topology-aware-hints) for Services
+* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)

From 0d7d7470dd22af023e64e8d278bbf22d53aacce6 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 17 Feb 2021 20:44:43 +0800
Subject: [PATCH 420/788] Add kube-proxy config reference

This is a reference for kube-proxy config generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

./genref -include kube-proxy
---
 .../concepts/services-networking/service.md   |  13 +-
 content/en/docs/reference/_index.md           |  13 +-
 .../en/docs/reference/config-api/_index.md    |   5 +
 .../config-api/kube-proxy-config.v1alpha1.md  | 537 ++++++++++++++++++
 .../setup-tools/kubeadm/kubeadm-init.md       |   2 +-
 5 files changed, 561 insertions(+), 9 deletions(-)
 create mode 100644 content/en/docs/reference/config-api/_index.md
 create mode 100644 content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index b7a7edcd38..3ac07138e0 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -513,8 +513,13 @@ allocates a port from a range specified by `--service-node-port-range` flag (def
 Each node proxies that port (the same port number on every Node) into your Service.
 Your Service reports the allocated port in its `.spec.ports[*].nodePort` field.
 
-If you want to specify particular IP(s) to proxy the port, you can set the `--nodeport-addresses` flag in kube-proxy to particular IP block(s); this is supported since Kubernetes v1.10.
-This flag takes a comma-delimited list of IP blocks (e.g. 10.0.0.0/8, 192.0.2.0/25) to specify IP address ranges that kube-proxy should consider as local to this node.
+If you want to specify particular IP(s) to proxy the port, you can set the
+`--nodeport-addresses` flag for kube-proxy or the equivalent `nodePortAddresses`
+field of the
+[kube-proxy configuration file](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
+to particular IP block(s).
+
+This flag takes a comma-delimited list of IP blocks (e.g. `10.0.0.0/8`, `192.0.2.0/25`) to specify IP address ranges that kube-proxy should consider as local to this node.
 
 For example, if you start kube-proxy with the `--nodeport-addresses=127.0.0.0/8` flag, kube-proxy only selects the loopback interface for NodePort Services. The default for `--nodeport-addresses` is an empty list. This means that kube-proxy should consider all available network interfaces for NodePort. (That's also compatible with earlier Kubernetes releases).
 
@@ -530,7 +535,9 @@ to configure environments that are not fully supported by Kubernetes, or even
 to just expose one or more nodes' IPs directly.
 
 Note that this Service is visible as `<NodeIP>:spec.ports[*].nodePort`
-and `.spec.clusterIP:spec.ports[*].port`. (If the `--nodeport-addresses` flag in kube-proxy is set, <NodeIP> would be filtered NodeIP(s).)
+and `.spec.clusterIP:spec.ports[*].port`.
+If the `--nodeport-addresses` flag for kube-proxy or the equivalent field
+in the kube-proxy configuration file is set, `<NodeIP>` would be filtered node IP(s).
 
 For example:
 
diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index a261b8a947..00adcad7d7 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -54,14 +54,17 @@ client libraries:
 * [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - The primary *node agent* that runs on each node. The kubelet takes a set of PodSpecs and ensures that the described containers are running and healthy.
 * [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) - REST API that validates and configures data for API objects such as  pods, services, replication controllers.
 * [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) - Daemon that embeds the core control loops shipped with Kubernetes.
-* [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - Can do simple TCP/UDP stream forwarding or round-robin TCP/UDP forwarding across a set of back-ends.
-* [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - Scheduler that manages availability, performance, and capacity.  
+* [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - Can
+  do simple TCP/UDP stream forwarding or round-robin TCP/UDP forwarding across
+  a set of back-ends.
+* [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - Scheduler that manages availability, performance, and capacity.
   
-## Scheduling
+  * [Scheduler Policies](/docs/reference/scheduling/policies)
+  * [Scheduler Profiles](/docs/reference/scheduling/config#profiles)
 
-* [Scheduler Policies](/docs/reference/scheduling/policies)
-* [Scheduler Profiles](/docs/reference/scheduling/config#profiles)
+## Config APIs
 
+* [kube-proxy configuration (v1alpha1)](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
 
 ## Design Docs
 
diff --git a/content/en/docs/reference/config-api/_index.md b/content/en/docs/reference/config-api/_index.md
new file mode 100644
index 0000000000..a053b77d60
--- /dev/null
+++ b/content/en/docs/reference/config-api/_index.md
@@ -0,0 +1,5 @@
+---
+title: Configuration APIs 
+weight: 65
+---
+
diff --git a/content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md b/content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md
new file mode 100644
index 0000000000..e66bcd7443
--- /dev/null
+++ b/content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md
@@ -0,0 +1,537 @@
+---
+title: kube-proxy Configuration (v1alpha1)
+content_type: tool-reference
+package: kubeproxy.config.k8s.io/v1alpha1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+  
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+  
+    
+
+
+## `KubeProxyConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration}
+    
+
+
+
+
+KubeProxyConfiguration contains everything necessary to configure the
+Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubeproxy.config.k8s.io/v1alpha1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>KubeProxyConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td><code>featureGates</code> <B>[Required]</B><br/>
+<code>map[string]bool</code>
+</td>
+<td>
+   featureGates is a map of feature names to bools that enable or disable alpha/experimental features.</td>
+</tr>
+    
+  
+<tr><td><code>bindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   bindAddress is the IP address for the proxy server to serve on (set to 0.0.0.0
+for all interfaces)</td>
+</tr>
+    
+  
+<tr><td><code>healthzBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   healthzBindAddress is the IP address and port for the health check server to serve on,
+defaulting to 0.0.0.0:10256</td>
+</tr>
+    
+  
+<tr><td><code>metricsBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   metricsBindAddress is the IP address and port for the metrics server to serve on,
+defaulting to 127.0.0.1:10249 (set to 0.0.0.0 for all interfaces)</td>
+</tr>
+    
+  
+<tr><td><code>bindAddressHardFail</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   bindAddressHardFail, if true, kube-proxy will treat failure to bind to a port as fatal and exit</td>
+</tr>
+    
+  
+<tr><td><code>enableProfiling</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableProfiling enables profiling via web interface on /debug/pprof handler.
+Profiling handlers will be handled by metrics server.</td>
+</tr>
+    
+  
+<tr><td><code>clusterCIDR</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   clusterCIDR is the CIDR range of the pods in the cluster. It is used to
+bridge traffic coming from outside of the cluster. If not provided,
+no off-cluster bridging will be performed.</td>
+</tr>
+    
+  
+<tr><td><code>hostnameOverride</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   hostnameOverride, if non-empty, will be used as the identity instead of the actual hostname.</td>
+</tr>
+    
+  
+<tr><td><code>clientConnection</code> <B>[Required]</B><br/>
+<a href="#ClientConnectionConfiguration"><code>ClientConnectionConfiguration</code></a>
+</td>
+<td>
+   clientConnection specifies the kubeconfig file and client connection settings for the proxy
+server to use when communicating with the apiserver.</td>
+</tr>
+    
+  
+<tr><td><code>iptables</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPTablesConfiguration"><code>KubeProxyIPTablesConfiguration</code></a>
+</td>
+<td>
+   iptables contains iptables-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>ipvs</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPVSConfiguration"><code>KubeProxyIPVSConfiguration</code></a>
+</td>
+<td>
+   ipvs contains ipvs-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>oomScoreAdj</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   oomScoreAdj is the oom-score-adj value for kube-proxy process. Values must be within
+the range [-1000, 1000]</td>
+</tr>
+    
+  
+<tr><td><code>mode</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-ProxyMode"><code>ProxyMode</code></a>
+</td>
+<td>
+   mode specifies which proxy mode to use.</td>
+</tr>
+    
+  
+<tr><td><code>portRange</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   portRange is the range of host ports (beginPort-endPort, inclusive) that may be consumed
+in order to proxy service traffic. If unspecified (0-0) then ports will be randomly chosen.</td>
+</tr>
+    
+  
+<tr><td><code>udpIdleTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   udpIdleTimeout is how long an idle UDP connection will be kept open (e.g. '250ms', '2s').
+Must be greater than 0. Only applicable for proxyMode=userspace.</td>
+</tr>
+    
+  
+<tr><td><code>conntrack</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConntrackConfiguration"><code>KubeProxyConntrackConfiguration</code></a>
+</td>
+<td>
+   conntrack contains conntrack-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>configSyncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   configSyncPeriod is how often configuration from the apiserver is refreshed. Must be greater
+than 0.</td>
+</tr>
+    
+  
+<tr><td><code>nodePortAddresses</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   nodePortAddresses is the --nodeport-addresses value for kube-proxy process. Values must be valid
+IP blocks. These values are as a parameter to select the interfaces where nodeport works.
+In case someone would like to expose a service on localhost for local visit and some other interfaces for
+particular purpose, a list of IP blocks would do that.
+If set it to "127.0.0.0/8", kube-proxy will only select the loopback interface for NodePort.
+If set it to a non-zero IP block, kube-proxy will filter that down to just the IPs that applied to the node.
+An empty string slice is meant to select all network interfaces.</td>
+</tr>
+    
+  
+<tr><td><code>winkernel</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyWinkernelConfiguration"><code>KubeProxyWinkernelConfiguration</code></a>
+</td>
+<td>
+   winkernel contains winkernel-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>showHiddenMetricsForVersion</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ShowHiddenMetricsForVersion is the version for which you want to show hidden metrics.</td>
+</tr>
+    
+  
+<tr><td><code>detectLocalMode</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-LocalMode"><code>LocalMode</code></a>
+</td>
+<td>
+   DetectLocalMode determines mode to use for detecting local traffic, defaults to LocalModeClusterCIDR</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyConntrackConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConntrackConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyConntrackConfiguration contains conntrack settings for
+the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>maxPerCore</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   maxPerCore is the maximum number of NAT connections to track
+per CPU core (0 to leave the limit as-is and ignore min).</td>
+</tr>
+    
+  
+<tr><td><code>min</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   min is the minimum value of connect-tracking records to allocate,
+regardless of conntrackMaxPerCore (set maxPerCore=0 to leave the limit as-is).</td>
+</tr>
+    
+  
+<tr><td><code>tcpEstablishedTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpEstablishedTimeout is how long an idle TCP connection will be kept open
+(e.g. '2s').  Must be greater than 0 to set.</td>
+</tr>
+    
+  
+<tr><td><code>tcpCloseWaitTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpCloseWaitTimeout is how long an idle conntrack entry
+in CLOSE_WAIT state will remain in the conntrack
+table. (e.g. '60s'). Must be greater than 0 to set.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyIPTablesConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPTablesConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyIPTablesConfiguration contains iptables-related configuration
+details for the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>masqueradeBit</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   masqueradeBit is the bit of the iptables fwmark space to use for SNAT if using
+the pure iptables proxy mode. Values must be within the range [0, 31].</td>
+</tr>
+    
+  
+<tr><td><code>masqueradeAll</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   masqueradeAll tells kube-proxy to SNAT everything if using the pure iptables proxy mode.</td>
+</tr>
+    
+  
+<tr><td><code>syncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   syncPeriod is the period that iptables rules are refreshed (e.g. '5s', '1m',
+'2h22m').  Must be greater than 0.</td>
+</tr>
+    
+  
+<tr><td><code>minSyncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   minSyncPeriod is the minimum period that iptables rules are refreshed (e.g. '5s', '1m',
+'2h22m').</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyIPVSConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPVSConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyIPVSConfiguration contains ipvs-related configuration
+details for the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>syncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   syncPeriod is the period that ipvs rules are refreshed (e.g. '5s', '1m',
+'2h22m').  Must be greater than 0.</td>
+</tr>
+    
+  
+<tr><td><code>minSyncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   minSyncPeriod is the minimum period that ipvs rules are refreshed (e.g. '5s', '1m',
+'2h22m').</td>
+</tr>
+    
+  
+<tr><td><code>scheduler</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ipvs scheduler</td>
+</tr>
+    
+  
+<tr><td><code>excludeCIDRs</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   excludeCIDRs is a list of CIDR's which the ipvs proxier should not touch
+when cleaning up ipvs services.</td>
+</tr>
+    
+  
+<tr><td><code>strictARP</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   strict ARP configure arp_ignore and arp_announce to avoid answering ARP queries
+from kube-ipvs0 interface</td>
+</tr>
+    
+  
+<tr><td><code>tcpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpTimeout is the timeout value used for idle IPVS TCP sessions.
+The default value is 0, which preserves the current timeout value on the system.</td>
+</tr>
+    
+  
+<tr><td><code>tcpFinTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpFinTimeout is the timeout value used for IPVS TCP sessions after receiving a FIN.
+The default value is 0, which preserves the current timeout value on the system.</td>
+</tr>
+    
+  
+<tr><td><code>udpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   udpTimeout is the timeout value used for IPVS UDP packets.
+The default value is 0, which preserves the current timeout value on the system.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyWinkernelConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyWinkernelConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyWinkernelConfiguration contains Windows/HNS settings for
+the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>networkName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   networkName is the name of the network kube-proxy will use
+to create endpoints and policies</td>
+</tr>
+    
+  
+<tr><td><code>sourceVip</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   sourceVip is the IP address of the source VIP endoint used for
+NAT when loadbalancing</td>
+</tr>
+    
+  
+<tr><td><code>enableDSR</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableDSR tells kube-proxy whether HNS policies should be created
+with DSR</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LocalMode`     {#kubeproxy-config-k8s-io-v1alpha1-LocalMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+LocalMode represents modes to detect local traffic from the node
+
+
+    
+
+
+## `ProxyMode`     {#kubeproxy-config-k8s-io-v1alpha1-ProxyMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+ProxyMode represents modes used by the Kubernetes proxy server.
+
+Currently, three modes of proxy are available in Linux platform: 'userspace' (older, going to be EOL), 'iptables'
+(newer, faster), 'ipvs'(newest, better in performance and scalability).
+
+Two modes of proxy are available in Windows platform: 'userspace'(older, stable) and 'kernelspace' (newer, faster).
+
+In Linux platform, if proxy mode is blank, use the best-available proxy (currently iptables, but may change in the
+future). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are
+insufficient, this always falls back to the userspace proxy. IPVS mode will be enabled when proxy mode is set to 'ipvs',
+and the fall back path is firstly iptables and then userspace.
+
+In Windows platform, if proxy mode is blank, use the best-available proxy (currently userspace, but may change in the
+future). If winkernel proxy is selected, regardless of how, but the Windows kernel can't support this mode of proxy,
+this always falls back to the userspace proxy.
+
+
+    
+  
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
index 3d4b977102..96a7b17a4e 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
@@ -130,7 +130,7 @@ page and pick a version from [the list](https://godoc.org/k8s.io/kubernetes/cmd/
 ### Adding kube-proxy parameters {#kube-proxy}
 
 For information about kube-proxy parameters in the kubeadm configuration see:
-- [kube-proxy](https://godoc.org/k8s.io/kubernetes/pkg/proxy/apis/config#KubeProxyConfiguration)
+- [kube-proxy reference](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
 
 For information about enabling IPVS mode with kubeadm see:
 - [IPVS](https://github.com/kubernetes/kubernetes/blob/master/pkg/proxy/ipvs/README.md)

From edd432194ff1d94e767939500a082f390d77bc89 Mon Sep 17 00:00:00 2001
From: huyuqing <huyuqing@inspur.com>
Date: Thu, 1 Apr 2021 10:16:56 +0800
Subject: [PATCH 421/788] Remove redundant characters in
 concepts/architecture/nodes

---
 content/de/docs/concepts/architecture/nodes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/de/docs/concepts/architecture/nodes.md b/content/de/docs/concepts/architecture/nodes.md
index e717885339..933346a4d5 100644
--- a/content/de/docs/concepts/architecture/nodes.md
+++ b/content/de/docs/concepts/architecture/nodes.md
@@ -147,7 +147,7 @@ Die zweite ist, die interne Node-Liste des Node Controllers mit der Liste der ve
 Wenn ein Node in einer Cloud-Umgebung ausgeführt wird und sich in einem schlechten Zustand befindet, fragt der Node Controller den Cloud-Anbieter, ob die virtuelle Maschine für diesen Node noch verfügbar ist. Wenn nicht, löscht der Node Controller den Node aus seiner Node-Liste.
 
 Der dritte ist die Überwachung des Zustands der Nodes. Der Node Controller ist dafür verantwortlich,
-die NodeReady-Bedingung von NodeStatus auf ConditionUnknown zu aktualisieren, wenn ein wenn ein Node unerreichbar wird (der Node Controller empfängt aus irgendeinem Grund keine Herzschläge mehr, z.B. weil der Node heruntergefahren ist) und später alle Pods aus dem Node zu entfernen (und diese ordnungsgemäss zu beenden), wenn der Node weiterhin unzugänglich ist. (Die Standard-Timeouts sind 40s, um ConditionUnknown zu melden und 5 Minuten, um mit der Evakuierung der Pods zu beginnen).
+die NodeReady-Bedingung von NodeStatus auf ConditionUnknown zu aktualisieren, wenn ein Node unerreichbar wird (der Node Controller empfängt aus irgendeinem Grund keine Herzschläge mehr, z.B. weil der Node heruntergefahren ist) und später alle Pods aus dem Node zu entfernen (und diese ordnungsgemäss zu beenden), wenn der Node weiterhin unzugänglich ist. (Die Standard-Timeouts sind 40s, um ConditionUnknown zu melden und 5 Minuten, um mit der Evakuierung der Pods zu beginnen).
 
 Der Node Controller überprüft den Zustand jedes Nodes alle `--node-monitor-period` Sekunden.
 

From d5b17933516c9a194f1497e76c0d61238097d6b2 Mon Sep 17 00:00:00 2001
From: Jailton Lopes <jailton@gmail.com>
Date: Thu, 1 Apr 2021 00:42:41 -0300
Subject: [PATCH 422/788] Update "Deploying PHP Guestbook application with
 MongoDB" Tutorial to fix the following issues:

* #26765 - Ordered lists with wrong indexes
* The wrong output of "kubectl get service frontend" on LoadBalancer Service Type example.
* Fixing format

Signed-off-by: Jailton Lopes <jailton@gmail.com>
---
 .../stateless-application/guestbook.md        | 49 ++++++++++---------
 1 file changed, 25 insertions(+), 24 deletions(-)

diff --git a/content/en/docs/tutorials/stateless-application/guestbook.md b/content/en/docs/tutorials/stateless-application/guestbook.md
index 36772253f6..d21e60dde8 100644
--- a/content/en/docs/tutorials/stateless-application/guestbook.md
+++ b/content/en/docs/tutorials/stateless-application/guestbook.md
@@ -49,13 +49,14 @@ The manifest file, included below, specifies a Deployment controller that runs a
 1. Launch a terminal window in the directory you downloaded the manifest files.
 1. Apply the MongoDB Deployment from the `mongo-deployment.yaml` file:
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-deployment.yaml
       ```
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.yaml
--->
 
 1. Query the list of Pods to verify that the MongoDB Pod is running:
 
@@ -84,15 +85,15 @@ The guestbook application needs to communicate to the MongoDB to write its data.
 
 1. Apply the MongoDB Service from the following `mongo-service.yaml` file:
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
       ```
 
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
--->
-
 1. Query the list of Services to verify that the MongoDB Service is running:
 
       ```shell
@@ -122,15 +123,15 @@ The guestbook application has a web frontend serving the HTTP requests written i
 
 1. Apply the frontend Deployment from the `frontend-deployment.yaml` file:
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-deployment.yaml
       ```
 
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment.yaml
--->
-
 1. Query the list of Pods to verify that the three frontend replicas are running:
 
       ```shell
@@ -160,15 +161,15 @@ Some cloud providers, like Google Compute Engine or Google Kubernetes Engine, su
 
 1. Apply the frontend Service from the `frontend-service.yaml` file:
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-service.yaml
       ```
 
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.yaml
--->
-
 1. Query the list of Services to verify that the frontend Service is running:
 
       ```shell
@@ -179,7 +180,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.ya
 
       ```
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)        AGE
-      frontend       ClusterIP   10.0.0.112   <none>       80/TCP   6s
+      frontend       ClusterIP   10.0.0.112   <none>        80/TCP         6s
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP        4m
       mongo          ClusterIP   10.0.0.151   <none>        6379/TCP       2m
       ```
@@ -214,8 +215,8 @@ If you deployed the `frontend-service.yaml` manifest with type: `LoadBalancer` y
       The response should be similar to this:
 
       ```
-      NAME       TYPE        CLUSTER-IP      EXTERNAL-IP        PORT(S)        AGE
-      frontend   ClusterIP   10.51.242.136   109.197.92.229     80:32372/TCP   1m
+      NAME       TYPE           CLUSTER-IP      EXTERNAL-IP        PORT(S)        AGE
+      frontend   LoadBalancer   10.51.242.136   109.197.92.229     80:32372/TCP   1m
       ```
 
 1. Copy the external IP address, and load the page in your browser to view your guestbook.
@@ -245,7 +246,7 @@ You can scale up or down as needed because your servers are defined as a Service
       frontend-3823415956-k22zn       1/1       Running   0          54m
       frontend-3823415956-w9gbt       1/1       Running   0          54m
       frontend-3823415956-x2pld       1/1       Running   0          5s
-      mongo-1068406935-3lswp   1/1       Running   0          56m
+      mongo-1068406935-3lswp          1/1       Running   0          56m
       ```
 
 1. Run the following command to scale down the number of frontend Pods:
@@ -266,7 +267,7 @@ You can scale up or down as needed because your servers are defined as a Service
       NAME                            READY     STATUS    RESTARTS   AGE
       frontend-3823415956-k22zn       1/1       Running   0          1h
       frontend-3823415956-w9gbt       1/1       Running   0          1h
-      mongo-1068406935-3lswp   1/1       Running   0          1h
+      mongo-1068406935-3lswp          1/1       Running   0          1h
       ```
 
 

From d4597c7c24e9527cbec24a4b5579df33211f6fbf Mon Sep 17 00:00:00 2001
From: "mengjiao.liu" <mengjiao.liu@daocloud.io>
Date: Thu, 1 Apr 2021 11:50:40 +0800
Subject: [PATCH 423/788] [zh] sync
 content/en/docs/concepts/overview/components.md

---
 content/zh/docs/concepts/overview/components.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/overview/components.md b/content/zh/docs/concepts/overview/components.md
index 090468282a..6d3c0d7281 100644
--- a/content/zh/docs/concepts/overview/components.md
+++ b/content/zh/docs/concepts/overview/components.md
@@ -82,18 +82,18 @@ the same machine, and do not run user containers on this machine. See
 {{< glossary_definition term_id="kube-controller-manager" length="all" >}}
 
 <!--
-These controllers include:
+Some types of these controllers are:
 
   * Node controller: Responsible for noticing and responding when nodes go down.
-  * Replication controller: Responsible for maintaining the correct number of pods for every replication
-  controller object in the system.
+  * Job controller: Watches for Job objects that represent one-off tasks, then creates
+    Pods to run those tasks to completion.
   * Endpoints controller: Populates the Endpoints object (that is, joins Services & Pods).
   * Service Account & Token controllers: Create default accounts and API access tokens for new namespaces.
 -->
 这些控制器包括:
 
 * 节点控制器（Node Controller）: 负责在节点出现故障时进行通知和响应
-* 副本控制器（Replication Controller）: 负责为系统中的每个副本控制器对象维护正确数量的 Pod
+* 任务控制器（Job controller）: 监测代表一次性任务的 Job 对象，然后创建 Pods 来运行这些任务直至完成
 * 端点控制器（Endpoints Controller）: 填充端点(Endpoints)对象(即加入 Service 与 Pod)
 * 服务帐户和令牌控制器（Service Account & Token Controllers）: 为新的命名空间创建默认帐户和 API 访问令牌
 

From a66fec504eb0904ceaee32bf0e72bc981b60b7ad Mon Sep 17 00:00:00 2001
From: Juan Sebastian Romero <tocado.157@gmail.com>
Date: Thu, 1 Apr 2021 01:04:01 -0300
Subject: [PATCH 424/788] Update kubespray.md

update link to playbook variables in ansible
---
 content/en/docs/setup/production-environment/tools/kubespray.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubespray.md b/content/en/docs/setup/production-environment/tools/kubespray.md
index 5ba4c995dd..c4300b53a2 100644
--- a/content/en/docs/setup/production-environment/tools/kubespray.md
+++ b/content/en/docs/setup/production-environment/tools/kubespray.md
@@ -68,7 +68,7 @@ Kubespray provides the ability to customize many aspects of the deployment:
   * {{< glossary_tooltip term_id="cri-o" >}}
 * Certificate generation methods
 
-Kubespray customizations can be made to a [variable file](https://docs.ansible.com/ansible/playbooks_variables.html). If you are getting started with Kubespray, consider using the Kubespray defaults to deploy your cluster and explore Kubernetes.
+Kubespray customizations can be made to a [variable file](https://docs.ansible.com/ansible/latest/user_guide/playbooks_variables.html). If you are getting started with Kubespray, consider using the Kubespray defaults to deploy your cluster and explore Kubernetes.
 
 ### (4/5) Deploy a Cluster
 

From 692e997105ff981e938b3301af05809e1f48842a Mon Sep 17 00:00:00 2001
From: "mengjiao.liu" <mengjiao.liu@daocloud.io>
Date: Thu, 1 Apr 2021 11:05:48 +0800
Subject: [PATCH 425/788] [zh] Sync
 content/en/docs/concepts/storage/persistent-volumes.md

---
 .../docs/concepts/storage/persistent-volumes.md | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/concepts/storage/persistent-volumes.md b/content/zh/docs/concepts/storage/persistent-volumes.md
index 82ec637f76..1160dd0e4a 100644
--- a/content/zh/docs/concepts/storage/persistent-volumes.md
+++ b/content/zh/docs/concepts/storage/persistent-volumes.md
@@ -69,7 +69,7 @@ Pod 会耗用节点资源，而 PVC 申领会耗用 PV 资源。Pod 可以请求
 模式之一来挂载，参见[访问模式](#access-modes)）。
 
 <!--
-While PersistentVolumeClaims allow a user to consume abstract storage resources, it is common that users need PersistentVolumes with varying properties, such as performance, for different problems. Cluster administrators need to be able to offer a variety of PersistentVolumes that differ in more ways than just size and access modes, without exposing users to the details of how those volumes are implemented. For these needs, there is the _StorageClass_ resource.
+While PersistentVolumeClaims allow a user to consume abstract storage resources, it is common that users need PersistentVolumes with varying properties, such as performance, for different problems. Cluster administrators need to be able to offer a variety of PersistentVolumes that differ in more ways than size and access modes, without exposing users to the details of how those volumes are implemented. For these needs, there is the _StorageClass_ resource.
 
 See the [detailed walkthrough with working examples](/docs/tasks/configure-pod-container/configure-persistent-volume-storage/).
 -->
@@ -935,9 +935,9 @@ The following volume types support mount options:
 * iSCSI
 
 <!--
-Mount options are not validated, so mount will simply fail if one is invalid.
+Mount options are not validated, If a mount option is invalid, the mount fails.
 -->
-Kubernetes 不对挂载选项执行合法性检查，因此非法的挂载选项只是会导致挂载失败。
+Kubernetes 不对挂载选项执行合法性检查。如果挂载选项是非法的，挂载就会失败。
 
 <!--
 In the past, the annotation `volume.beta.kubernetes.io/mount-options` was used instead
@@ -1211,6 +1211,17 @@ PersistentVolume 卷的绑定是排他性的。
 由于 PersistentVolumeClaim 是名字空间作用域的对象，使用
 "Many" 模式（`ROX`、`RWX`）来挂载申领的操作只能在同一名字空间内进行。
 
+<!--
+### PersistentVolumes typed `hostPath`
+
+A `hostPath` PersistentVolume uses a file or directory on the Node to emulate network-attached storage.
+See [an example of `hostPath` typed volume](/docs/tasks/configure-pod-container/configure-persistent-volume-storage/#create-a-persistentvolume).
+-->
+### 类型为 `hostpath` 的 PersistentVolume  {#persistentvolumes-typed-hostpath}
+
+`hostPath` PersistentVolume 使用节点上的文件或目录来模拟网络附加（network-attached）存储。
+相关细节可参阅[`hostPath` 卷示例](/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage/#create-a-persistentvolume)。
+
 <!--
 ## Raw Block Volume Support
 -->

From c43c40e1b0eb256eaf0139026762c5af115310db Mon Sep 17 00:00:00 2001
From: Tabitha Sable <tabitha.c.sable@gmail.com>
Date: Thu, 1 Apr 2021 01:36:45 -0500
Subject: [PATCH 426/788] Add blog post describing PSP deprecation and next
 steps.

---
 ...dSecurityPolicy-Past-Present-and-Future.md | 75 +++++++++++++++++++
 1 file changed, 75 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md

diff --git a/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md b/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
new file mode 100644
index 0000000000..c631d54c4a
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
@@ -0,0 +1,75 @@
+---
+layout: blog
+title: "PodSecurityPolicy: Past, Present, and Future"
+date: 2021-04-08
+slug: PodSecurityPolicy-Past-Present-and-Future
+---
+
+**Author:** Tabitha Sable (Kubernetes SIG Security)
+
+PodSecurityPolicy (PSP) is being deprecated in Kubernetes 1.21. This starts the countdown to its removal, but doesn’t change anything else. PodSecurityPolicy will continue to be fully functional for several more releases before being removed completely. In the meantime, we are developing a replacement for PSP that covers key use cases more easily and sustainably.
+
+What are Pod Security Policies? Why did we need them? Why are they going away, and what’s next? How does this affect you? These key questions come to mind as we prepare to say goodbye to PSP, so let’s walk through them together. We’ll start with an overview of how features get removed from Kubernetes.
+
+## What does deprecation mean in Kubernetes?
+
+Whenever a Kubernetes feature is set to go away, our [deprecation policy](docs/reference/using-api/deprecation-policy/) is our guide. First the feature is marked as deprecated, then after enough time has passed, it can finally be removed.
+
+Kubernetes 1.21 starts the deprecation process for PodSecurityPolicy. As with all feature deprecations, PodSecurityPolicy will continue to be fully functional for several more releases. The current plan is to remove PSP from Kubernetes in the 1.25 release.
+
+Until then, PSP is still PSP. There will be at least a year during which the newest Kubernetes releases will still support PSP, and nearly two years until PSP will pass fully out of all supported Kubernetes versions.
+
+## What is PodSecurityPolicy?
+
+[PodSecurityPolicy](https://kubernetes.io/docs/concepts/policy/pod-security-policy/) is a built-in [admission controller](https://kubernetes.io/blog/2019/03/21/a-guide-to-kubernetes-admission-controllers/) that allows a cluster administrator to control security-sensitive aspects of the Pod specification. 
+
+First, one or more PodSecurityPolicy resources are created in a cluster to define the requirements Pods must meet. Then, RBAC rules are created to control which PodSecurityPolicy applies to a given pod. If a pod meets the requirements of its PSP, it will be admitted to the cluster as usual. In some cases, PSP can also modify Pod fields, effectively creating new defaults for those fields. If a Pod does not meet the PSP requirements, it is rejected, and cannot run. 
+
+One more important thing to know about PodSecurityPolicy: it’s not the same as PodSecurityContext.
+
+A part of the Pod specification, PodSecurityContext is the collection of fields that specify many of the security-relevant settings for a Pod. The security context dictates to the kubelet and container runtime how the Pod should actually be run. In contrast, the PodSecurityPolicy only constrains (or defaults) the values that may be set on the security context.
+
+The deprecation of PSP does not affect PodSecurityContext in any way.
+
+## Why did we need PodSecurityPolicy?
+
+In Kubernetes, we define resources such as Deployments, StatefulSets, and Services that represent the building blocks of software applications. The various controllers inside a Kubernetes cluster react to these resources, creating further Kubernetes resources or configuring some software or hardware to accomplish our goals.
+
+In most Kubernetes clusters, RBAC (Role-Based Access Control) rules control access to these resources. Get, Create, Edit, and Delete are the sorts of operations that RBAC cares about, but RBAC does not consider what settings are being put into the resources it controls. For example, a Pod can be almost anything from a simple webserver to a privileged command prompt offering full access to the underlying server node and all the data. It’s all the same to RBAC: a Pod is a Pod is a Pod.
+
+To control what sorts of settings are allowed in the resources defined in your cluster, you need Admission Control in addition to RBAC. Since Kubernetes 1.3, PodSecurityPolicy has been the built-in way to do that for security-related Pod fields. Using PodSecurityPolicy, you can prevent “create Pod” from automatically meaning “root on every cluster node,” without needing to deploy additional external admission controllers.
+
+## Why is PodSecurityPolicy going away?
+
+In the years since PodSecurityPolicy was first introduced, we have realized that PSP has some serious usability problems that can’t be addressed without making breaking changes.
+
+The way PSPs are applied to Pods has proven confusing to nearly everyone that has attempted to use them. It is easy to accidentally grant broader permissions than intended, and difficult to inspect which PSP(s) apply in a given situation. The “changing Pod defaults” feature can be handy, but is only supported for certain Pod settings and it’s not obvious when they will or will not apply to your Pod. Without a “dry run” or audit mode, it’s impractical to retrofit PSP to existing clusters safely, and it’s impossible for PSP to ever be enabled by default.
+
+For more information about these and other PSP difficulties, check out SIG Auth’s KubeCon NA 2019 Maintainer Track session video: {{< youtube "SFtHRmPuhEw?start=953" youtube-quote-sm >}}
+
+Today, you’re not limited only to deploying PSP or writing your own custom admission controller. Several external admission controllers are available that incorporate lessons learned from PSP to provide a better user experience. [OPA/Gatekeeper](https://github.com/open-policy-agent/gatekeeper/), [Kyverno](https://github.com/kyverno/kyverno/), and [K-Rail](https://github.com/cruise-automation/k-rail) are all well-known, and each has its fans.
+
+Although there are other good options available now, we believe there is still value in having a built-in admission controller available as a choice for users. With this in mind, we turn toward building what’s next, inspired by the lessons learned from PSP.
+
+## What’s next?
+
+Kubernetes SIG Security, SIG Auth, and a diverse collection of other community members have been working together for months to ensure that what’s coming next is going to be awesome. We have developed a Kubernetes Enhancement Proposal ([KEP 2579](https://github.com/kubernetes/enhancements/issues/2579)) and a prototype for a new feature, currently being called PSP Replacement Policy. We are targeting an Alpha release in Kubernetes 1.22.
+
+PSP Replacement Policy starts with the realization that since there is a robust ecosystem of external admission controllers already available, PSP’s replacement doesn’t need to be all things to all people. Simplicity of deployment and adoption is the key advantage a built-in admission controller has compared to an external webhook, so we have focused on how to best utilize that advantage.
+
+PSP Replacement Policy is designed to be as simple as practically possible while providing enough flexibility to really be useful in production at scale. It has soft rollout features to enable retrofitting it to existing clusters, and is configurable enough that it can eventually be active by default. It can be deactivated partially or entirely, to coexist with external admission controllers for advanced use cases.
+
+## What does this mean for you?
+
+What this all means for you depends on your current PSP situation. If you’re already using PSP, there’s plenty of time to plan your next move. Please review the PSP Replacement Policy KEP and think about how well it will suit your use case.
+
+If you’re making extensive use of the flexibility of PSP with numerous PSPs and complex binding rules, you will likely find the simplicity of PSP Replacement Policy too limiting. Use the next year to evaluate the other admission controller choices in the ecosystem. There are resources available to ease this transition, such as the [Gatekeeper Policy Library](https://github.com/open-policy-agent/gatekeeper-library).
+
+If your use of PSP is relatively simple, with a few policies and straightforward binding to service accounts in each namespace, you will likely find PSP Replacement Policy to be a good match for your needs. Evaluate your PSPs compared to the [Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/) to get a feel for where you’ll be able to use the Restricted, Baseline, and Privileged policies. Please follow along with or contribute to the KEP and subsequent development, and try out the Alpha release of PSP Replacement Policy when it becomes available.
+
+If you’re just beginning your PSP journey, you will save time and effort by keeping it simple. You can approximate the functionality of PSP Replacement Policy today by using the Pod Security Standards’ PSPs. If you set the cluster default by binding a Baseline or Restricted policy to the system:authenticated group, and then make a more-permissive policy available as needed in certain Namespaces [using ServiceAccount bindings](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#run-another-pod), you will avoid many of the PSP pitfalls and have an easy migration to PSP Replacement Policy. If your needs are much more complex than this, your effort is probably better spent adopting one of the more fully-featured external admission controllers mentioned above.
+
+We’re dedicated to making Kubernetes the best container orchestration tool we can, and sometimes that means we need to remove longstanding features to make space for better things to come. When that happens, the Kubernetes deprecation policy ensures you have plenty of time to plan your next move. In the case of PodSecurityPolicy, several options are available to suit a range of needs and use cases. Start planning ahead now for PSP’s eventual removal, and please consider contributing to its replacement! Happy securing!
+
+**Acknowledgment:** It takes a wonderful group to make wonderful software. Thanks are due to everyone who has contributed to the PSP replacement effort, especially (in alphabetical order) Tim Allclair, Ian Coldwater, and Jordan Liggitt. It’s been a joy to work with y’all on this.
+

From 816725246d6f461052af510fa3de55f90e30315c Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Sun, 31 Jan 2021 16:56:37 +0800
Subject: [PATCH 427/788] [zh] Sync changes to feature-gates

Also fixed some nits in the upstream.
---
 .../feature-gates.md                          |   5 +-
 .../feature-gates.md                          | 970 ++++++++++++------
 2 files changed, 631 insertions(+), 344 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index daf525c781..582ed9da94 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -546,10 +546,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [CustomResourceDefinition](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
 - `CustomResourceWebhookConversion`: Enable webhook-based conversion
   on resources created from [CustomResourceDefinition](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
-  troubleshoot a running Pod.
 - `DefaultPodTopologySpread`: Enables the use of `PodTopologySpread` scheduling plugin to do
   [default spreading](/docs/concepts/workloads/pods/pod-topology-spread-constraints/#internal-default-constraints).
-- `DevicePlugins`: Enable the [device-plugins](/docs/concepts/cluster-administration/device-plugins/)
+- `DevicePlugins`: Enable the [device-plugins](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
   based resource provisioning on nodes.
 - `DisableAcceleratorUsageMetrics`:
   [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/system-metrics/#disable-accelerator-metrics).
@@ -728,8 +727,6 @@ Each feature gate is designed for enabling/disabling a specific feature:
   topology of the cluster. See
   [ServiceTopology](/docs/concepts/services-networking/service-topology/)
   for more details.
-- `SizeMemoryBackedVolumes`: Enables kubelet support to size memory backed volumes.
-  See [volumes](/docs/concepts/storage/volumes) for more details.
 - `SetHostnameAsFQDN`: Enable the ability of setting Fully Qualified Domain
   Name(FQDN) as the hostname of a pod. See
   [Pod's `setHostnameAsFQDN` field](/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field).
diff --git a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
index 4a302d4793..a8b2c35f9d 100644
--- a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
@@ -1,15 +1,13 @@
 ---
-weight: 10
 title: 特性门控
+weight: 10
 content_type: concept
 ---
 
 <!--
----
-weight: 10
 title: Feature Gates
+weight: 10
 content_type: concept
----
 -->
 
 <!-- overview -->
@@ -19,28 +17,23 @@ can specify on different Kubernetes components.
 
 See [feature stages](#feature-stages) for an explanation of the stages for a feature.
 -->
-
 本页详述了管理员可以在不同的 Kubernetes 组件上指定的各种特性门控。
 
 关于特性各个阶段的说明，请参见[特性阶段](#feature-stages)。
 
-
-
 <!-- body -->
 
 <!--
 ## Overview
--->
 
-## 概述
-
-<!--
 Feature gates are a set of key=value pairs that describe Kubernetes features.
 You can turn these features on or off using the `--feature-gates` command line flag
 on each Kubernetes component.
 -->
+## 概述
 
-特性门控是描述 Kubernetes 特性的一组键值对。您可以在 Kubernetes 的每一个组件中使用 `--feature-gates` flag 来启用或禁用这些特性。
+特性门控是描述 Kubernetes 特性的一组键值对。你可以在 Kubernetes 的各个组件中使用
+`--feature-gates` flag 来启用或禁用这些特性。
 
 <!--
 Each Kubernetes component lets you enable or disable a set of feature gates that
@@ -48,10 +41,10 @@ are relevant to that component.
 Use `-h` flag to see a full set of feature gates for all components.
 To set feature gates for a component, such as kubelet, use the `--feature-gates` flag assigned to a list of feature pairs:
 -->
-
 每个 Kubernetes 组件都支持启用或禁用与该组件相关的一组特性门控。
 使用 `-h` 参数来查看所有组件支持的完整特性门控。
-要为诸如 kubelet 之类的组件设置特性门控，请使用 `--feature-gates` 参数，并向其传递一组特性：
+要为诸如 kubelet 之类的组件设置特性门控，请使用 `--feature-gates` 参数，并向其
+传递一个特性设置键值对列表：
 
 ```shell
 --feature-gates="...,DynamicKubeletConfig=true"
@@ -61,7 +54,6 @@ To set feature gates for a component, such as kubelet, use the `--feature-gates`
 The following tables are a summary of the feature gates that you can set on
 different Kubernetes components.
 -->
-
 下表总结了在不同的 Kubernetes 组件上可以设置的特性门控。
 
 <!--
@@ -76,12 +68,15 @@ different Kubernetes components.
 - The [Graduated/Deprecated feature gate table](#feature-gates-for-graduated-or-deprecated-features)
   also lists deprecated and withdrawn features.
 -->
-
-- 引入特性或更改其发布阶段后，"Since" 列将包含 Kubernetes 版本。
-- "Until" 列（如果不为空）包含最后一个 Kubernetes 版本，您仍可以在其中使用特性门控。
-- 如果某个特性处于 Alpha 或 Beta 状态，您可以在 [Alpha 和 Beta 特性门控表](#feature-gates-for-alpha-or-beta-features)中找到该特性。
-- 如果某个特性处于稳定状态，您可以在[毕业和废弃特性门控表](#feature-gates-for-graduated-or-deprecated-features).中找到该特性的所有阶段。
-- [毕业和废弃特性门控表](#feature-gates-for-graduated-or-deprecated-features) 还列出了废弃的和已被移除的特性。
+- 引入特性或更改其发布阶段后，"开始（Since）" 列将包含 Kubernetes 版本。
+- "结束（Until）" 列（如果不为空）包含最后一个 Kubernetes 版本，你仍可以在其中使用特性门控。
+- 如果某个特性处于 Alpha 或 Beta 状态，你可以在
+  [Alpha 和 Beta 特性门控表](#feature-gates-for-alpha-or-beta-features)中找到该特性。
+- 如果某个特性处于稳定状态，你可以在
+  [已毕业和废弃特性门控表](#feature-gates-for-graduated-or-deprecated-features)
+  中找到该特性的所有阶段。
+- [已毕业和废弃特性门控表](#feature-gates-for-graduated-or-deprecated-features)
+  还列出了废弃的和已被移除的特性。
 
 <!--
 ### Feature gates for Alpha or Beta features
@@ -92,18 +87,21 @@ different Kubernetes components.
 
 {{< /table >}}
 -->
-
-### Alpha 和 Beta 的特性门控  {#feature-gates-for-alpha-or-beta-features}
+### Alpha 和 Beta 状态的特性门控  {#feature-gates-for-alpha-or-beta-features}
 
 {{< table caption="处于 Alpha 或 Beta 状态的特性门控" >}}
 
-| 特性 | 默认值 | 状态 | 开始(Since) | 结束(Until) |
-|---------|---------|-------|-------|-------|
-| `AnyVolumeDataSource` | `false` | Alpha | 1.18 | |
+| 特性    | 默认值  | 状态  | 开始（Since） | 结束（Until） |
+|---------|---------|-------|---------------|---------------|
 | `APIListChunking` | `false` | Alpha | 1.8 | 1.8 |
 | `APIListChunking` | `true` | Beta | 1.9 | |
-| `APIPriorityAndFairness` | `false` | Alpha | 1.17 | |
-| `APIResponseCompression` | `false` | Alpha | 1.7 | |
+| `APIPriorityAndFairness` | `false` | Alpha | 1.17 | 1.19 |
+| `APIPriorityAndFairness` | `true` | Beta | 1.20 | |
+| `APIResponseCompression` | `false` | Alpha | 1.7 | 1.15 |
+| `APIResponseCompression` | `false` | Beta | 1.16 | |
+| `APIServerIdentity` | `false` | Alpha | 1.20 | |
+| `AllowInsecureBackendProxy` | `true` | Beta | 1.17 | |
+| `AnyVolumeDataSource` | `false` | Alpha | 1.18 | |
 | `AppArmor` | `true` | Beta | 1.4 | |
 | `BalanceAttachedNodeVolumes` | `false` | Alpha | 1.11 | |
 | `BoundServiceAccountTokenVolume` | `false` | Alpha | 1.13 | |
@@ -126,27 +124,36 @@ different Kubernetes components.
 | `CSIMigrationGCE` | `false` | Alpha | 1.14 | 1.16 |
 | `CSIMigrationGCE` | `false` | Beta | 1.17 | |
 | `CSIMigrationGCEComplete` | `false` | Alpha | 1.17 | |
-| `CSIMigrationOpenStack` | `false` | Alpha | 1.14 | |
+| `CSIMigrationOpenStack` | `false` | Alpha | 1.14 | 1.17 |
+| `CSIMigrationOpenStack` | `true` | Beta | 1.18 | |
 | `CSIMigrationOpenStackComplete` | `false` | Alpha | 1.17 | |
 | `CSIMigrationvSphere` | `false` | Beta | 1.19 | |
 | `CSIMigrationvSphereComplete` | `false` | Beta | 1.19 | |
+| `CSIServiceAccountToken` | `false` | Alpha | 1.20 | |
 | `CSIStorageCapacity` | `false` | Alpha | 1.19 | |
-| `CSIVolumeFSGroupPolicy` | `false` | Alpha | 1.19 | |
-| `ConfigurableFSGroupPolicy` | `false` | Alpha | 1.18 | |
+| `CSIVolumeFSGroupPolicy` | `false` | Alpha | 1.19 | 1.19 |
+| `CSIVolumeFSGroupPolicy` | `true` | Beta | 1.20 | |
+| `ConfigurableFSGroupPolicy` | `false` | Alpha | 1.18 | 1.19 |
+| `ConfigurableFSGroupPolicy` | `true` | Beta | 1.20 | |
+| `CronJobControllerV2` | `false` | Alpha | 1.20 | |
 | `CustomCPUCFSQuotaPeriod` | `false` | Alpha | 1.12 | |
-| `DefaultPodTopologySpread` | `false` | Alpha | 1.19 | |
+| `DefaultPodTopologySpread` | `false` | Alpha | 1.19 | 1.19 |
+| `DefaultPodTopologySpread` | `true` | Beta | 1.20 | |
 | `DevicePlugins` | `false` | Alpha | 1.8 | 1.9 |
 | `DevicePlugins` | `true` | Beta | 1.10 | |
-| `DisableAcceleratorUsageMetrics` | `false` | Alpha | 1.19 | 1.20 |
-| `DryRun` | `false` | Alpha | 1.12 | 1.12 |
-| `DryRun` | `true` | Beta | 1.13 | |
+| `DisableAcceleratorUsageMetrics` | `false` | Alpha | 1.19 | 1.19 |
+| `DisableAcceleratorUsageMetrics` | `true` | Beta | 1.20 | |
+| `DownwardAPIHugePages` | `false` | Alpha | 1.20 | |
 | `DynamicKubeletConfig` | `false` | Alpha | 1.4 | 1.10 |
 | `DynamicKubeletConfig` | `true` | Beta | 1.11 | |
+| `EfficientWatchResumption` | `false` | Alpha | 1.20 | |
 | `EndpointSlice` | `false` | Alpha | 1.16 | 1.16 |
 | `EndpointSlice` | `false` | Beta | 1.17 | |
 | `EndpointSlice` | `true` | Beta | 1.18 | |
+| `EndpointSliceNodeName` | `false` | Alpha | 1.20 | |
 | `EndpointSliceProxying` | `false` | Alpha | 1.18 | 1.18 |
 | `EndpointSliceProxying` | `true` | Beta | 1.19 | |
+| `EndpointSliceTerminatingCondition` | `false` | Alpha | 1.20 | |
 | `EphemeralContainers` | `false` | Alpha | 1.16 | |
 | `ExpandCSIVolumes` | `false` | Alpha | 1.14 | 1.15 |
 | `ExpandCSIVolumes` | `true` | Beta | 1.16 | |
@@ -156,71 +163,68 @@ different Kubernetes components.
 | `ExpandPersistentVolumes` | `true` | Beta | 1.11 | |
 | `ExperimentalHostUserNamespaceDefaulting` | `false` | Beta | 1.5 | |
 | `GenericEphemeralVolume` | `false` | Alpha | 1.19 | |
+| `GracefulNodeShutdown` | `false` | Alpha | 1.20 | |
+| `HPAContainerMetrics` | `false` | Alpha | 1.20 | |
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | Beta | 1.19 | |
-| `HyperVContainer` | `false` | Alpha | 1.10 | |
+| `IPv6DualStack` | `false` | Alpha | 1.15 | |
 | `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 |
 | `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | |
-| `IPv6DualStack` | `false` | Alpha | 1.16 | |
-| `KubeletPodResources` | `false` | Alpha | 1.13 | 1.14 |
+| `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
+| `KubeletPodResources` | `true` | Alpha | 1.13 | 1.14 |
 | `KubeletPodResources` | `true` | Beta | 1.15 | |
-| `LegacyNodeRoleBehavior` | `true` | Alpha | 1.16 | |
+| `LegacyNodeRoleBehavior` | `false` | Alpha | 1.16 | 1.18 |
+| `LegacyNodeRoleBehavior` | `true` | True | 1.19 |  |
 | `LocalStorageCapacityIsolation` | `false` | Alpha | 1.7 | 1.9 |
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
-| `MountContainers` | `false` | Alpha | 1.9 | |
+| `MixedProtocolLBService` | `false` | Alpha | 1.20 | |
 | `NodeDisruptionExclusion` | `false` | Alpha | 1.16 | 1.18 |
 | `NodeDisruptionExclusion` | `true` | Beta | 1.19 | |
 | `NonPreemptingPriority` | `false` | Alpha | 1.15 | 1.18 |
 | `NonPreemptingPriority` | `true` | Beta | 1.19 | |
 | `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 |
 | `PodDisruptionBudget` | `true` | Beta | 1.5 | |
-| `PodOverhead` | `false` | Alpha | 1.16 | - |
+| `PodOverhead` | `false` | Alpha | 1.16 | 1.17 |
+| `PodOverhead` | `true` | Beta | 1.18 |  |
 | `ProcMountType` | `false` | Alpha | 1.12 | |
 | `QOSReserved` | `false` | Alpha | 1.11 | |
 | `RemainingItemCount` | `false` | Alpha | 1.15 | |
+| `RemoveSelfLink` | `false` | Alpha | 1.16 | 1.19 |
+| `RemoveSelfLink` | `true` | Beta | 1.20 | |
+| `RootCAConfigMap` | `false` | Alpha | 1.13 | 1.19 |
+| `RootCAConfigMap` | `true` | Beta | 1.20 | |
 | `RotateKubeletServerCertificate` | `false` | Alpha | 1.7 | 1.11 |
 | `RotateKubeletServerCertificate` | `true` | Beta | 1.12 | |
 | `RunAsGroup` | `true` | Beta | 1.14 | |
-| `RuntimeClass` | `false` | Alpha | 1.12 | 1.13 |
-| `RuntimeClass` | `true` | Beta | 1.14 | |
 | `SCTPSupport` | `false` | Alpha | 1.12 | 1.18 |
 | `SCTPSupport` | `true` | Beta | 1.19 | |
 | `ServerSideApply` | `false` | Alpha | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | Beta | 1.16 | |
-| `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | |
-| `ServiceAppProtocol` | `false` | Alpha | 1.18 | 1.18 |
-| `ServiceAppProtocol` | `true` | Beta | 1.19 | |
+| `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | 1.19 |
+| `ServiceAccountIssuerDiscovery` | `true` | Beta | 1.20 | |
+| `ServiceLBNodePortControl` | `false` | Alpha | 1.20 | |
 | `ServiceNodeExclusion` | `false` | Alpha | 1.8 | 1.18 |
 | `ServiceNodeExclusion` | `true` | Beta | 1.19 | |
 | `ServiceTopology` | `false` | Alpha | 1.17 | |
-| `SetHostnameAsFQDN` | `false` | Alpha | 1.19 | |
-| `StartupProbe` | `false` | Alpha | 1.16 | 1.17 |
-| `StartupProbe` | `true` | Beta | 1.18 | |
+| `SetHostnameAsFQDN` | `false` | Alpha | 1.19 | 1.19 |
+| `SetHostnameAsFQDN` | `true` | Beta | 1.20 | |
+| `SizeMemoryBackedVolumes` | `false` | Alpha | 1.20 | |
+| `StorageVersionAPI` | `false` | Alpha | 1.20 | |
 | `StorageVersionHash` | `false` | Alpha | 1.14 | 1.14 |
 | `StorageVersionHash` | `true` | Beta | 1.15 | |
-| `SupportNodePidsLimit` | `false` | Alpha | 1.14 | 1.14 |
-| `SupportNodePidsLimit` | `true` | Beta | 1.15 | |
-| `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 |
-| `SupportPodPidsLimit` | `true` | Beta | 1.14 | |
 | `Sysctls` | `true` | Beta | 1.11 | |
-| `TokenRequest` | `false` | Alpha | 1.10 | 1.11 |
-| `TokenRequest` | `true` | Beta | 1.12 | |
-| `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
-| `TokenRequestProjection` | `true` | Beta | 1.12 | |
 | `TTLAfterFinished` | `false` | Alpha | 1.12 | |
 | `TopologyManager` | `false` | Alpha | 1.16 | 1.17 |
 | `TopologyManager` | `true` | Beta | 1.18 | |
 | `ValidateProxyRedirects` | `false` | Alpha | 1.12 | 1.13 |
 | `ValidateProxyRedirects` | `true` | Beta | 1.14 | |
-| `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 |
-| `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | - |
-| `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | |
-| `WindowsGMSA` | `false` | Alpha | 1.14 | |
-| `WindowsGMSA` | `true` | Beta | 1.16 | |
+| `WarningHeaders` | `true` | Beta | 1.19 | |
 | `WinDSR` | `false` | Alpha | 1.14 | |
-| `WinOverlay` | `false` | Alpha | 1.14 | |
+| `WinOverlay` | `false` | Alpha | 1.14 | 1.19 |
+| `WinOverlay` | `true` | Beta | 1.20 | |
+| `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | |
 
 {{< /table >}}
 
@@ -233,13 +237,12 @@ different Kubernetes components.
 
 {{< /table >}}
 -->
-
-### 已毕业和不推荐使用的特性门控  {#feature-gates-for-graduated-or-deprecated-features}
+### 已毕业和已废弃的特性门控  {#feature-gates-for-graduated-or-deprecated-features}
 
 {{< table caption="已毕业或不推荐使用的特性门控" >}}
 
-| 特性 | 默认值 | 状态 | 开始(Since) | 结束(Until) |
-|---------|---------|-------|-------|-------|
+| 特性    | 默认值  | 状态  | 开始（Since） | 结束（Until） |
+|---------|---------|-------|---------------|---------------|
 | `Accelerators` | `false` | Alpha | 1.6 | 1.10 |
 | `Accelerators` | - | Deprecated | 1.11 | - |
 | `AdvancedAuditing` | `false` | Alpha | 1.7 | 1.7 |
@@ -285,12 +288,16 @@ different Kubernetes components.
 | `CustomResourceWebhookConversion` | `false` | Alpha | 1.13 | 1.14 |
 | `CustomResourceWebhookConversion` | `true` | Beta | 1.15 | 1.15 |
 | `CustomResourceWebhookConversion` | `true` | GA | 1.16 | - |
+| `DryRun` | `false` | Alpha | 1.12 | 1.12 |
+| `DryRun` | `true` | Beta | 1.13 | 1.18 |
+| `DryRun` | `true` | GA | 1.19 | - |
 | `DynamicAuditing` | `false` | Alpha | 1.13 | 1.18 |
 | `DynamicAuditing` | - | Deprecated | 1.19 | - |
 | `DynamicProvisioningScheduling` | `false` | Alpha | 1.11 | 1.11 |
 | `DynamicProvisioningScheduling` | - | Deprecated| 1.12 | - |
 | `DynamicVolumeProvisioning` | `true` | Alpha | 1.3 | 1.7 |
 | `DynamicVolumeProvisioning` | `true` | GA | 1.8 | - |
+| `EnableAggregatedDiscoveryTimeout` | `true` | Deprecated | 1.16 | - |
 | `EnableEquivalenceClassCache` | `false` | Alpha | 1.8 | 1.14 |
 | `EnableEquivalenceClassCache` | - | Deprecated | 1.15 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | Alpha | 1.5 | 1.12 |
@@ -298,11 +305,14 @@ different Kubernetes components.
 | `EvenPodsSpread` | `false` | Alpha | 1.16 | 1.17 |
 | `EvenPodsSpread` | `true` | Beta | 1.18 | 1.18 |
 | `EvenPodsSpread` | `true` | GA | 1.19 | - |
+| `ExecProbeTimeout` | `true` | GA | 1.20 | - |
 | `GCERegionalPersistentDisk` | `true` | Beta | 1.10 | 1.12 |
 | `GCERegionalPersistentDisk` | `true` | GA | 1.13 | - |
 | `HugePages` | `false` | Alpha | 1.8 | 1.9 |
 | `HugePages` | `true` | Beta| 1.10 | 1.13 |
 | `HugePages` | `true` | GA | 1.14 | - |
+| `HyperVContainer` | `false` | Alpha | 1.10 | 1.19 |
+| `HyperVContainer` | `false` | Deprecated | 1.20 | - |
 | `Initializers` | `false` | Alpha | 1.7 | 1.13 |
 | `Initializers` | - | Deprecated | 1.14 | - |
 | `KubeletConfigFile` | `false` | Alpha | 1.8 | 1.9 |
@@ -310,12 +320,19 @@ different Kubernetes components.
 | `KubeletPluginsWatcher` | `false` | Alpha | 1.11 | 1.11 |
 | `KubeletPluginsWatcher` | `true` | Beta | 1.12 | 1.12 |
 | `KubeletPluginsWatcher` | `true` | GA | 1.13 | - |
+| `KubeletPodResources` | `false` | Alpha | 1.13 | 1.14 |
+| `KubeletPodResources` | `true` | Beta | 1.15 | |
+| `KubeletPodResources` | `true` | GA | 1.20 | |
+| `MountContainers` | `false` | Alpha | 1.9 | 1.16 |
+| `MountContainers` | `false` | Deprecated | 1.17 | - |
 | `MountPropagation` | `false` | Alpha | 1.8 | 1.9 |
 | `MountPropagation` | `true` | Beta | 1.10 | 1.11 |
 | `MountPropagation` | `true` | GA | 1.12 | - |
 | `NodeLease` | `false` | Alpha | 1.12 | 1.13 |
 | `NodeLease` | `true` | Beta | 1.14 | 1.16 |
 | `NodeLease` | `true` | GA | 1.17 | - |
+| `PVCProtection` | `false` | Alpha | 1.9 | 1.9 |
+| `PVCProtection` | - | Deprecated | 1.10 | - |
 | `PersistentLocalVolumes` | `false` | Alpha | 1.7 | 1.9 |
 | `PersistentLocalVolumes` | `true` | Beta | 1.10 | 1.13 |
 | `PersistentLocalVolumes` | `true` | GA | 1.14 | - |
@@ -328,8 +345,6 @@ different Kubernetes components.
 | `PodShareProcessNamespace` | `false` | Alpha | 1.10 | 1.11 |
 | `PodShareProcessNamespace` | `true` | Beta | 1.12 | 1.16 |
 | `PodShareProcessNamespace` | `true` | GA | 1.17 | - |
-| `PVCProtection` | `false` | Alpha | 1.9 | 1.9 |
-| `PVCProtection` | - | Deprecated | 1.10 | - |
 | `RequestManagement` | `false` | Alpha | 1.15 | 1.16 |
 | `ResourceLimitsPriorityFunction` | `false` | Alpha | 1.9 | 1.18 |
 | `ResourceLimitsPriorityFunction` | - | Deprecated | 1.19 | - |
@@ -338,12 +353,24 @@ different Kubernetes components.
 | `ResourceQuotaScopeSelectors` | `true` | GA | 1.17 | - |
 | `RotateKubeletClientCertificate` | `true` | Beta | 1.8 | 1.18 |
 | `RotateKubeletClientCertificate` | `true` | GA | 1.19 | - |
+| `RuntimeClass` | `false` | Alpha | 1.12 | 1.13 |
+| `RuntimeClass` | `true` | Beta | 1.14 | 1.19 |
+| `RuntimeClass` | `true` | GA | 1.20 | - |
 | `ScheduleDaemonSetPods` | `false` | Alpha | 1.11 | 1.11 |
 | `ScheduleDaemonSetPods` | `true` | Beta | 1.12 | 1.16  |
 | `ScheduleDaemonSetPods` | `true` | GA | 1.17 | - |
+| `SCTPSupport` | `false` | Alpha | 1.12 | 1.18 |
+| `SCTPSupport` | `true` | Beta | 1.19 | 1.19 |
+| `SCTPSupport` | `true` | GA | 1.20 | - |
+| `ServiceAppProtocol` | `false` | Alpha | 1.18 | 1.18 |
+| `ServiceAppProtocol` | `true` | Beta | 1.19 | |
+| `ServiceAppProtocol` | `true` | GA | 1.20 | - |
 | `ServiceLoadBalancerFinalizer` | `false` | Alpha | 1.15 | 1.15 |
 | `ServiceLoadBalancerFinalizer` | `true` | Beta | 1.16 | 1.16 |
 | `ServiceLoadBalancerFinalizer` | `true` | GA | 1.17 | - |
+| `StartupProbe` | `false` | Alpha | 1.16 | 1.17 |
+| `StartupProbe` | `true` | Beta | 1.18 | 1.19 |
+| `StartupProbe` | `true` | GA | 1.20 | - |
 | `StorageObjectInUseProtection` | `true` | Beta | 1.10 | 1.10 |
 | `StorageObjectInUseProtection` | `true` | GA | 1.11 | - |
 | `StreamingProxyRedirects` | `false` | Beta | 1.5 | 1.5 |
@@ -353,19 +380,34 @@ different Kubernetes components.
 | `SupportIPVSProxyMode` | `false` | Beta | 1.9 | 1.9 |
 | `SupportIPVSProxyMode` | `true` | Beta | 1.10 | 1.10 |
 | `SupportIPVSProxyMode` | `true` | GA | 1.11 | - |
+| `SupportNodePidsLimit` | `false` | Alpha | 1.14 | 1.14 |
+| `SupportNodePidsLimit` | `true` | Beta | 1.15 | 1.19 |
+| `SupportNodePidsLimit` | `true` | GA | 1.20 | - |
+| `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 |
+| `SupportPodPidsLimit` | `true` | Beta | 1.14 | 1.19 |
+| `SupportPodPidsLimit` | `true` | GA | 1.20 | - |
 | `TaintBasedEvictions` | `false` | Alpha | 1.6 | 1.12 |
 | `TaintBasedEvictions` | `true` | Beta | 1.13 | 1.17 |
 | `TaintBasedEvictions` | `true` | GA | 1.18 | - |
 | `TaintNodesByCondition` | `false` | Alpha | 1.8 | 1.11 |
 | `TaintNodesByCondition` | `true` | Beta | 1.12 | 1.16 |
 | `TaintNodesByCondition` | `true` | GA | 1.17 | - |
+| `TokenRequest` | `false` | Alpha | 1.10 | 1.11 |
+| `TokenRequest` | `true` | Beta | 1.12 | 1.19 |
+| `TokenRequest` | `true` | GA | 1.20 | - |
+| `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
+| `TokenRequestProjection` | `true` | Beta | 1.12 | 1.19 |
+| `TokenRequestProjection` | `true` | GA | 1.20 | - |
+| `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 |
+| `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | 1.19 |
+| `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
 | `VolumePVCDataSource` | `false` | Alpha | 1.15 | 1.15 |
 | `VolumePVCDataSource` | `true` | Beta | 1.16 | 1.17 |
 | `VolumePVCDataSource` | `true` | GA | 1.18 | - |
 | `VolumeScheduling` | `false` | Alpha | 1.9 | 1.9 |
 | `VolumeScheduling` | `true` | Beta | 1.10 | 1.12 |
 | `VolumeScheduling` | `true` | GA | 1.13 | - |
-| `VolumeSubpath` | `true` | GA | 1.13 | - |
+| `VolumeSubpath` | `true` | GA | 1.10 | - |
 | `VolumeSubpathEnvExpansion` | `false` | Alpha | 1.14 | 1.14 |
 | `VolumeSubpathEnvExpansion` | `true` | Beta | 1.15 | 1.16 |
 | `VolumeSubpathEnvExpansion` | `true` | GA | 1.17 | - |
@@ -386,10 +428,9 @@ different Kubernetes components.
 
 ### Feature stages
 -->
+## 使用特性   {#using-a-feature}
 
-## 使用特性
-
-### 特性阶段
+### 特性阶段    {#feature-stages}
 
 <!--
 A feature can be in *Alpha*, *Beta* or *GA* stage.
@@ -408,7 +449,6 @@ An *Alpha* feature means:
 * Recommended for use only in short-lived testing clusters, due to increased
   risk of bugs and lack of long-term support.
 -->
-
 * 默认禁用。
 * 可能有错误，启用此特性可能会导致错误。
 * 随时可能删除对此特性的支持，恕不另行通知。
@@ -418,7 +458,6 @@ An *Alpha* feature means:
 <!--
 A *Beta* feature means:
 -->
-
 *Beta* 特性代表：
 
 <!--
@@ -434,12 +473,11 @@ A *Beta* feature means:
   incompatible changes in subsequent releases. If you have multiple clusters
   that can be upgraded independently, you may be able to relax this restriction.
 -->
-
-* 默认禁用。
+* 默认启用。
 * 该特性已经经过良好测试。启用该特性是安全的。
 * 尽管详细信息可能会更改，但不会放弃对整体特性的支持。
 * 对象的架构或语义可能会在随后的 Beta 或稳定版本中以不兼容的方式更改。当发生这种情况时，我们将提供迁移到下一版本的说明。此特性可能需要删除、编辑和重新创建 API 对象。编辑过程可能需要慎重操作，因为这可能会导致依赖该特性的应用程序停机。
-* 推荐仅用于非关键业务用途，因为在后续版本中可能会发生不兼容的更改。如果您具有多个可以独立升级的，则可以放宽此限制。
+* 推荐仅用于非关键业务用途，因为在后续版本中可能会发生不兼容的更改。如果你具有多个可以独立升级的，则可以放宽此限制。
 
 {{< note >}}
 <!--
@@ -453,7 +491,6 @@ After they exit beta, it may not be practical for us to make more changes.
 <!--
 A *General Availability* (GA) feature is also referred to as a *stable* feature. It means:
 -->
-
 *General Availability* (GA) 特性也称为 *稳定* 特性，*GA* 特性代表着：
 
 <!--
@@ -461,7 +498,6 @@ A *General Availability* (GA) feature is also referred to as a *stable* feature.
 * The corresponding feature gate is no longer needed.
 * Stable versions of features will appear in released software for many subsequent versions.
 -->
-
 * 此特性会一直启用；你不能禁用它。
 * 不再需要相应的特性门控。
 * 对于许多后续版本，特性的稳定版本将出现在发行的软件中。
@@ -476,89 +512,113 @@ Each feature gate is designed for enabling/disabling a specific feature:
 
 每个特性门控均用于启用或禁用某个特定的特性：
 
+<!--
+- `APIListChunking`: Enable the API clients to retrieve (`LIST` or `GET`)
+  resources from API server in chunks.
+- `APIPriorityAndFairness`: Enable managing request concurrency with
+  prioritization and fairness at each server. (Renamed from `RequestManagement`)
+- `APIResponseCompression`: Compress the API responses for `LIST` or `GET` requests.
+- `APIServerIdentity`: Assign each API server an ID in a cluster.
+-->
+- `APIListChunking`：启用 API 客户端以块的形式从 API 服务器检索（“LIST” 或 “GET”）资源。
+- `APIPriorityAndFairness`: 在每个服务器上启用优先级和公平性来管理请求并发。（由 `RequestManagement` 重命名而来）
+- `APIResponseCompression`：压缩 “LIST” 或 “GET” 请求的 API 响应。
+- `APIServerIdentity`：为集群中的每个 API 服务器赋予一个 ID。
 <!--
 - `Accelerators`: Enable Nvidia GPU support when using Docker
 - `AdvancedAuditing`: Enable [advanced auditing](/docs/tasks/debug-application-cluster/audit/#advanced-audit)
-- `AffinityInAnnotations`(*deprecated*): Enable setting [Pod affinity or anti-affinity](docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity).
+- `AffinityInAnnotations`(*deprecated*): Enable setting
+  [Pod affinity or anti-affinity](docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity).
 - `AllowExtTrafficLocalEndpoints`: Enable a service to route external requests to node local endpoints.
+- `AllowInsecureBackendProxy`: Enable the users to skip TLS verification of
+  kubelets on Pod log requests.
 - `AnyVolumeDataSource`: Enable use of any custom resource as the `DataSource` of a
   {{< glossary_tooltip text="PVC" term_id="persistent-volume-claim" >}}.
-- `APIListChunking`: Enable the API clients to retrieve (`LIST` or `GET`) resources from API server in chunks.
-- `APIPriorityAndFairness`: Enable managing request concurrency with prioritization and fairness at each server. (Renamed from `RequestManagement`)
-- `APIResponseCompression`: Compress the API responses for `LIST` or `GET` requests.
 - `AppArmor`: Enable AppArmor based mandatory access control on Linux nodes when using Docker.
    See [AppArmor Tutorial](/docs/tutorials/clusters/apparmor/) for more details.
 -->
-
 - `Accelerators`：使用 Docker 时启用 Nvidia GPU 支持。
 - `AdvancedAuditing`：启用[高级审计功能](/zh/docs/tasks/debug-application-cluster/audit/#advanced-audit)。
 - `AffinityInAnnotations`（ *已弃用* ）：启用 [Pod 亲和或反亲和](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity)。
 - `AllowExtTrafficLocalEndpoints`：启用服务用于将外部请求路由到节点本地终端。
-- `AnyVolumeDataSource`: 允许使用任何自定义的资源来做作为 {{< glossary_tooltip text="PVC" term_id="persistent-volume-claim" >}} 中的 `DataSource`.
-- `APIListChunking`：启用 API 客户端以块的形式从 API 服务器检索（“LIST” 或 “GET”）资源。
-- `APIPriorityAndFairness`: Enable managing request concurrency with prioritization and fairness at each server. (Renamed from `RequestManagement`)
-- `APIPriorityAndFairness`: 在每个服务器上启用优先级和公平性来管理请求并发。（由 `RequestManagement` 重命名而来）
-- `APIResponseCompression`：压缩 “LIST” 或 “GET” 请求的 API 响应。
-- `AppArmor`：使用 Docker 时，在 Linux 节点上启用基于 AppArmor 机制的强制访问控制。请参见 [AppArmor 教程](/zh/docs/tutorials/clusters/apparmor/) 获取详细信息。
-
+- `AllowInsecureBackendProxy`：允许用户在执行 Pod 日志访问请求时跳过 TLS 验证。
+- `AnyVolumeDataSource`: 允许使用任何自定义的资源来做作为
+  {{< glossary_tooltip text="PVC" term_id="persistent-volume-claim" >}} 中的 `DataSource`.
+- `AppArmor`：使用 Docker 时，在 Linux 节点上启用基于 AppArmor 机制的强制访问控制。
+  请参见 [AppArmor 教程](/zh/docs/tutorials/clusters/apparmor/) 获取详细信息。
 <!--
 - `AttachVolumeLimit`: Enable volume plugins to report limits on number of volumes
   that can be attached to a node.
-   See [dynamic volume limits](/docs/concepts/storage/storage-limits/#dynamic-volume-limits) for more details.
+  See [dynamic volume limits](/docs/concepts/storage/storage-limits/#dynamic-volume-limits) for more details.
 - `BalanceAttachedNodeVolumes`: Include volume count on node to be considered for balanced resource allocation
   while scheduling. A node which has closer CPU, memory utilization, and volume count is favored by the scheduler
   while making decisions.
 - `BlockVolume`: Enable the definition and consumption of raw block devices in Pods.
-   See [Raw Block Volume Support](/docs/concepts/storage/persistent-volumes/#raw-block-volume-support)
+  See [Raw Block Volume Support](/docs/concepts/storage/persistent-volumes/#raw-block-volume-support)
    for more details.
 - `BoundServiceAccountTokenVolume`: Migrate ServiceAccount volumes to use a projected volume consisting of a
-   ServiceAccountTokenVolumeProjection. Cluster admins can use metric `serviceaccount_stale_tokens_total` to
-   monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off
-   extended tokens by starting `kube-apiserver` with flag `--service-account-extend-token-expiration=false`.
-   Check [Bound Service Account Tokens](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md)
-   for more details.
-- `ConfigurableFSGroupPolicy`: Allows user to configure volume permission change policy for fsGroups when mounting a volume in a Pod. See 
-   [Configure volume permission and ownership change policy for Pods](/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods) for more details.
-- `CPUManager`: Enable container level CPU affinity support, see [CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/).
+  ServiceAccountTokenVolumeProjection. Cluster admins can use metric `serviceaccount_stale_tokens_total` to
+  monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off
+  extended tokens by starting `kube-apiserver` with flag `--service-account-extend-token-expiration=false`.
+  Check [Bound Service Account Tokens](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md)
+  for more details.
 -->
-
-- `AttachVolumeLimit`：启用卷插件用于报告可连接到节点的卷数限制。有关更多详细信息，请参见
+- `AttachVolumeLimit`：启用卷插件用于报告可连接到节点的卷数限制。有关更多详细信息，请参阅
   [动态卷限制](/zh/docs/concepts/storage/storage-limits/#dynamic-volume-limits)。
-- `BalanceAttachedNodeVolumes`：包括要在调度时进行平衡资源分配的节点上的卷数。
+- `BalanceAttachedNodeVolumes`：在进行平衡资源分配的调度时，考虑节点上的卷数。
   调度器在决策时会优先考虑 CPU、内存利用率和卷数更近的节点。
 - `BlockVolume`：在 Pod 中启用原始块设备的定义和使用。有关更多详细信息，请参见
   [原始块卷支持](/zh/docs/concepts/storage/persistent-volumes/#raw-block-volume-support)。
 - `BoundServiceAccountTokenVolume`：迁移 ServiceAccount 卷以使用由
-   ServiceAccountTokenVolumeProjection 组成的投射卷。集群管理员可以使用 `serviceaccount_stale_tokens_total` 
-   度量值来监控依赖于扩展令牌的负载。如果没有这种类型的负载，你可以在启动 `kube-apiserver` 时
-   添加 `--service-account-extend-token-expiration=false` 参数关闭扩展令牌。查看 
-   [绑定服务账号令牌](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md)
-   获取更多详细信息。
-- `ConfigurableFSGroupPolicy`：在 Pod 中挂载卷时，允许用户为 fsGroup
-  配置卷访问权限和属主变更策略。请参见
-  [为 Pod 配置卷访问权限和属主变更策略](/zh/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods)。
+  ServiceAccountTokenVolumeProjection 组成的投射卷。集群管理员可以使用
+  `serviceaccount_stale_tokens_total` 度量值来监控依赖于扩展令牌的负载。
+  如果没有这种类型的负载，你可以在启动 `kube-apiserver` 时添加
+  `--service-account-extend-token-expiration=false` 参数关闭扩展令牌。查看 
+  [绑定服务账号令牌](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md)
+  获取更多详细信息。
+<!--
+- `CPUManager`: Enable container level CPU affinity support, see
+  [CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/).
+- `CRIContainerLogRotation`: Enable container log rotation for cri container runtime.
+- `CSIBlockVolume`: Enable external CSI volume drivers to support block storage.
+  See the [`csi` raw block volume support](/docs/concepts/storage/volumes/#csi-raw-block-volume-support)
+  documentation for more details.
+- `CSIDriverRegistry`: Enable all logic related to the CSIDriver API object in
+  csi.storage.k8s.io.
+- `CSIInlineVolume`: Enable CSI Inline volumes support for pods.
+- `CSIMigration`: Enables shims and translation logic to route volume
+  operations from in-tree plugins to corresponding pre-installed CSI plugins
+-->
 - `CPUManager`：启用容器级别的 CPU 亲和性支持，有关更多详细信息，请参见
   [CPU 管理策略](/zh/docs/tasks/administer-cluster/cpu-management-policies/)。
-
-<!--
-- `CRIContainerLogRotation`: Enable container log rotation for cri container runtime.
-- `CSIBlockVolume`: Enable external CSI volume drivers to support block storage. See the [`csi` raw block volume support](/docs/concepts/storage/volumes/#csi-raw-block-volume-support) documentation for more details.
-- `CSIDriverRegistry`: Enable all logic related to the CSIDriver API object in csi.storage.k8s.io.
-- `CSIInlineVolume`: Enable CSI Inline volumes support for pods.
-- `CSIMigration`: Enables shims and translation logic to route volume operations from in-tree plugins to corresponding pre-installed CSI plugins
-- `CSIMigrationAWS`: Enables shims and translation logic to route volume operations from the AWS-EBS in-tree plugin to EBS CSI plugin. Supports falling back to in-tree EBS plugin if a node does not have EBS CSI plugin installed and configured. Requires CSIMigration feature flag enabled.
-- `CSIMigrationAWSComplete`: Stops registering the EBS in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the AWS-EBS in-tree plugin to EBS CSI plugin. Requires CSIMigration and CSIMigrationAWS feature flags enabled and EBS CSI plugin installed and configured on all nodes in the cluster.
-- `CSIMigrationAzureDisk`: Enables shims and translation logic to route volume operations from the Azure-Disk in-tree plugin to AzureDisk CSI plugin. Supports falling back to in-tree AzureDisk plugin if a node does not have AzureDisk CSI plugin installed and configured. Requires CSIMigration feature flag enabled.
-- `CSIMigrationAzureDiskComplete`: Stops registering the Azure-Disk in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the Azure-Disk in-tree plugin to AzureDisk CSI plugin. Requires CSIMigration and CSIMigrationAzureDisk feature flags enabled and AzureDisk CSI plugin installed and configured on all nodes in the cluster.
-- `CSIMigrationAzureFile`: Enables shims and translation logic to route volume operations from the Azure-File in-tree plugin to AzureFile CSI plugin. Supports falling back to in-tree AzureFile plugin if a node does not have AzureFile CSI plugin installed and configured. Requires CSIMigration feature flag enabled.
-- `CSIMigrationAzureFileComplete`: Stops registering the Azure-File in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the Azure-File in-tree plugin to AzureFile CSI plugin. Requires CSIMigration and CSIMigrationAzureFile feature flags  enabled and AzureFile CSI plugin installed and configured on all nodes in the cluster.
--->
 - `CRIContainerLogRotation`：为 cri 容器运行时启用容器日志轮换。
 - `CSIBlockVolume`：启用外部 CSI 卷驱动程序用于支持块存储。有关更多详细信息，请参见
   [`csi` 原始块卷支持](/zh/docs/concepts/storage/volumes/#csi-raw-block-volume-support)。
 - `CSIDriverRegistry`：在 csi.storage.k8s.io 中启用与 CSIDriver API 对象有关的所有逻辑。
 - `CSIInlineVolume`：为 Pod 启用 CSI 内联卷支持。
-- `CSIMigration`：确保填充和转换逻辑能够将卷操作从内嵌插件路由到相应的预安装 CSI 插件。
+- `CSIMigration`：确保封装和转换逻辑能够将卷操作从内嵌插件路由到相应的预安装 CSI 插件。
+<!--
+- `CSIMigrationAWS`: Enables shims and translation logic to route volume
+  operations from the AWS-EBS in-tree plugin to EBS CSI plugin. Supports
+  falling back to in-tree EBS plugin if a node does not have EBS CSI plugin
+  installed and configured. Requires CSIMigration feature flag enabled.
+- `CSIMigrationAWSComplete`: Stops registering the EBS in-tree plugin in
+  kubelet and volume controllers and enables shims and translation logic to
+  route volume operations from the AWS-EBS in-tree plugin to EBS CSI plugin.
+  Requires CSIMigration and CSIMigrationAWS feature flags enabled and EBS CSI
+  plugin installed and configured on all nodes in the cluster.
+- `CSIMigrationAzureDisk`: Enables shims and translation logic to route volume
+  operations from the Azure-Disk in-tree plugin to AzureDisk CSI plugin.
+  Supports falling back to in-tree AzureDisk plugin if a node does not have
+  AzureDisk CSI plugin installed and configured. Requires CSIMigration feature
+  flag enabled.
+- `CSIMigrationAzureDiskComplete`: Stops registering the Azure-Disk in-tree
+  plugin in kubelet and volume controllers and enables shims and translation
+  logic to route volume operations from the Azure-Disk in-tree plugin to
+  AzureDisk CSI plugin. Requires CSIMigration and CSIMigrationAzureDisk feature
+  flags enabled and AzureDisk CSI plugin installed and configured on all nodes
+  in the cluster.
+-->
 - `CSIMigrationAWS`：确保填充和转换逻辑能够将卷操作从 AWS-EBS 内嵌插件路由到 EBS CSI 插件。
   如果节点未安装和配置 EBS CSI 插件，则支持回退到内嵌 EBS 插件。
   这需要启用 CSIMigration 特性标志。
@@ -573,25 +633,36 @@ Each feature gate is designed for enabling/disabling a specific feature:
   并启用 shims 和转换逻辑以将卷操作从 Azure 磁盘内嵌插件路由到 AzureDisk CSI 插件。
   这需要启用 CSIMigration 和 CSIMigrationAzureDisk 特性标志，
   并在集群中的所有节点上安装和配置 AzureDisk CSI 插件。
-- `CSIMigrationAzureFile`：确保填充和转换逻辑能够将卷操作从 Azure 文件内嵌插件路由到
+<!--
+- `CSIMigrationAzureFile`: Enables shims and translation logic to route volume
+  operations from the Azure-File in-tree plugin to AzureFile CSI plugin.
+  Supports falling back to in-tree AzureFile plugin if a node does not have
+  AzureFile CSI plugin installed and configured. Requires CSIMigration feature
+  flag enabled.
+- `CSIMigrationAzureFileComplete`: Stops registering the Azure-File in-tree
+  plugin in kubelet and volume controllers and enables shims and translation
+  logic to route volume operations from the Azure-File in-tree plugin to
+  AzureFile CSI plugin. Requires CSIMigration and CSIMigrationAzureFile feature
+  flags  enabled and AzureFile CSI plugin installed and configured on all nodes
+  in the cluster.
+-->
+- `CSIMigrationAzureFile`：确保封装和转换逻辑能够将卷操作从 Azure 文件内嵌插件路由到
   Azure 文件 CSI 插件。如果节点未安装和配置 AzureFile CSI 插件，
   支持回退到内嵌 AzureFile 插件。这需要启用 CSIMigration 特性标志。
 - `CSIMigrationAzureFileComplete`：停止在 kubelet 和卷控制器中注册 Azure-File 内嵌插件，
   并启用 shims 和转换逻辑以将卷操作从 Azure-File 内嵌插件路由到 AzureFile CSI 插件。
   这需要启用 CSIMigration 和 CSIMigrationAzureFile 特性标志，
   并在集群中的所有节点上安装和配置 AzureFile CSI 插件。
-
 <!--
-- `CSIMigrationGCE`: Enables shims and translation logic to route volume operations from the GCE-PD in-tree plugin to PD CSI plugin. Supports falling back to in-tree GCE plugin if a node does not have PD CSI plugin installed and configured. Requires CSIMigration feature flag enabled.
-- `CSIMigrationGCEComplete`: Stops registering the GCE-PD in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the GCE-PD in-tree plugin to PD CSI plugin. Requires CSIMigration and CSIMigrationGCE feature flags enabled and PD CSI plugin installed and configured on all nodes in the cluster.
-- `CSIMigrationOpenStack`: Enables shims and translation logic to route volume operations from the Cinder in-tree plugin to Cinder CSI plugin. Supports falling back to in-tree Cinder plugin if a node does not have Cinder CSI plugin installed and configured. Requires CSIMigration feature flag enabled.
-- `CSIMigrationOpenStackComplete`: Stops registering the Cinder in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the Cinder in-tree plugin to Cinder CSI plugin. Requires CSIMigration and CSIMigrationOpenStack feature flags enabled and Cinder CSI plugin installed and configured on all nodes in the cluster.
-- `CSIMigrationvSphere`: Enables shims and translation logic to route volume operations from the vSphere in-tree plugin to vSphere CSI plugin. Supports falling back to in-tree vSphere plugin if a node does not have vSphere CSI plugin installed and configured. Requires CSIMigration feature flag enabled.
-- `CSIMigrationvSphereComplete`: Stops registering the vSphere in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the vSphere in-tree plugin to vSphere CSI plugin. Requires CSIMigration and CSIMigrationvSphere feature flags enabled and vSphere CSI plugin installed and configured on all nodes in the cluster.
-- `CSINodeInfo`: Enable all logic related to the CSINodeInfo API object in csi.storage.k8s.io.
-- `CSIPersistentVolume`: Enable discovering and mounting volumes provisioned through a
-  [CSI (Container Storage Interface)](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/container-storage-interface.md)
-  compatible volume plugin.
+- `CSIMigrationGCE`: Enables shims and translation logic to route volume
+  operations from the GCE-PD in-tree plugin to PD CSI plugin. Supports falling
+  back to in-tree GCE plugin if a node does not have PD CSI plugin installed and
+  configured. Requires CSIMigration feature flag enabled.
+- `CSIMigrationGCEComplete`: Stops registering the GCE-PD in-tree plugin in
+  kubelet and volume controllers and enables shims and translation logic to
+  route volume operations from the GCE-PD in-tree plugin to PD CSI plugin.
+  Requires CSIMigration and CSIMigrationGCE feature flags enabled and PD CSI
+  plugin installed and configured on all nodes in the cluster.
 -->
 - `CSIMigrationGCE`：启用 shims 和转换逻辑，将卷操作从 GCE-PD 内嵌插件路由到
   PD CSI 插件。如果节点未安装和配置 PD CSI 插件，支持回退到内嵌 GCE 插件。
@@ -600,6 +671,17 @@ Each feature gate is designed for enabling/disabling a specific feature:
   并启用 shims 和转换逻辑以将卷操作从 GCE-PD 内嵌插件路由到 PD CSI 插件。
   这需要启用 CSIMigration 和 CSIMigrationGCE 特性标志，并在集群中的所有节点上
   安装和配置 PD CSI 插件。
+<!--
+- `CSIMigrationOpenStack`: Enables shims and translation logic to route volume
+  operations from the Cinder in-tree plugin to Cinder CSI plugin. Supports
+  falling back to in-tree Cinder plugin if a node does not have Cinder CSI
+  plugin installed and configured. Requires CSIMigration feature flag enabled.
+- `CSIMigrationOpenStackComplete`: Stops registering the Cinder in-tree plugin in
+  kubelet and volume controllers and enables shims and translation logic to route
+  volume operations from the Cinder in-tree plugin to Cinder CSI plugin.
+  Requires CSIMigration and CSIMigrationOpenStack feature flags enabled and Cinder
+  CSI plugin installed and configured on all nodes in the cluster.
+-->
 - `CSIMigrationOpenStack`：确保填充和转换逻辑能够将卷操作从 Cinder 内嵌插件路由到
   Cinder CSI 插件。如果节点未安装和配置 Cinder CSI 插件，支持回退到内嵌 Cinder 插件。
   这需要启用 CSIMigration 特性标志。
@@ -607,27 +689,71 @@ Each feature gate is designed for enabling/disabling a specific feature:
   并启用 shims 和转换逻辑将卷操作从 Cinder 内嵌插件路由到 Cinder CSI 插件。
   这需要启用 CSIMigration 和 CSIMigrationOpenStack 特性标志，并在集群中的所有节点上
   安装和配置 Cinder CSI 插件。
-- `CSIMigrationvSphere`: 启用 shims 和转换逻辑，将卷操作从 vSphere 内嵌插件路由到
-  vSphere CSI 插件。
-  如果节点未安装和配置 vSphere CSI 插件，则支持回退到 vSphere 内嵌插件。
-  这需要启用 CSIMigration 特性标志。
+<!--
+- `CSIMigrationvSphere`: Enables shims and translation logic to route volume operations
+  from the vSphere in-tree plugin to vSphere CSI plugin.
+  Supports falling back to in-tree vSphere plugin if a node does not have vSphere
+  CSI plugin installed and configured. Requires CSIMigration feature flag enabled.
+- `CSIMigrationvSphereComplete`: Stops registering the vSphere in-tree plugin in kubelet
+  and volume controllers and enables shims and translation logic to route volume operations
+  from the vSphere in-tree plugin to vSphere CSI plugin. Requires CSIMigration and
+  CSIMigrationvSphere feature flags enabled and vSphere CSI plugin installed and
+  configured on all nodes in the cluster.
+-->
+- `CSIMigrationvSphere`: 允许封装和转换逻辑将卷操作从 vSphere 内嵌插件路由到
+  vSphere CSI 插件。如果节点未安装和配置 vSphere CSI 插件，则支持回退到
+  vSphere 内嵌插件。这需要启用 CSIMigration 特性标志。
 - `CSIMigrationvSphereComplete`: 停止在 kubelet 和卷控制器中注册 vSphere 内嵌插件，
   并启用 shims 和转换逻辑以将卷操作从 vSphere 内嵌插件路由到 vSphere CSI 插件。
   这需要启用 CSIMigration 和 CSIMigrationvSphere 特性标志，并在集群中的所有节点上
   安装和配置 vSphere CSI 插件。
+<!--
+- `CSINodeInfo`: Enable all logic related to the CSINodeInfo API object in csi.storage.k8s.io.
+- `CSIPersistentVolume`: Enable discovering and mounting volumes provisioned through a
+  [CSI (Container Storage Interface)](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/container-storage-interface.md)
+  compatible volume plugin.
+- `CSIServiceAccountToken`: Enable CSI drivers to receive the pods' service account token
+  that they mount volumes for. See
+  [Token Requests](https://kubernetes-csi.github.io/docs/token-requests.html).
+- `CSIStorageCapacity`: Enables CSI drivers to publish storage capacity information
+  and the Kubernetes scheduler to use that information when scheduling pods. See
+  [Storage Capacity](/docs/concepts/storage/storage-capacity/).
+  Check the [`csi` volume type](/docs/concepts/storage/volumes/#csi) documentation for more details.
+-->
 - `CSINodeInfo`：在 csi.storage.k8s.io 中启用与 CSINodeInfo API 对象有关的所有逻辑。
 - `CSIPersistentVolume`：启用发现和挂载通过
   [CSI（容器存储接口）](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/container-storage-interface.md)
   兼容卷插件配置的卷。
+- `CSIServiceAccountToken`: 允许 CSI 驱动接收挂载卷目标 Pods 的服务账户令牌。
+  参阅[令牌请求（Token Requests）](https://kubernetes-csi.github.io/docs/token-requests.html)。
 - `CSIStorageCapacity`: 使 CSI 驱动程序可以发布存储容量信息，并使 Kubernetes
   调度程序在调度 Pod 时使用该信息。参见
   [存储容量](/zh/docs/concepts/storage/storage-capacity/)。
   详情请参见 [`csi` 卷类型](/zh/docs/concepts/storage/volumes/#csi)。
+<!--
+- `CSIVolumeFSGroupPolicy`: Allows CSIDrivers to use the `fsGroupPolicy` field.
+  This field controls whether volumes created by a CSIDriver support volume ownership
+  and permission modifications when these volumes are mounted.
+- `ConfigurableFSGroupPolicy`: Allows user to configure volume permission change policy
+  for fsGroups when mounting a volume in a Pod. See
+  [Configure volume permission and ownership change policy for Pods](/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods)
+  for more details.
+- `CronJobControllerV2`: Use an alternative implementation of the
+  {{< glossary_tooltip text="CronJob" term_id="cronjob" >}} controller. Otherwise,
+  version 1 of the same controller is selected.
+  The version 2 controller provides experimental performance improvements.
+-->
 - `CSIVolumeFSGroupPolicy`: 允许 CSIDrivers 使用 `fsGroupPolicy` 字段. 
   该字段能控制由 CSIDriver 创建的卷在挂载这些卷时是否支持卷所有权和权限修改。
-
+- `ConfigurableFSGroupPolicy`：在 Pod 中挂载卷时，允许用户为 fsGroup
+  配置卷访问权限和属主变更策略。请参见
+  [为 Pod 配置卷访问权限和属主变更策略](/zh/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods)。
+- `CronJobControllerV2`：使用 {{< glossary_tooltip text="CronJob" term_id="cronjob" >}}
+  控制器的一种替代实现。否则，系统会选择同一控制器的 v1 版本。
+  控制器的 v2 版本提供试验性的性能改进。
 <!--
-- `CustomCPUCFSQuotaPeriod`: Enable nodes to change CPUCFSQuotaPeriod.
+- `CustomCPUCFSQuotaPeriod`: Enable nodes to change `cpuCFSQuotaPeriod` in
+  [kubelet config](/docs/tasks/administer-cluster/kubelet-config-file/).
 - `CustomPodDNS`: Enable customizing the DNS settings for a Pod using its `dnsConfig` property.
    Check [Pod's DNS Config](/docs/concepts/services-networking/dns-pod-service/#pods-dns-config)
    for more details.
@@ -639,242 +765,353 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [CustomResourceDefinition](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
 - `CustomResourceWebhookConversion`: Enable webhook-based conversion
   on resources created from [CustomResourceDefinition](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
-  troubleshoot a running Pod.
 -->
-- `CustomCPUCFSQuotaPeriod`：使节点能够更改 CPUCFSQuotaPeriod。
-- `CustomPodDNS`：使用其 `dnsConfig` 属性启用 Pod 的自定义 DNS 设置。
+- `CustomCPUCFSQuotaPeriod`：使节点能够更改
+  [kubelet 配置](/zh/docs/tasks/administer-cluster/kubelet-config-file/).
+  中的 `cpuCFSQuotaPeriod`。
+- `CustomPodDNS`：允许使用 Pod 的 `dnsConfig` 属性自定义其 DNS 设置。
   更多详细信息，请参见
   [Pod 的 DNS 配置](/zh/docs/concepts/services-networking/dns-pod-service/#pods-dns-config)。
-- `CustomResourceDefaulting`：为 OpenAPI v3 验证架构中的默认值启用 CRD 支持。
+- `CustomResourceDefaulting`：为 CRD 启用在其 OpenAPI v3 验证模式中提供默认值的支持。
 - `CustomResourcePublishOpenAPI`：启用 CRD OpenAPI 规范的发布。
 - `CustomResourceSubresources`：对于用
   [CustomResourceDefinition](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
-  创建的资源启用 `/status` 和 `/scale` 子资源。
+  创建的资源启用其 `/status` 和 `/scale` 子资源。
 - `CustomResourceValidation`：对于用
   [CustomResourceDefinition](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
   创建的资源启用基于模式的验证。
 - `CustomResourceWebhookConversion`：对于用
   [CustomResourceDefinition](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
   创建的资源启用基于 Webhook 的转换。
-  对正在运行的 Pod 进行故障排除。
-
 <!--
-- `DisableAcceleratorUsageMetrics`: [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/system-metrics/).
-- `DevicePlugins`: Enable the [device-plugins](/docs/concepts/cluster-administration/device-plugins/)
-  based resource provisioning on nodes.
 - `DefaultPodTopologySpread`: Enables the use of `PodTopologySpread` scheduling plugin to do
   [default spreading](/docs/concepts/workloads/pods/pod-topology-spread-constraints/#internal-default-constraints).
+- `DevicePlugins`: Enable the [device-plugins](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
+  based resource provisioning on nodes.
+- `DisableAcceleratorUsageMetrics`:
+  [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/system-metrics/).
+- `DownwardAPIHugePages`: Enables usage of hugepages in
+  [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information).
 - `DryRun`: Enable server-side [dry run](/docs/reference/using-api/api-concepts/#dry-run) requests
   so that validation, merging, and mutation can be tested without committing.
 - `DynamicAuditing`(*deprecated*): Used to enable dynamic auditing before v1.19.
-- `DynamicKubeletConfig`: Enable the dynamic configuration of kubelet. See [Reconfigure kubelet](/docs/tasks/administer-cluster/reconfigure-kubelet/).
-- `DynamicProvisioningScheduling`: Extend the default scheduler to be aware of volume topology and handle PV provisioning.
-  This feature is superseded by the `VolumeScheduling` feature completely in v1.12.
-- `DynamicVolumeProvisioning`(*deprecated*): Enable the [dynamic provisioning](/docs/concepts/storage/dynamic-provisioning/) of persistent volumes to Pods.
 -->
-- `DisableAcceleratorUsageMetrics`: 
-  [禁用 kubelet 收集加速器指标](/zh/docs/concepts/cluster-administration/system-metrics/).
-- `DevicePlugins`：在节点上启用基于
-  [设备插件](/zh/docs/concepts/cluster-administration/device-plugins/) 资源供应。
-- `DefaultPodTopologySpread`: 启用 `PodTopologySpread` 调度插件来做
+- `DefaultPodTopologySpread`: 启用 `PodTopologySpread` 调度插件来完成
   [默认的调度传播](/zh/docs/concepts/workloads/pods/pod-topology-spread-constraints/#internal-default-constraints).
-- `DryRun`：启用服务器端
-  [dry run](/zh/docs/reference/using-api/api-concepts/#dry-run) 请求，
-  以便无需提交即可测试验证、合并和差异化。
+- `DevicePlugins`：在节点上启用基于
+  [设备插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)的
+  资源制备。
+- `DisableAcceleratorUsageMetrics`： 
+  [禁用 kubelet 收集加速器指标](/zh/docs/concepts/cluster-administration/system-metrics/).
+- `DownwardAPIHugePages`：允许在
+  [下行（Downward）API](/zh/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information)
+  中使用巨页信息。
+- `DryRun`：启用在服务器端对请求进行
+  [彩排（Dry Run）](/zh/docs/reference/using-api/api-concepts/#dry-run)，
+  以便测试验证、合并和修改，同时避免提交更改。
 - `DynamicAuditing`（ *已弃用* ）：在 v1.19 版本前用于启用动态审计。
+<!--
+- `DynamicKubeletConfig`: Enable the dynamic configuration of kubelet. See
+  [Reconfigure kubelet](/docs/tasks/administer-cluster/reconfigure-kubelet/).
+- `DynamicProvisioningScheduling`: Extend the default scheduler to be aware of
+  volume topology and handle PV provisioning.
+  This feature is superseded by the `VolumeScheduling` feature completely in v1.12.
+- `DynamicVolumeProvisioning`(*deprecated*): Enable the
+  [dynamic provisioning](/docs/concepts/storage/dynamic-provisioning/) of persistent volumes to Pods.
+- `EfficientWatchResumption`: Allows for storage-originated bookmark (progress
+  notify) events to be delivered to the users. This is only applied to watch
+  operations.
+- `EnableAggregatedDiscoveryTimeout` (*deprecated*): Enable the five second
+  timeout on aggregated discovery calls.
+-->
 - `DynamicKubeletConfig`：启用 kubelet 的动态配置。请参阅
   [重新配置 kubelet](/zh/docs/tasks/administer-cluster/reconfigure-kubelet/)。
 - `DynamicProvisioningScheduling`：扩展默认调度器以了解卷拓扑并处理 PV 配置。
   此特性已在 v1.12 中完全被 `VolumeScheduling` 特性取代。
 - `DynamicVolumeProvisioning`（ *已弃用* ）：启用持久化卷到 Pod 的
   [动态预配置](/zh/docs/concepts/storage/dynamic-provisioning/)。
-
-<!--
-- `EnableAggregatedDiscoveryTimeout` (*deprecated*): Enable the five second timeout on aggregated discovery calls.
-- `EnableEquivalenceClassCache`: Enable the scheduler to cache equivalence of nodes when scheduling Pods.
-- `EphemeralContainers`: Enable the ability to add {{< glossary_tooltip text="ephemeral containers"
-  term_id="ephemeral-container" >}} to running pods.
-- `EvenPodsSpread`: Enable pods to be scheduled evenly across topology domains. See [Pod Topology Spread Constraints](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
-- `ExpandInUsePersistentVolumes`: Enable expanding in-use PVCs. See [Resizing an in-use PersistentVolumeClaim](/docs/concepts/storage/persistent-volumes/#resizing-an-in-use-persistentvolumeclaim).
-- `ExpandPersistentVolumes`: Enable the expanding of persistent volumes. See [Expanding Persistent Volumes Claims](/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims).
-- `ExperimentalCriticalPodAnnotation`: Enable annotating specific pods as *critical* so that their [scheduling is guaranteed](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/).
-  This feature is deprecated by Pod Priority and Preemption as of v1.13.
--->
+- `EfficientWatchResumption`：允许从存储发起的 bookmark（进度通知）事件被
+  通知到用户。此特性仅适用于 watch 操作。
 - `EnableAggregatedDiscoveryTimeout`（ *已弃用* ）：对聚集的发现调用启用五秒钟超时设置。
+<!--
+- `EnableEquivalenceClassCache`: Enable the scheduler to cache equivalence of
+  nodes when scheduling Pods.
+- `EndpointSlice`: Enables EndpointSlices for more scalable and extensible
+   network endpoints. See [Enabling EndpointSlices](/docs/tasks/administer-cluster/enabling-endpointslices/).
+- `EndpointSliceNodeName`: Enables EndpointSlice `nodeName` field.
+- `EndpointSliceProxying`: When enabled, kube-proxy running
+   on Linux will use EndpointSlices as the primary data source instead of
+   Endpoints, enabling scalability and performance improvements. See
+   [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/).
+- `EndpointSliceTerminatingCondition`: Enables EndpointSlice `terminating` and `serving`
+   condition fields.
+-->
 - `EnableEquivalenceClassCache`：调度 Pod 时，使 scheduler 缓存节点的等效项。
+- `EndpointSlice`：启用 EndpointSlice 以实现可扩缩性和可扩展性更好的网络端点。
+   参阅[启用 EndpointSlice](/zh/docs/tasks/administer-cluster/enabling-endpointslices/)。
+- `EndpointSliceNodeName`：允许使用 EndpointSlice 的 `nodeName` 字段。
+- `EndpointSliceProxying`：启用此特性门控时，Linux 上运行的 kube-proxy 会使用
+   EndpointSlices 而不是 Endpoints 作为其主要数据源，从而使得可扩缩性和性能
+   提升成为可能。参阅
+   [启用 EndpointSlice](/zh/docs/tasks/administer-cluster/enabling-endpointslices/)。
+- `EndpointSliceTerminatingCondition`：允许使用 EndpointSlice 的 `terminating` 和
+  `serving` 状况字段。
+<!--
+- `EphemeralContainers`: Enable the ability to add
+  {{< glossary_tooltip text="ephemeral containers" term_id="ephemeral-container" >}}
+  to running pods.
+- `EvenPodsSpread`: Enable pods to be scheduled evenly across topology domains. See
+  [Pod Topology Spread Constraints](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
+- `ExecProbeTimeout`: Ensure kubelet respects exec probe timeouts.
+  This feature gate exists in case any of your existing workloads depend on a
+  now-corrected fault where Kubernetes ignored exec probe timeouts. See
+  [readiness probes](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes).
+-->
 - `EphemeralContainers`：启用添加
   {{< glossary_tooltip text="临时容器" term_id="ephemeral-container" >}}
   到正在运行的 Pod 的特性。
 - `EvenPodsSpread`：使 Pod 能够在拓扑域之间平衡调度。请参阅
   [Pod 拓扑扩展约束](/zh/docs/concepts/workloads/pods/pod-topology-spread-constraints/)。
-- `ExpandInUsePersistentVolumes`：启用扩展使用中的 PVC。请查阅
+- `ExecProbeTimeout`：确保 kubelet 会遵从 exec 探针的超时值设置。
+  此特性门控的主要目的是方便你处理现有的、依赖于已被修复的缺陷的工作负载；
+  该缺陷导致 Kubernetes 会忽略 exec 探针的超时值设置。
+  参阅[就绪态探针](/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes).
+<!--
+- `ExpandInUsePersistentVolumes`: Enable expanding in-use PVCs. See
+  [Resizing an in-use PersistentVolumeClaim](/docs/concepts/storage/persistent-volumes/#resizing-an-in-use-persistentvolumeclaim).
+- `ExpandPersistentVolumes`: Enable the expanding of persistent volumes. See
+  [Expanding Persistent Volumes Claims](/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims).
+- `ExperimentalCriticalPodAnnotation`: Enable annotating specific pods as *critical*
+  so that their [scheduling is guaranteed](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/).
+  This feature is deprecated by Pod Priority and Preemption as of v1.13.
+-->
+- `ExpandInUsePersistentVolumes`：启用扩充使用中的 PVC 的尺寸。请查阅
   [调整使用中的 PersistentVolumeClaim 的大小](/zh/docs/concepts/storage/persistent-volumes/#resizing-an-in-use-persistentvolumeclaim)。
-- `ExpandPersistentVolumes`：启用持久卷的扩展。请查阅
-  [扩展永久卷声明](/zh/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims)。
+- `ExpandPersistentVolumes`：允许扩充持久卷。请查阅
+  [扩展持久卷申领](/zh/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims)。
 - `ExperimentalCriticalPodAnnotation`：启用将特定 Pod 注解为 *critical* 的方式，用于
-  [确保其调度](/zh/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/)。
-  从 v1.13 开始，Pod 优先级和抢占功能已弃用此特性。
-
+  [确保其被调度](/zh/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/)。
+  从 v1.13 开始已弃用此特性，转而使用 Pod 优先级和抢占功能。
 <!--
 - `ExperimentalHostUserNamespaceDefaultingGate`: Enabling the defaulting user
    namespace to host. This is for containers that are using other host namespaces,
    host mounts, or containers that are privileged or using specific non-namespaced
    capabilities (e.g. `MKNODE`, `SYS_MODULE` etc.). This should only be enabled
    if user namespace remapping is enabled in the Docker daemon.
-- `EndpointSlice`: Enables Endpoint Slices for more scalable and extensible
-   network endpoints. See [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/).
-- `EndpointSliceProxying`: When this feature gate is enabled, kube-proxy running
-   on Linux will use EndpointSlices as the primary data source instead of
-   Endpoints, enabling scalability and performance improvements. See
-   [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/).
-- `WindowsEndpointSliceProxying`: When this feature gate is enabled, kube-proxy
-   running on Windows will use EndpointSlices as the primary data source instead
-   of Endpoints, enabling scalability and performance improvements. See
-   [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/).
 - `GCERegionalPersistentDisk`: Enable the regional PD feature on GCE.
-- `GenericEphemeralVolume`: Enables ephemeral, inline volumes that support all features of normal volumes (can be provided by third-party storage vendors, storage capacity tracking, restore from snapshot, etc.). See [Ephemeral Volumes](/docs/concepts/storage/ephemeral-volumes/).
-- `HugePages`: Enable the allocation and consumption of pre-allocated [huge pages](/docs/tasks/manage-hugepages/scheduling-hugepages/).
-- `HugePageStorageMediumSize`: Enable support for multiple sizes pre-allocated [huge pages](/docs/tasks/manage-hugepages/scheduling-hugepages/).
+- `GenericEphemeralVolume`: Enables ephemeral, inline volumes that support all features
+  of normal volumes (can be provided by third-party storage vendors, storage capacity tracking,
+  restore from snapshot, etc.).
+  See [Ephemeral Volumes](/docs/concepts/storage/ephemeral-volumes/).
+- `GracefulNodeShutdown`: Enables support for graceful shutdown in kubelet.
+  During a system shutdown, kubelet will attempt to detect the shutdown event
+  and gracefully terminate pods running on the node. See
+  [Graceful Node Shutdown](/docs/concepts/architecture/nodes/#graceful-node-shutdown)
+  for more details.
 -->
 - `ExperimentalHostUserNamespaceDefaultingGate`：启用主机默认的用户名字空间。
   这适用于使用其他主机名字空间、主机安装的容器，或具有特权或使用特定的非名字空间功能
   （例如 MKNODE、SYS_MODULE 等）的容器。
   如果在 Docker 守护程序中启用了用户名字空间重新映射，则启用此选项。
-- `EndpointSlice`：启用 EndpointSlice 以实现更多可扩展的网络端点。
-  需要启用相应的 API 和控制器，请参阅
-  [启用 EndpointSlice](/zh/docs/tasks/administer-cluster/enabling-endpointslices/)。
-- `EndpointSliceProxying`：启用此特性门控后，Linux 上运行的 kube-proxy 将使用
-  EndpointSlices 取代 Endpoints 作为主要数据源，可以提高扩展性和性能。 请参见
-  [启用 EndpointSlice](/zh/docs/tasks/administer-cluster/enabling-endpointslices/)。
-- `WindowsEndpointSliceProxying`：启用此特性门控后，Windows 上运行的 kube-proxy
-  将使用 EndpointSlices 取代 Endpoints 作为主要数据源，可以提高扩展性和性能。 请参见
-  [启用 EndpointSlice](/zh/docs/tasks/administer-cluster/enabling-endpointslices/)。
-- `GCERegionalPersistentDisk`：在 GCE 上启用区域 PD 特性。
-- `GenericEphemeralVolume`：启用支持临时卷和内联卷的
-  （可以由第三方存储供应商提供、存储容量跟踪、从快照还原等等）所有功能。请参见
+- `GCERegionalPersistentDisk`：在 GCE 上启用带地理区域信息的 PD 特性。
+- `GenericEphemeralVolume`：启用支持临时的内联卷，这些卷支持普通卷
+  （可以由第三方存储供应商提供、存储容量跟踪、从快照还原等等）的所有功能。请参见
   [临时卷](/zh/docs/concepts/storage/ephemeral-volumes/)。
+- `GracefulNodeShutdown`：在 kubelet 中启用体面地关闭节点的支持。
+  在系统关闭时，kubelet 会尝试监测该事件并体面地终止节点上运行的 Pods。参阅
+  [体面地关闭节点](/zh/docs/concepts/architecture/nodes/#graceful-node-shutdown)
+  以了解更多细节。
+<!--
+- `HPAContainerMetrics`: Enable the `HorizontalPodAutoscaler` to scale based on
+  metrics from individual containers in target pods.
+- `HPAScaleToZero`: Enables setting `minReplicas` to 0 for `HorizontalPodAutoscaler`
+  resources when using custom or external metrics.
+- `HugePages`: Enable the allocation and consumption of pre-allocated
+  [huge pages](/docs/tasks/manage-hugepages/scheduling-hugepages/).
+- `HugePageStorageMediumSize`: Enable support for multiple sizes pre-allocated
+  [huge pages](/docs/tasks/manage-hugepages/scheduling-hugepages/).
+-->
+- `HPAContainerMetrics`：允许 `HorizontalPodAutoscaler` 基于目标 Pods 中各容器
+  的度量值来执行扩缩操作。
+- `HPAScaleToZero`：使用自定义指标或外部指标时，可将 `HorizontalPodAutoscaler`
+  资源的 `minReplicas` 设置为 0。
 - `HugePages`：启用分配和使用预分配的
   [巨页资源](/zh/docs/tasks/manage-hugepages/scheduling-hugepages/)。
 - `HugePageStorageMediumSize`：启用支持多种大小的预分配
   [巨页资源](/zh/docs/tasks/manage-hugepages/scheduling-hugepages/)。
 
 <!--
-- `HyperVContainer`: Enable [Hyper-V isolation](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container) for Windows containers.
-- `HPAScaleToZero`: Enables setting `minReplicas` to 0 for `HorizontalPodAutoscaler` resources when using custom or external metrics.
-- `ImmutableEphemeralVolumes`: Allows for marking individual Secrets and ConfigMaps as immutable for better safety and performance.
-- `KubeletConfigFile`: Enable loading kubelet configuration from a file specified using a config file.
-  See [setting kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file/) for more details.
+- `HyperVContainer`: Enable
+  [Hyper-V isolation](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container)
+  for Windows containers.
+- `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
+  support for IPv6.
+- `ImmutableEphemeralVolumes`: Allows for marking individual Secrets and ConfigMaps as
+  immutable for better safety and performance.
+- `KubeletConfigFile` (*deprecated*): Enable loading kubelet configuration from a file
+  specified using a config file.
+  See [setting kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file/)
+  for more details.
+- `KubeletCredentialProviders`: Enable kubelet exec credential providers for image pull credentials.
 - `KubeletPluginsWatcher`: Enable probe-based plugin watcher utility to enable kubelet
   to discover plugins such as [CSI volume drivers](/docs/concepts/storage/volumes/#csi).
-- `KubeletPodResources`: Enable the kubelet's pod resources grpc endpoint.
-   See [Support Device Monitoring](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md) for more details.
-- `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the feature-specific labels provided by `NodeDisruptionExclusion` and `ServiceNodeExclusion`.
 -->
 - `HyperVContainer`：为 Windows 容器启用
   [Hyper-V 隔离](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container)。
-- `HPAScaleToZero`：使用自定义指标或外部指标时，可将 `HorizontalPodAutoscaler`
-  资源的 `minReplicas` 设置为 0。
+- `IPv6DualStack`：启用[双协议栈](/zh/docs/concepts/services-networking/dual-stack/)
+  以支持 IPv6。
 - `ImmutableEphemeralVolumes`：允许将各个 Secret 和 ConfigMap 标记为不可变更的，
   以提高安全性和性能。
-- `KubeletConfigFile`：启用从使用配置文件指定的文件中加载 kubelet 配置。
+- `KubeletConfigFile`（*已弃用*）：启用从使用配置文件指定的文件中加载 kubelet 配置。
   有关更多详细信息，请参见
   [通过配置文件设置 kubelet 参数](/zh/docs/tasks/administer-cluster/kubelet-config-file/)。
-- `KubeletPluginsWatcher`：启用基于探针的插件监视应用程序，使 kubelet 能够发现插件，
-  例如 [CSI 卷驱动程序](/zh/docs/concepts/storage/volumes/#csi)。
-- `KubeletPodResources`：启用 kubelet 的 pod 资源 grpc 端点。更多详细信息，请参见
-  [支持设备监控](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md)。
-- `LegacyNodeRoleBehavior`：禁用此选项后，服务负载均衡中的传统行为和节点中断将忽略
-  `node-role.kubernetes.io/master` 标签，而使用 `NodeDisruptionExclusion` 和
-  `ServiceNodeExclusion` 提供的特性指定的标签。
-
+- `KubeletCredentialProviders`：允许使用 kubelet exec 凭据提供程序来设置
+  镜像拉取凭据。
+- `KubeletPluginsWatcher`：启用基于探针的插件监视应用程序，使 kubelet 能够发现
+  类似 [CSI 卷驱动程序](/zh/docs/concepts/storage/volumes/#csi)这类插件。
 <!--
-- `LocalStorageCapacityIsolation`: Enable the consumption of [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/) and also the `sizeLimit` property of an [emptyDir volume](/docs/concepts/storage/volumes/#emptydir).
-- `LocalStorageCapacityIsolationFSQuotaMonitoring`: When `LocalStorageCapacityIsolation` is enabled for [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/) and the backing filesystem for [emptyDir volumes](/docs/concepts/storage/volumes/#emptydir) supports project quotas and they are enabled, use project quotas to monitor [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than filesystem walk for better performance and accuracy.
-- `MountContainers`: Enable using utility containers on host as the volume mounter.
-- `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
-  For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).
-- `NodeDisruptionExclusion`: Enable use of the node label `node.kubernetes.io/exclude-disruption` which prevents nodes from being evacuated during zone failures.
+- `KubeletPodResources`: Enable the kubelet's pod resources grpc endpoint. See
+  [Support Device Monitoring](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md)
+  for more details.
+- `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and
+  node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the
+  feature-specific labels provided by `NodeDisruptionExclusion` and `ServiceNodeExclusion`.
+-->
+- `KubeletPodResources`：启用 kubelet 的 Pod 资源 GRPC 端点。更多详细信息，请参见
+  [支持设备监控](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md)。
+- `LegacyNodeRoleBehavior`：禁用此门控时，服务负载均衡器中和节点干扰中的原先行为
+  会忽略 `node-role.kubernetes.io/master` 标签，使用 `NodeDisruptionExclusion` 和
+  `ServiceNodeExclusion` 对应特性所提供的标签。
+<!--
+- `LocalStorageCapacityIsolation`: Enable the consumption of
+  [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/)
+  and also the `sizeLimit` property of an
+  [emptyDir volume](/docs/concepts/storage/volumes/#emptydir).
+- `LocalStorageCapacityIsolationFSQuotaMonitoring`: When `LocalStorageCapacityIsolation`
+  is enabled for
+  [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/)
+  and the backing filesystem for [emptyDir volumes](/docs/concepts/storage/volumes/#emptydir)
+  supports project quotas and they are enabled, use project quotas to monitor
+  [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than
+  filesystem walk for better performance and accuracy.
+- `MixedProtocolLBService`: Enable using different protocols in the same `LoadBalancer` type
+  Service instance.
+- `MountContainers`: Enable using utility containers on host as
+  the volume mounter.
 -->
 - `LocalStorageCapacityIsolation`：允许使用
-  [本地临时存储](/zh/docs/concepts/configuration/manage-resources-containers/)以及
-  [emptyDir 卷](/zh/docs/concepts/storage/volumes/#emptydir) 的 `sizeLimit` 属性。
+  [本地临时存储](/zh/docs/concepts/configuration/manage-resources-containers/)
+  以及 [emptyDir 卷](/zh/docs/concepts/storage/volumes/#emptydir) 的 `sizeLimit` 属性。
 - `LocalStorageCapacityIsolationFSQuotaMonitoring`：如果
   [本地临时存储](/zh/docs/concepts/configuration/manage-resources-containers/)
   启用了 `LocalStorageCapacityIsolation`，并且
   [emptyDir 卷](/zh/docs/concepts/storage/volumes/#emptydir)
-  的后备文件系统支持项目配额，并且启用了这些配额，请使用项目配额来监视
+  的后备文件系统支持项目配额，并且启用了这些配额，将使用项目配额来监视
   [emptyDir 卷](/zh/docs/concepts/storage/volumes/#emptydir)的存储消耗
   而不是遍历文件系统，以此获得更好的性能和准确性。
-- `MountContainers`：在主机上启用将应用程序容器用作卷安装程序。
-- `MountPropagation`：启用将一个容器安装的共享卷共享到其他容器或 Pod。
-  更多详细信息，请参见
-  [挂载传播](/zh/docs/concepts/storage/volumes/#mount-propagation)。
-- `NodeDisruptionExclusion`：启用节点标签 `node.kubernetes.io/exclude-disruption`，
-  以防止在区域故障期间驱逐节点。
-
+- `MixedProtocolLBService`：允许在同一 `LoadBalancer` 类型的 Service 实例中使用不同
+  的协议。
+- `MountContainers`：允许使用主机上的工具容器作为卷挂载程序。
 <!--
+- `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
+  For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).
+- `NodeDisruptionExclusion`: Enable use of the node label `node.kubernetes.io/exclude-disruption`
+  which prevents nodes from being evacuated during zone failures.
 - `NodeLease`: Enable the new Lease API to report node heartbeats, which could be used as a node health signal.
 - `NonPreemptingPriority`: Enable NonPreempting option for PriorityClass and Pod.
+- `PVCProtection`: Enable the prevention of a PersistentVolumeClaim (PVC) from
+  being deleted when it is still used by any Pod.
 - `PersistentLocalVolumes`: Enable the usage of `local` volume type in Pods.
   Pod affinity has to be specified if requesting a `local` volume.
 - `PodDisruptionBudget`: Enable the [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) feature.
-- `PodOverhead`: Enable the [PodOverhead](/docs/concepts/scheduling-eviction/pod-overhead/) feature to account for pod overheads.
-- `PodPriority`: Enable the descheduling and preemption of Pods based on their [priorities](/docs/concepts/configuration/pod-priority-preemption/).
-- `PodReadinessGates`: Enable the setting of `PodReadinessGate` field for extending
-  Pod readiness evaluation.  See [Pod readiness gate](/docs/concepts/workloads/pods/pod-lifecycle/#pod-readiness-gate)
-  for more details.
+- `PodOverhead`: Enable the [PodOverhead](/docs/concepts/scheduling-eviction/pod-overhead/)
+  feature to account for pod overheads.
 -->
-- `NodeLease`：启用新的租赁 API 以报告节点心跳，可用作节点运行状况信号。
+- `MountPropagation`：启用将一个容器安装的共享卷共享到其他容器或 Pod。
+  更多详细信息，请参见[挂载传播](/zh/docs/concepts/storage/volumes/#mount-propagation)。
+- `NodeDisruptionExclusion`：启用节点标签 `node.kubernetes.io/exclude-disruption`，
+  以防止在可用区发生故障期间驱逐节点。
+- `NodeLease`：启用新的 Lease（租期）API 以报告节点心跳，可用作节点运行状况信号。
 - `NonPreemptingPriority`：为 PriorityClass 和 Pod 启用 NonPreempting 选项。
-- `PersistentLocalVolumes`：在 Pod 中启用 “本地” 卷类型的使用。
-  如果请求 “本地” 卷，则必须指定 Pod 亲和力。
+- `PVCProtection`：启用防止仍被某 Pod 使用的 PVC 被删除的特性。
+- `PersistentLocalVolumes`：允许在 Pod 中使用 `local（本地）`卷类型。
+  如果请求 `local` 卷，则必须指定 Pod 亲和性属性。
 - `PodDisruptionBudget`：启用
   [PodDisruptionBudget](/zh/docs/tasks/run-application/configure-pdb/) 特性。
 - `PodOverhead`：启用 [PodOverhead](/zh/docs/concepts/scheduling-eviction/pod-overhead/)
   特性以考虑 Pod 开销。
-- `PodPriority`：根据[优先级](/zh/docs/concepts/configuration/pod-priority-preemption/)
-  启用 Pod 的调度和抢占。
-- `PodReadinessGates`：启用 `PodReadinessGate` 字段的设置以扩展 Pod 准备状态评估。
-  有关更多详细信息，请参见
-  [Pod 就绪状态判别](/zh/docs/concepts/workloads/pods/pod-lifecycle/#pod-readiness-gate)。
-
 <!--
+- `PodPriority`: Enable the descheduling and preemption of Pods based on their
+  [priorities](/docs/concepts/configuration/pod-priority-preemption/).
+- `PodReadinessGates`: Enable the setting of `PodReadinessGate` field for extending
+  Pod readiness evaluation.  See [Pod readiness gate](/docs/concepts/workloads/pods/pod-lifecycle/#pod-readiness-gate)
+  for more details.
 - `PodShareProcessNamespace`: Enable the setting of `shareProcessNamespace` in a Pod for sharing
   a single process namespace between containers running in a pod.  More details can be found in
   [Share Process Namespace between Containers in a Pod](/docs/tasks/configure-pod-container/share-process-namespace/).
-- `ProcMountType`: Enables control over ProcMountType for containers.
-- `PVCProtection`: Enable the prevention of a PersistentVolumeClaim (PVC) from
-  being deleted when it is still used by any Pod.
-- `QOSReserved`: Allows resource reservations at the QoS level preventing pods at lower QoS levels from
-  bursting into resources requested at higher QoS levels (memory only for now).
+- `ProcMountType`: Enables control over the type proc mounts for containers
+  by setting the `procMount` field of a SecurityContext.
+- `QOSReserved`: Allows resource reservations at the QoS level preventing pods
+  at lower QoS levels from bursting into resources requested at higher QoS levels
+  (memory only for now).
+- `RemainingItemCount`: Allow the API servers to show a count of remaining
+  items in the response to a
+  [chunking list request](/docs/reference/using-api/api-concepts/#retrieving-large-results-sets-in-chunks).
+-->
+- `PodPriority`：根据[优先级](/zh/docs/concepts/configuration/pod-priority-preemption/)
+  启用 Pod 的调度和抢占。
+- `PodReadinessGates`：启用 `podReadinessGate` 字段的设置以扩展 Pod 准备状态评估。
+  有关更多详细信息，请参见
+  [Pod 就绪状态判别](/zh/docs/concepts/workloads/pods/pod-lifecycle/#pod-readiness-gate)。
+- `PodShareProcessNamespace`：在 Pod 中启用 `shareProcessNamespace` 的设置，
+  以便在 Pod 中运行的容器之间共享同一进程名字空间。更多详细信息，请参见
+  [在 Pod 中的容器间共享同一进程名字空间](/zh/docs/tasks/configure-pod-container/share-process-namespace/)。
+- `ProcMountType`：允许容器通过设置 SecurityContext 的 `procMount` 字段来控制
+  对 proc 文件系统的挂载方式。
+- `QOSReserved`：允许在 QoS 级别进行资源预留，以防止处于较低 QoS 级别的 Pod
+  突发进入处于较高 QoS 级别的请求资源（目前仅适用于内存）。
+- `RemainingItemCount`：允许 API 服务器在
+  [分块列表请求](/zh/docs/reference/using-api/api-concepts/#retrieving-large-results-sets-in-chunks)
+  的响应中显示剩余条目的个数。
+<!--
+- `RemoveSelfLink`: Deprecates and removes `selfLink` from ObjectMeta and
+  ListMeta.
 - `ResourceLimitsPriorityFunction` (*deprecated*): Enable a scheduler priority function that
   assigns a lowest possible score of 1 to a node that satisfies at least one of
   the input Pod's cpu and memory limits. The intent is to break ties between
   nodes with same scores.
+- `ResourceQuotaScopeSelectors`: Enable resource quota scope selectors.
+- `RootCAConfigMap`: Configure the `kube-controller-manager` to publish a
+  {{< glossary_tooltip text="ConfigMap" term_id="configmap" >}} named `kube-root-ca.crt`
+  to every namespace. This ConfigMap contains a CA bundle used for verifying connections
+  to the kube-apiserver. See
+  [Bound Service Account Tokens](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md)
+  for more details.
 -->
-
-- `PodShareProcessNamespace`：在 Pod 中启用 `shareProcessNamespace` 的设置，
-  以便在 Pod 中运行的容器之间共享同一进程名字空间。更多详细信息，请参见
-  [在 Pod 中的容器间共享同一进程名字空间](/zh/docs/tasks/configure-pod-container/share-process-namespace/)。
-- `ProcMountType`：启用对容器的 ProcMountType 的控制。
-- `PVCProtection`：启用防止任何 Pod 仍使用 PersistentVolumeClaim(PVC) 删除的特性。
-- `QOSReserved`：允许在 QoS 级别进行资源预留，以防止处于较低 QoS 级别的 Pod
-  突发进入处于较高 QoS 级别的请求资源（仅适用于内存）。
+- `RemoveSelfLink`：将 ObjectMeta 和 ListMeta 中的 `selfLink` 字段废弃并删除。
 - `ResourceLimitsPriorityFunction` （ *已弃用* ）：启用某调度器优先级函数，
   该函数将最低得分 1 指派给至少满足输入 Pod 的 CPU 和内存限制之一的节点，
   目的是打破得分相同的节点之间的关联。
-
+- `ResourceQuotaScopeSelectors`：启用资源配额范围选择器。
+- `RootCAConfigMap`：配置 `kube-controller-manager`，使之发布一个名为 `kube-root-ca.crt`
+  的 {{< glossary_tooltip text="ConfigMap" term_id="configmap" >}}，到
+  所有名字空间中。该 ConfigMap 包含用来验证与 kube-apiserver 之间连接的
+  CA 证书包。参阅
+  [绑定服务账户令牌](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md)
+  以了解更多细节。
 <!--
-- `ResourceQuotaScopeSelectors`: Enable resource quota scope selectors.
 - `RotateKubeletClientCertificate`: Enable the rotation of the client TLS certificate on the kubelet.
   See [kubelet configuration](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#kubelet-configuration) for more details.
 - `RotateKubeletServerCertificate`: Enable the rotation of the server TLS certificate on the kubelet.
-  See [kubelet configuration](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#kubelet-configuration) for more details.
-- `RunAsGroup`: Enable control over the primary group ID set on the init processes of containers.
-- `RuntimeClass`: Enable the [RuntimeClass](/docs/concepts/containers/runtime-class/) feature for selecting container runtime configurations.
-- `ScheduleDaemonSetPods`: Enable DaemonSet Pods to be scheduled by the default scheduler instead of the DaemonSet controller.
+  See [kubelet configuration](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#kubelet-configuration)
+  for more details.
+- `RunAsGroup`: Enable control over the primary group ID set on the init
+  processes of containers.
+- `RuntimeClass`: Enable the [RuntimeClass](/docs/concepts/containers/runtime-class/) feature
+  for selecting container runtime configurations.
+- `ScheduleDaemonSetPods`: Enable DaemonSet Pods to be scheduled by the default scheduler
+  instead of the DaemonSet controller.
 -->
-- `ResourceQuotaScopeSelectors`：启用资源配额范围选择器。
 - `RotateKubeletClientCertificate`：在 kubelet 上启用客户端 TLS 证书的轮换。
   更多详细信息，请参见
   [kubelet 配置](/zh/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#kubelet-configuration)。
@@ -886,88 +1123,129 @@ Each feature gate is designed for enabling/disabling a specific feature:
   特性用于选择容器运行时配置。
 - `ScheduleDaemonSetPods`：启用 DaemonSet Pods 由默认调度程序而不是
   DaemonSet 控制器进行调度。
-
 <!--
-- `SCTPSupport`: Enables the _SCTP_ `protocol` value in Pod, Service, Endpoints, EndpointSlice, and NetworkPolicy definitions.
-- `ServerSideApply`: Enables the [Sever Side Apply (SSA)](/docs/reference/using-api/server-side-apply/) path at the API Server.
-- `ServiceAccountIssuerDiscovery`: Enable OIDC discovery endpoints (issuer and JWKS URLs) for the service account issuer in the API server. See [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery) for more details.
+- `SCTPSupport`: Enables the _SCTP_ `protocol` value in Pod, Service,
+  Endpoints, EndpointSlice, and NetworkPolicy definitions.
+- `ServerSideApply`: Enables the [Sever Side Apply (SSA)](/docs/reference/using-api/server-side-apply/)
+  feature on the API Server.
+- `ServiceAccountIssuerDiscovery`: Enable OIDC discovery endpoints (issuer and
+  JWKS URLs) for the service account issuer in the API server. See
+  [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery)
+  for more details.
 - `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints.
+- `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
+  field on Services.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.
-- `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers created by a cloud provider.
-  A node is eligible for exclusion if labelled with "`alpha.service-controller.kubernetes.io/exclude-balancer`" key or `node.kubernetes.io/exclude-from-external-load-balancers`.
-- `ServiceTopology`: Enable service to route traffic based upon the Node topology of the cluster. See [ServiceTopology](/docs/concepts/services-networking/service-topology/) for more details.
-- `SetHostnameAsFQDN`: Enable the ability of setting Fully Qualified Domain Name(FQDN) as hostname of pod. See [Pod's `setHostnameAsFQDN` field](/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field).
-- `StartupProbe`: Enable the [startup](/docs/concepts/workloads/pods/pod-lifecycle/#when-should-you-use-a-startup-probe) probe in the kubelet.
-- `StorageObjectInUseProtection`: Postpone the deletion of PersistentVolume or
-  PersistentVolumeClaim objects if they are still being used.
 -->
-- `SCTPSupport`：在 Service、Endpoints、NetworkPolicy 和 Pod 定义中，
+- `SCTPSupport`：在 Pod、Service、Endpoints、NetworkPolicy 定义中
   允许将 _SCTP_ 用作 `protocol` 值。
 - `ServerSideApply`：在 API 服务器上启用
-  [服务器端应用（SSA）](/zh/docs/reference/using-api/server-side-apply/) 路径。
-- `ServiceAccountIssuerDiscovery`：在 API 服务器中为服务帐户颁发者启用 OIDC 发现端点。
-  颁发者和 JWKS URL）。详情请参见
+  [服务器端应用（SSA）](/zh/docs/reference/using-api/server-side-apply/) 。
+- `ServiceAccountIssuerDiscovery`：在 API 服务器中为服务帐户颁发者启用 OIDC 发现端点
+  （颁发者和 JWKS URL）。详情参见
   [为 Pod 配置服务账户](/zh/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery) 。
-- `ServiceAppProtocol`：为 Service 和 Endpoints 启用 `AppProtocol` 字段。
-- `ServiceLoadBalancerFinalizer`：为服务负载均衡启用终结器保护。
+- `ServiceAppProtocol`：为 Service 和 Endpoints 启用 `appProtocol` 字段。
+- `ServiceLBNodePortControl`：为服务启用 `spec.allocateLoadBalancerNodePorts` 字段。
+- `ServiceLoadBalancerFinalizer`：为服务负载均衡启用终结器（finalizers）保护。
+<!--
+- `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers
+  created by a cloud provider. A node is eligible for exclusion if labelled with
+  "`node.kubernetes.io/exclude-from-external-load-balancers`".
+- `ServiceTopology`: Enable service to route traffic based upon the Node
+  topology of the cluster. See
+  [ServiceTopology](/docs/concepts/services-networking/service-topology/)
+  for more details.
+- `SetHostnameAsFQDN`: Enable the ability of setting Fully Qualified Domain
+  Name(FQDN) as hostname of pod. See
+  [Pod's `setHostnameAsFQDN` field](/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field).
+- `SizeMemoryBackedVolumes`: Enables kubelet support to size limit for
+  memory-backed volumes (mainly `emptyDir` volumes).
+-->
 - `ServiceNodeExclusion`：启用从云提供商创建的负载均衡中排除节点。
-  如果节点标记有 `alpha.service-controller.kubernetes.io/exclude-balancer`
-  键或 `node.kubernetes.io/exclude-from-external-load-balancers`，
-  则可以排除节点。
+  如果节点标记有 `node.kubernetes.io/exclude-from-external-load-balancers`，
+  标签，则可以排除该节点。
 - `ServiceTopology`：启用服务拓扑可以让一个服务基于集群的节点拓扑进行流量路由。
   有关更多详细信息，请参见
   [服务拓扑](/zh/docs/concepts/services-networking/service-topology/)。
 - `SetHostnameAsFQDN`：启用将全限定域名（FQDN）设置为 Pod 主机名的功能。
-  请参见[给 Pod 设置 `setHostnameAsFQDN` 字段](/zh/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field)。
-- `StartupProbe`：在 kubelet 中启用
-  [启动探针](/zh/docs/concepts/workloads/pods/pod-lifecycle/#when-should-you-use-a-startup-probe)。
-- `StorageObjectInUseProtection`：如果仍在使用 PersistentVolume 或
-  PersistentVolumeClaim 对象，则将其推迟。
-
+  请参见[为 Pod 设置 `setHostnameAsFQDN` 字段](/zh/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field)。
+- `SizeMemoryBackedVolumes`：允许 kubelet 检查基于内存制备的卷的尺寸约束
+  （目前主要针对 `emptyDir` 卷）。
 <!--
-- `StorageVersionHash`: Allow apiservers to expose the storage version hash in the discovery.
+- `StartupProbe`: Enable the
+  [startup](/docs/concepts/workloads/pods/pod-lifecycle/#when-should-you-use-a-startup-probe)
+  probe in the kubelet.
+- `StorageObjectInUseProtection`: Postpone the deletion of PersistentVolume or
+  PersistentVolumeClaim objects if they are still being used.
+- `StorageVersionAPI`: Enable the
+  [storage version API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#storageversion-v1alpha1-internal-apiserver-k8s-io).
+- `StorageVersionHash`: Allow API servers to expose the storage version hash in the
+  discovery.
 - `StreamingProxyRedirects`: Instructs the API server to intercept (and follow)
    redirects from the backend (kubelet) for streaming requests.
   Examples of streaming requests include the `exec`, `attach` and `port-forward` requests.
+-->
+- `StartupProbe`：在 kubelet 中启用
+  [启动探针](/zh/docs/concepts/workloads/pods/pod-lifecycle/#when-should-you-use-a-startup-probe)。
+- `StorageObjectInUseProtection`：如果仍在使用 PersistentVolume 或
+  PersistentVolumeClaim 对象，则将其删除操作推迟。
+- `StorageVersionAPI`: 启用
+  [存储版本 API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#storageversion-v1alpha1-internal-apiserver-k8s-io)。
+- `StorageVersionHash`：允许 API 服务器在版本发现中公开存储版本的哈希值。
+- `StreamingProxyRedirects`：指示 API 服务器拦截（并跟踪）后端（kubelet）
+  的重定向以处理流请求。
+  流请求的例子包括 `exec`、`attach` 和 `port-forward` 请求。
+<!--
 - `SupportIPVSProxyMode`: Enable providing in-cluster service load balancing using IPVS.
   See [service proxies](/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies) for more details.
 - `SupportPodPidsLimit`: Enable the support to limiting PIDs in Pods.
-- `Sysctls`: Enable support for namespaced kernel parameters (sysctls) that can be set for each pod.
-  See [sysctls](/docs/tasks/administer-cluster/sysctl-cluster/) for more details.
+- `SupportNodePidsLimit`: Enable the support to limiting PIDs on the Node.
+  The parameter `pid=<number>` in the `--system-reserved` and `--kube-reserved`
+  options can be specified to ensure that the specified number of process IDs
+  will be reserved for the system as a whole and for Kubernetes system daemons
+  respectively.
+- `Sysctls`: Enable support for namespaced kernel parameters (sysctls) that can be
+  set for each pod. See
+  [sysctls](/docs/tasks/administer-cluster/sysctl-cluster/) for more details.
 -->
-- `StorageVersionHash`：允许 apiserver 在发现中公开存储版本的哈希值。
-- `StreamingProxyRedirects`：指示 API 服务器拦截（并遵循）从后端（kubelet）
-  进行重定向以处理流请求。
-  流请求的例子包括 `exec`、`attach` 和 `port-forward` 请求。
 - `SupportIPVSProxyMode`：启用使用 IPVS 提供内服务负载平衡。更多详细信息，请参见
   [服务代理](/zh/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies)。
 - `SupportPodPidsLimit`：启用支持限制 Pod 中的进程 PID。
-- `Sysctls`：启用对可以为每个 Pod 设置的名字空间内核参数（sysctls）的支持。
+- `SupportNodePidsLimit`：启用支持，限制节点上的 PID 用量。
+  `--system-reserved` 和 `--kube-reserved` 中的参数 `pid=<数值>` 可以分别用来
+  设定为整个系统所预留的进程 ID 个数和为 Kubernetes 系统守护进程预留的进程
+  ID 个数。
+- `Sysctls`：允许为每个 Pod 设置的名字空间内核参数（sysctls）。
   更多详细信息，请参见 [sysctls](/zh/docs/tasks/administer-cluster/sysctl-cluster/)。
-
 <!--
-- `TaintBasedEvictions`: Enable evicting pods from nodes based on taints on nodes and tolerations on Pods.
-  See [taints and tolerations](/docs/concepts/scheduling-eviction/taint-and-toleration/) for more details.
-- `TaintNodesByCondition`: Enable automatic tainting nodes based on [node conditions](/docs/concepts/architecture/nodes/#condition).
+- `TTLAfterFinished`: Allow a
+  [TTL controller](/docs/concepts/workloads/controllers/ttlafterfinished/)
+  to clean up resources after they finish execution.
+- `TaintBasedEvictions`: Enable evicting pods from nodes based on taints on Nodes
+  and tolerations on Pods.
+  See [taints and tolerations](/docs/concepts/scheduling-eviction/taint-and-toleration/)
+  for more details.
+- `TaintNodesByCondition`: Enable automatic tainting nodes based on
+  [node conditions](/docs/concepts/architecture/nodes/#condition).
 - `TokenRequest`: Enable the `TokenRequest` endpoint on service account resources.
 - `TokenRequestProjection`: Enable the injection of service account tokens into
   a Pod through the [`projected` volume](/docs/concepts/storage/volumes/#projected).
-- `TopologyManager`: Enable a mechanism to coordinate fine-grained hardware resource assignments for different components in Kubernetes. See [Control Topology Management Policies on a node](/docs/tasks/administer-cluster/topology-manager/).
-- `TTLAfterFinished`: Allow a [TTL controller](/docs/concepts/workloads/controllers/ttlafterfinished/) to clean up resources after they finish execution.
+- `TopologyManager`: Enable a mechanism to coordinate fine-grained hardware resource
+  assignments for different components in Kubernetes. See
+  [Control Topology Management Policies on a node](/docs/tasks/administer-cluster/topology-manager/).
 -->
+- `TTLAfterFinished`：资源完成执行后，允许
+  [TTL 控制器](/zh/docs/concepts/workloads/controllers/ttlafterfinished/)清理资源。
 - `TaintBasedEvictions`：根据节点上的污点和 Pod 上的容忍度启用从节点驱逐 Pod 的特性。
-  有关更多详细信息，请参见[污点和容忍度](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)。
+  更多详细信息可参见[污点和容忍度](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)。
 - `TaintNodesByCondition`：根据[节点状况](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)
-  启用自动在节点标记污点。
+  启用自动为节点标记污点。
 - `TokenRequest`：在服务帐户资源上启用 `TokenRequest` 端点。
 - `TokenRequestProjection`：启用通过
   [`projected` 卷](/zh/docs/concepts/storage/volumes/#projected)
-  将服务帐号令牌注入到 Pod 中的特性。
+  将服务帐户令牌注入到 Pod 中的特性。
 - `TopologyManager`：启用一种机制来协调 Kubernetes 不同组件的细粒度硬件资源分配。
   详见[控制节点上的拓扑管理策略](/zh/docs/tasks/administer-cluster/topology-manager/)。
-- `TTLAfterFinished`：完成执行后，允许
-  [TTL 控制器](/zh/docs/concepts/workloads/controllers/ttlafterfinished/)清理资源。
-
 <!--
 - `VolumePVCDataSource`: Enable support for specifying an existing PVC as a DataSource.
 - `VolumeScheduling`: Enable volume topology aware scheduling and make the
@@ -978,26 +1256,39 @@ Each feature gate is designed for enabling/disabling a specific feature:
 -->
 - `VolumePVCDataSource`：启用对将现有 PVC 指定数据源的支持。
 - `VolumeScheduling`：启用卷拓扑感知调度，并使 PersistentVolumeClaim（PVC）
-  绑定调度决策；当与 PersistentLocalVolumes 特性门控一起使用时，
-  还可以使用 `PersistentLocalVolumes` 卷类型。
+  绑定能够了解调度决策；当与 PersistentLocalVolumes 特性门控一起使用时，
+  还允许使用 [`local`](/docs/concepts/storage/volumes/#local) 卷类型。
 - `VolumeSnapshotDataSource`：启用卷快照数据源支持。
-
 <!--
-- `VolumeSubpathEnvExpansion`: Enable `subPathExpr` field for expanding environment variables into a `subPath`.
+- `VolumeSubpathEnvExpansion`: Enable `subPathExpr` field for expanding environment
+  variables into a `subPath`.
+- `WarningHeaders`: Allow sending warning headers in API responses.
 - `WatchBookmark`: Enable support for watch bookmark events.
-- `WindowsGMSA`: Enables passing of GMSA credential specs from pods to container runtimes.
-- `WindowsRunAsUserName` : Enable support for running applications in Windows containers with as a non-default user.
-  See [Configuring RunAsUserName](/docs/tasks/configure-pod-container/configure-runasusername) for more details.
 - `WinDSR`: Allows kube-proxy to create DSR loadbalancers for Windows.
 - `WinOverlay`: Allows kube-proxy to run in overlay mode for Windows.
+- `WindowsGMSA`: Enables passing of GMSA credential specs from pods to container runtimes.
+- `WindowsRunAsUserName` : Enable support for running applications in Windows containers
+  with as a non-default user. See
+  [Configuring RunAsUserName](/docs/tasks/configure-pod-container/configure-runasusername)
+  for more details.
+- `WindowsEndpointSliceProxying`: When enabled, kube-proxy running on Windows
+  will use EndpointSlices as the primary data source instead of Endpoints,
+  enabling scalability and performance improvements. See
+  [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/).
 -->
-- `VolumeSubpathEnvExpansion`：启用 `subPathExpr` 字段用于将环境变量扩展为 `subPath`。
-- `WatchBookmark`：启用对监测 bookmark 事件的支持。
+- `VolumeSubpathEnvExpansion`：启用 `subPathExpr` 字段用于将环境变量在 `subPath`
+  中展开。
+- `WarningHeaders`：允许在 API 响应中发送警告头部。
+- `WatchBookmark`：启用对 watch 操作中 bookmark 事件的支持。
+- `WinDSR`：允许 kube-proxy 为 Windows 创建 DSR 负载均衡。
+- `WinOverlay`：允许 kube-proxy 在 Windows 的覆盖网络模式下运行。
 - `WindowsGMSA`：允许将 GMSA 凭据规范从 Pod 传递到容器运行时。
 - `WindowsRunAsUserName`：提供使用非默认用户在 Windows 容器中运行应用程序的支持。
-  详情请参见[配置 RunAsUserName](/zh/docs/tasks/configure-pod-container/configure-runasusername)。
-- `WinDSR`：允许 kube-proxy 为 Windows 创建 DSR 负载均衡。
-- `WinOverlay`：允许 kube-proxy 在 Windows 的 overlay 模式下运行。
+  详情请参见
+  [配置 RunAsUserName](/zh/docs/tasks/configure-pod-container/configure-runasusername)。
+- `WindowsEndpointSliceProxying`：启用此特性门控后，Windows 上运行的 kube-proxy
+  将使用 EndpointSlices 取代 Endpoints 作为主要数据源，进而提高扩展性和性能。参见
+  [启用 EndpointSlice](/zh/docs/tasks/administer-cluster/enabling-endpointslices/)。
 
 ## {{% heading "whatsnext" %}}
 
@@ -1005,7 +1296,6 @@ Each feature gate is designed for enabling/disabling a specific feature:
 * The [deprecation policy](/docs/reference/using-api/deprecation-policy/) for Kubernetes explains
   the project's approach to removing features and components.
 -->
-
 * Kubernetes 的[弃用策略](/zh/docs/reference/using-api/deprecation-policy/)
-  介绍了项目已移除的特性部件和组件的方法。
+  介绍了项目针对已移除特性和组件的处理方法。
 

From cfc66c0f85fa822841af54f6d75a3d5243ae339b Mon Sep 17 00:00:00 2001
From: Adhityaa Chandrasekar <adtac@google.com>
Date: Tue, 23 Mar 2021 14:12:01 +0000
Subject: [PATCH 428/788] blog: introducing suspended jobs

Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
---
 .../2021-04-12-introducing-suspended-jobs.md  | 110 ++++++++++++++++++
 1 file changed, 110 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md

diff --git a/content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md b/content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md
new file mode 100644
index 0000000000..4d46453adf
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md
@@ -0,0 +1,110 @@
+---
+title: "Introducing Suspended Jobs"
+date: 2021-04-12
+slug: introducing-suspended-jobs
+layout: blog
+---
+
+**Author:** Adhityaa Chandrasekar (Google)
+
+[Jobs](/docs/concepts/workloads/controllers/job/) are a crucial part of
+Kubernetes API. While other kinds of workloads such as [Deployments](/docs/concepts/workloads/controllers/deployment/),
+[ReplicaSets](/docs/concepts/workloads/controllers/replicaset/),
+[StatefulSets](/docs/concepts/workloads/controllers/statefulset/), and
+[DaemonSets](/docs/concepts/workloads/controllers/daemonset/)
+solve use-cases that require Pods to run forever, Jobs are useful when Pods need
+to run to completion. Commonly used in parallel batch processing, Jobs can be
+used in a variety of applications ranging from video rendering and database
+maintenance to sending bulk emails and scientific computing.
+
+While the amount of parallelism and the conditions for Job completion are
+configurable, the Kubernetes API lacked the ability to suspend and resume Jobs.
+This is often desired when cluster resources are limited and a higher priority
+Job needs to execute in the place of another Job. Deleting the lower priority
+Job is a poor workaround as Pod completion history and other metrics associated
+with the Job will be lost.
+
+With the recent Kubernetes 1.21 release, you will be able to suspend a Job by
+updating its spec. The feature is currently in **alpha** and requires you to
+enable the `SuspendJob` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+on the [API server](/docs/reference/command-line-tools-reference/kube-apiserver/)
+and the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/)
+in order to use it.
+
+## API changes
+
+A new boolean field `suspend` is introduced in the Job spec API. Let's say I
+create the following Job:
+
+```yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: my-job
+spec:
+  suspend: true
+  parallelism: 2
+  completions: 10
+  template:
+    spec:
+      containers:
+      - name: my-container
+        image: busybox
+        command: ["sleep", "5"]
+      restartPolicy: Never
+```
+
+Jobs are not suspended by default, so I'm explicitly setting the `suspend` field
+to true in the above Job spec. In the above example, the Job controller will
+refrain from creating Pods until I'm ready to start the Job, which I can do by
+updating the field to false.
+
+As another example, consider a Job that was created with the `suspend` field
+omitted. The Job controller will happily create Pods to work towards Job
+completion. However, before the Job completes, if I explicitly set the field to
+true with a Job update, the Job controller will terminate all active Pods that
+are running and will wait indefinitely for the flag to be flipped back to false.
+Pod termination is done by sending a SIGTERM signal to all active Pods; the
+[graceful termination period](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)
+defined in the Pod spec will be honoured. Pods terminated this way will not be
+counted as failures by the Job controller.
+
+It is important to understand that succeeded and failed Pods from the past will
+continue to exist after you suspend a Job. That is, that they will count towards
+Job completion once you resume it. You can verify this by looking at Job's
+status before and after suspension.
+
+Read the [documentation](/docs/concepts/workloads/controllers/job#suspending-a-job)
+for a full overview of this new feature.
+
+## Where is this useful?
+
+Let's say I'm the operator of a large cluster. I have many users submitting Jobs
+to the cluster, but not all Jobs are created equal — some Jobs are more
+important than others. Cluster resources aren't infinite either, so all users
+must share resources. If all Jobs were created in the suspended state and placed
+in a pending queue, I can achieve priority-based Job scheduling by resuming Jobs
+in the right order.
+
+As another motivational use-case, consider a cloud provider where compute
+resources are cheaper at night than in the morning. If I have a long-running Job
+that takes multiple days to complete, being able to suspend the Job in the
+morning and then resume it in the evening every day can reduce costs.
+
+Since this field is a part of the Job spec, CronJobs automatically get this
+feature for free too.
+
+## References and next steps
+
+If you're interested in a deeper dive into the rationale behind this feature and
+the decisions we have taken, consider reading the [enhancement proposal](https://github.com/kubernetes/enhancements/tree/master/keps/sig-apps/2232-suspend-jobs).
+There's more detail on suspending and resuming jobs in the documentation for [Job](/docs/concepts/workloads/controllers/job#suspending-a-job).
+
+As previously mentioned, this feature is currently in alpha and is available
+only if you explicitly opt-in through the `SuspendJob` feature gate. If this is
+a feature you're interested in, please consider testing suspended Jobs in your
+cluster and providing feedback. You can discuss this enhancement [on GitHub](https://github.com/kubernetes/enhancements/issues/2232).
+The SIG Apps community also [meets regularly](https://github.com/kubernetes/community/tree/master/sig-apps#meetings)
+and can be reached through [Slack or the mailing list](https://github.com/kubernetes/community/tree/master/sig-apps#contact).
+Barring any unexpected changes to the API, we intend to graduate the feature to
+beta in Kubernetes 1.22, so that the feature becomes available by default.

From b59a32dfbc0760a56b04b73c98a01a71620a7cfe Mon Sep 17 00:00:00 2001
From: "Yuk, Yongsu" <ysyukr@gmail.com>
Date: Wed, 24 Mar 2021 23:13:00 +0900
Subject: [PATCH 429/788] Update to Outdated files in the dev-1.20-ko.7 branch
 part. 1.

---
 .../control-plane-node-communication.md       |   2 +-
 .../ko/docs/concepts/architecture/nodes.md    |  46 +--
 .../manage-deployment.md                      |   2 +-
 .../docs/concepts/configuration/configmap.md  |   4 +-
 .../docs/concepts/configuration/overview.md   |   6 +-
 content/ko/docs/concepts/containers/images.md |  26 +-
 .../concepts/extend-kubernetes/operator.md    |  21 +-
 .../scheduling-eviction/assign-pod-node.md    |   2 +-
 .../resource-bin-packing.md                   |   2 +-
 .../concepts/storage/dynamic-provisioning.md  |   4 +-
 content/ko/docs/concepts/storage/volumes.md   |   3 +-
 .../workloads/controllers/deployment.md       |   4 +-
 content/ko/docs/reference/_index.md           |  22 +-
 .../reference/access-authn-authz/_index.md    |   2 +-
 .../command-line-tools-reference/_index.md    |   2 +-
 .../feature-gates.md                          |   1 +
 .../kube-proxy.md                             | 103 ++---
 content/ko/docs/reference/glossary/index.md   |   2 +-
 .../docs/reference/issues-security/_index.md  |   2 +-
 content/ko/docs/reference/kubectl/_index.md   |   2 +-
 content/ko/docs/reference/kubectl/overview.md |   2 +-
 .../ko/docs/reference/scheduling/config.md    |   2 -
 .../ko/docs/reference/setup-tools/_index.md   |   2 +-
 .../reference/{tools.md => tools/_index.md}   |   0
 content/ko/docs/reference/using-api/_index.md |   3 +-
 .../docs/setup/best-practices/certificates.md |   6 +-
 .../setup/best-practices/multiple-zones.md    |   2 +-
 .../container-runtimes.md                     | 353 ++++--------------
 .../production-environment/tools/kops.md      |   2 +-
 .../tools/kubeadm/install-kubeadm.md          |  40 +-
 .../production-environment/tools/kubespray.md |   2 +-
 .../windows/intro-windows-in-kubernetes.md    |   6 +-
 content/ko/docs/setup/release/notes.md        |   2 +-
 .../administer-cluster/access-cluster-api.md  |   2 +-
 .../kubeadm/kubeadm-certs.md                  |  31 +-
 .../declarative-config.md                     |   2 +-
 .../imperative-command.md                     |   2 +-
 .../imperative-config.md                      |   2 +-
 .../kustomization.md                          |   2 +-
 .../docs/tasks/tools/install-kubectl-linux.md |  53 ++-
 .../docs/tasks/tools/install-kubectl-macos.md |   4 +-
 41 files changed, 320 insertions(+), 458 deletions(-)
 rename content/ko/docs/reference/{tools.md => tools/_index.md} (100%)

diff --git a/content/ko/docs/concepts/architecture/control-plane-node-communication.md b/content/ko/docs/concepts/architecture/control-plane-node-communication.md
index 36ece0d6d2..1831692bdf 100644
--- a/content/ko/docs/concepts/architecture/control-plane-node-communication.md
+++ b/content/ko/docs/concepts/architecture/control-plane-node-communication.md
@@ -21,7 +21,7 @@ aliases:
 노드는 유효한 클라이언트 자격 증명과 함께 API 서버에 안전하게 연결할 수 있도록 클러스터에 대한 공개 루트 인증서로 프로비전해야 한다. 예를 들어, 기본 GKE 배포에서, kubelet에 제공되는 클라이언트 자격 증명은 클라이언트 인증서 형식이다. kubelet 클라이언트 인증서의 자동 프로비저닝은 [kubelet TLS 부트스트랩](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)을 참고한다.
 
 API 서버에 연결하려는 파드는 쿠버네티스가 공개 루트 인증서와 유효한 베어러 토큰(bearer token)을 파드가 인스턴스화될 때 파드에 자동으로 주입하도록 서비스 어카운트를 활용하여 안전하게 연결할 수 있다.
-`kubernetes` 서비스(모든 네임스페이스의)는 API 서버의 HTTPS 엔드포인트로 리디렉션되는 가상 IP 주소(kube-proxy를 통해)로 구성되어 있다.
+`kubernetes` 서비스(`default` 네임스페이스의)는 API 서버의 HTTPS 엔드포인트로 리디렉션되는 가상 IP 주소(kube-proxy를 통해)로 구성되어 있다.
 
 컨트롤 플레인 컴포넌트는 보안 포트를 통해 클러스터 API 서버와도 통신한다.
 
diff --git a/content/ko/docs/concepts/architecture/nodes.md b/content/ko/docs/concepts/architecture/nodes.md
index 4ad2a7aaaa..cb65b2832a 100644
--- a/content/ko/docs/concepts/architecture/nodes.md
+++ b/content/ko/docs/concepts/architecture/nodes.md
@@ -27,7 +27,7 @@ weight: 10
 {{< glossary_tooltip text="API 서버" term_id="kube-apiserver" >}}에 노드를 추가하는 두가지 주요 방법이 있다.
 
 1. 노드의 kubelet으로 컨트롤 플레인에 자체 등록
-2. 사용자 또는 다른 사용자가 노드 오브젝트를 수동으로 추가
+2. 사용자(또는 다른 사용자)가 노드 오브젝트를 수동으로 추가
 
 노드 오브젝트 또는 노드의 kubelet으로 자체 등록한 후
 컨트롤 플레인은 새 노드 오브젝트가 유효한지 확인한다.
@@ -48,8 +48,8 @@ weight: 10
 
 쿠버네티스는 내부적으로 노드 오브젝트를 생성한다(표시한다). 쿠버네티스는
 kubelet이 노드의 `metadata.name` 필드와 일치하는 API 서버에 등록이 되어있는지 확인한다.
-노드가 정상이면(필요한 모든 서비스가 실행중인 경우) 파드를 실행할 수 있게 된다.
-그렇지 않으면, 해당 노드는 정상이 될때까지 모든 클러스터 활동에
+노드가 정상이면(예를 들어 필요한 모든 서비스가 실행중인 경우) 파드를 실행할 수 있게 된다.
+그렇지 않으면, 해당 노드는 정상이 될 때까지 모든 클러스터 활동에
 대해 무시된다.
 
 {{< note >}}
@@ -226,13 +226,14 @@ apiserver로부터 삭제되어 그 이름을 사용할 수 있는 결과를 낳
 노드 컨트롤러는 노드 리스트로부터 그 노드를 삭제한다.
 
 세 번째는 노드의 동작 상태를 모니터링 하는 것이다. 노드 컨트롤러는
-노드가 접근 불가할 경우 (즉 노드 컨트롤러가 어떠한 사유로 하트비트
-수신을 중지하는 경우, 예를 들어 노드 다운과 같은 경우이다.)
-NodeStatus의 NodeReady 컨디션을 ConditionUnknown으로 업데이트 하는 책임을 지고,
-노드가 계속 접근 불가할 경우 나중에 노드로부터 (정상적인 종료를 이용하여) 모든 파드를 축출시킨다.
-(ConditionUnknown을 알리기 시작하는 기본 타임아웃 값은 40초 이고,
-파드를 축출하기 시작하는 값은 5분이다.) 노드 컨트롤러는
-매 `--node-monitor-period` 초 마다 각 노드의 상태를 체크한다.
+다음을 담당한다.
+- 노드 다운과 같은 어떤 이유로 노드 컨트롤러가
+  하트비트 수신이 중단되는 경우 NodeStatus의 NodeReady
+  컨디션을 ConditionUnknown으로 업데이트 한다.
+- 노드가 계속 접근 불가할 경우 나중에 노드로부터 정상적인 종료를 이용해서 모든 파드를 축출 한다.
+  ConditionUnknown을 알리기 시작하는 기본 타임아웃 값은 40초 이고,
+  파드를 축출하기 시작하는 값은 5분이다.
+노드 컨트롤러는 매 `--node-monitor-period` 초 마다 각 노드의 상태를 체크한다.
 
 #### 하트비트
 
@@ -250,11 +251,12 @@ kubelet은 `NodeStatus` 와 리스 오브젝트를 생성하고 업데이트 할
 
 - kubelet은 상태가 변경되거나 구성된 상태에 대한 업데이트가 없는 경우,
   `NodeStatus` 를 업데이트 한다. `NodeStatus` 의 기본 업데이트
-  주기는 5분이다(연결할 수 없는 노드의 시간 제한인 40초
-  보다 훨씬 길다).
+  주기는 5분으로, 연결할 수 없는 노드의 시간 제한인 40초
+  보다 훨씬 길다.
 - kubelet은 10초마다 리스 오브젝트를 생성하고 업데이트 한다(기본 업데이트 주기).
   리스 업데이트는 `NodeStatus` 업데이트와는
-  독립적으로 발생한다. 리스 업데이트가 실패하면 kubelet에 의해 재시도하며 7초로 제한된 지수 백오프를 200 밀리초에서 부터 시작한다.
+  독립적으로 발생한다. 리스 업데이트가 실패하면 kubelet에 의해 재시도하며
+  7초로 제한된 지수 백오프를 200 밀리초에서 부터 시작한다.
 
 #### 안정성
 
@@ -264,13 +266,13 @@ kubelet은 `NodeStatus` 와 리스 오브젝트를 생성하고 업데이트 할
 
 노드 축출 행위는 주어진 가용성 영역 내 하나의 노드가 상태가 불량할
 경우 변화한다. 노드 컨트롤러는 영역 내 동시에 상태가 불량한 노드의 퍼센티지가 얼마나 되는지
-체크한다(NodeReady 컨디션은 ConditionUnknown 또는 ConditionFalse 다.).
-상태가 불량한 노드의 일부가 최소
-`--unhealthy-zone-threshold` 기본값 0.55) 가
-되면 축출 비율은 감소한다. 클러스터가 작으면 (즉
-`--large-cluster-size-threshold` 노드 이하면 - 기본값 50) 축출은 중지되고,
-그렇지 않으면 축출 비율은 초당
-`--secondary-node-eviction-rate`(기본값 0.01)로 감소된다.
+체크한다(NodeReady 컨디션은 ConditionUnknown 또는
+ConditionFalse 다.).
+- 상태가 불량한 노드의 일부가 최소 `--unhealthy-zone-threshold`
+  (기본값 0.55)가 되면 축출 비율은 감소한다.
+- 클러스터가 작으면 (즉 `--large-cluster-size-threshold`
+  노드 이하면 - 기본값 50) 축출은 중지되고, 그렇지 않으면 축출 비율은 초당
+  `--secondary-node-eviction-rate`(기본값 0.01)로 감소된다.
 이 정책들이 가용성 영역 단위로 실행되어지는 이유는 나머지가 연결되어 있는 동안
 하나의 가용성 영역이 마스터로부터 분할되어 질 수도 있기 때문이다.
 만약 클러스터가 여러 클라우드 제공사업자의 가용성 영역에 걸쳐 있지 않으면,
@@ -299,8 +301,8 @@ kubelet은 `NodeStatus` 와 리스 오브젝트를 생성하고 업데이트 할
 
 ### 노드 용량
 
-노드 오브젝트는 노드 리소스 용량에 대한 정보(예: 사용 가능한 메모리의
-양과 CPU의 수)를 추적한다.
+노드 오브젝트는 노드 리소스 용량에 대한 정보: 예를 들어, 사용 가능한 메모리의
+양과 CPU의 수를 추적한다.
 노드의 [자체 등록](#노드에-대한-자체-등록)은 등록하는 중에 용량을 보고한다.
 [수동](#수동-노드-관리)으로 노드를 추가하는 경우 추가할 때
 노드의 용량 정보를 설정해야 한다.
diff --git a/content/ko/docs/concepts/cluster-administration/manage-deployment.md b/content/ko/docs/concepts/cluster-administration/manage-deployment.md
index 9893c76548..d61d111274 100644
--- a/content/ko/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/ko/docs/concepts/cluster-administration/manage-deployment.md
@@ -47,7 +47,7 @@ kubectl apply -f https://k8s.io/examples/application/nginx/
 
 동일한 마이크로서비스 또는 애플리케이션 티어(tier)와 관련된 리소스를 동일한 파일에 배치하고, 애플리케이션과 연관된 모든 파일을 동일한 디렉터리에 그룹화하는 것이 좋다. 애플리케이션의 티어가 DNS를 사용하여 서로 바인딩되면, 스택의 모든 컴포넌트를 함께 배포할 수 있다.
 
-URL을 구성 소스로 지정할 수도 있다. 이는 github에 체크인된 구성 파일에서 직접 배포하는 데 편리하다.
+URL을 구성 소스로 지정할 수도 있다. 이는 GitHub에 체크인된 구성 파일에서 직접 배포하는 데 편리하다.
 
 ```shell
 kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/application/nginx/nginx-deployment.yaml
diff --git a/content/ko/docs/concepts/configuration/configmap.md b/content/ko/docs/concepts/configuration/configmap.md
index 73fcf62b98..50ef8b3632 100644
--- a/content/ko/docs/concepts/configuration/configmap.md
+++ b/content/ko/docs/concepts/configuration/configmap.md
@@ -42,8 +42,8 @@ API [오브젝트](/ko/docs/concepts/overview/working-with-objects/kubernetes-ob
 `spec` 이 있는 대부분의 쿠버네티스 오브젝트와 달리, 컨피그맵에는 `data` 및 `binaryData`
 필드가 있다. 이러한 필드는 키-값 쌍을 값으로 허용한다. `data` 필드와
 `binaryData` 는 모두 선택 사항이다. `data` 필드는
-UTF-8 바이트 시퀀스를 포함하도록 설계되었으며 `binaryData` 필드는 바이너리 데이터를
-포함하도록 설계되었다.
+UTF-8 바이트 시퀀스를 포함하도록 설계되었으며 `binaryData` 필드는 바이너리
+데이터를 base64로 인코딩된 문자열로 포함하도록 설계되었다.
 
 컨피그맵의 이름은 유효한
 [DNS 서브도메인 이름](/ko/docs/concepts/overview/working-with-objects/names/#dns-서브도메인-이름)이어야 한다.
diff --git a/content/ko/docs/concepts/configuration/overview.md b/content/ko/docs/concepts/configuration/overview.md
index def34dd231..17fd61c6a6 100644
--- a/content/ko/docs/concepts/configuration/overview.md
+++ b/content/ko/docs/concepts/configuration/overview.md
@@ -81,9 +81,9 @@ DNS 서버는 새로운 `서비스`를 위한 쿠버네티스 API를 Watch하며
 
 - `imagePullPolicy: Always`: kubelet이 컨테이너를 시작할 때마다, kubelet은 컨테이너 이미지 레지스트리를 쿼리해서 이름을 이미지 다이제스트(digest)로 확인한다. kubelet에 정확한 다이제스트가 저장된 컨테이너 이미지가 로컬로 캐시된 경우, kubelet은 캐시된 이미지를 사용한다. 그렇지 않으면, kubelet은 확인한 다이제스트를 사용해서 이미지를 다운로드(pull)하고, 해당 이미지를 사용해서 컨테이너를 시작한다.
 
-- `imagePullPolicy`가 생략되어 있고, 이미지 태그가 `:latest` 이거나 생략되어 있다면 `Always`가 적용된다.
+- `imagePullPolicy`가 생략되어 있고, 이미지 태그가 `:latest` 이거나 생략되어 있다면 `imagePullPolicy`는 자동으로 `Always`가 적용된다. 태그 값을 변경하더라도 이 값은 `IfNotPresent`로 업데이트 되지 _않는다_.
 
-- `imagePullPolicy`가 생략되어 있고, 이미지 태그가 존재하지만 `:latest`가 아니라면 `IfNotPresent`가 적용된다.
+- `imagePullPolicy`가 생략되어 있고, 이미지 태그가 존재하지만 `:latest`가 아니라면 `imagePullPolicy`는 자동으로 `IfNotPresent`가 적용된다. 태그가 나중에 제거되거나 `:latest`로 변경되더라도 `Always`로 업데이트 되지 _않는다_.
 
 - `imagePullPolicy: Never`: 이미지가 로컬에 존재한다고 가정한다. 이미지를 풀(Pull) 하기 위해 시도하지 않는다.
 
@@ -96,7 +96,7 @@ DNS 서버는 새로운 `서비스`를 위한 쿠버네티스 API를 Watch하며
 {{< /note >}}
 
 {{< note >}}
-기반이 되는 이미지 제공자의 캐시 방법은 `imagePullPolicy: Always`를 효율적으로 만든다. 예를 들어, 도커에서는 이미지가 이미 존재한다면 풀(Pull) 시도는 빠르게 진행되는데, 이는 모든 이미지 레이어가 캐시되어 있으며 이미지 다운로드가 필요하지 않기 때문이다.
+레지스트리가 안정적으로 동작하는 상황에서는, `imagePullPolicy: Always`로 설정되어 있더라도 기반 이미지 관리 도구의 캐싱 정책을 통해 이미지 풀(pull) 작업의 효율성을 높일 수 있다. 예를 들어, 도커를 사용하는 경우 이미지가 이미 존재한다면 풀(Pull) 시도는 빠르게 진행되는데, 이는 모든 이미지 레이어가 캐시되어 있으며 이미지 다운로드가 필요하지 않기 때문이다.
 {{< /note >}}
 
 ## kubectl 사용하기
diff --git a/content/ko/docs/concepts/containers/images.md b/content/ko/docs/concepts/containers/images.md
index 2f1ae4a27c..fe7aca59aa 100644
--- a/content/ko/docs/concepts/containers/images.md
+++ b/content/ko/docs/concepts/containers/images.md
@@ -49,16 +49,32 @@ weight: 10
 
 ## 이미지 업데이트
 
-기본 풀(pull) 정책은 `IfNotPresent`이며, 이것은
-{{< glossary_tooltip text="kubelet" term_id="kubelet" >}}이 이미
-존재하는 이미지에 대한 풀을 생략하게 한다. 만약 항상 풀을 강제하고 싶다면,
-다음 중 하나를 수행하면 된다.
+{{< glossary_tooltip text="디플로이먼트" term_id="deployment" >}},
+{{< glossary_tooltip text="스테이트풀셋" term_id="statefulset" >}}, 파드 또는 파드
+템플릿은 포함하는 다른 오브젝트를 처음 만들 때 특별히 명시하지 않은 경우
+기본적으로 해당 파드에 있는 모든 컨테이너의 풀(pull)
+정책은 `IfNotPresent`로 설정된다. 이 정책은
+{{< glossary_tooltip text="kubelet" term_id="kubelet" >}}이 이미 존재하는
+이미지에 대한 풀을 생략하게 한다.
+
+만약 항상 풀을 강제하고 싶다면, 다음 중 하나를 수행하면 된다.
 
 - 컨테이너의 `imagePullPolicy`를 `Always`로 설정.
-- `imagePullPolicy`를 생략하고 `:latest`를 사용할 이미지의 태그로 사용.
+- `imagePullPolicy`를 생략하고 `:latest`를 사용할 이미지의 태그로 사용,
+  쿠버네티스는 정책을 `Always`로 설정한다.
 - `imagePullPolicy`와 사용할 이미지의 태그를 생략.
 - [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) 어드미션 컨트롤러를 활성화.
 
+{{< note >}}
+컨테이너의 `imagePullPolicy` 값은 오브젝트가 처음 _created_ 일 때 항상
+설정되고 나중에 이미지 태그가 변경되더라도 업데이트되지 않는다.
+
+예를 들어, 태그가 `:latest`가 아닌 이미지로 디플로이먼트를 생성하고,
+나중에 해당 디플로이먼트의 이미지를 `:latest` 태그로 업데이트하면
+`imagePullPolicy` 필드가 `Always` 로 변경되지 않는다. 오브젝트를
+처음 생성 한 후 모든 오브젝트의 풀 정책을 수동으로 변경해야 한다.
+{{< /note >}}
+
 `imagePullPolicy` 가 특정값 없이 정의되면, `Always` 로 설정된다.
 
 ## 이미지 인덱스가 있는 다중 아키텍처 이미지
diff --git a/content/ko/docs/concepts/extend-kubernetes/operator.md b/content/ko/docs/concepts/extend-kubernetes/operator.md
index 57a4f3d9d2..21b3183b99 100644
--- a/content/ko/docs/concepts/extend-kubernetes/operator.md
+++ b/content/ko/docs/concepts/extend-kubernetes/operator.md
@@ -102,27 +102,28 @@ kubectl edit SampleDB/example-database # 일부 설정을 수동으로 변경하
 
 ## 자신만의 오퍼레이터 작성 {#writing-operator}
 
-에코시스템에 원하는 동작을 구현하는 오퍼레이터가 없다면 직접 코딩할 수 있다.
-[다음 내용](#다음-내용)에서는 클라우드 네이티브 오퍼레이터를 작성하는 데
-사용할 수 있는 라이브러리 및 도구에 대한 몇 가지 링크를
-찾을 수 있다.
+에코시스템에 원하는 동작을 구현하는 오퍼레이터가 없다면
+직접 코딩할 수 있다.
 
 또한 [쿠버네티스 API의 클라이언트](/ko/docs/reference/using-api/client-libraries/)
 역할을 할 수 있는 모든 언어 / 런타임을 사용하여 오퍼레이터(즉, 컨트롤러)를 구현한다.
 
+다음은 클라우드 네이티브 오퍼레이터를 작성하는 데 사용할 수 있는
+몇 가지 라이브러리와 도구들이다.
 
+{{% thirdparty-content %}}
+
+* [kubebuilder](https://book.kubebuilder.io/) 사용하기
+* [KUDO](https://kudo.dev/) (Kubernetes Universal Declarative Operator)
+* 웹훅(WebHook)과 함께 [Metacontroller](https://metacontroller.app/)를
+  사용하여 직접 구현하기
+* [오퍼레이터 프레임워크](https://operatorframework.io)
 
 ## {{% heading "whatsnext" %}}
 
 
 * [사용자 정의 리소스](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)에 대해 더 알아보기
 * [OperatorHub.io](https://operatorhub.io/)에서 유스케이스에 맞는 이미 만들어진 오퍼레이터 찾기
-* 기존 도구를 사용하여 자신만의 오퍼레이터를 작성해보자. 다음은 예시이다.
-  * [KUDO](https://kudo.dev/) (Kubernetes Universal Declarative Operator) 사용하기
-  * [kubebuilder](https://book.kubebuilder.io/) 사용하기
-  * 웹훅(WebHook)과 함께 [Metacontroller](https://metacontroller.app/)를
-    사용하여 직접 구현하기
-  * [오퍼레이터 프레임워크](https://operatorframework.io) 사용하기
 * 다른 사람들이 사용할 수 있도록 자신의 오퍼레이터를 [게시](https://operatorhub.io/)하기
 * 오퍼레이터 패턴을 소개한 [CoreOS 원본 글](https://web.archive.org/web/20170129131616/https://coreos.com/blog/introducing-operators.html) 읽기 (이 링크는 원본 글에 대한 보관 버전임)
 * 오퍼레이터 구축을 위한 모범 사례에 대한 구글 클라우드(Google Cloud)의 [기사](https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-building-kubernetes-operators-and-stateful-apps) 읽기
diff --git a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
index f9e739d7a1..dba31a6c7f 100644
--- a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -5,7 +5,7 @@
 
 title: 노드에 파드 할당하기
 content_type: concept
-weight: 50
+weight: 20
 ---
 
 
diff --git a/content/ko/docs/concepts/scheduling-eviction/resource-bin-packing.md b/content/ko/docs/concepts/scheduling-eviction/resource-bin-packing.md
index f23396d936..d11b7fe2ae 100644
--- a/content/ko/docs/concepts/scheduling-eviction/resource-bin-packing.md
+++ b/content/ko/docs/concepts/scheduling-eviction/resource-bin-packing.md
@@ -5,7 +5,7 @@
 
 title: 확장된 리소스를 위한 리소스 빈 패킹(bin packing)
 content_type: concept
-weight: 50
+weight: 30
 ---
 
 <!-- overview -->
diff --git a/content/ko/docs/concepts/storage/dynamic-provisioning.md b/content/ko/docs/concepts/storage/dynamic-provisioning.md
index 412645e734..d39289106e 100644
--- a/content/ko/docs/concepts/storage/dynamic-provisioning.md
+++ b/content/ko/docs/concepts/storage/dynamic-provisioning.md
@@ -75,8 +75,8 @@ parameters:
 사용자는 `PersistentVolumeClaim` 에 스토리지 클래스를 포함시켜 동적으로 프로비전된
 스토리지를 요청한다. 쿠버네티스 v1.6 이전에는 `volume.beta.kubernetes.io/storage-class`
 어노테이션을 통해 수행되었다. 그러나 이 어노테이션은
-v1.6부터 더 이상 사용하지 않는다. 사용자는 이제 `PersistentVolumeClaim` 오브젝트의
-`storageClassName` 필드를 사용할 수 있기에 대신하여 사용해야 한다. 이 필드의 값은
+v1.9부터는 더 이상 사용하지 않는다. 사용자는 이제 `PersistentVolumeClaim` 오브젝트의
+`storageClassName` 필드를 사용해야 한다. 이 필드의 값은
 관리자가 구성한 `StorageClass` 의 이름과
 일치해야 한다. ([아래](#동적-프로비저닝-활성화하기)를 참고)
 
diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index c9b3ac80d9..5323182966 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -31,7 +31,8 @@ weight: 10
 임시 볼륨 유형은 파드의 수명을 갖지만, 퍼시스턴트 볼륨은
 파드의 수명을 넘어 존재한다. 결과적으로, 볼륨은 파드 내에서
 실행되는 모든 컨테이너보다 오래 지속되며, 컨테이너를 다시 시작해도 데이터가 보존된다. 파드가
-더 이상 존재하지 않으면, 볼륨은 삭제된다.
+더 이상 존재하지 않으면, 쿠버네티스는 임시(ephemeral) 볼륨을 삭제하지만,
+퍼시스턴트(persistent) 볼륨은 삭제하지 않는다.
 
 기본적으로 볼륨은 디렉터리일 뿐이며, 일부 데이터가 있을 수 있으며, 파드
 내 컨테이너에서 접근할 수 있다. 디렉터리의 생성 방식, 이를 지원하는
diff --git a/content/ko/docs/concepts/workloads/controllers/deployment.md b/content/ko/docs/concepts/workloads/controllers/deployment.md
index f6b9979d47..fede8a46c8 100644
--- a/content/ko/docs/concepts/workloads/controllers/deployment.md
+++ b/content/ko/docs/concepts/workloads/controllers/deployment.md
@@ -51,8 +51,8 @@ _디플로이먼트(Deployment)_ 는 {{< glossary_tooltip text="파드" term_id=
 
   {{< note >}}
   `.spec.selector.matchLabels` 필드는 {key,value}의 쌍으로 매핑되어있다. `matchLabels` 에 매핑된
-  단일 {key,value}은 `matchExpressions` 의 요소에 해당하며, 키 필드는 "key"에 그리고 연산자는 "In"에 대응되며
-  값 배열은 "value"만 포함한다.
+  단일 {key,value}은 `matchExpressions` 의 요소에 해당하며, `key` 필드는 "key"에 그리고 `operator`는 "In"에 대응되며
+  `value` 배열은 "value"만 포함한다.
   매칭을 위해서는 `matchLabels` 와 `matchExpressions` 의 모든 요건이 충족되어야 한다.
   {{< /note >}}
 
diff --git a/content/ko/docs/reference/_index.md b/content/ko/docs/reference/_index.md
index c294f2efb5..ff1727ffee 100644
--- a/content/ko/docs/reference/_index.md
+++ b/content/ko/docs/reference/_index.md
@@ -6,6 +6,7 @@ linkTitle: "레퍼런스"
 main_menu: true
 weight: 70
 content_type: concept
+no_list: true
 ---
 
 <!-- overview -->
@@ -18,11 +19,17 @@ content_type: concept
 
 ## API 레퍼런스
 
+* [표준 용어집](/ko/docs/reference/glossary/) -  포괄적이고, 표준화 된 쿠버네티스 용어 목록
+
+
+
 * [쿠버네티스 API 레퍼런스](/docs/reference/kubernetes-api/)
 * [쿠버네티스 {{< param "version" >}}용 원페이지(One-page) API 레퍼런스](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 * [쿠버네티스 API 사용](/ko/docs/reference/using-api/) - 쿠버네티스 API에 대한 개요
+* [API 접근 제어](/ko/docs/reference/access-authn-authz/) - 쿠버네티스가 API 접근을 제어하는 방법에 대한 세부사항
+* [잘 알려진 레이블, 어노테이션과 테인트](/docs/reference/kubernetes-api/labels-annotations-taints/)
 
-## API 클라이언트 라이브러리
+## 공식적으로 지원되는 클라이언트 라이브러리
 
 프로그래밍 언어에서 쿠버네티스 API를 호출하기 위해서,
 [클라이언트 라이브러리](/ko/docs/reference/using-api/client-libraries/)를 사용할 수 있다.
@@ -32,22 +39,27 @@ content_type: concept
 - [쿠버네티스 Python 클라이언트 라이브러리](https://github.com/kubernetes-client/python)
 - [쿠버네티스 Java 클라이언트 라이브러리](https://github.com/kubernetes-client/java)
 - [쿠버네티스 JavaScript 클라이언트 라이브러리](https://github.com/kubernetes-client/javascript)
+- [쿠버네티스 Dotnet 클라이언트 라이브러리](https://github.com/kubernetes-client/csharp)
+- [쿠버네티스 Haskell 클라이언트 라이브러리](https://github.com/kubernetes-client/haskell)
 
-## CLI 레퍼런스
+## CLI
 
 * [kubectl](/ko/docs/reference/kubectl/overview/) - 명령어를 실행하거나 쿠버네티스 클러스터를 관리하기 위해 사용하는 주된 CLI 도구.
     * [JSONPath](/ko/docs/reference/kubectl/jsonpath/) - kubectl에서 [JSONPath 표현](https://goessner.net/articles/JsonPath/)을 사용하기 위한 문법 가이드.
 * [kubeadm](/ko/docs/reference/setup-tools/kubeadm/) - 안정적인 쿠버네티스 클러스터를 쉽게 프로비전하기 위한 CLI 도구.
 
-## 컴포넌트 레퍼런스
+## 컴포넌트
 
 * [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - 각 노드에서 구동되는 주요한 *노드 에이전트*. kubelet은 PodSpecs 집합을 가지며 기술된 컨테이너가 구동되고 있는지, 정상 작동하는지를 보장한다.
 * [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) - 파드, 서비스, 레플리케이션 컨트롤러와 같은 API 오브젝트에 대한 검증과 구성을 수행하는 REST API.
 * [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) - 쿠버네티스에 탑재된 핵심 제어 루프를 포함하는 데몬.
 * [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - 간단한 TCP/UDP 스트림 포워딩이나 백-엔드 집합에 걸쳐서 라운드-로빈 TCP/UDP 포워딩을 할 수 있다.
 * [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - 가용성, 성능 및 용량을 관리하는 스케줄러.
-  * [kube-scheduler 정책](/ko/docs/reference/scheduling/policies)
-  * [kube-scheduler 프로파일](/docs/reference/scheduling/config#profiles)
+
+## 스케줄링
+
+* [kube-scheduler 정책](/ko/docs/reference/scheduling/policies)
+* [kube-scheduler 프로파일](/docs/reference/scheduling/config#profiles)
 
 ## 설계 문서
 
diff --git a/content/ko/docs/reference/access-authn-authz/_index.md b/content/ko/docs/reference/access-authn-authz/_index.md
index 9e23c5d767..0c910199b7 100644
--- a/content/ko/docs/reference/access-authn-authz/_index.md
+++ b/content/ko/docs/reference/access-authn-authz/_index.md
@@ -1,6 +1,6 @@
 ---
 title: API 접근 제어
-weight: 20
+weight: 15
 no_list: true
 ---
 
diff --git a/content/ko/docs/reference/command-line-tools-reference/_index.md b/content/ko/docs/reference/command-line-tools-reference/_index.md
index 14025d0f71..d975db37b1 100644
--- a/content/ko/docs/reference/command-line-tools-reference/_index.md
+++ b/content/ko/docs/reference/command-line-tools-reference/_index.md
@@ -1,4 +1,4 @@
 ---
-title: 커맨드 라인 도구 레퍼런스
+title: 컴포넌트 도구
 weight: 60
 ---
diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index 93683ae9b1..62fb53396c 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -242,6 +242,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `DynamicProvisioningScheduling` | - | 사용중단| 1.12 | - |
 | `DynamicVolumeProvisioning` | `true` | 알파 | 1.3 | 1.7 |
 | `DynamicVolumeProvisioning` | `true` | GA | 1.8 | - |
+| `EnableAggregatedDiscoveryTimeout` | `true` | 사용중단 | 1.16 | - |
 | `EnableEquivalenceClassCache` | `false` | 알파 | 1.8 | 1.14 |
 | `EnableEquivalenceClassCache` | - | 사용중단 | 1.15 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | 알파 | 1.5 | 1.12 |
diff --git a/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md b/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md
index 565c3b4faf..e4c790c491 100644
--- a/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md
+++ b/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md
@@ -2,8 +2,21 @@
 title: kube-proxy
 content_type: tool-reference
 weight: 30
+auto_generated: true
 ---
 
+<!--
+파일은 일반 [생성기](https://github.com/kubernetes-sigs/reference-docs/)를
+사용해서 컴포넌트의 Go 소스 코드를 통해 자동 생성된다.
+참조 문서의 생성에 대해 배우려면
+[참조 문서에 기여하기](/ko/docs/contribute/generate-ref-docs/)를 읽는다.
+참조 컨텐츠를 업데이트하려면,
+[업스트림에 기여하기](/docs/contribute/generate-ref-docs/contribute-upstream/) 가이드를 따른다.
+[참조 문서](https://github.com/kubernetes-sigs/reference-docs/) 프로젝트에
+대해 문서 서식의 버그를 신고할 수 있다.
+-->
+
+
 ## {{% heading "synopsis" %}}
 
 
@@ -32,308 +45,308 @@ kube-proxy [flags]
 <td colspan="2">--azure-container-registry-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Azure 컨테이너 레지스트리 구성 정보가 들어 있는 파일의 경로.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Azure 컨테이너 레지스트리 구성 정보가 들어 있는 파일의 경로.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--bind-address ip&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 0.0.0.0</td>
+<td colspan="2">--bind-address string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 0.0.0.0</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">프록시 서버가 서비스할 IP 주소(모든 IPv4 인터페이스의 경우 '0.0.0.0'으로 설정, 모든 IPv6 인터페이스의 경우 '::'로 설정)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>프록시 서버가 서비스할 IP 주소(모든 IPv4 인터페이스의 경우 '0.0.0.0'으로 설정, 모든 IPv6 인터페이스의 경우 '::'로 설정)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--bind-address-hard-fail</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">true인 경우 kube-proxy는 포트 바인딩 실패를 치명적인 것으로 간주하고 종료한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>true인 경우 kube-proxy는 포트 바인딩 실패를 치명적인 것으로 간주하고 종료한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cleanup</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">true인 경우 iptables 및 ipvs 규칙을 제거하고 종료한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>true인 경우 iptables 및 ipvs 규칙을 제거하고 종료한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">클러스터에 있는 파드의 CIDR 범위. 구성 후에는 이 범위 밖에서 서비스 클러스터 IP로 전송되는 트래픽은 마스커레이드되고 파드에서 외부 LoadBalancer IP로 전송된 트래픽은 대신 해당 클러스터 IP로 전송된다</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>클러스터에 있는 파드의 CIDR 범위. 구성 후에는 이 범위 밖에서 서비스 클러스터 IP로 전송되는 트래픽은 마스커레이드되고 파드에서 외부 LoadBalancer IP로 전송된 트래픽은 대신 해당 클러스터 IP로 전송된다</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">설정 파일의 경로.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>설정 파일의 경로.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 15m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">apiserver의 설정이 갱신되는 빈도. 0보다 커야 한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>apiserver의 설정이 갱신되는 빈도. 0보다 커야 한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-max-per-core int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 32768</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">CPU 코어당 추적할 최대 NAT 연결 수(한도(limit)를 그대로 두고 contrack-min을 무시하려면 0으로 설정한다)(</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>CPU 코어당 추적할 최대 NAT 연결 수(한도(limit)를 그대로 두고 contrack-min을 무시하려면 0으로 설정한다)(</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-min int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 131072</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">conntrack-max-per-core와 관계없이 할당할 최소 conntrack 항목 수(한도를 그대로 두려면 conntrack-max-per-core값을 0으로 설정).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>conntrack-max-per-core와 관계없이 할당할 최소 conntrack 항목 수(한도를 그대로 두려면 conntrack-max-per-core값을 0으로 설정).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-tcp-timeout-close-wait duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 1h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">CLOSE_WAIT 상태의 TCP 연결에 대한 NAT 시간 초과</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>CLOSE_WAIT 상태의 TCP 연결에 대한 NAT 시간 초과</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--conntrack-tcp-timeout-established duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 24h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">설정된 TCP 연결에 대한 유휴시간 초과(값이 0이면 그대로 유지)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>설정된 TCP 연결에 대한 유휴시간 초과(값이 0이면 그대로 유지)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--detect-local-mode LocalMode</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">로컬 트래픽을 탐지하는 데 사용할 모드</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>로컬 트래픽을 탐지하는 데 사용할 모드</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates mapStringBool</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">알파/실험 기능에 대한 기능 게이트를 설명하는 키=값 쌍 집합. 옵션은 다음과 같다.<br/>APIListChunking=true|false (BETA - 기본값=true)<br/>APIPriorityAndFairness=true|false (ALPHA - 기본값=false)<br/>APIResponseCompression=true|false (BETA - 기본값=true)<br/>AllAlpha=true|false (ALPHA - 기본값=false)<br/>AllBeta=true|false (BETA - 기본값=false)<br/>AllowInsecureBackendProxy=true|false (BETA - 기본값=true)<br/>AnyVolumeDataSource=true|false (ALPHA - 기본값=false)<br/>AppArmor=true|false (BETA - 기본값=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - 기본값=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - 기본값=false)<br/>CPUManager=true|false (BETA - 기본값=true)<br/>CRIContainerLogRotation=true|false (BETA - 기본값=true)<br/>CSIInlineVolume=true|false (BETA - 기본값=true)<br/>CSIMigration=true|false (BETA - 기본값=true)<br/>CSIMigrationAWS=true|false (BETA - 기본값=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureDisk=true|false (BETA - 기본값=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationGCE=true|false (BETA - 기본값=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationOpenStack=true|false (BETA - 기본값=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationvSphere=true|false (BETA - 기본값=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - 기본값=false)<br/>CSIStorageCapacity=true|false (ALPHA - 기본값=false)<br/>CSIVolumeFSGroupPolicy=true|false (ALPHA - 기본값=false)<br/>ConfigurableFSGroupPolicy=true|false (ALPHA - 기본값=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - 기본값=false)<br/>DefaultPodTopologySpread=true|false (ALPHA - 기본값=false)<br/>DevicePlugins=true|false (BETA - 기본값=true)<br/>DisableAcceleratorUsageMetrics=true|false (ALPHA - 기본값=false)<br/>DynamicKubeletConfig=true|false (BETA - 기본값=true)<br/>EndpointSlice=true|false (BETA - 기본값=true)<br/>EndpointSliceProxying=true|false (BETA - 기본값=true)<br/>EphemeralContainers=true|false (ALPHA - 기본값=false)<br/>ExpandCSIVolumes=true|false (BETA - 기본값=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - 기본값=true)<br/>ExpandPersistentVolumes=true|false (BETA - 기본값=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - 기본값=false)<br/>GenericEphemeralVolume=true|false (ALPHA - 기본값=false)<br/>HPAScaleToZero=true|false (ALPHA - 기본값=false)<br/>HugePageStorageMediumSize=true|false (BETA - 기본값=true)<br/>HyperVContainer=true|false (ALPHA - 기본값=false)<br/>IPv6DualStack=true|false (ALPHA - 기본값=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - 기본값=true)<br/>KubeletPodResources=true|false (BETA - 기본값=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - 기본값=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - 기본값=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - 기본값=false)<br/>NodeDisruptionExclusion=true|false (BETA - 기본값=true)<br/>NonPreemptingPriority=true|false (BETA - 기본값=true)<br/>PodDisruptionBudget=true|false (BETA - 기본값=true)<br/>PodOverhead=true|false (BETA - 기본값=true)<br/>ProcMountType=true|false (ALPHA - 기본값=false)<br/>QOSReserved=true|false (ALPHA - 기본값=false)<br/>RemainingItemCount=true|false (BETA - 기본값=true)<br/>RemoveSelfLink=true|false (ALPHA - 기본값=false)<br/>RotateKubeletServerCertificate=true|false (BETA - 기본값=true)<br/>RunAsGroup=true|false (BETA - 기본값=true)<br/>RuntimeClass=true|false (BETA - 기본값=true)<br/>SCTPSupport=true|false (BETA - 기본값=true)<br/>SelectorIndex=true|false (BETA - 기본값=true)<br/>ServerSideApply=true|false (BETA - 기본값=true)<br/>ServiceAccountIssuerDiscovery=true|false (ALPHA - 기본값=false)<br/>ServiceAppProtocol=true|false (BETA - 기본값=true)<br/>ServiceNodeExclusion=true|false (BETA - 기본값=true)<br/>ServiceTopology=true|false (ALPHA - 기본값=false)<br/>SetHostnameAsFQDN=true|false (ALPHA - 기본값=false)<br/>StartupProbe=true|false (BETA - 기본값=true)<br/>StorageVersionHash=true|false (BETA - 기본값=true)<br/>SupportNodePidsLimit=true|false (BETA - 기본값=true)<br/>SupportPodPidsLimit=true|false (BETA - 기본값=true)<br/>Sysctls=true|false (BETA - 기본값=true)<br/>TTLAfterFinished=true|false (ALPHA - 기본값=false)<br/>TokenRequest=true|false (BETA - 기본값=true)<br/>TokenRequestProjection=true|false (BETA - 기본값=true)<br/>TopologyManager=true|false (BETA - 기본값=true)<br/>ValidateProxyRedirects=true|false (BETA - 기본값=true)<br/>VolumeSnapshotDataSource=true|false (BETA - 기본값=true)<br/>WarningHeaders=true|false (BETA - 기본값=true)<br/>WinDSR=true|false (ALPHA - 기본값=false)<br/>WinOverlay=true|false (ALPHA - 기본값=false)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - 기본값=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>알파/실험 기능에 대한 기능 게이트를 설명하는 키=값 쌍 집합. 옵션은 다음과 같다.<br/>APIListChunking=true|false (BETA - 기본값=true)<br/>APIPriorityAndFairness=true|false (ALPHA - 기본값=false)<br/>APIResponseCompression=true|false (BETA - 기본값=true)<br/>AllAlpha=true|false (ALPHA - 기본값=false)<br/>AllBeta=true|false (BETA - 기본값=false)<br/>AllowInsecureBackendProxy=true|false (BETA - 기본값=true)<br/>AnyVolumeDataSource=true|false (ALPHA - 기본값=false)<br/>AppArmor=true|false (BETA - 기본값=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - 기본값=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - 기본값=false)<br/>CPUManager=true|false (BETA - 기본값=true)<br/>CRIContainerLogRotation=true|false (BETA - 기본값=true)<br/>CSIInlineVolume=true|false (BETA - 기본값=true)<br/>CSIMigration=true|false (BETA - 기본값=true)<br/>CSIMigrationAWS=true|false (BETA - 기본값=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureDisk=true|false (BETA - 기본값=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationGCE=true|false (BETA - 기본값=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationOpenStack=true|false (BETA - 기본값=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationvSphere=true|false (BETA - 기본값=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - 기본값=false)<br/>CSIStorageCapacity=true|false (ALPHA - 기본값=false)<br/>CSIVolumeFSGroupPolicy=true|false (ALPHA - 기본값=false)<br/>ConfigurableFSGroupPolicy=true|false (ALPHA - 기본값=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - 기본값=false)<br/>DefaultPodTopologySpread=true|false (ALPHA - 기본값=false)<br/>DevicePlugins=true|false (BETA - 기본값=true)<br/>DisableAcceleratorUsageMetrics=true|false (ALPHA - 기본값=false)<br/>DynamicKubeletConfig=true|false (BETA - 기본값=true)<br/>EndpointSlice=true|false (BETA - 기본값=true)<br/>EndpointSliceProxying=true|false (BETA - 기본값=true)<br/>EphemeralContainers=true|false (ALPHA - 기본값=false)<br/>ExpandCSIVolumes=true|false (BETA - 기본값=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - 기본값=true)<br/>ExpandPersistentVolumes=true|false (BETA - 기본값=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - 기본값=false)<br/>GenericEphemeralVolume=true|false (ALPHA - 기본값=false)<br/>HPAScaleToZero=true|false (ALPHA - 기본값=false)<br/>HugePageStorageMediumSize=true|false (BETA - 기본값=true)<br/>HyperVContainer=true|false (ALPHA - 기본값=false)<br/>IPv6DualStack=true|false (ALPHA - 기본값=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - 기본값=true)<br/>KubeletPodResources=true|false (BETA - 기본값=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - 기본값=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - 기본값=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - 기본값=false)<br/>NodeDisruptionExclusion=true|false (BETA - 기본값=true)<br/>NonPreemptingPriority=true|false (BETA - 기본값=true)<br/>PodDisruptionBudget=true|false (BETA - 기본값=true)<br/>PodOverhead=true|false (BETA - 기본값=true)<br/>ProcMountType=true|false (ALPHA - 기본값=false)<br/>QOSReserved=true|false (ALPHA - 기본값=false)<br/>RemainingItemCount=true|false (BETA - 기본값=true)<br/>RemoveSelfLink=true|false (ALPHA - 기본값=false)<br/>RotateKubeletServerCertificate=true|false (BETA - 기본값=true)<br/>RunAsGroup=true|false (BETA - 기본값=true)<br/>RuntimeClass=true|false (BETA - 기본값=true)<br/>SCTPSupport=true|false (BETA - 기본값=true)<br/>SelectorIndex=true|false (BETA - 기본값=true)<br/>ServerSideApply=true|false (BETA - 기본값=true)<br/>ServiceAccountIssuerDiscovery=true|false (ALPHA - 기본값=false)<br/>ServiceAppProtocol=true|false (BETA - 기본값=true)<br/>ServiceNodeExclusion=true|false (BETA - 기본값=true)<br/>ServiceTopology=true|false (ALPHA - 기본값=false)<br/>SetHostnameAsFQDN=true|false (ALPHA - 기본값=false)<br/>StartupProbe=true|false (BETA - 기본값=true)<br/>StorageVersionHash=true|false (BETA - 기본값=true)<br/>SupportNodePidsLimit=true|false (BETA - 기본값=true)<br/>SupportPodPidsLimit=true|false (BETA - 기본값=true)<br/>Sysctls=true|false (BETA - 기본값=true)<br/>TTLAfterFinished=true|false (ALPHA - 기본값=false)<br/>TokenRequest=true|false (BETA - 기본값=true)<br/>TokenRequestProjection=true|false (BETA - 기본값=true)<br/>TopologyManager=true|false (BETA - 기본값=true)<br/>ValidateProxyRedirects=true|false (BETA - 기본값=true)<br/>VolumeSnapshotDataSource=true|false (BETA - 기본값=true)<br/>WarningHeaders=true|false (BETA - 기본값=true)<br/>WinDSR=true|false (ALPHA - 기본값=false)<br/>WinOverlay=true|false (ALPHA - 기본값=false)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - 기본값=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--healthz-bind-address ipport&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 0.0.0.0:10256</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">헬스 체크 서버가 서비스할 포트가 있는 IP 주소(모든 IPv4의 인터페이스의 경우 '0.0.0.0:10256', 모든 IPv6의 인터페이스인 경우 '[::]:10256'로 설정). 사용 안 할 경우 빈칸으로 둠.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>헬스 체크 서버가 서비스할 포트가 있는 IP 주소(모든 IPv4의 인터페이스의 경우 '0.0.0.0:10256', 모든 IPv6의 인터페이스인 경우 '[::]:10256'로 설정). 사용 안 할 경우 빈칸으로 둠.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">kube-proxy에 대한 도움말.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>kube-proxy에 대한 도움말.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--hostname-override string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">문자열 값이 있으면, 이 값을 실제 호스트네임 대신에 ID로 사용한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>문자열 값이 있으면, 이 값을 실제 호스트네임 대신에 ID로 사용한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--iptables-masquerade-bit int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 14</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">순수 iptable 프록시를 사용하는 경우 SNAT가 필요한 패킷을 표시하는 fwmark 스페이스 비트. [0, 31] 범위 안에 있어야 한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>순수 iptable 프록시를 사용하는 경우 SNAT가 필요한 패킷을 표시하는 fwmark 스페이스 비트. [0, 31] 범위 안에 있어야 한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--iptables-min-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 1s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">엔드포인트 및 서비스가 변경될 때 iptable 규칙을 새로 고칠 수 있는 빈도의 최소 간격(예: '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>엔드포인트 및 서비스가 변경될 때 iptable 규칙을 새로 고칠 수 있는 빈도의 최소 간격(예: '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--iptables-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">iptable 규칙을 새로 고치는 빈도의 최대 간격(예: '5s', '1m', '2h22m'). 0 보다 커야 한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>iptable 규칙을 새로 고치는 빈도의 최대 간격(예: '5s', '1m', '2h22m'). 0 보다 커야 한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-exclude-cidrs stringSlice</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">IPVS 규칙을 정리할 때 ipvs 프록시가 건드리지 않아야 하는 쉼표로 구분된 CIDR 목록.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>IPVS 규칙을 정리할 때 ipvs 프록시가 건드리지 않아야 하는 쉼표로 구분된 CIDR 목록.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-min-sync-period duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">엔드포인트 및 서비스가 변경될 때 ipvs 규칙을 새로 고칠 수 있는 빈도의 최소 간격(예: '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>엔드포인트 및 서비스가 변경될 때 ipvs 규칙을 새로 고칠 수 있는 빈도의 최소 간격(예: '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-scheduler string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">프록시 모드가 ipvs인 경우 ipvs 스케줄러 유형.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>프록시 모드가 ipvs인 경우 ipvs 스케줄러 유형.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-strict-arp</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">arp_ignore를 1로 설정하고 arp_annotes를 2로 설정하여 엄격한 ARP를 사용.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>arp_ignore를 1로 설정하고 arp_annotes를 2로 설정하여 엄격한 ARP를 사용.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-sync-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 30s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">ipvs 규칙이 새로 갱신되는 빈도의 최대 간격(예: '5s', '1m', '2h22m'). 0 보다 커야 한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>ipvs 규칙이 새로 갱신되는 빈도의 최대 간격(예: '5s', '1m', '2h22m'). 0 보다 커야 한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-tcp-timeout duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">유휴 IPVS TCP 연결에 대한 시간 초과. 0이면 그대로 유지(예: '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>유휴 IPVS TCP 연결에 대한 시간 초과. 0이면 그대로 유지(예: '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-tcpfin-timeout duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">FIN 패킷을 수신한 후 IPVS TCP 연결에 대한 시간 초과. 0이면 그대로 유지(예: '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>FIN 패킷을 수신한 후 IPVS TCP 연결에 대한 시간 초과. 0이면 그대로 유지(예: '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ipvs-udp-timeout duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">IPVS UDP 패킷에 대한 시간 초과. 0이면 그대로 유지(예: '5s', '1m', '2h22m').</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>IPVS UDP 패킷에 대한 시간 초과. 0이면 그대로 유지(예: '5s', '1m', '2h22m').</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">쿠버네티스 api 서버와 통신하는 동안 사용할 burst.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>쿠버네티스 api 서버와 통신하는 동안 사용할 burst.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-content-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: "application/vnd.kubernetes.protobuf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">api 서버에 보낸 요청의 내용 유형.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>api 서버에 보낸 요청의 내용 유형.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-qps float32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">쿠버네티스 api 서버와 통신할 때 사용할 QPS.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>쿠버네티스 api 서버와 통신할 때 사용할 QPS.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">인증 정보가 있는 kubeconfig 파일의 경로(마스터 위치는 마스터 플래그로 설정됨).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>인증 정보가 있는 kubeconfig 파일의 경로(마스터 위치는 마스터 플래그로 설정됨).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 5s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">로그 플러시 사이의 최대 시간</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>로그 플러시 사이의 최대 시간</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--masquerade-all</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">순수 iptables 프록시를 사용하는 경우 서비스 클러스터 IP를 통해 전송된 모든 트래픽을 SNAT함(일반적으로 필요하지 않음).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>순수 iptables 프록시를 사용하는 경우 서비스 클러스터 IP를 통해 전송된 모든 트래픽을 SNAT함(일반적으로 필요하지 않음).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--master string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">쿠버네티스 API 서버의 주소(kubeconfig의 모든 값 덮어쓰기).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>쿠버네티스 API 서버의 주소(kubeconfig의 모든 값 덮어쓰기).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--metrics-bind-address ipport&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 127.0.0.1:10249</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">메트릭 서버가 서비스할 포트가 있는 IP 주소(모든 IPv4 인터페이스의 경우 '0.0.0.0:10249', 모든 IPv6 인터페이스의 경우 '[::]:10249'로 설정됨). 사용하지 않으려면 비워둘 것.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>메트릭 서버가 서비스할 포트가 있는 IP 주소(모든 IPv4 인터페이스의 경우 '0.0.0.0:10249', 모든 IPv6 인터페이스의 경우 '[::]:10249'로 설정됨). 사용하지 않으려면 비워둘 것.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--nodeport-addresses stringSlice</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">NodePort에 사용할 주소를 지정하는 값의 문자열 조각. 값은 유효한 IP 블록(예: 1.2.3.0/24, 1.2.3.4/32). 기본값인 빈 문자열 조각값은([]) 모든 로컬 주소를 사용하는 것을 의미한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>NodePort에 사용할 주소를 지정하는 값의 문자열 조각. 값은 유효한 IP 블록(예: 1.2.3.0/24, 1.2.3.4/32). 기본값인 빈 문자열 조각값은([]) 모든 로컬 주소를 사용하는 것을 의미한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--oom-score-adj int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: -999</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">kube-proxy 프로세스에 대한 oom-score-adj 값. 값은 [-1000, 1000] 범위 내에 있어야 한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>kube-proxy 프로세스에 대한 oom-score-adj 값. 값은 [-1000, 1000] 범위 내에 있어야 한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--profiling</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">값이 true이면 /debug/pprof 핸들러에서 웹 인터페이스를 통한 프로파일링을 활성화한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>값이 true이면 /debug/pprof 핸들러에서 웹 인터페이스를 통한 프로파일링을 활성화한다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--proxy-mode ProxyMode</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">사용할 프록시 모드: 'userspace' (이전) or 'iptables' (빠름) or 'ipvs' or 'kernelspace' (윈도우). 공백인 경우 가장 잘 사용할 수 있는 프록시(현재는 iptables)를 사용한다. iptables 프록시를 선택했지만, 시스템의 커널 또는 iptables 버전이 맞지 않으면, 항상 userspace 프록시로 변경된다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>사용할 프록시 모드: 'userspace' (이전) or 'iptables' (빠름) or 'ipvs' or 'kernelspace' (윈도우). 공백인 경우 가장 잘 사용할 수 있는 프록시(현재는 iptables)를 사용한다. iptables 프록시를 선택했지만, 시스템의 커널 또는 iptables 버전이 맞지 않으면, 항상 userspace 프록시로 변경된다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--proxy-port-range port-range</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">서비스 트래픽을 프록시하기 위해 사용할 수 있는 호스트 포트 범위(beginPort-endPort, single port 또는 beginPort+offset 포함). 만약 범위가 0, 0-0, 혹은 지정되지 않으면, 포트는 무작위로 선택된다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>서비스 트래픽을 프록시하기 위해 사용할 수 있는 호스트 포트 범위(beginPort-endPort, single port 또는 beginPort+offset 포함). 만약 범위가 0, 0-0, 혹은 지정되지 않으면, 포트는 무작위로 선택된다.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--show-hidden-metrics-for-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">숨겨진 메트릭을 표시할 이전 버전. </td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>숨겨진 메트릭을 표시할 이전 버전. </p></td>
 </tr>
 
 <tr>
 <td colspan="2">--udp-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;기본값: 250ms</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">유휴 UDP 연결이 열린 상태로 유지되는 시간(예: '250ms', '2s'). 값은 0보다 커야 한다. 프록시 모드 userspace에만 적용 가능함.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>유휴 UDP 연결이 열린 상태로 유지되는 시간(예: '250ms', '2s'). 값은 0보다 커야 한다. 프록시 모드 userspace에만 적용 가능함.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--version version[=true]</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">버전 정보를 인쇄하고 종료.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>버전 정보를 인쇄하고 종료.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--write-config-to string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">기본 구성 값을 이 파일에 옮겨쓰고 종료한다.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>기본 구성 값을 이 파일에 옮겨쓰고 종료한다.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/ko/docs/reference/glossary/index.md b/content/ko/docs/reference/glossary/index.md
index 9af1b3d078..024d8414ba 100755
--- a/content/ko/docs/reference/glossary/index.md
+++ b/content/ko/docs/reference/glossary/index.md
@@ -1,5 +1,5 @@
 ---
-title: 표준 용어집
+title: 용어집
 layout: glossary
 noedit: true
 default_active_tag: fundamental
diff --git a/content/ko/docs/reference/issues-security/_index.md b/content/ko/docs/reference/issues-security/_index.md
index 596a6e01a4..12ac2f3759 100644
--- a/content/ko/docs/reference/issues-security/_index.md
+++ b/content/ko/docs/reference/issues-security/_index.md
@@ -1,4 +1,4 @@
 ---
 title: 쿠버네티스 이슈와 보안
-weight: 10
+weight: 40
 ---
diff --git a/content/ko/docs/reference/kubectl/_index.md b/content/ko/docs/reference/kubectl/_index.md
index 7b6c2d720b..765adb6fe8 100755
--- a/content/ko/docs/reference/kubectl/_index.md
+++ b/content/ko/docs/reference/kubectl/_index.md
@@ -1,5 +1,5 @@
 ---
-title: "kubectl CLI"
+title: "kubectl"
 weight: 60
 ---
 
diff --git a/content/ko/docs/reference/kubectl/overview.md b/content/ko/docs/reference/kubectl/overview.md
index 7ddfe5b095..3d8179a08a 100644
--- a/content/ko/docs/reference/kubectl/overview.md
+++ b/content/ko/docs/reference/kubectl/overview.md
@@ -17,7 +17,7 @@ KUBECONFIG 환경 변수를 설정하거나 [`--kubeconfig`](/ko/docs/concepts/c
 이 개요는 `kubectl` 구문을 다루고, 커맨드 동작을 설명하며, 일반적인 예제를 제공한다.
 지원되는 모든 플래그 및 하위 명령을 포함한 각 명령에 대한 자세한 내용은
 [kubectl](/docs/reference/generated/kubectl/kubectl-commands/) 참조 문서를 참고한다.
-설치 방법에 대해서는 [kubectl 설치](/ko/docs/tasks/tools/install-kubectl/)를 참고한다.
+설치 방법에 대해서는 [kubectl 설치](/ko/docs/tasks/tools/)를 참고한다.
 
 <!-- body -->
 
diff --git a/content/ko/docs/reference/scheduling/config.md b/content/ko/docs/reference/scheduling/config.md
index 0f3f120d77..7b6942e119 100644
--- a/content/ko/docs/reference/scheduling/config.md
+++ b/content/ko/docs/reference/scheduling/config.md
@@ -185,8 +185,6 @@ profiles:
 - `RequestedToCapacityRatio`: 할당된 리소스의 구성된 기능에 따라 노드를
   선호한다.
   익스텐션 포인트: `Score`.
-- `NodeResourceLimits`: 파드 리소스 제한을 충족하는 노드를 선호한다.
-  익스텐션 포인트: `PreScore`, `Score`.
 - `CinderVolume`: 노드에 대해 OpenStack Cinder 볼륨 제한을 충족할 수 있는지
   확인한다.
   익스텐션 포인트: `Filter`.
diff --git a/content/ko/docs/reference/setup-tools/_index.md b/content/ko/docs/reference/setup-tools/_index.md
index 051fba4c5d..717b9cb2ac 100644
--- a/content/ko/docs/reference/setup-tools/_index.md
+++ b/content/ko/docs/reference/setup-tools/_index.md
@@ -1,4 +1,4 @@
 ---
-title: 설치 도구 레퍼런스
+title: 설치 도구
 weight: 50
 ---
diff --git a/content/ko/docs/reference/tools.md b/content/ko/docs/reference/tools/_index.md
similarity index 100%
rename from content/ko/docs/reference/tools.md
rename to content/ko/docs/reference/tools/_index.md
diff --git a/content/ko/docs/reference/using-api/_index.md b/content/ko/docs/reference/using-api/_index.md
index 427cebf529..423d82e0f2 100644
--- a/content/ko/docs/reference/using-api/_index.md
+++ b/content/ko/docs/reference/using-api/_index.md
@@ -1,7 +1,8 @@
 ---
-title: 쿠버네티스 API 개요
+title: API 개요
 content_type: concept
 weight: 10
+no_list: true
 card:
   name: 레퍼런스
   weight: 50
diff --git a/content/ko/docs/setup/best-practices/certificates.md b/content/ko/docs/setup/best-practices/certificates.md
index 3ada64a469..77665edbe2 100644
--- a/content/ko/docs/setup/best-practices/certificates.md
+++ b/content/ko/docs/setup/best-practices/certificates.md
@@ -7,7 +7,7 @@ weight: 40
 <!-- overview -->
 
 쿠버네티스는 TLS 위에 인증을 위해 PKI 인증서가 필요하다.
-만약 [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)으로 쿠버네티스를 설치했다면, 클러스터에 필요한 인증서는 자동으로 생성된다.
+만약 [kubeadm](/ko/docs/reference/setup-tools/kubeadm/)으로 쿠버네티스를 설치했다면, 클러스터에 필요한 인증서는 자동으로 생성된다.
 또한 더 안전하게 자신이 소유한 인증서를 생성할 수 있다. 이를 테면, 개인키를 API 서버에 저장하지 않으므로 더 안전하게 보관할 수 있다.
 이 페이지는 클러스터에 필요한 인증서를 설명한다.
 
@@ -72,7 +72,7 @@ etcd 역시 클라이언트와 피어 간에 상호 TLS 인증을 구현한다.
 | kube-apiserver-kubelet-client | kubernetes-ca             | system:masters | client                                 |                                             |
 | front-proxy-client            | kubernetes-front-proxy-ca |                | client                                 |                                             |
 
-[1]: 클러스터에 접속한 다른 IP 또는 DNS 이름([kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) 이 사용하는 로드 밸런서 안정 IP 또는 DNS 이름, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
+[1]: 클러스터에 접속한 다른 IP 또는 DNS 이름([kubeadm](/ko/docs/reference/setup-tools/kubeadm/) 이 사용하는 로드 밸런서 안정 IP 또는 DNS 이름, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
 `kubernetes.default.svc.cluster`, `kubernetes.default.svc.cluster.local`)
 
 `kind`는 하나 이상의 [x509 키 사용](https://godoc.org/k8s.io/api/certificates/v1beta1#KeyUsage) 종류를 가진다.
@@ -97,7 +97,7 @@ kubeadm 사용자만 해당:
 
 ### 인증서 파일 경로
 
-인증서는 권고하는 파일 경로에 존재해야 한다([kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)에서 사용되는 것처럼). 경로는 위치에 관계없이 주어진 파라미터를 사용하여 지정되야 한다.
+인증서는 권고하는 파일 경로에 존재해야 한다([kubeadm](/ko/docs/reference/setup-tools/kubeadm/)에서 사용되는 것처럼). 경로는 위치에 관계없이 주어진 파라미터를 사용하여 지정해야 한다.
 
 | 기본 CN                      | 권고되는 키 파일 경로         | 권고하는 인증서 파일 경로   | 명령어         | 키 파라미터                  | 인증서 파라미터                           |
 |------------------------------|------------------------------|-----------------------------|----------------|------------------------------|-------------------------------------------|
diff --git a/content/ko/docs/setup/best-practices/multiple-zones.md b/content/ko/docs/setup/best-practices/multiple-zones.md
index 189dbed654..3d825ebd08 100644
--- a/content/ko/docs/setup/best-practices/multiple-zones.md
+++ b/content/ko/docs/setup/best-practices/multiple-zones.md
@@ -55,7 +55,7 @@ content_type: concept
 특정 kubelet을 나타내는 노드 오브젝트에
 {{< glossary_tooltip text="레이블" term_id="label" >}}을 자동으로 추가한다.
 이러한 레이블에는
-[영역 정보](/docs/reference/kubernetes-api/labels-annotations-taints/#topologykubernetesiozone)가 포함될 수 있다.
+[영역 정보](/docs/reference/labels-annotations-taints/#topologykubernetesiozone)가 포함될 수 있다.
 
 클러스터가 여러 영역 또는 지역에 걸쳐있는 경우,
 [파드 토폴로지 분배 제약 조건](/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints/)과
diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index ba06b3d023..52ab0fc94b 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -63,7 +63,7 @@ kubelet을 재시작하는 것은 에러를 해결할 수 없을 것이다.
 
 ### containerd
 
-이 섹션에는 `containerd` 를 CRI 런타임으로 사용하는 데 필요한 단계가 포함되어 있다.
+이 섹션에는 containerd 를 CRI 런타임으로 사용하는 데 필요한 단계가 포함되어 있다.
 
 필수 구성 요소를 설치 및 구성한다.
 
@@ -90,170 +90,63 @@ sudo sysctl --system
 containerd를 설치한다.
 
 {{< tabs name="tab-cri-containerd-installation" >}}
-{{% tab name="Ubuntu 16.04" %}}
+{{% tab name="Linux" %}}
 
-```shell
-# 도커의 공식 GPG 키 추가
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
-# (containerd 설치)
-## 리포지터리 설정
-### HTTPS를 통해 리포지터리를 사용할 수 있도록 패키지 설치
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
+1. 공식 도커 리포지터리에서 `containerd.io` 패키지를 설치한다. 각 리눅스 배포한에 대한 도커 리포지터리를 설정하고 `containerd.io` 패키지를 설치하는 방법은 [도커 엔진 설치](https://docs.docker.com/engine/install/#server)에서 찾을 수 있다.
 
-```shell
-## 도커의 공식 GPG 키 추가
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
+2. containerd 설정
 
-```shell
-## 도커 apt 리포지터리 추가
-sudo add-apt-repository \
-    "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-    $(lsb_release -cs) \
-    stable"
-```
+   ```shell
+   sudo mkdir -p /etc/containerd
+   containerd config default | sudo tee /etc/containerd/config.toml
+   ```
 
-```shell
-## containerd 설치
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
+3. containerd 재시작
 
-```shell
-# containerd 구성
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
+   ```shell
+   sudo systemctl restart containerd
+   ```
 
-```shell
-# containerd 재시작
-sudo systemctl restart containerd
-```
-{{% /tab %}}
-{{% tab name="Ubuntu 18.04/20.04" %}}
-
-```shell
-# (containerd 설치)
-sudo apt-get update && sudo apt-get install -y containerd
-```
-
-```shell
-# containerd 구성
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# containerd 재시작
-sudo systemctl restart containerd
-```
-{{% /tab %}}
-{{% tab name="Debian 9+" %}}
-
-```shell
-# (containerd 설치)
-## 리포지터리 설정
-### HTTPS를 통해 리포지터리를 사용할 수 있도록 패키지 설치
-sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
-```
-
-```shell
-## 도커의 공식 GPG 키 추가
-curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
-
-```shell
-## 도커 apt 리포지터리 추가
-sudo add-apt-repository \
-   "deb [arch=amd64] https://download.docker.com/linux/debian \
-   $(lsb_release -cs) \
-   stable"
-```
-
-```shell
-## containerd 설치
-sudo apt-get update && sudo apt-get install -y containerd.io
-```
-
-```shell
-# 기본 containerd 구성 설정
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# containerd 재시작
-sudo systemctl restart containerd
-```
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
-
-```shell
-# (containerd 설치)
-## 리포지터리 설정
-### 필요한 패키지 설치
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
-
-```shell
-## 도커 리포지터리 추가
-sudo yum-config-manager \
-    --add-repo \
-    https://download.docker.com/linux/centos/docker-ce.repo
-```
-
-```shell
-# containerd 설치
-sudo yum update -y && sudo yum install -y containerd.io
-```
-
-```shell
-## containerd 구성
-sudo mkdir -p /etc/containerd
-containerd config default | sudo tee /etc/containerd/config.toml
-```
-
-```shell
-# containerd 재시작
-sudo systemctl restart containerd
-```
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}
 
-<br />
-Powershell 세션을 띄우고, `$Version` 환경 변수를 원하는 버전으로 설정(예: `$Version=1.4.3`)한 뒤, 다음 명령어를 실행한다.
-<br />
+PowerShell 세션을 시작하고 `$Version`을 원하는 버전(예: `$Version:1.4.3`)으로 설정한 후 다음 명령을 실행한다.
 
-```powershell
-# (containerd 설치)
-# containerd 다운로드
-curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.gz
-tar.exe xvf .\containerd-windows-amd64.tar.gz
-```
+1. containerd 다운로드
 
-```powershell
-# 추출 및 구성
-Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
-cd $Env:ProgramFiles\containerd\
-.\containerd.exe config default | Out-File config.toml -Encoding ascii
+   ```powershell
+   curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.
+gz
+   tar.exe xvf .\containerd-windows-amd64.tar.gz
+   ```
 
-# 구성을 검토한다. 설정에 따라 조정할 수 있다.
-# - sandbox_image (쿠버네티스 pause 이미지)
-# - cni bin_dir 및 conf_dir locations
-Get-Content config.toml
+2. 추출과 설정
 
-# (선택 사항이지만, 강력히 권장됨) containerd를 Windows Defender 검사 예외에 추가
-Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe" ```
+   ```powershell
+   Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
+   cd $Env:ProgramFiles\containerd\
+   .\containerd.exe config default | Out-File config.toml -Encoding ascii
+
+   # 설정을 검토한다. 설정에 따라 다음을 조정할 수 있다.
+   # - sandbox_image (쿠버네티스 일시중지 이미지)
+   # - cni bin 폴더와 conf 폴더 위치
+   Get-Content config.toml
+
+   # (선택사항 - 그러나 적극 권장함) Windows 디펜더 검사에서 containerd 제외
+   Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe"
+   ```
+
+3. containerd 실행
+
+   ```powershell
+   .\containerd.exe --register-service
+   Start-Service containerd
+   ```
 
-```powershell
-# containerd 시작
-.\containerd.exe --register-service
-Start-Service containerd
-```
 {{% /tab %}}
 {{< /tabs >}}
 
-#### systemd {#containerd-systemd}
+#### `systemd` cgroup 드라이버의 사용 {#containerd-systemd}
 
 `/etc/containerd/config.toml` 의 `systemd` cgroup 드라이버를 `runc` 에서 사용하려면, 다음과 같이 설정한다.
 
@@ -264,6 +157,12 @@ Start-Service containerd
     SystemdCgroup = true
 ```
 
+이 변경 사항을 적용하는 경우 containerd를 재시작한다.
+
+```shell
+sudo systemctl restart containerd
+```
+
 kubeadm을 사용하는 경우,
 [kubelet용 cgroup 드라이버](/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#컨트롤-플레인-노드에서-kubelet이-사용하는-cgroup-드라이버-구성)를 수동으로 구성한다.
 
@@ -453,138 +352,38 @@ CRI-O의 cgroup 드라이버 구성을 동기화 상태로
 
 ### 도커
 
-각 노드에 도커 CE를 설치한다.
+1. 각 노드에서 [도커 엔진 설치](https://docs.docker.com/engine/install/#server)에 따라 리눅스 배포판용 도커를 설치한다. 이 [의존성 파일](https://git.k8s.io/kubernetes/build/dependencies.yaml)에서 검증된 최신 버전의 도커를 찾을 수 있다.
 
-쿠버네티스 릴리스 정보에서 해당 버전의 쿠버네티스와 호환되는
-도커 버전을 찾을 수 있다.
+2. 특히 컨테이너의 cgroup 관리에 systemd를 사용하도록 도커 데몬을 구성한다.
 
-사용자의 시스템에서 다음의 명령을 이용해 도커를 설치한다.
+   ```shell
+   sudo mkdir /etc/docker
+   cat <<EOF | sudo tee /etc/docker/daemon.json
+   {
+     "exec-opts": ["native.cgroupdriver=systemd"],
+     "log-driver": "json-file",
+     "log-opts": {
+       "max-size": "100m"
+     },
+     "storage-driver": "overlay2"
+   }
+   EOF
+   ```
 
-{{< tabs name="tab-cri-docker-installation" >}}
-{{% tab name="Ubuntu 16.04+" %}}
+   {{< note >}}
+   `overlay2`는 리눅스 커널 4.0 이상 또는 3.10.0-514 버전 이상을 사용하는 RHEL 또는 CentOS를 구동하는 시스템에서 선호하는 스토리지 드라이버이다.
+   {{< /note >}}
 
-```shell
-# (도커 CE 설치)
-## 리포지터리 설정
-### apt가 HTTPS로 리포지터리를 사용하는 것을 허용하기 위한 패키지 설치
-sudo apt-get update && sudo apt-get install -y \
-  apt-transport-https ca-certificates curl software-properties-common gnupg2
-```
+3. 도커 재시작과 부팅시 실행되게 설정
 
-```shell
-# 도커 공식 GPG 키 추가:
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker.gpg add -
-```
+   ```shell
+   sudo systemctl enable docker
+   sudo systemctl daemon-reload
+   sudo systemctl restart docker
+   ```
 
-```shell
-# 도커 apt 리포지터리 추가:
-sudo add-apt-repository \
-  "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-  $(lsb_release -cs) \
-  stable"
-```
-
-```shell
-# 도커 CE 설치
-sudo apt-get update && sudo apt-get install -y \
-  containerd.io=1.2.13-2 \
-  docker-ce=5:19.03.11~3-0~ubuntu-$(lsb_release -cs) \
-  docker-ce-cli=5:19.03.11~3-0~ubuntu-$(lsb_release -cs)
-```
-
-```shell
-## /etc/docker 생성
-sudo mkdir /etc/docker
-```
-
-```shell
-# 도커 데몬 설정
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2"
-}
-EOF
-```
-
-```shell
-# /etc/systemd/system/docker.service.d 생성
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
-
-```shell
-# 도커 재시작
-sudo systemctl daemon-reload
-sudo systemctl restart docker
-```
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
-
-```shell
-# (도커 CE 설치)
-## 리포지터리 설정
-### 필요한 패키지 설치
-sudo yum install -y yum-utils device-mapper-persistent-data lvm2
-```
-
-```shell
-## 도커 리포지터리 추가
-sudo yum-config-manager --add-repo \
-  https://download.docker.com/linux/centos/docker-ce.repo
-```
-
-```shell
-# 도커 CE 설치
-sudo yum update -y && sudo yum install -y \
-  containerd.io-1.2.13 \
-  docker-ce-19.03.11 \
-  docker-ce-cli-19.03.11
-```
-
-```shell
-## /etc/docker 생성
-sudo mkdir /etc/docker
-```
-
-```shell
-# 도커 데몬 설정
-cat <<EOF | sudo tee /etc/docker/daemon.json
-{
-  "exec-opts": ["native.cgroupdriver=systemd"],
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m"
-  },
-  "storage-driver": "overlay2",
-  "storage-opts": [
-    "overlay2.override_kernel_check=true"
-  ]
-}
-EOF
-```
-
-```shell
-# /etc/systemd/system/docker.service.d 생성
-sudo mkdir -p /etc/systemd/system/docker.service.d
-```
-
-```shell
-# 도커 재시작
-sudo systemctl daemon-reload
-sudo systemctl restart docker
-```
-{{% /tab %}}
-{{< /tabs >}}
-
-부팅 시 `docker` 서비스를 시작하려면, 다음 명령을 실행한다.
-
-```shell
-sudo systemctl enable docker
-```
-
-자세한 내용은 [공식 도커 설치 가이드](https://docs.docker.com/engine/installation/)를
-참조한다.
+{{< note >}}
+더 자세한 내용은
+  - [도커 데몬 설정](https://docs.docker.com/config/daemon/)
+  - [systemd로 도커 제어](https://docs.docker.com/config/daemon/systemd/)
+{{< /note >}}
diff --git a/content/ko/docs/setup/production-environment/tools/kops.md b/content/ko/docs/setup/production-environment/tools/kops.md
index dbea03b735..76c4ec7b32 100644
--- a/content/ko/docs/setup/production-environment/tools/kops.md
+++ b/content/ko/docs/setup/production-environment/tools/kops.md
@@ -23,7 +23,7 @@ kops는 자동화된 프로비저닝 시스템인데,
 ## {{% heading "prerequisites" %}}
 
 
-* [kubectl](/ko/docs/tasks/tools/install-kubectl/)을 반드시 설치해야 한다.
+* [kubectl](/ko/docs/tasks/tools/)을 반드시 설치해야 한다.
 
 * 반드시 64-bit (AMD64 그리고 Intel 64)디바이스 아키텍쳐 위에서 `kops` 를 [설치](https://github.com/kubernetes/kops#installing) 한다.
 
diff --git a/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 39f31dd8af..12b48ad17e 100644
--- a/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -159,7 +159,7 @@ kubeadm은 `kubelet` 또는 `kubectl` 을 설치하거나 관리하지 **않으
 높을 수 없다. 예를 들어, 1.7.0 버전의 kubelet은 1.8.0 API 서버와 완전히 호환되어야 하지만,
 그 반대의 경우는 아니다.
 
-`kubectl` 설치에 대한 정보는 [kubectl 설치 및 설정](/ko/docs/tasks/tools/install-kubectl/)을 참고한다.
+`kubectl` 설치에 대한 정보는 [kubectl 설치 및 설정](/ko/docs/tasks/tools/)을 참고한다.
 
 {{< warning >}}
 이 지침은 모든 시스템 업그레이드에서 모든 쿠버네티스 패키지를 제외한다.
@@ -174,16 +174,34 @@ kubeadm은 `kubelet` 또는 `kubectl` 을 설치하거나 관리하지 **않으
 
 {{< tabs name="k8s_install" >}}
 {{% tab name="데비안 기반 배포판" %}}
-```bash
-sudo apt-get update && sudo apt-get install -y apt-transport-https curl
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-cat <<EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list
-deb https://apt.kubernetes.io/ kubernetes-xenial main
-EOF
-sudo apt-get update
-sudo apt-get install -y kubelet kubeadm kubectl
-sudo apt-mark hold kubelet kubeadm kubectl
-```
+
+1. `apt` 패키지 색인을 업데이트하고, 쿠버네티스 `apt` 리포지터리를 사용하는 데 필요한 패키지를 설치한다.
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y apt-transport-https ca-certificates curl
+   ```
+
+2. 구글 클라우드의 공개 사이닝 키를 다운로드 한다.
+
+   ```shell
+   sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   ```
+
+3. 쿠버네티스 `apt` 리포지터리를 추가한다.
+
+   ```shell
+   echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
+   ```
+
+4. `apt` 패키지 색인을 업데이트하고, kubelet, kubeadm, kubectl을 설치하고 해당 버전을 고정한다.
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y kubelet kubeadm kubectl
+   sudo apt-mark hold kubelet kubeadm kubectl
+   ```
+
 {{% /tab %}}
 {{% tab name="레드햇 기반 배포판" %}}
 ```bash
diff --git a/content/ko/docs/setup/production-environment/tools/kubespray.md b/content/ko/docs/setup/production-environment/tools/kubespray.md
index f068061a7d..cb0caf175e 100644
--- a/content/ko/docs/setup/production-environment/tools/kubespray.md
+++ b/content/ko/docs/setup/production-environment/tools/kubespray.md
@@ -22,7 +22,7 @@ Kubespray는 [Ansible](https://docs.ansible.com/) 플레이북, [인벤토리](h
     * Flatcar Container Linux by Kinvolk
 * 지속적인 통합 (CI) 테스트
 
-클러스터를 설치해 줄 도구로 유스케이스와 가장 잘 맞는 것을 고르고 싶다면, kubespray를 [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), [kops](/ko/docs/setup/production-environment/tools/kops/)와 [비교한 글](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)을 읽어보자.
+클러스터를 설치해 줄 도구로 유스케이스와 가장 잘 맞는 것을 고르고 싶다면, kubespray를 [kubeadm](/ko/docs/reference/setup-tools/kubeadm/), [kops](/ko/docs/setup/production-environment/tools/kops/)와 [비교한 글](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)을 읽어보자.
 
 <!-- body -->
 
diff --git a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index bd4a3503e8..b488e6c04d 100644
--- a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -218,7 +218,7 @@ CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템
 
 #### IPv4/IPv6 이중 스택
 
-`IPv6DualStack` [기능 게이트](https://kubernetes.io/ko/docs/reference/command-line-tools-reference/feature-gates/)를 사용하여 `l2bridge` 네트워크에 IPv4/IPv6 이중 스택 네트워킹을 활성화할 수 있다. 자세한 내용은 [IPv4/IPv6 이중 스택 활성화](/ko/docs/concepts/services-networking/dual-stack/#ipv4-ipv6-이중-스택-활성화)을 참조한다.
+`IPv6DualStack` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 사용하여 `l2bridge` 네트워크에 IPv4/IPv6 이중 스택 네트워킹을 활성화할 수 있다. 자세한 내용은 [IPv4/IPv6 이중 스택 활성화](/ko/docs/concepts/services-networking/dual-stack/#ipv4-ipv6-이중-스택-활성화)를 참조한다.
 
 {{< note >}}
 윈도우에서 쿠버네티스와 함께 IPv6를 사용하려면 윈도우 서버 버전 2004 (커널 버전 10.0.19041.610) 이상이 필요하다.
@@ -234,7 +234,7 @@ CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템
 
 윈도우는 쿠버네티스 아키텍처 및 컴포넌트 매트릭스에서 워커 노드로만 지원된다. 즉, 쿠버네티스 클러스터에는 항상 리눅스 마스터 노드가 반드시 포함되어야 하고, 0개 이상의 리눅스 워커 노드 및 0개 이상의 윈도우 워커 노드가 포함된다.
 
-#### 컴퓨트
+#### 컴퓨트 {#컴퓨트-제한}
 
 ##### 리소스 관리 및 프로세스 격리
 
@@ -294,7 +294,7 @@ CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템
 * NFS 기반 스토리지/볼륨 지원
 * 마운트된 볼륨 확장(resizefs)
 
-#### 네트워킹
+#### 네트워킹 {#네트워킹-제한}
 
 윈도우 컨테이너 네트워킹은 리눅스 네트워킹과 몇 가지 중요한 면에서 다르다. [윈도우 컨테이너 네트워킹에 대한 Microsoft 문서](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/container-networking/architecture)에는 추가 세부 정보와 배경이 포함되어 있다.
 
diff --git a/content/ko/docs/setup/release/notes.md b/content/ko/docs/setup/release/notes.md
index 7bcbb39489..8cb17b2ec0 100644
--- a/content/ko/docs/setup/release/notes.md
+++ b/content/ko/docs/setup/release/notes.md
@@ -1906,7 +1906,7 @@ filename | sha512 hash
 - Promote SupportNodePidsLimit to GA to provide node to pod pid isolation
   Promote SupportPodPidsLimit to GA to provide ability to limit pids per pod ([#94140](https://github.com/kubernetes/kubernetes/pull/94140), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node and Testing]
 - Rename pod_preemption_metrics to preemption_metrics. ([#93256](https://github.com/kubernetes/kubernetes/pull/93256), [@ahg-g](https://github.com/ahg-g)) [SIG Instrumentation and Scheduling]
-- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
+- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](/docs/reference/using-api/server-side-apply/#transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
 - Set CSIMigrationvSphere feature gates to beta.
   Users should enable CSIMigration + CSIMigrationvSphere features and install the vSphere CSI Driver (https://github.com/kubernetes-sigs/vsphere-csi-driver) to move workload from the in-tree vSphere plugin "kubernetes.io/vsphere-volume" to vSphere CSI Driver.
 
diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
index b2ea227718..2d44a51b0e 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
@@ -193,7 +193,7 @@ func main() {
 }
 ```
 
-애플리케이션이 클러스터에서 파드로 배치된 경우, [파드 내에서 API 접근](#accessing-the-api-from-within-a-pod)을 참고한다.
+애플리케이션이 클러스터 내의 파드로 배치된 경우, [파드 내에서 API 접근](/ko/docs/tasks/access-application-cluster/access-cluster/#파드에서-api-접근)을 참고한다.
 
 #### Python 클라이언트 {#python-client}
 
diff --git a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 272da1e329..487d89379e 100644
--- a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -168,36 +168,7 @@ controllerManager:
 
 ### 인증서 서명 요청(CSR) 생성
 
-`kubeadm certs renew --use-api` 로 쿠버네티스 인증서 API에 대한 인증서 서명 요청을 만들 수 있다.
-
-[cert-manager](https://github.com/jetstack/cert-manager)와 같은 외부 서명자를 설정하면, 인증서 서명 요청(CSR)이 자동으로 승인된다.
-그렇지 않으면, [`kubectl certificate`](/ko/docs/setup/best-practices/certificates/) 명령을 사용하여 인증서를 수동으로 승인해야 한다.
-다음의 kubeadm 명령은 승인할 인증서 이름을 출력한 다음, 승인이 발생하기를 차단하고 기다린다.
-
-```shell
-sudo kubeadm certs renew apiserver --use-api &
-```
-출력 결과는 다음과 비슷하다.
-```
-[1] 2890
-[certs] certificate request "kubeadm-cert-kube-apiserver-ld526" created
-```
-
-### 인증서 서명 요청(CSR) 승인
-
-외부 서명자를 설정하면, 인증서 서명 요청(CSR)이 자동으로 승인된다.
-
-그렇지 않으면, [`kubectl certificate`](/ko/docs/setup/best-practices/certificates/) 명령을 사용하여 인증서를 수동으로 승인해야 한다. 예를 들어 다음과 같다.
-
-```shell
-kubectl certificate approve kubeadm-cert-kube-apiserver-ld526
-```
-출력 결과는 다음과 비슷하다.
-```shell
-certificatesigningrequest.certificates.k8s.io/kubeadm-cert-kube-apiserver-ld526 approved
-```
-
-`kubectl get csr` 명령으로 보류 중인 인증서 목록을 볼 수 있다.
+쿠버네티스 API로 CSR을 작성하려면 [CertificateSigningRequest 생성](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest)을 본다.
 
 ## 외부 CA로 인증서 갱신
 
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md
index 26fa2830ff..f7dcbab677 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -16,7 +16,7 @@ weight: 10
 ## {{% heading "prerequisites" %}}
 
 
-[`kubectl`](/ko/docs/tasks/tools/install-kubectl/)를 설치한다.
+[`kubectl`](/ko/docs/tasks/tools/)를 설치한다.
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md
index 28655ed57b..8b4d5afe36 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md
@@ -12,7 +12,7 @@ weight: 30
 
 ## {{% heading "prerequisites" %}}
 
-[`kubectl`](/ko/docs/tasks/tools/install-kubectl/)을 설치한다.
+[`kubectl`](/ko/docs/tasks/tools/)을 설치한다.
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md
index 9e4f8de774..678814de3d 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md
@@ -13,7 +13,7 @@ weight: 40
 ## {{% heading "prerequisites" %}}
 
 
-[`kubectl`](/ko/docs/tasks/tools/install-kubectl/)을 설치한다.
+[`kubectl`](/ko/docs/tasks/tools/)을 설치한다.
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
index 16b2cd05f0..e420acbed9 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -29,7 +29,7 @@ kubectl apply -k <kustomization_directory>
 ## {{% heading "prerequisites" %}}
 
 
-[`kubectl`](/ko/docs/tasks/tools/install-kubectl/)을 설치한다.
+[`kubectl`](/ko/docs/tasks/tools/)을 설치한다.
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/ko/docs/tasks/tools/install-kubectl-linux.md b/content/ko/docs/tasks/tools/install-kubectl-linux.md
index 0e8a6ac6ee..96ab0a4024 100644
--- a/content/ko/docs/tasks/tools/install-kubectl-linux.md
+++ b/content/ko/docs/tasks/tools/install-kubectl-linux.md
@@ -20,10 +20,16 @@ card:
 
 다음과 같은 방법으로 리눅스에 kubectl을 설치할 수 있다.
 
-- [리눅스에서 curl을 사용하여 kubectl 바이너리 설치](#install-kubectl-binary-with-curl-on-linux)
-- [기본 패키지 관리 도구를 사용하여 설치](#install-using-native-package-management)
-- [다른 패키지 관리 도구를 사용하여 설치](#install-using-other-package-management)
-- [Google Cloud SDK를 사용하여 설치](#install-on-linux-as-part-of-the-google-cloud-sdk)
+- [{{% heading "prerequisites" %}}](#시작하기-전에)
+- [리눅스에 kubectl 설치](#리눅스에-kubectl-설치)
+  - [리눅스에서 curl을 사용하여 kubectl 바이너리 설치]{#install-kubectl-binary-with-curl-on-linux}
+  - [기본 패키지 관리 도구를 사용하여 설치]{#install-using-native-package-management}
+  - [다른 패키지 관리 도구를 사용하여 설치]{#install-using-other-package-management}
+  - [Google Cloud SDK를 사용하여 설치]{#install-on-linux-as-part-of-the-google-cloud-sdk}
+- [kubectl 구성 확인](#kubectl-구성-확인)
+- [선택적 kubectl 구성](#선택적-kubectl-구성)
+  - [셸 자동 완성 활성화](#셸-자동-완성-활성화)
+- [{{% heading "whatsnext" %}}](#다음-내용)
 
 ### 리눅스에서 curl을 사용하여 kubectl 바이너리 설치 {#install-kubectl-binary-with-curl-on-linux}
 
@@ -100,15 +106,38 @@ card:
 ### 기본 패키지 관리 도구를 사용하여 설치 {#install-using-native-package-management}
 
 {{< tabs name="kubectl_install" >}}
-{{< tab name="Ubuntu, Debian 또는 HypriotOS" codelang="bash" >}}
-sudo apt-get update && sudo apt-get install -y apt-transport-https gnupg2 curl
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
-sudo apt-get update
-sudo apt-get install -y kubectl
-{{< /tab >}}
+{{% tab name="데비안 기반의 배포판" %}}
 
-{{< tab name="CentOS, RHEL 또는 Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
+1. `apt` 패키지 색인을 업데이트하고 쿠버네티스 `apt` 리포지터리를 사용하는 데 필요한 패키지들을 설치한다.
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y apt-transport-https ca-certificates curl
+   ```
+
+2. 구글 클라우드 공개 사이닝 키를 다운로드한다.
+
+   ```shell
+   sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
+   ```
+
+3. 쿠버네티스 `apt` 리포지터리를 추가한다.
+
+   ```shell
+   echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
+   ```
+
+4. 새 리포지터리의 `apt` 패키지 색인을 업데이트하고 kubectl을 설치한다.
+
+   ```shell
+   sudo apt-get update
+   sudo apt-get install -y kubectl
+   ```
+
+{{% /tab %}}
+
+{{< tab name="레드햇 기반의 배포판" codelang="bash" >}}
+cat <<EOF > /etc/yum.repos.d/kubernetes.repo
 [kubernetes]
 name=Kubernetes
 baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
diff --git a/content/ko/docs/tasks/tools/install-kubectl-macos.md b/content/ko/docs/tasks/tools/install-kubectl-macos.md
index b0747f8a1c..1fd37151a6 100644
--- a/content/ko/docs/tasks/tools/install-kubectl-macos.md
+++ b/content/ko/docs/tasks/tools/install-kubectl-macos.md
@@ -23,7 +23,7 @@ card:
 - [macOS에서 curl을 사용하여 kubectl 바이너리 설치](#install-kubectl-binary-with-curl-on-macos)
 - [macOS에서 Homebrew를 사용하여 설치](#install-with-homebrew-on-macos)
 - [macOS에서 Macports를 사용하여 설치](#install-with-macports-on-macos)
-- [Google Cloud SDK를 사용하여 설치](#install-on-macos-as-part-of-the-google-cloud-sdk)
+- [macOS에서 Google Cloud SDK를 사용하여 설치](#install-on-macos-as-part-of-the-google-cloud-sdk)
 
 ### macOS에서 curl을 사용하여 kubectl 바이너리 설치 {#install-kubectl-binary-with-curl-on-macos}
 
@@ -157,4 +157,4 @@ kubectl은 Bash 및 Zsh에 대한 자동 완성 지원을 제공하므로 입력
 
 ## {{% heading "whatsnext" %}}
 
-{{< include "included/kubectl-whats-next.md" >}}
\ No newline at end of file
+{{< include "included/kubectl-whats-next.md" >}}

From e172a7e26405058fa1e5ac01645e6cf41c809020 Mon Sep 17 00:00:00 2001
From: jmyung <jesang.myung@gmail.com>
Date: Fri, 26 Mar 2021 00:41:53 +0900
Subject: [PATCH 430/788] translate Manage TLS Certificates in a Cluster in
 Korean

---
 .../tasks/tls/managing-tls-in-a-cluster.md    | 226 ++++++++++++++++++
 1 file changed, 226 insertions(+)
 create mode 100644 content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md

diff --git a/content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md b/content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md
new file mode 100644
index 0000000000..f814db9919
--- /dev/null
+++ b/content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md
@@ -0,0 +1,226 @@
+---
+title: 클러스터에서 TLS 인증서 관리
+content_type: task
+---
+
+<!-- overview -->
+
+쿠버네티스는 사용자가 제어하는 ​​인증 기관 (CA)에서 서명한 TLS 인증서를 
+프로비저닝 할 수 있는 `certificates.k8s.io` API를 제공한다.
+이러한 CA 및 인증서는 워크로드 간의 신뢰 관계를 구성하는 용도로 사용할 수 있다.
+
+`certificates.k8s.io` API는 [ACME 초안](https://github.com/ietf-wg-acme/acme/)과 
+유사한 프로토콜을 사용한다.
+
+{{< note >}}
+`certificates.k8s.io` API를 사용하여 생성된 인증서는 전용 CA로 서명된다. 
+이러한 목적을 위해 클러스터 루트 CA를 사용하도록 클러스터를 
+구성할 수 있지만, 절대 이에 의존해서는 안된다. 
+해당 인증서가 클러스터 루트 CA에 대해 유효성을 검사한다고 가정하면 안된다.
+{{< /note >}}
+
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+
+
+<!-- steps -->
+
+## 클러스터에서 TLS 신뢰
+
+파드로 실행되는 애플리케이션에서 사용자 정의 CA를 신뢰하려면 
+일반적으로 몇 가지 추가 애플리케이션 구성이 필요하다.
+TLS 클라이언트 또는 서버가 신뢰하는 CA 인증서 목록에 
+CA 인증서 번들을 추가해야 한다.
+예를 들어 인증서 체인을 파싱하고, 파싱된 인증서를 [`tls.Config`](https://godoc.org/crypto/tls#Config) 구조체의 
+`RootCAs` 필드에 추가하여, golang TLS 구성으로 이를 수행할 수 있다.
+
+CA 인증서를 파드에서 사용할 수 있는 
+[ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap)으로 
+배포할 수 있다.
+
+## 인증서 요청
+
+다음 섹션에서는 DNS를 통해 액세스되는 쿠버네티스 서비스의 
+TLS 인증서를 생성하는 방법을 보여준다.
+
+{{< note >}}
+이 튜토리얼에서는 CFSSL을 사용한다. [여기를 클릭](https://blog.cloudflare.com/introducing-cfssl/)하여 Cloudflare의 PKI 및 TLS 툴킷을 자세히 알아본다.
+{{< /note >}}
+
+## CFSSL 다운로드 및 설치
+
+이 예제에 사용된 cfssl 도구는 
+[https://github.com/cloudflare/cfssl/releases](https://github.com/cloudflare/cfssl/releases)에서 다운로드 할 수 있다.
+
+## 인증서 서명 요청 (CSR) 생성
+
+다음 명령을 실행하여 개인 키 및 인증서 서명 요청(또는 CSR)을 
+생성한다.
+
+```shell
+cat <<EOF | cfssl genkey - | cfssljson -bare server
+{
+  "hosts": [
+    "my-svc.my-namespace.svc.cluster.local",
+    "my-pod.my-namespace.pod.cluster.local",
+    "192.0.2.24",
+    "10.0.34.2"
+  ],
+  "CN": "system:node:my-pod.my-namespace.pod.cluster.local",
+  "key": {
+    "algo": "ecdsa",
+    "size": 256
+  },
+  "names": [
+    {
+      "O": "system:nodes"
+    }
+  ]
+}
+EOF
+```
+
+여기서 `192.0.2.24`는 서비스의 클러스터 IP, 
+`my-svc.my-namespace.svc.cluster.local`은 서비스의 DNS 이름, 
+`10.0.34.2`는 파드의 IP,`my-pod.my- namespace.pod.cluster.local`은 
+파드의 DNS 이름이다. 다음 출력이 표시되어야 한다.
+
+```
+2017/03/21 06:48:17 [INFO] generate received request
+2017/03/21 06:48:17 [INFO] received CSR
+2017/03/21 06:48:17 [INFO] generating key: ecdsa-256
+2017/03/21 06:48:17 [INFO] encoded CSR
+```
+
+이 명령은 두 개의 파일을 생성한다. PEM으로 
+인코딩된 [pkcs#10](https://tools.ietf.org/html/rfc2986) 
+인증 요청이 포함된 `server.csr`과 생성할 인증서 키를 PEM 인코딩한 값이
+포함된 `server-key.pem`을 생성한다.
+
+## 쿠버네티스 API로 보낼 인증서 서명 요청 객체 만들기
+
+CSR yaml blob을 생성하고 다음 명령을 실행하여 
+apiserver로 보낸다.
+
+```shell
+cat <<EOF | kubectl apply -f -
+apiVersion: certificates.k8s.io/v1
+kind: CertificateSigningRequest
+metadata:
+  name: my-svc.my-namespace
+spec:
+  request: $(cat server.csr | base64 | tr -d '\n')
+  signerName: kubernetes.io/kubelet-serving
+  usages:
+  - digital signature
+  - key encipherment
+  - server auth
+EOF
+```
+
+1단계에서 만든 `server.csr` 파일은 base64로 인코딩되고 
+`.spec.request` 필드에 숨겨져 있다.
+또한 `kubernetes.io/kubelet-serving` 서명자가 서명한 
+"digitalSignature", "keyEnciperment" 및 "serverAuth" 키 사용(keyUsage)이 있는 인증서를 요청한다.
+특정 `signerName`을 요청해야 한다.
+자세한 내용은 [지원되는 서명자 이름](/docs/reference/access-authn-authz/certificate-signing-requests/#signers) 
+문서를 참조한다.
+
+이제 CSR이 API에서 보류 상태로 표시되어야 한다. 다음을 실행하여 
+확인할 수 있다.
+
+```shell
+kubectl describe csr my-svc.my-namespace
+```
+
+```none
+Name:                   my-svc.my-namespace
+Labels:                 <none>
+Annotations:            <none>
+CreationTimestamp:      Tue, 21 Mar 2017 07:03:51 -0700
+Requesting User:        yourname@example.com
+Status:                 Pending
+Subject:
+        Common Name:    my-svc.my-namespace.svc.cluster.local
+        Serial Number:
+Subject Alternative Names:
+        DNS Names:      my-svc.my-namespace.svc.cluster.local
+        IP Addresses:   192.0.2.24
+                        10.0.34.2
+Events: <none>
+```
+
+## 인증서 서명 요청 승인 받기
+
+인증서 서명 요청을 승인하는 것은 자동화된 승인 프로세스나
+클러스터 관리자에 의해 일회성으로 수행한다. 여기에 
+관련된 내용에 대한 자세한 내용은 아래에서 설명한다.
+
+## 인증서 다운로드 및 사용
+
+CSR이 서명되고 승인되면 다음이 표시된다.
+
+```shell
+kubectl get csr
+```
+
+```none
+NAME                  AGE       REQUESTOR               CONDITION
+my-svc.my-namespace   10m       yourname@example.com    Approved,Issued
+```
+
+다음을 실행하여 발급된 인증서를 다운로드하고 `server.crt` 파일에 
+저장할 수 있다.
+
+```shell
+kubectl get csr my-svc.my-namespace -o jsonpath='{.status.certificate}' \
+    | base64 --decode > server.crt
+```
+
+이제 `server.crt` 및 `server-key.pem`을 키페어(keypair)로 사용하여 
+HTTPS 서버를 시작할 수 있다.
+
+## 인증서 서명 요청 승인
+
+(적절한 권한이 있는) 쿠버네티스 관리자는 
+`kubectl certificate approve` 과 `kubectl certificate deny` 
+명령을 사용하여 인증서 서명 요청을 수동으로 승인 (또는 거부) 할 수 있다. 
+그러나 이 API를 많이 사용한다면,
+자동화된 인증서 컨트롤러 작성을 고려할 수 있다.
+
+위와 같이 kubectl을 사용하는 시스템이든 사람이든, 승인자의 역할은 
+CSR이 다음 두 가지 요구 사항을 충족하는지 확인하는 것이다.
+
+1. CSR은 CSR에 서명하는 데 사용되는 개인 키를 제어하는 것이다. 이는 
+   승인된 대상으로 가장하는 제 3자의 위협을 해결한다. 위의 예에서 
+   이 단계는 파드(pod)가 CSR을 생성하는 데 
+   사용되는 개인 키를 제어하는지 확인하는 것이다.
+2. CSR은 요청된 상황에서 작동할 권한이 있다. 이것은 
+   원하지 않는 대상이 클러스터에 합류(join)하는 위협을 
+   해결한다. 위의 예에서, 이 단계는 
+   파드가 요청된 서비스에 참여할 수 있는지 확인하는 것이다.
+
+이 두 가지 요구 사항이 충족되는 경우에만, 승인자가 CSR을 승인하고 
+그렇지 않으면 CSR을 거부해야 한다.
+
+## 승인 허가에 대한 경고문
+
+CSR을 승인하는 능력은 환경 내에서 누구를 신뢰하는지 결정한다. CSR 승인
+능력은 광범위하거나 가볍게 부여해서는 안된다. 이 권한을 
+부여하기 전에 이전 섹션에서 언급한 
+요청의 요구 사항과 특정 인증서 발급의 영향을 
+완전히 이해해야 한다.
+
+## 클러스터 관리자를 위한 참고 사항
+
+이 가이드에서는 서명자가 인증서 API를 제공하도록 설정되었다고 가정한다. 쿠버네티스 
+컨트롤러 관리자는 서명자의 기본 구현을 제공한다. 이를 
+활성화하려면 인증 기관(CA)의 키 쌍에 대한 경로와 함께 `--cluster-signing-cert-file` 와 
+`--cluster-signing-key-file` 매개 변수를 
+컨트롤러 관리자에 전달한다.

From c8d20ea228f35d2e28c8f1e23529abe27a8a7dc8 Mon Sep 17 00:00:00 2001
From: Luo Lan <luolanzone@gmail.com>
Date: Thu, 1 Apr 2021 21:31:22 +0800
Subject: [PATCH 431/788] update antrea link based on review comment

---
 content/en/docs/concepts/cluster-administration/addons.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/cluster-administration/addons.md b/content/en/docs/concepts/cluster-administration/addons.md
index e194674d59..726a714151 100644
--- a/content/en/docs/concepts/cluster-administration/addons.md
+++ b/content/en/docs/concepts/cluster-administration/addons.md
@@ -16,7 +16,7 @@ This page lists some of the available add-ons and links to their respective inst
 ## Networking and Network Policy
 
 * [ACI](https://www.github.com/noironetworks/aci-containers) provides integrated container networking and network security with Cisco ACI.
-* [Antrea](https://github.com/vmware-tanzu/antrea) operates at Layer 3/4 to provide networking and security services for Kubernetes, leveraging Open vSwitch as the networking data plane.
+* [Antrea](https://antrea.io/) operates at Layer 3/4 to provide networking and security services for Kubernetes, leveraging Open vSwitch as the networking data plane.
 * [Calico](https://docs.projectcalico.org/latest/introduction/) is a networking and network policy provider. Calico supports a flexible set of networking options so you can choose the most efficient option for your situation, including non-overlay and overlay networks, with or without BGP. Calico uses the same engine to enforce network policy for hosts, pods, and (if using Istio & Envoy) applications at the service mesh layer.
 * [Canal](https://github.com/tigera/canal/tree/master/k8s-install) unites Flannel and Calico, providing networking and network policy.
 * [Cilium](https://github.com/cilium/cilium) is a L3 network and network policy plugin that can enforce HTTP/API/L7 policies transparently. Both routing and overlay/encapsulation mode are supported, and it can work on top of other CNI plugins.

From 79845b0c4aa0bba3752496c5e2a394b7929564ce Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 17 Feb 2021 16:50:15 +0800
Subject: [PATCH 432/788] Add kubelet config reference

This is a reference for kubelet config generated from
github.com/tengqm/genref tool using the following command:

./genref -include kubelet-config
---
 .../docs/concepts/configuration/configmap.md  |    3 +-
 .../manage-resources-containers.md            |    8 +-
 .../en/docs/concepts/configuration/secret.md  |   16 +-
 content/en/docs/reference/_index.md           |    8 +-
 .../kubelet-config.v1beta1.md                 | 1501 +++++++++++++++
 .../kubelet-tls-bootstrapping.md              |   54 +-
 .../config-api/kubelet-config.v1beta1.md      | 1604 +++++++++++++++++
 .../kubeadm/implementation-details.md         |   25 +-
 .../tools/kubeadm/install-kubeadm.md          |    8 +-
 .../tools/kubeadm/kubelet-integration.md      |   25 +-
 .../tools/kubeadm/troubleshooting-kubeadm.md  |   17 +-
 .../administer-cluster/kubelet-config-file.md |   22 +-
 .../administer-cluster/reconfigure-kubelet.md |   46 +-
 .../configure-pod-container/static-pod.md     |   28 +-
 14 files changed, 3248 insertions(+), 117 deletions(-)
 create mode 100644 content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md
 create mode 100644 content/en/docs/reference/config-api/kubelet-config.v1beta1.md

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index 74281e1ec1..b5f5bd8d28 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -224,7 +224,7 @@ When a ConfigMap currently consumed in a volume is updated, projected keys are e
 The kubelet checks whether the mounted ConfigMap is fresh on every periodic sync.
 However, the kubelet uses its local cache for getting the current value of the ConfigMap.
 The type of the cache is configurable using the `ConfigMapAndSecretChangeDetectionStrategy` field in
-the [KubeletConfiguration struct](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go).
+the [KubeletConfiguration struct](/docs/reference/config-api/kubelet-config.v1beta1/)).
 A ConfigMap can be either propagated by watch (default), ttl-based, or by redirecting
 all requests directly to the API server.
 As a result, the total delay from the moment when the ConfigMap is updated to the moment
@@ -233,6 +233,7 @@ propagation delay, where the cache propagation delay depends on the chosen cache
 (it equals to watch propagation delay, ttl of cache, or zero correspondingly).
 
 ConfigMaps consumed as environment variables are not updated automatically and require a pod restart. 
+
 ## Immutable ConfigMaps {#configmap-immutable}
 
 {{< feature-state for_k8s_version="v1.19" state="beta" >}}
diff --git a/content/en/docs/concepts/configuration/manage-resources-containers.md b/content/en/docs/concepts/configuration/manage-resources-containers.md
index fa683e97f3..48b6868bde 100644
--- a/content/en/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/en/docs/concepts/configuration/manage-resources-containers.md
@@ -21,9 +21,6 @@ allowed to use more of that resource than the limit you set. The kubelet also re
 at least the _request_ amount of that system resource specifically for that container
 to use.
 
-
-
-
 <!-- body -->
 
 ## Requests and limits
@@ -442,12 +439,15 @@ If you want to use project quotas, you should:
 
 * Enable the `LocalStorageCapacityIsolationFSQuotaMonitoring=true`
   [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
-  in the kubelet configuration.
+  using the `featureGates` field in the
+  [kubelet configuration](/docs/reference/config-api/kubelet-config.v1beta1/)
+  or the `--feature-gates` command line flag.
 
 * Ensure that the root filesystem (or optional runtime filesystem)
   has project quotas enabled. All XFS filesystems support project quotas.
   For ext4 filesystems, you need to enable the project quota tracking feature
   while the filesystem is not mounted.
+
   ```bash
   # For ext4, with /dev/block-device not mounted
   sudo tune2fs -O project -Q prjquota /dev/block-device
diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 7f47aeeaf5..d41c7eacf9 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -668,7 +668,7 @@ When a secret currently consumed in a volume is updated, projected keys are even
 The kubelet checks whether the mounted secret is fresh on every periodic sync.
 However, the kubelet uses its local cache for getting the current value of the Secret.
 The type of the cache is configurable using the `ConfigMapAndSecretChangeDetectionStrategy` field in
-the [KubeletConfiguration struct](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go).
+the [KubeletConfiguration struct](/docs/reference/config-api/kubelet-config.v1beta1/).
 A Secret can be either propagated by watch (default), ttl-based, or by redirecting
 all requests directly to the API server.
 As a result, the total delay from the moment when the Secret is updated to the moment
@@ -760,8 +760,8 @@ data has the following advantages:
 - improves performance of your cluster by significantly reducing load on kube-apiserver, by
 closing watches for secrets marked as immutable.
 
-This feature is controlled by the `ImmutableEphemeralVolumes` [feature
-gate](/docs/reference/command-line-tools-reference/feature-gates/),
+This feature is controlled by the `ImmutableEphemeralVolumes`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/),
 which is enabled by default since v1.19. You can create an immutable
 Secret by setting the `immutable` field to `true`. For example,
 ```yaml
@@ -865,6 +865,7 @@ start until all the Pod's volumes are mounted.
 ### Use-Case: As container environment variables
 
 Create a secret
+
 ```yaml
 apiVersion: v1
 kind: Secret
@@ -877,6 +878,7 @@ data:
 ```
 
 Create the Secret:
+
 ```shell
 kubectl apply -f mysecret.yaml
 ```
@@ -992,7 +994,7 @@ For example, if your actual password is `S!B\*d$zDsb=`, you should execute the c
 kubectl create secret generic dev-db-secret --from-literal=username=devuser --from-literal=password='S!B\*d$zDsb='
 ```
 
- You do not need to escape special characters in passwords from files (`--from-file`).
+You do not need to escape special characters in passwords from files (`--from-file`).
 {{< /note >}}
 
 Now make the Pods:
@@ -1173,14 +1175,12 @@ privileged, system-level components.
 
 Applications that need to access the Secret API should perform `get` requests on
 the secrets they need. This lets administrators restrict access to all secrets
-while [white-listing access to individual instances](
-/docs/reference/access-authn-authz/rbac/#referring-to-resources) that
+while [white-listing access to individual instances](/docs/reference/access-authn-authz/rbac/#referring-to-resources) that
 the app needs.
 
 For improved performance over a looping `get`, clients can design resources that
 reference a secret then `watch` the resource, re-requesting the secret when the
-reference changes. Additionally, a ["bulk watch" API](
-https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/bulk_watch.md)
+reference changes. Additionally, a ["bulk watch" API](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/bulk_watch.md)
 to let clients `watch` individual resources has also been proposed, and will likely
 be available in future releases of Kubernetes.
 
diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 00adcad7d7..c4792c079c 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -51,7 +51,9 @@ client libraries:
 
 ## Components
 
-* [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - The primary *node agent* that runs on each node. The kubelet takes a set of PodSpecs and ensures that the described containers are running and healthy.
+* [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - The
+  primary agent that runs on each node. The kubelet takes a set of PodSpecs
+  and ensures that the described containers are running and healthy.
 * [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) - REST API that validates and configures data for API objects such as  pods, services, replication controllers.
 * [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) - Daemon that embeds the core control loops shipped with Kubernetes.
 * [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - Can
@@ -66,6 +68,10 @@ client libraries:
 
 * [kube-proxy configuration (v1alpha1)](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
 
+## Config APIs
+
+* [kubelet config (v1beta1)](/docs/reference/config-api/kubelet-config.v1beta1/)
+
 ## Design Docs
 
 An archive of the design docs for Kubernetes functionality. Good starting points are
diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md b/content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md
new file mode 100644
index 0000000000..a5e28a1043
--- /dev/null
+++ b/content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md
@@ -0,0 +1,1501 @@
+
+
+
+
+
+---
+title: kubelet.config.k8s.io/v1beta1
+content_type: tool-reference
+---
+
+
+## Resource Types 
+
+
+  
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+- [SerializedNodeConfigSource](#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource)
+  
+  
+    
+
+
+### `KubeletConfiguration`     {#kubelet-config-k8s-io-v1beta1-KubeletConfiguration}
+    
+
+
+
+
+KubeletConfiguration contains the configuration for the Kubelet
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code></br>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code></br>string</td><td><code>KubeletConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td style="white-space: pre"><code>enableServer</code><span style="color:blue;">&ast;</span></br>
+<code>bool</code>
+</td>
+<td>enableServer enables Kubelet's secured server.
+Note: Kubelet's insecure port is controlled by the readOnlyPort option.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>staticPodPath</code></br>
+<code>string</code>
+</td>
+<td>staticPodPath is the path to the directory containing local (static) pods to
+run, or the path to a single static pod file.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new path may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>syncFrequency</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>syncFrequency is the max period between synchronizing running
+containers and config.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening this duration may have a negative performance impact, especially
+as the number of Pods on the node increases. Alternatively, increasing this
+duration will result in longer refresh times for ConfigMaps and Secrets.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>fileCheckFrequency</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>fileCheckFrequency is the duration between checking config files for
+new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to reload local Static Pod
+configurations more frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>httpCheckFrequency</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>httpCheckFrequency is the duration between checking http for new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to poll staticPodURL more
+frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>staticPodURL</code></br>
+<code>string</code>
+</td>
+<td>staticPodURL is the URL for accessing static pods to run
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new URL may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>staticPodURLHeader</code></br>
+<code>map[string][]string</code>
+</td>
+<td>staticPodURLHeader is a map of slices with HTTP headers to use when accessing the podURL
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt the ability to read the latest set of static pods from StaticPodURL.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>address</code></br>
+<code>string</code>
+</td>
+<td>address is the IP address for the Kubelet to serve on (set to 0.0.0.0
+for all interfaces).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "0.0.0.0"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>port</code></br>
+<code>int32</code>
+</td>
+<td>port is the port for the Kubelet to serve on.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 10250</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>readOnlyPort</code></br>
+<code>int32</code>
+</td>
+<td>readOnlyPort is the read-only port for the Kubelet to serve on with
+no authentication/authorization.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 0 (disabled)</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>tlsCertFile</code></br>
+<code>string</code>
+</td>
+<td>tlsCertFile is the file containing x509 Certificate for HTTPS. (CA cert,
+if any, concatenated after server cert). If tlsCertFile and
+tlsPrivateKeyFile are not provided, a self-signed certificate
+and key are generated for the public address and saved to the directory
+passed to the Kubelet's --cert-dir flag.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>tlsPrivateKeyFile</code></br>
+<code>string</code>
+</td>
+<td>tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>tlsCipherSuites</code></br>
+<code>[]string</code>
+</td>
+<td>TLSCipherSuites is the list of allowed cipher suites for the server.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>tlsMinVersion</code></br>
+<code>string</code>
+</td>
+<td>TLSMinVersion is the minimum TLS version supported.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>rotateCertificates</code></br>
+<code>bool</code>
+</td>
+<td>rotateCertificates enables client certificate rotation. The Kubelet will request a
+new certificate from the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt the Kubelet's ability to authenticate with the API server
+after the current certificate expires.
+Default: false</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>serverTLSBootstrap</code></br>
+<code>bool</code>
+</td>
+<td>serverTLSBootstrap enables server certificate bootstrap. Instead of self
+signing a serving certificate, the Kubelet will request a certificate from
+the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests. The RotateKubeletServerCertificate feature
+must be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will stop the renewal of Kubelet server certificates, which can
+disrupt components that interact with the Kubelet server in the long term,
+due to certificate expiration.
+Default: false</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>authentication</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthentication"><code>KubeletAuthentication</code></a>
+</td>
+<td>authentication specifies how requests to the Kubelet's server are authenticated
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  anonymous:
+    enabled: false
+  webhook:
+    enabled: true
+    cacheTTL: "2m"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>authorization</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorization"><code>KubeletAuthorization</code></a>
+</td>
+<td>authorization specifies how requests to the Kubelet's server are authorized
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  mode: Webhook
+  webhook:
+    cacheAuthorizedTTL: "5m"
+    cacheUnauthorizedTTL: "30s"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>registryPullQPS</code></br>
+<code>int32</code>
+</td>
+<td>registryPullQPS is the limit of registry pulls per second.
+Set to 0 for no limit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>registryBurst</code></br>
+<code>int32</code>
+</td>
+<td>registryBurst is the maximum size of bursty pulls, temporarily allows
+pulls to burst to this number, while still not exceeding registryPullQPS.
+Only used if registryPullQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>eventRecordQPS</code></br>
+<code>int32</code>
+</td>
+<td>eventRecordQPS is the maximum event creations per second. If 0, there
+is no limit enforced.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>eventBurst</code></br>
+<code>int32</code>
+</td>
+<td>eventBurst is the maximum size of a burst of event creations, temporarily
+allows event creations to burst to this number, while still not exceeding
+eventRecordQPS. Only used if eventRecordQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>enableDebuggingHandlers</code></br>
+<code>bool</code>
+</td>
+<td>enableDebuggingHandlers enables server endpoints for log access
+and local running of containers and commands, including the exec,
+attach, logs, and portforward features.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>enableContentionProfiling</code></br>
+<code>bool</code>
+</td>
+<td>enableContentionProfiling enables lock contention profiling, if enableDebuggingHandlers is true.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may carry a performance impact.
+Default: false</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>healthzPort</code></br>
+<code>int32</code>
+</td>
+<td>healthzPort is the port of the localhost healthz endpoint (set to 0 to disable)
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: 10248</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>healthzBindAddress</code></br>
+<code>string</code>
+</td>
+<td>healthzBindAddress is the IP address for the healthz server to serve on
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: "127.0.0.1"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>oomScoreAdj</code></br>
+<code>int32</code>
+</td>
+<td>oomScoreAdj is The oom-score-adj value for kubelet process. Values
+must be within the range [-1000, 1000].
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the stability of nodes under memory pressure.
+Default: -999</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>clusterDomain</code></br>
+<code>string</code>
+</td>
+<td>clusterDomain is the DNS domain for this cluster. If set, kubelet will
+configure all containers to search this domain in addition to the
+host's search domains.
+Dynamic Kubelet Config (beta): Dynamically updating this field is not recommended,
+as it should be kept in sync with the rest of the cluster.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>clusterDNS</code></br>
+<code>[]string</code>
+</td>
+<td>clusterDNS is a list of IP addresses for the cluster DNS server. If set,
+kubelet will configure all containers to use this for DNS resolution
+instead of the host's DNS servers.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>streamingConnectionIdleTimeout</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>streamingConnectionIdleTimeout is the maximum time a streaming connection
+can be idle before the connection is automatically closed.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact components that rely on infrequent updates over streaming
+connections to the Kubelet server.
+Default: "4h"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>nodeStatusUpdateFrequency</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>nodeStatusUpdateFrequency is the frequency that kubelet computes node
+status. If node lease feature is not enabled, it is also the frequency that
+kubelet posts node status to master.
+Note: When node lease feature is not enabled, be cautious when changing the
+constant, it must work with nodeMonitorGracePeriod in nodecontroller.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact node scalability, and also that the node controller's
+nodeMonitorGracePeriod must be set to N&lowast;NodeStatusUpdateFrequency,
+where N is the number of retries before the node controller marks
+the node unhealthy.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>nodeStatusReportFrequency</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>nodeStatusReportFrequency is the frequency that kubelet posts node
+status to master if node status does not change. Kubelet will ignore this
+frequency and post node status immediately if any change is detected. It is
+only used when node lease feature is enabled. nodeStatusReportFrequency's
+default value is 1m. But if nodeStatusUpdateFrequency is set explicitly,
+nodeStatusReportFrequency's default value will be set to
+nodeStatusUpdateFrequency for backward compatibility.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>nodeLeaseDurationSeconds</code></br>
+<code>int32</code>
+</td>
+<td>nodeLeaseDurationSeconds is the duration the Kubelet will set on its corresponding Lease,
+when the NodeLease feature is enabled. This feature provides an indicator of node
+health by having the Kubelet create and periodically renew a lease, named after the node,
+in the kube-node-lease namespace. If the lease expires, the node can be considered unhealthy.
+The lease is currently renewed every 10s, per KEP-0009. In the future, the lease renewal interval
+may be set based on the lease duration.
+Requires the NodeLease feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+decreasing the duration may reduce tolerance for issues that temporarily prevent
+the Kubelet from renewing the lease (e.g. a short-lived network issue).
+Default: 40</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>imageMinimumGCAge</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>imageMinimumGCAge is the minimum age for an unused image before it is
+garbage collected.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>imageGCHighThresholdPercent</code></br>
+<code>int32</code>
+</td>
+<td>imageGCHighThresholdPercent is the percent of disk usage after which
+image garbage collection is always run. The percent is calculated as
+this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 85</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>imageGCLowThresholdPercent</code></br>
+<code>int32</code>
+</td>
+<td>imageGCLowThresholdPercent is the percent of disk usage before which
+image garbage collection is never run. Lowest disk usage to garbage
+collect to. The percent is calculated as this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 80</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>volumeStatsAggPeriod</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>How frequently to calculate and cache volume disk usage for all pods
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>kubeletCgroups</code></br>
+<code>string</code>
+</td>
+<td>kubeletCgroups is the absolute name of cgroups to isolate the kubelet in
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>systemCgroups</code></br>
+<code>string</code>
+</td>
+<td>systemCgroups is absolute name of cgroups in which to place
+all non-kernel processes that are not already in a container. Empty
+for no container. Rolling back the flag requires a reboot.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cgroupRoot</code></br>
+<code>string</code>
+</td>
+<td>cgroupRoot is the root cgroup to use for pods. This is handled by the
+container runtime on a best effort basis.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cgroupsPerQOS</code></br>
+<code>bool</code>
+</td>
+<td>Enable QoS based Cgroup hierarchy: top level cgroups for QoS Classes
+And all Burstable and BestEffort pods are brought up under their
+specific top level QoS cgroup.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cgroupDriver</code></br>
+<code>string</code>
+</td>
+<td>driver that the kubelet uses to manipulate cgroups on the host (cgroupfs or systemd)
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "cgroupfs"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cpuManagerPolicy</code></br>
+<code>string</code>
+</td>
+<td>CPUManagerPolicy is the name of the policy to use.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cpuManagerReconcilePeriod</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>CPU Manager reconciliation period.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>topologyManagerPolicy</code></br>
+<code>string</code>
+</td>
+<td>TopologyManagerPolicy is the name of the policy to use.
+Policies other than "none" require the TopologyManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>topologyManagerScope</code></br>
+<code>string</code>
+</td>
+<td>TopologyManagerScope represents the scope of topology hint generation
+that topology manager requests and hint providers generate.
+"pod" scope requires the TopologyManager feature gate to be enabled.
+Default: "container"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>qosReserved</code></br>
+<code>map[string]string</code>
+</td>
+<td>qosReserved is a set of resource name to percentage pairs that specify
+the minimum percentage of a resource reserved for exclusive use by the
+guaranteed QoS tier.
+Currently supported resources: "memory"
+Requires the QOSReserved feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>runtimeRequestTimeout</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>runtimeRequestTimeout is the timeout for all runtime requests except long running
+requests - pull, logs, exec and attach.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>hairpinMode</code></br>
+<code>string</code>
+</td>
+<td>hairpinMode specifies how the Kubelet should configure the container
+bridge for hairpin packets.
+Setting this flag allows endpoints in a Service to loadbalance back to
+themselves if they should try to access their own Service. Values:
+  "promiscuous-bridge": make the container bridge promiscuous.
+  "hairpin-veth":       set the hairpin flag on container veth interfaces.
+  "none":               do nothing.
+Generally, one must set --hairpin-mode=hairpin-veth to achieve hairpin NAT,
+because promiscuous-bridge assumes the existence of a container bridge named cbr0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may require a node reboot, depending on the network plugin.
+Default: "promiscuous-bridge"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>maxPods</code></br>
+<code>int32</code>
+</td>
+<td>maxPods is the number of pods that can run on this Kubelet.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 110</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>podCIDR</code></br>
+<code>string</code>
+</td>
+<td>The CIDR to use for pod IP addresses, only used in standalone mode.
+In cluster mode, this is obtained from the master.
+Dynamic Kubelet Config (beta): This field should always be set to the empty default.
+It should only set for standalone Kubelets, which cannot use Dynamic Kubelet Config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>podPidsLimit</code></br>
+<code>int64</code>
+</td>
+<td>PodPidsLimit is the maximum number of pids in any pod.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may prevent container processes from forking after the change.
+Default: -1</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>resolvConf</code></br>
+<code>string</code>
+</td>
+<td>ResolverConfig is the resolver configuration file used as the basis
+for the container DNS resolution configuration.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: "/etc/resolv.conf"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>runOnce</code></br>
+<code>bool</code>
+</td>
+<td>RunOnce causes the Kubelet to check the API server once for pods,
+run those in addition to the pods specified by static pod files, and exit.
+Default: false</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cpuCFSQuota</code></br>
+<code>bool</code>
+</td>
+<td>cpuCFSQuota enables CPU CFS quota enforcement for containers that
+specify CPU limits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may reduce node stability.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cpuCFSQuotaPeriod</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>CPUCFSQuotaPeriod is the CPU CFS quota period value, cpu.cfs_period_us.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+limits set for containers will result in different cpu.cfs_quota settings. This
+will trigger container restarts on the node being reconfigured.
+Default: "100ms"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>nodeStatusMaxImages</code></br>
+<code>int32</code>
+</td>
+<td>nodeStatusMaxImages caps the number of images reported in Node.Status.Images.
+Note: If -1 is specified, no cap will be applied. If 0 is specified, no image is returned.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+different values can be reported on node status.
+Default: 50</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>maxOpenFiles</code></br>
+<code>int64</code>
+</td>
+<td>maxOpenFiles is Number of files that can be opened by Kubelet process.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with the node's filesystem.
+Default: 1000000</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>contentType</code></br>
+<code>string</code>
+</td>
+<td>contentType is contentType of requests sent to apiserver.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability for the Kubelet to communicate with the API server.
+If the Kubelet loses contact with the API server due to a change to this field,
+the change cannot be reverted via dynamic Kubelet config.
+Default: "application/vnd.kubernetes.protobuf"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>kubeAPIQPS</code></br>
+<code>int32</code>
+</td>
+<td>kubeAPIQPS is the QPS to use while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>kubeAPIBurst</code></br>
+<code>int32</code>
+</td>
+<td>kubeAPIBurst is the burst to allow while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>serializeImagePulls</code></br>
+<code>bool</code>
+</td>
+<td>serializeImagePulls when enabled, tells the Kubelet to pull images one
+at a time. We recommend &lowast;not&lowast; changing the default value on nodes that
+run docker daemon with version  < 1.9 or an Aufs storage backend.
+Issue #10959 has more details.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the performance of image pulls.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>evictionHard</code></br>
+<code>map[string]string</code>
+</td>
+<td>Map of signal names to quantities that defines hard eviction thresholds. For example: {"memory.available": "300Mi"}.
+To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default:
+  memory.available:  "100Mi"
+  nodefs.available:  "10%"
+  nodefs.inodesFree: "5%"
+  imagefs.available: "15%"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>evictionSoft</code></br>
+<code>map[string]string</code>
+</td>
+<td>Map of signal names to quantities that defines soft eviction thresholds.
+For example: {"memory.available": "300Mi"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions, and may change the allocatable reported
+by the node.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>evictionSoftGracePeriod</code></br>
+<code>map[string]string</code>
+</td>
+<td>Map of signal names to quantities that defines grace periods for each soft eviction signal.
+For example: {"memory.available": "30s"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>evictionPressureTransitionPeriod</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may decrease the stability of the node when the node is overcommitted.
+Default: "5m"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>evictionMaxPodGracePeriod</code></br>
+<code>int32</code>
+</td>
+<td>Maximum allowed grace period (in seconds) to use when terminating pods in
+response to a soft eviction threshold being met. This value effectively caps
+the Pod's TerminationGracePeriodSeconds value during soft evictions.
+Note: Due to issue #64530, the behavior has a bug where this value currently just
+overrides the grace period during soft eviction, which can increase the grace
+period from what is set on the Pod. This bug will be fixed in a future release.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it decreases the amount of time Pods will have to gracefully clean
+up before being killed during a soft eviction.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>evictionMinimumReclaim</code></br>
+<code>map[string]string</code>
+</td>
+<td>Map of signal names to quantities that defines minimum reclaims, which describe the minimum
+amount of a given resource the kubelet will reclaim when performing a pod eviction while
+that resource is under pressure. For example: {"imagefs.available": "2Gi"}
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may change how well eviction can manage resource pressure.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>podsPerCore</code></br>
+<code>int32</code>
+</td>
+<td>podsPerCore is the maximum number of pods per core. Cannot exceed MaxPods.
+If 0, this field is ignored.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>enableControllerAttachDetach</code></br>
+<code>bool</code>
+</td>
+<td>enableControllerAttachDetach enables the Attach/Detach controller to
+manage attachment/detachment of volumes scheduled to this node, and
+disables kubelet from executing any attach/detach operations
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changing which component is responsible for volume management on a live node
+may result in volumes refusing to detach if the node is not drained prior to
+the update, and if Pods are scheduled to the node before the
+volumes.kubernetes.io/controller-managed-attach-detach annotation is updated by the
+Kubelet. In general, it is safest to leave this value set the same as local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>protectKernelDefaults</code></br>
+<code>bool</code>
+</td>
+<td>protectKernelDefaults, if true, causes the Kubelet to error if kernel
+flags are not as it expects. Otherwise the Kubelet will attempt to modify
+kernel flags to match its expectation.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may cause the Kubelet to crash-loop if the Kernel is not configured as
+Kubelet expects.
+Default: false</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>makeIPTablesUtilChains</code></br>
+<code>bool</code>
+</td>
+<td>If true, Kubelet ensures a set of iptables rules are present on host.
+These rules will serve as utility rules for various components, e.g. KubeProxy.
+The rules will be created based on IPTablesMasqueradeBit and IPTablesDropBit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will prevent the Kubelet from healing locally misconfigured iptables rules.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>iptablesMasqueradeBit</code></br>
+<code>int32</code>
+</td>
+<td>iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Warning: Please match the value of the corresponding parameter in kube-proxy.
+TODO: clean up IPTablesMasqueradeBit in kube-proxy
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 14</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>iptablesDropBit</code></br>
+<code>int32</code>
+</td>
+<td>iptablesDropBit is the bit of the iptables fwmark space to mark for dropping packets.
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 15</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>featureGates</code></br>
+<code>map[string]bool</code>
+</td>
+<td>featureGates is a map of feature names to bools that enable or disable alpha/experimental
+features. This field modifies piecemeal the built-in default values from
+"k8s.io/kubernetes/pkg/features/kube_features.go".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider the
+documentation for the features you are enabling or disabling. While we
+encourage feature developers to make it possible to dynamically enable
+and disable features, some changes may require node reboots, and some
+features may require careful coordination to retroactively disable.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>failSwapOn</code></br>
+<code>bool</code>
+</td>
+<td>failSwapOn tells the Kubelet to fail to start if swap is enabled on the node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+setting it to true will cause the Kubelet to crash-loop if swap is enabled.
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>containerLogMaxSize</code></br>
+<code>string</code>
+</td>
+<td>A quantity defines the maximum size of the container log file before it is rotated.
+For example: "5Mi" or "256Ki".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger log rotation.
+Default: "10Mi"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>containerLogMaxFiles</code></br>
+<code>int32</code>
+</td>
+<td>Maximum number of container log files that can be present for a container.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may cause log files to be deleted.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>configMapAndSecretChangeDetectionStrategy</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy"><code>ResourceChangeDetectionStrategy</code></a>
+</td>
+<td>ConfigMapAndSecretChangeDetectionStrategy is a mode in which
+config map and secret managers are running.
+Default: "Watch"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>systemReserved</code></br>
+<code>map[string]string</code>
+</td>
+<td>systemReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G)
+pairs that describe resources reserved for non-kubernetes components.
+Currently only cpu and memory are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>kubeReserved</code></br>
+<code>map[string]string</code>
+</td>
+<td>A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
+that describe resources reserved for kubernetes system components.
+Currently cpu, memory and local storage for root file system are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>reservedSystemCPUs</code><span style="color:blue;">&ast;</span></br>
+<code>string</code>
+</td>
+<td>This ReservedSystemCPUs option specifies the cpu list reserved for the host level system threads and kubernetes related threads.
+This provide a "static" CPU list rather than the "dynamic" list by system-reserved and kube-reserved.
+This option overwrites CPUs provided by system-reserved and kube-reserved.</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>showHiddenMetricsForVersion</code></br>
+<code>string</code>
+</td>
+<td>The previous version for which you want to show hidden metrics.
+Only the previous minor version is meaningful, other values will not be allowed.
+The format is <major>.<minor>, e.g.: '1.16'.
+The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics,
+rather than being surprised when they are permanently removed in the release after that.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>systemReservedCgroup</code></br>
+<code>string</code>
+</td>
+<td>This flag helps kubelet identify absolute name of top level cgroup used to enforce `SystemReserved` compute resource reservation for OS system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>kubeReservedCgroup</code></br>
+<code>string</code>
+</td>
+<td>This flag helps kubelet identify absolute name of top level cgroup used to enforce `KubeReserved` compute resource reservation for Kubernetes node system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>enforceNodeAllocatable</code></br>
+<code>[]string</code>
+</td>
+<td>This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform.
+This flag accepts a list of options. Acceptable options are `none`, `pods`, `system-reserved` & `kube-reserved`.
+If `none` is specified, no other options may be specified.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+removing enforcements may reduce the stability of the node. Alternatively, adding
+enforcements may reduce the stability of components which were using more than
+the reserved amount of resources; for example, enforcing kube-reserved may cause
+Kubelets to OOM if it uses more than the reserved resources, and enforcing system-reserved
+may cause system daemons to OOM if they use more than the reserved resources.
+Default: ["pods"]</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>allowedUnsafeSysctls</code></br>
+<code>[]string</code>
+</td>
+<td>A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in &lowast;).
+Unsafe sysctl groups are kernel.shm&lowast;, kernel.msg&lowast;, kernel.sem, fs.mqueue.&lowast;, and net.&lowast;.
+These sysctls are namespaced but not allowed by default.  For example: "kernel.msg&lowast;,net.ipv4.route.min_pmtu"
+Default: []</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>volumePluginDir</code></br>
+<code>string</code>
+</td>
+<td>volumePluginDir is the full path of the directory in which to search
+for additional third party volume plugins.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that changing
+the volumePluginDir may disrupt workloads relying on third party volume plugins.
+Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>providerID</code></br>
+<code>string</code>
+</td>
+<td>providerID, if set, sets the unique id of the instance that an external provider (i.e. cloudprovider)
+can use to identify a specific node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with cloud providers.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>kernelMemcgNotification</code></br>
+<code>bool</code>
+</td>
+<td>kernelMemcgNotification, if set, the kubelet will integrate with the kernel memcg notification
+to determine if memory eviction thresholds are crossed rather than polling.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the way Kubelet interacts with the kernel.
+Default: false</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>logging</code><span style="color:blue;">&ast;</span></br>
+<a href="#LoggingConfiguration"><code>LoggingConfiguration</code></a>
+</td>
+<td>Logging specifies the options of logging.
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+Defaults:
+  Format: text</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>enableSystemLogHandler</code></br>
+<code>bool</code>
+</td>
+<td>enableSystemLogHandler enables system logs via web interface host:port/logs/
+Default: true</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>shutdownGracePeriod</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>ShutdownGracePeriod specifies the total duration that the node should delay the shutdown and total grace period for pod termination during a node shutdown.
+Default: "30s"</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>shutdownGracePeriodCriticalPods</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>ShutdownGracePeriodCriticalPods specifies the duration used to terminate critical pods during a node shutdown. This should be less than ShutdownGracePeriod.
+For example, if ShutdownGracePeriod=30s, and ShutdownGracePeriodCriticalPods=10s, during a node shutdown the first 20 seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating critical pods.
+Default: "10s"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `SerializedNodeConfigSource`     {#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource}
+    
+
+
+
+
+SerializedNodeConfigSource allows us to serialize v1.NodeConfigSource.
+This type is used internally by the Kubelet for tracking checkpointed dynamic configs.
+It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code></br>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code></br>string</td><td><code>SerializedNodeConfigSource</code></td></tr>
+    
+
+  
+  
+<tr><td style="white-space: pre"><code>source</code></br>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#nodeconfigsource-v1-core"><code>core/v1.NodeConfigSource</code></a>
+</td>
+<td>Source is the source that we are serializing</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `HairpinMode`     {#kubelet-config-k8s-io-v1beta1-HairpinMode}
+    
+(Alias of `string`)
+
+
+
+HairpinMode denotes how the kubelet should configure networking to handle
+hairpin packets.
+
+
+    
+
+
+### `KubeletAnonymousAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td style="white-space: pre"><code>enabled</code></br>
+<code>bool</code>
+</td>
+<td>enabled allows anonymous requests to the kubelet server.
+Requests that are not rejected by another authentication method are treated as anonymous requests.
+Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `KubeletAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td style="white-space: pre"><code>x509</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication"><code>KubeletX509Authentication</code></a>
+</td>
+<td>x509 contains settings related to x509 client certificate authentication</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>webhook</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication"><code>KubeletWebhookAuthentication</code></a>
+</td>
+<td>webhook contains settings related to webhook bearer token authentication</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>anonymous</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication"><code>KubeletAnonymousAuthentication</code></a>
+</td>
+<td>anonymous contains settings related to anonymous authentication</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `KubeletAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td style="white-space: pre"><code>mode</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode"><code>KubeletAuthorizationMode</code></a>
+</td>
+<td>mode is the authorization mode to apply to requests to the kubelet server.
+Valid values are AlwaysAllow and Webhook.
+Webhook mode uses the SubjectAccessReview API to determine authorization.</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>webhook</code></br>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization"><code>KubeletWebhookAuthorization</code></a>
+</td>
+<td>webhook contains settings related to Webhook authorization.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `KubeletAuthorizationMode`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+
+    
+
+
+### `KubeletWebhookAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td style="white-space: pre"><code>enabled</code></br>
+<code>bool</code>
+</td>
+<td>enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cacheTTL</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>cacheTTL enables caching of authentication results</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `KubeletWebhookAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td style="white-space: pre"><code>cacheAuthorizedTTL</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>cacheAuthorizedTTL is the duration to cache 'authorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>cacheUnauthorizedTTL</code></br>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `KubeletX509Authentication`     {#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td style="white-space: pre"><code>clientCAFile</code></br>
+<code>string</code>
+</td>
+<td>clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate
+signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName,
+and groups corresponding to the Organization in the client certificate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+### `ResourceChangeDetectionStrategy`     {#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+ResourceChangeDetectionStrategy denotes a mode in which internal
+managers (secret, configmap) are discovering object changes.
+
+
+    
+  
+  
+    
+
+### `LoggingConfiguration`     {#LoggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+LoggingConfiguration contains logging options
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+
+<table class="table table-striped">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td style="white-space: pre"><code>format</code><span style="color:blue;">&ast;</span></br>
+<code>string</code>
+</td>
+<td>Format Flag specifies the structure of log messages.
+default value of format is `text`</td>
+</tr>
+    
+  
+<tr><td style="white-space: pre"><code>sanitization</code><span style="color:blue;">&ast;</span></br>
+<code>bool</code>
+</td>
+<td>[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).
+Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`)</td>
+</tr>
+    
+  
+</tbody>
+</table>
diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md b/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md
index a441f8ce5b..1b1142913f 100644
--- a/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md
+++ b/content/en/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping.md
@@ -24,11 +24,10 @@ found [here](https://github.com/kubernetes/kubernetes/pull/20439).
 This document describes the process of node initialization, how to set up TLS client certificate bootstrapping for
 kubelets, and how it works.
 
-
-
 <!-- body -->
 
 ## Initialization Process
+
 When a worker node starts up, the kubelet does the following:
 
 1. Look for its `kubeconfig` file
@@ -54,6 +53,7 @@ The TLS Bootstrapping described in this document is intended to simplify, and pa
 a cluster.
 
 ### Bootstrap Initialization
+
 In the bootstrap initialization process, the following occurs:
 
 1. kubelet begins
@@ -77,6 +77,7 @@ In the bootstrap initialization process, the following occurs:
 The rest of this document describes the necessary steps to configure TLS Bootstrapping, and its limitations.
 
 ## Configuration
+
 To configure for TLS bootstrapping and optional automatic approval, you must configure options on the following components:
 
 * kube-apiserver
@@ -87,6 +88,7 @@ To configure for TLS bootstrapping and optional automatic approval, you must con
 In addition, you need your Kubernetes Certificate Authority (CA).
 
 ## Certificate Authority
+
 As without bootstrapping, you will need a Certificate Authority (CA) key and certificate. As without bootstrapping, these will be used
 to sign the kubelet certificate. As before, it is your responsibility to distribute them to master nodes.
 
@@ -96,6 +98,7 @@ We will refer to these as "Kubernetes CA certificate and key".
 All Kubernetes components that use these certificates - kubelet, kube-apiserver, kube-controller-manager - assume the key and certificate to be PEM-encoded.
 
 ## kube-apiserver configuration
+
 The kube-apiserver has several requirements to enable TLS bootstrapping:
 
 * Recognizing CA that signs the client certificate
@@ -103,6 +106,7 @@ The kube-apiserver has several requirements to enable TLS bootstrapping:
 * Authorize the bootstrapping kubelet to create a certificate signing request (CSR)
 
 ### Recognizing client certificates
+
 This is normal for all client certificate authentication.
 If not already set, add the `--client-ca-file=FILENAME` flag to the kube-apiserver command to enable
 client certificate authentication, referencing a certificate authority bundle
@@ -110,6 +114,7 @@ containing the signing certificate, for example
 `--client-ca-file=/var/lib/kubernetes/ca.pem`.
 
 ### Initial bootstrap authentication
+
 In order for the bootstrapping kubelet to connect to kube-apiserver and request a certificate, it must first authenticate to the server.
 You can use any [authenticator](/docs/reference/access-authn-authz/authentication/) that can authenticate the kubelet.
 
@@ -132,13 +137,13 @@ A kubelet authenticating using bootstrap tokens is authenticated as a user in th
 
 As this feature matures, you
 should ensure tokens are bound to a Role Based Access Control (RBAC) policy
-which limits requests (using the [bootstrap
-token](/docs/reference/access-authn-authz/bootstrap-tokens/)) strictly to client
+which limits requests (using the [bootstrap token](/docs/reference/access-authn-authz/bootstrap-tokens/)) strictly to client
 requests related to certificate provisioning. With RBAC in place, scoping the
 tokens to a group allows for great flexibility. For example, you could disable a
 particular bootstrap group's access when you are done provisioning the nodes.
 
 #### Bootstrap tokens
+
 Bootstrap tokens are described in detail [here](/docs/reference/access-authn-authz/bootstrap-tokens/). These are tokens that are stored as secrets in the Kubernetes cluster,
 and then issued to the individual kubelet. You can use a single token for an entire cluster, or issue one per worker node.
 
@@ -148,7 +153,7 @@ The process is two-fold:
 2. Issue the token to the kubelet
 
 From the kubelet's perspective, one token is like another and has no special meaning.
-From the kube-apiserver's perspective, however, the bootstrap token is special. Due to its `Type`, `namespace` and `name`, kube-apiserver recognizes it as a special token,
+From the kube-apiserver's perspective, however, the bootstrap token is special. Due to its `type`, `namespace` and `name`, kube-apiserver recognizes it as a special token,
 and grants anyone authenticating with that token special bootstrap rights, notably treating them as a member of the `system:bootstrappers` group. This fulfills a basic requirement
 for TLS bootstrapping.
 
@@ -156,17 +161,18 @@ The details for creating the secret are available [here](/docs/reference/access-
 
 If you want to use bootstrap tokens, you must enable it on kube-apiserver with the flag:
 
-```
+```console
 --enable-bootstrap-token-auth=true
 ```
 
 #### Token authentication file
+
 kube-apiserver has an ability to accept tokens as authentication.
 These tokens are arbitrary but should represent at least 128 bits of entropy derived
 from a secure random number generator (such as `/dev/urandom` on most modern Linux
 systems). There are multiple ways you can generate a token. For example:
 
-```
+```shell
 head -c 16 /dev/urandom | od -An -t x | tr -d ' '
 ```
 
@@ -175,7 +181,7 @@ will generate tokens that look like `02b50b05283e98dd0fd71db496ef01e8`.
 The token file should look like the following example, where the first three
 values can be anything and the quoted group name should be as depicted:
 
-```
+```console
 02b50b05283e98dd0fd71db496ef01e8,kubelet-bootstrap,10001,"system:bootstrappers"
 ```
 
@@ -185,11 +191,16 @@ systemd unit file perhaps) to enable the token file.  See docs
 further details.
 
 ### Authorize kubelet to create CSR
-Now that the bootstrapping node is _authenticated_ as part of the `system:bootstrappers` group, it needs to be _authorized_ to create a certificate signing request (CSR) as well as retrieve it when done. Fortunately, Kubernetes ships with a `ClusterRole` with precisely these (and only these) permissions, `system:node-bootstrapper`.
+
+Now that the bootstrapping node is _authenticated_ as part of the
+`system:bootstrappers` group, it needs to be _authorized_ to create a
+certificate signing request (CSR) as well as retrieve it when done.
+Fortunately, Kubernetes ships with a `ClusterRole` with precisely these (and
+only these) permissions, `system:node-bootstrapper`.
 
 To do this, you only need to create a `ClusterRoleBinding` that binds the `system:bootstrappers` group to the cluster role `system:node-bootstrapper`.
 
-```
+```yaml
 # enable bootstrapping nodes to create CSR
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -206,6 +217,7 @@ roleRef:
 ```
 
 ## kube-controller-manager configuration
+
 While the apiserver receives the requests for certificates from the kubelet and authenticates those requests,
 the controller-manager is responsible for issuing actual signed certificates.
 
@@ -221,6 +233,7 @@ In order for the controller-manager to sign certificates, it needs the following
 * enabling CSR signing
 
 ### Access to key and certificate
+
 As described earlier, you need to create a Kubernetes CA key and certificate, and distribute it to the master nodes.
 These will be used by the controller-manager to sign the kubelet certificates.
 
@@ -230,23 +243,24 @@ with the flag `--client-ca-file=FILENAME` (for example, `--client-ca-file=/var/l
 
 To provide the Kubernetes CA key and certificate to kube-controller-manager, use the following flags:
 
-```
+```shell
 --cluster-signing-cert-file="/etc/path/to/kubernetes/ca/ca.crt" --cluster-signing-key-file="/etc/path/to/kubernetes/ca/ca.key"
 ```
 
 for example:
 
-```
+```shell
 --cluster-signing-cert-file="/var/lib/kubernetes/ca.pem" --cluster-signing-key-file="/var/lib/kubernetes/ca-key.pem"
 ```
 
 The validity duration of signed certificates can be configured with flag:
 
-```
+```shell
 --cluster-signing-duration
 ```
 
 ### Approval
+
 In order to approve CSRs, you need to tell the controller-manager that it is acceptable to approve them. This is done by granting
 RBAC permissions to the correct group.
 
@@ -257,7 +271,7 @@ There are two distinct sets of permissions:
 
 To enable the kubelet to request and receive a new certificate, create a `ClusterRoleBinding` that binds the group in which the bootstrapping node is a member `system:bootstrappers` to the `ClusterRole` that grants it permission, `system:certificates.k8s.io:certificatesigningrequests:nodeclient`:
 
-```yml
+```yaml
 # Approve all CSRs for the group "system:bootstrappers"
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -276,7 +290,7 @@ roleRef:
 To enable the kubelet to renew its own client certificate, create a `ClusterRoleBinding` that binds the group in which the fully functioning node is a member `system:nodes` to the `ClusterRole` that
 grants it permission, `system:certificates.k8s.io:certificatesigningrequests:selfnodeclient`:
 
-```yml
+```yaml
 # Approve renewal CSRs for the group "system:nodes"
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -294,8 +308,8 @@ roleRef:
 
 The `csrapproving` controller that ships as part of
 [kube-controller-manager](/docs/admin/kube-controller-manager/) and is enabled
-by default. The controller uses the [`SubjectAccessReview`
-API](/docs/reference/access-authn-authz/authorization/#checking-api-access) to
+by default. The controller uses the
+[`SubjectAccessReview` API](/docs/reference/access-authn-authz/authorization/#checking-api-access) to
 determine if a given user is authorized to request a CSR, then approves based on
 the authorization outcome. To prevent conflicts with other approvers, the
 builtin approver doesn't explicitly deny CSRs. It only ignores unauthorized
@@ -304,6 +318,7 @@ collection.
 
 
 ## kubelet configuration
+
 Finally, with the master nodes properly set up and all of the necessary authentication and authorization in place, we can configure the kubelet.
 
 The kubelet requires the following configuration to bootstrap:
@@ -317,7 +332,7 @@ The bootstrap `kubeconfig` should be in a path available to the kubelet, for exa
 
 Its format is identical to a normal `kubeconfig` file. A sample file might look as follows:
 
-```yml
+```yaml
 apiVersion: v1
 kind: Config
 clusters:
@@ -371,6 +386,7 @@ specified by `--kubeconfig`. The certificate and key file will be placed in the
 directory specified by `--cert-dir`.
 
 ### Client and Serving Certificates
+
 All of the above relate to kubelet _client_ certificates, specifically, the certificates a kubelet
 uses to authenticate to kube-apiserver.
 
@@ -387,6 +403,7 @@ be used as serving certificates, or `server auth`.
 However, you _can_ enable its server certificate, at least partially, via certificate rotation.
 
 ### Certificate Rotation
+
 Kubernetes v1.8 and higher kubelet implements __beta__ features for enabling
 rotation of its client and/or serving certificates.  These can be enabled through
 the respective `RotateKubeletClientCertificate` and
@@ -429,6 +446,7 @@ A deployment-specific approval process for kubelet serving certificates should t
 {{< /note >}}
 
 ## Other authenticating components
+
 All of TLS bootstrapping described in this document relates to the kubelet. However,
 other components may need to communicate directly with kube-apiserver. Notable is kube-proxy, which
 is part of the Kubernetes control plane and runs on every node, but may also include other components such as monitoring or networking.
diff --git a/content/en/docs/reference/config-api/kubelet-config.v1beta1.md b/content/en/docs/reference/config-api/kubelet-config.v1beta1.md
new file mode 100644
index 0000000000..bee05b68db
--- /dev/null
+++ b/content/en/docs/reference/config-api/kubelet-config.v1beta1.md
@@ -0,0 +1,1604 @@
+---
+title: Kubelet Configuration (v1beta1)
+content_type: tool-reference
+package: kubelet.config.k8s.io/v1beta1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+- [SerializedNodeConfigSource](#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource)
+  
+    
+
+
+## `KubeletConfiguration`     {#kubelet-config-k8s-io-v1beta1-KubeletConfiguration}
+    
+
+
+
+
+KubeletConfiguration contains the configuration for the Kubelet
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>KubeletConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td><code>enableServer</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableServer enables Kubelet's secured server.
+Note: Kubelet's insecure port is controlled by the readOnlyPort option.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>staticPodPath</code><br/>
+<code>string</code>
+</td>
+<td>
+   staticPodPath is the path to the directory containing local (static) pods to
+run, or the path to a single static pod file.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new path may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>syncFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   syncFrequency is the max period between synchronizing running
+containers and config.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening this duration may have a negative performance impact, especially
+as the number of Pods on the node increases. Alternatively, increasing this
+duration will result in longer refresh times for ConfigMaps and Secrets.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>fileCheckFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   fileCheckFrequency is the duration between checking config files for
+new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to reload local Static Pod
+configurations more frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td><code>httpCheckFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   httpCheckFrequency is the duration between checking http for new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to poll staticPodURL more
+frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td><code>staticPodURL</code><br/>
+<code>string</code>
+</td>
+<td>
+   staticPodURL is the URL for accessing static pods to run
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new URL may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>staticPodURLHeader</code><br/>
+<code>map[string][]string</code>
+</td>
+<td>
+   staticPodURLHeader is a map of slices with HTTP headers to use when accessing the podURL
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt the ability to read the latest set of static pods from StaticPodURL.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>address</code><br/>
+<code>string</code>
+</td>
+<td>
+   address is the IP address for the Kubelet to serve on (set to 0.0.0.0
+for all interfaces).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "0.0.0.0"</td>
+</tr>
+    
+  
+<tr><td><code>port</code><br/>
+<code>int32</code>
+</td>
+<td>
+   port is the port for the Kubelet to serve on.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 10250</td>
+</tr>
+    
+  
+<tr><td><code>readOnlyPort</code><br/>
+<code>int32</code>
+</td>
+<td>
+   readOnlyPort is the read-only port for the Kubelet to serve on with
+no authentication/authorization.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 0 (disabled)</td>
+</tr>
+    
+  
+<tr><td><code>tlsCertFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   tlsCertFile is the file containing x509 Certificate for HTTPS. (CA cert,
+if any, concatenated after server cert). If tlsCertFile and
+tlsPrivateKeyFile are not provided, a self-signed certificate
+and key are generated for the public address and saved to the directory
+passed to the Kubelet's --cert-dir flag.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>tlsPrivateKeyFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>tlsCipherSuites</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   TLSCipherSuites is the list of allowed cipher suites for the server.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>tlsMinVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   TLSMinVersion is the minimum TLS version supported.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>rotateCertificates</code><br/>
+<code>bool</code>
+</td>
+<td>
+   rotateCertificates enables client certificate rotation. The Kubelet will request a
+new certificate from the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt the Kubelet's ability to authenticate with the API server
+after the current certificate expires.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>serverTLSBootstrap</code><br/>
+<code>bool</code>
+</td>
+<td>
+   serverTLSBootstrap enables server certificate bootstrap. Instead of self
+signing a serving certificate, the Kubelet will request a certificate from
+the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests. The RotateKubeletServerCertificate feature
+must be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will stop the renewal of Kubelet server certificates, which can
+disrupt components that interact with the Kubelet server in the long term,
+due to certificate expiration.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>authentication</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthentication"><code>KubeletAuthentication</code></a>
+</td>
+<td>
+   authentication specifies how requests to the Kubelet's server are authenticated
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  anonymous:
+    enabled: false
+  webhook:
+    enabled: true
+    cacheTTL: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>authorization</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorization"><code>KubeletAuthorization</code></a>
+</td>
+<td>
+   authorization specifies how requests to the Kubelet's server are authorized
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  mode: Webhook
+  webhook:
+    cacheAuthorizedTTL: "5m"
+    cacheUnauthorizedTTL: "30s"</td>
+</tr>
+    
+  
+<tr><td><code>registryPullQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   registryPullQPS is the limit of registry pulls per second.
+Set to 0 for no limit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>registryBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   registryBurst is the maximum size of bursty pulls, temporarily allows
+pulls to burst to this number, while still not exceeding registryPullQPS.
+Only used if registryPullQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>eventRecordQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   eventRecordQPS is the maximum event creations per second. If 0, there
+is no limit enforced.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>eventBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   eventBurst is the maximum size of a burst of event creations, temporarily
+allows event creations to burst to this number, while still not exceeding
+eventRecordQPS. Only used if eventRecordQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>enableDebuggingHandlers</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableDebuggingHandlers enables server endpoints for log access
+and local running of containers and commands, including the exec,
+attach, logs, and portforward features.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>enableContentionProfiling</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableContentionProfiling enables lock contention profiling, if enableDebuggingHandlers is true.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may carry a performance impact.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>healthzPort</code><br/>
+<code>int32</code>
+</td>
+<td>
+   healthzPort is the port of the localhost healthz endpoint (set to 0 to disable)
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: 10248</td>
+</tr>
+    
+  
+<tr><td><code>healthzBindAddress</code><br/>
+<code>string</code>
+</td>
+<td>
+   healthzBindAddress is the IP address for the healthz server to serve on
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: "127.0.0.1"</td>
+</tr>
+    
+  
+<tr><td><code>oomScoreAdj</code><br/>
+<code>int32</code>
+</td>
+<td>
+   oomScoreAdj is The oom-score-adj value for kubelet process. Values
+must be within the range [-1000, 1000].
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the stability of nodes under memory pressure.
+Default: -999</td>
+</tr>
+    
+  
+<tr><td><code>clusterDomain</code><br/>
+<code>string</code>
+</td>
+<td>
+   clusterDomain is the DNS domain for this cluster. If set, kubelet will
+configure all containers to search this domain in addition to the
+host's search domains.
+Dynamic Kubelet Config (beta): Dynamically updating this field is not recommended,
+as it should be kept in sync with the rest of the cluster.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>clusterDNS</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   clusterDNS is a list of IP addresses for the cluster DNS server. If set,
+kubelet will configure all containers to use this for DNS resolution
+instead of the host's DNS servers.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>streamingConnectionIdleTimeout</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   streamingConnectionIdleTimeout is the maximum time a streaming connection
+can be idle before the connection is automatically closed.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact components that rely on infrequent updates over streaming
+connections to the Kubelet server.
+Default: "4h"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusUpdateFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   nodeStatusUpdateFrequency is the frequency that kubelet computes node
+status. If node lease feature is not enabled, it is also the frequency that
+kubelet posts node status to master.
+Note: When node lease feature is not enabled, be cautious when changing the
+constant, it must work with nodeMonitorGracePeriod in nodecontroller.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact node scalability, and also that the node controller's
+nodeMonitorGracePeriod must be set to N&lowast;NodeStatusUpdateFrequency,
+where N is the number of retries before the node controller marks
+the node unhealthy.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusReportFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   nodeStatusReportFrequency is the frequency that kubelet posts node
+status to master if node status does not change. Kubelet will ignore this
+frequency and post node status immediately if any change is detected. It is
+only used when node lease feature is enabled. nodeStatusReportFrequency's
+default value is 1m. But if nodeStatusUpdateFrequency is set explicitly,
+nodeStatusReportFrequency's default value will be set to
+nodeStatusUpdateFrequency for backward compatibility.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>nodeLeaseDurationSeconds</code><br/>
+<code>int32</code>
+</td>
+<td>
+   nodeLeaseDurationSeconds is the duration the Kubelet will set on its corresponding Lease,
+when the NodeLease feature is enabled. This feature provides an indicator of node
+health by having the Kubelet create and periodically renew a lease, named after the node,
+in the kube-node-lease namespace. If the lease expires, the node can be considered unhealthy.
+The lease is currently renewed every 10s, per KEP-0009. In the future, the lease renewal interval
+may be set based on the lease duration.
+Requires the NodeLease feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+decreasing the duration may reduce tolerance for issues that temporarily prevent
+the Kubelet from renewing the lease (e.g. a short-lived network issue).
+Default: 40</td>
+</tr>
+    
+  
+<tr><td><code>imageMinimumGCAge</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   imageMinimumGCAge is the minimum age for an unused image before it is
+garbage collected.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>imageGCHighThresholdPercent</code><br/>
+<code>int32</code>
+</td>
+<td>
+   imageGCHighThresholdPercent is the percent of disk usage after which
+image garbage collection is always run. The percent is calculated as
+this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 85</td>
+</tr>
+    
+  
+<tr><td><code>imageGCLowThresholdPercent</code><br/>
+<code>int32</code>
+</td>
+<td>
+   imageGCLowThresholdPercent is the percent of disk usage before which
+image garbage collection is never run. Lowest disk usage to garbage
+collect to. The percent is calculated as this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 80</td>
+</tr>
+    
+  
+<tr><td><code>volumeStatsAggPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   How frequently to calculate and cache volume disk usage for all pods
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>kubeletCgroups</code><br/>
+<code>string</code>
+</td>
+<td>
+   kubeletCgroups is the absolute name of cgroups to isolate the kubelet in
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>systemCgroups</code><br/>
+<code>string</code>
+</td>
+<td>
+   systemCgroups is absolute name of cgroups in which to place
+all non-kernel processes that are not already in a container. Empty
+for no container. Rolling back the flag requires a reboot.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>cgroupRoot</code><br/>
+<code>string</code>
+</td>
+<td>
+   cgroupRoot is the root cgroup to use for pods. This is handled by the
+container runtime on a best effort basis.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>cgroupsPerQOS</code><br/>
+<code>bool</code>
+</td>
+<td>
+   Enable QoS based Cgroup hierarchy: top level cgroups for QoS Classes
+And all Burstable and BestEffort pods are brought up under their
+specific top level QoS cgroup.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>cgroupDriver</code><br/>
+<code>string</code>
+</td>
+<td>
+   driver that the kubelet uses to manipulate cgroups on the host (cgroupfs or systemd)
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "cgroupfs"</td>
+</tr>
+    
+  
+<tr><td><code>cpuManagerPolicy</code><br/>
+<code>string</code>
+</td>
+<td>
+   CPUManagerPolicy is the name of the policy to use.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td><code>cpuManagerReconcilePeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   CPU Manager reconciliation period.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td><code>topologyManagerPolicy</code><br/>
+<code>string</code>
+</td>
+<td>
+   TopologyManagerPolicy is the name of the policy to use.
+Policies other than "none" require the TopologyManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td><code>topologyManagerScope</code><br/>
+<code>string</code>
+</td>
+<td>
+   TopologyManagerScope represents the scope of topology hint generation
+that topology manager requests and hint providers generate.
+"pod" scope requires the TopologyManager feature gate to be enabled.
+Default: "container"</td>
+</tr>
+    
+  
+<tr><td><code>qosReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   qosReserved is a set of resource name to percentage pairs that specify
+the minimum percentage of a resource reserved for exclusive use by the
+guaranteed QoS tier.
+Currently supported resources: "memory"
+Requires the QOSReserved feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>runtimeRequestTimeout</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   runtimeRequestTimeout is the timeout for all runtime requests except long running
+requests - pull, logs, exec and attach.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>hairpinMode</code><br/>
+<code>string</code>
+</td>
+<td>
+   hairpinMode specifies how the Kubelet should configure the container
+bridge for hairpin packets.
+Setting this flag allows endpoints in a Service to loadbalance back to
+themselves if they should try to access their own Service. Values:
+  "promiscuous-bridge": make the container bridge promiscuous.
+  "hairpin-veth":       set the hairpin flag on container veth interfaces.
+  "none":               do nothing.
+Generally, one must set --hairpin-mode=hairpin-veth to achieve hairpin NAT,
+because promiscuous-bridge assumes the existence of a container bridge named cbr0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may require a node reboot, depending on the network plugin.
+Default: "promiscuous-bridge"</td>
+</tr>
+    
+  
+<tr><td><code>maxPods</code><br/>
+<code>int32</code>
+</td>
+<td>
+   maxPods is the number of pods that can run on this Kubelet.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 110</td>
+</tr>
+    
+  
+<tr><td><code>podCIDR</code><br/>
+<code>string</code>
+</td>
+<td>
+   The CIDR to use for pod IP addresses, only used in standalone mode.
+In cluster mode, this is obtained from the master.
+Dynamic Kubelet Config (beta): This field should always be set to the empty default.
+It should only set for standalone Kubelets, which cannot use Dynamic Kubelet Config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>podPidsLimit</code><br/>
+<code>int64</code>
+</td>
+<td>
+   PodPidsLimit is the maximum number of pids in any pod.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may prevent container processes from forking after the change.
+Default: -1</td>
+</tr>
+    
+  
+<tr><td><code>resolvConf</code><br/>
+<code>string</code>
+</td>
+<td>
+   ResolverConfig is the resolver configuration file used as the basis
+for the container DNS resolution configuration.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: "/etc/resolv.conf"</td>
+</tr>
+    
+  
+<tr><td><code>runOnce</code><br/>
+<code>bool</code>
+</td>
+<td>
+   RunOnce causes the Kubelet to check the API server once for pods,
+run those in addition to the pods specified by static pod files, and exit.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>cpuCFSQuota</code><br/>
+<code>bool</code>
+</td>
+<td>
+   cpuCFSQuota enables CPU CFS quota enforcement for containers that
+specify CPU limits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may reduce node stability.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>cpuCFSQuotaPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   CPUCFSQuotaPeriod is the CPU CFS quota period value, cpu.cfs_period_us.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+limits set for containers will result in different cpu.cfs_quota settings. This
+will trigger container restarts on the node being reconfigured.
+Default: "100ms"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusMaxImages</code><br/>
+<code>int32</code>
+</td>
+<td>
+   nodeStatusMaxImages caps the number of images reported in Node.Status.Images.
+Note: If -1 is specified, no cap will be applied. If 0 is specified, no image is returned.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+different values can be reported on node status.
+Default: 50</td>
+</tr>
+    
+  
+<tr><td><code>maxOpenFiles</code><br/>
+<code>int64</code>
+</td>
+<td>
+   maxOpenFiles is Number of files that can be opened by Kubelet process.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with the node's filesystem.
+Default: 1000000</td>
+</tr>
+    
+  
+<tr><td><code>contentType</code><br/>
+<code>string</code>
+</td>
+<td>
+   contentType is contentType of requests sent to apiserver.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability for the Kubelet to communicate with the API server.
+If the Kubelet loses contact with the API server due to a change to this field,
+the change cannot be reverted via dynamic Kubelet config.
+Default: "application/vnd.kubernetes.protobuf"</td>
+</tr>
+    
+  
+<tr><td><code>kubeAPIQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   kubeAPIQPS is the QPS to use while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>kubeAPIBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   kubeAPIBurst is the burst to allow while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>serializeImagePulls</code><br/>
+<code>bool</code>
+</td>
+<td>
+   serializeImagePulls when enabled, tells the Kubelet to pull images one
+at a time. We recommend &lowast;not&lowast; changing the default value on nodes that
+run docker daemon with version  < 1.9 or an Aufs storage backend.
+Issue #10959 has more details.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the performance of image pulls.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>evictionHard</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines hard eviction thresholds. For example: {"memory.available": "300Mi"}.
+To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default:
+  memory.available:  "100Mi"
+  nodefs.available:  "10%"
+  nodefs.inodesFree: "5%"
+  imagefs.available: "15%"</td>
+</tr>
+    
+  
+<tr><td><code>evictionSoft</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines soft eviction thresholds.
+For example: {"memory.available": "300Mi"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions, and may change the allocatable reported
+by the node.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>evictionSoftGracePeriod</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines grace periods for each soft eviction signal.
+For example: {"memory.available": "30s"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>evictionPressureTransitionPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may decrease the stability of the node when the node is overcommitted.
+Default: "5m"</td>
+</tr>
+    
+  
+<tr><td><code>evictionMaxPodGracePeriod</code><br/>
+<code>int32</code>
+</td>
+<td>
+   Maximum allowed grace period (in seconds) to use when terminating pods in
+response to a soft eviction threshold being met. This value effectively caps
+the Pod's TerminationGracePeriodSeconds value during soft evictions.
+Note: Due to issue #64530, the behavior has a bug where this value currently just
+overrides the grace period during soft eviction, which can increase the grace
+period from what is set on the Pod. This bug will be fixed in a future release.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it decreases the amount of time Pods will have to gracefully clean
+up before being killed during a soft eviction.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td><code>evictionMinimumReclaim</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines minimum reclaims, which describe the minimum
+amount of a given resource the kubelet will reclaim when performing a pod eviction while
+that resource is under pressure. For example: {"imagefs.available": "2Gi"}
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may change how well eviction can manage resource pressure.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>podsPerCore</code><br/>
+<code>int32</code>
+</td>
+<td>
+   podsPerCore is the maximum number of pods per core. Cannot exceed MaxPods.
+If 0, this field is ignored.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td><code>enableControllerAttachDetach</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableControllerAttachDetach enables the Attach/Detach controller to
+manage attachment/detachment of volumes scheduled to this node, and
+disables kubelet from executing any attach/detach operations
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changing which component is responsible for volume management on a live node
+may result in volumes refusing to detach if the node is not drained prior to
+the update, and if Pods are scheduled to the node before the
+volumes.kubernetes.io/controller-managed-attach-detach annotation is updated by the
+Kubelet. In general, it is safest to leave this value set the same as local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>protectKernelDefaults</code><br/>
+<code>bool</code>
+</td>
+<td>
+   protectKernelDefaults, if true, causes the Kubelet to error if kernel
+flags are not as it expects. Otherwise the Kubelet will attempt to modify
+kernel flags to match its expectation.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may cause the Kubelet to crash-loop if the Kernel is not configured as
+Kubelet expects.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>makeIPTablesUtilChains</code><br/>
+<code>bool</code>
+</td>
+<td>
+   If true, Kubelet ensures a set of iptables rules are present on host.
+These rules will serve as utility rules for various components, e.g. KubeProxy.
+The rules will be created based on IPTablesMasqueradeBit and IPTablesDropBit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will prevent the Kubelet from healing locally misconfigured iptables rules.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>iptablesMasqueradeBit</code><br/>
+<code>int32</code>
+</td>
+<td>
+   iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Warning: Please match the value of the corresponding parameter in kube-proxy.
+TODO: clean up IPTablesMasqueradeBit in kube-proxy
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 14</td>
+</tr>
+    
+  
+<tr><td><code>iptablesDropBit</code><br/>
+<code>int32</code>
+</td>
+<td>
+   iptablesDropBit is the bit of the iptables fwmark space to mark for dropping packets.
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 15</td>
+</tr>
+    
+  
+<tr><td><code>featureGates</code><br/>
+<code>map[string]bool</code>
+</td>
+<td>
+   featureGates is a map of feature names to bools that enable or disable alpha/experimental
+features. This field modifies piecemeal the built-in default values from
+"k8s.io/kubernetes/pkg/features/kube_features.go".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider the
+documentation for the features you are enabling or disabling. While we
+encourage feature developers to make it possible to dynamically enable
+and disable features, some changes may require node reboots, and some
+features may require careful coordination to retroactively disable.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>failSwapOn</code><br/>
+<code>bool</code>
+</td>
+<td>
+   failSwapOn tells the Kubelet to fail to start if swap is enabled on the node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+setting it to true will cause the Kubelet to crash-loop if swap is enabled.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>containerLogMaxSize</code><br/>
+<code>string</code>
+</td>
+<td>
+   A quantity defines the maximum size of the container log file before it is rotated.
+For example: "5Mi" or "256Ki".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger log rotation.
+Default: "10Mi"</td>
+</tr>
+    
+  
+<tr><td><code>containerLogMaxFiles</code><br/>
+<code>int32</code>
+</td>
+<td>
+   Maximum number of container log files that can be present for a container.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may cause log files to be deleted.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>configMapAndSecretChangeDetectionStrategy</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy"><code>ResourceChangeDetectionStrategy</code></a>
+</td>
+<td>
+   ConfigMapAndSecretChangeDetectionStrategy is a mode in which
+config map and secret managers are running.
+Default: "Watch"</td>
+</tr>
+    
+  
+<tr><td><code>systemReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   systemReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G)
+pairs that describe resources reserved for non-kubernetes components.
+Currently only cpu and memory are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>kubeReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
+that describe resources reserved for kubernetes system components.
+Currently cpu, memory and local storage for root file system are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>reservedSystemCPUs</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   This ReservedSystemCPUs option specifies the cpu list reserved for the host level system threads and kubernetes related threads.
+This provide a "static" CPU list rather than the "dynamic" list by system-reserved and kube-reserved.
+This option overwrites CPUs provided by system-reserved and kube-reserved.</td>
+</tr>
+    
+  
+<tr><td><code>showHiddenMetricsForVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   The previous version for which you want to show hidden metrics.
+Only the previous minor version is meaningful, other values will not be allowed.
+The format is <major>.<minor>, e.g.: '1.16'.
+The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics,
+rather than being surprised when they are permanently removed in the release after that.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>systemReservedCgroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   This flag helps kubelet identify absolute name of top level cgroup used to enforce `SystemReserved` compute resource reservation for OS system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>kubeReservedCgroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   This flag helps kubelet identify absolute name of top level cgroup used to enforce `KubeReserved` compute resource reservation for Kubernetes node system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>enforceNodeAllocatable</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform.
+This flag accepts a list of options. Acceptable options are `none`, `pods`, `system-reserved` & `kube-reserved`.
+If `none` is specified, no other options may be specified.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+removing enforcements may reduce the stability of the node. Alternatively, adding
+enforcements may reduce the stability of components which were using more than
+the reserved amount of resources; for example, enforcing kube-reserved may cause
+Kubelets to OOM if it uses more than the reserved resources, and enforcing system-reserved
+may cause system daemons to OOM if they use more than the reserved resources.
+Default: ["pods"]</td>
+</tr>
+    
+  
+<tr><td><code>allowedUnsafeSysctls</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in &lowast;).
+Unsafe sysctl groups are kernel.shm&lowast;, kernel.msg&lowast;, kernel.sem, fs.mqueue.&lowast;, and net.&lowast;.
+These sysctls are namespaced but not allowed by default.  For example: "kernel.msg&lowast;,net.ipv4.route.min_pmtu"
+Default: []</td>
+</tr>
+    
+  
+<tr><td><code>volumePluginDir</code><br/>
+<code>string</code>
+</td>
+<td>
+   volumePluginDir is the full path of the directory in which to search
+for additional third party volume plugins.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that changing
+the volumePluginDir may disrupt workloads relying on third party volume plugins.
+Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"</td>
+</tr>
+    
+  
+<tr><td><code>providerID</code><br/>
+<code>string</code>
+</td>
+<td>
+   providerID, if set, sets the unique id of the instance that an external provider (i.e. cloudprovider)
+can use to identify a specific node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with cloud providers.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>kernelMemcgNotification</code><br/>
+<code>bool</code>
+</td>
+<td>
+   kernelMemcgNotification, if set, the kubelet will integrate with the kernel memcg notification
+to determine if memory eviction thresholds are crossed rather than polling.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the way Kubelet interacts with the kernel.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>logging</code> <B>[Required]</B><br/>
+<a href="#LoggingConfiguration"><code>LoggingConfiguration</code></a>
+</td>
+<td>
+   Logging specifies the options of logging.
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+Defaults:
+  Format: text</td>
+</tr>
+    
+  
+<tr><td><code>enableSystemLogHandler</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableSystemLogHandler enables system logs via web interface host:port/logs/
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>shutdownGracePeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   ShutdownGracePeriod specifies the total duration that the node should delay the shutdown and total grace period for pod termination during a node shutdown.
+Default: "30s"</td>
+</tr>
+    
+  
+<tr><td><code>shutdownGracePeriodCriticalPods</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   ShutdownGracePeriodCriticalPods specifies the duration used to terminate critical pods during a node shutdown. This should be less than ShutdownGracePeriod.
+For example, if ShutdownGracePeriod=30s, and ShutdownGracePeriodCriticalPods=10s, during a node shutdown the first 20 seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating critical pods.
+Default: "10s"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `SerializedNodeConfigSource`     {#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource}
+    
+
+
+
+
+SerializedNodeConfigSource allows us to serialize v1.NodeConfigSource.
+This type is used internally by the Kubelet for tracking checkpointed dynamic configs.
+It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>SerializedNodeConfigSource</code></td></tr>
+    
+
+  
+  
+<tr><td><code>source</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#nodeconfigsource-v1-core"><code>core/v1.NodeConfigSource</code></a>
+</td>
+<td>
+   Source is the source that we are serializing</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `HairpinMode`     {#kubelet-config-k8s-io-v1beta1-HairpinMode}
+    
+(Alias of `string`)
+
+
+
+HairpinMode denotes how the kubelet should configure networking to handle
+hairpin packets.
+
+
+    
+
+
+## `KubeletAnonymousAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enabled allows anonymous requests to the kubelet server.
+Requests that are not rejected by another authentication method are treated as anonymous requests.
+Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>x509</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication"><code>KubeletX509Authentication</code></a>
+</td>
+<td>
+   x509 contains settings related to x509 client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>webhook</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication"><code>KubeletWebhookAuthentication</code></a>
+</td>
+<td>
+   webhook contains settings related to webhook bearer token authentication</td>
+</tr>
+    
+  
+<tr><td><code>anonymous</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication"><code>KubeletAnonymousAuthentication</code></a>
+</td>
+<td>
+   anonymous contains settings related to anonymous authentication</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>mode</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode"><code>KubeletAuthorizationMode</code></a>
+</td>
+<td>
+   mode is the authorization mode to apply to requests to the kubelet server.
+Valid values are AlwaysAllow and Webhook.
+Webhook mode uses the SubjectAccessReview API to determine authorization.</td>
+</tr>
+    
+  
+<tr><td><code>webhook</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization"><code>KubeletWebhookAuthorization</code></a>
+</td>
+<td>
+   webhook contains settings related to Webhook authorization.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthorizationMode`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+
+    
+
+
+## `KubeletWebhookAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API</td>
+</tr>
+    
+  
+<tr><td><code>cacheTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheTTL enables caching of authentication results</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletWebhookAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>cacheAuthorizedTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheAuthorizedTTL is the duration to cache 'authorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+<tr><td><code>cacheUnauthorizedTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletX509Authentication`     {#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>clientCAFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate
+signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName,
+and groups corresponding to the Organization in the client certificate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ResourceChangeDetectionStrategy`     {#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+ResourceChangeDetectionStrategy denotes a mode in which internal
+managers (secret, configmap) are discovering object changes.
+
+
+    
+  
+  
+    
+
+## `LoggingConfiguration`     {#LoggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+LoggingConfiguration contains logging options
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>format</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Format Flag specifies the structure of log messages.
+default value of format is `text`</td>
+</tr>
+    
+  
+<tr><td><code>sanitization</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   [Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).
+Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`)</td>
+</tr>
+    
+  
+</tbody>
+</table>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
index 5a321ec670..7159fc765d 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/implementation-details.md
@@ -251,7 +251,7 @@ Other API server flags that are set unconditionally are:
     - `--requestheader-client-ca-file` to`front-proxy-ca.crt`
     - `--proxy-client-cert-file` to `front-proxy-client.crt`
     - `--proxy-client-key-file` to `front-proxy-client.key`
- - Other flags for securing the front proxy ([API Aggregation](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md)) communications:
+ - Other flags for securing the front proxy ([API Aggregation](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)) communications:
     - `--requestheader-username-headers=X-Remote-User`
     - `--requestheader-group-headers=X-Remote-Group`
     - `--requestheader-extra-headers-prefix=X-Remote-Extra-`
@@ -305,7 +305,7 @@ into `/var/lib/kubelet/config/init/kubelet` file.
 
 The init configuration is used for starting the kubelet on this specific node, providing an alternative for the kubelet drop-in file;
 such configuration will be replaced by the kubelet base configuration as described in following steps.
-See [set Kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file) for additional info.
+See [set kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file) for additional information.
 
 Please note that:
 
@@ -315,6 +315,9 @@ Please note that:
    a configuration file `--config some-file.yaml`. The `KubeletConfiguration` object can be separated from other objects such
    as `InitConfiguration` using the `---` separator. For more details have a look at the `kubeadm config print-default` command.
 
+For more details about the `KubeletConfiguration` struct, take a look at the
+[`KubeletConfiguration` reference](/docs/reference/config-api/kubelet-config.v1beta1/).
+
 ### Wait for the control plane to come up
 
 kubeadm waits (upto 4m0s) until `localhost:6443/healthz` (kube-apiserver liveness) returns `ok`. However in order to detect
@@ -325,7 +328,8 @@ kubeadm relies on the kubelet to pull the control plane images and run them prop
 After the control plane is up, kubeadm completes the tasks described in following paragraphs.
 
 ### (optional) Write base kubelet configuration
-{{< feature-state for_k8s_version="v1.9" state="alpha" >}}
+
+{{< feature-state for_k8s_version="v1.11" state="beta" >}}
 
 If kubeadm is invoked with `--feature-gates=DynamicKubeletConfig`:
 
@@ -438,8 +442,8 @@ A ServiceAccount for `kube-proxy` is created in the `kube-system` namespace; the
 
 - In Kubernetes version 1.18 kube-dns usage with kubeadm is deprecated and will be removed in a future release
 - The CoreDNS service is named `kube-dns`. This is done to prevent any interruption
-in service when the user is switching the cluster DNS from kube-dns to CoreDNS or vice-versa
-the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
+  in service when the user is switching the cluster DNS from kube-dns to CoreDNS or vice-versa
+  the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
 - A ServiceAccount for CoreDNS/kube-dns is created in the `kube-system` namespace.
 - The `kube-dns` ServiceAccount is bound to the privileges in the `system:kube-dns` ClusterRole
 
@@ -499,10 +503,9 @@ when the connection with the cluster is established, kubeadm try to access the `
 
 ## TLS Bootstrap
 
-Once the cluster info are known, the file `bootstrap-kubelet.conf` is written, thus allowing kubelet to do TLS Bootstrapping
-(conversely until v.1.7 TLS bootstrapping were managed by kubeadm).
+Once the cluster info are known, the file `bootstrap-kubelet.conf` is written, thus allowing kubelet to do TLS Bootstrapping.
 
-The TLS bootstrap mechanism uses the shared token to temporarily authenticate with the Kubernetes Master to submit a certificate
+The TLS bootstrap mechanism uses the shared token to temporarily authenticate with the Kubernetes API server to submit a certificate
 signing request (CSR) for a locally created key pair.
 
 The request is then automatically approved and the operation completes saving `ca.crt` file and `kubelet.conf` file to be used
@@ -512,17 +515,17 @@ Please note that:
 
 - The temporary authentication is validated against the token saved during the `kubeadm init` process (or with additional tokens
   created with `kubeadm token`)
-- The temporary authentication resolve to a user member of  `system:bootstrappers:kubeadm:default-node-token` group which was granted
+- The temporary authentication resolve to a user member of `system:bootstrappers:kubeadm:default-node-token` group which was granted
   access to CSR api during the `kubeadm init` process
 - The automatic CSR approval is managed by the csrapprover controller, according with configuration done the `kubeadm init` process
 
 ### (optional) Write init kubelet configuration
 
-{{< feature-state for_k8s_version="v1.9" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.11" state="beta" >}}
 
 If kubeadm is invoked with `--feature-gates=DynamicKubeletConfig`:
 
-1. Read the kubelet base configuration from the `kubelet-base-config-v1.9` ConfigMap in the `kube-system` namespace  using the
+1. Read the kubelet base configuration from the `kubelet-base-config-v1.x` ConfigMap in the `kube-system` namespace  using the
    Bootstrap Token credentials, and write it to disk as kubelet init configuration file  `/var/lib/kubelet/config/init/kubelet`
 2. As soon as kubelet starts with the Node's own credential (`/etc/kubernetes/kubelet.conf`), update current node configuration
    specifying that the source for the node/kubelet configuration is the above ConfigMap.
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 4f9d9c6ce7..ea144e1dae 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -71,7 +71,7 @@ For more details please see the [Network Plugin Requirements](/docs/concepts/ext
 
 | Protocol | Direction | Port Range | Purpose                 | Used By                   |
 |----------|-----------|------------|-------------------------|---------------------------|
-| TCP      | Inbound   | 6443*      | Kubernetes API server   | All                       |
+| TCP      | Inbound   | 6443\*      | Kubernetes API server   | All                       |
 | TCP      | Inbound   | 2379-2380  | etcd server client API  | kube-apiserver, etcd      |
 | TCP      | Inbound   | 10250      | kubelet API             | Self, Control plane       |
 | TCP      | Inbound   | 10251      | kube-scheduler          | Self                      |
@@ -308,7 +308,8 @@ kind: KubeletConfiguration
 cgroupDriver: <value>
 ```
 
-For further details, please read [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
+For further details, please read [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)
+and the [`KubeletConfiguration` reference](/docs/reference/config-api/kubelet-config.v1beta1/)
 
 Please mind, that you **only** have to do that if the cgroup driver of your CRI
 is not `cgroupfs`, because that is the default value in the kubelet already.
@@ -322,12 +323,11 @@ or `/etc/default/kubelet`(`/etc/sysconfig/kubelet` for RPMs), please remove it a
 The automatic detection of cgroup driver for other container runtimes
 like CRI-O and containerd is work in progress.
 
-
 ## Troubleshooting
 
 If you are running into difficulties with kubeadm, please consult our [troubleshooting docs](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/).
 
 ## {{% heading "whatsnext" %}}
 
-
 * [Using kubeadm to Create a Cluster](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)
+
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md b/content/en/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
index f68b026ccb..dda9aba77a 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
@@ -23,10 +23,8 @@ manager instead, but you need to configure it manually.
 Some kubelet configuration details need to be the same across all kubelets involved in the cluster, while
 other configuration aspects need to be set on a per-kubelet basis to accommodate the different
 characteristics of a given machine (such as OS, storage, and networking). You can manage the configuration
-of your kubelets manually, but kubeadm now provides a `KubeletConfiguration` API type for [managing your
-kubelet configurations centrally](#configure-kubelets-using-kubeadm).
-
-
+of your kubelets manually, but kubeadm now provides a `KubeletConfiguration` API type for
+[managing your kubelet configurations centrally](#configure-kubelets-using-kubeadm).
 
 <!-- body -->
 
@@ -52,8 +50,9 @@ Virtual IPs for services are now allocated from this subnet. You also need to se
 by the kubelet, using the `--cluster-dns` flag. This setting needs to be the same for every kubelet
 on every manager and Node in the cluster. The kubelet provides a versioned, structured API object
 that can configure most parameters in the kubelet and push out this configuration to each running
-kubelet in the cluster. This object is called **the kubelet's ComponentConfig**.
-The ComponentConfig allows the user to specify flags such as the cluster DNS IP addresses expressed as
+kubelet in the cluster. This object is called
+[`KubeletConfiguration`](/docs/reference/config-api/kubelet-config.v1beta1/). 
+The `KubeletConfiguration` allows the user to specify flags such as the cluster DNS IP addresses expressed as
 a list of values to a camelCased key, illustrated by the following example:
 
 ```yaml
@@ -63,7 +62,7 @@ clusterDNS:
 - 10.96.0.10
 ```
 
-For more details on the ComponentConfig have a look at [this section](#configure-kubelets-using-kubeadm).
+For more details on the `KubeletConfiguration` have a look at [this section](#configure-kubelets-using-kubeadm).
 
 ### Providing instance-specific configuration details
 
@@ -99,8 +98,8 @@ API object is passed with a configuration file like so `kubeadm ... --config som
 By calling `kubeadm config print init-defaults --component-configs KubeletConfiguration` you can
 see all the default values for this structure.
 
-Also have a look at the [API reference for the
-kubelet ComponentConfig](https://godoc.org/k8s.io/kubernetes/pkg/kubelet/apis/config#KubeletConfiguration)
+Also have a look at the
+[reference for the KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/)
 for more information on the individual fields.
 
 ### Workflow when using `kubeadm init`
@@ -160,9 +159,13 @@ has finished performing the TLS Bootstrap.
 `kubeadm` ships with configuration for how systemd should run the kubelet.
 Note that the kubeadm CLI command never touches this drop-in file.
 
-This configuration file installed by the `kubeadm` [DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf) or [RPM package](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubeadm/10-kubeadm.conf) is written to
+This configuration file installed by the `kubeadm`
+[DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf) or
+[RPM package](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubeadm/10-kubeadm.conf) is written to
 `/etc/systemd/system/kubelet.service.d/10-kubeadm.conf` and is used by systemd.
-It augments the basic [`kubelet.service` for RPM](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubelet/kubelet.service) or [`kubelet.service` for DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service):
+It augments the basic
+[`kubelet.service` for RPM](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubelet/kubelet.service) or
+[`kubelet.service` for DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service):
 
 ```none
 [Service]
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
index 28ef3d3038..58f4f4652a 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
@@ -99,10 +99,11 @@ This may be caused by a number of problems. The most common are:
 
   There are two common ways to fix the cgroup driver problem:
 
- 1. Install Docker again following instructions
-  [here](/docs/setup/production-environment/container-runtimes/#docker).
+  1. Install Docker again following instructions
+     [here](/docs/setup/production-environment/container-runtimes/#docker).
 
- 1. Change the kubelet config to match the Docker cgroup driver manually, you can refer to [Configure cgroup driver used by kubelet on control-plane node](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)
+  1. Change the kubelet config to match the Docker cgroup driver manually, you can refer to
+     [Configure cgroup driver used by kubelet on control-plane node](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)
 
 - control plane Docker containers are crashlooping or hanging. You can check this by running `docker ps` and investigating each container by running `docker logs`.
 
@@ -110,8 +111,11 @@ This may be caused by a number of problems. The most common are:
 
 The following could happen if Docker halts and does not remove any Kubernetes-managed containers:
 
-```bash
+```shell
 sudo kubeadm reset
+```
+
+```console
 [preflight] Running pre-flight checks
 [reset] Stopping the kubelet service
 [reset] Unmounting mounted directories in "/var/lib/kubelet"
@@ -121,14 +125,14 @@ sudo kubeadm reset
 
 A possible solution is to restart the Docker service and then re-run `kubeadm reset`:
 
-```bash
+```shell
 sudo systemctl restart docker.service
 sudo kubeadm reset
 ```
 
 Inspecting the logs for docker may also be useful:
 
-```sh
+```shell
 journalctl -u docker
 ```
 
@@ -415,3 +419,4 @@ If `/var/lib/kubelet` is being mounted, performing a `kubeadm reset` will effect
 To workaround the issue, re-mount the `/var/lib/kubelet` directory after performing the `kubeadm reset` operation.
 
 This is a regression introduced in kubeadm 1.15. The issue is fixed in 1.20.
+
diff --git a/content/en/docs/tasks/administer-cluster/kubelet-config-file.md b/content/en/docs/tasks/administer-cluster/kubelet-config-file.md
index 252e140097..b49c84220a 100644
--- a/content/en/docs/tasks/administer-cluster/kubelet-config-file.md
+++ b/content/en/docs/tasks/administer-cluster/kubelet-config-file.md
@@ -7,31 +7,21 @@ content_type: task
 ---
 
 <!-- overview -->
-{{< feature-state for_k8s_version="v1.10" state="beta" >}}
 
 A subset of the Kubelet's configuration parameters may be
 set via an on-disk config file, as a substitute for command-line flags.
-This functionality is considered beta in v1.10.
 
 Providing parameters via a config file is the recommended approach because
 it simplifies node deployment and configuration management.
 
-
-
-## {{% heading "prerequisites" %}}
-
-
-- A v1.10 or higher Kubelet binary must be installed for beta functionality.
-
-
-
 <!-- steps -->
 
 ## Create the config file
 
 The subset of the Kubelet's configuration that can be configured via a file
-is defined by the `KubeletConfiguration` struct
-[here (v1beta1)](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go).
+is defined by the
+[`KubeletConfiguration`](/docs/reference/config-api/kubelet-config.v1beta1/)
+struct.
 
 The configuration file must be a JSON or YAML representation of the parameters
 in this struct. Make sure the Kubelet has read permissions on the file.
@@ -73,8 +63,6 @@ If `--config` is provided and the values are not specified via the command line,
 defaults for the `KubeletConfiguration` version apply.
 In the above example, this version is `kubelet.config.k8s.io/v1beta1`.
 
-
-
 <!-- discussion -->
 
 ## Relationship to Dynamic Kubelet Config
@@ -83,5 +71,9 @@ If you are using the [Dynamic Kubelet Configuration](/docs/tasks/administer-clus
 feature, the combination of configuration provided via `--config` and any flags which override these values
 is considered the default "last known good" configuration by the automatic rollback mechanism.
 
+## {{% heading "whatsnext" %}}
 
+- Learn more about kubelet configuration by checking the
+  [`KubeletConfiguration`](/docs/reference/config-api/kubelet-config.v1beta1/)
+  reference.
 
diff --git a/content/en/docs/tasks/administer-cluster/reconfigure-kubelet.md b/content/en/docs/tasks/administer-cluster/reconfigure-kubelet.md
index 4f71db554a..4ec3b428d0 100644
--- a/content/en/docs/tasks/administer-cluster/reconfigure-kubelet.md
+++ b/content/en/docs/tasks/administer-cluster/reconfigure-kubelet.md
@@ -22,8 +22,8 @@ but this is unsafe for some parameters. Before deciding to change a parameter
 dynamically, you need a strong understanding of how that change will affect your
 cluster's behavior. Always carefully test configuration changes on a small set
 of nodes before rolling them out cluster-wide. Advice on configuring specific
-fields is available in the inline `KubeletConfiguration`
-[type documentation (for v1.20)](https://github.com/kubernetes/kubernetes/blob/release-1.20/staging/src/k8s.io/kubelet/config/v1beta1/types.go).
+fields is available in the inline
+[`KubeletConfiguration`](/docs/reference/config-api/kubelet-config.v1beta1/).
 {{< /warning >}}
 
 
@@ -55,7 +55,7 @@ For each node that you're reconfiguring, you must set the kubelet
 The basic workflow for configuring a kubelet in a live cluster is as follows:
 
 1. Write a YAML or JSON configuration file containing the
-kubelet's configuration.
+   kubelet's configuration.
 2. Wrap this file in a ConfigMap and save it to the Kubernetes control plane.
 3. Update the kubelet's corresponding Node object to use this ConfigMap.
 
@@ -135,24 +135,24 @@ To follow the tasks as written, you need to have `jq` installed. You can
 adapt the steps if you prefer to extract the `kubeletconfig` subobject manually.
 {{< /note >}}
 
-1.  Choose a Node to reconfigure. In this example, the name of this Node is
-    referred to as `NODE_NAME`.
-2.  Start the kubectl proxy in the background using the following command:
+1. Choose a Node to reconfigure. In this example, the name of this Node is
+   referred to as `NODE_NAME`.
+2. Start the kubectl proxy in the background using the following command:
 
-      ```bash
-      kubectl proxy --port=8001 &
-      ```
-3.  Run the following command to download and unpack the configuration from the
-    `configz` endpoint. The command is long, so be careful when copying and
-    pasting. **If you use zsh**, note that common zsh configurations add backslashes
-    to escape the opening and closing curly braces around the variable name in the URL.
-    For example: `${NODE_NAME}` will be rewritten as `$\{NODE_NAME\}` during the paste.
-    You must remove the backslashes before running the command, or the command will fail.
+   ```shell
+   kubectl proxy --port=8001 &
+   ```
+3. Run the following command to download and unpack the configuration from the
+   `configz` endpoint. The command is long, so be careful when copying and
+   pasting. **If you use zsh**, note that common zsh configurations add backslashes
+   to escape the opening and closing curly braces around the variable name in the URL.
+   For example: `${NODE_NAME}` will be rewritten as `$\{NODE_NAME\}` during the paste.
+   You must remove the backslashes before running the command, or the command will fail.
 
 
-      ```bash
-      NODE_NAME="the-name-of-the-node-you-are-reconfiguring"; curl -sSL "http://localhost:8001/api/v1/nodes/${NODE_NAME}/proxy/configz" | jq '.kubeletconfig|.kind="KubeletConfiguration"|.apiVersion="kubelet.config.k8s.io/v1beta1"' > kubelet_configz_${NODE_NAME}
-      ```
+   ```bash
+   NODE_NAME="the-name-of-the-node-you-are-reconfiguring"; curl -sSL "http://localhost:8001/api/v1/nodes/${NODE_NAME}/proxy/configz" | jq '.kubeletconfig|.kind="KubeletConfiguration"|.apiVersion="kubelet.config.k8s.io/v1beta1"' > kubelet_configz_${NODE_NAME}
+   ```
 
 {{< note >}}
 You need to manually add the `kind` and `apiVersion` to the downloaded
@@ -312,8 +312,6 @@ empty, since all config sources have been reset to `nil`, which indicates that
 the local default config is `assigned`, `active`, and `lastKnownGood`, and no
 error is reported.
 
-
-
 <!-- discussion -->
 ## `kubectl patch` example
 
@@ -356,7 +354,7 @@ metadata and checkpoints. The structure of the kubelet's checkpointing directory
   | - ...
 ```
 
-## Understanding Node.Status.Config.Error messages {#understanding-node-config-status-errors}
+## Understanding `Node.Status.Config.Error` messages {#understanding-node-config-status-errors}
 
 The following table describes error messages that can occur
 when using Dynamic Kubelet Config. You can search for the identical text
@@ -378,6 +376,10 @@ internal failure, see Kubelet log for details | The kubelet encountered some int
 
 ## {{% heading "whatsnext" %}}
 
- - For more information on configuring the kubelet via a configuration file, see
+- For more information on configuring the kubelet via a configuration file, see
 [Set kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file).
 - See the reference documentation for [`NodeConfigSource`](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#nodeconfigsource-v1-core)
+- Learn more about kubelet configuration by checking the
+  [`KubeletConfiguration`](/docs/reference/config-api/kubelet-config.v1beta1/)
+  reference.
+
diff --git a/content/en/docs/tasks/configure-pod-container/static-pod.md b/content/en/docs/tasks/configure-pod-container/static-pod.md
index 071c1614fc..9126243462 100644
--- a/content/en/docs/tasks/configure-pod-container/static-pod.md
+++ b/content/en/docs/tasks/configure-pod-container/static-pod.md
@@ -31,21 +31,14 @@ Pods to run a Pod on every node, you should probably be using a
 instead.
 {{< /note >}}
 
-
-
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 This page assumes you're using {{< glossary_tooltip term_id="docker" >}} to run Pods,
 and that your nodes are running the Fedora operating system.
 Instructions for other distributions or Kubernetes installations may vary.
 
-
-
-
-
 <!-- steps -->
 
 ## Create a static pod {#static-pod-creation}
@@ -54,7 +47,9 @@ You can configure a static Pod with either a [file system hosted configuration f
 
 ### Filesystem-hosted static Pod manifest {#configuration-files}
 
-Manifests are standard Pod definitions in JSON or YAML format in a specific directory. Use the `staticPodPath: <the directory>` field in the [kubelet configuration file](/docs/tasks/administer-cluster/kubelet-config-file), which periodically scans the directory and creates/deletes static Pods as YAML/JSON files appear/disappear there.
+Manifests are standard Pod definitions in JSON or YAML format in a specific directory. Use the `staticPodPath: <the directory>` field in the
+[kubelet configuration file](/docs/reference/config-api/kubelet-config.v1beta1/),
+which periodically scans the directory and creates/deletes static Pods as YAML/JSON files appear/disappear there.
 Note that the kubelet will ignore files starting with dots when scanning the specified directory.
 
 For example, this is how to start a simple web server as a static Pod:
@@ -90,17 +85,18 @@ For example, this is how to start a simple web server as a static Pod:
 
 3. Configure your kubelet on the node to use this directory by running it with `--pod-manifest-path=/etc/kubelet.d/` argument. On Fedora edit `/etc/kubernetes/kubelet` to include this line:
 
-    ```
-    KUBELET_ARGS="--cluster-dns=10.254.0.10 --cluster-domain=kube.local --pod-manifest-path=/etc/kubelet.d/"
-    ```
-    or add the `staticPodPath: <the directory>` field in the [kubelet configuration file](/docs/tasks/administer-cluster/kubelet-config-file).
+   ```
+   KUBELET_ARGS="--cluster-dns=10.254.0.10 --cluster-domain=kube.local --pod-manifest-path=/etc/kubelet.d/"
+   ```
+   or add the `staticPodPath: <the directory>` field in the
+   [kubelet configuration file](/docs/reference/config-api/kubelet-config.v1beta1/).
 
 4. Restart the kubelet. On Fedora, you would run:
 
-    ```shell
-    # Run this command on the node where the kubelet is running
-    systemctl restart kubelet
-    ```
+   ```shell
+   # Run this command on the node where the kubelet is running
+   systemctl restart kubelet
+   ```
 
 ### Web-hosted static pod manifest {#pods-created-via-http}
 

From ce76e0f875ed57697ab80ade6bda93e9a42f8181 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 17 Feb 2021 21:22:09 +0800
Subject: [PATCH 433/788] Add reference for kube-scheduler config

---
 .../scheduling-eviction/kube-scheduler.md     |    2 +
 .../scheduler-perf-tuning.md                  |   12 +-
 content/en/docs/reference/_index.md           |    4 +-
 .../kube-scheduler-config.v1beta1.md          | 2156 +++++++++++++++++
 .../en/docs/reference/scheduling/config.md    |    8 +-
 .../en/docs/reference/scheduling/policies.md  |    4 +-
 6 files changed, 2175 insertions(+), 11 deletions(-)
 create mode 100644 content/en/docs/reference/config-api/kube-scheduler-config.v1beta1.md

diff --git a/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
index a3e548d237..0944ecc768 100644
--- a/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -87,6 +87,7 @@ of the scheduler:
 * Read about [scheduler performance tuning](/docs/concepts/scheduling-eviction/scheduler-perf-tuning/)
 * Read about [Pod topology spread constraints](/docs/concepts/workloads/pods/pod-topology-spread-constraints/)
 * Read the [reference documentation](/docs/reference/command-line-tools-reference/kube-scheduler/) for kube-scheduler
+* Read the [kube-scheduler config (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) reference
 * Learn about [configuring multiple schedulers](/docs/tasks/extend-kubernetes/configure-multiple-schedulers/)
 * Learn about [topology management policies](/docs/tasks/administer-cluster/topology-manager/)
 * Learn about [Pod Overhead](/docs/concepts/scheduling-eviction/pod-overhead/)
@@ -94,3 +95,4 @@ of the scheduler:
   * [Volume Topology Support](/docs/concepts/storage/storage-classes/#volume-binding-mode)
   * [Storage Capacity Tracking](/docs/concepts/storage/storage-capacity/)
   * [Node-specific Volume Limits](/docs/concepts/storage/storage-limits/)
+
diff --git a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index 7936f9dedc..24283f2efa 100644
--- a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -24,8 +24,6 @@ in a process called _Binding_.
 This page explains performance tuning optimizations that are relevant for
 large Kubernetes clusters.
 
-
-
 <!-- body -->
 
 In large clusters, you can tune the scheduler's behaviour balancing
@@ -44,8 +42,10 @@ should use its compiled-in default.
 If you set `percentageOfNodesToScore` above 100, kube-scheduler acts as if you
 had set a value of 100.
 
-To change the value, edit the kube-scheduler configuration file (this is likely
-to be `/etc/kubernetes/config/kube-scheduler.yaml`), then restart the scheduler.
+To change the value, edit the
+[kube-scheduler configuration file](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
+and then restart the scheduler.
+In many cases, the configuration file can be found at `/etc/kubernetes/config/kube-scheduler.yaml`.
 
 After you have made this change, you can run
 
@@ -99,7 +99,6 @@ algorithmSource:
 percentageOfNodesToScore: 50
 ```
 
-
 ## Tuning percentageOfNodesToScore
 
 `percentageOfNodesToScore` must be a value between 1 and 100 with the default
@@ -160,4 +159,7 @@ Node 1, Node 5, Node 2, Node 6, Node 3, Node 4
 
 After going over all the Nodes, it goes back to Node 1.
 
+## {{% heading "whatsnext" %}}
+
+* Check the [kube-scheduler configuration reference (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
 
diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 00adcad7d7..ba5e1d1ac7 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -22,8 +22,6 @@ This section of the Kubernetes documentation contains references.
 
 * [Glossary](/docs/reference/glossary/) -  a comprehensive, standardized list of Kubernetes terminology
 
-
-
 * [Kubernetes API Reference](/docs/reference/kubernetes-api/)
 * [One-page API Reference for Kubernetes {{< param "version" >}}](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 * [Using The Kubernetes API](/docs/reference/using-api/) - overview of the API for Kubernetes.
@@ -65,6 +63,8 @@ client libraries:
 ## Config APIs
 
 * [kube-proxy configuration (v1alpha1)](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
+* [kube-scheduler config (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
+
 
 ## Design Docs
 
diff --git a/content/en/docs/reference/config-api/kube-scheduler-config.v1beta1.md b/content/en/docs/reference/config-api/kube-scheduler-config.v1beta1.md
new file mode 100644
index 0000000000..ac32e65674
--- /dev/null
+++ b/content/en/docs/reference/config-api/kube-scheduler-config.v1beta1.md
@@ -0,0 +1,2156 @@
+---
+title: kube-scheduler Configuration (v1beta1)
+content_type: tool-reference
+package: kubescheduler.config.k8s.io/v1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+- [DefaultPreemptionArgs](#kubescheduler-config-k8s-io-v1beta1-DefaultPreemptionArgs)
+- [InterPodAffinityArgs](#kubescheduler-config-k8s-io-v1beta1-InterPodAffinityArgs)
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+- [NodeAffinityArgs](#kubescheduler-config-k8s-io-v1beta1-NodeAffinityArgs)
+- [NodeLabelArgs](#kubescheduler-config-k8s-io-v1beta1-NodeLabelArgs)
+- [NodeResourcesFitArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesFitArgs)
+- [NodeResourcesLeastAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesLeastAllocatedArgs)
+- [NodeResourcesMostAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesMostAllocatedArgs)
+- [PodTopologySpreadArgs](#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadArgs)
+- [RequestedToCapacityRatioArgs](#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs)
+- [ServiceAffinityArgs](#kubescheduler-config-k8s-io-v1beta1-ServiceAffinityArgs)
+- [VolumeBindingArgs](#kubescheduler-config-k8s-io-v1beta1-VolumeBindingArgs)
+  
+    
+
+
+## `Policy`     {#kubescheduler-config-k8s-io-v1-Policy}
+    
+
+
+
+
+Policy describes a struct for a policy resource used in api.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Policy</code></td></tr>
+    
+
+  
+  
+<tr><td><code>predicates</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicatePolicy"><code>[]PredicatePolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the fit predicate functions</td>
+</tr>
+    
+  
+<tr><td><code>priorities</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityPolicy"><code>[]PriorityPolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the priority functions</td>
+</tr>
+    
+  
+<tr><td><code>extenders</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LegacyExtender"><code>[]LegacyExtender</code></a>
+</td>
+<td>
+   Holds the information to communicate with the extender(s)</td>
+</tr>
+    
+  
+<tr><td><code>hardPodAffinitySymmetricWeight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule
+corresponding to every RequiredDuringScheduling affinity rule.
+HardPodAffinitySymmetricWeight represents the weight of implicit PreferredDuringScheduling affinity rule, in the range 1-100.</td>
+</tr>
+    
+  
+<tr><td><code>alwaysCheckAllPredicates</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   When AlwaysCheckAllPredicates is set to true, scheduler checks all
+the configured predicates even after one or more of them fails.
+When the flag is set to false, scheduler skips checking the rest
+of the predicates after it finds one predicate that failed.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderManagedResource`     {#kubescheduler-config-k8s-io-v1-ExtenderManagedResource}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderManagedResource describes the arguments of extended resources
+managed by an extender.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name is the extended resource name.</td>
+</tr>
+    
+  
+<tr><td><code>ignoredByScheduler</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   IgnoredByScheduler indicates whether kube-scheduler should ignore this
+resource when applying predicates.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderTLSConfig`     {#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderTLSConfig contains settings to enable TLS with extender
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>insecure</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Server should be accessed without verifying the TLS certificate. For testing only.</td>
+</tr>
+    
+  
+<tr><td><code>serverName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ServerName is passed to the server for SNI and is used in the client to check server
+certificates against. If ServerName is empty, the hostname used to contact the
+server is used.</td>
+</tr>
+    
+  
+<tr><td><code>certFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>keyFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>caFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Trusted root certificates for server</td>
+</tr>
+    
+  
+<tr><td><code>certData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CertData holds PEM-encoded bytes (typically read from a client certificate file).
+CertData takes precedence over CertFile</td>
+</tr>
+    
+  
+<tr><td><code>keyData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   KeyData holds PEM-encoded bytes (typically read from a client certificate key file).
+KeyData takes precedence over KeyFile</td>
+</tr>
+    
+  
+<tr><td><code>caData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CAData holds PEM-encoded bytes (typically read from a root certificates bundle).
+CAData takes precedence over CAFile</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelPreference`     {#kubescheduler-config-k8s-io-v1-LabelPreference}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+LabelPreference holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   This is a boolean flag
+If true, higher priority is given to nodes that have the label
+If false, higher priority is given to nodes that do not have the label</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelsPresence`     {#kubescheduler-config-k8s-io-v1-LabelsPresence}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+LabelsPresence holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should be either present (or absent) for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   The boolean flag that indicates whether the labels should be present or absent from the node</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LegacyExtender`     {#kubescheduler-config-k8s-io-v1-LegacyExtender}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+LegacyExtender holds the parameters used to communicate with the extender. If a verb is unspecified/empty,
+it is assumed that the extender chose not to provide that extension.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>urlPrefix</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   URLPrefix at which the extender is available</td>
+</tr>
+    
+  
+<tr><td><code>filterVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the filter call, empty if not supported. This verb is appended to the URLPrefix when issuing the filter call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>preemptVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the preempt call, empty if not supported. This verb is appended to the URLPrefix when issuing the preempt call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>prioritizeVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the prioritize call, empty if not supported. This verb is appended to the URLPrefix when issuing the prioritize call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the prioritize call generates.
+The weight should be a positive integer</td>
+</tr>
+    
+  
+<tr><td><code>bindVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the bind call, empty if not supported. This verb is appended to the URLPrefix when issuing the bind call to extender.
+If this method is implemented by the extender, it is the extender's responsibility to bind the pod to apiserver. Only one extender
+can implement this function.</td>
+</tr>
+    
+  
+<tr><td><code>enableHttps</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   EnableHTTPS specifies whether https should be used to communicate with the extender</td>
+</tr>
+    
+  
+<tr><td><code>tlsConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig"><code>ExtenderTLSConfig</code></a>
+</td>
+<td>
+   TLSConfig specifies the transport layer security config</td>
+</tr>
+    
+  
+<tr><td><code>httpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/time#Duration"><code>time.Duration</code></a>
+</td>
+<td>
+   HTTPTimeout specifies the timeout duration for a call to the extender. Filter timeout fails the scheduling of the pod. Prioritize
+timeout is ignored, k8s/other extenders priorities are used to select the node.</td>
+</tr>
+    
+  
+<tr><td><code>nodeCacheCapable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   NodeCacheCapable specifies that the extender is capable of caching node information,
+so the scheduler should only send minimal information about the eligible nodes
+assuming that the extender already cached full details of all nodes in the cluster</td>
+</tr>
+    
+  
+<tr><td><code>managedResources</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderManagedResource"><code>[]ExtenderManagedResource</code></a>
+</td>
+<td>
+   ManagedResources is a list of extended resources that are managed by
+this extender.
+- A pod will be sent to the extender on the Filter, Prioritize and Bind
+  (if the extender is the binder) phases iff the pod requests at least
+  one of the extended resources in this list. If empty or unspecified,
+  all pods will be sent to this extender.
+- If IgnoredByScheduler is set to true for a resource, kube-scheduler
+  will skip checking the resource in predicates.</td>
+</tr>
+    
+  
+<tr><td><code>ignorable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Ignorable specifies if the extender is ignorable, i.e. scheduling should not
+fail when the extender returns an error or is not reachable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicateArgument`     {#kubescheduler-config-k8s-io-v1-PredicateArgument}
+    
+
+
+
+**Appears in:**
+
+- [PredicatePolicy](#kubescheduler-config-k8s-io-v1-PredicatePolicy)
+
+
+PredicateArgument represents the arguments to configure predicate functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAffinity"><code>ServiceAffinity</code></a>
+</td>
+<td>
+   The predicate that provides affinity for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelsPresence</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelsPresence"><code>LabelsPresence</code></a>
+</td>
+<td>
+   The predicate that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicatePolicy`     {#kubescheduler-config-k8s-io-v1-PredicatePolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PredicatePolicy describes a struct of a predicate policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the predicate policy
+For a custom predicate, the name can be user-defined
+For the Kubernetes provided predicates, the name is the identifier of the pre-defined predicate</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicateArgument"><code>PredicateArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given predicate</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityArgument`     {#kubescheduler-config-k8s-io-v1-PriorityArgument}
+    
+
+
+
+**Appears in:**
+
+- [PriorityPolicy](#kubescheduler-config-k8s-io-v1-PriorityPolicy)
+
+
+PriorityArgument represents the arguments to configure priority functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAntiAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity"><code>ServiceAntiAffinity</code></a>
+</td>
+<td>
+   The priority function that ensures a good spread (anti-affinity) for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelPreference</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelPreference"><code>LabelPreference</code></a>
+</td>
+<td>
+   The priority function that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+<tr><td><code>requestedToCapacityRatioArguments</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments"><code>RequestedToCapacityRatioArguments</code></a>
+</td>
+<td>
+   The RequestedToCapacityRatio priority function is parametrized with function shape.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityPolicy`     {#kubescheduler-config-k8s-io-v1-PriorityPolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PriorityPolicy describes a struct of a priority policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the priority policy
+For a custom priority, the name can be user-defined
+For the Kubernetes provided priority functions, the name is the identifier of the pre-defined priority function</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the priority function generates
+The weight should be non-zero and can be a positive or a negative integer</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityArgument"><code>PriorityArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given priority function</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `RequestedToCapacityRatioArguments`     {#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+RequestedToCapacityRatioArguments holds arguments specific to RequestedToCapacityRatio priority function.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>shape</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-UtilizationShapePoint"><code>[]UtilizationShapePoint</code></a>
+</td>
+<td>
+   Array of point defining priority function shape.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ResourceSpec`     {#kubescheduler-config-k8s-io-v1-ResourceSpec}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+ResourceSpec represents single resource and weight for bin packing of priority RequestedToCapacityRatioArguments.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name of the resource to be managed by RequestedToCapacityRatio function.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   Weight of the resource.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+ServiceAffinity holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should match for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAntiAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+ServiceAntiAffinity holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `UtilizationShapePoint`     {#kubescheduler-config-k8s-io-v1-UtilizationShapePoint}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+UtilizationShapePoint represents single point of priority function shape.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>utilization</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Utilization (x axis). Valid values are 0 to 100. Fully utilized node maps to 100.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Score assigned to given utilization (y axis). Valid values are 0 to 10.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  
+  
+    
+
+## `ClientConnectionConfiguration`     {#ClientConnectionConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+ClientConnectionConfiguration contains details for constructing a client.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>kubeconfig</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   kubeconfig is the path to a KubeConfig file.</td>
+</tr>
+    
+  
+<tr><td><code>acceptContentTypes</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the
+default value of 'application/json'. This field will control all connections to the server used by a particular
+client.</td>
+</tr>
+    
+  
+<tr><td><code>contentType</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   contentType is the content type used when sending data to the server from this client.</td>
+</tr>
+    
+  
+<tr><td><code>qps</code> <B>[Required]</B><br/>
+<code>float32</code>
+</td>
+<td>
+   qps controls the number of queries per second allowed for this connection.</td>
+</tr>
+    
+  
+<tr><td><code>burst</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   burst allows extra queries to accumulate when a client is exceeding its rate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+
+## `DebuggingConfiguration`     {#DebuggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+DebuggingConfiguration holds configuration for Debugging related features.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enableProfiling</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableProfiling enables profiling via web interface host:port/debug/pprof/</td>
+</tr>
+    
+  
+<tr><td><code>enableContentionProfiling</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableContentionProfiling enables lock contention profiling, if
+enableProfiling is true.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+
+## `LeaderElectionConfiguration`     {#LeaderElectionConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+LeaderElectionConfiguration defines the configuration of leader election
+clients for components that can run with leader election enabled.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>leaderElect</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   leaderElect enables a leader election client to gain leadership
+before executing the main loop. Enable this when running replicated
+components for high availability.</td>
+</tr>
+    
+  
+<tr><td><code>leaseDuration</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   leaseDuration is the duration that non-leader candidates will wait
+after observing a leadership renewal until attempting to acquire
+leadership of a led but unrenewed leader slot. This is effectively the
+maximum duration that a leader can be stopped before it is replaced
+by another candidate. This is only applicable if leader election is
+enabled.</td>
+</tr>
+    
+  
+<tr><td><code>renewDeadline</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   renewDeadline is the interval between attempts by the acting master to
+renew a leadership slot before it stops leading. This must be less
+than or equal to the lease duration. This is only applicable if leader
+election is enabled.</td>
+</tr>
+    
+  
+<tr><td><code>retryPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   retryPeriod is the duration the clients should wait between attempting
+acquisition and renewal of a leadership. This is only applicable if
+leader election is enabled.</td>
+</tr>
+    
+  
+<tr><td><code>resourceLock</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   resourceLock indicates the resource object type that will be used to lock
+during leader election cycles.</td>
+</tr>
+    
+  
+<tr><td><code>resourceName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   resourceName indicates the name of resource object that will be used to lock
+during leader election cycles.</td>
+</tr>
+    
+  
+<tr><td><code>resourceNamespace</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   resourceName indicates the namespace of resource object that will be used to lock
+during leader election cycles.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+
+## `LoggingConfiguration`     {#LoggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+LoggingConfiguration contains logging options
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>format</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Format Flag specifies the structure of log messages.
+default value of format is `text`</td>
+</tr>
+    
+  
+<tr><td><code>sanitization</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   [Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).
+Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`)</td>
+</tr>
+    
+  
+</tbody>
+</table>
+  
+    
+
+
+## `DefaultPreemptionArgs`     {#kubescheduler-config-k8s-io-v1beta1-DefaultPreemptionArgs}
+    
+
+
+
+
+DefaultPreemptionArgs holds arguments used to configure the
+DefaultPreemption plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>DefaultPreemptionArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>minCandidateNodesPercentage</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   MinCandidateNodesPercentage is the minimum number of candidates to
+shortlist when dry running preemption as a percentage of number of nodes.
+Must be in the range [0, 100]. Defaults to 10% of the cluster size if
+unspecified.</td>
+</tr>
+    
+  
+<tr><td><code>minCandidateNodesAbsolute</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   MinCandidateNodesAbsolute is the absolute minimum number of candidates to
+shortlist. The likely number of candidates enumerated for dry running
+preemption is given by the formula:
+numCandidates = max(numNodes &lowast; minCandidateNodesPercentage, minCandidateNodesAbsolute)
+We say "likely" because there are other factors such as PDB violations
+that play a role in the number of candidates shortlisted. Must be at least
+0 nodes. Defaults to 100 nodes if unspecified.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `InterPodAffinityArgs`     {#kubescheduler-config-k8s-io-v1beta1-InterPodAffinityArgs}
+    
+
+
+
+
+InterPodAffinityArgs holds arguments used to configure the InterPodAffinity plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>InterPodAffinityArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>hardPodAffinityWeight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   HardPodAffinityWeight is the scoring weight for existing pods with a
+matching hard affinity to the incoming pod.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeSchedulerConfiguration`     {#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration}
+    
+
+
+
+
+KubeSchedulerConfiguration configures a scheduler
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>KubeSchedulerConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td><code>parallelism</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Parallelism defines the amount of parallelism in algorithms for scheduling a Pods. Must be greater than 0. Defaults to 16</td>
+</tr>
+    
+  
+<tr><td><code>leaderElection</code> <B>[Required]</B><br/>
+<a href="#LeaderElectionConfiguration"><code>LeaderElectionConfiguration</code></a>
+</td>
+<td>
+   LeaderElection defines the configuration of leader election client.</td>
+</tr>
+    
+  
+<tr><td><code>clientConnection</code> <B>[Required]</B><br/>
+<a href="#ClientConnectionConfiguration"><code>ClientConnectionConfiguration</code></a>
+</td>
+<td>
+   ClientConnection specifies the kubeconfig file and client connection
+settings for the proxy server to use when communicating with the apiserver.</td>
+</tr>
+    
+  
+<tr><td><code>healthzBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   HealthzBindAddress is the IP address and port for the health check server to serve on,
+defaulting to 0.0.0.0:10251</td>
+</tr>
+    
+  
+<tr><td><code>metricsBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   MetricsBindAddress is the IP address and port for the metrics server to
+serve on, defaulting to 0.0.0.0:10251.</td>
+</tr>
+    
+  
+<tr><td><code>DebuggingConfiguration</code> <B>[Required]</B><br/>
+<a href="#DebuggingConfiguration"><code>DebuggingConfiguration</code></a>
+</td>
+<td>(Members of <code>DebuggingConfiguration</code> are embedded into this type.)
+   DebuggingConfiguration holds configuration for Debugging related features
+TODO: We might wanna make this a substruct like Debugging componentbaseconfigv1alpha1.DebuggingConfiguration</td>
+</tr>
+    
+  
+<tr><td><code>percentageOfNodesToScore</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   PercentageOfNodesToScore is the percentage of all nodes that once found feasible
+for running a pod, the scheduler stops its search for more feasible nodes in
+the cluster. This helps improve scheduler's performance. Scheduler always tries to find
+at least "minFeasibleNodesToFind" feasible nodes no matter what the value of this flag is.
+Example: if the cluster size is 500 nodes and the value of this flag is 30,
+then scheduler stops finding further feasible nodes once it finds 150 feasible ones.
+When the value is 0, default percentage (5%--50% based on the size of the cluster) of the
+nodes will be scored.</td>
+</tr>
+    
+  
+<tr><td><code>podInitialBackoffSeconds</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   PodInitialBackoffSeconds is the initial backoff for unschedulable pods.
+If specified, it must be greater than 0. If this value is null, the default value (1s)
+will be used.</td>
+</tr>
+    
+  
+<tr><td><code>podMaxBackoffSeconds</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   PodMaxBackoffSeconds is the max backoff for unschedulable pods.
+If specified, it must be greater than podInitialBackoffSeconds. If this value is null,
+the default value (10s) will be used.</td>
+</tr>
+    
+  
+<tr><td><code>profiles</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile"><code>[]KubeSchedulerProfile</code></a>
+</td>
+<td>
+   Profiles are scheduling profiles that kube-scheduler supports. Pods can
+choose to be scheduled under a particular profile by setting its associated
+scheduler name. Pods that don't specify any scheduler name are scheduled
+with the "default-scheduler" profile, if present here.</td>
+</tr>
+    
+  
+<tr><td><code>extenders</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Extender"><code>[]Extender</code></a>
+</td>
+<td>
+   Extenders are the list of scheduler extenders, each holding the values of how to communicate
+with the extender. These extenders are shared by all scheduler profiles.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeAffinityArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeAffinityArgs}
+    
+
+
+
+
+NodeAffinityArgs holds arguments to configure the NodeAffinity plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeAffinityArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>addedAffinity</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#nodeaffinity-v1-core"><code>core/v1.NodeAffinity</code></a>
+</td>
+<td>
+   AddedAffinity is applied to all Pods additionally to the NodeAffinity
+specified in the PodSpec. That is, Nodes need to satisfy AddedAffinity
+AND .spec.NodeAffinity. AddedAffinity is empty by default (all Nodes
+match).
+When AddedAffinity is used, some Pods with affinity requirements that match
+a specific Node (such as Daemonset Pods) might remain unschedulable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeLabelArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeLabelArgs}
+    
+
+
+
+
+NodeLabelArgs holds arguments used to configure the NodeLabel plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeLabelArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>presentLabels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   PresentLabels should be present for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>absentLabels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   AbsentLabels should be absent for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>presentLabelsPreference</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   Nodes that have labels in the list will get a higher score.</td>
+</tr>
+    
+  
+<tr><td><code>absentLabelsPreference</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   Nodes that don't have labels in the list will get a higher score.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeResourcesFitArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeResourcesFitArgs}
+    
+
+
+
+
+NodeResourcesFitArgs holds arguments used to configure the NodeResourcesFit plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeResourcesFitArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>ignoredResources</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   IgnoredResources is the list of resources that NodeResources fit filter
+should ignore.</td>
+</tr>
+    
+  
+<tr><td><code>ignoredResourceGroups</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   IgnoredResourceGroups defines the list of resource groups that NodeResources fit filter should ignore.
+e.g. if group is ["example.com"], it will ignore all resource names that begin
+with "example.com", such as "example.com/aaa" and "example.com/bbb".
+A resource group name can't contain '/'.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeResourcesLeastAllocatedArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeResourcesLeastAllocatedArgs}
+    
+
+
+
+
+NodeResourcesLeastAllocatedArgs holds arguments used to configure NodeResourcesLeastAllocated plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeResourcesLeastAllocatedArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   Resources to be managed, if no resource is provided, default resource set with both
+the weight of "cpu" and "memory" set to "1" will be applied.
+Resource with "0" weight will not accountable for the final score.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeResourcesMostAllocatedArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeResourcesMostAllocatedArgs}
+    
+
+
+
+
+NodeResourcesMostAllocatedArgs holds arguments used to configure NodeResourcesMostAllocated plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeResourcesMostAllocatedArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   Resources to be managed, if no resource is provided, default resource set with both
+the weight of "cpu" and "memory" set to "1" will be applied.
+Resource with "0" weight will not accountable for the final score.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PodTopologySpreadArgs`     {#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadArgs}
+    
+
+
+
+
+PodTopologySpreadArgs holds arguments used to configure the PodTopologySpread plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>PodTopologySpreadArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>defaultConstraints</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#topologyspreadconstraint-v1-core"><code>[]core/v1.TopologySpreadConstraint</code></a>
+</td>
+<td>
+   DefaultConstraints defines topology spread constraints to be applied to
+Pods that don't define any in `pod.spec.topologySpreadConstraints`.
+`.defaultConstraints[&lowast;].labelSelectors` must be empty, as they are
+deduced from the Pod's membership to Services, ReplicationControllers,
+ReplicaSets or StatefulSets.
+When not empty, .defaultingType must be "List".</td>
+</tr>
+    
+  
+<tr><td><code>defaultingType</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadConstraintsDefaulting"><code>PodTopologySpreadConstraintsDefaulting</code></a>
+</td>
+<td>
+   DefaultingType determines how .defaultConstraints are deduced. Can be one
+of "System" or "List".
+
+- "System": Use kubernetes defined constraints that spread Pods among
+  Nodes and Zones.
+- "List": Use constraints defined in .defaultConstraints.
+
+Defaults to "List" if feature gate DefaultPodTopologySpread is disabled
+and to "System" if enabled.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `RequestedToCapacityRatioArgs`     {#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs}
+    
+
+
+
+
+RequestedToCapacityRatioArgs holds arguments used to configure RequestedToCapacityRatio plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>RequestedToCapacityRatioArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>shape</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-UtilizationShapePoint"><code>[]UtilizationShapePoint</code></a>
+</td>
+<td>
+   Points defining priority function shape</td>
+</tr>
+    
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   Resources to be managed</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAffinityArgs`     {#kubescheduler-config-k8s-io-v1beta1-ServiceAffinityArgs}
+    
+
+
+
+
+ServiceAffinityArgs holds arguments used to configure the ServiceAffinity plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>ServiceAffinityArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>affinityLabels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   AffinityLabels are homogeneous for pods that are scheduled to a node.
+(i.e. it returns true IFF this pod can be added to this node such that all other pods in
+the same service are running on nodes with the exact same values for Labels).</td>
+</tr>
+    
+  
+<tr><td><code>antiAffinityLabelsPreference</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   AntiAffinityLabelsPreference are the labels to consider for service anti affinity scoring.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `VolumeBindingArgs`     {#kubescheduler-config-k8s-io-v1beta1-VolumeBindingArgs}
+    
+
+
+
+
+VolumeBindingArgs holds arguments used to configure the VolumeBinding plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>VolumeBindingArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>bindTimeoutSeconds</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   BindTimeoutSeconds is the timeout in seconds in volume binding operation.
+Value must be non-negative integer. The value zero indicates no waiting.
+If this value is nil, the default value (600) will be used.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Extender`     {#kubescheduler-config-k8s-io-v1beta1-Extender}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+Extender holds the parameters used to communicate with the extender. If a verb is unspecified/empty,
+it is assumed that the extender chose not to provide that extension.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>urlPrefix</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   URLPrefix at which the extender is available</td>
+</tr>
+    
+  
+<tr><td><code>filterVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the filter call, empty if not supported. This verb is appended to the URLPrefix when issuing the filter call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>preemptVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the preempt call, empty if not supported. This verb is appended to the URLPrefix when issuing the preempt call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>prioritizeVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the prioritize call, empty if not supported. This verb is appended to the URLPrefix when issuing the prioritize call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the prioritize call generates.
+The weight should be a positive integer</td>
+</tr>
+    
+  
+<tr><td><code>bindVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the bind call, empty if not supported. This verb is appended to the URLPrefix when issuing the bind call to extender.
+If this method is implemented by the extender, it is the extender's responsibility to bind the pod to apiserver. Only one extender
+can implement this function.</td>
+</tr>
+    
+  
+<tr><td><code>enableHTTPS</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   EnableHTTPS specifies whether https should be used to communicate with the extender</td>
+</tr>
+    
+  
+<tr><td><code>tlsConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig"><code>ExtenderTLSConfig</code></a>
+</td>
+<td>
+   TLSConfig specifies the transport layer security config</td>
+</tr>
+    
+  
+<tr><td><code>httpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   HTTPTimeout specifies the timeout duration for a call to the extender. Filter timeout fails the scheduling of the pod. Prioritize
+timeout is ignored, k8s/other extenders priorities are used to select the node.</td>
+</tr>
+    
+  
+<tr><td><code>nodeCacheCapable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   NodeCacheCapable specifies that the extender is capable of caching node information,
+so the scheduler should only send minimal information about the eligible nodes
+assuming that the extender already cached full details of all nodes in the cluster</td>
+</tr>
+    
+  
+<tr><td><code>managedResources</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderManagedResource"><code>[]ExtenderManagedResource</code></a>
+</td>
+<td>
+   ManagedResources is a list of extended resources that are managed by
+this extender.
+- A pod will be sent to the extender on the Filter, Prioritize and Bind
+  (if the extender is the binder) phases iff the pod requests at least
+  one of the extended resources in this list. If empty or unspecified,
+  all pods will be sent to this extender.
+- If IgnoredByScheduler is set to true for a resource, kube-scheduler
+  will skip checking the resource in predicates.</td>
+</tr>
+    
+  
+<tr><td><code>ignorable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Ignorable specifies if the extender is ignorable, i.e. scheduling should not
+fail when the extender returns an error or is not reachable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeSchedulerProfile`     {#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+KubeSchedulerProfile is a scheduling profile.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>schedulerName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   SchedulerName is the name of the scheduler associated to this profile.
+If SchedulerName matches with the pod's "spec.schedulerName", then the pod
+is scheduled with this profile.</td>
+</tr>
+    
+  
+<tr><td><code>plugins</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Plugins"><code>Plugins</code></a>
+</td>
+<td>
+   Plugins specify the set of plugins that should be enabled or disabled.
+Enabled plugins are the ones that should be enabled in addition to the
+default plugins. Disabled plugins are any of the default plugins that
+should be disabled.
+When no enabled or disabled plugin is specified for an extension point,
+default plugins for that extension point will be used if there is any.
+If a QueueSort plugin is specified, the same QueueSort Plugin and
+PluginConfig must be specified for all profiles.</td>
+</tr>
+    
+  
+<tr><td><code>pluginConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginConfig"><code>[]PluginConfig</code></a>
+</td>
+<td>
+   PluginConfig is an optional set of custom plugin arguments for each plugin.
+Omitting config args for a plugin is equivalent to using the default config
+for that plugin.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Plugin`     {#kubescheduler-config-k8s-io-v1beta1-Plugin}
+    
+
+
+
+**Appears in:**
+
+- [PluginSet](#kubescheduler-config-k8s-io-v1beta1-PluginSet)
+
+
+Plugin specifies a plugin name and its weight when applicable. Weight is used only for Score plugins.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name defines the name of plugin</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Weight defines the weight of plugin, only used for Score plugins.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PluginConfig`     {#kubescheduler-config-k8s-io-v1beta1-PluginConfig}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerProfile](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile)
+
+
+PluginConfig specifies arguments that should be passed to a plugin at the time of initialization.
+A plugin that is invoked at multiple extension points is initialized once. Args can have arbitrary structure.
+It is up to the plugin to process these Args.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name defines the name of plugin being configured</td>
+</tr>
+    
+  
+<tr><td><code>args</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime/#RawExtension"><code>k8s.io/apimachinery/pkg/runtime.RawExtension</code></a>
+</td>
+<td>
+   Args defines the arguments passed to the plugins at the time of initialization. Args can have arbitrary structure.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PluginSet`     {#kubescheduler-config-k8s-io-v1beta1-PluginSet}
+    
+
+
+
+**Appears in:**
+
+- [Plugins](#kubescheduler-config-k8s-io-v1beta1-Plugins)
+
+
+PluginSet specifies enabled and disabled plugins for an extension point.
+If an array is empty, missing, or nil, default plugins at that extension point will be used.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Plugin"><code>[]Plugin</code></a>
+</td>
+<td>
+   Enabled specifies plugins that should be enabled in addition to default plugins.
+These are called after default plugins and in the same order specified here.</td>
+</tr>
+    
+  
+<tr><td><code>disabled</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Plugin"><code>[]Plugin</code></a>
+</td>
+<td>
+   Disabled specifies default plugins that should be disabled.
+When all default plugins need to be disabled, an array containing only one "&lowast;" should be provided.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Plugins`     {#kubescheduler-config-k8s-io-v1beta1-Plugins}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerProfile](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile)
+
+
+Plugins include multiple extension points. When specified, the list of plugins for
+a particular extension point are the only ones enabled. If an extension point is
+omitted from the config, then the default set of plugins is used for that extension point.
+Enabled plugins are called in the order specified here, after default plugins. If they need to
+be invoked before default plugins, default plugins must be disabled and re-enabled here in desired order.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>queueSort</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   QueueSort is a list of plugins that should be invoked when sorting pods in the scheduling queue.</td>
+</tr>
+    
+  
+<tr><td><code>preFilter</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PreFilter is a list of plugins that should be invoked at "PreFilter" extension point of the scheduling framework.</td>
+</tr>
+    
+  
+<tr><td><code>filter</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Filter is a list of plugins that should be invoked when filtering out nodes that cannot run the Pod.</td>
+</tr>
+    
+  
+<tr><td><code>postFilter</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PostFilter is a list of plugins that are invoked after filtering phase, no matter whether filtering succeeds or not.</td>
+</tr>
+    
+  
+<tr><td><code>preScore</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PreScore is a list of plugins that are invoked before scoring.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Score is a list of plugins that should be invoked when ranking nodes that have passed the filtering phase.</td>
+</tr>
+    
+  
+<tr><td><code>reserve</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Reserve is a list of plugins invoked when reserving/unreserving resources
+after a node is assigned to run the pod.</td>
+</tr>
+    
+  
+<tr><td><code>permit</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Permit is a list of plugins that control binding of a Pod. These plugins can prevent or delay binding of a Pod.</td>
+</tr>
+    
+  
+<tr><td><code>preBind</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PreBind is a list of plugins that should be invoked before a pod is bound.</td>
+</tr>
+    
+  
+<tr><td><code>bind</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Bind is a list of plugins that should be invoked at "Bind" extension point of the scheduling framework.
+The scheduler call these plugins in order. Scheduler skips the rest of these plugins as soon as one returns success.</td>
+</tr>
+    
+  
+<tr><td><code>postBind</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PostBind is a list of plugins that should be invoked after a pod is successfully bound.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PodTopologySpreadConstraintsDefaulting`     {#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadConstraintsDefaulting}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [PodTopologySpreadArgs](#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadArgs)
+
+
+PodTopologySpreadConstraintsDefaulting defines how to set default constraints
+for the PodTopologySpread plugin.
+
+
+    
+
+
+## `ResourceSpec`     {#kubescheduler-config-k8s-io-v1beta1-ResourceSpec}
+    
+
+
+
+**Appears in:**
+
+- [NodeResourcesLeastAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesLeastAllocatedArgs)
+
+- [NodeResourcesMostAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesMostAllocatedArgs)
+
+- [RequestedToCapacityRatioArgs](#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs)
+
+
+ResourceSpec represents single resource and weight for bin packing of priority RequestedToCapacityRatioArguments.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name of the resource to be managed by RequestedToCapacityRatio function.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   Weight of the resource.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `UtilizationShapePoint`     {#kubescheduler-config-k8s-io-v1beta1-UtilizationShapePoint}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArgs](#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs)
+
+
+UtilizationShapePoint represents single point of priority function shape.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>utilization</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Utilization (x axis). Valid values are 0 to 100. Fully utilized node maps to 100.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Score assigned to given utilization (y axis). Valid values are 0 to 10.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  
diff --git a/content/en/docs/reference/scheduling/config.md b/content/en/docs/reference/scheduling/config.md
index 8d5cc24208..53889a21f3 100644
--- a/content/en/docs/reference/scheduling/config.md
+++ b/content/en/docs/reference/scheduling/config.md
@@ -19,8 +19,9 @@ Each stage is exposed in a extension point. Plugins provide scheduling behaviors
 by implementing one or more of these extension points.
 
 You can specify scheduling profiles by running `kube-scheduler --config <filename>`,
-using the component config APIs
-([`v1beta1`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.19.0/config/v1beta1?tab=doc#KubeSchedulerConfiguration)).
+using the 
+[KubeSchedulerConfiguration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
+struct.
 
 A minimal configuration looks as follows:
 
@@ -97,6 +98,7 @@ for that extension point. This can also be used to rearrange plugins order, if
 desired.
    
 ### Scheduling plugins
+
 1. `UnReserve`: This is an informational extension point that is called if
    a Pod is rejected after being reserved and put on hold by a `Permit` plugin.
 
@@ -245,3 +247,5 @@ only has one pending pods queue.
 
 * Read the [kube-scheduler reference](https://kubernetes.io/docs/reference/command-line-tools-reference/kube-scheduler/)
 * Learn about [scheduling](/docs/concepts/scheduling-eviction/kube-scheduler/)
+* Read the [kube-scheduler configuration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) reference
+
diff --git a/content/en/docs/reference/scheduling/policies.md b/content/en/docs/reference/scheduling/policies.md
index 946150322d..10dd72ba05 100644
--- a/content/en/docs/reference/scheduling/policies.md
+++ b/content/en/docs/reference/scheduling/policies.md
@@ -17,7 +17,6 @@ You can set a scheduling policy by running
 and using the [Policy type](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy).
 
 
-
 <!-- body -->
 
 ## Predicates
@@ -122,5 +121,6 @@ The following *priorities* implement scoring:
 ## {{% heading "whatsnext" %}}
 
 * Learn about [scheduling](/docs/concepts/scheduling-eviction/kube-scheduler/)
-* Learn about [kube-scheduler Configuration](/docs/reference/scheduling/config/)
+* Learn about [kube-scheduler configuration](/docs/reference/scheduling/config/)
+* Read the [kube-scheduler configuration reference (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1)
 

From cf780b6545dcc2890ace1567ceef0e28fe4e2316 Mon Sep 17 00:00:00 2001
From: seokho-son <shsongist@gmail.com>
Date: Fri, 2 Apr 2021 00:18:10 +0900
Subject: [PATCH 434/788] Resolve conflicts on dev-1.20-ko.7 branch

---
 content/ko/docs/setup/best-practices/certificates.md        | 6 +++---
 .../ko/docs/setup/production-environment/tools/kubespray.md | 2 +-
 .../mysql-wordpress-persistent-volume.md                    | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/ko/docs/setup/best-practices/certificates.md b/content/ko/docs/setup/best-practices/certificates.md
index 71e16b7675..77665edbe2 100644
--- a/content/ko/docs/setup/best-practices/certificates.md
+++ b/content/ko/docs/setup/best-practices/certificates.md
@@ -7,7 +7,7 @@ weight: 40
 <!-- overview -->
 
 쿠버네티스는 TLS 위에 인증을 위해 PKI 인증서가 필요하다.
-만약 [kubeadm](/docs/reference/setup-tools/kubeadm/)으로 쿠버네티스를 설치했다면, 클러스터에 필요한 인증서는 자동으로 생성된다.
+만약 [kubeadm](/ko/docs/reference/setup-tools/kubeadm/)으로 쿠버네티스를 설치했다면, 클러스터에 필요한 인증서는 자동으로 생성된다.
 또한 더 안전하게 자신이 소유한 인증서를 생성할 수 있다. 이를 테면, 개인키를 API 서버에 저장하지 않으므로 더 안전하게 보관할 수 있다.
 이 페이지는 클러스터에 필요한 인증서를 설명한다.
 
@@ -72,7 +72,7 @@ etcd 역시 클라이언트와 피어 간에 상호 TLS 인증을 구현한다.
 | kube-apiserver-kubelet-client | kubernetes-ca             | system:masters | client                                 |                                             |
 | front-proxy-client            | kubernetes-front-proxy-ca |                | client                                 |                                             |
 
-[1]: 클러스터에 접속한 다른 IP 또는 DNS 이름([kubeadm](/docs/reference/setup-tools/kubeadm/) 이 사용하는 로드 밸런서 안정 IP 또는 DNS 이름, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
+[1]: 클러스터에 접속한 다른 IP 또는 DNS 이름([kubeadm](/ko/docs/reference/setup-tools/kubeadm/) 이 사용하는 로드 밸런서 안정 IP 또는 DNS 이름, `kubernetes`, `kubernetes.default`, `kubernetes.default.svc`,
 `kubernetes.default.svc.cluster`, `kubernetes.default.svc.cluster.local`)
 
 `kind`는 하나 이상의 [x509 키 사용](https://godoc.org/k8s.io/api/certificates/v1beta1#KeyUsage) 종류를 가진다.
@@ -97,7 +97,7 @@ kubeadm 사용자만 해당:
 
 ### 인증서 파일 경로
 
-인증서는 권고하는 파일 경로에 존재해야 한다([kubeadm](/docs/reference/setup-tools/kubeadm/)에서 사용되는 것처럼). 경로는 위치에 관계없이 주어진 파라미터를 사용하여 지정되야 한다.
+인증서는 권고하는 파일 경로에 존재해야 한다([kubeadm](/ko/docs/reference/setup-tools/kubeadm/)에서 사용되는 것처럼). 경로는 위치에 관계없이 주어진 파라미터를 사용하여 지정해야 한다.
 
 | 기본 CN                      | 권고되는 키 파일 경로         | 권고하는 인증서 파일 경로   | 명령어         | 키 파라미터                  | 인증서 파라미터                           |
 |------------------------------|------------------------------|-----------------------------|----------------|------------------------------|-------------------------------------------|
diff --git a/content/ko/docs/setup/production-environment/tools/kubespray.md b/content/ko/docs/setup/production-environment/tools/kubespray.md
index d838845c61..cb0caf175e 100644
--- a/content/ko/docs/setup/production-environment/tools/kubespray.md
+++ b/content/ko/docs/setup/production-environment/tools/kubespray.md
@@ -22,7 +22,7 @@ Kubespray는 [Ansible](https://docs.ansible.com/) 플레이북, [인벤토리](h
     * Flatcar Container Linux by Kinvolk
 * 지속적인 통합 (CI) 테스트
 
-클러스터를 설치해 줄 도구로 유스케이스와 가장 잘 맞는 것을 고르고 싶다면, kubespray를 [kubeadm](/docs/reference/setup-tools/kubeadm/), [kops](/ko/docs/setup/production-environment/tools/kops/)와 [비교한 글](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)을 읽어보자.
+클러스터를 설치해 줄 도구로 유스케이스와 가장 잘 맞는 것을 고르고 싶다면, kubespray를 [kubeadm](/ko/docs/reference/setup-tools/kubeadm/), [kops](/ko/docs/setup/production-environment/tools/kops/)와 [비교한 글](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)을 읽어보자.
 
 <!-- body -->
 
diff --git a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
index fd893ca5de..4c5f690d70 100644
--- a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
+++ b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
@@ -91,7 +91,7 @@ EOF
 
 ## MySQL과 WordPress에 필요한 리소스 구성 추가하기
 
-다음 매니페스트는 MySQL 디플로이먼트 단일 인스턴스를 기술한다. MySQL 컨테이너는 퍼시스턴트볼륨을 /var/lib/mysql에 마운트한다. `MYSQL_ROOT_PASSWORD` 환경변수는 시크릿에서 가져와 데이터베이스 암호로 설정한다.
+다음 매니페스트는 MySQL 디플로이먼트 단일 인스턴스를 기술한다. MySQL 컨케이너는 퍼시스턴트볼륨을 /var/lib/mysql에 마운트한다. `MYSQL_ROOT_PASSWORD` 환경 변수는 시크릿에서 가져와 데이터베이스 암호로 설정한다.
 
 {{< codenew file="application/wordpress/mysql-deployment.yaml" >}}
 

From 90c9da9c867f07fb2da614a1dd8d36069a336190 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 1 Apr 2021 18:12:17 +0100
Subject: [PATCH 435/788] Tidy sysctl task page for GA

---
 .../en/docs/tasks/administer-cluster/sysctl-cluster.md    | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
index 0a0dd8bd1b..5660b590b0 100644
--- a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
+++ b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
@@ -7,17 +7,19 @@ content_type: task
 
 <!-- overview -->
 
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
+
 This document describes how to configure and use kernel parameters within a
 Kubernetes cluster using the {{< glossary_tooltip term_id="sysctl" >}}
 interface.
 
-
-
 ## {{% heading "prerequisites" %}}
 
 
-{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+{{< include "task-tutorial-prereqs.md" >}}
 
+For some steps, you also need to be able to reconfigure the command line
+options for the kubelets running on your cluster.
 
 
 <!-- steps -->

From 8f913ba982ef7d1a0868aa85afdb528edcd9732f Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 1 Apr 2021 18:15:09 +0100
Subject: [PATCH 436/788] Note PodSecurityPolicy deprecation

---
 content/en/docs/tasks/administer-cluster/sysctl-cluster.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
index 5660b590b0..f81623982f 100644
--- a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
+++ b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md
@@ -167,6 +167,8 @@ to schedule those pods onto the right nodes.
 
 ## PodSecurityPolicy
 
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
+
 You can further control which sysctls can be set in pods by specifying lists of
 sysctls or sysctl patterns in the `forbiddenSysctls` and/or
 `allowedUnsafeSysctls` fields of the PodSecurityPolicy. A sysctl pattern ends

From 6c935b6f9098b79e9df996b98da34cb56d53046f Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 1 Apr 2021 20:09:50 +0100
Subject: [PATCH 437/788] Improve docs for NamespaceDefaultLabelName

---
 .../overview/working-with-objects/namespaces.md   | 12 +++++++++++-
 .../services-networking/network-policies.md       | 15 ++++++++++-----
 .../command-line-tools-reference/feature-gates.md |  3 ++-
 .../docs/reference/labels-annotations-taints.md   |  8 +++++++-
 4 files changed, 30 insertions(+), 8 deletions(-)

diff --git a/content/en/docs/concepts/overview/working-with-objects/namespaces.md b/content/en/docs/concepts/overview/working-with-objects/namespaces.md
index b7ae176d7c..8f740c866b 100644
--- a/content/en/docs/concepts/overview/working-with-objects/namespaces.md
+++ b/content/en/docs/concepts/overview/working-with-objects/namespaces.md
@@ -30,7 +30,7 @@ Namespaces are a way to divide cluster resources between multiple users (via [re
 
 It is not necessary to use multiple namespaces to separate slightly different
 resources, such as different versions of the same software: use
-[labels](/docs/concepts/overview/working-with-objects/labels) to distinguish
+{{< glossary_tooltip text="labels" term_id="label" >}} to distinguish
 resources within the same namespace.
 
 ## Working with Namespaces
@@ -114,6 +114,16 @@ kubectl api-resources --namespaced=true
 kubectl api-resources --namespaced=false
 ```
 
+## Automatic labelling
+
+{{< feature-state state="beta" for_k8s_version="1.21" >}}
+
+The Kubernetes control plane sets an immutable {{< glossary_tooltip text="label" term_id="label" >}}
+`kubernetes.io/metadata.name` on all namespaces, provided that the `NamespaceDefaultLabelName`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled.
+The value of the label is the namespace name.
+
+
 ## {{% heading "whatsnext" %}}
 
 * Learn more about [creating a new namespace](/docs/tasks/administer-cluster/namespaces/#creating-a-new-namespace).
diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index a1948c5227..b8d70b9fae 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -266,14 +266,19 @@ supports the `endPort` field in NetworkPolicy specifications.
 
 ## Targeting a Namespace by its name
 
-As of Kubernetes v1.21, an immutable label `kubernetes.io/metadata.name` is added to all
-namespaces. The value of the label is the namespace name. While NetworkPolicy cannot
-target a namespace by its name with some object field, this label now can be used to target
-a specific namespace.
+{{< feature-state state="beta" for_k8s_version="1.21" >}}
+
+The Kubernetes control plane sets an immutable label `kubernetes.io/metadata.name` on all
+namespaces, provided that the `NamespaceDefaultLabelName`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled.
+The value of the label is the namespace name.
+
+While NetworkPolicy cannot target a namespace by its name with some object field, you can use the
+standardized label to target a specific namespace.
 
 ## What you can't do with network policies (at least, not yet)
 
-As of Kubernetes 1.20, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
+As of Kubernetes {{< skew latestVersion >}}, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
 
 - Forcing internal cluster traffic to go through a common gateway (this might be best served with a service mesh or other proxy).
 - Anything TLS related (use a service mesh or ingress controller for this).
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index a613cb09f8..6320a1609c 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -704,7 +704,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
   the volume mounter.
 - `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
   For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).
-- `NamespaceDefaultLabelName`: Enable the API Server to create a default label `kubernetes.io/metadata.name` in all namespaces containing the namespace name.
+- `NamespaceDefaultLabelName`: Configure the API Server to set an immutable {{< glossary_tooltip text="label" term_id="label" >}}
+  `kubernetes.io/metadata.name` on all namespaces, containing the namespace name.
 - `NetworkPolicyEndPort`: Enable use of the field `endPort` in NetworkPolicy objects, allowing the selection of a port range instead of a single port.
 - `NodeDisruptionExclusion`: Enable use of the Node label `node.kubernetes.io/exclude-disruption`
   which prevents nodes from being evacuated during zone failures.
diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 1015d360d1..08861e5811 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -36,7 +36,13 @@ Example: `kubernetes.io/metadata.name=mynamespace`
 
 Used on: Namespaces
 
-Kubernetes API Server defaults this label to the namespace name during admission. This label can be used with any namespace selector, as an example with NetworkPolicy objects.
+When the `NamespaceDefaultLabelName`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled,
+the Kubernetes API server sets this label on all namespaces. The label value is set to
+the name of the namespace.
+
+This is useful if you want to target a specific namespace with a label
+{{< glossary_tooltip text="selector" term_id="selector" >}}.
 
 ## beta.kubernetes.io/arch (deprecated)
 

From 0bfff0bc5cf222afdf77f3f7ed261a19460a6835 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 1 Apr 2021 20:21:07 +0100
Subject: [PATCH 438/788] Remove statement about the future

---
 .../en/docs/concepts/services-networking/network-policies.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index b8d70b9fae..764fedbcc7 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -278,7 +278,7 @@ standardized label to target a specific namespace.
 
 ## What you can't do with network policies (at least, not yet)
 
-As of Kubernetes {{< skew latestVersion >}}, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
+As of Kubernetes {{< skew latestVersion >}}, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.
 
 - Forcing internal cluster traffic to go through a common gateway (this might be best served with a service mesh or other proxy).
 - Anything TLS related (use a service mesh or ingress controller for this).

From 89277ad57547279008018997499383d7f935b981 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Fri, 2 Apr 2021 02:04:38 +0300
Subject: [PATCH 439/788] [ja] fix bind-address on scheduler

---
 .../production-environment/tools/kubeadm/control-plane-flags.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md b/content/ja/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
index b2b41f9128..58cd1ca133 100644
--- a/content/ja/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
+++ b/content/ja/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
@@ -75,7 +75,7 @@ kind: ClusterConfiguration
 kubernetesVersion: v1.16.0
 scheduler:
   extraArgs:
-    address: 0.0.0.0
+    bind-address: 0.0.0.0
     config: /home/johndoe/schedconfig.yaml
     kubeconfig: /home/johndoe/kubeconfig.yaml
 ```

From d439f4dd1749aa540ce5c478e763cbc975b5378a Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Tue, 30 Mar 2021 17:33:55 +0800
Subject: [PATCH 440/788] [zh] translate task/Install and Set Up kubectl on
 Linux

---
 .../optional-kubectl-configs-bash-linux.md    | 109 ++++++++
 .../docs/tasks/tools/install-kubectl-linux.md | 262 ++++++++++++++++++
 2 files changed, 371 insertions(+)
 create mode 100644 content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md
 create mode 100644 content/zh/docs/tasks/tools/install-kubectl-linux.md

diff --git a/content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md b/content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md
new file mode 100644
index 0000000000..eaee1d9176
--- /dev/null
+++ b/content/zh/docs/tasks/tools/included/optional-kubectl-configs-bash-linux.md
@@ -0,0 +1,109 @@
+---
+title: "Linux 系统中的 bash 自动补全功能"
+description: "Linux 系统中 bash 自动补全功能的一些可选配置。"
+headless: true
+---
+<!-- 
+---
+title: "bash auto-completion on Linux"
+description: "Some optional configuration for bash auto-completion on Linux."
+headless: true
+---
+-->
+
+<!-- 
+### Introduction
+-->
+### 简介 {#introduction}
+
+<!-- 
+The kubectl completion script for Bash can be generated with the command `kubectl completion bash`. Sourcing the completion script in your shell enables kubectl autocompletion.
+
+However, the completion script depends on [**bash-completion**](https://github.com/scop/bash-completion), which means that you have to install this software first (you can test if you have bash-completion already installed by running `type _init_completion`).
+-->
+kubectl 的 Bash 补全脚本可以用命令 `kubectl completion bash` 生成。
+在 shell 中导入（Sourcing）补全脚本，将启用 kubectl 自动补全功能。
+
+然而，补全脚本依赖于工具 [**bash-completion**](https://github.com/scop/bash-completion)，
+所以要先安装它（可以用命令 `type _init_completion` 检查 bash-completion 是否已安装）。
+
+<!-- 
+### Install bash-completion
+-->
+### 安装 bash-completion {#install-bash-comletion}
+
+<!-- 
+bash-completion is provided by many package managers (see [here](https://github.com/scop/bash-completion#installation)). You can install it with `apt-get install bash-completion` or `yum install bash-completion`, etc.
+
+The above commands create `/usr/share/bash-completion/bash_completion`, which is the main script of bash-completion. Depending on your package manager, you have to manually source this file in your `~/.bashrc` file.
+
+To find out, reload your shell and run `type _init_completion`. If the command succeeds, you're already set, otherwise add the following to your `~/.bashrc` file:
+-->
+很多包管理工具均支持 bash-completion（参见[这里](https://github.com/scop/bash-completion#installation)）。
+可以通过 `apt-get install bash-completion` 或 `yum install bash-completion` 等命令来安装它。
+
+上述命令将创建文件 `/usr/share/bash-completion/bash_completion`，它是 bash-completion 的主脚本。
+依据包管理工具的实际情况，你需要在 `~/.bashrc` 文件中手工导入此文件。
+
+要查看结果，请重新加载你的 shell，并运行命令 `type _init_completion`。
+如果命令执行成功，则设置完成，否则将下面内容添加到文件 `~/.bashrc` 中：
+
+```bash
+source /usr/share/bash-completion/bash_completion
+```
+
+<!-- 
+Reload your shell and verify that bash-completion is correctly installed by typing `type _init_completion`.
+-->
+重新加载 shell，再输入命令 `type _init_completion` 来验证 bash-completion 的安装状态。
+
+<!-- 
+### Enable kubectl autocompletion
+-->
+### 启动 kubectl 自动补全功能 {#enable-kubectl-autocompletion}
+
+<!-- 
+You now need to ensure that the kubectl completion script gets sourced in all your shell sessions. There are two ways in which you can do this:
+-->
+你现在需要确保一点：kubectl 补全脚本已经导入（sourced）到 shell 会话中。
+这里有两种验证方法：
+
+<!-- 
+- Source the completion script in your `~/.bashrc` file:
+-->
+- 在文件 `~/.bashrc` 中导入（source）补全脚本：
+
+  ```bash
+  echo 'source <(kubectl completion bash)' >>~/.bashrc
+  ```
+
+<!-- 
+- Add the completion script to the `/etc/bash_completion.d` directory:
+-->
+- 将补全脚本添加到目录 `/etc/bash_completion.d` 中：
+
+  ```bash
+  kubectl completion bash >/etc/bash_completion.d/kubectl
+  ```
+
+<!-- 
+If you have an alias for kubectl, you can extend shell completion to work with that alias:
+-->
+如果 kubectl 有关联的别名，你可以扩展 shell 补全来适配此别名：
+
+```bash
+echo 'alias k=kubectl' >>~/.bashrc
+echo 'complete -F __start_kubectl k' >>~/.bashrc
+```
+
+{{< note >}}
+<!-- 
+bash-completion sources all completion scripts in `/etc/bash_completion.d`.
+-->
+bash-completion 负责导入 `/etc/bash_completion.d` 目录中的所有补全脚本。
+{{< /note >}}
+
+<!-- 
+Both approaches are equivalent. After reloading your shell, kubectl autocompletion should be working.
+-->
+两种方式的效果相同。重新加载 shell 后，kubectl 自动补全功能即可生效。
diff --git a/content/zh/docs/tasks/tools/install-kubectl-linux.md b/content/zh/docs/tasks/tools/install-kubectl-linux.md
new file mode 100644
index 0000000000..8a5f4b8b67
--- /dev/null
+++ b/content/zh/docs/tasks/tools/install-kubectl-linux.md
@@ -0,0 +1,262 @@
+---
+title: 在 Linux 系统中安装并设置 kubectl
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: 在 Linux 系统中安装 kubectl
+---
+<!-- 
+---
+reviewers:
+- mikedanese
+title: Install and Set Up kubectl on Linux
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: Install kubectl on Linux
+---
+-->
+
+## {{% heading "prerequisites" %}}
+
+<!-- 
+You must use a kubectl version that is within one minor version difference of your cluster.
+For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master.
+Using the latest version of kubectl helps avoid unforeseen issues.
+-->
+kubectl 版本和集群版本之间的差异必须在一个小版本号内。
+例如：v1.2 版本的客户端只能与 v1.1、v1.2 和 v1.3 版本的集群一起工作。
+用最新版的 kubectl 有助于避免不可预见的问题。
+
+<!-- 
+## Install kubectl on Linux
+-->
+## 在 Linux 系统中安装 kubectl {#install-kubectl-on-linux}
+
+<!-- 
+The following methods exist for installing kubectl on Linux:
+-->
+在 Linux 系统中安装 kubectl 有如下几种方法：
+
+- [{{% heading "prerequisites" %}}](#{{% heading "prerequisites" %}})
+- [在 Linux 系统中安装 kubectl](#install-kubectl-on-linux)
+  - [用 curl 在 Linux 系统中安装 kubectl](#install-kubectl-binary-with-curl-on-linux)
+  - [用原生包管理工具安装](#install-using-native-package-management)
+  - [用其他包管理工具安装](#install-using-other-package-management)
+  - [作为谷歌云 SDK 的一部分，在 Linux 中安装](#install-on-linux-as-part-of-the-google-cloud-sdk)
+- [验证 kubectl 配置](#verify-kubectl-configration)
+- [可选的 kubectl 配置](#optional-kubectl-configurations)
+  - [启用 shell 自动补全功能](#enable-shell-autocompletion)
+- [{{% heading "whatsnext" %}}](#{{% heading "whatsnext" %}})
+
+<!-- 
+### Install kubectl binary with curl on Linux
+-->
+### 用 curl 在 Linux 系统中安装 kubectl {#install-kubectl-binary-with-curl-on-linux}
+
+<!-- 
+1. Download the latest release with the command:
+-->
+1. 用以下命令下载最新发行版：
+
+   ```bash
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+   ```
+
+   {{< note >}}
+<!-- 
+To download a specific version, replace the `$(curl -L -s https://dl.k8s.io/release/stable.txt)` portion of the command with the specific version.
+
+For example, to download version {{< param "fullversion" >}} on Linux, type:
+-->
+如需下载某个指定的版本，请用指定版本号替换该命令的这一部分： `$(curl -L -s https://dl.k8s.io/release/stable.txt)`。
+
+例如，要在 Linux 中下载 {{< param "fullversion" >}} 版本，请输入：
+
+   ```bash
+   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
+   ```
+   {{< /note >}}
+
+   <!-- 
+   1. Validate the binary (optional)
+
+      Download the kubectl checksum file:
+   -->
+1. 验证该可执行文件（可选步骤）
+
+   下载 kubectl 校验和文件：
+
+   ```bash
+   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl.sha256"
+   ```
+
+   <!-- 
+   Validate the kubectl binary against the checksum file:
+   -->
+   基于校验和文件，验证 kubectl 的可执行文件：
+
+   ```bash
+   echo "$(<kubectl.sha256) kubectl" | sha256sum --check
+   ```
+
+   <!-- 
+   If valid, the output is:
+   -->
+   验证通过时，输出为：
+
+   ```console
+   kubectl: OK
+   ```
+
+   <!-- 
+   If the check fails, `sha256` exits with nonzero status and prints output similar to:
+   -->
+   验证失败时，`sha256` 将以非零值退出，并打印如下输出：
+
+   ```bash
+   kubectl: FAILED
+   sha256sum: WARNING: 1 computed checksum did NOT match
+   ```
+
+   {{< note >}}
+   <!-- 
+   Download the same version of the binary and checksum.
+   -->
+   下载的 kubectl 与校验和文件版本必须相同。
+   {{< /note >}}
+
+   <!-- 
+   1. Install kubectl
+   -->
+1. 安装 kubectl
+
+   ```bash
+   sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
+   ```
+
+   {{< note >}}
+   <!-- 
+   If you do not have root access on the target system, you can still install kubectl to the `~/.local/bin` directory:
+   -->
+   即使你没有目标系统的 root 权限，仍然可以将 kubectl 安装到目录 `~/.local/bin` 中：
+
+   ```bash
+   mkdir -p ~/.local/bin/kubectl
+   mv ./kubectl ~/.local/bin/kubectl
+   # and then add ~/.local/bin/kubectl to $PATH
+   ```
+
+   {{< /note >}}
+
+   <!-- 
+   1. Test to ensure the version you installed is up-to-date:
+   -->
+1. 执行测试，以保障你安装的版本是最新的：
+
+   ```bash
+   kubectl version --client
+   ```
+
+<!-- 
+### Install using native package management
+-->
+### 用原生包管理工具安装 {#install-using-native-package-management}
+
+{{< tabs name="kubectl_install" >}}
+{{< tab name="Ubuntu、Debian 或 HypriotOS" codelang="bash" >}}
+sudo apt-get update && sudo apt-get install -y apt-transport-https gnupg2 curl
+curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
+echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
+sudo apt-get update
+sudo apt-get install -y kubectl
+{{< /tab >}}
+
+{{< tab name="CentOS、RHEL 或 Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
+[kubernetes]
+name=Kubernetes
+baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
+enabled=1
+gpgcheck=1
+repo_gpgcheck=1
+gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
+EOF
+yum install -y kubectl
+{{< /tab >}}
+{{< /tabs >}}
+
+<!-- 
+### Install using other package management
+-->
+### 用其他包管理工具安装 {#install-using-other-package-management}
+
+{{< tabs name="other_kubectl_install" >}}
+{{% tab name="Snap" %}}
+<!-- 
+If you are on Ubuntu or another Linux distribution that support [snap](https://snapcraft.io/docs/core/install) package manager, kubectl is available as a [snap](https://snapcraft.io/) application.
+-->
+如果你使用的 Ubuntu 或其他 Linux 发行版，内建支持 [snap](https://snapcraft.io/docs/core/install) 包管理工具，
+则可用 [snap](https://snapcraft.io/) 命令安装 kubectl。
+
+```shell
+snap install kubectl --classic
+kubectl version --client
+```
+
+{{% /tab %}}
+
+{{% tab name="Homebrew" %}}
+<!-- 
+If you are on Linux and using [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) package manager, kubectl is available for [installation](https://docs.brew.sh/Homebrew-on-Linux#install).
+-->
+如果你使用 Linux 系统，并且装了 [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) 包管理工具，
+则可以使用这种方式[安装](https://docs.brew.sh/Homebrew-on-Linux#install) kubectl。
+
+```shell
+brew install kubectl
+kubectl version --client
+```
+
+{{% /tab %}}
+
+{{< /tabs >}}
+
+<!-- 
+### Install on Linux as part of the Google Cloud SDK
+-->
+### 作为谷歌云 SDK 的一部分，在 Linux 上安装 {#install-on-linux-as-part-of-the-google-cloud-sdk}
+
+{{< include "included/install-kubectl-gcloud.md" >}}
+
+<!-- 
+## Verify kubectl configuration
+-->
+## 验证 kubectl 配置 {#verify-kubectl-configration}
+
+{{< include "included/verify-kubectl.md" >}}
+
+## kubectl 的可选配置 {#optional-kubectl-configurations}
+
+### 启用 shell 自动补全功能 {#enable-shell-autocompletion}
+
+<!-- 
+kubectl provides autocompletion support for Bash and Zsh, which can save you a lot of typing.
+
+Below are the procedures to set up autocompletion for Bash and Zsh.
+-->
+kubectl 为 Bash 和 Zsh 提供自动补全功能，可以减轻许多输入的负担。
+
+下面是为 Bash 和 Zsh 设置自动补全功能的操作步骤。
+
+{{< tabs name="kubectl_autocompletion" >}}
+{{< tab name="Bash" include="included/optional-kubectl-configs-bash-linux.md" />}}
+{{< tab name="Zsh" include="included/optional-kubectl-configs-zsh.md" />}}
+{{< /tabs >}}
+
+## {{% heading "whatsnext" %}}
+
+{{< include "included/kubectl-whats-next.md" >}}

From b28250b68f4f0e87b8f77031a8f399af68aa417e Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 18 Feb 2021 16:42:27 +0800
Subject: [PATCH 441/788] Add reference for client-authentication v1beta1

This is a reference for client authentication API generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include client-authentication
```
---
 content/en/docs/reference/_index.md           |   4 +
 .../access-authn-authz/authentication.md      |   9 +-
 .../client-authentication.v1beta1.md          | 252 ++++++++++++++++++
 3 files changed, 264 insertions(+), 1 deletion(-)
 create mode 100644 content/en/docs/reference/config-api/client-authentication.v1beta1.md

diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 00adcad7d7..397a200286 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -66,6 +66,10 @@ client libraries:
 
 * [kube-proxy configuration (v1alpha1)](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
 
+## Config APIs
+
+* [Client authentication API (v1beta1)](/docs/reference/config-api/client-authentication.v1beta1/)
+
 ## Design Docs
 
 An archive of the design docs for Kubernetes functionality. Good starting points are
diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md
index 0a830586f0..d09ffa23a2 100644
--- a/content/en/docs/reference/access-authn-authz/authentication.md
+++ b/content/en/docs/reference/access-authn-authz/authentication.md
@@ -955,7 +955,8 @@ When run from an interactive session, `stdin` is exposed directly to the plugin.
 [TTY check](https://godoc.org/golang.org/x/crypto/ssh/terminal#IsTerminal) to determine if it's
 appropriate to prompt a user interactively.
 
-To use bearer token credentials, the plugin returns a token in the status of the `ExecCredential`.
+To use bearer token credentials, the plugin returns a token in the status of the
+[`ExecCredential`](/docs/reference/config-api/client-authentication.v1beta1/#client-authentication-k8s-io-v1beta1-ExecCredential)
 
 ```json
 {
@@ -1005,6 +1006,7 @@ RFC3339 timestamp. Presence or absence of an expiry has the following impact:
   }
 }
 ```
+
 To enable the exec plugin to obtain cluster-specific information, set `provideClusterInfo` on the `user.exec`
 field in the [kubeconfig](/docs/concepts/configuration/organize-cluster-access-kubeconfig/).
 The plugin will then be supplied with an environment variable, `KUBERNETES_EXEC_INFO`.
@@ -1029,3 +1031,8 @@ The following `ExecCredential` manifest describes a cluster information sample.
   }
 }
 ```
+
+## {{% heading "whatsnext" %}}
+
+* Read the [client authentication reference (v1beta1)](/docs/reference/config-api/client-authentication.v1beta1/)
+
diff --git a/content/en/docs/reference/config-api/client-authentication.v1beta1.md b/content/en/docs/reference/config-api/client-authentication.v1beta1.md
new file mode 100644
index 0000000000..e78edd23f6
--- /dev/null
+++ b/content/en/docs/reference/config-api/client-authentication.v1beta1.md
@@ -0,0 +1,252 @@
+---
+title: Client Authentication (v1beta1)
+content_type: tool-reference
+package: client.authentication.k8s.io/v1beta1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [ExecCredential](#client-authentication-k8s-io-v1beta1-ExecCredential)
+  
+    
+
+
+## `ExecCredential`     {#client-authentication-k8s-io-v1beta1-ExecCredential}
+    
+
+
+
+
+ExecCredential is used by exec-based plugins to communicate credentials to
+HTTP transports.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>client.authentication.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>ExecCredential</code></td></tr>
+    
+
+  
+  
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#client-authentication-k8s-io-v1beta1-ExecCredentialSpec"><code>ExecCredentialSpec</code></a>
+</td>
+<td>
+   Spec holds information passed to the plugin by the transport.</td>
+</tr>
+    
+  
+<tr><td><code>status</code><br/>
+<a href="#client-authentication-k8s-io-v1beta1-ExecCredentialStatus"><code>ExecCredentialStatus</code></a>
+</td>
+<td>
+   Status is filled in by the plugin and holds the credentials that the transport
+should use to contact the API.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Cluster`     {#client-authentication-k8s-io-v1beta1-Cluster}
+    
+
+
+
+**Appears in:**
+
+- [ExecCredentialSpec](#client-authentication-k8s-io-v1beta1-ExecCredentialSpec)
+
+
+Cluster contains information to allow an exec plugin to communicate
+with the kubernetes cluster being authenticated to.
+
+To ensure that this struct contains everything someone would need to communicate
+with a kubernetes cluster (just like they would via a kubeconfig), the fields
+should shadow "k8s.io/client-go/tools/clientcmd/api/v1".Cluster, with the exception
+of CertificateAuthority, since CA data will always be passed to the plugin as bytes.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>server</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server is the address of the kubernetes cluster (https://hostname:port).</td>
+</tr>
+    
+  
+<tr><td><code>tls-server-name</code><br/>
+<code>string</code>
+</td>
+<td>
+   TLSServerName is passed to the server for SNI and is used in the client to
+check server certificates against. If ServerName is empty, the hostname
+used to contact the server is used.</td>
+</tr>
+    
+  
+<tr><td><code>insecure-skip-tls-verify</code><br/>
+<code>bool</code>
+</td>
+<td>
+   InsecureSkipTLSVerify skips the validity check for the server's certificate.
+This will make your HTTPS connections insecure.</td>
+</tr>
+    
+  
+<tr><td><code>certificate-authority-data</code><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CAData contains PEM-encoded certificate authority certificates.
+If empty, system roots should be used.</td>
+</tr>
+    
+  
+<tr><td><code>proxy-url</code><br/>
+<code>string</code>
+</td>
+<td>
+   ProxyURL is the URL to the proxy to be used for all requests to this
+cluster.</td>
+</tr>
+    
+  
+<tr><td><code>config</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime/#RawExtension"><code>k8s.io/apimachinery/pkg/runtime.RawExtension</code></a>
+</td>
+<td>
+   Config holds additional config data that is specific to the exec
+plugin with regards to the cluster being authenticated to.
+
+This data is sourced from the clientcmd Cluster object's
+extensions[client.authentication.k8s.io/exec] field:
+
+clusters:
+- name: my-cluster
+  cluster:
+    ...
+    extensions:
+    - name: client.authentication.k8s.io/exec  # reserved extension name for per cluster exec config
+      extension:
+        audience: 06e3fbd18de8  # arbitrary config
+
+In some environments, the user config may be exactly the same across many clusters
+(i.e. call this exec plugin) minus some details that are specific to each cluster
+such as the audience.  This field allows the per cluster config to be directly
+specified with the cluster info.  Using this field to store secret data is not
+recommended as one of the prime benefits of exec plugins is that no secrets need
+to be stored directly in the kubeconfig.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExecCredentialSpec`     {#client-authentication-k8s-io-v1beta1-ExecCredentialSpec}
+    
+
+
+
+**Appears in:**
+
+- [ExecCredential](#client-authentication-k8s-io-v1beta1-ExecCredential)
+
+
+ExecCredentialSpec holds request and runtime specific information provided by
+the transport.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>cluster</code><br/>
+<a href="#client-authentication-k8s-io-v1beta1-Cluster"><code>Cluster</code></a>
+</td>
+<td>
+   Cluster contains information to allow an exec plugin to communicate with the
+kubernetes cluster being authenticated to. Note that Cluster is non-nil only
+when provideClusterInfo is set to true in the exec provider config (i.e.,
+ExecConfig.ProvideClusterInfo).</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExecCredentialStatus`     {#client-authentication-k8s-io-v1beta1-ExecCredentialStatus}
+    
+
+
+
+**Appears in:**
+
+- [ExecCredential](#client-authentication-k8s-io-v1beta1-ExecCredential)
+
+
+ExecCredentialStatus holds credentials for the transport to use.
+
+Token and ClientKeyData are sensitive fields. This data should only be
+transmitted in-memory between client and exec plugin process. Exec plugin
+itself should at least be protected via file permissions.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>expirationTimestamp</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#time-v1-meta"><code>meta/v1.Time</code></a>
+</td>
+<td>
+   ExpirationTimestamp indicates a time when the provided credentials expire.</td>
+</tr>
+    
+  
+<tr><td><code>token</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Token is a bearer token used by the client for request authentication.</td>
+</tr>
+    
+  
+<tr><td><code>clientCertificateData</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   PEM-encoded client TLS certificates (including intermediates, if any).</td>
+</tr>
+    
+  
+<tr><td><code>clientKeyData</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   PEM-encoded private key for the above certificate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  

From 94e021ccf639c379b602c40a4d1e497a7d08e1a5 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 18 Feb 2021 15:58:36 +0800
Subject: [PATCH 442/788] Add reference for audit API group

This is a reference for audit.k8s.io/v1 API group generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include apiserver-audit
```
---
 content/en/docs/reference/_index.md           |  18 +-
 .../config-api/apiserver-audit.v1.md          | 620 ++++++++++++++++++
 .../tasks/debug-application-cluster/audit.md  |  17 +-
 3 files changed, 641 insertions(+), 14 deletions(-)
 create mode 100644 content/en/docs/reference/config-api/apiserver-audit.v1.md

diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 29dfca82b7..7315d27fbb 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -52,7 +52,9 @@ client libraries:
 * [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - The
   primary agent that runs on each node. The kubelet takes a set of PodSpecs
   and ensures that the described containers are running and healthy.
-* [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) - REST API that validates and configures data for API objects such as  pods, services, replication controllers.
+* [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) -
+  REST API that validates and configures data for API objects such as  pods,
+  services, replication controllers.
 * [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) - Daemon that embeds the core control loops shipped with Kubernetes.
 * [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - Can
   do simple TCP/UDP stream forwarding or round-robin TCP/UDP forwarding across
@@ -64,13 +66,15 @@ client libraries:
 
 ## Config APIs
 
+This section hosts the documentation for "unpublished" APIs which are used to
+configure  kubernetes components or tools. Most of these APIs are not exposed
+by the API server in a RESTful way though they are essential for a user or an
+operator to use or manage a cluster.
+
+* [kubelet configuration (v1beta1)](/docs/reference/config-api/kubelet-config.v1beta1/)
+* [kube-scheduler configuration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
 * [kube-proxy configuration (v1alpha1)](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
-* [kube-scheduler config (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
-
-
-## Config APIs
-
-* [kubelet config (v1beta1)](/docs/reference/config-api/kubelet-config.v1beta1/)
+* [`audit.k8s.io/v1` API](/docs/reference/config-api/apiserver-audit.v1/)
 
 ## Design Docs
 
diff --git a/content/en/docs/reference/config-api/apiserver-audit.v1.md b/content/en/docs/reference/config-api/apiserver-audit.v1.md
new file mode 100644
index 0000000000..f0f36c2344
--- /dev/null
+++ b/content/en/docs/reference/config-api/apiserver-audit.v1.md
@@ -0,0 +1,620 @@
+---
+title: kube-apiserver Audit Configuration (v1)
+content_type: tool-reference
+package: audit.k8s.io/v1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [Event](#audit-k8s-io-v1-Event)
+- [EventList](#audit-k8s-io-v1-EventList)
+- [Policy](#audit-k8s-io-v1-Policy)
+- [PolicyList](#audit-k8s-io-v1-PolicyList)
+  
+    
+
+
+## `Event`     {#audit-k8s-io-v1-Event}
+    
+
+
+
+**Appears in:**
+
+- [EventList](#audit-k8s-io-v1-EventList)
+
+
+Event captures all the information that can be included in an API audit log.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Event</code></td></tr>
+    
+
+  
+  
+<tr><td><code>level</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Level"><code>Level</code></a>
+</td>
+<td>
+   AuditLevel at which event was generated</td>
+</tr>
+    
+  
+<tr><td><code>auditID</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/types#UID"><code>k8s.io/apimachinery/pkg/types.UID</code></a>
+</td>
+<td>
+   Unique audit ID, generated for each request.</td>
+</tr>
+    
+  
+<tr><td><code>stage</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Stage"><code>Stage</code></a>
+</td>
+<td>
+   Stage of the request handling when this event instance was generated.</td>
+</tr>
+    
+  
+<tr><td><code>requestURI</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   RequestURI is the request URI as sent by the client to a server.</td>
+</tr>
+    
+  
+<tr><td><code>verb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb is the kubernetes verb associated with the request.
+For non-resource requests, this is the lower-cased HTTP method.</td>
+</tr>
+    
+  
+<tr><td><code>user</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#userinfo-v1-authentication"><code>authentication/v1.UserInfo</code></a>
+</td>
+<td>
+   Authenticated user information.</td>
+</tr>
+    
+  
+<tr><td><code>impersonatedUser</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#userinfo-v1-authentication"><code>authentication/v1.UserInfo</code></a>
+</td>
+<td>
+   Impersonated user information.</td>
+</tr>
+    
+  
+<tr><td><code>sourceIPs</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   Source IPs, from where the request originated and intermediate proxies.</td>
+</tr>
+    
+  
+<tr><td><code>userAgent</code><br/>
+<code>string</code>
+</td>
+<td>
+   UserAgent records the user agent string reported by the client.
+Note that the UserAgent is provided by the client, and must not be trusted.</td>
+</tr>
+    
+  
+<tr><td><code>objectRef</code><br/>
+<a href="#audit-k8s-io-v1-ObjectReference"><code>ObjectReference</code></a>
+</td>
+<td>
+   Object reference this request is targeted at.
+Does not apply for List-type requests, or non-resource requests.</td>
+</tr>
+    
+  
+<tr><td><code>responseStatus</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#status-v1-meta"><code>meta/v1.Status</code></a>
+</td>
+<td>
+   The response status, populated even when the ResponseObject is not a Status type.
+For successful responses, this will only include the Code and StatusSuccess.
+For non-status type error responses, this will be auto-populated with the error Message.</td>
+</tr>
+    
+  
+<tr><td><code>requestObject</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime#Unknown"><code>k8s.io/apimachinery/pkg/runtime.Unknown</code></a>
+</td>
+<td>
+   API object from the request, in JSON format. The RequestObject is recorded as-is in the request
+(possibly re-encoded as JSON), prior to version conversion, defaulting, admission or
+merging. It is an external versioned object type, and may not be a valid object on its own.
+Omitted for non-resource requests.  Only logged at Request Level and higher.</td>
+</tr>
+    
+  
+<tr><td><code>responseObject</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime#Unknown"><code>k8s.io/apimachinery/pkg/runtime.Unknown</code></a>
+</td>
+<td>
+   API object returned in the response, in JSON. The ResponseObject is recorded after conversion
+to the external type, and serialized as JSON.  Omitted for non-resource requests.  Only logged
+at Response Level.</td>
+</tr>
+    
+  
+<tr><td><code>requestReceivedTimestamp</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#microtime-v1-meta"><code>meta/v1.MicroTime</code></a>
+</td>
+<td>
+   Time the request reached the apiserver.</td>
+</tr>
+    
+  
+<tr><td><code>stageTimestamp</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#microtime-v1-meta"><code>meta/v1.MicroTime</code></a>
+</td>
+<td>
+   Time the request reached current audit stage.</td>
+</tr>
+    
+  
+<tr><td><code>annotations</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Annotations is an unstructured key value map stored with an audit event that may be set by
+plugins invoked in the request serving chain, including authentication, authorization and
+admission plugins. Note that these annotations are for the audit event, and do not correspond
+to the metadata.annotations of the submitted object. Keys should uniquely identify the informing
+component to avoid name collisions (e.g. podsecuritypolicy.admission.k8s.io/policy). Values
+should be short. Annotations are included in the Metadata level.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `EventList`     {#audit-k8s-io-v1-EventList}
+    
+
+
+
+
+EventList is a list of audit Events.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>EventList</code></td></tr>
+    
+
+  
+  
+<tr><td><code>metadata</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#listmeta-v1-meta"><code>meta/v1.ListMeta</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>items</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Event"><code>[]Event</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Policy`     {#audit-k8s-io-v1-Policy}
+    
+
+
+
+**Appears in:**
+
+- [PolicyList](#audit-k8s-io-v1-PolicyList)
+
+
+Policy defines the configuration of audit logging, and the rules for how different request
+categories are logged.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Policy</code></td></tr>
+    
+
+  
+  
+<tr><td><code>metadata</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#objectmeta-v1-meta"><code>meta/v1.ObjectMeta</code></a>
+</td>
+<td>
+   ObjectMeta is included for interoperability with API infrastructure.Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+    
+  
+<tr><td><code>rules</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-PolicyRule"><code>[]PolicyRule</code></a>
+</td>
+<td>
+   Rules specify the audit Level a request should be recorded at.
+A request may match multiple rules, in which case the FIRST matching rule is used.
+The default audit level is None, but can be overridden by a catch-all rule at the end of the list.
+PolicyRules are strictly ordered.</td>
+</tr>
+    
+  
+<tr><td><code>omitStages</code><br/>
+<a href="#audit-k8s-io-v1-Stage"><code>[]Stage</code></a>
+</td>
+<td>
+   OmitStages is a list of stages for which no events are created. Note that this can also
+be specified per rule in which case the union of both are omitted.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PolicyList`     {#audit-k8s-io-v1-PolicyList}
+    
+
+
+
+
+PolicyList is a list of audit Policies.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>PolicyList</code></td></tr>
+    
+
+  
+  
+<tr><td><code>metadata</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#listmeta-v1-meta"><code>meta/v1.ListMeta</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>items</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Policy"><code>[]Policy</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `GroupResources`     {#audit-k8s-io-v1-GroupResources}
+    
+
+
+
+**Appears in:**
+
+- [PolicyRule](#audit-k8s-io-v1-PolicyRule)
+
+
+GroupResources represents resource kinds in an API group.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>group</code><br/>
+<code>string</code>
+</td>
+<td>
+   Group is the name of the API group that contains the resources.
+The empty string represents the core API group.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   Resources is a list of resources this rule applies to.
+
+For example:
+'pods' matches pods.
+'pods/log' matches the log subresource of pods.
+'&lowast;' matches all resources and their subresources.
+'pods/&lowast;' matches all subresources of pods.
+'&lowast;/scale' matches all scale subresources.
+
+If wildcard is present, the validation rule will ensure resources do not
+overlap with each other.
+
+An empty list implies all resources and subresources in this API groups apply.</td>
+</tr>
+    
+  
+<tr><td><code>resourceNames</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   ResourceNames is a list of resource instance names that the policy matches.
+Using this field requires Resources to be specified.
+An empty list implies that every instance of the resource is matched.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Level`     {#audit-k8s-io-v1-Level}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [Event](#audit-k8s-io-v1-Event)
+
+- [PolicyRule](#audit-k8s-io-v1-PolicyRule)
+
+
+Level defines the amount of information logged during auditing
+
+
+    
+
+
+## `ObjectReference`     {#audit-k8s-io-v1-ObjectReference}
+    
+
+
+
+**Appears in:**
+
+- [Event](#audit-k8s-io-v1-Event)
+
+
+ObjectReference contains enough information to let you inspect or modify the referred object.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>resource</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>namespace</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>name</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>uid</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/types#UID"><code>k8s.io/apimachinery/pkg/types.UID</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>apiGroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   APIGroup is the name of the API group that contains the referred object.
+The empty string represents the core API group.</td>
+</tr>
+    
+  
+<tr><td><code>apiVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   APIVersion is the version of the API group that contains the referred object.</td>
+</tr>
+    
+  
+<tr><td><code>resourceVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>subresource</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PolicyRule`     {#audit-k8s-io-v1-PolicyRule}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#audit-k8s-io-v1-Policy)
+
+
+PolicyRule maps requests based off metadata to an audit Level.
+Requests must match the rules of every field (an intersection of rules).
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>level</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Level"><code>Level</code></a>
+</td>
+<td>
+   The Level that requests matching this rule are recorded at.</td>
+</tr>
+    
+  
+<tr><td><code>users</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   The users (by authenticated user name) this rule applies to.
+An empty list implies every user.</td>
+</tr>
+    
+  
+<tr><td><code>userGroups</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   The user groups this rule applies to. A user is considered matching
+if it is a member of any of the UserGroups.
+An empty list implies every user group.</td>
+</tr>
+    
+  
+<tr><td><code>verbs</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   The verbs that match this rule.
+An empty list implies every verb.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code><br/>
+<a href="#audit-k8s-io-v1-GroupResources"><code>[]GroupResources</code></a>
+</td>
+<td>
+   Resources that this rule matches. An empty list implies all kinds in all API groups.</td>
+</tr>
+    
+  
+<tr><td><code>namespaces</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   Namespaces that this rule matches.
+The empty string "" matches non-namespaced resources.
+An empty list implies every namespace.</td>
+</tr>
+    
+  
+<tr><td><code>nonResourceURLs</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   NonResourceURLs is a set of URL paths that should be audited.
+&lowast;s are allowed, but only as the full, final step in the path.
+Examples:
+ "/metrics" - Log requests for apiserver metrics
+ "/healthz&lowast;" - Log all health checks</td>
+</tr>
+    
+  
+<tr><td><code>omitStages</code><br/>
+<a href="#audit-k8s-io-v1-Stage"><code>[]Stage</code></a>
+</td>
+<td>
+   OmitStages is a list of stages for which no events are created. Note that this can also
+be specified policy wide in which case the union of both are omitted.
+An empty list means no restrictions will apply.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Stage`     {#audit-k8s-io-v1-Stage}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [Event](#audit-k8s-io-v1-Event)
+
+- [Policy](#audit-k8s-io-v1-Policy)
+
+- [PolicyRule](#audit-k8s-io-v1-PolicyRule)
+
+
+Stage defines the stages in request handling that audit events may be generated.
+
+
+    
+  
diff --git a/content/en/docs/tasks/debug-application-cluster/audit.md b/content/en/docs/tasks/debug-application-cluster/audit.md
index ab4c0c75f7..2f8e1c9875 100644
--- a/content/en/docs/tasks/debug-application-cluster/audit.md
+++ b/content/en/docs/tasks/debug-application-cluster/audit.md
@@ -46,7 +46,9 @@ Each request can be recorded with an associated _stage_. The defined stages are:
 - `Panic` - Events generated when a panic occurred.
 
 {{< note >}}
-Audit events are different from the
+The configuration of an
+[Audit Event configuration](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Event)
+is different from the
 [Event](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#event-v1-core)
 API object.
 {{< /note >}}
@@ -59,7 +61,7 @@ Memory consumption depends on the audit logging configuration.
 
 Audit policy defines rules about what events should be recorded and what data
 they should include. The audit policy object structure is defined in the
-[`audit.k8s.io` API group](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/pkg/apis/audit/v1/types.go).
+[`audit.k8s.io` API group](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Policy).
 When an event is processed, it's
 compared against the list of rules in order. The first matching rule sets the
 _audit level_ of the event. The defined audit levels are:
@@ -95,6 +97,9 @@ If you're crafting your own audit profile, you can use the audit profile for Goo
 [configure-helper.sh](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh)
 script, which generates an audit policy file. You can see most of the audit policy file by looking directly at the script.
 
+You can also refer to the [`Policy` configuration reference](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Policy)
+for details about the fields defined.
+
 ## Audit backends
 
 Audit backends persist audit events to an external storage.
@@ -104,9 +109,7 @@ Out of the box, the kube-apiserver provides two backends:
 - Webhook backend, which sends events to an external HTTP API
 
 In all cases, audit events follow a structure defined by the Kubernetes API in the
-`audit.k8s.io` API group. For Kubernetes {{< param "fullversion" >}}, that
-API is at version
-[`v1`](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/pkg/apis/audit/v1/types.go).
+[`audit.k8s.io` API group](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Event).
 
 {{< note >}}
 In case of patches, request body is a JSON array with patch operations, not a JSON object
@@ -174,8 +177,6 @@ and finally configure the `hostPath`:
 
 ```
 
-
-
 ### Webhook backend
 
 The webhook audit backend sends audit events to a remote web API, which is assumed to
@@ -250,3 +251,5 @@ By default truncate is disabled in both `webhook` and `log`, a cluster administr
 ## {{% heading "whatsnext" %}}
 
 * Learn about [Mutating webhook auditing annotations](/docs/reference/access-authn-authz/extensible-admission-controllers/#mutating-webhook-auditing-annotations).
+* Read the [reference for `audit.k8s.io` API group](/docs/reference/config-api/apiserver-audit.v1/).
+

From 4d20ce5b29146c2167618d9bc35e2903fe8346f0 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 18 Feb 2021 14:14:03 +0800
Subject: [PATCH 443/788] Add reference doc for kube-scheduler policy

This is a reference for kube-scheduler policy config generated from
kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```
./genref --include kube-scheduler-policy-config
```
---
 .../manage-resources-containers.md            |  16 +-
 content/en/docs/reference/_index.md           |   4 +
 .../kube-scheduler-policy-config.v1.md        | 799 ++++++++++++++++++
 .../en/docs/reference/scheduling/policies.md  |   8 +-
 4 files changed, 809 insertions(+), 18 deletions(-)
 create mode 100644 content/en/docs/reference/config-api/kube-scheduler-policy-config.v1.md

diff --git a/content/en/docs/concepts/configuration/manage-resources-containers.md b/content/en/docs/concepts/configuration/manage-resources-containers.md
index 48b6868bde..ee4669641c 100644
--- a/content/en/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/en/docs/concepts/configuration/manage-resources-containers.md
@@ -518,8 +518,7 @@ Cluster-level extended resources are not tied to nodes. They are usually managed
 by scheduler extenders, which handle the resource consumption and resource quota.
 
 You can specify the extended resources that are handled by scheduler extenders
-in [scheduler policy
-configuration](https://github.com/kubernetes/kubernetes/blob/release-1.10/pkg/scheduler/api/v1/types.go#L31).
+in [scheduler policy configuration](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
 
 **Example:**
 
@@ -742,23 +741,14 @@ LastState: map[terminated:map[exitCode:137 reason:OOM Killed startedAt:2015-07-0
 
 You can see that the Container was terminated because of `reason:OOM Killed`, where `OOM` stands for Out Of Memory.
 
-
-
-
-
-
 ## {{% heading "whatsnext" %}}
 
-
 * Get hands-on experience [assigning Memory resources to Containers and Pods](/docs/tasks/configure-pod-container/assign-memory-resource/).
-
 * Get hands-on experience [assigning CPU resources to Containers and Pods](/docs/tasks/configure-pod-container/assign-cpu-resource/).
-
 * For more details about the difference between requests and limits, see
   [Resource QoS](https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md).
-
 * Read the [Container](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core) API reference
-
 * Read the [ResourceRequirements](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#resourcerequirements-v1-core) API reference
-
 * Read about [project quotas](https://xfs.org/docs/xfsdocs-xml-dev/XFS_User_Guide/tmp/en-US/html/xfs-quotas.html) in XFS
+* Read more about the [kube-scheduler Policy reference (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
+
diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 29dfca82b7..e9cd7d9267 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -72,6 +72,10 @@ client libraries:
 
 * [kubelet config (v1beta1)](/docs/reference/config-api/kubelet-config.v1beta1/)
 
+## Config APIs
+
+* [kube-scheduler policy reference (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
+
 ## Design Docs
 
 An archive of the design docs for Kubernetes functionality. Good starting points are
diff --git a/content/en/docs/reference/config-api/kube-scheduler-policy-config.v1.md b/content/en/docs/reference/config-api/kube-scheduler-policy-config.v1.md
new file mode 100644
index 0000000000..e694f7ecbc
--- /dev/null
+++ b/content/en/docs/reference/config-api/kube-scheduler-policy-config.v1.md
@@ -0,0 +1,799 @@
+---
+title: kube-scheduler Policy Configuration (v1)
+content_type: tool-reference
+package: kubescheduler.config.k8s.io/v1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+  
+    
+
+
+## `Policy`     {#kubescheduler-config-k8s-io-v1-Policy}
+    
+
+
+
+
+Policy describes a struct for a policy resource used in api.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Policy</code></td></tr>
+    
+
+  
+  
+<tr><td><code>predicates</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicatePolicy"><code>[]PredicatePolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the fit predicate functions</td>
+</tr>
+    
+  
+<tr><td><code>priorities</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityPolicy"><code>[]PriorityPolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the priority functions</td>
+</tr>
+    
+  
+<tr><td><code>extenders</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LegacyExtender"><code>[]LegacyExtender</code></a>
+</td>
+<td>
+   Holds the information to communicate with the extender(s)</td>
+</tr>
+    
+  
+<tr><td><code>hardPodAffinitySymmetricWeight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule
+corresponding to every RequiredDuringScheduling affinity rule.
+HardPodAffinitySymmetricWeight represents the weight of implicit PreferredDuringScheduling affinity rule, in the range 1-100.</td>
+</tr>
+    
+  
+<tr><td><code>alwaysCheckAllPredicates</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   When AlwaysCheckAllPredicates is set to true, scheduler checks all
+the configured predicates even after one or more of them fails.
+When the flag is set to false, scheduler skips checking the rest
+of the predicates after it finds one predicate that failed.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderManagedResource`     {#kubescheduler-config-k8s-io-v1-ExtenderManagedResource}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderManagedResource describes the arguments of extended resources
+managed by an extender.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name is the extended resource name.</td>
+</tr>
+    
+  
+<tr><td><code>ignoredByScheduler</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   IgnoredByScheduler indicates whether kube-scheduler should ignore this
+resource when applying predicates.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderTLSConfig`     {#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderTLSConfig contains settings to enable TLS with extender
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>insecure</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Server should be accessed without verifying the TLS certificate. For testing only.</td>
+</tr>
+    
+  
+<tr><td><code>serverName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ServerName is passed to the server for SNI and is used in the client to check server
+certificates against. If ServerName is empty, the hostname used to contact the
+server is used.</td>
+</tr>
+    
+  
+<tr><td><code>certFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>keyFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>caFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Trusted root certificates for server</td>
+</tr>
+    
+  
+<tr><td><code>certData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CertData holds PEM-encoded bytes (typically read from a client certificate file).
+CertData takes precedence over CertFile</td>
+</tr>
+    
+  
+<tr><td><code>keyData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   KeyData holds PEM-encoded bytes (typically read from a client certificate key file).
+KeyData takes precedence over KeyFile</td>
+</tr>
+    
+  
+<tr><td><code>caData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CAData holds PEM-encoded bytes (typically read from a root certificates bundle).
+CAData takes precedence over CAFile</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelPreference`     {#kubescheduler-config-k8s-io-v1-LabelPreference}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+LabelPreference holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   This is a boolean flag
+If true, higher priority is given to nodes that have the label
+If false, higher priority is given to nodes that do not have the label</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelsPresence`     {#kubescheduler-config-k8s-io-v1-LabelsPresence}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+LabelsPresence holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should be either present (or absent) for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   The boolean flag that indicates whether the labels should be present or absent from the node</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LegacyExtender`     {#kubescheduler-config-k8s-io-v1-LegacyExtender}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+LegacyExtender holds the parameters used to communicate with the extender. If a verb is unspecified/empty,
+it is assumed that the extender chose not to provide that extension.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>urlPrefix</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   URLPrefix at which the extender is available</td>
+</tr>
+    
+  
+<tr><td><code>filterVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the filter call, empty if not supported. This verb is appended to the URLPrefix when issuing the filter call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>preemptVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the preempt call, empty if not supported. This verb is appended to the URLPrefix when issuing the preempt call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>prioritizeVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the prioritize call, empty if not supported. This verb is appended to the URLPrefix when issuing the prioritize call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the prioritize call generates.
+The weight should be a positive integer</td>
+</tr>
+    
+  
+<tr><td><code>bindVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the bind call, empty if not supported. This verb is appended to the URLPrefix when issuing the bind call to extender.
+If this method is implemented by the extender, it is the extender's responsibility to bind the pod to apiserver. Only one extender
+can implement this function.</td>
+</tr>
+    
+  
+<tr><td><code>enableHttps</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   EnableHTTPS specifies whether https should be used to communicate with the extender</td>
+</tr>
+    
+  
+<tr><td><code>tlsConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig"><code>ExtenderTLSConfig</code></a>
+</td>
+<td>
+   TLSConfig specifies the transport layer security config</td>
+</tr>
+    
+  
+<tr><td><code>httpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/time#Duration"><code>time.Duration</code></a>
+</td>
+<td>
+   HTTPTimeout specifies the timeout duration for a call to the extender. Filter timeout fails the scheduling of the pod. Prioritize
+timeout is ignored, k8s/other extenders priorities are used to select the node.</td>
+</tr>
+    
+  
+<tr><td><code>nodeCacheCapable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   NodeCacheCapable specifies that the extender is capable of caching node information,
+so the scheduler should only send minimal information about the eligible nodes
+assuming that the extender already cached full details of all nodes in the cluster</td>
+</tr>
+    
+  
+<tr><td><code>managedResources</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderManagedResource"><code>[]ExtenderManagedResource</code></a>
+</td>
+<td>
+   ManagedResources is a list of extended resources that are managed by
+this extender.
+- A pod will be sent to the extender on the Filter, Prioritize and Bind
+  (if the extender is the binder) phases iff the pod requests at least
+  one of the extended resources in this list. If empty or unspecified,
+  all pods will be sent to this extender.
+- If IgnoredByScheduler is set to true for a resource, kube-scheduler
+  will skip checking the resource in predicates.</td>
+</tr>
+    
+  
+<tr><td><code>ignorable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Ignorable specifies if the extender is ignorable, i.e. scheduling should not
+fail when the extender returns an error or is not reachable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicateArgument`     {#kubescheduler-config-k8s-io-v1-PredicateArgument}
+    
+
+
+
+**Appears in:**
+
+- [PredicatePolicy](#kubescheduler-config-k8s-io-v1-PredicatePolicy)
+
+
+PredicateArgument represents the arguments to configure predicate functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAffinity"><code>ServiceAffinity</code></a>
+</td>
+<td>
+   The predicate that provides affinity for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelsPresence</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelsPresence"><code>LabelsPresence</code></a>
+</td>
+<td>
+   The predicate that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicatePolicy`     {#kubescheduler-config-k8s-io-v1-PredicatePolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PredicatePolicy describes a struct of a predicate policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the predicate policy
+For a custom predicate, the name can be user-defined
+For the Kubernetes provided predicates, the name is the identifier of the pre-defined predicate</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicateArgument"><code>PredicateArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given predicate</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityArgument`     {#kubescheduler-config-k8s-io-v1-PriorityArgument}
+    
+
+
+
+**Appears in:**
+
+- [PriorityPolicy](#kubescheduler-config-k8s-io-v1-PriorityPolicy)
+
+
+PriorityArgument represents the arguments to configure priority functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAntiAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity"><code>ServiceAntiAffinity</code></a>
+</td>
+<td>
+   The priority function that ensures a good spread (anti-affinity) for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelPreference</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelPreference"><code>LabelPreference</code></a>
+</td>
+<td>
+   The priority function that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+<tr><td><code>requestedToCapacityRatioArguments</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments"><code>RequestedToCapacityRatioArguments</code></a>
+</td>
+<td>
+   The RequestedToCapacityRatio priority function is parametrized with function shape.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityPolicy`     {#kubescheduler-config-k8s-io-v1-PriorityPolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PriorityPolicy describes a struct of a priority policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the priority policy
+For a custom priority, the name can be user-defined
+For the Kubernetes provided priority functions, the name is the identifier of the pre-defined priority function</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the priority function generates
+The weight should be non-zero and can be a positive or a negative integer</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityArgument"><code>PriorityArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given priority function</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `RequestedToCapacityRatioArguments`     {#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+RequestedToCapacityRatioArguments holds arguments specific to RequestedToCapacityRatio priority function.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>shape</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-UtilizationShapePoint"><code>[]UtilizationShapePoint</code></a>
+</td>
+<td>
+   Array of point defining priority function shape.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ResourceSpec`     {#kubescheduler-config-k8s-io-v1-ResourceSpec}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+ResourceSpec represents single resource and weight for bin packing of priority RequestedToCapacityRatioArguments.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name of the resource to be managed by RequestedToCapacityRatio function.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   Weight of the resource.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+ServiceAffinity holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should match for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAntiAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+ServiceAntiAffinity holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `UtilizationShapePoint`     {#kubescheduler-config-k8s-io-v1-UtilizationShapePoint}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+UtilizationShapePoint represents single point of priority function shape.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>utilization</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Utilization (x axis). Valid values are 0 to 100. Fully utilized node maps to 100.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Score assigned to given utilization (y axis). Valid values are 0 to 10.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  
diff --git a/content/en/docs/reference/scheduling/policies.md b/content/en/docs/reference/scheduling/policies.md
index 10dd72ba05..fc9a740266 100644
--- a/content/en/docs/reference/scheduling/policies.md
+++ b/content/en/docs/reference/scheduling/policies.md
@@ -14,8 +14,7 @@ respectively.
 You can set a scheduling policy by running
 `kube-scheduler --policy-config-file <filename>` or
 `kube-scheduler --policy-configmap <ConfigMap>`
-and using the [Policy type](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy).
-
+and using the [Policy type](/docs/reference/config-api/kube-scheduler-policy-config.v1/).
 
 <!-- body -->
 
@@ -116,11 +115,10 @@ The following *priorities* implement scoring:
 - `EvenPodsSpreadPriority`: Implements preferred
   [pod topology spread constraints](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
 
-
-
 ## {{% heading "whatsnext" %}}
 
 * Learn about [scheduling](/docs/concepts/scheduling-eviction/kube-scheduler/)
-* Learn about [kube-scheduler configuration](/docs/reference/scheduling/config/)
+* Learn about [kube-scheduler Configuration](/docs/reference/scheduling/config/)
 * Read the [kube-scheduler configuration reference (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1)
+* Read the [kube-scheduler Policy reference (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
 

From a806f408979e7333d88048b41a7395282bd77c50 Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Fri, 2 Apr 2021 01:20:11 -0300
Subject: [PATCH 444/788] Add portuguese translation for networking concepts
 (#27300)

* Add portuguese translation for networking concepts

* Correct minor typos

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Correct typos

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../cluster-administration/networking.md      | 250 ++++++++++++++++++
 content/pt/docs/reference/glossary/cni.md     |  18 ++
 .../glossary/customresourcedefinition.md      |  19 ++
 3 files changed, 287 insertions(+)
 create mode 100644 content/pt/docs/concepts/cluster-administration/networking.md
 create mode 100644 content/pt/docs/reference/glossary/cni.md
 create mode 100755 content/pt/docs/reference/glossary/customresourcedefinition.md

diff --git a/content/pt/docs/concepts/cluster-administration/networking.md b/content/pt/docs/concepts/cluster-administration/networking.md
new file mode 100644
index 0000000000..74abf0ac29
--- /dev/null
+++ b/content/pt/docs/concepts/cluster-administration/networking.md
@@ -0,0 +1,250 @@
+---
+title: Conectividade do Cluster
+content_type: concept
+weight: 50
+---
+
+<!-- overview -->
+Conectividade é uma parte central do Kubernetes, mas pode ser desafiador 
+entender exatamente como é o seu funcionamento esperado. Existem 4 problemas
+distintos em conectividade que devem ser tratados:
+
+1. Comunicações contêiner-para-contêiner altamente acopladas: Isso é resolvido
+   por {{< glossary_tooltip text="Pods" term_id="pod" >}} e comunicações através do `localhost`.
+2. Comunicações pod-para-pod: Esse é o foco primário desse documento.
+3. Comunicações pod-para-serviço (_service_): Isso é tratado em [Services](/docs/concepts/services-networking/service/).
+4. Comunicações Externas-para-serviços: Isso é tratado em [services](/docs/concepts/services-networking/service/).
+
+<!-- body -->
+
+Kubernetes é basicamente o compartilhamento de máquinas entre aplicações. Tradicionalmente,
+compartilhar máquinas requer a garantia de que duas aplicações não tentem utilizar
+as mesmas portas. Coordenar a alocação de portas entre múltiplos desenvolvedores é 
+muito dificil de fazer em escala e expõe os usuários a problemas em nível do cluster e 
+fora de seu controle.
+
+A alocação dinâmica de portas traz uma série de complicações para o sistema - toda
+aplicação deve obter suas portas através de flags de configuração, os servidores de API 
+devem saber como inserir números dinämicos de portas nos blocos de configuração, serviços
+precisam saber como buscar um ao outro, etc. Ao invés de lidar com isso, o Kubernetes 
+faz de uma maneira diferente.
+
+## O modelo de conectividade e rede do Kubernetes
+
+Todo `Pod` obtém seu próprio endereço IP. Isso significa que vocë não precisa 
+criar links explícitos entre os `Pods` e vocë quase nunca terá que lidar com o
+mapeamento de portas de contêineres para portas do host. Isso cria um modelo simples, 
+retro-compatível onde os `Pods` podem ser tratados muito mais como VMs ou hosts 
+físicos da perspectiva de alocação de portas, nomes, descobrimento de serviços 
+(_service discovery_), balanceamento de carga, configuração de aplicações e migrações.
+
+O Kubernetes impõe os seguintes requisitos fundamentais para qualquer implementação de 
+rede (exceto qualquer política de segmentação intencional):
+   * pods em um nó podem se comunicar com todos os pods em todos os nós sem usar _NAT_.
+   * agentes em um nó (por exemplo o kubelet ou um serviço local) podem se comunicar com 
+     todos os Pods naquele nó.
+
+Nota: Para as plataformas que suportam `Pods` executando na rede do host (como o Linux):
+
+   * pods alocados na rede do host de um nó podem se comunicar com todos os pods
+     em todos os nós sem _NAT_.
+
+Esse modelo não só é menos complexo, mas é principalmente compatível com o 
+desejo do Kubernetes de permitir a portabilidade com baixo esforço de aplicações 
+de VMs para contêineres. Se a sua aplicação executava anteriormente em uma VM, sua VM
+possuía um IP e podia se comunicar com outras VMs no seu projeto. Esse é o mesmo 
+modelo básico.
+
+Os endereços de IP no Kubernetes existem no escopo do `Pod` - contêineres em um `Pod`
+compartilham o mesmo _network namespace_ - incluíndo seu endereço de IP e MAC.
+Isso significa que contêineres que compõem um `Pod` podem se comunicar entre eles 
+através do endereço `localhost` e respectivas portas. Isso também significa que
+contêineres em um mesmo `Pod` devem coordenar a alocação e uso de portas, o que não 
+difere do modelo de processos rodando dentro de uma mesma VM. Isso é chamado de 
+modelo "IP-por-pod".
+
+Como isso é implementado é um detalhe do agente de execução de contêiner em uso.
+
+É possível solicitar uma porta no nó que será encaminhada para seu `Pod` (chamado 
+de _portas do host_), mas isso é uma operação muito específica. Como esse encaminhamento
+é implementado é um detalhe do agente de execução do contêiner. O `Pod` mesmo 
+desconhece a existência ou não de portas do host.
+
+## Como implementar o modelo de conectividade do Kubernetes
+
+Existe um número de formas de implementar esse modelo de conectividade. Esse 
+documento não é um estudo exaustivo desses vários métodos, mas pode servir como 
+uma introdução de várias tecnologias e serve como um ponto de início.
+
+A conectividade no Kubernetes é fornecida através de plugins de 
+{{< glossary_tooltip text="CNIs" term_id="cni" >}}
+
+As seguintes opções estão organizadas alfabeticamente e não implicam preferência por
+qualquer solução.
+
+{{% thirdparty-content %}}
+
+### Antrea
+
+O projeto [Antrea](https://github.com/vmware-tanzu/antrea) é uma solução de 
+conectividade para Kubernetes que pretende ser nativa. Ela utiliza o Open vSwitch 
+na camada de conectividade de dados. O Open vSwitch é um switch virtual de alta 
+performance e programável que suporta Linux e Windows. O Open vSwitch permite 
+ao Antrea implementar políticas de rede do Kubernetes (_NetworkPolicies_) de 
+uma forma muito performática e eficiente.
+
+Graças à característica programável do Open vSwitch, o Antrea consegue implementar 
+uma série de funcionalidades de rede e segurança.
+
+### AWS VPC CNI para Kubernetes
+
+O [AWS VPC CNI](https://github.com/aws/amazon-vpc-cni-k8s) oferece conectividade 
+com o AWS Virtual Private Cloud (VPC) para clusters Kubernetes. Esse plugin oferece
+alta performance e disponibilidade e baixa latência. Adicionalmente, usuários podem 
+aplicar as melhores práticas de conectividade e segurança existentes no AWS VPC
+para a construção de clusters Kubernetes. Isso inclui possibilidade de usar o 
+_VPC flow logs_, políticas de roteamento da VPC e grupos de segurança para isolamento
+de tráfego.
+
+O uso desse plugin permite aos Pods no Kubernetes ter o mesmo endereço de IP dentro do 
+pod como se eles estivessem dentro da rede do VPC. O CNI (Container Network Interface) 
+aloca um _Elastic Networking Interface_ (ENI) para cada nó do Kubernetes e usa uma 
+faixa de endereços IP secundário de cada ENI para os Pods no nó. O CNI inclui 
+controles para pré alocação dos ENIs e endereços IP para um início mais rápido dos 
+pods e permite clusters com até 2,000 nós.
+
+Adicionalmente, esse CNI pode ser utilizado junto com o [Calico](https://docs.aws.amazon.com/eks/latest/userguide/calico.html)
+para a criação de políticas de rede (_NetworkPolicies_). O projeto AWS VPC CNI
+tem código fonte aberto com a [documentação no Github](https://github.com/aws/amazon-vpc-cni-k8s).
+
+### Azure CNI para o Kubernetes
+[Azure CNI](https://docs.microsoft.com/en-us/azure/virtual-network/container-networking-overview) é um
+plugin de [código fonte aberto](https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md) 
+que integra os Pods do Kubernetes com uma rede virtual da Azure (também conhecida como VNet) 
+provendo performance de rede similar à de máquinas virtuais no ambiente. Os Pods 
+podem se comunicar com outras VNets e com ambientes _on-premises_ com o uso de 
+funcionalidades da Azure, e também podem ter clientes com origem dessas redes. 
+Os Pods podem acessar serviços da Azure, como armazenamento e SQL, que são 
+protegidos por _Service Endpoints_ e _Private Link_. Você pode utilizar as políticas 
+de segurança e roteamento para filtrar o tráfico do Pod. O plugin associa IPs da VNet 
+para os Pods utilizando um pool de IPs secundário pré-configurado na interface de rede
+do nó Kubernetes.
+
+O Azure CNI está disponível nativamente no [Azure Kubernetes Service (AKS)](https://docs.microsoft.com/en-us/azure/aks/configure-azure-cni).
+
+### Calico
+
+[Calico](https://docs.projectcalico.org/) é uma solução de conectividade e 
+segurança para contêineres, máquinas virtuais e serviços nativos em hosts. O 
+Calico suporta múltiplas camadas de conectividade/dados, como por exemplo: 
+uma camada Linux eBPF nativa, uma camada de conectividade baseada em conceitos 
+padrão do Linux e uma camada baseada no HNS do Windows. O calico provê uma 
+camada completa de conectividade e rede, mas também pode ser usado em conjunto com
+[CNIs de provedores de nuvem](https://docs.projectcalico.org/networking/determine-best-networking#calico-compatible-cni-plugins-and-cloud-provider-integrations) 
+para permitir a criação de políticas de rede.
+
+### Cilium
+
+[Cilium](https://github.com/cilium/cilium) é um software de código fonte aberto 
+para prover conectividade e segurança entre contêineres de aplicação. O Cilium 
+pode lidar com tráfego na camada de aplicação (ex. HTTP) e pode forçar políticas 
+de rede nas camadas L3-L7 usando um modelo de segurança baseado em identidade e 
+desacoplado do endereçamento de redes, podendo inclusive ser utilizado com outros
+plugins CNI.
+
+### Flannel
+
+[Flannel](https://github.com/coreos/flannel#flannel) é uma camada muito simples 
+de conectividade que satisfaz os requisitos do Kubernetes. Muitas pessoas 
+reportaram sucesso em utilizar o Flannel com o Kubernetes.
+
+### Google Compute Engine (GCE)
+
+Para os scripts de configuração do Google Compute Engine, [roteamento
+avançado](https://cloud.google.com/vpc/docs/routes) é usado para associar
+para cada VM uma sub-rede (o padrão é `/24` - 254 IPs). Qualquer tráfico direcionado
+para aquela sub-rede será roteado diretamente para a VM pela rede do GCE. Isso é 
+adicional ao IP principal associado à VM, que é mascarado para o acesso à Internet.
+Uma _brige_ Linux (chamada `cbr0`) é configurada para existir naquela sub-rede, e é
+configurada no docker através da opção `--bridge`.
+
+O Docker é iniciado com:
+
+
+```shell
+DOCKER_OPTS="--bridge=cbr0 --iptables=false --ip-masq=false"
+```
+
+Essa _bridge_ é criada pelo Kubelet (controlada pela opção `--network-plugin=kubenet`)
+de acordo com a informação `.spec.podCIDR` do Nó.
+
+O Docker irá agora alocar IPs do bloco `cbr-cidr`. Contêineres podem alcançar
+outros contêineres e nós através da interface `cbr0`. Esses IPs são todos roteáveis
+dentro da rede do projeto do GCE.
+
+O GCE mesmo não sabe nada sobre esses IPs, então não irá mascará-los quando tentarem 
+se comunicar com a internet. Para permitir isso uma regra de IPTables é utilizada para
+mascarar o tráfego para IPs fora da rede do projeto do GCE (no exemplo abaixo, 10.0.0.0/8):
+
+```shell
+iptables -t nat -A POSTROUTING ! -d 10.0.0.0/8 -o eth0 -j MASQUERADE
+```
+
+Por fim, o encaminhamento de IP deve ser habilitado no Kernel de forma a processar
+os pacotes vindos dos contêineres:
+
+```shell
+sysctl net.ipv4.ip_forward=1
+```
+
+O resultado disso tudo é que `Pods` agora podem alcançar outros `Pods` e podem também
+se comunicar com a Internet.
+
+### Kube-router
+
+[Kube-router](https://github.com/cloudnativelabs/kube-router) é uma solução construída 
+que visa prover alta performance e simplicidade operacional. Kube-router provê um 
+proxy de serviços baseado no [LVS/IPVS](https://www.linuxvirtualserver.org/software/ipvs.html),
+uma solução de comunicação pod-para-pod baseada em encaminhamento de pacotes Linux e sem camadas
+adicionais, e funcionalidade de políticas de redes baseadas no IPTables/IPSet.
+
+### Redes L2 e bridges Linux
+
+Se você tem uma rede L2 "burra", como um switch em um ambiente "bare-metal",
+você deve conseguir fazer algo similar ao ambiente GCE explicado acima.
+Note que essas instruções foram testadas casualmente - parece funcionar, mas
+não foi propriamente testado. Se você conseguir usar essa técnica e aperfeiçoar
+o processo, por favor nos avise!!
+
+Siga a parte _"With Linux Bridge devices"_ desse
+[tutorial super bacana](https://blog.oddbit.com/2014/08/11/four-ways-to-connect-a-docker/) do
+Lars Kellogg-Stedman.
+
+### Multus (Plugin multi redes) {#multus}
+
+[Multus](https://github.com/Intel-Corp/multus-cni) é um plugin Multi CNI para
+suportar a funcionalidade multi redes do Kubernetes usando objetos baseados em {{< glossary_tooltip text="CRDs" term_id="CustomResourceDefinition" >}}. 
+
+Multus suporta todos os  [plugins referência](https://github.com/containernetworking/plugins) (ex. [Flannel](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel), 
+[DHCP](https://github.com/containernetworking/plugins/tree/master/plugins/ipam/dhcp), 
+[Macvlan](https://github.com/containernetworking/plugins/tree/master/plugins/main/macvlan)) 
+que implementam a especificação de CNI e plugins de terceiros
+(ex. [Calico](https://github.com/projectcalico/cni-plugin), [Weave](https://github.com/weaveworks/weave), 
+[Cilium](https://github.com/cilium/cilium), [Contiv](https://github.com/contiv/netplugin)). 
+Adicionalmente, Multus suporta cargas de trabalho no Kubernetes que necessitem de funcionalidades como 
+[SRIOV](https://github.com/hustcat/sriov-cni), [DPDK](https://github.com/Intel-Corp/sriov-cni), 
+[OVS-DPDK & VPP](https://github.com/intel/vhost-user-net-plugin). 
+
+### OVN (Open Virtual Networking)
+
+OVN é uma solução de virtualização de redes de código aberto desenvolvido pela 
+comunidade Open vSwitch. Permite a criação de switches lógicos, roteadores lógicos, 
+listas de acesso, balanceadores de carga e mais, para construir diferences topologias
+de redes virtuais. Esse projeto possui um plugin específico para o Kubernetes e a 
+documentação em [ovn-kubernetes](https://github.com/openvswitch/ovn-kubernetes).
+
+## {{% heading "whatsnext" %}}
+
+Design inicial do modelo de conectividade do Kubernetes e alguns planos futuros 
+estão descritos com maiores detalhes no 
+[documento de design de redes](https://git.k8s.io/community/contributors/design-proposals/network/networking.md).
diff --git a/content/pt/docs/reference/glossary/cni.md b/content/pt/docs/reference/glossary/cni.md
new file mode 100644
index 0000000000..6cb909f962
--- /dev/null
+++ b/content/pt/docs/reference/glossary/cni.md
@@ -0,0 +1,18 @@
+---
+title: Container network interface (CNI)
+id: cni
+date: 2018-05-25
+full_link: /docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#cni
+short_description: >
+    Plugins Container network interface (CNI) são um tipo de plugin de Rede em conformidade com a especificação appc/CNI.
+
+
+aka: 
+tags:
+- networking 
+---
+ Plugins Container network interface (CNI) são um tipo de plugin de Rede em conformidade com a especificação appc/CNI.
+<!--more--> 
+
+* Para informações sobre Kubernetes e CNI, veja [aqui](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#cni).
+* Para informações sobre Kubernetes e CNI, veja ["Plugins de rede"](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#cni).
diff --git a/content/pt/docs/reference/glossary/customresourcedefinition.md b/content/pt/docs/reference/glossary/customresourcedefinition.md
new file mode 100755
index 0000000000..7de24c036b
--- /dev/null
+++ b/content/pt/docs/reference/glossary/customresourcedefinition.md
@@ -0,0 +1,19 @@
+---
+title: CustomResourceDefinition
+id: CustomResourceDefinition
+date: 2018-04-12
+full_link: /docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/
+short_description: >
+  Código customizado que define um recurso a ser adicionado ao seu servidor de API Kubernetes sem a necessidade de construir um servidor customizado.
+
+aka: 
+tags:
+- fundamental
+- operation
+- extension
+---
+ Código customizado que define um recurso a ser adicionado ao seu servidor de API Kubernetes sem a necessidade de construir um servidor customizado.
+
+<!--more-->
+
+CustomResourceDefinitions permitem você extender a API do Kubernetes para seu ambiente caso as APIs atuais não cumpram com seus requisitos.

From f7943d8048f92f888d11f1e7a963b0f15e3ff4ed Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Sun, 7 Feb 2021 16:11:02 +0100
Subject: [PATCH 445/788] Prepare for v1.21 + indentation + local common
 definitions

---
 .../self-subject-rules-review-v1.md           |   26 +-
 .../cluster-resources/event-v1.md             |    7 +-
 .../cluster-resources/flow-schema-v1beta1.md  |  102 +-
 .../cluster-resources/node-v1.md              |  108 +-
 .../priority-level-configuration-v1beta1.md   |   24 +-
 .../cluster-resources/runtime-class-v1.md     |   20 +-
 .../downward-api-volume-file.md               |   40 -
 .../common-definitions/exec-action.md         |   28 -
 .../common-definitions/http-get-action.md     |   58 -
 .../common-definitions/json-schema-props.md   |  226 --
 .../common-definitions/key-to-path.md         |   36 -
 .../common-definitions/label-selector.md      |    2 +-
 .../common-definitions/list-meta.md           |    2 +-
 .../local-object-reference.md                 |    2 +-
 .../common-definitions/node-affinity.md       |   72 -
 .../node-selector-requirement.md              |    2 +-
 .../object-field-selector.md                  |    2 +-
 .../common-definitions/object-meta.md         |    2 +-
 .../common-definitions/object-reference.md    |    2 +-
 .../common-definitions/patch.md               |    2 +-
 .../common-definitions/pod-affinity.md        |   73 -
 .../common-definitions/pod-anti-affinity.md   |   73 -
 .../common-definitions/quantity.md            |    2 +-
 .../resource-field-selector.md                |    2 +-
 .../common-definitions/status.md              |   22 +-
 .../common-definitions/tcp-socket-action.md   |   35 -
 .../typed-local-object-reference.md           |    2 +-
 .../config-map-v1.md                          |    2 +-
 .../csi-driver-v1.md                          |   18 +-
 .../csi-node-v1.md                            |    4 +-
 .../csi-storage-capacity-v1beta1.md           |  566 ++++
 .../persistent-volume-claim-v1.md             |    4 +-
 .../persistent-volume-v1.md                   |  241 +-
 .../config-and-storage-resources/secret-v1.md |    4 +-
 .../storage-class-v1.md                       |    8 +-
 .../volume-attachment-v1.md                   |    2 +-
 .../config-and-storage-resources/volume.md    |  221 +-
 .../custom-resource-definition-v1.md          |  358 ++-
 .../mutating-webhook-configuration-v1.md      |   90 +-
 .../validating-webhook-configuration-v1.md    |   90 +-
 .../policies-resources/_index.md              |    4 -
 .../kubernetes-api/policy-resources/_index.md |    4 +
 .../limit-range-v1.md                         |   28 +-
 .../network-policy-v1.md                      |  124 +-
 .../pod-disruption-budget-v1.md}              |  125 +-
 .../pod-security-policy-v1beta1.md            |   78 +-
 .../resource-quota-v1.md                      |   54 +-
 .../service-resources/_index.md               |    4 +
 .../endpoint-slice-v1.md}                     |  101 +-
 .../endpoints-v1.md                           |   72 +-
 .../ingress-class-v1.md                       |   49 +-
 .../ingress-v1.md                             |  240 +-
 .../service-v1.md                             |   92 +-
 .../services-resources/_index.md              |    4 -
 .../workload-resources/_index.md              |    4 +
 .../controller-revision-v1.md                 |   26 +-
 .../cron-job-v1.md}                           |   91 +-
 .../daemon-set-v1.md                          |   57 +-
 .../deployment-v1.md                          |   58 +-
 .../ephemeral-containers-v1.md}               |  454 +--
 .../horizontal-pod-autoscaler-v1.md           |   40 +-
 .../horizontal-pod-autoscaler-v2beta2.md      |  472 +--
 .../job-v1.md                                 |   68 +-
 .../pod-template-v1.md                        |   34 +-
 .../workload-resources/pod-v1.md              | 2631 +++++++++++++++++
 .../priority-class-v1.md                      |   24 +-
 .../replica-set-v1.md                         |   42 +-
 .../replication-controller-v1.md              |   42 +-
 .../stateful-set-v1.md                        |   46 +-
 .../workloads-resources/_index.md             |    4 -
 .../workloads-resources/container.md          |  774 -----
 .../workloads-resources/cron-job-v2alpha1.md  |  746 -----
 .../workloads-resources/pod-v1.md             | 1270 --------
 73 files changed, 5316 insertions(+), 5126 deletions(-)
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
 create mode 100644 content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/policies-resources/_index.md
 create mode 100644 content/en/docs/reference/kubernetes-api/policy-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/limit-range-v1.md (89%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/network-policy-v1.md (65%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources/pod-disruption-budget-v1beta1.md => policy-resources/pod-disruption-budget-v1.md} (70%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/pod-security-policy-v1beta1.md (86%)
 rename content/en/docs/reference/kubernetes-api/{policies-resources => policy-resources}/resource-quota-v1.md (83%)
 create mode 100644 content/en/docs/reference/kubernetes-api/service-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{services-resources/endpoint-slice-v1beta1.md => service-resources/endpoint-slice-v1.md} (75%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/endpoints-v1.md (78%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/ingress-class-v1.md (79%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/ingress-v1.md (71%)
 rename content/en/docs/reference/kubernetes-api/{services-resources => service-resources}/service-v1.md (85%)
 delete mode 100644 content/en/docs/reference/kubernetes-api/services-resources/_index.md
 create mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/controller-revision-v1.md (89%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources/cron-job-v1beta1.md => workload-resources/cron-job-v1.md} (81%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/daemon-set-v1.md (78%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/deployment-v1.md (81%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources/ephemeral-container.md => workload-resources/ephemeral-containers-v1.md} (58%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/horizontal-pod-autoscaler-v1.md (85%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/horizontal-pod-autoscaler-v2beta2.md (56%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/job-v1.md (79%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/pod-template-v1.md (86%)
 create mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/priority-class-v1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/replica-set-v1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/replication-controller-v1.md (86%)
 rename content/en/docs/reference/kubernetes-api/{workloads-resources => workload-resources}/stateful-set-v1.md (89%)
 delete mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/container.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md

diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
index aa3d95332b..a890598ddf 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
@@ -51,13 +51,13 @@ SelfSubjectRulesReview enumerates the set of actions the current user can perfor
     <a name="NonResourceRule"></a>
     *NonResourceRule holds information that describes a rule for the non-resource*
 
-  - **status.nonResourceRules.verbs** ([]string), required
+    - **status.nonResourceRules.verbs** ([]string), required
 
-    Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
+      Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
 
-  - **status.nonResourceRules.nonResourceURLs** ([]string)
+    - **status.nonResourceRules.nonResourceURLs** ([]string)
 
-    NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
+      NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
 
   - **status.resourceRules** ([]ResourceRule), required
 
@@ -66,22 +66,22 @@ SelfSubjectRulesReview enumerates the set of actions the current user can perfor
     <a name="ResourceRule"></a>
     *ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.*
 
-  - **status.resourceRules.verbs** ([]string), required
+    - **status.resourceRules.verbs** ([]string), required
 
-    Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
+      Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
 
-  - **status.resourceRules.apiGroups** ([]string)
+    - **status.resourceRules.apiGroups** ([]string)
 
-    APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
+      APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
 
-  - **status.resourceRules.resourceNames** ([]string)
+    - **status.resourceRules.resourceNames** ([]string)
 
-    ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
+      ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
 
-  - **status.resourceRules.resources** ([]string)
+    - **status.resourceRules.resources** ([]string)
 
-    Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
-     "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
+      Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
+       "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
 
   - **status.evaluationError** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
index 065cf5a7e7..cf321c1f44 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
@@ -26,6 +26,10 @@ Event is a report of an event somewhere in the cluster. It generally denotes som
 - **kind**: Event
 
 
+- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+
+  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
 - **eventTime** (MicroTime), required
 
   eventTime is the time when this Event was first observed. It is required.
@@ -33,9 +37,6 @@ Event is a report of an event somewhere in the cluster. It generally denotes som
   <a name="MicroTime"></a>
   *MicroTime is version of Time with microsecond level precision.*
 
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>), required
-
-
 - **action** (string)
 
   action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field cannot be empty for new Events and it can have at most 128 characters.
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
index 8f94555ee2..0c221dea87 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
@@ -92,43 +92,43 @@ FlowSchemaSpec describes how the FlowSchema's specification looks like.
     <a name="Subject"></a>
     *Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.*
 
-  - **rules.subjects.kind** (string), required
+    - **rules.subjects.kind** (string), required
 
-    Required
+      Required
 
-  - **rules.subjects.group** (GroupSubject)
+    - **rules.subjects.group** (GroupSubject)
 
 
-    <a name="GroupSubject"></a>
-    *GroupSubject holds detailed information for group-kind subject.*
+      <a name="GroupSubject"></a>
+      *GroupSubject holds detailed information for group-kind subject.*
 
-  - **rules.subjects.group.name** (string), required
+      - **rules.subjects.group.name** (string), required
 
-    name is the user group that matches, or "*" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.
+        name is the user group that matches, or "*" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.
 
-  - **rules.subjects.serviceAccount** (ServiceAccountSubject)
+    - **rules.subjects.serviceAccount** (ServiceAccountSubject)
 
 
-    <a name="ServiceAccountSubject"></a>
-    *ServiceAccountSubject holds detailed information for service-account-kind subject.*
+      <a name="ServiceAccountSubject"></a>
+      *ServiceAccountSubject holds detailed information for service-account-kind subject.*
 
-  - **rules.subjects.serviceAccount.name** (string), required
+      - **rules.subjects.serviceAccount.name** (string), required
 
-    `name` is the name of matching ServiceAccount objects, or "*" to match regardless of name. Required.
+        `name` is the name of matching ServiceAccount objects, or "*" to match regardless of name. Required.
 
-  - **rules.subjects.serviceAccount.namespace** (string), required
+      - **rules.subjects.serviceAccount.namespace** (string), required
 
-    `namespace` is the namespace of matching ServiceAccount objects. Required.
+        `namespace` is the namespace of matching ServiceAccount objects. Required.
 
-  - **rules.subjects.user** (UserSubject)
+    - **rules.subjects.user** (UserSubject)
 
 
-    <a name="UserSubject"></a>
-    *UserSubject holds detailed information for user-kind subject.*
+      <a name="UserSubject"></a>
+      *UserSubject holds detailed information for user-kind subject.*
 
-  - **rules.subjects.user.name** (string), required
+      - **rules.subjects.user.name** (string), required
 
-    `name` is the username that matches, or "*" to match all usernames. Required.
+        `name` is the username that matches, or "*" to match all usernames. Required.
 
   - **rules.nonResourceRules** ([]NonResourcePolicyRule)
 
@@ -139,23 +139,23 @@ FlowSchemaSpec describes how the FlowSchema's specification looks like.
     <a name="NonResourcePolicyRule"></a>
     *NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.*
 
-  - **rules.nonResourceRules.nonResourceURLs** ([]string), required
+    - **rules.nonResourceRules.nonResourceURLs** ([]string), required
 
-    *Set: unique values will be kept during a merge*
-    
-    `nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:
-      - "/healthz" is legal
-      - "/hea*" is illegal
-      - "/hea" is legal but matches nothing
-      - "/hea/*" also matches nothing
-      - "/healthz/*" matches all per-component health checks.
-    "*" matches all non-resource urls. if it is present, it must be the only entry. Required.
+      *Set: unique values will be kept during a merge*
+      
+      `nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:
+        - "/healthz" is legal
+        - "/hea*" is illegal
+        - "/hea" is legal but matches nothing
+        - "/hea/*" also matches nothing
+        - "/healthz/*" matches all per-component health checks.
+      "*" matches all non-resource urls. if it is present, it must be the only entry. Required.
 
-  - **rules.nonResourceRules.verbs** ([]string), required
+    - **rules.nonResourceRules.verbs** ([]string), required
 
-    *Set: unique values will be kept during a merge*
-    
-    `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs. If it is present, it must be the only entry. Required.
+      *Set: unique values will be kept during a merge*
+      
+      `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs. If it is present, it must be the only entry. Required.
 
   - **rules.resourceRules** ([]ResourcePolicyRule)
 
@@ -166,33 +166,33 @@ FlowSchemaSpec describes how the FlowSchema's specification looks like.
     <a name="ResourcePolicyRule"></a>
     *ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) least one member of namespaces matches the request.*
 
-  - **rules.resourceRules.apiGroups** ([]string), required
+    - **rules.resourceRules.apiGroups** ([]string), required
 
-    *Set: unique values will be kept during a merge*
-    
-    `apiGroups` is a list of matching API groups and may not be empty. "*" matches all API groups and, if present, must be the only entry. Required.
+      *Set: unique values will be kept during a merge*
+      
+      `apiGroups` is a list of matching API groups and may not be empty. "*" matches all API groups and, if present, must be the only entry. Required.
 
-  - **rules.resourceRules.resources** ([]string), required
+    - **rules.resourceRules.resources** ([]string), required
 
-    *Set: unique values will be kept during a merge*
-    
-    `resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource.  For example, [ "services", "nodes/status" ].  This list may not be empty. "*" matches all resources and, if present, must be the only entry. Required.
+      *Set: unique values will be kept during a merge*
+      
+      `resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource.  For example, [ "services", "nodes/status" ].  This list may not be empty. "*" matches all resources and, if present, must be the only entry. Required.
 
-  - **rules.resourceRules.verbs** ([]string), required
+    - **rules.resourceRules.verbs** ([]string), required
 
-    *Set: unique values will be kept during a merge*
-    
-    `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs and, if present, must be the only entry. Required.
+      *Set: unique values will be kept during a merge*
+      
+      `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs and, if present, must be the only entry. Required.
 
-  - **rules.resourceRules.clusterScope** (boolean)
+    - **rules.resourceRules.clusterScope** (boolean)
 
-    `clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.
+      `clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.
 
-  - **rules.resourceRules.namespaces** ([]string)
+    - **rules.resourceRules.namespaces** ([]string)
 
-    *Set: unique values will be kept during a merge*
-    
-    `namespaces` is a list of target namespaces that restricts matches.  A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains "*".  Note that "*" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.
+      *Set: unique values will be kept during a merge*
+      
+      `namespaces` is a list of target namespaces that restricts matches.  A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains "*".  Note that "*" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
index a5e796904f..d48dc829ab 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
@@ -62,25 +62,25 @@ NodeSpec describes the attributes that a node is created with.
     <a name="ConfigMapNodeConfigSource"></a>
     *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-  - **configSource.configMap.kubeletConfigKey** (string), required
+    - **configSource.configMap.kubeletConfigKey** (string), required
 
-    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+      KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-  - **configSource.configMap.name** (string), required
+    - **configSource.configMap.name** (string), required
 
-    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+      Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-  - **configSource.configMap.namespace** (string), required
+    - **configSource.configMap.namespace** (string), required
 
-    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+      Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-  - **configSource.configMap.resourceVersion** (string)
+    - **configSource.configMap.resourceVersion** (string)
 
-    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+      ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-  - **configSource.configMap.uid** (string)
+    - **configSource.configMap.uid** (string)
 
-    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+      UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
 - **externalID** (string)
 
@@ -216,32 +216,32 @@ NodeStatus is information about the current status of a node.
     <a name="NodeConfigSource"></a>
     *NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.*
 
-  - **config.active.configMap** (ConfigMapNodeConfigSource)
+    - **config.active.configMap** (ConfigMapNodeConfigSource)
 
-    ConfigMap is a reference to a Node's ConfigMap
+      ConfigMap is a reference to a Node's ConfigMap
 
-    <a name="ConfigMapNodeConfigSource"></a>
-    *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
+      <a name="ConfigMapNodeConfigSource"></a>
+      *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-  - **config.active.configMap.kubeletConfigKey** (string), required
+      - **config.active.configMap.kubeletConfigKey** (string), required
 
-    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+        KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-  - **config.active.configMap.name** (string), required
+      - **config.active.configMap.name** (string), required
 
-    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+        Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-  - **config.active.configMap.namespace** (string), required
+      - **config.active.configMap.namespace** (string), required
 
-    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+        Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-  - **config.active.configMap.resourceVersion** (string)
+      - **config.active.configMap.resourceVersion** (string)
 
-    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+        ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-  - **config.active.configMap.uid** (string)
+      - **config.active.configMap.uid** (string)
 
-    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+        UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
   - **config.assigned** (NodeConfigSource)
 
@@ -250,32 +250,32 @@ NodeStatus is information about the current status of a node.
     <a name="NodeConfigSource"></a>
     *NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.*
 
-  - **config.assigned.configMap** (ConfigMapNodeConfigSource)
+    - **config.assigned.configMap** (ConfigMapNodeConfigSource)
 
-    ConfigMap is a reference to a Node's ConfigMap
+      ConfigMap is a reference to a Node's ConfigMap
 
-    <a name="ConfigMapNodeConfigSource"></a>
-    *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
+      <a name="ConfigMapNodeConfigSource"></a>
+      *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-  - **config.assigned.configMap.kubeletConfigKey** (string), required
+      - **config.assigned.configMap.kubeletConfigKey** (string), required
 
-    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+        KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-  - **config.assigned.configMap.name** (string), required
+      - **config.assigned.configMap.name** (string), required
 
-    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+        Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-  - **config.assigned.configMap.namespace** (string), required
+      - **config.assigned.configMap.namespace** (string), required
 
-    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+        Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-  - **config.assigned.configMap.resourceVersion** (string)
+      - **config.assigned.configMap.resourceVersion** (string)
 
-    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+        ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-  - **config.assigned.configMap.uid** (string)
+      - **config.assigned.configMap.uid** (string)
 
-    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+        UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
   - **config.error** (string)
 
@@ -288,32 +288,32 @@ NodeStatus is information about the current status of a node.
     <a name="NodeConfigSource"></a>
     *NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.*
 
-  - **config.lastKnownGood.configMap** (ConfigMapNodeConfigSource)
+    - **config.lastKnownGood.configMap** (ConfigMapNodeConfigSource)
 
-    ConfigMap is a reference to a Node's ConfigMap
+      ConfigMap is a reference to a Node's ConfigMap
 
-    <a name="ConfigMapNodeConfigSource"></a>
-    *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
+      <a name="ConfigMapNodeConfigSource"></a>
+      *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-  - **config.lastKnownGood.configMap.kubeletConfigKey** (string), required
+      - **config.lastKnownGood.configMap.kubeletConfigKey** (string), required
 
-    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+        KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-  - **config.lastKnownGood.configMap.name** (string), required
+      - **config.lastKnownGood.configMap.name** (string), required
 
-    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+        Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-  - **config.lastKnownGood.configMap.namespace** (string), required
+      - **config.lastKnownGood.configMap.namespace** (string), required
 
-    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+        Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-  - **config.lastKnownGood.configMap.resourceVersion** (string)
+      - **config.lastKnownGood.configMap.resourceVersion** (string)
 
-    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+        ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-  - **config.lastKnownGood.configMap.uid** (string)
+      - **config.lastKnownGood.configMap.uid** (string)
 
-    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+        UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
 - **daemonEndpoints** (NodeDaemonEndpoints)
 
@@ -329,9 +329,9 @@ NodeStatus is information about the current status of a node.
     <a name="DaemonEndpoint"></a>
     *DaemonEndpoint contains information about a single Daemon endpoint.*
 
-  - **daemonEndpoints.kubeletEndpoint.Port** (int32), required
+    - **daemonEndpoints.kubeletEndpoint.Port** (int32), required
 
-    Port number of the given endpoint.
+      Port number of the given endpoint.
 
 - **images** ([]ContainerImage)
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
index f5776972a0..073da2a28a 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
@@ -76,28 +76,28 @@ PriorityLevelConfigurationSpec specifies the configuration of a priority level.
     <a name="LimitResponse"></a>
     *LimitResponse defines how to handle requests that can not be executed right now.*
 
-  - **limited.limitResponse.type** (string), required
+    - **limited.limitResponse.type** (string), required
 
-    `type` is "Queue" or "Reject". "Queue" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. "Reject" means that requests that can not be executed upon arrival are rejected. Required.
+      `type` is "Queue" or "Reject". "Queue" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. "Reject" means that requests that can not be executed upon arrival are rejected. Required.
 
-  - **limited.limitResponse.queuing** (QueuingConfiguration)
+    - **limited.limitResponse.queuing** (QueuingConfiguration)
 
-    `queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `"Queue"`.
+      `queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `"Queue"`.
 
-    <a name="QueuingConfiguration"></a>
-    *QueuingConfiguration holds the configuration parameters for queuing*
+      <a name="QueuingConfiguration"></a>
+      *QueuingConfiguration holds the configuration parameters for queuing*
 
-  - **limited.limitResponse.queuing.handSize** (int32)
+      - **limited.limitResponse.queuing.handSize** (int32)
 
-    `handSize` is a small positive number that configures the shuffle sharding of requests into queues.  When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here.  The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues).  See the user-facing documentation for more extensive guidance on setting this field.  This field has a default value of 8.
+        `handSize` is a small positive number that configures the shuffle sharding of requests into queues.  When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here.  The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues).  See the user-facing documentation for more extensive guidance on setting this field.  This field has a default value of 8.
 
-  - **limited.limitResponse.queuing.queueLengthLimit** (int32)
+      - **limited.limitResponse.queuing.queueLengthLimit** (int32)
 
-    `queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected.  This value must be positive.  If not specified, it will be defaulted to 50.
+        `queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected.  This value must be positive.  If not specified, it will be defaulted to 50.
 
-  - **limited.limitResponse.queuing.queues** (int32)
+      - **limited.limitResponse.queuing.queues** (int32)
 
-    `queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive.  Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant.  This field has a default value of 64.
+        `queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive.  Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant.  This field has a default value of 64.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
index 040c894ae3..8b08e83dd3 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
@@ -67,25 +67,25 @@ RuntimeClass defines a class of container runtime supported in the cluster. The
     <a name="Toleration"></a>
     *The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.*
 
-  - **scheduling.tolerations.key** (string)
+    - **scheduling.tolerations.key** (string)
 
-    Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+      Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
 
-  - **scheduling.tolerations.operator** (string)
+    - **scheduling.tolerations.operator** (string)
 
-    Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
+      Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
 
-  - **scheduling.tolerations.value** (string)
+    - **scheduling.tolerations.value** (string)
 
-    Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
+      Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
 
-  - **scheduling.tolerations.effect** (string)
+    - **scheduling.tolerations.effect** (string)
 
-    Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+      Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
 
-  - **scheduling.tolerations.tolerationSeconds** (int64)
+    - **scheduling.tolerations.tolerationSeconds** (int64)
 
-    TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
+      TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md b/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
deleted file mode 100644
index 5aa9f29822..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "DownwardAPIVolumeFile"
-content_type: "api_reference"
-description: "DownwardAPIVolumeFile represents information to create the file containing the pod field."
-title: "DownwardAPIVolumeFile"
-weight: 2
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-DownwardAPIVolumeFile represents information to create the file containing the pod field
-
-<hr>
-
-- **path** (string), required
-
-  Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'
-
-- **fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
-
-  Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.
-
-- **mode** (int32)
-
-  Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
-- **resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
-
-  Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
deleted file mode 100644
index 0078859720..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
+++ /dev/null
@@ -1,28 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "ExecAction"
-content_type: "api_reference"
-description: "ExecAction describes a \"run in container\" action."
-title: "ExecAction"
-weight: 3
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-ExecAction describes a "run in container" action.
-
-<hr>
-
-- **command** ([]string)
-
-  Command is the command line to execute inside the container, the working directory for the command  is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
deleted file mode 100644
index 1eabe9ac2d..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
+++ /dev/null
@@ -1,58 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "HTTPGetAction"
-content_type: "api_reference"
-description: "HTTPGetAction describes an action based on HTTP Get requests."
-title: "HTTPGetAction"
-weight: 4
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-HTTPGetAction describes an action based on HTTP Get requests.
-
-<hr>
-
-- **port** (IntOrString), required
-
-  Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-  <a name="IntOrString"></a>
-  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-- **host** (string)
-
-  Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
-
-- **httpHeaders** ([]HTTPHeader)
-
-  Custom headers to set in the request. HTTP allows repeated headers.
-
-  <a name="HTTPHeader"></a>
-  *HTTPHeader describes a custom header to be used in HTTP probes*
-
-  - **httpHeaders.name** (string), required
-
-    The header field name
-
-  - **httpHeaders.value** (string), required
-
-    The header field value
-
-- **path** (string)
-
-  Path to access on the HTTP server.
-
-- **scheme** (string)
-
-  Scheme to use for connecting to the host. Defaults to HTTP.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md b/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
deleted file mode 100644
index 622dba69a2..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
+++ /dev/null
@@ -1,226 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
-  kind: "JSONSchemaProps"
-content_type: "api_reference"
-description: "JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema."
-title: "JSONSchemaProps"
-weight: 5
----
-
-
-
-`import "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"`
-
-
-JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).
-
-<hr>
-
-- **$ref** (string)
-
-
-- **$schema** (string)
-
-
-- **additionalItems** (JSONSchemaPropsOrBool)
-
-
-  <a name="JSONSchemaPropsOrBool"></a>
-  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
-
-- **additionalProperties** (JSONSchemaPropsOrBool)
-
-
-  <a name="JSONSchemaPropsOrBool"></a>
-  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
-
-- **allOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **anyOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **default** (JSON)
-
-  default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false.
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **definitions** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **dependencies** (map[string]JSONSchemaPropsOrStringArray)
-
-
-  <a name="JSONSchemaPropsOrStringArray"></a>
-  *JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array.*
-
-- **description** (string)
-
-
-- **enum** ([]JSON)
-
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **example** (JSON)
-
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **exclusiveMaximum** (boolean)
-
-
-- **exclusiveMinimum** (boolean)
-
-
-- **externalDocs** (ExternalDocumentation)
-
-
-  <a name="ExternalDocumentation"></a>
-  *ExternalDocumentation allows referencing an external resource for extended documentation.*
-
-  - **externalDocs.description** (string)
-
-
-  - **externalDocs.url** (string)
-
-
-- **format** (string)
-
-  format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:
-  
-  - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041" - isbn10: an ISBN10 number string like "0321751043" - isbn13: an ISBN13 number string like "978-0321751041" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559" - byte: base64 encoded binary data - password: any kind of string - date: a date string like "2006-01-02" as defined by full-date in RFC3339 - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.
-
-- **id** (string)
-
-
-- **items** (JSONSchemaPropsOrArray)
-
-
-  <a name="JSONSchemaPropsOrArray"></a>
-  *JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes.*
-
-- **maxItems** (int64)
-
-
-- **maxLength** (int64)
-
-
-- **maxProperties** (int64)
-
-
-- **maximum** (double)
-
-
-- **minItems** (int64)
-
-
-- **minLength** (int64)
-
-
-- **minProperties** (int64)
-
-
-- **minimum** (double)
-
-
-- **multipleOf** (double)
-
-
-- **not** (<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **nullable** (boolean)
-
-
-- **oneOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **pattern** (string)
-
-
-- **patternProperties** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **properties** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **required** ([]string)
-
-
-- **title** (string)
-
-
-- **type** (string)
-
-
-- **uniqueItems** (boolean)
-
-
-- **x-kubernetes-embedded-resource** (boolean)
-
-  x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).
-
-- **x-kubernetes-int-or-string** (boolean)
-
-  x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:
-  
-  1) anyOf:
-     - type: integer
-     - type: string
-  2) allOf:
-     - anyOf:
-       - type: integer
-       - type: string
-     - ... zero or more
-
-- **x-kubernetes-list-map-keys** ([]string)
-
-  x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.
-  
-  This tag MUST only be used on lists that have the "x-kubernetes-list-type" extension set to "map". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).
-  
-  The properties specified must either be required or have a default value, to ensure those properties are present for all list items.
-
-- **x-kubernetes-list-type** (string)
-
-  x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:
-  
-  1) `atomic`: the list is treated as a single entity, like a scalar.
-       Atomic lists will be entirely replaced when updated. This extension
-       may be used on any type of list (struct, scalar, ...).
-  2) `set`:
-       Sets are lists that must not have multiple items with the same value. Each
-       value must be a scalar, an object with x-kubernetes-map-type `atomic` or an
-       array with x-kubernetes-list-type `atomic`.
-  3) `map`:
-       These lists are like maps in that their elements have a non-index key
-       used to identify them. Order is preserved upon merge. The map tag
-       must only be used on a list with elements of type object.
-  Defaults to atomic for arrays.
-
-- **x-kubernetes-map-type** (string)
-
-  x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:
-  
-  1) `granular`:
-       These maps are actual maps (key-value pairs) and each fields are independent
-       from each other (they can each be manipulated by separate actors). This is
-       the default behaviour for all maps.
-  2) `atomic`: the list is treated as a single entity, like a scalar.
-       Atomic maps will be entirely replaced when updated.
-
-- **x-kubernetes-preserve-unknown-fields** (boolean)
-
-  x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md b/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
deleted file mode 100644
index 64068fe1a2..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
+++ /dev/null
@@ -1,36 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "KeyToPath"
-content_type: "api_reference"
-description: "Maps a string key to a path within a volume."
-title: "KeyToPath"
-weight: 6
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Maps a string key to a path within a volume.
-
-<hr>
-
-- **key** (string), required
-
-  The key to project.
-
-- **path** (string), required
-
-  The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
-
-- **mode** (int32)
-
-  Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
index a588677077..58d94dd5b8 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "A label selector is a label query over a set of resources."
 title: "LabelSelector"
-weight: 7
+weight: 2
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md b/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
index 0b703734b0..af9749a02c 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ListMeta describes metadata that synthetic resources must have, including lists and various status objects."
 title: "ListMeta"
-weight: 8
+weight: 3
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
index e97b84aca9..83d4d046b1 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace."
 title: "LocalObjectReference"
-weight: 9
+weight: 4
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
deleted file mode 100644
index 57b0b62715..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
+++ /dev/null
@@ -1,72 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "NodeAffinity"
-content_type: "api_reference"
-description: "Node affinity is a group of node affinity scheduling rules."
-title: "NodeAffinity"
-weight: 10
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Node affinity is a group of node affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]PreferredSchedulingTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.
-
-  <a name="PreferredSchedulingTerm"></a>
-  *An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.preference** (NodeSelectorTerm), required
-
-    A node selector term, associated with the corresponding weight.
-
-    <a name="NodeSelectorTerm"></a>
-    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's labels.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's fields.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** (NodeSelector)
-
-  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.
-
-  <a name="NodeSelector"></a>
-  *A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms** ([]NodeSelectorTerm), required
-
-    Required. A list of node selector terms. The terms are ORed.
-
-    <a name="NodeSelectorTerm"></a>
-    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's labels.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's fields.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md b/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
index 3e8b935ef7..ad5c95bf4c 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values."
 title: "NodeSelectorRequirement"
-weight: 11
+weight: 5
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
index c109fa3fdf..ba4cf37ef0 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ObjectFieldSelector selects an APIVersioned field of an object."
 title: "ObjectFieldSelector"
-weight: 12
+weight: 6
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
index b3bc31e716..46361d861b 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create."
 title: "ObjectMeta"
-weight: 13
+weight: 7
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
index 71c40a0702..b1ae24f612 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ObjectReference contains enough information to let you inspect or modify the referred object."
 title: "ObjectReference"
-weight: 14
+weight: 8
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/patch.md b/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
index 054508e807..eaf37c8d15 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Patch is provided to give a concrete name and type to the Kubernetes PATCH request body."
 title: "Patch"
-weight: 15
+weight: 9
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
deleted file mode 100644
index 06291de393..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
+++ /dev/null
@@ -1,73 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "PodAffinity"
-content_type: "api_reference"
-description: "Pod affinity is a group of inter pod affinity scheduling rules."
-title: "PodAffinity"
-weight: 16
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Pod affinity is a group of inter pod affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
-
-  <a name="WeightedPodAffinityTerm"></a>
-  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
-
-    Required. A pod affinity term, associated with the corresponding weight.
-
-    <a name="PodAffinityTerm"></a>
-    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
-
-  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
-
-  <a name="PodAffinityTerm"></a>
-  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
deleted file mode 100644
index baebcc3c0c..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
+++ /dev/null
@@ -1,73 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "PodAntiAffinity"
-content_type: "api_reference"
-description: "Pod anti affinity is a group of inter pod anti affinity scheduling rules."
-title: "PodAntiAffinity"
-weight: 17
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Pod anti affinity is a group of inter pod anti affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
-
-  <a name="WeightedPodAffinityTerm"></a>
-  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
-
-    Required. A pod affinity term, associated with the corresponding weight.
-
-    <a name="PodAffinityTerm"></a>
-    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
-
-  If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
-
-  <a name="PodAffinityTerm"></a>
-  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md b/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
index c049cd40e4..f0386bb66f 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Quantity is a fixed-point representation of a number."
 title: "Quantity"
-weight: 18
+weight: 10
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
index 85e7a9a814..3d3b8d68a3 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ResourceFieldSelector represents container resources (cpu, memory) and their output format."
 title: "ResourceFieldSelector"
-weight: 19
+weight: 11
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/status.md b/content/en/docs/reference/kubernetes-api/common-definitions/status.md
index 634e5068fb..a134ed1407 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/status.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/status.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Status is a return value for calls that don't return other objects."
 title: "Status"
-weight: 20
+weight: 12
 ---
 
 
@@ -40,21 +40,21 @@ Status is a return value for calls that don't return other objects.
     <a name="StatusCause"></a>
     *StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.*
 
-  - **details.causes.field** (string)
+    - **details.causes.field** (string)
 
-    The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed.  Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.
-    
-    Examples:
-      "name" - the field "name" on the current resource
-      "items[0].name" - the field "name" on the first array entry in "items"
+      The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed.  Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.
+      
+      Examples:
+        "name" - the field "name" on the current resource
+        "items[0].name" - the field "name" on the first array entry in "items"
 
-  - **details.causes.message** (string)
+    - **details.causes.message** (string)
 
-    A human-readable description of the cause of the error.  This field may be presented as-is to a reader.
+      A human-readable description of the cause of the error.  This field may be presented as-is to a reader.
 
-  - **details.causes.reason** (string)
+    - **details.causes.reason** (string)
 
-    A machine-readable description of the cause of the error. If this value is empty there is no information available.
+      A machine-readable description of the cause of the error. If this value is empty there is no information available.
 
   - **details.group** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
deleted file mode 100644
index 991518a57a..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
+++ /dev/null
@@ -1,35 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "TCPSocketAction"
-content_type: "api_reference"
-description: "TCPSocketAction describes an action based on opening a socket."
-title: "TCPSocketAction"
-weight: 21
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-TCPSocketAction describes an action based on opening a socket
-
-<hr>
-
-- **port** (IntOrString), required
-
-  Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-  <a name="IntOrString"></a>
-  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-- **host** (string)
-
-  Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
index c03c3c8409..2ec9fd5176 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "TypedLocalObjectReference contains enough information to let you locate the typed referenced object inside the same namespace."
 title: "TypedLocalObjectReference"
-weight: 22
+weight: 13
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
index b543e6c9ac..7d7dac6bf0 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
@@ -40,7 +40,7 @@ ConfigMap holds configuration data for pods to consume.
 
 - **immutable** (boolean)
 
-  Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil. This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
+  Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
index b1c634b6b2..ddcef415e8 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
@@ -47,17 +47,23 @@ CSIDriverSpec is the specification of a CSIDriver.
 - **attachRequired** (boolean)
 
   attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.
+  
+  This field is immutable.
 
 - **fsGroupPolicy** (string)
 
   Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate.
+  
+  This field is immutable.
 
 - **podInfoOnMount** (boolean)
 
-  If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. "csi.storage.k8s.io/pod.name": pod.Name "csi.storage.k8s.io/pod.namespace": pod.Namespace "csi.storage.k8s.io/pod.uid": string(pod.UID) "csi.storage.k8s.io/ephemeral": "true" iff the volume is an ephemeral inline volume
+  If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. "csi.storage.k8s.io/pod.name": pod.Name "csi.storage.k8s.io/pod.namespace": pod.Namespace "csi.storage.k8s.io/pod.uid": string(pod.UID) "csi.storage.k8s.io/ephemeral": "true" if the volume is an ephemeral inline volume
                                   defined by a CSIVolumeSource, otherwise "false"
   
   "csi.storage.k8s.io/ephemeral" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the "Persistent" and "Ephemeral" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.
+  
+  This field is immutable.
 
 - **requiresRepublish** (boolean)
 
@@ -65,7 +71,7 @@ CSIDriverSpec is the specification of a CSIDriver.
   
   Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.
   
-  This is an alpha feature and only available when the CSIServiceAccountToken feature is enabled.
+  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.
 
 - **storageCapacity** (boolean)
 
@@ -75,7 +81,9 @@ CSIDriverSpec is the specification of a CSIDriver.
   
   Alternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.
   
-  This is an alpha field and only available when the CSIStorageCapacity feature is enabled. The default is false.
+  This field is immutable.
+  
+  This is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.
 
 - **tokenRequests** ([]TokenRequest)
 
@@ -91,7 +99,7 @@ CSIDriverSpec is the specification of a CSIDriver.
   
   Note: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.
   
-  This is an alpha feature and only available when the CSIServiceAccountToken feature is enabled.
+  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.
 
   <a name="TokenRequest"></a>
   *TokenRequest contains parameters of a service account token.*
@@ -109,6 +117,8 @@ CSIDriverSpec is the specification of a CSIDriver.
   *Set: unique values will be kept during a merge*
   
   volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is "Persistent", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is "Ephemeral". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future. This field is beta.
+  
+  This field is immutable.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
index aaee041979..d918d4568f 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
@@ -68,9 +68,9 @@ CSINodeSpec holds information about the specification of all CSI drivers install
     <a name="VolumeNodeResources"></a>
     *VolumeNodeResources is a set of resource limits for scheduling of volumes.*
 
-  - **drivers.allocatable.count** (int32)
+    - **drivers.allocatable.count** (int32)
 
-    Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.
+      Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.
 
   - **drivers.topologyKeys** ([]string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
new file mode 100644
index 0000000000..1b619a0ef2
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
@@ -0,0 +1,566 @@
+---
+api_metadata:
+  apiVersion: "storage.k8s.io/v1beta1"
+  import: "k8s.io/api/storage/v1beta1"
+  kind: "CSIStorageCapacity"
+content_type: "api_reference"
+description: "CSIStorageCapacity stores the result of one CSI GetCapacity call."
+title: "CSIStorageCapacity v1beta1"
+weight: 10
+---
+
+`apiVersion: storage.k8s.io/v1beta1`
+
+`import "k8s.io/api/storage/v1beta1"`
+
+
+## CSIStorageCapacity {#CSIStorageCapacity}
+
+CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment.  This can be used when considering where to instantiate new PersistentVolumes.
+
+For example this can express things like: - StorageClass "standard" has "1234 GiB" available in "topology.kubernetes.io/zone=us-east1" - StorageClass "localssd" has "10 GiB" available in "kubernetes.io/hostname=knode-abc123"
+
+The following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero
+
+The producer of these objects can decide which approach is more suitable.
+
+They are consumed by the kube-scheduler if the CSIStorageCapacity beta feature gate is enabled there and a CSI driver opts into capacity-aware scheduling with CSIDriver.StorageCapacity.
+
+<hr>
+
+- **apiVersion**: storage.k8s.io/v1beta1
+
+
+- **kind**: CSIStorageCapacity
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+
+  Standard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\<uuid>, a generated name, or a reverse-domain name which ends with the unique CSI driver name.
+  
+  Objects are namespaced.
+  
+  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
+- **storageClassName** (string), required
+
+  The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.
+
+- **capacity** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+  Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.
+  
+  The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity.
+
+- **maximumVolumeSize** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+  MaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.
+  
+  This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.
+
+- **nodeTopology** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+  NodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.
+
+
+
+
+
+## CSIStorageCapacityList {#CSIStorageCapacityList}
+
+CSIStorageCapacityList is a collection of CSIStorageCapacity objects.
+
+<hr>
+
+- **apiVersion**: storage.k8s.io/v1beta1
+
+
+- **kind**: CSIStorageCapacityList
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
+
+  Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
+- **items** ([]<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>), required
+
+  *Map: unique values on key name will be kept during a merge*
+  
+  Items is the list of CSIStorageCapacity objects.
+
+
+
+
+
+## Operations {#Operations}
+
+
+
+<hr>
+
+
+
+
+
+
+### `get` read the specified CSIStorageCapacity
+
+#### HTTP Request
+
+GET /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CSIStorageCapacity
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind CSIStorageCapacity
+
+#### HTTP Request
+
+GET /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacityList" >}}">CSIStorageCapacityList</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind CSIStorageCapacity
+
+#### HTTP Request
+
+GET /apis/storage.k8s.io/v1beta1/csistoragecapacities
+
+#### Parameters
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacityList" >}}">CSIStorageCapacityList</a>): OK
+
+401: Unauthorized
+
+
+### `create` create a CSIStorageCapacity
+
+#### HTTP Request
+
+POST /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
+
+201 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): Created
+
+202 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): Accepted
+
+401: Unauthorized
+
+
+### `update` replace the specified CSIStorageCapacity
+
+#### HTTP Request
+
+PUT /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CSIStorageCapacity
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
+
+201 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): Created
+
+401: Unauthorized
+
+
+### `patch` partially update the specified CSIStorageCapacity
+
+#### HTTP Request
+
+PATCH /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CSIStorageCapacity
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
+
+401: Unauthorized
+
+
+### `delete` delete a CSIStorageCapacity
+
+#### HTTP Request
+
+DELETE /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CSIStorageCapacity
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
+
+202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
+
+401: Unauthorized
+
+
+### `deletecollection` delete collection of CSIStorageCapacity
+
+#### HTTP Request
+
+DELETE /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
+
+401: Unauthorized
+
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
index 23b4f3214e..b05083deb4 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
@@ -65,11 +65,11 @@ PersistentVolumeClaimSpec describes the common attributes of storage devices and
 
   - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
 
   - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
 
 - **volumeName** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
index cbc4a613d5..e02238f3ad 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
@@ -78,20 +78,20 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="NodeSelector"></a>
     *A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.*
 
-  - **nodeAffinity.required.nodeSelectorTerms** ([]NodeSelectorTerm), required
+    - **nodeAffinity.required.nodeSelectorTerms** ([]NodeSelectorTerm), required
 
-    Required. A list of node selector terms. The terms are ORed.
+      Required. A list of node selector terms. The terms are ORed.
 
-    <a name="NodeSelectorTerm"></a>
-    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
+      <a name="NodeSelectorTerm"></a>
+      *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
 
-  - **nodeAffinity.required.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+      - **nodeAffinity.required.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
 
-    A list of node selector requirements by node's labels.
+        A list of node selector requirements by node's labels.
 
-  - **nodeAffinity.required.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+      - **nodeAffinity.required.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
 
-    A list of node selector requirements by node's fields.
+        A list of node selector requirements by node's fields.
 
 - **persistentVolumeReclaimPolicy** (string)
 
@@ -252,13 +252,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-  - **cephfs.secretRef.name** (string)
+    - **cephfs.secretRef.name** (string)
 
-    Name is unique within a namespace to reference a secret resource.
+      Name is unique within a namespace to reference a secret resource.
 
-  - **cephfs.secretRef.namespace** (string)
+    - **cephfs.secretRef.namespace** (string)
 
-    Namespace defines the space within which the secret name must be unique.
+      Namespace defines the space within which the secret name must be unique.
 
   - **cephfs.user** (string)
 
@@ -290,13 +290,100 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-  - **cinder.secretRef.name** (string)
+    - **cinder.secretRef.name** (string)
 
-    Name is unique within a namespace to reference a secret resource.
+      Name is unique within a namespace to reference a secret resource.
 
-  - **cinder.secretRef.namespace** (string)
+    - **cinder.secretRef.namespace** (string)
 
-    Namespace defines the space within which the secret name must be unique.
+      Namespace defines the space within which the secret name must be unique.
+
+- **csi** (CSIPersistentVolumeSource)
+
+  CSI represents storage that is handled by an external CSI driver (Beta feature).
+
+  <a name="CSIPersistentVolumeSource"></a>
+  *Represents storage that is managed by an external CSI volume driver (Beta feature)*
+
+  - **csi.driver** (string), required
+
+    Driver is the name of the driver to use for this volume. Required.
+
+  - **csi.volumeHandle** (string), required
+
+    VolumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.
+
+  - **csi.controllerExpandSecretRef** (SecretReference)
+
+    ControllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This is an alpha field and requires enabling ExpandCSIVolumes feature gate. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+    - **csi.controllerExpandSecretRef.name** (string)
+
+      Name is unique within a namespace to reference a secret resource.
+
+    - **csi.controllerExpandSecretRef.namespace** (string)
+
+      Namespace defines the space within which the secret name must be unique.
+
+  - **csi.controllerPublishSecretRef** (SecretReference)
+
+    ControllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+    - **csi.controllerPublishSecretRef.name** (string)
+
+      Name is unique within a namespace to reference a secret resource.
+
+    - **csi.controllerPublishSecretRef.namespace** (string)
+
+      Namespace defines the space within which the secret name must be unique.
+
+  - **csi.fsType** (string)
+
+    Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs".
+
+  - **csi.nodePublishSecretRef** (SecretReference)
+
+    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+    - **csi.nodePublishSecretRef.name** (string)
+
+      Name is unique within a namespace to reference a secret resource.
+
+    - **csi.nodePublishSecretRef.namespace** (string)
+
+      Namespace defines the space within which the secret name must be unique.
+
+  - **csi.nodeStageSecretRef** (SecretReference)
+
+    NodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+    - **csi.nodeStageSecretRef.name** (string)
+
+      Name is unique within a namespace to reference a secret resource.
+
+    - **csi.nodeStageSecretRef.namespace** (string)
+
+      Namespace defines the space within which the secret name must be unique.
+
+  - **csi.readOnly** (boolean)
+
+    Optional: The value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).
+
+  - **csi.volumeAttributes** (map[string]string)
+
+    Attributes of the volume to publish.
 
 - **fc** (FCVolumeSource)
 
@@ -355,13 +442,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-  - **flexVolume.secretRef.name** (string)
+    - **flexVolume.secretRef.name** (string)
 
-    Name is unique within a namespace to reference a secret resource.
+      Name is unique within a namespace to reference a secret resource.
 
-  - **flexVolume.secretRef.namespace** (string)
+    - **flexVolume.secretRef.namespace** (string)
 
-    Namespace defines the space within which the secret name must be unique.
+      Namespace defines the space within which the secret name must be unique.
 
 - **flocker** (FlockerVolumeSource)
 
@@ -480,13 +567,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-  - **iscsi.secretRef.name** (string)
+    - **iscsi.secretRef.name** (string)
 
-    Name is unique within a namespace to reference a secret resource.
+      Name is unique within a namespace to reference a secret resource.
 
-  - **iscsi.secretRef.namespace** (string)
+    - **iscsi.secretRef.namespace** (string)
 
-    Namespace defines the space within which the secret name must be unique.
+      Namespace defines the space within which the secret name must be unique.
 
 - **nfs** (NFSVolumeSource)
 
@@ -610,13 +697,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-  - **rbd.secretRef.name** (string)
+    - **rbd.secretRef.name** (string)
 
-    Name is unique within a namespace to reference a secret resource.
+      Name is unique within a namespace to reference a secret resource.
 
-  - **rbd.secretRef.namespace** (string)
+    - **rbd.secretRef.namespace** (string)
 
-    Namespace defines the space within which the secret name must be unique.
+      Namespace defines the space within which the secret name must be unique.
 
   - **rbd.user** (string)
 
@@ -640,13 +727,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-  - **scaleIO.secretRef.name** (string)
+    - **scaleIO.secretRef.name** (string)
 
-    Name is unique within a namespace to reference a secret resource.
+      Name is unique within a namespace to reference a secret resource.
 
-  - **scaleIO.secretRef.namespace** (string)
+    - **scaleIO.secretRef.namespace** (string)
 
-    Namespace defines the space within which the secret name must be unique.
+      Namespace defines the space within which the secret name must be unique.
 
   - **scaleIO.system** (string), required
 
@@ -730,96 +817,6 @@ PersistentVolumeSpec is the specification of a persistent volume.
 
     Storage Policy Based Management (SPBM) profile name.
 
-### Beta level
-
-
-- **csi** (CSIPersistentVolumeSource)
-
-  CSI represents storage that is handled by an external CSI driver (Beta feature).
-
-  <a name="CSIPersistentVolumeSource"></a>
-  *Represents storage that is managed by an external CSI volume driver (Beta feature)*
-
-  - **csi.driver** (string), required
-
-    Driver is the name of the driver to use for this volume. Required.
-
-  - **csi.volumeHandle** (string), required
-
-    VolumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.
-
-  - **csi.controllerExpandSecretRef** (SecretReference)
-
-    ControllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This is an alpha field and requires enabling ExpandCSIVolumes feature gate. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-  - **csi.controllerExpandSecretRef.name** (string)
-
-    Name is unique within a namespace to reference a secret resource.
-
-  - **csi.controllerExpandSecretRef.namespace** (string)
-
-    Namespace defines the space within which the secret name must be unique.
-
-  - **csi.controllerPublishSecretRef** (SecretReference)
-
-    ControllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-  - **csi.controllerPublishSecretRef.name** (string)
-
-    Name is unique within a namespace to reference a secret resource.
-
-  - **csi.controllerPublishSecretRef.namespace** (string)
-
-    Namespace defines the space within which the secret name must be unique.
-
-  - **csi.fsType** (string)
-
-    Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs".
-
-  - **csi.nodePublishSecretRef** (SecretReference)
-
-    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-  - **csi.nodePublishSecretRef.name** (string)
-
-    Name is unique within a namespace to reference a secret resource.
-
-  - **csi.nodePublishSecretRef.namespace** (string)
-
-    Namespace defines the space within which the secret name must be unique.
-
-  - **csi.nodeStageSecretRef** (SecretReference)
-
-    NodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-  - **csi.nodeStageSecretRef.name** (string)
-
-    Name is unique within a namespace to reference a secret resource.
-
-  - **csi.nodeStageSecretRef.namespace** (string)
-
-    Namespace defines the space within which the secret name must be unique.
-
-  - **csi.readOnly** (boolean)
-
-    Optional: The value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).
-
-  - **csi.volumeAttributes** (map[string]string)
-
-    Attributes of the volume to publish.
-
 
 
 ## PersistentVolumeStatus {#PersistentVolumeStatus}
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
index 84d9a08c0f..8dd7eb4a48 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
@@ -36,11 +36,11 @@ Secret holds secret data of a certain type. The total bytes of the values in the
 
 - **immutable** (boolean)
 
-  Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil. This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
+  Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.
 
 - **stringData** (map[string]string)
 
-  stringData allows specifying non-binary secret data in string form. It is provided as a write-only convenience method. All keys and values are merged into the data field on write, overwriting any existing values. It is never output when reading from the API.
+  stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.
 
 - **type** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
index 752735f6f6..24d9636d49 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
@@ -54,13 +54,13 @@ StorageClasses are non-namespaced; the name of the storage class according to et
     <a name="TopologySelectorLabelRequirement"></a>
     *A topology selector requirement is a selector that matches given label. This is an alpha feature and may change in the future.*
 
-  - **allowedTopologies.matchLabelExpressions.key** (string), required
+    - **allowedTopologies.matchLabelExpressions.key** (string), required
 
-    The label key that the selector applies to.
+      The label key that the selector applies to.
 
-  - **allowedTopologies.matchLabelExpressions.values** ([]string), required
+    - **allowedTopologies.matchLabelExpressions.values** ([]string), required
 
-    An array of string values. One value must match the label to be selected. Each entry in Values is ORed.
+      An array of string values. One value must match the label to be selected. Each entry in Values is ORed.
 
 - **mountOptions** ([]string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
index 95102c3988..8e83398b69 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
@@ -67,7 +67,7 @@ VolumeAttachmentSpec is the specification of a VolumeAttachment request.
 
   - **source.inlineVolumeSpec** (<a href="{{< ref "../config-and-storage-resources/persistent-volume-v1#PersistentVolumeSpec" >}}">PersistentVolumeSpec</a>)
 
-    inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is alpha-level and is only honored by servers that enabled the CSIMigration feature.
+    inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.
 
   - **source.persistentVolumeName** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
index ff45652ace..ff72bda7f0 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
@@ -14,6 +14,8 @@ weight: 3
 `import "k8s.io/api/core/v1"`
 
 
+## Volume {#Volume}
+
 Volume represents a named volume in a pod that may be accessed by any container in the pod.
 
 <hr>
@@ -24,7 +26,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
 
 
-### Exposed Persistent volumes {#Exposed-Persistent-volumes}
+### Exposed Persistent volumes
 
 
 - **persistentVolumeClaim** (PersistentVolumeClaimVolumeSource)
@@ -42,7 +44,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Will force the ReadOnly setting in VolumeMounts. Default false.
 
-### Projections {#Projections}
+### Projections
 
 
 - **configMap** (ConfigMapVolumeSource)
@@ -66,7 +68,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
 
-  - **configMap.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
+  - **configMap.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
 
     If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
@@ -91,7 +93,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
 
-  - **secret.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
+  - **secret.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
 
     If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
@@ -106,7 +108,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
 
-  - **downwardAPI.items** ([]<a href="{{< ref "../common-definitions/downward-api-volume-file#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
+  - **downwardAPI.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
 
     Items is a list of downward API volume file
 
@@ -128,79 +130,79 @@ Volume represents a named volume in a pod that may be accessed by any container
     <a name="VolumeProjection"></a>
     *Projection that may be projected along with other supported volume types*
 
-  - **projected.sources.configMap** (ConfigMapProjection)
+    - **projected.sources.configMap** (ConfigMapProjection)
 
-    information about the configMap data to project
+      information about the configMap data to project
 
-    <a name="ConfigMapProjection"></a>
-    *Adapts a ConfigMap into a projected volume.
-    
-    The contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.*
+      <a name="ConfigMapProjection"></a>
+      *Adapts a ConfigMap into a projected volume.
+      
+      The contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.*
 
-  - **projected.sources.configMap.name** (string)
+      - **projected.sources.configMap.name** (string)
 
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-  - **projected.sources.configMap.optional** (boolean)
+      - **projected.sources.configMap.optional** (boolean)
 
-    Specify whether the ConfigMap or its keys must be defined
+        Specify whether the ConfigMap or its keys must be defined
 
-  - **projected.sources.configMap.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
+      - **projected.sources.configMap.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
 
-    If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
+        If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
-  - **projected.sources.downwardAPI** (DownwardAPIProjection)
+    - **projected.sources.downwardAPI** (DownwardAPIProjection)
 
-    information about the downwardAPI data to project
+      information about the downwardAPI data to project
 
-    <a name="DownwardAPIProjection"></a>
-    *Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.*
+      <a name="DownwardAPIProjection"></a>
+      *Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.*
 
-  - **projected.sources.downwardAPI.items** ([]<a href="{{< ref "../common-definitions/downward-api-volume-file#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
+      - **projected.sources.downwardAPI.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
 
-    Items is a list of DownwardAPIVolume file
+        Items is a list of DownwardAPIVolume file
 
-  - **projected.sources.secret** (SecretProjection)
+    - **projected.sources.secret** (SecretProjection)
 
-    information about the secret data to project
+      information about the secret data to project
 
-    <a name="SecretProjection"></a>
-    *Adapts a secret into a projected volume.
-    
-    The contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.*
+      <a name="SecretProjection"></a>
+      *Adapts a secret into a projected volume.
+      
+      The contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.*
 
-  - **projected.sources.secret.name** (string)
+      - **projected.sources.secret.name** (string)
 
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-  - **projected.sources.secret.optional** (boolean)
+      - **projected.sources.secret.optional** (boolean)
 
-    Specify whether the Secret or its key must be defined
+        Specify whether the Secret or its key must be defined
 
-  - **projected.sources.secret.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
+      - **projected.sources.secret.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
 
-    If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
+        If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
-  - **projected.sources.serviceAccountToken** (ServiceAccountTokenProjection)
+    - **projected.sources.serviceAccountToken** (ServiceAccountTokenProjection)
 
-    information about the serviceAccountToken data to project
+      information about the serviceAccountToken data to project
 
-    <a name="ServiceAccountTokenProjection"></a>
-    *ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).*
+      <a name="ServiceAccountTokenProjection"></a>
+      *ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).*
 
-  - **projected.sources.serviceAccountToken.path** (string), required
+      - **projected.sources.serviceAccountToken.path** (string), required
 
-    Path is the path relative to the mount point of the file to project the token into.
+        Path is the path relative to the mount point of the file to project the token into.
 
-  - **projected.sources.serviceAccountToken.audience** (string)
+      - **projected.sources.serviceAccountToken.audience** (string)
 
-    Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
+        Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
 
-  - **projected.sources.serviceAccountToken.expirationSeconds** (int64)
+      - **projected.sources.serviceAccountToken.expirationSeconds** (int64)
 
-    ExpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
+        ExpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
 
-### Local / Temporary Directory {#Local-Temporary-Directory}
+### Local / Temporary Directory
 
 
 - **emptyDir** (EmptyDirVolumeSource)
@@ -233,7 +235,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Type for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
 
-### Persistent volumes {#Persistent-volumes}
+### Persistent volumes
 
 
 - **awsElasticBlockStore** (AWSElasticBlockStoreVolumeSource)
@@ -365,6 +367,33 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: points to a secret object containing parameters used to connect to OpenStack.
 
+- **csi** (CSIVolumeSource)
+
+  CSI (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).
+
+  <a name="CSIVolumeSource"></a>
+  *Represents a source location of a volume to mount, managed by an external CSI driver*
+
+  - **csi.driver** (string), required
+
+    Driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.
+
+  - **csi.fsType** (string)
+
+    Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
+
+  - **csi.nodePublishSecretRef** (<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
+
+    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and  may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
+
+  - **csi.readOnly** (boolean)
+
+    Specifies a read-only configuration for the volume. Defaults to false (read/write).
+
+  - **csi.volumeAttributes** (map[string]string)
+
+    VolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.
+
 - **fc** (FCVolumeSource)
 
   FC represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.
@@ -749,42 +778,12 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Storage Policy Based Management (SPBM) profile name.
 
-### Beta level {#Beta-level}
-
-
-- **csi** (CSIVolumeSource)
-
-  CSI (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).
-
-  <a name="CSIVolumeSource"></a>
-  *Represents a source location of a volume to mount, managed by an external CSI driver*
-
-  - **csi.driver** (string), required
-
-    Driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.
-
-  - **csi.fsType** (string)
-
-    Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
-  - **csi.nodePublishSecretRef** (<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
-
-    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and  may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
-  - **csi.readOnly** (boolean)
-
-    Specifies a read-only configuration for the volume. Defaults to false (read/write).
-
-  - **csi.volumeAttributes** (map[string]string)
-
-    VolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.
-
-### Alpha level {#Alpha-level}
+### Alpha level
 
 
 - **ephemeral** (EphemeralVolumeSource)
 
-  Ephemeral represents a volume that is handled by a cluster storage driver (Alpha feature). The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
+  Ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
   
   Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity
      tracking are needed,
@@ -798,14 +797,12 @@ Volume represents a named volume in a pod that may be accessed by any container
   Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
   
   A pod can use both types of ephemeral volumes and persistent volumes at the same time.
+  
+  This is a beta feature and only available when the GenericEphemeralVolume feature gate is enabled.
 
   <a name="EphemeralVolumeSource"></a>
   *Represents an ephemeral volume that is handled by a normal storage driver.*
 
-  - **ephemeral.readOnly** (boolean)
-
-    Specifies a read-only configuration for the volume. Defaults to false (read/write).
-
   - **ephemeral.volumeClaimTemplate** (PersistentVolumeClaimTemplate)
 
     Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod.  The name of the PVC will be `\<pod name>-\<volume name>` where `\<volume name>` is the name from the `PodSpec.Volumes` array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).
@@ -819,15 +816,15 @@ Volume represents a named volume in a pod that may be accessed by any container
     <a name="PersistentVolumeClaimTemplate"></a>
     *PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim objects as part of an EphemeralVolumeSource.*
 
-  - **ephemeral.volumeClaimTemplate.spec** (<a href="{{< ref "../config-and-storage-resources/persistent-volume-claim-v1#PersistentVolumeClaimSpec" >}}">PersistentVolumeClaimSpec</a>), required
+    - **ephemeral.volumeClaimTemplate.spec** (<a href="{{< ref "../config-and-storage-resources/persistent-volume-claim-v1#PersistentVolumeClaimSpec" >}}">PersistentVolumeClaimSpec</a>), required
 
-    The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.
+      The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.
 
-  - **ephemeral.volumeClaimTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+    - **ephemeral.volumeClaimTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
-    May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
+      May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
 
-### Deprecated {#Deprecated}
+### Deprecated
 
 
 - **gitRepo** (GitRepoVolumeSource)
@@ -853,3 +850,51 @@ Volume represents a named volume in a pod that may be accessed by any container
 
 
 
+## DownwardAPIVolumeFile {#DownwardAPIVolumeFile}
+
+DownwardAPIVolumeFile represents information to create the file containing the pod field
+
+<hr>
+
+- **path** (string), required
+
+  Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'
+
+- **fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
+
+  Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.
+
+- **mode** (int32)
+
+  Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
+- **resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
+
+  Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
+
+
+
+
+
+## KeyToPath {#KeyToPath}
+
+Maps a string key to a path within a volume.
+
+<hr>
+
+- **key** (string), required
+
+  The key to project.
+
+- **path** (string), required
+
+  The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+
+- **mode** (int32)
+
+  Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
index 8aa8ed0c78..5597325fac 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
@@ -112,29 +112,29 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="CustomResourceColumnDefinition"></a>
     *CustomResourceColumnDefinition specifies a column for server side printing.*
 
-  - **versions.additionalPrinterColumns.jsonPath** (string), required
+    - **versions.additionalPrinterColumns.jsonPath** (string), required
 
-    jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.
+      jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.
 
-  - **versions.additionalPrinterColumns.name** (string), required
+    - **versions.additionalPrinterColumns.name** (string), required
 
-    name is a human readable name for the column.
+      name is a human readable name for the column.
 
-  - **versions.additionalPrinterColumns.type** (string), required
+    - **versions.additionalPrinterColumns.type** (string), required
 
-    type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
+      type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
 
-  - **versions.additionalPrinterColumns.description** (string)
+    - **versions.additionalPrinterColumns.description** (string)
 
-    description is a human readable description of this column.
+      description is a human readable description of this column.
 
-  - **versions.additionalPrinterColumns.format** (string)
+    - **versions.additionalPrinterColumns.format** (string)
 
-    format is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
+      format is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
 
-  - **versions.additionalPrinterColumns.priority** (int32)
+    - **versions.additionalPrinterColumns.priority** (int32)
 
-    priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.
+      priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.
 
   - **versions.deprecated** (boolean)
 
@@ -151,9 +151,9 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="CustomResourceValidation"></a>
     *CustomResourceValidation is a list of validation methods for CustomResources.*
 
-  - **versions.schema.openAPIV3Schema** (<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+    - **versions.schema.openAPIV3Schema** (<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
 
-    openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.
+      openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.
 
   - **versions.subresources** (CustomResourceSubresources)
 
@@ -162,31 +162,31 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="CustomResourceSubresources"></a>
     *CustomResourceSubresources defines the status and scale subresources for CustomResources.*
 
-  - **versions.subresources.scale** (CustomResourceSubresourceScale)
+    - **versions.subresources.scale** (CustomResourceSubresourceScale)
 
-    scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.
+      scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.
 
-    <a name="CustomResourceSubresourceScale"></a>
-    *CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.*
+      <a name="CustomResourceSubresourceScale"></a>
+      *CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.*
 
-  - **versions.subresources.scale.specReplicasPath** (string), required
+      - **versions.subresources.scale.specReplicasPath** (string), required
 
-    specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.
+        specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.
 
-  - **versions.subresources.scale.statusReplicasPath** (string), required
+      - **versions.subresources.scale.statusReplicasPath** (string), required
 
-    statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.
+        statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.
 
-  - **versions.subresources.scale.labelSelectorPath** (string)
+      - **versions.subresources.scale.labelSelectorPath** (string)
 
-    labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.
+        labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.
 
-  - **versions.subresources.status** (CustomResourceSubresourceStatus)
+    - **versions.subresources.status** (CustomResourceSubresourceStatus)
 
-    status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.
+      status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.
 
-    <a name="CustomResourceSubresourceStatus"></a>
-    *CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza*
+      <a name="CustomResourceSubresourceStatus"></a>
+      *CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza*
 
 - **conversion** (CustomResourceConversion)
 
@@ -207,59 +207,59 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="WebhookConversion"></a>
     *WebhookConversion describes how to call a conversion webhook*
 
-  - **conversion.webhook.conversionReviewVersions** ([]string), required
+    - **conversion.webhook.conversionReviewVersions** ([]string), required
 
-    conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail.
+      conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail.
 
-  - **conversion.webhook.clientConfig** (WebhookClientConfig)
+    - **conversion.webhook.clientConfig** (WebhookClientConfig)
 
-    clientConfig is the instructions for how to call the webhook if strategy is `Webhook`.
+      clientConfig is the instructions for how to call the webhook if strategy is `Webhook`.
 
-    <a name="WebhookClientConfig"></a>
-    *WebhookClientConfig contains the information to make a TLS connection with the webhook.*
+      <a name="WebhookClientConfig"></a>
+      *WebhookClientConfig contains the information to make a TLS connection with the webhook.*
 
-  - **conversion.webhook.clientConfig.caBundle** ([]byte)
+      - **conversion.webhook.clientConfig.caBundle** ([]byte)
 
-    caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
+        caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
 
-  - **conversion.webhook.clientConfig.service** (ServiceReference)
+      - **conversion.webhook.clientConfig.service** (ServiceReference)
 
-    service is a reference to the service for this webhook. Either service or url must be specified.
-    
-    If the webhook is running within the cluster, then you should use `service`.
+        service is a reference to the service for this webhook. Either service or url must be specified.
+        
+        If the webhook is running within the cluster, then you should use `service`.
 
-    <a name="ServiceReference"></a>
-    *ServiceReference holds a reference to Service.legacy.k8s.io*
+        <a name="ServiceReference"></a>
+        *ServiceReference holds a reference to Service.legacy.k8s.io*
 
-  - **conversion.webhook.clientConfig.service.name** (string), required
+        - **conversion.webhook.clientConfig.service.name** (string), required
 
-    name is the name of the service. Required
+          name is the name of the service. Required
 
-  - **conversion.webhook.clientConfig.service.namespace** (string), required
+        - **conversion.webhook.clientConfig.service.namespace** (string), required
 
-    namespace is the namespace of the service. Required
+          namespace is the namespace of the service. Required
 
-  - **conversion.webhook.clientConfig.service.path** (string)
+        - **conversion.webhook.clientConfig.service.path** (string)
 
-    path is an optional URL path at which the webhook will be contacted.
+          path is an optional URL path at which the webhook will be contacted.
 
-  - **conversion.webhook.clientConfig.service.port** (int32)
+        - **conversion.webhook.clientConfig.service.port** (int32)
 
-    port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.
+          port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.
 
-  - **conversion.webhook.clientConfig.url** (string)
+      - **conversion.webhook.clientConfig.url** (string)
 
-    url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
-
-    The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
-
-    Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installations are likely to be non-portable or not readily run in a new cluster.
-
-    The scheme must be "https"; the URL must begin with "https://".
-
-    A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
-
-    Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
+        url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
+        
+        The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
+        
+        Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.
+        
+        The scheme must be "https"; the URL must begin with "https://".
+        
+        A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
+        
+        Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
 
 - **preserveUnknownFields** (boolean)
 
@@ -269,6 +269,218 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
 
 
 
+## JSONSchemaProps {#JSONSchemaProps}
+
+JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).
+
+<hr>
+
+- **$ref** (string)
+
+
+- **$schema** (string)
+
+
+- **additionalItems** (JSONSchemaPropsOrBool)
+
+
+  <a name="JSONSchemaPropsOrBool"></a>
+  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
+
+- **additionalProperties** (JSONSchemaPropsOrBool)
+
+
+  <a name="JSONSchemaPropsOrBool"></a>
+  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
+
+- **allOf** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **anyOf** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **default** (JSON)
+
+  default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false.
+
+  <a name="JSON"></a>
+  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
+
+- **definitions** (map[string]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **dependencies** (map[string]JSONSchemaPropsOrStringArray)
+
+
+  <a name="JSONSchemaPropsOrStringArray"></a>
+  *JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array.*
+
+- **description** (string)
+
+
+- **enum** ([]JSON)
+
+
+  <a name="JSON"></a>
+  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
+
+- **example** (JSON)
+
+
+  <a name="JSON"></a>
+  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
+
+- **exclusiveMaximum** (boolean)
+
+
+- **exclusiveMinimum** (boolean)
+
+
+- **externalDocs** (ExternalDocumentation)
+
+
+  <a name="ExternalDocumentation"></a>
+  *ExternalDocumentation allows referencing an external resource for extended documentation.*
+
+  - **externalDocs.description** (string)
+
+
+  - **externalDocs.url** (string)
+
+
+- **format** (string)
+
+  format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:
+  
+  - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041" - isbn10: an ISBN10 number string like "0321751043" - isbn13: an ISBN13 number string like "978-0321751041" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559" - byte: base64 encoded binary data - password: any kind of string - date: a date string like "2006-01-02" as defined by full-date in RFC3339 - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.
+
+- **id** (string)
+
+
+- **items** (JSONSchemaPropsOrArray)
+
+
+  <a name="JSONSchemaPropsOrArray"></a>
+  *JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes.*
+
+- **maxItems** (int64)
+
+
+- **maxLength** (int64)
+
+
+- **maxProperties** (int64)
+
+
+- **maximum** (double)
+
+
+- **minItems** (int64)
+
+
+- **minLength** (int64)
+
+
+- **minProperties** (int64)
+
+
+- **minimum** (double)
+
+
+- **multipleOf** (double)
+
+
+- **not** (<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **nullable** (boolean)
+
+
+- **oneOf** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **pattern** (string)
+
+
+- **patternProperties** (map[string]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **properties** (map[string]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **required** ([]string)
+
+
+- **title** (string)
+
+
+- **type** (string)
+
+
+- **uniqueItems** (boolean)
+
+
+- **x-kubernetes-embedded-resource** (boolean)
+
+  x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).
+
+- **x-kubernetes-int-or-string** (boolean)
+
+  x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:
+  
+  1) anyOf:
+     - type: integer
+     - type: string
+  2) allOf:
+     - anyOf:
+       - type: integer
+       - type: string
+     - ... zero or more
+
+- **x-kubernetes-list-map-keys** ([]string)
+
+  x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.
+  
+  This tag MUST only be used on lists that have the "x-kubernetes-list-type" extension set to "map". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).
+  
+  The properties specified must either be required or have a default value, to ensure those properties are present for all list items.
+
+- **x-kubernetes-list-type** (string)
+
+  x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:
+  
+  1) `atomic`: the list is treated as a single entity, like a scalar.
+       Atomic lists will be entirely replaced when updated. This extension
+       may be used on any type of list (struct, scalar, ...).
+  2) `set`:
+       Sets are lists that must not have multiple items with the same value. Each
+       value must be a scalar, an object with x-kubernetes-map-type `atomic` or an
+       array with x-kubernetes-list-type `atomic`.
+  3) `map`:
+       These lists are like maps in that their elements have a non-index key
+       used to identify them. Order is preserved upon merge. The map tag
+       must only be used on a list with elements of type object.
+  Defaults to atomic for arrays.
+
+- **x-kubernetes-map-type** (string)
+
+  x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:
+  
+  1) `granular`:
+       These maps are actual maps (key-value pairs) and each fields are independent
+       from each other (they can each be manipulated by separate actors). This is
+       the default behaviour for all maps.
+  2) `atomic`: the list is treated as a single entity, like a scalar.
+       Atomic maps will be entirely replaced when updated.
+
+- **x-kubernetes-preserve-unknown-fields** (boolean)
+
+  x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.
+
+
+
+
+
 ## CustomResourceDefinitionStatus {#CustomResourceDefinitionStatus}
 
 CustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition
@@ -308,6 +520,8 @@ CustomResourceDefinitionStatus indicates the state of the CustomResourceDefiniti
 
 - **conditions** ([]CustomResourceDefinitionCondition)
 
+  *Map: unique values on key type will be kept during a merge*
+  
   conditions indicate state for particular aspects of a CustomResourceDefinition
 
   <a name="CustomResourceDefinitionCondition"></a>
@@ -350,19 +564,21 @@ CustomResourceDefinitionList is a list of CustomResourceDefinition objects.
 
 <hr>
 
-- **apiVersion**: apiextensions.k8s.io/v1
-
-
-- **kind**: CustomResourceDefinitionList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-
 - **items** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#CustomResourceDefinition" >}}">CustomResourceDefinition</a>), required
 
   items list individual CustomResourceDefinition objects
 
+- **apiVersion** (string)
+
+  APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+
+- **kind** (string)
+
+  Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+
+- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
+
+
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
index 9e17c11ae3..59f3b7c457 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
@@ -50,48 +50,48 @@ MutatingWebhookConfiguration describes the configuration of and admission webhoo
     <a name="WebhookClientConfig"></a>
     *WebhookClientConfig contains the information to make a TLS connection with the webhook*
 
-  - **webhooks.clientConfig.caBundle** ([]byte)
+    - **webhooks.clientConfig.caBundle** ([]byte)
 
-    `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
+      `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
 
-  - **webhooks.clientConfig.service** (ServiceReference)
+    - **webhooks.clientConfig.service** (ServiceReference)
 
-    `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
-    
-    If the webhook is running within the cluster, then you should use `service`.
+      `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
+      
+      If the webhook is running within the cluster, then you should use `service`.
 
-    <a name="ServiceReference"></a>
-    *ServiceReference holds a reference to Service.legacy.k8s.io*
+      <a name="ServiceReference"></a>
+      *ServiceReference holds a reference to Service.legacy.k8s.io*
 
-  - **webhooks.clientConfig.service.name** (string), required
+      - **webhooks.clientConfig.service.name** (string), required
 
-    `name` is the name of the service. Required
+        `name` is the name of the service. Required
 
-  - **webhooks.clientConfig.service.namespace** (string), required
+      - **webhooks.clientConfig.service.namespace** (string), required
 
-    `namespace` is the namespace of the service. Required
+        `namespace` is the namespace of the service. Required
 
-  - **webhooks.clientConfig.service.path** (string)
+      - **webhooks.clientConfig.service.path** (string)
 
-    `path` is an optional URL path which will be sent in any request to this service.
+        `path` is an optional URL path which will be sent in any request to this service.
 
-  - **webhooks.clientConfig.service.port** (int32)
+      - **webhooks.clientConfig.service.port** (int32)
 
-    If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
+        If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
 
-  - **webhooks.clientConfig.url** (string)
+    - **webhooks.clientConfig.url** (string)
 
-    `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
-
-    The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
-
-    Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installations are likely to be non-portable or not readily run in a new cluster.
-
-    The scheme must be "https"; the URL must begin with "https://".
-
-    A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
-
-    Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
+      `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
+      
+      The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
+      
+      Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.
+      
+      The scheme must be "https"; the URL must begin with "https://".
+      
+      A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
+      
+      Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
 
   - **webhooks.name** (string), required
 
@@ -99,7 +99,7 @@ MutatingWebhookConfiguration describes the configuration of and admission webhoo
 
   - **webhooks.sideEffects** (string), required
 
-    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission change and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
+    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
 
   - **webhooks.failurePolicy** (string)
 
@@ -170,31 +170,31 @@ MutatingWebhookConfiguration describes the configuration of and admission webhoo
     <a name="RuleWithOperations"></a>
     *RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.*
 
-  - **webhooks.rules.apiGroups** ([]string)
+    - **webhooks.rules.apiGroups** ([]string)
 
-    APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
+      APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
 
-  - **webhooks.rules.apiVersions** ([]string)
+    - **webhooks.rules.apiVersions** ([]string)
 
-    APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
+      APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
 
-  - **webhooks.rules.operations** ([]string)
+    - **webhooks.rules.operations** ([]string)
 
-    Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
+      Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
 
-  - **webhooks.rules.resources** ([]string)
+    - **webhooks.rules.resources** ([]string)
 
-    Resources is a list of resources this rule applies to.
-    
-    For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
-    
-    If wildcard is present, the validation rule will ensure resources do not overlap with each other.
-    
-    Depending on the enclosing object, subresources might not be allowed. Required.
+      Resources is a list of resources this rule applies to.
+      
+      For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
+      
+      If wildcard is present, the validation rule will ensure resources do not overlap with each other.
+      
+      Depending on the enclosing object, subresources might not be allowed. Required.
 
-  - **webhooks.rules.scope** (string)
+    - **webhooks.rules.scope** (string)
 
-    scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
+      scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
 
   - **webhooks.timeoutSeconds** (int32)
 
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
index 84d26265a3..41bf5b2905 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
@@ -50,48 +50,48 @@ ValidatingWebhookConfiguration describes the configuration of and admission webh
     <a name="WebhookClientConfig"></a>
     *WebhookClientConfig contains the information to make a TLS connection with the webhook*
 
-  - **webhooks.clientConfig.caBundle** ([]byte)
+    - **webhooks.clientConfig.caBundle** ([]byte)
 
-    `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
+      `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
 
-  - **webhooks.clientConfig.service** (ServiceReference)
+    - **webhooks.clientConfig.service** (ServiceReference)
 
-    `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
-    
-    If the webhook is running within the cluster, then you should use `service`.
+      `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
+      
+      If the webhook is running within the cluster, then you should use `service`.
 
-    <a name="ServiceReference"></a>
-    *ServiceReference holds a reference to Service.legacy.k8s.io*
+      <a name="ServiceReference"></a>
+      *ServiceReference holds a reference to Service.legacy.k8s.io*
 
-  - **webhooks.clientConfig.service.name** (string), required
+      - **webhooks.clientConfig.service.name** (string), required
 
-    `name` is the name of the service. Required
+        `name` is the name of the service. Required
 
-  - **webhooks.clientConfig.service.namespace** (string), required
+      - **webhooks.clientConfig.service.namespace** (string), required
 
-    `namespace` is the namespace of the service. Required
+        `namespace` is the namespace of the service. Required
 
-  - **webhooks.clientConfig.service.path** (string)
+      - **webhooks.clientConfig.service.path** (string)
 
-    `path` is an optional URL path which will be sent in any request to this service.
+        `path` is an optional URL path which will be sent in any request to this service.
 
-  - **webhooks.clientConfig.service.port** (int32)
+      - **webhooks.clientConfig.service.port** (int32)
 
-    If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
+        If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
 
-  - **webhooks.clientConfig.url** (string)
+    - **webhooks.clientConfig.url** (string)
 
-    `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
-
-    The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
-
-    Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installations are likely to be non-portable or not readily run in a new cluster.
-
-    The scheme must be "https"; the URL must begin with "https://".
-
-    A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
-
-    Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
+      `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
+      
+      The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
+      
+      Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.
+      
+      The scheme must be "https"; the URL must begin with "https://".
+      
+      A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
+      
+      Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
 
   - **webhooks.name** (string), required
 
@@ -99,7 +99,7 @@ ValidatingWebhookConfiguration describes the configuration of and admission webh
 
   - **webhooks.sideEffects** (string), required
 
-    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission change and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
+    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
 
   - **webhooks.failurePolicy** (string)
 
@@ -160,31 +160,31 @@ ValidatingWebhookConfiguration describes the configuration of and admission webh
     <a name="RuleWithOperations"></a>
     *RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.*
 
-  - **webhooks.rules.apiGroups** ([]string)
+    - **webhooks.rules.apiGroups** ([]string)
 
-    APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
+      APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
 
-  - **webhooks.rules.apiVersions** ([]string)
+    - **webhooks.rules.apiVersions** ([]string)
 
-    APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
+      APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
 
-  - **webhooks.rules.operations** ([]string)
+    - **webhooks.rules.operations** ([]string)
 
-    Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
+      Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
 
-  - **webhooks.rules.resources** ([]string)
+    - **webhooks.rules.resources** ([]string)
 
-    Resources is a list of resources this rule applies to.
-    
-    For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
-    
-    If wildcard is present, the validation rule will ensure resources do not overlap with each other.
-    
-    Depending on the enclosing object, subresources might not be allowed. Required.
+      Resources is a list of resources this rule applies to.
+      
+      For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
+      
+      If wildcard is present, the validation rule will ensure resources do not overlap with each other.
+      
+      Depending on the enclosing object, subresources might not be allowed. Required.
 
-  - **webhooks.rules.scope** (string)
+    - **webhooks.rules.scope** (string)
 
-    scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
+      scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
 
   - **webhooks.timeoutSeconds** (int32)
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/_index.md b/content/en/docs/reference/kubernetes-api/policies-resources/_index.md
deleted file mode 100644
index 251e411647..0000000000
--- a/content/en/docs/reference/kubernetes-api/policies-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Policies Resources"
-weight: 6
----
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/_index.md b/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
new file mode 100644
index 0000000000..06a9e27fee
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Policy Resources"
+weight: 6
+---
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
index d73c4d3630..d1f45d5557 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
@@ -30,7 +30,7 @@ LimitRange sets resource usage limits for each kind of resource in a Namespace.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeSpec" >}}">LimitRangeSpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeSpec" >}}">LimitRangeSpec</a>)
 
   Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -95,9 +95,9 @@ LimitRangeList is a list of LimitRange items.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>), required
 
-  Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+  Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
 
 
 
@@ -142,7 +142,7 @@ GET /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
 401: Unauthorized
 
@@ -215,7 +215,7 @@ GET /api/v1/namespaces/{namespace}/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
 
 401: Unauthorized
 
@@ -283,7 +283,7 @@ GET /api/v1/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
 
 401: Unauthorized
 
@@ -302,7 +302,7 @@ POST /api/v1/namespaces/{namespace}/limitranges
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
+- **body**: <a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
 
   
 
@@ -326,11 +326,11 @@ POST /api/v1/namespaces/{namespace}/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
+201 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Accepted
 
 401: Unauthorized
 
@@ -354,7 +354,7 @@ PUT /api/v1/namespaces/{namespace}/limitranges/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
+- **body**: <a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
 
   
 
@@ -378,9 +378,9 @@ PUT /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
+201 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
 
 401: Unauthorized
 
@@ -433,7 +433,7 @@ PATCH /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
similarity index 65%
rename from content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
index 798a3dc891..2288204257 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
@@ -30,7 +30,7 @@ NetworkPolicy describes what network traffic is allowed for a set of Pods
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicySpec" >}}">NetworkPolicySpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicySpec" >}}">NetworkPolicySpec</a>)
 
   Specification of the desired behavior for this NetworkPolicy.
 
@@ -50,7 +50,7 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
 
 - **policyTypes** ([]string)
 
-  List of rule types that the NetworkPolicy relates to. Valid options are "Ingress", "Egress", or "Ingress,Egress". If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an Egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8
+  List of rule types that the NetworkPolicy relates to. Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"]. If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an Egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8
 
 - **ingress** ([]NetworkPolicyIngressRule)
 
@@ -66,32 +66,32 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPeer"></a>
     *NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed*
 
-  - **ingress.from.ipBlock** (IPBlock)
+    - **ingress.from.ipBlock** (IPBlock)
 
-    IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
+      IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
 
-    <a name="IPBlock"></a>
-    *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
+      <a name="IPBlock"></a>
+      *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
 
-  - **ingress.from.ipBlock.cidr** (string), required
+      - **ingress.from.ipBlock.cidr** (string), required
 
-    CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
+        CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
 
-  - **ingress.from.ipBlock.except** ([]string)
+      - **ingress.from.ipBlock.except** ([]string)
 
-    Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
+        Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
 
-  - **ingress.from.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+    - **ingress.from.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
-    
-    If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
+      Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
+      
+      If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
 
-  - **ingress.from.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+    - **ingress.from.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
-    
-    If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
+      This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
+      
+      If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
 
   - **ingress.ports** ([]NetworkPolicyPort)
 
@@ -100,16 +100,20 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPort"></a>
     *NetworkPolicyPort describes a port to allow traffic on*
 
-  - **ingress.ports.port** (IntOrString)
+    - **ingress.ports.port** (IntOrString)
 
-    The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers.
+      The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.
 
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+      <a name="IntOrString"></a>
+      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
-  - **ingress.ports.protocol** (string)
+    - **ingress.ports.endPort** (int32)
 
-    The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
+      If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port. This feature is in Alpha state and should be enabled using the Feature Gate "NetworkPolicyEndPort".
+
+    - **ingress.ports.protocol** (string)
+
+      The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
 
 - **egress** ([]NetworkPolicyEgressRule)
 
@@ -125,32 +129,32 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPeer"></a>
     *NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed*
 
-  - **egress.to.ipBlock** (IPBlock)
+    - **egress.to.ipBlock** (IPBlock)
 
-    IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
+      IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
 
-    <a name="IPBlock"></a>
-    *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
+      <a name="IPBlock"></a>
+      *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
 
-  - **egress.to.ipBlock.cidr** (string), required
+      - **egress.to.ipBlock.cidr** (string), required
 
-    CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
+        CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
 
-  - **egress.to.ipBlock.except** ([]string)
+      - **egress.to.ipBlock.except** ([]string)
 
-    Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
+        Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
 
-  - **egress.to.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+    - **egress.to.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
-    
-    If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
+      Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
+      
+      If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
 
-  - **egress.to.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+    - **egress.to.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
-    
-    If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
+      This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
+      
+      If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
 
   - **egress.ports** ([]NetworkPolicyPort)
 
@@ -159,16 +163,20 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPort"></a>
     *NetworkPolicyPort describes a port to allow traffic on*
 
-  - **egress.ports.port** (IntOrString)
+    - **egress.ports.port** (IntOrString)
 
-    The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers.
+      The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.
 
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+      <a name="IntOrString"></a>
+      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
-  - **egress.ports.protocol** (string)
+    - **egress.ports.endPort** (int32)
 
-    The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
+      If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port. This feature is in Alpha state and should be enabled using the Feature Gate "NetworkPolicyEndPort".
+
+    - **egress.ports.protocol** (string)
+
+      The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
 
 
 
@@ -190,7 +198,7 @@ NetworkPolicyList is a list of NetworkPolicy objects.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>), required
 
   Items is a list of schema objects.
 
@@ -237,7 +245,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
 401: Unauthorized
 
@@ -310,7 +318,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -378,7 +386,7 @@ GET /apis/networking.k8s.io/v1/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -397,7 +405,7 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
 
   
 
@@ -421,11 +429,11 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Accepted
 
 401: Unauthorized
 
@@ -449,7 +457,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
 
   
 
@@ -473,9 +481,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
 
 401: Unauthorized
 
@@ -528,7 +536,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md b/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
similarity index 70%
rename from content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
index 47b9d83a7e..841f1bb82a 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
@@ -1,17 +1,17 @@
 ---
 api_metadata:
-  apiVersion: "policy/v1beta1"
-  import: "k8s.io/api/policy/v1beta1"
+  apiVersion: "policy/v1"
+  import: "k8s.io/api/policy/v1"
   kind: "PodDisruptionBudget"
 content_type: "api_reference"
 description: "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods."
-title: "PodDisruptionBudget v1beta1"
+title: "PodDisruptionBudget"
 weight: 4
 ---
 
-`apiVersion: policy/v1beta1`
+`apiVersion: policy/v1`
 
-`import "k8s.io/api/policy/v1beta1"`
+`import "k8s.io/api/policy/v1"`
 
 
 ## PodDisruptionBudget {#PodDisruptionBudget}
@@ -20,7 +20,7 @@ PodDisruptionBudget is an object to define the max disruption that can be caused
 
 <hr>
 
-- **apiVersion**: policy/v1beta1
+- **apiVersion**: policy/v1
 
 
 - **kind**: PodDisruptionBudget
@@ -28,12 +28,13 @@ PodDisruptionBudget is an object to define the max disruption that can be caused
 
 - **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
+  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetSpec" >}}">PodDisruptionBudgetSpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetSpec" >}}">PodDisruptionBudgetSpec</a>)
 
   Specification of the desired behavior of the PodDisruptionBudget.
 
-- **status** (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetStatus" >}}">PodDisruptionBudgetStatus</a>)
+- **status** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetStatus" >}}">PodDisruptionBudgetStatus</a>)
 
   Most recently observed status of the PodDisruptionBudget.
 
@@ -63,7 +64,7 @@ PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
 
 - **selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-  Label query over pods whose evictions are managed by the disruption budget.
+  Label query over pods whose evictions are managed by the disruption budget. A null selector will match no pods, while an empty ({}) selector will select all pods within the namespace.
 
 
 
@@ -91,6 +92,52 @@ PodDisruptionBudgetStatus represents information about the status of a PodDisrup
 
   total number of pods counted by this disruption budget
 
+- **conditions** ([]Condition)
+
+  *Patch strategy: merge on key `type`*
+  
+  *Map: unique values on key type will be kept during a merge*
+  
+  Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute
+                the number of allowed disruptions. Therefore no disruptions are
+                allowed and the status of the condition will be False.
+  - InsufficientPods: The number of pods are either at or below the number
+                      required by the PodDisruptionBudget. No disruptions are
+                      allowed and the status of the condition will be False.
+  - SufficientPods: There are more pods than required by the PodDisruptionBudget.
+                    The condition will be True, and the number of allowed
+                    disruptions are provided by the disruptionsAllowed property.
+
+  <a name="Condition"></a>
+  *Condition contains details for one aspect of the current state of this API Resource.*
+
+  - **conditions.lastTransitionTime** (Time), required
+
+    lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **conditions.message** (string), required
+
+    message is a human readable message indicating details about the transition. This may be an empty string.
+
+  - **conditions.reason** (string), required
+
+    reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
+
+  - **conditions.status** (string), required
+
+    status of the condition, one of True, False, Unknown.
+
+  - **conditions.type** (string), required
+
+    type of condition in CamelCase or in foo.example.com/CamelCase.
+
+  - **conditions.observedGeneration** (int64)
+
+    observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
+
 - **disruptedPods** (map[string]Time)
 
   DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
@@ -112,7 +159,7 @@ PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
 
 <hr>
 
-- **apiVersion**: policy/v1beta1
+- **apiVersion**: policy/v1
 
 
 - **kind**: PodDisruptionBudgetList
@@ -120,9 +167,11 @@ PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
 
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
+  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>), required
 
+  Items is a list of PodDisruptionBudgets
 
 
 
@@ -143,7 +192,7 @@ PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
 
 #### HTTP Request
 
-GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
+GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -167,7 +216,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -176,7 +225,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
+GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### Parameters
 
@@ -200,7 +249,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -209,7 +258,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
 
 #### HTTP Request
 
-GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
+GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
 
 #### Parameters
 
@@ -273,7 +322,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
 
 401: Unauthorized
 
@@ -282,7 +331,7 @@ GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 
 #### HTTP Request
 
-GET /apis/policy/v1beta1/poddisruptionbudgets
+GET /apis/policy/v1/poddisruptionbudgets
 
 #### Parameters
 
@@ -341,7 +390,7 @@ GET /apis/policy/v1beta1/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
 
 401: Unauthorized
 
@@ -350,7 +399,7 @@ GET /apis/policy/v1beta1/poddisruptionbudgets
 
 #### HTTP Request
 
-POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
+POST /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
 
 #### Parameters
 
@@ -360,7 +409,7 @@ POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -384,11 +433,11 @@ POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Accepted
 
 401: Unauthorized
 
@@ -397,7 +446,7 @@ POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 
 #### HTTP Request
 
-PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
+PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -412,7 +461,7 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -436,9 +485,9 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
 401: Unauthorized
 
@@ -447,7 +496,7 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
+PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### Parameters
 
@@ -462,7 +511,7 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -486,9 +535,9 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
 401: Unauthorized
 
@@ -497,7 +546,7 @@ PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/stat
 
 #### HTTP Request
 
-PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
+PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -541,7 +590,7 @@ PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -550,7 +599,7 @@ PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
+PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### Parameters
 
@@ -594,7 +643,7 @@ PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/st
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -603,7 +652,7 @@ PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/st
 
 #### HTTP Request
 
-DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
+DELETE /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -658,7 +707,7 @@ DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
+DELETE /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
 
 #### Parameters
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md b/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
index 1d2eac8837..a499f1dc6d 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
@@ -16,7 +16,7 @@ weight: 5
 
 ## PodSecurityPolicy {#PodSecurityPolicy}
 
-PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
+PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated in 1.21.
 
 <hr>
 
@@ -30,7 +30,7 @@ PodSecurityPolicy governs the ability to make requests that affect the Security
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicySpec" >}}">PodSecurityPolicySpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicySpec" >}}">PodSecurityPolicySpec</a>)
 
   spec defines the policy enforced.
 
@@ -62,13 +62,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-  - **runAsUser.ranges.max** (int64), required
+    - **runAsUser.ranges.max** (int64), required
 
-    max is the end of the range, inclusive.
+      max is the end of the range, inclusive.
 
-  - **runAsUser.ranges.min** (int64), required
+    - **runAsUser.ranges.min** (int64), required
 
-    min is the start of the range, inclusive.
+      min is the start of the range, inclusive.
 
 - **runAsGroup** (RunAsGroupStrategyOptions)
 
@@ -88,13 +88,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-  - **runAsGroup.ranges.max** (int64), required
+    - **runAsGroup.ranges.max** (int64), required
 
-    max is the end of the range, inclusive.
+      max is the end of the range, inclusive.
 
-  - **runAsGroup.ranges.min** (int64), required
+    - **runAsGroup.ranges.min** (int64), required
 
-    min is the start of the range, inclusive.
+      min is the start of the range, inclusive.
 
 - **fsGroup** (FSGroupStrategyOptions), required
 
@@ -110,13 +110,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-  - **fsGroup.ranges.max** (int64), required
+    - **fsGroup.ranges.max** (int64), required
 
-    max is the end of the range, inclusive.
+      max is the end of the range, inclusive.
 
-  - **fsGroup.ranges.min** (int64), required
+    - **fsGroup.ranges.min** (int64), required
 
-    min is the start of the range, inclusive.
+      min is the start of the range, inclusive.
 
   - **fsGroup.rule** (string)
 
@@ -136,13 +136,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-  - **supplementalGroups.ranges.max** (int64), required
+    - **supplementalGroups.ranges.max** (int64), required
 
-    max is the end of the range, inclusive.
+      max is the end of the range, inclusive.
 
-  - **supplementalGroups.ranges.min** (int64), required
+    - **supplementalGroups.ranges.min** (int64), required
 
-    min is the start of the range, inclusive.
+      min is the start of the range, inclusive.
 
   - **supplementalGroups.rule** (string)
 
@@ -166,21 +166,21 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="SELinuxOptions"></a>
     *SELinuxOptions are the labels to be applied to the container*
 
-  - **seLinux.seLinuxOptions.level** (string)
+    - **seLinux.seLinuxOptions.level** (string)
 
-    Level is SELinux level label that applies to the container.
+      Level is SELinux level label that applies to the container.
 
-  - **seLinux.seLinuxOptions.role** (string)
+    - **seLinux.seLinuxOptions.role** (string)
 
-    Role is a SELinux role label that applies to the container.
+      Role is a SELinux role label that applies to the container.
 
-  - **seLinux.seLinuxOptions.type** (string)
+    - **seLinux.seLinuxOptions.type** (string)
 
-    Type is a SELinux type label that applies to the container.
+      Type is a SELinux type label that applies to the container.
 
-  - **seLinux.seLinuxOptions.user** (string)
+    - **seLinux.seLinuxOptions.user** (string)
 
-    User is a SELinux user label that applies to the container.
+      User is a SELinux user label that applies to the container.
 
 - **readOnlyRootFilesystem** (boolean)
 
@@ -331,7 +331,7 @@ PodSecurityPolicyList is a list of PodSecurityPolicy objects.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>), required
 
   items is a list of schema objects.
 
@@ -373,7 +373,7 @@ GET /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
 401: Unauthorized
 
@@ -441,7 +441,7 @@ GET /apis/policy/v1beta1/podsecuritypolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicyList" >}}">PodSecurityPolicyList</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicyList" >}}">PodSecurityPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -455,7 +455,7 @@ POST /apis/policy/v1beta1/podsecuritypolicies
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
 
   
 
@@ -479,11 +479,11 @@ POST /apis/policy/v1beta1/podsecuritypolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
 
 401: Unauthorized
 
@@ -502,7 +502,7 @@ PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
   name of the PodSecurityPolicy
 
 
-- **body**: <a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
+- **body**: <a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
 
   
 
@@ -526,9 +526,9 @@ PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
+201 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
 
 401: Unauthorized
 
@@ -576,7 +576,7 @@ PATCH /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
 401: Unauthorized
 
@@ -624,9 +624,9 @@ DELETE /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-202 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
similarity index 83%
rename from content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md
rename to content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
index 66b0451d2d..00818ec921 100644
--- a/content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
@@ -30,11 +30,11 @@ ResourceQuota sets aggregate quota restrictions enforced per namespace
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaSpec" >}}">ResourceQuotaSpec</a>)
+- **spec** (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaSpec" >}}">ResourceQuotaSpec</a>)
 
   Spec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaStatus" >}}">ResourceQuotaStatus</a>)
+- **status** (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaStatus" >}}">ResourceQuotaStatus</a>)
 
   Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -66,17 +66,17 @@ ResourceQuotaSpec defines the desired hard limits to enforce for Quota.
     <a name="ScopedResourceSelectorRequirement"></a>
     *A scoped-resource selector requirement is a selector that contains values, a scope name, and an operator that relates the scope name and values.*
 
-  - **scopeSelector.matchExpressions.operator** (string), required
+    - **scopeSelector.matchExpressions.operator** (string), required
 
-    Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.
+      Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.
 
-  - **scopeSelector.matchExpressions.scopeName** (string), required
+    - **scopeSelector.matchExpressions.scopeName** (string), required
 
-    The name of the scope that the selector applies to.
+      The name of the scope that the selector applies to.
 
-  - **scopeSelector.matchExpressions.values** ([]string)
+    - **scopeSelector.matchExpressions.values** ([]string)
 
-    An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+      An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
 
 - **scopes** ([]string)
 
@@ -120,7 +120,7 @@ ResourceQuotaList is a list of ResourceQuota items.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>), required
+- **items** ([]<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>), required
 
   Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/
 
@@ -167,7 +167,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -200,7 +200,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -273,7 +273,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
 
 401: Unauthorized
 
@@ -341,7 +341,7 @@ GET /api/v1/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
 
 401: Unauthorized
 
@@ -360,7 +360,7 @@ POST /api/v1/namespaces/{namespace}/resourcequotas
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -384,11 +384,11 @@ POST /api/v1/namespaces/{namespace}/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
-202 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
 
 401: Unauthorized
 
@@ -412,7 +412,7 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -436,9 +436,9 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
 401: Unauthorized
 
@@ -462,7 +462,7 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -486,9 +486,9 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
 401: Unauthorized
 
@@ -541,7 +541,7 @@ PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -594,7 +594,7 @@ PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -647,9 +647,9 @@ DELETE /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-202 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
+202 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/_index.md b/content/en/docs/reference/kubernetes-api/service-resources/_index.md
new file mode 100644
index 0000000000..0ab511b5a4
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/service-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Service Resources"
+weight: 2
+---
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md b/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
similarity index 75%
rename from content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
index bb8c7213bb..d296130937 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
@@ -1,17 +1,17 @@
 ---
 api_metadata:
-  apiVersion: "discovery.k8s.io/v1beta1"
-  import: "k8s.io/api/discovery/v1beta1"
+  apiVersion: "discovery.k8s.io/v1"
+  import: "k8s.io/api/discovery/v1"
   kind: "EndpointSlice"
 content_type: "api_reference"
 description: "EndpointSlice represents a subset of the endpoints that implement a service."
-title: "EndpointSlice v1beta1"
+title: "EndpointSlice"
 weight: 3
 ---
 
-`apiVersion: discovery.k8s.io/v1beta1`
+`apiVersion: discovery.k8s.io/v1`
 
-`import "k8s.io/api/discovery/v1beta1"`
+`import "k8s.io/api/discovery/v1"`
 
 
 ## EndpointSlice {#EndpointSlice}
@@ -20,7 +20,7 @@ EndpointSlice represents a subset of the endpoints that implement a service. For
 
 <hr>
 
-- **apiVersion**: discovery.k8s.io/v1beta1
+- **apiVersion**: discovery.k8s.io/v1
 
 
 - **kind**: EndpointSlice
@@ -56,17 +56,41 @@ EndpointSlice represents a subset of the endpoints that implement a service. For
     <a name="EndpointConditions"></a>
     *EndpointConditions represents the current condition of an endpoint.*
 
-  - **endpoints.conditions.ready** (boolean)
+    - **endpoints.conditions.ready** (boolean)
 
-    ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be "true" for terminating endpoints.
+      ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be "true" for terminating endpoints.
 
-  - **endpoints.conditions.serving** (boolean)
+    - **endpoints.conditions.serving** (boolean)
 
-    serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
+      serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
 
-  - **endpoints.conditions.terminating** (boolean)
+    - **endpoints.conditions.terminating** (boolean)
 
-    terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
+      terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
+
+  - **endpoints.deprecatedTopology** (map[string]string)
+
+    deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be removed when the v1beta1 API is removed (no sooner than kubernetes v1.24).  While this field can hold values, it is not writable through the v1 API, and any attempts to write to it will be silently ignored. Topology information can be found in the zone and nodeName fields instead.
+
+  - **endpoints.hints** (EndpointHints)
+
+    hints contains information associated with how an endpoint should be consumed.
+
+    <a name="EndpointHints"></a>
+    *EndpointHints provides hints describing how an endpoint should be consumed.*
+
+    - **endpoints.hints.forZones** ([]ForZone)
+
+      *Atomic: will be replaced during a merge*
+      
+      forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing.
+
+      <a name="ForZone"></a>
+      *ForZone provides information about which zones should consume this endpoint.*
+
+      - **endpoints.hints.forZones.name** (string), required
+
+        name represents the name of the zone.
 
   - **endpoints.hostname** (string)
 
@@ -80,16 +104,9 @@ EndpointSlice represents a subset of the endpoints that implement a service. For
 
     targetRef is a reference to a Kubernetes object that represents this endpoint.
 
-  - **endpoints.topology** (map[string]string)
+  - **endpoints.zone** (string)
 
-    topology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node
-      where the endpoint is located. This should match the corresponding
-      node label.
-    * topology.kubernetes.io/zone: the value indicates the zone where the
-      endpoint is located. This should match the corresponding node label.
-    * topology.kubernetes.io/region: the value indicates the region where the
-      endpoint is located. This should match the corresponding node label.
-    This field is deprecated and will be removed in future api versions.
+    zone is the name of the Zone this endpoint exists in.
 
 - **ports** ([]EndpointPort)
 
@@ -126,7 +143,7 @@ EndpointSliceList represents a list of endpoint slices
 
 <hr>
 
-- **apiVersion**: discovery.k8s.io/v1beta1
+- **apiVersion**: discovery.k8s.io/v1
 
 
 - **kind**: EndpointSliceList
@@ -136,7 +153,7 @@ EndpointSliceList represents a list of endpoint slices
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>), required
 
   List of endpoint slices
 
@@ -159,7 +176,7 @@ EndpointSliceList represents a list of endpoint slices
 
 #### HTTP Request
 
-GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
+GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -183,7 +200,7 @@ GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
 401: Unauthorized
 
@@ -192,7 +209,7 @@ GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 
 #### HTTP Request
 
-GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
+GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
 
 #### Parameters
 
@@ -256,7 +273,7 @@ GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
 
 401: Unauthorized
 
@@ -265,7 +282,7 @@ GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 
 #### HTTP Request
 
-GET /apis/discovery.k8s.io/v1beta1/endpointslices
+GET /apis/discovery.k8s.io/v1/endpointslices
 
 #### Parameters
 
@@ -324,7 +341,7 @@ GET /apis/discovery.k8s.io/v1beta1/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
 
 401: Unauthorized
 
@@ -333,7 +350,7 @@ GET /apis/discovery.k8s.io/v1beta1/endpointslices
 
 #### HTTP Request
 
-POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
+POST /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
 
 #### Parameters
 
@@ -343,7 +360,7 @@ POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>, required
 
   
 
@@ -367,11 +384,11 @@ POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): Created
 
-202 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Accepted
+202 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): Accepted
 
 401: Unauthorized
 
@@ -380,7 +397,7 @@ POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 
 #### HTTP Request
 
-PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
+PUT /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -395,7 +412,7 @@ PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>, required
 
   
 
@@ -419,9 +436,9 @@ PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): Created
 
 401: Unauthorized
 
@@ -430,7 +447,7 @@ PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 
 #### HTTP Request
 
-PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
+PATCH /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -474,7 +491,7 @@ PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
 401: Unauthorized
 
@@ -483,7 +500,7 @@ PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name
 
 #### HTTP Request
 
-DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
+DELETE /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -538,7 +555,7 @@ DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{nam
 
 #### HTTP Request
 
-DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
+DELETE /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
 
 #### Parameters
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
similarity index 78%
rename from content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
index b0c73533f8..223f9d2d54 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
@@ -62,21 +62,21 @@ Endpoints is a collection of endpoints that implement the actual service. Exampl
     <a name="EndpointAddress"></a>
     *EndpointAddress is a tuple that describes single IP address.*
 
-  - **subsets.addresses.ip** (string), required
+    - **subsets.addresses.ip** (string), required
 
-    The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
+      The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
 
-  - **subsets.addresses.hostname** (string)
+    - **subsets.addresses.hostname** (string)
 
-    The Hostname of this endpoint
+      The Hostname of this endpoint
 
-  - **subsets.addresses.nodeName** (string)
+    - **subsets.addresses.nodeName** (string)
 
-    Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
+      Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
 
-  - **subsets.addresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
+    - **subsets.addresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
 
-    Reference to object providing the endpoint.
+      Reference to object providing the endpoint.
 
   - **subsets.notReadyAddresses** ([]EndpointAddress)
 
@@ -85,21 +85,21 @@ Endpoints is a collection of endpoints that implement the actual service. Exampl
     <a name="EndpointAddress"></a>
     *EndpointAddress is a tuple that describes single IP address.*
 
-  - **subsets.notReadyAddresses.ip** (string), required
+    - **subsets.notReadyAddresses.ip** (string), required
 
-    The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
+      The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
 
-  - **subsets.notReadyAddresses.hostname** (string)
+    - **subsets.notReadyAddresses.hostname** (string)
 
-    The Hostname of this endpoint
+      The Hostname of this endpoint
 
-  - **subsets.notReadyAddresses.nodeName** (string)
+    - **subsets.notReadyAddresses.nodeName** (string)
 
-    Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
+      Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
 
-  - **subsets.notReadyAddresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
+    - **subsets.notReadyAddresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
 
-    Reference to object providing the endpoint.
+      Reference to object providing the endpoint.
 
   - **subsets.ports** ([]EndpointPort)
 
@@ -108,21 +108,21 @@ Endpoints is a collection of endpoints that implement the actual service. Exampl
     <a name="EndpointPort"></a>
     *EndpointPort is a tuple that describes a single port.*
 
-  - **subsets.ports.port** (int32), required
+    - **subsets.ports.port** (int32), required
 
-    The port number of the endpoint.
+      The port number of the endpoint.
 
-  - **subsets.ports.protocol** (string)
+    - **subsets.ports.protocol** (string)
 
-    The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.
+      The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.
 
-  - **subsets.ports.name** (string)
+    - **subsets.ports.name** (string)
 
-    The name of this port.  This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.
+      The name of this port.  This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.
 
-  - **subsets.ports.appProtocol** (string)
+    - **subsets.ports.appProtocol** (string)
 
-    The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.
+      The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.
 
 
 
@@ -144,7 +144,7 @@ EndpointsList is a list of endpoints.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>), required
 
   List of endpoints.
 
@@ -191,7 +191,7 @@ GET /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
 401: Unauthorized
 
@@ -264,7 +264,7 @@ GET /api/v1/namespaces/{namespace}/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
 
 401: Unauthorized
 
@@ -332,7 +332,7 @@ GET /api/v1/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
 
 401: Unauthorized
 
@@ -351,7 +351,7 @@ POST /api/v1/namespaces/{namespace}/endpoints
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
 
   
 
@@ -375,11 +375,11 @@ POST /api/v1/namespaces/{namespace}/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
 
-202 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Accepted
+202 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Accepted
 
 401: Unauthorized
 
@@ -403,7 +403,7 @@ PUT /api/v1/namespaces/{namespace}/endpoints/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
+- **body**: <a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
 
   
 
@@ -427,9 +427,9 @@ PUT /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
-201 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
+201 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
 
 401: Unauthorized
 
@@ -482,7 +482,7 @@ PATCH /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
similarity index 79%
rename from content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
index 121c9551eb..a6dd55e7c7 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
@@ -30,7 +30,7 @@ IngressClass represents the class of the Ingress, referenced by the Ingress Spec
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClassSpec" >}}">IngressClassSpec</a>)
+- **spec** (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClassSpec" >}}">IngressClassSpec</a>)
 
   Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -48,10 +48,33 @@ IngressClassSpec provides information about the class of an Ingress.
 
   Controller refers to the name of the controller that should handle this class. This allows for different "flavors" that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. "acme.io/ingress-controller". This field is immutable.
 
-- **parameters** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
+- **parameters** (IngressClassParametersReference)
 
   Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.
 
+  <a name="IngressClassParametersReference"></a>
+  *IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.*
+
+  - **parameters.kind** (string), required
+
+    Kind is the type of resource being referenced.
+
+  - **parameters.name** (string), required
+
+    Name is the name of resource being referenced.
+
+  - **parameters.apiGroup** (string)
+
+    APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+
+  - **parameters.namespace** (string)
+
+    Namespace is the namespace of the resource being referenced. This field is required when scope is set to "Namespace" and must be unset when scope is set to "Cluster".
+
+  - **parameters.scope** (string)
+
+    Scope represents if this refers to a cluster or namespace scoped resource. This may be set to "Cluster" (default) or "Namespace". Field can be enabled with IngressClassNamespacedParams feature gate.
+
 
 
 
@@ -72,7 +95,7 @@ IngressClassList is a collection of IngressClasses.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>), required
 
   Items is the list of IngressClasses.
 
@@ -114,7 +137,7 @@ GET /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
 401: Unauthorized
 
@@ -182,7 +205,7 @@ GET /apis/networking.k8s.io/v1/ingressclasses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClassList" >}}">IngressClassList</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClassList" >}}">IngressClassList</a>): OK
 
 401: Unauthorized
 
@@ -196,7 +219,7 @@ POST /apis/networking.k8s.io/v1/ingressclasses
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
 
   
 
@@ -220,11 +243,11 @@ POST /apis/networking.k8s.io/v1/ingressclasses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
 
-202 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Accepted
+202 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Accepted
 
 401: Unauthorized
 
@@ -243,7 +266,7 @@ PUT /apis/networking.k8s.io/v1/ingressclasses/{name}
   name of the IngressClass
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
 
   
 
@@ -267,9 +290,9 @@ PUT /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
 
 401: Unauthorized
 
@@ -317,7 +340,7 @@ PATCH /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
similarity index 71%
rename from content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
index 003ad959ea..6f8ebf1aad 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
@@ -30,11 +30,11 @@ Ingress is a collection of rules that allow inbound connections to reach the end
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../services-resources/ingress-v1#IngressSpec" >}}">IngressSpec</a>)
+- **spec** (<a href="{{< ref "../service-resources/ingress-v1#IngressSpec" >}}">IngressSpec</a>)
 
   Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../services-resources/ingress-v1#IngressStatus" >}}">IngressStatus</a>)
+- **status** (<a href="{{< ref "../service-resources/ingress-v1#IngressStatus" >}}">IngressStatus</a>)
 
   Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -48,43 +48,10 @@ IngressSpec describes the Ingress the user wishes to exist.
 
 <hr>
 
-- **defaultBackend** (IngressBackend)
+- **defaultBackend** (<a href="{{< ref "../service-resources/ingress-v1#IngressBackend" >}}">IngressBackend</a>)
 
   DefaultBackend is the backend that should handle requests that don't match any rule. If Rules are not specified, DefaultBackend must be specified. If DefaultBackend is not set, the handling of requests that do not match any of the rules will be up to the Ingress controller.
 
-  <a name="IngressBackend"></a>
-  *IngressBackend describes all endpoints for a given service and port.*
-
-  - **defaultBackend.resource** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
-
-    Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with "Service".
-
-  - **defaultBackend.service** (IngressServiceBackend)
-
-    Service references a Service as a Backend. This is a mutually exclusive setting with "Resource".
-
-    <a name="IngressServiceBackend"></a>
-    *IngressServiceBackend references a Kubernetes Service as a Backend.*
-
-  - **defaultBackend.service.name** (string), required
-
-    Name is the referenced service. The service must exist in the same namespace as the Ingress object.
-
-  - **defaultBackend.service.port** (ServiceBackendPort)
-
-    Port of the referenced service. A port name or port number is required for a IngressServiceBackend.
-
-    <a name="ServiceBackendPort"></a>
-    *ServiceBackendPort is the service port being referenced.*
-
-  - **defaultBackend.service.port.name** (string)
-
-    Name is the name of the port on the Service. This is a mutually exclusive setting with "Number".
-
-  - **defaultBackend.service.port.number** (int32)
-
-    Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with "Name".
-
 - **ingressClassName** (string)
 
   IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.
@@ -115,69 +82,36 @@ IngressSpec describes the Ingress the user wishes to exist.
     <a name="HTTPIngressRuleValue"></a>
     *HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://<host>/<path>?<searchpart> -> backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.*
 
-  - **rules.http.paths** ([]HTTPIngressPath), required
+    - **rules.http.paths** ([]HTTPIngressPath), required
 
-    *Atomic: will be replaced during a merge*
-    
-    A collection of paths that map requests to backends.
+      *Atomic: will be replaced during a merge*
+      
+      A collection of paths that map requests to backends.
 
-    <a name="HTTPIngressPath"></a>
-    *HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.*
+      <a name="HTTPIngressPath"></a>
+      *HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.*
 
-  - **rules.http.paths.backend** (IngressBackend), required
+      - **rules.http.paths.backend** (<a href="{{< ref "../service-resources/ingress-v1#IngressBackend" >}}">IngressBackend</a>), required
 
-    Backend defines the referenced service endpoint to which the traffic will be forwarded to.
+        Backend defines the referenced service endpoint to which the traffic will be forwarded to.
 
-    <a name="IngressBackend"></a>
-    *IngressBackend describes all endpoints for a given service and port.*
+      - **rules.http.paths.path** (string)
 
-  - **rules.http.paths.backend.resource** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
+        Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.
 
-    Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with "Service".
+      - **rules.http.paths.pathType** (string)
 
-  - **rules.http.paths.backend.service** (IngressServiceBackend)
-
-    Service references a Service as a Backend. This is a mutually exclusive setting with "Resource".
-
-    <a name="IngressServiceBackend"></a>
-    *IngressServiceBackend references a Kubernetes Service as a Backend.*
-
-  - **rules.http.paths.backend.service.name** (string), required
-
-    Name is the referenced service. The service must exist in the same namespace as the Ingress object.
-
-  - **rules.http.paths.backend.service.port** (ServiceBackendPort)
-
-    Port of the referenced service. A port name or port number is required for a IngressServiceBackend.
-
-    <a name="ServiceBackendPort"></a>
-    *ServiceBackendPort is the service port being referenced.*
-
-  - **rules.http.paths.backend.service.port.name** (string)
-
-    Name is the name of the port on the Service. This is a mutually exclusive setting with "Number".
-
-  - **rules.http.paths.backend.service.port.number** (int32)
-
-    Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with "Name".
-
-  - **rules.http.paths.path** (string)
-
-    Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.
-
-  - **rules.http.paths.pathType** (string)
-
-    PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is
-      done on a path element by element basis. A path element refers is the
-      list of labels in the path split by the '/' separator. A request is a
-      match for path p if every p is an element-wise prefix of p of the
-      request path. Note that if the last element of the path is a substring
-      of the last element in request path, it is not a match (e.g. /foo/bar
-      matches /foo/bar/baz, but does not match /foo/barbaz).
-    * ImplementationSpecific: Interpretation of the Path matching is up to
-      the IngressClass. Implementations can treat this as a separate PathType
-      or treat it identically to Prefix or Exact path types.
-    Implementations are required to support all path types.
+        PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is
+          done on a path element by element basis. A path element refers is the
+          list of labels in the path split by the '/' separator. A request is a
+          match for path p if every p is an element-wise prefix of p of the
+          request path. Note that if the last element of the path is a substring
+          of the last element in request path, it is not a match (e.g. /foo/bar
+          matches /foo/bar/baz, but does not match /foo/barbaz).
+        * ImplementationSpecific: Interpretation of the Path matching is up to
+          the IngressClass. Implementations can treat this as a separate PathType
+          or treat it identically to Prefix or Exact path types.
+        Implementations are required to support all path types.
 
 - **tls** ([]IngressTLS)
 
@@ -202,6 +136,46 @@ IngressSpec describes the Ingress the user wishes to exist.
 
 
 
+## IngressBackend {#IngressBackend}
+
+IngressBackend describes all endpoints for a given service and port.
+
+<hr>
+
+- **resource** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
+
+  Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with "Service".
+
+- **service** (IngressServiceBackend)
+
+  Service references a Service as a Backend. This is a mutually exclusive setting with "Resource".
+
+  <a name="IngressServiceBackend"></a>
+  *IngressServiceBackend references a Kubernetes Service as a Backend.*
+
+  - **service.name** (string), required
+
+    Name is the referenced service. The service must exist in the same namespace as the Ingress object.
+
+  - **service.port** (ServiceBackendPort)
+
+    Port of the referenced service. A port name or port number is required for a IngressServiceBackend.
+
+    <a name="ServiceBackendPort"></a>
+    *ServiceBackendPort is the service port being referenced.*
+
+    - **service.port.name** (string)
+
+      Name is the name of the port on the Service. This is a mutually exclusive setting with "Number".
+
+    - **service.port.number** (int32)
+
+      Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with "Name".
+
+
+
+
+
 ## IngressStatus {#IngressStatus}
 
 IngressStatus describe the current state of the Ingress.
@@ -222,37 +196,37 @@ IngressStatus describe the current state of the Ingress.
     <a name="LoadBalancerIngress"></a>
     *LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.*
 
-  - **loadBalancer.ingress.hostname** (string)
+    - **loadBalancer.ingress.hostname** (string)
 
-    Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
+      Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
 
-  - **loadBalancer.ingress.ip** (string)
+    - **loadBalancer.ingress.ip** (string)
 
-    IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
+      IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
 
-  - **loadBalancer.ingress.ports** ([]PortStatus)
+    - **loadBalancer.ingress.ports** ([]PortStatus)
 
-    *Atomic: will be replaced during a merge*
-    
-    Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
+      *Atomic: will be replaced during a merge*
+      
+      Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
 
-    <a name="PortStatus"></a>
-    **
+      <a name="PortStatus"></a>
+      **
 
-  - **loadBalancer.ingress.ports.port** (int32), required
+      - **loadBalancer.ingress.ports.port** (int32), required
 
-    Port is the port number of the service port of which status is recorded here
+        Port is the port number of the service port of which status is recorded here
 
-  - **loadBalancer.ingress.ports.protocol** (string), required
+      - **loadBalancer.ingress.ports.protocol** (string), required
 
-    Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
+        Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
 
-  - **loadBalancer.ingress.ports.error** (string)
+      - **loadBalancer.ingress.ports.error** (string)
 
-    Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
-      CamelCase names
-    - cloud provider specific error values must have names that comply with the
-      format foo.example.com/CamelCase.
+        Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
+          CamelCase names
+        - cloud provider specific error values must have names that comply with the
+          format foo.example.com/CamelCase.
 
 
 
@@ -264,20 +238,22 @@ IngressList is a collection of Ingress.
 
 <hr>
 
-- **apiVersion**: networking.k8s.io/v1
+- **items** ([]<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>), required
 
+  Items is the list of Ingress.
 
-- **kind**: IngressList
+- **apiVersion** (string)
 
+  APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+
+- **kind** (string)
+
+  Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>), required
-
-  Items is the list of Ingress.
-
 
 
 
@@ -321,7 +297,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -354,7 +330,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -427,7 +403,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
 
 401: Unauthorized
 
@@ -495,7 +471,7 @@ GET /apis/networking.k8s.io/v1/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
 
 401: Unauthorized
 
@@ -514,7 +490,7 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -538,11 +514,11 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
-202 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Accepted
+202 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Accepted
 
 401: Unauthorized
 
@@ -566,7 +542,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -590,9 +566,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
 401: Unauthorized
 
@@ -616,7 +592,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -640,9 +616,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
 401: Unauthorized
 
@@ -695,7 +671,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -748,7 +724,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/service-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
similarity index 85%
rename from content/en/docs/reference/kubernetes-api/services-resources/service-v1.md
rename to content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
index bfb2c819bd..ab17bf3f0e 100644
--- a/content/en/docs/reference/kubernetes-api/services-resources/service-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
@@ -30,11 +30,11 @@ Service is a named abstraction of software service (for example, mysql) consisti
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../services-resources/service-v1#ServiceSpec" >}}">ServiceSpec</a>)
+- **spec** (<a href="{{< ref "../service-resources/service-v1#ServiceSpec" >}}">ServiceSpec</a>)
 
   Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../services-resources/service-v1#ServiceStatus" >}}">ServiceStatus</a>)
+- **status** (<a href="{{< ref "../service-resources/service-v1#ServiceStatus" >}}">ServiceStatus</a>)
 
   Most recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -134,14 +134,22 @@ ServiceSpec describes the attributes that a user creates on a service.
 
   If specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature." More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/
 
+- **loadBalancerClass** (string)
+
+  loadBalancerClass is the class of the load balancer implementation this Service belongs to. If specified, the value of this field must be a label-style identifier, with an optional prefix, e.g. "internal-vip" or "example.com/internal-vip". Unprefixed names are reserved for end-users. This field can only be set when the Service type is 'LoadBalancer'. If not set, the default load balancer implementation is used, today this is typically done through the cloud provider integration, but should apply for any default implementation. If set, it is assumed that a load balancer implementation is watching for Services with a matching class. Any default load balancer implementation (e.g. cloud providers) should ignore Services that set this field. This field can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. This field will be wiped when a service is updated to a non 'LoadBalancer' type.
+
 - **externalName** (string)
 
-  externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved.  Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires Type to be
+  externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved.  Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be "ExternalName".
 
 - **externalTrafficPolicy** (string)
 
   externalTrafficPolicy denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints. "Local" preserves the client source IP and avoids a second hop for LoadBalancer and Nodeport type services, but risks potentially imbalanced traffic spreading. "Cluster" obscures the client source IP and may cause a second hop to another node, but should have good overall load-spreading.
 
+- **internalTrafficPolicy** (string)
+
+  InternalTrafficPolicy specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only. "Cluster" routes internal traffic to a Service to all endpoints. "Local" routes traffic to node-local endpoints only, traffic is dropped if no node-local endpoints are ready. The default value is "Cluster".
+
 - **healthCheckNodePort** (int32)
 
   healthCheckNodePort specifies the healthcheck nodePort for the service. This only applies when type is set to LoadBalancer and externalTrafficPolicy is set to Local. If a value is specified, is in-range, and is not in use, it will be used.  If not specified, a value will be automatically allocated.  External systems (e.g. load-balancers) can use this port to determine if a given node holds endpoints for this service or not.  If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type).
@@ -164,13 +172,13 @@ ServiceSpec describes the attributes that a user creates on a service.
     <a name="ClientIPConfig"></a>
     *ClientIPConfig represents the configurations of Client IP based session affinity.*
 
-  - **sessionAffinityConfig.clientIP.timeoutSeconds** (int32)
+    - **sessionAffinityConfig.clientIP.timeoutSeconds** (int32)
 
-    timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be >0 && \<=86400(for 1 day) if ServiceAffinity == "ClientIP". Default value is 10800(for 3 hours).
+      timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be >0 && \<=86400(for 1 day) if ServiceAffinity == "ClientIP". Default value is 10800(for 3 hours).
 
 - **topologyKeys** ([]string)
 
-  topologyKeys is a preference-order list of topology keys which implementations of services should use to preferentially sort endpoints when accessing this Service, it can not be used at the same time as externalTrafficPolicy=Local. Topology keys must be valid label keys and at most 16 keys may be specified. Endpoints are chosen based on the first topology key with available backends. If this field is specified and all entries have no backends that match the topology of the client, the service has no backends for that client and connections should fail. The special value "*" may be used to mean "any topology". This catch-all value, if used, only makes sense as the last value in the list. If this is not specified or empty, no topology constraints will be applied. This field is alpha-level and is only honored by servers that enable the ServiceTopology feature.
+  topologyKeys is a preference-order list of topology keys which implementations of services should use to preferentially sort endpoints when accessing this Service, it can not be used at the same time as externalTrafficPolicy=Local. Topology keys must be valid label keys and at most 16 keys may be specified. Endpoints are chosen based on the first topology key with available backends. If this field is specified and all entries have no backends that match the topology of the client, the service has no backends for that client and connections should fail. The special value "*" may be used to mean "any topology". This catch-all value, if used, only makes sense as the last value in the list. If this is not specified or empty, no topology constraints will be applied. This field is alpha-level and is only honored by servers that enable the ServiceTopology feature. This field is deprecated and will be removed in a future version.
 
 - **allocateLoadBalancerNodePorts** (boolean)
 
@@ -238,37 +246,37 @@ ServiceStatus represents the current status of a service.
     <a name="LoadBalancerIngress"></a>
     *LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.*
 
-  - **loadBalancer.ingress.hostname** (string)
+    - **loadBalancer.ingress.hostname** (string)
 
-    Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
+      Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
 
-  - **loadBalancer.ingress.ip** (string)
+    - **loadBalancer.ingress.ip** (string)
 
-    IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
+      IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
 
-  - **loadBalancer.ingress.ports** ([]PortStatus)
+    - **loadBalancer.ingress.ports** ([]PortStatus)
 
-    *Atomic: will be replaced during a merge*
-    
-    Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
+      *Atomic: will be replaced during a merge*
+      
+      Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
 
-    <a name="PortStatus"></a>
-    **
+      <a name="PortStatus"></a>
+      **
 
-  - **loadBalancer.ingress.ports.port** (int32), required
+      - **loadBalancer.ingress.ports.port** (int32), required
 
-    Port is the port number of the service port of which status is recorded here
+        Port is the port number of the service port of which status is recorded here
 
-  - **loadBalancer.ingress.ports.protocol** (string), required
+      - **loadBalancer.ingress.ports.protocol** (string), required
 
-    Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
+        Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
 
-  - **loadBalancer.ingress.ports.error** (string)
+      - **loadBalancer.ingress.ports.error** (string)
 
-    Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
-      CamelCase names
-    - cloud provider specific error values must have names that comply with the
-      format foo.example.com/CamelCase.
+        Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
+          CamelCase names
+        - cloud provider specific error values must have names that comply with the
+          format foo.example.com/CamelCase.
 
 
 
@@ -290,7 +298,7 @@ ServiceList holds a list of services.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>), required
+- **items** ([]<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>), required
 
   List of services
 
@@ -337,7 +345,7 @@ GET /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -370,7 +378,7 @@ GET /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -443,7 +451,7 @@ GET /api/v1/namespaces/{namespace}/services
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
 
 401: Unauthorized
 
@@ -511,7 +519,7 @@ GET /api/v1/services
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
 
 401: Unauthorized
 
@@ -530,7 +538,7 @@ POST /api/v1/namespaces/{namespace}/services
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -554,11 +562,11 @@ POST /api/v1/namespaces/{namespace}/services
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
 
-202 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Accepted
+202 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Accepted
 
 401: Unauthorized
 
@@ -582,7 +590,7 @@ PUT /api/v1/namespaces/{namespace}/services/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -606,9 +614,9 @@ PUT /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
 
 401: Unauthorized
 
@@ -632,7 +640,7 @@ PUT /api/v1/namespaces/{namespace}/services/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -656,9 +664,9 @@ PUT /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
 
 401: Unauthorized
 
@@ -711,7 +719,7 @@ PATCH /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -764,7 +772,7 @@ PATCH /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/_index.md b/content/en/docs/reference/kubernetes-api/services-resources/_index.md
deleted file mode 100644
index 1c4c64040d..0000000000
--- a/content/en/docs/reference/kubernetes-api/services-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Services Resources"
-weight: 2
----
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/_index.md b/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
new file mode 100644
index 0000000000..85d1bfa44f
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Workload Resources"
+weight: 1
+---
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
index 950e9d729c..d13ae1b404 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ControllerRevision implements an immutable snapshot of state data."
 title: "ControllerRevision"
-weight: 9
+weight: 8
 ---
 
 `apiVersion: apps/v1`
@@ -88,7 +88,7 @@ ControllerRevisionList is a resource containing a list of ControllerRevision obj
 
   More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>), required
 
   Items is the list of ControllerRevisions
 
@@ -135,7 +135,7 @@ GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
 401: Unauthorized
 
@@ -208,7 +208,7 @@ GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
 
 401: Unauthorized
 
@@ -276,7 +276,7 @@ GET /apis/apps/v1/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
 
 401: Unauthorized
 
@@ -295,7 +295,7 @@ POST /apis/apps/v1/namespaces/{namespace}/controllerrevisions
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
+- **body**: <a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
 
   
 
@@ -319,11 +319,11 @@ POST /apis/apps/v1/namespaces/{namespace}/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
+201 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Accepted
 
 401: Unauthorized
 
@@ -347,7 +347,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
+- **body**: <a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
 
   
 
@@ -371,9 +371,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
+201 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
 
 401: Unauthorized
 
@@ -426,7 +426,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
similarity index 81%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
index 22a0135bf8..f6196ef14d 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
@@ -1,17 +1,17 @@
 ---
 api_metadata:
-  apiVersion: "batch/v1beta1"
-  import: "k8s.io/api/batch/v1beta1"
+  apiVersion: "batch/v1"
+  import: "k8s.io/api/batch/v1"
   kind: "CronJob"
 content_type: "api_reference"
 description: "CronJob represents the configuration of a single cron job."
-title: "CronJob v1beta1"
-weight: 12
+title: "CronJob"
+weight: 11
 ---
 
-`apiVersion: batch/v1beta1`
+`apiVersion: batch/v1`
 
-`import "k8s.io/api/batch/v1beta1"`
+`import "k8s.io/api/batch/v1"`
 
 
 ## CronJob {#CronJob}
@@ -20,7 +20,7 @@ CronJob represents the configuration of a single cron job.
 
 <hr>
 
-- **apiVersion**: batch/v1beta1
+- **apiVersion**: batch/v1
 
 
 - **kind**: CronJob
@@ -30,11 +30,11 @@ CronJob represents the configuration of a single cron job.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobSpec" >}}">CronJobSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobSpec" >}}">CronJobSpec</a>)
 
   Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobStatus" >}}">CronJobStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobStatus" >}}">CronJobStatus</a>)
 
   Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -59,7 +59,7 @@ CronJobSpec describes how the job execution will look like and when it will actu
 
     Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-  - **jobTemplate.spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+  - **jobTemplate.spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
 
     Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -81,11 +81,11 @@ CronJobSpec describes how the job execution will look like and when it will actu
 
 - **successfulJobsHistoryLimit** (int32)
 
-  The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.
+  The number of successful finished jobs to retain. Value must be non-negative integer. Defaults to 3.
 
 - **failedJobsHistoryLimit** (int32)
 
-  The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.
+  The number of failed finished jobs to retain. Value must be non-negative integer. Defaults to 1.
 
 
 
@@ -99,6 +99,8 @@ CronJobStatus represents the current state of a cron job.
 
 - **active** ([]<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
 
+  *Atomic: will be replaced during a merge*
+  
   A list of pointers to currently running jobs.
 
 - **lastScheduleTime** (Time)
@@ -108,6 +110,13 @@ CronJobStatus represents the current state of a cron job.
   <a name="Time"></a>
   *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
 
+- **lastSuccessfulTime** (Time)
+
+  Information when was the last time the job successfully completed.
+
+  <a name="Time"></a>
+  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
 
 
 
@@ -118,7 +127,7 @@ CronJobList is a collection of cron jobs.
 
 <hr>
 
-- **apiVersion**: batch/v1beta1
+- **apiVersion**: batch/v1
 
 
 - **kind**: CronJobList
@@ -128,7 +137,7 @@ CronJobList is a collection of cron jobs.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>), required
 
   items is the list of CronJobs.
 
@@ -151,7 +160,7 @@ CronJobList is a collection of cron jobs.
 
 #### HTTP Request
 
-GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
+GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -175,7 +184,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -184,7 +193,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
+GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### Parameters
 
@@ -208,7 +217,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -217,7 +226,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### HTTP Request
 
-GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
+GET /apis/batch/v1/namespaces/{namespace}/cronjobs
 
 #### Parameters
 
@@ -281,7 +290,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -290,7 +299,7 @@ GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 
 #### HTTP Request
 
-GET /apis/batch/v1beta1/cronjobs
+GET /apis/batch/v1/cronjobs
 
 #### Parameters
 
@@ -349,7 +358,7 @@ GET /apis/batch/v1beta1/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -358,7 +367,7 @@ GET /apis/batch/v1beta1/cronjobs
 
 #### HTTP Request
 
-POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
+POST /apis/batch/v1/namespaces/{namespace}/cronjobs
 
 #### Parameters
 
@@ -368,7 +377,7 @@ POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -392,11 +401,11 @@ POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Accepted
 
 401: Unauthorized
 
@@ -405,7 +414,7 @@ POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 
 #### HTTP Request
 
-PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
+PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -420,7 +429,7 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -444,9 +453,9 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -455,7 +464,7 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
+PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### Parameters
 
@@ -470,7 +479,7 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -494,9 +503,9 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -505,7 +514,7 @@ PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### HTTP Request
 
-PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
+PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -549,7 +558,7 @@ PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -558,7 +567,7 @@ PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
+PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### Parameters
 
@@ -602,7 +611,7 @@ PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -611,7 +620,7 @@ PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### HTTP Request
 
-DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
+DELETE /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -666,7 +675,7 @@ DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
+DELETE /apis/batch/v1/namespaces/{namespace}/cronjobs
 
 #### Parameters
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
similarity index 78%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
index 95ae869be1..a40aa4c592 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "DaemonSet represents the configuration of a daemon set."
 title: "DaemonSet"
-weight: 10
+weight: 9
 ---
 
 `apiVersion: apps/v1`
@@ -30,11 +30,11 @@ DaemonSet represents the configuration of a daemon set.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetSpec" >}}">DaemonSetSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetSpec" >}}">DaemonSetSpec</a>)
 
   The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetStatus" >}}">DaemonSetStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetStatus" >}}">DaemonSetStatus</a>)
 
   The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ DaemonSetSpec is the specification of a daemon set.
 
   A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -78,12 +78,19 @@ DaemonSetSpec is the specification of a daemon set.
     <a name="RollingUpdateDaemonSet"></a>
     *Spec to control the desired behavior of daemon set rolling update.*
 
-  - **updateStrategy.rollingUpdate.maxUnavailable** (IntOrString)
+    - **updateStrategy.rollingUpdate.maxSurge** (IntOrString)
 
-    The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0. Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.
+      The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption. This is an alpha field and requires enabling DaemonSetUpdateSurge feature gate.
 
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+      <a name="IntOrString"></a>
+      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+
+    - **updateStrategy.rollingUpdate.maxUnavailable** (IntOrString)
+
+      The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding down to a minimum of one. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.
+
+      <a name="IntOrString"></a>
+      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
 - **revisionHistoryLimit** (int32)
 
@@ -187,7 +194,7 @@ DaemonSetList is a collection of daemon sets.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>), required
 
   A list of daemon sets.
 
@@ -234,7 +241,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -267,7 +274,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -340,7 +347,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
 
 401: Unauthorized
 
@@ -408,7 +415,7 @@ GET /apis/apps/v1/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
 
 401: Unauthorized
 
@@ -427,7 +434,7 @@ POST /apis/apps/v1/namespaces/{namespace}/daemonsets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -451,11 +458,11 @@ POST /apis/apps/v1/namespaces/{namespace}/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Accepted
 
 401: Unauthorized
 
@@ -479,7 +486,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -503,9 +510,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
 401: Unauthorized
 
@@ -529,7 +536,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -553,9 +560,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
 401: Unauthorized
 
@@ -608,7 +615,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -661,7 +668,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
similarity index 81%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
index 7e5b39c929..b455760a4c 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Deployment enables declarative updates for Pods and ReplicaSets."
 title: "Deployment"
-weight: 7
+weight: 6
 ---
 
 `apiVersion: apps/v1`
@@ -30,11 +30,11 @@ Deployment enables declarative updates for Pods and ReplicaSets.
 
   Standard object metadata.
 
-- **spec** (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentSpec" >}}">DeploymentSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentSpec" >}}">DeploymentSpec</a>)
 
   Specification of the desired behavior of the Deployment.
 
-- **status** (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentStatus" >}}">DeploymentStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentStatus" >}}">DeploymentStatus</a>)
 
   Most recently observed status of the Deployment.
 
@@ -52,7 +52,7 @@ DeploymentSpec is the specification of the desired behavior of the Deployment.
 
   Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template's labels.
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   Template describes the pods that will be created.
 
@@ -84,19 +84,19 @@ DeploymentSpec is the specification of the desired behavior of the Deployment.
     <a name="RollingUpdateDeployment"></a>
     *Spec to control the desired behavior of rolling update.*
 
-  - **strategy.rollingUpdate.maxSurge** (IntOrString)
+    - **strategy.rollingUpdate.maxSurge** (IntOrString)
 
-    The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.
+      The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.
 
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+      <a name="IntOrString"></a>
+      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
-  - **strategy.rollingUpdate.maxUnavailable** (IntOrString)
+    - **strategy.rollingUpdate.maxUnavailable** (IntOrString)
 
-    The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.
+      The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.
 
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+      <a name="IntOrString"></a>
+      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
 - **revisionHistoryLimit** (int32)
 
@@ -207,7 +207,7 @@ DeploymentList is a list of Deployments.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>), required
 
   Items is the list of Deployments.
 
@@ -254,7 +254,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -287,7 +287,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -360,7 +360,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
 
 401: Unauthorized
 
@@ -428,7 +428,7 @@ GET /apis/apps/v1/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
 
 401: Unauthorized
 
@@ -447,7 +447,7 @@ POST /apis/apps/v1/namespaces/{namespace}/deployments
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -471,11 +471,11 @@ POST /apis/apps/v1/namespaces/{namespace}/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Accepted
 
 401: Unauthorized
 
@@ -499,7 +499,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -523,9 +523,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
 401: Unauthorized
 
@@ -549,7 +549,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -573,9 +573,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
 401: Unauthorized
 
@@ -628,7 +628,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -681,7 +681,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md b/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
similarity index 58%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
index 7355af9df8..05957e573a 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
@@ -1,19 +1,46 @@
 ---
 api_metadata:
-  apiVersion: ""
+  apiVersion: "v1"
   import: "k8s.io/api/core/v1"
-  kind: "EphemeralContainer"
+  kind: "EphemeralContainers"
 content_type: "api_reference"
-description: "An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging."
-title: "EphemeralContainer"
-weight: 3
+description: "A list of ephemeral containers used with the Pod ephemeralcontainers subresource."
+title: "EphemeralContainers"
+weight: 2
 ---
 
-
+`apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
 
 
+## EphemeralContainers {#EphemeralContainers}
+
+A list of ephemeral containers used with the Pod ephemeralcontainers subresource.
+
+<hr>
+
+- **apiVersion**: v1
+
+
+- **kind**: EphemeralContainers
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+
+
+- **ephemeralContainers** ([]<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainer" >}}">EphemeralContainer</a>), required
+
+  *Patch strategy: merge on key `name`*
+  
+  A list of ephemeral containers associated with this pod. New ephemeral containers may be appended to this list, but existing ephemeral containers may not be removed or modified.
+
+
+
+
+
+## EphemeralContainer {#EphemeralContainer}
+
 An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.
 
 <hr>
@@ -28,7 +55,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
 
 
-### Image {#Image}
+### Image
 
 
 - **image** (string)
@@ -39,7 +66,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
 
-### Entrypoint {#Entrypoint}
+### Entrypoint
 
 
 - **command** ([]string)
@@ -54,7 +81,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
 
-### Environment variables {#Environment-variables}
+### Environment variables
 
 
 - **env** ([]EnvVar)
@@ -81,51 +108,51 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="EnvVarSource"></a>
     *EnvVarSource represents a source for the value of an EnvVar.*
 
-  - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
+    - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
 
-    Selects a key of a ConfigMap.
+      Selects a key of a ConfigMap.
 
-    <a name="ConfigMapKeySelector"></a>
-    *Selects a key from a ConfigMap.*
+      <a name="ConfigMapKeySelector"></a>
+      *Selects a key from a ConfigMap.*
 
-  - **env.valueFrom.configMapKeyRef.key** (string), required
+      - **env.valueFrom.configMapKeyRef.key** (string), required
 
-    The key to select.
+        The key to select.
 
-  - **env.valueFrom.configMapKeyRef.name** (string)
+      - **env.valueFrom.configMapKeyRef.name** (string)
 
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-  - **env.valueFrom.configMapKeyRef.optional** (boolean)
+      - **env.valueFrom.configMapKeyRef.optional** (boolean)
 
-    Specify whether the ConfigMap or its key must be defined
+        Specify whether the ConfigMap or its key must be defined
 
-  - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
+    - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
 
-    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
+      Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
 
-  - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
+    - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
 
-    Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
+      Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
 
-  - **env.valueFrom.secretKeyRef** (SecretKeySelector)
+    - **env.valueFrom.secretKeyRef** (SecretKeySelector)
 
-    Selects a key of a secret in the pod's namespace
+      Selects a key of a secret in the pod's namespace
 
-    <a name="SecretKeySelector"></a>
-    *SecretKeySelector selects a key of a Secret.*
+      <a name="SecretKeySelector"></a>
+      *SecretKeySelector selects a key of a Secret.*
 
-  - **env.valueFrom.secretKeyRef.key** (string), required
+      - **env.valueFrom.secretKeyRef.key** (string), required
 
-    The key of the secret to select from.  Must be a valid secret key.
+        The key of the secret to select from.  Must be a valid secret key.
 
-  - **env.valueFrom.secretKeyRef.name** (string)
+      - **env.valueFrom.secretKeyRef.name** (string)
 
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-  - **env.valueFrom.secretKeyRef.optional** (boolean)
+      - **env.valueFrom.secretKeyRef.optional** (boolean)
 
-    Specify whether the Secret or its key must be defined
+        Specify whether the Secret or its key must be defined
 
 - **envFrom** ([]EnvFromSource)
 
@@ -143,13 +170,13 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     
     The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
 
-  - **envFrom.configMapRef.name** (string)
+    - **envFrom.configMapRef.name** (string)
 
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-  - **envFrom.configMapRef.optional** (boolean)
+    - **envFrom.configMapRef.optional** (boolean)
 
-    Specify whether the ConfigMap must be defined
+      Specify whether the ConfigMap must be defined
 
   - **envFrom.prefix** (string)
 
@@ -164,15 +191,15 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     
     The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
 
-  - **envFrom.secretRef.name** (string)
+    - **envFrom.secretRef.name** (string)
 
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-  - **envFrom.secretRef.optional** (boolean)
+    - **envFrom.secretRef.optional** (boolean)
 
-    Specify whether the Secret must be defined
+      Specify whether the Secret must be defined
 
-### Volumes {#Volumes}
+### Volumes
 
 
 - **volumeMounts** ([]VolumeMount)
@@ -225,7 +252,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
     name must match the name of a persistentVolumeClaim in the pod
 
-### Lifecycle {#Lifecycle}
+### Lifecycle
 
 
 - **terminationMessagePath** (string)
@@ -236,7 +263,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
 
-### Debugging {#Debugging}
+### Debugging
 
 
 - **stdin** (boolean)
@@ -251,7 +278,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
 
-### Not allowed {#Not-allowed}
+### Not allowed
 
 
 - **ports** ([]ContainerPort)
@@ -290,11 +317,11 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
 
   - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
 
 - **lifecycle** (Lifecycle)
 
@@ -303,122 +330,22 @@ An EphemeralContainer is a container that may be added temporarily to an existin
   <a name="Lifecycle"></a>
   *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
 
-  - **lifecycle.postStart** (Handler)
+  - **lifecycle.postStart** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
 
     PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
 
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.postStart.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.postStart.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.postStart.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **lifecycle.preStop** (Handler)
+  - **lifecycle.preStop** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
 
     PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
 
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.preStop.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.preStop.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.preStop.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-- **livenessProbe** (Probe)
+- **livenessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
 
   Probes are not allowed for ephemeral containers.
 
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **livenessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **livenessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **livenessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **livenessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **livenessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **livenessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-- **readinessProbe** (Probe)
+- **readinessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
 
   Probes are not allowed for ephemeral containers.
 
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **readinessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **readinessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **readinessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **readinessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **readinessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **readinessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
 - **securityContext** (SecurityContext)
 
   SecurityContext is not allowed for ephemeral containers.
@@ -461,13 +388,13 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="Capabilities"></a>
     *Adds and removes POSIX capabilities from running containers.*
 
-  - **securityContext.capabilities.add** ([]string)
+    - **securityContext.capabilities.add** ([]string)
 
-    Added capabilities
+      Added capabilities
 
-  - **securityContext.capabilities.drop** ([]string)
+    - **securityContext.capabilities.drop** ([]string)
 
-    Removed capabilities
+      Removed capabilities
 
   - **securityContext.seccompProfile** (SeccompProfile)
 
@@ -476,15 +403,15 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="SeccompProfile"></a>
     *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
 
-  - **securityContext.seccompProfile.type** (string), required
+    - **securityContext.seccompProfile.type** (string), required
 
-    type indicates which kind of seccomp profile will be applied. Valid options are:
-    
-    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+      type indicates which kind of seccomp profile will be applied. Valid options are:
+      
+      Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
 
-  - **securityContext.seccompProfile.localhostProfile** (string)
+    - **securityContext.seccompProfile.localhostProfile** (string)
 
-    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+      localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
 
   - **securityContext.seLinuxOptions** (SELinuxOptions)
 
@@ -493,21 +420,21 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="SELinuxOptions"></a>
     *SELinuxOptions are the labels to be applied to the container*
 
-  - **securityContext.seLinuxOptions.level** (string)
+    - **securityContext.seLinuxOptions.level** (string)
 
-    Level is SELinux level label that applies to the container.
+      Level is SELinux level label that applies to the container.
 
-  - **securityContext.seLinuxOptions.role** (string)
+    - **securityContext.seLinuxOptions.role** (string)
 
-    Role is a SELinux role label that applies to the container.
+      Role is a SELinux role label that applies to the container.
 
-  - **securityContext.seLinuxOptions.type** (string)
+    - **securityContext.seLinuxOptions.type** (string)
 
-    Type is a SELinux type label that applies to the container.
+      Type is a SELinux type label that applies to the container.
 
-  - **securityContext.seLinuxOptions.user** (string)
+    - **securityContext.seLinuxOptions.user** (string)
 
-    User is a SELinux user label that applies to the container.
+      User is a SELinux user label that applies to the container.
 
   - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
 
@@ -516,56 +443,167 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="WindowsSecurityContextOptions"></a>
     *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
 
-  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
+    - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
 
-    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+      GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
 
-  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
+    - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
 
-    GMSACredentialSpecName is the name of the GMSA credential spec to use.
+      GMSACredentialSpecName is the name of the GMSA credential spec to use.
 
-  - **securityContext.windowsOptions.runAsUserName** (string)
+    - **securityContext.windowsOptions.runAsUserName** (string)
 
-    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+      The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
 
-- **startupProbe** (Probe)
+- **startupProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
 
   Probes are not allowed for ephemeral containers.
 
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
 
-  - **startupProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
 
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **startupProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **startupProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **startupProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **startupProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **startupProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+## Operations {#Operations}
 
 
 
+<hr>
+
+
+
+
+
+
+### `get` read ephemeralcontainers of the specified Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the EphemeralContainers
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): OK
+
+401: Unauthorized
+
+
+### `update` replace ephemeralcontainers of the specified Pod
+
+#### HTTP Request
+
+PUT /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the EphemeralContainers
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): OK
+
+201 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): Created
+
+401: Unauthorized
+
+
+### `patch` partially update ephemeralcontainers of the specified Pod
+
+#### HTTP Request
+
+PATCH /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the EphemeralContainers
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): OK
+
+401: Unauthorized
+
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
similarity index 85%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
index 5bb2f6e175..42d61cb3b2 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "configuration of a horizontal pod autoscaler."
 title: "HorizontalPodAutoscaler"
-weight: 14
+weight: 12
 ---
 
 `apiVersion: autoscaling/v1`
@@ -30,11 +30,11 @@ configuration of a horizontal pod autoscaler.
 
   Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
 
   behaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
 
-- **status** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
 
   current information about the autoscaler.
 
@@ -132,7 +132,7 @@ list of horizontal pod autoscaler objects.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
 
   list of horizontal pod autoscaler objects.
 
@@ -179,7 +179,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -212,7 +212,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -285,7 +285,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -353,7 +353,7 @@ GET /apis/autoscaling/v1/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -372,7 +372,7 @@ POST /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -396,11 +396,11 @@ POST /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
 
 401: Unauthorized
 
@@ -424,7 +424,7 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -448,9 +448,9 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -474,7 +474,7 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -498,9 +498,9 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -553,7 +553,7 @@ PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -606,7 +606,7 @@ PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
similarity index 56%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
index 56fd55d24b..0ed4942e1b 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified."
 title: "HorizontalPodAutoscaler v2beta2"
-weight: 15
+weight: 13
 ---
 
 `apiVersion: autoscaling/v2beta2`
@@ -30,11 +30,11 @@ HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, wh
 
   metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
 
   spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
 
-- **status** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
 
   status is the current information about the autoscaler.
 
@@ -89,32 +89,32 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="HPAScalingRules"></a>
     *HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.*
 
-  - **behavior.scaleDown.policies** ([]HPAScalingPolicy)
+    - **behavior.scaleDown.policies** ([]HPAScalingPolicy)
 
-    policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
+      policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
 
-    <a name="HPAScalingPolicy"></a>
-    *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
+      <a name="HPAScalingPolicy"></a>
+      *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
 
-  - **behavior.scaleDown.policies.type** (string), required
+      - **behavior.scaleDown.policies.type** (string), required
 
-    Type is used to specify the scaling policy.
+        Type is used to specify the scaling policy.
 
-  - **behavior.scaleDown.policies.value** (int32), required
+      - **behavior.scaleDown.policies.value** (int32), required
 
-    Value contains the amount of change which is permitted by the policy. It must be greater than zero
+        Value contains the amount of change which is permitted by the policy. It must be greater than zero
 
-  - **behavior.scaleDown.policies.periodSeconds** (int32), required
+      - **behavior.scaleDown.policies.periodSeconds** (int32), required
 
-    PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
+        PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
 
-  - **behavior.scaleDown.selectPolicy** (string)
+    - **behavior.scaleDown.selectPolicy** (string)
 
-    selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
+      selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
 
-  - **behavior.scaleDown.stabilizationWindowSeconds** (int32)
+    - **behavior.scaleDown.stabilizationWindowSeconds** (int32)
 
-    StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
+      StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
 
   - **behavior.scaleUp** (HPAScalingRules)
 
@@ -126,32 +126,32 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="HPAScalingRules"></a>
     *HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.*
 
-  - **behavior.scaleUp.policies** ([]HPAScalingPolicy)
+    - **behavior.scaleUp.policies** ([]HPAScalingPolicy)
 
-    policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
+      policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
 
-    <a name="HPAScalingPolicy"></a>
-    *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
+      <a name="HPAScalingPolicy"></a>
+      *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
 
-  - **behavior.scaleUp.policies.type** (string), required
+      - **behavior.scaleUp.policies.type** (string), required
 
-    Type is used to specify the scaling policy.
+        Type is used to specify the scaling policy.
 
-  - **behavior.scaleUp.policies.value** (int32), required
+      - **behavior.scaleUp.policies.value** (int32), required
 
-    Value contains the amount of change which is permitted by the policy. It must be greater than zero
+        Value contains the amount of change which is permitted by the policy. It must be greater than zero
 
-  - **behavior.scaleUp.policies.periodSeconds** (int32), required
+      - **behavior.scaleUp.policies.periodSeconds** (int32), required
 
-    PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
+        PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
 
-  - **behavior.scaleUp.selectPolicy** (string)
+    - **behavior.scaleUp.selectPolicy** (string)
 
-    selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
+      selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
 
-  - **behavior.scaleUp.stabilizationWindowSeconds** (int32)
+    - **behavior.scaleUp.stabilizationWindowSeconds** (int32)
 
-    StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
+      StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
 
 - **metrics** ([]MetricSpec)
 
@@ -171,36 +171,36 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ContainerResourceMetricSource"></a>
     *ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  The values will be averaged together before being compared to the target.  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.  Only one "target" type should be set.*
 
-  - **metrics.containerResource.container** (string), required
+    - **metrics.containerResource.container** (string), required
 
-    container is the name of the container in the pods of the scaling target
+      container is the name of the container in the pods of the scaling target
 
-  - **metrics.containerResource.name** (string), required
+    - **metrics.containerResource.name** (string), required
 
-    name is the name of the resource in question.
+      name is the name of the resource in question.
 
-  - **metrics.containerResource.target** (MetricTarget), required
+    - **metrics.containerResource.target** (MetricTarget), required
 
-    target specifies the target value for the given metric
+      target specifies the target value for the given metric
 
-    <a name="MetricTarget"></a>
-    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+      <a name="MetricTarget"></a>
+      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-  - **metrics.containerResource.target.type** (string), required
+      - **metrics.containerResource.target.type** (string), required
 
-    type represents whether the metric type is Utilization, Value, or AverageValue
+        type represents whether the metric type is Utilization, Value, or AverageValue
 
-  - **metrics.containerResource.target.averageUtilization** (int32)
+      - **metrics.containerResource.target.averageUtilization** (int32)
 
-    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-  - **metrics.containerResource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.containerResource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-  - **metrics.containerResource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.containerResource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the target value of the metric (as a quantity).
+        value is the target value of the metric (as a quantity).
 
   - **metrics.external** (ExternalMetricSource)
 
@@ -209,43 +209,43 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ExternalMetricSource"></a>
     *ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).*
 
-  - **metrics.external.metric** (MetricIdentifier), required
+    - **metrics.external.metric** (MetricIdentifier), required
 
-    metric identifies the target metric by name and selector
+      metric identifies the target metric by name and selector
 
-    <a name="MetricIdentifier"></a>
-    *MetricIdentifier defines the name and optionally selector for a metric*
+      <a name="MetricIdentifier"></a>
+      *MetricIdentifier defines the name and optionally selector for a metric*
 
-  - **metrics.external.metric.name** (string), required
+      - **metrics.external.metric.name** (string), required
 
-    name is the name of the given metric
+        name is the name of the given metric
 
-  - **metrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+      - **metrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
-  - **metrics.external.target** (MetricTarget), required
+    - **metrics.external.target** (MetricTarget), required
 
-    target specifies the target value for the given metric
+      target specifies the target value for the given metric
 
-    <a name="MetricTarget"></a>
-    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+      <a name="MetricTarget"></a>
+      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-  - **metrics.external.target.type** (string), required
+      - **metrics.external.target.type** (string), required
 
-    type represents whether the metric type is Utilization, Value, or AverageValue
+        type represents whether the metric type is Utilization, Value, or AverageValue
 
-  - **metrics.external.target.averageUtilization** (int32)
+      - **metrics.external.target.averageUtilization** (int32)
 
-    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-  - **metrics.external.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.external.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-  - **metrics.external.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.external.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the target value of the metric (as a quantity).
+        value is the target value of the metric (as a quantity).
 
   - **metrics.object** (ObjectMetricSource)
 
@@ -254,61 +254,61 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ObjectMetricSource"></a>
     *ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).*
 
-  - **metrics.object.describedObject** (CrossVersionObjectReference), required
+    - **metrics.object.describedObject** (CrossVersionObjectReference), required
 
 
-    <a name="CrossVersionObjectReference"></a>
-    *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
+      <a name="CrossVersionObjectReference"></a>
+      *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
 
-  - **metrics.object.describedObject.kind** (string), required
+      - **metrics.object.describedObject.kind** (string), required
 
-    Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+        Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
 
-  - **metrics.object.describedObject.name** (string), required
+      - **metrics.object.describedObject.name** (string), required
 
-    Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
+        Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
 
-  - **metrics.object.describedObject.apiVersion** (string)
+      - **metrics.object.describedObject.apiVersion** (string)
 
-    API version of the referent
+        API version of the referent
 
-  - **metrics.object.metric** (MetricIdentifier), required
+    - **metrics.object.metric** (MetricIdentifier), required
 
-    metric identifies the target metric by name and selector
+      metric identifies the target metric by name and selector
 
-    <a name="MetricIdentifier"></a>
-    *MetricIdentifier defines the name and optionally selector for a metric*
+      <a name="MetricIdentifier"></a>
+      *MetricIdentifier defines the name and optionally selector for a metric*
 
-  - **metrics.object.metric.name** (string), required
+      - **metrics.object.metric.name** (string), required
 
-    name is the name of the given metric
+        name is the name of the given metric
 
-  - **metrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+      - **metrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
-  - **metrics.object.target** (MetricTarget), required
+    - **metrics.object.target** (MetricTarget), required
 
-    target specifies the target value for the given metric
+      target specifies the target value for the given metric
 
-    <a name="MetricTarget"></a>
-    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+      <a name="MetricTarget"></a>
+      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-  - **metrics.object.target.type** (string), required
+      - **metrics.object.target.type** (string), required
 
-    type represents whether the metric type is Utilization, Value, or AverageValue
+        type represents whether the metric type is Utilization, Value, or AverageValue
 
-  - **metrics.object.target.averageUtilization** (int32)
+      - **metrics.object.target.averageUtilization** (int32)
 
-    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-  - **metrics.object.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.object.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-  - **metrics.object.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.object.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the target value of the metric (as a quantity).
+        value is the target value of the metric (as a quantity).
 
   - **metrics.pods** (PodsMetricSource)
 
@@ -317,43 +317,43 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="PodsMetricSource"></a>
     *PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.*
 
-  - **metrics.pods.metric** (MetricIdentifier), required
+    - **metrics.pods.metric** (MetricIdentifier), required
 
-    metric identifies the target metric by name and selector
+      metric identifies the target metric by name and selector
 
-    <a name="MetricIdentifier"></a>
-    *MetricIdentifier defines the name and optionally selector for a metric*
+      <a name="MetricIdentifier"></a>
+      *MetricIdentifier defines the name and optionally selector for a metric*
 
-  - **metrics.pods.metric.name** (string), required
+      - **metrics.pods.metric.name** (string), required
 
-    name is the name of the given metric
+        name is the name of the given metric
 
-  - **metrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+      - **metrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
-  - **metrics.pods.target** (MetricTarget), required
+    - **metrics.pods.target** (MetricTarget), required
 
-    target specifies the target value for the given metric
+      target specifies the target value for the given metric
 
-    <a name="MetricTarget"></a>
-    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+      <a name="MetricTarget"></a>
+      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-  - **metrics.pods.target.type** (string), required
+      - **metrics.pods.target.type** (string), required
 
-    type represents whether the metric type is Utilization, Value, or AverageValue
+        type represents whether the metric type is Utilization, Value, or AverageValue
 
-  - **metrics.pods.target.averageUtilization** (int32)
+      - **metrics.pods.target.averageUtilization** (int32)
 
-    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-  - **metrics.pods.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.pods.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-  - **metrics.pods.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.pods.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the target value of the metric (as a quantity).
+        value is the target value of the metric (as a quantity).
 
   - **metrics.resource** (ResourceMetricSource)
 
@@ -362,32 +362,32 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ResourceMetricSource"></a>
     *ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  The values will be averaged together before being compared to the target.  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.  Only one "target" type should be set.*
 
-  - **metrics.resource.name** (string), required
+    - **metrics.resource.name** (string), required
 
-    name is the name of the resource in question.
+      name is the name of the resource in question.
 
-  - **metrics.resource.target** (MetricTarget), required
+    - **metrics.resource.target** (MetricTarget), required
 
-    target specifies the target value for the given metric
+      target specifies the target value for the given metric
 
-    <a name="MetricTarget"></a>
-    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+      <a name="MetricTarget"></a>
+      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-  - **metrics.resource.target.type** (string), required
+      - **metrics.resource.target.type** (string), required
 
-    type represents whether the metric type is Utilization, Value, or AverageValue
+        type represents whether the metric type is Utilization, Value, or AverageValue
 
-  - **metrics.resource.target.averageUtilization** (int32)
+      - **metrics.resource.target.averageUtilization** (int32)
 
-    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-  - **metrics.resource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.resource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-  - **metrics.resource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **metrics.resource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the target value of the metric (as a quantity).
+        value is the target value of the metric (as a quantity).
 
 
 
@@ -455,32 +455,32 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ContainerResourceMetricStatus"></a>
     *ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory).  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.*
 
-  - **currentMetrics.containerResource.container** (string), required
+    - **currentMetrics.containerResource.container** (string), required
 
-    Container is the name of the container in the pods of the scaling target
+      Container is the name of the container in the pods of the scaling target
 
-  - **currentMetrics.containerResource.current** (MetricValueStatus), required
+    - **currentMetrics.containerResource.current** (MetricValueStatus), required
 
-    current contains the current value for the given metric
+      current contains the current value for the given metric
 
-    <a name="MetricValueStatus"></a>
-    *MetricValueStatus holds the current value for a metric*
+      <a name="MetricValueStatus"></a>
+      *MetricValueStatus holds the current value for a metric*
 
-  - **currentMetrics.containerResource.current.averageUtilization** (int32)
+      - **currentMetrics.containerResource.current.averageUtilization** (int32)
 
-    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-  - **currentMetrics.containerResource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.containerResource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-  - **currentMetrics.containerResource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.containerResource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the current value of the metric (as a quantity).
+        value is the current value of the metric (as a quantity).
 
-  - **currentMetrics.containerResource.name** (string), required
+    - **currentMetrics.containerResource.name** (string), required
 
-    Name is the name of the resource in question.
+      Name is the name of the resource in question.
 
   - **currentMetrics.external** (ExternalMetricStatus)
 
@@ -489,39 +489,39 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ExternalMetricStatus"></a>
     *ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.*
 
-  - **currentMetrics.external.current** (MetricValueStatus), required
+    - **currentMetrics.external.current** (MetricValueStatus), required
 
-    current contains the current value for the given metric
+      current contains the current value for the given metric
 
-    <a name="MetricValueStatus"></a>
-    *MetricValueStatus holds the current value for a metric*
+      <a name="MetricValueStatus"></a>
+      *MetricValueStatus holds the current value for a metric*
 
-  - **currentMetrics.external.current.averageUtilization** (int32)
+      - **currentMetrics.external.current.averageUtilization** (int32)
 
-    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-  - **currentMetrics.external.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.external.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-  - **currentMetrics.external.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.external.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the current value of the metric (as a quantity).
+        value is the current value of the metric (as a quantity).
 
-  - **currentMetrics.external.metric** (MetricIdentifier), required
+    - **currentMetrics.external.metric** (MetricIdentifier), required
 
-    metric identifies the target metric by name and selector
+      metric identifies the target metric by name and selector
 
-    <a name="MetricIdentifier"></a>
-    *MetricIdentifier defines the name and optionally selector for a metric*
+      <a name="MetricIdentifier"></a>
+      *MetricIdentifier defines the name and optionally selector for a metric*
 
-  - **currentMetrics.external.metric.name** (string), required
+      - **currentMetrics.external.metric.name** (string), required
 
-    name is the name of the given metric
+        name is the name of the given metric
 
-  - **currentMetrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+      - **currentMetrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
   - **currentMetrics.object** (ObjectMetricStatus)
 
@@ -530,57 +530,57 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ObjectMetricStatus"></a>
     *ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).*
 
-  - **currentMetrics.object.current** (MetricValueStatus), required
+    - **currentMetrics.object.current** (MetricValueStatus), required
 
-    current contains the current value for the given metric
+      current contains the current value for the given metric
 
-    <a name="MetricValueStatus"></a>
-    *MetricValueStatus holds the current value for a metric*
+      <a name="MetricValueStatus"></a>
+      *MetricValueStatus holds the current value for a metric*
 
-  - **currentMetrics.object.current.averageUtilization** (int32)
+      - **currentMetrics.object.current.averageUtilization** (int32)
 
-    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-  - **currentMetrics.object.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.object.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-  - **currentMetrics.object.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.object.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the current value of the metric (as a quantity).
+        value is the current value of the metric (as a quantity).
 
-  - **currentMetrics.object.describedObject** (CrossVersionObjectReference), required
+    - **currentMetrics.object.describedObject** (CrossVersionObjectReference), required
 
 
-    <a name="CrossVersionObjectReference"></a>
-    *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
+      <a name="CrossVersionObjectReference"></a>
+      *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
 
-  - **currentMetrics.object.describedObject.kind** (string), required
+      - **currentMetrics.object.describedObject.kind** (string), required
 
-    Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+        Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
 
-  - **currentMetrics.object.describedObject.name** (string), required
+      - **currentMetrics.object.describedObject.name** (string), required
 
-    Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
+        Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
 
-  - **currentMetrics.object.describedObject.apiVersion** (string)
+      - **currentMetrics.object.describedObject.apiVersion** (string)
 
-    API version of the referent
+        API version of the referent
 
-  - **currentMetrics.object.metric** (MetricIdentifier), required
+    - **currentMetrics.object.metric** (MetricIdentifier), required
 
-    metric identifies the target metric by name and selector
+      metric identifies the target metric by name and selector
 
-    <a name="MetricIdentifier"></a>
-    *MetricIdentifier defines the name and optionally selector for a metric*
+      <a name="MetricIdentifier"></a>
+      *MetricIdentifier defines the name and optionally selector for a metric*
 
-  - **currentMetrics.object.metric.name** (string), required
+      - **currentMetrics.object.metric.name** (string), required
 
-    name is the name of the given metric
+        name is the name of the given metric
 
-  - **currentMetrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+      - **currentMetrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
   - **currentMetrics.pods** (PodsMetricStatus)
 
@@ -589,39 +589,39 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="PodsMetricStatus"></a>
     *PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).*
 
-  - **currentMetrics.pods.current** (MetricValueStatus), required
+    - **currentMetrics.pods.current** (MetricValueStatus), required
 
-    current contains the current value for the given metric
+      current contains the current value for the given metric
 
-    <a name="MetricValueStatus"></a>
-    *MetricValueStatus holds the current value for a metric*
+      <a name="MetricValueStatus"></a>
+      *MetricValueStatus holds the current value for a metric*
 
-  - **currentMetrics.pods.current.averageUtilization** (int32)
+      - **currentMetrics.pods.current.averageUtilization** (int32)
 
-    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-  - **currentMetrics.pods.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.pods.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-  - **currentMetrics.pods.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.pods.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the current value of the metric (as a quantity).
+        value is the current value of the metric (as a quantity).
 
-  - **currentMetrics.pods.metric** (MetricIdentifier), required
+    - **currentMetrics.pods.metric** (MetricIdentifier), required
 
-    metric identifies the target metric by name and selector
+      metric identifies the target metric by name and selector
 
-    <a name="MetricIdentifier"></a>
-    *MetricIdentifier defines the name and optionally selector for a metric*
+      <a name="MetricIdentifier"></a>
+      *MetricIdentifier defines the name and optionally selector for a metric*
 
-  - **currentMetrics.pods.metric.name** (string), required
+      - **currentMetrics.pods.metric.name** (string), required
 
-    name is the name of the given metric
+        name is the name of the given metric
 
-  - **currentMetrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+      - **currentMetrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
   - **currentMetrics.resource** (ResourceMetricStatus)
 
@@ -630,28 +630,28 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ResourceMetricStatus"></a>
     *ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.*
 
-  - **currentMetrics.resource.current** (MetricValueStatus), required
+    - **currentMetrics.resource.current** (MetricValueStatus), required
 
-    current contains the current value for the given metric
+      current contains the current value for the given metric
 
-    <a name="MetricValueStatus"></a>
-    *MetricValueStatus holds the current value for a metric*
+      <a name="MetricValueStatus"></a>
+      *MetricValueStatus holds the current value for a metric*
 
-  - **currentMetrics.resource.current.averageUtilization** (int32)
+      - **currentMetrics.resource.current.averageUtilization** (int32)
 
-    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-  - **currentMetrics.resource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.resource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-  - **currentMetrics.resource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+      - **currentMetrics.resource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    value is the current value of the metric (as a quantity).
+        value is the current value of the metric (as a quantity).
 
-  - **currentMetrics.resource.name** (string), required
+    - **currentMetrics.resource.name** (string), required
 
-    Name is the name of the resource in question.
+      Name is the name of the resource in question.
 
 - **lastScaleTime** (Time)
 
@@ -684,7 +684,7 @@ HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.
 
   metadata is the standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
 
   items is the list of horizontal pod autoscaler objects.
 
@@ -731,7 +731,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -764,7 +764,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -837,7 +837,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -905,7 +905,7 @@ GET /apis/autoscaling/v2beta2/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -924,7 +924,7 @@ POST /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -948,11 +948,11 @@ POST /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
 
 401: Unauthorized
 
@@ -976,7 +976,7 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -1000,9 +1000,9 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -1026,7 +1026,7 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -1050,9 +1050,9 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -1105,7 +1105,7 @@ PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -1158,7 +1158,7 @@ PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
similarity index 79%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
index 3deab1c4be..da8c6422e1 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Job represents the configuration of a single job."
 title: "Job"
-weight: 11
+weight: 10
 ---
 
 `apiVersion: batch/v1`
@@ -30,11 +30,11 @@ Job represents the configuration of a single job.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
 
   Specification of the desired behavior of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/job-v1#JobStatus" >}}">JobStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/job-v1#JobStatus" >}}">JobStatus</a>)
 
   Current status of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -53,7 +53,7 @@ JobSpec describes how the job execution will look like.
 ### Replicas
 
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   Describes the pod that will be created when executing a job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
 
@@ -68,18 +68,32 @@ JobSpec describes how the job execution will look like.
 
   Specifies the desired number of successfully finished pods the job should be run with.  Setting to nil means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value.  Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
 
+- **completionMode** (string)
+
+  CompletionMode specifies how Pod completions are tracked. It can be `NonIndexed` (default) or `Indexed`.
+  
+  `NonIndexed` means that the Job is considered complete when there have been .spec.completions successfully completed Pods. Each Pod completion is homologous to each other.
+  
+  `Indexed` means that the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1), available in the annotation batch.kubernetes.io/job-completion-index. The Job is considered complete when there is one successfully completed Pod for each index. When value is `Indexed`, .spec.completions must be specified and `.spec.parallelism` must be less than or equal to 10^5.
+  
+  This field is alpha-level and is only honored by servers that enable the IndexedJob feature gate. More completion modes can be added in the future. If the Job controller observes a mode that it doesn't recognize, the controller skips updates for the Job.
+
 - **backoffLimit** (int32)
 
   Specifies the number of retries before marking this job failed. Defaults to 6
 
 - **activeDeadlineSeconds** (int64)
 
-  Specifies the duration in seconds relative to the startTime that the job may be active before the system tries to terminate it; value must be positive integer
+  Specifies the duration in seconds relative to the startTime that the job may be continuously active before the system tries to terminate it; value must be positive integer. If a Job is suspended (at creation or through an update), this timer will effectively be stopped and reset when the Job is resumed again.
 
 - **ttlSecondsAfterFinished** (int32)
 
   ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature.
 
+- **suspend** (boolean)
+
+  Suspend specifies whether the Job controller should create Pods or not. If a Job is created with suspend set to true, no Pods are created by the Job controller. If a Job is suspended after creation (i.e. the flag goes from false to true), the Job controller will delete all active Pods associated with this Job. Users must design their workload to gracefully handle this. Suspending a Job will reset the StartTime field of the Job, effectively resetting the ActiveDeadlineSeconds timer too. This is an alpha field and requires the SuspendJob feature gate to be enabled; otherwise this field may not be set to true. Defaults to false.
+
 ### Selector
 
 
@@ -101,7 +115,7 @@ JobStatus represents the current state of a Job.
 
 - **startTime** (Time)
 
-  Represents time when the job was acknowledged by the job controller. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
+  Represents time when the job controller started processing a job. When a Job is created in the suspended state, this field is not set until the first time it is resumed. This field is reset every time a Job is resumed from suspension. It is represented in RFC3339 form and is in UTC.
 
   <a name="Time"></a>
   *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
@@ -125,11 +139,17 @@ JobStatus represents the current state of a Job.
 
   The number of pods which reached phase Succeeded.
 
+- **completedIndexes** (string)
+
+  CompletedIndexes holds the completed indexes when .spec.completionMode = "Indexed" in a text format. The indexes are represented as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as "1,3-5,7".
+
 - **conditions** ([]JobCondition)
 
   *Patch strategy: merge on key `type`*
   
-  The latest available observations of an object's current state. When a job fails, one of the conditions will have type == "Failed". More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
+  *Atomic: will be replaced during a merge*
+  
+  The latest available observations of an object's current state. When a Job fails, one of the conditions will have type "Failed" and status true. When a Job is suspended, one of the conditions will have type "Suspended" and status true; when the Job is resumed, the status of this condition will become false. When a Job is completed, one of the conditions will have type "Complete" and status true. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
 
   <a name="JobCondition"></a>
   *JobCondition describes current state of a job.*
@@ -184,7 +204,7 @@ JobList is a collection of jobs.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>), required
 
   items is the list of Jobs.
 
@@ -231,7 +251,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -264,7 +284,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -337,7 +357,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#JobList" >}}">JobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#JobList" >}}">JobList</a>): OK
 
 401: Unauthorized
 
@@ -405,7 +425,7 @@ GET /apis/batch/v1/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#JobList" >}}">JobList</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#JobList" >}}">JobList</a>): OK
 
 401: Unauthorized
 
@@ -424,7 +444,7 @@ POST /apis/batch/v1/namespaces/{namespace}/jobs
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -448,11 +468,11 @@ POST /apis/batch/v1/namespaces/{namespace}/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Accepted
 
 401: Unauthorized
 
@@ -476,7 +496,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -500,9 +520,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
 
 401: Unauthorized
 
@@ -526,7 +546,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -550,9 +570,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
 
 401: Unauthorized
 
@@ -605,7 +625,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -658,7 +678,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
index fec34df19f..5cbe3e4894 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "PodTemplate describes a template for creating copies of a predefined pod."
 title: "PodTemplate"
-weight: 4
+weight: 3
 ---
 
 `apiVersion: v1`
@@ -30,7 +30,7 @@ PodTemplate describes a template for creating copies of a predefined pod.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template defines the pods that will be created from this pod template. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -48,7 +48,7 @@ PodTemplateSpec describes the data a pod should have when created from a templat
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
 
   Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -72,7 +72,7 @@ PodTemplateList is a list of PodTemplates.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>), required
 
   List of pod templates
 
@@ -119,7 +119,7 @@ GET /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
 401: Unauthorized
 
@@ -192,7 +192,7 @@ GET /api/v1/namespaces/{namespace}/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
 
 401: Unauthorized
 
@@ -260,7 +260,7 @@ GET /api/v1/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
 
 401: Unauthorized
 
@@ -279,7 +279,7 @@ POST /api/v1/namespaces/{namespace}/podtemplates
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
+- **body**: <a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
 
   
 
@@ -303,11 +303,11 @@ POST /api/v1/namespaces/{namespace}/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
+201 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
 
 401: Unauthorized
 
@@ -331,7 +331,7 @@ PUT /api/v1/namespaces/{namespace}/podtemplates/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
+- **body**: <a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
 
   
 
@@ -355,9 +355,9 @@ PUT /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
+201 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
 
 401: Unauthorized
 
@@ -410,7 +410,7 @@ PATCH /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
 401: Unauthorized
 
@@ -463,9 +463,9 @@ DELETE /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-202 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
new file mode 100644
index 0000000000..6553afa238
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
@@ -0,0 +1,2631 @@
+---
+api_metadata:
+  apiVersion: "v1"
+  import: "k8s.io/api/core/v1"
+  kind: "Pod"
+content_type: "api_reference"
+description: "Pod is a collection of containers that can run on a host."
+title: "Pod"
+weight: 1
+---
+
+`apiVersion: v1`
+
+`import "k8s.io/api/core/v1"`
+
+
+## Pod {#Pod}
+
+Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.
+
+<hr>
+
+- **apiVersion**: v1
+
+
+- **kind**: Pod
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+
+  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
+- **spec** (<a href="{{< ref "../workload-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
+
+  Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+- **status** (<a href="{{< ref "../workload-resources/pod-v1#PodStatus" >}}">PodStatus</a>)
+
+  Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+
+
+
+
+## PodSpec {#PodSpec}
+
+PodSpec is a description of a pod.
+
+<hr>
+
+
+
+### Containers
+
+
+- **containers** ([]<a href="{{< ref "../workload-resources/pod-v1#Container" >}}">Container</a>), required
+
+  *Patch strategy: merge on key `name`*
+  
+  List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.
+
+- **initContainers** ([]<a href="{{< ref "../workload-resources/pod-v1#Container" >}}">Container</a>)
+
+  *Patch strategy: merge on key `name`*
+  
+  List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
+
+- **imagePullSecrets** ([]<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
+
+  *Patch strategy: merge on key `name`*
+  
+  ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
+
+- **enableServiceLinks** (boolean)
+
+  EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.
+
+### Volumes
+
+
+- **volumes** ([]<a href="{{< ref "../config-and-storage-resources/volume#Volume" >}}">Volume</a>)
+
+  *Patch strategies: retainKeys, merge on key `name`*
+  
+  List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes
+
+### Scheduling
+
+
+- **nodeSelector** (map[string]string)
+
+  NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
+
+- **nodeName** (string)
+
+  NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.
+
+- **affinity** (Affinity)
+
+  If specified, the pod's scheduling constraints
+
+  <a name="Affinity"></a>
+  *Affinity is a group of affinity scheduling rules.*
+
+  - **affinity.nodeAffinity** (<a href="{{< ref "../workload-resources/pod-v1#NodeAffinity" >}}">NodeAffinity</a>)
+
+    Describes node affinity scheduling rules for the pod.
+
+  - **affinity.podAffinity** (<a href="{{< ref "../workload-resources/pod-v1#PodAffinity" >}}">PodAffinity</a>)
+
+    Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
+
+  - **affinity.podAntiAffinity** (<a href="{{< ref "../workload-resources/pod-v1#PodAntiAffinity" >}}">PodAntiAffinity</a>)
+
+    Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
+
+- **tolerations** ([]Toleration)
+
+  If specified, the pod's tolerations.
+
+  <a name="Toleration"></a>
+  *The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.*
+
+  - **tolerations.key** (string)
+
+    Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+
+  - **tolerations.operator** (string)
+
+    Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
+
+  - **tolerations.value** (string)
+
+    Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
+
+  - **tolerations.effect** (string)
+
+    Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+
+  - **tolerations.tolerationSeconds** (int64)
+
+    TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
+
+- **schedulerName** (string)
+
+  If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
+
+- **runtimeClassName** (string)
+
+  RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.
+
+- **priorityClassName** (string)
+
+  If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
+
+- **priority** (int32)
+
+  The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.
+
+- **topologySpreadConstraints** ([]TopologySpreadConstraint)
+
+  *Patch strategy: merge on key `topologyKey`*
+  
+  *Map: unique values on keys `topologyKey, whenUnsatisfiable` will be kept during a merge*
+  
+  TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.
+
+  <a name="TopologySpreadConstraint"></a>
+  *TopologySpreadConstraint specifies how to spread matching pods among the given topology.*
+
+  - **topologySpreadConstraints.maxSkew** (int32), required
+
+    MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 | zone3 | |   P   |   P   |       | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.
+
+  - **topologySpreadConstraints.topologyKey** (string), required
+
+    TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each \<key, value> as a "bucket", and try to put balanced number of pods into each bucket. It's a required field.
+
+  - **topologySpreadConstraints.whenUnsatisfiable** (string), required
+
+    WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,
+      but giving higher precedence to topologies that would help reduce the
+      skew.
+    A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assigment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P |   P   |   P   | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.
+
+  - **topologySpreadConstraints.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.
+
+### Lifecycle
+
+
+- **restartPolicy** (string)
+
+  Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
+
+- **terminationGracePeriodSeconds** (int64)
+
+  Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.
+
+- **activeDeadlineSeconds** (int64)
+
+  Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.
+
+- **readinessGates** ([]PodReadinessGate)
+
+  If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md
+
+  <a name="PodReadinessGate"></a>
+  *PodReadinessGate contains the reference to a pod condition*
+
+  - **readinessGates.conditionType** (string), required
+
+    ConditionType refers to a condition in the pod's condition list with matching type.
+
+### Hostname and Name resolution
+
+
+- **hostname** (string)
+
+  Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.
+
+- **setHostnameAsFQDN** (boolean)
+
+  If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.
+
+- **subdomain** (string)
+
+  If specified, the fully qualified Pod hostname will be "\<hostname>.\<subdomain>.\<pod namespace>.svc.\<cluster domain>". If not specified, the pod will not have a domainname at all.
+
+- **hostAliases** ([]HostAlias)
+
+  *Patch strategy: merge on key `ip`*
+  
+  HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified. This is only valid for non-hostNetwork pods.
+
+  <a name="HostAlias"></a>
+  *HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.*
+
+  - **hostAliases.hostnames** ([]string)
+
+    Hostnames for the above IP address.
+
+  - **hostAliases.ip** (string)
+
+    IP address of the host file entry.
+
+- **dnsConfig** (PodDNSConfig)
+
+  Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
+
+  <a name="PodDNSConfig"></a>
+  *PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.*
+
+  - **dnsConfig.nameservers** ([]string)
+
+    A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.
+
+  - **dnsConfig.options** ([]PodDNSConfigOption)
+
+    A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.
+
+    <a name="PodDNSConfigOption"></a>
+    *PodDNSConfigOption defines DNS resolver options of a pod.*
+
+    - **dnsConfig.options.name** (string)
+
+      Required.
+
+    - **dnsConfig.options.value** (string)
+
+
+  - **dnsConfig.searches** ([]string)
+
+    A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.
+
+- **dnsPolicy** (string)
+
+  Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
+
+### Hosts namespaces
+
+
+- **hostNetwork** (boolean)
+
+  Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.
+
+- **hostPID** (boolean)
+
+  Use the host's pid namespace. Optional: Default to false.
+
+- **hostIPC** (boolean)
+
+  Use the host's ipc namespace. Optional: Default to false.
+
+- **shareProcessNamespace** (boolean)
+
+  Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.
+
+### Service account
+
+
+- **serviceAccountName** (string)
+
+  ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
+
+- **automountServiceAccountToken** (boolean)
+
+  AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.
+
+### Security context
+
+
+- **securityContext** (PodSecurityContext)
+
+  SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty.  See type description for default values of each field.
+
+  <a name="PodSecurityContext"></a>
+  *PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext.  Field values of container.securityContext take precedence over field values of PodSecurityContext.*
+
+  - **securityContext.runAsUser** (int64)
+
+    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
+  - **securityContext.runAsNonRoot** (boolean)
+
+    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.runAsGroup** (int64)
+
+    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
+  - **securityContext.supplementalGroups** ([]int64)
+
+    A list of groups applied to the first process run in each container, in addition to the container's primary GID.  If unspecified, no groups will be added to any container.
+
+  - **securityContext.fsGroup** (int64)
+
+    A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:
+    
+    1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----
+    
+    If unset, the Kubelet will not modify the ownership and permissions of any volume.
+
+  - **securityContext.fsGroupChangePolicy** (string)
+
+    fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
+
+  - **securityContext.seccompProfile** (SeccompProfile)
+
+    The seccomp options to use by the containers in this pod.
+
+    <a name="SeccompProfile"></a>
+    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
+
+    - **securityContext.seccompProfile.type** (string), required
+
+      type indicates which kind of seccomp profile will be applied. Valid options are:
+      
+      Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+
+    - **securityContext.seccompProfile.localhostProfile** (string)
+
+      localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+
+  - **securityContext.seLinuxOptions** (SELinuxOptions)
+
+    The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
+    <a name="SELinuxOptions"></a>
+    *SELinuxOptions are the labels to be applied to the container*
+
+    - **securityContext.seLinuxOptions.level** (string)
+
+      Level is SELinux level label that applies to the container.
+
+    - **securityContext.seLinuxOptions.role** (string)
+
+      Role is a SELinux role label that applies to the container.
+
+    - **securityContext.seLinuxOptions.type** (string)
+
+      Type is a SELinux type label that applies to the container.
+
+    - **securityContext.seLinuxOptions.user** (string)
+
+      User is a SELinux user label that applies to the container.
+
+  - **securityContext.sysctls** ([]Sysctl)
+
+    Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.
+
+    <a name="Sysctl"></a>
+    *Sysctl defines a kernel parameter to be set*
+
+    - **securityContext.sysctls.name** (string), required
+
+      Name of a property to set
+
+    - **securityContext.sysctls.value** (string), required
+
+      Value of a property to set
+
+  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
+
+    The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+    <a name="WindowsSecurityContextOptions"></a>
+    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
+
+    - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
+
+      GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+
+    - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
+
+      GMSACredentialSpecName is the name of the GMSA credential spec to use.
+
+    - **securityContext.windowsOptions.runAsUserName** (string)
+
+      The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+### Beta level
+
+
+- **preemptionPolicy** (string)
+
+  PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
+
+- **overhead** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+  Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.
+
+### Alpha level
+
+
+- **ephemeralContainers** ([]<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainer" >}}">EphemeralContainer</a>)
+
+  *Patch strategy: merge on key `name`*
+  
+  List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. This field is alpha-level and is only honored by servers that enable the EphemeralContainers feature.
+
+### Deprecated
+
+
+- **serviceAccount** (string)
+
+  DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.
+
+
+
+## Container {#Container}
+
+A single application container that you want to run within a pod.
+
+<hr>
+
+- **name** (string), required
+
+  Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+
+
+
+### Image
+
+
+- **image** (string)
+
+  Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
+
+- **imagePullPolicy** (string)
+
+  Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+
+### Entrypoint
+
+
+- **command** ([]string)
+
+  Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+
+- **args** ([]string)
+
+  Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+
+- **workingDir** (string)
+
+  Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+
+### Ports
+
+
+- **ports** ([]ContainerPort)
+
+  *Patch strategy: merge on key `containerPort`*
+  
+  *Map: unique values on keys `containerPort, protocol` will be kept during a merge*
+  
+  List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Cannot be updated.
+
+  <a name="ContainerPort"></a>
+  *ContainerPort represents a network port in a single container.*
+
+  - **ports.containerPort** (int32), required
+
+    Number of port to expose on the pod's IP address. This must be a valid port number, 0 \< x \< 65536.
+
+  - **ports.hostIP** (string)
+
+    What host IP to bind the external port to.
+
+  - **ports.hostPort** (int32)
+
+    Number of port to expose on the host. If specified, this must be a valid port number, 0 \< x \< 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
+
+  - **ports.name** (string)
+
+    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
+
+  - **ports.protocol** (string)
+
+    Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
+
+### Environment variables
+
+
+- **env** ([]EnvVar)
+
+  *Patch strategy: merge on key `name`*
+  
+  List of environment variables to set in the container. Cannot be updated.
+
+  <a name="EnvVar"></a>
+  *EnvVar represents an environment variable present in a Container.*
+
+  - **env.name** (string), required
+
+    Name of the environment variable. Must be a C_IDENTIFIER.
+
+  - **env.value** (string)
+
+    Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
+
+  - **env.valueFrom** (EnvVarSource)
+
+    Source for the environment variable's value. Cannot be used if value is not empty.
+
+    <a name="EnvVarSource"></a>
+    *EnvVarSource represents a source for the value of an EnvVar.*
+
+    - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
+
+      Selects a key of a ConfigMap.
+
+      <a name="ConfigMapKeySelector"></a>
+      *Selects a key from a ConfigMap.*
+
+      - **env.valueFrom.configMapKeyRef.key** (string), required
+
+        The key to select.
+
+      - **env.valueFrom.configMapKeyRef.name** (string)
+
+        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+      - **env.valueFrom.configMapKeyRef.optional** (boolean)
+
+        Specify whether the ConfigMap or its key must be defined
+
+    - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
+
+      Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
+
+    - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
+
+      Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
+
+    - **env.valueFrom.secretKeyRef** (SecretKeySelector)
+
+      Selects a key of a secret in the pod's namespace
+
+      <a name="SecretKeySelector"></a>
+      *SecretKeySelector selects a key of a Secret.*
+
+      - **env.valueFrom.secretKeyRef.key** (string), required
+
+        The key of the secret to select from.  Must be a valid secret key.
+
+      - **env.valueFrom.secretKeyRef.name** (string)
+
+        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+      - **env.valueFrom.secretKeyRef.optional** (boolean)
+
+        Specify whether the Secret or its key must be defined
+
+- **envFrom** ([]EnvFromSource)
+
+  List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
+
+  <a name="EnvFromSource"></a>
+  *EnvFromSource represents the source of a set of ConfigMaps*
+
+  - **envFrom.configMapRef** (ConfigMapEnvSource)
+
+    The ConfigMap to select from
+
+    <a name="ConfigMapEnvSource"></a>
+    *ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.
+    
+    The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
+
+    - **envFrom.configMapRef.name** (string)
+
+      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+    - **envFrom.configMapRef.optional** (boolean)
+
+      Specify whether the ConfigMap must be defined
+
+  - **envFrom.prefix** (string)
+
+    An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
+
+  - **envFrom.secretRef** (SecretEnvSource)
+
+    The Secret to select from
+
+    <a name="SecretEnvSource"></a>
+    *SecretEnvSource selects a Secret to populate the environment variables with.
+    
+    The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
+
+    - **envFrom.secretRef.name** (string)
+
+      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+    - **envFrom.secretRef.optional** (boolean)
+
+      Specify whether the Secret must be defined
+
+### Volumes
+
+
+- **volumeMounts** ([]VolumeMount)
+
+  *Patch strategy: merge on key `mountPath`*
+  
+  Pod volumes to mount into the container's filesystem. Cannot be updated.
+
+  <a name="VolumeMount"></a>
+  *VolumeMount describes a mounting of a Volume within a container.*
+
+  - **volumeMounts.mountPath** (string), required
+
+    Path within the container at which the volume should be mounted.  Must not contain ':'.
+
+  - **volumeMounts.name** (string), required
+
+    This must match the Name of a Volume.
+
+  - **volumeMounts.mountPropagation** (string)
+
+    mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
+
+  - **volumeMounts.readOnly** (boolean)
+
+    Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
+
+  - **volumeMounts.subPath** (string)
+
+    Path within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).
+
+  - **volumeMounts.subPathExpr** (string)
+
+    Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive.
+
+- **volumeDevices** ([]VolumeDevice)
+
+  *Patch strategy: merge on key `devicePath`*
+  
+  volumeDevices is the list of block devices to be used by the container.
+
+  <a name="VolumeDevice"></a>
+  *volumeDevice describes a mapping of a raw block device within a container.*
+
+  - **volumeDevices.devicePath** (string), required
+
+    devicePath is the path inside of the container that the device will be mapped to.
+
+  - **volumeDevices.name** (string), required
+
+    name must match the name of a persistentVolumeClaim in the pod
+
+### Resources
+
+
+- **resources** (ResourceRequirements)
+
+  Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+
+  <a name="ResourceRequirements"></a>
+  *ResourceRequirements describes the compute resource requirements.*
+
+  - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+
+  - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+
+### Lifecycle
+
+
+- **lifecycle** (Lifecycle)
+
+  Actions that the management system should take in response to container lifecycle events. Cannot be updated.
+
+  <a name="Lifecycle"></a>
+  *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
+
+  - **lifecycle.postStart** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
+
+    PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
+
+  - **lifecycle.preStop** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
+
+    PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
+
+- **terminationMessagePath** (string)
+
+  Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
+
+- **terminationMessagePolicy** (string)
+
+  Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
+
+- **livenessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
+
+  Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+- **readinessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
+
+  Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+- **startupProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
+
+  StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+### Security Context
+
+
+- **securityContext** (SecurityContext)
+
+  Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
+
+  <a name="SecurityContext"></a>
+  *SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext.  When both are set, the values in SecurityContext take precedence.*
+
+  - **securityContext.runAsUser** (int64)
+
+    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.runAsNonRoot** (boolean)
+
+    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.runAsGroup** (int64)
+
+    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.readOnlyRootFilesystem** (boolean)
+
+    Whether this container has a read-only root filesystem. Default is false.
+
+  - **securityContext.procMount** (string)
+
+    procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.
+
+  - **securityContext.privileged** (boolean)
+
+    Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
+
+  - **securityContext.allowPrivilegeEscalation** (boolean)
+
+    AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN
+
+  - **securityContext.capabilities** (Capabilities)
+
+    The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
+
+    <a name="Capabilities"></a>
+    *Adds and removes POSIX capabilities from running containers.*
+
+    - **securityContext.capabilities.add** ([]string)
+
+      Added capabilities
+
+    - **securityContext.capabilities.drop** ([]string)
+
+      Removed capabilities
+
+  - **securityContext.seccompProfile** (SeccompProfile)
+
+    The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options.
+
+    <a name="SeccompProfile"></a>
+    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
+
+    - **securityContext.seccompProfile.type** (string), required
+
+      type indicates which kind of seccomp profile will be applied. Valid options are:
+      
+      Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+
+    - **securityContext.seccompProfile.localhostProfile** (string)
+
+      localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+
+  - **securityContext.seLinuxOptions** (SELinuxOptions)
+
+    The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+    <a name="SELinuxOptions"></a>
+    *SELinuxOptions are the labels to be applied to the container*
+
+    - **securityContext.seLinuxOptions.level** (string)
+
+      Level is SELinux level label that applies to the container.
+
+    - **securityContext.seLinuxOptions.role** (string)
+
+      Role is a SELinux role label that applies to the container.
+
+    - **securityContext.seLinuxOptions.type** (string)
+
+      Type is a SELinux type label that applies to the container.
+
+    - **securityContext.seLinuxOptions.user** (string)
+
+      User is a SELinux user label that applies to the container.
+
+  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
+
+    The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+    <a name="WindowsSecurityContextOptions"></a>
+    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
+
+    - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
+
+      GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+
+    - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
+
+      GMSACredentialSpecName is the name of the GMSA credential spec to use.
+
+    - **securityContext.windowsOptions.runAsUserName** (string)
+
+      The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+### Debugging
+
+
+- **stdin** (boolean)
+
+  Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
+
+- **stdinOnce** (boolean)
+
+  Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
+
+- **tty** (boolean)
+
+  Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+
+
+
+## Handler {#Handler}
+
+Handler defines a specific action that should be taken
+
+<hr>
+
+- **exec** (ExecAction)
+
+  One and only one of the following should be specified. Exec specifies the action to take.
+
+  <a name="ExecAction"></a>
+  *ExecAction describes a "run in container" action.*
+
+  - **exec.command** ([]string)
+
+    Command is the command line to execute inside the container, the working directory for the command  is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+
+- **httpGet** (HTTPGetAction)
+
+  HTTPGet specifies the http request to perform.
+
+  <a name="HTTPGetAction"></a>
+  *HTTPGetAction describes an action based on HTTP Get requests.*
+
+  - **httpGet.port** (IntOrString), required
+
+    Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+
+  - **httpGet.host** (string)
+
+    Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
+
+  - **httpGet.httpHeaders** ([]HTTPHeader)
+
+    Custom headers to set in the request. HTTP allows repeated headers.
+
+    <a name="HTTPHeader"></a>
+    *HTTPHeader describes a custom header to be used in HTTP probes*
+
+    - **httpGet.httpHeaders.name** (string), required
+
+      The header field name
+
+    - **httpGet.httpHeaders.value** (string), required
+
+      The header field value
+
+  - **httpGet.path** (string)
+
+    Path to access on the HTTP server.
+
+  - **httpGet.scheme** (string)
+
+    Scheme to use for connecting to the host. Defaults to HTTP.
+
+- **tcpSocket** (TCPSocketAction)
+
+  TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  <a name="TCPSocketAction"></a>
+  *TCPSocketAction describes an action based on opening a socket*
+
+  - **tcpSocket.port** (IntOrString), required
+
+    Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+
+  - **tcpSocket.host** (string)
+
+    Optional: Host name to connect to, defaults to the pod IP.
+
+
+
+
+
+## NodeAffinity {#NodeAffinity}
+
+Node affinity is a group of node affinity scheduling rules.
+
+<hr>
+
+- **preferredDuringSchedulingIgnoredDuringExecution** ([]PreferredSchedulingTerm)
+
+  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.
+
+  <a name="PreferredSchedulingTerm"></a>
+  *An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.preference** (NodeSelectorTerm), required
+
+    A node selector term, associated with the corresponding weight.
+
+    <a name="NodeSelectorTerm"></a>
+    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+      A list of node selector requirements by node's labels.
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+      A list of node selector requirements by node's fields.
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
+
+    Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
+
+- **requiredDuringSchedulingIgnoredDuringExecution** (NodeSelector)
+
+  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.
+
+  <a name="NodeSelector"></a>
+  *A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.*
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms** ([]NodeSelectorTerm), required
+
+    Required. A list of node selector terms. The terms are ORed.
+
+    <a name="NodeSelectorTerm"></a>
+    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
+
+    - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+      A list of node selector requirements by node's labels.
+
+    - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+      A list of node selector requirements by node's fields.
+
+
+
+
+
+## PodAffinity {#PodAffinity}
+
+Pod affinity is a group of inter pod affinity scheduling rules.
+
+<hr>
+
+- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
+
+  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
+
+  <a name="WeightedPodAffinityTerm"></a>
+  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
+
+    Required. A pod affinity term, associated with the corresponding weight.
+
+    <a name="PodAffinityTerm"></a>
+    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
+
+      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+      A label query over a set of resources, in this case pods.
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+      A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
+
+      namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
+
+    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
+
+- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
+
+  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
+
+  <a name="PodAffinityTerm"></a>
+  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
+
+    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over a set of resources, in this case pods.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
+
+    namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
+
+
+
+
+
+## PodAntiAffinity {#PodAntiAffinity}
+
+Pod anti affinity is a group of inter pod anti affinity scheduling rules.
+
+<hr>
+
+- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
+
+  The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
+
+  <a name="WeightedPodAffinityTerm"></a>
+  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
+
+    Required. A pod affinity term, associated with the corresponding weight.
+
+    <a name="PodAffinityTerm"></a>
+    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
+
+      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+      A label query over a set of resources, in this case pods.
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+      A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+
+    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
+
+      namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
+
+    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
+
+- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
+
+  If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
+
+  <a name="PodAffinityTerm"></a>
+  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
+
+    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over a set of resources, in this case pods.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
+
+    namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
+
+
+
+
+
+## Probe {#Probe}
+
+Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.
+
+<hr>
+
+- **exec** (ExecAction)
+
+  One and only one of the following should be specified. Exec specifies the action to take.
+
+  <a name="ExecAction"></a>
+  *ExecAction describes a "run in container" action.*
+
+  - **exec.command** ([]string)
+
+    Command is the command line to execute inside the container, the working directory for the command  is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+
+- **httpGet** (HTTPGetAction)
+
+  HTTPGet specifies the http request to perform.
+
+  <a name="HTTPGetAction"></a>
+  *HTTPGetAction describes an action based on HTTP Get requests.*
+
+  - **httpGet.port** (IntOrString), required
+
+    Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+
+  - **httpGet.host** (string)
+
+    Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
+
+  - **httpGet.httpHeaders** ([]HTTPHeader)
+
+    Custom headers to set in the request. HTTP allows repeated headers.
+
+    <a name="HTTPHeader"></a>
+    *HTTPHeader describes a custom header to be used in HTTP probes*
+
+    - **httpGet.httpHeaders.name** (string), required
+
+      The header field name
+
+    - **httpGet.httpHeaders.value** (string), required
+
+      The header field value
+
+  - **httpGet.path** (string)
+
+    Path to access on the HTTP server.
+
+  - **httpGet.scheme** (string)
+
+    Scheme to use for connecting to the host. Defaults to HTTP.
+
+- **tcpSocket** (TCPSocketAction)
+
+  TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  <a name="TCPSocketAction"></a>
+  *TCPSocketAction describes an action based on opening a socket*
+
+  - **tcpSocket.port** (IntOrString), required
+
+    Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+
+  - **tcpSocket.host** (string)
+
+    Optional: Host name to connect to, defaults to the pod IP.
+
+- **initialDelaySeconds** (int32)
+
+  Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+- **terminationGracePeriodSeconds** (int64)
+
+  Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+
+- **periodSeconds** (int32)
+
+  How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
+- **timeoutSeconds** (int32)
+
+  Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+- **failureThreshold** (int32)
+
+  Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
+- **successThreshold** (int32)
+
+  Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+
+
+
+
+
+## PodStatus {#PodStatus}
+
+PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.
+
+<hr>
+
+- **nominatedNodeName** (string)
+
+  nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.
+
+- **hostIP** (string)
+
+  IP address of the host to which the pod is assigned. Empty if not yet scheduled.
+
+- **startTime** (Time)
+
+  RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.
+
+  <a name="Time"></a>
+  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+- **phase** (string)
+
+  The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values:
+  
+  Pending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.
+  
+  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase
+
+- **message** (string)
+
+  A human readable message indicating details about why the pod is in this condition.
+
+- **reason** (string)
+
+  A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'
+
+- **podIP** (string)
+
+  IP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.
+
+- **podIPs** ([]PodIP)
+
+  *Patch strategy: merge on key `ip`*
+  
+  podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.
+
+  <a name="PodIP"></a>
+  *IP address information for entries in the (plural) PodIPs field. Each entry includes:
+     IP: An IP address allocated to the pod. Routable at least within the cluster.*
+
+  - **podIPs.ip** (string)
+
+    ip is an IP address (IPv4 or IPv6) assigned to the pod
+
+- **conditions** ([]PodCondition)
+
+  *Patch strategy: merge on key `type`*
+  
+  Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
+
+  <a name="PodCondition"></a>
+  *PodCondition contains details for the current condition of this pod.*
+
+  - **conditions.status** (string), required
+
+    Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
+
+  - **conditions.type** (string), required
+
+    Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
+
+  - **conditions.lastProbeTime** (Time)
+
+    Last time we probed the condition.
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **conditions.lastTransitionTime** (Time)
+
+    Last time the condition transitioned from one status to another.
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **conditions.message** (string)
+
+    Human-readable message indicating details about last transition.
+
+  - **conditions.reason** (string)
+
+    Unique, one-word, CamelCase reason for the condition's last transition.
+
+- **qosClass** (string)
+
+  The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md
+
+- **initContainerStatuses** ([]ContainerStatus)
+
+  The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
+
+  <a name="ContainerStatus"></a>
+  *ContainerStatus contains details for the current status of this container.*
+
+  - **initContainerStatuses.name** (string), required
+
+    This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
+
+  - **initContainerStatuses.image** (string), required
+
+    The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
+
+  - **initContainerStatuses.imageID** (string), required
+
+    ImageID of the container's image.
+
+  - **initContainerStatuses.containerID** (string)
+
+    Container's ID in the format 'docker://\<container_id>'.
+
+  - **initContainerStatuses.state** (ContainerState)
+
+    Details about the container's current condition.
+
+    <a name="ContainerState"></a>
+    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+    - **initContainerStatuses.state.running** (ContainerStateRunning)
+
+      Details about a running container
+
+      <a name="ContainerStateRunning"></a>
+      *ContainerStateRunning is a running state of a container.*
+
+      - **initContainerStatuses.state.running.startedAt** (Time)
+
+        Time at which the container was last (re-)started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+    - **initContainerStatuses.state.terminated** (ContainerStateTerminated)
+
+      Details about a terminated container
+
+      <a name="ContainerStateTerminated"></a>
+      *ContainerStateTerminated is a terminated state of a container.*
+
+      - **initContainerStatuses.state.terminated.containerID** (string)
+
+        Container's ID in the format 'docker://\<container_id>'
+
+      - **initContainerStatuses.state.terminated.exitCode** (int32), required
+
+        Exit status from the last termination of the container
+
+      - **initContainerStatuses.state.terminated.startedAt** (Time)
+
+        Time at which previous execution of the container started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **initContainerStatuses.state.terminated.finishedAt** (Time)
+
+        Time at which the container last terminated
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **initContainerStatuses.state.terminated.message** (string)
+
+        Message regarding the last termination of the container
+
+      - **initContainerStatuses.state.terminated.reason** (string)
+
+        (brief) reason from the last termination of the container
+
+      - **initContainerStatuses.state.terminated.signal** (int32)
+
+        Signal from the last termination of the container
+
+    - **initContainerStatuses.state.waiting** (ContainerStateWaiting)
+
+      Details about a waiting container
+
+      <a name="ContainerStateWaiting"></a>
+      *ContainerStateWaiting is a waiting state of a container.*
+
+      - **initContainerStatuses.state.waiting.message** (string)
+
+        Message regarding why the container is not yet running.
+
+      - **initContainerStatuses.state.waiting.reason** (string)
+
+        (brief) reason the container is not yet running.
+
+  - **initContainerStatuses.lastState** (ContainerState)
+
+    Details about the container's last termination condition.
+
+    <a name="ContainerState"></a>
+    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+    - **initContainerStatuses.lastState.running** (ContainerStateRunning)
+
+      Details about a running container
+
+      <a name="ContainerStateRunning"></a>
+      *ContainerStateRunning is a running state of a container.*
+
+      - **initContainerStatuses.lastState.running.startedAt** (Time)
+
+        Time at which the container was last (re-)started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+    - **initContainerStatuses.lastState.terminated** (ContainerStateTerminated)
+
+      Details about a terminated container
+
+      <a name="ContainerStateTerminated"></a>
+      *ContainerStateTerminated is a terminated state of a container.*
+
+      - **initContainerStatuses.lastState.terminated.containerID** (string)
+
+        Container's ID in the format 'docker://\<container_id>'
+
+      - **initContainerStatuses.lastState.terminated.exitCode** (int32), required
+
+        Exit status from the last termination of the container
+
+      - **initContainerStatuses.lastState.terminated.startedAt** (Time)
+
+        Time at which previous execution of the container started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **initContainerStatuses.lastState.terminated.finishedAt** (Time)
+
+        Time at which the container last terminated
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **initContainerStatuses.lastState.terminated.message** (string)
+
+        Message regarding the last termination of the container
+
+      - **initContainerStatuses.lastState.terminated.reason** (string)
+
+        (brief) reason from the last termination of the container
+
+      - **initContainerStatuses.lastState.terminated.signal** (int32)
+
+        Signal from the last termination of the container
+
+    - **initContainerStatuses.lastState.waiting** (ContainerStateWaiting)
+
+      Details about a waiting container
+
+      <a name="ContainerStateWaiting"></a>
+      *ContainerStateWaiting is a waiting state of a container.*
+
+      - **initContainerStatuses.lastState.waiting.message** (string)
+
+        Message regarding why the container is not yet running.
+
+      - **initContainerStatuses.lastState.waiting.reason** (string)
+
+        (brief) reason the container is not yet running.
+
+  - **initContainerStatuses.ready** (boolean), required
+
+    Specifies whether the container has passed its readiness probe.
+
+  - **initContainerStatuses.restartCount** (int32), required
+
+    The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
+
+  - **initContainerStatuses.started** (boolean)
+
+    Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
+
+- **containerStatuses** ([]ContainerStatus)
+
+  The list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
+
+  <a name="ContainerStatus"></a>
+  *ContainerStatus contains details for the current status of this container.*
+
+  - **containerStatuses.name** (string), required
+
+    This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
+
+  - **containerStatuses.image** (string), required
+
+    The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
+
+  - **containerStatuses.imageID** (string), required
+
+    ImageID of the container's image.
+
+  - **containerStatuses.containerID** (string)
+
+    Container's ID in the format 'docker://\<container_id>'.
+
+  - **containerStatuses.state** (ContainerState)
+
+    Details about the container's current condition.
+
+    <a name="ContainerState"></a>
+    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+    - **containerStatuses.state.running** (ContainerStateRunning)
+
+      Details about a running container
+
+      <a name="ContainerStateRunning"></a>
+      *ContainerStateRunning is a running state of a container.*
+
+      - **containerStatuses.state.running.startedAt** (Time)
+
+        Time at which the container was last (re-)started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+    - **containerStatuses.state.terminated** (ContainerStateTerminated)
+
+      Details about a terminated container
+
+      <a name="ContainerStateTerminated"></a>
+      *ContainerStateTerminated is a terminated state of a container.*
+
+      - **containerStatuses.state.terminated.containerID** (string)
+
+        Container's ID in the format 'docker://\<container_id>'
+
+      - **containerStatuses.state.terminated.exitCode** (int32), required
+
+        Exit status from the last termination of the container
+
+      - **containerStatuses.state.terminated.startedAt** (Time)
+
+        Time at which previous execution of the container started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **containerStatuses.state.terminated.finishedAt** (Time)
+
+        Time at which the container last terminated
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **containerStatuses.state.terminated.message** (string)
+
+        Message regarding the last termination of the container
+
+      - **containerStatuses.state.terminated.reason** (string)
+
+        (brief) reason from the last termination of the container
+
+      - **containerStatuses.state.terminated.signal** (int32)
+
+        Signal from the last termination of the container
+
+    - **containerStatuses.state.waiting** (ContainerStateWaiting)
+
+      Details about a waiting container
+
+      <a name="ContainerStateWaiting"></a>
+      *ContainerStateWaiting is a waiting state of a container.*
+
+      - **containerStatuses.state.waiting.message** (string)
+
+        Message regarding why the container is not yet running.
+
+      - **containerStatuses.state.waiting.reason** (string)
+
+        (brief) reason the container is not yet running.
+
+  - **containerStatuses.lastState** (ContainerState)
+
+    Details about the container's last termination condition.
+
+    <a name="ContainerState"></a>
+    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+    - **containerStatuses.lastState.running** (ContainerStateRunning)
+
+      Details about a running container
+
+      <a name="ContainerStateRunning"></a>
+      *ContainerStateRunning is a running state of a container.*
+
+      - **containerStatuses.lastState.running.startedAt** (Time)
+
+        Time at which the container was last (re-)started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+    - **containerStatuses.lastState.terminated** (ContainerStateTerminated)
+
+      Details about a terminated container
+
+      <a name="ContainerStateTerminated"></a>
+      *ContainerStateTerminated is a terminated state of a container.*
+
+      - **containerStatuses.lastState.terminated.containerID** (string)
+
+        Container's ID in the format 'docker://\<container_id>'
+
+      - **containerStatuses.lastState.terminated.exitCode** (int32), required
+
+        Exit status from the last termination of the container
+
+      - **containerStatuses.lastState.terminated.startedAt** (Time)
+
+        Time at which previous execution of the container started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **containerStatuses.lastState.terminated.finishedAt** (Time)
+
+        Time at which the container last terminated
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **containerStatuses.lastState.terminated.message** (string)
+
+        Message regarding the last termination of the container
+
+      - **containerStatuses.lastState.terminated.reason** (string)
+
+        (brief) reason from the last termination of the container
+
+      - **containerStatuses.lastState.terminated.signal** (int32)
+
+        Signal from the last termination of the container
+
+    - **containerStatuses.lastState.waiting** (ContainerStateWaiting)
+
+      Details about a waiting container
+
+      <a name="ContainerStateWaiting"></a>
+      *ContainerStateWaiting is a waiting state of a container.*
+
+      - **containerStatuses.lastState.waiting.message** (string)
+
+        Message regarding why the container is not yet running.
+
+      - **containerStatuses.lastState.waiting.reason** (string)
+
+        (brief) reason the container is not yet running.
+
+  - **containerStatuses.ready** (boolean), required
+
+    Specifies whether the container has passed its readiness probe.
+
+  - **containerStatuses.restartCount** (int32), required
+
+    The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
+
+  - **containerStatuses.started** (boolean)
+
+    Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
+
+- **ephemeralContainerStatuses** ([]ContainerStatus)
+
+  Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.
+
+  <a name="ContainerStatus"></a>
+  *ContainerStatus contains details for the current status of this container.*
+
+  - **ephemeralContainerStatuses.name** (string), required
+
+    This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
+
+  - **ephemeralContainerStatuses.image** (string), required
+
+    The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
+
+  - **ephemeralContainerStatuses.imageID** (string), required
+
+    ImageID of the container's image.
+
+  - **ephemeralContainerStatuses.containerID** (string)
+
+    Container's ID in the format 'docker://\<container_id>'.
+
+  - **ephemeralContainerStatuses.state** (ContainerState)
+
+    Details about the container's current condition.
+
+    <a name="ContainerState"></a>
+    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+    - **ephemeralContainerStatuses.state.running** (ContainerStateRunning)
+
+      Details about a running container
+
+      <a name="ContainerStateRunning"></a>
+      *ContainerStateRunning is a running state of a container.*
+
+      - **ephemeralContainerStatuses.state.running.startedAt** (Time)
+
+        Time at which the container was last (re-)started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+    - **ephemeralContainerStatuses.state.terminated** (ContainerStateTerminated)
+
+      Details about a terminated container
+
+      <a name="ContainerStateTerminated"></a>
+      *ContainerStateTerminated is a terminated state of a container.*
+
+      - **ephemeralContainerStatuses.state.terminated.containerID** (string)
+
+        Container's ID in the format 'docker://\<container_id>'
+
+      - **ephemeralContainerStatuses.state.terminated.exitCode** (int32), required
+
+        Exit status from the last termination of the container
+
+      - **ephemeralContainerStatuses.state.terminated.startedAt** (Time)
+
+        Time at which previous execution of the container started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **ephemeralContainerStatuses.state.terminated.finishedAt** (Time)
+
+        Time at which the container last terminated
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **ephemeralContainerStatuses.state.terminated.message** (string)
+
+        Message regarding the last termination of the container
+
+      - **ephemeralContainerStatuses.state.terminated.reason** (string)
+
+        (brief) reason from the last termination of the container
+
+      - **ephemeralContainerStatuses.state.terminated.signal** (int32)
+
+        Signal from the last termination of the container
+
+    - **ephemeralContainerStatuses.state.waiting** (ContainerStateWaiting)
+
+      Details about a waiting container
+
+      <a name="ContainerStateWaiting"></a>
+      *ContainerStateWaiting is a waiting state of a container.*
+
+      - **ephemeralContainerStatuses.state.waiting.message** (string)
+
+        Message regarding why the container is not yet running.
+
+      - **ephemeralContainerStatuses.state.waiting.reason** (string)
+
+        (brief) reason the container is not yet running.
+
+  - **ephemeralContainerStatuses.lastState** (ContainerState)
+
+    Details about the container's last termination condition.
+
+    <a name="ContainerState"></a>
+    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+    - **ephemeralContainerStatuses.lastState.running** (ContainerStateRunning)
+
+      Details about a running container
+
+      <a name="ContainerStateRunning"></a>
+      *ContainerStateRunning is a running state of a container.*
+
+      - **ephemeralContainerStatuses.lastState.running.startedAt** (Time)
+
+        Time at which the container was last (re-)started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+    - **ephemeralContainerStatuses.lastState.terminated** (ContainerStateTerminated)
+
+      Details about a terminated container
+
+      <a name="ContainerStateTerminated"></a>
+      *ContainerStateTerminated is a terminated state of a container.*
+
+      - **ephemeralContainerStatuses.lastState.terminated.containerID** (string)
+
+        Container's ID in the format 'docker://\<container_id>'
+
+      - **ephemeralContainerStatuses.lastState.terminated.exitCode** (int32), required
+
+        Exit status from the last termination of the container
+
+      - **ephemeralContainerStatuses.lastState.terminated.startedAt** (Time)
+
+        Time at which previous execution of the container started
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **ephemeralContainerStatuses.lastState.terminated.finishedAt** (Time)
+
+        Time at which the container last terminated
+
+        <a name="Time"></a>
+        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+      - **ephemeralContainerStatuses.lastState.terminated.message** (string)
+
+        Message regarding the last termination of the container
+
+      - **ephemeralContainerStatuses.lastState.terminated.reason** (string)
+
+        (brief) reason from the last termination of the container
+
+      - **ephemeralContainerStatuses.lastState.terminated.signal** (int32)
+
+        Signal from the last termination of the container
+
+    - **ephemeralContainerStatuses.lastState.waiting** (ContainerStateWaiting)
+
+      Details about a waiting container
+
+      <a name="ContainerStateWaiting"></a>
+      *ContainerStateWaiting is a waiting state of a container.*
+
+      - **ephemeralContainerStatuses.lastState.waiting.message** (string)
+
+        Message regarding why the container is not yet running.
+
+      - **ephemeralContainerStatuses.lastState.waiting.reason** (string)
+
+        (brief) reason the container is not yet running.
+
+  - **ephemeralContainerStatuses.ready** (boolean), required
+
+    Specifies whether the container has passed its readiness probe.
+
+  - **ephemeralContainerStatuses.restartCount** (int32), required
+
+    The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
+
+  - **ephemeralContainerStatuses.started** (boolean)
+
+    Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
+
+
+
+
+
+## PodList {#PodList}
+
+PodList is a list of Pods.
+
+<hr>
+
+- **items** ([]<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>), required
+
+  List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md
+
+- **apiVersion** (string)
+
+  APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+
+- **kind** (string)
+
+  Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+
+- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
+
+  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+
+
+
+
+
+## Operations {#Operations}
+
+
+
+<hr>
+
+
+
+
+
+
+### `get` read the specified Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `get` read log of the specified Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods/{name}/log
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **container** (*in query*): string
+
+  The container for which to stream logs. Defaults to only container if there is one container in the pod.
+
+
+- **follow** (*in query*): boolean
+
+  Follow the log stream of the pod. Defaults to false.
+
+
+- **insecureSkipTLSVerifyBackend** (*in query*): boolean
+
+  insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to.  This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet.  If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).
+
+
+- **limitBytes** (*in query*): integer
+
+  If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **previous** (*in query*): boolean
+
+  Return previous terminated container logs. Defaults to false.
+
+
+- **sinceSeconds** (*in query*): integer
+
+  A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.
+
+
+- **tailLines** (*in query*): integer
+
+  If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime
+
+
+- **timestamps** (*in query*): boolean
+
+  If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.
+
+
+
+#### Response
+
+
+200 (string): OK
+
+401: Unauthorized
+
+
+### `get` read status of the specified Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#PodList" >}}">PodList</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind Pod
+
+#### HTTP Request
+
+GET /api/v1/pods
+
+#### Parameters
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#PodList" >}}">PodList</a>): OK
+
+401: Unauthorized
+
+
+### `create` create a Pod
+
+#### HTTP Request
+
+POST /api/v1/namespaces/{namespace}/pods
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
+
+202 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
+
+401: Unauthorized
+
+
+### `update` replace the specified Pod
+
+#### HTTP Request
+
+PUT /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
+
+401: Unauthorized
+
+
+### `update` replace status of the specified Pod
+
+#### HTTP Request
+
+PUT /api/v1/namespaces/{namespace}/pods/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
+
+401: Unauthorized
+
+
+### `patch` partially update the specified Pod
+
+#### HTTP Request
+
+PATCH /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `patch` partially update status of the specified Pod
+
+#### HTTP Request
+
+PATCH /api/v1/namespaces/{namespace}/pods/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `delete` delete a Pod
+
+#### HTTP Request
+
+DELETE /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+202 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
+
+401: Unauthorized
+
+
+### `deletecollection` delete collection of Pod
+
+#### HTTP Request
+
+DELETE /api/v1/namespaces/{namespace}/pods
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
+
+401: Unauthorized
+
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
index 30b40e6840..df6c08603f 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "PriorityClass defines mapping from a priority class name to the priority integer value."
 title: "PriorityClass"
-weight: 16
+weight: 14
 ---
 
 `apiVersion: scheduling.k8s.io/v1`
@@ -66,7 +66,7 @@ PriorityClassList is a collection of priority classes.
 
   Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>), required
 
   items is the list of PriorityClasses
 
@@ -108,7 +108,7 @@ GET /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
 401: Unauthorized
 
@@ -176,7 +176,7 @@ GET /apis/scheduling.k8s.io/v1/priorityclasses
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClassList" >}}">PriorityClassList</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClassList" >}}">PriorityClassList</a>): OK
 
 401: Unauthorized
 
@@ -190,7 +190,7 @@ POST /apis/scheduling.k8s.io/v1/priorityclasses
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
+- **body**: <a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
 
   
 
@@ -214,11 +214,11 @@ POST /apis/scheduling.k8s.io/v1/priorityclasses
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
+201 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Accepted
 
 401: Unauthorized
 
@@ -237,7 +237,7 @@ PUT /apis/scheduling.k8s.io/v1/priorityclasses/{name}
   name of the PriorityClass
 
 
-- **body**: <a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
+- **body**: <a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
 
   
 
@@ -261,9 +261,9 @@ PUT /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
+201 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
 
 401: Unauthorized
 
@@ -311,7 +311,7 @@ PATCH /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
index 429a1bd5a2..223832c382 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ReplicaSet ensures that a specified number of pod replicas are running at any given time."
 title: "ReplicaSet"
-weight: 6
+weight: 5
 ---
 
 `apiVersion: apps/v1`
@@ -30,11 +30,11 @@ ReplicaSet ensures that a specified number of pod replicas are running at any gi
 
   If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetSpec" >}}">ReplicaSetSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetSpec" >}}">ReplicaSetSpec</a>)
 
   Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetStatus" >}}">ReplicaSetStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetStatus" >}}">ReplicaSetStatus</a>)
 
   Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ ReplicaSetSpec is the specification of a ReplicaSet.
 
   Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -146,7 +146,7 @@ ReplicaSetList is a collection of ReplicaSets.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>), required
 
   List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller
 
@@ -193,7 +193,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -226,7 +226,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -299,7 +299,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
 
 401: Unauthorized
 
@@ -367,7 +367,7 @@ GET /apis/apps/v1/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
 
 401: Unauthorized
 
@@ -386,7 +386,7 @@ POST /apis/apps/v1/namespaces/{namespace}/replicasets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -410,11 +410,11 @@ POST /apis/apps/v1/namespaces/{namespace}/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Accepted
 
 401: Unauthorized
 
@@ -438,7 +438,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -462,9 +462,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
 401: Unauthorized
 
@@ -488,7 +488,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -512,9 +512,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
 401: Unauthorized
 
@@ -567,7 +567,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -620,7 +620,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
index 2970b6670c..29bac77169 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ReplicationController represents the configuration of a replication controller."
 title: "ReplicationController"
-weight: 5
+weight: 4
 ---
 
 `apiVersion: v1`
@@ -30,11 +30,11 @@ ReplicationController represents the configuration of a replication controller.
 
   If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerSpec" >}}">ReplicationControllerSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerSpec" >}}">ReplicationControllerSpec</a>)
 
   Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerStatus" >}}">ReplicationControllerStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerStatus" >}}">ReplicationControllerStatus</a>)
 
   Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ ReplicationControllerSpec is the specification of a replication controller.
 
   Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -146,7 +146,7 @@ ReplicationControllerList is a collection of replication controllers.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>), required
 
   List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller
 
@@ -193,7 +193,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -226,7 +226,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -299,7 +299,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
 
 401: Unauthorized
 
@@ -367,7 +367,7 @@ GET /api/v1/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
 
 401: Unauthorized
 
@@ -386,7 +386,7 @@ POST /api/v1/namespaces/{namespace}/replicationcontrollers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -410,11 +410,11 @@ POST /api/v1/namespaces/{namespace}/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Accepted
 
 401: Unauthorized
 
@@ -438,7 +438,7 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -462,9 +462,9 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
 401: Unauthorized
 
@@ -488,7 +488,7 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -512,9 +512,9 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
 401: Unauthorized
 
@@ -567,7 +567,7 @@ PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -620,7 +620,7 @@ PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
index 1a55fa4c1d..7e69ec17bb 100644
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "StatefulSet represents a set of pods with consistent identities."
 title: "StatefulSet"
-weight: 8
+weight: 7
 ---
 
 `apiVersion: apps/v1`
@@ -32,11 +32,11 @@ The StatefulSet guarantees that a given network identity will always map to the
 - **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
 
-- **spec** (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetSpec" >}}">StatefulSetSpec</a>)
+- **spec** (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetSpec" >}}">StatefulSetSpec</a>)
 
   Spec defines the desired identities of pods in this set.
 
-- **status** (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetStatus" >}}">StatefulSetStatus</a>)
+- **status** (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetStatus" >}}">StatefulSetStatus</a>)
 
   Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.
 
@@ -58,7 +58,7 @@ A StatefulSetSpec is the specification of a StatefulSet.
 
   selector is a label query over pods that should match the replica count. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.
 
@@ -84,9 +84,9 @@ A StatefulSetSpec is the specification of a StatefulSet.
     <a name="RollingUpdateStatefulSetStrategy"></a>
     *RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.*
 
-  - **updateStrategy.rollingUpdate.partition** (int32)
+    - **updateStrategy.rollingUpdate.partition** (int32)
 
-    Partition indicates the ordinal at which the StatefulSet should be partitioned. Default value is 0.
+      Partition indicates the ordinal at which the StatefulSet should be partitioned. Default value is 0.
 
 - **podManagementPolicy** (string)
 
@@ -193,7 +193,7 @@ StatefulSetList is a collection of StatefulSets.
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
 
-- **items** ([]<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>), required
+- **items** ([]<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>), required
 
 
 
@@ -239,7 +239,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -272,7 +272,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -345,7 +345,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
 
 401: Unauthorized
 
@@ -413,7 +413,7 @@ GET /apis/apps/v1/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
 
 401: Unauthorized
 
@@ -432,7 +432,7 @@ POST /apis/apps/v1/namespaces/{namespace}/statefulsets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -456,11 +456,11 @@ POST /apis/apps/v1/namespaces/{namespace}/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
-202 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Accepted
+202 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Accepted
 
 401: Unauthorized
 
@@ -484,7 +484,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -508,9 +508,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
 401: Unauthorized
 
@@ -534,7 +534,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -558,9 +558,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
 401: Unauthorized
 
@@ -613,7 +613,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -666,7 +666,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md b/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
deleted file mode 100644
index 1b5aab3fba..0000000000
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Workloads Resources"
-weight: 1
----
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/container.md b/content/en/docs/reference/kubernetes-api/workloads-resources/container.md
deleted file mode 100644
index d87cd422c8..0000000000
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/container.md
+++ /dev/null
@@ -1,774 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "Container"
-content_type: "api_reference"
-description: "A single application container that you want to run within a pod."
-title: "Container"
-weight: 2
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-## Container {#Container}
-
-A single application container that you want to run within a pod.
-
-<hr>
-
-- **name** (string), required
-
-  Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
-
-
-### Image
-
-
-- **image** (string)
-
-  Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
-- **imagePullPolicy** (string)
-
-  Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
-### Entrypoint
-
-
-- **command** ([]string)
-
-  Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **args** ([]string)
-
-  Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **workingDir** (string)
-
-  Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
-
-### Ports
-
-
-- **ports** ([]ContainerPort)
-
-  *Patch strategy: merge on key `containerPort`*
-  
-  *Map: unique values on keys `containerPort, protocol` will be kept during a merge*
-  
-  List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Cannot be updated.
-
-  <a name="ContainerPort"></a>
-  *ContainerPort represents a network port in a single container.*
-
-  - **ports.containerPort** (int32), required
-
-    Number of port to expose on the pod's IP address. This must be a valid port number, 0 \< x \< 65536.
-
-  - **ports.hostIP** (string)
-
-    What host IP to bind the external port to.
-
-  - **ports.hostPort** (int32)
-
-    Number of port to expose on the host. If specified, this must be a valid port number, 0 \< x \< 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
-  - **ports.name** (string)
-
-    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
-  - **ports.protocol** (string)
-
-    Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
-
-### Environment variables
-
-
-- **env** ([]EnvVar)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of environment variables to set in the container. Cannot be updated.
-
-  <a name="EnvVar"></a>
-  *EnvVar represents an environment variable present in a Container.*
-
-  - **env.name** (string), required
-
-    Name of the environment variable. Must be a C_IDENTIFIER.
-
-  - **env.value** (string)
-
-    Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
-
-  - **env.valueFrom** (EnvVarSource)
-
-    Source for the environment variable's value. Cannot be used if value is not empty.
-
-    <a name="EnvVarSource"></a>
-    *EnvVarSource represents a source for the value of an EnvVar.*
-
-  - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
-
-    Selects a key of a ConfigMap.
-
-    <a name="ConfigMapKeySelector"></a>
-    *Selects a key from a ConfigMap.*
-
-  - **env.valueFrom.configMapKeyRef.key** (string), required
-
-    The key to select.
-
-  - **env.valueFrom.configMapKeyRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **env.valueFrom.configMapKeyRef.optional** (boolean)
-
-    Specify whether the ConfigMap or its key must be defined
-
-  - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
-
-    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
-
-  - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
-
-    Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
-  - **env.valueFrom.secretKeyRef** (SecretKeySelector)
-
-    Selects a key of a secret in the pod's namespace
-
-    <a name="SecretKeySelector"></a>
-    *SecretKeySelector selects a key of a Secret.*
-
-  - **env.valueFrom.secretKeyRef.key** (string), required
-
-    The key of the secret to select from.  Must be a valid secret key.
-
-  - **env.valueFrom.secretKeyRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **env.valueFrom.secretKeyRef.optional** (boolean)
-
-    Specify whether the Secret or its key must be defined
-
-- **envFrom** ([]EnvFromSource)
-
-  List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
-  <a name="EnvFromSource"></a>
-  *EnvFromSource represents the source of a set of ConfigMaps*
-
-  - **envFrom.configMapRef** (ConfigMapEnvSource)
-
-    The ConfigMap to select from
-
-    <a name="ConfigMapEnvSource"></a>
-    *ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.
-    
-    The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
-
-  - **envFrom.configMapRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **envFrom.configMapRef.optional** (boolean)
-
-    Specify whether the ConfigMap must be defined
-
-  - **envFrom.prefix** (string)
-
-    An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
-
-  - **envFrom.secretRef** (SecretEnvSource)
-
-    The Secret to select from
-
-    <a name="SecretEnvSource"></a>
-    *SecretEnvSource selects a Secret to populate the environment variables with.
-    
-    The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
-
-  - **envFrom.secretRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **envFrom.secretRef.optional** (boolean)
-
-    Specify whether the Secret must be defined
-
-### Volumes
-
-
-- **volumeMounts** ([]VolumeMount)
-
-  *Patch strategy: merge on key `mountPath`*
-  
-  Pod volumes to mount into the container's filesystem. Cannot be updated.
-
-  <a name="VolumeMount"></a>
-  *VolumeMount describes a mounting of a Volume within a container.*
-
-  - **volumeMounts.mountPath** (string), required
-
-    Path within the container at which the volume should be mounted.  Must not contain ':'.
-
-  - **volumeMounts.name** (string), required
-
-    This must match the Name of a Volume.
-
-  - **volumeMounts.mountPropagation** (string)
-
-    mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-
-  - **volumeMounts.readOnly** (boolean)
-
-    Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
-  - **volumeMounts.subPath** (string)
-
-    Path within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).
-
-  - **volumeMounts.subPathExpr** (string)
-
-    Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive.
-
-- **volumeDevices** ([]VolumeDevice)
-
-  *Patch strategy: merge on key `devicePath`*
-  
-  volumeDevices is the list of block devices to be used by the container.
-
-  <a name="VolumeDevice"></a>
-  *volumeDevice describes a mapping of a raw block device within a container.*
-
-  - **volumeDevices.devicePath** (string), required
-
-    devicePath is the path inside of the container that the device will be mapped to.
-
-  - **volumeDevices.name** (string), required
-
-    name must match the name of a persistentVolumeClaim in the pod
-
-### Resources
-
-
-- **resources** (ResourceRequirements)
-
-  Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-  <a name="ResourceRequirements"></a>
-  *ResourceRequirements describes the compute resource requirements.*
-
-  - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-  - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-### Lifecycle
-
-
-- **lifecycle** (Lifecycle)
-
-  Actions that the management system should take in response to container lifecycle events. Cannot be updated.
-
-  <a name="Lifecycle"></a>
-  *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
-
-  - **lifecycle.postStart** (Handler)
-
-    PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.postStart.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.postStart.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.postStart.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **lifecycle.preStop** (Handler)
-
-    PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.preStop.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.preStop.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.preStop.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-- **terminationMessagePath** (string)
-
-  Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
-- **terminationMessagePolicy** (string)
-
-  Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
-- **livenessProbe** (Probe)
-
-  Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **livenessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **livenessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **livenessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **livenessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **livenessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **livenessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-- **readinessProbe** (Probe)
-
-  Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **readinessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **readinessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **readinessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **readinessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **readinessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **readinessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-### Security Context
-
-
-- **securityContext** (SecurityContext)
-
-  Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
-  <a name="SecurityContext"></a>
-  *SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext.  When both are set, the values in SecurityContext take precedence.*
-
-  - **securityContext.runAsUser** (int64)
-
-    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsNonRoot** (boolean)
-
-    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsGroup** (int64)
-
-    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.readOnlyRootFilesystem** (boolean)
-
-    Whether this container has a read-only root filesystem. Default is false.
-
-  - **securityContext.procMount** (string)
-
-    procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.
-
-  - **securityContext.privileged** (boolean)
-
-    Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
-
-  - **securityContext.allowPrivilegeEscalation** (boolean)
-
-    AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN
-
-  - **securityContext.capabilities** (Capabilities)
-
-    The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
-
-    <a name="Capabilities"></a>
-    *Adds and removes POSIX capabilities from running containers.*
-
-  - **securityContext.capabilities.add** ([]string)
-
-    Added capabilities
-
-  - **securityContext.capabilities.drop** ([]string)
-
-    Removed capabilities
-
-  - **securityContext.seccompProfile** (SeccompProfile)
-
-    The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options.
-
-    <a name="SeccompProfile"></a>
-    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
-
-  - **securityContext.seccompProfile.type** (string), required
-
-    type indicates which kind of seccomp profile will be applied. Valid options are:
-    
-    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-  - **securityContext.seccompProfile.localhostProfile** (string)
-
-    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
-
-  - **securityContext.seLinuxOptions** (SELinuxOptions)
-
-    The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="SELinuxOptions"></a>
-    *SELinuxOptions are the labels to be applied to the container*
-
-  - **securityContext.seLinuxOptions.level** (string)
-
-    Level is SELinux level label that applies to the container.
-
-  - **securityContext.seLinuxOptions.role** (string)
-
-    Role is a SELinux role label that applies to the container.
-
-  - **securityContext.seLinuxOptions.type** (string)
-
-    Type is a SELinux type label that applies to the container.
-
-  - **securityContext.seLinuxOptions.user** (string)
-
-    User is a SELinux user label that applies to the container.
-
-  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
-
-    The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="WindowsSecurityContextOptions"></a>
-    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
-
-  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
-
-    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
-  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
-
-    GMSACredentialSpecName is the name of the GMSA credential spec to use.
-
-  - **securityContext.windowsOptions.runAsUserName** (string)
-
-    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-### Debugging
-
-
-- **stdin** (boolean)
-
-  Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
-- **stdinOnce** (boolean)
-
-  Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
-- **tty** (boolean)
-
-  Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
-
-### Beta level
-
-
-- **startupProbe** (Probe)
-
-  StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **startupProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **startupProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **startupProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **startupProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **startupProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **startupProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-
-
-## ContainerStatus {#ContainerStatus}
-
-ContainerStatus contains details for the current status of this container.
-
-<hr>
-
-- **name** (string), required
-
-  This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
-
-- **image** (string), required
-
-  The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
-
-- **imageID** (string), required
-
-  ImageID of the container's image.
-
-- **containerID** (string)
-
-  Container's ID in the format 'docker://\<container_id>'.
-
-- **state** (ContainerState)
-
-  Details about the container's current condition.
-
-  <a name="ContainerState"></a>
-  *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-  - **state.running** (ContainerStateRunning)
-
-    Details about a running container
-
-    <a name="ContainerStateRunning"></a>
-    *ContainerStateRunning is a running state of a container.*
-
-  - **state.running.startedAt** (Time)
-
-    Time at which the container was last (re-)started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **state.terminated** (ContainerStateTerminated)
-
-    Details about a terminated container
-
-    <a name="ContainerStateTerminated"></a>
-    *ContainerStateTerminated is a terminated state of a container.*
-
-  - **state.terminated.containerID** (string)
-
-    Container's ID in the format 'docker://\<container_id>'
-
-  - **state.terminated.exitCode** (int32), required
-
-    Exit status from the last termination of the container
-
-  - **state.terminated.startedAt** (Time)
-
-    Time at which previous execution of the container started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **state.terminated.finishedAt** (Time)
-
-    Time at which the container last terminated
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **state.terminated.message** (string)
-
-    Message regarding the last termination of the container
-
-  - **state.terminated.reason** (string)
-
-    (brief) reason from the last termination of the container
-
-  - **state.terminated.signal** (int32)
-
-    Signal from the last termination of the container
-
-  - **state.waiting** (ContainerStateWaiting)
-
-    Details about a waiting container
-
-    <a name="ContainerStateWaiting"></a>
-    *ContainerStateWaiting is a waiting state of a container.*
-
-  - **state.waiting.message** (string)
-
-    Message regarding why the container is not yet running.
-
-  - **state.waiting.reason** (string)
-
-    (brief) reason the container is not yet running.
-
-- **lastState** (ContainerState)
-
-  Details about the container's last termination condition.
-
-  <a name="ContainerState"></a>
-  *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-  - **lastState.running** (ContainerStateRunning)
-
-    Details about a running container
-
-    <a name="ContainerStateRunning"></a>
-    *ContainerStateRunning is a running state of a container.*
-
-  - **lastState.running.startedAt** (Time)
-
-    Time at which the container was last (re-)started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **lastState.terminated** (ContainerStateTerminated)
-
-    Details about a terminated container
-
-    <a name="ContainerStateTerminated"></a>
-    *ContainerStateTerminated is a terminated state of a container.*
-
-  - **lastState.terminated.containerID** (string)
-
-    Container's ID in the format 'docker://\<container_id>'
-
-  - **lastState.terminated.exitCode** (int32), required
-
-    Exit status from the last termination of the container
-
-  - **lastState.terminated.startedAt** (Time)
-
-    Time at which previous execution of the container started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **lastState.terminated.finishedAt** (Time)
-
-    Time at which the container last terminated
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **lastState.terminated.message** (string)
-
-    Message regarding the last termination of the container
-
-  - **lastState.terminated.reason** (string)
-
-    (brief) reason from the last termination of the container
-
-  - **lastState.terminated.signal** (int32)
-
-    Signal from the last termination of the container
-
-  - **lastState.waiting** (ContainerStateWaiting)
-
-    Details about a waiting container
-
-    <a name="ContainerStateWaiting"></a>
-    *ContainerStateWaiting is a waiting state of a container.*
-
-  - **lastState.waiting.message** (string)
-
-    Message regarding why the container is not yet running.
-
-  - **lastState.waiting.reason** (string)
-
-    (brief) reason the container is not yet running.
-
-- **ready** (boolean), required
-
-  Specifies whether the container has passed its readiness probe.
-
-- **restartCount** (int32), required
-
-  The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
-
-- **started** (boolean)
-
-  Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
deleted file mode 100644
index c7c2ba7a81..0000000000
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
+++ /dev/null
@@ -1,746 +0,0 @@
----
-api_metadata:
-  apiVersion: "batch/v2alpha1"
-  import: "k8s.io/api/batch/v2alpha1"
-  kind: "CronJob"
-content_type: "api_reference"
-description: "CronJob represents the configuration of a single cron job."
-title: "CronJob v2alpha1"
-weight: 13
----
-
-`apiVersion: batch/v2alpha1`
-
-`import "k8s.io/api/batch/v2alpha1"`
-
-
-## CronJob {#CronJob}
-
-CronJob represents the configuration of a single cron job.
-
-<hr>
-
-- **apiVersion**: batch/v2alpha1
-
-
-- **kind**: CronJob
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **spec** (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobSpec" >}}">CronJobSpec</a>)
-
-  Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **status** (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobStatus" >}}">CronJobStatus</a>)
-
-  Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-
-
-
-
-## CronJobSpec {#CronJobSpec}
-
-CronJobSpec describes how the job execution will look like and when it will actually run.
-
-<hr>
-
-- **jobTemplate** (JobTemplateSpec), required
-
-  Specifies the job that will be created when executing a CronJob.
-
-  <a name="JobTemplateSpec"></a>
-  *JobTemplateSpec describes the data a Job should have when created from a template*
-
-  - **jobTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-    Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-  - **jobTemplate.spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
-
-    Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **schedule** (string), required
-
-  The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.
-
-- **concurrencyPolicy** (string)
-
-  Specifies how to treat concurrent executions of a Job. Valid values are: - "Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - "Replace": cancels currently running job and replaces it with a new one
-
-- **failedJobsHistoryLimit** (int32)
-
-  The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
-
-- **startingDeadlineSeconds** (int64)
-
-  Optional deadline in seconds for starting the job if it misses scheduled time for any reason.  Missed jobs executions will be counted as failed ones.
-
-- **successfulJobsHistoryLimit** (int32)
-
-  The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
-
-- **suspend** (boolean)
-
-  This flag tells the controller to suspend subsequent executions, it does not apply to already started executions.  Defaults to false.
-
-
-
-
-
-## CronJobStatus {#CronJobStatus}
-
-CronJobStatus represents the current state of a cron job.
-
-<hr>
-
-- **active** ([]<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
-
-  A list of pointers to currently running jobs.
-
-- **lastScheduleTime** (Time)
-
-  Information when was the last time the job was successfully scheduled.
-
-  <a name="Time"></a>
-  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-
-
-
-
-## CronJobList {#CronJobList}
-
-CronJobList is a collection of cron jobs.
-
-<hr>
-
-- **apiVersion**: batch/v2alpha1
-
-
-- **kind**: CronJobList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **items** ([]<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>), required
-
-  items is the list of CronJobs.
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `get` read status of the specified CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/cronjobs
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create a CronJob
-
-#### HTTP Request
-
-POST /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
-
-202 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified CronJob
-
-#### HTTP Request
-
-PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
-
-401: Unauthorized
-
-
-### `update` replace status of the specified CronJob
-
-#### HTTP Request
-
-PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified CronJob
-
-#### HTTP Request
-
-PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `patch` partially update status of the specified CronJob
-
-#### HTTP Request
-
-PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete a CronJob
-
-#### HTTP Request
-
-DELETE /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of CronJob
-
-#### HTTP Request
-
-DELETE /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md
deleted file mode 100644
index 584c338172..0000000000
--- a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md
+++ /dev/null
@@ -1,1270 +0,0 @@
----
-api_metadata:
-  apiVersion: "v1"
-  import: "k8s.io/api/core/v1"
-  kind: "Pod"
-content_type: "api_reference"
-description: "Pod is a collection of containers that can run on a host."
-title: "Pod"
-weight: 1
----
-
-`apiVersion: v1`
-
-`import "k8s.io/api/core/v1"`
-
-
-## Pod {#Pod}
-
-Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.
-
-<hr>
-
-- **apiVersion**: v1
-
-
-- **kind**: Pod
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **spec** (<a href="{{< ref "../workloads-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
-
-  Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **status** (<a href="{{< ref "../workloads-resources/pod-v1#PodStatus" >}}">PodStatus</a>)
-
-  Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-
-
-
-
-## PodSpec {#PodSpec}
-
-PodSpec is a description of a pod.
-
-<hr>
-
-
-
-### Containers
-
-
-- **containers** ([]<a href="{{< ref "../workloads-resources/container#Container" >}}">Container</a>), required
-
-  *Patch strategy: merge on key `name`*
-  
-  List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.
-
-- **initContainers** ([]<a href="{{< ref "../workloads-resources/container#Container" >}}">Container</a>)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
-
-- **imagePullSecrets** ([]<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
-
-  *Patch strategy: merge on key `name`*
-  
-  ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
-
-- **enableServiceLinks** (boolean)
-
-  EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.
-
-### Volumes
-
-
-- **volumes** ([]<a href="{{< ref "../config-and-storage-resources/volume#Volume" >}}">Volume</a>)
-
-  *Patch strategies: retainKeys, merge on key `name`*
-  
-  List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes
-
-### Scheduling
-
-
-- **nodeSelector** (map[string]string)
-
-  NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
-
-- **nodeName** (string)
-
-  NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.
-
-- **affinity** (Affinity)
-
-  If specified, the pod's scheduling constraints
-
-  <a name="Affinity"></a>
-  *Affinity is a group of affinity scheduling rules.*
-
-  - **affinity.nodeAffinity** (<a href="{{< ref "../common-definitions/node-affinity#NodeAffinity" >}}">NodeAffinity</a>)
-
-    Describes node affinity scheduling rules for the pod.
-
-  - **affinity.podAffinity** (<a href="{{< ref "../common-definitions/pod-affinity#PodAffinity" >}}">PodAffinity</a>)
-
-    Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
-
-  - **affinity.podAntiAffinity** (<a href="{{< ref "../common-definitions/pod-anti-affinity#PodAntiAffinity" >}}">PodAntiAffinity</a>)
-
-    Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
-
-- **tolerations** ([]Toleration)
-
-  If specified, the pod's tolerations.
-
-  <a name="Toleration"></a>
-  *The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.*
-
-  - **tolerations.key** (string)
-
-    Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
-
-  - **tolerations.operator** (string)
-
-    Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
-
-  - **tolerations.value** (string)
-
-    Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
-
-  - **tolerations.effect** (string)
-
-    Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
-
-  - **tolerations.tolerationSeconds** (int64)
-
-    TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
-
-- **schedulerName** (string)
-
-  If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
-
-- **runtimeClassName** (string)
-
-  RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.
-
-- **priorityClassName** (string)
-
-  If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
-
-- **priority** (int32)
-
-  The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.
-
-### Lifecycle
-
-
-- **restartPolicy** (string)
-
-  Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
-
-- **terminationGracePeriodSeconds** (int64)
-
-  Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.
-
-- **activeDeadlineSeconds** (int64)
-
-  Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.
-
-- **readinessGates** ([]PodReadinessGate)
-
-  If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md
-
-  <a name="PodReadinessGate"></a>
-  *PodReadinessGate contains the reference to a pod condition*
-
-  - **readinessGates.conditionType** (string), required
-
-    ConditionType refers to a condition in the pod's condition list with matching type.
-
-### Hostname and Name resolution
-
-
-- **hostname** (string)
-
-  Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.
-
-- **setHostnameAsFQDN** (boolean)
-
-  If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.
-
-- **subdomain** (string)
-
-  If specified, the fully qualified Pod hostname will be "\<hostname>.\<subdomain>.\<pod namespace>.svc.\<cluster domain>". If not specified, the pod will not have a domainname at all.
-
-- **hostAliases** ([]HostAlias)
-
-  *Patch strategy: merge on key `ip`*
-  
-  HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified. This is only valid for non-hostNetwork pods.
-
-  <a name="HostAlias"></a>
-  *HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.*
-
-  - **hostAliases.hostnames** ([]string)
-
-    Hostnames for the above IP address.
-
-  - **hostAliases.ip** (string)
-
-    IP address of the host file entry.
-
-- **dnsConfig** (PodDNSConfig)
-
-  Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
-
-  <a name="PodDNSConfig"></a>
-  *PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.*
-
-  - **dnsConfig.nameservers** ([]string)
-
-    A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.
-
-  - **dnsConfig.options** ([]PodDNSConfigOption)
-
-    A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.
-
-    <a name="PodDNSConfigOption"></a>
-    *PodDNSConfigOption defines DNS resolver options of a pod.*
-
-  - **dnsConfig.options.name** (string)
-
-    Required.
-
-  - **dnsConfig.options.value** (string)
-
-
-  - **dnsConfig.searches** ([]string)
-
-    A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.
-
-- **dnsPolicy** (string)
-
-  Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
-
-### Hosts namespaces
-
-
-- **hostNetwork** (boolean)
-
-  Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.
-
-- **hostPID** (boolean)
-
-  Use the host's pid namespace. Optional: Default to false.
-
-- **hostIPC** (boolean)
-
-  Use the host's ipc namespace. Optional: Default to false.
-
-- **shareProcessNamespace** (boolean)
-
-  Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.
-
-### Service account
-
-
-- **serviceAccountName** (string)
-
-  ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
-
-- **automountServiceAccountToken** (boolean)
-
-  AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.
-
-### Security context
-
-
-- **securityContext** (PodSecurityContext)
-
-  SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty.  See type description for default values of each field.
-
-  <a name="PodSecurityContext"></a>
-  *PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext.  Field values of container.securityContext take precedence over field values of PodSecurityContext.*
-
-  - **securityContext.runAsUser** (int64)
-
-    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
-
-  - **securityContext.runAsNonRoot** (boolean)
-
-    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsGroup** (int64)
-
-    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
-
-  - **securityContext.supplementalGroups** ([]int64)
-
-    A list of groups applied to the first process run in each container, in addition to the container's primary GID.  If unspecified, no groups will be added to any container.
-
-  - **securityContext.fsGroup** (int64)
-
-    A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:
-    
-    1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----
-    
-    If unset, the Kubelet will not modify the ownership and permissions of any volume.
-
-  - **securityContext.fsGroupChangePolicy** (string)
-
-    fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
-
-  - **securityContext.seccompProfile** (SeccompProfile)
-
-    The seccomp options to use by the containers in this pod.
-
-    <a name="SeccompProfile"></a>
-    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
-
-  - **securityContext.seccompProfile.type** (string), required
-
-    type indicates which kind of seccomp profile will be applied. Valid options are:
-    
-    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-  - **securityContext.seccompProfile.localhostProfile** (string)
-
-    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
-
-  - **securityContext.seLinuxOptions** (SELinuxOptions)
-
-    The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
-
-    <a name="SELinuxOptions"></a>
-    *SELinuxOptions are the labels to be applied to the container*
-
-  - **securityContext.seLinuxOptions.level** (string)
-
-    Level is SELinux level label that applies to the container.
-
-  - **securityContext.seLinuxOptions.role** (string)
-
-    Role is a SELinux role label that applies to the container.
-
-  - **securityContext.seLinuxOptions.type** (string)
-
-    Type is a SELinux type label that applies to the container.
-
-  - **securityContext.seLinuxOptions.user** (string)
-
-    User is a SELinux user label that applies to the container.
-
-  - **securityContext.sysctls** ([]Sysctl)
-
-    Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.
-
-    <a name="Sysctl"></a>
-    *Sysctl defines a kernel parameter to be set*
-
-  - **securityContext.sysctls.name** (string), required
-
-    Name of a property to set
-
-  - **securityContext.sysctls.value** (string), required
-
-    Value of a property to set
-
-  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
-
-    The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="WindowsSecurityContextOptions"></a>
-    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
-
-  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
-
-    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
-  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
-
-    GMSACredentialSpecName is the name of the GMSA credential spec to use.
-
-  - **securityContext.windowsOptions.runAsUserName** (string)
-
-    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-### Beta level
-
-
-- **overhead** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-  Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.
-
-- **topologySpreadConstraints** ([]TopologySpreadConstraint)
-
-  *Patch strategy: merge on key `topologyKey`*
-  
-  *Map: unique values on keys `topologyKey, whenUnsatisfiable` will be kept during a merge*
-  
-  TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.
-
-  <a name="TopologySpreadConstraint"></a>
-  *TopologySpreadConstraint specifies how to spread matching pods among the given topology.*
-
-  - **topologySpreadConstraints.maxSkew** (int32), required
-
-    MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 | zone3 | |   P   |   P   |       | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.
-
-  - **topologySpreadConstraints.topologyKey** (string), required
-
-    TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each \<key, value> as a "bucket", and try to put balanced number of pods into each bucket. It's a required field.
-
-  - **topologySpreadConstraints.whenUnsatisfiable** (string), required
-
-    WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,
-      but giving higher precedence to topologies that would help reduce the
-      skew.
-    A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assigment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P |   P   |   P   | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.
-
-  - **topologySpreadConstraints.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.
-
-### Alpha level
-
-
-- **ephemeralContainers** ([]<a href="{{< ref "../workloads-resources/ephemeral-container#EphemeralContainer" >}}">EphemeralContainer</a>)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. This field is alpha-level and is only honored by servers that enable the EphemeralContainers feature.
-
-- **preemptionPolicy** (string)
-
-  PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
-
-### Deprecated
-
-
-- **serviceAccount** (string)
-
-  DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.
-
-
-
-## PodStatus {#PodStatus}
-
-PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.
-
-<hr>
-
-- **nominatedNodeName** (string)
-
-  nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.
-
-- **hostIP** (string)
-
-  IP address of the host to which the pod is assigned. Empty if not yet scheduled.
-
-- **startTime** (Time)
-
-  RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.
-
-  <a name="Time"></a>
-  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-- **phase** (string)
-
-  The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values:
-  
-  Pending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.
-  
-  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase
-
-- **message** (string)
-
-  A human readable message indicating details about why the pod is in this condition.
-
-- **reason** (string)
-
-  A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'
-
-- **podIP** (string)
-
-  IP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.
-
-- **podIPs** ([]PodIP)
-
-  *Patch strategy: merge on key `ip`*
-  
-  podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.
-
-  <a name="PodIP"></a>
-  *IP address information for entries in the (plural) PodIPs field. Each entry includes:
-     IP: An IP address allocated to the pod. Routable at least within the cluster.*
-
-  - **podIPs.ip** (string)
-
-    ip is an IP address (IPv4 or IPv6) assigned to the pod
-
-- **conditions** ([]PodCondition)
-
-  *Patch strategy: merge on key `type`*
-  
-  Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
-
-  <a name="PodCondition"></a>
-  *PodCondition contains details for the current condition of this pod.*
-
-  - **conditions.status** (string), required
-
-    Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
-
-  - **conditions.type** (string), required
-
-    Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
-
-  - **conditions.lastProbeTime** (Time)
-
-    Last time we probed the condition.
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **conditions.lastTransitionTime** (Time)
-
-    Last time the condition transitioned from one status to another.
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **conditions.message** (string)
-
-    Human-readable message indicating details about last transition.
-
-  - **conditions.reason** (string)
-
-    Unique, one-word, CamelCase reason for the condition's last transition.
-
-- **qosClass** (string)
-
-  The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md
-
-- **initContainerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
-
-  The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
-
-- **containerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
-
-  The list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
-
-- **ephemeralContainerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
-
-  Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.
-
-
-
-
-
-## PodList {#PodList}
-
-PodList is a list of Pods.
-
-<hr>
-
-- **apiVersion**: v1
-
-
-- **kind**: PodList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
-- **items** ([]<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>), required
-
-  List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `get` read log of the specified Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods/{name}/log
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **container** (*in query*): string
-
-  The container for which to stream logs. Defaults to only container if there is one container in the pod.
-
-
-- **follow** (*in query*): boolean
-
-  Follow the log stream of the pod. Defaults to false.
-
-
-- **insecureSkipTLSVerifyBackend** (*in query*): boolean
-
-  insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to.  This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet.  If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).
-
-
-- **limitBytes** (*in query*): integer
-
-  If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **previous** (*in query*): boolean
-
-  Return previous terminated container logs. Defaults to false.
-
-
-- **sinceSeconds** (*in query*): integer
-
-  A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.
-
-
-- **tailLines** (*in query*): integer
-
-  If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime
-
-
-- **timestamps** (*in query*): boolean
-
-  If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.
-
-
-
-#### Response
-
-
-200 (string): OK
-
-401: Unauthorized
-
-
-### `get` read status of the specified Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#PodList" >}}">PodList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind Pod
-
-#### HTTP Request
-
-GET /api/v1/pods
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#PodList" >}}">PodList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create a Pod
-
-#### HTTP Request
-
-POST /api/v1/namespaces/{namespace}/pods
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
-
-202 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified Pod
-
-#### HTTP Request
-
-PUT /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
-
-401: Unauthorized
-
-
-### `update` replace status of the specified Pod
-
-#### HTTP Request
-
-PUT /api/v1/namespaces/{namespace}/pods/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified Pod
-
-#### HTTP Request
-
-PATCH /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `patch` partially update status of the specified Pod
-
-#### HTTP Request
-
-PATCH /api/v1/namespaces/{namespace}/pods/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete a Pod
-
-#### HTTP Request
-
-DELETE /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-202 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of Pod
-
-#### HTTP Request
-
-DELETE /api/v1/namespaces/{namespace}/pods
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-

From a68cd7345ff193d99893560a64871834450d67ac Mon Sep 17 00:00:00 2001
From: Soichiro KAWAMURA <mail@w-st.com>
Date: Fri, 2 Apr 2021 20:20:49 +0900
Subject: [PATCH 446/788] fix anchor in URLs

---
 .../ja/docs/concepts/configuration/pod-priority-preemption.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/concepts/configuration/pod-priority-preemption.md b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
index b83d1c6867..5aa3cf42ca 100644
--- a/content/ja/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
@@ -110,7 +110,7 @@ globalDefault: false
 description: "この優先度クラスは他のPodをプリエンプトさせません。"
 ```
 
-## Podの優先度
+## Podの優先度 {#pod-priority}
 
 一つ以上のPriorityClassがあれば、仕様にPriorityClassを指定したPodを作成することができるようになります。優先度のアドミッションコントローラーは`priorityClassName`フィールドを使用し、優先度の整数値を設定します。PriorityClassが見つからない場合、そのPodの作成は拒否されます。
 
@@ -237,4 +237,4 @@ kubeletによるリソース不足時のPodの追い出しでは、リソース
 
 ## {{% heading "whatsnext" %}}
 
-* PriorityClassと関連付けてResourceQuotaを使用することに関して [デフォルトで優先度クラスの消費を制限する](/ja/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+* PriorityClassと関連付けてResourceQuotaを使用することに関して [デフォルトで優先度クラスの消費を制限する](/ja/docs/concepts/policy/resource-quotas/#デフォルトで優先度クラスの消費を制限する)

From ae317a06fb499702dce26cd2f75d89409b05f365 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Fri, 2 Apr 2021 21:28:30 +0800
Subject: [PATCH 447/788] [zh] translate reference/Well-Known Labels,
 Annotations and Taints

---
 .../labels-annotations-taints.md              | 263 -----------
 .../reference/labels-annotations-taints.md    | 423 ++++++++++++++++++
 2 files changed, 423 insertions(+), 263 deletions(-)
 delete mode 100644 content/zh/docs/reference/kubernetes-api/labels-annotations-taints.md
 create mode 100644 content/zh/docs/reference/labels-annotations-taints.md

diff --git a/content/zh/docs/reference/kubernetes-api/labels-annotations-taints.md b/content/zh/docs/reference/kubernetes-api/labels-annotations-taints.md
deleted file mode 100644
index 44258be00a..0000000000
--- a/content/zh/docs/reference/kubernetes-api/labels-annotations-taints.md
+++ /dev/null
@@ -1,263 +0,0 @@
----
-title: 知名标签（Label）、注解（Annotation）和 污点（Taint）
-content_type: concept
-weight: 60
----
-
-<!-- overview -->
-
-<!--
-Kubernetes reserves all labels and annotations in the kubernetes.io namespace.
-
-This document serves both as a reference to the values and as a coordination point for assigning values.
--->
-
-Kubernetes 保留了 kubernetes.io 命名空间下的所有标签和注解。
-
-本文档提供这些标签、注解和污点的参考，也可用来协调对这类标签、注解和污点的设置。
-
-
-
-<!-- body -->
-
-## kubernetes.io/arch
-
-<!--
-Example: `kubernetes.io/arch=amd64`
-
-Used on: Node
-
-The Kubelet populates this with `runtime.GOARCH` as defined by Go. This can be handy if you are mixing arm and x86 nodes.
--->
-
-示例：`kubernetes.io/arch=amd64`
-
-用于：Node
-
-Kubelet 用 Go 中定义的 `runtime.GOARCH` 值来填充该标签。这在诸如混用 arm 和 x86 节点的情况下很有用。
-
-## kubernetes.io/os
-
-<!--
-Example: `kubernetes.io/os=linux`
-
-Used on: Node
-
-The Kubelet populates this with `runtime.GOOS` as defined by Go. This can be handy if you are mixing operating systems in your cluster (for example: mixing Linux and Windows nodes).
--->
-
-示例：`kubernetes.io/os=linux`
-
-用于：Node
-
-Kubelet 用该 Go 中定义的 `runtime.GOOS` 值来填充该标签。这在集群中存在不同操作系统的节点时很有用（例如：混合 Linux 和 Windows 操作系统的节点）。
-
-<!--
-## beta.kubernetes.io/arch (deprecated)
--->
-## beta.kubernetes.io/arch (已弃用)
-
-<!--
-This label has been deprecated. Please use `kubernetes.io/arch` instead.
--->
-该标签已被弃用。请使用  `kubernetes.io/arch`。
-
-<!--
-## beta.kubernetes.io/os (deprecated)
--->
-## beta.kubernetes.io/os (已弃用)
-
-<!--
-This label has been deprecated. Please use `kubernetes.io/os` instead.
--->
-该标签已被弃用。请使用 `kubernetes.io/os`。
-
-## kubernetes.io/hostname
-
-<!--
-Example: `kubernetes.io/hostname=ip-172-20-114-199.ec2.internal`
-
-Used on: Node
-
-The Kubelet populates this label with the hostname. Note that the hostname can be changed from the "actual" hostname by passing the `--hostname-override` flag to the `kubelet`.
--->
-
-示例：`kubernetes.io/hostname=ip-172-20-114-199.ec2.internal`
-
-用于：Node
-
-Kubelet 用 hostname 值来填充该标签。注意：可以通过向 `kubelet` 传入 `--hostname-override`
-参数对 “真正的” hostname 进行修改。
-
-<!--
-This label is also used as part of the topology hierarchy.  See [topology.kubernetes.io/zone](#topologykubernetesiozone) for more information.
--->
-此标签还用作拓扑层次结构的一部分。有关更多信息，请参见 [topology.kubernetes.io/zone](#topologykubernetesiozone)。
-
-<!--
-## beta.kubernetes.io/instance-type (deprecated)
--->
-## beta.kubernetes.io/instance-type (已弃用)
-
-{{< note >}} 
-<!--
-Starting in v1.17, this label is deprecated in favor of [node.kubernetes.io/instance-type](#nodekubernetesioinstance-type).
--->
-从 kubernetes 1.17 版本开始，不推荐使用此标签，而推荐使用 [node.kubernetes.io/instance-type](#nodekubernetesioinstance-type)。
-{{< /note >}}
-
-## node.kubernetes.io/instance-type {#nodekubernetesioinstance-type}
-
-<!--
-Example: `node.kubernetes.io/instance-type=m3.medium`
-
-Used on: Node
-
-The Kubelet populates this with the instance type as defined by the `cloudprovider`.
-This will be set only if you are using a `cloudprovider`. This setting is handy
-if you want to target certain workloads to certain instance types, but typically you want
-to rely on the Kubernetes scheduler to perform resource-based scheduling. You should aim to schedule based on properties rather than on instance types (for example: require a GPU, instead of requiring a `g2.2xlarge`).
--->
-
-示例：`node.kubernetes.io/instance-type=m3.medium`
-
-用于：Node
-
-Kubelet 用 `cloudprovider` 中定义的实例类型来填充该标签。未使用 `cloudprovider` 时不会设置该标签。
-该标签在想要将某些负载定向到特定实例类型的节点上时会很有用，但通常用户更希望依赖 Kubernetes 调度器来执行基于资源的调度，
-所以用户应该致力于基于属性而不是实例类型来进行调度（例如：需要一个 GPU，而不是 `g2.2xlarge`）。
-
-## failure-domain.beta.kubernetes.io/region (已弃用) {#failure-domainbetakubernetesioregion}
-
-<!--
-See [topology.kubernetes.io/region](#topologykubernetesioregion).
--->
-参考 [topology.kubernetes.io/region](#topologykubernetesioregion)。
-
-{{< note >}}
-<!--
-Starting in v1.17, this label is deprecated in favor of [topology.kubernetes.io/region](#topologykubernetesioregion).
--->
-从 kubernetes 1.17 版本开始，不推荐使用此标签，而推荐使用 [topology.kubernetes.io/region](#topologykubernetesioregion)。
-{{< /note >}}
-
-## failure-domain.beta.kubernetes.io/zone (已弃用) {#failure-domainbetakubernetesiozone}
-
-<!--
-See [topology.kubernetes.io/zone](#topologykubernetesiozone).
--->
-参考 [topology.kubernetes.io/zone](#topologykubernetesiozone)。
-
-{{< note >}}
-<!--
-Starting in v1.17, this label is deprecated in favor of [topology.kubernetes.io/zone](#topologykubernetesiozone).
--->
-从 kubernetes 1.17 版本开始，不推荐使用此标签，而推荐使用 [topology.kubernetes.io/zone](#topologykubernetesiozone)。
-{{< /note >}}
-
-## topology.kubernetes.io/region {#topologykubernetesioregion}
-<!--
-Example:
-
-`topology.kubernetes.io/region=us-east-1`
--->
-示例：
-
-`topology.kubernetes.io/region=us-east-1`
-
-<!--
-See [topology.kubernetes.io/zone](#topologykubernetesiozone).
--->
-参考 [topology.kubernetes.io/zone](#topologykubernetesiozone)。
-
-## topology.kubernetes.io/zone {#topologykubernetesiozone}
-
-<!--
-Example:
-
-`topology.kubernetes.io/zone=us-east-1c`
-
-On Node: The `kubelet` or the external `cloud-controller-manager` populates this with the information as provided by the `cloudprovider`.  This will be set only if you are using a `cloudprovider`. However, you should consider setting this on nodes if it makes sense in your topology.
--->
-示例：
-
-`topology.kubernetes.io/zone=us-east-1c`
-
-用于：Node、PersistentVolume
-
-对于 Node： `Kubelet` 或外部 `cloud-controller-manager` 用 `cloudprovider` 中定义的区域信息来填充该标签。
-未使用 `cloudprovider` 时不会设置该标签，但如果该标签在你的拓扑中有意义的话，应该考虑设置。
-
-<!--
-On PersistentVolume: topology-aware volume provisioners will automatically set node affinity constraints on `PersistentVolumes`.
--->
-对于 PersistentVolume：可感知拓扑的卷制备程序将自动在 `PersistentVolumes` 上设置节点亲和性约束。
-
-<!--
-A zone represents a logical failure domain.  It is common for Kubernetes clusters to span multiple zones for increased availability.  While the exact definition of a zone is left to infrastructure implementations, common properties of a zone include very low network latency within a zone, no-cost network traffic within a zone, and failure independence from other zones.  For example, nodes within a zone might share a network switch, but nodes in different zones should not.
--->
-区域代表逻辑故障域。Kubernetes 集群通常跨越多个区域以提高可用性。
-虽然区域的确切定义留给基础架构实现，但是区域的常见属性包括区域内的网络延迟非常低，区域内的免费网络流量以及与其他区域的故障独立性。
-例如，一个区域内的节点可能共享一个网络交换机，但不同区域内的节点则不应共享。
-
-<!--
-A region represents a larger domain, made up of one or more zones.  It is uncommon for Kubernetes clusters to span multiple regions,  While the exact definition of a zone or region is left to infrastructure implementations, common properties of a region include higher network latency between them than within them, non-zero cost for network traffic between them, and failure independence from other zones or regions.  For example, nodes within a region might share power infrastructure (e.g. a UPS or generator), but nodes in different regions typically would not.
--->
-地区代表一个更大的域，由一个或多个区域组成。
-Kubernetes 集群跨越多个地域是不常见的，而地域或区域的确切定义则留给基础设施实现，
-地域的共同属性包括它们之间的网络延迟比它们内部更高，它们之间的网络流量成本不为零，故障独立于其他区域或域。
-例如，一个地域内的节点可能共享电力基础设施（例如 UPS 或发电机），但不同地域的节点通常不会共享。
-
-<!--
-Kubernetes makes a few assumptions about the structure of zones and regions:
-1) regions and zones are hierarchical: zones are strict subsets of regions and no zone can be in 2 regions
-2) zone names are unique across regions; for example region "africa-east-1" might be comprised of zones "africa-east-1a" and "africa-east-1b"
--->
-Kubernetes 对区域和区域的结构做了一些假设:
-1) 地域和区域是分层的:区域是地域的严格子集，任何区域都不能位于两个地域中。
-2) 区域名称在地域之间是唯一的；例如，地域 “africa-east-1” 可能包含区域 “africa-east-1a” 和 “africa-east-1b”。
-
-<!--
-It should be safe to assume that topology labels do not change. 
-Even though labels are strictly mutable,
- consumers of them can assume that a given node is not going to be moved between zones without being destroyed and recreated.
--->
-标签的使用者可以安全地假设拓扑标签不变。
-即使标签是严格可变的，标签的使用者也可以认为节点只能通过被销毁并重建才能从一个区域迁移到另一个区域。
-
-<!--
-Kubernetes can use this information in various ways.
-For example,
-the scheduler automatically tries to spread the Pods in a ReplicaSet across nodes in a single-zone cluster (to reduce the impact of node failures,
-see [kubernetes.io/hostname](#kubernetesiohostname)). With multiple-zone clusters, this spreading behavior also applies to zones (to reduce the impact of zone failures).
-This is achieved via _SelectorSpreadPriority_.
--->
-Kubernetes 可以以各种方式使用这些信息。
-例如，调度器自动尝试将 ReplicaSet 中的多个 Pods 分布到单区域集群中的多个节点上（为了减少节点故障的影响，
-请参阅 [kubernetesiohostname](#kubernetesiohostname)）。
-对于多区域集群，这种分布行为也被应用到区域上（以减少区域故障的影响）。
-这是通过 _SelectorSpreadPriority_ 实现的。
-
-<!--
-_SelectorSpreadPriority_ is a best effort placement.
- If the zones in your cluster are heterogeneous (for example: different numbers of nodes, different types of nodes, or different pod resource requirements),
- this placement might prevent equal spreading of your Pods across zones.
- If desired, you can use homogenous zones (same number and types of nodes) to reduce the probability of unequal spreading.
--->
-_SelectorSpreadPriority_ 是一种尽力而为（best-effort）的处理方式，如果集群中的区域是异构的 
-(例如：不同区域之间的节点数量、节点类型或 Pod 资源需求不同），可能使得 Pod 在各区域间无法均匀分布。
-如有需要，用户可以使用同质的区域(节点数量和类型相同) 来减小 Pod 分布不均的可能性。
-
-<!--
-The scheduler (through the _VolumeZonePredicate_ predicate) also will ensure that Pods, that claim a given volume, are only placed into the same zone as that volume. Volumes cannot be attached across zones.
--->
-由于卷不能跨区域挂载（Attach），调度器（通过 _VolumeZonePredicate_ 预选）也会保证需要特定卷的 Pod 被调度到卷所在的区域中。
-
-<!--
-If `PersistentVolumeLabel` does not support automatic labeling of your PersistentVolumes, you should consider
-adding the labels manually (or adding support for `PersistentVolumeLabel`). With `PersistentVolumeLabel`,
-the scheduler prevents Pods from mounting volumes in a different zone.
-If your infrastructure doesn't have this constraint, you don't need to add the zone labels to the volumes at all.
--->
-如果 `PersistentVolumeLabel` 准入控制器不支持自动为 PersistentVolume 打标签，且用户希望防止 pod 跨区域进行卷的挂载，
-应考虑手动打标签 (或增加对 `PersistentVolumeLabel` 的支持）。如果用户的基础设施没有这种约束，则不需要为卷添加区域标签。
diff --git a/content/zh/docs/reference/labels-annotations-taints.md b/content/zh/docs/reference/labels-annotations-taints.md
new file mode 100644
index 0000000000..1c163cc056
--- /dev/null
+++ b/content/zh/docs/reference/labels-annotations-taints.md
@@ -0,0 +1,423 @@
+---
+title: 常见的标签、注解和污点
+content_type: concept
+weight: 20
+---
+<!-- 
+---
+title: Well-Known Labels, Annotations and Taints
+content_type: concept
+weight: 20
+---
+-->
+
+<!-- overview -->
+
+<!-- 
+Kubernetes reserves all labels and annotations in the kubernetes.io namespace.
+
+This document serves both as a reference to the values and as a coordination point for assigning values.
+-->
+Kubernetes 预留命名空间 kubernetes.io 用于所有的标签和注解。
+
+本文档有两个作用，一是作为可用值的参考，二是作为赋值的协调点。
+
+<!-- body -->
+
+## kubernetes.io/arch
+
+示例：`kubernetes.io/arch=amd64`
+
+用于：Node
+
+<!-- 
+The Kubelet populates this with `runtime.GOARCH` as defined by Go. This can be handy if you are mixing arm and x86 nodes.
+-->
+Kubelet 用 Go 定义的 `runtime.GOARCH` 生成该标签的键值。在混合使用 arm 和 x86 节点的场景中，此键值可以带来极大便利。
+
+## kubernetes.io/os
+
+示例：`kubernetes.io/os=linux`
+
+用于：Node
+
+<!-- 
+The Kubelet populates this with `runtime.GOOS` as defined by Go. This can be handy if you are mixing operating systems in your cluster (for example: mixing Linux and Windows nodes).
+-->
+Kubelet 用 Go 定义的 `runtime.GOOS` 生成该标签的键值。在混合使用异构操作系统场景下（例如：混合使用 Linux 和 Windows 节点），此键值可以带来极大便利。
+
+## beta.kubernetes.io/arch (deprecated)
+
+<!-- 
+This label has been deprecated. Please use `kubernetes.io/arch` instead.
+-->
+此标签已被弃用，取而代之的是 `kubernetes.io/arch`.
+
+## beta.kubernetes.io/os (deprecated)
+
+<!-- 
+This label has been deprecated. Please use `kubernetes.io/os` instead.
+-->
+此标签已被弃用，取而代之的是 `kubernetes.io/os`.
+
+## kubernetes.io/hostname {#kubernetesiohostname}
+
+示例：`kubernetes.io/hostname=ip-172-20-114-199.ec2.internal`
+
+用于：Node
+
+<!-- 
+The Kubelet populates this label with the hostname. Note that the hostname can be changed from the "actual" hostname by passing the `--hostname-override` flag to the `kubelet`.
+
+This label is also used as part of the topology hierarchy.  See [topology.kubernetes.io/zone](#topologykubernetesiozone) for more information.
+-->
+Kubelet 用主机名生成此标签。需要注意的是主机名可修改，这是把“实际的”主机名通过参数 `--hostname-override` 传给 `kubelet` 实现的。
+
+此标签也可用做拓扑层次的一个部分。更多信息参见[topology.kubernetes.io/zone](#topologykubernetesiozone)。
+
+## beta.kubernetes.io/instance-type (deprecated)
+
+{{< note >}} 
+<!-- 
+Starting in v1.17, this label is deprecated in favor of [node.kubernetes.io/instance-type](#nodekubernetesioinstance-type).
+-->
+从 v1.17 起，此标签被弃用，取而代之的是 [node.kubernetes.io/instance-type](#nodekubernetesioinstance-type). 
+{{< /note >}}
+
+
+## node.kubernetes.io/instance-type {#nodekubernetesioinstance-type}
+
+示例：`node.kubernetes.io/instance-type=m3.medium`
+
+用于：Node
+
+<!-- 
+The Kubelet populates this with the instance type as defined by the `cloudprovider`.
+This will be set only if you are using a `cloudprovider`. This setting is handy
+if you want to target certain workloads to certain instance types, but typically you want
+to rely on the Kubernetes scheduler to perform resource-based scheduling. You should aim to schedule based on properties rather than on instance types (for example: require a GPU, instead of requiring a `g2.2xlarge`).
+-->
+Kubelet 用 `cloudprovider` 定义的实例类型生成此标签。
+所以只有用到 `cloudprovider` 的场合，才会设置此标签。
+此标签非常有用，特别是在你希望把特定工作负载打到特定实例类型的时候，但更常见的调度方法是基于 Kubernetes 调度器来执行基于资源的调度。
+你应该聚焦于使用基于属性的调度方式，而尽量不要依赖实例类型（例如：应该申请一个 GPU，而不是 `g2.2xlarge`）。
+
+## failure-domain.beta.kubernetes.io/region (deprecated) {#failure-domainbetakubernetesioregion}
+
+参见 [topology.kubernetes.io/region](#topologykubernetesioregion).
+
+{{< note >}} 
+<!-- 
+Starting in v1.17, this label is deprecated in favor of [topology.kubernetes.io/region](#topologykubernetesioregion). 
+-->
+从 v1.17 开始，此标签被弃用，取而代之的是 [topology.kubernetes.io/region](#topologykubernetesioregion). 
+{{< /note >}}
+
+## failure-domain.beta.kubernetes.io/zone (deprecated) {#failure-domainbetakubernetesiozone}
+
+参见 [topology.kubernetes.io/zone](#topologykubernetesiozone).
+
+{{< note >}} 
+<!-- 
+Starting in v1.17, this label is deprecated in favor of [topology.kubernetes.io/zone](#topologykubernetesiozone). 
+-->
+从 v1.17 开始，此标签被弃用，取而代之的是 [topology.kubernetes.io/zone](#topologykubernetesiozone). 
+{{< /note >}}
+
+## topology.kubernetes.io/region {#topologykubernetesioregion}
+
+示例
+
+`topology.kubernetes.io/region=us-east-1`
+
+参见 [topology.kubernetes.io/zone](#topologykubernetesiozone).
+
+## topology.kubernetes.io/zone {#topologykubernetesiozone}
+
+示例:
+
+`topology.kubernetes.io/zone=us-east-1c`
+
+用于：Node, PersistentVolume
+
+<!-- 
+On Node: The `kubelet` or the external `cloud-controller-manager` populates this with the information as provided by the `cloudprovider`.  This will be set only if you are using a `cloudprovider`. However, you should consider setting this on nodes if it makes sense in your topology.
+
+On PersistentVolume: topology-aware volume provisioners will automatically set node affinity constraints on `PersistentVolumes`.
+-->
+Node 场景：`kubelet` 或外部的 `cloud-controller-manager` 用 `cloudprovider` 提供的信息生成此标签。
+所以只有在用到 `cloudprovider` 的场景下，此标签才会被设置。
+但如果此标签在你的拓扑中有意义，你也可以考虑在 node 上设置它。
+
+PersistentVolume 场景：拓扑自感知的卷制备程序将在 `PersistentVolumes` 上自动设置节点亲和性限制。
+
+<!-- 
+A zone represents a logical failure domain.  It is common for Kubernetes clusters to span multiple zones for increased availability.  While the exact definition of a zone is left to infrastructure implementations, common properties of a zone include very low network latency within a zone, no-cost network traffic within a zone, and failure independence from other zones.  For example, nodes within a zone might share a network switch, but nodes in different zones should not.
+-->
+一个可用区（zone）表示一个逻辑故障域。Kubernetes 集群通常会跨越多个可用区以提高可用性。
+虽然可用区的确切定义留给基础设施来决定，但可用区常见的属性包括：可用区内的网络延迟非常低，可用区内的网络通讯没成本，独立于其他可用区的故障域。
+例如，一个可用区中的节点可以共享交换机，但不同可用区则不会。
+
+<!-- 
+A region represents a larger domain, made up of one or more zones.  It is uncommon for Kubernetes clusters to span multiple regions,  While the exact definition of a zone or region is left to infrastructure implementations, common properties of a region include higher network latency between them than within them, non-zero cost for network traffic between them, and failure independence from other zones or regions.  For example, nodes within a region might share power infrastructure (e.g. a UPS or generator), but nodes in different regions typically would not.
+-->
+一个地区（region）表示一个更大的域，由一个到多个可用区组成。对于 Kubernetes 来说，跨越多个地区的集群很罕见。
+虽然可用区和地区的确切定义留给基础设施来决定，但地区的常见属性包括：地区间比地区内更高的网络延迟，地区间网络流量更高的成本，独立于其他可用区或是地区的故障域。例如，一个地区内的节点可以共享电力基础设施（例如 UPS 或发电机），但不同地区内的节点显然不会。
+
+<!-- 
+Kubernetes makes a few assumptions about the structure of zones and regions:
+1) regions and zones are hierarchical: zones are strict subsets of regions and no zone can be in 2 regions
+2) zone names are unique across regions; for example region "africa-east-1" might be comprised of zones "africa-east-1a" and "africa-east-1b"
+-->
+Kubernetes 对可用区和地区的结构做出一些假设：
+1）地区和可用区是层次化的：可用区是地区的严格子集，任何可用区都不能再 2 个地区中出现。
+2）可用区名字在地区中独一无二：例如地区 "africa-east-1" 可由可用区 "africa-east-1a" 和 "africa-east-1b" 构成。
+
+<!-- 
+It should be safe to assume that topology labels do not change.  Even though labels are strictly mutable, consumers of them can assume that a given node is not going to be moved between zones without being destroyed and recreated.
+-->
+你可以安全的假定拓扑类的标签是固定不变的。即使标签严格来说是可变的，但使用者依然可以假定一个节点只有通过销毁、重建的方式，才能在可用区间移动。
+
+<!-- 
+Kubernetes can use this information in various ways.  For example, the scheduler automatically tries to spread the Pods in a ReplicaSet across nodes in a single-zone cluster (to reduce the impact of node failures, see [kubernetes.io/hostname](#kubernetesiohostname)). With multiple-zone clusters, this spreading behavior also applies to zones (to reduce the impact of zone failures). This is achieved via _SelectorSpreadPriority_.
+-->
+Kubernetes 能以多种方式使用这些信息。
+例如，调度器自动地尝试将 ReplicaSet 中的 Pod 打散在单可用区集群的不同节点上（以减少节点故障的影响，参见[kubernetes.io/hostname](#kubernetesiohostname)）。
+在多可用区的集群中，这类打散分布的行为也会应用到可用区（以减少可用区故障的影响）。
+做到这一点靠的是 _SelectorSpreadPriority_。
+
+<!-- 
+_SelectorSpreadPriority_ is a best effort placement. If the zones in your cluster are heterogeneous (for example: different numbers of nodes, different types of nodes, or different pod resource requirements), this placement might prevent equal spreading of your Pods across zones. If desired, you can use homogenous zones (same number and types of nodes) to reduce the probability of unequal spreading.
+-->
+_SelectorSpreadPriority_ 是一种最大能力分配方法（best effort）。如果集群中的可用区是异构的（例如：不同数量的节点，不同类型的节点，或不同的 Pod 资源需求），这种分配方法可以防止平均分配 Pod 到可用区。如果需要，你可以用同构的可用区（相同数量和类型的节点）来减少潜在的不平衡分布。
+
+<!-- 
+The scheduler (through the _VolumeZonePredicate_ predicate) also will ensure that Pods, that claim a given volume, are only placed into the same zone as that volume. Volumes cannot be attached across zones.
+-->
+调度器（通过 _VolumeZonePredicate_ 的预测）也会保障声明了某卷的 Pod 只能分配到该卷相同的可用区。
+卷不支持跨可用区挂载。
+
+<!-- 
+If `PersistentVolumeLabel` does not support automatic labeling of your PersistentVolumes, you should consider
+adding the labels manually (or adding support for `PersistentVolumeLabel`). With `PersistentVolumeLabel`, the scheduler prevents Pods from mounting volumes in a different zone. If your infrastructure doesn't have this constraint, you don't need to add the zone labels to the volumes at all.
+-->
+如果 `PersistentVolumeLabel` 不支持给 PersistentVolume 自动打标签，你可以考虑手动加标签（或增加 `PersistentVolumeLabel` 支持）。
+有了 `PersistentVolumeLabel`，调度器可以防止 Pod 挂载不同可用区中的卷。
+如果你的基础架构没有此限制，那你根本就没有必要给卷增加 zone 标签。
+
+## node.kubernetes.io/windows-build {#nodekubernetesiowindows-build}
+
+示例: `node.kubernetes.io/windows-build=10.0.17763`
+
+用于：Node
+
+<!-- 
+When the kubelet is running on Microsoft Windows, it automatically labels its node to record the version of Windows Server in use.
+
+The label's value is in the format "MajorVersion.MinorVersion.BuildNumber".
+-->
+当 kubelet 运行于 Microsoft Windows，它给节点自动打标签，以记录 Windows Server 的版本。
+
+标签值的格式为 "主版本.次版本.构建号"
+
+## service.kubernetes.io/headless {#servicekubernetesioheadless}
+
+示例：`service.kubernetes.io/headless=""`
+
+用于：Service
+
+<!-- 
+The control plane adds this label to an Endpoints object when the owning Service is headless.
+-->
+在无头（headless）服务的场景下，控制平面为 Endpoint 对象添加此标签。
+
+## kubernetes.io/service-name {#kubernetesioservice-name}
+
+示例：`kubernetes.io/service-name="nginx"`
+
+用于：Service
+
+<!-- 
+Kubernetes uses this label to differentiate multiple Services. Used currently for `ELB`(Elastic Load Balancer) only.
+-->
+Kubernetes 用此标签区分多个服务。当前仅用于 `ELB`(Elastic Load Balancer)。
+
+## endpointslice.kubernetes.io/managed-by {#endpointslicekubernetesiomanaged-by}
+
+示例：`endpointslice.kubernetes.io/managed-by="controller"`
+
+用于：EndpointSlices
+
+<!-- 
+The label is used to indicate the controller or entity that manages an EndpointSlice. This label aims to enable different EndpointSlice objects to be managed by different controllers or entities within the same cluster.
+-->
+此标签用来指向管理 EndpointSlice 的控制器或实体。
+此标签的目的是用集群中不同的控制器或实体来管理不同的 EndpointSlice。
+
+## endpointslice.kubernetes.io/skip-mirror {#endpointslicekubernetesioskip-mirror}
+
+示例：`endpointslice.kubernetes.io/skip-mirror="true"`
+
+用于：Endpoints
+
+<!-- 
+The label can be set to `"true"` on an Endpoints resource to indicate that the EndpointSliceMirroring controller should not mirror this resource with EndpointSlices.
+-->
+此标签在 Endpoints 资源上设为 `"true"` 指示 EndpointSliceMirroring 控制器不要镜像此 EndpointSlices 资源。
+
+## service.kubernetes.io/service-proxy-name {#servicekubernetesioservice-proxy-name}
+
+示例：`service.kubernetes.io/service-proxy-name="foo-bar"`
+
+用于：Service
+
+<!-- 
+The kube-proxy has this label for custom proxy, which delegates service control to custom proxy.
+-->
+kube-proxy 把此标签用于客户代理，将服务控制委托给客户代理。
+
+## experimental.windows.kubernetes.io/isolation-type
+
+示例：`experimental.windows.kubernetes.io/isolation-type: "hyperv"`
+
+用于：Pod
+
+<!-- 
+The annotation is used to run Windows containers with Hyper-V isolation. To use Hyper-V isolation feature and create a Hyper-V isolated container, the kubelet should be started with feature gates HyperVContainer=true and the Pod should include the annotation experimental.windows.kubernetes.io/isolation-type=hyperv.
+
+< note >
+You can only set this annotation on Pods that have a single container.
+< /note >
+-->
+此注解用于运行 Hyper-V 隔离的 Windows 容器。
+要使用 Hyper-V 隔离特性，并创建  Hyper-V 隔离容器，kubelet 应该用特性门控 HyperVContainer=true 来启动，并且 Pod 应该包含注解 `experimental.windows.kubernetes.io/isolation-type=hyperv`。
+
+{{< note >}}
+你只能在单容器 Pod 上设置此注解。
+{{< /note >}}
+
+## ingressclass.kubernetes.io/is-default-class
+
+示例：`ingressclass.kubernetes.io/is-default-class: "true"`
+
+用于：IngressClass
+
+<!-- 
+When a single IngressClass resource has this annotation set to `"true"`, new Ingress resource without a class specified will be assigned this default class.
+-->
+当唯一的 IngressClass 资源将此注解的值设为 "true"，没有指定类型的新 Ingress 资源将使用此默认类型。
+
+## kubernetes.io/ingress.class (deprecated)
+
+{{< note >}} 
+<!-- 
+Starting in v1.18, this annotation is deprecated in favor of `spec.ingressClassName`.
+-->
+从 v1.18 开始，此注解被弃用，取而代之的是 `spec.ingressClassName`。
+{{< /note >}}
+
+
+## alpha.kubernetes.io/provided-node-ip
+
+示例：`alpha.kubernetes.io/provided-node-ip: "10.0.0.1"`
+
+用于：Node
+
+<!-- 
+The kubelet can set this annotation on a Node to denote its configured IPv4 address.
+
+When kubelet is started with the "external" cloud provider, it sets this annotation on the Node to denote an IP address set from the command line flag (`--node-ip`). This IP is verified with the cloud provider as valid by the cloud-controller-manager.
+
+**The taints listed below are always used on Nodes**
+-->
+kubectl 在 Node 上设置此注解，表示它的 IPv4 地址。
+
+当 kubectl 由外部的云供应商启动时，在 Node 上设置此注解，表示由命令行标记(`--node-ip`)设置的 IP 地址。
+cloud-controller-manager 向云供应商验证此 IP 是否有效。
+
+**以下列出的污点只能用于 Node**
+
+## node.kubernetes.io/not-ready
+
+示例：`node.kubernetes.io/not-ready:NoExecute`
+
+<!-- 
+The node controller detects whether a node is ready by monitoring its health and adds or removes this taint accordingly.
+-->
+节点控制器通过健康监控来检测节点是否就绪，并据此添加/删除此污点。
+
+## node.kubernetes.io/unreachable
+
+示例：`node.kubernetes.io/unreachable:NoExecute`
+
+<!-- 
+The node controller adds the taint to a node corresponding to the [NodeCondition](/docs/concepts/architecture/nodes/#condition) `Ready` being `Unknown`.
+-->
+如果 [NodeCondition](/docs/concepts/architecture/nodes/#condition) 的 `Ready` 键值为 `Unknown`，节点控制器将添加污点到 node。
+
+## node.kubernetes.io/unschedulable
+
+示例：`node.kubernetes.io/unschedulable:NoSchedule`
+
+<!-- 
+The taint will be added to a node when initializing the node to avoid race condition.
+-->
+当初始化节点时，添加此污点，来避免竟态的发生。
+
+## node.kubernetes.io/memory-pressure
+
+示例：`node.kubernetes.io/memory-pressure:NoSchedule`
+
+<!-- 
+The kubelet detects memory pressure based on `memory.available` and `allocatableMemory.available` observed on a Node. The observed values are then compared to the corresponding thresholds that can be set on the kubelet to determine if the Node condition and taint should be added/removed.
+-->
+kubelet 依据节点上观测到的 `memory.available` 和 `allocatableMemory.available` 来检测内存压力。
+用观测值对比 kubelet 设置的阈值，以判断节点状态和污点是否可以被添加/移除。
+
+## node.kubernetes.io/disk-pressure
+
+示例：`node.kubernetes.io/disk-pressure:NoSchedule`
+
+<!-- 
+The kubelet detects disk pressure based on `imagefs.available`, `imagefs.inodesFree`, `nodefs.available` and `nodefs.inodesFree`(Linux only) observed on a Node. The observed values are then compared to the corresponding thresholds that can be set on the kubelet to determine if the Node condition and taint should be added/removed.
+-->
+kubelet 依据节点上观测到的 `imagefs.available`、`imagefs.inodesFree`、`nodefs.available` 和 `nodefs.inodesFree`(仅 Linux) 来判断磁盘压力。 
+用观测值对比 kubelet 设置的阈值，以确定节点状态和污点是否可以被添加/移除。
+
+## node.kubernetes.io/network-unavailable
+
+示例：`node.kubernetes.io/network-unavailable:NoSchedule`
+
+<!-- 
+This is initially set by the kubelet when the cloud provider used indicates a requirement for additional network configuration. Only when the route on the cloud is configured properly will the taint be removed by the cloud provider.
+-->
+它初始由 kubectl 设置，云供应商用它来指示对额外网络配置的需求。
+仅当云中的路由器配置妥当后，云供应商才会移除此污点。
+
+## node.kubernetes.io/pid-pressure
+
+示例：`node.kubernetes.io/pid-pressure:NoSchedule`
+
+<!-- 
+The kubelet checks D-value of the size of `/proc/sys/kernel/pid_max` and the PIDs consumed by Kubernetes on a node to get the number of available PIDs that referred to as the `pid.available` metric. The metric is then compared to the corresponding threshold that can be set on the kubelet to determine if the node condition and taint should be added/removed.
+-->
+kubelet 检查 `/proc/sys/kernel/pid_max` 尺寸的 D 值（D-value），以及节点上 Kubernetes 消耗掉的 PID，以获取可用的 PID 数量，此数量可通过指标 `pid.available` 得到。
+然后用此指标对比 kubelet 设置的阈值，以确定节点状态和污点是否可以被添加/移除。
+
+## node.cloudprovider.kubernetes.io/uninitialized
+
+示例：`node.cloudprovider.kubernetes.io/uninitialized:NoSchedule`
+
+<!-- 
+Sets this taint on a node to mark it as unusable, when kubelet is started with the "external" cloud provider, until a controller from the cloud-controller-manager initializes this node, and then removes the taint.
+-->
+当 kubelet 由外部云供应商启动时，在节点上设置此污点以标记节点不可用，直到一个 cloud-controller-manager 控制器初始化此节点之后，才会移除此污点。
+
+## node.cloudprovider.kubernetes.io/shutdown
+
+示例：`node.cloudprovider.kubernetes.io/shutdown:NoSchedule`
+
+<!-- 
+If a Node is in a cloud provider specified shutdown state, the Node gets tainted accordingly with `node.cloudprovider.kubernetes.io/shutdown` and the taint effect of `NoSchedule`.
+-->
+如果一个云供应商的节点被指定为关机状态，节点被打上污点 `node.cloudprovider.kubernetes.io/shutdown`，污点的影响为 `NoSchedule`。

From 5401a7ae7563c69dab504591d28ab8e604b59167 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Fri, 2 Apr 2021 15:25:47 +0000
Subject: [PATCH 448/788] Copy files to translate into Japanese

---
 content/ja/docs/tutorials/clusters/_index.md  |   5 +
 .../ja/docs/tutorials/clusters/apparmor.md    | 473 ++++++++++++++++++
 2 files changed, 478 insertions(+)
 create mode 100755 content/ja/docs/tutorials/clusters/_index.md
 create mode 100644 content/ja/docs/tutorials/clusters/apparmor.md

diff --git a/content/ja/docs/tutorials/clusters/_index.md b/content/ja/docs/tutorials/clusters/_index.md
new file mode 100755
index 0000000000..2db6156b6f
--- /dev/null
+++ b/content/ja/docs/tutorials/clusters/_index.md
@@ -0,0 +1,5 @@
+---
+title: "Clusters"
+weight: 60
+---
+
diff --git a/content/ja/docs/tutorials/clusters/apparmor.md b/content/ja/docs/tutorials/clusters/apparmor.md
new file mode 100644
index 0000000000..54c8a0f44c
--- /dev/null
+++ b/content/ja/docs/tutorials/clusters/apparmor.md
@@ -0,0 +1,473 @@
+---
+reviewers:
+- stclair
+title: Restrict a Container's Access to Resources with AppArmor
+content_type: tutorial
+weight: 10
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.4" state="beta" >}}
+
+
+AppArmor is a Linux kernel security module that supplements the standard Linux user and group based
+permissions to confine programs to a limited set of resources. AppArmor can be configured for any
+application to reduce its potential attack surface and provide greater in-depth defense. It is
+configured through profiles tuned to allow the access needed by a specific program or container,
+such as Linux capabilities, network access, file permissions, etc. Each profile can be run in either
+*enforcing* mode, which blocks access to disallowed resources, or *complain* mode, which only reports
+violations.
+
+AppArmor can help you to run a more secure deployment by restricting what containers are allowed to
+do, and/or provide better auditing through system logs. However, it is important to keep in mind
+that AppArmor is not a silver bullet and can only do so much to protect against exploits in your
+application code. It is important to provide good, restrictive profiles, and harden your
+applications and cluster from other angles as well.
+
+
+
+## {{% heading "objectives" %}}
+
+
+* See an example of how to load a profile on a node
+* Learn how to enforce the profile on a Pod
+* Learn how to check that the profile is loaded
+* See what happens when a profile is violated
+* See what happens when a profile cannot be loaded
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+Make sure:
+
+1. Kubernetes version is at least v1.4 -- Kubernetes support for AppArmor was added in
+   v1.4. Kubernetes components older than v1.4 are not aware of the new AppArmor annotations, and
+   will **silently ignore** any AppArmor settings that are provided. To ensure that your Pods are
+   receiving the expected protections, it is important to verify the Kubelet version of your nodes:
+
+   ```shell
+   kubectl get nodes -o=jsonpath=$'{range .items[*]}{@.metadata.name}: {@.status.nodeInfo.kubeletVersion}\n{end}'
+   ```
+   ```
+   gke-test-default-pool-239f5d02-gyn2: v1.4.0
+   gke-test-default-pool-239f5d02-x1kf: v1.4.0
+   gke-test-default-pool-239f5d02-xwux: v1.4.0
+   ```
+
+2. AppArmor kernel module is enabled -- For the Linux kernel to enforce an AppArmor profile, the
+   AppArmor kernel module must be installed and enabled. Several distributions enable the module by
+   default, such as Ubuntu and SUSE, and many others provide optional support. To check whether the
+   module is enabled, check the `/sys/module/apparmor/parameters/enabled` file:
+
+   ```shell
+   cat /sys/module/apparmor/parameters/enabled
+   Y
+   ```
+
+   If the Kubelet contains AppArmor support (>= v1.4), it will refuse to run a Pod with AppArmor
+   options if the kernel module is not enabled.
+
+  {{< note >}}
+  Ubuntu carries many AppArmor patches that have not been merged into the upstream Linux
+  kernel, including patches that add additional hooks and features. Kubernetes has only been
+  tested with the upstream version, and does not promise support for other features.
+  {{< /note >}}
+
+3. Container runtime supports AppArmor -- Currently all common Kubernetes-supported container
+   runtimes should support AppArmor, like {{< glossary_tooltip term_id="docker">}},
+   {{< glossary_tooltip term_id="cri-o" >}} or {{< glossary_tooltip term_id="containerd" >}}.
+   Please refer to the corresponding runtime documentation and verify that the cluster fulfills
+   the requirements to use AppArmor.
+
+4. Profile is loaded -- AppArmor is applied to a Pod by specifying an AppArmor profile that each
+   container should be run with. If any of the specified profiles is not already loaded in the
+   kernel, the Kubelet (>= v1.4) will reject the Pod. You can view which profiles are loaded on a
+   node by checking the `/sys/kernel/security/apparmor/profiles` file. For example:
+
+   ```shell
+   ssh gke-test-default-pool-239f5d02-gyn2 "sudo cat /sys/kernel/security/apparmor/profiles | sort"
+   ```
+   ```
+   apparmor-test-deny-write (enforce)
+   apparmor-test-audit-write (enforce)
+   docker-default (enforce)
+   k8s-nginx (enforce)
+   ```
+
+   For more details on loading profiles on nodes, see
+   [Setting up nodes with profiles](#setting-up-nodes-with-profiles).
+
+As long as the Kubelet version includes AppArmor support (>= v1.4), the Kubelet will reject a Pod
+with AppArmor options if any of the prerequisites are not met. You can also verify AppArmor support
+on nodes by checking the node ready condition message (though this is likely to be removed in a
+later release):
+
+```shell
+kubectl get nodes -o=jsonpath=$'{range .items[*]}{@.metadata.name}: {.status.conditions[?(@.reason=="KubeletReady")].message}\n{end}'
+```
+```
+gke-test-default-pool-239f5d02-gyn2: kubelet is posting ready status. AppArmor enabled
+gke-test-default-pool-239f5d02-x1kf: kubelet is posting ready status. AppArmor enabled
+gke-test-default-pool-239f5d02-xwux: kubelet is posting ready status. AppArmor enabled
+```
+
+
+
+<!-- lessoncontent -->
+
+## Securing a Pod
+
+{{< note >}}
+AppArmor is currently in beta, so options are specified as annotations. Once support graduates to
+general availability, the annotations will be replaced with first-class fields (more details in
+[Upgrade path to GA](#upgrade-path-to-general-availability)).
+{{< /note >}}
+
+AppArmor profiles are specified *per-container*. To specify the AppArmor profile to run a Pod
+container with, add an annotation to the Pod's metadata:
+
+```yaml
+container.apparmor.security.beta.kubernetes.io/<container_name>: <profile_ref>
+```
+
+Where `<container_name>` is the name of the container to apply the profile to, and `<profile_ref>`
+specifies the profile to apply. The `profile_ref` can be one of:
+
+* `runtime/default` to apply the runtime's default profile
+* `localhost/<profile_name>` to apply the profile loaded on the host with the name `<profile_name>`
+* `unconfined` to indicate that no profiles will be loaded
+
+See the [API Reference](#api-reference) for the full details on the annotation and profile name formats.
+
+Kubernetes AppArmor enforcement works by first checking that all the prerequisites have been
+met, and then forwarding the profile selection to the container runtime for enforcement. If the
+prerequisites have not been met, the Pod will be rejected, and will not run.
+
+To verify that the profile was applied, you can look for the AppArmor security option listed in the container created event:
+
+```shell
+kubectl get events | grep Created
+```
+```
+22s        22s         1         hello-apparmor     Pod       spec.containers{hello}   Normal    Created     {kubelet e2e-test-stclair-node-pool-31nt}   Created container with docker id 269a53b202d3; Security:[seccomp=unconfined apparmor=k8s-apparmor-example-deny-write]
+```
+
+You can also verify directly that the container's root process is running with the correct profile by checking its proc attr:
+
+```shell
+kubectl exec <pod_name> cat /proc/1/attr/current
+```
+```
+k8s-apparmor-example-deny-write (enforce)
+```
+
+## Example
+
+*This example assumes you have already set up a cluster with AppArmor support.*
+
+First, we need to load the profile we want to use onto our nodes. This profile denies all file writes:
+
+```shell
+#include <tunables/global>
+
+profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
+  #include <abstractions/base>
+
+  file,
+
+  # Deny all file writes.
+  deny /** w,
+}
+```
+
+Since we don't know where the Pod will be scheduled, we'll need to load the profile on all our
+nodes. For this example we'll just use SSH to install the profiles, but other approaches are
+discussed in [Setting up nodes with profiles](#setting-up-nodes-with-profiles).
+
+```shell
+NODES=(
+    # The SSH-accessible domain names of your nodes
+    gke-test-default-pool-239f5d02-gyn2.us-central1-a.my-k8s
+    gke-test-default-pool-239f5d02-x1kf.us-central1-a.my-k8s
+    gke-test-default-pool-239f5d02-xwux.us-central1-a.my-k8s)
+for NODE in ${NODES[*]}; do ssh $NODE 'sudo apparmor_parser -q <<EOF
+#include <tunables/global>
+
+profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
+  #include <abstractions/base>
+
+  file,
+
+  # Deny all file writes.
+  deny /** w,
+}
+EOF'
+done
+```
+
+Next, we'll run a simple "Hello AppArmor" pod with the deny-write profile:
+
+{{< codenew file="pods/security/hello-apparmor.yaml" >}}
+
+```shell
+kubectl create -f ./hello-apparmor.yaml
+```
+
+If we look at the pod events, we can see that the Pod container was created with the AppArmor
+profile "k8s-apparmor-example-deny-write":
+
+```shell
+kubectl get events | grep hello-apparmor
+```
+```
+14s        14s         1         hello-apparmor   Pod                                Normal    Scheduled   {default-scheduler }                           Successfully assigned hello-apparmor to gke-test-default-pool-239f5d02-gyn2
+14s        14s         1         hello-apparmor   Pod       spec.containers{hello}   Normal    Pulling     {kubelet gke-test-default-pool-239f5d02-gyn2}   pulling image "busybox"
+13s        13s         1         hello-apparmor   Pod       spec.containers{hello}   Normal    Pulled      {kubelet gke-test-default-pool-239f5d02-gyn2}   Successfully pulled image "busybox"
+13s        13s         1         hello-apparmor   Pod       spec.containers{hello}   Normal    Created     {kubelet gke-test-default-pool-239f5d02-gyn2}   Created container with docker id 06b6cd1c0989; Security:[seccomp=unconfined apparmor=k8s-apparmor-example-deny-write]
+13s        13s         1         hello-apparmor   Pod       spec.containers{hello}   Normal    Started     {kubelet gke-test-default-pool-239f5d02-gyn2}   Started container with docker id 06b6cd1c0989
+```
+
+We can verify that the container is actually running with that profile by checking its proc attr:
+
+```shell
+kubectl exec hello-apparmor cat /proc/1/attr/current
+```
+```
+k8s-apparmor-example-deny-write (enforce)
+```
+
+Finally, we can see what happens if we try to violate the profile by writing to a file:
+
+```shell
+kubectl exec hello-apparmor touch /tmp/test
+```
+```
+touch: /tmp/test: Permission denied
+error: error executing remote command: command terminated with non-zero exit code: Error executing in Docker Container: 1
+```
+
+To wrap up, let's look at what happens if we try to specify a profile that hasn't been loaded:
+
+```shell
+kubectl create -f /dev/stdin <<EOF
+```
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: hello-apparmor-2
+  annotations:
+    container.apparmor.security.beta.kubernetes.io/hello: localhost/k8s-apparmor-example-allow-write
+spec:
+  containers:
+  - name: hello
+    image: busybox
+    command: [ "sh", "-c", "echo 'Hello AppArmor!' && sleep 1h" ]
+EOF
+pod/hello-apparmor-2 created
+```
+
+```shell
+kubectl describe pod hello-apparmor-2
+```
+```
+Name:          hello-apparmor-2
+Namespace:     default
+Node:          gke-test-default-pool-239f5d02-x1kf/
+Start Time:    Tue, 30 Aug 2016 17:58:56 -0700
+Labels:        <none>
+Annotations:   container.apparmor.security.beta.kubernetes.io/hello=localhost/k8s-apparmor-example-allow-write
+Status:        Pending
+Reason:        AppArmor
+Message:       Pod Cannot enforce AppArmor: profile "k8s-apparmor-example-allow-write" is not loaded
+IP:
+Controllers:   <none>
+Containers:
+  hello:
+    Container ID:
+    Image:     busybox
+    Image ID:
+    Port:
+    Command:
+      sh
+      -c
+      echo 'Hello AppArmor!' && sleep 1h
+    State:              Waiting
+      Reason:           Blocked
+    Ready:              False
+    Restart Count:      0
+    Environment:        <none>
+    Mounts:
+      /var/run/secrets/kubernetes.io/serviceaccount from default-token-dnz7v (ro)
+Conditions:
+  Type          Status
+  Initialized   True
+  Ready         False
+  PodScheduled  True
+Volumes:
+  default-token-dnz7v:
+    Type:    Secret (a volume populated by a Secret)
+    SecretName:    default-token-dnz7v
+    Optional:   false
+QoS Class:      BestEffort
+Node-Selectors: <none>
+Tolerations:    <none>
+Events:
+  FirstSeen    LastSeen    Count    From                        SubobjectPath    Type        Reason        Message
+  ---------    --------    -----    ----                        -------------    --------    ------        -------
+  23s          23s         1        {default-scheduler }                         Normal      Scheduled     Successfully assigned hello-apparmor-2 to e2e-test-stclair-node-pool-t1f5
+  23s          23s         1        {kubelet e2e-test-stclair-node-pool-t1f5}             Warning        AppArmor    Cannot enforce AppArmor: profile "k8s-apparmor-example-allow-write" is not loaded
+```
+
+Note the pod status is Failed, with a helpful error message: `Pod Cannot enforce AppArmor: profile
+"k8s-apparmor-example-allow-write" is not loaded`. An event was also recorded with the same message.
+
+## Administration
+
+### Setting up nodes with profiles
+
+Kubernetes does not currently provide any native mechanisms for loading AppArmor profiles onto
+nodes. There are lots of ways to setup the profiles though, such as:
+
+* Through a [DaemonSet](/docs/concepts/workloads/controllers/daemonset/) that runs a Pod on each node to
+  ensure the correct profiles are loaded. An example implementation can be found
+  [here](https://git.k8s.io/kubernetes/test/images/apparmor-loader).
+* At node initialization time, using your node initialization scripts (e.g. Salt, Ansible, etc.) or
+  image.
+* By copying the profiles to each node and loading them through SSH, as demonstrated in the
+  [Example](#example).
+
+The scheduler is not aware of which profiles are loaded onto which node, so the full set of profiles
+must be loaded onto every node.  An alternative approach is to add a node label for each profile (or
+class of profiles) on the node, and use a
+[node selector](/docs/concepts/scheduling-eviction/assign-pod-node/) to ensure the Pod is run on a
+node with the required profile.
+
+### Restricting profiles with the PodSecurityPolicy
+
+If the PodSecurityPolicy extension is enabled, cluster-wide AppArmor restrictions can be applied. To
+enable the PodSecurityPolicy, the following flag must be set on the `apiserver`:
+
+```
+--enable-admission-plugins=PodSecurityPolicy[,others...]
+```
+
+The AppArmor options can be specified as annotations on the PodSecurityPolicy:
+
+```yaml
+apparmor.security.beta.kubernetes.io/defaultProfileName: <profile_ref>
+apparmor.security.beta.kubernetes.io/allowedProfileNames: <profile_ref>[,others...]
+```
+
+The default profile name option specifies the profile to apply to containers by default when none is
+specified. The allowed profile names option specifies a list of profiles that Pod containers are
+allowed to be run with. If both options are provided, the default must be allowed. The profiles are
+specified in the same format as on containers. See the [API Reference](#api-reference) for the full
+specification.
+
+### Disabling AppArmor
+
+If you do not want AppArmor to be available on your cluster, it can be disabled by a command-line flag:
+
+```
+--feature-gates=AppArmor=false
+```
+
+When disabled, any Pod that includes an AppArmor profile will fail validation with a "Forbidden"
+error. Note that by default docker always enables the "docker-default" profile on non-privileged
+pods (if the AppArmor kernel module is enabled), and will continue to do so even if the feature-gate
+is disabled. The option to disable AppArmor will be removed when AppArmor graduates to general
+availability (GA).
+
+### Upgrading to Kubernetes v1.4 with AppArmor
+
+No action is required with respect to AppArmor to upgrade your cluster to v1.4. However, if any
+existing pods had an AppArmor annotation, they will not go through validation (or PodSecurityPolicy
+admission). If permissive profiles are loaded on the nodes, a malicious user could pre-apply a
+permissive profile to escalate the pod privileges above the docker-default. If this is a concern, it
+is recommended to scrub the cluster of any pods containing an annotation with
+`apparmor.security.beta.kubernetes.io`.
+
+### Upgrade path to General Availability
+
+When AppArmor is ready to be graduated to general availability (GA), the options currently specified
+through annotations will be converted to fields. Supporting all the upgrade and downgrade paths
+through the transition is very nuanced, and will be explained in detail when the transition
+occurs. We will commit to supporting both fields and annotations for at least 2 releases, and will
+explicitly reject the annotations for at least 2 releases after that.
+
+## Authoring Profiles
+
+Getting AppArmor profiles specified correctly can be a tricky business. Fortunately there are some
+tools to help with that:
+
+* `aa-genprof` and `aa-logprof` generate profile rules by monitoring an application's activity and
+  logs, and admitting the actions it takes. Further instructions are provided by the
+  [AppArmor documentation](https://gitlab.com/apparmor/apparmor/wikis/Profiling_with_tools).
+* [bane](https://github.com/jfrazelle/bane) is an AppArmor profile generator for Docker that uses a
+  simplified profile language.
+
+It is recommended to run your application through Docker on a development workstation to generate
+the profiles, but there is nothing preventing running the tools on the Kubernetes node where your
+Pod is running.
+
+To debug problems with AppArmor, you can check the system logs to see what, specifically, was
+denied. AppArmor logs verbose messages to `dmesg`, and errors can usually be found in the system
+logs or through `journalctl`. More information is provided in
+[AppArmor failures](https://gitlab.com/apparmor/apparmor/wikis/AppArmor_Failures).
+
+
+## API Reference
+
+### Pod Annotation
+
+Specifying the profile a container will run with:
+
+- **key**: `container.apparmor.security.beta.kubernetes.io/<container_name>`
+  Where `<container_name>` matches the name of a container in the Pod.
+  A separate profile can be specified for each container in the Pod.
+- **value**: a profile reference, described below
+
+### Profile Reference
+
+- `runtime/default`: Refers to the default runtime profile.
+  - Equivalent to not specifying a profile (without a PodSecurityPolicy default), except it still
+    requires AppArmor to be enabled.
+  - For Docker, this resolves to the
+    [`docker-default`](https://docs.docker.com/engine/security/apparmor/) profile for non-privileged
+    containers, and unconfined (no profile) for privileged containers.
+- `localhost/<profile_name>`: Refers to a profile loaded on the node (localhost) by name.
+  - The possible profile names are detailed in the
+    [core policy reference](https://gitlab.com/apparmor/apparmor/wikis/AppArmor_Core_Policy_Reference#profile-names-and-attachment-specifications).
+- `unconfined`: This effectively disables AppArmor on the container.
+
+Any other profile reference format is invalid.
+
+### PodSecurityPolicy Annotations
+
+Specifying the default profile to apply to containers when none is provided:
+
+* **key**: `apparmor.security.beta.kubernetes.io/defaultProfileName`
+* **value**: a profile reference, described above
+
+Specifying the list of profiles Pod containers is allowed to specify:
+
+* **key**: `apparmor.security.beta.kubernetes.io/allowedProfileNames`
+* **value**: a comma-separated list of profile references (described above)
+  - Although an escaped comma is a legal character in a profile name, it cannot be explicitly
+    allowed here.
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+Additional resources:
+
+* [Quick guide to the AppArmor profile language](https://gitlab.com/apparmor/apparmor/wikis/QuickProfileLanguage)
+* [AppArmor core policy reference](https://gitlab.com/apparmor/apparmor/wikis/Policy_Layout)
+
+

From 5d0031cbdd96a41063e6860595cf923b7fee2e20 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Fri, 2 Apr 2021 15:25:47 +0000
Subject: [PATCH 449/788] Translate _index.md into Japanese

---
 content/ja/docs/tutorials/clusters/_index.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/ja/docs/tutorials/clusters/_index.md b/content/ja/docs/tutorials/clusters/_index.md
index 2db6156b6f..0f3a08fdda 100755
--- a/content/ja/docs/tutorials/clusters/_index.md
+++ b/content/ja/docs/tutorials/clusters/_index.md
@@ -1,5 +1,4 @@
 ---
-title: "Clusters"
+title: "クラスター"
 weight: 60
 ---
-

From e3d9f76bff9686141cec2faab0158a41235d667b Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Fri, 2 Apr 2021 15:25:47 +0000
Subject: [PATCH 450/788] Translate tutorials/clusters/apparmor into Japanese

---
 .../ja/docs/tutorials/clusters/apparmor.md    | 266 ++++++------------
 1 file changed, 84 insertions(+), 182 deletions(-)

diff --git a/content/ja/docs/tutorials/clusters/apparmor.md b/content/ja/docs/tutorials/clusters/apparmor.md
index 54c8a0f44c..6f5bd08709 100644
--- a/content/ja/docs/tutorials/clusters/apparmor.md
+++ b/content/ja/docs/tutorials/clusters/apparmor.md
@@ -1,7 +1,5 @@
 ---
-reviewers:
-- stclair
-title: Restrict a Container's Access to Resources with AppArmor
+title: AppArmorを使用してコンテナのリソースへのアクセスを制限する
 content_type: tutorial
 weight: 10
 ---
@@ -10,43 +8,23 @@ weight: 10
 
 {{< feature-state for_k8s_version="v1.4" state="beta" >}}
 
+AppArmorは、Linux標準のユーザー・グループをベースとしたパーミッションを補完するLinuxカーネルのセキュリティモジュールであり、プログラムのアクセスを限定されたリソースセットに制限するために利用されます。AppArmorを設定することで、任意のアプリケーションの攻撃サーフェイスとなりうる面を減らしたり、より優れた多重の防御を提供できます。AppArmorは、たとえばLinuxのcapability、ネットワークアクセス、ファイルのパーミッションなど、特定のプログラムやコンテナに必要なアクセスを許可するようにチューニングされたプロファイルにより設定を行います。各プロファイルは、許可されなかったリソースへのアクセスをブロックする*enforcing*モードと、ルール違反を報告するだけの*complain*モードのいずれかで実行できます。
 
-AppArmor is a Linux kernel security module that supplements the standard Linux user and group based
-permissions to confine programs to a limited set of resources. AppArmor can be configured for any
-application to reduce its potential attack surface and provide greater in-depth defense. It is
-configured through profiles tuned to allow the access needed by a specific program or container,
-such as Linux capabilities, network access, file permissions, etc. Each profile can be run in either
-*enforcing* mode, which blocks access to disallowed resources, or *complain* mode, which only reports
-violations.
-
-AppArmor can help you to run a more secure deployment by restricting what containers are allowed to
-do, and/or provide better auditing through system logs. However, it is important to keep in mind
-that AppArmor is not a silver bullet and can only do so much to protect against exploits in your
-application code. It is important to provide good, restrictive profiles, and harden your
-applications and cluster from other angles as well.
-
-
+AppArmorを利用すれば、コンテナに許可することを制限したりシステムログを通してよりよい監査を提供することで、デプロイをよりセキュアにする助けになります。しかし、AppArmorは銀の弾丸ではなく、アプリケーションコードの悪用からの防御を強化できるだけであることを心に留めておくことが重要です。制限の強い優れたプロファイルを提供し、アプリケーションとクラスターを別の角度から強化することが重要です。
 
 ## {{% heading "objectives" %}}
 
-
-* See an example of how to load a profile on a node
-* Learn how to enforce the profile on a Pod
-* Learn how to check that the profile is loaded
-* See what happens when a profile is violated
-* See what happens when a profile cannot be loaded
-
-
+* プロファイルをノードに読み込む方法の例を見る
+* Pod上でプロファイルを矯正する方法を学ぶ
+* プロファイルが読み込まれたかを確認する方法を学ぶ
+* プロファイルに違反した場合に何が起こるのかを見る
+* プロファイルが読み込めなかった場合に何が起こるのかを見る
 
 ## {{% heading "prerequisites" %}}
 
+以下のことを確認してください。
 
-Make sure:
-
-1. Kubernetes version is at least v1.4 -- Kubernetes support for AppArmor was added in
-   v1.4. Kubernetes components older than v1.4 are not aware of the new AppArmor annotations, and
-   will **silently ignore** any AppArmor settings that are provided. To ensure that your Pods are
-   receiving the expected protections, it is important to verify the Kubelet version of your nodes:
+1. Kubernetesのバージョンがv1.4以上であること。KubernetesのAppArmorのサポートはv1.4で追加されました。v1.4より古いバージョンのKubernetesのコンポーネントは、新しいAppArmorのアノテーションを認識できないため、AppArmorの設定を与えたとしても**黙って無視されてしまいます**。Podが期待した保護を確実に受けられるようにするためには、次のようにノードのKubeletのバージョンを確認することが重要です。
 
    ```shell
    kubectl get nodes -o=jsonpath=$'{range .items[*]}{@.metadata.name}: {@.status.nodeInfo.kubeletVersion}\n{end}'
@@ -57,35 +35,22 @@ Make sure:
    gke-test-default-pool-239f5d02-xwux: v1.4.0
    ```
 
-2. AppArmor kernel module is enabled -- For the Linux kernel to enforce an AppArmor profile, the
-   AppArmor kernel module must be installed and enabled. Several distributions enable the module by
-   default, such as Ubuntu and SUSE, and many others provide optional support. To check whether the
-   module is enabled, check the `/sys/module/apparmor/parameters/enabled` file:
+2. AppArmorカーネルモジュールが有効であること。LinuxカーネルがAppArmorプロファイルを強制するためには、AppArmorカーネルモジュールのインストールと有効化が必須です。UbuntuやSUSEなどのディストリビューションではデフォルトで有効化されますが、他の多くのディストリビューションでのサポートはオプションです。モジュールが有効になっているかチェックするには、次のように`/sys/module/apparmor/parameters/enabled`ファイルを確認します。
 
    ```shell
    cat /sys/module/apparmor/parameters/enabled
    Y
    ```
 
-   If the Kubelet contains AppArmor support (>= v1.4), it will refuse to run a Pod with AppArmor
-   options if the kernel module is not enabled.
+   KubeletがAppArmorをサポートしていれば(>= v1.4)、カーネルモジュールが有効になっていない場合にはAppArmorオプションが付いたPodを拒否します。
 
   {{< note >}}
-  Ubuntu carries many AppArmor patches that have not been merged into the upstream Linux
-  kernel, including patches that add additional hooks and features. Kubernetes has only been
-  tested with the upstream version, and does not promise support for other features.
+  UbuntuはAppArmorに対して、アップストリームのLinuxにマージしていない多数のパッチを当てています。その中には、追加のフックや機能を加えるパッチも含まれます。Kubernetesはアップストリームのバージョンでのみテストされており、その他の機能に対するサポートを約束していません。
   {{< /note >}}
 
-3. Container runtime supports AppArmor -- Currently all common Kubernetes-supported container
-   runtimes should support AppArmor, like {{< glossary_tooltip term_id="docker">}},
-   {{< glossary_tooltip term_id="cri-o" >}} or {{< glossary_tooltip term_id="containerd" >}}.
-   Please refer to the corresponding runtime documentation and verify that the cluster fulfills
-   the requirements to use AppArmor.
+3. コンテナランタイムがAppArmorをサポートしていること。現在、Kubernetesがサポートするすべての一般的なコンテナランタイム、{{< glossary_tooltip term_id="docker">}}、{{< glossary_tooltip term_id="cri-o" >}}、{{< glossary_tooltip term_id="containerd" >}}などは、AppArmorをサポートしています。関連するランタイムのドキュメントを参照して、クラスターがAppArmorを利用するための要求を満たしているかどうかを検証してください。
 
-4. Profile is loaded -- AppArmor is applied to a Pod by specifying an AppArmor profile that each
-   container should be run with. If any of the specified profiles is not already loaded in the
-   kernel, the Kubelet (>= v1.4) will reject the Pod. You can view which profiles are loaded on a
-   node by checking the `/sys/kernel/security/apparmor/profiles` file. For example:
+4. プロファイルが読み込まれていること。AppArmorがPodに適用されるのは、各コンテナが実行されるべきAppArmorプロファイルを指定したときです。もし指定されたプロファイルがまだカーネルに読み込まれていなければ、Kubelet(>= v1.4)はPodを拒否します。どのプロファイルがノードに読み込まれているのかを確かめるには、次のようなコマンドを実行して`/sys/kernel/security/apparmor/profiles`をチェックします。
 
    ```shell
    ssh gke-test-default-pool-239f5d02-gyn2 "sudo cat /sys/kernel/security/apparmor/profiles | sort"
@@ -97,13 +62,9 @@ Make sure:
    k8s-nginx (enforce)
    ```
 
-   For more details on loading profiles on nodes, see
-   [Setting up nodes with profiles](#setting-up-nodes-with-profiles).
+   ノード上でのプロファイルの読み込みの詳細については、[プロファイルを使用したノードのセットアップ](#setting-up-nodes-with-profiles)を参照してください。
 
-As long as the Kubelet version includes AppArmor support (>= v1.4), the Kubelet will reject a Pod
-with AppArmor options if any of the prerequisites are not met. You can also verify AppArmor support
-on nodes by checking the node ready condition message (though this is likely to be removed in a
-later release):
+KubeletのバージョンがAppArmorサポートに対応しているもの(>= v1.4)である限り、Kubeletは必要条件を1つでも満たさないAppArmorオプションが付けられたPodをリジェクトします。また、ノード上のAppArmorのサポートは、次のようにready conditionのメッセージで確認することもできます(ただし、この機能は将来のリリースで削除される可能性があります)。
 
 ```shell
 kubectl get nodes -o=jsonpath=$'{range .items[*]}{@.metadata.name}: {.status.conditions[?(@.reason=="KubeletReady")].message}\n{end}'
@@ -114,39 +75,31 @@ gke-test-default-pool-239f5d02-x1kf: kubelet is posting ready status. AppArmor e
 gke-test-default-pool-239f5d02-xwux: kubelet is posting ready status. AppArmor enabled
 ```
 
-
-
 <!-- lessoncontent -->
 
-## Securing a Pod
+## Podをセキュアにする
 
 {{< note >}}
-AppArmor is currently in beta, so options are specified as annotations. Once support graduates to
-general availability, the annotations will be replaced with first-class fields (more details in
-[Upgrade path to GA](#upgrade-path-to-general-availability)).
+AppArmorは現在beta版であるため、オプションはアノテーションとして指定します。将来サポートが一般利用可能(GA)になれば、アノテーションは第1級のフィールドで置き換えられます(詳細については、[一般利用可能(General Availability)への更新パス](#upgrade-path-to-general-availability)を参照してください)。
 {{< /note >}}
 
-AppArmor profiles are specified *per-container*. To specify the AppArmor profile to run a Pod
-container with, add an annotation to the Pod's metadata:
+AppArmorのプロファイルは*各コンテナごとに*指定します。Podのコンテナで実行するAppArmorのプロファイルを指定するには、Podのメタデータに次のようなアノテーションを追加します。
 
 ```yaml
 container.apparmor.security.beta.kubernetes.io/<container_name>: <profile_ref>
 ```
 
-Where `<container_name>` is the name of the container to apply the profile to, and `<profile_ref>`
-specifies the profile to apply. The `profile_ref` can be one of:
+ここで、`<container_name>`はプロファイルを適用するコンテナの名前であり、`<profile_ref>`には適用するプロファイルを指定します。`profile_ref`は次の値のうち1つを指定します。
 
-* `runtime/default` to apply the runtime's default profile
-* `localhost/<profile_name>` to apply the profile loaded on the host with the name `<profile_name>`
-* `unconfined` to indicate that no profiles will be loaded
+* `runtime/default`: ランタイムのデフォルトのプロファイルを適用する
+* `localhost/<profile_name>`: `<profile_name>`という名前でホストにロードされたプロファイルを適用する
+* `unconfined`: いかなるプロファイルもロードされないことを示す
 
-See the [API Reference](#api-reference) for the full details on the annotation and profile name formats.
+アノテーションとプロファイルの名前のフォーマットの詳細については、[APIリファレンス](#api-reference)を参照してください。
 
-Kubernetes AppArmor enforcement works by first checking that all the prerequisites have been
-met, and then forwarding the profile selection to the container runtime for enforcement. If the
-prerequisites have not been met, the Pod will be rejected, and will not run.
+KubernetesのAppArmorの強制では、まずはじめにすべての前提条件が満たされているかどうかをチェックします。その後、強制を行うためにプロファイルの選択をコンテナランタイムに委ねます。前提条件が満たされなかった場合、Podはリジェクトされ、実行されません。
 
-To verify that the profile was applied, you can look for the AppArmor security option listed in the container created event:
+プロファイルが適用されたかどうか確認するには、AppArmor securityオプションがコンテナ作成イベントに一覧されているかどうかを確認します。
 
 ```shell
 kubectl get events | grep Created
@@ -155,7 +108,7 @@ kubectl get events | grep Created
 22s        22s         1         hello-apparmor     Pod       spec.containers{hello}   Normal    Created     {kubelet e2e-test-stclair-node-pool-31nt}   Created container with docker id 269a53b202d3; Security:[seccomp=unconfined apparmor=k8s-apparmor-example-deny-write]
 ```
 
-You can also verify directly that the container's root process is running with the correct profile by checking its proc attr:
+proc attrを調べることで、コンテナのルートプロセスが正しいプロファイルで実行されているかどうかを直接確認することもできます。
 
 ```shell
 kubectl exec <pod_name> cat /proc/1/attr/current
@@ -164,11 +117,11 @@ kubectl exec <pod_name> cat /proc/1/attr/current
 k8s-apparmor-example-deny-write (enforce)
 ```
 
-## Example
+## 例 {#example}
 
-*This example assumes you have already set up a cluster with AppArmor support.*
+*この例は、クラスターがすでにAppArmorのサポート付きでセットアップ済みであることを前提としています。*
 
-First, we need to load the profile we want to use onto our nodes. This profile denies all file writes:
+まず、使用したいプロファイルをノード上に読み込む必要があります。このプロファイルは、すべてのファイル書き込みを拒否します。
 
 ```shell
 #include <tunables/global>
@@ -183,13 +136,11 @@ profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
 }
 ```
 
-Since we don't know where the Pod will be scheduled, we'll need to load the profile on all our
-nodes. For this example we'll just use SSH to install the profiles, but other approaches are
-discussed in [Setting up nodes with profiles](#setting-up-nodes-with-profiles).
+Podがどのノードにスケジュールされるかは予測できないため、プロファイルはすべてのノードに読み込ませる必要があります。この例では、単純にSSHを使ってプロファイルをインストールしますが、[プロファイルを使用したノードのセットアップ](#setting-up-nodes-with-profiles)では、他のアプローチについて議論しています。
 
 ```shell
 NODES=(
-    # The SSH-accessible domain names of your nodes
+    # SSHでアクセス可能なノードのドメイン名
     gke-test-default-pool-239f5d02-gyn2.us-central1-a.my-k8s
     gke-test-default-pool-239f5d02-x1kf.us-central1-a.my-k8s
     gke-test-default-pool-239f5d02-xwux.us-central1-a.my-k8s)
@@ -208,7 +159,7 @@ EOF'
 done
 ```
 
-Next, we'll run a simple "Hello AppArmor" pod with the deny-write profile:
+次に、deny-writeプロファイルを使用した単純な "Hello AppArmor" Podを実行します。
 
 {{< codenew file="pods/security/hello-apparmor.yaml" >}}
 
@@ -216,8 +167,7 @@ Next, we'll run a simple "Hello AppArmor" pod with the deny-write profile:
 kubectl create -f ./hello-apparmor.yaml
 ```
 
-If we look at the pod events, we can see that the Pod container was created with the AppArmor
-profile "k8s-apparmor-example-deny-write":
+Podイベントを確認すると、PodコンテナがAppArmorプロファイル "k8s-apparmor-example-deny-write" を使用して作成されたことがわかります。
 
 ```shell
 kubectl get events | grep hello-apparmor
@@ -230,7 +180,7 @@ kubectl get events | grep hello-apparmor
 13s        13s         1         hello-apparmor   Pod       spec.containers{hello}   Normal    Started     {kubelet gke-test-default-pool-239f5d02-gyn2}   Started container with docker id 06b6cd1c0989
 ```
 
-We can verify that the container is actually running with that profile by checking its proc attr:
+コンテナがこのプロファイルで実際に実行されていることを確認するために、コンテナのproc attrをチェックします。
 
 ```shell
 kubectl exec hello-apparmor cat /proc/1/attr/current
@@ -239,7 +189,7 @@ kubectl exec hello-apparmor cat /proc/1/attr/current
 k8s-apparmor-example-deny-write (enforce)
 ```
 
-Finally, we can see what happens if we try to violate the profile by writing to a file:
+最後に、ファイルへの書き込みを行おうとすることで、プロファイルに違反すると何が起こるか見てみましょう。
 
 ```shell
 kubectl exec hello-apparmor touch /tmp/test
@@ -249,7 +199,7 @@ touch: /tmp/test: Permission denied
 error: error executing remote command: command terminated with non-zero exit code: Error executing in Docker Container: 1
 ```
 
-To wrap up, let's look at what happens if we try to specify a profile that hasn't been loaded:
+まとめとして、読み込まれていないプロファイルを指定しようとするとどうなるのか見てみましょう。
 
 ```shell
 kubectl create -f /dev/stdin <<EOF
@@ -322,152 +272,104 @@ Events:
   23s          23s         1        {kubelet e2e-test-stclair-node-pool-t1f5}             Warning        AppArmor    Cannot enforce AppArmor: profile "k8s-apparmor-example-allow-write" is not loaded
 ```
 
-Note the pod status is Failed, with a helpful error message: `Pod Cannot enforce AppArmor: profile
-"k8s-apparmor-example-allow-write" is not loaded`. An event was also recorded with the same message.
+PodのステータスはPendingとなり、`Pod Cannot enforce AppArmor: profile
+"k8s-apparmor-example-allow-write" is not loaded`(PodはAppArmorを強制できません: プロファイル "k8s-apparmor-example-allow-write" はロードされていません)という役に立つエラーメッセージが表示されています。同じメッセージのイベントも記録されています。
 
-## Administration
+## 管理
 
-### Setting up nodes with profiles
+### プロファイルを使用したノードのセットアップ {#setting-up-nodes-with-profiles}
 
-Kubernetes does not currently provide any native mechanisms for loading AppArmor profiles onto
-nodes. There are lots of ways to setup the profiles though, such as:
+現在、KubernetesはAppArmorのプロファイルをノードに読み込むネイティブの仕組みは提供していません。しかし、プロファイルをセットアップする方法は、以下のように様々な方法があります。
 
-* Through a [DaemonSet](/docs/concepts/workloads/controllers/daemonset/) that runs a Pod on each node to
-  ensure the correct profiles are loaded. An example implementation can be found
-  [here](https://git.k8s.io/kubernetes/test/images/apparmor-loader).
-* At node initialization time, using your node initialization scripts (e.g. Salt, Ansible, etc.) or
-  image.
-* By copying the profiles to each node and loading them through SSH, as demonstrated in the
-  [Example](#example).
+* 各ノード上に正しいプロファイルがロードされていることを保証するPodを実行する[DaemonSet](/ja/docs/concepts/workloads/controllers/daemonset/)を利用する方法。[ここ](https://git.k8s.io/kubernetes/test/images/apparmor-loader)に実装例があります。
+* ノードの初期化時に初期化スクリプト(例: Salt、Ansibleなど)や初期化イメージを使用する。
+* [例](#example)で示したような方法で、プロファイルを各ノードにコピーし、SSHで読み込む。
 
-The scheduler is not aware of which profiles are loaded onto which node, so the full set of profiles
-must be loaded onto every node.  An alternative approach is to add a node label for each profile (or
-class of profiles) on the node, and use a
-[node selector](/docs/concepts/scheduling-eviction/assign-pod-node/) to ensure the Pod is run on a
-node with the required profile.
+スケジューラーはどのプロファイルがどのノードに読み込まれているのかがわからないため、すべてのプロファイルがすべてのノードに読み込まれていなければなりません。もう1つのアプローチとしては、各プロファイル(あるいはプロファイルのクラス)ごとにノードラベルを追加し、[node selector](/ja/docs/concepts/scheduling-eviction/assign-pod-node/)を用いてPodが必要なプロファイルを読み込んだノードで実行されるようにする方法もあります。
 
-### Restricting profiles with the PodSecurityPolicy
+### PodSecurityPolicyを使用したプロファイルの制限
 
-If the PodSecurityPolicy extension is enabled, cluster-wide AppArmor restrictions can be applied. To
-enable the PodSecurityPolicy, the following flag must be set on the `apiserver`:
+PodSecurityPolicy extensionが有効になっている場合、クラスタ全体でAppArmorn制限が適用されます。PodSecurityPolicyを有効にするには、`apiserver`上で次のフラグを設定する必要があります。
 
 ```
 --enable-admission-plugins=PodSecurityPolicy[,others...]
 ```
 
-The AppArmor options can be specified as annotations on the PodSecurityPolicy:
+AppArmorのオプションはPodSecurityPolicy上でアノテーションとして指定します。
 
 ```yaml
 apparmor.security.beta.kubernetes.io/defaultProfileName: <profile_ref>
 apparmor.security.beta.kubernetes.io/allowedProfileNames: <profile_ref>[,others...]
 ```
 
-The default profile name option specifies the profile to apply to containers by default when none is
-specified. The allowed profile names option specifies a list of profiles that Pod containers are
-allowed to be run with. If both options are provided, the default must be allowed. The profiles are
-specified in the same format as on containers. See the [API Reference](#api-reference) for the full
-specification.
+defaultProfileNameオプションには、noneが指定された場合にコンテナにデフォルトで適用されるプロファイルを指定します。allowedProfileNamesオプションには、Podコンテナの実行が許可されるプロファイルのリストを指定します。両方のオプションが指定された場合、デフォルトは許可されなければいけません。プロファイルはコンテナ上で同じフォーマットで指定されます。完全な仕様については、[APIリファレンス](#api-reference)を参照してください。
 
-### Disabling AppArmor
+### AppArmorの無効化
 
-If you do not want AppArmor to be available on your cluster, it can be disabled by a command-line flag:
+クラスタ上でAppArmorを利用可能にしたくない場合、次のコマンドラインフラグで無効化できます。
 
 ```
 --feature-gates=AppArmor=false
 ```
 
-When disabled, any Pod that includes an AppArmor profile will fail validation with a "Forbidden"
-error. Note that by default docker always enables the "docker-default" profile on non-privileged
-pods (if the AppArmor kernel module is enabled), and will continue to do so even if the feature-gate
-is disabled. The option to disable AppArmor will be removed when AppArmor graduates to general
-availability (GA).
+無効化すると、AppArmorプロファイルを含むPodは"Forbidden"エラーで検証に失敗します。ただし、デフォルトのdockerは非特権Pod上では"docker-default"というプロファイルを常に有効化し(AppArmorカーネルモジュールが有効である場合)、フィーチャーゲートで無効化したとしても有効化し続けることに注意してください。AppArmorを無効化するオプションは、AppArmorが一般利用(GA)になったときに削除される予定です。
 
-### Upgrading to Kubernetes v1.4 with AppArmor
+### AppArmorを使用するKubernetes v1.4にアップグレードする
 
-No action is required with respect to AppArmor to upgrade your cluster to v1.4. However, if any
-existing pods had an AppArmor annotation, they will not go through validation (or PodSecurityPolicy
-admission). If permissive profiles are loaded on the nodes, a malicious user could pre-apply a
-permissive profile to escalate the pod privileges above the docker-default. If this is a concern, it
-is recommended to scrub the cluster of any pods containing an annotation with
-`apparmor.security.beta.kubernetes.io`.
+クラスタをv1.4にアップグレードするために、AppArmorに関する操作は必要ありません。ただし、既存のPodがAppArmorのアノテーションを持っている場合、検証(またはPodSecurityPolicy admission)は行われません。もしpermissiveなプロファイルがノードに読み込まれていた場合、悪意のあるユーザーがPodの権限を上述のdocker-defaultより昇格させるために、permissiveなプロファイルを再適用する恐れがあります。これが問題となる場合、`apparmor.security.beta.kubernetes.io`のアノテーションを含むすべてのPodのクラスターをクリーンアップすることを推奨します。
 
-### Upgrade path to General Availability
+### 一般利用可能(General Availability)への更新パス {#upgrade-path-to-general-availability}
 
-When AppArmor is ready to be graduated to general availability (GA), the options currently specified
-through annotations will be converted to fields. Supporting all the upgrade and downgrade paths
-through the transition is very nuanced, and will be explained in detail when the transition
-occurs. We will commit to supporting both fields and annotations for at least 2 releases, and will
-explicitly reject the annotations for at least 2 releases after that.
+AppArmorが一般利用可能(GA)になったとき、現在アノテーションで指定しているオプションはフィールドに変換されます。移行中のすべてのアップグレードとダウングレードの経路をサポートするのは非常に微妙であるため、以降が必要になったときに詳細に説明する予定です。最低2リリースの間はフィールドとアノテーションの両方がサポートされるようにする予定です。最低2リリースの後は、アノテーションは明示的に拒否されるようになります。
 
-## Authoring Profiles
+## Profilesの作成
 
-Getting AppArmor profiles specified correctly can be a tricky business. Fortunately there are some
-tools to help with that:
+AppArmorのプロファイルを正しく指定するのはやっかいな作業です。幸い、その作業を補助するツールがいくつかあります。
 
-* `aa-genprof` and `aa-logprof` generate profile rules by monitoring an application's activity and
-  logs, and admitting the actions it takes. Further instructions are provided by the
-  [AppArmor documentation](https://gitlab.com/apparmor/apparmor/wikis/Profiling_with_tools).
-* [bane](https://github.com/jfrazelle/bane) is an AppArmor profile generator for Docker that uses a
-  simplified profile language.
+* `aa-genprof`および`aa-logprof`は、アプリケーションの動作とログを監視することによりプロファイルのルールを生成します。詳しい説明については、[AppArmor documentation](https://gitlab.com/apparmor/apparmor/wikis/Profiling_with_tools)を参照してください。
+* [bane](https://github.com/jfrazelle/bane)は、Docker向けのAppArmorのプロファイル・ジェネレータです。簡略化されたプロファイル言語を使用しています。
 
-It is recommended to run your application through Docker on a development workstation to generate
-the profiles, but there is nothing preventing running the tools on the Kubernetes node where your
-Pod is running.
+プロファイルの生成には、アプリケーションを開発用ワークステーション上でDockerで実行することを推奨します。しかし、実際にPodが実行されるKubernetesノード上でツールを実行してはいけない理由はありません。
 
-To debug problems with AppArmor, you can check the system logs to see what, specifically, was
-denied. AppArmor logs verbose messages to `dmesg`, and errors can usually be found in the system
-logs or through `journalctl`. More information is provided in
-[AppArmor failures](https://gitlab.com/apparmor/apparmor/wikis/AppArmor_Failures).
+AppArmorに関する問題をデバッグするには、システムログをチェックして、特に何が拒否されたのかを確認できます。AppArmorのログは`dmesg`にverboseメッセージを送り、エラーは通常システムログまたは`journalctl`で確認できます。詳しい情報は、[AppArmor failures](https://gitlab.com/apparmor/apparmor/wikis/AppArmor_Failures)で提供されています。
 
+## APIリファレンス {#api-reference}
 
-## API Reference
+### Podアノテーション
 
-### Pod Annotation
-
-Specifying the profile a container will run with:
+コンテナが実行するプロファイルを指定します。
 
 - **key**: `container.apparmor.security.beta.kubernetes.io/<container_name>`
-  Where `<container_name>` matches the name of a container in the Pod.
-  A separate profile can be specified for each container in the Pod.
-- **value**: a profile reference, described below
+  ここで、`<container_name>`はPod内のコンテナの名前を一致させます。Pod内の各コンテナごとに別々のプロファイルを指定できます。
+- **value**: 下で説明するプロファイルのリファレンス
 
-### Profile Reference
+### プロファイルのリファレンス
 
-- `runtime/default`: Refers to the default runtime profile.
-  - Equivalent to not specifying a profile (without a PodSecurityPolicy default), except it still
-    requires AppArmor to be enabled.
-  - For Docker, this resolves to the
-    [`docker-default`](https://docs.docker.com/engine/security/apparmor/) profile for non-privileged
-    containers, and unconfined (no profile) for privileged containers.
-- `localhost/<profile_name>`: Refers to a profile loaded on the node (localhost) by name.
-  - The possible profile names are detailed in the
-    [core policy reference](https://gitlab.com/apparmor/apparmor/wikis/AppArmor_Core_Policy_Reference#profile-names-and-attachment-specifications).
-- `unconfined`: This effectively disables AppArmor on the container.
+- `runtime/default`: デフォルトのランタイムプロファイルを指します。
+  - (PodSecurityPolicyのデフォルトを設定せずに)プロファイルを指定しない場合と同等ですが、AppArmorを有効化する必要があります。
+  - Dockerの場合、非特権コンテナでは[`docker-default`](https://docs.docker.com/engine/security/apparmor/)プロファイルが選択され、特権コンテナではunconfined(プロファイルなし)が選択されます。
+- `localhost/<profile_name>`: 名前で指定されたノード(localhost)に読み込まれたプロファイルを指します。
+  - 利用できるプロファイル名の詳細は[core policy reference](https://gitlab.com/apparmor/apparmor/wikis/AppArmor_Core_Policy_Reference#profile-names-and-attachment-specifications)で説明されています。
+- `unconfined`: これは実質的にコンテナ上のAppArmorを無効化します。
 
-Any other profile reference format is invalid.
+これ以外のプロファイルリファレンスはすべて無効です。
 
-### PodSecurityPolicy Annotations
+### PodSecurityPolicyアノテーション
 
-Specifying the default profile to apply to containers when none is provided:
+noneが与えられたときにコンテナに適用するデフォルトのプロファイルは、以下のように指定します。
 
 * **key**: `apparmor.security.beta.kubernetes.io/defaultProfileName`
-* **value**: a profile reference, described above
+* **value**: 上で説明したプロファイルのリファレンス
 
-Specifying the list of profiles Pod containers is allowed to specify:
+Podコンテナが指定することを許可するプロファイルのリストは、以下のように指定します。
 
 * **key**: `apparmor.security.beta.kubernetes.io/allowedProfileNames`
-* **value**: a comma-separated list of profile references (described above)
-  - Although an escaped comma is a legal character in a profile name, it cannot be explicitly
-    allowed here.
-
-
+* **value**: カンマ区切りの上述のプロファイルリファレンスのリスト
+  - プロファイル名ではエスケープしたカンマは不正な文字ではありませんが、ここでは明示的に許可されません。
 
 ## {{% heading "whatsnext" %}}
 
-
-Additional resources:
+追加のリソースとしては以下のものがあります。
 
 * [Quick guide to the AppArmor profile language](https://gitlab.com/apparmor/apparmor/wikis/QuickProfileLanguage)
 * [AppArmor core policy reference](https://gitlab.com/apparmor/apparmor/wikis/Policy_Layout)
-
-

From d2bf43be4da658f24fdb2bf451bb865b89a8df72 Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Fri, 26 Mar 2021 23:10:10 -0700
Subject: [PATCH 451/788] Generate reference doc for 1.21.0-rc.0 tag

empty commit to rebuild netlify preview
---
 .../generated/kubectl/kubectl-commands.html   |   738 +-
 .../reference/generated/kubectl/navData.js    |     2 +-
 .../generated/kubernetes-api/v1.21/index.html | 52412 ++++++++++++++++
 .../kubernetes-api/v1.21/js/navData.js        |     1 +
 4 files changed, 52874 insertions(+), 279 deletions(-)
 create mode 100644 static/docs/reference/generated/kubernetes-api/v1.21/index.html
 create mode 100644 static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js

diff --git a/static/docs/reference/generated/kubectl/kubectl-commands.html b/static/docs/reference/generated/kubectl/kubectl-commands.html
index 050188950d..6d1b082c61 100644
--- a/static/docs/reference/generated/kubectl/kubectl-commands.html
+++ b/static/docs/reference/generated/kubectl/kubectl-commands.html
@@ -12,7 +12,7 @@
 <link rel="stylesheet" href="stylesheet.css" type="text/css">
 </head>
 <body>
-<div id="sidebar-wrapper" class="side-nav side-bar-nav"><ul><li class="nav-level-1 strong-nav"><a href="#-strong-getting-started-strong-" class="nav-item"><strong>GETTING STARTED</strong></a></li></ul><ul><li class="nav-level-1"><a href="#create" class="nav-item">create</a></li><ul id="create-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-clusterrole-em-" class="nav-item"><em>clusterrole</em></a></li><li class="nav-level-2"><a href="#-em-clusterrolebinding-em-" class="nav-item"><em>clusterrolebinding</em></a></li><li class="nav-level-2"><a href="#-em-configmap-em-" class="nav-item"><em>configmap</em></a></li><li class="nav-level-2"><a href="#-em-cronjob-em-" class="nav-item"><em>cronjob</em></a></li><li class="nav-level-2"><a href="#-em-deployment-em-" class="nav-item"><em>deployment</em></a></li><li class="nav-level-2"><a href="#-em-ingress-em-" class="nav-item"><em>ingress</em></a></li><li class="nav-level-2"><a href="#-em-job-em-" class="nav-item"><em>job</em></a></li><li class="nav-level-2"><a href="#-em-namespace-em-" class="nav-item"><em>namespace</em></a></li><li class="nav-level-2"><a href="#-em-poddisruptionbudget-em-" class="nav-item"><em>poddisruptionbudget</em></a></li><li class="nav-level-2"><a href="#-em-priorityclass-em-" class="nav-item"><em>priorityclass</em></a></li><li class="nav-level-2"><a href="#-em-quota-em-" class="nav-item"><em>quota</em></a></li><li class="nav-level-2"><a href="#-em-role-em-" class="nav-item"><em>role</em></a></li><li class="nav-level-2"><a href="#-em-rolebinding-em-" class="nav-item"><em>rolebinding</em></a></li><li class="nav-level-2"><a href="#-em-secret-em-" class="nav-item"><em>secret</em></a></li><li class="nav-level-2"><a href="#-em-secret-docker-registry-em-" class="nav-item"><em>secret docker-registry</em></a></li><li class="nav-level-2"><a href="#-em-secret-generic-em-" class="nav-item"><em>secret generic</em></a></li><li class="nav-level-2"><a href="#-em-secret-tls-em-" class="nav-item"><em>secret tls</em></a></li><li class="nav-level-2"><a href="#-em-service-em-" class="nav-item"><em>service</em></a></li><li class="nav-level-2"><a href="#-em-service-clusterip-em-" class="nav-item"><em>service clusterip</em></a></li><li class="nav-level-2"><a href="#-em-service-externalname-em-" class="nav-item"><em>service externalname</em></a></li><li class="nav-level-2"><a href="#-em-service-loadbalancer-em-" class="nav-item"><em>service loadbalancer</em></a></li><li class="nav-level-2"><a href="#-em-service-nodeport-em-" class="nav-item"><em>service nodeport</em></a></li><li class="nav-level-2"><a href="#-em-serviceaccount-em-" class="nav-item"><em>serviceaccount</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#get" class="nav-item">get</a></li></ul><ul><li class="nav-level-1"><a href="#run" class="nav-item">run</a></li></ul><ul><li class="nav-level-1"><a href="#expose" class="nav-item">expose</a></li></ul><ul><li class="nav-level-1"><a href="#delete" class="nav-item">delete</a></li></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-app-management-strong-" class="nav-item"><strong>APP MANAGEMENT</strong></a></li></ul><ul><li class="nav-level-1"><a href="#apply" class="nav-item">apply</a></li><ul id="apply-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-edit-last-applied-em-" class="nav-item"><em>edit-last-applied</em></a></li><li class="nav-level-2"><a href="#-em-set-last-applied-em-" class="nav-item"><em>set-last-applied</em></a></li><li class="nav-level-2"><a href="#-em-view-last-applied-em-" class="nav-item"><em>view-last-applied</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#annotate" class="nav-item">annotate</a></li></ul><ul><li class="nav-level-1"><a href="#autoscale" class="nav-item">autoscale</a></li></ul><ul><li class="nav-level-1"><a href="#debug" class="nav-item">debug</a></li></ul><ul><li class="nav-level-1"><a href="#diff" class="nav-item">diff</a></li></ul><ul><li class="nav-level-1"><a href="#edit" class="nav-item">edit</a></li></ul><ul><li class="nav-level-1"><a href="#kustomize" class="nav-item">kustomize</a></li></ul><ul><li class="nav-level-1"><a href="#label" class="nav-item">label</a></li></ul><ul><li class="nav-level-1"><a href="#patch" class="nav-item">patch</a></li></ul><ul><li class="nav-level-1"><a href="#replace" class="nav-item">replace</a></li></ul><ul><li class="nav-level-1"><a href="#rollout" class="nav-item">rollout</a></li><ul id="rollout-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-history-em-" class="nav-item"><em>history</em></a></li><li class="nav-level-2"><a href="#-em-pause-em-" class="nav-item"><em>pause</em></a></li><li class="nav-level-2"><a href="#-em-restart-em-" class="nav-item"><em>restart</em></a></li><li class="nav-level-2"><a href="#-em-resume-em-" class="nav-item"><em>resume</em></a></li><li class="nav-level-2"><a href="#-em-status-em-" class="nav-item"><em>status</em></a></li><li class="nav-level-2"><a href="#-em-undo-em-" class="nav-item"><em>undo</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#scale" class="nav-item">scale</a></li></ul><ul><li class="nav-level-1"><a href="#set" class="nav-item">set</a></li><ul id="set-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-env-em-" class="nav-item"><em>env</em></a></li><li class="nav-level-2"><a href="#-em-image-em-" class="nav-item"><em>image</em></a></li><li class="nav-level-2"><a href="#-em-resources-em-" class="nav-item"><em>resources</em></a></li><li class="nav-level-2"><a href="#-em-selector-em-" class="nav-item"><em>selector</em></a></li><li class="nav-level-2"><a href="#-em-serviceaccount-em--1" class="nav-item"><em>serviceaccount</em></a></li><li class="nav-level-2"><a href="#-em-subject-em-" class="nav-item"><em>subject</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#wait" class="nav-item">wait</a></li></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-working-with-apps-strong-" class="nav-item"><strong>WORKING WITH APPS</strong></a></li></ul><ul><li class="nav-level-1"><a href="#attach" class="nav-item">attach</a></li></ul><ul><li class="nav-level-1"><a href="#auth" class="nav-item">auth</a></li><ul id="auth-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-can-i-em-" class="nav-item"><em>can-i</em></a></li><li class="nav-level-2"><a href="#-em-reconcile-em-" class="nav-item"><em>reconcile</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#cp" class="nav-item">cp</a></li></ul><ul><li class="nav-level-1"><a href="#describe" class="nav-item">describe</a></li></ul><ul><li class="nav-level-1"><a href="#exec" class="nav-item">exec</a></li></ul><ul><li class="nav-level-1"><a href="#logs" class="nav-item">logs</a></li></ul><ul><li class="nav-level-1"><a href="#port-forward" class="nav-item">port-forward</a></li></ul><ul><li class="nav-level-1"><a href="#proxy" class="nav-item">proxy</a></li></ul><ul><li class="nav-level-1"><a href="#top" class="nav-item">top</a></li><ul id="top-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-node-em-" class="nav-item"><em>node</em></a></li><li class="nav-level-2"><a href="#-em-pod-em-" class="nav-item"><em>pod</em></a></li></ul></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-cluster-management-strong-" class="nav-item"><strong>CLUSTER MANAGEMENT</strong></a></li></ul><ul><li class="nav-level-1"><a href="#api-versions" class="nav-item">api-versions</a></li></ul><ul><li class="nav-level-1"><a href="#certificate" class="nav-item">certificate</a></li><ul id="certificate-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-approve-em-" class="nav-item"><em>approve</em></a></li><li class="nav-level-2"><a href="#-em-deny-em-" class="nav-item"><em>deny</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#cluster-info" class="nav-item">cluster-info</a></li><ul id="cluster-info-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-dump-em-" class="nav-item"><em>dump</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#cordon" class="nav-item">cordon</a></li></ul><ul><li class="nav-level-1"><a href="#drain" class="nav-item">drain</a></li></ul><ul><li class="nav-level-1"><a href="#taint" class="nav-item">taint</a></li></ul><ul><li class="nav-level-1"><a href="#uncordon" class="nav-item">uncordon</a></li></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-kubectl-settings-and-usage-strong-" class="nav-item"><strong>KUBECTL SETTINGS AND USAGE</strong></a></li></ul><ul><li class="nav-level-1"><a href="#alpha" class="nav-item">alpha</a></li><ul id="alpha-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-debug-em-" class="nav-item"><em>debug</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#api-resources" class="nav-item">api-resources</a></li></ul><ul><li class="nav-level-1"><a href="#completion" class="nav-item">completion</a></li></ul><ul><li class="nav-level-1"><a href="#config" class="nav-item">config</a></li><ul id="config-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-current-context-em-" class="nav-item"><em>current-context</em></a></li><li class="nav-level-2"><a href="#-em-delete-cluster-em-" class="nav-item"><em>delete-cluster</em></a></li><li class="nav-level-2"><a href="#-em-delete-context-em-" class="nav-item"><em>delete-context</em></a></li><li class="nav-level-2"><a href="#-em-delete-user-em-" class="nav-item"><em>delete-user</em></a></li><li class="nav-level-2"><a href="#-em-get-clusters-em-" class="nav-item"><em>get-clusters</em></a></li><li class="nav-level-2"><a href="#-em-get-contexts-em-" class="nav-item"><em>get-contexts</em></a></li><li class="nav-level-2"><a href="#-em-get-users-em-" class="nav-item"><em>get-users</em></a></li><li class="nav-level-2"><a href="#-em-rename-context-em-" class="nav-item"><em>rename-context</em></a></li><li class="nav-level-2"><a href="#-em-set-em-" class="nav-item"><em>set</em></a></li><li class="nav-level-2"><a href="#-em-set-cluster-em-" class="nav-item"><em>set-cluster</em></a></li><li class="nav-level-2"><a href="#-em-set-context-em-" class="nav-item"><em>set-context</em></a></li><li class="nav-level-2"><a href="#-em-set-credentials-em-" class="nav-item"><em>set-credentials</em></a></li><li class="nav-level-2"><a href="#-em-unset-em-" class="nav-item"><em>unset</em></a></li><li class="nav-level-2"><a href="#-em-use-context-em-" class="nav-item"><em>use-context</em></a></li><li class="nav-level-2"><a href="#-em-view-em-" class="nav-item"><em>view</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#explain" class="nav-item">explain</a></li></ul><ul><li class="nav-level-1"><a href="#options" class="nav-item">options</a></li></ul><ul><li class="nav-level-1"><a href="#plugin" class="nav-item">plugin</a></li><ul id="plugin-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-list-em-" class="nav-item"><em>list</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#version" class="nav-item">version</a></li></ul><br/><div class="copyright"><a href="https://github.com/kubernetes/kubernetes">Copyright 2020 The Kubernetes Authors.</a></div></div>
+<div id="sidebar-wrapper" class="side-nav side-bar-nav"><ul><li class="nav-level-1 strong-nav"><a href="#-strong-getting-started-strong-" class="nav-item"><strong>GETTING STARTED</strong></a></li></ul><ul><li class="nav-level-1"><a href="#create" class="nav-item">create</a></li><ul id="create-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-clusterrole-em-" class="nav-item"><em>clusterrole</em></a></li><li class="nav-level-2"><a href="#-em-clusterrolebinding-em-" class="nav-item"><em>clusterrolebinding</em></a></li><li class="nav-level-2"><a href="#-em-configmap-em-" class="nav-item"><em>configmap</em></a></li><li class="nav-level-2"><a href="#-em-cronjob-em-" class="nav-item"><em>cronjob</em></a></li><li class="nav-level-2"><a href="#-em-deployment-em-" class="nav-item"><em>deployment</em></a></li><li class="nav-level-2"><a href="#-em-ingress-em-" class="nav-item"><em>ingress</em></a></li><li class="nav-level-2"><a href="#-em-job-em-" class="nav-item"><em>job</em></a></li><li class="nav-level-2"><a href="#-em-namespace-em-" class="nav-item"><em>namespace</em></a></li><li class="nav-level-2"><a href="#-em-poddisruptionbudget-em-" class="nav-item"><em>poddisruptionbudget</em></a></li><li class="nav-level-2"><a href="#-em-priorityclass-em-" class="nav-item"><em>priorityclass</em></a></li><li class="nav-level-2"><a href="#-em-quota-em-" class="nav-item"><em>quota</em></a></li><li class="nav-level-2"><a href="#-em-role-em-" class="nav-item"><em>role</em></a></li><li class="nav-level-2"><a href="#-em-rolebinding-em-" class="nav-item"><em>rolebinding</em></a></li><li class="nav-level-2"><a href="#-em-secret-em-" class="nav-item"><em>secret</em></a></li><li class="nav-level-2"><a href="#-em-secret-docker-registry-em-" class="nav-item"><em>secret docker-registry</em></a></li><li class="nav-level-2"><a href="#-em-secret-generic-em-" class="nav-item"><em>secret generic</em></a></li><li class="nav-level-2"><a href="#-em-secret-tls-em-" class="nav-item"><em>secret tls</em></a></li><li class="nav-level-2"><a href="#-em-service-em-" class="nav-item"><em>service</em></a></li><li class="nav-level-2"><a href="#-em-service-clusterip-em-" class="nav-item"><em>service clusterip</em></a></li><li class="nav-level-2"><a href="#-em-service-externalname-em-" class="nav-item"><em>service externalname</em></a></li><li class="nav-level-2"><a href="#-em-service-loadbalancer-em-" class="nav-item"><em>service loadbalancer</em></a></li><li class="nav-level-2"><a href="#-em-service-nodeport-em-" class="nav-item"><em>service nodeport</em></a></li><li class="nav-level-2"><a href="#-em-serviceaccount-em-" class="nav-item"><em>serviceaccount</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#get" class="nav-item">get</a></li></ul><ul><li class="nav-level-1"><a href="#run" class="nav-item">run</a></li></ul><ul><li class="nav-level-1"><a href="#expose" class="nav-item">expose</a></li></ul><ul><li class="nav-level-1"><a href="#delete" class="nav-item">delete</a></li></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-app-management-strong-" class="nav-item"><strong>APP MANAGEMENT</strong></a></li></ul><ul><li class="nav-level-1"><a href="#apply" class="nav-item">apply</a></li><ul id="apply-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-edit-last-applied-em-" class="nav-item"><em>edit-last-applied</em></a></li><li class="nav-level-2"><a href="#-em-set-last-applied-em-" class="nav-item"><em>set-last-applied</em></a></li><li class="nav-level-2"><a href="#-em-view-last-applied-em-" class="nav-item"><em>view-last-applied</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#annotate" class="nav-item">annotate</a></li></ul><ul><li class="nav-level-1"><a href="#autoscale" class="nav-item">autoscale</a></li></ul><ul><li class="nav-level-1"><a href="#debug" class="nav-item">debug</a></li></ul><ul><li class="nav-level-1"><a href="#diff" class="nav-item">diff</a></li></ul><ul><li class="nav-level-1"><a href="#edit" class="nav-item">edit</a></li></ul><ul><li class="nav-level-1"><a href="#kustomize" class="nav-item">kustomize</a></li></ul><ul><li class="nav-level-1"><a href="#label" class="nav-item">label</a></li></ul><ul><li class="nav-level-1"><a href="#patch" class="nav-item">patch</a></li></ul><ul><li class="nav-level-1"><a href="#replace" class="nav-item">replace</a></li></ul><ul><li class="nav-level-1"><a href="#rollout" class="nav-item">rollout</a></li><ul id="rollout-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-history-em-" class="nav-item"><em>history</em></a></li><li class="nav-level-2"><a href="#-em-pause-em-" class="nav-item"><em>pause</em></a></li><li class="nav-level-2"><a href="#-em-restart-em-" class="nav-item"><em>restart</em></a></li><li class="nav-level-2"><a href="#-em-resume-em-" class="nav-item"><em>resume</em></a></li><li class="nav-level-2"><a href="#-em-status-em-" class="nav-item"><em>status</em></a></li><li class="nav-level-2"><a href="#-em-undo-em-" class="nav-item"><em>undo</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#scale" class="nav-item">scale</a></li></ul><ul><li class="nav-level-1"><a href="#set" class="nav-item">set</a></li><ul id="set-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-env-em-" class="nav-item"><em>env</em></a></li><li class="nav-level-2"><a href="#-em-image-em-" class="nav-item"><em>image</em></a></li><li class="nav-level-2"><a href="#-em-resources-em-" class="nav-item"><em>resources</em></a></li><li class="nav-level-2"><a href="#-em-selector-em-" class="nav-item"><em>selector</em></a></li><li class="nav-level-2"><a href="#-em-serviceaccount-em--1" class="nav-item"><em>serviceaccount</em></a></li><li class="nav-level-2"><a href="#-em-subject-em-" class="nav-item"><em>subject</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#wait" class="nav-item">wait</a></li></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-working-with-apps-strong-" class="nav-item"><strong>WORKING WITH APPS</strong></a></li></ul><ul><li class="nav-level-1"><a href="#attach" class="nav-item">attach</a></li></ul><ul><li class="nav-level-1"><a href="#auth" class="nav-item">auth</a></li><ul id="auth-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-can-i-em-" class="nav-item"><em>can-i</em></a></li><li class="nav-level-2"><a href="#-em-reconcile-em-" class="nav-item"><em>reconcile</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#cp" class="nav-item">cp</a></li></ul><ul><li class="nav-level-1"><a href="#describe" class="nav-item">describe</a></li></ul><ul><li class="nav-level-1"><a href="#exec" class="nav-item">exec</a></li></ul><ul><li class="nav-level-1"><a href="#logs" class="nav-item">logs</a></li></ul><ul><li class="nav-level-1"><a href="#port-forward" class="nav-item">port-forward</a></li></ul><ul><li class="nav-level-1"><a href="#proxy" class="nav-item">proxy</a></li></ul><ul><li class="nav-level-1"><a href="#top" class="nav-item">top</a></li><ul id="top-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-node-em-" class="nav-item"><em>node</em></a></li><li class="nav-level-2"><a href="#-em-pod-em-" class="nav-item"><em>pod</em></a></li></ul></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-cluster-management-strong-" class="nav-item"><strong>CLUSTER MANAGEMENT</strong></a></li></ul><ul><li class="nav-level-1"><a href="#api-versions" class="nav-item">api-versions</a></li></ul><ul><li class="nav-level-1"><a href="#certificate" class="nav-item">certificate</a></li><ul id="certificate-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-approve-em-" class="nav-item"><em>approve</em></a></li><li class="nav-level-2"><a href="#-em-deny-em-" class="nav-item"><em>deny</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#cluster-info" class="nav-item">cluster-info</a></li><ul id="cluster-info-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-dump-em-" class="nav-item"><em>dump</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#cordon" class="nav-item">cordon</a></li></ul><ul><li class="nav-level-1"><a href="#drain" class="nav-item">drain</a></li></ul><ul><li class="nav-level-1"><a href="#taint" class="nav-item">taint</a></li></ul><ul><li class="nav-level-1"><a href="#uncordon" class="nav-item">uncordon</a></li></ul><ul><li class="nav-level-1 strong-nav"><a href="#-strong-kubectl-settings-and-usage-strong-" class="nav-item"><strong>KUBECTL SETTINGS AND USAGE</strong></a></li></ul><ul><li class="nav-level-1"><a href="#alpha" class="nav-item">alpha</a></li></ul><ul><li class="nav-level-1"><a href="#api-resources" class="nav-item">api-resources</a></li></ul><ul><li class="nav-level-1"><a href="#completion" class="nav-item">completion</a></li></ul><ul><li class="nav-level-1"><a href="#config" class="nav-item">config</a></li><ul id="config-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-current-context-em-" class="nav-item"><em>current-context</em></a></li><li class="nav-level-2"><a href="#-em-delete-cluster-em-" class="nav-item"><em>delete-cluster</em></a></li><li class="nav-level-2"><a href="#-em-delete-context-em-" class="nav-item"><em>delete-context</em></a></li><li class="nav-level-2"><a href="#-em-delete-user-em-" class="nav-item"><em>delete-user</em></a></li><li class="nav-level-2"><a href="#-em-get-clusters-em-" class="nav-item"><em>get-clusters</em></a></li><li class="nav-level-2"><a href="#-em-get-contexts-em-" class="nav-item"><em>get-contexts</em></a></li><li class="nav-level-2"><a href="#-em-get-users-em-" class="nav-item"><em>get-users</em></a></li><li class="nav-level-2"><a href="#-em-rename-context-em-" class="nav-item"><em>rename-context</em></a></li><li class="nav-level-2"><a href="#-em-set-em-" class="nav-item"><em>set</em></a></li><li class="nav-level-2"><a href="#-em-set-cluster-em-" class="nav-item"><em>set-cluster</em></a></li><li class="nav-level-2"><a href="#-em-set-context-em-" class="nav-item"><em>set-context</em></a></li><li class="nav-level-2"><a href="#-em-set-credentials-em-" class="nav-item"><em>set-credentials</em></a></li><li class="nav-level-2"><a href="#-em-unset-em-" class="nav-item"><em>unset</em></a></li><li class="nav-level-2"><a href="#-em-use-context-em-" class="nav-item"><em>use-context</em></a></li><li class="nav-level-2"><a href="#-em-view-em-" class="nav-item"><em>view</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#explain" class="nav-item">explain</a></li></ul><ul><li class="nav-level-1"><a href="#options" class="nav-item">options</a></li></ul><ul><li class="nav-level-1"><a href="#plugin" class="nav-item">plugin</a></li><ul id="plugin-nav" style="display: none;"><li class="nav-level-2"><a href="#-em-list-em-" class="nav-item"><em>list</em></a></li></ul></ul><ul><li class="nav-level-1"><a href="#version" class="nav-item">version</a></li></ul><br/><div class="copyright"><a href="https://github.com/kubernetes/kubernetes">Copyright 2020 The Kubernetes Authors.</a></div></div>
 <div id="wrapper">
 <div id="code-tabs-wrapper" class="code-tabs"><ul class="code-tab-list"><li class="code-tab" id="example">example</li></ul></div>
 <div id="page-content-wrapper" class="body-content container-fluid"><h1 id="-strong-getting-started-strong-"><strong>GETTING STARTED</strong></h1>
@@ -130,6 +130,12 @@ inspect them.</p>
 <td>Selector (label query) to filter on, supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2) </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -250,6 +256,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -339,6 +351,12 @@ inspect them.</p>
 <td>Service accounts to bind to the clusterrole, in the format &lt;namespace&gt;:&lt;name&gt; </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -439,12 +457,6 @@ inspect them.</p>
 <td>Specify a key and literal value to insert in configmap (i.e. mykey=somevalue) </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>configmap/v1</td>
-<td>The name of the API generator to use. </td>
-</tr>
-<tr>
 <td>output</td>
 <td>o</td>
 <td></td>
@@ -457,6 +469,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -545,6 +563,12 @@ inspect them.</p>
 <td>A schedule in the Cron format the job should be run with. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -649,6 +673,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -784,6 +814,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -871,6 +907,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -924,12 +966,6 @@ inspect them.</p>
 <td>Name of the manager used to track field ownership. </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>namespace/v1</td>
-<td>The name of the API generator to use. </td>
-</tr>
-<tr>
 <td>output</td>
 <td>o</td>
 <td></td>
@@ -942,6 +978,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1000,12 +1042,6 @@ inspect them.</p>
 <td>Name of the manager used to track field ownership. </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>poddisruptionbudget/v1beta1/v2</td>
-<td>The name of the API generator to use. </td>
-</tr>
-<tr>
 <td>max-unavailable</td>
 <td></td>
 <td></td>
@@ -1036,6 +1072,12 @@ inspect them.</p>
 <td>A label selector to use for this budget. Only equality-based selector requirements are supported. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1129,6 +1171,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1217,6 +1265,12 @@ inspect them.</p>
 <td>A comma-delimited set of quota scopes that must all match each object tracked by the quota. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1309,6 +1363,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1404,6 +1464,12 @@ inspect them.</p>
 <td>Service accounts to bind to the role, in the format &lt;namespace&gt;:&lt;name&gt; </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1429,6 +1495,11 @@ inspect them.</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell">kubectl create<span class="hljs-built_in"> secret </span>docker-registry my-secret <span class="hljs-attribute">--docker-server</span>=DOCKER_REGISTRY_SERVER <span class="hljs-attribute">--docker-username</span>=DOCKER_USER <span class="hljs-attribute">--docker-password</span>=DOCKER_PASSWORD <span class="hljs-attribute">--docker-email</span>=DOCKER_EMAIL
 </code></pre>
+<blockquote class="code-block example">
+<p> Create a new secret named my-secret from ~/.docker/config.json</p>
+</blockquote>
+<pre class="code-block example"><code class="lang-shell">kubectl create<span class="hljs-built_in"> secret </span>docker-registry my-secret <span class="hljs-attribute">--from-file</span>=.dockerconfigjson=path/to/.docker/config.json
+</code></pre>
 <p>Create a new secret for use with Docker registries.</p>
 <p>  Dockercfg secrets are used to authenticate against Docker registries.</p>
 <p>  When using the Docker command line to push images, you can authenticate to a given registry by running:
@@ -1438,7 +1509,7 @@ inspect them.</p>
   nodes to pull images on your behalf, they have to have the credentials.  You can provide this information
   by creating a dockercfg secret and attaching it to your service account.</p>
 <h3 id="usage">Usage</h3>
-<p><code>$ kubectl create docker-registry NAME --docker-username=user --docker-password=password --docker-email=email [--docker-server=string] [--from-literal=key1=value1] [--dry-run=server|client|none]</code></p>
+<p><code>$ kubectl create docker-registry NAME --docker-username=user --docker-password=password --docker-email=email [--docker-server=string] [--from-file=[key=]source] [--dry-run=server|client|none]</code></p>
 <h3 id="flags">Flags</h3>
 <table>
 <thead>
@@ -1505,12 +1576,6 @@ inspect them.</p>
 <td>Key files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used.  Specifying a directory will iterate each named file in the directory that is a valid secret key. </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>secret-for-docker-registry/v1</td>
-<td>The name of the API generator to use. </td>
-</tr>
-<tr>
 <td>output</td>
 <td>o</td>
 <td></td>
@@ -1523,6 +1588,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1623,12 +1694,6 @@ inspect them.</p>
 <td>Specify a key and literal value to insert in secret (i.e. mykey=somevalue) </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>secret/v1</td>
-<td>The name of the API generator to use. </td>
-</tr>
-<tr>
 <td>output</td>
 <td>o</td>
 <td></td>
@@ -1641,6 +1706,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1713,12 +1784,6 @@ inspect them.</p>
 <td>Name of the manager used to track field ownership. </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>secret-for-tls/v1</td>
-<td>The name of the API generator to use. </td>
-</tr>
-<tr>
 <td>key</td>
 <td></td>
 <td></td>
@@ -1737,6 +1802,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -1818,6 +1889,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>tcp</td>
 <td></td>
 <td>[]</td>
@@ -1896,6 +1973,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>tcp</td>
 <td></td>
 <td>[]</td>
@@ -1967,6 +2050,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>tcp</td>
 <td></td>
 <td>[]</td>
@@ -2044,6 +2133,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>tcp</td>
 <td></td>
 <td>[]</td>
@@ -2103,12 +2198,6 @@ inspect them.</p>
 <td>Name of the manager used to track field ownership. </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>serviceaccount/v1</td>
-<td>The name of the API generator to use. </td>
-</tr>
-<tr>
 <td>output</td>
 <td>o</td>
 <td></td>
@@ -2121,6 +2210,12 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -2312,6 +2407,12 @@ inspect them.</p>
 <td>When printing, show all labels as the last column (default hide labels column) </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>sort-by</td>
 <td></td>
 <td></td>
@@ -2471,12 +2572,6 @@ inspect them.</p>
 <td>If true, immediately remove resources from API and bypass graceful deletion. Note that immediate deletion of some resources may result in inconsistency or data loss and requires confirmation. </td>
 </tr>
 <tr>
-<td>generator</td>
-<td></td>
-<td>run-pod/v1</td>
-<td>The name of the API generator to use, see <a href="http://kubernetes.io/docs/user-guide/kubectl-conventions/#generators">http://kubernetes.io/docs/user-guide/kubectl-conventions/#generators</a> for a list. </td>
-</tr>
-<tr>
 <td>grace-period</td>
 <td></td>
 <td>-1</td>
@@ -2556,7 +2651,7 @@ inspect them.</p>
 </tr>
 <tr>
 <td>quiet</td>
-<td></td>
+<td>q</td>
 <td>false</td>
 <td>If true, suppress prompt messages. </td>
 </tr>
@@ -2573,12 +2668,6 @@ inspect them.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
-<td>replicas</td>
-<td>r</td>
-<td>1</td>
-<td>Number of replicas to create for this container. Default is 1. </td>
-</tr>
-<tr>
 <td>requests</td>
 <td></td>
 <td></td>
@@ -2603,30 +2692,18 @@ inspect them.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
-<td>schedule</td>
-<td></td>
-<td></td>
-<td>A schedule in the Cron format the job should be run with. </td>
-</tr>
-<tr>
-<td>service-generator</td>
-<td></td>
-<td>service/v2</td>
-<td>The name of the generator to use for creating a service.  Only used if --expose is true </td>
-</tr>
-<tr>
-<td>service-overrides</td>
-<td></td>
-<td></td>
-<td>An inline JSON override for the generated service object. If this is non-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.  Only used if --expose is true. </td>
-</tr>
-<tr>
 <td>serviceaccount</td>
 <td></td>
 <td></td>
 <td>Service account to set in the pod spec. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>stdin</td>
 <td>i</td>
 <td>false</td>
@@ -2839,6 +2916,12 @@ inspect them.</p>
 <td>If non-empty, set the session affinity for the service to this; legal values: &#39;None&#39;, &#39;ClientIP&#39; </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>target-port</td>
 <td></td>
 <td></td>
@@ -3183,6 +3266,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>If true, apply runs in the server instead of the client. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -3281,6 +3370,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -3356,6 +3451,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Output format. One of: json&#124;yaml&#124;name&#124;go-template&#124;go-template-file&#124;template&#124;templatefile&#124;jsonpath&#124;jsonpath-as-json&#124;jsonpath-file. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -3568,6 +3669,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Selector (label query) to filter on, not including uninitialized ones, supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2). </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -3687,6 +3794,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -3796,7 +3909,7 @@ viewing your workloads in a Kubernetes cluster.</p>
 </tr>
 <tr>
 <td>quiet</td>
-<td></td>
+<td>q</td>
 <td>false</td>
 <td>If true, suppress informational messages. </td>
 </tr>
@@ -4015,6 +4128,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4037,25 +4156,96 @@ viewing your workloads in a Kubernetes cluster.</p>
 <hr>
 <h1 id="kustomize">kustomize</h1>
 <blockquote class="code-block example">
-<p> Use the current working directory</p>
+<p> Build the current working directory</p>
 </blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl%20kustomize%20.
+<pre class="code-block example"><code class="lang-shell"><span class="hljs-attribute">kubectl kustomize</span>
 </code></pre>
 <blockquote class="code-block example">
-<p> Use some shared configuration directory</p>
+<p> Build some shared configuration directory</p>
 </blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl kustomize /<span class="hljs-built_in">home</span>/configuration/production
+<pre class="code-block example"><code class="lang-shell">kubectl kustomize /<span class="hljs-built_in">home</span>/<span class="hljs-built_in">config</span>/production
 </code></pre>
 <blockquote class="code-block example">
-<p> Use a URL</p>
+<p> Build from github</p>
 </blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl kustomize github.com/kubernetes-sigs/kustomize.git/examples/helloWorld?<span class="hljs-built_in">ref</span>=v1<span class="hljs-number">.0</span><span class="hljs-number">.6</span>
+<pre class="code-block example"><code class="lang-shell">kubectl kustomize https:<span class="hljs-regexp">//gi</span>thub.com<span class="hljs-regexp">/kubernetes-sigs/</span>kustomize.git<span class="hljs-regexp">/examples/</span>helloWorld?ref=v1.<span class="hljs-number">0.6</span>
 </code></pre>
-<p>Print a set of API resources generated from instructions in a kustomization.yaml file.</p>
-<p> The argument must be the path to the directory containing the file, or a git repository URL with a path suffix specifying same with respect to the repository root.</p>
-<p> kubectl kustomize somedir</p>
+<p>Build a set of KRM resources using a &#39;kustomization.yaml&#39; file. The DIR argument must be a path to a directory containing &#39;kustomization.yaml&#39;, or a git repository URL with a path suffix specifying same with respect to the repository root. If DIR is omitted, &#39;.&#39; is assumed.</p>
 <h3 id="usage">Usage</h3>
-<p><code>$ kubectl kustomize &lt;dir&gt;</code></p>
+<p><code>$ kubectl kustomize DIR</code></p>
+<h3 id="flags">Flags</h3>
+<table>
+<thead>
+<tr>
+<th>Name</th>
+<th>Shorthand</th>
+<th>Default</th>
+<th>Usage</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td>allow-id-changes</td>
+<td></td>
+<td>false</td>
+<td>enable changes to a resourceId </td>
+</tr>
+<tr>
+<td>enable-alpha-plugins</td>
+<td></td>
+<td>false</td>
+<td>enable kustomize plugins </td>
+</tr>
+<tr>
+<td>enable-managedby-label</td>
+<td></td>
+<td>false</td>
+<td>enable adding app.kubernetes.io/managed-by </td>
+</tr>
+<tr>
+<td>env</td>
+<td>e</td>
+<td>[]</td>
+<td>a list of environment variables to be used by functions </td>
+</tr>
+<tr>
+<td>load-restrictor</td>
+<td></td>
+<td>LoadRestrictionsRootOnly</td>
+<td>if set to &#39;LoadRestrictionsNone&#39;, local kustomizations may load files from outside their root. This does, however, break the relocatability of the kustomization. </td>
+</tr>
+<tr>
+<td>mount</td>
+<td></td>
+<td>[]</td>
+<td>a list of storage options read from the filesystem </td>
+</tr>
+<tr>
+<td>network</td>
+<td></td>
+<td>false</td>
+<td>enable network access for functions that declare it </td>
+</tr>
+<tr>
+<td>network-name</td>
+<td></td>
+<td>bridge</td>
+<td>the docker network to run the container in </td>
+</tr>
+<tr>
+<td>output</td>
+<td>o</td>
+<td></td>
+<td>If specified, write output to this path. </td>
+</tr>
+<tr>
+<td>reorder</td>
+<td></td>
+<td>legacy</td>
+<td>Reorder the resources just before output. Use &#39;legacy&#39; to apply a legacy reordering (Namespaces first, Webhooks last, etc). Use &#39;none&#39; to suppress a final reordering. </td>
+</tr>
+</tbody>
+</table>
 <hr>
 <h1 id="label">label</h1>
 <blockquote class="code-block example">
@@ -4199,6 +4389,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Selector (label query) to filter on, not including uninitialized ones, supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2). </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4315,6 +4511,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4439,6 +4641,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4548,6 +4756,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>See the details, including podTemplate of the revision specified </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4614,6 +4828,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4685,6 +4905,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4751,6 +4977,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -4886,6 +5118,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5015,6 +5253,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Selector (label query) to filter on, supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2) </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5218,6 +5462,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Selector (label query) to filter on </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5330,6 +5580,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Selector (label query) to filter on, not including uninitialized ones, supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2) </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5460,6 +5716,12 @@ viewing your workloads in a Kubernetes cluster.</p>
 <td>Selector (label query) to filter on, not including uninitialized ones,supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2) </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5551,6 +5813,12 @@ kubectl create deployment my-dep -o yaml <span class="hljs-attribute">--dry-run<
 <td>If non-empty, the selectors update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5647,6 +5915,12 @@ kubectl create deployment my-dep -o yaml <span class="hljs-attribute">--dry-run<
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5758,6 +6032,12 @@ kubectl create deployment my-dep -o yaml <span class="hljs-attribute">--dry-run<
 <td>Service accounts to bind to the role </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5773,6 +6053,11 @@ kubectl create deployment my-dep -o yaml <span class="hljs-attribute">--dry-run<
 <pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-built_in">wait</span> <span class="hljs-comment">--for=condition=Ready pod/busybox1</span>
 </code></pre>
 <blockquote class="code-block example">
+<p> The default value of status condition is true, you can set false.</p>
+</blockquote>
+<pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-built_in">wait</span> --<span class="hljs-keyword">for</span>=condition=Ready=<span class="hljs-literal">false</span> pod/busybox1
+</code></pre>
+<blockquote class="code-block example">
 <p> Wait for the pod &quot;busybox1&quot; to be deleted, with a timeout of 60s, after having issued the &quot;delete&quot; command.</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell">kubectl delete pod/busybox1
@@ -5829,7 +6114,7 @@ kubectl wait <span class="hljs-attribute">--for</span>=delete pod/busybox1 <span
 <td>for</td>
 <td></td>
 <td></td>
-<td>The condition to wait on: <span>[</span>delete&#124;condition=condition-name<span>]</span>. </td>
+<td>The condition to wait on: <span>[</span>delete&#124;condition=condition-name<span>]</span>. The default status value of condition-name is true, you can set false with condition=condition-name=false </td>
 </tr>
 <tr>
 <td>local</td>
@@ -5856,6 +6141,12 @@ kubectl wait <span class="hljs-attribute">--for</span>=delete pod/busybox1 <span
 <td>Selector (label query) to filter on, supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2) </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -5880,7 +6171,7 @@ applications.</p>
 <hr>
 <h1 id="attach">attach</h1>
 <blockquote class="code-block example">
-<p> Get output from running pod mypod, using the first container by default</p>
+<p> Get output from running pod mypod, use the kubectl.kubernetes.io/default-container annotation # for selecting the container to be attached or the first container in the pod will be chosen</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-built_in">attach</span> mypod
 </code></pre>
@@ -5917,7 +6208,7 @@ applications.</p>
 <td>container</td>
 <td>c</td>
 <td></td>
-<td>Container name. If omitted, the first container in the pod will be chosen </td>
+<td>Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen </td>
 </tr>
 <tr>
 <td>pod-running-timeout</td>
@@ -5926,6 +6217,12 @@ applications.</p>
 <td>The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running </td>
 </tr>
 <tr>
+<td>quiet</td>
+<td>q</td>
+<td>false</td>
+<td>Only print output from the remote session </td>
+</tr>
+<tr>
 <td>stdin</td>
 <td>i</td>
 <td>false</td>
@@ -6035,7 +6332,7 @@ applications.</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell">kubectl auth reconcile -f <span class="hljs-keyword">my</span>-rbac-rules.yaml
 </code></pre>
-<p>Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects.</p>
+<p>Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRoleBinding objects.</p>
 <p> Missing objects are created, and the containing namespace is created for namespaced objects, if required.</p>
 <p> Existing roles are updated to include the permissions in the input objects, and remove extra permissions if --remove-extra-permissions is specified.</p>
 <p> Existing bindings are updated to include the subjects in the input objects, and remove extra subjects if --remove-extra-subjects is specified.</p>
@@ -6102,6 +6399,12 @@ applications.</p>
 <td>If true, removes extra subjects added to rolebindings </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -6159,7 +6462,7 @@ applications.</p>
 <td>container</td>
 <td>c</td>
 <td></td>
-<td>Container name. If omitted, the first container in the pod will be chosen </td>
+<td>Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen </td>
 </tr>
 <tr>
 <td>no-preserve</td>
@@ -6307,7 +6610,7 @@ applications.</p>
 <td>container</td>
 <td>c</td>
 <td></td>
-<td>Container name. If omitted, the first container in the pod will be chosen </td>
+<td>Container name. If omitted, use the kubectl.kubernetes.io/default-container annotation for selecting the container to be attached or the first container in the pod will be chosen </td>
 </tr>
 <tr>
 <td>filename</td>
@@ -6322,6 +6625,12 @@ applications.</p>
 <td>The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running </td>
 </tr>
 <tr>
+<td>quiet</td>
+<td>q</td>
+<td>false</td>
+<td>Only print output from the remote session </td>
+</tr>
+<tr>
 <td>stdin</td>
 <td>i</td>
 <td>false</td>
@@ -6568,22 +6877,22 @@ applications.</p>
 <hr>
 <h1 id="proxy">proxy</h1>
 <blockquote class="code-block example">
-<p> To proxy all of the kubernetes api and nothing else, use:</p>
+<p> To proxy all of the kubernetes api and nothing else.</p>
 </blockquote>
-<pre class="code-block example"><code class="lang-shell">$ kubectl<span class="hljs-built_in"> proxy </span><span class="hljs-attribute">--api-prefix</span>=/
+<pre class="code-block example"><code class="lang-shell">kubectl<span class="hljs-built_in"> proxy </span><span class="hljs-attribute">--api-prefix</span>=/
 </code></pre>
 <blockquote class="code-block example">
-<p> To proxy only part of the kubernetes api and also some static files:</p>
+<p> To proxy only part of the kubernetes api and also some static files. # You can get pods info with &#39;curl localhost:8001/api/v1/pods&#39;</p>
 </blockquote>
-<pre class="code-block example"><code class="lang-shell">$ kubectl<span class="hljs-built_in"> proxy </span><span class="hljs-attribute">--www</span>=/my/files <span class="hljs-attribute">--www-prefix</span>=/static/ <span class="hljs-attribute">--api-prefix</span>=/api/
+<pre class="code-block example"><code class="lang-shell">kubectl<span class="hljs-built_in"> proxy </span><span class="hljs-attribute">--www</span>=/my/files <span class="hljs-attribute">--www-prefix</span>=/static/ <span class="hljs-attribute">--api-prefix</span>=/api/
 </code></pre>
 <blockquote class="code-block example">
-<p> The above lets you &#39;curl localhost:8001/api/v1/pods&#39;. # To proxy the entire kubernetes api at a different root, use:</p>
+<p> To proxy the entire kubernetes api at a different root. # You can get pods info with &#39;curl localhost:8001/custom/api/v1/pods&#39;</p>
 </blockquote>
-<pre class="code-block example"><code class="lang-shell">$ kubectl<span class="hljs-built_in"> proxy </span><span class="hljs-attribute">--api-prefix</span>=/custom/
+<pre class="code-block example"><code class="lang-shell">kubectl<span class="hljs-built_in"> proxy </span><span class="hljs-attribute">--api-prefix</span>=/custom/
 </code></pre>
 <blockquote class="code-block example">
-<p> The above lets you &#39;curl localhost:8001/custom/api/v1/pods&#39; # Run a proxy to kubernetes apiserver on port 8011, serving static content from ./local/www/</p>
+<p> Run a proxy to kubernetes apiserver on port 8011, serving static content from ./local/www/</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell">kubectl<span class="hljs-built_in"> proxy </span><span class="hljs-attribute">--port</span>=8011 <span class="hljs-attribute">--www</span>=./local/www/
 </code></pre>
@@ -6687,7 +6996,7 @@ applications.</p>
 </table>
 <hr>
 <h1 id="top">top</h1>
-<p>Display Resource (CPU/Memory/Storage) usage.</p>
+<p>Display Resource (CPU/Memory) usage.</p>
 <p> The top command allows you to see the resource consumption for nodes or pods.</p>
 <p> This command requires Metrics Server to be correctly configured and working on the server.</p>
 <h3 id="usage">Usage</h3>
@@ -6704,7 +7013,7 @@ applications.</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell">kubectl top <span class="hljs-keyword">node</span> <span class="hljs-title">NODE_NAME</span>
 </code></pre>
-<p>Display Resource (CPU/Memory/Storage) usage of nodes.</p>
+<p>Display Resource (CPU/Memory) usage of nodes.</p>
 <p> The top-node command allows you to see the resource consumption of nodes.</p>
 <h3 id="usage">Usage</h3>
 <p><code>$ kubectl top node [NAME | -l label]</code></p>
@@ -6720,30 +7029,6 @@ applications.</p>
 </thead>
 <tbody>
 <tr>
-<td>heapster-namespace</td>
-<td></td>
-<td>kube-system</td>
-<td>Namespace Heapster service is located in </td>
-</tr>
-<tr>
-<td>heapster-port</td>
-<td></td>
-<td></td>
-<td>Port name in service to use </td>
-</tr>
-<tr>
-<td>heapster-scheme</td>
-<td></td>
-<td>http</td>
-<td>Scheme (http or https) to connect to Heapster as </td>
-</tr>
-<tr>
-<td>heapster-service</td>
-<td></td>
-<td>heapster</td>
-<td>Name of Heapster service </td>
-</tr>
-<tr>
 <td>no-headers</td>
 <td></td>
 <td>false</td>
@@ -6761,6 +7046,12 @@ applications.</p>
 <td></td>
 <td>If non-empty, sort nodes list using specified field. The field can be either &#39;cpu&#39; or &#39;memory&#39;. </td>
 </tr>
+<tr>
+<td>use-protocol-buffers</td>
+<td></td>
+<td>false</td>
+<td>If present, protocol-buffers will be used to request metrics. </td>
+</tr>
 </tbody>
 </table>
 <hr>
@@ -6785,7 +7076,7 @@ applications.</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell">kubectl top pod -l <span class="hljs-attribute">name</span>=myLabel
 </code></pre>
-<p>Display Resource (CPU/Memory/Storage) usage of pods.</p>
+<p>Display Resource (CPU/Memory) usage of pods.</p>
 <p> The &#39;top pod&#39; command allows you to see the resource consumption of pods.</p>
 <p> Due to the metrics pipeline delay, they may be unavailable for a few minutes since pod creation.</p>
 <h3 id="usage">Usage</h3>
@@ -6831,6 +7122,12 @@ applications.</p>
 <td></td>
 <td>If non-empty, sort pods list using specified field. The field can be either &#39;cpu&#39; or &#39;memory&#39;. </td>
 </tr>
+<tr>
+<td>use-protocol-buffers</td>
+<td></td>
+<td>false</td>
+<td>If present, protocol-buffers will be used to request metrics. </td>
+</tr>
 </tbody>
 </table>
 <h1 id="-strong-cluster-management-strong-"><strong>CLUSTER MANAGEMENT</strong></h1>
@@ -6904,6 +7201,12 @@ applications.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -6965,6 +7268,12 @@ applications.</p>
 <td>Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory. </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -7056,6 +7365,12 @@ applications.</p>
 <td>The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -7171,6 +7486,12 @@ applications.</p>
 <td>Ignore DaemonSet-managed pods. </td>
 </tr>
 <tr>
+<td>ignore-errors</td>
+<td></td>
+<td>false</td>
+<td>Ignore errors occurred between drain nodes in group. </td>
+</tr>
+<tr>
 <td>pod-selector</td>
 <td></td>
 <td></td>
@@ -7288,6 +7609,12 @@ applications.</p>
 <td>Selector (label query) to filter on, supports &#39;=&#39;, &#39;==&#39;, and &#39;!=&#39;.(e.g. -l key1=value1,key2=value2) </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
@@ -7343,157 +7670,6 @@ applications.</p>
 <h3 id="usage">Usage</h3>
 <p><code>$ kubectl alpha</code></p>
 <hr>
-<h2 id="-em-debug-em-"><em>debug</em></h2>
-<blockquote class="code-block example">
-<p> Create an interactive debugging session in pod mypod and immediately attach to it. # (requires the EphemeralContainers feature to be enabled in the cluster)</p>
-</blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-builtin-name">debug</span> mypod -it <span class="hljs-attribute">--image</span>=busybox
-</code></pre>
-<blockquote class="code-block example">
-<p> Create a debug container named debugger using a custom automated debugging image. # (requires the EphemeralContainers feature to be enabled in the cluster)</p>
-</blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-builtin-name">debug</span> <span class="hljs-attribute">--image</span>=myproj/debug-tools -c debugger mypod
-</code></pre>
-<blockquote class="code-block example">
-<p> Create a copy of mypod adding a debug container and attach to it</p>
-</blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-builtin-name">debug</span> mypod -it <span class="hljs-attribute">--image</span>=busybox <span class="hljs-attribute">--copy-to</span>=my-debugger
-</code></pre>
-<blockquote class="code-block example">
-<p> Create a copy of mypod changing the command of mycontainer</p>
-</blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-builtin-name">debug</span> mypod -it <span class="hljs-attribute">--copy-to</span>=my-debugger <span class="hljs-attribute">--container</span>=mycontainer -- sh
-</code></pre>
-<blockquote class="code-block example">
-<p> Create a copy of mypod changing all container images to busybox</p>
-</blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-builtin-name">debug</span> mypod <span class="hljs-attribute">--copy-to</span>=my-debugger <span class="hljs-attribute">--set-image</span>=*=busybox
-</code></pre>
-<blockquote class="code-block example">
-<p> Create a copy of mypod adding a debug container and changing container images</p>
-</blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl <span class="hljs-builtin-name">debug</span> mypod -it <span class="hljs-attribute">--copy-to</span>=my-debugger <span class="hljs-attribute">--image</span>=debian <span class="hljs-attribute">--set-image</span>=app=app:debug,sidecar=sidecar:debug
-</code></pre>
-<blockquote class="code-block example">
-<p> Create an interactive debugging session on a node and immediately attach to it. # The container will run in the host namespaces and the host&#39;s filesystem will be mounted at /host</p>
-</blockquote>
-<pre class="code-block example"><code class="lang-shell">kubectl debug <span class="hljs-keyword">node</span><span class="hljs-title">/mynode</span> -it --<span class="hljs-attr">image=</span>busybox
-</code></pre>
-<p>NOTE: &quot;kubectl alpha debug&quot; is deprecated and will be removed in release 1.21. Please use &quot;kubectl debug&quot; instead.</p>
-<p>Debug cluster resources using interactive debugging containers.</p>
-<p> &#39;debug&#39; provides automation for common debugging tasks for cluster objects identified by resource and name. Pods will be used by default if no resource is specified.</p>
-<p> The action taken by &#39;debug&#39; varies depending on what resource is specified. Supported actions include:</p>
-<ul>
-<li>Workload: Create a copy of an existing pod with certain attributes changed, for example changing the image tag to a new version.</li>
-<li>Workload: Add an ephemeral container to an already running pod, for example to add debugging utilities without restarting the pod.</li>
-<li>Node: Create a new pod that runs in the node&#39;s host namespaces and can access the node&#39;s filesystem.</li>
-</ul>
-<h3 id="usage">Usage</h3>
-<p><code>$ kubectl alpha debug (POD | TYPE[[.VERSION].GROUP]/NAME) [ -- COMMAND [args...] ]</code></p>
-<h3 id="flags">Flags</h3>
-<table>
-<thead>
-<tr>
-<th>Name</th>
-<th>Shorthand</th>
-<th>Default</th>
-<th>Usage</th>
-</tr>
-</thead>
-<tbody>
-<tr>
-<td>arguments-only</td>
-<td></td>
-<td>false</td>
-<td>If specified, everything after -- will be passed to the new container as Args instead of Command. </td>
-</tr>
-<tr>
-<td>attach</td>
-<td></td>
-<td>false</td>
-<td>If true, wait for the container to start running, and then attach as if &#39;kubectl attach ...&#39; were called.  Default false, unless &#39;-i/--stdin&#39; is set, in which case the default is true. </td>
-</tr>
-<tr>
-<td>container</td>
-<td>c</td>
-<td></td>
-<td>Container name to use for debug container. </td>
-</tr>
-<tr>
-<td>copy-to</td>
-<td></td>
-<td></td>
-<td>Create a copy of the target Pod with this name. </td>
-</tr>
-<tr>
-<td>env</td>
-<td></td>
-<td>[]</td>
-<td>Environment variables to set in the container. </td>
-</tr>
-<tr>
-<td>image</td>
-<td></td>
-<td></td>
-<td>Container image to use for debug container. </td>
-</tr>
-<tr>
-<td>image-pull-policy</td>
-<td></td>
-<td></td>
-<td>The image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server. </td>
-</tr>
-<tr>
-<td>quiet</td>
-<td></td>
-<td>false</td>
-<td>If true, suppress informational messages. </td>
-</tr>
-<tr>
-<td>replace</td>
-<td></td>
-<td>false</td>
-<td>When used with &#39;--copy-to&#39;, delete the original Pod. </td>
-</tr>
-<tr>
-<td>same-node</td>
-<td></td>
-<td>false</td>
-<td>When used with &#39;--copy-to&#39;, schedule the copy of target Pod on the same node. </td>
-</tr>
-<tr>
-<td>set-image</td>
-<td></td>
-<td>[]</td>
-<td>When used with &#39;--copy-to&#39;, a list of name=image pairs for changing container images, similar to how &#39;kubectl set image&#39; works. </td>
-</tr>
-<tr>
-<td>share-processes</td>
-<td></td>
-<td>true</td>
-<td>When used with &#39;--copy-to&#39;, enable process namespace sharing in the copy. </td>
-</tr>
-<tr>
-<td>stdin</td>
-<td>i</td>
-<td>false</td>
-<td>Keep stdin open on the container(s) in the pod, even if nothing is attached. </td>
-</tr>
-<tr>
-<td>target</td>
-<td></td>
-<td></td>
-<td>When using an ephemeral container, target processes in this container name. </td>
-</tr>
-<tr>
-<td>tty</td>
-<td>t</td>
-<td>false</td>
-<td>Allocate a TTY for the debugging container. </td>
-</tr>
-</tbody>
-</table>
-<hr>
 <h1 id="api-resources">api-resources</h1>
 <blockquote class="code-block example">
 <p> Print the supported API Resources</p>
@@ -7606,7 +7782,7 @@ applications.</p>
 <pre class="code-block example"><code class="lang-shell">source &lt;(<span class="hljs-name">kubectl</span> completion bash)
 </code></pre>
 <blockquote class="code-block example#">
-<p> Write bash completion code to a file and source if from .bash_profile</p>
+<p> Write bash completion code to a file and source it from .bash_profile</p>
 </blockquote>
 <pre class="code-block example"><code class="lang-shell"><span class="hljs-symbol">kubectl</span> completion <span class="hljs-keyword">bash </span>&gt; ~/.kube/completion.<span class="hljs-keyword">bash.inc
 </span><span class="hljs-symbol">printf</span> <span class="hljs-string">"</span>
@@ -8092,6 +8268,12 @@ source <span class="hljs-variable">$HOME</span>/.bash_profile</span>
 <td>Display raw byte data </td>
 </tr>
 <tr>
+<td>show-managed-fields</td>
+<td></td>
+<td>false</td>
+<td>If true, keep the managedFields when printing objects in JSON or YAML format. </td>
+</tr>
+<tr>
 <td>template</td>
 <td></td>
 <td></td>
diff --git a/static/docs/reference/generated/kubectl/navData.js b/static/docs/reference/generated/kubectl/navData.js
index e63115561c..e6f8f066de 100644
--- a/static/docs/reference/generated/kubectl/navData.js
+++ b/static/docs/reference/generated/kubectl/navData.js
@@ -1 +1 @@
-(function(){navData = {"toc":[{"section":"version","subsections":[]},{"section":"plugin","subsections":[{"section":"-em-list-em-"}]},{"section":"options","subsections":[]},{"section":"explain","subsections":[]},{"section":"config","subsections":[{"section":"-em-view-em-"},{"section":"-em-use-context-em-"},{"section":"-em-unset-em-"},{"section":"-em-set-credentials-em-"},{"section":"-em-set-context-em-"},{"section":"-em-set-cluster-em-"},{"section":"-em-set-em-"},{"section":"-em-rename-context-em-"},{"section":"-em-get-users-em-"},{"section":"-em-get-contexts-em-"},{"section":"-em-get-clusters-em-"},{"section":"-em-delete-user-em-"},{"section":"-em-delete-context-em-"},{"section":"-em-delete-cluster-em-"},{"section":"-em-current-context-em-"}]},{"section":"completion","subsections":[]},{"section":"api-resources","subsections":[]},{"section":"alpha","subsections":[{"section":"-em-debug-em-"}]},{"section":"-strong-kubectl-settings-and-usage-strong-","subsections":[]},{"section":"uncordon","subsections":[]},{"section":"taint","subsections":[]},{"section":"drain","subsections":[]},{"section":"cordon","subsections":[]},{"section":"cluster-info","subsections":[{"section":"-em-dump-em-"}]},{"section":"certificate","subsections":[{"section":"-em-deny-em-"},{"section":"-em-approve-em-"}]},{"section":"api-versions","subsections":[]},{"section":"-strong-cluster-management-strong-","subsections":[]},{"section":"top","subsections":[{"section":"-em-pod-em-"},{"section":"-em-node-em-"}]},{"section":"proxy","subsections":[]},{"section":"port-forward","subsections":[]},{"section":"logs","subsections":[]},{"section":"exec","subsections":[]},{"section":"describe","subsections":[]},{"section":"cp","subsections":[]},{"section":"auth","subsections":[{"section":"-em-reconcile-em-"},{"section":"-em-can-i-em-"}]},{"section":"attach","subsections":[]},{"section":"-strong-working-with-apps-strong-","subsections":[]},{"section":"wait","subsections":[]},{"section":"set","subsections":[{"section":"-em-subject-em-"},{"section":"-em-serviceaccount-em--1"},{"section":"-em-selector-em-"},{"section":"-em-resources-em-"},{"section":"-em-image-em-"},{"section":"-em-env-em-"}]},{"section":"scale","subsections":[]},{"section":"rollout","subsections":[{"section":"-em-undo-em-"},{"section":"-em-status-em-"},{"section":"-em-resume-em-"},{"section":"-em-restart-em-"},{"section":"-em-pause-em-"},{"section":"-em-history-em-"}]},{"section":"replace","subsections":[]},{"section":"patch","subsections":[]},{"section":"label","subsections":[]},{"section":"kustomize","subsections":[]},{"section":"edit","subsections":[]},{"section":"diff","subsections":[]},{"section":"debug","subsections":[]},{"section":"autoscale","subsections":[]},{"section":"annotate","subsections":[]},{"section":"apply","subsections":[{"section":"-em-view-last-applied-em-"},{"section":"-em-set-last-applied-em-"},{"section":"-em-edit-last-applied-em-"}]},{"section":"-strong-app-management-strong-","subsections":[]},{"section":"delete","subsections":[]},{"section":"expose","subsections":[]},{"section":"run","subsections":[]},{"section":"get","subsections":[]},{"section":"create","subsections":[{"section":"-em-serviceaccount-em-"},{"section":"-em-service-nodeport-em-"},{"section":"-em-service-loadbalancer-em-"},{"section":"-em-service-externalname-em-"},{"section":"-em-service-clusterip-em-"},{"section":"-em-service-em-"},{"section":"-em-secret-tls-em-"},{"section":"-em-secret-generic-em-"},{"section":"-em-secret-docker-registry-em-"},{"section":"-em-secret-em-"},{"section":"-em-rolebinding-em-"},{"section":"-em-role-em-"},{"section":"-em-quota-em-"},{"section":"-em-priorityclass-em-"},{"section":"-em-poddisruptionbudget-em-"},{"section":"-em-namespace-em-"},{"section":"-em-job-em-"},{"section":"-em-ingress-em-"},{"section":"-em-deployment-em-"},{"section":"-em-cronjob-em-"},{"section":"-em-configmap-em-"},{"section":"-em-clusterrolebinding-em-"},{"section":"-em-clusterrole-em-"}]},{"section":"-strong-getting-started-strong-","subsections":[]}],"flatToc":["version","-em-list-em-","plugin","options","explain","-em-view-em-","-em-use-context-em-","-em-unset-em-","-em-set-credentials-em-","-em-set-context-em-","-em-set-cluster-em-","-em-set-em-","-em-rename-context-em-","-em-get-users-em-","-em-get-contexts-em-","-em-get-clusters-em-","-em-delete-user-em-","-em-delete-context-em-","-em-delete-cluster-em-","-em-current-context-em-","config","completion","api-resources","-em-debug-em-","alpha","-strong-kubectl-settings-and-usage-strong-","uncordon","taint","drain","cordon","-em-dump-em-","cluster-info","-em-deny-em-","-em-approve-em-","certificate","api-versions","-strong-cluster-management-strong-","-em-pod-em-","-em-node-em-","top","proxy","port-forward","logs","exec","describe","cp","-em-reconcile-em-","-em-can-i-em-","auth","attach","-strong-working-with-apps-strong-","wait","-em-subject-em-","-em-serviceaccount-em--1","-em-selector-em-","-em-resources-em-","-em-image-em-","-em-env-em-","set","scale","-em-undo-em-","-em-status-em-","-em-resume-em-","-em-restart-em-","-em-pause-em-","-em-history-em-","rollout","replace","patch","label","kustomize","edit","diff","debug","autoscale","annotate","-em-view-last-applied-em-","-em-set-last-applied-em-","-em-edit-last-applied-em-","apply","-strong-app-management-strong-","delete","expose","run","get","-em-serviceaccount-em-","-em-service-nodeport-em-","-em-service-loadbalancer-em-","-em-service-externalname-em-","-em-service-clusterip-em-","-em-service-em-","-em-secret-tls-em-","-em-secret-generic-em-","-em-secret-docker-registry-em-","-em-secret-em-","-em-rolebinding-em-","-em-role-em-","-em-quota-em-","-em-priorityclass-em-","-em-poddisruptionbudget-em-","-em-namespace-em-","-em-job-em-","-em-ingress-em-","-em-deployment-em-","-em-cronjob-em-","-em-configmap-em-","-em-clusterrolebinding-em-","-em-clusterrole-em-","create","-strong-getting-started-strong-"]};})();
\ No newline at end of file
+(function(){navData = {"toc":[{"section":"version","subsections":[]},{"section":"plugin","subsections":[{"section":"-em-list-em-"}]},{"section":"options","subsections":[]},{"section":"explain","subsections":[]},{"section":"config","subsections":[{"section":"-em-view-em-"},{"section":"-em-use-context-em-"},{"section":"-em-unset-em-"},{"section":"-em-set-credentials-em-"},{"section":"-em-set-context-em-"},{"section":"-em-set-cluster-em-"},{"section":"-em-set-em-"},{"section":"-em-rename-context-em-"},{"section":"-em-get-users-em-"},{"section":"-em-get-contexts-em-"},{"section":"-em-get-clusters-em-"},{"section":"-em-delete-user-em-"},{"section":"-em-delete-context-em-"},{"section":"-em-delete-cluster-em-"},{"section":"-em-current-context-em-"}]},{"section":"completion","subsections":[]},{"section":"api-resources","subsections":[]},{"section":"alpha","subsections":[]},{"section":"-strong-kubectl-settings-and-usage-strong-","subsections":[]},{"section":"uncordon","subsections":[]},{"section":"taint","subsections":[]},{"section":"drain","subsections":[]},{"section":"cordon","subsections":[]},{"section":"cluster-info","subsections":[{"section":"-em-dump-em-"}]},{"section":"certificate","subsections":[{"section":"-em-deny-em-"},{"section":"-em-approve-em-"}]},{"section":"api-versions","subsections":[]},{"section":"-strong-cluster-management-strong-","subsections":[]},{"section":"top","subsections":[{"section":"-em-pod-em-"},{"section":"-em-node-em-"}]},{"section":"proxy","subsections":[]},{"section":"port-forward","subsections":[]},{"section":"logs","subsections":[]},{"section":"exec","subsections":[]},{"section":"describe","subsections":[]},{"section":"cp","subsections":[]},{"section":"auth","subsections":[{"section":"-em-reconcile-em-"},{"section":"-em-can-i-em-"}]},{"section":"attach","subsections":[]},{"section":"-strong-working-with-apps-strong-","subsections":[]},{"section":"wait","subsections":[]},{"section":"set","subsections":[{"section":"-em-subject-em-"},{"section":"-em-serviceaccount-em--1"},{"section":"-em-selector-em-"},{"section":"-em-resources-em-"},{"section":"-em-image-em-"},{"section":"-em-env-em-"}]},{"section":"scale","subsections":[]},{"section":"rollout","subsections":[{"section":"-em-undo-em-"},{"section":"-em-status-em-"},{"section":"-em-resume-em-"},{"section":"-em-restart-em-"},{"section":"-em-pause-em-"},{"section":"-em-history-em-"}]},{"section":"replace","subsections":[]},{"section":"patch","subsections":[]},{"section":"label","subsections":[]},{"section":"kustomize","subsections":[]},{"section":"edit","subsections":[]},{"section":"diff","subsections":[]},{"section":"debug","subsections":[]},{"section":"autoscale","subsections":[]},{"section":"annotate","subsections":[]},{"section":"apply","subsections":[{"section":"-em-view-last-applied-em-"},{"section":"-em-set-last-applied-em-"},{"section":"-em-edit-last-applied-em-"}]},{"section":"-strong-app-management-strong-","subsections":[]},{"section":"delete","subsections":[]},{"section":"expose","subsections":[]},{"section":"run","subsections":[]},{"section":"get","subsections":[]},{"section":"create","subsections":[{"section":"-em-serviceaccount-em-"},{"section":"-em-service-nodeport-em-"},{"section":"-em-service-loadbalancer-em-"},{"section":"-em-service-externalname-em-"},{"section":"-em-service-clusterip-em-"},{"section":"-em-service-em-"},{"section":"-em-secret-tls-em-"},{"section":"-em-secret-generic-em-"},{"section":"-em-secret-docker-registry-em-"},{"section":"-em-secret-em-"},{"section":"-em-rolebinding-em-"},{"section":"-em-role-em-"},{"section":"-em-quota-em-"},{"section":"-em-priorityclass-em-"},{"section":"-em-poddisruptionbudget-em-"},{"section":"-em-namespace-em-"},{"section":"-em-job-em-"},{"section":"-em-ingress-em-"},{"section":"-em-deployment-em-"},{"section":"-em-cronjob-em-"},{"section":"-em-configmap-em-"},{"section":"-em-clusterrolebinding-em-"},{"section":"-em-clusterrole-em-"}]},{"section":"-strong-getting-started-strong-","subsections":[]}],"flatToc":["version","-em-list-em-","plugin","options","explain","-em-view-em-","-em-use-context-em-","-em-unset-em-","-em-set-credentials-em-","-em-set-context-em-","-em-set-cluster-em-","-em-set-em-","-em-rename-context-em-","-em-get-users-em-","-em-get-contexts-em-","-em-get-clusters-em-","-em-delete-user-em-","-em-delete-context-em-","-em-delete-cluster-em-","-em-current-context-em-","config","completion","api-resources","alpha","-strong-kubectl-settings-and-usage-strong-","uncordon","taint","drain","cordon","-em-dump-em-","cluster-info","-em-deny-em-","-em-approve-em-","certificate","api-versions","-strong-cluster-management-strong-","-em-pod-em-","-em-node-em-","top","proxy","port-forward","logs","exec","describe","cp","-em-reconcile-em-","-em-can-i-em-","auth","attach","-strong-working-with-apps-strong-","wait","-em-subject-em-","-em-serviceaccount-em--1","-em-selector-em-","-em-resources-em-","-em-image-em-","-em-env-em-","set","scale","-em-undo-em-","-em-status-em-","-em-resume-em-","-em-restart-em-","-em-pause-em-","-em-history-em-","rollout","replace","patch","label","kustomize","edit","diff","debug","autoscale","annotate","-em-view-last-applied-em-","-em-set-last-applied-em-","-em-edit-last-applied-em-","apply","-strong-app-management-strong-","delete","expose","run","get","-em-serviceaccount-em-","-em-service-nodeport-em-","-em-service-loadbalancer-em-","-em-service-externalname-em-","-em-service-clusterip-em-","-em-service-em-","-em-secret-tls-em-","-em-secret-generic-em-","-em-secret-docker-registry-em-","-em-secret-em-","-em-rolebinding-em-","-em-role-em-","-em-quota-em-","-em-priorityclass-em-","-em-poddisruptionbudget-em-","-em-namespace-em-","-em-job-em-","-em-ingress-em-","-em-deployment-em-","-em-cronjob-em-","-em-configmap-em-","-em-clusterrolebinding-em-","-em-clusterrole-em-","create","-strong-getting-started-strong-"]};})();
\ No newline at end of file
diff --git a/static/docs/reference/generated/kubernetes-api/v1.21/index.html b/static/docs/reference/generated/kubernetes-api/v1.21/index.html
new file mode 100644
index 0000000000..ddab130403
--- /dev/null
+++ b/static/docs/reference/generated/kubernetes-api/v1.21/index.html
@@ -0,0 +1,52412 @@
+<!DOCTYPE html>
+<HTML>
+<HEAD>
+<META charset="UTF-8">
+<TITLE>Kubernetes API Reference Docs</TITLE>
+<LINK rel="shortcut icon" href="favicon.ico" type="image/vnd.microsoft.icon">
+<LINK rel="stylesheet" href="/css/bootstrap-4.3.1.min.css">
+<LINK rel="stylesheet" href="/css/fontawesome-4.7.0.min.css" type="text/css">
+<LINK rel="stylesheet" href="/css/style_apiref.css" type="text/css">
+</HEAD>
+<BODY>
+<DIV id="wrapper" class="container-fluid">
+<DIV class="row">
+<DIV id="sidebar-wrapper" class="col-xs-4 col-sm-3 col-md-2 side-nav side-bar-nav">
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-api-overview-strong-" class="nav-item"><STRONG>Overview</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-api-groups-strong-" class="nav-item"><STRONG>API Groups</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-workloads-apis-strong-" class="nav-item"><STRONG>WORKLOADS APIS</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#container-v1-core" class="nav-item">Container v1 core</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#cronjob-v1beta1-batch" class="nav-item">CronJob v1beta1 batch</A></LI>
+ <UL id="cronjob-v1beta1-batch-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-cronjob-v1beta1-batch" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-cronjob-v1beta1-batch" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-cronjob-v1beta1-batch" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-cronjob-v1beta1-batch" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-cronjob-v1beta1-batch" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-cronjob-v1beta1-batch" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-cronjob-v1beta1-batch" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-cronjob-v1beta1-batch" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-cronjob-v1beta1-batch" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-cronjob-v1beta1-batch" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-cronjob-v1beta1-batch" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-cronjob-v1beta1-batch" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-cronjob-v1beta1-batch" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-cronjob-v1beta1-batch" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#daemonset-v1-apps" class="nav-item">DaemonSet v1 apps</A></LI>
+ <UL id="daemonset-v1-apps-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-daemonset-v1-apps-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-daemonset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-daemonset-v1-apps" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-daemonset-v1-apps" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-daemonset-v1-apps" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-daemonset-v1-apps" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-daemonset-v1-apps" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-daemonset-v1-apps-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-daemonset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-daemonset-v1-apps" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-daemonset-v1-apps" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-daemonset-v1-apps" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-daemonset-v1-apps" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-daemonset-v1-apps" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-daemonset-v1-apps" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-daemonset-v1-apps-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-daemonset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-daemonset-v1-apps" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-daemonset-v1-apps" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-daemonset-v1-apps" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#deployment-v1-apps" class="nav-item">Deployment v1 apps</A></LI>
+ <UL id="deployment-v1-apps-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-deployment-v1-apps-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-deployment-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-deployment-v1-apps" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-deployment-v1-apps" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-deployment-v1-apps" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-deployment-v1-apps" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-deployment-v1-apps" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-deployment-v1-apps-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-deployment-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-deployment-v1-apps" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-deployment-v1-apps" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-deployment-v1-apps" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-deployment-v1-apps" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-deployment-v1-apps" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-deployment-v1-apps" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-deployment-v1-apps-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-deployment-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-deployment-v1-apps" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-deployment-v1-apps" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-deployment-v1-apps" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-misc-operations-deployment-v1-apps-strong-" class="nav-item"><STRONG>Misc Operations</STRONG></A></LI>
+   <UL id="-strong-misc-operations-deployment-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-scale-deployment-v1-apps" class="nav-item">Read Scale</A></LI>
+    <LI class="nav-level-2"><A href="#replace-scale-deployment-v1-apps" class="nav-item">Replace Scale</A></LI>
+    <LI class="nav-level-2"><A href="#patch-scale-deployment-v1-apps" class="nav-item">Patch Scale</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#job-v1-batch" class="nav-item">Job v1 batch</A></LI>
+ <UL id="job-v1-batch-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-job-v1-batch-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-job-v1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-job-v1-batch" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-job-v1-batch" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-job-v1-batch" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-job-v1-batch" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-job-v1-batch" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-job-v1-batch-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-job-v1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-job-v1-batch" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-job-v1-batch" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-job-v1-batch" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-job-v1-batch" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-job-v1-batch" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-job-v1-batch" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-job-v1-batch-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-job-v1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-job-v1-batch" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-job-v1-batch" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-job-v1-batch" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#pod-v1-core" class="nav-item">Pod v1 core</A></LI>
+ <UL id="pod-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-pod-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-pod-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-pod-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#create-eviction-pod-v1-core" class="nav-item">Create Eviction</A></LI>
+    <LI class="nav-level-2"><A href="#patch-pod-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-pod-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-pod-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-pod-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-pod-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-pod-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-pod-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-pod-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-pod-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-pod-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-pod-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-pod-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-pod-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-pod-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-pod-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-pod-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-pod-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-proxy-operations-pod-v1-core-strong-" class="nav-item"><STRONG>Proxy Operations</STRONG></A></LI>
+   <UL id="-strong-proxy-operations-pod-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-connect-portforward-pod-v1-core" class="nav-item">Create Connect Portforward</A></LI>
+    <LI class="nav-level-2"><A href="#create-connect-proxy-pod-v1-core" class="nav-item">Create Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#create-connect-proxy-path-pod-v1-core" class="nav-item">Create Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#delete-connect-proxy-pod-v1-core" class="nav-item">Delete Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#delete-connect-proxy-path-pod-v1-core" class="nav-item">Delete Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#get-connect-portforward-pod-v1-core" class="nav-item">Get Connect Portforward</A></LI>
+    <LI class="nav-level-2"><A href="#get-connect-proxy-pod-v1-core" class="nav-item">Get Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#get-connect-proxy-path-pod-v1-core" class="nav-item">Get Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#head-connect-proxy-pod-v1-core" class="nav-item">Head Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#head-connect-proxy-path-pod-v1-core" class="nav-item">Head Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#replace-connect-proxy-pod-v1-core" class="nav-item">Replace Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#replace-connect-proxy-path-pod-v1-core" class="nav-item">Replace Connect Proxy Path</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-misc-operations-pod-v1-core-strong-" class="nav-item"><STRONG>Misc Operations</STRONG></A></LI>
+   <UL id="-strong-misc-operations-pod-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-log-pod-v1-core" class="nav-item">Read Log</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#replicaset-v1-apps" class="nav-item">ReplicaSet v1 apps</A></LI>
+ <UL id="replicaset-v1-apps-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-replicaset-v1-apps-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-replicaset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-replicaset-v1-apps" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-replicaset-v1-apps" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-replicaset-v1-apps" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-replicaset-v1-apps" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-replicaset-v1-apps" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-replicaset-v1-apps-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-replicaset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-replicaset-v1-apps" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-replicaset-v1-apps" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-replicaset-v1-apps" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-replicaset-v1-apps" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-replicaset-v1-apps" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-replicaset-v1-apps" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-replicaset-v1-apps-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-replicaset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-replicaset-v1-apps" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-replicaset-v1-apps" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-replicaset-v1-apps" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-misc-operations-replicaset-v1-apps-strong-" class="nav-item"><STRONG>Misc Operations</STRONG></A></LI>
+   <UL id="-strong-misc-operations-replicaset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-scale-replicaset-v1-apps" class="nav-item">Read Scale</A></LI>
+    <LI class="nav-level-2"><A href="#replace-scale-replicaset-v1-apps" class="nav-item">Replace Scale</A></LI>
+    <LI class="nav-level-2"><A href="#patch-scale-replicaset-v1-apps" class="nav-item">Patch Scale</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#replicationcontroller-v1-core" class="nav-item">ReplicationController v1 core</A></LI>
+ <UL id="replicationcontroller-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-replicationcontroller-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-replicationcontroller-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-replicationcontroller-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-replicationcontroller-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-replicationcontroller-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-replicationcontroller-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-replicationcontroller-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-replicationcontroller-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-replicationcontroller-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-replicationcontroller-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-replicationcontroller-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-replicationcontroller-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-replicationcontroller-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-replicationcontroller-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-replicationcontroller-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-replicationcontroller-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-replicationcontroller-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-replicationcontroller-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-replicationcontroller-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-replicationcontroller-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-misc-operations-replicationcontroller-v1-core-strong-" class="nav-item"><STRONG>Misc Operations</STRONG></A></LI>
+   <UL id="-strong-misc-operations-replicationcontroller-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-scale-replicationcontroller-v1-core" class="nav-item">Read Scale</A></LI>
+    <LI class="nav-level-2"><A href="#replace-scale-replicationcontroller-v1-core" class="nav-item">Replace Scale</A></LI>
+    <LI class="nav-level-2"><A href="#patch-scale-replicationcontroller-v1-core" class="nav-item">Patch Scale</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#statefulset-v1-apps" class="nav-item">StatefulSet v1 apps</A></LI>
+ <UL id="statefulset-v1-apps-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-statefulset-v1-apps-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-statefulset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-statefulset-v1-apps" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-statefulset-v1-apps" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-statefulset-v1-apps" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-statefulset-v1-apps" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-statefulset-v1-apps" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-statefulset-v1-apps-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-statefulset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-statefulset-v1-apps" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-statefulset-v1-apps" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-statefulset-v1-apps" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-statefulset-v1-apps" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-statefulset-v1-apps" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-statefulset-v1-apps" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-statefulset-v1-apps-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-statefulset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-statefulset-v1-apps" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-statefulset-v1-apps" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-statefulset-v1-apps" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-misc-operations-statefulset-v1-apps-strong-" class="nav-item"><STRONG>Misc Operations</STRONG></A></LI>
+   <UL id="-strong-misc-operations-statefulset-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-scale-statefulset-v1-apps" class="nav-item">Read Scale</A></LI>
+    <LI class="nav-level-2"><A href="#replace-scale-statefulset-v1-apps" class="nav-item">Replace Scale</A></LI>
+    <LI class="nav-level-2"><A href="#patch-scale-statefulset-v1-apps" class="nav-item">Patch Scale</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-service-apis-strong-" class="nav-item"><STRONG>SERVICE APIS</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpoints-v1-core" class="nav-item">Endpoints v1 core</A></LI>
+ <UL id="endpoints-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-endpoints-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-endpoints-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-endpoints-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-endpoints-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-endpoints-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-endpoints-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-endpoints-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-endpoints-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-endpoints-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-endpoints-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-endpoints-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-endpoints-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-endpoints-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-endpoints-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-endpoints-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpointslice-v1beta1-discovery-k8s-io" class="nav-item">EndpointSlice v1beta1 discovery.k8s.io</A></LI>
+ <UL id="endpointslice-v1beta1-discovery-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingress-v1-networking-k8s-io" class="nav-item">Ingress v1 networking.k8s.io</A></LI>
+ <UL id="ingress-v1-networking-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-ingress-v1-networking-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-ingress-v1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-ingress-v1-networking-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-ingress-v1-networking-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-ingress-v1-networking-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-ingress-v1-networking-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-ingress-v1-networking-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-ingress-v1-networking-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-ingress-v1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-ingress-v1-networking-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-ingress-v1-networking-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-ingress-v1-networking-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-ingress-v1-networking-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-ingress-v1-networking-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-ingress-v1-networking-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-ingress-v1-networking-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-ingress-v1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-ingress-v1-networking-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-ingress-v1-networking-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-ingress-v1-networking-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingressclass-v1-networking-k8s-io" class="nav-item">IngressClass v1 networking.k8s.io</A></LI>
+ <UL id="ingressclass-v1-networking-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-ingressclass-v1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-ingressclass-v1-networking-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-ingressclass-v1-networking-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-ingressclass-v1-networking-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-ingressclass-v1-networking-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-ingressclass-v1-networking-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-ingressclass-v1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-ingressclass-v1-networking-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-ingressclass-v1-networking-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-ingressclass-v1-networking-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-ingressclass-v1-networking-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#service-v1-core" class="nav-item">Service v1 core</A></LI>
+ <UL id="service-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-service-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-service-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-service-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-service-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-service-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-service-v1-core" class="nav-item">Delete</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-service-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-service-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-service-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-service-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-service-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-service-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-service-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-service-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-service-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-service-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-service-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-service-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-service-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-proxy-operations-service-v1-core-strong-" class="nav-item"><STRONG>Proxy Operations</STRONG></A></LI>
+   <UL id="-strong-proxy-operations-service-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-connect-proxy-service-v1-core" class="nav-item">Create Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#create-connect-proxy-path-service-v1-core" class="nav-item">Create Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#delete-connect-proxy-service-v1-core" class="nav-item">Delete Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#delete-connect-proxy-path-service-v1-core" class="nav-item">Delete Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#get-connect-proxy-service-v1-core" class="nav-item">Get Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#get-connect-proxy-path-service-v1-core" class="nav-item">Get Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#head-connect-proxy-service-v1-core" class="nav-item">Head Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#head-connect-proxy-path-service-v1-core" class="nav-item">Head Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#replace-connect-proxy-service-v1-core" class="nav-item">Replace Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#replace-connect-proxy-path-service-v1-core" class="nav-item">Replace Connect Proxy Path</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-config-and-storage-apis-strong-" class="nav-item"><STRONG>CONFIG AND STORAGE APIS</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#configmap-v1-core" class="nav-item">ConfigMap v1 core</A></LI>
+ <UL id="configmap-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-configmap-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-configmap-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-configmap-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-configmap-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-configmap-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-configmap-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-configmap-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-configmap-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-configmap-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-configmap-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-configmap-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-configmap-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-configmap-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-configmap-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-configmap-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#csidriver-v1-storage-k8s-io" class="nav-item">CSIDriver v1 storage.k8s.io</A></LI>
+ <UL id="csidriver-v1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-csidriver-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-csidriver-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-csidriver-v1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-csidriver-v1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-csidriver-v1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-csidriver-v1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-csidriver-v1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-csidriver-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-csidriver-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-csidriver-v1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-csidriver-v1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-csidriver-v1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-csidriver-v1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#csinode-v1-storage-k8s-io" class="nav-item">CSINode v1 storage.k8s.io</A></LI>
+ <UL id="csinode-v1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-csinode-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-csinode-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-csinode-v1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-csinode-v1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-csinode-v1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-csinode-v1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-csinode-v1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-csinode-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-csinode-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-csinode-v1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-csinode-v1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-csinode-v1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-csinode-v1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#secret-v1-core" class="nav-item">Secret v1 core</A></LI>
+ <UL id="secret-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-secret-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-secret-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-secret-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-secret-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-secret-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-secret-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-secret-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-secret-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-secret-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-secret-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-secret-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-secret-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-secret-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-secret-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-secret-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#persistentvolumeclaim-v1-core" class="nav-item">PersistentVolumeClaim v1 core</A></LI>
+ <UL id="persistentvolumeclaim-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-persistentvolumeclaim-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-persistentvolumeclaim-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-persistentvolumeclaim-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-persistentvolumeclaim-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-persistentvolumeclaim-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-persistentvolumeclaim-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-persistentvolumeclaim-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-persistentvolumeclaim-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-persistentvolumeclaim-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-persistentvolumeclaim-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-persistentvolumeclaim-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-persistentvolumeclaim-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-persistentvolumeclaim-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-persistentvolumeclaim-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-persistentvolumeclaim-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-persistentvolumeclaim-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-persistentvolumeclaim-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-persistentvolumeclaim-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-persistentvolumeclaim-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-persistentvolumeclaim-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#storageclass-v1-storage-k8s-io" class="nav-item">StorageClass v1 storage.k8s.io</A></LI>
+ <UL id="storageclass-v1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-storageclass-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-storageclass-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-storageclass-v1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-storageclass-v1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-storageclass-v1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-storageclass-v1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-storageclass-v1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-storageclass-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-storageclass-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-storageclass-v1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-storageclass-v1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-storageclass-v1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-storageclass-v1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volume-v1-core" class="nav-item">Volume v1 core</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumeattachment-v1-storage-k8s-io" class="nav-item">VolumeAttachment v1 storage.k8s.io</A></LI>
+ <UL id="volumeattachment-v1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-volumeattachment-v1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-volumeattachment-v1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-volumeattachment-v1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-volumeattachment-v1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-volumeattachment-v1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-volumeattachment-v1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-volumeattachment-v1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-volumeattachment-v1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-volumeattachment-v1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-volumeattachment-v1-storage-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-volumeattachment-v1-storage-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-volumeattachment-v1-storage-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-metadata-apis-strong-" class="nav-item"><STRONG>METADATA APIS</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#controllerrevision-v1-apps" class="nav-item">ControllerRevision v1 apps</A></LI>
+ <UL id="controllerrevision-v1-apps-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-controllerrevision-v1-apps-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-controllerrevision-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-controllerrevision-v1-apps" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-controllerrevision-v1-apps" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-controllerrevision-v1-apps" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-controllerrevision-v1-apps" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-controllerrevision-v1-apps" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-controllerrevision-v1-apps-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-controllerrevision-v1-apps-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-controllerrevision-v1-apps" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-controllerrevision-v1-apps" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-controllerrevision-v1-apps" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-controllerrevision-v1-apps" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-controllerrevision-v1-apps" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-controllerrevision-v1-apps" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinition v1 apiextensions.k8s.io</A></LI>
+ <UL id="customresourcedefinition-v1-apiextensions-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-customresourcedefinition-v1-apiextensions-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#event-v1-core" class="nav-item">Event v1 core</A></LI>
+ <UL id="event-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-event-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-event-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-event-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-event-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-event-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-event-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-event-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-event-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-event-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-event-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-event-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-event-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-event-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-event-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-event-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#limitrange-v1-core" class="nav-item">LimitRange v1 core</A></LI>
+ <UL id="limitrange-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-limitrange-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-limitrange-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-limitrange-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-limitrange-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-limitrange-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-limitrange-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-limitrange-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-limitrange-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-limitrange-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-limitrange-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-limitrange-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-limitrange-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-limitrange-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-limitrange-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-limitrange-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#horizontalpodautoscaler-v1-autoscaling" class="nav-item">HorizontalPodAutoscaler v1 autoscaling</A></LI>
+ <UL id="horizontalpodautoscaler-v1-autoscaling-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-horizontalpodautoscaler-v1-autoscaling" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-horizontalpodautoscaler-v1-autoscaling" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-horizontalpodautoscaler-v1-autoscaling" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">MutatingWebhookConfiguration v1 admissionregistration.k8s.io</A></LI>
+ <UL id="mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">ValidatingWebhookConfiguration v1 admissionregistration.k8s.io</A></LI>
+ <UL id="validatingwebhookconfiguration-v1-admissionregistration-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#podtemplate-v1-core" class="nav-item">PodTemplate v1 core</A></LI>
+ <UL id="podtemplate-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-podtemplate-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-podtemplate-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-podtemplate-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-podtemplate-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-podtemplate-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-podtemplate-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-podtemplate-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-podtemplate-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-podtemplate-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-podtemplate-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-podtemplate-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-podtemplate-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-podtemplate-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-podtemplate-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-podtemplate-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#poddisruptionbudget-v1beta1-policy" class="nav-item">PodDisruptionBudget v1beta1 policy</A></LI>
+ <UL id="poddisruptionbudget-v1beta1-policy-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-poddisruptionbudget-v1beta1-policy" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-poddisruptionbudget-v1beta1-policy" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-poddisruptionbudget-v1beta1-policy" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-poddisruptionbudget-v1beta1-policy" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-poddisruptionbudget-v1beta1-policy" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-poddisruptionbudget-v1beta1-policy" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-poddisruptionbudget-v1beta1-policy" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-poddisruptionbudget-v1beta1-policy" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#priorityclass-v1-scheduling-k8s-io" class="nav-item">PriorityClass v1 scheduling.k8s.io</A></LI>
+ <UL id="priorityclass-v1-scheduling-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-priorityclass-v1-scheduling-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-priorityclass-v1-scheduling-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-priorityclass-v1-scheduling-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-priorityclass-v1-scheduling-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-priorityclass-v1-scheduling-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-priorityclass-v1-scheduling-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-priorityclass-v1-scheduling-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-priorityclass-v1-scheduling-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-priorityclass-v1-scheduling-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#podsecuritypolicy-v1beta1-policy" class="nav-item">PodSecurityPolicy v1beta1 policy</A></LI>
+ <UL id="podsecuritypolicy-v1beta1-policy-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-podsecuritypolicy-v1beta1-policy" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-podsecuritypolicy-v1beta1-policy" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-podsecuritypolicy-v1beta1-policy" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-podsecuritypolicy-v1beta1-policy" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-podsecuritypolicy-v1beta1-policy" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-podsecuritypolicy-v1beta1-policy" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-podsecuritypolicy-v1beta1-policy" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-podsecuritypolicy-v1beta1-policy" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-podsecuritypolicy-v1beta1-policy" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-cluster-apis-strong-" class="nav-item"><STRONG>CLUSTER APIS</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#apiservice-v1-apiregistration-k8s-io" class="nav-item">APIService v1 apiregistration.k8s.io</A></LI>
+ <UL id="apiservice-v1-apiregistration-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-apiservice-v1-apiregistration-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-apiservice-v1-apiregistration-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-apiservice-v1-apiregistration-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-apiservice-v1-apiregistration-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-apiservice-v1-apiregistration-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-apiservice-v1-apiregistration-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-apiservice-v1-apiregistration-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-apiservice-v1-apiregistration-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-apiservice-v1-apiregistration-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-apiservice-v1-apiregistration-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-apiservice-v1-apiregistration-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-apiservice-v1-apiregistration-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#binding-v1-core" class="nav-item">Binding v1 core</A></LI>
+ <UL id="binding-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-binding-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-binding-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-binding-v1-core" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">CertificateSigningRequest v1 certificates.k8s.io</A></LI>
+ <UL id="certificatesigningrequest-v1-certificates-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-certificatesigningrequest-v1-certificates-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">ClusterRole v1 rbac.authorization.k8s.io</A></LI>
+ <UL id="clusterrole-v1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-clusterrole-v1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">ClusterRoleBinding v1 rbac.authorization.k8s.io</A></LI>
+ <UL id="clusterrolebinding-v1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#componentstatus-v1-core" class="nav-item">ComponentStatus v1 core</A></LI>
+ <UL id="componentstatus-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-componentstatus-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-componentstatus-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-componentstatus-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-componentstatus-v1-core" class="nav-item">List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">FlowSchema v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ <UL id="flowschema-v1beta1-flowcontrol-apiserver-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#lease-v1-coordination-k8s-io" class="nav-item">Lease v1 coordination.k8s.io</A></LI>
+ <UL id="lease-v1-coordination-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-lease-v1-coordination-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-lease-v1-coordination-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-lease-v1-coordination-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-lease-v1-coordination-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-lease-v1-coordination-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-lease-v1-coordination-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-lease-v1-coordination-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-lease-v1-coordination-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-lease-v1-coordination-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-lease-v1-coordination-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-lease-v1-coordination-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-lease-v1-coordination-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-lease-v1-coordination-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-lease-v1-coordination-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-lease-v1-coordination-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#localsubjectaccessreview-v1-authorization-k8s-io" class="nav-item">LocalSubjectAccessReview v1 authorization.k8s.io</A></LI>
+ <UL id="localsubjectaccessreview-v1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-localsubjectaccessreview-v1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#namespace-v1-core" class="nav-item">Namespace v1 core</A></LI>
+ <UL id="namespace-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-namespace-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-namespace-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-namespace-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-namespace-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-namespace-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-namespace-v1-core" class="nav-item">Delete</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-namespace-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-namespace-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-namespace-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-namespace-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-namespace-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-namespace-v1-core" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-namespace-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-namespace-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-namespace-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-namespace-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-namespace-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#node-v1-core" class="nav-item">Node v1 core</A></LI>
+ <UL id="node-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-node-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-node-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-node-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-node-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-node-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-node-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-node-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-node-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-node-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-node-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-node-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-node-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-node-v1-core" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-node-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-node-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-node-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-node-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-node-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-proxy-operations-node-v1-core-strong-" class="nav-item"><STRONG>Proxy Operations</STRONG></A></LI>
+   <UL id="-strong-proxy-operations-node-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-connect-proxy-node-v1-core" class="nav-item">Create Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#create-connect-proxy-path-node-v1-core" class="nav-item">Create Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#delete-connect-proxy-node-v1-core" class="nav-item">Delete Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#delete-connect-proxy-path-node-v1-core" class="nav-item">Delete Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#get-connect-proxy-node-v1-core" class="nav-item">Get Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#get-connect-proxy-path-node-v1-core" class="nav-item">Get Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#head-connect-proxy-node-v1-core" class="nav-item">Head Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#head-connect-proxy-path-node-v1-core" class="nav-item">Head Connect Proxy Path</A></LI>
+    <LI class="nav-level-2"><A href="#replace-connect-proxy-node-v1-core" class="nav-item">Replace Connect Proxy</A></LI>
+    <LI class="nav-level-2"><A href="#replace-connect-proxy-path-node-v1-core" class="nav-item">Replace Connect Proxy Path</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#persistentvolume-v1-core" class="nav-item">PersistentVolume v1 core</A></LI>
+ <UL id="persistentvolume-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-persistentvolume-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-persistentvolume-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-persistentvolume-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-persistentvolume-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-persistentvolume-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-persistentvolume-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-persistentvolume-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-persistentvolume-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-persistentvolume-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-persistentvolume-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-persistentvolume-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-persistentvolume-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-persistentvolume-v1-core" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-persistentvolume-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-persistentvolume-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-persistentvolume-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-persistentvolume-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-persistentvolume-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">PriorityLevelConfiguration v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ <UL id="prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#resourcequota-v1-core" class="nav-item">ResourceQuota v1 core</A></LI>
+ <UL id="resourcequota-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-resourcequota-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-resourcequota-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-resourcequota-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-resourcequota-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-resourcequota-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-resourcequota-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-resourcequota-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-resourcequota-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-resourcequota-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-resourcequota-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-resourcequota-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-resourcequota-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-resourcequota-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-resourcequota-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-resourcequota-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-resourcequota-v1-core-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-resourcequota-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-resourcequota-v1-core" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-resourcequota-v1-core" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-resourcequota-v1-core" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#role-v1-rbac-authorization-k8s-io" class="nav-item">Role v1 rbac.authorization.k8s.io</A></LI>
+ <UL id="role-v1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-role-v1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-role-v1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-role-v1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-role-v1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-role-v1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-role-v1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-role-v1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-role-v1-rbac-authorization-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-role-v1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-role-v1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">RoleBinding v1 rbac.authorization.k8s.io</A></LI>
+ <UL id="rolebinding-v1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#runtimeclass-v1-node-k8s-io" class="nav-item">RuntimeClass v1 node.k8s.io</A></LI>
+ <UL id="runtimeclass-v1-node-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-runtimeclass-v1-node-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-runtimeclass-v1-node-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-runtimeclass-v1-node-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-runtimeclass-v1-node-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-runtimeclass-v1-node-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-runtimeclass-v1-node-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-runtimeclass-v1-node-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-runtimeclass-v1-node-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-runtimeclass-v1-node-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-runtimeclass-v1-node-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-runtimeclass-v1-node-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#selfsubjectaccessreview-v1-authorization-k8s-io" class="nav-item">SelfSubjectAccessReview v1 authorization.k8s.io</A></LI>
+ <UL id="selfsubjectaccessreview-v1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-selfsubjectaccessreview-v1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#selfsubjectrulesreview-v1-authorization-k8s-io" class="nav-item">SelfSubjectRulesReview v1 authorization.k8s.io</A></LI>
+ <UL id="selfsubjectrulesreview-v1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-selfsubjectrulesreview-v1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#serviceaccount-v1-core" class="nav-item">ServiceAccount v1 core</A></LI>
+ <UL id="serviceaccount-v1-core-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-serviceaccount-v1-core-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-serviceaccount-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-serviceaccount-v1-core" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-serviceaccount-v1-core" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-serviceaccount-v1-core" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-serviceaccount-v1-core" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-serviceaccount-v1-core" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-serviceaccount-v1-core-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-serviceaccount-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-serviceaccount-v1-core" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-serviceaccount-v1-core" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-serviceaccount-v1-core" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-serviceaccount-v1-core" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-serviceaccount-v1-core" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-serviceaccount-v1-core" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">StorageVersion v1alpha1 internal.apiserver.k8s.io</A></LI>
+ <UL id="storageversion-v1alpha1-internal-apiserver-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#subjectaccessreview-v1-authorization-k8s-io" class="nav-item">SubjectAccessReview v1 authorization.k8s.io</A></LI>
+ <UL id="subjectaccessreview-v1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-subjectaccessreview-v1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#tokenrequest-v1-authentication-k8s-io" class="nav-item">TokenRequest v1 authentication.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#tokenreview-v1-authentication-k8s-io" class="nav-item">TokenReview v1 authentication.k8s.io</A></LI>
+ <UL id="tokenreview-v1-authentication-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-tokenreview-v1-authentication-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#networkpolicy-v1-networking-k8s-io" class="nav-item">NetworkPolicy v1 networking.k8s.io</A></LI>
+ <UL id="networkpolicy-v1-networking-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-networkpolicy-v1-networking-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-networkpolicy-v1-networking-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-networkpolicy-v1-networking-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-networkpolicy-v1-networking-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-networkpolicy-v1-networking-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-networkpolicy-v1-networking-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-networkpolicy-v1-networking-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-networkpolicy-v1-networking-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-networkpolicy-v1-networking-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-networkpolicy-v1-networking-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-definitions-strong-" class="nav-item"><STRONG>DEFINITIONS</STRONG></A></LI>
+</UL>
+ <UL id="-strong-definitions-strong--nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2"><A href="#apigroup-v1-meta" class="nav-item">APIGroup v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#apiresource-v1-meta" class="nav-item">APIResource v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#apiservicecondition-v1-apiregistration-k8s-io" class="nav-item">APIServiceCondition v1 apiregistration.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#apiversions-v1-meta" class="nav-item">APIVersions v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#awselasticblockstorevolumesource-v1-core" class="nav-item">AWSElasticBlockStoreVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#affinity-v1-core" class="nav-item">Affinity v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#aggregationrule-v1-rbac-authorization-k8s-io" class="nav-item">AggregationRule v1 rbac.authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#allowedcsidriver-v1beta1-policy" class="nav-item">AllowedCSIDriver v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#allowedflexvolume-v1beta1-policy" class="nav-item">AllowedFlexVolume v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#allowedhostpath-v1beta1-policy" class="nav-item">AllowedHostPath v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#attachedvolume-v1-core" class="nav-item">AttachedVolume v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#azurediskvolumesource-v1-core" class="nav-item">AzureDiskVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#azurefilepersistentvolumesource-v1-core" class="nav-item">AzureFilePersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#azurefilevolumesource-v1-core" class="nav-item">AzureFileVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#boundobjectreference-v1-authentication-k8s-io" class="nav-item">BoundObjectReference v1 authentication.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#csinodedriver-v1-storage-k8s-io" class="nav-item">CSINodeDriver v1 storage.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#csipersistentvolumesource-v1-core" class="nav-item">CSIPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">CSIStorageCapacity v1beta1 storage.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#csivolumesource-v1-core" class="nav-item">CSIVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#capabilities-v1-core" class="nav-item">Capabilities v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#cephfspersistentvolumesource-v1-core" class="nav-item">CephFSPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#cephfsvolumesource-v1-core" class="nav-item">CephFSVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#certificatesigningrequestcondition-v1-certificates-k8s-io" class="nav-item">CertificateSigningRequestCondition v1 certificates.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#cinderpersistentvolumesource-v1-core" class="nav-item">CinderPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#cindervolumesource-v1-core" class="nav-item">CinderVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#clientipconfig-v1-core" class="nav-item">ClientIPConfig v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#componentcondition-v1-core" class="nav-item">ComponentCondition v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#condition-v1-meta" class="nav-item">Condition v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#configmapenvsource-v1-core" class="nav-item">ConfigMapEnvSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#configmapkeyselector-v1-core" class="nav-item">ConfigMapKeySelector v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#configmapnodeconfigsource-v1-core" class="nav-item">ConfigMapNodeConfigSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#configmapprojection-v1-core" class="nav-item">ConfigMapProjection v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#configmapvolumesource-v1-core" class="nav-item">ConfigMapVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerimage-v1-core" class="nav-item">ContainerImage v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerport-v1-core" class="nav-item">ContainerPort v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerresourcemetricsource-v2beta2-autoscaling" class="nav-item">ContainerResourceMetricSource v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerresourcemetricstatus-v2beta2-autoscaling" class="nav-item">ContainerResourceMetricStatus v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerstate-v1-core" class="nav-item">ContainerState v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerstaterunning-v1-core" class="nav-item">ContainerStateRunning v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerstateterminated-v1-core" class="nav-item">ContainerStateTerminated v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#containerstatewaiting-v1-core" class="nav-item">ContainerStateWaiting v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#cronjob-v1-batch" class="nav-item">CronJob v1 batch</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#crossversionobjectreference-v1-autoscaling" class="nav-item">CrossVersionObjectReference v1 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcecolumndefinition-v1-apiextensions-k8s-io" class="nav-item">CustomResourceColumnDefinition v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourceconversion-v1-apiextensions-k8s-io" class="nav-item">CustomResourceConversion v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcedefinitioncondition-v1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinitionCondition v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcedefinitionnames-v1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinitionNames v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcedefinitionversion-v1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinitionVersion v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcesubresourcescale-v1-apiextensions-k8s-io" class="nav-item">CustomResourceSubresourceScale v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcesubresourcestatus-v1-apiextensions-k8s-io" class="nav-item">CustomResourceSubresourceStatus v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcesubresources-v1-apiextensions-k8s-io" class="nav-item">CustomResourceSubresources v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#customresourcevalidation-v1-apiextensions-k8s-io" class="nav-item">CustomResourceValidation v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#daemonendpoint-v1-core" class="nav-item">DaemonEndpoint v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#daemonsetcondition-v1-apps" class="nav-item">DaemonSetCondition v1 apps</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#daemonsetupdatestrategy-v1-apps" class="nav-item">DaemonSetUpdateStrategy v1 apps</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#deleteoptions-v1-meta" class="nav-item">DeleteOptions v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#deploymentcondition-v1-apps" class="nav-item">DeploymentCondition v1 apps</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#downwardapiprojection-v1-core" class="nav-item">DownwardAPIProjection v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#downwardapivolumefile-v1-core" class="nav-item">DownwardAPIVolumeFile v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#downwardapivolumesource-v1-core" class="nav-item">DownwardAPIVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#emptydirvolumesource-v1-core" class="nav-item">EmptyDirVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#endpoint-v1-discovery-k8s-io" class="nav-item">Endpoint v1 discovery.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#endpointaddress-v1-core" class="nav-item">EndpointAddress v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#endpointconditions-v1-discovery-k8s-io" class="nav-item">EndpointConditions v1 discovery.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#endpointhints-v1-discovery-k8s-io" class="nav-item">EndpointHints v1 discovery.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#endpointport-v1-core" class="nav-item">EndpointPort v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#endpointslice-v1-discovery-k8s-io" class="nav-item">EndpointSlice v1 discovery.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#endpointsubset-v1-core" class="nav-item">EndpointSubset v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#envfromsource-v1-core" class="nav-item">EnvFromSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#envvar-v1-core" class="nav-item">EnvVar v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#envvarsource-v1-core" class="nav-item">EnvVarSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ephemeralcontainer-v1-core" class="nav-item">EphemeralContainer v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ephemeralcontainers-v1-core" class="nav-item">EphemeralContainers v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ephemeralvolumesource-v1-core" class="nav-item">EphemeralVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#eventseries-v1-core" class="nav-item">EventSeries v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#eventsource-v1-core" class="nav-item">EventSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#eviction-v1beta1-policy" class="nav-item">Eviction v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#execaction-v1-core" class="nav-item">ExecAction v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#externaldocumentation-v1-apiextensions-k8s-io" class="nav-item">ExternalDocumentation v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#externalmetricsource-v2beta2-autoscaling" class="nav-item">ExternalMetricSource v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#externalmetricstatus-v2beta2-autoscaling" class="nav-item">ExternalMetricStatus v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#fcvolumesource-v1-core" class="nav-item">FCVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#fsgroupstrategyoptions-v1beta1-policy" class="nav-item">FSGroupStrategyOptions v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#fieldsv1-v1-meta" class="nav-item">FieldsV1 v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#flexpersistentvolumesource-v1-core" class="nav-item">FlexPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#flexvolumesource-v1-core" class="nav-item">FlexVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#flockervolumesource-v1-core" class="nav-item">FlockerVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">FlowDistinguisherMethod v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">FlowSchemaCondition v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#forzone-v1-discovery-k8s-io" class="nav-item">ForZone v1 discovery.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#gcepersistentdiskvolumesource-v1-core" class="nav-item">GCEPersistentDiskVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#gitrepovolumesource-v1-core" class="nav-item">GitRepoVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#glusterfspersistentvolumesource-v1-core" class="nav-item">GlusterfsPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#glusterfsvolumesource-v1-core" class="nav-item">GlusterfsVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#groupsubject-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">GroupSubject v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#groupversionfordiscovery-v1-meta" class="nav-item">GroupVersionForDiscovery v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#hpascalingpolicy-v2beta2-autoscaling" class="nav-item">HPAScalingPolicy v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#hpascalingrules-v2beta2-autoscaling" class="nav-item">HPAScalingRules v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#httpgetaction-v1-core" class="nav-item">HTTPGetAction v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#httpheader-v1-core" class="nav-item">HTTPHeader v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#httpingresspath-v1-networking-k8s-io" class="nav-item">HTTPIngressPath v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#httpingressrulevalue-v1-networking-k8s-io" class="nav-item">HTTPIngressRuleValue v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#handler-v1-core" class="nav-item">Handler v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#horizontalpodautoscalerbehavior-v2beta2-autoscaling" class="nav-item">HorizontalPodAutoscalerBehavior v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#horizontalpodautoscalercondition-v2beta2-autoscaling" class="nav-item">HorizontalPodAutoscalerCondition v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#hostalias-v1-core" class="nav-item">HostAlias v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#hostpathvolumesource-v1-core" class="nav-item">HostPathVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#hostportrange-v1beta1-policy" class="nav-item">HostPortRange v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#idrange-v1beta1-policy" class="nav-item">IDRange v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ipblock-v1-networking-k8s-io" class="nav-item">IPBlock v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#iscsipersistentvolumesource-v1-core" class="nav-item">ISCSIPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#iscsivolumesource-v1-core" class="nav-item">ISCSIVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ingressbackend-v1-networking-k8s-io" class="nav-item">IngressBackend v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ingressclassparametersreference-v1-networking-k8s-io" class="nav-item">IngressClassParametersReference v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ingressrule-v1-networking-k8s-io" class="nav-item">IngressRule v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ingressservicebackend-v1-networking-k8s-io" class="nav-item">IngressServiceBackend v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ingresstls-v1-networking-k8s-io" class="nav-item">IngressTLS v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#json-v1-apiextensions-k8s-io" class="nav-item">JSON v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#jsonschemaprops-v1-apiextensions-k8s-io" class="nav-item">JSONSchemaProps v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#jsonschemapropsorarray-v1-apiextensions-k8s-io" class="nav-item">JSONSchemaPropsOrArray v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#jsonschemapropsorbool-v1-apiextensions-k8s-io" class="nav-item">JSONSchemaPropsOrBool v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#jobcondition-v1-batch" class="nav-item">JobCondition v1 batch</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#jobtemplatespec-v1-batch" class="nav-item">JobTemplateSpec v1 batch</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#keytopath-v1-core" class="nav-item">KeyToPath v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#labelselector-v1-meta" class="nav-item">LabelSelector v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#labelselectorrequirement-v1-meta" class="nav-item">LabelSelectorRequirement v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#lifecycle-v1-core" class="nav-item">Lifecycle v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#limitrangeitem-v1-core" class="nav-item">LimitRangeItem v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#limitresponse-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">LimitResponse v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">LimitedPriorityLevelConfiguration v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#listmeta-v1-meta" class="nav-item">ListMeta v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#loadbalanceringress-v1-core" class="nav-item">LoadBalancerIngress v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#loadbalancerstatus-v1-core" class="nav-item">LoadBalancerStatus v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#localobjectreference-v1-core" class="nav-item">LocalObjectReference v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#localvolumesource-v1-core" class="nav-item">LocalVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#managedfieldsentry-v1-meta" class="nav-item">ManagedFieldsEntry v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#metricidentifier-v2beta2-autoscaling" class="nav-item">MetricIdentifier v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#metricspec-v2beta2-autoscaling" class="nav-item">MetricSpec v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#metricstatus-v2beta2-autoscaling" class="nav-item">MetricStatus v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#metrictarget-v2beta2-autoscaling" class="nav-item">MetricTarget v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#metricvaluestatus-v2beta2-autoscaling" class="nav-item">MetricValueStatus v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#microtime-v1-meta" class="nav-item">MicroTime v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#mutatingwebhook-v1-admissionregistration-k8s-io" class="nav-item">MutatingWebhook v1 admissionregistration.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nfsvolumesource-v1-core" class="nav-item">NFSVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#namespacecondition-v1-core" class="nav-item">NamespaceCondition v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#networkpolicyegressrule-v1-networking-k8s-io" class="nav-item">NetworkPolicyEgressRule v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#networkpolicyingressrule-v1-networking-k8s-io" class="nav-item">NetworkPolicyIngressRule v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#networkpolicypeer-v1-networking-k8s-io" class="nav-item">NetworkPolicyPeer v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#networkpolicyport-v1-networking-k8s-io" class="nav-item">NetworkPolicyPort v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodeaddress-v1-core" class="nav-item">NodeAddress v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodeaffinity-v1-core" class="nav-item">NodeAffinity v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodecondition-v1-core" class="nav-item">NodeCondition v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodeconfigsource-v1-core" class="nav-item">NodeConfigSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodeconfigstatus-v1-core" class="nav-item">NodeConfigStatus v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodedaemonendpoints-v1-core" class="nav-item">NodeDaemonEndpoints v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodeselector-v1-core" class="nav-item">NodeSelector v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodeselectorrequirement-v1-core" class="nav-item">NodeSelectorRequirement v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodeselectorterm-v1-core" class="nav-item">NodeSelectorTerm v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nodesysteminfo-v1-core" class="nav-item">NodeSystemInfo v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nonresourceattributes-v1-authorization-k8s-io" class="nav-item">NonResourceAttributes v1 authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">NonResourcePolicyRule v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#nonresourcerule-v1-authorization-k8s-io" class="nav-item">NonResourceRule v1 authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#objectfieldselector-v1-core" class="nav-item">ObjectFieldSelector v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#objectmeta-v1-meta" class="nav-item">ObjectMeta v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#objectmetricsource-v2beta2-autoscaling" class="nav-item">ObjectMetricSource v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#objectmetricstatus-v2beta2-autoscaling" class="nav-item">ObjectMetricStatus v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#objectreference-v1-core" class="nav-item">ObjectReference v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#overhead-v1-node-k8s-io" class="nav-item">Overhead v1 node.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#ownerreference-v1-meta" class="nav-item">OwnerReference v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#patch-v1-meta" class="nav-item">Patch v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#persistentvolumeclaimcondition-v1-core" class="nav-item">PersistentVolumeClaimCondition v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#persistentvolumeclaimtemplate-v1-core" class="nav-item">PersistentVolumeClaimTemplate v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#persistentvolumeclaimvolumesource-v1-core" class="nav-item">PersistentVolumeClaimVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#photonpersistentdiskvolumesource-v1-core" class="nav-item">PhotonPersistentDiskVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podaffinity-v1-core" class="nav-item">PodAffinity v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podaffinityterm-v1-core" class="nav-item">PodAffinityTerm v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podantiaffinity-v1-core" class="nav-item">PodAntiAffinity v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podcondition-v1-core" class="nav-item">PodCondition v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#poddnsconfig-v1-core" class="nav-item">PodDNSConfig v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#poddnsconfigoption-v1-core" class="nav-item">PodDNSConfigOption v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#poddisruptionbudget-v1-policy" class="nav-item">PodDisruptionBudget v1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podip-v1-core" class="nav-item">PodIP v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podreadinessgate-v1-core" class="nav-item">PodReadinessGate v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podsecuritycontext-v1-core" class="nav-item">PodSecurityContext v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podsmetricsource-v2beta2-autoscaling" class="nav-item">PodsMetricSource v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#podsmetricstatus-v2beta2-autoscaling" class="nav-item">PodsMetricStatus v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#policyrule-v1-rbac-authorization-k8s-io" class="nav-item">PolicyRule v1 rbac.authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">PolicyRulesWithSubjects v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#portstatus-v1-core" class="nav-item">PortStatus v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#portworxvolumesource-v1-core" class="nav-item">PortworxVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#preconditions-v1-meta" class="nav-item">Preconditions v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#preferredschedulingterm-v1-core" class="nav-item">PreferredSchedulingTerm v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">PriorityLevelConfigurationCondition v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">PriorityLevelConfigurationReference v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#probe-v1-core" class="nav-item">Probe v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#projectedvolumesource-v1-core" class="nav-item">ProjectedVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#quantity-resource-core" class="nav-item">Quantity resource core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">QueuingConfiguration v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#quobytevolumesource-v1-core" class="nav-item">QuobyteVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#rbdpersistentvolumesource-v1-core" class="nav-item">RBDPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#rbdvolumesource-v1-core" class="nav-item">RBDVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#replicasetcondition-v1-apps" class="nav-item">ReplicaSetCondition v1 apps</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#replicationcontrollercondition-v1-core" class="nav-item">ReplicationControllerCondition v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#resourceattributes-v1-authorization-k8s-io" class="nav-item">ResourceAttributes v1 authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#resourcefieldselector-v1-core" class="nav-item">ResourceFieldSelector v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#resourcemetricsource-v2beta2-autoscaling" class="nav-item">ResourceMetricSource v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#resourcemetricstatus-v2beta2-autoscaling" class="nav-item">ResourceMetricStatus v2beta2 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">ResourcePolicyRule v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#resourcerequirements-v1-core" class="nav-item">ResourceRequirements v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#resourcerule-v1-authorization-k8s-io" class="nav-item">ResourceRule v1 authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#roleref-v1-rbac-authorization-k8s-io" class="nav-item">RoleRef v1 rbac.authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#rollingupdatestatefulsetstrategy-v1-apps" class="nav-item">RollingUpdateStatefulSetStrategy v1 apps</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#rulewithoperations-v1-admissionregistration-k8s-io" class="nav-item">RuleWithOperations v1 admissionregistration.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#runasgroupstrategyoptions-v1beta1-policy" class="nav-item">RunAsGroupStrategyOptions v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#runasuserstrategyoptions-v1beta1-policy" class="nav-item">RunAsUserStrategyOptions v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#runtimeclassstrategyoptions-v1beta1-policy" class="nav-item">RuntimeClassStrategyOptions v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#selinuxoptions-v1-core" class="nav-item">SELinuxOptions v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#selinuxstrategyoptions-v1beta1-policy" class="nav-item">SELinuxStrategyOptions v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#scale-v1-autoscaling" class="nav-item">Scale v1 autoscaling</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#scaleiopersistentvolumesource-v1-core" class="nav-item">ScaleIOPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#scaleiovolumesource-v1-core" class="nav-item">ScaleIOVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#scheduling-v1-node-k8s-io" class="nav-item">Scheduling v1 node.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#scopeselector-v1-core" class="nav-item">ScopeSelector v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#scopedresourceselectorrequirement-v1-core" class="nav-item">ScopedResourceSelectorRequirement v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#seccompprofile-v1-core" class="nav-item">SeccompProfile v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#secretenvsource-v1-core" class="nav-item">SecretEnvSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#secretkeyselector-v1-core" class="nav-item">SecretKeySelector v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#secretprojection-v1-core" class="nav-item">SecretProjection v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#secretreference-v1-core" class="nav-item">SecretReference v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#secretvolumesource-v1-core" class="nav-item">SecretVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#securitycontext-v1-core" class="nav-item">SecurityContext v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#serveraddressbyclientcidr-v1-meta" class="nav-item">ServerAddressByClientCIDR v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#serverstorageversion-v1alpha1-internal-apiserver-k8s-io" class="nav-item">ServerStorageVersion v1alpha1 internal.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">ServiceAccountSubject v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#serviceaccounttokenprojection-v1-core" class="nav-item">ServiceAccountTokenProjection v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#servicebackendport-v1-networking-k8s-io" class="nav-item">ServiceBackendPort v1 networking.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#serviceport-v1-core" class="nav-item">ServicePort v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#servicereference-v1-admissionregistration-k8s-io" class="nav-item">ServiceReference v1 admissionregistration.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#sessionaffinityconfig-v1-core" class="nav-item">SessionAffinityConfig v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#statefulsetcondition-v1-apps" class="nav-item">StatefulSetCondition v1 apps</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#statefulsetupdatestrategy-v1-apps" class="nav-item">StatefulSetUpdateStrategy v1 apps</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#status-v1-meta" class="nav-item">Status v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#statuscause-v1-meta" class="nav-item">StatusCause v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#statusdetails-v1-meta" class="nav-item">StatusDetails v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#storageospersistentvolumesource-v1-core" class="nav-item">StorageOSPersistentVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#storageosvolumesource-v1-core" class="nav-item">StorageOSVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#storageversioncondition-v1alpha1-internal-apiserver-k8s-io" class="nav-item">StorageVersionCondition v1alpha1 internal.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#subject-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">Subject v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#subjectrulesreviewstatus-v1-authorization-k8s-io" class="nav-item">SubjectRulesReviewStatus v1 authorization.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#supplementalgroupsstrategyoptions-v1beta1-policy" class="nav-item">SupplementalGroupsStrategyOptions v1beta1 policy</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#sysctl-v1-core" class="nav-item">Sysctl v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#tcpsocketaction-v1-core" class="nav-item">TCPSocketAction v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#taint-v1-core" class="nav-item">Taint v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#time-v1-meta" class="nav-item">Time v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#toleration-v1-core" class="nav-item">Toleration v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#topologyselectorlabelrequirement-v1-core" class="nav-item">TopologySelectorLabelRequirement v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#topologyselectorterm-v1-core" class="nav-item">TopologySelectorTerm v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#topologyspreadconstraint-v1-core" class="nav-item">TopologySpreadConstraint v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#typedlocalobjectreference-v1-core" class="nav-item">TypedLocalObjectReference v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#userinfo-v1-authentication-k8s-io" class="nav-item">UserInfo v1 authentication.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#usersubject-v1beta1-flowcontrol-apiserver-k8s-io" class="nav-item">UserSubject v1beta1 flowcontrol.apiserver.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#validatingwebhook-v1-admissionregistration-k8s-io" class="nav-item">ValidatingWebhook v1 admissionregistration.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#volumeattachmentsource-v1-storage-k8s-io" class="nav-item">VolumeAttachmentSource v1 storage.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#volumedevice-v1-core" class="nav-item">VolumeDevice v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#volumeerror-v1-storage-k8s-io" class="nav-item">VolumeError v1 storage.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#volumemount-v1-core" class="nav-item">VolumeMount v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#volumenodeaffinity-v1-core" class="nav-item">VolumeNodeAffinity v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#volumenoderesources-v1-storage-k8s-io" class="nav-item">VolumeNodeResources v1 storage.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#volumeprojection-v1-core" class="nav-item">VolumeProjection v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#vspherevirtualdiskvolumesource-v1-core" class="nav-item">VsphereVirtualDiskVolumeSource v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#watchevent-v1-meta" class="nav-item">WatchEvent v1 meta</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#webhookclientconfig-v1-admissionregistration-k8s-io" class="nav-item">WebhookClientConfig v1 admissionregistration.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#webhookconversion-v1-apiextensions-k8s-io" class="nav-item">WebhookConversion v1 apiextensions.k8s.io</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#weightedpodaffinityterm-v1-core" class="nav-item">WeightedPodAffinityTerm v1 core</A></LI>
+ </UL>
+  <UL>
+   <LI class="nav-level-2"><A href="#windowssecuritycontextoptions-v1-core" class="nav-item">WindowsSecurityContextOptions v1 core</A></LI>
+ </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1 strong-nav"><A href="#-strong-old-api-versions-strong-" class="nav-item"><STRONG>OLD API VERSIONS</STRONG></A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">APIService v1beta1 apiregistration.k8s.io</A></LI>
+ <UL id="apiservice-v1beta1-apiregistration-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-apiservice-v1beta1-apiregistration-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#apiservicecondition-v1beta1-apiregistration-k8s-io" class="nav-item">APIServiceCondition v1beta1 apiregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#aggregationrule-v1beta1-rbac-authorization-k8s-io" class="nav-item">AggregationRule v1beta1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#aggregationrule-v1alpha1-rbac-authorization-k8s-io" class="nav-item">AggregationRule v1alpha1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#csidriver-v1beta1-storage-k8s-io" class="nav-item">CSIDriver v1beta1 storage.k8s.io</A></LI>
+ <UL id="csidriver-v1beta1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-csidriver-v1beta1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-csidriver-v1beta1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-csidriver-v1beta1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-csidriver-v1beta1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-csidriver-v1beta1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-csidriver-v1beta1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-csidriver-v1beta1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-csidriver-v1beta1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-csidriver-v1beta1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#csinode-v1beta1-storage-k8s-io" class="nav-item">CSINode v1beta1 storage.k8s.io</A></LI>
+ <UL id="csinode-v1beta1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-csinode-v1beta1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-csinode-v1beta1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-csinode-v1beta1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-csinode-v1beta1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-csinode-v1beta1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-csinode-v1beta1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-csinode-v1beta1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-csinode-v1beta1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-csinode-v1beta1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#csinodedriver-v1beta1-storage-k8s-io" class="nav-item">CSINodeDriver v1beta1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">CSIStorageCapacity v1alpha1 storage.k8s.io</A></LI>
+ <UL id="csistoragecapacity-v1alpha1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">CertificateSigningRequest v1beta1 certificates.k8s.io</A></LI>
+ <UL id="certificatesigningrequest-v1beta1-certificates-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#certificatesigningrequestcondition-v1beta1-certificates-k8s-io" class="nav-item">CertificateSigningRequestCondition v1beta1 certificates.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">ClusterRole v1beta1 rbac.authorization.k8s.io</A></LI>
+ <UL id="clusterrole-v1beta1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">ClusterRole v1alpha1 rbac.authorization.k8s.io</A></LI>
+ <UL id="clusterrole-v1alpha1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">ClusterRoleBinding v1beta1 rbac.authorization.k8s.io</A></LI>
+ <UL id="clusterrolebinding-v1beta1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">ClusterRoleBinding v1alpha1 rbac.authorization.k8s.io</A></LI>
+ <UL id="clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#containerresourcemetricsource-v2beta1-autoscaling" class="nav-item">ContainerResourceMetricSource v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#containerresourcemetricstatus-v2beta1-autoscaling" class="nav-item">ContainerResourceMetricStatus v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#cronjob-v1beta1-batch" class="nav-item">CronJob v1beta1 batch</A></LI>
+ <UL id="cronjob-v1beta1-batch-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-cronjob-v1beta1-batch" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-cronjob-v1beta1-batch" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-cronjob-v1beta1-batch" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-cronjob-v1beta1-batch" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-cronjob-v1beta1-batch" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-cronjob-v1beta1-batch" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-cronjob-v1beta1-batch" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-cronjob-v1beta1-batch" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-cronjob-v1beta1-batch" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-cronjob-v1beta1-batch" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-cronjob-v1beta1-batch" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-cronjob-v1beta1-batch" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-cronjob-v1beta1-batch" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-cronjob-v1beta1-batch" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#crossversionobjectreference-v2beta2-autoscaling" class="nav-item">CrossVersionObjectReference v2beta2 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#crossversionobjectreference-v2beta1-autoscaling" class="nav-item">CrossVersionObjectReference v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcecolumndefinition-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceColumnDefinition v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourceconversion-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceConversion v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinition v1beta1 apiextensions.k8s.io</A></LI>
+ <UL id="customresourcedefinition-v1beta1-apiextensions-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinitionCondition v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcedefinitionnames-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinitionNames v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcedefinitionversion-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceDefinitionVersion v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcesubresourcescale-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceSubresourceScale v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceSubresourceStatus v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcesubresources-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceSubresources v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#customresourcevalidation-v1beta1-apiextensions-k8s-io" class="nav-item">CustomResourceValidation v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpoint-v1beta1-discovery-k8s-io" class="nav-item">Endpoint v1beta1 discovery.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpointconditions-v1beta1-discovery-k8s-io" class="nav-item">EndpointConditions v1beta1 discovery.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpointhints-v1beta1-discovery-k8s-io" class="nav-item">EndpointHints v1beta1 discovery.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpointport-v1-discovery-k8s-io" class="nav-item">EndpointPort v1 discovery.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpointport-v1beta1-discovery-k8s-io" class="nav-item">EndpointPort v1beta1 discovery.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#endpointslice-v1beta1-discovery-k8s-io" class="nav-item">EndpointSlice v1beta1 discovery.k8s.io</A></LI>
+ <UL id="endpointslice-v1beta1-discovery-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#event-v1-events-k8s-io" class="nav-item">Event v1 events.k8s.io</A></LI>
+ <UL id="event-v1-events-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-event-v1-events-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-event-v1-events-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-event-v1-events-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-event-v1-events-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-event-v1-events-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-event-v1-events-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-event-v1-events-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-event-v1-events-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-event-v1-events-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-event-v1-events-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-event-v1-events-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-event-v1-events-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-event-v1-events-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-event-v1-events-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-event-v1-events-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#event-v1beta1-events-k8s-io" class="nav-item">Event v1beta1 events.k8s.io</A></LI>
+ <UL id="event-v1beta1-events-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-event-v1beta1-events-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-event-v1beta1-events-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-event-v1beta1-events-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-event-v1beta1-events-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-event-v1beta1-events-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-event-v1beta1-events-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-event-v1beta1-events-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-event-v1beta1-events-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-event-v1beta1-events-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-event-v1beta1-events-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-event-v1beta1-events-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-event-v1beta1-events-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-event-v1beta1-events-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-event-v1beta1-events-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-event-v1beta1-events-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#eventseries-v1-events-k8s-io" class="nav-item">EventSeries v1 events.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#eventseries-v1beta1-events-k8s-io" class="nav-item">EventSeries v1beta1 events.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#externaldocumentation-v1beta1-apiextensions-k8s-io" class="nav-item">ExternalDocumentation v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#externalmetricsource-v2beta1-autoscaling" class="nav-item">ExternalMetricSource v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#externalmetricstatus-v2beta1-autoscaling" class="nav-item">ExternalMetricStatus v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#forzone-v1beta1-discovery-k8s-io" class="nav-item">ForZone v1beta1 discovery.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#httpingresspath-v1beta1-extensions" class="nav-item">HTTPIngressPath v1beta1 extensions</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#httpingresspath-v1beta1-networking-k8s-io" class="nav-item">HTTPIngressPath v1beta1 networking.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#httpingressrulevalue-v1beta1-extensions" class="nav-item">HTTPIngressRuleValue v1beta1 extensions</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#httpingressrulevalue-v1beta1-networking-k8s-io" class="nav-item">HTTPIngressRuleValue v1beta1 networking.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">HorizontalPodAutoscaler v2beta2 autoscaling</A></LI>
+ <UL id="horizontalpodautoscaler-v2beta2-autoscaling-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-horizontalpodautoscaler-v2beta2-autoscaling" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">HorizontalPodAutoscaler v2beta1 autoscaling</A></LI>
+ <UL id="horizontalpodautoscaler-v2beta1-autoscaling-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-horizontalpodautoscaler-v2beta1-autoscaling" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#horizontalpodautoscalercondition-v2beta1-autoscaling" class="nav-item">HorizontalPodAutoscalerCondition v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingress-v1beta1-extensions" class="nav-item">Ingress v1beta1 extensions</A></LI>
+ <UL id="ingress-v1beta1-extensions-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-ingress-v1beta1-extensions-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-ingress-v1beta1-extensions-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-ingress-v1beta1-extensions" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-ingress-v1beta1-extensions" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-ingress-v1beta1-extensions" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-ingress-v1beta1-extensions" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-ingress-v1beta1-extensions" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-ingress-v1beta1-extensions-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-ingress-v1beta1-extensions-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-ingress-v1beta1-extensions" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-ingress-v1beta1-extensions" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-ingress-v1beta1-extensions" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-ingress-v1beta1-extensions" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-ingress-v1beta1-extensions" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-ingress-v1beta1-extensions" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-ingress-v1beta1-extensions-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-ingress-v1beta1-extensions-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-ingress-v1beta1-extensions" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-ingress-v1beta1-extensions" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-ingress-v1beta1-extensions" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingress-v1beta1-networking-k8s-io" class="nav-item">Ingress v1beta1 networking.k8s.io</A></LI>
+ <UL id="ingress-v1beta1-networking-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-ingress-v1beta1-networking-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-ingress-v1beta1-networking-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-ingress-v1beta1-networking-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-ingress-v1beta1-networking-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-ingress-v1beta1-networking-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-ingress-v1beta1-networking-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-ingress-v1beta1-networking-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-ingress-v1beta1-networking-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-ingress-v1beta1-networking-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-ingress-v1beta1-networking-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-ingress-v1beta1-networking-k8s-io" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-ingress-v1beta1-networking-k8s-io" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-ingress-v1beta1-networking-k8s-io" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingressbackend-v1beta1-extensions" class="nav-item">IngressBackend v1beta1 extensions</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingressbackend-v1beta1-networking-k8s-io" class="nav-item">IngressBackend v1beta1 networking.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingressclass-v1beta1-networking-k8s-io" class="nav-item">IngressClass v1beta1 networking.k8s.io</A></LI>
+ <UL id="ingressclass-v1beta1-networking-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-ingressclass-v1beta1-networking-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-ingressclass-v1beta1-networking-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingressclassparametersreference-v1beta1-networking-k8s-io" class="nav-item">IngressClassParametersReference v1beta1 networking.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingressrule-v1beta1-extensions" class="nav-item">IngressRule v1beta1 extensions</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingressrule-v1beta1-networking-k8s-io" class="nav-item">IngressRule v1beta1 networking.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingresstls-v1beta1-extensions" class="nav-item">IngressTLS v1beta1 extensions</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#ingresstls-v1beta1-networking-k8s-io" class="nav-item">IngressTLS v1beta1 networking.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#json-v1beta1-apiextensions-k8s-io" class="nav-item">JSON v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#jsonschemaprops-v1beta1-apiextensions-k8s-io" class="nav-item">JSONSchemaProps v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#jsonschemapropsorarray-v1beta1-apiextensions-k8s-io" class="nav-item">JSONSchemaPropsOrArray v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#jsonschemapropsorbool-v1beta1-apiextensions-k8s-io" class="nav-item">JSONSchemaPropsOrBool v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#jobtemplatespec-v1beta1-batch" class="nav-item">JobTemplateSpec v1beta1 batch</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#lease-v1beta1-coordination-k8s-io" class="nav-item">Lease v1beta1 coordination.k8s.io</A></LI>
+ <UL id="lease-v1beta1-coordination-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-lease-v1beta1-coordination-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-lease-v1beta1-coordination-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-lease-v1beta1-coordination-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-lease-v1beta1-coordination-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-lease-v1beta1-coordination-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-lease-v1beta1-coordination-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-lease-v1beta1-coordination-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-lease-v1beta1-coordination-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-lease-v1beta1-coordination-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-lease-v1beta1-coordination-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#localsubjectaccessreview-v1beta1-authorization-k8s-io" class="nav-item">LocalSubjectAccessReview v1beta1 authorization.k8s.io</A></LI>
+ <UL id="localsubjectaccessreview-v1beta1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-localsubjectaccessreview-v1beta1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#metricspec-v2beta1-autoscaling" class="nav-item">MetricSpec v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#metricstatus-v2beta1-autoscaling" class="nav-item">MetricStatus v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#mutatingwebhook-v1beta1-admissionregistration-k8s-io" class="nav-item">MutatingWebhook v1beta1 admissionregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">MutatingWebhookConfiguration v1beta1 admissionregistration.k8s.io</A></LI>
+ <UL id="mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#nonresourceattributes-v1beta1-authorization-k8s-io" class="nav-item">NonResourceAttributes v1beta1 authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#nonresourcerule-v1beta1-authorization-k8s-io" class="nav-item">NonResourceRule v1beta1 authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#objectmetricsource-v2beta1-autoscaling" class="nav-item">ObjectMetricSource v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#objectmetricstatus-v2beta1-autoscaling" class="nav-item">ObjectMetricStatus v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#overhead-v1beta1-node-k8s-io" class="nav-item">Overhead v1beta1 node.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#overhead-v1alpha1-node-k8s-io" class="nav-item">Overhead v1alpha1 node.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#poddisruptionbudget-v1beta1-policy" class="nav-item">PodDisruptionBudget v1beta1 policy</A></LI>
+ <UL id="poddisruptionbudget-v1beta1-policy-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-poddisruptionbudget-v1beta1-policy" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-poddisruptionbudget-v1beta1-policy" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-poddisruptionbudget-v1beta1-policy" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-poddisruptionbudget-v1beta1-policy" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-poddisruptionbudget-v1beta1-policy" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-poddisruptionbudget-v1beta1-policy" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-poddisruptionbudget-v1beta1-policy" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-poddisruptionbudget-v1beta1-policy" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Replace Status</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#podsmetricsource-v2beta1-autoscaling" class="nav-item">PodsMetricSource v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#podsmetricstatus-v2beta1-autoscaling" class="nav-item">PodsMetricStatus v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#policyrule-v1beta1-rbac-authorization-k8s-io" class="nav-item">PolicyRule v1beta1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#policyrule-v1alpha1-rbac-authorization-k8s-io" class="nav-item">PolicyRule v1alpha1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">PriorityClass v1beta1 scheduling.k8s.io</A></LI>
+ <UL id="priorityclass-v1beta1-scheduling-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-priorityclass-v1beta1-scheduling-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">PriorityClass v1alpha1 scheduling.k8s.io</A></LI>
+ <UL id="priorityclass-v1alpha1-scheduling-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-priorityclass-v1alpha1-scheduling-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#resourceattributes-v1beta1-authorization-k8s-io" class="nav-item">ResourceAttributes v1beta1 authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#resourcemetricsource-v2beta1-autoscaling" class="nav-item">ResourceMetricSource v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#resourcemetricstatus-v2beta1-autoscaling" class="nav-item">ResourceMetricStatus v2beta1 autoscaling</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#resourcerule-v1beta1-authorization-k8s-io" class="nav-item">ResourceRule v1beta1 authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Role v1beta1 rbac.authorization.k8s.io</A></LI>
+ <UL id="role-v1beta1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Role v1alpha1 rbac.authorization.k8s.io</A></LI>
+ <UL id="role-v1alpha1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">RoleBinding v1beta1 rbac.authorization.k8s.io</A></LI>
+ <UL id="rolebinding-v1beta1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">RoleBinding v1alpha1 rbac.authorization.k8s.io</A></LI>
+ <UL id="rolebinding-v1alpha1-rbac-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#roleref-v1beta1-rbac-authorization-k8s-io" class="nav-item">RoleRef v1beta1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#roleref-v1alpha1-rbac-authorization-k8s-io" class="nav-item">RoleRef v1alpha1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#rulewithoperations-v1beta1-admissionregistration-k8s-io" class="nav-item">RuleWithOperations v1beta1 admissionregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#runtimeclass-v1beta1-node-k8s-io" class="nav-item">RuntimeClass v1beta1 node.k8s.io</A></LI>
+ <UL id="runtimeclass-v1beta1-node-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-runtimeclass-v1beta1-node-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-runtimeclass-v1beta1-node-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#runtimeclass-v1alpha1-node-k8s-io" class="nav-item">RuntimeClass v1alpha1 node.k8s.io</A></LI>
+ <UL id="runtimeclass-v1alpha1-node-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-runtimeclass-v1alpha1-node-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#scheduling-v1beta1-node-k8s-io" class="nav-item">Scheduling v1beta1 node.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#scheduling-v1alpha1-node-k8s-io" class="nav-item">Scheduling v1alpha1 node.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io" class="nav-item">SelfSubjectAccessReview v1beta1 authorization.k8s.io</A></LI>
+ <UL id="selfsubjectaccessreview-v1beta1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-selfsubjectaccessreview-v1beta1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io" class="nav-item">SelfSubjectRulesReview v1beta1 authorization.k8s.io</A></LI>
+ <UL id="selfsubjectrulesreview-v1beta1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-selfsubjectrulesreview-v1beta1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#servicereference-v1-apiextensions-k8s-io" class="nav-item">ServiceReference v1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#servicereference-v1-apiregistration-k8s-io" class="nav-item">ServiceReference v1 apiregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#servicereference-v1beta1-admissionregistration-k8s-io" class="nav-item">ServiceReference v1beta1 admissionregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#servicereference-v1beta1-apiextensions-k8s-io" class="nav-item">ServiceReference v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#servicereference-v1beta1-apiregistration-k8s-io" class="nav-item">ServiceReference v1beta1 apiregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#storageclass-v1beta1-storage-k8s-io" class="nav-item">StorageClass v1beta1 storage.k8s.io</A></LI>
+ <UL id="storageclass-v1beta1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-storageclass-v1beta1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-storageclass-v1beta1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-storageclass-v1beta1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-storageclass-v1beta1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-storageclass-v1beta1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-storageclass-v1beta1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-storageclass-v1beta1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-storageclass-v1beta1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-storageclass-v1beta1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#subject-v1-rbac-authorization-k8s-io" class="nav-item">Subject v1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#subject-v1beta1-rbac-authorization-k8s-io" class="nav-item">Subject v1beta1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#subject-v1alpha1-rbac-authorization-k8s-io" class="nav-item">Subject v1alpha1 rbac.authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#subjectaccessreview-v1beta1-authorization-k8s-io" class="nav-item">SubjectAccessReview v1beta1 authorization.k8s.io</A></LI>
+ <UL id="subjectaccessreview-v1beta1-authorization-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-subjectaccessreview-v1beta1-authorization-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#subjectrulesreviewstatus-v1beta1-authorization-k8s-io" class="nav-item">SubjectRulesReviewStatus v1beta1 authorization.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#tokenrequest-v1-storage-k8s-io" class="nav-item">TokenRequest v1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#tokenrequest-v1beta1-storage-k8s-io" class="nav-item">TokenRequest v1beta1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#tokenreview-v1beta1-authentication-k8s-io" class="nav-item">TokenReview v1beta1 authentication.k8s.io</A></LI>
+ <UL id="tokenreview-v1beta1-authentication-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-tokenreview-v1beta1-authentication-k8s-io" class="nav-item">Create</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#userinfo-v1beta1-authentication-k8s-io" class="nav-item">UserInfo v1beta1 authentication.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#validatingwebhook-v1beta1-admissionregistration-k8s-io" class="nav-item">ValidatingWebhook v1beta1 admissionregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">ValidatingWebhookConfiguration v1beta1 admissionregistration.k8s.io</A></LI>
+ <UL id="validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumeattachment-v1beta1-storage-k8s-io" class="nav-item">VolumeAttachment v1beta1 storage.k8s.io</A></LI>
+ <UL id="volumeattachment-v1beta1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-volumeattachment-v1beta1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">VolumeAttachment v1alpha1 storage.k8s.io</A></LI>
+ <UL id="volumeattachment-v1alpha1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-volumeattachment-v1alpha1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumeattachmentsource-v1beta1-storage-k8s-io" class="nav-item">VolumeAttachmentSource v1beta1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumeattachmentsource-v1alpha1-storage-k8s-io" class="nav-item">VolumeAttachmentSource v1alpha1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumeerror-v1beta1-storage-k8s-io" class="nav-item">VolumeError v1beta1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumeerror-v1alpha1-storage-k8s-io" class="nav-item">VolumeError v1alpha1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#volumenoderesources-v1beta1-storage-k8s-io" class="nav-item">VolumeNodeResources v1beta1 storage.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#webhookclientconfig-v1-apiextensions-k8s-io" class="nav-item">WebhookClientConfig v1 apiextensions.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#webhookclientconfig-v1beta1-admissionregistration-k8s-io" class="nav-item">WebhookClientConfig v1beta1 admissionregistration.k8s.io</A></LI>
+</UL>
+<UL>
+ <LI class="nav-level-1"><A href="#webhookclientconfig-v1beta1-apiextensions-k8s-io" class="nav-item">WebhookClientConfig v1beta1 apiextensions.k8s.io</A></LI>
+</UL>
+</DIV>
+<DIV id="page-content-wrapper" class="col-xs-8 offset-xs-4 col-sm-9 offset-sm-3 col-md-10 offset-md-2 body-content">
+<DIV class="row">
+  <DIV class="col-md-6 copyright">
+ <a href="https://github.com/kubernetes/kubernetes">Copyright 2016-2021 The Kubernetes Authors.</a>
+  </DIV>
+  <DIV class="col-md-6 text-right">
+    <DIV>Generated at: 2021-04-01 16:11:53 (PDT)</DIV>
+    <DIV>API Version: <a href="https://github.com/kubernetes/kubernetes/blob/release-1.21/api/openapi-spec/swagger.json">v1.21.0</a></DIV>
+  </DIV>
+</DIV><H1 id="-strong-api-overview-strong-"><STRONG>API OVERVIEW</STRONG></H1>
+
+<P>Welcome to the Kubernetes API.  You can use the Kubernetes API to read
+and write Kubernetes resource objects via a Kubernetes API endpoint.</P>
+
+<H2 id="resource-categories">Resource Categories</H2>
+
+<P>This is a high-level overview of the basic types of resources provide by the Kubernetes API and their primary functions.</P>
+<P><B>Workloads</B> are objects you use to manage and run your containers on the cluster.</P>
+<P><B>Discovery &amp; LB</B> resources are objects you use to "stitch" your workloads together into an externally accessible, load-balanced Service.</P>
+<P><B>Config &amp; Storage</B> resources are objects you use to inject initialization data into your applications, and to persist data that is external to your container.</P>
+<P><B>Cluster</B> resources objects define how the cluster itself is configured; these are typically used only by cluster operators.</P>
+<P><B>Metadata</B> resources are objects you use to configure the behavior of other resources within the cluster, such as <code>HorizontalPodAutoscaler</code> for scaling workloads.</P>
+
+<HR />
+
+<H2 id="resource-objects">Resource Objects</H2>
+
+<P>Resource objects typically have 3 components:</P>
+<UL>
+<LI><B>Resource ObjectMeta</B>: This is metadata about the resource, such as its name, type, api version, annotations, and labels.  This contains
+fields that maybe updated both by the end user and the system (e.g. annotations).</LI>
+<LI><B>ResourceSpec</B>: This is defined by the user and describes the desired state of system.  Fill this in when creating or updating an object.</LI>
+<LI><B>ResourceStatus</B>: This is filled in by the server and reports the current state of the system.  In most cases, users don't need to change this.</LI>
+</UL>
+
+<HR />
+
+<H2 id="resource-operations">Resource Operations</H2>
+
+<P>Most resources provide the following Operations:</P>
+
+<H4 id="resource-operations-create">Create</H4>
+
+<P>Create operations will create the resource in the storage backend.  After a resource is create the system will apply
+the desired state.</P>
+
+<H4 id="resource-operations-update">Update</H4>
+
+<P>Updates come in 2 forms: <B>Replace</B> and <B>Patch</B>:
+
+<UL>
+<LI><B>Replace</B>:
+Replacing a resource object will update the resource by replacing the existing spec with the provided one.  For
+read-then-write operations this is safe because an optimistic lock failure will occur if the resource was modified
+between the read and write. <I>Note</I>: The <I>ResourceStatus</I> will be ignored by the system and will not be updated.
+To update the status, one must invoke the specific status update operation.<BR />
+
+Note: Replacing a resource object may not result immediately in changes being propagated to downstream objects.  For instance
+replacing a <CODE>ConfigMap</CODE> or <CODE>Secret</CODE> resource will not result in all <I>Pod</I>s seeing the changes unless the <I>Pod</I>s are
+restarted out of band.</P></LI>
+
+<LI><B>Patch</B>:
+Patch will apply a change to a specific field.  How the change is merged is defined per field.  Lists may either be
+replaced or merged.  Merging lists will not preserve ordering.<BR />
+
+<B>Patches will never cause optimistic locking failures, and the last write will win.</B>  Patches are recommended
+when the full state is not read before an update, or when failing on optimistic locking is undesirable. <I>When patching
+complex types, arrays and maps, how the patch is applied is defined on a per-field basis and may either replace
+the field's current value, or merge the contents into the current value.</I></LI>
+</UL>
+
+<H4 id="resource-operations-read">Read</H4>
+
+<P>Reads come in 3 forms: <B>Get</B>, <B>List</B> and <B>Watch</B>:<P>
+
+<UL>
+<LI><B>Get</B>: Get will retrieve a specific resource object by name.</LI>
+<LI><B>List</B>: List will retrieve all resource objects of a specific type within a namespace, and the results can be restricted to resources matching a selector query.<BR />
+<B>List All Namespaces</B>: Like <B>List</B> but retrieves resources across all namespaces.</LI>
+<LI><B>Watch</B>: Watch will stream results for an object(s) as it is updated.  Similar to a callback, watch is used to respond to resource changes.</LI>
+</UL>
+
+<H4 id="resource-operations-read">Delete</H4>
+
+<P>Delete will delete a resource.  Depending on the specific resource, child objects may or may not be garbage collected by the server.  See
+notes on specific resource objects for details.</P>
+
+<H4 id="resource-operations-additional">Additional Operations</H4>
+
+<P>Resources may define additional operations specific to that resource type.</P>
+
+<UL>
+	<LI><B>Rollback</B>: Rollback a PodTemplate to a previous version.  Only available for some resource types.</LI>
+	<LI><B>Read / Write Scale</B>: Read or Update the number of replicas for the given resource.  Only available for some resource types.</LI>
+	<LI><B>Read / Write Status</B>: Read or Update the Status for a resource object.  The Status can only changed through these update operations.</LI>
+</UL>
+<HR />
+<H1 id="-strong-api-groups-strong-"><STRONG>API Groups</STRONG></H1>
+<P>The API Groups and their versions are summarized in the following table.</P><TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>apiregistration.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD></TR>
+<TR><TD><CODE>authentication.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v1, v2beta2, v2beta1</CODE></TD></TR>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>certificates.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>coordination.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD></TR>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>events.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>extensions</CODE></TD><TD><CODE>v1beta1</CODE></TD></TR>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD></TR>
+<TR><TD><CODE>internal.apiserver.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD></TR>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1, v1beta1, v1alpha1</CODE></TD></TR>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1, v1beta1</CODE></TD></TR>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1, v1beta1, v1alpha1</CODE></TD></TR>
+<TR><TD><CODE>scheduling.k8s.io</CODE></TD><TD><CODE>v1, v1beta1, v1alpha1</CODE></TD></TR>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1, v1beta1, v1alpha1</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="-strong-workloads-apis-strong-"><STRONG>WORKLOADS</STRONG></H1>
+
+<P>Workloads resources are responsible for managing and running your containers on the cluster. <A href="#container-v1-core">Containers</A> are created
+by Controllers through <A href="#pod-v1-core">Pods</A>. Pods run Containers and provide environmental dependencies such as shared or
+persistent storage <A href="#volume-v1-core">Volumes</A> and <A href="#configmap-v1-core">Configuration</A> or <A href="#secret-v1-core">Secret</A>
+data injected into the container.</P>
+
+<P>The most common Controllers are:</P>
+<UL>
+<LI><A href="#deployment-v1-apps">Deployments</A> for stateless persistent apps (e.g. HTTP servers).</LI>
+<LI><A href="#statefulset-v1-apps">StatefulSets</A> for stateful persistent apps (e.g. databases).</LI>
+<LI><A href="#job-v1-batch">Jobs</A> for run-to-completion apps (e.g. batch Jobs).</LI>
+</UL>
+
+<HR />
+<H1 id="container-v1-core">Container v1 core</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-container-v1-core" aria-controls="example-container-v1-core"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-container-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Container Config to run nginx (must be embedded in a PodSpec to run).</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+name: nginx
+# Run the nginx:1.14 image
+image: nginx:1.14
+
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Container</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-warning col-md-8"><P><I class="fa fa-warning"></I> <B>Warning:</B></P><P>Containers are only ever created within the context of a <a href="#pod-v1-core">Pod</a>.  This is usually done using a Controller.  See Controllers: <a href="#deployment-v1-apps">Deployment</a>, <a href="#job-v1-batch">Job</a>, or <a href="#statefulset-v1-apps">StatefulSet</a></P></DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>args</CODE><BR /><I>string array</I></TD><TD>Arguments to the entrypoint. The docker image&#39;s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container&#39;s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell</TD></TR>
+<TR><TD><CODE>command</CODE><BR /><I>string array</I></TD><TD>Entrypoint array. Not executed within a shell. The docker image&#39;s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container&#39;s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell</TD></TR>
+<TR><TD><CODE>env</CODE><BR /><I><a href="#envvar-v1-core">EnvVar</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>List of environment variables to set in the container. Cannot be updated.</TD></TR>
+<TR><TD><CODE>envFrom</CODE><BR /><I><a href="#envfromsource-v1-core">EnvFromSource</a> array</I></TD><TD>List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.</TD></TR>
+<TR><TD><CODE>image</CODE><BR /><I>string</I></TD><TD>Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.</TD></TR>
+<TR><TD><CODE>imagePullPolicy</CODE><BR /><I>string</I></TD><TD>Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images</TD></TR>
+<TR><TD><CODE>lifecycle</CODE><BR /><I><a href="#lifecycle-v1-core">Lifecycle</a></I></TD><TD>Actions that the management system should take in response to container lifecycle events. Cannot be updated.</TD></TR>
+<TR><TD><CODE>livenessProbe</CODE><BR /><I><a href="#probe-v1-core">Probe</a></I></TD><TD>Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#containerport-v1-core">ContainerPort</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>containerPort</I></TD><TD>List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default &#34;0.0.0.0&#34; address inside a container will be accessible from the network. Cannot be updated.</TD></TR>
+<TR><TD><CODE>readinessProbe</CODE><BR /><I><a href="#probe-v1-core">Probe</a></I></TD><TD>Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I><a href="#resourcerequirements-v1-core">ResourceRequirements</a></I></TD><TD>Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/</TD></TR>
+<TR><TD><CODE>securityContext</CODE><BR /><I><a href="#securitycontext-v1-core">SecurityContext</a></I></TD><TD>Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/</TD></TR>
+<TR><TD><CODE>startupProbe</CODE><BR /><I><a href="#probe-v1-core">Probe</a></I></TD><TD>StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod&#39;s lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes</TD></TR>
+<TR><TD><CODE>stdin</CODE><BR /><I>boolean</I></TD><TD>Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.</TD></TR>
+<TR><TD><CODE>stdinOnce</CODE><BR /><I>boolean</I></TD><TD>Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false</TD></TR>
+<TR><TD><CODE>terminationMessagePath</CODE><BR /><I>string</I></TD><TD>Optional: Path at which the file to which the container&#39;s termination message will be written is mounted into the container&#39;s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.</TD></TR>
+<TR><TD><CODE>terminationMessagePolicy</CODE><BR /><I>string</I></TD><TD>Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.</TD></TR>
+<TR><TD><CODE>tty</CODE><BR /><I>boolean</I></TD><TD>Whether this container should allocate a TTY for itself, also requires &#39;stdin&#39; to be true. Default is false.</TD></TR>
+<TR><TD><CODE>volumeDevices</CODE><BR /><I><a href="#volumedevice-v1-core">VolumeDevice</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>devicePath</I></TD><TD>volumeDevices is the list of block devices to be used by the container.</TD></TR>
+<TR><TD><CODE>volumeMounts</CODE><BR /><I><a href="#volumemount-v1-core">VolumeMount</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>mountPath</I></TD><TD>Pod volumes to mount into the container&#39;s filesystem. Cannot be updated.</TD></TR>
+<TR><TD><CODE>workingDir</CODE><BR /><I>string</I></TD><TD>Container&#39;s working directory. If not specified, the container runtime&#39;s default will be used, which might be configured in the container image. Cannot be updated.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="containerstatus-v1-core">ContainerStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podstatus-v1-core">PodStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerID</CODE><BR /><I>string</I></TD><TD>Container&#39;s ID in the format &#39;docker://&lt;container_id&gt;&#39;.</TD></TR>
+<TR><TD><CODE>image</CODE><BR /><I>string</I></TD><TD>The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images</TD></TR>
+<TR><TD><CODE>imageID</CODE><BR /><I>string</I></TD><TD>ImageID of the container&#39;s image.</TD></TR>
+<TR><TD><CODE>lastState</CODE><BR /><I><a href="#containerstate-v1-core">ContainerState</a></I></TD><TD>Details about the container&#39;s last termination condition.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.</TD></TR>
+<TR><TD><CODE>ready</CODE><BR /><I>boolean</I></TD><TD>Specifies whether the container has passed its readiness probe.</TD></TR>
+<TR><TD><CODE>restartCount</CODE><BR /><I>integer</I></TD><TD>The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.</TD></TR>
+<TR><TD><CODE>started</CODE><BR /><I>boolean</I></TD><TD>Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.</TD></TR>
+<TR><TD><CODE>state</CODE><BR /><I><a href="#containerstate-v1-core">ContainerState</a></I></TD><TD>Details about the container&#39;s current condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="cronjob-v1beta1-batch">CronJob v1beta1 batch</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CronJob</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#cronjob-v1-batch">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjoblist-v1beta1-batch">CronJobList [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#cronjobspec-v1beta1-batch">CronJobSpec</a></I></TD><TD>Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#cronjobstatus-v1beta1-batch">CronJobStatus</a></I></TD><TD>Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="cronjobspec-v1beta1-batch">CronJobSpec v1beta1 batch</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjob-v1beta1-batch">CronJob [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>concurrencyPolicy</CODE><BR /><I>string</I></TD><TD>Specifies how to treat concurrent executions of a Job. Valid values are: - &#34;Allow&#34; (default): allows CronJobs to run concurrently; - &#34;Forbid&#34;: forbids concurrent runs, skipping next run if previous run hasn&#39;t finished yet; - &#34;Replace&#34;: cancels currently running job and replaces it with a new one</TD></TR>
+<TR><TD><CODE>failedJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.</TD></TR>
+<TR><TD><CODE>jobTemplate</CODE><BR /><I><a href="#jobtemplatespec-v1beta1-batch">JobTemplateSpec</a></I></TD><TD>Specifies the job that will be created when executing a CronJob.</TD></TR>
+<TR><TD><CODE>schedule</CODE><BR /><I>string</I></TD><TD>The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.</TD></TR>
+<TR><TD><CODE>startingDeadlineSeconds</CODE><BR /><I>integer</I></TD><TD>Optional deadline in seconds for starting the job if it misses scheduled time for any reason.  Missed jobs executions will be counted as failed ones.</TD></TR>
+<TR><TD><CODE>successfulJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.</TD></TR>
+<TR><TD><CODE>suspend</CODE><BR /><I>boolean</I></TD><TD>This flag tells the controller to suspend subsequent executions, it does not apply to already started executions.  Defaults to false.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="cronjobstatus-v1beta1-batch">CronJobStatus v1beta1 batch</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjob-v1beta1-batch">CronJob [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>active</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a> array</I></TD><TD>A list of pointers to currently running jobs.</TD></TR>
+<TR><TD><CODE>lastScheduleTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Information when was the last time the job was successfully scheduled.</TD></TR>
+<TR><TD><CODE>lastSuccessfulTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Information when was the last time the job successfully completed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="cronjoblist-v1beta1-batch">CronJobList v1beta1 batch</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#cronjob-v1beta1-batch">CronJob</a> array</I></TD><TD>items is the list of CronJobs.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-cronjob-v1beta1-batch-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-cronjob-v1beta1-batch">Create</H2>
+<P>create a CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-cronjob-v1beta1-batch">Patch</H2>
+<P>partially update the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-cronjob-v1beta1-batch">Replace</H2>
+<P>replace the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-cronjob-v1beta1-batch">Delete</H2>
+<P>delete a CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-cronjob-v1beta1-batch">Delete Collection</H2>
+<P>delete collection of CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-cronjob-v1beta1-batch-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-cronjob-v1beta1-batch">Read</H2>
+<P>read the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-cronjob-v1beta1-batch">List</H2>
+<P>list or watch objects of kind CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjoblist-v1beta1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-cronjob-v1beta1-batch">List All Namespaces</H2>
+<P>list or watch objects of kind CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/cronjobs</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjoblist-v1beta1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-cronjob-v1beta1-batch">Watch</H2>
+<P>watch changes to an object of kind CronJob. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-cronjob-v1beta1-batch">Watch List</H2>
+<P>watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-cronjob-v1beta1-batch">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/watch/cronjobs</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-cronjob-v1beta1-batch-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-cronjob-v1beta1-batch">Patch Status</H2>
+<P>partially update status of the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-cronjob-v1beta1-batch">Read Status</H2>
+<P>read status of the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-cronjob-v1beta1-batch">Replace Status</H2>
+<P>replace status of the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="daemonset-v1-apps">DaemonSet v1 apps</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-daemonset-v1-apps" aria-controls="example-daemonset-v1-apps"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">DaemonSet Config to print the `hostname` on each Node in the cluster every 10 seconds.</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  # Unique key of the DaemonSet instance
+  name: daemonset-example
+spec:
+  selector:
+    matchLabels:
+      app: daemonset-example
+  template:
+    metadata:
+      labels:
+        app: daemonset-example
+    spec:
+      containers:
+      # This container is run once on each Node in the cluster
+      - name: daemonset-example
+        image: ubuntu:trusty
+        command:
+        - /bin/sh
+        args:
+        - -c
+        # This script is run through `sh -c &lt;script&gt;`
+        - &gt;-
+          while [ true ]; do
+          echo &#34;DaemonSet running on $(hostname)&#34; ;
+          sleep 10 ;
+          done
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DaemonSet</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#daemonsetlist-v1-apps">DaemonSetList [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#daemonsetspec-v1-apps">DaemonSetSpec</a></I></TD><TD>The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#daemonsetstatus-v1-apps">DaemonSetStatus</a></I></TD><TD>The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="daemonsetspec-v1-apps">DaemonSetSpec v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#daemonset-v1-apps">DaemonSet [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>minReadySeconds</CODE><BR /><I>integer</I></TD><TD>The minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).</TD></TR>
+<TR><TD><CODE>revisionHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template&#39;s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors</TD></TR>
+<TR><TD><CODE>template</CODE><BR /><I><a href="#podtemplatespec-v1-core">PodTemplateSpec</a></I></TD><TD>An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template&#39;s node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template</TD></TR>
+<TR><TD><CODE>updateStrategy</CODE><BR /><I><a href="#daemonsetupdatestrategy-v1-apps">DaemonSetUpdateStrategy</a></I></TD><TD>An update strategy to replace existing DaemonSet pods with new pods.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="daemonsetstatus-v1-apps">DaemonSetStatus v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#daemonset-v1-apps">DaemonSet [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>collisionCount</CODE><BR /><I>integer</I></TD><TD>Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#daemonsetcondition-v1-apps">DaemonSetCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Represents the latest available observations of a DaemonSet&#39;s current state.</TD></TR>
+<TR><TD><CODE>currentNumberScheduled</CODE><BR /><I>integer</I></TD><TD>The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/</TD></TR>
+<TR><TD><CODE>desiredNumberScheduled</CODE><BR /><I>integer</I></TD><TD>The total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/</TD></TR>
+<TR><TD><CODE>numberAvailable</CODE><BR /><I>integer</I></TD><TD>The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)</TD></TR>
+<TR><TD><CODE>numberMisscheduled</CODE><BR /><I>integer</I></TD><TD>The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/</TD></TR>
+<TR><TD><CODE>numberReady</CODE><BR /><I>integer</I></TD><TD>The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and ready.</TD></TR>
+<TR><TD><CODE>numberUnavailable</CODE><BR /><I>integer</I></TD><TD>The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>The most recent generation observed by the daemon set controller.</TD></TR>
+<TR><TD><CODE>updatedNumberScheduled</CODE><BR /><I>integer</I></TD><TD>The total number of nodes that are running updated daemon pod</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="daemonsetlist-v1-apps">DaemonSetList v1 apps</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#daemonset-v1-apps">DaemonSet</a> array</I></TD><TD>A list of daemon sets.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rollingupdatedaemonset-v1-apps">RollingUpdateDaemonSet v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#daemonsetupdatestrategy-v1-apps">DaemonSetUpdateStrategy [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>maxSurge</CODE></TD><TD>The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption. This is an alpha field and requires enabling DaemonSetUpdateSurge feature gate.</TD></TR>
+<TR><TD><CODE>maxUnavailable</CODE></TD><TD>The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding down to a minimum of one. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-daemonset-v1-apps-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-daemonset-v1-apps">Create</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-create-daemonset-v1-apps" aria-controls="req-kubectl-create-daemonset-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-create-daemonset-v1-apps" aria-controls="req-curl-create-daemonset-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-create-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ echo 'apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: daemonset-example
+spec:
+  selector:
+    matchLabels:
+      app: daemonset-example
+  template:
+    metadata:
+      labels:
+        app: daemonset-example
+    spec:
+      containers:
+      - name: daemonset-example
+        image: ubuntu:trusty
+        command:
+        - /bin/sh
+        args:
+        - -c
+        - >-
+          while [ true ]; do
+          echo "DaemonSet running on $(hostname)" ;
+          sleep 10 ;
+          done
+' | kubectl create -f -
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-create-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X POST -H 'Content-Type: application/yaml' --data '
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: daemonset-example
+spec:
+  selector:
+    matchLabels:
+      app: daemonset-example
+  template:
+    metadata:
+      labels:
+        app: daemonset-example
+    spec:
+      containers:
+      - name: daemonset-example
+        image: ubuntu:trusty
+        command:
+        - /bin/sh
+        args:
+        - -c
+        - >-
+          while [ true ]; do
+          echo "DaemonSet running on $(hostname)" ;
+          sleep 10 ;
+          done
+' http://127.0.0.1:8001/apis/apps/v1/namespaces/default/daemonsets
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-create-daemonset-v1-apps" aria-controls="res-kubectl-create-daemonset-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-create-daemonset-v1-apps" aria-controls="res-curl-create-daemonset-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-create-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+daemonset "daemonset-example" created
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-create-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "DaemonSet",
+  "apiVersion": "apps/v1",
+  "metadata": {
+    "name": "daemonset-example",
+    "namespace": "default",
+    "selfLink": "/apis/apps/v1/namespaces/default/daemonsets/daemonset-example",
+    "uid": "65552ced-b0e2-11e6-aef0-42010af00229",
+    "resourceVersion": "3558",
+    "generation": 1,
+    "creationTimestamp": "2016-11-22T18:35:09Z",
+    "labels": {
+      "app": "daemonset-example"
+    }
+  },
+  "spec": {
+    "selector": {
+      "matchLabels": {
+        "app": "daemonset-example"
+      }
+    },
+    "template": {
+      "metadata": {
+        "creationTimestamp": null,
+        "labels": {
+          "app": "daemonset-example"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "daemonset-example",
+            "image": "ubuntu:trusty",
+            "command": [
+              "/bin/sh"
+            ],
+            "args": [
+              "-c",
+              "while [ true ]; do echo \"DaemonSet running on $(hostname)\" ; sleep 10 ; done"
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "IfNotPresent"
+          }
+        ],
+        "restartPolicy": "Always",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    }
+  },
+  "status": {
+    "currentNumberScheduled": 0,
+    "numberMisscheduled": 0,
+    "desiredNumberScheduled": 0
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>create a DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apps/v1/namespaces/{namespace}/daemonsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-daemonset-v1-apps">Patch</H2>
+<P>partially update the specified DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-daemonset-v1-apps">Replace</H2>
+<P>replace the specified DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-daemonset-v1-apps">Delete</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-delete-daemonset-v1-apps" aria-controls="req-kubectl-delete-daemonset-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-delete-daemonset-v1-apps" aria-controls="req-curl-delete-daemonset-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-delete-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl delete daemonset daemonset-example
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-delete-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X DELETE -H 'Content-Type: application/yaml' --data '
+gracePeriodSeconds: 0
+orphanDependents: false
+' 'http://127.0.0.1:8001/apis/apps/v1/namespaces/default/daemonsets/daemonset-example'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-delete-daemonset-v1-apps" aria-controls="res-kubectl-delete-daemonset-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-delete-daemonset-v1-apps" aria-controls="res-curl-delete-daemonset-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-delete-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+daemonset "daemonset-example" deleted
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-delete-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Status",
+  "apiVersion": "v1",
+  "metadata": {},
+  "status": "Success",
+  "code": 200
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>delete a DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-daemonset-v1-apps">Delete Collection</H2>
+<P>delete collection of DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/daemonsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-daemonset-v1-apps-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-daemonset-v1-apps">Read</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-read-daemonset-v1-apps" aria-controls="req-kubectl-read-daemonset-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-read-daemonset-v1-apps" aria-controls="req-curl-read-daemonset-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-read-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get daemonset daemonset-example -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-read-daemonset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET http://127.0.0.1:8001/apis/apps/v1/namespaces/default/daemonsets/daemonset-example
+</CODE></PRE></DIV></DIV></DIV>
+<P>read the specified DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-daemonset-v1-apps">List</H2>
+<P>list or watch objects of kind DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/daemonsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonsetlist-v1-apps">DaemonSetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-daemonset-v1-apps">List All Namespaces</H2>
+<P>list or watch objects of kind DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/daemonsets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonsetlist-v1-apps">DaemonSetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-daemonset-v1-apps">Watch</H2>
+<P>watch changes to an object of kind DaemonSet. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/daemonsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-daemonset-v1-apps">Watch List</H2>
+<P>watch individual changes to a list of DaemonSet. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/daemonsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-daemonset-v1-apps">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of DaemonSet. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/daemonsets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-daemonset-v1-apps-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-daemonset-v1-apps">Patch Status</H2>
+<P>partially update status of the specified DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-daemonset-v1-apps">Read Status</H2>
+<P>read status of the specified DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-daemonset-v1-apps">Replace Status</H2>
+<P>replace status of the specified DaemonSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the DaemonSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#daemonset-v1-apps">DaemonSet</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="deployment-v1-apps">Deployment v1 apps</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-deployment-v1-apps" aria-controls="example-deployment-v1-apps"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Deployment Config to run 3 nginx instances (max rollback set to 10 revisions).</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  # Unique key of the Deployment instance
+  name: deployment-example
+spec:
+  # 3 Pods should exist at all times.
+  replicas: 3
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        # Apply this label to pods and default
+        # the Deployment label selector to this value
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        # Run this image
+        image: nginx:1.14
+
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Deployment</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#deploymentlist-v1-apps">DeploymentList [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata.</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#deploymentspec-v1-apps">DeploymentSpec</a></I></TD><TD>Specification of the desired behavior of the Deployment.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#deploymentstatus-v1-apps">DeploymentStatus</a></I></TD><TD>Most recently observed status of the Deployment.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="deploymentspec-v1-apps">DeploymentSpec v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#deployment-v1-apps">Deployment [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>minReadySeconds</CODE><BR /><I>integer</I></TD><TD>Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)</TD></TR>
+<TR><TD><CODE>paused</CODE><BR /><I>boolean</I></TD><TD>Indicates that the deployment is paused.</TD></TR>
+<TR><TD><CODE>progressDeadlineSeconds</CODE><BR /><I>integer</I></TD><TD>The maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. Defaults to 600s.</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.</TD></TR>
+<TR><TD><CODE>revisionHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template&#39;s labels.</TD></TR>
+<TR><TD><CODE>strategy</CODE><BR /><I><a href="#deploymentstrategy-v1-apps">DeploymentStrategy</a></I><BR /><B>patch strategy</B>: <I>retainKeys</I></TD><TD>The deployment strategy to use to replace existing pods with new ones.</TD></TR>
+<TR><TD><CODE>template</CODE><BR /><I><a href="#podtemplatespec-v1-core">PodTemplateSpec</a></I></TD><TD>Template describes the pods that will be created.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="deploymentstatus-v1-apps">DeploymentStatus v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#deployment-v1-apps">Deployment [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>availableReplicas</CODE><BR /><I>integer</I></TD><TD>Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.</TD></TR>
+<TR><TD><CODE>collisionCount</CODE><BR /><I>integer</I></TD><TD>Count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#deploymentcondition-v1-apps">DeploymentCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Represents the latest available observations of a deployment&#39;s current state.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>The generation observed by the deployment controller.</TD></TR>
+<TR><TD><CODE>readyReplicas</CODE><BR /><I>integer</I></TD><TD>Total number of ready pods targeted by this deployment.</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>Total number of non-terminated pods targeted by this deployment (their labels match the selector).</TD></TR>
+<TR><TD><CODE>unavailableReplicas</CODE><BR /><I>integer</I></TD><TD>Total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.</TD></TR>
+<TR><TD><CODE>updatedReplicas</CODE><BR /><I>integer</I></TD><TD>Total number of non-terminated pods targeted by this deployment that have the desired template spec.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="deploymentlist-v1-apps">DeploymentList v1 apps</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#deployment-v1-apps">Deployment</a> array</I></TD><TD>Items is the list of Deployments.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="deploymentstrategy-v1-apps">DeploymentStrategy v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#deploymentspec-v1-apps">DeploymentSpec [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rollingUpdate</CODE><BR /><I><a href="#rollingupdatedeployment-v1-apps">RollingUpdateDeployment</a></I></TD><TD>Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of deployment. Can be &#34;Recreate&#34; or &#34;RollingUpdate&#34;. Default is RollingUpdate.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rollingupdatedeployment-v1-apps">RollingUpdateDeployment v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#deploymentstrategy-v1-apps">DeploymentStrategy [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>maxSurge</CODE></TD><TD>The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.</TD></TR>
+<TR><TD><CODE>maxUnavailable</CODE></TD><TD>The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-deployment-v1-apps-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-deployment-v1-apps">Create</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-create-deployment-v1-apps" aria-controls="req-kubectl-create-deployment-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-create-deployment-v1-apps" aria-controls="req-curl-create-deployment-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-create-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ echo 'apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment-example
+spec:
+  replicas: 3
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14
+        ports:
+        - containerPort: 80
+' | kubectl create -f -
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-create-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X POST -H 'Content-Type: application/yaml' --data '
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment-example
+spec:
+  replicas: 3
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14
+        ports:
+        - containerPort: 80
+' http://127.0.0.1:8001/apis/apps/v1/namespaces/default/deployments
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-create-deployment-v1-apps" aria-controls="res-kubectl-create-deployment-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-create-deployment-v1-apps" aria-controls="res-curl-create-deployment-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-create-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+deployment "deployment-example" created
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-create-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Deployment",
+  "apiVersion": "apps/v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/apis/apps/v1/namespaces/default/deployments/deployment-example",
+    "uid": "4ccca349-9cb1-11e6-9c54-42010a800148",
+    "resourceVersion": "2118306",
+    "generation": 1,
+    "creationTimestamp": "2016-10-28T01:53:19Z",
+    "labels": {
+      "app": "nginx"
+    }
+  },
+  "spec": {
+    "replicas": 3,
+    "selector": {
+      "matchLabels": {
+        "app": "nginx"
+      }
+    },
+    "template": {
+      "metadata": {
+        "creationTimestamp": null,
+        "labels": {
+          "app": "nginx"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "nginx",
+            "image": "nginx:1.14",
+            "ports": [
+              {
+                "containerPort": 80,
+                "protocol": "TCP"
+              }
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "IfNotPresent"
+          }
+        ],
+        "restartPolicy": "Always",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    },
+    "strategy": {
+      "type": "RollingUpdate",
+      "rollingUpdate": {
+        "maxUnavailable": 1,
+        "maxSurge": 1
+      }
+    },
+    "revisionHistoryLimit": 10
+  },
+  "status": {}
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>create a Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apps/v1/namespaces/{namespace}/deployments</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-deployment-v1-apps">Patch</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-patch-deployment-v1-apps" aria-controls="req-kubectl-patch-deployment-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-patch-deployment-v1-apps" aria-controls="req-curl-patch-deployment-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-patch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl patch deployment deployment-example -p \
+	'{"spec":{"template":{"spec":{"containers":[{"name":"nginx","image":"nginx:1.16"}]}}}}'
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-patch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X PATCH -H 'Content-Type: application/strategic-merge-patch+json' --data '
+{"spec":{"template":{"spec":{"containers":[{"name":"nginx","image":"nginx:1.16"}]}}}}' \
+	'http://127.0.0.1:8001/apis/apps/v1/namespaces/default/deployments/deployment-example'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-patch-deployment-v1-apps" aria-controls="res-kubectl-patch-deployment-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-patch-deployment-v1-apps" aria-controls="res-curl-patch-deployment-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-patch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+"deployment-example" patched
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-patch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Deployment",
+  "apiVersion": "apps/v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/apis/apps/v1/namespaces/default/deployments/deployment-example",
+    "uid": "5dc3a8e6-b0ee-11e6-aef0-42010af00229",
+    "resourceVersion": "164489",
+    "generation": 11,
+    "creationTimestamp": "2016-11-22T20:00:50Z",
+    "labels": {
+      "app": "nginx"
+    },
+    "annotations": {
+      "deployment.kubernetes.io/revision": "5"
+    }
+  },
+  "spec": {
+    "replicas": 3,
+    "selector": {
+      "matchLabels": {
+        "app": "nginx"
+      }
+    },
+    "template": {
+      "metadata": {
+        "creationTimestamp": null,
+        "labels": {
+          "app": "nginx"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "nginx",
+            "image": "nginx:1.16",
+            "ports": [
+              {
+                "containerPort": 80,
+                "protocol": "TCP"
+              }
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "IfNotPresent"
+          }
+        ],
+        "restartPolicy": "Always",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    },
+    "strategy": {
+      "type": "RollingUpdate",
+      "rollingUpdate": {
+        "maxUnavailable": 1,
+        "maxSurge": 1
+      }
+    },
+    "revisionHistoryLimit": 10
+  },
+  "status": {
+    "observedGeneration": 10,
+    "replicas": 3,
+    "updatedReplicas": 3,
+    "availableReplicas": 3
+  }
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>partially update the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-deployment-v1-apps">Replace</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-replace-deployment-v1-apps" aria-controls="req-kubectl-replace-deployment-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-replace-deployment-v1-apps" aria-controls="req-curl-replace-deployment-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-replace-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ echo 'apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment-example
+spec:
+  replicas: 3
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.16
+        ports:
+        - containerPort: 80
+' | kubectl replace -f -
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-replace-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X PUT -H 'Content-Type: application/yaml' --data '
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment-example
+spec:
+  replicas: 3
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.16
+        ports:
+        - containerPort: 80
+' http://127.0.0.1:8001/apis/apps/v1/namespaces/default/deployments/deployment-example
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-replace-deployment-v1-apps" aria-controls="res-kubectl-replace-deployment-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-replace-deployment-v1-apps" aria-controls="res-curl-replace-deployment-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-replace-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+deployment "deployment-example" replaced
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-replace-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Deployment",
+  "apiVersion": "apps/v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/apis/apps/v1/namespaces/default/deployments/deployment-example",
+    "uid": "4ccca349-9cb1-11e6-9c54-42010a800148",
+    "resourceVersion": "2119082",
+    "generation": 5,
+    "creationTimestamp": "2016-10-28T01:53:19Z",
+    "labels": {
+      "app": "nginx"
+    }
+  },
+  "spec": {
+    "replicas": 3,
+    "selector": {
+      "matchLabels": {
+        "app": "nginx"
+      }
+    },
+    "template": {
+      "metadata": {
+        "creationTimestamp": null,
+        "labels": {
+          "app": "nginx"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "nginx",
+            "image": "nginx:1.16",
+            "ports": [
+              {
+                "containerPort": 80,
+                "protocol": "TCP"
+              }
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "IfNotPresent"
+          }
+        ],
+        "restartPolicy": "Always",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    },
+    "strategy": {
+      "type": "RollingUpdate",
+      "rollingUpdate": {
+        "maxUnavailable": 1,
+        "maxSurge": 1
+      }
+    },
+    "revisionHistoryLimit": 10
+  },
+  "status": {
+    "observedGeneration": 4,
+    "replicas": 3,
+    "updatedReplicas": 3,
+    "availableReplicas": 3
+  }
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>replace the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-deployment-v1-apps">Delete</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-delete-deployment-v1-apps" aria-controls="req-kubectl-delete-deployment-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-delete-deployment-v1-apps" aria-controls="req-curl-delete-deployment-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-delete-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl delete deployment deployment-example
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-delete-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X DELETE -H 'Content-Type: application/yaml' --data '
+gracePeriodSeconds: 0
+orphanDependents: false
+' 'http://127.0.0.1:8001/apis/apps/v1/namespaces/default/deployments/deployment-example'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-delete-deployment-v1-apps" aria-controls="res-kubectl-delete-deployment-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-delete-deployment-v1-apps" aria-controls="res-curl-delete-deployment-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-delete-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+deployment "deployment-example" deleted
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-delete-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Status",
+  "apiVersion": "v1",
+  "metadata": {},
+  "status": "Success",
+  "code": 200
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>delete a Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/deployments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-deployment-v1-apps">Delete Collection</H2>
+<P>delete collection of Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/deployments</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-deployment-v1-apps-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-deployment-v1-apps">Read</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-read-deployment-v1-apps" aria-controls="req-kubectl-read-deployment-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-read-deployment-v1-apps" aria-controls="req-curl-read-deployment-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-read-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get deployment deployment-example -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-read-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET http://127.0.0.1:8001/apis/apps/v1/namespaces/default/deployments/deployment-example
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-read-deployment-v1-apps" aria-controls="res-kubectl-read-deployment-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-read-deployment-v1-apps" aria-controls="res-curl-read-deployment-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-read-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+  "kind": "Deployment",
+  "apiVersion": "apps/v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/apis/apps/v1/namespaces/default/deployments/deployment-example",
+    "uid": "1b33145a-9c63-11e6-9c54-42010a800148",
+    "resourceVersion": "2064726",
+    "generation": 4,
+    "creationTimestamp": "2016-10-27T16:33:35Z",
+    "labels": {
+      "app": "nginx"
+    },
+    "annotations": {
+      "deployment.kubernetes.io/revision": "1"
+    }
+  },
+  "spec": {
+    "replicas": 3,
+    "selector": {
+      "matchLabels": {
+        "app": "nginx"
+      }
+    },
+    "template": {
+      "metadata": {
+        "creationTimestamp": null,
+        "labels": {
+          "app": "nginx"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "nginx",
+            "image": "nginx:1.14",
+            "ports": [
+              {
+                "containerPort": 80,
+                "protocol": "TCP"
+              }
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "IfNotPresent"
+          }
+        ],
+        "restartPolicy": "Always",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    },
+    "strategy": {
+      "type": "RollingUpdate",
+      "rollingUpdate": {
+        "maxUnavailable": 1,
+        "maxSurge": 1
+      }
+    }
+  },
+  "status": {
+    "observedGeneration": 4,
+    "replicas": 3,
+    "updatedReplicas": 3,
+    "availableReplicas": 3
+  }
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-read-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Deployment",
+  "apiVersion": "apps/v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/apis/apps/v1/namespaces/default/deployments/deployment-example",
+    "uid": "1b33145a-9c63-11e6-9c54-42010a800148",
+    "resourceVersion": "2064726",
+    "generation": 4,
+    "creationTimestamp": "2016-10-27T16:33:35Z",
+    "labels": {
+      "app": "nginx"
+    },
+    "annotations": {
+      "deployment.kubernetes.io/revision": "1"
+    }
+  },
+  "spec": {
+    "replicas": 3,
+    "selector": {
+      "matchLabels": {
+        "app": "nginx"
+      }
+    },
+    "template": {
+      "metadata": {
+        "creationTimestamp": null,
+        "labels": {
+          "app": "nginx"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "nginx",
+            "image": "nginx:1.14",
+            "ports": [
+              {
+                "containerPort": 80,
+                "protocol": "TCP"
+              }
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "IfNotPresent"
+          }
+        ],
+        "restartPolicy": "Always",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    },
+    "strategy": {
+      "type": "RollingUpdate",
+      "rollingUpdate": {
+        "maxUnavailable": 1,
+        "maxSurge": 1
+      }
+    }
+  },
+  "status": {
+    "observedGeneration": 4,
+    "replicas": 3,
+    "updatedReplicas": 3,
+    "availableReplicas": 3
+  }
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>read the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-deployment-v1-apps">List</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-list-deployment-v1-apps" aria-controls="req-kubectl-list-deployment-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-list-deployment-v1-apps" aria-controls="req-curl-list-deployment-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-list-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get deployment -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-list-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET 'http://127.0.0.1:8001/apis/apps/v1/namespaces/default/deployments'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-list-deployment-v1-apps" aria-controls="res-kubectl-list-deployment-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-list-deployment-v1-apps" aria-controls="res-curl-list-deployment-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-list-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+  "kind": "List",
+  "apiVersion": "v1",
+  "metadata": {},
+  "items": [
+    {
+      "kind": "Deployment",
+      "apiVersion": "app/v1beta1",
+      "metadata": {
+        "name": "docs",
+        "namespace": "default",
+        "selfLink": "/apis/app/v1beta1/namespaces/default/deployments/docs",
+        "uid": "ef49e1d2-915e-11e6-be81-42010a80003f",
+        "resourceVersion": "1924126",
+        "generation": 21,
+        "creationTimestamp": "2016-10-13T16:06:00Z",
+        "labels": {
+          "run": "docs"
+        },
+        "annotations": {
+          "deployment.kubernetes.io/revision": "10",
+          "replicatingperfection.net/push-image": "true"
+        }
+      },
+      "spec": {
+        "replicas": 1,
+        "selector": {
+          "matchLabels": {
+            "run": "docs"
+          }
+        },
+        "template": {
+          "metadata": {
+            "creationTimestamp": null,
+            "labels": {
+              "auto-pushed-image-pwittrock/api-docs": "1477496453",
+              "run": "docs"
+            }
+          },
+          "spec": {
+            "containers": [
+              {
+                "name": "docs",
+                "image": "pwittrock/api-docs:v9",
+                "resources": {},
+                "terminationMessagePath": "/dev/termination-log",
+                "imagePullPolicy": "Always"
+              }
+            ],
+            "restartPolicy": "Always",
+            "terminationGracePeriodSeconds": 30,
+            "dnsPolicy": "ClusterFirst",
+            "securityContext": {}
+          }
+        },
+        "strategy": {
+          "type": "RollingUpdate",
+          "rollingUpdate": {
+            "maxUnavailable": 1,
+            "maxSurge": 1
+          }
+        }
+      },
+      "status": {
+        "observedGeneration": 21,
+        "replicas": 1,
+        "updatedReplicas": 1,
+        "availableReplicas": 1
+      }
+    },
+    {
+      "kind": "Deployment",
+      "apiVersion": "app/v1beta1",
+      "metadata": {
+        "name": "deployment-example",
+        "namespace": "default",
+        "selfLink": "/apis/app/v1beta1/namespaces/default/deployments/deployment-example",
+        "uid": "1b33145a-9c63-11e6-9c54-42010a800148",
+        "resourceVersion": "2064726",
+        "generation": 4,
+        "creationTimestamp": "2016-10-27T16:33:35Z",
+        "labels": {
+          "app": "nginx"
+        },
+        "annotations": {
+          "deployment.kubernetes.io/revision": "1"
+        }
+      },
+      "spec": {
+        "replicas": 3,
+        "selector": {
+          "matchLabels": {
+            "app": "nginx"
+          }
+        },
+        "template": {
+          "metadata": {
+            "creationTimestamp": null,
+            "labels": {
+              "app": "nginx"
+            }
+          },
+          "spec": {
+            "containers": [
+              {
+                "name": "nginx",
+                "image": "nginx:1.14",
+                "ports": [
+                  {
+                    "containerPort": 80,
+                    "protocol": "TCP"
+                  }
+                ],
+                "resources": {},
+                "terminationMessagePath": "/dev/termination-log",
+                "imagePullPolicy": "IfNotPresent"
+              }
+            ],
+            "restartPolicy": "Always",
+            "terminationGracePeriodSeconds": 30,
+            "dnsPolicy": "ClusterFirst",
+            "securityContext": {}
+          }
+        },
+        "strategy": {
+          "type": "RollingUpdate",
+          "rollingUpdate": {
+            "maxUnavailable": 1,
+            "maxSurge": 1
+          }
+        }
+      },
+      "status": {
+        "observedGeneration": 4,
+        "replicas": 3,
+        "updatedReplicas": 3,
+        "availableReplicas": 3
+      }
+    }
+  ]
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-list-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "List",
+  "apiVersion": "v1",
+  "metadata": {},
+  "items": [
+    {
+      "kind": "Deployment",
+      "apiVersion": "app/v1beta1",
+      "metadata": {
+        "name": "docs",
+        "namespace": "default",
+        "selfLink": "/apis/app/v1beta1/namespaces/default/deployments/docs",
+        "uid": "ef49e1d2-915e-11e6-be81-42010a80003f",
+        "resourceVersion": "1924126",
+        "generation": 21,
+        "creationTimestamp": "2016-10-13T16:06:00Z",
+        "labels": {
+          "run": "docs"
+        },
+        "annotations": {
+          "deployment.kubernetes.io/revision": "10",
+          "replicatingperfection.net/push-image": "true"
+        }
+      },
+      "spec": {
+        "replicas": 1,
+        "selector": {
+          "matchLabels": {
+            "run": "docs"
+          }
+        },
+        "template": {
+          "metadata": {
+            "creationTimestamp": null,
+            "labels": {
+              "auto-pushed-image-pwittrock/api-docs": "1477496453",
+              "run": "docs"
+            }
+          },
+          "spec": {
+            "containers": [
+              {
+                "name": "docs",
+                "image": "pwittrock/api-docs:v9",
+                "resources": {},
+                "terminationMessagePath": "/dev/termination-log",
+                "imagePullPolicy": "Always"
+              }
+            ],
+            "restartPolicy": "Always",
+            "terminationGracePeriodSeconds": 30,
+            "dnsPolicy": "ClusterFirst",
+            "securityContext": {}
+          }
+        },
+        "strategy": {
+          "type": "RollingUpdate",
+          "rollingUpdate": {
+            "maxUnavailable": 1,
+            "maxSurge": 1
+          }
+        }
+      },
+      "status": {
+        "observedGeneration": 21,
+        "replicas": 1,
+        "updatedReplicas": 1,
+        "availableReplicas": 1
+      }
+    },
+    {
+      "kind": "Deployment",
+      "apiVersion": "app/v1beta1",
+      "metadata": {
+        "name": "deployment-example",
+        "namespace": "default",
+        "selfLink": "/apis/app/v1beta1/namespaces/default/deployments/deployment-example",
+        "uid": "1b33145a-9c63-11e6-9c54-42010a800148",
+        "resourceVersion": "2064726",
+        "generation": 4,
+        "creationTimestamp": "2016-10-27T16:33:35Z",
+        "labels": {
+          "app": "nginx"
+        },
+        "annotations": {
+          "deployment.kubernetes.io/revision": "1"
+        }
+      },
+      "spec": {
+        "replicas": 3,
+        "selector": {
+          "matchLabels": {
+            "app": "nginx"
+          }
+        },
+        "template": {
+          "metadata": {
+            "creationTimestamp": null,
+            "labels": {
+              "app": "nginx"
+            }
+          },
+          "spec": {
+            "containers": [
+              {
+                "name": "nginx",
+                "image": "nginx:1.14",
+                "ports": [
+                  {
+                    "containerPort": 80,
+                    "protocol": "TCP"
+                  }
+                ],
+                "resources": {},
+                "terminationMessagePath": "/dev/termination-log",
+                "imagePullPolicy": "IfNotPresent"
+              }
+            ],
+            "restartPolicy": "Always",
+            "terminationGracePeriodSeconds": 30,
+            "dnsPolicy": "ClusterFirst",
+            "securityContext": {}
+          }
+        },
+        "strategy": {
+          "type": "RollingUpdate",
+          "rollingUpdate": {
+            "maxUnavailable": 1,
+            "maxSurge": 1
+          }
+        }
+      },
+      "status": {
+        "observedGeneration": 4,
+        "replicas": 3,
+        "updatedReplicas": 3,
+        "availableReplicas": 3
+      }
+    }
+  ]
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>list or watch objects of kind Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/deployments</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deploymentlist-v1-apps">DeploymentList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-deployment-v1-apps">List All Namespaces</H2>
+<P>list or watch objects of kind Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/deployments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deploymentlist-v1-apps">DeploymentList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-deployment-v1-apps">Watch</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-watch-deployment-v1-apps" aria-controls="req-kubectl-watch-deployment-v1-apps"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-watch-deployment-v1-apps" aria-controls="req-curl-watch-deployment-v1-apps"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-watch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get deployment deployment-example --watch -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-watch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET 'http://127.0.0.1:8001/apis/apps/v1/watch/namespaces/default/deployments/deployment-example'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-watch-deployment-v1-apps" aria-controls="res-kubectl-watch-deployment-v1-apps"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-watch-deployment-v1-apps" aria-controls="res-curl-watch-deployment-v1-apps"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-watch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+	"type": "ADDED",
+	"object": {
+		"kind": "Deployment",
+		"apiVersion": "apps/v1",
+		"metadata": {
+			"name": "deployment-example",
+			"namespace": "default",
+			"selfLink": "/apis/apps/v1/namespaces/default/deployments/deployment-example",
+			"uid": "64c12290-9cbf-11e6-9c54-42010a800148",
+			"resourceVersion": "2128095",
+			"generation": 2,
+			"creationTimestamp": "2016-10-28T03:34:12Z",
+			"labels": {
+				"app": "nginx"
+			},
+			"annotations": {
+				"deployment.kubernetes.io/revision": "3"
+			}
+		},
+		"spec": {
+			"replicas": 3,
+			"selector": {
+				"matchLabels": {
+					"app": "nginx"
+				}
+			},
+			"template": {
+				"metadata": {
+					"creationTimestamp": null,
+					"labels": {
+						"app": "nginx"
+					}
+				},
+				"spec": {
+					"containers": [
+						{
+							"name": "nginx",
+							"image": "nginx:1.14",
+							"ports": [
+								{
+									"containerPort": 80,
+									"protocol": "TCP"
+								}
+							],
+							"resources": {
+							},
+							"terminationMessagePath": "/dev/termination-log",
+							"imagePullPolicy": "IfNotPresent"
+						}
+					],
+					"restartPolicy": "Always",
+					"terminationGracePeriodSeconds": 30,
+					"dnsPolicy": "ClusterFirst",
+					"securityContext": {
+					}
+				}
+			},
+			"strategy": {
+				"type": "RollingUpdate",
+				"rollingUpdate": {
+					"maxUnavailable": 1,
+					"maxSurge": 1
+				}
+			}
+		},
+		"status": {
+			"observedGeneration": 2,
+			"replicas": 3,
+			"updatedReplicas": 3,
+			"availableReplicas": 3
+		}
+	}
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-watch-deployment-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+	"type": "ADDED",
+	"object": {
+		"kind": "Deployment",
+		"apiVersion": "apps/v1",
+		"metadata": {
+			"name": "deployment-example",
+			"namespace": "default",
+			"selfLink": "/apis/apps/v1/namespaces/default/deployments/deployment-example",
+			"uid": "64c12290-9cbf-11e6-9c54-42010a800148",
+			"resourceVersion": "2128095",
+			"generation": 2,
+			"creationTimestamp": "2016-10-28T03:34:12Z",
+			"labels": {
+				"app": "nginx"
+			},
+			"annotations": {
+				"deployment.kubernetes.io/revision": "3"
+			}
+		},
+		"spec": {
+			"replicas": 3,
+			"selector": {
+				"matchLabels": {
+					"app": "nginx"
+				}
+			},
+			"template": {
+				"metadata": {
+					"creationTimestamp": null,
+					"labels": {
+						"app": "nginx"
+					}
+				},
+				"spec": {
+					"containers": [
+						{
+							"name": "nginx",
+							"image": "nginx:1.14",
+							"ports": [
+								{
+									"containerPort": 80,
+									"protocol": "TCP"
+								}
+							],
+							"resources": {
+							},
+							"terminationMessagePath": "/dev/termination-log",
+							"imagePullPolicy": "IfNotPresent"
+						}
+					],
+					"restartPolicy": "Always",
+					"terminationGracePeriodSeconds": 30,
+					"dnsPolicy": "ClusterFirst",
+					"securityContext": {
+					}
+				}
+			},
+			"strategy": {
+				"type": "RollingUpdate",
+				"rollingUpdate": {
+					"maxUnavailable": 1,
+					"maxSurge": 1
+				}
+			}
+		},
+		"status": {
+			"observedGeneration": 2,
+			"replicas": 3,
+			"updatedReplicas": 3,
+			"availableReplicas": 3
+		}
+	}
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>watch changes to an object of kind Deployment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/deployments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-deployment-v1-apps">Watch List</H2>
+<P>watch individual changes to a list of Deployment. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/deployments</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-deployment-v1-apps">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Deployment. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/deployments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-deployment-v1-apps-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-deployment-v1-apps">Patch Status</H2>
+<P>partially update status of the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-deployment-v1-apps">Read Status</H2>
+<P>read status of the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-deployment-v1-apps">Replace Status</H2>
+<P>replace status of the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Deployment</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#deployment-v1-apps">Deployment</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-misc-operations-deployment-v1-apps-strong-"><STRONG>Misc Operations</STRONG></H2>
+<H2 id="read-scale-deployment-v1-apps">Read Scale</H2>
+<P>read scale of the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-scale-deployment-v1-apps">Replace Scale</H2>
+<P>replace scale of the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-scale-deployment-v1-apps">Patch Scale</H2>
+<P>partially update scale of the specified Deployment</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="job-v1-batch">Job v1 batch</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-job-v1-batch" aria-controls="example-job-v1-batch"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Job Config to print pi up to 2000 digits (then exit).</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+apiVersion: batch/v1
+kind: Job
+metadata:
+  # Unique key of the Job instance
+  name: example-job
+spec:
+  template:
+    metadata:
+      name: example-job
+    spec:
+      containers:
+      - name: pi
+        image: perl
+        command: [&#34;perl&#34;]
+        args: [&#34;-Mbignum=bpi&#34;, &#34;-wle&#34;, &#34;print bpi(2000)&#34;]
+      # Do not restart containers after they exit
+      restartPolicy: Never
+
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Job</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#joblist-v1-batch">JobList [batch/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#jobspec-v1-batch">JobSpec</a></I></TD><TD>Specification of the desired behavior of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#jobstatus-v1-batch">JobStatus</a></I></TD><TD>Current status of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="jobspec-v1-batch">JobSpec v1 batch</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#job-v1-batch">Job [batch/v1]</a></LI>
+  <LI><a href="#jobtemplatespec-v1-batch">JobTemplateSpec [batch/v1]</a></LI>
+  <LI><a href="#jobtemplatespec-v1beta1-batch">JobTemplateSpec [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>activeDeadlineSeconds</CODE><BR /><I>integer</I></TD><TD>Specifies the duration in seconds relative to the startTime that the job may be continuously active before the system tries to terminate it; value must be positive integer. If a Job is suspended (at creation or through an update), this timer will effectively be stopped and reset when the Job is resumed again.</TD></TR>
+<TR><TD><CODE>backoffLimit</CODE><BR /><I>integer</I></TD><TD>Specifies the number of retries before marking this job failed. Defaults to 6</TD></TR>
+<TR><TD><CODE>completionMode</CODE><BR /><I>string</I></TD><TD>CompletionMode specifies how Pod completions are tracked. It can be `NonIndexed` (default) or `Indexed`.  `NonIndexed` means that the Job is considered complete when there have been .spec.completions successfully completed Pods. Each Pod completion is homologous to each other.  `Indexed` means that the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1), available in the annotation batch.kubernetes.io/job-completion-index. The Job is considered complete when there is one successfully completed Pod for each index. When value is `Indexed`, .spec.completions must be specified and `.spec.parallelism` must be less than or equal to 10^5.  This field is alpha-level and is only honored by servers that enable the IndexedJob feature gate. More completion modes can be added in the future. If the Job controller observes a mode that it doesn&#39;t recognize, the controller skips updates for the Job.</TD></TR>
+<TR><TD><CODE>completions</CODE><BR /><I>integer</I></TD><TD>Specifies the desired number of successfully finished pods the job should be run with.  Setting to nil means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value.  Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/</TD></TR>
+<TR><TD><CODE>manualSelector</CODE><BR /><I>boolean</I></TD><TD>manualSelector controls generation of pod labels and pod selectors. Leave `manualSelector` unset unless you are certain what you are doing. When false or unset, the system pick labels unique to this job and appends those labels to the pod template.  When true, the user is responsible for picking unique labels and specifying the selector.  Failure to pick a unique label may cause this and other jobs to not function correctly.  However, You may see `manualSelector=true` in jobs that were created with the old `extensions/v1beta1` API. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector</TD></TR>
+<TR><TD><CODE>parallelism</CODE><BR /><I>integer</I></TD><TD>Specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when ((.spec.completions - .status.successful) &lt; .spec.parallelism), i.e. when the work left to do is less than max parallelism. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>A label query over pods that should match the pod count. Normally, the system sets this field for you. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors</TD></TR>
+<TR><TD><CODE>suspend</CODE><BR /><I>boolean</I></TD><TD>Suspend specifies whether the Job controller should create Pods or not. If a Job is created with suspend set to true, no Pods are created by the Job controller. If a Job is suspended after creation (i.e. the flag goes from false to true), the Job controller will delete all active Pods associated with this Job. Users must design their workload to gracefully handle this. Suspending a Job will reset the StartTime field of the Job, effectively resetting the ActiveDeadlineSeconds timer too. This is an alpha field and requires the SuspendJob feature gate to be enabled; otherwise this field may not be set to true. Defaults to false.</TD></TR>
+<TR><TD><CODE>template</CODE><BR /><I><a href="#podtemplatespec-v1-core">PodTemplateSpec</a></I></TD><TD>Describes the pod that will be created when executing a job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/</TD></TR>
+<TR><TD><CODE>ttlSecondsAfterFinished</CODE><BR /><I>integer</I></TD><TD>ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won&#39;t be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="jobstatus-v1-batch">JobStatus v1 batch</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#job-v1-batch">Job [batch/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>active</CODE><BR /><I>integer</I></TD><TD>The number of actively running pods.</TD></TR>
+<TR><TD><CODE>completedIndexes</CODE><BR /><I>string</I></TD><TD>CompletedIndexes holds the completed indexes when .spec.completionMode = &#34;Indexed&#34; in a text format. The indexes are represented as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as &#34;1,3-5,7&#34;.</TD></TR>
+<TR><TD><CODE>completionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Represents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC. The completion time is only set when the job finishes successfully.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#jobcondition-v1-batch">JobCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>The latest available observations of an object&#39;s current state. When a Job fails, one of the conditions will have type &#34;Failed&#34; and status true. When a Job is suspended, one of the conditions will have type &#34;Suspended&#34; and status true; when the Job is resumed, the status of this condition will become false. When a Job is completed, one of the conditions will have type &#34;Complete&#34; and status true. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/</TD></TR>
+<TR><TD><CODE>failed</CODE><BR /><I>integer</I></TD><TD>The number of pods which reached phase Failed.</TD></TR>
+<TR><TD><CODE>startTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Represents time when the job controller started processing a job. When a Job is created in the suspended state, this field is not set until the first time it is resumed. This field is reset every time a Job is resumed from suspension. It is represented in RFC3339 form and is in UTC.</TD></TR>
+<TR><TD><CODE>succeeded</CODE><BR /><I>integer</I></TD><TD>The number of pods which reached phase Succeeded.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="joblist-v1-batch">JobList v1 batch</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#job-v1-batch">Job</a> array</I></TD><TD>items is the list of Jobs.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-job-v1-batch-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-job-v1-batch">Create</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-create-job-v1-batch" aria-controls="req-kubectl-create-job-v1-batch"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-create-job-v1-batch" aria-controls="req-curl-create-job-v1-batch"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-create-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ echo 'apiVersion: batch/v1
+kind: Job
+metadata:
+  name: example-job
+spec:
+  template:
+    metadata:
+      name: example-job
+    spec:
+      containers:
+      - name: pi
+        image: perl
+        command: ["perl",  "-Mbignum=bpi", "-wle", "print bpi(2000)"]
+      restartPolicy: Never
+' | kubectl create -f -
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-create-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X POST -H 'Content-Type: application/yaml' --data '
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: example-job
+spec:
+  template:
+    metadata:
+      name: example-job
+    spec:
+      containers:
+      - name: pi
+        image: perl
+        command: ["perl",  "-Mbignum=bpi", "-wle", "print bpi(2000)"]
+      restartPolicy: Never
+' http://127.0.0.1:8001/apis/batch/v1/namespaces/default/jobs
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-create-job-v1-batch" aria-controls="res-kubectl-create-job-v1-batch"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-create-job-v1-batch" aria-controls="res-curl-create-job-v1-batch"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-create-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+job "example-job" created
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-create-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Job",
+  "apiVersion": "batch/v1",
+  "metadata": {
+    "name": "example-job",
+    "namespace": "default",
+    "selfLink": "/apis/batch/v1/namespaces/default/jobs/example-job",
+    "uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+    "resourceVersion": "7479",
+    "creationTimestamp": "2016-11-04T18:45:25Z"
+  },
+  "spec": {
+    "parallelism": 1,
+    "completions": 1,
+    "selector": {
+      "matchLabels": {
+        "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7"
+      }
+    },
+    "template": {
+      "metadata": {
+        "name": "example-job",
+        "creationTimestamp": null,
+        "labels": {
+          "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+          "job-name": "example-job"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "pi",
+            "image": "perl",
+            "command": [
+              "perl",
+              "-Mbignum=bpi",
+              "-wle",
+              "print bpi(2000)"
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "Always"
+          }
+        ],
+        "restartPolicy": "Never",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    }
+  },
+  "status": {}
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>create a Job</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/batch/v1/namespaces/{namespace}/jobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#job-v1-batch">Job</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-job-v1-batch">Patch</H2>
+<P>partially update the specified Job</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-job-v1-batch">Replace</H2>
+<P>replace the specified Job</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#job-v1-batch">Job</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-job-v1-batch">Delete</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-delete-job-v1-batch" aria-controls="req-kubectl-delete-job-v1-batch"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-delete-job-v1-batch" aria-controls="req-curl-delete-job-v1-batch"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-delete-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl delete job example-job
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-delete-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X DELETE -H 'Content-Type: application/yaml' --data '
+gracePeriodSeconds: 0
+orphanDependents: false
+' 'http://127.0.0.1:8001/apis/batch/v1/namespaces/default/jobs/example-job'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-delete-job-v1-batch" aria-controls="res-kubectl-delete-job-v1-batch"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-delete-job-v1-batch" aria-controls="res-curl-delete-job-v1-batch"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-delete-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+job "example-job" deleted
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-delete-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Status",
+  "apiVersion": "v1",
+  "metadata": {},
+  "status": "Success",
+  "code": 200
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>delete a Job</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/batch/v1/namespaces/{namespace}/jobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-job-v1-batch">Delete Collection</H2>
+<P>delete collection of Job</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/batch/v1/namespaces/{namespace}/jobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-job-v1-batch-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-job-v1-batch">Read</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-read-job-v1-batch" aria-controls="req-kubectl-read-job-v1-batch"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-read-job-v1-batch" aria-controls="req-curl-read-job-v1-batch"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-read-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get job example-job -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-read-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET http://127.0.0.1:8001/apis/batch/v1/namespaces/default/jobs/example-job
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-read-job-v1-batch" aria-controls="res-kubectl-read-job-v1-batch"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-read-job-v1-batch" aria-controls="res-curl-read-job-v1-batch"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-read-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+  "kind": "Job",
+  "apiVersion": "batch/v1",
+  "metadata": {
+    "name": "example-job",
+    "namespace": "default",
+    "selfLink": "/apis/batch/v1/namespaces/default/jobs/example-job",
+    "uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+    "resourceVersion": "7482",
+    "creationTimestamp": "2016-11-04T18:45:25Z"
+  },
+  "spec": {
+    "parallelism": 1,
+    "completions": 1,
+    "selector": {
+      "matchLabels": {
+        "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7"
+      }
+    },
+    "template": {
+      "metadata": {
+        "name": "example-job",
+        "creationTimestamp": null,
+        "labels": {
+          "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+          "job-name": "example-job"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "pi",
+            "image": "perl",
+            "command": [
+              "perl",
+              "-Mbignum=bpi",
+              "-wle",
+              "print bpi(2000)"
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "Always"
+          }
+        ],
+        "restartPolicy": "Never",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    }
+  },
+  "status": {
+    "startTime": "2016-11-04T18:45:25Z",
+    "active": 1
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-read-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Job",
+  "apiVersion": "batch/v1",
+  "metadata": {
+    "name": "example-job",
+    "namespace": "default",
+    "selfLink": "/apis/batch/v1/namespaces/default/jobs/example-job",
+    "uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+    "resourceVersion": "7482",
+    "creationTimestamp": "2016-11-04T18:45:25Z"
+  },
+  "spec": {
+    "parallelism": 1,
+    "completions": 1,
+    "selector": {
+      "matchLabels": {
+        "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7"
+      }
+    },
+    "template": {
+      "metadata": {
+        "name": "example-job",
+        "creationTimestamp": null,
+        "labels": {
+          "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+          "job-name": "example-job"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "pi",
+            "image": "perl",
+            "command": [
+              "perl",
+              "-Mbignum=bpi",
+              "-wle",
+              "print bpi(2000)"
+            ],
+            "resources": {},
+            "terminationMessagePath": "/dev/termination-log",
+            "imagePullPolicy": "Always"
+          }
+        ],
+        "restartPolicy": "Never",
+        "terminationGracePeriodSeconds": 30,
+        "dnsPolicy": "ClusterFirst",
+        "securityContext": {}
+      }
+    }
+  },
+  "status": {
+    "startTime": "2016-11-04T18:45:25Z",
+    "active": 1
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>read the specified Job</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-job-v1-batch">List</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-list-job-v1-batch" aria-controls="req-kubectl-list-job-v1-batch"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-list-job-v1-batch" aria-controls="req-curl-list-job-v1-batch"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-list-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get job -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-list-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET 'http://127.0.0.1:8001/apis/batch/v1/namespaces/default/jobs'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-list-job-v1-batch" aria-controls="res-kubectl-list-job-v1-batch"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-list-job-v1-batch" aria-controls="res-curl-list-job-v1-batch"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-list-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+  "kind": "JobList",
+  "apiVersion": "batch/v1",
+  "metadata": {
+    "selfLink": "/apis/batch/v1/namespaces/default/jobs",
+    "resourceVersion": "7589"
+  },
+  "items": [
+    {
+      "metadata": {
+        "name": "",
+        "namespace": "default",
+        "selfLink": "/apis/batch/v1/namespaces/default/jobs/",
+        "uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+        "resourceVersion": "7482",
+        "creationTimestamp": "2016-11-04T18:45:25Z"
+      },
+      "spec": {
+        "parallelism": 1,
+        "completions": 1,
+        "selector": {
+          "matchLabels": {
+            "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7"
+          }
+        },
+        "template": {
+          "metadata": {
+            "name": "",
+            "creationTimestamp": null,
+            "labels": {
+              "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+              "job-name": ""
+            }
+          },
+          "spec": {
+            "containers": [
+              {
+                "name": "pi",
+                "image": "perl",
+                "command": [
+                  "perl",
+                  "-Mbignum=bpi",
+                  "-wle",
+                  "print bpi(2000)"
+                ],
+                "resources": {},
+                "terminationMessagePath": "/dev/termination-log",
+                "imagePullPolicy": "Always"
+              }
+            ],
+            "restartPolicy": "Never",
+            "terminationGracePeriodSeconds": 30,
+            "dnsPolicy": "ClusterFirst",
+            "securityContext": {}
+          }
+        }
+      },
+      "status": {
+        "startTime": "2016-11-04T18:45:25Z",
+        "active": 1
+      }
+    }
+  ]
+}
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-list-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "JobList",
+  "apiVersion": "batch/v1",
+  "metadata": {
+    "selfLink": "/apis/batch/v1/namespaces/default/jobs",
+    "resourceVersion": "7589"
+  },
+  "items": [
+    {
+      "metadata": {
+        "name": "",
+        "namespace": "default",
+        "selfLink": "/apis/batch/v1/namespaces/default/jobs/",
+        "uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+        "resourceVersion": "7482",
+        "creationTimestamp": "2016-11-04T18:45:25Z"
+      },
+      "spec": {
+        "parallelism": 1,
+        "completions": 1,
+        "selector": {
+          "matchLabels": {
+            "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7"
+          }
+        },
+        "template": {
+          "metadata": {
+            "name": "",
+            "creationTimestamp": null,
+            "labels": {
+              "controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+              "job-name": ""
+            }
+          },
+          "spec": {
+            "containers": [
+              {
+                "name": "pi",
+                "image": "perl",
+                "command": [
+                  "perl",
+                  "-Mbignum=bpi",
+                  "-wle",
+                  "print bpi(2000)"
+                ],
+                "resources": {},
+                "terminationMessagePath": "/dev/termination-log",
+                "imagePullPolicy": "Always"
+              }
+            ],
+            "restartPolicy": "Never",
+            "terminationGracePeriodSeconds": 30,
+            "dnsPolicy": "ClusterFirst",
+            "securityContext": {}
+          }
+        }
+      },
+      "status": {
+        "startTime": "2016-11-04T18:45:25Z",
+        "active": 1
+      }
+    }
+  ]
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>list or watch objects of kind Job</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1/namespaces/{namespace}/jobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#joblist-v1-batch">JobList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-job-v1-batch">List All Namespaces</H2>
+<P>list or watch objects of kind Job</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1/jobs</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#joblist-v1-batch">JobList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-job-v1-batch">Watch</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-watch-job-v1-batch" aria-controls="req-kubectl-watch-job-v1-batch"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-watch-job-v1-batch" aria-controls="req-curl-watch-job-v1-batch"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-watch-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get job example-job --watch -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-watch-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET 'http://127.0.0.1:8001/apis/batch/v1/watch/namespaces/default/jobs/example-job'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-watch-job-v1-batch" aria-controls="res-kubectl-watch-job-v1-batch"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-watch-job-v1-batch" aria-controls="res-curl-watch-job-v1-batch"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-watch-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+	"type": "ADDED",
+	"object": {
+		"kind": "Job",
+		"apiVersion": "batch/v1",
+		"metadata": {
+			"name": "example-job",
+			"namespace": "default",
+			"selfLink": "/apis/batch/v1/namespaces/default/jobs/example-job",
+			"uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+			"resourceVersion": "7482",
+			"creationTimestamp": "2016-11-04T18:45:25Z"
+		},
+		"spec": {
+			"parallelism": 1,
+			"completions": 1,
+			"selector": {
+				"matchLabels": {
+					"controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7"
+				}
+			},
+			"template": {
+				"metadata": {
+					"name": "example-job",
+					"creationTimestamp": null,
+					"labels": {
+						"controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+						"job-name": "example-job"
+					}
+				},
+				"spec": {
+					"containers": [
+						{
+							"name": "pi",
+							"image": "perl",
+							"command": [
+								"perl",
+								"-Mbignum=bpi",
+								"-wle",
+								"print bpi(2000)"
+							],
+							"resources": {
+							},
+							"terminationMessagePath": "/dev/termination-log",
+							"imagePullPolicy": "Always"
+						}
+					],
+					"restartPolicy": "Never",
+					"terminationGracePeriodSeconds": 30,
+					"dnsPolicy": "ClusterFirst",
+					"securityContext": {
+					}
+				}
+			}
+		},
+		"status": {
+			"startTime": "2016-11-04T18:45:25Z",
+			"active": 1
+		}
+	}
+}
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-watch-job-v1-batch">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+	"type": "ADDED",
+	"object": {
+		"kind": "Job",
+		"apiVersion": "batch/v1",
+		"metadata": {
+			"name": "example-job",
+			"namespace": "default",
+			"selfLink": "/apis/batch/v1/namespaces/default/jobs/example-job",
+			"uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+			"resourceVersion": "7482",
+			"creationTimestamp": "2016-11-04T18:45:25Z"
+		},
+		"spec": {
+			"parallelism": 1,
+			"completions": 1,
+			"selector": {
+				"matchLabels": {
+					"controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7"
+				}
+			},
+			"template": {
+				"metadata": {
+					"name": "example-job",
+					"creationTimestamp": null,
+					"labels": {
+						"controller-uid": "d93a3569-a2be-11e6-a008-fa043d458cc7",
+						"job-name": "example-job"
+					}
+				},
+				"spec": {
+					"containers": [
+						{
+							"name": "pi",
+							"image": "perl",
+							"command": [
+								"perl",
+								"-Mbignum=bpi",
+								"-wle",
+								"print bpi(2000)"
+							],
+							"resources": {
+							},
+							"terminationMessagePath": "/dev/termination-log",
+							"imagePullPolicy": "Always"
+						}
+					],
+					"restartPolicy": "Never",
+					"terminationGracePeriodSeconds": 30,
+					"dnsPolicy": "ClusterFirst",
+					"securityContext": {
+					}
+				}
+			}
+		},
+		"status": {
+			"startTime": "2016-11-04T18:45:25Z",
+			"active": 1
+		}
+	}
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>watch changes to an object of kind Job. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1/watch/namespaces/{namespace}/jobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-job-v1-batch">Watch List</H2>
+<P>watch individual changes to a list of Job. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1/watch/namespaces/{namespace}/jobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-job-v1-batch">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Job. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1/watch/jobs</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-job-v1-batch-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-job-v1-batch">Patch Status</H2>
+<P>partially update status of the specified Job</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-job-v1-batch">Read Status</H2>
+<P>read status of the specified Job</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-job-v1-batch">Replace Status</H2>
+<P>replace status of the specified Job</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Job</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#job-v1-batch">Job</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#job-v1-batch">Job</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="pod-v1-core">Pod v1 core</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-pod-v1-core" aria-controls="example-pod-v1-core"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-pod-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Pod Config to print "Hello World".</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+apiVersion: v1
+kind: Pod
+metadata:
+  name: pod-example
+spec:
+  containers:
+  - name: ubuntu
+    image: ubuntu:trusty
+    command: [&#34;echo&#34;]
+    args: [&#34;Hello World&#34;]
+
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Pod</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-warning col-md-8"><P><I class="fa fa-warning"></I> <B>Warning:</B></P><P>It is recommended that users create Pods only through a Controller, and not directly.  See Controllers: <a href="#deployment-v1-apps">Deployment</a>, <a href="#job-v1-batch">Job</a>, or <a href="#statefulset-v1-apps">StatefulSet</a>.</P></DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podlist-v1-core">PodList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#podspec-v1-core">PodSpec</a></I></TD><TD>Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#podstatus-v1-core">PodStatus</a></I></TD><TD>Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="podspec-v1-core">PodSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#pod-v1-core">Pod [core/v1]</a></LI>
+  <LI><a href="#podtemplatespec-v1-core">PodTemplateSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>activeDeadlineSeconds</CODE><BR /><I>integer</I></TD><TD>Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.</TD></TR>
+<TR><TD><CODE>affinity</CODE><BR /><I><a href="#affinity-v1-core">Affinity</a></I></TD><TD>If specified, the pod&#39;s scheduling constraints</TD></TR>
+<TR><TD><CODE>automountServiceAccountToken</CODE><BR /><I>boolean</I></TD><TD>AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.</TD></TR>
+<TR><TD><CODE>containers</CODE><BR /><I><a href="#container-v1-core">Container</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.</TD></TR>
+<TR><TD><CODE>dnsConfig</CODE><BR /><I><a href="#poddnsconfig-v1-core">PodDNSConfig</a></I></TD><TD>Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.</TD></TR>
+<TR><TD><CODE>dnsPolicy</CODE><BR /><I>string</I></TD><TD>Set DNS policy for the pod. Defaults to &#34;ClusterFirst&#34;. Valid values are &#39;ClusterFirstWithHostNet&#39;, &#39;ClusterFirst&#39;, &#39;Default&#39; or &#39;None&#39;. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to &#39;ClusterFirstWithHostNet&#39;.</TD></TR>
+<TR><TD><CODE>enableServiceLinks</CODE><BR /><I>boolean</I></TD><TD>EnableServiceLinks indicates whether information about services should be injected into pod&#39;s environment variables, matching the syntax of Docker links. Optional: Defaults to true.</TD></TR>
+<TR><TD><CODE>ephemeralContainers</CODE><BR /><I><a href="#ephemeralcontainer-v1-core">EphemeralContainer</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod&#39;s ephemeralcontainers subresource. This field is alpha-level and is only honored by servers that enable the EphemeralContainers feature.</TD></TR>
+<TR><TD><CODE>hostAliases</CODE><BR /><I><a href="#hostalias-v1-core">HostAlias</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>ip</I></TD><TD>HostAliases is an optional list of hosts and IPs that will be injected into the pod&#39;s hosts file if specified. This is only valid for non-hostNetwork pods.</TD></TR>
+<TR><TD><CODE>hostIPC</CODE><BR /><I>boolean</I></TD><TD>Use the host&#39;s ipc namespace. Optional: Default to false.</TD></TR>
+<TR><TD><CODE>hostNetwork</CODE><BR /><I>boolean</I></TD><TD>Host networking requested for this pod. Use the host&#39;s network namespace. If this option is set, the ports that will be used must be specified. Default to false.</TD></TR>
+<TR><TD><CODE>hostPID</CODE><BR /><I>boolean</I></TD><TD>Use the host&#39;s pid namespace. Optional: Default to false.</TD></TR>
+<TR><TD><CODE>hostname</CODE><BR /><I>string</I></TD><TD>Specifies the hostname of the Pod If not specified, the pod&#39;s hostname will be set to a system-defined value.</TD></TR>
+<TR><TD><CODE>imagePullSecrets</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod</TD></TR>
+<TR><TD><CODE>initContainers</CODE><BR /><I><a href="#container-v1-core">Container</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/</TD></TR>
+<TR><TD><CODE>nodeName</CODE><BR /><I>string</I></TD><TD>NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.</TD></TR>
+<TR><TD><CODE>nodeSelector</CODE><BR /><I>object</I></TD><TD>NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node&#39;s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/</TD></TR>
+<TR><TD><CODE>overhead</CODE><BR /><I>object</I></TD><TD>Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.</TD></TR>
+<TR><TD><CODE>preemptionPolicy</CODE><BR /><I>string</I></TD><TD>PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.</TD></TR>
+<TR><TD><CODE>priority</CODE><BR /><I>integer</I></TD><TD>The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.</TD></TR>
+<TR><TD><CODE>priorityClassName</CODE><BR /><I>string</I></TD><TD>If specified, indicates the pod&#39;s priority. &#34;system-node-critical&#34; and &#34;system-cluster-critical&#34; are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.</TD></TR>
+<TR><TD><CODE>readinessGates</CODE><BR /><I><a href="#podreadinessgate-v1-core">PodReadinessGate</a> array</I></TD><TD>If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to &#34;True&#34; More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md</TD></TR>
+<TR><TD><CODE>restartPolicy</CODE><BR /><I>string</I></TD><TD>Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy</TD></TR>
+<TR><TD><CODE>runtimeClassName</CODE><BR /><I>string</I></TD><TD>RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the &#34;legacy&#34; RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.</TD></TR>
+<TR><TD><CODE>schedulerName</CODE><BR /><I>string</I></TD><TD>If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.</TD></TR>
+<TR><TD><CODE>securityContext</CODE><BR /><I><a href="#podsecuritycontext-v1-core">PodSecurityContext</a></I></TD><TD>SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty.  See type description for default values of each field.</TD></TR>
+<TR><TD><CODE>serviceAccount</CODE><BR /><I>string</I></TD><TD>DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.</TD></TR>
+<TR><TD><CODE>serviceAccountName</CODE><BR /><I>string</I></TD><TD>ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/</TD></TR>
+<TR><TD><CODE>setHostnameAsFQDN</CODE><BR /><I>boolean</I></TD><TD>If true the pod&#39;s hostname will be configured as the pod&#39;s FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.</TD></TR>
+<TR><TD><CODE>shareProcessNamespace</CODE><BR /><I>boolean</I></TD><TD>Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.</TD></TR>
+<TR><TD><CODE>subdomain</CODE><BR /><I>string</I></TD><TD>If specified, the fully qualified Pod hostname will be &#34;&lt;hostname&gt;.&lt;subdomain&gt;.&lt;pod namespace&gt;.svc.&lt;cluster domain&gt;&#34;. If not specified, the pod will not have a domainname at all.</TD></TR>
+<TR><TD><CODE>terminationGracePeriodSeconds</CODE><BR /><I>integer</I></TD><TD>Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.</TD></TR>
+<TR><TD><CODE>tolerations</CODE><BR /><I><a href="#toleration-v1-core">Toleration</a> array</I></TD><TD>If specified, the pod&#39;s tolerations.</TD></TR>
+<TR><TD><CODE>topologySpreadConstraints</CODE><BR /><I><a href="#topologyspreadconstraint-v1-core">TopologySpreadConstraint</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>topologyKey</I></TD><TD>TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.</TD></TR>
+<TR><TD><CODE>volumes</CODE><BR /><I><a href="#volume-v1-core">Volume</a> array</I><BR /><B>patch strategy</B>: <I>merge,retainKeys</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="podstatus-v1-core">PodStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#pod-v1-core">Pod [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#podcondition-v1-core">PodCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions</TD></TR>
+<TR><TD><CODE>containerStatuses</CODE><BR /><I><a href="#containerstatus-v1-core">ContainerStatus</a> array</I></TD><TD>The list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status</TD></TR>
+<TR><TD><CODE>ephemeralContainerStatuses</CODE><BR /><I><a href="#containerstatus-v1-core">ContainerStatus</a> array</I></TD><TD>Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.</TD></TR>
+<TR><TD><CODE>hostIP</CODE><BR /><I>string</I></TD><TD>IP address of the host to which the pod is assigned. Empty if not yet scheduled.</TD></TR>
+<TR><TD><CODE>initContainerStatuses</CODE><BR /><I><a href="#containerstatus-v1-core">ContainerStatus</a> array</I></TD><TD>The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human readable message indicating details about why the pod is in this condition.</TD></TR>
+<TR><TD><CODE>nominatedNodeName</CODE><BR /><I>string</I></TD><TD>nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.</TD></TR>
+<TR><TD><CODE>phase</CODE><BR /><I>string</I></TD><TD>The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod&#39;s status. There are five possible phase values:  Pending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase</TD></TR>
+<TR><TD><CODE>podIP</CODE><BR /><I>string</I></TD><TD>IP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.</TD></TR>
+<TR><TD><CODE>podIPs</CODE><BR /><I><a href="#podip-v1-core">PodIP</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>ip</I></TD><TD>podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.</TD></TR>
+<TR><TD><CODE>qosClass</CODE><BR /><I>string</I></TD><TD>The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>A brief CamelCase message indicating details about why the pod is in this state. e.g. &#39;Evicted&#39;</TD></TR>
+<TR><TD><CODE>startTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="podlist-v1-core">PodList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#pod-v1-core">Pod</a> array</I></TD><TD>List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-pod-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-pod-v1-core">Create</H2>
+<P>create a Pod</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/pods</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="create-eviction-pod-v1-core">Create Eviction</H2>
+<P>create eviction of a Pod</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/pods/{name}/eviction</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Eviction</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#eviction-v1beta1-policy">Eviction</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#eviction-v1beta1-policy">Eviction</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#eviction-v1beta1-policy">Eviction</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#eviction-v1beta1-policy">Eviction</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-pod-v1-core">Patch</H2>
+<P>partially update the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/pods/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-pod-v1-core">Replace</H2>
+<P>replace the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/pods/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-pod-v1-core">Delete</H2>
+<P>delete a Pod</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/pods/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-pod-v1-core">Delete Collection</H2>
+<P>delete collection of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/pods</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-pod-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-pod-v1-core">Read</H2>
+<P>read the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-pod-v1-core">List</H2>
+<P>list or watch objects of kind Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podlist-v1-core">PodList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-pod-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/pods</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podlist-v1-core">PodList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-pod-v1-core">Watch</H2>
+<P>watch changes to an object of kind Pod. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/pods/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-pod-v1-core">Watch List</H2>
+<P>watch individual changes to a list of Pod. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/pods</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-pod-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Pod. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/pods</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-pod-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-pod-v1-core">Patch Status</H2>
+<P>partially update status of the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/pods/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-pod-v1-core">Read Status</H2>
+<P>read status of the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-pod-v1-core">Replace Status</H2>
+<P>replace status of the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/pods/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-proxy-operations-pod-v1-core-strong-"><STRONG>Proxy Operations</STRONG></H2>
+<H2 id="create-connect-portforward-pod-v1-core">Create Connect Portforward</H2>
+<P>connect POST requests to portforward of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/pods/{name}/portforward</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodPortForwardOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ports</CODE></TD><TD>List of ports to forward Required when using WebSockets</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="create-connect-proxy-pod-v1-core">Create Connect Proxy</H2>
+<P>connect POST requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/pods/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="create-connect-proxy-path-pod-v1-core">Create Connect Proxy Path</H2>
+<P>connect POST requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/pods/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-connect-proxy-pod-v1-core">Delete Connect Proxy</H2>
+<P>connect DELETE requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/pods/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-connect-proxy-path-pod-v1-core">Delete Connect Proxy Path</H2>
+<P>connect DELETE requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/pods/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="get-connect-portforward-pod-v1-core">Get Connect Portforward</H2>
+<P>connect GET requests to portforward of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods/{name}/portforward</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodPortForwardOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ports</CODE></TD><TD>List of ports to forward Required when using WebSockets</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="get-connect-proxy-pod-v1-core">Get Connect Proxy</H2>
+<P>connect GET requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="get-connect-proxy-path-pod-v1-core">Get Connect Proxy Path</H2>
+<P>connect GET requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="head-connect-proxy-pod-v1-core">Head Connect Proxy</H2>
+<P>connect HEAD requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>HEAD /api/v1/namespaces/{namespace}/pods/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="head-connect-proxy-path-pod-v1-core">Head Connect Proxy Path</H2>
+<P>connect HEAD requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>HEAD /api/v1/namespaces/{namespace}/pods/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-connect-proxy-pod-v1-core">Replace Connect Proxy</H2>
+<P>connect PUT requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/pods/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-connect-proxy-path-pod-v1-core">Replace Connect Proxy Path</H2>
+<P>connect PUT requests to proxy of Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/pods/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-misc-operations-pod-v1-core-strong-"><STRONG>Misc Operations</STRONG></H2>
+<H2 id="read-log-pod-v1-core">Read Log</H2>
+<P>read log of the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods/{name}/log</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Pod</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>container</CODE></TD><TD>The container for which to stream logs. Defaults to only container if there is one container in the pod.</TD></TR>
+<TR><TD><CODE>follow</CODE></TD><TD>Follow the log stream of the pod. Defaults to false.</TD></TR>
+<TR><TD><CODE>insecureSkipTLSVerifyBackend</CODE></TD><TD>insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to.  This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet.  If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).</TD></TR>
+<TR><TD><CODE>limitBytes</CODE></TD><TD>If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>previous</CODE></TD><TD>Return previous terminated container logs. Defaults to false.</TD></TR>
+<TR><TD><CODE>sinceSeconds</CODE></TD><TD>A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.</TD></TR>
+<TR><TD><CODE>tailLines</CODE></TD><TD>If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime</TD></TR>
+<TR><TD><CODE>timestamps</CODE></TD><TD>If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="replicaset-v1-apps">ReplicaSet v1 apps</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-replicaset-v1-apps" aria-controls="example-replicaset-v1-apps"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-replicaset-v1-apps">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">ReplicaSet Config to run 3 nginx instances.</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+apiVersion: apps/v1
+kind: ReplicaSet
+metadata:
+  # Unique key of the ReplicaSet instance
+  name: replicaset-example
+spec:
+  # 3 Pods should exist at all times.
+  replicas: 3
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      # Run the nginx image
+      - name: nginx
+        image: nginx:1.14
+
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ReplicaSet</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-warning col-md-8"><P><I class="fa fa-warning"></I> <B>Warning:</B></P><P>In many cases it is recommended to create a <a href="#deployment-v1-apps">Deployment</a> instead of ReplicaSet.</P></DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicasetlist-v1-apps">ReplicaSetList [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#replicasetspec-v1-apps">ReplicaSetSpec</a></I></TD><TD>Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#replicasetstatus-v1-apps">ReplicaSetStatus</a></I></TD><TD>Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="replicasetspec-v1-apps">ReplicaSetSpec v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicaset-v1-apps">ReplicaSet [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>minReadySeconds</CODE><BR /><I>integer</I></TD><TD>Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template&#39;s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors</TD></TR>
+<TR><TD><CODE>template</CODE><BR /><I><a href="#podtemplatespec-v1-core">PodTemplateSpec</a></I></TD><TD>Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="replicasetstatus-v1-apps">ReplicaSetStatus v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicaset-v1-apps">ReplicaSet [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>availableReplicas</CODE><BR /><I>integer</I></TD><TD>The number of available replicas (ready for at least minReadySeconds) for this replica set.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#replicasetcondition-v1-apps">ReplicaSetCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Represents the latest available observations of a replica set&#39;s current state.</TD></TR>
+<TR><TD><CODE>fullyLabeledReplicas</CODE><BR /><I>integer</I></TD><TD>The number of pods that have labels matching the labels of the pod template of the replicaset.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>ObservedGeneration reflects the generation of the most recently observed ReplicaSet.</TD></TR>
+<TR><TD><CODE>readyReplicas</CODE><BR /><I>integer</I></TD><TD>The number of ready replicas for this replica set.</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>Replicas is the most recently oberved number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="replicasetlist-v1-apps">ReplicaSetList v1 apps</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#replicaset-v1-apps">ReplicaSet</a> array</I></TD><TD>List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-replicaset-v1-apps-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-replicaset-v1-apps">Create</H2>
+<P>create a ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apps/v1/namespaces/{namespace}/replicasets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-replicaset-v1-apps">Patch</H2>
+<P>partially update the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-replicaset-v1-apps">Replace</H2>
+<P>replace the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-replicaset-v1-apps">Delete</H2>
+<P>delete a ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/replicasets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-replicaset-v1-apps">Delete Collection</H2>
+<P>delete collection of ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/replicasets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-replicaset-v1-apps-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-replicaset-v1-apps">Read</H2>
+<P>read the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-replicaset-v1-apps">List</H2>
+<P>list or watch objects of kind ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/replicasets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicasetlist-v1-apps">ReplicaSetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-replicaset-v1-apps">List All Namespaces</H2>
+<P>list or watch objects of kind ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/replicasets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicasetlist-v1-apps">ReplicaSetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-replicaset-v1-apps">Watch</H2>
+<P>watch changes to an object of kind ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/replicasets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-replicaset-v1-apps">Watch List</H2>
+<P>watch individual changes to a list of ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/replicasets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-replicaset-v1-apps">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/replicasets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-replicaset-v1-apps-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-replicaset-v1-apps">Patch Status</H2>
+<P>partially update status of the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-replicaset-v1-apps">Read Status</H2>
+<P>read status of the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-replicaset-v1-apps">Replace Status</H2>
+<P>replace status of the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicaSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#replicaset-v1-apps">ReplicaSet</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-misc-operations-replicaset-v1-apps-strong-"><STRONG>Misc Operations</STRONG></H2>
+<H2 id="read-scale-replicaset-v1-apps">Read Scale</H2>
+<P>read scale of the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-scale-replicaset-v1-apps">Replace Scale</H2>
+<P>replace scale of the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-scale-replicaset-v1-apps">Patch Scale</H2>
+<P>partially update scale of the specified ReplicaSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="replicationcontroller-v1-core">ReplicationController v1 core</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-replicationcontroller-v1-core" aria-controls="example-replicationcontroller-v1-core"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-replicationcontroller-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">ReplicationController Config to run 3 nginx instances.</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+apiVersion: v1
+kind: ReplicationController
+metadata:
+  # Unique key of the ReplicationController instance
+  name: replicationcontroller-example
+spec:
+  # 3 Pods should exist at all times.
+  replicas: 3
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      # Run the nginx image
+      - name: nginx
+        image: nginx:1.14
+
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ReplicationController</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-warning col-md-8"><P><I class="fa fa-warning"></I> <B>Warning:</B></P><P>In many cases it is recommended to create a <a href="#deployment-v1-apps">Deployment</a> instead of a ReplicationController.</P></DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicationcontrollerlist-v1-core">ReplicationControllerList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#replicationcontrollerspec-v1-core">ReplicationControllerSpec</a></I></TD><TD>Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#replicationcontrollerstatus-v1-core">ReplicationControllerStatus</a></I></TD><TD>Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="replicationcontrollerspec-v1-core">ReplicationControllerSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicationcontroller-v1-core">ReplicationController [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>minReadySeconds</CODE><BR /><I>integer</I></TD><TD>Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I>object</I></TD><TD>Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors</TD></TR>
+<TR><TD><CODE>template</CODE><BR /><I><a href="#podtemplatespec-v1-core">PodTemplateSpec</a></I></TD><TD>Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="replicationcontrollerstatus-v1-core">ReplicationControllerStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicationcontroller-v1-core">ReplicationController [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>availableReplicas</CODE><BR /><I>integer</I></TD><TD>The number of available replicas (ready for at least minReadySeconds) for this replication controller.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#replicationcontrollercondition-v1-core">ReplicationControllerCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Represents the latest available observations of a replication controller&#39;s current state.</TD></TR>
+<TR><TD><CODE>fullyLabeledReplicas</CODE><BR /><I>integer</I></TD><TD>The number of pods that have labels matching the labels of the pod template of the replication controller.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>ObservedGeneration reflects the generation of the most recently observed replication controller.</TD></TR>
+<TR><TD><CODE>readyReplicas</CODE><BR /><I>integer</I></TD><TD>The number of ready replicas for this replication controller.</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>Replicas is the most recently oberved number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="replicationcontrollerlist-v1-core">ReplicationControllerList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#replicationcontroller-v1-core">ReplicationController</a> array</I></TD><TD>List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-replicationcontroller-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-replicationcontroller-v1-core">Create</H2>
+<P>create a ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/replicationcontrollers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-replicationcontroller-v1-core">Patch</H2>
+<P>partially update the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-replicationcontroller-v1-core">Replace</H2>
+<P>replace the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-replicationcontroller-v1-core">Delete</H2>
+<P>delete a ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/replicationcontrollers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-replicationcontroller-v1-core">Delete Collection</H2>
+<P>delete collection of ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/replicationcontrollers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-replicationcontroller-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-replicationcontroller-v1-core">Read</H2>
+<P>read the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-replicationcontroller-v1-core">List</H2>
+<P>list or watch objects of kind ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/replicationcontrollers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontrollerlist-v1-core">ReplicationControllerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-replicationcontroller-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/replicationcontrollers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontrollerlist-v1-core">ReplicationControllerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-replicationcontroller-v1-core">Watch</H2>
+<P>watch changes to an object of kind ReplicationController. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/replicationcontrollers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-replicationcontroller-v1-core">Watch List</H2>
+<P>watch individual changes to a list of ReplicationController. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/replicationcontrollers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-replicationcontroller-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of ReplicationController. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/replicationcontrollers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-replicationcontroller-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-replicationcontroller-v1-core">Patch Status</H2>
+<P>partially update status of the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-replicationcontroller-v1-core">Read Status</H2>
+<P>read status of the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-replicationcontroller-v1-core">Replace Status</H2>
+<P>replace status of the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ReplicationController</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#replicationcontroller-v1-core">ReplicationController</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-misc-operations-replicationcontroller-v1-core-strong-"><STRONG>Misc Operations</STRONG></H2>
+<H2 id="read-scale-replicationcontroller-v1-core">Read Scale</H2>
+<P>read scale of the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-scale-replicationcontroller-v1-core">Replace Scale</H2>
+<P>replace scale of the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-scale-replicationcontroller-v1-core">Patch Scale</H2>
+<P>partially update scale of the specified ReplicationController</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="statefulset-v1-apps">StatefulSet v1 apps</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StatefulSet</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#statefulsetlist-v1-apps">StatefulSetList [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#statefulsetspec-v1-apps">StatefulSetSpec</a></I></TD><TD>Spec defines the desired identities of pods in this set.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#statefulsetstatus-v1-apps">StatefulSetStatus</a></I></TD><TD>Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="statefulsetspec-v1-apps">StatefulSetSpec v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#statefulset-v1-apps">StatefulSet [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>podManagementPolicy</CODE><BR /><I>string</I></TD><TD>podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.</TD></TR>
+<TR><TD><CODE>revisionHistoryLimit</CODE><BR /><I>integer</I></TD><TD>revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet&#39;s revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>selector is a label query over pods that should match the replica count. It must match the pod template&#39;s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors</TD></TR>
+<TR><TD><CODE>serviceName</CODE><BR /><I>string</I></TD><TD>serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where &#34;pod-specific-string&#34; is managed by the StatefulSet controller.</TD></TR>
+<TR><TD><CODE>template</CODE><BR /><I><a href="#podtemplatespec-v1-core">PodTemplateSpec</a></I></TD><TD>template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.</TD></TR>
+<TR><TD><CODE>updateStrategy</CODE><BR /><I><a href="#statefulsetupdatestrategy-v1-apps">StatefulSetUpdateStrategy</a></I></TD><TD>updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.</TD></TR>
+<TR><TD><CODE>volumeClaimTemplates</CODE><BR /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a> array</I></TD><TD>volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="statefulsetstatus-v1-apps">StatefulSetStatus v1 apps</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#statefulset-v1-apps">StatefulSet [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>collisionCount</CODE><BR /><I>integer</I></TD><TD>collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#statefulsetcondition-v1-apps">StatefulSetCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Represents the latest available observations of a statefulset&#39;s current state.</TD></TR>
+<TR><TD><CODE>currentReplicas</CODE><BR /><I>integer</I></TD><TD>currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.</TD></TR>
+<TR><TD><CODE>currentRevision</CODE><BR /><I>string</I></TD><TD>currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet&#39;s generation, which is updated on mutation by the API Server.</TD></TR>
+<TR><TD><CODE>readyReplicas</CODE><BR /><I>integer</I></TD><TD>readyReplicas is the number of Pods created by the StatefulSet controller that have a Ready Condition.</TD></TR>
+<TR><TD><CODE>replicas</CODE><BR /><I>integer</I></TD><TD>replicas is the number of Pods created by the StatefulSet controller.</TD></TR>
+<TR><TD><CODE>updateRevision</CODE><BR /><I>string</I></TD><TD>updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)</TD></TR>
+<TR><TD><CODE>updatedReplicas</CODE><BR /><I>integer</I></TD><TD>updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="statefulsetlist-v1-apps">StatefulSetList v1 apps</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#statefulset-v1-apps">StatefulSet</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-statefulset-v1-apps-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-statefulset-v1-apps">Create</H2>
+<P>create a StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apps/v1/namespaces/{namespace}/statefulsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-statefulset-v1-apps">Patch</H2>
+<P>partially update the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-statefulset-v1-apps">Replace</H2>
+<P>replace the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-statefulset-v1-apps">Delete</H2>
+<P>delete a StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-statefulset-v1-apps">Delete Collection</H2>
+<P>delete collection of StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/statefulsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-statefulset-v1-apps-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-statefulset-v1-apps">Read</H2>
+<P>read the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-statefulset-v1-apps">List</H2>
+<P>list or watch objects of kind StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/statefulsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulsetlist-v1-apps">StatefulSetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-statefulset-v1-apps">List All Namespaces</H2>
+<P>list or watch objects of kind StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/statefulsets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulsetlist-v1-apps">StatefulSetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-statefulset-v1-apps">Watch</H2>
+<P>watch changes to an object of kind StatefulSet. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/statefulsets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-statefulset-v1-apps">Watch List</H2>
+<P>watch individual changes to a list of StatefulSet. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/statefulsets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-statefulset-v1-apps">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of StatefulSet. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/statefulsets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-statefulset-v1-apps-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-statefulset-v1-apps">Patch Status</H2>
+<P>partially update status of the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-statefulset-v1-apps">Read Status</H2>
+<P>read status of the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-statefulset-v1-apps">Replace Status</H2>
+<P>replace status of the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StatefulSet</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#statefulset-v1-apps">StatefulSet</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-misc-operations-statefulset-v1-apps-strong-"><STRONG>Misc Operations</STRONG></H2>
+<H2 id="read-scale-statefulset-v1-apps">Read Scale</H2>
+<P>read scale of the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-scale-statefulset-v1-apps">Replace Scale</H2>
+<P>replace scale of the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-scale-statefulset-v1-apps">Patch Scale</H2>
+<P>partially update scale of the specified StatefulSet</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/scale</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Scale</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#scale-v1-autoscaling">Scale</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="-strong-service-apis-strong-"><STRONG>SERVICE APIs</STRONG></H1>
+
+<P>Service API resources are responsible for stitching your workloads together into an accessible Loadbalanced Service.  By default,
+<A href="#-strong-workloads-strong">Workloads</A> are only accessible within the cluster, and they must be exposed externally using a either
+a *LoadBalancer* or *NodePort* <A href="#service-v1-core">Service</A>.  For development, internally accessible
+Workloads can be accessed via proxy through the api master using the <code>kubectl proxy</code> command.</P>
+
+<P>Common resource types:</P>
+
+<UL>
+	<LI><A href="#service-v1-core">Services</A> for providing a single ip endpoint loadbalanced across multiple Workload replicas.</LI>
+	<LI><A href="#ingress-v1beta1-extensions">Ingress</A> for providing a https(s) endpoint http(s) routed to one or more *Services*.</LI>
+</UL>
+<HR />
+<H1 id="endpoints-v1-core">Endpoints v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Endpoints</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslist-v1-core">EndpointsList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>subsets</CODE><BR /><I><a href="#endpointsubset-v1-core">EndpointSubset</a> array</I></TD><TD>The set of all endpoints is the union of all subsets. Addresses are placed into subsets according to the IPs they share. A single address with multiple ports, some of which are ready and some of which are not (because they come from different containers) will result in the address being displayed in different subsets for the different ports. No address will appear in both Addresses and NotReadyAddresses in the same subset. Sets of addresses and ports that comprise a service.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="endpointslist-v1-core">EndpointsList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#endpoints-v1-core">Endpoints</a> array</I></TD><TD>List of endpoints.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-endpoints-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-endpoints-v1-core">Create</H2>
+<P>create Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/endpoints</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-endpoints-v1-core">Patch</H2>
+<P>partially update the specified Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/endpoints/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Endpoints</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-endpoints-v1-core">Replace</H2>
+<P>replace the specified Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/endpoints/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Endpoints</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-endpoints-v1-core">Delete</H2>
+<P>delete Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/endpoints/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Endpoints</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-endpoints-v1-core">Delete Collection</H2>
+<P>delete collection of Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/endpoints</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-endpoints-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-endpoints-v1-core">Read</H2>
+<P>read the specified Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/endpoints/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Endpoints</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpoints-v1-core">Endpoints</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-endpoints-v1-core">List</H2>
+<P>list or watch objects of kind Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/endpoints</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslist-v1-core">EndpointsList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-endpoints-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind Endpoints</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/endpoints</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslist-v1-core">EndpointsList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-endpoints-v1-core">Watch</H2>
+<P>watch changes to an object of kind Endpoints. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/endpoints/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Endpoints</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-endpoints-v1-core">Watch List</H2>
+<P>watch individual changes to a list of Endpoints. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/endpoints</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-endpoints-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Endpoints. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/endpoints</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="endpointslice-v1beta1-discovery-k8s-io">EndpointSlice v1beta1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>EndpointSlice</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointslice-v1-discovery-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList [discovery/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>addressType</CODE><BR /><I>string</I></TD><TD>addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>endpoints</CODE><BR /><I><a href="#endpoint-v1beta1-discovery-k8s-io">Endpoint</a> array</I></TD><TD>endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#endpointport-v1beta1-discovery-k8s-io">EndpointPort</a> array</I></TD><TD>ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates &#34;all ports&#34;. Each slice may include a maximum of 100 ports.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList v1beta1 discovery</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a> array</I></TD><TD>List of endpoint slices</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-endpointslice-v1beta1-discovery-k8s-io">Create</H2>
+<P>create an EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-endpointslice-v1beta1-discovery-k8s-io">Patch</H2>
+<P>partially update the specified EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-endpointslice-v1beta1-discovery-k8s-io">Replace</H2>
+<P>replace the specified EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-endpointslice-v1beta1-discovery-k8s-io">Delete</H2>
+<P>delete an EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-endpointslice-v1beta1-discovery-k8s-io">Delete Collection</H2>
+<P>delete collection of EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-endpointslice-v1beta1-discovery-k8s-io">Read</H2>
+<P>read the specified EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-endpointslice-v1beta1-discovery-k8s-io">List</H2>
+<P>list or watch objects of kind EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/endpointslices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-endpointslice-v1beta1-discovery-k8s-io">Watch</H2>
+<P>watch changes to an object of kind EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-endpointslice-v1beta1-discovery-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/endpointslices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingress-v1-networking-k8s-io">Ingress v1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Ingress</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingress-v1beta1-networking-k8s-io">v1beta1</a>
+<a href="#ingress-v1beta1-extensions">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingresslist-v1-networking-k8s-io">IngressList [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#ingressspec-v1-networking-k8s-io">IngressSpec</a></I></TD><TD>Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#ingressstatus-v1-networking-k8s-io">IngressStatus</a></I></TD><TD>Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressspec-v1-networking-k8s-io">IngressSpec v1 networking</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingress-v1-networking-k8s-io">Ingress [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>defaultBackend</CODE><BR /><I><a href="#ingressbackend-v1-networking-k8s-io">IngressBackend</a></I></TD><TD>DefaultBackend is the backend that should handle requests that don&#39;t match any rule. If Rules are not specified, DefaultBackend must be specified. If DefaultBackend is not set, the handling of requests that do not match any of the rules will be up to the Ingress controller.</TD></TR>
+<TR><TD><CODE>ingressClassName</CODE><BR /><I>string</I></TD><TD>IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#ingressrule-v1-networking-k8s-io">IngressRule</a> array</I></TD><TD>A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.</TD></TR>
+<TR><TD><CODE>tls</CODE><BR /><I><a href="#ingresstls-v1-networking-k8s-io">IngressTLS</a> array</I></TD><TD>TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressstatus-v1-networking-k8s-io">IngressStatus v1 networking</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingress-v1-networking-k8s-io">Ingress [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>loadBalancer</CODE><BR /><I><a href="#loadbalancerstatus-v1-core">LoadBalancerStatus</a></I></TD><TD>LoadBalancer contains the current status of the load-balancer.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingresslist-v1-networking-k8s-io">IngressList v1 networking</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a> array</I></TD><TD>Items is the list of Ingress.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-ingress-v1-networking-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-ingress-v1-networking-k8s-io">Create</H2>
+<P>create an Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-ingress-v1-networking-k8s-io">Patch</H2>
+<P>partially update the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-ingress-v1-networking-k8s-io">Replace</H2>
+<P>replace the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-ingress-v1-networking-k8s-io">Delete</H2>
+<P>delete an Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-ingress-v1-networking-k8s-io">Delete Collection</H2>
+<P>delete collection of Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-ingress-v1-networking-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-ingress-v1-networking-k8s-io">Read</H2>
+<P>read the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-ingress-v1-networking-k8s-io">List</H2>
+<P>list or watch objects of kind Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingresslist-v1-networking-k8s-io">IngressList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-ingress-v1-networking-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/ingresses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingresslist-v1-networking-k8s-io">IngressList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-ingress-v1-networking-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-ingress-v1-networking-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-ingress-v1-networking-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/ingresses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-ingress-v1-networking-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-ingress-v1-networking-k8s-io">Patch Status</H2>
+<P>partially update status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-ingress-v1-networking-k8s-io">Read Status</H2>
+<P>read status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-ingress-v1-networking-k8s-io">Replace Status</H2>
+<P>replace status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1-networking-k8s-io">Ingress</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingressclass-v1-networking-k8s-io">IngressClass v1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>IngressClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressclass-v1beta1-networking-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressclasslist-v1-networking-k8s-io">IngressClassList [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#ingressclassspec-v1-networking-k8s-io">IngressClassSpec</a></I></TD><TD>Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressclassspec-v1-networking-k8s-io">IngressClassSpec v1 networking</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressclass-v1-networking-k8s-io">IngressClass [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>controller</CODE><BR /><I>string</I></TD><TD>Controller refers to the name of the controller that should handle this class. This allows for different &#34;flavors&#34; that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. &#34;acme.io/ingress-controller&#34;. This field is immutable.</TD></TR>
+<TR><TD><CODE>parameters</CODE><BR /><I><a href="#ingressclassparametersreference-v1-networking-k8s-io">IngressClassParametersReference</a></I></TD><TD>Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressclasslist-v1-networking-k8s-io">IngressClassList v1 networking</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a> array</I></TD><TD>Items is the list of IngressClasses.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-ingressclass-v1-networking-k8s-io">Create</H2>
+<P>create an IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/networking.k8s.io/v1/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-ingressclass-v1-networking-k8s-io">Patch</H2>
+<P>partially update the specified IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/networking.k8s.io/v1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-ingressclass-v1-networking-k8s-io">Replace</H2>
+<P>replace the specified IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/networking.k8s.io/v1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-ingressclass-v1-networking-k8s-io">Delete</H2>
+<P>delete an IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-ingressclass-v1-networking-k8s-io">Delete Collection</H2>
+<P>delete collection of IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-ingressclass-v1-networking-k8s-io">Read</H2>
+<P>read the specified IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-ingressclass-v1-networking-k8s-io">List</H2>
+<P>list or watch objects of kind IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclasslist-v1-networking-k8s-io">IngressClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-ingressclass-v1-networking-k8s-io">Watch</H2>
+<P>watch changes to an object of kind IngressClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-ingressclass-v1-networking-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of IngressClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="service-v1-core">Service v1 core</H1>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#example-service-v1-core" aria-controls="example-service-v1-core"
+  aria-expanded="false">example</BUTTON>
+<DIV class="collapse" id="example-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Service Config to load balance traffic across all Pods with the app=nginx label.  Receives on and sends to port 80.  Exposes an externally accessible endpoint.</DIV>
+  <DIV class="panel-body">
+<PRE class="example"><CODE class="lang-yaml">
+kind: Service
+apiVersion: v1
+metadata:
+  # Unique key of the Service instance
+  name: service-example
+spec:
+  ports:
+    # Accept traffic sent to port 80
+    - name: http
+      port: 80
+      targetPort: 80
+  selector:
+    # Loadbalance traffic across Pods matching
+    # this label selector
+    app: nginx
+  # Create an HA proxy in the cloud provider
+  # with an External IP address - *Only supported
+  # by some cloud providers*
+  type: LoadBalancer
+
+</CODE></PRE></DIV></DIV></DIV>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Service</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#servicelist-v1-core">ServiceList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#servicespec-v1-core">ServiceSpec</a></I></TD><TD>Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#servicestatus-v1-core">ServiceStatus</a></I></TD><TD>Most recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="servicespec-v1-core">ServiceSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#service-v1-core">Service [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allocateLoadBalancerNodePorts</CODE><BR /><I>boolean</I></TD><TD>allocateLoadBalancerNodePorts defines if NodePorts will be automatically allocated for services with type LoadBalancer.  Default is &#34;true&#34;. It may be set to &#34;false&#34; if the cluster load-balancer does not rely on NodePorts. allocateLoadBalancerNodePorts may only be set for services with type LoadBalancer and will be cleared if the type is changed to any other type. This field is alpha-level and is only honored by servers that enable the ServiceLBNodePortControl feature.</TD></TR>
+<TR><TD><CODE>clusterIP</CODE><BR /><I>string</I></TD><TD>clusterIP is the IP address of the service and is usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be blank) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above).  Valid values are &#34;None&#34;, empty string (&#34;&#34;), or a valid IP address. Setting this to &#34;None&#34; makes a &#34;headless service&#34; (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required.  Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies</TD></TR>
+<TR><TD><CODE>clusterIPs</CODE><BR /><I>string array</I></TD><TD>ClusterIPs is a list of IP addresses assigned to this service, and are usually assigned randomly.  If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be empty) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above).  Valid values are &#34;None&#34;, empty string (&#34;&#34;), or a valid IP address.  Setting this to &#34;None&#34; makes a &#34;headless service&#34; (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required.  Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName.  If this field is not specified, it will be initialized from the clusterIP field.  If this field is specified, clients must ensure that clusterIPs[0] and clusterIP have the same value.  Unless the &#34;IPv6DualStack&#34; feature gate is enabled, this field is limited to one value, which must be the same as the clusterIP field.  If the feature gate is enabled, this field may hold a maximum of two entries (dual-stack IPs, in either order).  These IPs must correspond to the values of the ipFamilies field. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies</TD></TR>
+<TR><TD><CODE>externalIPs</CODE><BR /><I>string array</I></TD><TD>externalIPs is a list of IP addresses for which nodes in the cluster will also accept traffic for this service.  These IPs are not managed by Kubernetes.  The user is responsible for ensuring that traffic arrives at a node with this IP.  A common example is external load-balancers that are not part of the Kubernetes system.</TD></TR>
+<TR><TD><CODE>externalName</CODE><BR /><I>string</I></TD><TD>externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved.  Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be &#34;ExternalName&#34;.</TD></TR>
+<TR><TD><CODE>externalTrafficPolicy</CODE><BR /><I>string</I></TD><TD>externalTrafficPolicy denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints. &#34;Local&#34; preserves the client source IP and avoids a second hop for LoadBalancer and Nodeport type services, but risks potentially imbalanced traffic spreading. &#34;Cluster&#34; obscures the client source IP and may cause a second hop to another node, but should have good overall load-spreading.</TD></TR>
+<TR><TD><CODE>healthCheckNodePort</CODE><BR /><I>integer</I></TD><TD>healthCheckNodePort specifies the healthcheck nodePort for the service. This only applies when type is set to LoadBalancer and externalTrafficPolicy is set to Local. If a value is specified, is in-range, and is not in use, it will be used.  If not specified, a value will be automatically allocated.  External systems (e.g. load-balancers) can use this port to determine if a given node holds endpoints for this service or not.  If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type).</TD></TR>
+<TR><TD><CODE>internalTrafficPolicy</CODE><BR /><I>string</I></TD><TD>InternalTrafficPolicy specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only. &#34;Cluster&#34; routes internal traffic to a Service to all endpoints. &#34;Local&#34; routes traffic to node-local endpoints only, traffic is dropped if no node-local endpoints are ready. The default value is &#34;Cluster&#34;.</TD></TR>
+<TR><TD><CODE>ipFamilies</CODE><BR /><I>string array</I></TD><TD>IPFamilies is a list of IP families (e.g. IPv4, IPv6) assigned to this service, and is gated by the &#34;IPv6DualStack&#34; feature gate.  This field is usually assigned automatically based on cluster configuration and the ipFamilyPolicy field. If this field is specified manually, the requested family is available in the cluster, and ipFamilyPolicy allows it, it will be used; otherwise creation of the service will fail.  This field is conditionally mutable: it allows for adding or removing a secondary IP family, but it does not allow changing the primary IP family of the Service.  Valid values are &#34;IPv4&#34; and &#34;IPv6&#34;.  This field only applies to Services of types ClusterIP, NodePort, and LoadBalancer, and does apply to &#34;headless&#34; services.  This field will be wiped when updating a Service to type ExternalName.  This field may hold a maximum of two entries (dual-stack families, in either order).  These families must correspond to the values of the clusterIPs field, if specified. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field.</TD></TR>
+<TR><TD><CODE>ipFamilyPolicy</CODE><BR /><I>string</I></TD><TD>IPFamilyPolicy represents the dual-stack-ness requested or required by this Service, and is gated by the &#34;IPv6DualStack&#34; feature gate.  If there is no value provided, then this field will be set to SingleStack. Services can be &#34;SingleStack&#34; (a single IP family), &#34;PreferDualStack&#34; (two IP families on dual-stack configured clusters or a single IP family on single-stack clusters), or &#34;RequireDualStack&#34; (two IP families on dual-stack configured clusters, otherwise fail). The ipFamilies and clusterIPs fields depend on the value of this field.  This field will be wiped when updating a service to type ExternalName.</TD></TR>
+<TR><TD><CODE>loadBalancerClass</CODE><BR /><I>string</I></TD><TD>loadBalancerClass is the class of the load balancer implementation this Service belongs to. If specified, the value of this field must be a label-style identifier, with an optional prefix, e.g. &#34;internal-vip&#34; or &#34;example.com/internal-vip&#34;. Unprefixed names are reserved for end-users. This field can only be set when the Service type is &#39;LoadBalancer&#39;. If not set, the default load balancer implementation is used, today this is typically done through the cloud provider integration, but should apply for any default implementation. If set, it is assumed that a load balancer implementation is watching for Services with a matching class. Any default load balancer implementation (e.g. cloud providers) should ignore Services that set this field. This field can only be set when creating or updating a Service to type &#39;LoadBalancer&#39;. Once set, it can not be changed. This field will be wiped when a service is updated to a non &#39;LoadBalancer&#39; type.</TD></TR>
+<TR><TD><CODE>loadBalancerIP</CODE><BR /><I>string</I></TD><TD>Only applies to Service Type: LoadBalancer LoadBalancer will get created with the IP specified in this field. This feature depends on whether the underlying cloud-provider supports specifying the loadBalancerIP when a load balancer is created. This field will be ignored if the cloud-provider does not support the feature.</TD></TR>
+<TR><TD><CODE>loadBalancerSourceRanges</CODE><BR /><I>string array</I></TD><TD>If specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature.&#34; More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#serviceport-v1-core">ServicePort</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>port</I></TD><TD>The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies</TD></TR>
+<TR><TD><CODE>publishNotReadyAddresses</CODE><BR /><I>boolean</I></TD><TD>publishNotReadyAddresses indicates that any agent which deals with endpoints for this Service should disregard any indications of ready/not-ready. The primary use case for setting this field is for a StatefulSet&#39;s Headless Service to propagate SRV DNS records for its Pods for the purpose of peer discovery. The Kubernetes controllers that generate Endpoints and EndpointSlice resources for Services interpret this to mean that all endpoints are considered &#34;ready&#34; even if the Pods themselves are not. Agents which consume only Kubernetes generated endpoints through the Endpoints or EndpointSlice resources can safely assume this behavior.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I>object</I></TD><TD>Route service traffic to pods with label keys and values matching this selector. If empty or not present, the service is assumed to have an external process managing its endpoints, which Kubernetes will not modify. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/</TD></TR>
+<TR><TD><CODE>sessionAffinity</CODE><BR /><I>string</I></TD><TD>Supports &#34;ClientIP&#34; and &#34;None&#34;. Used to maintain session affinity. Enable client IP based session affinity. Must be ClientIP or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies</TD></TR>
+<TR><TD><CODE>sessionAffinityConfig</CODE><BR /><I><a href="#sessionaffinityconfig-v1-core">SessionAffinityConfig</a></I></TD><TD>sessionAffinityConfig contains the configurations of session affinity.</TD></TR>
+<TR><TD><CODE>topologyKeys</CODE><BR /><I>string array</I></TD><TD>topologyKeys is a preference-order list of topology keys which implementations of services should use to preferentially sort endpoints when accessing this Service, it can not be used at the same time as externalTrafficPolicy=Local. Topology keys must be valid label keys and at most 16 keys may be specified. Endpoints are chosen based on the first topology key with available backends. If this field is specified and all entries have no backends that match the topology of the client, the service has no backends for that client and connections should fail. The special value &#34;*&#34; may be used to mean &#34;any topology&#34;. This catch-all value, if used, only makes sense as the last value in the list. If this is not specified or empty, no topology constraints will be applied. This field is alpha-level and is only honored by servers that enable the ServiceTopology feature. This field is deprecated and will be removed in a future version.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. &#34;ClusterIP&#34; allocates a cluster-internal IP address for load-balancing to endpoints. Endpoints are determined by the selector or if that is not specified, by manual construction of an Endpoints object or EndpointSlice objects. If clusterIP is &#34;None&#34;, no virtual IP is allocated and the endpoints are published as a set of endpoints rather than a virtual IP. &#34;NodePort&#34; builds on ClusterIP and allocates a port on every node which routes to the same endpoints as the clusterIP. &#34;LoadBalancer&#34; builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP. &#34;ExternalName&#34; aliases this service to the specified externalName. Several other fields do not apply to ExternalName services. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="servicestatus-v1-core">ServiceStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#service-v1-core">Service [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#condition-v1-meta">Condition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Current service state</TD></TR>
+<TR><TD><CODE>loadBalancer</CODE><BR /><I><a href="#loadbalancerstatus-v1-core">LoadBalancerStatus</a></I></TD><TD>LoadBalancer contains the current status of the load-balancer, if one is present.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="servicelist-v1-core">ServiceList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#service-v1-core">Service</a> array</I></TD><TD>List of services</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-service-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-service-v1-core">Create</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-create-service-v1-core" aria-controls="req-kubectl-create-service-v1-core"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-create-service-v1-core" aria-controls="req-curl-create-service-v1-core"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-create-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ echo 'kind: Service
+apiVersion: v1
+metadata:
+  name: service-example
+spec:
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+  selector:
+      app: nginx
+  type: LoadBalancer
+' | kubectl create -f -
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-create-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X POST -H 'Content-Type: application/yaml' --data '
+kind: Service
+apiVersion: v1
+metadata:
+  name: service-example
+spec:
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+  selector:
+      app: nginx
+  type: LoadBalancer
+' http://127.0.0.1:8001/api/v1/namespaces/default/services
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-create-service-v1-core" aria-controls="res-kubectl-create-service-v1-core"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-create-service-v1-core" aria-controls="res-curl-create-service-v1-core"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-create-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+service "service-example" created
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-create-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Service",
+  "apiVersion": "v1",
+  "metadata": {
+    "name": "service-example",
+    "namespace": "default",
+    "selfLink": "/api/v1/namespaces/default/services/service-example",
+    "uid": "93e5c731-9d30-11e6-9c54-42010a800148",
+    "resourceVersion": "2205767",
+    "creationTimestamp": "2016-10-28T17:04:24Z"
+  },
+  "spec": {
+    "ports": [
+      {
+        "name": "http",
+        "protocol": "TCP",
+        "port": 80,
+        "targetPort": 80,
+        "nodePort": 32417
+      }
+    ],
+    "selector": {
+      "app": "nginx"
+    },
+    "clusterIP": "10.183.250.161",
+    "type": "LoadBalancer",
+    "sessionAffinity": "None"
+  },
+  "status": {
+    "loadBalancer": {}
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>create a Service</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/services</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#service-v1-core">Service</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-service-v1-core">Patch</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-patch-service-v1-core" aria-controls="req-kubectl-patch-service-v1-core"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-patch-service-v1-core" aria-controls="req-curl-patch-service-v1-core"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-patch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl patch service  -p \
+	'{"spec":{"ports":[{"name":"http","port":80,"targetPort":8080}]}}'
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-patch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X PATCH -H 'Content-Type: application/strategic-merge-patch+json' --data '
+{"spec":{"ports":[{"name":"http","port":80,"targetPort":8080}]}}' \
+	'http://127.0.0.1:8001/api/v1/namespaces/default/services/'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-patch-service-v1-core" aria-controls="res-kubectl-patch-service-v1-core"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-patch-service-v1-core" aria-controls="res-curl-patch-service-v1-core"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-patch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+"" patched
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-patch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Service",
+  "apiVersion": "v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/api/v1/namespaces/default/services/deployment-example",
+    "uid": "93e5c731-9d30-11e6-9c54-42010a800148",
+    "resourceVersion": "2205995",
+    "creationTimestamp": "2016-10-28T17:04:24Z"
+  },
+  "spec": {
+    "ports": [
+      {
+        "name": "http",
+        "protocol": "TCP",
+        "port": 80,
+        "targetPort": 8080,
+        "nodePort": 32417
+      }
+    ],
+    "selector": {
+      "app": "nginx"
+    },
+    "clusterIP": "10.183.250.161",
+    "type": "LoadBalancer",
+    "sessionAffinity": "None"
+  },
+  "status": {
+    "loadBalancer": {
+      "ingress": [
+        {
+          "ip": "104.198.186.106"
+        }
+      ]
+    }
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>partially update the specified Service</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/services/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-service-v1-core">Replace</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-replace-service-v1-core" aria-controls="req-kubectl-replace-service-v1-core"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-replace-service-v1-core" aria-controls="req-curl-replace-service-v1-core"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-replace-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ echo 'apiVersion: v1
+kind: Service
+metadata:
+  name: deployment-example
+  resourceVersion: "2205995"
+spec:
+  clusterIP: 10.183.250.161
+  ports:
+  - name: http
+    nodePort: 32417
+    port: 80
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app: nginx
+  sessionAffinity: None
+  type: LoadBalancer
+' | kubectl replace -f -
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-replace-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X PUT -H 'Content-Type: application/yaml' --data '
+apiVersion: v1
+kind: Service
+metadata:
+  name: deployment-example
+  resourceVersion: "2205995"
+spec:
+  clusterIP: 10.183.250.161
+  ports:
+  - name: http
+    nodePort: 32417
+    port: 80
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app: nginx
+  sessionAffinity: None
+  type: LoadBalancer
+' http://127.0.0.1:8001/api/v1/namespaces/default/services/deployment-example
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-replace-service-v1-core" aria-controls="res-kubectl-replace-service-v1-core"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-replace-service-v1-core" aria-controls="res-curl-replace-service-v1-core"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-replace-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+service "deployment-example" replaced
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-replace-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Service",
+  "apiVersion": "v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/api/v1/namespaces/default/services/deployment-example",
+    "uid": "93e5c731-9d30-11e6-9c54-42010a800148",
+    "resourceVersion": "2208672",
+    "creationTimestamp": "2016-10-28T17:04:24Z"
+  },
+  "spec": {
+    "ports": [
+      {
+        "name": "http",
+        "protocol": "TCP",
+        "port": 80,
+        "targetPort": 8080,
+        "nodePort": 32417
+      }
+    ],
+    "selector": {
+      "app": "nginx"
+    },
+    "clusterIP": "10.183.250.161",
+    "type": "LoadBalancer",
+    "sessionAffinity": "None"
+  },
+  "status": {
+    "loadBalancer": {
+      "ingress": [
+        {
+          "ip": "104.198.186.106"
+        }
+      ]
+    }
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>replace the specified Service</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/services/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#service-v1-core">Service</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-service-v1-core">Delete</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-delete-service-v1-core" aria-controls="req-kubectl-delete-service-v1-core"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-delete-service-v1-core" aria-controls="req-curl-delete-service-v1-core"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-delete-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl delete service deployment-example
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-delete-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X DELETE -H 'Content-Type: application/yaml' --data '
+gracePeriodSeconds: 0
+orphanDependents: false
+' 'http://127.0.0.1:8001/api/v1/namespaces/default/services/deployment-example'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-delete-service-v1-core" aria-controls="res-kubectl-delete-service-v1-core"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-delete-service-v1-core" aria-controls="res-curl-delete-service-v1-core"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-delete-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+service "deployment-example" deleted
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-delete-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Status",
+  "apiVersion": "v1",
+  "metadata": {},
+  "status": "Success",
+  "code": 200
+}
+
+</CODE></PRE></DIV></DIV></DIV>
+<P>delete a Service</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/services/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-service-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-service-v1-core">Read</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-read-service-v1-core" aria-controls="req-kubectl-read-service-v1-core"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-read-service-v1-core" aria-controls="req-curl-read-service-v1-core"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-read-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get service deployment-example -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-read-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET http://127.0.0.1:8001/api/v1/namespaces/default/services/deployment-example
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-read-service-v1-core" aria-controls="res-kubectl-read-service-v1-core"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-read-service-v1-core" aria-controls="res-curl-read-service-v1-core"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-read-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+  "kind": "Service",
+  "apiVersion": "v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/api/v1/namespaces/default/services/deployment-example",
+    "uid": "93e5c731-9d30-11e6-9c54-42010a800148",
+    "resourceVersion": "2205995",
+    "creationTimestamp": "2016-10-28T17:04:24Z"
+  },
+  "spec": {
+    "ports": [
+      {
+        "name": "http",
+        "protocol": "TCP",
+        "port": 80,
+        "targetPort": 8080,
+        "nodePort": 32417
+      }
+    ],
+    "selector": {
+      "app": "nginx"
+    },
+    "clusterIP": "10.183.250.161",
+    "type": "LoadBalancer",
+    "sessionAffinity": "None"
+  },
+  "status": {
+    "loadBalancer": {
+      "ingress": [
+        {
+          "ip": "104.198.186.106"
+        }
+      ]
+    }
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-read-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+  "kind": "Service",
+  "apiVersion": "v1",
+  "metadata": {
+    "name": "deployment-example",
+    "namespace": "default",
+    "selfLink": "/api/v1/namespaces/default/services/deployment-example",
+    "uid": "93e5c731-9d30-11e6-9c54-42010a800148",
+    "resourceVersion": "2205995",
+    "creationTimestamp": "2016-10-28T17:04:24Z"
+  },
+  "spec": {
+    "ports": [
+      {
+        "name": "http",
+        "protocol": "TCP",
+        "port": 80,
+        "targetPort": 8080,
+        "nodePort": 32417
+      }
+    ],
+    "selector": {
+      "app": "nginx"
+    },
+    "clusterIP": "10.183.250.161",
+    "type": "LoadBalancer",
+    "sessionAffinity": "None"
+  },
+  "status": {
+    "loadBalancer": {
+      "ingress": [
+        {
+          "ip": "104.198.186.106"
+        }
+      ]
+    }
+  }
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>read the specified Service</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/services/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-service-v1-core">List</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-list-service-v1-core" aria-controls="req-kubectl-list-service-v1-core"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-list-service-v1-core" aria-controls="req-curl-list-service-v1-core"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-list-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get service -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-list-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET 'http://127.0.0.1:8001/api/v1/namespaces/default/services'
+</CODE></PRE></DIV></DIV></DIV>
+<P>list or watch objects of kind Service</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/services</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#servicelist-v1-core">ServiceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-service-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind Service</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/services</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#servicelist-v1-core">ServiceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-service-v1-core">Watch</H2>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-kubectl-watch-service-v1-core" aria-controls="req-kubectl-watch-service-v1-core"
+  aria-expanded="false">kubectl request example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#req-curl-watch-service-v1-core" aria-controls="req-curl-watch-service-v1-core"
+  aria-expanded="false">curl request example</BUTTON>
+<DIV class="collapse" id="req-kubectl-watch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>kubectl</CODE> command</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-shell">
+$ kubectl get service deployment-example --watch -o json
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="req-curl-watch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading"><CODE>curl</CODE> command (<I>requires <code>kubectl proxy</code> to be running</I>)</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-shell">
+$ kubectl proxy
+$ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/deployment-example'
+</CODE></PRE></DIV></DIV></DIV>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-kubectl-watch-service-v1-core" aria-controls="res-kubectl-watch-service-v1-core"
+  aria-expanded="false">kubectl response example</BUTTON>
+<BUTTON class="btn btn-info" type="button" data-toggle="collapse"
+  data-target="#res-curl-watch-service-v1-core" aria-controls="res-curl-watch-service-v1-core"
+  aria-expanded="false">curl response example</BUTTON>
+<DIV class="collapse" id="res-kubectl-watch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Output</DIV>
+  <DIV class="panel-body">
+<PRE class="kubectl"><CODE class="lang-json">
+{
+	"type": "ADDED",
+	"object": {
+		"kind": "Service",
+		"apiVersion": "v1",
+		"metadata": {
+			"name": "deployment-example",
+			"namespace": "default",
+			"selfLink": "/api/v1/namespaces/default/services/deployment-example",
+			"uid": "93e5c731-9d30-11e6-9c54-42010a800148",
+			"resourceVersion": "2205995",
+			"creationTimestamp": "2016-10-28T17:04:24Z"
+		},
+		"spec": {
+			"ports": [
+				{
+					"name": "http",
+					"protocol": "TCP",
+					"port": 80,
+					"targetPort": 8080,
+					"nodePort": 32417
+				}
+			],
+			"selector": {
+				"app": "nginx"
+			},
+			"clusterIP": "10.183.250.161",
+			"type": "LoadBalancer",
+			"sessionAffinity": "None"
+		},
+		"status": {
+			"loadBalancer": {
+				"ingress": [
+					{
+						"ip": "104.198.186.106"
+					}
+				]
+			}
+		}
+	}
+}
+</CODE></PRE></DIV></DIV></DIV>
+<DIV class="collapse" id="res-curl-watch-service-v1-core">
+  <DIV class="panel panel-default">
+<DIV class="panel-heading">Response Body</DIV>
+  <DIV class="panel-body">
+<PRE class="curl"><CODE class="lang-json">
+{
+	"type": "ADDED",
+	"object": {
+		"kind": "Service",
+		"apiVersion": "v1",
+		"metadata": {
+			"name": "deployment-example",
+			"namespace": "default",
+			"selfLink": "/api/v1/namespaces/default/services/deployment-example",
+			"uid": "93e5c731-9d30-11e6-9c54-42010a800148",
+			"resourceVersion": "2205995",
+			"creationTimestamp": "2016-10-28T17:04:24Z"
+		},
+		"spec": {
+			"ports": [
+				{
+					"name": "http",
+					"protocol": "TCP",
+					"port": 80,
+					"targetPort": 8080,
+					"nodePort": 32417
+				}
+			],
+			"selector": {
+				"app": "nginx"
+			},
+			"clusterIP": "10.183.250.161",
+			"type": "LoadBalancer",
+			"sessionAffinity": "None"
+		},
+		"status": {
+			"loadBalancer": {
+				"ingress": [
+					{
+						"ip": "104.198.186.106"
+					}
+				]
+			}
+		}
+	}
+}
+</CODE></PRE></DIV></DIV></DIV>
+<P>watch changes to an object of kind Service. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/services/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-service-v1-core">Watch List</H2>
+<P>watch individual changes to a list of Service. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/services</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-service-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Service. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/services</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-service-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-service-v1-core">Patch Status</H2>
+<P>partially update status of the specified Service</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/services/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-service-v1-core">Read Status</H2>
+<P>read status of the specified Service</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/services/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-service-v1-core">Replace Status</H2>
+<P>replace status of the specified Service</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/services/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Service</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#service-v1-core">Service</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#service-v1-core">Service</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-proxy-operations-service-v1-core-strong-"><STRONG>Proxy Operations</STRONG></H2>
+<H2 id="create-connect-proxy-service-v1-core">Create Connect Proxy</H2>
+<P>connect POST requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/services/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="create-connect-proxy-path-service-v1-core">Create Connect Proxy Path</H2>
+<P>connect POST requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/services/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-connect-proxy-service-v1-core">Delete Connect Proxy</H2>
+<P>connect DELETE requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/services/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-connect-proxy-path-service-v1-core">Delete Connect Proxy Path</H2>
+<P>connect DELETE requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/services/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="get-connect-proxy-service-v1-core">Get Connect Proxy</H2>
+<P>connect GET requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/services/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="get-connect-proxy-path-service-v1-core">Get Connect Proxy Path</H2>
+<P>connect GET requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/services/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="head-connect-proxy-service-v1-core">Head Connect Proxy</H2>
+<P>connect HEAD requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>HEAD /api/v1/namespaces/{namespace}/services/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="head-connect-proxy-path-service-v1-core">Head Connect Proxy Path</H2>
+<P>connect HEAD requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>HEAD /api/v1/namespaces/{namespace}/services/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-connect-proxy-service-v1-core">Replace Connect Proxy</H2>
+<P>connect PUT requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/services/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-connect-proxy-path-service-v1-core">Replace Connect Proxy Path</H2>
+<P>connect PUT requests to proxy of Service</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/services/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceProxyOptions</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="-strong-config-and-storage-apis-strong-"><STRONG>CONFIG & STORAGE</STRONG></H1>
+
+<P>Config and Storage resources are responsible for injecting data into your applications and persisting data externally to your container.</P>
+
+<P>Common resource types:</P>
+<UL>
+<LI><A href="#configmap-v1-core">ConfigMaps</A> for providing text key value pairs injected into the application through environment variables, command line arguments, or files</LI>
+<LI><A href="#secret-v1-core">Secrets</A> for providing binary data injected into the application through files</LI>
+<LI><A href="#volume-v1-core">Volumes</A> for providing a filesystem external to the Container.  Maybe shared across Containers within the same Pod and have a lifetime persisting beyond a Container or Pod.</LI>
+</UL>
+<HR />
+<H1 id="configmap-v1-core">ConfigMap v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ConfigMap</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#configmaplist-v1-core">ConfigMapList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>binaryData</CODE><BR /><I>object</I></TD><TD>BinaryData contains the binary data. Each key must consist of alphanumeric characters, &#39;-&#39;, &#39;_&#39; or &#39;.&#39;. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. Using this field will require 1.10+ apiserver and kubelet.</TD></TR>
+<TR><TD><CODE>data</CODE><BR /><I>object</I></TD><TD>Data contains the configuration data. Each key must consist of alphanumeric characters, &#39;-&#39;, &#39;_&#39; or &#39;.&#39;. Values with non-UTF-8 byte sequences must use the BinaryData field. The keys stored in Data must not overlap with the keys in the BinaryData field, this is enforced during validation process.</TD></TR>
+<TR><TD><CODE>immutable</CODE><BR /><I>boolean</I></TD><TD>Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="configmaplist-v1-core">ConfigMapList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#configmap-v1-core">ConfigMap</a> array</I></TD><TD>Items is the list of ConfigMaps.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-configmap-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-configmap-v1-core">Create</H2>
+<P>create a ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/configmaps</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-configmap-v1-core">Patch</H2>
+<P>partially update the specified ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/configmaps/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ConfigMap</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-configmap-v1-core">Replace</H2>
+<P>replace the specified ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/configmaps/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ConfigMap</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-configmap-v1-core">Delete</H2>
+<P>delete a ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/configmaps/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ConfigMap</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-configmap-v1-core">Delete Collection</H2>
+<P>delete collection of ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/configmaps</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-configmap-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-configmap-v1-core">Read</H2>
+<P>read the specified ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/configmaps/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ConfigMap</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#configmap-v1-core">ConfigMap</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-configmap-v1-core">List</H2>
+<P>list or watch objects of kind ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/configmaps</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#configmaplist-v1-core">ConfigMapList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-configmap-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind ConfigMap</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/configmaps</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#configmaplist-v1-core">ConfigMapList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-configmap-v1-core">Watch</H2>
+<P>watch changes to an object of kind ConfigMap. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/configmaps/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ConfigMap</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-configmap-v1-core">Watch List</H2>
+<P>watch individual changes to a list of ConfigMap. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/configmaps</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-configmap-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of ConfigMap. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/configmaps</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="csidriver-v1-storage-k8s-io">CSIDriver v1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CSIDriver</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csidriver-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csidriverlist-v1-storage-k8s-io">CSIDriverList [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#csidriverspec-v1-storage-k8s-io">CSIDriverSpec</a></I></TD><TD>Specification of the CSI Driver.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csidriverspec-v1-storage-k8s-io">CSIDriverSpec v1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csidriver-v1-storage-k8s-io">CSIDriver [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attachRequired</CODE><BR /><I>boolean</I></TD><TD>attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.  This field is immutable.</TD></TR>
+<TR><TD><CODE>fsGroupPolicy</CODE><BR /><I>string</I></TD><TD>Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate.  This field is immutable.</TD></TR>
+<TR><TD><CODE>podInfoOnMount</CODE><BR /><I>boolean</I></TD><TD>If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. &#34;csi.storage.k8s.io/pod.name&#34;: pod.Name &#34;csi.storage.k8s.io/pod.namespace&#34;: pod.Namespace &#34;csi.storage.k8s.io/pod.uid&#34;: string(pod.UID) &#34;csi.storage.k8s.io/ephemeral&#34;: &#34;true&#34; if the volume is an ephemeral inline volume                                 defined by a CSIVolumeSource, otherwise &#34;false&#34;  &#34;csi.storage.k8s.io/ephemeral&#34; is a new feature in Kubernetes 1.16. It is only required for drivers which support both the &#34;Persistent&#34; and &#34;Ephemeral&#34; VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn&#39;t support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.  This field is immutable.</TD></TR>
+<TR><TD><CODE>requiresRepublish</CODE><BR /><I>boolean</I></TD><TD>RequiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.  Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.</TD></TR>
+<TR><TD><CODE>storageCapacity</CODE><BR /><I>boolean</I></TD><TD>If set to true, storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information.  The check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.  Alternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.  This field is immutable.  This is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.</TD></TR>
+<TR><TD><CODE>tokenRequests</CODE><BR /><I><a href="#tokenrequest-v1-storage-k8s-io">TokenRequest</a> array</I></TD><TD>TokenRequests indicates the CSI driver needs pods&#39; service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: &#34;csi.storage.k8s.io/serviceAccount.tokens&#34;: {   &#34;&lt;audience&gt;&#34;: {     &#34;token&#34;: &lt;token&gt;,     &#34;expirationTimestamp&#34;: &lt;expiration timestamp in RFC3339&gt;,   },   ... }  Note: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.</TD></TR>
+<TR><TD><CODE>volumeLifecycleModes</CODE><BR /><I>string array</I></TD><TD>volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is &#34;Persistent&#34;, which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is &#34;Ephemeral&#34;. In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future. This field is beta.  This field is immutable.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csidriverlist-v1-storage-k8s-io">CSIDriverList v1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a> array</I></TD><TD>items is the list of CSIDriver</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-csidriver-v1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-csidriver-v1-storage-k8s-io">Create</H2>
+<P>create a CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-csidriver-v1-storage-k8s-io">Patch</H2>
+<P>partially update the specified CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-csidriver-v1-storage-k8s-io">Replace</H2>
+<P>replace the specified CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-csidriver-v1-storage-k8s-io">Delete</H2>
+<P>delete a CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-csidriver-v1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-csidriver-v1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-csidriver-v1-storage-k8s-io">Read</H2>
+<P>read the specified CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-csidriver-v1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriverlist-v1-storage-k8s-io">CSIDriverList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-csidriver-v1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CSIDriver. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-csidriver-v1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CSIDriver. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="csinode-v1-storage-k8s-io">CSINode v1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CSINode</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csinode-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinodelist-v1-storage-k8s-io">CSINodeList [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>metadata.name must be the Kubernetes node name.</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#csinodespec-v1-storage-k8s-io">CSINodeSpec</a></I></TD><TD>spec is the specification of CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csinodespec-v1-storage-k8s-io">CSINodeSpec v1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinode-v1-storage-k8s-io">CSINode [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>drivers</CODE><BR /><I><a href="#csinodedriver-v1-storage-k8s-io">CSINodeDriver</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csinodelist-v1-storage-k8s-io">CSINodeList v1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a> array</I></TD><TD>items is the list of CSINode</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-csinode-v1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-csinode-v1-storage-k8s-io">Create</H2>
+<P>create a CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-csinode-v1-storage-k8s-io">Patch</H2>
+<P>partially update the specified CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-csinode-v1-storage-k8s-io">Replace</H2>
+<P>replace the specified CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-csinode-v1-storage-k8s-io">Delete</H2>
+<P>delete a CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-csinode-v1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-csinode-v1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-csinode-v1-storage-k8s-io">Read</H2>
+<P>read the specified CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-csinode-v1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinodelist-v1-storage-k8s-io">CSINodeList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-csinode-v1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CSINode. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-csinode-v1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CSINode. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="secret-v1-core">Secret v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Secret</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#secretlist-v1-core">SecretList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>data</CODE><BR /><I>object</I></TD><TD>Data contains the secret data. Each key must consist of alphanumeric characters, &#39;-&#39;, &#39;_&#39; or &#39;.&#39;. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4</TD></TR>
+<TR><TD><CODE>immutable</CODE><BR /><I>boolean</I></TD><TD>Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>stringData</CODE><BR /><I>object</I></TD><TD>stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Used to facilitate programmatic handling of secret data.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="secretlist-v1-core">SecretList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#secret-v1-core">Secret</a> array</I></TD><TD>Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-secret-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-secret-v1-core">Create</H2>
+<P>create a Secret</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/secrets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-secret-v1-core">Patch</H2>
+<P>partially update the specified Secret</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/secrets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Secret</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-secret-v1-core">Replace</H2>
+<P>replace the specified Secret</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/secrets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Secret</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-secret-v1-core">Delete</H2>
+<P>delete a Secret</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/secrets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Secret</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-secret-v1-core">Delete Collection</H2>
+<P>delete collection of Secret</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/secrets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-secret-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-secret-v1-core">Read</H2>
+<P>read the specified Secret</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/secrets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Secret</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#secret-v1-core">Secret</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-secret-v1-core">List</H2>
+<P>list or watch objects of kind Secret</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/secrets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#secretlist-v1-core">SecretList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-secret-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind Secret</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/secrets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#secretlist-v1-core">SecretList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-secret-v1-core">Watch</H2>
+<P>watch changes to an object of kind Secret. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/secrets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Secret</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-secret-v1-core">Watch List</H2>
+<P>watch individual changes to a list of Secret. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/secrets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-secret-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Secret. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/secrets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="persistentvolumeclaim-v1-core">PersistentVolumeClaim v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PersistentVolumeClaim</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-bullhorn"></I> A <a href="#persistentvolume-v1-core">PersistentVolume</a> must be allocated in the cluster to use this.</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumeclaimlist-v1-core">PersistentVolumeClaimList [core/v1]</a></LI>
+  <LI><a href="#statefulsetspec-v1-apps">StatefulSetSpec [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#persistentvolumeclaimspec-v1-core">PersistentVolumeClaimSpec</a></I></TD><TD>Spec defines the desired characteristics of a volume requested by a pod author. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#persistentvolumeclaimstatus-v1-core">PersistentVolumeClaimStatus</a></I></TD><TD>Status represents the current information/status of a persistent volume claim. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="persistentvolumeclaimspec-v1-core">PersistentVolumeClaimSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim [core/v1]</a></LI>
+  <LI><a href="#persistentvolumeclaimtemplate-v1-core">PersistentVolumeClaimTemplate [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>accessModes</CODE><BR /><I>string array</I></TD><TD>AccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1</TD></TR>
+<TR><TD><CODE>dataSource</CODE><BR /><I><a href="#typedlocalobjectreference-v1-core">TypedLocalObjectReference</a></I></TD><TD>This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) * An existing custom resource that implements data population (Alpha) In order to use custom resource types that implement data population, the AnyVolumeDataSource feature gate must be enabled. If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I><a href="#resourcerequirements-v1-core">ResourceRequirements</a></I></TD><TD>Resources represents the minimum resources the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>A label query over volumes to consider for binding.</TD></TR>
+<TR><TD><CODE>storageClassName</CODE><BR /><I>string</I></TD><TD>Name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1</TD></TR>
+<TR><TD><CODE>volumeMode</CODE><BR /><I>string</I></TD><TD>volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.</TD></TR>
+<TR><TD><CODE>volumeName</CODE><BR /><I>string</I></TD><TD>VolumeName is the binding reference to the PersistentVolume backing this claim.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="persistentvolumeclaimstatus-v1-core">PersistentVolumeClaimStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>accessModes</CODE><BR /><I>string array</I></TD><TD>AccessModes contains the actual access modes the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1</TD></TR>
+<TR><TD><CODE>capacity</CODE><BR /><I>object</I></TD><TD>Represents the actual resources of the underlying volume.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#persistentvolumeclaimcondition-v1-core">PersistentVolumeClaimCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to &#39;ResizeStarted&#39;.</TD></TR>
+<TR><TD><CODE>phase</CODE><BR /><I>string</I></TD><TD>Phase represents the current phase of PersistentVolumeClaim.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="persistentvolumeclaimlist-v1-core">PersistentVolumeClaimList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a> array</I></TD><TD>A list of persistent volume claims. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-persistentvolumeclaim-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-persistentvolumeclaim-v1-core">Create</H2>
+<P>create a PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/persistentvolumeclaims</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-persistentvolumeclaim-v1-core">Patch</H2>
+<P>partially update the specified PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-persistentvolumeclaim-v1-core">Replace</H2>
+<P>replace the specified PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-persistentvolumeclaim-v1-core">Delete</H2>
+<P>delete a PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-persistentvolumeclaim-v1-core">Delete Collection</H2>
+<P>delete collection of PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/persistentvolumeclaims</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-persistentvolumeclaim-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-persistentvolumeclaim-v1-core">Read</H2>
+<P>read the specified PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-persistentvolumeclaim-v1-core">List</H2>
+<P>list or watch objects of kind PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/persistentvolumeclaims</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaimlist-v1-core">PersistentVolumeClaimList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-persistentvolumeclaim-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/persistentvolumeclaims</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaimlist-v1-core">PersistentVolumeClaimList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-persistentvolumeclaim-v1-core">Watch</H2>
+<P>watch changes to an object of kind PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/persistentvolumeclaims/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-persistentvolumeclaim-v1-core">Watch List</H2>
+<P>watch individual changes to a list of PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/persistentvolumeclaims</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-persistentvolumeclaim-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/persistentvolumeclaims</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-persistentvolumeclaim-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-persistentvolumeclaim-v1-core">Patch Status</H2>
+<P>partially update status of the specified PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-persistentvolumeclaim-v1-core">Read Status</H2>
+<P>read status of the specified PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-persistentvolumeclaim-v1-core">Replace Status</H2>
+<P>replace status of the specified PersistentVolumeClaim</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolumeClaim</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="storageclass-v1-storage-k8s-io">StorageClass v1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StorageClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#storageclass-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageclasslist-v1-storage-k8s-io">StorageClassList [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowVolumeExpansion</CODE><BR /><I>boolean</I></TD><TD>AllowVolumeExpansion shows whether the storage class allow volume expand</TD></TR>
+<TR><TD><CODE>allowedTopologies</CODE><BR /><I><a href="#topologyselectorterm-v1-core">TopologySelectorTerm</a> array</I></TD><TD>Restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>mountOptions</CODE><BR /><I>string array</I></TD><TD>Dynamically provisioned PersistentVolumes of this storage class are created with these mountOptions, e.g. [&#34;ro&#34;, &#34;soft&#34;]. Not validated - mount of the PVs will simply fail if one is invalid.</TD></TR>
+<TR><TD><CODE>parameters</CODE><BR /><I>object</I></TD><TD>Parameters holds the parameters for the provisioner that should create volumes of this storage class.</TD></TR>
+<TR><TD><CODE>provisioner</CODE><BR /><I>string</I></TD><TD>Provisioner indicates the type of the provisioner.</TD></TR>
+<TR><TD><CODE>reclaimPolicy</CODE><BR /><I>string</I></TD><TD>Dynamically provisioned PersistentVolumes of this storage class are created with this reclaimPolicy. Defaults to Delete.</TD></TR>
+<TR><TD><CODE>volumeBindingMode</CODE><BR /><I>string</I></TD><TD>VolumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound.  When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="storageclasslist-v1-storage-k8s-io">StorageClassList v1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a> array</I></TD><TD>Items is the list of StorageClasses</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-storageclass-v1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-storageclass-v1-storage-k8s-io">Create</H2>
+<P>create a StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-storageclass-v1-storage-k8s-io">Patch</H2>
+<P>partially update the specified StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-storageclass-v1-storage-k8s-io">Replace</H2>
+<P>replace the specified StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-storageclass-v1-storage-k8s-io">Delete</H2>
+<P>delete a StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-storageclass-v1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-storageclass-v1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-storageclass-v1-storage-k8s-io">Read</H2>
+<P>read the specified StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-storageclass-v1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclasslist-v1-storage-k8s-io">StorageClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-storageclass-v1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind StorageClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-storageclass-v1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of StorageClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volume-v1-core">Volume v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Volume</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>awsElasticBlockStore</CODE><BR /><I><a href="#awselasticblockstorevolumesource-v1-core">AWSElasticBlockStoreVolumeSource</a></I></TD><TD>AWSElasticBlockStore represents an AWS Disk resource that is attached to a kubelet&#39;s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore</TD></TR>
+<TR><TD><CODE>azureDisk</CODE><BR /><I><a href="#azurediskvolumesource-v1-core">AzureDiskVolumeSource</a></I></TD><TD>AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.</TD></TR>
+<TR><TD><CODE>azureFile</CODE><BR /><I><a href="#azurefilevolumesource-v1-core">AzureFileVolumeSource</a></I></TD><TD>AzureFile represents an Azure File Service mount on the host and bind mount to the pod.</TD></TR>
+<TR><TD><CODE>cephfs</CODE><BR /><I><a href="#cephfsvolumesource-v1-core">CephFSVolumeSource</a></I></TD><TD>CephFS represents a Ceph FS mount on the host that shares a pod&#39;s lifetime</TD></TR>
+<TR><TD><CODE>cinder</CODE><BR /><I><a href="#cindervolumesource-v1-core">CinderVolumeSource</a></I></TD><TD>Cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+<TR><TD><CODE>configMap</CODE><BR /><I><a href="#configmapvolumesource-v1-core">ConfigMapVolumeSource</a></I></TD><TD>ConfigMap represents a configMap that should populate this volume</TD></TR>
+<TR><TD><CODE>csi</CODE><BR /><I><a href="#csivolumesource-v1-core">CSIVolumeSource</a></I></TD><TD>CSI (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).</TD></TR>
+<TR><TD><CODE>downwardAPI</CODE><BR /><I><a href="#downwardapivolumesource-v1-core">DownwardAPIVolumeSource</a></I></TD><TD>DownwardAPI represents downward API about the pod that should populate this volume</TD></TR>
+<TR><TD><CODE>emptyDir</CODE><BR /><I><a href="#emptydirvolumesource-v1-core">EmptyDirVolumeSource</a></I></TD><TD>EmptyDir represents a temporary directory that shares a pod&#39;s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir</TD></TR>
+<TR><TD><CODE>ephemeral</CODE><BR /><I><a href="#ephemeralvolumesource-v1-core">EphemeralVolumeSource</a></I></TD><TD>Ephemeral represents a volume that is handled by a cluster storage driver. The volume&#39;s lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.  Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity    tracking are needed, c) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through    a PersistentVolumeClaim (see EphemeralVolumeSource for more    information on the connection between this volume type    and PersistentVolumeClaim).  Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.  Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.  A pod can use both types of ephemeral volumes and persistent volumes at the same time.  This is a beta feature and only available when the GenericEphemeralVolume feature gate is enabled.</TD></TR>
+<TR><TD><CODE>fc</CODE><BR /><I><a href="#fcvolumesource-v1-core">FCVolumeSource</a></I></TD><TD>FC represents a Fibre Channel resource that is attached to a kubelet&#39;s host machine and then exposed to the pod.</TD></TR>
+<TR><TD><CODE>flexVolume</CODE><BR /><I><a href="#flexvolumesource-v1-core">FlexVolumeSource</a></I></TD><TD>FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.</TD></TR>
+<TR><TD><CODE>flocker</CODE><BR /><I><a href="#flockervolumesource-v1-core">FlockerVolumeSource</a></I></TD><TD>Flocker represents a Flocker volume attached to a kubelet&#39;s host machine. This depends on the Flocker control service being running</TD></TR>
+<TR><TD><CODE>gcePersistentDisk</CODE><BR /><I><a href="#gcepersistentdiskvolumesource-v1-core">GCEPersistentDiskVolumeSource</a></I></TD><TD>GCEPersistentDisk represents a GCE Disk resource that is attached to a kubelet&#39;s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk</TD></TR>
+<TR><TD><CODE>gitRepo</CODE><BR /><I><a href="#gitrepovolumesource-v1-core">GitRepoVolumeSource</a></I></TD><TD>GitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod&#39;s container.</TD></TR>
+<TR><TD><CODE>glusterfs</CODE><BR /><I><a href="#glusterfsvolumesource-v1-core">GlusterfsVolumeSource</a></I></TD><TD>Glusterfs represents a Glusterfs mount on the host that shares a pod&#39;s lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md</TD></TR>
+<TR><TD><CODE>hostPath</CODE><BR /><I><a href="#hostpathvolumesource-v1-core">HostPathVolumeSource</a></I></TD><TD>HostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath</TD></TR>
+<TR><TD><CODE>iscsi</CODE><BR /><I><a href="#iscsivolumesource-v1-core">ISCSIVolumeSource</a></I></TD><TD>ISCSI represents an ISCSI Disk resource that is attached to a kubelet&#39;s host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Volume&#39;s name. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>nfs</CODE><BR /><I><a href="#nfsvolumesource-v1-core">NFSVolumeSource</a></I></TD><TD>NFS represents an NFS mount on the host that shares a pod&#39;s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs</TD></TR>
+<TR><TD><CODE>persistentVolumeClaim</CODE><BR /><I><a href="#persistentvolumeclaimvolumesource-v1-core">PersistentVolumeClaimVolumeSource</a></I></TD><TD>PersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims</TD></TR>
+<TR><TD><CODE>photonPersistentDisk</CODE><BR /><I><a href="#photonpersistentdiskvolumesource-v1-core">PhotonPersistentDiskVolumeSource</a></I></TD><TD>PhotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine</TD></TR>
+<TR><TD><CODE>portworxVolume</CODE><BR /><I><a href="#portworxvolumesource-v1-core">PortworxVolumeSource</a></I></TD><TD>PortworxVolume represents a portworx volume attached and mounted on kubelets host machine</TD></TR>
+<TR><TD><CODE>projected</CODE><BR /><I><a href="#projectedvolumesource-v1-core">ProjectedVolumeSource</a></I></TD><TD>Items for all in one resources secrets, configmaps, and downward API</TD></TR>
+<TR><TD><CODE>quobyte</CODE><BR /><I><a href="#quobytevolumesource-v1-core">QuobyteVolumeSource</a></I></TD><TD>Quobyte represents a Quobyte mount on the host that shares a pod&#39;s lifetime</TD></TR>
+<TR><TD><CODE>rbd</CODE><BR /><I><a href="#rbdvolumesource-v1-core">RBDVolumeSource</a></I></TD><TD>RBD represents a Rados Block Device mount on the host that shares a pod&#39;s lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md</TD></TR>
+<TR><TD><CODE>scaleIO</CODE><BR /><I><a href="#scaleiovolumesource-v1-core">ScaleIOVolumeSource</a></I></TD><TD>ScaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.</TD></TR>
+<TR><TD><CODE>secret</CODE><BR /><I><a href="#secretvolumesource-v1-core">SecretVolumeSource</a></I></TD><TD>Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret</TD></TR>
+<TR><TD><CODE>storageos</CODE><BR /><I><a href="#storageosvolumesource-v1-core">StorageOSVolumeSource</a></I></TD><TD>StorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.</TD></TR>
+<TR><TD><CODE>vsphereVolume</CODE><BR /><I><a href="#vspherevirtualdiskvolumesource-v1-core">VsphereVirtualDiskVolumeSource</a></I></TD><TD>VsphereVolume represents a vSphere volume attached and mounted on kubelets host machine</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumeattachment-v1-storage-k8s-io">VolumeAttachment v1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeAttachment</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeattachment-v1beta1-storage-k8s-io">v1beta1</a>
+<a href="#volumeattachment-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentlist-v1-storage-k8s-io">VolumeAttachmentList [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#volumeattachmentspec-v1-storage-k8s-io">VolumeAttachmentSpec</a></I></TD><TD>Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#volumeattachmentstatus-v1-storage-k8s-io">VolumeAttachmentStatus</a></I></TD><TD>Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentspec-v1-storage-k8s-io">VolumeAttachmentSpec v1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attacher</CODE><BR /><I>string</I></TD><TD>Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().</TD></TR>
+<TR><TD><CODE>nodeName</CODE><BR /><I>string</I></TD><TD>The node that the volume should be attached to.</TD></TR>
+<TR><TD><CODE>source</CODE><BR /><I><a href="#volumeattachmentsource-v1-storage-k8s-io">VolumeAttachmentSource</a></I></TD><TD>Source represents the volume that should be attached.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentstatus-v1-storage-k8s-io">VolumeAttachmentStatus v1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attachError</CODE><BR /><I><a href="#volumeerror-v1-storage-k8s-io">VolumeError</a></I></TD><TD>The last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>attached</CODE><BR /><I>boolean</I></TD><TD>Indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>attachmentMetadata</CODE><BR /><I>object</I></TD><TD>Upon successful attach, this field is populated with any information returned by the attach operation that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>detachError</CODE><BR /><I><a href="#volumeerror-v1-storage-k8s-io">VolumeError</a></I></TD><TD>The last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentlist-v1-storage-k8s-io">VolumeAttachmentList v1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a> array</I></TD><TD>Items is the list of VolumeAttachments</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-volumeattachment-v1-storage-k8s-io">Create</H2>
+<P>create a VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-volumeattachment-v1-storage-k8s-io">Patch</H2>
+<P>partially update the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-volumeattachment-v1-storage-k8s-io">Replace</H2>
+<P>replace the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-volumeattachment-v1-storage-k8s-io">Delete</H2>
+<P>delete a VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-volumeattachment-v1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-volumeattachment-v1-storage-k8s-io">Read</H2>
+<P>read the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-volumeattachment-v1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachmentlist-v1-storage-k8s-io">VolumeAttachmentList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-volumeattachment-v1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-volumeattachment-v1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/watch/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-volumeattachment-v1-storage-k8s-io">Patch Status</H2>
+<P>partially update status of the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1/volumeattachments/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-volumeattachment-v1-storage-k8s-io">Read Status</H2>
+<P>read status of the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1/volumeattachments/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-volumeattachment-v1-storage-k8s-io">Replace Status</H2>
+<P>replace status of the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1/volumeattachments/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="-strong-metadata-apis-strong-"><STRONG>METADATA</STRONG></H1>
+
+<P>Metadata resources are responsible for configuring behavior of your other Resources within the Cluster.</P>
+
+<P>Common resource types:</P>
+<UL>
+<LI><A href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</A> (HPA) for automatically scaling the replicacount of your workloads in response to load.</LI>
+<LI><A href="#poddisruptionbudget-v1alpha1">PodDisruptionBudget</A> for configuring how many replicas in a given workload maybe made concurrently unavailable when performing maintenance.</LI>
+<LI><A href="#event-v1-core">Event</A> for notification of resource lifecycle events in the cluster.</LI>
+</UL>
+<HR />
+<H1 id="controllerrevision-v1-apps">ControllerRevision v1 apps</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ControllerRevision</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#controllerrevisionlist-v1-apps">ControllerRevisionList [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>data</CODE></TD><TD>Data is the serialized representation of the state.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>revision</CODE><BR /><I>integer</I></TD><TD>Revision indicates the revision of the state represented by Data.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="controllerrevisionlist-v1-apps">ControllerRevisionList v1 apps</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a> array</I></TD><TD>Items is the list of ControllerRevisions</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-controllerrevision-v1-apps-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-controllerrevision-v1-apps">Create</H2>
+<P>create a ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apps/v1/namespaces/{namespace}/controllerrevisions</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-controllerrevision-v1-apps">Patch</H2>
+<P>partially update the specified ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ControllerRevision</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-controllerrevision-v1-apps">Replace</H2>
+<P>replace the specified ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ControllerRevision</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-controllerrevision-v1-apps">Delete</H2>
+<P>delete a ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ControllerRevision</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-controllerrevision-v1-apps">Delete Collection</H2>
+<P>delete collection of ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apps/v1/namespaces/{namespace}/controllerrevisions</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-controllerrevision-v1-apps-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-controllerrevision-v1-apps">Read</H2>
+<P>read the specified ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ControllerRevision</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#controllerrevision-v1-apps">ControllerRevision</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-controllerrevision-v1-apps">List</H2>
+<P>list or watch objects of kind ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#controllerrevisionlist-v1-apps">ControllerRevisionList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-controllerrevision-v1-apps">List All Namespaces</H2>
+<P>list or watch objects of kind ControllerRevision</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/controllerrevisions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#controllerrevisionlist-v1-apps">ControllerRevisionList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-controllerrevision-v1-apps">Watch</H2>
+<P>watch changes to an object of kind ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/controllerrevisions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ControllerRevision</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-controllerrevision-v1-apps">Watch List</H2>
+<P>watch individual changes to a list of ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/namespaces/{namespace}/controllerrevisions</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-controllerrevision-v1-apps">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apps/v1/watch/controllerrevisions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition v1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceDefinition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionlist-v1-apiextensions-k8s-io">CustomResourceDefinitionList [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#customresourcedefinitionspec-v1-apiextensions-k8s-io">CustomResourceDefinitionSpec</a></I></TD><TD>spec describes how the user wants the resources to appear</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#customresourcedefinitionstatus-v1-apiextensions-k8s-io">CustomResourceDefinitionStatus</a></I></TD><TD>status indicates the actual state of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="customresourcedefinitionspec-v1-apiextensions-k8s-io">CustomResourceDefinitionSpec v1 apiextensions</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conversion</CODE><BR /><I><a href="#customresourceconversion-v1-apiextensions-k8s-io">CustomResourceConversion</a></I></TD><TD>conversion defines conversion settings for the CRD.</TD></TR>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>group is the API group of the defined custom resource. The custom resources are served under `/apis/&lt;group&gt;/...`. Must match the name of the CustomResourceDefinition (in the form `&lt;names.plural&gt;.&lt;group&gt;`).</TD></TR>
+<TR><TD><CODE>names</CODE><BR /><I><a href="#customresourcedefinitionnames-v1-apiextensions-k8s-io">CustomResourceDefinitionNames</a></I></TD><TD>names specify the resource and kind names for the custom resource.</TD></TR>
+<TR><TD><CODE>preserveUnknownFields</CODE><BR /><I>boolean</I></TD><TD>preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be preserved when persisting to storage. apiVersion, kind, metadata and known fields inside metadata are always preserved. This field is deprecated in favor of setting `x-preserve-unknown-fields` to true in `spec.versions[*].schema.openAPIV3Schema`. See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.</TD></TR>
+<TR><TD><CODE>scope</CODE><BR /><I>string</I></TD><TD>scope indicates whether the defined custom resource is cluster- or namespace-scoped. Allowed values are `Cluster` and `Namespaced`.</TD></TR>
+<TR><TD><CODE>versions</CODE><BR /><I><a href="#customresourcedefinitionversion-v1-apiextensions-k8s-io">CustomResourceDefinitionVersion</a> array</I></TD><TD>versions is the list of all API versions of the defined custom resource. Version names are used to compute the order in which served versions are listed in API discovery. If the version string is &#34;kube-like&#34;, it will sort above non &#34;kube-like&#34; version strings, which are ordered lexicographically. &#34;Kube-like&#34; versions start with a &#34;v&#34;, then are followed by a number (the major version), then optionally the string &#34;alpha&#34; or &#34;beta&#34; and another number (the minor version). These are sorted first by GA &gt; beta &gt; alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="customresourcedefinitionstatus-v1-apiextensions-k8s-io">CustomResourceDefinitionStatus v1 apiextensions</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>acceptedNames</CODE><BR /><I><a href="#customresourcedefinitionnames-v1-apiextensions-k8s-io">CustomResourceDefinitionNames</a></I></TD><TD>acceptedNames are the names that are actually being used to serve discovery. They may be different than the names in spec.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#customresourcedefinitioncondition-v1-apiextensions-k8s-io">CustomResourceDefinitionCondition</a> array</I></TD><TD>conditions indicate state for particular aspects of a CustomResourceDefinition</TD></TR>
+<TR><TD><CODE>storedVersions</CODE><BR /><I>string array</I></TD><TD>storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for stored versions in etcd. The field is mutable so a migration controller can finish a migration to another version (ensuring no old objects are left in storage), and then remove the rest of the versions from this list. Versions may not be removed from `spec.versions` while they exist in this list.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="customresourcedefinitionlist-v1-apiextensions-k8s-io">CustomResourceDefinitionList v1 apiextensions</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a> array</I></TD><TD>items list individual CustomResourceDefinition objects</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-customresourcedefinition-v1-apiextensions-k8s-io">Create</H2>
+<P>create a CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apiextensions.k8s.io/v1/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-customresourcedefinition-v1-apiextensions-k8s-io">Patch</H2>
+<P>partially update the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-customresourcedefinition-v1-apiextensions-k8s-io">Replace</H2>
+<P>replace the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-customresourcedefinition-v1-apiextensions-k8s-io">Delete</H2>
+<P>delete a CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-customresourcedefinition-v1-apiextensions-k8s-io">Delete Collection</H2>
+<P>delete collection of CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiextensions.k8s.io/v1/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-customresourcedefinition-v1-apiextensions-k8s-io">Read</H2>
+<P>read the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-customresourcedefinition-v1-apiextensions-k8s-io">List</H2>
+<P>list or watch objects of kind CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinitionlist-v1-apiextensions-k8s-io">CustomResourceDefinitionList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-customresourcedefinition-v1-apiextensions-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1/watch/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-customresourcedefinition-v1-apiextensions-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1/watch/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-customresourcedefinition-v1-apiextensions-k8s-io">Patch Status</H2>
+<P>partially update status of the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-customresourcedefinition-v1-apiextensions-k8s-io">Read Status</H2>
+<P>read status of the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-customresourcedefinition-v1-apiextensions-k8s-io">Replace Status</H2>
+<P>replace status of the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="event-v1-core">Event v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Event</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#event-v1beta1-events-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#eventlist-v1-core">EventList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>action</CODE><BR /><I>string</I></TD><TD>What action was taken/failed regarding to the Regarding object.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>count</CODE><BR /><I>integer</I></TD><TD>The number of times this event has occurred.</TD></TR>
+<TR><TD><CODE>eventTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>Time when this Event was first observed.</TD></TR>
+<TR><TD><CODE>firstTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>The time at which the event was first recorded. (Time of server receipt is in TypeMeta.)</TD></TR>
+<TR><TD><CODE>involvedObject</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>The object that this event is about.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>lastTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>The time at which the most recent occurrence of this event was recorded.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human-readable description of the status of this operation.</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>This should be a short, machine understandable string that gives the reason for the transition into the object&#39;s current status.</TD></TR>
+<TR><TD><CODE>related</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>Optional secondary object for more complex actions.</TD></TR>
+<TR><TD><CODE>reportingComponent</CODE><BR /><I>string</I></TD><TD>Name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`.</TD></TR>
+<TR><TD><CODE>reportingInstance</CODE><BR /><I>string</I></TD><TD>ID of the controller instance, e.g. `kubelet-xyzf`.</TD></TR>
+<TR><TD><CODE>series</CODE><BR /><I><a href="#eventseries-v1-core">EventSeries</a></I></TD><TD>Data about the Event series this event represents or nil if it&#39;s a singleton Event.</TD></TR>
+<TR><TD><CODE>source</CODE><BR /><I><a href="#eventsource-v1-core">EventSource</a></I></TD><TD>The component reporting this event. Should be a short machine understandable string.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of this event (Normal, Warning), new types could be added in the future</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="eventlist-v1-core">EventList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#event-v1-core">Event</a> array</I></TD><TD>List of events</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-event-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-event-v1-core">Create</H2>
+<P>create an Event</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#event-v1-core">Event</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-core">Event</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#event-v1-core">Event</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#event-v1-core">Event</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-event-v1-core">Patch</H2>
+<P>partially update the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-core">Event</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-event-v1-core">Replace</H2>
+<P>replace the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#event-v1-core">Event</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-core">Event</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#event-v1-core">Event</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-event-v1-core">Delete</H2>
+<P>delete an Event</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-event-v1-core">Delete Collection</H2>
+<P>delete collection of Event</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-event-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-event-v1-core">Read</H2>
+<P>read the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-core">Event</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-event-v1-core">List</H2>
+<P>list or watch objects of kind Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#eventlist-v1-core">EventList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-event-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/events</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#eventlist-v1-core">EventList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-event-v1-core">Watch</H2>
+<P>watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-event-v1-core">Watch List</H2>
+<P>watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-event-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/events</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="limitrange-v1-core">LimitRange v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LimitRange</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#limitrangelist-v1-core">LimitRangeList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#limitrangespec-v1-core">LimitRangeSpec</a></I></TD><TD>Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="limitrangespec-v1-core">LimitRangeSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#limitrange-v1-core">LimitRange [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>limits</CODE><BR /><I><a href="#limitrangeitem-v1-core">LimitRangeItem</a> array</I></TD><TD>Limits is the list of LimitRangeItem objects that are enforced.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="limitrangelist-v1-core">LimitRangeList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#limitrange-v1-core">LimitRange</a> array</I></TD><TD>Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-limitrange-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-limitrange-v1-core">Create</H2>
+<P>create a LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/limitranges</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-limitrange-v1-core">Patch</H2>
+<P>partially update the specified LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/limitranges/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the LimitRange</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-limitrange-v1-core">Replace</H2>
+<P>replace the specified LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/limitranges/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the LimitRange</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-limitrange-v1-core">Delete</H2>
+<P>delete a LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/limitranges/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the LimitRange</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-limitrange-v1-core">Delete Collection</H2>
+<P>delete collection of LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/limitranges</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-limitrange-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-limitrange-v1-core">Read</H2>
+<P>read the specified LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/limitranges/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the LimitRange</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#limitrange-v1-core">LimitRange</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-limitrange-v1-core">List</H2>
+<P>list or watch objects of kind LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/limitranges</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#limitrangelist-v1-core">LimitRangeList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-limitrange-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind LimitRange</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/limitranges</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#limitrangelist-v1-core">LimitRangeList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-limitrange-v1-core">Watch</H2>
+<P>watch changes to an object of kind LimitRange. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/limitranges/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the LimitRange</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-limitrange-v1-core">Watch List</H2>
+<P>watch individual changes to a list of LimitRange. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/limitranges</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-limitrange-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of LimitRange. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/limitranges</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler v1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>HorizontalPodAutoscaler</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#horizontalpodautoscaler-v2beta2-autoscaling">v2beta2</a>
+<a href="#horizontalpodautoscaler-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerlist-v1-autoscaling">HorizontalPodAutoscalerList [autoscaling/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#horizontalpodautoscalerspec-v1-autoscaling">HorizontalPodAutoscalerSpec</a></I></TD><TD>behaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#horizontalpodautoscalerstatus-v1-autoscaling">HorizontalPodAutoscalerStatus</a></I></TD><TD>current information about the autoscaler.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerspec-v1-autoscaling">HorizontalPodAutoscalerSpec v1 autoscaling</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler [autoscaling/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>maxReplicas</CODE><BR /><I>integer</I></TD><TD>upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.</TD></TR>
+<TR><TD><CODE>minReplicas</CODE><BR /><I>integer</I></TD><TD>minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down.  It defaults to 1 pod.  minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured.  Scaling is active as long as at least one metric value is available.</TD></TR>
+<TR><TD><CODE>scaleTargetRef</CODE><BR /><I><a href="#crossversionobjectreference-v1-autoscaling">CrossVersionObjectReference</a></I></TD><TD>reference to scaled resource; horizontal pod autoscaler will learn the current resource consumption and will set the desired number of pods by using its Scale subresource.</TD></TR>
+<TR><TD><CODE>targetCPUUtilizationPercentage</CODE><BR /><I>integer</I></TD><TD>target average CPU utilization (represented as a percentage of requested CPU) over all the pods; if not specified the default autoscaling policy will be used.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerstatus-v1-autoscaling">HorizontalPodAutoscalerStatus v1 autoscaling</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler [autoscaling/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>currentCPUUtilizationPercentage</CODE><BR /><I>integer</I></TD><TD>current average CPU utilization over all pods, represented as a percentage of requested CPU, e.g. 70 means that an average pod is using now 70% of its requested CPU.</TD></TR>
+<TR><TD><CODE>currentReplicas</CODE><BR /><I>integer</I></TD><TD>current number of replicas of pods managed by this autoscaler.</TD></TR>
+<TR><TD><CODE>desiredReplicas</CODE><BR /><I>integer</I></TD><TD>desired number of replicas of pods managed by this autoscaler.</TD></TR>
+<TR><TD><CODE>lastScaleTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>last time the HorizontalPodAutoscaler scaled the number of pods; used by the autoscaler to control how often the number of pods is changed.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>most recent generation observed by this autoscaler.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerlist-v1-autoscaling">HorizontalPodAutoscalerList v1 autoscaling</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a> array</I></TD><TD>list of horizontal pod autoscaler objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-horizontalpodautoscaler-v1-autoscaling">Create</H2>
+<P>create a HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-horizontalpodautoscaler-v1-autoscaling">Patch</H2>
+<P>partially update the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-horizontalpodautoscaler-v1-autoscaling">Replace</H2>
+<P>replace the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-horizontalpodautoscaler-v1-autoscaling">Delete</H2>
+<P>delete a HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-horizontalpodautoscaler-v1-autoscaling">Delete Collection</H2>
+<P>delete collection of HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-horizontalpodautoscaler-v1-autoscaling">Read</H2>
+<P>read the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-horizontalpodautoscaler-v1-autoscaling">List</H2>
+<P>list or watch objects of kind HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscalerlist-v1-autoscaling">HorizontalPodAutoscalerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-horizontalpodautoscaler-v1-autoscaling">List All Namespaces</H2>
+<P>list or watch objects of kind HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v1/horizontalpodautoscalers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscalerlist-v1-autoscaling">HorizontalPodAutoscalerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-horizontalpodautoscaler-v1-autoscaling">Watch</H2>
+<P>watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v1/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-horizontalpodautoscaler-v1-autoscaling">Watch List</H2>
+<P>watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v1/watch/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v1/watch/horizontalpodautoscalers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-horizontalpodautoscaler-v1-autoscaling">Patch Status</H2>
+<P>partially update status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-horizontalpodautoscaler-v1-autoscaling">Read Status</H2>
+<P>read status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-horizontalpodautoscaler-v1-autoscaling">Replace Status</H2>
+<P>replace status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration v1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>MutatingWebhookConfiguration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">MutatingWebhookConfigurationList [admissionregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.</TD></TR>
+<TR><TD><CODE>webhooks</CODE><BR /><I><a href="#mutatingwebhook-v1-admissionregistration-k8s-io">MutatingWebhook</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>Webhooks is a list of webhooks and the affected resources and operations.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="mutatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">MutatingWebhookConfigurationList v1 admissionregistration</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a> array</I></TD><TD>List of MutatingWebhookConfiguration.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Create</H2>
+<P>create a MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Patch</H2>
+<P>partially update the specified MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Replace</H2>
+<P>replace the specified MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Delete</H2>
+<P>delete a MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Delete Collection</H2>
+<P>delete collection of MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Read</H2>
+<P>read the specified MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">List</H2>
+<P>list or watch objects of kind MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">MutatingWebhookConfigurationList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Watch</H2>
+<P>watch changes to an object of kind MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/watch/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/watch/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration v1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ValidatingWebhookConfiguration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#validatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList [admissionregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.</TD></TR>
+<TR><TD><CODE>webhooks</CODE><BR /><I><a href="#validatingwebhook-v1-admissionregistration-k8s-io">ValidatingWebhook</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>Webhooks is a list of webhooks and the affected resources and operations.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="validatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList v1 admissionregistration</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a> array</I></TD><TD>List of ValidatingWebhookConfiguration.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Create</H2>
+<P>create a ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Patch</H2>
+<P>partially update the specified ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Replace</H2>
+<P>replace the specified ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Delete</H2>
+<P>delete a ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Delete Collection</H2>
+<P>delete collection of ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Read</H2>
+<P>read the specified ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">List</H2>
+<P>list or watch objects of kind ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/watch/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1/watch/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="podtemplate-v1-core">PodTemplate v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodTemplate</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podtemplatelist-v1-core">PodTemplateList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>template</CODE><BR /><I><a href="#podtemplatespec-v1-core">PodTemplateSpec</a></I></TD><TD>Template defines the pods that will be created from this pod template. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="podtemplatespec-v1-core">PodTemplateSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#daemonsetspec-v1-apps">DaemonSetSpec [apps/v1]</a></LI>
+  <LI><a href="#deploymentspec-v1-apps">DeploymentSpec [apps/v1]</a></LI>
+  <LI><a href="#jobspec-v1-batch">JobSpec [batch/v1]</a></LI>
+  <LI><a href="#podtemplate-v1-core">PodTemplate [core/v1]</a></LI>
+  <LI><a href="#replicasetspec-v1-apps">ReplicaSetSpec [apps/v1]</a></LI>
+  <LI><a href="#replicationcontrollerspec-v1-core">ReplicationControllerSpec [core/v1]</a></LI>
+  <LI><a href="#statefulsetspec-v1-apps">StatefulSetSpec [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#podspec-v1-core">PodSpec</a></I></TD><TD>Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="podtemplatelist-v1-core">PodTemplateList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#podtemplate-v1-core">PodTemplate</a> array</I></TD><TD>List of pod templates</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-podtemplate-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-podtemplate-v1-core">Create</H2>
+<P>create a PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/podtemplates</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-podtemplate-v1-core">Patch</H2>
+<P>partially update the specified PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/podtemplates/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodTemplate</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-podtemplate-v1-core">Replace</H2>
+<P>replace the specified PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/podtemplates/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodTemplate</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-podtemplate-v1-core">Delete</H2>
+<P>delete a PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/podtemplates/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodTemplate</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-podtemplate-v1-core">Delete Collection</H2>
+<P>delete collection of PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/podtemplates</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-podtemplate-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-podtemplate-v1-core">Read</H2>
+<P>read the specified PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/podtemplates/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodTemplate</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podtemplate-v1-core">PodTemplate</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-podtemplate-v1-core">List</H2>
+<P>list or watch objects of kind PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/podtemplates</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podtemplatelist-v1-core">PodTemplateList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-podtemplate-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind PodTemplate</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/podtemplates</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podtemplatelist-v1-core">PodTemplateList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-podtemplate-v1-core">Watch</H2>
+<P>watch changes to an object of kind PodTemplate. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/podtemplates/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodTemplate</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-podtemplate-v1-core">Watch List</H2>
+<P>watch individual changes to a list of PodTemplate. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/podtemplates</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-podtemplate-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of PodTemplate. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/podtemplates</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="poddisruptionbudget-v1beta1-policy">PodDisruptionBudget v1beta1 policy</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PodDisruptionBudget</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#poddisruptionbudget-v1-policy">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#poddisruptionbudgetspec-v1beta1-policy">PodDisruptionBudgetSpec</a></I></TD><TD>Specification of the desired behavior of the PodDisruptionBudget.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#poddisruptionbudgetstatus-v1beta1-policy">PodDisruptionBudgetStatus</a></I></TD><TD>Most recently observed status of the PodDisruptionBudget.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="poddisruptionbudgetspec-v1beta1-policy">PodDisruptionBudgetSpec v1beta1 policy</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>maxUnavailable</CODE></TD><TD>An eviction is allowed if at most &#34;maxUnavailable&#34; pods selected by &#34;selector&#34; are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with &#34;minAvailable&#34;.</TD></TR>
+<TR><TD><CODE>minAvailable</CODE></TD><TD>An eviction is allowed if at least &#34;minAvailable&#34; pods selected by &#34;selector&#34; will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying &#34;100%&#34;.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I><BR /><B>patch strategy</B>: <I>replace</I></TD><TD>Label query over pods whose evictions are managed by the disruption budget. A null selector selects no pods. An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods. In policy/v1, an empty selector will select all pods in the namespace.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="poddisruptionbudgetstatus-v1beta1-policy">PodDisruptionBudgetStatus v1beta1 policy</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#condition-v1-meta">Condition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn&#39;t able to compute               the number of allowed disruptions. Therefore no disruptions are               allowed and the status of the condition will be False. - InsufficientPods: The number of pods are either at or below the number                     required by the PodDisruptionBudget. No disruptions are                     allowed and the status of the condition will be False. - SufficientPods: There are more pods than required by the PodDisruptionBudget.                   The condition will be True, and the number of allowed                   disruptions are provided by the disruptionsAllowed property.</TD></TR>
+<TR><TD><CODE>currentHealthy</CODE><BR /><I>integer</I></TD><TD>current number of healthy pods</TD></TR>
+<TR><TD><CODE>desiredHealthy</CODE><BR /><I>integer</I></TD><TD>minimum desired number of healthy pods</TD></TR>
+<TR><TD><CODE>disruptedPods</CODE><BR /><I>object</I></TD><TD>DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn&#39;t occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.</TD></TR>
+<TR><TD><CODE>disruptionsAllowed</CODE><BR /><I>integer</I></TD><TD>Number of pod disruptions that are currently allowed.</TD></TR>
+<TR><TD><CODE>expectedPods</CODE><BR /><I>integer</I></TD><TD>total number of pods counted by this disruption budget</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB&#39;s object generation.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList v1beta1 policy</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-poddisruptionbudget-v1beta1-policy">Create</H2>
+<P>create a PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-poddisruptionbudget-v1beta1-policy">Patch</H2>
+<P>partially update the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-poddisruptionbudget-v1beta1-policy">Replace</H2>
+<P>replace the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-poddisruptionbudget-v1beta1-policy">Delete</H2>
+<P>delete a PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-poddisruptionbudget-v1beta1-policy">Delete Collection</H2>
+<P>delete collection of PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-poddisruptionbudget-v1beta1-policy">Read</H2>
+<P>read the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-poddisruptionbudget-v1beta1-policy">List</H2>
+<P>list or watch objects of kind PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-poddisruptionbudget-v1beta1-policy">List All Namespaces</H2>
+<P>list or watch objects of kind PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/poddisruptionbudgets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-poddisruptionbudget-v1beta1-policy">Watch</H2>
+<P>watch changes to an object of kind PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-poddisruptionbudget-v1beta1-policy">Watch List</H2>
+<P>watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/poddisruptionbudgets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-poddisruptionbudget-v1beta1-policy">Patch Status</H2>
+<P>partially update status of the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-poddisruptionbudget-v1beta1-policy">Read Status</H2>
+<P>read status of the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-poddisruptionbudget-v1beta1-policy">Replace Status</H2>
+<P>replace status of the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="priorityclass-v1-scheduling-k8s-io">PriorityClass v1 scheduling.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>scheduling.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PriorityClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#priorityclass-v1beta1-scheduling-k8s-io">v1beta1</a>
+<a href="#priorityclass-v1alpha1-scheduling-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#priorityclasslist-v1-scheduling-k8s-io">PriorityClassList [scheduling/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD>description is an arbitrary string that usually provides guidelines on when this priority class should be used.</TD></TR>
+<TR><TD><CODE>globalDefault</CODE><BR /><I>boolean</I></TD><TD>globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>preemptionPolicy</CODE><BR /><I>string</I></TD><TD>PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>integer</I></TD><TD>The value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="priorityclasslist-v1-scheduling-k8s-io">PriorityClassList v1 scheduling</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a> array</I></TD><TD>items is the list of PriorityClasses</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-priorityclass-v1-scheduling-k8s-io">Create</H2>
+<P>create a PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/scheduling.k8s.io/v1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-priorityclass-v1-scheduling-k8s-io">Patch</H2>
+<P>partially update the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/scheduling.k8s.io/v1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-priorityclass-v1-scheduling-k8s-io">Replace</H2>
+<P>replace the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/scheduling.k8s.io/v1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-priorityclass-v1-scheduling-k8s-io">Delete</H2>
+<P>delete a PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/scheduling.k8s.io/v1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-priorityclass-v1-scheduling-k8s-io">Delete Collection</H2>
+<P>delete collection of PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/scheduling.k8s.io/v1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-priorityclass-v1-scheduling-k8s-io">Read</H2>
+<P>read the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-priorityclass-v1-scheduling-k8s-io">List</H2>
+<P>list or watch objects of kind PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclasslist-v1-scheduling-k8s-io">PriorityClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-priorityclass-v1-scheduling-k8s-io">Watch</H2>
+<P>watch changes to an object of kind PriorityClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1/watch/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-priorityclass-v1-scheduling-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of PriorityClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1/watch/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="podsecuritypolicy-v1beta1-policy">PodSecurityPolicy v1beta1 policy</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PodSecurityPolicy</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicylist-v1beta1-policy">PodSecurityPolicyList [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec</a></I></TD><TD>spec defines the policy enforced.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec v1beta1 policy</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowPrivilegeEscalation</CODE><BR /><I>boolean</I></TD><TD>allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.</TD></TR>
+<TR><TD><CODE>allowedCSIDrivers</CODE><BR /><I><a href="#allowedcsidriver-v1beta1-policy">AllowedCSIDriver</a> array</I></TD><TD>AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate.</TD></TR>
+<TR><TD><CODE>allowedCapabilities</CODE><BR /><I>string array</I></TD><TD>allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author&#39;s discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.</TD></TR>
+<TR><TD><CODE>allowedFlexVolumes</CODE><BR /><I><a href="#allowedflexvolume-v1beta1-policy">AllowedFlexVolume</a> array</I></TD><TD>allowedFlexVolumes is an allowlist of Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the &#34;volumes&#34; field.</TD></TR>
+<TR><TD><CODE>allowedHostPaths</CODE><BR /><I><a href="#allowedhostpath-v1beta1-policy">AllowedHostPath</a> array</I></TD><TD>allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used.</TD></TR>
+<TR><TD><CODE>allowedProcMountTypes</CODE><BR /><I>string array</I></TD><TD>AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.</TD></TR>
+<TR><TD><CODE>allowedUnsafeSysctls</CODE><BR /><I>string array</I></TD><TD>allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in &#34;*&#34; in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection.  Examples: e.g. &#34;foo/*&#34; allows &#34;foo/bar&#34;, &#34;foo/baz&#34;, etc. e.g. &#34;foo.*&#34; allows &#34;foo.bar&#34;, &#34;foo.baz&#34;, etc.</TD></TR>
+<TR><TD><CODE>defaultAddCapabilities</CODE><BR /><I>string array</I></TD><TD>defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.</TD></TR>
+<TR><TD><CODE>defaultAllowPrivilegeEscalation</CODE><BR /><I>boolean</I></TD><TD>defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.</TD></TR>
+<TR><TD><CODE>forbiddenSysctls</CODE><BR /><I>string array</I></TD><TD>forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in &#34;*&#34; in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.  Examples: e.g. &#34;foo/*&#34; forbids &#34;foo/bar&#34;, &#34;foo/baz&#34;, etc. e.g. &#34;foo.*&#34; forbids &#34;foo.bar&#34;, &#34;foo.baz&#34;, etc.</TD></TR>
+<TR><TD><CODE>fsGroup</CODE><BR /><I><a href="#fsgroupstrategyoptions-v1beta1-policy">FSGroupStrategyOptions</a></I></TD><TD>fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.</TD></TR>
+<TR><TD><CODE>hostIPC</CODE><BR /><I>boolean</I></TD><TD>hostIPC determines if the policy allows the use of HostIPC in the pod spec.</TD></TR>
+<TR><TD><CODE>hostNetwork</CODE><BR /><I>boolean</I></TD><TD>hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.</TD></TR>
+<TR><TD><CODE>hostPID</CODE><BR /><I>boolean</I></TD><TD>hostPID determines if the policy allows the use of HostPID in the pod spec.</TD></TR>
+<TR><TD><CODE>hostPorts</CODE><BR /><I><a href="#hostportrange-v1beta1-policy">HostPortRange</a> array</I></TD><TD>hostPorts determines which host port ranges are allowed to be exposed.</TD></TR>
+<TR><TD><CODE>privileged</CODE><BR /><I>boolean</I></TD><TD>privileged determines if a pod can request to be run as privileged.</TD></TR>
+<TR><TD><CODE>readOnlyRootFilesystem</CODE><BR /><I>boolean</I></TD><TD>readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.</TD></TR>
+<TR><TD><CODE>requiredDropCapabilities</CODE><BR /><I>string array</I></TD><TD>requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.</TD></TR>
+<TR><TD><CODE>runAsGroup</CODE><BR /><I><a href="#runasgroupstrategyoptions-v1beta1-policy">RunAsGroupStrategyOptions</a></I></TD><TD>RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod&#39;s RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.</TD></TR>
+<TR><TD><CODE>runAsUser</CODE><BR /><I><a href="#runasuserstrategyoptions-v1beta1-policy">RunAsUserStrategyOptions</a></I></TD><TD>runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.</TD></TR>
+<TR><TD><CODE>runtimeClass</CODE><BR /><I><a href="#runtimeclassstrategyoptions-v1beta1-policy">RuntimeClassStrategyOptions</a></I></TD><TD>runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod&#39;s runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.</TD></TR>
+<TR><TD><CODE>seLinux</CODE><BR /><I><a href="#selinuxstrategyoptions-v1beta1-policy">SELinuxStrategyOptions</a></I></TD><TD>seLinux is the strategy that will dictate the allowable labels that may be set.</TD></TR>
+<TR><TD><CODE>supplementalGroups</CODE><BR /><I><a href="#supplementalgroupsstrategyoptions-v1beta1-policy">SupplementalGroupsStrategyOptions</a></I></TD><TD>supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.</TD></TR>
+<TR><TD><CODE>volumes</CODE><BR /><I>string array</I></TD><TD>volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use &#39;\*&#39;.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="podsecuritypolicylist-v1beta1-policy">PodSecurityPolicyList v1beta1 policy</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a> array</I></TD><TD>items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-podsecuritypolicy-v1beta1-policy">Create</H2>
+<P>create a PodSecurityPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/policy/v1beta1/podsecuritypolicies</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-podsecuritypolicy-v1beta1-policy">Patch</H2>
+<P>partially update the specified PodSecurityPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/policy/v1beta1/podsecuritypolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodSecurityPolicy</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-podsecuritypolicy-v1beta1-policy">Replace</H2>
+<P>replace the specified PodSecurityPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/policy/v1beta1/podsecuritypolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodSecurityPolicy</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-podsecuritypolicy-v1beta1-policy">Delete</H2>
+<P>delete a PodSecurityPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/policy/v1beta1/podsecuritypolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodSecurityPolicy</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-podsecuritypolicy-v1beta1-policy">Delete Collection</H2>
+<P>delete collection of PodSecurityPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/policy/v1beta1/podsecuritypolicies</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-podsecuritypolicy-v1beta1-policy">Read</H2>
+<P>read the specified PodSecurityPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/podsecuritypolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodSecurityPolicy</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-podsecuritypolicy-v1beta1-policy">List</H2>
+<P>list or watch objects of kind PodSecurityPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/podsecuritypolicies</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#podsecuritypolicylist-v1beta1-policy">PodSecurityPolicyList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-podsecuritypolicy-v1beta1-policy">Watch</H2>
+<P>watch changes to an object of kind PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/podsecuritypolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodSecurityPolicy</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-podsecuritypolicy-v1beta1-policy">Watch List</H2>
+<P>watch individual changes to a list of PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/podsecuritypolicies</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="-strong-cluster-apis-strong-"><strong>CLUSTER</strong></H1>
+
+<P>Cluster resources are responsible for defining configuration of the cluster itself, and are generally only used by cluster operators.</P>
+
+<HR />
+<H1 id="apiservice-v1-apiregistration-k8s-io">APIService v1 apiregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>APIService</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#apiservice-v1beta1-apiregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicelist-v1-apiregistration-k8s-io">APIServiceList [apiregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#apiservicespec-v1-apiregistration-k8s-io">APIServiceSpec</a></I></TD><TD>Spec contains information for locating and communicating with a server</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#apiservicestatus-v1-apiregistration-k8s-io">APIServiceStatus</a></I></TD><TD>Status contains derived information about an API server</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="apiservicespec-v1-apiregistration-k8s-io">APIServiceSpec v1 apiregistration</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservice-v1-apiregistration-k8s-io">APIService [apiregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>caBundle</CODE><BR /><I>string</I></TD><TD>CABundle is a PEM encoded CA bundle which will be used to validate an API server&#39;s serving certificate. If unspecified, system trust roots on the apiserver are used.</TD></TR>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>Group is the API group name this server hosts</TD></TR>
+<TR><TD><CODE>groupPriorityMinimum</CODE><BR /><I>integer</I></TD><TD>GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object.  (v1.bar before v1.foo) We&#39;d recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000s</TD></TR>
+<TR><TD><CODE>insecureSkipTLSVerify</CODE><BR /><I>boolean</I></TD><TD>InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged.  You should use the CABundle instead.</TD></TR>
+<TR><TD><CODE>service</CODE><BR /><I><a href="#servicereference-v1-apiregistration-k8s-io">ServiceReference</a></I></TD><TD>Service is a reference to the service for this API server.  It must communicate on port 443. If the Service is nil, that means the handling for the API groupversion is handled locally on this server. The call will simply delegate to the normal handler chain to be fulfilled.</TD></TR>
+<TR><TD><CODE>version</CODE><BR /><I>string</I></TD><TD>Version is the API version this server hosts.  For example, &#34;v1&#34;</TD></TR>
+<TR><TD><CODE>versionPriority</CODE><BR /><I>integer</I></TD><TD>VersionPriority controls the ordering of this API version inside of its group.  Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it&#39;s inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is &#34;kube-like&#34;, it will sort above non &#34;kube-like&#34; version strings, which are ordered lexicographically. &#34;Kube-like&#34; versions start with a &#34;v&#34;, then are followed by a number (the major version), then optionally the string &#34;alpha&#34; or &#34;beta&#34; and another number (the minor version). These are sorted first by GA &gt; beta &gt; alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="apiservicestatus-v1-apiregistration-k8s-io">APIServiceStatus v1 apiregistration</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservice-v1-apiregistration-k8s-io">APIService [apiregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#apiservicecondition-v1-apiregistration-k8s-io">APIServiceCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Current service state of apiService.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="apiservicelist-v1-apiregistration-k8s-io">APIServiceList v1 apiregistration</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-apiservice-v1-apiregistration-k8s-io">Create</H2>
+<P>create an APIService</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apiregistration.k8s.io/v1/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-apiservice-v1-apiregistration-k8s-io">Patch</H2>
+<P>partially update the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiregistration.k8s.io/v1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-apiservice-v1-apiregistration-k8s-io">Replace</H2>
+<P>replace the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiregistration.k8s.io/v1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-apiservice-v1-apiregistration-k8s-io">Delete</H2>
+<P>delete an APIService</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiregistration.k8s.io/v1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-apiservice-v1-apiregistration-k8s-io">Delete Collection</H2>
+<P>delete collection of APIService</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiregistration.k8s.io/v1/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-apiservice-v1-apiregistration-k8s-io">Read</H2>
+<P>read the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-apiservice-v1-apiregistration-k8s-io">List</H2>
+<P>list or watch objects of kind APIService</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservicelist-v1-apiregistration-k8s-io">APIServiceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-apiservice-v1-apiregistration-k8s-io">Watch</H2>
+<P>watch changes to an object of kind APIService. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1/watch/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-apiservice-v1-apiregistration-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of APIService. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1/watch/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-apiservice-v1-apiregistration-k8s-io">Patch Status</H2>
+<P>partially update status of the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiregistration.k8s.io/v1/apiservices/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-apiservice-v1-apiregistration-k8s-io">Read Status</H2>
+<P>read status of the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1/apiservices/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-apiservice-v1-apiregistration-k8s-io">Replace Status</H2>
+<P>replace status of the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiregistration.k8s.io/v1/apiservices/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#apiservice-v1-apiregistration-k8s-io">APIService</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="binding-v1-core">Binding v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Binding</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>The target object that you want to bind to the standard object.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-binding-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-binding-v1-core">Create</H2>
+<P>create a Binding</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/bindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#binding-v1-core">Binding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#binding-v1-core">Binding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#binding-v1-core">Binding</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#binding-v1-core">Binding</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest v1 certificates.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>certificates.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CertificateSigningRequest</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequestlist-v1-certificates-k8s-io">CertificateSigningRequestList [certificates/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#certificatesigningrequestspec-v1-certificates-k8s-io">CertificateSigningRequestSpec</a></I></TD><TD>spec contains the certificate request, and is immutable after creation. Only the request, signerName, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#certificatesigningrequeststatus-v1-certificates-k8s-io">CertificateSigningRequestStatus</a></I></TD><TD>status contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="certificatesigningrequestspec-v1-certificates-k8s-io">CertificateSigningRequestSpec v1 certificates</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest [certificates/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extra</CODE><BR /><I>object</I></TD><TD>extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.</TD></TR>
+<TR><TD><CODE>groups</CODE><BR /><I>string array</I></TD><TD>groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.</TD></TR>
+<TR><TD><CODE>request</CODE><BR /><I>string</I></TD><TD>request contains an x509 certificate signing request encoded in a &#34;CERTIFICATE REQUEST&#34; PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.</TD></TR>
+<TR><TD><CODE>signerName</CODE><BR /><I>string</I></TD><TD>signerName indicates the requested signer, and is a qualified name.  List/watch requests for CertificateSigningRequests can filter on this field using a &#34;spec.signerName=NAME&#34; fieldSelector.  Well-known Kubernetes signers are:  1. &#34;kubernetes.io/kube-apiserver-client&#34;: issues client certificates that can be used to authenticate to kube-apiserver.   Requests for this signer are never auto-approved by kube-controller-manager, can be issued by the &#34;csrsigning&#34; controller in kube-controller-manager.  2. &#34;kubernetes.io/kube-apiserver-client-kubelet&#34;: issues client certificates that kubelets use to authenticate to kube-apiserver.   Requests for this signer can be auto-approved by the &#34;csrapproving&#34; controller in kube-controller-manager, and can be issued by the &#34;csrsigning&#34; controller in kube-controller-manager.  3. &#34;kubernetes.io/kubelet-serving&#34; issues serving certificates that kubelets use to serve TLS endpoints, which kube-apiserver can connect to securely.   Requests for this signer are never auto-approved by kube-controller-manager, and can be issued by the &#34;csrsigning&#34; controller in kube-controller-manager.  More details are available at https://k8s.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers  Custom signerNames can also be specified. The signer defines:  1. Trust distribution: how trust (CA bundles) are distributed.  2. Permitted subjects: and behavior when a disallowed subject is requested.  3. Required, permitted, or forbidden x509 extensions in the request (including whether subjectAltNames are allowed, which types, restrictions on allowed values) and behavior when a disallowed extension is requested.  4. Required, permitted, or forbidden key usages / extended key usages.  5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.  6. Whether or not requests for CA certificates are allowed.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.</TD></TR>
+<TR><TD><CODE>usages</CODE><BR /><I>string array</I></TD><TD>usages specifies a set of key usages requested in the issued certificate.  Requests for TLS client certificates typically request: &#34;digital signature&#34;, &#34;key encipherment&#34;, &#34;client auth&#34;.  Requests for TLS serving certificates typically request: &#34;key encipherment&#34;, &#34;digital signature&#34;, &#34;server auth&#34;.  Valid values are:  &#34;signing&#34;, &#34;digital signature&#34;, &#34;content commitment&#34;,  &#34;key encipherment&#34;, &#34;key agreement&#34;, &#34;data encipherment&#34;,  &#34;cert sign&#34;, &#34;crl sign&#34;, &#34;encipher only&#34;, &#34;decipher only&#34;, &#34;any&#34;,  &#34;server auth&#34;, &#34;client auth&#34;,  &#34;code signing&#34;, &#34;email protection&#34;, &#34;s/mime&#34;,  &#34;ipsec end system&#34;, &#34;ipsec tunnel&#34;, &#34;ipsec user&#34;,  &#34;timestamping&#34;, &#34;ocsp signing&#34;, &#34;microsoft sgc&#34;, &#34;netscape sgc&#34;</TD></TR>
+<TR><TD><CODE>username</CODE><BR /><I>string</I></TD><TD>username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="certificatesigningrequeststatus-v1-certificates-k8s-io">CertificateSigningRequestStatus v1 certificates</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest [certificates/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>certificate</CODE><BR /><I>string</I></TD><TD>certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.  If the certificate signing request is denied, a condition of type &#34;Denied&#34; is added and this field remains empty. If the signer cannot issue the certificate, a condition of type &#34;Failed&#34; is added and this field remains empty.  Validation requirements:  1. certificate must contain one or more PEM blocks.  2. All PEM blocks must have the &#34;CERTIFICATE&#34; label, contain no headers, and the encoded data   must be a BER-encoded ASN.1 Certificate structure as described in section 4 of RFC5280.  3. Non-PEM content may appear before or after the &#34;CERTIFICATE&#34; PEM blocks and is unvalidated,   to allow for explanatory text as described in section 5.2 of RFC7468.  If more than one PEM block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes.  The certificate is encoded in PEM format.  When serialized as JSON or YAML, the data is additionally base64-encoded, so it consists of:      base64(     -----BEGIN CERTIFICATE-----     ...     -----END CERTIFICATE-----     )</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#certificatesigningrequestcondition-v1-certificates-k8s-io">CertificateSigningRequestCondition</a> array</I></TD><TD>conditions applied to the request. Known conditions are &#34;Approved&#34;, &#34;Denied&#34;, and &#34;Failed&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="certificatesigningrequestlist-v1-certificates-k8s-io">CertificateSigningRequestList v1 certificates</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a> array</I></TD><TD>items is a collection of CertificateSigningRequest objects</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-certificatesigningrequest-v1-certificates-k8s-io">Create</H2>
+<P>create a CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/certificates.k8s.io/v1/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-certificatesigningrequest-v1-certificates-k8s-io">Patch</H2>
+<P>partially update the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/certificates.k8s.io/v1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-certificatesigningrequest-v1-certificates-k8s-io">Replace</H2>
+<P>replace the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/certificates.k8s.io/v1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-certificatesigningrequest-v1-certificates-k8s-io">Delete</H2>
+<P>delete a CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/certificates.k8s.io/v1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-certificatesigningrequest-v1-certificates-k8s-io">Delete Collection</H2>
+<P>delete collection of CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/certificates.k8s.io/v1/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-certificatesigningrequest-v1-certificates-k8s-io">Read</H2>
+<P>read the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-certificatesigningrequest-v1-certificates-k8s-io">List</H2>
+<P>list or watch objects of kind CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequestlist-v1-certificates-k8s-io">CertificateSigningRequestList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-certificatesigningrequest-v1-certificates-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1/watch/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-certificatesigningrequest-v1-certificates-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1/watch/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-certificatesigningrequest-v1-certificates-k8s-io">Patch Status</H2>
+<P>partially update status of the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/certificates.k8s.io/v1/certificatesigningrequests/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-certificatesigningrequest-v1-certificates-k8s-io">Read Status</H2>
+<P>read status of the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1/certificatesigningrequests/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-certificatesigningrequest-v1-certificates-k8s-io">Replace Status</H2>
+<P>replace status of the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/certificates.k8s.io/v1/certificatesigningrequests/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="clusterrole-v1-rbac-authorization-k8s-io">ClusterRole v1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ClusterRole</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolelist-v1-rbac-authorization-k8s-io">ClusterRoleList [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>aggregationRule</CODE><BR /><I><a href="#aggregationrule-v1-rbac-authorization-k8s-io">AggregationRule</a></I></TD><TD>AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#policyrule-v1-rbac-authorization-k8s-io">PolicyRule</a> array</I></TD><TD>Rules holds all the PolicyRules for this ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="clusterrolelist-v1-rbac-authorization-k8s-io">ClusterRoleList v1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a> array</I></TD><TD>Items is a list of ClusterRoles</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-clusterrole-v1-rbac-authorization-k8s-io">Create</H2>
+<P>create a ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-clusterrole-v1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-clusterrole-v1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-clusterrole-v1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-clusterrole-v1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-clusterrole-v1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-clusterrole-v1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolelist-v1-rbac-authorization-k8s-io">ClusterRoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-clusterrole-v1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ClusterRole. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-clusterrole-v1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding v1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ClusterRoleBinding</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebindinglist-v1-rbac-authorization-k8s-io">ClusterRoleBindingList [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>roleRef</CODE><BR /><I><a href="#roleref-v1-rbac-authorization-k8s-io">RoleRef</a></I></TD><TD>RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</TD></TR>
+<TR><TD><CODE>subjects</CODE><BR /><I><a href="#subject-v1-rbac-authorization-k8s-io">Subject</a> array</I></TD><TD>Subjects holds references to the objects the role applies to.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="clusterrolebindinglist-v1-rbac-authorization-k8s-io">ClusterRoleBindingList v1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a> array</I></TD><TD>Items is a list of ClusterRoleBindings</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-clusterrolebinding-v1-rbac-authorization-k8s-io">Create</H2>
+<P>create a ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-clusterrolebinding-v1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-clusterrolebinding-v1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-clusterrolebinding-v1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-clusterrolebinding-v1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-clusterrolebinding-v1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebindinglist-v1-rbac-authorization-k8s-io">ClusterRoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-clusterrolebinding-v1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="componentstatus-v1-core">ComponentStatus v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ComponentStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#componentstatuslist-v1-core">ComponentStatusList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#componentcondition-v1-core">ComponentCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>List of component conditions observed</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="componentstatuslist-v1-core">ComponentStatusList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#componentstatus-v1-core">ComponentStatus</a> array</I></TD><TD>List of ComponentStatus objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-componentstatus-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-componentstatus-v1-core">Read</H2>
+<P>read the specified ComponentStatus</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/componentstatuses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ComponentStatus</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#componentstatus-v1-core">ComponentStatus</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-componentstatus-v1-core">List</H2>
+<P>list objects of kind ComponentStatus</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/componentstatuses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#componentstatuslist-v1-core">ComponentStatusList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema v1beta1 flowcontrol.apiserver.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>FlowSchema</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#flowschemalist-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaList [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>`metadata` is the standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#flowschemaspec-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaSpec</a></I></TD><TD>`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#flowschemastatus-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaStatus</a></I></TD><TD>`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="flowschemaspec-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaSpec v1beta1 flowcontrol</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>distinguisherMethod</CODE><BR /><I><a href="#flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io">FlowDistinguisherMethod</a></I></TD><TD>`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.</TD></TR>
+<TR><TD><CODE>matchingPrecedence</CODE><BR /><I>integer</I></TD><TD>`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence.  Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.</TD></TR>
+<TR><TD><CODE>priorityLevelConfiguration</CODE><BR /><I><a href="#prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationReference</a></I></TD><TD>`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io">PolicyRulesWithSubjects</a> array</I></TD><TD>`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="flowschemastatus-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaStatus v1beta1 flowcontrol</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaCondition</a> array</I></TD><TD>`conditions` is a list of the current states of FlowSchema.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="flowschemalist-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaList v1beta1 flowcontrol</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a> array</I></TD><TD>`items` is a list of FlowSchemas.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Create</H2>
+<P>create a FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Patch</H2>
+<P>partially update the specified FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Replace</H2>
+<P>replace the specified FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Delete</H2>
+<P>delete a FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Delete Collection</H2>
+<P>delete collection of FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Read</H2>
+<P>read the specified FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">List</H2>
+<P>list or watch objects of kind FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschemalist-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Watch</H2>
+<P>watch changes to an object of kind FlowSchema. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/flowschemas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of FlowSchema. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/flowschemas</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Patch Status</H2>
+<P>partially update status of the specified FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Read Status</H2>
+<P>read status of the specified FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io">Replace Status</H2>
+<P>replace status of the specified FlowSchema</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the FlowSchema</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="lease-v1-coordination-k8s-io">Lease v1 coordination.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>coordination.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Lease</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#lease-v1beta1-coordination-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#leaselist-v1-coordination-k8s-io">LeaseList [coordination/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#leasespec-v1-coordination-k8s-io">LeaseSpec</a></I></TD><TD>Specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="leasespec-v1-coordination-k8s-io">LeaseSpec v1 coordination</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#lease-v1-coordination-k8s-io">Lease [coordination/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>acquireTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>acquireTime is a time when the current lease was acquired.</TD></TR>
+<TR><TD><CODE>holderIdentity</CODE><BR /><I>string</I></TD><TD>holderIdentity contains the identity of the holder of a current lease.</TD></TR>
+<TR><TD><CODE>leaseDurationSeconds</CODE><BR /><I>integer</I></TD><TD>leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measure against time of last observed RenewTime.</TD></TR>
+<TR><TD><CODE>leaseTransitions</CODE><BR /><I>integer</I></TD><TD>leaseTransitions is the number of transitions of a lease between holders.</TD></TR>
+<TR><TD><CODE>renewTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>renewTime is a time when the current holder of a lease has last updated the lease.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="leaselist-v1-coordination-k8s-io">LeaseList v1 coordination</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#lease-v1-coordination-k8s-io">Lease</a> array</I></TD><TD>Items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-lease-v1-coordination-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-lease-v1-coordination-k8s-io">Create</H2>
+<P>create a Lease</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-lease-v1-coordination-k8s-io">Patch</H2>
+<P>partially update the specified Lease</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-lease-v1-coordination-k8s-io">Replace</H2>
+<P>replace the specified Lease</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-lease-v1-coordination-k8s-io">Delete</H2>
+<P>delete a Lease</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-lease-v1-coordination-k8s-io">Delete Collection</H2>
+<P>delete collection of Lease</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-lease-v1-coordination-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-lease-v1-coordination-k8s-io">Read</H2>
+<P>read the specified Lease</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-lease-v1-coordination-k8s-io">List</H2>
+<P>list or watch objects of kind Lease</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#leaselist-v1-coordination-k8s-io">LeaseList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-lease-v1-coordination-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Lease</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1/leases</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#leaselist-v1-coordination-k8s-io">LeaseList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-lease-v1-coordination-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Lease. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-lease-v1-coordination-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-lease-v1-coordination-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1/watch/leases</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview v1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LocalSubjectAccessReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#subjectaccessreviewspec-v1-authorization-k8s-io">SubjectAccessReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectaccessreviewstatus-v1-authorization-k8s-io">SubjectAccessReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request is allowed or not</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-localsubjectaccessreview-v1-authorization-k8s-io">Create</H2>
+<P>create a LocalSubjectAccessReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1/namespaces/{namespace}/localsubjectaccessreviews</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="namespace-v1-core">Namespace v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Namespace</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#namespacelist-v1-core">NamespaceList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#namespacespec-v1-core">NamespaceSpec</a></I></TD><TD>Spec defines the behavior of the Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#namespacestatus-v1-core">NamespaceStatus</a></I></TD><TD>Status describes the current status of a Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="namespacespec-v1-core">NamespaceSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#namespace-v1-core">Namespace [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>finalizers</CODE><BR /><I>string array</I></TD><TD>Finalizers is an opaque list of values that must be empty to permanently remove object from storage. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="namespacestatus-v1-core">NamespaceStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#namespace-v1-core">Namespace [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#namespacecondition-v1-core">NamespaceCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Represents the latest available observations of a namespace&#39;s current state.</TD></TR>
+<TR><TD><CODE>phase</CODE><BR /><I>string</I></TD><TD>Phase is the current lifecycle phase of the namespace. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="namespacelist-v1-core">NamespaceList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#namespace-v1-core">Namespace</a> array</I></TD><TD>Items is the list of Namespace objects in the list. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-namespace-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-namespace-v1-core">Create</H2>
+<P>create a Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-namespace-v1-core">Patch</H2>
+<P>partially update the specified Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-namespace-v1-core">Replace</H2>
+<P>replace the specified Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-namespace-v1-core">Delete</H2>
+<P>delete a Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-namespace-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-namespace-v1-core">Read</H2>
+<P>read the specified Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-namespace-v1-core">List</H2>
+<P>list or watch objects of kind Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespacelist-v1-core">NamespaceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-namespace-v1-core">Watch</H2>
+<P>watch changes to an object of kind Namespace. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-namespace-v1-core">Watch List</H2>
+<P>watch individual changes to a list of Namespace. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-namespace-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-namespace-v1-core">Patch Status</H2>
+<P>partially update status of the specified Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-namespace-v1-core">Read Status</H2>
+<P>read status of the specified Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-namespace-v1-core">Replace Status</H2>
+<P>replace status of the specified Namespace</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#namespace-v1-core">Namespace</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="node-v1-core">Node v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Node</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodelist-v1-core">NodeList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#nodespec-v1-core">NodeSpec</a></I></TD><TD>Spec defines the behavior of a node. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#nodestatus-v1-core">NodeStatus</a></I></TD><TD>Most recently observed status of the node. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="nodespec-v1-core">NodeSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#node-v1-core">Node [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>configSource</CODE><BR /><I><a href="#nodeconfigsource-v1-core">NodeConfigSource</a></I></TD><TD>If specified, the source to get node configuration from The DynamicKubeletConfig feature gate must be enabled for the Kubelet to use this field</TD></TR>
+<TR><TD><CODE>externalID</CODE><BR /><I>string</I></TD><TD>Deprecated. Not all kubelets will set this field. Remove field after 1.13. see: https://issues.k8s.io/61966</TD></TR>
+<TR><TD><CODE>podCIDR</CODE><BR /><I>string</I></TD><TD>PodCIDR represents the pod IP range assigned to the node.</TD></TR>
+<TR><TD><CODE>podCIDRs</CODE><BR /><I>string array</I><BR /><B>patch strategy</B>: <I>merge</I></TD><TD>podCIDRs represents the IP ranges assigned to the node for usage by Pods on that node. If this field is specified, the 0th entry must match the podCIDR field. It may contain at most 1 value for each of IPv4 and IPv6.</TD></TR>
+<TR><TD><CODE>providerID</CODE><BR /><I>string</I></TD><TD>ID of the node assigned by the cloud provider in the format: &lt;ProviderName&gt;://&lt;ProviderSpecificNodeID&gt;</TD></TR>
+<TR><TD><CODE>taints</CODE><BR /><I><a href="#taint-v1-core">Taint</a> array</I></TD><TD>If specified, the node&#39;s taints.</TD></TR>
+<TR><TD><CODE>unschedulable</CODE><BR /><I>boolean</I></TD><TD>Unschedulable controls node schedulability of new pods. By default, node is schedulable. More info: https://kubernetes.io/docs/concepts/nodes/node/#manual-node-administration</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="nodestatus-v1-core">NodeStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#node-v1-core">Node [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>addresses</CODE><BR /><I><a href="#nodeaddress-v1-core">NodeAddress</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>List of addresses reachable to the node. Queried from cloud provider, if available. More info: https://kubernetes.io/docs/concepts/nodes/node/#addresses Note: This field is declared as mergeable, but the merge key is not sufficiently unique, which can cause data corruption when it is merged. Callers should instead use a full-replacement patch. See http://pr.k8s.io/79391 for an example.</TD></TR>
+<TR><TD><CODE>allocatable</CODE><BR /><I>object</I></TD><TD>Allocatable represents the resources of a node that are available for scheduling. Defaults to Capacity.</TD></TR>
+<TR><TD><CODE>capacity</CODE><BR /><I>object</I></TD><TD>Capacity represents the total resources of a node. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacity</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#nodecondition-v1-core">NodeCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Conditions is an array of current observed node conditions. More info: https://kubernetes.io/docs/concepts/nodes/node/#condition</TD></TR>
+<TR><TD><CODE>config</CODE><BR /><I><a href="#nodeconfigstatus-v1-core">NodeConfigStatus</a></I></TD><TD>Status of the config assigned to the node via the dynamic Kubelet config feature.</TD></TR>
+<TR><TD><CODE>daemonEndpoints</CODE><BR /><I><a href="#nodedaemonendpoints-v1-core">NodeDaemonEndpoints</a></I></TD><TD>Endpoints of daemons running on the Node.</TD></TR>
+<TR><TD><CODE>images</CODE><BR /><I><a href="#containerimage-v1-core">ContainerImage</a> array</I></TD><TD>List of container images on this node</TD></TR>
+<TR><TD><CODE>nodeInfo</CODE><BR /><I><a href="#nodesysteminfo-v1-core">NodeSystemInfo</a></I></TD><TD>Set of ids/uuids to uniquely identify the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#info</TD></TR>
+<TR><TD><CODE>phase</CODE><BR /><I>string</I></TD><TD>NodePhase is the recently observed lifecycle phase of the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#phase The field is never populated, and now is deprecated.</TD></TR>
+<TR><TD><CODE>volumesAttached</CODE><BR /><I><a href="#attachedvolume-v1-core">AttachedVolume</a> array</I></TD><TD>List of volumes that are attached to the node.</TD></TR>
+<TR><TD><CODE>volumesInUse</CODE><BR /><I>string array</I></TD><TD>List of attachable volumes in use (mounted) by the node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="nodelist-v1-core">NodeList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#node-v1-core">Node</a> array</I></TD><TD>List of nodes</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-node-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-node-v1-core">Create</H2>
+<P>create a Node</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/nodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#node-v1-core">Node</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-node-v1-core">Patch</H2>
+<P>partially update the specified Node</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/nodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-node-v1-core">Replace</H2>
+<P>replace the specified Node</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/nodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#node-v1-core">Node</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-node-v1-core">Delete</H2>
+<P>delete a Node</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/nodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-node-v1-core">Delete Collection</H2>
+<P>delete collection of Node</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/nodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-node-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-node-v1-core">Read</H2>
+<P>read the specified Node</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/nodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-node-v1-core">List</H2>
+<P>list or watch objects of kind Node</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/nodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#nodelist-v1-core">NodeList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-node-v1-core">Watch</H2>
+<P>watch changes to an object of kind Node. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/nodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-node-v1-core">Watch List</H2>
+<P>watch individual changes to a list of Node. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/nodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-node-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-node-v1-core">Patch Status</H2>
+<P>partially update status of the specified Node</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/nodes/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-node-v1-core">Read Status</H2>
+<P>read status of the specified Node</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/nodes/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-node-v1-core">Replace Status</H2>
+<P>replace status of the specified Node</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/nodes/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Node</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#node-v1-core">Node</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#node-v1-core">Node</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-proxy-operations-node-v1-core-strong-"><STRONG>Proxy Operations</STRONG></H2>
+<H2 id="create-connect-proxy-node-v1-core">Create Connect Proxy</H2>
+<P>connect POST requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/nodes/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="create-connect-proxy-path-node-v1-core">Create Connect Proxy Path</H2>
+<P>connect POST requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/nodes/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-connect-proxy-node-v1-core">Delete Connect Proxy</H2>
+<P>connect DELETE requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/nodes/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-connect-proxy-path-node-v1-core">Delete Connect Proxy Path</H2>
+<P>connect DELETE requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/nodes/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="get-connect-proxy-node-v1-core">Get Connect Proxy</H2>
+<P>connect GET requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/nodes/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="get-connect-proxy-path-node-v1-core">Get Connect Proxy Path</H2>
+<P>connect GET requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/nodes/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="head-connect-proxy-node-v1-core">Head Connect Proxy</H2>
+<P>connect HEAD requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>HEAD /api/v1/nodes/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="head-connect-proxy-path-node-v1-core">Head Connect Proxy Path</H2>
+<P>connect HEAD requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>HEAD /api/v1/nodes/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-connect-proxy-node-v1-core">Replace Connect Proxy</H2>
+<P>connect PUT requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/nodes/{name}/proxy</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-connect-proxy-path-node-v1-core">Replace Connect Proxy Path</H2>
+<P>connect PUT requests to proxy of Node</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/nodes/{name}/proxy/{path}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NodeProxyOptions</TD></TR>
+<TR><TD><CODE>path</CODE></TD><TD>path to the resource</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE></TD><TD>Path is the URL path to use for the current proxy request to node.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I>string</I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="persistentvolume-v1-core">PersistentVolume v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PersistentVolume</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-bullhorn"></I> These are assigned to <a href="#pod-v1-core">Pods</a> using <a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaims</a>.</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumelist-v1-core">PersistentVolumeList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec</a></I></TD><TD>Spec defines a specification of a persistent volume owned by the cluster. Provisioned by an administrator. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#persistentvolumestatus-v1-core">PersistentVolumeStatus</a></I></TD><TD>Status represents the current information/status for the persistent volume. Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="persistentvolumespec-v1-core">PersistentVolumeSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolume-v1-core">PersistentVolume [core/v1]</a></LI>
+  <LI><a href="#volumeattachmentsource-v1-storage-k8s-io">VolumeAttachmentSource [storage/v1]</a></LI>
+  <LI><a href="#volumeattachmentsource-v1beta1-storage-k8s-io">VolumeAttachmentSource [storage/v1beta1]</a></LI>
+  <LI><a href="#volumeattachmentsource-v1alpha1-storage-k8s-io">VolumeAttachmentSource [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>accessModes</CODE><BR /><I>string array</I></TD><TD>AccessModes contains all ways the volume can be mounted. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes</TD></TR>
+<TR><TD><CODE>awsElasticBlockStore</CODE><BR /><I><a href="#awselasticblockstorevolumesource-v1-core">AWSElasticBlockStoreVolumeSource</a></I></TD><TD>AWSElasticBlockStore represents an AWS Disk resource that is attached to a kubelet&#39;s host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore</TD></TR>
+<TR><TD><CODE>azureDisk</CODE><BR /><I><a href="#azurediskvolumesource-v1-core">AzureDiskVolumeSource</a></I></TD><TD>AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.</TD></TR>
+<TR><TD><CODE>azureFile</CODE><BR /><I><a href="#azurefilepersistentvolumesource-v1-core">AzureFilePersistentVolumeSource</a></I></TD><TD>AzureFile represents an Azure File Service mount on the host and bind mount to the pod.</TD></TR>
+<TR><TD><CODE>capacity</CODE><BR /><I>object</I></TD><TD>A description of the persistent volume&#39;s resources and capacity. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacity</TD></TR>
+<TR><TD><CODE>cephfs</CODE><BR /><I><a href="#cephfspersistentvolumesource-v1-core">CephFSPersistentVolumeSource</a></I></TD><TD>CephFS represents a Ceph FS mount on the host that shares a pod&#39;s lifetime</TD></TR>
+<TR><TD><CODE>cinder</CODE><BR /><I><a href="#cinderpersistentvolumesource-v1-core">CinderPersistentVolumeSource</a></I></TD><TD>Cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+<TR><TD><CODE>claimRef</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>ClaimRef is part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. claim.VolumeName is the authoritative bind between PV and PVC. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding</TD></TR>
+<TR><TD><CODE>csi</CODE><BR /><I><a href="#csipersistentvolumesource-v1-core">CSIPersistentVolumeSource</a></I></TD><TD>CSI represents storage that is handled by an external CSI driver (Beta feature).</TD></TR>
+<TR><TD><CODE>fc</CODE><BR /><I><a href="#fcvolumesource-v1-core">FCVolumeSource</a></I></TD><TD>FC represents a Fibre Channel resource that is attached to a kubelet&#39;s host machine and then exposed to the pod.</TD></TR>
+<TR><TD><CODE>flexVolume</CODE><BR /><I><a href="#flexpersistentvolumesource-v1-core">FlexPersistentVolumeSource</a></I></TD><TD>FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.</TD></TR>
+<TR><TD><CODE>flocker</CODE><BR /><I><a href="#flockervolumesource-v1-core">FlockerVolumeSource</a></I></TD><TD>Flocker represents a Flocker volume attached to a kubelet&#39;s host machine and exposed to the pod for its usage. This depends on the Flocker control service being running</TD></TR>
+<TR><TD><CODE>gcePersistentDisk</CODE><BR /><I><a href="#gcepersistentdiskvolumesource-v1-core">GCEPersistentDiskVolumeSource</a></I></TD><TD>GCEPersistentDisk represents a GCE Disk resource that is attached to a kubelet&#39;s host machine and then exposed to the pod. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk</TD></TR>
+<TR><TD><CODE>glusterfs</CODE><BR /><I><a href="#glusterfspersistentvolumesource-v1-core">GlusterfsPersistentVolumeSource</a></I></TD><TD>Glusterfs represents a Glusterfs volume that is attached to a host and exposed to the pod. Provisioned by an admin. More info: https://examples.k8s.io/volumes/glusterfs/README.md</TD></TR>
+<TR><TD><CODE>hostPath</CODE><BR /><I><a href="#hostpathvolumesource-v1-core">HostPathVolumeSource</a></I></TD><TD>HostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath</TD></TR>
+<TR><TD><CODE>iscsi</CODE><BR /><I><a href="#iscsipersistentvolumesource-v1-core">ISCSIPersistentVolumeSource</a></I></TD><TD>ISCSI represents an ISCSI Disk resource that is attached to a kubelet&#39;s host machine and then exposed to the pod. Provisioned by an admin.</TD></TR>
+<TR><TD><CODE>local</CODE><BR /><I><a href="#localvolumesource-v1-core">LocalVolumeSource</a></I></TD><TD>Local represents directly-attached storage with node affinity</TD></TR>
+<TR><TD><CODE>mountOptions</CODE><BR /><I>string array</I></TD><TD>A list of mount options, e.g. [&#34;ro&#34;, &#34;soft&#34;]. Not validated - mount will simply fail if one is invalid. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options</TD></TR>
+<TR><TD><CODE>nfs</CODE><BR /><I><a href="#nfsvolumesource-v1-core">NFSVolumeSource</a></I></TD><TD>NFS represents an NFS mount on the host. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs</TD></TR>
+<TR><TD><CODE>nodeAffinity</CODE><BR /><I><a href="#volumenodeaffinity-v1-core">VolumeNodeAffinity</a></I></TD><TD>NodeAffinity defines constraints that limit what nodes this volume can be accessed from. This field influences the scheduling of pods that use this volume.</TD></TR>
+<TR><TD><CODE>persistentVolumeReclaimPolicy</CODE><BR /><I>string</I></TD><TD>What happens to a persistent volume when released from its claim. Valid options are Retain (default for manually created PersistentVolumes), Delete (default for dynamically provisioned PersistentVolumes), and Recycle (deprecated). Recycle must be supported by the volume plugin underlying this PersistentVolume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming</TD></TR>
+<TR><TD><CODE>photonPersistentDisk</CODE><BR /><I><a href="#photonpersistentdiskvolumesource-v1-core">PhotonPersistentDiskVolumeSource</a></I></TD><TD>PhotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine</TD></TR>
+<TR><TD><CODE>portworxVolume</CODE><BR /><I><a href="#portworxvolumesource-v1-core">PortworxVolumeSource</a></I></TD><TD>PortworxVolume represents a portworx volume attached and mounted on kubelets host machine</TD></TR>
+<TR><TD><CODE>quobyte</CODE><BR /><I><a href="#quobytevolumesource-v1-core">QuobyteVolumeSource</a></I></TD><TD>Quobyte represents a Quobyte mount on the host that shares a pod&#39;s lifetime</TD></TR>
+<TR><TD><CODE>rbd</CODE><BR /><I><a href="#rbdpersistentvolumesource-v1-core">RBDPersistentVolumeSource</a></I></TD><TD>RBD represents a Rados Block Device mount on the host that shares a pod&#39;s lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md</TD></TR>
+<TR><TD><CODE>scaleIO</CODE><BR /><I><a href="#scaleiopersistentvolumesource-v1-core">ScaleIOPersistentVolumeSource</a></I></TD><TD>ScaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.</TD></TR>
+<TR><TD><CODE>storageClassName</CODE><BR /><I>string</I></TD><TD>Name of StorageClass to which this persistent volume belongs. Empty value means that this volume does not belong to any StorageClass.</TD></TR>
+<TR><TD><CODE>storageos</CODE><BR /><I><a href="#storageospersistentvolumesource-v1-core">StorageOSPersistentVolumeSource</a></I></TD><TD>StorageOS represents a StorageOS volume that is attached to the kubelet&#39;s host machine and mounted into the pod More info: https://examples.k8s.io/volumes/storageos/README.md</TD></TR>
+<TR><TD><CODE>volumeMode</CODE><BR /><I>string</I></TD><TD>volumeMode defines if a volume is intended to be used with a formatted filesystem or to remain in raw block state. Value of Filesystem is implied when not included in spec.</TD></TR>
+<TR><TD><CODE>vsphereVolume</CODE><BR /><I><a href="#vspherevirtualdiskvolumesource-v1-core">VsphereVirtualDiskVolumeSource</a></I></TD><TD>VsphereVolume represents a vSphere volume attached and mounted on kubelets host machine</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="persistentvolumestatus-v1-core">PersistentVolumeStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolume-v1-core">PersistentVolume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human-readable message indicating details about why the volume is in this state.</TD></TR>
+<TR><TD><CODE>phase</CODE><BR /><I>string</I></TD><TD>Phase indicates if a volume is available, bound to a claim, or released by a claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#phase</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>Reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="persistentvolumelist-v1-core">PersistentVolumeList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#persistentvolume-v1-core">PersistentVolume</a> array</I></TD><TD>List of persistent volumes. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-persistentvolume-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-persistentvolume-v1-core">Create</H2>
+<P>create a PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/persistentvolumes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-persistentvolume-v1-core">Patch</H2>
+<P>partially update the specified PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/persistentvolumes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-persistentvolume-v1-core">Replace</H2>
+<P>replace the specified PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/persistentvolumes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-persistentvolume-v1-core">Delete</H2>
+<P>delete a PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/persistentvolumes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-persistentvolume-v1-core">Delete Collection</H2>
+<P>delete collection of PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/persistentvolumes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-persistentvolume-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-persistentvolume-v1-core">Read</H2>
+<P>read the specified PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/persistentvolumes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-persistentvolume-v1-core">List</H2>
+<P>list or watch objects of kind PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/persistentvolumes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolumelist-v1-core">PersistentVolumeList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-persistentvolume-v1-core">Watch</H2>
+<P>watch changes to an object of kind PersistentVolume. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/persistentvolumes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-persistentvolume-v1-core">Watch List</H2>
+<P>watch individual changes to a list of PersistentVolume. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/persistentvolumes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-persistentvolume-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-persistentvolume-v1-core">Patch Status</H2>
+<P>partially update status of the specified PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/persistentvolumes/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-persistentvolume-v1-core">Read Status</H2>
+<P>read status of the specified PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/persistentvolumes/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-persistentvolume-v1-core">Replace Status</H2>
+<P>replace status of the specified PersistentVolume</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/persistentvolumes/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PersistentVolume</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#persistentvolume-v1-core">PersistentVolume</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration v1beta1 flowcontrol.apiserver.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PriorityLevelConfiguration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#prioritylevelconfigurationlist-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationList [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>`metadata` is the standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#prioritylevelconfigurationspec-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationSpec</a></I></TD><TD>`spec` is the specification of the desired behavior of a &#34;request-priority&#34;. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#prioritylevelconfigurationstatus-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationStatus</a></I></TD><TD>`status` is the current status of a &#34;request-priority&#34;. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="prioritylevelconfigurationspec-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationSpec v1beta1 flowcontrol</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>limited</CODE><BR /><I><a href="#limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">LimitedPriorityLevelConfiguration</a></I></TD><TD>`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `&#34;Limited&#34;`.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>`type` indicates whether this priority level is subject to limitation on request execution.  A value of `&#34;Exempt&#34;` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels.  A value of `&#34;Limited&#34;` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server&#39;s limited capacity is made available exclusively to this priority level. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="prioritylevelconfigurationstatus-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationStatus v1beta1 flowcontrol</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationCondition</a> array</I></TD><TD>`conditions` is the current state of &#34;request-priority&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="prioritylevelconfigurationlist-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationList v1beta1 flowcontrol</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a> array</I></TD><TD>`items` is a list of request-priorities.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>`metadata` is the standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Create</H2>
+<P>create a PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Patch</H2>
+<P>partially update the specified PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Replace</H2>
+<P>replace the specified PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Delete</H2>
+<P>delete a PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Delete Collection</H2>
+<P>delete collection of PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Read</H2>
+<P>read the specified PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">List</H2>
+<P>list or watch objects of kind PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfigurationlist-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Watch</H2>
+<P>watch changes to an object of kind PriorityLevelConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/prioritylevelconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of PriorityLevelConfiguration. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/prioritylevelconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Patch Status</H2>
+<P>partially update status of the specified PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Read Status</H2>
+<P>read status of the specified PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">Replace Status</H2>
+<P>replace status of the specified PriorityLevelConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityLevelConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="resourcequota-v1-core">ResourceQuota v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ResourceQuota</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#resourcequotalist-v1-core">ResourceQuotaList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#resourcequotaspec-v1-core">ResourceQuotaSpec</a></I></TD><TD>Spec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#resourcequotastatus-v1-core">ResourceQuotaStatus</a></I></TD><TD>Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="resourcequotaspec-v1-core">ResourceQuotaSpec v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#resourcequota-v1-core">ResourceQuota [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hard</CODE><BR /><I>object</I></TD><TD>hard is the set of desired hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/</TD></TR>
+<TR><TD><CODE>scopeSelector</CODE><BR /><I><a href="#scopeselector-v1-core">ScopeSelector</a></I></TD><TD>scopeSelector is also a collection of filters like scopes that must match each object tracked by a quota but expressed using ScopeSelectorOperator in combination with possible values. For a resource to match, both scopes AND scopeSelector (if specified in spec), must be matched.</TD></TR>
+<TR><TD><CODE>scopes</CODE><BR /><I>string array</I></TD><TD>A collection of filters that must match each object tracked by a quota. If not specified, the quota matches all objects.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="resourcequotastatus-v1-core">ResourceQuotaStatus v1 core</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#resourcequota-v1-core">ResourceQuota [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hard</CODE><BR /><I>object</I></TD><TD>Hard is the set of enforced hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/</TD></TR>
+<TR><TD><CODE>used</CODE><BR /><I>object</I></TD><TD>Used is the current observed total usage of the resource in the namespace.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="resourcequotalist-v1-core">ResourceQuotaList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#resourcequota-v1-core">ResourceQuota</a> array</I></TD><TD>Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-resourcequota-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-resourcequota-v1-core">Create</H2>
+<P>create a ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/resourcequotas</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-resourcequota-v1-core">Patch</H2>
+<P>partially update the specified ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-resourcequota-v1-core">Replace</H2>
+<P>replace the specified ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-resourcequota-v1-core">Delete</H2>
+<P>delete a ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/resourcequotas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-resourcequota-v1-core">Delete Collection</H2>
+<P>delete collection of ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/resourcequotas</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-resourcequota-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-resourcequota-v1-core">Read</H2>
+<P>read the specified ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/resourcequotas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-resourcequota-v1-core">List</H2>
+<P>list or watch objects of kind ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/resourcequotas</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequotalist-v1-core">ResourceQuotaList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-resourcequota-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/resourcequotas</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequotalist-v1-core">ResourceQuotaList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-resourcequota-v1-core">Watch</H2>
+<P>watch changes to an object of kind ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/resourcequotas/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-resourcequota-v1-core">Watch List</H2>
+<P>watch individual changes to a list of ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/resourcequotas</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-resourcequota-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/resourcequotas</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-resourcequota-v1-core-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-resourcequota-v1-core">Patch Status</H2>
+<P>partially update status of the specified ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-resourcequota-v1-core">Read Status</H2>
+<P>read status of the specified ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/resourcequotas/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-resourcequota-v1-core">Replace Status</H2>
+<P>replace status of the specified ResourceQuota</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ResourceQuota</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#resourcequota-v1-core">ResourceQuota</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="role-v1-rbac-authorization-k8s-io">Role v1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Role</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#role-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#role-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#rolelist-v1-rbac-authorization-k8s-io">RoleList [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#policyrule-v1-rbac-authorization-k8s-io">PolicyRule</a> array</I></TD><TD>Rules holds all the PolicyRules for this Role</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rolelist-v1-rbac-authorization-k8s-io">RoleList v1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a> array</I></TD><TD>Items is a list of Roles</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-role-v1-rbac-authorization-k8s-io">Create</H2>
+<P>create a Role</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-role-v1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-role-v1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-role-v1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a Role</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-role-v1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of Role</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-role-v1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-role-v1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolelist-v1-rbac-authorization-k8s-io">RoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-role-v1-rbac-authorization-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/roles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolelist-v1-rbac-authorization-k8s-io">RoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-role-v1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-role-v1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/roles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="rolebinding-v1-rbac-authorization-k8s-io">RoleBinding v1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>RoleBinding</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#rolebindinglist-v1-rbac-authorization-k8s-io">RoleBindingList [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>roleRef</CODE><BR /><I><a href="#roleref-v1-rbac-authorization-k8s-io">RoleRef</a></I></TD><TD>RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</TD></TR>
+<TR><TD><CODE>subjects</CODE><BR /><I><a href="#subject-v1-rbac-authorization-k8s-io">Subject</a> array</I></TD><TD>Subjects holds references to the objects the role applies to.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rolebindinglist-v1-rbac-authorization-k8s-io">RoleBindingList v1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a> array</I></TD><TD>Items is a list of RoleBindings</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-rolebinding-v1-rbac-authorization-k8s-io">Create</H2>
+<P>create a RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-rolebinding-v1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-rolebinding-v1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-rolebinding-v1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-rolebinding-v1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-rolebinding-v1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-rolebinding-v1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebindinglist-v1-rbac-authorization-k8s-io">RoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/rolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebindinglist-v1-rbac-authorization-k8s-io">RoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-rolebinding-v1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind RoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-rolebinding-v1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1/watch/rolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="runtimeclass-v1-node-k8s-io">RuntimeClass v1 node.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>RuntimeClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#runtimeclass-v1beta1-node-k8s-io">v1beta1</a>
+<a href="#runtimeclass-v1alpha1-node-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclasslist-v1-node-k8s-io">RuntimeClassList [node/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>handler</CODE><BR /><I>string</I></TD><TD>Handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node &amp; CRI configuration.  It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called &#34;runc&#34; might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>overhead</CODE><BR /><I><a href="#overhead-v1-node-k8s-io">Overhead</a></I></TD><TD>Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see  https://kubernetes.io/docs/concepts/scheduling-eviction/pod-overhead/ This field is in beta starting v1.18 and is only honored by servers that enable the PodOverhead feature.</TD></TR>
+<TR><TD><CODE>scheduling</CODE><BR /><I><a href="#scheduling-v1-node-k8s-io">Scheduling</a></I></TD><TD>Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="runtimeclasslist-v1-node-k8s-io">RuntimeClassList v1 node</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a> array</I></TD><TD>Items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-runtimeclass-v1-node-k8s-io">Create</H2>
+<P>create a RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/node.k8s.io/v1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-runtimeclass-v1-node-k8s-io">Patch</H2>
+<P>partially update the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/node.k8s.io/v1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-runtimeclass-v1-node-k8s-io">Replace</H2>
+<P>replace the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/node.k8s.io/v1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-runtimeclass-v1-node-k8s-io">Delete</H2>
+<P>delete a RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/node.k8s.io/v1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-runtimeclass-v1-node-k8s-io">Delete Collection</H2>
+<P>delete collection of RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/node.k8s.io/v1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-runtimeclass-v1-node-k8s-io">Read</H2>
+<P>read the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-runtimeclass-v1-node-k8s-io">List</H2>
+<P>list or watch objects of kind RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclasslist-v1-node-k8s-io">RuntimeClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-runtimeclass-v1-node-k8s-io">Watch</H2>
+<P>watch changes to an object of kind RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1/watch/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-runtimeclass-v1-node-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1/watch/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview v1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SelfSubjectAccessReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#selfsubjectaccessreviewspec-v1-authorization-k8s-io">SelfSubjectAccessReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated.  user and groups must be empty</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectaccessreviewstatus-v1-authorization-k8s-io">SubjectAccessReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request is allowed or not</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="selfsubjectaccessreviewspec-v1-authorization-k8s-io">SelfSubjectAccessReviewSpec v1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nonResourceAttributes</CODE><BR /><I><a href="#nonresourceattributes-v1-authorization-k8s-io">NonResourceAttributes</a></I></TD><TD>NonResourceAttributes describes information for a non-resource access request</TD></TR>
+<TR><TD><CODE>resourceAttributes</CODE><BR /><I><a href="#resourceattributes-v1-authorization-k8s-io">ResourceAttributes</a></I></TD><TD>ResourceAuthorizationAttributes describes information for a resource access request</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-selfsubjectaccessreview-v1-authorization-k8s-io">Create</H2>
+<P>create a SelfSubjectAccessReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1/selfsubjectaccessreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview v1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SelfSubjectRulesReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#selfsubjectrulesreviewspec-v1-authorization-k8s-io">SelfSubjectRulesReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectrulesreviewstatus-v1-authorization-k8s-io">SubjectRulesReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates the set of actions a user can perform.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="selfsubjectrulesreviewspec-v1-authorization-k8s-io">SelfSubjectRulesReviewSpec v1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace to evaluate rules for. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-selfsubjectrulesreview-v1-authorization-k8s-io">Create</H2>
+<P>create a SelfSubjectRulesReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="serviceaccount-v1-core">ServiceAccount v1 core</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServiceAccount</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#serviceaccountlist-v1-core">ServiceAccountList [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>automountServiceAccountToken</CODE><BR /><I>boolean</I></TD><TD>AutomountServiceAccountToken indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level.</TD></TR>
+<TR><TD><CODE>imagePullSecrets</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a> array</I></TD><TD>ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>secrets</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>Secrets is the list of secrets allowed to be used by pods running using this ServiceAccount. More info: https://kubernetes.io/docs/concepts/configuration/secret</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="serviceaccountlist-v1-core">ServiceAccountList v1 core</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#serviceaccount-v1-core">ServiceAccount</a> array</I></TD><TD>List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-serviceaccount-v1-core-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-serviceaccount-v1-core">Create</H2>
+<P>create a ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>POST /api/v1/namespaces/{namespace}/serviceaccounts</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-serviceaccount-v1-core">Patch</H2>
+<P>partially update the specified ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/serviceaccounts/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceAccount</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-serviceaccount-v1-core">Replace</H2>
+<P>replace the specified ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/serviceaccounts/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceAccount</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-serviceaccount-v1-core">Delete</H2>
+<P>delete a ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/serviceaccounts/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceAccount</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-serviceaccount-v1-core">Delete Collection</H2>
+<P>delete collection of ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /api/v1/namespaces/{namespace}/serviceaccounts</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-serviceaccount-v1-core-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-serviceaccount-v1-core">Read</H2>
+<P>read the specified ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/serviceaccounts/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceAccount</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#serviceaccount-v1-core">ServiceAccount</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-serviceaccount-v1-core">List</H2>
+<P>list or watch objects of kind ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/serviceaccounts</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#serviceaccountlist-v1-core">ServiceAccountList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-serviceaccount-v1-core">List All Namespaces</H2>
+<P>list or watch objects of kind ServiceAccount</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/serviceaccounts</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#serviceaccountlist-v1-core">ServiceAccountList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-serviceaccount-v1-core">Watch</H2>
+<P>watch changes to an object of kind ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/serviceaccounts/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ServiceAccount</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-serviceaccount-v1-core">Watch List</H2>
+<P>watch individual changes to a list of ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/namespaces/{namespace}/serviceaccounts</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-serviceaccount-v1-core">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/watch/serviceaccounts</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion v1alpha1 internal.apiserver.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>internal.apiserver.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>StorageVersion</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageversionlist-v1alpha1-internal-apiserver-k8s-io">StorageVersionList [apiserverinternal/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>The name is &lt;group&gt;.&lt;resource&gt;.</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#storageversionspec-v1alpha1-internal-apiserver-k8s-io">StorageVersionSpec</a></I></TD><TD>Spec is an empty spec. It is here to comply with Kubernetes API style.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#storageversionstatus-v1alpha1-internal-apiserver-k8s-io">StorageVersionStatus</a></I></TD><TD>API server instances report the version they can decode and the version they encode objects to when persisting objects in the backend.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="storageversionspec-v1alpha1-internal-apiserver-k8s-io">StorageVersionSpec v1alpha1 apiserverinternal</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion [apiserverinternal/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H3 id="storageversionstatus-v1alpha1-internal-apiserver-k8s-io">StorageVersionStatus v1alpha1 apiserverinternal</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion [apiserverinternal/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>commonEncodingVersion</CODE><BR /><I>string</I></TD><TD>If all API server instances agree on the same encoding storage version, then this field is set to that version. Otherwise this field is left empty. API servers should finish updating its storageVersionStatus entry before serving write operations, so that this field will be in sync with the reality.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#storageversioncondition-v1alpha1-internal-apiserver-k8s-io">StorageVersionCondition</a> array</I></TD><TD>The latest available observations of the storageVersion&#39;s state.</TD></TR>
+<TR><TD><CODE>storageVersions</CODE><BR /><I><a href="#serverstorageversion-v1alpha1-internal-apiserver-k8s-io">ServerStorageVersion</a> array</I></TD><TD>The reported versions per API server instance.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="storageversionlist-v1alpha1-internal-apiserver-k8s-io">StorageVersionList v1alpha1 apiserverinternal</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-storageversion-v1alpha1-internal-apiserver-k8s-io">Create</H2>
+<P>create a StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/internal.apiserver.k8s.io/v1alpha1/storageversions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-storageversion-v1alpha1-internal-apiserver-k8s-io">Patch</H2>
+<P>partially update the specified StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-storageversion-v1alpha1-internal-apiserver-k8s-io">Replace</H2>
+<P>replace the specified StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-storageversion-v1alpha1-internal-apiserver-k8s-io">Delete</H2>
+<P>delete a StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io">Delete Collection</H2>
+<P>delete collection of StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/internal.apiserver.k8s.io/v1alpha1/storageversions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-storageversion-v1alpha1-internal-apiserver-k8s-io">Read</H2>
+<P>read the specified StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-storageversion-v1alpha1-internal-apiserver-k8s-io">List</H2>
+<P>list or watch objects of kind StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/internal.apiserver.k8s.io/v1alpha1/storageversions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversionlist-v1alpha1-internal-apiserver-k8s-io">StorageVersionList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-storageversion-v1alpha1-internal-apiserver-k8s-io">Watch</H2>
+<P>watch changes to an object of kind StorageVersion. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of StorageVersion. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io">Patch Status</H2>
+<P>partially update status of the specified StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-storageversion-v1alpha1-internal-apiserver-k8s-io">Read Status</H2>
+<P>read status of the specified StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io">Replace Status</H2>
+<P>replace status of the specified StorageVersion</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageVersion</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview v1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SubjectAccessReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subjectaccessreview-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#subjectaccessreviewspec-v1-authorization-k8s-io">SubjectAccessReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectaccessreviewstatus-v1-authorization-k8s-io">SubjectAccessReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request is allowed or not</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="subjectaccessreviewspec-v1-authorization-k8s-io">SubjectAccessReviewSpec v1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview [authorization/v1]</a></LI>
+  <LI><a href="#subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extra</CODE><BR /><I>object</I></TD><TD>Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.</TD></TR>
+<TR><TD><CODE>groups</CODE><BR /><I>string array</I></TD><TD>Groups is the groups you&#39;re testing for.</TD></TR>
+<TR><TD><CODE>nonResourceAttributes</CODE><BR /><I><a href="#nonresourceattributes-v1-authorization-k8s-io">NonResourceAttributes</a></I></TD><TD>NonResourceAttributes describes information for a non-resource access request</TD></TR>
+<TR><TD><CODE>resourceAttributes</CODE><BR /><I><a href="#resourceattributes-v1-authorization-k8s-io">ResourceAttributes</a></I></TD><TD>ResourceAuthorizationAttributes describes information for a resource access request</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID information about the requesting user.</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>User is the user you&#39;re testing for. If you specify &#34;User&#34; but not &#34;Groups&#34;, then is it interpreted as &#34;What if User were not a member of any groups</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="subjectaccessreviewstatus-v1-authorization-k8s-io">SubjectAccessReviewStatus v1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview [authorization/v1]</a></LI>
+  <LI><a href="#selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview [authorization/v1]</a></LI>
+  <LI><a href="#subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowed</CODE><BR /><I>boolean</I></TD><TD>Allowed is required. True if the action would be allowed, false otherwise.</TD></TR>
+<TR><TD><CODE>denied</CODE><BR /><I>boolean</I></TD><TD>Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.</TD></TR>
+<TR><TD><CODE>evaluationError</CODE><BR /><I>string</I></TD><TD>EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>Reason is optional.  It indicates why a request was allowed or denied.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-subjectaccessreview-v1-authorization-k8s-io">Create</H2>
+<P>create a SubjectAccessReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1/subjectaccessreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="tokenrequest-v1-authentication-k8s-io">TokenRequest v1 authentication.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authentication.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TokenRequest</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#tokenrequest-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#tokenrequestspec-v1-authentication-k8s-io">TokenRequestSpec</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#tokenrequeststatus-v1-authentication-k8s-io">TokenRequestStatus</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="tokenrequestspec-v1-authentication-k8s-io">TokenRequestSpec v1 authentication</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenrequest-v1-authentication-k8s-io">TokenRequest [authentication/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audiences</CODE><BR /><I>string array</I></TD><TD>Audiences are the intendend audiences of the token. A recipient of a token must identitfy themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.</TD></TR>
+<TR><TD><CODE>boundObjectRef</CODE><BR /><I><a href="#boundobjectreference-v1-authentication-k8s-io">BoundObjectReference</a></I></TD><TD>BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server&#39;s TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.</TD></TR>
+<TR><TD><CODE>expirationSeconds</CODE><BR /><I>integer</I></TD><TD>ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the &#39;expiration&#39; field in a response.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="tokenrequeststatus-v1-authentication-k8s-io">TokenRequestStatus v1 authentication</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenrequest-v1-authentication-k8s-io">TokenRequest [authentication/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>expirationTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>ExpirationTimestamp is the time of expiration of the returned token.</TD></TR>
+<TR><TD><CODE>token</CODE><BR /><I>string</I></TD><TD>Token is the opaque bearer token.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="tokenreview-v1-authentication-k8s-io">TokenReview v1 authentication.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authentication.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TokenReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#tokenreview-v1beta1-authentication-k8s-io">v1beta1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#tokenreviewspec-v1-authentication-k8s-io">TokenReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#tokenreviewstatus-v1-authentication-k8s-io">TokenReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request can be authenticated.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="tokenreviewspec-v1-authentication-k8s-io">TokenReviewSpec v1 authentication</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenreview-v1-authentication-k8s-io">TokenReview [authentication/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audiences</CODE><BR /><I>string array</I></TD><TD>Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.</TD></TR>
+<TR><TD><CODE>token</CODE><BR /><I>string</I></TD><TD>Token is the opaque bearer token.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="tokenreviewstatus-v1-authentication-k8s-io">TokenReviewStatus v1 authentication</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenreview-v1-authentication-k8s-io">TokenReview [authentication/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audiences</CODE><BR /><I>string array</I></TD><TD>Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token&#39;s audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is &#34;true&#34;, the token is valid against the audience of the Kubernetes API server.</TD></TR>
+<TR><TD><CODE>authenticated</CODE><BR /><I>boolean</I></TD><TD>Authenticated indicates that the token was associated with a known user.</TD></TR>
+<TR><TD><CODE>error</CODE><BR /><I>string</I></TD><TD>Error indicates that the token couldn&#39;t be checked</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I><a href="#userinfo-v1-authentication-k8s-io">UserInfo</a></I></TD><TD>User is the UserInfo associated with the provided token.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-tokenreview-v1-authentication-k8s-io">Create</H2>
+<P>create a TokenReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authentication.k8s.io/v1/tokenreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#tokenreview-v1-authentication-k8s-io">TokenReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#tokenreview-v1-authentication-k8s-io">TokenReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#tokenreview-v1-authentication-k8s-io">TokenReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#tokenreview-v1-authentication-k8s-io">TokenReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="networkpolicy-v1-networking-k8s-io">NetworkPolicy v1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NetworkPolicy</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#networkpolicylist-v1-networking-k8s-io">NetworkPolicyList [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#networkpolicyspec-v1-networking-k8s-io">NetworkPolicySpec</a></I></TD><TD>Specification of the desired behavior for this NetworkPolicy.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="networkpolicyspec-v1-networking-k8s-io">NetworkPolicySpec v1 networking</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>egress</CODE><BR /><I><a href="#networkpolicyegressrule-v1-networking-k8s-io">NetworkPolicyEgressRule</a> array</I></TD><TD>List of egress rules to be applied to the selected pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic matches at least one egress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy limits all outgoing traffic (and serves solely to ensure that the pods it selects are isolated by default). This field is beta-level in 1.8</TD></TR>
+<TR><TD><CODE>ingress</CODE><BR /><I><a href="#networkpolicyingressrule-v1-networking-k8s-io">NetworkPolicyIngressRule</a> array</I></TD><TD>List of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod&#39;s local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)</TD></TR>
+<TR><TD><CODE>podSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>Selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace.</TD></TR>
+<TR><TD><CODE>policyTypes</CODE><BR /><I>string array</I></TD><TD>List of rule types that the NetworkPolicy relates to. Valid options are [&#34;Ingress&#34;], [&#34;Egress&#34;], or [&#34;Ingress&#34;, &#34;Egress&#34;]. If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ &#34;Egress&#34; ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include &#34;Egress&#34; (since such a policy would not include an Egress section and would otherwise default to just [ &#34;Ingress&#34; ]). This field is beta-level in 1.8</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="networkpolicylist-v1-networking-k8s-io">NetworkPolicyList v1 networking</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a> array</I></TD><TD>Items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-networkpolicy-v1-networking-k8s-io">Create</H2>
+<P>create a NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-networkpolicy-v1-networking-k8s-io">Patch</H2>
+<P>partially update the specified NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NetworkPolicy</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-networkpolicy-v1-networking-k8s-io">Replace</H2>
+<P>replace the specified NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NetworkPolicy</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-networkpolicy-v1-networking-k8s-io">Delete</H2>
+<P>delete a NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NetworkPolicy</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-networkpolicy-v1-networking-k8s-io">Delete Collection</H2>
+<P>delete collection of NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-networkpolicy-v1-networking-k8s-io">Read</H2>
+<P>read the specified NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NetworkPolicy</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-networkpolicy-v1-networking-k8s-io">List</H2>
+<P>list or watch objects of kind NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#networkpolicylist-v1-networking-k8s-io">NetworkPolicyList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-networkpolicy-v1-networking-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind NetworkPolicy</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/networkpolicies</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#networkpolicylist-v1-networking-k8s-io">NetworkPolicyList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-networkpolicy-v1-networking-k8s-io">Watch</H2>
+<P>watch changes to an object of kind NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the NetworkPolicy</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-networkpolicy-v1-networking-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1/watch/networkpolicies</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="-strong-definitions-strong-"><STRONG>DEFINITIONS</STRONG></H1>
+
+<P>This section contains definitions for objects used in the Kubernetes APIs.</P>
+<H2 id="apigroup-v1-meta">APIGroup v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>APIGroup</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>APIGroup contains the name, the supported versions, and the preferred version of a group.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apigrouplist-v1-meta">APIGroupList [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the group.</TD></TR>
+<TR><TD><CODE>preferredVersion</CODE><BR /><I><a href="#groupversionfordiscovery-v1-meta">GroupVersionForDiscovery</a></I></TD><TD>preferredVersion is the version preferred by the API server, which probably is the storage version.</TD></TR>
+<TR><TD><CODE>serverAddressByClientCIDRs</CODE><BR /><I><a href="#serveraddressbyclientcidr-v1-meta">ServerAddressByClientCIDR</a> array</I></TD><TD>a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.</TD></TR>
+<TR><TD><CODE>versions</CODE><BR /><I><a href="#groupversionfordiscovery-v1-meta">GroupVersionForDiscovery</a> array</I></TD><TD>versions are the versions supported in this group.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="apiresource-v1-meta">APIResource v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>APIResource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>APIResource specifies the name of a resource and whether it is namespaced.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiresourcelist-v1-meta">APIResourceList [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>categories</CODE><BR /><I>string array</I></TD><TD>categories is a list of the grouped resources this resource belongs to (e.g. &#39;all&#39;)</TD></TR>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>group is the preferred group of the resource.  Empty implies the group of the containing resource list. For subresources, this may have a different value, for example: Scale&#34;.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>kind is the kind for the resource (e.g. &#39;Foo&#39; is the kind for a resource &#39;foo&#39;)</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the plural name of the resource.</TD></TR>
+<TR><TD><CODE>namespaced</CODE><BR /><I>boolean</I></TD><TD>namespaced indicates if a resource is namespaced or not.</TD></TR>
+<TR><TD><CODE>shortNames</CODE><BR /><I>string array</I></TD><TD>shortNames is a list of suggested short names of the resource.</TD></TR>
+<TR><TD><CODE>singularName</CODE><BR /><I>string</I></TD><TD>singularName is the singular name of the resource.  This allows clients to handle plural and singular opaquely. The singularName is more correct for reporting status on a single item and both singular and plural are allowed from the kubectl CLI interface.</TD></TR>
+<TR><TD><CODE>storageVersionHash</CODE><BR /><I>string</I></TD><TD>The hash value of the storage version, the version this resource is converted to when written to the data store. Value must be treated as opaque by clients. Only equality comparison on the value is valid. This is an alpha feature and may change or be removed in the future. The field is populated by the apiserver only if the StorageVersionHash feature gate is enabled. This field will remain optional even if it graduates.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>verbs is a list of supported kube verbs (this includes get, list, watch, create, update, patch, delete, deletecollection, and proxy)</TD></TR>
+<TR><TD><CODE>version</CODE><BR /><I>string</I></TD><TD>version is the preferred version of the resource.  Empty implies the version of the containing resource list For subresources, this may have a different value, for example: v1 (while inside a v1beta1 version of the core resource&#39;s group)&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="apiservicecondition-v1-apiregistration-k8s-io">APIServiceCondition v1 apiregistration.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>APIServiceCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>APIServiceCondition describes the state of an APIService at a particular point</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#apiservicecondition-v1beta1-apiregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicestatus-v1-apiregistration-k8s-io">APIServiceStatus [apiregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>Unique, one-word, CamelCase reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status is the status of the condition. Can be True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type is the type of the condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="apiversions-v1-meta">APIVersions v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>APIVersions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>APIVersions lists the versions that are available, to allow clients to discover the API at /api, which is the root path of the legacy v1 API.</P>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>serverAddressByClientCIDRs</CODE><BR /><I><a href="#serveraddressbyclientcidr-v1-meta">ServerAddressByClientCIDR</a> array</I></TD><TD>a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.</TD></TR>
+<TR><TD><CODE>versions</CODE><BR /><I>string array</I></TD><TD>versions are the api versions that are available.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="awselasticblockstorevolumesource-v1-core">AWSElasticBlockStoreVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>AWSElasticBlockStoreVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Persistent Disk resource in AWS.
+
+An AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore</TD></TR>
+<TR><TD><CODE>partition</CODE><BR /><I>integer</I></TD><TD>The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as &#34;1&#34;. Similarly, the volume partition for /dev/sda is &#34;0&#34; (or you can leave the property empty).</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Specify &#34;true&#34; to force and set the ReadOnly property in VolumeMounts to &#34;true&#34;. If omitted, the default is &#34;false&#34;. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore</TD></TR>
+<TR><TD><CODE>volumeID</CODE><BR /><I>string</I></TD><TD>Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="affinity-v1-core">Affinity v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Affinity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Affinity is a group of affinity scheduling rules.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nodeAffinity</CODE><BR /><I><a href="#nodeaffinity-v1-core">NodeAffinity</a></I></TD><TD>Describes node affinity scheduling rules for the pod.</TD></TR>
+<TR><TD><CODE>podAffinity</CODE><BR /><I><a href="#podaffinity-v1-core">PodAffinity</a></I></TD><TD>Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).</TD></TR>
+<TR><TD><CODE>podAntiAffinity</CODE><BR /><I><a href="#podantiaffinity-v1-core">PodAntiAffinity</a></I></TD><TD>Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="aggregationrule-v1-rbac-authorization-k8s-io">AggregationRule v1 rbac.authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>AggregationRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#aggregationrule-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#aggregationrule-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>clusterRoleSelectors</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a> array</I></TD><TD>ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole&#39;s permissions will be added</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="allowedcsidriver-v1beta1-policy">AllowedCSIDriver v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>AllowedCSIDriver</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the registered name of the CSI driver</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="allowedflexvolume-v1beta1-policy">AllowedFlexVolume v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>AllowedFlexVolume</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AllowedFlexVolume represents a single Flexvolume that is allowed to be used.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>driver</CODE><BR /><I>string</I></TD><TD>driver is the name of the Flexvolume driver.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="allowedhostpath-v1beta1-policy">AllowedHostPath v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>AllowedHostPath</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pathPrefix</CODE><BR /><I>string</I></TD><TD>pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.  Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="attachedvolume-v1-core">AttachedVolume v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>AttachedVolume</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AttachedVolume describes a volume attached to a node</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodestatus-v1-core">NodeStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>devicePath</CODE><BR /><I>string</I></TD><TD>DevicePath represents the device path where the volume should be available</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the attached volume</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="azurediskvolumesource-v1-core">AzureDiskVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>AzureDiskVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>cachingMode</CODE><BR /><I>string</I></TD><TD>Host Caching mode: None, Read Only, Read Write.</TD></TR>
+<TR><TD><CODE>diskName</CODE><BR /><I>string</I></TD><TD>The Name of the data disk in the blob storage</TD></TR>
+<TR><TD><CODE>diskURI</CODE><BR /><I>string</I></TD><TD>The URI the data disk in the blob storage</TD></TR>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Expected values Shared: multiple blob disks per storage account  Dedicated: single blob disk per storage account  Managed: azure managed data disk (only in managed availability set). defaults to shared</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="azurefilepersistentvolumesource-v1-core">AzureFilePersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>AzureFilePersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AzureFile represents an Azure File Service mount on the host and bind mount to the pod.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretName</CODE><BR /><I>string</I></TD><TD>the name of secret that contains Azure Storage Account Name and Key</TD></TR>
+<TR><TD><CODE>secretNamespace</CODE><BR /><I>string</I></TD><TD>the namespace of the secret that contains Azure Storage Account Name and Key default is the same as the Pod</TD></TR>
+<TR><TD><CODE>shareName</CODE><BR /><I>string</I></TD><TD>Share Name</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="azurefilevolumesource-v1-core">AzureFileVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>AzureFileVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>AzureFile represents an Azure File Service mount on the host and bind mount to the pod.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretName</CODE><BR /><I>string</I></TD><TD>the name of secret that contains Azure Storage Account Name and Key</TD></TR>
+<TR><TD><CODE>shareName</CODE><BR /><I>string</I></TD><TD>Share Name</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="boundobjectreference-v1-authentication-k8s-io">BoundObjectReference v1 authentication.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authentication.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>BoundObjectReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>BoundObjectReference is a reference to an object that a token is bound to.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenrequestspec-v1-authentication-k8s-io">TokenRequestSpec [authentication/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>API version of the referent.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of the referent. Valid kinds are &#39;Pod&#39; and &#39;Secret&#39;.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID of the referent.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="csinodedriver-v1-storage-k8s-io">CSINodeDriver v1 storage.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CSINodeDriver</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CSINodeDriver holds information about the specification of one CSI driver installed on a node</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csinodedriver-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinodespec-v1-storage-k8s-io">CSINodeSpec [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allocatable</CODE><BR /><I><a href="#volumenoderesources-v1-storage-k8s-io">VolumeNodeResources</a></I></TD><TD>allocatable represents the volume resources of a node that are available for scheduling. This field is beta.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>This is the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.</TD></TR>
+<TR><TD><CODE>nodeID</CODE><BR /><I>string</I></TD><TD>nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as &#34;node1&#34;, but the storage system may refer to the same node as &#34;nodeA&#34;. When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. &#34;nodeA&#34; instead of &#34;node1&#34;. This field is required.</TD></TR>
+<TR><TD><CODE>topologyKeys</CODE><BR /><I>string array</I></TD><TD>topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. &#34;company.com/zone&#34;, &#34;company.com/region&#34;). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="csipersistentvolumesource-v1-core">CSIPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CSIPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents storage that is managed by an external CSI volume driver (Beta feature)</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>controllerExpandSecretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>ControllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This is an alpha field and requires enabling ExpandCSIVolumes feature gate. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.</TD></TR>
+<TR><TD><CODE>controllerPublishSecretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>ControllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.</TD></TR>
+<TR><TD><CODE>driver</CODE><BR /><I>string</I></TD><TD>Driver is the name of the driver to use for this volume. Required.</TD></TR>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;.</TD></TR>
+<TR><TD><CODE>nodePublishSecretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.</TD></TR>
+<TR><TD><CODE>nodeStageSecretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>NodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: The value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).</TD></TR>
+<TR><TD><CODE>volumeAttributes</CODE><BR /><I>object</I></TD><TD>Attributes of the volume to publish.</TD></TR>
+<TR><TD><CODE>volumeHandle</CODE><BR /><I>string</I></TD><TD>VolumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity v1beta1 storage.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CSIStorageCapacity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment.  This can be used when considering where to instantiate new PersistentVolumes.
+
+For example this can express things like: - StorageClass &#34;standard&#34; has &#34;1234 GiB&#34; available in &#34;topology.kubernetes.io/zone=us-east1&#34; - StorageClass &#34;localssd&#34; has &#34;10 GiB&#34; available in &#34;kubernetes.io/hostname=knode-abc123&#34;
+
+The following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero
+
+The producer of these objects can decide which approach is more suitable.
+
+They are consumed by the kube-scheduler if the CSIStorageCapacity beta feature gate is enabled there and a CSI driver opts into capacity-aware scheduling with CSIDriver.StorageCapacity.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csistoragecapacity-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csistoragecapacitylist-v1beta1-storage-k8s-io">CSIStorageCapacityList [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>capacity</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>maximumVolumeSize</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>MaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-&lt;uuid&gt;, a generated name, or a reverse-domain name which ends with the unique CSI driver name.  Objects are namespaced.  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>nodeTopology</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.</TD></TR>
+<TR><TD><CODE>storageClassName</CODE><BR /><I>string</I></TD><TD>The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="csivolumesource-v1-core">CSIVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CSIVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a source location of a volume to mount, managed by an external CSI driver</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>driver</CODE><BR /><I>string</I></TD><TD>Driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.</TD></TR>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.</TD></TR>
+<TR><TD><CODE>nodePublishSecretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and  may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Specifies a read-only configuration for the volume. Defaults to false (read/write).</TD></TR>
+<TR><TD><CODE>volumeAttributes</CODE><BR /><I>object</I></TD><TD>VolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver&#39;s documentation for supported values.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="capabilities-v1-core">Capabilities v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Capabilities</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Adds and removes POSIX capabilities from running containers.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#securitycontext-v1-core">SecurityContext [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>add</CODE><BR /><I>string array</I></TD><TD>Added capabilities</TD></TR>
+<TR><TD><CODE>drop</CODE><BR /><I>string array</I></TD><TD>Removed capabilities</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="cephfspersistentvolumesource-v1-core">CephFSPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CephFSPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>monitors</CODE><BR /><I>string array</I></TD><TD>Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Optional: Used as the mounted root, rather than the full Ceph tree, default is /</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>secretFile</CODE><BR /><I>string</I></TD><TD>Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="cephfsvolumesource-v1-core">CephFSVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CephFSVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>monitors</CODE><BR /><I>string array</I></TD><TD>Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Optional: Used as the mounted root, rather than the full Ceph tree, default is /</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>secretFile</CODE><BR /><I>string</I></TD><TD>Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="certificatesigningrequestcondition-v1-certificates-k8s-io">CertificateSigningRequestCondition v1 certificates.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>certificates.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CertificateSigningRequestCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#certificatesigningrequestcondition-v1beta1-certificates-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequeststatus-v1-certificates-k8s-io">CertificateSigningRequestStatus [certificates/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition&#39;s status is changed, the server defaults this to the current time.</TD></TR>
+<TR><TD><CODE>lastUpdateTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastUpdateTime is the time of the last update to this condition</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>message contains a human readable message with details about the request state</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason indicates a brief reason for the request state</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be &#34;False&#34; or &#34;Unknown&#34;.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type of the condition. Known conditions are &#34;Approved&#34;, &#34;Denied&#34;, and &#34;Failed&#34;.  An &#34;Approved&#34; condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.  A &#34;Denied&#34; condition is added via the /approval subresource, indicating the request was denied and should not be issued by the signer.  A &#34;Failed&#34; condition is added via the /status subresource, indicating the signer failed to issue the certificate.  Approved and Denied conditions are mutually exclusive. Approved, Denied, and Failed conditions cannot be removed once added.  Only one condition of a given type is allowed.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="cinderpersistentvolumesource-v1-core">CinderPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CinderPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>Optional: points to a secret object containing parameters used to connect to OpenStack.</TD></TR>
+<TR><TD><CODE>volumeID</CODE><BR /><I>string</I></TD><TD>volume id used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="cindervolumesource-v1-core">CinderVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CinderVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>Optional: points to a secret object containing parameters used to connect to OpenStack.</TD></TR>
+<TR><TD><CODE>volumeID</CODE><BR /><I>string</I></TD><TD>volume id used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="clientipconfig-v1-core">ClientIPConfig v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ClientIPConfig</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ClientIPConfig represents the configurations of Client IP based session affinity.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#sessionaffinityconfig-v1-core">SessionAffinityConfig [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>timeoutSeconds</CODE><BR /><I>integer</I></TD><TD>timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be &gt;0 &amp;&amp; &lt;=86400(for 1 day) if ServiceAffinity == &#34;ClientIP&#34;. Default value is 10800(for 3 hours).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="componentcondition-v1-core">ComponentCondition v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ComponentCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Information about the condition of a component.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#componentstatus-v1-core">ComponentStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>error</CODE><BR /><I>string</I></TD><TD>Condition error code for a component. For example, a health check error code.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Message about the condition for a component. For example, information about a health check.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition for a component. Valid values for &#34;Healthy&#34;: &#34;True&#34;, &#34;False&#34;, or &#34;Unknown&#34;.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of condition for a component. Valid value: &#34;Healthy&#34;</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="condition-v1-meta">Condition v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Condition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Condition contains details for one aspect of the current state of this API Resource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudgetstatus-v1-policy">PodDisruptionBudgetStatus [policy/v1]</a></LI>
+  <LI><a href="#poddisruptionbudgetstatus-v1beta1-policy">PodDisruptionBudgetStatus [policy/v1beta1]</a></LI>
+  <LI><a href="#servicestatus-v1-core">ServiceStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>message is a human readable message indicating details about the transition. This may be an empty string.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason contains a programmatic identifier indicating the reason for the condition&#39;s last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type of condition in CamelCase or in foo.example.com/CamelCase.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="configmapenvsource-v1-core">ConfigMapEnvSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ConfigMapEnvSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.
+
+The contents of the target ConfigMap&#39;s Data field will represent the key-value pairs as environment variables.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#envfromsource-v1-core">EnvFromSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the ConfigMap must be defined</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="configmapkeyselector-v1-core">ConfigMapKeySelector v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ConfigMapKeySelector</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Selects a key from a ConfigMap.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#envvarsource-v1-core">EnvVarSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>key</CODE><BR /><I>string</I></TD><TD>The key to select.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the ConfigMap or its key must be defined</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="configmapnodeconfigsource-v1-core">ConfigMapNodeConfigSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ConfigMapNodeConfigSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodeconfigsource-v1-core">NodeConfigSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>kubeletConfigKey</CODE><BR /><I>string</I></TD><TD>KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE><BR /><I>string</I></TD><TD>ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="configmapprojection-v1-core">ConfigMapProjection v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ConfigMapProjection</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Adapts a ConfigMap into a projected volume.
+
+The contents of the target ConfigMap&#39;s Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeprojection-v1-core">VolumeProjection [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#keytopath-v1-core">KeyToPath</a> array</I></TD><TD>If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the &#39;..&#39; path or start with &#39;..&#39;.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the ConfigMap or its keys must be defined</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="configmapvolumesource-v1-core">ConfigMapVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ConfigMapVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Adapts a ConfigMap into a volume.
+
+The contents of the target ConfigMap&#39;s Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>defaultMode</CODE><BR /><I>integer</I></TD><TD>Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#keytopath-v1-core">KeyToPath</a> array</I></TD><TD>If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the &#39;..&#39; path or start with &#39;..&#39;.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the ConfigMap or its keys must be defined</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerimage-v1-core">ContainerImage v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ContainerImage</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Describe a container image</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodestatus-v1-core">NodeStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>names</CODE><BR /><I>string array</I></TD><TD>Names by which this image is known. e.g. [&#34;k8s.gcr.io/hyperkube:v1.0.7&#34;, &#34;dockerhub.io/google_containers/hyperkube:v1.0.7&#34;]</TD></TR>
+<TR><TD><CODE>sizeBytes</CODE><BR /><I>integer</I></TD><TD>The size of the image in bytes.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerport-v1-core">ContainerPort v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ContainerPort</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ContainerPort represents a network port in a single container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerPort</CODE><BR /><I>integer</I></TD><TD>Number of port to expose on the pod&#39;s IP address. This must be a valid port number, 0 &lt; x &lt; 65536.</TD></TR>
+<TR><TD><CODE>hostIP</CODE><BR /><I>string</I></TD><TD>What host IP to bind the external port to.</TD></TR>
+<TR><TD><CODE>hostPort</CODE><BR /><I>integer</I></TD><TD>Number of port to expose on the host. If specified, this must be a valid port number, 0 &lt; x &lt; 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.</TD></TR>
+<TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>Protocol for port. Must be UDP, TCP, or SCTP. Defaults to &#34;TCP&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerresourcemetricsource-v2beta2-autoscaling">ContainerResourceMetricSource v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ContainerResourceMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  The values will be averaged together before being compared to the target.  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.  Only one &#34;target&#34; type should be set.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#containerresourcemetricsource-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta2-autoscaling">MetricSpec [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>container</CODE><BR /><I>string</I></TD><TD>container is the name of the container in the pods of the scaling target</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the resource in question.</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#metrictarget-v2beta2-autoscaling">MetricTarget</a></I></TD><TD>target specifies the target value for the given metric</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerresourcemetricstatus-v2beta2-autoscaling">ContainerResourceMetricStatus v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ContainerResourceMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory).  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#containerresourcemetricstatus-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta2-autoscaling">MetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>container</CODE><BR /><I>string</I></TD><TD>Container is the name of the container in the pods of the scaling target</TD></TR>
+<TR><TD><CODE>current</CODE><BR /><I><a href="#metricvaluestatus-v2beta2-autoscaling">MetricValueStatus</a></I></TD><TD>current contains the current value for the given metric</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of the resource in question.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerstate-v1-core">ContainerState v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ContainerState</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#containerstatus-v1-core">ContainerStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>running</CODE><BR /><I><a href="#containerstaterunning-v1-core">ContainerStateRunning</a></I></TD><TD>Details about a running container</TD></TR>
+<TR><TD><CODE>terminated</CODE><BR /><I><a href="#containerstateterminated-v1-core">ContainerStateTerminated</a></I></TD><TD>Details about a terminated container</TD></TR>
+<TR><TD><CODE>waiting</CODE><BR /><I><a href="#containerstatewaiting-v1-core">ContainerStateWaiting</a></I></TD><TD>Details about a waiting container</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerstaterunning-v1-core">ContainerStateRunning v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ContainerStateRunning</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ContainerStateRunning is a running state of a container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#containerstate-v1-core">ContainerState [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>startedAt</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Time at which the container was last (re-)started</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerstateterminated-v1-core">ContainerStateTerminated v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ContainerStateTerminated</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ContainerStateTerminated is a terminated state of a container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#containerstate-v1-core">ContainerState [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerID</CODE><BR /><I>string</I></TD><TD>Container&#39;s ID in the format &#39;docker://&lt;container_id&gt;&#39;</TD></TR>
+<TR><TD><CODE>exitCode</CODE><BR /><I>integer</I></TD><TD>Exit status from the last termination of the container</TD></TR>
+<TR><TD><CODE>finishedAt</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Time at which the container last terminated</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Message regarding the last termination of the container</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>(brief) reason from the last termination of the container</TD></TR>
+<TR><TD><CODE>signal</CODE><BR /><I>integer</I></TD><TD>Signal from the last termination of the container</TD></TR>
+<TR><TD><CODE>startedAt</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Time at which previous execution of the container started</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="containerstatewaiting-v1-core">ContainerStateWaiting v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ContainerStateWaiting</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ContainerStateWaiting is a waiting state of a container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#containerstate-v1-core">ContainerState [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Message regarding why the container is not yet running.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>(brief) reason the container is not yet running.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="cronjob-v1-batch">CronJob v1 batch</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CronJob</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CronJob represents the configuration of a single cron job.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#cronjob-v1beta1-batch">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjoblist-v1-batch">CronJobList [batch/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#cronjobspec-v1-batch">CronJobSpec</a></I></TD><TD>Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#cronjobstatus-v1-batch">CronJobStatus</a></I></TD><TD>Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="crossversionobjectreference-v1-autoscaling">CrossVersionObjectReference v1 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CrossVersionObjectReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CrossVersionObjectReference contains enough information to let you identify the referred resource.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#crossversionobjectreference-v2beta2-autoscaling">v2beta2</a>
+<a href="#crossversionobjectreference-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerspec-v1-autoscaling">HorizontalPodAutoscalerSpec [autoscaling/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>API version of the referent</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds&#34;</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourcecolumndefinition-v1-apiextensions-k8s-io">CustomResourceColumnDefinition v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceColumnDefinition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceColumnDefinition specifies a column for server side printing.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcecolumndefinition-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionversion-v1-apiextensions-k8s-io">CustomResourceDefinitionVersion [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD>description is a human readable description of this column.</TD></TR>
+<TR><TD><CODE>format</CODE><BR /><I>string</I></TD><TD>format is an optional OpenAPI type definition for this column. The &#39;name&#39; format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.</TD></TR>
+<TR><TD><CODE>jsonPath</CODE><BR /><I>string</I></TD><TD>jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is a human readable name for the column.</TD></TR>
+<TR><TD><CODE>priority</CODE><BR /><I>integer</I></TD><TD>priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourceconversion-v1-apiextensions-k8s-io">CustomResourceConversion v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceConversion</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceConversion describes how to convert different versions of a CR.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourceconversion-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>strategy</CODE><BR /><I>string</I></TD><TD>strategy specifies how custom resources are converted between versions. Allowed values are: - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource. - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information   is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhook to be set.</TD></TR>
+<TR><TD><CODE>webhook</CODE><BR /><I><a href="#webhookconversion-v1-apiextensions-k8s-io">WebhookConversion</a></I></TD><TD>webhook describes how to call the conversion webhook. Required when `strategy` is set to `Webhook`.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourcedefinitioncondition-v1-apiextensions-k8s-io">CustomResourceDefinitionCondition v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceDefinitionCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceDefinitionCondition contains details for the current condition of this pod.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionstatus-v1-apiextensions-k8s-io">CustomResourceDefinitionStatus [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastTransitionTime last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>message is a human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason is a unique, one-word, CamelCase reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>status is the status of the condition. Can be True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of the condition. Types include Established, NamesAccepted and Terminating.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourcedefinitionnames-v1-apiextensions-k8s-io">CustomResourceDefinitionNames v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceDefinitionNames</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinition</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinitionnames-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1]</a></LI>
+  <LI><a href="#customresourcedefinitionstatus-v1-apiextensions-k8s-io">CustomResourceDefinitionStatus [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>categories</CODE><BR /><I>string array</I></TD><TD>categories is a list of grouped resources this custom resource belongs to (e.g. &#39;all&#39;). This is published in API discovery documents, and used by clients to support invocations like `kubectl get all`.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>kind is the serialized kind of the resource. It is normally CamelCase and singular. Custom resource instances will use this value as the `kind` attribute in API calls.</TD></TR>
+<TR><TD><CODE>listKind</CODE><BR /><I>string</I></TD><TD>listKind is the serialized kind of the list for this resource. Defaults to &#34;`kind`List&#34;.</TD></TR>
+<TR><TD><CODE>plural</CODE><BR /><I>string</I></TD><TD>plural is the plural name of the resource to serve. The custom resources are served under `/apis/&lt;group&gt;/&lt;version&gt;/.../&lt;plural&gt;`. Must match the name of the CustomResourceDefinition (in the form `&lt;names.plural&gt;.&lt;group&gt;`). Must be all lowercase.</TD></TR>
+<TR><TD><CODE>shortNames</CODE><BR /><I>string array</I></TD><TD>shortNames are short names for the resource, exposed in API discovery documents, and used by clients to support invocations like `kubectl get &lt;shortname&gt;`. It must be all lowercase.</TD></TR>
+<TR><TD><CODE>singular</CODE><BR /><I>string</I></TD><TD>singular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourcedefinitionversion-v1-apiextensions-k8s-io">CustomResourceDefinitionVersion v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceDefinitionVersion</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceDefinitionVersion describes a version for CRD.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinitionversion-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>additionalPrinterColumns</CODE><BR /><I><a href="#customresourcecolumndefinition-v1-apiextensions-k8s-io">CustomResourceColumnDefinition</a> array</I></TD><TD>additionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. If no columns are specified, a single column displaying the age of the custom resource is used.</TD></TR>
+<TR><TD><CODE>deprecated</CODE><BR /><I>boolean</I></TD><TD>deprecated indicates this version of the custom resource API is deprecated. When set to true, API requests to this version receive a warning header in the server response. Defaults to false.</TD></TR>
+<TR><TD><CODE>deprecationWarning</CODE><BR /><I>string</I></TD><TD>deprecationWarning overrides the default warning returned to API clients. May only be set when `deprecated` is true. The default warning indicates this version is deprecated and recommends use of the newest served version of equal or greater stability, if one exists.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the version name, e.g. “v1”, “v2beta1”, etc. The custom resources are served under this version at `/apis/&lt;group&gt;/&lt;version&gt;/...` if `served` is true.</TD></TR>
+<TR><TD><CODE>schema</CODE><BR /><I><a href="#customresourcevalidation-v1-apiextensions-k8s-io">CustomResourceValidation</a></I></TD><TD>schema describes the schema used for validation, pruning, and defaulting of this version of the custom resource.</TD></TR>
+<TR><TD><CODE>served</CODE><BR /><I>boolean</I></TD><TD>served is a flag enabling/disabling this version from being served via REST APIs</TD></TR>
+<TR><TD><CODE>storage</CODE><BR /><I>boolean</I></TD><TD>storage indicates this version should be used when persisting custom resources to storage. There must be exactly one version with storage=true.</TD></TR>
+<TR><TD><CODE>subresources</CODE><BR /><I><a href="#customresourcesubresources-v1-apiextensions-k8s-io">CustomResourceSubresources</a></I></TD><TD>subresources specify what subresources this version of the defined custom resource have.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourcesubresourcescale-v1-apiextensions-k8s-io">CustomResourceSubresourceScale v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceSubresourceScale</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcesubresourcescale-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcesubresources-v1-apiextensions-k8s-io">CustomResourceSubresources [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>labelSelectorPath</CODE><BR /><I>string</I></TD><TD>labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.</TD></TR>
+<TR><TD><CODE>specReplicasPath</CODE><BR /><I>string</I></TD><TD>specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.</TD></TR>
+<TR><TD><CODE>statusReplicasPath</CODE><BR /><I>string</I></TD><TD>statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourcesubresourcestatus-v1-apiextensions-k8s-io">CustomResourceSubresourceStatus v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceSubresourceStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcesubresources-v1-apiextensions-k8s-io">CustomResourceSubresources [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="customresourcesubresources-v1-apiextensions-k8s-io">CustomResourceSubresources v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceSubresources</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceSubresources defines the status and scale subresources for CustomResources.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcesubresources-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionversion-v1-apiextensions-k8s-io">CustomResourceDefinitionVersion [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>scale</CODE><BR /><I><a href="#customresourcesubresourcescale-v1-apiextensions-k8s-io">CustomResourceSubresourceScale</a></I></TD><TD>scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#customresourcesubresourcestatus-v1-apiextensions-k8s-io">CustomResourceSubresourceStatus</a></I></TD><TD>status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="customresourcevalidation-v1-apiextensions-k8s-io">CustomResourceValidation v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CustomResourceValidation</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>CustomResourceValidation is a list of validation methods for CustomResources.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcevalidation-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionversion-v1-apiextensions-k8s-io">CustomResourceDefinitionVersion [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>openAPIV3Schema</CODE><BR /><I><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps</a></I></TD><TD>openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="daemonendpoint-v1-core">DaemonEndpoint v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DaemonEndpoint</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>DaemonEndpoint contains information about a single Daemon endpoint.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodedaemonendpoints-v1-core">NodeDaemonEndpoints [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>Port</CODE><BR /><I>integer</I></TD><TD>Port number of the given endpoint.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="daemonsetcondition-v1-apps">DaemonSetCondition v1 apps</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DaemonSetCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>DaemonSetCondition describes the state of a DaemonSet at a certain point.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#daemonsetstatus-v1-apps">DaemonSetStatus [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human readable message indicating details about the transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>The reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of DaemonSet condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="daemonsetupdatestrategy-v1-apps">DaemonSetUpdateStrategy v1 apps</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DaemonSetUpdateStrategy</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>DaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#daemonsetspec-v1-apps">DaemonSetSpec [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rollingUpdate</CODE><BR /><I><a href="#rollingupdatedaemonset-v1-apps">RollingUpdateDaemonSet</a></I></TD><TD>Rolling update config params. Present only if type = &#34;RollingUpdate&#34;.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of daemon set update. Can be &#34;RollingUpdate&#34; or &#34;OnDelete&#34;. Default is RollingUpdate.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="deleteoptions-v1-meta">DeleteOptions v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DeleteOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>DeleteOptions may be provided when deleting an API object.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#eviction-v1beta1-policy">Eviction [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>dryRun</CODE><BR /><I>string array</I></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE><BR /><I>integer</I></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE><BR /><I>boolean</I></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the &#34;orphan&#34; finalizer will be added to/removed from the object&#39;s finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>preconditions</CODE><BR /><I><a href="#preconditions-v1-meta">Preconditions</a></I></TD><TD>Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE><BR /><I>string</I></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: &#39;Orphan&#39; - orphan the dependents; &#39;Background&#39; - allow the garbage collector to delete the dependents in the background; &#39;Foreground&#39; - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="deploymentcondition-v1-apps">DeploymentCondition v1 apps</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DeploymentCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>DeploymentCondition describes the state of a deployment at a certain point.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#deploymentstatus-v1-apps">DeploymentStatus [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>lastUpdateTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>The last time this condition was updated.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human readable message indicating details about the transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>The reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of deployment condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="downwardapiprojection-v1-core">DownwardAPIProjection v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DownwardAPIProjection</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeprojection-v1-core">VolumeProjection [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#downwardapivolumefile-v1-core">DownwardAPIVolumeFile</a> array</I></TD><TD>Items is a list of DownwardAPIVolume file</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="downwardapivolumefile-v1-core">DownwardAPIVolumeFile v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DownwardAPIVolumeFile</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>DownwardAPIVolumeFile represents information to create the file containing the pod field</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#downwardapiprojection-v1-core">DownwardAPIProjection [core/v1]</a></LI>
+  <LI><a href="#downwardapivolumesource-v1-core">DownwardAPIVolumeSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fieldRef</CODE><BR /><I><a href="#objectfieldselector-v1-core">ObjectFieldSelector</a></I></TD><TD>Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.</TD></TR>
+<TR><TD><CODE>mode</CODE><BR /><I>integer</I></TD><TD>Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the &#39;..&#39; path. Must be utf-8 encoded. The first item of the relative path must not start with &#39;..&#39;</TD></TR>
+<TR><TD><CODE>resourceFieldRef</CODE><BR /><I><a href="#resourcefieldselector-v1-core">ResourceFieldSelector</a></I></TD><TD>Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="downwardapivolumesource-v1-core">DownwardAPIVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>DownwardAPIVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>DownwardAPIVolumeSource represents a volume containing downward API info. Downward API volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>defaultMode</CODE><BR /><I>integer</I></TD><TD>Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#downwardapivolumefile-v1-core">DownwardAPIVolumeFile</a> array</I></TD><TD>Items is a list of downward API volume file</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="emptydirvolumesource-v1-core">EmptyDirVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EmptyDirVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>medium</CODE><BR /><I>string</I></TD><TD>What type of storage medium should back this directory. The default is &#34;&#34; which means to use the node&#39;s default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir</TD></TR>
+<TR><TD><CODE>sizeLimit</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>Total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="endpoint-v1-discovery-k8s-io">Endpoint v1 discovery.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Endpoint</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Endpoint represents a single logical &#34;backend&#34; implementing a service.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpoint-v1beta1-discovery-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice [discovery/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>addresses</CODE><BR /><I>string array</I></TD><TD>addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#endpointconditions-v1-discovery-k8s-io">EndpointConditions</a></I></TD><TD>conditions contains information about the current status of the endpoint.</TD></TR>
+<TR><TD><CODE>deprecatedTopology</CODE><BR /><I>object</I></TD><TD>deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be removed when the v1beta1 API is removed (no sooner than kubernetes v1.24).  While this field can hold values, it is not writable through the v1 API, and any attempts to write to it will be silently ignored. Topology information can be found in the zone and nodeName fields instead.</TD></TR>
+<TR><TD><CODE>hints</CODE><BR /><I><a href="#endpointhints-v1-discovery-k8s-io">EndpointHints</a></I></TD><TD>hints contains information associated with how an endpoint should be consumed.</TD></TR>
+<TR><TD><CODE>hostname</CODE><BR /><I>string</I></TD><TD>hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.</TD></TR>
+<TR><TD><CODE>nodeName</CODE><BR /><I>string</I></TD><TD>nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node. This field can be enabled with the EndpointSliceNodeName feature gate.</TD></TR>
+<TR><TD><CODE>targetRef</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>targetRef is a reference to a Kubernetes object that represents this endpoint.</TD></TR>
+<TR><TD><CODE>zone</CODE><BR /><I>string</I></TD><TD>zone is the name of the Zone this endpoint exists in.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="endpointaddress-v1-core">EndpointAddress v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointAddress</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EndpointAddress is a tuple that describes single IP address.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointsubset-v1-core">EndpointSubset [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hostname</CODE><BR /><I>string</I></TD><TD>The Hostname of this endpoint</TD></TR>
+<TR><TD><CODE>ip</CODE><BR /><I>string</I></TD><TD>The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.</TD></TR>
+<TR><TD><CODE>nodeName</CODE><BR /><I>string</I></TD><TD>Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.</TD></TR>
+<TR><TD><CODE>targetRef</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>Reference to object providing the endpoint.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="endpointconditions-v1-discovery-k8s-io">EndpointConditions v1 discovery.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointConditions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EndpointConditions represents the current condition of an endpoint.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointconditions-v1beta1-discovery-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpoint-v1-discovery-k8s-io">Endpoint [discovery/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ready</CODE><BR /><I>boolean</I></TD><TD>ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be &#34;true&#34; for terminating endpoints.</TD></TR>
+<TR><TD><CODE>serving</CODE><BR /><I>boolean</I></TD><TD>serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.</TD></TR>
+<TR><TD><CODE>terminating</CODE><BR /><I>boolean</I></TD><TD>terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="endpointhints-v1-discovery-k8s-io">EndpointHints v1 discovery.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointHints</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EndpointHints provides hints describing how an endpoint should be consumed.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointhints-v1beta1-discovery-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpoint-v1-discovery-k8s-io">Endpoint [discovery/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>forZones</CODE><BR /><I><a href="#forzone-v1-discovery-k8s-io">ForZone</a> array</I></TD><TD>forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="endpointport-v1-core">EndpointPort v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointPort</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EndpointPort is a tuple that describes a single port.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointport-v1beta1-discovery-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointsubset-v1-core">EndpointSubset [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>appProtocol</CODE><BR /><I>string</I></TD><TD>The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of this port.  This must match the &#39;name&#39; field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>The port number of the endpoint.</TD></TR>
+<TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="endpointslice-v1-discovery-k8s-io">EndpointSlice v1 discovery.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointSlice</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointslice-v1beta1-discovery-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslicelist-v1-discovery-k8s-io">EndpointSliceList [discovery/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>addressType</CODE><BR /><I>string</I></TD><TD>addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>endpoints</CODE><BR /><I><a href="#endpoint-v1-discovery-k8s-io">Endpoint</a> array</I></TD><TD>endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#endpointport-v1-discovery-k8s-io">EndpointPort</a> array</I></TD><TD>ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates &#34;all ports&#34;. Each slice may include a maximum of 100 ports.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="endpointsubset-v1-core">EndpointSubset v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointSubset</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EndpointSubset is a group of addresses with a common set of ports. The expanded set of endpoints is the Cartesian product of Addresses x Ports. For example, given:
+  {
+    Addresses: [{&#34;ip&#34;: &#34;10.10.1.1&#34;}, {&#34;ip&#34;: &#34;10.10.2.2&#34;}],
+    Ports:     [{&#34;name&#34;: &#34;a&#34;, &#34;port&#34;: 8675}, {&#34;name&#34;: &#34;b&#34;, &#34;port&#34;: 309}]
+  }
+The resulting set of endpoints can be viewed as:
+    a: [ 10.10.1.1:8675, 10.10.2.2:8675 ],
+    b: [ 10.10.1.1:309, 10.10.2.2:309 ]</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpoints-v1-core">Endpoints [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>addresses</CODE><BR /><I><a href="#endpointaddress-v1-core">EndpointAddress</a> array</I></TD><TD>IP addresses which offer the related ports that are marked as ready. These endpoints should be considered safe for load balancers and clients to utilize.</TD></TR>
+<TR><TD><CODE>notReadyAddresses</CODE><BR /><I><a href="#endpointaddress-v1-core">EndpointAddress</a> array</I></TD><TD>IP addresses which offer the related ports but are not currently marked as ready because they have not yet finished starting, have recently failed a readiness check, or have recently failed a liveness check.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#endpointport-v1-core">EndpointPort</a> array</I></TD><TD>Port numbers available on the related IP addresses.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="envfromsource-v1-core">EnvFromSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EnvFromSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EnvFromSource represents the source of a set of ConfigMaps</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>configMapRef</CODE><BR /><I><a href="#configmapenvsource-v1-core">ConfigMapEnvSource</a></I></TD><TD>The ConfigMap to select from</TD></TR>
+<TR><TD><CODE>prefix</CODE><BR /><I>string</I></TD><TD>An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#secretenvsource-v1-core">SecretEnvSource</a></I></TD><TD>The Secret to select from</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="envvar-v1-core">EnvVar v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EnvVar</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EnvVar represents an environment variable present in a Container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the environment variable. Must be a C_IDENTIFIER.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>string</I></TD><TD>Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to &#34;&#34;.</TD></TR>
+<TR><TD><CODE>valueFrom</CODE><BR /><I><a href="#envvarsource-v1-core">EnvVarSource</a></I></TD><TD>Source for the environment variable&#39;s value. Cannot be used if value is not empty.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="envvarsource-v1-core">EnvVarSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EnvVarSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EnvVarSource represents a source for the value of an EnvVar.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#envvar-v1-core">EnvVar [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>configMapKeyRef</CODE><BR /><I><a href="#configmapkeyselector-v1-core">ConfigMapKeySelector</a></I></TD><TD>Selects a key of a ConfigMap.</TD></TR>
+<TR><TD><CODE>fieldRef</CODE><BR /><I><a href="#objectfieldselector-v1-core">ObjectFieldSelector</a></I></TD><TD>Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels[&#39;&lt;KEY&gt;&#39;]`, `metadata.annotations[&#39;&lt;KEY&gt;&#39;]`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.</TD></TR>
+<TR><TD><CODE>resourceFieldRef</CODE><BR /><I><a href="#resourcefieldselector-v1-core">ResourceFieldSelector</a></I></TD><TD>Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.</TD></TR>
+<TR><TD><CODE>secretKeyRef</CODE><BR /><I><a href="#secretkeyselector-v1-core">SecretKeySelector</a></I></TD><TD>Selects a key of a secret in the pod&#39;s namespace</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ephemeralcontainer-v1-core">EphemeralContainer v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EphemeralContainer</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod&#39;s ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ephemeralcontainers-v1-core">EphemeralContainers [core/v1]</a></LI>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>args</CODE><BR /><I>string array</I></TD><TD>Arguments to the entrypoint. The docker image&#39;s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container&#39;s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell</TD></TR>
+<TR><TD><CODE>command</CODE><BR /><I>string array</I></TD><TD>Entrypoint array. Not executed within a shell. The docker image&#39;s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container&#39;s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell</TD></TR>
+<TR><TD><CODE>env</CODE><BR /><I><a href="#envvar-v1-core">EnvVar</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>List of environment variables to set in the container. Cannot be updated.</TD></TR>
+<TR><TD><CODE>envFrom</CODE><BR /><I><a href="#envfromsource-v1-core">EnvFromSource</a> array</I></TD><TD>List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.</TD></TR>
+<TR><TD><CODE>image</CODE><BR /><I>string</I></TD><TD>Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images</TD></TR>
+<TR><TD><CODE>imagePullPolicy</CODE><BR /><I>string</I></TD><TD>Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images</TD></TR>
+<TR><TD><CODE>lifecycle</CODE><BR /><I><a href="#lifecycle-v1-core">Lifecycle</a></I></TD><TD>Lifecycle is not allowed for ephemeral containers.</TD></TR>
+<TR><TD><CODE>livenessProbe</CODE><BR /><I><a href="#probe-v1-core">Probe</a></I></TD><TD>Probes are not allowed for ephemeral containers.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#containerport-v1-core">ContainerPort</a> array</I></TD><TD>Ports are not allowed for ephemeral containers.</TD></TR>
+<TR><TD><CODE>readinessProbe</CODE><BR /><I><a href="#probe-v1-core">Probe</a></I></TD><TD>Probes are not allowed for ephemeral containers.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I><a href="#resourcerequirements-v1-core">ResourceRequirements</a></I></TD><TD>Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod.</TD></TR>
+<TR><TD><CODE>securityContext</CODE><BR /><I><a href="#securitycontext-v1-core">SecurityContext</a></I></TD><TD>SecurityContext is not allowed for ephemeral containers.</TD></TR>
+<TR><TD><CODE>startupProbe</CODE><BR /><I><a href="#probe-v1-core">Probe</a></I></TD><TD>Probes are not allowed for ephemeral containers.</TD></TR>
+<TR><TD><CODE>stdin</CODE><BR /><I>boolean</I></TD><TD>Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.</TD></TR>
+<TR><TD><CODE>stdinOnce</CODE><BR /><I>boolean</I></TD><TD>Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false</TD></TR>
+<TR><TD><CODE>targetContainerName</CODE><BR /><I>string</I></TD><TD>If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container is run in whatever namespaces are shared for the pod. Note that the container runtime must support this feature.</TD></TR>
+<TR><TD><CODE>terminationMessagePath</CODE><BR /><I>string</I></TD><TD>Optional: Path at which the file to which the container&#39;s termination message will be written is mounted into the container&#39;s filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.</TD></TR>
+<TR><TD><CODE>terminationMessagePolicy</CODE><BR /><I>string</I></TD><TD>Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.</TD></TR>
+<TR><TD><CODE>tty</CODE><BR /><I>boolean</I></TD><TD>Whether this container should allocate a TTY for itself, also requires &#39;stdin&#39; to be true. Default is false.</TD></TR>
+<TR><TD><CODE>volumeDevices</CODE><BR /><I><a href="#volumedevice-v1-core">VolumeDevice</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>devicePath</I></TD><TD>volumeDevices is the list of block devices to be used by the container.</TD></TR>
+<TR><TD><CODE>volumeMounts</CODE><BR /><I><a href="#volumemount-v1-core">VolumeMount</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>mountPath</I></TD><TD>Pod volumes to mount into the container&#39;s filesystem. Cannot be updated.</TD></TR>
+<TR><TD><CODE>workingDir</CODE><BR /><I>string</I></TD><TD>Container&#39;s working directory. If not specified, the container runtime&#39;s default will be used, which might be configured in the container image. Cannot be updated.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ephemeralcontainers-v1-core">EphemeralContainers v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EphemeralContainers</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A list of ephemeral containers used with the Pod ephemeralcontainers subresource.</P>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>ephemeralContainers</CODE><BR /><I><a href="#ephemeralcontainer-v1-core">EphemeralContainer</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>A list of ephemeral containers associated with this pod. New ephemeral containers may be appended to this list, but existing ephemeral containers may not be removed or modified.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ephemeralvolumesource-v1-core">EphemeralVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EphemeralVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents an ephemeral volume that is handled by a normal storage driver.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>volumeClaimTemplate</CODE><BR /><I><a href="#persistentvolumeclaimtemplate-v1-core">PersistentVolumeClaimTemplate</a></I></TD><TD>Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod.  The name of the PVC will be `&lt;pod name&gt;-&lt;volume name&gt;` where `&lt;volume name&gt;` is the name from the `PodSpec.Volumes` array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).  An existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.  This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.  Required, must not be nil.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="eventseries-v1-core">EventSeries v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EventSeries</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#eventseries-v1beta1-events-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#event-v1-core">Event [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>count</CODE><BR /><I>integer</I></TD><TD>Number of occurrences in this series up to the last heartbeat time</TD></TR>
+<TR><TD><CODE>lastObservedTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>Time of the last occurrence observed</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="eventsource-v1-core">EventSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EventSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>EventSource contains information for an event.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#event-v1-core">Event [core/v1]</a></LI>
+  <LI><a href="#event-v1-events-k8s-io">Event [events/v1]</a></LI>
+  <LI><a href="#event-v1beta1-events-k8s-io">Event [events/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>component</CODE><BR /><I>string</I></TD><TD>Component from which the event is generated.</TD></TR>
+<TR><TD><CODE>host</CODE><BR /><I>string</I></TD><TD>Node name on which the event is generated.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="eviction-v1beta1-policy">Eviction v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Eviction</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod.  A request to cause such an eviction is created by POSTing to .../pods/&lt;pod name&gt;/evictions.</P>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>deleteOptions</CODE><BR /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD>DeleteOptions may be provided</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>ObjectMeta describes the pod that is being evicted.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="execaction-v1-core">ExecAction v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ExecAction</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ExecAction describes a &#34;run in container&#34; action.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#handler-v1-core">Handler [core/v1]</a></LI>
+  <LI><a href="#probe-v1-core">Probe [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>command</CODE><BR /><I>string array</I></TD><TD>Command is the command line to execute inside the container, the working directory for the command  is root (&#39;/&#39;) in the container&#39;s filesystem. The command is simply exec&#39;d, it is not run inside a shell, so traditional shell instructions (&#39;|&#39;, etc) won&#39;t work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="externaldocumentation-v1-apiextensions-k8s-io">ExternalDocumentation v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ExternalDocumentation</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ExternalDocumentation allows referencing an external resource for extended documentation.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#externaldocumentation-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>url</CODE><BR /><I>string</I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="externalmetricsource-v2beta2-autoscaling">ExternalMetricSource v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ExternalMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#externalmetricsource-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta2-autoscaling">MetricSpec [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metric</CODE><BR /><I><a href="#metricidentifier-v2beta2-autoscaling">MetricIdentifier</a></I></TD><TD>metric identifies the target metric by name and selector</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#metrictarget-v2beta2-autoscaling">MetricTarget</a></I></TD><TD>target specifies the target value for the given metric</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="externalmetricstatus-v2beta2-autoscaling">ExternalMetricStatus v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ExternalMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#externalmetricstatus-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta2-autoscaling">MetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>current</CODE><BR /><I><a href="#metricvaluestatus-v2beta2-autoscaling">MetricValueStatus</a></I></TD><TD>current contains the current value for the given metric</TD></TR>
+<TR><TD><CODE>metric</CODE><BR /><I><a href="#metricidentifier-v2beta2-autoscaling">MetricIdentifier</a></I></TD><TD>metric identifies the target metric by name and selector</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="fcvolumesource-v1-core">FCVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>FCVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Fibre Channel volume. Fibre Channel volumes can only be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified.</TD></TR>
+<TR><TD><CODE>lun</CODE><BR /><I>integer</I></TD><TD>Optional: FC target lun number</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>targetWWNs</CODE><BR /><I>string array</I></TD><TD>Optional: FC target worldwide names (WWNs)</TD></TR>
+<TR><TD><CODE>wwids</CODE><BR /><I>string array</I></TD><TD>Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="fsgroupstrategyoptions-v1beta1-policy">FSGroupStrategyOptions v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>FSGroupStrategyOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>FSGroupStrategyOptions defines the strategy type and options used to create the strategy.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ranges</CODE><BR /><I><a href="#idrange-v1beta1-policy">IDRange</a> array</I></TD><TD>ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.</TD></TR>
+<TR><TD><CODE>rule</CODE><BR /><I>string</I></TD><TD>rule is the strategy that will dictate what FSGroup is used in the SecurityContext.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="fieldsv1-v1-meta">FieldsV1 v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>FieldsV1</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.
+
+Each key is either a &#39;.&#39; representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: &#39;f:&lt;name&gt;&#39;, where &lt;name&gt; is the name of a field in a struct, or key in a map &#39;v:&lt;value&gt;&#39;, where &lt;value&gt; is the exact json formatted value of a list item &#39;i:&lt;index&gt;&#39;, where &lt;index&gt; is position of a item in a list &#39;k:&lt;keys&gt;&#39;, where &lt;keys&gt; is a map of  a list item&#39;s key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.
+
+The exact format is defined in sigs.k8s.io/structured-merge-diff</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#managedfieldsentry-v1-meta">ManagedFieldsEntry [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="flexpersistentvolumesource-v1-core">FlexPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>FlexPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>FlexPersistentVolumeSource represents a generic persistent volume resource that is provisioned/attached using an exec based plugin.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>driver</CODE><BR /><I>string</I></TD><TD>Driver is the name of the driver to use for this volume.</TD></TR>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. The default filesystem depends on FlexVolume script.</TD></TR>
+<TR><TD><CODE>options</CODE><BR /><I>object</I></TD><TD>Optional: Extra command options if any.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="flexvolumesource-v1-core">FlexVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>FlexVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>driver</CODE><BR /><I>string</I></TD><TD>Driver is the name of the driver to use for this volume.</TD></TR>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. The default filesystem depends on FlexVolume script.</TD></TR>
+<TR><TD><CODE>options</CODE><BR /><I>object</I></TD><TD>Optional: Extra command options if any.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="flockervolumesource-v1-core">FlockerVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>FlockerVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Flocker volume mounted by the Flocker agent. One and only one of datasetName and datasetUUID should be set. Flocker volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>datasetName</CODE><BR /><I>string</I></TD><TD>Name of the dataset stored as metadata -&gt; name on the dataset for Flocker should be considered as deprecated</TD></TR>
+<TR><TD><CODE>datasetUUID</CODE><BR /><I>string</I></TD><TD>UUID of the dataset. This is unique identifier of a Flocker dataset</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io">FlowDistinguisherMethod v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>FlowDistinguisherMethod</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>FlowDistinguisherMethod specifies the method of a flow distinguisher.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#flowschemaspec-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaSpec [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>`type` is the type of flow distinguisher method The supported types are &#34;ByUser&#34; and &#34;ByNamespace&#34;. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaCondition v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>FlowSchemaCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>FlowSchemaCondition describes conditions for a FlowSchema.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#flowschemastatus-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaStatus [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>`lastTransitionTime` is the last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>`message` is a human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>`reason` is a unique, one-word, CamelCase reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>`status` is the status of the condition. Can be True, False, Unknown. Required.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>`type` is the type of the condition. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="forzone-v1-discovery-k8s-io">ForZone v1 discovery.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ForZone</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ForZone provides information about which zones should consume this endpoint.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#forzone-v1beta1-discovery-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointhints-v1-discovery-k8s-io">EndpointHints [discovery/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name represents the name of the zone.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="gcepersistentdiskvolumesource-v1-core">GCEPersistentDiskVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>GCEPersistentDiskVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Persistent Disk resource in Google Compute Engine.
+
+A GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk</TD></TR>
+<TR><TD><CODE>partition</CODE><BR /><I>integer</I></TD><TD>The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as &#34;1&#34;. Similarly, the volume partition for /dev/sda is &#34;0&#34; (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk</TD></TR>
+<TR><TD><CODE>pdName</CODE><BR /><I>string</I></TD><TD>Unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="gitrepovolumesource-v1-core">GitRepoVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>GitRepoVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a volume that is populated with the contents of a git repository. Git repo volumes do not support ownership management. Git repo volumes support SELinux relabeling.
+
+DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod&#39;s container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>directory</CODE><BR /><I>string</I></TD><TD>Target directory name. Must not contain or start with &#39;..&#39;.  If &#39;.&#39; is supplied, the volume directory will be the git repository.  Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.</TD></TR>
+<TR><TD><CODE>repository</CODE><BR /><I>string</I></TD><TD>Repository URL</TD></TR>
+<TR><TD><CODE>revision</CODE><BR /><I>string</I></TD><TD>Commit hash for the specified revision.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="glusterfspersistentvolumesource-v1-core">GlusterfsPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>GlusterfsPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>endpoints</CODE><BR /><I>string</I></TD><TD>EndpointsName is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod</TD></TR>
+<TR><TD><CODE>endpointsNamespace</CODE><BR /><I>string</I></TD><TD>EndpointsNamespace is the namespace that contains Glusterfs endpoint. If this field is empty, the EndpointNamespace defaults to the same namespace as the bound PVC. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="glusterfsvolumesource-v1-core">GlusterfsVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>GlusterfsVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>endpoints</CODE><BR /><I>string</I></TD><TD>EndpointsName is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="groupsubject-v1beta1-flowcontrol-apiserver-k8s-io">GroupSubject v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>GroupSubject</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>GroupSubject holds detailed information for group-kind subject.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#subject-v1beta1-flowcontrol-apiserver-k8s-io">Subject [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the user group that matches, or &#34;*&#34; to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="groupversionfordiscovery-v1-meta">GroupVersionForDiscovery v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>GroupVersionForDiscovery</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>GroupVersion contains the &#34;group/version&#34; and &#34;version&#34; string of a version. It is made a struct to keep extensibility.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apigroup-v1-meta">APIGroup [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>groupVersion</CODE><BR /><I>string</I></TD><TD>groupVersion specifies the API group and version in the form &#34;group/version&#34;</TD></TR>
+<TR><TD><CODE>version</CODE><BR /><I>string</I></TD><TD>version specifies the version in the form of &#34;version&#34;. This is to save the clients the trouble of splitting the GroupVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="hpascalingpolicy-v2beta2-autoscaling">HPAScalingPolicy v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>HPAScalingPolicy</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HPAScalingPolicy is a single policy which must hold true for a specified past interval.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#hpascalingrules-v2beta2-autoscaling">HPAScalingRules [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>periodSeconds</CODE><BR /><I>integer</I></TD><TD>PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type is used to specify the scaling policy.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>integer</I></TD><TD>Value contains the amount of change which is permitted by the policy. It must be greater than zero</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="hpascalingrules-v2beta2-autoscaling">HPAScalingRules v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>HPAScalingRules</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerbehavior-v2beta2-autoscaling">HorizontalPodAutoscalerBehavior [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policies</CODE><BR /><I><a href="#hpascalingpolicy-v2beta2-autoscaling">HPAScalingPolicy</a> array</I></TD><TD>policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid</TD></TR>
+<TR><TD><CODE>selectPolicy</CODE><BR /><I>string</I></TD><TD>selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.</TD></TR>
+<TR><TD><CODE>stabilizationWindowSeconds</CODE><BR /><I>integer</I></TD><TD>StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="httpgetaction-v1-core">HTTPGetAction v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>HTTPGetAction</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HTTPGetAction describes an action based on HTTP Get requests.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#handler-v1-core">Handler [core/v1]</a></LI>
+  <LI><a href="#probe-v1-core">Probe [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>host</CODE><BR /><I>string</I></TD><TD>Host name to connect to, defaults to the pod IP. You probably want to set &#34;Host&#34; in httpHeaders instead.</TD></TR>
+<TR><TD><CODE>httpHeaders</CODE><BR /><I><a href="#httpheader-v1-core">HTTPHeader</a> array</I></TD><TD>Custom headers to set in the request. HTTP allows repeated headers.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path to access on the HTTP server.</TD></TR>
+<TR><TD><CODE>port</CODE></TD><TD>Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.</TD></TR>
+<TR><TD><CODE>scheme</CODE><BR /><I>string</I></TD><TD>Scheme to use for connecting to the host. Defaults to HTTP.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="httpheader-v1-core">HTTPHeader v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>HTTPHeader</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HTTPHeader describes a custom header to be used in HTTP probes</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#httpgetaction-v1-core">HTTPGetAction [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The header field name</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>string</I></TD><TD>The header field value</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="httpingresspath-v1-networking-k8s-io">HTTPIngressPath v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>HTTPIngressPath</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#httpingresspath-v1beta1-networking-k8s-io">v1beta1</a>
+<a href="#httpingresspath-v1beta1-extensions">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#httpingressrulevalue-v1-networking-k8s-io">HTTPIngressRuleValue [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>backend</CODE><BR /><I><a href="#ingressbackend-v1-networking-k8s-io">IngressBackend</a></I></TD><TD>Backend defines the referenced service endpoint to which the traffic will be forwarded to.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional &#34;path&#34; part of a URL as defined by RFC 3986. Paths must begin with a &#39;/&#39;. When unspecified, all paths from incoming requests are matched.</TD></TR>
+<TR><TD><CODE>pathType</CODE><BR /><I>string</I></TD><TD>PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by &#39;/&#39;. Matching is   done on a path element by element basis. A path element refers is the   list of labels in the path split by the &#39;/&#39; separator. A request is a   match for path p if every p is an element-wise prefix of p of the   request path. Note that if the last element of the path is a substring   of the last element in request path, it is not a match (e.g. /foo/bar   matches /foo/bar/baz, but does not match /foo/barbaz). * ImplementationSpecific: Interpretation of the Path matching is up to   the IngressClass. Implementations can treat this as a separate PathType   or treat it identically to Prefix or Exact path types. Implementations are required to support all path types.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="httpingressrulevalue-v1-networking-k8s-io">HTTPIngressRuleValue v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>HTTPIngressRuleValue</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://&lt;host&gt;/&lt;path&gt;?&lt;searchpart&gt; -&gt; backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last &#39;/&#39; and before the first &#39;?&#39; or &#39;#&#39;.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#httpingressrulevalue-v1beta1-networking-k8s-io">v1beta1</a>
+<a href="#httpingressrulevalue-v1beta1-extensions">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressrule-v1-networking-k8s-io">IngressRule [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>paths</CODE><BR /><I><a href="#httpingresspath-v1-networking-k8s-io">HTTPIngressPath</a> array</I></TD><TD>A collection of paths that map requests to backends.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="handler-v1-core">Handler v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Handler</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Handler defines a specific action that should be taken</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#lifecycle-v1-core">Lifecycle [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>exec</CODE><BR /><I><a href="#execaction-v1-core">ExecAction</a></I></TD><TD>One and only one of the following should be specified. Exec specifies the action to take.</TD></TR>
+<TR><TD><CODE>httpGet</CODE><BR /><I><a href="#httpgetaction-v1-core">HTTPGetAction</a></I></TD><TD>HTTPGet specifies the http request to perform.</TD></TR>
+<TR><TD><CODE>tcpSocket</CODE><BR /><I><a href="#tcpsocketaction-v1-core">TCPSocketAction</a></I></TD><TD>TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="horizontalpodautoscalerbehavior-v2beta2-autoscaling">HorizontalPodAutoscalerBehavior v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>HorizontalPodAutoscalerBehavior</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HorizontalPodAutoscalerBehavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively).</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerspec-v2beta2-autoscaling">HorizontalPodAutoscalerSpec [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>scaleDown</CODE><BR /><I><a href="#hpascalingrules-v2beta2-autoscaling">HPAScalingRules</a></I></TD><TD>scaleDown is scaling policy for scaling Down. If not set, the default value is to allow to scale down to minReplicas pods, with a 300 second stabilization window (i.e., the highest recommendation for the last 300sec is used).</TD></TR>
+<TR><TD><CODE>scaleUp</CODE><BR /><I><a href="#hpascalingrules-v2beta2-autoscaling">HPAScalingRules</a></I></TD><TD>scaleUp is scaling policy for scaling Up. If not set, the default value is the higher of:   * increase no more than 4 pods per 60 seconds   * double the number of pods per 60 seconds No stabilization is used.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="horizontalpodautoscalercondition-v2beta2-autoscaling">HorizontalPodAutoscalerCondition v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>HorizontalPodAutoscalerCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#horizontalpodautoscalercondition-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerstatus-v2beta2-autoscaling">HorizontalPodAutoscalerStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastTransitionTime is the last time the condition transitioned from one status to another</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>message is a human-readable explanation containing details about the transition</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason is the reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>status is the status of the condition (True, False, Unknown)</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type describes the current condition</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="hostalias-v1-core">HostAlias v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>HostAlias</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod&#39;s hosts file.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hostnames</CODE><BR /><I>string array</I></TD><TD>Hostnames for the above IP address.</TD></TR>
+<TR><TD><CODE>ip</CODE><BR /><I>string</I></TD><TD>IP address of the host file entry.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="hostpathvolumesource-v1-core">HostPathVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>HostPathVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a host path mapped into a pod. Host path volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type for HostPath Volume Defaults to &#34;&#34; More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="hostportrange-v1beta1-policy">HostPortRange v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>HostPortRange</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.  It requires both the start and end to be defined.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>max</CODE><BR /><I>integer</I></TD><TD>max is the end of the range, inclusive.</TD></TR>
+<TR><TD><CODE>min</CODE><BR /><I>integer</I></TD><TD>min is the start of the range, inclusive.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="idrange-v1beta1-policy">IDRange v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IDRange</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IDRange provides a min/max of an allowed range of IDs.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#fsgroupstrategyoptions-v1beta1-policy">FSGroupStrategyOptions [policy/v1beta1]</a></LI>
+  <LI><a href="#runasgroupstrategyoptions-v1beta1-policy">RunAsGroupStrategyOptions [policy/v1beta1]</a></LI>
+  <LI><a href="#runasuserstrategyoptions-v1beta1-policy">RunAsUserStrategyOptions [policy/v1beta1]</a></LI>
+  <LI><a href="#supplementalgroupsstrategyoptions-v1beta1-policy">SupplementalGroupsStrategyOptions [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>max</CODE><BR /><I>integer</I></TD><TD>max is the end of the range, inclusive.</TD></TR>
+<TR><TD><CODE>min</CODE><BR /><I>integer</I></TD><TD>min is the start of the range, inclusive.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ipblock-v1-networking-k8s-io">IPBlock v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>IPBlock</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IPBlock describes a particular CIDR (Ex. &#34;192.168.1.1/24&#34;,&#34;2001:db9::/64&#34;) that is allowed to the pods matched by a NetworkPolicySpec&#39;s podSelector. The except entry describes CIDRs that should not be included within this rule.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#networkpolicypeer-v1-networking-k8s-io">NetworkPolicyPeer [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>cidr</CODE><BR /><I>string</I></TD><TD>CIDR is a string representing the IP Block Valid examples are &#34;192.168.1.1/24&#34; or &#34;2001:db9::/64&#34;</TD></TR>
+<TR><TD><CODE>except</CODE><BR /><I>string array</I></TD><TD>Except is a slice of CIDRs that should not be included within an IP Block Valid examples are &#34;192.168.1.1/24&#34; or &#34;2001:db9::/64&#34; Except values will be rejected if they are outside the CIDR range</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="iscsipersistentvolumesource-v1-core">ISCSIPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ISCSIPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ISCSIPersistentVolumeSource represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>chapAuthDiscovery</CODE><BR /><I>boolean</I></TD><TD>whether support iSCSI Discovery CHAP authentication</TD></TR>
+<TR><TD><CODE>chapAuthSession</CODE><BR /><I>boolean</I></TD><TD>whether support iSCSI Session CHAP authentication</TD></TR>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi</TD></TR>
+<TR><TD><CODE>initiatorName</CODE><BR /><I>string</I></TD><TD>Custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface &lt;target portal&gt;:&lt;volume name&gt; will be created for the connection.</TD></TR>
+<TR><TD><CODE>iqn</CODE><BR /><I>string</I></TD><TD>Target iSCSI Qualified Name.</TD></TR>
+<TR><TD><CODE>iscsiInterface</CODE><BR /><I>string</I></TD><TD>iSCSI Interface Name that uses an iSCSI transport. Defaults to &#39;default&#39; (tcp).</TD></TR>
+<TR><TD><CODE>lun</CODE><BR /><I>integer</I></TD><TD>iSCSI Target Lun number.</TD></TR>
+<TR><TD><CODE>portals</CODE><BR /><I>string array</I></TD><TD>iSCSI Target Portal List. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>CHAP Secret for iSCSI target and initiator authentication</TD></TR>
+<TR><TD><CODE>targetPortal</CODE><BR /><I>string</I></TD><TD>iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="iscsivolumesource-v1-core">ISCSIVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ISCSIVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>chapAuthDiscovery</CODE><BR /><I>boolean</I></TD><TD>whether support iSCSI Discovery CHAP authentication</TD></TR>
+<TR><TD><CODE>chapAuthSession</CODE><BR /><I>boolean</I></TD><TD>whether support iSCSI Session CHAP authentication</TD></TR>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi</TD></TR>
+<TR><TD><CODE>initiatorName</CODE><BR /><I>string</I></TD><TD>Custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface &lt;target portal&gt;:&lt;volume name&gt; will be created for the connection.</TD></TR>
+<TR><TD><CODE>iqn</CODE><BR /><I>string</I></TD><TD>Target iSCSI Qualified Name.</TD></TR>
+<TR><TD><CODE>iscsiInterface</CODE><BR /><I>string</I></TD><TD>iSCSI Interface Name that uses an iSCSI transport. Defaults to &#39;default&#39; (tcp).</TD></TR>
+<TR><TD><CODE>lun</CODE><BR /><I>integer</I></TD><TD>iSCSI Target Lun number.</TD></TR>
+<TR><TD><CODE>portals</CODE><BR /><I>string array</I></TD><TD>iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>CHAP Secret for iSCSI target and initiator authentication</TD></TR>
+<TR><TD><CODE>targetPortal</CODE><BR /><I>string</I></TD><TD>iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ingressbackend-v1-networking-k8s-io">IngressBackend v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>IngressBackend</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IngressBackend describes all endpoints for a given service and port.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressbackend-v1beta1-networking-k8s-io">v1beta1</a>
+<a href="#ingressbackend-v1beta1-extensions">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#httpingresspath-v1-networking-k8s-io">HTTPIngressPath [networking/v1]</a></LI>
+  <LI><a href="#ingressspec-v1-networking-k8s-io">IngressSpec [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>resource</CODE><BR /><I><a href="#typedlocalobjectreference-v1-core">TypedLocalObjectReference</a></I></TD><TD>Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with &#34;Service&#34;.</TD></TR>
+<TR><TD><CODE>service</CODE><BR /><I><a href="#ingressservicebackend-v1-networking-k8s-io">IngressServiceBackend</a></I></TD><TD>Service references a Service as a Backend. This is a mutually exclusive setting with &#34;Resource&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ingressclassparametersreference-v1-networking-k8s-io">IngressClassParametersReference v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>IngressClassParametersReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressclassparametersreference-v1beta1-networking-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressclassspec-v1-networking-k8s-io">IngressClassSpec [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is the type of resource being referenced.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of resource being referenced.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace is the namespace of the resource being referenced. This field is required when scope is set to &#34;Namespace&#34; and must be unset when scope is set to &#34;Cluster&#34;.</TD></TR>
+<TR><TD><CODE>scope</CODE><BR /><I>string</I></TD><TD>Scope represents if this refers to a cluster or namespace scoped resource. This may be set to &#34;Cluster&#34; (default) or &#34;Namespace&#34;. Field can be enabled with IngressClassNamespacedParams feature gate.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ingressrule-v1-networking-k8s-io">IngressRule v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>IngressRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressrule-v1beta1-networking-k8s-io">v1beta1</a>
+<a href="#ingressrule-v1beta1-extensions">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressspec-v1-networking-k8s-io">IngressSpec [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>host</CODE><BR /><I>string</I></TD><TD>Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the &#34;host&#34; part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to    the IP in the Spec of the parent Ingress. 2. The `:` delimiter is not respected because ports are not allowed. 	  Currently the port of an Ingress is implicitly :80 for http and 	  :443 for https. Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.  Host can be &#34;precise&#34; which is a domain name without the terminating dot of a network host (e.g. &#34;foo.bar.com&#34;) or &#34;wildcard&#34;, which is a domain name prefixed with a single wildcard label (e.g. &#34;*.foo.com&#34;). The wildcard character &#39;\*&#39; must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == &#34;*&#34;). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.</TD></TR>
+<TR><TD><CODE>http</CODE><BR /><I><a href="#httpingressrulevalue-v1-networking-k8s-io">HTTPIngressRuleValue</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ingressservicebackend-v1-networking-k8s-io">IngressServiceBackend v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>IngressServiceBackend</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IngressServiceBackend references a Kubernetes Service as a Backend.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressbackend-v1-networking-k8s-io">IngressBackend [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the referenced service. The service must exist in the same namespace as the Ingress object.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I><a href="#servicebackendport-v1-networking-k8s-io">ServiceBackendPort</a></I></TD><TD>Port of the referenced service. A port name or port number is required for a IngressServiceBackend.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ingresstls-v1-networking-k8s-io">IngressTLS v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>IngressTLS</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IngressTLS describes the transport layer security associated with an Ingress.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingresstls-v1beta1-networking-k8s-io">v1beta1</a>
+<a href="#ingresstls-v1beta1-extensions">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressspec-v1-networking-k8s-io">IngressSpec [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hosts</CODE><BR /><I>string array</I></TD><TD>Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.</TD></TR>
+<TR><TD><CODE>secretName</CODE><BR /><I>string</I></TD><TD>SecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the &#34;Host&#34; header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="json-v1-apiextensions-k8s-io">JSON v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>JSON</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#json-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>JSONSchemaProps</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcevalidation-v1-apiextensions-k8s-io">CustomResourceValidation [apiextensions/v1]</a></LI>
+  <LI><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>$ref</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>$schema</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>additionalItems</CODE><BR /><I><a href="#jsonschemapropsorbool-v1-apiextensions-k8s-io">JSONSchemaPropsOrBool</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>additionalProperties</CODE><BR /><I><a href="#jsonschemapropsorbool-v1-apiextensions-k8s-io">JSONSchemaPropsOrBool</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>allOf</CODE><BR /><I><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>anyOf</CODE><BR /><I><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>default</CODE><BR /><I><a href="#json-v1-apiextensions-k8s-io">JSON</a></I></TD><TD>default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false.</TD></TR>
+<TR><TD><CODE>definitions</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>dependencies</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>enum</CODE><BR /><I><a href="#json-v1-apiextensions-k8s-io">JSON</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>example</CODE><BR /><I><a href="#json-v1-apiextensions-k8s-io">JSON</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>exclusiveMaximum</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>exclusiveMinimum</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>externalDocs</CODE><BR /><I><a href="#externaldocumentation-v1-apiextensions-k8s-io">ExternalDocumentation</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>format</CODE><BR /><I>string</I></TD><TD>format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:  - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like &#34;0321751043&#34; or &#34;978-0321751041&#34; - isbn10: an ISBN10 number string like &#34;0321751043&#34; - isbn13: an ISBN13 number string like &#34;978-0321751041&#34; - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like &#34;#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like &#34;rgb(255,255,2559&#34; - byte: base64 encoded binary data - password: any kind of string - date: a date string like &#34;2006-01-02&#34; as defined by full-date in RFC3339 - duration: a duration string like &#34;22 ns&#34; as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like &#34;2014-12-15T19:30:20.000Z&#34; as defined by date-time in RFC3339.</TD></TR>
+<TR><TD><CODE>id</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#jsonschemapropsorarray-v1-apiextensions-k8s-io">JSONSchemaPropsOrArray</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>maxItems</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>maxLength</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>maxProperties</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>maximum</CODE><BR /><I>number</I></TD><TD></TD></TR>
+<TR><TD><CODE>minItems</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>minLength</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>minProperties</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>minimum</CODE><BR /><I>number</I></TD><TD></TD></TR>
+<TR><TD><CODE>multipleOf</CODE><BR /><I>number</I></TD><TD></TD></TR>
+<TR><TD><CODE>not</CODE><BR /><I><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>nullable</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>oneOf</CODE><BR /><I><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>pattern</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>patternProperties</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>properties</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>required</CODE><BR /><I>string array</I></TD><TD></TD></TR>
+<TR><TD><CODE>title</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>uniqueItems</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>x-kubernetes-embedded-resource</CODE><BR /><I>boolean</I></TD><TD>x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).</TD></TR>
+<TR><TD><CODE>x-kubernetes-int-or-string</CODE><BR /><I>boolean</I></TD><TD>x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:  1) anyOf:    - type: integer    - type: string 2) allOf:    - anyOf:      - type: integer      - type: string    - ... zero or more</TD></TR>
+<TR><TD><CODE>x-kubernetes-list-map-keys</CODE><BR /><I>string array</I></TD><TD>x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.  This tag MUST only be used on lists that have the &#34;x-kubernetes-list-type&#34; extension set to &#34;map&#34;. Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).  The properties specified must either be required or have a default value, to ensure those properties are present for all list items.</TD></TR>
+<TR><TD><CODE>x-kubernetes-list-type</CODE><BR /><I>string</I></TD><TD>x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:  1) `atomic`: the list is treated as a single entity, like a scalar.      Atomic lists will be entirely replaced when updated. This extension      may be used on any type of list (struct, scalar, ...). 2) `set`:      Sets are lists that must not have multiple items with the same value. Each      value must be a scalar, an object with x-kubernetes-map-type `atomic` or an      array with x-kubernetes-list-type `atomic`. 3) `map`:      These lists are like maps in that their elements have a non-index key      used to identify them. Order is preserved upon merge. The map tag      must only be used on a list with elements of type object. Defaults to atomic for arrays.</TD></TR>
+<TR><TD><CODE>x-kubernetes-map-type</CODE><BR /><I>string</I></TD><TD>x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:  1) `granular`:      These maps are actual maps (key-value pairs) and each fields are independent      from each other (they can each be manipulated by separate actors). This is      the default behaviour for all maps. 2) `atomic`: the list is treated as a single entity, like a scalar.      Atomic maps will be entirely replaced when updated.</TD></TR>
+<TR><TD><CODE>x-kubernetes-preserve-unknown-fields</CODE><BR /><I>boolean</I></TD><TD>x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="jsonschemapropsorarray-v1-apiextensions-k8s-io">JSONSchemaPropsOrArray v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>JSONSchemaPropsOrArray</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jsonschemapropsorarray-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="jsonschemapropsorbool-v1-apiextensions-k8s-io">JSONSchemaPropsOrBool v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>JSONSchemaPropsOrBool</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jsonschemapropsorbool-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="jobcondition-v1-batch">JobCondition v1 batch</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>JobCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>JobCondition describes current state of a job.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jobstatus-v1-batch">JobStatus [batch/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastProbeTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition was checked.</TD></TR>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transit from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Human readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>(brief) reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of job condition, Complete or Failed.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="jobtemplatespec-v1-batch">JobTemplateSpec v1 batch</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>JobTemplateSpec</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>JobTemplateSpec describes the data a Job should have when created from a template</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jobtemplatespec-v1beta1-batch">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjobspec-v1-batch">CronJobSpec [batch/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#jobspec-v1-batch">JobSpec</a></I></TD><TD>Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="keytopath-v1-core">KeyToPath v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>KeyToPath</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Maps a string key to a path within a volume.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#configmapprojection-v1-core">ConfigMapProjection [core/v1]</a></LI>
+  <LI><a href="#configmapvolumesource-v1-core">ConfigMapVolumeSource [core/v1]</a></LI>
+  <LI><a href="#secretprojection-v1-core">SecretProjection [core/v1]</a></LI>
+  <LI><a href="#secretvolumesource-v1-core">SecretVolumeSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>key</CODE><BR /><I>string</I></TD><TD>The key to project.</TD></TR>
+<TR><TD><CODE>mode</CODE><BR /><I>integer</I></TD><TD>Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>The relative path of the file to map the key to. May not be an absolute path. May not contain the path element &#39;..&#39;. May not start with the string &#39;..&#39;.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="labelselector-v1-meta">LabelSelector v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LabelSelector</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#aggregationrule-v1-rbac-authorization-k8s-io">AggregationRule [rbac/v1]</a></LI>
+  <LI><a href="#aggregationrule-v1beta1-rbac-authorization-k8s-io">AggregationRule [rbac/v1beta1]</a></LI>
+  <LI><a href="#aggregationrule-v1alpha1-rbac-authorization-k8s-io">AggregationRule [rbac/v1alpha1]</a></LI>
+  <LI><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity [storage/v1beta1]</a></LI>
+  <LI><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity [storage/v1alpha1]</a></LI>
+  <LI><a href="#daemonsetspec-v1-apps">DaemonSetSpec [apps/v1]</a></LI>
+  <LI><a href="#deploymentspec-v1-apps">DeploymentSpec [apps/v1]</a></LI>
+  <LI><a href="#externalmetricsource-v2beta1-autoscaling">ExternalMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#externalmetricstatus-v2beta1-autoscaling">ExternalMetricStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#jobspec-v1-batch">JobSpec [batch/v1]</a></LI>
+  <LI><a href="#metricidentifier-v2beta2-autoscaling">MetricIdentifier [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#mutatingwebhook-v1-admissionregistration-k8s-io">MutatingWebhook [admissionregistration/v1]</a></LI>
+  <LI><a href="#mutatingwebhook-v1beta1-admissionregistration-k8s-io">MutatingWebhook [admissionregistration/v1beta1]</a></LI>
+  <LI><a href="#networkpolicypeer-v1-networking-k8s-io">NetworkPolicyPeer [networking/v1]</a></LI>
+  <LI><a href="#networkpolicyspec-v1-networking-k8s-io">NetworkPolicySpec [networking/v1]</a></LI>
+  <LI><a href="#objectmetricsource-v2beta1-autoscaling">ObjectMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#objectmetricstatus-v2beta1-autoscaling">ObjectMetricStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#persistentvolumeclaimspec-v1-core">PersistentVolumeClaimSpec [core/v1]</a></LI>
+  <LI><a href="#podaffinityterm-v1-core">PodAffinityTerm [core/v1]</a></LI>
+  <LI><a href="#poddisruptionbudgetspec-v1-policy">PodDisruptionBudgetSpec [policy/v1]</a></LI>
+  <LI><a href="#poddisruptionbudgetspec-v1beta1-policy">PodDisruptionBudgetSpec [policy/v1beta1]</a></LI>
+  <LI><a href="#podsmetricsource-v2beta1-autoscaling">PodsMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#podsmetricstatus-v2beta1-autoscaling">PodsMetricStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#replicasetspec-v1-apps">ReplicaSetSpec [apps/v1]</a></LI>
+  <LI><a href="#statefulsetspec-v1-apps">StatefulSetSpec [apps/v1]</a></LI>
+  <LI><a href="#topologyspreadconstraint-v1-core">TopologySpreadConstraint [core/v1]</a></LI>
+  <LI><a href="#validatingwebhook-v1-admissionregistration-k8s-io">ValidatingWebhook [admissionregistration/v1]</a></LI>
+  <LI><a href="#validatingwebhook-v1beta1-admissionregistration-k8s-io">ValidatingWebhook [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>matchExpressions</CODE><BR /><I><a href="#labelselectorrequirement-v1-meta">LabelSelectorRequirement</a> array</I></TD><TD>matchExpressions is a list of label selector requirements. The requirements are ANDed.</TD></TR>
+<TR><TD><CODE>matchLabels</CODE><BR /><I>object</I></TD><TD>matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is &#34;key&#34;, the operator is &#34;In&#34;, and the values array contains only &#34;value&#34;. The requirements are ANDed.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="labelselectorrequirement-v1-meta">LabelSelectorRequirement v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LabelSelectorRequirement</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#labelselector-v1-meta">LabelSelector [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>key</CODE><BR /><I>string</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>key</I></TD><TD>key is the label key that the selector applies to.</TD></TR>
+<TR><TD><CODE>operator</CODE><BR /><I>string</I></TD><TD>operator represents a key&#39;s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.</TD></TR>
+<TR><TD><CODE>values</CODE><BR /><I>string array</I></TD><TD>values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="lifecycle-v1-core">Lifecycle v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Lifecycle</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>postStart</CODE><BR /><I><a href="#handler-v1-core">Handler</a></I></TD><TD>PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks</TD></TR>
+<TR><TD><CODE>preStop</CODE><BR /><I><a href="#handler-v1-core">Handler</a></I></TD><TD>PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod&#39;s termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod&#39;s termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="limitrangeitem-v1-core">LimitRangeItem v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LimitRangeItem</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>LimitRangeItem defines a min/max usage limit for any resource that matches on kind.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#limitrangespec-v1-core">LimitRangeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>default</CODE><BR /><I>object</I></TD><TD>Default resource requirement limit value by resource name if resource limit is omitted.</TD></TR>
+<TR><TD><CODE>defaultRequest</CODE><BR /><I>object</I></TD><TD>DefaultRequest is the default resource requirement request value by resource name if resource request is omitted.</TD></TR>
+<TR><TD><CODE>max</CODE><BR /><I>object</I></TD><TD>Max usage constraints on this kind by resource name.</TD></TR>
+<TR><TD><CODE>maxLimitRequestRatio</CODE><BR /><I>object</I></TD><TD>MaxLimitRequestRatio if specified, the named resource must have a request and limit that are both non-zero where limit divided by request is less than or equal to the enumerated value; this represents the max burst for the named resource.</TD></TR>
+<TR><TD><CODE>min</CODE><BR /><I>object</I></TD><TD>Min usage constraints on this kind by resource name.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of resource that this limit applies to.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="limitresponse-v1beta1-flowcontrol-apiserver-k8s-io">LimitResponse v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>LimitResponse</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>LimitResponse defines how to handle requests that can not be executed right now.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">LimitedPriorityLevelConfiguration [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>queuing</CODE><BR /><I><a href="#queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">QueuingConfiguration</a></I></TD><TD>`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `&#34;Queue&#34;`.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>`type` is &#34;Queue&#34; or &#34;Reject&#34;. &#34;Queue&#34; means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. &#34;Reject&#34; means that requests that can not be executed upon arrival are rejected. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">LimitedPriorityLevelConfiguration v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>LimitedPriorityLevelConfiguration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:
+ * How are requests for this priority level limited?
+ * What should be done with requests that exceed the limit?</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#prioritylevelconfigurationspec-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationSpec [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>assuredConcurrencyShares</CODE><BR /><I>integer</I></TD><TD>`assuredConcurrencyShares` (ACS) configures the execution limit, which is a limit on the number of requests of this priority level that may be exeucting at a given time.  ACS must be a positive number. The server&#39;s concurrency limit (SCL) is divided among the concurrency-controlled priority levels in proportion to their assured concurrency shares. This produces the assured concurrency value (ACV) --- the number of requests that may be executing at a time --- for each such priority level:              ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )  bigger numbers of ACS mean more reserved concurrent requests (at the expense of every other PL). This field has a default value of 30.</TD></TR>
+<TR><TD><CODE>limitResponse</CODE><BR /><I><a href="#limitresponse-v1beta1-flowcontrol-apiserver-k8s-io">LimitResponse</a></I></TD><TD>`limitResponse` indicates what to do with requests that can not be executed right now</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="listmeta-v1-meta">ListMeta v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ListMeta</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicelist-v1-apiregistration-k8s-io">APIServiceList [apiregistration/v1]</a></LI>
+  <LI><a href="#apiservicelist-v1beta1-apiregistration-k8s-io">APIServiceList [apiregistration/v1beta1]</a></LI>
+  <LI><a href="#csidriverlist-v1-storage-k8s-io">CSIDriverList [storage/v1]</a></LI>
+  <LI><a href="#csidriverlist-v1beta1-storage-k8s-io">CSIDriverList [storage/v1beta1]</a></LI>
+  <LI><a href="#csinodelist-v1-storage-k8s-io">CSINodeList [storage/v1]</a></LI>
+  <LI><a href="#csinodelist-v1beta1-storage-k8s-io">CSINodeList [storage/v1beta1]</a></LI>
+  <LI><a href="#csistoragecapacitylist-v1beta1-storage-k8s-io">CSIStorageCapacityList [storage/v1beta1]</a></LI>
+  <LI><a href="#csistoragecapacitylist-v1alpha1-storage-k8s-io">CSIStorageCapacityList [storage/v1alpha1]</a></LI>
+  <LI><a href="#certificatesigningrequestlist-v1-certificates-k8s-io">CertificateSigningRequestList [certificates/v1]</a></LI>
+  <LI><a href="#certificatesigningrequestlist-v1beta1-certificates-k8s-io">CertificateSigningRequestList [certificates/v1beta1]</a></LI>
+  <LI><a href="#clusterrolebindinglist-v1-rbac-authorization-k8s-io">ClusterRoleBindingList [rbac/v1]</a></LI>
+  <LI><a href="#clusterrolebindinglist-v1beta1-rbac-authorization-k8s-io">ClusterRoleBindingList [rbac/v1beta1]</a></LI>
+  <LI><a href="#clusterrolebindinglist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBindingList [rbac/v1alpha1]</a></LI>
+  <LI><a href="#clusterrolelist-v1-rbac-authorization-k8s-io">ClusterRoleList [rbac/v1]</a></LI>
+  <LI><a href="#clusterrolelist-v1beta1-rbac-authorization-k8s-io">ClusterRoleList [rbac/v1beta1]</a></LI>
+  <LI><a href="#clusterrolelist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleList [rbac/v1alpha1]</a></LI>
+  <LI><a href="#componentstatuslist-v1-core">ComponentStatusList [core/v1]</a></LI>
+  <LI><a href="#configmaplist-v1-core">ConfigMapList [core/v1]</a></LI>
+  <LI><a href="#controllerrevisionlist-v1-apps">ControllerRevisionList [apps/v1]</a></LI>
+  <LI><a href="#cronjoblist-v1-batch">CronJobList [batch/v1]</a></LI>
+  <LI><a href="#cronjoblist-v1beta1-batch">CronJobList [batch/v1beta1]</a></LI>
+  <LI><a href="#customresourcedefinitionlist-v1-apiextensions-k8s-io">CustomResourceDefinitionList [apiextensions/v1]</a></LI>
+  <LI><a href="#customresourcedefinitionlist-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionList [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#daemonsetlist-v1-apps">DaemonSetList [apps/v1]</a></LI>
+  <LI><a href="#deploymentlist-v1-apps">DeploymentList [apps/v1]</a></LI>
+  <LI><a href="#endpointslicelist-v1-discovery-k8s-io">EndpointSliceList [discovery/v1]</a></LI>
+  <LI><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList [discovery/v1beta1]</a></LI>
+  <LI><a href="#endpointslist-v1-core">EndpointsList [core/v1]</a></LI>
+  <LI><a href="#eventlist-v1-core">EventList [core/v1]</a></LI>
+  <LI><a href="#eventlist-v1-events-k8s-io">EventList [events/v1]</a></LI>
+  <LI><a href="#eventlist-v1beta1-events-k8s-io">EventList [events/v1beta1]</a></LI>
+  <LI><a href="#flowschemalist-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaList [flowcontrol/v1beta1]</a></LI>
+  <LI><a href="#horizontalpodautoscalerlist-v1-autoscaling">HorizontalPodAutoscalerList [autoscaling/v1]</a></LI>
+  <LI><a href="#horizontalpodautoscalerlist-v2beta2-autoscaling">HorizontalPodAutoscalerList [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#horizontalpodautoscalerlist-v2beta1-autoscaling">HorizontalPodAutoscalerList [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#ingressclasslist-v1-networking-k8s-io">IngressClassList [networking/v1]</a></LI>
+  <LI><a href="#ingressclasslist-v1beta1-networking-k8s-io">IngressClassList [networking/v1beta1]</a></LI>
+  <LI><a href="#ingresslist-v1-networking-k8s-io">IngressList [networking/v1]</a></LI>
+  <LI><a href="#ingresslist-v1beta1-extensions">IngressList [extensions/v1beta1]</a></LI>
+  <LI><a href="#ingresslist-v1beta1-networking-k8s-io">IngressList [networking/v1beta1]</a></LI>
+  <LI><a href="#joblist-v1-batch">JobList [batch/v1]</a></LI>
+  <LI><a href="#leaselist-v1-coordination-k8s-io">LeaseList [coordination/v1]</a></LI>
+  <LI><a href="#leaselist-v1beta1-coordination-k8s-io">LeaseList [coordination/v1beta1]</a></LI>
+  <LI><a href="#limitrangelist-v1-core">LimitRangeList [core/v1]</a></LI>
+  <LI><a href="#mutatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">MutatingWebhookConfigurationList [admissionregistration/v1]</a></LI>
+  <LI><a href="#mutatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfigurationList [admissionregistration/v1beta1]</a></LI>
+  <LI><a href="#namespacelist-v1-core">NamespaceList [core/v1]</a></LI>
+  <LI><a href="#networkpolicylist-v1-networking-k8s-io">NetworkPolicyList [networking/v1]</a></LI>
+  <LI><a href="#nodelist-v1-core">NodeList [core/v1]</a></LI>
+  <LI><a href="#persistentvolumeclaimlist-v1-core">PersistentVolumeClaimList [core/v1]</a></LI>
+  <LI><a href="#persistentvolumelist-v1-core">PersistentVolumeList [core/v1]</a></LI>
+  <LI><a href="#poddisruptionbudgetlist-v1-policy">PodDisruptionBudgetList [policy/v1]</a></LI>
+  <LI><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList [policy/v1beta1]</a></LI>
+  <LI><a href="#podlist-v1-core">PodList [core/v1]</a></LI>
+  <LI><a href="#podsecuritypolicylist-v1beta1-policy">PodSecurityPolicyList [policy/v1beta1]</a></LI>
+  <LI><a href="#podtemplatelist-v1-core">PodTemplateList [core/v1]</a></LI>
+  <LI><a href="#priorityclasslist-v1-scheduling-k8s-io">PriorityClassList [scheduling/v1]</a></LI>
+  <LI><a href="#priorityclasslist-v1beta1-scheduling-k8s-io">PriorityClassList [scheduling/v1beta1]</a></LI>
+  <LI><a href="#priorityclasslist-v1alpha1-scheduling-k8s-io">PriorityClassList [scheduling/v1alpha1]</a></LI>
+  <LI><a href="#prioritylevelconfigurationlist-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationList [flowcontrol/v1beta1]</a></LI>
+  <LI><a href="#replicasetlist-v1-apps">ReplicaSetList [apps/v1]</a></LI>
+  <LI><a href="#replicationcontrollerlist-v1-core">ReplicationControllerList [core/v1]</a></LI>
+  <LI><a href="#resourcequotalist-v1-core">ResourceQuotaList [core/v1]</a></LI>
+  <LI><a href="#rolebindinglist-v1-rbac-authorization-k8s-io">RoleBindingList [rbac/v1]</a></LI>
+  <LI><a href="#rolebindinglist-v1beta1-rbac-authorization-k8s-io">RoleBindingList [rbac/v1beta1]</a></LI>
+  <LI><a href="#rolebindinglist-v1alpha1-rbac-authorization-k8s-io">RoleBindingList [rbac/v1alpha1]</a></LI>
+  <LI><a href="#rolelist-v1-rbac-authorization-k8s-io">RoleList [rbac/v1]</a></LI>
+  <LI><a href="#rolelist-v1beta1-rbac-authorization-k8s-io">RoleList [rbac/v1beta1]</a></LI>
+  <LI><a href="#rolelist-v1alpha1-rbac-authorization-k8s-io">RoleList [rbac/v1alpha1]</a></LI>
+  <LI><a href="#runtimeclasslist-v1-node-k8s-io">RuntimeClassList [node/v1]</a></LI>
+  <LI><a href="#runtimeclasslist-v1beta1-node-k8s-io">RuntimeClassList [node/v1beta1]</a></LI>
+  <LI><a href="#runtimeclasslist-v1alpha1-node-k8s-io">RuntimeClassList [node/v1alpha1]</a></LI>
+  <LI><a href="#secretlist-v1-core">SecretList [core/v1]</a></LI>
+  <LI><a href="#serviceaccountlist-v1-core">ServiceAccountList [core/v1]</a></LI>
+  <LI><a href="#servicelist-v1-core">ServiceList [core/v1]</a></LI>
+  <LI><a href="#statefulsetlist-v1-apps">StatefulSetList [apps/v1]</a></LI>
+  <LI><a href="#status-v1-meta">Status [meta/v1]</a></LI>
+  <LI><a href="#storageclasslist-v1-storage-k8s-io">StorageClassList [storage/v1]</a></LI>
+  <LI><a href="#storageclasslist-v1beta1-storage-k8s-io">StorageClassList [storage/v1beta1]</a></LI>
+  <LI><a href="#storageversionlist-v1alpha1-internal-apiserver-k8s-io">StorageVersionList [apiserverinternal/v1alpha1]</a></LI>
+  <LI><a href="#validatingwebhookconfigurationlist-v1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList [admissionregistration/v1]</a></LI>
+  <LI><a href="#validatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList [admissionregistration/v1beta1]</a></LI>
+  <LI><a href="#volumeattachmentlist-v1-storage-k8s-io">VolumeAttachmentList [storage/v1]</a></LI>
+  <LI><a href="#volumeattachmentlist-v1beta1-storage-k8s-io">VolumeAttachmentList [storage/v1beta1]</a></LI>
+  <LI><a href="#volumeattachmentlist-v1alpha1-storage-k8s-io">VolumeAttachmentList [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>continue</CODE><BR /><I>string</I></TD><TD>continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a consistent list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response, unless you have received this token from an error message.</TD></TR>
+<TR><TD><CODE>remainingItemCount</CODE><BR /><I>integer</I></TD><TD>remainingItemCount is the number of subsequent items in the list which are not included in this list response. If the list request contained label or field selectors, then the number of remaining items is unknown and the field will be left unset and omitted during serialization. If the list is complete (either because it is not chunking or because this is the last chunk), then there are no more remaining items and this field will be left unset and omitted during serialization. Servers older than v1.15 do not set this field. The intended use of the remainingItemCount is *estimating* the size of a collection. Clients should not rely on the remainingItemCount to be set or to be exact.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE><BR /><I>string</I></TD><TD>String that identifies the server&#39;s internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency</TD></TR>
+<TR><TD><CODE>selfLink</CODE><BR /><I>string</I></TD><TD>selfLink is a URL representing this object. Populated by the system. Read-only.  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and the field is planned to be removed in 1.21 release.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="loadbalanceringress-v1-core">LoadBalancerIngress v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LoadBalancerIngress</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#loadbalancerstatus-v1-core">LoadBalancerStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hostname</CODE><BR /><I>string</I></TD><TD>Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)</TD></TR>
+<TR><TD><CODE>ip</CODE><BR /><I>string</I></TD><TD>IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#portstatus-v1-core">PortStatus</a> array</I></TD><TD>Ports is a list of records of service ports If used, every port defined in the service should have an entry in it</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="loadbalancerstatus-v1-core">LoadBalancerStatus v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LoadBalancerStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>LoadBalancerStatus represents the status of a load-balancer.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressstatus-v1-networking-k8s-io">IngressStatus [networking/v1]</a></LI>
+  <LI><a href="#ingressstatus-v1beta1-extensions">IngressStatus [extensions/v1beta1]</a></LI>
+  <LI><a href="#ingressstatus-v1beta1-networking-k8s-io">IngressStatus [networking/v1beta1]</a></LI>
+  <LI><a href="#servicestatus-v1-core">ServiceStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ingress</CODE><BR /><I><a href="#loadbalanceringress-v1-core">LoadBalancerIngress</a> array</I></TD><TD>Ingress is a list containing ingress points for the load-balancer. Traffic intended for the service should be sent to these ingress points.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="localobjectreference-v1-core">LocalObjectReference v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LocalObjectReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csivolumesource-v1-core">CSIVolumeSource [core/v1]</a></LI>
+  <LI><a href="#cephfsvolumesource-v1-core">CephFSVolumeSource [core/v1]</a></LI>
+  <LI><a href="#cindervolumesource-v1-core">CinderVolumeSource [core/v1]</a></LI>
+  <LI><a href="#flexvolumesource-v1-core">FlexVolumeSource [core/v1]</a></LI>
+  <LI><a href="#iscsivolumesource-v1-core">ISCSIVolumeSource [core/v1]</a></LI>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+  <LI><a href="#rbdvolumesource-v1-core">RBDVolumeSource [core/v1]</a></LI>
+  <LI><a href="#scaleiovolumesource-v1-core">ScaleIOVolumeSource [core/v1]</a></LI>
+  <LI><a href="#serviceaccount-v1-core">ServiceAccount [core/v1]</a></LI>
+  <LI><a href="#storageosvolumesource-v1-core">StorageOSVolumeSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="localvolumesource-v1-core">LocalVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>LocalVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Local represents directly-attached storage with node affinity (Beta feature)</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. It applies only when the Path is a block device. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. The default value is to auto-select a fileystem if unspecified.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>The full path to the volume on the node. It can be either a directory or block device (disk, partition, ...).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="managedfieldsentry-v1-meta">ManagedFieldsEntry v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ManagedFieldsEntry</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of the resource that the fieldset applies to.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#objectmeta-v1-meta">ObjectMeta [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the version of this resource that this field set applies to. The format is &#34;group/version&#34; just like the top-level APIVersion field. It is necessary to track the version of a field set because it cannot be automatically converted.</TD></TR>
+<TR><TD><CODE>fieldsType</CODE><BR /><I>string</I></TD><TD>FieldsType is the discriminator for the different fields format and version. There is currently only one possible value: &#34;FieldsV1&#34;</TD></TR>
+<TR><TD><CODE>fieldsV1</CODE><BR /><I><a href="#fieldsv1-v1-meta">FieldsV1</a></I></TD><TD>FieldsV1 holds the first JSON version format as described in the &#34;FieldsV1&#34; type.</TD></TR>
+<TR><TD><CODE>manager</CODE><BR /><I>string</I></TD><TD>Manager is an identifier of the workflow managing these fields.</TD></TR>
+<TR><TD><CODE>operation</CODE><BR /><I>string</I></TD><TD>Operation is the type of operation which lead to this ManagedFieldsEntry being created. The only valid values for this field are &#39;Apply&#39; and &#39;Update&#39;.</TD></TR>
+<TR><TD><CODE>time</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Time is timestamp of when these fields were set. It should always be empty if Operation is &#39;Apply&#39;</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="metricidentifier-v2beta2-autoscaling">MetricIdentifier v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>MetricIdentifier</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>MetricIdentifier defines the name and optionally selector for a metric</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#externalmetricsource-v2beta2-autoscaling">ExternalMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#externalmetricstatus-v2beta2-autoscaling">ExternalMetricStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#objectmetricsource-v2beta2-autoscaling">ObjectMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#objectmetricstatus-v2beta2-autoscaling">ObjectMetricStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#podsmetricsource-v2beta2-autoscaling">PodsMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#podsmetricstatus-v2beta2-autoscaling">PodsMetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the given metric</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="metricspec-v2beta2-autoscaling">MetricSpec v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>MetricSpec</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#metricspec-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerspec-v2beta2-autoscaling">HorizontalPodAutoscalerSpec [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerResource</CODE><BR /><I><a href="#containerresourcemetricsource-v2beta2-autoscaling">ContainerResourceMetricSource</a></I></TD><TD>container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.</TD></TR>
+<TR><TD><CODE>external</CODE><BR /><I><a href="#externalmetricsource-v2beta2-autoscaling">ExternalMetricSource</a></I></TD><TD>external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).</TD></TR>
+<TR><TD><CODE>object</CODE><BR /><I><a href="#objectmetricsource-v2beta2-autoscaling">ObjectMetricSource</a></I></TD><TD>object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).</TD></TR>
+<TR><TD><CODE>pods</CODE><BR /><I><a href="#podsmetricsource-v2beta2-autoscaling">PodsMetricSource</a></I></TD><TD>pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second).  The values will be averaged together before being compared to the target value.</TD></TR>
+<TR><TD><CODE>resource</CODE><BR /><I><a href="#resourcemetricsource-v2beta2-autoscaling">ResourceMetricSource</a></I></TD><TD>resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of metric source.  It should be one of &#34;ContainerResource&#34;, &#34;External&#34;, &#34;Object&#34;, &#34;Pods&#34; or &#34;Resource&#34;, each mapping to a matching field in the object. Note: &#34;ContainerResource&#34; type is available on when the feature-gate HPAContainerMetrics is enabled</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="metricstatus-v2beta2-autoscaling">MetricStatus v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>MetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>MetricStatus describes the last-read state of a single metric.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#metricstatus-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerstatus-v2beta2-autoscaling">HorizontalPodAutoscalerStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerResource</CODE><BR /><I><a href="#containerresourcemetricstatus-v2beta2-autoscaling">ContainerResourceMetricStatus</a></I></TD><TD>container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</TD></TR>
+<TR><TD><CODE>external</CODE><BR /><I><a href="#externalmetricstatus-v2beta2-autoscaling">ExternalMetricStatus</a></I></TD><TD>external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).</TD></TR>
+<TR><TD><CODE>object</CODE><BR /><I><a href="#objectmetricstatus-v2beta2-autoscaling">ObjectMetricStatus</a></I></TD><TD>object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).</TD></TR>
+<TR><TD><CODE>pods</CODE><BR /><I><a href="#podsmetricstatus-v2beta2-autoscaling">PodsMetricStatus</a></I></TD><TD>pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second).  The values will be averaged together before being compared to the target value.</TD></TR>
+<TR><TD><CODE>resource</CODE><BR /><I><a href="#resourcemetricstatus-v2beta2-autoscaling">ResourceMetricStatus</a></I></TD><TD>resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of metric source.  It will be one of &#34;ContainerResource&#34;, &#34;External&#34;, &#34;Object&#34;, &#34;Pods&#34; or &#34;Resource&#34;, each corresponds to a matching field in the object. Note: &#34;ContainerResource&#34; type is available on when the feature-gate HPAContainerMetrics is enabled</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="metrictarget-v2beta2-autoscaling">MetricTarget v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>MetricTarget</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>MetricTarget defines the target value, average value, or average utilization of a specific metric</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#containerresourcemetricsource-v2beta2-autoscaling">ContainerResourceMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#externalmetricsource-v2beta2-autoscaling">ExternalMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#objectmetricsource-v2beta2-autoscaling">ObjectMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#podsmetricsource-v2beta2-autoscaling">PodsMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#resourcemetricsource-v2beta2-autoscaling">ResourceMetricSource [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>averageUtilization</CODE><BR /><I>integer</I></TD><TD>averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type</TD></TR>
+<TR><TD><CODE>averageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>averageValue is the target value of the average of the metric across all relevant pods (as a quantity)</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type represents whether the metric type is Utilization, Value, or AverageValue</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>value is the target value of the metric (as a quantity).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="metricvaluestatus-v2beta2-autoscaling">MetricValueStatus v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>MetricValueStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>MetricValueStatus holds the current value for a metric</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#containerresourcemetricstatus-v2beta2-autoscaling">ContainerResourceMetricStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#externalmetricstatus-v2beta2-autoscaling">ExternalMetricStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#objectmetricstatus-v2beta2-autoscaling">ObjectMetricStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#podsmetricstatus-v2beta2-autoscaling">PodsMetricStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#resourcemetricstatus-v2beta2-autoscaling">ResourceMetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>averageUtilization</CODE><BR /><I>integer</I></TD><TD>currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.</TD></TR>
+<TR><TD><CODE>averageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>averageValue is the current value of the average of the metric across all relevant pods (as a quantity)</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>value is the current value of the metric (as a quantity).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="microtime-v1-meta">MicroTime v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>MicroTime</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>MicroTime is version of Time with microsecond level precision.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#event-v1-core">Event [core/v1]</a></LI>
+  <LI><a href="#event-v1-events-k8s-io">Event [events/v1]</a></LI>
+  <LI><a href="#event-v1beta1-events-k8s-io">Event [events/v1beta1]</a></LI>
+  <LI><a href="#eventseries-v1-core">EventSeries [core/v1]</a></LI>
+  <LI><a href="#eventseries-v1-events-k8s-io">EventSeries [events/v1]</a></LI>
+  <LI><a href="#eventseries-v1beta1-events-k8s-io">EventSeries [events/v1beta1]</a></LI>
+  <LI><a href="#leasespec-v1-coordination-k8s-io">LeaseSpec [coordination/v1]</a></LI>
+  <LI><a href="#leasespec-v1beta1-coordination-k8s-io">LeaseSpec [coordination/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="mutatingwebhook-v1-admissionregistration-k8s-io">MutatingWebhook v1 admissionregistration.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>MutatingWebhook</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>MutatingWebhook describes an admission webhook and the resources and operations it applies to.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#mutatingwebhook-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration [admissionregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionReviewVersions</CODE><BR /><I>string array</I></TD><TD>AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.</TD></TR>
+<TR><TD><CODE>clientConfig</CODE><BR /><I><a href="#webhookclientconfig-v1-admissionregistration-k8s-io">WebhookClientConfig</a></I></TD><TD>ClientConfig defines how to communicate with the hook. Required</TD></TR>
+<TR><TD><CODE>failurePolicy</CODE><BR /><I>string</I></TD><TD>FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.</TD></TR>
+<TR><TD><CODE>matchPolicy</CODE><BR /><I>string</I></TD><TD>matchPolicy defines how the &#34;rules&#34; list is used to match incoming requests. Allowed values are &#34;Exact&#34; or &#34;Equivalent&#34;.  - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.  - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.  Defaults to &#34;Equivalent&#34;</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where &#34;imagepolicy&#34; is the name of the webhook, and kubernetes.io is the name of the organization. Required.</TD></TR>
+<TR><TD><CODE>namespaceSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.  For example, to run the webhook on any objects whose namespace is not associated with &#34;runlevel&#34; of &#34;0&#34; or &#34;1&#34;;  you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;runlevel&#34;,       &#34;operator&#34;: &#34;NotIn&#34;,       &#34;values&#34;: [         &#34;0&#34;,         &#34;1&#34;       ]     }   ] }  If instead you want to only run the webhook on any objects whose namespace is associated with the &#34;environment&#34; of &#34;prod&#34; or &#34;staging&#34;; you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;environment&#34;,       &#34;operator&#34;: &#34;In&#34;,       &#34;values&#34;: [         &#34;prod&#34;,         &#34;staging&#34;       ]     }   ] }  See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.  Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>objectSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>reinvocationPolicy</CODE><BR /><I>string</I></TD><TD>reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are &#34;Never&#34; and &#34;IfNeeded&#34;.  Never: the webhook will not be called more than once in a single admission evaluation.  IfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.  Defaults to &#34;Never&#34;.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#rulewithoperations-v1-admissionregistration-k8s-io">RuleWithOperations</a> array</I></TD><TD>Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.</TD></TR>
+<TR><TD><CODE>sideEffects</CODE><BR /><I>string</I></TD><TD>SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE><BR /><I>integer</I></TD><TD>TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nfsvolumesource-v1-core">NFSVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NFSVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs</TD></TR>
+<TR><TD><CODE>server</CODE><BR /><I>string</I></TD><TD>Server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="namespacecondition-v1-core">NamespaceCondition v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NamespaceCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NamespaceCondition contains details about state of namespace.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#namespacestatus-v1-core">NamespaceStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of namespace controller condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="networkpolicyegressrule-v1-networking-k8s-io">NetworkPolicyEgressRule v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NetworkPolicyEgressRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec&#39;s podSelector. The traffic must match both ports and to. This type is beta-level in 1.8</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#networkpolicyspec-v1-networking-k8s-io">NetworkPolicySpec [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#networkpolicyport-v1-networking-k8s-io">NetworkPolicyPort</a> array</I></TD><TD>List of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.</TD></TR>
+<TR><TD><CODE>to</CODE><BR /><I><a href="#networkpolicypeer-v1-networking-k8s-io">NetworkPolicyPeer</a> array</I></TD><TD>List of destinations for outgoing traffic of pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all destinations (traffic not restricted by destination). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the to list.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="networkpolicyingressrule-v1-networking-k8s-io">NetworkPolicyIngressRule v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NetworkPolicyIngressRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec&#39;s podSelector. The traffic must match both ports and from.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#networkpolicyspec-v1-networking-k8s-io">NetworkPolicySpec [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>from</CODE><BR /><I><a href="#networkpolicypeer-v1-networking-k8s-io">NetworkPolicyPeer</a> array</I></TD><TD>List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the from list.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#networkpolicyport-v1-networking-k8s-io">NetworkPolicyPort</a> array</I></TD><TD>List of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="networkpolicypeer-v1-networking-k8s-io">NetworkPolicyPeer v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NetworkPolicyPeer</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#networkpolicyegressrule-v1-networking-k8s-io">NetworkPolicyEgressRule [networking/v1]</a></LI>
+  <LI><a href="#networkpolicyingressrule-v1-networking-k8s-io">NetworkPolicyIngressRule [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ipBlock</CODE><BR /><I><a href="#ipblock-v1-networking-k8s-io">IPBlock</a></I></TD><TD>IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.</TD></TR>
+<TR><TD><CODE>namespaceSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.  If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.</TD></TR>
+<TR><TD><CODE>podSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.  If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy&#39;s own Namespace.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="networkpolicyport-v1-networking-k8s-io">NetworkPolicyPort v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NetworkPolicyPort</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NetworkPolicyPort describes a port to allow traffic on</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#networkpolicyegressrule-v1-networking-k8s-io">NetworkPolicyEgressRule [networking/v1]</a></LI>
+  <LI><a href="#networkpolicyingressrule-v1-networking-k8s-io">NetworkPolicyIngressRule [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>endPort</CODE><BR /><I>integer</I></TD><TD>If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port. This feature is in Alpha state and should be enabled using the Feature Gate &#34;NetworkPolicyEndPort&#34;.</TD></TR>
+<TR><TD><CODE>port</CODE></TD><TD>The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.</TD></TR>
+<TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodeaddress-v1-core">NodeAddress v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeAddress</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NodeAddress contains information for the node&#39;s address.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodestatus-v1-core">NodeStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>address</CODE><BR /><I>string</I></TD><TD>The node address.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Node address type, one of Hostname, ExternalIP or InternalIP.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodeaffinity-v1-core">NodeAffinity v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeAffinity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Node affinity is a group of node affinity scheduling rules.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#affinity-v1-core">Affinity [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>preferredDuringSchedulingIgnoredDuringExecution</CODE><BR /><I><a href="#preferredschedulingterm-v1-core">PreferredSchedulingTerm</a> array</I></TD><TD>The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding &#34;weight&#34; to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.</TD></TR>
+<TR><TD><CODE>requiredDuringSchedulingIgnoredDuringExecution</CODE><BR /><I><a href="#nodeselector-v1-core">NodeSelector</a></I></TD><TD>If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodecondition-v1-core">NodeCondition v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NodeCondition contains condition information for a node.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodestatus-v1-core">NodeStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastHeartbeatTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time we got an update on a given condition.</TD></TR>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transit from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Human readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>(brief) reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of node condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodeconfigsource-v1-core">NodeConfigSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeConfigSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodeconfigstatus-v1-core">NodeConfigStatus [core/v1]</a></LI>
+  <LI><a href="#nodespec-v1-core">NodeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>configMap</CODE><BR /><I><a href="#configmapnodeconfigsource-v1-core">ConfigMapNodeConfigSource</a></I></TD><TD>ConfigMap is a reference to a Node&#39;s ConfigMap</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodeconfigstatus-v1-core">NodeConfigStatus v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeConfigStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NodeConfigStatus describes the status of the config assigned by Node.Spec.ConfigSource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodestatus-v1-core">NodeStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>active</CODE><BR /><I><a href="#nodeconfigsource-v1-core">NodeConfigSource</a></I></TD><TD>Active reports the checkpointed config the node is actively using. Active will represent either the current version of the Assigned config, or the current LastKnownGood config, depending on whether attempting to use the Assigned config results in an error.</TD></TR>
+<TR><TD><CODE>assigned</CODE><BR /><I><a href="#nodeconfigsource-v1-core">NodeConfigSource</a></I></TD><TD>Assigned reports the checkpointed config the node will try to use. When Node.Spec.ConfigSource is updated, the node checkpoints the associated config payload to local disk, along with a record indicating intended config. The node refers to this record to choose its config checkpoint, and reports this record in Assigned. Assigned only updates in the status after the record has been checkpointed to disk. When the Kubelet is restarted, it tries to make the Assigned config the Active config by loading and validating the checkpointed payload identified by Assigned.</TD></TR>
+<TR><TD><CODE>error</CODE><BR /><I>string</I></TD><TD>Error describes any problems reconciling the Spec.ConfigSource to the Active config. Errors may occur, for example, attempting to checkpoint Spec.ConfigSource to the local Assigned record, attempting to checkpoint the payload associated with Spec.ConfigSource, attempting to load or validate the Assigned config, etc. Errors may occur at different points while syncing config. Earlier errors (e.g. download or checkpointing errors) will not result in a rollback to LastKnownGood, and may resolve across Kubelet retries. Later errors (e.g. loading or validating a checkpointed config) will result in a rollback to LastKnownGood. In the latter case, it is usually possible to resolve the error by fixing the config assigned in Spec.ConfigSource. You can find additional information for debugging by searching the error message in the Kubelet log. Error is a human-readable description of the error state; machines can check whether or not Error is empty, but should not rely on the stability of the Error text across Kubelet versions.</TD></TR>
+<TR><TD><CODE>lastKnownGood</CODE><BR /><I><a href="#nodeconfigsource-v1-core">NodeConfigSource</a></I></TD><TD>LastKnownGood reports the checkpointed config the node will fall back to when it encounters an error attempting to use the Assigned config. The Assigned config becomes the LastKnownGood config when the node determines that the Assigned config is stable and correct. This is currently implemented as a 10-minute soak period starting when the local record of Assigned config is updated. If the Assigned config is Active at the end of this period, it becomes the LastKnownGood. Note that if Spec.ConfigSource is reset to nil (use local defaults), the LastKnownGood is also immediately reset to nil, because the local default config is always assumed good. You should not make assumptions about the node&#39;s method of determining config stability and correctness, as this may change or become configurable in the future.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodedaemonendpoints-v1-core">NodeDaemonEndpoints v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeDaemonEndpoints</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NodeDaemonEndpoints lists ports opened by daemons running on the Node.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodestatus-v1-core">NodeStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>kubeletEndpoint</CODE><BR /><I><a href="#daemonendpoint-v1-core">DaemonEndpoint</a></I></TD><TD>Endpoint on which Kubelet is listening.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodeselector-v1-core">NodeSelector v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeSelector</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodeaffinity-v1-core">NodeAffinity [core/v1]</a></LI>
+  <LI><a href="#volumenodeaffinity-v1-core">VolumeNodeAffinity [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nodeSelectorTerms</CODE><BR /><I><a href="#nodeselectorterm-v1-core">NodeSelectorTerm</a> array</I></TD><TD>Required. A list of node selector terms. The terms are ORed.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodeselectorrequirement-v1-core">NodeSelectorRequirement v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeSelectorRequirement</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodeselectorterm-v1-core">NodeSelectorTerm [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>key</CODE><BR /><I>string</I></TD><TD>The label key that the selector applies to.</TD></TR>
+<TR><TD><CODE>operator</CODE><BR /><I>string</I></TD><TD>Represents a key&#39;s relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.</TD></TR>
+<TR><TD><CODE>values</CODE><BR /><I>string array</I></TD><TD>An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodeselectorterm-v1-core">NodeSelectorTerm v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeSelectorTerm</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodeselector-v1-core">NodeSelector [core/v1]</a></LI>
+  <LI><a href="#preferredschedulingterm-v1-core">PreferredSchedulingTerm [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>matchExpressions</CODE><BR /><I><a href="#nodeselectorrequirement-v1-core">NodeSelectorRequirement</a> array</I></TD><TD>A list of node selector requirements by node&#39;s labels.</TD></TR>
+<TR><TD><CODE>matchFields</CODE><BR /><I><a href="#nodeselectorrequirement-v1-core">NodeSelectorRequirement</a> array</I></TD><TD>A list of node selector requirements by node&#39;s fields.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nodesysteminfo-v1-core">NodeSystemInfo v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NodeSystemInfo</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NodeSystemInfo is a set of ids/uuids to uniquely identify the node.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodestatus-v1-core">NodeStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>architecture</CODE><BR /><I>string</I></TD><TD>The Architecture reported by the node</TD></TR>
+<TR><TD><CODE>bootID</CODE><BR /><I>string</I></TD><TD>Boot ID reported by the node.</TD></TR>
+<TR><TD><CODE>containerRuntimeVersion</CODE><BR /><I>string</I></TD><TD>ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).</TD></TR>
+<TR><TD><CODE>kernelVersion</CODE><BR /><I>string</I></TD><TD>Kernel Version reported by the node from &#39;uname -r&#39; (e.g. 3.16.0-0.bpo.4-amd64).</TD></TR>
+<TR><TD><CODE>kubeProxyVersion</CODE><BR /><I>string</I></TD><TD>KubeProxy Version reported by the node.</TD></TR>
+<TR><TD><CODE>kubeletVersion</CODE><BR /><I>string</I></TD><TD>Kubelet Version reported by the node.</TD></TR>
+<TR><TD><CODE>machineID</CODE><BR /><I>string</I></TD><TD>MachineID reported by the node. For unique machine identification in the cluster this field is preferred. Learn more from man(5) machine-id: http://man7.org/linux/man-pages/man5/machine-id.5.html</TD></TR>
+<TR><TD><CODE>operatingSystem</CODE><BR /><I>string</I></TD><TD>The Operating System reported by the node</TD></TR>
+<TR><TD><CODE>osImage</CODE><BR /><I>string</I></TD><TD>OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).</TD></TR>
+<TR><TD><CODE>systemUUID</CODE><BR /><I>string</I></TD><TD>SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nonresourceattributes-v1-authorization-k8s-io">NonResourceAttributes v1 authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NonResourceAttributes</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#nonresourceattributes-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectaccessreviewspec-v1-authorization-k8s-io">SelfSubjectAccessReviewSpec [authorization/v1]</a></LI>
+  <LI><a href="#subjectaccessreviewspec-v1-authorization-k8s-io">SubjectAccessReviewSpec [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is the URL path of the request</TD></TR>
+<TR><TD><CODE>verb</CODE><BR /><I>string</I></TD><TD>Verb is the standard HTTP verb</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io">NonResourcePolicyRule v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>NonResourcePolicyRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io">PolicyRulesWithSubjects [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nonResourceURLs</CODE><BR /><I>string array</I></TD><TD>`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:   - &#34;/healthz&#34; is legal   - &#34;/hea*&#34; is illegal   - &#34;/hea&#34; is legal but matches nothing   - &#34;/hea/*&#34; also matches nothing   - &#34;/healthz/*&#34; matches all per-component health checks. &#34;*&#34; matches all non-resource urls. if it is present, it must be the only entry. Required.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>`verbs` is a list of matching verbs and may not be empty. &#34;*&#34; matches all verbs. If it is present, it must be the only entry. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="nonresourcerule-v1-authorization-k8s-io">NonResourceRule v1 authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>NonResourceRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>NonResourceRule holds information that describes a rule for the non-resource</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#nonresourcerule-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#subjectrulesreviewstatus-v1-authorization-k8s-io">SubjectRulesReviewStatus [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nonResourceURLs</CODE><BR /><I>string array</I></TD><TD>NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  &#34;*&#34; means all.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="objectfieldselector-v1-core">ObjectFieldSelector v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ObjectFieldSelector</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ObjectFieldSelector selects an APIVersioned field of an object.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#downwardapivolumefile-v1-core">DownwardAPIVolumeFile [core/v1]</a></LI>
+  <LI><a href="#envvarsource-v1-core">EnvVarSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>Version of the schema the FieldPath is written in terms of, defaults to &#34;v1&#34;.</TD></TR>
+<TR><TD><CODE>fieldPath</CODE><BR /><I>string</I></TD><TD>Path of the field to select in the specified API version.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="objectmeta-v1-meta">ObjectMeta v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ObjectMeta</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservice-v1-apiregistration-k8s-io">APIService [apiregistration/v1]</a></LI>
+  <LI><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService [apiregistration/v1beta1]</a></LI>
+  <LI><a href="#binding-v1-core">Binding [core/v1]</a></LI>
+  <LI><a href="#csidriver-v1-storage-k8s-io">CSIDriver [storage/v1]</a></LI>
+  <LI><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver [storage/v1beta1]</a></LI>
+  <LI><a href="#csinode-v1-storage-k8s-io">CSINode [storage/v1]</a></LI>
+  <LI><a href="#csinode-v1beta1-storage-k8s-io">CSINode [storage/v1beta1]</a></LI>
+  <LI><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity [storage/v1beta1]</a></LI>
+  <LI><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity [storage/v1alpha1]</a></LI>
+  <LI><a href="#certificatesigningrequest-v1-certificates-k8s-io">CertificateSigningRequest [certificates/v1]</a></LI>
+  <LI><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest [certificates/v1beta1]</a></LI>
+  <LI><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole [rbac/v1]</a></LI>
+  <LI><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole [rbac/v1beta1]</a></LI>
+  <LI><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole [rbac/v1alpha1]</a></LI>
+  <LI><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1]</a></LI>
+  <LI><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1beta1]</a></LI>
+  <LI><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1alpha1]</a></LI>
+  <LI><a href="#componentstatus-v1-core">ComponentStatus [core/v1]</a></LI>
+  <LI><a href="#configmap-v1-core">ConfigMap [core/v1]</a></LI>
+  <LI><a href="#controllerrevision-v1-apps">ControllerRevision [apps/v1]</a></LI>
+  <LI><a href="#cronjob-v1-batch">CronJob [batch/v1]</a></LI>
+  <LI><a href="#cronjob-v1beta1-batch">CronJob [batch/v1beta1]</a></LI>
+  <LI><a href="#customresourcedefinition-v1-apiextensions-k8s-io">CustomResourceDefinition [apiextensions/v1]</a></LI>
+  <LI><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#daemonset-v1-apps">DaemonSet [apps/v1]</a></LI>
+  <LI><a href="#deployment-v1-apps">Deployment [apps/v1]</a></LI>
+  <LI><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice [discovery/v1]</a></LI>
+  <LI><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice [discovery/v1beta1]</a></LI>
+  <LI><a href="#endpoints-v1-core">Endpoints [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainers-v1-core">EphemeralContainers [core/v1]</a></LI>
+  <LI><a href="#event-v1-core">Event [core/v1]</a></LI>
+  <LI><a href="#event-v1-events-k8s-io">Event [events/v1]</a></LI>
+  <LI><a href="#event-v1beta1-events-k8s-io">Event [events/v1beta1]</a></LI>
+  <LI><a href="#eviction-v1beta1-policy">Eviction [policy/v1beta1]</a></LI>
+  <LI><a href="#flowschema-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchema [flowcontrol/v1beta1]</a></LI>
+  <LI><a href="#horizontalpodautoscaler-v1-autoscaling">HorizontalPodAutoscaler [autoscaling/v1]</a></LI>
+  <LI><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#ingress-v1-networking-k8s-io">Ingress [networking/v1]</a></LI>
+  <LI><a href="#ingress-v1beta1-extensions">Ingress [extensions/v1beta1]</a></LI>
+  <LI><a href="#ingress-v1beta1-networking-k8s-io">Ingress [networking/v1beta1]</a></LI>
+  <LI><a href="#ingressclass-v1-networking-k8s-io">IngressClass [networking/v1]</a></LI>
+  <LI><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass [networking/v1beta1]</a></LI>
+  <LI><a href="#job-v1-batch">Job [batch/v1]</a></LI>
+  <LI><a href="#jobtemplatespec-v1-batch">JobTemplateSpec [batch/v1]</a></LI>
+  <LI><a href="#jobtemplatespec-v1beta1-batch">JobTemplateSpec [batch/v1beta1]</a></LI>
+  <LI><a href="#lease-v1-coordination-k8s-io">Lease [coordination/v1]</a></LI>
+  <LI><a href="#lease-v1beta1-coordination-k8s-io">Lease [coordination/v1beta1]</a></LI>
+  <LI><a href="#limitrange-v1-core">LimitRange [core/v1]</a></LI>
+  <LI><a href="#localsubjectaccessreview-v1-authorization-k8s-io">LocalSubjectAccessReview [authorization/v1]</a></LI>
+  <LI><a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview [authorization/v1beta1]</a></LI>
+  <LI><a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">MutatingWebhookConfiguration [admissionregistration/v1]</a></LI>
+  <LI><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration [admissionregistration/v1beta1]</a></LI>
+  <LI><a href="#namespace-v1-core">Namespace [core/v1]</a></LI>
+  <LI><a href="#networkpolicy-v1-networking-k8s-io">NetworkPolicy [networking/v1]</a></LI>
+  <LI><a href="#node-v1-core">Node [core/v1]</a></LI>
+  <LI><a href="#persistentvolume-v1-core">PersistentVolume [core/v1]</a></LI>
+  <LI><a href="#persistentvolumeclaim-v1-core">PersistentVolumeClaim [core/v1]</a></LI>
+  <LI><a href="#persistentvolumeclaimtemplate-v1-core">PersistentVolumeClaimTemplate [core/v1]</a></LI>
+  <LI><a href="#pod-v1-core">Pod [core/v1]</a></LI>
+  <LI><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget [policy/v1]</a></LI>
+  <LI><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget [policy/v1beta1]</a></LI>
+  <LI><a href="#podsecuritypolicy-v1beta1-policy">PodSecurityPolicy [policy/v1beta1]</a></LI>
+  <LI><a href="#podtemplate-v1-core">PodTemplate [core/v1]</a></LI>
+  <LI><a href="#podtemplatespec-v1-core">PodTemplateSpec [core/v1]</a></LI>
+  <LI><a href="#priorityclass-v1-scheduling-k8s-io">PriorityClass [scheduling/v1]</a></LI>
+  <LI><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass [scheduling/v1beta1]</a></LI>
+  <LI><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass [scheduling/v1alpha1]</a></LI>
+  <LI><a href="#prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfiguration [flowcontrol/v1beta1]</a></LI>
+  <LI><a href="#replicaset-v1-apps">ReplicaSet [apps/v1]</a></LI>
+  <LI><a href="#replicationcontroller-v1-core">ReplicationController [core/v1]</a></LI>
+  <LI><a href="#resourcequota-v1-core">ResourceQuota [core/v1]</a></LI>
+  <LI><a href="#role-v1-rbac-authorization-k8s-io">Role [rbac/v1]</a></LI>
+  <LI><a href="#role-v1beta1-rbac-authorization-k8s-io">Role [rbac/v1beta1]</a></LI>
+  <LI><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role [rbac/v1alpha1]</a></LI>
+  <LI><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding [rbac/v1]</a></LI>
+  <LI><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding [rbac/v1beta1]</a></LI>
+  <LI><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding [rbac/v1alpha1]</a></LI>
+  <LI><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass [node/v1]</a></LI>
+  <LI><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass [node/v1beta1]</a></LI>
+  <LI><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass [node/v1alpha1]</a></LI>
+  <LI><a href="#scale-v1-autoscaling">Scale [autoscaling/v1]</a></LI>
+  <LI><a href="#secret-v1-core">Secret [core/v1]</a></LI>
+  <LI><a href="#selfsubjectaccessreview-v1-authorization-k8s-io">SelfSubjectAccessReview [authorization/v1]</a></LI>
+  <LI><a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview [authorization/v1beta1]</a></LI>
+  <LI><a href="#selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview [authorization/v1]</a></LI>
+  <LI><a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview [authorization/v1beta1]</a></LI>
+  <LI><a href="#service-v1-core">Service [core/v1]</a></LI>
+  <LI><a href="#serviceaccount-v1-core">ServiceAccount [core/v1]</a></LI>
+  <LI><a href="#statefulset-v1-apps">StatefulSet [apps/v1]</a></LI>
+  <LI><a href="#storageclass-v1-storage-k8s-io">StorageClass [storage/v1]</a></LI>
+  <LI><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass [storage/v1beta1]</a></LI>
+  <LI><a href="#storageversion-v1alpha1-internal-apiserver-k8s-io">StorageVersion [apiserverinternal/v1alpha1]</a></LI>
+  <LI><a href="#subjectaccessreview-v1-authorization-k8s-io">SubjectAccessReview [authorization/v1]</a></LI>
+  <LI><a href="#subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview [authorization/v1beta1]</a></LI>
+  <LI><a href="#tokenrequest-v1-authentication-k8s-io">TokenRequest [authentication/v1]</a></LI>
+  <LI><a href="#tokenreview-v1-authentication-k8s-io">TokenReview [authentication/v1]</a></LI>
+  <LI><a href="#tokenreview-v1beta1-authentication-k8s-io">TokenReview [authentication/v1beta1]</a></LI>
+  <LI><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration [admissionregistration/v1]</a></LI>
+  <LI><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration [admissionregistration/v1beta1]</a></LI>
+  <LI><a href="#volumeattachment-v1-storage-k8s-io">VolumeAttachment [storage/v1]</a></LI>
+  <LI><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment [storage/v1beta1]</a></LI>
+  <LI><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>annotations</CODE><BR /><I>object</I></TD><TD>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations</TD></TR>
+<TR><TD><CODE>clusterName</CODE><BR /><I>string</I></TD><TD>The name of the cluster which the object belongs to. This is used to distinguish resources with same name and namespace in different clusters. This field is not set anywhere right now and apiserver is going to ignore it if set in create or update request.</TD></TR>
+<TR><TD><CODE>creationTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.  Populated by the system. Read-only. Null for lists. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>deletionGracePeriodSeconds</CODE><BR /><I>integer</I></TD><TD>Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.</TD></TR>
+<TR><TD><CODE>deletionTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field, once the finalizers list is empty. As long as the finalizers list contains items, deletion is blocked. Once the deletionTimestamp is set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.  Populated by the system when a graceful deletion is requested. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>finalizers</CODE><BR /><I>string array</I><BR /><B>patch strategy</B>: <I>merge</I></TD><TD>Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order.  Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list.</TD></TR>
+<TR><TD><CODE>generateName</CODE><BR /><I>string</I></TD><TD>GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.  If this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).  Applied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency</TD></TR>
+<TR><TD><CODE>generation</CODE><BR /><I>integer</I></TD><TD>A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.</TD></TR>
+<TR><TD><CODE>labels</CODE><BR /><I>object</I></TD><TD>Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels</TD></TR>
+<TR><TD><CODE>managedFields</CODE><BR /><I><a href="#managedfieldsentry-v1-meta">ManagedFieldsEntry</a> array</I></TD><TD>ManagedFields maps workflow-id and version to the set of fields that are managed by that workflow. This is mostly for internal housekeeping, and users typically shouldn&#39;t need to set or understand this field. A workflow can be the user&#39;s name, a controller&#39;s name, or the name of a specific apply path like &#34;ci-cd&#34;. The set of fields is always in the version that the workflow used when modifying the object.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the &#34;default&#34; namespace, but &#34;default&#34; is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.  Must be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces</TD></TR>
+<TR><TD><CODE>ownerReferences</CODE><BR /><I><a href="#ownerreference-v1-meta">OwnerReference</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>uid</I></TD><TD>List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE><BR /><I>string</I></TD><TD>An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.  Populated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency</TD></TR>
+<TR><TD><CODE>selfLink</CODE><BR /><I>string</I></TD><TD>SelfLink is a URL representing this object. Populated by the system. Read-only.  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and the field is planned to be removed in 1.21 release.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.  Populated by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="objectmetricsource-v2beta2-autoscaling">ObjectMetricSource v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ObjectMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#objectmetricsource-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta2-autoscaling">MetricSpec [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>describedObject</CODE><BR /><I><a href="#crossversionobjectreference-v2beta2-autoscaling">CrossVersionObjectReference</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>metric</CODE><BR /><I><a href="#metricidentifier-v2beta2-autoscaling">MetricIdentifier</a></I></TD><TD>metric identifies the target metric by name and selector</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#metrictarget-v2beta2-autoscaling">MetricTarget</a></I></TD><TD>target specifies the target value for the given metric</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="objectmetricstatus-v2beta2-autoscaling">ObjectMetricStatus v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ObjectMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#objectmetricstatus-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta2-autoscaling">MetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>current</CODE><BR /><I><a href="#metricvaluestatus-v2beta2-autoscaling">MetricValueStatus</a></I></TD><TD>current contains the current value for the given metric</TD></TR>
+<TR><TD><CODE>describedObject</CODE><BR /><I><a href="#crossversionobjectreference-v2beta2-autoscaling">CrossVersionObjectReference</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>metric</CODE><BR /><I><a href="#metricidentifier-v2beta2-autoscaling">MetricIdentifier</a></I></TD><TD>metric identifies the target metric by name and selector</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="objectreference-v1-core">ObjectReference v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ObjectReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ObjectReference contains enough information to let you inspect or modify the referred object.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#binding-v1-core">Binding [core/v1]</a></LI>
+  <LI><a href="#cronjobstatus-v1-batch">CronJobStatus [batch/v1]</a></LI>
+  <LI><a href="#cronjobstatus-v1beta1-batch">CronJobStatus [batch/v1beta1]</a></LI>
+  <LI><a href="#endpoint-v1-discovery-k8s-io">Endpoint [discovery/v1]</a></LI>
+  <LI><a href="#endpoint-v1beta1-discovery-k8s-io">Endpoint [discovery/v1beta1]</a></LI>
+  <LI><a href="#endpointaddress-v1-core">EndpointAddress [core/v1]</a></LI>
+  <LI><a href="#event-v1-core">Event [core/v1]</a></LI>
+  <LI><a href="#event-v1-events-k8s-io">Event [events/v1]</a></LI>
+  <LI><a href="#event-v1beta1-events-k8s-io">Event [events/v1beta1]</a></LI>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#serviceaccount-v1-core">ServiceAccount [core/v1]</a></LI>
+  <LI><a href="#storageospersistentvolumesource-v1-core">StorageOSPersistentVolumeSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>API version of the referent.</TD></TR>
+<TR><TD><CODE>fieldPath</CODE><BR /><I>string</I></TD><TD>If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: &#34;spec.containers{name}&#34; (where &#34;name&#34; refers to the name of the container that triggered the event) or if no container name is specified &#34;spec.containers[2]&#34; (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE><BR /><I>string</I></TD><TD>Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="overhead-v1-node-k8s-io">Overhead v1 node.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Overhead</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Overhead structure represents the resource overhead associated with running a pod.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#overhead-v1beta1-node-k8s-io">v1beta1</a>
+<a href="#overhead-v1alpha1-node-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass [node/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>podFixed</CODE><BR /><I>object</I></TD><TD>PodFixed represents the fixed resource overhead associated with running a pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="ownerreference-v1-meta">OwnerReference v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>OwnerReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>OwnerReference contains enough information to let you identify an owning object. An owning object must be in the same namespace as the dependent, or be cluster-scoped, so there is no namespace field.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#objectmeta-v1-meta">ObjectMeta [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>API version of the referent.</TD></TR>
+<TR><TD><CODE>blockOwnerDeletion</CODE><BR /><I>boolean</I></TD><TD>If true, AND if the owner has the &#34;foregroundDeletion&#34; finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. Defaults to false. To set this field, a user needs &#34;delete&#34; permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.</TD></TR>
+<TR><TD><CODE>controller</CODE><BR /><I>boolean</I></TD><TD>If true, this reference points to the managing controller.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#uids</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-v1-meta">Patch v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Patch</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Patch is provided to give a concrete name and type to the Kubernetes PATCH request body.</P>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="persistentvolumeclaimcondition-v1-core">PersistentVolumeClaimCondition v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PersistentVolumeClaimCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PersistentVolumeClaimCondition contails details about state of pvc</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumeclaimstatus-v1-core">PersistentVolumeClaimStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastProbeTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time we probed the condition.</TD></TR>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>Unique, this should be a short, machine understandable string that gives the reason for condition&#39;s last transition. If it reports &#34;ResizeStarted&#34; that means the underlying persistent volume is being resized.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="persistentvolumeclaimtemplate-v1-core">PersistentVolumeClaimTemplate v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PersistentVolumeClaimTemplate</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim objects as part of an EphemeralVolumeSource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ephemeralvolumesource-v1-core">EphemeralVolumeSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#persistentvolumeclaimspec-v1-core">PersistentVolumeClaimSpec</a></I></TD><TD>The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="persistentvolumeclaimvolumesource-v1-core">PersistentVolumeClaimVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PersistentVolumeClaimVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PersistentVolumeClaimVolumeSource references the user&#39;s PVC in the same namespace. This volume finds the bound PV and mounts that volume for the pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around another type of volume that is owned by someone else (the system).</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>claimName</CODE><BR /><I>string</I></TD><TD>ClaimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Will force the ReadOnly setting in VolumeMounts. Default false.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="photonpersistentdiskvolumesource-v1-core">PhotonPersistentDiskVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PhotonPersistentDiskVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Photon Controller persistent disk resource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified.</TD></TR>
+<TR><TD><CODE>pdID</CODE><BR /><I>string</I></TD><TD>ID that identifies Photon Controller persistent disk</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podaffinity-v1-core">PodAffinity v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodAffinity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Pod affinity is a group of inter pod affinity scheduling rules.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#affinity-v1-core">Affinity [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>preferredDuringSchedulingIgnoredDuringExecution</CODE><BR /><I><a href="#weightedpodaffinityterm-v1-core">WeightedPodAffinityTerm</a> array</I></TD><TD>The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding &#34;weight&#34; to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.</TD></TR>
+<TR><TD><CODE>requiredDuringSchedulingIgnoredDuringExecution</CODE><BR /><I><a href="#podaffinityterm-v1-core">PodAffinityTerm</a> array</I></TD><TD>If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podaffinityterm-v1-core">PodAffinityTerm v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodAffinityTerm</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key &lt;topologyKey&gt; matches that of any node on which a pod of the set of pods is running</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podaffinity-v1-core">PodAffinity [core/v1]</a></LI>
+  <LI><a href="#podantiaffinity-v1-core">PodAntiAffinity [core/v1]</a></LI>
+  <LI><a href="#weightedpodaffinityterm-v1-core">WeightedPodAffinityTerm [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>labelSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>A label query over a set of resources, in this case pods.</TD></TR>
+<TR><TD><CODE>namespaceSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means &#34;this pod&#39;s namespace&#34;. An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.</TD></TR>
+<TR><TD><CODE>namespaces</CODE><BR /><I>string array</I></TD><TD>namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means &#34;this pod&#39;s namespace&#34;</TD></TR>
+<TR><TD><CODE>topologyKey</CODE><BR /><I>string</I></TD><TD>This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podantiaffinity-v1-core">PodAntiAffinity v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodAntiAffinity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Pod anti affinity is a group of inter pod anti affinity scheduling rules.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#affinity-v1-core">Affinity [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>preferredDuringSchedulingIgnoredDuringExecution</CODE><BR /><I><a href="#weightedpodaffinityterm-v1-core">WeightedPodAffinityTerm</a> array</I></TD><TD>The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding &#34;weight&#34; to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.</TD></TR>
+<TR><TD><CODE>requiredDuringSchedulingIgnoredDuringExecution</CODE><BR /><I><a href="#podaffinityterm-v1-core">PodAffinityTerm</a> array</I></TD><TD>If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podcondition-v1-core">PodCondition v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodCondition contains details for the current condition of this pod.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podstatus-v1-core">PodStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastProbeTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time we probed the condition.</TD></TR>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>Unique, one-word, CamelCase reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="poddnsconfig-v1-core">PodDNSConfig v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodDNSConfig</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nameservers</CODE><BR /><I>string array</I></TD><TD>A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.</TD></TR>
+<TR><TD><CODE>options</CODE><BR /><I><a href="#poddnsconfigoption-v1-core">PodDNSConfigOption</a> array</I></TD><TD>A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.</TD></TR>
+<TR><TD><CODE>searches</CODE><BR /><I>string array</I></TD><TD>A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="poddnsconfigoption-v1-core">PodDNSConfigOption v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodDNSConfigOption</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodDNSConfigOption defines DNS resolver options of a pod.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddnsconfig-v1-core">PodDNSConfig [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Required.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>string</I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="poddisruptionbudget-v1-policy">PodDisruptionBudget v1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodDisruptionBudget</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#poddisruptionbudget-v1beta1-policy">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudgetlist-v1-policy">PodDisruptionBudgetList [policy/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#poddisruptionbudgetspec-v1-policy">PodDisruptionBudgetSpec</a></I></TD><TD>Specification of the desired behavior of the PodDisruptionBudget.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#poddisruptionbudgetstatus-v1-policy">PodDisruptionBudgetStatus</a></I></TD><TD>Most recently observed status of the PodDisruptionBudget.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podip-v1-core">PodIP v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodIP</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>IP address information for entries in the (plural) PodIPs field. Each entry includes:
+   IP: An IP address allocated to the pod. Routable at least within the cluster.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podstatus-v1-core">PodStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ip</CODE><BR /><I>string</I></TD><TD>ip is an IP address (IPv4 or IPv6) assigned to the pod</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podreadinessgate-v1-core">PodReadinessGate v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodReadinessGate</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodReadinessGate contains the reference to a pod condition</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditionType</CODE><BR /><I>string</I></TD><TD>ConditionType refers to a condition in the pod&#39;s condition list with matching type.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podsecuritycontext-v1-core">PodSecurityContext v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodSecurityContext</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext.  Field values of container.securityContext take precedence over field values of PodSecurityContext.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsGroup</CODE><BR /><I>integer</I></TD><TD>A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:  1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR&#39;d with rw-rw----  If unset, the Kubelet will not modify the ownership and permissions of any volume.</TD></TR>
+<TR><TD><CODE>fsGroupChangePolicy</CODE><BR /><I>string</I></TD><TD>fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are &#34;OnRootMismatch&#34; and &#34;Always&#34;. If not specified, &#34;Always&#34; is used.</TD></TR>
+<TR><TD><CODE>runAsGroup</CODE><BR /><I>integer</I></TD><TD>The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.</TD></TR>
+<TR><TD><CODE>runAsNonRoot</CODE><BR /><I>boolean</I></TD><TD>Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+<TR><TD><CODE>runAsUser</CODE><BR /><I>integer</I></TD><TD>The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.</TD></TR>
+<TR><TD><CODE>seLinuxOptions</CODE><BR /><I><a href="#selinuxoptions-v1-core">SELinuxOptions</a></I></TD><TD>The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.</TD></TR>
+<TR><TD><CODE>seccompProfile</CODE><BR /><I><a href="#seccompprofile-v1-core">SeccompProfile</a></I></TD><TD>The seccomp options to use by the containers in this pod.</TD></TR>
+<TR><TD><CODE>supplementalGroups</CODE><BR /><I>integer array</I></TD><TD>A list of groups applied to the first process run in each container, in addition to the container&#39;s primary GID.  If unspecified, no groups will be added to any container.</TD></TR>
+<TR><TD><CODE>sysctls</CODE><BR /><I><a href="#sysctl-v1-core">Sysctl</a> array</I></TD><TD>Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.</TD></TR>
+<TR><TD><CODE>windowsOptions</CODE><BR /><I><a href="#windowssecuritycontextoptions-v1-core">WindowsSecurityContextOptions</a></I></TD><TD>The Windows specific settings applied to all containers. If unspecified, the options within a container&#39;s SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podsmetricsource-v2beta2-autoscaling">PodsMetricSource v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>PodsMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#podsmetricsource-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta2-autoscaling">MetricSpec [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metric</CODE><BR /><I><a href="#metricidentifier-v2beta2-autoscaling">MetricIdentifier</a></I></TD><TD>metric identifies the target metric by name and selector</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#metrictarget-v2beta2-autoscaling">MetricTarget</a></I></TD><TD>target specifies the target value for the given metric</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="podsmetricstatus-v2beta2-autoscaling">PodsMetricStatus v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>PodsMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#podsmetricstatus-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta2-autoscaling">MetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>current</CODE><BR /><I><a href="#metricvaluestatus-v2beta2-autoscaling">MetricValueStatus</a></I></TD><TD>current contains the current value for the given metric</TD></TR>
+<TR><TD><CODE>metric</CODE><BR /><I><a href="#metricidentifier-v2beta2-autoscaling">MetricIdentifier</a></I></TD><TD>metric identifies the target metric by name and selector</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="policyrule-v1-rbac-authorization-k8s-io">PolicyRule v1 rbac.authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PolicyRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#policyrule-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#policyrule-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrole-v1-rbac-authorization-k8s-io">ClusterRole [rbac/v1]</a></LI>
+  <LI><a href="#role-v1-rbac-authorization-k8s-io">Role [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.</TD></TR>
+<TR><TD><CODE>nonResourceURLs</CODE><BR /><I>string array</I></TD><TD>NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as &#34;pods&#34; or &#34;secrets&#34;) or non-resource URL paths (such as &#34;/api&#34;),  but not both.</TD></TR>
+<TR><TD><CODE>resourceNames</CODE><BR /><I>string array</I></TD><TD>ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>Resources is a list of resources this rule applies to.  ResourceAll represents all resources.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule.  VerbAll represents all kinds.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io">PolicyRulesWithSubjects v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PolicyRulesWithSubjects</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#flowschemaspec-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaSpec [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nonResourceRules</CODE><BR /><I><a href="#nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io">NonResourcePolicyRule</a> array</I></TD><TD>`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.</TD></TR>
+<TR><TD><CODE>resourceRules</CODE><BR /><I><a href="#resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io">ResourcePolicyRule</a> array</I></TD><TD>`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.</TD></TR>
+<TR><TD><CODE>subjects</CODE><BR /><I><a href="#subject-v1beta1-flowcontrol-apiserver-k8s-io">Subject</a> array</I></TD><TD>subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="portstatus-v1-core">PortStatus v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PortStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P></P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#loadbalanceringress-v1-core">LoadBalancerIngress [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>error</CODE><BR /><I>string</I></TD><TD>Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use   CamelCase names - cloud provider specific error values must have names that comply with the   format foo.example.com/CamelCase.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>Port is the port number of the service port of which status is recorded here</TD></TR>
+<TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>Protocol is the protocol of the service port of which status is recorded here The supported values are: &#34;TCP&#34;, &#34;UDP&#34;, &#34;SCTP&#34;</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="portworxvolumesource-v1-core">PortworxVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PortworxVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PortworxVolumeSource represents a Portworx volume resource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>FSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>volumeID</CODE><BR /><I>string</I></TD><TD>VolumeID uniquely identifies a Portworx volume</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="preconditions-v1-meta">Preconditions v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Preconditions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#deleteoptions-v1-meta">DeleteOptions [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>resourceVersion</CODE><BR /><I>string</I></TD><TD>Specifies the target ResourceVersion</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>Specifies the target UID.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="preferredschedulingterm-v1-core">PreferredSchedulingTerm v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PreferredSchedulingTerm</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it&#39;s a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodeaffinity-v1-core">NodeAffinity [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>preference</CODE><BR /><I><a href="#nodeselectorterm-v1-core">NodeSelectorTerm</a></I></TD><TD>A node selector term, associated with the corresponding weight.</TD></TR>
+<TR><TD><CODE>weight</CODE><BR /><I>integer</I></TD><TD>Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationCondition v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PriorityLevelConfigurationCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PriorityLevelConfigurationCondition defines the condition of priority level.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#prioritylevelconfigurationstatus-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationStatus [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>`lastTransitionTime` is the last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>`message` is a human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>`reason` is a unique, one-word, CamelCase reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>`status` is the status of the condition. Can be True, False, Unknown. Required.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>`type` is the type of the condition. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationReference v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PriorityLevelConfigurationReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>PriorityLevelConfigurationReference contains information that points to the &#34;request-priority&#34; being used.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#flowschemaspec-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaSpec [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>`name` is the name of the priority level configuration being referenced Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="probe-v1-core">Probe v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Probe</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>exec</CODE><BR /><I><a href="#execaction-v1-core">ExecAction</a></I></TD><TD>One and only one of the following should be specified. Exec specifies the action to take.</TD></TR>
+<TR><TD><CODE>failureThreshold</CODE><BR /><I>integer</I></TD><TD>Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.</TD></TR>
+<TR><TD><CODE>httpGet</CODE><BR /><I><a href="#httpgetaction-v1-core">HTTPGetAction</a></I></TD><TD>HTTPGet specifies the http request to perform.</TD></TR>
+<TR><TD><CODE>initialDelaySeconds</CODE><BR /><I>integer</I></TD><TD>Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes</TD></TR>
+<TR><TD><CODE>periodSeconds</CODE><BR /><I>integer</I></TD><TD>How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.</TD></TR>
+<TR><TD><CODE>successThreshold</CODE><BR /><I>integer</I></TD><TD>Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.</TD></TR>
+<TR><TD><CODE>tcpSocket</CODE><BR /><I><a href="#tcpsocketaction-v1-core">TCPSocketAction</a></I></TD><TD>TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported</TD></TR>
+<TR><TD><CODE>terminationGracePeriodSeconds</CODE><BR /><I>integer</I></TD><TD>Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod&#39;s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE><BR /><I>integer</I></TD><TD>Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="projectedvolumesource-v1-core">ProjectedVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ProjectedVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a projected volume source</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>defaultMode</CODE><BR /><I>integer</I></TD><TD>Mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.</TD></TR>
+<TR><TD><CODE>sources</CODE><BR /><I><a href="#volumeprojection-v1-core">VolumeProjection</a> array</I></TD><TD>list of volume projections</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="quantity-resource-core">Quantity resource core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>resource</CODE></TD><TD><CODE>Quantity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Quantity is a fixed-point representation of a number. It provides convenient marshaling/unmarshaling in JSON and YAML, in addition to String() and AsInt64() accessors.
+
+The serialization format is:
+
+&lt;quantity&gt;        ::= &lt;signedNumber&gt;&lt;suffix&gt;
+  (Note that &lt;suffix&gt; may be empty, from the &#34;&#34; case in &lt;decimalSI&gt;.)
+&lt;digit&gt;           ::= 0 | 1 | ... | 9 &lt;digits&gt;          ::= &lt;digit&gt; | &lt;digit&gt;&lt;digits&gt; &lt;number&gt;          ::= &lt;digits&gt; | &lt;digits&gt;.&lt;digits&gt; | &lt;digits&gt;. | .&lt;digits&gt; &lt;sign&gt;            ::= &#34;+&#34; | &#34;-&#34; &lt;signedNumber&gt;    ::= &lt;number&gt; | &lt;sign&gt;&lt;number&gt; &lt;suffix&gt;          ::= &lt;binarySI&gt; | &lt;decimalExponent&gt; | &lt;decimalSI&gt; &lt;binarySI&gt;        ::= Ki | Mi | Gi | Ti | Pi | Ei
+  (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)
+&lt;decimalSI&gt;       ::= m | &#34;&#34; | k | M | G | T | P | E
+  (Note that 1024 = 1Ki but 1000 = 1k; I didn&#39;t choose the capitalization.)
+&lt;decimalExponent&gt; ::= &#34;e&#34; &lt;signedNumber&gt; | &#34;E&#34; &lt;signedNumber&gt;
+
+No matter which of the three exponent forms is used, no quantity may represent a number greater than 2^63-1 in magnitude, nor may it have more than 3 decimal places. Numbers larger or more precise will be capped or rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future if we require larger or smaller quantities.
+
+When a Quantity is parsed from a string, it will remember the type of suffix it had, and will use the same type again when it is serialized.
+
+Before serializing, Quantity will be put in &#34;canonical form&#34;. This means that Exponent/suffix will be adjusted up or down (with a corresponding increase or decrease in Mantissa) such that:
+  a. No precision is lost
+  b. No fractional digits will be emitted
+  c. The exponent (or suffix) is as large as possible.
+The sign will be omitted unless the number is negative.
+
+Examples:
+  1.5 will be serialized as &#34;1500m&#34;
+  1.5Gi will be serialized as &#34;1536Mi&#34;
+
+Note that the quantity will NEVER be internally represented by a floating point number. That is the whole point of this exercise.
+
+Non-canonical values will still parse as long as they are well formed, but will be re-emitted in their canonical form. (So always use canonical form, or don&#39;t diff.)
+
+This format is intended to make it difficult to use these numbers without writing some sort of special handling code in the hopes that that will cause implementors to also use a fixed point implementation.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity [storage/v1beta1]</a></LI>
+  <LI><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity [storage/v1alpha1]</a></LI>
+  <LI><a href="#containerresourcemetricsource-v2beta1-autoscaling">ContainerResourceMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#containerresourcemetricstatus-v2beta1-autoscaling">ContainerResourceMetricStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#emptydirvolumesource-v1-core">EmptyDirVolumeSource [core/v1]</a></LI>
+  <LI><a href="#externalmetricsource-v2beta1-autoscaling">ExternalMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#externalmetricstatus-v2beta1-autoscaling">ExternalMetricStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#metrictarget-v2beta2-autoscaling">MetricTarget [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#metricvaluestatus-v2beta2-autoscaling">MetricValueStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#objectmetricsource-v2beta1-autoscaling">ObjectMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#objectmetricstatus-v2beta1-autoscaling">ObjectMetricStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#podsmetricsource-v2beta1-autoscaling">PodsMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#podsmetricstatus-v2beta1-autoscaling">PodsMetricStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#resourcefieldselector-v1-core">ResourceFieldSelector [core/v1]</a></LI>
+  <LI><a href="#resourcemetricsource-v2beta1-autoscaling">ResourceMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#resourcemetricstatus-v2beta1-autoscaling">ResourceMetricStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io">QueuingConfiguration v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>QueuingConfiguration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>QueuingConfiguration holds the configuration parameters for queuing</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#limitresponse-v1beta1-flowcontrol-apiserver-k8s-io">LimitResponse [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>handSize</CODE><BR /><I>integer</I></TD><TD>`handSize` is a small positive number that configures the shuffle sharding of requests into queues.  When enqueuing a request at this priority level the request&#39;s flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here.  The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues).  See the user-facing documentation for more extensive guidance on setting this field.  This field has a default value of 8.</TD></TR>
+<TR><TD><CODE>queueLengthLimit</CODE><BR /><I>integer</I></TD><TD>`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected.  This value must be positive.  If not specified, it will be defaulted to 50.</TD></TR>
+<TR><TD><CODE>queues</CODE><BR /><I>integer</I></TD><TD>`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive.  Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant.  This field has a default value of 64.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="quobytevolumesource-v1-core">QuobyteVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>QuobyteVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte volumes do not support ownership management or SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>Group to map volume access to Default is no group</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.</TD></TR>
+<TR><TD><CODE>registry</CODE><BR /><I>string</I></TD><TD>Registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes</TD></TR>
+<TR><TD><CODE>tenant</CODE><BR /><I>string</I></TD><TD>Tenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>User to map volume access to Defaults to serivceaccount user</TD></TR>
+<TR><TD><CODE>volume</CODE><BR /><I>string</I></TD><TD>Volume is a string that references an already created Quobyte volume by name.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="rbdpersistentvolumesource-v1-core">RBDPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>RBDPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd</TD></TR>
+<TR><TD><CODE>image</CODE><BR /><I>string</I></TD><TD>The rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>keyring</CODE><BR /><I>string</I></TD><TD>Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>monitors</CODE><BR /><I>string array</I></TD><TD>A collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>pool</CODE><BR /><I>string</I></TD><TD>The rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>SecretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>The rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="rbdvolumesource-v1-core">RBDVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>RBDVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd</TD></TR>
+<TR><TD><CODE>image</CODE><BR /><I>string</I></TD><TD>The rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>keyring</CODE><BR /><I>string</I></TD><TD>Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>monitors</CODE><BR /><I>string array</I></TD><TD>A collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>pool</CODE><BR /><I>string</I></TD><TD>The rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>SecretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>The rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replicasetcondition-v1-apps">ReplicaSetCondition v1 apps</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ReplicaSetCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ReplicaSetCondition describes the state of a replica set at a certain point.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicasetstatus-v1-apps">ReplicaSetStatus [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>The last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human readable message indicating details about the transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>The reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of replica set condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replicationcontrollercondition-v1-core">ReplicationControllerCondition v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ReplicationControllerCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ReplicationControllerCondition describes the state of a replication controller at a certain point.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#replicationcontrollerstatus-v1-core">ReplicationControllerStatus [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>The last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human readable message indicating details about the transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>The reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of replication controller condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="resourceattributes-v1-authorization-k8s-io">ResourceAttributes v1 authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ResourceAttributes</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourceattributes-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectaccessreviewspec-v1-authorization-k8s-io">SelfSubjectAccessReviewSpec [authorization/v1]</a></LI>
+  <LI><a href="#subjectaccessreviewspec-v1-authorization-k8s-io">SubjectAccessReviewSpec [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>Group is the API Group of the Resource.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of the resource being requested for a &#34;get&#34; or deleted for a &#34;delete&#34;. &#34;&#34; (empty) means all.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces &#34;&#34; (empty) is defaulted for LocalSubjectAccessReviews &#34;&#34; (empty) is empty for cluster-scoped resources &#34;&#34; (empty) means &#34;all&#34; for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview</TD></TR>
+<TR><TD><CODE>resource</CODE><BR /><I>string</I></TD><TD>Resource is one of the existing resource types.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>subresource</CODE><BR /><I>string</I></TD><TD>Subresource is one of the existing resource types.  &#34;&#34; means none.</TD></TR>
+<TR><TD><CODE>verb</CODE><BR /><I>string</I></TD><TD>Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>version</CODE><BR /><I>string</I></TD><TD>Version is the API Version of the Resource.  &#34;*&#34; means all.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="resourcefieldselector-v1-core">ResourceFieldSelector v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ResourceFieldSelector</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ResourceFieldSelector represents container resources (cpu, memory) and their output format</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#downwardapivolumefile-v1-core">DownwardAPIVolumeFile [core/v1]</a></LI>
+  <LI><a href="#envvarsource-v1-core">EnvVarSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerName</CODE><BR /><I>string</I></TD><TD>Container name: required for volumes, optional for env vars</TD></TR>
+<TR><TD><CODE>divisor</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>Specifies the output format of the exposed resources, defaults to &#34;1&#34;</TD></TR>
+<TR><TD><CODE>resource</CODE><BR /><I>string</I></TD><TD>Required: resource to select</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="resourcemetricsource-v2beta2-autoscaling">ResourceMetricSource v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ResourceMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  The values will be averaged together before being compared to the target.  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.  Only one &#34;target&#34; type should be set.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourcemetricsource-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta2-autoscaling">MetricSpec [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the resource in question.</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#metrictarget-v2beta2-autoscaling">MetricTarget</a></I></TD><TD>target specifies the target value for the given metric</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="resourcemetricstatus-v2beta2-autoscaling">ResourceMetricStatus v2beta2 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>ResourceMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourcemetricstatus-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta2-autoscaling">MetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>current</CODE><BR /><I><a href="#metricvaluestatus-v2beta2-autoscaling">MetricValueStatus</a></I></TD><TD>current contains the current value for the given metric</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of the resource in question.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io">ResourcePolicyRule v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ResourcePolicyRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ResourcePolicyRule is a predicate that matches some resource requests, testing the request&#39;s verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) least one member of namespaces matches the request.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io">PolicyRulesWithSubjects [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>`apiGroups` is a list of matching API groups and may not be empty. &#34;*&#34; matches all API groups and, if present, must be the only entry. Required.</TD></TR>
+<TR><TD><CODE>clusterScope</CODE><BR /><I>boolean</I></TD><TD>`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.</TD></TR>
+<TR><TD><CODE>namespaces</CODE><BR /><I>string array</I></TD><TD>`namespaces` is a list of target namespaces that restricts matches.  A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains &#34;*&#34;.  Note that &#34;*&#34; matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource.  For example, [ &#34;services&#34;, &#34;nodes/status&#34; ].  This list may not be empty. &#34;*&#34; matches all resources and, if present, must be the only entry. Required.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>`verbs` is a list of matching verbs and may not be empty. &#34;*&#34; matches all verbs and, if present, must be the only entry. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="resourcerequirements-v1-core">ResourceRequirements v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ResourceRequirements</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ResourceRequirements describes the compute resource requirements.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+  <LI><a href="#persistentvolumeclaimspec-v1-core">PersistentVolumeClaimSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>limits</CODE><BR /><I>object</I></TD><TD>Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/</TD></TR>
+<TR><TD><CODE>requests</CODE><BR /><I>object</I></TD><TD>Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="resourcerule-v1-authorization-k8s-io">ResourceRule v1 authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ResourceRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn&#39;t significant, may contain duplicates, and possibly be incomplete.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourcerule-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#subjectrulesreviewstatus-v1-authorization-k8s-io">SubjectRulesReviewStatus [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>resourceNames</CODE><BR /><I>string array</I></TD><TD>ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>Resources is a list of resources this rule applies to.  &#34;*&#34; means all in the specified apiGroups.  &#34;*/foo&#34; represents the subresource &#39;foo&#39; for all resources in the specified apiGroups.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  &#34;*&#34; means all.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="roleref-v1-rbac-authorization-k8s-io">RoleRef v1 rbac.authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>RoleRef</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>RoleRef contains information that points to the role being used</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#roleref-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#roleref-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1]</a></LI>
+  <LI><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup is the group for the resource being referenced</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is the type of resource being referenced</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of resource being referenced</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="rollingupdatestatefulsetstrategy-v1-apps">RollingUpdateStatefulSetStrategy v1 apps</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>RollingUpdateStatefulSetStrategy</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#statefulsetupdatestrategy-v1-apps">StatefulSetUpdateStrategy [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>partition</CODE><BR /><I>integer</I></TD><TD>Partition indicates the ordinal at which the StatefulSet should be partitioned. Default value is 0.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="rulewithoperations-v1-admissionregistration-k8s-io">RuleWithOperations v1 admissionregistration.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>RuleWithOperations</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#rulewithoperations-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhook-v1-admissionregistration-k8s-io">MutatingWebhook [admissionregistration/v1]</a></LI>
+  <LI><a href="#validatingwebhook-v1-admissionregistration-k8s-io">ValidatingWebhook [admissionregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>APIGroups is the API groups the resources belong to. &#39;\*&#39; is all groups. If &#39;\*&#39; is present, the length of the slice must be one. Required.</TD></TR>
+<TR><TD><CODE>apiVersions</CODE><BR /><I>string array</I></TD><TD>APIVersions is the API versions the resources belong to. &#39;\*&#39; is all versions. If &#39;\*&#39; is present, the length of the slice must be one. Required.</TD></TR>
+<TR><TD><CODE>operations</CODE><BR /><I>string array</I></TD><TD>Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If &#39;\*&#39; is present, the length of the slice must be one. Required.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>Resources is a list of resources this rule applies to.  For example: &#39;pods&#39; means pods. &#39;pods/log&#39; means the log subresource of pods. &#39;\*&#39; means all resources, but not subresources. &#39;pods/\*&#39; means all subresources of pods. &#39;\*/scale&#39; means all scale subresources. &#39;\*/\*&#39; means all resources and their subresources.  If wildcard is present, the validation rule will ensure resources do not overlap with each other.  Depending on the enclosing object, subresources might not be allowed. Required.</TD></TR>
+<TR><TD><CODE>scope</CODE><BR /><I>string</I></TD><TD>scope specifies the scope of this rule. Valid values are &#34;Cluster&#34;, &#34;Namespaced&#34;, and &#34;*&#34; &#34;Cluster&#34; means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. &#34;Namespaced&#34; means that only namespaced resources will match this rule. &#34;*&#34; means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is &#34;*&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="runasgroupstrategyoptions-v1beta1-policy">RunAsGroupStrategyOptions v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>RunAsGroupStrategyOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ranges</CODE><BR /><I><a href="#idrange-v1beta1-policy">IDRange</a> array</I></TD><TD>ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.</TD></TR>
+<TR><TD><CODE>rule</CODE><BR /><I>string</I></TD><TD>rule is the strategy that will dictate the allowable RunAsGroup values that may be set.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="runasuserstrategyoptions-v1beta1-policy">RunAsUserStrategyOptions v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>RunAsUserStrategyOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ranges</CODE><BR /><I><a href="#idrange-v1beta1-policy">IDRange</a> array</I></TD><TD>ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.</TD></TR>
+<TR><TD><CODE>rule</CODE><BR /><I>string</I></TD><TD>rule is the strategy that will dictate the allowable RunAsUser values that may be set.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="runtimeclassstrategyoptions-v1beta1-policy">RuntimeClassStrategyOptions v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>RuntimeClassStrategyOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowedRuntimeClassNames</CODE><BR /><I>string array</I></TD><TD>allowedRuntimeClassNames is an allowlist of RuntimeClass names that may be specified on a pod. A value of &#34;*&#34; means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.</TD></TR>
+<TR><TD><CODE>defaultRuntimeClassName</CODE><BR /><I>string</I></TD><TD>defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="selinuxoptions-v1-core">SELinuxOptions v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SELinuxOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SELinuxOptions are the labels to be applied to the container</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritycontext-v1-core">PodSecurityContext [core/v1]</a></LI>
+  <LI><a href="#selinuxstrategyoptions-v1beta1-policy">SELinuxStrategyOptions [policy/v1beta1]</a></LI>
+  <LI><a href="#securitycontext-v1-core">SecurityContext [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>level</CODE><BR /><I>string</I></TD><TD>Level is SELinux level label that applies to the container.</TD></TR>
+<TR><TD><CODE>role</CODE><BR /><I>string</I></TD><TD>Role is a SELinux role label that applies to the container.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type is a SELinux type label that applies to the container.</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>User is a SELinux user label that applies to the container.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="selinuxstrategyoptions-v1beta1-policy">SELinuxStrategyOptions v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>SELinuxStrategyOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rule</CODE><BR /><I>string</I></TD><TD>rule is the strategy that will dictate the allowable labels that may be set.</TD></TR>
+<TR><TD><CODE>seLinuxOptions</CODE><BR /><I><a href="#selinuxoptions-v1-core">SELinuxOptions</a></I></TD><TD>seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="scale-v1-autoscaling">Scale v1 autoscaling</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Scale</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Scale represents a scaling request for a resource.</P>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#scalespec-v1-autoscaling">ScaleSpec</a></I></TD><TD>defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#scalestatus-v1-autoscaling">ScaleStatus</a></I></TD><TD>current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="scaleiopersistentvolumesource-v1-core">ScaleIOPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ScaleIOPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ScaleIOPersistentVolumeSource represents a persistent ScaleIO volume</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Default is &#34;xfs&#34;</TD></TR>
+<TR><TD><CODE>gateway</CODE><BR /><I>string</I></TD><TD>The host address of the ScaleIO API Gateway.</TD></TR>
+<TR><TD><CODE>protectionDomain</CODE><BR /><I>string</I></TD><TD>The name of the ScaleIO Protection Domain for the configured storage.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#secretreference-v1-core">SecretReference</a></I></TD><TD>SecretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.</TD></TR>
+<TR><TD><CODE>sslEnabled</CODE><BR /><I>boolean</I></TD><TD>Flag to enable/disable SSL communication with Gateway, default false</TD></TR>
+<TR><TD><CODE>storageMode</CODE><BR /><I>string</I></TD><TD>Indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.</TD></TR>
+<TR><TD><CODE>storagePool</CODE><BR /><I>string</I></TD><TD>The ScaleIO Storage Pool associated with the protection domain.</TD></TR>
+<TR><TD><CODE>system</CODE><BR /><I>string</I></TD><TD>The name of the storage system as configured in ScaleIO.</TD></TR>
+<TR><TD><CODE>volumeName</CODE><BR /><I>string</I></TD><TD>The name of a volume already created in the ScaleIO system that is associated with this volume source.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="scaleiovolumesource-v1-core">ScaleIOVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ScaleIOVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ScaleIOVolumeSource represents a persistent ScaleIO volume</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Default is &#34;xfs&#34;.</TD></TR>
+<TR><TD><CODE>gateway</CODE><BR /><I>string</I></TD><TD>The host address of the ScaleIO API Gateway.</TD></TR>
+<TR><TD><CODE>protectionDomain</CODE><BR /><I>string</I></TD><TD>The name of the ScaleIO Protection Domain for the configured storage.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>SecretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.</TD></TR>
+<TR><TD><CODE>sslEnabled</CODE><BR /><I>boolean</I></TD><TD>Flag to enable/disable SSL communication with Gateway, default false</TD></TR>
+<TR><TD><CODE>storageMode</CODE><BR /><I>string</I></TD><TD>Indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.</TD></TR>
+<TR><TD><CODE>storagePool</CODE><BR /><I>string</I></TD><TD>The ScaleIO Storage Pool associated with the protection domain.</TD></TR>
+<TR><TD><CODE>system</CODE><BR /><I>string</I></TD><TD>The name of the storage system as configured in ScaleIO.</TD></TR>
+<TR><TD><CODE>volumeName</CODE><BR /><I>string</I></TD><TD>The name of a volume already created in the ScaleIO system that is associated with this volume source.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="scheduling-v1-node-k8s-io">Scheduling v1 node.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Scheduling</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#scheduling-v1beta1-node-k8s-io">v1beta1</a>
+<a href="#scheduling-v1alpha1-node-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclass-v1-node-k8s-io">RuntimeClass [node/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nodeSelector</CODE><BR /><I>object</I></TD><TD>nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod&#39;s existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.</TD></TR>
+<TR><TD><CODE>tolerations</CODE><BR /><I><a href="#toleration-v1-core">Toleration</a> array</I></TD><TD>tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="scopeselector-v1-core">ScopeSelector v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ScopeSelector</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A scope selector represents the AND of the selectors represented by the scoped-resource selector requirements.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#resourcequotaspec-v1-core">ResourceQuotaSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>matchExpressions</CODE><BR /><I><a href="#scopedresourceselectorrequirement-v1-core">ScopedResourceSelectorRequirement</a> array</I></TD><TD>A list of scope selector requirements by scope of the resources.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="scopedresourceselectorrequirement-v1-core">ScopedResourceSelectorRequirement v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ScopedResourceSelectorRequirement</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A scoped-resource selector requirement is a selector that contains values, a scope name, and an operator that relates the scope name and values.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#scopeselector-v1-core">ScopeSelector [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>operator</CODE><BR /><I>string</I></TD><TD>Represents a scope&#39;s relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.</TD></TR>
+<TR><TD><CODE>scopeName</CODE><BR /><I>string</I></TD><TD>The name of the scope that the selector applies to.</TD></TR>
+<TR><TD><CODE>values</CODE><BR /><I>string array</I></TD><TD>An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="seccompprofile-v1-core">SeccompProfile v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SeccompProfile</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SeccompProfile defines a pod/container&#39;s seccomp profile settings. Only one profile source may be set.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritycontext-v1-core">PodSecurityContext [core/v1]</a></LI>
+  <LI><a href="#securitycontext-v1-core">SecurityContext [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>localhostProfile</CODE><BR /><I>string</I></TD><TD>localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet&#39;s configured seccomp profile location. Must only be set if type is &#34;Localhost&#34;.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type indicates which kind of seccomp profile will be applied. Valid options are:  Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="secretenvsource-v1-core">SecretEnvSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SecretEnvSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SecretEnvSource selects a Secret to populate the environment variables with.
+
+The contents of the target Secret&#39;s Data field will represent the key-value pairs as environment variables.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#envfromsource-v1-core">EnvFromSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the Secret must be defined</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="secretkeyselector-v1-core">SecretKeySelector v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SecretKeySelector</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SecretKeySelector selects a key of a Secret.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#envvarsource-v1-core">EnvVarSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>key</CODE><BR /><I>string</I></TD><TD>The key of the secret to select from.  Must be a valid secret key.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the Secret or its key must be defined</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="secretprojection-v1-core">SecretProjection v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SecretProjection</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Adapts a secret into a projected volume.
+
+The contents of the target Secret&#39;s Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeprojection-v1-core">VolumeProjection [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#keytopath-v1-core">KeyToPath</a> array</I></TD><TD>If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the &#39;..&#39; path or start with &#39;..&#39;.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the Secret or its key must be defined</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="secretreference-v1-core">SecretReference v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SecretReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csipersistentvolumesource-v1-core">CSIPersistentVolumeSource [core/v1]</a></LI>
+  <LI><a href="#cephfspersistentvolumesource-v1-core">CephFSPersistentVolumeSource [core/v1]</a></LI>
+  <LI><a href="#cinderpersistentvolumesource-v1-core">CinderPersistentVolumeSource [core/v1]</a></LI>
+  <LI><a href="#flexpersistentvolumesource-v1-core">FlexPersistentVolumeSource [core/v1]</a></LI>
+  <LI><a href="#iscsipersistentvolumesource-v1-core">ISCSIPersistentVolumeSource [core/v1]</a></LI>
+  <LI><a href="#rbdpersistentvolumesource-v1-core">RBDPersistentVolumeSource [core/v1]</a></LI>
+  <LI><a href="#scaleiopersistentvolumesource-v1-core">ScaleIOPersistentVolumeSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is unique within a namespace to reference a secret resource.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace defines the space within which the secret name must be unique.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="secretvolumesource-v1-core">SecretVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SecretVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Adapts a Secret into a volume.
+
+The contents of the target Secret&#39;s Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>defaultMode</CODE><BR /><I>integer</I></TD><TD>Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#keytopath-v1-core">KeyToPath</a> array</I></TD><TD>If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the &#39;..&#39; path or start with &#39;..&#39;.</TD></TR>
+<TR><TD><CODE>optional</CODE><BR /><I>boolean</I></TD><TD>Specify whether the Secret or its keys must be defined</TD></TR>
+<TR><TD><CODE>secretName</CODE><BR /><I>string</I></TD><TD>Name of the secret in the pod&#39;s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="securitycontext-v1-core">SecurityContext v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SecurityContext</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext.  When both are set, the values in SecurityContext take precedence.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowPrivilegeEscalation</CODE><BR /><I>boolean</I></TD><TD>AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN</TD></TR>
+<TR><TD><CODE>capabilities</CODE><BR /><I><a href="#capabilities-v1-core">Capabilities</a></I></TD><TD>The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.</TD></TR>
+<TR><TD><CODE>privileged</CODE><BR /><I>boolean</I></TD><TD>Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.</TD></TR>
+<TR><TD><CODE>procMount</CODE><BR /><I>string</I></TD><TD>procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.</TD></TR>
+<TR><TD><CODE>readOnlyRootFilesystem</CODE><BR /><I>boolean</I></TD><TD>Whether this container has a read-only root filesystem. Default is false.</TD></TR>
+<TR><TD><CODE>runAsGroup</CODE><BR /><I>integer</I></TD><TD>The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+<TR><TD><CODE>runAsNonRoot</CODE><BR /><I>boolean</I></TD><TD>Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+<TR><TD><CODE>runAsUser</CODE><BR /><I>integer</I></TD><TD>The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+<TR><TD><CODE>seLinuxOptions</CODE><BR /><I><a href="#selinuxoptions-v1-core">SELinuxOptions</a></I></TD><TD>The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+<TR><TD><CODE>seccompProfile</CODE><BR /><I><a href="#seccompprofile-v1-core">SeccompProfile</a></I></TD><TD>The seccomp options to use by this container. If seccomp options are provided at both the pod &amp; container level, the container options override the pod options.</TD></TR>
+<TR><TD><CODE>windowsOptions</CODE><BR /><I><a href="#windowssecuritycontextoptions-v1-core">WindowsSecurityContextOptions</a></I></TD><TD>The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="serveraddressbyclientcidr-v1-meta">ServerAddressByClientCIDR v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServerAddressByClientCIDR</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ServerAddressByClientCIDR helps the client to determine the server address that they should use, depending on the clientCIDR that they match.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apigroup-v1-meta">APIGroup [meta/v1]</a></LI>
+  <LI><a href="#apiversions-v1-meta">APIVersions [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>clientCIDR</CODE><BR /><I>string</I></TD><TD>The CIDR with which clients can match their IP to figure out the server address that they should use.</TD></TR>
+<TR><TD><CODE>serverAddress</CODE><BR /><I>string</I></TD><TD>Address of this server, suitable for a client that matches the above CIDR. This can be a hostname, hostname:port, IP or IP:port.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="serverstorageversion-v1alpha1-internal-apiserver-k8s-io">ServerStorageVersion v1alpha1 internal.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>internal.apiserver.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>ServerStorageVersion</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>An API server instance reports the version it can decode and the version it encodes objects to when persisting objects in the backend.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageversionstatus-v1alpha1-internal-apiserver-k8s-io">StorageVersionStatus [apiserverinternal/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiServerID</CODE><BR /><I>string</I></TD><TD>The ID of the reporting API server.</TD></TR>
+<TR><TD><CODE>decodableVersions</CODE><BR /><I>string array</I></TD><TD>The API server can decode objects encoded in these versions. The encodingVersion must be included in the decodableVersions.</TD></TR>
+<TR><TD><CODE>encodingVersion</CODE><BR /><I>string</I></TD><TD>The API server encodes the object to this version when persisting it in the backend (e.g., etcd).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io">ServiceAccountSubject v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ServiceAccountSubject</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ServiceAccountSubject holds detailed information for service-account-kind subject.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#subject-v1beta1-flowcontrol-apiserver-k8s-io">Subject [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>`name` is the name of matching ServiceAccount objects, or &#34;*&#34; to match regardless of name. Required.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>`namespace` is the namespace of matching ServiceAccount objects. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="serviceaccounttokenprojection-v1-core">ServiceAccountTokenProjection v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServiceAccountTokenProjection</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeprojection-v1-core">VolumeProjection [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audience</CODE><BR /><I>string</I></TD><TD>Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.</TD></TR>
+<TR><TD><CODE>expirationSeconds</CODE><BR /><I>integer</I></TD><TD>ExpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is the path relative to the mount point of the file to project the token into.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="servicebackendport-v1-networking-k8s-io">ServiceBackendPort v1 networking.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServiceBackendPort</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ServiceBackendPort is the service port being referenced.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressservicebackend-v1-networking-k8s-io">IngressServiceBackend [networking/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of the port on the Service. This is a mutually exclusive setting with &#34;Number&#34;.</TD></TR>
+<TR><TD><CODE>number</CODE><BR /><I>integer</I></TD><TD>Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with &#34;Name&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="serviceport-v1-core">ServicePort v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServicePort</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ServicePort contains information on service&#39;s port.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#servicespec-v1-core">ServiceSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>appProtocol</CODE><BR /><I>string</I></TD><TD>The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. When considering the endpoints for a Service, this must match the &#39;name&#39; field in the EndpointPort. Optional if only one ServicePort is defined on this service.</TD></TR>
+<TR><TD><CODE>nodePort</CODE><BR /><I>integer</I></TD><TD>The port on each node on which this service is exposed when type is NodePort or LoadBalancer.  Usually assigned by the system. If a value is specified, in-range, and not in use it will be used, otherwise the operation will fail.  If not specified, a port will be allocated if this Service requires one.  If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>The port that will be exposed by this service.</TD></TR>
+<TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>The IP protocol for this port. Supports &#34;TCP&#34;, &#34;UDP&#34;, and &#34;SCTP&#34;. Default is TCP.</TD></TR>
+<TR><TD><CODE>targetPort</CODE></TD><TD>Number or name of the port to access on the pods targeted by the service. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. If this is a string, it will be looked up as a named port in the target Pod&#39;s container ports. If this is not specified, the value of the &#39;port&#39; field is used (an identity map). This field is ignored for services with clusterIP=None, and should be omitted or set equal to the &#39;port&#39; field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="servicereference-v1-admissionregistration-k8s-io">ServiceReference v1 admissionregistration.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServiceReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ServiceReference holds a reference to Service.legacy.k8s.io</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#servicereference-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+<a href="#servicereference-v1beta1-apiextensions-k8s-io">v1beta1</a>
+<a href="#servicereference-v1beta1-apiregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#webhookclientconfig-v1-admissionregistration-k8s-io">WebhookClientConfig [admissionregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>`name` is the name of the service. Required</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>`namespace` is the namespace of the service. Required</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>`path` is an optional URL path which will be sent in any request to this service.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="sessionaffinityconfig-v1-core">SessionAffinityConfig v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SessionAffinityConfig</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SessionAffinityConfig represents the configurations of session affinity.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#servicespec-v1-core">ServiceSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>clientIP</CODE><BR /><I><a href="#clientipconfig-v1-core">ClientIPConfig</a></I></TD><TD>clientIP contains the configurations of Client IP based session affinity.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="statefulsetcondition-v1-apps">StatefulSetCondition v1 apps</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StatefulSetCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>StatefulSetCondition describes the state of a statefulset at a certain point.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#statefulsetstatus-v1-apps">StatefulSetStatus [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human readable message indicating details about the transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>The reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of statefulset condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="statefulsetupdatestrategy-v1-apps">StatefulSetUpdateStrategy v1 apps</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apps</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StatefulSetUpdateStrategy</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#statefulsetspec-v1-apps">StatefulSetSpec [apps/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rollingUpdate</CODE><BR /><I><a href="#rollingupdatestatefulsetstrategy-v1-apps">RollingUpdateStatefulSetStrategy</a></I></TD><TD>RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="status-v1-meta">Status v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Status</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Status is a return value for calls that don&#39;t return other objects.</P>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>code</CODE><BR /><I>integer</I></TD><TD>Suggested HTTP return code for this status, 0 if not set.</TD></TR>
+<TR><TD><CODE>details</CODE><BR /><I><a href="#statusdetails-v1-meta">StatusDetails</a></I></TD><TD>Extended data associated with the reason.  Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human-readable description of the status of this operation.</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>A machine-readable description of why this operation is in the &#34;Failure&#34; status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the operation. One of: &#34;Success&#34; or &#34;Failure&#34;. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="statuscause-v1-meta">StatusCause v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StatusCause</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#statusdetails-v1-meta">StatusDetails [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>field</CODE><BR /><I>string</I></TD><TD>The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed.  Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.  Examples:   &#34;name&#34; - the field &#34;name&#34; on the current resource   &#34;items[0].name&#34; - the field &#34;name&#34; on the first array entry in &#34;items&#34;</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human-readable description of the cause of the error.  This field may be presented as-is to a reader.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>A machine-readable description of the cause of the error. If this value is empty there is no information available.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="statusdetails-v1-meta">StatusDetails v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StatusDetails</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#status-v1-meta">Status [meta/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>causes</CODE><BR /><I><a href="#statuscause-v1-meta">StatusCause</a> array</I></TD><TD>The Causes array includes more details associated with the StatusReason failure. Not all StatusReasons may provide detailed causes.</TD></TR>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>The group attribute of the resource associated with the status StatusReason.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>The kind attribute of the resource associated with the status StatusReason. On some operations may differ from the requested resource Kind. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).</TD></TR>
+<TR><TD><CODE>retryAfterSeconds</CODE><BR /><I>integer</I></TD><TD>If specified, the time in seconds before the operation should be retried. Some errors may indicate the client must take an alternate action - for those errors this field may indicate how long to wait before taking the alternate action.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID of the resource. (when there is a single resource which can be described). More info: http://kubernetes.io/docs/user-guide/identifiers#uids</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="storageospersistentvolumesource-v1-core">StorageOSPersistentVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StorageOSPersistentVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a StorageOS persistent volume resource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>SecretRef specifies the secret to use for obtaining the StorageOS API credentials.  If not specified, default values will be attempted.</TD></TR>
+<TR><TD><CODE>volumeName</CODE><BR /><I>string</I></TD><TD>VolumeName is the human-readable name of the StorageOS volume.  Volume names are only unique within a namespace.</TD></TR>
+<TR><TD><CODE>volumeNamespace</CODE><BR /><I>string</I></TD><TD>VolumeNamespace specifies the scope of the volume within StorageOS.  If no namespace is specified then the Pod&#39;s namespace will be used.  This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to &#34;default&#34; if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="storageosvolumesource-v1-core">StorageOSVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>StorageOSVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a StorageOS persistent volume resource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.</TD></TR>
+<TR><TD><CODE>secretRef</CODE><BR /><I><a href="#localobjectreference-v1-core">LocalObjectReference</a></I></TD><TD>SecretRef specifies the secret to use for obtaining the StorageOS API credentials.  If not specified, default values will be attempted.</TD></TR>
+<TR><TD><CODE>volumeName</CODE><BR /><I>string</I></TD><TD>VolumeName is the human-readable name of the StorageOS volume.  Volume names are only unique within a namespace.</TD></TR>
+<TR><TD><CODE>volumeNamespace</CODE><BR /><I>string</I></TD><TD>VolumeNamespace specifies the scope of the volume within StorageOS.  If no namespace is specified then the Pod&#39;s namespace will be used.  This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to &#34;default&#34; if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="storageversioncondition-v1alpha1-internal-apiserver-k8s-io">StorageVersionCondition v1alpha1 internal.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>internal.apiserver.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>StorageVersionCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Describes the state of the storageVersion at a certain point.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageversionstatus-v1alpha1-internal-apiserver-k8s-io">StorageVersionStatus [apiserverinternal/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>A human readable message indicating details about the transition.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>If set, this represents the .metadata.generation that the condition was set based upon.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>The reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type of the condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="subject-v1beta1-flowcontrol-apiserver-k8s-io">Subject v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Subject</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subject-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#subject-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io">PolicyRulesWithSubjects [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>group</CODE><BR /><I><a href="#groupsubject-v1beta1-flowcontrol-apiserver-k8s-io">GroupSubject</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Required</TD></TR>
+<TR><TD><CODE>serviceAccount</CODE><BR /><I><a href="#serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io">ServiceAccountSubject</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I><a href="#usersubject-v1beta1-flowcontrol-apiserver-k8s-io">UserSubject</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="subjectrulesreviewstatus-v1-authorization-k8s-io">SubjectRulesReviewStatus v1 authorization.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>SubjectRulesReviewStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it&#39;s safe to assume the subject has that permission, even if that list is incomplete.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subjectrulesreviewstatus-v1beta1-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectrulesreview-v1-authorization-k8s-io">SelfSubjectRulesReview [authorization/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>evaluationError</CODE><BR /><I>string</I></TD><TD>EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn&#39;t support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.</TD></TR>
+<TR><TD><CODE>incomplete</CODE><BR /><I>boolean</I></TD><TD>Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn&#39;t support rules evaluation.</TD></TR>
+<TR><TD><CODE>nonResourceRules</CODE><BR /><I><a href="#nonresourcerule-v1-authorization-k8s-io">NonResourceRule</a> array</I></TD><TD>NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn&#39;t significant, may contain duplicates, and possibly be incomplete.</TD></TR>
+<TR><TD><CODE>resourceRules</CODE><BR /><I><a href="#resourcerule-v1-authorization-k8s-io">ResourceRule</a> array</I></TD><TD>ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn&#39;t significant, may contain duplicates, and possibly be incomplete.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="supplementalgroupsstrategyoptions-v1beta1-policy">SupplementalGroupsStrategyOptions v1beta1 policy</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>SupplementalGroupsStrategyOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritypolicyspec-v1beta1-policy">PodSecurityPolicySpec [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ranges</CODE><BR /><I><a href="#idrange-v1beta1-policy">IDRange</a> array</I></TD><TD>ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.</TD></TR>
+<TR><TD><CODE>rule</CODE><BR /><I>string</I></TD><TD>rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="sysctl-v1-core">Sysctl v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Sysctl</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Sysctl defines a kernel parameter to be set</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritycontext-v1-core">PodSecurityContext [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of a property to set</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>string</I></TD><TD>Value of a property to set</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="tcpsocketaction-v1-core">TCPSocketAction v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TCPSocketAction</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>TCPSocketAction describes an action based on opening a socket</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#handler-v1-core">Handler [core/v1]</a></LI>
+  <LI><a href="#probe-v1-core">Probe [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>host</CODE><BR /><I>string</I></TD><TD>Optional: Host name to connect to, defaults to the pod IP.</TD></TR>
+<TR><TD><CODE>port</CODE></TD><TD>Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="taint-v1-core">Taint v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Taint</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>The node this Taint is attached to has the &#34;effect&#34; on any pod that does not tolerate the Taint.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#nodespec-v1-core">NodeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>effect</CODE><BR /><I>string</I></TD><TD>Required. The effect of the taint on pods that do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule and NoExecute.</TD></TR>
+<TR><TD><CODE>key</CODE><BR /><I>string</I></TD><TD>Required. The taint key to be applied to a node.</TD></TR>
+<TR><TD><CODE>timeAdded</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>TimeAdded represents the time at which the taint was added. It is only written for NoExecute taints.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>string</I></TD><TD>The taint value corresponding to the taint key.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="time-v1-meta">Time v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Time</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicecondition-v1-apiregistration-k8s-io">APIServiceCondition [apiregistration/v1]</a></LI>
+  <LI><a href="#apiservicecondition-v1beta1-apiregistration-k8s-io">APIServiceCondition [apiregistration/v1beta1]</a></LI>
+  <LI><a href="#certificatesigningrequestcondition-v1-certificates-k8s-io">CertificateSigningRequestCondition [certificates/v1]</a></LI>
+  <LI><a href="#certificatesigningrequestcondition-v1beta1-certificates-k8s-io">CertificateSigningRequestCondition [certificates/v1beta1]</a></LI>
+  <LI><a href="#condition-v1-meta">Condition [meta/v1]</a></LI>
+  <LI><a href="#containerstaterunning-v1-core">ContainerStateRunning [core/v1]</a></LI>
+  <LI><a href="#containerstateterminated-v1-core">ContainerStateTerminated [core/v1]</a></LI>
+  <LI><a href="#cronjobstatus-v1-batch">CronJobStatus [batch/v1]</a></LI>
+  <LI><a href="#cronjobstatus-v1beta1-batch">CronJobStatus [batch/v1beta1]</a></LI>
+  <LI><a href="#customresourcedefinitioncondition-v1-apiextensions-k8s-io">CustomResourceDefinitionCondition [apiextensions/v1]</a></LI>
+  <LI><a href="#customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionCondition [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#daemonsetcondition-v1-apps">DaemonSetCondition [apps/v1]</a></LI>
+  <LI><a href="#deploymentcondition-v1-apps">DeploymentCondition [apps/v1]</a></LI>
+  <LI><a href="#event-v1-core">Event [core/v1]</a></LI>
+  <LI><a href="#event-v1-events-k8s-io">Event [events/v1]</a></LI>
+  <LI><a href="#event-v1beta1-events-k8s-io">Event [events/v1beta1]</a></LI>
+  <LI><a href="#flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io">FlowSchemaCondition [flowcontrol/v1beta1]</a></LI>
+  <LI><a href="#horizontalpodautoscalercondition-v2beta2-autoscaling">HorizontalPodAutoscalerCondition [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#horizontalpodautoscalercondition-v2beta1-autoscaling">HorizontalPodAutoscalerCondition [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#horizontalpodautoscalerstatus-v1-autoscaling">HorizontalPodAutoscalerStatus [autoscaling/v1]</a></LI>
+  <LI><a href="#horizontalpodautoscalerstatus-v2beta2-autoscaling">HorizontalPodAutoscalerStatus [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#horizontalpodautoscalerstatus-v2beta1-autoscaling">HorizontalPodAutoscalerStatus [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#jobcondition-v1-batch">JobCondition [batch/v1]</a></LI>
+  <LI><a href="#jobstatus-v1-batch">JobStatus [batch/v1]</a></LI>
+  <LI><a href="#managedfieldsentry-v1-meta">ManagedFieldsEntry [meta/v1]</a></LI>
+  <LI><a href="#namespacecondition-v1-core">NamespaceCondition [core/v1]</a></LI>
+  <LI><a href="#nodecondition-v1-core">NodeCondition [core/v1]</a></LI>
+  <LI><a href="#objectmeta-v1-meta">ObjectMeta [meta/v1]</a></LI>
+  <LI><a href="#persistentvolumeclaimcondition-v1-core">PersistentVolumeClaimCondition [core/v1]</a></LI>
+  <LI><a href="#podcondition-v1-core">PodCondition [core/v1]</a></LI>
+  <LI><a href="#podstatus-v1-core">PodStatus [core/v1]</a></LI>
+  <LI><a href="#prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io">PriorityLevelConfigurationCondition [flowcontrol/v1beta1]</a></LI>
+  <LI><a href="#replicasetcondition-v1-apps">ReplicaSetCondition [apps/v1]</a></LI>
+  <LI><a href="#replicationcontrollercondition-v1-core">ReplicationControllerCondition [core/v1]</a></LI>
+  <LI><a href="#statefulsetcondition-v1-apps">StatefulSetCondition [apps/v1]</a></LI>
+  <LI><a href="#storageversioncondition-v1alpha1-internal-apiserver-k8s-io">StorageVersionCondition [apiserverinternal/v1alpha1]</a></LI>
+  <LI><a href="#taint-v1-core">Taint [core/v1]</a></LI>
+  <LI><a href="#tokenrequeststatus-v1-authentication-k8s-io">TokenRequestStatus [authentication/v1]</a></LI>
+  <LI><a href="#volumeerror-v1-storage-k8s-io">VolumeError [storage/v1]</a></LI>
+  <LI><a href="#volumeerror-v1beta1-storage-k8s-io">VolumeError [storage/v1beta1]</a></LI>
+  <LI><a href="#volumeerror-v1alpha1-storage-k8s-io">VolumeError [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H2 id="toleration-v1-core">Toleration v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Toleration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>The pod this Toleration is attached to tolerates any taint that matches the triple &lt;key,value,effect&gt; using the matching operator &lt;operator&gt;.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+  <LI><a href="#scheduling-v1-node-k8s-io">Scheduling [node/v1]</a></LI>
+  <LI><a href="#scheduling-v1beta1-node-k8s-io">Scheduling [node/v1beta1]</a></LI>
+  <LI><a href="#scheduling-v1alpha1-node-k8s-io">Scheduling [node/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>effect</CODE><BR /><I>string</I></TD><TD>Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.</TD></TR>
+<TR><TD><CODE>key</CODE><BR /><I>string</I></TD><TD>Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.</TD></TR>
+<TR><TD><CODE>operator</CODE><BR /><I>string</I></TD><TD>Operator represents a key&#39;s relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.</TD></TR>
+<TR><TD><CODE>tolerationSeconds</CODE><BR /><I>integer</I></TD><TD>TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>string</I></TD><TD>Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="topologyselectorlabelrequirement-v1-core">TopologySelectorLabelRequirement v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TopologySelectorLabelRequirement</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A topology selector requirement is a selector that matches given label. This is an alpha feature and may change in the future.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#topologyselectorterm-v1-core">TopologySelectorTerm [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>key</CODE><BR /><I>string</I></TD><TD>The label key that the selector applies to.</TD></TR>
+<TR><TD><CODE>values</CODE><BR /><I>string array</I></TD><TD>An array of string values. One value must match the label to be selected. Each entry in Values is ORed.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="topologyselectorterm-v1-core">TopologySelectorTerm v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TopologySelectorTerm</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>A topology selector term represents the result of label queries. A null or empty topology selector term matches no objects. The requirements of them are ANDed. It provides a subset of functionality as NodeSelectorTerm. This is an alpha feature and may change in the future.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageclass-v1-storage-k8s-io">StorageClass [storage/v1]</a></LI>
+  <LI><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>matchLabelExpressions</CODE><BR /><I><a href="#topologyselectorlabelrequirement-v1-core">TopologySelectorLabelRequirement</a> array</I></TD><TD>A list of topology selector requirements by labels.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="topologyspreadconstraint-v1-core">TopologySpreadConstraint v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TopologySpreadConstraint</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>TopologySpreadConstraint specifies how to spread matching pods among the given topology.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podspec-v1-core">PodSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>labelSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.</TD></TR>
+<TR><TD><CODE>maxSkew</CODE><BR /><I>integer</I></TD><TD>MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 | zone3 | |   P   |   P   |       | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It&#39;s a required field. Default value is 1 and 0 is not allowed.</TD></TR>
+<TR><TD><CODE>topologyKey</CODE><BR /><I>string</I></TD><TD>TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each &lt;key, value&gt; as a &#34;bucket&#34;, and try to put balanced number of pods into each bucket. It&#39;s a required field.</TD></TR>
+<TR><TD><CODE>whenUnsatisfiable</CODE><BR /><I>string</I></TD><TD>WhenUnsatisfiable indicates how to deal with a pod if it doesn&#39;t satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,   but giving higher precedence to topologies that would help reduce the   skew. A constraint is considered &#34;Unsatisfiable&#34; for an incoming pod if and only if every possible node assigment for that pod would violate &#34;MaxSkew&#34; on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P |   P   |   P   | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won&#39;t make it *more* imbalanced. It&#39;s a required field.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="typedlocalobjectreference-v1-core">TypedLocalObjectReference v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TypedLocalObjectReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>TypedLocalObjectReference contains enough information to let you locate the typed referenced object inside the same namespace.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressbackend-v1-networking-k8s-io">IngressBackend [networking/v1]</a></LI>
+  <LI><a href="#ingressbackend-v1beta1-extensions">IngressBackend [extensions/v1beta1]</a></LI>
+  <LI><a href="#ingressbackend-v1beta1-networking-k8s-io">IngressBackend [networking/v1beta1]</a></LI>
+  <LI><a href="#persistentvolumeclaimspec-v1-core">PersistentVolumeClaimSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is the type of resource being referenced</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of resource being referenced</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="userinfo-v1-authentication-k8s-io">UserInfo v1 authentication.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authentication.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>UserInfo</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>UserInfo holds the information about the user needed to implement the user.Info interface.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#userinfo-v1beta1-authentication-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenreviewstatus-v1-authentication-k8s-io">TokenReviewStatus [authentication/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extra</CODE><BR /><I>object</I></TD><TD>Any additional information provided by the authenticator.</TD></TR>
+<TR><TD><CODE>groups</CODE><BR /><I>string array</I></TD><TD>The names of groups this user is a part of.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.</TD></TR>
+<TR><TD><CODE>username</CODE><BR /><I>string</I></TD><TD>The name that uniquely identifies this user among all active users.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="usersubject-v1beta1-flowcontrol-apiserver-k8s-io">UserSubject v1beta1 flowcontrol.apiserver.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>flowcontrol.apiserver.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>UserSubject</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>UserSubject holds detailed information for user-kind subject.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#subject-v1beta1-flowcontrol-apiserver-k8s-io">Subject [flowcontrol/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>`name` is the username that matches, or &#34;*&#34; to match all usernames. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="validatingwebhook-v1-admissionregistration-k8s-io">ValidatingWebhook v1 admissionregistration.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ValidatingWebhook</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>ValidatingWebhook describes an admission webhook and the resources and operations it applies to.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#validatingwebhook-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">ValidatingWebhookConfiguration [admissionregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionReviewVersions</CODE><BR /><I>string array</I></TD><TD>AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.</TD></TR>
+<TR><TD><CODE>clientConfig</CODE><BR /><I><a href="#webhookclientconfig-v1-admissionregistration-k8s-io">WebhookClientConfig</a></I></TD><TD>ClientConfig defines how to communicate with the hook. Required</TD></TR>
+<TR><TD><CODE>failurePolicy</CODE><BR /><I>string</I></TD><TD>FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.</TD></TR>
+<TR><TD><CODE>matchPolicy</CODE><BR /><I>string</I></TD><TD>matchPolicy defines how the &#34;rules&#34; list is used to match incoming requests. Allowed values are &#34;Exact&#34; or &#34;Equivalent&#34;.  - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.  - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.  Defaults to &#34;Equivalent&#34;</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where &#34;imagepolicy&#34; is the name of the webhook, and kubernetes.io is the name of the organization. Required.</TD></TR>
+<TR><TD><CODE>namespaceSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.  For example, to run the webhook on any objects whose namespace is not associated with &#34;runlevel&#34; of &#34;0&#34; or &#34;1&#34;;  you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;runlevel&#34;,       &#34;operator&#34;: &#34;NotIn&#34;,       &#34;values&#34;: [         &#34;0&#34;,         &#34;1&#34;       ]     }   ] }  If instead you want to only run the webhook on any objects whose namespace is associated with the &#34;environment&#34; of &#34;prod&#34; or &#34;staging&#34;; you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;environment&#34;,       &#34;operator&#34;: &#34;In&#34;,       &#34;values&#34;: [         &#34;prod&#34;,         &#34;staging&#34;       ]     }   ] }  See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.  Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>objectSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#rulewithoperations-v1-admissionregistration-k8s-io">RuleWithOperations</a> array</I></TD><TD>Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.</TD></TR>
+<TR><TD><CODE>sideEffects</CODE><BR /><I>string</I></TD><TD>SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE><BR /><I>integer</I></TD><TD>TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="volumeattachmentsource-v1-storage-k8s-io">VolumeAttachmentSource v1 storage.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeAttachmentSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeattachmentsource-v1beta1-storage-k8s-io">v1beta1</a>
+<a href="#volumeattachmentsource-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentspec-v1-storage-k8s-io">VolumeAttachmentSpec [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>inlineVolumeSpec</CODE><BR /><I><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec</a></I></TD><TD>inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod&#39;s inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod&#39;s inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.</TD></TR>
+<TR><TD><CODE>persistentVolumeName</CODE><BR /><I>string</I></TD><TD>Name of the persistent volume to attach.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="volumedevice-v1-core">VolumeDevice v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeDevice</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>volumeDevice describes a mapping of a raw block device within a container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>devicePath</CODE><BR /><I>string</I></TD><TD>devicePath is the path inside of the container that the device will be mapped to.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name must match the name of a persistentVolumeClaim in the pod</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="volumeerror-v1-storage-k8s-io">VolumeError v1 storage.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeError</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>VolumeError captures an error encountered during a volume operation.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeerror-v1beta1-storage-k8s-io">v1beta1</a>
+<a href="#volumeerror-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentstatus-v1-storage-k8s-io">VolumeAttachmentStatus [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>String detailing the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.</TD></TR>
+<TR><TD><CODE>time</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Time the error was encountered.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="volumemount-v1-core">VolumeMount v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeMount</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>VolumeMount describes a mounting of a Volume within a container.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#container-v1-core">Container [core/v1]</a></LI>
+  <LI><a href="#ephemeralcontainer-v1-core">EphemeralContainer [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>mountPath</CODE><BR /><I>string</I></TD><TD>Path within the container at which the volume should be mounted.  Must not contain &#39;:&#39;.</TD></TR>
+<TR><TD><CODE>mountPropagation</CODE><BR /><I>string</I></TD><TD>mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>This must match the Name of a Volume.</TD></TR>
+<TR><TD><CODE>readOnly</CODE><BR /><I>boolean</I></TD><TD>Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.</TD></TR>
+<TR><TD><CODE>subPath</CODE><BR /><I>string</I></TD><TD>Path within the volume from which the container&#39;s volume should be mounted. Defaults to &#34;&#34; (volume&#39;s root).</TD></TR>
+<TR><TD><CODE>subPathExpr</CODE><BR /><I>string</I></TD><TD>Expanded path within the volume from which the container&#39;s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container&#39;s environment. Defaults to &#34;&#34; (volume&#39;s root). SubPathExpr and SubPath are mutually exclusive.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="volumenodeaffinity-v1-core">VolumeNodeAffinity v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeNodeAffinity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>VolumeNodeAffinity defines constraints that limit what nodes this volume can be accessed from.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>required</CODE><BR /><I><a href="#nodeselector-v1-core">NodeSelector</a></I></TD><TD>Required specifies hard node constraints that must be met.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="volumenoderesources-v1-storage-k8s-io">VolumeNodeResources v1 storage.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeNodeResources</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>VolumeNodeResources is a set of resource limits for scheduling of volumes.</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumenoderesources-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinodedriver-v1-storage-k8s-io">CSINodeDriver [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>count</CODE><BR /><I>integer</I></TD><TD>Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="volumeprojection-v1-core">VolumeProjection v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VolumeProjection</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Projection that may be projected along with other supported volume types</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#projectedvolumesource-v1-core">ProjectedVolumeSource [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>configMap</CODE><BR /><I><a href="#configmapprojection-v1-core">ConfigMapProjection</a></I></TD><TD>information about the configMap data to project</TD></TR>
+<TR><TD><CODE>downwardAPI</CODE><BR /><I><a href="#downwardapiprojection-v1-core">DownwardAPIProjection</a></I></TD><TD>information about the downwardAPI data to project</TD></TR>
+<TR><TD><CODE>secret</CODE><BR /><I><a href="#secretprojection-v1-core">SecretProjection</a></I></TD><TD>information about the secret data to project</TD></TR>
+<TR><TD><CODE>serviceAccountToken</CODE><BR /><I><a href="#serviceaccounttokenprojection-v1-core">ServiceAccountTokenProjection</a></I></TD><TD>information about the serviceAccountToken data to project</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="vspherevirtualdiskvolumesource-v1-core">VsphereVirtualDiskVolumeSource v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>VsphereVirtualDiskVolumeSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Represents a vSphere volume resource.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec [core/v1]</a></LI>
+  <LI><a href="#volume-v1-core">Volume [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>fsType</CODE><BR /><I>string</I></TD><TD>Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. &#34;ext4&#34;, &#34;xfs&#34;, &#34;ntfs&#34;. Implicitly inferred to be &#34;ext4&#34; if unspecified.</TD></TR>
+<TR><TD><CODE>storagePolicyID</CODE><BR /><I>string</I></TD><TD>Storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.</TD></TR>
+<TR><TD><CODE>storagePolicyName</CODE><BR /><I>string</I></TD><TD>Storage Policy Based Management (SPBM) profile name.</TD></TR>
+<TR><TD><CODE>volumePath</CODE><BR /><I>string</I></TD><TD>Path that identifies vSphere volume vmdk</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watchevent-v1-meta">WatchEvent v1 meta</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>meta</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>WatchEvent</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>Event represents a single event to a watched resource.</P>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>object</CODE></TD><TD>Object is:  * If Type is Added or Modified: the new state of the object.  * If Type is Deleted: the state of the object immediately before deletion.  * If Type is Error: *Status is recommended; other types may make sense    depending on context.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="webhookclientconfig-v1-admissionregistration-k8s-io">WebhookClientConfig v1 admissionregistration.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>WebhookClientConfig</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>WebhookClientConfig contains the information to make a TLS connection with the webhook</P>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#webhookclientconfig-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+<a href="#webhookclientconfig-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhook-v1-admissionregistration-k8s-io">MutatingWebhook [admissionregistration/v1]</a></LI>
+  <LI><a href="#validatingwebhook-v1-admissionregistration-k8s-io">ValidatingWebhook [admissionregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>caBundle</CODE><BR /><I>string</I></TD><TD>`caBundle` is a PEM encoded CA bundle which will be used to validate the webhook&#39;s server certificate. If unspecified, system trust roots on the apiserver are used.</TD></TR>
+<TR><TD><CODE>service</CODE><BR /><I><a href="#servicereference-v1-admissionregistration-k8s-io">ServiceReference</a></I></TD><TD>`service` is a reference to the service for this webhook. Either `service` or `url` must be specified.  If the webhook is running within the cluster, then you should use `service`.</TD></TR>
+<TR><TD><CODE>url</CODE><BR /><I>string</I></TD><TD>`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.  The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.  Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.  The scheme must be &#34;https&#34;; the URL must begin with &#34;https://&#34;.  A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.  Attempting to use a user or basic auth e.g. &#34;user:password@&#34; is not allowed. Fragments (&#34;#...&#34;) and query parameters (&#34;?...&#34;) are not allowed, either.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="webhookconversion-v1-apiextensions-k8s-io">WebhookConversion v1 apiextensions.k8s.io</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>WebhookConversion</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>WebhookConversion describes how to call a conversion webhook</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourceconversion-v1-apiextensions-k8s-io">CustomResourceConversion [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>clientConfig</CODE><BR /><I><a href="#webhookclientconfig-v1-apiextensions-k8s-io">WebhookClientConfig</a></I></TD><TD>clientConfig is the instructions for how to call the webhook if strategy is `Webhook`.</TD></TR>
+<TR><TD><CODE>conversionReviewVersions</CODE><BR /><I>string array</I></TD><TD>conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="weightedpodaffinityterm-v1-core">WeightedPodAffinityTerm v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>WeightedPodAffinityTerm</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podaffinity-v1-core">PodAffinity [core/v1]</a></LI>
+  <LI><a href="#podantiaffinity-v1-core">PodAntiAffinity [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>podAffinityTerm</CODE><BR /><I><a href="#podaffinityterm-v1-core">PodAffinityTerm</a></I></TD><TD>Required. A pod affinity term, associated with the corresponding weight.</TD></TR>
+<TR><TD><CODE>weight</CODE><BR /><I>integer</I></TD><TD>weight associated with matching the corresponding podAffinityTerm, in the range 1-100.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="windowssecuritycontextoptions-v1-core">WindowsSecurityContextOptions v1 core</H2>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>core</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>WindowsSecurityContextOptions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<P>WindowsSecurityContextOptions contain Windows-specific options and credentials.</P>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#podsecuritycontext-v1-core">PodSecurityContext [core/v1]</a></LI>
+  <LI><a href="#securitycontext-v1-core">SecurityContext [core/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>gmsaCredentialSpec</CODE><BR /><I>string</I></TD><TD>GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.</TD></TR>
+<TR><TD><CODE>gmsaCredentialSpecName</CODE><BR /><I>string</I></TD><TD>GMSACredentialSpecName is the name of the GMSA credential spec to use.</TD></TR>
+<TR><TD><CODE>runAsUserName</CODE><BR /><I>string</I></TD><TD>The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="-strong-old-api-versions-strong-"><STRONG>OLD API VERSIONS</STRONG></H1>
+
+<P>This section contains older versions of resources shown above.</P>
+<H1 id="apiservice-v1beta1-apiregistration-k8s-io">APIService v1beta1 apiregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>APIService</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#apiservice-v1-apiregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicelist-v1beta1-apiregistration-k8s-io">APIServiceList [apiregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#apiservicespec-v1beta1-apiregistration-k8s-io">APIServiceSpec</a></I></TD><TD>Spec contains information for locating and communicating with a server</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#apiservicestatus-v1beta1-apiregistration-k8s-io">APIServiceStatus</a></I></TD><TD>Status contains derived information about an API server</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="apiservicespec-v1beta1-apiregistration-k8s-io">APIServiceSpec v1beta1 apiregistration</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService [apiregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>caBundle</CODE><BR /><I>string</I></TD><TD>CABundle is a PEM encoded CA bundle which will be used to validate an API server&#39;s serving certificate. If unspecified, system trust roots on the apiserver are used.</TD></TR>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>Group is the API group name this server hosts</TD></TR>
+<TR><TD><CODE>groupPriorityMinimum</CODE><BR /><I>integer</I></TD><TD>GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object.  (v1.bar before v1.foo) We&#39;d recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000s</TD></TR>
+<TR><TD><CODE>insecureSkipTLSVerify</CODE><BR /><I>boolean</I></TD><TD>InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged.  You should use the CABundle instead.</TD></TR>
+<TR><TD><CODE>service</CODE><BR /><I><a href="#servicereference-v1beta1-apiregistration-k8s-io">ServiceReference</a></I></TD><TD>Service is a reference to the service for this API server.  It must communicate on port 443. If the Service is nil, that means the handling for the API groupversion is handled locally on this server. The call will simply delegate to the normal handler chain to be fulfilled.</TD></TR>
+<TR><TD><CODE>version</CODE><BR /><I>string</I></TD><TD>Version is the API version this server hosts.  For example, &#34;v1&#34;</TD></TR>
+<TR><TD><CODE>versionPriority</CODE><BR /><I>integer</I></TD><TD>VersionPriority controls the ordering of this API version inside of its group.  Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it&#39;s inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is &#34;kube-like&#34;, it will sort above non &#34;kube-like&#34; version strings, which are ordered lexicographically. &#34;Kube-like&#34; versions start with a &#34;v&#34;, then are followed by a number (the major version), then optionally the string &#34;alpha&#34; or &#34;beta&#34; and another number (the minor version). These are sorted first by GA &gt; beta &gt; alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="apiservicestatus-v1beta1-apiregistration-k8s-io">APIServiceStatus v1beta1 apiregistration</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService [apiregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#apiservicecondition-v1beta1-apiregistration-k8s-io">APIServiceCondition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Current service state of apiService.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="apiservicelist-v1beta1-apiregistration-k8s-io">APIServiceList v1beta1 apiregistration</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-apiservice-v1beta1-apiregistration-k8s-io">Create</H2>
+<P>create an APIService</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apiregistration.k8s.io/v1beta1/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-apiservice-v1beta1-apiregistration-k8s-io">Patch</H2>
+<P>partially update the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiregistration.k8s.io/v1beta1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-apiservice-v1beta1-apiregistration-k8s-io">Replace</H2>
+<P>replace the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiregistration.k8s.io/v1beta1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-apiservice-v1beta1-apiregistration-k8s-io">Delete</H2>
+<P>delete an APIService</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiregistration.k8s.io/v1beta1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-apiservice-v1beta1-apiregistration-k8s-io">Delete Collection</H2>
+<P>delete collection of APIService</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiregistration.k8s.io/v1beta1/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-apiservice-v1beta1-apiregistration-k8s-io">Read</H2>
+<P>read the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1beta1/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-apiservice-v1beta1-apiregistration-k8s-io">List</H2>
+<P>list or watch objects of kind APIService</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1beta1/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservicelist-v1beta1-apiregistration-k8s-io">APIServiceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-apiservice-v1beta1-apiregistration-k8s-io">Watch</H2>
+<P>watch changes to an object of kind APIService. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1beta1/watch/apiservices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-apiservice-v1beta1-apiregistration-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of APIService. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1beta1/watch/apiservices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-apiservice-v1beta1-apiregistration-k8s-io">Patch Status</H2>
+<P>partially update status of the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiregistration.k8s.io/v1beta1/apiservices/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-apiservice-v1beta1-apiregistration-k8s-io">Read Status</H2>
+<P>read status of the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiregistration.k8s.io/v1beta1/apiservices/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-apiservice-v1beta1-apiregistration-k8s-io">Replace Status</H2>
+<P>replace status of the specified APIService</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiregistration.k8s.io/v1beta1/apiservices/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the APIService</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#apiservice-v1beta1-apiregistration-k8s-io">APIService</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="apiservicecondition-v1beta1-apiregistration-k8s-io">APIServiceCondition v1beta1 apiregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>APIServiceCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#apiservicecondition-v1-apiregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicestatus-v1beta1-apiregistration-k8s-io">APIServiceStatus [apiregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>Human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>Unique, one-word, CamelCase reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status is the status of the condition. Can be True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>Type is the type of the condition.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="aggregationrule-v1beta1-rbac-authorization-k8s-io">AggregationRule v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>AggregationRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#aggregationrule-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#aggregationrule-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>clusterRoleSelectors</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a> array</I></TD><TD>ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole&#39;s permissions will be added</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="aggregationrule-v1alpha1-rbac-authorization-k8s-io">AggregationRule v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>AggregationRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#aggregationrule-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#aggregationrule-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>clusterRoleSelectors</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a> array</I></TD><TD>ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole&#39;s permissions will be added</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="csidriver-v1beta1-storage-k8s-io">CSIDriver v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CSIDriver</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csidriver-v1-storage-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csidriverlist-v1beta1-storage-k8s-io">CSIDriverList [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#csidriverspec-v1beta1-storage-k8s-io">CSIDriverSpec</a></I></TD><TD>Specification of the CSI Driver.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csidriverspec-v1beta1-storage-k8s-io">CSIDriverSpec v1beta1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attachRequired</CODE><BR /><I>boolean</I></TD><TD>attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.  This field is immutable.</TD></TR>
+<TR><TD><CODE>fsGroupPolicy</CODE><BR /><I>string</I></TD><TD>Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate.  This field is immutable.</TD></TR>
+<TR><TD><CODE>podInfoOnMount</CODE><BR /><I>boolean</I></TD><TD>If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. &#34;csi.storage.k8s.io/pod.name&#34;: pod.Name &#34;csi.storage.k8s.io/pod.namespace&#34;: pod.Namespace &#34;csi.storage.k8s.io/pod.uid&#34;: string(pod.UID) &#34;csi.storage.k8s.io/ephemeral&#34;: &#34;true&#34; if the volume is an ephemeral inline volume                                 defined by a CSIVolumeSource, otherwise &#34;false&#34;  &#34;csi.storage.k8s.io/ephemeral&#34; is a new feature in Kubernetes 1.16. It is only required for drivers which support both the &#34;Persistent&#34; and &#34;Ephemeral&#34; VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn&#39;t support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.  This field is immutable.</TD></TR>
+<TR><TD><CODE>requiresRepublish</CODE><BR /><I>boolean</I></TD><TD>RequiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.  Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.</TD></TR>
+<TR><TD><CODE>storageCapacity</CODE><BR /><I>boolean</I></TD><TD>If set to true, storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information.  The check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.  Alternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.  This field is immutable.  This is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.</TD></TR>
+<TR><TD><CODE>tokenRequests</CODE><BR /><I><a href="#tokenrequest-v1beta1-storage-k8s-io">TokenRequest</a> array</I></TD><TD>TokenRequests indicates the CSI driver needs pods&#39; service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: &#34;csi.storage.k8s.io/serviceAccount.tokens&#34;: {   &#34;&lt;audience&gt;&#34;: {     &#34;token&#34;: &lt;token&gt;,     &#34;expirationTimestamp&#34;: &lt;expiration timestamp in RFC3339&gt;,   },   ... }  Note: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.</TD></TR>
+<TR><TD><CODE>volumeLifecycleModes</CODE><BR /><I>string array</I></TD><TD>VolumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is &#34;Persistent&#34;, which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is &#34;Ephemeral&#34;. In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future.  This field is immutable.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csidriverlist-v1beta1-storage-k8s-io">CSIDriverList v1beta1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a> array</I></TD><TD>items is the list of CSIDriver</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-csidriver-v1beta1-storage-k8s-io">Create</H2>
+<P>create a CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1beta1/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-csidriver-v1beta1-storage-k8s-io">Patch</H2>
+<P>partially update the specified CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1beta1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-csidriver-v1beta1-storage-k8s-io">Replace</H2>
+<P>replace the specified CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1beta1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-csidriver-v1beta1-storage-k8s-io">Delete</H2>
+<P>delete a CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-csidriver-v1beta1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-csidriver-v1beta1-storage-k8s-io">Read</H2>
+<P>read the specified CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriver-v1beta1-storage-k8s-io">CSIDriver</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-csidriver-v1beta1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind CSIDriver</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csidriverlist-v1beta1-storage-k8s-io">CSIDriverList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-csidriver-v1beta1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CSIDriver. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/csidrivers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIDriver</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-csidriver-v1beta1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CSIDriver. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/csidrivers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="csinode-v1beta1-storage-k8s-io">CSINode v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CSINode</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csinode-v1-storage-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinodelist-v1beta1-storage-k8s-io">CSINodeList [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>metadata.name must be the Kubernetes node name.</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#csinodespec-v1beta1-storage-k8s-io">CSINodeSpec</a></I></TD><TD>spec is the specification of CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csinodespec-v1beta1-storage-k8s-io">CSINodeSpec v1beta1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinode-v1beta1-storage-k8s-io">CSINode [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>drivers</CODE><BR /><I><a href="#csinodedriver-v1beta1-storage-k8s-io">CSINodeDriver</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csinodelist-v1beta1-storage-k8s-io">CSINodeList v1beta1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a> array</I></TD><TD>items is the list of CSINode</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-csinode-v1beta1-storage-k8s-io">Create</H2>
+<P>create a CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1beta1/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-csinode-v1beta1-storage-k8s-io">Patch</H2>
+<P>partially update the specified CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1beta1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-csinode-v1beta1-storage-k8s-io">Replace</H2>
+<P>replace the specified CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1beta1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-csinode-v1beta1-storage-k8s-io">Delete</H2>
+<P>delete a CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-csinode-v1beta1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-csinode-v1beta1-storage-k8s-io">Read</H2>
+<P>read the specified CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinode-v1beta1-storage-k8s-io">CSINode</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-csinode-v1beta1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind CSINode</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csinodelist-v1beta1-storage-k8s-io">CSINodeList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-csinode-v1beta1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CSINode. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/csinodes/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSINode</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-csinode-v1beta1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CSINode. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/csinodes</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="csinodedriver-v1beta1-storage-k8s-io">CSINodeDriver v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CSINodeDriver</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csinodedriver-v1-storage-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinodespec-v1beta1-storage-k8s-io">CSINodeSpec [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allocatable</CODE><BR /><I><a href="#volumenoderesources-v1beta1-storage-k8s-io">VolumeNodeResources</a></I></TD><TD>allocatable represents the volume resources of a node that are available for scheduling.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>This is the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.</TD></TR>
+<TR><TD><CODE>nodeID</CODE><BR /><I>string</I></TD><TD>nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as &#34;node1&#34;, but the storage system may refer to the same node as &#34;nodeA&#34;. When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. &#34;nodeA&#34; instead of &#34;node1&#34;. This field is required.</TD></TR>
+<TR><TD><CODE>topologyKeys</CODE><BR /><I>string array</I></TD><TD>topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. &#34;company.com/zone&#34;, &#34;company.com/region&#34;). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity v1alpha1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>CSIStorageCapacity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csistoragecapacity-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csistoragecapacitylist-v1alpha1-storage-k8s-io">CSIStorageCapacityList [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>capacity</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>maximumVolumeSize</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>MaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-&lt;uuid&gt;, a generated name, or a reverse-domain name which ends with the unique CSI driver name.  Objects are namespaced.  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>nodeTopology</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.</TD></TR>
+<TR><TD><CODE>storageClassName</CODE><BR /><I>string</I></TD><TD>The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csistoragecapacitylist-v1alpha1-storage-k8s-io">CSIStorageCapacityList v1alpha1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a> array</I></TD><TD>Items is the list of CSIStorageCapacity objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-csistoragecapacity-v1alpha1-storage-k8s-io">Create</H2>
+<P>create a CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-csistoragecapacity-v1alpha1-storage-k8s-io">Patch</H2>
+<P>partially update the specified CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-csistoragecapacity-v1alpha1-storage-k8s-io">Replace</H2>
+<P>replace the specified CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-csistoragecapacity-v1alpha1-storage-k8s-io">Delete</H2>
+<P>delete a CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-csistoragecapacity-v1alpha1-storage-k8s-io">Read</H2>
+<P>read the specified CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1alpha1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-csistoragecapacity-v1alpha1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacitylist-v1alpha1-storage-k8s-io">CSIStorageCapacityList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/csistoragecapacities</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacitylist-v1alpha1-storage-k8s-io">CSIStorageCapacityList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-csistoragecapacity-v1alpha1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/watch/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-csistoragecapacity-v1alpha1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/watch/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/watch/csistoragecapacities</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest v1beta1 certificates.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>certificates.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CertificateSigningRequest</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#certificatesigningrequest-v1-certificates-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequestlist-v1beta1-certificates-k8s-io">CertificateSigningRequestList [certificates/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#certificatesigningrequestspec-v1beta1-certificates-k8s-io">CertificateSigningRequestSpec</a></I></TD><TD>The certificate request itself and any additional information.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#certificatesigningrequeststatus-v1beta1-certificates-k8s-io">CertificateSigningRequestStatus</a></I></TD><TD>Derived information about the request.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="certificatesigningrequestspec-v1beta1-certificates-k8s-io">CertificateSigningRequestSpec v1beta1 certificates</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest [certificates/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extra</CODE><BR /><I>object</I></TD><TD>Extra information about the requesting user. See user.Info interface for details.</TD></TR>
+<TR><TD><CODE>groups</CODE><BR /><I>string array</I></TD><TD>Group information about the requesting user. See user.Info interface for details.</TD></TR>
+<TR><TD><CODE>request</CODE><BR /><I>string</I></TD><TD>Base64-encoded PKCS#10 CSR data</TD></TR>
+<TR><TD><CODE>signerName</CODE><BR /><I>string</I></TD><TD>Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:  1. If it&#39;s a kubelet client certificate, it is assigned     &#34;kubernetes.io/kube-apiserver-client-kubelet&#34;.  2. If it&#39;s a kubelet serving certificate, it is assigned     &#34;kubernetes.io/kubelet-serving&#34;.  3. Otherwise, it is assigned &#34;kubernetes.io/legacy-unknown&#34;. Distribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID information about the requesting user. See user.Info interface for details.</TD></TR>
+<TR><TD><CODE>usages</CODE><BR /><I>string array</I></TD><TD>allowedUsages specifies a set of usage contexts the key will be valid for. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3      https://tools.ietf.org/html/rfc5280#section-4.2.1.12 Valid values are:  &#34;signing&#34;,  &#34;digital signature&#34;,  &#34;content commitment&#34;,  &#34;key encipherment&#34;,  &#34;key agreement&#34;,  &#34;data encipherment&#34;,  &#34;cert sign&#34;,  &#34;crl sign&#34;,  &#34;encipher only&#34;,  &#34;decipher only&#34;,  &#34;any&#34;,  &#34;server auth&#34;,  &#34;client auth&#34;,  &#34;code signing&#34;,  &#34;email protection&#34;,  &#34;s/mime&#34;,  &#34;ipsec end system&#34;,  &#34;ipsec tunnel&#34;,  &#34;ipsec user&#34;,  &#34;timestamping&#34;,  &#34;ocsp signing&#34;,  &#34;microsoft sgc&#34;,  &#34;netscape sgc&#34;</TD></TR>
+<TR><TD><CODE>username</CODE><BR /><I>string</I></TD><TD>Information about the requesting user. See user.Info interface for details.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="certificatesigningrequeststatus-v1beta1-certificates-k8s-io">CertificateSigningRequestStatus v1beta1 certificates</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest [certificates/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>certificate</CODE><BR /><I>string</I></TD><TD>If request was approved, the controller will place the issued certificate here.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#certificatesigningrequestcondition-v1beta1-certificates-k8s-io">CertificateSigningRequestCondition</a> array</I></TD><TD>Conditions applied to the request, such as approval or denial.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="certificatesigningrequestlist-v1beta1-certificates-k8s-io">CertificateSigningRequestList v1beta1 certificates</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-certificatesigningrequest-v1beta1-certificates-k8s-io">Create</H2>
+<P>create a CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/certificates.k8s.io/v1beta1/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-certificatesigningrequest-v1beta1-certificates-k8s-io">Patch</H2>
+<P>partially update the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-certificatesigningrequest-v1beta1-certificates-k8s-io">Replace</H2>
+<P>replace the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-certificatesigningrequest-v1beta1-certificates-k8s-io">Delete</H2>
+<P>delete a CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io">Delete Collection</H2>
+<P>delete collection of CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/certificates.k8s.io/v1beta1/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-certificatesigningrequest-v1beta1-certificates-k8s-io">Read</H2>
+<P>read the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-certificatesigningrequest-v1beta1-certificates-k8s-io">List</H2>
+<P>list or watch objects of kind CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1beta1/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequestlist-v1beta1-certificates-k8s-io">CertificateSigningRequestList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-certificatesigningrequest-v1beta1-certificates-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1beta1/watch/certificatesigningrequests/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1beta1/watch/certificatesigningrequests</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io">Patch Status</H2>
+<P>partially update status of the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-certificatesigningrequest-v1beta1-certificates-k8s-io">Read Status</H2>
+<P>read status of the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io">Replace Status</H2>
+<P>replace status of the specified CertificateSigningRequest</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CertificateSigningRequest</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#certificatesigningrequest-v1beta1-certificates-k8s-io">CertificateSigningRequest</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="certificatesigningrequestcondition-v1beta1-certificates-k8s-io">CertificateSigningRequestCondition v1beta1 certificates.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>certificates.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CertificateSigningRequestCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#certificatesigningrequestcondition-v1-certificates-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#certificatesigningrequeststatus-v1beta1-certificates-k8s-io">CertificateSigningRequestStatus [certificates/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition&#39;s status is changed, the server defaults this to the current time.</TD></TR>
+<TR><TD><CODE>lastUpdateTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>timestamp for the last update to this condition</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>human readable message with details about the request state</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>brief reason for the request state</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>Status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be &#34;False&#34; or &#34;Unknown&#34;. Defaults to &#34;True&#34;. If unset, should be treated as &#34;True&#34;.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type of the condition. Known conditions include &#34;Approved&#34;, &#34;Denied&#34;, and &#34;Failed&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ClusterRole</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#clusterrole-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolelist-v1beta1-rbac-authorization-k8s-io">ClusterRoleList [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>aggregationRule</CODE><BR /><I><a href="#aggregationrule-v1beta1-rbac-authorization-k8s-io">AggregationRule</a></I></TD><TD>AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#policyrule-v1beta1-rbac-authorization-k8s-io">PolicyRule</a> array</I></TD><TD>Rules holds all the PolicyRules for this ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="clusterrolelist-v1beta1-rbac-authorization-k8s-io">ClusterRoleList v1beta1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a> array</I></TD><TD>Items is a list of ClusterRoles</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-clusterrole-v1beta1-rbac-authorization-k8s-io">Create</H2>
+<P>create a ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1beta1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-clusterrole-v1beta1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1beta1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-clusterrole-v1beta1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1beta1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-clusterrole-v1beta1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-clusterrole-v1beta1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-clusterrole-v1beta1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolelist-v1beta1-rbac-authorization-k8s-io">ClusterRoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-clusterrole-v1beta1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ClusterRole. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>ClusterRole</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#clusterrole-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolelist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleList [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>aggregationRule</CODE><BR /><I><a href="#aggregationrule-v1alpha1-rbac-authorization-k8s-io">AggregationRule</a></I></TD><TD>AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#policyrule-v1alpha1-rbac-authorization-k8s-io">PolicyRule</a> array</I></TD><TD>Rules holds all the PolicyRules for this ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="clusterrolelist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleList v1alpha1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a> array</I></TD><TD>Items is a list of ClusterRoles</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-clusterrole-v1alpha1-rbac-authorization-k8s-io">Create</H2>
+<P>create a ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1alpha1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-clusterrole-v1alpha1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1alpha1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-clusterrole-v1alpha1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1alpha1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-clusterrole-v1alpha1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-clusterrole-v1alpha1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-clusterrole-v1alpha1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind ClusterRole</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolelist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-clusterrole-v1alpha1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ClusterRole. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/clusterroles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRole</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/clusterroles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ClusterRoleBinding</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebindinglist-v1beta1-rbac-authorization-k8s-io">ClusterRoleBindingList [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>roleRef</CODE><BR /><I><a href="#roleref-v1beta1-rbac-authorization-k8s-io">RoleRef</a></I></TD><TD>RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</TD></TR>
+<TR><TD><CODE>subjects</CODE><BR /><I><a href="#subject-v1beta1-rbac-authorization-k8s-io">Subject</a> array</I></TD><TD>Subjects holds references to the objects the role applies to.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="clusterrolebindinglist-v1beta1-rbac-authorization-k8s-io">ClusterRoleBindingList v1beta1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a> array</I></TD><TD>Items is a list of ClusterRoleBindings</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Create</H2>
+<P>create a ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebindinglist-v1beta1-rbac-authorization-k8s-io">ClusterRoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>ClusterRoleBinding</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebindinglist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBindingList [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>roleRef</CODE><BR /><I><a href="#roleref-v1alpha1-rbac-authorization-k8s-io">RoleRef</a></I></TD><TD>RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</TD></TR>
+<TR><TD><CODE>subjects</CODE><BR /><I><a href="#subject-v1alpha1-rbac-authorization-k8s-io">Subject</a> array</I></TD><TD>Subjects holds references to the objects the role applies to.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="clusterrolebindinglist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBindingList v1alpha1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a> array</I></TD><TD>Items is a list of ClusterRoleBindings</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Create</H2>
+<P>create a ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1alpha1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1alpha1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1alpha1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind ClusterRoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#clusterrolebindinglist-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/clusterrolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ClusterRoleBinding</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/clusterrolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="containerresourcemetricsource-v2beta1-autoscaling">ContainerResourceMetricSource v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ContainerResourceMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#containerresourcemetricsource-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta1-autoscaling">MetricSpec [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>container</CODE><BR /><I>string</I></TD><TD>container is the name of the container in the pods of the scaling target</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the resource in question.</TD></TR>
+<TR><TD><CODE>targetAverageUtilization</CODE><BR /><I>integer</I></TD><TD>targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.</TD></TR>
+<TR><TD><CODE>targetAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the &#34;pods&#34; metric source type.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="containerresourcemetricstatus-v2beta1-autoscaling">ContainerResourceMetricStatus v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ContainerResourceMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#containerresourcemetricstatus-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta1-autoscaling">MetricStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>container</CODE><BR /><I>string</I></TD><TD>container is the name of the container in the pods of the scaling target</TD></TR>
+<TR><TD><CODE>currentAverageUtilization</CODE><BR /><I>integer</I></TD><TD>currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.  It will only be present if `targetAverageValue` was set in the corresponding metric specification.</TD></TR>
+<TR><TD><CODE>currentAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the &#34;pods&#34; metric source type. It will always be set, regardless of the corresponding metric specification.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the resource in question.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="cronjob-v1beta1-batch">CronJob v1beta1 batch</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CronJob</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#cronjob-v1-batch">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjoblist-v1beta1-batch">CronJobList [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#cronjobspec-v1beta1-batch">CronJobSpec</a></I></TD><TD>Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#cronjobstatus-v1beta1-batch">CronJobStatus</a></I></TD><TD>Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="cronjobspec-v1beta1-batch">CronJobSpec v1beta1 batch</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjob-v1beta1-batch">CronJob [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>concurrencyPolicy</CODE><BR /><I>string</I></TD><TD>Specifies how to treat concurrent executions of a Job. Valid values are: - &#34;Allow&#34; (default): allows CronJobs to run concurrently; - &#34;Forbid&#34;: forbids concurrent runs, skipping next run if previous run hasn&#39;t finished yet; - &#34;Replace&#34;: cancels currently running job and replaces it with a new one</TD></TR>
+<TR><TD><CODE>failedJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.</TD></TR>
+<TR><TD><CODE>jobTemplate</CODE><BR /><I><a href="#jobtemplatespec-v1beta1-batch">JobTemplateSpec</a></I></TD><TD>Specifies the job that will be created when executing a CronJob.</TD></TR>
+<TR><TD><CODE>schedule</CODE><BR /><I>string</I></TD><TD>The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.</TD></TR>
+<TR><TD><CODE>startingDeadlineSeconds</CODE><BR /><I>integer</I></TD><TD>Optional deadline in seconds for starting the job if it misses scheduled time for any reason.  Missed jobs executions will be counted as failed ones.</TD></TR>
+<TR><TD><CODE>successfulJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.</TD></TR>
+<TR><TD><CODE>suspend</CODE><BR /><I>boolean</I></TD><TD>This flag tells the controller to suspend subsequent executions, it does not apply to already started executions.  Defaults to false.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="cronjobstatus-v1beta1-batch">CronJobStatus v1beta1 batch</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjob-v1beta1-batch">CronJob [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>active</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a> array</I></TD><TD>A list of pointers to currently running jobs.</TD></TR>
+<TR><TD><CODE>lastScheduleTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Information when was the last time the job was successfully scheduled.</TD></TR>
+<TR><TD><CODE>lastSuccessfulTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Information when was the last time the job successfully completed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="cronjoblist-v1beta1-batch">CronJobList v1beta1 batch</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#cronjob-v1beta1-batch">CronJob</a> array</I></TD><TD>items is the list of CronJobs.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-cronjob-v1beta1-batch-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-cronjob-v1beta1-batch">Create</H2>
+<P>create a CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-cronjob-v1beta1-batch">Patch</H2>
+<P>partially update the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-cronjob-v1beta1-batch">Replace</H2>
+<P>replace the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-cronjob-v1beta1-batch">Delete</H2>
+<P>delete a CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-cronjob-v1beta1-batch">Delete Collection</H2>
+<P>delete collection of CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-cronjob-v1beta1-batch-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-cronjob-v1beta1-batch">Read</H2>
+<P>read the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-cronjob-v1beta1-batch">List</H2>
+<P>list or watch objects of kind CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjoblist-v1beta1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-cronjob-v1beta1-batch">List All Namespaces</H2>
+<P>list or watch objects of kind CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/cronjobs</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjoblist-v1beta1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-cronjob-v1beta1-batch">Watch</H2>
+<P>watch changes to an object of kind CronJob. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-cronjob-v1beta1-batch">Watch List</H2>
+<P>watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-cronjob-v1beta1-batch">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/watch/cronjobs</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-cronjob-v1beta1-batch-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-cronjob-v1beta1-batch">Patch Status</H2>
+<P>partially update status of the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-cronjob-v1beta1-batch">Read Status</H2>
+<P>read status of the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-cronjob-v1beta1-batch">Replace Status</H2>
+<P>replace status of the specified CronJob</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CronJob</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="crossversionobjectreference-v2beta2-autoscaling">CrossVersionObjectReference v2beta2 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>CrossVersionObjectReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#crossversionobjectreference-v1-autoscaling">v1</a>
+<a href="#crossversionobjectreference-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerspec-v2beta2-autoscaling">HorizontalPodAutoscalerSpec [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#objectmetricsource-v2beta2-autoscaling">ObjectMetricSource [autoscaling/v2beta2]</a></LI>
+  <LI><a href="#objectmetricstatus-v2beta2-autoscaling">ObjectMetricStatus [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>API version of the referent</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds&#34;</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="crossversionobjectreference-v2beta1-autoscaling">CrossVersionObjectReference v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>CrossVersionObjectReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#crossversionobjectreference-v1-autoscaling">v1</a>
+<a href="#crossversionobjectreference-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerspec-v2beta1-autoscaling">HorizontalPodAutoscalerSpec [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#objectmetricsource-v2beta1-autoscaling">ObjectMetricSource [autoscaling/v2beta1]</a></LI>
+  <LI><a href="#objectmetricstatus-v2beta1-autoscaling">ObjectMetricStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>API version of the referent</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds&#34;</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcecolumndefinition-v1beta1-apiextensions-k8s-io">CustomResourceColumnDefinition v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceColumnDefinition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcecolumndefinition-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#customresourcedefinitionversion-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionVersion [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>JSONPath</CODE><BR /><I>string</I></TD><TD>JSONPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.</TD></TR>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD>description is a human readable description of this column.</TD></TR>
+<TR><TD><CODE>format</CODE><BR /><I>string</I></TD><TD>format is an optional OpenAPI type definition for this column. The &#39;name&#39; format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is a human readable name for the column.</TD></TR>
+<TR><TD><CODE>priority</CODE><BR /><I>integer</I></TD><TD>priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourceconversion-v1beta1-apiextensions-k8s-io">CustomResourceConversion v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceConversion</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourceconversion-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conversionReviewVersions</CODE><BR /><I>string array</I></TD><TD>conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail. Defaults to `[&#34;v1beta1&#34;]`.</TD></TR>
+<TR><TD><CODE>strategy</CODE><BR /><I>string</I></TD><TD>strategy specifies how custom resources are converted between versions. Allowed values are: - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource. - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information   is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhookClientConfig to be set.</TD></TR>
+<TR><TD><CODE>webhookClientConfig</CODE><BR /><I><a href="#webhookclientconfig-v1beta1-apiextensions-k8s-io">WebhookClientConfig</a></I></TD><TD>webhookClientConfig is the instructions for how to call the webhook if strategy is `Webhook`. Required when `strategy` is set to `Webhook`.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceDefinition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinition-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionlist-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionList [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec</a></I></TD><TD>spec describes how the user wants the resources to appear</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#customresourcedefinitionstatus-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionStatus</a></I></TD><TD>status indicates the actual state of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec v1beta1 apiextensions</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>additionalPrinterColumns</CODE><BR /><I><a href="#customresourcecolumndefinition-v1beta1-apiextensions-k8s-io">CustomResourceColumnDefinition</a> array</I></TD><TD>additionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. If present, this field configures columns for all versions. Top-level and per-version columns are mutually exclusive. If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used.</TD></TR>
+<TR><TD><CODE>conversion</CODE><BR /><I><a href="#customresourceconversion-v1beta1-apiextensions-k8s-io">CustomResourceConversion</a></I></TD><TD>conversion defines conversion settings for the CRD.</TD></TR>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>group is the API group of the defined custom resource. The custom resources are served under `/apis/&lt;group&gt;/...`. Must match the name of the CustomResourceDefinition (in the form `&lt;names.plural&gt;.&lt;group&gt;`).</TD></TR>
+<TR><TD><CODE>names</CODE><BR /><I><a href="#customresourcedefinitionnames-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionNames</a></I></TD><TD>names specify the resource and kind names for the custom resource.</TD></TR>
+<TR><TD><CODE>preserveUnknownFields</CODE><BR /><I>boolean</I></TD><TD>preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be preserved when persisting to storage. apiVersion, kind, metadata and known fields inside metadata are always preserved. If false, schemas must be defined for all versions. Defaults to true in v1beta for backwards compatibility. Deprecated: will be required to be false in v1. Preservation of unknown fields can be specified in the validation schema using the `x-kubernetes-preserve-unknown-fields: true` extension. See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.</TD></TR>
+<TR><TD><CODE>scope</CODE><BR /><I>string</I></TD><TD>scope indicates whether the defined custom resource is cluster- or namespace-scoped. Allowed values are `Cluster` and `Namespaced`. Default is `Namespaced`.</TD></TR>
+<TR><TD><CODE>subresources</CODE><BR /><I><a href="#customresourcesubresources-v1beta1-apiextensions-k8s-io">CustomResourceSubresources</a></I></TD><TD>subresources specify what subresources the defined custom resource has. If present, this field configures subresources for all versions. Top-level and per-version subresources are mutually exclusive.</TD></TR>
+<TR><TD><CODE>validation</CODE><BR /><I><a href="#customresourcevalidation-v1beta1-apiextensions-k8s-io">CustomResourceValidation</a></I></TD><TD>validation describes the schema used for validation and pruning of the custom resource. If present, this validation schema is used to validate all versions. Top-level and per-version schemas are mutually exclusive.</TD></TR>
+<TR><TD><CODE>version</CODE><BR /><I>string</I></TD><TD>version is the API version of the defined custom resource. The custom resources are served under `/apis/&lt;group&gt;/&lt;version&gt;/...`. Must match the name of the first item in the `versions` list if `version` and `versions` are both specified. Optional if `versions` is specified. Deprecated: use `versions` instead.</TD></TR>
+<TR><TD><CODE>versions</CODE><BR /><I><a href="#customresourcedefinitionversion-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionVersion</a> array</I></TD><TD>versions is the list of all API versions of the defined custom resource. Optional if `version` is specified. The name of the first item in the `versions` list must match the `version` field if `version` and `versions` are both specified. Version names are used to compute the order in which served versions are listed in API discovery. If the version string is &#34;kube-like&#34;, it will sort above non &#34;kube-like&#34; version strings, which are ordered lexicographically. &#34;Kube-like&#34; versions start with a &#34;v&#34;, then are followed by a number (the major version), then optionally the string &#34;alpha&#34; or &#34;beta&#34; and another number (the minor version). These are sorted first by GA &gt; beta &gt; alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="customresourcedefinitionstatus-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionStatus v1beta1 apiextensions</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>acceptedNames</CODE><BR /><I><a href="#customresourcedefinitionnames-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionNames</a></I></TD><TD>acceptedNames are the names that are actually being used to serve discovery. They may be different than the names in spec.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionCondition</a> array</I></TD><TD>conditions indicate state for particular aspects of a CustomResourceDefinition</TD></TR>
+<TR><TD><CODE>storedVersions</CODE><BR /><I>string array</I></TD><TD>storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for stored versions in etcd. The field is mutable so a migration controller can finish a migration to another version (ensuring no old objects are left in storage), and then remove the rest of the versions from this list. Versions may not be removed from `spec.versions` while they exist in this list.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="customresourcedefinitionlist-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionList v1beta1 apiextensions</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a> array</I></TD><TD>items list individual CustomResourceDefinition objects</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-customresourcedefinition-v1beta1-apiextensions-k8s-io">Create</H2>
+<P>create a CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-customresourcedefinition-v1beta1-apiextensions-k8s-io">Patch</H2>
+<P>partially update the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-customresourcedefinition-v1beta1-apiextensions-k8s-io">Replace</H2>
+<P>replace the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-customresourcedefinition-v1beta1-apiextensions-k8s-io">Delete</H2>
+<P>delete a CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io">Delete Collection</H2>
+<P>delete collection of CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-customresourcedefinition-v1beta1-apiextensions-k8s-io">Read</H2>
+<P>read the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-customresourcedefinition-v1beta1-apiextensions-k8s-io">List</H2>
+<P>list or watch objects of kind CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinitionlist-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-customresourcedefinition-v1beta1-apiextensions-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1beta1/watch/customresourcedefinitions/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1beta1/watch/customresourcedefinitions</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io">Patch Status</H2>
+<P>partially update status of the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io">Read Status</H2>
+<P>read status of the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io">Replace Status</H2>
+<P>replace status of the specified CustomResourceDefinition</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CustomResourceDefinition</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#customresourcedefinition-v1beta1-apiextensions-k8s-io">CustomResourceDefinition</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionCondition v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceDefinitionCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinitioncondition-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionstatus-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionStatus [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastTransitionTime last time the condition transitioned from one status to another.</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>message is a human-readable message indicating details about last transition.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason is a unique, one-word, CamelCase reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>status is the status of the condition. Can be True, False, Unknown.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of the condition. Types include Established, NamesAccepted and Terminating.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcedefinitionnames-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionNames v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceDefinitionNames</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinitionnames-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#customresourcedefinitionstatus-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionStatus [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>categories</CODE><BR /><I>string array</I></TD><TD>categories is a list of grouped resources this custom resource belongs to (e.g. &#39;all&#39;). This is published in API discovery documents, and used by clients to support invocations like `kubectl get all`.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>kind is the serialized kind of the resource. It is normally CamelCase and singular. Custom resource instances will use this value as the `kind` attribute in API calls.</TD></TR>
+<TR><TD><CODE>listKind</CODE><BR /><I>string</I></TD><TD>listKind is the serialized kind of the list for this resource. Defaults to &#34;`kind`List&#34;.</TD></TR>
+<TR><TD><CODE>plural</CODE><BR /><I>string</I></TD><TD>plural is the plural name of the resource to serve. The custom resources are served under `/apis/&lt;group&gt;/&lt;version&gt;/.../&lt;plural&gt;`. Must match the name of the CustomResourceDefinition (in the form `&lt;names.plural&gt;.&lt;group&gt;`). Must be all lowercase.</TD></TR>
+<TR><TD><CODE>shortNames</CODE><BR /><I>string array</I></TD><TD>shortNames are short names for the resource, exposed in API discovery documents, and used by clients to support invocations like `kubectl get &lt;shortname&gt;`. It must be all lowercase.</TD></TR>
+<TR><TD><CODE>singular</CODE><BR /><I>string</I></TD><TD>singular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcedefinitionversion-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionVersion v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceDefinitionVersion</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcedefinitionversion-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>additionalPrinterColumns</CODE><BR /><I><a href="#customresourcecolumndefinition-v1beta1-apiextensions-k8s-io">CustomResourceColumnDefinition</a> array</I></TD><TD>additionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. Top-level and per-version columns are mutually exclusive. Per-version columns must not all be set to identical values (top-level columns should be used instead). If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used.</TD></TR>
+<TR><TD><CODE>deprecated</CODE><BR /><I>boolean</I></TD><TD>deprecated indicates this version of the custom resource API is deprecated. When set to true, API requests to this version receive a warning header in the server response. Defaults to false.</TD></TR>
+<TR><TD><CODE>deprecationWarning</CODE><BR /><I>string</I></TD><TD>deprecationWarning overrides the default warning returned to API clients. May only be set when `deprecated` is true. The default warning indicates this version is deprecated and recommends use of the newest served version of equal or greater stability, if one exists.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the version name, e.g. “v1”, “v2beta1”, etc. The custom resources are served under this version at `/apis/&lt;group&gt;/&lt;version&gt;/...` if `served` is true.</TD></TR>
+<TR><TD><CODE>schema</CODE><BR /><I><a href="#customresourcevalidation-v1beta1-apiextensions-k8s-io">CustomResourceValidation</a></I></TD><TD>schema describes the schema used for validation and pruning of this version of the custom resource. Top-level and per-version schemas are mutually exclusive. Per-version schemas must not all be set to identical values (top-level validation schema should be used instead).</TD></TR>
+<TR><TD><CODE>served</CODE><BR /><I>boolean</I></TD><TD>served is a flag enabling/disabling this version from being served via REST APIs</TD></TR>
+<TR><TD><CODE>storage</CODE><BR /><I>boolean</I></TD><TD>storage indicates this version should be used when persisting custom resources to storage. There must be exactly one version with storage=true.</TD></TR>
+<TR><TD><CODE>subresources</CODE><BR /><I><a href="#customresourcesubresources-v1beta1-apiextensions-k8s-io">CustomResourceSubresources</a></I></TD><TD>subresources specify what subresources this version of the defined custom resource have. Top-level and per-version subresources are mutually exclusive. Per-version subresources must not all be set to identical values (top-level subresources should be used instead).</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcesubresourcescale-v1beta1-apiextensions-k8s-io">CustomResourceSubresourceScale v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceSubresourceScale</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcesubresourcescale-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcesubresources-v1beta1-apiextensions-k8s-io">CustomResourceSubresources [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>labelSelectorPath</CODE><BR /><I>string</I></TD><TD>labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.</TD></TR>
+<TR><TD><CODE>specReplicasPath</CODE><BR /><I>string</I></TD><TD>specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.</TD></TR>
+<TR><TD><CODE>statusReplicasPath</CODE><BR /><I>string</I></TD><TD>statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io">CustomResourceSubresourceStatus v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceSubresourceStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcesubresourcestatus-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcesubresources-v1beta1-apiextensions-k8s-io">CustomResourceSubresources [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H1 id="customresourcesubresources-v1beta1-apiextensions-k8s-io">CustomResourceSubresources v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceSubresources</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcesubresources-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#customresourcedefinitionversion-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionVersion [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>scale</CODE><BR /><I><a href="#customresourcesubresourcescale-v1beta1-apiextensions-k8s-io">CustomResourceSubresourceScale</a></I></TD><TD>scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io">CustomResourceSubresourceStatus</a></I></TD><TD>status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="customresourcevalidation-v1beta1-apiextensions-k8s-io">CustomResourceValidation v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CustomResourceValidation</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#customresourcevalidation-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcedefinitionspec-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionSpec [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#customresourcedefinitionversion-v1beta1-apiextensions-k8s-io">CustomResourceDefinitionVersion [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>openAPIV3Schema</CODE><BR /><I><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps</a></I></TD><TD>openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="endpoint-v1beta1-discovery-k8s-io">Endpoint v1beta1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Endpoint</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpoint-v1-discovery-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice [discovery/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>addresses</CODE><BR /><I>string array</I></TD><TD>addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100.</TD></TR>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#endpointconditions-v1beta1-discovery-k8s-io">EndpointConditions</a></I></TD><TD>conditions contains information about the current status of the endpoint.</TD></TR>
+<TR><TD><CODE>hints</CODE><BR /><I><a href="#endpointhints-v1beta1-discovery-k8s-io">EndpointHints</a></I></TD><TD>hints contains information associated with how an endpoint should be consumed.</TD></TR>
+<TR><TD><CODE>hostname</CODE><BR /><I>string</I></TD><TD>hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.</TD></TR>
+<TR><TD><CODE>nodeName</CODE><BR /><I>string</I></TD><TD>nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node. This field can be enabled with the EndpointSliceNodeName feature gate.</TD></TR>
+<TR><TD><CODE>targetRef</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>targetRef is a reference to a Kubernetes object that represents this endpoint.</TD></TR>
+<TR><TD><CODE>topology</CODE><BR /><I>object</I></TD><TD>topology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node   where the endpoint is located. This should match the corresponding   node label. * topology.kubernetes.io/zone: the value indicates the zone where the   endpoint is located. This should match the corresponding node label. * topology.kubernetes.io/region: the value indicates the region where the   endpoint is located. This should match the corresponding node label. This field is deprecated and will be removed in future api versions.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="endpointconditions-v1beta1-discovery-k8s-io">EndpointConditions v1beta1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>EndpointConditions</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointconditions-v1-discovery-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpoint-v1beta1-discovery-k8s-io">Endpoint [discovery/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>ready</CODE><BR /><I>boolean</I></TD><TD>ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be &#34;true&#34; for terminating endpoints.</TD></TR>
+<TR><TD><CODE>serving</CODE><BR /><I>boolean</I></TD><TD>serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.</TD></TR>
+<TR><TD><CODE>terminating</CODE><BR /><I>boolean</I></TD><TD>terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="endpointhints-v1beta1-discovery-k8s-io">EndpointHints v1beta1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>EndpointHints</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointhints-v1-discovery-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpoint-v1beta1-discovery-k8s-io">Endpoint [discovery/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>forZones</CODE><BR /><I><a href="#forzone-v1beta1-discovery-k8s-io">ForZone</a> array</I></TD><TD>forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing. May contain a maximum of 8 entries.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="endpointport-v1-discovery-k8s-io">EndpointPort v1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointPort</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointport-v1beta1-discovery-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice [discovery/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>appProtocol</CODE><BR /><I>string</I></TD><TD>The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is dervied from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or &#39;-&#39;. * must start and end with an alphanumeric character. Default is empty string.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>The port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.</TD></TR>
+<TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="endpointport-v1beta1-discovery-k8s-io">EndpointPort v1beta1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>EndpointPort</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointport-v1-core">v1</a>
+<a href="#endpointport-v1-discovery-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice [discovery/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>appProtocol</CODE><BR /><I>string</I></TD><TD>The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is dervied from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or &#39;-&#39;. * must start and end with an alphanumeric character. Default is empty string.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>The port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.</TD></TR>
+<TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="endpointslice-v1beta1-discovery-k8s-io">EndpointSlice v1beta1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>EndpointSlice</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#endpointslice-v1-discovery-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList [discovery/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>addressType</CODE><BR /><I>string</I></TD><TD>addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>endpoints</CODE><BR /><I><a href="#endpoint-v1beta1-discovery-k8s-io">Endpoint</a> array</I></TD><TD>endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#endpointport-v1beta1-discovery-k8s-io">EndpointPort</a> array</I></TD><TD>ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates &#34;all ports&#34;. Each slice may include a maximum of 100 ports.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList v1beta1 discovery</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a> array</I></TD><TD>List of endpoint slices</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-endpointslice-v1beta1-discovery-k8s-io">Create</H2>
+<P>create an EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-endpointslice-v1beta1-discovery-k8s-io">Patch</H2>
+<P>partially update the specified EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-endpointslice-v1beta1-discovery-k8s-io">Replace</H2>
+<P>replace the specified EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-endpointslice-v1beta1-discovery-k8s-io">Delete</H2>
+<P>delete an EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-endpointslice-v1beta1-discovery-k8s-io">Delete Collection</H2>
+<P>delete collection of EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-endpointslice-v1beta1-discovery-k8s-io">Read</H2>
+<P>read the specified EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-endpointslice-v1beta1-discovery-k8s-io">List</H2>
+<P>list or watch objects of kind EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind EndpointSlice</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/endpointslices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-endpointslice-v1beta1-discovery-k8s-io">Watch</H2>
+<P>watch changes to an object of kind EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EndpointSlice</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-endpointslice-v1beta1-discovery-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/endpointslices</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="event-v1-events-k8s-io">Event v1 events.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>events.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Event</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#event-v1beta1-events-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#eventlist-v1-events-k8s-io">EventList [events/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>action</CODE><BR /><I>string</I></TD><TD>action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field cannot be empty for new Events and it can have at most 128 characters.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>deprecatedCount</CODE><BR /><I>integer</I></TD><TD>deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>deprecatedFirstTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>deprecatedLastTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>deprecatedSource</CODE><BR /><I><a href="#eventsource-v1-core">EventSource</a></I></TD><TD>deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>eventTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>eventTime is the time when this Event was first observed. It is required.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>note</CODE><BR /><I>string</I></TD><TD>note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason is why the action was taken. It is human-readable. This field cannot be empty for new Events and it can have at most 128 characters.</TD></TR>
+<TR><TD><CODE>regarding</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>regarding contains the object this Event is about. In most cases it&#39;s an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object.</TD></TR>
+<TR><TD><CODE>related</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object.</TD></TR>
+<TR><TD><CODE>reportingController</CODE><BR /><I>string</I></TD><TD>reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.</TD></TR>
+<TR><TD><CODE>reportingInstance</CODE><BR /><I>string</I></TD><TD>reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.</TD></TR>
+<TR><TD><CODE>series</CODE><BR /><I><a href="#eventseries-v1-events-k8s-io">EventSeries</a></I></TD><TD>series is data about the Event series this event represents or nil if it&#39;s a singleton Event.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable. This field cannot be empty for new Events.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="eventlist-v1-events-k8s-io">EventList v1 events</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#event-v1-events-k8s-io">Event</a> array</I></TD><TD>items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-event-v1-events-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-event-v1-events-k8s-io">Create</H2>
+<P>create an Event</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/events.k8s.io/v1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-event-v1-events-k8s-io">Patch</H2>
+<P>partially update the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-event-v1-events-k8s-io">Replace</H2>
+<P>replace the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-event-v1-events-k8s-io">Delete</H2>
+<P>delete an Event</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-event-v1-events-k8s-io">Delete Collection</H2>
+<P>delete collection of Event</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/events.k8s.io/v1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-event-v1-events-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-event-v1-events-k8s-io">Read</H2>
+<P>read the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-event-v1-events-k8s-io">List</H2>
+<P>list or watch objects of kind Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#eventlist-v1-events-k8s-io">EventList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-event-v1-events-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1/events</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#eventlist-v1-events-k8s-io">EventList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-event-v1-events-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1/watch/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-event-v1-events-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1/watch/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-event-v1-events-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1/watch/events</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="event-v1beta1-events-k8s-io">Event v1beta1 events.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>events.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Event</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#event-v1-core">v1</a>
+<a href="#event-v1-events-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#eventlist-v1beta1-events-k8s-io">EventList [events/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>action</CODE><BR /><I>string</I></TD><TD>action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field can have at most 128 characters.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>deprecatedCount</CODE><BR /><I>integer</I></TD><TD>deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>deprecatedFirstTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>deprecatedLastTimestamp</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>deprecatedSource</CODE><BR /><I><a href="#eventsource-v1-core">EventSource</a></I></TD><TD>deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type.</TD></TR>
+<TR><TD><CODE>eventTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>eventTime is the time when this Event was first observed. It is required.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>note</CODE><BR /><I>string</I></TD><TD>note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason is why the action was taken. It is human-readable. This field can have at most 128 characters.</TD></TR>
+<TR><TD><CODE>regarding</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>regarding contains the object this Event is about. In most cases it&#39;s an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object.</TD></TR>
+<TR><TD><CODE>related</CODE><BR /><I><a href="#objectreference-v1-core">ObjectReference</a></I></TD><TD>related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object.</TD></TR>
+<TR><TD><CODE>reportingController</CODE><BR /><I>string</I></TD><TD>reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.</TD></TR>
+<TR><TD><CODE>reportingInstance</CODE><BR /><I>string</I></TD><TD>reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.</TD></TR>
+<TR><TD><CODE>series</CODE><BR /><I><a href="#eventseries-v1beta1-events-k8s-io">EventSeries</a></I></TD><TD>series is data about the Event series this event represents or nil if it&#39;s a singleton Event.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="eventlist-v1beta1-events-k8s-io">EventList v1beta1 events</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#event-v1beta1-events-k8s-io">Event</a> array</I></TD><TD>items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-event-v1beta1-events-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-event-v1beta1-events-k8s-io">Create</H2>
+<P>create an Event</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/events.k8s.io/v1beta1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-event-v1beta1-events-k8s-io">Patch</H2>
+<P>partially update the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/events.k8s.io/v1beta1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-event-v1beta1-events-k8s-io">Replace</H2>
+<P>replace the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/events.k8s.io/v1beta1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-event-v1beta1-events-k8s-io">Delete</H2>
+<P>delete an Event</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/events.k8s.io/v1beta1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-event-v1beta1-events-k8s-io">Delete Collection</H2>
+<P>delete collection of Event</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/events.k8s.io/v1beta1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-event-v1beta1-events-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-event-v1beta1-events-k8s-io">Read</H2>
+<P>read the specified Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1beta1/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#event-v1beta1-events-k8s-io">Event</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-event-v1beta1-events-k8s-io">List</H2>
+<P>list or watch objects of kind Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1beta1/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#eventlist-v1beta1-events-k8s-io">EventList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-event-v1beta1-events-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Event</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1beta1/events</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#eventlist-v1beta1-events-k8s-io">EventList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-event-v1beta1-events-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1beta1/watch/namespaces/{namespace}/events/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Event</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-event-v1beta1-events-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1beta1/watch/namespaces/{namespace}/events</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-event-v1beta1-events-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/events.k8s.io/v1beta1/watch/events</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="eventseries-v1-events-k8s-io">EventSeries v1 events.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>events.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EventSeries</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#eventseries-v1beta1-events-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#event-v1-events-k8s-io">Event [events/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>count</CODE><BR /><I>integer</I></TD><TD>count is the number of occurrences in this series up to the last heartbeat time.</TD></TR>
+<TR><TD><CODE>lastObservedTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>lastObservedTime is the time when last Event from the series was seen before last heartbeat.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="eventseries-v1beta1-events-k8s-io">EventSeries v1beta1 events.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>events.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>EventSeries</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#eventseries-v1-core">v1</a>
+<a href="#eventseries-v1-events-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#event-v1beta1-events-k8s-io">Event [events/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>count</CODE><BR /><I>integer</I></TD><TD>count is the number of occurrences in this series up to the last heartbeat time.</TD></TR>
+<TR><TD><CODE>lastObservedTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>lastObservedTime is the time when last Event from the series was seen before last heartbeat.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="externaldocumentation-v1beta1-apiextensions-k8s-io">ExternalDocumentation v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ExternalDocumentation</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#externaldocumentation-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>url</CODE><BR /><I>string</I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="externalmetricsource-v2beta1-autoscaling">ExternalMetricSource v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ExternalMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#externalmetricsource-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta1-autoscaling">MetricSpec [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metricName</CODE><BR /><I>string</I></TD><TD>metricName is the name of the metric in question.</TD></TR>
+<TR><TD><CODE>metricSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>metricSelector is used to identify a specific time series within a given metric.</TD></TR>
+<TR><TD><CODE>targetAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>targetAverageValue is the target per-pod value of global metric (as a quantity). Mutually exclusive with TargetValue.</TD></TR>
+<TR><TD><CODE>targetValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>targetValue is the target value of the metric (as a quantity). Mutually exclusive with TargetAverageValue.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="externalmetricstatus-v2beta1-autoscaling">ExternalMetricStatus v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ExternalMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#externalmetricstatus-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta1-autoscaling">MetricStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>currentAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>currentAverageValue is the current value of metric averaged over autoscaled pods.</TD></TR>
+<TR><TD><CODE>currentValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>currentValue is the current value of the metric (as a quantity)</TD></TR>
+<TR><TD><CODE>metricName</CODE><BR /><I>string</I></TD><TD>metricName is the name of a metric used for autoscaling in metric system.</TD></TR>
+<TR><TD><CODE>metricSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>metricSelector is used to identify a specific time series within a given metric.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="forzone-v1beta1-discovery-k8s-io">ForZone v1beta1 discovery.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ForZone</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#forzone-v1-discovery-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#endpointhints-v1beta1-discovery-k8s-io">EndpointHints [discovery/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name represents the name of the zone.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="httpingresspath-v1beta1-extensions">HTTPIngressPath v1beta1 extensions</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extensions</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>HTTPIngressPath</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#httpingresspath-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#httpingressrulevalue-v1beta1-extensions">HTTPIngressRuleValue [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>backend</CODE><BR /><I><a href="#ingressbackend-v1beta1-extensions">IngressBackend</a></I></TD><TD>Backend defines the referenced service endpoint to which the traffic will be forwarded to.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional &#34;path&#34; part of a URL as defined by RFC 3986. Paths must begin with a &#39;/&#39;. When unspecified, all paths from incoming requests are matched.</TD></TR>
+<TR><TD><CODE>pathType</CODE><BR /><I>string</I></TD><TD>PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by &#39;/&#39;. Matching is   done on a path element by element basis. A path element refers is the   list of labels in the path split by the &#39;/&#39; separator. A request is a   match for path p if every p is an element-wise prefix of p of the   request path. Note that if the last element of the path is a substring   of the last element in request path, it is not a match (e.g. /foo/bar   matches /foo/bar/baz, but does not match /foo/barbaz). * ImplementationSpecific: Interpretation of the Path matching is up to   the IngressClass. Implementations can treat this as a separate PathType   or treat it identically to Prefix or Exact path types. Implementations are required to support all path types. Defaults to ImplementationSpecific.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="httpingresspath-v1beta1-networking-k8s-io">HTTPIngressPath v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>HTTPIngressPath</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#httpingresspath-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#httpingressrulevalue-v1beta1-networking-k8s-io">HTTPIngressRuleValue [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>backend</CODE><BR /><I><a href="#ingressbackend-v1beta1-networking-k8s-io">IngressBackend</a></I></TD><TD>Backend defines the referenced service endpoint to which the traffic will be forwarded to.</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional &#34;path&#34; part of a URL as defined by RFC 3986. Paths must begin with a &#39;/&#39;. When unspecified, all paths from incoming requests are matched.</TD></TR>
+<TR><TD><CODE>pathType</CODE><BR /><I>string</I></TD><TD>PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by &#39;/&#39;. Matching is   done on a path element by element basis. A path element refers is the   list of labels in the path split by the &#39;/&#39; separator. A request is a   match for path p if every p is an element-wise prefix of p of the   request path. Note that if the last element of the path is a substring   of the last element in request path, it is not a match (e.g. /foo/bar   matches /foo/bar/baz, but does not match /foo/barbaz). * ImplementationSpecific: Interpretation of the Path matching is up to   the IngressClass. Implementations can treat this as a separate PathType   or treat it identically to Prefix or Exact path types. Implementations are required to support all path types. Defaults to ImplementationSpecific.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="httpingressrulevalue-v1beta1-extensions">HTTPIngressRuleValue v1beta1 extensions</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extensions</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>HTTPIngressRuleValue</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#httpingressrulevalue-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressrule-v1beta1-extensions">IngressRule [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>paths</CODE><BR /><I><a href="#httpingresspath-v1beta1-extensions">HTTPIngressPath</a> array</I></TD><TD>A collection of paths that map requests to backends.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="httpingressrulevalue-v1beta1-networking-k8s-io">HTTPIngressRuleValue v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>HTTPIngressRuleValue</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#httpingressrulevalue-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressrule-v1beta1-networking-k8s-io">IngressRule [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>paths</CODE><BR /><I><a href="#httpingresspath-v1beta1-networking-k8s-io">HTTPIngressPath</a> array</I></TD><TD>A collection of paths that map requests to backends.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler v2beta2 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta2</CODE></TD><TD><CODE>HorizontalPodAutoscaler</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#horizontalpodautoscaler-v1-autoscaling">v1</a>
+<a href="#horizontalpodautoscaler-v2beta1-autoscaling">v2beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerlist-v2beta2-autoscaling">HorizontalPodAutoscalerList [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#horizontalpodautoscalerspec-v2beta2-autoscaling">HorizontalPodAutoscalerSpec</a></I></TD><TD>spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#horizontalpodautoscalerstatus-v2beta2-autoscaling">HorizontalPodAutoscalerStatus</a></I></TD><TD>status is the current information about the autoscaler.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerspec-v2beta2-autoscaling">HorizontalPodAutoscalerSpec v2beta2 autoscaling</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>behavior</CODE><BR /><I><a href="#horizontalpodautoscalerbehavior-v2beta2-autoscaling">HorizontalPodAutoscalerBehavior</a></I></TD><TD>behavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively). If not set, the default HPAScalingRules for scale up and scale down are used.</TD></TR>
+<TR><TD><CODE>maxReplicas</CODE><BR /><I>integer</I></TD><TD>maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.</TD></TR>
+<TR><TD><CODE>metrics</CODE><BR /><I><a href="#metricspec-v2beta2-autoscaling">MetricSpec</a> array</I></TD><TD>metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used).  The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods.  Ergo, metrics used must decrease as the pod count is increased, and vice-versa.  See the individual metric source types for more information about how each type of metric must respond. If not set, the default metric will be set to 80% average CPU utilization.</TD></TR>
+<TR><TD><CODE>minReplicas</CODE><BR /><I>integer</I></TD><TD>minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down.  It defaults to 1 pod.  minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured.  Scaling is active as long as at least one metric value is available.</TD></TR>
+<TR><TD><CODE>scaleTargetRef</CODE><BR /><I><a href="#crossversionobjectreference-v2beta2-autoscaling">CrossVersionObjectReference</a></I></TD><TD>scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerstatus-v2beta2-autoscaling">HorizontalPodAutoscalerStatus v2beta2 autoscaling</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler [autoscaling/v2beta2]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#horizontalpodautoscalercondition-v2beta2-autoscaling">HorizontalPodAutoscalerCondition</a> array</I></TD><TD>conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.</TD></TR>
+<TR><TD><CODE>currentMetrics</CODE><BR /><I><a href="#metricstatus-v2beta2-autoscaling">MetricStatus</a> array</I></TD><TD>currentMetrics is the last read state of the metrics used by this autoscaler.</TD></TR>
+<TR><TD><CODE>currentReplicas</CODE><BR /><I>integer</I></TD><TD>currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.</TD></TR>
+<TR><TD><CODE>desiredReplicas</CODE><BR /><I>integer</I></TD><TD>desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.</TD></TR>
+<TR><TD><CODE>lastScaleTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>observedGeneration is the most recent generation observed by this autoscaler.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerlist-v2beta2-autoscaling">HorizontalPodAutoscalerList v2beta2 autoscaling</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a> array</I></TD><TD>items is the list of horizontal pod autoscaler objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>metadata is the standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-horizontalpodautoscaler-v2beta2-autoscaling">Create</H2>
+<P>create a HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-horizontalpodautoscaler-v2beta2-autoscaling">Patch</H2>
+<P>partially update the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-horizontalpodautoscaler-v2beta2-autoscaling">Replace</H2>
+<P>replace the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-horizontalpodautoscaler-v2beta2-autoscaling">Delete</H2>
+<P>delete a HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-horizontalpodautoscaler-v2beta2-autoscaling">Delete Collection</H2>
+<P>delete collection of HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-horizontalpodautoscaler-v2beta2-autoscaling">Read</H2>
+<P>read the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-horizontalpodautoscaler-v2beta2-autoscaling">List</H2>
+<P>list or watch objects of kind HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscalerlist-v2beta2-autoscaling">HorizontalPodAutoscalerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling">List All Namespaces</H2>
+<P>list or watch objects of kind HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta2/horizontalpodautoscalers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscalerlist-v2beta2-autoscaling">HorizontalPodAutoscalerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-horizontalpodautoscaler-v2beta2-autoscaling">Watch</H2>
+<P>watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta2/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-horizontalpodautoscaler-v2beta2-autoscaling">Watch List</H2>
+<P>watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta2/watch/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta2/watch/horizontalpodautoscalers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-horizontalpodautoscaler-v2beta2-autoscaling">Patch Status</H2>
+<P>partially update status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-horizontalpodautoscaler-v2beta2-autoscaling">Read Status</H2>
+<P>read status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-horizontalpodautoscaler-v2beta2-autoscaling">Replace Status</H2>
+<P>replace status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v2beta2-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>HorizontalPodAutoscaler</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#horizontalpodautoscaler-v1-autoscaling">v1</a>
+<a href="#horizontalpodautoscaler-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerlist-v2beta1-autoscaling">HorizontalPodAutoscalerList [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#horizontalpodautoscalerspec-v2beta1-autoscaling">HorizontalPodAutoscalerSpec</a></I></TD><TD>spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#horizontalpodautoscalerstatus-v2beta1-autoscaling">HorizontalPodAutoscalerStatus</a></I></TD><TD>status is the current information about the autoscaler.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerspec-v2beta1-autoscaling">HorizontalPodAutoscalerSpec v2beta1 autoscaling</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>maxReplicas</CODE><BR /><I>integer</I></TD><TD>maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.</TD></TR>
+<TR><TD><CODE>metrics</CODE><BR /><I><a href="#metricspec-v2beta1-autoscaling">MetricSpec</a> array</I></TD><TD>metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used).  The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods.  Ergo, metrics used must decrease as the pod count is increased, and vice-versa.  See the individual metric source types for more information about how each type of metric must respond.</TD></TR>
+<TR><TD><CODE>minReplicas</CODE><BR /><I>integer</I></TD><TD>minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down.  It defaults to 1 pod.  minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured.  Scaling is active as long as at least one metric value is available.</TD></TR>
+<TR><TD><CODE>scaleTargetRef</CODE><BR /><I><a href="#crossversionobjectreference-v2beta1-autoscaling">CrossVersionObjectReference</a></I></TD><TD>scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerstatus-v2beta1-autoscaling">HorizontalPodAutoscalerStatus v2beta1 autoscaling</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#horizontalpodautoscalercondition-v2beta1-autoscaling">HorizontalPodAutoscalerCondition</a> array</I></TD><TD>conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.</TD></TR>
+<TR><TD><CODE>currentMetrics</CODE><BR /><I><a href="#metricstatus-v2beta1-autoscaling">MetricStatus</a> array</I></TD><TD>currentMetrics is the last read state of the metrics used by this autoscaler.</TD></TR>
+<TR><TD><CODE>currentReplicas</CODE><BR /><I>integer</I></TD><TD>currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.</TD></TR>
+<TR><TD><CODE>desiredReplicas</CODE><BR /><I>integer</I></TD><TD>desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.</TD></TR>
+<TR><TD><CODE>lastScaleTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed.</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>observedGeneration is the most recent generation observed by this autoscaler.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="horizontalpodautoscalerlist-v2beta1-autoscaling">HorizontalPodAutoscalerList v2beta1 autoscaling</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a> array</I></TD><TD>items is the list of horizontal pod autoscaler objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>metadata is the standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-horizontalpodautoscaler-v2beta1-autoscaling">Create</H2>
+<P>create a HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-horizontalpodautoscaler-v2beta1-autoscaling">Patch</H2>
+<P>partially update the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-horizontalpodautoscaler-v2beta1-autoscaling">Replace</H2>
+<P>replace the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-horizontalpodautoscaler-v2beta1-autoscaling">Delete</H2>
+<P>delete a HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-horizontalpodautoscaler-v2beta1-autoscaling">Delete Collection</H2>
+<P>delete collection of HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-horizontalpodautoscaler-v2beta1-autoscaling">Read</H2>
+<P>read the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-horizontalpodautoscaler-v2beta1-autoscaling">List</H2>
+<P>list or watch objects of kind HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscalerlist-v2beta1-autoscaling">HorizontalPodAutoscalerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling">List All Namespaces</H2>
+<P>list or watch objects of kind HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta1/horizontalpodautoscalers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscalerlist-v2beta1-autoscaling">HorizontalPodAutoscalerList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-horizontalpodautoscaler-v2beta1-autoscaling">Watch</H2>
+<P>watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta1/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-horizontalpodautoscaler-v2beta1-autoscaling">Watch List</H2>
+<P>watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta1/watch/namespaces/{namespace}/horizontalpodautoscalers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta1/watch/horizontalpodautoscalers</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-horizontalpodautoscaler-v2beta1-autoscaling">Patch Status</H2>
+<P>partially update status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-horizontalpodautoscaler-v2beta1-autoscaling">Read Status</H2>
+<P>read status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-horizontalpodautoscaler-v2beta1-autoscaling">Replace Status</H2>
+<P>replace status of the specified HorizontalPodAutoscaler</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the HorizontalPodAutoscaler</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#horizontalpodautoscaler-v2beta1-autoscaling">HorizontalPodAutoscaler</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="horizontalpodautoscalercondition-v2beta1-autoscaling">HorizontalPodAutoscalerCondition v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>HorizontalPodAutoscalerCondition</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#horizontalpodautoscalercondition-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerstatus-v2beta1-autoscaling">HorizontalPodAutoscalerStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>lastTransitionTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>lastTransitionTime is the last time the condition transitioned from one status to another</TD></TR>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>message is a human-readable explanation containing details about the transition</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>reason is the reason for the condition&#39;s last transition.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I>string</I></TD><TD>status is the status of the condition (True, False, Unknown)</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type describes the current condition</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingress-v1beta1-extensions">Ingress v1beta1 extensions</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extensions</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Ingress</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingress-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingresslist-v1beta1-extensions">IngressList [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#ingressspec-v1beta1-extensions">IngressSpec</a></I></TD><TD>Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#ingressstatus-v1beta1-extensions">IngressStatus</a></I></TD><TD>Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressspec-v1beta1-extensions">IngressSpec v1beta1 extensions</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingress-v1beta1-extensions">Ingress [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>backend</CODE><BR /><I><a href="#ingressbackend-v1beta1-extensions">IngressBackend</a></I></TD><TD>A default backend capable of servicing requests that don&#39;t match any rule. At least one of &#39;backend&#39; or &#39;rules&#39; must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default.</TD></TR>
+<TR><TD><CODE>ingressClassName</CODE><BR /><I>string</I></TD><TD>IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#ingressrule-v1beta1-extensions">IngressRule</a> array</I></TD><TD>A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.</TD></TR>
+<TR><TD><CODE>tls</CODE><BR /><I><a href="#ingresstls-v1beta1-extensions">IngressTLS</a> array</I></TD><TD>TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressstatus-v1beta1-extensions">IngressStatus v1beta1 extensions</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingress-v1beta1-extensions">Ingress [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>loadBalancer</CODE><BR /><I><a href="#loadbalancerstatus-v1-core">LoadBalancerStatus</a></I></TD><TD>LoadBalancer contains the current status of the load-balancer.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingresslist-v1beta1-extensions">IngressList v1beta1 extensions</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#ingress-v1beta1-extensions">Ingress</a> array</I></TD><TD>Items is the list of Ingress.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-ingress-v1beta1-extensions-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-ingress-v1beta1-extensions">Create</H2>
+<P>create an Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/extensions/v1beta1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-ingress-v1beta1-extensions">Patch</H2>
+<P>partially update the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-ingress-v1beta1-extensions">Replace</H2>
+<P>replace the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-ingress-v1beta1-extensions">Delete</H2>
+<P>delete an Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-ingress-v1beta1-extensions">Delete Collection</H2>
+<P>delete collection of Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-ingress-v1beta1-extensions-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-ingress-v1beta1-extensions">Read</H2>
+<P>read the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-ingress-v1beta1-extensions">List</H2>
+<P>list or watch objects of kind Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingresslist-v1beta1-extensions">IngressList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-ingress-v1beta1-extensions">List All Namespaces</H2>
+<P>list or watch objects of kind Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/extensions/v1beta1/ingresses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingresslist-v1beta1-extensions">IngressList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-ingress-v1beta1-extensions">Watch</H2>
+<P>watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-ingress-v1beta1-extensions">Watch List</H2>
+<P>watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-ingress-v1beta1-extensions">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/extensions/v1beta1/watch/ingresses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-ingress-v1beta1-extensions-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-ingress-v1beta1-extensions">Patch Status</H2>
+<P>partially update status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-ingress-v1beta1-extensions">Read Status</H2>
+<P>read status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-ingress-v1beta1-extensions">Replace Status</H2>
+<P>replace status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1beta1-extensions">Ingress</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingress-v1beta1-networking-k8s-io">Ingress v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Ingress</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingress-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingresslist-v1beta1-networking-k8s-io">IngressList [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#ingressspec-v1beta1-networking-k8s-io">IngressSpec</a></I></TD><TD>Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#ingressstatus-v1beta1-networking-k8s-io">IngressStatus</a></I></TD><TD>Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressspec-v1beta1-networking-k8s-io">IngressSpec v1beta1 networking</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingress-v1beta1-networking-k8s-io">Ingress [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>backend</CODE><BR /><I><a href="#ingressbackend-v1beta1-networking-k8s-io">IngressBackend</a></I></TD><TD>A default backend capable of servicing requests that don&#39;t match any rule. At least one of &#39;backend&#39; or &#39;rules&#39; must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default.</TD></TR>
+<TR><TD><CODE>ingressClassName</CODE><BR /><I>string</I></TD><TD>IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#ingressrule-v1beta1-networking-k8s-io">IngressRule</a> array</I></TD><TD>A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.</TD></TR>
+<TR><TD><CODE>tls</CODE><BR /><I><a href="#ingresstls-v1beta1-networking-k8s-io">IngressTLS</a> array</I></TD><TD>TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressstatus-v1beta1-networking-k8s-io">IngressStatus v1beta1 networking</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingress-v1beta1-networking-k8s-io">Ingress [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>loadBalancer</CODE><BR /><I><a href="#loadbalancerstatus-v1-core">LoadBalancerStatus</a></I></TD><TD>LoadBalancer contains the current status of the load-balancer.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingresslist-v1beta1-networking-k8s-io">IngressList v1beta1 networking</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a> array</I></TD><TD>Items is the list of Ingress.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-ingress-v1beta1-networking-k8s-io">Create</H2>
+<P>create an Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-ingress-v1beta1-networking-k8s-io">Patch</H2>
+<P>partially update the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-ingress-v1beta1-networking-k8s-io">Replace</H2>
+<P>replace the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-ingress-v1beta1-networking-k8s-io">Delete</H2>
+<P>delete an Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-ingress-v1beta1-networking-k8s-io">Delete Collection</H2>
+<P>delete collection of Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-ingress-v1beta1-networking-k8s-io">Read</H2>
+<P>read the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-ingress-v1beta1-networking-k8s-io">List</H2>
+<P>list or watch objects of kind Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingresslist-v1beta1-networking-k8s-io">IngressList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-ingress-v1beta1-networking-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/ingresses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingresslist-v1beta1-networking-k8s-io">IngressList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-ingress-v1beta1-networking-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-ingress-v1beta1-networking-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/watch/ingresses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-ingress-v1beta1-networking-k8s-io">Patch Status</H2>
+<P>partially update status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-ingress-v1beta1-networking-k8s-io">Read Status</H2>
+<P>read status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-ingress-v1beta1-networking-k8s-io">Replace Status</H2>
+<P>replace status of the specified Ingress</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Ingress</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingress-v1beta1-networking-k8s-io">Ingress</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingressbackend-v1beta1-extensions">IngressBackend v1beta1 extensions</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extensions</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressBackend</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressbackend-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#httpingresspath-v1beta1-extensions">HTTPIngressPath [extensions/v1beta1]</a></LI>
+  <LI><a href="#ingressspec-v1beta1-extensions">IngressSpec [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>resource</CODE><BR /><I><a href="#typedlocalobjectreference-v1-core">TypedLocalObjectReference</a></I></TD><TD>Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified.</TD></TR>
+<TR><TD><CODE>serviceName</CODE><BR /><I>string</I></TD><TD>Specifies the name of the referenced service.</TD></TR>
+<TR><TD><CODE>servicePort</CODE></TD><TD>Specifies the port of the referenced service.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingressbackend-v1beta1-networking-k8s-io">IngressBackend v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressBackend</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressbackend-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#httpingresspath-v1beta1-networking-k8s-io">HTTPIngressPath [networking/v1beta1]</a></LI>
+  <LI><a href="#ingressspec-v1beta1-networking-k8s-io">IngressSpec [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>resource</CODE><BR /><I><a href="#typedlocalobjectreference-v1-core">TypedLocalObjectReference</a></I></TD><TD>Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified.</TD></TR>
+<TR><TD><CODE>serviceName</CODE><BR /><I>string</I></TD><TD>Specifies the name of the referenced service.</TD></TR>
+<TR><TD><CODE>servicePort</CODE></TD><TD>Specifies the port of the referenced service.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingressclass-v1beta1-networking-k8s-io">IngressClass v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressclass-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressclasslist-v1beta1-networking-k8s-io">IngressClassList [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#ingressclassspec-v1beta1-networking-k8s-io">IngressClassSpec</a></I></TD><TD>Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressclassspec-v1beta1-networking-k8s-io">IngressClassSpec v1beta1 networking</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>controller</CODE><BR /><I>string</I></TD><TD>Controller refers to the name of the controller that should handle this class. This allows for different &#34;flavors&#34; that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. &#34;acme.io/ingress-controller&#34;. This field is immutable.</TD></TR>
+<TR><TD><CODE>parameters</CODE><BR /><I><a href="#ingressclassparametersreference-v1beta1-networking-k8s-io">IngressClassParametersReference</a></I></TD><TD>Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="ingressclasslist-v1beta1-networking-k8s-io">IngressClassList v1beta1 networking</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a> array</I></TD><TD>Items is the list of IngressClasses.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-ingressclass-v1beta1-networking-k8s-io">Create</H2>
+<P>create an IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/networking.k8s.io/v1beta1/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-ingressclass-v1beta1-networking-k8s-io">Patch</H2>
+<P>partially update the specified IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/networking.k8s.io/v1beta1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-ingressclass-v1beta1-networking-k8s-io">Replace</H2>
+<P>replace the specified IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/networking.k8s.io/v1beta1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-ingressclass-v1beta1-networking-k8s-io">Delete</H2>
+<P>delete an IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1beta1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-ingressclass-v1beta1-networking-k8s-io">Delete Collection</H2>
+<P>delete collection of IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/networking.k8s.io/v1beta1/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-ingressclass-v1beta1-networking-k8s-io">Read</H2>
+<P>read the specified IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclass-v1beta1-networking-k8s-io">IngressClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-ingressclass-v1beta1-networking-k8s-io">List</H2>
+<P>list or watch objects of kind IngressClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ingressclasslist-v1beta1-networking-k8s-io">IngressClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-ingressclass-v1beta1-networking-k8s-io">Watch</H2>
+<P>watch changes to an object of kind IngressClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/watch/ingressclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the IngressClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-ingressclass-v1beta1-networking-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of IngressClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/networking.k8s.io/v1beta1/watch/ingressclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingressclassparametersreference-v1beta1-networking-k8s-io">IngressClassParametersReference v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressClassParametersReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressclassparametersreference-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressclassspec-v1beta1-networking-k8s-io">IngressClassSpec [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is the type of resource being referenced.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of resource being referenced.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace is the namespace of the resource being referenced. This field is required when scope is set to &#34;Namespace&#34; and must be unset when scope is set to &#34;Cluster&#34;.</TD></TR>
+<TR><TD><CODE>scope</CODE><BR /><I>string</I></TD><TD>Scope represents if this refers to a cluster or namespace scoped resource. This may be set to &#34;Cluster&#34; (default) or &#34;Namespace&#34;. Field can be enabled with IngressClassNamespacedParams feature gate.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingressrule-v1beta1-extensions">IngressRule v1beta1 extensions</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extensions</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressrule-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressspec-v1beta1-extensions">IngressSpec [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>host</CODE><BR /><I>string</I></TD><TD>Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the &#34;host&#34; part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to    the IP in the Spec of the parent Ingress. 2. The `:` delimiter is not respected because ports are not allowed. 	  Currently the port of an Ingress is implicitly :80 for http and 	  :443 for https. Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.  Host can be &#34;precise&#34; which is a domain name without the terminating dot of a network host (e.g. &#34;foo.bar.com&#34;) or &#34;wildcard&#34;, which is a domain name prefixed with a single wildcard label (e.g. &#34;*.foo.com&#34;). The wildcard character &#39;\*&#39; must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == &#34;*&#34;). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.</TD></TR>
+<TR><TD><CODE>http</CODE><BR /><I><a href="#httpingressrulevalue-v1beta1-extensions">HTTPIngressRuleValue</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingressrule-v1beta1-networking-k8s-io">IngressRule v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingressrule-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressspec-v1beta1-networking-k8s-io">IngressSpec [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>host</CODE><BR /><I>string</I></TD><TD>Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the &#34;host&#34; part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to    the IP in the Spec of the parent Ingress. 2. The `:` delimiter is not respected because ports are not allowed. 	  Currently the port of an Ingress is implicitly :80 for http and 	  :443 for https. Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.  Host can be &#34;precise&#34; which is a domain name without the terminating dot of a network host (e.g. &#34;foo.bar.com&#34;) or &#34;wildcard&#34;, which is a domain name prefixed with a single wildcard label (e.g. &#34;*.foo.com&#34;). The wildcard character &#39;\*&#39; must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == &#34;*&#34;). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.</TD></TR>
+<TR><TD><CODE>http</CODE><BR /><I><a href="#httpingressrulevalue-v1beta1-networking-k8s-io">HTTPIngressRuleValue</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingresstls-v1beta1-extensions">IngressTLS v1beta1 extensions</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extensions</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressTLS</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingresstls-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressspec-v1beta1-extensions">IngressSpec [extensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hosts</CODE><BR /><I>string array</I></TD><TD>Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.</TD></TR>
+<TR><TD><CODE>secretName</CODE><BR /><I>string</I></TD><TD>SecretName is the name of the secret used to terminate SSL traffic on 443. Field is left optional to allow SSL routing based on SNI hostname alone. If the SNI host in a listener conflicts with the &#34;Host&#34; header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="ingresstls-v1beta1-networking-k8s-io">IngressTLS v1beta1 networking.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>networking.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>IngressTLS</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#ingresstls-v1-networking-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#ingressspec-v1beta1-networking-k8s-io">IngressSpec [networking/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>hosts</CODE><BR /><I>string array</I></TD><TD>Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.</TD></TR>
+<TR><TD><CODE>secretName</CODE><BR /><I>string</I></TD><TD>SecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the &#34;Host&#34; header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="json-v1beta1-apiextensions-k8s-io">JSON v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>JSON</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#json-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H1 id="jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>JSONSchemaProps</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jsonschemaprops-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourcevalidation-v1beta1-apiextensions-k8s-io">CustomResourceValidation [apiextensions/v1beta1]</a></LI>
+  <LI><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>$ref</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>$schema</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>additionalItems</CODE><BR /><I><a href="#jsonschemapropsorbool-v1beta1-apiextensions-k8s-io">JSONSchemaPropsOrBool</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>additionalProperties</CODE><BR /><I><a href="#jsonschemapropsorbool-v1beta1-apiextensions-k8s-io">JSONSchemaPropsOrBool</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>allOf</CODE><BR /><I><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>anyOf</CODE><BR /><I><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>default</CODE><BR /><I><a href="#json-v1beta1-apiextensions-k8s-io">JSON</a></I></TD><TD>default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. CustomResourceDefinitions with defaults must be created using the v1 (or newer) CustomResourceDefinition API.</TD></TR>
+<TR><TD><CODE>definitions</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>dependencies</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>enum</CODE><BR /><I><a href="#json-v1beta1-apiextensions-k8s-io">JSON</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>example</CODE><BR /><I><a href="#json-v1beta1-apiextensions-k8s-io">JSON</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>exclusiveMaximum</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>exclusiveMinimum</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>externalDocs</CODE><BR /><I><a href="#externaldocumentation-v1beta1-apiextensions-k8s-io">ExternalDocumentation</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>format</CODE><BR /><I>string</I></TD><TD>format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:  - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like &#34;0321751043&#34; or &#34;978-0321751041&#34; - isbn10: an ISBN10 number string like &#34;0321751043&#34; - isbn13: an ISBN13 number string like &#34;978-0321751041&#34; - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like &#34;#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like &#34;rgb(255,255,2559&#34; - byte: base64 encoded binary data - password: any kind of string - date: a date string like &#34;2006-01-02&#34; as defined by full-date in RFC3339 - duration: a duration string like &#34;22 ns&#34; as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like &#34;2014-12-15T19:30:20.000Z&#34; as defined by date-time in RFC3339.</TD></TR>
+<TR><TD><CODE>id</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#jsonschemapropsorarray-v1beta1-apiextensions-k8s-io">JSONSchemaPropsOrArray</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>maxItems</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>maxLength</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>maxProperties</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>maximum</CODE><BR /><I>number</I></TD><TD></TD></TR>
+<TR><TD><CODE>minItems</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>minLength</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>minProperties</CODE><BR /><I>integer</I></TD><TD></TD></TR>
+<TR><TD><CODE>minimum</CODE><BR /><I>number</I></TD><TD></TD></TR>
+<TR><TD><CODE>multipleOf</CODE><BR /><I>number</I></TD><TD></TD></TR>
+<TR><TD><CODE>not</CODE><BR /><I><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>nullable</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>oneOf</CODE><BR /><I><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>pattern</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>patternProperties</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>properties</CODE><BR /><I>object</I></TD><TD></TD></TR>
+<TR><TD><CODE>required</CODE><BR /><I>string array</I></TD><TD></TD></TR>
+<TR><TD><CODE>title</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD></TD></TR>
+<TR><TD><CODE>uniqueItems</CODE><BR /><I>boolean</I></TD><TD></TD></TR>
+<TR><TD><CODE>x-kubernetes-embedded-resource</CODE><BR /><I>boolean</I></TD><TD>x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).</TD></TR>
+<TR><TD><CODE>x-kubernetes-int-or-string</CODE><BR /><I>boolean</I></TD><TD>x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:  1) anyOf:    - type: integer    - type: string 2) allOf:    - anyOf:      - type: integer      - type: string    - ... zero or more</TD></TR>
+<TR><TD><CODE>x-kubernetes-list-map-keys</CODE><BR /><I>string array</I></TD><TD>x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.  This tag MUST only be used on lists that have the &#34;x-kubernetes-list-type&#34; extension set to &#34;map&#34;. Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).  The properties specified must either be required or have a default value, to ensure those properties are present for all list items.</TD></TR>
+<TR><TD><CODE>x-kubernetes-list-type</CODE><BR /><I>string</I></TD><TD>x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:  1) `atomic`: the list is treated as a single entity, like a scalar.      Atomic lists will be entirely replaced when updated. This extension      may be used on any type of list (struct, scalar, ...). 2) `set`:      Sets are lists that must not have multiple items with the same value. Each      value must be a scalar, an object with x-kubernetes-map-type `atomic` or an      array with x-kubernetes-list-type `atomic`. 3) `map`:      These lists are like maps in that their elements have a non-index key      used to identify them. Order is preserved upon merge. The map tag      must only be used on a list with elements of type object. Defaults to atomic for arrays.</TD></TR>
+<TR><TD><CODE>x-kubernetes-map-type</CODE><BR /><I>string</I></TD><TD>x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:  1) `granular`:      These maps are actual maps (key-value pairs) and each fields are independent      from each other (they can each be manipulated by separate actors). This is      the default behaviour for all maps. 2) `atomic`: the list is treated as a single entity, like a scalar.      Atomic maps will be entirely replaced when updated.</TD></TR>
+<TR><TD><CODE>x-kubernetes-preserve-unknown-fields</CODE><BR /><I>boolean</I></TD><TD>x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="jsonschemapropsorarray-v1beta1-apiextensions-k8s-io">JSONSchemaPropsOrArray v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>JSONSchemaPropsOrArray</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jsonschemapropsorarray-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H1 id="jsonschemapropsorbool-v1beta1-apiextensions-k8s-io">JSONSchemaPropsOrBool v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>JSONSchemaPropsOrBool</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jsonschemapropsorbool-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#jsonschemaprops-v1beta1-apiextensions-k8s-io">JSONSchemaProps [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+</TBODY>
+</TABLE>
+<H1 id="jobtemplatespec-v1beta1-batch">JobTemplateSpec v1beta1 batch</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>JobTemplateSpec</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#jobtemplatespec-v1-batch">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#cronjobspec-v1beta1-batch">CronJobSpec [batch/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#jobspec-v1-batch">JobSpec</a></I></TD><TD>Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="lease-v1beta1-coordination-k8s-io">Lease v1beta1 coordination.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>coordination.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Lease</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#lease-v1-coordination-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#leaselist-v1beta1-coordination-k8s-io">LeaseList [coordination/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#leasespec-v1beta1-coordination-k8s-io">LeaseSpec</a></I></TD><TD>Specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="leasespec-v1beta1-coordination-k8s-io">LeaseSpec v1beta1 coordination</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#lease-v1beta1-coordination-k8s-io">Lease [coordination/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>acquireTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>acquireTime is a time when the current lease was acquired.</TD></TR>
+<TR><TD><CODE>holderIdentity</CODE><BR /><I>string</I></TD><TD>holderIdentity contains the identity of the holder of a current lease.</TD></TR>
+<TR><TD><CODE>leaseDurationSeconds</CODE><BR /><I>integer</I></TD><TD>leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measure against time of last observed RenewTime.</TD></TR>
+<TR><TD><CODE>leaseTransitions</CODE><BR /><I>integer</I></TD><TD>leaseTransitions is the number of transitions of a lease between holders.</TD></TR>
+<TR><TD><CODE>renewTime</CODE><BR /><I><a href="#microtime-v1-meta">MicroTime</a></I></TD><TD>renewTime is a time when the current holder of a lease has last updated the lease.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="leaselist-v1beta1-coordination-k8s-io">LeaseList v1beta1 coordination</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a> array</I></TD><TD>Items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-lease-v1beta1-coordination-k8s-io">Create</H2>
+<P>create a Lease</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-lease-v1beta1-coordination-k8s-io">Patch</H2>
+<P>partially update the specified Lease</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-lease-v1beta1-coordination-k8s-io">Replace</H2>
+<P>replace the specified Lease</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-lease-v1beta1-coordination-k8s-io">Delete</H2>
+<P>delete a Lease</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-lease-v1beta1-coordination-k8s-io">Delete Collection</H2>
+<P>delete collection of Lease</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-lease-v1beta1-coordination-k8s-io">Read</H2>
+<P>read the specified Lease</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#lease-v1beta1-coordination-k8s-io">Lease</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-lease-v1beta1-coordination-k8s-io">List</H2>
+<P>list or watch objects of kind Lease</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#leaselist-v1beta1-coordination-k8s-io">LeaseList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-lease-v1beta1-coordination-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Lease</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1beta1/leases</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#leaselist-v1beta1-coordination-k8s-io">LeaseList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-lease-v1beta1-coordination-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Lease. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leases/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Lease</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-lease-v1beta1-coordination-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leases</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/coordination.k8s.io/v1beta1/watch/leases</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>LocalSubjectAccessReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#localsubjectaccessreview-v1-authorization-k8s-io">v1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#subjectaccessreviewspec-v1beta1-authorization-k8s-io">SubjectAccessReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectaccessreviewstatus-v1beta1-authorization-k8s-io">SubjectAccessReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request is allowed or not</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-localsubjectaccessreview-v1beta1-authorization-k8s-io">Create</H2>
+<P>create a LocalSubjectAccessReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1beta1/namespaces/{namespace}/localsubjectaccessreviews</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="metricspec-v2beta1-autoscaling">MetricSpec v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>MetricSpec</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#metricspec-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerspec-v2beta1-autoscaling">HorizontalPodAutoscalerSpec [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerResource</CODE><BR /><I><a href="#containerresourcemetricsource-v2beta1-autoscaling">ContainerResourceMetricSource</a></I></TD><TD>container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.</TD></TR>
+<TR><TD><CODE>external</CODE><BR /><I><a href="#externalmetricsource-v2beta1-autoscaling">ExternalMetricSource</a></I></TD><TD>external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).</TD></TR>
+<TR><TD><CODE>object</CODE><BR /><I><a href="#objectmetricsource-v2beta1-autoscaling">ObjectMetricSource</a></I></TD><TD>object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).</TD></TR>
+<TR><TD><CODE>pods</CODE><BR /><I><a href="#podsmetricsource-v2beta1-autoscaling">PodsMetricSource</a></I></TD><TD>pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second).  The values will be averaged together before being compared to the target value.</TD></TR>
+<TR><TD><CODE>resource</CODE><BR /><I><a href="#resourcemetricsource-v2beta1-autoscaling">ResourceMetricSource</a></I></TD><TD>resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of metric source.  It should be one of &#34;ContainerResource&#34;, &#34;External&#34;, &#34;Object&#34;, &#34;Pods&#34; or &#34;Resource&#34;, each mapping to a matching field in the object. Note: &#34;ContainerResource&#34; type is available on when the feature-gate HPAContainerMetrics is enabled</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="metricstatus-v2beta1-autoscaling">MetricStatus v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>MetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#metricstatus-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#horizontalpodautoscalerstatus-v2beta1-autoscaling">HorizontalPodAutoscalerStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>containerResource</CODE><BR /><I><a href="#containerresourcemetricstatus-v2beta1-autoscaling">ContainerResourceMetricStatus</a></I></TD><TD>container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</TD></TR>
+<TR><TD><CODE>external</CODE><BR /><I><a href="#externalmetricstatus-v2beta1-autoscaling">ExternalMetricStatus</a></I></TD><TD>external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).</TD></TR>
+<TR><TD><CODE>object</CODE><BR /><I><a href="#objectmetricstatus-v2beta1-autoscaling">ObjectMetricStatus</a></I></TD><TD>object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).</TD></TR>
+<TR><TD><CODE>pods</CODE><BR /><I><a href="#podsmetricstatus-v2beta1-autoscaling">PodsMetricStatus</a></I></TD><TD>pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second).  The values will be averaged together before being compared to the target value.</TD></TR>
+<TR><TD><CODE>resource</CODE><BR /><I><a href="#resourcemetricstatus-v2beta1-autoscaling">ResourceMetricStatus</a></I></TD><TD>resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the &#34;pods&#34; source.</TD></TR>
+<TR><TD><CODE>type</CODE><BR /><I>string</I></TD><TD>type is the type of metric source.  It will be one of &#34;ContainerResource&#34;, &#34;External&#34;, &#34;Object&#34;, &#34;Pods&#34; or &#34;Resource&#34;, each corresponds to a matching field in the object. Note: &#34;ContainerResource&#34; type is available on when the feature-gate HPAContainerMetrics is enabled</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="mutatingwebhook-v1beta1-admissionregistration-k8s-io">MutatingWebhook v1beta1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>MutatingWebhook</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#mutatingwebhook-v1-admissionregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionReviewVersions</CODE><BR /><I>string array</I></TD><TD>AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `[&#39;v1beta1&#39;]`.</TD></TR>
+<TR><TD><CODE>clientConfig</CODE><BR /><I><a href="#webhookclientconfig-v1beta1-admissionregistration-k8s-io">WebhookClientConfig</a></I></TD><TD>ClientConfig defines how to communicate with the hook. Required</TD></TR>
+<TR><TD><CODE>failurePolicy</CODE><BR /><I>string</I></TD><TD>FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.</TD></TR>
+<TR><TD><CODE>matchPolicy</CODE><BR /><I>string</I></TD><TD>matchPolicy defines how the &#34;rules&#34; list is used to match incoming requests. Allowed values are &#34;Exact&#34; or &#34;Equivalent&#34;.  - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.  - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.  Defaults to &#34;Exact&#34;</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where &#34;imagepolicy&#34; is the name of the webhook, and kubernetes.io is the name of the organization. Required.</TD></TR>
+<TR><TD><CODE>namespaceSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.  For example, to run the webhook on any objects whose namespace is not associated with &#34;runlevel&#34; of &#34;0&#34; or &#34;1&#34;;  you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;runlevel&#34;,       &#34;operator&#34;: &#34;NotIn&#34;,       &#34;values&#34;: [         &#34;0&#34;,         &#34;1&#34;       ]     }   ] }  If instead you want to only run the webhook on any objects whose namespace is associated with the &#34;environment&#34; of &#34;prod&#34; or &#34;staging&#34;; you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;environment&#34;,       &#34;operator&#34;: &#34;In&#34;,       &#34;values&#34;: [         &#34;prod&#34;,         &#34;staging&#34;       ]     }   ] }  See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.  Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>objectSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>reinvocationPolicy</CODE><BR /><I>string</I></TD><TD>reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are &#34;Never&#34; and &#34;IfNeeded&#34;.  Never: the webhook will not be called more than once in a single admission evaluation.  IfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.  Defaults to &#34;Never&#34;.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#rulewithoperations-v1beta1-admissionregistration-k8s-io">RuleWithOperations</a> array</I></TD><TD>Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.</TD></TR>
+<TR><TD><CODE>sideEffects</CODE><BR /><I>string</I></TD><TD>SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE><BR /><I>integer</I></TD><TD>TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration v1beta1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>MutatingWebhookConfiguration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#mutatingwebhookconfiguration-v1-admissionregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfigurationList [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.</TD></TR>
+<TR><TD><CODE>webhooks</CODE><BR /><I><a href="#mutatingwebhook-v1beta1-admissionregistration-k8s-io">MutatingWebhook</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>Webhooks is a list of webhooks and the affected resources and operations.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="mutatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfigurationList v1beta1 admissionregistration</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a> array</I></TD><TD>List of MutatingWebhookConfiguration.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Create</H2>
+<P>create a MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Patch</H2>
+<P>partially update the specified MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Replace</H2>
+<P>replace the specified MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Delete</H2>
+<P>delete a MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Delete Collection</H2>
+<P>delete collection of MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Read</H2>
+<P>read the specified MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">List</H2>
+<P>list or watch objects of kind MutatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#mutatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">MutatingWebhookConfigurationList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Watch</H2>
+<P>watch changes to an object of kind MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/watch/mutatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the MutatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/watch/mutatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="nonresourceattributes-v1beta1-authorization-k8s-io">NonResourceAttributes v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>NonResourceAttributes</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#nonresourceattributes-v1-authorization-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectaccessreviewspec-v1beta1-authorization-k8s-io">SelfSubjectAccessReviewSpec [authorization/v1beta1]</a></LI>
+  <LI><a href="#subjectaccessreviewspec-v1beta1-authorization-k8s-io">SubjectAccessReviewSpec [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>Path is the URL path of the request</TD></TR>
+<TR><TD><CODE>verb</CODE><BR /><I>string</I></TD><TD>Verb is the standard HTTP verb</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="nonresourcerule-v1beta1-authorization-k8s-io">NonResourceRule v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>NonResourceRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#nonresourcerule-v1-authorization-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#subjectrulesreviewstatus-v1beta1-authorization-k8s-io">SubjectRulesReviewStatus [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nonResourceURLs</CODE><BR /><I>string array</I></TD><TD>NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  &#34;*&#34; means all.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="objectmetricsource-v2beta1-autoscaling">ObjectMetricSource v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ObjectMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#objectmetricsource-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta1-autoscaling">MetricSpec [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>averageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>averageValue is the target value of the average of the metric across all relevant pods (as a quantity)</TD></TR>
+<TR><TD><CODE>metricName</CODE><BR /><I>string</I></TD><TD>metricName is the name of the metric in question.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#crossversionobjectreference-v2beta1-autoscaling">CrossVersionObjectReference</a></I></TD><TD>target is the described Kubernetes object.</TD></TR>
+<TR><TD><CODE>targetValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>targetValue is the target value of the metric (as a quantity).</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="objectmetricstatus-v2beta1-autoscaling">ObjectMetricStatus v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ObjectMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#objectmetricstatus-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta1-autoscaling">MetricStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>averageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>averageValue is the current value of the average of the metric across all relevant pods (as a quantity)</TD></TR>
+<TR><TD><CODE>currentValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>currentValue is the current value of the metric (as a quantity).</TD></TR>
+<TR><TD><CODE>metricName</CODE><BR /><I>string</I></TD><TD>metricName is the name of the metric in question.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the ObjectMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.</TD></TR>
+<TR><TD><CODE>target</CODE><BR /><I><a href="#crossversionobjectreference-v2beta1-autoscaling">CrossVersionObjectReference</a></I></TD><TD>target is the described Kubernetes object.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="overhead-v1beta1-node-k8s-io">Overhead v1beta1 node.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Overhead</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#overhead-v1-node-k8s-io">v1</a>
+<a href="#overhead-v1alpha1-node-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass [node/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>podFixed</CODE><BR /><I>object</I></TD><TD>PodFixed represents the fixed resource overhead associated with running a pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="overhead-v1alpha1-node-k8s-io">Overhead v1alpha1 node.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>Overhead</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#overhead-v1-node-k8s-io">v1</a>
+<a href="#overhead-v1beta1-node-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclassspec-v1alpha1-node-k8s-io">RuntimeClassSpec [node/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>podFixed</CODE><BR /><I>object</I></TD><TD>PodFixed represents the fixed resource overhead associated with running a pod.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="poddisruptionbudget-v1beta1-policy">PodDisruptionBudget v1beta1 policy</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PodDisruptionBudget</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#poddisruptionbudget-v1-policy">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#poddisruptionbudgetspec-v1beta1-policy">PodDisruptionBudgetSpec</a></I></TD><TD>Specification of the desired behavior of the PodDisruptionBudget.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#poddisruptionbudgetstatus-v1beta1-policy">PodDisruptionBudgetStatus</a></I></TD><TD>Most recently observed status of the PodDisruptionBudget.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="poddisruptionbudgetspec-v1beta1-policy">PodDisruptionBudgetSpec v1beta1 policy</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>maxUnavailable</CODE></TD><TD>An eviction is allowed if at most &#34;maxUnavailable&#34; pods selected by &#34;selector&#34; are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with &#34;minAvailable&#34;.</TD></TR>
+<TR><TD><CODE>minAvailable</CODE></TD><TD>An eviction is allowed if at least &#34;minAvailable&#34; pods selected by &#34;selector&#34; will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying &#34;100%&#34;.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I><BR /><B>patch strategy</B>: <I>replace</I></TD><TD>Label query over pods whose evictions are managed by the disruption budget. A null selector selects no pods. An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods. In policy/v1, an empty selector will select all pods in the namespace.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="poddisruptionbudgetstatus-v1beta1-policy">PodDisruptionBudgetStatus v1beta1 policy</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget [policy/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>conditions</CODE><BR /><I><a href="#condition-v1-meta">Condition</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>type</I></TD><TD>Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn&#39;t able to compute               the number of allowed disruptions. Therefore no disruptions are               allowed and the status of the condition will be False. - InsufficientPods: The number of pods are either at or below the number                     required by the PodDisruptionBudget. No disruptions are                     allowed and the status of the condition will be False. - SufficientPods: There are more pods than required by the PodDisruptionBudget.                   The condition will be True, and the number of allowed                   disruptions are provided by the disruptionsAllowed property.</TD></TR>
+<TR><TD><CODE>currentHealthy</CODE><BR /><I>integer</I></TD><TD>current number of healthy pods</TD></TR>
+<TR><TD><CODE>desiredHealthy</CODE><BR /><I>integer</I></TD><TD>minimum desired number of healthy pods</TD></TR>
+<TR><TD><CODE>disruptedPods</CODE><BR /><I>object</I></TD><TD>DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn&#39;t occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.</TD></TR>
+<TR><TD><CODE>disruptionsAllowed</CODE><BR /><I>integer</I></TD><TD>Number of pod disruptions that are currently allowed.</TD></TR>
+<TR><TD><CODE>expectedPods</CODE><BR /><I>integer</I></TD><TD>total number of pods counted by this disruption budget</TD></TR>
+<TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB&#39;s object generation.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList v1beta1 policy</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-poddisruptionbudget-v1beta1-policy">Create</H2>
+<P>create a PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-poddisruptionbudget-v1beta1-policy">Patch</H2>
+<P>partially update the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-poddisruptionbudget-v1beta1-policy">Replace</H2>
+<P>replace the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-poddisruptionbudget-v1beta1-policy">Delete</H2>
+<P>delete a PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-poddisruptionbudget-v1beta1-policy">Delete Collection</H2>
+<P>delete collection of PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-poddisruptionbudget-v1beta1-policy">Read</H2>
+<P>read the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-poddisruptionbudget-v1beta1-policy">List</H2>
+<P>list or watch objects of kind PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-poddisruptionbudget-v1beta1-policy">List All Namespaces</H2>
+<P>list or watch objects of kind PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/poddisruptionbudgets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-poddisruptionbudget-v1beta1-policy">Watch</H2>
+<P>watch changes to an object of kind PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-poddisruptionbudget-v1beta1-policy">Watch List</H2>
+<P>watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/watch/poddisruptionbudgets</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-poddisruptionbudget-v1beta1-policy">Patch Status</H2>
+<P>partially update status of the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-status-poddisruptionbudget-v1beta1-policy">Read Status</H2>
+<P>read status of the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-status-poddisruptionbudget-v1beta1-policy">Replace Status</H2>
+<P>replace status of the specified PodDisruptionBudget</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PodDisruptionBudget</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="podsmetricsource-v2beta1-autoscaling">PodsMetricSource v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>PodsMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#podsmetricsource-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta1-autoscaling">MetricSpec [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>metricName</CODE><BR /><I>string</I></TD><TD>metricName is the name of the metric in question</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.</TD></TR>
+<TR><TD><CODE>targetAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>targetAverageValue is the target value of the average of the metric across all relevant pods (as a quantity)</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="podsmetricstatus-v2beta1-autoscaling">PodsMetricStatus v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>PodsMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#podsmetricstatus-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta1-autoscaling">MetricStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>currentAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>currentAverageValue is the current value of the average of the metric across all relevant pods (as a quantity)</TD></TR>
+<TR><TD><CODE>metricName</CODE><BR /><I>string</I></TD><TD>metricName is the name of the metric in question</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the PodsMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="policyrule-v1beta1-rbac-authorization-k8s-io">PolicyRule v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PolicyRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#policyrule-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#policyrule-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrole-v1beta1-rbac-authorization-k8s-io">ClusterRole [rbac/v1beta1]</a></LI>
+  <LI><a href="#role-v1beta1-rbac-authorization-k8s-io">Role [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.</TD></TR>
+<TR><TD><CODE>nonResourceURLs</CODE><BR /><I>string array</I></TD><TD>NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as &#34;pods&#34; or &#34;secrets&#34;) or non-resource URL paths (such as &#34;/api&#34;),  but not both.</TD></TR>
+<TR><TD><CODE>resourceNames</CODE><BR /><I>string array</I></TD><TD>ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>Resources is a list of resources this rule applies to.  &#39;\*&#39; represents all resources in the specified apiGroups. &#39;\*/foo&#39; represents the subresource &#39;foo&#39; for all resources in the specified apiGroups.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule.  VerbAll represents all kinds.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="policyrule-v1alpha1-rbac-authorization-k8s-io">PolicyRule v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>PolicyRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#policyrule-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#policyrule-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrole-v1alpha1-rbac-authorization-k8s-io">ClusterRole [rbac/v1alpha1]</a></LI>
+  <LI><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.</TD></TR>
+<TR><TD><CODE>nonResourceURLs</CODE><BR /><I>string array</I></TD><TD>NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as &#34;pods&#34; or &#34;secrets&#34;) or non-resource URL paths (such as &#34;/api&#34;),  but not both.</TD></TR>
+<TR><TD><CODE>resourceNames</CODE><BR /><I>string array</I></TD><TD>ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>Resources is a list of resources this rule applies to.  ResourceAll represents all resources.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule.  VerbAll represents all kinds.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="priorityclass-v1beta1-scheduling-k8s-io">PriorityClass v1beta1 scheduling.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>scheduling.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PriorityClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#priorityclass-v1-scheduling-k8s-io">v1</a>
+<a href="#priorityclass-v1alpha1-scheduling-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#priorityclasslist-v1beta1-scheduling-k8s-io">PriorityClassList [scheduling/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD>description is an arbitrary string that usually provides guidelines on when this priority class should be used.</TD></TR>
+<TR><TD><CODE>globalDefault</CODE><BR /><I>boolean</I></TD><TD>globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>preemptionPolicy</CODE><BR /><I>string</I></TD><TD>PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>integer</I></TD><TD>The value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="priorityclasslist-v1beta1-scheduling-k8s-io">PriorityClassList v1beta1 scheduling</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a> array</I></TD><TD>items is the list of PriorityClasses</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-priorityclass-v1beta1-scheduling-k8s-io">Create</H2>
+<P>create a PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/scheduling.k8s.io/v1beta1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-priorityclass-v1beta1-scheduling-k8s-io">Patch</H2>
+<P>partially update the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/scheduling.k8s.io/v1beta1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-priorityclass-v1beta1-scheduling-k8s-io">Replace</H2>
+<P>replace the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/scheduling.k8s.io/v1beta1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-priorityclass-v1beta1-scheduling-k8s-io">Delete</H2>
+<P>delete a PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/scheduling.k8s.io/v1beta1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-priorityclass-v1beta1-scheduling-k8s-io">Delete Collection</H2>
+<P>delete collection of PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/scheduling.k8s.io/v1beta1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-priorityclass-v1beta1-scheduling-k8s-io">Read</H2>
+<P>read the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1beta1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1beta1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-priorityclass-v1beta1-scheduling-k8s-io">List</H2>
+<P>list or watch objects of kind PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1beta1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclasslist-v1beta1-scheduling-k8s-io">PriorityClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-priorityclass-v1beta1-scheduling-k8s-io">Watch</H2>
+<P>watch changes to an object of kind PriorityClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1beta1/watch/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-priorityclass-v1beta1-scheduling-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of PriorityClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1beta1/watch/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass v1alpha1 scheduling.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>scheduling.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>PriorityClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#priorityclass-v1-scheduling-k8s-io">v1</a>
+<a href="#priorityclass-v1beta1-scheduling-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#priorityclasslist-v1alpha1-scheduling-k8s-io">PriorityClassList [scheduling/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>description</CODE><BR /><I>string</I></TD><TD>description is an arbitrary string that usually provides guidelines on when this priority class should be used.</TD></TR>
+<TR><TD><CODE>globalDefault</CODE><BR /><I>boolean</I></TD><TD>globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>preemptionPolicy</CODE><BR /><I>string</I></TD><TD>PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.</TD></TR>
+<TR><TD><CODE>value</CODE><BR /><I>integer</I></TD><TD>The value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="priorityclasslist-v1alpha1-scheduling-k8s-io">PriorityClassList v1alpha1 scheduling</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a> array</I></TD><TD>items is the list of PriorityClasses</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-priorityclass-v1alpha1-scheduling-k8s-io">Create</H2>
+<P>create a PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/scheduling.k8s.io/v1alpha1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-priorityclass-v1alpha1-scheduling-k8s-io">Patch</H2>
+<P>partially update the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/scheduling.k8s.io/v1alpha1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-priorityclass-v1alpha1-scheduling-k8s-io">Replace</H2>
+<P>replace the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/scheduling.k8s.io/v1alpha1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-priorityclass-v1alpha1-scheduling-k8s-io">Delete</H2>
+<P>delete a PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/scheduling.k8s.io/v1alpha1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-priorityclass-v1alpha1-scheduling-k8s-io">Delete Collection</H2>
+<P>delete collection of PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/scheduling.k8s.io/v1alpha1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-priorityclass-v1alpha1-scheduling-k8s-io">Read</H2>
+<P>read the specified PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1alpha1/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclass-v1alpha1-scheduling-k8s-io">PriorityClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-priorityclass-v1alpha1-scheduling-k8s-io">List</H2>
+<P>list or watch objects of kind PriorityClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1alpha1/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#priorityclasslist-v1alpha1-scheduling-k8s-io">PriorityClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-priorityclass-v1alpha1-scheduling-k8s-io">Watch</H2>
+<P>watch changes to an object of kind PriorityClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1alpha1/watch/priorityclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the PriorityClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-priorityclass-v1alpha1-scheduling-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of PriorityClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/scheduling.k8s.io/v1alpha1/watch/priorityclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="resourceattributes-v1beta1-authorization-k8s-io">ResourceAttributes v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ResourceAttributes</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourceattributes-v1-authorization-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectaccessreviewspec-v1beta1-authorization-k8s-io">SelfSubjectAccessReviewSpec [authorization/v1beta1]</a></LI>
+  <LI><a href="#subjectaccessreviewspec-v1beta1-authorization-k8s-io">SubjectAccessReviewSpec [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>group</CODE><BR /><I>string</I></TD><TD>Group is the API Group of the Resource.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of the resource being requested for a &#34;get&#34; or deleted for a &#34;delete&#34;. &#34;&#34; (empty) means all.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces &#34;&#34; (empty) is defaulted for LocalSubjectAccessReviews &#34;&#34; (empty) is empty for cluster-scoped resources &#34;&#34; (empty) means &#34;all&#34; for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview</TD></TR>
+<TR><TD><CODE>resource</CODE><BR /><I>string</I></TD><TD>Resource is one of the existing resource types.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>subresource</CODE><BR /><I>string</I></TD><TD>Subresource is one of the existing resource types.  &#34;&#34; means none.</TD></TR>
+<TR><TD><CODE>verb</CODE><BR /><I>string</I></TD><TD>Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>version</CODE><BR /><I>string</I></TD><TD>Version is the API Version of the Resource.  &#34;*&#34; means all.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="resourcemetricsource-v2beta1-autoscaling">ResourceMetricSource v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ResourceMetricSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourcemetricsource-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricspec-v2beta1-autoscaling">MetricSpec [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the resource in question.</TD></TR>
+<TR><TD><CODE>targetAverageUtilization</CODE><BR /><I>integer</I></TD><TD>targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.</TD></TR>
+<TR><TD><CODE>targetAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the &#34;pods&#34; metric source type.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="resourcemetricstatus-v2beta1-autoscaling">ResourceMetricStatus v2beta1 autoscaling</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>autoscaling</CODE></TD><TD><CODE>v2beta1</CODE></TD><TD><CODE>ResourceMetricStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourcemetricstatus-v2beta2-autoscaling">v2beta2</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#metricstatus-v2beta1-autoscaling">MetricStatus [autoscaling/v2beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>currentAverageUtilization</CODE><BR /><I>integer</I></TD><TD>currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.  It will only be present if `targetAverageValue` was set in the corresponding metric specification.</TD></TR>
+<TR><TD><CODE>currentAverageValue</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the &#34;pods&#34; metric source type. It will always be set, regardless of the corresponding metric specification.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the resource in question.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="resourcerule-v1beta1-authorization-k8s-io">ResourceRule v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ResourceRule</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#resourcerule-v1-authorization-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#subjectrulesreviewstatus-v1beta1-authorization-k8s-io">SubjectRulesReviewStatus [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>resourceNames</CODE><BR /><I>string array</I></TD><TD>ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  &#34;*&#34; means all.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>Resources is a list of resources this rule applies to.  &#34;*&#34; means all in the specified apiGroups.  &#34;*/foo&#34; represents the subresource &#39;foo&#39; for all resources in the specified apiGroups.</TD></TR>
+<TR><TD><CODE>verbs</CODE><BR /><I>string array</I></TD><TD>Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  &#34;*&#34; means all.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="role-v1beta1-rbac-authorization-k8s-io">Role v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Role</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#role-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#role-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#rolelist-v1beta1-rbac-authorization-k8s-io">RoleList [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#policyrule-v1beta1-rbac-authorization-k8s-io">PolicyRule</a> array</I></TD><TD>Rules holds all the PolicyRules for this Role</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rolelist-v1beta1-rbac-authorization-k8s-io">RoleList v1beta1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a> array</I></TD><TD>Items is a list of Roles</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-role-v1beta1-rbac-authorization-k8s-io">Create</H2>
+<P>create a Role</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-role-v1beta1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-role-v1beta1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-role-v1beta1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a Role</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-role-v1beta1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of Role</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-role-v1beta1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1beta1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-role-v1beta1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolelist-v1beta1-rbac-authorization-k8s-io">RoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/roles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolelist-v1beta1-rbac-authorization-k8s-io">RoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-role-v1beta1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-role-v1beta1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/roles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="role-v1alpha1-rbac-authorization-k8s-io">Role v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>Role</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#role-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#role-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#rolelist-v1alpha1-rbac-authorization-k8s-io">RoleList [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#policyrule-v1alpha1-rbac-authorization-k8s-io">PolicyRule</a> array</I></TD><TD>Rules holds all the PolicyRules for this Role</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rolelist-v1alpha1-rbac-authorization-k8s-io">RoleList v1alpha1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a> array</I></TD><TD>Items is a list of Roles</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-role-v1alpha1-rbac-authorization-k8s-io">Create</H2>
+<P>create a Role</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-role-v1alpha1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-role-v1alpha1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-role-v1alpha1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a Role</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-role-v1alpha1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of Role</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-role-v1alpha1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#role-v1alpha1-rbac-authorization-k8s-io">Role</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-role-v1alpha1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolelist-v1alpha1-rbac-authorization-k8s-io">RoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind Role</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/roles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolelist-v1alpha1-rbac-authorization-k8s-io">RoleList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-role-v1alpha1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/roles/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the Role</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-role-v1alpha1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/roles</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/roles</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>RoleBinding</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#rolebinding-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#rolebindinglist-v1beta1-rbac-authorization-k8s-io">RoleBindingList [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>roleRef</CODE><BR /><I><a href="#roleref-v1beta1-rbac-authorization-k8s-io">RoleRef</a></I></TD><TD>RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</TD></TR>
+<TR><TD><CODE>subjects</CODE><BR /><I><a href="#subject-v1beta1-rbac-authorization-k8s-io">Subject</a> array</I></TD><TD>Subjects holds references to the objects the role applies to.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rolebindinglist-v1beta1-rbac-authorization-k8s-io">RoleBindingList v1beta1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a> array</I></TD><TD>Items is a list of RoleBindings</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-rolebinding-v1beta1-rbac-authorization-k8s-io">Create</H2>
+<P>create a RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-rolebinding-v1beta1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-rolebinding-v1beta1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-rolebinding-v1beta1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-rolebinding-v1beta1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-rolebinding-v1beta1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebindinglist-v1beta1-rbac-authorization-k8s-io">RoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/rolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebindinglist-v1beta1-rbac-authorization-k8s-io">RoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-rolebinding-v1beta1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind RoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1beta1/watch/rolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>RoleBinding</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#rolebinding-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#rolebindinglist-v1alpha1-rbac-authorization-k8s-io">RoleBindingList [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+<TR><TD><CODE>roleRef</CODE><BR /><I><a href="#roleref-v1alpha1-rbac-authorization-k8s-io">RoleRef</a></I></TD><TD>RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</TD></TR>
+<TR><TD><CODE>subjects</CODE><BR /><I><a href="#subject-v1alpha1-rbac-authorization-k8s-io">Subject</a> array</I></TD><TD>Subjects holds references to the objects the role applies to.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="rolebindinglist-v1alpha1-rbac-authorization-k8s-io">RoleBindingList v1alpha1 rbac</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a> array</I></TD><TD>Items is a list of RoleBindings</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-rolebinding-v1alpha1-rbac-authorization-k8s-io">Create</H2>
+<P>create a RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-rolebinding-v1alpha1-rbac-authorization-k8s-io">Patch</H2>
+<P>partially update the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-rolebinding-v1alpha1-rbac-authorization-k8s-io">Replace</H2>
+<P>replace the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-rolebinding-v1alpha1-rbac-authorization-k8s-io">Delete</H2>
+<P>delete a RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io">Delete Collection</H2>
+<P>delete collection of RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-rolebinding-v1alpha1-rbac-authorization-k8s-io">Read</H2>
+<P>read the specified RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-rolebinding-v1alpha1-rbac-authorization-k8s-io">List</H2>
+<P>list or watch objects of kind RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebindinglist-v1alpha1-rbac-authorization-k8s-io">RoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind RoleBinding</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/rolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#rolebindinglist-v1alpha1-rbac-authorization-k8s-io">RoleBindingList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-rolebinding-v1alpha1-rbac-authorization-k8s-io">Watch</H2>
+<P>watch changes to an object of kind RoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/rolebindings/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RoleBinding</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/rolebindings</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/rbac.authorization.k8s.io/v1alpha1/watch/rolebindings</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="roleref-v1beta1-rbac-authorization-k8s-io">RoleRef v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>RoleRef</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#roleref-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#roleref-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1beta1]</a></LI>
+  <LI><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup is the group for the resource being referenced</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is the type of resource being referenced</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of resource being referenced</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="roleref-v1alpha1-rbac-authorization-k8s-io">RoleRef v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>RoleRef</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#roleref-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#roleref-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1alpha1]</a></LI>
+  <LI><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup is the group for the resource being referenced</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is the type of resource being referenced</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of resource being referenced</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="rulewithoperations-v1beta1-admissionregistration-k8s-io">RuleWithOperations v1beta1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>RuleWithOperations</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#rulewithoperations-v1-admissionregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhook-v1beta1-admissionregistration-k8s-io">MutatingWebhook [admissionregistration/v1beta1]</a></LI>
+  <LI><a href="#validatingwebhook-v1beta1-admissionregistration-k8s-io">ValidatingWebhook [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroups</CODE><BR /><I>string array</I></TD><TD>APIGroups is the API groups the resources belong to. &#39;\*&#39; is all groups. If &#39;\*&#39; is present, the length of the slice must be one. Required.</TD></TR>
+<TR><TD><CODE>apiVersions</CODE><BR /><I>string array</I></TD><TD>APIVersions is the API versions the resources belong to. &#39;\*&#39; is all versions. If &#39;\*&#39; is present, the length of the slice must be one. Required.</TD></TR>
+<TR><TD><CODE>operations</CODE><BR /><I>string array</I></TD><TD>Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If &#39;\*&#39; is present, the length of the slice must be one. Required.</TD></TR>
+<TR><TD><CODE>resources</CODE><BR /><I>string array</I></TD><TD>Resources is a list of resources this rule applies to.  For example: &#39;pods&#39; means pods. &#39;pods/log&#39; means the log subresource of pods. &#39;\*&#39; means all resources, but not subresources. &#39;pods/\*&#39; means all subresources of pods. &#39;\*/scale&#39; means all scale subresources. &#39;\*/\*&#39; means all resources and their subresources.  If wildcard is present, the validation rule will ensure resources do not overlap with each other.  Depending on the enclosing object, subresources might not be allowed. Required.</TD></TR>
+<TR><TD><CODE>scope</CODE><BR /><I>string</I></TD><TD>scope specifies the scope of this rule. Valid values are &#34;Cluster&#34;, &#34;Namespaced&#34;, and &#34;*&#34; &#34;Cluster&#34; means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. &#34;Namespaced&#34; means that only namespaced resources will match this rule. &#34;*&#34; means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is &#34;*&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="runtimeclass-v1beta1-node-k8s-io">RuntimeClass v1beta1 node.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>RuntimeClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#runtimeclass-v1-node-k8s-io">v1</a>
+<a href="#runtimeclass-v1alpha1-node-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclasslist-v1beta1-node-k8s-io">RuntimeClassList [node/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>handler</CODE><BR /><I>string</I></TD><TD>Handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node &amp; CRI configuration.  It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called &#34;runc&#34; might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>overhead</CODE><BR /><I><a href="#overhead-v1beta1-node-k8s-io">Overhead</a></I></TD><TD>Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.15, and is only honored by servers that enable the PodOverhead feature.</TD></TR>
+<TR><TD><CODE>scheduling</CODE><BR /><I><a href="#scheduling-v1beta1-node-k8s-io">Scheduling</a></I></TD><TD>Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="runtimeclasslist-v1beta1-node-k8s-io">RuntimeClassList v1beta1 node</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a> array</I></TD><TD>Items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-runtimeclass-v1beta1-node-k8s-io">Create</H2>
+<P>create a RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/node.k8s.io/v1beta1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-runtimeclass-v1beta1-node-k8s-io">Patch</H2>
+<P>partially update the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/node.k8s.io/v1beta1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-runtimeclass-v1beta1-node-k8s-io">Replace</H2>
+<P>replace the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/node.k8s.io/v1beta1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-runtimeclass-v1beta1-node-k8s-io">Delete</H2>
+<P>delete a RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/node.k8s.io/v1beta1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-runtimeclass-v1beta1-node-k8s-io">Delete Collection</H2>
+<P>delete collection of RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/node.k8s.io/v1beta1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-runtimeclass-v1beta1-node-k8s-io">Read</H2>
+<P>read the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1beta1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-runtimeclass-v1beta1-node-k8s-io">List</H2>
+<P>list or watch objects of kind RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1beta1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclasslist-v1beta1-node-k8s-io">RuntimeClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-runtimeclass-v1beta1-node-k8s-io">Watch</H2>
+<P>watch changes to an object of kind RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1beta1/watch/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-runtimeclass-v1beta1-node-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1beta1/watch/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="runtimeclass-v1alpha1-node-k8s-io">RuntimeClass v1alpha1 node.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>RuntimeClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#runtimeclass-v1-node-k8s-io">v1</a>
+<a href="#runtimeclass-v1beta1-node-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclasslist-v1alpha1-node-k8s-io">RuntimeClassList [node/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#runtimeclassspec-v1alpha1-node-k8s-io">RuntimeClassSpec</a></I></TD><TD>Specification of the RuntimeClass More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="runtimeclassspec-v1alpha1-node-k8s-io">RuntimeClassSpec v1alpha1 node</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass [node/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>overhead</CODE><BR /><I><a href="#overhead-v1alpha1-node-k8s-io">Overhead</a></I></TD><TD>Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.15, and is only honored by servers that enable the PodOverhead feature.</TD></TR>
+<TR><TD><CODE>runtimeHandler</CODE><BR /><I>string</I></TD><TD>RuntimeHandler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node &amp; CRI configuration.  It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called &#34;runc&#34; might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The RuntimeHandler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.</TD></TR>
+<TR><TD><CODE>scheduling</CODE><BR /><I><a href="#scheduling-v1alpha1-node-k8s-io">Scheduling</a></I></TD><TD>Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="runtimeclasslist-v1alpha1-node-k8s-io">RuntimeClassList v1alpha1 node</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a> array</I></TD><TD>Items is a list of schema objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-runtimeclass-v1alpha1-node-k8s-io">Create</H2>
+<P>create a RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/node.k8s.io/v1alpha1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-runtimeclass-v1alpha1-node-k8s-io">Patch</H2>
+<P>partially update the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/node.k8s.io/v1alpha1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-runtimeclass-v1alpha1-node-k8s-io">Replace</H2>
+<P>replace the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/node.k8s.io/v1alpha1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-runtimeclass-v1alpha1-node-k8s-io">Delete</H2>
+<P>delete a RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/node.k8s.io/v1alpha1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-runtimeclass-v1alpha1-node-k8s-io">Delete Collection</H2>
+<P>delete collection of RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/node.k8s.io/v1alpha1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-runtimeclass-v1alpha1-node-k8s-io">Read</H2>
+<P>read the specified RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1alpha1/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclass-v1alpha1-node-k8s-io">RuntimeClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-runtimeclass-v1alpha1-node-k8s-io">List</H2>
+<P>list or watch objects of kind RuntimeClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1alpha1/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#runtimeclasslist-v1alpha1-node-k8s-io">RuntimeClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-runtimeclass-v1alpha1-node-k8s-io">Watch</H2>
+<P>watch changes to an object of kind RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1alpha1/watch/runtimeclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the RuntimeClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-runtimeclass-v1alpha1-node-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/node.k8s.io/v1alpha1/watch/runtimeclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="scheduling-v1beta1-node-k8s-io">Scheduling v1beta1 node.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Scheduling</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#scheduling-v1-node-k8s-io">v1</a>
+<a href="#scheduling-v1alpha1-node-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclass-v1beta1-node-k8s-io">RuntimeClass [node/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nodeSelector</CODE><BR /><I>object</I></TD><TD>nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod&#39;s existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.</TD></TR>
+<TR><TD><CODE>tolerations</CODE><BR /><I><a href="#toleration-v1-core">Toleration</a> array</I></TD><TD>tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="scheduling-v1alpha1-node-k8s-io">Scheduling v1alpha1 node.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>node.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>Scheduling</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#scheduling-v1-node-k8s-io">v1</a>
+<a href="#scheduling-v1beta1-node-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#runtimeclassspec-v1alpha1-node-k8s-io">RuntimeClassSpec [node/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nodeSelector</CODE><BR /><I>object</I></TD><TD>nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod&#39;s existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.</TD></TR>
+<TR><TD><CODE>tolerations</CODE><BR /><I><a href="#toleration-v1-core">Toleration</a> array</I></TD><TD>tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>SelfSubjectAccessReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#selfsubjectaccessreview-v1-authorization-k8s-io">v1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#selfsubjectaccessreviewspec-v1beta1-authorization-k8s-io">SelfSubjectAccessReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated.  user and groups must be empty</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectaccessreviewstatus-v1beta1-authorization-k8s-io">SubjectAccessReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request is allowed or not</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="selfsubjectaccessreviewspec-v1beta1-authorization-k8s-io">SelfSubjectAccessReviewSpec v1beta1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>nonResourceAttributes</CODE><BR /><I><a href="#nonresourceattributes-v1beta1-authorization-k8s-io">NonResourceAttributes</a></I></TD><TD>NonResourceAttributes describes information for a non-resource access request</TD></TR>
+<TR><TD><CODE>resourceAttributes</CODE><BR /><I><a href="#resourceattributes-v1beta1-authorization-k8s-io">ResourceAttributes</a></I></TD><TD>ResourceAuthorizationAttributes describes information for a resource access request</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-selfsubjectaccessreview-v1beta1-authorization-k8s-io">Create</H2>
+<P>create a SelfSubjectAccessReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1beta1/selfsubjectaccessreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>SelfSubjectRulesReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#selfsubjectrulesreview-v1-authorization-k8s-io">v1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#selfsubjectrulesreviewspec-v1beta1-authorization-k8s-io">SelfSubjectRulesReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectrulesreviewstatus-v1beta1-authorization-k8s-io">SubjectRulesReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates the set of actions a user can perform.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="selfsubjectrulesreviewspec-v1beta1-authorization-k8s-io">SelfSubjectRulesReviewSpec v1beta1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace to evaluate rules for. Required.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-selfsubjectrulesreview-v1beta1-authorization-k8s-io">Create</H2>
+<P>create a SelfSubjectRulesReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1beta1/selfsubjectrulesreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="servicereference-v1-apiextensions-k8s-io">ServiceReference v1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServiceReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#servicereference-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+<a href="#servicereference-v1beta1-apiextensions-k8s-io">v1beta1</a>
+<a href="#servicereference-v1beta1-apiregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#webhookclientconfig-v1-apiextensions-k8s-io">WebhookClientConfig [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the service. Required</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>namespace is the namespace of the service. Required</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>path is an optional URL path at which the webhook will be contacted.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="servicereference-v1-apiregistration-k8s-io">ServiceReference v1 apiregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiregistration.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>ServiceReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#servicereference-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+<a href="#servicereference-v1beta1-apiextensions-k8s-io">v1beta1</a>
+<a href="#servicereference-v1beta1-apiregistration-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicespec-v1-apiregistration-k8s-io">APIServiceSpec [apiregistration/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of the service</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace is the namespace of the service</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="servicereference-v1beta1-admissionregistration-k8s-io">ServiceReference v1beta1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ServiceReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#servicereference-v1-admissionregistration-k8s-io">v1</a>
+<a href="#servicereference-v1-apiextensions-k8s-io">v1</a>
+<a href="#servicereference-v1-apiregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#webhookclientconfig-v1beta1-admissionregistration-k8s-io">WebhookClientConfig [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>`name` is the name of the service. Required</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>`namespace` is the namespace of the service. Required</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>`path` is an optional URL path which will be sent in any request to this service.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="servicereference-v1beta1-apiextensions-k8s-io">ServiceReference v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ServiceReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#servicereference-v1-admissionregistration-k8s-io">v1</a>
+<a href="#servicereference-v1-apiextensions-k8s-io">v1</a>
+<a href="#servicereference-v1-apiregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#webhookclientconfig-v1beta1-apiextensions-k8s-io">WebhookClientConfig [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>name is the name of the service. Required</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>namespace is the namespace of the service. Required</TD></TR>
+<TR><TD><CODE>path</CODE><BR /><I>string</I></TD><TD>path is an optional URL path at which the webhook will be contacted.</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="servicereference-v1beta1-apiregistration-k8s-io">ServiceReference v1beta1 apiregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ServiceReference</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#servicereference-v1-admissionregistration-k8s-io">v1</a>
+<a href="#servicereference-v1-apiextensions-k8s-io">v1</a>
+<a href="#servicereference-v1-apiregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#apiservicespec-v1beta1-apiregistration-k8s-io">APIServiceSpec [apiregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name is the name of the service</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace is the namespace of the service</TD></TR>
+<TR><TD><CODE>port</CODE><BR /><I>integer</I></TD><TD>If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="storageclass-v1beta1-storage-k8s-io">StorageClass v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>StorageClass</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#storageclass-v1-storage-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#storageclasslist-v1beta1-storage-k8s-io">StorageClassList [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowVolumeExpansion</CODE><BR /><I>boolean</I></TD><TD>AllowVolumeExpansion shows whether the storage class allow volume expand</TD></TR>
+<TR><TD><CODE>allowedTopologies</CODE><BR /><I><a href="#topologyselectorterm-v1-core">TopologySelectorTerm</a> array</I></TD><TD>Restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.</TD></TR>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>mountOptions</CODE><BR /><I>string array</I></TD><TD>Dynamically provisioned PersistentVolumes of this storage class are created with these mountOptions, e.g. [&#34;ro&#34;, &#34;soft&#34;]. Not validated - mount of the PVs will simply fail if one is invalid.</TD></TR>
+<TR><TD><CODE>parameters</CODE><BR /><I>object</I></TD><TD>Parameters holds the parameters for the provisioner that should create volumes of this storage class.</TD></TR>
+<TR><TD><CODE>provisioner</CODE><BR /><I>string</I></TD><TD>Provisioner indicates the type of the provisioner.</TD></TR>
+<TR><TD><CODE>reclaimPolicy</CODE><BR /><I>string</I></TD><TD>Dynamically provisioned PersistentVolumes of this storage class are created with this reclaimPolicy. Defaults to Delete.</TD></TR>
+<TR><TD><CODE>volumeBindingMode</CODE><BR /><I>string</I></TD><TD>VolumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound.  When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="storageclasslist-v1beta1-storage-k8s-io">StorageClassList v1beta1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a> array</I></TD><TD>Items is the list of StorageClasses</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-storageclass-v1beta1-storage-k8s-io">Create</H2>
+<P>create a StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1beta1/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-storageclass-v1beta1-storage-k8s-io">Patch</H2>
+<P>partially update the specified StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1beta1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-storageclass-v1beta1-storage-k8s-io">Replace</H2>
+<P>replace the specified StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1beta1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-storageclass-v1beta1-storage-k8s-io">Delete</H2>
+<P>delete a StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-storageclass-v1beta1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-storageclass-v1beta1-storage-k8s-io">Read</H2>
+<P>read the specified StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclass-v1beta1-storage-k8s-io">StorageClass</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-storageclass-v1beta1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind StorageClass</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#storageclasslist-v1beta1-storage-k8s-io">StorageClassList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-storageclass-v1beta1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind StorageClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/storageclasses/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the StorageClass</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-storageclass-v1beta1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of StorageClass. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/storageclasses</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="subject-v1-rbac-authorization-k8s-io">Subject v1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>Subject</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subject-v1beta1-flowcontrol-apiserver-k8s-io">v1beta1</a>
+<a href="#subject-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+<a href="#subject-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebinding-v1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1]</a></LI>
+  <LI><a href="#rolebinding-v1-rbac-authorization-k8s-io">RoleBinding [rbac/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup holds the API group of the referenced subject. Defaults to &#34;&#34; for ServiceAccount subjects. Defaults to &#34;rbac.authorization.k8s.io&#34; for User and Group subjects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of object being referenced. Values defined by this API group are &#34;User&#34;, &#34;Group&#34;, and &#34;ServiceAccount&#34;. If the Authorizer does not recognized the kind value, the Authorizer should report an error.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the object being referenced.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace of the referenced object.  If the object kind is non-namespace, such as &#34;User&#34; or &#34;Group&#34;, and this value is not empty the Authorizer should report an error.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="subject-v1beta1-rbac-authorization-k8s-io">Subject v1beta1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>Subject</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subject-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#subject-v1alpha1-rbac-authorization-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebinding-v1beta1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1beta1]</a></LI>
+  <LI><a href="#rolebinding-v1beta1-rbac-authorization-k8s-io">RoleBinding [rbac/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiGroup</CODE><BR /><I>string</I></TD><TD>APIGroup holds the API group of the referenced subject. Defaults to &#34;&#34; for ServiceAccount subjects. Defaults to &#34;rbac.authorization.k8s.io&#34; for User and Group subjects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of object being referenced. Values defined by this API group are &#34;User&#34;, &#34;Group&#34;, and &#34;ServiceAccount&#34;. If the Authorizer does not recognized the kind value, the Authorizer should report an error.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the object being referenced.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace of the referenced object.  If the object kind is non-namespace, such as &#34;User&#34; or &#34;Group&#34;, and this value is not empty the Authorizer should report an error.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="subject-v1alpha1-rbac-authorization-k8s-io">Subject v1alpha1 rbac.authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>rbac.authorization.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>Subject</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subject-v1beta1-flowcontrol-apiserver-k8s-io">v1beta1</a>
+<a href="#subject-v1-rbac-authorization-k8s-io">v1</a>
+<a href="#subject-v1beta1-rbac-authorization-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#clusterrolebinding-v1alpha1-rbac-authorization-k8s-io">ClusterRoleBinding [rbac/v1alpha1]</a></LI>
+  <LI><a href="#rolebinding-v1alpha1-rbac-authorization-k8s-io">RoleBinding [rbac/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion holds the API group and version of the referenced subject. Defaults to &#34;v1&#34; for ServiceAccount subjects. Defaults to &#34;rbac.authorization.k8s.io/v1alpha1&#34; for User and Group subjects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind of object being referenced. Values defined by this API group are &#34;User&#34;, &#34;Group&#34;, and &#34;ServiceAccount&#34;. If the Authorizer does not recognized the kind value, the Authorizer should report an error.</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>Name of the object being referenced.</TD></TR>
+<TR><TD><CODE>namespace</CODE><BR /><I>string</I></TD><TD>Namespace of the referenced object.  If the object kind is non-namespace, such as &#34;User&#34; or &#34;Group&#34;, and this value is not empty the Authorizer should report an error.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>SubjectAccessReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subjectaccessreview-v1-authorization-k8s-io">v1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#subjectaccessreviewspec-v1beta1-authorization-k8s-io">SubjectAccessReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#subjectaccessreviewstatus-v1beta1-authorization-k8s-io">SubjectAccessReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request is allowed or not</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="subjectaccessreviewspec-v1beta1-authorization-k8s-io">SubjectAccessReviewSpec v1beta1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview [authorization/v1beta1]</a></LI>
+  <LI><a href="#subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extra</CODE><BR /><I>object</I></TD><TD>Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.</TD></TR>
+<TR><TD><CODE>group</CODE><BR /><I>string array</I></TD><TD>Groups is the groups you&#39;re testing for.</TD></TR>
+<TR><TD><CODE>nonResourceAttributes</CODE><BR /><I><a href="#nonresourceattributes-v1beta1-authorization-k8s-io">NonResourceAttributes</a></I></TD><TD>NonResourceAttributes describes information for a non-resource access request</TD></TR>
+<TR><TD><CODE>resourceAttributes</CODE><BR /><I><a href="#resourceattributes-v1beta1-authorization-k8s-io">ResourceAttributes</a></I></TD><TD>ResourceAuthorizationAttributes describes information for a resource access request</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>UID information about the requesting user.</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I>string</I></TD><TD>User is the user you&#39;re testing for. If you specify &#34;User&#34; but not &#34;Group&#34;, then is it interpreted as &#34;What if User were not a member of any groups</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="subjectaccessreviewstatus-v1beta1-authorization-k8s-io">SubjectAccessReviewStatus v1beta1 authorization</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#localsubjectaccessreview-v1beta1-authorization-k8s-io">LocalSubjectAccessReview [authorization/v1beta1]</a></LI>
+  <LI><a href="#selfsubjectaccessreview-v1beta1-authorization-k8s-io">SelfSubjectAccessReview [authorization/v1beta1]</a></LI>
+  <LI><a href="#subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowed</CODE><BR /><I>boolean</I></TD><TD>Allowed is required. True if the action would be allowed, false otherwise.</TD></TR>
+<TR><TD><CODE>denied</CODE><BR /><I>boolean</I></TD><TD>Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.</TD></TR>
+<TR><TD><CODE>evaluationError</CODE><BR /><I>string</I></TD><TD>EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.</TD></TR>
+<TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>Reason is optional.  It indicates why a request was allowed or denied.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-subjectaccessreview-v1beta1-authorization-k8s-io">Create</H2>
+<P>create a SubjectAccessReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authorization.k8s.io/v1beta1/subjectaccessreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#subjectaccessreview-v1beta1-authorization-k8s-io">SubjectAccessReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="subjectrulesreviewstatus-v1beta1-authorization-k8s-io">SubjectRulesReviewStatus v1beta1 authorization.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authorization.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>SubjectRulesReviewStatus</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#subjectrulesreviewstatus-v1-authorization-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#selfsubjectrulesreview-v1beta1-authorization-k8s-io">SelfSubjectRulesReview [authorization/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>evaluationError</CODE><BR /><I>string</I></TD><TD>EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn&#39;t support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.</TD></TR>
+<TR><TD><CODE>incomplete</CODE><BR /><I>boolean</I></TD><TD>Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn&#39;t support rules evaluation.</TD></TR>
+<TR><TD><CODE>nonResourceRules</CODE><BR /><I><a href="#nonresourcerule-v1beta1-authorization-k8s-io">NonResourceRule</a> array</I></TD><TD>NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn&#39;t significant, may contain duplicates, and possibly be incomplete.</TD></TR>
+<TR><TD><CODE>resourceRules</CODE><BR /><I><a href="#resourcerule-v1beta1-authorization-k8s-io">ResourceRule</a> array</I></TD><TD>ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn&#39;t significant, may contain duplicates, and possibly be incomplete.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="tokenrequest-v1-storage-k8s-io">TokenRequest v1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>TokenRequest</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#tokenrequest-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csidriverspec-v1-storage-k8s-io">CSIDriverSpec [storage/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audience</CODE><BR /><I>string</I></TD><TD>Audience is the intended audience of the token in &#34;TokenRequestSpec&#34;. It will default to the audiences of kube apiserver.</TD></TR>
+<TR><TD><CODE>expirationSeconds</CODE><BR /><I>integer</I></TD><TD>ExpirationSeconds is the duration of validity of the token in &#34;TokenRequestSpec&#34;. It has the same default value of &#34;ExpirationSeconds&#34; in &#34;TokenRequestSpec&#34;.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="tokenrequest-v1beta1-storage-k8s-io">TokenRequest v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>TokenRequest</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#tokenrequest-v1-authentication-k8s-io">v1</a>
+<a href="#tokenrequest-v1-storage-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csidriverspec-v1beta1-storage-k8s-io">CSIDriverSpec [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audience</CODE><BR /><I>string</I></TD><TD>Audience is the intended audience of the token in &#34;TokenRequestSpec&#34;. It will default to the audiences of kube apiserver.</TD></TR>
+<TR><TD><CODE>expirationSeconds</CODE><BR /><I>integer</I></TD><TD>ExpirationSeconds is the duration of validity of the token in &#34;TokenRequestSpec&#34;. It has the same default value of &#34;ExpirationSeconds&#34; in &#34;TokenRequestSpec&#34;</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="tokenreview-v1beta1-authentication-k8s-io">TokenReview v1beta1 authentication.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authentication.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>TokenReview</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#tokenreview-v1-authentication-k8s-io">v1</a>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#tokenreviewspec-v1beta1-authentication-k8s-io">TokenReviewSpec</a></I></TD><TD>Spec holds information about the request being evaluated</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#tokenreviewstatus-v1beta1-authentication-k8s-io">TokenReviewStatus</a></I></TD><TD>Status is filled in by the server and indicates whether the request can be authenticated.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="tokenreviewspec-v1beta1-authentication-k8s-io">TokenReviewSpec v1beta1 authentication</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenreview-v1beta1-authentication-k8s-io">TokenReview [authentication/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audiences</CODE><BR /><I>string array</I></TD><TD>Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.</TD></TR>
+<TR><TD><CODE>token</CODE><BR /><I>string</I></TD><TD>Token is the opaque bearer token.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="tokenreviewstatus-v1beta1-authentication-k8s-io">TokenReviewStatus v1beta1 authentication</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenreview-v1beta1-authentication-k8s-io">TokenReview [authentication/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>audiences</CODE><BR /><I>string array</I></TD><TD>Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token&#39;s audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is &#34;true&#34;, the token is valid against the audience of the Kubernetes API server.</TD></TR>
+<TR><TD><CODE>authenticated</CODE><BR /><I>boolean</I></TD><TD>Authenticated indicates that the token was associated with a known user.</TD></TR>
+<TR><TD><CODE>error</CODE><BR /><I>string</I></TD><TD>Error indicates that the token couldn&#39;t be checked</TD></TR>
+<TR><TD><CODE>user</CODE><BR /><I><a href="#userinfo-v1beta1-authentication-k8s-io">UserInfo</a></I></TD><TD>User is the UserInfo associated with the provided token.</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-tokenreview-v1beta1-authentication-k8s-io">Create</H2>
+<P>create a TokenReview</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/authentication.k8s.io/v1beta1/tokenreviews</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#tokenreview-v1beta1-authentication-k8s-io">TokenReview</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#tokenreview-v1beta1-authentication-k8s-io">TokenReview</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#tokenreview-v1beta1-authentication-k8s-io">TokenReview</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#tokenreview-v1beta1-authentication-k8s-io">TokenReview</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="userinfo-v1beta1-authentication-k8s-io">UserInfo v1beta1 authentication.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>authentication.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>UserInfo</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#userinfo-v1-authentication-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#tokenreviewstatus-v1beta1-authentication-k8s-io">TokenReviewStatus [authentication/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>extra</CODE><BR /><I>object</I></TD><TD>Any additional information provided by the authenticator.</TD></TR>
+<TR><TD><CODE>groups</CODE><BR /><I>string array</I></TD><TD>The names of groups this user is a part of.</TD></TR>
+<TR><TD><CODE>uid</CODE><BR /><I>string</I></TD><TD>A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.</TD></TR>
+<TR><TD><CODE>username</CODE><BR /><I>string</I></TD><TD>The name that uniquely identifies this user among all active users.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="validatingwebhook-v1beta1-admissionregistration-k8s-io">ValidatingWebhook v1beta1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ValidatingWebhook</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#validatingwebhook-v1-admissionregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionReviewVersions</CODE><BR /><I>string array</I></TD><TD>AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `[&#39;v1beta1&#39;]`.</TD></TR>
+<TR><TD><CODE>clientConfig</CODE><BR /><I><a href="#webhookclientconfig-v1beta1-admissionregistration-k8s-io">WebhookClientConfig</a></I></TD><TD>ClientConfig defines how to communicate with the hook. Required</TD></TR>
+<TR><TD><CODE>failurePolicy</CODE><BR /><I>string</I></TD><TD>FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.</TD></TR>
+<TR><TD><CODE>matchPolicy</CODE><BR /><I>string</I></TD><TD>matchPolicy defines how the &#34;rules&#34; list is used to match incoming requests. Allowed values are &#34;Exact&#34; or &#34;Equivalent&#34;.  - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.  - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and &#34;rules&#34; only included `apiGroups:[&#34;apps&#34;], apiVersions:[&#34;v1&#34;], resources: [&#34;deployments&#34;]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.  Defaults to &#34;Exact&#34;</TD></TR>
+<TR><TD><CODE>name</CODE><BR /><I>string</I></TD><TD>The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where &#34;imagepolicy&#34; is the name of the webhook, and kubernetes.io is the name of the organization. Required.</TD></TR>
+<TR><TD><CODE>namespaceSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.  For example, to run the webhook on any objects whose namespace is not associated with &#34;runlevel&#34; of &#34;0&#34; or &#34;1&#34;;  you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;runlevel&#34;,       &#34;operator&#34;: &#34;NotIn&#34;,       &#34;values&#34;: [         &#34;0&#34;,         &#34;1&#34;       ]     }   ] }  If instead you want to only run the webhook on any objects whose namespace is associated with the &#34;environment&#34; of &#34;prod&#34; or &#34;staging&#34;; you will set the selector as follows: &#34;namespaceSelector&#34;: {   &#34;matchExpressions&#34;: [     {       &#34;key&#34;: &#34;environment&#34;,       &#34;operator&#34;: &#34;In&#34;,       &#34;values&#34;: [         &#34;prod&#34;,         &#34;staging&#34;       ]     }   ] }  See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.  Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>objectSelector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.</TD></TR>
+<TR><TD><CODE>rules</CODE><BR /><I><a href="#rulewithoperations-v1beta1-admissionregistration-k8s-io">RuleWithOperations</a> array</I></TD><TD>Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.</TD></TR>
+<TR><TD><CODE>sideEffects</CODE><BR /><I>string</I></TD><TD>SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE><BR /><I>integer</I></TD><TD>TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration v1beta1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>ValidatingWebhookConfiguration</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#validatingwebhookconfiguration-v1-admissionregistration-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#validatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.</TD></TR>
+<TR><TD><CODE>webhooks</CODE><BR /><I><a href="#validatingwebhook-v1beta1-admissionregistration-k8s-io">ValidatingWebhook</a> array</I><BR /><B>patch strategy</B>: <I>merge</I><BR /><B>patch merge key</B>: <I>name</I></TD><TD>Webhooks is a list of webhooks and the affected resources and operations.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="validatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList v1beta1 admissionregistration</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a> array</I></TD><TD>List of ValidatingWebhookConfiguration.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Create</H2>
+<P>create a ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Patch</H2>
+<P>partially update the specified ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Replace</H2>
+<P>replace the specified ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Delete</H2>
+<P>delete a ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Delete Collection</H2>
+<P>delete collection of ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Read</H2>
+<P>read the specified ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfiguration</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">List</H2>
+<P>list or watch objects of kind ValidatingWebhookConfiguration</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#validatingwebhookconfigurationlist-v1beta1-admissionregistration-k8s-io">ValidatingWebhookConfigurationList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Watch</H2>
+<P>watch changes to an object of kind ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/watch/validatingwebhookconfigurations/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the ValidatingWebhookConfiguration</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/admissionregistration.k8s.io/v1beta1/watch/validatingwebhookconfigurations</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>VolumeAttachment</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeattachment-v1-storage-k8s-io">v1</a>
+<a href="#volumeattachment-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentlist-v1beta1-storage-k8s-io">VolumeAttachmentList [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#volumeattachmentspec-v1beta1-storage-k8s-io">VolumeAttachmentSpec</a></I></TD><TD>Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#volumeattachmentstatus-v1beta1-storage-k8s-io">VolumeAttachmentStatus</a></I></TD><TD>Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentspec-v1beta1-storage-k8s-io">VolumeAttachmentSpec v1beta1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attacher</CODE><BR /><I>string</I></TD><TD>Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().</TD></TR>
+<TR><TD><CODE>nodeName</CODE><BR /><I>string</I></TD><TD>The node that the volume should be attached to.</TD></TR>
+<TR><TD><CODE>source</CODE><BR /><I><a href="#volumeattachmentsource-v1beta1-storage-k8s-io">VolumeAttachmentSource</a></I></TD><TD>Source represents the volume that should be attached.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentstatus-v1beta1-storage-k8s-io">VolumeAttachmentStatus v1beta1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attachError</CODE><BR /><I><a href="#volumeerror-v1beta1-storage-k8s-io">VolumeError</a></I></TD><TD>The last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>attached</CODE><BR /><I>boolean</I></TD><TD>Indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>attachmentMetadata</CODE><BR /><I>object</I></TD><TD>Upon successful attach, this field is populated with any information returned by the attach operation that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>detachError</CODE><BR /><I><a href="#volumeerror-v1beta1-storage-k8s-io">VolumeError</a></I></TD><TD>The last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentlist-v1beta1-storage-k8s-io">VolumeAttachmentList v1beta1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a> array</I></TD><TD>Items is the list of VolumeAttachments</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-volumeattachment-v1beta1-storage-k8s-io">Create</H2>
+<P>create a VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1beta1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-volumeattachment-v1beta1-storage-k8s-io">Patch</H2>
+<P>partially update the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1beta1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-volumeattachment-v1beta1-storage-k8s-io">Replace</H2>
+<P>replace the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1beta1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-volumeattachment-v1beta1-storage-k8s-io">Delete</H2>
+<P>delete a VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-volumeattachment-v1beta1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-volumeattachment-v1beta1-storage-k8s-io">Read</H2>
+<P>read the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1beta1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-volumeattachment-v1beta1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachmentlist-v1beta1-storage-k8s-io">VolumeAttachmentList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-volumeattachment-v1beta1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-volumeattachment-v1beta1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment v1alpha1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>VolumeAttachment</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeattachment-v1-storage-k8s-io">v1</a>
+<a href="#volumeattachment-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentlist-v1alpha1-storage-k8s-io">VolumeAttachmentList [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#volumeattachmentspec-v1alpha1-storage-k8s-io">VolumeAttachmentSpec</a></I></TD><TD>Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#volumeattachmentstatus-v1alpha1-storage-k8s-io">VolumeAttachmentStatus</a></I></TD><TD>Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentspec-v1alpha1-storage-k8s-io">VolumeAttachmentSpec v1alpha1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attacher</CODE><BR /><I>string</I></TD><TD>Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().</TD></TR>
+<TR><TD><CODE>nodeName</CODE><BR /><I>string</I></TD><TD>The node that the volume should be attached to.</TD></TR>
+<TR><TD><CODE>source</CODE><BR /><I><a href="#volumeattachmentsource-v1alpha1-storage-k8s-io">VolumeAttachmentSource</a></I></TD><TD>Source represents the volume that should be attached.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentstatus-v1alpha1-storage-k8s-io">VolumeAttachmentStatus v1alpha1 storage</H3>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>attachError</CODE><BR /><I><a href="#volumeerror-v1alpha1-storage-k8s-io">VolumeError</a></I></TD><TD>The last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>attached</CODE><BR /><I>boolean</I></TD><TD>Indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>attachmentMetadata</CODE><BR /><I>object</I></TD><TD>Upon successful attach, this field is populated with any information returned by the attach operation that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.</TD></TR>
+<TR><TD><CODE>detachError</CODE><BR /><I><a href="#volumeerror-v1alpha1-storage-k8s-io">VolumeError</a></I></TD><TD>The last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="volumeattachmentlist-v1alpha1-storage-k8s-io">VolumeAttachmentList v1alpha1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a> array</I></TD><TD>Items is the list of VolumeAttachments</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-volumeattachment-v1alpha1-storage-k8s-io">Create</H2>
+<P>create a VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1alpha1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-volumeattachment-v1alpha1-storage-k8s-io">Patch</H2>
+<P>partially update the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1alpha1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-volumeattachment-v1alpha1-storage-k8s-io">Replace</H2>
+<P>replace the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1alpha1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-volumeattachment-v1alpha1-storage-k8s-io">Delete</H2>
+<P>delete a VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1alpha1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-volumeattachment-v1alpha1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1alpha1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-volumeattachment-v1alpha1-storage-k8s-io">Read</H2>
+<P>read the specified VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachment-v1alpha1-storage-k8s-io">VolumeAttachment</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-volumeattachment-v1alpha1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind VolumeAttachment</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#volumeattachmentlist-v1alpha1-storage-k8s-io">VolumeAttachmentList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-volumeattachment-v1alpha1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/watch/volumeattachments/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the VolumeAttachment</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-volumeattachment-v1alpha1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1alpha1/watch/volumeattachments</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumeattachmentsource-v1beta1-storage-k8s-io">VolumeAttachmentSource v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>VolumeAttachmentSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeattachmentsource-v1-storage-k8s-io">v1</a>
+<a href="#volumeattachmentsource-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentspec-v1beta1-storage-k8s-io">VolumeAttachmentSpec [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>inlineVolumeSpec</CODE><BR /><I><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec</a></I></TD><TD>inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod&#39;s inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod&#39;s inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.</TD></TR>
+<TR><TD><CODE>persistentVolumeName</CODE><BR /><I>string</I></TD><TD>Name of the persistent volume to attach.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumeattachmentsource-v1alpha1-storage-k8s-io">VolumeAttachmentSource v1alpha1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>VolumeAttachmentSource</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeattachmentsource-v1-storage-k8s-io">v1</a>
+<a href="#volumeattachmentsource-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentspec-v1alpha1-storage-k8s-io">VolumeAttachmentSpec [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>inlineVolumeSpec</CODE><BR /><I><a href="#persistentvolumespec-v1-core">PersistentVolumeSpec</a></I></TD><TD>inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod&#39;s inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod&#39;s inline VolumeSource to a PersistentVolumeSpec. This field is alpha-level and is only honored by servers that enabled the CSIMigration feature.</TD></TR>
+<TR><TD><CODE>persistentVolumeName</CODE><BR /><I>string</I></TD><TD>Name of the persistent volume to attach.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumeerror-v1beta1-storage-k8s-io">VolumeError v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>VolumeError</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeerror-v1-storage-k8s-io">v1</a>
+<a href="#volumeerror-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentstatus-v1beta1-storage-k8s-io">VolumeAttachmentStatus [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>String detailing the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.</TD></TR>
+<TR><TD><CODE>time</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Time the error was encountered.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumeerror-v1alpha1-storage-k8s-io">VolumeError v1alpha1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1alpha1</CODE></TD><TD><CODE>VolumeError</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumeerror-v1-storage-k8s-io">v1</a>
+<a href="#volumeerror-v1beta1-storage-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#volumeattachmentstatus-v1alpha1-storage-k8s-io">VolumeAttachmentStatus [storage/v1alpha1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>message</CODE><BR /><I>string</I></TD><TD>String detailing the error encountered during Attach or Detach operation. This string maybe logged, so it should not contain sensitive information.</TD></TR>
+<TR><TD><CODE>time</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Time the error was encountered.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="volumenoderesources-v1beta1-storage-k8s-io">VolumeNodeResources v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>VolumeNodeResources</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#volumenoderesources-v1-storage-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csinodedriver-v1beta1-storage-k8s-io">CSINodeDriver [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>count</CODE><BR /><I>integer</I></TD><TD>Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is nil, then the supported number of volumes on this node is unbounded.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="webhookclientconfig-v1-apiextensions-k8s-io">WebhookClientConfig v1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>WebhookClientConfig</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#webhookclientconfig-v1beta1-admissionregistration-k8s-io">v1beta1</a>
+<a href="#webhookclientconfig-v1beta1-apiextensions-k8s-io">v1beta1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#webhookconversion-v1-apiextensions-k8s-io">WebhookConversion [apiextensions/v1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>caBundle</CODE><BR /><I>string</I></TD><TD>caBundle is a PEM encoded CA bundle which will be used to validate the webhook&#39;s server certificate. If unspecified, system trust roots on the apiserver are used.</TD></TR>
+<TR><TD><CODE>service</CODE><BR /><I><a href="#servicereference-v1-apiextensions-k8s-io">ServiceReference</a></I></TD><TD>service is a reference to the service for this webhook. Either service or url must be specified.  If the webhook is running within the cluster, then you should use `service`.</TD></TR>
+<TR><TD><CODE>url</CODE><BR /><I>string</I></TD><TD>url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.  The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.  Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.  The scheme must be &#34;https&#34;; the URL must begin with &#34;https://&#34;.  A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.  Attempting to use a user or basic auth e.g. &#34;user:password@&#34; is not allowed. Fragments (&#34;#...&#34;) and query parameters (&#34;?...&#34;) are not allowed, either.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="webhookclientconfig-v1beta1-admissionregistration-k8s-io">WebhookClientConfig v1beta1 admissionregistration.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>admissionregistration.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>WebhookClientConfig</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#webhookclientconfig-v1-admissionregistration-k8s-io">v1</a>
+<a href="#webhookclientconfig-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#mutatingwebhook-v1beta1-admissionregistration-k8s-io">MutatingWebhook [admissionregistration/v1beta1]</a></LI>
+  <LI><a href="#validatingwebhook-v1beta1-admissionregistration-k8s-io">ValidatingWebhook [admissionregistration/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>caBundle</CODE><BR /><I>string</I></TD><TD>`caBundle` is a PEM encoded CA bundle which will be used to validate the webhook&#39;s server certificate. If unspecified, system trust roots on the apiserver are used.</TD></TR>
+<TR><TD><CODE>service</CODE><BR /><I><a href="#servicereference-v1beta1-admissionregistration-k8s-io">ServiceReference</a></I></TD><TD>`service` is a reference to the service for this webhook. Either `service` or `url` must be specified.  If the webhook is running within the cluster, then you should use `service`.</TD></TR>
+<TR><TD><CODE>url</CODE><BR /><I>string</I></TD><TD>`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.  The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.  Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.  The scheme must be &#34;https&#34;; the URL must begin with &#34;https://&#34;.  A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.  Attempting to use a user or basic auth e.g. &#34;user:password@&#34; is not allowed. Fragments (&#34;#...&#34;) and query parameters (&#34;?...&#34;) are not allowed, either.</TD></TR>
+</TBODY>
+</TABLE>
+<H1 id="webhookclientconfig-v1beta1-apiextensions-k8s-io">WebhookClientConfig v1beta1 apiextensions.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiextensions.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>WebhookClientConfig</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#webhookclientconfig-v1-admissionregistration-k8s-io">v1</a>
+<a href="#webhookclientconfig-v1-apiextensions-k8s-io">v1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#customresourceconversion-v1beta1-apiextensions-k8s-io">CustomResourceConversion [apiextensions/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>caBundle</CODE><BR /><I>string</I></TD><TD>caBundle is a PEM encoded CA bundle which will be used to validate the webhook&#39;s server certificate. If unspecified, system trust roots on the apiserver are used.</TD></TR>
+<TR><TD><CODE>service</CODE><BR /><I><a href="#servicereference-v1beta1-apiextensions-k8s-io">ServiceReference</a></I></TD><TD>service is a reference to the service for this webhook. Either service or url must be specified.  If the webhook is running within the cluster, then you should use `service`.</TD></TR>
+<TR><TD><CODE>url</CODE><BR /><I>string</I></TD><TD>url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.  The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.  Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.  The scheme must be &#34;https&#34;; the URL must begin with &#34;https://&#34;.  A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.  Attempting to use a user or basic auth e.g. &#34;user:password@&#34; is not allowed. Fragments (&#34;#...&#34;) and query parameters (&#34;?...&#34;) are not allowed, either.</TD></TR>
+</TBODY>
+</TABLE>
+
+</DIV>
+</DIV>
+</DIV>
+<SCRIPT src="/js/jquery-3.3.1.min.js"></SCRIPT>
+<SCRIPT src="/js/jquery.scrollTo-2.1.2.min.js"></SCRIPT>
+<SCRIPT src="/js/bootstrap-4.3.1.min.js"></SCRIPT>
+<SCRIPT src="js/navData.js"></SCRIPT>
+<SCRIPT src="/js/scroll-apiref.js"></SCRIPT>
+</BODY>
+</HTML>
diff --git a/static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js b/static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js
new file mode 100644
index 0000000000..61546bfa6f
--- /dev/null
+++ b/static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js
@@ -0,0 +1 @@
+(function(){navData={"toc":[{"section":"webhookclientconfig-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1-apiextensions-k8s-io","subsections":[]},{"section":"volumenoderesources-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeerror-v1alpha1-storage-k8s-io","subsections":[]},{"section":"volumeerror-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeattachmentsource-v1alpha1-storage-k8s-io","subsections":[]},{"section":"volumeattachmentsource-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeattachment-v1alpha1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]}]}]},{"section":"volumeattachment-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"validatingwebhook-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"userinfo-v1beta1-authentication-k8s-io","subsections":[]},{"section":"tokenreview-v1beta1-authentication-k8s-io","subsections":[{"section":"-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-","subsections":[{"section":"create-tokenreview-v1beta1-authentication-k8s-io","subsections":[]}]}]},{"section":"tokenrequest-v1beta1-storage-k8s-io","subsections":[]},{"section":"tokenrequest-v1-storage-k8s-io","subsections":[]},{"section":"subjectrulesreviewstatus-v1beta1-authorization-k8s-io","subsections":[]},{"section":"subjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-subjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"subject-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"subject-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"subject-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"storageclass-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-storageclass-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-storageclass-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"servicereference-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"servicereference-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"servicereference-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"servicereference-v1-apiregistration-k8s-io","subsections":[]},{"section":"servicereference-v1-apiextensions-k8s-io","subsections":[]},{"section":"selfsubjectrulesreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectrulesreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"selfsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"scheduling-v1alpha1-node-k8s-io","subsections":[]},{"section":"scheduling-v1beta1-node-k8s-io","subsections":[]},{"section":"runtimeclass-v1alpha1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1alpha1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1alpha1-node-k8s-io","subsections":[]}]}]},{"section":"runtimeclass-v1beta1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1beta1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1beta1-node-k8s-io","subsections":[]}]}]},{"section":"rulewithoperations-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"roleref-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"roleref-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"resourcerule-v1beta1-authorization-k8s-io","subsections":[]},{"section":"resourcemetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"resourcemetricsource-v2beta1-autoscaling","subsections":[]},{"section":"resourceattributes-v1beta1-authorization-k8s-io","subsections":[]},{"section":"priorityclass-v1alpha1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]}]}]},{"section":"priorityclass-v1beta1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]}]}]},{"section":"policyrule-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"policyrule-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"podsmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"podsmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"poddisruptionbudget-v1beta1-policy","subsections":[{"section":"-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"replace-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-status-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"delete-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"replace-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"create-poddisruptionbudget-v1beta1-policy","subsections":[]}]}]},{"section":"overhead-v1alpha1-node-k8s-io","subsections":[]},{"section":"overhead-v1beta1-node-k8s-io","subsections":[]},{"section":"objectmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"objectmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"nonresourcerule-v1beta1-authorization-k8s-io","subsections":[]},{"section":"nonresourceattributes-v1beta1-authorization-k8s-io","subsections":[]},{"section":"mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"mutatingwebhook-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"metricstatus-v2beta1-autoscaling","subsections":[]},{"section":"metricspec-v2beta1-autoscaling","subsections":[]},{"section":"localsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-localsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"lease-v1beta1-coordination-k8s-io","subsections":[{"section":"-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"watch-list-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"watch-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"list-all-namespaces-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"list-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"read-lease-v1beta1-coordination-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-","subsections":[{"section":"delete-collection-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"delete-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"replace-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"patch-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"create-lease-v1beta1-coordination-k8s-io","subsections":[]}]}]},{"section":"jobtemplatespec-v1beta1-batch","subsections":[]},{"section":"jsonschemapropsorbool-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemapropsorarray-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemaprops-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"json-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"ingresstls-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingresstls-v1beta1-extensions","subsections":[]},{"section":"ingressrule-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressrule-v1beta1-extensions","subsections":[]},{"section":"ingressclassparametersreference-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressclass-v1beta1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-ingressclass-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"delete-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"replace-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"create-ingressclass-v1beta1-networking-k8s-io","subsections":[]}]}]},{"section":"ingressbackend-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressbackend-v1beta1-extensions","subsections":[]},{"section":"ingress-v1beta1-networking-k8s-io","subsections":[{"section":"-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"replace-status-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-status-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-status-ingress-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-list-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-ingress-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"delete-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"replace-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"create-ingress-v1beta1-networking-k8s-io","subsections":[]}]}]},{"section":"ingress-v1beta1-extensions","subsections":[{"section":"-strong-status-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"replace-status-ingress-v1beta1-extensions","subsections":[]},{"section":"read-status-ingress-v1beta1-extensions","subsections":[]},{"section":"patch-status-ingress-v1beta1-extensions","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1beta1-extensions","subsections":[]},{"section":"watch-list-ingress-v1beta1-extensions","subsections":[]},{"section":"watch-ingress-v1beta1-extensions","subsections":[]},{"section":"list-all-namespaces-ingress-v1beta1-extensions","subsections":[]},{"section":"list-ingress-v1beta1-extensions","subsections":[]},{"section":"read-ingress-v1beta1-extensions","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"delete-collection-ingress-v1beta1-extensions","subsections":[]},{"section":"delete-ingress-v1beta1-extensions","subsections":[]},{"section":"replace-ingress-v1beta1-extensions","subsections":[]},{"section":"patch-ingress-v1beta1-extensions","subsections":[]},{"section":"create-ingress-v1beta1-extensions","subsections":[]}]}]},{"section":"horizontalpodautoscalercondition-v2beta1-autoscaling","subsections":[]},{"section":"horizontalpodautoscaler-v2beta1-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]}]},{"section":"horizontalpodautoscaler-v2beta2-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]}]},{"section":"httpingressrulevalue-v1beta1-networking-k8s-io","subsections":[]},{"section":"httpingressrulevalue-v1beta1-extensions","subsections":[]},{"section":"httpingresspath-v1beta1-networking-k8s-io","subsections":[]},{"section":"httpingresspath-v1beta1-extensions","subsections":[]},{"section":"forzone-v1beta1-discovery-k8s-io","subsections":[]},{"section":"externalmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"externalmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"externaldocumentation-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"eventseries-v1beta1-events-k8s-io","subsections":[]},{"section":"eventseries-v1-events-k8s-io","subsections":[]},{"section":"event-v1beta1-events-k8s-io","subsections":[{"section":"-strong-read-operations-event-v1beta1-events-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1beta1-events-k8s-io","subsections":[]},{"section":"watch-list-event-v1beta1-events-k8s-io","subsections":[]},{"section":"watch-event-v1beta1-events-k8s-io","subsections":[]},{"section":"list-all-namespaces-event-v1beta1-events-k8s-io","subsections":[]},{"section":"list-event-v1beta1-events-k8s-io","subsections":[]},{"section":"read-event-v1beta1-events-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-event-v1beta1-events-k8s-io-strong-","subsections":[{"section":"delete-collection-event-v1beta1-events-k8s-io","subsections":[]},{"section":"delete-event-v1beta1-events-k8s-io","subsections":[]},{"section":"replace-event-v1beta1-events-k8s-io","subsections":[]},{"section":"patch-event-v1beta1-events-k8s-io","subsections":[]},{"section":"create-event-v1beta1-events-k8s-io","subsections":[]}]}]},{"section":"event-v1-events-k8s-io","subsections":[{"section":"-strong-read-operations-event-v1-events-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1-events-k8s-io","subsections":[]},{"section":"watch-list-event-v1-events-k8s-io","subsections":[]},{"section":"watch-event-v1-events-k8s-io","subsections":[]},{"section":"list-all-namespaces-event-v1-events-k8s-io","subsections":[]},{"section":"list-event-v1-events-k8s-io","subsections":[]},{"section":"read-event-v1-events-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-event-v1-events-k8s-io-strong-","subsections":[{"section":"delete-collection-event-v1-events-k8s-io","subsections":[]},{"section":"delete-event-v1-events-k8s-io","subsections":[]},{"section":"replace-event-v1-events-k8s-io","subsections":[]},{"section":"patch-event-v1-events-k8s-io","subsections":[]},{"section":"create-event-v1-events-k8s-io","subsections":[]}]}]},{"section":"endpointslice-v1beta1-discovery-k8s-io","subsections":[{"section":"-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"read-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"delete-collection-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"delete-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"replace-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"patch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"create-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]}]},{"section":"endpointport-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpointport-v1-discovery-k8s-io","subsections":[]},{"section":"endpointhints-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpointconditions-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpoint-v1beta1-discovery-k8s-io","subsections":[]},{"section":"customresourcevalidation-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresources-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcescale-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionversion-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionnames-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[{"section":"-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"watch-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"list-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"read-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"delete-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"replace-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"patch-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"create-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]}]},{"section":"customresourceconversion-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcecolumndefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"crossversionobjectreference-v2beta1-autoscaling","subsections":[]},{"section":"crossversionobjectreference-v2beta2-autoscaling","subsections":[]},{"section":"cronjob-v1beta1-batch","subsections":[{"section":"-strong-status-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"replace-status-cronjob-v1beta1-batch","subsections":[]},{"section":"read-status-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-status-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-read-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-list-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-cronjob-v1beta1-batch","subsections":[]},{"section":"list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"list-cronjob-v1beta1-batch","subsections":[]},{"section":"read-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-write-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"delete-collection-cronjob-v1beta1-batch","subsections":[]},{"section":"delete-cronjob-v1beta1-batch","subsections":[]},{"section":"replace-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-cronjob-v1beta1-batch","subsections":[]},{"section":"create-cronjob-v1beta1-batch","subsections":[]}]}]},{"section":"containerresourcemetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"containerresourcemetricsource-v2beta1-autoscaling","subsections":[]},{"section":"clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"certificatesigningrequestcondition-v1beta1-certificates-k8s-io","subsections":[]},{"section":"certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[{"section":"-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"read-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"watch-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"list-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"read-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"delete-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"replace-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"patch-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"create-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]}]},{"section":"csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-list-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"read-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"delete-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"replace-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"patch-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"create-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]}]}]},{"section":"csinodedriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"csinode-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-csinode-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-csinode-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"csidriver-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-csidriver-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-csidriver-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"aggregationrule-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"aggregationrule-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"apiservicecondition-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"apiservice-v1beta1-apiregistration-k8s-io","subsections":[{"section":"-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"replace-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"read-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"patch-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"watch-list-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"watch-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"list-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"read-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"delete-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"replace-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"patch-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"create-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]}]},{"section":"-strong-old-api-versions-strong-","subsections":[]},{"section":"windowssecuritycontextoptions-v1-core","subsections":[]},{"section":"weightedpodaffinityterm-v1-core","subsections":[]},{"section":"webhookconversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watchevent-v1-meta","subsections":[]},{"section":"vspherevirtualdiskvolumesource-v1-core","subsections":[]},{"section":"volumeprojection-v1-core","subsections":[]},{"section":"volumenoderesources-v1-storage-k8s-io","subsections":[]},{"section":"volumenodeaffinity-v1-core","subsections":[]},{"section":"volumemount-v1-core","subsections":[]},{"section":"volumeerror-v1-storage-k8s-io","subsections":[]},{"section":"volumedevice-v1-core","subsections":[]},{"section":"volumeattachmentsource-v1-storage-k8s-io","subsections":[]},{"section":"validatingwebhook-v1-admissionregistration-k8s-io","subsections":[]},{"section":"usersubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"userinfo-v1-authentication-k8s-io","subsections":[]},{"section":"typedlocalobjectreference-v1-core","subsections":[]},{"section":"topologyspreadconstraint-v1-core","subsections":[]},{"section":"topologyselectorterm-v1-core","subsections":[]},{"section":"topologyselectorlabelrequirement-v1-core","subsections":[]},{"section":"toleration-v1-core","subsections":[]},{"section":"time-v1-meta","subsections":[]},{"section":"taint-v1-core","subsections":[]},{"section":"tcpsocketaction-v1-core","subsections":[]},{"section":"sysctl-v1-core","subsections":[]},{"section":"supplementalgroupsstrategyoptions-v1beta1-policy","subsections":[]},{"section":"subjectrulesreviewstatus-v1-authorization-k8s-io","subsections":[]},{"section":"subject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"storageversioncondition-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"storageosvolumesource-v1-core","subsections":[]},{"section":"storageospersistentvolumesource-v1-core","subsections":[]},{"section":"statusdetails-v1-meta","subsections":[]},{"section":"statuscause-v1-meta","subsections":[]},{"section":"status-v1-meta","subsections":[]},{"section":"statefulsetupdatestrategy-v1-apps","subsections":[]},{"section":"statefulsetcondition-v1-apps","subsections":[]},{"section":"sessionaffinityconfig-v1-core","subsections":[]},{"section":"servicereference-v1-admissionregistration-k8s-io","subsections":[]},{"section":"serviceport-v1-core","subsections":[]},{"section":"servicebackendport-v1-networking-k8s-io","subsections":[]},{"section":"serviceaccounttokenprojection-v1-core","subsections":[]},{"section":"serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"serverstorageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"serveraddressbyclientcidr-v1-meta","subsections":[]},{"section":"securitycontext-v1-core","subsections":[]},{"section":"secretvolumesource-v1-core","subsections":[]},{"section":"secretreference-v1-core","subsections":[]},{"section":"secretprojection-v1-core","subsections":[]},{"section":"secretkeyselector-v1-core","subsections":[]},{"section":"secretenvsource-v1-core","subsections":[]},{"section":"seccompprofile-v1-core","subsections":[]},{"section":"scopedresourceselectorrequirement-v1-core","subsections":[]},{"section":"scopeselector-v1-core","subsections":[]},{"section":"scheduling-v1-node-k8s-io","subsections":[]},{"section":"scaleiovolumesource-v1-core","subsections":[]},{"section":"scaleiopersistentvolumesource-v1-core","subsections":[]},{"section":"scale-v1-autoscaling","subsections":[]},{"section":"selinuxstrategyoptions-v1beta1-policy","subsections":[]},{"section":"selinuxoptions-v1-core","subsections":[]},{"section":"runtimeclassstrategyoptions-v1beta1-policy","subsections":[]},{"section":"runasuserstrategyoptions-v1beta1-policy","subsections":[]},{"section":"runasgroupstrategyoptions-v1beta1-policy","subsections":[]},{"section":"rulewithoperations-v1-admissionregistration-k8s-io","subsections":[]},{"section":"rollingupdatestatefulsetstrategy-v1-apps","subsections":[]},{"section":"roleref-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"resourcerule-v1-authorization-k8s-io","subsections":[]},{"section":"resourcerequirements-v1-core","subsections":[]},{"section":"resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"resourcemetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"resourcemetricsource-v2beta2-autoscaling","subsections":[]},{"section":"resourcefieldselector-v1-core","subsections":[]},{"section":"resourceattributes-v1-authorization-k8s-io","subsections":[]},{"section":"replicationcontrollercondition-v1-core","subsections":[]},{"section":"replicasetcondition-v1-apps","subsections":[]},{"section":"rbdvolumesource-v1-core","subsections":[]},{"section":"rbdpersistentvolumesource-v1-core","subsections":[]},{"section":"quobytevolumesource-v1-core","subsections":[]},{"section":"queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"quantity-resource-core","subsections":[]},{"section":"projectedvolumesource-v1-core","subsections":[]},{"section":"probe-v1-core","subsections":[]},{"section":"prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"preferredschedulingterm-v1-core","subsections":[]},{"section":"preconditions-v1-meta","subsections":[]},{"section":"portworxvolumesource-v1-core","subsections":[]},{"section":"portstatus-v1-core","subsections":[]},{"section":"policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"policyrule-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"podsmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"podsmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"podsecuritycontext-v1-core","subsections":[]},{"section":"podreadinessgate-v1-core","subsections":[]},{"section":"podip-v1-core","subsections":[]},{"section":"poddisruptionbudget-v1-policy","subsections":[]},{"section":"poddnsconfigoption-v1-core","subsections":[]},{"section":"poddnsconfig-v1-core","subsections":[]},{"section":"podcondition-v1-core","subsections":[]},{"section":"podantiaffinity-v1-core","subsections":[]},{"section":"podaffinityterm-v1-core","subsections":[]},{"section":"podaffinity-v1-core","subsections":[]},{"section":"photonpersistentdiskvolumesource-v1-core","subsections":[]},{"section":"persistentvolumeclaimvolumesource-v1-core","subsections":[]},{"section":"persistentvolumeclaimtemplate-v1-core","subsections":[]},{"section":"persistentvolumeclaimcondition-v1-core","subsections":[]},{"section":"patch-v1-meta","subsections":[]},{"section":"ownerreference-v1-meta","subsections":[]},{"section":"overhead-v1-node-k8s-io","subsections":[]},{"section":"objectreference-v1-core","subsections":[]},{"section":"objectmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"objectmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"objectmeta-v1-meta","subsections":[]},{"section":"objectfieldselector-v1-core","subsections":[]},{"section":"nonresourcerule-v1-authorization-k8s-io","subsections":[]},{"section":"nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"nonresourceattributes-v1-authorization-k8s-io","subsections":[]},{"section":"nodesysteminfo-v1-core","subsections":[]},{"section":"nodeselectorterm-v1-core","subsections":[]},{"section":"nodeselectorrequirement-v1-core","subsections":[]},{"section":"nodeselector-v1-core","subsections":[]},{"section":"nodedaemonendpoints-v1-core","subsections":[]},{"section":"nodeconfigstatus-v1-core","subsections":[]},{"section":"nodeconfigsource-v1-core","subsections":[]},{"section":"nodecondition-v1-core","subsections":[]},{"section":"nodeaffinity-v1-core","subsections":[]},{"section":"nodeaddress-v1-core","subsections":[]},{"section":"networkpolicyport-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicypeer-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicyingressrule-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicyegressrule-v1-networking-k8s-io","subsections":[]},{"section":"namespacecondition-v1-core","subsections":[]},{"section":"nfsvolumesource-v1-core","subsections":[]},{"section":"mutatingwebhook-v1-admissionregistration-k8s-io","subsections":[]},{"section":"microtime-v1-meta","subsections":[]},{"section":"metricvaluestatus-v2beta2-autoscaling","subsections":[]},{"section":"metrictarget-v2beta2-autoscaling","subsections":[]},{"section":"metricstatus-v2beta2-autoscaling","subsections":[]},{"section":"metricspec-v2beta2-autoscaling","subsections":[]},{"section":"metricidentifier-v2beta2-autoscaling","subsections":[]},{"section":"managedfieldsentry-v1-meta","subsections":[]},{"section":"localvolumesource-v1-core","subsections":[]},{"section":"localobjectreference-v1-core","subsections":[]},{"section":"loadbalancerstatus-v1-core","subsections":[]},{"section":"loadbalanceringress-v1-core","subsections":[]},{"section":"listmeta-v1-meta","subsections":[]},{"section":"limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"limitresponse-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"limitrangeitem-v1-core","subsections":[]},{"section":"lifecycle-v1-core","subsections":[]},{"section":"labelselectorrequirement-v1-meta","subsections":[]},{"section":"labelselector-v1-meta","subsections":[]},{"section":"keytopath-v1-core","subsections":[]},{"section":"jobtemplatespec-v1-batch","subsections":[]},{"section":"jobcondition-v1-batch","subsections":[]},{"section":"jsonschemapropsorbool-v1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemapropsorarray-v1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemaprops-v1-apiextensions-k8s-io","subsections":[]},{"section":"json-v1-apiextensions-k8s-io","subsections":[]},{"section":"ingresstls-v1-networking-k8s-io","subsections":[]},{"section":"ingressservicebackend-v1-networking-k8s-io","subsections":[]},{"section":"ingressrule-v1-networking-k8s-io","subsections":[]},{"section":"ingressclassparametersreference-v1-networking-k8s-io","subsections":[]},{"section":"ingressbackend-v1-networking-k8s-io","subsections":[]},{"section":"iscsivolumesource-v1-core","subsections":[]},{"section":"iscsipersistentvolumesource-v1-core","subsections":[]},{"section":"ipblock-v1-networking-k8s-io","subsections":[]},{"section":"idrange-v1beta1-policy","subsections":[]},{"section":"hostportrange-v1beta1-policy","subsections":[]},{"section":"hostpathvolumesource-v1-core","subsections":[]},{"section":"hostalias-v1-core","subsections":[]},{"section":"horizontalpodautoscalercondition-v2beta2-autoscaling","subsections":[]},{"section":"horizontalpodautoscalerbehavior-v2beta2-autoscaling","subsections":[]},{"section":"handler-v1-core","subsections":[]},{"section":"httpingressrulevalue-v1-networking-k8s-io","subsections":[]},{"section":"httpingresspath-v1-networking-k8s-io","subsections":[]},{"section":"httpheader-v1-core","subsections":[]},{"section":"httpgetaction-v1-core","subsections":[]},{"section":"hpascalingrules-v2beta2-autoscaling","subsections":[]},{"section":"hpascalingpolicy-v2beta2-autoscaling","subsections":[]},{"section":"groupversionfordiscovery-v1-meta","subsections":[]},{"section":"groupsubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"glusterfsvolumesource-v1-core","subsections":[]},{"section":"glusterfspersistentvolumesource-v1-core","subsections":[]},{"section":"gitrepovolumesource-v1-core","subsections":[]},{"section":"gcepersistentdiskvolumesource-v1-core","subsections":[]},{"section":"forzone-v1-discovery-k8s-io","subsections":[]},{"section":"flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"flockervolumesource-v1-core","subsections":[]},{"section":"flexvolumesource-v1-core","subsections":[]},{"section":"flexpersistentvolumesource-v1-core","subsections":[]},{"section":"fieldsv1-v1-meta","subsections":[]},{"section":"fsgroupstrategyoptions-v1beta1-policy","subsections":[]},{"section":"fcvolumesource-v1-core","subsections":[]},{"section":"externalmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"externalmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"externaldocumentation-v1-apiextensions-k8s-io","subsections":[]},{"section":"execaction-v1-core","subsections":[]},{"section":"eviction-v1beta1-policy","subsections":[]},{"section":"eventsource-v1-core","subsections":[]},{"section":"eventseries-v1-core","subsections":[]},{"section":"ephemeralvolumesource-v1-core","subsections":[]},{"section":"ephemeralcontainers-v1-core","subsections":[]},{"section":"ephemeralcontainer-v1-core","subsections":[]},{"section":"envvarsource-v1-core","subsections":[]},{"section":"envvar-v1-core","subsections":[]},{"section":"envfromsource-v1-core","subsections":[]},{"section":"endpointsubset-v1-core","subsections":[]},{"section":"endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"endpointport-v1-core","subsections":[]},{"section":"endpointhints-v1-discovery-k8s-io","subsections":[]},{"section":"endpointconditions-v1-discovery-k8s-io","subsections":[]},{"section":"endpointaddress-v1-core","subsections":[]},{"section":"endpoint-v1-discovery-k8s-io","subsections":[]},{"section":"emptydirvolumesource-v1-core","subsections":[]},{"section":"downwardapivolumesource-v1-core","subsections":[]},{"section":"downwardapivolumefile-v1-core","subsections":[]},{"section":"downwardapiprojection-v1-core","subsections":[]},{"section":"deploymentcondition-v1-apps","subsections":[]},{"section":"deleteoptions-v1-meta","subsections":[]},{"section":"daemonsetupdatestrategy-v1-apps","subsections":[]},{"section":"daemonsetcondition-v1-apps","subsections":[]},{"section":"daemonendpoint-v1-core","subsections":[]},{"section":"customresourcevalidation-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresources-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcestatus-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcescale-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionnames-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitioncondition-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourceconversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcecolumndefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"crossversionobjectreference-v1-autoscaling","subsections":[]},{"section":"cronjob-v1-batch","subsections":[]},{"section":"containerstatewaiting-v1-core","subsections":[]},{"section":"containerstateterminated-v1-core","subsections":[]},{"section":"containerstaterunning-v1-core","subsections":[]},{"section":"containerstate-v1-core","subsections":[]},{"section":"containerresourcemetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"containerresourcemetricsource-v2beta2-autoscaling","subsections":[]},{"section":"containerport-v1-core","subsections":[]},{"section":"containerimage-v1-core","subsections":[]},{"section":"configmapvolumesource-v1-core","subsections":[]},{"section":"configmapprojection-v1-core","subsections":[]},{"section":"configmapnodeconfigsource-v1-core","subsections":[]},{"section":"configmapkeyselector-v1-core","subsections":[]},{"section":"configmapenvsource-v1-core","subsections":[]},{"section":"condition-v1-meta","subsections":[]},{"section":"componentcondition-v1-core","subsections":[]},{"section":"clientipconfig-v1-core","subsections":[]},{"section":"cindervolumesource-v1-core","subsections":[]},{"section":"cinderpersistentvolumesource-v1-core","subsections":[]},{"section":"certificatesigningrequestcondition-v1-certificates-k8s-io","subsections":[]},{"section":"cephfsvolumesource-v1-core","subsections":[]},{"section":"cephfspersistentvolumesource-v1-core","subsections":[]},{"section":"capabilities-v1-core","subsections":[]},{"section":"csivolumesource-v1-core","subsections":[]},{"section":"csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"csipersistentvolumesource-v1-core","subsections":[]},{"section":"csinodedriver-v1-storage-k8s-io","subsections":[]},{"section":"boundobjectreference-v1-authentication-k8s-io","subsections":[]},{"section":"azurefilevolumesource-v1-core","subsections":[]},{"section":"azurefilepersistentvolumesource-v1-core","subsections":[]},{"section":"azurediskvolumesource-v1-core","subsections":[]},{"section":"attachedvolume-v1-core","subsections":[]},{"section":"allowedhostpath-v1beta1-policy","subsections":[]},{"section":"allowedflexvolume-v1beta1-policy","subsections":[]},{"section":"allowedcsidriver-v1beta1-policy","subsections":[]},{"section":"aggregationrule-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"affinity-v1-core","subsections":[]},{"section":"awselasticblockstorevolumesource-v1-core","subsections":[]},{"section":"apiversions-v1-meta","subsections":[]},{"section":"apiservicecondition-v1-apiregistration-k8s-io","subsections":[]},{"section":"apiresource-v1-meta","subsections":[]},{"section":"apigroup-v1-meta","subsections":[]},{"section":"-strong-definitions-strong-","subsections":[]},{"section":"networkpolicy-v1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"watch-list-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"watch-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"list-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"read-networkpolicy-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"delete-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"replace-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"patch-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"create-networkpolicy-v1-networking-k8s-io","subsections":[]}]}]},{"section":"tokenreview-v1-authentication-k8s-io","subsections":[{"section":"-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-","subsections":[{"section":"create-tokenreview-v1-authentication-k8s-io","subsections":[]}]}]},{"section":"tokenrequest-v1-authentication-k8s-io","subsections":[]},{"section":"subjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-subjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"read-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"watch-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"list-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"read-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"delete-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"replace-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"patch-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"create-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]}]},{"section":"serviceaccount-v1-core","subsections":[{"section":"-strong-read-operations-serviceaccount-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-serviceaccount-v1-core","subsections":[]},{"section":"watch-list-serviceaccount-v1-core","subsections":[]},{"section":"watch-serviceaccount-v1-core","subsections":[]},{"section":"list-all-namespaces-serviceaccount-v1-core","subsections":[]},{"section":"list-serviceaccount-v1-core","subsections":[]},{"section":"read-serviceaccount-v1-core","subsections":[]}]},{"section":"-strong-write-operations-serviceaccount-v1-core-strong-","subsections":[{"section":"delete-collection-serviceaccount-v1-core","subsections":[]},{"section":"delete-serviceaccount-v1-core","subsections":[]},{"section":"replace-serviceaccount-v1-core","subsections":[]},{"section":"patch-serviceaccount-v1-core","subsections":[]},{"section":"create-serviceaccount-v1-core","subsections":[]}]}]},{"section":"selfsubjectrulesreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectrulesreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"selfsubjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"runtimeclass-v1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1-node-k8s-io","subsections":[]}]}]},{"section":"rolebinding-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"resourcequota-v1-core","subsections":[{"section":"-strong-status-operations-resourcequota-v1-core-strong-","subsections":[{"section":"replace-status-resourcequota-v1-core","subsections":[]},{"section":"read-status-resourcequota-v1-core","subsections":[]},{"section":"patch-status-resourcequota-v1-core","subsections":[]}]},{"section":"-strong-read-operations-resourcequota-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-resourcequota-v1-core","subsections":[]},{"section":"watch-list-resourcequota-v1-core","subsections":[]},{"section":"watch-resourcequota-v1-core","subsections":[]},{"section":"list-all-namespaces-resourcequota-v1-core","subsections":[]},{"section":"list-resourcequota-v1-core","subsections":[]},{"section":"read-resourcequota-v1-core","subsections":[]}]},{"section":"-strong-write-operations-resourcequota-v1-core-strong-","subsections":[{"section":"delete-collection-resourcequota-v1-core","subsections":[]},{"section":"delete-resourcequota-v1-core","subsections":[]},{"section":"replace-resourcequota-v1-core","subsections":[]},{"section":"patch-resourcequota-v1-core","subsections":[]},{"section":"create-resourcequota-v1-core","subsections":[]}]}]},{"section":"prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]}]},{"section":"persistentvolume-v1-core","subsections":[{"section":"-strong-status-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"replace-status-persistentvolume-v1-core","subsections":[]},{"section":"read-status-persistentvolume-v1-core","subsections":[]},{"section":"patch-status-persistentvolume-v1-core","subsections":[]}]},{"section":"-strong-read-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"watch-list-persistentvolume-v1-core","subsections":[]},{"section":"watch-persistentvolume-v1-core","subsections":[]},{"section":"list-persistentvolume-v1-core","subsections":[]},{"section":"read-persistentvolume-v1-core","subsections":[]}]},{"section":"-strong-write-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"delete-collection-persistentvolume-v1-core","subsections":[]},{"section":"delete-persistentvolume-v1-core","subsections":[]},{"section":"replace-persistentvolume-v1-core","subsections":[]},{"section":"patch-persistentvolume-v1-core","subsections":[]},{"section":"create-persistentvolume-v1-core","subsections":[]}]}]},{"section":"node-v1-core","subsections":[{"section":"-strong-proxy-operations-node-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-node-v1-core","subsections":[]},{"section":"replace-connect-proxy-node-v1-core","subsections":[]},{"section":"head-connect-proxy-path-node-v1-core","subsections":[]},{"section":"head-connect-proxy-node-v1-core","subsections":[]},{"section":"get-connect-proxy-path-node-v1-core","subsections":[]},{"section":"get-connect-proxy-node-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-node-v1-core","subsections":[]},{"section":"delete-connect-proxy-node-v1-core","subsections":[]},{"section":"create-connect-proxy-path-node-v1-core","subsections":[]},{"section":"create-connect-proxy-node-v1-core","subsections":[]}]},{"section":"-strong-status-operations-node-v1-core-strong-","subsections":[{"section":"replace-status-node-v1-core","subsections":[]},{"section":"read-status-node-v1-core","subsections":[]},{"section":"patch-status-node-v1-core","subsections":[]}]},{"section":"-strong-read-operations-node-v1-core-strong-","subsections":[{"section":"watch-list-node-v1-core","subsections":[]},{"section":"watch-node-v1-core","subsections":[]},{"section":"list-node-v1-core","subsections":[]},{"section":"read-node-v1-core","subsections":[]}]},{"section":"-strong-write-operations-node-v1-core-strong-","subsections":[{"section":"delete-collection-node-v1-core","subsections":[]},{"section":"delete-node-v1-core","subsections":[]},{"section":"replace-node-v1-core","subsections":[]},{"section":"patch-node-v1-core","subsections":[]},{"section":"create-node-v1-core","subsections":[]}]}]},{"section":"namespace-v1-core","subsections":[{"section":"-strong-status-operations-namespace-v1-core-strong-","subsections":[{"section":"replace-status-namespace-v1-core","subsections":[]},{"section":"read-status-namespace-v1-core","subsections":[]},{"section":"patch-status-namespace-v1-core","subsections":[]}]},{"section":"-strong-read-operations-namespace-v1-core-strong-","subsections":[{"section":"watch-list-namespace-v1-core","subsections":[]},{"section":"watch-namespace-v1-core","subsections":[]},{"section":"list-namespace-v1-core","subsections":[]},{"section":"read-namespace-v1-core","subsections":[]}]},{"section":"-strong-write-operations-namespace-v1-core-strong-","subsections":[{"section":"delete-namespace-v1-core","subsections":[]},{"section":"replace-namespace-v1-core","subsections":[]},{"section":"patch-namespace-v1-core","subsections":[]},{"section":"create-namespace-v1-core","subsections":[]}]}]},{"section":"localsubjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-localsubjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"lease-v1-coordination-k8s-io","subsections":[{"section":"-strong-read-operations-lease-v1-coordination-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-lease-v1-coordination-k8s-io","subsections":[]},{"section":"watch-list-lease-v1-coordination-k8s-io","subsections":[]},{"section":"watch-lease-v1-coordination-k8s-io","subsections":[]},{"section":"list-all-namespaces-lease-v1-coordination-k8s-io","subsections":[]},{"section":"list-lease-v1-coordination-k8s-io","subsections":[]},{"section":"read-lease-v1-coordination-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-lease-v1-coordination-k8s-io-strong-","subsections":[{"section":"delete-collection-lease-v1-coordination-k8s-io","subsections":[]},{"section":"delete-lease-v1-coordination-k8s-io","subsections":[]},{"section":"replace-lease-v1-coordination-k8s-io","subsections":[]},{"section":"patch-lease-v1-coordination-k8s-io","subsections":[]},{"section":"create-lease-v1-coordination-k8s-io","subsections":[]}]}]},{"section":"flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]}]},{"section":"componentstatus-v1-core","subsections":[{"section":"-strong-read-operations-componentstatus-v1-core-strong-","subsections":[{"section":"list-componentstatus-v1-core","subsections":[]},{"section":"read-componentstatus-v1-core","subsections":[]}]}]},{"section":"clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"certificatesigningrequest-v1-certificates-k8s-io","subsections":[{"section":"-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"replace-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"read-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"patch-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"watch-list-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"watch-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"list-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"read-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"delete-collection-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"delete-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"replace-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"patch-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"create-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]}]},{"section":"binding-v1-core","subsections":[{"section":"-strong-write-operations-binding-v1-core-strong-","subsections":[{"section":"create-binding-v1-core","subsections":[]}]}]},{"section":"apiservice-v1-apiregistration-k8s-io","subsections":[{"section":"-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"replace-status-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"read-status-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"patch-status-apiservice-v1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"watch-list-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"watch-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"list-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"read-apiservice-v1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"delete-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"replace-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"patch-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"create-apiservice-v1-apiregistration-k8s-io","subsections":[]}]}]},{"section":"-strong-cluster-apis-strong-","subsections":[]},{"section":"podsecuritypolicy-v1beta1-policy","subsections":[{"section":"-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-","subsections":[{"section":"watch-list-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"watch-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"list-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"read-podsecuritypolicy-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"delete-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"replace-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"patch-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"create-podsecuritypolicy-v1beta1-policy","subsections":[]}]}]},{"section":"priorityclass-v1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1-scheduling-k8s-io","subsections":[]}]}]},{"section":"poddisruptionbudget-v1beta1-policy","subsections":[{"section":"-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"replace-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-status-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"delete-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"replace-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"create-poddisruptionbudget-v1beta1-policy","subsections":[]}]}]},{"section":"podtemplate-v1-core","subsections":[{"section":"-strong-read-operations-podtemplate-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-podtemplate-v1-core","subsections":[]},{"section":"watch-list-podtemplate-v1-core","subsections":[]},{"section":"watch-podtemplate-v1-core","subsections":[]},{"section":"list-all-namespaces-podtemplate-v1-core","subsections":[]},{"section":"list-podtemplate-v1-core","subsections":[]},{"section":"read-podtemplate-v1-core","subsections":[]}]},{"section":"-strong-write-operations-podtemplate-v1-core-strong-","subsections":[{"section":"delete-collection-podtemplate-v1-core","subsections":[]},{"section":"delete-podtemplate-v1-core","subsections":[]},{"section":"replace-podtemplate-v1-core","subsections":[]},{"section":"patch-podtemplate-v1-core","subsections":[]},{"section":"create-podtemplate-v1-core","subsections":[]}]}]},{"section":"validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"horizontalpodautoscaler-v1-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]}]},{"section":"limitrange-v1-core","subsections":[{"section":"-strong-read-operations-limitrange-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-limitrange-v1-core","subsections":[]},{"section":"watch-list-limitrange-v1-core","subsections":[]},{"section":"watch-limitrange-v1-core","subsections":[]},{"section":"list-all-namespaces-limitrange-v1-core","subsections":[]},{"section":"list-limitrange-v1-core","subsections":[]},{"section":"read-limitrange-v1-core","subsections":[]}]},{"section":"-strong-write-operations-limitrange-v1-core-strong-","subsections":[{"section":"delete-collection-limitrange-v1-core","subsections":[]},{"section":"delete-limitrange-v1-core","subsections":[]},{"section":"replace-limitrange-v1-core","subsections":[]},{"section":"patch-limitrange-v1-core","subsections":[]},{"section":"create-limitrange-v1-core","subsections":[]}]}]},{"section":"event-v1-core","subsections":[{"section":"-strong-read-operations-event-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1-core","subsections":[]},{"section":"watch-list-event-v1-core","subsections":[]},{"section":"watch-event-v1-core","subsections":[]},{"section":"list-all-namespaces-event-v1-core","subsections":[]},{"section":"list-event-v1-core","subsections":[]},{"section":"read-event-v1-core","subsections":[]}]},{"section":"-strong-write-operations-event-v1-core-strong-","subsections":[{"section":"delete-collection-event-v1-core","subsections":[]},{"section":"delete-event-v1-core","subsections":[]},{"section":"replace-event-v1-core","subsections":[]},{"section":"patch-event-v1-core","subsections":[]},{"section":"create-event-v1-core","subsections":[]}]}]},{"section":"customresourcedefinition-v1-apiextensions-k8s-io","subsections":[{"section":"-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"replace-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"read-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"patch-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"watch-list-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"watch-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"list-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"read-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"delete-collection-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"delete-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"replace-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"patch-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"create-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]}]},{"section":"controllerrevision-v1-apps","subsections":[{"section":"-strong-read-operations-controllerrevision-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-controllerrevision-v1-apps","subsections":[]},{"section":"watch-list-controllerrevision-v1-apps","subsections":[]},{"section":"watch-controllerrevision-v1-apps","subsections":[]},{"section":"list-all-namespaces-controllerrevision-v1-apps","subsections":[]},{"section":"list-controllerrevision-v1-apps","subsections":[]},{"section":"read-controllerrevision-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-controllerrevision-v1-apps-strong-","subsections":[{"section":"delete-collection-controllerrevision-v1-apps","subsections":[]},{"section":"delete-controllerrevision-v1-apps","subsections":[]},{"section":"replace-controllerrevision-v1-apps","subsections":[]},{"section":"patch-controllerrevision-v1-apps","subsections":[]},{"section":"create-controllerrevision-v1-apps","subsections":[]}]}]},{"section":"-strong-metadata-apis-strong-","subsections":[]},{"section":"volumeattachment-v1-storage-k8s-io","subsections":[{"section":"-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"replace-status-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"read-status-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"patch-status-volumeattachment-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1-storage-k8s-io","subsections":[]}]}]},{"section":"volume-v1-core","subsections":[]},{"section":"storageclass-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-storageclass-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"watch-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"list-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"read-storageclass-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageclass-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"delete-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"replace-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"patch-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"create-storageclass-v1-storage-k8s-io","subsections":[]}]}]},{"section":"persistentvolumeclaim-v1-core","subsections":[{"section":"-strong-status-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"replace-status-persistentvolumeclaim-v1-core","subsections":[]},{"section":"read-status-persistentvolumeclaim-v1-core","subsections":[]},{"section":"patch-status-persistentvolumeclaim-v1-core","subsections":[]}]},{"section":"-strong-read-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-persistentvolumeclaim-v1-core","subsections":[]},{"section":"watch-list-persistentvolumeclaim-v1-core","subsections":[]},{"section":"watch-persistentvolumeclaim-v1-core","subsections":[]},{"section":"list-all-namespaces-persistentvolumeclaim-v1-core","subsections":[]},{"section":"list-persistentvolumeclaim-v1-core","subsections":[]},{"section":"read-persistentvolumeclaim-v1-core","subsections":[]}]},{"section":"-strong-write-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"delete-collection-persistentvolumeclaim-v1-core","subsections":[]},{"section":"delete-persistentvolumeclaim-v1-core","subsections":[]},{"section":"replace-persistentvolumeclaim-v1-core","subsections":[]},{"section":"patch-persistentvolumeclaim-v1-core","subsections":[]},{"section":"create-persistentvolumeclaim-v1-core","subsections":[]}]}]},{"section":"secret-v1-core","subsections":[{"section":"-strong-read-operations-secret-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-secret-v1-core","subsections":[]},{"section":"watch-list-secret-v1-core","subsections":[]},{"section":"watch-secret-v1-core","subsections":[]},{"section":"list-all-namespaces-secret-v1-core","subsections":[]},{"section":"list-secret-v1-core","subsections":[]},{"section":"read-secret-v1-core","subsections":[]}]},{"section":"-strong-write-operations-secret-v1-core-strong-","subsections":[{"section":"delete-collection-secret-v1-core","subsections":[]},{"section":"delete-secret-v1-core","subsections":[]},{"section":"replace-secret-v1-core","subsections":[]},{"section":"patch-secret-v1-core","subsections":[]},{"section":"create-secret-v1-core","subsections":[]}]}]},{"section":"csinode-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csinode-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csinode-v1-storage-k8s-io","subsections":[]},{"section":"watch-csinode-v1-storage-k8s-io","subsections":[]},{"section":"list-csinode-v1-storage-k8s-io","subsections":[]},{"section":"read-csinode-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csinode-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csinode-v1-storage-k8s-io","subsections":[]},{"section":"delete-csinode-v1-storage-k8s-io","subsections":[]},{"section":"replace-csinode-v1-storage-k8s-io","subsections":[]},{"section":"patch-csinode-v1-storage-k8s-io","subsections":[]},{"section":"create-csinode-v1-storage-k8s-io","subsections":[]}]}]},{"section":"csidriver-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csidriver-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"watch-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"list-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"read-csidriver-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csidriver-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"delete-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"replace-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"patch-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"create-csidriver-v1-storage-k8s-io","subsections":[]}]}]},{"section":"configmap-v1-core","subsections":[{"section":"-strong-read-operations-configmap-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-configmap-v1-core","subsections":[]},{"section":"watch-list-configmap-v1-core","subsections":[]},{"section":"watch-configmap-v1-core","subsections":[]},{"section":"list-all-namespaces-configmap-v1-core","subsections":[]},{"section":"list-configmap-v1-core","subsections":[]},{"section":"read-configmap-v1-core","subsections":[]}]},{"section":"-strong-write-operations-configmap-v1-core-strong-","subsections":[{"section":"delete-collection-configmap-v1-core","subsections":[]},{"section":"delete-configmap-v1-core","subsections":[]},{"section":"replace-configmap-v1-core","subsections":[]},{"section":"patch-configmap-v1-core","subsections":[]},{"section":"create-configmap-v1-core","subsections":[]}]}]},{"section":"-strong-config-and-storage-apis-strong-","subsections":[]},{"section":"service-v1-core","subsections":[{"section":"-strong-proxy-operations-service-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-service-v1-core","subsections":[]},{"section":"replace-connect-proxy-service-v1-core","subsections":[]},{"section":"head-connect-proxy-path-service-v1-core","subsections":[]},{"section":"head-connect-proxy-service-v1-core","subsections":[]},{"section":"get-connect-proxy-path-service-v1-core","subsections":[]},{"section":"get-connect-proxy-service-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-service-v1-core","subsections":[]},{"section":"delete-connect-proxy-service-v1-core","subsections":[]},{"section":"create-connect-proxy-path-service-v1-core","subsections":[]},{"section":"create-connect-proxy-service-v1-core","subsections":[]}]},{"section":"-strong-status-operations-service-v1-core-strong-","subsections":[{"section":"replace-status-service-v1-core","subsections":[]},{"section":"read-status-service-v1-core","subsections":[]},{"section":"patch-status-service-v1-core","subsections":[]}]},{"section":"-strong-read-operations-service-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-service-v1-core","subsections":[]},{"section":"watch-list-service-v1-core","subsections":[]},{"section":"watch-service-v1-core","subsections":[]},{"section":"list-all-namespaces-service-v1-core","subsections":[]},{"section":"list-service-v1-core","subsections":[]},{"section":"read-service-v1-core","subsections":[]}]},{"section":"-strong-write-operations-service-v1-core-strong-","subsections":[{"section":"delete-service-v1-core","subsections":[]},{"section":"replace-service-v1-core","subsections":[]},{"section":"patch-service-v1-core","subsections":[]},{"section":"create-service-v1-core","subsections":[]}]}]},{"section":"ingressclass-v1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"watch-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"list-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"read-ingressclass-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"delete-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"replace-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"patch-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"create-ingressclass-v1-networking-k8s-io","subsections":[]}]}]},{"section":"ingress-v1-networking-k8s-io","subsections":[{"section":"-strong-status-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"replace-status-ingress-v1-networking-k8s-io","subsections":[]},{"section":"read-status-ingress-v1-networking-k8s-io","subsections":[]},{"section":"patch-status-ingress-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1-networking-k8s-io","subsections":[]},{"section":"watch-list-ingress-v1-networking-k8s-io","subsections":[]},{"section":"watch-ingress-v1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-ingress-v1-networking-k8s-io","subsections":[]},{"section":"list-ingress-v1-networking-k8s-io","subsections":[]},{"section":"read-ingress-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingress-v1-networking-k8s-io","subsections":[]},{"section":"delete-ingress-v1-networking-k8s-io","subsections":[]},{"section":"replace-ingress-v1-networking-k8s-io","subsections":[]},{"section":"patch-ingress-v1-networking-k8s-io","subsections":[]},{"section":"create-ingress-v1-networking-k8s-io","subsections":[]}]}]},{"section":"endpointslice-v1beta1-discovery-k8s-io","subsections":[{"section":"-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"read-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"delete-collection-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"delete-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"replace-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"patch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"create-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]}]},{"section":"endpoints-v1-core","subsections":[{"section":"-strong-read-operations-endpoints-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-endpoints-v1-core","subsections":[]},{"section":"watch-list-endpoints-v1-core","subsections":[]},{"section":"watch-endpoints-v1-core","subsections":[]},{"section":"list-all-namespaces-endpoints-v1-core","subsections":[]},{"section":"list-endpoints-v1-core","subsections":[]},{"section":"read-endpoints-v1-core","subsections":[]}]},{"section":"-strong-write-operations-endpoints-v1-core-strong-","subsections":[{"section":"delete-collection-endpoints-v1-core","subsections":[]},{"section":"delete-endpoints-v1-core","subsections":[]},{"section":"replace-endpoints-v1-core","subsections":[]},{"section":"patch-endpoints-v1-core","subsections":[]},{"section":"create-endpoints-v1-core","subsections":[]}]}]},{"section":"-strong-service-apis-strong-","subsections":[]},{"section":"statefulset-v1-apps","subsections":[{"section":"-strong-misc-operations-statefulset-v1-apps-strong-","subsections":[{"section":"patch-scale-statefulset-v1-apps","subsections":[]},{"section":"replace-scale-statefulset-v1-apps","subsections":[]},{"section":"read-scale-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-statefulset-v1-apps-strong-","subsections":[{"section":"replace-status-statefulset-v1-apps","subsections":[]},{"section":"read-status-statefulset-v1-apps","subsections":[]},{"section":"patch-status-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-statefulset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-statefulset-v1-apps","subsections":[]},{"section":"watch-list-statefulset-v1-apps","subsections":[]},{"section":"watch-statefulset-v1-apps","subsections":[]},{"section":"list-all-namespaces-statefulset-v1-apps","subsections":[]},{"section":"list-statefulset-v1-apps","subsections":[]},{"section":"read-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-statefulset-v1-apps-strong-","subsections":[{"section":"delete-collection-statefulset-v1-apps","subsections":[]},{"section":"delete-statefulset-v1-apps","subsections":[]},{"section":"replace-statefulset-v1-apps","subsections":[]},{"section":"patch-statefulset-v1-apps","subsections":[]},{"section":"create-statefulset-v1-apps","subsections":[]}]}]},{"section":"replicationcontroller-v1-core","subsections":[{"section":"-strong-misc-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"patch-scale-replicationcontroller-v1-core","subsections":[]},{"section":"replace-scale-replicationcontroller-v1-core","subsections":[]},{"section":"read-scale-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-status-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"replace-status-replicationcontroller-v1-core","subsections":[]},{"section":"read-status-replicationcontroller-v1-core","subsections":[]},{"section":"patch-status-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-read-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-replicationcontroller-v1-core","subsections":[]},{"section":"watch-list-replicationcontroller-v1-core","subsections":[]},{"section":"watch-replicationcontroller-v1-core","subsections":[]},{"section":"list-all-namespaces-replicationcontroller-v1-core","subsections":[]},{"section":"list-replicationcontroller-v1-core","subsections":[]},{"section":"read-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-write-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"delete-collection-replicationcontroller-v1-core","subsections":[]},{"section":"delete-replicationcontroller-v1-core","subsections":[]},{"section":"replace-replicationcontroller-v1-core","subsections":[]},{"section":"patch-replicationcontroller-v1-core","subsections":[]},{"section":"create-replicationcontroller-v1-core","subsections":[]}]}]},{"section":"replicaset-v1-apps","subsections":[{"section":"-strong-misc-operations-replicaset-v1-apps-strong-","subsections":[{"section":"patch-scale-replicaset-v1-apps","subsections":[]},{"section":"replace-scale-replicaset-v1-apps","subsections":[]},{"section":"read-scale-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-replicaset-v1-apps-strong-","subsections":[{"section":"replace-status-replicaset-v1-apps","subsections":[]},{"section":"read-status-replicaset-v1-apps","subsections":[]},{"section":"patch-status-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-replicaset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-replicaset-v1-apps","subsections":[]},{"section":"watch-list-replicaset-v1-apps","subsections":[]},{"section":"watch-replicaset-v1-apps","subsections":[]},{"section":"list-all-namespaces-replicaset-v1-apps","subsections":[]},{"section":"list-replicaset-v1-apps","subsections":[]},{"section":"read-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-replicaset-v1-apps-strong-","subsections":[{"section":"delete-collection-replicaset-v1-apps","subsections":[]},{"section":"delete-replicaset-v1-apps","subsections":[]},{"section":"replace-replicaset-v1-apps","subsections":[]},{"section":"patch-replicaset-v1-apps","subsections":[]},{"section":"create-replicaset-v1-apps","subsections":[]}]}]},{"section":"pod-v1-core","subsections":[{"section":"-strong-misc-operations-pod-v1-core-strong-","subsections":[{"section":"read-log-pod-v1-core","subsections":[]}]},{"section":"-strong-proxy-operations-pod-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"replace-connect-proxy-pod-v1-core","subsections":[]},{"section":"head-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"head-connect-proxy-pod-v1-core","subsections":[]},{"section":"get-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"get-connect-proxy-pod-v1-core","subsections":[]},{"section":"get-connect-portforward-pod-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"delete-connect-proxy-pod-v1-core","subsections":[]},{"section":"create-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"create-connect-proxy-pod-v1-core","subsections":[]},{"section":"create-connect-portforward-pod-v1-core","subsections":[]}]},{"section":"-strong-status-operations-pod-v1-core-strong-","subsections":[{"section":"replace-status-pod-v1-core","subsections":[]},{"section":"read-status-pod-v1-core","subsections":[]},{"section":"patch-status-pod-v1-core","subsections":[]}]},{"section":"-strong-read-operations-pod-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-pod-v1-core","subsections":[]},{"section":"watch-list-pod-v1-core","subsections":[]},{"section":"watch-pod-v1-core","subsections":[]},{"section":"list-all-namespaces-pod-v1-core","subsections":[]},{"section":"list-pod-v1-core","subsections":[]},{"section":"read-pod-v1-core","subsections":[]}]},{"section":"-strong-write-operations-pod-v1-core-strong-","subsections":[{"section":"delete-collection-pod-v1-core","subsections":[]},{"section":"delete-pod-v1-core","subsections":[]},{"section":"replace-pod-v1-core","subsections":[]},{"section":"patch-pod-v1-core","subsections":[]},{"section":"create-eviction-pod-v1-core","subsections":[]},{"section":"create-pod-v1-core","subsections":[]}]}]},{"section":"job-v1-batch","subsections":[{"section":"-strong-status-operations-job-v1-batch-strong-","subsections":[{"section":"replace-status-job-v1-batch","subsections":[]},{"section":"read-status-job-v1-batch","subsections":[]},{"section":"patch-status-job-v1-batch","subsections":[]}]},{"section":"-strong-read-operations-job-v1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-job-v1-batch","subsections":[]},{"section":"watch-list-job-v1-batch","subsections":[]},{"section":"watch-job-v1-batch","subsections":[]},{"section":"list-all-namespaces-job-v1-batch","subsections":[]},{"section":"list-job-v1-batch","subsections":[]},{"section":"read-job-v1-batch","subsections":[]}]},{"section":"-strong-write-operations-job-v1-batch-strong-","subsections":[{"section":"delete-collection-job-v1-batch","subsections":[]},{"section":"delete-job-v1-batch","subsections":[]},{"section":"replace-job-v1-batch","subsections":[]},{"section":"patch-job-v1-batch","subsections":[]},{"section":"create-job-v1-batch","subsections":[]}]}]},{"section":"deployment-v1-apps","subsections":[{"section":"-strong-misc-operations-deployment-v1-apps-strong-","subsections":[{"section":"patch-scale-deployment-v1-apps","subsections":[]},{"section":"replace-scale-deployment-v1-apps","subsections":[]},{"section":"read-scale-deployment-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-deployment-v1-apps-strong-","subsections":[{"section":"replace-status-deployment-v1-apps","subsections":[]},{"section":"read-status-deployment-v1-apps","subsections":[]},{"section":"patch-status-deployment-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-deployment-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-deployment-v1-apps","subsections":[]},{"section":"watch-list-deployment-v1-apps","subsections":[]},{"section":"watch-deployment-v1-apps","subsections":[]},{"section":"list-all-namespaces-deployment-v1-apps","subsections":[]},{"section":"list-deployment-v1-apps","subsections":[]},{"section":"read-deployment-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-deployment-v1-apps-strong-","subsections":[{"section":"delete-collection-deployment-v1-apps","subsections":[]},{"section":"delete-deployment-v1-apps","subsections":[]},{"section":"replace-deployment-v1-apps","subsections":[]},{"section":"patch-deployment-v1-apps","subsections":[]},{"section":"create-deployment-v1-apps","subsections":[]}]}]},{"section":"daemonset-v1-apps","subsections":[{"section":"-strong-status-operations-daemonset-v1-apps-strong-","subsections":[{"section":"replace-status-daemonset-v1-apps","subsections":[]},{"section":"read-status-daemonset-v1-apps","subsections":[]},{"section":"patch-status-daemonset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-daemonset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-daemonset-v1-apps","subsections":[]},{"section":"watch-list-daemonset-v1-apps","subsections":[]},{"section":"watch-daemonset-v1-apps","subsections":[]},{"section":"list-all-namespaces-daemonset-v1-apps","subsections":[]},{"section":"list-daemonset-v1-apps","subsections":[]},{"section":"read-daemonset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-daemonset-v1-apps-strong-","subsections":[{"section":"delete-collection-daemonset-v1-apps","subsections":[]},{"section":"delete-daemonset-v1-apps","subsections":[]},{"section":"replace-daemonset-v1-apps","subsections":[]},{"section":"patch-daemonset-v1-apps","subsections":[]},{"section":"create-daemonset-v1-apps","subsections":[]}]}]},{"section":"cronjob-v1beta1-batch","subsections":[{"section":"-strong-status-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"replace-status-cronjob-v1beta1-batch","subsections":[]},{"section":"read-status-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-status-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-read-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-list-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-cronjob-v1beta1-batch","subsections":[]},{"section":"list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"list-cronjob-v1beta1-batch","subsections":[]},{"section":"read-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-write-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"delete-collection-cronjob-v1beta1-batch","subsections":[]},{"section":"delete-cronjob-v1beta1-batch","subsections":[]},{"section":"replace-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-cronjob-v1beta1-batch","subsections":[]},{"section":"create-cronjob-v1beta1-batch","subsections":[]}]}]},{"section":"container-v1-core","subsections":[]},{"section":"-strong-workloads-apis-strong-","subsections":[]},{"section":"-strong-api-groups-strong-","subsections":[]},{"section":"-strong-api-overview-strong-","subsections":[]}],"flatToc":["webhookclientconfig-v1beta1-apiextensions-k8s-io","webhookclientconfig-v1beta1-admissionregistration-k8s-io","webhookclientconfig-v1-apiextensions-k8s-io","volumenoderesources-v1beta1-storage-k8s-io","volumeerror-v1alpha1-storage-k8s-io","volumeerror-v1beta1-storage-k8s-io","volumeattachmentsource-v1alpha1-storage-k8s-io","volumeattachmentsource-v1beta1-storage-k8s-io","watch-list-volumeattachment-v1alpha1-storage-k8s-io","watch-volumeattachment-v1alpha1-storage-k8s-io","list-volumeattachment-v1alpha1-storage-k8s-io","read-volumeattachment-v1alpha1-storage-k8s-io","-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1alpha1-storage-k8s-io","delete-volumeattachment-v1alpha1-storage-k8s-io","replace-volumeattachment-v1alpha1-storage-k8s-io","patch-volumeattachment-v1alpha1-storage-k8s-io","create-volumeattachment-v1alpha1-storage-k8s-io","-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","volumeattachment-v1alpha1-storage-k8s-io","watch-list-volumeattachment-v1beta1-storage-k8s-io","watch-volumeattachment-v1beta1-storage-k8s-io","list-volumeattachment-v1beta1-storage-k8s-io","read-volumeattachment-v1beta1-storage-k8s-io","-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1beta1-storage-k8s-io","delete-volumeattachment-v1beta1-storage-k8s-io","replace-volumeattachment-v1beta1-storage-k8s-io","patch-volumeattachment-v1beta1-storage-k8s-io","create-volumeattachment-v1beta1-storage-k8s-io","-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","volumeattachment-v1beta1-storage-k8s-io","watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","validatingwebhook-v1beta1-admissionregistration-k8s-io","userinfo-v1beta1-authentication-k8s-io","create-tokenreview-v1beta1-authentication-k8s-io","-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-","tokenreview-v1beta1-authentication-k8s-io","tokenrequest-v1beta1-storage-k8s-io","tokenrequest-v1-storage-k8s-io","subjectrulesreviewstatus-v1beta1-authorization-k8s-io","create-subjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-","subjectaccessreview-v1beta1-authorization-k8s-io","subject-v1alpha1-rbac-authorization-k8s-io","subject-v1beta1-rbac-authorization-k8s-io","subject-v1-rbac-authorization-k8s-io","watch-list-storageclass-v1beta1-storage-k8s-io","watch-storageclass-v1beta1-storage-k8s-io","list-storageclass-v1beta1-storage-k8s-io","read-storageclass-v1beta1-storage-k8s-io","-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-","delete-collection-storageclass-v1beta1-storage-k8s-io","delete-storageclass-v1beta1-storage-k8s-io","replace-storageclass-v1beta1-storage-k8s-io","patch-storageclass-v1beta1-storage-k8s-io","create-storageclass-v1beta1-storage-k8s-io","-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-","storageclass-v1beta1-storage-k8s-io","servicereference-v1beta1-apiregistration-k8s-io","servicereference-v1beta1-apiextensions-k8s-io","servicereference-v1beta1-admissionregistration-k8s-io","servicereference-v1-apiregistration-k8s-io","servicereference-v1-apiextensions-k8s-io","create-selfsubjectrulesreview-v1beta1-authorization-k8s-io","-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-","selfsubjectrulesreview-v1beta1-authorization-k8s-io","create-selfsubjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","selfsubjectaccessreview-v1beta1-authorization-k8s-io","scheduling-v1alpha1-node-k8s-io","scheduling-v1beta1-node-k8s-io","watch-list-runtimeclass-v1alpha1-node-k8s-io","watch-runtimeclass-v1alpha1-node-k8s-io","list-runtimeclass-v1alpha1-node-k8s-io","read-runtimeclass-v1alpha1-node-k8s-io","-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","delete-collection-runtimeclass-v1alpha1-node-k8s-io","delete-runtimeclass-v1alpha1-node-k8s-io","replace-runtimeclass-v1alpha1-node-k8s-io","patch-runtimeclass-v1alpha1-node-k8s-io","create-runtimeclass-v1alpha1-node-k8s-io","-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","runtimeclass-v1alpha1-node-k8s-io","watch-list-runtimeclass-v1beta1-node-k8s-io","watch-runtimeclass-v1beta1-node-k8s-io","list-runtimeclass-v1beta1-node-k8s-io","read-runtimeclass-v1beta1-node-k8s-io","-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-","delete-collection-runtimeclass-v1beta1-node-k8s-io","delete-runtimeclass-v1beta1-node-k8s-io","replace-runtimeclass-v1beta1-node-k8s-io","patch-runtimeclass-v1beta1-node-k8s-io","create-runtimeclass-v1beta1-node-k8s-io","-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-","runtimeclass-v1beta1-node-k8s-io","rulewithoperations-v1beta1-admissionregistration-k8s-io","roleref-v1alpha1-rbac-authorization-k8s-io","roleref-v1beta1-rbac-authorization-k8s-io","watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-rolebinding-v1alpha1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","list-rolebinding-v1alpha1-rbac-authorization-k8s-io","read-rolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io","delete-rolebinding-v1alpha1-rbac-authorization-k8s-io","replace-rolebinding-v1alpha1-rbac-authorization-k8s-io","patch-rolebinding-v1alpha1-rbac-authorization-k8s-io","create-rolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io","watch-rolebinding-v1beta1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","list-rolebinding-v1beta1-rbac-authorization-k8s-io","read-rolebinding-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io","delete-rolebinding-v1beta1-rbac-authorization-k8s-io","replace-rolebinding-v1beta1-rbac-authorization-k8s-io","patch-rolebinding-v1beta1-rbac-authorization-k8s-io","create-rolebinding-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","rolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","watch-list-role-v1alpha1-rbac-authorization-k8s-io","watch-role-v1alpha1-rbac-authorization-k8s-io","list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","list-role-v1alpha1-rbac-authorization-k8s-io","read-role-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1alpha1-rbac-authorization-k8s-io","delete-role-v1alpha1-rbac-authorization-k8s-io","replace-role-v1alpha1-rbac-authorization-k8s-io","patch-role-v1alpha1-rbac-authorization-k8s-io","create-role-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","role-v1alpha1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","watch-list-role-v1beta1-rbac-authorization-k8s-io","watch-role-v1beta1-rbac-authorization-k8s-io","list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","list-role-v1beta1-rbac-authorization-k8s-io","read-role-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1beta1-rbac-authorization-k8s-io","delete-role-v1beta1-rbac-authorization-k8s-io","replace-role-v1beta1-rbac-authorization-k8s-io","patch-role-v1beta1-rbac-authorization-k8s-io","create-role-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","role-v1beta1-rbac-authorization-k8s-io","resourcerule-v1beta1-authorization-k8s-io","resourcemetricstatus-v2beta1-autoscaling","resourcemetricsource-v2beta1-autoscaling","resourceattributes-v1beta1-authorization-k8s-io","watch-list-priorityclass-v1alpha1-scheduling-k8s-io","watch-priorityclass-v1alpha1-scheduling-k8s-io","list-priorityclass-v1alpha1-scheduling-k8s-io","read-priorityclass-v1alpha1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1alpha1-scheduling-k8s-io","delete-priorityclass-v1alpha1-scheduling-k8s-io","replace-priorityclass-v1alpha1-scheduling-k8s-io","patch-priorityclass-v1alpha1-scheduling-k8s-io","create-priorityclass-v1alpha1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","priorityclass-v1alpha1-scheduling-k8s-io","watch-list-priorityclass-v1beta1-scheduling-k8s-io","watch-priorityclass-v1beta1-scheduling-k8s-io","list-priorityclass-v1beta1-scheduling-k8s-io","read-priorityclass-v1beta1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1beta1-scheduling-k8s-io","delete-priorityclass-v1beta1-scheduling-k8s-io","replace-priorityclass-v1beta1-scheduling-k8s-io","patch-priorityclass-v1beta1-scheduling-k8s-io","create-priorityclass-v1beta1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","priorityclass-v1beta1-scheduling-k8s-io","policyrule-v1alpha1-rbac-authorization-k8s-io","policyrule-v1beta1-rbac-authorization-k8s-io","podsmetricstatus-v2beta1-autoscaling","podsmetricsource-v2beta1-autoscaling","replace-status-poddisruptionbudget-v1beta1-policy","read-status-poddisruptionbudget-v1beta1-policy","patch-status-poddisruptionbudget-v1beta1-policy","-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","watch-list-poddisruptionbudget-v1beta1-policy","watch-poddisruptionbudget-v1beta1-policy","list-all-namespaces-poddisruptionbudget-v1beta1-policy","list-poddisruptionbudget-v1beta1-policy","read-poddisruptionbudget-v1beta1-policy","-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","delete-collection-poddisruptionbudget-v1beta1-policy","delete-poddisruptionbudget-v1beta1-policy","replace-poddisruptionbudget-v1beta1-policy","patch-poddisruptionbudget-v1beta1-policy","create-poddisruptionbudget-v1beta1-policy","-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","poddisruptionbudget-v1beta1-policy","overhead-v1alpha1-node-k8s-io","overhead-v1beta1-node-k8s-io","objectmetricstatus-v2beta1-autoscaling","objectmetricsource-v2beta1-autoscaling","nonresourcerule-v1beta1-authorization-k8s-io","nonresourceattributes-v1beta1-authorization-k8s-io","watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","mutatingwebhook-v1beta1-admissionregistration-k8s-io","metricstatus-v2beta1-autoscaling","metricspec-v2beta1-autoscaling","create-localsubjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","localsubjectaccessreview-v1beta1-authorization-k8s-io","watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io","watch-list-lease-v1beta1-coordination-k8s-io","watch-lease-v1beta1-coordination-k8s-io","list-all-namespaces-lease-v1beta1-coordination-k8s-io","list-lease-v1beta1-coordination-k8s-io","read-lease-v1beta1-coordination-k8s-io","-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-","delete-collection-lease-v1beta1-coordination-k8s-io","delete-lease-v1beta1-coordination-k8s-io","replace-lease-v1beta1-coordination-k8s-io","patch-lease-v1beta1-coordination-k8s-io","create-lease-v1beta1-coordination-k8s-io","-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-","lease-v1beta1-coordination-k8s-io","jobtemplatespec-v1beta1-batch","jsonschemapropsorbool-v1beta1-apiextensions-k8s-io","jsonschemapropsorarray-v1beta1-apiextensions-k8s-io","jsonschemaprops-v1beta1-apiextensions-k8s-io","json-v1beta1-apiextensions-k8s-io","ingresstls-v1beta1-networking-k8s-io","ingresstls-v1beta1-extensions","ingressrule-v1beta1-networking-k8s-io","ingressrule-v1beta1-extensions","ingressclassparametersreference-v1beta1-networking-k8s-io","watch-list-ingressclass-v1beta1-networking-k8s-io","watch-ingressclass-v1beta1-networking-k8s-io","list-ingressclass-v1beta1-networking-k8s-io","read-ingressclass-v1beta1-networking-k8s-io","-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-","delete-collection-ingressclass-v1beta1-networking-k8s-io","delete-ingressclass-v1beta1-networking-k8s-io","replace-ingressclass-v1beta1-networking-k8s-io","patch-ingressclass-v1beta1-networking-k8s-io","create-ingressclass-v1beta1-networking-k8s-io","-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-","ingressclass-v1beta1-networking-k8s-io","ingressbackend-v1beta1-networking-k8s-io","ingressbackend-v1beta1-extensions","replace-status-ingress-v1beta1-networking-k8s-io","read-status-ingress-v1beta1-networking-k8s-io","patch-status-ingress-v1beta1-networking-k8s-io","-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-","watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io","watch-list-ingress-v1beta1-networking-k8s-io","watch-ingress-v1beta1-networking-k8s-io","list-all-namespaces-ingress-v1beta1-networking-k8s-io","list-ingress-v1beta1-networking-k8s-io","read-ingress-v1beta1-networking-k8s-io","-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-","delete-collection-ingress-v1beta1-networking-k8s-io","delete-ingress-v1beta1-networking-k8s-io","replace-ingress-v1beta1-networking-k8s-io","patch-ingress-v1beta1-networking-k8s-io","create-ingress-v1beta1-networking-k8s-io","-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-","ingress-v1beta1-networking-k8s-io","replace-status-ingress-v1beta1-extensions","read-status-ingress-v1beta1-extensions","patch-status-ingress-v1beta1-extensions","-strong-status-operations-ingress-v1beta1-extensions-strong-","watch-list-all-namespaces-ingress-v1beta1-extensions","watch-list-ingress-v1beta1-extensions","watch-ingress-v1beta1-extensions","list-all-namespaces-ingress-v1beta1-extensions","list-ingress-v1beta1-extensions","read-ingress-v1beta1-extensions","-strong-read-operations-ingress-v1beta1-extensions-strong-","delete-collection-ingress-v1beta1-extensions","delete-ingress-v1beta1-extensions","replace-ingress-v1beta1-extensions","patch-ingress-v1beta1-extensions","create-ingress-v1beta1-extensions","-strong-write-operations-ingress-v1beta1-extensions-strong-","ingress-v1beta1-extensions","horizontalpodautoscalercondition-v2beta1-autoscaling","replace-status-horizontalpodautoscaler-v2beta1-autoscaling","read-status-horizontalpodautoscaler-v2beta1-autoscaling","patch-status-horizontalpodautoscaler-v2beta1-autoscaling","-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","watch-list-horizontalpodautoscaler-v2beta1-autoscaling","watch-horizontalpodautoscaler-v2beta1-autoscaling","list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","list-horizontalpodautoscaler-v2beta1-autoscaling","read-horizontalpodautoscaler-v2beta1-autoscaling","-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v2beta1-autoscaling","delete-horizontalpodautoscaler-v2beta1-autoscaling","replace-horizontalpodautoscaler-v2beta1-autoscaling","patch-horizontalpodautoscaler-v2beta1-autoscaling","create-horizontalpodautoscaler-v2beta1-autoscaling","-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","horizontalpodautoscaler-v2beta1-autoscaling","replace-status-horizontalpodautoscaler-v2beta2-autoscaling","read-status-horizontalpodautoscaler-v2beta2-autoscaling","patch-status-horizontalpodautoscaler-v2beta2-autoscaling","-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","watch-list-horizontalpodautoscaler-v2beta2-autoscaling","watch-horizontalpodautoscaler-v2beta2-autoscaling","list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","list-horizontalpodautoscaler-v2beta2-autoscaling","read-horizontalpodautoscaler-v2beta2-autoscaling","-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v2beta2-autoscaling","delete-horizontalpodautoscaler-v2beta2-autoscaling","replace-horizontalpodautoscaler-v2beta2-autoscaling","patch-horizontalpodautoscaler-v2beta2-autoscaling","create-horizontalpodautoscaler-v2beta2-autoscaling","-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","horizontalpodautoscaler-v2beta2-autoscaling","httpingressrulevalue-v1beta1-networking-k8s-io","httpingressrulevalue-v1beta1-extensions","httpingresspath-v1beta1-networking-k8s-io","httpingresspath-v1beta1-extensions","forzone-v1beta1-discovery-k8s-io","externalmetricstatus-v2beta1-autoscaling","externalmetricsource-v2beta1-autoscaling","externaldocumentation-v1beta1-apiextensions-k8s-io","eventseries-v1beta1-events-k8s-io","eventseries-v1-events-k8s-io","watch-list-all-namespaces-event-v1beta1-events-k8s-io","watch-list-event-v1beta1-events-k8s-io","watch-event-v1beta1-events-k8s-io","list-all-namespaces-event-v1beta1-events-k8s-io","list-event-v1beta1-events-k8s-io","read-event-v1beta1-events-k8s-io","-strong-read-operations-event-v1beta1-events-k8s-io-strong-","delete-collection-event-v1beta1-events-k8s-io","delete-event-v1beta1-events-k8s-io","replace-event-v1beta1-events-k8s-io","patch-event-v1beta1-events-k8s-io","create-event-v1beta1-events-k8s-io","-strong-write-operations-event-v1beta1-events-k8s-io-strong-","event-v1beta1-events-k8s-io","watch-list-all-namespaces-event-v1-events-k8s-io","watch-list-event-v1-events-k8s-io","watch-event-v1-events-k8s-io","list-all-namespaces-event-v1-events-k8s-io","list-event-v1-events-k8s-io","read-event-v1-events-k8s-io","-strong-read-operations-event-v1-events-k8s-io-strong-","delete-collection-event-v1-events-k8s-io","delete-event-v1-events-k8s-io","replace-event-v1-events-k8s-io","patch-event-v1-events-k8s-io","create-event-v1-events-k8s-io","-strong-write-operations-event-v1-events-k8s-io-strong-","event-v1-events-k8s-io","watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","watch-list-endpointslice-v1beta1-discovery-k8s-io","watch-endpointslice-v1beta1-discovery-k8s-io","list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","list-endpointslice-v1beta1-discovery-k8s-io","read-endpointslice-v1beta1-discovery-k8s-io","-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","delete-collection-endpointslice-v1beta1-discovery-k8s-io","delete-endpointslice-v1beta1-discovery-k8s-io","replace-endpointslice-v1beta1-discovery-k8s-io","patch-endpointslice-v1beta1-discovery-k8s-io","create-endpointslice-v1beta1-discovery-k8s-io","-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","endpointslice-v1beta1-discovery-k8s-io","endpointport-v1beta1-discovery-k8s-io","endpointport-v1-discovery-k8s-io","endpointhints-v1beta1-discovery-k8s-io","endpointconditions-v1beta1-discovery-k8s-io","endpoint-v1beta1-discovery-k8s-io","customresourcevalidation-v1beta1-apiextensions-k8s-io","customresourcesubresources-v1beta1-apiextensions-k8s-io","customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io","customresourcesubresourcescale-v1beta1-apiextensions-k8s-io","customresourcedefinitionversion-v1beta1-apiextensions-k8s-io","customresourcedefinitionnames-v1beta1-apiextensions-k8s-io","customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io","replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io","watch-customresourcedefinition-v1beta1-apiextensions-k8s-io","list-customresourcedefinition-v1beta1-apiextensions-k8s-io","read-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io","delete-customresourcedefinition-v1beta1-apiextensions-k8s-io","replace-customresourcedefinition-v1beta1-apiextensions-k8s-io","patch-customresourcedefinition-v1beta1-apiextensions-k8s-io","create-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","customresourcedefinition-v1beta1-apiextensions-k8s-io","customresourceconversion-v1beta1-apiextensions-k8s-io","customresourcecolumndefinition-v1beta1-apiextensions-k8s-io","crossversionobjectreference-v2beta1-autoscaling","crossversionobjectreference-v2beta2-autoscaling","replace-status-cronjob-v1beta1-batch","read-status-cronjob-v1beta1-batch","patch-status-cronjob-v1beta1-batch","-strong-status-operations-cronjob-v1beta1-batch-strong-","watch-list-all-namespaces-cronjob-v1beta1-batch","watch-list-cronjob-v1beta1-batch","watch-cronjob-v1beta1-batch","list-all-namespaces-cronjob-v1beta1-batch","list-cronjob-v1beta1-batch","read-cronjob-v1beta1-batch","-strong-read-operations-cronjob-v1beta1-batch-strong-","delete-collection-cronjob-v1beta1-batch","delete-cronjob-v1beta1-batch","replace-cronjob-v1beta1-batch","patch-cronjob-v1beta1-batch","create-cronjob-v1beta1-batch","-strong-write-operations-cronjob-v1beta1-batch-strong-","cronjob-v1beta1-batch","containerresourcemetricstatus-v2beta1-autoscaling","containerresourcemetricsource-v2beta1-autoscaling","watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io","watch-clusterrole-v1alpha1-rbac-authorization-k8s-io","list-clusterrole-v1alpha1-rbac-authorization-k8s-io","read-clusterrole-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io","delete-clusterrole-v1alpha1-rbac-authorization-k8s-io","replace-clusterrole-v1alpha1-rbac-authorization-k8s-io","patch-clusterrole-v1alpha1-rbac-authorization-k8s-io","create-clusterrole-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","clusterrole-v1alpha1-rbac-authorization-k8s-io","watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io","watch-clusterrole-v1beta1-rbac-authorization-k8s-io","list-clusterrole-v1beta1-rbac-authorization-k8s-io","read-clusterrole-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io","delete-clusterrole-v1beta1-rbac-authorization-k8s-io","replace-clusterrole-v1beta1-rbac-authorization-k8s-io","patch-clusterrole-v1beta1-rbac-authorization-k8s-io","create-clusterrole-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","clusterrole-v1beta1-rbac-authorization-k8s-io","certificatesigningrequestcondition-v1beta1-certificates-k8s-io","replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io","read-status-certificatesigningrequest-v1beta1-certificates-k8s-io","patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io","watch-certificatesigningrequest-v1beta1-certificates-k8s-io","list-certificatesigningrequest-v1beta1-certificates-k8s-io","read-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io","delete-certificatesigningrequest-v1beta1-certificates-k8s-io","replace-certificatesigningrequest-v1beta1-certificates-k8s-io","patch-certificatesigningrequest-v1beta1-certificates-k8s-io","create-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","certificatesigningrequest-v1beta1-certificates-k8s-io","watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","watch-list-csistoragecapacity-v1alpha1-storage-k8s-io","watch-csistoragecapacity-v1alpha1-storage-k8s-io","list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","list-csistoragecapacity-v1alpha1-storage-k8s-io","read-csistoragecapacity-v1alpha1-storage-k8s-io","-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io","delete-csistoragecapacity-v1alpha1-storage-k8s-io","replace-csistoragecapacity-v1alpha1-storage-k8s-io","patch-csistoragecapacity-v1alpha1-storage-k8s-io","create-csistoragecapacity-v1alpha1-storage-k8s-io","-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","csistoragecapacity-v1alpha1-storage-k8s-io","csinodedriver-v1beta1-storage-k8s-io","watch-list-csinode-v1beta1-storage-k8s-io","watch-csinode-v1beta1-storage-k8s-io","list-csinode-v1beta1-storage-k8s-io","read-csinode-v1beta1-storage-k8s-io","-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-","delete-collection-csinode-v1beta1-storage-k8s-io","delete-csinode-v1beta1-storage-k8s-io","replace-csinode-v1beta1-storage-k8s-io","patch-csinode-v1beta1-storage-k8s-io","create-csinode-v1beta1-storage-k8s-io","-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-","csinode-v1beta1-storage-k8s-io","watch-list-csidriver-v1beta1-storage-k8s-io","watch-csidriver-v1beta1-storage-k8s-io","list-csidriver-v1beta1-storage-k8s-io","read-csidriver-v1beta1-storage-k8s-io","-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-","delete-collection-csidriver-v1beta1-storage-k8s-io","delete-csidriver-v1beta1-storage-k8s-io","replace-csidriver-v1beta1-storage-k8s-io","patch-csidriver-v1beta1-storage-k8s-io","create-csidriver-v1beta1-storage-k8s-io","-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-","csidriver-v1beta1-storage-k8s-io","aggregationrule-v1alpha1-rbac-authorization-k8s-io","aggregationrule-v1beta1-rbac-authorization-k8s-io","apiservicecondition-v1beta1-apiregistration-k8s-io","replace-status-apiservice-v1beta1-apiregistration-k8s-io","read-status-apiservice-v1beta1-apiregistration-k8s-io","patch-status-apiservice-v1beta1-apiregistration-k8s-io","-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","watch-list-apiservice-v1beta1-apiregistration-k8s-io","watch-apiservice-v1beta1-apiregistration-k8s-io","list-apiservice-v1beta1-apiregistration-k8s-io","read-apiservice-v1beta1-apiregistration-k8s-io","-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","delete-collection-apiservice-v1beta1-apiregistration-k8s-io","delete-apiservice-v1beta1-apiregistration-k8s-io","replace-apiservice-v1beta1-apiregistration-k8s-io","patch-apiservice-v1beta1-apiregistration-k8s-io","create-apiservice-v1beta1-apiregistration-k8s-io","-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","apiservice-v1beta1-apiregistration-k8s-io","-strong-old-api-versions-strong-","windowssecuritycontextoptions-v1-core","weightedpodaffinityterm-v1-core","webhookconversion-v1-apiextensions-k8s-io","webhookclientconfig-v1-admissionregistration-k8s-io","watchevent-v1-meta","vspherevirtualdiskvolumesource-v1-core","volumeprojection-v1-core","volumenoderesources-v1-storage-k8s-io","volumenodeaffinity-v1-core","volumemount-v1-core","volumeerror-v1-storage-k8s-io","volumedevice-v1-core","volumeattachmentsource-v1-storage-k8s-io","validatingwebhook-v1-admissionregistration-k8s-io","usersubject-v1beta1-flowcontrol-apiserver-k8s-io","userinfo-v1-authentication-k8s-io","typedlocalobjectreference-v1-core","topologyspreadconstraint-v1-core","topologyselectorterm-v1-core","topologyselectorlabelrequirement-v1-core","toleration-v1-core","time-v1-meta","taint-v1-core","tcpsocketaction-v1-core","sysctl-v1-core","supplementalgroupsstrategyoptions-v1beta1-policy","subjectrulesreviewstatus-v1-authorization-k8s-io","subject-v1beta1-flowcontrol-apiserver-k8s-io","storageversioncondition-v1alpha1-internal-apiserver-k8s-io","storageosvolumesource-v1-core","storageospersistentvolumesource-v1-core","statusdetails-v1-meta","statuscause-v1-meta","status-v1-meta","statefulsetupdatestrategy-v1-apps","statefulsetcondition-v1-apps","sessionaffinityconfig-v1-core","servicereference-v1-admissionregistration-k8s-io","serviceport-v1-core","servicebackendport-v1-networking-k8s-io","serviceaccounttokenprojection-v1-core","serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io","serverstorageversion-v1alpha1-internal-apiserver-k8s-io","serveraddressbyclientcidr-v1-meta","securitycontext-v1-core","secretvolumesource-v1-core","secretreference-v1-core","secretprojection-v1-core","secretkeyselector-v1-core","secretenvsource-v1-core","seccompprofile-v1-core","scopedresourceselectorrequirement-v1-core","scopeselector-v1-core","scheduling-v1-node-k8s-io","scaleiovolumesource-v1-core","scaleiopersistentvolumesource-v1-core","scale-v1-autoscaling","selinuxstrategyoptions-v1beta1-policy","selinuxoptions-v1-core","runtimeclassstrategyoptions-v1beta1-policy","runasuserstrategyoptions-v1beta1-policy","runasgroupstrategyoptions-v1beta1-policy","rulewithoperations-v1-admissionregistration-k8s-io","rollingupdatestatefulsetstrategy-v1-apps","roleref-v1-rbac-authorization-k8s-io","resourcerule-v1-authorization-k8s-io","resourcerequirements-v1-core","resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","resourcemetricstatus-v2beta2-autoscaling","resourcemetricsource-v2beta2-autoscaling","resourcefieldselector-v1-core","resourceattributes-v1-authorization-k8s-io","replicationcontrollercondition-v1-core","replicasetcondition-v1-apps","rbdvolumesource-v1-core","rbdpersistentvolumesource-v1-core","quobytevolumesource-v1-core","queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","quantity-resource-core","projectedvolumesource-v1-core","probe-v1-core","prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io","prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io","preferredschedulingterm-v1-core","preconditions-v1-meta","portworxvolumesource-v1-core","portstatus-v1-core","policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io","policyrule-v1-rbac-authorization-k8s-io","podsmetricstatus-v2beta2-autoscaling","podsmetricsource-v2beta2-autoscaling","podsecuritycontext-v1-core","podreadinessgate-v1-core","podip-v1-core","poddisruptionbudget-v1-policy","poddnsconfigoption-v1-core","poddnsconfig-v1-core","podcondition-v1-core","podantiaffinity-v1-core","podaffinityterm-v1-core","podaffinity-v1-core","photonpersistentdiskvolumesource-v1-core","persistentvolumeclaimvolumesource-v1-core","persistentvolumeclaimtemplate-v1-core","persistentvolumeclaimcondition-v1-core","patch-v1-meta","ownerreference-v1-meta","overhead-v1-node-k8s-io","objectreference-v1-core","objectmetricstatus-v2beta2-autoscaling","objectmetricsource-v2beta2-autoscaling","objectmeta-v1-meta","objectfieldselector-v1-core","nonresourcerule-v1-authorization-k8s-io","nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","nonresourceattributes-v1-authorization-k8s-io","nodesysteminfo-v1-core","nodeselectorterm-v1-core","nodeselectorrequirement-v1-core","nodeselector-v1-core","nodedaemonendpoints-v1-core","nodeconfigstatus-v1-core","nodeconfigsource-v1-core","nodecondition-v1-core","nodeaffinity-v1-core","nodeaddress-v1-core","networkpolicyport-v1-networking-k8s-io","networkpolicypeer-v1-networking-k8s-io","networkpolicyingressrule-v1-networking-k8s-io","networkpolicyegressrule-v1-networking-k8s-io","namespacecondition-v1-core","nfsvolumesource-v1-core","mutatingwebhook-v1-admissionregistration-k8s-io","microtime-v1-meta","metricvaluestatus-v2beta2-autoscaling","metrictarget-v2beta2-autoscaling","metricstatus-v2beta2-autoscaling","metricspec-v2beta2-autoscaling","metricidentifier-v2beta2-autoscaling","managedfieldsentry-v1-meta","localvolumesource-v1-core","localobjectreference-v1-core","loadbalancerstatus-v1-core","loadbalanceringress-v1-core","listmeta-v1-meta","limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","limitresponse-v1beta1-flowcontrol-apiserver-k8s-io","limitrangeitem-v1-core","lifecycle-v1-core","labelselectorrequirement-v1-meta","labelselector-v1-meta","keytopath-v1-core","jobtemplatespec-v1-batch","jobcondition-v1-batch","jsonschemapropsorbool-v1-apiextensions-k8s-io","jsonschemapropsorarray-v1-apiextensions-k8s-io","jsonschemaprops-v1-apiextensions-k8s-io","json-v1-apiextensions-k8s-io","ingresstls-v1-networking-k8s-io","ingressservicebackend-v1-networking-k8s-io","ingressrule-v1-networking-k8s-io","ingressclassparametersreference-v1-networking-k8s-io","ingressbackend-v1-networking-k8s-io","iscsivolumesource-v1-core","iscsipersistentvolumesource-v1-core","ipblock-v1-networking-k8s-io","idrange-v1beta1-policy","hostportrange-v1beta1-policy","hostpathvolumesource-v1-core","hostalias-v1-core","horizontalpodautoscalercondition-v2beta2-autoscaling","horizontalpodautoscalerbehavior-v2beta2-autoscaling","handler-v1-core","httpingressrulevalue-v1-networking-k8s-io","httpingresspath-v1-networking-k8s-io","httpheader-v1-core","httpgetaction-v1-core","hpascalingrules-v2beta2-autoscaling","hpascalingpolicy-v2beta2-autoscaling","groupversionfordiscovery-v1-meta","groupsubject-v1beta1-flowcontrol-apiserver-k8s-io","glusterfsvolumesource-v1-core","glusterfspersistentvolumesource-v1-core","gitrepovolumesource-v1-core","gcepersistentdiskvolumesource-v1-core","forzone-v1-discovery-k8s-io","flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io","flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io","flockervolumesource-v1-core","flexvolumesource-v1-core","flexpersistentvolumesource-v1-core","fieldsv1-v1-meta","fsgroupstrategyoptions-v1beta1-policy","fcvolumesource-v1-core","externalmetricstatus-v2beta2-autoscaling","externalmetricsource-v2beta2-autoscaling","externaldocumentation-v1-apiextensions-k8s-io","execaction-v1-core","eviction-v1beta1-policy","eventsource-v1-core","eventseries-v1-core","ephemeralvolumesource-v1-core","ephemeralcontainers-v1-core","ephemeralcontainer-v1-core","envvarsource-v1-core","envvar-v1-core","envfromsource-v1-core","endpointsubset-v1-core","endpointslice-v1-discovery-k8s-io","endpointport-v1-core","endpointhints-v1-discovery-k8s-io","endpointconditions-v1-discovery-k8s-io","endpointaddress-v1-core","endpoint-v1-discovery-k8s-io","emptydirvolumesource-v1-core","downwardapivolumesource-v1-core","downwardapivolumefile-v1-core","downwardapiprojection-v1-core","deploymentcondition-v1-apps","deleteoptions-v1-meta","daemonsetupdatestrategy-v1-apps","daemonsetcondition-v1-apps","daemonendpoint-v1-core","customresourcevalidation-v1-apiextensions-k8s-io","customresourcesubresources-v1-apiextensions-k8s-io","customresourcesubresourcestatus-v1-apiextensions-k8s-io","customresourcesubresourcescale-v1-apiextensions-k8s-io","customresourcedefinitionversion-v1-apiextensions-k8s-io","customresourcedefinitionnames-v1-apiextensions-k8s-io","customresourcedefinitioncondition-v1-apiextensions-k8s-io","customresourceconversion-v1-apiextensions-k8s-io","customresourcecolumndefinition-v1-apiextensions-k8s-io","crossversionobjectreference-v1-autoscaling","cronjob-v1-batch","containerstatewaiting-v1-core","containerstateterminated-v1-core","containerstaterunning-v1-core","containerstate-v1-core","containerresourcemetricstatus-v2beta2-autoscaling","containerresourcemetricsource-v2beta2-autoscaling","containerport-v1-core","containerimage-v1-core","configmapvolumesource-v1-core","configmapprojection-v1-core","configmapnodeconfigsource-v1-core","configmapkeyselector-v1-core","configmapenvsource-v1-core","condition-v1-meta","componentcondition-v1-core","clientipconfig-v1-core","cindervolumesource-v1-core","cinderpersistentvolumesource-v1-core","certificatesigningrequestcondition-v1-certificates-k8s-io","cephfsvolumesource-v1-core","cephfspersistentvolumesource-v1-core","capabilities-v1-core","csivolumesource-v1-core","csistoragecapacity-v1beta1-storage-k8s-io","csipersistentvolumesource-v1-core","csinodedriver-v1-storage-k8s-io","boundobjectreference-v1-authentication-k8s-io","azurefilevolumesource-v1-core","azurefilepersistentvolumesource-v1-core","azurediskvolumesource-v1-core","attachedvolume-v1-core","allowedhostpath-v1beta1-policy","allowedflexvolume-v1beta1-policy","allowedcsidriver-v1beta1-policy","aggregationrule-v1-rbac-authorization-k8s-io","affinity-v1-core","awselasticblockstorevolumesource-v1-core","apiversions-v1-meta","apiservicecondition-v1-apiregistration-k8s-io","apiresource-v1-meta","apigroup-v1-meta","-strong-definitions-strong-","watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io","watch-list-networkpolicy-v1-networking-k8s-io","watch-networkpolicy-v1-networking-k8s-io","list-all-namespaces-networkpolicy-v1-networking-k8s-io","list-networkpolicy-v1-networking-k8s-io","read-networkpolicy-v1-networking-k8s-io","-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-","delete-collection-networkpolicy-v1-networking-k8s-io","delete-networkpolicy-v1-networking-k8s-io","replace-networkpolicy-v1-networking-k8s-io","patch-networkpolicy-v1-networking-k8s-io","create-networkpolicy-v1-networking-k8s-io","-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-","networkpolicy-v1-networking-k8s-io","create-tokenreview-v1-authentication-k8s-io","-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-","tokenreview-v1-authentication-k8s-io","tokenrequest-v1-authentication-k8s-io","create-subjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-","subjectaccessreview-v1-authorization-k8s-io","replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io","read-status-storageversion-v1alpha1-internal-apiserver-k8s-io","patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io","watch-storageversion-v1alpha1-internal-apiserver-k8s-io","list-storageversion-v1alpha1-internal-apiserver-k8s-io","read-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io","delete-storageversion-v1alpha1-internal-apiserver-k8s-io","replace-storageversion-v1alpha1-internal-apiserver-k8s-io","patch-storageversion-v1alpha1-internal-apiserver-k8s-io","create-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","storageversion-v1alpha1-internal-apiserver-k8s-io","watch-list-all-namespaces-serviceaccount-v1-core","watch-list-serviceaccount-v1-core","watch-serviceaccount-v1-core","list-all-namespaces-serviceaccount-v1-core","list-serviceaccount-v1-core","read-serviceaccount-v1-core","-strong-read-operations-serviceaccount-v1-core-strong-","delete-collection-serviceaccount-v1-core","delete-serviceaccount-v1-core","replace-serviceaccount-v1-core","patch-serviceaccount-v1-core","create-serviceaccount-v1-core","-strong-write-operations-serviceaccount-v1-core-strong-","serviceaccount-v1-core","create-selfsubjectrulesreview-v1-authorization-k8s-io","-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-","selfsubjectrulesreview-v1-authorization-k8s-io","create-selfsubjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-","selfsubjectaccessreview-v1-authorization-k8s-io","watch-list-runtimeclass-v1-node-k8s-io","watch-runtimeclass-v1-node-k8s-io","list-runtimeclass-v1-node-k8s-io","read-runtimeclass-v1-node-k8s-io","-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-","delete-collection-runtimeclass-v1-node-k8s-io","delete-runtimeclass-v1-node-k8s-io","replace-runtimeclass-v1-node-k8s-io","patch-runtimeclass-v1-node-k8s-io","create-runtimeclass-v1-node-k8s-io","-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-","runtimeclass-v1-node-k8s-io","watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","watch-list-rolebinding-v1-rbac-authorization-k8s-io","watch-rolebinding-v1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","list-rolebinding-v1-rbac-authorization-k8s-io","read-rolebinding-v1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1-rbac-authorization-k8s-io","delete-rolebinding-v1-rbac-authorization-k8s-io","replace-rolebinding-v1-rbac-authorization-k8s-io","patch-rolebinding-v1-rbac-authorization-k8s-io","create-rolebinding-v1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","rolebinding-v1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io","watch-list-role-v1-rbac-authorization-k8s-io","watch-role-v1-rbac-authorization-k8s-io","list-all-namespaces-role-v1-rbac-authorization-k8s-io","list-role-v1-rbac-authorization-k8s-io","read-role-v1-rbac-authorization-k8s-io","-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1-rbac-authorization-k8s-io","delete-role-v1-rbac-authorization-k8s-io","replace-role-v1-rbac-authorization-k8s-io","patch-role-v1-rbac-authorization-k8s-io","create-role-v1-rbac-authorization-k8s-io","-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-","role-v1-rbac-authorization-k8s-io","replace-status-resourcequota-v1-core","read-status-resourcequota-v1-core","patch-status-resourcequota-v1-core","-strong-status-operations-resourcequota-v1-core-strong-","watch-list-all-namespaces-resourcequota-v1-core","watch-list-resourcequota-v1-core","watch-resourcequota-v1-core","list-all-namespaces-resourcequota-v1-core","list-resourcequota-v1-core","read-resourcequota-v1-core","-strong-read-operations-resourcequota-v1-core-strong-","delete-collection-resourcequota-v1-core","delete-resourcequota-v1-core","replace-resourcequota-v1-core","patch-resourcequota-v1-core","create-resourcequota-v1-core","-strong-write-operations-resourcequota-v1-core-strong-","resourcequota-v1-core","replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","replace-status-persistentvolume-v1-core","read-status-persistentvolume-v1-core","patch-status-persistentvolume-v1-core","-strong-status-operations-persistentvolume-v1-core-strong-","watch-list-persistentvolume-v1-core","watch-persistentvolume-v1-core","list-persistentvolume-v1-core","read-persistentvolume-v1-core","-strong-read-operations-persistentvolume-v1-core-strong-","delete-collection-persistentvolume-v1-core","delete-persistentvolume-v1-core","replace-persistentvolume-v1-core","patch-persistentvolume-v1-core","create-persistentvolume-v1-core","-strong-write-operations-persistentvolume-v1-core-strong-","persistentvolume-v1-core","replace-connect-proxy-path-node-v1-core","replace-connect-proxy-node-v1-core","head-connect-proxy-path-node-v1-core","head-connect-proxy-node-v1-core","get-connect-proxy-path-node-v1-core","get-connect-proxy-node-v1-core","delete-connect-proxy-path-node-v1-core","delete-connect-proxy-node-v1-core","create-connect-proxy-path-node-v1-core","create-connect-proxy-node-v1-core","-strong-proxy-operations-node-v1-core-strong-","replace-status-node-v1-core","read-status-node-v1-core","patch-status-node-v1-core","-strong-status-operations-node-v1-core-strong-","watch-list-node-v1-core","watch-node-v1-core","list-node-v1-core","read-node-v1-core","-strong-read-operations-node-v1-core-strong-","delete-collection-node-v1-core","delete-node-v1-core","replace-node-v1-core","patch-node-v1-core","create-node-v1-core","-strong-write-operations-node-v1-core-strong-","node-v1-core","replace-status-namespace-v1-core","read-status-namespace-v1-core","patch-status-namespace-v1-core","-strong-status-operations-namespace-v1-core-strong-","watch-list-namespace-v1-core","watch-namespace-v1-core","list-namespace-v1-core","read-namespace-v1-core","-strong-read-operations-namespace-v1-core-strong-","delete-namespace-v1-core","replace-namespace-v1-core","patch-namespace-v1-core","create-namespace-v1-core","-strong-write-operations-namespace-v1-core-strong-","namespace-v1-core","create-localsubjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-","localsubjectaccessreview-v1-authorization-k8s-io","watch-list-all-namespaces-lease-v1-coordination-k8s-io","watch-list-lease-v1-coordination-k8s-io","watch-lease-v1-coordination-k8s-io","list-all-namespaces-lease-v1-coordination-k8s-io","list-lease-v1-coordination-k8s-io","read-lease-v1-coordination-k8s-io","-strong-read-operations-lease-v1-coordination-k8s-io-strong-","delete-collection-lease-v1-coordination-k8s-io","delete-lease-v1-coordination-k8s-io","replace-lease-v1-coordination-k8s-io","patch-lease-v1-coordination-k8s-io","create-lease-v1-coordination-k8s-io","-strong-write-operations-lease-v1-coordination-k8s-io-strong-","lease-v1-coordination-k8s-io","replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","flowschema-v1beta1-flowcontrol-apiserver-k8s-io","list-componentstatus-v1-core","read-componentstatus-v1-core","-strong-read-operations-componentstatus-v1-core-strong-","componentstatus-v1-core","watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1-rbac-authorization-k8s-io","list-clusterrolebinding-v1-rbac-authorization-k8s-io","read-clusterrolebinding-v1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1-rbac-authorization-k8s-io","create-clusterrolebinding-v1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1-rbac-authorization-k8s-io","watch-list-clusterrole-v1-rbac-authorization-k8s-io","watch-clusterrole-v1-rbac-authorization-k8s-io","list-clusterrole-v1-rbac-authorization-k8s-io","read-clusterrole-v1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1-rbac-authorization-k8s-io","delete-clusterrole-v1-rbac-authorization-k8s-io","replace-clusterrole-v1-rbac-authorization-k8s-io","patch-clusterrole-v1-rbac-authorization-k8s-io","create-clusterrole-v1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","clusterrole-v1-rbac-authorization-k8s-io","replace-status-certificatesigningrequest-v1-certificates-k8s-io","read-status-certificatesigningrequest-v1-certificates-k8s-io","patch-status-certificatesigningrequest-v1-certificates-k8s-io","-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","watch-list-certificatesigningrequest-v1-certificates-k8s-io","watch-certificatesigningrequest-v1-certificates-k8s-io","list-certificatesigningrequest-v1-certificates-k8s-io","read-certificatesigningrequest-v1-certificates-k8s-io","-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","delete-collection-certificatesigningrequest-v1-certificates-k8s-io","delete-certificatesigningrequest-v1-certificates-k8s-io","replace-certificatesigningrequest-v1-certificates-k8s-io","patch-certificatesigningrequest-v1-certificates-k8s-io","create-certificatesigningrequest-v1-certificates-k8s-io","-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","certificatesigningrequest-v1-certificates-k8s-io","create-binding-v1-core","-strong-write-operations-binding-v1-core-strong-","binding-v1-core","replace-status-apiservice-v1-apiregistration-k8s-io","read-status-apiservice-v1-apiregistration-k8s-io","patch-status-apiservice-v1-apiregistration-k8s-io","-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-","watch-list-apiservice-v1-apiregistration-k8s-io","watch-apiservice-v1-apiregistration-k8s-io","list-apiservice-v1-apiregistration-k8s-io","read-apiservice-v1-apiregistration-k8s-io","-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-","delete-collection-apiservice-v1-apiregistration-k8s-io","delete-apiservice-v1-apiregistration-k8s-io","replace-apiservice-v1-apiregistration-k8s-io","patch-apiservice-v1-apiregistration-k8s-io","create-apiservice-v1-apiregistration-k8s-io","-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-","apiservice-v1-apiregistration-k8s-io","-strong-cluster-apis-strong-","watch-list-podsecuritypolicy-v1beta1-policy","watch-podsecuritypolicy-v1beta1-policy","list-podsecuritypolicy-v1beta1-policy","read-podsecuritypolicy-v1beta1-policy","-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-","delete-collection-podsecuritypolicy-v1beta1-policy","delete-podsecuritypolicy-v1beta1-policy","replace-podsecuritypolicy-v1beta1-policy","patch-podsecuritypolicy-v1beta1-policy","create-podsecuritypolicy-v1beta1-policy","-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-","podsecuritypolicy-v1beta1-policy","watch-list-priorityclass-v1-scheduling-k8s-io","watch-priorityclass-v1-scheduling-k8s-io","list-priorityclass-v1-scheduling-k8s-io","read-priorityclass-v1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1-scheduling-k8s-io","delete-priorityclass-v1-scheduling-k8s-io","replace-priorityclass-v1-scheduling-k8s-io","patch-priorityclass-v1-scheduling-k8s-io","create-priorityclass-v1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-","priorityclass-v1-scheduling-k8s-io","replace-status-poddisruptionbudget-v1beta1-policy","read-status-poddisruptionbudget-v1beta1-policy","patch-status-poddisruptionbudget-v1beta1-policy","-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","watch-list-poddisruptionbudget-v1beta1-policy","watch-poddisruptionbudget-v1beta1-policy","list-all-namespaces-poddisruptionbudget-v1beta1-policy","list-poddisruptionbudget-v1beta1-policy","read-poddisruptionbudget-v1beta1-policy","-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","delete-collection-poddisruptionbudget-v1beta1-policy","delete-poddisruptionbudget-v1beta1-policy","replace-poddisruptionbudget-v1beta1-policy","patch-poddisruptionbudget-v1beta1-policy","create-poddisruptionbudget-v1beta1-policy","-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","poddisruptionbudget-v1beta1-policy","watch-list-all-namespaces-podtemplate-v1-core","watch-list-podtemplate-v1-core","watch-podtemplate-v1-core","list-all-namespaces-podtemplate-v1-core","list-podtemplate-v1-core","read-podtemplate-v1-core","-strong-read-operations-podtemplate-v1-core-strong-","delete-collection-podtemplate-v1-core","delete-podtemplate-v1-core","replace-podtemplate-v1-core","patch-podtemplate-v1-core","create-podtemplate-v1-core","-strong-write-operations-podtemplate-v1-core-strong-","podtemplate-v1-core","watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","validatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-status-horizontalpodautoscaler-v1-autoscaling","read-status-horizontalpodautoscaler-v1-autoscaling","patch-status-horizontalpodautoscaler-v1-autoscaling","-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","watch-list-horizontalpodautoscaler-v1-autoscaling","watch-horizontalpodautoscaler-v1-autoscaling","list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","list-horizontalpodautoscaler-v1-autoscaling","read-horizontalpodautoscaler-v1-autoscaling","-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v1-autoscaling","delete-horizontalpodautoscaler-v1-autoscaling","replace-horizontalpodautoscaler-v1-autoscaling","patch-horizontalpodautoscaler-v1-autoscaling","create-horizontalpodautoscaler-v1-autoscaling","-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-","horizontalpodautoscaler-v1-autoscaling","watch-list-all-namespaces-limitrange-v1-core","watch-list-limitrange-v1-core","watch-limitrange-v1-core","list-all-namespaces-limitrange-v1-core","list-limitrange-v1-core","read-limitrange-v1-core","-strong-read-operations-limitrange-v1-core-strong-","delete-collection-limitrange-v1-core","delete-limitrange-v1-core","replace-limitrange-v1-core","patch-limitrange-v1-core","create-limitrange-v1-core","-strong-write-operations-limitrange-v1-core-strong-","limitrange-v1-core","watch-list-all-namespaces-event-v1-core","watch-list-event-v1-core","watch-event-v1-core","list-all-namespaces-event-v1-core","list-event-v1-core","read-event-v1-core","-strong-read-operations-event-v1-core-strong-","delete-collection-event-v1-core","delete-event-v1-core","replace-event-v1-core","patch-event-v1-core","create-event-v1-core","-strong-write-operations-event-v1-core-strong-","event-v1-core","replace-status-customresourcedefinition-v1-apiextensions-k8s-io","read-status-customresourcedefinition-v1-apiextensions-k8s-io","patch-status-customresourcedefinition-v1-apiextensions-k8s-io","-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","watch-list-customresourcedefinition-v1-apiextensions-k8s-io","watch-customresourcedefinition-v1-apiextensions-k8s-io","list-customresourcedefinition-v1-apiextensions-k8s-io","read-customresourcedefinition-v1-apiextensions-k8s-io","-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","delete-collection-customresourcedefinition-v1-apiextensions-k8s-io","delete-customresourcedefinition-v1-apiextensions-k8s-io","replace-customresourcedefinition-v1-apiextensions-k8s-io","patch-customresourcedefinition-v1-apiextensions-k8s-io","create-customresourcedefinition-v1-apiextensions-k8s-io","-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","customresourcedefinition-v1-apiextensions-k8s-io","watch-list-all-namespaces-controllerrevision-v1-apps","watch-list-controllerrevision-v1-apps","watch-controllerrevision-v1-apps","list-all-namespaces-controllerrevision-v1-apps","list-controllerrevision-v1-apps","read-controllerrevision-v1-apps","-strong-read-operations-controllerrevision-v1-apps-strong-","delete-collection-controllerrevision-v1-apps","delete-controllerrevision-v1-apps","replace-controllerrevision-v1-apps","patch-controllerrevision-v1-apps","create-controllerrevision-v1-apps","-strong-write-operations-controllerrevision-v1-apps-strong-","controllerrevision-v1-apps","-strong-metadata-apis-strong-","replace-status-volumeattachment-v1-storage-k8s-io","read-status-volumeattachment-v1-storage-k8s-io","patch-status-volumeattachment-v1-storage-k8s-io","-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-","watch-list-volumeattachment-v1-storage-k8s-io","watch-volumeattachment-v1-storage-k8s-io","list-volumeattachment-v1-storage-k8s-io","read-volumeattachment-v1-storage-k8s-io","-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1-storage-k8s-io","delete-volumeattachment-v1-storage-k8s-io","replace-volumeattachment-v1-storage-k8s-io","patch-volumeattachment-v1-storage-k8s-io","create-volumeattachment-v1-storage-k8s-io","-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-","volumeattachment-v1-storage-k8s-io","volume-v1-core","watch-list-storageclass-v1-storage-k8s-io","watch-storageclass-v1-storage-k8s-io","list-storageclass-v1-storage-k8s-io","read-storageclass-v1-storage-k8s-io","-strong-read-operations-storageclass-v1-storage-k8s-io-strong-","delete-collection-storageclass-v1-storage-k8s-io","delete-storageclass-v1-storage-k8s-io","replace-storageclass-v1-storage-k8s-io","patch-storageclass-v1-storage-k8s-io","create-storageclass-v1-storage-k8s-io","-strong-write-operations-storageclass-v1-storage-k8s-io-strong-","storageclass-v1-storage-k8s-io","replace-status-persistentvolumeclaim-v1-core","read-status-persistentvolumeclaim-v1-core","patch-status-persistentvolumeclaim-v1-core","-strong-status-operations-persistentvolumeclaim-v1-core-strong-","watch-list-all-namespaces-persistentvolumeclaim-v1-core","watch-list-persistentvolumeclaim-v1-core","watch-persistentvolumeclaim-v1-core","list-all-namespaces-persistentvolumeclaim-v1-core","list-persistentvolumeclaim-v1-core","read-persistentvolumeclaim-v1-core","-strong-read-operations-persistentvolumeclaim-v1-core-strong-","delete-collection-persistentvolumeclaim-v1-core","delete-persistentvolumeclaim-v1-core","replace-persistentvolumeclaim-v1-core","patch-persistentvolumeclaim-v1-core","create-persistentvolumeclaim-v1-core","-strong-write-operations-persistentvolumeclaim-v1-core-strong-","persistentvolumeclaim-v1-core","watch-list-all-namespaces-secret-v1-core","watch-list-secret-v1-core","watch-secret-v1-core","list-all-namespaces-secret-v1-core","list-secret-v1-core","read-secret-v1-core","-strong-read-operations-secret-v1-core-strong-","delete-collection-secret-v1-core","delete-secret-v1-core","replace-secret-v1-core","patch-secret-v1-core","create-secret-v1-core","-strong-write-operations-secret-v1-core-strong-","secret-v1-core","watch-list-csinode-v1-storage-k8s-io","watch-csinode-v1-storage-k8s-io","list-csinode-v1-storage-k8s-io","read-csinode-v1-storage-k8s-io","-strong-read-operations-csinode-v1-storage-k8s-io-strong-","delete-collection-csinode-v1-storage-k8s-io","delete-csinode-v1-storage-k8s-io","replace-csinode-v1-storage-k8s-io","patch-csinode-v1-storage-k8s-io","create-csinode-v1-storage-k8s-io","-strong-write-operations-csinode-v1-storage-k8s-io-strong-","csinode-v1-storage-k8s-io","watch-list-csidriver-v1-storage-k8s-io","watch-csidriver-v1-storage-k8s-io","list-csidriver-v1-storage-k8s-io","read-csidriver-v1-storage-k8s-io","-strong-read-operations-csidriver-v1-storage-k8s-io-strong-","delete-collection-csidriver-v1-storage-k8s-io","delete-csidriver-v1-storage-k8s-io","replace-csidriver-v1-storage-k8s-io","patch-csidriver-v1-storage-k8s-io","create-csidriver-v1-storage-k8s-io","-strong-write-operations-csidriver-v1-storage-k8s-io-strong-","csidriver-v1-storage-k8s-io","watch-list-all-namespaces-configmap-v1-core","watch-list-configmap-v1-core","watch-configmap-v1-core","list-all-namespaces-configmap-v1-core","list-configmap-v1-core","read-configmap-v1-core","-strong-read-operations-configmap-v1-core-strong-","delete-collection-configmap-v1-core","delete-configmap-v1-core","replace-configmap-v1-core","patch-configmap-v1-core","create-configmap-v1-core","-strong-write-operations-configmap-v1-core-strong-","configmap-v1-core","-strong-config-and-storage-apis-strong-","replace-connect-proxy-path-service-v1-core","replace-connect-proxy-service-v1-core","head-connect-proxy-path-service-v1-core","head-connect-proxy-service-v1-core","get-connect-proxy-path-service-v1-core","get-connect-proxy-service-v1-core","delete-connect-proxy-path-service-v1-core","delete-connect-proxy-service-v1-core","create-connect-proxy-path-service-v1-core","create-connect-proxy-service-v1-core","-strong-proxy-operations-service-v1-core-strong-","replace-status-service-v1-core","read-status-service-v1-core","patch-status-service-v1-core","-strong-status-operations-service-v1-core-strong-","watch-list-all-namespaces-service-v1-core","watch-list-service-v1-core","watch-service-v1-core","list-all-namespaces-service-v1-core","list-service-v1-core","read-service-v1-core","-strong-read-operations-service-v1-core-strong-","delete-service-v1-core","replace-service-v1-core","patch-service-v1-core","create-service-v1-core","-strong-write-operations-service-v1-core-strong-","service-v1-core","watch-list-ingressclass-v1-networking-k8s-io","watch-ingressclass-v1-networking-k8s-io","list-ingressclass-v1-networking-k8s-io","read-ingressclass-v1-networking-k8s-io","-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-","delete-collection-ingressclass-v1-networking-k8s-io","delete-ingressclass-v1-networking-k8s-io","replace-ingressclass-v1-networking-k8s-io","patch-ingressclass-v1-networking-k8s-io","create-ingressclass-v1-networking-k8s-io","-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-","ingressclass-v1-networking-k8s-io","replace-status-ingress-v1-networking-k8s-io","read-status-ingress-v1-networking-k8s-io","patch-status-ingress-v1-networking-k8s-io","-strong-status-operations-ingress-v1-networking-k8s-io-strong-","watch-list-all-namespaces-ingress-v1-networking-k8s-io","watch-list-ingress-v1-networking-k8s-io","watch-ingress-v1-networking-k8s-io","list-all-namespaces-ingress-v1-networking-k8s-io","list-ingress-v1-networking-k8s-io","read-ingress-v1-networking-k8s-io","-strong-read-operations-ingress-v1-networking-k8s-io-strong-","delete-collection-ingress-v1-networking-k8s-io","delete-ingress-v1-networking-k8s-io","replace-ingress-v1-networking-k8s-io","patch-ingress-v1-networking-k8s-io","create-ingress-v1-networking-k8s-io","-strong-write-operations-ingress-v1-networking-k8s-io-strong-","ingress-v1-networking-k8s-io","watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","watch-list-endpointslice-v1beta1-discovery-k8s-io","watch-endpointslice-v1beta1-discovery-k8s-io","list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","list-endpointslice-v1beta1-discovery-k8s-io","read-endpointslice-v1beta1-discovery-k8s-io","-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","delete-collection-endpointslice-v1beta1-discovery-k8s-io","delete-endpointslice-v1beta1-discovery-k8s-io","replace-endpointslice-v1beta1-discovery-k8s-io","patch-endpointslice-v1beta1-discovery-k8s-io","create-endpointslice-v1beta1-discovery-k8s-io","-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","endpointslice-v1beta1-discovery-k8s-io","watch-list-all-namespaces-endpoints-v1-core","watch-list-endpoints-v1-core","watch-endpoints-v1-core","list-all-namespaces-endpoints-v1-core","list-endpoints-v1-core","read-endpoints-v1-core","-strong-read-operations-endpoints-v1-core-strong-","delete-collection-endpoints-v1-core","delete-endpoints-v1-core","replace-endpoints-v1-core","patch-endpoints-v1-core","create-endpoints-v1-core","-strong-write-operations-endpoints-v1-core-strong-","endpoints-v1-core","-strong-service-apis-strong-","patch-scale-statefulset-v1-apps","replace-scale-statefulset-v1-apps","read-scale-statefulset-v1-apps","-strong-misc-operations-statefulset-v1-apps-strong-","replace-status-statefulset-v1-apps","read-status-statefulset-v1-apps","patch-status-statefulset-v1-apps","-strong-status-operations-statefulset-v1-apps-strong-","watch-list-all-namespaces-statefulset-v1-apps","watch-list-statefulset-v1-apps","watch-statefulset-v1-apps","list-all-namespaces-statefulset-v1-apps","list-statefulset-v1-apps","read-statefulset-v1-apps","-strong-read-operations-statefulset-v1-apps-strong-","delete-collection-statefulset-v1-apps","delete-statefulset-v1-apps","replace-statefulset-v1-apps","patch-statefulset-v1-apps","create-statefulset-v1-apps","-strong-write-operations-statefulset-v1-apps-strong-","statefulset-v1-apps","patch-scale-replicationcontroller-v1-core","replace-scale-replicationcontroller-v1-core","read-scale-replicationcontroller-v1-core","-strong-misc-operations-replicationcontroller-v1-core-strong-","replace-status-replicationcontroller-v1-core","read-status-replicationcontroller-v1-core","patch-status-replicationcontroller-v1-core","-strong-status-operations-replicationcontroller-v1-core-strong-","watch-list-all-namespaces-replicationcontroller-v1-core","watch-list-replicationcontroller-v1-core","watch-replicationcontroller-v1-core","list-all-namespaces-replicationcontroller-v1-core","list-replicationcontroller-v1-core","read-replicationcontroller-v1-core","-strong-read-operations-replicationcontroller-v1-core-strong-","delete-collection-replicationcontroller-v1-core","delete-replicationcontroller-v1-core","replace-replicationcontroller-v1-core","patch-replicationcontroller-v1-core","create-replicationcontroller-v1-core","-strong-write-operations-replicationcontroller-v1-core-strong-","replicationcontroller-v1-core","patch-scale-replicaset-v1-apps","replace-scale-replicaset-v1-apps","read-scale-replicaset-v1-apps","-strong-misc-operations-replicaset-v1-apps-strong-","replace-status-replicaset-v1-apps","read-status-replicaset-v1-apps","patch-status-replicaset-v1-apps","-strong-status-operations-replicaset-v1-apps-strong-","watch-list-all-namespaces-replicaset-v1-apps","watch-list-replicaset-v1-apps","watch-replicaset-v1-apps","list-all-namespaces-replicaset-v1-apps","list-replicaset-v1-apps","read-replicaset-v1-apps","-strong-read-operations-replicaset-v1-apps-strong-","delete-collection-replicaset-v1-apps","delete-replicaset-v1-apps","replace-replicaset-v1-apps","patch-replicaset-v1-apps","create-replicaset-v1-apps","-strong-write-operations-replicaset-v1-apps-strong-","replicaset-v1-apps","read-log-pod-v1-core","-strong-misc-operations-pod-v1-core-strong-","replace-connect-proxy-path-pod-v1-core","replace-connect-proxy-pod-v1-core","head-connect-proxy-path-pod-v1-core","head-connect-proxy-pod-v1-core","get-connect-proxy-path-pod-v1-core","get-connect-proxy-pod-v1-core","get-connect-portforward-pod-v1-core","delete-connect-proxy-path-pod-v1-core","delete-connect-proxy-pod-v1-core","create-connect-proxy-path-pod-v1-core","create-connect-proxy-pod-v1-core","create-connect-portforward-pod-v1-core","-strong-proxy-operations-pod-v1-core-strong-","replace-status-pod-v1-core","read-status-pod-v1-core","patch-status-pod-v1-core","-strong-status-operations-pod-v1-core-strong-","watch-list-all-namespaces-pod-v1-core","watch-list-pod-v1-core","watch-pod-v1-core","list-all-namespaces-pod-v1-core","list-pod-v1-core","read-pod-v1-core","-strong-read-operations-pod-v1-core-strong-","delete-collection-pod-v1-core","delete-pod-v1-core","replace-pod-v1-core","patch-pod-v1-core","create-eviction-pod-v1-core","create-pod-v1-core","-strong-write-operations-pod-v1-core-strong-","pod-v1-core","replace-status-job-v1-batch","read-status-job-v1-batch","patch-status-job-v1-batch","-strong-status-operations-job-v1-batch-strong-","watch-list-all-namespaces-job-v1-batch","watch-list-job-v1-batch","watch-job-v1-batch","list-all-namespaces-job-v1-batch","list-job-v1-batch","read-job-v1-batch","-strong-read-operations-job-v1-batch-strong-","delete-collection-job-v1-batch","delete-job-v1-batch","replace-job-v1-batch","patch-job-v1-batch","create-job-v1-batch","-strong-write-operations-job-v1-batch-strong-","job-v1-batch","patch-scale-deployment-v1-apps","replace-scale-deployment-v1-apps","read-scale-deployment-v1-apps","-strong-misc-operations-deployment-v1-apps-strong-","replace-status-deployment-v1-apps","read-status-deployment-v1-apps","patch-status-deployment-v1-apps","-strong-status-operations-deployment-v1-apps-strong-","watch-list-all-namespaces-deployment-v1-apps","watch-list-deployment-v1-apps","watch-deployment-v1-apps","list-all-namespaces-deployment-v1-apps","list-deployment-v1-apps","read-deployment-v1-apps","-strong-read-operations-deployment-v1-apps-strong-","delete-collection-deployment-v1-apps","delete-deployment-v1-apps","replace-deployment-v1-apps","patch-deployment-v1-apps","create-deployment-v1-apps","-strong-write-operations-deployment-v1-apps-strong-","deployment-v1-apps","replace-status-daemonset-v1-apps","read-status-daemonset-v1-apps","patch-status-daemonset-v1-apps","-strong-status-operations-daemonset-v1-apps-strong-","watch-list-all-namespaces-daemonset-v1-apps","watch-list-daemonset-v1-apps","watch-daemonset-v1-apps","list-all-namespaces-daemonset-v1-apps","list-daemonset-v1-apps","read-daemonset-v1-apps","-strong-read-operations-daemonset-v1-apps-strong-","delete-collection-daemonset-v1-apps","delete-daemonset-v1-apps","replace-daemonset-v1-apps","patch-daemonset-v1-apps","create-daemonset-v1-apps","-strong-write-operations-daemonset-v1-apps-strong-","daemonset-v1-apps","replace-status-cronjob-v1beta1-batch","read-status-cronjob-v1beta1-batch","patch-status-cronjob-v1beta1-batch","-strong-status-operations-cronjob-v1beta1-batch-strong-","watch-list-all-namespaces-cronjob-v1beta1-batch","watch-list-cronjob-v1beta1-batch","watch-cronjob-v1beta1-batch","list-all-namespaces-cronjob-v1beta1-batch","list-cronjob-v1beta1-batch","read-cronjob-v1beta1-batch","-strong-read-operations-cronjob-v1beta1-batch-strong-","delete-collection-cronjob-v1beta1-batch","delete-cronjob-v1beta1-batch","replace-cronjob-v1beta1-batch","patch-cronjob-v1beta1-batch","create-cronjob-v1beta1-batch","-strong-write-operations-cronjob-v1beta1-batch-strong-","cronjob-v1beta1-batch","container-v1-core","-strong-workloads-apis-strong-","-strong-api-groups-strong-","-strong-api-overview-strong-"]};})();
\ No newline at end of file

From 34f1d61c60dbe2bfbc23288f38670361b0343b3f Mon Sep 17 00:00:00 2001
From: Nick Santos <nick@tilt.dev>
Date: Fri, 2 Apr 2021 14:20:37 -0400
Subject: [PATCH 452/788] Fixed errors in instructions for generating ref docs

Some minor mistakes I noticed:
- WEB_ROOT is actually K8S_WEBROOT (https://github.com/kubernetes-sigs/reference-docs/blob/master/Makefile#L12)
- copysrc puts the code in gen-apidocs/build, not gen-apidocs/generators/build (https://github.com/kubernetes-sigs/reference-docs/blob/master/Makefile#L89)
- K8S_VERSION must have a patch number, because all kubernetes tags have patch numbers (https://github.com/kubernetes/kubernetes/tree/v1.17 vs https://github.com/kubernetes/kubernetes/tree/v1.17.0)
---
 .../contribute/generate-ref-docs/kubernetes-api.md   | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md b/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md
index 251dfe2efe..acc55b2807 100644
--- a/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md
+++ b/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md
@@ -83,16 +83,16 @@ This section shows how to generate the
 ### Setting build variables
 
 * Set `K8S_ROOT` to `<k8s-base>`.
-* Set `WEB_ROOT` to `<web-base>`.
+* Set `K8S_WEBROOT` to `<web-base>`.
 * Set `K8S_RELEASE` to the version of the docs you want to build.
-  For example, if you want to build docs for Kubernetes 1.17, set `K8S_RELEASE` to 1.17.
+  For example, if you want to build docs for Kubernetes 1.17.0, set `K8S_RELEASE` to 1.17.0.
 
 For example:
 
 ```shell
-export WEB_ROOT=$(GOPATH)/src/github.com/<your-username>/website
+export K8S_WEBROOT=$(GOPATH)/src/github.com/<your-username>/website
 export K8S_ROOT=$(GOPATH)/src/k8s.io/kubernetes
-export K8S_RELEASE=1.17
+export K8S_RELEASE=1.17.0
 ```
 
 ### Creating versioned directory and fetching Open API spec
@@ -124,8 +124,8 @@ make copyapi
 Verify that these two files have been generated:
 
 ```shell
-[ -e "<rdocs-base>/gen-apidocs/generators/build/index.html" ] && echo "index.html built" || echo "no index.html"
-[ -e "<rdocs-base>/gen-apidocs/generators/build/navData.js" ] && echo "navData.js built" || echo "no navData.js"
+[ -e "<rdocs-base>/gen-apidocs/build/index.html" ] && echo "index.html built" || echo "no index.html"
+[ -e "<rdocs-base>/gen-apidocs/build/navData.js" ] && echo "navData.js built" || echo "no navData.js"
 ```
 
 Go to the base of your local `<web-base>`, and

From 9717c5bb3be247a7c1d40ef46e923c40d1d085b4 Mon Sep 17 00:00:00 2001
From: carol valencia <krol3@users.noreply.github.com>
Date: Fri, 2 Apr 2021 12:28:52 -0300
Subject: [PATCH 453/788] chore: raelga review

---
 content/es/docs/concepts/security/overview.md | 24 +++++++++----------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/content/es/docs/concepts/security/overview.md b/content/es/docs/concepts/security/overview.md
index f61b99c242..3a6d3cda9c 100644
--- a/content/es/docs/concepts/security/overview.md
+++ b/content/es/docs/concepts/security/overview.md
@@ -16,8 +16,8 @@ Este modelo de seguridad en el contenedor brinda sugerencias, no es una prueba d
 
 ## Las 4C de Seguridad en Cloud Native
 
-Puede pensar en seguridad por capas. Las 4C de la seguridad en Cloud Native son la nube(Cloud),
-Clústeres, Contenedores y Código.
+Puede pensar en seguridad por capas. Las 4C de la seguridad en Cloud Native son la nube (Cloud),
+{{< glossary_tooltip text="Clústeres" term_id="cluster" >}}, {{< glossary_tooltip text="Contenedores" term_id="container" >}} y Código.
 
 {{< note >}}
 Este enfoque en capas aumenta la [defensa en profundidad](https://en.wikipedia.org/wiki/Defense_in_depth_(computing))
@@ -27,10 +27,10 @@ de la seguridad, es considerada una buena práctica en seguridad para el softwar
 {{< figure src="/images/docs/4c.png" title="Las 4C de Seguridad en Cloud Native" >}}
 
 Cada capa del modelo de seguridad Cloud Native es basada en la siguiente capa más externa.
-La capa de código se beneficia de una base sólida(nube, clúster, contenedor) de capas seguras.
+La capa de código se beneficia de una base sólida (nube, clúster, contenedor) de capas seguras.
 No podemos garantizar la seguridad aplicando solo seguridad a nivel del código, y usar estándares de seguridad deficientes en las otras capas.
 
-## Nube(Cloud)
+## Nube (Cloud)
 
 En muchos sentidos, la nube (o los servidores o el centro de datos corporativo) es la
 [base de computador confiable](https://es.wikipedia.org/wiki/Base_de_computador_confiable)
@@ -66,17 +66,17 @@ Sugerencias para proteger su infraestructura en un clúster de Kubernetes:
 
 Área de Interés para la Infraestructura de Kubernetes | Recomendación |
 --------------------------------------------- | -------------- |
-Acceso de red al servidor API (Plano de Control) | Todo acceso público al plano de control del Kubernetes en Internet no está permitido y es controlado por listas de control de acceso a la red estrictas a un conjunto de direcciones IP necesarias para administrar el clúster.|
-Acceso a la red de los Nodos | Los nodos deben ser configurados para _sólo_ aceptar conexiones (por medio de listas de control de acceso a la red) desde el plano de control en los puertos especificados y aceptar conexiones para servicios en Kubernetes del tipo NodePort y LoadBalancer. Si es posible, estos nodos no deben exponerse públicamente en Internet.
+Acceso de red al Plano de Control | Todo acceso público al {{< glossary_tooltip text="plano de control" term_id="control-plane" >}} del Kubernetes en Internet no está permitido y es controlado por listas de control de acceso a la red estrictas a un conjunto de direcciones IP necesarias para administrar el clúster.|
+Acceso a la red de los Nodos | Los {{< glossary_tooltip text="nodos" term_id="node" >}} deben ser configurados para _solo_ aceptar conexiones (por medio de listas de control de acceso a la red) desde el plano de control en los puertos especificados y aceptar conexiones para servicios en Kubernetes del tipo NodePort y LoadBalancer. Si es posible, estos nodos no deben exponerse públicamente en Internet.
 Acceso a la API de Kubernetes del proveedor de la nube | Cada proveedor de la nube debe dar un conjunto de permisos al plano de control y nodos del Kubernetes. Es mejor otorgar al clúster el permiso de acceso al proveedor de nube siguiendo el [principio de mínimo privilegio](https://es.wikipedia.org/wiki/Principio_de_m%C3%ADnimo_privilegio) para los recursos que necesite administrar. La [documentación del Kops](https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md#iam-roles) ofrece información sobre las políticas y roles de IAM.
-Acceso a etcd | El acceso a etcd (banco de datos de Kubernetes) debe ser limitado apenas al plano de control. Dependiendo de su configuración, debería intentar usar etcd sobre TLS. Puede encontrar mas información en la [documentación de etcd](https://github.com/etcd-io/etcd/tree/master/Documentation).
-Encriptación etcd | Siempre que sea posible, es una buena práctica encriptar todas las unidades de almacenamiento, etcd mantiene el estado de todo el clúster (incluidos los Secretos), su disco debe estar encriptado.
+Acceso a etcd | El acceso a {{< glossary_tooltip text="etcd" term_id="etcd" >}} (banco de datos de Kubernetes) debe ser limitado apenas al plano de control. Dependiendo de su configuración, debería intentar usar etcd sobre TLS. Puede encontrar mas información en la [documentación de etcd](https://github.com/etcd-io/etcd/tree/master/Documentation).
+Encriptación etcd | Siempre que sea posible, es una buena práctica encriptar todas las unidades de almacenamiento. Etcd mantiene el estado de todo el clúster (incluidos los Secretos), por lo que su disco debe estar encriptado.
 
 {{< /table >}}
 
 ## Clúster
 
-Existe dos áreas de preocupación para proteger Kubernetes:
+Existen dos áreas de preocupación para proteger Kubernetes:
 
 * Protección de las configuraciones de los componentes del clúster.
 * Protección de las aplicaciones que se ejecutan en el clúster.
@@ -92,7 +92,7 @@ buenas prácticas de seguridad, a continuación sigue estos consejos sobre
 Dependiendo de la superficie de ataque de su aplicación, es posible que desee concentrarse en
 temas de seguridad específicos. Por ejemplo: si está ejecutando un servicio (Servicio A) que es crítico
 en una cadena de otros recursos y otra carga de trabajo separada (Servicio B) que es
-vulnerable a un ataque de sobrecarga de recursos y, en consecuencia, el riesgo de comprometer el Servicio A
+vulnerable a un ataque de sobrecarga de recursos, el riesgo de comprometer el Servicio A
 es alto si no limita las funciones del Servicio B. La siguiente tabla enumera
 áreas de atención de seguridad y recomendaciones para proteger las cargas de trabajo que se ejecutan en Kubernetes:
 
@@ -131,7 +131,7 @@ recomendaciones para proteger el código de su aplicación:
 Áreas de Atención para el Código | Recomendación |
 -------------------------| -------------- |
 Acceso solo a través de TLS | Si su código necesita comunicarse a través de TCP, ejecute un handshake TLS con el cliente anticipadamente. Con la excepción de algunos casos, encripte todo lo que está en tránsito. Yendo un paso más allá, es una buena idea cifrar el tráfico de red entre los servicios. Esto se puede hacer a través del proceso de autenticación mutua o [mTLS](https://en.wikipedia.org/wiki/Mutual_authentication), que realiza una verificación bilateral de la comunicación a través de los certificados en los servicios. |
-Limitación de intervalos de puertos de comunicación | Esta recomendación puede ser un poco evidente, pero siempre que sea posible, solo debe exponer los puertos de su servicio que son absolutamente esenciales para la comunicación o la recopilación de métricas. |
+Limitación de rangos de puertos de comunicación | Esta recomendación puede ser un poco evidente, pero siempre que sea posible, solo debe exponer los puertos de su servicio que son absolutamente esenciales para la comunicación o la recopilación de métricas. |
 Seguridad en dependencia de terceros | Es una buena práctica comprobar periódicamente las bibliotecas de terceros de su aplicación en busca de vulnerabilidades de seguridad. Cada lenguaje de programación tiene una herramienta para realizar esta verificación de forma automática. |
 Análisis de código estático | La mayoría de los lenguajes proporcionan una forma de analizar el código en busca de prácticas de codificación potencialmente inseguras. Siempre que sea posible, debe automatizar los escaneos utilizando herramientas que puedan escanear las bases del código en busca de errores de seguridad comunes. Algunas de las herramientas se pueden encontrar en [OWASP Source Code Analysis Tools](https://owasp.org/www-community/Source_Code_Analysis_Tools). |
 Ataques de sondeo dinámico | Existen algunas herramientas automatizadas que puede ejecutar en su servicio para explorar algunos de los ataques más conocidos. Esto incluye la inyección de SQL, CSRF y XSS. Una de las herramientas de análisis dinámico más populares es la [OWASP Zed Attack proxy](https://owasp.org/www-project-zap/). |
@@ -146,7 +146,7 @@ Obtenga más información sobre los temas de seguridad de Kubernetes:
 * [Políticas de red para pods](/docs/concepts/services-networking/network-policies/)
 * [Control de acceso a la API de Kubernetes](/docs/concepts/security/controlling-access)
 * [Protegiendo su clúster](/docs/tasks/administer-cluster/securing-a-cluster/)
-* [Criptografía de datos en tránsito](/docs/tasks/tls/managing-tls-in-a-cluster/) for the control plane
+* [Criptografía de datos en tránsito](/docs/tasks/tls/managing-tls-in-a-cluster/)
 * [Criptografía de datos en reposo](/docs/tasks/administer-cluster/encrypt-data/)
 * [Secretos en Kubernetes](/docs/concepts/configuration/secret/)
 * [Runtime class](/docs/concepts/containers/runtime-class)
\ No newline at end of file

From 5767f39fd1fa244418baddee130f6ddc516f7e9c Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sat, 3 Apr 2021 02:20:18 +0300
Subject: [PATCH 454/788] [ja] updated labels for cli command in the PHP
 Guestbook tutorial

---
 content/ja/docs/tutorials/stateless-application/guestbook.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tutorials/stateless-application/guestbook.md b/content/ja/docs/tutorials/stateless-application/guestbook.md
index e08abdb62c..aff86a2289 100644
--- a/content/ja/docs/tutorials/stateless-application/guestbook.md
+++ b/content/ja/docs/tutorials/stateless-application/guestbook.md
@@ -185,7 +185,7 @@ Deploymentはマニフェストファイル内に書かれた設定に基づい
 1. Podのリストを問い合わせて、3つのフロントエンドのレプリカが実行中になっていることを確認します。
 
       ```shell
-      kubectl get pods -l app=guestbook -l tier=frontend
+      kubectl get pods -l app.kubernetes.io/name=guestbook -l app.kubernetes.io/component=frontend
       ```
 
       結果は次のようになるはずです。

From 4e15cffdf9ec4255e39edb03dc4a008ab6ec3301 Mon Sep 17 00:00:00 2001
From: Tabitha Sable <51767484+tabbysable@users.noreply.github.com>
Date: Fri, 2 Apr 2021 23:10:15 -0500
Subject: [PATCH 455/788] Update links to be site-relative

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 ...-08-PodSecurityPolicy-Past-Present-and-Future.md | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md b/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
index c631d54c4a..c006be5538 100644
--- a/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
+++ b/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
@@ -13,7 +13,7 @@ What are Pod Security Policies? Why did we need them? Why are they going away, a
 
 ## What does deprecation mean in Kubernetes?
 
-Whenever a Kubernetes feature is set to go away, our [deprecation policy](docs/reference/using-api/deprecation-policy/) is our guide. First the feature is marked as deprecated, then after enough time has passed, it can finally be removed.
+Whenever a Kubernetes feature is set to go away, our [deprecation policy](/docs/reference/using-api/deprecation-policy/) is our guide. First the feature is marked as deprecated, then after enough time has passed, it can finally be removed.
 
 Kubernetes 1.21 starts the deprecation process for PodSecurityPolicy. As with all feature deprecations, PodSecurityPolicy will continue to be fully functional for several more releases. The current plan is to remove PSP from Kubernetes in the 1.25 release.
 
@@ -21,11 +21,11 @@ Until then, PSP is still PSP. There will be at least a year during which the new
 
 ## What is PodSecurityPolicy?
 
-[PodSecurityPolicy](https://kubernetes.io/docs/concepts/policy/pod-security-policy/) is a built-in [admission controller](https://kubernetes.io/blog/2019/03/21/a-guide-to-kubernetes-admission-controllers/) that allows a cluster administrator to control security-sensitive aspects of the Pod specification. 
+[PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) is a built-in [admission controller](o/blog/2019/03/21/a-guide-to-kubernetes-admission-controllers/) that allows a cluster administrator to control security-sensitive aspects of the Pod specification. 
 
 First, one or more PodSecurityPolicy resources are created in a cluster to define the requirements Pods must meet. Then, RBAC rules are created to control which PodSecurityPolicy applies to a given pod. If a pod meets the requirements of its PSP, it will be admitted to the cluster as usual. In some cases, PSP can also modify Pod fields, effectively creating new defaults for those fields. If a Pod does not meet the PSP requirements, it is rejected, and cannot run. 
 
-One more important thing to know about PodSecurityPolicy: it’s not the same as PodSecurityContext.
+One more important thing to know about PodSecurityPolicy: it’s not the same as [PodSecurityContext](/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context).
 
 A part of the Pod specification, PodSecurityContext is the collection of fields that specify many of the security-relevant settings for a Pod. The security context dictates to the kubelet and container runtime how the Pod should actually be run. In contrast, the PodSecurityPolicy only constrains (or defaults) the values that may be set on the security context.
 
@@ -35,7 +35,7 @@ The deprecation of PSP does not affect PodSecurityContext in any way.
 
 In Kubernetes, we define resources such as Deployments, StatefulSets, and Services that represent the building blocks of software applications. The various controllers inside a Kubernetes cluster react to these resources, creating further Kubernetes resources or configuring some software or hardware to accomplish our goals.
 
-In most Kubernetes clusters, RBAC (Role-Based Access Control) rules control access to these resources. Get, Create, Edit, and Delete are the sorts of operations that RBAC cares about, but RBAC does not consider what settings are being put into the resources it controls. For example, a Pod can be almost anything from a simple webserver to a privileged command prompt offering full access to the underlying server node and all the data. It’s all the same to RBAC: a Pod is a Pod is a Pod.
+In most Kubernetes clusters, RBAC (Role-Based Access Control) rules control access to these resources. `list`, `get`, `create`, `edit`, and `delete` are the sorts of API operations that RBAC cares about, but _RBAC does not consider what settings are being put into the resources it controls_. For example, a Pod can be almost anything from a simple webserver to a privileged command prompt offering full access to the underlying server node and all the data. It’s all the same to RBAC: a Pod is a Pod is a Pod.
 
 To control what sorts of settings are allowed in the resources defined in your cluster, you need Admission Control in addition to RBAC. Since Kubernetes 1.3, PodSecurityPolicy has been the built-in way to do that for security-related Pod fields. Using PodSecurityPolicy, you can prevent “create Pod” from automatically meaning “root on every cluster node,” without needing to deploy additional external admission controllers.
 
@@ -65,11 +65,10 @@ What this all means for you depends on your current PSP situation. If you’re a
 
 If you’re making extensive use of the flexibility of PSP with numerous PSPs and complex binding rules, you will likely find the simplicity of PSP Replacement Policy too limiting. Use the next year to evaluate the other admission controller choices in the ecosystem. There are resources available to ease this transition, such as the [Gatekeeper Policy Library](https://github.com/open-policy-agent/gatekeeper-library).
 
-If your use of PSP is relatively simple, with a few policies and straightforward binding to service accounts in each namespace, you will likely find PSP Replacement Policy to be a good match for your needs. Evaluate your PSPs compared to the [Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/) to get a feel for where you’ll be able to use the Restricted, Baseline, and Privileged policies. Please follow along with or contribute to the KEP and subsequent development, and try out the Alpha release of PSP Replacement Policy when it becomes available.
+If your use of PSP is relatively simple, with a few policies and straightforward binding to service accounts in each namespace, you will likely find PSP Replacement Policy to be a good match for your needs. Evaluate your PSPs compared to the Kubernetes [Pod Security Standards](/docs/concepts/security/pod-security-standards/) to get a feel for where you’ll be able to use the Restricted, Baseline, and Privileged policies. Please follow along with or contribute to the KEP and subsequent development, and try out the Alpha release of PSP Replacement Policy when it becomes available.
 
-If you’re just beginning your PSP journey, you will save time and effort by keeping it simple. You can approximate the functionality of PSP Replacement Policy today by using the Pod Security Standards’ PSPs. If you set the cluster default by binding a Baseline or Restricted policy to the system:authenticated group, and then make a more-permissive policy available as needed in certain Namespaces [using ServiceAccount bindings](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#run-another-pod), you will avoid many of the PSP pitfalls and have an easy migration to PSP Replacement Policy. If your needs are much more complex than this, your effort is probably better spent adopting one of the more fully-featured external admission controllers mentioned above.
+If you’re just beginning your PSP journey, you will save time and effort by keeping it simple. You can approximate the functionality of PSP Replacement Policy today by using the Pod Security Standards’ PSPs. If you set the cluster default by binding a Baseline or Restricted policy to the system:authenticated group, and then make a more-permissive policy available as needed in certain Namespaces [using ServiceAccount bindings](/docs/concepts/policy/pod-security-policy/#run-another-pod), you will avoid many of the PSP pitfalls and have an easy migration to PSP Replacement Policy. If your needs are much more complex than this, your effort is probably better spent adopting one of the more fully-featured external admission controllers mentioned above.
 
 We’re dedicated to making Kubernetes the best container orchestration tool we can, and sometimes that means we need to remove longstanding features to make space for better things to come. When that happens, the Kubernetes deprecation policy ensures you have plenty of time to plan your next move. In the case of PodSecurityPolicy, several options are available to suit a range of needs and use cases. Start planning ahead now for PSP’s eventual removal, and please consider contributing to its replacement! Happy securing!
 
 **Acknowledgment:** It takes a wonderful group to make wonderful software. Thanks are due to everyone who has contributed to the PSP replacement effort, especially (in alphabetical order) Tim Allclair, Ian Coldwater, and Jordan Liggitt. It’s been a joy to work with y’all on this.
-

From b20641723c9ce705d7fd3b9712fbffa7845f94f8 Mon Sep 17 00:00:00 2001
From: Tabitha Sable <tabitha.c.sable@gmail.com>
Date: Fri, 2 Apr 2021 23:11:31 -0500
Subject: [PATCH 456/788] Fix typo in relative URL

---
 .../2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md b/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
index c006be5538..68cec29e89 100644
--- a/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
+++ b/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
@@ -21,7 +21,7 @@ Until then, PSP is still PSP. There will be at least a year during which the new
 
 ## What is PodSecurityPolicy?
 
-[PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) is a built-in [admission controller](o/blog/2019/03/21/a-guide-to-kubernetes-admission-controllers/) that allows a cluster administrator to control security-sensitive aspects of the Pod specification. 
+[PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) is a built-in [admission controller](/blog/2019/03/21/a-guide-to-kubernetes-admission-controllers/) that allows a cluster administrator to control security-sensitive aspects of the Pod specification. 
 
 First, one or more PodSecurityPolicy resources are created in a cluster to define the requirements Pods must meet. Then, RBAC rules are created to control which PodSecurityPolicy applies to a given pod. If a pod meets the requirements of its PSP, it will be admitted to the cluster as usual. In some cases, PSP can also modify Pod fields, effectively creating new defaults for those fields. If a Pod does not meet the PSP requirements, it is rejected, and cannot run. 
 

From 411f732ae31948a7400f22d5b500816e81869af3 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sat, 3 Apr 2021 18:23:43 +0800
Subject: [PATCH 457/788] remove example task template to sync with upstream.

---
 .../id/docs/tasks/example-task-template.md    | 54 -------------------
 1 file changed, 54 deletions(-)
 delete mode 100644 content/id/docs/tasks/example-task-template.md

diff --git a/content/id/docs/tasks/example-task-template.md b/content/id/docs/tasks/example-task-template.md
deleted file mode 100644
index a1873501f3..0000000000
--- a/content/id/docs/tasks/example-task-template.md
+++ /dev/null
@@ -1,54 +0,0 @@
----
-title: Contoh Template Tugas (Task)
-content_type: task
-toc_hide: true
----
-
-<!-- overview -->
-
-{{< note >}}
-Pastikan juga kamu [membuat isian di daftar isi](/docs/home/contribute/write-new-topic/#creating-an-entry-in-the-table-of-contents) untuk dokumen baru kamu.
-{{< /note >}}
-
-Halaman ini menunjukkan bagaimana ...
-
-
-
-## {{% heading "prerequisites" %}}
-
-
-* {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-* Lakukan ini.
-* Lakukan ini juga.
-
-
-
-<!-- steps -->
-
-## Menjalankan ...
-
-1. Lakukan ini.
-1. Selanjutnya lakukan ini. Bila mungkin silahkan baca [penjelasan terkait](...).
-
-
-
-<!-- discussion -->
-
-## Memahami ...
-**[Bagian opsional]**
-
-Berikut ini hal-hal yang menarik untuk diketahui tentang langkah-langkah yang baru saja kamu lakukan.
-
-
-
-## {{% heading "whatsnext" %}}
-
-
-**[Bagian optional]**
-
-* Pelajari tentang [menulis topik baru](/docs/home/contribute/write-new-topic/).
-* Lihat [menggunakan _template_ halaman - _template_ tugas](/docs/home/contribute/page-templates/#task_template) untuk mengetahui cara menggunakan _template_ ini.
-
-
-
-

From be4091205788b4faef6e6883b3aa2737ba359f54 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sat, 3 Apr 2021 19:05:47 +0800
Subject: [PATCH 458/788] remove cluster management to sync with upstream.

---
 .../docs/concepts/architecture/controller.md  |   5 +-
 .../administer-cluster/cluster-management.md  | 221 ------------------
 static/_redirects                             |   1 +
 3 files changed, 3 insertions(+), 224 deletions(-)
 delete mode 100644 content/id/docs/tasks/administer-cluster/cluster-management.md

diff --git a/content/id/docs/concepts/architecture/controller.md b/content/id/docs/concepts/architecture/controller.md
index 6cf90cf9e6..bff7130eb7 100644
--- a/content/id/docs/concepts/architecture/controller.md
+++ b/content/id/docs/concepts/architecture/controller.md
@@ -102,9 +102,8 @@ yang diinginkannya melalui server API, dan kemudian berkomunikasi langsung
 dengan sistem eksternal untuk membawa keadaan saat ini mendekat keadaan yang 
 diinginkan.
 
-(Sebenarnya ada sebuah _controller_ yang melakukan penskalaan node secara 
-horizontal dalam klaster kamu. Silahkan lihat
-[_autoscaling_ klaster](/docs/tasks/administer-cluster/cluster-management/#cluster-autoscaling)).
+(Sebenarnya ada sebuah [_controller_](https://github.com/kubernetes/autoscaler/) yang melakukan penskalaan node secara 
+horizontal dalam klaster kamu.
 
 ## Status sekarang berbanding status yang diinginkan {#sekarang-banding-diinginkan}
 
diff --git a/content/id/docs/tasks/administer-cluster/cluster-management.md b/content/id/docs/tasks/administer-cluster/cluster-management.md
deleted file mode 100644
index 0473dde9f3..0000000000
--- a/content/id/docs/tasks/administer-cluster/cluster-management.md
+++ /dev/null
@@ -1,221 +0,0 @@
----
-title: Manajemen Klaster
-content_type: concept
----
-
-<!-- overview -->
-
-Dokumen ini menjelaskan beberapa topik yang terkait dengan siklus hidup sebuah klaster: membuat klaster baru,
-memperbarui Node _control plane_ dan Node pekerja dari klaster kamu,
-melakukan pemeliharaan Node (misalnya pembaruan kernel), dan meningkatkan versi API Kubernetes dari
-klaster yang berjalan.
-
-<!-- body -->
-
-
-## Membuat dan mengonfigurasi klaster
-
-Untuk menginstal Kubernetes dalam sekumpulan mesin, konsultasikan dengan salah satu [Panduan Memulai](/id/docs/setup) tergantung dengan lingkungan kamu.
-
-## Memperbarui klaster
-
-Status saat ini pembaruan klaster bergantung pada penyedia, dan beberapa rilis yang mungkin memerlukan perhatian khusus saat memperbaruinya. Direkomendasikan agar admin membaca [Catatan Rilis](https://git.k8s.io/kubernetes/CHANGELOG/README.md), serta catatan khusus pembaruan versi sebelum memperbarui klaster mereka.
-
-### Memperbarui klaster Azure Kubernetes Service (AKS)
-
-Azure Kubernetes Service memungkinkan pembaruan layanan mandiri yang mudah dari _control plane_ dan Node pada klaster kamu. Prosesnya adalah
-saat ini dimulai oleh pengguna dan dijelaskan dalam [Azure AKS documentation](https://docs.microsoft.com/en-us/azure/aks/upgrade-cluster).
-
-### Memperbarui klaster Google Compute Engine
-
-Google Compute Engine Open Source (GCE-OSS) mendukung pembaruan _control plane_ dengan menghapus dan
-membuat ulang _control plane_, sambil mempertahankan _Persistent Disk_ (PD) yang sama untuk memastikan bahwa data disimpan pada berkas
-untuk setiap kali pembaruan.
-
-Pembaruan Node untuk GCE menggunakan [grup _instance_ yang di-_manage_](https://cloud.google.com/compute/docs/instance-groups/), dimana setiap Node
-dihancurkan secara berurutan dan kemudian dibuat ulang dengan perangkat lunak baru. Semua Pod yang berjalan di Node tersebut harus
-dikontrol oleh pengontrol replikasi (_Replication Controller_), atau dibuat ulang secara manual setelah peluncuran.
-
-Pembaruan versi pada klaster open source Google Compute Engine (GCE) yang dikontrol oleh skrip `cluster/gce/upgrade.sh`.
-
-Dapatkan penggunaan dengan menjalankan `cluster/gce/upgrade.sh -h`.
-
-Misalnya, untuk meningkatkan hanya _control plane_ kamu ke versi tertentu (v1.0.2):
-
-```shell
-cluster/gce/upgrade.sh -M v1.0.2
-```
-
-Sebagai alternatif, untuk meningkatkan seluruh klaster kamu ke rilis yang stabil terbaru gunakan:
-
-```shell
-cluster/gce/upgrade.sh release/stable
-```
-
-### Memperbarui klaster Google Kubernetes Engine
-
-Google Kubernetes Engine secara otomatis memperbarui komponen _control plane_ (misalnya, `kube-apiserver`, ` kube-scheduler`) ke versi yang terbaru. Ini juga menangani pembaruan sistem operasi dan komponen lain yang dijalankan oleh _control plane_.
-
-Proses pembaruan Node dimulai oleh pengguna dan dijelaskan dalam [Dokumentasi Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/docs/clusters/upgrade).
-
-### Memperbarui klaster Amazon EKS
-
-Komponen _control plane_ klaster pada Amazon EKS dapat diperbarui dengan menggunakan eksctl, AWS Management Console, atau AWS CLI. Prosesnya dimulai oleh pengguna dan dijelaskan di [Dokumentasi Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html).
-
-### Memperbarui klaster Oracle Cloud Infrastructure Container Engine untuk Kubernetes (OKE)
-
-Oracle membuat dan mengelola sekumpulan Node _control plane_ pada _control plane_ Oracle atas nama kamu (dan infrastruktur Kubernetes terkait seperti Node etcd) untuk memastikan kamu memiliki Kubernetes _control plane_ yang terkelola dengan ketersedian tinggi. Kamu juga dapat memperbarui Node _control plane_ ini dengan mulus ke versi Kubernetes baru tanpa berhenti. Tindakan ini dijelaskan dalam [Dokumentasi OKE](https://docs.cloud.oracle.com/iaas/Content/ContEng/Tasks/contengupgradingk8smasternode.htm).
-
-### Memperbarui klaster pada platform yang lain
-
-Penyedia dan alat yang berbeda akan mengelola pembaruan secara berbeda. Kamu disarankan untuk membaca dokumentasi utama mereka terkait pembaruan.
-
-* [kops](https://github.com/kubernetes/kops)
-* [kubespray](https://github.com/kubernetes-incubator/kubespray)
-* [CoreOS Tectonic](https://coreos.com/tectonic/docs/latest/admin/upgrade.html)
-* [Digital Rebar](https://provision.readthedocs.io/en/tip/doc/content-packages/krib.html)
-* ...
-
-Untuk memperbarukan sebuah klaster pada platform yang tidak disebutkan dalam daftar di atas, periksa urutan pembaruan komponen pada
-halaman [Versi Skewed](/docs/setup/release/version-skew-policy/#supported-component-upgrade-order).
-
-## Merubah ukuran klaster
-
-Jika klaster kamu kekurangan sumber daya, kamu dapat dengan mudah menambahkan lebih banyak mesin ke klaster tersebut jika klaster kamu
-menjalankan [Mode Node Registrasi Sendiri](/docs/concepts/architecture/nodes/#self-registration-of-nodes).
-Jika kamu menggunakan GCE atau Google Kubernetes Engine, itu dilakukan dengan mengubah ukuran grup _instance_ yang mengelola Node kamu.
-Ini dapat dilakukan dengan mengubah jumlah _instance_ pada
-`Compute > Compute Engine > Instance groups > your group > Edit group`
-[Laman Google Cloud Console](https://console.developers.google.com) atau dengan baris perintah gcloud:
-
-```shell
-gcloud compute instance-groups managed resize kubernetes-node-pool --size=42 --zone=$ZONE
-```
-
-Grup _instance_ akan menangani penempatan _image_ yang sesuai pada mesin baru dan memulainya,
-sedangkan Kubelet akan mendaftarkan Node-nya ke server API agar tersedia untuk penjadwalan.
-Jika kamu menurunkan skala grup _instance_, sistem akan secara acak memilih Node untuk dimatikan.
-
-Di lingkungan lain kamu mungkin perlu mengonfigurasi mesin sendiri dan memberi tahu Kubelet di mana server API mesin itu berjalan.
-
-### Merubah ukuran klaster Azure Kubernetes Service (AKS)
-
-Azure Kubernetes Service memungkinkan perubahan ukuran klaster yang dimulai oleh pengguna dari CLI atau
-portal Azure dan dijelaskan dalam [Dokumentasi Azure AKS](https://docs.microsoft.com/en-us/azure/aks/scale-cluster).
-
-
-### Penyekalaan otomatis klaster
-
-Jika kamu menggunakan GCE atau Google Kubernetes Engine, kamu dapat mengonfigurasi klaster kamu sehingga secara otomatis diskalakan berdasarkan
-kebutuhan Pod.
-
-Seperti yang dideskripsikan dalam [Sumber daya komputasi](/id/docs/concepts/configuration/manage-resources-containers/),
-pengguna dapat memesan berapa banyak CPU dan memori yang dialokasikan ke Pod.
-Informasi ini digunakan oleh penjadwal Kubernetes untuk menemukan tempat menjalankan Pod. Jika
-tidak ada Node yang memiliki kapasitas kosong yang cukup (atau tidak sesuai dengan persyaratan Pod yang lainnya) maka Pod
-menunggu sampai beberapa Pod dihentikan atau Node baru ditambahkan.
-
-Penyekala otomatis klaster mencari Pod yang tidak dapat dijadwalkan dan memeriksa apakah perlu menambahkan Node baru, yang serupa
-dengan Node yang lain dalam klaster untuk membantu. Jika ya, maka itu mengubah ukuran klaster agar dapat mengakomodasi Pod yang menunggu.
-
-Penyekala otomatis klaster juga menurunkan skala klaster jika mengetahui bahwa satu atau beberapa Node tidak diperlukan lagi untuk
-periode waktu tambahan (selama 10 menit tetapi dapat berubah di masa mendatang).
-
-Penyekala otomatis klaster dikonfigurasikan untuk per grup _instance_ (GCE) atau kumpulan Node (Google Kubernetes Engine).
-
-Jika kamu menggunakan GCE, kamu dapat mengaktifkannya sambil membuat klaster dengan skrip kube-up.sh.
-Untuk mengonfigurasi penyekala otomatis klaster, kamu harus menyetel tiga variabel lingkungan:
-
-* `KUBE_ENABLE_CLUSTER_AUTOSCALER` - mengaktifkan penyekala otomatis klaster kalau di setel menjadi _true_.
-* `KUBE_AUTOSCALER_MIN_NODES` - minimal jumlah Node dalam klaster.
-* `KUBE_AUTOSCALER_MAX_NODES` - maksimal jumlah Node dalam klaster.
-
-Contoh:
-
-```shell
-KUBE_ENABLE_CLUSTER_AUTOSCALER=true KUBE_AUTOSCALER_MIN_NODES=3 KUBE_AUTOSCALER_MAX_NODES=10 NUM_NODES=5 ./cluster/kube-up.sh
-```
-
-Pada Google Kubernetes Engine, kamu mengonfigurasi penyekala otomatis klaster baik saat pembuatan atau pembaruan klaster atau saat membuat kumpulan Node tertentu
-(yang ingin kamu skalakan secara otomatis) dengan meneruskan _flag_ `--enable-autoscaling`, `--min-nodes` dan `--max-nodes`
-yang sesuai dengan perintah `gcloud`.
-
-Contoh:
-
-```shell
-gcloud container clusters create mytestcluster --zone=us-central1-b --enable-autoscaling --min-nodes=3 --max-nodes=10 --num-nodes=5
-```
-
-```shell
-gcloud container clusters update mytestcluster --enable-autoscaling --min-nodes=1 --max-nodes=15
-```
-
-**Penyekala otomatis klaster mengharapkan bahwa Node belum dimodifikasi secara manual (misalnya dengan menambahkan label melalui kubectl) karena properti tersebut tidak akan disebarkan ke Node baru dalam grup _instance_ yang sama.**
-
-Untuk detail selengkapnya tentang cara penyekala otomatis klaster memutuskan apakah, kapan dan bagaimana
-melakukan penyekalaan sebuah klaster, silahkan lihat dokumentasi [FAQ](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/FAQ.md)
-dari proyek penyekala otomatis klaster.
-
-## Memelihara dalam Node
-
-Jika kamu perlu memulai ulang Node (seperti untuk pembaruan kernel, pembaruan libc, pembaruan perangkat keras, dll.) dan waktu kegagalan (_downtime_) yang
-singkat, lalu ketika Kubelet memulai ulang, maka ia akan mencoba untuk memulai ulang Pod yang dijadwalkan. Jika mulai ulang membutuhkan waktu yang lebih lama
-(waktu bawaan adalah 5 menit, yang dikontrol oleh `--pod-eviction-timeout` pada _controller-manager_),
-maka pengontrol Node akan menghentikan Pod yang terikat ke Node yang tidak tersedia. Jika ada yang sesuai dengan
-kumpulan replika (atau pengontrol replikasi), maka salinan baru dari Pod akan dimulai pada Node yang berbeda. Jadi, dalam kasus di mana semua
-Pod direplikasi, pembaruan dapat dilakukan tanpa koordinasi khusus, dengan asumsi bahwa tidak semua Node akan mati pada saat yang bersamaan.
-
-Jika kamu ingin lebih mengontrol proses pembaruan, kamu dapat menggunakan alur kerja berikut ini:
-
-Gunakan `kubectl drain` untuk meghentikan perlahan-lahan semua Pod dalam Node ketika menandai Node sebagai _unschedulable_:
-
-```shell
-kubectl drain $NODENAME
-```
-
-Ini mencegah Pod baru mendarat pada Node saat kamu mencoba melepaskannya.
-
-Untuk Pod dengan sebuah kumpulan replika, Pod tersebut akan diganti dengan Pod baru yang akan dijadwalkan ke Node baru. Selain itu, jika Pod adalah bagian dari layanan, maka klien akan secara otomatis dialihkan ke Pod baru.
-
-Untuk Pod yang tidak memiliki replika, kamu perlu memunculkan salinan baru dari Pod tersebut, dan menganggapnya bukan bagian dari layanan, alihkan klien ke Pod tersebut.
-
-Lakukan pekerjaan pemeliharaan pada Node.
-
-Buat Node dapat dijadwal lagi:
-
-
-```shell
-kubectl uncordon $NODENAME
-```
-
-Jika kamu menghapus Node dari _instance_ VM dan membuat yang baru, maka sumber daya Node baru yang dapat dijadwalkan akan
-dibuat secara otomatis (jika kamu menggunakan penyedia cloud yang mendukung
-pencarian Node; saat ini hanya Google Compute Engine, tidak termasuk CoreOS di Google Compute Engine menggunakan kube-register).
-Lihatlah [Node](/docs/concepts/architecture/nodes/) untuk lebih detail.
-
-## Topik lebih lanjut
-
-### Mengaktifkan atau menonaktifkan versi API untuk klaster kamu
-
-Versi API spesifik dapat dinyalakan dan dimatikan dengan meneruskan _flag_ `--runtime-config=api/<version>` ketika menjalankan server API. Sebagai contoh: untuk menyalakan APIv1, teruskan `--runtime-config=api/v1=false`.
-_runtime-config_ juga mendukung 2 kunci khusus: api/all dan api/legacy yang masing-masing untuk mengontrol semua dan API lama.
-Sebagai contoh, untuk mematikan versi API semua kecuali v1, teruskan `--runtime-config=api/all=false,api/v1=true`.
-Untuk tujuan _flag_ ini, API lama adalah API yang sudah tidak digunakan lagi secara eksplisit (misalnya, `v1beta3`).
-
-### Mengalihkan versi API penyimpanan dari klaster kamu
-
-Objek yang disimpan ke diska untuk representasi internal klaster dari sumber daya Kubernetes yang aktif dalam klaster ditulis menggunakan versi API tertentu.
-Saat API yang didukung berubah, objek ini mungkin perlu ditulis ulang dalam API yang lebih baru. Kegagalan melakukan ini pada akhirnya akan menghasilkan sumber daya yang tidak lagi dapat didekodekan atau digunakan
-oleh server API Kubernetes.
-
-### Mengalihkan berkas konfigurasi kamu ke versi API baru
-
-Kamu dapat menggunakan perintah `kubectl convert` untuk mengubah berkas konfigurasi di antara versi API berbeda.
-
-```shell
-kubectl convert -f pod.yaml --output-version v1
-```
-
-Untuk opsi yang lainnya, silakan merujuk pada penggunaan dari perintah [kubectl convert](/docs/reference/generated/kubectl/kubectl-commands#convert).
-
-
diff --git a/static/_redirects b/static/_redirects
index 8ff4ed3722..c92804abe4 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -29,6 +29,7 @@
 /docs/admin/authorization/rbac.md     /docs/admin/authorization/rbac/ 301
 /docs/admin/cluster-components/     /docs/concepts/overview/components/ 301
 /docs/admin/cluster-management/     /docs/tasks/administer-cluster/ 302
+/id/docs/admin/cluster-management/     /id/docs/tasks/administer-cluster/ 302
 /docs/admin/cluster-troubleshooting/     /docs/tasks/debug-application-cluster/debug-cluster/ 301
 /docs/admin/daemons/     /docs/concepts/workloads/controllers/daemonset/ 301
 /docs/admin/disruptions/     /docs/concepts/workloads/pods/disruptions/ 301

From 7d84f93f06b3121ffddef4988bf216f4ad1d8cab Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sat, 3 Apr 2021 16:21:03 +0100
Subject: [PATCH 459/788] Don't mention kubeadm dual-stack as a site front page
 feature

kubeadm dual-stack is a nice feature, but we don't need to mention it
on https://kubernetes.io/

Omit that mention.
---
 .../production-environment/tools/kubeadm/dual-stack-support.md  | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md b/content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md
index fb3ffe1284..767787179c 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/dual-stack-support.md
@@ -1,7 +1,5 @@
 ---
 title: Dual-stack support with kubeadm
-feature:
-  title: Dual-stack support with kubeadm
 content_type: task
 weight: 110
 min-kubernetes-server-version: 1.21

From 021dc964b3b7e5bb5a8c6a0ffa46c59c63bd343a Mon Sep 17 00:00:00 2001
From: wangyysde <net_use@bzhy.com>
Date: Sun, 4 Apr 2021 22:41:02 +0800
Subject: [PATCH 460/788] Update
 content/zh/docs/concepts/cluster-administration/system-metrics.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../zh/docs/concepts/cluster-administration/system-metrics.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/cluster-administration/system-metrics.md b/content/zh/docs/concepts/cluster-administration/system-metrics.md
index a7053da87d..e508e09e26 100644
--- a/content/zh/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/zh/docs/concepts/cluster-administration/system-metrics.md
@@ -40,7 +40,7 @@ Examples of those components:
 ## Kubernetes 中组件的指标
 
 在大多数情况下，可以通过HTTP访问组件endpoint的 `/metrics` 路径来获取组件的度量值。
-对于那些默认情况下不暴露的endpoint的组件，可以使用 `--bind-address` 标志启用。
+对于那些默认情况下不暴露端点的组件，可以使用 `--bind-address` 标志启用。
 
 这些组件的示例：
 

From 078331611735f537296d4c2b0b3259c7b93fddd5 Mon Sep 17 00:00:00 2001
From: wangyysde <net_use@bzhy.com>
Date: Sun, 4 Apr 2021 22:41:17 +0800
Subject: [PATCH 461/788] Update
 content/zh/docs/concepts/cluster-administration/system-metrics.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../zh/docs/concepts/cluster-administration/system-metrics.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/cluster-administration/system-metrics.md b/content/zh/docs/concepts/cluster-administration/system-metrics.md
index e508e09e26..033dabb95e 100644
--- a/content/zh/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/zh/docs/concepts/cluster-administration/system-metrics.md
@@ -39,7 +39,7 @@ Examples of those components:
 -->
 ## Kubernetes 中组件的指标
 
-在大多数情况下，可以通过HTTP访问组件endpoint的 `/metrics` 路径来获取组件的度量值。
+在大多数情况下，可以通过 HTTP 访问组件的 `/metrics` 端点来获取组件的度量值。
 对于那些默认情况下不暴露端点的组件，可以使用 `--bind-address` 标志启用。
 
 这些组件的示例：

From 2325d540bf9b8d8d8a2627c056b370464e943b4e Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sun, 4 Apr 2021 22:57:41 +0800
Subject: [PATCH 462/788] moving pod-overhead into scheduling-eviction.

---
 .../{configuration => scheduling-eviction}/pod-overhead.md       | 0
 static/_redirects                                                | 1 +
 2 files changed, 1 insertion(+)
 rename content/id/docs/concepts/{configuration => scheduling-eviction}/pod-overhead.md (100%)

diff --git a/content/id/docs/concepts/configuration/pod-overhead.md b/content/id/docs/concepts/scheduling-eviction/pod-overhead.md
similarity index 100%
rename from content/id/docs/concepts/configuration/pod-overhead.md
rename to content/id/docs/concepts/scheduling-eviction/pod-overhead.md
diff --git a/static/_redirects b/static/_redirects
index c92804abe4..db9f04df02 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -509,3 +509,4 @@
 /docs/tasks/tools/install-minikube/     https://minikube.sigs.k8s.io/docs/start/     302
 
 /docs/concepts/configuration/pod-overhead/     /docs/concepts/scheduling-eviction/pod-overhead/   301
+/id/docs/concepts/configuration/pod-overhead/     /id/docs/concepts/scheduling-eviction/pod-overhead/   301

From fe9e5a80ad2be0e736cc05fbff1dd469f046b551 Mon Sep 17 00:00:00 2001
From: Justas <justas.narbutas@gmail.com>
Date: Sun, 4 Apr 2021 10:33:36 +0300
Subject: [PATCH 463/788] Fix label selector in Using Source IP tutorial

Before:
```sh
controlplane $ kubectl delete svc -l run=source-ip-app
No resources found
```
```sh
k get svc --show-labels
NAME           TYPE           CLUSTER-IP       EXTERNAL-IP   PORT(S)        AGE     LABELS
clusterip      ClusterIP      10.110.247.112   <none>        80/TCP         28m     app=source-ip-app
kubernetes     ClusterIP      10.96.0.1        <none>        443/TCP        49m     component=apiserver,provider=kubernetes
loadbalancer   LoadBalancer   10.111.123.206   <pending>     80:31111/TCP   9m59s   app=source-ip-app
nodeport       NodePort       10.108.129.31    <none>        80:32503/TCP   22m     app=source-ip-app
```
After:
```sh
controlplane $ kubectl delete svc -l app=source-ip-app
service "clusterip" deleted
service "loadbalancer" deleted
service "nodeport" deleted
```

Update source-ip.md

Update source-ip.md

Update source-ip.md
---
 content/en/docs/tutorials/services/source-ip.md | 2 +-
 content/ja/docs/tutorials/services/source-ip.md | 2 +-
 content/ko/docs/tutorials/services/source-ip.md | 2 +-
 content/zh/docs/tutorials/services/source-ip.md | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/tutorials/services/source-ip.md b/content/en/docs/tutorials/services/source-ip.md
index 4ed574e158..0a2d4b5929 100644
--- a/content/en/docs/tutorials/services/source-ip.md
+++ b/content/en/docs/tutorials/services/source-ip.md
@@ -425,7 +425,7 @@ the `service.spec.healthCheckNodePort` field on the Service.
 Delete the Services:
 
 ```shell
-kubectl delete svc -l run=source-ip-app
+kubectl delete svc -l app=source-ip-app
 ```
 
 Delete the Deployment, ReplicaSet and Pod:
diff --git a/content/ja/docs/tutorials/services/source-ip.md b/content/ja/docs/tutorials/services/source-ip.md
index 17317bbeae..505ba8ef45 100644
--- a/content/ja/docs/tutorials/services/source-ip.md
+++ b/content/ja/docs/tutorials/services/source-ip.md
@@ -399,7 +399,7 @@ client_address=198.51.100.79
 Serviceを削除します。
 
 ```shell
-kubectl delete svc -l run=source-ip-app
+kubectl delete svc -l app=source-ip-app
 ```
 
 Deployment、ReplicaSet、Podを削除します。
diff --git a/content/ko/docs/tutorials/services/source-ip.md b/content/ko/docs/tutorials/services/source-ip.md
index dec30dc54b..6874d6669b 100644
--- a/content/ko/docs/tutorials/services/source-ip.md
+++ b/content/ko/docs/tutorials/services/source-ip.md
@@ -426,7 +426,7 @@ HTTP 헬스 체크를 생성하여
 서비스를 삭제한다.
 
 ```shell
-kubectl delete svc -l run=source-ip-app
+kubectl delete svc -l app=source-ip-app
 ```
 
 디플로이먼트, 레플리카셋 그리고 파드를 삭제한다.
diff --git a/content/zh/docs/tutorials/services/source-ip.md b/content/zh/docs/tutorials/services/source-ip.md
index f989e93c70..26baeebbd9 100644
--- a/content/zh/docs/tutorials/services/source-ip.md
+++ b/content/zh/docs/tutorials/services/source-ip.md
@@ -387,7 +387,7 @@ __跨平台支持__
 删除服务：
 
 ```console
-$ kubectl delete svc -l run=source-ip-app
+$ kubectl delete svc -l app=source-ip-app
 ```
 
 

From 5baf9fb48ae0998961d10b565595a1499f86b31f Mon Sep 17 00:00:00 2001
From: Ben Potter <me@bpmct.net>
Date: Sun, 4 Apr 2021 18:24:00 -0400
Subject: [PATCH 464/788] fix image positioning: homepage, tablet

---
 assets/scss/_tablet.scss | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/scss/_tablet.scss b/assets/scss/_tablet.scss
index b368d54494..58149a7dc2 100644
--- a/assets/scss/_tablet.scss
+++ b/assets/scss/_tablet.scss
@@ -77,7 +77,6 @@ $feature-box-div-width: 45%;
       position: relative;
       clear: both;
       display: table;
-      height: 160px;
 
       .content {
         display: table-cell;
@@ -124,6 +123,7 @@ $feature-box-div-width: 45%;
           position: relative;
           display: block;
           float: none;
+          text-align: center;
           max-width: 100%;
           transform: none;
         }

From e0b7222f1af4c5bc4ac74804cd860bd0dc5e7f1b Mon Sep 17 00:00:00 2001
From: Tabitha Sable <tabitha.c.sable@gmail.com>
Date: Mon, 5 Apr 2021 00:27:46 -0500
Subject: [PATCH 465/788] Rename file to match publication date

---
 ...md => 2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/en/blog/_posts/{2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md => 2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md} (100%)

diff --git a/content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md b/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md
similarity index 100%
rename from content/en/blog/_posts/2021-04-08-PodSecurityPolicy-Past-Present-and-Future.md
rename to content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md

From 6c4e752016c8c244d5107201fc50c346300bc5fd Mon Sep 17 00:00:00 2001
From: Tabitha Sable <tabitha.c.sable@gmail.com>
Date: Mon, 5 Apr 2021 00:32:58 -0500
Subject: [PATCH 466/788] Adopt several suggestions from review.

---
 ...06-PodSecurityPolicy-Past-Present-and-Future.md | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md b/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md
index 68cec29e89..e4a1d67aeb 100644
--- a/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md
+++ b/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md
@@ -1,13 +1,13 @@
 ---
 layout: blog
-title: "PodSecurityPolicy: Past, Present, and Future"
-date: 2021-04-08
-slug: PodSecurityPolicy-Past-Present-and-Future
+title: "PodSecurityPolicy Deprecation: Past, Present, and Future"
+date: 2021-04-06
+slug: podsecuritypolicy-deprecation-past-present-and-future
 ---
 
 **Author:** Tabitha Sable (Kubernetes SIG Security)
 
-PodSecurityPolicy (PSP) is being deprecated in Kubernetes 1.21. This starts the countdown to its removal, but doesn’t change anything else. PodSecurityPolicy will continue to be fully functional for several more releases before being removed completely. In the meantime, we are developing a replacement for PSP that covers key use cases more easily and sustainably.
+PodSecurityPolicy (PSP) is being deprecated in Kubernetes 1.21, to be released later this week. This starts the countdown to its removal, but doesn’t change anything else. PodSecurityPolicy will continue to be fully functional for several more releases before being removed completely. In the meantime, we are developing a replacement for PSP that covers key use cases more easily and sustainably.
 
 What are Pod Security Policies? Why did we need them? Why are they going away, and what’s next? How does this affect you? These key questions come to mind as we prepare to say goodbye to PSP, so let’s walk through them together. We’ll start with an overview of how features get removed from Kubernetes.
 
@@ -35,7 +35,7 @@ The deprecation of PSP does not affect PodSecurityContext in any way.
 
 In Kubernetes, we define resources such as Deployments, StatefulSets, and Services that represent the building blocks of software applications. The various controllers inside a Kubernetes cluster react to these resources, creating further Kubernetes resources or configuring some software or hardware to accomplish our goals.
 
-In most Kubernetes clusters, RBAC (Role-Based Access Control) rules control access to these resources. `list`, `get`, `create`, `edit`, and `delete` are the sorts of API operations that RBAC cares about, but _RBAC does not consider what settings are being put into the resources it controls_. For example, a Pod can be almost anything from a simple webserver to a privileged command prompt offering full access to the underlying server node and all the data. It’s all the same to RBAC: a Pod is a Pod is a Pod.
+In most Kubernetes clusters, RBAC (Role-Based Access Control) [rules](/docs/reference/access-authn-authz/rbac/#role-and-clusterrole) control access to these resources. `list`, `get`, `create`, `edit`, and `delete` are the sorts of API operations that RBAC cares about, but _RBAC does not consider what settings are being put into the resources it controls_. For example, a Pod can be almost anything from a simple webserver to a privileged command prompt offering full access to the underlying server node and all the data. It’s all the same to RBAC: a Pod is a Pod is a Pod.
 
 To control what sorts of settings are allowed in the resources defined in your cluster, you need Admission Control in addition to RBAC. Since Kubernetes 1.3, PodSecurityPolicy has been the built-in way to do that for security-related Pod fields. Using PodSecurityPolicy, you can prevent “create Pod” from automatically meaning “root on every cluster node,” without needing to deploy additional external admission controllers.
 
@@ -47,13 +47,13 @@ The way PSPs are applied to Pods has proven confusing to nearly everyone that ha
 
 For more information about these and other PSP difficulties, check out SIG Auth’s KubeCon NA 2019 Maintainer Track session video: {{< youtube "SFtHRmPuhEw?start=953" youtube-quote-sm >}}
 
-Today, you’re not limited only to deploying PSP or writing your own custom admission controller. Several external admission controllers are available that incorporate lessons learned from PSP to provide a better user experience. [OPA/Gatekeeper](https://github.com/open-policy-agent/gatekeeper/), [Kyverno](https://github.com/kyverno/kyverno/), and [K-Rail](https://github.com/cruise-automation/k-rail) are all well-known, and each has its fans.
+Today, you’re not limited only to deploying PSP or writing your own custom admission controller. Several external admission controllers are available that incorporate lessons learned from PSP to provide a better user experience. [K-Rail](https://github.com/cruise-automation/k-rail), [Kyverno](https://github.com/kyverno/kyverno/), and [OPA/Gatekeeper](https://github.com/open-policy-agent/gatekeeper/) are all well-known, and each has its fans.
 
 Although there are other good options available now, we believe there is still value in having a built-in admission controller available as a choice for users. With this in mind, we turn toward building what’s next, inspired by the lessons learned from PSP.
 
 ## What’s next?
 
-Kubernetes SIG Security, SIG Auth, and a diverse collection of other community members have been working together for months to ensure that what’s coming next is going to be awesome. We have developed a Kubernetes Enhancement Proposal ([KEP 2579](https://github.com/kubernetes/enhancements/issues/2579)) and a prototype for a new feature, currently being called PSP Replacement Policy. We are targeting an Alpha release in Kubernetes 1.22.
+Kubernetes SIG Security, SIG Auth, and a diverse collection of other community members have been working together for months to ensure that what’s coming next is going to be awesome. We have developed a Kubernetes Enhancement Proposal ([KEP 2579](https://github.com/kubernetes/enhancements/issues/2579)) and a prototype for a new feature, currently being called by the temporary name "PSP Replacement Policy." We are targeting an Alpha release in Kubernetes 1.22.
 
 PSP Replacement Policy starts with the realization that since there is a robust ecosystem of external admission controllers already available, PSP’s replacement doesn’t need to be all things to all people. Simplicity of deployment and adoption is the key advantage a built-in admission controller has compared to an external webhook, so we have focused on how to best utilize that advantage.
 

From a5f6961507a4f42664d420e3df293d3571586e5c Mon Sep 17 00:00:00 2001
From: Keith Wall <kwall@apache.org>
Date: Mon, 5 Apr 2021 12:50:52 +0100
Subject: [PATCH 467/788] Address review comments.

---
 .../configure-pod-configmap.md                        | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md
index 6432b10c93..d52a4acc66 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -626,13 +626,18 @@ basis. The [Secrets](/docs/concepts/configuration/secret/#using-secrets-as-files
 
 ### Optional References
 
-A ConfigMap reference may be marked "optional".  If the ConfigMap is non-existent, the mounted volume will be empty. If the ConfigMap exists, but the referenced key is non-existent the path will be absent beneath the mount point.
+A ConfigMap reference may be marked "optional".  If the ConfigMap is non-existent, the mounted volume will be empty. If the ConfigMap exists, but the referenced
+key is non-existent the path will be absent beneath the mount point.
 
 ### Mounted ConfigMaps are updated automatically
 
-When a mounted ConfigMap is updated, the projected content is eventually updated too.  This applies in the case where an optionally referenced ConfigMap comes into existence after a pod has started.
+When a mounted ConfigMap is updated, the projected content is eventually updated too.  This applies in the case where an optionally referenced ConfigMap comes into
+existence after a pod has started.
 
-Kubelet is checking whether the mounted ConfigMap is fresh on every periodic sync. However, it is using its local ttl-based cache for getting the current value of the ConfigMap. As a result, the total delay from the moment when the ConfigMap is updated to the moment when new keys are projected to the pod can be as long as kubelet sync period (1 minute by default) + ttl of ConfigMaps cache (1 minute by default) in kubelet. You can trigger an immediate refresh by updating one of the pod's annotations.
+Kubelet checks whether the mounted ConfigMap is fresh on every periodic sync. However, it uses its local TTL-based cache for getting the current value of the
+ConfigMap. As a result, the total delay from the moment when the ConfigMap is updated to the moment when new keys are projected to the pod can be as long as
+kubelet sync period (1 minute by default) + TTL of ConfigMaps cache (1 minute by default) in kubelet. You can trigger an immediate refresh by updating one of
+the pod's annotations.
 
 {{< note >}}
 A container using a ConfigMap as a [subPath](/docs/concepts/storage/volumes/#using-subpath) volume will not receive ConfigMap updates.

From 8441afaac19ef2f51e1c6094e098760e6b0a7544 Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Mon, 5 Apr 2021 10:28:13 -0300
Subject: [PATCH 468/788] Add initial portuguese translation to runtime class
 (#27302)

* Add initial portuguese translation to runtime class

* Apply suggestions from code review

Co-authored-by: Diego W. Antunes <devlware@gmail.com>

* Typo correct

Co-authored-by: Diego W. Antunes <devlware@gmail.com>
---
 .../docs/concepts/containers/runtime-class.md | 179 ++++++++++++++++++
 .../pt/docs/reference/glossary/containerd.md  |  19 ++
 content/pt/docs/reference/glossary/cri-o.md   |  23 +++
 content/pt/docs/reference/glossary/cri.md     |  18 ++
 4 files changed, 239 insertions(+)
 create mode 100644 content/pt/docs/concepts/containers/runtime-class.md
 create mode 100644 content/pt/docs/reference/glossary/containerd.md
 create mode 100644 content/pt/docs/reference/glossary/cri-o.md
 create mode 100644 content/pt/docs/reference/glossary/cri.md

diff --git a/content/pt/docs/concepts/containers/runtime-class.md b/content/pt/docs/concepts/containers/runtime-class.md
new file mode 100644
index 0000000000..70e42a78f0
--- /dev/null
+++ b/content/pt/docs/concepts/containers/runtime-class.md
@@ -0,0 +1,179 @@
+---
+title: Classes de execução 
+content_type: concept
+weight: 20
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.20" state="stable" >}}
+
+Essa página descreve o recurso _RuntimeClass_ e a seleção do mecanismo do agente de execução.
+
+RuntimeClass é uma funcionalidade para selecionar as configurações do agente de execução do contêiner. 
+A configuração do agente de execução de contêineres é usada para executar os contêineres de um Pod.
+
+
+<!-- body -->
+
+## Motivação
+
+Você pode configurar um _RuntimeClass_ diferente entre os diferentes Pods para prover
+um equilíbrio entre performance versus segurança. Por exemplo, se parte de sua carga de
+trabalho necessita de um alto nível de garantia de segurança da informação, você pode 
+optar em executar esses Pods em um agente de execução que usa virtualização de hardware. 
+Você então terá o benefício do isolamento extra de um agente de execução alternativo, ao 
+custo de uma latência adicional.
+
+Você pode ainda usar um _RuntimeClass_ para executar diferentes Pods com o mesmo agente
+de execução de contêineres mas com diferentes configurações.
+
+## Configuração 
+
+1. Configure a implementação do CRI nos nós (depende do agente de execução)
+2. Crie o recurso RuntimeClass correspondente.
+
+### 1. Configure a implementação do CRI nos nós
+
+As configurações disponíveis através do RuntimeClass sáo dependentes da implementação do 
+_Container Runtime Interface_ ({{< glossary_tooltip term_id="cri" >}}). Veja a documentação correspondente [abaixo](#configuração-do-cri) para a
+sua implementação CRI para verificar como configurar.
+
+{{< note >}}
+RuntimeClass assume uma configuração homogênea de nós entre todo o cluster por padrão 
+(o que significa que todos os nós estão configurados do mesmo jeito referente aos agentes de 
+execução). Para suportar configurações heterogêneas, veja [Associação](#associação) abaixo.
+{{< /note >}}
+
+As configurações possuem um nome `handler` correspondente, referenciado pelo RuntimeClass. 
+Esse nome deve ser um valor DNS 1123 válido (letras, números e o carácter `-`).
+
+### 2. Crie o recurso RuntimeClass correspondente
+
+As etapas de configuração no passo 1 devem todas estar associadas a um nome para o campo `handler` 
+que identifica a configuração. Para cada um, crie o objeto RuntimeClass correspondente.
+
+O recurso RuntimeClass atualmente possui apenas 2 campos significativos: o nome do RuntimeClass
+(`metadata.name`) e o agente (`handler`). A definição do objeto se parece conforme a seguir:
+
+```yaml
+apiVersion: node.k8s.io/v1  # RuntimeClass é definido no grupo de API node.k8s.io
+kind: RuntimeClass
+metadata:
+  name: myclass  # O nome que o RuntimeClass será chamado como
+  # RuntimeClass é um recurso global, e não possui namespace.
+handler: myconfiguration  # Nome da configuração CRI correspondente
+```
+
+O nome de um objeto RuntimeClass deve ser um 
+[nome de subdomínio DNS](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names) válido.
+
+{{< note >}}
+É recomendado que operações de escrita no objeto RuntimeClass (criar/atualizar/patch/apagar)
+sejam restritas a administradores do cluster. Isso geralmente é o padrão. Veja [Visão Geral
+de autorizações](/docs/reference/access-authn-authz/authorization/) para maiores detalhes.
+{{< /note >}}
+
+## Uso
+
+Uma vez que as classes de execução estão configuradas no cluster, usar elas é relativamente
+simples. Especifique um `runtimeClassName` na especificação do Pod. Por exemplo:
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: mypod
+spec:
+  runtimeClassName: myclass
+  # ...
+```
+
+Isso irá instruir o kubelet a usar o RuntimeClass nomeado acima (myclass) para esse Pod. Se
+o nome do RuntimeClass não existir, ou o CRI não puder executar a solicitação, o Pod entrará na [fase
+final](/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase) `Failed`. Procure por um 
+[evento](/docs/tasks/debug-application-cluster/debug-application-introspection/) correspondente 
+para uma mensagem de erro.
+
+Se nenhum `runtimeClassName` for especificado, o RuntimeHandler padrão será utilizado, que é equivalente 
+ao comportamento quando a funcionalidade de RuntimeClass está desativada.
+
+### Configuração do CRI
+
+Para maiores detalhes de configuração dos agentes de execução CRI, veja [instalação do CRI](/docs/setup/production-environment/container-runtimes/).
+
+#### dockershim
+
+O CRI dockershim embutido no Kubernetes não suporta outros agentes de execução.
+
+#### {{< glossary_tooltip term_id="containerd" >}}
+
+Agentes de execução são configurados através da configuração do containerd em 
+`/etc/containerd/config.toml`. Agentes válidos são configurados sob a seção de `runtimes`:
+
+```
+[plugins.cri.containerd.runtimes.${HANDLER_NAME}]
+```
+
+Veja a documentação de configuração do containerd para maiores detalhes:
+https://github.com/containerd/cri/blob/master/docs/config.md
+
+#### {{< glossary_tooltip term_id="cri-o" >}}
+
+Agentes de execução são configurados através da configuração do CRI-O em `/etc/crio/crio.conf`. 
+Agentes válidos são configurados na seção [crio.runtime
+table](https://github.com/cri-o/cri-o/blob/master/docs/crio.conf.5.md#crioruntime-table):
+
+```
+[crio.runtime.runtimes.${HANDLER_NAME}]
+  runtime_path = "${PATH_TO_BINARY}"
+```
+
+Veja a [documentação de configuração](https://raw.githubusercontent.com/cri-o/cri-o/9f11d1d/docs/crio.conf.5.md) do CRI-O para maiores detalhes.
+
+## Associação
+
+{{< feature-state for_k8s_version="v1.16" state="beta" >}}
+
+Ao especificar o campo `scheduling` para um RuntimeClass, você pode colocar limites e
+garantir que os Pods executando dentro de uma RuntimeClass sejam associados a nós que 
+suportem eles. Se o `scheduling` não estiver configurado, assume-se que esse RuntimeClass
+é suportado por todos os nós.
+
+Para garantir que os Pods sejam executados em um nó que suporte um RuntimeClass específico, 
+aquele conjunto de nós deve possuir uma marca/label padrão que é selecionado pelo campo 
+`runtimeclass.scheduling.nodeSelector`. O nodeSelector do RuntimeClass é combinado com o 
+nodeSelector do Pod em tempo de admissão, obtendo a intersecção do conjunto de nós selecionado 
+por cada. Se existir um conflito, o pod será rejeitado.
+
+Se os nós suportados possuírem marcação de restrição para prevenir outros Pods com uma 
+classe de execução diferente de executar no nó, você pode adicionar o campo `tolerations` 
+ao objeto RuntimeClass. Assim como com o `nodeSelector`, o `tolerations` é combinado com 
+o campo `tolerations` do Pod em tempo de admissão, efetivamente pegando a intersecção do
+conjunto de nós aplicáveis para cada.
+
+Para saber mais sobre a configuração de seleção de nós e tolerâncias, veja [Associando Pods a 
+Nós](/docs/concepts/scheduling-eviction/assign-pod-node/).
+
+### Sobrecarga de Pods
+
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+
+Você pode especificar os recursos extra que estão associados à execução de um Pod. Declarar esses 
+recursos extra permite ao cluster (incluindo o agendador/scheduler de pods) contabilizar por 
+esses recursos quando estiver decidindo sobre Pods e recursos. Para usar a contabilização 
+desses recursos extras, você deve estar com o [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) 
+PodOverhead habilitado (ele já está habilitado por padrão).
+
+Os recursos extras utilizados são especificados no objeto RuntimeClass através do campo `overhead`.
+Ao usar esses campos, você especifica o uso extra de recursos necessários para executar 
+Pods utilizando-se desse Runtimeclass e assim contabilizar esses recursos para o Kubernetes.
+
+
+## {{% heading "whatsnext" %}}
+
+
+- [RuntimeClass Design](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/585-runtime-class/README.md)
+- [RuntimeClass Scheduling Design](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/585-runtime-class/README.md#runtimeclass-scheduling)
+- Leia mais sobre [Sobrecarga de Pods](/docs/concepts/scheduling-eviction/pod-overhead/)
+- [PodOverhead Feature Design](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/20190226-pod-overhead.md)
diff --git a/content/pt/docs/reference/glossary/containerd.md b/content/pt/docs/reference/glossary/containerd.md
new file mode 100644
index 0000000000..0eee599829
--- /dev/null
+++ b/content/pt/docs/reference/glossary/containerd.md
@@ -0,0 +1,19 @@
+---
+title: containerd
+id: containerd
+date: 2019-05-14
+full_link: https://containerd.io/docs/
+short_description: >
+  Um agente de execução de contêiner com enfase em simplicidade, robustez e portabilidade
+
+aka:
+tags:
+- tool
+---
+ Um agente de execução de contêiner com enfase em simplicidade, robustez e portabilidade
+
+<!--more-->
+
+containerd é um agente de execução de {{< glossary_tooltip text="contêiner" term_id="container" >}} 
+que executa um serviço no Linux ou Windows. containerd é responsável por buscar e
+armazenar as imagens de contêiner, executar contêineres, prover acesso à rede e mais.
diff --git a/content/pt/docs/reference/glossary/cri-o.md b/content/pt/docs/reference/glossary/cri-o.md
new file mode 100644
index 0000000000..37da1679a1
--- /dev/null
+++ b/content/pt/docs/reference/glossary/cri-o.md
@@ -0,0 +1,23 @@
+---
+title: CRI-O
+id: cri-o
+date: 2019-05-14
+full_link: https://cri-o.io/#what-is-cri-o
+short_description: >
+  Um agente de execução leve de contêineres criado especificamente para o Kubernetes
+
+aka:
+tags:
+- tool
+---
+Uma ferramenta que permite você usar agentes de execução de contêineres OCI com o CRI do Kubernetes
+
+<!--more-->
+
+CRI-O é uma implementação do {{< glossary_tooltip term_id="cri" >}}
+que permite usar agentes de execução de  {{< glossary_tooltip text="contêiner" term_id="container" >}}
+compatíveis com as [especificações](https://www.github.com/opencontainers/runtime-spec)  da Open Container Initiative (OCI).
+
+Usar o CRI-O permite ao Kubernetes utilizar-se de qualquer agente de execução compatível
+com o OCI para executar {{< glossary_tooltip text="Pods" term_id="pod" >}}, e obter imagens
+de contêineres de registros remotos.
diff --git a/content/pt/docs/reference/glossary/cri.md b/content/pt/docs/reference/glossary/cri.md
new file mode 100644
index 0000000000..cced4ad430
--- /dev/null
+++ b/content/pt/docs/reference/glossary/cri.md
@@ -0,0 +1,18 @@
+---
+title: Container runtime interface (CRI)
+id: cri
+date: 2019-03-07
+full_link: /docs/concepts/overview/components/#container-runtime
+short_description: >
+    Uma API para agentes de execução de contêineres se integrarem com o kubelet
+
+
+aka:
+tags:
+- fundamental
+---
+A interface de execução de contêiner (CRI) é uma API para agentes de execução de
+contêineres se integrarem com o kubelet em um nó.
+<!--more-->
+
+Para maiores informações, veja as APIs e especificações do [CRI](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-node/container-runtime-interface.md).

From 21f41f2d18b889defe84a36c36e2e222d77250f5 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sun, 4 Apr 2021 22:39:15 +0800
Subject: [PATCH 469/788] updating learning environment minikube.

---
 .../docs/setup/learning-environment/_index.md |  31 ++
 .../setup/learning-environment/minikube.md    | 514 ------------------
 content/id/docs/tutorials/hello-minikube.md   |  16 +-
 static/_redirects                             |   4 +
 4 files changed, 43 insertions(+), 522 deletions(-)
 delete mode 100644 content/id/docs/setup/learning-environment/minikube.md

diff --git a/content/id/docs/setup/learning-environment/_index.md b/content/id/docs/setup/learning-environment/_index.md
index 4c116a9bc0..cdfe637e64 100644
--- a/content/id/docs/setup/learning-environment/_index.md
+++ b/content/id/docs/setup/learning-environment/_index.md
@@ -2,3 +2,34 @@
 title: Lingkungan Pembelajaran
 weight: 20
 ---
+
+## kind
+
+[`kind`](https://kind.sigs.k8s.io/docs/) memberikan kamu kemampuan untuk
+menjalankan Kubernetes pada komputer lokal kamu. Perangkat ini membutuhkan
+[Docker](https://docs.docker.com/get-docker/) yang sudah diinstal dan
+terkonfigurasi.
+
+Halaman [Memulai Cepat](https://kind.sigs.k8s.io/docs/user/quick-start/) `kind`
+memperlihatkan kepada kamu tentang apa yang perlu kamu lakukan agar `kind` dapat
+berjalan dan bekerja.
+
+<a class="btn btn-primary" href="https://kind.sigs.k8s.io/docs/user/quick-start/" role="button" aria-label="Melihat Memulai Cepat Kind">Melihat Memulai Cepat Kind</a>
+
+## minikube
+
+Seperti halnya dengan `kind`, [`minikube`](https://minikube.sigs.k8s.io/) 
+merupakan perangkat yang memungkinkan kamu untuk menjalankan Kubernetes
+secara lokal. `minikube` menjalankan sebuah klaster Kubernetes dengan
+satu node saja dalam komputer pribadi (termasuk Windows, macOS dan Linux)
+sehingga kamu dapat mencoba Kubernetes atau untuk pekerjaan pengembangan
+sehari-hari.
+
+Kamu bisa mengikuti petunjuk resmi
+[Memulai!](https://minikube.sigs.k8s.io/docs/start/) 
+`minikube` jika kamu ingin fokus agar perangkat ini terinstal.
+
+<a class="btn btn-primary" href="https://minikube.sigs.k8s.io/docs/start/" role="button" aria-label="Lihat Panduan Memulai! Minikube">Lihat Panduan Memulai! Minikube</a>
+
+Setelah kamu memiliki `minikube` yang bekerja, kamu bisa menggunakannya
+untuk [menjalankan aplikasi contoh](/id/docs/tutorials/hello-minikube/).
diff --git a/content/id/docs/setup/learning-environment/minikube.md b/content/id/docs/setup/learning-environment/minikube.md
deleted file mode 100644
index 8729968738..0000000000
--- a/content/id/docs/setup/learning-environment/minikube.md
+++ /dev/null
@@ -1,514 +0,0 @@
----
-title: Instalasi Kubernetes dengan Minikube
-weight: 30
-content_type: concept
----
-
-<!-- overview -->
-
-Minikube adalah alat yang memudahkan untuk menjalankan Kubernetes pada komputer lokal. Minikube menjalankan satu Node klaster Kubernetes di dalam _Virtual Machine_ (VM) pada laptop kamu untuk pengguna yang ingin mencoba Kubernetes atau mengembangkannya.
-
-
-<!-- body -->
-
-## Fitur Minikube
-
-Minikube mendukung fitur Kubernetes berikut:
-
-* DNS
-* NodePort
-* {{< glossary_tooltip text="ConfigMap" term_id="configmap" >}} dan {< glossary_tooltip text="Secret" term_id="secret" >}}
-* _Dashboard_
-* _Container runtime_: [Docker](https://www.docker.com/), [CRI-O](https://cri-o.io/), dan [containerd](https://github.com/containerd/containerd)
-* {{< glossary_tooltip text="CNI" term_id="cni" >}}
-* Ingress
-
-## Instalasi
-
-Lihat [Instalasi Minikube](/id/docs/tasks/tools/install-minikube/).
-
-## Memulai Cepat
-
-Demonstrasi singkat ini memandu kamu tentang bagaimana memulai, menggunakan dan menghapus Minikube secara lokal. Ikuti langkah berikut untuk memulai dan menjelajahi Minikube.
-
-1. Mulailah Minikube dan buatlah sebuah klaster:
-
-   ```shell
-    minikube start
-   ```
-
-   Keluaran menyerupai:
-
-   ```
-   Starting local Kubernetes cluster...
-   Running pre-create checks...
-   Creating machine...
-   Starting local Kubernetes cluster...
-   ```
-   Untuk informasi lebih lanjut mengenai bagaimana memulai klaster pada versi Kubernetes tertentu, VM atau Container _runtime_, lihatlah [Memulai klaster](#memulai-klaster).
-
-2. Kini kamu bisa berinteraksi dengan klaster kamu dengan kubectl. Untuk informasi lebih lanjut, lihatlah [Interaksi dengan klaster kamu](#interaksi-dengan-klaster-kamu).
-
-   Mari kita buat Kubernetes Deployment menggunakan _image_ bernama `echoserver`, yaitu sebuah server HTTP sederhana dan buka layanan pada porta 8080 dengan menggunakan opsi `--port`.
-
-   ```shell
-   kubectl create deployment hello-minikube --image=k8s.gcr.io/echoserver:1.10
-   ```
-
-   Keluaran menyerupai:
-
-   ```
-   deployment.apps/hello-minikube created
-   ```
-3. Untuk mengakses Deployment `hello-minikube`, bukalah dia sebagai sebuah Service: 
-
-   ```shell
-   kubectl expose deployment hello-minikube --type=NodePort --port=8080
-   ```
-
-   Opsi `--type=NodePort` menentukan tipe Service.
-
-   Keluarannya menyerupai:
-
-   ```
-   service/hello-minikube exposed
-   ```
-
-4. Pod `hello-minikube` saat ini telah dibuat namun kamu harus menunggu hingga Pod selesai dijalankan sebelum dapat mengaksesnya melalui Service yang telah dibuka.
-
-   Cek apakah Pod sudah berjalan dan beroperasi:
-
-   ```shell
-   kubectl get pod
-   ```
-
-   Jika keluaran menampilkan `STATUS` sebagai `ContainerCreating`, maka Pod sedang dalam proses pembuatan:
-
-   ```
-   NAME                              READY     STATUS              RESTARTS   AGE
-   hello-minikube-3383150820-vctvh   0/1       ContainerCreating   0          3s
-   ```
-
-   Jika keluaran menampilkan `STATUS` sebagai `Running`, maka Pod sudah berjalan dan beroperasi:
-
-   ```
-   NAME                              READY     STATUS    RESTARTS   AGE
-   hello-minikube-3383150820-vctvh   1/1       Running   0          13s
-   ```
-
-5. Ambil URL Service yang telah dibuka untuk melihat Service secara detail:
-
-   ```shell
-   minikube service hello-minikube --url
-   ```
-
-6. Untuk melihat detail dari klaster lokal kamu, salin dan tempel URL yang kamu dapatkan dari keluaran pada peramban kamu.
-
-   Keluarannya menyerupai:
-
-   ```
-   Hostname: hello-minikube-7c77b68cff-8wdzq
-
-   Pod Information:
-    -no pod information available-
-
-   Server values:
-    server_version=nginx: 1.13.3 - lua: 10008
-
-   Request Information:
-    client_address=172.17.0.1
-    method=GET
-    real path=/
-    query=
-    request_version=1.1
-    request_scheme=http
-    request_uri=http://192.168.99.100:8080/
-
-   Request Headers:
-        accept=*/*
-        host=192.168.99.100:30674
-        user-agent=curl/7.47.0
-
-   Request Body:
-        -no body in request-
-   ```
-
-   Jika kamu tidak lagi membutuhkan Service dan klaster, maka kamu bisa menghapusnya.
-
-7. Hapuslah Service `hello-minikube`:
-
-   ```shell
-   kubectl delete services hello-minikube
-   ```
-
-   Keluarannya menyerupai:
-
-   ```
-   service "hello-minikube" deleted
-   ```
-
-8. Hapuslah Deployment `hello-minikube`:
-
-   ```shell
-   kubectl delete deployment hello-minikube
-   ```
-
-   Keluarannya menyerupai:
-
-   ```
-   deployment.extensions "hello-minikube" deleted
-   ```
-
-9. Hentikanlah klaster Minikube lokal:
-
-   ```shell
-   minikube stop
-   ```
-
-   Keluarannya menyerupai:
-
-   ```
-   Stopping "minikube"...
-   "minikube" stopped.
-   ```
-
-   Untuk informasi lebih lanjut, lihatlah [Menghentikan Klaster](#menghentikan-klaster).
-
-10. Hapuslah klaster Minikube lokal
-
-    ```shell
-    minikube delete
-    ```
-    Keluarannya menyerupai:
-    ```
-    Deleting "minikube" ...
-    The "minikube" cluster has been deleted.
-    ```
-	Untuk informasi lebih lanjut, lihat [Menghapus Klaster](#menghapus-klaster).
-
-## Mengelola Klaster
-
-### Memulai Klaster
-
-Perintah `minikube start` bisa digunakan untuk memulai klaster kamu.
-Perintah ini membuat dan mengonfigurasi sebuah mesin virtual yang menjalankan klaster Kubernetes dengan satu Node.
-Perintah ini juga mengonfigurasi instalasi [kubectl](/id/docs/user-guide/kubectl-overview/) untuk berkomunikasi dengan klaster ini.
-
-{{< note >}}
-Jika kamu menggunakan proksi web, maka kamu harus meneruskan informasi berikut ini ke perintah `minikube start`:
-
-```shell
-https_proxy=<my proxy> minikube start --docker-env http_proxy=<my proxy> --docker-env https_proxy=<my proxy> --docker-env no_proxy=192.168.99.0/24
-```
-Sayangnya, pengaturan dengan _environment variable_ saja tidak berguna.
-
-Minikube juga membuat konteks "minikube", dan menetapkannya sebagai bawaan di kubectl.
-Untuk kembali menggunakan konteks ini, jalankan perintah: `kubectl config use-context minikube`.
-{{< /note >}}
-
-#### Menentukan Versi Kubernetes
-
-Kamu bisa menentukan versi Kubernetes yang digunakan oleh Minikube dengan
-menambahkan `--kubernetes-version` ke perintah `minikube start`. Sebagai 
-contoh, untuk menjalankan versi {{<param "fullversion">}}, kamu akan menjalankan perintah berikut:
-
-```
-minikube start --kubernetes-version {{< param "fullversion" >}}
-```
-#### Menentukan _driver_ VM
-
-Kamu bisa mengubah _driver_ VM dengan menambahkan tanda `--driver=<masukan_nama_driver>` pada `minikube start`.
-Sebagai contoh:
-```shell
-minikube start --driver=<nama_driver>
-```
-
-Minikube mendukung _driver_ berikut ini:
-{{< note >}}
-Lihat [_DRIVER_](https://minikube.sigs.k8s.io/docs/reference/drivers/) untuk detail tentang _driver_ yang didukung dan proses instalasi _plugin_.
-{{< /note >}}
-
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/drivers/docker/)) docker
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/drivers/virtualbox/)) virtualbox 
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/drivers/podman/)) podman (TAHAP EXPERIMEN)
-* vmwarefusion
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/reference/drivers/kvm2/)) kvm2
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/reference/drivers/hyperkit/)) hyperkit
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/reference/drivers/hyperv/)) hyperv
-Perlu diingat bahwa IP dibawah adalah dinamik dan bisa berubah. IP ini bisa diambil dengan `minikube ip`.
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/reference/drivers/vmware/)) vmware (_driver_ VMware terpadu)
-* ([instalasi driver](https://minikube.sigs.k8s.io/docs/reference/drivers/parallels/)) parallels
-* none (menjalankan komponen Kubernetes pada hos dan bukan pada mesin virtual. Kamu harus menjalankan Linux dan harus menginstal {{<glossary_tooltip term_id = "docker">}}.)
-
-{{< caution >}}
-Jika kamu menggunakan _driver_ `none`, beberapa komponen Kubernetes dijalankan sebagai Container istimewa yang memiliki efek samping di luar lingkungan Minikube. Efek samping tersebut berarti bahwa _driver_ `none` tidak direkomendasikan untuk komputer pribadi.
-{{< /caution >}}
-
-#### Memulai klaster pada _runtime_ kontainer alternatif
-Kamu bisa memulai Minikube pada _runtime_ kontainer berikut.
-{{< tabs name="container_runtimes" >}}
-{{% tab name="containerd" %}}
-Untuk menggunakan [containerd](https://github.com/containerd/containerd) sebagai _runtime_ kontainer, jalankan:
-```bash
-minikube start \
-    --network-plugin=cni \
-    --enable-default-cni \
-    --container-runtime=containerd \
-    --bootstrapper=kubeadm
-```
-
-Atau kamu bisa menggunakan versi yang diperpanjang:
-
-```bash
-minikube start \
-    --network-plugin=cni \
-    --enable-default-cni \
-    --extra-config=kubelet.container-runtime=remote \
-    --extra-config=kubelet.container-runtime-endpoint=unix:///run/containerd/containerd.sock \
-    --extra-config=kubelet.image-service-endpoint=unix:///run/containerd/containerd.sock \
-    --bootstrapper=kubeadm
-```
-{{% /tab %}}
-{{% tab name="CRI-O" %}}
-Untuk menggunakan [CRI-O](https://cri-o.io/) sebagain _runtime_ kontainer, jalankan:
-```bash
-minikube start \
-    --network-plugin=cni \
-    --enable-default-cni \
-    --container-runtime=cri-o \
-    --bootstrapper=kubeadm
-```
-Atau kamu bisa menggunakan versi yang diperpanjang:
-
-```bash
-minikube start \
-    --network-plugin=cni \
-    --enable-default-cni \
-    --extra-config=kubelet.container-runtime=remote \
-    --extra-config=kubelet.container-runtime-endpoint=/var/run/crio.sock \
-    --extra-config=kubelet.image-service-endpoint=/var/run/crio.sock \
-    --bootstrapper=kubeadm
-```
-{{% /tab %}}
-{{< /tabs >}}
-
-#### Menggunakan _image_ lokal degan menggunakan kembali _daemon_ Docker
-
-Saat menggunakan sebuah VM untuk Kubernetes, akan lebih baik jika _daemon_ Docker bawaan Minikube digunakan kembali. Menggunakan kembali _daemon_ bawaan membuat kamu tidak perlu membangun registri Docker pada mesin hos kamu dan mengunggah _image_ ke dalamnya. Namun, kamu dapat membangun di dalam _daemon_ Docker yang sama dengan Minikube, yang tentunya dapat mempercepat percobaan lokal.
-
-{{< note >}}
-Pastikan untuk memberi _tag_ pada Docker _image_ kamu dengan sesuatu selain `latest` dan gunakan _tag_ tersebut untuk menarik _image_. Karena `:latest` adalah bawaan, dengan kebijakan penarikan _image_ bawaan, yaitu `Always`, kesalahan penarikan _image_ (`ErrImagePull`) akhirnya dapat terjadi jika kamu tidak memiliki _image_ Docker di register Docker bawaan (biasanya DockerHub).
-{{< /note >}}
-
-Untuk bekerja dengan _daemon_ Docker pada mesin Mac/Linux, jalankan baris terakhir dari `minikube docker-env`.
-
-Kamu sekarang dapat menggunakan Docker di terminal mesin Mac/Linux kamu untuk berkomunikasi dengan _daemon_ Docker di dalam VM Minikube:
-
-```shell
-docker ps
-```
-
-{{< note >}}
-Pada Centos 7, Docker bisa memberikan kesalahan berikut:
-
-```
-Could not read CA certificate "/etc/docker/ca.pem": open /etc/docker/ca.pem: no such file or directory
-```
-
-Kamu bisa memperbaikinya dengan memperbaharui /etc/sysconfig/docker untuk memastikan bahwa lingkungan Minikube dikenali:
-
-```shell
-< DOCKER_CERT_PATH=/etc/docker
----
-> if [ -z "${DOCKER_CERT_PATH}" ]; then
->   DOCKER_CERT_PATH=/etc/docker
-> fi
-```
-{{< /note >}}
-
-### Mengonfigurasi Kubernetes
-
-Minikube memiliki sebuah fitur "pengonfigurasi" yang memperbolehkan pengguna untuk mengkonfigurasi komponen Kubernetes dengan sembarang nilai.
-Untuk menggunakan fitur ini, kamu bisa menggunakan _flag_ `--extra-config` pada perintah `minikube start`.
-
-_Flag_ ini berulang, jadi kamu bisa menggunakannya beberapa kali dengan beberapa nilai yang berbeda untuk mengatur beberapa opsi.
-
-_Flag_ ini menerima sebuah _string_ dalam format `component.key=value`, di mana `component` adalah salah satu _string_ dari list di bawah, `key` adalah nilai dari _struct_ configurasi dan `value` adalah nilai yang digunakan.
-
-Kunci yang valid bisa ditemukan dengan memeriksa dokumentasi `componentconfigs` Kubernetes untuk setiap komponen.
-Berikut adalah dokumentasi untuk setiap konfigurasi yang didukung:
-
-* [kubelet](https://godoc.org/k8s.io/kubernetes/pkg/kubelet/apis/config#KubeletConfiguration)
-* [apiserver](https://godoc.org/k8s.io/kubernetes/cmd/kube-apiserver/app/options#ServerRunOptions)
-* [proxy](https://godoc.org/k8s.io/kubernetes/pkg/proxy/apis/config#KubeProxyConfiguration)
-* [controller-manager](https://godoc.org/k8s.io/kubernetes/pkg/controller/apis/config#KubeControllerManagerConfiguration)
-* [etcd](https://godoc.org/github.com/coreos/etcd/etcdserver#ServerConfig)
-* [scheduler](https://godoc.org/k8s.io/kubernetes/pkg/scheduler/apis/config#KubeSchedulerConfiguration)
-
-#### Contoh
-
-Untuk mengubah pengaturan `MaxPods` menjadi 5 pada Kubelet, gunakan _flag_ ini: `--extra-config=kubelet.MaxPods=5`.
-
-Fitur ini juga mendukung _struct_ yang berulang. Untuk mengubah pengaturan `LeaderElection.LeaderElect` menjadi `true` pada penjadwal, gunakan _flag_: `--extra-config=scheduler.LeaderElection.LeaderElect=true`.
-
-Untuk mengatur `AuthorizationMode` pada `apiserver` menjadi `RBAC`, kamu bisa menggunakan: `--extra-config=apiserver.authorization-mode=RBAC`.
-
-### Menghentikan klaster
-Perintah `minikube stop` bisa digunakan untuk menghentikan klaster kamu.
-Perintah ini menghentikan mesin virtual Minikube, tapi mempertahankan semua status dan data klaster.
-Memulai klaster lagi akan mengembalikannya ke keadaan sebelumnya.
-
-### Menghapus klaster
-Perintah `minikube delete` bisa digunakan untuk menghapus klaster kamu.
-Perintah ini menghentikan dan menghapus mesin virtual Minikube. Tidak ada data atau _state_ yang dipertahankan.
-
-### Memperbaharui Minikube
-Jika kamu menggunakan MacOS dan [Brew Package Manager](https://brew.sh/) sudah terpasang, jalankan:
-
-```shell
-brew update
-brew upgrade minikube
-```
-
-## Interaksi dengan Klaster Kamu
-
-### Kubectl
-
-Perintah `minikube start` membuat sebuah [konteks kubectl](/id/docs/reference/generated/kubectl/kubectl-commands#-em-set-context-em-) yang disebut "minikube".
-Konteks ini menyimpan pengaturan untuk berkomunikasi dengan klaster Minikube kamu.
-
-Minikube menetapkan konteks ini sebagai bawaan secara otomatis, tetapi jika kamu ingin mengubah kembali ke konteks tersebut di kemudian hari, gunakan:
-
-`kubectl config use-context minikube`
-
-Atau berikan konteks untuk setiap perintah seperti ini:
-
-`kubectl get pods --context=minikube`
-
-### Dashboard
-
-Untuk mengakses [Kubernetes Dashboard](/docs/tasks/access-application-cluster/web-ui-dashboard/), gunakan perintah ini pada terminal setelah memulai Minikube untuk mendapatkan alamatnya:
-
-```shell
-minikube dashboard
-```
-
-### Service
-
-Untuk mengakses Service yang dibuka via NodePort, jalankan perintah ini pada terminal setelah memulai Minikube untuk mendapatkan alamat:
-
-```shell
-minikube service [-n NAMESPACE] [--url] NAME
-```
-
-## Jaringan
-
-Mesin virtual Minikube dibuka ke sistem hos melalui alamat IP _host-only_ , yang bisa didapatkan dengan perintah `minikube ip`.
-Seluruh Service dengan jenis `NodePort` bisa diakses melalui alamat IP pada NodePort.
-
-Untuk mementukan NodePort pada Service kamu, kamu bisa menggunakan perintah `kubectl` sebagai berikut:
-
-`kubectl get service $SERVICE --output='jsonpath="{.spec.ports[0].nodePort}"'`
-
-## PersistentVolume
-
-Minikube mendukung [PersistentVolume](/id/docs/concepts/storage/persistent-volumes/) dengan jenis `hostPath`.
-PersistenVolume ini dipetakan ke direktori di dalam mesin virtual Minikube.
-
-Mesin virtual Minikube melakukan _booting_ ke tmpfs, sehingga sebagian besar direktori tidak akan bertahan setelah di _reboot_ (`minikube stop`).
-
-Namun, Minikube diatur untuk mempertahankan berkas yang tersimpan didalam direktori hos berikut:
-
-* `/data`
-* `/var/lib/minikube`
-* `/var/lib/docker`
-
-Ini adalah contoh pengaturan PersistentVolume untuk mempertahankan data di dalam direktori `/data`:
-
-```yaml
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: pv0001
-spec:
-  accessModes:
-    - ReadWriteOnce
-  capacity:
-    storage: 5Gi
-  hostPath:
-    path: /data/pv0001/
-```
-
-## Folder hos yang di _mount_
-Beberapa _driver_ akan memasang folder _hos_ dalam VM sehingga kamu dapat dengan mudah berbagi berkas antara VM dan hos. Saat ini, hal tersebut tidak dapat dikonfigurasi dan berbeda untuk setiap _driver_ dan sistem operasi yang kamu gunakan.
-
-{{< note >}}
-Berbagi folder hos belum diimplementasikan pada _driver_ KVM.
-{{< /note >}}
-
-| Driver | OS | HostFolder | VM |
-| --- | --- | --- | --- |
-| VirtualBox | Linux | /home | /hosthome |
-| VirtualBox | macOS | /Users | /Users |
-| VirtualBox | Windows | C://Users | /c/Users |
-| VMware Fusion | macOS | /Users | /mnt/hgfs/Users |
-| Xhyve | macOS | /Users | /Users |
-
-## Registri Container Pribadi
-
-Untuk mengakses registri Container pribadi, ikuti langkah berikut pada [halaman ini](/id/docs/concepts/containers/images/).
-
-Kami merekomendasi penggunaan `ImagePullSecrets`, tetapi jika kamu ingin mengonfigurasi akses pada virtual mesin Minikube, kamu bisa menempatkan `.dockercfg` pada direktori `/home/docker` atau `config.json` dalam direktori `/home/docker/.docker`.
-
-## Tambahan (_Add-on_)
-
-Supaya Minikube memulai atau memulai kembali kustom tambahan dengan benar, 
-tempatkan tambahan yang ingin kamu jalankan di dalam direktori `~/.minikube/addons`.
-Tambahan dalam folder akan dipindahkan ke virtual mesin Minikube dan dijalankan setiap kali Minikube
-dimulai atau dimulai ulang.
-
-## Menggunakan Minikube dengan Proksi HTTP
-
-Minikube membuat sebuah mesin virtual yang memasukkan Kubernetes dan _daemon_ Docker.
-Ketika Kubernetes berusaha untuk menjadwalkan Container dengan Docker, _daemon_ Docker mungkin membutuhkan
-akses jaringan eksternal untuk menarik Container.
-
-Jika kamu berada di belakang _proxy_ HTTP, kamu mungkin perlu menyediakan Docker dengan pengaturan proksi. 
-Untuk melakukan ini, berikan _environment variable_ yang dibutuhkan sebagai _flag_ pada saat `minikube start`.
-
-Contoh:
-
-```shell
-minikube start --docker-env http_proxy=http://$YOURPROXY:PORT \
-                 --docker-env https_proxy=https://$YOURPROXY:PORT
-```
-
-Jika alamat mesin virtual kamu adalah 192.168.99.100, maka ada kemungkinan pengaturan proksi kamu akan mencegah `kubectl` untuk mencapainya. 
-Untuk melewatkan konfigurasi _proxy_ untuk alamat IP ini, kamu harus memodifikasi pengaturan _no_proxy` kamu. Kamu bisa melakukannya dengan:
-
-```shell
-export no_proxy=$no_proxy,$(minikube ip)
-```
-
-## Masalah yang Diketahui
-
-Fitur yang memerlukan banyak Node tidak akan berfungsi dalam Minikube.
-
-## Desain
-
-Minikube menggunakan [libmachine](https://github.com/docker/machine/tree/master/libmachine) untuk menyediakan mesin virtual, dan [kubeadm](https://github.com/kubernetes/kubeadm) untuk menyediakan klaster Kubernetes.
-
-Untuk info lebih lanjut tentang Minikube, lihat [proposal](https://git.k8s.io/community/contributors/design-proposals/cluster-lifecycle/local-cluster-ux.md).
-
-## Tautan Tambahan
-
-* **Tujuan and Non-Tujuan**: Untuk tujuan dan non-tujuan dari projek Minikube, lihat [roadmap](https://minikube.sigs.k8s.io/docs/contrib/roadmap/).
-* **Petunjuk Pengembangan**: Lihat [Berkontribusi](https://minikube.sigs.k8s.io/docs/contrib/) untuk ikhtisar bagaimana cara mengirimkan _pull request_.
-* **Membangun Minikube**: Untuk instruksi bagaimana membangun atau mengetes Minikube dari sumber kode, lihat [petunjuk membangun](https://minikube.sigs.k8s.io/docs/contrib/building/).
-* **Menambahkan Dependensi Baru**: Untuk instruksi bagaimana menambahkan dependensi baru ke Minikube, lihat [petunjuk penambahan dependensi](https://minikube.sigs.k8s.io/docs/contrib/drivers/).
-* **Menambahkan Addon Baru**: Untuk instruksi bagaimana menambahkan tambahan baru untuk Minikube, lihat [petunjuk menambahkan addon baru](https://minikube.sigs.k8s.io/docs/contrib/addons/).
-* **MicroK8s**: Pengguna Linux yang ingin menghindari penggunaan mesin virtual, bisa mempertimbangkan [MicroK8s](https://microk8s.io/) sebagai alternatif.
-
-## Komunitas
-
-Kontribusi, pertanyaan, dan komentar sangat diharapkan! Pengembang Minikube berkumpul dalam [Slack](https://kubernetes.slack.com) di _channel_ #minikube (dapatkan undangan [di sini](http://slack.kubernetes.io/)). Kami juga memiliki [milis kubernetes-dev Google Groups](https://groups.google.com/forum/#!forum/kubernetes-dev). Jika kamu memposting sesuatu, awali subjek kamu dengan "minikube: ".
diff --git a/content/id/docs/tutorials/hello-minikube.md b/content/id/docs/tutorials/hello-minikube.md
index faba283d89..398c5a3a3f 100644
--- a/content/id/docs/tutorials/hello-minikube.md
+++ b/content/id/docs/tutorials/hello-minikube.md
@@ -15,11 +15,11 @@ card:
 
 <!-- overview -->
 
-Tutorial ini menunjukkan bagaimana caranya menjalankan aplikasi sederhana Node.js Halo Dunia di Kubernetes, dengan [Minikube](/docs/getting-started-guides/minikube) dan Katacoda.
+Tutorial ini menunjukkan bagaimana caranya menjalankan aplikasi sederhana Node.js Halo Dunia di Kubernetes, dengan [`minikube`](/docs/getting-started-guides/minikube) dan Katacoda.
 Katacoda menyediakan <i>environment</i> Kubernetes secara gratis di dalam browser.
 
 {{< note >}}
-Kamupun bisa mengikuti tutorial ini kalau sudah instalasi [Minikube di lokal](/id/docs/tasks/tools/install-minikube/) kamu.
+Kamupun bisa mengikuti tutorial ini kalau sudah instalasi minikube di lokal. Silakan lihat [memulai `minikube`](https://minikube.sigs.k8s.io/docs/start/) untuk instruksi instalasi.
 {{< /note >}}
 
 
@@ -27,7 +27,7 @@ Kamupun bisa mengikuti tutorial ini kalau sudah instalasi [Minikube di lokal](/i
 ## {{% heading "objectives" %}}
 
 
-* Deploy aplikasi halo dunia pada Minikube.
+* Deploy aplikasi halo dunia pada minikube.
 * Jalankan aplikasinya.
 * Melihat log aplikasi.
 
@@ -54,7 +54,7 @@ Untuk info lebih lanjut tentang perintah `docker build`, baca [dokumentasi Docke
 
     {{< kat-button >}}
 
-    {{< note >}}Kalau kamu memilih instalasi Minikube secara lokal,  jalankan `minikube start`.{{< /note >}}
+    {{< note >}}Kalau kamu memilih instalasi minikube secara lokal, jalankan `minikube start`.{{< /note >}}
 
 2. Buka dasbor Kubernetes di dalam browser:
 
@@ -147,7 +147,7 @@ Supaya Kontainer `hello-node` bisa diakses dari luar jaringan virtual Kubernetes
     ```
 
     Untuk penyedia cloud yang memiliki <i>load balancer</i>, sebuah alamat IP eksternal akan disediakan untuk mengakses Servis tersebut.
-    Pada Minikube, tipe `LoadBalancer` membuat Servis tersebut dapat diakses melalui perintah `minikube service`.
+    Pada minikube, tipe `LoadBalancer` membuat Servis tersebut dapat diakses melalui perintah `minikube service`.
 
 3. Jalankan perintah berikut:
 
@@ -163,7 +163,7 @@ Supaya Kontainer `hello-node` bisa diakses dari luar jaringan virtual Kubernetes
 
 ## Aktifkan addons
 
-Minikube punya beberapa <i>addons</i> yang bisa diaktifkan, dinon-aktifkan, maupun dibuka di dalam <i>environment</i> Kubernetes lokal.
+Perangkat minikube meliputi sekumpulan {{< glossary_tooltip text="addons" term_id="addons" >}} bawaan yang bisa diaktifkan, dinonaktifkan, maupun dibuka di dalam <i>environment</i> Kubernetes lokal.
 
 1. Daftar <i>addons</i> yang ada saat ini:
 
@@ -249,13 +249,13 @@ kubectl delete service hello-node
 kubectl delete deployment hello-node
 ```
 
-Kamu juga boleh mematikan mesin virtual (VM) untuk Minikube:
+Kamu juga boleh mematikan mesin virtual atau _virtual machine_ (VM) untuk minikube:
 
 ```shell
 minikube stop
 ```
 
-Kamu juga boleh menghapus Minikube VM:
+Kamu juga boleh menghapus minikube VM:
 
 ```shell
 minikube delete
diff --git a/static/_redirects b/static/_redirects
index db9f04df02..fdc9985dea 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -475,10 +475,14 @@
 /docs/setup/version-skew-policy/     /docs/setup/release/version-skew-policy/   301
 
 /docs/setup/minikube/     /docs/tasks/tools/ 302
+/id/docs/setup/minikube/     /id/docs/tasks/tools/ 302
 /docs/setup/learning-environment/     /docs/tasks/tools/  302!
+/id/docs/setup/learning-environment/     /id/docs/tasks/tools/  302!
 /zh/docs/setup/learning-environment/     /zh/docs/tasks/tools/  302!
 /docs/setup/learning-environment/kind/  /docs/tasks/tools/  302
+/id/docs/setup/learning-environment/kind/  /id/docs/tasks/tools/  302
 /docs/setup/learning-environment/minikube/  /docs/tasks/tools/ 302
+/id/docs/setup/learning-environment/minikube/  /id/docs/tasks/tools/ 302
 /docs/setup/cri/     /docs/setup/production-environment/container-runtimes/   301
 /docs/setup/independent/install-kubeadm/     /docs/setup/production-environment/tools/kubeadm/install-kubeadm/   301
 /ja/docs/setup/independent/install-kubeadm/     /ja/docs/setup/production-environment/tools/kubeadm/install-kubeadm/   301

From c9ca1313551974113804007a75a2974f11d8d82e Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sat, 3 Apr 2021 16:13:50 +0100
Subject: [PATCH 470/788] Tidy docs about EndpointSlice & related features

Co-authored-by: Rey Lejano <52760880+reylejano@users.noreply.github.com>
---
 .../services-networking/endpoint-slices.md    |  2 +-
 .../services-networking/service-topology.md   | 53 +++++++---------
 .../service-traffic-policy.md                 | 37 ++++++-----
 .../topology-aware-hints.md                   | 62 ++++++++++---------
 .../enabling-service-topology.md              | 48 +++++++-------
 .../enabling-topology-aware-hints.md          |  9 +--
 6 files changed, 106 insertions(+), 105 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/endpoint-slices.md b/content/en/docs/concepts/services-networking/endpoint-slices.md
index a398e61d07..fdcbd0ed50 100644
--- a/content/en/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/en/docs/concepts/services-networking/endpoint-slices.md
@@ -3,7 +3,7 @@ reviewers:
 - freehan
 title: EndpointSlices
 content_type: concept
-weight: 35
+weight: 45
 ---
 
 
diff --git a/content/en/docs/concepts/services-networking/service-topology.md b/content/en/docs/concepts/services-networking/service-topology.md
index 4a97074e17..e906dff81d 100644
--- a/content/en/docs/concepts/services-networking/service-topology.md
+++ b/content/en/docs/concepts/services-networking/service-topology.md
@@ -2,12 +2,7 @@
 reviewers:
 - johnbelamaric
 - imroc
-title: Service Topology
-feature:
-  title: Service Topology
-  description: >
-    Routing of service traffic based upon cluster topology.
-
+title: Topology-aware traffic routing with topology keys
 content_type: concept
 weight: 10
 ---
@@ -19,10 +14,10 @@ weight: 10
 
 {{< note >}}
 
-This feature, specifically the alpha topologyKeys API, is deprecated in
-Kubernetes v1.21. [Topology Aware
-Hints](/docs/concepts/services-networking/topology-aware-hints) was introduced
-in Kubernetes v1.21 and provides similar functionality.
+This feature, specifically the alpha `topologyKeys` API, is deprecated since
+Kubernetes v1.21.
+[Topology Aware Hints](/docs/concepts/services-networking/topology-aware-hints/),
+introduced in Kubernetes v1.21, provide similar functionality.
 
 {{</ note >}}
 
@@ -32,33 +27,32 @@ preferentially routed to endpoints that are on the same Node as the client, or
 in the same availability zone.
 
 
-
 <!-- body -->
 
-## Introduction
+## Topology-aware traffic routing
 
 By default, traffic sent to a `ClusterIP` or `NodePort` Service may be routed to
-any backend address for the Service. Since Kubernetes 1.7 it has been possible
-to route "external" traffic to the Pods running on the Node that received the
-traffic, but this is not supported for `ClusterIP` Services, and more complex
-topologies &mdash; such as routing zonally &mdash; have not been possible. The
-_Service Topology_ feature resolves this by allowing the Service creator to
-define a policy for routing traffic based upon the Node labels for the
-originating and destination Nodes.
-
-By using Node label matching between the source and destination, the operator
-may designate groups of Nodes that are "closer" and "farther" from one another,
-using whatever metric makes sense for that operator's requirements. For many
-operators in public clouds, for example, there is a preference to keep service
-traffic within the same zone, because interzonal traffic has a cost associated
-with it, while intrazonal traffic does not. Other common needs include being able
-to route traffic to a local Pod managed by a DaemonSet, or keeping traffic to
-Nodes connected to the same top-of-rack switch for the lowest latency.
+any backend address for the Service. Kubernetes 1.7 made it possible to
+route "external" traffic to the Pods running on the same Node that received the
+traffic. For `ClusterIP` Services, the equivalent same-node preference for
+routing wasn't possible; nor could you configure your cluster to favor routing
+to endpoints within the same zone.
+By setting `topologyKeys` on a Service, you're able to define a policy for routing
+traffic based upon the Node labels for the originating and destination Nodes.
 
+The label matching between the source and destination lets you, as a cluster
+operator, designate sets of Nodes that are "closer" and "farther" from one another.
+You can define labels to represent whatever metric makes sense for your own
+requirements.
+In public clouds, for example, you might prefer to keep network traffic within the
+same zone, because interzonal traffic has a cost associated with it (and intrazonal
+traffic typically does not). Other common needs include being able to route traffic
+to a local Pod managed by a DaemonSet, or directing traffic to Nodes connected to the
+same top-of-rack switch for the lowest latency.
 
 ## Using Service Topology
 
-If your cluster has Service Topology enabled, you can control Service traffic
+If your cluster has the `ServiceTopology` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) enabled, you can control Service traffic
 routing by specifying the `topologyKeys` field on the Service spec. This field
 is a preference-order list of Node labels which will be used to sort endpoints
 when accessing this Service. Traffic will be directed to a Node whose value for
@@ -209,4 +203,3 @@ spec:
 * Read about [enabling Service Topology](/docs/tasks/administer-cluster/enabling-service-topology)
 * Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
 
-
diff --git a/content/en/docs/concepts/services-networking/service-traffic-policy.md b/content/en/docs/concepts/services-networking/service-traffic-policy.md
index d69610eabc..fb55a3d833 100644
--- a/content/en/docs/concepts/services-networking/service-traffic-policy.md
+++ b/content/en/docs/concepts/services-networking/service-traffic-policy.md
@@ -3,6 +3,7 @@ reviewers:
 - maplain
 title: Service Internal Traffic Policy
 content_type: concept
+weight: 45
 ---
 
 
@@ -19,15 +20,21 @@ cluster. This can help to reduce costs and improve performance.
 
 ## Using Service Internal Traffic Policy
 
-You can enable Internal Traffic Policy for a Service by setting the
-`spec.internalTrafficPolicy` to "Local". This tells kube-proxy to only use node
-local endpoints for cluster internal traffic. Importantly, for pods on nodes with
-no endpoints for a given Service, the Service will behave as if it has zero
-endpoints (for Pods on this node) even if the service does have endpoints on other
-nodes. 
+Once you have enabled the `ServiceInternalTrafficPolicy`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/),
+you can enable an internal-only traffic policy for a
+{{< glossary_tooltip text="Services" term_id="service" >}}, by setting its
+`.spec.internalTrafficPolicy` to `Local`.
+This tells kube-proxy to only use node local endpoints for cluster internal traffic.
 
-The following example shows what a Service looks like when internalTrafficPolicy
-is set to "Local":
+{{< note >}}
+For pods on nodes with no endpoints for a given Service, the Service
+behaves as if it has zero endpoints (for Pods on this node) even if the service
+does have endpoints on other nodes.
+{{< /note >}}
+
+The following example shows what a Service looks like when you set
+`.spec.internalTrafficPolicy` to `Local`:
 
 ```yaml
 apiVersion: v1
@@ -44,19 +51,19 @@ spec:
   internalTrafficPolicy: Local
 ```
 
-## How it Works
+## How it works
 
-kube-proxy filters the endpoints it routes to based on the
-`spec.internalTrafficPolicy` setting. When it's "Local", only node local
-endpoints are considered. When it's "Cluster" or missing, all endpoints are
+The kube-proxy filters the endpoints it routes to based on the
+`spec.internalTrafficPolicy` setting. When it's set to `Local`, only node local
+endpoints are considered. When it's `Cluster` or missing, all endpoints are
 considered.
-When the feature gate `ServiceInternalTrafficPolicy` is on,
-`spec.internalTrafficPolicy` defaults to "Cluster".
+When the [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+`ServiceInternalTrafficPolicy` is enabled, `spec.internalTrafficPolicy` defaults to "Cluster".
 
 ## Constraints
 
 * Service Internal Traffic Policy is not used when `externalTrafficPolicy` is set
-  to "Local" on a Service. It is possible to use both features in the same cluster
+  to `Local` on a Service. It is possible to use both features in the same cluster
   on different Services, just not on the same Service.
 
 ## {{% heading "whatsnext" %}}
diff --git a/content/en/docs/concepts/services-networking/topology-aware-hints.md b/content/en/docs/concepts/services-networking/topology-aware-hints.md
index ef1d3217c8..c2c15878ff 100644
--- a/content/en/docs/concepts/services-networking/topology-aware-hints.md
+++ b/content/en/docs/concepts/services-networking/topology-aware-hints.md
@@ -3,7 +3,7 @@ reviewers:
 - robscott
 title: Topology Aware Hints
 content_type: concept
-weight: 10
+weight: 45
 ---
 
 
@@ -13,9 +13,11 @@ weight: 10
 
 _Topology Aware Hints_ enable topology aware routing by including suggestions
 for how clients should consume endpoints. This approach adds metadata to enable
-consumers of Endpoint(Slice) to be able to route traffic closer to where it is
-originated. For example, users can route traffic within a locality to reduce
-costs and improve performance.
+consumers of EndpointSlice and / or and Endpoints objects, so that traffic to
+those network endpoints can be routed closer to where it originated.
+
+For example, you can route traffic within a locality to reduce
+costs, or to improve network performance.
 
 <!-- body -->
 
@@ -24,26 +26,28 @@ costs and improve performance.
 Kubernetes clusters are increasingly deployed in multi-zone environments.
 _Topology Aware Hints_ provides a mechanism to help keep traffic within the zone
 it originated from. This concept is commonly referred to as "Topology Aware
-Routing". When calculating the endpoints for a Service, the EndpointSlice
-controller considers the topology (region and zone) of each endpoint and
-populates the hints field to allocate it to a zone. These hints are then
-consumed by components like kube-proxy as they configure how requests are
-routed.
+Routing". When calculating the endpoints for a {{< glossary_tooltip term_id="Service" >}},
+the EndpointSlice controller considers the topology (region and zone) of each endpoint
+and populates the hints field to allocate it to a zone.
+Cluster components such as the {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}
+can then consume those hints, and use them to influence how traffic to is routed
+(favoring topologically closer endpoints).
 
 ## Using Topology Aware Hints
 
-You can enable Topology Aware Hints for a Service by setting the
+If you have [enabled](/docs/tasks/administer-cluster/enabling-topology-aware-hints) the
+overall feature, you can activate Topology Aware Hints for a Service by setting the
 `service.kubernetes.io/topology-aware-hints` annotation to `auto`. This tells
 the EndpointSlice controller to set topology hints if it is deemed safe.
 Importantly, this does not guarantee that hints will always be set.
 
-## How it Works
+## How it works {#implementation}
 
 The functionality enabling this feature is split into two components: The
-EndpointSlice controller and Kube-Proxy. This provides a high level overview of
-how each component implements this feature.
+EndpointSlice controller and the kube-proxy. This section provides a high level overview
+of how each component implements this feature.
 
-### EndpointSlice controller
+### EndpointSlice controller {#implementation-control-plane}
 
 The EndpointSlice controller is responsible for setting hints on EndpointSlices
 when this feature is enabled. The controller allocates a proportional amount of
@@ -80,29 +84,29 @@ endpoints:
         - name: "zone-a"
 ```
 
-### Kube-Proxy
+### kube-proxy {#implementation-kube-proxy}
 
-Kube-Proxy filters the endpoints it routes to based on the hints set by the
-EndpointSlice controller. In most cases, this means that kube-proxy will route
-to endpoints in the same zone. Sometimes the controller allocates endpoints from
-a different zone to ensure more even distribution of endpoints between zones.
+The kube-proxy component filters the endpoints it routes to based on the hints set by
+the EndpointSlice controller. In most cases, this means that the kube-proxy is able
+to route traffic to endpoints in the same zone. Sometimes the controller allocates endpoints
+from a different zone to ensure more even distribution of endpoints between zones.
 This would result in some traffic being routed to other zones.
 
 ## Safeguards
 
 The Kubernetes control plane and the kube-proxy on each node apply some
 safeguard rules before using Topology Aware Hints. If these don't check out,
-kube-proxy selects endpoints from anywhere in your cluster, regardless of the
+the kube-proxy selects endpoints from anywhere in your cluster, regardless of the
 zone.
 
 1. **Insufficient number of endpoints:** If there are less endpoints than zones
-   in a cluster, the controller will not assign any hints. 
+   in a cluster, the controller will not assign any hints.
 
 2. **Impossible to achieve balanced allocation:** In some cases, it will be
    impossible to achieve a balanced allocation of endpoints among zones. For
    example, if zone-a is twice as large as zone-b, but there are only 2
    endpoints, an endpoint allocated to zone-a may receive twice as much traffic
-   as zone-b. The controller wil not assign hints if it can't get this "expected
+   as zone-b. The controller does not assign hints if it can't get this "expected
    overload" value below an acceptable threshold for each zone. Importantly this
    is not based on real-time feedback. It is still possible for individual
    endpoints to become overloaded.
@@ -113,14 +117,14 @@ zone.
    hints and so kube-proxy does not filter endpoints by zone.
 
 4. **One or more endpoints does not have a zone hint:** When this happens,
-   kube-proxy assumes that a transition from or to Topology Aware Hints is
+   the kube-proxy assumes that a transition from or to Topology Aware Hints is
    underway. Filtering endpoints for a Service in this state would be dangerous
-   so Kube-Proxy falls back to using all endpoints.
+   so the kube-proxy falls back to using all endpoints.
 
-5. **A zone is not represented in hints:** If kube-proxy is unable to find at
-   least one endpoint with a hint targeting the zone it is running in, it will
-   fall back to using endpoints from all zones. This is most likely to happen as
-   a new zone is being added to a cluster.
+5. **A zone is not represented in hints:** If the kube-proxy is unable to find
+   at least one endpoint with a hint targeting the zone it is running in, it falls
+   to using endpoints from all zones. This is most likely to happen as you add
+   a new zone into your existing cluster.
 
 ## Constraints
 
@@ -152,5 +156,5 @@ zone.
 
 ## {{% heading "whatsnext" %}}
 
-* Read about [enabling Topology Aware Hints](/docs/tasks/administer-cluster/enabling-topology-aware-hints)
+* Read about [enabling Topology Aware Hints](/docs/tasks/administer-cluster/enabling-topology-aware-hints/)
 * Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
diff --git a/content/en/docs/tasks/administer-cluster/enabling-service-topology.md b/content/en/docs/tasks/administer-cluster/enabling-service-topology.md
index 6043c9fdec..8fd39a7e50 100644
--- a/content/en/docs/tasks/administer-cluster/enabling-service-topology.md
+++ b/content/en/docs/tasks/administer-cluster/enabling-service-topology.md
@@ -5,55 +5,51 @@ reviewers:
 - imroc
 title: Enabling Service Topology
 content_type: task
+min-kubernetes-server-version: 1.17
 ---
 
 <!-- overview -->
 {{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
 
-This feature, specifically the alpha topologyKeys API, is deprecated in
-Kubernetes v1.21. [Topology Aware
-Hints](/docs/concepts/services-networking/topology-aware-hints) was introduced
-in Kubernetes v1.21 and provides similar functionality.
+This feature, specifically the alpha `topologyKeys` field, is deprecated since
+Kubernetes v1.21.
+[Topology Aware Hints](/docs/concepts/services-networking/topology-aware-hints/),
+introduced in Kubernetes v1.21, provide similar functionality.
+
+_Service Topology_ enables a {{< glossary_tooltip term_id="service">}} to route traffic based upon the Node
+topology of the cluster. For example, a service can specify that traffic be
+preferentially routed to endpoints that are on the same Node as the client, or
+in the same availability zone.
 
 ## {{% heading "prerequisites" %}}
 
   {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
-<!-- steps -->
-
-## Introduction
-
-_Service Topology_ enables a service to route traffic based upon the Node
-topology of the cluster. For example, a service can specify that traffic be
-preferentially routed to endpoints that are on the same Node as the client, or
-in the same availability zone.
-
-## Prerequisites
-
 The following prerequisites are needed in order to enable topology aware service
 routing:
 
-   * Kubernetes 1.17 or later
-   * {{< glossary_tooltip text="Kube-proxy" term_id="kube-proxy" >}} running in iptables mode or IPVS mode
-   * Enable [Endpoint Slices](/docs/concepts/services-networking/endpoint-slices/)
+   * Kubernetes v1.17 or later
+   * Configure {{< glossary_tooltip text="kube-proxy" term_id="kube-proxy" >}} to run in iptables mode or IPVS mode
+
+
+<!-- steps -->
 
 ## Enable Service Topology
 
-{{< feature-state for_k8s_version="v1.17" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
 
-To enable service topology, enable the `ServiceTopology` and `EndpointSlice` feature gate for all Kubernetes components:
+To enable service topology, enable the `ServiceTopology`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for all Kubernetes components:
 
 ```
---feature-gates="ServiceTopology=true,EndpointSlice=true"
+--feature-gates="ServiceTopology=true`
 ```
 
-
 ## {{% heading "whatsnext" %}}
 
-
-* Read about the [Service Topology](/docs/concepts/services-networking/service-topology) concept
-* Read about [Endpoint Slices](/docs/concepts/services-networking/endpoint-slices)
+* Read about [Topology Aware Hints](/docs/concepts/services-networking/topology-aware-hints/), the replacement for the `topologyKeys` field.
+* Read about [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/)
+* Read about the [Service Topology](/docs/concepts/services-networking/service-topology/) concept
 * Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
 
 
diff --git a/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md b/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
index 4222738a4f..919f522c7c 100644
--- a/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
+++ b/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
@@ -10,8 +10,9 @@ min-kubernetes-server-version: 1.21
 {{< feature-state for_k8s_version="v1.21" state="alpha" >}}
 
 _Topology Aware Hints_ enable topology aware routing with topology hints
-included in EndpointSlices. This approach tries to keep traffic close to where
-it originated from. This can result in decreased costs and improved performance.
+included in {{< glossary_tooltip text="EndpointSlices" term_id="endpoint-slice" >}}.
+This approach tries to keep traffic close to where it originated from;
+you might do this to reduce costs, or to improve network performance.
 
 ## {{% heading "prerequisites" %}}
 
@@ -19,13 +20,13 @@ it originated from. This can result in decreased costs and improved performance.
 
 The following prerequisite is needed in order to enable topology aware hints:
 
-* {{< glossary_tooltip text="Kube-proxy" term_id="kube-proxy" >}} running in
+* Configure the {{< glossary_tooltip text="kube-proxy" term_id="kube-proxy" >}} to run in
   iptables mode or IPVS mode
 * Ensure that you have not disabled EndpointSlices
 
 ## Enable Topology Aware Hints
 
-To enable service topology, enable the `TopologyAwareHints` [feature
+To enable service topology hints, enable the `TopologyAwareHints` [feature
 gate](docs/reference/command-line-tools-reference/feature-gates/) for the
 kube-apiserver, kube-controller-manager, and kube-proxy:
 

From 17b5158f2431b9e2dda93de7f396a442db81c95a Mon Sep 17 00:00:00 2001
From: joostas <justas.narbutas@gmail.com>
Date: Mon, 5 Apr 2021 21:11:18 +0300
Subject: [PATCH 471/788] [ru] "kubectl for Docker Users" use "kubectl create
 deployment" command to run pod

Before:
Example runs pod without creating deployment
```sh
kubectl run --image=nginx nginx-app --port=80
```
But later in document mentions:
```
deployment "nginx-app" created
```
After:
Pod is created with deployment. (Aligned with other language examples)
---
 .../reference/kubectl/docker-cli-to-kubectl.md     | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/content/ru/docs/reference/kubectl/docker-cli-to-kubectl.md b/content/ru/docs/reference/kubectl/docker-cli-to-kubectl.md
index 99a9e20d8c..4d834098c6 100644
--- a/content/ru/docs/reference/kubectl/docker-cli-to-kubectl.md
+++ b/content/ru/docs/reference/kubectl/docker-cli-to-kubectl.md
@@ -34,12 +34,20 @@ kubectl:
 
 ```shell
 # запустить под, в котором работает nginx
-kubectl run --image=nginx nginx-app --port=80 --env="DOMAIN=cluster"
+kubectl create deployment --image=nginx nginx-app
 ```
 ```
 deployment "nginx-app" created
 ```
 
+```shell
+# add env to nginx-app
+kubectl set env deployment/nginx-app  DOMAIN=cluster
+```
+```
+deployment.apps/nginx-app env updated
+```
+
 {{< note >}}
 Команды `kubectl` выводят тип и имя созданного или измененного ресурса, который затем может быть использован в последующих командах. После создания объекта Deployment можно открыть новый сервис Service.
 {{< /note >}}
@@ -260,7 +268,7 @@ nginx-app    1/1     1            1           2m
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 ```
 ```
 NAME                         READY     STATUS    RESTARTS   AGE
@@ -274,7 +282,7 @@ deployment "nginx-app" deleted
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 # Return nothing
 ```
 

From c48c5fd3c08dbda0ccd1e12609fe019e8e9cf596 Mon Sep 17 00:00:00 2001
From: Ta-Ching Chen <tachingchen@srcmesh.com>
Date: Tue, 6 Apr 2021 09:45:07 +0800
Subject: [PATCH 472/788] Fix wrong chinese translation

---
 .../production-environment/tools/kubeadm/install-kubeadm.md    | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 3e2b2c63d6..b8279f548d 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -402,8 +402,7 @@ systemctl enable --now kubelet
 
   你必须这么做，直到 kubelet 做出对 SELinux 的支持进行升级为止。
 
-- 你可以保持 SELinux 处于弃用状态，前提是你知道如何配置它，不过这也意味着有些
-  配置是 kubeadm 所不支持的。
+- 如果你知道如何配置 SELinux 则可以将其保持启用状态，但可能需要设定部分 kubeadm 不支持的配置。
 
 {{% /tab %}}
 {{% tab name="无包管理器的情况" %}}

From ca6008c67fb288830bd4c9c621c5ae56d2bc7f30 Mon Sep 17 00:00:00 2001
From: Tabitha Sable <51767484+tabbysable@users.noreply.github.com>
Date: Mon, 5 Apr 2021 22:59:01 -0500
Subject: [PATCH 473/788] Apply suggestions from tallclair

Co-authored-by: Tim Allclair <timallclair@gmail.com>
---
 .../2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md b/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md
index e4a1d67aeb..c65069460a 100644
--- a/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md
+++ b/content/en/blog/_posts/2021-04-06-PodSecurityPolicy-Past-Present-and-Future.md
@@ -27,7 +27,7 @@ First, one or more PodSecurityPolicy resources are created in a cluster to defin
 
 One more important thing to know about PodSecurityPolicy: it’s not the same as [PodSecurityContext](/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context).
 
-A part of the Pod specification, PodSecurityContext is the collection of fields that specify many of the security-relevant settings for a Pod. The security context dictates to the kubelet and container runtime how the Pod should actually be run. In contrast, the PodSecurityPolicy only constrains (or defaults) the values that may be set on the security context.
+A part of the Pod specification, PodSecurityContext (and its per-container counterpart `SecurityContext`) is the collection of fields that specify many of the security-relevant settings for a Pod. The security context dictates to the kubelet and container runtime how the Pod should actually be run. In contrast, the PodSecurityPolicy only constrains (or defaults) the values that may be set on the security context.
 
 The deprecation of PSP does not affect PodSecurityContext in any way.
 
@@ -67,7 +67,7 @@ If you’re making extensive use of the flexibility of PSP with numerous PSPs an
 
 If your use of PSP is relatively simple, with a few policies and straightforward binding to service accounts in each namespace, you will likely find PSP Replacement Policy to be a good match for your needs. Evaluate your PSPs compared to the Kubernetes [Pod Security Standards](/docs/concepts/security/pod-security-standards/) to get a feel for where you’ll be able to use the Restricted, Baseline, and Privileged policies. Please follow along with or contribute to the KEP and subsequent development, and try out the Alpha release of PSP Replacement Policy when it becomes available.
 
-If you’re just beginning your PSP journey, you will save time and effort by keeping it simple. You can approximate the functionality of PSP Replacement Policy today by using the Pod Security Standards’ PSPs. If you set the cluster default by binding a Baseline or Restricted policy to the system:authenticated group, and then make a more-permissive policy available as needed in certain Namespaces [using ServiceAccount bindings](/docs/concepts/policy/pod-security-policy/#run-another-pod), you will avoid many of the PSP pitfalls and have an easy migration to PSP Replacement Policy. If your needs are much more complex than this, your effort is probably better spent adopting one of the more fully-featured external admission controllers mentioned above.
+If you’re just beginning your PSP journey, you will save time and effort by keeping it simple. You can approximate the functionality of PSP Replacement Policy today by using the Pod Security Standards’ PSPs. If you set the cluster default by binding a Baseline or Restricted policy to the `system:serviceaccounts` group, and then make a more-permissive policy available as needed in certain Namespaces [using ServiceAccount bindings](/docs/concepts/policy/pod-security-policy/#run-another-pod), you will avoid many of the PSP pitfalls and have an easy migration to PSP Replacement Policy. If your needs are much more complex than this, your effort is probably better spent adopting one of the more fully-featured external admission controllers mentioned above.
 
 We’re dedicated to making Kubernetes the best container orchestration tool we can, and sometimes that means we need to remove longstanding features to make space for better things to come. When that happens, the Kubernetes deprecation policy ensures you have plenty of time to plan your next move. In the case of PodSecurityPolicy, several options are available to suit a range of needs and use cases. Start planning ahead now for PSP’s eventual removal, and please consider contributing to its replacement! Happy securing!
 

From 2b822af36a4c13cdac1f59d25eacd4f9f2212376 Mon Sep 17 00:00:00 2001
From: Shubham Kuchhal <shubham.kuchhal@india.nec.com>
Date: Tue, 6 Apr 2021 11:07:59 +0530
Subject: [PATCH 474/788] Modified the output when retrieving Secrets.

---
 .../configmap-secret/managing-secret-using-config-file.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
index b405d57baf..b2aace7057 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -131,6 +131,8 @@ The output is similar to:
 
 ```yaml
 apiVersion: v1
+data:
+  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
 kind: Secret
 metadata:
   creationTimestamp: 2018-11-15T20:40:59Z
@@ -139,8 +141,6 @@ metadata:
   resourceVersion: "7225"
   uid: c280ad2e-e916-11e8-98f2-025000000001
 type: Opaque
-data:
-  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
 ```
 
 The commands `kubectl get` and `kubectl describe` avoid showing the contents of a `Secret` by
@@ -168,6 +168,8 @@ Results in the following Secret:
 
 ```yaml
 apiVersion: v1
+data:
+  username: YWRtaW5pc3RyYXRvcg==
 kind: Secret
 metadata:
   creationTimestamp: 2018-11-15T20:46:46Z
@@ -176,8 +178,6 @@ metadata:
   resourceVersion: "7579"
   uid: 91460ecb-e917-11e8-98f2-025000000001
 type: Opaque
-data:
-  username: YWRtaW5pc3RyYXRvcg==
 ```
 
 Where `YWRtaW5pc3RyYXRvcg==` decodes to `administrator`.

From 88275ce3fe3d56912a5382c6f2c5ff0cd847b98f Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 6 Apr 2021 18:17:05 +0900
Subject: [PATCH 475/788] Fix wrong translations

---
 content/ja/docs/tutorials/clusters/apparmor.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/tutorials/clusters/apparmor.md b/content/ja/docs/tutorials/clusters/apparmor.md
index 6f5bd08709..832e684f44 100644
--- a/content/ja/docs/tutorials/clusters/apparmor.md
+++ b/content/ja/docs/tutorials/clusters/apparmor.md
@@ -302,7 +302,7 @@ apparmor.security.beta.kubernetes.io/defaultProfileName: <profile_ref>
 apparmor.security.beta.kubernetes.io/allowedProfileNames: <profile_ref>[,others...]
 ```
 
-defaultProfileNameオプションには、noneが指定された場合にコンテナにデフォルトで適用されるプロファイルを指定します。allowedProfileNamesオプションには、Podコンテナの実行が許可されるプロファイルのリストを指定します。両方のオプションが指定された場合、デフォルトは許可されなければいけません。プロファイルはコンテナ上で同じフォーマットで指定されます。完全な仕様については、[APIリファレンス](#api-reference)を参照してください。
+defaultProfileNameオプションには、何も指定されなかった場合にコンテナにデフォルトで適用されるプロファイルを指定します。allowedProfileNamesオプションには、Podコンテナの実行が許可されるプロファイルのリストを指定します。両方のオプションが指定された場合、デフォルトは許可されなければいけません。プロファイルはコンテナ上で同じフォーマットで指定されます。完全な仕様については、[APIリファレンス](#api-reference)を参照してください。
 
 ### AppArmorの無効化
 
@@ -356,7 +356,7 @@ AppArmorに関する問題をデバッグするには、システムログをチ
 
 ### PodSecurityPolicyアノテーション
 
-noneが与えられたときにコンテナに適用するデフォルトのプロファイルは、以下のように指定します。
+何も指定されな買った場合にコンテナに適用するデフォルトのプロファイルは、以下のように指定します。
 
 * **key**: `apparmor.security.beta.kubernetes.io/defaultProfileName`
 * **value**: 上で説明したプロファイルのリファレンス

From eab8f5361c982068731d8cf341ad9c59b184017d Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 6 Apr 2021 18:19:45 +0900
Subject: [PATCH 476/788] Fix a typo

---
 content/ja/docs/tutorials/clusters/apparmor.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tutorials/clusters/apparmor.md b/content/ja/docs/tutorials/clusters/apparmor.md
index 832e684f44..5ee0201d71 100644
--- a/content/ja/docs/tutorials/clusters/apparmor.md
+++ b/content/ja/docs/tutorials/clusters/apparmor.md
@@ -356,7 +356,7 @@ AppArmorに関する問題をデバッグするには、システムログをチ
 
 ### PodSecurityPolicyアノテーション
 
-何も指定されな買った場合にコンテナに適用するデフォルトのプロファイルは、以下のように指定します。
+何も指定されなかった場合にコンテナに適用するデフォルトのプロファイルは、以下のように指定します。
 
 * **key**: `apparmor.security.beta.kubernetes.io/defaultProfileName`
 * **value**: 上で説明したプロファイルのリファレンス

From 668e47312f9ddf5c1d3962654acdf7d61d7b3d9a Mon Sep 17 00:00:00 2001
From: Rael Garcia <me@rael.io>
Date: Tue, 6 Apr 2021 12:53:59 +0200
Subject: [PATCH 477/788] clean: update spanish owners file

Updates OWNERs file to match `kubernets/org` file updated at https://github.com/kubernetes/org/pull/2522.
---
 OWNERS_ALIASES | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index c31b04d5b0..18e11bcfe9 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -50,11 +50,9 @@ aliases:
     - zparnold
   sig-docs-es-owners: # Admins for Spanish content
     - raelga
-    - alexbrand
+    - electrocucaracha
   sig-docs-es-reviews: # PR reviews for Spanish content
     - raelga
-    - alexbrand
-    # glo-pena
     - electrocucaracha
   sig-docs-fr-owners: # Admins for French content
     - remyleone

From 2aad79cd3d3a66881e2a40762bfed59c8592b963 Mon Sep 17 00:00:00 2001
From: helight <helight@helight.info>
Date: Tue, 6 Apr 2021 20:21:33 +0800
Subject: [PATCH 478/788] fix words

---
 content/zh/docs/concepts/services-networking/endpoint-slices.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/services-networking/endpoint-slices.md b/content/zh/docs/concepts/services-networking/endpoint-slices.md
index c4c80b4e27..bfd8019d3c 100644
--- a/content/zh/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/zh/docs/concepts/services-networking/endpoint-slices.md
@@ -336,7 +336,7 @@ resources to corresponding EndpointSlices.
 ### EndpointSlice 镜像    {#endpointslice-mirroring}
 
 在某些场合，应用会创建定制的 Endpoints 资源。为了保证这些应用不需要并发
-递更改 Endpoints 和 EndpointSlice 资源，集群的控制面将大多数 Endpoints
+的更改 Endpoints 和 EndpointSlice 资源，集群的控制面将大多数 Endpoints
 映射到对应的 EndpointSlice 之上。
 
 <!--

From 81a1865fd58b1b692c88465397f3f7769767e699 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Wed, 7 Apr 2021 00:33:37 +0800
Subject: [PATCH 479/788] moving "assign-pod" and "taint & toleration" into
 scheduling-eviction.

---
 content/id/docs/concepts/architecture/nodes.md |  2 +-
 .../docs/concepts/containers/runtime-class.md  |  2 +-
 .../overview/working-with-objects/labels.md    |  2 +-
 .../assign-pod-node.md                         |  4 ++--
 .../kube-scheduler.md                          |  0
 .../taint-and-toleration.md                    |  0
 .../concepts/services-networking/service.md    |  2 +-
 .../docs/concepts/storage/storage-classes.md   |  6 +++---
 .../workloads/controllers/daemonset.md         |  4 ++--
 content/id/docs/reference/glossary/taint.md    | 18 ++++++++++++++++++
 .../id/docs/reference/glossary/toleration.md   | 17 +++++++++++++++++
 .../tasks/administer-cluster/sysctl-cluster.md |  2 +-
 static/_redirects                              |  2 ++
 13 files changed, 49 insertions(+), 12 deletions(-)
 rename content/id/docs/concepts/{configuration => scheduling-eviction}/assign-pod-node.md (98%)
 rename content/id/docs/concepts/{scheduling => scheduling-eviction}/kube-scheduler.md (100%)
 rename content/id/docs/concepts/{configuration => scheduling-eviction}/taint-and-toleration.md (100%)
 create mode 100644 content/id/docs/reference/glossary/taint.md
 create mode 100644 content/id/docs/reference/glossary/toleration.md

diff --git a/content/id/docs/concepts/architecture/nodes.md b/content/id/docs/concepts/architecture/nodes.md
index a4cae113e6..685d54dddd 100644
--- a/content/id/docs/concepts/architecture/nodes.md
+++ b/content/id/docs/concepts/architecture/nodes.md
@@ -166,7 +166,7 @@ Pada kasus ini, kontroler node berasumsi ada masalah pada jaringan master, dan m
 
 Mulai dari Kubernetes 1.6, kontroler node juga bertanggung jawab untuk melakukan <i>eviction</i> pada pod-pod yang berjalan di atas node dengan <i>taints</i> `NoExecute`, ketika pod-pod tersebut sudah tidak lagi <i>tolerate</i> terhadap <i>taints</i>.
 Sebagai tambahan, hal ini di-nonaktifkan secara <i>default</i> pada fitur alpha, kontroler node bertanggung jawab untuk menambahkan <i>taints</i> yang berhubungan dengan masalah pada node, seperti terputus atau `NotReady`.
-Lihat [dokumentasi ini](/id/docs/concepts/configuration/taint-and-toleration/) untuk bahasan detail tentang <i>taints</i> `NoExecute` dan fitur alpha.
+Lihat [dokumentasi ini](/id/docs/concepts/scheduling-eviction/taint-and-toleration/) untuk bahasan detail tentang <i>taints</i> `NoExecute` dan fitur alpha.
 
 Mulai dari versi 1.8, kontroler node bisa diatur untuk bertanggung jawab pada pembuatan <i>taints</i> yang merepresentasikan node <i>condition</i>.
 Ini merupakan fitur alpha untuk versi 1.8.
diff --git a/content/id/docs/concepts/containers/runtime-class.md b/content/id/docs/concepts/containers/runtime-class.md
index 73252a03e4..539fbb7038 100644
--- a/content/id/docs/concepts/containers/runtime-class.md
+++ b/content/id/docs/concepts/containers/runtime-class.md
@@ -45,7 +45,7 @@ soal bagaimana melakukan konfigurasi untuk implementasi CRI yang kamu miliki.
 Untuk saat ini, RuntimeClass berasumsi bahwa semua _node_ di dalam klaster punya
 konfigurasi yang sama (homogen). Jika ada _node_ yang punya konfigurasi berbeda dari
 yang lain (heterogen), maka perbedaan ini harus diatur secara independen di luar RuntimeClass
-melalui fitur _scheduling_ (lihat [Menempatkan Pod pada Node](/id/docs/concepts/configuration/assign-pod-node/)).
+melalui fitur _scheduling_ (lihat [Menempatkan Pod pada Node](/id/docs/concepts/scheduling-eviction/assign-pod-node/)).
 {{< /note >}}
 
 Seluruh konfigurasi memiliki nama `handler` yang terkait, dijadikan referensi oleh RuntimeClass.
diff --git a/content/id/docs/concepts/overview/working-with-objects/labels.md b/content/id/docs/concepts/overview/working-with-objects/labels.md
index 306edc0bfb..7b4b125062 100644
--- a/content/id/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/id/docs/concepts/overview/working-with-objects/labels.md
@@ -220,6 +220,6 @@ selector:
 #### Memilih kumpulan Node
 
 Salah satu contoh penggunaan pemilihan dengan menggunakan label yaitu untuk membatasi suatu kumpulan Node tertentu yang dapat digunakan oleh Pod.
-Lihat dokumentasi pada [pemilihan Node](/id/docs/concepts/configuration/assign-pod-node/) untuk informasi lebih lanjut.
+Lihat dokumentasi pada [pemilihan Node](/id/docs/concepts/scheduling-eviction/assign-pod-node/) untuk informasi lebih lanjut.
 
 
diff --git a/content/id/docs/concepts/configuration/assign-pod-node.md b/content/id/docs/concepts/scheduling-eviction/assign-pod-node.md
similarity index 98%
rename from content/id/docs/concepts/configuration/assign-pod-node.md
rename to content/id/docs/concepts/scheduling-eviction/assign-pod-node.md
index ee9e8bf2f4..f8654f4276 100644
--- a/content/id/docs/concepts/configuration/assign-pod-node.md
+++ b/content/id/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -114,7 +114,7 @@ Berikut ini contoh dari pod yang menggunakan afinitas node:
 
 Aturan afinitas node tersebut menyatakan pod hanya bisa ditugaskan pada node dengan label yang memiliki kunci `kubernetes.io/e2e-az-name` dan bernilai `e2e-az1` atau `e2e-az2`. Selain itu, dari semua node yang memenuhi kriteria tersebut, mode dengan label dengan kunci `another-node-label-key` and bernilai `another-node-label-value` harus lebih diutamakan.
 
-Kamu dapat meilhat operator `In` digunakan dalam contoh berikut. Sitaksis afinitas node yang baru mendukung operator-operator berikut: `In`, `NotIn`, `Exists`, `DoesNotExist`, `Gt`, `Lt`. Kamu dapat menggunakan `NotIn` dan `DoesNotExist` untuk mewujudkan perilaku node anti-afinitas, atau menggunakan [node taints](/id/docs/concepts/configuration/taint-and-toleration/) untuk menolak pod dari node tertentu.
+Kamu dapat meilhat operator `In` digunakan dalam contoh berikut. Sitaksis afinitas node yang baru mendukung operator-operator berikut: `In`, `NotIn`, `Exists`, `DoesNotExist`, `Gt`, `Lt`. Kamu dapat menggunakan `NotIn` dan `DoesNotExist` untuk mewujudkan perilaku node anti-afinitas, atau menggunakan [node taints](/id/docs/concepts/scheduling-eviction/taint-and-toleration/) untuk menolak pod dari node tertentu.
 
 Jika kamu menyatakan `nodeSelector` dan `nodeAffinity`. *keduanya* harus dipenuhi agar pod dapat dijadwalkan pada node kandidat.
 
@@ -284,7 +284,7 @@ Lihat [tutorial ZooKeeper](/docs/tutorials/stateful-application/zookeeper/#toler
 
 Untuk informasi lebih lanjut tentang afinitas/anti-afinitas antar pod, lihat [design doc](https://git.k8s.io/community/contributors/design-proposals/scheduling/podaffinity.md).
 
-Kamu juga dapat mengecek [Taints](/id/docs/concepts/configuration/taint-and-toleration/), yang memungkinkan sebuah *node* untuk *menolak* sekumpulan pod.
+Kamu juga dapat mengecek [Taints](/id/docs/concepts/scheduling-eviction/taint-and-toleration/), yang memungkinkan sebuah *node* untuk *menolak* sekumpulan pod.
 
 ## nodeName
 
diff --git a/content/id/docs/concepts/scheduling/kube-scheduler.md b/content/id/docs/concepts/scheduling-eviction/kube-scheduler.md
similarity index 100%
rename from content/id/docs/concepts/scheduling/kube-scheduler.md
rename to content/id/docs/concepts/scheduling-eviction/kube-scheduler.md
diff --git a/content/id/docs/concepts/configuration/taint-and-toleration.md b/content/id/docs/concepts/scheduling-eviction/taint-and-toleration.md
similarity index 100%
rename from content/id/docs/concepts/configuration/taint-and-toleration.md
rename to content/id/docs/concepts/scheduling-eviction/taint-and-toleration.md
diff --git a/content/id/docs/concepts/services-networking/service.md b/content/id/docs/concepts/services-networking/service.md
index 5136a00415..3c85c5abbf 100644
--- a/content/id/docs/concepts/services-networking/service.md
+++ b/content/id/docs/concepts/services-networking/service.md
@@ -745,7 +745,7 @@ dan tidak akan menerima trafik apa pun.
 
 Untuk menghasilkan distribusi trafik yang merata, kamu dapat menggunakan
 _DaemonSet_ atau melakukan spesifikasi
-[pod anti-affinity](/id/docs/concepts/configuration/assign-pod-node/#inter-pod-affinity-and-anti-affinity-beta-feature)
+[pod anti-affinity](/id/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity-beta-feature)
 agar `Pod` tidak di-_assign_ ke _node_ yang sama.
 
 NLB juga dapat digunakan dengan anotasi [internal load balancer](/id/docs/concepts/services-networking/service/#internal-load-balancer).
diff --git a/content/id/docs/concepts/storage/storage-classes.md b/content/id/docs/concepts/storage/storage-classes.md
index 2897399e80..c5fc71a8de 100644
--- a/content/id/docs/concepts/storage/storage-classes.md
+++ b/content/id/docs/concepts/storage/storage-classes.md
@@ -149,10 +149,10 @@ PersistentVolumeClaim dibuat. PersistentVolume akan dipilih atau di-_provisionin
 sesuai dengan topologi yang dispesifikasikan oleh limitasi yang diberikan
 oleh mekanisme _scheduling_ Pod. Hal ini termasuk, tetapi tidak hanya terbatas pada,
 [persyaratan sumber daya](/id/docs/concepts/configuration/manage-compute-resources-container),
-[_node selector_](/id/docs/concepts/configuration/assign-pod-node/#nodeselector),
+[_node selector_](/id/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector),
 [afinitas dan
-anti-afinitas Pod](/id/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity),
-serta [_taint_ dan _toleration_](/id/docs/concepts/configuration/taint-and-toleration).
+anti-afinitas Pod](/id/docs/concepts/scheduling-evictionassign-pod-node/#affinity-and-anti-affinity),
+serta [_taint_ dan _toleration_](/id/docs/concepts/scheduling-eviction/taint-and-toleration).
 
 Beberapa _plugin_ di bawah ini mendukung `WaitForFirstConsumer` dengan _provisioning_
 dinamis:
diff --git a/content/id/docs/concepts/workloads/controllers/daemonset.md b/content/id/docs/concepts/workloads/controllers/daemonset.md
index 0b1c0e71e9..905a0a193a 100644
--- a/content/id/docs/concepts/workloads/controllers/daemonset.md
+++ b/content/id/docs/concepts/workloads/controllers/daemonset.md
@@ -97,8 +97,8 @@ membuat Pod dengan nilai yang berbeda di sebuah Node untuk _testing_.
 
 Jika kamu menspesifikasikan `.spec.template.spec.nodeSelector`, maka _controller_ DaemonSet akan
 membuat Pod pada Node yang cocok dengan [selektor
-Node](/id/docs/concepts/configuration/assign-pod-node/). Demikian juga, jika kamu menspesifikasikan `.spec.template.spec.affinity`,
-maka _controller_ DaemonSet akan membuat Pod pada Node yang cocok dengan [Node affinity](/id/docs/concepts/configuration/assign-pod-node/).
+Node](/id/docs/concepts/scheduling-eviction/assign-pod-node/). Demikian juga, jika kamu menspesifikasikan `.spec.template.spec.affinity`,
+maka _controller_ DaemonSet akan membuat Pod pada Node yang cocok dengan [Node affinity](/id/docs/concepts/scheduling-eviction/assign-pod-node/).
 Jika kamu tidak menspesifikasikan sama sekali, maka _controller_ DaemonSet akan
 membuat Pod pada semua Node.
 
diff --git a/content/id/docs/reference/glossary/taint.md b/content/id/docs/reference/glossary/taint.md
new file mode 100644
index 0000000000..1545a025fd
--- /dev/null
+++ b/content/id/docs/reference/glossary/taint.md
@@ -0,0 +1,18 @@
+---
+title: Taint
+id: taint
+date: 2019-01-11
+full_link: /id/docs/concepts/scheduling-eviction/taint-and-toleration/
+short_description: >
+  Objek inti yang terdiri dari tiga properti yang diperlukan: _key_(kunci), _value_(nilai), dan _effect_(efek). Taint mencegah penjadwalan Pod pada Node atau grup Node.
+
+aka:
+tags:
+- core-object
+- fundamental
+---
+  Objek inti yang terdiri dari tiga properti yang diperlukan: _key_(kunci), _value_(nilai), dan _effect_(efek). Taint mencegah penjadwalan {{< glossary_tooltip text="Pod" term_id="pod" >}} pada {{< glossary_tooltip text="Node" term_id="node" >}} atau grup dari Node.
+
+<!--more-->
+
+Taint dan {{< glossary_tooltip text="toleransi" term_id="toleration" >}} bekerja sama untuk memastikan bahwa Pod tidak dijadwalkan ke Node yang tidak sesuai. Satu atau lebih taint dapat diterapkan pada Node. Sebuah Node seharusnya hanya menjadwalkan Pod dengan toleransi yang cocok untuk taint yang dikonfigurasi.
diff --git a/content/id/docs/reference/glossary/toleration.md b/content/id/docs/reference/glossary/toleration.md
new file mode 100644
index 0000000000..45a2ac7f7c
--- /dev/null
+++ b/content/id/docs/reference/glossary/toleration.md
@@ -0,0 +1,17 @@
+---
+title: Toleransi (Toleration)
+id: toleration
+date: 2019-01-11
+full_link: /docs/concepts/scheduling-eviction/taint-and-toleration/
+short_description: >
+  Objek inti yang terdiri dari tiga properti yang diperlukan: _key_(kunci), _value_(nilai), dan _effect_(efek). Toleransi memungkinkan penjadwalan Pod pada Node atau grup dari Node yang memiliki taint yang cocok.
+aka:
+tags:
+- core-object
+- fundamental
+---
+  Objek inti yang terdiri dari tiga properti yang diperlukan: _key_(kunci), _value_(nilai), dan _effect_(efek). Toleransi memungkinkan penjadwalan Pod pada Node atau grup dari Node yang memiliki {{< glossary_tooltip text="taints" term_id="taint" >}} yang cocok.
+
+<!--more-->
+
+Toleransi dan {{< glossary_tooltip text="taints" term_id="taint" >}} bekerja sama untuk memastikan bahwa Pod tidak dijadwalkan ke Node yang tidak sesuai. Satu atau lebih taint dapat diterapkan pada Node. Sebuah Node seharusnya hanya menjadwalkan Pod dengan toleransi yang cocok untuk taint yang dikonfigurasi.
diff --git a/content/id/docs/tasks/administer-cluster/sysctl-cluster.md b/content/id/docs/tasks/administer-cluster/sysctl-cluster.md
index 9adbb50a9f..7120f087fa 100644
--- a/content/id/docs/tasks/administer-cluster/sysctl-cluster.md
+++ b/content/id/docs/tasks/administer-cluster/sysctl-cluster.md
@@ -156,7 +156,7 @@ Sangat disarankan untuk menggunakan Kubernetes [fitur _taints and toleration_](/
 Pod dengan sysctl _unsafe_ akan gagal diluncurkan pada sembarang Node yang belum
 mengaktifkan kedua sysctl _unsafe_ secara eksplisit. Seperti halnya sysctl _node-level_ sangat
 disarankan untuk menggunakan [fitur _taints and toleration_](/docs/reference/generated/kubectl/kubectl-commands/#taint) atau
-[pencemaran dalam Node](/docs/concepts/scheduling-eviction/taint-and-toleration/)
+[pencemaran dalam Node](/id/docs/concepts/scheduling-eviction/taint-and-toleration/)
 untuk Pod dalam Node yang tepat.
 
 ## PodSecurityPolicy
diff --git a/static/_redirects b/static/_redirects
index db9f04df02..345c2707ca 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -99,6 +99,7 @@
 /docs/concepts/cluster-administration/static-pod/     /docs/tasks/administer-cluster/static-pod/ 301
 /docs/concepts/clusters/logging/     /docs/concepts/cluster-administration/logging/ 301
 /docs/concepts/configuration/assign-pod-node/     /docs/concepts/scheduling-eviction/assign-pod-node/ 301
+/id/docs/concepts/configuration/assign-pod-node/     /id/docs/concepts/scheduling-eviction/assign-pod-node/ 301
 /docs/concepts/configuration/container-command-arg/     /docs/tasks/inject-data-application/define-command-argument-container/ 301
 /docs/concepts/configuration/container-command-args/     /docs/tasks/inject-data-application/define-command-argument-container/     301
 /docs/concepts/configuration/manage-compute-resources-container/ /docs/concepts/configuration/manage-resources-containers/ 301
@@ -106,6 +107,7 @@
 /docs/concepts/configuration/scheduler-perf-tuning/      /docs/concepts/scheduling-eviction/scheduler-perf-tuning/    301
 /docs/concepts/configuration/scheduling-framework/     /docs/concepts/scheduling-eviction/scheduling-framework/    301
 /docs/concepts/configuration/taint-and-toleration/     /docs/concepts/scheduling-eviction/taint-and-toleration/ 301
+/id/docs/concepts/configuration/taint-and-toleration/     /id/docs/concepts/scheduling-eviction/taint-and-toleration/ 301
 /docs/concepts/extend-kubernetes/extend-cluster/      /docs/concepts/extend-kubernetes/ 301
 /docs/concepts/jobs/cron-jobs/     /docs/concepts/workloads/controllers/cron-jobs/ 301
 /docs/concepts/jobs/run-to-completion-finite-workloads/      /docs/concepts/workloads/controllers/job/ 301

From c854d9e027708a087bf1b796033d70797c87e6c2 Mon Sep 17 00:00:00 2001
From: Zach Corleissen <zacharysarah@users.noreply.github.com>
Date: Tue, 6 Apr 2021 11:32:36 -0700
Subject: [PATCH 480/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index b81c13a7f0..682489b227 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -1,7 +1,7 @@
 ---
 layout: blog
 title: 'Annotating Kubernetes Services for Humans'
-date: 2021-02-27
+date: 2021-04-06
 slug: annotating-k8s-for-humans
 ---
 

From 1ecc9948aa661c9f7140cfdacc75fbf410e36acc Mon Sep 17 00:00:00 2001
From: Zach Corleissen <zacharysarah@users.noreply.github.com>
Date: Tue, 6 Apr 2021 11:32:45 -0700
Subject: [PATCH 481/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index 682489b227..2c28c00cb6 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -94,6 +94,6 @@ Historically, service catalogs have not been a key piece of infrastructure, as a
 ## Annotate your services now and thank yourself later
 Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Don't wait until something is on fire in production to start wishing you had implemented better metrics and also documented how to get in touch with the part of your organization that looks after it.
 
-There's enormous benefits to building an effective “[version 0](https://www.getambassador.io/learn/kubernetes-glossary/version-0/)” of any service: a “[dancing skeleton](https://containerjournal.com/topics/container-management/dancing-skeleton-apis-and-microservices/)” application with a thin slice of complete functionality that can be deployed to production with a minimal yet effective continuous delivery pipeline. 
+There's enormous benefits to building an effective [version 0](https://www.getambassador.io/learn/kubernetes-glossary/version-0/) of any service: a “[dancing skeleton](https://containerjournal.com/topics/container-management/dancing-skeleton-apis-and-microservices/)” application with a thin slice of complete functionality that can be deployed to production with a minimal yet effective continuous delivery pipeline. 
 
 Adding service annotations should be an essential part of your “version 0” for all of your services. Add them now, and you’ll thank yourself later.

From 8dbf6671db5df59b06efb25bb159463d8d713e24 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 6 Apr 2021 19:39:36 +0100
Subject: [PATCH 482/788] Omit API reference updates for v1.21

Omitting this merge to make it easier to merge in from primary branch
and back in to the same primary branch.
---
 .../self-subject-rules-review-v1.md           |   26 +-
 .../cluster-resources/event-v1.md             |    7 +-
 .../cluster-resources/flow-schema-v1beta1.md  |  102 +-
 .../cluster-resources/node-v1.md              |  108 +-
 .../priority-level-configuration-v1beta1.md   |   24 +-
 .../cluster-resources/runtime-class-v1.md     |   20 +-
 .../downward-api-volume-file.md               |   40 +
 .../common-definitions/exec-action.md         |   28 +
 .../common-definitions/http-get-action.md     |   58 +
 .../common-definitions/json-schema-props.md   |  226 ++
 .../common-definitions/key-to-path.md         |   36 +
 .../common-definitions/label-selector.md      |    2 +-
 .../common-definitions/list-meta.md           |    2 +-
 .../local-object-reference.md                 |    2 +-
 .../common-definitions/node-affinity.md       |   72 +
 .../node-selector-requirement.md              |    2 +-
 .../object-field-selector.md                  |    2 +-
 .../common-definitions/object-meta.md         |    2 +-
 .../common-definitions/object-reference.md    |    2 +-
 .../common-definitions/patch.md               |    2 +-
 .../common-definitions/pod-affinity.md        |   73 +
 .../common-definitions/pod-anti-affinity.md   |   73 +
 .../common-definitions/quantity.md            |    2 +-
 .../resource-field-selector.md                |    2 +-
 .../common-definitions/status.md              |   22 +-
 .../common-definitions/tcp-socket-action.md   |   35 +
 .../typed-local-object-reference.md           |    2 +-
 .../config-map-v1.md                          |    2 +-
 .../csi-driver-v1.md                          |   18 +-
 .../csi-node-v1.md                            |    4 +-
 .../csi-storage-capacity-v1beta1.md           |  566 ----
 .../persistent-volume-claim-v1.md             |    4 +-
 .../persistent-volume-v1.md                   |  241 +-
 .../config-and-storage-resources/secret-v1.md |    4 +-
 .../storage-class-v1.md                       |    8 +-
 .../volume-attachment-v1.md                   |    2 +-
 .../config-and-storage-resources/volume.md    |  221 +-
 .../custom-resource-definition-v1.md          |  352 +--
 .../mutating-webhook-configuration-v1.md      |   90 +-
 .../validating-webhook-configuration-v1.md    |   90 +-
 .../policies-resources/_index.md              |    4 +
 .../limit-range-v1.md                         |   28 +-
 .../network-policy-v1.md                      |  124 +-
 .../pod-disruption-budget-v1beta1.md}         |  125 +-
 .../pod-security-policy-v1beta1.md            |   78 +-
 .../resource-quota-v1.md                      |   54 +-
 .../kubernetes-api/policy-resources/_index.md |    4 -
 .../service-resources/_index.md               |    4 -
 .../services-resources/_index.md              |    4 +
 .../endpoint-slice-v1beta1.md}                |  101 +-
 .../endpoints-v1.md                           |   72 +-
 .../ingress-class-v1.md                       |   49 +-
 .../ingress-v1.md                             |  240 +-
 .../service-v1.md                             |   92 +-
 .../workload-resources/_index.md              |    4 -
 .../workload-resources/pod-v1.md              | 2631 -----------------
 .../workloads-resources/_index.md             |    4 +
 .../workloads-resources/container.md          |  774 +++++
 .../controller-revision-v1.md                 |   26 +-
 .../cron-job-v1beta1.md}                      |   91 +-
 .../workloads-resources/cron-job-v2alpha1.md  |  746 +++++
 .../daemon-set-v1.md                          |   57 +-
 .../deployment-v1.md                          |   58 +-
 .../ephemeral-container.md}                   |  426 ++-
 .../horizontal-pod-autoscaler-v1.md           |   40 +-
 .../horizontal-pod-autoscaler-v2beta2.md      |  472 +--
 .../job-v1.md                                 |   68 +-
 .../pod-template-v1.md                        |   34 +-
 .../workloads-resources/pod-v1.md             | 1270 ++++++++
 .../priority-class-v1.md                      |   24 +-
 .../replica-set-v1.md                         |   42 +-
 .../replication-controller-v1.md              |   42 +-
 .../stateful-set-v1.md                        |   46 +-
 73 files changed, 5109 insertions(+), 5299 deletions(-)
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
 create mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
 create mode 100644 content/en/docs/reference/kubernetes-api/policies-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{policy-resources => policies-resources}/limit-range-v1.md (89%)
 rename content/en/docs/reference/kubernetes-api/{policy-resources => policies-resources}/network-policy-v1.md (65%)
 rename content/en/docs/reference/kubernetes-api/{policy-resources/pod-disruption-budget-v1.md => policies-resources/pod-disruption-budget-v1beta1.md} (70%)
 rename content/en/docs/reference/kubernetes-api/{policy-resources => policies-resources}/pod-security-policy-v1beta1.md (86%)
 rename content/en/docs/reference/kubernetes-api/{policy-resources => policies-resources}/resource-quota-v1.md (83%)
 delete mode 100644 content/en/docs/reference/kubernetes-api/policy-resources/_index.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/service-resources/_index.md
 create mode 100644 content/en/docs/reference/kubernetes-api/services-resources/_index.md
 rename content/en/docs/reference/kubernetes-api/{service-resources/endpoint-slice-v1.md => services-resources/endpoint-slice-v1beta1.md} (75%)
 rename content/en/docs/reference/kubernetes-api/{service-resources => services-resources}/endpoints-v1.md (78%)
 rename content/en/docs/reference/kubernetes-api/{service-resources => services-resources}/ingress-class-v1.md (79%)
 rename content/en/docs/reference/kubernetes-api/{service-resources => services-resources}/ingress-v1.md (71%)
 rename content/en/docs/reference/kubernetes-api/{service-resources => services-resources}/service-v1.md (85%)
 delete mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/_index.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
 create mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
 create mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/container.md
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/controller-revision-v1.md (89%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources/cron-job-v1.md => workloads-resources/cron-job-v1beta1.md} (81%)
 create mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/daemon-set-v1.md (78%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/deployment-v1.md (81%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources/ephemeral-containers-v1.md => workloads-resources/ephemeral-container.md} (58%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/horizontal-pod-autoscaler-v1.md (85%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/horizontal-pod-autoscaler-v2beta2.md (56%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/job-v1.md (79%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/pod-template-v1.md (86%)
 create mode 100644 content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/priority-class-v1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/replica-set-v1.md (88%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/replication-controller-v1.md (86%)
 rename content/en/docs/reference/kubernetes-api/{workload-resources => workloads-resources}/stateful-set-v1.md (89%)

diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
index a890598ddf..aa3d95332b 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
@@ -51,13 +51,13 @@ SelfSubjectRulesReview enumerates the set of actions the current user can perfor
     <a name="NonResourceRule"></a>
     *NonResourceRule holds information that describes a rule for the non-resource*
 
-    - **status.nonResourceRules.verbs** ([]string), required
+  - **status.nonResourceRules.verbs** ([]string), required
 
-      Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
+    Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
 
-    - **status.nonResourceRules.nonResourceURLs** ([]string)
+  - **status.nonResourceRules.nonResourceURLs** ([]string)
 
-      NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
+    NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
 
   - **status.resourceRules** ([]ResourceRule), required
 
@@ -66,22 +66,22 @@ SelfSubjectRulesReview enumerates the set of actions the current user can perfor
     <a name="ResourceRule"></a>
     *ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.*
 
-    - **status.resourceRules.verbs** ([]string), required
+  - **status.resourceRules.verbs** ([]string), required
 
-      Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
+    Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
 
-    - **status.resourceRules.apiGroups** ([]string)
+  - **status.resourceRules.apiGroups** ([]string)
 
-      APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
+    APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
 
-    - **status.resourceRules.resourceNames** ([]string)
+  - **status.resourceRules.resourceNames** ([]string)
 
-      ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
+    ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
 
-    - **status.resourceRules.resources** ([]string)
+  - **status.resourceRules.resources** ([]string)
 
-      Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
-       "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
+    Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
+     "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
 
   - **status.evaluationError** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
index cf321c1f44..065cf5a7e7 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
@@ -26,10 +26,6 @@ Event is a report of an event somewhere in the cluster. It generally denotes som
 - **kind**: Event
 
 
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
 - **eventTime** (MicroTime), required
 
   eventTime is the time when this Event was first observed. It is required.
@@ -37,6 +33,9 @@ Event is a report of an event somewhere in the cluster. It generally denotes som
   <a name="MicroTime"></a>
   *MicroTime is version of Time with microsecond level precision.*
 
+- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>), required
+
+
 - **action** (string)
 
   action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field cannot be empty for new Events and it can have at most 128 characters.
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
index 0c221dea87..8f94555ee2 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
@@ -92,43 +92,43 @@ FlowSchemaSpec describes how the FlowSchema's specification looks like.
     <a name="Subject"></a>
     *Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.*
 
-    - **rules.subjects.kind** (string), required
+  - **rules.subjects.kind** (string), required
 
-      Required
+    Required
 
-    - **rules.subjects.group** (GroupSubject)
+  - **rules.subjects.group** (GroupSubject)
 
 
-      <a name="GroupSubject"></a>
-      *GroupSubject holds detailed information for group-kind subject.*
+    <a name="GroupSubject"></a>
+    *GroupSubject holds detailed information for group-kind subject.*
 
-      - **rules.subjects.group.name** (string), required
+  - **rules.subjects.group.name** (string), required
 
-        name is the user group that matches, or "*" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.
+    name is the user group that matches, or "*" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.
 
-    - **rules.subjects.serviceAccount** (ServiceAccountSubject)
+  - **rules.subjects.serviceAccount** (ServiceAccountSubject)
 
 
-      <a name="ServiceAccountSubject"></a>
-      *ServiceAccountSubject holds detailed information for service-account-kind subject.*
+    <a name="ServiceAccountSubject"></a>
+    *ServiceAccountSubject holds detailed information for service-account-kind subject.*
 
-      - **rules.subjects.serviceAccount.name** (string), required
+  - **rules.subjects.serviceAccount.name** (string), required
 
-        `name` is the name of matching ServiceAccount objects, or "*" to match regardless of name. Required.
+    `name` is the name of matching ServiceAccount objects, or "*" to match regardless of name. Required.
 
-      - **rules.subjects.serviceAccount.namespace** (string), required
+  - **rules.subjects.serviceAccount.namespace** (string), required
 
-        `namespace` is the namespace of matching ServiceAccount objects. Required.
+    `namespace` is the namespace of matching ServiceAccount objects. Required.
 
-    - **rules.subjects.user** (UserSubject)
+  - **rules.subjects.user** (UserSubject)
 
 
-      <a name="UserSubject"></a>
-      *UserSubject holds detailed information for user-kind subject.*
+    <a name="UserSubject"></a>
+    *UserSubject holds detailed information for user-kind subject.*
 
-      - **rules.subjects.user.name** (string), required
+  - **rules.subjects.user.name** (string), required
 
-        `name` is the username that matches, or "*" to match all usernames. Required.
+    `name` is the username that matches, or "*" to match all usernames. Required.
 
   - **rules.nonResourceRules** ([]NonResourcePolicyRule)
 
@@ -139,23 +139,23 @@ FlowSchemaSpec describes how the FlowSchema's specification looks like.
     <a name="NonResourcePolicyRule"></a>
     *NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.*
 
-    - **rules.nonResourceRules.nonResourceURLs** ([]string), required
+  - **rules.nonResourceRules.nonResourceURLs** ([]string), required
 
-      *Set: unique values will be kept during a merge*
-      
-      `nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:
-        - "/healthz" is legal
-        - "/hea*" is illegal
-        - "/hea" is legal but matches nothing
-        - "/hea/*" also matches nothing
-        - "/healthz/*" matches all per-component health checks.
-      "*" matches all non-resource urls. if it is present, it must be the only entry. Required.
+    *Set: unique values will be kept during a merge*
+    
+    `nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:
+      - "/healthz" is legal
+      - "/hea*" is illegal
+      - "/hea" is legal but matches nothing
+      - "/hea/*" also matches nothing
+      - "/healthz/*" matches all per-component health checks.
+    "*" matches all non-resource urls. if it is present, it must be the only entry. Required.
 
-    - **rules.nonResourceRules.verbs** ([]string), required
+  - **rules.nonResourceRules.verbs** ([]string), required
 
-      *Set: unique values will be kept during a merge*
-      
-      `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs. If it is present, it must be the only entry. Required.
+    *Set: unique values will be kept during a merge*
+    
+    `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs. If it is present, it must be the only entry. Required.
 
   - **rules.resourceRules** ([]ResourcePolicyRule)
 
@@ -166,33 +166,33 @@ FlowSchemaSpec describes how the FlowSchema's specification looks like.
     <a name="ResourcePolicyRule"></a>
     *ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) least one member of namespaces matches the request.*
 
-    - **rules.resourceRules.apiGroups** ([]string), required
+  - **rules.resourceRules.apiGroups** ([]string), required
 
-      *Set: unique values will be kept during a merge*
-      
-      `apiGroups` is a list of matching API groups and may not be empty. "*" matches all API groups and, if present, must be the only entry. Required.
+    *Set: unique values will be kept during a merge*
+    
+    `apiGroups` is a list of matching API groups and may not be empty. "*" matches all API groups and, if present, must be the only entry. Required.
 
-    - **rules.resourceRules.resources** ([]string), required
+  - **rules.resourceRules.resources** ([]string), required
 
-      *Set: unique values will be kept during a merge*
-      
-      `resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource.  For example, [ "services", "nodes/status" ].  This list may not be empty. "*" matches all resources and, if present, must be the only entry. Required.
+    *Set: unique values will be kept during a merge*
+    
+    `resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource.  For example, [ "services", "nodes/status" ].  This list may not be empty. "*" matches all resources and, if present, must be the only entry. Required.
 
-    - **rules.resourceRules.verbs** ([]string), required
+  - **rules.resourceRules.verbs** ([]string), required
 
-      *Set: unique values will be kept during a merge*
-      
-      `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs and, if present, must be the only entry. Required.
+    *Set: unique values will be kept during a merge*
+    
+    `verbs` is a list of matching verbs and may not be empty. "*" matches all verbs and, if present, must be the only entry. Required.
 
-    - **rules.resourceRules.clusterScope** (boolean)
+  - **rules.resourceRules.clusterScope** (boolean)
 
-      `clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.
+    `clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.
 
-    - **rules.resourceRules.namespaces** ([]string)
+  - **rules.resourceRules.namespaces** ([]string)
 
-      *Set: unique values will be kept during a merge*
-      
-      `namespaces` is a list of target namespaces that restricts matches.  A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains "*".  Note that "*" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.
+    *Set: unique values will be kept during a merge*
+    
+    `namespaces` is a list of target namespaces that restricts matches.  A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains "*".  Note that "*" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
index d48dc829ab..a5e796904f 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
@@ -62,25 +62,25 @@ NodeSpec describes the attributes that a node is created with.
     <a name="ConfigMapNodeConfigSource"></a>
     *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-    - **configSource.configMap.kubeletConfigKey** (string), required
+  - **configSource.configMap.kubeletConfigKey** (string), required
 
-      KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-    - **configSource.configMap.name** (string), required
+  - **configSource.configMap.name** (string), required
 
-      Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-    - **configSource.configMap.namespace** (string), required
+  - **configSource.configMap.namespace** (string), required
 
-      Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-    - **configSource.configMap.resourceVersion** (string)
+  - **configSource.configMap.resourceVersion** (string)
 
-      ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-    - **configSource.configMap.uid** (string)
+  - **configSource.configMap.uid** (string)
 
-      UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
 - **externalID** (string)
 
@@ -216,32 +216,32 @@ NodeStatus is information about the current status of a node.
     <a name="NodeConfigSource"></a>
     *NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.*
 
-    - **config.active.configMap** (ConfigMapNodeConfigSource)
+  - **config.active.configMap** (ConfigMapNodeConfigSource)
 
-      ConfigMap is a reference to a Node's ConfigMap
+    ConfigMap is a reference to a Node's ConfigMap
 
-      <a name="ConfigMapNodeConfigSource"></a>
-      *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
+    <a name="ConfigMapNodeConfigSource"></a>
+    *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-      - **config.active.configMap.kubeletConfigKey** (string), required
+  - **config.active.configMap.kubeletConfigKey** (string), required
 
-        KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-      - **config.active.configMap.name** (string), required
+  - **config.active.configMap.name** (string), required
 
-        Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-      - **config.active.configMap.namespace** (string), required
+  - **config.active.configMap.namespace** (string), required
 
-        Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-      - **config.active.configMap.resourceVersion** (string)
+  - **config.active.configMap.resourceVersion** (string)
 
-        ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-      - **config.active.configMap.uid** (string)
+  - **config.active.configMap.uid** (string)
 
-        UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
   - **config.assigned** (NodeConfigSource)
 
@@ -250,32 +250,32 @@ NodeStatus is information about the current status of a node.
     <a name="NodeConfigSource"></a>
     *NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.*
 
-    - **config.assigned.configMap** (ConfigMapNodeConfigSource)
+  - **config.assigned.configMap** (ConfigMapNodeConfigSource)
 
-      ConfigMap is a reference to a Node's ConfigMap
+    ConfigMap is a reference to a Node's ConfigMap
 
-      <a name="ConfigMapNodeConfigSource"></a>
-      *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
+    <a name="ConfigMapNodeConfigSource"></a>
+    *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-      - **config.assigned.configMap.kubeletConfigKey** (string), required
+  - **config.assigned.configMap.kubeletConfigKey** (string), required
 
-        KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-      - **config.assigned.configMap.name** (string), required
+  - **config.assigned.configMap.name** (string), required
 
-        Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-      - **config.assigned.configMap.namespace** (string), required
+  - **config.assigned.configMap.namespace** (string), required
 
-        Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-      - **config.assigned.configMap.resourceVersion** (string)
+  - **config.assigned.configMap.resourceVersion** (string)
 
-        ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-      - **config.assigned.configMap.uid** (string)
+  - **config.assigned.configMap.uid** (string)
 
-        UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
   - **config.error** (string)
 
@@ -288,32 +288,32 @@ NodeStatus is information about the current status of a node.
     <a name="NodeConfigSource"></a>
     *NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.*
 
-    - **config.lastKnownGood.configMap** (ConfigMapNodeConfigSource)
+  - **config.lastKnownGood.configMap** (ConfigMapNodeConfigSource)
 
-      ConfigMap is a reference to a Node's ConfigMap
+    ConfigMap is a reference to a Node's ConfigMap
 
-      <a name="ConfigMapNodeConfigSource"></a>
-      *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
+    <a name="ConfigMapNodeConfigSource"></a>
+    *ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.*
 
-      - **config.lastKnownGood.configMap.kubeletConfigKey** (string), required
+  - **config.lastKnownGood.configMap.kubeletConfigKey** (string), required
 
-        KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
+    KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.
 
-      - **config.lastKnownGood.configMap.name** (string), required
+  - **config.lastKnownGood.configMap.name** (string), required
 
-        Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
+    Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.
 
-      - **config.lastKnownGood.configMap.namespace** (string), required
+  - **config.lastKnownGood.configMap.namespace** (string), required
 
-        Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
+    Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.
 
-      - **config.lastKnownGood.configMap.resourceVersion** (string)
+  - **config.lastKnownGood.configMap.resourceVersion** (string)
 
-        ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
-      - **config.lastKnownGood.configMap.uid** (string)
+  - **config.lastKnownGood.configMap.uid** (string)
 
-        UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
+    UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.
 
 - **daemonEndpoints** (NodeDaemonEndpoints)
 
@@ -329,9 +329,9 @@ NodeStatus is information about the current status of a node.
     <a name="DaemonEndpoint"></a>
     *DaemonEndpoint contains information about a single Daemon endpoint.*
 
-    - **daemonEndpoints.kubeletEndpoint.Port** (int32), required
+  - **daemonEndpoints.kubeletEndpoint.Port** (int32), required
 
-      Port number of the given endpoint.
+    Port number of the given endpoint.
 
 - **images** ([]ContainerImage)
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
index 073da2a28a..f5776972a0 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
@@ -76,28 +76,28 @@ PriorityLevelConfigurationSpec specifies the configuration of a priority level.
     <a name="LimitResponse"></a>
     *LimitResponse defines how to handle requests that can not be executed right now.*
 
-    - **limited.limitResponse.type** (string), required
+  - **limited.limitResponse.type** (string), required
 
-      `type` is "Queue" or "Reject". "Queue" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. "Reject" means that requests that can not be executed upon arrival are rejected. Required.
+    `type` is "Queue" or "Reject". "Queue" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. "Reject" means that requests that can not be executed upon arrival are rejected. Required.
 
-    - **limited.limitResponse.queuing** (QueuingConfiguration)
+  - **limited.limitResponse.queuing** (QueuingConfiguration)
 
-      `queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `"Queue"`.
+    `queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `"Queue"`.
 
-      <a name="QueuingConfiguration"></a>
-      *QueuingConfiguration holds the configuration parameters for queuing*
+    <a name="QueuingConfiguration"></a>
+    *QueuingConfiguration holds the configuration parameters for queuing*
 
-      - **limited.limitResponse.queuing.handSize** (int32)
+  - **limited.limitResponse.queuing.handSize** (int32)
 
-        `handSize` is a small positive number that configures the shuffle sharding of requests into queues.  When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here.  The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues).  See the user-facing documentation for more extensive guidance on setting this field.  This field has a default value of 8.
+    `handSize` is a small positive number that configures the shuffle sharding of requests into queues.  When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here.  The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues).  See the user-facing documentation for more extensive guidance on setting this field.  This field has a default value of 8.
 
-      - **limited.limitResponse.queuing.queueLengthLimit** (int32)
+  - **limited.limitResponse.queuing.queueLengthLimit** (int32)
 
-        `queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected.  This value must be positive.  If not specified, it will be defaulted to 50.
+    `queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected.  This value must be positive.  If not specified, it will be defaulted to 50.
 
-      - **limited.limitResponse.queuing.queues** (int32)
+  - **limited.limitResponse.queuing.queues** (int32)
 
-        `queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive.  Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant.  This field has a default value of 64.
+    `queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive.  Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant.  This field has a default value of 64.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
index 8b08e83dd3..040c894ae3 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
@@ -67,25 +67,25 @@ RuntimeClass defines a class of container runtime supported in the cluster. The
     <a name="Toleration"></a>
     *The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.*
 
-    - **scheduling.tolerations.key** (string)
+  - **scheduling.tolerations.key** (string)
 
-      Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+    Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
 
-    - **scheduling.tolerations.operator** (string)
+  - **scheduling.tolerations.operator** (string)
 
-      Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
+    Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
 
-    - **scheduling.tolerations.value** (string)
+  - **scheduling.tolerations.value** (string)
 
-      Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
+    Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
 
-    - **scheduling.tolerations.effect** (string)
+  - **scheduling.tolerations.effect** (string)
 
-      Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+    Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
 
-    - **scheduling.tolerations.tolerationSeconds** (int64)
+  - **scheduling.tolerations.tolerationSeconds** (int64)
 
-      TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
+    TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md b/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
new file mode 100644
index 0000000000..5aa9f29822
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
@@ -0,0 +1,40 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "DownwardAPIVolumeFile"
+content_type: "api_reference"
+description: "DownwardAPIVolumeFile represents information to create the file containing the pod field."
+title: "DownwardAPIVolumeFile"
+weight: 2
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+DownwardAPIVolumeFile represents information to create the file containing the pod field
+
+<hr>
+
+- **path** (string), required
+
+  Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'
+
+- **fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
+
+  Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.
+
+- **mode** (int32)
+
+  Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
+- **resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
+
+  Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
new file mode 100644
index 0000000000..0078859720
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
@@ -0,0 +1,28 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "ExecAction"
+content_type: "api_reference"
+description: "ExecAction describes a \"run in container\" action."
+title: "ExecAction"
+weight: 3
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+ExecAction describes a "run in container" action.
+
+<hr>
+
+- **command** ([]string)
+
+  Command is the command line to execute inside the container, the working directory for the command  is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
new file mode 100644
index 0000000000..1eabe9ac2d
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
@@ -0,0 +1,58 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "HTTPGetAction"
+content_type: "api_reference"
+description: "HTTPGetAction describes an action based on HTTP Get requests."
+title: "HTTPGetAction"
+weight: 4
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+HTTPGetAction describes an action based on HTTP Get requests.
+
+<hr>
+
+- **port** (IntOrString), required
+
+  Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+
+  <a name="IntOrString"></a>
+  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+
+- **host** (string)
+
+  Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
+
+- **httpHeaders** ([]HTTPHeader)
+
+  Custom headers to set in the request. HTTP allows repeated headers.
+
+  <a name="HTTPHeader"></a>
+  *HTTPHeader describes a custom header to be used in HTTP probes*
+
+  - **httpHeaders.name** (string), required
+
+    The header field name
+
+  - **httpHeaders.value** (string), required
+
+    The header field value
+
+- **path** (string)
+
+  Path to access on the HTTP server.
+
+- **scheme** (string)
+
+  Scheme to use for connecting to the host. Defaults to HTTP.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md b/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
new file mode 100644
index 0000000000..622dba69a2
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
@@ -0,0 +1,226 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
+  kind: "JSONSchemaProps"
+content_type: "api_reference"
+description: "JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema."
+title: "JSONSchemaProps"
+weight: 5
+---
+
+
+
+`import "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"`
+
+
+JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).
+
+<hr>
+
+- **$ref** (string)
+
+
+- **$schema** (string)
+
+
+- **additionalItems** (JSONSchemaPropsOrBool)
+
+
+  <a name="JSONSchemaPropsOrBool"></a>
+  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
+
+- **additionalProperties** (JSONSchemaPropsOrBool)
+
+
+  <a name="JSONSchemaPropsOrBool"></a>
+  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
+
+- **allOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **anyOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **default** (JSON)
+
+  default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false.
+
+  <a name="JSON"></a>
+  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
+
+- **definitions** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **dependencies** (map[string]JSONSchemaPropsOrStringArray)
+
+
+  <a name="JSONSchemaPropsOrStringArray"></a>
+  *JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array.*
+
+- **description** (string)
+
+
+- **enum** ([]JSON)
+
+
+  <a name="JSON"></a>
+  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
+
+- **example** (JSON)
+
+
+  <a name="JSON"></a>
+  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
+
+- **exclusiveMaximum** (boolean)
+
+
+- **exclusiveMinimum** (boolean)
+
+
+- **externalDocs** (ExternalDocumentation)
+
+
+  <a name="ExternalDocumentation"></a>
+  *ExternalDocumentation allows referencing an external resource for extended documentation.*
+
+  - **externalDocs.description** (string)
+
+
+  - **externalDocs.url** (string)
+
+
+- **format** (string)
+
+  format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:
+  
+  - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041" - isbn10: an ISBN10 number string like "0321751043" - isbn13: an ISBN13 number string like "978-0321751041" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559" - byte: base64 encoded binary data - password: any kind of string - date: a date string like "2006-01-02" as defined by full-date in RFC3339 - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.
+
+- **id** (string)
+
+
+- **items** (JSONSchemaPropsOrArray)
+
+
+  <a name="JSONSchemaPropsOrArray"></a>
+  *JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes.*
+
+- **maxItems** (int64)
+
+
+- **maxLength** (int64)
+
+
+- **maxProperties** (int64)
+
+
+- **maximum** (double)
+
+
+- **minItems** (int64)
+
+
+- **minLength** (int64)
+
+
+- **minProperties** (int64)
+
+
+- **minimum** (double)
+
+
+- **multipleOf** (double)
+
+
+- **not** (<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **nullable** (boolean)
+
+
+- **oneOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **pattern** (string)
+
+
+- **patternProperties** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **properties** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+
+
+- **required** ([]string)
+
+
+- **title** (string)
+
+
+- **type** (string)
+
+
+- **uniqueItems** (boolean)
+
+
+- **x-kubernetes-embedded-resource** (boolean)
+
+  x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).
+
+- **x-kubernetes-int-or-string** (boolean)
+
+  x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:
+  
+  1) anyOf:
+     - type: integer
+     - type: string
+  2) allOf:
+     - anyOf:
+       - type: integer
+       - type: string
+     - ... zero or more
+
+- **x-kubernetes-list-map-keys** ([]string)
+
+  x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.
+  
+  This tag MUST only be used on lists that have the "x-kubernetes-list-type" extension set to "map". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).
+  
+  The properties specified must either be required or have a default value, to ensure those properties are present for all list items.
+
+- **x-kubernetes-list-type** (string)
+
+  x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:
+  
+  1) `atomic`: the list is treated as a single entity, like a scalar.
+       Atomic lists will be entirely replaced when updated. This extension
+       may be used on any type of list (struct, scalar, ...).
+  2) `set`:
+       Sets are lists that must not have multiple items with the same value. Each
+       value must be a scalar, an object with x-kubernetes-map-type `atomic` or an
+       array with x-kubernetes-list-type `atomic`.
+  3) `map`:
+       These lists are like maps in that their elements have a non-index key
+       used to identify them. Order is preserved upon merge. The map tag
+       must only be used on a list with elements of type object.
+  Defaults to atomic for arrays.
+
+- **x-kubernetes-map-type** (string)
+
+  x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:
+  
+  1) `granular`:
+       These maps are actual maps (key-value pairs) and each fields are independent
+       from each other (they can each be manipulated by separate actors). This is
+       the default behaviour for all maps.
+  2) `atomic`: the list is treated as a single entity, like a scalar.
+       Atomic maps will be entirely replaced when updated.
+
+- **x-kubernetes-preserve-unknown-fields** (boolean)
+
+  x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md b/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
new file mode 100644
index 0000000000..64068fe1a2
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
@@ -0,0 +1,36 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "KeyToPath"
+content_type: "api_reference"
+description: "Maps a string key to a path within a volume."
+title: "KeyToPath"
+weight: 6
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+Maps a string key to a path within a volume.
+
+<hr>
+
+- **key** (string), required
+
+  The key to project.
+
+- **path** (string), required
+
+  The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+
+- **mode** (int32)
+
+  Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
index 58d94dd5b8..a588677077 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "A label selector is a label query over a set of resources."
 title: "LabelSelector"
-weight: 2
+weight: 7
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md b/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
index af9749a02c..0b703734b0 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ListMeta describes metadata that synthetic resources must have, including lists and various status objects."
 title: "ListMeta"
-weight: 3
+weight: 8
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
index 83d4d046b1..e97b84aca9 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace."
 title: "LocalObjectReference"
-weight: 4
+weight: 9
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
new file mode 100644
index 0000000000..57b0b62715
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
@@ -0,0 +1,72 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "NodeAffinity"
+content_type: "api_reference"
+description: "Node affinity is a group of node affinity scheduling rules."
+title: "NodeAffinity"
+weight: 10
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+Node affinity is a group of node affinity scheduling rules.
+
+<hr>
+
+- **preferredDuringSchedulingIgnoredDuringExecution** ([]PreferredSchedulingTerm)
+
+  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.
+
+  <a name="PreferredSchedulingTerm"></a>
+  *An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.preference** (NodeSelectorTerm), required
+
+    A node selector term, associated with the corresponding weight.
+
+    <a name="NodeSelectorTerm"></a>
+    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+    A list of node selector requirements by node's labels.
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+    A list of node selector requirements by node's fields.
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
+
+    Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
+
+- **requiredDuringSchedulingIgnoredDuringExecution** (NodeSelector)
+
+  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.
+
+  <a name="NodeSelector"></a>
+  *A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.*
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms** ([]NodeSelectorTerm), required
+
+    Required. A list of node selector terms. The terms are ORed.
+
+    <a name="NodeSelectorTerm"></a>
+    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+    A list of node selector requirements by node's labels.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+
+    A list of node selector requirements by node's fields.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md b/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
index ad5c95bf4c..3e8b935ef7 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values."
 title: "NodeSelectorRequirement"
-weight: 5
+weight: 11
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
index ba4cf37ef0..c109fa3fdf 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ObjectFieldSelector selects an APIVersioned field of an object."
 title: "ObjectFieldSelector"
-weight: 6
+weight: 12
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
index 46361d861b..b3bc31e716 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create."
 title: "ObjectMeta"
-weight: 7
+weight: 13
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
index b1ae24f612..71c40a0702 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ObjectReference contains enough information to let you inspect or modify the referred object."
 title: "ObjectReference"
-weight: 8
+weight: 14
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/patch.md b/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
index eaf37c8d15..054508e807 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Patch is provided to give a concrete name and type to the Kubernetes PATCH request body."
 title: "Patch"
-weight: 9
+weight: 15
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
new file mode 100644
index 0000000000..06291de393
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
@@ -0,0 +1,73 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "PodAffinity"
+content_type: "api_reference"
+description: "Pod affinity is a group of inter pod affinity scheduling rules."
+title: "PodAffinity"
+weight: 16
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+Pod affinity is a group of inter pod affinity scheduling rules.
+
+<hr>
+
+- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
+
+  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
+
+  <a name="WeightedPodAffinityTerm"></a>
+  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
+
+    Required. A pod affinity term, associated with the corresponding weight.
+
+    <a name="PodAffinityTerm"></a>
+    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
+
+    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over a set of resources, in this case pods.
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
+
+    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
+
+    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
+
+- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
+
+  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
+
+  <a name="PodAffinityTerm"></a>
+  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
+
+    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over a set of resources, in this case pods.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
+
+    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
new file mode 100644
index 0000000000..baebcc3c0c
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
@@ -0,0 +1,73 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "PodAntiAffinity"
+content_type: "api_reference"
+description: "Pod anti affinity is a group of inter pod anti affinity scheduling rules."
+title: "PodAntiAffinity"
+weight: 17
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+Pod anti affinity is a group of inter pod anti affinity scheduling rules.
+
+<hr>
+
+- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
+
+  The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
+
+  <a name="WeightedPodAffinityTerm"></a>
+  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
+
+    Required. A pod affinity term, associated with the corresponding weight.
+
+    <a name="PodAffinityTerm"></a>
+    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
+
+    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over a set of resources, in this case pods.
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
+
+    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
+
+  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
+
+    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
+
+- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
+
+  If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
+
+  <a name="PodAffinityTerm"></a>
+  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
+
+    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    A label query over a set of resources, in this case pods.
+
+  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
+
+    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md b/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
index f0386bb66f..c049cd40e4 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Quantity is a fixed-point representation of a number."
 title: "Quantity"
-weight: 10
+weight: 18
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
index 3d3b8d68a3..85e7a9a814 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ResourceFieldSelector represents container resources (cpu, memory) and their output format."
 title: "ResourceFieldSelector"
-weight: 11
+weight: 19
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/status.md b/content/en/docs/reference/kubernetes-api/common-definitions/status.md
index a134ed1407..634e5068fb 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/status.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/status.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Status is a return value for calls that don't return other objects."
 title: "Status"
-weight: 12
+weight: 20
 ---
 
 
@@ -40,21 +40,21 @@ Status is a return value for calls that don't return other objects.
     <a name="StatusCause"></a>
     *StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.*
 
-    - **details.causes.field** (string)
+  - **details.causes.field** (string)
 
-      The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed.  Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.
-      
-      Examples:
-        "name" - the field "name" on the current resource
-        "items[0].name" - the field "name" on the first array entry in "items"
+    The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed.  Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.
+    
+    Examples:
+      "name" - the field "name" on the current resource
+      "items[0].name" - the field "name" on the first array entry in "items"
 
-    - **details.causes.message** (string)
+  - **details.causes.message** (string)
 
-      A human-readable description of the cause of the error.  This field may be presented as-is to a reader.
+    A human-readable description of the cause of the error.  This field may be presented as-is to a reader.
 
-    - **details.causes.reason** (string)
+  - **details.causes.reason** (string)
 
-      A machine-readable description of the cause of the error. If this value is empty there is no information available.
+    A machine-readable description of the cause of the error. If this value is empty there is no information available.
 
   - **details.group** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
new file mode 100644
index 0000000000..991518a57a
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
@@ -0,0 +1,35 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "TCPSocketAction"
+content_type: "api_reference"
+description: "TCPSocketAction describes an action based on opening a socket."
+title: "TCPSocketAction"
+weight: 21
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+TCPSocketAction describes an action based on opening a socket
+
+<hr>
+
+- **port** (IntOrString), required
+
+  Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
+
+  <a name="IntOrString"></a>
+  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+
+- **host** (string)
+
+  Optional: Host name to connect to, defaults to the pod IP.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
index 2ec9fd5176..c03c3c8409 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "TypedLocalObjectReference contains enough information to let you locate the typed referenced object inside the same namespace."
 title: "TypedLocalObjectReference"
-weight: 13
+weight: 22
 ---
 
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
index 7d7dac6bf0..b543e6c9ac 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
@@ -40,7 +40,7 @@ ConfigMap holds configuration data for pods to consume.
 
 - **immutable** (boolean)
 
-  Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.
+  Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil. This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
index ddcef415e8..b1c634b6b2 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
@@ -47,23 +47,17 @@ CSIDriverSpec is the specification of a CSIDriver.
 - **attachRequired** (boolean)
 
   attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.
-  
-  This field is immutable.
 
 - **fsGroupPolicy** (string)
 
   Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate.
-  
-  This field is immutable.
 
 - **podInfoOnMount** (boolean)
 
-  If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. "csi.storage.k8s.io/pod.name": pod.Name "csi.storage.k8s.io/pod.namespace": pod.Namespace "csi.storage.k8s.io/pod.uid": string(pod.UID) "csi.storage.k8s.io/ephemeral": "true" if the volume is an ephemeral inline volume
+  If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. "csi.storage.k8s.io/pod.name": pod.Name "csi.storage.k8s.io/pod.namespace": pod.Namespace "csi.storage.k8s.io/pod.uid": string(pod.UID) "csi.storage.k8s.io/ephemeral": "true" iff the volume is an ephemeral inline volume
                                   defined by a CSIVolumeSource, otherwise "false"
   
   "csi.storage.k8s.io/ephemeral" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the "Persistent" and "Ephemeral" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.
-  
-  This field is immutable.
 
 - **requiresRepublish** (boolean)
 
@@ -71,7 +65,7 @@ CSIDriverSpec is the specification of a CSIDriver.
   
   Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.
   
-  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.
+  This is an alpha feature and only available when the CSIServiceAccountToken feature is enabled.
 
 - **storageCapacity** (boolean)
 
@@ -81,9 +75,7 @@ CSIDriverSpec is the specification of a CSIDriver.
   
   Alternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.
   
-  This field is immutable.
-  
-  This is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.
+  This is an alpha field and only available when the CSIStorageCapacity feature is enabled. The default is false.
 
 - **tokenRequests** ([]TokenRequest)
 
@@ -99,7 +91,7 @@ CSIDriverSpec is the specification of a CSIDriver.
   
   Note: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.
   
-  This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.
+  This is an alpha feature and only available when the CSIServiceAccountToken feature is enabled.
 
   <a name="TokenRequest"></a>
   *TokenRequest contains parameters of a service account token.*
@@ -117,8 +109,6 @@ CSIDriverSpec is the specification of a CSIDriver.
   *Set: unique values will be kept during a merge*
   
   volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is "Persistent", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is "Ephemeral". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future. This field is beta.
-  
-  This field is immutable.
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
index d918d4568f..aaee041979 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
@@ -68,9 +68,9 @@ CSINodeSpec holds information about the specification of all CSI drivers install
     <a name="VolumeNodeResources"></a>
     *VolumeNodeResources is a set of resource limits for scheduling of volumes.*
 
-    - **drivers.allocatable.count** (int32)
+  - **drivers.allocatable.count** (int32)
 
-      Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.
+    Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.
 
   - **drivers.topologyKeys** ([]string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
deleted file mode 100644
index 1b619a0ef2..0000000000
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
+++ /dev/null
@@ -1,566 +0,0 @@
----
-api_metadata:
-  apiVersion: "storage.k8s.io/v1beta1"
-  import: "k8s.io/api/storage/v1beta1"
-  kind: "CSIStorageCapacity"
-content_type: "api_reference"
-description: "CSIStorageCapacity stores the result of one CSI GetCapacity call."
-title: "CSIStorageCapacity v1beta1"
-weight: 10
----
-
-`apiVersion: storage.k8s.io/v1beta1`
-
-`import "k8s.io/api/storage/v1beta1"`
-
-
-## CSIStorageCapacity {#CSIStorageCapacity}
-
-CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment.  This can be used when considering where to instantiate new PersistentVolumes.
-
-For example this can express things like: - StorageClass "standard" has "1234 GiB" available in "topology.kubernetes.io/zone=us-east1" - StorageClass "localssd" has "10 GiB" available in "kubernetes.io/hostname=knode-abc123"
-
-The following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero
-
-The producer of these objects can decide which approach is more suitable.
-
-They are consumed by the kube-scheduler if the CSIStorageCapacity beta feature gate is enabled there and a CSI driver opts into capacity-aware scheduling with CSIDriver.StorageCapacity.
-
-<hr>
-
-- **apiVersion**: storage.k8s.io/v1beta1
-
-
-- **kind**: CSIStorageCapacity
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\<uuid>, a generated name, or a reverse-domain name which ends with the unique CSI driver name.
-  
-  Objects are namespaced.
-  
-  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **storageClassName** (string), required
-
-  The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.
-
-- **capacity** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-  Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.
-  
-  The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity.
-
-- **maximumVolumeSize** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-  MaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.
-  
-  This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.
-
-- **nodeTopology** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-  NodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.
-
-
-
-
-
-## CSIStorageCapacityList {#CSIStorageCapacityList}
-
-CSIStorageCapacityList is a collection of CSIStorageCapacity objects.
-
-<hr>
-
-- **apiVersion**: storage.k8s.io/v1beta1
-
-
-- **kind**: CSIStorageCapacityList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-  Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **items** ([]<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>), required
-
-  *Map: unique values on key name will be kept during a merge*
-  
-  Items is the list of CSIStorageCapacity objects.
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified CSIStorageCapacity
-
-#### HTTP Request
-
-GET /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CSIStorageCapacity
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CSIStorageCapacity
-
-#### HTTP Request
-
-GET /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacityList" >}}">CSIStorageCapacityList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CSIStorageCapacity
-
-#### HTTP Request
-
-GET /apis/storage.k8s.io/v1beta1/csistoragecapacities
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacityList" >}}">CSIStorageCapacityList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create a CSIStorageCapacity
-
-#### HTTP Request
-
-POST /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
-
-201 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): Created
-
-202 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified CSIStorageCapacity
-
-#### HTTP Request
-
-PUT /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CSIStorageCapacity
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
-
-201 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified CSIStorageCapacity
-
-#### HTTP Request
-
-PATCH /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CSIStorageCapacity
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../config-and-storage-resources/csi-storage-capacity-v1beta1#CSIStorageCapacity" >}}">CSIStorageCapacity</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete a CSIStorageCapacity
-
-#### HTTP Request
-
-DELETE /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CSIStorageCapacity
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of CSIStorageCapacity
-
-#### HTTP Request
-
-DELETE /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
index b05083deb4..23b4f3214e 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
@@ -65,11 +65,11 @@ PersistentVolumeClaimSpec describes the common attributes of storage devices and
 
   - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
 
   - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
 
 - **volumeName** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
index e02238f3ad..cbc4a613d5 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
@@ -78,20 +78,20 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="NodeSelector"></a>
     *A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.*
 
-    - **nodeAffinity.required.nodeSelectorTerms** ([]NodeSelectorTerm), required
+  - **nodeAffinity.required.nodeSelectorTerms** ([]NodeSelectorTerm), required
 
-      Required. A list of node selector terms. The terms are ORed.
+    Required. A list of node selector terms. The terms are ORed.
 
-      <a name="NodeSelectorTerm"></a>
-      *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
+    <a name="NodeSelectorTerm"></a>
+    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
 
-      - **nodeAffinity.required.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+  - **nodeAffinity.required.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
 
-        A list of node selector requirements by node's labels.
+    A list of node selector requirements by node's labels.
 
-      - **nodeAffinity.required.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
+  - **nodeAffinity.required.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
 
-        A list of node selector requirements by node's fields.
+    A list of node selector requirements by node's fields.
 
 - **persistentVolumeReclaimPolicy** (string)
 
@@ -252,13 +252,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-    - **cephfs.secretRef.name** (string)
+  - **cephfs.secretRef.name** (string)
 
-      Name is unique within a namespace to reference a secret resource.
+    Name is unique within a namespace to reference a secret resource.
 
-    - **cephfs.secretRef.namespace** (string)
+  - **cephfs.secretRef.namespace** (string)
 
-      Namespace defines the space within which the secret name must be unique.
+    Namespace defines the space within which the secret name must be unique.
 
   - **cephfs.user** (string)
 
@@ -290,100 +290,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-    - **cinder.secretRef.name** (string)
+  - **cinder.secretRef.name** (string)
 
-      Name is unique within a namespace to reference a secret resource.
+    Name is unique within a namespace to reference a secret resource.
 
-    - **cinder.secretRef.namespace** (string)
+  - **cinder.secretRef.namespace** (string)
 
-      Namespace defines the space within which the secret name must be unique.
-
-- **csi** (CSIPersistentVolumeSource)
-
-  CSI represents storage that is handled by an external CSI driver (Beta feature).
-
-  <a name="CSIPersistentVolumeSource"></a>
-  *Represents storage that is managed by an external CSI volume driver (Beta feature)*
-
-  - **csi.driver** (string), required
-
-    Driver is the name of the driver to use for this volume. Required.
-
-  - **csi.volumeHandle** (string), required
-
-    VolumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.
-
-  - **csi.controllerExpandSecretRef** (SecretReference)
-
-    ControllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This is an alpha field and requires enabling ExpandCSIVolumes feature gate. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-    - **csi.controllerExpandSecretRef.name** (string)
-
-      Name is unique within a namespace to reference a secret resource.
-
-    - **csi.controllerExpandSecretRef.namespace** (string)
-
-      Namespace defines the space within which the secret name must be unique.
-
-  - **csi.controllerPublishSecretRef** (SecretReference)
-
-    ControllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-    - **csi.controllerPublishSecretRef.name** (string)
-
-      Name is unique within a namespace to reference a secret resource.
-
-    - **csi.controllerPublishSecretRef.namespace** (string)
-
-      Namespace defines the space within which the secret name must be unique.
-
-  - **csi.fsType** (string)
-
-    Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs".
-
-  - **csi.nodePublishSecretRef** (SecretReference)
-
-    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-    - **csi.nodePublishSecretRef.name** (string)
-
-      Name is unique within a namespace to reference a secret resource.
-
-    - **csi.nodePublishSecretRef.namespace** (string)
-
-      Namespace defines the space within which the secret name must be unique.
-
-  - **csi.nodeStageSecretRef** (SecretReference)
-
-    NodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
-
-    <a name="SecretReference"></a>
-    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
-
-    - **csi.nodeStageSecretRef.name** (string)
-
-      Name is unique within a namespace to reference a secret resource.
-
-    - **csi.nodeStageSecretRef.namespace** (string)
-
-      Namespace defines the space within which the secret name must be unique.
-
-  - **csi.readOnly** (boolean)
-
-    Optional: The value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).
-
-  - **csi.volumeAttributes** (map[string]string)
-
-    Attributes of the volume to publish.
+    Namespace defines the space within which the secret name must be unique.
 
 - **fc** (FCVolumeSource)
 
@@ -442,13 +355,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-    - **flexVolume.secretRef.name** (string)
+  - **flexVolume.secretRef.name** (string)
 
-      Name is unique within a namespace to reference a secret resource.
+    Name is unique within a namespace to reference a secret resource.
 
-    - **flexVolume.secretRef.namespace** (string)
+  - **flexVolume.secretRef.namespace** (string)
 
-      Namespace defines the space within which the secret name must be unique.
+    Namespace defines the space within which the secret name must be unique.
 
 - **flocker** (FlockerVolumeSource)
 
@@ -567,13 +480,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-    - **iscsi.secretRef.name** (string)
+  - **iscsi.secretRef.name** (string)
 
-      Name is unique within a namespace to reference a secret resource.
+    Name is unique within a namespace to reference a secret resource.
 
-    - **iscsi.secretRef.namespace** (string)
+  - **iscsi.secretRef.namespace** (string)
 
-      Namespace defines the space within which the secret name must be unique.
+    Namespace defines the space within which the secret name must be unique.
 
 - **nfs** (NFSVolumeSource)
 
@@ -697,13 +610,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-    - **rbd.secretRef.name** (string)
+  - **rbd.secretRef.name** (string)
 
-      Name is unique within a namespace to reference a secret resource.
+    Name is unique within a namespace to reference a secret resource.
 
-    - **rbd.secretRef.namespace** (string)
+  - **rbd.secretRef.namespace** (string)
 
-      Namespace defines the space within which the secret name must be unique.
+    Namespace defines the space within which the secret name must be unique.
 
   - **rbd.user** (string)
 
@@ -727,13 +640,13 @@ PersistentVolumeSpec is the specification of a persistent volume.
     <a name="SecretReference"></a>
     *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
 
-    - **scaleIO.secretRef.name** (string)
+  - **scaleIO.secretRef.name** (string)
 
-      Name is unique within a namespace to reference a secret resource.
+    Name is unique within a namespace to reference a secret resource.
 
-    - **scaleIO.secretRef.namespace** (string)
+  - **scaleIO.secretRef.namespace** (string)
 
-      Namespace defines the space within which the secret name must be unique.
+    Namespace defines the space within which the secret name must be unique.
 
   - **scaleIO.system** (string), required
 
@@ -817,6 +730,96 @@ PersistentVolumeSpec is the specification of a persistent volume.
 
     Storage Policy Based Management (SPBM) profile name.
 
+### Beta level
+
+
+- **csi** (CSIPersistentVolumeSource)
+
+  CSI represents storage that is handled by an external CSI driver (Beta feature).
+
+  <a name="CSIPersistentVolumeSource"></a>
+  *Represents storage that is managed by an external CSI volume driver (Beta feature)*
+
+  - **csi.driver** (string), required
+
+    Driver is the name of the driver to use for this volume. Required.
+
+  - **csi.volumeHandle** (string), required
+
+    VolumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.
+
+  - **csi.controllerExpandSecretRef** (SecretReference)
+
+    ControllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This is an alpha field and requires enabling ExpandCSIVolumes feature gate. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+  - **csi.controllerExpandSecretRef.name** (string)
+
+    Name is unique within a namespace to reference a secret resource.
+
+  - **csi.controllerExpandSecretRef.namespace** (string)
+
+    Namespace defines the space within which the secret name must be unique.
+
+  - **csi.controllerPublishSecretRef** (SecretReference)
+
+    ControllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+  - **csi.controllerPublishSecretRef.name** (string)
+
+    Name is unique within a namespace to reference a secret resource.
+
+  - **csi.controllerPublishSecretRef.namespace** (string)
+
+    Namespace defines the space within which the secret name must be unique.
+
+  - **csi.fsType** (string)
+
+    Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs".
+
+  - **csi.nodePublishSecretRef** (SecretReference)
+
+    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+  - **csi.nodePublishSecretRef.name** (string)
+
+    Name is unique within a namespace to reference a secret resource.
+
+  - **csi.nodePublishSecretRef.namespace** (string)
+
+    Namespace defines the space within which the secret name must be unique.
+
+  - **csi.nodeStageSecretRef** (SecretReference)
+
+    NodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.
+
+    <a name="SecretReference"></a>
+    *SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace*
+
+  - **csi.nodeStageSecretRef.name** (string)
+
+    Name is unique within a namespace to reference a secret resource.
+
+  - **csi.nodeStageSecretRef.namespace** (string)
+
+    Namespace defines the space within which the secret name must be unique.
+
+  - **csi.readOnly** (boolean)
+
+    Optional: The value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).
+
+  - **csi.volumeAttributes** (map[string]string)
+
+    Attributes of the volume to publish.
+
 
 
 ## PersistentVolumeStatus {#PersistentVolumeStatus}
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
index 8dd7eb4a48..84d9a08c0f 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
@@ -36,11 +36,11 @@ Secret holds secret data of a certain type. The total bytes of the values in the
 
 - **immutable** (boolean)
 
-  Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.
+  Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil. This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
 
 - **stringData** (map[string]string)
 
-  stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.
+  stringData allows specifying non-binary secret data in string form. It is provided as a write-only convenience method. All keys and values are merged into the data field on write, overwriting any existing values. It is never output when reading from the API.
 
 - **type** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
index 24d9636d49..752735f6f6 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
@@ -54,13 +54,13 @@ StorageClasses are non-namespaced; the name of the storage class according to et
     <a name="TopologySelectorLabelRequirement"></a>
     *A topology selector requirement is a selector that matches given label. This is an alpha feature and may change in the future.*
 
-    - **allowedTopologies.matchLabelExpressions.key** (string), required
+  - **allowedTopologies.matchLabelExpressions.key** (string), required
 
-      The label key that the selector applies to.
+    The label key that the selector applies to.
 
-    - **allowedTopologies.matchLabelExpressions.values** ([]string), required
+  - **allowedTopologies.matchLabelExpressions.values** ([]string), required
 
-      An array of string values. One value must match the label to be selected. Each entry in Values is ORed.
+    An array of string values. One value must match the label to be selected. Each entry in Values is ORed.
 
 - **mountOptions** ([]string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
index 8e83398b69..95102c3988 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
@@ -67,7 +67,7 @@ VolumeAttachmentSpec is the specification of a VolumeAttachment request.
 
   - **source.inlineVolumeSpec** (<a href="{{< ref "../config-and-storage-resources/persistent-volume-v1#PersistentVolumeSpec" >}}">PersistentVolumeSpec</a>)
 
-    inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.
+    inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is alpha-level and is only honored by servers that enabled the CSIMigration feature.
 
   - **source.persistentVolumeName** (string)
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
index ff72bda7f0..ff45652ace 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
@@ -14,8 +14,6 @@ weight: 3
 `import "k8s.io/api/core/v1"`
 
 
-## Volume {#Volume}
-
 Volume represents a named volume in a pod that may be accessed by any container in the pod.
 
 <hr>
@@ -26,7 +24,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
 
 
-### Exposed Persistent volumes
+### Exposed Persistent volumes {#Exposed-Persistent-volumes}
 
 
 - **persistentVolumeClaim** (PersistentVolumeClaimVolumeSource)
@@ -44,7 +42,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Will force the ReadOnly setting in VolumeMounts. Default false.
 
-### Projections
+### Projections {#Projections}
 
 
 - **configMap** (ConfigMapVolumeSource)
@@ -68,7 +66,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
 
-  - **configMap.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
+  - **configMap.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
 
     If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
@@ -93,7 +91,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
 
-  - **secret.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
+  - **secret.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
 
     If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
@@ -108,7 +106,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
 
-  - **downwardAPI.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
+  - **downwardAPI.items** ([]<a href="{{< ref "../common-definitions/downward-api-volume-file#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
 
     Items is a list of downward API volume file
 
@@ -130,79 +128,79 @@ Volume represents a named volume in a pod that may be accessed by any container
     <a name="VolumeProjection"></a>
     *Projection that may be projected along with other supported volume types*
 
-    - **projected.sources.configMap** (ConfigMapProjection)
+  - **projected.sources.configMap** (ConfigMapProjection)
 
-      information about the configMap data to project
+    information about the configMap data to project
 
-      <a name="ConfigMapProjection"></a>
-      *Adapts a ConfigMap into a projected volume.
-      
-      The contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.*
+    <a name="ConfigMapProjection"></a>
+    *Adapts a ConfigMap into a projected volume.
+    
+    The contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.*
 
-      - **projected.sources.configMap.name** (string)
+  - **projected.sources.configMap.name** (string)
 
-        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-      - **projected.sources.configMap.optional** (boolean)
+  - **projected.sources.configMap.optional** (boolean)
 
-        Specify whether the ConfigMap or its keys must be defined
+    Specify whether the ConfigMap or its keys must be defined
 
-      - **projected.sources.configMap.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
+  - **projected.sources.configMap.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
 
-        If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
+    If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
-    - **projected.sources.downwardAPI** (DownwardAPIProjection)
+  - **projected.sources.downwardAPI** (DownwardAPIProjection)
 
-      information about the downwardAPI data to project
+    information about the downwardAPI data to project
 
-      <a name="DownwardAPIProjection"></a>
-      *Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.*
+    <a name="DownwardAPIProjection"></a>
+    *Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.*
 
-      - **projected.sources.downwardAPI.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
+  - **projected.sources.downwardAPI.items** ([]<a href="{{< ref "../common-definitions/downward-api-volume-file#DownwardAPIVolumeFile" >}}">DownwardAPIVolumeFile</a>)
 
-        Items is a list of DownwardAPIVolume file
+    Items is a list of DownwardAPIVolume file
 
-    - **projected.sources.secret** (SecretProjection)
+  - **projected.sources.secret** (SecretProjection)
 
-      information about the secret data to project
+    information about the secret data to project
 
-      <a name="SecretProjection"></a>
-      *Adapts a secret into a projected volume.
-      
-      The contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.*
+    <a name="SecretProjection"></a>
+    *Adapts a secret into a projected volume.
+    
+    The contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.*
 
-      - **projected.sources.secret.name** (string)
+  - **projected.sources.secret.name** (string)
 
-        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-      - **projected.sources.secret.optional** (boolean)
+  - **projected.sources.secret.optional** (boolean)
 
-        Specify whether the Secret or its key must be defined
+    Specify whether the Secret or its key must be defined
 
-      - **projected.sources.secret.items** ([]<a href="{{< ref "../config-and-storage-resources/volume#KeyToPath" >}}">KeyToPath</a>)
+  - **projected.sources.secret.items** ([]<a href="{{< ref "../common-definitions/key-to-path#KeyToPath" >}}">KeyToPath</a>)
 
-        If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
+    If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
 
-    - **projected.sources.serviceAccountToken** (ServiceAccountTokenProjection)
+  - **projected.sources.serviceAccountToken** (ServiceAccountTokenProjection)
 
-      information about the serviceAccountToken data to project
+    information about the serviceAccountToken data to project
 
-      <a name="ServiceAccountTokenProjection"></a>
-      *ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).*
+    <a name="ServiceAccountTokenProjection"></a>
+    *ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).*
 
-      - **projected.sources.serviceAccountToken.path** (string), required
+  - **projected.sources.serviceAccountToken.path** (string), required
 
-        Path is the path relative to the mount point of the file to project the token into.
+    Path is the path relative to the mount point of the file to project the token into.
 
-      - **projected.sources.serviceAccountToken.audience** (string)
+  - **projected.sources.serviceAccountToken.audience** (string)
 
-        Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
+    Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
 
-      - **projected.sources.serviceAccountToken.expirationSeconds** (int64)
+  - **projected.sources.serviceAccountToken.expirationSeconds** (int64)
 
-        ExpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
+    ExpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
 
-### Local / Temporary Directory
+### Local / Temporary Directory {#Local-Temporary-Directory}
 
 
 - **emptyDir** (EmptyDirVolumeSource)
@@ -235,7 +233,7 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Type for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
 
-### Persistent volumes
+### Persistent volumes {#Persistent-volumes}
 
 
 - **awsElasticBlockStore** (AWSElasticBlockStoreVolumeSource)
@@ -367,33 +365,6 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Optional: points to a secret object containing parameters used to connect to OpenStack.
 
-- **csi** (CSIVolumeSource)
-
-  CSI (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).
-
-  <a name="CSIVolumeSource"></a>
-  *Represents a source location of a volume to mount, managed by an external CSI driver*
-
-  - **csi.driver** (string), required
-
-    Driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.
-
-  - **csi.fsType** (string)
-
-    Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
-
-  - **csi.nodePublishSecretRef** (<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
-
-    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and  may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
-
-  - **csi.readOnly** (boolean)
-
-    Specifies a read-only configuration for the volume. Defaults to false (read/write).
-
-  - **csi.volumeAttributes** (map[string]string)
-
-    VolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.
-
 - **fc** (FCVolumeSource)
 
   FC represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.
@@ -778,12 +749,42 @@ Volume represents a named volume in a pod that may be accessed by any container
 
     Storage Policy Based Management (SPBM) profile name.
 
-### Alpha level
+### Beta level {#Beta-level}
+
+
+- **csi** (CSIVolumeSource)
+
+  CSI (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).
+
+  <a name="CSIVolumeSource"></a>
+  *Represents a source location of a volume to mount, managed by an external CSI driver*
+
+  - **csi.driver** (string), required
+
+    Driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.
+
+  - **csi.fsType** (string)
+
+    Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.
+
+  - **csi.nodePublishSecretRef** (<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
+
+    NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and  may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.
+
+  - **csi.readOnly** (boolean)
+
+    Specifies a read-only configuration for the volume. Defaults to false (read/write).
+
+  - **csi.volumeAttributes** (map[string]string)
+
+    VolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.
+
+### Alpha level {#Alpha-level}
 
 
 - **ephemeral** (EphemeralVolumeSource)
 
-  Ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
+  Ephemeral represents a volume that is handled by a cluster storage driver (Alpha feature). The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.
   
   Use this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity
      tracking are needed,
@@ -797,12 +798,14 @@ Volume represents a named volume in a pod that may be accessed by any container
   Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.
   
   A pod can use both types of ephemeral volumes and persistent volumes at the same time.
-  
-  This is a beta feature and only available when the GenericEphemeralVolume feature gate is enabled.
 
   <a name="EphemeralVolumeSource"></a>
   *Represents an ephemeral volume that is handled by a normal storage driver.*
 
+  - **ephemeral.readOnly** (boolean)
+
+    Specifies a read-only configuration for the volume. Defaults to false (read/write).
+
   - **ephemeral.volumeClaimTemplate** (PersistentVolumeClaimTemplate)
 
     Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod.  The name of the PVC will be `\<pod name>-\<volume name>` where `\<volume name>` is the name from the `PodSpec.Volumes` array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).
@@ -816,15 +819,15 @@ Volume represents a named volume in a pod that may be accessed by any container
     <a name="PersistentVolumeClaimTemplate"></a>
     *PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim objects as part of an EphemeralVolumeSource.*
 
-    - **ephemeral.volumeClaimTemplate.spec** (<a href="{{< ref "../config-and-storage-resources/persistent-volume-claim-v1#PersistentVolumeClaimSpec" >}}">PersistentVolumeClaimSpec</a>), required
+  - **ephemeral.volumeClaimTemplate.spec** (<a href="{{< ref "../config-and-storage-resources/persistent-volume-claim-v1#PersistentVolumeClaimSpec" >}}">PersistentVolumeClaimSpec</a>), required
 
-      The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.
+    The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.
 
-    - **ephemeral.volumeClaimTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+  - **ephemeral.volumeClaimTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
-      May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
+    May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.
 
-### Deprecated
+### Deprecated {#Deprecated}
 
 
 - **gitRepo** (GitRepoVolumeSource)
@@ -850,51 +853,3 @@ Volume represents a named volume in a pod that may be accessed by any container
 
 
 
-## DownwardAPIVolumeFile {#DownwardAPIVolumeFile}
-
-DownwardAPIVolumeFile represents information to create the file containing the pod field
-
-<hr>
-
-- **path** (string), required
-
-  Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'
-
-- **fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
-
-  Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.
-
-- **mode** (int32)
-
-  Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
-- **resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
-
-  Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
-
-
-
-
-## KeyToPath {#KeyToPath}
-
-Maps a string key to a path within a volume.
-
-<hr>
-
-- **key** (string), required
-
-  The key to project.
-
-- **path** (string), required
-
-  The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
-
-- **mode** (int32)
-
-  Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
index 5597325fac..8aa8ed0c78 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
@@ -112,29 +112,29 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="CustomResourceColumnDefinition"></a>
     *CustomResourceColumnDefinition specifies a column for server side printing.*
 
-    - **versions.additionalPrinterColumns.jsonPath** (string), required
+  - **versions.additionalPrinterColumns.jsonPath** (string), required
 
-      jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.
+    jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.
 
-    - **versions.additionalPrinterColumns.name** (string), required
+  - **versions.additionalPrinterColumns.name** (string), required
 
-      name is a human readable name for the column.
+    name is a human readable name for the column.
 
-    - **versions.additionalPrinterColumns.type** (string), required
+  - **versions.additionalPrinterColumns.type** (string), required
 
-      type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
+    type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
 
-    - **versions.additionalPrinterColumns.description** (string)
+  - **versions.additionalPrinterColumns.description** (string)
 
-      description is a human readable description of this column.
+    description is a human readable description of this column.
 
-    - **versions.additionalPrinterColumns.format** (string)
+  - **versions.additionalPrinterColumns.format** (string)
 
-      format is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
+    format is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
 
-    - **versions.additionalPrinterColumns.priority** (int32)
+  - **versions.additionalPrinterColumns.priority** (int32)
 
-      priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.
+    priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.
 
   - **versions.deprecated** (boolean)
 
@@ -151,9 +151,9 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="CustomResourceValidation"></a>
     *CustomResourceValidation is a list of validation methods for CustomResources.*
 
-    - **versions.schema.openAPIV3Schema** (<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
+  - **versions.schema.openAPIV3Schema** (<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
 
-      openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.
+    openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.
 
   - **versions.subresources** (CustomResourceSubresources)
 
@@ -162,31 +162,31 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="CustomResourceSubresources"></a>
     *CustomResourceSubresources defines the status and scale subresources for CustomResources.*
 
-    - **versions.subresources.scale** (CustomResourceSubresourceScale)
+  - **versions.subresources.scale** (CustomResourceSubresourceScale)
 
-      scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.
+    scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.
 
-      <a name="CustomResourceSubresourceScale"></a>
-      *CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.*
+    <a name="CustomResourceSubresourceScale"></a>
+    *CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.*
 
-      - **versions.subresources.scale.specReplicasPath** (string), required
+  - **versions.subresources.scale.specReplicasPath** (string), required
 
-        specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.
+    specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.
 
-      - **versions.subresources.scale.statusReplicasPath** (string), required
+  - **versions.subresources.scale.statusReplicasPath** (string), required
 
-        statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.
+    statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.
 
-      - **versions.subresources.scale.labelSelectorPath** (string)
+  - **versions.subresources.scale.labelSelectorPath** (string)
 
-        labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.
+    labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.
 
-    - **versions.subresources.status** (CustomResourceSubresourceStatus)
+  - **versions.subresources.status** (CustomResourceSubresourceStatus)
 
-      status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.
+    status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.
 
-      <a name="CustomResourceSubresourceStatus"></a>
-      *CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza*
+    <a name="CustomResourceSubresourceStatus"></a>
+    *CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza*
 
 - **conversion** (CustomResourceConversion)
 
@@ -207,59 +207,59 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
     <a name="WebhookConversion"></a>
     *WebhookConversion describes how to call a conversion webhook*
 
-    - **conversion.webhook.conversionReviewVersions** ([]string), required
+  - **conversion.webhook.conversionReviewVersions** ([]string), required
 
-      conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail.
+    conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail.
 
-    - **conversion.webhook.clientConfig** (WebhookClientConfig)
+  - **conversion.webhook.clientConfig** (WebhookClientConfig)
 
-      clientConfig is the instructions for how to call the webhook if strategy is `Webhook`.
+    clientConfig is the instructions for how to call the webhook if strategy is `Webhook`.
 
-      <a name="WebhookClientConfig"></a>
-      *WebhookClientConfig contains the information to make a TLS connection with the webhook.*
+    <a name="WebhookClientConfig"></a>
+    *WebhookClientConfig contains the information to make a TLS connection with the webhook.*
 
-      - **conversion.webhook.clientConfig.caBundle** ([]byte)
+  - **conversion.webhook.clientConfig.caBundle** ([]byte)
 
-        caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
+    caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
 
-      - **conversion.webhook.clientConfig.service** (ServiceReference)
+  - **conversion.webhook.clientConfig.service** (ServiceReference)
 
-        service is a reference to the service for this webhook. Either service or url must be specified.
-        
-        If the webhook is running within the cluster, then you should use `service`.
+    service is a reference to the service for this webhook. Either service or url must be specified.
+    
+    If the webhook is running within the cluster, then you should use `service`.
 
-        <a name="ServiceReference"></a>
-        *ServiceReference holds a reference to Service.legacy.k8s.io*
+    <a name="ServiceReference"></a>
+    *ServiceReference holds a reference to Service.legacy.k8s.io*
 
-        - **conversion.webhook.clientConfig.service.name** (string), required
+  - **conversion.webhook.clientConfig.service.name** (string), required
 
-          name is the name of the service. Required
+    name is the name of the service. Required
 
-        - **conversion.webhook.clientConfig.service.namespace** (string), required
+  - **conversion.webhook.clientConfig.service.namespace** (string), required
 
-          namespace is the namespace of the service. Required
+    namespace is the namespace of the service. Required
 
-        - **conversion.webhook.clientConfig.service.path** (string)
+  - **conversion.webhook.clientConfig.service.path** (string)
 
-          path is an optional URL path at which the webhook will be contacted.
+    path is an optional URL path at which the webhook will be contacted.
 
-        - **conversion.webhook.clientConfig.service.port** (int32)
+  - **conversion.webhook.clientConfig.service.port** (int32)
 
-          port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.
+    port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.
 
-      - **conversion.webhook.clientConfig.url** (string)
+  - **conversion.webhook.clientConfig.url** (string)
 
-        url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
-        
-        The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
-        
-        Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.
-        
-        The scheme must be "https"; the URL must begin with "https://".
-        
-        A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
-        
-        Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
+    url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
+
+    The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
+
+    Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installations are likely to be non-portable or not readily run in a new cluster.
+
+    The scheme must be "https"; the URL must begin with "https://".
+
+    A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
+
+    Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
 
 - **preserveUnknownFields** (boolean)
 
@@ -269,218 +269,6 @@ CustomResourceDefinitionSpec describes how a user wants their resource to appear
 
 
 
-## JSONSchemaProps {#JSONSchemaProps}
-
-JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).
-
-<hr>
-
-- **$ref** (string)
-
-
-- **$schema** (string)
-
-
-- **additionalItems** (JSONSchemaPropsOrBool)
-
-
-  <a name="JSONSchemaPropsOrBool"></a>
-  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
-
-- **additionalProperties** (JSONSchemaPropsOrBool)
-
-
-  <a name="JSONSchemaPropsOrBool"></a>
-  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
-
-- **allOf** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **anyOf** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **default** (JSON)
-
-  default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false.
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **definitions** (map[string]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **dependencies** (map[string]JSONSchemaPropsOrStringArray)
-
-
-  <a name="JSONSchemaPropsOrStringArray"></a>
-  *JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array.*
-
-- **description** (string)
-
-
-- **enum** ([]JSON)
-
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **example** (JSON)
-
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **exclusiveMaximum** (boolean)
-
-
-- **exclusiveMinimum** (boolean)
-
-
-- **externalDocs** (ExternalDocumentation)
-
-
-  <a name="ExternalDocumentation"></a>
-  *ExternalDocumentation allows referencing an external resource for extended documentation.*
-
-  - **externalDocs.description** (string)
-
-
-  - **externalDocs.url** (string)
-
-
-- **format** (string)
-
-  format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:
-  
-  - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041" - isbn10: an ISBN10 number string like "0321751043" - isbn13: an ISBN13 number string like "978-0321751041" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559" - byte: base64 encoded binary data - password: any kind of string - date: a date string like "2006-01-02" as defined by full-date in RFC3339 - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.
-
-- **id** (string)
-
-
-- **items** (JSONSchemaPropsOrArray)
-
-
-  <a name="JSONSchemaPropsOrArray"></a>
-  *JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes.*
-
-- **maxItems** (int64)
-
-
-- **maxLength** (int64)
-
-
-- **maxProperties** (int64)
-
-
-- **maximum** (double)
-
-
-- **minItems** (int64)
-
-
-- **minLength** (int64)
-
-
-- **minProperties** (int64)
-
-
-- **minimum** (double)
-
-
-- **multipleOf** (double)
-
-
-- **not** (<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **nullable** (boolean)
-
-
-- **oneOf** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **pattern** (string)
-
-
-- **patternProperties** (map[string]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **properties** (map[string]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **required** ([]string)
-
-
-- **title** (string)
-
-
-- **type** (string)
-
-
-- **uniqueItems** (boolean)
-
-
-- **x-kubernetes-embedded-resource** (boolean)
-
-  x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).
-
-- **x-kubernetes-int-or-string** (boolean)
-
-  x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:
-  
-  1) anyOf:
-     - type: integer
-     - type: string
-  2) allOf:
-     - anyOf:
-       - type: integer
-       - type: string
-     - ... zero or more
-
-- **x-kubernetes-list-map-keys** ([]string)
-
-  x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.
-  
-  This tag MUST only be used on lists that have the "x-kubernetes-list-type" extension set to "map". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).
-  
-  The properties specified must either be required or have a default value, to ensure those properties are present for all list items.
-
-- **x-kubernetes-list-type** (string)
-
-  x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:
-  
-  1) `atomic`: the list is treated as a single entity, like a scalar.
-       Atomic lists will be entirely replaced when updated. This extension
-       may be used on any type of list (struct, scalar, ...).
-  2) `set`:
-       Sets are lists that must not have multiple items with the same value. Each
-       value must be a scalar, an object with x-kubernetes-map-type `atomic` or an
-       array with x-kubernetes-list-type `atomic`.
-  3) `map`:
-       These lists are like maps in that their elements have a non-index key
-       used to identify them. Order is preserved upon merge. The map tag
-       must only be used on a list with elements of type object.
-  Defaults to atomic for arrays.
-
-- **x-kubernetes-map-type** (string)
-
-  x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:
-  
-  1) `granular`:
-       These maps are actual maps (key-value pairs) and each fields are independent
-       from each other (they can each be manipulated by separate actors). This is
-       the default behaviour for all maps.
-  2) `atomic`: the list is treated as a single entity, like a scalar.
-       Atomic maps will be entirely replaced when updated.
-
-- **x-kubernetes-preserve-unknown-fields** (boolean)
-
-  x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.
-
-
-
-
-
 ## CustomResourceDefinitionStatus {#CustomResourceDefinitionStatus}
 
 CustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition
@@ -520,8 +308,6 @@ CustomResourceDefinitionStatus indicates the state of the CustomResourceDefiniti
 
 - **conditions** ([]CustomResourceDefinitionCondition)
 
-  *Map: unique values on key type will be kept during a merge*
-  
   conditions indicate state for particular aspects of a CustomResourceDefinition
 
   <a name="CustomResourceDefinitionCondition"></a>
@@ -564,21 +350,19 @@ CustomResourceDefinitionList is a list of CustomResourceDefinition objects.
 
 <hr>
 
-- **items** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#CustomResourceDefinition" >}}">CustomResourceDefinition</a>), required
+- **apiVersion**: apiextensions.k8s.io/v1
 
-  items list individual CustomResourceDefinition objects
 
-- **apiVersion** (string)
+- **kind**: CustomResourceDefinitionList
 
-  APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
-- **kind** (string)
-
-  Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
 
+- **items** ([]<a href="{{< ref "../extend-resources/custom-resource-definition-v1#CustomResourceDefinition" >}}">CustomResourceDefinition</a>), required
+
+  items list individual CustomResourceDefinition objects
+
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
index 59f3b7c457..9e17c11ae3 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
@@ -50,48 +50,48 @@ MutatingWebhookConfiguration describes the configuration of and admission webhoo
     <a name="WebhookClientConfig"></a>
     *WebhookClientConfig contains the information to make a TLS connection with the webhook*
 
-    - **webhooks.clientConfig.caBundle** ([]byte)
+  - **webhooks.clientConfig.caBundle** ([]byte)
 
-      `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
+    `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
 
-    - **webhooks.clientConfig.service** (ServiceReference)
+  - **webhooks.clientConfig.service** (ServiceReference)
 
-      `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
-      
-      If the webhook is running within the cluster, then you should use `service`.
+    `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
+    
+    If the webhook is running within the cluster, then you should use `service`.
 
-      <a name="ServiceReference"></a>
-      *ServiceReference holds a reference to Service.legacy.k8s.io*
+    <a name="ServiceReference"></a>
+    *ServiceReference holds a reference to Service.legacy.k8s.io*
 
-      - **webhooks.clientConfig.service.name** (string), required
+  - **webhooks.clientConfig.service.name** (string), required
 
-        `name` is the name of the service. Required
+    `name` is the name of the service. Required
 
-      - **webhooks.clientConfig.service.namespace** (string), required
+  - **webhooks.clientConfig.service.namespace** (string), required
 
-        `namespace` is the namespace of the service. Required
+    `namespace` is the namespace of the service. Required
 
-      - **webhooks.clientConfig.service.path** (string)
+  - **webhooks.clientConfig.service.path** (string)
 
-        `path` is an optional URL path which will be sent in any request to this service.
+    `path` is an optional URL path which will be sent in any request to this service.
 
-      - **webhooks.clientConfig.service.port** (int32)
+  - **webhooks.clientConfig.service.port** (int32)
 
-        If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
+    If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
 
-    - **webhooks.clientConfig.url** (string)
+  - **webhooks.clientConfig.url** (string)
 
-      `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
-      
-      The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
-      
-      Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.
-      
-      The scheme must be "https"; the URL must begin with "https://".
-      
-      A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
-      
-      Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
+    `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
+
+    The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
+
+    Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installations are likely to be non-portable or not readily run in a new cluster.
+
+    The scheme must be "https"; the URL must begin with "https://".
+
+    A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
+
+    Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
 
   - **webhooks.name** (string), required
 
@@ -99,7 +99,7 @@ MutatingWebhookConfiguration describes the configuration of and admission webhoo
 
   - **webhooks.sideEffects** (string), required
 
-    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
+    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission change and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
 
   - **webhooks.failurePolicy** (string)
 
@@ -170,31 +170,31 @@ MutatingWebhookConfiguration describes the configuration of and admission webhoo
     <a name="RuleWithOperations"></a>
     *RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.*
 
-    - **webhooks.rules.apiGroups** ([]string)
+  - **webhooks.rules.apiGroups** ([]string)
 
-      APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
+    APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
 
-    - **webhooks.rules.apiVersions** ([]string)
+  - **webhooks.rules.apiVersions** ([]string)
 
-      APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
+    APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
 
-    - **webhooks.rules.operations** ([]string)
+  - **webhooks.rules.operations** ([]string)
 
-      Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
+    Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
 
-    - **webhooks.rules.resources** ([]string)
+  - **webhooks.rules.resources** ([]string)
 
-      Resources is a list of resources this rule applies to.
-      
-      For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
-      
-      If wildcard is present, the validation rule will ensure resources do not overlap with each other.
-      
-      Depending on the enclosing object, subresources might not be allowed. Required.
+    Resources is a list of resources this rule applies to.
+    
+    For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
+    
+    If wildcard is present, the validation rule will ensure resources do not overlap with each other.
+    
+    Depending on the enclosing object, subresources might not be allowed. Required.
 
-    - **webhooks.rules.scope** (string)
+  - **webhooks.rules.scope** (string)
 
-      scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
+    scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
 
   - **webhooks.timeoutSeconds** (int32)
 
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
index 41bf5b2905..84d26265a3 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
@@ -50,48 +50,48 @@ ValidatingWebhookConfiguration describes the configuration of and admission webh
     <a name="WebhookClientConfig"></a>
     *WebhookClientConfig contains the information to make a TLS connection with the webhook*
 
-    - **webhooks.clientConfig.caBundle** ([]byte)
+  - **webhooks.clientConfig.caBundle** ([]byte)
 
-      `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
+    `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
 
-    - **webhooks.clientConfig.service** (ServiceReference)
+  - **webhooks.clientConfig.service** (ServiceReference)
 
-      `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
-      
-      If the webhook is running within the cluster, then you should use `service`.
+    `service` is a reference to the service for this webhook. Either `service` or `url` must be specified.
+    
+    If the webhook is running within the cluster, then you should use `service`.
 
-      <a name="ServiceReference"></a>
-      *ServiceReference holds a reference to Service.legacy.k8s.io*
+    <a name="ServiceReference"></a>
+    *ServiceReference holds a reference to Service.legacy.k8s.io*
 
-      - **webhooks.clientConfig.service.name** (string), required
+  - **webhooks.clientConfig.service.name** (string), required
 
-        `name` is the name of the service. Required
+    `name` is the name of the service. Required
 
-      - **webhooks.clientConfig.service.namespace** (string), required
+  - **webhooks.clientConfig.service.namespace** (string), required
 
-        `namespace` is the namespace of the service. Required
+    `namespace` is the namespace of the service. Required
 
-      - **webhooks.clientConfig.service.path** (string)
+  - **webhooks.clientConfig.service.path** (string)
 
-        `path` is an optional URL path which will be sent in any request to this service.
+    `path` is an optional URL path which will be sent in any request to this service.
 
-      - **webhooks.clientConfig.service.port** (int32)
+  - **webhooks.clientConfig.service.port** (int32)
 
-        If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
+    If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).
 
-    - **webhooks.clientConfig.url** (string)
+  - **webhooks.clientConfig.url** (string)
 
-      `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
-      
-      The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
-      
-      Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.
-      
-      The scheme must be "https"; the URL must begin with "https://".
-      
-      A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
-      
-      Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
+    `url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.
+
+    The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.
+
+    Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installations are likely to be non-portable or not readily run in a new cluster.
+
+    The scheme must be "https"; the URL must begin with "https://".
+
+    A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
+
+    Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
 
   - **webhooks.name** (string), required
 
@@ -99,7 +99,7 @@ ValidatingWebhookConfiguration describes the configuration of and admission webh
 
   - **webhooks.sideEffects** (string), required
 
-    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
+    SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission change and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.
 
   - **webhooks.failurePolicy** (string)
 
@@ -160,31 +160,31 @@ ValidatingWebhookConfiguration describes the configuration of and admission webh
     <a name="RuleWithOperations"></a>
     *RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.*
 
-    - **webhooks.rules.apiGroups** ([]string)
+  - **webhooks.rules.apiGroups** ([]string)
 
-      APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
+    APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.
 
-    - **webhooks.rules.apiVersions** ([]string)
+  - **webhooks.rules.apiVersions** ([]string)
 
-      APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
+    APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.
 
-    - **webhooks.rules.operations** ([]string)
+  - **webhooks.rules.operations** ([]string)
 
-      Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
+    Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.
 
-    - **webhooks.rules.resources** ([]string)
+  - **webhooks.rules.resources** ([]string)
 
-      Resources is a list of resources this rule applies to.
-      
-      For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
-      
-      If wildcard is present, the validation rule will ensure resources do not overlap with each other.
-      
-      Depending on the enclosing object, subresources might not be allowed. Required.
+    Resources is a list of resources this rule applies to.
+    
+    For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.
+    
+    If wildcard is present, the validation rule will ensure resources do not overlap with each other.
+    
+    Depending on the enclosing object, subresources might not be allowed. Required.
 
-    - **webhooks.rules.scope** (string)
+  - **webhooks.rules.scope** (string)
 
-      scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
+    scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".
 
   - **webhooks.timeoutSeconds** (int32)
 
diff --git a/content/en/docs/reference/kubernetes-api/policies-resources/_index.md b/content/en/docs/reference/kubernetes-api/policies-resources/_index.md
new file mode 100644
index 0000000000..251e411647
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/policies-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Policies Resources"
+weight: 6
+---
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md b/content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
rename to content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md
index d1f45d5557..d73c4d3630 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policies-resources/limit-range-v1.md
@@ -30,7 +30,7 @@ LimitRange sets resource usage limits for each kind of resource in a Namespace.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeSpec" >}}">LimitRangeSpec</a>)
+- **spec** (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeSpec" >}}">LimitRangeSpec</a>)
 
   Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -95,9 +95,9 @@ LimitRangeList is a list of LimitRange items.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>), required
+- **items** ([]<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>), required
 
-  Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+  Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
 
 
 
@@ -142,7 +142,7 @@ GET /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
 401: Unauthorized
 
@@ -215,7 +215,7 @@ GET /api/v1/namespaces/{namespace}/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
+200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
 
 401: Unauthorized
 
@@ -283,7 +283,7 @@ GET /api/v1/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
+200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRangeList" >}}">LimitRangeList</a>): OK
 
 401: Unauthorized
 
@@ -302,7 +302,7 @@ POST /api/v1/namespaces/{namespace}/limitranges
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
+- **body**: <a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
 
   
 
@@ -326,11 +326,11 @@ POST /api/v1/namespaces/{namespace}/limitranges
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
+201 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
 
-202 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Accepted
+202 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Accepted
 
 401: Unauthorized
 
@@ -354,7 +354,7 @@ PUT /api/v1/namespaces/{namespace}/limitranges/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
+- **body**: <a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>, required
 
   
 
@@ -378,9 +378,9 @@ PUT /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
+201 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): Created
 
 401: Unauthorized
 
@@ -433,7 +433,7 @@ PATCH /api/v1/namespaces/{namespace}/limitranges/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
+200 (<a href="{{< ref "../policies-resources/limit-range-v1#LimitRange" >}}">LimitRange</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md b/content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md
similarity index 65%
rename from content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
rename to content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md
index 2288204257..798a3dc891 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policies-resources/network-policy-v1.md
@@ -30,7 +30,7 @@ NetworkPolicy describes what network traffic is allowed for a set of Pods
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicySpec" >}}">NetworkPolicySpec</a>)
+- **spec** (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicySpec" >}}">NetworkPolicySpec</a>)
 
   Specification of the desired behavior for this NetworkPolicy.
 
@@ -50,7 +50,7 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
 
 - **policyTypes** ([]string)
 
-  List of rule types that the NetworkPolicy relates to. Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"]. If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an Egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8
+  List of rule types that the NetworkPolicy relates to. Valid options are "Ingress", "Egress", or "Ingress,Egress". If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an Egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8
 
 - **ingress** ([]NetworkPolicyIngressRule)
 
@@ -66,32 +66,32 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPeer"></a>
     *NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed*
 
-    - **ingress.from.ipBlock** (IPBlock)
+  - **ingress.from.ipBlock** (IPBlock)
 
-      IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
+    IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
 
-      <a name="IPBlock"></a>
-      *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
+    <a name="IPBlock"></a>
+    *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
 
-      - **ingress.from.ipBlock.cidr** (string), required
+  - **ingress.from.ipBlock.cidr** (string), required
 
-        CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
+    CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
 
-      - **ingress.from.ipBlock.except** ([]string)
+  - **ingress.from.ipBlock.except** ([]string)
 
-        Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
+    Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
 
-    - **ingress.from.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **ingress.from.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-      Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
-      
-      If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
+    Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
+    
+    If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
 
-    - **ingress.from.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **ingress.from.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-      This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
-      
-      If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
+    This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
+    
+    If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
 
   - **ingress.ports** ([]NetworkPolicyPort)
 
@@ -100,20 +100,16 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPort"></a>
     *NetworkPolicyPort describes a port to allow traffic on*
 
-    - **ingress.ports.port** (IntOrString)
+  - **ingress.ports.port** (IntOrString)
 
-      The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.
+    The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers.
 
-      <a name="IntOrString"></a>
-      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
-    - **ingress.ports.endPort** (int32)
+  - **ingress.ports.protocol** (string)
 
-      If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port. This feature is in Alpha state and should be enabled using the Feature Gate "NetworkPolicyEndPort".
-
-    - **ingress.ports.protocol** (string)
-
-      The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
+    The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
 
 - **egress** ([]NetworkPolicyEgressRule)
 
@@ -129,32 +125,32 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPeer"></a>
     *NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed*
 
-    - **egress.to.ipBlock** (IPBlock)
+  - **egress.to.ipBlock** (IPBlock)
 
-      IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
+    IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.
 
-      <a name="IPBlock"></a>
-      *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
+    <a name="IPBlock"></a>
+    *IPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.*
 
-      - **egress.to.ipBlock.cidr** (string), required
+  - **egress.to.ipBlock.cidr** (string), required
 
-        CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
+    CIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"
 
-      - **egress.to.ipBlock.except** ([]string)
+  - **egress.to.ipBlock.except** ([]string)
 
-        Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
+    Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range
 
-    - **egress.to.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **egress.to.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-      Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
-      
-      If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
+    Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.
+    
+    If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
 
-    - **egress.to.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **egress.to.podSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-      This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
-      
-      If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
+    This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.
+    
+    If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
 
   - **egress.ports** ([]NetworkPolicyPort)
 
@@ -163,20 +159,16 @@ NetworkPolicySpec provides the specification of a NetworkPolicy
     <a name="NetworkPolicyPort"></a>
     *NetworkPolicyPort describes a port to allow traffic on*
 
-    - **egress.ports.port** (IntOrString)
+  - **egress.ports.port** (IntOrString)
 
-      The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.
+    The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers.
 
-      <a name="IntOrString"></a>
-      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
-    - **egress.ports.endPort** (int32)
+  - **egress.ports.protocol** (string)
 
-      If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port. This feature is in Alpha state and should be enabled using the Feature Gate "NetworkPolicyEndPort".
-
-    - **egress.ports.protocol** (string)
-
-      The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
+    The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.
 
 
 
@@ -198,7 +190,7 @@ NetworkPolicyList is a list of NetworkPolicy objects.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>), required
+- **items** ([]<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>), required
 
   Items is a list of schema objects.
 
@@ -245,7 +237,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
 401: Unauthorized
 
@@ -318,7 +310,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
+200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -386,7 +378,7 @@ GET /apis/networking.k8s.io/v1/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
+200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicyList" >}}">NetworkPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -405,7 +397,7 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
+- **body**: <a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
 
   
 
@@ -429,11 +421,11 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
+201 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
 
-202 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Accepted
+202 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Accepted
 
 401: Unauthorized
 
@@ -457,7 +449,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
+- **body**: <a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>, required
 
   
 
@@ -481,9 +473,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
+201 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): Created
 
 401: Unauthorized
 
@@ -536,7 +528,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/network-policy-v1#NetworkPolicy" >}}">NetworkPolicy</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md b/content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md
similarity index 70%
rename from content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
rename to content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md
index 841f1bb82a..47b9d83a7e 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policies-resources/pod-disruption-budget-v1beta1.md
@@ -1,17 +1,17 @@
 ---
 api_metadata:
-  apiVersion: "policy/v1"
-  import: "k8s.io/api/policy/v1"
+  apiVersion: "policy/v1beta1"
+  import: "k8s.io/api/policy/v1beta1"
   kind: "PodDisruptionBudget"
 content_type: "api_reference"
 description: "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods."
-title: "PodDisruptionBudget"
+title: "PodDisruptionBudget v1beta1"
 weight: 4
 ---
 
-`apiVersion: policy/v1`
+`apiVersion: policy/v1beta1`
 
-`import "k8s.io/api/policy/v1"`
+`import "k8s.io/api/policy/v1beta1"`
 
 
 ## PodDisruptionBudget {#PodDisruptionBudget}
@@ -20,7 +20,7 @@ PodDisruptionBudget is an object to define the max disruption that can be caused
 
 <hr>
 
-- **apiVersion**: policy/v1
+- **apiVersion**: policy/v1beta1
 
 
 - **kind**: PodDisruptionBudget
@@ -28,13 +28,12 @@ PodDisruptionBudget is an object to define the max disruption that can be caused
 
 - **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetSpec" >}}">PodDisruptionBudgetSpec</a>)
+- **spec** (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetSpec" >}}">PodDisruptionBudgetSpec</a>)
 
   Specification of the desired behavior of the PodDisruptionBudget.
 
-- **status** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetStatus" >}}">PodDisruptionBudgetStatus</a>)
+- **status** (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetStatus" >}}">PodDisruptionBudgetStatus</a>)
 
   Most recently observed status of the PodDisruptionBudget.
 
@@ -64,7 +63,7 @@ PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
 
 - **selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-  Label query over pods whose evictions are managed by the disruption budget. A null selector will match no pods, while an empty ({}) selector will select all pods within the namespace.
+  Label query over pods whose evictions are managed by the disruption budget.
 
 
 
@@ -92,52 +91,6 @@ PodDisruptionBudgetStatus represents information about the status of a PodDisrup
 
   total number of pods counted by this disruption budget
 
-- **conditions** ([]Condition)
-
-  *Patch strategy: merge on key `type`*
-  
-  *Map: unique values on key type will be kept during a merge*
-  
-  Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute
-                the number of allowed disruptions. Therefore no disruptions are
-                allowed and the status of the condition will be False.
-  - InsufficientPods: The number of pods are either at or below the number
-                      required by the PodDisruptionBudget. No disruptions are
-                      allowed and the status of the condition will be False.
-  - SufficientPods: There are more pods than required by the PodDisruptionBudget.
-                    The condition will be True, and the number of allowed
-                    disruptions are provided by the disruptionsAllowed property.
-
-  <a name="Condition"></a>
-  *Condition contains details for one aspect of the current state of this API Resource.*
-
-  - **conditions.lastTransitionTime** (Time), required
-
-    lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **conditions.message** (string), required
-
-    message is a human readable message indicating details about the transition. This may be an empty string.
-
-  - **conditions.reason** (string), required
-
-    reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
-
-  - **conditions.status** (string), required
-
-    status of the condition, one of True, False, Unknown.
-
-  - **conditions.type** (string), required
-
-    type of condition in CamelCase or in foo.example.com/CamelCase.
-
-  - **conditions.observedGeneration** (int64)
-
-    observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
-
 - **disruptedPods** (map[string]Time)
 
   DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
@@ -159,7 +112,7 @@ PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
 
 <hr>
 
-- **apiVersion**: policy/v1
+- **apiVersion**: policy/v1beta1
 
 
 - **kind**: PodDisruptionBudgetList
@@ -167,11 +120,9 @@ PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
 
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>), required
+- **items** ([]<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>), required
 
-  Items is a list of PodDisruptionBudgets
 
 
 
@@ -192,7 +143,7 @@ PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
 
 #### HTTP Request
 
-GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
+GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -216,7 +167,7 @@ GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -225,7 +176,7 @@ GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
+GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### Parameters
 
@@ -249,7 +200,7 @@ GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -258,7 +209,7 @@ GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### HTTP Request
 
-GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
+GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 
 #### Parameters
 
@@ -322,7 +273,7 @@ GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
 
 401: Unauthorized
 
@@ -331,7 +282,7 @@ GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
 
 #### HTTP Request
 
-GET /apis/policy/v1/poddisruptionbudgets
+GET /apis/policy/v1beta1/poddisruptionbudgets
 
 #### Parameters
 
@@ -390,7 +341,7 @@ GET /apis/policy/v1/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
 
 401: Unauthorized
 
@@ -399,7 +350,7 @@ GET /apis/policy/v1/poddisruptionbudgets
 
 #### HTTP Request
 
-POST /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
+POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 
 #### Parameters
 
@@ -409,7 +360,7 @@ POST /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -433,11 +384,11 @@ POST /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
-202 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Accepted
+202 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Accepted
 
 401: Unauthorized
 
@@ -446,7 +397,7 @@ POST /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
 
 #### HTTP Request
 
-PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
+PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -461,7 +412,7 @@ PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -485,9 +436,9 @@ PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
 401: Unauthorized
 
@@ -496,7 +447,7 @@ PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
+PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### Parameters
 
@@ -511,7 +462,7 @@ PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
+- **body**: <a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
 
   
 
@@ -535,9 +486,9 @@ PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
+201 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
 
 401: Unauthorized
 
@@ -546,7 +497,7 @@ PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### HTTP Request
 
-PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
+PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -590,7 +541,7 @@ PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -599,7 +550,7 @@ PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
+PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### Parameters
 
@@ -643,7 +594,7 @@ PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
 
 401: Unauthorized
 
@@ -652,7 +603,7 @@ PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
 
 #### HTTP Request
 
-DELETE /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
+DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### Parameters
 
@@ -707,7 +658,7 @@ DELETE /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}
 
 #### HTTP Request
 
-DELETE /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets
+DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
 
 #### Parameters
 
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md b/content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
rename to content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md
index a499f1dc6d..1d2eac8837 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/policies-resources/pod-security-policy-v1beta1.md
@@ -16,7 +16,7 @@ weight: 5
 
 ## PodSecurityPolicy {#PodSecurityPolicy}
 
-PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated in 1.21.
+PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
 
 <hr>
 
@@ -30,7 +30,7 @@ PodSecurityPolicy governs the ability to make requests that affect the Security
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicySpec" >}}">PodSecurityPolicySpec</a>)
+- **spec** (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicySpec" >}}">PodSecurityPolicySpec</a>)
 
   spec defines the policy enforced.
 
@@ -62,13 +62,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-    - **runAsUser.ranges.max** (int64), required
+  - **runAsUser.ranges.max** (int64), required
 
-      max is the end of the range, inclusive.
+    max is the end of the range, inclusive.
 
-    - **runAsUser.ranges.min** (int64), required
+  - **runAsUser.ranges.min** (int64), required
 
-      min is the start of the range, inclusive.
+    min is the start of the range, inclusive.
 
 - **runAsGroup** (RunAsGroupStrategyOptions)
 
@@ -88,13 +88,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-    - **runAsGroup.ranges.max** (int64), required
+  - **runAsGroup.ranges.max** (int64), required
 
-      max is the end of the range, inclusive.
+    max is the end of the range, inclusive.
 
-    - **runAsGroup.ranges.min** (int64), required
+  - **runAsGroup.ranges.min** (int64), required
 
-      min is the start of the range, inclusive.
+    min is the start of the range, inclusive.
 
 - **fsGroup** (FSGroupStrategyOptions), required
 
@@ -110,13 +110,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-    - **fsGroup.ranges.max** (int64), required
+  - **fsGroup.ranges.max** (int64), required
 
-      max is the end of the range, inclusive.
+    max is the end of the range, inclusive.
 
-    - **fsGroup.ranges.min** (int64), required
+  - **fsGroup.ranges.min** (int64), required
 
-      min is the start of the range, inclusive.
+    min is the start of the range, inclusive.
 
   - **fsGroup.rule** (string)
 
@@ -136,13 +136,13 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="IDRange"></a>
     *IDRange provides a min/max of an allowed range of IDs.*
 
-    - **supplementalGroups.ranges.max** (int64), required
+  - **supplementalGroups.ranges.max** (int64), required
 
-      max is the end of the range, inclusive.
+    max is the end of the range, inclusive.
 
-    - **supplementalGroups.ranges.min** (int64), required
+  - **supplementalGroups.ranges.min** (int64), required
 
-      min is the start of the range, inclusive.
+    min is the start of the range, inclusive.
 
   - **supplementalGroups.rule** (string)
 
@@ -166,21 +166,21 @@ PodSecurityPolicySpec defines the policy enforced.
     <a name="SELinuxOptions"></a>
     *SELinuxOptions are the labels to be applied to the container*
 
-    - **seLinux.seLinuxOptions.level** (string)
+  - **seLinux.seLinuxOptions.level** (string)
 
-      Level is SELinux level label that applies to the container.
+    Level is SELinux level label that applies to the container.
 
-    - **seLinux.seLinuxOptions.role** (string)
+  - **seLinux.seLinuxOptions.role** (string)
 
-      Role is a SELinux role label that applies to the container.
+    Role is a SELinux role label that applies to the container.
 
-    - **seLinux.seLinuxOptions.type** (string)
+  - **seLinux.seLinuxOptions.type** (string)
 
-      Type is a SELinux type label that applies to the container.
+    Type is a SELinux type label that applies to the container.
 
-    - **seLinux.seLinuxOptions.user** (string)
+  - **seLinux.seLinuxOptions.user** (string)
 
-      User is a SELinux user label that applies to the container.
+    User is a SELinux user label that applies to the container.
 
 - **readOnlyRootFilesystem** (boolean)
 
@@ -331,7 +331,7 @@ PodSecurityPolicyList is a list of PodSecurityPolicy objects.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>), required
+- **items** ([]<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>), required
 
   items is a list of schema objects.
 
@@ -373,7 +373,7 @@ GET /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
 401: Unauthorized
 
@@ -441,7 +441,7 @@ GET /apis/policy/v1beta1/podsecuritypolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicyList" >}}">PodSecurityPolicyList</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicyList" >}}">PodSecurityPolicyList</a>): OK
 
 401: Unauthorized
 
@@ -455,7 +455,7 @@ POST /apis/policy/v1beta1/podsecuritypolicies
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
+- **body**: <a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
 
   
 
@@ -479,11 +479,11 @@ POST /apis/policy/v1beta1/podsecuritypolicies
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
+201 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
 
-202 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
+202 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
 
 401: Unauthorized
 
@@ -502,7 +502,7 @@ PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
   name of the PodSecurityPolicy
 
 
-- **body**: <a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
+- **body**: <a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>, required
 
   
 
@@ -526,9 +526,9 @@ PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
+201 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Created
 
 401: Unauthorized
 
@@ -576,7 +576,7 @@ PATCH /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
 401: Unauthorized
 
@@ -624,9 +624,9 @@ DELETE /apis/policy/v1beta1/podsecuritypolicies/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
+200 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): OK
 
-202 (<a href="{{< ref "../policy-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
+202 (<a href="{{< ref "../policies-resources/pod-security-policy-v1beta1#PodSecurityPolicy" >}}">PodSecurityPolicy</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md b/content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md
similarity index 83%
rename from content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
rename to content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md
index 00818ec921..66b0451d2d 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policies-resources/resource-quota-v1.md
@@ -30,11 +30,11 @@ ResourceQuota sets aggregate quota restrictions enforced per namespace
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaSpec" >}}">ResourceQuotaSpec</a>)
+- **spec** (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaSpec" >}}">ResourceQuotaSpec</a>)
 
   Spec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaStatus" >}}">ResourceQuotaStatus</a>)
+- **status** (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaStatus" >}}">ResourceQuotaStatus</a>)
 
   Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -66,17 +66,17 @@ ResourceQuotaSpec defines the desired hard limits to enforce for Quota.
     <a name="ScopedResourceSelectorRequirement"></a>
     *A scoped-resource selector requirement is a selector that contains values, a scope name, and an operator that relates the scope name and values.*
 
-    - **scopeSelector.matchExpressions.operator** (string), required
+  - **scopeSelector.matchExpressions.operator** (string), required
 
-      Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.
+    Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.
 
-    - **scopeSelector.matchExpressions.scopeName** (string), required
+  - **scopeSelector.matchExpressions.scopeName** (string), required
 
-      The name of the scope that the selector applies to.
+    The name of the scope that the selector applies to.
 
-    - **scopeSelector.matchExpressions.values** ([]string)
+  - **scopeSelector.matchExpressions.values** ([]string)
 
-      An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+    An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
 
 - **scopes** ([]string)
 
@@ -120,7 +120,7 @@ ResourceQuotaList is a list of ResourceQuota items.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>), required
+- **items** ([]<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>), required
 
   Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/
 
@@ -167,7 +167,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -200,7 +200,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -273,7 +273,7 @@ GET /api/v1/namespaces/{namespace}/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
 
 401: Unauthorized
 
@@ -341,7 +341,7 @@ GET /api/v1/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuotaList" >}}">ResourceQuotaList</a>): OK
 
 401: Unauthorized
 
@@ -360,7 +360,7 @@ POST /api/v1/namespaces/{namespace}/resourcequotas
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -384,11 +384,11 @@ POST /api/v1/namespaces/{namespace}/resourcequotas
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
-202 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
+202 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
 
 401: Unauthorized
 
@@ -412,7 +412,7 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -436,9 +436,9 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
 401: Unauthorized
 
@@ -462,7 +462,7 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
+- **body**: <a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>, required
 
   
 
@@ -486,9 +486,9 @@ PUT /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-201 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
+201 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Created
 
 401: Unauthorized
 
@@ -541,7 +541,7 @@ PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -594,7 +594,7 @@ PATCH /api/v1/namespaces/{namespace}/resourcequotas/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
 401: Unauthorized
 
@@ -647,9 +647,9 @@ DELETE /api/v1/namespaces/{namespace}/resourcequotas/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
+200 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): OK
 
-202 (<a href="{{< ref "../policy-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
+202 (<a href="{{< ref "../policies-resources/resource-quota-v1#ResourceQuota" >}}">ResourceQuota</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/_index.md b/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
deleted file mode 100644
index 06a9e27fee..0000000000
--- a/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Policy Resources"
-weight: 6
----
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/_index.md b/content/en/docs/reference/kubernetes-api/service-resources/_index.md
deleted file mode 100644
index 0ab511b5a4..0000000000
--- a/content/en/docs/reference/kubernetes-api/service-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Service Resources"
-weight: 2
----
diff --git a/content/en/docs/reference/kubernetes-api/services-resources/_index.md b/content/en/docs/reference/kubernetes-api/services-resources/_index.md
new file mode 100644
index 0000000000..1c4c64040d
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/services-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Services Resources"
+weight: 2
+---
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md b/content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md
similarity index 75%
rename from content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
rename to content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md
index d296130937..bb8c7213bb 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
+++ b/content/en/docs/reference/kubernetes-api/services-resources/endpoint-slice-v1beta1.md
@@ -1,17 +1,17 @@
 ---
 api_metadata:
-  apiVersion: "discovery.k8s.io/v1"
-  import: "k8s.io/api/discovery/v1"
+  apiVersion: "discovery.k8s.io/v1beta1"
+  import: "k8s.io/api/discovery/v1beta1"
   kind: "EndpointSlice"
 content_type: "api_reference"
 description: "EndpointSlice represents a subset of the endpoints that implement a service."
-title: "EndpointSlice"
+title: "EndpointSlice v1beta1"
 weight: 3
 ---
 
-`apiVersion: discovery.k8s.io/v1`
+`apiVersion: discovery.k8s.io/v1beta1`
 
-`import "k8s.io/api/discovery/v1"`
+`import "k8s.io/api/discovery/v1beta1"`
 
 
 ## EndpointSlice {#EndpointSlice}
@@ -20,7 +20,7 @@ EndpointSlice represents a subset of the endpoints that implement a service. For
 
 <hr>
 
-- **apiVersion**: discovery.k8s.io/v1
+- **apiVersion**: discovery.k8s.io/v1beta1
 
 
 - **kind**: EndpointSlice
@@ -56,41 +56,17 @@ EndpointSlice represents a subset of the endpoints that implement a service. For
     <a name="EndpointConditions"></a>
     *EndpointConditions represents the current condition of an endpoint.*
 
-    - **endpoints.conditions.ready** (boolean)
+  - **endpoints.conditions.ready** (boolean)
 
-      ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be "true" for terminating endpoints.
+    ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be "true" for terminating endpoints.
 
-    - **endpoints.conditions.serving** (boolean)
+  - **endpoints.conditions.serving** (boolean)
 
-      serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
+    serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
 
-    - **endpoints.conditions.terminating** (boolean)
+  - **endpoints.conditions.terminating** (boolean)
 
-      terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
-
-  - **endpoints.deprecatedTopology** (map[string]string)
-
-    deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be removed when the v1beta1 API is removed (no sooner than kubernetes v1.24).  While this field can hold values, it is not writable through the v1 API, and any attempts to write to it will be silently ignored. Topology information can be found in the zone and nodeName fields instead.
-
-  - **endpoints.hints** (EndpointHints)
-
-    hints contains information associated with how an endpoint should be consumed.
-
-    <a name="EndpointHints"></a>
-    *EndpointHints provides hints describing how an endpoint should be consumed.*
-
-    - **endpoints.hints.forZones** ([]ForZone)
-
-      *Atomic: will be replaced during a merge*
-      
-      forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing.
-
-      <a name="ForZone"></a>
-      *ForZone provides information about which zones should consume this endpoint.*
-
-      - **endpoints.hints.forZones.name** (string), required
-
-        name represents the name of the zone.
+    terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
 
   - **endpoints.hostname** (string)
 
@@ -104,9 +80,16 @@ EndpointSlice represents a subset of the endpoints that implement a service. For
 
     targetRef is a reference to a Kubernetes object that represents this endpoint.
 
-  - **endpoints.zone** (string)
+  - **endpoints.topology** (map[string]string)
 
-    zone is the name of the Zone this endpoint exists in.
+    topology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node
+      where the endpoint is located. This should match the corresponding
+      node label.
+    * topology.kubernetes.io/zone: the value indicates the zone where the
+      endpoint is located. This should match the corresponding node label.
+    * topology.kubernetes.io/region: the value indicates the region where the
+      endpoint is located. This should match the corresponding node label.
+    This field is deprecated and will be removed in future api versions.
 
 - **ports** ([]EndpointPort)
 
@@ -143,7 +126,7 @@ EndpointSliceList represents a list of endpoint slices
 
 <hr>
 
-- **apiVersion**: discovery.k8s.io/v1
+- **apiVersion**: discovery.k8s.io/v1beta1
 
 
 - **kind**: EndpointSliceList
@@ -153,7 +136,7 @@ EndpointSliceList represents a list of endpoint slices
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>), required
+- **items** ([]<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>), required
 
   List of endpoint slices
 
@@ -176,7 +159,7 @@ EndpointSliceList represents a list of endpoint slices
 
 #### HTTP Request
 
-GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
+GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -200,7 +183,7 @@ GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
 401: Unauthorized
 
@@ -209,7 +192,7 @@ GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### HTTP Request
 
-GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
+GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 
 #### Parameters
 
@@ -273,7 +256,7 @@ GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
 
 401: Unauthorized
 
@@ -282,7 +265,7 @@ GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
 
 #### HTTP Request
 
-GET /apis/discovery.k8s.io/v1/endpointslices
+GET /apis/discovery.k8s.io/v1beta1/endpointslices
 
 #### Parameters
 
@@ -341,7 +324,7 @@ GET /apis/discovery.k8s.io/v1/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
 
 401: Unauthorized
 
@@ -350,7 +333,7 @@ GET /apis/discovery.k8s.io/v1/endpointslices
 
 #### HTTP Request
 
-POST /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
+POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 
 #### Parameters
 
@@ -360,7 +343,7 @@ POST /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>, required
+- **body**: <a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
 
   
 
@@ -384,11 +367,11 @@ POST /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
-201 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): Created
+201 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
 
-202 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): Accepted
+202 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Accepted
 
 401: Unauthorized
 
@@ -397,7 +380,7 @@ POST /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
 
 #### HTTP Request
 
-PUT /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
+PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -412,7 +395,7 @@ PUT /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>, required
+- **body**: <a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
 
   
 
@@ -436,9 +419,9 @@ PUT /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
-201 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): Created
+201 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
 
 401: Unauthorized
 
@@ -447,7 +430,7 @@ PUT /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### HTTP Request
 
-PATCH /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
+PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -491,7 +474,7 @@ PATCH /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1#EndpointSlice" >}}">EndpointSlice</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
 
 401: Unauthorized
 
@@ -500,7 +483,7 @@ PATCH /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### HTTP Request
 
-DELETE /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
+DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
 
 #### Parameters
 
@@ -555,7 +538,7 @@ DELETE /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}
 
 #### HTTP Request
 
-DELETE /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices
+DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
 
 #### Parameters
 
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md b/content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md
similarity index 78%
rename from content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
rename to content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md
index 223f9d2d54..b0c73533f8 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
+++ b/content/en/docs/reference/kubernetes-api/services-resources/endpoints-v1.md
@@ -62,21 +62,21 @@ Endpoints is a collection of endpoints that implement the actual service. Exampl
     <a name="EndpointAddress"></a>
     *EndpointAddress is a tuple that describes single IP address.*
 
-    - **subsets.addresses.ip** (string), required
+  - **subsets.addresses.ip** (string), required
 
-      The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
+    The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
 
-    - **subsets.addresses.hostname** (string)
+  - **subsets.addresses.hostname** (string)
 
-      The Hostname of this endpoint
+    The Hostname of this endpoint
 
-    - **subsets.addresses.nodeName** (string)
+  - **subsets.addresses.nodeName** (string)
 
-      Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
+    Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
 
-    - **subsets.addresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
+  - **subsets.addresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
 
-      Reference to object providing the endpoint.
+    Reference to object providing the endpoint.
 
   - **subsets.notReadyAddresses** ([]EndpointAddress)
 
@@ -85,21 +85,21 @@ Endpoints is a collection of endpoints that implement the actual service. Exampl
     <a name="EndpointAddress"></a>
     *EndpointAddress is a tuple that describes single IP address.*
 
-    - **subsets.notReadyAddresses.ip** (string), required
+  - **subsets.notReadyAddresses.ip** (string), required
 
-      The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
+    The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.
 
-    - **subsets.notReadyAddresses.hostname** (string)
+  - **subsets.notReadyAddresses.hostname** (string)
 
-      The Hostname of this endpoint
+    The Hostname of this endpoint
 
-    - **subsets.notReadyAddresses.nodeName** (string)
+  - **subsets.notReadyAddresses.nodeName** (string)
 
-      Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
+    Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.
 
-    - **subsets.notReadyAddresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
+  - **subsets.notReadyAddresses.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
 
-      Reference to object providing the endpoint.
+    Reference to object providing the endpoint.
 
   - **subsets.ports** ([]EndpointPort)
 
@@ -108,21 +108,21 @@ Endpoints is a collection of endpoints that implement the actual service. Exampl
     <a name="EndpointPort"></a>
     *EndpointPort is a tuple that describes a single port.*
 
-    - **subsets.ports.port** (int32), required
+  - **subsets.ports.port** (int32), required
 
-      The port number of the endpoint.
+    The port number of the endpoint.
 
-    - **subsets.ports.protocol** (string)
+  - **subsets.ports.protocol** (string)
 
-      The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.
+    The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.
 
-    - **subsets.ports.name** (string)
+  - **subsets.ports.name** (string)
 
-      The name of this port.  This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.
+    The name of this port.  This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.
 
-    - **subsets.ports.appProtocol** (string)
+  - **subsets.ports.appProtocol** (string)
 
-      The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.
+    The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.
 
 
 
@@ -144,7 +144,7 @@ EndpointsList is a list of endpoints.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>), required
+- **items** ([]<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>), required
 
   List of endpoints.
 
@@ -191,7 +191,7 @@ GET /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
 401: Unauthorized
 
@@ -264,7 +264,7 @@ GET /api/v1/namespaces/{namespace}/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
 
 401: Unauthorized
 
@@ -332,7 +332,7 @@ GET /api/v1/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoints-v1#EndpointsList" >}}">EndpointsList</a>): OK
 
 401: Unauthorized
 
@@ -351,7 +351,7 @@ POST /api/v1/namespaces/{namespace}/endpoints
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
+- **body**: <a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
 
   
 
@@ -375,11 +375,11 @@ POST /api/v1/namespaces/{namespace}/endpoints
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
-201 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
+201 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
 
-202 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Accepted
+202 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Accepted
 
 401: Unauthorized
 
@@ -403,7 +403,7 @@ PUT /api/v1/namespaces/{namespace}/endpoints/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
+- **body**: <a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>, required
 
   
 
@@ -427,9 +427,9 @@ PUT /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
-201 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
+201 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): Created
 
 401: Unauthorized
 
@@ -482,7 +482,7 @@ PATCH /api/v1/namespaces/{namespace}/endpoints/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
+200 (<a href="{{< ref "../services-resources/endpoints-v1#Endpoints" >}}">Endpoints</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md b/content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md
similarity index 79%
rename from content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
rename to content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md
index a6dd55e7c7..121c9551eb 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/services-resources/ingress-class-v1.md
@@ -30,7 +30,7 @@ IngressClass represents the class of the Ingress, referenced by the Ingress Spec
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClassSpec" >}}">IngressClassSpec</a>)
+- **spec** (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClassSpec" >}}">IngressClassSpec</a>)
 
   Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -48,33 +48,10 @@ IngressClassSpec provides information about the class of an Ingress.
 
   Controller refers to the name of the controller that should handle this class. This allows for different "flavors" that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. "acme.io/ingress-controller". This field is immutable.
 
-- **parameters** (IngressClassParametersReference)
+- **parameters** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
 
   Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.
 
-  <a name="IngressClassParametersReference"></a>
-  *IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.*
-
-  - **parameters.kind** (string), required
-
-    Kind is the type of resource being referenced.
-
-  - **parameters.name** (string), required
-
-    Name is the name of resource being referenced.
-
-  - **parameters.apiGroup** (string)
-
-    APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
-
-  - **parameters.namespace** (string)
-
-    Namespace is the namespace of the resource being referenced. This field is required when scope is set to "Namespace" and must be unset when scope is set to "Cluster".
-
-  - **parameters.scope** (string)
-
-    Scope represents if this refers to a cluster or namespace scoped resource. This may be set to "Cluster" (default) or "Namespace". Field can be enabled with IngressClassNamespacedParams feature gate.
-
 
 
 
@@ -95,7 +72,7 @@ IngressClassList is a collection of IngressClasses.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>), required
+- **items** ([]<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>), required
 
   Items is the list of IngressClasses.
 
@@ -137,7 +114,7 @@ GET /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
 401: Unauthorized
 
@@ -205,7 +182,7 @@ GET /apis/networking.k8s.io/v1/ingressclasses
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClassList" >}}">IngressClassList</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClassList" >}}">IngressClassList</a>): OK
 
 401: Unauthorized
 
@@ -219,7 +196,7 @@ POST /apis/networking.k8s.io/v1/ingressclasses
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
+- **body**: <a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
 
   
 
@@ -243,11 +220,11 @@ POST /apis/networking.k8s.io/v1/ingressclasses
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
-201 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
+201 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
 
-202 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Accepted
+202 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Accepted
 
 401: Unauthorized
 
@@ -266,7 +243,7 @@ PUT /apis/networking.k8s.io/v1/ingressclasses/{name}
   name of the IngressClass
 
 
-- **body**: <a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
+- **body**: <a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>, required
 
   
 
@@ -290,9 +267,9 @@ PUT /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
-201 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
+201 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): Created
 
 401: Unauthorized
 
@@ -340,7 +317,7 @@ PATCH /apis/networking.k8s.io/v1/ingressclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-class-v1#IngressClass" >}}">IngressClass</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md b/content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md
similarity index 71%
rename from content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
rename to content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md
index 6f8ebf1aad..003ad959ea 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
+++ b/content/en/docs/reference/kubernetes-api/services-resources/ingress-v1.md
@@ -30,11 +30,11 @@ Ingress is a collection of rules that allow inbound connections to reach the end
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../service-resources/ingress-v1#IngressSpec" >}}">IngressSpec</a>)
+- **spec** (<a href="{{< ref "../services-resources/ingress-v1#IngressSpec" >}}">IngressSpec</a>)
 
   Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../service-resources/ingress-v1#IngressStatus" >}}">IngressStatus</a>)
+- **status** (<a href="{{< ref "../services-resources/ingress-v1#IngressStatus" >}}">IngressStatus</a>)
 
   Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -48,10 +48,43 @@ IngressSpec describes the Ingress the user wishes to exist.
 
 <hr>
 
-- **defaultBackend** (<a href="{{< ref "../service-resources/ingress-v1#IngressBackend" >}}">IngressBackend</a>)
+- **defaultBackend** (IngressBackend)
 
   DefaultBackend is the backend that should handle requests that don't match any rule. If Rules are not specified, DefaultBackend must be specified. If DefaultBackend is not set, the handling of requests that do not match any of the rules will be up to the Ingress controller.
 
+  <a name="IngressBackend"></a>
+  *IngressBackend describes all endpoints for a given service and port.*
+
+  - **defaultBackend.resource** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
+
+    Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with "Service".
+
+  - **defaultBackend.service** (IngressServiceBackend)
+
+    Service references a Service as a Backend. This is a mutually exclusive setting with "Resource".
+
+    <a name="IngressServiceBackend"></a>
+    *IngressServiceBackend references a Kubernetes Service as a Backend.*
+
+  - **defaultBackend.service.name** (string), required
+
+    Name is the referenced service. The service must exist in the same namespace as the Ingress object.
+
+  - **defaultBackend.service.port** (ServiceBackendPort)
+
+    Port of the referenced service. A port name or port number is required for a IngressServiceBackend.
+
+    <a name="ServiceBackendPort"></a>
+    *ServiceBackendPort is the service port being referenced.*
+
+  - **defaultBackend.service.port.name** (string)
+
+    Name is the name of the port on the Service. This is a mutually exclusive setting with "Number".
+
+  - **defaultBackend.service.port.number** (int32)
+
+    Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with "Name".
+
 - **ingressClassName** (string)
 
   IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.
@@ -82,36 +115,69 @@ IngressSpec describes the Ingress the user wishes to exist.
     <a name="HTTPIngressRuleValue"></a>
     *HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://<host>/<path>?<searchpart> -> backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.*
 
-    - **rules.http.paths** ([]HTTPIngressPath), required
+  - **rules.http.paths** ([]HTTPIngressPath), required
 
-      *Atomic: will be replaced during a merge*
-      
-      A collection of paths that map requests to backends.
+    *Atomic: will be replaced during a merge*
+    
+    A collection of paths that map requests to backends.
 
-      <a name="HTTPIngressPath"></a>
-      *HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.*
+    <a name="HTTPIngressPath"></a>
+    *HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.*
 
-      - **rules.http.paths.backend** (<a href="{{< ref "../service-resources/ingress-v1#IngressBackend" >}}">IngressBackend</a>), required
+  - **rules.http.paths.backend** (IngressBackend), required
 
-        Backend defines the referenced service endpoint to which the traffic will be forwarded to.
+    Backend defines the referenced service endpoint to which the traffic will be forwarded to.
 
-      - **rules.http.paths.path** (string)
+    <a name="IngressBackend"></a>
+    *IngressBackend describes all endpoints for a given service and port.*
 
-        Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.
+  - **rules.http.paths.backend.resource** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
 
-      - **rules.http.paths.pathType** (string)
+    Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with "Service".
 
-        PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is
-          done on a path element by element basis. A path element refers is the
-          list of labels in the path split by the '/' separator. A request is a
-          match for path p if every p is an element-wise prefix of p of the
-          request path. Note that if the last element of the path is a substring
-          of the last element in request path, it is not a match (e.g. /foo/bar
-          matches /foo/bar/baz, but does not match /foo/barbaz).
-        * ImplementationSpecific: Interpretation of the Path matching is up to
-          the IngressClass. Implementations can treat this as a separate PathType
-          or treat it identically to Prefix or Exact path types.
-        Implementations are required to support all path types.
+  - **rules.http.paths.backend.service** (IngressServiceBackend)
+
+    Service references a Service as a Backend. This is a mutually exclusive setting with "Resource".
+
+    <a name="IngressServiceBackend"></a>
+    *IngressServiceBackend references a Kubernetes Service as a Backend.*
+
+  - **rules.http.paths.backend.service.name** (string), required
+
+    Name is the referenced service. The service must exist in the same namespace as the Ingress object.
+
+  - **rules.http.paths.backend.service.port** (ServiceBackendPort)
+
+    Port of the referenced service. A port name or port number is required for a IngressServiceBackend.
+
+    <a name="ServiceBackendPort"></a>
+    *ServiceBackendPort is the service port being referenced.*
+
+  - **rules.http.paths.backend.service.port.name** (string)
+
+    Name is the name of the port on the Service. This is a mutually exclusive setting with "Number".
+
+  - **rules.http.paths.backend.service.port.number** (int32)
+
+    Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with "Name".
+
+  - **rules.http.paths.path** (string)
+
+    Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.
+
+  - **rules.http.paths.pathType** (string)
+
+    PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is
+      done on a path element by element basis. A path element refers is the
+      list of labels in the path split by the '/' separator. A request is a
+      match for path p if every p is an element-wise prefix of p of the
+      request path. Note that if the last element of the path is a substring
+      of the last element in request path, it is not a match (e.g. /foo/bar
+      matches /foo/bar/baz, but does not match /foo/barbaz).
+    * ImplementationSpecific: Interpretation of the Path matching is up to
+      the IngressClass. Implementations can treat this as a separate PathType
+      or treat it identically to Prefix or Exact path types.
+    Implementations are required to support all path types.
 
 - **tls** ([]IngressTLS)
 
@@ -136,46 +202,6 @@ IngressSpec describes the Ingress the user wishes to exist.
 
 
 
-## IngressBackend {#IngressBackend}
-
-IngressBackend describes all endpoints for a given service and port.
-
-<hr>
-
-- **resource** (<a href="{{< ref "../common-definitions/typed-local-object-reference#TypedLocalObjectReference" >}}">TypedLocalObjectReference</a>)
-
-  Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with "Service".
-
-- **service** (IngressServiceBackend)
-
-  Service references a Service as a Backend. This is a mutually exclusive setting with "Resource".
-
-  <a name="IngressServiceBackend"></a>
-  *IngressServiceBackend references a Kubernetes Service as a Backend.*
-
-  - **service.name** (string), required
-
-    Name is the referenced service. The service must exist in the same namespace as the Ingress object.
-
-  - **service.port** (ServiceBackendPort)
-
-    Port of the referenced service. A port name or port number is required for a IngressServiceBackend.
-
-    <a name="ServiceBackendPort"></a>
-    *ServiceBackendPort is the service port being referenced.*
-
-    - **service.port.name** (string)
-
-      Name is the name of the port on the Service. This is a mutually exclusive setting with "Number".
-
-    - **service.port.number** (int32)
-
-      Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with "Name".
-
-
-
-
-
 ## IngressStatus {#IngressStatus}
 
 IngressStatus describe the current state of the Ingress.
@@ -196,37 +222,37 @@ IngressStatus describe the current state of the Ingress.
     <a name="LoadBalancerIngress"></a>
     *LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.*
 
-    - **loadBalancer.ingress.hostname** (string)
+  - **loadBalancer.ingress.hostname** (string)
 
-      Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
+    Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
 
-    - **loadBalancer.ingress.ip** (string)
+  - **loadBalancer.ingress.ip** (string)
 
-      IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
+    IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
 
-    - **loadBalancer.ingress.ports** ([]PortStatus)
+  - **loadBalancer.ingress.ports** ([]PortStatus)
 
-      *Atomic: will be replaced during a merge*
-      
-      Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
+    *Atomic: will be replaced during a merge*
+    
+    Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
 
-      <a name="PortStatus"></a>
-      **
+    <a name="PortStatus"></a>
+    **
 
-      - **loadBalancer.ingress.ports.port** (int32), required
+  - **loadBalancer.ingress.ports.port** (int32), required
 
-        Port is the port number of the service port of which status is recorded here
+    Port is the port number of the service port of which status is recorded here
 
-      - **loadBalancer.ingress.ports.protocol** (string), required
+  - **loadBalancer.ingress.ports.protocol** (string), required
 
-        Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
+    Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
 
-      - **loadBalancer.ingress.ports.error** (string)
+  - **loadBalancer.ingress.ports.error** (string)
 
-        Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
-          CamelCase names
-        - cloud provider specific error values must have names that comply with the
-          format foo.example.com/CamelCase.
+    Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
+      CamelCase names
+    - cloud provider specific error values must have names that comply with the
+      format foo.example.com/CamelCase.
 
 
 
@@ -238,22 +264,20 @@ IngressList is a collection of Ingress.
 
 <hr>
 
-- **items** ([]<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>), required
+- **apiVersion**: networking.k8s.io/v1
 
-  Items is the list of Ingress.
 
-- **apiVersion** (string)
+- **kind**: IngressList
 
-  APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
-- **kind** (string)
-
-  Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
+- **items** ([]<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>), required
+
+  Items is the list of Ingress.
+
 
 
 
@@ -297,7 +321,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -330,7 +354,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -403,7 +427,7 @@ GET /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
 
 401: Unauthorized
 
@@ -471,7 +495,7 @@ GET /apis/networking.k8s.io/v1/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#IngressList" >}}">IngressList</a>): OK
 
 401: Unauthorized
 
@@ -490,7 +514,7 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -514,11 +538,11 @@ POST /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
-202 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Accepted
+202 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Accepted
 
 401: Unauthorized
 
@@ -542,7 +566,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -566,9 +590,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
 401: Unauthorized
 
@@ -592,7 +616,7 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
+- **body**: <a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>, required
 
   
 
@@ -616,9 +640,9 @@ PUT /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
-201 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
+201 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): Created
 
 401: Unauthorized
 
@@ -671,7 +695,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
@@ -724,7 +748,7 @@ PATCH /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
+200 (<a href="{{< ref "../services-resources/ingress-v1#Ingress" >}}">Ingress</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md b/content/en/docs/reference/kubernetes-api/services-resources/service-v1.md
similarity index 85%
rename from content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
rename to content/en/docs/reference/kubernetes-api/services-resources/service-v1.md
index ab17bf3f0e..bfb2c819bd 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
+++ b/content/en/docs/reference/kubernetes-api/services-resources/service-v1.md
@@ -30,11 +30,11 @@ Service is a named abstraction of software service (for example, mysql) consisti
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../service-resources/service-v1#ServiceSpec" >}}">ServiceSpec</a>)
+- **spec** (<a href="{{< ref "../services-resources/service-v1#ServiceSpec" >}}">ServiceSpec</a>)
 
   Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../service-resources/service-v1#ServiceStatus" >}}">ServiceStatus</a>)
+- **status** (<a href="{{< ref "../services-resources/service-v1#ServiceStatus" >}}">ServiceStatus</a>)
 
   Most recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -134,22 +134,14 @@ ServiceSpec describes the attributes that a user creates on a service.
 
   If specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature." More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/
 
-- **loadBalancerClass** (string)
-
-  loadBalancerClass is the class of the load balancer implementation this Service belongs to. If specified, the value of this field must be a label-style identifier, with an optional prefix, e.g. "internal-vip" or "example.com/internal-vip". Unprefixed names are reserved for end-users. This field can only be set when the Service type is 'LoadBalancer'. If not set, the default load balancer implementation is used, today this is typically done through the cloud provider integration, but should apply for any default implementation. If set, it is assumed that a load balancer implementation is watching for Services with a matching class. Any default load balancer implementation (e.g. cloud providers) should ignore Services that set this field. This field can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. This field will be wiped when a service is updated to a non 'LoadBalancer' type.
-
 - **externalName** (string)
 
-  externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved.  Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be "ExternalName".
+  externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved.  Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires Type to be
 
 - **externalTrafficPolicy** (string)
 
   externalTrafficPolicy denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints. "Local" preserves the client source IP and avoids a second hop for LoadBalancer and Nodeport type services, but risks potentially imbalanced traffic spreading. "Cluster" obscures the client source IP and may cause a second hop to another node, but should have good overall load-spreading.
 
-- **internalTrafficPolicy** (string)
-
-  InternalTrafficPolicy specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only. "Cluster" routes internal traffic to a Service to all endpoints. "Local" routes traffic to node-local endpoints only, traffic is dropped if no node-local endpoints are ready. The default value is "Cluster".
-
 - **healthCheckNodePort** (int32)
 
   healthCheckNodePort specifies the healthcheck nodePort for the service. This only applies when type is set to LoadBalancer and externalTrafficPolicy is set to Local. If a value is specified, is in-range, and is not in use, it will be used.  If not specified, a value will be automatically allocated.  External systems (e.g. load-balancers) can use this port to determine if a given node holds endpoints for this service or not.  If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type).
@@ -172,13 +164,13 @@ ServiceSpec describes the attributes that a user creates on a service.
     <a name="ClientIPConfig"></a>
     *ClientIPConfig represents the configurations of Client IP based session affinity.*
 
-    - **sessionAffinityConfig.clientIP.timeoutSeconds** (int32)
+  - **sessionAffinityConfig.clientIP.timeoutSeconds** (int32)
 
-      timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be >0 && \<=86400(for 1 day) if ServiceAffinity == "ClientIP". Default value is 10800(for 3 hours).
+    timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be >0 && \<=86400(for 1 day) if ServiceAffinity == "ClientIP". Default value is 10800(for 3 hours).
 
 - **topologyKeys** ([]string)
 
-  topologyKeys is a preference-order list of topology keys which implementations of services should use to preferentially sort endpoints when accessing this Service, it can not be used at the same time as externalTrafficPolicy=Local. Topology keys must be valid label keys and at most 16 keys may be specified. Endpoints are chosen based on the first topology key with available backends. If this field is specified and all entries have no backends that match the topology of the client, the service has no backends for that client and connections should fail. The special value "*" may be used to mean "any topology". This catch-all value, if used, only makes sense as the last value in the list. If this is not specified or empty, no topology constraints will be applied. This field is alpha-level and is only honored by servers that enable the ServiceTopology feature. This field is deprecated and will be removed in a future version.
+  topologyKeys is a preference-order list of topology keys which implementations of services should use to preferentially sort endpoints when accessing this Service, it can not be used at the same time as externalTrafficPolicy=Local. Topology keys must be valid label keys and at most 16 keys may be specified. Endpoints are chosen based on the first topology key with available backends. If this field is specified and all entries have no backends that match the topology of the client, the service has no backends for that client and connections should fail. The special value "*" may be used to mean "any topology". This catch-all value, if used, only makes sense as the last value in the list. If this is not specified or empty, no topology constraints will be applied. This field is alpha-level and is only honored by servers that enable the ServiceTopology feature.
 
 - **allocateLoadBalancerNodePorts** (boolean)
 
@@ -246,37 +238,37 @@ ServiceStatus represents the current status of a service.
     <a name="LoadBalancerIngress"></a>
     *LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.*
 
-    - **loadBalancer.ingress.hostname** (string)
+  - **loadBalancer.ingress.hostname** (string)
 
-      Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
+    Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)
 
-    - **loadBalancer.ingress.ip** (string)
+  - **loadBalancer.ingress.ip** (string)
 
-      IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
+    IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)
 
-    - **loadBalancer.ingress.ports** ([]PortStatus)
+  - **loadBalancer.ingress.ports** ([]PortStatus)
 
-      *Atomic: will be replaced during a merge*
-      
-      Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
+    *Atomic: will be replaced during a merge*
+    
+    Ports is a list of records of service ports If used, every port defined in the service should have an entry in it
 
-      <a name="PortStatus"></a>
-      **
+    <a name="PortStatus"></a>
+    **
 
-      - **loadBalancer.ingress.ports.port** (int32), required
+  - **loadBalancer.ingress.ports.port** (int32), required
 
-        Port is the port number of the service port of which status is recorded here
+    Port is the port number of the service port of which status is recorded here
 
-      - **loadBalancer.ingress.ports.protocol** (string), required
+  - **loadBalancer.ingress.ports.protocol** (string), required
 
-        Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
+    Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"
 
-      - **loadBalancer.ingress.ports.error** (string)
+  - **loadBalancer.ingress.ports.error** (string)
 
-        Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
-          CamelCase names
-        - cloud provider specific error values must have names that comply with the
-          format foo.example.com/CamelCase.
+    Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use
+      CamelCase names
+    - cloud provider specific error values must have names that comply with the
+      format foo.example.com/CamelCase.
 
 
 
@@ -298,7 +290,7 @@ ServiceList holds a list of services.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>), required
+- **items** ([]<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>), required
 
   List of services
 
@@ -345,7 +337,7 @@ GET /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -378,7 +370,7 @@ GET /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -451,7 +443,7 @@ GET /api/v1/namespaces/{namespace}/services
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
 
 401: Unauthorized
 
@@ -519,7 +511,7 @@ GET /api/v1/services
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#ServiceList" >}}">ServiceList</a>): OK
 
 401: Unauthorized
 
@@ -538,7 +530,7 @@ POST /api/v1/namespaces/{namespace}/services
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -562,11 +554,11 @@ POST /api/v1/namespaces/{namespace}/services
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
 
-202 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Accepted
+202 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Accepted
 
 401: Unauthorized
 
@@ -590,7 +582,7 @@ PUT /api/v1/namespaces/{namespace}/services/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -614,9 +606,9 @@ PUT /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
 
 401: Unauthorized
 
@@ -640,7 +632,7 @@ PUT /api/v1/namespaces/{namespace}/services/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>, required
+- **body**: <a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>, required
 
   
 
@@ -664,9 +656,9 @@ PUT /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
 
-201 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): Created
+201 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): Created
 
 401: Unauthorized
 
@@ -719,7 +711,7 @@ PATCH /api/v1/namespaces/{namespace}/services/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
@@ -772,7 +764,7 @@ PATCH /api/v1/namespaces/{namespace}/services/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../service-resources/service-v1#Service" >}}">Service</a>): OK
+200 (<a href="{{< ref "../services-resources/service-v1#Service" >}}">Service</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/_index.md b/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
deleted file mode 100644
index 85d1bfa44f..0000000000
--- a/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Workload Resources"
-weight: 1
----
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
deleted file mode 100644
index 6553afa238..0000000000
--- a/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
+++ /dev/null
@@ -1,2631 +0,0 @@
----
-api_metadata:
-  apiVersion: "v1"
-  import: "k8s.io/api/core/v1"
-  kind: "Pod"
-content_type: "api_reference"
-description: "Pod is a collection of containers that can run on a host."
-title: "Pod"
-weight: 1
----
-
-`apiVersion: v1`
-
-`import "k8s.io/api/core/v1"`
-
-
-## Pod {#Pod}
-
-Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.
-
-<hr>
-
-- **apiVersion**: v1
-
-
-- **kind**: Pod
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **spec** (<a href="{{< ref "../workload-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
-
-  Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **status** (<a href="{{< ref "../workload-resources/pod-v1#PodStatus" >}}">PodStatus</a>)
-
-  Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-
-
-
-
-## PodSpec {#PodSpec}
-
-PodSpec is a description of a pod.
-
-<hr>
-
-
-
-### Containers
-
-
-- **containers** ([]<a href="{{< ref "../workload-resources/pod-v1#Container" >}}">Container</a>), required
-
-  *Patch strategy: merge on key `name`*
-  
-  List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.
-
-- **initContainers** ([]<a href="{{< ref "../workload-resources/pod-v1#Container" >}}">Container</a>)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
-
-- **imagePullSecrets** ([]<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
-
-  *Patch strategy: merge on key `name`*
-  
-  ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
-
-- **enableServiceLinks** (boolean)
-
-  EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.
-
-### Volumes
-
-
-- **volumes** ([]<a href="{{< ref "../config-and-storage-resources/volume#Volume" >}}">Volume</a>)
-
-  *Patch strategies: retainKeys, merge on key `name`*
-  
-  List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes
-
-### Scheduling
-
-
-- **nodeSelector** (map[string]string)
-
-  NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
-
-- **nodeName** (string)
-
-  NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.
-
-- **affinity** (Affinity)
-
-  If specified, the pod's scheduling constraints
-
-  <a name="Affinity"></a>
-  *Affinity is a group of affinity scheduling rules.*
-
-  - **affinity.nodeAffinity** (<a href="{{< ref "../workload-resources/pod-v1#NodeAffinity" >}}">NodeAffinity</a>)
-
-    Describes node affinity scheduling rules for the pod.
-
-  - **affinity.podAffinity** (<a href="{{< ref "../workload-resources/pod-v1#PodAffinity" >}}">PodAffinity</a>)
-
-    Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
-
-  - **affinity.podAntiAffinity** (<a href="{{< ref "../workload-resources/pod-v1#PodAntiAffinity" >}}">PodAntiAffinity</a>)
-
-    Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
-
-- **tolerations** ([]Toleration)
-
-  If specified, the pod's tolerations.
-
-  <a name="Toleration"></a>
-  *The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.*
-
-  - **tolerations.key** (string)
-
-    Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
-
-  - **tolerations.operator** (string)
-
-    Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
-
-  - **tolerations.value** (string)
-
-    Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
-
-  - **tolerations.effect** (string)
-
-    Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
-
-  - **tolerations.tolerationSeconds** (int64)
-
-    TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
-
-- **schedulerName** (string)
-
-  If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
-
-- **runtimeClassName** (string)
-
-  RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.
-
-- **priorityClassName** (string)
-
-  If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
-
-- **priority** (int32)
-
-  The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.
-
-- **topologySpreadConstraints** ([]TopologySpreadConstraint)
-
-  *Patch strategy: merge on key `topologyKey`*
-  
-  *Map: unique values on keys `topologyKey, whenUnsatisfiable` will be kept during a merge*
-  
-  TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.
-
-  <a name="TopologySpreadConstraint"></a>
-  *TopologySpreadConstraint specifies how to spread matching pods among the given topology.*
-
-  - **topologySpreadConstraints.maxSkew** (int32), required
-
-    MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 | zone3 | |   P   |   P   |       | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.
-
-  - **topologySpreadConstraints.topologyKey** (string), required
-
-    TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each \<key, value> as a "bucket", and try to put balanced number of pods into each bucket. It's a required field.
-
-  - **topologySpreadConstraints.whenUnsatisfiable** (string), required
-
-    WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,
-      but giving higher precedence to topologies that would help reduce the
-      skew.
-    A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assigment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P |   P   |   P   | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.
-
-  - **topologySpreadConstraints.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.
-
-### Lifecycle
-
-
-- **restartPolicy** (string)
-
-  Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
-
-- **terminationGracePeriodSeconds** (int64)
-
-  Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.
-
-- **activeDeadlineSeconds** (int64)
-
-  Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.
-
-- **readinessGates** ([]PodReadinessGate)
-
-  If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md
-
-  <a name="PodReadinessGate"></a>
-  *PodReadinessGate contains the reference to a pod condition*
-
-  - **readinessGates.conditionType** (string), required
-
-    ConditionType refers to a condition in the pod's condition list with matching type.
-
-### Hostname and Name resolution
-
-
-- **hostname** (string)
-
-  Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.
-
-- **setHostnameAsFQDN** (boolean)
-
-  If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.
-
-- **subdomain** (string)
-
-  If specified, the fully qualified Pod hostname will be "\<hostname>.\<subdomain>.\<pod namespace>.svc.\<cluster domain>". If not specified, the pod will not have a domainname at all.
-
-- **hostAliases** ([]HostAlias)
-
-  *Patch strategy: merge on key `ip`*
-  
-  HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified. This is only valid for non-hostNetwork pods.
-
-  <a name="HostAlias"></a>
-  *HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.*
-
-  - **hostAliases.hostnames** ([]string)
-
-    Hostnames for the above IP address.
-
-  - **hostAliases.ip** (string)
-
-    IP address of the host file entry.
-
-- **dnsConfig** (PodDNSConfig)
-
-  Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
-
-  <a name="PodDNSConfig"></a>
-  *PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.*
-
-  - **dnsConfig.nameservers** ([]string)
-
-    A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.
-
-  - **dnsConfig.options** ([]PodDNSConfigOption)
-
-    A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.
-
-    <a name="PodDNSConfigOption"></a>
-    *PodDNSConfigOption defines DNS resolver options of a pod.*
-
-    - **dnsConfig.options.name** (string)
-
-      Required.
-
-    - **dnsConfig.options.value** (string)
-
-
-  - **dnsConfig.searches** ([]string)
-
-    A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.
-
-- **dnsPolicy** (string)
-
-  Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
-
-### Hosts namespaces
-
-
-- **hostNetwork** (boolean)
-
-  Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.
-
-- **hostPID** (boolean)
-
-  Use the host's pid namespace. Optional: Default to false.
-
-- **hostIPC** (boolean)
-
-  Use the host's ipc namespace. Optional: Default to false.
-
-- **shareProcessNamespace** (boolean)
-
-  Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.
-
-### Service account
-
-
-- **serviceAccountName** (string)
-
-  ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
-
-- **automountServiceAccountToken** (boolean)
-
-  AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.
-
-### Security context
-
-
-- **securityContext** (PodSecurityContext)
-
-  SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty.  See type description for default values of each field.
-
-  <a name="PodSecurityContext"></a>
-  *PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext.  Field values of container.securityContext take precedence over field values of PodSecurityContext.*
-
-  - **securityContext.runAsUser** (int64)
-
-    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
-
-  - **securityContext.runAsNonRoot** (boolean)
-
-    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsGroup** (int64)
-
-    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
-
-  - **securityContext.supplementalGroups** ([]int64)
-
-    A list of groups applied to the first process run in each container, in addition to the container's primary GID.  If unspecified, no groups will be added to any container.
-
-  - **securityContext.fsGroup** (int64)
-
-    A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:
-    
-    1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----
-    
-    If unset, the Kubelet will not modify the ownership and permissions of any volume.
-
-  - **securityContext.fsGroupChangePolicy** (string)
-
-    fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
-
-  - **securityContext.seccompProfile** (SeccompProfile)
-
-    The seccomp options to use by the containers in this pod.
-
-    <a name="SeccompProfile"></a>
-    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
-
-    - **securityContext.seccompProfile.type** (string), required
-
-      type indicates which kind of seccomp profile will be applied. Valid options are:
-      
-      Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-    - **securityContext.seccompProfile.localhostProfile** (string)
-
-      localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
-
-  - **securityContext.seLinuxOptions** (SELinuxOptions)
-
-    The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
-
-    <a name="SELinuxOptions"></a>
-    *SELinuxOptions are the labels to be applied to the container*
-
-    - **securityContext.seLinuxOptions.level** (string)
-
-      Level is SELinux level label that applies to the container.
-
-    - **securityContext.seLinuxOptions.role** (string)
-
-      Role is a SELinux role label that applies to the container.
-
-    - **securityContext.seLinuxOptions.type** (string)
-
-      Type is a SELinux type label that applies to the container.
-
-    - **securityContext.seLinuxOptions.user** (string)
-
-      User is a SELinux user label that applies to the container.
-
-  - **securityContext.sysctls** ([]Sysctl)
-
-    Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.
-
-    <a name="Sysctl"></a>
-    *Sysctl defines a kernel parameter to be set*
-
-    - **securityContext.sysctls.name** (string), required
-
-      Name of a property to set
-
-    - **securityContext.sysctls.value** (string), required
-
-      Value of a property to set
-
-  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
-
-    The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="WindowsSecurityContextOptions"></a>
-    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
-
-    - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
-
-      GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
-    - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
-
-      GMSACredentialSpecName is the name of the GMSA credential spec to use.
-
-    - **securityContext.windowsOptions.runAsUserName** (string)
-
-      The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-### Beta level
-
-
-- **preemptionPolicy** (string)
-
-  PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
-
-- **overhead** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-  Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.
-
-### Alpha level
-
-
-- **ephemeralContainers** ([]<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainer" >}}">EphemeralContainer</a>)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. This field is alpha-level and is only honored by servers that enable the EphemeralContainers feature.
-
-### Deprecated
-
-
-- **serviceAccount** (string)
-
-  DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.
-
-
-
-## Container {#Container}
-
-A single application container that you want to run within a pod.
-
-<hr>
-
-- **name** (string), required
-
-  Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
-
-
-### Image
-
-
-- **image** (string)
-
-  Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
-- **imagePullPolicy** (string)
-
-  Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
-### Entrypoint
-
-
-- **command** ([]string)
-
-  Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **args** ([]string)
-
-  Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **workingDir** (string)
-
-  Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
-
-### Ports
-
-
-- **ports** ([]ContainerPort)
-
-  *Patch strategy: merge on key `containerPort`*
-  
-  *Map: unique values on keys `containerPort, protocol` will be kept during a merge*
-  
-  List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Cannot be updated.
-
-  <a name="ContainerPort"></a>
-  *ContainerPort represents a network port in a single container.*
-
-  - **ports.containerPort** (int32), required
-
-    Number of port to expose on the pod's IP address. This must be a valid port number, 0 \< x \< 65536.
-
-  - **ports.hostIP** (string)
-
-    What host IP to bind the external port to.
-
-  - **ports.hostPort** (int32)
-
-    Number of port to expose on the host. If specified, this must be a valid port number, 0 \< x \< 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
-  - **ports.name** (string)
-
-    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
-  - **ports.protocol** (string)
-
-    Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
-
-### Environment variables
-
-
-- **env** ([]EnvVar)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of environment variables to set in the container. Cannot be updated.
-
-  <a name="EnvVar"></a>
-  *EnvVar represents an environment variable present in a Container.*
-
-  - **env.name** (string), required
-
-    Name of the environment variable. Must be a C_IDENTIFIER.
-
-  - **env.value** (string)
-
-    Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
-
-  - **env.valueFrom** (EnvVarSource)
-
-    Source for the environment variable's value. Cannot be used if value is not empty.
-
-    <a name="EnvVarSource"></a>
-    *EnvVarSource represents a source for the value of an EnvVar.*
-
-    - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
-
-      Selects a key of a ConfigMap.
-
-      <a name="ConfigMapKeySelector"></a>
-      *Selects a key from a ConfigMap.*
-
-      - **env.valueFrom.configMapKeyRef.key** (string), required
-
-        The key to select.
-
-      - **env.valueFrom.configMapKeyRef.name** (string)
-
-        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-      - **env.valueFrom.configMapKeyRef.optional** (boolean)
-
-        Specify whether the ConfigMap or its key must be defined
-
-    - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
-
-      Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
-
-    - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
-
-      Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
-    - **env.valueFrom.secretKeyRef** (SecretKeySelector)
-
-      Selects a key of a secret in the pod's namespace
-
-      <a name="SecretKeySelector"></a>
-      *SecretKeySelector selects a key of a Secret.*
-
-      - **env.valueFrom.secretKeyRef.key** (string), required
-
-        The key of the secret to select from.  Must be a valid secret key.
-
-      - **env.valueFrom.secretKeyRef.name** (string)
-
-        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-      - **env.valueFrom.secretKeyRef.optional** (boolean)
-
-        Specify whether the Secret or its key must be defined
-
-- **envFrom** ([]EnvFromSource)
-
-  List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
-  <a name="EnvFromSource"></a>
-  *EnvFromSource represents the source of a set of ConfigMaps*
-
-  - **envFrom.configMapRef** (ConfigMapEnvSource)
-
-    The ConfigMap to select from
-
-    <a name="ConfigMapEnvSource"></a>
-    *ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.
-    
-    The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
-
-    - **envFrom.configMapRef.name** (string)
-
-      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-    - **envFrom.configMapRef.optional** (boolean)
-
-      Specify whether the ConfigMap must be defined
-
-  - **envFrom.prefix** (string)
-
-    An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
-
-  - **envFrom.secretRef** (SecretEnvSource)
-
-    The Secret to select from
-
-    <a name="SecretEnvSource"></a>
-    *SecretEnvSource selects a Secret to populate the environment variables with.
-    
-    The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
-
-    - **envFrom.secretRef.name** (string)
-
-      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-    - **envFrom.secretRef.optional** (boolean)
-
-      Specify whether the Secret must be defined
-
-### Volumes
-
-
-- **volumeMounts** ([]VolumeMount)
-
-  *Patch strategy: merge on key `mountPath`*
-  
-  Pod volumes to mount into the container's filesystem. Cannot be updated.
-
-  <a name="VolumeMount"></a>
-  *VolumeMount describes a mounting of a Volume within a container.*
-
-  - **volumeMounts.mountPath** (string), required
-
-    Path within the container at which the volume should be mounted.  Must not contain ':'.
-
-  - **volumeMounts.name** (string), required
-
-    This must match the Name of a Volume.
-
-  - **volumeMounts.mountPropagation** (string)
-
-    mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-
-  - **volumeMounts.readOnly** (boolean)
-
-    Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
-  - **volumeMounts.subPath** (string)
-
-    Path within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).
-
-  - **volumeMounts.subPathExpr** (string)
-
-    Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive.
-
-- **volumeDevices** ([]VolumeDevice)
-
-  *Patch strategy: merge on key `devicePath`*
-  
-  volumeDevices is the list of block devices to be used by the container.
-
-  <a name="VolumeDevice"></a>
-  *volumeDevice describes a mapping of a raw block device within a container.*
-
-  - **volumeDevices.devicePath** (string), required
-
-    devicePath is the path inside of the container that the device will be mapped to.
-
-  - **volumeDevices.name** (string), required
-
-    name must match the name of a persistentVolumeClaim in the pod
-
-### Resources
-
-
-- **resources** (ResourceRequirements)
-
-  Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-  <a name="ResourceRequirements"></a>
-  *ResourceRequirements describes the compute resource requirements.*
-
-  - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-  - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
-
-### Lifecycle
-
-
-- **lifecycle** (Lifecycle)
-
-  Actions that the management system should take in response to container lifecycle events. Cannot be updated.
-
-  <a name="Lifecycle"></a>
-  *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
-
-  - **lifecycle.postStart** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
-
-    PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-  - **lifecycle.preStop** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
-
-    PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-- **terminationMessagePath** (string)
-
-  Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
-- **terminationMessagePolicy** (string)
-
-  Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
-- **livenessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
-
-  Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-- **readinessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
-
-  Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-- **startupProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
-
-  StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-### Security Context
-
-
-- **securityContext** (SecurityContext)
-
-  Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
-  <a name="SecurityContext"></a>
-  *SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext.  When both are set, the values in SecurityContext take precedence.*
-
-  - **securityContext.runAsUser** (int64)
-
-    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsNonRoot** (boolean)
-
-    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsGroup** (int64)
-
-    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.readOnlyRootFilesystem** (boolean)
-
-    Whether this container has a read-only root filesystem. Default is false.
-
-  - **securityContext.procMount** (string)
-
-    procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.
-
-  - **securityContext.privileged** (boolean)
-
-    Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
-
-  - **securityContext.allowPrivilegeEscalation** (boolean)
-
-    AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN
-
-  - **securityContext.capabilities** (Capabilities)
-
-    The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
-
-    <a name="Capabilities"></a>
-    *Adds and removes POSIX capabilities from running containers.*
-
-    - **securityContext.capabilities.add** ([]string)
-
-      Added capabilities
-
-    - **securityContext.capabilities.drop** ([]string)
-
-      Removed capabilities
-
-  - **securityContext.seccompProfile** (SeccompProfile)
-
-    The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options.
-
-    <a name="SeccompProfile"></a>
-    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
-
-    - **securityContext.seccompProfile.type** (string), required
-
-      type indicates which kind of seccomp profile will be applied. Valid options are:
-      
-      Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-    - **securityContext.seccompProfile.localhostProfile** (string)
-
-      localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
-
-  - **securityContext.seLinuxOptions** (SELinuxOptions)
-
-    The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="SELinuxOptions"></a>
-    *SELinuxOptions are the labels to be applied to the container*
-
-    - **securityContext.seLinuxOptions.level** (string)
-
-      Level is SELinux level label that applies to the container.
-
-    - **securityContext.seLinuxOptions.role** (string)
-
-      Role is a SELinux role label that applies to the container.
-
-    - **securityContext.seLinuxOptions.type** (string)
-
-      Type is a SELinux type label that applies to the container.
-
-    - **securityContext.seLinuxOptions.user** (string)
-
-      User is a SELinux user label that applies to the container.
-
-  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
-
-    The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="WindowsSecurityContextOptions"></a>
-    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
-
-    - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
-
-      GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
-    - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
-
-      GMSACredentialSpecName is the name of the GMSA credential spec to use.
-
-    - **securityContext.windowsOptions.runAsUserName** (string)
-
-      The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-### Debugging
-
-
-- **stdin** (boolean)
-
-  Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
-- **stdinOnce** (boolean)
-
-  Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
-- **tty** (boolean)
-
-  Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
-
-
-
-## Handler {#Handler}
-
-Handler defines a specific action that should be taken
-
-<hr>
-
-- **exec** (ExecAction)
-
-  One and only one of the following should be specified. Exec specifies the action to take.
-
-  <a name="ExecAction"></a>
-  *ExecAction describes a "run in container" action.*
-
-  - **exec.command** ([]string)
-
-    Command is the command line to execute inside the container, the working directory for the command  is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-- **httpGet** (HTTPGetAction)
-
-  HTTPGet specifies the http request to perform.
-
-  <a name="HTTPGetAction"></a>
-  *HTTPGetAction describes an action based on HTTP Get requests.*
-
-  - **httpGet.port** (IntOrString), required
-
-    Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-  - **httpGet.host** (string)
-
-    Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
-
-  - **httpGet.httpHeaders** ([]HTTPHeader)
-
-    Custom headers to set in the request. HTTP allows repeated headers.
-
-    <a name="HTTPHeader"></a>
-    *HTTPHeader describes a custom header to be used in HTTP probes*
-
-    - **httpGet.httpHeaders.name** (string), required
-
-      The header field name
-
-    - **httpGet.httpHeaders.value** (string), required
-
-      The header field value
-
-  - **httpGet.path** (string)
-
-    Path to access on the HTTP server.
-
-  - **httpGet.scheme** (string)
-
-    Scheme to use for connecting to the host. Defaults to HTTP.
-
-- **tcpSocket** (TCPSocketAction)
-
-  TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  <a name="TCPSocketAction"></a>
-  *TCPSocketAction describes an action based on opening a socket*
-
-  - **tcpSocket.port** (IntOrString), required
-
-    Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-  - **tcpSocket.host** (string)
-
-    Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-
-## NodeAffinity {#NodeAffinity}
-
-Node affinity is a group of node affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]PreferredSchedulingTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.
-
-  <a name="PreferredSchedulingTerm"></a>
-  *An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.preference** (NodeSelectorTerm), required
-
-    A node selector term, associated with the corresponding weight.
-
-    <a name="NodeSelectorTerm"></a>
-    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-      A list of node selector requirements by node's labels.
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-      A list of node selector requirements by node's fields.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** (NodeSelector)
-
-  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.
-
-  <a name="NodeSelector"></a>
-  *A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms** ([]NodeSelectorTerm), required
-
-    Required. A list of node selector terms. The terms are ORed.
-
-    <a name="NodeSelectorTerm"></a>
-    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
-
-    - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-      A list of node selector requirements by node's labels.
-
-    - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-      A list of node selector requirements by node's fields.
-
-
-
-
-
-## PodAffinity {#PodAffinity}
-
-Pod affinity is a group of inter pod affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
-
-  <a name="WeightedPodAffinityTerm"></a>
-  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
-
-    Required. A pod affinity term, associated with the corresponding weight.
-
-    <a name="PodAffinityTerm"></a>
-    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
-
-      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-      A label query over a set of resources, in this case pods.
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-      A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
-
-      namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
-
-  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
-
-  <a name="PodAffinityTerm"></a>
-  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
-
-    namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
-
-
-
-
-
-## PodAntiAffinity {#PodAntiAffinity}
-
-Pod anti affinity is a group of inter pod anti affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
-
-  <a name="WeightedPodAffinityTerm"></a>
-  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
-
-    Required. A pod affinity term, associated with the corresponding weight.
-
-    <a name="PodAffinityTerm"></a>
-    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
-
-      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-      A label query over a set of resources, in this case pods.
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-      A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
-
-    - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
-
-      namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
-
-  If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
-
-  <a name="PodAffinityTerm"></a>
-  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaceSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
-
-    namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"
-
-
-
-
-
-## Probe {#Probe}
-
-Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.
-
-<hr>
-
-- **exec** (ExecAction)
-
-  One and only one of the following should be specified. Exec specifies the action to take.
-
-  <a name="ExecAction"></a>
-  *ExecAction describes a "run in container" action.*
-
-  - **exec.command** ([]string)
-
-    Command is the command line to execute inside the container, the working directory for the command  is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-- **httpGet** (HTTPGetAction)
-
-  HTTPGet specifies the http request to perform.
-
-  <a name="HTTPGetAction"></a>
-  *HTTPGetAction describes an action based on HTTP Get requests.*
-
-  - **httpGet.port** (IntOrString), required
-
-    Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-  - **httpGet.host** (string)
-
-    Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
-
-  - **httpGet.httpHeaders** ([]HTTPHeader)
-
-    Custom headers to set in the request. HTTP allows repeated headers.
-
-    <a name="HTTPHeader"></a>
-    *HTTPHeader describes a custom header to be used in HTTP probes*
-
-    - **httpGet.httpHeaders.name** (string), required
-
-      The header field name
-
-    - **httpGet.httpHeaders.value** (string), required
-
-      The header field value
-
-  - **httpGet.path** (string)
-
-    Path to access on the HTTP server.
-
-  - **httpGet.scheme** (string)
-
-    Scheme to use for connecting to the host. Defaults to HTTP.
-
-- **tcpSocket** (TCPSocketAction)
-
-  TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  <a name="TCPSocketAction"></a>
-  *TCPSocketAction describes an action based on opening a socket*
-
-  - **tcpSocket.port** (IntOrString), required
-
-    Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-    <a name="IntOrString"></a>
-    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-  - **tcpSocket.host** (string)
-
-    Optional: Host name to connect to, defaults to the pod IP.
-
-- **initialDelaySeconds** (int32)
-
-  Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-- **terminationGracePeriodSeconds** (int64)
-
-  Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
-
-- **periodSeconds** (int32)
-
-  How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-- **timeoutSeconds** (int32)
-
-  Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-- **failureThreshold** (int32)
-
-  Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-- **successThreshold** (int32)
-
-  Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-
-
-
-
-## PodStatus {#PodStatus}
-
-PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.
-
-<hr>
-
-- **nominatedNodeName** (string)
-
-  nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.
-
-- **hostIP** (string)
-
-  IP address of the host to which the pod is assigned. Empty if not yet scheduled.
-
-- **startTime** (Time)
-
-  RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.
-
-  <a name="Time"></a>
-  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-- **phase** (string)
-
-  The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values:
-  
-  Pending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.
-  
-  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase
-
-- **message** (string)
-
-  A human readable message indicating details about why the pod is in this condition.
-
-- **reason** (string)
-
-  A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'
-
-- **podIP** (string)
-
-  IP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.
-
-- **podIPs** ([]PodIP)
-
-  *Patch strategy: merge on key `ip`*
-  
-  podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.
-
-  <a name="PodIP"></a>
-  *IP address information for entries in the (plural) PodIPs field. Each entry includes:
-     IP: An IP address allocated to the pod. Routable at least within the cluster.*
-
-  - **podIPs.ip** (string)
-
-    ip is an IP address (IPv4 or IPv6) assigned to the pod
-
-- **conditions** ([]PodCondition)
-
-  *Patch strategy: merge on key `type`*
-  
-  Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
-
-  <a name="PodCondition"></a>
-  *PodCondition contains details for the current condition of this pod.*
-
-  - **conditions.status** (string), required
-
-    Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
-
-  - **conditions.type** (string), required
-
-    Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
-
-  - **conditions.lastProbeTime** (Time)
-
-    Last time we probed the condition.
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **conditions.lastTransitionTime** (Time)
-
-    Last time the condition transitioned from one status to another.
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **conditions.message** (string)
-
-    Human-readable message indicating details about last transition.
-
-  - **conditions.reason** (string)
-
-    Unique, one-word, CamelCase reason for the condition's last transition.
-
-- **qosClass** (string)
-
-  The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md
-
-- **initContainerStatuses** ([]ContainerStatus)
-
-  The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
-
-  <a name="ContainerStatus"></a>
-  *ContainerStatus contains details for the current status of this container.*
-
-  - **initContainerStatuses.name** (string), required
-
-    This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
-
-  - **initContainerStatuses.image** (string), required
-
-    The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
-
-  - **initContainerStatuses.imageID** (string), required
-
-    ImageID of the container's image.
-
-  - **initContainerStatuses.containerID** (string)
-
-    Container's ID in the format 'docker://\<container_id>'.
-
-  - **initContainerStatuses.state** (ContainerState)
-
-    Details about the container's current condition.
-
-    <a name="ContainerState"></a>
-    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-    - **initContainerStatuses.state.running** (ContainerStateRunning)
-
-      Details about a running container
-
-      <a name="ContainerStateRunning"></a>
-      *ContainerStateRunning is a running state of a container.*
-
-      - **initContainerStatuses.state.running.startedAt** (Time)
-
-        Time at which the container was last (re-)started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-    - **initContainerStatuses.state.terminated** (ContainerStateTerminated)
-
-      Details about a terminated container
-
-      <a name="ContainerStateTerminated"></a>
-      *ContainerStateTerminated is a terminated state of a container.*
-
-      - **initContainerStatuses.state.terminated.containerID** (string)
-
-        Container's ID in the format 'docker://\<container_id>'
-
-      - **initContainerStatuses.state.terminated.exitCode** (int32), required
-
-        Exit status from the last termination of the container
-
-      - **initContainerStatuses.state.terminated.startedAt** (Time)
-
-        Time at which previous execution of the container started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **initContainerStatuses.state.terminated.finishedAt** (Time)
-
-        Time at which the container last terminated
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **initContainerStatuses.state.terminated.message** (string)
-
-        Message regarding the last termination of the container
-
-      - **initContainerStatuses.state.terminated.reason** (string)
-
-        (brief) reason from the last termination of the container
-
-      - **initContainerStatuses.state.terminated.signal** (int32)
-
-        Signal from the last termination of the container
-
-    - **initContainerStatuses.state.waiting** (ContainerStateWaiting)
-
-      Details about a waiting container
-
-      <a name="ContainerStateWaiting"></a>
-      *ContainerStateWaiting is a waiting state of a container.*
-
-      - **initContainerStatuses.state.waiting.message** (string)
-
-        Message regarding why the container is not yet running.
-
-      - **initContainerStatuses.state.waiting.reason** (string)
-
-        (brief) reason the container is not yet running.
-
-  - **initContainerStatuses.lastState** (ContainerState)
-
-    Details about the container's last termination condition.
-
-    <a name="ContainerState"></a>
-    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-    - **initContainerStatuses.lastState.running** (ContainerStateRunning)
-
-      Details about a running container
-
-      <a name="ContainerStateRunning"></a>
-      *ContainerStateRunning is a running state of a container.*
-
-      - **initContainerStatuses.lastState.running.startedAt** (Time)
-
-        Time at which the container was last (re-)started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-    - **initContainerStatuses.lastState.terminated** (ContainerStateTerminated)
-
-      Details about a terminated container
-
-      <a name="ContainerStateTerminated"></a>
-      *ContainerStateTerminated is a terminated state of a container.*
-
-      - **initContainerStatuses.lastState.terminated.containerID** (string)
-
-        Container's ID in the format 'docker://\<container_id>'
-
-      - **initContainerStatuses.lastState.terminated.exitCode** (int32), required
-
-        Exit status from the last termination of the container
-
-      - **initContainerStatuses.lastState.terminated.startedAt** (Time)
-
-        Time at which previous execution of the container started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **initContainerStatuses.lastState.terminated.finishedAt** (Time)
-
-        Time at which the container last terminated
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **initContainerStatuses.lastState.terminated.message** (string)
-
-        Message regarding the last termination of the container
-
-      - **initContainerStatuses.lastState.terminated.reason** (string)
-
-        (brief) reason from the last termination of the container
-
-      - **initContainerStatuses.lastState.terminated.signal** (int32)
-
-        Signal from the last termination of the container
-
-    - **initContainerStatuses.lastState.waiting** (ContainerStateWaiting)
-
-      Details about a waiting container
-
-      <a name="ContainerStateWaiting"></a>
-      *ContainerStateWaiting is a waiting state of a container.*
-
-      - **initContainerStatuses.lastState.waiting.message** (string)
-
-        Message regarding why the container is not yet running.
-
-      - **initContainerStatuses.lastState.waiting.reason** (string)
-
-        (brief) reason the container is not yet running.
-
-  - **initContainerStatuses.ready** (boolean), required
-
-    Specifies whether the container has passed its readiness probe.
-
-  - **initContainerStatuses.restartCount** (int32), required
-
-    The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
-
-  - **initContainerStatuses.started** (boolean)
-
-    Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
-
-- **containerStatuses** ([]ContainerStatus)
-
-  The list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
-
-  <a name="ContainerStatus"></a>
-  *ContainerStatus contains details for the current status of this container.*
-
-  - **containerStatuses.name** (string), required
-
-    This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
-
-  - **containerStatuses.image** (string), required
-
-    The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
-
-  - **containerStatuses.imageID** (string), required
-
-    ImageID of the container's image.
-
-  - **containerStatuses.containerID** (string)
-
-    Container's ID in the format 'docker://\<container_id>'.
-
-  - **containerStatuses.state** (ContainerState)
-
-    Details about the container's current condition.
-
-    <a name="ContainerState"></a>
-    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-    - **containerStatuses.state.running** (ContainerStateRunning)
-
-      Details about a running container
-
-      <a name="ContainerStateRunning"></a>
-      *ContainerStateRunning is a running state of a container.*
-
-      - **containerStatuses.state.running.startedAt** (Time)
-
-        Time at which the container was last (re-)started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-    - **containerStatuses.state.terminated** (ContainerStateTerminated)
-
-      Details about a terminated container
-
-      <a name="ContainerStateTerminated"></a>
-      *ContainerStateTerminated is a terminated state of a container.*
-
-      - **containerStatuses.state.terminated.containerID** (string)
-
-        Container's ID in the format 'docker://\<container_id>'
-
-      - **containerStatuses.state.terminated.exitCode** (int32), required
-
-        Exit status from the last termination of the container
-
-      - **containerStatuses.state.terminated.startedAt** (Time)
-
-        Time at which previous execution of the container started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **containerStatuses.state.terminated.finishedAt** (Time)
-
-        Time at which the container last terminated
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **containerStatuses.state.terminated.message** (string)
-
-        Message regarding the last termination of the container
-
-      - **containerStatuses.state.terminated.reason** (string)
-
-        (brief) reason from the last termination of the container
-
-      - **containerStatuses.state.terminated.signal** (int32)
-
-        Signal from the last termination of the container
-
-    - **containerStatuses.state.waiting** (ContainerStateWaiting)
-
-      Details about a waiting container
-
-      <a name="ContainerStateWaiting"></a>
-      *ContainerStateWaiting is a waiting state of a container.*
-
-      - **containerStatuses.state.waiting.message** (string)
-
-        Message regarding why the container is not yet running.
-
-      - **containerStatuses.state.waiting.reason** (string)
-
-        (brief) reason the container is not yet running.
-
-  - **containerStatuses.lastState** (ContainerState)
-
-    Details about the container's last termination condition.
-
-    <a name="ContainerState"></a>
-    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-    - **containerStatuses.lastState.running** (ContainerStateRunning)
-
-      Details about a running container
-
-      <a name="ContainerStateRunning"></a>
-      *ContainerStateRunning is a running state of a container.*
-
-      - **containerStatuses.lastState.running.startedAt** (Time)
-
-        Time at which the container was last (re-)started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-    - **containerStatuses.lastState.terminated** (ContainerStateTerminated)
-
-      Details about a terminated container
-
-      <a name="ContainerStateTerminated"></a>
-      *ContainerStateTerminated is a terminated state of a container.*
-
-      - **containerStatuses.lastState.terminated.containerID** (string)
-
-        Container's ID in the format 'docker://\<container_id>'
-
-      - **containerStatuses.lastState.terminated.exitCode** (int32), required
-
-        Exit status from the last termination of the container
-
-      - **containerStatuses.lastState.terminated.startedAt** (Time)
-
-        Time at which previous execution of the container started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **containerStatuses.lastState.terminated.finishedAt** (Time)
-
-        Time at which the container last terminated
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **containerStatuses.lastState.terminated.message** (string)
-
-        Message regarding the last termination of the container
-
-      - **containerStatuses.lastState.terminated.reason** (string)
-
-        (brief) reason from the last termination of the container
-
-      - **containerStatuses.lastState.terminated.signal** (int32)
-
-        Signal from the last termination of the container
-
-    - **containerStatuses.lastState.waiting** (ContainerStateWaiting)
-
-      Details about a waiting container
-
-      <a name="ContainerStateWaiting"></a>
-      *ContainerStateWaiting is a waiting state of a container.*
-
-      - **containerStatuses.lastState.waiting.message** (string)
-
-        Message regarding why the container is not yet running.
-
-      - **containerStatuses.lastState.waiting.reason** (string)
-
-        (brief) reason the container is not yet running.
-
-  - **containerStatuses.ready** (boolean), required
-
-    Specifies whether the container has passed its readiness probe.
-
-  - **containerStatuses.restartCount** (int32), required
-
-    The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
-
-  - **containerStatuses.started** (boolean)
-
-    Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
-
-- **ephemeralContainerStatuses** ([]ContainerStatus)
-
-  Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.
-
-  <a name="ContainerStatus"></a>
-  *ContainerStatus contains details for the current status of this container.*
-
-  - **ephemeralContainerStatuses.name** (string), required
-
-    This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
-
-  - **ephemeralContainerStatuses.image** (string), required
-
-    The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
-
-  - **ephemeralContainerStatuses.imageID** (string), required
-
-    ImageID of the container's image.
-
-  - **ephemeralContainerStatuses.containerID** (string)
-
-    Container's ID in the format 'docker://\<container_id>'.
-
-  - **ephemeralContainerStatuses.state** (ContainerState)
-
-    Details about the container's current condition.
-
-    <a name="ContainerState"></a>
-    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-    - **ephemeralContainerStatuses.state.running** (ContainerStateRunning)
-
-      Details about a running container
-
-      <a name="ContainerStateRunning"></a>
-      *ContainerStateRunning is a running state of a container.*
-
-      - **ephemeralContainerStatuses.state.running.startedAt** (Time)
-
-        Time at which the container was last (re-)started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-    - **ephemeralContainerStatuses.state.terminated** (ContainerStateTerminated)
-
-      Details about a terminated container
-
-      <a name="ContainerStateTerminated"></a>
-      *ContainerStateTerminated is a terminated state of a container.*
-
-      - **ephemeralContainerStatuses.state.terminated.containerID** (string)
-
-        Container's ID in the format 'docker://\<container_id>'
-
-      - **ephemeralContainerStatuses.state.terminated.exitCode** (int32), required
-
-        Exit status from the last termination of the container
-
-      - **ephemeralContainerStatuses.state.terminated.startedAt** (Time)
-
-        Time at which previous execution of the container started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **ephemeralContainerStatuses.state.terminated.finishedAt** (Time)
-
-        Time at which the container last terminated
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **ephemeralContainerStatuses.state.terminated.message** (string)
-
-        Message regarding the last termination of the container
-
-      - **ephemeralContainerStatuses.state.terminated.reason** (string)
-
-        (brief) reason from the last termination of the container
-
-      - **ephemeralContainerStatuses.state.terminated.signal** (int32)
-
-        Signal from the last termination of the container
-
-    - **ephemeralContainerStatuses.state.waiting** (ContainerStateWaiting)
-
-      Details about a waiting container
-
-      <a name="ContainerStateWaiting"></a>
-      *ContainerStateWaiting is a waiting state of a container.*
-
-      - **ephemeralContainerStatuses.state.waiting.message** (string)
-
-        Message regarding why the container is not yet running.
-
-      - **ephemeralContainerStatuses.state.waiting.reason** (string)
-
-        (brief) reason the container is not yet running.
-
-  - **ephemeralContainerStatuses.lastState** (ContainerState)
-
-    Details about the container's last termination condition.
-
-    <a name="ContainerState"></a>
-    *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-    - **ephemeralContainerStatuses.lastState.running** (ContainerStateRunning)
-
-      Details about a running container
-
-      <a name="ContainerStateRunning"></a>
-      *ContainerStateRunning is a running state of a container.*
-
-      - **ephemeralContainerStatuses.lastState.running.startedAt** (Time)
-
-        Time at which the container was last (re-)started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-    - **ephemeralContainerStatuses.lastState.terminated** (ContainerStateTerminated)
-
-      Details about a terminated container
-
-      <a name="ContainerStateTerminated"></a>
-      *ContainerStateTerminated is a terminated state of a container.*
-
-      - **ephemeralContainerStatuses.lastState.terminated.containerID** (string)
-
-        Container's ID in the format 'docker://\<container_id>'
-
-      - **ephemeralContainerStatuses.lastState.terminated.exitCode** (int32), required
-
-        Exit status from the last termination of the container
-
-      - **ephemeralContainerStatuses.lastState.terminated.startedAt** (Time)
-
-        Time at which previous execution of the container started
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **ephemeralContainerStatuses.lastState.terminated.finishedAt** (Time)
-
-        Time at which the container last terminated
-
-        <a name="Time"></a>
-        *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-      - **ephemeralContainerStatuses.lastState.terminated.message** (string)
-
-        Message regarding the last termination of the container
-
-      - **ephemeralContainerStatuses.lastState.terminated.reason** (string)
-
-        (brief) reason from the last termination of the container
-
-      - **ephemeralContainerStatuses.lastState.terminated.signal** (int32)
-
-        Signal from the last termination of the container
-
-    - **ephemeralContainerStatuses.lastState.waiting** (ContainerStateWaiting)
-
-      Details about a waiting container
-
-      <a name="ContainerStateWaiting"></a>
-      *ContainerStateWaiting is a waiting state of a container.*
-
-      - **ephemeralContainerStatuses.lastState.waiting.message** (string)
-
-        Message regarding why the container is not yet running.
-
-      - **ephemeralContainerStatuses.lastState.waiting.reason** (string)
-
-        (brief) reason the container is not yet running.
-
-  - **ephemeralContainerStatuses.ready** (boolean), required
-
-    Specifies whether the container has passed its readiness probe.
-
-  - **ephemeralContainerStatuses.restartCount** (int32), required
-
-    The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
-
-  - **ephemeralContainerStatuses.started** (boolean)
-
-    Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
-
-
-
-
-
-## PodList {#PodList}
-
-PodList is a list of Pods.
-
-<hr>
-
-- **items** ([]<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>), required
-
-  List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md
-
-- **apiVersion** (string)
-
-  APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-
-- **kind** (string)
-
-  Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `get` read log of the specified Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods/{name}/log
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **container** (*in query*): string
-
-  The container for which to stream logs. Defaults to only container if there is one container in the pod.
-
-
-- **follow** (*in query*): boolean
-
-  Follow the log stream of the pod. Defaults to false.
-
-
-- **insecureSkipTLSVerifyBackend** (*in query*): boolean
-
-  insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to.  This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet.  If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).
-
-
-- **limitBytes** (*in query*): integer
-
-  If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **previous** (*in query*): boolean
-
-  Return previous terminated container logs. Defaults to false.
-
-
-- **sinceSeconds** (*in query*): integer
-
-  A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.
-
-
-- **tailLines** (*in query*): integer
-
-  If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime
-
-
-- **timestamps** (*in query*): boolean
-
-  If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.
-
-
-
-#### Response
-
-
-200 (string): OK
-
-401: Unauthorized
-
-
-### `get` read status of the specified Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind Pod
-
-#### HTTP Request
-
-GET /api/v1/namespaces/{namespace}/pods
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#PodList" >}}">PodList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind Pod
-
-#### HTTP Request
-
-GET /api/v1/pods
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#PodList" >}}">PodList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create a Pod
-
-#### HTTP Request
-
-POST /api/v1/namespaces/{namespace}/pods
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
-
-202 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified Pod
-
-#### HTTP Request
-
-PUT /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
-
-401: Unauthorized
-
-
-### `update` replace status of the specified Pod
-
-#### HTTP Request
-
-PUT /api/v1/namespaces/{namespace}/pods/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified Pod
-
-#### HTTP Request
-
-PATCH /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `patch` partially update status of the specified Pod
-
-#### HTTP Request
-
-PATCH /api/v1/namespaces/{namespace}/pods/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete a Pod
-
-#### HTTP Request
-
-DELETE /api/v1/namespaces/{namespace}/pods/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the Pod
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): OK
-
-202 (<a href="{{< ref "../workload-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of Pod
-
-#### HTTP Request
-
-DELETE /api/v1/namespaces/{namespace}/pods
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md b/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
new file mode 100644
index 0000000000..1b5aab3fba
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Workloads Resources"
+weight: 1
+---
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/container.md b/content/en/docs/reference/kubernetes-api/workloads-resources/container.md
new file mode 100644
index 0000000000..d87cd422c8
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/container.md
@@ -0,0 +1,774 @@
+---
+api_metadata:
+  apiVersion: ""
+  import: "k8s.io/api/core/v1"
+  kind: "Container"
+content_type: "api_reference"
+description: "A single application container that you want to run within a pod."
+title: "Container"
+weight: 2
+---
+
+
+
+`import "k8s.io/api/core/v1"`
+
+
+## Container {#Container}
+
+A single application container that you want to run within a pod.
+
+<hr>
+
+- **name** (string), required
+
+  Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
+
+
+
+### Image
+
+
+- **image** (string)
+
+  Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
+
+- **imagePullPolicy** (string)
+
+  Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
+
+### Entrypoint
+
+
+- **command** ([]string)
+
+  Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+
+- **args** ([]string)
+
+  Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
+
+- **workingDir** (string)
+
+  Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
+
+### Ports
+
+
+- **ports** ([]ContainerPort)
+
+  *Patch strategy: merge on key `containerPort`*
+  
+  *Map: unique values on keys `containerPort, protocol` will be kept during a merge*
+  
+  List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Cannot be updated.
+
+  <a name="ContainerPort"></a>
+  *ContainerPort represents a network port in a single container.*
+
+  - **ports.containerPort** (int32), required
+
+    Number of port to expose on the pod's IP address. This must be a valid port number, 0 \< x \< 65536.
+
+  - **ports.hostIP** (string)
+
+    What host IP to bind the external port to.
+
+  - **ports.hostPort** (int32)
+
+    Number of port to expose on the host. If specified, this must be a valid port number, 0 \< x \< 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
+
+  - **ports.name** (string)
+
+    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
+
+  - **ports.protocol** (string)
+
+    Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
+
+### Environment variables
+
+
+- **env** ([]EnvVar)
+
+  *Patch strategy: merge on key `name`*
+  
+  List of environment variables to set in the container. Cannot be updated.
+
+  <a name="EnvVar"></a>
+  *EnvVar represents an environment variable present in a Container.*
+
+  - **env.name** (string), required
+
+    Name of the environment variable. Must be a C_IDENTIFIER.
+
+  - **env.value** (string)
+
+    Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
+
+  - **env.valueFrom** (EnvVarSource)
+
+    Source for the environment variable's value. Cannot be used if value is not empty.
+
+    <a name="EnvVarSource"></a>
+    *EnvVarSource represents a source for the value of an EnvVar.*
+
+  - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
+
+    Selects a key of a ConfigMap.
+
+    <a name="ConfigMapKeySelector"></a>
+    *Selects a key from a ConfigMap.*
+
+  - **env.valueFrom.configMapKeyRef.key** (string), required
+
+    The key to select.
+
+  - **env.valueFrom.configMapKeyRef.name** (string)
+
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+  - **env.valueFrom.configMapKeyRef.optional** (boolean)
+
+    Specify whether the ConfigMap or its key must be defined
+
+  - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
+
+    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
+
+  - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
+
+    Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
+
+  - **env.valueFrom.secretKeyRef** (SecretKeySelector)
+
+    Selects a key of a secret in the pod's namespace
+
+    <a name="SecretKeySelector"></a>
+    *SecretKeySelector selects a key of a Secret.*
+
+  - **env.valueFrom.secretKeyRef.key** (string), required
+
+    The key of the secret to select from.  Must be a valid secret key.
+
+  - **env.valueFrom.secretKeyRef.name** (string)
+
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+  - **env.valueFrom.secretKeyRef.optional** (boolean)
+
+    Specify whether the Secret or its key must be defined
+
+- **envFrom** ([]EnvFromSource)
+
+  List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
+
+  <a name="EnvFromSource"></a>
+  *EnvFromSource represents the source of a set of ConfigMaps*
+
+  - **envFrom.configMapRef** (ConfigMapEnvSource)
+
+    The ConfigMap to select from
+
+    <a name="ConfigMapEnvSource"></a>
+    *ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.
+    
+    The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
+
+  - **envFrom.configMapRef.name** (string)
+
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+  - **envFrom.configMapRef.optional** (boolean)
+
+    Specify whether the ConfigMap must be defined
+
+  - **envFrom.prefix** (string)
+
+    An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
+
+  - **envFrom.secretRef** (SecretEnvSource)
+
+    The Secret to select from
+
+    <a name="SecretEnvSource"></a>
+    *SecretEnvSource selects a Secret to populate the environment variables with.
+    
+    The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
+
+  - **envFrom.secretRef.name** (string)
+
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+
+  - **envFrom.secretRef.optional** (boolean)
+
+    Specify whether the Secret must be defined
+
+### Volumes
+
+
+- **volumeMounts** ([]VolumeMount)
+
+  *Patch strategy: merge on key `mountPath`*
+  
+  Pod volumes to mount into the container's filesystem. Cannot be updated.
+
+  <a name="VolumeMount"></a>
+  *VolumeMount describes a mounting of a Volume within a container.*
+
+  - **volumeMounts.mountPath** (string), required
+
+    Path within the container at which the volume should be mounted.  Must not contain ':'.
+
+  - **volumeMounts.name** (string), required
+
+    This must match the Name of a Volume.
+
+  - **volumeMounts.mountPropagation** (string)
+
+    mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
+
+  - **volumeMounts.readOnly** (boolean)
+
+    Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
+
+  - **volumeMounts.subPath** (string)
+
+    Path within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).
+
+  - **volumeMounts.subPathExpr** (string)
+
+    Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive.
+
+- **volumeDevices** ([]VolumeDevice)
+
+  *Patch strategy: merge on key `devicePath`*
+  
+  volumeDevices is the list of block devices to be used by the container.
+
+  <a name="VolumeDevice"></a>
+  *volumeDevice describes a mapping of a raw block device within a container.*
+
+  - **volumeDevices.devicePath** (string), required
+
+    devicePath is the path inside of the container that the device will be mapped to.
+
+  - **volumeDevices.name** (string), required
+
+    name must match the name of a persistentVolumeClaim in the pod
+
+### Resources
+
+
+- **resources** (ResourceRequirements)
+
+  Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+
+  <a name="ResourceRequirements"></a>
+  *ResourceRequirements describes the compute resource requirements.*
+
+  - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+
+  - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
+
+### Lifecycle
+
+
+- **lifecycle** (Lifecycle)
+
+  Actions that the management system should take in response to container lifecycle events. Cannot be updated.
+
+  <a name="Lifecycle"></a>
+  *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
+
+  - **lifecycle.postStart** (Handler)
+
+    PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
+
+    <a name="Handler"></a>
+    *Handler defines a specific action that should be taken*
+
+  - **lifecycle.postStart.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **lifecycle.postStart.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **lifecycle.postStart.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  - **lifecycle.preStop** (Handler)
+
+    PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
+
+    <a name="Handler"></a>
+    *Handler defines a specific action that should be taken*
+
+  - **lifecycle.preStop.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **lifecycle.preStop.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **lifecycle.preStop.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+- **terminationMessagePath** (string)
+
+  Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
+
+- **terminationMessagePolicy** (string)
+
+  Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
+
+- **livenessProbe** (Probe)
+
+  Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  <a name="Probe"></a>
+  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
+
+  - **livenessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **livenessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **livenessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  - **livenessProbe.initialDelaySeconds** (int32)
+
+    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **livenessProbe.periodSeconds** (int32)
+
+    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
+  - **livenessProbe.timeoutSeconds** (int32)
+
+    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **livenessProbe.failureThreshold** (int32)
+
+    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
+  - **livenessProbe.successThreshold** (int32)
+
+    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+
+- **readinessProbe** (Probe)
+
+  Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  <a name="Probe"></a>
+  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
+
+  - **readinessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **readinessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **readinessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  - **readinessProbe.initialDelaySeconds** (int32)
+
+    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **readinessProbe.periodSeconds** (int32)
+
+    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
+  - **readinessProbe.timeoutSeconds** (int32)
+
+    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **readinessProbe.failureThreshold** (int32)
+
+    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
+  - **readinessProbe.successThreshold** (int32)
+
+    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+
+### Security Context
+
+
+- **securityContext** (SecurityContext)
+
+  Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
+
+  <a name="SecurityContext"></a>
+  *SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext.  When both are set, the values in SecurityContext take precedence.*
+
+  - **securityContext.runAsUser** (int64)
+
+    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.runAsNonRoot** (boolean)
+
+    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.runAsGroup** (int64)
+
+    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.readOnlyRootFilesystem** (boolean)
+
+    Whether this container has a read-only root filesystem. Default is false.
+
+  - **securityContext.procMount** (string)
+
+    procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.
+
+  - **securityContext.privileged** (boolean)
+
+    Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
+
+  - **securityContext.allowPrivilegeEscalation** (boolean)
+
+    AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN
+
+  - **securityContext.capabilities** (Capabilities)
+
+    The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
+
+    <a name="Capabilities"></a>
+    *Adds and removes POSIX capabilities from running containers.*
+
+  - **securityContext.capabilities.add** ([]string)
+
+    Added capabilities
+
+  - **securityContext.capabilities.drop** ([]string)
+
+    Removed capabilities
+
+  - **securityContext.seccompProfile** (SeccompProfile)
+
+    The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options.
+
+    <a name="SeccompProfile"></a>
+    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
+
+  - **securityContext.seccompProfile.type** (string), required
+
+    type indicates which kind of seccomp profile will be applied. Valid options are:
+    
+    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+
+  - **securityContext.seccompProfile.localhostProfile** (string)
+
+    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+
+  - **securityContext.seLinuxOptions** (SELinuxOptions)
+
+    The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+    <a name="SELinuxOptions"></a>
+    *SELinuxOptions are the labels to be applied to the container*
+
+  - **securityContext.seLinuxOptions.level** (string)
+
+    Level is SELinux level label that applies to the container.
+
+  - **securityContext.seLinuxOptions.role** (string)
+
+    Role is a SELinux role label that applies to the container.
+
+  - **securityContext.seLinuxOptions.type** (string)
+
+    Type is a SELinux type label that applies to the container.
+
+  - **securityContext.seLinuxOptions.user** (string)
+
+    User is a SELinux user label that applies to the container.
+
+  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
+
+    The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+    <a name="WindowsSecurityContextOptions"></a>
+    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
+
+  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
+
+    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+
+  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
+
+    GMSACredentialSpecName is the name of the GMSA credential spec to use.
+
+  - **securityContext.windowsOptions.runAsUserName** (string)
+
+    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+### Debugging
+
+
+- **stdin** (boolean)
+
+  Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
+
+- **stdinOnce** (boolean)
+
+  Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
+
+- **tty** (boolean)
+
+  Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
+
+### Beta level
+
+
+- **startupProbe** (Probe)
+
+  StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  <a name="Probe"></a>
+  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
+
+  - **startupProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **startupProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **startupProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  - **startupProbe.initialDelaySeconds** (int32)
+
+    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **startupProbe.periodSeconds** (int32)
+
+    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
+  - **startupProbe.timeoutSeconds** (int32)
+
+    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **startupProbe.failureThreshold** (int32)
+
+    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
+  - **startupProbe.successThreshold** (int32)
+
+    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+
+
+
+## ContainerStatus {#ContainerStatus}
+
+ContainerStatus contains details for the current status of this container.
+
+<hr>
+
+- **name** (string), required
+
+  This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
+
+- **image** (string), required
+
+  The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
+
+- **imageID** (string), required
+
+  ImageID of the container's image.
+
+- **containerID** (string)
+
+  Container's ID in the format 'docker://\<container_id>'.
+
+- **state** (ContainerState)
+
+  Details about the container's current condition.
+
+  <a name="ContainerState"></a>
+  *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+  - **state.running** (ContainerStateRunning)
+
+    Details about a running container
+
+    <a name="ContainerStateRunning"></a>
+    *ContainerStateRunning is a running state of a container.*
+
+  - **state.running.startedAt** (Time)
+
+    Time at which the container was last (re-)started
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **state.terminated** (ContainerStateTerminated)
+
+    Details about a terminated container
+
+    <a name="ContainerStateTerminated"></a>
+    *ContainerStateTerminated is a terminated state of a container.*
+
+  - **state.terminated.containerID** (string)
+
+    Container's ID in the format 'docker://\<container_id>'
+
+  - **state.terminated.exitCode** (int32), required
+
+    Exit status from the last termination of the container
+
+  - **state.terminated.startedAt** (Time)
+
+    Time at which previous execution of the container started
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **state.terminated.finishedAt** (Time)
+
+    Time at which the container last terminated
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **state.terminated.message** (string)
+
+    Message regarding the last termination of the container
+
+  - **state.terminated.reason** (string)
+
+    (brief) reason from the last termination of the container
+
+  - **state.terminated.signal** (int32)
+
+    Signal from the last termination of the container
+
+  - **state.waiting** (ContainerStateWaiting)
+
+    Details about a waiting container
+
+    <a name="ContainerStateWaiting"></a>
+    *ContainerStateWaiting is a waiting state of a container.*
+
+  - **state.waiting.message** (string)
+
+    Message regarding why the container is not yet running.
+
+  - **state.waiting.reason** (string)
+
+    (brief) reason the container is not yet running.
+
+- **lastState** (ContainerState)
+
+  Details about the container's last termination condition.
+
+  <a name="ContainerState"></a>
+  *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
+
+  - **lastState.running** (ContainerStateRunning)
+
+    Details about a running container
+
+    <a name="ContainerStateRunning"></a>
+    *ContainerStateRunning is a running state of a container.*
+
+  - **lastState.running.startedAt** (Time)
+
+    Time at which the container was last (re-)started
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **lastState.terminated** (ContainerStateTerminated)
+
+    Details about a terminated container
+
+    <a name="ContainerStateTerminated"></a>
+    *ContainerStateTerminated is a terminated state of a container.*
+
+  - **lastState.terminated.containerID** (string)
+
+    Container's ID in the format 'docker://\<container_id>'
+
+  - **lastState.terminated.exitCode** (int32), required
+
+    Exit status from the last termination of the container
+
+  - **lastState.terminated.startedAt** (Time)
+
+    Time at which previous execution of the container started
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **lastState.terminated.finishedAt** (Time)
+
+    Time at which the container last terminated
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **lastState.terminated.message** (string)
+
+    Message regarding the last termination of the container
+
+  - **lastState.terminated.reason** (string)
+
+    (brief) reason from the last termination of the container
+
+  - **lastState.terminated.signal** (int32)
+
+    Signal from the last termination of the container
+
+  - **lastState.waiting** (ContainerStateWaiting)
+
+    Details about a waiting container
+
+    <a name="ContainerStateWaiting"></a>
+    *ContainerStateWaiting is a waiting state of a container.*
+
+  - **lastState.waiting.message** (string)
+
+    Message regarding why the container is not yet running.
+
+  - **lastState.waiting.reason** (string)
+
+    (brief) reason the container is not yet running.
+
+- **ready** (boolean), required
+
+  Specifies whether the container has passed its readiness probe.
+
+- **restartCount** (int32), required
+
+  The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
+
+- **started** (boolean)
+
+  Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
+
+
+
+
+
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md
index d13ae1b404..950e9d729c 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/controller-revision-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ControllerRevision implements an immutable snapshot of state data."
 title: "ControllerRevision"
-weight: 8
+weight: 9
 ---
 
 `apiVersion: apps/v1`
@@ -88,7 +88,7 @@ ControllerRevisionList is a resource containing a list of ControllerRevision obj
 
   More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>), required
 
   Items is the list of ControllerRevisions
 
@@ -135,7 +135,7 @@ GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
 401: Unauthorized
 
@@ -208,7 +208,7 @@ GET /apis/apps/v1/namespaces/{namespace}/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
 
 401: Unauthorized
 
@@ -276,7 +276,7 @@ GET /apis/apps/v1/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevisionList" >}}">ControllerRevisionList</a>): OK
 
 401: Unauthorized
 
@@ -295,7 +295,7 @@ POST /apis/apps/v1/namespaces/{namespace}/controllerrevisions
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
 
   
 
@@ -319,11 +319,11 @@ POST /apis/apps/v1/namespaces/{namespace}/controllerrevisions
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
+201 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Accepted
 
 401: Unauthorized
 
@@ -347,7 +347,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>, required
 
   
 
@@ -371,9 +371,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
+201 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): Created
 
 401: Unauthorized
 
@@ -426,7 +426,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
+200 (<a href="{{< ref "../workloads-resources/controller-revision-v1#ControllerRevision" >}}">ControllerRevision</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md
similarity index 81%
rename from content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md
index f6196ef14d..22a0135bf8 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v1beta1.md
@@ -1,17 +1,17 @@
 ---
 api_metadata:
-  apiVersion: "batch/v1"
-  import: "k8s.io/api/batch/v1"
+  apiVersion: "batch/v1beta1"
+  import: "k8s.io/api/batch/v1beta1"
   kind: "CronJob"
 content_type: "api_reference"
 description: "CronJob represents the configuration of a single cron job."
-title: "CronJob"
-weight: 11
+title: "CronJob v1beta1"
+weight: 12
 ---
 
-`apiVersion: batch/v1`
+`apiVersion: batch/v1beta1`
 
-`import "k8s.io/api/batch/v1"`
+`import "k8s.io/api/batch/v1beta1"`
 
 
 ## CronJob {#CronJob}
@@ -20,7 +20,7 @@ CronJob represents the configuration of a single cron job.
 
 <hr>
 
-- **apiVersion**: batch/v1
+- **apiVersion**: batch/v1beta1
 
 
 - **kind**: CronJob
@@ -30,11 +30,11 @@ CronJob represents the configuration of a single cron job.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobSpec" >}}">CronJobSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobSpec" >}}">CronJobSpec</a>)
 
   Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobStatus" >}}">CronJobStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobStatus" >}}">CronJobStatus</a>)
 
   Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -59,7 +59,7 @@ CronJobSpec describes how the job execution will look like and when it will actu
 
     Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-  - **jobTemplate.spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+  - **jobTemplate.spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
 
     Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -81,11 +81,11 @@ CronJobSpec describes how the job execution will look like and when it will actu
 
 - **successfulJobsHistoryLimit** (int32)
 
-  The number of successful finished jobs to retain. Value must be non-negative integer. Defaults to 3.
+  The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.
 
 - **failedJobsHistoryLimit** (int32)
 
-  The number of failed finished jobs to retain. Value must be non-negative integer. Defaults to 1.
+  The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.
 
 
 
@@ -99,8 +99,6 @@ CronJobStatus represents the current state of a cron job.
 
 - **active** ([]<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
 
-  *Atomic: will be replaced during a merge*
-  
   A list of pointers to currently running jobs.
 
 - **lastScheduleTime** (Time)
@@ -110,13 +108,6 @@ CronJobStatus represents the current state of a cron job.
   <a name="Time"></a>
   *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
 
-- **lastSuccessfulTime** (Time)
-
-  Information when was the last time the job successfully completed.
-
-  <a name="Time"></a>
-  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
 
 
 
@@ -127,7 +118,7 @@ CronJobList is a collection of cron jobs.
 
 <hr>
 
-- **apiVersion**: batch/v1
+- **apiVersion**: batch/v1beta1
 
 
 - **kind**: CronJobList
@@ -137,7 +128,7 @@ CronJobList is a collection of cron jobs.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>), required
 
   items is the list of CronJobs.
 
@@ -160,7 +151,7 @@ CronJobList is a collection of cron jobs.
 
 #### HTTP Request
 
-GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
+GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -184,7 +175,7 @@ GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -193,7 +184,7 @@ GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
+GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### Parameters
 
@@ -217,7 +208,7 @@ GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -226,7 +217,7 @@ GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### HTTP Request
 
-GET /apis/batch/v1/namespaces/{namespace}/cronjobs
+GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 
 #### Parameters
 
@@ -290,7 +281,7 @@ GET /apis/batch/v1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -299,7 +290,7 @@ GET /apis/batch/v1/namespaces/{namespace}/cronjobs
 
 #### HTTP Request
 
-GET /apis/batch/v1/cronjobs
+GET /apis/batch/v1beta1/cronjobs
 
 #### Parameters
 
@@ -358,7 +349,7 @@ GET /apis/batch/v1/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJobList" >}}">CronJobList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
 
 401: Unauthorized
 
@@ -367,7 +358,7 @@ GET /apis/batch/v1/cronjobs
 
 #### HTTP Request
 
-POST /apis/batch/v1/namespaces/{namespace}/cronjobs
+POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 
 #### Parameters
 
@@ -377,7 +368,7 @@ POST /apis/batch/v1/namespaces/{namespace}/cronjobs
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -401,11 +392,11 @@ POST /apis/batch/v1/namespaces/{namespace}/cronjobs
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Accepted
 
 401: Unauthorized
 
@@ -414,7 +405,7 @@ POST /apis/batch/v1/namespaces/{namespace}/cronjobs
 
 #### HTTP Request
 
-PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
+PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -429,7 +420,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -453,9 +444,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -464,7 +455,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
+PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### Parameters
 
@@ -479,7 +470,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
 
   
 
@@ -503,9 +494,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): Created
+201 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
 
 401: Unauthorized
 
@@ -514,7 +505,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### HTTP Request
 
-PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
+PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -558,7 +549,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -567,7 +558,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
+PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### Parameters
 
@@ -611,7 +602,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/cron-job-v1#CronJob" >}}">CronJob</a>): OK
+200 (<a href="{{< ref "../workloads-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
 
 401: Unauthorized
 
@@ -620,7 +611,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status
 
 #### HTTP Request
 
-DELETE /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
+DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
 
 #### Parameters
 
@@ -675,7 +666,7 @@ DELETE /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}
 
 #### HTTP Request
 
-DELETE /apis/batch/v1/namespaces/{namespace}/cronjobs
+DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
 
 #### Parameters
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
new file mode 100644
index 0000000000..c7c2ba7a81
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/cron-job-v2alpha1.md
@@ -0,0 +1,746 @@
+---
+api_metadata:
+  apiVersion: "batch/v2alpha1"
+  import: "k8s.io/api/batch/v2alpha1"
+  kind: "CronJob"
+content_type: "api_reference"
+description: "CronJob represents the configuration of a single cron job."
+title: "CronJob v2alpha1"
+weight: 13
+---
+
+`apiVersion: batch/v2alpha1`
+
+`import "k8s.io/api/batch/v2alpha1"`
+
+
+## CronJob {#CronJob}
+
+CronJob represents the configuration of a single cron job.
+
+<hr>
+
+- **apiVersion**: batch/v2alpha1
+
+
+- **kind**: CronJob
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+
+  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
+- **spec** (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobSpec" >}}">CronJobSpec</a>)
+
+  Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+- **status** (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobStatus" >}}">CronJobStatus</a>)
+
+  Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+
+
+
+
+## CronJobSpec {#CronJobSpec}
+
+CronJobSpec describes how the job execution will look like and when it will actually run.
+
+<hr>
+
+- **jobTemplate** (JobTemplateSpec), required
+
+  Specifies the job that will be created when executing a CronJob.
+
+  <a name="JobTemplateSpec"></a>
+  *JobTemplateSpec describes the data a Job should have when created from a template*
+
+  - **jobTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+
+    Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
+  - **jobTemplate.spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+
+    Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+- **schedule** (string), required
+
+  The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.
+
+- **concurrencyPolicy** (string)
+
+  Specifies how to treat concurrent executions of a Job. Valid values are: - "Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - "Replace": cancels currently running job and replaces it with a new one
+
+- **failedJobsHistoryLimit** (int32)
+
+  The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
+
+- **startingDeadlineSeconds** (int64)
+
+  Optional deadline in seconds for starting the job if it misses scheduled time for any reason.  Missed jobs executions will be counted as failed ones.
+
+- **successfulJobsHistoryLimit** (int32)
+
+  The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
+
+- **suspend** (boolean)
+
+  This flag tells the controller to suspend subsequent executions, it does not apply to already started executions.  Defaults to false.
+
+
+
+
+
+## CronJobStatus {#CronJobStatus}
+
+CronJobStatus represents the current state of a cron job.
+
+<hr>
+
+- **active** ([]<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
+
+  A list of pointers to currently running jobs.
+
+- **lastScheduleTime** (Time)
+
+  Information when was the last time the job was successfully scheduled.
+
+  <a name="Time"></a>
+  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+
+
+
+
+## CronJobList {#CronJobList}
+
+CronJobList is a collection of cron jobs.
+
+<hr>
+
+- **apiVersion**: batch/v2alpha1
+
+
+- **kind**: CronJobList
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
+
+  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
+- **items** ([]<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>), required
+
+  items is the list of CronJobs.
+
+
+
+
+
+## Operations {#Operations}
+
+
+
+<hr>
+
+
+
+
+
+
+### `get` read the specified CronJob
+
+#### HTTP Request
+
+GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CronJob
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+
+401: Unauthorized
+
+
+### `get` read status of the specified CronJob
+
+#### HTTP Request
+
+GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CronJob
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind CronJob
+
+#### HTTP Request
+
+GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind CronJob
+
+#### HTTP Request
+
+GET /apis/batch/v2alpha1/cronjobs
+
+#### Parameters
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
+
+401: Unauthorized
+
+
+### `create` create a CronJob
+
+#### HTTP Request
+
+POST /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+
+201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
+
+202 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Accepted
+
+401: Unauthorized
+
+
+### `update` replace the specified CronJob
+
+#### HTTP Request
+
+PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CronJob
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+
+201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
+
+401: Unauthorized
+
+
+### `update` replace status of the specified CronJob
+
+#### HTTP Request
+
+PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CronJob
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+
+201 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
+
+401: Unauthorized
+
+
+### `patch` partially update the specified CronJob
+
+#### HTTP Request
+
+PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CronJob
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+
+401: Unauthorized
+
+
+### `patch` partially update status of the specified CronJob
+
+#### HTTP Request
+
+PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CronJob
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
+
+401: Unauthorized
+
+
+### `delete` delete a CronJob
+
+#### HTTP Request
+
+DELETE /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the CronJob
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
+
+202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
+
+401: Unauthorized
+
+
+### `deletecollection` delete collection of CronJob
+
+#### HTTP Request
+
+DELETE /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
+
+401: Unauthorized
+
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md
similarity index 78%
rename from content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md
index a40aa4c592..95ae869be1 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/daemon-set-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "DaemonSet represents the configuration of a daemon set."
 title: "DaemonSet"
-weight: 9
+weight: 10
 ---
 
 `apiVersion: apps/v1`
@@ -30,11 +30,11 @@ DaemonSet represents the configuration of a daemon set.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetSpec" >}}">DaemonSetSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetSpec" >}}">DaemonSetSpec</a>)
 
   The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetStatus" >}}">DaemonSetStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetStatus" >}}">DaemonSetStatus</a>)
 
   The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ DaemonSetSpec is the specification of a daemon set.
 
   A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -78,19 +78,12 @@ DaemonSetSpec is the specification of a daemon set.
     <a name="RollingUpdateDaemonSet"></a>
     *Spec to control the desired behavior of daemon set rolling update.*
 
-    - **updateStrategy.rollingUpdate.maxSurge** (IntOrString)
+  - **updateStrategy.rollingUpdate.maxUnavailable** (IntOrString)
 
-      The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption. This is an alpha field and requires enabling DaemonSetUpdateSurge feature gate.
+    The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0. Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.
 
-      <a name="IntOrString"></a>
-      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-    - **updateStrategy.rollingUpdate.maxUnavailable** (IntOrString)
-
-      The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding down to a minimum of one. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.
-
-      <a name="IntOrString"></a>
-      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
 - **revisionHistoryLimit** (int32)
 
@@ -194,7 +187,7 @@ DaemonSetList is a collection of daemon sets.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>), required
 
   A list of daemon sets.
 
@@ -241,7 +234,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -274,7 +267,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -347,7 +340,7 @@ GET /apis/apps/v1/namespaces/{namespace}/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
 
 401: Unauthorized
 
@@ -415,7 +408,7 @@ GET /apis/apps/v1/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSetList" >}}">DaemonSetList</a>): OK
 
 401: Unauthorized
 
@@ -434,7 +427,7 @@ POST /apis/apps/v1/namespaces/{namespace}/daemonsets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -458,11 +451,11 @@ POST /apis/apps/v1/namespaces/{namespace}/daemonsets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Accepted
 
 401: Unauthorized
 
@@ -486,7 +479,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -510,9 +503,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
 401: Unauthorized
 
@@ -536,7 +529,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>, required
 
   
 
@@ -560,9 +553,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): Created
 
 401: Unauthorized
 
@@ -615,7 +608,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
@@ -668,7 +661,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/daemon-set-v1#DaemonSet" >}}">DaemonSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md
similarity index 81%
rename from content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md
index b455760a4c..7e5b39c929 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/deployment-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Deployment enables declarative updates for Pods and ReplicaSets."
 title: "Deployment"
-weight: 6
+weight: 7
 ---
 
 `apiVersion: apps/v1`
@@ -30,11 +30,11 @@ Deployment enables declarative updates for Pods and ReplicaSets.
 
   Standard object metadata.
 
-- **spec** (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentSpec" >}}">DeploymentSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentSpec" >}}">DeploymentSpec</a>)
 
   Specification of the desired behavior of the Deployment.
 
-- **status** (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentStatus" >}}">DeploymentStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentStatus" >}}">DeploymentStatus</a>)
 
   Most recently observed status of the Deployment.
 
@@ -52,7 +52,7 @@ DeploymentSpec is the specification of the desired behavior of the Deployment.
 
   Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template's labels.
 
-- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   Template describes the pods that will be created.
 
@@ -84,19 +84,19 @@ DeploymentSpec is the specification of the desired behavior of the Deployment.
     <a name="RollingUpdateDeployment"></a>
     *Spec to control the desired behavior of rolling update.*
 
-    - **strategy.rollingUpdate.maxSurge** (IntOrString)
+  - **strategy.rollingUpdate.maxSurge** (IntOrString)
 
-      The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.
+    The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.
 
-      <a name="IntOrString"></a>
-      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
-    - **strategy.rollingUpdate.maxUnavailable** (IntOrString)
+  - **strategy.rollingUpdate.maxUnavailable** (IntOrString)
 
-      The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.
+    The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.
 
-      <a name="IntOrString"></a>
-      *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
+    <a name="IntOrString"></a>
+    *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
 
 - **revisionHistoryLimit** (int32)
 
@@ -207,7 +207,7 @@ DeploymentList is a list of Deployments.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>), required
 
   Items is the list of Deployments.
 
@@ -254,7 +254,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -287,7 +287,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -360,7 +360,7 @@ GET /apis/apps/v1/namespaces/{namespace}/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
 
 401: Unauthorized
 
@@ -428,7 +428,7 @@ GET /apis/apps/v1/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#DeploymentList" >}}">DeploymentList</a>): OK
 
 401: Unauthorized
 
@@ -447,7 +447,7 @@ POST /apis/apps/v1/namespaces/{namespace}/deployments
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -471,11 +471,11 @@ POST /apis/apps/v1/namespaces/{namespace}/deployments
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Accepted
 
 401: Unauthorized
 
@@ -499,7 +499,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -523,9 +523,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
 401: Unauthorized
 
@@ -549,7 +549,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>, required
 
   
 
@@ -573,9 +573,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
+201 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): Created
 
 401: Unauthorized
 
@@ -628,7 +628,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
@@ -681,7 +681,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/deployments/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
+200 (<a href="{{< ref "../workloads-resources/deployment-v1#Deployment" >}}">Deployment</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md
similarity index 58%
rename from content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md
index 05957e573a..7355af9df8 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/ephemeral-container.md
@@ -1,46 +1,19 @@
 ---
 api_metadata:
-  apiVersion: "v1"
+  apiVersion: ""
   import: "k8s.io/api/core/v1"
-  kind: "EphemeralContainers"
+  kind: "EphemeralContainer"
 content_type: "api_reference"
-description: "A list of ephemeral containers used with the Pod ephemeralcontainers subresource."
-title: "EphemeralContainers"
-weight: 2
+description: "An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging."
+title: "EphemeralContainer"
+weight: 3
 ---
 
-`apiVersion: v1`
+
 
 `import "k8s.io/api/core/v1"`
 
 
-## EphemeralContainers {#EphemeralContainers}
-
-A list of ephemeral containers used with the Pod ephemeralcontainers subresource.
-
-<hr>
-
-- **apiVersion**: v1
-
-
-- **kind**: EphemeralContainers
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-
-- **ephemeralContainers** ([]<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainer" >}}">EphemeralContainer</a>), required
-
-  *Patch strategy: merge on key `name`*
-  
-  A list of ephemeral containers associated with this pod. New ephemeral containers may be appended to this list, but existing ephemeral containers may not be removed or modified.
-
-
-
-
-
-## EphemeralContainer {#EphemeralContainer}
-
 An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.
 
 <hr>
@@ -55,7 +28,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
 
 
-### Image
+### Image {#Image}
 
 
 - **image** (string)
@@ -66,7 +39,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
 
-### Entrypoint
+### Entrypoint {#Entrypoint}
 
 
 - **command** ([]string)
@@ -81,7 +54,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
 
-### Environment variables
+### Environment variables {#Environment-variables}
 
 
 - **env** ([]EnvVar)
@@ -108,51 +81,51 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="EnvVarSource"></a>
     *EnvVarSource represents a source for the value of an EnvVar.*
 
-    - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
+  - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
 
-      Selects a key of a ConfigMap.
+    Selects a key of a ConfigMap.
 
-      <a name="ConfigMapKeySelector"></a>
-      *Selects a key from a ConfigMap.*
+    <a name="ConfigMapKeySelector"></a>
+    *Selects a key from a ConfigMap.*
 
-      - **env.valueFrom.configMapKeyRef.key** (string), required
+  - **env.valueFrom.configMapKeyRef.key** (string), required
 
-        The key to select.
+    The key to select.
 
-      - **env.valueFrom.configMapKeyRef.name** (string)
+  - **env.valueFrom.configMapKeyRef.name** (string)
 
-        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-      - **env.valueFrom.configMapKeyRef.optional** (boolean)
+  - **env.valueFrom.configMapKeyRef.optional** (boolean)
 
-        Specify whether the ConfigMap or its key must be defined
+    Specify whether the ConfigMap or its key must be defined
 
-    - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
+  - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
 
-      Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
+    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
 
-    - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
+  - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
 
-      Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
+    Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
 
-    - **env.valueFrom.secretKeyRef** (SecretKeySelector)
+  - **env.valueFrom.secretKeyRef** (SecretKeySelector)
 
-      Selects a key of a secret in the pod's namespace
+    Selects a key of a secret in the pod's namespace
 
-      <a name="SecretKeySelector"></a>
-      *SecretKeySelector selects a key of a Secret.*
+    <a name="SecretKeySelector"></a>
+    *SecretKeySelector selects a key of a Secret.*
 
-      - **env.valueFrom.secretKeyRef.key** (string), required
+  - **env.valueFrom.secretKeyRef.key** (string), required
 
-        The key of the secret to select from.  Must be a valid secret key.
+    The key of the secret to select from.  Must be a valid secret key.
 
-      - **env.valueFrom.secretKeyRef.name** (string)
+  - **env.valueFrom.secretKeyRef.name** (string)
 
-        Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-      - **env.valueFrom.secretKeyRef.optional** (boolean)
+  - **env.valueFrom.secretKeyRef.optional** (boolean)
 
-        Specify whether the Secret or its key must be defined
+    Specify whether the Secret or its key must be defined
 
 - **envFrom** ([]EnvFromSource)
 
@@ -170,13 +143,13 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     
     The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
 
-    - **envFrom.configMapRef.name** (string)
+  - **envFrom.configMapRef.name** (string)
 
-      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-    - **envFrom.configMapRef.optional** (boolean)
+  - **envFrom.configMapRef.optional** (boolean)
 
-      Specify whether the ConfigMap must be defined
+    Specify whether the ConfigMap must be defined
 
   - **envFrom.prefix** (string)
 
@@ -191,15 +164,15 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     
     The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
 
-    - **envFrom.secretRef.name** (string)
+  - **envFrom.secretRef.name** (string)
 
-      Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
 
-    - **envFrom.secretRef.optional** (boolean)
+  - **envFrom.secretRef.optional** (boolean)
 
-      Specify whether the Secret must be defined
+    Specify whether the Secret must be defined
 
-### Volumes
+### Volumes {#Volumes}
 
 
 - **volumeMounts** ([]VolumeMount)
@@ -252,7 +225,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
     name must match the name of a persistentVolumeClaim in the pod
 
-### Lifecycle
+### Lifecycle {#Lifecycle}
 
 
 - **terminationMessagePath** (string)
@@ -263,7 +236,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
 
-### Debugging
+### Debugging {#Debugging}
 
 
 - **stdin** (boolean)
@@ -278,7 +251,7 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
 
-### Not allowed
+### Not allowed {#Not-allowed}
 
 
 - **ports** ([]ContainerPort)
@@ -317,11 +290,11 @@ An EphemeralContainer is a container that may be added temporarily to an existin
 
   - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
 
   - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
 
 - **lifecycle** (Lifecycle)
 
@@ -330,22 +303,122 @@ An EphemeralContainer is a container that may be added temporarily to an existin
   <a name="Lifecycle"></a>
   *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
 
-  - **lifecycle.postStart** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
+  - **lifecycle.postStart** (Handler)
 
     PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
 
-  - **lifecycle.preStop** (<a href="{{< ref "../workload-resources/pod-v1#Handler" >}}">Handler</a>)
+    <a name="Handler"></a>
+    *Handler defines a specific action that should be taken*
+
+  - **lifecycle.postStart.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **lifecycle.postStart.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **lifecycle.postStart.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  - **lifecycle.preStop** (Handler)
 
     PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
 
-- **livenessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
+    <a name="Handler"></a>
+    *Handler defines a specific action that should be taken*
+
+  - **lifecycle.preStop.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **lifecycle.preStop.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **lifecycle.preStop.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+- **livenessProbe** (Probe)
 
   Probes are not allowed for ephemeral containers.
 
-- **readinessProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
+  <a name="Probe"></a>
+  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
+
+  - **livenessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **livenessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **livenessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  - **livenessProbe.initialDelaySeconds** (int32)
+
+    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **livenessProbe.periodSeconds** (int32)
+
+    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
+  - **livenessProbe.timeoutSeconds** (int32)
+
+    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **livenessProbe.failureThreshold** (int32)
+
+    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
+  - **livenessProbe.successThreshold** (int32)
+
+    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+
+- **readinessProbe** (Probe)
 
   Probes are not allowed for ephemeral containers.
 
+  <a name="Probe"></a>
+  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
+
+  - **readinessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
+
+    One and only one of the following should be specified. Exec specifies the action to take.
+
+  - **readinessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
+
+    HTTPGet specifies the http request to perform.
+
+  - **readinessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
+
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
+
+  - **readinessProbe.initialDelaySeconds** (int32)
+
+    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **readinessProbe.periodSeconds** (int32)
+
+    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
+
+  - **readinessProbe.timeoutSeconds** (int32)
+
+    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
+
+  - **readinessProbe.failureThreshold** (int32)
+
+    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
+
+  - **readinessProbe.successThreshold** (int32)
+
+    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
+
 - **securityContext** (SecurityContext)
 
   SecurityContext is not allowed for ephemeral containers.
@@ -388,13 +461,13 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="Capabilities"></a>
     *Adds and removes POSIX capabilities from running containers.*
 
-    - **securityContext.capabilities.add** ([]string)
+  - **securityContext.capabilities.add** ([]string)
 
-      Added capabilities
+    Added capabilities
 
-    - **securityContext.capabilities.drop** ([]string)
+  - **securityContext.capabilities.drop** ([]string)
 
-      Removed capabilities
+    Removed capabilities
 
   - **securityContext.seccompProfile** (SeccompProfile)
 
@@ -403,15 +476,15 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="SeccompProfile"></a>
     *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
 
-    - **securityContext.seccompProfile.type** (string), required
+  - **securityContext.seccompProfile.type** (string), required
 
-      type indicates which kind of seccomp profile will be applied. Valid options are:
-      
-      Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+    type indicates which kind of seccomp profile will be applied. Valid options are:
+    
+    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
 
-    - **securityContext.seccompProfile.localhostProfile** (string)
+  - **securityContext.seccompProfile.localhostProfile** (string)
 
-      localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
 
   - **securityContext.seLinuxOptions** (SELinuxOptions)
 
@@ -420,21 +493,21 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="SELinuxOptions"></a>
     *SELinuxOptions are the labels to be applied to the container*
 
-    - **securityContext.seLinuxOptions.level** (string)
+  - **securityContext.seLinuxOptions.level** (string)
 
-      Level is SELinux level label that applies to the container.
+    Level is SELinux level label that applies to the container.
 
-    - **securityContext.seLinuxOptions.role** (string)
+  - **securityContext.seLinuxOptions.role** (string)
 
-      Role is a SELinux role label that applies to the container.
+    Role is a SELinux role label that applies to the container.
 
-    - **securityContext.seLinuxOptions.type** (string)
+  - **securityContext.seLinuxOptions.type** (string)
 
-      Type is a SELinux type label that applies to the container.
+    Type is a SELinux type label that applies to the container.
 
-    - **securityContext.seLinuxOptions.user** (string)
+  - **securityContext.seLinuxOptions.user** (string)
 
-      User is a SELinux user label that applies to the container.
+    User is a SELinux user label that applies to the container.
 
   - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
 
@@ -443,167 +516,56 @@ An EphemeralContainer is a container that may be added temporarily to an existin
     <a name="WindowsSecurityContextOptions"></a>
     *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
 
-    - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
+  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
 
-      GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
 
-    - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
+  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
 
-      GMSACredentialSpecName is the name of the GMSA credential spec to use.
+    GMSACredentialSpecName is the name of the GMSA credential spec to use.
 
-    - **securityContext.windowsOptions.runAsUserName** (string)
+  - **securityContext.windowsOptions.runAsUserName** (string)
 
-      The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
 
-- **startupProbe** (<a href="{{< ref "../workload-resources/pod-v1#Probe" >}}">Probe</a>)
+- **startupProbe** (Probe)
 
   Probes are not allowed for ephemeral containers.
 
+  <a name="Probe"></a>
+  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
 
+  - **startupProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
 
-## Operations {#Operations}
+    One and only one of the following should be specified. Exec specifies the action to take.
 
+  - **startupProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
 
+    HTTPGet specifies the http request to perform.
 
-<hr>
+  - **startupProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
 
+    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
 
+  - **startupProbe.initialDelaySeconds** (int32)
 
+    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
 
+  - **startupProbe.periodSeconds** (int32)
 
+    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
 
-### `get` read ephemeralcontainers of the specified Pod
+  - **startupProbe.timeoutSeconds** (int32)
 
-#### HTTP Request
+    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
 
-GET /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers
+  - **startupProbe.failureThreshold** (int32)
 
-#### Parameters
+    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
 
+  - **startupProbe.successThreshold** (int32)
 
-- **name** (*in path*): string, required
+    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
 
-  name of the EphemeralContainers
 
 
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): OK
-
-401: Unauthorized
-
-
-### `update` replace ephemeralcontainers of the specified Pod
-
-#### HTTP Request
-
-PUT /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the EphemeralContainers
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update ephemeralcontainers of the specified Pod
-
-#### HTTP Request
-
-PATCH /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the EphemeralContainers
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/ephemeral-containers-v1#EphemeralContainers" >}}">EphemeralContainers</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md
similarity index 85%
rename from content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md
index 42d61cb3b2..5bb2f6e175 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "configuration of a horizontal pod autoscaler."
 title: "HorizontalPodAutoscaler"
-weight: 12
+weight: 14
 ---
 
 `apiVersion: autoscaling/v1`
@@ -30,11 +30,11 @@ configuration of a horizontal pod autoscaler.
 
   Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
 
   behaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
 
-- **status** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
 
   current information about the autoscaler.
 
@@ -132,7 +132,7 @@ list of horizontal pod autoscaler objects.
 
   Standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
 
   list of horizontal pod autoscaler objects.
 
@@ -179,7 +179,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -212,7 +212,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -285,7 +285,7 @@ GET /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -353,7 +353,7 @@ GET /apis/autoscaling/v1/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -372,7 +372,7 @@ POST /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -396,11 +396,11 @@ POST /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
 
 401: Unauthorized
 
@@ -424,7 +424,7 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -448,9 +448,9 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -474,7 +474,7 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -498,9 +498,9 @@ PUT /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -553,7 +553,7 @@ PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -606,7 +606,7 @@ PATCH /apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v1#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md b/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md
similarity index 56%
rename from content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md
index 0ed4942e1b..56fd55d24b 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/horizontal-pod-autoscaler-v2beta2.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified."
 title: "HorizontalPodAutoscaler v2beta2"
-weight: 13
+weight: 15
 ---
 
 `apiVersion: autoscaling/v2beta2`
@@ -30,11 +30,11 @@ HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, wh
 
   metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerSpec" >}}">HorizontalPodAutoscalerSpec</a>)
 
   spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
 
-- **status** (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerStatus" >}}">HorizontalPodAutoscalerStatus</a>)
 
   status is the current information about the autoscaler.
 
@@ -89,32 +89,32 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="HPAScalingRules"></a>
     *HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.*
 
-    - **behavior.scaleDown.policies** ([]HPAScalingPolicy)
+  - **behavior.scaleDown.policies** ([]HPAScalingPolicy)
 
-      policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
+    policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
 
-      <a name="HPAScalingPolicy"></a>
-      *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
+    <a name="HPAScalingPolicy"></a>
+    *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
 
-      - **behavior.scaleDown.policies.type** (string), required
+  - **behavior.scaleDown.policies.type** (string), required
 
-        Type is used to specify the scaling policy.
+    Type is used to specify the scaling policy.
 
-      - **behavior.scaleDown.policies.value** (int32), required
+  - **behavior.scaleDown.policies.value** (int32), required
 
-        Value contains the amount of change which is permitted by the policy. It must be greater than zero
+    Value contains the amount of change which is permitted by the policy. It must be greater than zero
 
-      - **behavior.scaleDown.policies.periodSeconds** (int32), required
+  - **behavior.scaleDown.policies.periodSeconds** (int32), required
 
-        PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
+    PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
 
-    - **behavior.scaleDown.selectPolicy** (string)
+  - **behavior.scaleDown.selectPolicy** (string)
 
-      selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
+    selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
 
-    - **behavior.scaleDown.stabilizationWindowSeconds** (int32)
+  - **behavior.scaleDown.stabilizationWindowSeconds** (int32)
 
-      StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
+    StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
 
   - **behavior.scaleUp** (HPAScalingRules)
 
@@ -126,32 +126,32 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="HPAScalingRules"></a>
     *HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.*
 
-    - **behavior.scaleUp.policies** ([]HPAScalingPolicy)
+  - **behavior.scaleUp.policies** ([]HPAScalingPolicy)
 
-      policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
+    policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
 
-      <a name="HPAScalingPolicy"></a>
-      *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
+    <a name="HPAScalingPolicy"></a>
+    *HPAScalingPolicy is a single policy which must hold true for a specified past interval.*
 
-      - **behavior.scaleUp.policies.type** (string), required
+  - **behavior.scaleUp.policies.type** (string), required
 
-        Type is used to specify the scaling policy.
+    Type is used to specify the scaling policy.
 
-      - **behavior.scaleUp.policies.value** (int32), required
+  - **behavior.scaleUp.policies.value** (int32), required
 
-        Value contains the amount of change which is permitted by the policy. It must be greater than zero
+    Value contains the amount of change which is permitted by the policy. It must be greater than zero
 
-      - **behavior.scaleUp.policies.periodSeconds** (int32), required
+  - **behavior.scaleUp.policies.periodSeconds** (int32), required
 
-        PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
+    PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
 
-    - **behavior.scaleUp.selectPolicy** (string)
+  - **behavior.scaleUp.selectPolicy** (string)
 
-      selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
+    selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.
 
-    - **behavior.scaleUp.stabilizationWindowSeconds** (int32)
+  - **behavior.scaleUp.stabilizationWindowSeconds** (int32)
 
-      StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
+    StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
 
 - **metrics** ([]MetricSpec)
 
@@ -171,36 +171,36 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ContainerResourceMetricSource"></a>
     *ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  The values will be averaged together before being compared to the target.  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.  Only one "target" type should be set.*
 
-    - **metrics.containerResource.container** (string), required
+  - **metrics.containerResource.container** (string), required
 
-      container is the name of the container in the pods of the scaling target
+    container is the name of the container in the pods of the scaling target
 
-    - **metrics.containerResource.name** (string), required
+  - **metrics.containerResource.name** (string), required
 
-      name is the name of the resource in question.
+    name is the name of the resource in question.
 
-    - **metrics.containerResource.target** (MetricTarget), required
+  - **metrics.containerResource.target** (MetricTarget), required
 
-      target specifies the target value for the given metric
+    target specifies the target value for the given metric
 
-      <a name="MetricTarget"></a>
-      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+    <a name="MetricTarget"></a>
+    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-      - **metrics.containerResource.target.type** (string), required
+  - **metrics.containerResource.target.type** (string), required
 
-        type represents whether the metric type is Utilization, Value, or AverageValue
+    type represents whether the metric type is Utilization, Value, or AverageValue
 
-      - **metrics.containerResource.target.averageUtilization** (int32)
+  - **metrics.containerResource.target.averageUtilization** (int32)
 
-        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-      - **metrics.containerResource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.containerResource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-      - **metrics.containerResource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.containerResource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the target value of the metric (as a quantity).
+    value is the target value of the metric (as a quantity).
 
   - **metrics.external** (ExternalMetricSource)
 
@@ -209,43 +209,43 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ExternalMetricSource"></a>
     *ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).*
 
-    - **metrics.external.metric** (MetricIdentifier), required
+  - **metrics.external.metric** (MetricIdentifier), required
 
-      metric identifies the target metric by name and selector
+    metric identifies the target metric by name and selector
 
-      <a name="MetricIdentifier"></a>
-      *MetricIdentifier defines the name and optionally selector for a metric*
+    <a name="MetricIdentifier"></a>
+    *MetricIdentifier defines the name and optionally selector for a metric*
 
-      - **metrics.external.metric.name** (string), required
+  - **metrics.external.metric.name** (string), required
 
-        name is the name of the given metric
+    name is the name of the given metric
 
-      - **metrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **metrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
-    - **metrics.external.target** (MetricTarget), required
+  - **metrics.external.target** (MetricTarget), required
 
-      target specifies the target value for the given metric
+    target specifies the target value for the given metric
 
-      <a name="MetricTarget"></a>
-      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+    <a name="MetricTarget"></a>
+    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-      - **metrics.external.target.type** (string), required
+  - **metrics.external.target.type** (string), required
 
-        type represents whether the metric type is Utilization, Value, or AverageValue
+    type represents whether the metric type is Utilization, Value, or AverageValue
 
-      - **metrics.external.target.averageUtilization** (int32)
+  - **metrics.external.target.averageUtilization** (int32)
 
-        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-      - **metrics.external.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.external.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-      - **metrics.external.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.external.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the target value of the metric (as a quantity).
+    value is the target value of the metric (as a quantity).
 
   - **metrics.object** (ObjectMetricSource)
 
@@ -254,61 +254,61 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ObjectMetricSource"></a>
     *ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).*
 
-    - **metrics.object.describedObject** (CrossVersionObjectReference), required
+  - **metrics.object.describedObject** (CrossVersionObjectReference), required
 
 
-      <a name="CrossVersionObjectReference"></a>
-      *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
+    <a name="CrossVersionObjectReference"></a>
+    *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
 
-      - **metrics.object.describedObject.kind** (string), required
+  - **metrics.object.describedObject.kind** (string), required
 
-        Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+    Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
 
-      - **metrics.object.describedObject.name** (string), required
+  - **metrics.object.describedObject.name** (string), required
 
-        Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
+    Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
 
-      - **metrics.object.describedObject.apiVersion** (string)
+  - **metrics.object.describedObject.apiVersion** (string)
 
-        API version of the referent
+    API version of the referent
 
-    - **metrics.object.metric** (MetricIdentifier), required
+  - **metrics.object.metric** (MetricIdentifier), required
 
-      metric identifies the target metric by name and selector
+    metric identifies the target metric by name and selector
 
-      <a name="MetricIdentifier"></a>
-      *MetricIdentifier defines the name and optionally selector for a metric*
+    <a name="MetricIdentifier"></a>
+    *MetricIdentifier defines the name and optionally selector for a metric*
 
-      - **metrics.object.metric.name** (string), required
+  - **metrics.object.metric.name** (string), required
 
-        name is the name of the given metric
+    name is the name of the given metric
 
-      - **metrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **metrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
-    - **metrics.object.target** (MetricTarget), required
+  - **metrics.object.target** (MetricTarget), required
 
-      target specifies the target value for the given metric
+    target specifies the target value for the given metric
 
-      <a name="MetricTarget"></a>
-      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+    <a name="MetricTarget"></a>
+    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-      - **metrics.object.target.type** (string), required
+  - **metrics.object.target.type** (string), required
 
-        type represents whether the metric type is Utilization, Value, or AverageValue
+    type represents whether the metric type is Utilization, Value, or AverageValue
 
-      - **metrics.object.target.averageUtilization** (int32)
+  - **metrics.object.target.averageUtilization** (int32)
 
-        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-      - **metrics.object.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.object.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-      - **metrics.object.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.object.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the target value of the metric (as a quantity).
+    value is the target value of the metric (as a quantity).
 
   - **metrics.pods** (PodsMetricSource)
 
@@ -317,43 +317,43 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="PodsMetricSource"></a>
     *PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.*
 
-    - **metrics.pods.metric** (MetricIdentifier), required
+  - **metrics.pods.metric** (MetricIdentifier), required
 
-      metric identifies the target metric by name and selector
+    metric identifies the target metric by name and selector
 
-      <a name="MetricIdentifier"></a>
-      *MetricIdentifier defines the name and optionally selector for a metric*
+    <a name="MetricIdentifier"></a>
+    *MetricIdentifier defines the name and optionally selector for a metric*
 
-      - **metrics.pods.metric.name** (string), required
+  - **metrics.pods.metric.name** (string), required
 
-        name is the name of the given metric
+    name is the name of the given metric
 
-      - **metrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **metrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
-    - **metrics.pods.target** (MetricTarget), required
+  - **metrics.pods.target** (MetricTarget), required
 
-      target specifies the target value for the given metric
+    target specifies the target value for the given metric
 
-      <a name="MetricTarget"></a>
-      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+    <a name="MetricTarget"></a>
+    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-      - **metrics.pods.target.type** (string), required
+  - **metrics.pods.target.type** (string), required
 
-        type represents whether the metric type is Utilization, Value, or AverageValue
+    type represents whether the metric type is Utilization, Value, or AverageValue
 
-      - **metrics.pods.target.averageUtilization** (int32)
+  - **metrics.pods.target.averageUtilization** (int32)
 
-        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-      - **metrics.pods.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.pods.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-      - **metrics.pods.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.pods.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the target value of the metric (as a quantity).
+    value is the target value of the metric (as a quantity).
 
   - **metrics.resource** (ResourceMetricSource)
 
@@ -362,32 +362,32 @@ HorizontalPodAutoscalerSpec describes the desired functionality of the Horizonta
     <a name="ResourceMetricSource"></a>
     *ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  The values will be averaged together before being compared to the target.  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.  Only one "target" type should be set.*
 
-    - **metrics.resource.name** (string), required
+  - **metrics.resource.name** (string), required
 
-      name is the name of the resource in question.
+    name is the name of the resource in question.
 
-    - **metrics.resource.target** (MetricTarget), required
+  - **metrics.resource.target** (MetricTarget), required
 
-      target specifies the target value for the given metric
+    target specifies the target value for the given metric
 
-      <a name="MetricTarget"></a>
-      *MetricTarget defines the target value, average value, or average utilization of a specific metric*
+    <a name="MetricTarget"></a>
+    *MetricTarget defines the target value, average value, or average utilization of a specific metric*
 
-      - **metrics.resource.target.type** (string), required
+  - **metrics.resource.target.type** (string), required
 
-        type represents whether the metric type is Utilization, Value, or AverageValue
+    type represents whether the metric type is Utilization, Value, or AverageValue
 
-      - **metrics.resource.target.averageUtilization** (int32)
+  - **metrics.resource.target.averageUtilization** (int32)
 
-        averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
+    averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type
 
-      - **metrics.resource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.resource.target.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the target value of the average of the metric across all relevant pods (as a quantity)
 
-      - **metrics.resource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **metrics.resource.target.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the target value of the metric (as a quantity).
+    value is the target value of the metric (as a quantity).
 
 
 
@@ -455,32 +455,32 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ContainerResourceMetricStatus"></a>
     *ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory).  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.*
 
-    - **currentMetrics.containerResource.container** (string), required
+  - **currentMetrics.containerResource.container** (string), required
 
-      Container is the name of the container in the pods of the scaling target
+    Container is the name of the container in the pods of the scaling target
 
-    - **currentMetrics.containerResource.current** (MetricValueStatus), required
+  - **currentMetrics.containerResource.current** (MetricValueStatus), required
 
-      current contains the current value for the given metric
+    current contains the current value for the given metric
 
-      <a name="MetricValueStatus"></a>
-      *MetricValueStatus holds the current value for a metric*
+    <a name="MetricValueStatus"></a>
+    *MetricValueStatus holds the current value for a metric*
 
-      - **currentMetrics.containerResource.current.averageUtilization** (int32)
+  - **currentMetrics.containerResource.current.averageUtilization** (int32)
 
-        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-      - **currentMetrics.containerResource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.containerResource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-      - **currentMetrics.containerResource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.containerResource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the current value of the metric (as a quantity).
+    value is the current value of the metric (as a quantity).
 
-    - **currentMetrics.containerResource.name** (string), required
+  - **currentMetrics.containerResource.name** (string), required
 
-      Name is the name of the resource in question.
+    Name is the name of the resource in question.
 
   - **currentMetrics.external** (ExternalMetricStatus)
 
@@ -489,39 +489,39 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ExternalMetricStatus"></a>
     *ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.*
 
-    - **currentMetrics.external.current** (MetricValueStatus), required
+  - **currentMetrics.external.current** (MetricValueStatus), required
 
-      current contains the current value for the given metric
+    current contains the current value for the given metric
 
-      <a name="MetricValueStatus"></a>
-      *MetricValueStatus holds the current value for a metric*
+    <a name="MetricValueStatus"></a>
+    *MetricValueStatus holds the current value for a metric*
 
-      - **currentMetrics.external.current.averageUtilization** (int32)
+  - **currentMetrics.external.current.averageUtilization** (int32)
 
-        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-      - **currentMetrics.external.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.external.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-      - **currentMetrics.external.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.external.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the current value of the metric (as a quantity).
+    value is the current value of the metric (as a quantity).
 
-    - **currentMetrics.external.metric** (MetricIdentifier), required
+  - **currentMetrics.external.metric** (MetricIdentifier), required
 
-      metric identifies the target metric by name and selector
+    metric identifies the target metric by name and selector
 
-      <a name="MetricIdentifier"></a>
-      *MetricIdentifier defines the name and optionally selector for a metric*
+    <a name="MetricIdentifier"></a>
+    *MetricIdentifier defines the name and optionally selector for a metric*
 
-      - **currentMetrics.external.metric.name** (string), required
+  - **currentMetrics.external.metric.name** (string), required
 
-        name is the name of the given metric
+    name is the name of the given metric
 
-      - **currentMetrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **currentMetrics.external.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
   - **currentMetrics.object** (ObjectMetricStatus)
 
@@ -530,57 +530,57 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ObjectMetricStatus"></a>
     *ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).*
 
-    - **currentMetrics.object.current** (MetricValueStatus), required
+  - **currentMetrics.object.current** (MetricValueStatus), required
 
-      current contains the current value for the given metric
+    current contains the current value for the given metric
 
-      <a name="MetricValueStatus"></a>
-      *MetricValueStatus holds the current value for a metric*
+    <a name="MetricValueStatus"></a>
+    *MetricValueStatus holds the current value for a metric*
 
-      - **currentMetrics.object.current.averageUtilization** (int32)
+  - **currentMetrics.object.current.averageUtilization** (int32)
 
-        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-      - **currentMetrics.object.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.object.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-      - **currentMetrics.object.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.object.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the current value of the metric (as a quantity).
+    value is the current value of the metric (as a quantity).
 
-    - **currentMetrics.object.describedObject** (CrossVersionObjectReference), required
+  - **currentMetrics.object.describedObject** (CrossVersionObjectReference), required
 
 
-      <a name="CrossVersionObjectReference"></a>
-      *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
+    <a name="CrossVersionObjectReference"></a>
+    *CrossVersionObjectReference contains enough information to let you identify the referred resource.*
 
-      - **currentMetrics.object.describedObject.kind** (string), required
+  - **currentMetrics.object.describedObject.kind** (string), required
 
-        Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
+    Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
 
-      - **currentMetrics.object.describedObject.name** (string), required
+  - **currentMetrics.object.describedObject.name** (string), required
 
-        Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
+    Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names
 
-      - **currentMetrics.object.describedObject.apiVersion** (string)
+  - **currentMetrics.object.describedObject.apiVersion** (string)
 
-        API version of the referent
+    API version of the referent
 
-    - **currentMetrics.object.metric** (MetricIdentifier), required
+  - **currentMetrics.object.metric** (MetricIdentifier), required
 
-      metric identifies the target metric by name and selector
+    metric identifies the target metric by name and selector
 
-      <a name="MetricIdentifier"></a>
-      *MetricIdentifier defines the name and optionally selector for a metric*
+    <a name="MetricIdentifier"></a>
+    *MetricIdentifier defines the name and optionally selector for a metric*
 
-      - **currentMetrics.object.metric.name** (string), required
+  - **currentMetrics.object.metric.name** (string), required
 
-        name is the name of the given metric
+    name is the name of the given metric
 
-      - **currentMetrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **currentMetrics.object.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
   - **currentMetrics.pods** (PodsMetricStatus)
 
@@ -589,39 +589,39 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="PodsMetricStatus"></a>
     *PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).*
 
-    - **currentMetrics.pods.current** (MetricValueStatus), required
+  - **currentMetrics.pods.current** (MetricValueStatus), required
 
-      current contains the current value for the given metric
+    current contains the current value for the given metric
 
-      <a name="MetricValueStatus"></a>
-      *MetricValueStatus holds the current value for a metric*
+    <a name="MetricValueStatus"></a>
+    *MetricValueStatus holds the current value for a metric*
 
-      - **currentMetrics.pods.current.averageUtilization** (int32)
+  - **currentMetrics.pods.current.averageUtilization** (int32)
 
-        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-      - **currentMetrics.pods.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.pods.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-      - **currentMetrics.pods.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.pods.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the current value of the metric (as a quantity).
+    value is the current value of the metric (as a quantity).
 
-    - **currentMetrics.pods.metric** (MetricIdentifier), required
+  - **currentMetrics.pods.metric** (MetricIdentifier), required
 
-      metric identifies the target metric by name and selector
+    metric identifies the target metric by name and selector
 
-      <a name="MetricIdentifier"></a>
-      *MetricIdentifier defines the name and optionally selector for a metric*
+    <a name="MetricIdentifier"></a>
+    *MetricIdentifier defines the name and optionally selector for a metric*
 
-      - **currentMetrics.pods.metric.name** (string), required
+  - **currentMetrics.pods.metric.name** (string), required
 
-        name is the name of the given metric
+    name is the name of the given metric
 
-      - **currentMetrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+  - **currentMetrics.pods.metric.selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
 
-        selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
+    selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.
 
   - **currentMetrics.resource** (ResourceMetricStatus)
 
@@ -630,28 +630,28 @@ HorizontalPodAutoscalerStatus describes the current status of a horizontal pod a
     <a name="ResourceMetricStatus"></a>
     *ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory).  Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.*
 
-    - **currentMetrics.resource.current** (MetricValueStatus), required
+  - **currentMetrics.resource.current** (MetricValueStatus), required
 
-      current contains the current value for the given metric
+    current contains the current value for the given metric
 
-      <a name="MetricValueStatus"></a>
-      *MetricValueStatus holds the current value for a metric*
+    <a name="MetricValueStatus"></a>
+    *MetricValueStatus holds the current value for a metric*
 
-      - **currentMetrics.resource.current.averageUtilization** (int32)
+  - **currentMetrics.resource.current.averageUtilization** (int32)
 
-        currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
+    currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.
 
-      - **currentMetrics.resource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.resource.current.averageValue** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
+    averageValue is the current value of the average of the metric across all relevant pods (as a quantity)
 
-      - **currentMetrics.resource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+  - **currentMetrics.resource.current.value** (<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
 
-        value is the current value of the metric (as a quantity).
+    value is the current value of the metric (as a quantity).
 
-    - **currentMetrics.resource.name** (string), required
+  - **currentMetrics.resource.name** (string), required
 
-      Name is the name of the resource in question.
+    Name is the name of the resource in question.
 
 - **lastScaleTime** (Time)
 
@@ -684,7 +684,7 @@ HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.
 
   metadata is the standard list metadata.
 
-- **items** ([]<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>), required
 
   items is the list of horizontal pod autoscaler objects.
 
@@ -731,7 +731,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -764,7 +764,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -837,7 +837,7 @@ GET /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -905,7 +905,7 @@ GET /apis/autoscaling/v2beta2/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscalerList" >}}">HorizontalPodAutoscalerList</a>): OK
 
 401: Unauthorized
 
@@ -924,7 +924,7 @@ POST /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -948,11 +948,11 @@ POST /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Accepted
 
 401: Unauthorized
 
@@ -976,7 +976,7 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -1000,9 +1000,9 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -1026,7 +1026,7 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>, required
 
   
 
@@ -1050,9 +1050,9 @@ PUT /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{n
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
+201 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): Created
 
 401: Unauthorized
 
@@ -1105,7 +1105,7 @@ PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
@@ -1158,7 +1158,7 @@ PATCH /apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
+200 (<a href="{{< ref "../workloads-resources/horizontal-pod-autoscaler-v2beta2#HorizontalPodAutoscaler" >}}">HorizontalPodAutoscaler</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md
similarity index 79%
rename from content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md
index da8c6422e1..3deab1c4be 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/job-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Job represents the configuration of a single job."
 title: "Job"
-weight: 10
+weight: 11
 ---
 
 `apiVersion: batch/v1`
@@ -30,11 +30,11 @@ Job represents the configuration of a single job.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/job-v1#JobSpec" >}}">JobSpec</a>)
 
   Specification of the desired behavior of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workload-resources/job-v1#JobStatus" >}}">JobStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/job-v1#JobStatus" >}}">JobStatus</a>)
 
   Current status of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -53,7 +53,7 @@ JobSpec describes how the job execution will look like.
 ### Replicas
 
 
-- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   Describes the pod that will be created when executing a job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
 
@@ -68,32 +68,18 @@ JobSpec describes how the job execution will look like.
 
   Specifies the desired number of successfully finished pods the job should be run with.  Setting to nil means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value.  Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
 
-- **completionMode** (string)
-
-  CompletionMode specifies how Pod completions are tracked. It can be `NonIndexed` (default) or `Indexed`.
-  
-  `NonIndexed` means that the Job is considered complete when there have been .spec.completions successfully completed Pods. Each Pod completion is homologous to each other.
-  
-  `Indexed` means that the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1), available in the annotation batch.kubernetes.io/job-completion-index. The Job is considered complete when there is one successfully completed Pod for each index. When value is `Indexed`, .spec.completions must be specified and `.spec.parallelism` must be less than or equal to 10^5.
-  
-  This field is alpha-level and is only honored by servers that enable the IndexedJob feature gate. More completion modes can be added in the future. If the Job controller observes a mode that it doesn't recognize, the controller skips updates for the Job.
-
 - **backoffLimit** (int32)
 
   Specifies the number of retries before marking this job failed. Defaults to 6
 
 - **activeDeadlineSeconds** (int64)
 
-  Specifies the duration in seconds relative to the startTime that the job may be continuously active before the system tries to terminate it; value must be positive integer. If a Job is suspended (at creation or through an update), this timer will effectively be stopped and reset when the Job is resumed again.
+  Specifies the duration in seconds relative to the startTime that the job may be active before the system tries to terminate it; value must be positive integer
 
 - **ttlSecondsAfterFinished** (int32)
 
   ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature.
 
-- **suspend** (boolean)
-
-  Suspend specifies whether the Job controller should create Pods or not. If a Job is created with suspend set to true, no Pods are created by the Job controller. If a Job is suspended after creation (i.e. the flag goes from false to true), the Job controller will delete all active Pods associated with this Job. Users must design their workload to gracefully handle this. Suspending a Job will reset the StartTime field of the Job, effectively resetting the ActiveDeadlineSeconds timer too. This is an alpha field and requires the SuspendJob feature gate to be enabled; otherwise this field may not be set to true. Defaults to false.
-
 ### Selector
 
 
@@ -115,7 +101,7 @@ JobStatus represents the current state of a Job.
 
 - **startTime** (Time)
 
-  Represents time when the job controller started processing a job. When a Job is created in the suspended state, this field is not set until the first time it is resumed. This field is reset every time a Job is resumed from suspension. It is represented in RFC3339 form and is in UTC.
+  Represents time when the job was acknowledged by the job controller. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
 
   <a name="Time"></a>
   *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
@@ -139,17 +125,11 @@ JobStatus represents the current state of a Job.
 
   The number of pods which reached phase Succeeded.
 
-- **completedIndexes** (string)
-
-  CompletedIndexes holds the completed indexes when .spec.completionMode = "Indexed" in a text format. The indexes are represented as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as "1,3-5,7".
-
 - **conditions** ([]JobCondition)
 
   *Patch strategy: merge on key `type`*
   
-  *Atomic: will be replaced during a merge*
-  
-  The latest available observations of an object's current state. When a Job fails, one of the conditions will have type "Failed" and status true. When a Job is suspended, one of the conditions will have type "Suspended" and status true; when the Job is resumed, the status of this condition will become false. When a Job is completed, one of the conditions will have type "Complete" and status true. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
+  The latest available observations of an object's current state. When a job fails, one of the conditions will have type == "Failed". More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
 
   <a name="JobCondition"></a>
   *JobCondition describes current state of a job.*
@@ -204,7 +184,7 @@ JobList is a collection of jobs.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>), required
 
   items is the list of Jobs.
 
@@ -251,7 +231,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -284,7 +264,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -357,7 +337,7 @@ GET /apis/batch/v1/namespaces/{namespace}/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#JobList" >}}">JobList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#JobList" >}}">JobList</a>): OK
 
 401: Unauthorized
 
@@ -425,7 +405,7 @@ GET /apis/batch/v1/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#JobList" >}}">JobList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#JobList" >}}">JobList</a>): OK
 
 401: Unauthorized
 
@@ -444,7 +424,7 @@ POST /apis/batch/v1/namespaces/{namespace}/jobs
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -468,11 +448,11 @@ POST /apis/batch/v1/namespaces/{namespace}/jobs
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Accepted
 
 401: Unauthorized
 
@@ -496,7 +476,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -520,9 +500,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
 
 401: Unauthorized
 
@@ -546,7 +526,7 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>, required
 
   
 
@@ -570,9 +550,9 @@ PUT /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): Created
+201 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): Created
 
 401: Unauthorized
 
@@ -625,7 +605,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
@@ -678,7 +658,7 @@ PATCH /apis/batch/v1/namespaces/{namespace}/jobs/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/job-v1#Job" >}}">Job</a>): OK
+200 (<a href="{{< ref "../workloads-resources/job-v1#Job" >}}">Job</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md
index 5cbe3e4894..fec34df19f 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/pod-template-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "PodTemplate describes a template for creating copies of a predefined pod."
 title: "PodTemplate"
-weight: 3
+weight: 4
 ---
 
 `apiVersion: v1`
@@ -30,7 +30,7 @@ PodTemplate describes a template for creating copies of a predefined pod.
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template defines the pods that will be created from this pod template. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -48,7 +48,7 @@ PodTemplateSpec describes the data a pod should have when created from a templat
 
   Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
 
   Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -72,7 +72,7 @@ PodTemplateList is a list of PodTemplates.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>), required
 
   List of pod templates
 
@@ -119,7 +119,7 @@ GET /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
 401: Unauthorized
 
@@ -192,7 +192,7 @@ GET /api/v1/namespaces/{namespace}/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
 
 401: Unauthorized
 
@@ -260,7 +260,7 @@ GET /api/v1/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateList" >}}">PodTemplateList</a>): OK
 
 401: Unauthorized
 
@@ -279,7 +279,7 @@ POST /api/v1/namespaces/{namespace}/podtemplates
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
 
   
 
@@ -303,11 +303,11 @@ POST /api/v1/namespaces/{namespace}/podtemplates
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
+201 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
 
 401: Unauthorized
 
@@ -331,7 +331,7 @@ PUT /api/v1/namespaces/{namespace}/podtemplates/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>, required
 
   
 
@@ -355,9 +355,9 @@ PUT /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
+201 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Created
 
 401: Unauthorized
 
@@ -410,7 +410,7 @@ PATCH /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
 401: Unauthorized
 
@@ -463,9 +463,9 @@ DELETE /api/v1/namespaces/{namespace}/podtemplates/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
+200 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): OK
 
-202 (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplate" >}}">PodTemplate</a>): Accepted
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md
new file mode 100644
index 0000000000..584c338172
--- /dev/null
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/pod-v1.md
@@ -0,0 +1,1270 @@
+---
+api_metadata:
+  apiVersion: "v1"
+  import: "k8s.io/api/core/v1"
+  kind: "Pod"
+content_type: "api_reference"
+description: "Pod is a collection of containers that can run on a host."
+title: "Pod"
+weight: 1
+---
+
+`apiVersion: v1`
+
+`import "k8s.io/api/core/v1"`
+
+
+## Pod {#Pod}
+
+Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.
+
+<hr>
+
+- **apiVersion**: v1
+
+
+- **kind**: Pod
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
+
+  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+
+- **spec** (<a href="{{< ref "../workloads-resources/pod-v1#PodSpec" >}}">PodSpec</a>)
+
+  Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+- **status** (<a href="{{< ref "../workloads-resources/pod-v1#PodStatus" >}}">PodStatus</a>)
+
+  Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+
+
+
+
+## PodSpec {#PodSpec}
+
+PodSpec is a description of a pod.
+
+<hr>
+
+
+
+### Containers
+
+
+- **containers** ([]<a href="{{< ref "../workloads-resources/container#Container" >}}">Container</a>), required
+
+  *Patch strategy: merge on key `name`*
+  
+  List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.
+
+- **initContainers** ([]<a href="{{< ref "../workloads-resources/container#Container" >}}">Container</a>)
+
+  *Patch strategy: merge on key `name`*
+  
+  List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
+
+- **imagePullSecrets** ([]<a href="{{< ref "../common-definitions/local-object-reference#LocalObjectReference" >}}">LocalObjectReference</a>)
+
+  *Patch strategy: merge on key `name`*
+  
+  ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
+
+- **enableServiceLinks** (boolean)
+
+  EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.
+
+### Volumes
+
+
+- **volumes** ([]<a href="{{< ref "../config-and-storage-resources/volume#Volume" >}}">Volume</a>)
+
+  *Patch strategies: retainKeys, merge on key `name`*
+  
+  List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes
+
+### Scheduling
+
+
+- **nodeSelector** (map[string]string)
+
+  NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
+
+- **nodeName** (string)
+
+  NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.
+
+- **affinity** (Affinity)
+
+  If specified, the pod's scheduling constraints
+
+  <a name="Affinity"></a>
+  *Affinity is a group of affinity scheduling rules.*
+
+  - **affinity.nodeAffinity** (<a href="{{< ref "../common-definitions/node-affinity#NodeAffinity" >}}">NodeAffinity</a>)
+
+    Describes node affinity scheduling rules for the pod.
+
+  - **affinity.podAffinity** (<a href="{{< ref "../common-definitions/pod-affinity#PodAffinity" >}}">PodAffinity</a>)
+
+    Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
+
+  - **affinity.podAntiAffinity** (<a href="{{< ref "../common-definitions/pod-anti-affinity#PodAntiAffinity" >}}">PodAntiAffinity</a>)
+
+    Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
+
+- **tolerations** ([]Toleration)
+
+  If specified, the pod's tolerations.
+
+  <a name="Toleration"></a>
+  *The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.*
+
+  - **tolerations.key** (string)
+
+    Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+
+  - **tolerations.operator** (string)
+
+    Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
+
+  - **tolerations.value** (string)
+
+    Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
+
+  - **tolerations.effect** (string)
+
+    Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+
+  - **tolerations.tolerationSeconds** (int64)
+
+    TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
+
+- **schedulerName** (string)
+
+  If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
+
+- **runtimeClassName** (string)
+
+  RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.
+
+- **priorityClassName** (string)
+
+  If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
+
+- **priority** (int32)
+
+  The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.
+
+### Lifecycle
+
+
+- **restartPolicy** (string)
+
+  Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
+
+- **terminationGracePeriodSeconds** (int64)
+
+  Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.
+
+- **activeDeadlineSeconds** (int64)
+
+  Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.
+
+- **readinessGates** ([]PodReadinessGate)
+
+  If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md
+
+  <a name="PodReadinessGate"></a>
+  *PodReadinessGate contains the reference to a pod condition*
+
+  - **readinessGates.conditionType** (string), required
+
+    ConditionType refers to a condition in the pod's condition list with matching type.
+
+### Hostname and Name resolution
+
+
+- **hostname** (string)
+
+  Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.
+
+- **setHostnameAsFQDN** (boolean)
+
+  If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.
+
+- **subdomain** (string)
+
+  If specified, the fully qualified Pod hostname will be "\<hostname>.\<subdomain>.\<pod namespace>.svc.\<cluster domain>". If not specified, the pod will not have a domainname at all.
+
+- **hostAliases** ([]HostAlias)
+
+  *Patch strategy: merge on key `ip`*
+  
+  HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified. This is only valid for non-hostNetwork pods.
+
+  <a name="HostAlias"></a>
+  *HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.*
+
+  - **hostAliases.hostnames** ([]string)
+
+    Hostnames for the above IP address.
+
+  - **hostAliases.ip** (string)
+
+    IP address of the host file entry.
+
+- **dnsConfig** (PodDNSConfig)
+
+  Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
+
+  <a name="PodDNSConfig"></a>
+  *PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.*
+
+  - **dnsConfig.nameservers** ([]string)
+
+    A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.
+
+  - **dnsConfig.options** ([]PodDNSConfigOption)
+
+    A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.
+
+    <a name="PodDNSConfigOption"></a>
+    *PodDNSConfigOption defines DNS resolver options of a pod.*
+
+  - **dnsConfig.options.name** (string)
+
+    Required.
+
+  - **dnsConfig.options.value** (string)
+
+
+  - **dnsConfig.searches** ([]string)
+
+    A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.
+
+- **dnsPolicy** (string)
+
+  Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
+
+### Hosts namespaces
+
+
+- **hostNetwork** (boolean)
+
+  Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.
+
+- **hostPID** (boolean)
+
+  Use the host's pid namespace. Optional: Default to false.
+
+- **hostIPC** (boolean)
+
+  Use the host's ipc namespace. Optional: Default to false.
+
+- **shareProcessNamespace** (boolean)
+
+  Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.
+
+### Service account
+
+
+- **serviceAccountName** (string)
+
+  ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
+
+- **automountServiceAccountToken** (boolean)
+
+  AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.
+
+### Security context
+
+
+- **securityContext** (PodSecurityContext)
+
+  SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty.  See type description for default values of each field.
+
+  <a name="PodSecurityContext"></a>
+  *PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext.  Field values of container.securityContext take precedence over field values of PodSecurityContext.*
+
+  - **securityContext.runAsUser** (int64)
+
+    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
+  - **securityContext.runAsNonRoot** (boolean)
+
+    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+  - **securityContext.runAsGroup** (int64)
+
+    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
+  - **securityContext.supplementalGroups** ([]int64)
+
+    A list of groups applied to the first process run in each container, in addition to the container's primary GID.  If unspecified, no groups will be added to any container.
+
+  - **securityContext.fsGroup** (int64)
+
+    A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:
+    
+    1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----
+    
+    If unset, the Kubelet will not modify the ownership and permissions of any volume.
+
+  - **securityContext.fsGroupChangePolicy** (string)
+
+    fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
+
+  - **securityContext.seccompProfile** (SeccompProfile)
+
+    The seccomp options to use by the containers in this pod.
+
+    <a name="SeccompProfile"></a>
+    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
+
+  - **securityContext.seccompProfile.type** (string), required
+
+    type indicates which kind of seccomp profile will be applied. Valid options are:
+    
+    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
+
+  - **securityContext.seccompProfile.localhostProfile** (string)
+
+    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+
+  - **securityContext.seLinuxOptions** (SELinuxOptions)
+
+    The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in SecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.
+
+    <a name="SELinuxOptions"></a>
+    *SELinuxOptions are the labels to be applied to the container*
+
+  - **securityContext.seLinuxOptions.level** (string)
+
+    Level is SELinux level label that applies to the container.
+
+  - **securityContext.seLinuxOptions.role** (string)
+
+    Role is a SELinux role label that applies to the container.
+
+  - **securityContext.seLinuxOptions.type** (string)
+
+    Type is a SELinux type label that applies to the container.
+
+  - **securityContext.seLinuxOptions.user** (string)
+
+    User is a SELinux user label that applies to the container.
+
+  - **securityContext.sysctls** ([]Sysctl)
+
+    Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.
+
+    <a name="Sysctl"></a>
+    *Sysctl defines a kernel parameter to be set*
+
+  - **securityContext.sysctls.name** (string), required
+
+    Name of a property to set
+
+  - **securityContext.sysctls.value** (string), required
+
+    Value of a property to set
+
+  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
+
+    The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+    <a name="WindowsSecurityContextOptions"></a>
+    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
+
+  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
+
+    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
+
+  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
+
+    GMSACredentialSpecName is the name of the GMSA credential spec to use.
+
+  - **securityContext.windowsOptions.runAsUserName** (string)
+
+    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
+
+### Beta level
+
+
+- **overhead** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
+
+  Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.
+
+- **topologySpreadConstraints** ([]TopologySpreadConstraint)
+
+  *Patch strategy: merge on key `topologyKey`*
+  
+  *Map: unique values on keys `topologyKey, whenUnsatisfiable` will be kept during a merge*
+  
+  TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.
+
+  <a name="TopologySpreadConstraint"></a>
+  *TopologySpreadConstraint specifies how to spread matching pods among the given topology.*
+
+  - **topologySpreadConstraints.maxSkew** (int32), required
+
+    MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 | zone3 | |   P   |   P   |       | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.
+
+  - **topologySpreadConstraints.topologyKey** (string), required
+
+    TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each \<key, value> as a "bucket", and try to put balanced number of pods into each bucket. It's a required field.
+
+  - **topologySpreadConstraints.whenUnsatisfiable** (string), required
+
+    WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,
+      but giving higher precedence to topologies that would help reduce the
+      skew.
+    A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assigment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P |   P   |   P   | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.
+
+  - **topologySpreadConstraints.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
+
+    LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.
+
+### Alpha level
+
+
+- **ephemeralContainers** ([]<a href="{{< ref "../workloads-resources/ephemeral-container#EphemeralContainer" >}}">EphemeralContainer</a>)
+
+  *Patch strategy: merge on key `name`*
+  
+  List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. This field is alpha-level and is only honored by servers that enable the EphemeralContainers feature.
+
+- **preemptionPolicy** (string)
+
+  PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
+
+### Deprecated
+
+
+- **serviceAccount** (string)
+
+  DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.
+
+
+
+## PodStatus {#PodStatus}
+
+PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.
+
+<hr>
+
+- **nominatedNodeName** (string)
+
+  nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.
+
+- **hostIP** (string)
+
+  IP address of the host to which the pod is assigned. Empty if not yet scheduled.
+
+- **startTime** (Time)
+
+  RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.
+
+  <a name="Time"></a>
+  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+- **phase** (string)
+
+  The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values:
+  
+  Pending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.
+  
+  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase
+
+- **message** (string)
+
+  A human readable message indicating details about why the pod is in this condition.
+
+- **reason** (string)
+
+  A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'
+
+- **podIP** (string)
+
+  IP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.
+
+- **podIPs** ([]PodIP)
+
+  *Patch strategy: merge on key `ip`*
+  
+  podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.
+
+  <a name="PodIP"></a>
+  *IP address information for entries in the (plural) PodIPs field. Each entry includes:
+     IP: An IP address allocated to the pod. Routable at least within the cluster.*
+
+  - **podIPs.ip** (string)
+
+    ip is an IP address (IPv4 or IPv6) assigned to the pod
+
+- **conditions** ([]PodCondition)
+
+  *Patch strategy: merge on key `type`*
+  
+  Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
+
+  <a name="PodCondition"></a>
+  *PodCondition contains details for the current condition of this pod.*
+
+  - **conditions.status** (string), required
+
+    Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
+
+  - **conditions.type** (string), required
+
+    Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
+
+  - **conditions.lastProbeTime** (Time)
+
+    Last time we probed the condition.
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **conditions.lastTransitionTime** (Time)
+
+    Last time the condition transitioned from one status to another.
+
+    <a name="Time"></a>
+    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
+
+  - **conditions.message** (string)
+
+    Human-readable message indicating details about last transition.
+
+  - **conditions.reason** (string)
+
+    Unique, one-word, CamelCase reason for the condition's last transition.
+
+- **qosClass** (string)
+
+  The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md
+
+- **initContainerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
+
+  The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
+
+- **containerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
+
+  The list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
+
+- **ephemeralContainerStatuses** ([]<a href="{{< ref "../workloads-resources/container#ContainerStatus" >}}">ContainerStatus</a>)
+
+  Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.
+
+
+
+
+
+## PodList {#PodList}
+
+PodList is a list of Pods.
+
+<hr>
+
+- **apiVersion**: v1
+
+
+- **kind**: PodList
+
+
+- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
+
+  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+
+- **items** ([]<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>), required
+
+  List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md
+
+
+
+
+
+## Operations {#Operations}
+
+
+
+<hr>
+
+
+
+
+
+
+### `get` read the specified Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `get` read log of the specified Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods/{name}/log
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **container** (*in query*): string
+
+  The container for which to stream logs. Defaults to only container if there is one container in the pod.
+
+
+- **follow** (*in query*): boolean
+
+  Follow the log stream of the pod. Defaults to false.
+
+
+- **insecureSkipTLSVerifyBackend** (*in query*): boolean
+
+  insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to.  This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet.  If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).
+
+
+- **limitBytes** (*in query*): integer
+
+  If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **previous** (*in query*): boolean
+
+  Return previous terminated container logs. Defaults to false.
+
+
+- **sinceSeconds** (*in query*): integer
+
+  A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.
+
+
+- **tailLines** (*in query*): integer
+
+  If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime
+
+
+- **timestamps** (*in query*): boolean
+
+  If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.
+
+
+
+#### Response
+
+
+200 (string): OK
+
+401: Unauthorized
+
+
+### `get` read status of the specified Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind Pod
+
+#### HTTP Request
+
+GET /api/v1/namespaces/{namespace}/pods
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#PodList" >}}">PodList</a>): OK
+
+401: Unauthorized
+
+
+### `list` list or watch objects of kind Pod
+
+#### HTTP Request
+
+GET /api/v1/pods
+
+#### Parameters
+
+
+- **allowWatchBookmarks** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+- **watch** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#PodList" >}}">PodList</a>): OK
+
+401: Unauthorized
+
+
+### `create` create a Pod
+
+#### HTTP Request
+
+POST /api/v1/namespaces/{namespace}/pods
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
+
+202 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
+
+401: Unauthorized
+
+
+### `update` replace the specified Pod
+
+#### HTTP Request
+
+PUT /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
+
+401: Unauthorized
+
+
+### `update` replace status of the specified Pod
+
+#### HTTP Request
+
+PUT /api/v1/namespaces/{namespace}/pods/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+201 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Created
+
+401: Unauthorized
+
+
+### `patch` partially update the specified Pod
+
+#### HTTP Request
+
+PATCH /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `patch` partially update status of the specified Pod
+
+#### HTTP Request
+
+PATCH /api/v1/namespaces/{namespace}/pods/{name}/status
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldManager** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
+
+
+- **force** (*in query*): boolean
+
+  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+401: Unauthorized
+
+
+### `delete` delete a Pod
+
+#### HTTP Request
+
+DELETE /api/v1/namespaces/{namespace}/pods/{name}
+
+#### Parameters
+
+
+- **name** (*in path*): string, required
+
+  name of the Pod
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): OK
+
+202 (<a href="{{< ref "../workloads-resources/pod-v1#Pod" >}}">Pod</a>): Accepted
+
+401: Unauthorized
+
+
+### `deletecollection` delete collection of Pod
+
+#### HTTP Request
+
+DELETE /api/v1/namespaces/{namespace}/pods
+
+#### Parameters
+
+
+- **namespace** (*in path*): string, required
+
+  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
+
+
+- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
+
+  
+
+
+- **continue** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
+
+
+- **dryRun** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
+
+
+- **fieldSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
+
+
+- **gracePeriodSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
+
+
+- **labelSelector** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
+
+
+- **limit** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
+
+
+- **pretty** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
+
+
+- **propagationPolicy** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
+
+
+- **resourceVersion** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
+
+
+- **resourceVersionMatch** (*in query*): string
+
+  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
+
+
+- **timeoutSeconds** (*in query*): integer
+
+  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
+
+
+
+#### Response
+
+
+200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
+
+401: Unauthorized
+
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md
index df6c08603f..30b40e6840 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/priority-class-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "PriorityClass defines mapping from a priority class name to the priority integer value."
 title: "PriorityClass"
-weight: 14
+weight: 16
 ---
 
 `apiVersion: scheduling.k8s.io/v1`
@@ -66,7 +66,7 @@ PriorityClassList is a collection of priority classes.
 
   Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **items** ([]<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>), required
 
   items is the list of PriorityClasses
 
@@ -108,7 +108,7 @@ GET /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
 401: Unauthorized
 
@@ -176,7 +176,7 @@ GET /apis/scheduling.k8s.io/v1/priorityclasses
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClassList" >}}">PriorityClassList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClassList" >}}">PriorityClassList</a>): OK
 
 401: Unauthorized
 
@@ -190,7 +190,7 @@ POST /apis/scheduling.k8s.io/v1/priorityclasses
 #### Parameters
 
 
-- **body**: <a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
 
   
 
@@ -214,11 +214,11 @@ POST /apis/scheduling.k8s.io/v1/priorityclasses
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
+201 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Accepted
 
 401: Unauthorized
 
@@ -237,7 +237,7 @@ PUT /apis/scheduling.k8s.io/v1/priorityclasses/{name}
   name of the PriorityClass
 
 
-- **body**: <a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>, required
 
   
 
@@ -261,9 +261,9 @@ PUT /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
+201 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): Created
 
 401: Unauthorized
 
@@ -311,7 +311,7 @@ PATCH /apis/scheduling.k8s.io/v1/priorityclasses/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
+200 (<a href="{{< ref "../workloads-resources/priority-class-v1#PriorityClass" >}}">PriorityClass</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md
similarity index 88%
rename from content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md
index 223832c382..429a1bd5a2 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/replica-set-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ReplicaSet ensures that a specified number of pod replicas are running at any given time."
 title: "ReplicaSet"
-weight: 5
+weight: 6
 ---
 
 `apiVersion: apps/v1`
@@ -30,11 +30,11 @@ ReplicaSet ensures that a specified number of pod replicas are running at any gi
 
   If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetSpec" >}}">ReplicaSetSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetSpec" >}}">ReplicaSetSpec</a>)
 
   Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetStatus" >}}">ReplicaSetStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetStatus" >}}">ReplicaSetStatus</a>)
 
   Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ ReplicaSetSpec is the specification of a ReplicaSet.
 
   Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -146,7 +146,7 @@ ReplicaSetList is a collection of ReplicaSets.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>), required
 
   List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller
 
@@ -193,7 +193,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -226,7 +226,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -299,7 +299,7 @@ GET /apis/apps/v1/namespaces/{namespace}/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
 
 401: Unauthorized
 
@@ -367,7 +367,7 @@ GET /apis/apps/v1/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSetList" >}}">ReplicaSetList</a>): OK
 
 401: Unauthorized
 
@@ -386,7 +386,7 @@ POST /apis/apps/v1/namespaces/{namespace}/replicasets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -410,11 +410,11 @@ POST /apis/apps/v1/namespaces/{namespace}/replicasets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Accepted
 
 401: Unauthorized
 
@@ -438,7 +438,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -462,9 +462,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
 401: Unauthorized
 
@@ -488,7 +488,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>, required
 
   
 
@@ -512,9 +512,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): Created
 
 401: Unauthorized
 
@@ -567,7 +567,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
@@ -620,7 +620,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replica-set-v1#ReplicaSet" >}}">ReplicaSet</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md
similarity index 86%
rename from content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md
index 29bac77169..2970b6670c 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/replication-controller-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ReplicationController represents the configuration of a replication controller."
 title: "ReplicationController"
-weight: 4
+weight: 5
 ---
 
 `apiVersion: v1`
@@ -30,11 +30,11 @@ ReplicationController represents the configuration of a replication controller.
 
   If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
 
-- **spec** (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerSpec" >}}">ReplicationControllerSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerSpec" >}}">ReplicationControllerSpec</a>)
 
   Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
-- **status** (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerStatus" >}}">ReplicationControllerStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerStatus" >}}">ReplicationControllerStatus</a>)
 
   Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
 
@@ -52,7 +52,7 @@ ReplicationControllerSpec is the specification of a replication controller.
 
   Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
+- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>)
 
   Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
 
@@ -146,7 +146,7 @@ ReplicationControllerList is a collection of replication controllers.
 
   Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
 
-- **items** ([]<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>), required
 
   List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller
 
@@ -193,7 +193,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -226,7 +226,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -299,7 +299,7 @@ GET /api/v1/namespaces/{namespace}/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
 
 401: Unauthorized
 
@@ -367,7 +367,7 @@ GET /api/v1/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationControllerList" >}}">ReplicationControllerList</a>): OK
 
 401: Unauthorized
 
@@ -386,7 +386,7 @@ POST /api/v1/namespaces/{namespace}/replicationcontrollers
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -410,11 +410,11 @@ POST /api/v1/namespaces/{namespace}/replicationcontrollers
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Accepted
 
 401: Unauthorized
 
@@ -438,7 +438,7 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -462,9 +462,9 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
 401: Unauthorized
 
@@ -488,7 +488,7 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>, required
 
   
 
@@ -512,9 +512,9 @@ PUT /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
+201 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): Created
 
 401: Unauthorized
 
@@ -567,7 +567,7 @@ PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
@@ -620,7 +620,7 @@ PATCH /api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
+200 (<a href="{{< ref "../workloads-resources/replication-controller-v1#ReplicationController" >}}">ReplicationController</a>): OK
 
 401: Unauthorized
 
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md b/content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md
similarity index 89%
rename from content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
rename to content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md
index 7e69ec17bb..1a55fa4c1d 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workloads-resources/stateful-set-v1.md
@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "StatefulSet represents a set of pods with consistent identities."
 title: "StatefulSet"
-weight: 7
+weight: 8
 ---
 
 `apiVersion: apps/v1`
@@ -32,11 +32,11 @@ The StatefulSet guarantees that a given network identity will always map to the
 - **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
 
 
-- **spec** (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetSpec" >}}">StatefulSetSpec</a>)
+- **spec** (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetSpec" >}}">StatefulSetSpec</a>)
 
   Spec defines the desired identities of pods in this set.
 
-- **status** (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetStatus" >}}">StatefulSetStatus</a>)
+- **status** (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetStatus" >}}">StatefulSetStatus</a>)
 
   Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.
 
@@ -58,7 +58,7 @@ A StatefulSetSpec is the specification of a StatefulSet.
 
   selector is a label query over pods that should match the replica count. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 
-- **template** (<a href="{{< ref "../workload-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
+- **template** (<a href="{{< ref "../workloads-resources/pod-template-v1#PodTemplateSpec" >}}">PodTemplateSpec</a>), required
 
   template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.
 
@@ -84,9 +84,9 @@ A StatefulSetSpec is the specification of a StatefulSet.
     <a name="RollingUpdateStatefulSetStrategy"></a>
     *RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.*
 
-    - **updateStrategy.rollingUpdate.partition** (int32)
+  - **updateStrategy.rollingUpdate.partition** (int32)
 
-      Partition indicates the ordinal at which the StatefulSet should be partitioned. Default value is 0.
+    Partition indicates the ordinal at which the StatefulSet should be partitioned. Default value is 0.
 
 - **podManagementPolicy** (string)
 
@@ -193,7 +193,7 @@ StatefulSetList is a collection of StatefulSets.
 - **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
 
 
-- **items** ([]<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>), required
+- **items** ([]<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>), required
 
 
 
@@ -239,7 +239,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -272,7 +272,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -345,7 +345,7 @@ GET /apis/apps/v1/namespaces/{namespace}/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
 
 401: Unauthorized
 
@@ -413,7 +413,7 @@ GET /apis/apps/v1/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSetList" >}}">StatefulSetList</a>): OK
 
 401: Unauthorized
 
@@ -432,7 +432,7 @@ POST /apis/apps/v1/namespaces/{namespace}/statefulsets
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -456,11 +456,11 @@ POST /apis/apps/v1/namespaces/{namespace}/statefulsets
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
-202 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Accepted
+202 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Accepted
 
 401: Unauthorized
 
@@ -484,7 +484,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -508,9 +508,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
 401: Unauthorized
 
@@ -534,7 +534,7 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
   <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
 
 
-- **body**: <a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
+- **body**: <a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>, required
 
   
 
@@ -558,9 +558,9 @@ PUT /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
-201 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
+201 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): Created
 
 401: Unauthorized
 
@@ -613,7 +613,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 
@@ -666,7 +666,7 @@ PATCH /apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status
 #### Response
 
 
-200 (<a href="{{< ref "../workload-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
+200 (<a href="{{< ref "../workloads-resources/stateful-set-v1#StatefulSet" >}}">StatefulSet</a>): OK
 
 401: Unauthorized
 

From 4079e588223d457c5c555cc1693412066a2f6d14 Mon Sep 17 00:00:00 2001
From: Zach Corleissen <zacharysarah@users.noreply.github.com>
Date: Tue, 6 Apr 2021 11:43:04 -0700
Subject: [PATCH 483/788] Update
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md

---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index 2c28c00cb6..9e86770abe 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -1,7 +1,7 @@
 ---
 layout: blog
 title: 'Annotating Kubernetes Services for Humans'
-date: 2021-04-06
+date: 2021-04-12
 slug: annotating-k8s-for-humans
 ---
 

From 2e519b024b4d1d70e1c8e0d5b52fa53494453f18 Mon Sep 17 00:00:00 2001
From: "Edson C. (aka tuxpilgrim)" <edsoncelio@users.noreply.github.com>
Date: Tue, 6 Apr 2021 16:04:20 -0300
Subject: [PATCH 484/788] [PT] Update
 content/pt/docs/concepts/architecture/control-plane-node-communication.md
 (#27415)

* Update doc to follow wg naming

* Rename master to control plane

* Add Konnectivity topic

* Remove unstranslated topic

* Fix some typos

* Remove blank lines

* Fix md typo

* Fix minor typos

* Fix typo (by review)
---
 ...md => control-plane-node-communication.md} | 43 ++++++++++---------
 1 file changed, 23 insertions(+), 20 deletions(-)
 rename content/pt/docs/concepts/architecture/{master-node-communication.md => control-plane-node-communication.md} (66%)

diff --git a/content/pt/docs/concepts/architecture/master-node-communication.md b/content/pt/docs/concepts/architecture/control-plane-node-communication.md
similarity index 66%
rename from content/pt/docs/concepts/architecture/master-node-communication.md
rename to content/pt/docs/concepts/architecture/control-plane-node-communication.md
index 8cf2ad86c6..de69ad8ea8 100644
--- a/content/pt/docs/concepts/architecture/master-node-communication.md
+++ b/content/pt/docs/concepts/architecture/control-plane-node-communication.md
@@ -1,15 +1,12 @@
 ---
-reviewers:
-- dchen1107
-- liggitt
-title: Comunicação entre Node e Master
+title: Comunicação entre Nó e Control Plane
 content_type: concept
 weight: 20
 ---
 
 <!-- overview -->
 
-Este documento cataloga os caminhos de comunicação entre o Master (o
+Este documento cataloga os caminhos de comunicação entre o control plane (o
 apiserver) e o cluster Kubernetes. A intenção é permitir que os usuários
 personalizem sua instalação para proteger a configuração de rede
 então o cluster pode ser executado em uma rede não confiável (ou em IPs totalmente públicos em um
@@ -20,10 +17,10 @@ provedor de nuvem).
 
 <!-- body -->
 
-## Cluster para o Master
+## Nó para o Control Plane
 
-Todos os caminhos de comunicação do cluster para o Master terminam no
-apiserver (nenhum dos outros componentes do Master são projetados para expor
+Todos os caminhos de comunicação do cluster para o control plane terminam no
+apiserver (nenhum dos outros componentes do control plane são projetados para expor
 Serviços remotos). Em uma implantação típica, o apiserver é configurado para escutar
 conexões remotas em uma porta HTTPS segura (443) com uma ou mais clientes [autenticação](/docs/reference/access-authn-authz/authentication/) habilitado.
 Uma ou mais formas de [autorização](/docs/reference/access-authn-authz/authorization/)
@@ -41,21 +38,21 @@ para provisionamento automatizado de certificados de cliente kubelet.
 Os pods que desejam se conectar ao apiserver podem fazê-lo com segurança, aproveitando
 conta de serviço para que o Kubernetes injetará automaticamente o certificado raiz público
 certificado e um token de portador válido no pod quando ele é instanciado.
-O serviço `kubernetes` (em todos os namespaces) é configurado com um IP virtual
+O serviço `kubernetes` (no namespace `default`) é configurado com um IP virtual
 endereço que é redirecionado (via kube-proxy) para o endpoint com HTTPS no
 apiserver.
 
-Os componentes principais também se comunicam com o apiserver do cluster através da porta segura.
+Os componentes do control plane também se comunicam com o apiserver do cluster através da porta segura.
 
 Como resultado, o modo de operação padrão para conexões do cluster
-(nodes e pods em execução nos Nodes) para o Master é protegido por padrão
-e pode passar por redes não confiáveis ​​e / ou públicas.
+(nodes e pods em execução nos Nodes) para o control plane é protegido por padrão
+e pode passar por redes não confiáveis ​​e/ou públicas.
 
-## Master para o Cluster
+## Control Plane para o nó
 
-Existem dois caminhos de comunicação primários do mestre (apiserver) para o
-cluster. O primeiro é do apiserver para o processo do kubelet que é executado em
-cada Node no cluster. O segundo é do apiserver para qualquer Node, pod,
+Existem dois caminhos de comunicação primários do control plane (apiserver) para os nós.
+O primeiro é do apiserver para o processo do kubelet que é executado em
+cada nó no cluster. O segundo é do apiserver para qualquer nó, pod,
 ou serviço através da funcionalidade de proxy do apiserver.
 
 ### apiserver para o kubelet
@@ -63,8 +60,8 @@ ou serviço através da funcionalidade de proxy do apiserver.
 As conexões do apiserver ao kubelet são usadas para:
 
   * Buscar logs para pods.
-  * Anexar (através de kubectl) pods em execução.
-  * Fornecer a funcionalidade de encaminhamento de porta do kubelet.
+  * Anexar (através de kubectl) pods em execução.
+  * Fornecer a funcionalidade de encaminhamento de porta do kubelet.
 
 Essas conexões terminam no endpoint HTTPS do kubelet. Por padrão,
 o apiserver não verifica o certificado de serviço do kubelet,
@@ -94,12 +91,18 @@ Estas conexões **não são atualmente seguras** para serem usados por redes nã
 
 ### SSH Túnel
 
-O Kubernetes suporta túneis SSH para proteger o Servidor Master -> caminhos de comunicação no cluster. Nesta configuração, o apiserver inicia um túnel SSH para cada nó
+O Kubernetes suporta túneis SSH para proteger os caminhos de comunicação do control plane para os nós. Nesta configuração, o apiserver inicia um túnel SSH para cada nó
 no cluster (conectando ao servidor ssh escutando na porta 22) e passa
 todo o tráfego destinado a um kubelet, nó, pod ou serviço através do túnel.
 Este túnel garante que o tráfego não seja exposto fora da rede aos quais
 os nós estão sendo executados.
 
-Atualmente, os túneis SSH estão obsoletos, portanto, você não deve optar por usá-los, a menos que saiba o que está fazendo. Um substituto para este canal de comunicação está sendo projetado.
+Atualmente, os túneis SSH estão obsoletos, portanto, você não deve optar por usá-los, a menos que saiba o que está fazendo. O serviço Konnectivity é um substituto para este canal de comunicação. 
 
+### Konnectivity service
 
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+
+Como uma substituição aos túneis SSH, o serviço Konnectivity fornece proxy de nível TCP para a comunicação do control plane para o cluster. O serviço Konnectivity consiste em duas partes: o servidor Konnectivity na rede control plane e os agentes Konnectivity na rede dos nós. Os agentes Konnectivity iniciam conexões com o servidor Konnectivity e mantêm as conexões de rede. Depois de habilitar o serviço Konnectivity, todo o tráfego do control plane para os nós passa por essas conexões.
+
+Veja a [tarefa do Konnectivity](docs/tasks/extend-kubernetes/setup-konnectivity/) para configurar o serviço Konnectivity no seu cluster.

From 30c6e773e24d1a7f91d7b7c96f0c61add29f416d Mon Sep 17 00:00:00 2001
From: "Lubomir I. Ivanov" <lubomirivanov@vmware.com>
Date: Mon, 15 Mar 2021 22:20:36 +0200
Subject: [PATCH 485/788] kubeadm: add guide for kubelet serving certs and
 metrics-server

Include a new section of the kubeadm certificate management page
to talk about kubelet serving certificates and how to make
them signed. Also include a note about using secure connection
with the metrics-server.
---
 .../tools/kubeadm/troubleshooting-kubeadm.md  | 19 +++++-
 .../kubeadm/kubeadm-certs.md                  | 68 +++++++++++++++++++
 2 files changed, 86 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
index 58f4f4652a..4a8764a76b 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
@@ -408,7 +408,7 @@ be advised that this is modifying a design principle of the Linux distribution.
 
 ## `kubeadm upgrade plan` prints out `context deadline exceeded` error message
 
-This error message is shown when upgrading a Kubernetes cluster with `kubeadm` in the case of running an external etcd. This is not a critical bug and happens because older versions of kubeadm perform a version check on the external etcd cluster. You can proceed with `kubeadm upgrade apply ...`. 
+This error message is shown when upgrading a Kubernetes cluster with `kubeadm` in the case of running an external etcd. This is not a critical bug and happens because older versions of kubeadm perform a version check on the external etcd cluster. You can proceed with `kubeadm upgrade apply ...`.
 
 This issue is fixed as of version 1.19.
 
@@ -420,3 +420,20 @@ To workaround the issue, re-mount the `/var/lib/kubelet` directory after perform
 
 This is a regression introduced in kubeadm 1.15. The issue is fixed in 1.20.
 
+## Cannot use the metrics-server securely in a kubeadm cluster
+
+In a kubeadm cluster, the [metrics-server](https://github.com/kubernetes-sigs/metrics-server)
+can be used insecurely by passing the `--kubelet-insecure-tls` to it. This is not recommended for production clusters.
+
+If you want to use TLS between the metrics-server and the kubelet there is a problem,
+since kubeadm deploys a self-signed serving certificate for the kubelet. This can cause the following errors
+on the side of the metrics-server:
+```
+x509: certificate signed by unknown authority
+x509: certificate is valid for IP-foo not IP-bar
+```
+
+See [Enabling signed kubelet serving certificates](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#kubelet-serving-certs)
+to understand how to configure the kubelets in a kubeadm cluster to have properly signed serving certificates.
+
+Also see [How to run the metrics-server securely](https://github.com/kubernetes-sigs/metrics-server/blob/master/FAQ.md#how-to-run-metrics-server-securely).
diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index dc7af4a329..62e66d1a8f 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -207,3 +207,71 @@ After a certificate is signed using your preferred method, the certificate and t
 Kubeadm does not support rotation or replacement of CA certificates out of the box.
 
 For more information about manual rotation or replacement of CA, see [manual rotation of CA certificates](/docs/tasks/tls/manual-rotation-of-ca-certificates/).
+
+## Enabling signed kubelet serving certificates {#kubelet-serving-certs}
+
+By default the kubelet serving certificate deployed by kubeadm is self-signed.
+This means a connection from external services like the
+[metrics-server](https://github.com/kubernetes-sigs/metrics-server) to a
+kubelet cannot be secured with TLS.
+
+To configure the kubelets in a new kubeadm cluster to obtain properly signed serving
+certificates you must pass the following minimal configuration to `kubeadm init`:
+
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: ClusterConfiguration
+---
+apiVersion: kubelet.config.k8s.io/v1beta1
+kind: KubeletConfiguration
+serverTLSBootstrap: true
+```
+
+If you have already created the cluster you must adapt it by doing the following:
+ - Find and edit the `kubelet-config-{{< skew latestVersion >}}` ConfigMap in the `kube-system` namespace.
+In that ConfigMap, the `config` key has a
+[KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+document as its value. Edit the KubeletConfiguration document to set `serverTLSBootstrap: true`.
+- On each node, add the `serverTLSBootstrap: true` field in `/var/lib/kubelet/config.yaml`
+and restart the kubelet with `systemctl restart kubelet`
+
+The field `serverTLSBootstrap: true` will enable the bootstrap of kubelet serving
+certificates by requesting them from the `certificates.k8s.io` API. One known limitation
+is that the CSRs (Certificate Signing Requests) for these certificates cannot be automatically
+approved by the default signer in the kube-controller-manager -
+[`kubernetes.io/kubelet-serving`](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers).
+This will require action from the user or a third party controller.
+
+These CSRs can be viewed using:
+
+```shell
+kubectl get csr
+NAME        AGE     SIGNERNAME                        REQUESTOR                      CONDITION
+csr-9wvgt   112s    kubernetes.io/kubelet-serving     system:node:worker-1           Pending
+csr-lz97v   1m58s   kubernetes.io/kubelet-serving     system:node:control-plane-1    Pending
+```
+
+To approve them you can do the following:
+```shell
+kubectl certificate approve <CSR-name>
+```
+
+By default, these serving certificate will expire after one year. Kubeadm sets the
+`KubeletConfiguration` field `rotateCertificates` to `true`, which means that close
+to expiration a new set of CSRs for the serving certificates will be created and must
+be approved to complete the rotation. To understand more see
+[Certificate Rotation](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#certificate-rotation).
+
+If you are looking for a solution for automatic approval of these CSRs it is recommended
+that you contact your cloud provider and ask if they have a CSR signer that verifies
+the node identity with an out of band mechanism.
+
+{{% thirdparty-content %}}
+
+Third party custom controllers can be used:
+- [kubelet-rubber-stamp](https://github.com/kontena/kubelet-rubber-stamp)
+
+Such a controller is not a secure mechanism unless it not only verifies the CommonName
+in the CSR but also verifies the requested IPs and domain names. This would prevent
+a malicious actor that has access to a kubelet client certificate to create
+CSRs requesting serving certificates for any IP or domain name.

From 108149fa2f8fa9c6c244ce6a551df926d8062df1 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 18 Feb 2021 15:41:00 +0800
Subject: [PATCH 486/788] Add WebhookAdmission reference

This is a reference for WebhookAdmission config generated from kubernetes-sigs/reference-docs/genref tool.
More specifically, it is generated using the following command:

```shell
./genref -include apiserver-webhookadmission
```
---
 .../docs/concepts/configuration/configmap.md  |  2 +-
 content/en/docs/reference/_index.md           |  9 +---
 .../extensible-admission-controllers.md       |  4 +-
 .../apiserver-webhookadmission.v1.md          | 46 +++++++++++++++++++
 .../tasks/debug-application-cluster/audit.md  |  4 +-
 5 files changed, 54 insertions(+), 11 deletions(-)
 create mode 100644 content/en/docs/reference/config-api/apiserver-webhookadmission.v1.md

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index b5f5bd8d28..c0d21eaf16 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -224,7 +224,7 @@ When a ConfigMap currently consumed in a volume is updated, projected keys are e
 The kubelet checks whether the mounted ConfigMap is fresh on every periodic sync.
 However, the kubelet uses its local cache for getting the current value of the ConfigMap.
 The type of the cache is configurable using the `ConfigMapAndSecretChangeDetectionStrategy` field in
-the [KubeletConfiguration struct](/docs/reference/config-api/kubelet-config.v1beta1/)).
+the [KubeletConfiguration struct](/docs/reference/config-api/kubelet-config.v1beta1/).
 A ConfigMap can be either propagated by watch (default), ttl-based, or by redirecting
 all requests directly to the API server.
 As a result, the total delay from the moment when the ConfigMap is updated to the moment
diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index d8ed48db8b..55e9a91d9f 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -73,16 +73,11 @@ operator to use or manage a cluster.
 
 * [kubelet configuration (v1beta1)](/docs/reference/config-api/kubelet-config.v1beta1/)
 * [kube-scheduler configuration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
+* [kube-scheduler policy reference (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
 * [kube-proxy configuration (v1alpha1)](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
 * [`audit.k8s.io/v1` API](/docs/reference/config-api/apiserver-audit.v1/)
-
-## Config APIs
-
 * [Client authentication API (v1beta1)](/docs/reference/config-api/client-authentication.v1beta1/)
-
-## Config APIs
-
-* [kube-scheduler policy reference (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
+* [WebhookAdmission configuration (v1)](/docs/reference/config-api/apiserver-webhookadmission.v1/)
 
 ## Design Docs
 
diff --git a/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md b/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md
index 018195f817..051b81d21b 100644
--- a/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md
@@ -147,7 +147,7 @@ webhooks:
 {{< /tabs >}}
 
 The scope field specifies if only cluster-scoped resources ("Cluster") or namespace-scoped
-resources ("Namespaced") will match this rule. "*" means that there are no scope restrictions.
+resources ("Namespaced") will match this rule. "&lowast;" means that there are no scope restrictions.
 
 {{< note >}}
 When using `clientConfig.service`, the server cert must be valid for
@@ -225,7 +225,7 @@ plugins:
 {{< /tabs >}}
 
 For more information about `AdmissionConfiguration`, see the
-[AdmissionConfiguration schema](https://github.com/kubernetes/kubernetes/blob/v1.17.0/staging/src/k8s.io/apiserver/pkg/apis/apiserver/v1/types.go#L27).
+[AdmissionConfiguration (v1) reference](/docs/reference/config-api/apiserver-webhookadmission.v1/).
 See the [webhook configuration](#webhook-configuration) section for details about each config field.
 
 * In the kubeConfig file, provide the credentials:
diff --git a/content/en/docs/reference/config-api/apiserver-webhookadmission.v1.md b/content/en/docs/reference/config-api/apiserver-webhookadmission.v1.md
new file mode 100644
index 0000000000..fb45ca7b1a
--- /dev/null
+++ b/content/en/docs/reference/config-api/apiserver-webhookadmission.v1.md
@@ -0,0 +1,46 @@
+---
+title: WebhookAdmission Configuration (v1)
+content_type: tool-reference
+package: apiserver.config.k8s.io/v1
+auto_generated: true
+---
+Package v1 is the v1 version of the API.
+
+## Resource Types 
+
+
+- [WebhookAdmission](#apiserver-config-k8s-io-v1-WebhookAdmission)
+  
+    
+
+
+## `WebhookAdmission`     {#apiserver-config-k8s-io-v1-WebhookAdmission}
+    
+
+
+
+
+WebhookAdmission provides configuration for the webhook admission controller.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>apiserver.config.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>WebhookAdmission</code></td></tr>
+    
+
+  
+  
+<tr><td><code>kubeConfigFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   KubeConfigFile is the path to the kubeconfig file.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  
diff --git a/content/en/docs/tasks/debug-application-cluster/audit.md b/content/en/docs/tasks/debug-application-cluster/audit.md
index 2f8e1c9875..c44caf66b5 100644
--- a/content/en/docs/tasks/debug-application-cluster/audit.md
+++ b/content/en/docs/tasks/debug-application-cluster/audit.md
@@ -251,5 +251,7 @@ By default truncate is disabled in both `webhook` and `log`, a cluster administr
 ## {{% heading "whatsnext" %}}
 
 * Learn about [Mutating webhook auditing annotations](/docs/reference/access-authn-authz/extensible-admission-controllers/#mutating-webhook-auditing-annotations).
-* Read the [reference for `audit.k8s.io` API group](/docs/reference/config-api/apiserver-audit.v1/).
+* Learn more about [`Event`](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Event)
+  and the [`Policy`](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Policy)
+  resource types by reading the Audit configuration reference.
 

From 44b902cdf9855a73283d936840e962dca52f938f Mon Sep 17 00:00:00 2001
From: Ta-Ching Chen <tachingchen@srcmesh.com>
Date: Wed, 7 Apr 2021 12:21:06 +0800
Subject: [PATCH 487/788] sync with upstream English version

---
 .../tools/kubeadm/install-kubeadm.md          | 20 ++++++++-----------
 1 file changed, 8 insertions(+), 12 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index b8279f548d..d81001d7c1 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -377,12 +377,12 @@ exclude=kubelet kubeadm kubectl
 EOF
 
 # 将 SELinux 设置为 permissive 模式（相当于将其禁用）
-setenforce 0
-sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
+sudo setenforce 0
+sudo sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
 
-yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
+sudo yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
 
-systemctl enable --now kubelet
+sudo systemctl enable --now kubelet
 ```
 
 <!--
@@ -402,7 +402,7 @@ systemctl enable --now kubelet
 
   你必须这么做，直到 kubelet 做出对 SELinux 的支持进行升级为止。
 
-- 如果你知道如何配置 SELinux 则可以将其保持启用状态，但可能需要设定部分 kubeadm 不支持的配置。
+- 如果你知道如何配置 SELinux 则可以将其保持启用状态，但可能需要设定 kubeadm 不支持的部分配置
 
 {{% /tab %}}
 {{% tab name="无包管理器的情况" %}}
@@ -414,7 +414,7 @@ Install CNI plugins (required for most pod network):
 
 ```bash
 CNI_VERSION="v0.8.2"
-mkdir -p /opt/cni/bin
+sudo mkdir -p /opt/cni/bin
 curl -L "https://github.com/containernetworking/plugins/releases/download/${CNI_VERSION}/cni-plugins-linux-amd64-${CNI_VERSION}.tgz" | sudo tar -C /opt/cni/bin -xz
 ```
 
@@ -456,16 +456,12 @@ Install `kubeadm`, `kubelet`, `kubectl` and add a `kubelet` systemd service:
 RELEASE="$(curl -sSL https://dl.k8s.io/release/stable.txt)"
 cd $DOWNLOAD_DIR
 sudo curl -L --remote-name-all https://storage.googleapis.com/kubernetes-release/release/${RELEASE}/bin/linux/amd64/{kubeadm,kubelet,kubectl}
-chmod +x {kubeadm,kubelet,kubectl}
+sudo chmod +x {kubeadm,kubelet,kubectl}
 
 RELEASE_VERSION="v0.4.0"
 curl -sSL "https://raw.githubusercontent.com/kubernetes/release/${RELEASE_VERSION}/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service" | sed "s:/usr/bin:${DOWNLOAD_DIR}:g" | sudo tee /etc/systemd/system/kubelet.service
 sudo mkdir -p /etc/systemd/system/kubelet.service.d
 curl -sSL "https://raw.githubusercontent.com/kubernetes/release/${RELEASE_VERSION}/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf" | sed "s:/usr/bin:${DOWNLOAD_DIR}:g" | sudo tee /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
-
-curl -sSL "https://raw.githubusercontent.com/kubernetes/kubernetes/${RELEASE}/build/debs/kubelet.service" | sed "s:/usr/bin:/opt/bin:g" > /etc/systemd/system/kubelet.service
-mkdir -p /etc/systemd/system/kubelet.service.d
-curl -sSL "https://raw.githubusercontent.com/kubernetes/kubernetes/${RELEASE}/build/debs/10-kubeadm.conf" | sed "s:/usr/bin:/opt/bin:g" > /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
 ```
 
 <!--
@@ -527,7 +523,7 @@ Please mind, that you **only** have to do that if the cgroup driver of your CRI
 is not `cgroupfs`, because that is the default value in the kubelet already.
 -->
 进一步的相关细节，可参阅
-[使用配置文件来执行 kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)。
+[使用配置文件来执行 kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file) 以及 [KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/)
 
 请注意，你只需要在你的 cgroup 驱动程序不是 `cgroupfs` 时这么做，
 因为它已经是 kubelet 中的默认值。

From f6fef933b7298ee6c7be4ce6a7c2f495e10a3671 Mon Sep 17 00:00:00 2001
From: Ta-Ching Chen <tachingchen@srcmesh.com>
Date: Wed, 7 Apr 2021 12:24:37 +0800
Subject: [PATCH 488/788] minor fix

---
 .../production-environment/tools/kubeadm/install-kubeadm.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index d81001d7c1..9772025c17 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -523,7 +523,7 @@ Please mind, that you **only** have to do that if the cgroup driver of your CRI
 is not `cgroupfs`, because that is the default value in the kubelet already.
 -->
 进一步的相关细节，可参阅
-[使用配置文件来执行 kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file) 以及 [KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/)
+[使用配置文件来执行 kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file) 以及 [KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/)。
 
 请注意，你只需要在你的 cgroup 驱动程序不是 `cgroupfs` 时这么做，
 因为它已经是 kubelet 中的默认值。

From 5391a59dc4299516bf198d0a43438021bcff1aca Mon Sep 17 00:00:00 2001
From: Ta-Ching Chen <tachingchen@srcmesh.com>
Date: Wed, 7 Apr 2021 12:29:29 +0800
Subject: [PATCH 489/788] Update doc for future tracking

---
 .../production-environment/tools/kubeadm/install-kubeadm.md    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 9772025c17..c584a05623 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -517,7 +517,8 @@ cgroupDriver: <value>
 ```
 
 <!--
-For further details, please read [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
+For further details, please read [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)
+and the [`KubeletConfiguration` reference](/docs/reference/config-api/kubelet-config.v1beta1/)
 
 Please mind, that you **only** have to do that if the cgroup driver of your CRI
 is not `cgroupfs`, because that is the default value in the kubelet already.

From d9d4a7cdf83afe69f464e23976b75c97cc84109f Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Wed, 7 Apr 2021 15:10:37 +0800
Subject: [PATCH 490/788] [zh] update service.md and endpoint-slices.md

---
 .../concepts/services-networking/service.md   | 58 +++++++++++--------
 1 file changed, 33 insertions(+), 25 deletions(-)

diff --git a/content/zh/docs/concepts/services-networking/service.md b/content/zh/docs/concepts/services-networking/service.md
index 15af8bc000..3497dd817d 100644
--- a/content/zh/docs/concepts/services-networking/service.md
+++ b/content/zh/docs/concepts/services-networking/service.md
@@ -129,8 +129,8 @@ a new instance.
 The name of a Service object must be a valid
 [DNS label name](/docs/concepts/overview/working-with-objects/names#dns-label-names).
 
-For example, suppose you have a set of Pods that each listen on TCP port 9376
-and carry a label `app=MyApp`:
+For example, suppose you have a set of Pods where each listens on TCP port 9376
+and contains a label `app=MyApp`:
 -->
 
 ## 定义 Service
@@ -255,11 +255,11 @@ spec:
 ```
 
 <!--
-Because this Service has no selector, the corresponding Endpoint object is *not*
+Because this Service has no selector, the corresponding Endpoints object is not
 created automatically. You can manually map the Service to the network address and port
-where it's running, by adding an Endpoint object manually:
+where it's running, by adding an Endpoints object manually:
 -->
-由于此服务没有选择算符，因此 *不会* 自动创建相应的 Endpoint 对象。
+由于此服务没有选择算符，因此不会自动创建相应的 Endpoint 对象。
 你可以通过手动添加 Endpoint 对象，将服务手动映射到运行该服务的网络地址和端口：
 
 ```yaml
@@ -728,7 +728,7 @@ Services by their DNS name.
 For example, if you have a Service called `my-service` in a Kubernetes
 namespace `my-ns`, the control plane and the DNS Service acting together
 create a DNS record for `my-service.my-ns`. Pods in the `my-ns` namespace
-should be able to find it by simply doing a name lookup for `my-service`
+should be able to find the service by doing a name lookup for `my-service`
 (`my-service.my-ns` would also work).
 
 Pods in other Namespaces must qualify the name as `my-service.my-ns`. These names
@@ -736,7 +736,7 @@ will resolve to the cluster IP assigned for the Service.
 -->
 例如，如果你在 Kubernetes 命名空间 `my-ns` 中有一个名为 `my-service` 的服务，
 则控制平面和 DNS 服务共同为 `my-service.my-ns` 创建 DNS 记录。
-`my-ns` 命名空间中的 Pod 应该能够通过简单地按名检索 `my-service` 来找到它
+`my-ns` 命名空间中的 Pod 应该能够通过按名检索 `my-service` 来找到服务
 （`my-service.my-ns` 也可以工作）。
 
 其他命名空间中的 Pod 必须将名称限定为 `my-service.my-ns`。
@@ -794,12 +794,12 @@ DNS 如何实现自动配置，依赖于 Service 是否定义了选择算符。
 
 For headless Services that define selectors, the endpoints controller creates
 `Endpoints` records in the API, and modifies the DNS configuration to return
-records (addresses) that point directly to the `Pods` backing the `Service`.
+A records (IP addresses) that point directly to the `Pods` backing the `Service`.
 -->
 ### 带选择算符的服务 {#with-selectors}
 
 对定义了选择算符的无头服务，Endpoint 控制器在 API 中创建了 Endpoints 记录，
-并且修改 DNS 配置返回 A 记录（地址），通过这个地址直接到达 `Service` 的后端 Pod 上。
+并且修改 DNS 配置返回 A 记录（IP 地址），通过这个地址直接到达 `Service` 的后端 Pod 上。
 
 <!--
 ### Without selectors
@@ -889,8 +889,13 @@ allocates a port from a range specified by `--service-node-port-range` flag (def
 Each node proxies that port (the same port number on every Node) into your Service.
 Your Service reports the allocated port in its `.spec.ports[*].nodePort` field.
 
-If you want to specify particular IP(s) to proxy the port, you can set the `--nodeport-addresses` flag in kube-proxy to particular IP block(s); this is supported since Kubernetes v1.10.
-This flag takes a comma-delimited list of IP blocks (e.g. 10.0.0.0/8, 192.0.2.0/25) to specify IP address ranges that kube-proxy should consider as local to this node.
+If you want to specify particular IP(s) to proxy the port, you can set the
+`--nodeport-addresses` flag for kube-proxy or the equivalent `nodePortAddresses`
+field of the
+[kube-proxy configuration file](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
+to particular IP block(s).
+
+This flag takes a comma-delimited list of IP blocks (e.g. `10.0.0.0/8`, `192.0.2.0/25`) to specify IP address ranges that kube-proxy should consider as local to this node.
 -->
 ### NodePort 类型  {#nodeport}
 
@@ -899,8 +904,9 @@ This flag takes a comma-delimited list of IP blocks (e.g. 10.0.0.0/8, 192.0.2.0/
 每个节点将那个端口（每个节点上的相同端口号）代理到你的服务中。
 你的服务在其 `.spec.ports[*].nodePort` 字段中要求分配的端口。
 
-如果你想指定特定的 IP 代理端口，则可以将 kube-proxy 中的 `--nodeport-addresses` 
-标志设置为特定的 IP 块。从 Kubernetes v1.10 开始支持此功能。
+如果你想指定特定的 IP 代理端口，则可以设置 kube-proxy 中的 `--nodeport-addresses` 参数
+或者将[kube-proxy 配置文件](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
+中的等效 `nodePortAddresses` 字段设置为特定的 IP 块。
 该标志采用逗号分隔的 IP 块列表（例如，`10.0.0.0/8`、`192.0.2.0/25`）来指定
 kube-proxy 应该认为是此节点本地的 IP 地址范围。
 
@@ -928,10 +934,12 @@ for NodePort use.
 <!--
 Using a NodePort gives you the freedom to set up your own load balancing solution,
 to configure environments that are not fully supported by Kubernetes, or even
-to just expose one or more nodes' IPs directly.
+to expose one or more nodes' IPs directly.
 
 Note that this Service is visible as `<NodeIP>:spec.ports[*].nodePort`
-and `.spec.clusterIP:spec.ports[*].port`. (If the `--nodeport-addresses` flag in kube-proxy is set, <NodeIP> would be filtered NodeIP(s).)
+and `.spec.clusterIP:spec.ports[*].port`.
+If the `--nodeport-addresses` flag for kube-proxy or the equivalent field
+in the kube-proxy configuration file is set, `<NodeIP>` would be filtered node IP(s).
 
 For example:
 -->
@@ -940,8 +948,9 @@ For example:
 甚至直接暴露一个或多个节点的 IP。
 
 需要注意的是，Service 能够通过 `<NodeIP>:spec.ports[*].nodePort` 和
-`spec.clusterIp:spec.ports[*].port` 而对外可见
-（如果 kube-proxy 的 `--nodeport-addresses` 参数被设置了， <NodeIP>将被过滤 NodeIP。）。
+`spec.clusterIp:spec.ports[*].port` 而对外可见。
+如果设置了 kube-proxy 的 `--nodeport-addresses` 参数或 kube-proxy 配置文件中的等效字段，
+ `<NodeIP>` 将被过滤 NodeIP。
 
 例如：
 
@@ -1284,14 +1293,13 @@ TCP 和 SSL 选择第4层代理：ELB 转发流量而不修改报头。
 
 <!--
 In the above example, if the Service contained three ports, `80`, `443`, and
-`8443`, then `443` and `8443` would use the SSL certificate, but `80` would just
-be proxied HTTP.
+`8443`, then `443` and `8443` would use the SSL certificate, but `80` would be proxied HTTP.
 
 From Kubernetes v1.9 onwards you can use [predefined AWS SSL policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html) with HTTPS or SSL listeners for your Services.
 To see which policies are available for use, you can use the `aws` command line tool:
 -->
 在上例中，如果服务包含 `80`、`443` 和 `8443` 三个端口， 那么 `443` 和 `8443` 将使用 SSL 证书，
-而 `80` 端口将仅仅转发 HTTP 数据包。
+而 `80` 端口将转发 HTTP 数据包。
 
 从 Kubernetes v1.9 起可以使用
 [预定义的 AWS SSL 策略](https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html)
@@ -1540,7 +1548,7 @@ groups are modified with the following IP rules:
 
 | Rule | Protocol | Port(s) | IpRange(s) | IpRange Description |
 |------|----------|---------|------------|---------------------|
-| Health Check | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy=Local`) | VPC CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
+| Health Check | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | Subnet CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
 | Client Traffic | TCP | NodePort(s) | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/client=\<loadBalancerName\> |
 | MTU Discovery | ICMP | 3,4 | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/mtu=\<loadBalancerName\> |
 
@@ -1794,7 +1802,7 @@ iptables 代理不会隐藏 Kubernetes 集群内部的 IP 地址，但却要求
 <!--
 ## Virtual IP implementation {#the-gory-details-of-virtual-ips}
 
-The previous information should be sufficient for many people who just want to
+The previous information should be sufficient for many people who want to
 use Services.  However, there is a lot going on behind the scenes that may be
 worth understanding.
 -->
@@ -1889,7 +1897,7 @@ rule kicks in, and redirects the packets to the proxy's own port.
 The "Service proxy" chooses a backend, and starts proxying traffic from the client to the backend.
 
 This means that Service owners can choose any port they want without risk of
-collision.  Clients can simply connect to an IP and port, without being aware
+collision.  Clients can connect to an IP and port, without being aware
 of which Pods they are actually accessing.
 -->
 
@@ -1904,7 +1912,7 @@ of which Pods they are actually accessing.
 "服务代理" 选择一个后端，并将客户端的流量代理到后端上。
 
 这意味着 Service 的所有者能够选择任何他们想使用的端口，而不存在冲突的风险。
-客户端可以简单地连接到一个 IP 和端口，而不需要知道实际访问了哪些 Pod。
+客户端可以连接到一个 IP 和端口，而不需要知道实际访问了哪些 Pod。
 
 #### iptables
 
@@ -2060,7 +2068,7 @@ You can also use {{< glossary_tooltip term_id="ingress" >}} in place of Service
 to expose HTTP / HTTPS Services.
 -->
 {{< note >}}
-你还可以使用 {{< glossary_tooltip text="Ingres" term_id="ingress" >}} 代替
+你还可以使用 {{< glossary_tooltip text="Ingress" term_id="ingress" >}} 代替
 Service 来公开 HTTP/HTTPS 服务。
 {{< /note >}}
 

From a149f9c2d257c7ca3781f63b837d176dcfad98c9 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 7 Apr 2021 15:58:04 +0800
Subject: [PATCH 491/788] Tune code style in tables

This is a follow up of #26595 and kubernetes-sigs/reference-docs#220.
---
 assets/scss/_custom.scss | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index 568a258a1c..29a8e1ecf8 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -639,3 +639,10 @@ body.td-documentation {
   }
 }
 
+.td-content {
+  table code {
+    background-color: inherit !important;
+    color: inherit !important;
+    font-size: inherit !important;
+  }
+}

From 47df9fdab0c596eefc62764f0725c05db76f1937 Mon Sep 17 00:00:00 2001
From: Alay Patel <alay1431@gmail.com>
Date: Wed, 24 Mar 2021 12:34:34 -0400
Subject: [PATCH 492/788] Blog: CronJob reaches GA

---
 .../controller-flowchart.svg                  |   1 +
 .../2021-04-08-cronjob-reaches-ga/index.md    | 105 ++++++++++++++++++
 .../performance-impact-graph.svg              |   1 +
 3 files changed, 107 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/controller-flowchart.svg
 create mode 100644 content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md
 create mode 100644 content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/performance-impact-graph.svg

diff --git a/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/controller-flowchart.svg b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/controller-flowchart.svg
new file mode 100644
index 0000000000..9357c89d40
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/controller-flowchart.svg
@@ -0,0 +1 @@
+<svg version="1.1" viewBox="0.0 0.0 1152.0 864.0" fill="none" stroke="none" stroke-linecap="square" stroke-miterlimit="10" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"><clipPath id="p.0"><path d="m0 0l1152.0 0l0 864.0l-1152.0 0l0 -864.0z" clip-rule="nonzero"/></clipPath><g clip-path="url(#p.0)"><path fill="#000000" fill-opacity="0.0" d="m0 0l1152.0 0l0 864.0l-1152.0 0z" fill-rule="evenodd"/><path fill="#cfe2f3" d="m76.375374 581.74866l0 0c0 -10.471863 8.489128 -18.960999 18.961006 -18.960999l220.3142 0c5.028778 0 9.851593 1.9976807 13.407471 5.553589c3.5558777 3.5558472 5.5535583 8.378662 5.5535583 13.40741l0 75.8418c0 10.471863 -8.489136 18.960999 -18.96103 18.960999l-220.3142 0c-10.471878 0 -18.961006 -8.489136 -18.961006 -18.960999z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m76.375374 581.74866l0 0c0 -10.471863 8.489128 -18.960999 18.961006 -18.960999l220.3142 0c5.028778 0 9.851593 1.9976807 13.407471 5.553589c3.5558777 3.5558472 5.5535583 8.378662 5.5535583 13.40741l0 75.8418c0 10.471863 -8.489136 18.960999 -18.96103 18.960999l-220.3142 0c-10.471878 0 -18.961006 -8.489136 -18.961006 -18.960999z" fill-rule="evenodd"/><path fill="#000000" d="m100.67262 626.58954l0 -13.359375l5.921875 0q1.78125 0 2.703125 0.359375q0.9375 0.359375 1.484375 1.28125q0.5625 0.90625 0.5625 2.015625q0 1.40625 -0.921875 2.390625q-0.921875 0.96875 -2.84375 1.234375q0.703125 0.34375 1.078125 0.671875q0.765625 0.703125 1.453125 1.765625l2.328125 3.640625l-2.21875 0l-1.765625 -2.78125q-0.78125 -1.203125 -1.28125 -1.828125q-0.5 -0.640625 -0.90625 -0.890625q-0.390625 -0.265625 -0.796875 -0.359375q-0.296875 -0.078125 -0.984375 -0.078125l-2.046875 0l0 5.9375l-1.765625 0zm1.765625 -7.453125l3.796875 0q1.21875 0 1.890625 -0.25q0.6875 -0.265625 1.046875 -0.8125q0.359375 -0.546875 0.359375 -1.1875q0 -0.953125 -0.6875 -1.5625q-0.6875 -0.609375 -2.1875 -0.609375l-4.21875 0l0 4.421875zm18.097946 4.34375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm8.485092 2.875l1.625 -0.25q0.125 0.96875 0.75 1.5q0.625 0.515625 1.75 0.515625q1.125 0 1.671875 -0.453125q0.546875 -0.46875 0.546875 -1.09375q0 -0.546875 -0.484375 -0.875q-0.328125 -0.21875 -1.671875 -0.546875q-1.8125 -0.46875 -2.515625 -0.796875q-0.6875 -0.328125 -1.046875 -0.90625q-0.359375 -0.59375 -0.359375 -1.3125q0 -0.640625 0.296875 -1.1875q0.296875 -0.5625 0.8125 -0.921875q0.375 -0.28125 1.03125 -0.46875q0.671875 -0.203125 1.421875 -0.203125q1.140625 0 2.0 0.328125q0.859375 0.328125 1.265625 0.890625q0.421875 0.5625 0.578125 1.5l-1.609375 0.21875q-0.109375 -0.75 -0.640625 -1.171875q-0.515625 -0.421875 -1.46875 -0.421875q-1.140625 0 -1.625 0.375q-0.46875 0.375 -0.46875 0.875q0 0.3125 0.1875 0.578125q0.203125 0.265625 0.640625 0.4375q0.234375 0.09375 1.4375 0.421875q1.75 0.453125 2.4375 0.75q0.6875 0.296875 1.078125 0.859375q0.390625 0.5625 0.390625 1.40625q0 0.828125 -0.484375 1.546875q-0.46875 0.71875 -1.375 1.125q-0.90625 0.390625 -2.046875 0.390625q-1.875 0 -2.875 -0.78125q-0.984375 -0.78125 -1.25 -2.328125zm9.375 -1.953125q0 -2.6875 1.484375 -3.96875q1.25 -1.078125 3.046875 -1.078125q2.0 0 3.265625 1.3125q1.265625 1.296875 1.265625 3.609375q0 1.859375 -0.5625 2.9375q-0.5625 1.0625 -1.640625 1.65625q-1.0625 0.59375 -2.328125 0.59375q-2.03125 0 -3.28125 -1.296875q-1.25 -1.3125 -1.25 -3.765625zm1.6875 0q0 1.859375 0.796875 2.796875q0.8125 0.921875 2.046875 0.921875q1.21875 0 2.03125 -0.921875q0.8125 -0.9375 0.8125 -2.84375q0 -1.796875 -0.8125 -2.71875q-0.8125 -0.921875 -2.03125 -0.921875q-1.234375 0 -2.046875 0.921875q-0.796875 0.90625 -0.796875 2.765625zm15.625717 4.84375l0 -1.421875q-1.125 1.640625 -3.0625 1.640625q-0.859375 0 -1.609375 -0.328125q-0.734375 -0.328125 -1.09375 -0.828125q-0.359375 -0.5 -0.5 -1.21875q-0.109375 -0.46875 -0.109375 -1.53125l0 -5.984375l1.640625 0l0 5.359375q0 1.28125 0.109375 1.734375q0.15625 0.640625 0.65625 1.015625q0.5 0.375 1.234375 0.375q0.734375 0 1.375 -0.375q0.65625 -0.390625 0.921875 -1.03125q0.265625 -0.65625 0.265625 -1.890625l0 -5.1875l1.640625 0l0 9.671875l-1.46875 0zm4.031967 0l0 -9.671875l1.46875 0l0 1.46875q0.5625 -1.03125 1.03125 -1.359375q0.484375 -0.328125 1.0625 -0.328125q0.828125 0 1.6875 0.53125l-0.5625 1.515625q-0.609375 -0.359375 -1.203125 -0.359375q-0.546875 0 -0.96875 0.328125q-0.421875 0.328125 -0.609375 0.890625q-0.28125 0.875 -0.28125 1.921875l0 5.0625l-1.625 0zm12.540802 -3.546875l1.609375 0.21875q-0.265625 1.65625 -1.359375 2.609375q-1.078125 0.9375 -2.671875 0.9375q-1.984375 0 -3.1875 -1.296875q-1.203125 -1.296875 -1.203125 -3.71875q0 -1.578125 0.515625 -2.75q0.515625 -1.171875 1.578125 -1.75q1.0625 -0.59375 2.3125 -0.59375q1.578125 0 2.578125 0.796875q1.0 0.796875 1.28125 2.265625l-1.59375 0.234375q-0.234375 -0.96875 -0.8125 -1.453125q-0.578125 -0.5 -1.390625 -0.5q-1.234375 0 -2.015625 0.890625q-0.78125 0.890625 -0.78125 2.8125q0 1.953125 0.75 2.84375q0.75 0.875 1.953125 0.875q0.96875 0 1.609375 -0.59375q0.65625 -0.59375 0.828125 -1.828125zm9.640625 0.4375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm14.559021 5.765625l0 -13.359375l9.65625 0l0 1.578125l-7.875 0l0 4.09375l7.375 0l0 1.5625l-7.375 0l0 4.546875l8.1875 0l0 1.578125l-9.96875 0zm14.896698 0l-3.6875 -9.671875l1.734375 0l2.078125 5.796875q0.328125 0.9375 0.625 1.9375q0.203125 -0.765625 0.609375 -1.828125l2.140625 -5.90625l1.6875 0l-3.65625 9.671875l-1.53125 0zm13.265625 -3.109375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm9.141342 5.765625l0 -9.671875l1.46875 0l0 1.375q1.0625 -1.59375 3.078125 -1.59375q0.875 0 1.609375 0.3125q0.734375 0.3125 1.09375 0.828125q0.375 0.5 0.515625 1.203125q0.09375 0.453125 0.09375 1.59375l0 5.953125l-1.640625 0l0 -5.890625q0 -1.0 -0.203125 -1.484375q-0.1875 -0.5 -0.671875 -0.796875q-0.484375 -0.296875 -1.140625 -0.296875q-1.046875 0 -1.8125 0.671875q-0.75 0.65625 -0.75 2.515625l0 5.28125l-1.640625 0zm13.953842 -1.46875l0.234375 1.453125q-0.6875 0.140625 -1.234375 0.140625q-0.890625 0 -1.390625 -0.28125q-0.484375 -0.28125 -0.6875 -0.734375q-0.203125 -0.46875 -0.203125 -1.9375l0 -5.578125l-1.203125 0l0 -1.265625l1.203125 0l0 -2.390625l1.625 -0.984375l0 3.375l1.65625 0l0 1.265625l-1.65625 0l0 5.671875q0 0.6875 0.078125 0.890625q0.09375 0.203125 0.28125 0.328125q0.203125 0.109375 0.578125 0.109375q0.265625 0 0.71875 -0.0625zm7.0541077 1.46875l0 -13.359375l1.765625 0l0 5.484375l6.9375 0l0 -5.484375l1.765625 0l0 13.359375l-1.765625 0l0 -6.296875l-6.9375 0l0 6.296875l-1.765625 0zm19.519821 -1.1875q-0.921875 0.765625 -1.765625 1.09375q-0.828125 0.3125 -1.796875 0.3125q-1.59375 0 -2.453125 -0.78125q-0.859375 -0.78125 -0.859375 -1.984375q0 -0.71875 0.328125 -1.296875q0.328125 -0.59375 0.84375 -0.9375q0.53125 -0.359375 1.1875 -0.546875q0.46875 -0.125 1.453125 -0.25q1.984375 -0.234375 2.921875 -0.5625q0.015625 -0.34375 0.015625 -0.421875q0 -1.0 -0.46875 -1.421875q-0.625 -0.546875 -1.875 -0.546875q-1.15625 0 -1.703125 0.40625q-0.546875 0.40625 -0.8125 1.421875l-1.609375 -0.21875q0.21875 -1.015625 0.71875 -1.640625q0.5 -0.640625 1.453125 -0.984375q0.953125 -0.34375 2.1875 -0.34375q1.25 0 2.015625 0.296875q0.78125 0.28125 1.140625 0.734375q0.375 0.4375 0.515625 1.109375q0.078125 0.421875 0.078125 1.515625l0 2.1875q0 2.28125 0.109375 2.890625q0.109375 0.59375 0.40625 1.15625l-1.703125 0q-0.265625 -0.515625 -0.328125 -1.1875zm-0.140625 -3.671875q-0.890625 0.375 -2.671875 0.625q-1.015625 0.140625 -1.4375 0.328125q-0.421875 0.1875 -0.65625 0.53125q-0.21875 0.34375 -0.21875 0.78125q0 0.65625 0.5 1.09375q0.5 0.4375 1.453125 0.4375q0.9375 0 1.671875 -0.40625q0.75 -0.421875 1.09375 -1.140625q0.265625 -0.5625 0.265625 -1.640625l0 -0.609375zm4.203827 4.859375l0 -9.671875l1.46875 0l0 1.375q1.0625 -1.59375 3.078125 -1.59375q0.875 0 1.609375 0.3125q0.734375 0.3125 1.09375 0.828125q0.375 0.5 0.515625 1.203125q0.09375 0.453125 0.09375 1.59375l0 5.953125l-1.640625 0l0 -5.890625q0 -1.0 -0.203125 -1.484375q-0.1875 -0.5 -0.671875 -0.796875q-0.484375 -0.296875 -1.140625 -0.296875q-1.046875 0 -1.8125 0.671875q-0.75 0.65625 -0.75 2.515625l0 5.28125l-1.640625 0zm16.641357 0l0 -1.21875q-0.90625 1.4375 -2.703125 1.4375q-1.15625 0 -2.125 -0.640625q-0.96875 -0.640625 -1.5 -1.78125q-0.53125 -1.140625 -0.53125 -2.625q0 -1.453125 0.484375 -2.625q0.484375 -1.1875 1.4375 -1.8125q0.96875 -0.625 2.171875 -0.625q0.875 0 1.546875 0.375q0.6875 0.359375 1.109375 0.953125l0 -4.796875l1.640625 0l0 13.359375l-1.53125 0zm-5.171875 -4.828125q0 1.859375 0.78125 2.78125q0.78125 0.921875 1.84375 0.921875q1.078125 0 1.828125 -0.875q0.75 -0.890625 0.75 -2.6875q0 -1.984375 -0.765625 -2.90625q-0.765625 -0.9375 -1.890625 -0.9375q-1.078125 0 -1.8125 0.890625q-0.734375 0.890625 -0.734375 2.8125zm9.235077 4.828125l0 -13.359375l1.640625 0l0 13.359375l-1.640625 0zm10.816711 -3.109375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm9.125702 5.765625l0 -9.671875l1.46875 0l0 1.46875q0.5625 -1.03125 1.03125 -1.359375q0.484375 -0.328125 1.0625 -0.328125q0.828125 0 1.6875 0.53125l-0.5625 1.515625q-0.609375 -0.359375 -1.203125 -0.359375q-0.546875 0 -0.96875 0.328125q-0.421875 0.328125 -0.609375 0.890625q-0.28125 0.875 -0.28125 1.921875l0 5.0625l-1.625 0zm5.572052 -2.890625l1.625 -0.25q0.125 0.96875 0.75 1.5q0.625 0.515625 1.75 0.515625q1.125 0 1.671875 -0.453125q0.546875 -0.46875 0.546875 -1.09375q0 -0.546875 -0.484375 -0.875q-0.328125 -0.21875 -1.671875 -0.546875q-1.8125 -0.46875 -2.515625 -0.796875q-0.6875 -0.328125 -1.046875 -0.90625q-0.359375 -0.59375 -0.359375 -1.3125q0 -0.640625 0.296875 -1.1875q0.296875 -0.5625 0.8125 -0.921875q0.375 -0.28125 1.03125 -0.46875q0.671875 -0.203125 1.421875 -0.203125q1.140625 0 2.0 0.328125q0.859375 0.328125 1.265625 0.890625q0.421875 0.5625 0.578125 1.5l-1.609375 0.21875q-0.109375 -0.75 -0.640625 -1.171875q-0.515625 -0.421875 -1.46875 -0.421875q-1.140625 0 -1.625 0.375q-0.46875 0.375 -0.46875 0.875q0 0.3125 0.1875 0.578125q0.203125 0.265625 0.640625 0.4375q0.234375 0.09375 1.4375 0.421875q1.75 0.453125 2.4375 0.75q0.6875 0.296875 1.078125 0.859375q0.390625 0.5625 0.390625 1.40625q0 0.828125 -0.484375 1.546875q-0.46875 0.71875 -1.375 1.125q-0.90625 0.390625 -2.046875 0.390625q-1.875 0 -2.875 -0.78125q-0.984375 -0.78125 -1.25 -2.328125z" fill-rule="nonzero"/><path fill="#cfe2f3" d="m101.39069 462.7245l0 0c0 -3.148529 2.5523758 -5.700897 5.700897 -5.700897l196.72418 0c1.5119934 0 2.9620361 0.60061646 4.0311584 1.6697388c1.0691223 1.0691528 1.6697388 2.5191956 1.6697388 4.0311584l0 22.802917c0 3.148529 -2.5523682 5.700897 -5.700897 5.700897l-196.72418 0c-3.1485214 0 -5.700897 -2.5523682 -5.700897 -5.700897z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m101.39069 462.7245l0 0c0 -3.148529 2.5523758 -5.700897 5.700897 -5.700897l196.72418 0c1.5119934 0 2.9620361 0.60061646 4.0311584 1.6697388c1.0691223 1.0691528 1.6697388 2.5191956 1.6697388 4.0311584l0 22.802917c0 3.148529 -2.5523682 5.700897 -5.700897 5.700897l-196.72418 0c-3.1485214 0 -5.700897 -2.5523682 -5.700897 -5.700897z" fill-rule="evenodd"/><path fill="#000000" d="m154.7369 478.64594l3.296875 -8.59375l1.21875 0l3.515625 8.59375l-1.28125 0l-1.015625 -2.609375l-3.578125 0l-0.953125 2.609375l-1.203125 0zm2.484375 -3.53125l2.90625 0l-0.890625 -2.375q-0.421875 -1.078125 -0.609375 -1.78125q-0.171875 0.828125 -0.46875 1.640625l-0.9375 2.515625zm10.363281 3.53125l0 -0.78125q-0.59375 0.921875 -1.734375 0.921875q-0.75 0 -1.375 -0.40625q-0.625 -0.421875 -0.96875 -1.15625q-0.34375 -0.734375 -0.34375 -1.6875q0 -0.921875 0.3125 -1.6875q0.3125 -0.765625 0.9375 -1.15625q0.625 -0.40625 1.390625 -0.40625q0.5625 0 1.0 0.234375q0.4375 0.234375 0.71875 0.609375l0 -3.078125l1.046875 0l0 8.59375l-0.984375 0zm-3.328125 -3.109375q0 1.203125 0.5 1.796875q0.5 0.578125 1.1875 0.578125q0.6875 0 1.171875 -0.5625q0.484375 -0.5625 0.484375 -1.71875q0 -1.28125 -0.5 -1.875q-0.484375 -0.59375 -1.203125 -0.59375q-0.703125 0 -1.171875 0.578125q-0.46875 0.5625 -0.46875 1.796875zm10.001953 3.109375l0 -0.78125q-0.59375 0.921875 -1.734375 0.921875q-0.75 0 -1.375 -0.40625q-0.625 -0.421875 -0.96875 -1.15625q-0.34375 -0.734375 -0.34375 -1.6875q0 -0.921875 0.3125 -1.6875q0.3125 -0.765625 0.9375 -1.15625q0.625 -0.40625 1.390625 -0.40625q0.5625 0 1.0 0.234375q0.4375 0.234375 0.71875 0.609375l0 -3.078125l1.046875 0l0 8.59375l-0.984375 0zm-3.328125 -3.109375q0 1.203125 0.5 1.796875q0.5 0.578125 1.1875 0.578125q0.6875 0 1.171875 -0.5625q0.484375 -0.5625 0.484375 -1.71875q0 -1.28125 -0.5 -1.875q-0.484375 -0.59375 -1.203125 -0.59375q-0.703125 0 -1.171875 0.578125q-0.46875 0.5625 -0.46875 1.796875zm5.173828 3.25l2.484375 -8.875l0.84375 0l-2.484375 8.875l-0.84375 0zm9.896484 -8.734375l1.140625 0l0 4.96875q0 1.296875 -0.296875 2.0625q-0.296875 0.75 -1.0625 1.234375q-0.765625 0.46875 -2.0 0.46875q-1.203125 0 -1.984375 -0.40625q-0.765625 -0.421875 -1.09375 -1.203125q-0.328125 -0.796875 -0.328125 -2.15625l0 -4.96875l1.140625 0l0 4.953125q0 1.125 0.203125 1.65625q0.21875 0.53125 0.71875 0.828125q0.515625 0.28125 1.25 0.28125q1.25 0 1.78125 -0.5625q0.53125 -0.578125 0.53125 -2.203125l0 -4.953125zm2.9003906 10.984375l0 -8.609375l0.953125 0l0 0.796875q0.34375 -0.46875 0.765625 -0.703125q0.4375 -0.234375 1.046875 -0.234375q0.796875 0 1.40625 0.40625q0.609375 0.40625 0.90625 1.15625q0.3125 0.75 0.3125 1.640625q0 0.953125 -0.34375 1.71875q-0.328125 0.765625 -0.984375 1.171875q-0.65625 0.40625 -1.375 0.40625q-0.53125 0 -0.953125 -0.21875q-0.421875 -0.234375 -0.6875 -0.5625l0 3.03125l-1.046875 0zm0.953125 -5.46875q0 1.203125 0.484375 1.78125q0.484375 0.5625 1.171875 0.5625q0.703125 0 1.203125 -0.59375q0.5 -0.59375 0.5 -1.84375q0 -1.1875 -0.484375 -1.765625q-0.484375 -0.59375 -1.171875 -0.59375q-0.671875 0 -1.1875 0.625q-0.515625 0.625 -0.515625 1.828125zm9.751953 3.078125l0 -0.78125q-0.59375 0.921875 -1.734375 0.921875q-0.75 0 -1.375 -0.40625q-0.625 -0.421875 -0.96875 -1.15625q-0.34375 -0.734375 -0.34375 -1.6875q0 -0.921875 0.3125 -1.6875q0.3125 -0.765625 0.9375 -1.15625q0.625 -0.40625 1.390625 -0.40625q0.5625 0 1.0 0.234375q0.4375 0.234375 0.71875 0.609375l0 -3.078125l1.046875 0l0 8.59375l-0.984375 0zm-3.328125 -3.109375q0 1.203125 0.5 1.796875q0.5 0.578125 1.1875 0.578125q0.6875 0 1.171875 -0.5625q0.484375 -0.5625 0.484375 -1.71875q0 -1.28125 -0.5 -1.875q-0.484375 -0.59375 -1.203125 -0.59375q-0.703125 0 -1.171875 0.578125q-0.46875 0.5625 -0.46875 1.796875zm10.033203 2.34375q-0.59375 0.5 -1.140625 0.703125q-0.53125 0.203125 -1.15625 0.203125q-1.03125 0 -1.578125 -0.5q-0.546875 -0.5 -0.546875 -1.28125q0 -0.453125 0.203125 -0.828125q0.203125 -0.390625 0.546875 -0.609375q0.34375 -0.234375 0.765625 -0.34375q0.296875 -0.09375 0.9375 -0.171875q1.265625 -0.140625 1.875 -0.359375q0 -0.21875 0 -0.265625q0 -0.65625 -0.296875 -0.921875q-0.40625 -0.34375 -1.203125 -0.34375q-0.734375 0 -1.09375 0.265625q-0.359375 0.25 -0.53125 0.90625l-1.03125 -0.140625q0.140625 -0.65625 0.46875 -1.0625q0.328125 -0.40625 0.9375 -0.625q0.609375 -0.21875 1.40625 -0.21875q0.796875 0 1.296875 0.1875q0.5 0.1875 0.734375 0.46875q0.234375 0.28125 0.328125 0.71875q0.046875 0.265625 0.046875 0.96875l0 1.40625q0 1.46875 0.0625 1.859375q0.078125 0.390625 0.28125 0.75l-1.109375 0q-0.15625 -0.328125 -0.203125 -0.765625zm-0.09375 -2.359375q-0.578125 0.234375 -1.71875 0.40625q-0.65625 0.09375 -0.921875 0.21875q-0.265625 0.109375 -0.421875 0.328125q-0.140625 0.21875 -0.140625 0.5q0 0.421875 0.3125 0.703125q0.328125 0.28125 0.9375 0.28125q0.609375 0 1.078125 -0.265625q0.484375 -0.265625 0.703125 -0.734375q0.171875 -0.359375 0.171875 -1.046875l0 -0.390625zm5.001953 2.1875l0.15625 0.921875q-0.453125 0.09375 -0.796875 0.09375q-0.578125 0 -0.890625 -0.171875q-0.3125 -0.1875 -0.453125 -0.484375q-0.125 -0.296875 -0.125 -1.25l0 -3.578125l-0.765625 0l0 -0.8125l0.765625 0l0 -1.546875l1.046875 -0.625l0 2.171875l1.0625 0l0 0.8125l-1.0625 0l0 3.640625q0 0.453125 0.046875 0.578125q0.0625 0.125 0.1875 0.203125q0.125 0.078125 0.359375 0.078125q0.1875 0 0.46875 -0.03125zm5.2871094 -1.0625l1.09375 0.125q-0.25 0.953125 -0.953125 1.484375q-0.703125 0.53125 -1.78125 0.53125q-1.359375 0 -2.171875 -0.84375q-0.796875 -0.84375 -0.796875 -2.359375q0 -1.5625 0.8125 -2.421875q0.8125 -0.875 2.09375 -0.875q1.25 0 2.03125 0.84375q0.796875 0.84375 0.796875 2.390625q0 0.09375 0 0.28125l-4.640625 0q0.0625 1.03125 0.578125 1.578125q0.515625 0.53125 1.296875 0.53125q0.578125 0 0.984375 -0.296875q0.421875 -0.3125 0.65625 -0.96875zm-3.453125 -1.703125l3.46875 0q-0.0625 -0.796875 -0.390625 -1.1875q-0.515625 -0.609375 -1.3125 -0.609375q-0.734375 0 -1.234375 0.484375q-0.484375 0.484375 -0.53125 1.3125zm5.080078 3.84375l2.484375 -8.875l0.84375 0l-2.484375 8.875l-0.84375 0zm4.2558594 -0.140625l0 -8.59375l2.96875 0q1.0 0 1.53125 0.125q0.734375 0.171875 1.25 0.609375q0.6875 0.578125 1.015625 1.484375q0.34375 0.890625 0.34375 2.03125q0 0.984375 -0.234375 1.734375q-0.21875 0.75 -0.578125 1.25q-0.359375 0.5 -0.796875 0.78125q-0.421875 0.28125 -1.015625 0.4375q-0.59375 0.140625 -1.375 0.140625l-3.109375 0zm1.140625 -1.015625l1.828125 0q0.859375 0 1.34375 -0.15625q0.484375 -0.15625 0.765625 -0.453125q0.40625 -0.390625 0.625 -1.078125q0.234375 -0.6875 0.234375 -1.65625q0 -1.34375 -0.453125 -2.0625q-0.4375 -0.734375 -1.0625 -0.984375q-0.46875 -0.171875 -1.46875 -0.171875l-1.8125 0l0 6.5625zm11.650375 -0.984375l1.09375 0.125q-0.25 0.953125 -0.953125 1.484375q-0.703125 0.53125 -1.78125 0.53125q-1.359375 0 -2.171875 -0.84375q-0.79685974 -0.84375 -0.79685974 -2.359375q0 -1.5625 0.81248474 -2.421875q0.8125 -0.875 2.09375 -0.875q1.25 0 2.03125 0.84375q0.796875 0.84375 0.796875 2.390625q0 0.09375 0 0.28125l-4.640625 0q0.0625 1.03125 0.578125 1.578125q0.515625 0.53125 1.296875 0.53125q0.578125 0 0.984375 -0.296875q0.421875 -0.3125 0.65625 -0.96875zm-3.453125 -1.703125l3.46875 0q-0.0625 -0.796875 -0.390625 -1.1875q-0.515625 -0.609375 -1.3125 -0.609375q-0.734375 0 -1.234375 0.484375q-0.484375 0.484375 -0.53125 1.3125zm5.845703 3.703125l0 -8.59375l1.0625 0l0 8.59375l-1.0625 0zm6.9472656 -2.0l1.09375 0.125q-0.25 0.953125 -0.953125 1.484375q-0.703125 0.53125 -1.78125 0.53125q-1.359375 0 -2.171875 -0.84375q-0.796875 -0.84375 -0.796875 -2.359375q0 -1.5625 0.8125 -2.421875q0.8125 -0.875 2.09375 -0.875q1.25 0 2.03125 0.84375q0.796875 0.84375 0.796875 2.390625q0 0.09375 0 0.28125l-4.640625 0q0.0625 1.03125 0.578125 1.578125q0.515625 0.53125 1.296875 0.53125q0.578125 0 0.984375 -0.296875q0.421875 -0.3125 0.65625 -0.96875zm-3.453125 -1.703125l3.46875 0q-0.0625 -0.796875 -0.390625 -1.1875q-0.515625 -0.609375 -1.3125 -0.609375q-0.734375 0 -1.234375 0.484375q-0.484375 0.484375 -0.53125 1.3125zm8.173828 2.765625l0.15625 0.921875q-0.453125 0.09375 -0.796875 0.09375q-0.578125 0 -0.890625 -0.171875q-0.3125 -0.1875 -0.453125 -0.484375q-0.125 -0.296875 -0.125 -1.25l0 -3.578125l-0.765625 0l0 -0.8125l0.765625 0l0 -1.546875l1.046875 -0.625l0 2.171875l1.0625 0l0 0.8125l-1.0625 0l0 3.640625q0 0.453125 0.046875 0.578125q0.0625 0.125 0.1875 0.203125q0.125 0.078125 0.359375 0.078125q0.1875 0 0.46875 -0.03125zm5.2871094 -1.0625l1.09375 0.125q-0.25 0.953125 -0.953125 1.484375q-0.703125 0.53125 -1.78125 0.53125q-1.359375 0 -2.171875 -0.84375q-0.796875 -0.84375 -0.796875 -2.359375q0 -1.5625 0.8125 -2.421875q0.8125 -0.875 2.09375 -0.875q1.25 0 2.03125 0.84375q0.796875 0.84375 0.796875 2.390625q0 0.09375 0 0.28125l-4.640625 0q0.0625 1.03125 0.578125 1.578125q0.515625 0.53125 1.296875 0.53125q0.578125 0 0.984375 -0.296875q0.421875 -0.3125 0.65625 -0.96875zm-3.453125 -1.703125l3.46875 0q-0.0625 -0.796875 -0.390625 -1.1875q-0.515625 -0.609375 -1.3125 -0.609375q-0.734375 0 -1.234375 0.484375q-0.484375 0.484375 -0.53125 1.3125z" fill-rule="nonzero"/><path fill="#000000" fill-opacity="0.0" d="m205.45369 491.2283l0.03149414 71.55905" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m205.45367 491.2283l0.02885437 65.55905" fill-rule="evenodd"/><path fill="#000000" stroke="#000000" stroke-width="1.0" stroke-linecap="butt" d="m203.8308 556.7881l1.6537323 4.5373535l1.6497345 -4.5388184z" fill-rule="evenodd"/><path fill="#ffd966" d="m436.1768 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m436.1768 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path fill="#ffd966" d="m499.30917 580.80176l63.18112 0l0 73.60632l-63.18112 0z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m499.30917 580.80176l63.18112 0l0 73.60632l-63.18112 0z" fill-rule="evenodd"/><path fill="#ffd966" d="m562.4415 580.80176l63.181152 0l0 73.60632l-63.181152 0z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m562.4415 580.80176l63.181152 0l0 73.60632l-63.181152 0z" fill-rule="evenodd"/><path fill="#ffd966" d="m625.5739 580.80176l63.181152 0l0 73.60632l-63.181152 0z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m625.5739 580.80176l63.181152 0l0 73.60632l-63.181152 0z" fill-rule="evenodd"/><path fill="#ffd966" d="m688.7063 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m688.7063 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path fill="#ffd966" d="m751.8387 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m751.8387 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path fill="#ffd966" d="m814.97107 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m814.97107 580.80176l63.18109 0l0 73.60632l-63.18109 0z" fill-rule="evenodd"/><path fill="#000000" fill-opacity="0.0" d="m545.7497 669.86505l222.74011 0l0 42.015747l-222.74011 0z" fill-rule="evenodd"/><path fill="#000000" d="m638.5711 700.4882l0 -4.734375q-0.375 0.546875 -1.0625 0.90625q-0.6875 0.34375 -1.46875 0.34375q-1.71875 0 -2.96875 -1.375q-1.234375 -1.375 -1.234375 -3.765625q0 -1.46875 0.5 -2.625q0.515625 -1.15625 1.46875 -1.75q0.96875 -0.59375 2.109375 -0.59375q1.796875 0 2.828125 1.515625l0 -1.296875l1.46875 0l0 13.375l-1.640625 0zm-5.046875 -8.5625q0 1.859375 0.78125 2.796875q0.78125 0.9375 1.875 0.9375q1.046875 0 1.796875 -0.890625q0.765625 -0.890625 0.765625 -2.703125q0 -1.9375 -0.796875 -2.90625q-0.796875 -0.96875 -1.875 -0.96875q-1.0625 0 -1.8125 0.90625q-0.734375 0.90625 -0.734375 2.828125zm15.594421 4.859375l0 -1.421875q-1.125 1.640625 -3.0625 1.640625q-0.859375 0 -1.609375 -0.328125q-0.734375 -0.328125 -1.09375 -0.828125q-0.359375 -0.5 -0.5 -1.21875q-0.109375 -0.46875 -0.109375 -1.53125l0 -5.984375l1.640625 0l0 5.359375q0 1.28125 0.109375 1.734375q0.15625 0.640625 0.65625 1.015625q0.5 0.375 1.234375 0.375q0.734375 0 1.375 -0.375q0.65625 -0.390625 0.921875 -1.03125q0.265625 -0.65625 0.265625 -1.890625l0 -5.1875l1.640625 0l0 9.671875l-1.46875 0zm10.672607 -3.109375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm15.469482 5.765625l0 -1.421875q-1.125 1.640625 -3.0625 1.640625q-0.859375 0 -1.609375 -0.328125q-0.734375 -0.328125 -1.09375 -0.828125q-0.359375 -0.5 -0.5 -1.21875q-0.109375 -0.46875 -0.109375 -1.53125l0 -5.984375l1.640625 0l0 5.359375q0 1.28125 0.109375 1.734375q0.15625 0.640625 0.65625 1.015625q0.5 0.375 1.234375 0.375q0.734375 0 1.375 -0.375q0.65625 -0.390625 0.921875 -1.03125q0.265625 -0.65625 0.265625 -1.890625l0 -5.1875l1.640625 0l0 9.671875l-1.46875 0zm10.672607 -3.109375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625z" fill-rule="nonzero"/><path fill="#cfe2f3" d="m450.546 643.36273l17.228333 -51.433105l17.228363 51.433105z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m450.546 643.36273l17.228333 -51.433105l17.228363 51.433105z" fill-rule="evenodd"/><path fill="#cfe2f3" d="m981.9895 571.9414l0 0c0 -12.608582 10.221252 -22.829895 22.829834 -22.829895l107.25366 0c6.0549316 0 11.861816 2.4053345 16.143188 6.6867676c4.281372 4.281372 6.6866455 10.088257 6.6866455 16.143127l0 91.31665c0 12.608582 -10.221191 22.829834 -22.829834 22.829834l-107.25366 0c-12.608582 0 -22.829834 -10.221252 -22.829834 -22.829834z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m981.9895 571.9414l0 0c0 -12.608582 10.221252 -22.829895 22.829834 -22.829895l107.25366 0c6.0549316 0 11.861816 2.4053345 16.143188 6.6867676c4.281372 4.281372 6.6866455 10.088257 6.6866455 16.143127l0 91.31665c0 12.608582 -10.221191 22.829834 -22.829834 22.829834l-107.25366 0c-12.608582 0 -22.829834 -10.221252 -22.829834 -22.829834z" fill-rule="evenodd"/><path fill="#000000" d="m999.17615 624.5197l0 -13.359375l1.765625 0l0 5.484375l6.9375 0l0 -5.484375l1.765625 0l0 13.359375l-1.765625 0l0 -6.296875l-6.9375 0l0 6.296875l-1.765625 0zm19.519836 -1.1875q-0.921875 0.765625 -1.765625 1.09375q-0.828125 0.3125 -1.796875 0.3125q-1.59375 0 -2.453125 -0.78125q-0.859375 -0.78125 -0.859375 -1.984375q0 -0.71875 0.328125 -1.296875q0.328125 -0.59375 0.84375 -0.9375q0.53125 -0.359375 1.1875 -0.546875q0.46875 -0.125 1.453125 -0.25q1.984375 -0.234375 2.921875 -0.5625q0.015625 -0.34375 0.015625 -0.421875q0 -1.0 -0.46875 -1.421875q-0.625 -0.546875 -1.875 -0.546875q-1.15625 0 -1.703125 0.40625q-0.546875 0.40625 -0.8125 1.421875l-1.609375 -0.21875q0.21875 -1.015625 0.71875 -1.640625q0.5 -0.640625 1.453125 -0.984375q0.953125 -0.34375 2.1875 -0.34375q1.25 0 2.015625 0.296875q0.78125 0.28125 1.140625 0.734375q0.375 0.4375 0.515625 1.109375q0.078125 0.421875 0.078125 1.515625l0 2.1875q0 2.28125 0.109375 2.890625q0.109375 0.59375 0.40625 1.15625l-1.703125 0q-0.265625 -0.515625 -0.328125 -1.1875zm-0.140625 -3.671875q-0.890625 0.375 -2.671875 0.625q-1.015625 0.140625 -1.4375 0.328125q-0.421875 0.1875 -0.65625 0.53125q-0.21875 0.34375 -0.21875 0.78125q0 0.65625 0.5 1.09375q0.5 0.4375 1.453125 0.4375q0.9375 0 1.671875 -0.40625q0.75 -0.421875 1.09375 -1.140625q0.265625 -0.5625 0.265625 -1.640625l0 -0.609375zm4.2037964 4.859375l0 -9.671875l1.46875 0l0 1.375q1.0625 -1.59375 3.078125 -1.59375q0.875 0 1.609375 0.3125q0.734375 0.3125 1.09375 0.828125q0.375 0.5 0.515625 1.203125q0.09375 0.453125 0.09375 1.59375l0 5.953125l-1.640625 0l0 -5.890625q0 -1.0 -0.203125 -1.484375q-0.1875 -0.5 -0.671875 -0.796875q-0.484375 -0.296875 -1.140625 -0.296875q-1.046875 0 -1.8125 0.671875q-0.75 0.65625 -0.75 2.515625l0 5.28125l-1.640625 0zm16.641357 0l0 -1.21875q-0.90625 1.4375 -2.703125 1.4375q-1.15625 0 -2.125 -0.640625q-0.96875 -0.640625 -1.5 -1.78125q-0.53125 -1.140625 -0.53125 -2.625q0 -1.453125 0.484375 -2.625q0.484375 -1.1875 1.4375 -1.8125q0.96875 -0.625 2.171875 -0.625q0.875 0 1.546875 0.375q0.6875 0.359375 1.109375 0.953125l0 -4.796875l1.640625 0l0 13.359375l-1.53125 0zm-5.171875 -4.828125q0 1.859375 0.78125 2.78125q0.78125 0.921875 1.84375 0.921875q1.078125 0 1.828125 -0.875q0.75 -0.890625 0.75 -2.6875q0 -1.984375 -0.765625 -2.90625q-0.765625 -0.9375 -1.890625 -0.9375q-1.078125 0 -1.8125 0.890625q-0.734375 0.890625 -0.734375 2.8125zm9.235107 4.828125l0 -13.359375l1.640625 0l0 13.359375l-1.640625 0zm10.81665 -3.109375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm13.996582 -0.734375q0 -3.328125 1.78125 -5.203125q1.78125 -1.890625 4.609375 -1.890625q1.84375 0 3.328125 0.890625q1.484375 0.875 2.265625 2.46875q0.78125 1.578125 0.78125 3.578125q0 2.03125 -0.828125 3.640625q-0.8125 1.59375 -2.3125 2.421875q-1.5 0.828125 -3.25 0.828125q-1.875 0 -3.359375 -0.90625q-1.484375 -0.921875 -2.25 -2.5q-0.765625 -1.578125 -0.765625 -3.328125zm1.8125 0.015625q0 2.421875 1.296875 3.8125q1.296875 1.390625 3.265625 1.390625q2.0 0 3.28125 -1.40625q1.28125 -1.40625 1.28125 -3.984375q0 -1.625 -0.546875 -2.84375q-0.546875 -1.21875 -1.609375 -1.875q-1.0625 -0.671875 -2.375 -0.671875q-1.890625 0 -3.25 1.296875q-1.34375 1.28125 -1.34375 4.28125zm14.526978 6.484375l-1.515625 0l0 -13.359375l1.640625 0l0 4.765625q1.046875 -1.296875 2.65625 -1.296875q0.890625 0 1.6875 0.359375q0.796875 0.359375 1.3125 1.015625q0.515625 0.640625 0.796875 1.5625q0.296875 0.921875 0.296875 1.96875q0 2.484375 -1.234375 3.84375q-1.21875 1.359375 -2.953125 1.359375q-1.703125 0 -2.6875 -1.4375l0 1.21875zm-0.015625 -4.90625q0 1.734375 0.484375 2.515625q0.765625 1.265625 2.09375 1.265625q1.078125 0 1.859375 -0.9375q0.78125 -0.9375 0.78125 -2.78125q0 -1.890625 -0.75 -2.796875q-0.75 -0.90625 -1.828125 -0.90625q-1.0625 0 -1.859375 0.9375q-0.78125 0.9375 -0.78125 2.703125zm8.875732 -6.546875l0 -1.90625l1.640625 0l0 1.90625l-1.640625 0zm-2.078125 15.203125l0.3125 -1.390625q0.5 0.125 0.78125 0.125q0.5 0 0.734375 -0.328125q0.25 -0.328125 0.25 -1.671875l0 -10.15625l1.640625 0l0 10.203125q0 1.78125 -0.46875 2.484375q-0.59375 0.90625 -1.96875 0.90625q-0.65625 0 -1.28125 -0.171875zm12.863647 -6.859375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm15.453857 2.21875l1.609375 0.21875q-0.265625 1.65625 -1.359375 2.609375q-1.078125 0.9375 -2.671875 0.9375q-1.984375 0 -3.1875 -1.296875q-1.203125 -1.296875 -1.203125 -3.71875q0 -1.578125 0.515625 -2.75q0.515625 -1.171875 1.578125 -1.75q1.0625 -0.59375 2.3125 -0.59375q1.578125 0 2.578125 0.796875q1.0 0.796875 1.28125 2.265625l-1.59375 0.234375q-0.234375 -0.96875 -0.8125 -1.453125q-0.578125 -0.5 -1.390625 -0.5q-1.234375 0 -2.015625 0.890625q-0.78125 0.890625 -0.78125 2.8125q0 1.953125 0.75 2.84375q0.75 0.875 1.953125 0.875q0.96875 0 1.609375 -0.59375q0.65625 -0.59375 0.828125 -1.828125zm6.59375 2.078125l0.234375 1.453125q-0.6875 0.140625 -1.234375 0.140625q-0.890625 0 -1.390625 -0.28125q-0.484375 -0.28125 -0.6875 -0.734375q-0.203125 -0.46875 -0.203125 -1.9375l0 -5.578125l-1.203125 0l0 -1.265625l1.203125 0l0 -2.390625l1.625 -0.984375l0 3.375l1.65625 0l0 1.265625l-1.65625 0l0 5.671875q0 0.6875 0.078125 0.890625q0.09375 0.203125 0.28125 0.328125q0.203125 0.109375 0.578125 0.109375q0.265625 0 0.71875 -0.0625z" fill-rule="nonzero"/><path fill="#cfe2f3" d="m17.097113 165.21548l0 0c0 -7.23349 5.8638954 -13.097382 13.097376 -13.097382l350.56116 0c3.4736328 0 6.8049927 1.3798981 9.26123 3.8361359c2.4562378 2.4562378 3.8361511 5.7875977 3.8361511 9.261246l0 52.387924c0 7.2334747 -5.8638916 13.097366 -13.097382 13.097366l-350.56116 0c-7.2334805 0 -13.097376 -5.8638916 -13.097376 -13.097366z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m17.097113 165.21548l0 0c0 -7.23349 5.8638954 -13.097382 13.097376 -13.097382l350.56116 0c3.4736328 0 6.8049927 1.3798981 9.26123 3.8361359c2.4562378 2.4562378 3.8361511 5.7875977 3.8361511 9.261246l0 52.387924c0 7.2334747 -5.8638916 13.097366 -13.097382 13.097366l-350.56116 0c-7.2334805 0 -13.097376 -5.8638916 -13.097376 -13.097366z" fill-rule="evenodd"/><path fill="#000000" d="m111.94566 198.32944l0 -13.359375l1.78125 0l0 6.625l6.625 -6.625l2.390625 0l-5.59375 5.421875l5.84375 7.9375l-2.328125 0l-4.765625 -6.765625l-2.171875 2.140625l0 4.625l-1.78125 0zm18.646698 0l0 -1.421875q-1.125 1.640625 -3.0625 1.640625q-0.859375 0 -1.609375 -0.328125q-0.734375 -0.328125 -1.09375 -0.828125q-0.359375 -0.5 -0.5 -1.21875q-0.109375 -0.46875 -0.109375 -1.53125l0 -5.984375l1.640625 0l0 5.359375q0 1.28125 0.109375 1.734375q0.15625 0.640625 0.65625 1.015625q0.5 0.375 1.234375 0.375q0.734375 0 1.375 -0.375q0.65625 -0.390625 0.921875 -1.03125q0.265625 -0.65625 0.265625 -1.890625l0 -5.1875l1.640625 0l0 9.671875l-1.46875 0zm5.547592 0l-1.515625 0l0 -13.359375l1.640625 0l0 4.765625q1.046875 -1.296875 2.65625 -1.296875q0.890625 0 1.6875 0.359375q0.796875 0.359375 1.3125 1.015625q0.515625 0.640625 0.796875 1.5625q0.296875 0.921875 0.296875 1.96875q0 2.484375 -1.234375 3.84375q-1.21875 1.359375 -2.953125 1.359375q-1.703125 0 -2.6875 -1.4375l0 1.21875zm-0.015625 -4.90625q0 1.734375 0.484375 2.515625q0.765625 1.265625 2.09375 1.265625q1.078125 0 1.859375 -0.9375q0.78125 -0.9375 0.78125 -2.78125q0 -1.890625 -0.75 -2.796875q-0.75 -0.90625 -1.828125 -0.90625q-1.0625 0 -1.859375 0.9375q-0.78125 0.9375 -0.78125 2.703125zm15.516327 1.796875l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.1249847 0 -3.3749847 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.2656097 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.2187347 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.0156097 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.3906097 -2.65625l5.4062347 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.1249847 0 -1.9062347 0.765625q-0.765625 0.75 -0.84375 2.015625zm9.125717 5.765625l0 -9.671875l1.46875 0l0 1.46875q0.5625 -1.03125 1.03125 -1.359375q0.484375 -0.328125 1.0625 -0.328125q0.828125 0 1.6875 0.53125l-0.5625 1.515625q-0.609375 -0.359375 -1.203125 -0.359375q-0.546875 0 -0.96875 0.328125q-0.421875 0.328125 -0.609375 0.890625q-0.28125 0.875 -0.28125 1.921875l0 5.0625l-1.625 0zm6.228302 0l0 -9.671875l1.46875 0l0 1.375q1.0625 -1.59375 3.078125 -1.59375q0.875 0 1.609375 0.3125q0.734375 0.3125 1.09375 0.828125q0.375 0.5 0.515625 1.203125q0.09375 0.453125 0.09375 1.59375l0 5.953125l-1.640625 0l0 -5.890625q0 -1.0 -0.203125 -1.484375q-0.1875 -0.5 -0.671875 -0.796875q-0.484375 -0.296875 -1.140625 -0.296875q-1.046875 0 -1.8125 0.671875q-0.75 0.65625 -0.75 2.515625l0 5.28125l-1.640625 0zm17.000702 -3.109375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm12.719482 4.296875l0.234375 1.453125q-0.6875 0.140625 -1.234375 0.140625q-0.890625 0 -1.390625 -0.28125q-0.484375 -0.28125 -0.6875 -0.734375q-0.203125 -0.46875 -0.203125 -1.9375l0 -5.578125l-1.203125 0l0 -1.265625l1.203125 0l0 -2.390625l1.625 -0.984375l0 3.375l1.65625 0l0 1.265625l-1.65625 0l0 5.671875q0 0.6875 0.078125 0.890625q0.09375 0.203125 0.28125 0.328125q0.203125 0.109375 0.578125 0.109375q0.265625 0 0.71875 -0.0625zm8.230164 -1.640625l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm8.485107 2.875l1.625 -0.25q0.125 0.96875 0.75 1.5q0.625 0.515625 1.75 0.515625q1.125 0 1.671875 -0.453125q0.546875 -0.46875 0.546875 -1.09375q0 -0.546875 -0.484375 -0.875q-0.328125 -0.21875 -1.671875 -0.546875q-1.8125 -0.46875 -2.515625 -0.796875q-0.6875 -0.328125 -1.046875 -0.90625q-0.359375 -0.59375 -0.359375 -1.3125q0 -0.640625 0.296875 -1.1875q0.296875 -0.5625 0.8125 -0.921875q0.375 -0.28125 1.03125 -0.46875q0.671875 -0.203125 1.421875 -0.203125q1.140625 0 2.0 0.328125q0.859375 0.328125 1.265625 0.890625q0.421875 0.5625 0.578125 1.5l-1.609375 0.21875q-0.109375 -0.75 -0.640625 -1.171875q-0.515625 -0.421875 -1.46875 -0.421875q-1.140625 0 -1.625 0.375q-0.46875 0.375 -0.46875 0.875q0 0.3125 0.1875 0.578125q0.203125 0.265625 0.640625 0.4375q0.234375 0.09375 1.4375 0.421875q1.75 0.453125 2.4375 0.75q0.6875 0.296875 1.078125 0.859375q0.390625 0.5625 0.390625 1.40625q0 0.828125 -0.484375 1.546875q-0.46875 0.71875 -1.375 1.125q-0.90625 0.390625 -2.046875 0.390625q-1.875 0 -2.875 -0.78125q-0.984375 -0.78125 -1.25 -2.328125zm12.872101 2.890625l5.125 -13.359375l1.90625 0l5.46875 13.359375l-2.015625 0l-1.546875 -4.046875l-5.59375 0l-1.46875 4.046875l-1.875 0zm3.859375 -5.484375l4.53125 0l-1.40625 -3.703125q-0.625 -1.6875 -0.9375 -2.765625q-0.265625 1.28125 -0.71875 2.546875l-1.46875 3.921875zm10.052948 5.484375l0 -13.359375l5.046875 0q1.328125 0 2.03125 0.125q0.96875 0.171875 1.640625 0.640625q0.671875 0.453125 1.078125 1.28125q0.40625 0.828125 0.40625 1.828125q0 1.703125 -1.09375 2.890625q-1.078125 1.171875 -3.921875 1.171875l-3.421875 0l0 5.421875l-1.765625 0zm1.765625 -7.0l3.453125 0q1.71875 0 2.4375 -0.640625q0.71875 -0.640625 0.71875 -1.796875q0 -0.84375 -0.421875 -1.4375q-0.421875 -0.59375 -1.125 -0.78125q-0.4375 -0.125 -1.640625 -0.125l-3.421875 0l0 4.78125zm10.974823 7.0l0 -13.359375l1.765625 0l0 13.359375l-1.765625 0zm9.475983 -4.296875l1.65625 -0.140625q0.125 1.0 0.546875 1.640625q0.4375 0.640625 1.34375 1.046875q0.921875 0.390625 2.0625 0.390625q1.0 0 1.78125 -0.296875q0.78125 -0.296875 1.15625 -0.8125q0.375 -0.53125 0.375 -1.15625q0 -0.625 -0.375 -1.09375q-0.359375 -0.46875 -1.1875 -0.796875q-0.546875 -0.203125 -2.390625 -0.640625q-1.828125 -0.453125 -2.5625 -0.84375q-0.96875 -0.5 -1.4375 -1.234375q-0.46875 -0.75 -0.46875 -1.671875q0 -1.0 0.578125 -1.875q0.578125 -0.890625 1.671875 -1.34375q1.109375 -0.453125 2.453125 -0.453125q1.484375 0 2.609375 0.484375q1.140625 0.46875 1.75 1.40625q0.609375 0.921875 0.65625 2.09375l-1.6875 0.125q-0.140625 -1.265625 -0.9375 -1.90625q-0.78125 -0.65625 -2.3125 -0.65625q-1.609375 0 -2.34375 0.59375q-0.734375 0.59375 -0.734375 1.421875q0 0.71875 0.53125 1.171875q0.5 0.46875 2.65625 0.96875q2.15625 0.484375 2.953125 0.84375q1.171875 0.53125 1.71875 1.359375q0.5625 0.828125 0.5625 1.90625q0 1.0625 -0.609375 2.015625q-0.609375 0.9375 -1.75 1.46875q-1.140625 0.515625 -2.578125 0.515625q-1.8125 0 -3.046875 -0.53125q-1.21875 -0.53125 -1.921875 -1.59375q-0.6875 -1.0625 -0.71875 -2.40625zm19.459198 1.1875l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm9.125702 5.765625l0 -9.671875l1.46875 0l0 1.46875q0.5625 -1.03125 1.03125 -1.359375q0.484375 -0.328125 1.0625 -0.328125q0.828125 0 1.6875 0.53125l-0.5625 1.515625q-0.609375 -0.359375 -1.203125 -0.359375q-0.546875 0 -0.96875 0.328125q-0.421875 0.328125 -0.609375 0.890625q-0.28125 0.875 -0.28125 1.921875l0 5.0625l-1.625 0zm8.915802 0l-3.6875 -9.671875l1.734375 0l2.078125 5.796875q0.328125 0.9375 0.625 1.9375q0.203125 -0.765625 0.609375 -1.828125l2.140625 -5.90625l1.6875 0l-3.65625 9.671875l-1.53125 0zm13.265625 -3.109375l1.6875 0.203125q-0.40625 1.484375 -1.484375 2.3125q-1.078125 0.8125 -2.765625 0.8125q-2.125 0 -3.375 -1.296875q-1.234375 -1.3125 -1.234375 -3.671875q0 -2.453125 1.25 -3.796875q1.265625 -1.34375 3.265625 -1.34375q1.9375 0 3.15625 1.328125q1.234375 1.3125 1.234375 3.703125q0 0.15625 0 0.4375l-7.21875 0q0.09375 1.59375 0.90625 2.453125q0.8125 0.84375 2.015625 0.84375q0.90625 0 1.546875 -0.46875q0.640625 -0.484375 1.015625 -1.515625zm-5.390625 -2.65625l5.40625 0q-0.109375 -1.21875 -0.625 -1.828125q-0.78125 -0.953125 -2.03125 -0.953125q-1.125 0 -1.90625 0.765625q-0.765625 0.75 -0.84375 2.015625zm9.125732 5.765625l0 -9.671875l1.46875 0l0 1.46875q0.5625 -1.03125 1.03125 -1.359375q0.484375 -0.328125 1.0625 -0.328125q0.828125 0 1.6875 0.53125l-0.5625 1.515625q-0.609375 -0.359375 -1.203125 -0.359375q-0.546875 0 -0.96875 0.328125q-0.421875 0.328125 -0.609375 0.890625q-0.28125 0.875 -0.28125 1.921875l0 5.0625l-1.625 0z" fill-rule="nonzero"/><path fill="#cfe2f3" d="m238.82364 237.80362l0 145.33856l33.362213 0l-66.72441 66.72443l-66.72441 -66.72443l33.362198 0l0 -145.33856z" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m238.82364 237.80362l0 145.33856l33.362213 0l-66.72441 66.72443l-66.72441 -66.72443l33.362198 0l0 -145.33856z" fill-rule="evenodd"/><path fill="#000000" d="m202.83832 255.93253l0.140625 1.65625q-1.0 0.125 -1.640625 0.546875q-0.640625 0.4375 -1.046875 1.34375q-0.390625 0.921875 -0.390625 2.0625q0 1.0 0.296875 1.78125q0.296875 0.78125 0.8125 1.15625q0.53125 0.375 1.15625 0.375q0.625 0 1.09375 -0.375q0.46875 -0.359375 0.796875 -1.1875q0.203125 -0.546875 0.640625 -2.390625q0.453125 -1.828125 0.84375 -2.5625q0.5 -0.96875 1.234375 -1.4375q0.75 -0.46875 1.671875 -0.46875q1.0 0 1.875 0.578125q0.890625 0.578125 1.34375 1.671875q0.453125 1.109375 0.453125 2.453125q0 1.484375 -0.484375 2.609375q-0.46875 1.140625 -1.40625 1.75q-0.921875 0.609375 -2.09375 0.65625l-0.125 -1.6875q1.265625 -0.140625 1.90625 -0.9375q0.65625 -0.78125 0.65625 -2.3125q0 -1.609375 -0.59375 -2.34375q-0.59375 -0.734375 -1.421875 -0.734375q-0.71875 0 -1.171875 0.53125q-0.46875 0.5 -0.96875 2.65625q-0.484375 2.15625 -0.84375 2.953125q-0.53125 1.171875 -1.359375 1.71875q-0.828125 0.5625 -1.90625 0.5625q-1.0625 0 -2.015625 -0.609375q-0.9375 -0.609375 -1.46875 -1.75q-0.515625 -1.140625 -0.515625 -2.578125q0 -1.8125 0.53125 -3.046875q0.53125 -1.21875 1.59375 -1.921875q1.0625 -0.6875 2.40625 -0.71875zm-4.296875 12.834198l13.359375 0l0 1.640625l-4.796875 0q1.328125 1.140625 1.328125 2.890625q0 1.078125 -0.421875 1.859375q-0.421875 0.796875 -1.171875 1.140625q-0.75 0.34375 -2.171875 0.34375l-6.125 0l0 -1.640625l6.125 0q1.234375 0 1.796875 -0.53125q0.5625 -0.53125 0.5625 -1.515625q0 -0.71875 -0.390625 -1.359375q-0.375 -0.640625 -1.015625 -0.921875q-0.640625 -0.265625 -1.78125 -0.265625l-5.296875 0l0 -1.640625zm1.1875 16.688232q-0.765625 -0.921875 -1.09375 -1.765625q-0.3125 -0.828125 -0.3125 -1.796875q0 -1.59375 0.78125 -2.453125q0.78125 -0.859375 1.984375 -0.859375q0.71875 0 1.296875 0.328125q0.59375 0.328125 0.9375 0.84375q0.359375 0.53125 0.546875 1.1875q0.125 0.46875 0.25 1.453125q0.234375 1.984375 0.5625 2.921875q0.34375 0.015625 0.421875 0.015625q1.0 0 1.421875 -0.46875q0.546875 -0.625 0.546875 -1.875q0 -1.15625 -0.40625 -1.703125q-0.40625 -0.546875 -1.421875 -0.8125l0.21875 -1.609375q1.015625 0.21875 1.640625 0.71875q0.640625 0.5 0.984375 1.453125q0.34375 0.953125 0.34375 2.1875q0 1.25 -0.296875 2.015625q-0.28125 0.78125 -0.734375 1.140625q-0.4375 0.375 -1.109375 0.515625q-0.421875 0.078125 -1.515625 0.078125l-2.1875 0q-2.28125 0 -2.890625 0.109375q-0.59375 0.109375 -1.15625 0.40625l0 -1.703125q0.515625 -0.265625 1.1875 -0.328125zm3.671875 -0.140625q-0.375 -0.890625 -0.625 -2.671875q-0.140625 -1.015625 -0.328125 -1.4375q-0.1875 -0.421875 -0.53125 -0.65625q-0.34375 -0.21875 -0.78125 -0.21875q-0.65625 0 -1.09375 0.5q-0.4375 0.5 -0.4375 1.453125q0 0.9375 0.40625 1.671875q0.421875 0.75 1.140625 1.09375q0.5625 0.265625 1.640625 0.265625l0.609375 0zm-4.859375 4.188202l9.671875 0l0 1.46875l-1.46875 0q1.03125 0.5625 1.359375 1.03125q0.328125 0.484375 0.328125 1.0625q0 0.828125 -0.53125 1.6875l-1.515625 -0.5625q0.359375 -0.609375 0.359375 -1.203125q0 -0.546875 -0.328125 -0.96875q-0.328125 -0.421875 -0.890625 -0.609375q-0.875 -0.28125 -1.921875 -0.28125l-5.0625 0l0 -1.625zm3.109375 12.853302l-0.203125 1.6875q-1.484375 -0.40625 -2.3125 -1.484375q-0.8125 -1.078125 -0.8125 -2.765625q0 -2.125 1.296875 -3.375q1.3125 -1.234375 3.671875 -1.234375q2.453125 0 3.796875 1.25q1.34375 1.265625 1.34375 3.265625q0 1.9375 -1.328125 3.15625q-1.3125 1.234375 -3.703125 1.234375q-0.15625 0 -0.4375 0l0 -7.21875q-1.59375 0.09375 -2.453125 0.90625q-0.84375 0.8125 -0.84375 2.015625q0 0.90625 0.46875 1.546875q0.484375 0.640625 1.515625 1.015625zm2.65625 -5.390625l0 5.40625q1.21875 -0.109375 1.828125 -0.625q0.953125 -0.78125 0.953125 -2.03125q0 -1.125 -0.765625 -1.90625q-0.75 -0.765625 -2.015625 -0.84375zm-5.765625 15.406982l1.21875 0q-1.4375 -0.90625 -1.4375 -2.703125q0 -1.15625 0.640625 -2.125q0.640625 -0.96875 1.78125 -1.5q1.140625 -0.53125 2.625 -0.53125q1.453125 0 2.625 0.484375q1.1875 0.484375 1.8125 1.4375q0.625 0.96875 0.625 2.171875q0 0.875 -0.375 1.546875q-0.359375 0.6875 -0.953125 1.109375l4.796875 0l0 1.640625l-13.359375 0l0 -1.53125zm4.828125 -5.171875q-1.859375 0 -2.78125 0.78125q-0.921875 0.78125 -0.921875 1.84375q0 1.078125 0.875 1.828125q0.890625 0.75 2.6875 0.75q1.984375 0 2.90625 -0.765625q0.9375 -0.765625 0.9375 -1.890625q0 -1.078125 -0.890625 -1.8125q-0.890625 -0.734375 -2.8125 -0.734375zm-4.828125 14.965271l13.359375 0l0 1.765625l-13.359375 0l0 -1.765625zm0 4.6832886l9.671875 0l0 1.46875l-1.375 0q1.59375 1.0625 1.59375 3.078125q0 0.875 -0.3125 1.609375q-0.3125 0.734375 -0.828125 1.09375q-0.5 0.375 -1.203125 0.515625q-0.453125 0.09375 -1.59375 0.09375l-5.953125 0l0 -1.640625l5.890625 0q1.0 0 1.484375 -0.203125q0.5 -0.1875 0.796875 -0.671875q0.296875 -0.484375 0.296875 -1.140625q0 -1.046875 -0.671875 -1.8125q-0.65625 -0.75 -2.515625 -0.75l-5.28125 0l0 -1.640625zm0 10.766357l8.40625 0l0 -1.453125l1.265625 0l0 1.453125l1.03125 0q0.96875 0 1.453125 0.171875q0.640625 0.234375 1.03125 0.828125q0.390625 0.59375 0.390625 1.671875q0 0.6875 -0.15625 1.53125l-1.4375 -0.25q0.09375 -0.5 0.09375 -0.953125q0 -0.75 -0.328125 -1.0625q-0.3125 -0.3125 -1.1875 -0.3125l-0.890625 0l0 1.890625l-1.265625 0l0 -1.890625l-8.40625 0l0 -1.625zm4.84375 4.1832886q2.6875 0 3.96875 1.484375q1.078125 1.25 1.078125 3.046875q0 2.0 -1.3125 3.265625q-1.296875 1.265625 -3.609375 1.265625q-1.859375 0 -2.9375 -0.5625q-1.0625 -0.5625 -1.65625 -1.640625q-0.59375 -1.0625 -0.59375 -2.328125q0 -2.03125 1.296875 -3.28125q1.3125 -1.25 3.765625 -1.25zm0 1.6875q-1.859375 0 -2.796875 0.796875q-0.921875 0.8125 -0.921875 2.046875q0 1.21875 0.921875 2.03125q0.9375 0.8125 2.84375 0.8125q1.796875 0 2.71875 -0.8125q0.921875 -0.8125 0.921875 -2.03125q0 -1.234375 -0.921875 -2.046875q-0.90625 -0.796875 -2.765625 -0.796875zm-4.84375 9.281982l9.671875 0l0 1.46875l-1.46875 0q1.03125 0.5625 1.359375 1.03125q0.328125 0.484375 0.328125 1.0625q0 0.828125 -0.53125 1.6875l-1.515625 -0.5625q0.359375 -0.609375 0.359375 -1.203125q0 -0.546875 -0.328125 -0.96875q-0.328125 -0.421875 -0.890625 -0.609375q-0.875 -0.28125 -1.921875 -0.28125l-5.0625 0l0 -1.625zm0 6.228302l9.671875 0l0 1.46875l-1.359375 0q0.71875 0.453125 1.140625 1.203125q0.4375 0.765625 0.4375 1.71875q0 1.078125 -0.453125 1.765625q-0.4375 0.6875 -1.234375 0.96875q1.6875 1.15625 1.6875 2.984375q0 1.453125 -0.796875 2.21875q-0.796875 0.78125 -2.453125 0.78125l-6.640625 0l0 -1.640625l6.09375 0q0.984375 0 1.40625 -0.15625q0.4375 -0.15625 0.703125 -0.578125q0.265625 -0.421875 0.265625 -0.984375q0 -1.015625 -0.6875 -1.6875q-0.671875 -0.671875 -2.15625 -0.671875l-5.625 0l0 -1.640625l6.28125 0q1.09375 0 1.640625 -0.40625q0.546875 -0.40625 0.546875 -1.3125q0 -0.6875 -0.359375 -1.28125q-0.359375 -0.59375 -1.0625 -0.859375q-0.703125 -0.25 -2.03125 -0.25l-5.015625 0l0 -1.640625zm3.109375 22.165802l-0.203125 1.6875q-1.484375 -0.40625 -2.3125 -1.484375q-0.8125 -1.078125 -0.8125 -2.765625q0 -2.125 1.296875 -3.375q1.3125 -1.234375 3.671875 -1.234375q2.453125 0 3.796875 1.25q1.34375 1.265625 1.34375 3.265625q0 1.9375 -1.328125 3.15625q-1.3125 1.234375 -3.703125 1.234375q-0.15625 0 -0.4375 0l0 -7.21875q-1.59375 0.09375 -2.453125 0.90625q-0.84375 0.8125 -0.84375 2.015625q0 0.90625 0.46875 1.546875q0.484375 0.640625 1.515625 1.015625zm2.65625 -5.390625l0 5.40625q1.21875 -0.109375 1.828125 -0.625q0.953125 -0.78125 0.953125 -2.03125q0 -1.125 -0.765625 -1.90625q-0.75 -0.765625 -2.015625 -0.84375zm-5.765625 9.125702l9.671875 0l0 1.46875l-1.46875 0q1.03125 0.5625 1.359375 1.03125q0.328125 0.484375 0.328125 1.0625q0 0.828125 -0.53125 1.6875l-1.515625 -0.5625q0.359375 -0.609375 0.359375 -1.203125q0 -0.546875 -0.328125 -0.96875q-0.328125 -0.421875 -0.890625 -0.609375q-0.875 -0.28125 -1.921875 -0.28125l-5.0625 0l0 -1.625zm2.890625 5.572052l0.25 1.625q-0.96875 0.125 -1.5 0.75q-0.515625 0.625 -0.515625 1.75q0 1.125 0.453125 1.671875q0.46875 0.546875 1.09375 0.546875q0.546875 0 0.875 -0.484375q0.21875 -0.328125 0.546875 -1.671875q0.46875 -1.8125 0.796875 -2.515625q0.328125 -0.6875 0.90625 -1.046875q0.59375 -0.359375 1.3125 -0.359375q0.640625 0 1.1875 0.296875q0.5625 0.296875 0.921875 0.8125q0.28125 0.375 0.46875 1.03125q0.203125 0.671875 0.203125 1.421875q0 1.140625 -0.328125 2.0q-0.328125 0.859375 -0.890625 1.265625q-0.5625 0.421875 -1.5 0.578125l-0.21875 -1.609375q0.75 -0.109375 1.171875 -0.640625q0.421875 -0.515625 0.421875 -1.46875q0 -1.140625 -0.375 -1.625q-0.375 -0.46875 -0.875 -0.46875q-0.3125 0 -0.578125 0.1875q-0.265625 0.203125 -0.4375 0.640625q-0.09375 0.234375 -0.421875 1.4375q-0.453125 1.75 -0.75 2.4375q-0.296875 0.6875 -0.859375 1.078125q-0.5625 0.390625 -1.40625 0.390625q-0.828125 0 -1.546875 -0.484375q-0.71875 -0.46875 -1.125 -1.375q-0.390625 -0.90625 -0.390625 -2.046875q0 -1.875 0.78125 -2.875q0.78125 -0.984375 2.328125 -1.25z" fill-rule="nonzero"/><path fill="#000000" fill-opacity="0.0" d="m878.15216 617.6049l103.84253 0" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m878.15216 617.6049l97.84253 0" fill-rule="evenodd"/><path fill="#000000" stroke="#000000" stroke-width="1.0" stroke-linecap="butt" d="m975.9947 619.25665l4.538086 -1.6517334l-4.538086 -1.6517334z" fill-rule="evenodd"/><path fill="#000000" fill-opacity="0.0" d="m334.6116 619.66956l101.5748 -2.0787354" fill-rule="evenodd"/><path stroke="#000000" stroke-width="1.0" stroke-linejoin="round" stroke-linecap="butt" d="m334.6116 619.66956l95.57605 -1.9559937" fill-rule="evenodd"/><path fill="#000000" stroke="#000000" stroke-width="1.0" stroke-linecap="butt" d="m430.22144 619.3649l4.503357 -1.7442017l-4.5709534 -1.5585327z" fill-rule="evenodd"/></g></svg>
\ No newline at end of file
diff --git a/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md
new file mode 100644
index 0000000000..d6a245cbf7
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md
@@ -0,0 +1,105 @@
+---
+layout: blog
+title: 'Kubernetes 1.21: CronJob Reaches GA'
+date: 2021-04-09
+slug: kubernetes-release-1.21-cronjob-ga
+---
+
+ **Authors:** Alay Patel (Red Hat), and Maciej Szulik (Red Hat)
+
+In Kubernetes v1.21, the 
+[CronJob](/docs/concepts/workloads/controllers/cron-jobs/) resource
+reached general availability (GA). We've also substantially improved the 
+performance of CronJobs since Kubernetes v1.19, by implementing a new
+controller.
+
+In Kubernetes v1.20 we launched a revised v2 controller for CronJobs, 
+initially as an alpha feature. Kubernetes 1.21 uses the newer controller by
+default, and the CronJob resource itself is now GA (group version: `batch/v1`).
+
+In this article, we'll take you through the driving forces behind this new
+development, give you a brief description of controller design for core 
+Kubernetes, and we'll outline what you will gain from this improved controller.
+
+The driving force behind promoting the API was Kubernetes' policy choice to
+[ensure APIs move beyond beta](/blog/2020/08/21/moving-forward-from-beta/).
+That policy aims to prevent APIs from being stuck in a “permanent beta” state.
+Over the years the old CronJob controller implementation had received healthy
+feedback from the community, with reports of several widely recognized
+[issues](https://github.com/kubernetes/kubernetes/issues/82659).
+
+If the beta API for CronJob was to be supported as GA, the existing controller
+code would need substantial rework. Instead, the SIG Apps community decided
+to introduce a new controller and gradually replace the old one.
+
+## How do controllers work?
+
+Kubernetes [controllers](/docs/concepts/architecture/controller/) are control
+loops that watch the state of resource(s) in your cluster, then make or
+request changes where needed. Each controller tries to move part of the
+current cluster state closer to the desired state.
+
+The v1 CronJob controller works by performing a periodic poll and sweep of all
+the CronJob objects in your cluster, in order to act on them. It is a single
+worker implementation that gets all CronJobs  every 10 seconds, iterates over
+each one of them, and syncs them to their desired state. This was the default 
+way of doing things almost 5 years ago when the controller was initially
+written. In hindsight, we can certainly say that such an approach can
+overload the API server at scale.
+
+These days, every core controller in kubernetes must follow the guidelines 
+described in [Writing Controllers](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/controllers.md#readme).
+Among many details, that document prescribes using
+[shared informers](https://www.cncf.io/blog/2019/10/15/extend-kubernetes-via-a-shared-informer/)
+to “receive notifications of adds, updates, and deletes for a particular
+resource”. Upon any such events, the related object(s) is placed in a queue. 
+Workers pull items from the queue and process them one at a time. This
+approach ensures consistency and scalability.
+ 
+The picture below shows the flow of information from kubernetes API server, 
+through shared informers and queue, to the main part of a controller - a 
+reconciliation loop which is responsible for performing the core functionality.
+
+![Controller flowchart](controller-flowchart.svg)
+
+The CronJob controller V2 uses a queue that implements the DelayingInterface to 
+handle the scheduling aspect. This queue allows processing an element after a 
+specific time interval. Every time there is a change in a CronJob or its related
+Jobs, the key that represents the CronJob is pushed to the queue. The main 
+handler pops the key, processes the CronJob, and after completion 
+pushes the key back into the queue for the next scheduled time interval. This is
+immediately a more performant implementation, as it no longer requires a linear 
+scan of all the CronJobs. On top of that, this controller can be scaled by 
+increasing the number of workers processing the CronJobs in parallel.
+
+## Performance impact of the new controller {#performance-impact}
+
+In order to test the performance difference of the two controllers a VM instance
+with 128 GiB RAM and 64 vCPUs was used to set up a single node Kubernetes cluster.
+Initially, a sample workload was created with 20 CronJob instances with a schedule
+to run every minute, and 2100 CronJobs running every 20 hours. Additionally, 
+over the next few minutes we added 1000 CronJobs with a schedule to run every 
+20 hours, until we reached a total of 5120 CronJobs. 
+
+![Visualization of performance](performance-impact-graph.svg)
+
+We observed that for every 1000 CronJobs added, the old controller used 
+around 90 to 120 seconds more wall-clock time to schedule 20 Jobs every cycle.
+That is, at 5120 CronJobs, the old controller took approximately 9 minutes
+to create 20 Jobs. Hence, during each cycle, about 8 schedules were missed.
+The new controller, implemented with architectural change explained above, 
+created 20 Jobs without any delay, even when we created an additional batch
+of 1000 CronJobs reaching a total of 6120. 
+
+As a closing remark, the new controller exposes a histogram metric 
+`cronjob_controller_cronjob_job_creation_skew_duration_seconds` which helps 
+monitor the time difference between when a CronJob is meant to run and when 
+the actual Job is created.
+
+Hopefully the above description is a sufficient argument to follow the 
+guidelines and standards set in the Kubernetes project, even for your own 
+controllers. As mentioned before, the new controller is on by default starting
+from Kubernetes v1.21; if you want to check it out in the previous release (1.20),
+you can enable the `CronJobControllerV2`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) 
+for the kube-controller-manger: `--feature-gate="CronJobControllerV2=true"`.
diff --git a/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/performance-impact-graph.svg b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/performance-impact-graph.svg
new file mode 100644
index 0000000000..976b428d91
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/performance-impact-graph.svg
@@ -0,0 +1 @@
+<svg version="1.1" viewBox="0.0 0.0 600.0 371.0" fill="none" stroke="none" stroke-linecap="square" stroke-miterlimit="10" width="600" height="371" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"><path fill="#ffffff" d="M0 0L600.0 0L600.0 371.0L0 371.0L0 0Z" fill-rule="nonzero"/><path stroke="#333333" stroke-width="1.0" stroke-linecap="butt" d="M45.5 300.5L581.5 300.5" fill-rule="nonzero"/><path stroke="#cccccc" stroke-width="1.0" stroke-linecap="butt" d="M45.5 261.5L581.5 261.5" fill-rule="nonzero"/><path stroke="#cccccc" stroke-width="1.0" stroke-linecap="butt" d="M45.5 222.5L581.5 222.5" fill-rule="nonzero"/><path stroke="#cccccc" stroke-width="1.0" stroke-linecap="butt" d="M45.5 183.5L581.5 183.5" fill-rule="nonzero"/><path stroke="#cccccc" stroke-width="1.0" stroke-linecap="butt" d="M45.5 145.5L581.5 145.5" fill-rule="nonzero"/><path stroke="#cccccc" stroke-width="1.0" stroke-linecap="butt" d="M45.5 106.5L581.5 106.5" fill-rule="nonzero"/><clipPath id="id_0"><path d="M45.55 106.28333L581.45 106.28333L581.45 300.45L45.55 300.45L45.55 106.28333Z" clip-rule="nonzero"/></clipPath><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M102.0 300.0L77.0 300.0L77.0 283.0C77.0 281.89542 77.89543 281.0 79.0 281.0L100.0 281.0C101.10457 281.0 102.0 281.89542 102.0 283.0Z" fill-rule="nonzero"/><path fill="#4285f4" clip-path="url(#id_0)" d="M102.0 300.0L77.0 300.0L77.0 283.0C77.0 281.89542 77.89543 281.0 79.0 281.0L100.0 281.0C101.10457 281.0 102.0 281.89542 102.0 283.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M186.0 300.0L161.0 300.0L161.0 283.0C161.0 281.89542 161.89543 281.0 163.0 281.0L184.0 281.0C185.10457 281.0 186.0 281.89542 186.0 283.0Z" fill-rule="nonzero"/><path fill="#4285f4" clip-path="url(#id_0)" d="M186.0 300.0L161.0 300.0L161.0 283.0C161.0 281.89542 161.89543 281.0 163.0 281.0L184.0 281.0C185.10457 281.0 186.0 281.89542 186.0 283.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M270.0 300.0L245.0 300.0L245.0 244.0C245.0 242.89543 245.89543 242.0 247.0 242.0L268.0 242.0C269.10458 242.0 270.0 242.89543 270.0 244.0Z" fill-rule="nonzero"/><path fill="#4285f4" clip-path="url(#id_0)" d="M270.0 300.0L245.0 300.0L245.0 244.0C245.0 242.89543 245.89543 242.0 247.0 242.0L268.0 242.0C269.10458 242.0 270.0 242.89543 270.0 244.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M355.0 300.0L330.0 300.0L330.0 205.0C330.0 203.89543 330.89542 203.0 332.0 203.0L353.0 203.0C354.10458 203.0 355.0 203.89543 355.0 205.0Z" fill-rule="nonzero"/><path fill="#4285f4" clip-path="url(#id_0)" d="M355.0 300.0L330.0 300.0L330.0 205.0C330.0 203.89543 330.89542 203.0 332.0 203.0L353.0 203.0C354.10458 203.0 355.0 203.89543 355.0 205.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M439.0 300.0L414.0 300.0L414.0 167.0C414.0 165.89543 414.89542 165.0 416.0 165.0L437.0 165.0C438.10458 165.0 439.0 165.89543 439.0 167.0Z" fill-rule="nonzero"/><path fill="#4285f4" clip-path="url(#id_0)" d="M439.0 300.0L414.0 300.0L414.0 167.0C414.0 165.89543 414.89542 165.0 416.0 165.0L437.0 165.0C438.10458 165.0 439.0 165.89543 439.0 167.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M523.0 300.0L498.0 300.0L498.0 128.0C498.0 126.89543 498.89542 126.0 500.0 126.0L521.0 126.0C522.10455 126.0 523.0 126.89543 523.0 128.0Z" fill-rule="nonzero"/><path fill="#4285f4" clip-path="url(#id_0)" d="M523.0 300.0L498.0 300.0L498.0 128.0C498.0 126.89543 498.89542 126.0 500.0 126.0L521.0 126.0C522.10455 126.0 523.0 126.89543 523.0 128.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M129.0 300.0L104.0 300.0L104.0 283.0C104.0 281.89542 104.89543 281.0 106.0 281.0L127.0 281.0C128.10457 281.0 129.0 281.89542 129.0 283.0Z" fill-rule="nonzero"/><path fill="#ea4335" clip-path="url(#id_0)" d="M129.0 300.0L104.0 300.0L104.0 283.0C104.0 281.89542 104.89543 281.0 106.0 281.0L127.0 281.0C128.10457 281.0 129.0 281.89542 129.0 283.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M213.0 300.0L188.0 300.0L188.0 283.0C188.0 281.89542 188.89543 281.0 190.0 281.0L211.0 281.0C212.10457 281.0 213.0 281.89542 213.0 283.0Z" fill-rule="nonzero"/><path fill="#ea4335" clip-path="url(#id_0)" d="M213.0 300.0L188.0 300.0L188.0 283.0C188.0 281.89542 188.89543 281.0 190.0 281.0L211.0 281.0C212.10457 281.0 213.0 281.89542 213.0 283.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M297.0 300.0L272.0 300.0L272.0 283.0C272.0 281.89542 272.89542 281.0 274.0 281.0L295.0 281.0C296.10458 281.0 297.0 281.89542 297.0 283.0Z" fill-rule="nonzero"/><path fill="#ea4335" clip-path="url(#id_0)" d="M297.0 300.0L272.0 300.0L272.0 283.0C272.0 281.89542 272.89542 281.0 274.0 281.0L295.0 281.0C296.10458 281.0 297.0 281.89542 297.0 283.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M382.0 300.0L357.0 300.0L357.0 283.0C357.0 281.89542 357.89542 281.0 359.0 281.0L380.0 281.0C381.10458 281.0 382.0 281.89542 382.0 283.0Z" fill-rule="nonzero"/><path fill="#ea4335" clip-path="url(#id_0)" d="M382.0 300.0L357.0 300.0L357.0 283.0C357.0 281.89542 357.89542 281.0 359.0 281.0L380.0 281.0C381.10458 281.0 382.0 281.89542 382.0 283.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M466.0 300.0L441.0 300.0L441.0 283.0C441.0 281.89542 441.89542 281.0 443.0 281.0L464.0 281.0C465.10458 281.0 466.0 281.89542 466.0 283.0Z" fill-rule="nonzero"/><path fill="#ea4335" clip-path="url(#id_0)" d="M466.0 300.0L441.0 300.0L441.0 283.0C441.0 281.89542 441.89542 281.0 443.0 281.0L464.0 281.0C465.10458 281.0 466.0 281.89542 466.0 283.0Z" fill-rule="nonzero"/><path stroke="#000000" stroke-width="2.0" stroke-linecap="butt" stroke-opacity="0.0" clip-path="url(#id_0)" d="M550.0 300.0L525.0 300.0L525.0 283.0C525.0 281.89542 525.89545 281.0 527.0 281.0L548.0 281.0C549.10455 281.0 550.0 281.89542 550.0 283.0Z" fill-rule="nonzero"/><path fill="#ea4335" clip-path="url(#id_0)" d="M550.0 300.0L525.0 300.0L525.0 283.0C525.0 281.89542 525.89545 281.0 527.0 281.0L548.0 281.0C549.10455 281.0 550.0 281.89542 550.0 283.0Z" fill-rule="nonzero"/><path fill="#000000" d="M259.42188 349.45L259.42188 340.85626L260.57812 340.85626L265.09375 347.60626L265.09375 340.85626L266.1875 340.85626L266.1875 349.45L265.01562 349.45L260.5 342.7L260.5 349.45L259.42188 349.45ZM272.375 349.45L272.375 348.52814Q271.64062 349.59064 270.39062 349.59064Q269.84375 349.59064 269.35938 349.3875Q268.89062 349.16876 268.65625 348.85626Q268.42188 348.52814 268.32812 348.0594Q268.26562 347.7625 268.26562 347.075L268.26562 343.23126L269.32812 343.23126L269.32812 346.6844Q269.32812 347.4969 269.39062 347.79376Q269.48438 348.2 269.79688 348.45Q270.125 348.6844 270.60938 348.6844Q271.07812 348.6844 271.48438 348.45Q271.90625 348.2 272.07812 347.77814Q272.26562 347.35626 272.26562 346.5594L272.26562 343.23126L273.3125 343.23126L273.3125 349.45L272.375 349.45ZM275.29688 349.45L275.29688 343.23126L276.23438 343.23126L276.23438 344.10626Q276.53125 343.6375 277.01562 343.3719Q277.5 343.09064 278.125 343.09064Q278.8125 343.09064 279.25 343.3719Q279.70312 343.65314 279.875 344.16876Q280.625 343.09064 281.79688 343.09064Q282.73438 343.09064 283.21875 343.60626Q283.71875 344.10626 283.71875 345.1844L283.71875 349.45L282.67188 349.45L282.67188 345.52814Q282.67188 344.90314 282.5625 344.6219Q282.46875 344.34064 282.20312 344.16876Q281.9375 343.9969 281.5625 343.9969Q280.90625 343.9969 280.46875 344.4344Q280.04688 344.8719 280.04688 345.84064L280.04688 349.45L278.98438 349.45L278.98438 345.40314Q278.98438 344.7 278.71875 344.35626Q278.46875 343.9969 277.89062 343.9969Q277.4375 343.9969 277.0625 344.23126Q276.6875 344.46564 276.51562 344.91876Q276.34375 345.3719 276.34375 346.21564L276.34375 349.45L275.29688 349.45ZM286.26562 349.45L285.28125 349.45L285.28125 340.85626L286.34375 340.85626L286.34375 343.91876Q287.01562 343.09064 288.04688 343.09064Q288.625 343.09064 289.125 343.325Q289.64062 343.54376 289.96875 343.96564Q290.3125 344.3875 290.5 344.98126Q290.6875 345.575 290.6875 346.2469Q290.6875 347.84064 289.89062 348.71564Q289.09375 349.59064 288.0 349.59064Q286.89062 349.59064 286.26562 348.66876L286.26562 349.45ZM286.25 346.29376Q286.25 347.40314 286.5625 347.90314Q287.0625 348.71564 287.90625 348.71564Q288.59375 348.71564 289.09375 348.1219Q289.60938 347.52814 289.60938 346.325Q289.60938 345.10626 289.125 344.52814Q288.64062 343.95 287.95312 343.95Q287.26562 343.95 286.75 344.5594Q286.25 345.15314 286.25 346.29376ZM296.54688 347.45L297.64062 347.575Q297.39062 348.52814 296.6875 349.0594Q295.98438 349.59064 294.90625 349.59064Q293.54688 349.59064 292.73438 348.7469Q291.9375 347.90314 291.9375 346.3875Q291.9375 344.825 292.75 343.96564Q293.5625 343.09064 294.84375 343.09064Q296.09375 343.09064 296.875 343.9344Q297.67188 344.77814 297.67188 346.325Q297.67188 346.41876 297.67188 346.60626L293.03125 346.60626Q293.09375 347.6375 293.60938 348.1844Q294.125 348.71564 294.90625 348.71564Q295.48438 348.71564 295.89062 348.41876Q296.3125 348.10626 296.54688 347.45ZM293.09375 345.7469L296.5625 345.7469Q296.5 344.95 296.17188 344.5594Q295.65625 343.95 294.85938 343.95Q294.125 343.95 293.625 344.4344Q293.14062 344.91876 293.09375 345.7469ZM299.28125 349.45L299.28125 343.23126L300.23438 343.23126L300.23438 344.16876Q300.59375 343.5125 300.89062 343.3094Q301.20312 343.09064 301.57812 343.09064Q302.10938 343.09064 302.65625 343.41876L302.29688 344.40314Q301.90625 344.16876 301.53125 344.16876Q301.17188 344.16876 300.89062 344.3875Q300.625 344.59064 300.51562 344.96564Q300.32812 345.52814 300.32812 346.1844L300.32812 349.45L299.28125 349.45ZM305.90625 346.34064Q305.90625 344.60626 306.85938 343.77814Q307.65625 343.09064 308.8125 343.09064Q310.09375 343.09064 310.90625 343.9344Q311.73438 344.7625 311.73438 346.2469Q311.73438 347.45 311.375 348.1375Q311.01562 348.825 310.3125 349.21564Q309.625 349.59064 308.8125 349.59064Q307.51562 349.59064 306.70312 348.7625Q305.90625 347.91876 305.90625 346.34064ZM306.98438 346.34064Q306.98438 347.52814 307.5 348.1219Q308.03125 348.71564 308.8125 348.71564Q309.60938 348.71564 310.125 348.1219Q310.64062 347.52814 310.64062 346.3094Q310.64062 345.15314 310.10938 344.5594Q309.59375 343.96564 308.8125 343.96564Q308.03125 343.96564 307.5 344.5594Q306.98438 345.1375 306.98438 346.34064ZM313.54688 349.45L313.54688 344.04376L312.60938 344.04376L312.60938 343.23126L313.54688 343.23126L313.54688 342.5594Q313.54688 341.9344 313.65625 341.6375Q313.8125 341.21564 314.1875 340.96564Q314.57812 340.71564 315.26562 340.71564Q315.71875 340.71564 316.25 340.825L316.09375 341.73126Q315.76562 341.6844 315.46875 341.6844Q314.98438 341.6844 314.78125 341.8875Q314.59375 342.09064 314.59375 342.65314L314.59375 343.23126L315.8125 343.23126L315.8125 344.04376L314.59375 344.04376L314.59375 349.45L313.54688 349.45ZM325.5625 346.4344L326.6875 346.73126Q326.32812 348.1219 325.40625 348.85626Q324.48438 349.59064 323.14062 349.59064Q321.75 349.59064 320.875 349.02814Q320.0 348.46564 319.54688 347.40314Q319.09375 346.325 319.09375 345.09064Q319.09375 343.7469 319.60938 342.7469Q320.125 341.7469 321.0625 341.23126Q322.01562 340.71564 323.15625 340.71564Q324.4375 340.71564 325.3125 341.3719Q326.20312 342.02814 326.54688 343.21564L325.42188 343.48126Q325.125 342.54376 324.54688 342.1219Q323.98438 341.6844 323.125 341.6844Q322.14062 341.6844 321.46875 342.16876Q320.8125 342.6375 320.53125 343.4344Q320.26562 344.23126 320.26562 345.09064Q320.26562 346.1844 320.57812 346.9969Q320.90625 347.8094 321.57812 348.21564Q322.25 348.6219 323.04688 348.6219Q324.0 348.6219 324.65625 348.075Q325.32812 347.52814 325.5625 346.4344ZM328.28125 349.45L328.28125 343.23126L329.23438 343.23126L329.23438 344.16876Q329.59375 343.5125 329.89062 343.3094Q330.20312 343.09064 330.57812 343.09064Q331.10938 343.09064 331.65625 343.41876L331.29688 344.40314Q330.90625 344.16876 330.53125 344.16876Q330.17188 344.16876 329.89062 344.3875Q329.625 344.59064 329.51562 344.96564Q329.32812 345.52814 329.32812 346.1844L329.32812 349.45L328.28125 349.45ZM331.90625 346.34064Q331.90625 344.60626 332.85938 343.77814Q333.65625 343.09064 334.8125 343.09064Q336.09375 343.09064 336.90625 343.9344Q337.73438 344.7625 337.73438 346.2469Q337.73438 347.45 337.375 348.1375Q337.01562 348.825 336.3125 349.21564Q335.625 349.59064 334.8125 349.59064Q333.51562 349.59064 332.70312 348.7625Q331.90625 347.91876 331.90625 346.34064ZM332.98438 346.34064Q332.98438 347.52814 333.5 348.1219Q334.03125 348.71564 334.8125 348.71564Q335.60938 348.71564 336.125 348.1219Q336.64062 347.52814 336.64062 346.3094Q336.64062 345.15314 336.10938 344.5594Q335.59375 343.96564 334.8125 343.96564Q334.03125 343.96564 333.5 344.5594Q332.98438 345.1375 332.98438 346.34064ZM339.29688 349.45L339.29688 343.23126L340.23438 343.23126L340.23438 344.10626Q340.92188 343.09064 342.21875 343.09064Q342.78125 343.09064 343.25 343.29376Q343.73438 343.4969 343.96875 343.825Q344.20312 344.15314 344.29688 344.59064Q344.34375 344.8875 344.34375 345.6219L344.34375 349.45L343.29688 349.45L343.29688 345.66876Q343.29688 345.0125 343.17188 344.7Q343.04688 344.3875 342.73438 344.2Q342.42188 343.9969 342.0 343.9969Q341.32812 343.9969 340.82812 344.4344Q340.34375 344.85626 340.34375 346.04376L340.34375 349.45L339.29688 349.45ZM346.28125 342.09064L346.28125 340.85626L347.34375 340.85626L347.34375 342.09064L346.28125 342.09064ZM344.95312 351.8719L345.14062 350.96564Q345.46875 351.04376 345.64062 351.04376Q345.96875 351.04376 346.125 350.825Q346.28125 350.6219 346.28125 349.7625L346.28125 343.23126L347.34375 343.23126L347.34375 349.79376Q347.34375 350.9344 347.04688 351.3875Q346.65625 351.98126 345.78125 351.98126Q345.34375 351.98126 344.95312 351.8719ZM348.90625 346.34064Q348.90625 344.60626 349.85938 343.77814Q350.65625 343.09064 351.8125 343.09064Q353.09375 343.09064 353.90625 343.9344Q354.73438 344.7625 354.73438 346.2469Q354.73438 347.45 354.375 348.1375Q354.01562 348.825 353.3125 349.21564Q352.625 349.59064 351.8125 349.59064Q350.51562 349.59064 349.70312 348.7625Q348.90625 347.91876 348.90625 346.34064ZM349.98438 346.34064Q349.98438 347.52814 350.5 348.1219Q351.03125 348.71564 351.8125 348.71564Q352.60938 348.71564 353.125 348.1219Q353.64062 347.52814 353.64062 346.3094Q353.64062 345.15314 353.10938 344.5594Q352.59375 343.96564 351.8125 343.96564Q351.03125 343.96564 350.5 344.5594Q349.98438 345.1375 349.98438 346.34064ZM357.26562 349.45L356.28125 349.45L356.28125 340.85626L357.34375 340.85626L357.34375 343.91876Q358.01562 343.09064 359.04688 343.09064Q359.625 343.09064 360.125 343.325Q360.64062 343.54376 360.96875 343.96564Q361.3125 344.3875 361.5 344.98126Q361.6875 345.575 361.6875 346.2469Q361.6875 347.84064 360.89062 348.71564Q360.09375 349.59064 359.0 349.59064Q357.89062 349.59064 357.26562 348.66876L357.26562 349.45ZM357.25 346.29376Q357.25 347.40314 357.5625 347.90314Q358.0625 348.71564 358.90625 348.71564Q359.59375 348.71564 360.09375 348.1219Q360.60938 347.52814 360.60938 346.325Q360.60938 345.10626 360.125 344.52814Q359.64062 343.95 358.95312 343.95Q358.26562 343.95 357.75 344.5594Q357.25 345.15314 357.25 346.29376ZM362.875 347.59064L363.90625 347.4344Q364.0 348.0594 364.39062 348.3875Q364.79688 348.71564 365.53125 348.71564Q366.25 348.71564 366.59375 348.4344Q366.95312 348.1375 366.95312 347.73126Q366.95312 347.3719 366.64062 347.16876Q366.42188 347.02814 365.5625 346.8094Q364.40625 346.5125 363.95312 346.3094Q363.51562 346.09064 363.28125 345.71564Q363.04688 345.34064 363.04688 344.8719Q363.04688 344.46564 363.23438 344.10626Q363.42188 343.7469 363.75 343.5125Q364.0 343.34064 364.42188 343.21564Q364.84375 343.09064 365.34375 343.09064Q366.0625 343.09064 366.60938 343.3094Q367.17188 343.5125 367.4375 343.8719Q367.70312 344.23126 367.79688 344.825L366.76562 344.96564Q366.70312 344.4969 366.35938 344.23126Q366.03125 343.95 365.40625 343.95Q364.6875 343.95 364.375 344.2Q364.0625 344.4344 364.0625 344.7625Q364.0625 344.96564 364.1875 345.1219Q364.32812 345.29376 364.59375 345.40314Q364.75 345.46564 365.53125 345.66876Q366.65625 345.98126 367.09375 346.16876Q367.53125 346.35626 367.78125 346.71564Q368.03125 347.075 368.03125 347.6219Q368.03125 348.15314 367.71875 348.6219Q367.42188 349.075 366.84375 349.34064Q366.26562 349.59064 365.53125 349.59064Q364.3125 349.59064 363.67188 349.09064Q363.04688 348.575 362.875 347.59064Z" fill-rule="nonzero"/><path fill="#000000" d="M33.05 300.21564Q33.05 298.6844 33.3625 297.7625Q33.675 296.825 34.284374 296.325Q34.909374 295.825 35.846874 295.825Q36.534374 295.825 37.05 296.10626Q37.58125 296.3875 37.925 296.91876Q38.26875 297.4344 38.45625 298.1844Q38.64375 298.9344 38.64375 300.21564Q38.64375 301.73126 38.33125 302.65314Q38.034374 303.575 37.409374 304.09064Q36.8 304.59064 35.846874 304.59064Q34.6125 304.59064 33.89375 303.7Q33.05 302.6375 33.05 300.21564ZM34.128124 300.21564Q34.128124 302.325 34.628124 303.02814Q35.128124 303.73126 35.846874 303.73126Q36.58125 303.73126 37.065624 303.02814Q37.565624 302.325 37.565624 300.21564Q37.565624 298.09064 37.065624 297.40314Q36.58125 296.7 35.83125 296.7Q35.1125 296.7 34.675 297.3094Q34.128124 298.09064 34.128124 300.21564Z" fill-rule="nonzero"/><path fill="#000000" d="M38.596874 264.60104L38.596874 265.61667L32.909374 265.61667Q32.909374 265.24167 33.034374 264.8823Q33.253124 264.30417 33.721874 263.74167Q34.20625 263.17917 35.1125 262.4448Q36.51875 261.28854 37.003124 260.61667Q37.503124 259.9448 37.503124 259.35104Q37.503124 258.72604 37.05 258.30417Q36.596874 257.86667 35.878124 257.86667Q35.1125 257.86667 34.659374 258.3198Q34.20625 258.77292 34.190624 259.58542L33.1125 259.47604Q33.221874 258.2573 33.940624 257.6323Q34.675 256.99167 35.909374 256.99167Q37.14375 256.99167 37.8625 257.67917Q38.58125 258.36667 38.58125 259.3823Q38.58125 259.89792 38.3625 260.39792Q38.159374 260.8823 37.659374 261.4448Q37.175 261.99167 36.05 262.9448Q35.096874 263.74167 34.815624 264.03854Q34.55 264.3198 34.378124 264.60104L38.596874 264.60104Z" fill-rule="nonzero"/><path fill="#000000" d="M36.425 226.78334L36.425 224.72084L32.70625 224.72084L32.70625 223.75209L36.628124 218.18959L37.4875 218.18959L37.4875 223.75209L38.64375 223.75209L38.64375 224.72084L37.4875 224.72084L37.4875 226.78334L36.425 226.78334ZM36.425 223.75209L36.425 219.89272L33.7375 223.75209L36.425 223.75209Z" fill-rule="nonzero"/><path fill="#000000" d="M38.51875 181.46562L37.471874 181.54375Q37.33125 180.91875 37.08125 180.6375Q36.64375 180.18437 36.01875 180.18437Q35.51875 180.18437 35.128124 180.46562Q34.64375 180.84062 34.346874 181.54375Q34.065624 182.23125 34.05 183.5125Q34.425 182.93437 34.971874 182.65312Q35.534374 182.37187 36.14375 182.37187Q37.190624 182.37187 37.925 183.15312Q38.675 183.93437 38.675 185.15312Q38.675 185.96562 38.315624 186.66875Q37.971874 187.35625 37.3625 187.73125Q36.753124 188.09062 35.9875 188.09062Q34.659374 188.09062 33.83125 187.12187Q33.003124 186.15312 33.003124 183.93437Q33.003124 181.43437 33.925 180.30937Q34.721874 179.325 36.08125 179.325Q37.096874 179.325 37.7375 179.90312Q38.39375 180.46562 38.51875 181.46562ZM34.221874 185.16875Q34.221874 185.71562 34.440624 186.21562Q34.675 186.7 35.08125 186.96562Q35.503124 187.23125 35.971874 187.23125Q36.628124 187.23125 37.1125 186.7Q37.596874 186.15312 37.596874 185.23125Q37.596874 184.34062 37.1125 183.825Q36.64375 183.30937 35.925 183.30937Q35.20625 183.30937 34.70625 183.825Q34.221874 184.34062 34.221874 185.16875Z" fill-rule="nonzero"/><path fill="#000000" d="M34.675 144.46042Q34.01875 144.21042 33.690624 143.77292Q33.378124 143.3198 33.378124 142.71042Q33.378124 141.77292 34.05 141.1323Q34.7375 140.49167 35.846874 140.49167Q36.971874 140.49167 37.659374 141.14792Q38.346874 141.80417 38.346874 142.74167Q38.346874 143.33542 38.034374 143.77292Q37.721874 144.21042 37.08125 144.46042Q37.878124 144.71042 38.284374 145.28854Q38.690624 145.86667 38.690624 146.66354Q38.690624 147.7573 37.909374 148.5073Q37.14375 149.2573 35.8625 149.2573Q34.596874 149.2573 33.815624 148.5073Q33.034374 147.7573 33.034374 146.6323Q33.034374 145.78854 33.45625 145.22604Q33.89375 144.66354 34.675 144.46042ZM34.45625 142.66354Q34.45625 143.27292 34.846874 143.66354Q35.253124 144.05417 35.878124 144.05417Q36.4875 144.05417 36.878124 143.67917Q37.26875 143.28854 37.26875 142.72604Q37.26875 142.14792 36.8625 141.7573Q36.45625 141.35104 35.8625 141.35104Q35.253124 141.35104 34.846874 141.74167Q34.45625 142.1323 34.45625 142.66354ZM34.128124 146.6323Q34.128124 147.08542 34.33125 147.5073Q34.55 147.92917 34.971874 148.16354Q35.39375 148.39792 35.878124 148.39792Q36.628124 148.39792 37.1125 147.91354Q37.6125 147.42917 37.6125 146.67917Q37.6125 145.91354 37.1125 145.41354Q36.6125 144.91354 35.846874 144.91354Q35.096874 144.91354 34.6125 145.41354Q34.128124 145.89792 34.128124 146.6323Z" fill-rule="nonzero"/><path fill="#000000" d="M30.01875 110.28333L28.971874 110.28333L28.971874 103.56458Q28.58125 103.92396 27.95625 104.29896Q27.346874 104.65833 26.8625 104.83021L26.8625 103.81458Q27.7375 103.39271 28.39375 102.81458Q29.065624 102.22083 29.346874 101.65833L30.01875 101.65833L30.01875 110.28333ZM33.05 106.04896Q33.05 104.51771 33.3625 103.59583Q33.675 102.65833 34.284374 102.15833Q34.909374 101.65833 35.846874 101.65833Q36.534374 101.65833 37.05 101.93958Q37.58125 102.22083 37.925 102.75208Q38.26875 103.26771 38.45625 104.01771Q38.64375 104.76771 38.64375 106.04896Q38.64375 107.56458 38.33125 108.48646Q38.034374 109.40833 37.409374 109.92396Q36.8 110.42396 35.846874 110.42396Q34.6125 110.42396 33.89375 109.53333Q33.05 108.47083 33.05 106.04896ZM34.128124 106.04896Q34.128124 108.15833 34.628124 108.86146Q35.128124 109.56458 35.846874 109.56458Q36.58125 109.56458 37.065624 108.86146Q37.565624 108.15833 37.565624 106.04896Q37.565624 103.92396 37.065624 103.23646Q36.58125 102.53333 35.83125 102.53333Q35.1125 102.53333 34.675 103.14271Q34.128124 103.92396 34.128124 106.04896Z" fill-rule="nonzero"/><path fill="#000000" d="M101.56262 316.4344L101.56262 317.45L95.87512 317.45Q95.87512 317.075 96.00012 316.71564Q96.21887 316.1375 96.68762 315.575Q97.172 315.0125 98.07825 314.27814Q99.4845 313.1219 99.96887 312.45Q100.46887 311.77814 100.46887 311.1844Q100.46887 310.5594 100.01575 310.1375Q99.56262 309.7 98.84387 309.7Q98.07825 309.7 97.62512 310.15314Q97.172 310.60626 97.15637 311.41876L96.07825 311.3094Q96.18762 310.09064 96.90637 309.46564Q97.64075 308.825 98.87512 308.825Q100.1095 308.825 100.82825 309.5125Q101.547 310.2 101.547 311.21564Q101.547 311.73126 101.32825 312.23126Q101.12512 312.71564 100.62512 313.27814Q100.14075 313.825 99.01575 314.77814Q98.06262 315.575 97.78137 315.8719Q97.51575 316.15314 97.34387 316.4344L101.56262 316.4344ZM103.01575 313.21564Q103.01575 311.6844 103.32825 310.7625Q103.64075 309.825 104.25012 309.325Q104.87512 308.825 105.81262 308.825Q106.50012 308.825 107.01575 309.10626Q107.547 309.3875 107.89075 309.91876Q108.2345 310.4344 108.422 311.1844Q108.6095 311.9344 108.6095 313.21564Q108.6095 314.73126 108.297 315.65314Q108.00012 316.575 107.37512 317.09064Q106.76575 317.59064 105.81262 317.59064Q104.57825 317.59064 103.8595 316.7Q103.01575 315.6375 103.01575 313.21564ZM104.09387 313.21564Q104.09387 315.325 104.59387 316.02814Q105.09387 316.73126 105.81262 316.73126Q106.547 316.73126 107.03137 316.02814Q107.53137 315.325 107.53137 313.21564Q107.53137 311.09064 107.03137 310.40314Q106.547 309.7 105.797 309.7Q105.07825 309.7 104.64075 310.3094Q104.09387 311.09064 104.09387 313.21564Z" fill-rule="nonzero"/><path fill="#000000" d="M180.8782 317.45L179.83133 317.45L179.83133 310.73126Q179.4407 311.09064 178.8157 311.46564Q178.20633 311.825 177.72195 311.9969L177.72195 310.98126Q178.59695 310.5594 179.2532 309.98126Q179.92508 309.3875 180.20633 308.825L180.8782 308.825L180.8782 317.45ZM189.45633 316.4344L189.45633 317.45L183.76883 317.45Q183.76883 317.075 183.89383 316.71564Q184.11258 316.1375 184.58133 315.575Q185.0657 315.0125 185.97195 314.27814Q187.3782 313.1219 187.86258 312.45Q188.36258 311.77814 188.36258 311.1844Q188.36258 310.5594 187.90945 310.1375Q187.45633 309.7 186.73758 309.7Q185.97195 309.7 185.51883 310.15314Q185.0657 310.60626 185.05008 311.41876L183.97195 311.3094Q184.08133 310.09064 184.80008 309.46564Q185.53445 308.825 186.76883 308.825Q188.0032 308.825 188.72195 309.5125Q189.4407 310.2 189.4407 311.21564Q189.4407 311.73126 189.22195 312.23126Q189.01883 312.71564 188.51883 313.27814Q188.03445 313.825 186.90945 314.77814Q185.95633 315.575 185.67508 315.8719Q185.40945 316.15314 185.23758 316.4344L189.45633 316.4344ZM190.90945 313.21564Q190.90945 311.6844 191.22195 310.7625Q191.53445 309.825 192.14383 309.325Q192.76883 308.825 193.70633 308.825Q194.39383 308.825 194.90945 309.10626Q195.4407 309.3875 195.78445 309.91876Q196.1282 310.4344 196.3157 311.1844Q196.5032 311.9344 196.5032 313.21564Q196.5032 314.73126 196.1907 315.65314Q195.89383 316.575 195.26883 317.09064Q194.65945 317.59064 193.70633 317.59064Q192.47195 317.59064 191.7532 316.7Q190.90945 315.6375 190.90945 313.21564ZM191.98758 313.21564Q191.98758 315.325 192.48758 316.02814Q192.98758 316.73126 193.70633 316.73126Q194.4407 316.73126 194.92508 316.02814Q195.42508 315.325 195.42508 313.21564Q195.42508 311.09064 194.92508 310.40314Q194.4407 309.7 193.6907 309.7Q192.97195 309.7 192.53445 310.3094Q191.98758 311.09064 191.98758 313.21564Z" fill-rule="nonzero"/><path fill="#000000" d="M263.35004 316.4344L263.35004 317.45L257.66254 317.45Q257.66254 317.075 257.78754 316.71564Q258.0063 316.1375 258.47504 315.575Q258.9594 315.0125 259.86566 314.27814Q261.2719 313.1219 261.7563 312.45Q262.2563 311.77814 262.2563 311.1844Q262.2563 310.5594 261.80316 310.1375Q261.35004 309.7 260.6313 309.7Q259.86566 309.7 259.41254 310.15314Q258.9594 310.60626 258.9438 311.41876L257.86566 311.3094Q257.97504 310.09064 258.6938 309.46564Q259.42816 308.825 260.66254 308.825Q261.8969 308.825 262.61566 309.5125Q263.3344 310.2 263.3344 311.21564Q263.3344 311.73126 263.11566 312.23126Q262.91254 312.71564 262.41254 313.27814Q261.92816 313.825 260.80316 314.77814Q259.85004 315.575 259.5688 315.8719Q259.30316 316.15314 259.1313 316.4344L263.35004 316.4344ZM268.7719 317.45L267.72504 317.45L267.72504 310.73126Q267.3344 311.09064 266.7094 311.46564Q266.10004 311.825 265.61566 311.9969L265.61566 310.98126Q266.49066 310.5594 267.1469 309.98126Q267.8188 309.3875 268.10004 308.825L268.7719 308.825L268.7719 317.45ZM277.35004 316.4344L277.35004 317.45L271.66254 317.45Q271.66254 317.075 271.78754 316.71564Q272.0063 316.1375 272.47504 315.575Q272.9594 315.0125 273.86566 314.27814Q275.2719 313.1219 275.7563 312.45Q276.2563 311.77814 276.2563 311.1844Q276.2563 310.5594 275.80316 310.1375Q275.35004 309.7 274.6313 309.7Q273.86566 309.7 273.41254 310.15314Q272.9594 310.60626 272.9438 311.41876L271.86566 311.3094Q271.97504 310.09064 272.6938 309.46564Q273.42816 308.825 274.66254 308.825Q275.8969 308.825 276.61566 309.5125Q277.3344 310.2 277.3344 311.21564Q277.3344 311.73126 277.11566 312.23126Q276.91254 312.71564 276.41254 313.27814Q275.92816 313.825 274.80316 314.77814Q273.85004 315.575 273.5688 315.8719Q273.30316 316.15314 273.1313 316.4344L277.35004 316.4344ZM278.80316 313.21564Q278.80316 311.6844 279.11566 310.7625Q279.42816 309.825 280.03754 309.325Q280.66254 308.825 281.60004 308.825Q282.28754 308.825 282.80316 309.10626Q283.3344 309.3875 283.67816 309.91876Q284.0219 310.4344 284.2094 311.1844Q284.3969 311.9344 284.3969 313.21564Q284.3969 314.73126 284.0844 315.65314Q283.78754 316.575 283.16254 317.09064Q282.55316 317.59064 281.60004 317.59064Q280.36566 317.59064 279.6469 316.7Q278.80316 315.6375 278.80316 313.21564ZM279.8813 313.21564Q279.8813 315.325 280.3813 316.02814Q280.8813 316.73126 281.60004 316.73126Q282.3344 316.73126 282.8188 316.02814Q283.3188 315.325 283.3188 313.21564Q283.3188 311.09064 282.8188 310.40314Q282.3344 309.7 281.5844 309.7Q280.86566 309.7 280.42816 310.3094Q279.8813 311.09064 279.8813 313.21564Z" fill-rule="nonzero"/><path fill="#000000" d="M342.19684 315.1844L343.25934 315.04376Q343.4312 315.9344 343.8687 316.34064Q344.3062 316.73126 344.9312 316.73126Q345.6812 316.73126 346.19684 316.21564Q346.71246 315.7 346.71246 314.9344Q346.71246 314.21564 346.2281 313.7469Q345.75934 313.2625 345.02496 313.2625Q344.7281 313.2625 344.27496 313.3875L344.39996 312.45Q344.50934 312.46564 344.57184 312.46564Q345.2437 312.46564 345.77496 312.1219Q346.32184 311.7625 346.32184 311.02814Q346.32184 310.45 345.9312 310.075Q345.5406 309.6844 344.9156 309.6844Q344.3062 309.6844 343.88434 310.075Q343.4781 310.46564 343.3687 311.23126L342.3062 311.04376Q342.4937 309.9969 343.1812 309.41876Q343.8687 308.825 344.88434 308.825Q345.58746 308.825 346.1812 309.1375Q346.77496 309.4344 347.08746 309.95Q347.39996 310.46564 347.39996 311.0594Q347.39996 311.60626 347.1031 312.075Q346.8062 312.52814 346.2281 312.79376Q346.9781 312.96564 347.39996 313.52814Q347.82184 314.075 347.82184 314.91876Q347.82184 316.04376 346.9937 316.825Q346.1812 317.60626 344.9312 317.60626Q343.8062 317.60626 343.0562 316.9344Q342.3062 316.2469 342.19684 315.1844ZM353.1656 317.45L352.1187 317.45L352.1187 310.73126Q351.7281 311.09064 351.1031 311.46564Q350.4937 311.825 350.00934 311.9969L350.00934 310.98126Q350.88434 310.5594 351.5406 309.98126Q352.21246 309.3875 352.4937 308.825L353.1656 308.825L353.1656 317.45ZM361.7437 316.4344L361.7437 317.45L356.0562 317.45Q356.0562 317.075 356.1812 316.71564Q356.39996 316.1375 356.8687 315.575Q357.3531 315.0125 358.25934 314.27814Q359.6656 313.1219 360.14996 312.45Q360.64996 311.77814 360.64996 311.1844Q360.64996 310.5594 360.19684 310.1375Q359.7437 309.7 359.02496 309.7Q358.25934 309.7 357.8062 310.15314Q357.3531 310.60626 357.33746 311.41876L356.25934 311.3094Q356.3687 310.09064 357.08746 309.46564Q357.82184 308.825 359.0562 308.825Q360.2906 308.825 361.00934 309.5125Q361.7281 310.2 361.7281 311.21564Q361.7281 311.73126 361.50934 312.23126Q361.3062 312.71564 360.8062 313.27814Q360.32184 313.825 359.19684 314.77814Q358.2437 315.575 357.96246 315.8719Q357.69684 316.15314 357.52496 316.4344L361.7437 316.4344ZM363.19684 313.21564Q363.19684 311.6844 363.50934 310.7625Q363.82184 309.825 364.4312 309.325Q365.0562 308.825 365.9937 308.825Q366.6812 308.825 367.19684 309.10626Q367.7281 309.3875 368.07184 309.91876Q368.4156 310.4344 368.6031 311.1844Q368.7906 311.9344 368.7906 313.21564Q368.7906 314.73126 368.4781 315.65314Q368.1812 316.575 367.5562 317.09064Q366.94684 317.59064 365.9937 317.59064Q364.75934 317.59064 364.0406 316.7Q363.19684 315.6375 363.19684 313.21564ZM364.27496 313.21564Q364.27496 315.325 364.77496 316.02814Q365.27496 316.73126 365.9937 316.73126Q366.7281 316.73126 367.21246 316.02814Q367.71246 315.325 367.71246 313.21564Q367.71246 311.09064 367.21246 310.40314Q366.7281 309.7 365.9781 309.7Q365.25934 309.7 364.82184 310.3094Q364.27496 311.09064 364.27496 313.21564Z" fill-rule="nonzero"/><path fill="#000000" d="M429.96555 317.45L429.96555 315.3875L426.2468 315.3875L426.2468 314.41876L430.16867 308.85626L431.02805 308.85626L431.02805 314.41876L432.1843 314.41876L432.1843 315.3875L431.02805 315.3875L431.02805 317.45L429.96555 317.45ZM429.96555 314.41876L429.96555 310.5594L427.27805 314.41876L429.96555 314.41876ZM437.5593 317.45L436.51242 317.45L436.51242 310.73126Q436.1218 311.09064 435.4968 311.46564Q434.88742 311.825 434.40305 311.9969L434.40305 310.98126Q435.27805 310.5594 435.9343 309.98126Q436.60617 309.3875 436.88742 308.825L437.5593 308.825L437.5593 317.45ZM446.13742 316.4344L446.13742 317.45L440.44992 317.45Q440.44992 317.075 440.57492 316.71564Q440.79367 316.1375 441.26242 315.575Q441.7468 315.0125 442.65305 314.27814Q444.0593 313.1219 444.54367 312.45Q445.04367 311.77814 445.04367 311.1844Q445.04367 310.5594 444.59055 310.1375Q444.13742 309.7 443.41867 309.7Q442.65305 309.7 442.19992 310.15314Q441.7468 310.60626 441.73117 311.41876L440.65305 311.3094Q440.76242 310.09064 441.48117 309.46564Q442.21555 308.825 443.44992 308.825Q444.6843 308.825 445.40305 309.5125Q446.1218 310.2 446.1218 311.21564Q446.1218 311.73126 445.90305 312.23126Q445.69992 312.71564 445.19992 313.27814Q444.71555 313.825 443.59055 314.77814Q442.63742 315.575 442.35617 315.8719Q442.09055 316.15314 441.91867 316.4344L446.13742 316.4344ZM447.59055 313.21564Q447.59055 311.6844 447.90305 310.7625Q448.21555 309.825 448.82492 309.325Q449.44992 308.825 450.38742 308.825Q451.07492 308.825 451.59055 309.10626Q452.1218 309.3875 452.46555 309.91876Q452.8093 310.4344 452.9968 311.1844Q453.1843 311.9344 453.1843 313.21564Q453.1843 314.73126 452.8718 315.65314Q452.57492 316.575 451.94992 317.09064Q451.34055 317.59064 450.38742 317.59064Q449.15305 317.59064 448.4343 316.7Q447.59055 315.6375 447.59055 313.21564ZM448.66867 313.21564Q448.66867 315.325 449.16867 316.02814Q449.66867 316.73126 450.38742 316.73126Q451.1218 316.73126 451.60617 316.02814Q452.10617 315.325 452.10617 313.21564Q452.10617 311.09064 451.60617 310.40314Q451.1218 309.7 450.3718 309.7Q449.65305 309.7 449.21555 310.3094Q448.66867 311.09064 448.66867 313.21564Z" fill-rule="nonzero"/><path fill="#000000" d="M510.98425 315.2L512.0936 315.10626Q512.2186 315.91876 512.6561 316.325Q513.10925 316.73126 513.7499 316.73126Q514.4999 316.73126 515.0311 316.15314Q515.5624 315.575 515.5624 314.6375Q515.5624 313.73126 515.04675 313.21564Q514.54675 312.6844 513.7186 312.6844Q513.2186 312.6844 512.79675 312.91876Q512.3905 313.15314 512.1561 313.5125L511.17175 313.3875L511.99988 308.98126L516.2811 308.98126L516.2811 309.98126L512.8436 309.98126L512.3905 312.29376Q513.1561 311.7469 513.9999 311.7469Q515.1249 311.7469 515.8905 312.52814Q516.67175 313.3094 516.67175 314.54376Q516.67175 315.7 515.9999 316.5594Q515.17175 317.59064 513.7499 317.59064Q512.578 317.59064 511.828 316.9344Q511.09363 316.27814 510.98425 315.2ZM521.953 317.45L520.9061 317.45L520.9061 310.73126Q520.5155 311.09064 519.8905 311.46564Q519.2811 311.825 518.79675 311.9969L518.79675 310.98126Q519.67175 310.5594 520.328 309.98126Q520.9999 309.3875 521.2811 308.825L521.953 308.825L521.953 317.45ZM530.5311 316.4344L530.5311 317.45L524.8436 317.45Q524.8436 317.075 524.9686 316.71564Q525.1874 316.1375 525.6561 315.575Q526.1405 315.0125 527.04675 314.27814Q528.453 313.1219 528.9374 312.45Q529.4374 311.77814 529.4374 311.1844Q529.4374 310.5594 528.98425 310.1375Q528.5311 309.7 527.8124 309.7Q527.04675 309.7 526.5936 310.15314Q526.1405 310.60626 526.1249 311.41876L525.04675 311.3094Q525.1561 310.09064 525.8749 309.46564Q526.60925 308.825 527.8436 308.825Q529.078 308.825 529.79675 309.5125Q530.5155 310.2 530.5155 311.21564Q530.5155 311.73126 530.29675 312.23126Q530.0936 312.71564 529.5936 313.27814Q529.10925 313.825 527.98425 314.77814Q527.0311 315.575 526.7499 315.8719Q526.48425 316.15314 526.3124 316.4344L530.5311 316.4344ZM531.98425 313.21564Q531.98425 311.6844 532.29675 310.7625Q532.60925 309.825 533.2186 309.325Q533.8436 308.825 534.7811 308.825Q535.4686 308.825 535.98425 309.10626Q536.5155 309.3875 536.85925 309.91876Q537.203 310.4344 537.3905 311.1844Q537.578 311.9344 537.578 313.21564Q537.578 314.73126 537.2655 315.65314Q536.9686 316.575 536.3436 317.09064Q535.73425 317.59064 534.7811 317.59064Q533.54675 317.59064 532.828 316.7Q531.98425 315.6375 531.98425 313.21564ZM533.0624 313.21564Q533.0624 315.325 533.5624 316.02814Q534.0624 316.73126 534.7811 316.73126Q535.5155 316.73126 535.9999 316.02814Q536.4999 315.325 536.4999 313.21564Q536.4999 311.09064 535.9999 310.40314Q535.5155 309.7 534.7655 309.7Q534.04675 309.7 533.60925 310.3094Q533.0624 311.09064 533.0624 313.21564Z" fill-rule="nonzero"/><path fill="#4285f4" d="M18.55 56.916668C18.55 56.364384 18.997715 55.916668 19.55 55.916668L29.55 55.916668C30.102285 55.916668 30.55 56.364384 30.55 56.916668L30.55 66.916664C30.55 67.46895 30.102285 67.916664 29.55 67.916664L19.55 67.916664C18.997715 67.916664 18.55 67.46895 18.55 66.916664Z" fill-rule="nonzero"/><path fill="#1a1a1a" d="M39.440624 65.916664L39.440624 57.322914L41.159374 57.322914L43.190624 63.40104Q43.471874 64.260414 43.596874 64.68229Q43.7375 64.21354 44.05 63.30729L46.1125 57.322914L47.64375 57.322914L47.64375 65.916664L46.55 65.916664L46.55 58.729164L44.05 65.916664L43.01875 65.916664L40.534374 58.604164L40.534374 65.916664L39.440624 65.916664ZM49.346874 58.541664L49.346874 57.322914L50.409374 57.322914L50.409374 58.541664L49.346874 58.541664ZM49.346874 65.916664L49.346874 59.697914L50.409374 59.697914L50.409374 65.916664L49.346874 65.916664ZM52.346874 65.916664L52.346874 59.697914L53.284374 59.697914L53.284374 60.572914Q53.971874 59.55729 55.26875 59.55729Q55.83125 59.55729 56.3 59.760414Q56.784374 59.96354 57.01875 60.291664Q57.253124 60.61979 57.346874 61.05729Q57.39375 61.354164 57.39375 62.08854L57.39375 65.916664L56.346874 65.916664L56.346874 62.135414Q56.346874 61.479164 56.221874 61.166664Q56.096874 60.854164 55.784374 60.666664Q55.471874 60.46354 55.05 60.46354Q54.378124 60.46354 53.878124 60.90104Q53.39375 61.322914 53.39375 62.510414L53.39375 65.916664L52.346874 65.916664ZM63.425 65.916664L63.425 64.99479Q62.690624 66.05729 61.440624 66.05729Q60.89375 66.05729 60.409374 65.854164Q59.940624 65.635414 59.70625 65.322914Q59.471874 64.99479 59.378124 64.52604Q59.315624 64.229164 59.315624 63.541664L59.315624 59.697914L60.378124 59.697914L60.378124 63.15104Q60.378124 63.96354 60.440624 64.260414Q60.534374 64.666664 60.846874 64.916664Q61.175 65.15104 61.659374 65.15104Q62.128124 65.15104 62.534374 64.916664Q62.95625 64.666664 63.128124 64.24479Q63.315624 63.822914 63.315624 63.02604L63.315624 59.697914L64.3625 59.697914L64.3625 65.916664L63.425 65.916664ZM68.64375 64.979164L68.8 65.90104Q68.34688 65.99479 68.00313 65.99479Q67.425 65.99479 67.1125 65.822914Q66.8 65.635414 66.65938 65.33854Q66.53438 65.041664 66.53438 64.08854L66.53438 60.510414L65.76875 60.510414L65.76875 59.697914L66.53438 59.697914L66.53438 58.15104L67.58125 57.52604L67.58125 59.697914L68.64375 59.697914L68.64375 60.510414L67.58125 60.510414L67.58125 64.15104Q67.58125 64.604164 67.62813 64.729164Q67.69063 64.854164 67.81563 64.93229Q67.94063 65.010414 68.175 65.010414Q68.3625 65.010414 68.64375 64.979164ZM73.59688 63.916664L74.69063 64.041664Q74.44063 64.99479 73.7375 65.52604Q73.03438 66.05729 71.95625 66.05729Q70.59688 66.05729 69.78438 65.21354Q68.9875 64.36979 68.9875 62.854164Q68.9875 61.291664 69.8 60.43229Q70.6125 59.55729 71.89375 59.55729Q73.14375 59.55729 73.925 60.40104Q74.72188 61.24479 74.72188 62.791664Q74.72188 62.885414 74.72188 63.072914L70.08125 63.072914Q70.14375 64.104164 70.65938 64.65104Q71.175 65.18229 71.95625 65.18229Q72.53438 65.18229 72.94063 64.885414Q73.3625 64.572914 73.59688 63.916664ZM70.14375 62.21354L73.6125 62.21354Q73.55 61.416664 73.22188 61.02604Q72.70625 60.416664 71.90938 60.416664Q71.175 60.416664 70.675 60.90104Q70.19063 61.385414 70.14375 62.21354ZM75.925 64.05729L76.95625 63.90104Q77.05 64.52604 77.44063 64.854164Q77.84688 65.18229 78.58125 65.18229Q79.3 65.18229 79.64375 64.90104Q80.00313 64.604164 80.00313 64.197914Q80.00313 63.83854 79.69063 63.635414Q79.47188 63.49479 78.6125 63.27604Q77.45625 62.979164 77.00313 62.77604Q76.56563 62.55729 76.33125 62.18229Q76.09688 61.80729 76.09688 61.33854Q76.09688 60.93229 76.28438 60.572914Q76.47188 60.21354 76.8 59.979164Q77.05 59.80729 77.47188 59.68229Q77.89375 59.55729 78.39375 59.55729Q79.1125 59.55729 79.65938 59.77604Q80.22188 59.979164 80.4875 60.33854Q80.75313 60.697914 80.84688 61.291664L79.81563 61.43229Q79.75313 60.96354 79.40938 60.697914Q79.08125 60.416664 78.45625 60.416664Q77.7375 60.416664 77.425 60.666664Q77.1125 60.90104 77.1125 61.229164Q77.1125 61.43229 77.2375 61.58854Q77.37813 61.760414 77.64375 61.86979Q77.8 61.93229 78.58125 62.135414Q79.70625 62.447914 80.14375 62.635414Q80.58125 62.822914 80.83125 63.18229Q81.08125 63.541664 81.08125 64.08854Q81.08125 64.61979 80.76875 65.08854Q80.47188 65.541664 79.89375 65.80729Q79.31563 66.05729 78.58125 66.05729Q77.3625 66.05729 76.72188 65.55729Q76.09688 65.041664 75.925 64.05729ZM86.31563 65.916664L85.33125 65.916664L85.33125 57.322914L86.39375 57.322914L86.39375 60.385414Q87.06563 59.55729 88.09688 59.55729Q88.675 59.55729 89.175 59.791664Q89.69063 60.010414 90.01875 60.43229Q90.3625 60.854164 90.55 61.447914Q90.7375 62.041664 90.7375 62.71354Q90.7375 64.30729 89.94063 65.18229Q89.14375 66.05729 88.05 66.05729Q86.94063 66.05729 86.31563 65.135414L86.31563 65.916664ZM86.3 62.760414Q86.3 63.86979 86.6125 64.36979Q87.1125 65.18229 87.95625 65.18229Q88.64375 65.18229 89.14375 64.58854Q89.65938 63.99479 89.65938 62.791664Q89.65938 61.572914 89.175 60.99479Q88.69063 60.416664 88.00313 60.416664Q87.31563 60.416664 86.8 61.02604Q86.3 61.61979 86.3 62.760414ZM96.59688 63.916664L97.69063 64.041664Q97.44063 64.99479 96.7375 65.52604Q96.03438 66.05729 94.95625 66.05729Q93.59688 66.05729 92.78438 65.21354Q91.9875 64.36979 91.9875 62.854164Q91.9875 61.291664 92.8 60.43229Q93.6125 59.55729 94.89375 59.55729Q96.14375 59.55729 96.925 60.40104Q97.72188 61.24479 97.72188 62.791664Q97.72188 62.885414 97.72188 63.072914L93.08125 63.072914Q93.14375 64.104164 93.65938 64.65104Q94.175 65.18229 94.95625 65.18229Q95.53438 65.18229 95.94063 64.885414Q96.3625 64.572914 96.59688 63.916664ZM93.14375 62.21354L96.6125 62.21354Q96.55 61.416664 96.22188 61.02604Q95.70625 60.416664 94.90938 60.416664Q94.175 60.416664 93.675 60.90104Q93.19063 61.385414 93.14375 62.21354ZM101.64375 64.979164L101.8 65.90104Q101.34688 65.99479 101.00313 65.99479Q100.425 65.99479 100.1125 65.822914Q99.8 65.635414 99.65938 65.33854Q99.53438 65.041664 99.53438 64.08854L99.53438 60.510414L98.76875 60.510414L98.76875 59.697914L99.53438 59.697914L99.53438 58.15104L100.58125 57.52604L100.58125 59.697914L101.64375 59.697914L101.64375 60.510414L100.58125 60.510414L100.58125 64.15104Q100.58125 64.604164 100.62813 64.729164Q100.69063 64.854164 100.81563 64.93229Q100.94063 65.010414 101.175 65.010414Q101.3625 65.010414 101.64375 64.979164ZM103.4875 65.916664L101.58125 59.697914L102.675 59.697914L103.65938 63.291664L104.03438 64.61979Q104.06563 64.52604 104.3625 63.33854L105.34688 59.697914L106.425 59.697914L107.3625 63.30729L107.675 64.49479L108.03438 63.291664L109.09688 59.697914L110.12813 59.697914L108.175 65.916664L107.08125 65.916664L106.09688 62.18229L105.84688 61.135414L104.59688 65.916664L103.4875 65.916664ZM115.59688 63.916664L116.69063 64.041664Q116.44063 64.99479 115.7375 65.52604Q115.03438 66.05729 113.95625 66.05729Q112.59688 66.05729 111.78438 65.21354Q110.9875 64.36979 110.9875 62.854164Q110.9875 61.291664 111.8 60.43229Q112.6125 59.55729 113.89375 59.55729Q115.14375 59.55729 115.925 60.40104Q116.72188 61.24479 116.72188 62.791664Q116.72188 62.885414 116.72188 63.072914L112.08125 63.072914Q112.14375 64.104164 112.65938 64.65104Q113.175 65.18229 113.95625 65.18229Q114.53438 65.18229 114.94063 64.885414Q115.3625 64.572914 115.59688 63.916664ZM112.14375 62.21354L115.6125 62.21354Q115.55 61.416664 115.22188 61.02604Q114.70625 60.416664 113.90938 60.416664Q113.175 60.416664 112.675 60.90104Q112.19063 61.385414 112.14375 62.21354ZM122.59688 63.916664L123.69063 64.041664Q123.44063 64.99479 122.7375 65.52604Q122.03438 66.05729 120.95625 66.05729Q119.59688 66.05729 118.78438 65.21354Q117.9875 64.36979 117.9875 62.854164Q117.9875 61.291664 118.8 60.43229Q119.6125 59.55729 120.89375 59.55729Q122.14375 59.55729 122.925 60.40104Q123.72188 61.24479 123.72188 62.791664Q123.72188 62.885414 123.72188 63.072914L119.08125 63.072914Q119.14375 64.104164 119.65938 64.65104Q120.175 65.18229 120.95625 65.18229Q121.53438 65.18229 121.94063 64.885414Q122.3625 64.572914 122.59688 63.916664ZM119.14375 62.21354L122.6125 62.21354Q122.55 61.416664 122.22188 61.02604Q121.70625 60.416664 120.90938 60.416664Q120.175 60.416664 119.675 60.90104Q119.19063 61.385414 119.14375 62.21354ZM125.34688 65.916664L125.34688 59.697914L126.28438 59.697914L126.28438 60.572914Q126.97188 59.55729 128.26875 59.55729Q128.83125 59.55729 129.3 59.760414Q129.78438 59.96354 130.01875 60.291664Q130.25313 60.61979 130.34688 61.05729Q130.39375 61.354164 130.39375 62.08854L130.39375 65.916664L129.34688 65.916664L129.34688 62.135414Q129.34688 61.479164 129.22188 61.166664Q129.09688 60.854164 128.78438 60.666664Q128.47188 60.46354 128.05 60.46354Q127.37813 60.46354 126.87813 60.90104Q126.39375 61.322914 126.39375 62.510414L126.39375 65.916664L125.34688 65.916664ZM139.40938 63.635414L140.44063 63.77604Q140.26875 64.83854 139.56563 65.447914Q138.8625 66.05729 137.84688 66.05729Q136.56563 66.05729 135.78438 65.229164Q135.01875 64.385414 135.01875 62.822914Q135.01875 61.822914 135.34688 61.072914Q135.69063 60.30729 136.3625 59.93229Q137.05 59.55729 137.8625 59.55729Q138.8625 59.55729 139.50313 60.072914Q140.15938 60.572914 140.34688 61.52604L139.31563 61.68229Q139.175 61.05729 138.8 60.74479Q138.425 60.416664 137.89375 60.416664Q137.09688 60.416664 136.59688 60.99479Q136.09688 61.55729 136.09688 62.791664Q136.09688 64.05729 136.58125 64.61979Q137.06563 65.18229 137.83125 65.18229Q138.45625 65.18229 138.8625 64.80729Q139.28438 64.43229 139.40938 63.635414ZM140.95625 62.80729Q140.95625 61.072914 141.90938 60.24479Q142.70625 59.55729 143.8625 59.55729Q145.14375 59.55729 145.95625 60.40104Q146.78438 61.229164 146.78438 62.71354Q146.78438 63.916664 146.425 64.604164Q146.06563 65.291664 145.3625 65.68229Q144.675 66.05729 143.8625 66.05729Q142.56563 66.05729 141.75313 65.229164Q140.95625 64.385414 140.95625 62.80729ZM142.03438 62.80729Q142.03438 63.99479 142.55 64.58854Q143.08125 65.18229 143.8625 65.18229Q144.65938 65.18229 145.175 64.58854Q145.69063 63.99479 145.69063 62.77604Q145.69063 61.61979 145.15938 61.02604Q144.64375 60.43229 143.8625 60.43229Q143.08125 60.43229 142.55 61.02604Q142.03438 61.604164 142.03438 62.80729ZM148.34688 65.916664L148.34688 59.697914L149.28438 59.697914L149.28438 60.572914Q149.97188 59.55729 151.26875 59.55729Q151.83125 59.55729 152.3 59.760414Q152.78438 59.96354 153.01875 60.291664Q153.25313 60.61979 153.34688 61.05729Q153.39375 61.354164 153.39375 62.08854L153.39375 65.916664L152.34688 65.916664L152.34688 62.135414Q152.34688 61.479164 152.22188 61.166664Q152.09688 60.854164 151.78438 60.666664Q151.47188 60.46354 151.05 60.46354Q150.37813 60.46354 149.87813 60.90104Q149.39375 61.322914 149.39375 62.510414L149.39375 65.916664L148.34688 65.916664ZM154.925 64.05729L155.95625 63.90104Q156.05 64.52604 156.44063 64.854164Q156.84688 65.18229 157.58125 65.18229Q158.3 65.18229 158.64375 64.90104Q159.00313 64.604164 159.00313 64.197914Q159.00313 63.83854 158.69063 63.635414Q158.47188 63.49479 157.6125 63.27604Q156.45625 62.979164 156.00313 62.77604Q155.56563 62.55729 155.33125 62.18229Q155.09688 61.80729 155.09688 61.33854Q155.09688 60.93229 155.28438 60.572914Q155.47188 60.21354 155.8 59.979164Q156.05 59.80729 156.47188 59.68229Q156.89375 59.55729 157.39375 59.55729Q158.1125 59.55729 158.65938 59.77604Q159.22188 59.979164 159.4875 60.33854Q159.75313 60.697914 159.84688 61.291664L158.81563 61.43229Q158.75313 60.96354 158.40938 60.697914Q158.08125 60.416664 157.45625 60.416664Q156.7375 60.416664 156.425 60.666664Q156.1125 60.90104 156.1125 61.229164Q156.1125 61.43229 156.2375 61.58854Q156.37813 61.760414 156.64375 61.86979Q156.8 61.93229 157.58125 62.135414Q158.70625 62.447914 159.14375 62.635414Q159.58125 62.822914 159.83125 63.18229Q160.08125 63.541664 160.08125 64.08854Q160.08125 64.61979 159.76875 65.08854Q159.47188 65.541664 158.89375 65.80729Q158.31563 66.05729 157.58125 66.05729Q156.3625 66.05729 155.72188 65.55729Q155.09688 65.041664 154.925 64.05729ZM165.59688 63.916664L166.69063 64.041664Q166.44063 64.99479 165.7375 65.52604Q165.03438 66.05729 163.95625 66.05729Q162.59688 66.05729 161.78438 65.21354Q160.9875 64.36979 160.9875 62.854164Q160.9875 61.291664 161.8 60.43229Q162.6125 59.55729 163.89375 59.55729Q165.14375 59.55729 165.925 60.40104Q166.72188 61.24479 166.72188 62.791664Q166.72188 62.885414 166.72188 63.072914L162.08125 63.072914Q162.14375 64.104164 162.65938 64.65104Q163.175 65.18229 163.95625 65.18229Q164.53438 65.18229 164.94063 64.885414Q165.3625 64.572914 165.59688 63.916664ZM162.14375 62.21354L165.6125 62.21354Q165.55 61.416664 165.22188 61.02604Q164.70625 60.416664 163.90938 60.416664Q163.175 60.416664 162.675 60.90104Q162.19063 61.385414 162.14375 62.21354ZM172.40938 63.635414L173.44063 63.77604Q173.26875 64.83854 172.56563 65.447914Q171.8625 66.05729 170.84688 66.05729Q169.56563 66.05729 168.78438 65.229164Q168.01875 64.385414 168.01875 62.822914Q168.01875 61.822914 168.34688 61.072914Q168.69063 60.30729 169.3625 59.93229Q170.05 59.55729 170.8625 59.55729Q171.8625 59.55729 172.50313 60.072914Q173.15938 60.572914 173.34688 61.52604L172.31563 61.68229Q172.175 61.05729 171.8 60.74479Q171.425 60.416664 170.89375 60.416664Q170.09688 60.416664 169.59688 60.99479Q169.09688 61.55729 169.09688 62.791664Q169.09688 64.05729 169.58125 64.61979Q170.06563 65.18229 170.83125 65.18229Q171.45625 65.18229 171.8625 64.80729Q172.28438 64.43229 172.40938 63.635414ZM178.425 65.916664L178.425 64.99479Q177.69063 66.05729 176.44063 66.05729Q175.89375 66.05729 175.40938 65.854164Q174.94063 65.635414 174.70625 65.322914Q174.47188 64.99479 174.37813 64.52604Q174.31563 64.229164 174.31563 63.541664L174.31563 59.697914L175.37813 59.697914L175.37813 63.15104Q175.37813 63.96354 175.44063 64.260414Q175.53438 64.666664 175.84688 64.916664Q176.175 65.15104 176.65938 65.15104Q177.12813 65.15104 177.53438 64.916664Q177.95625 64.666664 178.12813 64.24479Q178.31563 63.822914 178.31563 63.02604L178.31563 59.697914L179.3625 59.697914L179.3625 65.916664L178.425 65.916664ZM183.64375 64.979164L183.8 65.90104Q183.34688 65.99479 183.00313 65.99479Q182.425 65.99479 182.1125 65.822914Q181.8 65.635414 181.65938 65.33854Q181.53438 65.041664 181.53438 64.08854L181.53438 60.510414L180.76875 60.510414L180.76875 59.697914L181.53438 59.697914L181.53438 58.15104L182.58125 57.52604L182.58125 59.697914L183.64375 59.697914L183.64375 60.510414L182.58125 60.510414L182.58125 64.15104Q182.58125 64.604164 182.62813 64.729164Q182.69063 64.854164 182.81563 64.93229Q182.94063 65.010414 183.175 65.010414Q183.3625 65.010414 183.64375 64.979164ZM184.34688 58.541664L184.34688 57.322914L185.40938 57.322914L185.40938 58.541664L184.34688 58.541664ZM184.34688 65.916664L184.34688 59.697914L185.40938 59.697914L185.40938 65.916664L184.34688 65.916664ZM189.06563 65.916664L186.70625 59.697914L187.81563 59.697914L189.15938 63.416664Q189.3625 64.02604 189.55 64.666664Q189.69063 64.18229 189.94063 63.49479L191.33125 59.697914L192.40938 59.697914L190.05 65.916664L189.06563 65.916664ZM197.59688 63.916664L198.69063 64.041664Q198.44063 64.99479 197.7375 65.52604Q197.03438 66.05729 195.95625 66.05729Q194.59688 66.05729 193.78438 65.21354Q192.9875 64.36979 192.9875 62.854164Q192.9875 61.291664 193.8 60.43229Q194.6125 59.55729 195.89375 59.55729Q197.14375 59.55729 197.925 60.40104Q198.72188 61.24479 198.72188 62.791664Q198.72188 62.885414 198.72188 63.072914L194.08125 63.072914Q194.14375 64.104164 194.65938 64.65104Q195.175 65.18229 195.95625 65.18229Q196.53438 65.18229 196.94063 64.885414Q197.3625 64.572914 197.59688 63.916664ZM194.14375 62.21354L197.6125 62.21354Q197.55 61.416664 197.22188 61.02604Q196.70625 60.416664 195.90938 60.416664Q195.175 60.416664 194.675 60.90104Q194.19063 61.385414 194.14375 62.21354ZM203.33125 58.55729L203.33125 57.322914L204.39375 57.322914L204.39375 58.55729L203.33125 58.55729ZM202.00313 68.33854L202.19063 67.43229Q202.51875 67.510414 202.69063 67.510414Q203.01875 67.510414 203.175 67.291664Q203.33125 67.08854 203.33125 66.229164L203.33125 59.697914L204.39375 59.697914L204.39375 66.260414Q204.39375 67.40104 204.09688 67.854164Q203.70625 68.447914 202.83125 68.447914Q202.39375 68.447914 202.00313 68.33854ZM205.95625 62.80729Q205.95625 61.072914 206.90938 60.24479Q207.70625 59.55729 208.8625 59.55729Q210.14375 59.55729 210.95625 60.40104Q211.78438 61.229164 211.78438 62.71354Q211.78438 63.916664 211.425 64.604164Q211.06563 65.291664 210.3625 65.68229Q209.675 66.05729 208.8625 66.05729Q207.56563 66.05729 206.75313 65.229164Q205.95625 64.385414 205.95625 62.80729ZM207.03438 62.80729Q207.03438 63.99479 207.55 64.58854Q208.08125 65.18229 208.8625 65.18229Q209.65938 65.18229 210.175 64.58854Q210.69063 63.99479 210.69063 62.77604Q210.69063 61.61979 210.15938 61.02604Q209.64375 60.43229 208.8625 60.43229Q208.08125 60.43229 207.55 61.02604Q207.03438 61.604164 207.03438 62.80729ZM214.31563 65.916664L213.33125 65.916664L213.33125 57.322914L214.39375 57.322914L214.39375 60.385414Q215.06563 59.55729 216.09688 59.55729Q216.675 59.55729 217.175 59.791664Q217.69063 60.010414 218.01875 60.43229Q218.3625 60.854164 218.55 61.447914Q218.7375 62.041664 218.7375 62.71354Q218.7375 64.30729 217.94063 65.18229Q217.14375 66.05729 216.05 66.05729Q214.94063 66.05729 214.31563 65.135414L214.31563 65.916664ZM214.3 62.760414Q214.3 63.86979 214.6125 64.36979Q215.1125 65.18229 215.95625 65.18229Q216.64375 65.18229 217.14375 64.58854Q217.65938 63.99479 217.65938 62.791664Q217.65938 61.572914 217.175 60.99479Q216.69063 60.416664 216.00313 60.416664Q215.31563 60.416664 214.8 61.02604Q214.3 61.61979 214.3 62.760414ZM219.925 64.05729L220.95625 63.90104Q221.05 64.52604 221.44063 64.854164Q221.84688 65.18229 222.58125 65.18229Q223.3 65.18229 223.64375 64.90104Q224.00313 64.604164 224.00313 64.197914Q224.00313 63.83854 223.69063 63.635414Q223.47188 63.49479 222.6125 63.27604Q221.45625 62.979164 221.00313 62.77604Q220.56563 62.55729 220.33125 62.18229Q220.09688 61.80729 220.09688 61.33854Q220.09688 60.93229 220.28438 60.572914Q220.47188 60.21354 220.8 59.979164Q221.05 59.80729 221.47188 59.68229Q221.89375 59.55729 222.39375 59.55729Q223.1125 59.55729 223.65938 59.77604Q224.22188 59.979164 224.4875 60.33854Q224.75313 60.697914 224.84688 61.291664L223.81563 61.43229Q223.75313 60.96354 223.40938 60.697914Q223.08125 60.416664 222.45625 60.416664Q221.7375 60.416664 221.425 60.666664Q221.1125 60.90104 221.1125 61.229164Q221.1125 61.43229 221.2375 61.58854Q221.37813 61.760414 221.64375 61.86979Q221.8 61.93229 222.58125 62.135414Q223.70625 62.447914 224.14375 62.635414Q224.58125 62.822914 224.83125 63.18229Q225.08125 63.541664 225.08125 64.08854Q225.08125 64.61979 224.76875 65.08854Q224.47188 65.541664 223.89375 65.80729Q223.31563 66.05729 222.58125 66.05729Q221.3625 66.05729 220.72188 65.55729Q220.09688 65.041664 219.925 64.05729ZM233.40938 63.635414L234.44063 63.77604Q234.26875 64.83854 233.56563 65.447914Q232.8625 66.05729 231.84688 66.05729Q230.56563 66.05729 229.78438 65.229164Q229.01875 64.385414 229.01875 62.822914Q229.01875 61.822914 229.34688 61.072914Q229.69063 60.30729 230.3625 59.93229Q231.05 59.55729 231.8625 59.55729Q232.8625 59.55729 233.50313 60.072914Q234.15938 60.572914 234.34688 61.52604L233.31563 61.68229Q233.175 61.05729 232.8 60.74479Q232.425 60.416664 231.89375 60.416664Q231.09688 60.416664 230.59688 60.99479Q230.09688 61.55729 230.09688 62.791664Q230.09688 64.05729 230.58125 64.61979Q231.06563 65.18229 231.83125 65.18229Q232.45625 65.18229 232.8625 64.80729Q233.28438 64.43229 233.40938 63.635414ZM235.33125 65.916664L235.33125 59.697914L236.28438 59.697914L236.28438 60.635414Q236.64375 59.979164 236.94063 59.77604Q237.25313 59.55729 237.62813 59.55729Q238.15938 59.55729 238.70625 59.885414L238.34688 60.86979Q237.95625 60.635414 237.58125 60.635414Q237.22188 60.635414 236.94063 60.854164Q236.675 61.05729 236.56563 61.43229Q236.37813 61.99479 236.37813 62.65104L236.37813 65.916664L235.33125 65.916664ZM243.59688 63.916664L244.69063 64.041664Q244.44063 64.99479 243.7375 65.52604Q243.03438 66.05729 241.95625 66.05729Q240.59688 66.05729 239.78438 65.21354Q238.9875 64.36979 238.9875 62.854164Q238.9875 61.291664 239.8 60.43229Q240.6125 59.55729 241.89375 59.55729Q243.14375 59.55729 243.925 60.40104Q244.72188 61.24479 244.72188 62.791664Q244.72188 62.885414 244.72188 63.072914L240.08125 63.072914Q240.14375 64.104164 240.65938 64.65104Q241.175 65.18229 241.95625 65.18229Q242.53438 65.18229 242.94063 64.885414Q243.3625 64.572914 243.59688 63.916664ZM240.14375 62.21354L243.6125 62.21354Q243.55 61.416664 243.22188 61.02604Q242.70625 60.416664 241.90938 60.416664Q241.175 60.416664 240.675 60.90104Q240.19063 61.385414 240.14375 62.21354ZM250.40938 65.15104Q249.81563 65.65104 249.26875 65.854164Q248.7375 66.05729 248.1125 66.05729Q247.08125 66.05729 246.53438 65.55729Q245.9875 65.05729 245.9875 64.27604Q245.9875 63.822914 246.19063 63.447914Q246.39375 63.05729 246.7375 62.83854Q247.08125 62.604164 247.50313 62.49479Q247.8 62.40104 248.44063 62.322914Q249.70625 62.18229 250.31563 61.96354Q250.31563 61.74479 250.31563 61.697914Q250.31563 61.041664 250.01875 60.77604Q249.6125 60.43229 248.81563 60.43229Q248.08125 60.43229 247.72188 60.697914Q247.3625 60.947914 247.19063 61.604164L246.15938 61.46354Q246.3 60.80729 246.62813 60.40104Q246.95625 59.99479 247.56563 59.77604Q248.175 59.55729 248.97188 59.55729Q249.76875 59.55729 250.26875 59.74479Q250.76875 59.93229 251.00313 60.21354Q251.2375 60.49479 251.33125 60.93229Q251.37813 61.197914 251.37813 61.90104L251.37813 63.30729Q251.37813 64.77604 251.44063 65.166664Q251.51875 65.55729 251.72188 65.916664L250.6125 65.916664Q250.45625 65.58854 250.40938 65.15104ZM250.31563 62.791664Q249.7375 63.02604 248.59688 63.197914Q247.94063 63.291664 247.675 63.416664Q247.40938 63.52604 247.25313 63.74479Q247.1125 63.96354 247.1125 64.24479Q247.1125 64.666664 247.425 64.947914Q247.75313 65.229164 248.3625 65.229164Q248.97188 65.229164 249.44063 64.96354Q249.925 64.697914 250.14375 64.229164Q250.31563 63.86979 250.31563 63.18229L250.31563 62.791664ZM255.64375 64.979164L255.8 65.90104Q255.34688 65.99479 255.00313 65.99479Q254.425 65.99479 254.1125 65.822914Q253.8 65.635414 253.65938 65.33854Q253.53438 65.041664 253.53438 64.08854L253.53438 60.510414L252.76875 60.510414L252.76875 59.697914L253.53438 59.697914L253.53438 58.15104L254.58125 57.52604L254.58125 59.697914L255.64375 59.697914L255.64375 60.510414L254.58125 60.510414L254.58125 64.15104Q254.58125 64.604164 254.62813 64.729164Q254.69063 64.854164 254.81563 64.93229Q254.94063 65.010414 255.175 65.010414Q255.3625 65.010414 255.64375 64.979164ZM260.59686 63.916664L261.6906 64.041664Q261.4406 64.99479 260.7375 65.52604Q260.03436 66.05729 258.95624 66.05729Q257.59686 66.05729 256.78436 65.21354Q255.9875 64.36979 255.9875 62.854164Q255.9875 61.291664 256.8 60.43229Q257.6125 59.55729 258.89374 59.55729Q260.14374 59.55729 260.925 60.40104Q261.72186 61.24479 261.72186 62.791664Q261.72186 62.885414 261.72186 63.072914L257.08124 63.072914Q257.14374 64.104164 257.65936 64.65104Q258.175 65.18229 258.95624 65.18229Q259.53436 65.18229 259.9406 64.885414Q260.3625 64.572914 260.59686 63.916664ZM257.14374 62.21354L260.6125 62.21354Q260.55 61.416664 260.22186 61.02604Q259.70624 60.416664 258.90936 60.416664Q258.175 60.416664 257.675 60.90104Q257.1906 61.385414 257.14374 62.21354ZM267.3781 65.916664L267.3781 65.135414Q266.78436 66.05729 265.64374 66.05729Q264.89374 66.05729 264.26874 65.65104Q263.64374 65.229164 263.3 64.49479Q262.95624 63.760414 262.95624 62.80729Q262.95624 61.885414 263.26874 61.11979Q263.58124 60.354164 264.20624 59.96354Q264.83124 59.55729 265.59686 59.55729Q266.15936 59.55729 266.59686 59.791664Q267.03436 60.02604 267.3156 60.40104L267.3156 57.322914L268.3625 57.322914L268.3625 65.916664L267.3781 65.916664ZM264.05 62.80729Q264.05 64.010414 264.55 64.604164Q265.05 65.18229 265.7375 65.18229Q266.425 65.18229 266.90936 64.61979Q267.39374 64.05729 267.39374 62.90104Q267.39374 61.61979 266.89374 61.02604Q266.40936 60.43229 265.6906 60.43229Q264.9875 60.43229 264.51874 61.010414Q264.05 61.572914 264.05 62.80729ZM275.3625 68.447914Q274.4875 67.33854 273.8781 65.86979Q273.28436 64.385414 273.28436 62.80729Q273.28436 61.416664 273.72186 60.135414Q274.2531 58.65104 275.3625 57.18229L276.1125 57.18229Q275.40936 58.40104 275.175 58.916664Q274.8156 59.729164 274.6125 60.604164Q274.3625 61.697914 274.3625 62.80729Q274.3625 65.635414 276.1125 68.447914L275.3625 68.447914ZM276.95624 62.80729Q276.95624 61.072914 277.90936 60.24479Q278.70624 59.55729 279.8625 59.55729Q281.14374 59.55729 281.95624 60.40104Q282.78436 61.229164 282.78436 62.71354Q282.78436 63.916664 282.425 64.604164Q282.0656 65.291664 281.3625 65.68229Q280.675 66.05729 279.8625 66.05729Q278.5656 66.05729 277.7531 65.229164Q276.95624 64.385414 276.95624 62.80729ZM278.03436 62.80729Q278.03436 63.99479 278.55 64.58854Q279.08124 65.18229 279.8625 65.18229Q280.65936 65.18229 281.175 64.58854Q281.6906 63.99479 281.6906 62.77604Q281.6906 61.61979 281.15936 61.02604Q280.64374 60.43229 279.8625 60.43229Q279.08124 60.43229 278.55 61.02604Q278.03436 61.604164 278.03436 62.80729ZM284.3156 65.916664L284.3156 57.322914L285.3781 57.322914L285.3781 65.916664L284.3156 65.916664ZM291.3781 65.916664L291.3781 65.135414Q290.78436 66.05729 289.64374 66.05729Q288.89374 66.05729 288.26874 65.65104Q287.64374 65.229164 287.3 64.49479Q286.95624 63.760414 286.95624 62.80729Q286.95624 61.885414 287.26874 61.11979Q287.58124 60.354164 288.20624 59.96354Q288.83124 59.55729 289.59686 59.55729Q290.15936 59.55729 290.59686 59.791664Q291.03436 60.02604 291.3156 60.40104L291.3156 57.322914L292.3625 57.322914L292.3625 65.916664L291.3781 65.916664ZM288.05 62.80729Q288.05 64.010414 288.55 64.604164Q289.05 65.18229 289.7375 65.18229Q290.425 65.18229 290.90936 64.61979Q291.39374 64.05729 291.39374 62.90104Q291.39374 61.61979 290.89374 61.02604Q290.40936 60.43229 289.6906 60.43229Q288.9875 60.43229 288.51874 61.010414Q288.05 61.572914 288.05 62.80729ZM301.40936 63.635414L302.4406 63.77604Q302.26874 64.83854 301.5656 65.447914Q300.8625 66.05729 299.84686 66.05729Q298.5656 66.05729 297.78436 65.229164Q297.01874 64.385414 297.01874 62.822914Q297.01874 61.822914 297.34686 61.072914Q297.6906 60.30729 298.3625 59.93229Q299.05 59.55729 299.8625 59.55729Q300.8625 59.55729 301.5031 60.072914Q302.15936 60.572914 302.34686 61.52604L301.3156 61.68229Q301.175 61.05729 300.8 60.74479Q300.425 60.416664 299.89374 60.416664Q299.09686 60.416664 298.59686 60.99479Q298.09686 61.55729 298.09686 62.791664Q298.09686 64.05729 298.58124 64.61979Q299.0656 65.18229 299.83124 65.18229Q300.45624 65.18229 300.8625 64.80729Q301.28436 64.43229 301.40936 63.635414ZM302.95624 62.80729Q302.95624 61.072914 303.90936 60.24479Q304.70624 59.55729 305.8625 59.55729Q307.14374 59.55729 307.95624 60.40104Q308.78436 61.229164 308.78436 62.71354Q308.78436 63.916664 308.425 64.604164Q308.0656 65.291664 307.3625 65.68229Q306.675 66.05729 305.8625 66.05729Q304.5656 66.05729 303.7531 65.229164Q302.95624 64.385414 302.95624 62.80729ZM304.03436 62.80729Q304.03436 63.99479 304.55 64.58854Q305.08124 65.18229 305.8625 65.18229Q306.65936 65.18229 307.175 64.58854Q307.6906 63.99479 307.6906 62.77604Q307.6906 61.61979 307.15936 61.02604Q306.64374 60.43229 305.8625 60.43229Q305.08124 60.43229 304.55 61.02604Q304.03436 61.604164 304.03436 62.80729ZM310.34686 65.916664L310.34686 59.697914L311.28436 59.697914L311.28436 60.572914Q311.97186 59.55729 313.26874 59.55729Q313.83124 59.55729 314.3 59.760414Q314.78436 59.96354 315.01874 60.291664Q315.2531 60.61979 315.34686 61.05729Q315.39374 61.354164 315.39374 62.08854L315.39374 65.916664L314.34686 65.916664L314.34686 62.135414Q314.34686 61.479164 314.22186 61.166664Q314.09686 60.854164 313.78436 60.666664Q313.47186 60.46354 313.05 60.46354Q312.3781 60.46354 311.8781 60.90104Q311.39374 61.322914 311.39374 62.510414L311.39374 65.916664L310.34686 65.916664ZM319.64374 64.979164L319.8 65.90104Q319.34686 65.99479 319.0031 65.99479Q318.425 65.99479 318.1125 65.822914Q317.8 65.635414 317.65936 65.33854Q317.53436 65.041664 317.53436 64.08854L317.53436 60.510414L316.76874 60.510414L316.76874 59.697914L317.53436 59.697914L317.53436 58.15104L318.58124 57.52604L318.58124 59.697914L319.64374 59.697914L319.64374 60.510414L318.58124 60.510414L318.58124 64.15104Q318.58124 64.604164 318.6281 64.729164Q318.6906 64.854164 318.8156 64.93229Q318.9406 65.010414 319.175 65.010414Q319.3625 65.010414 319.64374 64.979164ZM320.33124 65.916664L320.33124 59.697914L321.28436 59.697914L321.28436 60.635414Q321.64374 59.979164 321.9406 59.77604Q322.2531 59.55729 322.6281 59.55729Q323.15936 59.55729 323.70624 59.885414L323.34686 60.86979Q322.95624 60.635414 322.58124 60.635414Q322.22186 60.635414 321.9406 60.854164Q321.675 61.05729 321.5656 61.43229Q321.3781 61.99479 321.3781 62.65104L321.3781 65.916664L320.33124 65.916664ZM323.95624 62.80729Q323.95624 61.072914 324.90936 60.24479Q325.70624 59.55729 326.8625 59.55729Q328.14374 59.55729 328.95624 60.40104Q329.78436 61.229164 329.78436 62.71354Q329.78436 63.916664 329.425 64.604164Q329.0656 65.291664 328.3625 65.68229Q327.675 66.05729 326.8625 66.05729Q325.5656 66.05729 324.7531 65.229164Q323.95624 64.385414 323.95624 62.80729ZM325.03436 62.80729Q325.03436 63.99479 325.55 64.58854Q326.08124 65.18229 326.8625 65.18229Q327.65936 65.18229 328.175 64.58854Q328.6906 63.99479 328.6906 62.77604Q328.6906 61.61979 328.15936 61.02604Q327.64374 60.43229 326.8625 60.43229Q326.08124 60.43229 325.55 61.02604Q325.03436 61.604164 325.03436 62.80729ZM331.3156 65.916664L331.3156 57.322914L332.3781 57.322914L332.3781 65.916664L331.3156 65.916664ZM334.3156 65.916664L334.3156 57.322914L335.3781 57.322914L335.3781 65.916664L334.3156 65.916664ZM341.59686 63.916664L342.6906 64.041664Q342.4406 64.99479 341.7375 65.52604Q341.03436 66.05729 339.95624 66.05729Q338.59686 66.05729 337.78436 65.21354Q336.9875 64.36979 336.9875 62.854164Q336.9875 61.291664 337.8 60.43229Q338.6125 59.55729 339.89374 59.55729Q341.14374 59.55729 341.925 60.40104Q342.72186 61.24479 342.72186 62.791664Q342.72186 62.885414 342.72186 63.072914L338.08124 63.072914Q338.14374 64.104164 338.65936 64.65104Q339.175 65.18229 339.95624 65.18229Q340.53436 65.18229 340.9406 64.885414Q341.3625 64.572914 341.59686 63.916664ZM338.14374 62.21354L341.6125 62.21354Q341.55 61.416664 341.22186 61.02604Q340.70624 60.416664 339.90936 60.416664Q339.175 60.416664 338.675 60.90104Q338.1906 61.385414 338.14374 62.21354ZM344.33124 65.916664L344.33124 59.697914L345.28436 59.697914L345.28436 60.635414Q345.64374 59.979164 345.9406 59.77604Q346.2531 59.55729 346.6281 59.55729Q347.15936 59.55729 347.70624 59.885414L347.34686 60.86979Q346.95624 60.635414 346.58124 60.635414Q346.22186 60.635414 345.9406 60.854164Q345.675 61.05729 345.5656 61.43229Q345.3781 61.99479 345.3781 62.65104L345.3781 65.916664L344.33124 65.916664ZM349.03436 68.447914L348.28436 68.447914Q350.03436 65.635414 350.03436 62.80729Q350.03436 61.71354 349.78436 60.61979Q349.58124 59.74479 349.22186 58.93229Q348.9875 58.416664 348.28436 57.18229L349.03436 57.18229Q350.1281 58.65104 350.65936 60.135414Q351.1125 61.416664 351.1125 62.80729Q351.1125 64.385414 350.5031 65.86979Q349.89374 67.33854 349.03436 68.447914Z" fill-rule="nonzero"/><path fill="#ea4335" d="M130.5 74.916664C130.5 74.36438 130.94771 73.916664 131.5 73.916664L141.5 73.916664C142.05229 73.916664 142.5 74.36438 142.5 74.916664L142.5 84.916664C142.5 85.46895 142.05229 85.916664 141.5 85.916664L131.5 85.916664C130.94771 85.916664 130.5 85.46895 130.5 84.916664Z" fill-rule="nonzero"/><path fill="#1a1a1a" d="M151.39062 83.916664L151.39062 75.322914L153.10938 75.322914L155.14062 81.40104Q155.42188 82.260414 155.54688 82.68229Q155.6875 82.21354 156.0 81.30729L158.0625 75.322914L159.59375 75.322914L159.59375 83.916664L158.5 83.916664L158.5 76.729164L156.0 83.916664L154.96875 83.916664L152.48438 76.604164L152.48438 83.916664L151.39062 83.916664ZM161.29688 76.541664L161.29688 75.322914L162.35938 75.322914L162.35938 76.541664L161.29688 76.541664ZM161.29688 83.916664L161.29688 77.697914L162.35938 77.697914L162.35938 83.916664L161.29688 83.916664ZM164.29688 83.916664L164.29688 77.697914L165.23438 77.697914L165.23438 78.572914Q165.92188 77.55729 167.21875 77.55729Q167.78125 77.55729 168.25 77.760414Q168.73438 77.96354 168.96875 78.291664Q169.20312 78.61979 169.29688 79.05729Q169.34375 79.354164 169.34375 80.08854L169.34375 83.916664L168.29688 83.916664L168.29688 80.135414Q168.29688 79.479164 168.17188 79.166664Q168.04688 78.854164 167.73438 78.666664Q167.42188 78.46354 167.0 78.46354Q166.32812 78.46354 165.82812 78.90104Q165.34375 79.322914 165.34375 80.510414L165.34375 83.916664L164.29688 83.916664ZM175.375 83.916664L175.375 82.99479Q174.64062 84.05729 173.39062 84.05729Q172.84375 84.05729 172.35938 83.854164Q171.89062 83.635414 171.65625 83.322914Q171.42188 82.99479 171.32812 82.52604Q171.26562 82.229164 171.26562 81.541664L171.26562 77.697914L172.32812 77.697914L172.32812 81.15104Q172.32812 81.96354 172.39062 82.260414Q172.48438 82.666664 172.79688 82.916664Q173.125 83.15104 173.60938 83.15104Q174.07812 83.15104 174.48438 82.916664Q174.90625 82.666664 175.07812 82.24479Q175.26562 81.822914 175.26562 81.02604L175.26562 77.697914L176.3125 77.697914L176.3125 83.916664L175.375 83.916664ZM180.59375 82.979164L180.75 83.90104Q180.29688 83.99479 179.95312 83.99479Q179.375 83.99479 179.0625 83.822914Q178.75 83.635414 178.60938 83.33854Q178.48438 83.041664 178.48438 82.08854L178.48438 78.510414L177.71875 78.510414L177.71875 77.697914L178.48438 77.697914L178.48438 76.15104L179.53125 75.52604L179.53125 77.697914L180.59375 77.697914L180.59375 78.510414L179.53125 78.510414L179.53125 82.15104Q179.53125 82.604164 179.57812 82.729164Q179.64062 82.854164 179.76562 82.93229Q179.89062 83.010414 180.125 83.010414Q180.3125 83.010414 180.59375 82.979164ZM185.54688 81.916664L186.64062 82.041664Q186.39062 82.99479 185.6875 83.52604Q184.98438 84.05729 183.90625 84.05729Q182.54688 84.05729 181.73438 83.21354Q180.9375 82.36979 180.9375 80.854164Q180.9375 79.291664 181.75 78.43229Q182.5625 77.55729 183.84375 77.55729Q185.09375 77.55729 185.875 78.40104Q186.67188 79.24479 186.67188 80.791664Q186.67188 80.885414 186.67188 81.072914L182.03125 81.072914Q182.09375 82.104164 182.60938 82.65104Q183.125 83.18229 183.90625 83.18229Q184.48438 83.18229 184.89062 82.885414Q185.3125 82.572914 185.54688 81.916664ZM182.09375 80.21354L185.5625 80.21354Q185.5 79.416664 185.17188 79.02604Q184.65625 78.416664 183.85938 78.416664Q183.125 78.416664 182.625 78.90104Q182.14062 79.385414 182.09375 80.21354ZM187.875 82.05729L188.90625 81.90104Q189.0 82.52604 189.39062 82.854164Q189.79688 83.18229 190.53125 83.18229Q191.25 83.18229 191.59375 82.90104Q191.95312 82.604164 191.95312 82.197914Q191.95312 81.83854 191.64062 81.635414Q191.42188 81.49479 190.5625 81.27604Q189.40625 80.979164 188.95312 80.77604Q188.51562 80.55729 188.28125 80.18229Q188.04688 79.80729 188.04688 79.33854Q188.04688 78.93229 188.23438 78.572914Q188.42188 78.21354 188.75 77.979164Q189.0 77.80729 189.42188 77.68229Q189.84375 77.55729 190.34375 77.55729Q191.0625 77.55729 191.60938 77.77604Q192.17188 77.979164 192.4375 78.33854Q192.70312 78.697914 192.79688 79.291664L191.76562 79.43229Q191.70312 78.96354 191.35938 78.697914Q191.03125 78.416664 190.40625 78.416664Q189.6875 78.416664 189.375 78.666664Q189.0625 78.90104 189.0625 79.229164Q189.0625 79.43229 189.1875 79.58854Q189.32812 79.760414 189.59375 79.86979Q189.75 79.93229 190.53125 80.135414Q191.65625 80.447914 192.09375 80.635414Q192.53125 80.822914 192.78125 81.18229Q193.03125 81.541664 193.03125 82.08854Q193.03125 82.61979 192.71875 83.08854Q192.42188 83.541664 191.84375 83.80729Q191.26562 84.05729 190.53125 84.05729Q189.3125 84.05729 188.67188 83.55729Q188.04688 83.041664 187.875 82.05729ZM198.26562 83.916664L197.28125 83.916664L197.28125 75.322914L198.34375 75.322914L198.34375 78.385414Q199.01562 77.55729 200.04688 77.55729Q200.625 77.55729 201.125 77.791664Q201.64062 78.010414 201.96875 78.43229Q202.3125 78.854164 202.5 79.447914Q202.6875 80.041664 202.6875 80.71354Q202.6875 82.30729 201.89062 83.18229Q201.09375 84.05729 200.0 84.05729Q198.89062 84.05729 198.26562 83.135414L198.26562 83.916664ZM198.25 80.760414Q198.25 81.86979 198.5625 82.36979Q199.0625 83.18229 199.90625 83.18229Q200.59375 83.18229 201.09375 82.58854Q201.60938 81.99479 201.60938 80.791664Q201.60938 79.572914 201.125 78.99479Q200.64062 78.416664 199.95312 78.416664Q199.26562 78.416664 198.75 79.02604Q198.25 79.61979 198.25 80.760414ZM208.54688 81.916664L209.64062 82.041664Q209.39062 82.99479 208.6875 83.52604Q207.98438 84.05729 206.90625 84.05729Q205.54688 84.05729 204.73438 83.21354Q203.9375 82.36979 203.9375 80.854164Q203.9375 79.291664 204.75 78.43229Q205.5625 77.55729 206.84375 77.55729Q208.09375 77.55729 208.875 78.40104Q209.67188 79.24479 209.67188 80.791664Q209.67188 80.885414 209.67188 81.072914L205.03125 81.072914Q205.09375 82.104164 205.60938 82.65104Q206.125 83.18229 206.90625 83.18229Q207.48438 83.18229 207.89062 82.885414Q208.3125 82.572914 208.54688 81.916664ZM205.09375 80.21354L208.5625 80.21354Q208.5 79.416664 208.17188 79.02604Q207.65625 78.416664 206.85938 78.416664Q206.125 78.416664 205.625 78.90104Q205.14062 79.385414 205.09375 80.21354ZM213.59375 82.979164L213.75 83.90104Q213.29688 83.99479 212.95312 83.99479Q212.375 83.99479 212.0625 83.822914Q211.75 83.635414 211.60938 83.33854Q211.48438 83.041664 211.48438 82.08854L211.48438 78.510414L210.71875 78.510414L210.71875 77.697914L211.48438 77.697914L211.48438 76.15104L212.53125 75.52604L212.53125 77.697914L213.59375 77.697914L213.59375 78.510414L212.53125 78.510414L212.53125 82.15104Q212.53125 82.604164 212.57812 82.729164Q212.64062 82.854164 212.76562 82.93229Q212.89062 83.010414 213.125 83.010414Q213.3125 83.010414 213.59375 82.979164ZM215.4375 83.916664L213.53125 77.697914L214.625 77.697914L215.60938 81.291664L215.98438 82.61979Q216.01562 82.52604 216.3125 81.33854L217.29688 77.697914L218.375 77.697914L219.3125 81.30729L219.625 82.49479L219.98438 81.291664L221.04688 77.697914L222.07812 77.697914L220.125 83.916664L219.03125 83.916664L218.04688 80.18229L217.79688 79.135414L216.54688 83.916664L215.4375 83.916664ZM227.54688 81.916664L228.64062 82.041664Q228.39062 82.99479 227.6875 83.52604Q226.98438 84.05729 225.90625 84.05729Q224.54688 84.05729 223.73438 83.21354Q222.9375 82.36979 222.9375 80.854164Q222.9375 79.291664 223.75 78.43229Q224.5625 77.55729 225.84375 77.55729Q227.09375 77.55729 227.875 78.40104Q228.67188 79.24479 228.67188 80.791664Q228.67188 80.885414 228.67188 81.072914L224.03125 81.072914Q224.09375 82.104164 224.60938 82.65104Q225.125 83.18229 225.90625 83.18229Q226.48438 83.18229 226.89062 82.885414Q227.3125 82.572914 227.54688 81.916664ZM224.09375 80.21354L227.5625 80.21354Q227.5 79.416664 227.17188 79.02604Q226.65625 78.416664 225.85938 78.416664Q225.125 78.416664 224.625 78.90104Q224.14062 79.385414 224.09375 80.21354ZM234.54688 81.916664L235.64062 82.041664Q235.39062 82.99479 234.6875 83.52604Q233.98438 84.05729 232.90625 84.05729Q231.54688 84.05729 230.73438 83.21354Q229.9375 82.36979 229.9375 80.854164Q229.9375 79.291664 230.75 78.43229Q231.5625 77.55729 232.84375 77.55729Q234.09375 77.55729 234.875 78.40104Q235.67188 79.24479 235.67188 80.791664Q235.67188 80.885414 235.67188 81.072914L231.03125 81.072914Q231.09375 82.104164 231.60938 82.65104Q232.125 83.18229 232.90625 83.18229Q233.48438 83.18229 233.89062 82.885414Q234.3125 82.572914 234.54688 81.916664ZM231.09375 80.21354L234.5625 80.21354Q234.5 79.416664 234.17188 79.02604Q233.65625 78.416664 232.85938 78.416664Q232.125 78.416664 231.625 78.90104Q231.14062 79.385414 231.09375 80.21354ZM237.29688 83.916664L237.29688 77.697914L238.23438 77.697914L238.23438 78.572914Q238.92188 77.55729 240.21875 77.55729Q240.78125 77.55729 241.25 77.760414Q241.73438 77.96354 241.96875 78.291664Q242.20312 78.61979 242.29688 79.05729Q242.34375 79.354164 242.34375 80.08854L242.34375 83.916664L241.29688 83.916664L241.29688 80.135414Q241.29688 79.479164 241.17188 79.166664Q241.04688 78.854164 240.73438 78.666664Q240.42188 78.46354 240.0 78.46354Q239.32812 78.46354 238.82812 78.90104Q238.34375 79.322914 238.34375 80.510414L238.34375 83.916664L237.29688 83.916664ZM251.35938 81.635414L252.39062 81.77604Q252.21875 82.83854 251.51562 83.447914Q250.8125 84.05729 249.79688 84.05729Q248.51562 84.05729 247.73438 83.229164Q246.96875 82.385414 246.96875 80.822914Q246.96875 79.822914 247.29688 79.072914Q247.64062 78.30729 248.3125 77.93229Q249.0 77.55729 249.8125 77.55729Q250.8125 77.55729 251.45312 78.072914Q252.10938 78.572914 252.29688 79.52604L251.26562 79.68229Q251.125 79.05729 250.75 78.74479Q250.375 78.416664 249.84375 78.416664Q249.04688 78.416664 248.54688 78.99479Q248.04688 79.55729 248.04688 80.791664Q248.04688 82.05729 248.53125 82.61979Q249.01562 83.18229 249.78125 83.18229Q250.40625 83.18229 250.8125 82.80729Q251.23438 82.43229 251.35938 81.635414ZM252.90625 80.80729Q252.90625 79.072914 253.85938 78.24479Q254.65625 77.55729 255.8125 77.55729Q257.09375 77.55729 257.90625 78.40104Q258.73438 79.229164 258.73438 80.71354Q258.73438 81.916664 258.375 82.604164Q258.01562 83.291664 257.3125 83.68229Q256.625 84.05729 255.8125 84.05729Q254.51562 84.05729 253.70312 83.229164Q252.90625 82.385414 252.90625 80.80729ZM253.98438 80.80729Q253.98438 81.99479 254.5 82.58854Q255.03125 83.18229 255.8125 83.18229Q256.60938 83.18229 257.125 82.58854Q257.64062 81.99479 257.64062 80.77604Q257.64062 79.61979 257.10938 79.02604Q256.59375 78.43229 255.8125 78.43229Q255.03125 78.43229 254.5 79.02604Q253.98438 79.604164 253.98438 80.80729ZM260.29688 83.916664L260.29688 77.697914L261.23438 77.697914L261.23438 78.572914Q261.92188 77.55729 263.21875 77.55729Q263.78125 77.55729 264.25 77.760414Q264.73438 77.96354 264.96875 78.291664Q265.20312 78.61979 265.29688 79.05729Q265.34375 79.354164 265.34375 80.08854L265.34375 83.916664L264.29688 83.916664L264.29688 80.135414Q264.29688 79.479164 264.17188 79.166664Q264.04688 78.854164 263.73438 78.666664Q263.42188 78.46354 263.0 78.46354Q262.32812 78.46354 261.82812 78.90104Q261.34375 79.322914 261.34375 80.510414L261.34375 83.916664L260.29688 83.916664ZM266.875 82.05729L267.90625 81.90104Q268.0 82.52604 268.39062 82.854164Q268.79688 83.18229 269.53125 83.18229Q270.25 83.18229 270.59375 82.90104Q270.95312 82.604164 270.95312 82.197914Q270.95312 81.83854 270.64062 81.635414Q270.42188 81.49479 269.5625 81.27604Q268.40625 80.979164 267.95312 80.77604Q267.51562 80.55729 267.28125 80.18229Q267.04688 79.80729 267.04688 79.33854Q267.04688 78.93229 267.23438 78.572914Q267.42188 78.21354 267.75 77.979164Q268.0 77.80729 268.42188 77.68229Q268.84375 77.55729 269.34375 77.55729Q270.0625 77.55729 270.60938 77.77604Q271.17188 77.979164 271.4375 78.33854Q271.70312 78.697914 271.79688 79.291664L270.76562 79.43229Q270.70312 78.96354 270.35938 78.697914Q270.03125 78.416664 269.40625 78.416664Q268.6875 78.416664 268.375 78.666664Q268.0625 78.90104 268.0625 79.229164Q268.0625 79.43229 268.1875 79.58854Q268.32812 79.760414 268.59375 79.86979Q268.75 79.93229 269.53125 80.135414Q270.65625 80.447914 271.09375 80.635414Q271.53125 80.822914 271.78125 81.18229Q272.03125 81.541664 272.03125 82.08854Q272.03125 82.61979 271.71875 83.08854Q271.42188 83.541664 270.84375 83.80729Q270.26562 84.05729 269.53125 84.05729Q268.3125 84.05729 267.67188 83.55729Q267.04688 83.041664 266.875 82.05729ZM277.54688 81.916664L278.64062 82.041664Q278.39062 82.99479 277.6875 83.52604Q276.98438 84.05729 275.90625 84.05729Q274.54688 84.05729 273.73438 83.21354Q272.9375 82.36979 272.9375 80.854164Q272.9375 79.291664 273.75 78.43229Q274.5625 77.55729 275.84375 77.55729Q277.09375 77.55729 277.875 78.40104Q278.67188 79.24479 278.67188 80.791664Q278.67188 80.885414 278.67188 81.072914L274.03125 81.072914Q274.09375 82.104164 274.60938 82.65104Q275.125 83.18229 275.90625 83.18229Q276.48438 83.18229 276.89062 82.885414Q277.3125 82.572914 277.54688 81.916664ZM274.09375 80.21354L277.5625 80.21354Q277.5 79.416664 277.17188 79.02604Q276.65625 78.416664 275.85938 78.416664Q275.125 78.416664 274.625 78.90104Q274.14062 79.385414 274.09375 80.21354ZM284.35938 81.635414L285.39062 81.77604Q285.21875 82.83854 284.51562 83.447914Q283.8125 84.05729 282.79688 84.05729Q281.51562 84.05729 280.73438 83.229164Q279.96875 82.385414 279.96875 80.822914Q279.96875 79.822914 280.29688 79.072914Q280.64062 78.30729 281.3125 77.93229Q282.0 77.55729 282.8125 77.55729Q283.8125 77.55729 284.45312 78.072914Q285.10938 78.572914 285.29688 79.52604L284.26562 79.68229Q284.125 79.05729 283.75 78.74479Q283.375 78.416664 282.84375 78.416664Q282.04688 78.416664 281.54688 78.99479Q281.04688 79.55729 281.04688 80.791664Q281.04688 82.05729 281.53125 82.61979Q282.01562 83.18229 282.78125 83.18229Q283.40625 83.18229 283.8125 82.80729Q284.23438 82.43229 284.35938 81.635414ZM290.375 83.916664L290.375 82.99479Q289.64062 84.05729 288.39062 84.05729Q287.84375 84.05729 287.35938 83.854164Q286.89062 83.635414 286.65625 83.322914Q286.42188 82.99479 286.32812 82.52604Q286.26562 82.229164 286.26562 81.541664L286.26562 77.697914L287.32812 77.697914L287.32812 81.15104Q287.32812 81.96354 287.39062 82.260414Q287.48438 82.666664 287.79688 82.916664Q288.125 83.15104 288.60938 83.15104Q289.07812 83.15104 289.48438 82.916664Q289.90625 82.666664 290.07812 82.24479Q290.26562 81.822914 290.26562 81.02604L290.26562 77.697914L291.3125 77.697914L291.3125 83.916664L290.375 83.916664ZM295.59375 82.979164L295.75 83.90104Q295.29688 83.99479 294.95312 83.99479Q294.375 83.99479 294.0625 83.822914Q293.75 83.635414 293.60938 83.33854Q293.48438 83.041664 293.48438 82.08854L293.48438 78.510414L292.71875 78.510414L292.71875 77.697914L293.48438 77.697914L293.48438 76.15104L294.53125 75.52604L294.53125 77.697914L295.59375 77.697914L295.59375 78.510414L294.53125 78.510414L294.53125 82.15104Q294.53125 82.604164 294.57812 82.729164Q294.64062 82.854164 294.76562 82.93229Q294.89062 83.010414 295.125 83.010414Q295.3125 83.010414 295.59375 82.979164ZM296.29688 76.541664L296.29688 75.322914L297.35938 75.322914L297.35938 76.541664L296.29688 76.541664ZM296.29688 83.916664L296.29688 77.697914L297.35938 77.697914L297.35938 83.916664L296.29688 83.916664ZM301.01562 83.916664L298.65625 77.697914L299.76562 77.697914L301.10938 81.416664Q301.3125 82.02604 301.5 82.666664Q301.64062 82.18229 301.89062 81.49479L303.28125 77.697914L304.35938 77.697914L302.0 83.916664L301.01562 83.916664ZM309.54688 81.916664L310.64062 82.041664Q310.39062 82.99479 309.6875 83.52604Q308.98438 84.05729 307.90625 84.05729Q306.54688 84.05729 305.73438 83.21354Q304.9375 82.36979 304.9375 80.854164Q304.9375 79.291664 305.75 78.43229Q306.5625 77.55729 307.84375 77.55729Q309.09375 77.55729 309.875 78.40104Q310.67188 79.24479 310.67188 80.791664Q310.67188 80.885414 310.67188 81.072914L306.03125 81.072914Q306.09375 82.104164 306.60938 82.65104Q307.125 83.18229 307.90625 83.18229Q308.48438 83.18229 308.89062 82.885414Q309.3125 82.572914 309.54688 81.916664ZM306.09375 80.21354L309.5625 80.21354Q309.5 79.416664 309.17188 79.02604Q308.65625 78.416664 307.85938 78.416664Q307.125 78.416664 306.625 78.90104Q306.14062 79.385414 306.09375 80.21354ZM315.28125 76.55729L315.28125 75.322914L316.34375 75.322914L316.34375 76.55729L315.28125 76.55729ZM313.95312 86.33854L314.14062 85.43229Q314.46875 85.510414 314.64062 85.510414Q314.96875 85.510414 315.125 85.291664Q315.28125 85.08854 315.28125 84.229164L315.28125 77.697914L316.34375 77.697914L316.34375 84.260414Q316.34375 85.40104 316.04688 85.854164Q315.65625 86.447914 314.78125 86.447914Q314.34375 86.447914 313.95312 86.33854ZM317.90625 80.80729Q317.90625 79.072914 318.85938 78.24479Q319.65625 77.55729 320.8125 77.55729Q322.09375 77.55729 322.90625 78.40104Q323.73438 79.229164 323.73438 80.71354Q323.73438 81.916664 323.375 82.604164Q323.01562 83.291664 322.3125 83.68229Q321.625 84.05729 320.8125 84.05729Q319.51562 84.05729 318.70312 83.229164Q317.90625 82.385414 317.90625 80.80729ZM318.98438 80.80729Q318.98438 81.99479 319.5 82.58854Q320.03125 83.18229 320.8125 83.18229Q321.60938 83.18229 322.125 82.58854Q322.64062 81.99479 322.64062 80.77604Q322.64062 79.61979 322.10938 79.02604Q321.59375 78.43229 320.8125 78.43229Q320.03125 78.43229 319.5 79.02604Q318.98438 79.604164 318.98438 80.80729ZM326.26562 83.916664L325.28125 83.916664L325.28125 75.322914L326.34375 75.322914L326.34375 78.385414Q327.01562 77.55729 328.04688 77.55729Q328.625 77.55729 329.125 77.791664Q329.64062 78.010414 329.96875 78.43229Q330.3125 78.854164 330.5 79.447914Q330.6875 80.041664 330.6875 80.71354Q330.6875 82.30729 329.89062 83.18229Q329.09375 84.05729 328.0 84.05729Q326.89062 84.05729 326.26562 83.135414L326.26562 83.916664ZM326.25 80.760414Q326.25 81.86979 326.5625 82.36979Q327.0625 83.18229 327.90625 83.18229Q328.59375 83.18229 329.09375 82.58854Q329.60938 81.99479 329.60938 80.791664Q329.60938 79.572914 329.125 78.99479Q328.64062 78.416664 327.95312 78.416664Q327.26562 78.416664 326.75 79.02604Q326.25 79.61979 326.25 80.760414ZM331.875 82.05729L332.90625 81.90104Q333.0 82.52604 333.39062 82.854164Q333.79688 83.18229 334.53125 83.18229Q335.25 83.18229 335.59375 82.90104Q335.95312 82.604164 335.95312 82.197914Q335.95312 81.83854 335.64062 81.635414Q335.42188 81.49479 334.5625 81.27604Q333.40625 80.979164 332.95312 80.77604Q332.51562 80.55729 332.28125 80.18229Q332.04688 79.80729 332.04688 79.33854Q332.04688 78.93229 332.23438 78.572914Q332.42188 78.21354 332.75 77.979164Q333.0 77.80729 333.42188 77.68229Q333.84375 77.55729 334.34375 77.55729Q335.0625 77.55729 335.60938 77.77604Q336.17188 77.979164 336.4375 78.33854Q336.70312 78.697914 336.79688 79.291664L335.76562 79.43229Q335.70312 78.96354 335.35938 78.697914Q335.03125 78.416664 334.40625 78.416664Q333.6875 78.416664 333.375 78.666664Q333.0625 78.90104 333.0625 79.229164Q333.0625 79.43229 333.1875 79.58854Q333.32812 79.760414 333.59375 79.86979Q333.75 79.93229 334.53125 80.135414Q335.65625 80.447914 336.09375 80.635414Q336.53125 80.822914 336.78125 81.18229Q337.03125 81.541664 337.03125 82.08854Q337.03125 82.61979 336.71875 83.08854Q336.42188 83.541664 335.84375 83.80729Q335.26562 84.05729 334.53125 84.05729Q333.3125 84.05729 332.67188 83.55729Q332.04688 83.041664 331.875 82.05729ZM345.35938 81.635414L346.39062 81.77604Q346.21875 82.83854 345.51562 83.447914Q344.8125 84.05729 343.79688 84.05729Q342.51562 84.05729 341.73438 83.229164Q340.96875 82.385414 340.96875 80.822914Q340.96875 79.822914 341.29688 79.072914Q341.64062 78.30729 342.3125 77.93229Q343.0 77.55729 343.8125 77.55729Q344.8125 77.55729 345.45312 78.072914Q346.10938 78.572914 346.29688 79.52604L345.26562 79.68229Q345.125 79.05729 344.75 78.74479Q344.375 78.416664 343.84375 78.416664Q343.04688 78.416664 342.54688 78.99479Q342.04688 79.55729 342.04688 80.791664Q342.04688 82.05729 342.53125 82.61979Q343.01562 83.18229 343.78125 83.18229Q344.40625 83.18229 344.8125 82.80729Q345.23438 82.43229 345.35938 81.635414ZM347.28125 83.916664L347.28125 77.697914L348.23438 77.697914L348.23438 78.635414Q348.59375 77.979164 348.89062 77.77604Q349.20312 77.55729 349.57812 77.55729Q350.10938 77.55729 350.65625 77.885414L350.29688 78.86979Q349.90625 78.635414 349.53125 78.635414Q349.17188 78.635414 348.89062 78.854164Q348.625 79.05729 348.51562 79.43229Q348.32812 79.99479 348.32812 80.65104L348.32812 83.916664L347.28125 83.916664ZM355.54688 81.916664L356.64062 82.041664Q356.39062 82.99479 355.6875 83.52604Q354.98438 84.05729 353.90625 84.05729Q352.54688 84.05729 351.73438 83.21354Q350.9375 82.36979 350.9375 80.854164Q350.9375 79.291664 351.75 78.43229Q352.5625 77.55729 353.84375 77.55729Q355.09375 77.55729 355.875 78.40104Q356.67188 79.24479 356.67188 80.791664Q356.67188 80.885414 356.67188 81.072914L352.03125 81.072914Q352.09375 82.104164 352.60938 82.65104Q353.125 83.18229 353.90625 83.18229Q354.48438 83.18229 354.89062 82.885414Q355.3125 82.572914 355.54688 81.916664ZM352.09375 80.21354L355.5625 80.21354Q355.5 79.416664 355.17188 79.02604Q354.65625 78.416664 353.85938 78.416664Q353.125 78.416664 352.625 78.90104Q352.14062 79.385414 352.09375 80.21354ZM362.35938 83.15104Q361.76562 83.65104 361.21875 83.854164Q360.6875 84.05729 360.0625 84.05729Q359.03125 84.05729 358.48438 83.55729Q357.9375 83.05729 357.9375 82.27604Q357.9375 81.822914 358.14062 81.447914Q358.34375 81.05729 358.6875 80.83854Q359.03125 80.604164 359.45312 80.49479Q359.75 80.40104 360.39062 80.322914Q361.65625 80.18229 362.26562 79.96354Q362.26562 79.74479 362.26562 79.697914Q362.26562 79.041664 361.96875 78.77604Q361.5625 78.43229 360.76562 78.43229Q360.03125 78.43229 359.67188 78.697914Q359.3125 78.947914 359.14062 79.604164L358.10938 79.46354Q358.25 78.80729 358.57812 78.40104Q358.90625 77.99479 359.51562 77.77604Q360.125 77.55729 360.92188 77.55729Q361.71875 77.55729 362.21875 77.74479Q362.71875 77.93229 362.95312 78.21354Q363.1875 78.49479 363.28125 78.93229Q363.32812 79.197914 363.32812 79.90104L363.32812 81.30729Q363.32812 82.77604 363.39062 83.166664Q363.46875 83.55729 363.67188 83.916664L362.5625 83.916664Q362.40625 83.58854 362.35938 83.15104ZM362.26562 80.791664Q361.6875 81.02604 360.54688 81.197914Q359.89062 81.291664 359.625 81.416664Q359.35938 81.52604 359.20312 81.74479Q359.0625 81.96354 359.0625 82.24479Q359.0625 82.666664 359.375 82.947914Q359.70312 83.229164 360.3125 83.229164Q360.92188 83.229164 361.39062 82.96354Q361.875 82.697914 362.09375 82.229164Q362.26562 81.86979 362.26562 81.18229L362.26562 80.791664ZM367.59375 82.979164L367.75 83.90104Q367.29688 83.99479 366.95312 83.99479Q366.375 83.99479 366.0625 83.822914Q365.75 83.635414 365.60938 83.33854Q365.48438 83.041664 365.48438 82.08854L365.48438 78.510414L364.71875 78.510414L364.71875 77.697914L365.48438 77.697914L365.48438 76.15104L366.53125 75.52604L366.53125 77.697914L367.59375 77.697914L367.59375 78.510414L366.53125 78.510414L366.53125 82.15104Q366.53125 82.604164 366.57812 82.729164Q366.64062 82.854164 366.76562 82.93229Q366.89062 83.010414 367.125 83.010414Q367.3125 83.010414 367.59375 82.979164ZM372.54688 81.916664L373.64062 82.041664Q373.39062 82.99479 372.6875 83.52604Q371.98438 84.05729 370.90625 84.05729Q369.54688 84.05729 368.73438 83.21354Q367.9375 82.36979 367.9375 80.854164Q367.9375 79.291664 368.75 78.43229Q369.5625 77.55729 370.84375 77.55729Q372.09375 77.55729 372.875 78.40104Q373.67188 79.24479 373.67188 80.791664Q373.67188 80.885414 373.67188 81.072914L369.03125 81.072914Q369.09375 82.104164 369.60938 82.65104Q370.125 83.18229 370.90625 83.18229Q371.48438 83.18229 371.89062 82.885414Q372.3125 82.572914 372.54688 81.916664ZM369.09375 80.21354L372.5625 80.21354Q372.5 79.416664 372.17188 79.02604Q371.65625 78.416664 370.85938 78.416664Q370.125 78.416664 369.625 78.90104Q369.14062 79.385414 369.09375 80.21354ZM379.32812 83.916664L379.32812 83.135414Q378.73438 84.05729 377.59375 84.05729Q376.84375 84.05729 376.21875 83.65104Q375.59375 83.229164 375.25 82.49479Q374.90625 81.760414 374.90625 80.80729Q374.90625 79.885414 375.21875 79.11979Q375.53125 78.354164 376.15625 77.96354Q376.78125 77.55729 377.54688 77.55729Q378.10938 77.55729 378.54688 77.791664Q378.98438 78.02604 379.26562 78.40104L379.26562 75.322914L380.3125 75.322914L380.3125 83.916664L379.32812 83.916664ZM376.0 80.80729Q376.0 82.010414 376.5 82.604164Q377.0 83.18229 377.6875 83.18229Q378.375 83.18229 378.85938 82.61979Q379.34375 82.05729 379.34375 80.90104Q379.34375 79.61979 378.84375 79.02604Q378.35938 78.43229 377.64062 78.43229Q376.9375 78.43229 376.46875 79.010414Q376.0 79.572914 376.0 80.80729ZM387.3125 86.447914Q386.4375 85.33854 385.82812 83.86979Q385.23438 82.385414 385.23438 80.80729Q385.23438 79.416664 385.67188 78.135414Q386.20312 76.65104 387.3125 75.18229L388.0625 75.18229Q387.35938 76.40104 387.125 76.916664Q386.76562 77.729164 386.5625 78.604164Q386.3125 79.697914 386.3125 80.80729Q386.3125 83.635414 388.0625 86.447914L387.3125 86.447914ZM389.29688 83.916664L389.29688 77.697914L390.23438 77.697914L390.23438 78.572914Q390.92188 77.55729 392.21875 77.55729Q392.78125 77.55729 393.25 77.760414Q393.73438 77.96354 393.96875 78.291664Q394.20312 78.61979 394.29688 79.05729Q394.34375 79.354164 394.34375 80.08854L394.34375 83.916664L393.29688 83.916664L393.29688 80.135414Q393.29688 79.479164 393.17188 79.166664Q393.04688 78.854164 392.73438 78.666664Q392.42188 78.46354 392.0 78.46354Q391.32812 78.46354 390.82812 78.90104Q390.34375 79.322914 390.34375 80.510414L390.34375 83.916664L389.29688 83.916664ZM400.54688 81.916664L401.64062 82.041664Q401.39062 82.99479 400.6875 83.52604Q399.98438 84.05729 398.90625 84.05729Q397.54688 84.05729 396.73438 83.21354Q395.9375 82.36979 395.9375 80.854164Q395.9375 79.291664 396.75 78.43229Q397.5625 77.55729 398.84375 77.55729Q400.09375 77.55729 400.875 78.40104Q401.67188 79.24479 401.67188 80.791664Q401.67188 80.885414 401.67188 81.072914L397.03125 81.072914Q397.09375 82.104164 397.60938 82.65104Q398.125 83.18229 398.90625 83.18229Q399.48438 83.18229 399.89062 82.885414Q400.3125 82.572914 400.54688 81.916664ZM397.09375 80.21354L400.5625 80.21354Q400.5 79.416664 400.17188 79.02604Q399.65625 78.416664 398.85938 78.416664Q398.125 78.416664 397.625 78.90104Q397.14062 79.385414 397.09375 80.21354ZM404.4375 83.916664L402.53125 77.697914L403.625 77.697914L404.60938 81.291664L404.98438 82.61979Q405.01562 82.52604 405.3125 81.33854L406.29688 77.697914L407.375 77.697914L408.3125 81.30729L408.625 82.49479L408.98438 81.291664L410.04688 77.697914L411.07812 77.697914L409.125 83.916664L408.03125 83.916664L407.04688 80.18229L406.79688 79.135414L405.54688 83.916664L404.4375 83.916664ZM419.35938 81.635414L420.39062 81.77604Q420.21875 82.83854 419.51562 83.447914Q418.8125 84.05729 417.79688 84.05729Q416.51562 84.05729 415.73438 83.229164Q414.96875 82.385414 414.96875 80.822914Q414.96875 79.822914 415.29688 79.072914Q415.64062 78.30729 416.3125 77.93229Q417.0 77.55729 417.8125 77.55729Q418.8125 77.55729 419.45312 78.072914Q420.10938 78.572914 420.29688 79.52604L419.26562 79.68229Q419.125 79.05729 418.75 78.74479Q418.375 78.416664 417.84375 78.416664Q417.04688 78.416664 416.54688 78.99479Q416.04688 79.55729 416.04688 80.791664Q416.04688 82.05729 416.53125 82.61979Q417.01562 83.18229 417.78125 83.18229Q418.40625 83.18229 418.8125 82.80729Q419.23438 82.43229 419.35938 81.635414ZM420.90625 80.80729Q420.90625 79.072914 421.85938 78.24479Q422.65625 77.55729 423.8125 77.55729Q425.09375 77.55729 425.90625 78.40104Q426.73438 79.229164 426.73438 80.71354Q426.73438 81.916664 426.375 82.604164Q426.01562 83.291664 425.3125 83.68229Q424.625 84.05729 423.8125 84.05729Q422.51562 84.05729 421.70312 83.229164Q420.90625 82.385414 420.90625 80.80729ZM421.98438 80.80729Q421.98438 81.99479 422.5 82.58854Q423.03125 83.18229 423.8125 83.18229Q424.60938 83.18229 425.125 82.58854Q425.64062 81.99479 425.64062 80.77604Q425.64062 79.61979 425.10938 79.02604Q424.59375 78.43229 423.8125 78.43229Q423.03125 78.43229 422.5 79.02604Q421.98438 79.604164 421.98438 80.80729ZM428.29688 83.916664L428.29688 77.697914L429.23438 77.697914L429.23438 78.572914Q429.92188 77.55729 431.21875 77.55729Q431.78125 77.55729 432.25 77.760414Q432.73438 77.96354 432.96875 78.291664Q433.20312 78.61979 433.29688 79.05729Q433.34375 79.354164 433.34375 80.08854L433.34375 83.916664L432.29688 83.916664L432.29688 80.135414Q432.29688 79.479164 432.17188 79.166664Q432.04688 78.854164 431.73438 78.666664Q431.42188 78.46354 431.0 78.46354Q430.32812 78.46354 429.82812 78.90104Q429.34375 79.322914 429.34375 80.510414L429.34375 83.916664L428.29688 83.916664ZM437.59375 82.979164L437.75 83.90104Q437.29688 83.99479 436.95312 83.99479Q436.375 83.99479 436.0625 83.822914Q435.75 83.635414 435.60938 83.33854Q435.48438 83.041664 435.48438 82.08854L435.48438 78.510414L434.71875 78.510414L434.71875 77.697914L435.48438 77.697914L435.48438 76.15104L436.53125 75.52604L436.53125 77.697914L437.59375 77.697914L437.59375 78.510414L436.53125 78.510414L436.53125 82.15104Q436.53125 82.604164 436.57812 82.729164Q436.64062 82.854164 436.76562 82.93229Q436.89062 83.010414 437.125 83.010414Q437.3125 83.010414 437.59375 82.979164ZM438.28125 83.916664L438.28125 77.697914L439.23438 77.697914L439.23438 78.635414Q439.59375 77.979164 439.89062 77.77604Q440.20312 77.55729 440.57812 77.55729Q441.10938 77.55729 441.65625 77.885414L441.29688 78.86979Q440.90625 78.635414 440.53125 78.635414Q440.17188 78.635414 439.89062 78.854164Q439.625 79.05729 439.51562 79.43229Q439.32812 79.99479 439.32812 80.65104L439.32812 83.916664L438.28125 83.916664ZM441.90625 80.80729Q441.90625 79.072914 442.85938 78.24479Q443.65625 77.55729 444.8125 77.55729Q446.09375 77.55729 446.90625 78.40104Q447.73438 79.229164 447.73438 80.71354Q447.73438 81.916664 447.375 82.604164Q447.01562 83.291664 446.3125 83.68229Q445.625 84.05729 444.8125 84.05729Q443.51562 84.05729 442.70312 83.229164Q441.90625 82.385414 441.90625 80.80729ZM442.98438 80.80729Q442.98438 81.99479 443.5 82.58854Q444.03125 83.18229 444.8125 83.18229Q445.60938 83.18229 446.125 82.58854Q446.64062 81.99479 446.64062 80.77604Q446.64062 79.61979 446.10938 79.02604Q445.59375 78.43229 444.8125 78.43229Q444.03125 78.43229 443.5 79.02604Q442.98438 79.604164 442.98438 80.80729ZM449.26562 83.916664L449.26562 75.322914L450.32812 75.322914L450.32812 83.916664L449.26562 83.916664ZM452.26562 83.916664L452.26562 75.322914L453.32812 75.322914L453.32812 83.916664L452.26562 83.916664ZM459.54688 81.916664L460.64062 82.041664Q460.39062 82.99479 459.6875 83.52604Q458.98438 84.05729 457.90625 84.05729Q456.54688 84.05729 455.73438 83.21354Q454.9375 82.36979 454.9375 80.854164Q454.9375 79.291664 455.75 78.43229Q456.5625 77.55729 457.84375 77.55729Q459.09375 77.55729 459.875 78.40104Q460.67188 79.24479 460.67188 80.791664Q460.67188 80.885414 460.67188 81.072914L456.03125 81.072914Q456.09375 82.104164 456.60938 82.65104Q457.125 83.18229 457.90625 83.18229Q458.48438 83.18229 458.89062 82.885414Q459.3125 82.572914 459.54688 81.916664ZM456.09375 80.21354L459.5625 80.21354Q459.5 79.416664 459.17188 79.02604Q458.65625 78.416664 457.85938 78.416664Q457.125 78.416664 456.625 78.90104Q456.14062 79.385414 456.09375 80.21354ZM462.28125 83.916664L462.28125 77.697914L463.23438 77.697914L463.23438 78.635414Q463.59375 77.979164 463.89062 77.77604Q464.20312 77.55729 464.57812 77.55729Q465.10938 77.55729 465.65625 77.885414L465.29688 78.86979Q464.90625 78.635414 464.53125 78.635414Q464.17188 78.635414 463.89062 78.854164Q463.625 79.05729 463.51562 79.43229Q463.32812 79.99479 463.32812 80.65104L463.32812 83.916664L462.28125 83.916664ZM466.98438 86.447914L466.23438 86.447914Q467.98438 83.635414 467.98438 80.80729Q467.98438 79.71354 467.73438 78.61979Q467.53125 77.74479 467.17188 76.93229Q466.9375 76.416664 466.23438 75.18229L466.98438 75.18229Q468.07812 76.65104 468.60938 78.135414Q469.0625 79.416664 469.0625 80.80729Q469.0625 82.385414 468.45312 83.86979Q467.84375 85.33854 466.98438 86.447914Z" fill-rule="nonzero"/><path fill="#757575" d="M258.26562 32.534374L260.15625 33.003124Q259.5625 35.346874 258.01562 36.58125Q256.46875 37.8 254.21875 37.8Q251.90625 37.8 250.45312 36.8625Q249.01562 35.909374 248.25 34.128124Q247.5 32.33125 247.5 30.284374Q247.5 28.05 248.34375 26.39375Q249.20312 24.721874 250.78125 23.8625Q252.35938 22.9875 254.25 22.9875Q256.40625 22.9875 257.85938 24.08125Q259.32812 25.175 259.90625 27.159374L258.04688 27.596874Q257.54688 26.034374 256.59375 25.33125Q255.65625 24.6125 254.21875 24.6125Q252.5625 24.6125 251.45312 25.409374Q250.34375 26.190624 249.89062 27.534374Q249.45312 28.8625 249.45312 30.26875Q249.45312 32.096874 249.98438 33.471874Q250.51562 34.83125 251.64062 35.503124Q252.76562 36.175 254.0625 36.175Q255.65625 36.175 256.76562 35.253124Q257.875 34.33125 258.26562 32.534374ZM261.17188 32.3625Q261.17188 29.4875 262.76562 28.096874Q264.10938 26.940624 266.03125 26.940624Q268.17188 26.940624 269.51562 28.346874Q270.875 29.753124 270.875 32.221874Q270.875 34.221874 270.28125 35.378124Q269.6875 36.51875 268.53125 37.159374Q267.39062 37.784374 266.03125 37.784374Q263.84375 37.784374 262.5 36.39375Q261.17188 34.9875 261.17188 32.3625ZM262.96875 32.3625Q262.96875 34.3625 263.82812 35.346874Q264.70312 36.33125 266.03125 36.33125Q267.34375 36.33125 268.20312 35.346874Q269.07812 34.346874 269.07812 32.3Q269.07812 30.378124 268.20312 29.39375Q267.32812 28.39375 266.03125 28.39375Q264.70312 28.39375 263.82812 29.39375Q262.96875 30.378124 262.96875 32.3625ZM272.8125 37.55L272.8125 27.175L274.39062 27.175L274.39062 28.628124Q274.875 27.878124 275.6875 27.409374Q276.5 26.940624 277.53125 26.940624Q278.6875 26.940624 279.42188 27.425Q280.15625 27.89375 280.46875 28.753124Q281.70312 26.940624 283.67188 26.940624Q285.21875 26.940624 286.04688 27.8Q286.875 28.659374 286.875 30.425L286.875 37.55L285.125 37.55L285.125 31.01875Q285.125 29.95625 284.95312 29.503124Q284.78125 29.034374 284.32812 28.753124Q283.89062 28.471874 283.28125 28.471874Q282.1875 28.471874 281.45312 29.20625Q280.73438 29.925 280.73438 31.51875L280.73438 37.55L278.98438 37.55L278.98438 30.815624Q278.98438 29.64375 278.54688 29.065624Q278.125 28.471874 277.14062 28.471874Q276.40625 28.471874 275.76562 28.8625Q275.14062 29.253124 274.85938 30.003124Q274.57812 30.753124 274.57812 32.175L274.57812 37.55L272.8125 37.55ZM289.8125 41.51875L289.8125 27.175L291.42188 27.175L291.42188 28.51875Q291.98438 27.7375 292.6875 27.346874Q293.40625 26.940624 294.42188 26.940624Q295.75 26.940624 296.76562 27.628124Q297.78125 28.315624 298.29688 29.565624Q298.82812 30.8 298.82812 32.284374Q298.82812 33.878124 298.25 35.159374Q297.6875 36.425 296.59375 37.1125Q295.5 37.784374 294.29688 37.784374Q293.42188 37.784374 292.71875 37.409374Q292.03125 37.034374 291.57812 36.471874L291.57812 41.51875L289.8125 41.51875ZM291.40625 32.425Q291.40625 34.425 292.21875 35.378124Q293.03125 36.33125 294.1875 36.33125Q295.35938 36.33125 296.1875 35.346874Q297.03125 34.3625 297.03125 32.26875Q297.03125 30.3 296.20312 29.315624Q295.39062 28.315624 294.26562 28.315624Q293.14062 28.315624 292.26562 29.378124Q291.40625 30.425 291.40625 32.425ZM307.59375 36.26875Q306.60938 37.096874 305.70312 37.440624Q304.79688 37.784374 303.76562 37.784374Q302.0625 37.784374 301.14062 36.95625Q300.21875 36.1125 300.21875 34.815624Q300.21875 34.05 300.5625 33.425Q300.92188 32.8 301.48438 32.425Q302.04688 32.034374 302.75 31.83125Q303.26562 31.70625 304.3125 31.565624Q306.4375 31.315624 307.4375 30.971874Q307.45312 30.6125 307.45312 30.503124Q307.45312 29.440624 306.95312 28.9875Q306.28125 28.39375 304.95312 28.39375Q303.70312 28.39375 303.10938 28.83125Q302.53125 29.26875 302.25 30.378124L300.53125 30.14375Q300.76562 29.034374 301.29688 28.3625Q301.82812 27.675 302.84375 27.315624Q303.85938 26.940624 305.20312 26.940624Q306.53125 26.940624 307.35938 27.253124Q308.1875 27.565624 308.57812 28.05Q308.96875 28.51875 309.125 29.2375Q309.21875 29.690624 309.21875 30.8625L309.21875 33.20625Q309.21875 35.659374 309.32812 36.315624Q309.4375 36.95625 309.78125 37.55L307.9375 37.55Q307.67188 37.003124 307.59375 36.26875ZM307.4375 32.346874Q306.48438 32.7375 304.5625 33.003124Q303.48438 33.159374 303.03125 33.3625Q302.59375 33.55 302.34375 33.925Q302.09375 34.3 302.09375 34.76875Q302.09375 35.471874 302.625 35.940624Q303.15625 36.409374 304.1875 36.409374Q305.20312 36.409374 305.98438 35.971874Q306.78125 35.51875 307.15625 34.753124Q307.4375 34.14375 307.4375 32.9875L307.4375 32.346874ZM311.79688 37.55L311.79688 27.175L313.375 27.175L313.375 28.753124Q313.98438 27.64375 314.5 27.3Q315.01562 26.940624 315.625 26.940624Q316.51562 26.940624 317.4375 27.503124L316.82812 29.14375Q316.1875 28.753124 315.54688 28.753124Q314.96875 28.753124 314.5 29.1125Q314.04688 29.45625 313.84375 30.065624Q313.5625 31.003124 313.5625 32.1125L313.5625 37.55L311.79688 37.55ZM318.82812 25.253124L318.82812 23.2375L320.59375 23.2375L320.59375 25.253124L318.82812 25.253124ZM318.82812 37.55L318.82812 27.175L320.59375 27.175L320.59375 37.55L318.82812 37.55ZM322.10938 34.45625L323.85938 34.175Q324.0 35.221874 324.67188 35.784374Q325.34375 36.33125 326.54688 36.33125Q327.75 36.33125 328.32812 35.846874Q328.92188 35.346874 328.92188 34.690624Q328.92188 34.096874 328.40625 33.753124Q328.04688 33.51875 326.60938 33.159374Q324.67188 32.659374 323.92188 32.315624Q323.1875 31.95625 322.79688 31.33125Q322.40625 30.690624 322.40625 29.925Q322.40625 29.2375 322.71875 28.64375Q323.04688 28.05 323.59375 27.659374Q324.0 27.3625 324.70312 27.159374Q325.42188 26.940624 326.23438 26.940624Q327.45312 26.940624 328.375 27.3Q329.29688 27.64375 329.73438 28.253124Q330.17188 28.846874 330.34375 29.846874L328.625 30.08125Q328.5 29.284374 327.9375 28.846874Q327.375 28.39375 326.35938 28.39375Q325.14062 28.39375 324.625 28.8Q324.10938 29.190624 324.10938 29.721874Q324.10938 30.065624 324.32812 30.346874Q324.53125 30.628124 325.0 30.815624Q325.26562 30.909374 326.54688 31.253124Q328.42188 31.753124 329.15625 32.08125Q329.89062 32.39375 330.3125 33.003124Q330.73438 33.596874 330.73438 34.503124Q330.73438 35.378124 330.21875 36.159374Q329.70312 36.940624 328.73438 37.3625Q327.76562 37.784374 326.54688 37.784374Q324.53125 37.784374 323.46875 36.940624Q322.40625 36.096874 322.10938 34.45625ZM332.17188 32.3625Q332.17188 29.4875 333.76562 28.096874Q335.10938 26.940624 337.03125 26.940624Q339.17188 26.940624 340.51562 28.346874Q341.875 29.753124 341.875 32.221874Q341.875 34.221874 341.28125 35.378124Q340.6875 36.51875 339.53125 37.159374Q338.39062 37.784374 337.03125 37.784374Q334.84375 37.784374 333.5 36.39375Q332.17188 34.9875 332.17188 32.3625ZM333.96875 32.3625Q333.96875 34.3625 334.82812 35.346874Q335.70312 36.33125 337.03125 36.33125Q338.34375 36.33125 339.20312 35.346874Q340.07812 34.346874 340.07812 32.3Q340.07812 30.378124 339.20312 29.39375Q338.32812 28.39375 337.03125 28.39375Q335.70312 28.39375 334.82812 29.39375Q333.96875 30.378124 333.96875 32.3625ZM343.8125 37.55L343.8125 27.175L345.40625 27.175L345.40625 28.659374Q346.54688 26.940624 348.70312 26.940624Q349.64062 26.940624 350.42188 27.284374Q351.21875 27.6125 351.60938 28.159374Q352.0 28.70625 352.15625 29.45625Q352.25 29.95625 352.25 31.175L352.25 37.55L350.48438 37.55L350.48438 31.2375Q350.48438 30.159374 350.28125 29.628124Q350.07812 29.096874 349.54688 28.784374Q349.03125 28.471874 348.32812 28.471874Q347.20312 28.471874 346.39062 29.190624Q345.57812 29.89375 345.57812 31.878124L345.57812 37.55L343.8125 37.55Z" fill-rule="nonzero"/></svg>
\ No newline at end of file

From 6cb679e9eccedd7b2dc06eb0a9c3ab8301545dc9 Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Wed, 7 Apr 2021 08:26:17 -0700
Subject: [PATCH 493/788] correct config.toml

---
 config.toml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/config.toml b/config.toml
index c20fcbb9e6..f4922ef075 100644
--- a/config.toml
+++ b/config.toml
@@ -185,23 +185,23 @@ docsbranch = "master"
 url = "https://kubernetes.io"
 
 [[params.versions]]
-fullversion = "v1.20.6"
+fullversion = "v1.20.5"
 version = "v1.20"
-githubbranch = "v1.20.6"
+githubbranch = "v1.20.5"
 docsbranch = "release-1.20"
 url = "https://v1-20.kubernetes.io"
 
 [[params.versions]]
-fullversion = "v1.19.10"
+fullversion = "v1.19.9"
 version = "v1.19"
-githubbranch = "v1.19.10"
+githubbranch = "v1.19.9"
 docsbranch = "release-1.19"
 url = "https://v1-19.docs.kubernetes.io"
 
 [[params.versions]]
-fullversion = "v1.18.18"
+fullversion = "v1.18.17"
 version = "v1.18"
-githubbranch = "v1.18.18"
+githubbranch = "v1.18.17"
 docsbranch = "release-1.18"
 url = "https://v1-18.docs.kubernetes.io"
 

From 0c988b2dcb2c891e49702fe04c178cc61e3ff59d Mon Sep 17 00:00:00 2001
From: Tim Allclair <timallclair@gmail.com>
Date: Wed, 7 Apr 2021 15:49:24 -0700
Subject: [PATCH 494/788] Correct dockershim runtime handler support

---
 content/en/docs/concepts/containers/runtime-class.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/containers/runtime-class.md b/content/en/docs/concepts/containers/runtime-class.md
index abfec1ef6c..6af609636e 100644
--- a/content/en/docs/concepts/containers/runtime-class.md
+++ b/content/en/docs/concepts/containers/runtime-class.md
@@ -109,7 +109,8 @@ For more details on setting up CRI runtimes, see [CRI installation](/docs/setup/
 
 #### dockershim
 
-Kubernetes built-in dockershim CRI does not support runtime handlers.
+RuntimeClasses with dockershim must set the runtime handler to `docker`. Dockershim does not support
+custom configurable runtime handlers.
 
 #### {{< glossary_tooltip term_id="containerd" >}}
 
@@ -163,7 +164,7 @@ Nodes](/docs/concepts/scheduling-eviction/assign-pod-node/).
 {{< feature-state for_k8s_version="v1.18" state="beta" >}}
 
 You can specify _overhead_ resources that are associated with running a Pod. Declaring overhead allows
-the cluster (including the scheduler) to account for it when making decisions about Pods and resources.  
+the cluster (including the scheduler) to account for it when making decisions about Pods and resources.
 To use Pod overhead, you must have the PodOverhead [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
 enabled (it is on by default).
 

From 0241569e929e4a43b582858a75e234f14daffa35 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Wed, 7 Apr 2021 17:39:26 +0800
Subject: [PATCH 495/788] [zh] Sync contribute  pages for kubernetes-api.md

* Sync with english version in 'Fixed errors in instructions for generating ref docs (#27386)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../generate-ref-docs/kubernetes-api.md       | 61 +++++++++++--------
 1 file changed, 37 insertions(+), 24 deletions(-)

diff --git a/content/zh/docs/contribute/generate-ref-docs/kubernetes-api.md b/content/zh/docs/contribute/generate-ref-docs/kubernetes-api.md
index b0eb61a197..9059cdef1e 100644
--- a/content/zh/docs/contribute/generate-ref-docs/kubernetes-api.md
+++ b/content/zh/docs/contribute/generate-ref-docs/kubernetes-api.md
@@ -12,11 +12,11 @@ weight: 50
 <!-- overview -->
 
 <!--
-This page shows how to update the generated reference docs for the Kubernetes API.
+This page shows how to update the Kubernetes API reference documentation.
 
 The Kubernetes API reference documentation is built from the
 [Kubernetes OpenAPI spec](https://github.com/kubernetes/kubernetes/blob/master/api/openapi-spec/swagger.json)
-and tools from [kubernetes-sigs/reference-docs](https://github.com/kubernetes-sigs/reference-docs).
+using the [kubernetes-sigs/reference-docs](https://github.com/kubernetes-sigs/reference-docs) generation code.
 
 If you find bugs in the generated documentation, you need to
 [fix them upstream](/docs/contribute/generate-ref-docs/contribute-upstream/).
@@ -24,12 +24,12 @@ If you find bugs in the generated documentation, you need to
 If you need only to regenerate the reference documentation from the [OpenAPI](https://github.com/OAI/OpenAPI-Specification)
 spec, continue reading this page.
 -->
-本页面展示了如何为 Kubernetes API 更新自动生成的参考文档。
+本页面显示了如何更新 Kubernetes API 参考文档。
 
 Kubernetes API 参考文档是从
 [Kubernetes OpenAPI 规范](https://github.com/kubernetes/kubernetes/blob/master/api/openapi-spec/swagger.json)
-构建的，而工具是从
-[kubernetes-sigs/reference-docs](https://github.com/kubernetes-sigs/reference-docs) 构建的。
+构建的，
+且使用[kubernetes-sigs/reference-docs](https://github.com/kubernetes-sigs/reference-docs) 生成代码。
 
 如果您在生成的文档中发现错误，则需要[在上游修复](/zh/docs/contribute/generate-ref-docs/contribute-upstream/)。
 
@@ -55,23 +55,30 @@ mkdir -p $HOME/<workspace>
 export GOPATH=$HOME/<workspace>
 ```
 
-<!-- Get a local clone of the following repositories: -->
+<!-- 
+Get a local clone of the following repositories: 
+-->
 获取以下仓库的本地克隆：
 
 ```shell
-go get -u github.com/kubernetes-incubator/reference-docs
+go get -u github.com/kubernetes-sigs/reference-docs
+
 go get -u github.com/go-openapi/loads
 go get -u github.com/go-openapi/spec
 ```
 
-<!-- If you don't already have the kubernetes/website repository, get it now: -->
+<!-- 
+If you don't already have the kubernetes/website repository, get it now: 
+-->
 如果你还没有下载过 `kubernetes/website` 仓库，现在下载：
 
 ```shell
 git clone https://github.com/<your-username>/website $GOPATH/src/github.com/<your-username>/website
 ```
 
-<!-- Get a clone of the kubernetes/kubernetes repository as k8s.io/kubernetes: -->
+<!-- 
+Get a clone of the kubernetes/kubernetes repository as k8s.io/kubernetes: 
+-->
 克隆 kubernetes/kubernetes 仓库作为 k8s.io/kubernetes：
 
 ```shell
@@ -90,8 +97,8 @@ The remaining steps refer to your base directory as `<k8s-base>`.
 The remaining steps refer to your base directory as `<web-base>`.
 
 * The base directory of your clone of the
-[kubernetes-incubator/reference-docs](https://github.com/kubernetes-incubator/reference-docs)
-repository is `$GOPATH/src/github.com/kubernetes-incubator/reference-docs.`
+[kubernetes-sigs/reference-docs](https://github.com/kubernetes-sigs/reference-docs)
+repository is `$GOPATH/src/github.com/kubernetes-sigs/reference-docs.`
 The remaining steps refer to your base directory as `<rdocs-base>`.
 -->
 * [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes) 仓库克隆后的根目录为
@@ -99,7 +106,7 @@ The remaining steps refer to your base directory as `<rdocs-base>`.
 * [kubernetes/website](https://github.com/kubernetes/website) 仓库克隆后的根目录为
   `$GOPATH/src/github.com/<your username>/website`。后续步骤将此目录称为 `<web-base>`。
 * [kubernetes-sigs/reference-docs](https://github.com/kubernetes-sigs/reference-docs)
-  仓库克隆后的基本目录为 `$GOPATH/src/github.com/kubernetes-sigs/reference-docs`。
+  仓库克隆后的基本目录为 `$GOPATH/src/github.com/kubernetes-sigs/reference-docs.`。
   后续步骤将此目录称为 `<rdocs-base>`。
 
 <!-- 
@@ -122,21 +129,23 @@ Go to `<rdocs-base>`, and open the `Makefile` for editing:
 <!-- 
 * Set `K8S_ROOT` to `<k8s-base>`.
 * Set `K8S_WEBROOT` to `<web-base>`.
-* Set `K8S_RELEASE` to the minor version of the docs you want to build.
-For example, if you want to build docs for Kubernetes 1.17, set `K8S_RELEASE` to 1.17.
+* Set `K8S_RELEASE` to the version of the docs you want to build.
+  For example, if you want to build docs for Kubernetes 1.17.0, set `K8S_RELEASE` to 1.17.0.
 -->
 * 设置 `K8S_ROOT` 为 `<k8s-base>`.
 * 设置 `K8S_WEBROOT` 为 `<web-base>`.
 * 设置 `K8S_RELEASE` 为要构建的文档的版本。
-  例如，如果您想为 Kubernetes 1.17 构建文档，请将 `K8S_RELEASE` 设置为 1.17。
+  例如，如果您想为 Kubernetes 1.17.0 构建文档，请将 `K8S_RELEASE` 设置为 1.17.0。
 
-<!-- For example, update the following variables: -->
+<!-- 
+For example: 
+-->
 例如：
 
-```
+```shell
 export K8S_WEBROOT=$(GOPATH)/src/github.com/<your-username>/website
 export K8S_ROOT=$(GOPATH)/src/k8s.io/kubernetes
-export K8S_RELEASE=1.17
+export K8S_RELEASE=1.17.0
 ```
 
 <!--
@@ -156,9 +165,9 @@ The versioned directory name follows the pattern of `v<major>_<minor>`.
 版本化目录的名称形式为 `v<major>_<minor>`。
 
 <!--
-In the '<rdocs-base>' directory, run the following build target:
+In the `<rdocs-base>` directory, run the following build target:
 -->
-在  '<rdocs-base>'  目录中，运行以下命令来构建：
+在  `<rdocs-base>`  目录中，运行以下命令来构建：
 
 ```shell
 cd <rdocs-base>
@@ -184,12 +193,14 @@ cd <rdocs-base>
 make copyapi
 ```
 
-<!-- Verify that these two files have been generated: -->
+<!-- 
+Verify that these two files have been generated: 
+-->
 验证是否已生成这两个文件：
 
 ```shell
-[ -e "<rdocs-base>/gen-apidocs/generators/build/index.html" ] && echo "index.html built" || echo "no index.html"
-[ -e "<rdocs-base>/gen-apidocs/generators/build/navData.js" ] && echo "navData.js built" || echo "no navData.js"
+[ -e "<rdocs-base>/gen-apidocs/build/index.html" ] && echo "index.html built" || echo "no index.html"
+[ -e "<rdocs-base>/gen-apidocs/build/navData.js" ] && echo "navData.js built" || echo "no navData.js"
 ```
 
 <!--
@@ -203,7 +214,9 @@ cd <web-base>
 git status
 ```
 
-<!-- The output is similar to: -->
+<!-- 
+The output is similar to: 
+-->
 输出类似于：
 
 ```

From 7fde0426dfc9d966cfaabb00192019ee3c81b84d Mon Sep 17 00:00:00 2001
From: s-kawamura-w664 <s-kawamura_p@nec.com>
Date: Tue, 30 Mar 2021 07:12:44 +0000
Subject: [PATCH 496/788] Add script for detecting bad characters.

Co-authored-by: Shu Muto <shu.mutow@nec.com>
---
 scripts/README.md         | 26 +++++++++++++++++++
 scripts/check-ctrlcode.py | 54 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 80 insertions(+)
 create mode 100755 scripts/check-ctrlcode.py

diff --git a/scripts/README.md b/scripts/README.md
index 4f7ee7eec3..02e3e66ff0 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -11,6 +11,7 @@
 | `linkchecker.py` | This a link checker for Kubernetes documentation website. |
 | `lsync.sh` | This script checks if the English version of a page has changed since a localized page has been committed. |
 | `replace-capture.sh` | This script sets K8S_WEBSITE in your env to your docs website root or rely on this script to determine it automatically |
+| `check-ctrlcode.py` | This script finds control-code(0x00-0x1f) in text files. |
 
 
 
@@ -152,3 +153,28 @@ The following command checks a subdirectory:
 
     ./scripts/lsync.sh content/zh/docs/concepts/
 
+## check-ctrlcode.py
+
+This script finds control-code(0x00-0x1f) in text files.
+It will display illegal character in browser.
+
+```
+Usage: ./check-ctrlcode.py <dir> <ext>
+
+  <dir>    Specify the directory to check.
+  <ext>    Specify the extension to check.
+
+For example, we can execute as following.
+
+  ./check-ctrlcode.py ../content/en/ .md
+
+The output is following format.
+
+  "{0} <L{1}:{2}:{3}>: {4}"
+
+  {0} : The path of file that a control-code exists.
+  {1} : The line number that a control-code exists.
+  {2} : The column number that a control-code exists.
+  {3} : The found control-code.
+  {4} : The one-line strings in the file.
+```
\ No newline at end of file
diff --git a/scripts/check-ctrlcode.py b/scripts/check-ctrlcode.py
new file mode 100755
index 0000000000..b2705a409a
--- /dev/null
+++ b/scripts/check-ctrlcode.py
@@ -0,0 +1,54 @@
+#!/usr/bin/env python3
+
+import os
+import sys
+import re
+
+def main():
+    args = sys.argv
+    if (len(args) != 3):
+        print("Usage: ./check-ctrlcode.py <dir> <ext>")
+        sys.exit(1)
+
+    dirpath = args[1]
+    ext = args[2]
+
+    fullpath = os.path.abspath(dirpath)
+    if (os.path.isdir(fullpath) is not True):
+        print("Directory not found.")
+        sys.exit(1)
+
+    check_dir(fullpath, ext)
+
+def check_dir(path, ext):
+    for f in os.listdir(path):
+        if(f[0] == "."):
+            continue
+        fullpath = os.path.join(path, f)
+        if(os.path.isdir(fullpath)):
+            check_dir(fullpath, ext)
+            continue
+        exts = os.path.splitext(f)
+        if(exts[1] != ext):
+            continue
+        check_ctrlcode(fullpath)
+
+def check_ctrlcode(filepath):
+    line = 0
+    with open(filepath, encoding='utf-8') as f:
+        while True:
+            str = f.readline()
+            if(str == ""):
+                break
+            line = line + 1
+            # check 0x00-0x1f except 0x09(HT), 0x0a(LF), 0x0d(CR)
+            pattern = re.compile('[\u0000-\u0008\u000b\u000c\u000e-\u001f]')
+            m = pattern.search(str)
+            if(m == None):
+                continue
+            pos = m.end()
+            ctrl = m.group().encode("utf-8")
+            print("{0} <L{1}:{2}:{3}>: {4}\n".format(filepath, line, pos, ctrl, str.replace('\n','')))
+
+
+main()

From aa7d13a5bf29dcbc638ac5054a340614e0a3d8c7 Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Thu, 8 Apr 2021 18:29:02 +0800
Subject: [PATCH 497/788] [zh]update configure-upgrade-etcd.md

---
 .../configure-upgrade-etcd.md                 | 567 ++++++++++++------
 1 file changed, 367 insertions(+), 200 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 749aabc73d..c64815d38b 100644
--- a/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -18,12 +18,8 @@ content_type: task
 <!-- overview -->
 {{< glossary_definition term_id="etcd" length="all" >}}
 
-
-
-
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 
@@ -35,13 +31,21 @@ content_type: task
 
 * Run etcd as a cluster of odd members.
 
-* etcd is a leader-based distributed system. Ensure that the leader periodically send heartbeats on time to all followers to keep the cluster stable.
+* etcd is a leader-based distributed system. Ensure that the leader
+  periodically send heartbeats on time to all followers to keep the cluster
+  stable.
 
 * Ensure that no resource starvation occurs.
 
-  Performance and stability of the cluster is sensitive to network and disk IO. Any resource starvation can lead to heartbeat timeout, causing instability of the cluster. An unstable etcd indicates that no leader is elected. Under such circumstances, a cluster cannot make any changes to its current state, which implies no new pods can be scheduled.
+  Performance and stability of the cluster is sensitive to network and disk
+  I/O. Any resource starvation can lead to heartbeat timeout, causing instability
+  of the cluster. An unstable etcd indicates that no leader is elected. Under
+  such circumstances, a cluster cannot make any changes to its current state,
+  which implies no new pods can be scheduled.
 
-* Keeping stable etcd clusters is critical to the stability of Kubernetes clusters. Therefore, run etcd clusters on dedicated machines or isolated environments for [guaranteed resource requirements](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/hardware.md#hardware-recommendations).
+* Keeping etcd clusters stable is critical to the stability of Kubernetes
+  clusters. Therefore, run etcd clusters on dedicated machines or isolated
+  environments for [guaranteed resource requirements](https://etcd.io/docs/current/op-guide/hardware/).
 
 * The minimum recommended version of etcd to run in production is `3.2.10+`.
 -->
@@ -53,16 +57,23 @@ content_type: task
 
 * 确保不发生资源不足。
   
-  集群的性能和稳定性对网络和磁盘 IO 非常敏感。任何资源匮乏都会导致心跳超时，从而导致集群的不稳定。不稳定的情况表明没有选出任何主节点。在这种情况下，集群不能对其当前状态进行任何更改，这意味着不能调度新的 pod。
+  集群的性能和稳定性对网络和磁盘 I/O 非常敏感。任何资源匮乏都会导致心跳超时，
+  从而导致集群的不稳定。不稳定的情况表明没有选出任何主节点。
+  在这种情况下，集群不能对其当前状态进行任何更改，这意味着不能调度新的 pod。
 
-* 保持稳定的 etcd 集群对 Kubernetes 集群的稳定性至关重要。因此，请在专用机器或隔离环境上运行 etcd 集群，以满足[所需资源需求](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/hardware.md#hardware-recommendations)。
+* 保持 etcd 集群的稳定对 Kubernetes 集群的稳定性至关重要。
+  因此，请在专用机器或隔离环境上运行 etcd 集群，以满足
+  [所需资源需求](https://etcd.io/docs/current/op-guide/hardware/)。
 
 * 在生产中运行的 etcd 的最低推荐版本是 `3.2.10+`。
   
 <!--
 ## Resource requirements
 
-Operating etcd with limited resources is suitable only for testing purposes. For deploying in production, advanced hardware configuration is required. Before deploying etcd in production, see [resource requirement reference documentation](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/hardware.md#example-hardware-configurations).
+Operating etcd with limited resources is suitable only for testing purposes.
+For deploying in production, advanced hardware configuration is required.
+Before deploying etcd in production, see
+[resource requirement reference](https://etcd.io/docs/current/op-guide/hardware/#example-hardware-configurations).
 
 ## Starting etcd clusters
 
@@ -70,7 +81,9 @@ This section covers starting a single-node and multi-node etcd cluster.
 -->
 ## 资源要求
 
-使用有限的资源运行 etcd 只适合测试目的。为了在生产中部署，需要先进的硬件配置。在生产中部署 etcd 之前，请查看[所需资源参考文档](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/hardware.md#example-hardware-configurations)。
+使用有限的资源运行 etcd 只适合测试目的。为了在生产中部署，需要先进的硬件配置。
+在生产中部署 etcd 之前，请查看
+[所需资源参考文档](https://etcd.io/docs/current/op-guide/hardware/#example-hardware-configurations)。
 
 ## 启动 etcd 集群
 
@@ -83,13 +96,15 @@ Use a single-node etcd cluster only for testing purpose.
 
 1. Run the following:
 
-    ```sh
-    ./etcd --listen-client-urls=http://$PRIVATE_IP:2379 --advertise-client-urls=http://$PRIVATE_IP:2379
-    ```
+   ```sh
+   etcd --listen-client-urls=http://$PRIVATE_IP:2379 \
+      --advertise-client-urls=http://$PRIVATE_IP:2379
+   ```
 
-2. Start Kubernetes API server with the flag `--etcd-servers=$PRIVATE_IP:2379`.
+2. Start the Kubernetes API server with the flag
+   `--etcd-servers=$PRIVATE_IP:2379`.
 
-    Replace `PRIVATE_IP` with your etcd client IP.
+    Make sure `PRIVATE_IP` is set to your etcd client IP.
 -->
 ### 单节点 etcd 集群
 
@@ -97,53 +112,70 @@ Use a single-node etcd cluster only for testing purpose.
 
 1. 运行以下命令：
 
-    ```sh
-    ./etcd --listen-client-urls=http://$PRIVATE_IP:2379 --advertise-client-urls=http://$PRIVATE_IP:2379
-    ```
+   ```sh
+   etcd --listen-client-urls=http://$PRIVATE_IP:2379 \
+      --advertise-client-urls=http://$PRIVATE_IP:2379
+   ```
 
 2. 使用参数 `--etcd-servers=$PRIVATE_IP:2379` 启动 Kubernetes API 服务器。
 
-    使用您 etcd 客户端 IP 替换 `PRIVATE_IP`。
+   确保将 `PRIVATE_IP` 设置为etcd客户端 IP。
 
 <!--
 ### Multi-node etcd cluster
 
-For durability and high availability, run etcd as a multi-node cluster in production and back it up periodically. A five-member cluster is recommended in production. For more information, see [FAQ Documentation](https://github.com/coreos/etcd/blob/master/Documentation/faq.md#what-is-failure-tolerance).
+For durability and high availability, run etcd as a multi-node cluster in
+production and back it up periodically. A five-member cluster is recommended
+in production. For more information, see
+[FAQ documentation](https://etcd.io/docs/current/faq/#what-is-failure-tolerance).
 
-Configure an etcd cluster either by static member information or by dynamic discovery. For more information on clustering, see [etcd Clustering Documentation](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/clustering.md).
+Configure an etcd cluster either by static member information or by dynamic
+discovery. For more information on clustering, see
+[etcd clustering documentation](https://etcd.io/docs/current/op-guide/clustering/).
 
-For an example, consider a five-member etcd cluster running with the following client URLs: `http://$IP1:2379`, `http://$IP2:2379`, `http://$IP3:2379`, `http://$IP4:2379`, and `http://$IP5:2379`. To start a Kubernetes API server:
+For an example, consider a five-member etcd cluster running with the following
+client URLs: `http://$IP1:2379`, `http://$IP2:2379`, `http://$IP3:2379`,
+`http://$IP4:2379`, and `http://$IP5:2379`. To start a Kubernetes API server:
 
 1. Run the following:
 
-    ```sh
-    ./etcd --listen-client-urls=http://$IP1:2379, http://$IP2:2379, http://$IP3:2379, http://$IP4:2379, http://$IP5:2379 --advertise-client-urls=http://$IP1:2379, http://$IP2:2379, http://$IP3:2379, http://$IP4:2379, http://$IP5:2379
-    ```
+   ```shell
+   etcd --listen-client-urls=http://$IP1:2379,http://$IP2:2379,http://$IP3:2379,http://$IP4:2379,http://$IP5:2379 --advertise-client-urls=http://$IP1:2379,http://$IP2:2379,http://$IP3:2379,http://$IP4:2379,http://$IP5:2379
+   ```
 
-2. Start Kubernetes API servers with the flag `--etcd-servers=$IP1:2379, $IP2:2379, $IP3:2379, $IP4:2379, $IP5:2379`.
+2. Start the Kubernetes API servers with the flag
+   `--etcd-servers=$IP1:2379,$IP2:2379,$IP3:2379,$IP4:2379,$IP5:2379`.
 
-    Replace `IP` with your client IP addresses.
+   Make sure the `IP<n>` variables are set to your client IP addresses.
 -->
 ### 多节点 etcd 集群
 
-为了耐用性和高可用性，在生产中将以多节点集群的方式运行 etcd，并且定期备份。建议在生产中使用五个成员的集群。有关该内容的更多信息，请参阅[常见问题文档](https://github.com/coreos/etcd/blob/master/Documentation/faq.md#what-is-failure-tolerance)。
+为了耐用性和高可用性，在生产中将以多节点集群的方式运行 etcd，并且定期备份。
+建议在生产中使用五个成员的集群。
+有关该内容的更多信息，请参阅
+[常见问题文档](https://etcd.io/docs/current/faq/#what-is-failure-tolerance)。
 
-可以通过静态成员信息或动态发现的方式配置 etcd 集群。有关集群的详细信息，请参阅 [etcd 集群文档](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/clustering.md)。
+可以通过静态成员信息或动态发现的方式配置 etcd 集群。
+有关集群的详细信息，请参阅 
+[etcd 集群文档](https://etcd.io/docs/current/op-guide/clustering/)。
 
-例如，考虑运行以下客户端 URL 的五个成员的 etcd 集群：`http://$IP1:2379`，`http://$IP2:2379`，`http://$IP3:2379`，`http://$IP4:2379` 和 `http://$IP5:2379`。要启动 Kubernetes API 服务器：
+例如，考虑运行以下客户端 URL 的五个成员的 etcd 集群：`http://$IP1:2379`，
+`http://$IP2:2379`，`http://$IP3:2379`，`http://$IP4:2379` 和 `http://$IP5:2379`。
+要启动 Kubernetes API 服务器：
 
 1. 运行以下命令：
 
-    ```sh
-    ./etcd --listen-client-urls=http://$IP1:2379, http://$IP2:2379, http://$IP3:2379, http://$IP4:2379, http://$IP5:2379 --advertise-client-urls=http://$IP1:2379, http://$IP2:2379, http://$IP3:2379, http://$IP4:2379, http://$IP5:2379
-    ```
+   ```shell
+   etcd --listen-client-urls=http://$IP1:2379,http://$IP2:2379,http://$IP3:2379,http://$IP4:2379,http://$IP5:2379 --advertise-client-urls=http://$IP1:2379,http://$IP2:2379,http://$IP3:2379,http://$IP4:2379,http://$IP5:2379
+   ```
 
-2. 使用参数 `--etcd-servers=$IP1:2379, $IP2:2379, $IP3:2379, $IP4:2379, $IP5:2379` 启动 Kubernetes API 服务器。
+2. 使用参数 `--etcd-servers=$IP1:2379,$IP2:2379,$IP3:2379,$IP4:2379,$IP5:2379` 
+   启动 Kubernetes API 服务器。
 
-    使用您 etcd 客户端 IP 地址替换 `IP`。
+   确保将 `IP<n>` 变量设置为客户端 IP 地址。
 
 <!--
-###  Multi-node etcd cluster with load balancer
+### Multi-node etcd cluster with load balancer
 
 To run a load balancing etcd cluster:
 
@@ -163,175 +195,291 @@ To run a load balancing etcd cluster:
 <!--
 ## Securing etcd clusters
 
-Access to etcd is equivalent to root permission in the cluster so ideally only the API server should have access to it. Considering the sensitivity of the data, it is recommended to grant permission to only those nodes that require access to etcd clusters.
+Access to etcd is equivalent to root permission in the cluster so ideally only
+the API server should have access to it. Considering the sensitivity of the
+data, it is recommended to grant permission to only those nodes that require
+access to etcd clusters.
 
-To secure etcd, either set up firewall rules or use the security features provided by etcd. etcd security features depend on x509 Public Key Infrastructure (PKI). To begin, establish secure communication channels by generating a key and certificate pair. For example, use key pairs `peer.key` and `peer.cert` for securing communication between etcd members, and `client.key` and `client.cert` for securing communication between etcd and its clients. See the [example scripts](https://github.com/coreos/etcd/tree/master/hack/tls-setup) provided by the etcd project to generate key pairs and CA files for client authentication.
+To secure etcd, either set up firewall rules or use the security features
+provided by etcd. etcd security features depend on x509 Public Key
+Infrastructure (PKI). To begin, establish secure communication channels by
+generating a key and certificate pair. For example, use key pairs `peer.key`
+and `peer.cert` for securing communication between etcd members, and
+`client.key` and `client.cert` for securing communication between etcd and its
+clients. See the [example scripts](https://github.com/coreos/etcd/tree/master/hack/tls-setup)
+provided by the etcd project to generate key pairs and CA files for client
+authentication.
 -->
 ## 安全的 etcd 集群
 
-对 etcd 的访问相当于集群中的 root 权限，因此理想情况下只有 API 服务器才能访问它。考虑到数据的敏感性，建议只向需要访问 etcd 集群的节点授予权限。
+对 etcd 的访问相当于集群中的 root 权限，因此理想情况下只有 API 服务器才能访问它。
+考虑到数据的敏感性，建议只向需要访问 etcd 集群的节点授予权限。
 
-想要确保 etcd 的安全，可以设置防火墙规则或使用 etcd 提供的安全特性，这些安全特性依赖于 x509 公钥基础设施（PKI）。首先，通过生成密钥和证书对来建立安全的通信通道。
-例如，使用密钥对 `peer.key` 和 `peer.cert` 来保护 etcd 成员之间的通信，而 `client.cert` 和 `client.cert` 用于保护 etcd 与其客户端之间的通信。请参阅 etcd 项目提供的[示例脚本](https://github.com/coreos/etcd/tree/master/hack/tls-setup)，以生成用于客户端身份验证的密钥对和 CA 文件。
+想要确保 etcd 的安全，可以设置防火墙规则或使用 etcd 提供的安全特性，这些安全特性依赖于 x509 公钥基础设施（PKI）。
+首先，通过生成密钥和证书对来建立安全的通信通道。
+例如，使用密钥对 `peer.key` 和 `peer.cert` 来保护 etcd 成员之间的通信，
+而 `client.key` 和 `client.cert` 用于保护 etcd 与其客户端之间的通信。
+请参阅 etcd 项目提供的[示例脚本](https://github.com/coreos/etcd/tree/master/hack/tls-setup)，
+以生成用于客户端身份验证的密钥对和 CA 文件。
 
 <!--
 ### Securing communication
 
-To configure etcd with secure peer communication, specify flags `--peer-key-file=peer.key` and `--peer-cert-file=peer.cert`, and use https as URL schema.
+To configure etcd with secure peer communication, specify flags
+`--peer-key-file=peer.key` and `--peer-cert-file=peer.cert`, and use HTTPS as
+the URL schema.
 
-Similarly, to configure etcd with secure client communication, specify flags `--key-file=k8sclient.key` and `--cert-file=k8sclient.cert`, and use https as URL schema.
+Similarly, to configure etcd with secure client communication, specify flags
+`--key-file=k8sclient.key` and `--cert-file=k8sclient.cert`, and use HTTPS as
+the URL schema. Here is an example on a client command that uses secure
+communication:
+
+```
+ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 \
+  --cert=/etc/kubernetes/pki/etcd/server.crt \
+  --key=/etc/kubernetes/pki/etcd/server.key \
+  --cacert=/etc/kubernetes/pki/etcd/ca.crt \
+  member list
+```
 -->
 ### 安全通信
 
-若要使用安全对等通信对 etcd 进行配置，请指定参数 `--peer-key-file=peer.key` 和 `--peer-cert-file=peer.cert`，并使用 https 作为 URL 模式。
+若要使用安全对等通信对 etcd 进行配置，请指定参数 `--peer-key-file=peer.key` 
+和 `--peer-cert-file=peer.cert`，并使用 HTTPS 作为 URL 模式。
 
-类似地，要使用安全客户端通信对 etcd 进行配置，请指定参数 `--key-file=k8sclient.key` 和 `--cert-file=k8sclient.cert`，并使用 https 作为 URL 模式。
+类似地，要使用安全客户端通信对 etcd 进行配置，请指定参数 `--key-file=k8sclient.key` 
+和 `--cert-file=k8sclient.cert`，并使用 HTTPS 作为 URL 模式。
+使用安全通信的客户端命令的示例：
+
+```
+ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 \
+  --cert=/etc/kubernetes/pki/etcd/server.crt \
+  --key=/etc/kubernetes/pki/etcd/server.key \
+  --cacert=/etc/kubernetes/pki/etcd/ca.crt \
+  member list
+```
 
 <!--
 ### Limiting access of etcd clusters
 
-After configuring secure communication, restrict the access of etcd cluster to only the Kubernetes API server. Use TLS authentication to do so.
+After configuring secure communication, restrict the access of etcd cluster to
+only the Kubernetes API servers. Use TLS authentication to do so.
 
-For example, consider key pairs `k8sclient.key` and `k8sclient.cert` that are trusted by the CA `etcd.ca`. When etcd is configured with `--client-cert-auth` along with TLS, it verifies the certificates from clients by using system CAs or the CA passed in by `--trusted-ca-file` flag. Specifying flags `--client-cert-auth=true` and `--trusted-ca-file=etcd.ca` will restrict the access to clients with the certificate `k8sclient.cert`.
+For example, consider key pairs `k8sclient.key` and `k8sclient.cert` that are
+trusted by the CA `etcd.ca`. When etcd is configured with `--client-cert-auth`
+along with TLS, it verifies the certificates from clients by using system CAs
+or the CA passed in by `--trusted-ca-file` flag. Specifying flags
+`--client-cert-auth=true` and `--trusted-ca-file=etcd.ca` will restrict the
+access to clients with the certificate `k8sclient.cert`.
 
-Once etcd is configured correctly, only clients with valid certificates can access it. To give Kubernetes API server the access, configure it with the flags `--etcd-certfile=k8sclient.cert`,`--etcd-keyfile=k8sclient.key` and `--etcd-cafile=ca.cert`.
+Once etcd is configured correctly, only clients with valid certificates can
+access it. To give Kubernetes API servers the access, configure them with the
+flags `--etcd-certfile=k8sclient.cert`,`--etcd-keyfile=k8sclient.key` and
+`--etcd-cafile=ca.cert`.
 
 {{< note >}}
-etcd authentication is not currently supported by Kubernetes. For more information, see the related issue [Support Basic Auth for Etcd v2](https://github.com/kubernetes/kubernetes/issues/23398).
+etcd authentication is not currently supported by Kubernetes. For more
+information, see the related issue
+[Support Basic Auth for Etcd v2](https://github.com/kubernetes/kubernetes/issues/23398).
 {{< /note >}}
 -->
 ### 限制 etcd 集群的访问
 
 配置安全通信后，将 etcd 集群的访问限制在 Kubernetes API 服务器上。使用 TLS 身份验证来完成此任务。
 
-例如，考虑由 CA `etcd.ca` 信任的密钥对 `k8sclient.key` 和 `k8sclient.cert`。当 etcd 配置为 `--client-cert-auth` 和 TLS 时，它使用系统 CA 或由 `--trusted-ca-file` 参数传入的 CA 验证来自客户端的证书。
+例如，考虑由 CA `etcd.ca` 信任的密钥对 `k8sclient.key` 和 `k8sclient.cert`。
+当 etcd 配置为 `--client-cert-auth` 和 TLS 时，它使用系统 CA 或由 `--trusted-ca-file` 参数传入的 CA 验证来自客户端的证书。
 指定参数 `--client-cert-auth=true` 和 `--trusted-ca-file=etcd.ca` 将限制对具有证书 `k8sclient.cert` 的客户端的访问。
 
-一旦正确配置了 etcd，只有具有有效证书的客户端才能访问它。要让 Kubernetes API 服务器访问，可以使用参数 `--etcd-certfile=k8sclient.cert`,`--etcd-keyfile=k8sclient.key` 和 `--etcd-cafile=ca.cert` 配置它。
+一旦正确配置了 etcd，只有具有有效证书的客户端才能访问它。要让 Kubernetes API 服务器访问，
+可以使用参数 `--etcd-certfile=k8sclient.cert`,`--etcd-keyfile=k8sclient.key` 和 `--etcd-cafile=ca.cert` 配置。
 
 {{< note >}}
-Kubernetes 目前不支持 etcd 身份验证。想要了解更多信息，请参阅相关的问题[支持 etcd v2 的基本认证](https://github.com/kubernetes/kubernetes/issues/23398)。
+Kubernetes 目前不支持 etcd 身份验证。
+想要了解更多信息，请参阅相关的问题
+[支持 etcd v2 的基本认证](https://github.com/kubernetes/kubernetes/issues/23398)。
 {{< /note >}}
 
 <!--
 ## Replacing a failed etcd member
 
-etcd cluster achieves high availability by tolerating minor member failures. However, to improve the overall health of the cluster, replace failed members immediately. When multiple members fail, replace them one by one. Replacing a failed member involves two steps: removing the failed member and adding a new member.
+etcd cluster achieves high availability by tolerating minor member failures.
+However, to improve the overall health of the cluster, replace failed members
+immediately. When multiple members fail, replace them one by one. Replacing a
+failed member involves two steps: removing the failed member and adding a new
+member.
 
-Though etcd keeps unique member IDs internally, it is recommended to use a unique name for each member to avoid human errors. For example, consider a three-member etcd cluster. Let the URLs be, member1=http://10.0.0.1, member2=http://10.0.0.2, and member3=http://10.0.0.3. When member1 fails, replace it with member4=http://10.0.0.4.
+Though etcd keeps unique member IDs internally, it is recommended to use a
+unique name for each member to avoid human errors. For example, consider a
+three-member etcd cluster. Let the URLs be, `member1=http://10.0.0.1`,
+`member2=http://10.0.0.2`, and `member3=http://10.0.0.3`. When `member1` fails,
+replace it with `member4=http://10.0.0.4`.
 
-1. Get the member ID of the failed member1:
+1. Get the member ID of the failed `member1`:
 
-    `etcdctl --endpoints=http://10.0.0.2,http://10.0.0.3 member list`
+   ```shell
+   etcdctl --endpoints=http://10.0.0.2,http://10.0.0.3 member list
+   ```
 
-      The following message is displayed:
+   The following message is displayed:
 
-        8211f1d0f64f3269, started, member1, http://10.0.0.1:2380, http://10.0.0.1:2379
-        91bc3c398fb3c146, started, member2, http://10.0.0.2:2380, http://10.0.0.2:2379
-        fd422379fda50e48, started, member3, http://10.0.0.3:2380, http://10.0.0.3:2379
+   ```console
+   8211f1d0f64f3269, started, member1, http://10.0.0.1:2380, http://10.0.0.1:2379
+   91bc3c398fb3c146, started, member2, http://10.0.0.2:2380, http://10.0.0.2:2379
+   fd422379fda50e48, started, member3, http://10.0.0.3:2380, http://10.0.0.3:2379
+   ```
 
 2. Remove the failed member:
 
-    `etcdctl member remove 8211f1d0f64f3269`
+   ```shell
+   etcdctl member remove 8211f1d0f64f3269
+   ```
 
-      The following message is displayed:
+   The following message is displayed:
 
-       Removed member 8211f1d0f64f3269 from cluster
+   ```console
+   Removed member 8211f1d0f64f3269 from cluster
+   ```
 
 3. Add the new member:
 
-    `./etcdctl member add member4 --peer-urls=http://10.0.0.4:2380`
+   ```shell
+   etcdctl member add member4 --peer-urls=http://10.0.0.4:2380
+   ```
 
-     The following message is displayed:
+   The following message is displayed:
 
-       Member 2be1eb8f84b7f63e added to cluster ef37ad9dc622a7c4
+   ```console
+   Member 2be1eb8f84b7f63e added to cluster ef37ad9dc622a7c4
+   ```
 
 4. Start the newly added member on a machine with the IP `10.0.0.4`:
 
-        export ETCD_NAME="member4"
-        export ETCD_INITIAL_CLUSTER="member2=http://10.0.0.2:2380,member3=http://10.0.0.3:2380,member4=http://10.0.0.4:2380"
-        export ETCD_INITIAL_CLUSTER_STATE=existing
-        etcd [flags]
+   ```shell
+   export ETCD_NAME="member4"
+   export ETCD_INITIAL_CLUSTER="member2=http://10.0.0.2:2380,member3=http://10.0.0.3:2380,member4=http://10.0.0.4:2380"
+   export ETCD_INITIAL_CLUSTER_STATE=existing
+   etcd [flags]
+   ```
 
 5. Do either of the following:
 
-   1. Update its `--etcd-servers` flag to make Kubernetes aware of the configuration changes, then restart the Kubernetes API server.
-   2. Update the load balancer configuration if a load balancer is used in the deployment.
+   1. Update the `--etcd-servers` flag for the Kubernetes API servers to make
+      Kubernetes aware of the configuration changes, then restart the
+      Kubernetes API servers.
+   2. Update the load balancer configuration if a load balancer is used in the
+      deployment.
 
-For more information on cluster reconfiguration, see [etcd Reconfiguration Documentation](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/runtime-configuration.md#remove-a-member).
+For more information on cluster reconfiguration, see
+[etcd reconfiguration documentation](https://etcd.io/docs/current/op-guide/runtime-configuration/#remove-a-member).
 -->
 ## 替换失败的 etcd 成员
 
-etcd 集群通过容忍少数成员故障实现高可用性。但是，要改善集群的整体健康状况，请立即替换失败的成员。当多个成员失败时，逐个替换它们。替换失败成员需要两个步骤：删除失败成员和添加新成员。
+etcd 集群通过容忍少数成员故障实现高可用性。
+但是，要改善集群的整体健康状况，请立即替换失败的成员。当多个成员失败时，逐个替换它们。
+替换失败成员需要两个步骤：删除失败成员和添加新成员。
 
-虽然 etcd 在内部保留唯一的成员 ID，但建议为每个成员使用唯一的名称，以避免人为错误。例如，考虑一个三成员的 etcd 集群。让 URL 为：member1=http://10.0.0.1， member2=http://10.0.0.2 和 member3=http://10.0.0.3。当 member1 失败时，将其替换为 member4=http://10.0.0.4。
+虽然 etcd 在内部保留唯一的成员 ID，但建议为每个成员使用唯一的名称，以避免人为错误。
+例如，考虑一个三成员的 etcd 集群。让 URL 为：`member1=http://10.0.0.1`， `member2=http://10.0.0.2` 
+和 `member3=http://10.0.0.3`。当 `member1` 失败时，将其替换为 `member4=http://10.0.0.4`。
 
-1. 获取失败的 member1 的成员 ID：
+1. 获取失败的 `member1` 的成员 ID：
 
-    `etcdctl --endpoints=http://10.0.0.2,http://10.0.0.3 member list`
+   ```shell
+   etcdctl --endpoints=http://10.0.0.2,http://10.0.0.3 member list
+   ```
 
-      显示以下信息：
+   显示以下信息：
 
-        8211f1d0f64f3269, started, member1, http://10.0.0.1:2380, http://10.0.0.1:2379
-        91bc3c398fb3c146, started, member2, http://10.0.0.2:2380, http://10.0.0.2:2379
-        fd422379fda50e48, started, member3, http://10.0.0.3:2380, http://10.0.0.3:2379
+   ```console
+   8211f1d0f64f3269, started, member1, http://10.0.0.1:2380, http://10.0.0.1:2379
+   91bc3c398fb3c146, started, member2, http://10.0.0.2:2380, http://10.0.0.2:2379
+   fd422379fda50e48, started, member3, http://10.0.0.3:2380, http://10.0.0.3:2379
+   ```
 
 2. 移除失败的成员
 
-    `etcdctl member remove 8211f1d0f64f3269`
+   ```shell
+   etcdctl member remove 8211f1d0f64f3269
+   ```
 
-      显示以下信息：
+   显示以下信息：
 
-       Removed member 8211f1d0f64f3269 from cluster
+   ```console
+   Removed member 8211f1d0f64f3269 from cluster
+   ```
 
 3. 增加新成员：
 
-    `./etcdctl member add member4 --peer-urls=http://10.0.0.4:2380`
+   ```shell
+   etcdctl member add member4 --peer-urls=http://10.0.0.4:2380
+   ```
 
-     显示以下信息：
+   显示以下信息：
 
-       Member 2be1eb8f84b7f63e added to cluster ef37ad9dc622a7c4
+   ```console
+   Member 2be1eb8f84b7f63e added to cluster ef37ad9dc622a7c4
+   ```
 
 4. 在 IP 为 `10.0.0.4` 的机器上启动新增加的成员：
 
-        export ETCD_NAME="member4"
-        export ETCD_INITIAL_CLUSTER="member2=http://10.0.0.2:2380,member3=http://10.0.0.3:2380,member4=http://10.0.0.4:2380"
-        export ETCD_INITIAL_CLUSTER_STATE=existing
-        etcd [flags]
+   ```shell
+   export ETCD_NAME="member4"
+   export ETCD_INITIAL_CLUSTER="member2=http://10.0.0.2:2380,member3=http://10.0.0.3:2380,member4=http://10.0.0.4:2380"
+   export ETCD_INITIAL_CLUSTER_STATE=existing
+   etcd [flags]
+   ```
 
 5. 做以下事情之一：
 
-   1. 更新其 `--etcd-servers` 参数，使 Kubernetes 知道配置进行了更改，然后重新启动 Kubernetes API 服务器。
+   1. 更新 Kubernetes API 服务器的 `--etcd-servers` 参数，使 Kubernetes 知道配置进行了更改，然后重新启动 Kubernetes API 服务器。
    2. 如果在 deployment 中使用了负载均衡，更新负载均衡配置。
 
-有关集群重新配置的详细信息，请参阅 [etcd 重构文档](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/runtime-configuration.md#remove-a-member)。
+有关集群重新配置的详细信息，请参阅 [etcd 重构文档](https://etcd.io/docs/current/op-guide/runtime-configuration/#remove-a-member)。
 
 <!--
 ## Backing up an etcd cluster
 
-All Kubernetes objects are stored on etcd. Periodically backing up the etcd cluster data is important to recover Kubernetes clusters under disaster scenarios, such as losing all master nodes. The snapshot file contains all the Kubernetes states and critical information. In order to keep the sensitive Kubernetes data safe, encrypt the snapshot files.
+All Kubernetes objects are stored on etcd. Periodically backing up the etcd
+cluster data is important to recover Kubernetes clusters under disaster
+scenarios, such as losing all control plane nodes. The snapshot file contains
+all the Kubernetes states and critical information. In order to keep the
+sensitive Kubernetes data safe, encrypt the snapshot files.
 
-Backing up an etcd cluster can be accomplished in two ways: etcd built-in snapshot and volume snapshot.
+Backing up an etcd cluster can be accomplished in two ways: etcd built-in
+snapshot and volume snapshot.
 -->
 ## 备份 etcd 集群
 
-所有 Kubernetes 对象都存储在 etcd 上。定期备份 etcd 集群数据对于在灾难场景（例如丢失所有主节点）下恢复 Kubernetes 集群非常重要。快照文件包含所有 Kubernetes 状态和关键信息。为了保证敏感的 Kubernetes 数据的安全，可以对快照文件进行加密。
+所有 Kubernetes 对象都存储在 etcd 上。定期备份 etcd 集群数据对于在灾难场景（例如丢失所有控制平面节点）下恢复 Kubernetes 集群非常重要。
+快照文件包含所有 Kubernetes 状态和关键信息。为了保证敏感的 Kubernetes 数据的安全，可以对快照文件进行加密。
 
 备份 etcd 集群可以通过两种方式完成：etcd 内置快照和卷快照。
 
 <!--
 ### Built-in snapshot
 
-etcd supports built-in snapshot, so backing up an etcd cluster is easy. A snapshot may either be taken from a live member with the `etcdctl snapshot save` command or by copying the `member/snap/db` file from an etcd [data directory](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/configuration.md#--data-dir) that is not currently used by an etcd process. Taking the snapshot will normally not affect the performance of the member.
+etcd supports built-in snapshot. A snapshot may either be taken from a live
+member with the `etcdctl snapshot save` command or by copying the
+`member/snap/db` file from an etcd
+[data directory](https://etcd.io/docs/current/op-guide/configuration/#--data-dir)
+that is not currently used by an etcd process. Taking the snapshot will
+not affect the performance of the member.
 
-Below is an example for taking a snapshot of the keyspace served by `$ENDPOINT` to the file `snapshotdb`:
+Below is an example for taking a snapshot of the keyspace served by
+`$ENDPOINT` to the file `snapshotdb`:
 
-```sh
+```shell
 ETCDCTL_API=3 etcdctl --endpoints $ENDPOINT snapshot save snapshotdb
-# exit 0
+```
 
-# verify the snapshot
+Verify the snapshot:
+
+```shell
 ETCDCTL_API=3 etcdctl --write-out=table snapshot status snapshotdb
+```
+
+```console
 +----------+----------+------------+------------+
 |   HASH   | REVISION | TOTAL KEYS | TOTAL SIZE |
 +----------+----------+------------+------------+
@@ -341,16 +489,23 @@ ETCDCTL_API=3 etcdctl --write-out=table snapshot status snapshotdb
 -->
 ### 内置快照
 
-etcd 支持内置快照，因此备份 etcd 集群很容易。快照可以从使用 `etcdctl snapshot save` 命令的活动成员中获取，也可以通过从 etcd [数据目录](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/configuration.md#--data-dir)复制 `member/snap/db` 文件，该 etcd 数据目录目前没有被 etcd 进程使用。获取快照通常不会影响成员的性能。
+etcd 支持内置快照。快照可以从使用 `etcdctl snapshot save` 命令的活动成员中获取，
+也可以通过从 etcd [数据目录](https://etcd.io/docs/current/op-guide/configuration/#--data-dir)
+复制 `member/snap/db` 文件，该 etcd 数据目录目前没有被 etcd 进程使用。获取快照不会影响成员的性能。
 
 下面是一个示例，用于获取 `$ENDPOINT` 所提供的键空间的快照到文件 `snapshotdb`：
 
-```sh
+```shell
 ETCDCTL_API=3 etcdctl --endpoints $ENDPOINT snapshot save snapshotdb
-# exit 0
+```
 
-# verify the snapshot
+验证快照:
+
+```shell
 ETCDCTL_API=3 etcdctl --write-out=table snapshot status snapshotdb
+```
+
+```console
 +----------+----------+------------+------------+
 |   HASH   | REVISION | TOTAL KEYS | TOTAL SIZE |
 +----------+----------+------------+------------+
@@ -361,54 +516,137 @@ ETCDCTL_API=3 etcdctl --write-out=table snapshot status snapshotdb
 <!--
 ### Volume snapshot
 
-If etcd is running on a storage volume that supports backup, such as Amazon Elastic Block Store, back up etcd data by taking a snapshot of the storage volume.
+If etcd is running on a storage volume that supports backup, such as Amazon
+Elastic Block Store, back up etcd data by taking a snapshot of the storage
+volume.
+
+### Snapshot using etcdctl options
+
+We can also take the snapshot using various options given by etcdctl. For example 
+
+```shell
+ETCDCTL_API=3 etcdctl -h 
+``` 
+
+will list various options available from etcdctl. For example, you can take a snapshot by specifying
+the endpoint, certificates etc as shown below:
+
+```shell
+ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 \
+  --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> \
+  snapshot save <backup-file-location>
+```
+where `trusted-ca-file`, `cert-file` and `key-file` can be obtained from the description of the etcd Pod.
 
 ## Scaling up etcd clusters
 
-Scaling up etcd clusters increases availability by trading off performance. Scaling does not increase cluster performance nor capability. A general rule is not to scale up or down etcd clusters. Do not configure any auto scaling groups for etcd clusters. It is highly recommended to always run a static five-member etcd cluster for production Kubernetes clusters at any officially supported scale.
+Scaling up etcd clusters increases availability by trading off performance.
+Scaling does not increase cluster performance nor capability. A general rule
+is not to scale up or down etcd clusters. Do not configure any auto scaling
+groups for etcd clusters. It is highly recommended to always run a static
+five-member etcd cluster for production Kubernetes clusters at any officially
+supported scale.
 
-A reasonable scaling is to upgrade a three-member cluster to a five-member one, when more reliability is desired. See [etcd Reconfiguration Documentation](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/runtime-configuration.md#remove-a-member) for information on how to add members into an existing cluster.
+A reasonable scaling is to upgrade a three-member cluster to a five-member
+one, when more reliability is desired. See
+[etcd reconfiguration documentation](https://etcd.io/docs/current/op-guide/runtime-configuration/#remove-a-member)
+for information on how to add members into an existing cluster.
 -->
 ### 卷快照
 
 如果 etcd 运行在支持备份的存储卷（如 Amazon Elastic Block 存储）上，则可以通过获取存储卷的快照来备份 etcd 数据。
 
+### 使用 etcdctl 选项的快照
+
+我们还可以使用 etcdctl 提供的各种选项来拍摄快照。例如：
+
+```shell
+ETCDCTL_API=3 etcdctl -h 
+``` 
+
+列出 etcdctl 可用的各种选项。例如，你可以通过指定端点，证书等来拍摄快照，如下所示：
+
+```shell
+ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 \
+  --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file> \
+  snapshot save <backup-file-location>
+```
+可以从 etcd Pod 的描述中获得 `trusted-ca-file`, `cert-file` 和 `key-file` 。
+
 ## 扩展 etcd 集群
 
-通过交换性能，扩展 etcd 集群可以提高可用性。缩放不会提高集群性能和能力。一般情况下不要扩大或缩小 etcd 集群的集合。不要为 etcd 集群配置任何自动缩放组。强烈建议始终在任何官方支持的规模上运行生产 Kubernetes 集群时使用静态的五成员 etcd 集群。
+通过交换性能，扩展 etcd 集群可以提高可用性。缩放不会提高集群性能和能力。
+一般情况下不要扩大或缩小 etcd 集群的集合。不要为 etcd 集群配置任何自动缩放组。
+强烈建议始终在任何官方支持的规模上运行生产 Kubernetes 集群时使用静态的五成员 etcd 集群。
 
-合理的扩展是在需要更高可靠性的情况下，将三成员集群升级为五成员集群。请参阅 [etcd 重新配置文档](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/runtime-configuration.md#remove-a-member)以了解如何将成员添加到现有集群中的信息。
+合理的扩展是在需要更高可靠性的情况下，将三成员集群升级为五成员集群。
+请参阅 [etcd 重新配置文档](https://etcd.io/docs/current/op-guide/runtime-configuration/#remove-a-member)
+以了解如何将成员添加到现有集群中的信息。
 
 <!--
 ## Restoring an etcd cluster
 
-etcd supports restoring from snapshots that are taken from an etcd process of the [major.minor](http://semver.org/) version. Restoring a version from a different patch version of etcd also is supported. A restore operation is employed to recover the data of a failed cluster.
+etcd supports restoring from snapshots that are taken from an etcd process of
+the [major.minor](http://semver.org/) version. Restoring a version from a
+different patch version of etcd also is supported. A restore operation is
+employed to recover the data of a failed cluster.
 
-Before starting the restore operation, a snapshot file must be present. It can either be a snapshot file from a previous backup operation, or from a remaining [data directory](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/configuration.md#--data-dir). For more information and examples on restoring a cluster from a snapshot file, see [etcd disaster recovery documentation](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/recovery.md#restoring-a-cluster).
+Before starting the restore operation, a snapshot file must be present. It can
+either be a snapshot file from a previous backup operation, or from a remaining
+[data directory]( https://etcd.io/docs/current/op-guide/configuration/#--data-dir).
+Here is an example:
 
-If the access URLs of the restored cluster is changed from the previous cluster, the Kubernetes API server must be reconfigured accordingly. In this case, restart Kubernetes API server with the flag `--etcd-servers=$NEW_ETCD_CLUSTER` instead of the flag `--etcd-servers=$OLD_ETCD_CLUSTER`. Replace `$NEW_ETCD_CLUSTER` and `$OLD_ETCD_CLUSTER` with the respective IP addresses. If a load balancer is used in front of an etcd cluster, you might need to update the load balancer instead.
+```shell
+ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 snapshot restore snapshotdb
+```
 
-If the majority of etcd members have permanently failed, the etcd cluster is considered failed. In this scenario, Kubernetes cannot make any changes to its current state. Although the scheduled pods might continue to run, no new pods can be scheduled. In such cases, recover the etcd cluster and potentially reconfigure Kubernetes API server to fix the issue.
+For more information and examples on restoring a cluster from a snapshot file, see
+[etcd disaster recovery documentation](https://etcd.io/docs/current/op-guide/recovery/#restoring-a-cluster).
+
+If the access URLs of the restored cluster is changed from the previous
+cluster, the Kubernetes API server must be reconfigured accordingly. In this
+case, restart Kubernetes API servers with the flag
+`--etcd-servers=$NEW_ETCD_CLUSTER` instead of the flag
+`--etcd-servers=$OLD_ETCD_CLUSTER`. Replace `$NEW_ETCD_CLUSTER` and
+`$OLD_ETCD_CLUSTER` with the respective IP addresses. If a load balancer is
+used in front of an etcd cluster, you might need to update the load balancer
+instead.
+
+If the majority of etcd members have permanently failed, the etcd cluster is
+considered failed. In this scenario, Kubernetes cannot make any changes to its
+current state. Although the scheduled pods might continue to run, no new pods
+can be scheduled. In such cases, recover the etcd cluster and potentially
+reconfigure Kubernetes API servers to fix the issue.
 
 {{< note >}}
-If any API servers are running in your cluster, you should not attempt to restore instances of etcd.
-Instead, follow these steps to restore etcd:
+If any API servers are running in your cluster, you should not attempt to
+restore instances of etcd. Instead, follow these steps to restore etcd:
 
-- stop *all* kube-apiserver instances
+- stop *all* API server instances
 - restore state in all etcd instances
-- restart all kube-apiserver instances
+- restart all API server instances
 
-We also recommend restarting any components (e.g. kube-scheduler, kube-controller-manager, kubelet) to ensure that they don't
-rely on some stale data. Note that in practice, the restore takes a bit of time.
-During the restoration, critical components will lose leader lock and restart themselves.
+We also recommend restarting any components (e.g. `kube-scheduler`,
+`kube-controller-manager`, `kubelet`) to ensure that they don't rely on some
+stale data. Note that in practice, the restore takes a bit of time.  During the
+restoration, critical components will lose leader lock and restart themselves.
 {{< /note >}}
 -->
 ## 恢复 etcd 集群
 
-etcd 支持从 [major.minor](http://semver.org/) 或其他不同 patch 版本的 etcd 进程中获取的快照进行恢复。还原操作用于恢复失败的集群的数据。
+etcd 支持从 [major.minor](http://semver.org/) 或其他不同 patch 版本的 etcd 进程中获取的快照进行恢复。
+还原操作用于恢复失败的集群的数据。
 
-在启动还原操作之前，必须有一个快照文件。它可以是来自以前备份操作的快照文件，也可以是来自剩余[数据目录](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/configuration.md#--data-dir)的快照文件。
-有关从快照文件还原集群的详细信息和示例，请参阅 [etcd 灾难恢复文档](https://github.com/coreos/etcd/blob/master/Documentation/op-guide/recovery.md#restoring-a-cluster)。
+在启动还原操作之前，必须有一个快照文件。它可以是来自以前备份操作的快照文件，
+也可以是来自剩余[数据目录]( https://etcd.io/docs/current/op-guide/configuration/#--data-dir)的快照文件。
+例如：
+
+```shell
+ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 snapshot restore snapshotdb
+```
+
+有关从快照文件还原集群的详细信息和示例，请参阅 
+[etcd 灾难恢复文档](https://etcd.io/docs/current/op-guide/recovery/#restoring-a-cluster)。
 
 如果还原的集群的访问 URL 与前一个集群不同，则必须相应地重新配置 Kubernetes API 服务器。
 在本例中，使用参数 `--etcd-servers=$NEW_ETCD_CLUSTER` 而不是参数 `--etcd-servers=$OLD_ETCD_CLUSTER` 重新启动 Kubernetes API 服务器。
@@ -420,82 +658,11 @@ etcd 支持从 [major.minor](http://semver.org/) 或其他不同 patch 版本的
 {{< note >}}
 如果集群中正在运行任何 API 服务器，则不应尝试还原 etcd 的实例。相反，请按照以下步骤还原 etcd：
 
-- 停止 *所有* kube-apiserver 实例
+- 停止 *所有* API 服务实例
 - 在所有 etcd 实例中恢复状态
-- 重启所有 kube-apiserver 实例
+- 重启所有 API 服务实例
 
-我们还建议重启所有组件（例如 kube-scheduler、kube-controller-manager、kubelet），以确保它们不会
+我们还建议重启所有组件（例如 `kube-scheduler`、`kube-controller-manager`、`kubelet`），以确保它们不会
 依赖一些过时的数据。请注意，实际中还原会花费一些时间。
 在还原过程中，关键组件将丢失领导锁并自行重启。
-{{< note >}}
-
-<!--
-## Upgrading and rolling back etcd clusters
-
-As of Kubernetes v1.13.0, etcd2 is no longer supported as a storage backend for
-new or existing Kubernetes clusters. The timeline for Kubernetes support for
-etcd2 and etcd3 is as follows: 
-
-- Kubernetes v1.0: etcd2 only
-- Kubernetes v1.5.1: etcd3 support added, new clusters still default to etcd2
-- Kubernetes v1.6.0: new clusters created with `kube-up.sh` default to etcd3,
-                     and `kube-apiserver` defaults to etcd3
-- Kubernetes v1.9.0: deprecation of etcd2 storage backend announced
-- Kubernetes v1.13.0: etcd2 storage backend removed, `kube-apiserver` will
-                      refuse to start with `--storage-backend=etcd2`, with the
-                      message `etcd2 is no longer a supported storage backend`
-
-Before upgrading a v1.12.x kube-apiserver using `--storage-backend=etcd2` to
-v1.13.x, etcd v2 data MUST by migrated to the v3 storage backend, and
-kube-apiserver invocations changed to use `--storage-backend=etcd3`.
-
-The process for migrating from etcd2 to etcd3 is highly dependent on how the
-etcd cluster was deployed and configured, as well as how the Kubernetes 
-cluster was deployed and configured. We recommend that you consult your cluster
-provider's documentation to see if there is a predefined solution.
-
-If your cluster was created via `kube-up.sh` and is still using etcd2 as its
-storage backend, please consult the [Kubernetes v1.12 etcd cluster upgrade docs](https://v1-12.docs.kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/#upgrading-and-rolling-back-etcd-clusters)
--->
-## 升级和回滚 etcd 集群
-
-从 Kubernetes v1.13.0 开始，不在支持 etcd2 作为新的或现有 Kubernetes 集群的后端。Kubernetes 支持 etcd2 和 etcd3 的时间表如下：
-
-- Kubernetes v1.0: 仅限 etcd2
-- Kubernetes v1.5.1: 添加了 etcd3 支持，新的集群仍默认为 etcd2
-- Kubernetes v1.6.0: 使用 `kube-up.sh` 创建的新集群默认为 etcd3，而 `kube-apiserver` 默认为 etcd3
-- Kubernetes v1.9.0: 宣布弃用 etcd2 存储后端
-- Kubernetes v1.13.0: 删除了 etcd2 存储后端，`kube-apiserver` 将拒绝以 `--storage-backend = etcd2` 开头，消息 `etcd2 不再是支持的存储后端`
-
-在使用 `--storage-backend = etcd2` 升级 v1.12.x kube-apiserver 到 v1.13.x 之前，etcd v2 数据必须迁移到 v3 存储后端，并且 kube-apiserver 调用改为使用 `--storage-backend=etcd3`。
-
-从 etcd2 迁移到 etcd3 的过程在很大程度上取决于部署和配置 etcd 集群的方式，以及如何部署和配置 Kubernetes 集群。 我们建议您查阅集群提供商的文档，以了解是否存在预定义的解决方案。
-
-如果您的集群是通过 `kube-up.sh` 创建的并且仍然使用 etcd2 作为其存储后端，请参阅 [Kubernetes v1.12 etcd 集群升级文档](https://v1-12.docs.kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/#upgrading-and-rolling-back-etcd-clusters)
-
-<!-- 
-## Known issue: etcd client balancer with secure endpoints
-
-The etcd v3 client, released in etcd v3.3.13 or earlier, has a [critical bug](https://github.com/kubernetes/kubernetes/issues/72102) which affects the kube-apiserver and HA deployments. The etcd client balancer failover does not properly work against secure endpoints. As a result, etcd servers may fail or disconnect briefly from the kube-apiserver. This affects kube-apiserver HA deployments.
-
-The fix was made in [etcd v3.4](https://github.com/etcd-io/etcd/pull/10911) (and backported to v3.3.14 or later): the new client now creates its own credential bundle to correctly set authority target in dial function.
-
-Because the fix requires gRPC dependency upgrade (to v1.23.0), downstream Kubernetes [did not backport etcd upgrades](https://github.com/kubernetes/kubernetes/issues/72102#issuecomment-526645978). Which means the [etcd fix in kube-apiserver](https://github.com/etcd-io/etcd/pull/10911/commits/db61ee106ca9363ba3f188ecf27d1a8843da33ab) is only available from Kubernetes 1.16.
-
-To urgently fix this bug for Kubernetes 1.15 or earlier, build a custom kube-apiserver. You can make local changes to [`vendor/google.golang.org/grpc/credentials/credentials.go`](https://github.com/kubernetes/kubernetes/blob/7b85be021cd2943167cd3d6b7020f44735d9d90b/vendor/google.golang.org/grpc/credentials/credentials.go#L135) with [etcd@db61ee106](https://github.com/etcd-io/etcd/pull/10911/commits/db61ee106ca9363ba3f188ecf27d1a8843da33ab).
-
-See ["kube-apiserver 1.13.x refuses to work when first etcd-server is not available"](https://github.com/kubernetes/kubernetes/issues/72102). 
--->
-
-## 已知问题：具有安全端点的 etcd 客户端均衡器
-
-在 etcd v3.3.13 或更早版本的 etcd v3 客户端有一个[严重的错误](https://github.com/kubernetes/kubernetes/issues/72102)，会影响 kube-apiserver 和 HA 部署。etcd 客户端平衡器故障转移不适用于安全端点。结果是，etcd 服务器可能会失败或短暂地与 kube-apiserver 断开连接。这会影响 kube-apiserver HA 的部署。
-
-该修复程序是在 [etcd v3.4](https://github.com/etcd-io/etcd/pull/10911) 中进行的（并反向移植到 v3.3.14 或更高版本）：现在，新客户端将创建自己的凭证捆绑包，以在拨号功能中正确设置授权目标。
-
-因为此修复程序要求将 gRPC 依赖升级（到 v1.23.0 ），因此，下游 Kubernetes [未反向移植 etcd 升级](https://github.com/kubernetes/kubernetes/issues/72102#issuecomment-526645978)。这意味着只能从 Kubernetes 1.16 获得 [kube-apiserver 中的 etcd 修复](https://github.com/etcd-io/etcd/pull/10911/commits/db61ee106ca9363ba3f188ecf27d1a8843da33ab)。
-
-要紧急修复 Kubernetes 1.15 或更早版本的此错误，请构建一个自定义的 kube-apiserver 。 您可以使用[`vendor/google.golang.org/grpc/credentials/credentials.go`](https://github.com/kubernetes/kubernetes/blob/7b85be021cd2943167cd3d6b7020f44735d9d90b/vendor/google.golang.org/grpc/credentials/credentials.go#L135) 和 [etcd@db61ee106](https://github.com/etcd-io/etcd/pull/10911/commits/db61ee106ca9363ba3f188ecf27d1a8843da33ab) 来进行本地更改。
-
-请看  ["kube-apiserver 1.13.x refuses to work when first etcd-server is not available"](https://github.com/kubernetes/kubernetes/issues/72102). 
-
+{{< note >}}
\ No newline at end of file

From 1add12a4bda25bf38d0ea27014b5aa760faae125 Mon Sep 17 00:00:00 2001
From: Xander Grzywinski <xanderg@apple.com>
Date: Wed, 7 Apr 2021 13:02:07 -0700
Subject: [PATCH 498/788] Add Kubernetes 1.20 Release Blog

Co-authored-by: divya-mohan0209 <divya.mohan0209@gmail.com>
Co-authored-by: Xander Grzywinski <xanderg@apple.com>
Co-authored-by: Nabarun Pal <pal.nabarun95@gmail.com>

Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
---
 .../2021-04-08-kubernetes-release-1.21.md     | 128 ++++++++++++++++++
 .../globe_250px.png                           | Bin 0 -> 40747 bytes
 2 files changed, 128 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md
 create mode 100644 static/images/blog/2021-04-08-kubernetes-release-1.21/globe_250px.png

diff --git a/content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md b/content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md
new file mode 100644
index 0000000000..1a253ffbbe
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md
@@ -0,0 +1,128 @@
+---
+layout: blog
+title: 'Kubernetes 1.21: Power to the Community'
+date: 2021-04-08
+slug: kubernetes-1-21-release-announcement
+---
+
+**Authors:** [Kubernetes 1.21 Release Team](https://github.com/kubernetes/sig-release/blob/master/releases/release-1.21/release-team.md)
+
+We’re pleased to announce the release of Kubernetes 1.21, our first release of 2021! This release consists of 51 enhancements: 13 enhancements have graduated to stable, 16 enhancements are moving to beta, 20 enhancements are entering alpha, and 2 features have been deprecated.
+
+This release cycle, we saw a major shift in ownership of processes around the release team. We moved from a  synchronous mode of communcation, where we periodically asked the community for inputs, to a mode where the community opts-in features and/or blogs to the release. These changes have resulted in an increase in collaboration and teamwork across the community. The result of all that is reflected in Kubernetes 1.21 having the most number of features in the recent times.
+
+## Major Themes
+
+### CronJobs Graduate to Stable!
+[CronJobs](/docs/concepts/workloads/controllers/cron-jobs/) (previously ScheduledJobs) has been a beta feature since Kubernetes 1.8! With 1.21 we get to finally see this widely used API graduate to stable.
+
+CronJobs are meant for performing regular scheduled actions such as backups, report generation, and so on. Each of those tasks should be configured to recur indefinitely (for example: once a day / week / month); you can define the point in time within that interval when the job should start.
+
+### Immutable Secrets and ConfigMaps
+[Immutable Secrets](/docs/concepts/configuration/secret/#secret-immutable) and [ConfigMaps](/docs/concepts/configuration/configmap/#configmap-immutable) add a new field to those resource types that will reject changes to those objects if set. Secrets and ConfigMaps by default are mutable which is beneficial for pods that are able to consume changes. Mutating Secrets and ConfigMaps can also cause problems if a bad configuration is pushed for pods that use them.
+
+By marking Secrets and ConfigMaps as immutable you can be sure your application configuration won't change. If you want to make changes you'll need to create a new, uniquly named Secret or ConfigMap and deploy a new pod to consume that resource. Immutable resources also have scaling benefits because controllers do not need to poll the API server to watch for changes.
+
+This feature has graduated to stable in Kubernetes 1.21.
+
+### IPv4/IPv6 dual-stack support
+IP addresses are a consumable resource that cluster operators and administrators need to make sure are not exhausted. In particular, public IPv4 addresses are now scarce. Having dual-stack support enables native IPv6 routing to pods and services, whilst still allowing your cluster to talk IPv4 where needed. Dual-stack cluster networking also improves a possible scaling limitation for workloads.
+
+Dual-stack support in Kubernetes means that pods, services, and nodes can get IPv4 addresses and IPv6 addresses. In Kubernetes 1.21 [dual-stack networking](/docs/concepts/services-networking/dual-stack/) has graduated from alpha to beta, and is now enabled by default.
+
+### Graceful Node Shutdown
+[Graceful Node shutdown](/docs/concepts/architecture/nodes/#graceful-node-shutdown) also graduated to beta with this release (and will now be available to a much larger group of users)! This is a hugely beneficial feature that allows the kubelet to be aware of node shutdown, and gracefully terminate pods that are scheduled to that node.
+
+Currently, when a node shuts down, pods do not follow the expected termination lifecycle and are not shut down gracefully. This can introduce problems with a lot of different workloads. Going forward, the kubelet will be able to detect imminent system shutdown through systemd, then inform running pods so they can terminate as gracefully as possible.
+
+### PersistentVolume Health Monitor
+Persistent Volumes (PV) are commonly used in applications to get local, file-based storage. They can be used in many different ways and help users migrate applications without needing to re-write storage backends.
+
+Kubernetes 1.21 has a new alpha feature which allows PVs to be monitored for health of the volume and marked accordingly if the volume becomes unhealthy. Workloads will be able to react to the health state to protect data from being written or read from a volume that is unhealthy.
+
+### Reducing Kubernetes Build Maintenance
+Previously Kubernetes has maintained multiple build systems. This has often been a source of friction and complexity for new and current contributors.
+
+Over the last release cycle, a lot of work has been put in to simplify the build process, and standardize on the native Golang build tools. This should empower broader community maintenance, and lower the barrier to entry for new contributors.
+
+## Major Changes
+
+### PodSecurityPolicy Deprecation
+In Kubernetes 1.21, PodSecurityPolicy is deprecated. As with all Kubernetes feature deprecations, PodSecurityPolicy will continue to be available and fully-functional for several more releases. PodSecurityPolicy, previously in the beta stage, is planned for removal in Kubernetes 1.25.
+
+What's next? We're developing a new built-in mechanism to help limit Pod privileges, with a working title of “PSP Replacement Policy.” Our plan is for this new mechanism to cover the key PodSecurityPolicy use cases, with greatly improved ergonomics and maintainability. To learn more, read [PodSecurityPolicy Deprecation: Past, Present, and Future](/blog/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future).
+
+### TopologyKeys Deprecation
+The Service field `topologyKeys` is now deprecated; all the component features that used this field were previously alpha, and are now also deprecated.
+We've replaced `topologyKeys` with a way to implement topology-aware routing, called topology-aware hints.  Topology-aware hints are an alpha feature in Kubernetes 1.21. You can read more details about the replacement feature in [Topology Aware Hints](/docs/concepts/services-networking/service-topology/); the related [KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/2433-topology-aware-hints/README.md) explains the context for why we switched.
+
+## Other Updates
+
+### Graduated to Stable
+
+* [EndpointSlice](https://github.com/kubernetes/enhancements/issues/752)
+* [Add sysctl support](https://github.com/kubernetes/enhancements/issues/34)
+* [PodDisruptionBudgets](https://github.com/kubernetes/enhancements/issues/85)
+
+### Notable Feature Updates
+
+* [External client-go credential providers](https://github.com/kubernetes/enhancements/issues/541) - beta in 1.21
+* [Structured logging](https://github.com/kubernetes/enhancements/issues/1602) - graduating to beta in 1.22
+* [TTL after finish cleanup for Jobs and Pods](https://github.com/kubernetes/enhancements/issues/592) - graduated to beta
+
+# Release notes
+
+You can check out the full details of the 1.21 release in the [release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md).
+
+# Availability of release
+
+Kubernetes 1.21 is available for [download on GitHub](https://github.com/kubernetes/kubernetes/releases/tag/v1.21.0). There are some great resources out there for getting started with Kubernetes. You can check out some [interactive tutorials](https://kubernetes.io/docs/tutorials/) on the main Kubernetes site, or run a local cluster on your machine using Docker containers with [kind](https://kind.sigs.k8s.io). If you’d like to try building a cluster from scratch, check out the [Kubernetes the Hard Way](https://github.com/kelseyhightower/kubernetes-the-hard-way) tutorial by Kelsey Hightower.
+
+# Release Team
+
+This release was made possible by a very dedicated group of individuals, who came together as a team in the midst of a lot of things happening out in the world. A huge thank you to the release lead Nabarun Pal, and to everyone else on the release team for supporting each other, and working so hard to deliver the 1.21 release for the community.
+
+# Release Logo
+
+![Kubernetes 1.21 Release Logo](/images/blog/2021-04-08-kubernetes-release-1.21/globe_250px.png)
+
+The Kubernetes 1.21 Release Logo portrays the global nature of the Release Team, with release team members residing in timezones from UTC+8 all the way to UTC-8. The diversity of the release team brought in a lot of challenges, but the team tackled them all by adopting more asynchronous communication practices. The heptagonal globe in the release logo signifies the sheer determination of the community to overcome the challenges as they come. It celebrates the amazing teamwork of the release team over the last 3 months to bring in a fun packed Kubernetes release!
+
+The logo is designed by [Aravind Sekar](https://www.behance.net/noblebatman), an independent designer based out of India. Aravind helps open source communities like PyCon India in their design efforts.
+
+# User Highlights
+
+- CNCF welcomes 47 new organizations across the globe as members to advance Cloud Native technology further at the start of 2021! These [new members](https://www.cncf.io/announcements/2021/02/24/cloud-native-computing-foundation-welcomes-47-new-members-at-the-start-of-2021/) will join CNCF at the upcoming 2021 KubeCon + CloudNativeCon events, including [KubeCon + CloudNativeCom EU – Virtual](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/) from May 4 – 7, 2021, and [KubeCon + CloudNativeCon NA in Los Angeles](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/) from October 12 – 15, 2021.
+
+# Project Velocity
+
+The [CNCF K8s DevStats project](https://k8s.devstats.cncf.io/) aggregates a number of interesting data points related to the velocity of Kubernetes and various sub-projects. This includes everything from individual contributions to the number of companies that are contributing, and is a neat illustration of the depth and breadth of effort that goes into evolving this ecosystem.
+
+In the v1.21 release cycle, which ran for 12 weeks (January 11 to April 8), we saw contributions from [999 companies](https://k8s.devstats.cncf.io/d/9/companies-table?orgId=1&var-period_name=v1.20.0%20-%20now&var-metric=contributions) and [1279 individuals](https://k8s.devstats.cncf.io/d/66/developer-activity-counts-by-companies?orgId=1&var-period_name=v1.20.0%20-%20now&var-metric=contributions&var-repogroup_name=Kubernetes&var-country_name=All&var-companies=All).
+
+# Ecosystem Updates
+
+- In the wake of rising racism & attacks on global Asian communities, read the statement from CNCF General Priyanka Sharma on the [CNCF blog](https://www.cncf.io/blog/2021/03/18/statement-from-cncf-general-manager-priyanka-sharma-on-the-unacceptable-attacks-against-aapi-and-asian-communities/) reinstating the community's commitment towards inclusive values & diversity-powered resilience.
+- We now have a process in place for migration of the default branch from master → main. Learn more about the guidelines [here](k8s.dev/rename)
+- CNCF and the Linux Foundation have announced the availability of their new training course, [LFS260 – Kubernetes Security Essentials](https://training.linuxfoundation.org/training/kubernetes-security-essentials-lfs260/). In addition to providing skills and knowledge on a broad range of best practices for securing container-based applications and Kubernetes platforms, the course is also a great way to prepare for the recently launched [Certified Kubernetes Security Specialist](https://training.linuxfoundation.org/certification/certified-kubernetes-security-specialist/) certification exam.
+
+# Event Updates
+
+- KubeCon + CloudNativeCon Europe 2021 will take place May 4 - 7, 2021! You can find more information about the conference [here](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/).
+- [Kubernetes Community Days](https://kubernetescommunitydays.org/) are being relaunched! Q2 2021 will start with Africa and Bengaluru.
+
+# Upcoming release webinar
+
+Join the members of the Kubernetes 1.21 release team on May 13th, 2021 to learn about the major features in this release including IPv4/IPv6 dual-stack support, PersistentVolume Health Monitor, Immutable Secrets and ConfigMaps, and many more. Register here: [https://community.cncf.io/events/details/cncf-cncf-online-programs-presents-cncf-live-webinar-kubernetes-121-release/](https://community.cncf.io/events/details/cncf-cncf-online-programs-presents-cncf-live-webinar-kubernetes-121-release/)
+
+# Get Involved
+
+If you’re interested in contributing to the Kubernetes community, Special Interest Groups (SIGs) are a great starting point. Many of them may align with your interests! If there are things you’d like to share with the community, you can join the weekly community meeting, or use any of the following channels:
+
+* Find out more about contributing to Kubernetes at the [Kubernetes Contributor website](https://www.kubernetes.dev/)
+* Follow us on Twitter [@Kubernetesio](https://twitter.com/kubernetesio) for latest updates
+* Join the community discussion on [Discuss](https://discuss.kubernetes.io/)
+* Join the community on [Slack](http://slack.k8s.io/)
+* Share your Kubernetes [story](https://github.com/cncf/foundation/blob/master/case-study-guidelines.md)
+* Read more about what’s happening with Kubernetes on the [blog](https://kubernetes.io/blog/)
+* Learn more about the [Kubernetes Release Team](https://github.com/kubernetes/sig-release/tree/master/release-team)
diff --git a/static/images/blog/2021-04-08-kubernetes-release-1.21/globe_250px.png b/static/images/blog/2021-04-08-kubernetes-release-1.21/globe_250px.png
new file mode 100644
index 0000000000000000000000000000000000000000..228fb24998c3c533178d028b85099aff83125b9c
GIT binary patch
literal 40747
zcmXt9WmFu^5=Da(++7!UcUUC&A|VhoxVyW%dmzZ-5G1&3@Zj$5?hbFiAMeMW*)wzc
z%v5)E)xA}>BUP1U(U6Idp`f79zQ_U9AlGLoC}=puPmq7mune1!3zCDJwlfqIJnw%$
z=)JNy7RXIP7wK;<>h@+X?nX|gQ10&Ttd@4x&c;R#rmXf(=2_>$L{Lx^P+x!&8XnoF
zzuaAt@1DEG?C))Uo=ZIZXgC#thr@xxL@3=9cf2@he{Uc6zH2?`7jeh~P~{;~QF*6;
z+$;mnJF>WiE-vDsqKb;BS^9j&w@8$)Nhh*yhuwu0x(A;Wao7n7kP8Db(0{Na-UYz_
zCE297B(A{%2pT6nUv3p>$^}?<TZs$5t5B)8Xbu2D*hzF&lGDH<|8{`f?zvclBeWPy
zGSn98@OeS-rEmVhXQxf8P0T!|09Gf&fsikU1z`o(Do_$mY6u_~qskGms6XkPb~H!&
zx#0Ue*{0{FwXhhJ=(wX#l;3#)%znTnM#NMQknR(W3by3)YLsA&b;Tzuz=p!oxTl8s
zTL7RHdJ8dv4JsF=5j|l|mVQh9))}9a9YMl_0ECK9<204Qt%*qPz$X9E?1pAjJzBuL
z13U6CjxU|A2bGWd_XD~brePgpUG`ubGB93zlNICq(-a`l`fuJjSLkG?JH<knmn)U5
zlmM=`Sb@!gH+a+z3nPRPc%`(7mN!z7{B)@L-<M(_uZB^qh6A3zXukiDTaJ}<SSB%H
z{6PP;Xjxh8^B|jI>H}!CX@Chbl)({$dq=@>JKPm*4^o+$@cR+?BA$T)mM=!f3RX8q
zq3k%I(mY%dX&(I=J^D3VmpH5-A1A$oOjDdQh{ASu{)}Dy&j*vddpot@zakh!bPRl`
z2`KF|yaCy8i0yUhIo(nocGE@3zW5x44`Y(5@z#k$8v2>tU$YeUx4%%}JABooo+?cM
zq(*#2KsLsK{*(SgF(*zE-w_<&!J50;;J(GKxz)HN?d{tM)f{*cKp*&~k2xN$b;a<!
zBx}Fvw@D-pMwY|udtPTHNM@5x7-|;;y@!4D;Weap%d*MT3t-@IV!&mG&haCc*VynY
z_C+y!jW7HC2yI%}`*RVUSo$ne;0$@6V8nJM8)W@q;zizNH?<9;wL<TvSZPY^w+oU9
z(3#=gVCrTiL}>o(=$E|w)07ln811OqbyLUG%rr1=_5(l#si6lQxEtVE0!09U0WX8p
zXj7``b<aStPy=p1Bzy|N>~Gc&#){dBr_FrgR1$b*7?&Q~wx8x<(>*jT$ZZGO{6$2U
zd-*pl4G{xaeW3DvFS;?@jlz|!D#oPoegN^-Z>4iqZ2Gi8;ovUwlXJJFQjvBN^&UE$
zvV4H+75~4YS^VF!2}2l#$hY`+Js`DESMzgrL!=sL59n`U=KT+jpDcWKwhOotppr2|
zssq9U0lu?{+XG$FkKHdILTo|ZfTS}v$|EKz5&q6$UR)LCega{5<5%veX@l*{X>IOi
zH=_(8)EO{o$X!d8l$hcmu5QrEcDE)dm}?{EY992c$AjqJKqxDr$<2-(auh(g7=EC5
zQGk8L;B^3os*=Fyggysi^v=OzJEUiQX@11!?hz5vg_<&@w_lT*)p}E&?4qLvF(@yM
zyVXRLyMIk&zv3#d^UpI`7zO&dGKHOlQN<(wZMPvG$S9jlw-FbkPVEk-qnav9Jl1^F
zn<DqrplH1+vygR_su!#wXF!p_DG6jhS;Qd>sOuwNMA%fn9hXE|MepV7wvnJin^lsd
z-d!5y_(u=~tN=e|ElhrTkjjrgrN9K1b9U_vvGHxAms8!wRwO)IXW8ia^o57G<wmQK
z_iydhA^GlD;W+j{Av!VKMRQF)Jq(K7Q$=<8V4E9}`f1(E@(GMNm${=_2B4pn+8xpt
zLmN&oa%?-P05SHrpI%mw_yrI1eM$OC4oRcQn$bc+yY~=-$gz;34iRB4$m4|v3iwCJ
z5=%eHfNtNJN?(&eL_a!M<<6I1%9!;7t~x;k_QbJyNqj5%c>A(@+ZTxp!4{>9p><%q
zv&D1z^`;A^VxKoH4Rcl*yNEnWV{+GxV)chB!BsQ*V`vU~)(0pWKPzsjq)C+{6g8y#
z;C>z5b4SFa74g|k?X60Ee+Tjal_{Yp!_9nSrpF?zmai2^O4td_AR?+ixFix}xDmDH
z>DZ)&fr2K9I#CB*O5)q5a=3!kNHeO9S-of~nD_g0rC!oarSVj(1llR&dmBE=|Ax}b
zRv&q4S;Md^TFqQI-xtuN#46dMa-iYX{V}7O4Vh2Sjn;f|JWZgY3TtF`<hhY&VYjCY
zmdPb(2XizbhK)}l_Wtr{|KNm5ULaeCtfh-RHkvS6ua9B2B5oe)nRgb3*p(h7|DBhl
z_gYW`D@uArT9^`o<HGmuvjM+SICBt>T{7;;ICYAR4|bV+IB$KfRtRUh&EOAF;Fwky
zRXis+;<F`4OxlKhKli~Hkx;>KL=(sFn)93y<+#TmZcJ_#c{fo8E)-Sz2VnWnn(Ajo
zaV{!&iRJpcui&JDbK>ZYTj(Jem&H1HTyVcAqC_)_N^cBmUX`!P`3}EmIN=4x=T+F=
zN(x4tRz!}%36}rDV8YOB$*Ez5faFn*`=5DJDw1ey{6a>O;vXhf)IGxsTe<w9wR$%-
zv*rb8hYG6k6_yiPX<b`L*>CZi{yU|34fv$WPBNkj)h(Hj1sLI6FIm1KrL0!AuR|Rh
zGkxX={u#fp&0GO5;XoB-0R1tL3_mC<bh$LOB1?4nInMJB!yEYTroJ=cxxjaf!jjH0
z(YR@`oI^}D?v>(B2W(SW(e97=trVX}L1k+JqqlS0x*9ug7Vf%{cifqHLW|a0$?{2%
zuLlFIkOAFpY^H5amjGM~>RZv<q|$lpQ+mg&Ppk6&P-O<ZZuH>FxuxOvaK(4N?vg`W
zV}7!i2O4oz1UKsXiAn<XVx$t}PnJwUz_1k?iAeyWr=?&~lTSdI@UO{PAyo^h#G!_v
z*+7=-pUz9ir2?<mTPpu7uU@CcNh8oP)^_b5>3i7p<7&VEJrZh!m7tS$2eG+ePg^W{
zMEs1OM{a}-O}_G2wS{_ze_hU(%npCV>2M{{x*WbVXKQqH`O6@OKOcXX&jxyYt&3n3
z>R~eoG(7=1b++M7(Qfl*V(c=S5c#M0aS*gB0?9exG{v0?{v11LQL7-z;+a`oy&gkf
zrQor4pVe>wt^kr*-tO=4!~?~-gyF|7aefne&iY&ur`;Cx1!z9DpXtP2#Q1s9czit{
z3=DLr%_^VKk?Ps^H>#MB$&c+3v!Z%O!uMX|>$u)b$FcDX%PV1(;Nm_ie9+aTvw1<W
z{FWJN`hp4ZAIa8rdGYIdY}=@&4#na7ri4<B(pDL)+f^JIzmiTd{<wmgs3hY3WVbc_
z+O#ooQSI2RpZWT}Rr7{pLj`W{UPQcRfq<Zc-gDed6rYx}pZz6=O4JBu+g}<N(ImPt
zxYBB%AM(-8e1AvE&8u)>U@INc6>anDDEF234gKq(QPMed4P^YxT3Em7+Pj_^nJ0Qj
z8gS@jJi%OieY6KKxq>Uv4WDL1))XK4Lr$Jp(6x?UKy=w<=TUdVW5XYE6#G`F_>>4{
znNTnJ7U`z@Ic1HSon<X}N0oLO1MPUru{4~Ha!ANL*kXb)|Gq*g<LfDO6EWNtBKQ&J
zl0)<$OMRQGnrC3A_}I~@1(Yxp1e3&uy-n9HC08u~aPeOZvqontVf-NOU2i9fl!;{S
zjd(if0N_j!?38d5El#N_e|cs~IrmR)&E8-iP_a`(gg`0NwgZskrW8rBQ+>X#Dng;E
zw;`>vtY`AQg9H@?%Dt4oHu)(U?d++J<Wto|>7p2UC>;z0{;0K(7b&bu*9)lL$Jk7x
ze(mz%yG~Ml#iq-jl>RY1I*_BU*#8n;b3Qz%XVjBwUi_Y}m(jTv2et-WN5pNcE5M4Z
zyR}A^MYz$&ovKmWU17m(c?tX7wq3O><b>Eue+0`6<Dvc83E9-=%j2Y@)I224967xU
zHSrTe(oTW?{*^2OgLhNE_j%Qos-bpGBZNYZJ=KQV{jQ@FfyQvXCO+d&HRj?SGL-JU
zmra8}vyE$M4ALyV4UPZKjs>fn<XjudoP8yw(W<$IslS5ezI#Z!mu57nL7cIENAB`x
z-h!`pG;Xt5i&pVYyXje%{toOv6HCVNP8h2TZmZzs^m_ird10selZ0!n0j18A>y48@
zE@%Z?4^rQFN&7KG0$afbh#!YuCciw>5VC1`X8jr>pUK@QmPsfOaU-@@x~;{PN|2q?
zAUIc@<~uL}(XI_CQaN0)qW{ccv+>)MJE7$1VN(L*o3e}B(g_Ey9T0n(I8rfI<0!mx
zA7JXeF=#f@qfrAd!HCe5m7rDiS5seQ&R;80(3;-WvkT<5Nv+uOJpuladampbei{V|
zI>lz<Rq2a2)#x>SM<At*Fx`n)P)<e&6>Yn%$}wKq>w^lvyEf8^E1N*Y1<iHE_k>U$
z(sIVu)mfi*^qXE08s+DoeO(h&PFqS8PsaF$E8oSJf;aLxZU?GHsZag6glvgF%ys9?
zjyqRm))ulHvwl+`(gCliH^s!il%TlaUAcd~rAua!FLaWB=v3(NLhG6EaH5ASKF>vU
zUu|u`?(hcX0$lD7xx^7z6o$oH|3lWJP+>}pu}$D_!q5n1`tn&;oPR#Vs}xaGBZm$y
z=|%Z%0JKPD*B@jObOK)zkNp?FteIyac^pd424k(<O@c?2*35~^3|bLBh{N*Q3Lh+A
zQr2J4qL#mb!@Gt$*$}YbukMBlU{$Qt-4^%|X+QnzKLYxBqFf*5xeYIot(p-Rn+laZ
z*@#pzVj~8@gM7$6Fai9=LBAy4<D$r->6f-4`Ru2BqXpx-%=-BY;>W2Vlx`~B>Kz{A
zM;i$#btKXKYHk>gC18}oeyxC?wg^ttkE48@qa<gIW!tWXa;UHbjah&ggT>8>)hBSB
z&zvf;Z20>NMOCNt;|Aw*p_??9Xt%zq{G<0m!Ra~()1y+VezDA;Hh38V&X_A+>YCQ-
zy7ReM49u_HYYV)SSde??BETA8O)AWK8YOK&sfv+%8UxzqeTKzJ=aS6b$5-ma3J_6&
zYQHy@6hF}jVCjiyE<8Q(U#uCBDzMI+!uniNo+|rW$AlL!F)UVFu8?yz?h_3sE~~c)
zcyZCCk}M;Hr77X(126ax58^hcXNPv?;)h}wv&gSiL^1ER&>321Mf*DqoU(p<xgBRY
zaE-YjN}<TEzNmGC=Fb!9On_}Ec3mOVvqudpv84c0ZL+nJYCDbe)5GHx$A>aWcSpve
zCO_$sdUDY7uXg!#)7N;Svv>kCRA3^Bo7%ViC-Hu41;_I;`oe=VIJb_V-mwW)y=U01
ziwVgeli9QLnls{W3*XB={OHG*by9})A|6e~m+mr~rHOdSz|X-vi(JuL@g`{#Tf@%o
z>rQySDEbF9Y`oHH1Ywy{lS*>1!+!?xq>-zi14`E?j3Wr0!38TuW)Fj9aKav#KP9ek
zCZ2H2l|<I6b$r3Ai4D)}uJfsKcJ)+fm-=!?OF>TyzOx-I$#ygT5Dvzke!6)XRT25k
zVYKC=9W2)uCItZm=qu~kviCddZVD6GhNOc}jjm!jp|_wo+V2`g(#9D)sAHEY>h*XD
z?pK5Q>F(2`SS@LPzZf{&o(Uzmb4;6Fk<R+m#8Hb)NSi7SXtWbH^(j8K@ll{59zK>F
z1Av$c&mdqMw&n!^Tq?=vzRm9w=bA!tTK*$5xJcCRdaMH07yS-55zYp~&>_id*478r
zB}RSuJHyQG+Z?05<DMxi=RVp~B6j6Lmo(r-d||)kffoF{Q^GlulI7|q)sJE2R=rN-
zGRgQE9p7o&=RkW|V-FYh<3OaGmE+Lw7;w<06RZHWUQCmN#;!zH714fYF-hE?0UeB=
zX<(3zx${NrrK*r5u&2XcV?PS-hmc>*KleGj)zn!tolBpFN0sT-5Y9}riJUhC)qDoM
zvR%?11m29byjL;=5K_Ei|22WUz=@z$;W<w}R+0?gN8Y>YO^(p@hR=8@LFzh1T5eaT
z*8gW@2QPV~e7vX=Vjz-M(#^{+7j3r%!aqpv$aZ|VAG%SVHxf90iGX@NhZd^@%U(qJ
z>@P~=oWBQr;Y9f{Eo(N828BLD*i*s%4O)iQxr9rL1jaQ+zgEBl)M#c}b!B!%R294(
z%$5WOH6-vp_s8Jjgb^?|cw<Tv-#>He7Bgyy>?DMqV9qj<gpbtVe+5s5<)M&BTI9A_
z09KUNTM;IekK!O?aq)Ay(Nd=D-3ikasvPBR1Jn3zog2Sh9oor#0feWk(u8j@SLGk?
z;g)*QW4zAp%HZ4kBV_mU%(5;5-?q;nQ4>*80Q`u4U~zQltTc7k9gCPWh_OZ)Bp>J{
zPErMfZKX-RJ=p23W*pvvs(yt>vX4c>$%E`mBQHfFFNKO`+BUrLh=@MIzRHfX)^ACF
zSE<*GmI;b>({+DOYwj0gW%(FrE?1mokuS09F<UibLQJv(J`iUc7ZpsT+H(>#!%8@j
zgI83*AaK?y@y8N%!l&cX7c-`+T#~;Ak6)rcF^y)(UX3qYcA3)nrQbcgNxbm0oG*W}
z!nZ53+rnFQ#lxUMi#Y$xFDoybd*;72)eVc-s|y6t-YtN0MWOm)dgujy;V6EPbHM8N
zv03d#F03k}6obbO+hX_`cvsJA6R-3+_3+l0Yy_ytMU_KWehk)|AT$`*{MFV+2-*}E
zeo>Ikt&BSV(g;9oqKtCVE`{#<M|oIsFI2Q*v9)&-ar{P(>bL{#kP#(Nf9j-ru7k5o
zfJN^Ur?_|Z6<ZqrrHd>QgBj!g{kIuc>ht9k4!Cdcs`15wB`!$*l7GWzR9i>z*{1Gu
z5i}bW;stE5DW*)B<G4l82M?O2j!W`Bb7WUixhW(x+VVo}d5iY!yGIN?@fnSY%I~$p
zZ-%wLHf*{X$7CtqRrMo!eF;Ahzj5@VlA{GA^<K95P(+1boXU>EyDLe3-gL_oa|o%k
zQ1Ea3eMk=p6f|K!n!Nz6NM-cWjy$0dsN0))bI9S$g4_jwP^Wu;k*Leh)v|b`5tc{F
zB=8LpbSQCBa}m4<(-bVN70=xAqq}{wS^WF@-*2vTY+h6jAGCLD-HUO3sV)iFVZ`T{
zh(1na^2o9m83$3DhUFm{-gxw%R5>?>$mzzS5<HIG)933=sMia!P&1F6Zd`IvL734r
z8!J)ma96GKt90JYVU>@W%%melhG&XRT45%E<DSSz13vK4<oMUgnk|fm8(yk9go4k+
z5}Nl-r83f3my;oG@n?Oq)-`6kpqC{<B3@H+6|)v-52(fIrCOIpFjGLurOnKLgd&D7
z*3Nq%g$_f{?!Wv|S5GGGL*b`|ZZU<~9UdRoouesv_tG_0!-@^p<I9}5*LC<8nD(pe
z@RK1Xy9}NY&Er*B>GNN=?ORcwZ0+AdP5}RV$ex;m>Vit2`Es`>s4(@05wd~Vzy32(
z59xh@n}*1gUg@lFa4C4jrr>p0n)~+zoP?Y#4qF~}`Jh{vr&3r6cmU&#))&dsi706M
zR3#rWx3Uxflf!|#Zf)IQkqR1^c!qN(!RBp6bHMXVx9d+#h7e)T%!}WreS?2IJYIUJ
zNS-v2JbDcm+zwMn1^6dFFVdkr;8TgU-K`F%?)S;kZ&uZ*dYpYYe4TB>=wI(%kNa6s
zkiL)(O?jB8;3I$DH)xRXScc?dffWJ9QDHoe%c_7KBtwo-`}{>xggqa&<Z5eYRT{#_
zG&jCo^2gtum3j)QP1(b;>xvY@mRv#}4m#XLA~!U-&XSN89Xi1ol{2qKv>NClC~fr(
zJ_VY|VNHvRAoiNNOu~E0GCZpSLDhsmUDoNaZ@2oa<=|8tQURYfIhs6w#f^CJV~Njo
z9nGz3f>hofgc9H^Kt-<kMz(ly)N=$?!~s-GZLEJFQ-4<aJP7J?LGXZSZ$C%b07Z$S
zc4vA!$+KvAlBRxW2b#L0H?I<4)9<)ws6DSY9k!uLRVx*pCbA*<c)(y)VrhqbJSEDm
zhR4t3$qOZ>`4Hp;uvJfEMzKO0MM&Z+pV1R15b!{@mrgyx$`n<QnmHEVo0Q2h6phoF
zL2FdTs5{8%!Uu{wxE1?(IhB-Rdjne!gbR&ug9%J5-<3NqP}anpAIucT+mC1d``O&{
zO%4d^9?fwgbqr93<%DU~SGLGq0W7`I1p&J;1Tgg;#cf<$GNNZ3qs?|lR85Y>Z$Z?5
z=E!K>*F@xuHA)BRDdcD&7E|)P-wk%lT4S!-CE?rC*gf6vY$ZYM#+@nc<Mug@j?c8;
z9T1qtv;BQN5e+bD&-SmP?%c|UYQ2Omg>A!f?^)Tk^~eYsiw{;5C&LQ>f5%9|Ktl`t
z{)d!#;QizmKvD|H#}PT|kxNVK#fSDPeC+RAin4_dC-(koG?3ABuEf5tx($k--T5{X
zcM@Tff!s}TD%=qr@XUS*XkD2SAOG1_v-p5<eUCfTi&_$=bCc421O@UbEkBMlXbBD&
zvLMs0Au1ZElR9?Z!pX_y`1JLH&R>J5IKsI(Y}GU9de`}xex0O^`k!@QA+i|ARIyjL
zHM(_`CuFP*PufRrCcjLS_JaNOGd?wccFZr=6(m}O1SU;gmm64$R-`50T~ztQ9sa07
zb{Z>qlF{~ErS{50Bk^q3_O1X5i49W#@(19zkaN3mY<wD+rR)<0ca<a7zl3k`*0tb)
z)iTZ}ex4wWpjufPapcW8uHQ|#zWf2aKHZV{z20KtdpAsFPYxaFCD&6}A;#(Ul3ZIo
zL5unMlcG9-oGe7b>AS%l0#%SP1lhk22mUHV5R1ewPw;Kp)p&Xel9%+EUD_<1j3^Ly
zXsN61TJBub*<`c4_UD}Qv{xSnh4hV96&voTL+~_|Dq*q+Q`Aj+8I%9GA<}h<5bK1s
z4|+9V=&Bxx+of1e^ryrU*Rh9FTHV*FIf~n~Qrr-KVFU#WL4;0H1>c@eiqcsLM0awp
zv-;WNvI^|dpI}ro=9=YILH9kzwmy94<|q*Fm-b;t?4{_oj>PS-)F*}m>+*5nN=pJH
zR1|w|Z^)24pTtPurQt-J%kUxgs{MW!)Rh-Vg>Q*nuK)}|OLUWLGx2)z=F3M9<mi<{
zx?ouy9L0PP(*urGjLINn{E)8L%MqE}w#RA~q^UD|cz2v6c`C?b*D}F%ZX=nA2Or%S
zC|lAFK3rdI^~Moth{g}U-9m%BhPh#m-)25pznYb$cN>LB@I=+qZoMb^z{Q@S6{^=T
zGWU~ZO>TPF?H0@FCp0iX%|P34n<u&qy<{w^FHayi>4_h=)<GozC5Ro1t-ruSVX7_I
zLc{GLl|qzQpp(bFC7WK~SwMI$Kv!*}v7^ob@2mRz?T^!?SfyY7(o0;(Kn{#c`Ce&z
zhG%xDvRr#teqzjc7G&_t=bK`H*E^fM@A=@bKnqt@?gQ9=UFRZX&C|^5jV0ciQ#=J~
z?cCX)?WyW`-88V``tjw?#$_&^E=7wC?gMnAgl8AQvj_5QxicL_hkfuZ|B)VjqVe!1
zb~9Ye)*HkvBnCLy!CVhLb5trC-pD*(&k&QxARR%hslDR;<U5Nn`Yk}2B-iyV3K$aq
zpjp>dZ&fMu=jaEt?2ede_S){`fQc1k{zrcq{j#-Hx&jp$sZF<9xoFllg0E$}r0aze
zEmDSdBok%fa~k6*Qu7YUkS1|0nq-st?0yKFHRw;3SRWJwC+eI%?xhy6m5Qr_qRU4@
zM7v00d*rSI22i9VH+tY?fLnlnly?QG--6IGg3-7`p4IVjV*n>H(>@1$;I&B4K4>uB
zhU{Ln7}z2dAI!*t41u9A>~N2NM4UX7raoMXFQ>i$j{m`tF;iF=kPVztahvkc7e&D&
zjO^Z$h*k}Aw4xJzdFrJG+6ga7e@#&+i$p6D<VgA%;!xfyy`}M7zS)=tDaTUY%^2#m
zVq1Hm2gWPgIc{_<&a4z2t~WcaG0V{ggZ({sA2WMp5y0i;^gb(;y-j4jY}KbBKPp`O
zfbJL4=~ZPwR|RT*#<+k8z-y3Xg4|Do%wOn2nxUR42M4O41S!XRX!MI!NymGMRXhAm
zj;Yj=0kvti$m@Fk?9Pkl`i!(Q@OCII+`BPWD%%IJy94{Gt==FyzS*uWcJ+!aV5I|(
zV2(_CxeZ)_8Pe%L60=nRi=oTf+el7lrSu6}Tbd#Y!ikeU#TK4yPPvc@CzYOeC|67>
zQ6@7XMk>+J@Lm-zR2F;1nb^=W`NFpOX@{A};^hm~V(xLuKhq|0HS#q$8m)W$y+LUr
zo{19q=C&IEjCxvtrHHZ^bg`ckNdr~@G4W&G<d!IaAn3&vMm2A(+r;h*2*jbf?2KL(
zNQv*FYFdoY|0Qv2PYAI7hlqs~=^H-zv3+#g;(#o;bHwJ_{slDe=k{J3a+`|>`nfZ#
z_YIp|`Mh~O<yJ-VR&O8(p!UA1_K%4RDuKwg*=j7LgBL~fBIE04t*Z^wS^r%093YM@
z>*=Jvv_H<H`%s-$9_dQKFR5Q0rA)_ix~-uB|9s%mvsw=^u4RfqiFhlNH($<_!CGfj
zM$&?ub+|=eM-$4lxSo$&V!y6&1p=Z-R&R;BeBW7L=Bp)L+AI-KHYbau07vPI90E|%
zi9@k3kveVow%ROExNEHmT=`-R9F*(1)o74D0>Jl{cvaJ^u*Z)-x_lD#LcUvXCqbHE
zg}eCZU@b+g0dW(0GqrJKe%;=LfnDG@{6(a*<$&_})#+1LJ!08X&^SSeWD&T$87g49
zGxD_4QJ6I~J&pw|w_6Nb$h;f?9*9|<=zb(VH`@ItQ0i)aaPU3HJw!9Nz5n@QpSm@B
zb|5s-^U0xHtsQ@rrfE^m+g_l@+bLmaH)Md$ut}$kc}OB<RIbaMF;%ZXSxgl{Fjx)r
ze=Wd|wPclHy<BKWsc(o1HX_3vcACPsZNL>zGg<7-H9)%iwlQvoOd1~}L|(hJhv4q5
z<BVYc)a;PU;KvY?`M^iVze}bnSq!+S&*s;2GY^R!zSulhTZJ3$49c!APH=}&6^Ek!
zJka6D2^AWUTq?9<*NhUo(SpgO|1-HiX(88ip}Z&pEVq?lN0Kdo9KL_6Z#YJ2U&Fb%
zcX2h!QnWJ3@z3j?<yA_!;px6gZ@9g!y5DBD=Dy_wllIrixV4x@OxwDAUvVFVY)0fI
z1Ol+$yNFfY?(|n>*Hg3{G-uN(qw;M@3q-=E?YhOdrIIK0Cp$>{vO6GP;meboh@~;B
z*|S)Vz?K8}GvbfQl!{WoP?6Ip9t=9Jns74{xc<&uqlX3S!&$InLocqlJ#7|*-Mr(E
za^$;3JCu5+o-__TAeZZkoH^w1VfKWyNzPXl(v=V_5bp;`)_MIuXO8s*Xmt)IsE<rq
zE^r>~eO6gs3i(T;n&X`@{cDARFe6BBqlGXAxymp6`C{hJ*)VKmfSUuSM7(~`^v>Zn
zkB#?@BMHj_OfKx4En$I36a7KQo37a%&;ve%Z#_)Dkkjnrh4fh|BkW`AhgZi7cF^ct
z`BiEI+O5AW$MA-2w;`&@`N>Vo*%>?>(8HYg*sYCSQ!BgiS6M4o`pj0Ufbq=p&81dF
zhSS4NDRK6#r#C|xd6h+jO2^-$!i9En4iXll&0VIJ{jvoWOU+A^Yi1{`Huqh7w2`XB
zAxTt%Dl(bdX#_;iE%_9Y_T2a$;;W-Gj%rWg?dkE;rBdoYgxnFF46<%^B6}}bktrwd
zH)6*XOok_dUK1~odQG~kkY=9oS4`iHCrr<d%p7VqlleOPg3lJ-Q&LSU((9diCiWY0
zTlsG|rsR2#4s@(-u?YJgiar;CC8t_G{K*H!Xi^FCNRg5B!ud>B9iI|r{R#A1i+Qu?
zS{Z262(b@D#j81zA8-Gx7|yW1A~P*HzU*QTGiIG#I7}b>GKISs&VRZ51M#m)x;_4S
zS5mNI6m8zk1$(c4SEKs=lLCDD#4@LhH;!*JumG6o;I``F28Ui5Ra?&=LfZE2VQes_
z`8rI-)&!ZhsjDNv{X7Hu`@)p@di-g-t6JR%*`FthvfL`k?XXcYpEQm-d;8t+b*$5`
zDBkn0|Kd``91M5tzbU!WuRD*L@~1lC@Fs?}{-hhM$vAds)8n6YLPkbc&-P6qWx|8a
zyT74#-3`6{#U6X!H$b6Ye@;dv{D<k|@zoqp_=SQPf6RQ*8D&wxoho(h=Q_MRsq%As
zLrk788Ex0z-9+Mu@>ycj_M6u5T2peZ-xq#C&z1E|KvG{~DQ+{%J#Y1)tw;d^^atoJ
z64wR)!R}=B0M3<z5@<KP+g+Yp^PNcUln?I6pgdlF&*@pYIi;X&=1=hj6?<L4b^SNp
zk%6YGNCn;*+n$TkIUPIi6NOL8owalFIbCAGruJ{)Dr9Y`x4E4~yAE`BevI-jw2m&4
zVztGeX>X!1hlo!J>Y@oe=d#tw#GrngVO!(-h)*Th+4$WuMuoW)u=3)Rd<|9Al(HO9
zo=*24v^Qv%wbkb60XbT{efQf>lQS*UbHIG=#^79dm0TQngFuE^cT3#}pr$eSqaqq<
zh%xVA2qp7n`Bi;geUa#&&%=g)?RK!%A2`BA$H78%zxe|c2s5g^V;|rCX}GD>J-y7a
zTz<F{NcbG>m48gUGC(<wMxujjTIL9MF-mLScVT1jCnImjLh|FsL>dH7WH~VGwaAvP
zx5h@;YR}Sy>`ay?Hm^mfAq{U-(Qge_!T|>yE@TxV6izl6wb5<$21`ELf6-QpNxcW6
z5}{gMv&tEN%;7s&JhP8@4H_R~g-DfrlAv($#tU2J9QfCY*43?k(XNXw)a7@No@VGT
z|4hF%Sza2CT>RS|MquYzHIXP<y$GnUrrgsw_S(5A<@9h$!7oVmF`2f(Ja~I5bseyE
zs?!kCUHS6o$+9dOO?ur>TGM#o!-C;$;}P2S3r}##`0n$;hHc?47?AWn<NmMhK!=m>
zBThg#;MSY1-|JK3*{|5TJmixqUFdHL#Eg}Vb7WUkm+>`xW(8yz{>uXguxb^*3j4Dn
z-gsbve8aG^>^G6=NU<U<#hHMp-;bM`X`N52kuj{S4M|aUppf$+I)2{77f~IjUf?Vi
zGWz+}3O?D+B(I8gMHCswZtRh?r<HCUU6K9;8@-PL-9**u+Ae(VoXz&T1SsVp#^|ME
z<|oNXGqK&jYN1Op-5?6YTOy%MhKE;jqmt5-d7P&gE{~nGQT7E5b^bzPqm{aZWnp~F
zAdP`rgq$D$PFGZ(2z{PreRofn&Rh60C*!G;5w@SROllfzM!>u8Y*6oLuXPP?E9Hm8
ziE?3ofBO(b&RYxYPawI3rWX3N#chfR45i4^t-nI;9IOT_`d!aoO*Y>Bet9-#F4n1a
zx9MG<6qmEXdho4>lad>K?PDnx^z*o5m}h&%fdn+q2?BH#LPaH?Q9qjJjw{%nw)pGm
zfdZxF9cj?+xW0tOU|8+bp9&pryUiY-Bs|-{A95U6nb}Cr=Ud?K?^D}cJ`l91-{r~Z
zx@TH?>vv1yNGWJc0ZVW2#m1^Dd3m`K&(G%o{;TgZFL?CJmk$$kC2|?5%Z-ZGm=%*d
zxaNo-SuncG;6r)1eC0%(;)vJVG+q}mF+_z4@JkR6!0I26=E3m1A{PtG`B>O*?@4y4
z)&!cm`e(3#>L@E47vINtN&JR{(iciJBWRKgj;QOL%9~WO+l^2-6Wl8^8P7UswujG=
zMZGEm&n0FJJ`Nxnmjk0#wntJ^O%Wr<FOWD(y6x3)%CDB=pW<rZ|L@RxpV!l0HN`c+
z{US@rQ<-<3LhN3TE9`o9F>TZ%2jnp(v>2cE9a9>%64k+Sl+c&mq3%BD+#;;eXVk6J
zC<?LA5U7H4_ci3#%VPU3Q!jRFPOb2tc|#h{&4}dVWWLaqvme7J6PJ7H4@Q>kjvm+I
zZetyY&fiXai;Vr3BF7mVrdIvASM1gn$bU3u3=?iN?FFO2>|a7%%iaR*{!owcckh#T
zN*2vwX3c-p<HzU(C)!D|iC2o<Jqf;*TzDK*5zcC*B?~q3wb|vyFo2zdJ;r%Ymx>lY
z;|*W_Eyiyww*O9I7PmApVIZ5Cwynyv<o(9)HjybFyf)J2ZqV0A-er5^vA=A!-gzhg
z)#s9E-w-y7yd&wfOlmp%NZPESz%nqtUH%|^b-58yE?vIo-I~>KrDLY14A<wS*VyN>
z8*Q<&vXelxr}(04vmo5Am#%fu^Q507Ltr`mHt60o%(f29G+`{8Ils-Jq!+19xf9Np
zV>?5@QzYHa`9g(mqpRd;#hgW!J9Yle-ZPjq_54->*XkEp*<9eJo%gTXk@G2=$Avi!
zdf8g%z0d6&=8XG4%XwoPZqGh8)tHtZCkRvSUtZ3MKIFZHcXcWbVS?B-h)%<qZ!cU4
zodl1;L1m|S(wauB0^W^H<@VAN=xpOZ<*v3Aod)mC2KCfeNKu0TR1M3Z219ABlQ-cr
zTibDKsDL?x(fJp)0uMuES<c3*>(l5`5ox{qeg2<`$`IevL^8@)KBV^Vq>ARILYoby
zs2Ak2vBni41fi<kiSjj`foDQJ??e?xxk`OZX^Y(bV=G2xjc#z!j*+nf7wkJzk_uS(
zT+QsX6<k4`^m^*?->QK|5MBV+)F!=E$yjMVm#)2BatH-hl(*af0wY6`sKfc&jn$)H
z@W_@2t@)IoB_yXNZ@5&;J4&a);y6+krts<WM3nKkYNxNZZ51OS)Ya3;w)folBKN<s
zAO&LMXE%IKZH&fpm{neEPBAf{!XUg@%DqzeZxA&%_oiE;aD?$;y|ra&h0!qa#MH+a
z`4I6hnf+AiWmD=ja`k0A+qJu#HEnNPJuBzQw^1IT-D0?6*={XDPX5GW8O!-a{fdK5
zWkz3Y3hJfpl1eBi3-XQqOHV;``1j>%+o<(Sh&WSjugia+-ih9>?N@341COVT#kce?
zd;V#`u&+M`utXj;;Uwhm<LeOL4~i^g+-*UrF^!w$oS5&`p%yG?s9o2esFHN_|3OG>
z^JQ4u5yz{fsMn*}BTI01@RP}^aANCWV?WjqbIvhyrOwof2PJ~x5JUdL3)5uESM0RK
zRDqATfT7)aQ_`rTrF7`zD#Mdn`-o@T&z{C!4ca+3sa@GK-$^#7mn&b`C5psz7WW??
zzN+8snVqhbBa%O|V-+PWPw*N|uom6VpnaQ;has!ZA34xceL6+{A=|EW?AjLDv5AJt
zVLT~|E|HJYV_NHyourlZN3<hE|0_0;6jb`^oYf#L6jf5|6$I)wZ~pu~nX19H+fw~S
zx3)zo-Gm;e1L<ZiSD^EFl$a>pPLMR{kk0RkH%zz-!&Vy&U)LEW-nXuJPTnsY0^~lW
zuE(cb@PU7GG+D;n5K21{1P#JWm7}!G|2~uuuPryn58<WxX2CK(tz)%s|F?D<V^|%(
zfRk>UTqtmQ?LyUK&3n_Wpp62}^@Cq=^q%q@|Ilww$D};@Y)ms8FK|BA4(zUlAgd2w
zC67IS1`#DSrbQy@CCKaP-ghUT$u9%6%A2>R4vu(jP;Wjil(Eun=qM@@*7%gWt!zA5
zoR9v@X%~t3=I&JZSvQ^kjMAAF{TAr&h8dQ?UiI-HtoEsiiHXB6kW#Vb#If_~L5k+B
zCbDCJ=U4LkMFd4M_>?Tt)m+(K7*|)vWZ5Ei03AMLoU=l+>zz1>lqjjhFMi|@i30RI
zn2&ZG4y2=fj8s7K8gPEU>2ifjTMj09y7NNj6H^%f=?&O;A(Z_(QDnG-4JYD@q~?F|
z)vMCun4a<D0-t6@@=)**`iJQqknX{7sA$2%^fiZi@aFM>_)x$}7#iW4@M;%7q^RjN
zNM(H!^xqC}9c0_l=>*H#2zJ+$bp91<ixAx@xrPi_soWhT6xflGG)|6K^?-7fUON(c
z9pg7s!N26MZitu%c$MT#6iHa&ykC{Z&>M_A_Ui@+781|dSM~UH?~u^MBhwsSDOi+>
z%Jol8l!?}7yz;~wH5OvuzuQ!szd4Yw3?{0}EGYO>neC3=s-^`V{@7l9QOPPb8jR|n
z)l6xyAoCSxZ|dj>AdK${nP!;wUXQ<h_1KG?YZZvg8qqP66>9|Nf{%|468XLz-JLs4
zi|Pi-P#Mp2**o4a<>v9!|8uS`{+*%M#cJIc3#7X9Nn^!#9Bpc_Sna~LEvsK{#nr=5
zy}z^*{oS=)&JFS!O@|bQ2E-a2t2|nGQ&JTCd)Z9j(kf*g<}%7WoES9OD*s~eqWfNA
zK(v(-+bL`bI<IAK4%GMmwq=T<mYEG2GRxDyVlJQXnjBN4%u@v^q+=3gxhxa!-|j^}
zZUz#2_zl40n3LN~`2<n0I}MPKeSZ`JtxX@+8j1DgK4X1Q_mABR`K{ZnMXkSnmJ>IF
z?#q1*y0p#wdv`oxyisL5RG)TXh|KwL{i<2ud6A=is(s^JXN#cNnw?k559TEk*IaX?
zn{vj4lxrPFlNWIHA}LT+X~NtVL+2eC4Riv-0$p<dp!@D7(5-xVd*xtRQkc@bC}2I2
z-hPDt8|$6*=tz#uaY*?JmQCc`Lr6(oEA=oWghY8r|Eh59danIJXnw5)j>ePoA`I^z
zLQ^mj-`a}JW<;Nv>6Nt#r991S3f|51X{3q0eM_tWvuGwl*J~(>eLI4ZDQR$yfyXI$
z+;`;ODH+$I%(L=|t98>Q@pbLfr_NW>avhXpJO2y>(eKI*8oJSY6RWjp>D6r!tx--G
zG|XN{k!CluUkW+t)_ur>`o8=t*JH^!xCj82NMaJB2C*YrfCggI1VNwS?56Z5(Z(is
zc~LwBvx^!uI$Dz;vIz=xKL32vLr%PgPN96uCd>pMLMK~eg#cjrUokTn3BBq-L8Shh
zb(k_Z&FaPtE<lo`gJwqQ;v-sXH+Sn^N8q|j-|4}+43+Kk&g<Pw(_)JgQp?VBf*2$2
zPNU+q|7%#yBTg^2vH{!5jj&oP8ljR}SH6keJL%XxEQHt;lw0GVpACz3BaJrYGgR+E
za*Kd1d#q&TR{CdyLE2<B{?pwRCkR`3GcZv6=7krS_-FNf9OjdrlV*j}aM8yt>BWY>
z2ztq{m@K-@$+8495^-{jRRHtdL<qgh-UB>2_#Ydsxvsr|_PH1&jth`&*2dt$HP_!J
zpQOZ8S6zGUK8qKQq?w>%UPhCJPJi51L;<TH0^v`sdM!jVT7>-3S>yR`f+qQ&AU$h%
zZGVwQTrCP`4GxFtz1Z!kkC;BQy>ylJfijTeV^Sc*lJU5<Vnh7RU<5nEvGj{3`LNwU
zY7d_&um9>KTXGx_M-D1&@Wuf0MNsL@U(jBPiz4}cY5*{Qt-PW3oRovqez2N;2nCIX
z{@tQ++d~f%d874fF-6T0O!oI{OMBFZ)uBD9&g~o<jQ`iqioNJIp%H~poWSGC&RUd>
zOWqkaGj;1IQLM@d`M#l(e~>bR?OgkTQ01Ms{ZZ6A#U#&V4iagjYm?1z@pZoe;-Qnk
z^APVrw>4hbbihaga7&1dI*N67%g<Imdy99a)aPARhR#j;qRMC=yV?-ZZn?>D2mEyU
z?Mmc72Dm<&oLEBnH~0E{D&&m6x5vQ0*Rm;*(?TQqW^g!_@mV=TUN!w2C*N;6!|!w)
z)^6BMPV`&fIYCFatFOl;EOGwv7d!!HOr5g1egTiTLUP}7lrM7%Eb6_gywCkB<(Z)=
zTGt@%{qcD93%`b#+s1p7(+W$ttVCBHex&u2hIcJu<d-}J`3btgDTGgTep@ASB+Bxi
z8f^}4+{GsW5Sax^0Mg^W%h~tR!(QSbAh@43@0d80!d_)9d|)via;Ruy0eI(|wwY6h
z84|YwW_a7Vj3!W8Yvs{s|6mEyoj*>Q3z7_@sf&?t^#m5(8eWse^DceGkrwqbVcmb$
zahvEsJjfm4TY7a(xmBPrQ9<`SnOD`$P&h6{sw|IMrY)imrZWf~H5ydY3DYm5b-e}d
zw?9%EU9pInS-!y%aPKj$vf_i+0{smEQpI|GcORJx$E$A2;lEVKJ3`Sm{A8pu5?MZ)
z+d-J&VGh(&74GUe-XV!x``iL)l>9Mz6=_?78A|Jm`pqA7Wd+LNvnopeNnXCnVq8ui
zEjR6|E5LC4W%D9A#boHbQjd9vl@O`X6uldpzI>60iJak}Q@UEt7|TaLmG2FC`c}ay
zaJ^P32RmEOn`Jv)ScOQwH*IZm6MFXfVo?!7kiv<9|G3{x8{l5*o~D?N9-grpnYG1z
zO$GS6o-L!3G)M*s@P;)%eEw)&=OTA?W3c)^Zk!SIS(P8Gc~{XokLp<M^ey>4;GDJ&
zlw}YHp{Cq@5nt@gUF{HxI9hU<j$Yqk&A*%!g?TstO?T~_M~w4ml<Bco3t+(fg_Zqj
zy^>VqOb{Sy#gBw7N(pe{P5sabJSth!$CwMAHBgY+V+CrBiqt_=uNhHIKPtyR0fB#9
zHPxUrpcz73eo4Lc>P^b?&E%a@LA9b0&)Bq8jtaMxOS!V1E}24LPEKpJa+RO;g7xD4
zrpw68_F~tTmVUdLFpue2*2K7s)u@8!Uf8e+1h{Kocr?BnKQpAh@`p+ZUqO9O=k2;V
z6}4f8lJLH1r$6-+w>~{$`Rbzg2qjKYKk<tu<|71>^$b_ECfyi5Lj0@@BI-duIWFpL
zm88EfKHRb2vk^#0+#8!z=k!!PU@vxA@Oz7q2UPNwXgVXf<pzGE{IQg@R_@pH;tV=M
z`+I*nV?vxh({rDTZ=7ybrWjXz-Lm(sb9k`!%A%lAxhR{|U0<@N<{ZcL>|k#RUp;MQ
zd$W*Bd3cKX-Fqw)hh$Ody;Q?(or5qP{DfxgX@!d35oSAzzvTw${F5dxBgFbcNxV3<
z?|*g_o%|WY#iHgCsmM|u{LbEHA?bz5@#tu^uDigCMEr#^j|fNM>0Jdd>OrpVxPv7J
z(LQ>fknIn#Eo`}4lmGDZ4w>}S!fZLj1N*h-)=X5%I9noTj+WG3R7hkfsMveEE*%3F
zUzwG?aidbwN(|;x=JLu*3syEka)nAC9OPqigK7p+k+n=|YXU<>5`R^E@Lzhcti<eX
zr0{96?)CjC!|BlqYbnC<tA9-%)8Ls0QMWZ-Pya^Jz~4(2aYcMFi<P$N5s3z*sx1qV
zscQ-dc)M{gDN`j*`wm%X%+a~@+m>^9=!4~u>>UF}kH!yW@+v5jQPB3hr^4PH<1{U(
zF{8iZIkO1rAr4;W2q;)5!k?(rMn<{OV>OUS=ZZ)1ejrS3(YdXD*D&#gZcboy$v|$*
zBf^mSd(%X9C-(H}^}4_6F$#!jis@~)BG;bK4P&IiR1znW*Aos>46HmyRJKN&Zw<DP
z`lRmcfmH4{1@z%WuoNGKl|dCC!=Eoc&Lln9EZ%^!h-iVix0Ar0Bv0jtOi@Trx|>r3
zM#Fw&$>ywn!5I3<n-YcrD<bxms%76ElBNHg0cjHGFdLZHzBKLmJZ{GF+qm725lOw5
z)_=XLKEzZ?cl8#iF><XdZhKr0mNV!?>{?Y*#O(aX<-pus^c`+quSJAk2{I!%z62Bi
zuW%=i{y8`rUFF@)LCivA=G2$O67I9vA1mJjfYp)^sgVDOwVbOCjSg;HyAxb2^4p$o
zLg*9aR7I(uGaB+2R3~XTbW=1p1&;ow4{3MP&u|SSQ~NaaFLQwH?`DkCaVLRh->@2C
zr5Dk0)Y6mD&@r{$VG%d+7w~2EIeMH+z{l7tV2+QN&ODNUh~53VJd)K{Aw;!*5(P--
zj?}bA_J);05v(qVoDGT3{VT*w&m73%cim;6>64D!O!tQd-J9JC)L-)g(r-E=t@fh(
zC+6gT8Io&msuTb!)-5Hgj*M-x!4zANdCqWo=~HTqR=hd|ydg6Jtm^(AkeAmV?%?Wv
zf*#GXau<{)N8TJNhe}PU{YCzRaYcT*&>nNG%52O=v-<ad?H|mmDc1-*A+UPz=IrFj
zKybz=CqVB;Y=jFRnnKP5U~CM{p!^*zpKV;6tKFAZU7}Kaj;~QlUgiizxF{kky2Y(6
zdzW-kDVP_tL@|EOC8GO<O;VMqX7@~7h$AsCaIAW|$QNtrx!d&C-<iQc*pYAlSe~{0
zimX~x;rr9mo7T7MXD<FbqUnolNhQe@ENww<#^W})q&6|wrqQKcP^p5v3Y>&^uKzRV
zq(A+;nq|WnL`@{oO~6Cy`$%y;F9MX>B7>Y~lfurHUz)g?jJfa|nN_>*3q5Q_%{M&$
z9>L1@Gh_X4tS2!X((<Gz1@zh>Hw<|PqO1|mcrT+a4;m1?g;3k%#5u#A?ztEFHjq+j
zo(mQ*CJ-}Y)^8(xA51G~xtJ0CaYsF+V)qPlQ9Vl|Q}dL_boensh1Ye@oj5FVB<f>R
zvAfphM%(5ubhjbiL|O1X^&H7?p?dV&^FZCV;MYaBi+bL@><=ziP|xAbD1*pPC66Bq
z>W!ciG=jc1!%;T-1>FN;dKg{cpCxB6=O|WLj8Ag)j6{r0*a_UR=UnsZf9ys5rV1eE
z<k<hl48Gpj;Y8-k&C<689J8Ip8%xn%;rj(mi;=bL?=Ei?2Pu_O6*%xMs=7ssFIDcr
zzl_rat;E(Y1LZFExk_=!mJtG^51#ta6g%T;MaWg17JR5ge+GkbwY?O#pii5vk)?9A
zyKCKZ>{G$y>whxcFET?bkhErEH^vU`-CZh)ocmv@x6|b0x(=q@m;}UqUD$0xUW2`V
zYPbX>WWbg4?ol@gsdyKBxJ!VwsN>Ok6V*8gKpK-k`1JiMnHQ=ktFz|w=C+Ko5&aOw
zJ(X`=ZK_1VMS(Gn=@e!|44qqC*{1aLi0tbkc$7U#O5;&7^5~PMm&wid%^a1BEBoQX
z*ns0oL_17h@g4JLu2guk4V#MP8*RcL0~DH;7^H4C2;cojen+F{^YVtgz7f(#@#Vz*
zoTgfD^XFAgPmXE9|8w<WmUC-=K$`6M1zyz00)6i(R>@BZl+h6X%qpR;Fld8(_4-W%
zXP0~B{1IJV`$T~Q-f+z?1+q~Si5e)P81sg?<;VV$p-gS{cDAJ?knwR_8Afy@6h`Ag
zs=%;C?mnT^2l2M46sd;o&ZwyfUELb>Euf8nlp{FT4jAv}7S{$aI}cReXA9kpmx)<T
zkL%2pRR8*$Xo4@Q$IMpi`oR{qro1{JAjn>#YQ7%e^v|g7dcC8rtQtUnGlGfpSuvlL
z?zYhXzm4U7_fhA*z6DCPB=4NKP0GC0m!k*_!ScF@nufy#X`Dv6vRG@69#^@Zp?OP7
ztHJ@JG>$r?Bvmear|D+Q#~%h04COw5LG)W+*ee?MoXB*iyUD&uJ9v5<FscF^+{l_4
z^YE|*)a!SaqNO6nrO`9Yh2NdV$$Dack@OOK0LX!itdbu(QaH%v3JzOR`M>ff>@J)V
z@bLTCb524a2!_CUuuR2YnC%OC_Gjqp{eOc#n>KVg3cv)p%XV`dbH9$bq?zcG>;qCR
z*wH_z%(AS%MhcI~Gsl~*=)Inn#N7eo4L2vA#QA->gQlEKfGa5n!J|$a{Nrt>XB7+K
zy~dxp`kq0ze}i|?<Eecm`>bJ>3cQmA8b5n}p?}(X3dhKrs_scPr>N$hdI^smQc5%P
zj|(fE?`0aZZ(mlsICy7G#q}4Pl8#0TmBmQh5v4r7W-B+aW1l3>JVd0%ps3mC^N`V7
z+9iH@=p>f9#>)QmK%W2DU^W27{C_P#gGQBzD%S(#1W$QLp}hx23d}WYtQe^fc5U4V
z3)&KfmNCayn9YPa))v>L3MgoawPyW*+4Jrf6JF>@OE@xR32n2#^xWAM<S#18zQXN(
z0^WY#<)lq02JNlA&V8?o9S@!5`Tx7E_4==-!rrR>Z5APS>t82n%?YAJcoN{4R2p=_
zit`ZJd%WaiE7~T56co@>+dk#?v+jQYPC>E0a#gZcsMY?}P!Em9*!36*-^QVf7>-Qk
zEjlb^qoMvAbwh#P4a6XA-~fUKJkqQ;ww9%0t;oP{#1sGoQ3RJ0>+viAl=`|O0{`B3
zQt|tCOj}N(yS8N&Qk@;A)16Et3bnT&MVB39^$(=fMP>LWX5gQghVQ9tBzE^Tlv)o)
z+;TsY?|T9d@1}2xuCsIa`~lI;GJz0fQt}3O$16D(m$T_4D5XZr6Z6-wWx*G0{po9@
z2hI?5;0y=?6%qav^^T+{K8o_Lfz8U0LlAJuq&RGi*E$GiUA~3C(_j(gQUcz-4rg&C
z<qLNq<jVytVjvI&)LC$8=vOcjz&pD6)np2N1iG+s6h5_-pwDKbh!3vW)e9f<D*A|V
zb<UBhypZX=5VT5nQArzE5w$zj_2NzZ*s7gcT$1wx{oG!$;Bw)Wl8=8v8h$4-(Py0V
zDf0`9BzE{X`iz}O+=%flss)c8;FjR>PHz7ChgY(De%x(9^Mpm^N)=b!^(a@|^(e*J
z=_GDhOXAjbBpuw1K4Tx<e&2^ftEM<EoRYY3iu!iN;?;0Po+y<xDnju$^&|Duq398e
zc}-2h&q!Jt=-S}stBD8_83DcSC1t~G%m>mC<N|_JPV}@N(S_CT3Fi?!gl<=UPwEHv
zQU28qf<B#%#8ZRtr>zsw?!cZ|f~(AgA}$1prtS~ko>7b}#2Y~>!Mr~eWo$5#RtzDV
z_d(r(?rLJ?TOxCR2GM3jP@Hp?ksFhVRXXW0cR9YNvyocei*j<chS+hF=r#HZdX1WZ
zZ)oe)d^`h!@CgaWk#bfPvl(I*-YL0gy?qJj65ZnW^9ze){4Mu0{+9c(7%MroXA8%-
z|G}~C8<15$?H6pKJR*>y_(+O-ccDBo=sb@(u}RU5n&W>z&}*UUA4!>h7r2F!Mgl*c
z-=?8JA0bE;qQ<XRiypDsfOtasKSRN*pM%tiD7vUBJknsG189Q=(r5MoGPXWK){Kvl
z>a_SgIRWiu?tSWt`Fki|xF5NPAEMSu;D@u2`kfU#6h+E@*h$&fTM?8BBr+L}@^S*-
zyb;ZqhWBGH1o7;TO>Csv3eL^pljrru+e=S`R!*4QhPOh1Km{bE5zwU@y+&U_?=e>p
zJ#YkaW!tIubn8D9!|zM*$SZ9!H(X_?L}jR?+xW@NR=8>KS{^$3O_)Z%3DW?#^6T;K
ze{g)q22v02!!tdf=oNdg=`@t|ilDGh6eT^wky;&13R${D_sz8}Oep_K$O80)E|^2c
zgf|ea_IelO>I-x)pr<xypdd(FXg)7U@auIezHv8UH|9~9y`$M;5?#iANXXz9Fc+U7
z<DDn49?nLzf@%9nx?b@Wy3pa|?0JQ}Ir9m4`#LNK(=qQz!<Fr#=Z%{Yq;i}#BWG63
zXxGI(o6cQdU1=z3v|Y8%`OUq&k=UJp9hp)^_ras+J^D&|jh=viMAvrfXSe>t*#G+y
zypwa94D{+Dep5v{ts$&OZ^C-?X5u}MVXiFa<gU#e-{F4REB2fsc+V;KluZ<CJm4Cl
z+Hc))p_bBrLH<<W(i?XS*AhmoFVKer5|0)P+v~ikM212ij&IM#S8vZd3%SN0dBj*^
zru;-{@+#ySe}b?0_t~mBfzaXqMR_8MoO@nD8$Ja8F8AR*a4HhHd+t}2e-J?-AdhIh
zB~nw^^zJD^MRDWO(f;9)?tce_(QEVsdXJe%_aUQDs2UbxXiK68jzACu;(pqSF1wi2
zNrSNX)D9$NSrw5R4iT|65rCLMEw<fm5o(<$114U>fQi>2iXz!36Wl?+Z9VA;2MLI5
zeA-Z1;?C1(&C34&2b8hF)deoYfLg-&^#yv1=jUyW$~%VO!T+rHm|xG^@auV7y~ku~
zUtD%av*x6&#d>x@sl2G5(RLH=c$mRg-GEm>^XuH(l8~4<ZhiF=R(|q2l1)d6*mjJZ
zp|PY)8H6a461DaK;X95a*q!JD0-5sEzliGFaXTM^AQ0ZOFX27=GU?tYuvyGaPF<=U
zZfv^01HBHSi1k#>Z*nBf3v>Z(V8a?-ofSclBBA|)Txziqwc#)blA6r72KyqBT(lss
zX4us?F?i}s_ODvZy01TgoyQ5?brMk`AUK`)gmz)#-H$T-nwwj+s^1<oXQX2+bx)VN
zuG&lTH6vPNI{8<p?2GM?Cu^|4<@`XGfiPI*6N60EctS{L#N{v{^{L-G{X!9(PWpYZ
z8vn#}BvKjOhm3BQ_i1aSGC9MpxtXEUZ{*PW-&p_cTpV^gSKj$BgQw1HR3WFc(P!Kw
z(vKe|Z08Adxd!$<HS_P{mb2J14M^k~6uK~M71={Ulmj(+*5^O|1_S&2dfh_A_%}PW
zqisR)$%Pc=en#-O^$+b^g4AL|Q&NF0vk0%$e0)x2;gM$`Zp3BW^X|8(b?tLQ`J2XZ
zxtz@Z_e1Pmxd^*XgCRPYvZ!DxBK@)W>M;B0|6fW%yG&M$D-L7$WFw;6>S{1>p!)dv
z-^khd`K6bo=CYf}-TOcM-)eqswLYr|pOaZ=ipo$Kj7Y6^6qRPwrImHkETsx1!)D&j
z4bQ&OrrThRVX7!2FZmR?$tTH6IYnObDGa$;sC0UIju_9CcR$u)H=K%+LRNkJIwy8+
z#B8j@J1~UcZn1>K#1Y)B2O%*%@e7Y^ktTg>kVvH5^2$ee1qQQc#UkW~QwTg<TSU{Y
z*J9HsuxnIUJvEpEyfAbRr6@kKd6{~bAQFud{f)!0Cgo#XeFWUGTodT$KhYNhGke{-
z6QyTl$Mv!eC_M5h2J=z^KfbZaww`JE#QnS#uavsgQgWpV-_Qtrg2V9+4kIKwmZ<na
zgvG@-YP)nHSgMTVr?>+;H~AEKN$$X|Px9HO(;&0jkk}mfcj?AcKd!^WyZv?<z`Y3e
z=1rGTnwNvkQ-fWtL~W=<Vym4lD^n;5?$(2#uH6ZV?n!WTEWy#S_=R?9kyl$wC@aV%
z?dX1TlTT8TlZhcOo3g?@Dh<WhOjWgv94&r&PR<%bLI0K~1zjrG(u&Br`4e!*@(tCm
zpBLytj!f+n9DjGhC6$rjv>7?JU@(Cn%|aR1xUI8SN<M=>Scc4Mr|<YF^t)m@q1}7p
z=^u#J)2H2jkN`G|nf%n#<R+aYFXc3O$tTE5IZa7UUA=Ovmlk7)AC;lL7(;w8hWcU*
z_Qj!AAaOY8zH}Fn8xApY=IzXW@q>2jGr*7kd4yfR&L?HsP?Dz&b1&w(L{uf^=yD8b
za}DToi_zv9(B+jN*lQ;f$yI8CyY?VBI+l>=Sc0SD2<{e(Pe}L$C+IXqMR6eo=}8>f
zu#%n2=3}*3ICB3K3I_ajgFSuBtB7`I9*8w+E`R=(qkvSeu9N9H<?9w-Ty!}oKK>)7
z@&u$(JzkMhYP8_n8*|A?lGfiq_^PH0a7MiP6P{Tm-2dTx`iz^@?tLprPh$D|FOzfT
zIK?>`bwnd<It|7!UyQ*%XM@@gW2g`ICXzw~(Z$$*eTy$j-rn9aP5PGd^w=I0xlC+*
z^X?|I(ge|ky09EwP6-})20XG$@W?H}qoA}-{klS<C8S#{lka=7L;e<7Cyw&ool~h$
zN!jxH9f*HXch>xW{)l-`GPq+p9cs_fM*`SQc@!mnhku_tnsrgp<sk3CTNIyOgd*Ap
zj~VgUQj<yl<3T*UM-e%;eV;Y}7Q-2&-c9>}>#~Z_rx!3_(u@}WunN<YNjbciijpE?
z290QT7FqJa-5lAt3a3&|MRYKg!9Ey6{iq7@p(4}|yRLN!G@>BErq^Q4ZGW9}o5h5~
zOWCZ{Q&Es$3iQSl=*^!uAO)8TZ9y3xIcEbu*ML`YF1EyjoZ7Rs$-jr$Sb<8b<LJg!
zB<<gchmRl81BVmYXJE6}Ou~EiWyH0&viZl)@i~?4R-pY0q8`+>I?zW_PoR$gkPMMf
zaPT8!YG1sgr!{%ev`zP6Ri_g4<&DV0eL)b=0$#U|AaBlmPX0O`jc-3BGCeM5B|-fj
zMXB%7W*^Gsw35B|6?~o@+hkkiS<#5*_>nsuc24fv%z@QQIk|fal_iC>j{Ag!Q(l<Q
zm|1sm{j+a0c%A-NOy`%^pTXiGXWx@E+bmC8YO$fqDJCeoamnenpi8g*SP$$#T~dMB
zw>g&9brB^JjKMx<<)>l*82I6DsLG5Czvkvf&)qO@F3aBiFG`KJjtY)cuAp20p$wdK
zEd#E+8m(93>Arqp?%!Tp2xfFvRDEkH!!CgHp6G&HhVPS8Fz-qt=k3?<j=qY<hTgWy
zY|4^05V_&$IzkG9N>1>++p(R_!+J6or==8oZW&3dZzQPqLrCN*RNm33eS0EE8(!qH
zRc2!;O+j?p&<6EKrmmgGp1bdV$fG@*Rm5Tpao>oJZClTz`<|$Gg*fYE0y`Fe$HDc>
zF`dn=ws~nO8Qg=?m=LVq9)xX6#CawMBqBS0ozJvKo=2svKY2r=_hQiG8SGxR0Ka4D
zt<pZPkI>zx5FAeWUN*H&uGbhtuDYHx`?eFlHIXwj+Q!maQ&f)s@eCs42N4$Ar@?lj
zD6;kEZxQ8E%Cs^ndUPXg(jb%-CcMw&;FFZYnf*IBvu`_#{`WLJM~q|C%sc2kuC6Ps
z+ahZj0F_~lD+FE2D0+k-DCM;ZT&e?Ik0A6`_6kLi%TSN(PVpOSNZoJ`5`_mEuXuE!
z!%+FgBK%26L7@vp;T?+QcsA-mbqh2EnG|KOFqFN*YF;z;O`vq=FSsf!*b<9zl^gMj
zo{BDL6q<l|lwMsC1Su|unVdbZQgZqiG`(X`_l+TY?F*<qdf^{;54aq-oHh)nmf&$+
z^V~r!-X7!+jDZ6O`SihAOnKmG{KC3WUYO76z1ujjdMTMF+*VFDPYrpO_akpe56Zd*
z)k>=^=<jxtjb5>b=oNc7wEnk7%@xMpbPs!eTS&Lx_qAD|M{GHYL?&m{%-dUZUR9X^
zQFJv+z@nN#Q)aUCofin-ew?J~!w_W`zJ(UG<^Z@v#@#%p(RRrPcVWoMAa{5iiFeo5
z!LR;1s7opc-hYPReP=kfZ3D-)Z9pFo#Nf%-5j$)gI$u93ii`MT-ds|T?4w{{Oq;0J
zc2)$r)SdT!G_w!j36xg{`fx;1Qf=BM$fSfVdVtE6hf(&{Q?}$cigta4v&=+L--qz)
zeFqY$5)hE7eQ}<r0NWTI6XWricrGyQStV4hIY!ZmFR>oT!D*~QA2l9R;b9a#0|@)&
zfts>Z?QL<Cezt|IeNQ526iD<M<h}ebt~-X;z2gw1O)st-yYmVJrxSK;<iw7RwT_7r
z2_^B7WR8t*)}Cwbh&ZBG?q$z!3mXmeh@SoEJ$53ATh`)#EQ6xn7dCbAIg^7&P6_=c
zUV~>q^NbVD?BBtXH=ZT?v|DvII69V@|9XwM5skaSf;&BR_|-SFY5r#f9ZV)~=!KbU
zXo|}T+j)Y3F5MV3c}Amc_b&e#aDUegVfNLNI%yE8lLn#BDk6MK0>S&wu<`p(*!cY?
zwc6$n>Q3U_O-rL)>c}JgupG^-E^t{_9q1#WmJKTsy&BKiBLGnKb-!*)%BSSLpD16q
z9^dF&C^_>3c5?>W@snHMp>SWk?maiZc9vFQ+Ho4ckjbb9)_(d4aw$HK)Yd?AmKe#p
z_Cu;R9mnH}hKGRFIFxdZJa830r!omVn2g+F!>&<M(ItSweqFJ7G{0cN<mZVYCX|#z
zdnim#ZnXO9s)wHC*w%H#EZaqK&xi|}tA}qn3c#3IcQvbh%Hh4toihWc%SmycNcZ66
zL=qq0e?1R=vWQ-zCp3ADF|+Ps^N*j?W%JPs4)kuz_aHc(OuqlAMpJMt#!3#Z{|$?;
z4nvQ+CL#4v5$@0NTQBG2O=Iynk&Rb+zPn6Va7$}dL^fYf|5C+ST7_{<jg0z8U|sbX
z?0Ezs%J-j>k*FH3L6`b^;4!ri)`Bdm$_}8M7=+(*S2Zbg*b*da1<D@5$U>Sow328P
zII_yIr<9<*yqRJXf`HlIi=w_=DHs?-QG65?5dk<AEv&x>OegXP%`U)Zu@K+L4bRg*
zkb?9iN)GJD>Zxt@4^CNbqWAob1V_ej?GrCIxex7h*!lRrnHWn;IPlMFNSQX2+@Y})
z_lzKP_bHBVThHk0?`U%6TI=OQ>fyZ@6A~#H5M5KQ+fuyG<Pi7EHbT4iV%GC-BQ!E<
z+BE+&j&IvQ+QdN^dW1FDu0BMG1XG|Fh8|&*^o*b+E&{99|BoUViBgU%#0%5blK@WO
z2MHiU5QfRS_#yRb#ve}*@P6<z{Qfr;-8BOd8o4pF7cO&cZ86p02y7XRSCh2|&Y}tu
zmmkL@_hawMMNP^TU-#5&s62G^_;nYGR!SC!Z9j(Ka584r-OWli+5XFS6r?ASHKup1
z?WD4<!6Z!^im9xWwO_v1toI&s<J|y6Y))uZ-vy_WUJEuM05|>Ty++ez?N$pL=YNJ%
ztt9iZmN~TkzeghAF)7}?3x+V9vvQ<;5k*aX{%M_&iY5EVzwdiQ>$%iMWv?*gQ5`QC
zZO=A<Q$b$T132wAHq4vbXnRlpK&C(ZJTjAo`0qBfNZTFU$tdC5kD<_L8G3coslJvf
zBWu2R8>dP^^7Oi*kLg$R$LgzR(~qAw%c-T$_(^z&gcGv&Br<c$C6{BC@4+Ldgb~->
z)?^;S&ZYCIEG{H-e4i$hhyJF1WMMvls0R8<sF|N%8i6hg^2C~yL&<CFYhEk=c01~U
zZMQeyTvUA{P{jIhH2nxRbqG5a|9~McyU}yT-gFN=hK<E9A)UxS4!7w20*<7iDyd-T
zRX3paXnH?;-B<5YSyDvm#DVpyvbf|j&RjDbr`^WNk6vr?dJ>70QP<su)M6)O_o){3
z-REQ$UDqDKCp3Z?PrTG<TbsqqhIw;w$z`N9Vm|RVjUx}Q$tf5q0R{o6dbey2bg@wN
z>w?tV6Z7sQED4#2P8U_XPB(i_-=;_;cs)FhlB88+cX<$p&BD^R{@v&)f<(d{uYZAu
zj~}s1ch*~2(-74|=F!bqgfrx2vvL0CSiL+*pE$6=cDX}isf-BV;F@2_ICiMX>yEtc
zHl%U|UA7!;_J~APRz=@$)*%Q|?t1I%CM)jNfBinCdD*02-Vd9;VTtI!X&BM&z?olJ
z{l9}GK)j%ox2w)tTO#pL5i;*C5L_7kw+_qxRIrH@zqA_j{?rcdk0R0!iI<YZ!YqvX
zz8v1Lf|I*8HF}Pxe;{|h@dXkW4E%T{n!>V1+XH9{O7T6JNw@w(3G30j$@VMfzKX+Y
zaX+ye5oZu30;jGYg(!+FedmQHudDY9px@<Jq0Kemd%E$_3xL#WXW-oBD9emo^XT(*
z?c2CSSy5IR>*vkI=H)@kRc$X;`Tqe&ZYfz)-iI_Pf<!I?y(9=ixGcyME};Z}S)eB#
zHw?s@kwf9LOYrV~HIbt~rsRd+Tjf-GK}aM7eQ^tg37?Z3`3MM77X9y;Cd~-qMqI`X
z|9%U3rHMgvSJap{HblghL=Z(r&$_$GE@hoK%D&$hQyJz*?#PDspQ|Z}i=ZezisS>k
zIJ)uoCfkoayC@gFrSU~M!Re&`7r&#+EM&xtTe;${N1MF%k~f~kVYPDdhS4}x?Nb)~
zSI4v~34NCd^tgI03VoOWLbwD`^pfZ<y~PfXD|;hIWkimjOT_56(1(v9sPDs+eY6#t
zX)D}TNPRrejELpPmS@TI7)oJ!5-aC6J?9-W>n<kT@i3Zv0|TG^0mJOCDEnb&oguN*
z<{)h62|RrK8E|FO^4Uw@c>&So;`H^Sn=Q0(`npkw5(&S(|5B|Q?)r!xG=h+rI06r+
zqAII@_dsws>G%0+{1VdXIr4ID`p>&f_F?bJMI>%rhoO5Id4sz*tKWZ98{_YZlz+Js
zpGda=i_~o%;weE8oR^~Wg*?I+{mfxh<ZecgxQC{`J#U3V6=mPowP|i|eEvNV{bK{z
zcw##ynJ<5Q|1l?aZfx?rYoB<DaW~Jw(`?}yy%yKvL@dW@4~c{JpGIb~F!H)vniO$N
z+`5i4`?gcuE0W?~&0nB2hWe5{x)%lMN$gnseUt6S+;|Uy(@EI2#5%_$b_WAKT}9yG
z6uJ)?&AlJ|fK=A_Hf&K=8b81K1TK|=V|PqwS0&%SD)t-$rE@nBb@|tLMx9L;799Xi
z2~gpxFki&(wI0vghhsRs42RjR4l0qUh@P~7iiLY{<TpL<ZA%2H1kIROv~xzYp}>TQ
zl<%H-ph;P1K@hm%xwn`!=W#UlLS_UDXx1L7)uzkl1O$nMQ8Vvo^ja>LlV$I}2!e#u
zH?&-%J?Wa^IMqs4eflP5W8-PfL#NF`>7gTHTcSIq_$=~DGlSk=hJQjDF@r|(z{fwK
zP&b~R;c`0o?wNbBR#kCq_IOMIm!2?bXTZ270ku~zJVJ-oyymc00Ahs{m?@fUp`N#o
zM!3YRZX{|2_M{SA1r9vU>fA|WYMj<GO4qMJJE>Q*^55H%sy|L38v7&Bh2dF#jO<eh
zZnf1WwA6YG8;e}2B4zI;B8v<dvPvm7nDNXkq{sF|`iz}eld#edI~IS>o@EQj9@UHN
zF-<SnosUx~M{v5(9XW#l#10$RU|X47L0Ntd*$4Jg8SYP2h%cTQg$#XXDZ1=p22Ht+
zIq!YfWRL?aefxP1uU|pluvn6>9^T@9{|#7=WmEFMRRj+B2U`EWfV+e{ch_rxm>>m)
z;1UODM)g4E-?Vr`XG7|z!LW2W{yp!k8Sd#qMo@lgBUOhJ&|cp3VpLlq(JCqVX$d)1
z#f0_`#FCImX<jz*mrZFhldao;VMN6B<=EDB1ZU-;IcY_|FA;A!-0;jBjaoQas*HU3
z*sYiyHg*r~h0S8ekza;2A&c^_cOW_(D59HAyRD22By`tFvJdWK==2*=>l)s#_X!SX
z+oEq!7%eC(&Gh|x9dfgc=@0*#nNPpo<ZvBe%fhc%^~vj)g1kBO&~#k#_7#`>tKuv%
zQnBJ7VI%*GOz9pGRp#u*aB4BY8Y$onTq_IlLe;n9lTI!aS&%0czwJXN_@ef6i!ca+
z1h2@+<o)p>s^JkxeL613Sr(v2@KB<R2q8DX6Tg#LlqMeo(bX(1_`t|$`c0Td+R^<8
zMM-$e!7n_D>z{eO(Hq5@FW%<(_CH84X-Gfh#JDB_%a$x$CqbtiN72#+=&tUMq=~u&
zmrROXtHl4n8LG+*^qX*1gKc%b{+!;o9ZSM-x9zjHFL%E)j}bF&X;yk}!lu>CfBqlX
zbQ<<Oc^y{IzxT{rgL!`{g-`rK=-?;OM_h&=NGLe+3E4ZItCoI#TMA?$2#>o;tEBoF
z7te<2LQuv9lK1WB_(ab@s&EIjAeB>*y&h?-8hJ#=rpGFKhM*h}LfMl2luM=)E;W$0
zXAL^v0J`*UI@8O;+n3?j&c@|*kalE0SN-EzBI6rQdMPW+<J+h1!6x$}ckBjyVs9g$
z_dWRcx)a}+>(PY_$7!#mc;ON><6@9#8(+{fhWinCIECUv2Z<j$2~YoqOJUVIPY$kK
zM*R56Jp9FyMnxq4OzM$+eD?57*d(z3@oO-Kc6<u+rH=JvF2&C+r)v3ex{Q4n-`JZF
z1PPVdJILPq0usF(SEbbk+%E;pKwqb!s;8=77vvWs!|Vc)1?a(H$FO-dKGE0KR76Px
zHTjFaL>8h)5!LaEB9`qbR3@cR;deQqwlkdCwi>lgPgE00Bj8RqjU6_Y33vR1ZvBTg
z+II09&ysQM5E;?`!sywr-ZuKMF^D!BrQ27do!Er@lptXC_atQZNeVMk7<P5TW|=`<
zyEAg;?Totqj%Llr0nY5(&c_d2kIic3$OBU`#9kWd*PRW++iOr6`_O&bVpKlv?MTsS
zCuz-1Xr^?>wCfDO&%na!2~j3+k3F*l-L(Ff<kp5FHi(M#yOCOTX#CyY>S~`Jc!o|O
z_lNh8g=vvTc5JY#hehF%S5bUsAK5xBU9fUy>w4@~E3w1JHR~EudE@ik?9<2i`IRRy
zYobW&@gg*`Z?5)^C3pSXxGK#^eYA~EX-olLc%|fHK9WF0ul@u!QfuFo-SM9}zWonA
zd-x{o4m(HgolN0hSYy4ts9bTF(hs*_KUGZlsMk<<ob&iAO85$k>J+xj0-PmA5x5)3
ztq$~TppUbtqNmJHk1{r-p38S`1i6%|b;nW5dZG<HH$0Z9eNp@LA?Mq-P>+i4(D{0`
zl$OU;eUM$*i^4%M1RhN#W9L>(73IVYA9ukz@<06hL5ea{$qT;&qvwD|Z_*N(5`Fl1
z>}N_S{^d91F}@9t;6xEo5C}SyOwQ><#>~3wf;HF=tofC1p1cdY=;Gjm(<nMC1@$-0
zr}DQ$RD5xOps0t582dH~U2PwOtUb>n@1w`G<21OR<{v?A<;MsFAyH7u^`Z0TbokS+
zEy%n1TS9xif@fr1#T3Ko#pI>GPsk5<UWA^VLuIIB$a}w{$uFhH&@tTo&NnU6Z#$nC
zCibl{fN&^$snqwU!m~dnT~Ex~uGkgzU%M=IEg731K{sOniXMR|)iV5oJ<(?r;+bB6
z|A`C~XLbyMeE<L;07*naRI}a`DmAZfKG|yfCzs2~^7minkMBOhsg!f@AJZuLd$`_g
zM7slfdNHP5$yEHXm+n{phT6A2krk1n^Lpa4n-J};GDKG|AQ$RNyj~CdA`kZ^<l8w&
zJT9%&SmWA64DW9wxZk4$#NS)zc)|~T2%dk3drp55k(sT;f4z=?qp5fYhjHJB^NHwL
z|J=GMtfneX?A%D=)^(iNxsi(V5_Ft04{VA6><S+oa-W(fzTmPVSc;({84VT`=M5~h
z-hT8PF^-<2CeU-_W$1ibcjK=rGw{t*cXMj@7R-U(9DML9jG=8`KxI9Zi{(%{`Wb^S
ziWo{;Q~Jqf1htf^b*FI@8jz~=XoCk5-1na~yG!Teu#|D^y8*ZyRuPy1{8oLezOmTb
zz?15s-3WSb_9a#90&dlp+*`gTZ0M`_^ti6pu@k?H#QWvTYBcaJDxygAs(nPS+=EOm
zXX^dWaK&8@U$BjFNlpeShxd`2bb^BPBnr}!s4Oj^>a4f;`N)+j{KC566B159muSLc
z`w-r<FCo!!7d)*vxoZ<Y{`XNz^Rg+5k0N2tB<$+8@nIM3PKsY$iF!yR*5mn9tv`W2
zd@SP7O1$qM*Cy}LmWXyILK8Uxu1Yh;wF$V)cFMomhF8oqyt+)rtLr41bUYGWB(J)i
zii}MFuK~~h`EY$_OMq3tWUo8M;C)}yDxsYX>+x*z|FM8xH}6KSIrk(=S$`XfSvowX
zwC?HI9{44s6aW1N6y;Tf#l>^mD<3y|i>f8KoDM8iM!-D^P-?WOJap~ierh&Wu=K6x
z*}d#XT!KK#w4tO-9nxw+Oqbb)<zO1N<N{pfR^(lMF>gu6dD?>0S&3)lL;~X<#8#e3
zPS#5Veln|#KT+#(7FSX_cN4ZV`2>703)7ZUXeaclQ8qShJB4Xy3Q{j6#@|n%^%;c1
zBLt7YVa+m7sU~OVD-<059AG^#1-DjQ4Gn$s-Uz~epj*HzGtpk&t2LkTqEhnu8axU|
z5;W+En%7b{-iP!mk<OMcAg{6zyJ#DsyG|gH$+_W~*PBdt?X097J;0a$yp8h0JdEM~
zB;Iia<y`_=eZ8vn$0>Pp4GOPN1W|!U&~R+VR0M^VE~DQ?B0FbkWiC0z>6O!w2YKRo
z_h_`^IyNiv&xm#h##Ki#%>4s><XB`1UrLTILhccWVt^kKoeJZ+BS_?Gyko9IB2l6X
z9f3Y#e2d@9aAq0l>;C}=NgxgZ>J)l3G)^o<6sIAP>@R+8xmF(Ohoal1C6lY0(T~E%
z<`X#J(VFTut?vNJb}j34fo|8TNWAMx%A<nlxnL8=wynQp1O337rIZ)ukv*~}$8WnF
zQF>t`2J4|Lg8Ds5;D864Y^(O|fkG3C#1Ay1E?${y<>CVvKHr2~8$j%g-%<Iv<*~y@
zzDCyW7pcfzi&!KQcl}0W8vmLkuhw8LK0)TDCq)FI3Q@e4dV(C>!}NwYiOY4X%WM-1
zp85%AS>wV8oeg<cf1KtDY?bGfS^az8hT~KPMb9k5QBZyndsjc|Vt1b!OHk?T3_NSd
zAhkO$ILL8{*mDexT6Wb&Aauy{SWgsTIhcN7?|lJOE;&N<<c0K_wX-J3!JVzC4;g_Y
z-GIHk2#H*MK|$`Yl#;UgZqenifGFMx9B-&?Q>!h@fd4u2$|!na38J%O1syH~M_~nm
zOoh_(T>id9rY3IY2K3g;$)7VH(bBlULPulqanIY%HxjJIW-(KelhKh~su#P}g2Pt7
z3T#EOd)43M-@2{1YMjND6u-6#F;{_aT+@oT)p$l;PPfayqWG27RIWPGp}$$t?x5tI
zwK&U64H}7hb)8E1*tZB8`~XsA>&tOPmxHvm_hPHa6o8k2C5^Rj&a&!%fK}!Lsg!>9
zN2@#5(a3_la9K?_t+k)r61kS3K~LZlbv=3a{D32`W9!x%!{Y6}yIV}gdXIno`0czf
zu^+EqJA&UoeUrSD(;e0~Q$-njmjA?O|G0@KMnv-VEfaCMoORlnE8O3AYt0fI`DNtY
z^8?v8e1<$Tl9(w!wfL#$5i*o6!{5X9OBrQfZf#XRT0`ZE!#MZah@G(xxwheT3E$Z3
z2^sPn5?SlFuXA?3Ol9^ifaSm|O|@^%UXBa689~@rzF=3ZA}Ronshwxlx*-Iq1bKiT
zmeORjL3Im4LWlet_CVp|iwXIuaihPEqFUv(OYZ@-UbmX6Soih&9NV@5yV8%GloWE4
z-r)C7-ykR|hM2*l=r&*&-TDv1H?(cG4lTw?QjhK<?dX1z5AG)E;BH)JC8q2eC0Qqq
zvgp;Pm~#KWYWcr)A2J$=R7RK0N5~r6r$sC6&ax^BpICyI&vXKAyc@Z;dA@RW5F~g;
zPC%;kBxB1%c-=d;Lv#sjNAvNGxe<j&`(~CJPA{SG=r@3H2E^NO$7rK8chj~KQM?90
zvcLGPRXTas0F-f^KTTHABaqV6RrLls2!srI2E)RoSdL_%>UVKVbiI;u@jaPI-0<<W
zlu}I<WxRRQ6%=J8<B}*j)#r1p>TtYEHsf8m9x-zl`Dydm{>wZ7^Z`KxckO|HcohEO
zk@$s2;o<FzQlmw!^F*Q2AeBk6R2i|Fs<2xv7)uQpax*E;PNz64oq~*H@>9<s{z-eU
zyh{Lu1ER?v7=u$OXVl9J+5XEs4sBS@Q}fr=_|Ex;MlfXB4ea@CA%O>z$Zw|ho9J{=
z_~fs6`A#Er$g_>+>^GOH{6ko?^T?h34WSF~fp!*Fv85D1m-d}1n2L^(x#?db2u2XE
z0h+bg)Y4Br9r#Ta=p}^An}gK5bJq_$iz>*!e<5B$QwbaK67_xD`~&Y(6|fzjXIpO+
zdBKPxL*HJ4_n91?_+bs*2Ap$M`SFE^*|qFP^22T=C+a~Qvf5dFg6Ke7c>-PeVRU7O
z@Tg2cZY{i^?zm(csyyN_diEzR=L7})D^cH9+uTxSwG*-VDBYLrpzq~Vx$natYmOCW
zr10{zp%?@7Y=7~VCT*5oMhk_HFGgYQO1CTL(ej^V{n#opsmeb@_P&?!e`k6v`|kF@
zd?1bD=T;IuWg!~>w$FvIn~FHKXp(5J$`^6RV$+hnXKBqh`d{EhRo@7LKDxchY@dsb
zv&=-{lS@%c;)xvnLCscMHRj?IB>g^vkY65Xp7&fk^w0O>)eK9|CVu>6?*C|E&9S1a
zG+vxKh$?kAjtyRdC^T;XCUu%oTCz}@Gf|myk=aU+xXehMW~5H{LZ4HjM3ks-$n?0R
zDy-@-tg3J<>abe*@wt27!qW3F-uKs^I5qsWpYh5l<b~gM6V&zG)BC5FA7}e7^GLd8
zM5Frb))P4tzqlIj;HwE4^mLuSPg{_=?I|1sbMU^m<$KgE#ke*B!`pulf9Ej-q3vQr
zbU8>`J_}>c9)Rb7*IROaYkIN`=;<gZ@8vRD(F~7i#U(lpiAs*{sy<X~+l4hV1AW-o
zTF2!Yf9zHH6fgP}&8TQPTKd}f$|}a?<fB$8dFazcwF*bpef2)6hxd{h^AskJ<|luM
z5;=B-FBVN#jGld|@EK0I?`TT>F2fKo5ktU4O8qBL<~NQCpW#$`4aVfr1Dh%cm$dfH
zPINga+OYurtom~g>>etD_MOIRs-o}ZQ)^z29x#mE%NL+cOeSwg5A52y->Y%mF^d1Q
zl90Yn6V&g)Mx9kJ1ee`PW!h%6Q`$fAOA#H2ape)5#&UF_Ef?r)h^(#8QI@hA+&f{9
zwDkPee6u2O7lLrSV)0%oS2S(obJ3AV@Vt8%hLqpxJsdjxMLc~cV|b_K#)mCN6ftc(
zMai41F}$~){;8QLv2)dfPvaAEuA<B3a<cFD#W>}94E~eaw@;0r^6rMSv;xsycZD6G
zuwOUK{$3ndyR0U~7Tn4+*Z=Ev1iO>o-~WN&I`_Sbb|?7{ETr`94a7|S1;4oV%^MH|
z37oeWXU{f}cjxz%eY3sI-!JI1*%TiBlJc~5ZF0SmQ;R7+HXjfYfm@;F0`0B6g&NOh
z&XtwCvl{F1rmcA{Hj3`SIPFF(hPqo)f<#8>&}VQYRbk%OKDJISla-Qp*O7Dm7nHue
z3vKRbVzastqZNth*^kR^tDX6EX76??it;h|U5QI_@f=GOx-b;_;0FK3qC_BPSPvXl
z3rGG~S?k!KDc2D{elk9%vx!=F0B}!LEJrhNWK`1o)`MvLTdr2y8bq7p+<!Y=<lp-P
z8essYwI^#i^R@+2e?0;3-bm*Dr^!F`!3ABbD*qsvo1YR9gi;W%1zP2|eIa9|G+eG5
zM2FK=@bn^_MUCr#Uu*=a1nr3Kl%>{xmzBu1sC;^0OTMs$topDVOe5#|FOVeq5Havw
zdR@Pj@cwrZZ{3MpsphV?zN({`x_`Ah|Dh<TVR6QeLhccSBe%4{<9S2fwbA=mEv|Fy
zmY3(E^YtfY#U7lWZz6N*yA(YBGa&>2RVz=uJu#P@1g(H*ci_k?qvXX^$W?(vUOpF{
z?|2HITGr<8sU8$X(3iJRl=LkHM?P)UHSDHBQrFB8MW<av6lVh|t?kc+PKq`livM<&
zR8sKVVnn;6=`$`On#*FSD&ODWaj&pRSP$ehc)Yb3mn9I;eGXl(_!51@I0UJJu=G!m
z*$iCu(9<<rQ`NYf4i0Zvg<Tnd(X(Mu$d1Cl`<;}3v%A48v#KC($|Hj~y>}Z`<+X1J
z9^QW3@a!81b|-yyBoaGwCH?L>jc@D?9np0FGy#2ar8&vD`g8K`oQKXhp6JPo0Pu^w
z6?=M7yS%R~(38N=W>awd6N(bQZqd1-%R$<j`><CP2*AI9H5byCwpjgm6ZqMBEQ{hd
zSGB?A+7Hd>SnSFoGPXT|(^_`~;;@t=(YD>HuRX^=>Bk!}?McNu=A37m%uzu=?oxb0
zBI*p;0a6d|!(uF_)Nfp~z0=wguWpl(xI8g!YuFRLux}JDmy=VwH`h5faMBFA_8m-w
z3cU6HEy!JO8$2Vgpy!Ou#9g<QZdWcKXwc&|<;zOXNE~J5w3l0vJk*DvPiK>N_&ur$
zjx>G3S+ce~i!pB>z(SyD<GLnji(gUo;@lzQ??<To?LZq`vYn6!_`f|BYw#H|wmgQ*
zUb|378`K}mvDUk>+OrK*Z90MBvrXjPGLO7lzD9B+fY=$UQF=z!wDUCVL~vOdHS@N5
zO%9H1bl)&beaE%BFKvrJ=)h+v{ctlbbNw!{MSY_HIJ{wHy~l@MeG?$!S-QKuI@u&L
zl~*l2K>(>jhdQta=0oZ2_P+8+e{{2lP<Z@{X0<O$m`Cx6g@AArXp^+fwt8Hc5ycru
zB!-fA*I+qv@e3~+LgJyq=h4ftYSTFO(=ZIDey%yD4IF^8th`l~ZDn6?Bk%Tkn7_?J
zk=UKkxR>d3M<S8q=hg~x0GY#WQ12HWRp&YmyNv^Dm*JG_Dfb@H;(oLjo>3D~siQD$
zK2h)SiiiMAK|UmGSxZ%!q0aGuE^Z;n3r*%}51eL0yUUB|ruL;QX)U6&aXW2e-hQ%o
zyd)wBhO>)rZBjPcmgB+<T&^2Lr^{LR++rMsop*6g>a8W{vzrO{U<Nry{zt}^#}J)%
z1c?kya9^y6S<SkRJ+lPMp>zx%Zos(Y7;)EcBxdpw!biS@XXJziixzAO_pmWPweAkU
z_C?=PQIt<{;B-Vu=h8m&io6>0u7+>onPYn6uv%FE?c6%Ya!wxuz^-h)2t|A0+x=!r
zKd3w9XiFqs8brGd(be!emd%(;>gu~i(dBR<iZg+<HhcfJy3koRB8pErON|sf^;4T~
zTeLOGxKKhC-h)Yggp~ES<8qks@E?x#WWx@qE~5qG+62lz-$LG9^C)|D7s4Smu`|}z
zk=|{Ha<3sc6uxX(@Kvn}w1mxTSoYqFIF){6cj+93Hh;z|Y6_+uCva8PKcCGS7mvkP
z&&KaQX3K&vYjWlDQ_ryO>ko0sJuvuPUhlaV6aU_KVLp*oYq8OhUq<Oi8!>#cslgnA
zmLNza$aFgFrurBDTuv*gtM9>KE)hU{3~19kPkUwge*@g*F}W}P|GBoE-lFXgt#*q4
zy9yyoOGy8xNk8xpLViA{@FLnBlz+1W^Y%1sd4=f0hNAL}#kc#c8i$OQ;-B{`T~ED$
zRIVhd??9?bOUO$(jVM)cy7$MF`;2U>kJqLo{XP@bErAW{?s=x?Gx)<5$SO_fd;{<b
z2qOFRaYUDs^zP475ZXCKH4=XqfOdK;-VeFcWJ_LIg)}7;W5FH*=3a{;rj?a+e<Ekr
zmjp)Lhku`Y>Kx11_&6me7Xi!%ZoA+&JCF8CR9_EFv?UjWO7-e?FDAH91ep}gxb7If
zU4=em45cSmfz*XPqX^UX)0Doy5z;*f?e`+V10KV_=N;(7#v)U<Ubfhzi^J^E9i=ge
z%Jd_Y8y%GUjNnY~52@0}x8bL2TU=HX6=~biUQxf~u+__h>``&Z%yyimrI>QEDYS~D
zb$OK1$lE)(x6Q{ZauPX9U&rg#5g-UuEl<S9e<miwVPsu(nD?e2^-?4CY<)e1)LTjU
z`Yrgy)sEwW!(UKv=u?10xMiB#e4n~K>-IvBNDc`Cfk7YMifUlpg{RJj`9K;)&n-ja
z)f+(}Ln2cn*My<*>4k6X^=(o*Ss#MSiYRFt8RYiHVJ_kL!r=scaci@la*l#>a&G*L
z-m~{z(2cRZ5nT=vzUxi!yxWmS_)+-S68!b|A(5-8$le49lqN4H@WUHX_HNyStKi|E
z@zvgnf1f*QUaQRBLGtpOMG;pKqBsz@Yf_ujo}09}xLh+tm*^;bZZVFWhBK==3+h2p
zgf5(eLsy7jkK5>a#kYiyd>P-kSuGB7yD_icz54pNRDvAb7FWRopP=N$)!4J^uCAX?
z;XfA>G~kg=9pnJz=^JobO-OxpILoTA97{(V*blF+lZhDfHW6dqB7D^A6g>7b##KjK
z^&YlUIe2zCw?<*B%qDH^{h}zkoQUG}v{R5n`vy9|E=2J$XN8G^XBKrjjkfb~RhTLI
z&q^$((@}Y~+!suA+AtL*lD_#7j{iK0<aM*#p_dn*fPVMk9dIM%^Y%8{PPE#wrsojY
z@1YLrS?ke-jzI0-ovO_zs9bdv&&VrKdUdVU#;5xXVx}&l<h^y+Qd_o7Xxe!OkRdyp
zsN-^2+>39PQUSz=a94%48y%5$^$GBmEjgc}mzTAFb=ZX<mm&}IM&|8_sW73@rgl>i
zmDxKeO<qOOu^%|K{3;HA8BNNjTX4kX68iH4nDdU|uyp>BOlt^;zZ=uG6S$0)2HOY<
z88R;~Ohv~!uxG79s`NzV7YlYLRlg<R6J39bt|p)#!Tle_@YV)!HT+wyP6rpQc8XqD
zLCK4&iM;HSvs<nr85{qJsVEWPbKuK1|3K%__ErA%^AHeQwfV&8@`bzboZUHBlqG5f
zzRyj@d?1yq=l+XK<AXkY9HQu=Jaruvxm%FPJ#g8pFq~YBJS-4-gf9|L724ao5IALe
zEjLq%UWe0ChD>$odCoV5RN;X~$UscnPBrX&BZ|oUJaJf>9^!Wfs`3t?&I$vw1btY;
zwdDSN=TNq49r^b!#OGfVP(;`EJTU%#l;XEm;dAfhlrPwWE@(8-xBOC5#FKyUV@i`&
z0PF@HYrju)j*c`!4?>U}0x>w~-J4N&a={9FS`lR*@5X#237Ogx^x$!AJQ7b0&io3r
z6MG>GY*^CRSzJlhHFJr->nKv?g-IWGR!WmslAH2+y$-da%|Xelzau6oh?(+ByC}!B
zHK}XwqC96ae%)^-eDrHgwm-dM3Z|UnsE72x?}aHyy|vggipjg{JAwy1iOrmkchr<x
znuQfv+elt9TSOEKKpe<fx6}5fBftH8MAr-iVO!yUf0c)PI|q4~PY1qz%aBL;<Nxk-
z9QkE9OHC+y1h+_Bux#E=eB-YB%LX}sN6;YboAc{ER`AFo<fd@EA}-_j!r_Dsdl9eb
zsr9z)4A_l%7>o9z9nk}sv3WMuVMAU)rtu^H;D?mFww8c*+@_wQ=)yB{0!pviJ59EV
zOw!gqAR>x35U-|#f*d+#j{ax%Ad2_6D$Nu;^%JhD`b_{j6S5#Lx8iLJ6+~^v3i0Z8
zbvyN{bKr8A5oC%wwGE=hj-#jyt0Bcb5A_wvI{a_aHa$oy#8EnglG97jjP8zVXcVPs
zODR0|Rg>pvg9f71cfoGWM;_;o<wyp_FaM6Dp44TRy^7>jcZg1FS@q)EzION+4RSGR
zAb$WpwWk+#{>8agVoNQ=o|)fa>M0isrB_$NhP_0|Yv;r~?AZn~r@V_?5`tHkt0+0W
z1pUk*g#0uIWAQF3GCR&tp(R+2>Bysf&|TFZ?X7VX9R3)Wvl$N}(M4t2POJwrD0yKc
zUfRj@xjo^$r@2VR#>cT3P7A<X+?k^t%Ec;nehk=Z+IEVv@7rFp>ta*>`8NFH=O9yc
z-l<7j;T<y_XK5A2-;W|XU6j862mZb9BKDfqgpPO)RbW@-kv>S&3iP)OCO`3`i{0gV
zG3M>So>_wE646~d2wAu%xqJWD^ofE5ZP);m<`{Zjw~>&c|E{whk+<)CN|RRs>;Rr>
zkN!8s#R_ygFbhG*DgAQu**(U;29`tVSQ82eh`;w@ccnv+$kcS7{woz<CXhMt9fVvR
zLH*B(lqz)*HOW%CY5lPjpXij^ZGJs&hXf79&;AO4&oftINLt#gbGuJlM%M}7Ad%Ni
zk1bDIPu~9b03i#w4rshiwVk+_@+Ad`;xrH}MgLifJ*|D@d^!@*>B8{t9|ZM(9GR;1
z26~qoYTsCTOkYlq=_~0zbqP|1uI8A_VMOBL&ioTpay+i?OUao<7ptoc64?Jix?cV@
zt~4nX^LHZ)@y1bAfy>cwo<LJrN>fPR@UV!86~r09MJvX?*g8dr5ncDVOjZh>S=4Cq
z#ic;SlKsf+0r>a2<zjcG!;z`HQTxW$Nfmb5O$h39(oqs04K8QrwBVM=HAIYji}D3~
za2cx54D3$&=7*@r+zevNtd^WMBdM$J7M(Vu0OI|?MU`H<*ntkP0C?Y?SxnJO%Nor#
z>dd&RtdxDVjqu^GwOjGarHCMr)vD)qWR#*%1z*G-HIBx=H~P>Cl)SkC|JScU80R4K
z@Y9@FI)TcpX09iRF4EUOgrzh|0Nw$<YsW4(ix%ypf2~j~7h!Z;cftjH=y2Fi>^Lni
z{bmc^bK2iJr>&`2xCd?E05k!ex5V^fp!SZVa^Zd?9x9wgl~ipwN$Axraue!soVH>t
zC(@~0eiW}eM&WhaNJ_ujOvZ{Q=sMv`Gy#pf3Fq#8oAUHO=pm6f9+%1PmcZSOp3oXZ
z@%uS;`#+o8yhZis(<Bl-f^a>cZp(iJP{&Io(gUK1;cy0uD1Q`DolkP8A<TP|DgSH_
z(UTUm*vtE`jxJ;jt`akaKmLem>uI8=EVyVlLx;HpW8OX#`tU~WpL}9wpbH*F?k{iS
zb^9m~1XO*)aoWw~E%^YYz6)xf9`&AEmb#X#t<U2tNO)W>lPKFbR;vGzNTtuMa5&PN
z``KHR1@b9)%N2?|pk3-Jvqh2D9Zno78NpxQgQDxD5$yT*E+D}Fetdi0c(J?EX>r<&
zxE$shndOT??%p>kI`s`QRRBuQaMYf$2vRjNr7wOxZ>qIw?l2dV`28TdY<>pePj0Z5
z#4HLP`-$#XEkP5|x7PJ7rAeIrWhzpKiRWZ8LWOqAFwgb0*&=R$W@}uvXfpXAlmcs8
z+^uF3CJ5Xjlj1VlD0uQGT;-i}(dN%oZ8(NA&x%iv>n?UzIyF*-$3+ct0GlZX-SqzG
zALxg2wjbv3qg46tAbaPF6eZ59)mEnVLlqE><zQ`nMpd71d>)xV+LniFEzmiw<)o~-
z1E;-;+3g$Th_J9FK@P20j1%08XKjvM5Xe#}&}uXcP%3fcl~VYhrQm8`WBCigkz0!4
z-3>&I`vgJSxfEOfrY^w)pP+JiB2phM9+TqneR?u}&rc)x(>o|k{;Jxov<9_zEcW!`
zI@i%n?~lDK3%j|*{etKsZT&y6mZvjFsYI*MkS&+Dy&hCGqS)dXY;mAVZMKy_%Z1My
zz$FM2%4D2UDltf<h`?}_ib$CZ^S%@epKofbw`x;d6=n(^Swuk3IcS3hT<q@rO*2sH
zyAV14BZ{6|PUXsTt|_X%5$I+Oz>xZDEjeb5Z#?E58FhAoTt*9`(}i5)E`G_`{XZ%)
zHW49{F;wN2_%4yjIHgiiD3i5ycK^wH?e^wdzMQ4Sfqo}g1h+@?1t9`uQYojDO7i4#
zTz?ws2*4E@4W3dd<v;GEYD4GBq!R583ZGhv&U*|&1Dn0@`8S<_|7-8eqpPZ}$N$;)
zzBzdbNl3s1kU@}&Oks#PfPh+5M9V7G4$g`L0kO7reXCtnYpXw7m6kv)YSn5jl`4u8
zRUA-IQ3;652mzA3Ok^J3c<=fBabKP!1jz(dc%QZ2%6qxz>~rq0&#=$Adncbfl_4`;
zqI$t9n%3-y#UDt#XaoVav31!b8hn=Lob=PL!`vUH@trL#WSI2<bax^k)a-tpvi!$L
z)^)z`@w6~{86uR}?QD0ssL{L459@QC$<(RRr`zp~qEx3{(l%)t`yCD{Y_=8(elRu>
z`q^yk2uG-2yA$^rr(o;pZ8Pn$=D_b>L-!>!;Jm+mqxCk<w-dW3olyOL{GaTl>gm_<
zoG}o4pH#e;jY86Fl)w5nn##74(tjF`guYa+d4YuKrz6of7>%k%>X+w}ke->;SpWbY
zh)G02R6de|mA7D12A6p}c(t~l1w({dU8hOcaVdqp^DlBKH0{P$BaxbpX6%%rkBLO~
zCh7VOK!@VkghcQ;9Qf>ZLhUeCxJ5|Sgk8Z9{!ez3IBhtZ>wgz39H4&rdYWF_&5-H;
zL9-v5u)lG-pX8G-AnlYNAxfy(@Gc1#SnjJGgEC0CWH@!NzlY7tAbG%fRBwHqhBf(k
zCJsg%HuN4IjLLdSU;P_q#LopDH(9nLZ%GM>P-(Lf)-)0fqZ0-)`RK-A@R5$6Z6_7|
zeNdNZS|1Ua(B3?D5j>iPS1D3WlO)r`1K5>9VYPZ~k)rD;r6{UxB($T1gzt}twXDY!
zrKo#3pPEIh8GO<6IFi2IzUt$&4`<Q<d@CQsIV=-fuVh5i5W5b#N$JwXXf_XNLoO%e
z^HH^Q1qqXfATB#K&wN0nq>}MYC&QhGUu_n^trRIrksgU~l4;UYDZC;?qR)PNQA+*4
zS55QqalgNTPHW8LcKaAa+P#0*1N1!1&<3nIdjxCEAQJtAv0A}^2&=>4#%+d?puRr>
z+nn=gNOBRe9~%cbMs*{V_q~Qu5MkidC7q7W66f1V#g|V}vEwOByPu3le~3NHdc8RC
zWg!8_9600UKVJ%Ag)?;!4)4kM1NrnEl8XM$7KYmG=DAL1jmI?o4hXp+&0(5J4yAC2
zU{~rJds3ficEmCti8vftw=^_#>cyBYb&X3Ljx7RhhwNy@krcf%1l<lAlibwzaMO_N
zp)tu#L$aI3BsYy-7mdjt>sXTYzotYdK~MYl`k3{8YMxv}{fc~22hXI>nfDzwaAKVA
zCiaLQcc>mupo*r?9>tTqgWi)*C9&3zx7LrhvH{nQQoM~p5}Se~(|wK>JEG_cUY{Kb
zP48@3UFs4AmIC*6MMhU}`a?MVAyPXK=2&Th-{Yh)$%Q|`i9gYW-{YXk>%yPtA`tyv
zS5`~uD_?MO+DP0}7h|TLN+?uM*bEbJd^?PSaljF3z+w1thMRDO>Tw5aafj+~1#5A)
z@!J)u#S^N-6|BP@szo<i#TqCCHn%UD?y;n+`&YWuIQ`A(9Hc3=t37g#Mvwl#B;-gW
zq`L{(-1wbIglrzdHa9`LhkzrAu-#2acN1`W3E4c>$L_(<Y=mqcOwC5no`BMH0`>$H
z8Ube#DDXRvZmjNOjXPKe0<K^kf{82CfG87JsNVV;u1A!@6|A+CHq?Y8+=we&hcn!S
zBiw`|(u6x$i!;)MJ!~C!hwA^=r`9Dp(4#koLZRMsprNy6b$Jx>xWn-=aK@3+9dC+$
zEbu!lg%3EBtcD=kFaY@5@GcwCorLv6rzQbsGOE?Bj_3{|x&v3}&}YXHX+k$zIzrKu
zi8Fj?T4$&MO<B7!-O&(K?ocf#WhwHv)EVTrfetA8b2o-US9YbWE?cui<ey5ZBPx2F
zj^hs1wfGz7#6(28yzRWpU91)i{u|3c9w$zm?nb1dC>UJTRWV&w^y{EPpvx7B6DLj^
znC8-Zx*=YAw@jK%rC#U`IdS5|X@yeDx<gF2D7q#xv^(U)i4&(KBGR@in-0=tMOT*P
z{_<|9OPn}yTA|>l-65yTivFa{c8-Gn-B6b}-Hhlu(vFuc;(Ut{nfQ0NyKh&;biGH{
z^=@f#;&d;gmn~!JfdeFuAAiis)Dsd~#E1W`;W_0L&f2hn?B&Z5`?tnpkY<=>mz@!I
zNzq>b2TFC>S=#p&Ea2=dTbNu@!lZ%%az6Z!{`2Qs56*WG&%lB7pFf{I*LS~{--F4#
z@=AvM;SbnT4~_AbaO$aOuA{#%Uvs+|eDA$X+OvnL2M%z4Z7pM0t|amF?_Pk()Jc;_
z7&?@m)289>+jb|KHf0Kfe)F4S+JK_ePr53iOXIp)hvPyZt*e#rju?Sw;6TEal_<j?
zDLb3wv193Z;e~uYZQ6G(;%e%YDGYhw0m@gbpy<h?7dZ2@g$vP~PWCTeOt`A*sFia#
z#AYM=<(EmFI1w`#q%J=nTaO;3PMnB*2YdFi<;&@D=9%~l3TWE1r_D6|fBtjQrcR}4
z*Dh*5J!X-QM?K+ioPI+n)M-~sU7f&n>#%*xt+!IXVg<?L#xee#cSxN$5%2Kf)Nk4Z
zK;mhq(ewQC5u1(5_uiu}Ki~TQ>8F!0WC+zCd_d^H*UtRxsi~x%doE48c2WQ3mjEOT
z8A9r$Nr=Ni-G&X+eDqO^I_Mq`$vHW=GBa_crxUKOrg7&^YCit>i1oLpq>ws!GD)K>
z2mj8@OnS|n89QG7^2?~Gv&$YiIiyUSh#3fQ;J^Q+acBDjO{Pwsj6Ed<iEb%Qzwkmr
zm6oHzhRvH>$V#0wi5@vQ`1kIm;`P@tLoK(qCXX9OkDMF~zn_|qKc->p)^^vU&vn<4
zI&mU_q9Q(@HjSp;y8&x7(YRwrES)nmlZ+WNuqP)|o1ahRs#USZ+ug4p-jO4*dA(Gv
zUX3#|6L-IURIgo2u(TB2<H0*}B<}wG36+;qw{at>lO_==FQ<CV8UT_;jlw-}AdTC%
z)39|bj`Va=&N+ujeLa<LzYQWJe(!rE4jYCeJsq*xsQ=;%s#aSeoJG^fxa=|jDqepb
z07pg!q4KZa2=xvhj%V;-92u4i^5n5&W7jfRQbNrqpU~^F%Rq$6x8EjGZ|%eHdBFwf
ziHX##T}!a6tlihPH41(V+|}9qoo;rYgCxJhQHteI{)l|jUib0uzDth@6WDn9<&>{j
z0l?XtH{%&Jhz&DmQt{@S4EW_QIpv;vVh=aKzJ&|fap#>3xZ@56-+w>rFS*2eh@zyP
zdoE+&e3PAb-NoKV9^vG9^BD5L11)6uo_&_hv#rRdJ#umw`{tWy?v|$%C@kcIAxC}(
zJ$c+Xaz6Oru*X*=Cu4>}3|qXItZT20{a+adJMO%b{fieLu?&Em4?ZAy+_*N6?fk$0
zWAB0moV{rip234#9IO58Gd`U>8D$tC!m!64BkQVzJc233jyvyUUtV7O>alt?$>Ybf
zb?#h>o_M0oG#N8yFyfhKT1+D<SFK{h4}XZ*?M$usI=H4X3?%AXEmTp#+L0p}bk|+<
zn=_})G&_I&YxX|+DBoMKfW9}~#O~k!p56D~PwM2!jD6z`8n<s}?dZ|y9uHHa4dKBQ
zKK?k{=FLNMI5@Ai<r|Rer%$Kyop)lthdl5A{pZhb^BgN)dyNgVW|6aI4asB1@WmBZ
zQ1;3zXbuNc%F583PF4>bNU*fDMZONckG}7QP-uYAxt9kzJx6b{+h@{FCGRM%K7DXy
zWdRT>FULD#1gHG=x2SNKU3cHj_B-ytXlUT%xpPUs_~O_Fv?U~vG-?zh|M^c+Crv_6
zw4$a2_U|Wo%ot96@Ij3FdN$9V&8DlaB3M#F=9O2HHf0I`dSW7)+l|rKi0}F5+570D
z6hHF}B`>sZKahX#Ubg1uQnGX@0QH+Tu{Ae0_EC`t8JAo_*0t9XuBl<$ZMX5&z4roe
z>O&8aIBZzE$|?BcA7k<WcHMn<tc-&nPJsP+d2G$iC0tWO^0;yIoHh-BtgEjk>#D10
z+P#~NmtW4d`SUS@L5BR{4>)`EYF9nH!-oS<_j%j?N9<{7oc_cUXf7A~7cFA*?AiGD
z?IZ2H^B8c)9kFyZ>()`YWC^0{l)m^PrOTG#NKcR57l0kV`js`c3y0Zq^Uaun04H71
zaU0c^TW(?3Z-0w24EkJm9qxYpP?1RN`UQ%M+ss$Cd^uZlb7|bZ9f0DepN{3(zhnsj
z<*&Q~K-zidS=VROC^VOg`c0b-QSwf3@{=~(nVrqt>7l!H^ROMD|LwQa@8+9H8ao!v
z<)UHpX6iO>w0d$~r}*ioDR}r{09;vF^#A$K$+-ApO8#wy;nlrf(l5T4UNdJBEGeP(
zGt28vps<jWe)1C#!T0R5RJ{5s07a*s%AmXMA~`3A%6GqZEA8L6kIkJhq=hOftU0*|
zCtYy`{=It-nWLZd;~xW1@X$jPMjsIGs8RH~^it9<ypV=1TMm)in(}D<hd%r;VzW{5
z?|&00Drz%r>GI{&eDo2?<HnJ7_0@QX52xbw*U9{u74fy;Pk*91ItodfGKGv8Ge{aU
zhKe`dXj5J@Vzb3YJ_k>i4klyzbZlNPb@};h|HUr=F#Uc;Jo_xYFTb3<fB6ewHIT(m
zJw@Nyv+?iQL)8Z#(0kS_90xTx<*&R#+SIA^JpX)r&pu1vn{L9{yY~^V)gjm8KmWmK
zXrTAZnRrKzB=Pjq@$cUsyH9;*&yIC62UGj$r__G>DZPI10}_S~rE2x+Sc4v`<BAmw
zzVANLFS-ck%_C)k<!P;AW%tB9QM&$9B9XP7$=j(O{cj%6Nr-fNB*Y$PoI&d3$)FU)
zPd&x@88c9ZfoISl02;P!i=}P;?jAG<|Gs^IHLpsYGzox|bIyrbqy78$;~p>ofPT5T
zOfD&5a!Cn;?y{ylu0F@k|65z<(ir{j894B$mD{Y0_LLN>tmyR^_Se70u1Cg<834Er
zV{twh6^URpS&?)cJ$ts9#?`MMK#O^QL$pV9M~^iVX>0^Q>~_px5CE;!5|`1~2qK8h
zh8YZ^IXdqsG!&gO*n4ze9Q(!{J80Op4QFO1J;skGCHgEL=q5!+smou0PMvh8dUV||
zu27wHEcs1rn>UY=7hWLJYQEHL6ls1);p>MhR8c{oun;p4AaUqWdYo|v<*&X<`o$OH
z9X^~$Z7spl(%3^;_R>p~zW8Db`Tl~IVRyPrb99+DEYGoXIp_g9_*^<uj<n}J|5g!i
zA`J~VfxVABLhbtXEsoW1Y+rnUhRvHv9zUMc$&;yTBTw^vZ0lUZt?qH8ww9tNpZrEk
zcICV860WL>88n+|ZWubU9IFm<kD8}LhuselH6kAFn){x4h9M6=NY-`Nk$TQK*2uE^
ztn;ZgPUi&#gRgZoW2bs_rPNW`BoizvJ4DF=s-u?ildiY|XRls3GBRSuteUlJQHDX|
z&Ykp{ITJG!V*Bm4qaqP{&zeQuh7F(;RqwqASO&A8&qw*IuTuHWJA}&0tTf$x9su6c
zPsir<A~svhcvijE8hQ1(;Rf`?L=uJ!iCN~Gk9D-1<eVJ9n$EPRHwLJB|9t>@oOvdV
z+qO}*d^y!?))3gY@32ctt!W;*_MbnWlylBO>~?HkFX_{#Bf3uIs#Pe{Bz5v+ydy@S
zx!s&RZyo@ZZ@tw*R;aw3t+~0BEkAs0kfJA^XknXZ#$RZ;eoC7%1zS?mAtQl~(0omM
zOqc*7ct?zAvAeK&uAMw?9Ee~`N@`(SDSG;8jD`lXuDlXGF_F?2Up%B?>IzyXb+5yU
z{+QD_7#P!;!a7UYfBr+w#~<SvG>D0N_AsfSfP^7KXxO?nHn*zF&qq&4pkn1p0>#Bt
zzV#M*Vq$Cw&iCAN)O_*@uD*R4|K59?UsuPJ(o)90_0}O)_O4QwpO4Ylh<m^Qrj(a+
zetkXT-+v$7<6&Q39{#<1Njd8*rj(R$))!x3Pfg{(%9R{w_3$5w=H;ak|M&+N`29@$
z>MMHBn$@nndmem{Kv5Ar&NzcJ^Ygi&sfly<?PJ*EkGH%0!Y7`f`oj-#WMnYzt+zO@
zvXUv~<&0jojFhv_w(if8CFltWOjx&$spaLQUw9#rnwppqvO6ey@kPvF5buZ)OerfP
zJ8Bf`3>B|go#mik|C$S$nwYR|U5hDI^YhgA=9{^osfj6NWemRWYqyD!+FFYL@sHSu
z!1wI4ovuq;D46jibl7QOhlk%Ybp1AgNgd5+2Rw%v4mGclR=)i<L7(r?1WHl%(o0qg
z>h%&naDdVmUSRX=*%%F$dm}RxLXU192^1C*s;EHscqm!Al)(P|D8ry+=~BX#l^A|M
zMq?xXJ$tBl;|;3UticQhu_Y$rNK2!B<Hi=tbRETLXrS)%&vB%s5ou_^Ur@k-H{PJ?
z!w)g)>nVHjMf8LO^n?V0J|9I-KFRi9{Nj+F>PS?tU5oDVfKr6Y%c=SFQx3fOCjLEp
z@C+J6ps0ugD_0V(ti+j-0j5dynl;pa`6Wg}1HR{<$BbSJqp^{Oty`&FwJK(uJ0hk@
z>9S>ntE<u7Zp?6)hAmqtd+|joR<6XTucva=Dk9a@*n9NAXlkNz)hfQc?mGN?_ad4`
z!jK`<tXmf|oPxD_;z&=Y>izdI>g!SAFy$*&#HL?hJu|_Q5-MJM4Wprfs@1D;q@`gr
zHR0d0hnjWkC|SCc`i&c7<uq>FM%l|RqaqPp{rVB9uBLL;DgyiW$K=*++(@LZ4$W>S
zR9;T`E3Z)X?z@(KAbQ+vYC?Cp2vt_nuz52TD_6Eyd9bIY(d*Jnsrlp+3Lbjsu$Ql1
zDLT>D+tIXbD@=1!M>2JI9sO~KV+YV-$L4XLadD1kMAzwa{q;m@Ypo^9%uMnxz4RML
zX&qcgKbZgC7z$16Q2jcR_-}T5jwbR+$LeGeSM)f?Gu{y+n6PeL?04Z~kFo9cZw|oO
z1w}V(c6*;|8ynlbINu?wyLJ@T&f~;69tac{vu)lybdQI+O`BrI-=l;ci9~(`{H47a
zI<~wf@&QV9YGb_vMgq5XCU2ZL-*&>4l@xZskO`o}-4UfaxTYFKq(f`M$LtlOx17!y
zN~H7V&^U39GYq9pxhNRieJsj~PnzSzIRS_(dYm{X0C7c+6XygVuIO>%oB+gKgmw`V
z!lqIoLnLHE$b^ugRM>!^0TDwa5HZb2L?mcLBW?tgY6MVV2A~PR05hPJA0Pro00IDE
zrNT`R1PDOL-$wYWI@9!rIQ%B7Dv^M{1JOQuDdn+!Lnn}?X&z~1$aRA50ax_9!zJPX
zaD!8iK4)$bw-%M_hC~1jG>3>Azy?lTDVsyYEuh=MBOrE>1Od&alt)A~{V4fCIG#BX
z6g>je1Jyv2fL}qa5^2(u3Mi;SsU}1MN~A_i)2~GQnn;bZz6V6ps<lWYB%0P35($|O
zN298(4PFve(&LT2M@rC*FKKj^H^6BoCwm;>uv;@tmom)+WwSX=)9j%s<x!gEL8&Aq
z;?<P$00}^{0uM@g5a|IVAmTwOFOVGl9G5!rZ9b_0;0FQ%)e5Q+sYWTkKtNgFt3|15
zQ>0oG@hj5|Xqr}S7)G^bvsH)ecK^k-wKbh}zjIjp{%#c)r{i1%L27G*SPi&ED}Q*M
z;UjQYB`3Qa;jr6`L{fBJPccn1MTw+nN~M^Z<`Sjch@^;8DM};-rBVb^6r^B{YEq6=
z&avj$DY~xvFwN%>sa8tWh)A_4Rjo9wMohEXFwJUH(`uE|S=TMf*$p>6&WXpF;HS3M
zkJW&*@rKorc>|mzCMG$;;S{B5sme4{5lK}_r6OW|luC2hYz;);rH>OQPMkP#;>0;J
z-#st;U0}>?Ur*&wj{`&U^Rn9Ka<vuXZY}O>Xe>sNn!hOPtZuGioH$2?Z?iG3+X*`~
zuMOiepwkn0rPC9|bcDA30)NXGGuzh_r<tRa7Rk@c{O|v|F3PU{C{VC|QPzD&&ha(b
zxB9+^rhbXyOaz5etCg7dZOH3)$UJ&XZt<-OIafE;9iJ`ED(t>9`0f(lFms%v?EFkA
zc}=0NI&$ixNA{ee>B^z<5w20vF%Lx}ZZ6G0Q=b9XBJ>ANLF6XEw({I-3SyBV#?0S)
zQg&|fzZ5J2HA~s_<ZeEV?<^-&kKPs|Z!XMoh{K6U(`Sn_O2^$=-W#PnO(Nx67H2e^
zb!UY)RBxs?A8(O&PSFruX#+L8D){`*Svy+G9yPCUu%@)33bp@~(yYzPmWgrj@pG>!
zaMgNU1A%l=hOX&SJiwRvm6cA(sCh-Fh@qdPV<Z}y6mMAA=Zn^5<jk#13M>Cu0H<AT
z{P@wnRR9xiFLXx&j+0D`GzADGj=QBS=KSolzxIlGfE+cypobWavAQxN5nE*A#svdv
z4lZNXET!*0sbmxe{ZROo7TMHRPudpeUQ^(z^E%!}advysx5cK%dY5PC`W68DgFUOC
z_LTSNWoUc>YIt3ua}x01(YZx8tBCvwYrQ;9D^BPhJ^Plz5xPw;F!abar3Hrq7<%|A
zLyzos=%JYaet-B1Lyzn>v`FiiLz%kB4m9<qX|O#zw`f80fwS(c@Mh=wUeio%CyEuK
zWaI8$#T!S=Es8miACp`Bm%2npr6_ZYDD!=gcT9uryL**f50E|A_l9O_J4MuLQ?%Db
z$;Rxt#c!T_kBT+UW9AfH9aaG!$U7kK1jCvyd#>+BfN+=`LyzoMqVA3+pJC{c-O<m^
zgJj&IMI1g+yltYrr$rpa*>im{2P5NdDI2)Em+wnV^*N$mLQ`)FdQtYRg{QRV8o&Sa
zfB;Gvz;+aWZ{M9cl>EHRyYurhmu$IbSSUIiF98s-mSIJ-azGc6M}V4d5OqRw!YcZN
z+Y8<3`g5RcO34kM=k<NRgCfG9mLMzw43OJK&ncP!;BN~38Pvrf>p=Y+CGUZpZc`HT
z2%=yd))vnq;9Z1wfL#hKH>0LF0YrEu`ta7Fm{wci`ys&ST;EtF@}wn8ey8BUsNh8-
za!Ut<mH0p{0h*&jer5euO9XiwVDuc{L?yBa2#eykO3A}mp|GDAcWZfX08@|L4}4D{
z@1x{)g?a#ZYfwd>b~`>$qR-0D%REiN+a0{dZIV5==qBJakdm-dTMHmT->YFGlDU3i
z<{fmw26Mb}!VcYoAuSJ4!x8S>keAsRpS%_Md3|mI7?WG<QgFQpmyeoXu#E^;0)`T~
zWW&Nf6~k^Vf7~hI1Hk#Mg(#8R@)u^lbhtv4;$QiBng7n7Q*0poQZ&v6mWoohAn3p!
zH{@mB3ov@FFIkkjMHgf8hP*z12X4xq<C~AD2?{>l5Up=BqNzD3L`2=UKCjQi0NHbk
zGEj1*A)$%D3rdk_t<5N(-DdmOx<6-@L33-=J~k{oDe6U~>-Nj+xxSyGR32bx%D7?E
zpE4T()-M?w=HOj&aawSq_UI0T>wx_dlto<?W<qrCEd2<%24gj#nkaKec5ZQ%Qw#6M
z@_3y%dTvR2XUY%}OG^}1s1xC|=%HU`=N4CG=N4CqQrB2%q<_1FDs`ImNA78sfs$F#
z0xcP$765*MpM;G_advL;%CWh{|C43K>^Vh0LaAo}5v8vGd{N(T4iFb7#);aahfq9^
zaE-F7rL$(KAH)o0${O~G(p=vt;UF|6iAod-sRJV%-JW2Gu%vZbx7!xzOof#w1Iwyr
z?R^j;(M`f@L}(cgNf8VAB4Py*(%RTFAxK17>E9ELmVwbleFl)9*XP}lHx~}pZQ2dM
zkAUx+$dpm@iqGBnm#mLk%RE|)oKrFkF`u=nEmy72%lhZBD*JfgL{)U^w5FTAD&aH{
zb;(z~ihl?E+B%|2K|rY-I8;$vGiJ8WqeT4>Koj%JTHU`bNqOpkBvY|#Ltf_JLDaB&
zwm7u1#Dw(^Wz~1f37CA0a5gBH!=@f;wzlWoR@Q6XpL>-xCsV=!6qv{$Py(VR++LV!
zrI$}YjY7k2!}W)C3)AXa%NTWQ$v8ctwyd|N2lr;@7XKa8wPLF2K({J-c5d<IC>}>-
zYtXcvw`FlgL-R3ROv`>CYC-<OxRQ626IRi`S~xg3a!%2ey2wUBewCeDv?@QZ&%2n~
zax^s?;kxYH;)y7AxV6|`*}26VO;lfjRFD$gR8N1kXmD`!oT7V0<Y9p)vU7cZfZ{3+
z&|lfq?}7Wfqy9>a1%iGx$fRIceA&6h1wd-phzO7oOBgY}MAs11_%XS@-AWaQf?=|_
zM<s_3ls#m_xE#f_FoDwS+~R#eTEvJn00RLu&3sxp7?hn`v@1FS7z!ZBAxnLSV|1?X
zK0)R3btKS<)--`_t#%jw48aR3$Eim~10O<kc@N*z=!xH$om+hML3y_4=VhHaVs23%
zo08_}B|QL4(^#9GTWlb5Y5u~@58GSc<B=0;j;<350_%y|lD=5fXQznz4X{Cw8$e0^
z;>?x6uYi5P0Iav@)=Si4ECvUFw?Ha@p@QhZ%Oa6;K3&wO5@5rkK94BjCqQ#-qmzNX
z0$;oKRcr^=i<pNoAelRX^_rr}`l-r+^-8e^U_)L%pJ~%_1o;QBKU!B4)aR$n-Q{eS
zlK<Dfo0L*_0Q(j6Md%59GRC*ZyD6`CfvK4}0{_CYlnuaA<}a<@AAn`R7SQ@CWB{;D
zp>D~~%ldbFue(_1um`Mj#<FSbL8C=bcO~i>phm&kh*OK%`*xgM=8EQ7AC<A^>yH!x
tI1NYSp#SGb)9wQHn1*y}x^z78{{dv`Tvwvtu#^A*002ovPDHLkV1nvWn?e8p

literal 0
HcmV?d00001


From a71ba8d63b82fe93959a63661ac1bb20d6209efc Mon Sep 17 00:00:00 2001
From: alessandroargentieri <alexmawashi87@gmail.com>
Date: Thu, 8 Apr 2021 19:31:43 +0200
Subject: [PATCH 499/788] #20959 Localize Images page to Italian

---
 content/it/docs/concepts/containers/images.md | 316 ++++++++++++++++++
 1 file changed, 316 insertions(+)
 create mode 100644 content/it/docs/concepts/containers/images.md

diff --git a/content/it/docs/concepts/containers/images.md b/content/it/docs/concepts/containers/images.md
new file mode 100644
index 0000000000..43fe439ee0
--- /dev/null
+++ b/content/it/docs/concepts/containers/images.md
@@ -0,0 +1,316 @@
+---
+title: Immagini
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+
+L'immagine di un container rappresenta dati binari che incapsulano un'applicazione e 
+tutte le sue dipendenze software. Le immagini sono costituite da pacchetti software 
+eseguibili che possono essere avviati in modalità standalone e su cui si possono fare 
+ipotesi ben precise circa l'ambiente in cui vengono eseguiti.
+
+Tipicamente viene creata un'immagine di un'applicazione ed effettuato il _push_ 
+su un registry (un repository pubblico di immagini) prima di poterne fare riferimento esplicito in un 
+{{< glossary_tooltip text="Pod" term_id="pod" >}}
+
+Questa pagina va a delineare nello specifico il concetto di immagine di un container.
+
+<!-- body -->
+
+## I nomi delle immagini
+
+Alle immagini dei container vengono normalmente attribuiti nomi come `pause`, `example/mycontainer`, o `kube-apiserver`.
+Le immagini possono anche contenere l'hostname del registry in cui le immagini sono pubblicate; 
+ad esempio: `registro.fittizio.esempio/nomeimmagine`,
+ed è possibile che sia incluso nel nome anche il numero della porta; ad esempio: `registro.fittizio.esempio:10443/nomeimmagine`.
+
+Se non si specifica l'hostname di un registry, Kubernetes assume che ci si riferisca al registry pubblico di Docker.
+
+Dopo la parte relativa al nome dell'immagine si può aggiungere un _tag_ (come comunemente avviene per comandi come `docker` e `podman`).
+I tag permettono l'identificazione di differenti versioni della stessa serie di immagini.
+
+I tag delle immagini sono composti da lettere minuscole e maiuscole, numeri, underscore (`_`),
+punti (`.`), e trattini (`-`).  
+Esistono regole aggiuntive relative a dove i caratteri separatori (`_`, `-`, and `.`) 
+possano essere inseriti nel tag di un'immagine. 
+Se non si specifica un tag, Kubernetes assume il tag `latest` che va a definire l'immagine disponibile più recente.
+
+{{< caution >}}
+Evitate di utilizzare il tag `latest` quando si rilasciano dei container in produzione,
+in quanto risulta difficile tracciare quale versione dell'immagine sia stata avviata e persino più difficile
+effettuare un rollback ad una versione precente.
+
+Invece, meglio specificare un tag specifico come ad esempio `v1.42.0`.
+{{< /caution >}}
+
+## Aggiornamento delle immagini
+
+Quando un {{< glossary_tooltip text="Deployment" term_id="deployment" >}},
+{{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}, Pod, o qualsiasi altro
+oggetto che includa un Pod template viene creato per la prima volta, la policy di default per il pull di tutti i container nel Pod 
+è impostata su `IfNotPresent` (se non presente) se non specificato diversamente.
+Questa policy permette al
+{{< glossary_tooltip text="kubelet" term_id="kubelet" >}} di evitare di fare il pull
+di un'immagine se questa è già presente.
+
+Se necessario, si può forzare il pull in ogni occasione in uno dei seguenti modi:
+
+- impostando `imagePullPolicy` (specifica per il pull delle immagini) del container su `Always` (sempre).
+- omettendo `imagePullPolicy` ed usando il tag `:latest` (più recente) per l'immagine da utilizzare;
+  Kubernetes imposterà la policy su `Always` (sempre).
+- omettendo `imagePullPolicy` ed il tag per l'immagine da utilizzare.
+- abilitando l'admission controller [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages).
+
+{{< note >}}
+Il valore dell'impostazione `imagePullPolicy` del container è sempre presente quando l'oggetto viene creato per la prima volta
+e non viene aggiornato se il tag dell'immagine dovesse cambiare successivamente.
+
+Ad esempio, creando un Deployment con un'immagine il cui tag _non_ è 
+`:latest`, e successivamente aggiornando il tag di quell'immagine a `:latest`, il campo
+ `imagePullPolicy` _non_ cambierà su `Always`. 
+È necessario modificare manualmente la policy di pull di ogni oggetto dopo la sua creazione.
+{{< /note >}}
+
+Quando `imagePullPolicy` è definito senza un valore specifico, esso è impostato su `Always`.
+
+## Multi-architecture support nelle immagini
+
+Oltre a fornire immagini binarie, un _container registry_ può fornire un [indice delle immagini disponibili per un container](https://github.com/opencontainers/image-spec/blob/master/image-index.md). 
+L'indice di un'immagine può puntare a più [file manifest](https://github.com/opencontainers/image-spec/blob/master/manifest.md) ciascuno per una versione specifica dell'architettura di un container. 
+L'idea è che si può avere un unico nome per una stessa immagine (ad esempio: `pause`, `example/mycontainer`, `kube-apiserver`) e permettere a diversi sistemi di recuperare l'immagine binaria corretta a seconda dell'architettura della macchina che la sta utilizzando.
+
+
+Kubernetes stesso tipicamente nomina le immagini dei container tramite il suffisso `-$(ARCH)`. 
+Per la garantire la retrocompatibilità è meglio generare le vecchie immagini con dei suffissi. 
+L'idea è quella di generare, ad esempio, l'immagine `pause` con un manifest che include tutte le architetture supportate, 
+affiancata, ad esempio, da `pause-amd64` che è retrocompatibile per le vecchie configurazioni o per quei file YAML 
+in cui sono specificate le immagini con i suffissi.
+
+## Utilizzare un private registry
+
+I private registry possono richiedere l'utilizzo di chiavi per accedere alle immagini in essi contenute.  
+Le credenziali possono essere fornite in molti modi:
+  - configurando i nodi in modo tale da autenticarsi al private registry
+    - tutti i pod possono acquisire informazioni da qualsiasi private registry configurato
+    - è necessario che l'amministratore del cluster configuri i nodi in tal senso
+  - tramite pre-pulled images (immagini pre-caricate sui nodi)
+    - tutti i pod possono accedere alle immagini salvate sulla cache del nodo a cui si riferiscono
+    - è necessario effettuare l'accesso come root di sistema su ogni nodo per inserire questa impostazione
+  - specificando _ImagePullSecrets_ su un determinato pod
+    - solo i pod che forniscono le proprie chiavi hanno la possibilità di accedere al private registry
+  - tramite estensioni locali o specifiche di un _Vendor_
+    - se si sta utilizzando una configurazione personalizzata del nodo oppure se manualmente, o tramite il _cloud provider_,
+      si implementa un meccanismo di autenticazione del nodo presso il _container registry_.
+
+Di seguito la spiegazione dettagliata di queste opzioni.
+
+### Configurazione dei nodi per l'autenticazione ad un private registry
+
+Se si sta utilizzando Docker sui nodi, si può configurare il _Docker container runtime_ 
+per autenticare il nodo presso un private container registry.
+
+Questo è un approccio possibile se si ha il controllo sulle configurazioni del nodo.
+
+{{< note >}}
+Kubernetes di default supporta solo le sezioni `auths` e `HttpHeaders` nelle configurazioni relative a Docker. 
+Eventuali _helper_ per le credenziali di Docker (`credHelpers` o `credsStore`) non sono supportati.
+{{< /note >}}
+
+
+Docker salva le chiavi per i registri privati in `$HOME/.dockercfg` oppure nel file `$HOME/.docker/config.json`. 
+Inserendo lo stesso file nella lista seguente, kubelet lo utilizzerà per recuperare le credenziali quando deve fare il _pull_ delle immagini.
+
+* `{--root-dir:-/var/lib/kubelet}/config.json`
+* `{cwd of kubelet}/config.json`
+* `${HOME}/.docker/config.json`
+* `/.docker/config.json`
+* `{--root-dir:-/var/lib/kubelet}/.dockercfg`
+* `{cwd of kubelet}/.dockercfg`
+* `${HOME}/.dockercfg`
+* `/.dockercfg`
+
+{{< note >}}
+Potrebbe essere necessario impostare `HOME=/root` esplicitamente come variabile d'ambiente del processo _kubelet_.
+{{< /note >}}
+
+Di seguito i passi consigliati per configurare l'utilizzo di un private registry da parte dei nodi del _cluster_. 
+In questo esempio, eseguire i seguenti comandi sul proprio desktop/laptop:
+
+   1. Esegui `docker login [server]` per ogni _set_ di credenziali che vuoi utilizzare. Questo comando aggiornerà `$HOME/.docker/config.json` sul tuo PC.
+   1. Controlla il file `$HOME/.docker/config.json` in un editor di testo per assicurarti che contenga le credenziali che tu voglia utilizzare.
+   1. Recupera la lista dei tuoi nodi; ad esempio:
+      - se vuoi utilizzare i nomi: `nodes=$( kubectl get nodes -o jsonpath='{range.items[*].metadata}{.name} {end}' )`
+      - se vuoi recuperare gli indirizzi IP: `nodes=$( kubectl get nodes -o jsonpath='{range .items[*].status.addresses[?(@.type=="ExternalIP")]}{.address} {end}' )`
+   1. Copia il tuo file locale `.docker/config.json` in uno dei path sopra riportati nella lista di ricerca.
+      - ad esempio, per testare il tutto: `for n in $nodes; do scp ~/.docker/config.json root@"$n":/var/lib/kubelet/config.json; done`
+
+{{< note >}}
+Per i cluster di produzione, utilizza un configuration management tool per poter applicare le impostazioni su tutti i nodi laddove necessario.
+{{< /note >}}
+
+Puoi fare una verifica creando un Pod che faccia uso di un'immagine privata; ad esempio:
+
+```shell
+kubectl apply -f - <<EOF
+apiVersion: v1
+kind: Pod
+metadata:
+  name: private-image-test-1
+spec:
+  containers:
+    - name: uses-private-image
+      image: $PRIVATE_IMAGE_NAME
+      imagePullPolicy: Always
+      command: [ "echo", "SUCCESS" ]
+EOF
+```
+```
+pod/private-image-test-1 created
+```
+Se tutto funziona correttamente, pochi istanti dopo, si può lanciare il comando:
+
+```shell
+kubectl logs private-image-test-1
+```
+e verificare che il comando restituisca in output:
+```
+SUCCESS
+```
+
+Qualora si sospetti che il comando sia fallito, si può eseguire:
+```shell
+kubectl describe pods/private-image-test-1 | grep 'Failed'
+```
+In caso di fallimento, l'output sarà simile al seguente:
+```
+  Fri, 26 Jun 2015 15:36:13 -0700    Fri, 26 Jun 2015 15:39:13 -0700    19    {kubelet node-i2hq}    spec.containers{uses-private-image}    failed        Failed to pull image "user/privaterepo:v1": Error: image user/privaterepo:v1 not found
+```
+
+Bisogna assicurarsi che tutti i nodi nel cluster abbiano lo stesso file `.docker/config.json`. 
+Altrimenti i pod funzioneranno correttamente su alcuni nodi ma falliranno su altri. 
+Ad esempio, se si utilizza l'autoscaling per i nodi, il template di ogni istanza 
+devono includere il file `.docker/config.json` oppure montare un disco che lo contenga.
+
+Tutti i pod avranno accesso in lettura alle immagini presenti nel private registry 
+una volta che le rispettive chiavi di accesso siano state aggiunte nel file `.docker/config.json`.
+
+### Immagini pre-pulled
+
+{{< note >}}
+Questo approccio è possibile se si ha il controllo sulla configurazione del nodo. 
+Non funzionerà qualora il cloud provider gestisca i nodi e li sostituisca automaticamente.
+{{< /note >}}
+
+Kubelet di default prova a fare il pull di ogni immagine dal registry specificato.
+Tuttavia, qualora la proprietà `imagePullPolicy` (specifica di pull dell'immagine) del container sia impostata su `IfNotPresent` (vale a dire, se non è già presente) oppure su `Never` (mai), 
+allora l'immagine locale è utilizzata (in via preferenziale o esclusiva, rispettivamente).
+
+Se si vuole fare affidamento a immagini pre-scaricate per non dover incorrere in una fase di autenticazione presso il registry, 
+bisogna assicurarsi che tutti i nodi nel cluster abbiano scaricato le stesse versioni delle immagini.
+
+Questa procedura può essere utilizzata per accelerare il processo di creazione delle istanze o come alternativa all'autenticazione presso un private registry.
+
+Tutti i pod avranno accesso in lettura a qualsiasi immagine pre-scaricata.
+
+### Specificare la proprietà imagePullSecrets su un Pod
+
+{{< note >}}
+Questo approccio è quello consigliato per l'avvio di container a partire da immagini presenti in registri privati.
+{{< /note >}}
+
+Kubernetes da la possibilità di specificare le chiavi del _container registry_ su un Pod.
+
+#### Creare un Secret tramite Docker config
+
+Esegui il comando seguente, sostituendo i valori riportati in maiuscolo con quelli corretti:
+
+```shell
+kubectl create secret docker-registry <name> --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL
+```
+
+Se possiedi il file delle credenziali per Docker, anziché utilizzare il comando quì sopra 
+puoi importare il file di credenziali come un Kubernetes 
+{{< glossary_tooltip text="Secrets" term_id="secret" >}}.  
+[Creare un Secret a partire da credenziali Docker](/docs/tasks/configure-pod-container/pull-image-private-registry/#registry-secret-existing-credentials) fornisce la spiegazione dettagliata su come fare.
+
+Ciò è particolarmente utile se si utilizzano più _container registry_ privati, 
+in quanto il comando `kubectl create secret docker-registry` genera un Secret che 
+funziona con un solo private registry.
+
+{{< note >}}
+I Pod possono fare riferimento ai Secret per il pull delle immagini soltanto nel proprio _namespace_, 
+quindi questo procedimento deve essere svolto per ogni _namespace_.
+{{< /note >}}
+
+#### Fare riferimento ad imagePullSecrets in un Pod
+
+È possibile creare pod che referenzino quel Secret aggiungendo la sezione `imagePullSecrets` alla definizione del Pod.
+
+Ad esempio:
+
+```shell
+cat <<EOF > pod.yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: foo
+  namespace: awesomeapps
+spec:
+  containers:
+    - name: foo
+      image: janedoe/awesomeapp:v1
+  imagePullSecrets:
+    - name: myregistrykey
+EOF
+
+cat <<EOF >> ./kustomization.yaml
+resources:
+- pod.yaml
+EOF
+```
+
+Questo deve esser fatto per ogni Pod che utilizzi un private registry.
+
+Comunque, le impostazioni relative a questo campo possono essere automatizzate inserendo la sezione _imagePullSecrets_
+nella definizione della risorsa [ServiceAccount](/docs/tasks/configure-pod-container/configure-service-account/).
+
+Visitare la pagina [Aggiungere ImagePullSecrets ad un Service Account](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account) per istruzioni più dettagliate.
+
+Puoi utilizzarlo in congiunzione al file `.docker/config.json` configurato per ogni nodo. In questo caso, si applicherà un _merge_ delle credenziali.
+
+## Casi d'uso
+
+Ci sono varie soluzioni per configurare i private registry. Di seguito, alcuni casi d'uso comuni e le soluzioni suggerite.
+
+1. Cluster in cui sono utilizzate soltanto immagini non proprietarie (ovvero _open-source_). In questo caso non sussiste il bisogno di nascondere le immagini.
+   - Utilizza immagini pubbliche da Docker hub.
+     - Nessuna configurazione richiesta.
+     - Alcuni _cloud provider_ mettono in _cache_ o effettuano il _mirror_ di immagini pubbliche, il che migliora la disponibilità delle immagini e ne riduce il tempo di _pull_.
+1. Cluster con container avviati a partire da immagini proprietarie che dovrebbero essere nascoste a chi è esterno all'organizzazione, ma 
+   visibili a tutti gli utenti abilitati nel cluster.
+   - Utilizza un private [Docker registry](https://docs.docker.com/registry/).
+     - Esso può essere ospitato da [Docker Hub](https://hub.docker.com/signup), o da qualche altra piattaforma.
+     - Configura manualmente il file .docker/config.json su ogni nodo come descritto sopra.
+   - Oppure, avvia un private registry dietro il tuo firewall con accesso in lettura libero.
+     - Non è necessaria alcuna configurazione di Kubernetes.
+   - Utilizza un servizio di _container registry_ che controlli l'accesso alle immagini
+     - Esso funzionerà meglio con una configurazione del cluster basata su _autoscaling_ che con una configurazione manuale del nodo.
+   - Oppure, su un cluster dove la modifica delle configurazioni del nodo non è conveniente, utilizza `imagePullSecrets`.
+1. Cluster con immagini proprietarie, alcune delle quali richiedono un controllo sugli accessi.
+   - Assicurati che l'_admission controller_ [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) sia attivo. Altrimenti, tutti i Pod potenzialmente possono avere accesso a tutte le immagini.
+   - Sposta i dati sensibili un un _Secret_, invece di inserirli in un'immagine.
+1. Un cluster multi-tenant dove ogni tenant necessiti di un private registry.
+   - Assicurati che l'_admission controller_ [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) sia attivo. Altrimenti, tutti i Pod di tutti i tenant potrebbero potenzialmente avere accesso a tutte le immagini.
+   - Avvia un private registry che richieda un'autorizzazione all'accesso.
+   - Genera delle credenziali di registry per ogni tenant, inseriscile in dei _Secret_, e popola i _Secret_ per ogni _namespace_ relativo ad ognuno dei tenant.
+   - Il singolo tenant aggiunge così quel _Secret_ all'impostazione _imagePullSecrets_ di ogni _namespace_.
+
+
+Se si ha la necessità di accedere a più registri, si può generare un _Secret_ per ognuno di essi.
+Kubelet farà il _merge_ di ogni `imagePullSecrets` in un singolo file virtuale `.docker/config.json`.
+
+## {{% heading "whatsnext" %}}
+
+* Leggi [OCI Image Manifest Specification](https://github.com/opencontainers/image-spec/blob/master/manifest.md)
\ No newline at end of file

From a5c84d959fd87bb9984ec98e53cd994a7ff25592 Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Thu, 8 Apr 2021 12:39:44 -0700
Subject: [PATCH 500/788] Update release notes for 1.21 release

---
 content/en/docs/setup/release/notes.md | 3414 +++++++++++-------------
 1 file changed, 1494 insertions(+), 1920 deletions(-)

diff --git a/content/en/docs/setup/release/notes.md b/content/en/docs/setup/release/notes.md
index 54146007a0..89dc5694c0 100644
--- a/content/en/docs/setup/release/notes.md
+++ b/content/en/docs/setup/release/notes.md
@@ -1,5 +1,5 @@
 ---
-title: v1.20 Release Notes
+title: v1.21 Release Notes
 weight: 10
 card:
   name: release-notes
@@ -13,1592 +13,760 @@ card:
 
 <!-- NEW RELEASE NOTES ENTRY -->
 
-# v1.20.0
+# v1.21.0
 
 [Documentation](https://docs.k8s.io)
 
-## Downloads for v1.20.0
+## Downloads for v1.21.0
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes.tar.gz) | `ebfe49552bbda02807034488967b3b62bf9e3e507d56245e298c4c19090387136572c1fca789e772a5e8a19535531d01dcedb61980e42ca7b0461d3864df2c14`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-src.tar.gz) | `bcbd67ed0bb77840828c08c6118ad0c9bf2bcda16763afaafd8731fd6ce735be654feef61e554bcc34c77c65b02a25dae565adc5e1dc49a2daaa0d115bf1efe6`
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes.tar.gz) | `19bb76a3fa5ce4b9f043b2a3a77c32365ab1fcb902d8dd6678427fb8be8f49f64a5a03dc46aaef9c7dadee05501cf83412eda46f0edacbb8fc1ed0bf5fb79142`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-src.tar.gz) | `f942e6d6c10007a6e9ce21e94df597015ae646a7bc3e515caf1a3b79f1354efb9aff59c40f2553a8e3d43fe4a01742241f5af18b69666244906ed11a22e3bc49`
 
 ### Client Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-darwin-amd64.tar.gz) | `3609f6483f4244676162232b3294d7a2dc40ae5bdd86a842a05aa768f5223b8f50e1d6420fd8afb2d0ce19de06e1d38e5e5b10154ba0cb71a74233e6dc94d5a0`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-386.tar.gz) | `e06c08016a08137d39804383fdc33a40bb2567aa77d88a5c3fd5b9d93f5b581c635b2c4faaa718ed3bb2d120cb14fe91649ed4469ba72c3a3dda1e343db545ed`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-amd64.tar.gz) | `081472833601aa4fa78e79239f67833aa4efcb4efe714426cd01d4ddf6f36fbf304ef7e1f5373bff0fdff44a845f7560165c093c108bd359b5ab4189f36b1f2f`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-arm.tar.gz) | `037f84a2f29fe62d266cab38ac5600d058cce12cbc4851bcf062fafba796c1fbe23a0c2939cd15784854ca7cd92383e5b96a11474fc71fb614b47dbf98a477d9`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-arm64.tar.gz) | `275727e1796791ca3cbe52aaa713a2660404eab6209466fdc1cfa8559c9b361fe55c64c6bcecbdeba536b6d56213ddf726e58adc60f959b6f77e4017834c5622`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-ppc64le.tar.gz) | `7a9965293029e9fcdb2b7387467f022d2026953b8461e6c84182abf35c28b7822d2389a6d8e4d8e532d2ea5d5d67c6fee5fb6c351363cb44c599dc8800649b04`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-s390x.tar.gz) | `85fc449ce1980f5f030cc32e8c8e2198c1cc91a448e04b15d27debc3ca56aa85d283f44b4f4e5fed26ac96904cc12808fa3e9af3d8bf823fc928befb9950d6f5`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-windows-386.tar.gz) | `4c0a27dba1077aaee943e0eb7a787239dd697e1d968e78d1933c1e60b02d5d233d58541d5beec59807a4ffe3351d5152359e11da120bf64cacb3ee29fbc242e6`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-windows-amd64.tar.gz) | `29336faf7c596539b8329afbbdceeddc843162501de4afee44a40616278fa1f284d8fc48c241fc7d52c65dab70f76280cc33cec419c8c5dbc2625d9175534af8`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-darwin-amd64.tar.gz) | `be9d1440e418e5253fb8a3d8aba705ca8160746a9bd17325ad626a986b6da9f733af864155a651a32b7bca94b533b8d596005ddbe5248bdeea85db47a1b957ed`
+[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-darwin-arm64.tar.gz) | `eed0ddc81d104bb2d41ace13f737c490423d5df4ebddc7376e45c18ed66af35933c9376b912c1c3da105945b04056f6ca0870c156bee8a307cf4189ca5eb1dd1`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-386.tar.gz) | `8a2f30c4434199762f2a96141dab4241c1cce2711bea9ea39cc63c2c5e7d31719ed7f076efac1931604e3a94578d3bbf0cfa454965708c96f3cfb91789868746`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-amd64.tar.gz) | `cd3cfa645fa31de3716f1f63506e31b73d2aa8d37bb558bb3b3e8c151f35b3d74d44e03cbd05be67e380f9a5d015aba460222afdac6677815cd99a85c2325cf0`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-arm.tar.gz) | `936042aa11cea0f6dfd2c30fc5dbe655420b34799bede036b1299a92d6831f589ca10290b73b9c9741560b603ae31e450ad024e273f2b4df5354bfac272691d8`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-arm64.tar.gz) | `42beb75364d7bf4bf526804b8a35bd0ab3e124b712e9d1f45c1b914e6be0166619b30695feb24b3eecef134991dacb9ab3597e788bd9e45cf35addddf20dd7f6`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-ppc64le.tar.gz) | `4baba2ed7046b28370eccc22e2378ae79e3ce58220d6f4f1b6791e8233bec8379e30200bb20b971456b83f2b791ea166fdfcf1ea56908bc1eea03590c0eda468`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-s390x.tar.gz) | `37fa0c4d703aef09ce68c10ef3e7362b0313c8f251ce38eea579cd18fae4023d3d2b70e0f31577cabe6958ab9cfc30e98d25a7c64e69048b423057c3cf728339`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-windows-386.tar.gz) | `6900db36c1e3340edfd6dfd8d720575a904c932d39a8a7fa36401595e971a0235bd42111dbcc1cbb77e7374e47f1380a68c637997c18f96a0d9cdc9f3714c4c9`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-windows-amd64.tar.gz) | `90de67f6f79fc63bcfdf35066e3d84501cc85433265ffad36fd1a7a428a31b446249f0644a1e97495ea8b2a08e6944df6ef30363003750339edaa2aceffe937c`
 
 ### Server Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-amd64.tar.gz) | `fb56486a55dbf7dbacb53b1aaa690bae18d33d244c72a1e2dc95fb0fcce45108c44ba79f8fa04f12383801c46813dc33d2d0eb2203035cdce1078871595e446e`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-arm.tar.gz) | `735ed9993071fe35b292bf06930ee3c0f889e3c7edb983195b1c8e4d7113047c12c0f8281fe71879fc2fcd871e1ee587f03b695a03c8512c873abad444997a19`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-arm64.tar.gz) | `ffab155531d5a9b82487ee1abf4f6ef49626ea58b2de340656a762e46cf3e0f470bdbe7821210901fe1114224957c44c1d9cc1e32efb5ee24e51fe63990785b2`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-ppc64le.tar.gz) | `9d5730d35c4ddfb4c5483173629fe55df35d1e535d96f02459468220ac2c97dc01b995f577432a6e4d1548b6edbfdc90828dc9c1f7cf7464481af6ae10aaf118`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-s390x.tar.gz) | `6e4c165306940e8b99dd6e590f8542e31aed23d2c7a6808af0357fa425cec1a57016dd66169cf2a95f8eb8ef70e1f29e2d500533aae889e2e3d9290d04ab8721`
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-amd64.tar.gz) | `3941dcc2309ac19ec185603a79f5a086d8a198f98c04efa23f15a177e5e1f34946ea9392ba9f5d24d0d727839438f067fef1001fc6e88b27b8b01e35bbd962ca`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-arm.tar.gz) | `6507abf6c2ec2b336901dc23269f6c577ec0049b8bad3c9dd6ad63f21aa10f09bfbbfa6e064c2466d250411d3e10f8672791a9e10942e38de7bfbaf7a8bcc9da`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-arm64.tar.gz) | `5abe76f867ca6865344e957bf166b81766c049ec4eb183a8a5580c22a7f8474db1edf90fd901a5833e56128b6825811653a1d27f72fd34ce5b1287a8c10da05c`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-ppc64le.tar.gz) | `62507b182ca25396a285d91241536860e58f54fac937e97cbdf91948c83bb41be97d33277400489bf50e85164d560205540b76e94e5d519892312bdc63df1067`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-s390x.tar.gz) | `04f2a1f7d1388e4a7d7d9f597f872a3da36f26839cfed16aad6df07021c03f4dca1df06b19cfda56df09d1c2d9a13ebd0af40ca1b9b6aecfaf427ab7712d88f3`
 
 ### Node Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-amd64.tar.gz) | `3e6c90561dd1c27fa1dff6953c503251c36001f7e0f8eff3ec918c74ae2d9aa25917d8ac87d5b4224b8229f620b1830442e6dce3b2a497043f8497eee3705696`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-arm.tar.gz) | `26db385d9ae9a97a1051a638e7e3de22c4bbff389d5a419fe40d5893f9e4fa85c8b60a2bd1d370fd381b60c3ca33c5d72d4767c90898caa9dbd4df6bd116a247`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-arm64.tar.gz) | `5b8b63f617e248432b7eb913285a8ef8ba028255216332c05db949666c3f9e9cb9f4c393bbd68d00369bda77abf9bfa2da254a5c9fe0d79ffdad855a77a9d8ed`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-ppc64le.tar.gz) | `60da7715996b4865e390640525d6e98593ba3cd45c6caeea763aa5355a7f989926da54f58cc5f657f614c8134f97cd3894b899f8b467d100dca48bc22dd4ff63`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-s390x.tar.gz) | `9407dc55412bd04633f84fcefe3a1074f3eaa772a7cb9302242b8768d6189b75d37677a959f91130e8ad9dc590f9ba8408ba6700a0ceff6827315226dd5ee1e6`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-windows-amd64.tar.gz) | `9d4261af343cc330e6359582f80dbd6efb57d41f882747a94bbf47b4f93292d43dd19a86214d4944d268941622dfbc96847585e6fec15fddc4dbd93d17015fa8`
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-amd64.tar.gz) | `c1831c708109c31b3878e5a9327ea4b9e546504d0b6b00f3d43db78b5dd7d5114d32ac24a9a505f9cadbe61521f0419933348d2cd309ed8cfe3987d9ca8a7e2c`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-arm.tar.gz) | `b68dd5bcfc7f9ce2781952df40c8c3a64c29701beff6ac22f042d6f31d4de220e9200b7e8272ddf608114327770acdaf3cb9a34a0a5206e784bda717ea080e0f`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-arm64.tar.gz) | `7fa84fc500c28774ed25ca34b6f7b208a2bea29d6e8379f84b9f57bd024aa8fe574418cee7ee26edd55310716d43d65ae7b9cbe11e40c995fe2eac7f66bdb423`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-ppc64le.tar.gz) | `a4278b3f8e458e9581e01f0c5ba8443303c987988ee136075a8f2f25515d70ca549fbd2e4d10eefca816c75c381d62d71494bd70c47034ab47f8315bbef4ae37`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-s390x.tar.gz) | `8de2bc6f22f232ff534b45012986eac23893581ccb6c45bd637e40dbe808ce31d5a92375c00dc578bdbadec342b6e5b70c1b9f3d3a7bb26ccfde97d71f9bf84a`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-windows-amd64.tar.gz) | `b82e94663d330cff7a117f99a7544f27d0bc92b36b5a283b3c23725d5b33e6f15e0ebf784627638f22f2d58c58c0c2b618ddfd226a64ae779693a0861475d355`
 
-## Changelog since v1.19.0
+## Changelog since v1.20.0
+
+# Release notes for v1.21.0-rc.0
+
+[Documentation](https://docs.k8s.io/docs/home)
+
+# Changelog since v1.20.0
 
 ## What's New (Major Themes)
 
-### Dockershim deprecation
+### Deprecation of PodSecurityPolicy
 
-Docker as an underlying runtime is being deprecated. Docker-produced images will continue to work in your cluster with all runtimes, as they always have.
-The Kubernetes community [has written a blog post about this in detail](https://blog.k8s.io/2020/12/02/dont-panic-kubernetes-and-docker/) with [a dedicated FAQ page for it](https://blog.k8s.io/2020/12/02/dockershim-faq/).
+PSP as an admission controller resource is being deprecated. Deployed PodSecurityPolicy's will keep working until version 1.25, their target removal from the codebase. A new feature, with a working title of "PSP replacement policy", is being developed in [KEP-2579](https://features.k8s.io/2579). To learn more, read [PodSecurityPolicy Deprecation: Past, Present, and Future](https://blog.k8s.io/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/).
 
-### External credential provider for client-go
+### Kubernetes API Reference Documentation
 
-The client-go credential plugins can now be passed in the current cluster information via the `KUBERNETES_EXEC_INFO` environment variable. Learn more about this on [client-go credential plugins documentation](https://docs.k8s.io/reference/access-authn-authz/authentication/#client-go-credential-plugins/).
+The API reference is now generated with [`gen-resourcesdocs`](https://github.com/kubernetes-sigs/reference-docs/tree/c96658d89fb21037b7d00d27e6dbbe6b32375837/gen-resourcesdocs) and it is moving to [Kubernetes API](https://docs.k8s.io/reference/kubernetes-api/)
 
-### CronJob controller v2 is available through feature gate
+### Kustomize Updates in Kubectl
 
-An alternative implementation of `CronJob` controller is now available as an alpha feature in this release, which has experimental performance improvement by using informers instead of polling. While this will be the default behavior in the future, you can [try them in this release through a feature gate](https://docs.k8s.io/concepts/workloads/controllers/cron-jobs/).
+[Kustomize](https://github.com/kubernetes-sigs/kustomize) version in kubectl had a jump from v2.0.3 to [v4.0.5](https://github.com/kubernetes/kubernetes/pull/98946). Kustomize is now treated as a library and future updates will be less sporadic.
 
-### PID Limits graduates to General Availability
+### Default Container Labels
 
-PID Limits features are now generally available on both `SupportNodePidsLimit` (node-to-pod PID isolation) and `SupportPodPidsLimit` (ability to limit PIDs per pod), after being enabled-by-default in beta stage for a year.
+Pod with multiple containers can use `kubectl.kubernetes.io/default-container` label to have a container preselected for kubectl commands. More can be read in [KEP-2227](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/2227-kubectl-default-container/README.md).
 
-### API Priority and Fairness graduates to Beta
+### Immutable Secrets and ConfigMaps
 
-Initially introduced in 1.18, Kubernetes 1.20 now enables API Priority and Fairness (APF) by default. This allows `kube-apiserver` to [categorize incoming requests by priority levels](https://docs.k8s.io/concepts/cluster-administration/flow-control/).
+Immutable Secrets and ConfigMaps graduates to GA. This feature allows users to specify that the contents of a particular Secret or ConfigMap is immutable for its object lifetime. For such instances, Kubelet will not watch/poll for changes and therefore reducing apiserver load.
 
-### IPv4/IPv6 run
+### Structured Logging in Kubelet
 
-IPv4/IPv6 dual-stack has been reimplemented for 1.20 to support dual-stack Services, based on user and community feedback. If your cluster has dual-stack enabled, you can create Services which can use IPv4, IPv6, or both, and you can change this setting for existing Services. Details are available in updated [IPv4/IPv6 dual-stack docs](https://docs.k8s.io/concepts/services-networking/dual-stack/), which cover the nuanced array of options.
+Kubelet has adopted structured logging, thanks to community effort in accomplishing this within the release timeline. Structured logging in the project remains an ongoing effort -- for folks interested in participating, [keep an eye / chime in to the mailing list discussion](https://groups.google.com/g/kubernetes-dev/c/y4WIw-ntUR8).
 
-We expect this implementation to progress from alpha to beta and GA in coming releases, so we’re eager to have you comment about your dual-stack experiences in [#k8s-dual-stack](https://kubernetes.slack.com/messages/k8s-dual-stack) or in [enhancements #563](https://features.k8s.io/563). 
+### Storage Capacity Tracking
 
-### go1.15.5
+Traditionally, the Kubernetes scheduler was based on the assumptions that additional persistent storage is available everywhere in the cluster and has infinite capacity. Topology constraints addressed the first point, but up to now pod scheduling was still done without considering that the remaining storage capacity may not be enough to start a new pod. [Storage capacity tracking](https://docs.k8s.io/concepts/storage/storage-capacity/) addresses that by adding an API for a CSI driver to report storage capacity and uses that information in the Kubernetes scheduler when choosing a node for a pod. This feature serves as a stepping stone for supporting dynamic provisioning for local volumes and other volume types that are more capacity constrained.
 
-go1.15.5 has been integrated to Kubernetes project as of this release, [including other infrastructure related updates on this effort](https://github.com/kubernetes/kubernetes/pull/95776).
+### Generic Ephemeral Volumes
 
-### CSI Volume Snapshot graduates to General Availability
+[Generic ephermeral volumes](https://docs.k8s.io/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes) feature allows any existing storage driver that supports dynamic provisioning to be used as an ephemeral volume with the volume’s lifecycle bound to the Pod. It can be used to provide scratch storage that is different from the root disk, for example persistent memory, or a separate local disk on that node. All StorageClass parameters for volume provisioning are supported. All features supported with PersistentVolumeClaims are supported, such as storage capacity tracking, snapshots and restore, and volume resizing.
 
-CSI Volume Snapshot moves to GA in the 1.20 release. This feature provides a standard way to trigger volume snapshot operations in Kubernetes and allows Kubernetes users to incorporate snapshot operations in a portable manner on any Kubernetes environment regardless of supporting underlying storage providers.
-Additionally, these Kubernetes snapshot primitives act as basic building blocks that unlock the ability to develop advanced, enterprise grade, storage administration features for Kubernetes: including application or cluster level backup solutions.
-Note that snapshot support will require Kubernetes distributors to bundle the Snapshot controller, Snapshot CRDs, and validation webhook. In addition, a CSI driver supporting the snapshot functionality must also be deployed on the cluster.
+### CSI Service Account Token
 
-### Non-recursive Volume Ownership (FSGroup) graduates to Beta
+CSI Service Account Token feature moves to Beta in 1.21. This feature improves the security posture and allows CSI drivers to receive pods' [bound service account tokens](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md). This feature also provides a knob to re-publish volumes so that short-lived volumes can be refreshed.
 
-By default, the `fsgroup` setting, if specified, recursively updates permissions for every file in a volume on every mount. This can make mount, and pod startup, very slow if the volume has many files. 
-This setting enables a pod to specify a `PodFSGroupChangePolicy` that indicates that volume ownership and permissions will be changed only when permission and ownership of the root directory does not match with expected permissions on the volume.
+### CSI Health Monitoring
 
-### CSIDriver policy for FSGroup graduates to Beta
-
-The FSGroup's CSIDriver Policy is now beta in 1.20. This allows CSIDrivers to explicitly indicate if they want Kubernetes to manage permissions and ownership for their volumes via `fsgroup`. 
-
-### Security Improvements for CSI Drivers (Alpha)
-
-In 1.20, we introduce a new alpha feature `CSIServiceAccountToken`. This feature allows CSI drivers to impersonate the pods that they mount the volumes for. This improves the security posture in the mounting process where the volumes are ACL’ed on the pods’ service account without handing out unnecessary permissions to the CSI drivers’ service account. This feature is especially important for secret-handling CSI drivers, such as the secrets-store-csi-driver. Since these tokens can be rotated and short-lived, this feature also provides a knob for CSI drivers to receive `NodePublishVolume` RPC calls periodically with the new token. This knob is also useful when volumes are short-lived, e.g. certificates.
-
-### Introducing Graceful Node Shutdown (Alpha)
-
-The `GracefulNodeShutdown` feature is now in Alpha. This allows kubelet to be aware of node system shutdowns, enabling graceful termination of pods during a system shutdown. This feature can be [enabled through feature gate](https://docs.k8s.io/concepts/architecture/nodes/#graceful-node-shutdown).
-
-### Runtime log sanitation
-
-Logs can now be configured to use runtime protection from leaking sensitive data. [Details for this experimental feature is available in documentation](https://docs.k8s.io/concepts/cluster-administration/system-logs/#log-sanitization).
-
-### Pod resource metrics
-
-On-demand metrics calculation is now available through `/metrics/resources`. [When enabled](
-https://docs.k8s.io/concepts/cluster-administration/system-metrics#kube-scheduler-metrics), the endpoint will report the requested resources and the desired limits of all running pods.
-
-### Introducing `RootCAConfigMap`
-
-`RootCAConfigMap` graduates to Beta, seperating from `BoundServiceAccountTokenVolume`. The `kube-root-ca.crt` ConfigMap is now available to every namespace, by default. It contains the Certificate Authority bundle for verify kube-apiserver connections.
-
-### `kubectl debug` graduates to Beta
-
-`kubectl alpha debug` graduates from alpha to beta in 1.20, becoming `kubectl debug`.
-`kubectl debug` provides support for common debugging workflows directly from kubectl. Troubleshooting scenarios supported in this release of `kubectl` include:
-Troubleshoot workloads that crash on startup by creating a copy of the pod that uses a different container image or command.
-Troubleshoot distroless containers by adding a new container with debugging tools, either in a new copy of the pod or using an ephemeral container. (Ephemeral containers are an alpha feature that are not enabled by default.)
-Troubleshoot on a node by creating a container running in the host namespaces and with access to the host’s filesystem.
-Note that as a new builtin command, `kubectl debug` takes priority over any `kubectl` plugin named “debug”. You will need to rename the affected plugin.
-Invocations using `kubectl alpha debug` are now deprecated and will be removed in a subsequent release. Update your scripts to use `kubectl debug` instead of `kubectl alpha debug`!
-For more information about kubectl debug, see Debugging Running Pods on the Kubernetes website, kubectl help debug, or reach out to SIG CLI by visiting #sig-cli or commenting on [enhancement #1441](https://features.k8s.io/1441).
-
-### Removing deprecated flags in kubeadm
-
-`kubeadm` applies a number of deprecations and removals of deprecated features in this release. More details are available in the Urgent Upgrade Notes and Kind / Deprecation sections.
-
-### Pod Hostname as FQDN graduates to Beta
-
-Previously introduced in 1.19 behind a feature gate, `SetHostnameAsFQDN` is now enabled by default. More details on this behavior is available in [documentation for DNS for Services and Pods](https://docs.k8s.io/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field)
-
-### `TokenRequest` / `TokenRequestProjection` graduates to General Availability
-
-Service account tokens bound to pod is now a stable feature. The feature gates will be removed in 1.21 release. For more information, refer to notes below on the changelogs.
-
-### RuntimeClass feature graduates to General Availability.
-
-The `node.k8s.io` API groups are promoted from `v1beta1` to `v1`. `v1beta1` is now deprecated and will be removed in a future release, please start using `v1`. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-
-### Cloud Controller Manager now exclusively shipped by Cloud Provider
-
-Kubernetes will no longer ship an instance of the Cloud Controller Manager binary. Each Cloud Provider is expected to ship their own instance of this binary. Details for a Cloud Provider to create an instance of such a binary can be found under [here](https://github.com/kubernetes/kubernetes/tree/master/staging/src/k8s.io/cloud-provider/sample). Anyone with questions on building a Cloud Controller Manager should reach out to SIG Cloud Provider. Questions about the Cloud Controller Manager on a Managed Kubernetes solution should go to the relevant Cloud Provider. Questions about the Cloud Controller Manager on a non managed solution can be brought up with SIG Cloud Provider.
+The CSI health monitoring feature is being released as a second Alpha in Kubernetes 1.21. This feature enables CSI Drivers to share abnormal volume conditions from the underlying storage systems with Kubernetes so that they can be reported as events on PVCs or Pods. This feature serves as a stepping stone towards programmatic detection and resolution of individual volume health issues by Kubernetes.
 
 ## Known Issues
 
-### Summary API in kubelet doesn't have accelerator metrics
-Currently, cadvisor_stats_provider provides AcceleratorStats but cri_stats_provider does not. As a result, when using cri_stats_provider, kubelet's Summary API does not have accelerator metrics. [There is an open work in progress to fix this](https://github.com/kubernetes/kubernetes/pull/96873).
+### `TopologyAwareHints` feature falls back to default behavior
+
+The feature gate currently falls back to the default behavior in most cases. Enabling the feature gate will add hints to `EndpointSlices`, but functional differences are only observed in non-dual stack kube-proxy implementation. [The fix will be available in coming releases](https://github.com/kubernetes/kubernetes/pull/100804).
 
 ## Urgent Upgrade Notes 
 
 ### (No, really, you MUST read this before you upgrade)
 
-- A bug was fixed in kubelet where exec probe timeouts were not respected. This may result in unexpected behavior since the default timeout (if not specified) is `1s` which may be too small for some exec probes. Ensure that pods relying on this behavior are updated to correctly handle probe timeouts. See [configure probe](https://docs.k8s.io/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes) section of the documentation for more details.
-
-  - This change in behavior may be unexpected for some clusters and can be disabled by turning off the `ExecProbeTimeout` feature gate. This gate will be locked and removed in future releases so that exec probe timeouts are always respected. ([#94115](https://github.com/kubernetes/kubernetes/pull/94115), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Testing]
-- RuntimeClass feature graduates to General Availability. Promote `node.k8s.io` API groups from `v1beta1` to `v1`. `v1beta1` is now deprecated and will be removed in a future release, please start using `v1`. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-- API priority and fairness graduated to beta. 1.19 servers with APF turned on should not be run in a multi-server cluster with 1.20+ servers. ([#96527](https://github.com/kubernetes/kubernetes/pull/96527), [@adtac](https://github.com/adtac)) [SIG API Machinery and Testing]
-- For CSI drivers, kubelet no longer creates the target_path for NodePublishVolume in accordance with the CSI spec. Kubelet also no longer checks if staging and target paths are mounts or corrupted. CSI drivers need to be idempotent and do any necessary mount verification. ([#88759](https://github.com/kubernetes/kubernetes/pull/88759), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Kubeadm: http://git.k8s.io/enhancements/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md ([#95382](https://github.com/kubernetes/kubernetes/pull/95382), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-  - The label applied to control-plane nodes "node-role.kubernetes.io/master" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Introduce a new label "node-role.kubernetes.io/control-plane" that will be applied in parallel to "node-role.kubernetes.io/master" until the removal of the "node-role.kubernetes.io/master" label.
-  - Make "kubeadm upgrade apply" add the "node-role.kubernetes.io/control-plane" label on existing nodes that only have the "node-role.kubernetes.io/master" label during upgrade.
-  - Please adapt your tooling built on top of kubeadm to use the "node-role.kubernetes.io/control-plane" label.
-  - The taint applied to control-plane nodes "node-role.kubernetes.io/master:NoSchedule" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Apply toleration for a new, future taint "node-role.kubernetes.io/control-plane:NoSchedule" to the kubeadm CoreDNS / kube-dns managed manifests. Note that this taint is not yet applied to kubeadm control-plane nodes.
-  - Please adapt your workloads to tolerate the same future taint preemptively.
-    
-- Kubeadm: improve the validation of serviceSubnet and podSubnet.
-  ServiceSubnet has to be limited in size, due to implementation details, and the mask can not allocate more than 20 bits.
-  PodSubnet validates against the corresponding cluster "--node-cidr-mask-size" of the kube-controller-manager, it fail if the values are not compatible.
-  kubeadm no longer sets the node-mask automatically on IPv6 deployments, you must check that your IPv6 service subnet mask is compatible with the default node mask /64 or set it accordenly. 
-  Previously, for IPv6, if the podSubnet had a mask lower than /112, kubeadm calculated a node-mask to be multiple of eight and splitting the available bits to maximise the number used for nodes. ([#95723](https://github.com/kubernetes/kubernetes/pull/95723), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]
-- The deprecated flag --experimental-kustomize is now removed from kubeadm commands. Use --experimental-patches instead, which was introduced in 1.19. Migration information available in --help description for --experimental-patches. ([#94871](https://github.com/kubernetes/kubernetes/pull/94871), [@neolit123](https://github.com/neolit123))
-- Windows hyper-v container featuregate is deprecated in 1.20 and will be removed in 1.21 ([#95505](https://github.com/kubernetes/kubernetes/pull/95505), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- The kube-apiserver ability to serve on an insecure port, deprecated since v1.10, has been removed. The insecure address flags `--address` and `--insecure-bind-address` have no effect in kube-apiserver and will be removed in v1.24. The insecure port flags `--port` and `--insecure-port` may only be set to 0 and will be removed in v1.24. ([#95856](https://github.com/kubernetes/kubernetes/pull/95856), [@knight42](https://github.com/knight42), [SIG API Machinery, Node, Testing])
-- Add dual-stack Services (alpha).  This is a BREAKING CHANGE to an alpha API.
-  It changes the dual-stack API wrt Service from a single ipFamily field to 3
-  fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack),
-  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
-  clusterIP).  Most users do not need to set anything at all, defaulting will
-  handle it for them.  Services are single-stack unless the user asks for
-  dual-stack.  This is all gated by the "IPv6DualStack" feature gate. ([#91824](https://github.com/kubernetes/kubernetes/pull/91824), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- `TokenRequest` and `TokenRequestProjection` are now GA features. The following flags are required by the API server:
-  - `--service-account-issuer`, should be set to a URL identifying the API server that will be stable over the cluster lifetime.
-  - `--service-account-key-file`, set to one or more files containing one or more public keys used to verify tokens.
-  - `--service-account-signing-key-file`, set to a file containing a private key to use to sign service account tokens. Can be the same file given to `kube-controller-manager` with `--service-account-private-key-file`. ([#95896](https://github.com/kubernetes/kubernetes/pull/95896), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle]
-- kubeadm: make the command "kubeadm alpha kubeconfig user" accept a "--config" flag and remove the following flags:
-  - apiserver-advertise-address / apiserver-bind-port: use either localAPIEndpoint from InitConfiguration or controlPlaneEndpoint from ClusterConfiguration.
-  - cluster-name: use clusterName from ClusterConfiguration
-  - cert-dir: use certificatesDir from ClusterConfiguration ([#94879](https://github.com/kubernetes/kubernetes/pull/94879), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Resolves non-deterministic behavior of the garbage collection controller when ownerReferences with incorrect data are encountered. Events with a reason of `OwnerRefInvalidNamespace` are recorded when namespace mismatches between child and owner objects are detected. The [kubectl-check-ownerreferences](https://github.com/kubernetes-sigs/kubectl-check-ownerreferences) tool can be run prior to upgrading to locate existing objects with invalid ownerReferences.
-  - A namespaced object with an ownerReference referencing a uid of a namespaced kind which does not exist in the same namespace is now consistently treated as though that owner does not exist, and the child object is deleted.
-  - A cluster-scoped object with an ownerReference referencing a uid of a namespaced kind is now consistently treated as though that owner is not resolvable, and the child object is ignored by the garbage collector. ([#92743](https://github.com/kubernetes/kubernetes/pull/92743), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-
-
+- Kube-proxy's IPVS proxy mode no longer sets the net.ipv4.conf.all.route_localnet sysctl parameter. Nodes upgrading will have net.ipv4.conf.all.route_localnet set to 1 but new nodes will inherit the system default (usually 0). If you relied on any behavior requiring net.ipv4.conf.all.route_localnet, you must set ensure it is enabled as kube-proxy will no longer set it automatically. This change helps to further mitigate CVE-2020-8558. ([#92938](https://github.com/kubernetes/kubernetes/pull/92938), [@lbernail](https://github.com/lbernail)) [SIG Network and Release]
+ - Kubeadm: during "init" an empty cgroupDriver value in the KubeletConfiguration is now always set to "systemd" unless the user is explicit about it. This requires existing machine setups to configure the container runtime to use the "systemd" driver. Documentation on this topic can be found here: https://kubernetes.io/docs/setup/production-environment/container-runtimes/. When upgrading existing clusters / nodes using "kubeadm upgrade" the old cgroupDriver value is preserved, but in 1.22 this change will also apply to "upgrade". For more information on migrating to the "systemd" driver or remaining on the "cgroupfs" driver see: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/. ([#99471](https://github.com/kubernetes/kubernetes/pull/99471), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+ - Newly provisioned PVs by EBS plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99130](https://github.com/kubernetes/kubernetes/pull/99130), [@ayberk](https://github.com/ayberk)) [SIG Cloud Provider, Storage and Testing]
+ - Newly provisioned PVs by OpenStack Cinder plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99719](https://github.com/kubernetes/kubernetes/pull/99719), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider and Storage]
+ - Newly provisioned PVs by gce-pd will no longer have the beta FailureDomain label. gce-pd volume plugin will start to have GA topology label instead. ([#98700](https://github.com/kubernetes/kubernetes/pull/98700), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider, Storage and Testing]
+ - OpenStack Cinder CSI migration is on by default, Clinder CSI driver must be installed on clusters on OpenStack for Cinder volumes to work. ([#98538](https://github.com/kubernetes/kubernetes/pull/98538), [@dims](https://github.com/dims)) [SIG Storage]
+ - Remove alpha `CSIMigrationXXComplete` flag and add alpha `InTreePluginXXUnregister` flag. Deprecate `CSIMigrationvSphereComplete` flag and it will be removed in v1.22. ([#98243](https://github.com/kubernetes/kubernetes/pull/98243), [@Jiawei0227](https://github.com/Jiawei0227))
+ - Remove storage metrics `storage_operation_errors_total`, since we already have `storage_operation_status_count`.And add new field `status` for `storage_operation_duration_seconds`, so that we can know about all status storage operation latency. ([#98332](https://github.com/kubernetes/kubernetes/pull/98332), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
+ - The metric `storage_operation_errors_total` is not removed, but is marked deprecated, and the metric `storage_operation_status_count` is marked deprecated. In both cases the `storage_operation_duration_seconds` metric can be used to recover equivalent counts (using `status=fail-unknown` in the case of `storage_operations_errors_total`). ([#99045](https://github.com/kubernetes/kubernetes/pull/99045), [@mattcary](https://github.com/mattcary))
+ - `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior` features have been promoted to GA. `ServiceNodeExclusion` and `NodeDisruptionExclusion` are now unconditionally enabled, while `LegacyNodeRoleBehavior` is unconditionally disabled. To prevent control plane nodes from being added to load balancers automatically, upgrade users need to add "node.kubernetes.io/exclude-from-external-load-balancers" label to control plane nodes. ([#97543](https://github.com/kubernetes/kubernetes/pull/97543), [@pacoxu](https://github.com/pacoxu))
+ 
 ## Changes by Kind
 
 ### Deprecation
 
-- Docker support in the kubelet is now deprecated and will be removed in a future release. The kubelet uses a module called "dockershim" which implements CRI support for Docker and it has seen maintenance issues in the Kubernetes community. We encourage you to evaluate moving to a container runtime that is a full-fledged implementation of CRI (v1alpha1 or v1 compliant) as they become available. ([#94624](https://github.com/kubernetes/kubernetes/pull/94624), [@dims](https://github.com/dims)) [SIG Node]
-- Kubeadm: deprecate self-hosting support. The experimental command "kubeadm alpha self-hosting" is now deprecated and will be removed in a future release. ([#95125](https://github.com/kubernetes/kubernetes/pull/95125), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: graduate the "kubeadm alpha certs" command to a parent command "kubeadm certs". The command "kubeadm alpha certs" is deprecated and will be removed in a future release. Please migrate. ([#94938](https://github.com/kubernetes/kubernetes/pull/94938), [@yagonobre](https://github.com/yagonobre)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. This change also removes the parent command "kubeadm alpha kubelet" as there are no more sub-commands under it for the time being. ([#94668](https://github.com/kubernetes/kubernetes/pull/94668), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated --kubelet-config flag for the command "kubeadm upgrade node" ([#94869](https://github.com/kubernetes/kubernetes/pull/94869), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubectl: deprecate --delete-local-data ([#95076](https://github.com/kubernetes/kubernetes/pull/95076), [@dougsland](https://github.com/dougsland)) [SIG CLI, Cloud Provider and Scalability]
-- Kubelet's deprecated endpoint `metrics/resource/v1alpha1` has been removed, please adopt `metrics/resource`. ([#94272](https://github.com/kubernetes/kubernetes/pull/94272), [@RainbowMango](https://github.com/RainbowMango)) [SIG Instrumentation and Node]
-- Removes deprecated scheduler metrics DeprecatedSchedulingDuration, DeprecatedSchedulingAlgorithmPredicateEvaluationSecondsDuration, DeprecatedSchedulingAlgorithmPriorityEvaluationSecondsDuration ([#94884](https://github.com/kubernetes/kubernetes/pull/94884), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-- Scheduler alpha metrics binding_duration_seconds and scheduling_algorithm_preemption_evaluation_seconds are deprecated, Both of those metrics are now covered as part of framework_extension_point_duration_seconds, the former as a PostFilter the latter and a Bind plugin. The plan is to remove both in 1.21 ([#95001](https://github.com/kubernetes/kubernetes/pull/95001), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-- Support 'controlplane' as a valid EgressSelection type in the EgressSelectorConfiguration API. 'Master' is deprecated and will be removed in v1.22. ([#95235](https://github.com/kubernetes/kubernetes/pull/95235), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-- The v1alpha1 PodPreset API and admission plugin has been removed with no built-in replacement. Admission webhooks can be used to modify pods on creation. ([#94090](https://github.com/kubernetes/kubernetes/pull/94090), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps, CLI, Cloud Provider, Scalability and Testing]
-
+- Aborting the drain command in a list of nodes will be deprecated. The new behavior will make the drain command go through all nodes even if one or more nodes failed during the drain. For now, users can try such experience by enabling --ignore-errors flag. ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan))
+- Delete deprecated `service.beta.kubernetes.io/azure-load-balancer-mixed-protocols` mixed procotol annotation in favor of the MixedProtocolLBService feature ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Deprecate the `topologyKeys` field in Service. This capability will be replaced with upcoming work around Topology Aware Subsetting and Service Internal Traffic Policy. ([#96736](https://github.com/kubernetes/kubernetes/pull/96736), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
+- Kube-proxy: remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
+- Kubeadm: deprecated command "alpha selfhosting pivot" is now removed. ([#97627](https://github.com/kubernetes/kubernetes/pull/97627), [@knight42](https://github.com/knight42))
+- Kubeadm: graduate the command `kubeadm alpha kubeconfig user` to `kubeadm kubeconfig user`. The `kubeadm alpha kubeconfig user` command is deprecated now. ([#97583](https://github.com/kubernetes/kubernetes/pull/97583), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: the "kubeadm alpha certs" command is removed now, please use "kubeadm certs" instead. ([#97706](https://github.com/kubernetes/kubernetes/pull/97706), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: the deprecated kube-dns is no longer supported as an option. If "ClusterConfiguration.dns.type" is set to "kube-dns" kubeadm will now throw an error. ([#99646](https://github.com/kubernetes/kubernetes/pull/99646), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubectl: The deprecated `kubectl alpha debug` command is removed. Use `kubectl debug` instead. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
+- Remove deprecated `--generator, --replicas, --service-generator, --service-overrides, --schedule` from `kubectl run`
+  Deprecate `--serviceaccount, --hostport, --requests, --limits` in `kubectl run` ([#99732](https://github.com/kubernetes/kubernetes/pull/99732), [@soltysh](https://github.com/soltysh))
+- Remove the deprecated metrics "scheduling_algorithm_preemption_evaluation_seconds" and "binding_duration_seconds", suggest to use "scheduler_framework_extension_point_duration_seconds" instead. ([#96447](https://github.com/kubernetes/kubernetes/pull/96447), [@chendave](https://github.com/chendave)) [SIG Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- Removing experimental windows container hyper-v support with Docker ([#97141](https://github.com/kubernetes/kubernetes/pull/97141), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
+- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
+- The GA TokenRequest and TokenRequestProjection feature gates have been removed and are unconditionally enabled. Remove explicit use of those feature gates in CLI invocations. ([#97148](https://github.com/kubernetes/kubernetes/pull/97148), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- The PodSecurityPolicy API is deprecated in 1.21, and will no longer be served starting in 1.25. ([#97171](https://github.com/kubernetes/kubernetes/pull/97171), [@deads2k](https://github.com/deads2k)) [SIG Auth and CLI]
+- The `batch/v2alpha1` CronJob type definitions and clients are deprecated and removed. ([#96987](https://github.com/kubernetes/kubernetes/pull/96987), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+- The `export` query parameter (inconsistently supported by API resources and deprecated in v1.14) is fully removed.  Requests setting this query parameter will now receive a 400 status response. ([#98312](https://github.com/kubernetes/kubernetes/pull/98312), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
+- `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
+- `discovery.k8s.io/v1beta1` EndpointSlices are deprecated in favor of `discovery.k8s.io/v1`, and will no longer be served in Kubernetes v1.25. ([#100472](https://github.com/kubernetes/kubernetes/pull/100472), [@liggitt](https://github.com/liggitt))
+- `diskformat` storage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
+  
+  vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
+  
+  VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
+  
+  Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
+  
+  Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel))
 
 ### API Change
 
-- `TokenRequest` and `TokenRequestProjection` features have been promoted to GA. This feature allows generating service account tokens that are not visible in Secret objects and are tied to the lifetime of a Pod object. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection for details on configuring and using this feature. The `TokenRequest` and `TokenRequestProjection` feature gates will be removed in v1.21.
-  - kubeadm's kube-apiserver Pod manifest now includes the following flags by default "--service-account-key-file", "--service-account-signing-key-file", "--service-account-issuer". ([#93258](https://github.com/kubernetes/kubernetes/pull/93258), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle, Storage and Testing]
-- A new `nofuzz` go build tag now disables gofuzz support. Release binaries enable this. ([#92491](https://github.com/kubernetes/kubernetes/pull/92491), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery]
-- Add WindowsContainerResources and Annotations to CRI-API UpdateContainerResourcesRequest ([#95741](https://github.com/kubernetes/kubernetes/pull/95741), [@katiewasnothere](https://github.com/katiewasnothere)) [SIG Node]
-- Add a `serving` and `terminating` condition to the EndpointSlice API.
-  `serving` tracks the readiness of endpoints regardless of their terminating state. This is distinct from `ready` since `ready` is only true when pods are not terminating. 
-  `terminating` is true when an endpoint is terminating. For pods this is any endpoint with a deletion timestamp. ([#92968](https://github.com/kubernetes/kubernetes/pull/92968), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
-- Add dual-stack Services (alpha).  This is a BREAKING CHANGE to an alpha API.
-  It changes the dual-stack API wrt Service from a single ipFamily field to 3
-  fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack),
-  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
-  clusterIP).  Most users do not need to set anything at all, defaulting will
-  handle it for them.  Services are single-stack unless the user asks for
-  dual-stack.  This is all gated by the "IPv6DualStack" feature gate. ([#91824](https://github.com/kubernetes/kubernetes/pull/91824), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Add support for hugepages to downward API ([#86102](https://github.com/kubernetes/kubernetes/pull/86102), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Adds kubelet alpha feature, `GracefulNodeShutdown` which makes kubelet aware of node system shutdowns and result in graceful termination of pods during a system shutdown. ([#96129](https://github.com/kubernetes/kubernetes/pull/96129), [@bobbypage](https://github.com/bobbypage)) [SIG Node]
-- AppProtocol is now GA for Endpoints and Services. The ServiceAppProtocol feature gate will be deprecated in 1.21. ([#96327](https://github.com/kubernetes/kubernetes/pull/96327), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Automatic allocation of NodePorts for services with type LoadBalancer can now be disabled by setting the (new) parameter
-  Service.spec.allocateLoadBalancerNodePorts=false. The default is to allocate NodePorts for services with type LoadBalancer which is the existing behavior. ([#92744](https://github.com/kubernetes/kubernetes/pull/92744), [@uablrek](https://github.com/uablrek)) [SIG Apps and Network]
-- Certain fields on  Service objects will be automatically cleared when changing the service's `type` to a mode that does not need those fields.  For example, changing from type=LoadBalancer to type=ClusterIP will clear the NodePort assignments, rather than forcing the user to clear them. ([#95196](https://github.com/kubernetes/kubernetes/pull/95196), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, Network and Testing]
-- Document that ServiceTopology feature is required to use `service.spec.topologyKeys`. ([#96528](https://github.com/kubernetes/kubernetes/pull/96528), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
-- EndpointSlice has a new NodeName field guarded by the EndpointSliceNodeName feature gate.
-  - EndpointSlice topology field will be deprecated in an upcoming release.
-  - EndpointSlice "IP" address type is formally removed after being deprecated in Kubernetes 1.17.
-  - The discovery.k8s.io/v1alpha1 API is deprecated and will be removed in Kubernetes 1.21. ([#96440](https://github.com/kubernetes/kubernetes/pull/96440), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps and Network]
-- External facing API podresources is now available under k8s.io/kubelet/pkg/apis/ ([#92632](https://github.com/kubernetes/kubernetes/pull/92632), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node and Testing]
-- Fewer candidates are enumerated for preemption to improve performance in large clusters. ([#94814](https://github.com/kubernetes/kubernetes/pull/94814), [@adtac](https://github.com/adtac))
-- Fix conversions for custom metrics. ([#94481](https://github.com/kubernetes/kubernetes/pull/94481), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- GPU metrics provided by kubelet are now disabled by default. ([#95184](https://github.com/kubernetes/kubernetes/pull/95184), [@RenaudWasTaken](https://github.com/RenaudWasTaken))
-- If BoundServiceAccountTokenVolume is enabled, cluster admins can use metric `serviceaccount_stale_tokens_total` to monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off extended tokens by starting `kube-apiserver` with flag `--service-account-extend-token-expiration=false` ([#96273](https://github.com/kubernetes/kubernetes/pull/96273), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Auth]
-- Introduce alpha support for exec-based container registry credential provider plugins in the kubelet. ([#94196](https://github.com/kubernetes/kubernetes/pull/94196), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Release]
-- Introduces a metric source for HPAs which allows scaling based on container resource usage. ([#90691](https://github.com/kubernetes/kubernetes/pull/90691), [@arjunrn](https://github.com/arjunrn)) [SIG API Machinery, Apps, Autoscaling and CLI]
-- Kube-apiserver now deletes expired kube-apiserver Lease objects:
-  - The feature is under feature gate `APIServerIdentity`.
-  - A flag is added to kube-apiserver: `identity-lease-garbage-collection-check-period-seconds` ([#95895](https://github.com/kubernetes/kubernetes/pull/95895), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Apps, Auth and Testing]
-- Kube-controller-manager: volume plugins can be restricted from contacting local and loopback addresses by setting `--volume-host-allow-local-loopback=false`, or from contacting specific CIDR ranges by setting `--volume-host-cidr-denylist` (for example, `--volume-host-cidr-denylist=127.0.0.1/28,feed::/16`) ([#91785](https://github.com/kubernetes/kubernetes/pull/91785), [@mattcary](https://github.com/mattcary)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Migrate scheduler, controller-manager and cloud-controller-manager to use LeaseLock ([#94603](https://github.com/kubernetes/kubernetes/pull/94603), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, Apps, Cloud Provider and Scheduling]
-- Modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly ([#94182](https://github.com/kubernetes/kubernetes/pull/94182), [@mattfenwick](https://github.com/mattfenwick)) [SIG API Machinery, Apps, Auth, Network and Node]
-- Move configurable fsgroup change policy for pods to beta ([#96376](https://github.com/kubernetes/kubernetes/pull/96376), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]
-- New flag is introduced, i.e. --topology-manager-scope=container|pod. 
-  The default value is the "container" scope. ([#92967](https://github.com/kubernetes/kubernetes/pull/92967), [@cezaryzukowski](https://github.com/cezaryzukowski)) [SIG Instrumentation, Node and Testing]
-- New parameter `defaultingType` for `PodTopologySpread` plugin allows to use k8s defined or user provided default constraints ([#95048](https://github.com/kubernetes/kubernetes/pull/95048), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- NodeAffinity plugin can be configured with AddedAffinity. ([#96202](https://github.com/kubernetes/kubernetes/pull/96202), [@alculquicondor](https://github.com/alculquicondor)) [SIG Node, Scheduling and Testing]
-- Promote RuntimeClass feature to GA.
-  Promote node.k8s.io API groups from v1beta1 to v1. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-- Reminder: The labels "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" are deprecated in favor of "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" respectively.  All users of the "failure-domain.beta..." labels should switch to the "topology..." equivalents. ([#96033](https://github.com/kubernetes/kubernetes/pull/96033), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, CLI, Cloud Provider, Network, Node, Scheduling, Storage and Testing]
-- Server Side Apply now treats LabelSelector fields as atomic (meaning the entire selector is managed by a single writer and updated together), since they contain interrelated and inseparable fields that do not merge in intuitive ways. ([#93901](https://github.com/kubernetes/kubernetes/pull/93901), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Storage and Testing]
-- Services will now have a `clusterIPs` field to go with `clusterIP`.  `clusterIPs[0]` is a synonym for `clusterIP` and will be syncronized on create and update operations. ([#95894](https://github.com/kubernetes/kubernetes/pull/95894), [@thockin](https://github.com/thockin)) [SIG Network]
-- The ServiceAccountIssuerDiscovery feature gate is now Beta and enabled by default. ([#91921](https://github.com/kubernetes/kubernetes/pull/91921), [@mtaufen](https://github.com/mtaufen)) [SIG Auth]
-- The status of v1beta1 CRDs without "preserveUnknownFields:false" now shows a violation, "spec.preserveUnknownFields: Invalid value: true: must be false". ([#93078](https://github.com/kubernetes/kubernetes/pull/93078), [@vareti](https://github.com/vareti))
-- The usage of mixed protocol values in the same LoadBalancer Service is possible if the new feature gate MixedProtocolLBService is enabled. The feature gate is disabled by default. The user has to enable it for the API Server. ([#94028](https://github.com/kubernetes/kubernetes/pull/94028), [@janosi](https://github.com/janosi)) [SIG API Machinery and Apps]
-- This PR will introduce a feature gate CSIServiceAccountToken with two additional fields in `CSIDriverSpec`. ([#93130](https://github.com/kubernetes/kubernetes/pull/93130), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Users can try the cronjob controller v2 using the feature gate. This will be the default controller in future releases. ([#93370](https://github.com/kubernetes/kubernetes/pull/93370), [@alaypatel07](https://github.com/alaypatel07)) [SIG API Machinery, Apps, Auth and Testing]
-- VolumeSnapshotDataSource moves to GA in 1.20 release ([#95282](https://github.com/kubernetes/kubernetes/pull/95282), [@xing-yang](https://github.com/xing-yang)) [SIG Apps]
-- WinOverlay feature graduated to beta ([#94807](https://github.com/kubernetes/kubernetes/pull/94807), [@ksubrmnn](https://github.com/ksubrmnn)) [SIG Windows]
+- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
+  2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
+- Add Probe-level terminationGracePeriodSeconds field ([#99375](https://github.com/kubernetes/kubernetes/pull/99375), [@ehashman](https://github.com/ehashman)) [SIG API Machinery, Apps, Node and Testing]
+- Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed`. This is an alpha field and is only honored by servers with the `IndexedJob` feature gate enabled. ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- Adds support for endPort field in NetworkPolicy ([#97058](https://github.com/kubernetes/kubernetes/pull/97058), [@rikatz](https://github.com/rikatz)) [SIG Apps and Network]
+- CSIServiceAccountToken graduates to Beta and enabled by default. ([#99298](https://github.com/kubernetes/kubernetes/pull/99298), [@zshihang](https://github.com/zshihang))
+- Cluster admins can now turn off `/debug/pprof` and `/debug/flags/v` endpoint in kubelet by setting `enableProfilingHandler` and `enableDebugFlagsHandler` to `false` in the Kubelet configuration file. Options `enableProfilingHandler` and `enableDebugFlagsHandler` can be set to `true` only when `enableDebuggingHandlers` is also set to `true`. ([#98458](https://github.com/kubernetes/kubernetes/pull/98458), [@SaranBalaji90](https://github.com/SaranBalaji90))
+- DaemonSets accept a MaxSurge integer or percent on their rolling update strategy that will launch the updated pod on nodes and wait for those pods to go ready before marking the old out-of-date pods as deleted. This allows workloads to avoid downtime during upgrades when deployed using DaemonSets. This feature is alpha and is behind the DaemonSetUpdateSurge feature gate. ([#96441](https://github.com/kubernetes/kubernetes/pull/96441), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps and Testing]
+- Enable SPDY pings to keep connections alive, so that `kubectl exec` and `kubectl portforward` won't be interrupted. ([#97083](https://github.com/kubernetes/kubernetes/pull/97083), [@knight42](https://github.com/knight42)) [SIG API Machinery and CLI]
+- FieldManager no longer owns fields that get reset before the object is persisted (e.g. "status wiping"). ([#99661](https://github.com/kubernetes/kubernetes/pull/99661), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Auth and Testing]
+- Fixes server-side apply for APIService resources. ([#98576](https://github.com/kubernetes/kubernetes/pull/98576), [@kevindelgado](https://github.com/kevindelgado))
+- Generic ephemeral volumes are beta. ([#99643](https://github.com/kubernetes/kubernetes/pull/99643), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Node, Storage and Testing]
+- Hugepages request values are limited to integer multiples of the page size. ([#98515](https://github.com/kubernetes/kubernetes/pull/98515), [@lala123912](https://github.com/lala123912)) [SIG Apps]
+- Implement the GetAvailableResources in the podresources API. ([#95734](https://github.com/kubernetes/kubernetes/pull/95734), [@fromanirh](https://github.com/fromanirh)) [SIG Instrumentation, Node and Testing]
+- IngressClass resource can now reference a resource in a specific namespace 
+  for implementation-specific configuration (previously only Cluster-level resources were allowed). 
+  This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi))
+- Jobs API has a new `.spec.suspend` field that can be used to suspend and resume Jobs. This is an alpha field which is only honored by servers with the `SuspendJob` feature gate enabled. ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac))
+- Kubelet Graceful Node Shutdown feature graduates to Beta and enabled by default. ([#99735](https://github.com/kubernetes/kubernetes/pull/99735), [@bobbypage](https://github.com/bobbypage))
+- Kubernetes is now built using go1.15.7 ([#98363](https://github.com/kubernetes/kubernetes/pull/98363), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Node, Release and Testing]
+- Namespace API objects now have a `kubernetes.io/metadata.name` label matching their metadata.name field to allow selecting any namespace by its name using a label selector. ([#96968](https://github.com/kubernetes/kubernetes/pull/96968), [@jayunit100](https://github.com/jayunit100)) [SIG API Machinery, Apps, Cloud Provider, Storage and Testing]
+- One new field "InternalTrafficPolicy" in Service is added.
+  It specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only.
+  "Cluster" routes internal traffic to a Service to all endpoints.
+  "Local" routes traffic to node-local endpoints only, and traffic is dropped if no node-local endpoints are ready.
+  The default value is "Cluster". ([#96600](https://github.com/kubernetes/kubernetes/pull/96600), [@maplain](https://github.com/maplain)) [SIG API Machinery, Apps and Network]
+- PodDisruptionBudget API objects can now contain conditions in status. ([#98127](https://github.com/kubernetes/kubernetes/pull/98127), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- PodSecurityPolicy only stores "generic" as allowed volume type if the GenericEphemeralVolume feature gate is enabled ([#98918](https://github.com/kubernetes/kubernetes/pull/98918), [@pohly](https://github.com/pohly)) [SIG Auth and Security]
+- Promote CronJobs to batch/v1 ([#99423](https://github.com/kubernetes/kubernetes/pull/99423), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+- Promote Immutable Secrets/ConfigMaps feature to Stable. This allows to set `immutable` field in Secret or ConfigMap object to mark their contents as immutable. ([#97615](https://github.com/kubernetes/kubernetes/pull/97615), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Architecture, Node and Testing]
+- Remove support for building Kubernetes with bazel. ([#99561](https://github.com/kubernetes/kubernetes/pull/99561), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Scheduling, Storage, Testing and Windows]
+- Scheduler extender filter interface now can report unresolvable failed nodes in the new field `FailedAndUnresolvableNodes` of  `ExtenderFilterResult` struct. Nodes in this map will be skipped in the preemption phase. ([#92866](https://github.com/kubernetes/kubernetes/pull/92866), [@cofyc](https://github.com/cofyc)) [SIG Scheduling]
+- Services can specify loadBalancerClass to use a custom load balancer ([#98277](https://github.com/kubernetes/kubernetes/pull/98277), [@XudongLiuHarold](https://github.com/XudongLiuHarold))
+- Storage capacity tracking (= the CSIStorageCapacity feature) graduates to Beta and enabled by default, storage.k8s.io/v1alpha1/VolumeAttachment and storage.k8s.io/v1alpha1/CSIStorageCapacity objects are deprecated ([#99641](https://github.com/kubernetes/kubernetes/pull/99641), [@pohly](https://github.com/pohly))
+- Support for Indexed Job: a Job that is considered completed when Pods associated to indexes from 0 to (.spec.completions-1) have succeeded. ([#98812](https://github.com/kubernetes/kubernetes/pull/98812), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- The BoundServiceAccountTokenVolume feature has been promoted to beta, and enabled by default.
+  - This changes the tokens provided to containers at `/var/run/secrets/kubernetes.io/serviceaccount/token` to be time-limited, auto-refreshed, and invalidated when the containing pod is deleted.
+  - Clients should reload the token from disk periodically (once per minute is recommended) to ensure they continue to use a valid token. `k8s.io/client-go` version v11.0.0+ and v0.15.0+ reload tokens automatically.
+  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be shortened to 1 hour by starting `kube-apiserver` with `--service-account-extend-token-expiration=false`. ([#95667](https://github.com/kubernetes/kubernetes/pull/95667), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle and Testing]
+- The EndpointSlice Controllers are now GA. The `EndpointSliceController` will not populate the `deprecatedTopology` field and will only provide topology information through the `zone` and `nodeName` fields. ([#99870](https://github.com/kubernetes/kubernetes/pull/99870), [@swetharepakula](https://github.com/swetharepakula))
+- The Endpoints controller will now set the `endpoints.kubernetes.io/over-capacity` annotation to "warning" when an Endpoints resource contains more than 1000 addresses. In a future release, the controller will truncate Endpoints that exceed this limit. The EndpointSlice API can be used to support significantly larger number of addresses. ([#99975](https://github.com/kubernetes/kubernetes/pull/99975), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- The PodDisruptionBudget API has been promoted to policy/v1 with no schema changes. The only functional change is that an empty selector (`{}`) written to a policy/v1 PodDisruptionBudget now selects all pods in the namespace. The behavior of the policy/v1beta1 API remains unchanged. The policy/v1beta1 PodDisruptionBudget API is deprecated and will no longer be served in 1.25+. ([#99290](https://github.com/kubernetes/kubernetes/pull/99290), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- The `EndpointSlice` API is now GA. The `EndpointSlice` topology field has been removed from the GA API and will be replaced by a new per Endpoint Zone field. If the topology field was previously used, it will be converted into an annotation in the v1 Resource. The `discovery.k8s.io/v1alpha1` API is removed. ([#99662](https://github.com/kubernetes/kubernetes/pull/99662), [@swetharepakula](https://github.com/swetharepakula))
+- The `controller.kubernetes.io/pod-deletion-cost` annotation can be set to offer a hint on the cost of deleting a `Pod` compared to other pods belonging to the same ReplicaSet. Pods with lower deletion cost are deleted first. This is an alpha feature. ([#99163](https://github.com/kubernetes/kubernetes/pull/99163), [@ahg-g](https://github.com/ahg-g))
+- The kube-apiserver now resets `managedFields` that got corrupted by a mutating admission controller. ([#98074](https://github.com/kubernetes/kubernetes/pull/98074), [@kwiesmueller](https://github.com/kwiesmueller))
+- Topology Aware Hints are now available in alpha and can be enabled with the `TopologyAwareHints` feature gate. ([#99522](https://github.com/kubernetes/kubernetes/pull/99522), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Instrumentation, Network and Testing]
+- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#97099](https://github.com/kubernetes/kubernetes/pull/97099), [@pacoxu](https://github.com/pacoxu)) [SIG CLI]
 
 ### Feature
 
-- **Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.**:
-- A new metric `apiserver_request_filter_duration_seconds` has been introduced that 
-  measures request filter latency in seconds. ([#95207](https://github.com/kubernetes/kubernetes/pull/95207), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Instrumentation]
-- A new set of alpha metrics are reported by the Kubernetes scheduler under the `/metrics/resources` endpoint that allow administrators to easily see the resource consumption (requests and limits for all resources on the pods) and compare it to actual pod usage or node capacity. ([#94866](https://github.com/kubernetes/kubernetes/pull/94866), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Instrumentation, Node and Scheduling]
-- Add --experimental-logging-sanitization flag enabling runtime protection from leaking sensitive data in logs ([#96370](https://github.com/kubernetes/kubernetes/pull/96370), [@serathius](https://github.com/serathius)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Add a StorageVersionAPI feature gate that makes API server update storageversions before serving certain write requests. 
-  This feature allows the storage migrator to manage storage migration for built-in resources. 
-  Enabling internal.apiserver.k8s.io/v1alpha1 API and APIServerIdentity feature gate are required to use this feature. ([#93873](https://github.com/kubernetes/kubernetes/pull/93873), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Auth and Testing]
-- Add a metric for time taken to perform recursive permission change ([#95866](https://github.com/kubernetes/kubernetes/pull/95866), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
-- Add a new `vSphere` metric: `cloudprovider_vsphere_vcenter_versions`. It's content show `vCenter` hostnames with the associated server version. ([#94526](https://github.com/kubernetes/kubernetes/pull/94526), [@Danil-Grigorev](https://github.com/Danil-Grigorev)) [SIG Cloud Provider and Instrumentation]
-- Add a new flag to set priority for the kubelet on Windows nodes so that workloads cannot overwhelm the node there by disrupting kubelet process. ([#96051](https://github.com/kubernetes/kubernetes/pull/96051), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node and Windows]
-- Add feature to size memory backed volumes ([#94444](https://github.com/kubernetes/kubernetes/pull/94444), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Storage and Testing]
-- Add foreground cascading deletion to kubectl with the new `kubectl delete foreground|background|orphan` option. ([#93384](https://github.com/kubernetes/kubernetes/pull/93384), [@zhouya0](https://github.com/zhouya0))
-- Add metrics for azure service operations (route and loadbalancer). ([#94124](https://github.com/kubernetes/kubernetes/pull/94124), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider and Instrumentation]
-- Add network rule support in Azure account creation. ([#94239](https://github.com/kubernetes/kubernetes/pull/94239), [@andyzhangx](https://github.com/andyzhangx))
-- Add node_authorizer_actions_duration_seconds metric that can be used to estimate load to node authorizer. ([#92466](https://github.com/kubernetes/kubernetes/pull/92466), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Auth and Instrumentation]
-- Add pod_ based CPU and memory metrics to Kubelet's  /metrics/resource endpoint ([#95839](https://github.com/kubernetes/kubernetes/pull/95839), [@egernst](https://github.com/egernst)) [SIG Instrumentation, Node and Testing]
-- Added `get-users` and `delete-user` to the `kubectl config` subcommand ([#89840](https://github.com/kubernetes/kubernetes/pull/89840), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-- Added counter metric "apiserver_request_self" to count API server self-requests with labels for verb, resource, and subresource. ([#94288](https://github.com/kubernetes/kubernetes/pull/94288), [@LogicalShark](https://github.com/LogicalShark)) [SIG API Machinery, Auth, Instrumentation and Scheduling]
-- Added new k8s.io/component-helpers repository providing shared helper code for (core) components. ([#92507](https://github.com/kubernetes/kubernetes/pull/92507), [@ingvagabund](https://github.com/ingvagabund)) [SIG Apps, Node, Release and Scheduling]
-- Adds `create ingress` command to `kubectl` ([#78153](https://github.com/kubernetes/kubernetes/pull/78153), [@amimof](https://github.com/amimof)) [SIG CLI and Network]
-- Adds a headless service on node-local-cache addon. ([#88412](https://github.com/kubernetes/kubernetes/pull/88412), [@stafot](https://github.com/stafot)) [SIG Cloud Provider and Network]
-- Allow cross compilation of kubernetes on different platforms. ([#94403](https://github.com/kubernetes/kubernetes/pull/94403), [@bnrjee](https://github.com/bnrjee)) [SIG Release]
-- Azure: Support multiple services sharing one IP address ([#94991](https://github.com/kubernetes/kubernetes/pull/94991), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- CRDs: For structural schemas, non-nullable null map fields will now be dropped and defaulted if a default is available. null items in list will continue being preserved, and fail validation if not nullable. ([#95423](https://github.com/kubernetes/kubernetes/pull/95423), [@apelisse](https://github.com/apelisse)) [SIG API Machinery]
-- Changed: default "Accept: */*" header added to HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes (https://github.com/kubernetes/website/pull/24756) ([#95641](https://github.com/kubernetes/kubernetes/pull/95641), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Client-go credential plugins can now be passed in the current cluster information via the KUBERNETES_EXEC_INFO environment variable. ([#95489](https://github.com/kubernetes/kubernetes/pull/95489), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
-- Command to start network proxy changes from 'KUBE_ENABLE_EGRESS_VIA_KONNECTIVITY_SERVICE ./cluster/kube-up.sh' to 'KUBE_ENABLE_KONNECTIVITY_SERVICE=true ./hack/kube-up.sh' ([#92669](https://github.com/kubernetes/kubernetes/pull/92669), [@Jefftree](https://github.com/Jefftree)) [SIG Cloud Provider]
-- Configure AWS LoadBalancer health check protocol via service annotations. ([#94546](https://github.com/kubernetes/kubernetes/pull/94546), [@kishorj](https://github.com/kishorj))
-- DefaultPodTopologySpread graduated to Beta. The feature gate is enabled by default. ([#95631](https://github.com/kubernetes/kubernetes/pull/95631), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
-- E2e test for PodFsGroupChangePolicy ([#96247](https://github.com/kubernetes/kubernetes/pull/96247), [@saikat-royc](https://github.com/saikat-royc)) [SIG Storage and Testing]
-- Ephemeral containers now apply the same API defaults as initContainers and containers ([#94896](https://github.com/kubernetes/kubernetes/pull/94896), [@wawa0210](https://github.com/wawa0210)) [SIG Apps and CLI]
-- Gradudate the Pod Resources API to G.A
-  Introduces the pod_resources_endpoint_requests_total metric which tracks the total number of requests to the pod resources API ([#92165](https://github.com/kubernetes/kubernetes/pull/92165), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Instrumentation, Node and Testing]
-- In dual-stack bare-metal clusters, you can now pass dual-stack IPs to `kubelet --node-ip`.
-  eg: `kubelet --node-ip 10.1.0.5,fd01::0005`. This is not yet supported for non-bare-metal
-  clusters.
-  
-  In dual-stack clusters where nodes have dual-stack addresses, hostNetwork pods
-  will now get dual-stack PodIPs. ([#95239](https://github.com/kubernetes/kubernetes/pull/95239), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Introduce api-extensions category which will return: mutating admission configs, validating admission configs, CRDs and APIServices when used in kubectl get, for example. ([#95603](https://github.com/kubernetes/kubernetes/pull/95603), [@soltysh](https://github.com/soltysh)) [SIG API Machinery]
-- Introduces a new GCE specific cluster creation variable KUBE_PROXY_DISABLE. When set to true, this will skip over the creation of kube-proxy (whether the daemonset or static pod). This can be used to control the lifecycle of kube-proxy separately from the lifecycle of the nodes. ([#91977](https://github.com/kubernetes/kubernetes/pull/91977), [@varunmar](https://github.com/varunmar)) [SIG Cloud Provider]
-- Kube-apiserver now maintains a Lease object to identify itself: 
-  - The feature is under feature gate `APIServerIdentity`. 
-  - Two flags are added to kube-apiserver: `identity-lease-duration-seconds`, `identity-lease-renew-interval-seconds` ([#95533](https://github.com/kubernetes/kubernetes/pull/95533), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Kube-apiserver: The timeout used when making health check calls to etcd can now be configured with `--etcd-healthcheck-timeout`. The default timeout is 2 seconds, matching the previous behavior. ([#93244](https://github.com/kubernetes/kubernetes/pull/93244), [@Sh4d1](https://github.com/Sh4d1)) [SIG API Machinery]
-- Kube-apiserver: added support for compressing rotated audit log files with `--audit-log-compress` ([#94066](https://github.com/kubernetes/kubernetes/pull/94066), [@lojies](https://github.com/lojies)) [SIG API Machinery and Auth]
-- Kubeadm now prints warnings instead of throwing errors if the current system time is outside of the NotBefore and NotAfter bounds of a loaded certificate.  ([#94504](https://github.com/kubernetes/kubernetes/pull/94504), [@neolit123](https://github.com/neolit123))
-- Kubeadm: Add a preflight check that the control-plane node has at least 1700MB of RAM ([#93275](https://github.com/kubernetes/kubernetes/pull/93275), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--cluster-name" flag to the "kubeadm alpha kubeconfig user" to allow configuring the cluster name in the generated kubeconfig file ([#93992](https://github.com/kubernetes/kubernetes/pull/93992), [@prabhu43](https://github.com/prabhu43)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--kubeconfig" flag to the "kubeadm init phase upload-certs" command to allow users to pass a custom location for a kubeconfig file. ([#94765](https://github.com/kubernetes/kubernetes/pull/94765), [@zhanw15](https://github.com/zhanw15)) [SIG Cluster Lifecycle]
-- Kubeadm: make etcd pod request 100m CPU, 100Mi memory and 100Mi ephemeral_storage by default ([#94479](https://github.com/kubernetes/kubernetes/pull/94479), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubeadm: make the command "kubeadm alpha kubeconfig user" accept a "--config" flag and remove the following flags:
-  - apiserver-advertise-address / apiserver-bind-port: use either localAPIEndpoint from InitConfiguration or controlPlaneEndpoint from ClusterConfiguration.
-  - cluster-name: use clusterName from ClusterConfiguration
-  - cert-dir: use certificatesDir from ClusterConfiguration ([#94879](https://github.com/kubernetes/kubernetes/pull/94879), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubectl create now supports creating ingress objects. ([#94327](https://github.com/kubernetes/kubernetes/pull/94327), [@rikatz](https://github.com/rikatz)) [SIG CLI and Network]
-- Kubectl rollout history sts/sts-name --revision=some-revision will start showing the detailed view of  the sts on that specified revision ([#86506](https://github.com/kubernetes/kubernetes/pull/86506), [@dineshba](https://github.com/dineshba)) [SIG CLI]
-- Kubectl: Previously users cannot provide arguments to a external diff tool via KUBECTL_EXTERNAL_DIFF env. This release now allow users to specify args to KUBECTL_EXTERNAL_DIFF env. ([#95292](https://github.com/kubernetes/kubernetes/pull/95292), [@dougsland](https://github.com/dougsland)) [SIG CLI]
-- Kubemark now supports both real and hollow nodes in a single cluster. ([#93201](https://github.com/kubernetes/kubernetes/pull/93201), [@ellistarn](https://github.com/ellistarn)) [SIG Scalability]
-- Kubernetes E2E test image manifest lists now contain Windows images. ([#77398](https://github.com/kubernetes/kubernetes/pull/77398), [@claudiubelu](https://github.com/claudiubelu)) [SIG Testing and Windows]
-- Kubernetes is now built using go1.15.2
-  - build: Update to k/repo-infra@v0.1.1 (supports go1.15.2)
-  - build: Use go-runner:buster-v2.0.1 (built using go1.15.1)
-  - bazel: Replace --features with Starlark build settings flag
-  - hack/lib/util.sh: some bash cleanups
-    
-    - switched one spot to use kube::logging
-    - make kube::util::find-binary return an error when it doesn't find
-      anything so that hack scripts fail fast instead of with '' binary not
-      found errors.
-    - this required deleting some genfeddoc stuff. the binary no longer
-      exists in k/k repo since we removed federation/, and I don't see it
-      in https://github.com/kubernetes-sigs/kubefed/ either. I'm assuming
-      that it's gone for good now.
-  
-  - bazel: output go_binary rule directly from go_binary_conditional_pure
-    
-    From: [@mikedanese](https://github.com/mikedanese):
-    Instead of aliasing. Aliases are annoying in a number of ways. This is
-    specifically bugging me now because they make the action graph harder to
-    analyze programmatically. By using aliases here, we would need to handle
-    potentially aliased go_binary targets and dereference to the effective
-    target.
-  
-    The comment references an issue with `pure = select(...)` which appears
-    to be resolved considering this now builds.
-  
-  - make kube::util::find-binary not dependent on bazel-out/ structure
-  
-    Implement an aspect that outputs go_build_mode metadata for go binaries,
-    and use that during binary selection. ([#94449](https://github.com/kubernetes/kubernetes/pull/94449), [@justaugustus](https://github.com/justaugustus)) [SIG Architecture, CLI, Cluster Lifecycle, Node, Release and Testing]
-- Kubernetes is now built using go1.15.5
-  - build: Update to k/repo-infra@v0.1.2 (supports go1.15.5) ([#95776](https://github.com/kubernetes/kubernetes/pull/95776), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
-- New default scheduling plugins order reduces scheduling and preemption latency when taints and node affinity are used ([#95539](https://github.com/kubernetes/kubernetes/pull/95539), [@soulxu](https://github.com/soulxu)) [SIG Scheduling]
-- Only update Azure data disks when attach/detach ([#94265](https://github.com/kubernetes/kubernetes/pull/94265), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Promote SupportNodePidsLimit to GA to provide node-to-pod PID isolation.
-  Promote SupportPodPidsLimit to GA to provide ability to limit PIDs per pod. ([#94140](https://github.com/kubernetes/kubernetes/pull/94140), [@derekwaynecarr](https://github.com/derekwaynecarr))
-- SCTP support in API objects (Pod, Service, NetworkPolicy) is now GA.
-  Note that this has no effect on whether SCTP is enabled on nodes at the kernel level,
-  and note that some cloud platforms and network plugins do not support SCTP traffic. ([#95566](https://github.com/kubernetes/kubernetes/pull/95566), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
-- Scheduler now ignores Pod update events if the resourceVersion of old and new Pods are identical. ([#96071](https://github.com/kubernetes/kubernetes/pull/96071), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Scheduling Framework: expose Run[Pre]ScorePlugins functions to PreemptionHandle which can be used in PostFilter extention point. ([#93534](https://github.com/kubernetes/kubernetes/pull/93534), [@everpeace](https://github.com/everpeace)) [SIG Scheduling and Testing]
-- SelectorSpreadPriority maps to PodTopologySpread plugin when DefaultPodTopologySpread feature is enabled ([#95448](https://github.com/kubernetes/kubernetes/pull/95448), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Send GCE node startup scripts logs to console and journal. ([#95311](https://github.com/kubernetes/kubernetes/pull/95311), [@karan](https://github.com/karan))
-- SetHostnameAsFQDN has been graduated to Beta and therefore it is enabled by default. ([#95267](https://github.com/kubernetes/kubernetes/pull/95267), [@javidiaz](https://github.com/javidiaz)) [SIG Node]
-- Support [service.beta.kubernetes.io/azure-pip-ip-tags] annotations to allow customers to specify ip-tags to influence public-ip creation in Azure [Tag1=Value1, Tag2=Value2, etc.] ([#94114](https://github.com/kubernetes/kubernetes/pull/94114), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Support custom tags for cloud provider managed resources ([#96450](https://github.com/kubernetes/kubernetes/pull/96450), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support customize load balancer health probe protocol and request path ([#96338](https://github.com/kubernetes/kubernetes/pull/96338), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support for Windows container images (OS Versions: 1809, 1903, 1909, 2004) was added the pause:3.4 image. ([#91452](https://github.com/kubernetes/kubernetes/pull/91452), [@claudiubelu](https://github.com/claudiubelu)) [SIG Node, Release and Windows]
-- Support multiple standard load balancers in one cluster ([#96111](https://github.com/kubernetes/kubernetes/pull/96111), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- The beta `RootCAConfigMap` feature gate is enabled by default and causes kube-controller-manager to publish a "kube-root-ca.crt" ConfigMap to every namespace. This ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver. ([#96197](https://github.com/kubernetes/kubernetes/pull/96197), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth and Testing]
-- The kubelet_runtime_operations_duration_seconds metric buckets were set to 0.005 0.0125 0.03125 0.078125 0.1953125 0.48828125 1.220703125 3.0517578125 7.62939453125 19.073486328125 47.6837158203125 119.20928955078125 298.0232238769531 and 745.0580596923828 seconds ([#96054](https://github.com/kubernetes/kubernetes/pull/96054), [@alvaroaleman](https://github.com/alvaroaleman)) [SIG Instrumentation and Node]
-- There is a new pv_collector_total_pv_count metric that counts persistent volumes by the volume plugin name and volume mode. ([#95719](https://github.com/kubernetes/kubernetes/pull/95719), [@tsmetana](https://github.com/tsmetana)) [SIG Apps, Instrumentation, Storage and Testing]
-- Volume snapshot e2e test to validate PVC and VolumeSnapshotContent finalizer ([#95863](https://github.com/kubernetes/kubernetes/pull/95863), [@RaunakShah](https://github.com/RaunakShah)) [SIG Cloud Provider, Storage and Testing]
-- Warns user when executing kubectl apply/diff to resource currently being deleted. ([#95544](https://github.com/kubernetes/kubernetes/pull/95544), [@SaiHarshaK](https://github.com/SaiHarshaK)) [SIG CLI]
-- `kubectl alpha debug` has graduated to beta and is now `kubectl debug`. ([#96138](https://github.com/kubernetes/kubernetes/pull/96138), [@verb](https://github.com/verb)) [SIG CLI and Testing]
-- `kubectl debug` gains support for changing container images when copying a pod for debugging, similar to how `kubectl set image` works. See `kubectl help debug` for more information. ([#96058](https://github.com/kubernetes/kubernetes/pull/96058), [@verb](https://github.com/verb)) [SIG CLI]
-
-### Documentation
-
-- Fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList ([#95117](https://github.com/kubernetes/kubernetes/pull/95117), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-- Kubelet: remove alpha warnings for CNI flags. ([#94508](https://github.com/kubernetes/kubernetes/pull/94508), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network and Node]
-- Updates docs and guidance on cloud provider InstancesV2 and Zones interface for external cloud providers:
-  - removes experimental warning for InstancesV2
-  - document that implementation of InstancesV2 will disable calls to Zones
-  - deprecate Zones in favor of InstancesV2 ([#96397](https://github.com/kubernetes/kubernetes/pull/96397), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
-
-### Failing Test
-
-- Resolves an issue running Ingress conformance tests on clusters which use finalizers on Ingress objects to manage releasing load balancer resources ([#96742](https://github.com/kubernetes/kubernetes/pull/96742), [@spencerhance](https://github.com/spencerhance)) [SIG Network and Testing]
-- The Conformance test "validates that there is no conflict between pods with same hostPort but different hostIP and protocol" now validates the connectivity to each hostPort, in addition to the functionality. ([#96627](https://github.com/kubernetes/kubernetes/pull/96627), [@aojea](https://github.com/aojea)) [SIG Scheduling and Testing]
-
-### Bug or Regression
-
-- Add kubectl wait  --ignore-not-found flag ([#90969](https://github.com/kubernetes/kubernetes/pull/90969), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Added support to kube-proxy for externalTrafficPolicy=Local setting via Direct Server Return (DSR) load balancers on Windows. ([#93166](https://github.com/kubernetes/kubernetes/pull/93166), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
-- Alter wording to describe pods using a pvc ([#95635](https://github.com/kubernetes/kubernetes/pull/95635), [@RaunakShah](https://github.com/RaunakShah)) [SIG CLI]
-- An issues preventing volume expand controller to annotate the PVC with `volume.kubernetes.io/storage-resizer` when the PVC StorageClass is already updated to the out-of-tree provisioner is now fixed. ([#94489](https://github.com/kubernetes/kubernetes/pull/94489), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery, Apps and Storage]
-- Azure ARM client: don't segfault on empty response and http error ([#94078](https://github.com/kubernetes/kubernetes/pull/94078), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- Azure armclient backoff step defaults to 1 (no retry). ([#94180](https://github.com/kubernetes/kubernetes/pull/94180), [@feiskyer](https://github.com/feiskyer))
-- Azure: fix a bug that kube-controller-manager would panic if wrong Azure VMSS name is configured ([#94306](https://github.com/kubernetes/kubernetes/pull/94306), [@knight42](https://github.com/knight42)) [SIG Cloud Provider]
-- Both apiserver_request_duration_seconds metrics and RequestReceivedTimestamp fields of an audit event now take into account the time a request spends in the apiserver request filters. ([#94903](https://github.com/kubernetes/kubernetes/pull/94903), [@tkashem](https://github.com/tkashem))
-- Build/lib/release: Explicitly use '--platform' in building server images
-  
-  When we switched to go-runner for building the apiserver,
-  controller-manager, and scheduler server components, we no longer
-  reference the individual architectures in the image names, specifically
-  in the 'FROM' directive of the server image Dockerfiles.
-  
-  As a result, server images for non-amd64 images copy in the go-runner
-  amd64 binary instead of the go-runner that matches that architecture.
-  
-  This commit explicitly sets the '--platform=linux/${arch}' to ensure
-  we're pulling the correct go-runner arch from the manifest list.
-  
-  Before:
-  `FROM ${base_image}`
-  
-  After:
-  `FROM --platform=linux/${arch} ${base_image}` ([#94552](https://github.com/kubernetes/kubernetes/pull/94552), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
-- Bump node-problem-detector version to v0.8.5 to fix OOM detection in with Linux kernels 5.1+ ([#96716](https://github.com/kubernetes/kubernetes/pull/96716), [@tosi3k](https://github.com/tosi3k)) [SIG Cloud Provider, Scalability and Testing]
-- CSIDriver object can be deployed during volume attachment. ([#93710](https://github.com/kubernetes/kubernetes/pull/93710), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Node, Storage and Testing]
-- Ceph RBD volume expansion now works even when ceph.conf was not provided. ([#92027](https://github.com/kubernetes/kubernetes/pull/92027), [@juliantaylor](https://github.com/juliantaylor))
-- Change plugin name in fsgroupapplymetrics of csi and flexvolume to distinguish different driver ([#95892](https://github.com/kubernetes/kubernetes/pull/95892), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation, Storage and Testing]
-- Change the calculation of pod UIDs so that static pods get a unique value - will cause all containers to be killed and recreated after in-place upgrade. ([#87461](https://github.com/kubernetes/kubernetes/pull/87461), [@bboreham](https://github.com/bboreham)) [SIG Node]
-- Change the mount way from systemd to normal mount except ceph and glusterfs intree-volume. ([#94916](https://github.com/kubernetes/kubernetes/pull/94916), [@smileusd](https://github.com/smileusd)) [SIG Apps, Cloud Provider, Network, Node, Storage and Testing]
-- Changes to timeout parameter handling in 1.20.0-beta.2 have been reverted to avoid breaking backwards compatibility with existing clients. ([#96727](https://github.com/kubernetes/kubernetes/pull/96727), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
-- Clear UDP conntrack entry on endpoint changes when using nodeport ([#71573](https://github.com/kubernetes/kubernetes/pull/71573), [@JacobTanenbaum](https://github.com/JacobTanenbaum)) [SIG Network]
-- Cloud node controller: handle empty providerID from getProviderID ([#95342](https://github.com/kubernetes/kubernetes/pull/95342), [@nicolehanjing](https://github.com/nicolehanjing)) [SIG Cloud Provider]
-- Disable watchcache for events ([#96052](https://github.com/kubernetes/kubernetes/pull/96052), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
-- Disabled `LocalStorageCapacityIsolation` feature gate is honored during scheduling. ([#96092](https://github.com/kubernetes/kubernetes/pull/96092), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Do not fail sorting empty elements. ([#94666](https://github.com/kubernetes/kubernetes/pull/94666), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default ([#90439](https://github.com/kubernetes/kubernetes/pull/90439), [@SataQiu](https://github.com/SataQiu)) [SIG API Machinery]
-- Duplicate owner reference entries in create/update/patch requests now get deduplicated by the API server. The client sending the request now receives a warning header in the API response. Clients should stop sending requests with duplicate owner references. The API server may reject such requests as early as 1.24. ([#96185](https://github.com/kubernetes/kubernetes/pull/96185), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery and Testing]
-- Endpoint slice controller now mirrors parent's service label to its corresponding endpoint slices. ([#94443](https://github.com/kubernetes/kubernetes/pull/94443), [@aojea](https://github.com/aojea))
-- Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null ([#94355](https://github.com/kubernetes/kubernetes/pull/94355), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Exposes and sets a default timeout for the SubjectAccessReview client for DelegatingAuthorizationOptions ([#95725](https://github.com/kubernetes/kubernetes/pull/95725), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Exposes and sets a default timeout for the TokenReview client for DelegatingAuthenticationOptions ([#96217](https://github.com/kubernetes/kubernetes/pull/96217), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Fix CVE-2020-8555 for Quobyte client connections. ([#95206](https://github.com/kubernetes/kubernetes/pull/95206), [@misterikkit](https://github.com/misterikkit)) [SIG Storage]
-- Fix IP fragmentation of UDP and TCP packets not supported issues on LoadBalancer rules ([#96464](https://github.com/kubernetes/kubernetes/pull/96464), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix a bug that DefaultPreemption plugin is disabled when using (legacy) scheduler policy. ([#96439](https://github.com/kubernetes/kubernetes/pull/96439), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
-- Fix a bug where loadbalancer deletion gets stuck because of missing resource group. ([#93962](https://github.com/kubernetes/kubernetes/pull/93962), [@phiphi282](https://github.com/phiphi282))
-- Fix a concurrent map writes error in kubelet ([#93773](https://github.com/kubernetes/kubernetes/pull/93773), [@knight42](https://github.com/knight42)) [SIG Node]
-- Fix a panic in `kubectl debug` when a pod has multiple init or ephemeral containers. ([#94580](https://github.com/kubernetes/kubernetes/pull/94580), [@kiyoshim55](https://github.com/kiyoshim55))
-- Fix a regression where kubeadm bails out with a fatal error when an optional version command line argument is supplied to the "kubeadm upgrade plan" command ([#94421](https://github.com/kubernetes/kubernetes/pull/94421), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Fix azure disk attach failure for disk size bigger than 4TB ([#95463](https://github.com/kubernetes/kubernetes/pull/95463), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix azure disk data loss issue on Windows when unmount disk ([#95456](https://github.com/kubernetes/kubernetes/pull/95456), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix azure file migration panic ([#94853](https://github.com/kubernetes/kubernetes/pull/94853), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix bug in JSON path parser where an error occurs when a range is empty ([#95933](https://github.com/kubernetes/kubernetes/pull/95933), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
-- Fix client-go prometheus metrics to correctly present the API path accessed in some environments. ([#74363](https://github.com/kubernetes/kubernetes/pull/74363), [@aanm](https://github.com/aanm)) [SIG API Machinery]
-- Fix detach azure disk issue when vm not exist ([#95177](https://github.com/kubernetes/kubernetes/pull/95177), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix etcd_object_counts metric reported by kube-apiserver ([#94773](https://github.com/kubernetes/kubernetes/pull/94773), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- Fix incorrectly reported verbs for kube-apiserver metrics for CRD objects ([#93523](https://github.com/kubernetes/kubernetes/pull/93523), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- Fix k8s.io/apimachinery/pkg/api/meta.SetStatusCondition to update ObservedGeneration ([#95961](https://github.com/kubernetes/kubernetes/pull/95961), [@KnicKnic](https://github.com/KnicKnic)) [SIG API Machinery]
-- Fix kubectl SchemaError on CRDs with schema using x-kubernetes-preserve-unknown-fields on array types. ([#94888](https://github.com/kubernetes/kubernetes/pull/94888), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Fix memory leak in kube-apiserver when underlying time goes forth and back. ([#96266](https://github.com/kubernetes/kubernetes/pull/96266), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery]
-- Fix missing csi annotations on node during parallel csinode update. ([#94389](https://github.com/kubernetes/kubernetes/pull/94389), [@pacoxu](https://github.com/pacoxu)) [SIG Storage]
-- Fix network_programming_latency metric reporting for Endpoints/EndpointSlice deletions, where we don't have correct timestamp ([#95363](https://github.com/kubernetes/kubernetes/pull/95363), [@wojtek-t](https://github.com/wojtek-t)) [SIG Network and Scalability]
-- Fix paging issues when Azure API returns empty values with non-empty nextLink ([#96211](https://github.com/kubernetes/kubernetes/pull/96211), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix pull image error from multiple ACRs using azure managed identity ([#96355](https://github.com/kubernetes/kubernetes/pull/96355), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix race condition on timeCache locks. ([#94751](https://github.com/kubernetes/kubernetes/pull/94751), [@auxten](https://github.com/auxten))
-- Fix regression on `kubectl portforward` when TCP and UCP services were configured on the same port. ([#94728](https://github.com/kubernetes/kubernetes/pull/94728), [@amorenoz](https://github.com/amorenoz))
-- Fix scheduler cache snapshot when a Node is deleted before its Pods ([#95130](https://github.com/kubernetes/kubernetes/pull/95130), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Fix the `cloudprovider_azure_api_request_duration_seconds` metric buckets to correctly capture the latency metrics. Previously, the majority of the calls would fall in the "+Inf" bucket. ([#94873](https://github.com/kubernetes/kubernetes/pull/94873), [@marwanad](https://github.com/marwanad)) [SIG Cloud Provider and Instrumentation]
-- Fix vSphere volumes that could be erroneously attached to wrong node ([#96224](https://github.com/kubernetes/kubernetes/pull/96224), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fix verb & scope reporting for kube-apiserver metrics (LIST reported instead of GET) ([#95562](https://github.com/kubernetes/kubernetes/pull/95562), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Fix vsphere detach failure for static PVs ([#95447](https://github.com/kubernetes/kubernetes/pull/95447), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fix: azure disk resize error if source does not exist ([#93011](https://github.com/kubernetes/kubernetes/pull/93011), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: detach azure disk broken on Azure Stack ([#94885](https://github.com/kubernetes/kubernetes/pull/94885), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: resize Azure disk issue when it's in attached state ([#96705](https://github.com/kubernetes/kubernetes/pull/96705), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: smb valid path error ([#95583](https://github.com/kubernetes/kubernetes/pull/95583), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Fix: use sensitiveOptions on Windows mount ([#94126](https://github.com/kubernetes/kubernetes/pull/94126), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fixed a bug causing incorrect formatting of `kubectl describe ingress`. ([#94985](https://github.com/kubernetes/kubernetes/pull/94985), [@howardjohn](https://github.com/howardjohn)) [SIG CLI and Network]
-- Fixed a bug in client-go where new clients with customized `Dial`, `Proxy`, `GetCert` config may get stale HTTP transports. ([#95427](https://github.com/kubernetes/kubernetes/pull/95427), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Fixed a bug that prevents kubectl to validate CRDs with schema using x-kubernetes-preserve-unknown-fields on object fields. ([#96369](https://github.com/kubernetes/kubernetes/pull/96369), [@gautierdelorme](https://github.com/gautierdelorme)) [SIG API Machinery and Testing]
-- Fixed a bug that prevents the use of ephemeral containers in the presence of a validating admission webhook. ([#94685](https://github.com/kubernetes/kubernetes/pull/94685), [@verb](https://github.com/verb)) [SIG Node and Testing]
-- Fixed a bug where aggregator_unavailable_apiservice metrics were reported for deleted apiservices. ([#96421](https://github.com/kubernetes/kubernetes/pull/96421), [@dgrisonnet](https://github.com/dgrisonnet)) [SIG API Machinery and Instrumentation]
-- Fixed a bug where improper storage and comparison of endpoints led to excessive API traffic from the endpoints controller ([#94112](https://github.com/kubernetes/kubernetes/pull/94112), [@damemi](https://github.com/damemi)) [SIG Apps, Network and Testing]
-- Fixed a regression which prevented pods with `docker/default` seccomp annotations from being created in 1.19 if a PodSecurityPolicy was in place which did not allow `runtime/default` seccomp profiles. ([#95985](https://github.com/kubernetes/kubernetes/pull/95985), [@saschagrunert](https://github.com/saschagrunert)) [SIG Auth]
-- Fixed bug in reflector that couldn't recover from "Too large resource version" errors with API servers 1.17.0-1.18.5 ([#94316](https://github.com/kubernetes/kubernetes/pull/94316), [@janeczku](https://github.com/janeczku)) [SIG API Machinery]
-- Fixed bug where kubectl top pod output is not sorted when --sort-by and --containers flags are used together ([#93692](https://github.com/kubernetes/kubernetes/pull/93692), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Fixed kubelet creating extra sandbox for pods with RestartPolicyOnFailure after all containers succeeded ([#92614](https://github.com/kubernetes/kubernetes/pull/92614), [@tnqn](https://github.com/tnqn)) [SIG Node and Testing]
-- Fixes an issue proxying to ipv6 pods without specifying a port ([#94834](https://github.com/kubernetes/kubernetes/pull/94834), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Network]
-- Fixes code generation for non-namespaced create subresources fake client test. ([#96586](https://github.com/kubernetes/kubernetes/pull/96586), [@Doude](https://github.com/Doude)) [SIG API Machinery]
-- Fixes high CPU usage in kubectl drain ([#95260](https://github.com/kubernetes/kubernetes/pull/95260), [@amandahla](https://github.com/amandahla)) [SIG CLI]
-- For vSphere Cloud Provider, If VM of worker node is deleted, the node will also be deleted by node controller ([#92608](https://github.com/kubernetes/kubernetes/pull/92608), [@lubronzhan](https://github.com/lubronzhan)) [SIG Cloud Provider]
-- Gracefully delete nodes when their parent scale set went missing ([#95289](https://github.com/kubernetes/kubernetes/pull/95289), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- HTTP/2 connection health check is enabled by default in all Kubernetes clients. The feature should work out-of-the-box. If needed, users can tune the feature via the HTTP2_READ_IDLE_TIMEOUT_SECONDS and HTTP2_PING_TIMEOUT_SECONDS environment variables. The feature is disabled if HTTP2_READ_IDLE_TIMEOUT_SECONDS is set to 0. ([#95981](https://github.com/kubernetes/kubernetes/pull/95981), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- If the user specifies an invalid timeout in the request URL, the request will be aborted with an HTTP 400.
-  - If the user specifies a timeout in the request URL that exceeds the maximum request deadline allowed by the apiserver, the request will be aborted with an HTTP 400. ([#96061](https://github.com/kubernetes/kubernetes/pull/96061), [@tkashem](https://github.com/tkashem)) [SIG API Machinery, Network and Testing]
-- If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn`t automatically scale the number of pods correctly ([#95647](https://github.com/kubernetes/kubernetes/pull/95647), [@JoshuaAndrew](https://github.com/JoshuaAndrew)) [SIG Apps and Autoscaling]
-- Ignore apparmor for non-linux operating systems ([#93220](https://github.com/kubernetes/kubernetes/pull/93220), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Ignore root user check when windows pod starts ([#92355](https://github.com/kubernetes/kubernetes/pull/92355), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Improve error messages related to nodePort endpoint changes conntrack entries cleanup. ([#96251](https://github.com/kubernetes/kubernetes/pull/96251), [@ravens](https://github.com/ravens)) [SIG Network]
-- In dual-stack clusters, kubelet will now set up both IPv4 and IPv6 iptables rules, which may
-  fix some problems, eg with HostPorts. ([#94474](https://github.com/kubernetes/kubernetes/pull/94474), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Increase maximum IOPS of AWS EBS io1 volume to current maximum (64,000). ([#90014](https://github.com/kubernetes/kubernetes/pull/90014), [@jacobmarble](https://github.com/jacobmarble))
-- Ipvs: ensure selected scheduler kernel modules are loaded ([#93040](https://github.com/kubernetes/kubernetes/pull/93040), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
-- K8s.io/apimachinery: runtime.DefaultUnstructuredConverter.FromUnstructured now handles converting integer fields to typed float values ([#93250](https://github.com/kubernetes/kubernetes/pull/93250), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- Kube-proxy now trims extra spaces found in loadBalancerSourceRanges to match Service validation. ([#94107](https://github.com/kubernetes/kubernetes/pull/94107), [@robscott](https://github.com/robscott)) [SIG Network]
-- Kubeadm ensures "kubeadm reset" does not unmount the root "/var/lib/kubelet" directory if it is mounted by the user. ([#93702](https://github.com/kubernetes/kubernetes/pull/93702), [@thtanaka](https://github.com/thtanaka))
-- Kubeadm now makes sure the etcd manifest is regenerated upon upgrade even when no etcd version change takes place ([#94395](https://github.com/kubernetes/kubernetes/pull/94395), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Kubeadm now warns (instead of error out) on missing "ca.key" files for root CA, front-proxy CA and etcd CA, during "kubeadm join --control-plane" if the user has provided all certificates, keys and kubeconfig files which require signing with the given CA keys. ([#94988](https://github.com/kubernetes/kubernetes/pull/94988), [@neolit123](https://github.com/neolit123))
-- Kubeadm: add missing "--experimental-patches" flag to "kubeadm init phase control-plane" ([#95786](https://github.com/kubernetes/kubernetes/pull/95786), [@Sh4d1](https://github.com/Sh4d1)) [SIG Cluster Lifecycle]
-- Kubeadm: avoid a panic when determining if the running version of CoreDNS is supported during upgrades ([#94299](https://github.com/kubernetes/kubernetes/pull/94299), [@zouyee](https://github.com/zouyee)) [SIG Cluster Lifecycle]
-- Kubeadm: ensure the etcd data directory is created with 0700 permissions during control-plane init and join ([#94102](https://github.com/kubernetes/kubernetes/pull/94102), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: fix coredns migration should be triggered when there are newdefault configs during kubeadm upgrade ([#96907](https://github.com/kubernetes/kubernetes/pull/96907), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Kubeadm: fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR ([#94555](https://github.com/kubernetes/kubernetes/pull/94555), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: for Docker as the container runtime, make the "kubeadm reset" command stop containers before removing them ([#94586](https://github.com/kubernetes/kubernetes/pull/94586), [@BedivereZero](https://github.com/BedivereZero)) [SIG Cluster Lifecycle]
-- Kubeadm: make the kubeconfig files for the kube-controller-manager and kube-scheduler use the LocalAPIEndpoint instead of the ControlPlaneEndpoint. This makes kubeadm clusters more reseliant to version skew problems during immutable upgrades: https://kubernetes.io/docs/setup/release/version-skew-policy/#kube-controller-manager-kube-scheduler-and-cloud-controller-manager ([#94398](https://github.com/kubernetes/kubernetes/pull/94398), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: relax the validation of kubeconfig server URLs. Allow the user to define custom kubeconfig server URLs without erroring out during validation of existing kubeconfig files (e.g. when using external CA mode). ([#94816](https://github.com/kubernetes/kubernetes/pull/94816), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubectl: print error if users place flags before plugin name ([#92343](https://github.com/kubernetes/kubernetes/pull/92343), [@knight42](https://github.com/knight42)) [SIG CLI]
-- Kubelet: assume that swap is disabled when `/proc/swaps` does not exist ([#93931](https://github.com/kubernetes/kubernetes/pull/93931), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
-- New Azure instance types do now have correct max data disk count information. ([#94340](https://github.com/kubernetes/kubernetes/pull/94340), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Cloud Provider and Storage]
-- Port mapping now allows the same `containerPort` of different containers to different `hostPort` without naming the mapping explicitly. ([#94494](https://github.com/kubernetes/kubernetes/pull/94494), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev))
-- Print go stack traces at -v=4 and not -v=2 ([#94663](https://github.com/kubernetes/kubernetes/pull/94663), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Recreate EndpointSlices on rapid Service creation. ([#94730](https://github.com/kubernetes/kubernetes/pull/94730), [@robscott](https://github.com/robscott))
-- Reduce volume name length for vsphere volumes ([#96533](https://github.com/kubernetes/kubernetes/pull/96533), [@gnufied](https://github.com/gnufied)) [SIG Storage]
-- Remove ready file and its directory (which is created during volume SetUp) during emptyDir volume TearDown. ([#95770](https://github.com/kubernetes/kubernetes/pull/95770), [@jingxu97](https://github.com/jingxu97)) [SIG Storage]
-- Reorganized iptables rules to fix a performance issue ([#95252](https://github.com/kubernetes/kubernetes/pull/95252), [@tssurya](https://github.com/tssurya)) [SIG Network]
-- Require feature flag CustomCPUCFSQuotaPeriod if setting a non-default cpuCFSQuotaPeriod in kubelet config. ([#94687](https://github.com/kubernetes/kubernetes/pull/94687), [@karan](https://github.com/karan)) [SIG Node]
-- Resolves a regression in 1.19+ with workloads targeting deprecated beta os/arch labels getting stuck in NodeAffinity status on node startup. ([#96810](https://github.com/kubernetes/kubernetes/pull/96810), [@liggitt](https://github.com/liggitt)) [SIG Node]
-- Resolves non-deterministic behavior of the garbage collection controller when ownerReferences with incorrect data are encountered. Events with a reason of `OwnerRefInvalidNamespace` are recorded when namespace mismatches between child and owner objects are detected. The [kubectl-check-ownerreferences](https://github.com/kubernetes-sigs/kubectl-check-ownerreferences) tool can be run prior to upgrading to locate existing objects with invalid ownerReferences.
-  - A namespaced object with an ownerReference referencing a uid of a namespaced kind which does not exist in the same namespace is now consistently treated as though that owner does not exist, and the child object is deleted.
-  - A cluster-scoped object with an ownerReference referencing a uid of a namespaced kind is now consistently treated as though that owner is not resolvable, and the child object is ignored by the garbage collector. ([#92743](https://github.com/kubernetes/kubernetes/pull/92743), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-- Skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:162]: Driver azure-disk doesn't support snapshot type DynamicSnapshot -- skipping
-  skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:185]: Driver azure-disk doesn't support ntfs -- skipping ([#96144](https://github.com/kubernetes/kubernetes/pull/96144), [@qinpingli](https://github.com/qinpingli)) [SIG Storage and Testing]
-- StatefulSet Controller now waits for PersistentVolumeClaim deletion before creating pods. ([#93457](https://github.com/kubernetes/kubernetes/pull/93457), [@ymmt2005](https://github.com/ymmt2005))
-- StreamWatcher now calls HandleCrash at appropriate sequence. ([#93108](https://github.com/kubernetes/kubernetes/pull/93108), [@lixiaobing1](https://github.com/lixiaobing1))
-- Support the node label `node.kubernetes.io/exclude-from-external-load-balancers` ([#95542](https://github.com/kubernetes/kubernetes/pull/95542), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- The AWS network load balancer attributes can now be specified during service creation ([#95247](https://github.com/kubernetes/kubernetes/pull/95247), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- The `/debug/api_priority_and_fairness/dump_requests` path at an apiserver will no longer return a phantom line for each exempt priority level. ([#93406](https://github.com/kubernetes/kubernetes/pull/93406), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
-- The kube-apiserver will no longer serve APIs that should have been deleted in GA non-alpha levels.  Alpha levels will continue to serve the removed APIs so that CI doesn't immediately break. ([#96525](https://github.com/kubernetes/kubernetes/pull/96525), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
-- The kubelet recognizes the --containerd-namespace flag to configure the namespace used by cadvisor. ([#87054](https://github.com/kubernetes/kubernetes/pull/87054), [@changyaowei](https://github.com/changyaowei)) [SIG Node]
-- Unhealthy pods covered by PDBs can be successfully evicted if enough healthy pods are available. ([#94381](https://github.com/kubernetes/kubernetes/pull/94381), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
-- Update Calico to v3.15.2 ([#94241](https://github.com/kubernetes/kubernetes/pull/94241), [@lmm](https://github.com/lmm)) [SIG Cloud Provider]
-- Update default etcd server version to 3.4.13 ([#94287](https://github.com/kubernetes/kubernetes/pull/94287), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
-- Update max azure data disk count map ([#96308](https://github.com/kubernetes/kubernetes/pull/96308), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Update the PIP when it is not in the Succeeded provisioning state during the LB update. ([#95748](https://github.com/kubernetes/kubernetes/pull/95748), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Update the frontend IP config when the service's `pipName` annotation is changed ([#95813](https://github.com/kubernetes/kubernetes/pull/95813), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Update the route table tag in the route reconcile loop ([#96545](https://github.com/kubernetes/kubernetes/pull/96545), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Use NLB Subnet CIDRs instead of VPC CIDRs in Health Check SG Rules ([#93515](https://github.com/kubernetes/kubernetes/pull/93515), [@t0rr3sp3dr0](https://github.com/t0rr3sp3dr0)) [SIG Cloud Provider]
-- Users will see increase in time for deletion of pods and also guarantee that removal of pod from api server  would mean deletion of all the resources from container runtime. ([#92817](https://github.com/kubernetes/kubernetes/pull/92817), [@kmala](https://github.com/kmala)) [SIG Node]
-- Very large patches may now be specified to `kubectl patch` with the `--patch-file` flag instead of including them directly on the command line. The `--patch` and `--patch-file` flags are mutually exclusive. ([#93548](https://github.com/kubernetes/kubernetes/pull/93548), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
-- Volume binding: report UnschedulableAndUnresolvable status instead of an error when bound PVs not found ([#95541](https://github.com/kubernetes/kubernetes/pull/95541), [@cofyc](https://github.com/cofyc)) [SIG Apps, Scheduling and Storage]
-- Warn instead of fail when creating Roles and ClusterRoles with custom verbs via kubectl ([#92492](https://github.com/kubernetes/kubernetes/pull/92492), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-- When creating a PVC with the volume.beta.kubernetes.io/storage-provisioner annotation already set, the PV controller might have incorrectly deleted the newly provisioned PV instead of binding it to the PVC, depending on timing and system load. ([#95909](https://github.com/kubernetes/kubernetes/pull/95909), [@pohly](https://github.com/pohly)) [SIG Apps and Storage]
-- [kubectl] Fail when local source file doesn't exist ([#90333](https://github.com/kubernetes/kubernetes/pull/90333), [@bamarni](https://github.com/bamarni)) [SIG CLI]
-
-### Other (Cleanup or Flake)
-
-- **Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.**:
-  
-  <!--
-  This section can be blank if this pull request does not require a release note.
-  
-  When adding links which point to resources within git repositories, like
-  KEPs or supporting documentation, please reference a specific commit and avoid
-  linking directly to the master branch. This ensures that links reference a
-  specific point in time, rather than a document that may change over time.
-  
-  See here for guidance on getting permanent links to files: https://help.github.com/en/articles/getting-permanent-links-to-files
-  
-  Please use the following format for linking documentation:
-  - [KEP]: <link>
-  - [Usage]: <link>
-  - [Other doc]: <link>
-  --> ([#96443](https://github.com/kubernetes/kubernetes/pull/96443), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps]
-- --redirect-container-streaming is no longer functional. The flag will be removed in v1.22 ([#95935](https://github.com/kubernetes/kubernetes/pull/95935), [@tallclair](https://github.com/tallclair)) [SIG Node]
-- A new metric `requestAbortsTotal` has been introduced that counts aborted requests for each `group`, `version`, `verb`, `resource`, `subresource` and `scope`. ([#95002](https://github.com/kubernetes/kubernetes/pull/95002), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery, Cloud Provider, Instrumentation and Scheduling]
-- API priority and fairness metrics use snake_case in label names ([#96236](https://github.com/kubernetes/kubernetes/pull/96236), [@adtac](https://github.com/adtac)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Testing]
-- Add fine grained debugging to intra-pod conformance test to troubleshoot networking issues for potentially unhealthy nodes when running conformance or sonobuoy tests. ([#93837](https://github.com/kubernetes/kubernetes/pull/93837), [@jayunit100](https://github.com/jayunit100))
-- Add the following metrics:
-  - network_plugin_operations_total
-  - network_plugin_operations_errors_total ([#93066](https://github.com/kubernetes/kubernetes/pull/93066), [@AnishShah](https://github.com/AnishShah))
-- Adds a bootstrapping ClusterRole, ClusterRoleBinding and group for /metrics, /livez/*, /readyz/*, & /healthz/- endpoints. ([#93311](https://github.com/kubernetes/kubernetes/pull/93311), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Auth, Cloud Provider and Instrumentation]
-- AdmissionReview objects sent for the creation of Namespace API objects now populate the `namespace` attribute consistently (previously the `namespace` attribute was empty for Namespace creation via POST requests, and populated for Namespace creation via server-side-apply PATCH requests) ([#95012](https://github.com/kubernetes/kubernetes/pull/95012), [@nodo](https://github.com/nodo)) [SIG API Machinery and Testing]
-- Applies translations on all command descriptions ([#95439](https://github.com/kubernetes/kubernetes/pull/95439), [@HerrNaN](https://github.com/HerrNaN)) [SIG CLI]
-- Base-images: Update to debian-iptables:buster-v1.3.0
+- A client-go metric, rest_client_exec_plugin_call_total, has been added to track total calls to client-go credential plugins. ([#98892](https://github.com/kubernetes/kubernetes/pull/98892), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation]
+- A new histogram metric to track the time it took to delete a job by the `TTLAfterFinished` controller ([#98676](https://github.com/kubernetes/kubernetes/pull/98676), [@ahg-g](https://github.com/ahg-g))
+- AWS cloud provider supports auto-discovering subnets without any `kubernetes.io/cluster/<clusterName>` tags. It also supports additional service annotation `service.beta.kubernetes.io/aws-load-balancer-subnets` to manually configure the subnets. ([#97431](https://github.com/kubernetes/kubernetes/pull/97431), [@kishorj](https://github.com/kishorj))
+- Aborting the drain command in a list of nodes will be deprecated. The new behavior will make the drain command go through all nodes even if one or more nodes failed during the drain. For now, users can try such experience by enabling --ignore-errors flag. ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan))
+- Add --permit-address-sharing flag to `kube-apiserver` to listen with `SO_REUSEADDR`. While allowing to listen on wildcard IPs like 0.0.0.0 and specific IPs in parallel, it avoids waiting for the kernel to release socket in `TIME_WAIT` state, and hence, considerably reducing `kube-apiserver` restart times under certain conditions. ([#93861](https://github.com/kubernetes/kubernetes/pull/93861), [@sttts](https://github.com/sttts))
+- Add `csi_operations_seconds` metric on kubelet that exposes CSI operations duration and status for node CSI operations. ([#98979](https://github.com/kubernetes/kubernetes/pull/98979), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Instrumentation and Storage]
+- Add `migrated` field into `storage_operation_duration_seconds` metric ([#99050](https://github.com/kubernetes/kubernetes/pull/99050), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Instrumentation and Storage]
+- Add flag --lease-reuse-duration-seconds for kube-apiserver to config etcd lease reuse duration. ([#97009](https://github.com/kubernetes/kubernetes/pull/97009), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery and Scalability]
+- Add metric etcd_lease_object_counts for kube-apiserver to observe max objects attached to a single etcd lease. ([#97480](https://github.com/kubernetes/kubernetes/pull/97480), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery, Instrumentation and Scalability]
+- Add support to generate client-side binaries for new darwin/arm64 platform ([#97743](https://github.com/kubernetes/kubernetes/pull/97743), [@dims](https://github.com/dims)) [SIG Release and Testing]
+- Added `ephemeral_volume_controller_create[_failures]_total` counters to kube-controller-manager metrics ([#99115](https://github.com/kubernetes/kubernetes/pull/99115), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Storage]
+- Added support for installing `arm64` node artifacts. ([#99242](https://github.com/kubernetes/kubernetes/pull/99242), [@liu-cong](https://github.com/liu-cong))
+- Adds alpha feature `VolumeCapacityPriority` which makes the scheduler prioritize nodes based on the best matching size of statically provisioned PVs across multiple topologies. ([#96347](https://github.com/kubernetes/kubernetes/pull/96347), [@cofyc](https://github.com/cofyc)) [SIG Apps, Network, Scheduling, Storage and Testing]
+- Adds the ability to pass --strict-transport-security-directives to the kube-apiserver to set the HSTS header appropriately.  Be sure you understand the consequences to browsers before setting this field. ([#96502](https://github.com/kubernetes/kubernetes/pull/96502), [@249043822](https://github.com/249043822)) [SIG Auth]
+- Adds two new metrics to cronjobs, a histogram to track the time difference when a job is created and the expected time when it should be created, as well as a gauge for the missed schedules of a cronjob ([#99341](https://github.com/kubernetes/kubernetes/pull/99341), [@alaypatel07](https://github.com/alaypatel07))
+- Alpha implementation of Kubectl Command Headers: SIG CLI KEP 859 enabled when KUBECTL_COMMAND_HEADERS environment variable set on the client command line. ([#98952](https://github.com/kubernetes/kubernetes/pull/98952), [@seans3](https://github.com/seans3))
+- Base-images: Update to debian-iptables:buster-v1.4.0
   - Uses iptables 1.8.5
-  - base-images: Update to debian-base:buster-v1.2.0
-  - cluster/images/etcd: Build etcd:3.4.13-1 image
-    - Uses debian-base:buster-v1.2.0 ([#94733](https://github.com/kubernetes/kubernetes/pull/94733), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Changed: default "Accept-Encoding" header removed from HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes ([#96127](https://github.com/kubernetes/kubernetes/pull/96127), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Client-go header logging (at verbosity levels >= 9) now masks `Authorization` header contents ([#95316](https://github.com/kubernetes/kubernetes/pull/95316), [@sfowl](https://github.com/sfowl)) [SIG API Machinery]
-- Decrease warning message frequency on setting volume ownership for configmap/secret. ([#92878](https://github.com/kubernetes/kubernetes/pull/92878), [@jvanz](https://github.com/jvanz))
-- Enhance log information of verifyRunAsNonRoot, add pod, container information ([#94911](https://github.com/kubernetes/kubernetes/pull/94911), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
-- Fix func name NewCreateCreateDeploymentOptions ([#91931](https://github.com/kubernetes/kubernetes/pull/91931), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG CLI]
-- Fix kubelet to properly log when a container is started. Previously, kubelet may log that container is dead and was restarted when it was actually started for the first time. This behavior only happened on pods with initContainers and regular containers. ([#91469](https://github.com/kubernetes/kubernetes/pull/91469), [@rata](https://github.com/rata))
-- Fixes the message about no auth for metrics in scheduler. ([#94035](https://github.com/kubernetes/kubernetes/pull/94035), [@zhouya0](https://github.com/zhouya0)) [SIG Scheduling]
-- Generators for services are removed from kubectl ([#95256](https://github.com/kubernetes/kubernetes/pull/95256), [@Git-Jiro](https://github.com/Git-Jiro)) [SIG CLI]
-- Introduce kubectl-convert plugin. ([#96190](https://github.com/kubernetes/kubernetes/pull/96190), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- Kube-scheduler now logs processed component config at startup ([#96426](https://github.com/kubernetes/kubernetes/pull/96426), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Kubeadm: Separate argument key/value in log msg ([#94016](https://github.com/kubernetes/kubernetes/pull/94016), [@mrueg](https://github.com/mrueg)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the CoreDNS check for known image digests when applying the addon ([#94506](https://github.com/kubernetes/kubernetes/pull/94506), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: update the default pause image version to 1.4.0 on Windows. With this update the image supports Windows versions 1809 (2019LTS), 1903, 1909, 2004 ([#95419](https://github.com/kubernetes/kubernetes/pull/95419), [@jsturtevant](https://github.com/jsturtevant)) [SIG Cluster Lifecycle and Windows]
-- Kubectl: the `generator` flag of `kubectl autoscale` has been deprecated and has no effect, it will be removed in a feature release ([#92998](https://github.com/kubernetes/kubernetes/pull/92998), [@SataQiu](https://github.com/SataQiu)) [SIG CLI]
-- Lock ExternalPolicyForExternalIP to default, this feature gate will be removed in 1.22. ([#94581](https://github.com/kubernetes/kubernetes/pull/94581), [@knabben](https://github.com/knabben)) [SIG Network]
-- Mask ceph RBD adminSecrets in logs when logLevel >= 4. ([#95245](https://github.com/kubernetes/kubernetes/pull/95245), [@sfowl](https://github.com/sfowl))
-- Remove offensive words from kubectl cluster-info command. ([#95202](https://github.com/kubernetes/kubernetes/pull/95202), [@rikatz](https://github.com/rikatz))
-- Remove support for "ci/k8s-master" version label in kubeadm, use "ci/latest" instead. See [kubernetes/test-infra#18517](https://github.com/kubernetes/test-infra/pull/18517). ([#93626](https://github.com/kubernetes/kubernetes/pull/93626), [@vikkyomkar](https://github.com/vikkyomkar))
-- Remove the dependency of csi-translation-lib module on apiserver/cloud-provider/controller-manager ([#95543](https://github.com/kubernetes/kubernetes/pull/95543), [@wawa0210](https://github.com/wawa0210)) [SIG Release]
-- Scheduler framework interface moved from pkg/scheduler/framework/v1alpha to pkg/scheduler/framework ([#95069](https://github.com/kubernetes/kubernetes/pull/95069), [@farah](https://github.com/farah)) [SIG Scheduling, Storage and Testing]
-- Service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset is removed.  All Standard load balancers will always enable tcp resets. ([#94297](https://github.com/kubernetes/kubernetes/pull/94297), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Stop propagating SelfLink (deprecated in 1.16) in kube-apiserver ([#94397](https://github.com/kubernetes/kubernetes/pull/94397), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Strip unnecessary security contexts on Windows ([#93475](https://github.com/kubernetes/kubernetes/pull/93475), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node, Testing and Windows]
-- To ensure the code be strong,  add unit test for GetAddressAndDialer ([#93180](https://github.com/kubernetes/kubernetes/pull/93180), [@FreeZhang61](https://github.com/FreeZhang61)) [SIG Node]
-- UDP and SCTP protocols can left stale connections that need to be cleared to avoid services disruption, but they can cause problems that are hard to debug.
-  Kubernetes components using a loglevel greater or equal than 4 will log the conntrack operations and its output, to show the entries that were deleted. ([#95694](https://github.com/kubernetes/kubernetes/pull/95694), [@aojea](https://github.com/aojea)) [SIG Network]
-- Update CNI plugins to v0.8.7 ([#94367](https://github.com/kubernetes/kubernetes/pull/94367), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Network, Node, Release and Testing]
-- Update cri-tools to [v1.19.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.19.0) ([#94307](https://github.com/kubernetes/kubernetes/pull/94307), [@xmudrii](https://github.com/xmudrii)) [SIG Cloud Provider]
-- Update etcd client side to v3.4.13 ([#94259](https://github.com/kubernetes/kubernetes/pull/94259), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
-- Users will now be able to configure all supported values for AWS NLB health check interval and thresholds for new resources. ([#96312](https://github.com/kubernetes/kubernetes/pull/96312), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- V1helpers.MatchNodeSelectorTerms now accepts just a Node and a list of Terms ([#95871](https://github.com/kubernetes/kubernetes/pull/95871), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
-- Vsphere: improve logging message on node cache refresh event ([#95236](https://github.com/kubernetes/kubernetes/pull/95236), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
-- `MatchNodeSelectorTerms` function moved to `k8s.io/component-helpers` ([#95531](https://github.com/kubernetes/kubernetes/pull/95531), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
-- `kubectl api-resources` now prints the API version (as 'API group/version', same as output of `kubectl api-versions`). The column APIGROUP is now APIVERSION ([#95253](https://github.com/kubernetes/kubernetes/pull/95253), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-- `kubectl get ingress` now prefers the `networking.k8s.io/v1` over `extensions/v1beta1` (deprecated since v1.14). To explicitly request the deprecated version, use `kubectl get ingress.v1beta1.extensions`. ([#94309](https://github.com/kubernetes/kubernetes/pull/94309), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and CLI]
+  - base-images: Update to debian-base:buster-v1.3.0
+  - cluster/images/etcd: Build etcd:3.4.13-2 image
+    - Uses debian-base:buster-v1.3.0 ([#98401](https://github.com/kubernetes/kubernetes/pull/98401), [@pacoxu](https://github.com/pacoxu)) [SIG Testing]
+- CRIContainerLogRotation graduates to GA and unconditionally enabled. ([#99651](https://github.com/kubernetes/kubernetes/pull/99651), [@umohnani8](https://github.com/umohnani8))
+- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99385](https://github.com/kubernetes/kubernetes/pull/99385), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Release]
+- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99738](https://github.com/kubernetes/kubernetes/pull/99738), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- EmptyDir memory backed volumes are sized as the the minimum of pod allocatable memory on a host and an optional explicit user provided value. ([#100319](https://github.com/kubernetes/kubernetes/pull/100319), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
+- Enables Kubelet to check volume condition and log events to corresponding pods. ([#99284](https://github.com/kubernetes/kubernetes/pull/99284), [@fengzixu](https://github.com/fengzixu)) [SIG Apps, Instrumentation, Node and Storage]
+- EndpointSliceNodeName graduates to GA and thus will be unconditionally enabled -- NodeName will always be available in the v1beta1 API. ([#99746](https://github.com/kubernetes/kubernetes/pull/99746), [@swetharepakula](https://github.com/swetharepakula))
+- Export `NewDebuggingRoundTripper` function and `DebugLevel` options in the k8s.io/client-go/transport package. ([#98324](https://github.com/kubernetes/kubernetes/pull/98324), [@atosatto](https://github.com/atosatto))
+- Kube-proxy iptables: new metric sync_proxy_rules_iptables_total that exposes the number of rules programmed per table in each iteration ([#99653](https://github.com/kubernetes/kubernetes/pull/99653), [@aojea](https://github.com/aojea)) [SIG Instrumentation and Network]
+- Kube-scheduler now logs plugin scoring summaries at --v=4 ([#99411](https://github.com/kubernetes/kubernetes/pull/99411), [@damemi](https://github.com/damemi)) [SIG Scheduling]
+- Kubeadm now includes CoreDNS v1.8.0. ([#96429](https://github.com/kubernetes/kubernetes/pull/96429), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubeadm: IPv6DualStack feature gate graduates to Beta and enabled by default ([#99294](https://github.com/kubernetes/kubernetes/pull/99294), [@pacoxu](https://github.com/pacoxu))
+- Kubeadm: a warning to user as ipv6 site-local is deprecated ([#99574](https://github.com/kubernetes/kubernetes/pull/99574), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle and Network]
+- Kubeadm: add support for certificate chain validation. When using kubeadm in external CA mode, this allows an intermediate CA to be used to sign the certificates. The intermediate CA certificate must be appended to each signed certificate for this to work correctly. ([#97266](https://github.com/kubernetes/kubernetes/pull/97266), [@robbiemcmichael](https://github.com/robbiemcmichael)) [SIG Cluster Lifecycle]
+- Kubeadm: amend the node kernel validation to treat CGROUP_PIDS, FAIR_GROUP_SCHED as required and CFS_BANDWIDTH, CGROUP_HUGETLB as optional ([#96378](https://github.com/kubernetes/kubernetes/pull/96378), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
+- Kubeadm: apply the "node.kubernetes.io/exclude-from-external-load-balancers" label on control plane nodes during "init", "join" and "upgrade" to preserve backwards compatibility with the lagacy LB mode where nodes labeled as "master" where excluded. To opt-out you can remove the label from a node. See #97543 and the linked KEP for more details. ([#98269](https://github.com/kubernetes/kubernetes/pull/98269), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: if the user has customized their image repository via the kubeadm configuration, pass the custom pause image repository and tag to the kubelet via --pod-infra-container-image not only for Docker but for all container runtimes. This flag tells the kubelet that it should not garbage collect the image. ([#99476](https://github.com/kubernetes/kubernetes/pull/99476), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: perform pre-flight validation on host/node name upon `kubeadm init` and `kubeadm join`, showing warnings on non-compliant names ([#99194](https://github.com/kubernetes/kubernetes/pull/99194), [@pacoxu](https://github.com/pacoxu))
+- Kubectl version changed to write a warning message to stderr if the client and server version difference exceeds the supported version skew of +/-1 minor version. ([#98250](https://github.com/kubernetes/kubernetes/pull/98250), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- Kubectl: Add `--use-protocol-buffers` flag to kubectl top pods and nodes. ([#96655](https://github.com/kubernetes/kubernetes/pull/96655), [@serathius](https://github.com/serathius))
+- Kubectl: `kubectl get` will omit managed fields by default now. Users could set `--show-managed-fields` to true to show managedFields when the output format is either `json` or `yaml`. ([#96878](https://github.com/kubernetes/kubernetes/pull/96878), [@knight42](https://github.com/knight42)) [SIG CLI and Testing]
+- Kubectl: a Pod can be preselected as default container using `kubectl.kubernetes.io/default-container` annotation ([#99833](https://github.com/kubernetes/kubernetes/pull/99833), [@mengjiao-liu](https://github.com/mengjiao-liu))
+- Kubectl: add bash-completion for comma separated list on `kubectl get` ([#98301](https://github.com/kubernetes/kubernetes/pull/98301), [@phil9909](https://github.com/phil9909))
+- Kubernetes is now built using go1.15.8 ([#98834](https://github.com/kubernetes/kubernetes/pull/98834), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- Kubernetes is now built with Golang 1.16 ([#98572](https://github.com/kubernetes/kubernetes/pull/98572), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
+- Kubernetes is now built with Golang 1.16.1 ([#100106](https://github.com/kubernetes/kubernetes/pull/100106), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- Metrics can now be disabled explicitly via a command line flag (i.e. '--disabled-metrics=metric1,metric2') ([#99217](https://github.com/kubernetes/kubernetes/pull/99217), [@logicalhan](https://github.com/logicalhan))
+- New admission controller `DenyServiceExternalIPs` is available.  Clusters which do not *need* the Service `externalIPs` feature should enable this controller and be more secure. ([#97395](https://github.com/kubernetes/kubernetes/pull/97395), [@thockin](https://github.com/thockin))
+- Overall, enable the feature of `PreferNominatedNode` will  improve the performance of scheduling where preemption might frequently happen, but in theory, enable the feature of `PreferNominatedNode`, the pod might not be scheduled to the best candidate node in the cluster. ([#93179](https://github.com/kubernetes/kubernetes/pull/93179), [@chendave](https://github.com/chendave)) [SIG Scheduling and Testing]
+- Persistent Volumes formatted with the btrfs filesystem will now automatically resize when expanded. ([#99361](https://github.com/kubernetes/kubernetes/pull/99361), [@Novex](https://github.com/Novex)) [SIG Storage]
+- Port the devicemanager to Windows node to allow device plugins like directx ([#93285](https://github.com/kubernetes/kubernetes/pull/93285), [@aarnaud](https://github.com/aarnaud)) [SIG Node, Testing and Windows]
+- Removes cAdvisor JSON metrics (/stats/container, /stats/<podname>/<containername>, /stats/<namespace>/<podname>/<poduid>/<containername>) from the kubelet. ([#99236](https://github.com/kubernetes/kubernetes/pull/99236), [@pacoxu](https://github.com/pacoxu))
+- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
+- Sysctls graduates to General Availability and thus unconditionally enabled. ([#99158](https://github.com/kubernetes/kubernetes/pull/99158), [@wgahnagl](https://github.com/wgahnagl))
+- The Kubernetes pause image manifest list now contains an image for Windows Server 20H2. ([#97322](https://github.com/kubernetes/kubernetes/pull/97322), [@claudiubelu](https://github.com/claudiubelu)) [SIG Windows]
+- The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
+- The `CronJobControllerV2` feature flag graduates to Beta and set to be enabled by default. ([#98878](https://github.com/kubernetes/kubernetes/pull/98878), [@soltysh](https://github.com/soltysh))
+- The `EndpointSlice` mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
+  The well-known annotation `endpoints.kubernetes.io/last-change-trigger-time` is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea))
+- The `RunAsGroup` feature has been promoted to GA in this release. ([#94641](https://github.com/kubernetes/kubernetes/pull/94641), [@krmayankk](https://github.com/krmayankk)) [SIG Auth and Node]
+- The `ServiceAccountIssuerDiscovery` feature has graduated to GA, and is unconditionally enabled. The `ServiceAccountIssuerDiscovery` feature-gate will be removed in 1.22. ([#98553](https://github.com/kubernetes/kubernetes/pull/98553), [@mtaufen](https://github.com/mtaufen)) [SIG API Machinery, Auth and Testing]
+- The `TTLAfterFinished` feature flag is now beta and enabled by default ([#98678](https://github.com/kubernetes/kubernetes/pull/98678), [@ahg-g](https://github.com/ahg-g))
+- The apimachinery util/net function used to detect the bind address `ResolveBindAddress()` takes into consideration global IP addresses on loopback interfaces when 1) the host has default routes, or 2) there are no global IPs on those interfaces in order to support more complex network scenarios like BGP Unnumbered RFC 5549 ([#95790](https://github.com/kubernetes/kubernetes/pull/95790), [@aojea](https://github.com/aojea)) [SIG Network]
+- The feature gate `RootCAConfigMap` graduated to GA in v1.21 and therefore will be unconditionally enabled. This flag will be removed in v1.22 release. ([#98033](https://github.com/kubernetes/kubernetes/pull/98033), [@zshihang](https://github.com/zshihang))
+- The pause image upgraded to `v3.4.1` in kubelet and kubeadm for both Linux and Windows. ([#98205](https://github.com/kubernetes/kubernetes/pull/98205), [@pacoxu](https://github.com/pacoxu))
+- Update pause container to run as pseudo user and group `65535:65535`. This implies the release of version 3.5 of the container images. ([#97963](https://github.com/kubernetes/kubernetes/pull/97963), [@saschagrunert](https://github.com/saschagrunert)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Release, Security and Testing]
+- Update the latest validated version of Docker to 20.10 ([#98977](https://github.com/kubernetes/kubernetes/pull/98977), [@neolit123](https://github.com/neolit123)) [SIG CLI, Cluster Lifecycle and Node]
+- Upgrade node local dns to 1.17.0 for better IPv6 support ([#99749](https://github.com/kubernetes/kubernetes/pull/99749), [@pacoxu](https://github.com/pacoxu)) [SIG Cloud Provider and Network]
+- Upgrades `IPv6Dualstack` to `Beta` and turns it on by default. New clusters or existing clusters are not be affected until an actor starts adding secondary Pods and service CIDRS CLI flags as described here: [IPv4/IPv6 Dual-stack](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/563-dual-stack) ([#98969](https://github.com/kubernetes/kubernetes/pull/98969), [@khenidak](https://github.com/khenidak))
+- Users might specify the `kubectl.kubernetes.io/default-container` annotation in a Pod to preselect container for kubectl commands. ([#99581](https://github.com/kubernetes/kubernetes/pull/99581), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
+- When downscaling ReplicaSets, ready and creation timestamps are compared in a logarithmic scale. ([#99212](https://github.com/kubernetes/kubernetes/pull/99212), [@damemi](https://github.com/damemi)) [SIG Apps and Testing]
+- When the kubelet is watching a ConfigMap or Secret purely in the context of setting environment variables
+  for containers, only hold that watch for a defined duration before cancelling it. This change reduces the CPU
+  and memory usage of the kube-apiserver in large clusters. ([#99393](https://github.com/kubernetes/kubernetes/pull/99393), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery, Node and Testing]
+- WindowsEndpointSliceProxying feature gate has graduated to beta and is enabled by default. This means kube-proxy will  read from EndpointSlices instead of Endpoints on Windows by default. ([#99794](https://github.com/kubernetes/kubernetes/pull/99794), [@robscott](https://github.com/robscott)) [SIG Network]
+- `kubectl wait` ensures that observedGeneration >= generation to prevent stale state reporting. An example scenario can be found on CRD updates. ([#97408](https://github.com/kubernetes/kubernetes/pull/97408), [@KnicKnic](https://github.com/KnicKnic))
 
-## Dependencies
+### Documentation
 
-### Added
-- cloud.google.com/go/firestore: v1.1.0
-- github.com/Azure/go-autorest: [v14.2.0+incompatible](https://github.com/Azure/go-autorest/tree/v14.2.0)
-- github.com/armon/go-metrics: [f0300d1](https://github.com/armon/go-metrics/tree/f0300d1)
-- github.com/armon/go-radix: [7fddfc3](https://github.com/armon/go-radix/tree/7fddfc3)
-- github.com/bketelsen/crypt: [5cbc8cc](https://github.com/bketelsen/crypt/tree/5cbc8cc)
-- github.com/form3tech-oss/jwt-go: [v3.2.2+incompatible](https://github.com/form3tech-oss/jwt-go/tree/v3.2.2)
-- github.com/fvbommel/sortorder: [v1.0.1](https://github.com/fvbommel/sortorder/tree/v1.0.1)
-- github.com/hashicorp/consul/api: [v1.1.0](https://github.com/hashicorp/consul/api/tree/v1.1.0)
-- github.com/hashicorp/consul/sdk: [v0.1.1](https://github.com/hashicorp/consul/sdk/tree/v0.1.1)
-- github.com/hashicorp/errwrap: [v1.0.0](https://github.com/hashicorp/errwrap/tree/v1.0.0)
-- github.com/hashicorp/go-cleanhttp: [v0.5.1](https://github.com/hashicorp/go-cleanhttp/tree/v0.5.1)
-- github.com/hashicorp/go-immutable-radix: [v1.0.0](https://github.com/hashicorp/go-immutable-radix/tree/v1.0.0)
-- github.com/hashicorp/go-msgpack: [v0.5.3](https://github.com/hashicorp/go-msgpack/tree/v0.5.3)
-- github.com/hashicorp/go-multierror: [v1.0.0](https://github.com/hashicorp/go-multierror/tree/v1.0.0)
-- github.com/hashicorp/go-rootcerts: [v1.0.0](https://github.com/hashicorp/go-rootcerts/tree/v1.0.0)
-- github.com/hashicorp/go-sockaddr: [v1.0.0](https://github.com/hashicorp/go-sockaddr/tree/v1.0.0)
-- github.com/hashicorp/go-uuid: [v1.0.1](https://github.com/hashicorp/go-uuid/tree/v1.0.1)
-- github.com/hashicorp/go.net: [v0.0.1](https://github.com/hashicorp/go.net/tree/v0.0.1)
-- github.com/hashicorp/logutils: [v1.0.0](https://github.com/hashicorp/logutils/tree/v1.0.0)
-- github.com/hashicorp/mdns: [v1.0.0](https://github.com/hashicorp/mdns/tree/v1.0.0)
-- github.com/hashicorp/memberlist: [v0.1.3](https://github.com/hashicorp/memberlist/tree/v0.1.3)
-- github.com/hashicorp/serf: [v0.8.2](https://github.com/hashicorp/serf/tree/v0.8.2)
-- github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/internal/testify/tree/v1.5.1)
-- github.com/mitchellh/cli: [v1.0.0](https://github.com/mitchellh/cli/tree/v1.0.0)
-- github.com/mitchellh/go-testing-interface: [v1.0.0](https://github.com/mitchellh/go-testing-interface/tree/v1.0.0)
-- github.com/mitchellh/gox: [v0.4.0](https://github.com/mitchellh/gox/tree/v0.4.0)
-- github.com/mitchellh/iochan: [v1.0.0](https://github.com/mitchellh/iochan/tree/v1.0.0)
-- github.com/pascaldekloe/goe: [57f6aae](https://github.com/pascaldekloe/goe/tree/57f6aae)
-- github.com/posener/complete: [v1.1.1](https://github.com/posener/complete/tree/v1.1.1)
-- github.com/ryanuber/columnize: [9b3edd6](https://github.com/ryanuber/columnize/tree/9b3edd6)
-- github.com/sean-/seed: [e2103e2](https://github.com/sean-/seed/tree/e2103e2)
-- github.com/subosito/gotenv: [v1.2.0](https://github.com/subosito/gotenv/tree/v1.2.0)
-- github.com/willf/bitset: [d5bec33](https://github.com/willf/bitset/tree/d5bec33)
-- gopkg.in/ini.v1: v1.51.0
-- gopkg.in/yaml.v3: 9f266ea
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
-
-### Changed
-- cloud.google.com/go/bigquery: v1.0.1 → v1.4.0
-- cloud.google.com/go/datastore: v1.0.0 → v1.1.0
-- cloud.google.com/go/pubsub: v1.0.1 → v1.2.0
-- cloud.google.com/go/storage: v1.0.0 → v1.6.0
-- cloud.google.com/go: v0.51.0 → v0.54.0
-- github.com/Azure/go-autorest/autorest/adal: [v0.8.2 → v0.9.5](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.8.2...v0.9.5)
-- github.com/Azure/go-autorest/autorest/date: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.2.0...v0.3.0)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.3.0 → v0.4.1](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.3.0...v0.4.1)
-- github.com/Azure/go-autorest/autorest: [v0.9.6 → v0.11.1](https://github.com/Azure/go-autorest/autorest/compare/v0.9.6...v0.11.1)
-- github.com/Azure/go-autorest/logger: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/logger/compare/v0.1.0...v0.2.0)
-- github.com/Azure/go-autorest/tracing: [v0.5.0 → v0.6.0](https://github.com/Azure/go-autorest/tracing/compare/v0.5.0...v0.6.0)
-- github.com/Microsoft/go-winio: [fc70bd9 → v0.4.15](https://github.com/Microsoft/go-winio/compare/fc70bd9...v0.4.15)
-- github.com/aws/aws-sdk-go: [v1.28.2 → v1.35.24](https://github.com/aws/aws-sdk-go/compare/v1.28.2...v1.35.24)
-- github.com/blang/semver: [v3.5.0+incompatible → v3.5.1+incompatible](https://github.com/blang/semver/compare/v3.5.0...v3.5.1)
-- github.com/checkpoint-restore/go-criu/v4: [v4.0.2 → v4.1.0](https://github.com/checkpoint-restore/go-criu/v4/compare/v4.0.2...v4.1.0)
-- github.com/containerd/containerd: [v1.3.3 → v1.4.1](https://github.com/containerd/containerd/compare/v1.3.3...v1.4.1)
-- github.com/containerd/ttrpc: [v1.0.0 → v1.0.2](https://github.com/containerd/ttrpc/compare/v1.0.0...v1.0.2)
-- github.com/containerd/typeurl: [v1.0.0 → v1.0.1](https://github.com/containerd/typeurl/compare/v1.0.0...v1.0.1)
-- github.com/coreos/etcd: [v3.3.10+incompatible → v3.3.13+incompatible](https://github.com/coreos/etcd/compare/v3.3.10...v3.3.13)
-- github.com/docker/docker: [aa6a989 → bd33bbf](https://github.com/docker/docker/compare/aa6a989...bd33bbf)
-- github.com/go-gl/glfw/v3.3/glfw: [12ad95a → 6f7a984](https://github.com/go-gl/glfw/v3.3/glfw/compare/12ad95a...6f7a984)
-- github.com/golang/groupcache: [215e871 → 8c9f03a](https://github.com/golang/groupcache/compare/215e871...8c9f03a)
-- github.com/golang/mock: [v1.3.1 → v1.4.1](https://github.com/golang/mock/compare/v1.3.1...v1.4.1)
-- github.com/golang/protobuf: [v1.4.2 → v1.4.3](https://github.com/golang/protobuf/compare/v1.4.2...v1.4.3)
-- github.com/google/cadvisor: [v0.37.0 → v0.38.5](https://github.com/google/cadvisor/compare/v0.37.0...v0.38.5)
-- github.com/google/go-cmp: [v0.4.0 → v0.5.2](https://github.com/google/go-cmp/compare/v0.4.0...v0.5.2)
-- github.com/google/pprof: [d4f498a → 1ebb73c](https://github.com/google/pprof/compare/d4f498a...1ebb73c)
-- github.com/google/uuid: [v1.1.1 → v1.1.2](https://github.com/google/uuid/compare/v1.1.1...v1.1.2)
-- github.com/gorilla/mux: [v1.7.3 → v1.8.0](https://github.com/gorilla/mux/compare/v1.7.3...v1.8.0)
-- github.com/gorilla/websocket: [v1.4.0 → v1.4.2](https://github.com/gorilla/websocket/compare/v1.4.0...v1.4.2)
-- github.com/jmespath/go-jmespath: [c2b33e8 → v0.4.0](https://github.com/jmespath/go-jmespath/compare/c2b33e8...v0.4.0)
-- github.com/karrick/godirwalk: [v1.7.5 → v1.16.1](https://github.com/karrick/godirwalk/compare/v1.7.5...v1.16.1)
-- github.com/opencontainers/go-digest: [v1.0.0-rc1 → v1.0.0](https://github.com/opencontainers/go-digest/compare/v1.0.0-rc1...v1.0.0)
-- github.com/opencontainers/runc: [819fcc6 → v1.0.0-rc92](https://github.com/opencontainers/runc/compare/819fcc6...v1.0.0-rc92)
-- github.com/opencontainers/runtime-spec: [237cc4f → 4d89ac9](https://github.com/opencontainers/runtime-spec/compare/237cc4f...4d89ac9)
-- github.com/opencontainers/selinux: [v1.5.2 → v1.6.0](https://github.com/opencontainers/selinux/compare/v1.5.2...v1.6.0)
-- github.com/prometheus/procfs: [v0.1.3 → v0.2.0](https://github.com/prometheus/procfs/compare/v0.1.3...v0.2.0)
-- github.com/quobyte/api: [v0.1.2 → v0.1.8](https://github.com/quobyte/api/compare/v0.1.2...v0.1.8)
-- github.com/spf13/cobra: [v1.0.0 → v1.1.1](https://github.com/spf13/cobra/compare/v1.0.0...v1.1.1)
-- github.com/spf13/viper: [v1.4.0 → v1.7.0](https://github.com/spf13/viper/compare/v1.4.0...v1.7.0)
-- github.com/storageos/go-api: [343b3ef → v2.2.0+incompatible](https://github.com/storageos/go-api/compare/343b3ef...v2.2.0)
-- github.com/stretchr/testify: [v1.4.0 → v1.6.1](https://github.com/stretchr/testify/compare/v1.4.0...v1.6.1)
-- github.com/vishvananda/netns: [52d707b → db3c7e5](https://github.com/vishvananda/netns/compare/52d707b...db3c7e5)
-- go.etcd.io/etcd: 17cef6e → dd1b699
-- go.opencensus.io: v0.22.2 → v0.22.3
-- golang.org/x/crypto: 75b2880 → 7f63de1
-- golang.org/x/exp: da58074 → 6cc2880
-- golang.org/x/lint: fdd1cda → 738671d
-- golang.org/x/net: ab34263 → 69a7880
-- golang.org/x/oauth2: 858c2ad → bf48bf1
-- golang.org/x/sys: ed371f2 → 5cba982
-- golang.org/x/text: v0.3.3 → v0.3.4
-- golang.org/x/time: 555d28b → 3af7569
-- golang.org/x/xerrors: 9bdfabe → 5ec99f8
-- google.golang.org/api: v0.15.1 → v0.20.0
-- google.golang.org/genproto: cb27e3a → 8816d57
-- google.golang.org/grpc: v1.27.0 → v1.27.1
-- google.golang.org/protobuf: v1.24.0 → v1.25.0
-- honnef.co/go/tools: v0.0.1-2019.2.3 → v0.0.1-2020.1.3
-- k8s.io/gengo: 8167cfd → 83324d8
-- k8s.io/klog/v2: v2.2.0 → v2.4.0
-- k8s.io/kube-openapi: 6aeccd4 → d219536
-- k8s.io/system-validators: v1.1.2 → v1.2.0
-- k8s.io/utils: d5654de → 67b214c
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.9 → v0.0.14
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1 → v4.0.2
-
-### Removed
-- github.com/armon/consul-api: [eb2c6b5](https://github.com/armon/consul-api/tree/eb2c6b5)
-- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
-- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
-- github.com/xlab/handysort: [fb3537e](https://github.com/xlab/handysort/tree/fb3537e)
-- github.com/xordataexchange/crypt: [b2862e3](https://github.com/xordataexchange/crypt/tree/b2862e3)
-- vbom.ml/util: db5cfe1
-
-
-## Dependencies
-
-### Added
-- cloud.google.com/go/firestore: v1.1.0
-- github.com/Azure/go-autorest: [v14.2.0+incompatible](https://github.com/Azure/go-autorest/tree/v14.2.0)
-- github.com/armon/go-metrics: [f0300d1](https://github.com/armon/go-metrics/tree/f0300d1)
-- github.com/armon/go-radix: [7fddfc3](https://github.com/armon/go-radix/tree/7fddfc3)
-- github.com/bketelsen/crypt: [5cbc8cc](https://github.com/bketelsen/crypt/tree/5cbc8cc)
-- github.com/form3tech-oss/jwt-go: [v3.2.2+incompatible](https://github.com/form3tech-oss/jwt-go/tree/v3.2.2)
-- github.com/fvbommel/sortorder: [v1.0.1](https://github.com/fvbommel/sortorder/tree/v1.0.1)
-- github.com/hashicorp/consul/api: [v1.1.0](https://github.com/hashicorp/consul/api/tree/v1.1.0)
-- github.com/hashicorp/consul/sdk: [v0.1.1](https://github.com/hashicorp/consul/sdk/tree/v0.1.1)
-- github.com/hashicorp/errwrap: [v1.0.0](https://github.com/hashicorp/errwrap/tree/v1.0.0)
-- github.com/hashicorp/go-cleanhttp: [v0.5.1](https://github.com/hashicorp/go-cleanhttp/tree/v0.5.1)
-- github.com/hashicorp/go-immutable-radix: [v1.0.0](https://github.com/hashicorp/go-immutable-radix/tree/v1.0.0)
-- github.com/hashicorp/go-msgpack: [v0.5.3](https://github.com/hashicorp/go-msgpack/tree/v0.5.3)
-- github.com/hashicorp/go-multierror: [v1.0.0](https://github.com/hashicorp/go-multierror/tree/v1.0.0)
-- github.com/hashicorp/go-rootcerts: [v1.0.0](https://github.com/hashicorp/go-rootcerts/tree/v1.0.0)
-- github.com/hashicorp/go-sockaddr: [v1.0.0](https://github.com/hashicorp/go-sockaddr/tree/v1.0.0)
-- github.com/hashicorp/go-uuid: [v1.0.1](https://github.com/hashicorp/go-uuid/tree/v1.0.1)
-- github.com/hashicorp/go.net: [v0.0.1](https://github.com/hashicorp/go.net/tree/v0.0.1)
-- github.com/hashicorp/logutils: [v1.0.0](https://github.com/hashicorp/logutils/tree/v1.0.0)
-- github.com/hashicorp/mdns: [v1.0.0](https://github.com/hashicorp/mdns/tree/v1.0.0)
-- github.com/hashicorp/memberlist: [v0.1.3](https://github.com/hashicorp/memberlist/tree/v0.1.3)
-- github.com/hashicorp/serf: [v0.8.2](https://github.com/hashicorp/serf/tree/v0.8.2)
-- github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/internal/testify/tree/v1.5.1)
-- github.com/mitchellh/cli: [v1.0.0](https://github.com/mitchellh/cli/tree/v1.0.0)
-- github.com/mitchellh/go-testing-interface: [v1.0.0](https://github.com/mitchellh/go-testing-interface/tree/v1.0.0)
-- github.com/mitchellh/gox: [v0.4.0](https://github.com/mitchellh/gox/tree/v0.4.0)
-- github.com/mitchellh/iochan: [v1.0.0](https://github.com/mitchellh/iochan/tree/v1.0.0)
-- github.com/pascaldekloe/goe: [57f6aae](https://github.com/pascaldekloe/goe/tree/57f6aae)
-- github.com/posener/complete: [v1.1.1](https://github.com/posener/complete/tree/v1.1.1)
-- github.com/ryanuber/columnize: [9b3edd6](https://github.com/ryanuber/columnize/tree/9b3edd6)
-- github.com/sean-/seed: [e2103e2](https://github.com/sean-/seed/tree/e2103e2)
-- github.com/subosito/gotenv: [v1.2.0](https://github.com/subosito/gotenv/tree/v1.2.0)
-- github.com/willf/bitset: [d5bec33](https://github.com/willf/bitset/tree/d5bec33)
-- gopkg.in/ini.v1: v1.51.0
-- gopkg.in/yaml.v3: 9f266ea
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
-
-### Changed
-- cloud.google.com/go/bigquery: v1.0.1 → v1.4.0
-- cloud.google.com/go/datastore: v1.0.0 → v1.1.0
-- cloud.google.com/go/pubsub: v1.0.1 → v1.2.0
-- cloud.google.com/go/storage: v1.0.0 → v1.6.0
-- cloud.google.com/go: v0.51.0 → v0.54.0
-- github.com/Azure/go-autorest/autorest/adal: [v0.8.2 → v0.9.5](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.8.2...v0.9.5)
-- github.com/Azure/go-autorest/autorest/date: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.2.0...v0.3.0)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.3.0 → v0.4.1](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.3.0...v0.4.1)
-- github.com/Azure/go-autorest/autorest: [v0.9.6 → v0.11.1](https://github.com/Azure/go-autorest/autorest/compare/v0.9.6...v0.11.1)
-- github.com/Azure/go-autorest/logger: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/logger/compare/v0.1.0...v0.2.0)
-- github.com/Azure/go-autorest/tracing: [v0.5.0 → v0.6.0](https://github.com/Azure/go-autorest/tracing/compare/v0.5.0...v0.6.0)
-- github.com/Microsoft/go-winio: [fc70bd9 → v0.4.15](https://github.com/Microsoft/go-winio/compare/fc70bd9...v0.4.15)
-- github.com/aws/aws-sdk-go: [v1.28.2 → v1.35.24](https://github.com/aws/aws-sdk-go/compare/v1.28.2...v1.35.24)
-- github.com/blang/semver: [v3.5.0+incompatible → v3.5.1+incompatible](https://github.com/blang/semver/compare/v3.5.0...v3.5.1)
-- github.com/checkpoint-restore/go-criu/v4: [v4.0.2 → v4.1.0](https://github.com/checkpoint-restore/go-criu/v4/compare/v4.0.2...v4.1.0)
-- github.com/containerd/containerd: [v1.3.3 → v1.4.1](https://github.com/containerd/containerd/compare/v1.3.3...v1.4.1)
-- github.com/containerd/ttrpc: [v1.0.0 → v1.0.2](https://github.com/containerd/ttrpc/compare/v1.0.0...v1.0.2)
-- github.com/containerd/typeurl: [v1.0.0 → v1.0.1](https://github.com/containerd/typeurl/compare/v1.0.0...v1.0.1)
-- github.com/coreos/etcd: [v3.3.10+incompatible → v3.3.13+incompatible](https://github.com/coreos/etcd/compare/v3.3.10...v3.3.13)
-- github.com/docker/docker: [aa6a989 → bd33bbf](https://github.com/docker/docker/compare/aa6a989...bd33bbf)
-- github.com/go-gl/glfw/v3.3/glfw: [12ad95a → 6f7a984](https://github.com/go-gl/glfw/v3.3/glfw/compare/12ad95a...6f7a984)
-- github.com/golang/groupcache: [215e871 → 8c9f03a](https://github.com/golang/groupcache/compare/215e871...8c9f03a)
-- github.com/golang/mock: [v1.3.1 → v1.4.1](https://github.com/golang/mock/compare/v1.3.1...v1.4.1)
-- github.com/golang/protobuf: [v1.4.2 → v1.4.3](https://github.com/golang/protobuf/compare/v1.4.2...v1.4.3)
-- github.com/google/cadvisor: [v0.37.0 → v0.38.5](https://github.com/google/cadvisor/compare/v0.37.0...v0.38.5)
-- github.com/google/go-cmp: [v0.4.0 → v0.5.2](https://github.com/google/go-cmp/compare/v0.4.0...v0.5.2)
-- github.com/google/pprof: [d4f498a → 1ebb73c](https://github.com/google/pprof/compare/d4f498a...1ebb73c)
-- github.com/google/uuid: [v1.1.1 → v1.1.2](https://github.com/google/uuid/compare/v1.1.1...v1.1.2)
-- github.com/gorilla/mux: [v1.7.3 → v1.8.0](https://github.com/gorilla/mux/compare/v1.7.3...v1.8.0)
-- github.com/gorilla/websocket: [v1.4.0 → v1.4.2](https://github.com/gorilla/websocket/compare/v1.4.0...v1.4.2)
-- github.com/jmespath/go-jmespath: [c2b33e8 → v0.4.0](https://github.com/jmespath/go-jmespath/compare/c2b33e8...v0.4.0)
-- github.com/karrick/godirwalk: [v1.7.5 → v1.16.1](https://github.com/karrick/godirwalk/compare/v1.7.5...v1.16.1)
-- github.com/opencontainers/go-digest: [v1.0.0-rc1 → v1.0.0](https://github.com/opencontainers/go-digest/compare/v1.0.0-rc1...v1.0.0)
-- github.com/opencontainers/runc: [819fcc6 → v1.0.0-rc92](https://github.com/opencontainers/runc/compare/819fcc6...v1.0.0-rc92)
-- github.com/opencontainers/runtime-spec: [237cc4f → 4d89ac9](https://github.com/opencontainers/runtime-spec/compare/237cc4f...4d89ac9)
-- github.com/opencontainers/selinux: [v1.5.2 → v1.6.0](https://github.com/opencontainers/selinux/compare/v1.5.2...v1.6.0)
-- github.com/prometheus/procfs: [v0.1.3 → v0.2.0](https://github.com/prometheus/procfs/compare/v0.1.3...v0.2.0)
-- github.com/quobyte/api: [v0.1.2 → v0.1.8](https://github.com/quobyte/api/compare/v0.1.2...v0.1.8)
-- github.com/spf13/cobra: [v1.0.0 → v1.1.1](https://github.com/spf13/cobra/compare/v1.0.0...v1.1.1)
-- github.com/spf13/viper: [v1.4.0 → v1.7.0](https://github.com/spf13/viper/compare/v1.4.0...v1.7.0)
-- github.com/storageos/go-api: [343b3ef → v2.2.0+incompatible](https://github.com/storageos/go-api/compare/343b3ef...v2.2.0)
-- github.com/stretchr/testify: [v1.4.0 → v1.6.1](https://github.com/stretchr/testify/compare/v1.4.0...v1.6.1)
-- github.com/vishvananda/netns: [52d707b → db3c7e5](https://github.com/vishvananda/netns/compare/52d707b...db3c7e5)
-- go.etcd.io/etcd: 17cef6e → dd1b699
-- go.opencensus.io: v0.22.2 → v0.22.3
-- golang.org/x/crypto: 75b2880 → 7f63de1
-- golang.org/x/exp: da58074 → 6cc2880
-- golang.org/x/lint: fdd1cda → 738671d
-- golang.org/x/net: ab34263 → 69a7880
-- golang.org/x/oauth2: 858c2ad → bf48bf1
-- golang.org/x/sys: ed371f2 → 5cba982
-- golang.org/x/text: v0.3.3 → v0.3.4
-- golang.org/x/time: 555d28b → 3af7569
-- golang.org/x/xerrors: 9bdfabe → 5ec99f8
-- google.golang.org/api: v0.15.1 → v0.20.0
-- google.golang.org/genproto: cb27e3a → 8816d57
-- google.golang.org/grpc: v1.27.0 → v1.27.1
-- google.golang.org/protobuf: v1.24.0 → v1.25.0
-- honnef.co/go/tools: v0.0.1-2019.2.3 → v0.0.1-2020.1.3
-- k8s.io/gengo: 8167cfd → 83324d8
-- k8s.io/klog/v2: v2.2.0 → v2.4.0
-- k8s.io/kube-openapi: 6aeccd4 → d219536
-- k8s.io/system-validators: v1.1.2 → v1.2.0
-- k8s.io/utils: d5654de → 67b214c
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.9 → v0.0.14
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1 → v4.0.2
-
-### Removed
-- github.com/armon/consul-api: [eb2c6b5](https://github.com/armon/consul-api/tree/eb2c6b5)
-- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
-- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
-- github.com/xlab/handysort: [fb3537e](https://github.com/xlab/handysort/tree/fb3537e)
-- github.com/xordataexchange/crypt: [b2862e3](https://github.com/xordataexchange/crypt/tree/b2862e3)
-- vbom.ml/util: db5cfe1
-
-
-
-# v1.20.0-rc.0
-
-
-## Downloads for v1.20.0-rc.0
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes.tar.gz) | acfee8658831f9503fccda0904798405434f17be7064a361a9f34c6ed04f1c0f685e79ca40cef5fcf34e3193bacbf467665e8dc277e0562ebdc929170034b5ae
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-src.tar.gz) | 9d962f8845e1fa221649cf0c0e178f0f03808486c49ea15ab5ec67861ec5aa948cf18bc0ee9b2067643c8332227973dd592e6a4457456a9d9d80e8ef28d5f7c3
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-darwin-amd64.tar.gz) | 062b57f1a450fe01d6184f104d81d376bdf5720010412821e315fd9b1b622a400ac91f996540daa66cee172006f3efade4eccc19265494f1a1d7cc9450f0b50a
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-386.tar.gz) | 86e96d2c2046c5e62e02bef30a6643f25e01f1b3eba256cab7dd61252908540c26cb058490e9cecc5a9bad97d2b577f5968884e9f1a90237e302419f39e068bc
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-amd64.tar.gz) | 619d3afb9ce902368390e71633396010e88e87c5fd848e3adc71571d1d4a25be002588415e5f83afee82460f8a7c9e0bd968335277cb8f8cb51e58d4bb43e64e
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-arm.tar.gz) | 60965150a60ab3d05a248339786e0c7da4b89a04539c3719737b13d71302bac1dd9bcaa427d8a1f84a7b42d0c67801dce2de0005e9e47d21122868b32ac3d40f
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-arm64.tar.gz) | 688e064f4ef6a17189dbb5af468c279b9de35e215c40500fb97b1d46692d222747023f9e07a7f7ba006400f9532a8912e69d7c5143f956b1dadca144c67ee711
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-ppc64le.tar.gz) | 47b8abc02b42b3b1de67da184921b5801d7e3cb09befac840c85913193fc5ac4e5e3ecfcb57da6b686ff21af9a3bd42ae6949d4744dbe6ad976794340e328b83
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-s390x.tar.gz) | 971b41d3169f30e6c412e0254c180636abb7ccc8dcee6641b0e9877b69752fc61aa30b76c19c108969df654fe385da3cb3a44dd59d3c28dc45561392d7e08874
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-windows-386.tar.gz) | 2d34e8387e31531d9aca5655f2f0d18e75b01825dc1c39b7beb73a7b7b610e2ba429e5ca97d5c41a71b67e75e7096c86ab63fda9baab4c0878c1ccb3a1aefac8
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-windows-amd64.tar.gz) | f909640f4140693bb871936f10a40e79b43502105d0adb318b35bb7a64a770ad9d05a3a732368ccd3d15d496d75454789165bd1f5c2571da9a00569b3e6c007c
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-amd64.tar.gz) | 0ea4458ae34108c633b4d48f1f128c6274dbc82b613492e78b3e0a2f656ac0df0bb9a75124e15d67c8e81850adcecf19f4ab0234c17247ee7ddf84f2df3e5eaa
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-arm.tar.gz) | aef6a4d457faa29936603370f29a8523bb274211c3cb5101bd31aaf469c91ba6bd149ea99a4ccdd83352cf37e4d6508c5ee475ec10292bccd2f77ceea31e1c28
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-arm64.tar.gz) | 4829f473e9d60f9929ad17c70fdc2b6b6509ed75418be0b23a75b28580949736cb5b0bd6382070f93aa0a2a8863f0b1596daf965186ca749996c29d03ef7d8b8
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-ppc64le.tar.gz) | 9ab0790d382a3e28df1c013762c09da0085449cfd09d176d80be932806c24a715ea829be0075c3e221a2ad9cf06e726b4c39ab41987c1fb0fee2563e48206763
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-s390x.tar.gz) | 98670b587e299856dd9821b7517a35f9a65835b915b153de08b66c54d82160438b66f774bf5306c07bc956d70ff709860bc23162225da5e89f995d3fdc1f0122
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-amd64.tar.gz) | 699e9c8d1837198312eade8eb6fec390f6a2fea9e08207d2f58e8bb6e3e799028aca69e4670aac0a4ba7cf0af683aee2c158bf78cc520c80edc876c8d94d521a
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-arm.tar.gz) | f3b5eab0669490e3cd7e802693daf3555d08323dfff6e73a881fce00fed4690e8bdaf1610278d9de74036ca37631016075e5695a02158b7d3e7582b20ef7fa35
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-arm64.tar.gz) | e5012f77363561a609aaf791baaa17d09009819c4085a57132e5feb5366275a54640094e6ed1cba527f42b586c6d62999c2a5435edf5665ff0e114db4423c2ae
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-ppc64le.tar.gz) | 2a6d6501620b1a9838dff05c66a40260cc22154a28027813346eb16e18c386bc3865298a46a0f08da71cd55149c5e7d07c4c4c431b4fd231486dd9d716548adb
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-s390x.tar.gz) | 5eca02777519e31428a1e5842fe540b813fb8c929c341bbc71dcfd60d98deb89060f8f37352e8977020e21e053379eead6478eb2d54ced66fb9d38d5f3142bf0
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-windows-amd64.tar.gz) | 8ace02e7623dff894e863a2e0fa7dfb916368431d1723170713fe82e334c0ae0481b370855b71e2561de0fb64fed124281be604761ec08607230b66fb9ed1c03
-
-## Changelog since v1.20.0-beta.2
-
-## Changes by Kind
-
-### Feature
-
-- Kubernetes is now built using go1.15.5
-  - build: Update to k/repo-infra@v0.1.2 (supports go1.15.5) ([#95776](https://github.com/kubernetes/kubernetes/pull/95776), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- Azure file migration graduates to beta, with CSIMigrationAzureFile flag off by default
+  as it requires installation of AzureFile CSI Driver. Users should enable CSIMigration and
+  CSIMigrationAzureFile features and install the [AzureFile CSI Driver](https://github.com/kubernetes-sigs/azurefile-csi-driver)
+  to avoid disruption to existing Pod and PVC objects at that time. Azure File CSI driver does not support using same persistent
+  volume with different fsgroups. When CSI migration is enabled for azurefile driver, such case is not supported.
+  (there is a case we support where volume is mounted with 0777 and then it readable/writable by everyone) ([#96293](https://github.com/kubernetes/kubernetes/pull/96293), [@andyzhangx](https://github.com/andyzhangx))
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
+- Set kubelet option `--volume-stats-agg-period` to negative value to disable volume calculations. ([#96675](https://github.com/kubernetes/kubernetes/pull/96675), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
 
 ### Failing Test
 
-- Resolves an issue running Ingress conformance tests on clusters which use finalizers on Ingress objects to manage releasing load balancer resources ([#96742](https://github.com/kubernetes/kubernetes/pull/96742), [@spencerhance](https://github.com/spencerhance)) [SIG Network and Testing]
-- The Conformance test "validates that there is no conflict between pods with same hostPort but different hostIP and protocol" now validates the connectivity to each hostPort, in addition to the functionality. ([#96627](https://github.com/kubernetes/kubernetes/pull/96627), [@aojea](https://github.com/aojea)) [SIG Scheduling and Testing]
+- Escape the special characters like `[`, `]` and ` ` that exist in vsphere windows path ([#98830](https://github.com/kubernetes/kubernetes/pull/98830), [@liyanhui1228](https://github.com/liyanhui1228)) [SIG Storage and Windows]
+- Kube-proxy: fix a bug on UDP `NodePort` Services where stale connection tracking entries may blackhole the traffic directed to the `NodePort` ([#98305](https://github.com/kubernetes/kubernetes/pull/98305), [@aojea](https://github.com/aojea))
+- Kubelet: fixes a bug in the HostPort dockershim implementation that caused the conformance test "HostPort validates that there is no conflict between pods with same hostPort but different hostIP and protocol" to fail. ([#98755](https://github.com/kubernetes/kubernetes/pull/98755), [@aojea](https://github.com/aojea)) [SIG Cloud Provider, Network and Node]
 
 ### Bug or Regression
 
-- Bump node-problem-detector version to v0.8.5 to fix OOM detection in with Linux kernels 5.1+ ([#96716](https://github.com/kubernetes/kubernetes/pull/96716), [@tosi3k](https://github.com/tosi3k)) [SIG Cloud Provider, Scalability and Testing]
-- Changes to timeout parameter handling in 1.20.0-beta.2 have been reverted to avoid breaking backwards compatibility with existing clients. ([#96727](https://github.com/kubernetes/kubernetes/pull/96727), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
-- Duplicate owner reference entries in create/update/patch requests now get deduplicated by the API server. The client sending the request now receives a warning header in the API response. Clients should stop sending requests with duplicate owner references. The API server may reject such requests as early as 1.24. ([#96185](https://github.com/kubernetes/kubernetes/pull/96185), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery and Testing]
-- Fix: resize Azure disk issue when it's in attached state ([#96705](https://github.com/kubernetes/kubernetes/pull/96705), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fixed a bug where aggregator_unavailable_apiservice metrics were reported for deleted apiservices. ([#96421](https://github.com/kubernetes/kubernetes/pull/96421), [@dgrisonnet](https://github.com/dgrisonnet)) [SIG API Machinery and Instrumentation]
-- Fixes code generation for non-namespaced create subresources fake client test. ([#96586](https://github.com/kubernetes/kubernetes/pull/96586), [@Doude](https://github.com/Doude)) [SIG API Machinery]
-- HTTP/2 connection health check is enabled by default in all Kubernetes clients. The feature should work out-of-the-box. If needed, users can tune the feature via the HTTP2_READ_IDLE_TIMEOUT_SECONDS and HTTP2_PING_TIMEOUT_SECONDS environment variables. The feature is disabled if HTTP2_READ_IDLE_TIMEOUT_SECONDS is set to 0. ([#95981](https://github.com/kubernetes/kubernetes/pull/95981), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- Kubeadm: fix coredns migration should be triggered when there are newdefault configs during kubeadm upgrade ([#96907](https://github.com/kubernetes/kubernetes/pull/96907), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Reduce volume name length for vsphere volumes ([#96533](https://github.com/kubernetes/kubernetes/pull/96533), [@gnufied](https://github.com/gnufied)) [SIG Storage]
-- Resolves a regression in 1.19+ with workloads targeting deprecated beta os/arch labels getting stuck in NodeAffinity status on node startup. ([#96810](https://github.com/kubernetes/kubernetes/pull/96810), [@liggitt](https://github.com/liggitt)) [SIG Node]
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-- github.com/google/cadvisor: [v0.38.4 → v0.38.5](https://github.com/google/cadvisor/compare/v0.38.4...v0.38.5)
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.20.0-beta.2
-
-
-## Downloads for v1.20.0-beta.2
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes.tar.gz) | fe769280aa623802a949b6a35fbddadbba1d6f9933a54132a35625683719595ecf58096a9aa0f7456f8d4931774df21bfa98e148bc3d85913f1da915134f77bd
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-src.tar.gz) | ce1c8d97c52e5189af335d673bd7e99c564816f6adebf249838f7e3f0e920f323b4e398a5d163ea767091497012ec38843c59ff14e6fdd07683b682135eed645
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | d6c14bd0f6702f4bbdf14a6abdfa4e5936de5b4efee38aa86c2bd7272967ec6d7868b88fc00ad4a7c3a20717a35e6be2b84e56dec04154fd702315f641409f7c
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-386.tar.gz) | b923c44cb0acb91a8f6fd442c2168aa6166c848f5d037ce50a7cb11502be3698db65836b373c916f75b648d6ac8d9158807a050eecc4e1c77cffa25b386c8cdb
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | 8cae14146a9034dcd4e9d69d5d700f195a77aac35f629a148960ae028ed8b4fe12213993fe3e6e464b4b3e111adebe6f3dd7ca0accc70c738ed5cfd8993edd7c
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-arm.tar.gz) | 1f54e5262a0432945ead57fcb924e6bfedd9ea76db1dd9ebd946787a2923c247cf16e10505307b47e365905a1b398678dac5af0f433c439c158a33e08362d97b
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | 31cf79c01e4878a231b4881fe3ed5ef790bd5fb5419388438d3f8c6a2129e655aba9e00b8e1d77e0bc5d05ecc75cf4ae02cf8266788822d0306c49c85ee584ed
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | 2527948c40be2e16724d939316ad5363f15aa22ebf42d59359d8b6f757d30cfef6447434cc93bc5caa5a23a6a00a2da8d8191b6441e06bba469d9d4375989a97
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | b777ad764b3a46651ecb0846e5b7f860bb2c1c4bd4d0fcc468c6ccffb7d3b8dcb6dcdd73b13c16ded7219f91bba9f1e92f9258527fd3bb162b54d7901ac303ff
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-windows-386.tar.gz) | 8a2f58aaab01be9fe298e4d01456536047cbdd39a37d3e325c1f69ceab3a0504998be41a9f41a894735dfc4ed22bed02591eea5f3c75ce12d9e95ba134e72ec5
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | 2f69cda177a178df149f5de66b7dba7f5ce14c1ffeb7c8d7dc4130c701b47d89bb2fbe74e7a262f573e4d21dee2c92414d050d7829e7c6fc3637a9d6b0b9c5c1
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | 3ecaac0213d369eab691ac55376821a80df5013cb12e1263f18d1c236a9e49d42b3cea422175556d8f929cdf3109b22c0b6212ac0f2e80cc7a5f4afa3aba5f24
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-arm.tar.gz) | 580030b57ff207e177208fec0801a43389cae10cc2c9306327d354e7be6a055390184531d54b6742e0983550b7a76693cc4a705c2d2f4ac30495cf63cef26b9b
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | 3e3286bd54671549fbef0dfdaaf1da99bc5c3efb32cc8d1e1985d9926520cea0c43bcf7cbcbbc8b1c1a95eab961255693008af3bb1ba743362998b5f0017d6d7
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | 9fa051e7e97648e97e26b09ab6d26be247b41b1a5938d2189204c9e6688e455afe76612bbcdd994ed5692935d0d960bd96dc222bce4b83f61d62557752b9d75b
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | fa85d432eff586f30975c95664ac130b9f5ae02dc52b97613ed7a41324496631ea11d1a267daba564cf2485a9e49707814d86bbd3175486c7efc8b58a9314af5
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-amd64.tar.gz) | 86e631f95fe670b467ead2b88d34e0364eaa275935af433d27cc378d82dcaa22041ccce40f5fa9561b9656dadaa578dc018ad458a59b1690d35f86dca4776b5c
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-arm.tar.gz) | a8754ff58a0e902397056b8615ab49af07aca347ba7cc4a812c238e3812234862270f25106b6a94753b157bb153b8eae8b39a01ed67384774d798598c243583b
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-arm64.tar.gz) | 28d727d7d08e2c856c9b4a574ef2dbf9e37236a0555f7ec5258b4284fa0582fb94b06783aaf50bf661f7503d101fbd70808aba6de02a2f0af94db7d065d25947
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-ppc64le.tar.gz) | a1283449f1a0b155c11449275e9371add544d0bdd4609d6dc737ed5f7dd228e84e24ff249613a2a153691627368dd894ad64f4e6c0010eecc6efd2c13d4fb133
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-s390x.tar.gz) | 5806028ba15a6a9c54a34f90117bc3181428dbb0e7ced30874c9f4a953ea5a0e9b2c73e6b1e2545e1b4e5253e9c7691588538b44cdfa666ce6865964b92d2fa8
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-windows-amd64.tar.gz) | d5327e3b7916c78777b9b69ba0f3758c3a8645c67af80114a0ae52babd7af27bb504febbaf51b1bfe5bd2d74c8c5c573471e1cb449f2429453f4b1be9d5e682a
-
-## Changelog since v1.20.0-beta.1
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - A bug was fixed in kubelet where exec probe timeouts were not respected. Ensure that pods relying on this behavior are updated to correctly handle probe timeouts.
-  
-  This change in behavior may be unexpected for some clusters and can be disabled by turning off the ExecProbeTimeout feature gate. This gate will be locked and removed in future releases so that exec probe timeouts are always respected. ([#94115](https://github.com/kubernetes/kubernetes/pull/94115), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Testing]
-  - For CSI drivers, kubelet no longer creates the target_path for NodePublishVolume in accordance with the CSI spec. Kubelet also no longer checks if staging and target paths are mounts or corrupted. CSI drivers need to be idempotent and do any necessary mount verification. ([#88759](https://github.com/kubernetes/kubernetes/pull/88759), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-  - Kubeadm:
-  - The label applied to control-plane nodes "node-role.kubernetes.io/master" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Introduce a new label "node-role.kubernetes.io/control-plane" that will be applied in parallel to "node-role.kubernetes.io/master" until the removal of the "node-role.kubernetes.io/master" label.
-  - Make "kubeadm upgrade apply" add the "node-role.kubernetes.io/control-plane" label on existing nodes that only have the "node-role.kubernetes.io/master" label during upgrade.
-  - Please adapt your tooling built on top of kubeadm to use the "node-role.kubernetes.io/control-plane" label.
-  
-  - The taint applied to control-plane nodes "node-role.kubernetes.io/master:NoSchedule" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Apply toleration for a new, future taint "node-role.kubernetes.io/control-plane:NoSchedule" to the kubeadm CoreDNS / kube-dns managed manifests. Note that this taint is not yet applied to kubeadm control-plane nodes.
-  - Please adapt your workloads to tolerate the same future taint preemptively.
-  
-  For more details see: http://git.k8s.io/enhancements/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md ([#95382](https://github.com/kubernetes/kubernetes/pull/95382), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
- 
-## Changes by Kind
-
-### Deprecation
-
-- Docker support in the kubelet is now deprecated and will be removed in a future release. The kubelet uses a module called "dockershim" which implements CRI support for Docker and it has seen maintenance issues in the Kubernetes community. We encourage you to evaluate moving to a container runtime that is a full-fledged implementation of CRI (v1alpha1 or v1 compliant) as they become available. ([#94624](https://github.com/kubernetes/kubernetes/pull/94624), [@dims](https://github.com/dims)) [SIG Node]
-- Kubectl: deprecate --delete-local-data ([#95076](https://github.com/kubernetes/kubernetes/pull/95076), [@dougsland](https://github.com/dougsland)) [SIG CLI, Cloud Provider and Scalability]
-
-### API Change
-
-- API priority and fairness graduated to beta
-  1.19 servers with APF turned on should not be run in a multi-server cluster with 1.20+ servers. ([#96527](https://github.com/kubernetes/kubernetes/pull/96527), [@adtac](https://github.com/adtac)) [SIG API Machinery and Testing]
-- Add LoadBalancerIPMode feature gate ([#92312](https://github.com/kubernetes/kubernetes/pull/92312), [@Sh4d1](https://github.com/Sh4d1)) [SIG Apps, CLI, Cloud Provider and Network]
-- Add WindowsContainerResources and Annotations to CRI-API UpdateContainerResourcesRequest ([#95741](https://github.com/kubernetes/kubernetes/pull/95741), [@katiewasnothere](https://github.com/katiewasnothere)) [SIG Node]
-- Add a 'serving' and `terminating` condition to the EndpointSlice API.
-  
-  `serving` tracks the readiness of endpoints regardless of their terminating state. This is distinct from `ready` since `ready` is only true when pods are not terminating. 
-  `terminating` is true when an endpoint is terminating. For pods this is any endpoint with a deletion timestamp. ([#92968](https://github.com/kubernetes/kubernetes/pull/92968), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
-- Add support for hugepages to downward API ([#86102](https://github.com/kubernetes/kubernetes/pull/86102), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Adds kubelet alpha feature, `GracefulNodeShutdown` which makes kubelet aware of node system shutdowns and result in graceful termination of pods during a system shutdown. ([#96129](https://github.com/kubernetes/kubernetes/pull/96129), [@bobbypage](https://github.com/bobbypage)) [SIG Node]
-- AppProtocol is now GA for Endpoints and Services. The ServiceAppProtocol feature gate will be deprecated in 1.21. ([#96327](https://github.com/kubernetes/kubernetes/pull/96327), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Automatic allocation of NodePorts for services with type LoadBalancer can now be disabled by setting the (new) parameter
-  Service.spec.allocateLoadBalancerNodePorts=false. The default is to allocate NodePorts for services with type LoadBalancer which is the existing behavior. ([#92744](https://github.com/kubernetes/kubernetes/pull/92744), [@uablrek](https://github.com/uablrek)) [SIG Apps and Network]
-- Document that ServiceTopology feature is required to use `service.spec.topologyKeys`. ([#96528](https://github.com/kubernetes/kubernetes/pull/96528), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
-- EndpointSlice has a new NodeName field guarded by the EndpointSliceNodeName feature gate.
-  - EndpointSlice topology field will be deprecated in an upcoming release.
-  - EndpointSlice "IP" address type is formally removed after being deprecated in Kubernetes 1.17.
-  - The discovery.k8s.io/v1alpha1 API is deprecated and will be removed in Kubernetes 1.21. ([#96440](https://github.com/kubernetes/kubernetes/pull/96440), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps and Network]
-- Fewer candidates are enumerated for preemption to improve performance in large clusters ([#94814](https://github.com/kubernetes/kubernetes/pull/94814), [@adtac](https://github.com/adtac)) [SIG Scheduling]
-- If BoundServiceAccountTokenVolume is enabled, cluster admins can use metric `serviceaccount_stale_tokens_total` to monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off extended tokens by starting `kube-apiserver` with flag `--service-account-extend-token-expiration=false` ([#96273](https://github.com/kubernetes/kubernetes/pull/96273), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Auth]
-- Introduce alpha support for exec-based container registry credential provider plugins in the kubelet. ([#94196](https://github.com/kubernetes/kubernetes/pull/94196), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Release]
-- Kube-apiserver now deletes expired kube-apiserver Lease objects:
-  - The feature is under feature gate `APIServerIdentity`.
-  - A flag is added to kube-apiserver: `identity-lease-garbage-collection-check-period-seconds` ([#95895](https://github.com/kubernetes/kubernetes/pull/95895), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Apps, Auth and Testing]
-- Move configurable fsgroup change policy for pods to beta ([#96376](https://github.com/kubernetes/kubernetes/pull/96376), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]
-- New flag is introduced, i.e. --topology-manager-scope=container|pod. 
-  The default value is the "container" scope. ([#92967](https://github.com/kubernetes/kubernetes/pull/92967), [@cezaryzukowski](https://github.com/cezaryzukowski)) [SIG Instrumentation, Node and Testing]
-- NodeAffinity plugin can be configured with AddedAffinity. ([#96202](https://github.com/kubernetes/kubernetes/pull/96202), [@alculquicondor](https://github.com/alculquicondor)) [SIG Node, Scheduling and Testing]
-- Promote RuntimeClass feature to GA.
-  Promote node.k8s.io API groups from v1beta1 to v1. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-- Reminder: The labels "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" are deprecated in favor of "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" respectively.  All users of the "failure-domain.beta..." labels should switch to the "topology..." equivalents. ([#96033](https://github.com/kubernetes/kubernetes/pull/96033), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, CLI, Cloud Provider, Network, Node, Scheduling, Storage and Testing]
-- The usage of mixed protocol values in the same LoadBalancer Service is possible if the new feature gate MixedProtocolLBSVC is enabled.
-  "action required"
-  The feature gate is disabled by default. The user has to enable it for the API Server. ([#94028](https://github.com/kubernetes/kubernetes/pull/94028), [@janosi](https://github.com/janosi)) [SIG API Machinery and Apps]
-- This PR will introduce a feature gate CSIServiceAccountToken with two additional fields in `CSIDriverSpec`. ([#93130](https://github.com/kubernetes/kubernetes/pull/93130), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Users can try the cronjob controller v2 using the feature gate. This will be the default controller in future releases. ([#93370](https://github.com/kubernetes/kubernetes/pull/93370), [@alaypatel07](https://github.com/alaypatel07)) [SIG API Machinery, Apps, Auth and Testing]
-- VolumeSnapshotDataSource moves to GA in 1.20 release ([#95282](https://github.com/kubernetes/kubernetes/pull/95282), [@xing-yang](https://github.com/xing-yang)) [SIG Apps]
-
-### Feature
-
-- **Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.**: ([#95896](https://github.com/kubernetes/kubernetes/pull/95896), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Cluster Lifecycle]
-- A new set of alpha metrics are reported by the Kubernetes scheduler under the `/metrics/resources` endpoint that allow administrators to easily see the resource consumption (requests and limits for all resources on the pods) and compare it to actual pod usage or node capacity. ([#94866](https://github.com/kubernetes/kubernetes/pull/94866), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Instrumentation, Node and Scheduling]
-- Add --experimental-logging-sanitization flag enabling runtime protection from leaking sensitive data in logs ([#96370](https://github.com/kubernetes/kubernetes/pull/96370), [@serathius](https://github.com/serathius)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Add a StorageVersionAPI feature gate that makes API server update storageversions before serving certain write requests. 
-  This feature allows the storage migrator to manage storage migration for built-in resources. 
-  Enabling internal.apiserver.k8s.io/v1alpha1 API and APIServerIdentity feature gate are required to use this feature. ([#93873](https://github.com/kubernetes/kubernetes/pull/93873), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Auth and Testing]
-- Add a new `vSphere` metric: `cloudprovider_vsphere_vcenter_versions`. It's content show `vCenter` hostnames with the associated server version. ([#94526](https://github.com/kubernetes/kubernetes/pull/94526), [@Danil-Grigorev](https://github.com/Danil-Grigorev)) [SIG Cloud Provider and Instrumentation]
-- Add feature to size memory backed volumes ([#94444](https://github.com/kubernetes/kubernetes/pull/94444), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Storage and Testing]
-- Add node_authorizer_actions_duration_seconds metric that can be used to estimate load to node authorizer. ([#92466](https://github.com/kubernetes/kubernetes/pull/92466), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Auth and Instrumentation]
-- Add pod_ based CPU and memory metrics to Kubelet's  /metrics/resource endpoint ([#95839](https://github.com/kubernetes/kubernetes/pull/95839), [@egernst](https://github.com/egernst)) [SIG Instrumentation, Node and Testing]
-- Adds a headless service on node-local-cache addon. ([#88412](https://github.com/kubernetes/kubernetes/pull/88412), [@stafot](https://github.com/stafot)) [SIG Cloud Provider and Network]
-- CRDs: For structural schemas, non-nullable null map fields will now be dropped and defaulted if a default is available. null items in list will continue being preserved, and fail validation if not nullable. ([#95423](https://github.com/kubernetes/kubernetes/pull/95423), [@apelisse](https://github.com/apelisse)) [SIG API Machinery]
-- E2e test for PodFsGroupChangePolicy ([#96247](https://github.com/kubernetes/kubernetes/pull/96247), [@saikat-royc](https://github.com/saikat-royc)) [SIG Storage and Testing]
-- Gradudate the Pod Resources API to G.A
-  Introduces the pod_resources_endpoint_requests_total metric which tracks the total number of requests to the pod resources API ([#92165](https://github.com/kubernetes/kubernetes/pull/92165), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Instrumentation, Node and Testing]
-- Introduce api-extensions category which will return: mutating admission configs, validating admission configs, CRDs and APIServices when used in kubectl get, for example. ([#95603](https://github.com/kubernetes/kubernetes/pull/95603), [@soltysh](https://github.com/soltysh)) [SIG API Machinery]
-- Kube-apiserver now maintains a Lease object to identify itself: 
-  - The feature is under feature gate `APIServerIdentity`. 
-  - Two flags are added to kube-apiserver: `identity-lease-duration-seconds`, `identity-lease-renew-interval-seconds` ([#95533](https://github.com/kubernetes/kubernetes/pull/95533), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Kube-apiserver: The timeout used when making health check calls to etcd can now be configured with `--etcd-healthcheck-timeout`. The default timeout is 2 seconds, matching the previous behavior. ([#93244](https://github.com/kubernetes/kubernetes/pull/93244), [@Sh4d1](https://github.com/Sh4d1)) [SIG API Machinery]
-- Kubectl: Previously users cannot provide arguments to a external diff tool via KUBECTL_EXTERNAL_DIFF env. This release now allow users to specify args to KUBECTL_EXTERNAL_DIFF env. ([#95292](https://github.com/kubernetes/kubernetes/pull/95292), [@dougsland](https://github.com/dougsland)) [SIG CLI]
-- Scheduler now ignores Pod update events if the resourceVersion of old and new Pods are identical. ([#96071](https://github.com/kubernetes/kubernetes/pull/96071), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Support custom tags for cloud provider managed resources ([#96450](https://github.com/kubernetes/kubernetes/pull/96450), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support customize load balancer health probe protocol and request path ([#96338](https://github.com/kubernetes/kubernetes/pull/96338), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support multiple standard load balancers in one cluster ([#96111](https://github.com/kubernetes/kubernetes/pull/96111), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- The beta `RootCAConfigMap` feature gate is enabled by default and causes kube-controller-manager to publish a "kube-root-ca.crt" ConfigMap to every namespace. This ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver. ([#96197](https://github.com/kubernetes/kubernetes/pull/96197), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth and Testing]
-- The kubelet_runtime_operations_duration_seconds metric got additional buckets of 60, 300, 600, 900 and 1200 seconds ([#96054](https://github.com/kubernetes/kubernetes/pull/96054), [@alvaroaleman](https://github.com/alvaroaleman)) [SIG Instrumentation and Node]
-- There is a new pv_collector_total_pv_count metric that counts persistent volumes by the volume plugin name and volume mode. ([#95719](https://github.com/kubernetes/kubernetes/pull/95719), [@tsmetana](https://github.com/tsmetana)) [SIG Apps, Instrumentation, Storage and Testing]
-- Volume snapshot e2e test to validate PVC and VolumeSnapshotContent finalizer ([#95863](https://github.com/kubernetes/kubernetes/pull/95863), [@RaunakShah](https://github.com/RaunakShah)) [SIG Cloud Provider, Storage and Testing]
-- Warns user when executing kubectl apply/diff to resource currently being deleted. ([#95544](https://github.com/kubernetes/kubernetes/pull/95544), [@SaiHarshaK](https://github.com/SaiHarshaK)) [SIG CLI]
-- `kubectl alpha debug` has graduated to beta and is now `kubectl debug`. ([#96138](https://github.com/kubernetes/kubernetes/pull/96138), [@verb](https://github.com/verb)) [SIG CLI and Testing]
-- `kubectl debug` gains support for changing container images when copying a pod for debugging, similar to how `kubectl set image` works. See `kubectl help debug` for more information. ([#96058](https://github.com/kubernetes/kubernetes/pull/96058), [@verb](https://github.com/verb)) [SIG CLI]
-
-### Documentation
-
-- Updates docs and guidance on cloud provider InstancesV2 and Zones interface for external cloud providers:
-  - removes experimental warning for InstancesV2
-  - document that implementation of InstancesV2 will disable calls to Zones
-  - deprecate Zones in favor of InstancesV2 ([#96397](https://github.com/kubernetes/kubernetes/pull/96397), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
-
-### Bug or Regression
-
-- Change plugin name in fsgroupapplymetrics of csi and flexvolume to distinguish different driver ([#95892](https://github.com/kubernetes/kubernetes/pull/95892), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation, Storage and Testing]
-- Clear UDP conntrack entry on endpoint changes when using nodeport ([#71573](https://github.com/kubernetes/kubernetes/pull/71573), [@JacobTanenbaum](https://github.com/JacobTanenbaum)) [SIG Network]
-- Exposes and sets a default timeout for the TokenReview client for DelegatingAuthenticationOptions ([#96217](https://github.com/kubernetes/kubernetes/pull/96217), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Fix CVE-2020-8555 for Quobyte client connections. ([#95206](https://github.com/kubernetes/kubernetes/pull/95206), [@misterikkit](https://github.com/misterikkit)) [SIG Storage]
-- Fix IP fragmentation of UDP and TCP packets not supported issues on LoadBalancer rules ([#96464](https://github.com/kubernetes/kubernetes/pull/96464), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix a bug that DefaultPreemption plugin is disabled when using (legacy) scheduler policy. ([#96439](https://github.com/kubernetes/kubernetes/pull/96439), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
-- Fix bug in JSON path parser where an error occurs when a range is empty ([#95933](https://github.com/kubernetes/kubernetes/pull/95933), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
-- Fix client-go prometheus metrics to correctly present the API path accessed in some environments. ([#74363](https://github.com/kubernetes/kubernetes/pull/74363), [@aanm](https://github.com/aanm)) [SIG API Machinery]
-- Fix memory leak in kube-apiserver when underlying time goes forth and back. ([#96266](https://github.com/kubernetes/kubernetes/pull/96266), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery]
-- Fix paging issues when Azure API returns empty values with non-empty nextLink ([#96211](https://github.com/kubernetes/kubernetes/pull/96211), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix pull image error from multiple ACRs using azure managed identity ([#96355](https://github.com/kubernetes/kubernetes/pull/96355), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix vSphere volumes that could be erroneously attached to wrong node ([#96224](https://github.com/kubernetes/kubernetes/pull/96224), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fixed a bug that prevents kubectl to validate CRDs with schema using x-kubernetes-preserve-unknown-fields on object fields. ([#96369](https://github.com/kubernetes/kubernetes/pull/96369), [@gautierdelorme](https://github.com/gautierdelorme)) [SIG API Machinery and Testing]
-- For vSphere Cloud Provider, If VM of worker node is deleted, the node will also be deleted by node controller ([#92608](https://github.com/kubernetes/kubernetes/pull/92608), [@lubronzhan](https://github.com/lubronzhan)) [SIG Cloud Provider]
-- HTTP/2 connection health check is enabled by default in all Kubernetes clients. The feature should work out-of-the-box. If needed, users can tune the feature via the HTTP2_READ_IDLE_TIMEOUT_SECONDS and HTTP2_PING_TIMEOUT_SECONDS environment variables. The feature is disabled if HTTP2_READ_IDLE_TIMEOUT_SECONDS is set to 0. ([#95981](https://github.com/kubernetes/kubernetes/pull/95981), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- If the user specifies an invalid timeout in the request URL, the request will be aborted with an HTTP 400.
-  - If the user specifies a timeout in the request URL that exceeds the maximum request deadline allowed by the apiserver, the request will be aborted with an HTTP 400. ([#96061](https://github.com/kubernetes/kubernetes/pull/96061), [@tkashem](https://github.com/tkashem)) [SIG API Machinery, Network and Testing]
-- Improve error messages related to nodePort endpoint changes conntrack entries cleanup. ([#96251](https://github.com/kubernetes/kubernetes/pull/96251), [@ravens](https://github.com/ravens)) [SIG Network]
-- Print go stack traces at -v=4 and not -v=2 ([#94663](https://github.com/kubernetes/kubernetes/pull/94663), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Remove ready file and its directory (which is created during volume SetUp) during emptyDir volume TearDown. ([#95770](https://github.com/kubernetes/kubernetes/pull/95770), [@jingxu97](https://github.com/jingxu97)) [SIG Storage]
-- Resolves non-deterministic behavior of the garbage collection controller when ownerReferences with incorrect data are encountered. Events with a reason of `OwnerRefInvalidNamespace` are recorded when namespace mismatches between child and owner objects are detected.
-  - A namespaced object with an ownerReference referencing a uid of a namespaced kind which does not exist in the same namespace is now consistently treated as though that owner does not exist, and the child object is deleted.
-  - A cluster-scoped object with an ownerReference referencing a uid of a namespaced kind is now consistently treated as though that owner is not resolvable, and the child object is ignored by the garbage collector. ([#92743](https://github.com/kubernetes/kubernetes/pull/92743), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-- Skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:162]: Driver azure-disk doesn't support snapshot type DynamicSnapshot -- skipping
-  skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:185]: Driver azure-disk doesn't support ntfs -- skipping ([#96144](https://github.com/kubernetes/kubernetes/pull/96144), [@qinpingli](https://github.com/qinpingli)) [SIG Storage and Testing]
-- The AWS network load balancer attributes can now be specified during service creation ([#95247](https://github.com/kubernetes/kubernetes/pull/95247), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- The kube-apiserver will no longer serve APIs that should have been deleted in GA non-alpha levels.  Alpha levels will continue to serve the removed APIs so that CI doesn't immediately break. ([#96525](https://github.com/kubernetes/kubernetes/pull/96525), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
-- Update max azure data disk count map ([#96308](https://github.com/kubernetes/kubernetes/pull/96308), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Update the route table tag in the route reconcile loop ([#96545](https://github.com/kubernetes/kubernetes/pull/96545), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Volume binding: report UnschedulableAndUnresolvable status instead of an error when bound PVs not found ([#95541](https://github.com/kubernetes/kubernetes/pull/95541), [@cofyc](https://github.com/cofyc)) [SIG Apps, Scheduling and Storage]
-- [kubectl] Fail when local source file doesn't exist ([#90333](https://github.com/kubernetes/kubernetes/pull/90333), [@bamarni](https://github.com/bamarni)) [SIG CLI]
+- AcceleratorStats will be available in the Summary API of kubelet when cri_stats_provider is used. ([#96873](https://github.com/kubernetes/kubernetes/pull/96873), [@ruiwen-zhao](https://github.com/ruiwen-zhao)) [SIG Node]
+- All data is no longer automatically deleted when a failure is detected during creation of the volume data file on a CSI volume. Now only the data file and volume path is removed. ([#96021](https://github.com/kubernetes/kubernetes/pull/96021), [@huffmanca](https://github.com/huffmanca))
+- Clean ReplicaSet by revision instead of creation timestamp in deployment controller ([#97407](https://github.com/kubernetes/kubernetes/pull/97407), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
+- Cleanup subnet in frontend IP configs to prevent huge subnet request bodies in some scenarios. ([#98133](https://github.com/kubernetes/kubernetes/pull/98133), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Client-go exec credential plugins will pass stdin only when interactive terminal is detected on stdin. This fixes a bug where previously it was checking if **stdout** is an interactive terminal. ([#99654](https://github.com/kubernetes/kubernetes/pull/99654), [@ankeesler](https://github.com/ankeesler))
+- Cloud-controller-manager: routes controller should not depend on --allocate-node-cidrs ([#97029](https://github.com/kubernetes/kubernetes/pull/97029), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider and Testing]
+- Cluster Autoscaler version bump to v1.20.0 ([#97011](https://github.com/kubernetes/kubernetes/pull/97011), [@towca](https://github.com/towca))
+- Creating a PVC with DataSource should fail for non-CSI plugins. ([#97086](https://github.com/kubernetes/kubernetes/pull/97086), [@xing-yang](https://github.com/xing-yang)) [SIG Apps and Storage]
+- EndpointSlice controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99345](https://github.com/kubernetes/kubernetes/pull/99345), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- EndpointSlice controllers are less likely to create duplicate EndpointSlices. ([#100103](https://github.com/kubernetes/kubernetes/pull/100103), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- EndpointSliceMirroring controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99756](https://github.com/kubernetes/kubernetes/pull/99756), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Ensure all vSphere nodes are are tracked by volume attach-detach controller ([#96689](https://github.com/kubernetes/kubernetes/pull/96689), [@gnufied](https://github.com/gnufied))
+- Ensure empty string annotations are copied over in rollbacks. ([#94858](https://github.com/kubernetes/kubernetes/pull/94858), [@waynepeking348](https://github.com/waynepeking348))
+- Ensure only one LoadBalancer rule is created when HA mode is enabled ([#99825](https://github.com/kubernetes/kubernetes/pull/99825), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Ensure that client-go's EventBroadcaster is safe (non-racy) during shutdown. ([#95664](https://github.com/kubernetes/kubernetes/pull/95664), [@DirectXMan12](https://github.com/DirectXMan12)) [SIG API Machinery]
+- Explicitly pass `KUBE_BUILD_CONFORMANCE=y` in `package-tarballs` to reenable building the conformance tarballs. ([#100571](https://github.com/kubernetes/kubernetes/pull/100571), [@puerco](https://github.com/puerco))
+- Fix Azure file migration e2e test failure when CSIMigration is turned on. ([#97877](https://github.com/kubernetes/kubernetes/pull/97877), [@andyzhangx](https://github.com/andyzhangx))
+- Fix CSI-migrated inline EBS volumes failing to mount if their volumeID is prefixed by aws:// ([#96821](https://github.com/kubernetes/kubernetes/pull/96821), [@wongma7](https://github.com/wongma7)) [SIG Storage]
+- Fix CVE-2020-8555 for Gluster client connections. ([#97922](https://github.com/kubernetes/kubernetes/pull/97922), [@liggitt](https://github.com/liggitt)) [SIG Storage]
+- Fix NPE in ephemeral storage eviction ([#98261](https://github.com/kubernetes/kubernetes/pull/98261), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fix PermissionDenied issue on SMB mount for Windows ([#99550](https://github.com/kubernetes/kubernetes/pull/99550), [@andyzhangx](https://github.com/andyzhangx))
+- Fix bug that would let the Horizontal Pod Autoscaler scale down despite at least one metric being unavailable/invalid ([#99514](https://github.com/kubernetes/kubernetes/pull/99514), [@mikkeloscar](https://github.com/mikkeloscar)) [SIG Apps and Autoscaling]
+- Fix cgroup handling for systemd with cgroup v2 ([#98365](https://github.com/kubernetes/kubernetes/pull/98365), [@odinuge](https://github.com/odinuge)) [SIG Node]
+- Fix counting error in service/nodeport/loadbalancer quota check ([#97451](https://github.com/kubernetes/kubernetes/pull/97451), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Network and Testing]
+- Fix errors when accessing Windows container stats for Dockershim ([#98510](https://github.com/kubernetes/kubernetes/pull/98510), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node and Windows]
+- Fix kube-proxy container image architecture for non amd64 images. ([#98526](https://github.com/kubernetes/kubernetes/pull/98526), [@saschagrunert](https://github.com/saschagrunert))
+- Fix missing cadvisor machine metrics. ([#97006](https://github.com/kubernetes/kubernetes/pull/97006), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node]
+- Fix nil VMSS name when setting service to auto mode ([#97366](https://github.com/kubernetes/kubernetes/pull/97366), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Fix privileged config of Pod Sandbox which was previously ignored. ([#96877](https://github.com/kubernetes/kubernetes/pull/96877), [@xeniumlee](https://github.com/xeniumlee))
+- Fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable ([#95269](https://github.com/kubernetes/kubernetes/pull/95269), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
+- Fix the regression with the slow pods termination. Before this fix pods may take an additional time to terminate - up to one minute. Reversing the change that ensured that CNI resources cleaned up when the pod is removed on API server. ([#97980](https://github.com/kubernetes/kubernetes/pull/97980), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Node]
+- Fix to recover CSI volumes from certain dangling attachments ([#96617](https://github.com/kubernetes/kubernetes/pull/96617), [@yuga711](https://github.com/yuga711)) [SIG Apps and Storage]
+- Fix: azure file latency issue for metadata-heavy workloads ([#97082](https://github.com/kubernetes/kubernetes/pull/97082), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fixed Cinder volume IDs on OpenStack Train ([#96673](https://github.com/kubernetes/kubernetes/pull/96673), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider]
+- Fixed FibreChannel volume plugin corrupting filesystems on detach of multipath volumes. ([#97013](https://github.com/kubernetes/kubernetes/pull/97013), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed a bug in kubelet that will saturate CPU utilization after containerd got restarted. ([#97174](https://github.com/kubernetes/kubernetes/pull/97174), [@hanlins](https://github.com/hanlins)) [SIG Node]
+- Fixed a bug that causes smaller number of conntrack-max being used under CPU static policy. (#99225, @xh4n3) ([#99613](https://github.com/kubernetes/kubernetes/pull/99613), [@xh4n3](https://github.com/xh4n3)) [SIG Network]
+- Fixed a bug that on k8s nodes, when the policy of INPUT chain in filter table is not ACCEPT, healthcheck nodeport would not work.
+  Added iptables rules to allow healthcheck nodeport traffic. ([#97824](https://github.com/kubernetes/kubernetes/pull/97824), [@hanlins](https://github.com/hanlins)) [SIG Network]
+- Fixed a bug that the kubelet cannot start on BtrfS. ([#98042](https://github.com/kubernetes/kubernetes/pull/98042), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Fixed a race condition on API server startup ensuring previously created webhook configurations are effective before the first write request is admitted. ([#95783](https://github.com/kubernetes/kubernetes/pull/95783), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
+- Fixed an issue with garbage collection failing to clean up namespaced children of an object also referenced incorrectly by cluster-scoped children ([#98068](https://github.com/kubernetes/kubernetes/pull/98068), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
+- Fixed authentication_duration_seconds metric scope. Previously, it included whole apiserver request duration which yields inaccurate results. ([#99944](https://github.com/kubernetes/kubernetes/pull/99944), [@marseel](https://github.com/marseel))
+- Fixed bug in CPUManager with race on container map access ([#97427](https://github.com/kubernetes/kubernetes/pull/97427), [@klueska](https://github.com/klueska)) [SIG Node]
+- Fixed bug that caused cAdvisor to incorrectly detect single-socket multi-NUMA topology. ([#99315](https://github.com/kubernetes/kubernetes/pull/99315), [@iwankgb](https://github.com/iwankgb)) [SIG Node]
+- Fixed cleanup of block devices when /var/lib/kubelet is a symlink. ([#96889](https://github.com/kubernetes/kubernetes/pull/96889), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed no effect namespace when exposing deployment with --dry-run=client. ([#97492](https://github.com/kubernetes/kubernetes/pull/97492), [@masap](https://github.com/masap)) [SIG CLI]
+- Fixed provisioning of Cinder volumes migrated to CSI when StorageClass with AllowedTopologies was used. ([#98311](https://github.com/kubernetes/kubernetes/pull/98311), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixes a bug of identifying the correct containerd process. ([#97888](https://github.com/kubernetes/kubernetes/pull/97888), [@pacoxu](https://github.com/pacoxu))
+- Fixes add-on manager leader election to use leases instead of endpoints, similar to what kube-controller-manager does in 1.20 ([#98968](https://github.com/kubernetes/kubernetes/pull/98968), [@liggitt](https://github.com/liggitt))
+- Fixes connection errors when using `--volume-host-cidr-denylist` or `--volume-host-allow-local-loopback` ([#98436](https://github.com/kubernetes/kubernetes/pull/98436), [@liggitt](https://github.com/liggitt)) [SIG Network and Storage]
+- Fixes problem where invalid selector on `PodDisruptionBudget` leads to a nil pointer dereference that causes the Controller manager to crash loop. ([#98750](https://github.com/kubernetes/kubernetes/pull/98750), [@mortent](https://github.com/mortent))
+- Fixes spurious errors about IPv6 in `kube-proxy` logs on nodes with IPv6 disabled. ([#99127](https://github.com/kubernetes/kubernetes/pull/99127), [@danwinship](https://github.com/danwinship))
+- Fixing a bug where a failed node may not have the NoExecute taint set correctly ([#96876](https://github.com/kubernetes/kubernetes/pull/96876), [@howieyuen](https://github.com/howieyuen)) [SIG Apps and Node]
+- GCE Internal LoadBalancer sync loop will now release the ILB IP address upon sync failure. An error in ILB forwarding rule creation will no longer leak IP addresses. ([#97740](https://github.com/kubernetes/kubernetes/pull/97740), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider and Network]
+- Ignore update pod with no new images in alwaysPullImages admission controller ([#96668](https://github.com/kubernetes/kubernetes/pull/96668), [@pacoxu](https://github.com/pacoxu)) [SIG Apps, Auth and Node]
+- Improve speed of vSphere PV provisioning and reduce number of API calls ([#100054](https://github.com/kubernetes/kubernetes/pull/100054), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- KUBECTL_EXTERNAL_DIFF now accepts equal sign for additional parameters. ([#98158](https://github.com/kubernetes/kubernetes/pull/98158), [@dougsland](https://github.com/dougsland)) [SIG CLI]
+- Kube-apiserver: an update of a pod with a generic ephemeral volume dropped that volume if the feature had been disabled since creating the pod with such a volume ([#99446](https://github.com/kubernetes/kubernetes/pull/99446), [@pohly](https://github.com/pohly)) [SIG Apps, Node and Storage]
+- Kube-proxy: remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
+- Kubeadm installs etcd v3.4.13 when creating cluster v1.19 ([#97244](https://github.com/kubernetes/kubernetes/pull/97244), [@pacoxu](https://github.com/pacoxu))
+- Kubeadm: Fixes a kubeadm upgrade bug that could cause a custom CoreDNS configuration to be replaced with the default. ([#97016](https://github.com/kubernetes/kubernetes/pull/97016), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubeadm: Some text in the `kubeadm upgrade plan` output has changed. If you have scripts or other automation that parses this output, please review these changes and update your scripts to account for the new output. ([#98728](https://github.com/kubernetes/kubernetes/pull/98728), [@stmcginnis](https://github.com/stmcginnis)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug in the host memory detection code on 32bit Linux platforms ([#97403](https://github.com/kubernetes/kubernetes/pull/97403), [@abelbarrera15](https://github.com/abelbarrera15)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where "kubeadm join" would not properly handle missing names for existing etcd members. ([#97372](https://github.com/kubernetes/kubernetes/pull/97372), [@ihgann](https://github.com/ihgann)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where "kubeadm upgrade" commands can fail if CoreDNS v1.8.0 is installed. ([#97919](https://github.com/kubernetes/kubernetes/pull/97919), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where external credentials in an existing admin.conf prevented the CA certificate to be written in the cluster-info ConfigMap. ([#98882](https://github.com/kubernetes/kubernetes/pull/98882), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
+- Kubeadm: get k8s CI version markers from k8s infra bucket ([#98836](https://github.com/kubernetes/kubernetes/pull/98836), [@hasheddan](https://github.com/hasheddan)) [SIG Cluster Lifecycle and Release]
+- Kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false ([#98984](https://github.com/kubernetes/kubernetes/pull/98984), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubectl logs: `--ignore-errors` is now honored by all containers, maintaining consistency with parallelConsumeRequest behavior. ([#97686](https://github.com/kubernetes/kubernetes/pull/97686), [@wzshiming](https://github.com/wzshiming))
+- Kubectl-convert: Fix `no kind "Ingress" is registered for version` error ([#97754](https://github.com/kubernetes/kubernetes/pull/97754), [@wzshiming](https://github.com/wzshiming))
+- Kubectl: Fixed panic when describing an ingress backend without an API Group ([#100505](https://github.com/kubernetes/kubernetes/pull/100505), [@lauchokyip](https://github.com/lauchokyip)) [SIG CLI]
+- Kubelet now cleans up orphaned volume directories automatically ([#95301](https://github.com/kubernetes/kubernetes/pull/95301), [@lorenz](https://github.com/lorenz)) [SIG Node and Storage]
+- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]
+- Kubelet: Fix kubelet from panic after getting the wrong signal ([#98200](https://github.com/kubernetes/kubernetes/pull/98200), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Kubelet: Fix repeatedly acquiring the inhibit lock ([#98088](https://github.com/kubernetes/kubernetes/pull/98088), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Kubelet: Fixed the bug of getting the number of cpu when the number of cpu logical processors is more than 64 in windows ([#97378](https://github.com/kubernetes/kubernetes/pull/97378), [@hwdef](https://github.com/hwdef)) [SIG Node and Windows]
+- Limits lease to have 1000 maximum attached objects. ([#98257](https://github.com/kubernetes/kubernetes/pull/98257), [@lingsamuel](https://github.com/lingsamuel))
+- Mitigate CVE-2020-8555 for kube-up using GCE by preventing local loopback folume hosts. ([#97934](https://github.com/kubernetes/kubernetes/pull/97934), [@mattcary](https://github.com/mattcary)) [SIG Cloud Provider and Storage]
+- On single-stack configured (IPv4 or IPv6, but not both) clusters, Services which are both headless (no clusterIP) and selectorless (empty or undefined selector) will report `ipFamilyPolicy RequireDualStack` and will have entries in `ipFamilies[]` for both IPv4 and IPv6.  This is a change from alpha, but does not have any impact on the manually-specified Endpoints and EndpointSlices for the Service. ([#99555](https://github.com/kubernetes/kubernetes/pull/99555), [@thockin](https://github.com/thockin)) [SIG Apps and Network]
+- Performance regression #97685 has been fixed. ([#97860](https://github.com/kubernetes/kubernetes/pull/97860), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
+- Pod Log stats for windows now reports metrics ([#99221](https://github.com/kubernetes/kubernetes/pull/99221), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node, Storage, Testing and Windows]
+- Pod status updates faster when reacting on probe results. The first readiness probe will be called faster when startup probes succeeded, which will make Pod status as ready faster. ([#98376](https://github.com/kubernetes/kubernetes/pull/98376), [@matthyx](https://github.com/matthyx))
+- Readjust `kubelet_containers_per_pod_count` buckets to only show metrics greater than 1. ([#98169](https://github.com/kubernetes/kubernetes/pull/98169), [@wawa0210](https://github.com/wawa0210))
+- Remove CSI topology from migrated in-tree gcepd volume. ([#97823](https://github.com/kubernetes/kubernetes/pull/97823), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider and Storage]
+- Requests with invalid timeout parameters in the request URL now appear in the audit log correctly. ([#96901](https://github.com/kubernetes/kubernetes/pull/96901), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]
+- Resolve a "concurrent map read and map write" crashing error in the kubelet ([#95111](https://github.com/kubernetes/kubernetes/pull/95111), [@choury](https://github.com/choury)) [SIG Node]
+- Resolves spurious `Failed to list *v1.Secret` or `Failed to list *v1.ConfigMap` messages in kubelet logs. ([#99538](https://github.com/kubernetes/kubernetes/pull/99538), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- ResourceQuota of an entity now inclusively calculate Pod overhead ([#99600](https://github.com/kubernetes/kubernetes/pull/99600), [@gjkim42](https://github.com/gjkim42))
+- Return zero time (midnight on Jan. 1, 1970) instead of negative number when reporting startedAt and finishedAt of the not started or a running Pod when using `dockershim` as a runtime. ([#99585](https://github.com/kubernetes/kubernetes/pull/99585), [@Iceber](https://github.com/Iceber))
+- Reverts breaking change to inline AzureFile volumes; referenced secrets are now searched for in the same namespace as the pod as in previous releases. ([#100563](https://github.com/kubernetes/kubernetes/pull/100563), [@msau42](https://github.com/msau42))
+- Scores from InterPodAffinity have stronger differentiation. ([#98096](https://github.com/kubernetes/kubernetes/pull/98096), [@leileiwan](https://github.com/leileiwan)) [SIG Scheduling]
+- Specifying the KUBE_TEST_REPO environment variable when e2e tests are executed will instruct the test infrastructure to load that image from a location within the specified repo, using a predefined pattern. ([#93510](https://github.com/kubernetes/kubernetes/pull/93510), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- Static pods will be deleted gracefully. ([#98103](https://github.com/kubernetes/kubernetes/pull/98103), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Sync node status during kubelet node shutdown.
+  Adds an pod admission handler that rejects new pods when the node is in progress of shutting down. ([#98005](https://github.com/kubernetes/kubernetes/pull/98005), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- The calculation of pod UIDs for static pods has changed to ensure each static pod gets a unique value - this will cause all static pod containers to be recreated/restarted if an in-place kubelet upgrade from 1.20 to 1.21 is performed. Note that draining pods before upgrading the kubelet across minor versions is the supported upgrade path. ([#87461](https://github.com/kubernetes/kubernetes/pull/87461), [@bboreham](https://github.com/bboreham)) [SIG Node]
+- The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 ([#99795](https://github.com/kubernetes/kubernetes/pull/99795), [@robscott](https://github.com/robscott)) [SIG Network]
+- Truncates a message if it hits the `NoteLengthLimit` when the scheduler records an event for the pod that indicates the pod has failed to schedule. ([#98715](https://github.com/kubernetes/kubernetes/pull/98715), [@carlory](https://github.com/carlory))
+- Updated k8s.gcr.io/ingress-gce-404-server-with-metrics-amd64 to a version that serves /metrics endpoint on a non-default port. ([#97621](https://github.com/kubernetes/kubernetes/pull/97621), [@vbannai](https://github.com/vbannai)) [SIG Cloud Provider]
+- Updates the commands `
+   - kubectl kustomize {arg}
+   - kubectl apply -k {arg}
+  `to use same code as kustomize CLI [v4.0.5](https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.0.5) ([#98946](https://github.com/kubernetes/kubernetes/pull/98946), [@monopole](https://github.com/monopole))
+- Use force unmount for NFS volumes if regular mount fails after 1 minute timeout ([#96844](https://github.com/kubernetes/kubernetes/pull/96844), [@gnufied](https://github.com/gnufied)) [SIG Storage]
+- Use network.Interface.VirtualMachine.ID to get the binded VM
+  Skip standalone VM when reconciling LoadBalancer ([#97635](https://github.com/kubernetes/kubernetes/pull/97635), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Using exec auth plugins with kubectl no longer results in warnings about constructing many client instances from the same exec auth config. ([#97857](https://github.com/kubernetes/kubernetes/pull/97857), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Auth]
+- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
+  "primary IP family" of the cluster by picking a primary pod IP of the same family
+  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
+  in the order the administrator wanted (since some CNI plugins don't allow
+  configuring this). ([#97979](https://github.com/kubernetes/kubernetes/pull/97979), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
+- When dynamically provisioning Azure File volumes for a premium account, the requested size will be set to 100GB if the request is initially lower than this value to accommodate Azure File requirements. ([#99122](https://github.com/kubernetes/kubernetes/pull/99122), [@huffmanca](https://github.com/huffmanca)) [SIG Cloud Provider and Storage]
+- When using `Containerd` on Windows, the `C:\Windows\System32\drivers\etc\hosts` file will now be managed by kubelet. ([#83730](https://github.com/kubernetes/kubernetes/pull/83730), [@claudiubelu](https://github.com/claudiubelu))
+- `VolumeBindingArgs` now allow `BindTimeoutSeconds` to be set as zero, while the value zero indicates no waiting for the checking of volume binding operation. ([#99835](https://github.com/kubernetes/kubernetes/pull/99835), [@chendave](https://github.com/chendave)) [SIG Scheduling and Storage]
+- `kubectl exec` and `kubectl attach` now honor the `--quiet` flag which suppresses output from the local binary that could be confused by a script with the remote command output (all non-failure output is hidden). In addition, print inline with exec and attach the list of alternate containers when we default to the first spec.container. ([#99004](https://github.com/kubernetes/kubernetes/pull/99004), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
 
 ### Other (Cleanup or Flake)
 
-- Handle slow cronjob lister in cronjob controller v2 and improve memory footprint. ([#96443](https://github.com/kubernetes/kubernetes/pull/96443), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps]
-- --redirect-container-streaming is no longer functional. The flag will be removed in v1.22 ([#95935](https://github.com/kubernetes/kubernetes/pull/95935), [@tallclair](https://github.com/tallclair)) [SIG Node]
-- A new metric `requestAbortsTotal` has been introduced that counts aborted requests for each `group`, `version`, `verb`, `resource`, `subresource` and `scope`. ([#95002](https://github.com/kubernetes/kubernetes/pull/95002), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery, Cloud Provider, Instrumentation and Scheduling]
-- API priority and fairness metrics use snake_case in label names ([#96236](https://github.com/kubernetes/kubernetes/pull/96236), [@adtac](https://github.com/adtac)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Testing]
-- Applies translations on all command descriptions ([#95439](https://github.com/kubernetes/kubernetes/pull/95439), [@HerrNaN](https://github.com/HerrNaN)) [SIG CLI]
-- Changed: default "Accept-Encoding" header removed from HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes ([#96127](https://github.com/kubernetes/kubernetes/pull/96127), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Generators for services are removed from kubectl ([#95256](https://github.com/kubernetes/kubernetes/pull/95256), [@Git-Jiro](https://github.com/Git-Jiro)) [SIG CLI]
-- Introduce kubectl-convert plugin. ([#96190](https://github.com/kubernetes/kubernetes/pull/96190), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- Kube-scheduler now logs processed component config at startup ([#96426](https://github.com/kubernetes/kubernetes/pull/96426), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- NONE ([#96179](https://github.com/kubernetes/kubernetes/pull/96179), [@bbyrne5](https://github.com/bbyrne5)) [SIG Network]
-- Users will now be able to configure all supported values for AWS NLB health check interval and thresholds for new resources. ([#96312](https://github.com/kubernetes/kubernetes/pull/96312), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
+- APIs for kubelet annotations and labels from `k8s.io/kubernetes/pkg/kubelet/apis` are now moved under `k8s.io/kubelet/pkg/apis/` ([#98931](https://github.com/kubernetes/kubernetes/pull/98931), [@michaelbeaumont](https://github.com/michaelbeaumont))
+- Apiserver_request_duration_seconds is promoted to stable status. ([#99925](https://github.com/kubernetes/kubernetes/pull/99925), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
+- Bump github.com/Azure/go-autorest/autorest to v0.11.12 ([#97033](https://github.com/kubernetes/kubernetes/pull/97033), [@patrickshan](https://github.com/patrickshan)) [SIG API Machinery, CLI, Cloud Provider and Cluster Lifecycle]
+- Clients required to use go1.15.8+ or go1.16+ if kube-apiserver has the goaway feature enabled to avoid unexpected data race condition. ([#98809](https://github.com/kubernetes/kubernetes/pull/98809), [@answer1991](https://github.com/answer1991))
+- Delete deprecated `service.beta.kubernetes.io/azure-load-balancer-mixed-protocols` mixed procotol annotation in favor of the MixedProtocolLBService feature ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- EndpointSlice generation is now incremented when labels change. ([#99750](https://github.com/kubernetes/kubernetes/pull/99750), [@robscott](https://github.com/robscott)) [SIG Network]
+- Featuregate AllowInsecureBackendProxy graduates to GA and unconditionally enabled. ([#99658](https://github.com/kubernetes/kubernetes/pull/99658), [@deads2k](https://github.com/deads2k))
+- Increase timeout for pod lifecycle test to reach pod status=ready ([#96691](https://github.com/kubernetes/kubernetes/pull/96691), [@hh](https://github.com/hh))
+- Increased `CSINodeIDMaxLength` from 128 bytes to 192 bytes. ([#98753](https://github.com/kubernetes/kubernetes/pull/98753), [@Jiawei0227](https://github.com/Jiawei0227))
+- Kube-apiserver: The OIDC authenticator no longer waits 10 seconds before attempting to fetch the metadata required to verify tokens. ([#97693](https://github.com/kubernetes/kubernetes/pull/97693), [@enj](https://github.com/enj)) [SIG API Machinery and Auth]
+- Kube-proxy: Traffic from the cluster directed to ExternalIPs is always sent directly to the Service. ([#96296](https://github.com/kubernetes/kubernetes/pull/96296), [@aojea](https://github.com/aojea)) [SIG Network and Testing]
+- Kubeadm: change the default image repository for CI images from 'gcr.io/kubernetes-ci-images' to 'gcr.io/k8s-staging-ci-images' ([#97087](https://github.com/kubernetes/kubernetes/pull/97087), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubectl: The deprecated `kubectl alpha debug` command is removed. Use `kubectl debug` instead. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Kubelet command line flags related to dockershim are now showing deprecation message as they will be removed along with dockershim in future release. ([#98730](https://github.com/kubernetes/kubernetes/pull/98730), [@dims](https://github.com/dims))
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97618](https://github.com/kubernetes/kubernetes/pull/97618), [@jherrera123](https://github.com/jherrera123)) [SIG Release and Testing]
+- Process start time on Windows now uses current process information ([#97491](https://github.com/kubernetes/kubernetes/pull/97491), [@jsturtevant](https://github.com/jsturtevant)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Windows]
+- Resolves flakes in the Ingress conformance tests due to conflicts with controllers updating the Ingress object ([#98430](https://github.com/kubernetes/kubernetes/pull/98430), [@liggitt](https://github.com/liggitt)) [SIG Network and Testing]
+- The `AttachVolumeLimit` feature gate (GA since v1.17) has been removed and now unconditionally enabled. ([#96539](https://github.com/kubernetes/kubernetes/pull/96539), [@ialidzhikov](https://github.com/ialidzhikov))
+- The `CSINodeInfo` feature gate that is GA since v1.17 is unconditionally enabled, and can no longer be specified via the `--feature-gates` argument. ([#96561](https://github.com/kubernetes/kubernetes/pull/96561), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps, Auth, Scheduling, Storage and Testing]
+- The `apiserver_request_total` metric is promoted to stable status and no longer has a content-type dimensions, so any alerts/charts which presume the existence of this will fail. This is however, unlikely to be the case since it was effectively an unbounded dimension in the first place. ([#99788](https://github.com/kubernetes/kubernetes/pull/99788), [@logicalhan](https://github.com/logicalhan))
+- The default delegating authorization options now allow unauthenticated access to healthz, readyz, and livez.  A system:masters user connecting to an authz delegator will not perform an authz check. ([#98325](https://github.com/kubernetes/kubernetes/pull/98325), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth, Cloud Provider and Scheduling]
+- The deprecated feature gates `CSIDriverRegistry`, `BlockVolume` and `CSIBlockVolume` are now unconditionally enabled and can no longer be specified in component invocations. ([#98021](https://github.com/kubernetes/kubernetes/pull/98021), [@gavinfish](https://github.com/gavinfish)) [SIG Storage]
+- The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavinfish](https://github.com/gavinfish)) [SIG Node, Scheduling and Storage]
+- The e2e suite can be instructed not to wait for pods in kube-system to be ready or for all nodes to be ready by passing `--allowed-not-ready-nodes=-1` when invoking the e2e.test program. This allows callers to run subsets of the e2e suite in scenarios other than perfectly healthy clusters. ([#98781](https://github.com/kubernetes/kubernetes/pull/98781), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- The feature gates `WindowsGMSA` and `WindowsRunAsUserName` that are GA since v1.18 are now removed. ([#96531](https://github.com/kubernetes/kubernetes/pull/96531), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Node and Windows]
+- The new `-gce-zones` flag on the `e2e.test` binary instructs tests that check for information about how the cluster interacts with the cloud to limit their queries to the provided zone list. If not specified, the current behavior of asking the cloud provider for all available zones in multi zone clusters is preserved. ([#98787](https://github.com/kubernetes/kubernetes/pull/98787), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Cluster Lifecycle and Testing]
+- Update cri-tools to [v1.20.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.20.0) ([#97967](https://github.com/kubernetes/kubernetes/pull/97967), [@rajibmitra](https://github.com/rajibmitra)) [SIG Cloud Provider]
+- Windows nodes on GCE will take longer to start due to dependencies installed at node creation time. ([#98284](https://github.com/kubernetes/kubernetes/pull/98284), [@pjh](https://github.com/pjh)) [SIG Cloud Provider]
+- `apiserver_storage_objects` (a newer version of `etcd_object_counts`) is promoted and marked as stable. ([#100082](https://github.com/kubernetes/kubernetes/pull/100082), [@logicalhan](https://github.com/logicalhan))
+
+### Uncategorized
+
+- GCE L4 Loadbalancers now handle > 5 ports in service spec correctly. ([#99595](https://github.com/kubernetes/kubernetes/pull/99595), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider]
+- The DownwardAPIHugePages feature is beta.  Users may use the feature if all workers in their cluster are min 1.20 version.  The feature will be enabled by default in all installations in 1.22. ([#99610](https://github.com/kubernetes/kubernetes/pull/99610), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
 
 ## Dependencies
 
 ### Added
-- cloud.google.com/go/firestore: v1.1.0
-- github.com/armon/go-metrics: [f0300d1](https://github.com/armon/go-metrics/tree/f0300d1)
-- github.com/armon/go-radix: [7fddfc3](https://github.com/armon/go-radix/tree/7fddfc3)
-- github.com/bketelsen/crypt: [5cbc8cc](https://github.com/bketelsen/crypt/tree/5cbc8cc)
-- github.com/hashicorp/consul/api: [v1.1.0](https://github.com/hashicorp/consul/api/tree/v1.1.0)
-- github.com/hashicorp/consul/sdk: [v0.1.1](https://github.com/hashicorp/consul/sdk/tree/v0.1.1)
-- github.com/hashicorp/errwrap: [v1.0.0](https://github.com/hashicorp/errwrap/tree/v1.0.0)
-- github.com/hashicorp/go-cleanhttp: [v0.5.1](https://github.com/hashicorp/go-cleanhttp/tree/v0.5.1)
-- github.com/hashicorp/go-immutable-radix: [v1.0.0](https://github.com/hashicorp/go-immutable-radix/tree/v1.0.0)
-- github.com/hashicorp/go-msgpack: [v0.5.3](https://github.com/hashicorp/go-msgpack/tree/v0.5.3)
-- github.com/hashicorp/go-multierror: [v1.0.0](https://github.com/hashicorp/go-multierror/tree/v1.0.0)
-- github.com/hashicorp/go-rootcerts: [v1.0.0](https://github.com/hashicorp/go-rootcerts/tree/v1.0.0)
-- github.com/hashicorp/go-sockaddr: [v1.0.0](https://github.com/hashicorp/go-sockaddr/tree/v1.0.0)
-- github.com/hashicorp/go-uuid: [v1.0.1](https://github.com/hashicorp/go-uuid/tree/v1.0.1)
-- github.com/hashicorp/go.net: [v0.0.1](https://github.com/hashicorp/go.net/tree/v0.0.1)
-- github.com/hashicorp/logutils: [v1.0.0](https://github.com/hashicorp/logutils/tree/v1.0.0)
-- github.com/hashicorp/mdns: [v1.0.0](https://github.com/hashicorp/mdns/tree/v1.0.0)
-- github.com/hashicorp/memberlist: [v0.1.3](https://github.com/hashicorp/memberlist/tree/v0.1.3)
-- github.com/hashicorp/serf: [v0.8.2](https://github.com/hashicorp/serf/tree/v0.8.2)
-- github.com/mitchellh/cli: [v1.0.0](https://github.com/mitchellh/cli/tree/v1.0.0)
-- github.com/mitchellh/go-testing-interface: [v1.0.0](https://github.com/mitchellh/go-testing-interface/tree/v1.0.0)
-- github.com/mitchellh/gox: [v0.4.0](https://github.com/mitchellh/gox/tree/v0.4.0)
-- github.com/mitchellh/iochan: [v1.0.0](https://github.com/mitchellh/iochan/tree/v1.0.0)
-- github.com/pascaldekloe/goe: [57f6aae](https://github.com/pascaldekloe/goe/tree/57f6aae)
-- github.com/posener/complete: [v1.1.1](https://github.com/posener/complete/tree/v1.1.1)
-- github.com/ryanuber/columnize: [9b3edd6](https://github.com/ryanuber/columnize/tree/9b3edd6)
-- github.com/sean-/seed: [e2103e2](https://github.com/sean-/seed/tree/e2103e2)
-- github.com/subosito/gotenv: [v1.2.0](https://github.com/subosito/gotenv/tree/v1.2.0)
-- github.com/willf/bitset: [d5bec33](https://github.com/willf/bitset/tree/d5bec33)
-- gopkg.in/ini.v1: v1.51.0
-- gopkg.in/yaml.v3: 9f266ea
+- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
+- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
+- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
+- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
+- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
+- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
+- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
+- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
+- go.starlark.net: 8dd3e2e
+- golang.org/x/term: 6a3ed07
+- sigs.k8s.io/kustomize/api: v0.8.5
+- sigs.k8s.io/kustomize/cmd/config: v0.9.7
+- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
+- sigs.k8s.io/kustomize/kyaml: v0.10.15
+
+### Changed
+- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
+- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
+- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
+- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
+- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
+- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
+- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
+- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
+- github.com/creack/pty: [v1.1.7 → v1.1.11](https://github.com/creack/pty/compare/v1.1.7...v1.1.11)
+- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
+- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
+- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
+- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
+- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
+- github.com/google/cadvisor: [v0.38.5 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.5...v0.39.0)
+- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
+- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
+- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
+- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
+- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
+- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
+- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
+- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
+- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
+- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
+- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
+- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
+- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
+- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
+- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
+- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
+- golang.org/x/crypto: 7f63de1 → 5ea612d
+- golang.org/x/exp: 6cc2880 → 85be41e
+- golang.org/x/mobile: d2bd2a2 → e6ae53a
+- golang.org/x/mod: v0.3.0 → ce943fd
+- golang.org/x/net: 69a7880 → 3d97a24
+- golang.org/x/sync: cd5d95a → 67f06af
+- golang.org/x/sys: 5cba982 → a50acf3
+- golang.org/x/time: 3af7569 → f8bda1e
+- golang.org/x/tools: c1934b7 → v0.1.0
+- gopkg.in/check.v1: 41f04d3 → 8fa4692
+- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
+- gotest.tools/v3: v3.0.2 → v3.0.3
+- k8s.io/gengo: 83324d8 → b6c5ce2
+- k8s.io/klog/v2: v2.4.0 → v2.8.0
+- k8s.io/kube-openapi: d219536 → 591a79e
+- k8s.io/system-validators: v1.2.0 → v1.4.0
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.1.0
+
+### Removed
+- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
+- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
+- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
+- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
+- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
+- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
 - rsc.io/quote/v3: v3.1.0
 - rsc.io/sampler: v1.3.0
+- sigs.k8s.io/kustomize: v2.0.3+incompatible
 
-### Changed
-- cloud.google.com/go/bigquery: v1.0.1 → v1.4.0
-- cloud.google.com/go/datastore: v1.0.0 → v1.1.0
-- cloud.google.com/go/pubsub: v1.0.1 → v1.2.0
-- cloud.google.com/go/storage: v1.0.0 → v1.6.0
-- cloud.google.com/go: v0.51.0 → v0.54.0
-- github.com/Microsoft/go-winio: [fc70bd9 → v0.4.15](https://github.com/Microsoft/go-winio/compare/fc70bd9...v0.4.15)
-- github.com/aws/aws-sdk-go: [v1.35.5 → v1.35.24](https://github.com/aws/aws-sdk-go/compare/v1.35.5...v1.35.24)
-- github.com/blang/semver: [v3.5.0+incompatible → v3.5.1+incompatible](https://github.com/blang/semver/compare/v3.5.0...v3.5.1)
-- github.com/checkpoint-restore/go-criu/v4: [v4.0.2 → v4.1.0](https://github.com/checkpoint-restore/go-criu/v4/compare/v4.0.2...v4.1.0)
-- github.com/containerd/containerd: [v1.3.3 → v1.4.1](https://github.com/containerd/containerd/compare/v1.3.3...v1.4.1)
-- github.com/containerd/ttrpc: [v1.0.0 → v1.0.2](https://github.com/containerd/ttrpc/compare/v1.0.0...v1.0.2)
-- github.com/containerd/typeurl: [v1.0.0 → v1.0.1](https://github.com/containerd/typeurl/compare/v1.0.0...v1.0.1)
-- github.com/coreos/etcd: [v3.3.10+incompatible → v3.3.13+incompatible](https://github.com/coreos/etcd/compare/v3.3.10...v3.3.13)
-- github.com/docker/docker: [aa6a989 → bd33bbf](https://github.com/docker/docker/compare/aa6a989...bd33bbf)
-- github.com/go-gl/glfw/v3.3/glfw: [12ad95a → 6f7a984](https://github.com/go-gl/glfw/v3.3/glfw/compare/12ad95a...6f7a984)
-- github.com/golang/groupcache: [215e871 → 8c9f03a](https://github.com/golang/groupcache/compare/215e871...8c9f03a)
-- github.com/golang/mock: [v1.3.1 → v1.4.1](https://github.com/golang/mock/compare/v1.3.1...v1.4.1)
-- github.com/golang/protobuf: [v1.4.2 → v1.4.3](https://github.com/golang/protobuf/compare/v1.4.2...v1.4.3)
-- github.com/google/cadvisor: [v0.37.0 → v0.38.4](https://github.com/google/cadvisor/compare/v0.37.0...v0.38.4)
-- github.com/google/go-cmp: [v0.4.0 → v0.5.2](https://github.com/google/go-cmp/compare/v0.4.0...v0.5.2)
-- github.com/google/pprof: [d4f498a → 1ebb73c](https://github.com/google/pprof/compare/d4f498a...1ebb73c)
-- github.com/google/uuid: [v1.1.1 → v1.1.2](https://github.com/google/uuid/compare/v1.1.1...v1.1.2)
-- github.com/gorilla/mux: [v1.7.3 → v1.8.0](https://github.com/gorilla/mux/compare/v1.7.3...v1.8.0)
-- github.com/gorilla/websocket: [v1.4.0 → v1.4.2](https://github.com/gorilla/websocket/compare/v1.4.0...v1.4.2)
-- github.com/karrick/godirwalk: [v1.7.5 → v1.16.1](https://github.com/karrick/godirwalk/compare/v1.7.5...v1.16.1)
-- github.com/opencontainers/runc: [819fcc6 → v1.0.0-rc92](https://github.com/opencontainers/runc/compare/819fcc6...v1.0.0-rc92)
-- github.com/opencontainers/runtime-spec: [237cc4f → 4d89ac9](https://github.com/opencontainers/runtime-spec/compare/237cc4f...4d89ac9)
-- github.com/opencontainers/selinux: [v1.5.2 → v1.6.0](https://github.com/opencontainers/selinux/compare/v1.5.2...v1.6.0)
-- github.com/prometheus/procfs: [v0.1.3 → v0.2.0](https://github.com/prometheus/procfs/compare/v0.1.3...v0.2.0)
-- github.com/quobyte/api: [v0.1.2 → v0.1.8](https://github.com/quobyte/api/compare/v0.1.2...v0.1.8)
-- github.com/spf13/cobra: [v1.0.0 → v1.1.1](https://github.com/spf13/cobra/compare/v1.0.0...v1.1.1)
-- github.com/spf13/viper: [v1.4.0 → v1.7.0](https://github.com/spf13/viper/compare/v1.4.0...v1.7.0)
-- github.com/stretchr/testify: [v1.4.0 → v1.6.1](https://github.com/stretchr/testify/compare/v1.4.0...v1.6.1)
-- github.com/vishvananda/netns: [52d707b → db3c7e5](https://github.com/vishvananda/netns/compare/52d707b...db3c7e5)
-- go.opencensus.io: v0.22.2 → v0.22.3
-- golang.org/x/exp: da58074 → 6cc2880
-- golang.org/x/lint: fdd1cda → 738671d
-- golang.org/x/net: ab34263 → 69a7880
-- golang.org/x/oauth2: 858c2ad → bf48bf1
-- golang.org/x/sys: ed371f2 → 5cba982
-- golang.org/x/text: v0.3.3 → v0.3.4
-- golang.org/x/time: 555d28b → 3af7569
-- golang.org/x/xerrors: 9bdfabe → 5ec99f8
-- google.golang.org/api: v0.15.1 → v0.20.0
-- google.golang.org/genproto: cb27e3a → 8816d57
-- google.golang.org/grpc: v1.27.0 → v1.27.1
-- google.golang.org/protobuf: v1.24.0 → v1.25.0
-- honnef.co/go/tools: v0.0.1-2019.2.3 → v0.0.1-2020.1.3
-- k8s.io/gengo: 8167cfd → 83324d8
-- k8s.io/klog/v2: v2.2.0 → v2.4.0
-- k8s.io/kube-openapi: 8b50664 → d219536
-- k8s.io/utils: d5654de → 67b214c
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.12 → v0.0.14
-- sigs.k8s.io/structured-merge-diff/v4: b3cf1e8 → v4.0.2
-
-### Removed
-- github.com/armon/consul-api: [eb2c6b5](https://github.com/armon/consul-api/tree/eb2c6b5)
-- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
-- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
-- github.com/xordataexchange/crypt: [b2862e3](https://github.com/xordataexchange/crypt/tree/b2862e3)
-
-
-
-# v1.20.0-beta.1
-
-
-## Downloads for v1.20.0-beta.1
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes.tar.gz) | 4eddf4850c2d57751696f352d0667309339090aeb30ff93e8db8a22c6cdebf74cb2d5dc78d4ae384c4e25491efc39413e2e420a804b76b421a9ad934e56b0667
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-src.tar.gz) | 59de5221162e9b6d88f5abbdb99765cb2b2e501498ea853fb65f2abe390211e28d9f21e0d87be3ade550a5ea6395d04552cf093d2ce2f99fd45ad46545dd13cb
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | d69ffed19b034a4221fc084e43ac293cf392e98febf5bf580f8d92307a8421d8b3aab18f9ca70608937e836b42c7a34e829f88eba6e040218a4486986e2fca21
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-386.tar.gz) | 1b542e165860c4adcd4550adc19b86c3db8cd75d2a1b8db17becc752da78b730ee48f1b0aaf8068d7bfbb1d8e023741ec293543bc3dd0f4037172a6917db8169
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | 90ad52785eecb43a6f9035b92b6ba39fc84e67f8bc91cf098e70f8cfdd405c4b9d5c02dccb21022f21bb5b6ce92fdef304def1da0a7255c308e2c5fb3a9cdaab
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-arm.tar.gz) | d0cb3322b056e1821679afa70728ffc0d3375e8f3326dabbe8185be2e60f665ab8985b13a1a432e10281b84a929e0f036960253ac0dd6e0b44677d539e98e61b
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | 3aecc8197e0aa368408624add28a2dd5e73f0d8a48e5e33c19edf91d5323071d16a27353a6f3e22df4f66ed7bfbae8e56e0a9050f7bbdf927ce6aeb29bba6374
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | 6ff145058f62d478b98f1e418e272555bfb5c7861834fbbf10a8fb334cc7ff09b32f2666a54b230932ba71d2fc7d3b1c1f5e99e6fe6d6ec83926a9b931cd2474
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | ff7b8bb894076e05a3524f6327a4a6353b990466f3292e84c92826cb64b5c82b3855f48b8e297ccadc8bcc15552bc056419ff6ff8725fc4e640828af9cc1331b
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-windows-386.tar.gz) | 6c6dcac9c725605763a130b5a975f2b560aa976a5c809d4e0887900701b707baccb9ca1aebc10a03cfa7338a6f42922bbf838ccf6800fc2a3e231686a72568b6
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | d12e3a29c960f0ddd1b9aabf5426ac1259863ac6c8f2be1736ebeb57ddca6b1c747ee2c363be19e059e38cf71488c5ea3509ad4d0e67fd5087282a5ad0ae9a48
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | 904e8c049179e071c6caa65f525f465260bb4d4318a6dd9cc05be2172f39f7cfc69d1672736e01d926045764fe8872e806444e3af77ffef823ede769537b7d20
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-arm.tar.gz) | 5934959374868aed8d4294de84411972660bca7b2e952201a9403f37e40c60a5c53eaea8001344d0bf4a00c8cd27de6324d88161388de27f263a5761357cb82b
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | 4c884585970f80dc5462d9a734d7d5be9558b36c6e326a8a3139423efbd7284fa9f53fb077983647e17e19f03f5cb9bf26201450c78daecf10afa5a1ab5f9efc
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | 235b78b08440350dcb9f13b63f7722bd090c672d8e724ca5d409256e5a5d4f46d431652a1aa908c3affc5b1e162318471de443d38b93286113e79e7f90501a9b
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | 220fc9351702b3ecdcf79089892ceb26753a8a1deaf46922ffb3d3b62b999c93fef89440e779ca6043372b963081891b3a966d1a5df0cf261bdd44395fd28dce
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | fe59d3a1f21c47bab126f689687657f77fbcb46a2caeef48eecd073b2b22879f997a466911b5c5c829e9cf27e68a36ecdf18686d42714839d4b97d6c7281578d
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-arm.tar.gz) | 93e545aa963cfd11e0b2c6d47669b5ef70c5a86ef80c3353c1a074396bff1e8e7371dda25c39d78c7a9e761f2607b8b5ab843fa0c10b8ff9663098fae8d25725
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | 5e0f177f9bec406a668d4b37e69b191208551fdf289c82b5ec898959da4f8a00a2b0695cbf1d2de5acb809321c6e5604f5483d33556543d92b96dcf80e814dd3
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | 574412059e4d257eb904cd4892a075b6a2cde27adfa4976ee64c46d6768facece338475f1b652ad94c8df7cfcbb70ebdf0113be109c7099ab76ffdb6f023eefd
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | b1ffaa6d7f77d89885c642663cb14a86f3e2ec2afd223e3bb2000962758cf0f15320969ffc4be93b5826ff22d54fdbae0dbea09f9d8228eda6da50b6fdc88758
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | 388983765213cf3bdc1f8b27103ed79e39028767e5f1571e35ed1f91ed100e49f3027f7b7ff19b53fab7fbb6d723c0439f21fc6ed62be64532c25f5bfa7ee265
-
-## Changelog since v1.20.0-beta.0
-
-## Changes by Kind
-
-### Deprecation
-
-- ACTION REQUIRED: The kube-apiserver ability to serve on an insecure port, deprecated since v1.10, has been removed. The insecure address flags `--address` and `--insecure-bind-address` have no effect in kube-apiserver and will be removed in v1.24. The insecure port flags `--port` and `--insecure-port` may only be set to 0 and will be removed in v1.24. ([#95856](https://github.com/kubernetes/kubernetes/pull/95856), [@knight42](https://github.com/knight42)) [SIG API Machinery, Node and Testing]
-
-### API Change
-
-- + `TokenRequest` and `TokenRequestProjection` features have been promoted to GA. This feature allows generating service account tokens that are not visible in Secret objects and are tied to the lifetime of a Pod object. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection for details on configuring and using this feature. The `TokenRequest` and `TokenRequestProjection` feature gates will be removed in v1.21.
-  + kubeadm's kube-apiserver Pod manifest now includes the following flags by default "--service-account-key-file", "--service-account-signing-key-file", "--service-account-issuer". ([#93258](https://github.com/kubernetes/kubernetes/pull/93258), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle, Storage and Testing]
-- Certain fields on  Service objects will be automatically cleared when changing the service's `type` to a mode that does not need those fields.  For example, changing from type=LoadBalancer to type=ClusterIP will clear the NodePort assignments, rather than forcing the user to clear them. ([#95196](https://github.com/kubernetes/kubernetes/pull/95196), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, Network and Testing]
-- Services will now have a `clusterIPs` field to go with `clusterIP`.  `clusterIPs[0]` is a synonym for `clusterIP` and will be syncronized on create and update operations. ([#95894](https://github.com/kubernetes/kubernetes/pull/95894), [@thockin](https://github.com/thockin)) [SIG Network]
-
-### Feature
-
-- A new metric `apiserver_request_filter_duration_seconds` has been introduced that 
-  measures request filter latency in seconds. ([#95207](https://github.com/kubernetes/kubernetes/pull/95207), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Instrumentation]
-- Add a new flag to set priority for the kubelet on Windows nodes so that workloads cannot overwhelm the node there by disrupting kubelet process. ([#96051](https://github.com/kubernetes/kubernetes/pull/96051), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node and Windows]
-- Changed: default "Accept: */*" header added to HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes (https://github.com/kubernetes/website/pull/24756) ([#95641](https://github.com/kubernetes/kubernetes/pull/95641), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Client-go credential plugins can now be passed in the current cluster information via the KUBERNETES_EXEC_INFO environment variable. ([#95489](https://github.com/kubernetes/kubernetes/pull/95489), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
-- Kube-apiserver: added support for compressing rotated audit log files with `--audit-log-compress` ([#94066](https://github.com/kubernetes/kubernetes/pull/94066), [@lojies](https://github.com/lojies)) [SIG API Machinery and Auth]
-
-### Documentation
-
-- Fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList ([#95117](https://github.com/kubernetes/kubernetes/pull/95117), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-
-### Bug or Regression
-
-- Added support to kube-proxy for externalTrafficPolicy=Local setting via Direct Server Return (DSR) load balancers on Windows. ([#93166](https://github.com/kubernetes/kubernetes/pull/93166), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
-- Disable watchcache for events ([#96052](https://github.com/kubernetes/kubernetes/pull/96052), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
-- Disabled `LocalStorageCapacityIsolation` feature gate is honored during scheduling. ([#96092](https://github.com/kubernetes/kubernetes/pull/96092), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Fix bug in JSON path parser where an error occurs when a range is empty ([#95933](https://github.com/kubernetes/kubernetes/pull/95933), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
-- Fix k8s.io/apimachinery/pkg/api/meta.SetStatusCondition to update ObservedGeneration ([#95961](https://github.com/kubernetes/kubernetes/pull/95961), [@KnicKnic](https://github.com/KnicKnic)) [SIG API Machinery]
-- Fixed a regression which prevented pods with `docker/default` seccomp annotations from being created in 1.19 if a PodSecurityPolicy was in place which did not allow `runtime/default` seccomp profiles. ([#95985](https://github.com/kubernetes/kubernetes/pull/95985), [@saschagrunert](https://github.com/saschagrunert)) [SIG Auth]
-- Kubectl: print error if users place flags before plugin name ([#92343](https://github.com/kubernetes/kubernetes/pull/92343), [@knight42](https://github.com/knight42)) [SIG CLI]
-- When creating a PVC with the volume.beta.kubernetes.io/storage-provisioner annotation already set, the PV controller might have incorrectly deleted the newly provisioned PV instead of binding it to the PVC, depending on timing and system load. ([#95909](https://github.com/kubernetes/kubernetes/pull/95909), [@pohly](https://github.com/pohly)) [SIG Apps and Storage]
-
-### Other (Cleanup or Flake)
-
-- Kubectl: the `generator` flag of `kubectl autoscale` has been deprecated and has no effect, it will be removed in a feature release ([#92998](https://github.com/kubernetes/kubernetes/pull/92998), [@SataQiu](https://github.com/SataQiu)) [SIG CLI]
-- V1helpers.MatchNodeSelectorTerms now accepts just a Node and a list of Terms ([#95871](https://github.com/kubernetes/kubernetes/pull/95871), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
-- `MatchNodeSelectorTerms` function moved to `k8s.io/component-helpers` ([#95531](https://github.com/kubernetes/kubernetes/pull/95531), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
 
 ## Dependencies
 
 ### Added
-_Nothing has changed._
+- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
+- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
+- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
+- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
+- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
+- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
+- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
+- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
+- go.starlark.net: 8dd3e2e
+- golang.org/x/term: 6a3ed07
+- sigs.k8s.io/kustomize/api: v0.8.5
+- sigs.k8s.io/kustomize/cmd/config: v0.9.7
+- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
+- sigs.k8s.io/kustomize/kyaml: v0.10.15
 
 ### Changed
-_Nothing has changed._
+- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
+- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
+- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
+- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
+- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
+- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
+- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
+- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
+- github.com/creack/pty: [v1.1.7 → v1.1.11](https://github.com/creack/pty/compare/v1.1.7...v1.1.11)
+- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
+- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
+- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
+- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
+- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
+- github.com/google/cadvisor: [v0.38.5 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.5...v0.39.0)
+- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
+- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
+- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
+- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
+- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
+- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
+- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
+- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
+- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
+- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
+- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
+- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
+- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
+- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
+- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
+- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
+- golang.org/x/crypto: 7f63de1 → 5ea612d
+- golang.org/x/exp: 6cc2880 → 85be41e
+- golang.org/x/mobile: d2bd2a2 → e6ae53a
+- golang.org/x/mod: v0.3.0 → ce943fd
+- golang.org/x/net: 69a7880 → 3d97a24
+- golang.org/x/sync: cd5d95a → 67f06af
+- golang.org/x/sys: 5cba982 → a50acf3
+- golang.org/x/time: 3af7569 → f8bda1e
+- golang.org/x/tools: c1934b7 → v0.1.0
+- gopkg.in/check.v1: 41f04d3 → 8fa4692
+- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
+- gotest.tools/v3: v3.0.2 → v3.0.3
+- k8s.io/gengo: 83324d8 → b6c5ce2
+- k8s.io/klog/v2: v2.4.0 → v2.8.0
+- k8s.io/kube-openapi: d219536 → 591a79e
+- k8s.io/system-validators: v1.2.0 → v1.4.0
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.1.0
 
 ### Removed
-_Nothing has changed._
+- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
+- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
+- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
+- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
+- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
+- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
+- rsc.io/quote/v3: v3.1.0
+- rsc.io/sampler: v1.3.0
+- sigs.k8s.io/kustomize: v2.0.3+incompatible
 
 
 
-# v1.20.0-beta.0
+# v1.21.0-rc.0
 
 
-## Downloads for v1.20.0-beta.0
+## Downloads for v1.21.0-rc.0
 
 ### Source Code
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes.tar.gz) | 385e49e32bbd6996f07bcadbf42285755b8a8ef9826ee1ba42bd82c65827cf13f63e5634b834451b263a93b708299cbb4b4b0b8ddbc688433deaf6bec240aa67
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-src.tar.gz) | 842e80f6dcad461426fb699de8a55fde8621d76a94e54288fe9939cc1a3bbd0f4799abadac2c59bcf3f91d743726dbd17e1755312ae7fec482ef560f336dbcbb
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes.tar.gz) | ef53a41955d6f8a8d2a94636af98b55d633fb8a5081517559039e019b3dd65c9d10d4e7fa297ab88a7865d772f3eecf72e7b0eeba5e87accb4000c91da33e148
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-src.tar.gz) | 9335a01b50d351776d3b8d00c07a5233844c51d307e361fa7e55a0620c1cb8b699e43eacf45ae9cafd8cbc44752e6987450c528a5bede8204706b7673000b5fc
 
 ### Client binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-darwin-amd64.tar.gz) | bde5e7d9ee3e79d1e69465a3ddb4bb36819a4f281b5c01a7976816d7c784410812dde133cdf941c47e5434e9520701b9c5e8b94d61dca77c172f87488dfaeb26
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-386.tar.gz) | 721bb8444c9e0d7a9f8461e3f5428882d76fcb3def6eb11b8e8e08fae7f7383630699248660d69d4f6a774124d6437888666e1fa81298d5b5518bc4a6a6b2c92
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-amd64.tar.gz) | 71e4edc41afbd65f813e7ecbc22b27c95f248446f005e288d758138dc4cc708735be7218af51bcf15e8b9893a3598c45d6a685f605b46f50af3762b02c32ed76
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-arm.tar.gz) | bbefc749156f63898973f2f7c7a6f1467481329fb430d641fe659b497e64d679886482d557ebdddb95932b93de8d1e3e365c91d4bf9f110b68bd94b0ba702ded
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-arm64.tar.gz) | 9803190685058b4b64d002c2fbfb313308bcea4734ed53a8c340cfdae4894d8cb13b3e819ae64051bafe0fbf8b6ecab53a6c1dcf661c57640c75b0eb60041113
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-ppc64le.tar.gz) | bcdceea64cba1ae38ea2bab50d8fd77c53f6d673de12566050b0e3c204334610e6c19e4ace763e68b5e48ab9e811521208b852b1741627be30a2b17324fc1daf
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-s390x.tar.gz) | 41e36d00867e90012d5d5adfabfaae8d9f5a9fd32f290811e3c368e11822916b973afaaf43961081197f2cbab234090d97d89774e674aeadc1da61f7a64708a9
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-windows-386.tar.gz) | c50fec5aec2d0e742f851f25c236cb73e76f8fc73b0908049a10ae736c0205b8fff83eb3d29b1748412edd942da00dd738195d9003f25b577d6af8359d84fb2f
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-windows-amd64.tar.gz) | 0fd6777c349908b6d627e849ea2d34c048b8de41f7df8a19898623f597e6debd35b7bcbf8e1d43a1be3a9abb45e4810bc498a0963cf780b109e93211659e9c7e
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-darwin-amd64.tar.gz) | 964135e43234cee275c452f5f06fb6d2bcd3cff3211a0d50fa35fff1cc4446bc5a0ac5125405dadcfb6596cb152afe29fabf7aad5b35b100e1288db890b70f8e
+[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-darwin-arm64.tar.gz) | 50d782abaa4ded5e706b3192d87effa953ceabbd7d91e3d48b0c1fa2206a1963a909c14b923560f5d09cac2c7392edc5f38a13fbf1e9a40bc94e3afe8de10622
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-386.tar.gz) | 72af5562f24184a2d7c27f95fa260470da979fbdcacce39a372f8f3add2991d7af8bc78f4e1dbe7a0f97e3f559b149b72a51491d3b13008da81872ee50f02f37
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-amd64.tar.gz) | 1eddb8f6b51e005bc6f7b519d036cbe3d2f6d97dbf7d212dd933fb56354c29f222d050519115a9bcf94555aef095db7cf763469e47bb4ae3c6c07f97edf437cb
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-arm.tar.gz) | 670f8ca60ea3cf0bb3262a772715e0ea735fccda6a92f3186299361dc455b304ae177d4017e0b67bbfa4a95e36f4cc3f7eb335e2a5130c93ac3fba2aff4519bf
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-arm64.tar.gz) | a69a47907cff138ba393d8c87044fd95d97f3ca8f35d301b50742e2801ad7c229d99d6667971091f65825eb51854d585be0dd7421670110b1aa567e67e7ab4b3
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-ppc64le.tar.gz) | b929feade94b71c81908abdcd4343b1e1e20098fd65e10d4d02585ad649d292d06f52c7ddc349efa188ce5b093e703c7aa9582c6ae5a69699adb87bbf5350243
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-s390x.tar.gz) | 899d1470e412282cf289d8e24806d1a08c62ec0151f345ae3c9e497cc7bc0feab76498de4dd897d6adcdfa0c422e6b1a37e25d928669030f53457fd69d6e7df7
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-windows-386.tar.gz) | 9f0bc90a269eabd06fe4f637b5172a3a6a7d3de26de0d66504c2e1f2093083c584ea39031db6075a7da7a86b98c48bed25aa88d4ac09060b38692c6a5b637078
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-windows-amd64.tar.gz) | 05c8cc10188a1294b0d51d052942742a9b26411a08ec73494bf0e728a8a167e0a7863bdfc8864e76a371b584380098381805341e18b4b283b5d0cf298d5f7c7c
 
 ### Server binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-amd64.tar.gz) | 30d982424ca64bf0923503ae8195b2e2a59497096b2d9e58dfd491cd6639633027acfa9750bc7bccf34e1dc116d29d2f87cbd7ae713db4210ce9ac16182f0576
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-arm.tar.gz) | f08b62be9bc6f0745f820b0083c7a31eedb2ce370a037c768459a59192107b944c8f4345d0bb88fc975f2e7a803ac692c9ac3e16d4a659249d4600e84ff75d9e
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-arm64.tar.gz) | e3472b5b3dfae0a56e5363d52062b1e4a9fc227a05e0cf5ece38233b2c442f427970aab94a52377fb87e583663c120760d154bc1c4ac22dca1f4d0d1ebb96088
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-ppc64le.tar.gz) | 06c254e0a62f755d31bc40093d86c44974f0a60308716cc3214a6b3c249a4d74534d909b82f8a3dd3a3c9720e61465b45d2bb3a327ef85d3caba865750020dfb
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-s390x.tar.gz) | 2edeb4411c26a0de057a66787091ab1044f71774a464aed898ffee26634a40127181c2edddb38e786b6757cca878fd0c3a885880eec6c3448b93c645770abb12
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-amd64.tar.gz) | 355f278728ef7ac7eb2f5568c99c1429543c6302bbd0ed3bd0378c08116075e56ae850a49241313f078e2392702672ec6c9b70c8d97b4f2f5f4bee36828a63ba
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-arm.tar.gz) | 9ac02c2825e2fd4e92f0c0f67180c67c24e32841ccbabc82284bf6293727ffecfae65e8a42b527c2a7ca482752384928eb65c2a1706144ae7819a6b3a1ab291c
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-arm64.tar.gz) | eb412453da03c82a9248412c8ccf4d4baa1fbfa81edd8d4f81d28969b40a3727e18934accc68f643d253446c58ffd2623292402495480b3d4b2a837b5318b957
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-ppc64le.tar.gz) | 07da2812c35bbc427ee5b4a0b601c3ae271e0d50ab0dd4c5c25399f43506fa2a187642eb9d4d2085df7b90264d48ea2f31088af87d9efa7eb2e87f91e1fdbde4
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-s390x.tar.gz) | 3b79442a3d6e389c4ff105922a8e49994c0b6c088d2c501bd8c78d9f9e814902f5bb72c8f9c89380b750fda9b3a336759b9b68f11d70bef4f0e984564a95c29e
 
 ### Node binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-amd64.tar.gz) | cc1d5b94b86070b5e7746d7aaeaeac3b3a5e5ebbff1ec33885f7eeab270a6177d593cb1975b2e56f4430b7859ad42da76f266629f9313e0f688571691ac448ed
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-arm.tar.gz) | 75e82c7c9122add3b24695b94dcb0723c52420c3956abf47511e37785aa48a1fa8257db090c6601010c4475a325ccfff13eb3352b65e3aa1774f104b09b766b0
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-arm64.tar.gz) | 16ef27c40bf4d678a55fcd3d3f7d09f1597eec2cc58f9950946f0901e52b82287be397ad7f65e8d162d8a9cdb4a34a610b6db8b5d0462be8e27c4b6eb5d6e5e7
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-ppc64le.tar.gz) | 939865f2c4cb6a8934f22a06223e416dec5f768ffc1010314586149470420a1d62aef97527c34d8a636621c9669d6489908ce1caf96f109e8d073cee1c030b50
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-s390x.tar.gz) | bbfdd844075fb816079af7b73d99bc1a78f41717cdbadb043f6f5872b4dc47bc619f7f95e2680d4b516146db492c630c17424e36879edb45e40c91bc2ae4493c
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-windows-amd64.tar.gz) | a2b3ea40086fd71aed71a4858fd3fc79fd1907bc9ea8048ff3c82ec56477b0a791b724e5a52d79b3b36338c7fbd93dfd3d03b00ccea9042bda0d270fc891e4ec
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-amd64.tar.gz) | f12edf1faf5f07de1ebc5a8626601c12927902e10aca3f11e398637382fdf55365dbd9a0ef38858553fb7569495ae2cf68f155dd2e49b85b27d76fb599bb92e4
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-arm.tar.gz) | 4fba8fc4e2102f07fb778aab597ec7231ea65c35e1aa618fe98b707b64a931237bd842c173e9120326e4d9deb983bb3917176762bba2212612bbc09d6e2105c4
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-arm64.tar.gz) | a2e1be5459a8346839970faf4e7ebdb8ab9f3273e02babf1f3199b06bdb67434a2d18fcd1628cf1b989756e99d8dad6624a455b9db11d50f51f509f4df5c27da
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-ppc64le.tar.gz) | 16d2c1cc295474fc49fe9a827ddd73e81bdd6b76af7074987b90250023f99b6d70bf474e204c7d556802111984fcb3a330740b150bdc7970d0e3634eb94a1665
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-s390x.tar.gz) | 9dc6faa6cd007b13dfce703f3e271f80adcc4e029c90a4a9b4f2f143b9756f2893f8af3d7c2cf813f2bd6731cffd87d15d4229456c1685939f65bf467820ec6e
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-windows-amd64.tar.gz) | f8bac2974c9142bfb80cd5eadeda79f79f27b78899a4e6e71809b795c708824ba442be83fdbadb98e01c3823dd8350776358258a205e851ed045572923cacba7
 
-## Changelog since v1.20.0-alpha.3
+## Changelog since v1.21.0-beta.1
 
 ## Urgent Upgrade Notes
 
 ### (No, really, you MUST read this before you upgrade)
 
- - Kubeadm: improve the validation of serviceSubnet and podSubnet.
-  ServiceSubnet has to be limited in size, due to implementation details, and the mask can not allocate more than 20 bits.
-  PodSubnet validates against the corresponding cluster "--node-cidr-mask-size" of the kube-controller-manager, it fail if the values are not compatible.
-  kubeadm no longer sets the node-mask automatically on IPv6 deployments, you must check that your IPv6 service subnet mask is compatible with the default node mask /64 or set it accordenly. 
-  Previously, for IPv6, if the podSubnet had a mask lower than /112, kubeadm calculated a node-mask to be multiple of eight and splitting the available bits to maximise the number used for nodes. ([#95723](https://github.com/kubernetes/kubernetes/pull/95723), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]
-  - Windows hyper-v container featuregate is deprecated in 1.20 and will be removed in 1.21 ([#95505](https://github.com/kubernetes/kubernetes/pull/95505), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
+ - Migrated pkg/kubelet/cm/cpuset/cpuset.go to structured logging. Exit code changed from 255 to 1. ([#100007](https://github.com/kubernetes/kubernetes/pull/100007), [@utsavoza](https://github.com/utsavoza)) [SIG Instrumentation and Node]
  
 ## Changes by Kind
 
-### Deprecation
-
-- Support 'controlplane' as a valid EgressSelection type in the EgressSelectorConfiguration API. 'Master' is deprecated and will be removed in v1.22. ([#95235](https://github.com/kubernetes/kubernetes/pull/95235), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-
 ### API Change
 
-- Add dual-stack Services (alpha).  This is a BREAKING CHANGE to an alpha API.
-  It changes the dual-stack API wrt Service from a single ipFamily field to 3
-  fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack),
-  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
-  clusterIP).  Most users do not need to set anything at all, defaulting will
-  handle it for them.  Services are single-stack unless the user asks for
-  dual-stack.  This is all gated by the "IPv6DualStack" feature gate. ([#91824](https://github.com/kubernetes/kubernetes/pull/91824), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Introduces a metric source for HPAs which allows scaling based on container resource usage. ([#90691](https://github.com/kubernetes/kubernetes/pull/90691), [@arjunrn](https://github.com/arjunrn)) [SIG API Machinery, Apps, Autoscaling and CLI]
+- Add Probe-level terminationGracePeriodSeconds field ([#99375](https://github.com/kubernetes/kubernetes/pull/99375), [@ehashman](https://github.com/ehashman)) [SIG API Machinery, Apps, Node and Testing]
+- CSIServiceAccountToken is Beta now ([#99298](https://github.com/kubernetes/kubernetes/pull/99298), [@zshihang](https://github.com/zshihang)) [SIG Auth, Storage and Testing]
+- Discovery.k8s.io/v1beta1 EndpointSlices are deprecated in favor of discovery.k8s.io/v1, and will no longer be served in Kubernetes v1.25. ([#100472](https://github.com/kubernetes/kubernetes/pull/100472), [@liggitt](https://github.com/liggitt)) [SIG Network]
+- FieldManager no longer owns fields that get reset before the object is persisted (e.g. "status wiping"). ([#99661](https://github.com/kubernetes/kubernetes/pull/99661), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Auth and Testing]
+- Generic ephemeral volumes are beta. ([#99643](https://github.com/kubernetes/kubernetes/pull/99643), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Node, Storage and Testing]
+- Implement the GetAvailableResources in the podresources API. ([#95734](https://github.com/kubernetes/kubernetes/pull/95734), [@fromanirh](https://github.com/fromanirh)) [SIG Instrumentation, Node and Testing]
+- The Endpoints controller will now set the `endpoints.kubernetes.io/over-capacity` annotation to "warning" when an Endpoints resource contains more than 1000 addresses. In a future release, the controller will truncate Endpoints that exceed this limit. The EndpointSlice API can be used to support significantly larger number of addresses. ([#99975](https://github.com/kubernetes/kubernetes/pull/99975), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- The PodDisruptionBudget API has been promoted to policy/v1 with no schema changes. The only functional change is that an empty selector (`{}`) written to a policy/v1 PodDisruptionBudget now selects all pods in the namespace. The behavior of the policy/v1beta1 API remains unchanged. The policy/v1beta1 PodDisruptionBudget API is deprecated and will no longer be served in 1.25+. ([#99290](https://github.com/kubernetes/kubernetes/pull/99290), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- Topology Aware Hints are now available in alpha and can be enabled with the `TopologyAwareHints` feature gate. ([#99522](https://github.com/kubernetes/kubernetes/pull/99522), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Instrumentation, Network and Testing]
 
 ### Feature
 
-- Add a metric for time taken to perform recursive permission change ([#95866](https://github.com/kubernetes/kubernetes/pull/95866), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
-- Allow cross compilation of kubernetes on different platforms. ([#94403](https://github.com/kubernetes/kubernetes/pull/94403), [@bnrjee](https://github.com/bnrjee)) [SIG Release]
-- Command to start network proxy changes from 'KUBE_ENABLE_EGRESS_VIA_KONNECTIVITY_SERVICE ./cluster/kube-up.sh' to 'KUBE_ENABLE_KONNECTIVITY_SERVICE=true ./hack/kube-up.sh' ([#92669](https://github.com/kubernetes/kubernetes/pull/92669), [@Jefftree](https://github.com/Jefftree)) [SIG Cloud Provider]
-- DefaultPodTopologySpread graduated to Beta. The feature gate is enabled by default. ([#95631](https://github.com/kubernetes/kubernetes/pull/95631), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
-- Kubernetes E2E test image manifest lists now contain Windows images. ([#77398](https://github.com/kubernetes/kubernetes/pull/77398), [@claudiubelu](https://github.com/claudiubelu)) [SIG Testing and Windows]
-- Support for Windows container images (OS Versions: 1809, 1903, 1909, 2004) was added the pause:3.4 image. ([#91452](https://github.com/kubernetes/kubernetes/pull/91452), [@claudiubelu](https://github.com/claudiubelu)) [SIG Node, Release and Windows]
-
-### Documentation
-
-- Fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList ([#95117](https://github.com/kubernetes/kubernetes/pull/95117), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
+- Add e2e test to validate performance metrics of volume lifecycle operations ([#94334](https://github.com/kubernetes/kubernetes/pull/94334), [@RaunakShah](https://github.com/RaunakShah)) [SIG Storage and Testing]
+- EmptyDir memory backed volumes are sized as the the minimum of pod allocatable memory on a host and an optional explicit user provided value. ([#100319](https://github.com/kubernetes/kubernetes/pull/100319), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
+- Enables Kubelet to check volume condition and log events to corresponding pods. ([#99284](https://github.com/kubernetes/kubernetes/pull/99284), [@fengzixu](https://github.com/fengzixu)) [SIG Apps, Instrumentation, Node and Storage]
+- Introduce a churn operator to scheduler perf testing framework. ([#98900](https://github.com/kubernetes/kubernetes/pull/98900), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- Kubernetes is now built with Golang 1.16.1 ([#100106](https://github.com/kubernetes/kubernetes/pull/100106), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- Migrated pkg/kubelet/cm/devicemanager to structured logging ([#99976](https://github.com/kubernetes/kubernetes/pull/99976), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
+- Migrated pkg/kubelet/cm/memorymanager to structured logging ([#99974](https://github.com/kubernetes/kubernetes/pull/99974), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
+- Migrated pkg/kubelet/cm/topologymanager to structure logging ([#99969](https://github.com/kubernetes/kubernetes/pull/99969), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
+- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
+- Update pause container to run as pseudo user and group `65535:65535`. This implies the release of version 3.5 of the container images. ([#97963](https://github.com/kubernetes/kubernetes/pull/97963), [@saschagrunert](https://github.com/saschagrunert)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Release, Security and Testing]
+- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#99833](https://github.com/kubernetes/kubernetes/pull/99833), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
 
 ### Bug or Regression
 
-- Exposes and sets a default timeout for the SubjectAccessReview client for DelegatingAuthorizationOptions. ([#95725](https://github.com/kubernetes/kubernetes/pull/95725), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Alter wording to describe pods using a pvc ([#95635](https://github.com/kubernetes/kubernetes/pull/95635), [@RaunakShah](https://github.com/RaunakShah)) [SIG CLI]
-- If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn`t automatically scale the number of pods correctly ([#95647](https://github.com/kubernetes/kubernetes/pull/95647), [@JoshuaAndrew](https://github.com/JoshuaAndrew)) [SIG Apps and Autoscaling]
-- Ignore apparmor for non-linux operating systems ([#93220](https://github.com/kubernetes/kubernetes/pull/93220), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Ipvs: ensure selected scheduler kernel modules are loaded ([#93040](https://github.com/kubernetes/kubernetes/pull/93040), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
-- Kubeadm: add missing "--experimental-patches" flag to "kubeadm init phase control-plane" ([#95786](https://github.com/kubernetes/kubernetes/pull/95786), [@Sh4d1](https://github.com/Sh4d1)) [SIG Cluster Lifecycle]
-- Reorganized iptables rules to fix a performance issue ([#95252](https://github.com/kubernetes/kubernetes/pull/95252), [@tssurya](https://github.com/tssurya)) [SIG Network]
-- Unhealthy pods covered by PDBs can be successfully evicted if enough healthy pods are available. ([#94381](https://github.com/kubernetes/kubernetes/pull/94381), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
-- Update the PIP when it is not in the Succeeded provisioning state during the LB update. ([#95748](https://github.com/kubernetes/kubernetes/pull/95748), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Update the frontend IP config when the service's `pipName` annotation is changed ([#95813](https://github.com/kubernetes/kubernetes/pull/95813), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Add ability to skip OpenAPI handler installation to the GenericAPIServer ([#100341](https://github.com/kubernetes/kubernetes/pull/100341), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery]
+- Count pod overhead against an entity's ResourceQuota ([#99600](https://github.com/kubernetes/kubernetes/pull/99600), [@gjkim42](https://github.com/gjkim42)) [SIG API Machinery and Node]
+- EndpointSlice controllers are less likely to create duplicate EndpointSlices. ([#100103](https://github.com/kubernetes/kubernetes/pull/100103), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Ensure only one LoadBalancer rule is created when HA mode is enabled ([#99825](https://github.com/kubernetes/kubernetes/pull/99825), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fixed a race condition on API server startup ensuring previously created webhook configurations are effective before the first write request is admitted. ([#95783](https://github.com/kubernetes/kubernetes/pull/95783), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
+- Fixed authentication_duration_seconds metric. Previously it included whole apiserver request duration. ([#99944](https://github.com/kubernetes/kubernetes/pull/99944), [@marseel](https://github.com/marseel)) [SIG API Machinery, Instrumentation and Scalability]
+- Fixes issue where inline AzueFile secrets could not be accessed from the pod's namespace. ([#100563](https://github.com/kubernetes/kubernetes/pull/100563), [@msau42](https://github.com/msau42)) [SIG Storage]
+- Improve speed of vSphere PV provisioning and reduce number of API calls ([#100054](https://github.com/kubernetes/kubernetes/pull/100054), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- Kubectl: Fixed panic when describing an ingress backend without an API Group ([#100505](https://github.com/kubernetes/kubernetes/pull/100505), [@lauchokyip](https://github.com/lauchokyip)) [SIG CLI]
+- Kubectl: fix case of age column in describe node (#96963, @bl-ue) ([#96963](https://github.com/kubernetes/kubernetes/pull/96963), [@bl-ue](https://github.com/bl-ue)) [SIG CLI]
+- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]
+- Kubelet: Fixed the bug of getting the number of cpu when the number of cpu logical processors is more than 64 in windows ([#97378](https://github.com/kubernetes/kubernetes/pull/97378), [@hwdef](https://github.com/hwdef)) [SIG Node and Windows]
+- Pass `KUBE_BUILD_CONFORMANCE=y` to the package-tarballs to reenable building the conformance tarballs. ([#100571](https://github.com/kubernetes/kubernetes/pull/100571), [@puerco](https://github.com/puerco)) [SIG Release]
+- Pod Log stats for windows now reports metrics ([#99221](https://github.com/kubernetes/kubernetes/pull/99221), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node, Storage, Testing and Windows]
 
 ### Other (Cleanup or Flake)
 
-- NO ([#95690](https://github.com/kubernetes/kubernetes/pull/95690), [@nikhita](https://github.com/nikhita)) [SIG Release]
-
-## Dependencies
-
-### Added
-- github.com/form3tech-oss/jwt-go: [v3.2.2+incompatible](https://github.com/form3tech-oss/jwt-go/tree/v3.2.2)
-
-### Changed
-- github.com/Azure/go-autorest/autorest/adal: [v0.9.0 → v0.9.5](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.9.0...v0.9.5)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.4.0 → v0.4.1](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.4.0...v0.4.1)
-- golang.org/x/crypto: 75b2880 → 7f63de1
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.20.0-alpha.3
-
-
-## Downloads for v1.20.0-alpha.3
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes.tar.gz) | 542cc9e0cd97732020491456402b6e2b4f54f2714007ee1374a7d363663a1b41e82b50886176a5313aaccfbfd4df2bc611d6b32d19961cdc98b5821b75d6b17c
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-src.tar.gz) | 5e5d725294e552fd1d14fd6716d013222827ac2d4e2d11a7a1fdefb77b3459bbeb69931f38e1597de205dd32a1c9763ab524c2af1551faef4f502ef0890f7fbf
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | 60004939727c75d0f06adc4449e16b43303941937c0e9ea9aca7d947e93a5aed5d11e53d1fc94caeb988be66d39acab118d406dc2d6cead61181e1ced6d2be1a
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-386.tar.gz) | 7edba9c4f1bf38fdf1fa5bff2856c05c0e127333ce19b17edf3119dc9b80462c027404a1f58a5eabf1de73a8f2f20aced043dda1fafd893619db1a188cda550c
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | db1818aa82d072cb3e32a2a988e66d76ecf7cebc6b8a29845fa2d6ec27f14a36e4b9839b1b7ed8c43d2da9cde00215eb672a7e8ee235d2e3107bc93c22e58d38
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | d2922e70d22364b1f5a1e94a0c115f849fe2575b231b1ba268f73a9d86fc0a9fbb78dc713446839a2593acf1341cb5a115992f350870f13c1a472bb107b75af7
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | 2e3ae20e554c7d4fc3a8afdfcafe6bbc81d4c5e9aea036357baac7a3fdc2e8098aa8a8c3dded3951667d57f667ce3fbf37ec5ae5ceb2009a569dc9002d3a92f9
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | b54a34e572e6a86221577de376e6f7f9fcd82327f7fe94f2fc8d21f35d302db8a0f3d51e60dc89693999f5df37c96d0c3649a29f07f095efcdd59923ae285c95
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | 5be1b70dc437d3ba88cb0b89cd1bc555f79896c3f5b5f4fa0fb046a0d09d758b994d622ebe5cef8e65bba938c5ae945b81dc297f9dfa0d98f82ea75f344a3a0d
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-windows-386.tar.gz) | 88cf3f66168ef3bf9a5d3d2275b7f33799406e8205f2c202997ebec23d449aa4bb48b010356ab1cf52ff7b527b8df7c8b9947a43a82ebe060df83c3d21b7223a
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | 87d2d4ea1829da8cfa1a705a03ea26c759a03bd1c4d8b96f2c93264c4d172bb63a91d9ddda65cdc5478b627c30ae8993db5baf8be262c157d83bffcebe85474e
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | 7af691fc0b13a937797912374e3b3eeb88d5262e4eb7d4ebe92a3b64b3c226cb049aedfd7e39f639f6990444f7bcf2fe58699cf0c29039daebe100d7eebf60de
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | 557c47870ecf5c2090b2694c8f0c8e3b4ca23df5455a37945bd037bc6fb5b8f417bf737bb66e6336b285112cb52de0345240fdb2f3ce1c4fb335ca7ef1197f99
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | 981de6cf7679d743cdeef1e894314357b68090133814801870504ef30564e32b5675e270db20961e9a731e35241ad9b037bdaf749da87b6c4ce8889eeb1c5855
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | 506578a21601ccff609ae757a55e68634c15cbfecbf13de972c96b32a155ded29bd71aee069c77f5f721416672c7a7ac0b8274de22bfd28e1ecae306313d96c5
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | af0cdcd4a77a7cc8060a076641615730a802f1f02dab084e41926023489efec6102d37681c70ab0dbe7440cd3e72ea0443719a365467985360152b9aae657375
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | 2d92c61596296279de1efae23b2b707415565d9d50cd61a7231b8d10325732b059bcb90f3afb36bef2575d203938c265572721e38df408e8792d3949523bd5d9
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | c298de9b5ac1b8778729a2d8e2793ff86743033254fbc27014333880b03c519de81691caf03aa418c729297ee8942ce9ec89d11b0e34a80576b9936015dc1519
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | daa3c65afda6d7aff206c1494390bbcc205c2c6f8db04c10ca967a690578a01c49d49c6902b85e7158f79fd4d2a87c5d397d56524a75991c9d7db85ac53059a7
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | 05661908bb73bfcaf9c2eae96e9a6a793db5a7a100bce6df9e057985dd53a7a5248d72e81b6d13496bd38b9326c17cdb2edaf0e982b6437507245fb846e1efc6
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | 845e518e2c4ef0cef2c3b58f0b9ea5b5fe9b8a249717f789607752484c424c26ae854b263b7c0a004a8426feb9aa3683c177a9ed2567e6c3521f4835ea08c24a
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | 530e536574ed2c3e5973d3c0f0fdd2b4d48ef681a7a7c02db13e605001669eeb4f4b8a856fc08fc21436658c27b377f5d04dbcb3aae438098abc953b6eaf5712
-
-## Changelog since v1.20.0-alpha.2
-
-## Changes by Kind
-
-### API Change
-
-- New parameter `defaultingType` for `PodTopologySpread` plugin allows to use k8s defined or user provided default constraints ([#95048](https://github.com/kubernetes/kubernetes/pull/95048), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-
-### Feature
-
-- Added new k8s.io/component-helpers repository providing shared helper code for (core) components. ([#92507](https://github.com/kubernetes/kubernetes/pull/92507), [@ingvagabund](https://github.com/ingvagabund)) [SIG Apps, Node, Release and Scheduling]
-- Adds `create ingress` command to `kubectl` ([#78153](https://github.com/kubernetes/kubernetes/pull/78153), [@amimof](https://github.com/amimof)) [SIG CLI and Network]
-- Kubectl create now supports creating ingress objects. ([#94327](https://github.com/kubernetes/kubernetes/pull/94327), [@rikatz](https://github.com/rikatz)) [SIG CLI and Network]
-- New default scheduling plugins order reduces scheduling and preemption latency when taints and node affinity are used ([#95539](https://github.com/kubernetes/kubernetes/pull/95539), [@soulxu](https://github.com/soulxu)) [SIG Scheduling]
-- SCTP support in API objects (Pod, Service, NetworkPolicy) is now GA.
-  Note that this has no effect on whether SCTP is enabled on nodes at the kernel level,
-  and note that some cloud platforms and network plugins do not support SCTP traffic. ([#95566](https://github.com/kubernetes/kubernetes/pull/95566), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
-- Scheduling Framework: expose Run[Pre]ScorePlugins functions to PreemptionHandle which can be used in PostFilter extention point. ([#93534](https://github.com/kubernetes/kubernetes/pull/93534), [@everpeace](https://github.com/everpeace)) [SIG Scheduling and Testing]
-- SelectorSpreadPriority maps to PodTopologySpread plugin when DefaultPodTopologySpread feature is enabled ([#95448](https://github.com/kubernetes/kubernetes/pull/95448), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- SetHostnameAsFQDN has been graduated to Beta and therefore it is enabled by default. ([#95267](https://github.com/kubernetes/kubernetes/pull/95267), [@javidiaz](https://github.com/javidiaz)) [SIG Node]
-
-### Bug or Regression
-
-- An issues preventing volume expand controller to annotate the PVC with `volume.kubernetes.io/storage-resizer` when the PVC StorageClass is already updated to the out-of-tree provisioner is now fixed. ([#94489](https://github.com/kubernetes/kubernetes/pull/94489), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery, Apps and Storage]
-- Change the mount way from systemd to normal mount except ceph and glusterfs intree-volume. ([#94916](https://github.com/kubernetes/kubernetes/pull/94916), [@smileusd](https://github.com/smileusd)) [SIG Apps, Cloud Provider, Network, Node, Storage and Testing]
-- Fix azure disk attach failure for disk size bigger than 4TB ([#95463](https://github.com/kubernetes/kubernetes/pull/95463), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix azure disk data loss issue on Windows when unmount disk ([#95456](https://github.com/kubernetes/kubernetes/pull/95456), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix verb & scope reporting for kube-apiserver metrics (LIST reported instead of GET) ([#95562](https://github.com/kubernetes/kubernetes/pull/95562), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Fix vsphere detach failure for static PVs ([#95447](https://github.com/kubernetes/kubernetes/pull/95447), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fix: smb valid path error ([#95583](https://github.com/kubernetes/kubernetes/pull/95583), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Fixed a bug causing incorrect formatting of `kubectl describe ingress`. ([#94985](https://github.com/kubernetes/kubernetes/pull/94985), [@howardjohn](https://github.com/howardjohn)) [SIG CLI and Network]
-- Fixed a bug in client-go where new clients with customized `Dial`, `Proxy`, `GetCert` config may get stale HTTP transports. ([#95427](https://github.com/kubernetes/kubernetes/pull/95427), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Fixes high CPU usage in kubectl drain ([#95260](https://github.com/kubernetes/kubernetes/pull/95260), [@amandahla](https://github.com/amandahla)) [SIG CLI]
-- Support the node label `node.kubernetes.io/exclude-from-external-load-balancers` ([#95542](https://github.com/kubernetes/kubernetes/pull/95542), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-
-### Other (Cleanup or Flake)
-
-- Fix func name NewCreateCreateDeploymentOptions ([#91931](https://github.com/kubernetes/kubernetes/pull/91931), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG CLI]
-- Kubeadm: update the default pause image version to 1.4.0 on Windows. With this update the image supports Windows versions 1809 (2019LTS), 1903, 1909, 2004 ([#95419](https://github.com/kubernetes/kubernetes/pull/95419), [@jsturtevant](https://github.com/jsturtevant)) [SIG Cluster Lifecycle and Windows]
-- Upgrade snapshot controller to 3.0.0 ([#95412](https://github.com/kubernetes/kubernetes/pull/95412), [@saikat-royc](https://github.com/saikat-royc)) [SIG Cloud Provider]
-- Remove the dependency of csi-translation-lib module on apiserver/cloud-provider/controller-manager ([#95543](https://github.com/kubernetes/kubernetes/pull/95543), [@wawa0210](https://github.com/wawa0210)) [SIG Release]
-- Scheduler framework interface moved from pkg/scheduler/framework/v1alpha to pkg/scheduler/framework ([#95069](https://github.com/kubernetes/kubernetes/pull/95069), [@farah](https://github.com/farah)) [SIG Scheduling, Storage and Testing]
-- UDP and SCTP protocols can left stale connections that need to be cleared to avoid services disruption, but they can cause problems that are hard to debug.
-  Kubernetes components using a loglevel greater or equal than 4 will log the conntrack operations and its output, to show the entries that were deleted. ([#95694](https://github.com/kubernetes/kubernetes/pull/95694), [@aojea](https://github.com/aojea)) [SIG Network]
+- A new storage E2E testsuite covers CSIStorageCapacity publishing if a driver opts into the test. ([#100537](https://github.com/kubernetes/kubernetes/pull/100537), [@pohly](https://github.com/pohly)) [SIG Storage and Testing]
+- Convert cmd/kubelet/app/server.go to structured logging ([#98334](https://github.com/kubernetes/kubernetes/pull/98334), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- If kube-apiserver enabled goaway feature, clients required golang 1.15.8 or 1.16+ version to avoid un-expected data race issue. ([#98809](https://github.com/kubernetes/kubernetes/pull/98809), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
+- Increased CSINodeIDMaxLength from 128  bytes to 192 bytes. ([#98753](https://github.com/kubernetes/kubernetes/pull/98753), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps and Storage]
+- Migrate  `pkg/kubelet/pluginmanager`  to structured logging ([#99885](https://github.com/kubernetes/kubernetes/pull/99885), [@qingwave](https://github.com/qingwave)) [SIG Node]
+- Migrate  `pkg/kubelet/preemption/preemption.go` and `pkg/kubelet/logs/container_log_manager.go` to structured logging ([#99848](https://github.com/kubernetes/kubernetes/pull/99848), [@qingwave](https://github.com/qingwave)) [SIG Node]
+- Migrate `pkg/kubelet/(cri)` to structured logging ([#99006](https://github.com/kubernetes/kubernetes/pull/99006), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate `pkg/kubelet/(node, pod)` to structured logging ([#98847](https://github.com/kubernetes/kubernetes/pull/98847), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate `pkg/kubelet/(volume,container)` to structured logging ([#98850](https://github.com/kubernetes/kubernetes/pull/98850), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate `pkg/kubelet/kubelet_node_status.go` to structured logging ([#98154](https://github.com/kubernetes/kubernetes/pull/98154), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node and Release]
+- Migrate `pkg/kubelet/lifecycle,oom` to structured logging ([#99479](https://github.com/kubernetes/kubernetes/pull/99479), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG Instrumentation and Node]
+- Migrate cmd/kubelet/+ pkg/kubelet/cadvisor/cadvisor_linux.go + pkg/kubelet/cri/remote/util/util_unix.go + pkg/kubelet/images/image_manager.go to structured logging ([#99994](https://github.com/kubernetes/kubernetes/pull/99994), [@AfrouzMashayekhi](https://github.com/AfrouzMashayekhi)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/cm/container_manager_linux.go and pkg/kubelet/cm/container_manager_stub.go to structured logging ([#100001](https://github.com/kubernetes/kubernetes/pull/100001), [@shiyajuan123](https://github.com/shiyajuan123)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/cm/cpumanage/{topology/togit pology.go, policy_none.go, cpu_assignment.go} to structured logging ([#100163](https://github.com/kubernetes/kubernetes/pull/100163), [@lala123912](https://github.com/lala123912)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/cm/cpumanager/state to structured logging ([#99563](https://github.com/kubernetes/kubernetes/pull/99563), [@jmguzik](https://github.com/jmguzik)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/config to structured logging ([#100002](https://github.com/kubernetes/kubernetes/pull/100002), [@AfrouzMashayekhi](https://github.com/AfrouzMashayekhi)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/kubelet.go to structured logging ([#99861](https://github.com/kubernetes/kubernetes/pull/99861), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/kubeletconfig to structured logging ([#100265](https://github.com/kubernetes/kubernetes/pull/100265), [@ehashman](https://github.com/ehashman)) [SIG Node]
+- Migrate pkg/kubelet/kuberuntime to structured logging ([#99970](https://github.com/kubernetes/kubernetes/pull/99970), [@krzysiekg](https://github.com/krzysiekg)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/prober to structured logging ([#99830](https://github.com/kubernetes/kubernetes/pull/99830), [@krzysiekg](https://github.com/krzysiekg)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/winstats to structured logging ([#99855](https://github.com/kubernetes/kubernetes/pull/99855), [@hexxdump](https://github.com/hexxdump)) [SIG Instrumentation and Node]
+- Migrate probe log messages to structured logging ([#97093](https://github.com/kubernetes/kubernetes/pull/97093), [@aldudko](https://github.com/aldudko)) [SIG Instrumentation and Node]
+- Migrate remaining kubelet files to structured logging ([#100196](https://github.com/kubernetes/kubernetes/pull/100196), [@ehashman](https://github.com/ehashman)) [SIG Instrumentation and Node]
+- `apiserver_storage_objects` (a newer version of `etcd_object_counts) is promoted and marked as stable. ([#100082](https://github.com/kubernetes/kubernetes/pull/100082), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
 
 ## Dependencies
 
@@ -1606,536 +774,942 @@ filename | sha512 hash
 _Nothing has changed._
 
 ### Changed
-_Nothing has changed._
+- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
+- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
+- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
+- github.com/creack/pty: [v1.1.9 → v1.1.11](https://github.com/creack/pty/compare/v1.1.9...v1.1.11)
+- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
+- github.com/google/cadvisor: [v0.38.8 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.8...v0.39.0)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
+- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
+- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
+- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
+- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
+- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
+- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
+- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
+- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
+- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
+- gotest.tools/v3: v3.0.2 → v3.0.3
+- k8s.io/klog/v2: v2.5.0 → v2.8.0
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.3 → v4.1.0
 
 ### Removed
 _Nothing has changed._
 
 
 
-# v1.20.0-alpha.2
+# v1.21.0-beta.1
 
 
-## Downloads for v1.20.0-alpha.2
+## Downloads for v1.21.0-beta.1
 
 ### Source Code
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes.tar.gz) | 45089a4d26d56a5d613ecbea64e356869ac738eca3cc71d16b74ea8ae1b4527bcc32f1dc35ff7aa8927e138083c7936603faf063121d965a2f0f8ba28fa128d8
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-src.tar.gz) | 646edd890d6df5858b90aaf68cc6e1b4589b8db09396ae921b5c400f2188234999e6c9633906692add08c6e8b4b09f12b2099132b0a7533443fb2a01cfc2bf81
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes.tar.gz) | c9f4f25242e319e5d90f49d26f239a930aad69677c0f3c2387c56bb13482648a26ed234be2bfe2352508f35010e3eb6d3b127c31a9f24fa1e53ac99c38520fe4
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-src.tar.gz) | 255357db8fa160cab2187658906b674a8b0d9b9a5b5f688cc7b69dc124f5da00362c6cc18ae9b80f7ddb3da6f64c2ab2f12fb9b63a4e063c7366a5375b175cda
 
 ### Client binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | c136273883e24a2a50b5093b9654f01cdfe57b97461d34885af4a68c2c4d108c07583c02b1cdf7f57f82e91306e542ce8f3bddb12fcce72b744458bc4796f8eb
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-386.tar.gz) | 6ec59f1ed30569fa64ddb2d0de32b1ae04cda4ffe13f339050a7c9d7c63d425ee6f6d963dcf82c17281c4474da3eaf32c08117669052872a8c81bdce2c8a5415
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | 7b40a4c087e2ea7f8d055f297fcd39a3f1cb6c866e7a3981a9408c3c3eb5363c648613491aad11bc7d44d5530b20832f8f96f6ceff43deede911fb74aafad35f
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | cda9955feebea5acb8f2b5b87895d24894bbbbde47041453b1f926ebdf47a258ce0496aa27d06bcbf365b5615ce68a20d659b64410c54227216726e2ee432fca
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | f65bd9241c7eb88a4886a285330f732448570aea4ededaebeabcf70d17ea185f51bf8a7218f146ee09fb1adceca7ee71fb3c3683834f2c415163add820fba96e
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | 1e377599af100a81d027d9199365fb8208d443a8e0a97affff1a79dc18796e14b78cb53d6e245c1c1e8defd0e050e37bf5f2a23c8a3ff45a6d18d03619709bf5
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | 1cdee81478246aa7e7b80ae4efc7f070a5b058083ae278f59fad088b75a8052761b0e15ab261a6e667ddafd6a69fb424fc307072ed47941cad89a85af7aee93d
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-windows-386.tar.gz) | d8774167c87b6844c348aa15e92d5033c528d6ab9e95d08a7cb22da68bafd8e46d442cf57a5f6affad62f674c10ae6947d524b94108b5e450ca78f92656d63c0
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | f664b47d8daa6036f8154c1dc1f881bfe683bf57c39d9b491de3848c03d051c50c6644d681baf7f9685eae45f9ce62e4c6dfea2853763cfe8256a61bdd59d894
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | 02efd389c8126456416fd2c7ea25c3cc30f612649ad91f631f068d6c0e5e539484d3763cb9a8645ad6b8077e4fcd1552a659d7516ebc4ce6828cf823b65c3016
+[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-darwin-arm64.tar.gz) | ac90dcd1699d1d7ff9c8342d481f6d0d97ccdc3ec501a56dc7c9e1898a8f77f712bf66942d304bfe581b5494f13e3efa211865de88f89749780e9e26e673dbdb
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-386.tar.gz) | cce5fb84cc7a1ee664f89d8ad3064307c51c044e9ddd2ae5a004939b69d3b3ef6f29acc5782e27d0c8f0d6d3d9c96e922f5d1b99d210ca3e754666d775df9f0c
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | 2e93bbd2e60ad7cd8fe495115e96c55b1dc8facd100a827ef9c197a732679b60cceb9ea7bf92a1f5e328c3b8adfa8d3922cbc5d8370e374f3381b83f5b877b4f
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-arm.tar.gz) | 23f03b6a8fa9decce9b89a2c1bd3dae6d0b2f9e533e35a79e2c5a29326a165259677594ae83c877219a21bdb95557a284e55f4eec12954742794579c89a7d7e5
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | 3acf3101b46568b0ded6b90f13df0e918870d6812dc1a584903ddb8ba146484a204b9e442f863df47c7d4dab043fd9f7294c5510d3eb09004993d6d3b1e9e13c
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | f749198df69577f62872d3096138a1b8969ec6b1636eb68eb56640bf33cf5f97a11df4363462749a1c0dc3ccbb8ae76c5d66864bf1c5cf7e52599caaf498e504
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | 3f6c0189d59fca22cdded3a02c672ef703d17e6ab0831e173a870e14ccec436c142600e9fc35b403571b6906f2be8d18d38d33330f7caada971bbe1187b388f6
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-windows-386.tar.gz) | 03d92371c425cf331c80807c0ac56f953be304fc6719057258a363d527d186d610e1d4b4d401b34128062983265c2e21f2d2389231aa66a6f5787eee78142cf6
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | 489ece0c886a025ca3a25d28518637a5a824ea6544e7ef8778321036f13c8909a978ad4ceca966cec1e1cda99f25ca78bfd37460d1231c77436d216d43c872ad
 
 ### Server binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | d6fcb4600be0beb9de222a8da64c35fe22798a0da82d41401d34d0f0fc7e2817512169524c281423d8f4a007cd77452d966317d5a1b67d2717a05ff346e8aa7d
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | 022a76cf10801f8afbabb509572479b68fdb4e683526fa0799cdbd9bab4d3f6ecb76d1d63d0eafee93e3edf6c12892d84b9c771ef2325663b95347728fa3d6c0
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | 0679aadd60bbf6f607e5befad74b5267eb2d4c1b55985cc25a97e0f4c5efb7acbb3ede91bfa6a5a5713dae4d7a302f6faaf678fd6b359284c33d9a6aca2a08bb
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | 9f2cfeed543b515eafb60d9765a3afff4f3d323c0a5c8a0d75e3de25985b2627817bfcbe59a9a61d969e026e2b861adb974a09eae75b58372ed736ceaaed2a82
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | 937258704d7b9dcd91f35f2d34ee9dd38c18d9d4e867408c05281bfbbb919ad012c95880bee84d2674761aa44cc617fb2fae1124cf63b689289286d6eac1c407
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | 2e95cb31d5afcb6842c41d25b7d0c18dd7e65693b2d93c8aa44e5275f9c6201e1a67685c7a8ddefa334babb04cb559d26e39b6a18497695a07dc270568cae108
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-arm.tar.gz) | 2927e82b98404c077196ce3968f3afd51a7576aa56d516019bd3976771c0213ba01e78da5b77478528e770da0d334e9457995fafb98820ed68b2ee34beb68856
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | e0f7aea3ea598214a9817bc04949389cb7e4e7b9503141a590ef48c0b681fe44a4243ebc6280752fa41aa1093149b3ee1bcef7664edb746097a342281825430b
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | c011f7eb01294e9ba5d5ced719068466f88ed595dcb8d554a36a4dd5118fb6b3d6bafe8bf89aa2d42988e69793ed777ba77b8876c6ec74f898a43cfce1f61bf4
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | 15f6683e7f16caab7eebead2b7c15799460abbf035a43de0b75f96b0be19908f58add98a777a0cca916230d60cf6bfe3fee92b9dcff50274b1e37c243c157969
 
 ### Node binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | 076165d745d47879de68f4404eaf432920884be48277eb409e84bf2c61759633bf3575f46b0995f1fc693023d76c0921ed22a01432e756d7f8d9e246a243b126
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | 1ff2e2e3e43af41118cdfb70c778e15035bbb1aca833ffd2db83c4bcd44f55693e956deb9e65017ebf3c553f2820ad5cd05f5baa33f3d63f3e00ed980ea4dfed
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | b232c7359b8c635126899beee76998078eec7a1ef6758d92bcdebe8013b0b1e4d7b33ecbf35e3f82824fe29493400845257e70ed63c1635bfa36c8b3b4969f6f
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | 51d415a068f554840f4c78d11a4fedebd7cb03c686b0ec864509b24f7a8667ebf54bb0a25debcf2b70f38be1e345e743f520695b11806539a55a3620ce21946f
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | b51c082d8af358233a088b632cf2f6c8cfe5421471c27f5dc9ba4839ae6ea75df25d84298f2042770097554c01742bb7686694b331ad9bafc93c86317b867728
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | 91b9d26620a2dde67a0edead0039814efccbdfd54594dda3597aaced6d89140dc92612ed0727bc21d63468efeef77c845e640153b09e39d8b736062e6eee0c76
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | ed58679561197110f366b9109f7afd62c227bfc271918ccf3eea203bb2ab6428eb5db4dd6c965f202a8a636f66da199470269b863815809b99d53d2fa47af2ea
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-arm.tar.gz) | 7e6c7f1957fcdecec8fef689c5019edbc0d0c11d22dafbfef0a07121d10d8f6273644f73511bd06a9a88b04d81a940bd6645ffb5711422af64af547a45c76273
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | a3618f29967e7a1574917a67f0296e65780321eda484b99aa32bfd4dc9b35acdefce33da952ac52dfb509fbac5bf700cf177431fad2ab4adcab0544538939faa
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | 326d3eb521b41bdf489912177f70b8cdd7cd828bb9b3d847ed3694eb27e457f24e0a88b8e51b726eee39800a3c5a40c1b30e3a8ec4a34d8041b3d8ef05d1b749
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | 022d05ebaa66a0332c4fe18cdaf23d14c2c7e4d1f2af7f27baaf1eb042e6890dc3434b4ac8ba58c35d590717956f8c3458112685aff4938b94b18e263c3f4256
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | fa691ed93f07af6bc1cf57e20a30580d6c528f88e5fea3c14f39c1820969dc5a0eb476c5b87b288593d0c086c4dd93aff6165082393283c3f46c210f9bb66d61
 
-## Changelog since v1.20.0-alpha.1
-
-## Changes by Kind
-
-### Deprecation
-
-- Action-required: kubeadm: graduate the "kubeadm alpha certs" command to a parent command "kubeadm certs". The command "kubeadm alpha certs" is deprecated and will be removed in a future release. Please migrate. ([#94938](https://github.com/kubernetes/kubernetes/pull/94938), [@yagonobre](https://github.com/yagonobre)) [SIG Cluster Lifecycle]
-- Action-required: kubeadm: remove the deprecated feature --experimental-kustomize from kubeadm commands. The feature was replaced with --experimental-patches in 1.19. To migrate see the --help description for the --experimental-patches flag. ([#94871](https://github.com/kubernetes/kubernetes/pull/94871), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: deprecate self-hosting support. The experimental command "kubeadm alpha self-hosting" is now deprecated and will be removed in a future release. ([#95125](https://github.com/kubernetes/kubernetes/pull/95125), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Removes deprecated scheduler metrics DeprecatedSchedulingDuration, DeprecatedSchedulingAlgorithmPredicateEvaluationSecondsDuration, DeprecatedSchedulingAlgorithmPriorityEvaluationSecondsDuration ([#94884](https://github.com/kubernetes/kubernetes/pull/94884), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-- Scheduler alpha metrics binding_duration_seconds and scheduling_algorithm_preemption_evaluation_seconds are deprecated, Both of those metrics are now covered as part of framework_extension_point_duration_seconds, the former as a PostFilter the latter and a Bind plugin. The plan is to remove both in 1.21 ([#95001](https://github.com/kubernetes/kubernetes/pull/95001), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-
-### API Change
-
-- GPU metrics provided by kubelet are now disabled by default ([#95184](https://github.com/kubernetes/kubernetes/pull/95184), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node]
-- New parameter `defaultingType` for `PodTopologySpread` plugin allows to use k8s defined or user provided default constraints ([#95048](https://github.com/kubernetes/kubernetes/pull/95048), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Server Side Apply now treats LabelSelector fields as atomic (meaning the entire selector is managed by a single writer and updated together), since they contain interrelated and inseparable fields that do not merge in intuitive ways. ([#93901](https://github.com/kubernetes/kubernetes/pull/93901), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Storage and Testing]
-- Status of v1beta1 CRDs without "preserveUnknownFields:false" will show violation "spec.preserveUnknownFields: Invalid value: true: must be false" ([#93078](https://github.com/kubernetes/kubernetes/pull/93078), [@vareti](https://github.com/vareti)) [SIG API Machinery]
-
-### Feature
-
-- Added `get-users` and `delete-user` to the `kubectl config` subcommand ([#89840](https://github.com/kubernetes/kubernetes/pull/89840), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-- Added counter metric "apiserver_request_self" to count API server self-requests with labels for verb, resource, and subresource. ([#94288](https://github.com/kubernetes/kubernetes/pull/94288), [@LogicalShark](https://github.com/LogicalShark)) [SIG API Machinery, Auth, Instrumentation and Scheduling]
-- Added new k8s.io/component-helpers repository providing shared helper code for (core) components. ([#92507](https://github.com/kubernetes/kubernetes/pull/92507), [@ingvagabund](https://github.com/ingvagabund)) [SIG Apps, Node, Release and Scheduling]
-- Adds `create ingress` command to `kubectl` ([#78153](https://github.com/kubernetes/kubernetes/pull/78153), [@amimof](https://github.com/amimof)) [SIG CLI and Network]
-- Allow configuring AWS LoadBalancer health check protocol via service annotations ([#94546](https://github.com/kubernetes/kubernetes/pull/94546), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- Azure: Support multiple services sharing one IP address ([#94991](https://github.com/kubernetes/kubernetes/pull/94991), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Ephemeral containers now apply the same API defaults as initContainers and containers ([#94896](https://github.com/kubernetes/kubernetes/pull/94896), [@wawa0210](https://github.com/wawa0210)) [SIG Apps and CLI]
-- In dual-stack bare-metal clusters, you can now pass dual-stack IPs to `kubelet --node-ip`.
-  eg: `kubelet --node-ip 10.1.0.5,fd01::0005`. This is not yet supported for non-bare-metal
-  clusters.
-  
-  In dual-stack clusters where nodes have dual-stack addresses, hostNetwork pods
-  will now get dual-stack PodIPs. ([#95239](https://github.com/kubernetes/kubernetes/pull/95239), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Introduces a new GCE specific cluster creation variable KUBE_PROXY_DISABLE. When set to true, this will skip over the creation of kube-proxy (whether the daemonset or static pod). This can be used to control the lifecycle of kube-proxy separately from the lifecycle of the nodes. ([#91977](https://github.com/kubernetes/kubernetes/pull/91977), [@varunmar](https://github.com/varunmar)) [SIG Cloud Provider]
-- Kubeadm: do not throw errors if the current system time is outside of the NotBefore and NotAfter bounds of a loaded certificate. Print warnings instead. ([#94504](https://github.com/kubernetes/kubernetes/pull/94504), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: make the command "kubeadm alpha kubeconfig user" accept a "--config" flag and remove the following flags:
-  - apiserver-advertise-address / apiserver-bind-port: use either localAPIEndpoint from InitConfiguration or controlPlaneEndpoint from ClusterConfiguration.
-  - cluster-name: use clusterName from ClusterConfiguration
-  - cert-dir: use certificatesDir from ClusterConfiguration ([#94879](https://github.com/kubernetes/kubernetes/pull/94879), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubectl rollout history sts/sts-name --revision=some-revision will start showing the detailed view of  the sts on that specified revision ([#86506](https://github.com/kubernetes/kubernetes/pull/86506), [@dineshba](https://github.com/dineshba)) [SIG CLI]
-- Scheduling Framework: expose Run[Pre]ScorePlugins functions to PreemptionHandle which can be used in PostFilter extention point. ([#93534](https://github.com/kubernetes/kubernetes/pull/93534), [@everpeace](https://github.com/everpeace)) [SIG Scheduling and Testing]
-- Send gce node startup scripts logs to console and journal ([#95311](https://github.com/kubernetes/kubernetes/pull/95311), [@karan](https://github.com/karan)) [SIG Cloud Provider and Node]
-- Support kubectl delete orphan/foreground/background options ([#93384](https://github.com/kubernetes/kubernetes/pull/93384), [@zhouya0](https://github.com/zhouya0)) [SIG CLI and Testing]
-
-### Bug or Regression
-
-- Change the mount way from systemd to normal mount except ceph and glusterfs intree-volume. ([#94916](https://github.com/kubernetes/kubernetes/pull/94916), [@smileusd](https://github.com/smileusd)) [SIG Apps, Cloud Provider, Network, Node, Storage and Testing]
-- Cloud node controller: handle empty providerID from getProviderID ([#95342](https://github.com/kubernetes/kubernetes/pull/95342), [@nicolehanjing](https://github.com/nicolehanjing)) [SIG Cloud Provider]
-- Fix a bug where the endpoint slice controller was not mirroring the parent service labels to its corresponding endpoint slices ([#94443](https://github.com/kubernetes/kubernetes/pull/94443), [@aojea](https://github.com/aojea)) [SIG Apps and Network]
-- Fix azure disk attach failure for disk size bigger than 4TB ([#95463](https://github.com/kubernetes/kubernetes/pull/95463), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix azure disk data loss issue on Windows when unmount disk ([#95456](https://github.com/kubernetes/kubernetes/pull/95456), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix detach azure disk issue when vm not exist ([#95177](https://github.com/kubernetes/kubernetes/pull/95177), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix network_programming_latency metric reporting for Endpoints/EndpointSlice deletions, where we don't have correct timestamp ([#95363](https://github.com/kubernetes/kubernetes/pull/95363), [@wojtek-t](https://github.com/wojtek-t)) [SIG Network and Scalability]
-- Fix scheduler cache snapshot when a Node is deleted before its Pods ([#95130](https://github.com/kubernetes/kubernetes/pull/95130), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Fix vsphere detach failure for static PVs ([#95447](https://github.com/kubernetes/kubernetes/pull/95447), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fixed a bug that prevents the use of ephemeral containers in the presence of a validating admission webhook. ([#94685](https://github.com/kubernetes/kubernetes/pull/94685), [@verb](https://github.com/verb)) [SIG Node and Testing]
-- Gracefully delete nodes when their parent scale set went missing ([#95289](https://github.com/kubernetes/kubernetes/pull/95289), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- In dual-stack clusters, kubelet will now set up both IPv4 and IPv6 iptables rules, which may
-  fix some problems, eg with HostPorts. ([#94474](https://github.com/kubernetes/kubernetes/pull/94474), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Kubeadm: for Docker as the container runtime, make the "kubeadm reset" command stop containers before removing them ([#94586](https://github.com/kubernetes/kubernetes/pull/94586), [@BedivereZero](https://github.com/BedivereZero)) [SIG Cluster Lifecycle]
-- Kubeadm: warn but do not error out on missing "ca.key" files for root CA, front-proxy CA and etcd CA, during "kubeadm join --control-plane" if the user has provided all certificates, keys and kubeconfig files which require signing with the given CA keys. ([#94988](https://github.com/kubernetes/kubernetes/pull/94988), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Port mapping allows to map the same `containerPort` to multiple `hostPort` without naming the mapping explicitly. ([#94494](https://github.com/kubernetes/kubernetes/pull/94494), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Network and Node]
-- Warn instead of fail when creating Roles and ClusterRoles with custom verbs via kubectl ([#92492](https://github.com/kubernetes/kubernetes/pull/92492), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-
-### Other (Cleanup or Flake)
-
-- Added fine grained debugging to the intra-pod conformance test for helping easily resolve networking issues for nodes that might be unhealthy when running conformance or sonobuoy tests. ([#93837](https://github.com/kubernetes/kubernetes/pull/93837), [@jayunit100](https://github.com/jayunit100)) [SIG Network and Testing]
-- AdmissionReview objects sent for the creation of Namespace API objects now populate the `namespace` attribute consistently (previously the `namespace` attribute was empty for Namespace creation via POST requests, and populated for Namespace creation via server-side-apply PATCH requests) ([#95012](https://github.com/kubernetes/kubernetes/pull/95012), [@nodo](https://github.com/nodo)) [SIG API Machinery and Testing]
-- Client-go header logging (at verbosity levels >= 9) now masks `Authorization` header contents ([#95316](https://github.com/kubernetes/kubernetes/pull/95316), [@sfowl](https://github.com/sfowl)) [SIG API Machinery]
-- Enhance log information of verifyRunAsNonRoot, add pod, container information ([#94911](https://github.com/kubernetes/kubernetes/pull/94911), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
-- Errors from staticcheck:                                                                                                                                      
-  vendor/k8s.io/client-go/discovery/cached/memory/memcache_test.go:94:2: this value of g is never used (SA4006) ([#95098](https://github.com/kubernetes/kubernetes/pull/95098), [@phunziker](https://github.com/phunziker)) [SIG API Machinery]
-- Kubeadm: update the default pause image version to 1.4.0 on Windows. With this update the image supports Windows versions 1809 (2019LTS), 1903, 1909, 2004 ([#95419](https://github.com/kubernetes/kubernetes/pull/95419), [@jsturtevant](https://github.com/jsturtevant)) [SIG Cluster Lifecycle and Windows]
-- Masks ceph RBD adminSecrets in logs when logLevel >= 4 ([#95245](https://github.com/kubernetes/kubernetes/pull/95245), [@sfowl](https://github.com/sfowl)) [SIG Storage]
-- Upgrade snapshot controller to 3.0.0 ([#95412](https://github.com/kubernetes/kubernetes/pull/95412), [@saikat-royc](https://github.com/saikat-royc)) [SIG Cloud Provider]
-- Remove offensive words from kubectl cluster-info command ([#95202](https://github.com/kubernetes/kubernetes/pull/95202), [@rikatz](https://github.com/rikatz)) [SIG Architecture, CLI and Testing]
-- The following new metrics are available.
-  - network_plugin_operations_total
-  - network_plugin_operations_errors_total ([#93066](https://github.com/kubernetes/kubernetes/pull/93066), [@AnishShah](https://github.com/AnishShah)) [SIG Instrumentation, Network and Node]
-- Vsphere: improve logging message on node cache refresh event ([#95236](https://github.com/kubernetes/kubernetes/pull/95236), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
-- `kubectl api-resources` now prints the API version (as 'API group/version', same as output of `kubectl api-versions`). The column APIGROUP is now APIVERSION ([#95253](https://github.com/kubernetes/kubernetes/pull/95253), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-
-## Dependencies
-
-### Added
-- github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/internal/testify/tree/v1.5.1)
-
-### Changed
-- github.com/aws/aws-sdk-go: [v1.28.2 → v1.35.5](https://github.com/aws/aws-sdk-go/compare/v1.28.2...v1.35.5)
-- github.com/jmespath/go-jmespath: [c2b33e8 → v0.4.0](https://github.com/jmespath/go-jmespath/compare/c2b33e8...v0.4.0)
-- k8s.io/kube-openapi: 6aeccd4 → 8b50664
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.9 → v0.0.12
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1 → b3cf1e8
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.20.0-alpha.1
-
-
-## Downloads for v1.20.0-alpha.1
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes.tar.gz) | e7daed6502ea07816274f2371f96fe1a446d0d7917df4454b722d9eb3b5ff6163bfbbd5b92dfe7a0c1d07328b8c09c4ae966e482310d6b36de8813aaf87380b5
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-src.tar.gz) | e91213a0919647a1215d4691a63b12d89a3e74055463a8ebd71dc1a4cabf4006b3660881067af0189960c8dab74f4a7faf86f594df69021901213ee5b56550ea
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | 1f3add5f826fa989820d715ca38e8864b66f30b59c1abeacbb4bfb96b4e9c694eac6b3f4c1c81e0ee3451082d44828cb7515315d91ad68116959a5efbdaef1e1
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-386.tar.gz) | c62acdc8993b0a950d4b0ce0b45473bf96373d501ce61c88adf4007afb15c1d53da8d53b778a7eccac6c1624f7fdda322be9f3a8bc2d80aaad7b4237c39f5eaf
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | 1203ababfe00f9bc5be5c059324c17160a96530c1379a152db33564bbe644ccdb94b30eea15a0655bd652efb17895a46c31bbba19d4f5f473c2a0ff62f6e551f
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | 31860088596e12d739c7aed94556c2d1e217971699b950c8417a3cea1bed4e78c9ff1717b9f3943354b75b4641d4b906cd910890dbf4278287c0d224837d9a7d
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | 8d469f37fe20d6e15b5debc13cce4c22e8b7a4f6a4ac787006b96507a85ce761f63b28140d692c54b5f7deb08697f8d5ddb9bbfa8f5ac0d9241fc7de3a3fe3cd
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | 0d62ee1729cd5884946b6c73701ad3a570fa4d642190ca0fe5c1db0fb0cba9da3ac86a948788d915b9432d28ab8cc499e28aadc64530b7d549ee752a6ed93ec1
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | 0fc0420e134ec0b8e0ab2654e1e102cebec47b48179703f1e1b79d51ee0d6da55a4e7304d8773d3cf830341ac2fe3cede1e6b0460fd88f7595534e0730422d5a
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-windows-386.tar.gz) | 3fb53b5260f4888c77c0e4ff602bbcf6bf38c364d2769850afe2b8d8e8b95f7024807c15e2b0d5603e787c46af8ac53492be9e88c530f578b8a389e3bd50c099
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | 2f44c93463d6b5244ce0c82f147e7f32ec2233d0e29c64c3c5759e23533aebd12671bf63e986c0861e9736f9b5259bb8d138574a7c8c8efc822e35cd637416c0
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | ae82d14b1214e4100f0cc2c988308b3e1edd040a65267d0eddb9082409f79644e55387889e3c0904a12c710f91206e9383edf510990bee8c9ea2e297b6472551
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | 9a2a5828b7d1ddb16cc19d573e99a4af642f84129408e6203eeeb0558e7b8db77f3269593b5770b6a976fe9df4a64240ed27ad05a4bd43719e55fce1db0abf58
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | ed700dd226c999354ce05b73927388d36d08474c15333ae689427de15de27c84feb6b23c463afd9dd81993315f31eb8265938cfc7ecf6f750247aa42b9b33fa9
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | abb7a9d726538be3ccf5057a0c63ff9732b616e213c6ebb81363f0c49f1e168ce8068b870061ad7cba7ba1d49252f94cf00a5f68cec0f38dc8fce4e24edc5ca6
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | 3a51888af1bfdd2d5b0101d173ee589c1f39240e4428165f5f85c610344db219625faa42f00a49a83ce943fb079be873b1a114a62003fae2f328f9bf9d1227a4
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | d0f28e3c38ca59a7ff1bfecb48a1ce97116520355d9286afdca1200d346c10018f5bbdf890f130a388654635a2e83e908b263ed45f8a88defca52a7c1d0a7984
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | ed9d3f13028beb3be39bce980c966f82c4b39dc73beaae38cc075fea5be30b0309e555cb2af8196014f2cc9f0df823354213c314b4d6545ff6e30dd2d00ec90e
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | ad5b3268db365dcdded9a9a4bffc90c7df0f844000349accdf2b8fb5f1081e553de9b9e9fb25d5e8a4ef7252d51fa94ef94d36d2ab31d157854e164136f662c2
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | c4de2524e513996def5eeba7b83f7b406f17eaf89d4d557833a93bd035348c81fa9375dcd5c27cfcc55d73995449fc8ee504be1b3bd7b9f108b0b2f153cb05ae
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | 9157b44e3e7bd5478af9f72014e54d1afa5cd19b984b4cd8b348b312c385016bb77f29db47f44aea08b58abf47d8a396b92a2d0e03f2fe8acdd30f4f9466cbdb
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | 8b40a43c5e6447379ad2ee8aac06e8028555e1b370a995f6001018a62411abe5fbbca6060b3d1682c5cadc07a27d49edd3204e797af46368800d55f4ca8aa1de
-
-## Changelog since v1.20.0-alpha.0
+## Changelog since v1.21.0-beta.0
 
 ## Urgent Upgrade Notes
 
 ### (No, really, you MUST read this before you upgrade)
 
- - Azure blob disk feature(`kind`: `Shared`, `Dedicated`) has been deprecated, you should use `kind`: `Managed` in `kubernetes.io/azure-disk` storage class. ([#92905](https://github.com/kubernetes/kubernetes/pull/92905), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-  - CVE-2020-8559 (Medium): Privilege escalation from compromised node to cluster. See https://github.com/kubernetes/kubernetes/issues/92914 for more details.
-  The API Server will no longer proxy non-101 responses for upgrade requests. This could break proxied backends (such as an extension API server) that respond to upgrade requests with a non-101 response code. ([#92941](https://github.com/kubernetes/kubernetes/pull/92941), [@tallclair](https://github.com/tallclair)) [SIG API Machinery]
+ - Kubeadm: during "init" an empty cgroupDriver value in the KubeletConfiguration is now always set to "systemd" unless the user is explicit about it. This requires existing machine setups to configure the container runtime to use the "systemd" driver. Documentation on this topic can be found here: https://kubernetes.io/docs/setup/production-environment/container-runtimes/. When upgrading existing clusters / nodes using "kubeadm upgrade" the old cgroupDriver value is preserved, but in 1.22 this change will also apply to "upgrade". For more information on migrating to the "systemd" driver or remaining on the "cgroupfs" driver see: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/. ([#99471](https://github.com/kubernetes/kubernetes/pull/99471), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+  - Migrate `pkg/kubelet/(dockershim, network)` to structured logging
+  Exit code changed from 255 to 1 ([#98939](https://github.com/kubernetes/kubernetes/pull/98939), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Network and Node]
+  - Migrate `pkg/kubelet/certificate` to structured logging
+  Exit code changed from 255 to 1 ([#98993](https://github.com/kubernetes/kubernetes/pull/98993), [@SataQiu](https://github.com/SataQiu)) [SIG Auth and Node]
+  - Newly provisioned PVs by EBS plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99130](https://github.com/kubernetes/kubernetes/pull/99130), [@ayberk](https://github.com/ayberk)) [SIG Cloud Provider, Storage and Testing]
+  - Newly provisioned PVs by OpenStack Cinder plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99719](https://github.com/kubernetes/kubernetes/pull/99719), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider and Storage]
+  - OpenStack Cinder CSI migration is on by default, Clinder CSI driver must be installed on clusters on OpenStack for Cinder volumes to work. ([#98538](https://github.com/kubernetes/kubernetes/pull/98538), [@dims](https://github.com/dims)) [SIG Storage]
+  - Package pkg/kubelet/server migrated to structured logging
+  Exit code changed from 255 to 1 ([#99838](https://github.com/kubernetes/kubernetes/pull/99838), [@adisky](https://github.com/adisky)) [SIG Node]
+  - Pkg/kubelet/kuberuntime/kuberuntime_manager.go migrated to structured logging
+  Exit code changed from 255 to 1 ([#99841](https://github.com/kubernetes/kubernetes/pull/99841), [@adisky](https://github.com/adisky)) [SIG Instrumentation and Node]
  
 ## Changes by Kind
 
 ### Deprecation
 
-- Kube-apiserver: the componentstatus API is deprecated. This API provided status of etcd, kube-scheduler, and kube-controller-manager components, but only worked when those components were local to the API server, and when kube-scheduler and kube-controller-manager exposed unsecured health endpoints. Instead of this API, etcd health is included in the kube-apiserver health check and kube-scheduler/kube-controller-manager health checks can be made directly against those components' health endpoints. ([#93570](https://github.com/kubernetes/kubernetes/pull/93570), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Cluster Lifecycle]
-- Kubeadm: deprecate the "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. ([#92881](https://github.com/kubernetes/kubernetes/pull/92881), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. This change also removes the parent command "kubeadm alpha kubelet" as there are no more sub-commands under it for the time being. ([#94668](https://github.com/kubernetes/kubernetes/pull/94668), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated --kubelet-config flag for the command "kubeadm upgrade node" ([#94869](https://github.com/kubernetes/kubernetes/pull/94869), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubelet's deprecated endpoint `metrics/resource/v1alpha1` has been removed, please adopt to `metrics/resource`. ([#94272](https://github.com/kubernetes/kubernetes/pull/94272), [@RainbowMango](https://github.com/RainbowMango)) [SIG Instrumentation and Node]
-- The v1alpha1 PodPreset API and admission plugin has been removed with no built-in replacement. Admission webhooks can be used to modify pods on creation. ([#94090](https://github.com/kubernetes/kubernetes/pull/94090), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps, CLI, Cloud Provider, Scalability and Testing]
+- Kubeadm: the deprecated kube-dns is no longer supported as an option. If "ClusterConfiguration.dns.type" is set to "kube-dns" kubeadm will now throw an error. ([#99646](https://github.com/kubernetes/kubernetes/pull/99646), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Remove deprecated --generator --replicas --service-generator --service-overrides --schedule from kubectl run
+  Deprecate --serviceaccount --hostport --requests --limits in kubectl run ([#99732](https://github.com/kubernetes/kubernetes/pull/99732), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
+- `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
+- `diskformat` stroage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
+  
+  vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
+  
+  VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
+  
+  Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
+  
+  Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
 
 ### API Change
 
-- A new `nofuzz` go build tag now disables gofuzz support. Release binaries enable this. ([#92491](https://github.com/kubernetes/kubernetes/pull/92491), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery]
-- A new alpha-level field, `SupportsFsGroup`, has been introduced for CSIDrivers to allow them to specify whether they support volume ownership and permission modifications. The `CSIVolumeSupportFSGroup` feature gate must be enabled to allow this field to be used. ([#92001](https://github.com/kubernetes/kubernetes/pull/92001), [@huffmanca](https://github.com/huffmanca)) [SIG API Machinery, CLI and Storage]
-- Added pod version skew strategy for seccomp profile to synchronize the deprecated annotations with the new API Server fields. Please see the corresponding section [in the KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/20190717-seccomp-ga.md&#35;version-skew-strategy) for more detailed explanations. ([#91408](https://github.com/kubernetes/kubernetes/pull/91408), [@saschagrunert](https://github.com/saschagrunert)) [SIG Apps, Auth, CLI and Node]
-- Adds the ability to disable Accelerator/GPU metrics collected by Kubelet ([#91930](https://github.com/kubernetes/kubernetes/pull/91930), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node]
-- Custom Endpoints are now mirrored to EndpointSlices by a new EndpointSliceMirroring controller. ([#91637](https://github.com/kubernetes/kubernetes/pull/91637), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Cloud Provider, Instrumentation, Network and Testing]
-- External facing API podresources is now available under k8s.io/kubelet/pkg/apis/ ([#92632](https://github.com/kubernetes/kubernetes/pull/92632), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node and Testing]
-- Fix conversions for custom metrics. ([#94481](https://github.com/kubernetes/kubernetes/pull/94481), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- Generic ephemeral volumes, a new alpha feature under the `GenericEphemeralVolume` feature gate, provide a more flexible alternative to `EmptyDir` volumes: as with `EmptyDir`, volumes are created and deleted for each pod automatically by Kubernetes. But because the normal provisioning process is used (`PersistentVolumeClaim`), storage can be provided by third-party storage vendors and all of the usual volume features work. Volumes don't need to be empt; for example, restoring from snapshot is supported. ([#92784](https://github.com/kubernetes/kubernetes/pull/92784), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Instrumentation, Node, Scheduling, Storage and Testing]
-- Kube-controller-manager: volume plugins can be restricted from contacting local and loopback addresses by setting `--volume-host-allow-local-loopback=false`, or from contacting specific CIDR ranges by setting `--volume-host-cidr-denylist` (for example, `--volume-host-cidr-denylist=127.0.0.1/28,feed::/16`) ([#91785](https://github.com/kubernetes/kubernetes/pull/91785), [@mattcary](https://github.com/mattcary)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Kubernetes is now built with golang 1.15.0-rc.1.
-  - The deprecated, legacy behavior of treating the CommonName field on X.509 serving certificates as a host name when no Subject Alternative Names are present is now disabled by default. It can be temporarily re-enabled by adding the value x509ignoreCN=0 to the GODEBUG environment variable. ([#93264](https://github.com/kubernetes/kubernetes/pull/93264), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Storage and Testing]
-- Migrate scheduler, controller-manager and cloud-controller-manager to use LeaseLock ([#94603](https://github.com/kubernetes/kubernetes/pull/94603), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, Apps, Cloud Provider and Scheduling]
-- Modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly ([#94182](https://github.com/kubernetes/kubernetes/pull/94182), [@mattfenwick](https://github.com/mattfenwick)) [SIG API Machinery, Apps, Auth, Network and Node]
-- The ServiceAccountIssuerDiscovery feature gate is now Beta and enabled by default. ([#91921](https://github.com/kubernetes/kubernetes/pull/91921), [@mtaufen](https://github.com/mtaufen)) [SIG Auth]
-- The kube-controller-manager managed signers can now have distinct signing certificates and keys.  See the help about `--cluster-signing-[signer-name]-{cert,key}-file`.  `--cluster-signing-{cert,key}-file` is still the default. ([#90822](https://github.com/kubernetes/kubernetes/pull/90822), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps and Auth]
-- When creating a networking.k8s.io/v1 Ingress API object, `spec.tls[*].secretName` values are required to pass validation rules for Secret API object names. ([#93929](https://github.com/kubernetes/kubernetes/pull/93929), [@liggitt](https://github.com/liggitt)) [SIG Network]
-- WinOverlay feature graduated to beta ([#94807](https://github.com/kubernetes/kubernetes/pull/94807), [@ksubrmnn](https://github.com/ksubrmnn)) [SIG Windows]
+- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
+  2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
+- Add a default metadata name labels for selecting any namespace by its name. ([#96968](https://github.com/kubernetes/kubernetes/pull/96968), [@jayunit100](https://github.com/jayunit100)) [SIG API Machinery, Apps, Cloud Provider, Storage and Testing]
+- Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed` ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- Clarified NetworkPolicy policyTypes documentation ([#97216](https://github.com/kubernetes/kubernetes/pull/97216), [@joejulian](https://github.com/joejulian)) [SIG Network]
+- DaemonSets accept a MaxSurge integer or percent on their rolling update strategy that will launch the updated pod on nodes and wait for those pods to go ready before marking the old out-of-date pods as deleted. This allows workloads to avoid downtime during upgrades when deployed using DaemonSets. This feature is alpha and is behind the DaemonSetUpdateSurge feature gate. ([#96441](https://github.com/kubernetes/kubernetes/pull/96441), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps and Testing]
+- EndpointSlice API is now GA. The EndpointSlice topology field has been removed from the GA API and will be replaced by a new per Endpoint Zone field. If the topology field was previously used, it will be converted into an annotation in the v1 Resource. The discovery.k8s.io/v1alpha1 API is removed. ([#99662](https://github.com/kubernetes/kubernetes/pull/99662), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network and Testing]
+- EndpointSlice Controllers are now GA. The EndpointSlice Controller will not populate the `deprecatedTopology` field and will only provide topology information through the `zone` and `nodeName` fields. ([#99870](https://github.com/kubernetes/kubernetes/pull/99870), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, Apps, Auth, Network and Testing]
+- IngressClass resource can now reference a resource in a specific namespace 
+  for implementation-specific configuration(previously only Cluster-level resources were allowed). 
+  This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi)) [SIG API Machinery, CLI and Network]
+- Introduce conditions for PodDisruptionBudget ([#98127](https://github.com/kubernetes/kubernetes/pull/98127), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Jobs API has a new .spec.suspend field that can be used to suspend and resume Jobs ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
+- Kubelet Graceful Node Shutdown feature is now beta. ([#99735](https://github.com/kubernetes/kubernetes/pull/99735), [@bobbypage](https://github.com/bobbypage)) [SIG Node]
+- Limit the quest value of hugepage to integer multiple of page size. ([#98515](https://github.com/kubernetes/kubernetes/pull/98515), [@lala123912](https://github.com/lala123912)) [SIG Apps]
+- One new field "InternalTrafficPolicy" in Service is added.
+  It specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only.
+  "Cluster" routes internal traffic to a Service to all endpoints.
+  "Local" routes traffic to node-local endpoints only, and traffic is dropped if no node-local endpoints are ready.
+  The default value is "Cluster". ([#96600](https://github.com/kubernetes/kubernetes/pull/96600), [@maplain](https://github.com/maplain)) [SIG API Machinery, Apps and Network]
+- PodSecurityPolicy only stores "generic" as allowed volume type if the GenericEphemeralVolume feature gate is enabled ([#98918](https://github.com/kubernetes/kubernetes/pull/98918), [@pohly](https://github.com/pohly)) [SIG Auth and Security]
+- Promote CronJobs to batch/v1 ([#99423](https://github.com/kubernetes/kubernetes/pull/99423), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+- Remove support for building Kubernetes with bazel. ([#99561](https://github.com/kubernetes/kubernetes/pull/99561), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Scheduling, Storage, Testing and Windows]
+- Setting loadBalancerClass in load balancer type of service is available with this PR. 
+  Users who want to use a custom load balancer can specify loadBalancerClass to achieve it. ([#98277](https://github.com/kubernetes/kubernetes/pull/98277), [@XudongLiuHarold](https://github.com/XudongLiuHarold)) [SIG API Machinery, Apps, Cloud Provider and Network]
+- Storage capacity tracking (= the CSIStorageCapacity feature) is beta, storage.k8s.io/v1alpha1/VolumeAttachment and storage.k8s.io/v1alpha1/CSIStorageCapacity objects are deprecated ([#99641](https://github.com/kubernetes/kubernetes/pull/99641), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, Scheduling, Storage and Testing]
+- Support for Indexed Job: a Job that is considered completed when Pods associated to indexes from 0 to (.spec.completions-1) have succeeded. ([#98812](https://github.com/kubernetes/kubernetes/pull/98812), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- The apiserver now resets managedFields that got corrupted by a mutating admission controller. ([#98074](https://github.com/kubernetes/kubernetes/pull/98074), [@kwiesmueller](https://github.com/kwiesmueller)) [SIG API Machinery and Testing]
+- `controller.kubernetes.io/pod-deletion-cost` annotation can be set to offer a hint on the cost of deleting a pod compared to other pods belonging to the same ReplicaSet. Pods with lower deletion cost are deleted first. This is an alpha feature. ([#99163](https://github.com/kubernetes/kubernetes/pull/99163), [@ahg-g](https://github.com/ahg-g)) [SIG Apps]
 
 ### Feature
 
-- ACTION REQUIRED : In CoreDNS v1.7.0, [metrics names have been changed](https://github.com/coredns/coredns/blob/master/notes/coredns-1.7.0.md&#35;metric-changes) which will be backward incompatible with existing reporting formulas that use the old metrics' names. Adjust your formulas to the new names before upgrading. 
-  
-  Kubeadm now includes CoreDNS version v1.7.0. Some of the major changes include:
-  -  Fixed a bug that could cause CoreDNS to stop updating service records.
-  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
-  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
-  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
-  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
-  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92651](https://github.com/kubernetes/kubernetes/pull/92651), [@rajansandeep](https://github.com/rajansandeep)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
-- Add metrics for azure service operations (route and loadbalancer). ([#94124](https://github.com/kubernetes/kubernetes/pull/94124), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider and Instrumentation]
-- Add network rule support in Azure account creation ([#94239](https://github.com/kubernetes/kubernetes/pull/94239), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Add tags support for Azure File Driver ([#92825](https://github.com/kubernetes/kubernetes/pull/92825), [@ZeroMagic](https://github.com/ZeroMagic)) [SIG Cloud Provider and Storage]
-- Added kube-apiserver metrics: apiserver_current_inflight_request_measures and, when API Priority and Fairness is enable, windowed_request_stats. ([#91177](https://github.com/kubernetes/kubernetes/pull/91177), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery, Instrumentation and Testing]
-- Audit events for API requests to deprecated API versions now include a `"k8s.io/deprecated": "true"` audit annotation. If a target removal release is identified, the audit event includes a `"k8s.io/removal-release": "<majorVersion>.<minorVersion>"` audit annotation as well. ([#92842](https://github.com/kubernetes/kubernetes/pull/92842), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Instrumentation]
-- Cloud node-controller use InstancesV2 ([#91319](https://github.com/kubernetes/kubernetes/pull/91319), [@gongguan](https://github.com/gongguan)) [SIG Apps, Cloud Provider, Scalability and Storage]
-- Kubeadm: Add a preflight check that the control-plane node has at least 1700MB of RAM ([#93275](https://github.com/kubernetes/kubernetes/pull/93275), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--cluster-name" flag to the "kubeadm alpha kubeconfig user" to allow configuring the cluster name in the generated kubeconfig file ([#93992](https://github.com/kubernetes/kubernetes/pull/93992), [@prabhu43](https://github.com/prabhu43)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--kubeconfig" flag to the "kubeadm init phase upload-certs" command to allow users to pass a custom location for a kubeconfig file. ([#94765](https://github.com/kubernetes/kubernetes/pull/94765), [@zhanw15](https://github.com/zhanw15)) [SIG Cluster Lifecycle]
-- Kubeadm: deprecate the "--csr-only" and "--csr-dir" flags of the "kubeadm init phase certs" subcommands. Please use "kubeadm alpha certs generate-csr" instead. This new command allows you to generate new private keys and certificate signing requests for all the control-plane components, so that the certificates can be signed by an external CA. ([#92183](https://github.com/kubernetes/kubernetes/pull/92183), [@wallrj](https://github.com/wallrj)) [SIG Cluster Lifecycle]
-- Kubeadm: make etcd pod request 100m CPU, 100Mi memory and 100Mi ephemeral_storage by default ([#94479](https://github.com/kubernetes/kubernetes/pull/94479), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubemark now supports both real and hollow nodes in a single cluster. ([#93201](https://github.com/kubernetes/kubernetes/pull/93201), [@ellistarn](https://github.com/ellistarn)) [SIG Scalability]
-- Kubernetes is now built using go1.15.2
-  - build: Update to k/repo-infra@v0.1.1 (supports go1.15.2)
-  - build: Use go-runner:buster-v2.0.1 (built using go1.15.1)
-  - bazel: Replace --features with Starlark build settings flag
-  - hack/lib/util.sh: some bash cleanups
-    
-    - switched one spot to use kube::logging
-    - make kube::util::find-binary return an error when it doesn't find
-      anything so that hack scripts fail fast instead of with '' binary not
-      found errors.
-    - this required deleting some genfeddoc stuff. the binary no longer
-      exists in k/k repo since we removed federation/, and I don't see it
-      in https://github.com/kubernetes-sigs/kubefed/ either. I'm assuming
-      that it's gone for good now.
-  
-  - bazel: output go_binary rule directly from go_binary_conditional_pure
-    
-    From: @mikedanese:
-    Instead of aliasing. Aliases are annoying in a number of ways. This is
-    specifically bugging me now because they make the action graph harder to
-    analyze programmatically. By using aliases here, we would need to handle
-    potentially aliased go_binary targets and dereference to the effective
-    target.
-  
-    The comment references an issue with `pure = select(...)` which appears
-    to be resolved considering this now builds.
-  
-  - make kube::util::find-binary not dependent on bazel-out/ structure
-  
-    Implement an aspect that outputs go_build_mode metadata for go binaries,
-    and use that during binary selection. ([#94449](https://github.com/kubernetes/kubernetes/pull/94449), [@justaugustus](https://github.com/justaugustus)) [SIG Architecture, CLI, Cluster Lifecycle, Node, Release and Testing]
-- Only update Azure data disks when attach/detach ([#94265](https://github.com/kubernetes/kubernetes/pull/94265), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Promote SupportNodePidsLimit to GA to provide node to pod pid isolation
-  Promote SupportPodPidsLimit to GA to provide ability to limit pids per pod ([#94140](https://github.com/kubernetes/kubernetes/pull/94140), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node and Testing]
-- Rename pod_preemption_metrics to preemption_metrics. ([#93256](https://github.com/kubernetes/kubernetes/pull/93256), [@ahg-g](https://github.com/ahg-g)) [SIG Instrumentation and Scheduling]
-- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](/docs/reference/using-api/server-side-apply/#transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
-- Set CSIMigrationvSphere feature gates to beta.
-  Users should enable CSIMigration + CSIMigrationvSphere features and install the vSphere CSI Driver (https://github.com/kubernetes-sigs/vsphere-csi-driver) to move workload from the in-tree vSphere plugin "kubernetes.io/vsphere-volume" to vSphere CSI Driver.
-  
-  Requires: vSphere vCenter/ESXi Version: 7.0u1, HW Version: VM version 15 ([#92816](https://github.com/kubernetes/kubernetes/pull/92816), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
-- Support [service.beta.kubernetes.io/azure-pip-ip-tags] annotations to allow customers to specify ip-tags to influence public-ip creation in Azure [Tag1=Value1, Tag2=Value2, etc.] ([#94114](https://github.com/kubernetes/kubernetes/pull/94114), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Support a smooth upgrade from client-side apply to server-side apply without conflicts, as well as support the corresponding downgrade. ([#90187](https://github.com/kubernetes/kubernetes/pull/90187), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery and Testing]
-- Trace output in apiserver logs is more organized and comprehensive. Traces are nested, and for all non-long running request endpoints, the entire filter chain is instrumented (e.g. authentication check is included). ([#88936](https://github.com/kubernetes/kubernetes/pull/88936), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Scheduling]
-- `kubectl alpha debug` now supports debugging nodes by creating a debugging container running in the node's host namespaces. ([#92310](https://github.com/kubernetes/kubernetes/pull/92310), [@verb](https://github.com/verb)) [SIG CLI]
+- A client-go metric, rest_client_exec_plugin_call_total, has been added to track total calls to client-go credential plugins. ([#98892](https://github.com/kubernetes/kubernetes/pull/98892), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation]
+- Add --use-protocol-buffers flag to kubectl top pods and nodes ([#96655](https://github.com/kubernetes/kubernetes/pull/96655), [@serathius](https://github.com/serathius)) [SIG CLI]
+- Add support to generate client-side binaries for new darwin/arm64 platform ([#97743](https://github.com/kubernetes/kubernetes/pull/97743), [@dims](https://github.com/dims)) [SIG Release and Testing]
+- Added `ephemeral_volume_controller_create[_failures]_total` counters to kube-controller-manager metrics ([#99115](https://github.com/kubernetes/kubernetes/pull/99115), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Storage]
+- Adds alpha feature `VolumeCapacityPriority` which makes the scheduler prioritize nodes based on the best matching size of statically provisioned PVs across multiple topologies. ([#96347](https://github.com/kubernetes/kubernetes/pull/96347), [@cofyc](https://github.com/cofyc)) [SIG Apps, Network, Scheduling, Storage and Testing]
+- Adds two new metrics to cronjobs, a  histogram to track the time difference when a job is created and the expected time when it should be created, and a gauge for the missed schedules of a cronjob ([#99341](https://github.com/kubernetes/kubernetes/pull/99341), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps and Instrumentation]
+- Alpha implementation of Kubectl Command Headers: SIG CLI KEP 859 enabled when KUBECTL_COMMAND_HEADERS environment variable set on the client command line.
+  - To enable: export KUBECTL_COMMAND_HEADERS=1; kubectl ... ([#98952](https://github.com/kubernetes/kubernetes/pull/98952), [@seans3](https://github.com/seans3)) [SIG API Machinery and CLI]
+- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99738](https://github.com/kubernetes/kubernetes/pull/99738), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- Disruption controller only sends one event per PodDisruptionBudget if scale can't be computed ([#98128](https://github.com/kubernetes/kubernetes/pull/98128), [@mortent](https://github.com/mortent)) [SIG Apps]
+- EndpointSliceNodeName will always be enabled, so NodeName will always be available in the v1beta1 API. ([#99746](https://github.com/kubernetes/kubernetes/pull/99746), [@swetharepakula](https://github.com/swetharepakula)) [SIG Apps and Network]
+- Graduate CRIContainerLogRotation feature gate to GA. ([#99651](https://github.com/kubernetes/kubernetes/pull/99651), [@umohnani8](https://github.com/umohnani8)) [SIG Node and Testing]
+- Kube-proxy iptables: new metric sync_proxy_rules_iptables_total that exposes the number of rules programmed per table in each iteration ([#99653](https://github.com/kubernetes/kubernetes/pull/99653), [@aojea](https://github.com/aojea)) [SIG Instrumentation and Network]
+- Kube-scheduler now logs plugin scoring summaries at --v=4 ([#99411](https://github.com/kubernetes/kubernetes/pull/99411), [@damemi](https://github.com/damemi)) [SIG Scheduling]
+- Kubeadm: a warning to user as ipv6 site-local is deprecated ([#99574](https://github.com/kubernetes/kubernetes/pull/99574), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle and Network]
+- Kubeadm: apply the "node.kubernetes.io/exclude-from-external-load-balancers" label on control plane nodes during "init", "join" and "upgrade" to preserve backwards compatibility with the lagacy LB mode where nodes labeled as "master" where excluded. To opt-out you can remove the label from a node. See #97543 and the linked KEP for more details. ([#98269](https://github.com/kubernetes/kubernetes/pull/98269), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: if the user has customized their image repository via the kubeadm configuration, pass the custom pause image repository and tag to the kubelet via --pod-infra-container-image not only for Docker but for all container runtimes. This flag tells the kubelet that it should not garbage collect the image. ([#99476](https://github.com/kubernetes/kubernetes/pull/99476), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: promote IPv6DualStack feature gate to Beta ([#99294](https://github.com/kubernetes/kubernetes/pull/99294), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubectl version changed to write a warning message to stderr if the client and server version difference exceeds the supported version skew of +/-1 minor version. ([#98250](https://github.com/kubernetes/kubernetes/pull/98250), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- Kubernetes is now built with Golang 1.16 ([#98572](https://github.com/kubernetes/kubernetes/pull/98572), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
+- Persistent Volumes formatted with the btrfs filesystem will now automatically resize when expanded. ([#99361](https://github.com/kubernetes/kubernetes/pull/99361), [@Novex](https://github.com/Novex)) [SIG Storage]
+- Remove cAdvisor json metrics api collected by Kubelet ([#99236](https://github.com/kubernetes/kubernetes/pull/99236), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
+- Sysctls is now GA and locked to default ([#99158](https://github.com/kubernetes/kubernetes/pull/99158), [@wgahnagl](https://github.com/wgahnagl)) [SIG Node]
+- The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
+- The endpointslice mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
+  The well-known annotation endpoints.kubernetes.io/last-change-trigger-time is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea)) [SIG Apps, Network and Testing]
+- Update the latest validated version of Docker to 20.10 ([#98977](https://github.com/kubernetes/kubernetes/pull/98977), [@neolit123](https://github.com/neolit123)) [SIG CLI, Cluster Lifecycle and Node]
+- Upgrade node local dns to 1.17.0 for better IPv6 support ([#99749](https://github.com/kubernetes/kubernetes/pull/99749), [@pacoxu](https://github.com/pacoxu)) [SIG Cloud Provider and Network]
+- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#99581](https://github.com/kubernetes/kubernetes/pull/99581), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
+- When downscaling ReplicaSets, ready and creation timestamps are compared in a logarithmic scale. ([#99212](https://github.com/kubernetes/kubernetes/pull/99212), [@damemi](https://github.com/damemi)) [SIG Apps and Testing]
+- When the kubelet is watching a ConfigMap or Secret purely in the context of setting environment variables
+  for containers, only hold that watch for a defined duration before cancelling it. This change reduces the CPU
+  and memory usage of the kube-apiserver in large clusters. ([#99393](https://github.com/kubernetes/kubernetes/pull/99393), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery, Node and Testing]
+- WindowsEndpointSliceProxying feature gate has graduated to beta and is enabled by default. This means kube-proxy will  read from EndpointSlices instead of Endpoints on Windows by default. ([#99794](https://github.com/kubernetes/kubernetes/pull/99794), [@robscott](https://github.com/robscott)) [SIG Network]
+
+### Bug or Regression
+
+- Creating a PVC with DataSource should fail for non-CSI plugins. ([#97086](https://github.com/kubernetes/kubernetes/pull/97086), [@xing-yang](https://github.com/xing-yang)) [SIG Apps and Storage]
+- EndpointSlice controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99345](https://github.com/kubernetes/kubernetes/pull/99345), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- EndpointSliceMirroring controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99756](https://github.com/kubernetes/kubernetes/pull/99756), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Fix --ignore-errors does not take effect if multiple logs are printed and unfollowed ([#97686](https://github.com/kubernetes/kubernetes/pull/97686), [@wzshiming](https://github.com/wzshiming)) [SIG CLI]
+- Fix bug that would let the Horizontal Pod Autoscaler scale down despite at least one metric being unavailable/invalid ([#99514](https://github.com/kubernetes/kubernetes/pull/99514), [@mikkeloscar](https://github.com/mikkeloscar)) [SIG Apps and Autoscaling]
+- Fix cgroup handling for systemd with cgroup v2 ([#98365](https://github.com/kubernetes/kubernetes/pull/98365), [@odinuge](https://github.com/odinuge)) [SIG Node]
+- Fix smb mount PermissionDenied issue on Windows ([#99550](https://github.com/kubernetes/kubernetes/pull/99550), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider, Storage and Windows]
+- Fixed a bug that causes smaller number of conntrack-max being used under CPU static policy. (#99225, @xh4n3) ([#99613](https://github.com/kubernetes/kubernetes/pull/99613), [@xh4n3](https://github.com/xh4n3)) [SIG Network]
+- Fixed bug that caused cAdvisor to incorrectly detect single-socket multi-NUMA topology. ([#99315](https://github.com/kubernetes/kubernetes/pull/99315), [@iwankgb](https://github.com/iwankgb)) [SIG Node]
+- Fixes add-on manager leader election ([#98968](https://github.com/kubernetes/kubernetes/pull/98968), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider]
+- Improved update time of pod statuses following new probe results. ([#98376](https://github.com/kubernetes/kubernetes/pull/98376), [@matthyx](https://github.com/matthyx)) [SIG Node and Testing]
+- Kube-apiserver: an update of a pod with a generic ephemeral volume dropped that volume if the feature had been disabled since creating the pod with such a volume ([#99446](https://github.com/kubernetes/kubernetes/pull/99446), [@pohly](https://github.com/pohly)) [SIG Apps, Node and Storage]
+- Kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false ([#98984](https://github.com/kubernetes/kubernetes/pull/98984), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- On single-stack configured (IPv4 or IPv6, but not both) clusters, Services which are both headless (no clusterIP) and selectorless (empty or undefined selector) will report `ipFamilyPolicy RequireDualStack` and will have entries in `ipFamilies[]` for both IPv4 and IPv6.  This is a change from alpha, but does not have any impact on the manually-specified Endpoints and EndpointSlices for the Service. ([#99555](https://github.com/kubernetes/kubernetes/pull/99555), [@thockin](https://github.com/thockin)) [SIG Apps and Network]
+- Resolves spurious `Failed to list *v1.Secret` or `Failed to list *v1.ConfigMap` messages in kubelet logs. ([#99538](https://github.com/kubernetes/kubernetes/pull/99538), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- Return zero time (midnight on Jan. 1, 1970) instead of negative number when reporting startedAt and finishedAt of the not started or a running Pod when using dockershim as a runtime. ([#99585](https://github.com/kubernetes/kubernetes/pull/99585), [@Iceber](https://github.com/Iceber)) [SIG Node]
+- Stdin is now only passed to client-go exec credential plugins when it is detected to be an interactive terminal. Previously, it was passed to client-go exec plugins when **stdout*- was detected to be an interactive terminal. ([#99654](https://github.com/kubernetes/kubernetes/pull/99654), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
+- The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 ([#99795](https://github.com/kubernetes/kubernetes/pull/99795), [@robscott](https://github.com/robscott)) [SIG Network]
+- Updates the commands 
+   - kubectl kustomize {arg}
+   - kubectl apply -k {arg}
+  to use same code as kustomize CLI v4.0.5
+   - [v4.0.5]: https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.0.5 ([#98946](https://github.com/kubernetes/kubernetes/pull/98946), [@monopole](https://github.com/monopole)) [SIG API Machinery, Architecture, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Storage]
+- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
+  "primary IP family" of the cluster by picking a primary pod IP of the same family
+  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
+  in the order the administrator wanted (since some CNI plugins don't allow
+  configuring this). ([#97979](https://github.com/kubernetes/kubernetes/pull/97979), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
+- When using Containerd on Windows, the "C:\Windows\System32\drivers\etc\hosts" file will now be managed by kubelet. ([#83730](https://github.com/kubernetes/kubernetes/pull/83730), [@claudiubelu](https://github.com/claudiubelu)) [SIG Node and Windows]
+- `VolumeBindingArgs` now allow `BindTimeoutSeconds` to be set as zero, while the value zero indicates no waiting for the checking of volume binding operation. ([#99835](https://github.com/kubernetes/kubernetes/pull/99835), [@chendave](https://github.com/chendave)) [SIG Scheduling and Storage]
+- `kubectl exec` and `kubectl attach` now honor the `--quiet` flag which suppresses output from the local binary that could be confused by a script with the remote command output (all non-failure output is hidden). In addition, print inline with exec and attach the list of alternate containers when we default to the first spec.container. ([#99004](https://github.com/kubernetes/kubernetes/pull/99004), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
+
+### Other (Cleanup or Flake)
+
+- Apiserver_request_duration_seconds is promoted to stable status. ([#99925](https://github.com/kubernetes/kubernetes/pull/99925), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
+- Apiserver_request_total is promoted to stable status and no longer has a content-type dimensions, so any alerts/charts which presume the existence of this will fail. This is however, unlikely to be the case since it was effectively an unbounded dimension in the first place. ([#99788](https://github.com/kubernetes/kubernetes/pull/99788), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
+- EndpointSlice generation is now incremented when labels change. ([#99750](https://github.com/kubernetes/kubernetes/pull/99750), [@robscott](https://github.com/robscott)) [SIG Network]
+- Featuregate AllowInsecureBackendProxy is promoted to GA ([#99658](https://github.com/kubernetes/kubernetes/pull/99658), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
+- Migrate `pkg/kubelet/(eviction)` to structured logging ([#99032](https://github.com/kubernetes/kubernetes/pull/99032), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate deployment controller log messages to structured logging ([#97507](https://github.com/kubernetes/kubernetes/pull/97507), [@aldudko](https://github.com/aldudko)) [SIG Apps]
+- Migrate pkg/kubelet/cloudresource to structured logging ([#98999](https://github.com/kubernetes/kubernetes/pull/98999), [@sladyn98](https://github.com/sladyn98)) [SIG Node]
+- Migrate pkg/kubelet/cri/remote logs to structured logging ([#98589](https://github.com/kubernetes/kubernetes/pull/98589), [@chenyw1990](https://github.com/chenyw1990)) [SIG Node]
+- Migrate pkg/kubelet/kuberuntime/kuberuntime_container.go logs to structured logging ([#96973](https://github.com/kubernetes/kubernetes/pull/96973), [@chenyw1990](https://github.com/chenyw1990)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/status to structured logging ([#99836](https://github.com/kubernetes/kubernetes/pull/99836), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/token to structured logging ([#99264](https://github.com/kubernetes/kubernetes/pull/99264), [@palnabarun](https://github.com/palnabarun)) [SIG Auth, Instrumentation and Node]
+- Migrate pkg/kubelet/util to structured logging ([#99823](https://github.com/kubernetes/kubernetes/pull/99823), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
+- Migrate proxy/userspace/proxier.go logs to structured logging ([#97837](https://github.com/kubernetes/kubernetes/pull/97837), [@JornShen](https://github.com/JornShen)) [SIG Network]
+- Migrate some kubelet/metrics log messages to structured logging ([#98627](https://github.com/kubernetes/kubernetes/pull/98627), [@jialaijun](https://github.com/jialaijun)) [SIG Instrumentation and Node]
+- Process start time on Windows now uses current process information ([#97491](https://github.com/kubernetes/kubernetes/pull/97491), [@jsturtevant](https://github.com/jsturtevant)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Windows]
+
+### Uncategorized
+
+- Migrate pkg/kubelet/stats to structured logging ([#99607](https://github.com/kubernetes/kubernetes/pull/99607), [@krzysiekg](https://github.com/krzysiekg)) [SIG Node]
+- The DownwardAPIHugePages feature is beta.  Users may use the feature if all workers in their cluster are min 1.20 version.  The feature will be enabled by default in all installations in 1.22. ([#99610](https://github.com/kubernetes/kubernetes/pull/99610), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
+
+## Dependencies
+
+### Added
+- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
+- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
+- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
+- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
+- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
+- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
+- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
+- go.starlark.net: 8dd3e2e
+- golang.org/x/term: 6a3ed07
+- sigs.k8s.io/kustomize/api: v0.8.5
+- sigs.k8s.io/kustomize/cmd/config: v0.9.7
+- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
+- sigs.k8s.io/kustomize/kyaml: v0.10.15
+
+### Changed
+- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
+- github.com/creack/pty: [v1.1.7 → v1.1.9](https://github.com/creack/pty/compare/v1.1.7...v1.1.9)
+- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
+- github.com/google/cadvisor: [v0.38.7 → v0.38.8](https://github.com/google/cadvisor/compare/v0.38.7...v0.38.8)
+- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
+- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
+- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
+- golang.org/x/crypto: 7f63de1 → 5ea612d
+- golang.org/x/exp: 6cc2880 → 85be41e
+- golang.org/x/mobile: d2bd2a2 → e6ae53a
+- golang.org/x/mod: v0.3.0 → ce943fd
+- golang.org/x/net: 69a7880 → 3d97a24
+- golang.org/x/sys: 5cba982 → a50acf3
+- golang.org/x/time: 3af7569 → f8bda1e
+- golang.org/x/tools: 113979e → v0.1.0
+- gopkg.in/check.v1: 41f04d3 → 8fa4692
+- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
+- k8s.io/kube-openapi: d219536 → 591a79e
+- k8s.io/system-validators: v1.3.0 → v1.4.0
+
+### Removed
+- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
+- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
+- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
+- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
+- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
+- sigs.k8s.io/kustomize: v2.0.3+incompatible
+
+
+
+# v1.21.0-beta.0
+
+
+## Downloads for v1.21.0-beta.0
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes.tar.gz) | 69b73a03b70b0ed006e9fef3f5b9bc68f0eb8dc40db6cc04777c03a2cb83a008c783012ca186b1c48357fb192403dbcf6960f120924785e2076e215b9012d546
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-src.tar.gz) | 9620fb6d37634271bdd423c09f33f3bd29e74298aa82c47dffc8cb6bd2ff44fa8987a53c53bc529db4ca96ec41503aa81cc8d0c3ac106f3b06c4720de933a8e6
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-darwin-amd64.tar.gz) | 2a6f3fcd6b571f5ccde56b91e6e179a01899244be496dae16a2a16e0405c9437b75c6dc853b56f9a4876a7c0a60ec624ccd28400bf8fb960258263172f6860ba
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-386.tar.gz) | 78fe9ad9f9a9bc043293327223f0038a2c087ca65e87187a6dcae7a24aef9565fe498d295a4639b0b90524469a04930022fcecd815d0afc742eb87ddd8eb7ef5
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-amd64.tar.gz) | c025f5e5bd132355e7dd1296cf2ec752264e7f754c4d95fc34b076bd75bef2f571d30872bcb3d138ce95c592111353d275a80eb31f82c07000874b4c56282dbd
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-arm.tar.gz) | 9975cd2f08fbc202575fb15ba6fc51dab23155ca4d294ebb48516a81efa51f58bab3a87d41c865103756189b554c020371d729ad42880ba788f25047ffc46910
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-arm64.tar.gz) | 56a6836e24471e42e9d9a8488453f2d55598d70c8aca0a307d5116139c930c25c469fd0d1ab5060fbe88dad75a9b5209a08dc11d644af5f3ebebfbcb6c16266c
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-ppc64le.tar.gz) | b6a6cc9baad0ad85ed079ee80e6d6acc905095cfb440998bbc0f553b94fa80077bd58b8692754de477517663d51161705e6e89a1b6d04aa74819800db3517722
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-s390x.tar.gz) | 7b743481b340f510bf9ae28ea8ea91150aa1e8c37fe104b66d7b3aff62f5e6db3c590d2c13d14dbb5c928de31c7613372def2496075853611d10d6b5fa5b60bd
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-windows-386.tar.gz) | df06c7a524ce84c1f8d7836aa960c550c88dbca0ec4854df4dd0a85b3c84b8ecbc41b54e8c4669ce28ac670659ff0fad795deb1bc539f3c3b3aa885381265f5a
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-windows-amd64.tar.gz) | 4568497b684564f2a94fbea6cbfd778b891231470d9a6956c3b7a3268643d13b855c0fc5ebea5f769300cc0c7719c2c331c387f468816f182f63e515adeaa7a0
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-amd64.tar.gz) | 42883cca2d312153baf693fc6024a295359a421e74fd70eefc927413be4e0353debe634e7cca6b9a8f7d8a0cee3717e03ba5d29a306e93139b1c2f3027535a6d
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-arm.tar.gz) | e0042215e84c769ba4fc4d159ccf67b2c4a26206bfffb0ec5152723dc813ff9c1426aa0e9b963d7bfa2efb266ca43561b596b459152882ebb42102ccf60bd8eb
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-arm64.tar.gz) | bfad29d43e14152cb9bc7c4df6aa77929c6eca64a294bb832215bdba9fa0ee2195a2b709c0267dc7426bb371b547ee80bb8461a8c678c9bffa0819aa7db96289
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-ppc64le.tar.gz) | ca67674c01c6cebdc8160c85b449eab1a23bb0557418665246e0208543fa2eaaf97679685c7b49bee3a4300904c0399c3d762ae34dc3e279fd69ce792c4b07ff
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-s390x.tar.gz) | 285352b628ec754b01b8ad4ef1427223a142d58ebcb46f6861df14d68643133b32330460b213b1ba5bc5362ff2b6dacd8e0c2d20cce6e760fa1954af8a60df8b
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-amd64.tar.gz) | d92d9b30e7e44134a0cd9db4c01924d365991ea16b3131200b02a82cff89c8701f618cd90e7f1c65427bd4bb5f78b10d540b2262de2c143b401fa44e5b25627b
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-arm.tar.gz) | 551092f23c27fdea4bb2d0547f6075892534892a96fc2be7786f82b58c93bffdb5e1c20f8f11beb8bed46c24f36d4c18ec5ac9755435489efa28e6ae775739bd
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-arm64.tar.gz) | 26ae7f4163e527349b8818ee38b9ee062314ab417f307afa49c146df8f5a2bd689509b128bd4a1efd3896fd89571149a9955ada91f8ca0c2f599cd863d613c86
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-ppc64le.tar.gz) | 821fa953f6cebc69d2d481e489f3e90899813d20e2eefbabbcadd019d004108e7540f741fabe60e8e7c6adbb1053ac97898bbdddec3ca19f34a71aa3312e0d4e
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-s390x.tar.gz) | 22197d4f66205d5aa9de83dfddcc4f2bb3195fd7067cdb5c21e61dbeae217bc112fb7ecff8a539579b60ad92298c2b4c87b9b7c7e6ec1ee1ffa0c6e4bc4412c1
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-windows-amd64.tar.gz) | 7e22e0d9603562a04dee16a513579f06b1ff6354d97d669bd68f8777ec7f89f6ef027fb23ab0445d7bba0bb689352f0cc748ce90e3f597c6ebe495464a96b860
+
+## Changelog since v1.21.0-alpha.3
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - The metric `storage_operation_errors_total` is not removed, but is marked deprecated, and the metric `storage_operation_status_count` is marked deprecated. In both cases the storage_operation_duration_seconds metric can be used to recover equivalent counts (using `status=fail-unknown` in the case of `storage_operations_errors_total`). ([#99045](https://github.com/kubernetes/kubernetes/pull/99045), [@mattcary](https://github.com/mattcary)) [SIG Instrumentation and Storage]
+ 
+## Changes by Kind
+
+### Deprecation
+
+- The `batch/v2alpha1` CronJob type definitions and clients are deprecated and removed. ([#96987](https://github.com/kubernetes/kubernetes/pull/96987), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+
+### API Change
+
+- Cluster admins can now turn off /debug/pprof and /debug/flags/v endpoint in kubelet by setting enableProfilingHandler and enableDebugFlagsHandler to false in their kubelet configuration file. enableProfilingHandler and enableDebugFlagsHandler can be set to true only when enableDebuggingHandlers is also set to true. ([#98458](https://github.com/kubernetes/kubernetes/pull/98458), [@SaranBalaji90](https://github.com/SaranBalaji90)) [SIG Node]
+- The BoundServiceAccountTokenVolume feature has been promoted to beta, and enabled by default.
+  - This changes the tokens provided to containers at `/var/run/secrets/kubernetes.io/serviceaccount/token` to be time-limited, auto-refreshed, and invalidated when the containing pod is deleted.
+  - Clients should reload the token from disk periodically (once per minute is recommended) to ensure they continue to use a valid token. `k8s.io/client-go` version v11.0.0+ and v0.15.0+ reload tokens automatically.
+  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be shortened to 1 hour by starting `kube-apiserver` with `--service-account-extend-token-expiration=false`. ([#95667](https://github.com/kubernetes/kubernetes/pull/95667), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle and Testing]
+
+### Feature
+
+- A new histogram metric to track the time it took to delete a job by the ttl-after-finished controller ([#98676](https://github.com/kubernetes/kubernetes/pull/98676), [@ahg-g](https://github.com/ahg-g)) [SIG Apps and Instrumentation]
+- AWS cloudprovider supports auto-discovering subnets without any kubernetes.io/cluster/<clusterName> tags. It also supports additional service annotation service.beta.kubernetes.io/aws-load-balancer-subnets to manually configure the subnets. ([#97431](https://github.com/kubernetes/kubernetes/pull/97431), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
+- Add --permit-address-sharing flag to kube-apiserver to listen with SO_REUSEADDR. While allowing to listen on wildcard IPs like 0.0.0.0 and specific IPs in parallel, it avoid waiting for the kernel to release socket in TIME_WAIT state, and hence, considably reducing kube-apiserver restart times under certain conditions. ([#93861](https://github.com/kubernetes/kubernetes/pull/93861), [@sttts](https://github.com/sttts)) [SIG API Machinery]
+- Add `csi_operations_seconds` metric on kubelet that exposes CSI operations duration and status for node CSI operations. ([#98979](https://github.com/kubernetes/kubernetes/pull/98979), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Instrumentation and Storage]
+- Add `migrated` field into `storage_operation_duration_seconds` metric ([#99050](https://github.com/kubernetes/kubernetes/pull/99050), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Instrumentation and Storage]
+- Add bash-completion for comma separated list on `kubectl get` ([#98301](https://github.com/kubernetes/kubernetes/pull/98301), [@phil9909](https://github.com/phil9909)) [SIG CLI]
+- Added support for installing arm64 node artifacts. ([#99242](https://github.com/kubernetes/kubernetes/pull/99242), [@liu-cong](https://github.com/liu-cong)) [SIG Cloud Provider]
+- Feature gate RootCAConfigMap is graduated to GA in 1.21 and will be removed in 1.22. ([#98033](https://github.com/kubernetes/kubernetes/pull/98033), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Auth]
+- Kubeadm: during "init" and "join" perform preflight validation on the host / node name and throw warnings if a name is not compliant ([#99194](https://github.com/kubernetes/kubernetes/pull/99194), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubectl: `kubectl get` will omit managed fields by default now. Users could set `--show-managed-fields` to true to show managedFields when the output format is either `json` or `yaml`. ([#96878](https://github.com/kubernetes/kubernetes/pull/96878), [@knight42](https://github.com/knight42)) [SIG CLI and Testing]
+- Metrics can now be disabled explicitly via a command line flag (i.e. '--disabled-metrics=bad_metric1,bad_metric2') ([#99217](https://github.com/kubernetes/kubernetes/pull/99217), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- TTLAfterFinished is now beta and enabled by default ([#98678](https://github.com/kubernetes/kubernetes/pull/98678), [@ahg-g](https://github.com/ahg-g)) [SIG Apps and Auth]
+- The `RunAsGroup` feature has been promoted to GA in this release. ([#94641](https://github.com/kubernetes/kubernetes/pull/94641), [@krmayankk](https://github.com/krmayankk)) [SIG Auth and Node]
+- Turn CronJobControllerV2 on by default. ([#98878](https://github.com/kubernetes/kubernetes/pull/98878), [@soltysh](https://github.com/soltysh)) [SIG Apps]
+- UDP protocol support for Agnhost connect subcommand ([#98639](https://github.com/kubernetes/kubernetes/pull/98639), [@knabben](https://github.com/knabben)) [SIG Testing]
+- Upgrades `IPv6Dualstack` to `Beta` and turns it on by default. Clusters new and existing will not be affected until user starting adding secondary pod and service cidrs cli flags as described here: https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/563-dual-stack ([#98969](https://github.com/kubernetes/kubernetes/pull/98969), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, Cloud Provider, Network and Node]
 
 ### Documentation
 
-- Kubelet: remove alpha warnings for CNI flags. ([#94508](https://github.com/kubernetes/kubernetes/pull/94508), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network and Node]
+- Fix ALPHA stability level reference link ([#98641](https://github.com/kubernetes/kubernetes/pull/98641), [@Jeffwan](https://github.com/Jeffwan)) [SIG Auth, Cloud Provider, Instrumentation and Storage]
 
 ### Failing Test
 
-- Kube-proxy iptables min-sync-period defaults to 1 sec. Previously, it was 0. ([#92836](https://github.com/kubernetes/kubernetes/pull/92836), [@aojea](https://github.com/aojea)) [SIG Network]
+- Escape the special characters like `[`, `]` and ` ` that exist in vsphere windows path ([#98830](https://github.com/kubernetes/kubernetes/pull/98830), [@liyanhui1228](https://github.com/liyanhui1228)) [SIG Storage and Windows]
+- Kube-proxy: fix a bug on UDP NodePort Services where stale conntrack entries may blackhole the traffic directed to the NodePort. ([#98305](https://github.com/kubernetes/kubernetes/pull/98305), [@aojea](https://github.com/aojea)) [SIG Network]
 
 ### Bug or Regression
 
-- A panic in the apiserver caused by the `informer-sync` health checker is now fixed. ([#93600](https://github.com/kubernetes/kubernetes/pull/93600), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery]
-- Add kubectl wait  --ignore-not-found flag ([#90969](https://github.com/kubernetes/kubernetes/pull/90969), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Adding fix to the statefulset controller to wait for pvc deletion before creating pods. ([#93457](https://github.com/kubernetes/kubernetes/pull/93457), [@ymmt2005](https://github.com/ymmt2005)) [SIG Apps]
-- Azure ARM client: don't segfault on empty response and http error ([#94078](https://github.com/kubernetes/kubernetes/pull/94078), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- Azure: fix a bug that kube-controller-manager would panic if wrong Azure VMSS name is configured ([#94306](https://github.com/kubernetes/kubernetes/pull/94306), [@knight42](https://github.com/knight42)) [SIG Cloud Provider]
-- Azure: per VMSS VMSS VMs cache to prevent throttling on clusters having many attached VMSS ([#93107](https://github.com/kubernetes/kubernetes/pull/93107), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- Both apiserver_request_duration_seconds metrics and RequestReceivedTimestamp field of an audit event take 
-  into account the time a request spends in the apiserver request filters. ([#94903](https://github.com/kubernetes/kubernetes/pull/94903), [@tkashem](https://github.com/tkashem)) [SIG API Machinery, Auth and Instrumentation]
-- Build/lib/release: Explicitly use '--platform' in building server images
-  
-  When we switched to go-runner for building the apiserver,
-  controller-manager, and scheduler server components, we no longer
-  reference the individual architectures in the image names, specifically
-  in the 'FROM' directive of the server image Dockerfiles.
-  
-  As a result, server images for non-amd64 images copy in the go-runner
-  amd64 binary instead of the go-runner that matches that architecture.
-  
-  This commit explicitly sets the '--platform=linux/${arch}' to ensure
-  we're pulling the correct go-runner arch from the manifest list.
-  
-  Before:
-  `FROM ${base_image}`
-  
-  After:
-  `FROM --platform=linux/${arch} ${base_image}` ([#94552](https://github.com/kubernetes/kubernetes/pull/94552), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
-- CSIDriver object can be deployed during volume attachment. ([#93710](https://github.com/kubernetes/kubernetes/pull/93710), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Node, Storage and Testing]
-- CVE-2020-8557 (Medium): Node-local denial of service via container /etc/hosts file. See https://github.com/kubernetes/kubernetes/issues/93032 for more details. ([#92916](https://github.com/kubernetes/kubernetes/pull/92916), [@joelsmith](https://github.com/joelsmith)) [SIG Node]
-- Do not add nodes labeled with kubernetes.azure.com/managed=false to backend pool of load balancer. ([#93034](https://github.com/kubernetes/kubernetes/pull/93034), [@matthias50](https://github.com/matthias50)) [SIG Cloud Provider]
-- Do not fail sorting empty elements. ([#94666](https://github.com/kubernetes/kubernetes/pull/94666), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Do not retry volume expansion if CSI driver returns FailedPrecondition error ([#92986](https://github.com/kubernetes/kubernetes/pull/92986), [@gnufied](https://github.com/gnufied)) [SIG Node and Storage]
-- Dockershim security: pod sandbox now always run with `no-new-privileges` and `runtime/default` seccomp profile
-  dockershim seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90948](https://github.com/kubernetes/kubernetes/pull/90948), [@pjbgf](https://github.com/pjbgf)) [SIG Node]
-- Dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default ([#90439](https://github.com/kubernetes/kubernetes/pull/90439), [@SataQiu](https://github.com/SataQiu)) [SIG API Machinery]
-- Endpoint controller requeues service after an endpoint deletion event occurs to confirm that deleted endpoints are undesired to mitigate the effects of an out of sync endpoint cache. ([#93030](https://github.com/kubernetes/kubernetes/pull/93030), [@swetharepakula](https://github.com/swetharepakula)) [SIG Apps and Network]
-- EndpointSlice controllers now return immediately if they encounter an error creating, updating, or deleting resources. ([#93908](https://github.com/kubernetes/kubernetes/pull/93908), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- EndpointSliceMirroring controller now copies labels from Endpoints to EndpointSlices. ([#93442](https://github.com/kubernetes/kubernetes/pull/93442), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- EndpointSliceMirroring controller now mirrors Endpoints that do not have a Service associated with them. ([#94171](https://github.com/kubernetes/kubernetes/pull/94171), [@robscott](https://github.com/robscott)) [SIG Apps, Network and Testing]
-- Ensure backoff step is set to 1 for Azure armclient. ([#94180](https://github.com/kubernetes/kubernetes/pull/94180), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null ([#94355](https://github.com/kubernetes/kubernetes/pull/94355), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Eviction requests for pods that have a non-zero DeletionTimestamp will always succeed ([#91342](https://github.com/kubernetes/kubernetes/pull/91342), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
-- Extended DSR loadbalancer feature in winkernel kube-proxy to HNS versions 9.3-9.max, 10.2+ ([#93080](https://github.com/kubernetes/kubernetes/pull/93080), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
-- Fix HandleCrash order ([#93108](https://github.com/kubernetes/kubernetes/pull/93108), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG API Machinery]
-- Fix a concurrent map writes error in kubelet ([#93773](https://github.com/kubernetes/kubernetes/pull/93773), [@knight42](https://github.com/knight42)) [SIG Node]
-- Fix a regression where kubeadm bails out with a fatal error when an optional version command line argument is supplied to the "kubeadm upgrade plan" command ([#94421](https://github.com/kubernetes/kubernetes/pull/94421), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Fix azure file migration panic ([#94853](https://github.com/kubernetes/kubernetes/pull/94853), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix bug where loadbalancer deletion gets stuck because of missing resource group &#35;75198 ([#93962](https://github.com/kubernetes/kubernetes/pull/93962), [@phiphi282](https://github.com/phiphi282)) [SIG Cloud Provider]
-- Fix calling AttachDisk on a previously attached EBS volume ([#93567](https://github.com/kubernetes/kubernetes/pull/93567), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider, Storage and Testing]
-- Fix detection of image filesystem, disk metrics for devicemapper, detection of OOM Kills on 5.0+ linux kernels. ([#92919](https://github.com/kubernetes/kubernetes/pull/92919), [@dashpole](https://github.com/dashpole)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- Fix etcd_object_counts metric reported by kube-apiserver ([#94773](https://github.com/kubernetes/kubernetes/pull/94773), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- Fix incorrectly reported verbs for kube-apiserver metrics for CRD objects ([#93523](https://github.com/kubernetes/kubernetes/pull/93523), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- Fix instance not found issues when an Azure Node is recreated in a short time ([#93316](https://github.com/kubernetes/kubernetes/pull/93316), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix kube-apiserver /readyz to contain "informer-sync" check ensuring that internal informers are synced. ([#93670](https://github.com/kubernetes/kubernetes/pull/93670), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Fix kubectl SchemaError on CRDs with schema using x-kubernetes-preserve-unknown-fields on array types. ([#94888](https://github.com/kubernetes/kubernetes/pull/94888), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Fix memory leak in EndpointSliceTracker for EndpointSliceMirroring controller. ([#93441](https://github.com/kubernetes/kubernetes/pull/93441), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Fix missing csi annotations on node during parallel csinode update. ([#94389](https://github.com/kubernetes/kubernetes/pull/94389), [@pacoxu](https://github.com/pacoxu)) [SIG Storage]
-- Fix the `cloudprovider_azure_api_request_duration_seconds` metric buckets to correctly capture the latency metrics. Previously, the majority of the calls would fall in the "+Inf" bucket. ([#94873](https://github.com/kubernetes/kubernetes/pull/94873), [@marwanad](https://github.com/marwanad)) [SIG Cloud Provider and Instrumentation]
-- Fix: azure disk resize error if source does not exist ([#93011](https://github.com/kubernetes/kubernetes/pull/93011), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: detach azure disk broken on Azure Stack ([#94885](https://github.com/kubernetes/kubernetes/pull/94885), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: determine the correct ip config based on ip family ([#93043](https://github.com/kubernetes/kubernetes/pull/93043), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
-- Fix: initial delay in mounting azure disk & file ([#93052](https://github.com/kubernetes/kubernetes/pull/93052), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: use sensitiveOptions on Windows mount ([#94126](https://github.com/kubernetes/kubernetes/pull/94126), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fixed Ceph RBD volume expansion when no ceph.conf exists ([#92027](https://github.com/kubernetes/kubernetes/pull/92027), [@juliantaylor](https://github.com/juliantaylor)) [SIG Storage]
-- Fixed a bug where improper storage and comparison of endpoints led to excessive API traffic from the endpoints controller ([#94112](https://github.com/kubernetes/kubernetes/pull/94112), [@damemi](https://github.com/damemi)) [SIG Apps, Network and Testing]
-- Fixed a bug whereby the allocation of reusable CPUs and devices was not being honored when the TopologyManager was enabled ([#93189](https://github.com/kubernetes/kubernetes/pull/93189), [@klueska](https://github.com/klueska)) [SIG Node]
-- Fixed a panic in kubectl debug when pod has multiple init containers or ephemeral containers ([#94580](https://github.com/kubernetes/kubernetes/pull/94580), [@kiyoshim55](https://github.com/kiyoshim55)) [SIG CLI]
-- Fixed a regression that sometimes prevented `kubectl portforward` to work when TCP and UDP services were configured on the same port ([#94728](https://github.com/kubernetes/kubernetes/pull/94728), [@amorenoz](https://github.com/amorenoz)) [SIG CLI]
-- Fixed bug in reflector that couldn't recover from "Too large resource version" errors with API servers 1.17.0-1.18.5 ([#94316](https://github.com/kubernetes/kubernetes/pull/94316), [@janeczku](https://github.com/janeczku)) [SIG API Machinery]
-- Fixed bug where kubectl top pod output is not sorted when --sort-by and --containers flags are used together ([#93692](https://github.com/kubernetes/kubernetes/pull/93692), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Fixed kubelet creating extra sandbox for pods with RestartPolicyOnFailure after all containers succeeded ([#92614](https://github.com/kubernetes/kubernetes/pull/92614), [@tnqn](https://github.com/tnqn)) [SIG Node and Testing]
-- Fixed memory leak in endpointSliceTracker ([#92838](https://github.com/kubernetes/kubernetes/pull/92838), [@tnqn](https://github.com/tnqn)) [SIG Apps and Network]
-- Fixed node data lost in kube-scheduler for clusters with imbalance on number of nodes across zones ([#93355](https://github.com/kubernetes/kubernetes/pull/93355), [@maelk](https://github.com/maelk)) [SIG Scheduling]
-- Fixed the EndpointSliceController to correctly create endpoints for IPv6-only pods.
-  
-  Fixed the EndpointController to allow IPv6 headless services, if the IPv6DualStack
-  feature gate is enabled, by specifying `ipFamily: IPv6` on the service. (This already
-  worked with the EndpointSliceController.) ([#91399](https://github.com/kubernetes/kubernetes/pull/91399), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
-- Fixes a bug evicting pods after a taint with a limited tolerationSeconds toleration is removed from a node ([#93722](https://github.com/kubernetes/kubernetes/pull/93722), [@liggitt](https://github.com/liggitt)) [SIG Apps and Node]
-- Fixes a bug where EndpointSlices would not be recreated after rapid Service recreation. ([#94730](https://github.com/kubernetes/kubernetes/pull/94730), [@robscott](https://github.com/robscott)) [SIG Apps, Network and Testing]
-- Fixes a race condition in kubelet pod handling ([#94751](https://github.com/kubernetes/kubernetes/pull/94751), [@auxten](https://github.com/auxten)) [SIG Node]
-- Fixes an issue proxying to ipv6 pods without specifying a port ([#94834](https://github.com/kubernetes/kubernetes/pull/94834), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Network]
-- Fixes an issue that can result in namespaced custom resources being orphaned when their namespace is deleted, if the CRD defining the custom resource is removed concurrently with namespaces being deleted, then recreated. ([#93790](https://github.com/kubernetes/kubernetes/pull/93790), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
-- Ignore root user check when windows pod starts ([#92355](https://github.com/kubernetes/kubernetes/pull/92355), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Increased maximum IOPS of AWS EBS io1 volumes to 64,000 (current AWS maximum). ([#90014](https://github.com/kubernetes/kubernetes/pull/90014), [@jacobmarble](https://github.com/jacobmarble)) [SIG Cloud Provider and Storage]
-- K8s.io/apimachinery: runtime.DefaultUnstructuredConverter.FromUnstructured now handles converting integer fields to typed float values ([#93250](https://github.com/kubernetes/kubernetes/pull/93250), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- Kube-aggregator certificates are dynamically loaded on change from disk ([#92791](https://github.com/kubernetes/kubernetes/pull/92791), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
-- Kube-apiserver: fixed a bug returning inconsistent results from list requests which set a field or label selector and set a paging limit ([#94002](https://github.com/kubernetes/kubernetes/pull/94002), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
-- Kube-apiserver: jsonpath expressions with consecutive recursive descent operators are no longer evaluated for custom resource printer columns ([#93408](https://github.com/kubernetes/kubernetes/pull/93408), [@joelsmith](https://github.com/joelsmith)) [SIG API Machinery]
-- Kube-proxy now trims extra spaces found in loadBalancerSourceRanges to match Service validation. ([#94107](https://github.com/kubernetes/kubernetes/pull/94107), [@robscott](https://github.com/robscott)) [SIG Network]
-- Kube-up now includes CoreDNS version v1.7.0. Some of the major changes include:
-  -  Fixed a bug that could cause CoreDNS to stop updating service records.
-  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
-  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
-  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
-  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
-  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92718](https://github.com/kubernetes/kubernetes/pull/92718), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cloud Provider]
-- Kubeadm now makes sure the etcd manifest is regenerated upon upgrade even when no etcd version change takes place ([#94395](https://github.com/kubernetes/kubernetes/pull/94395), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Kubeadm: avoid a panic when determining if the running version of CoreDNS is supported during upgrades ([#94299](https://github.com/kubernetes/kubernetes/pull/94299), [@zouyee](https://github.com/zouyee)) [SIG Cluster Lifecycle]
-- Kubeadm: ensure "kubeadm reset" does not unmount the root "/var/lib/kubelet" directory if it is mounted by the user ([#93702](https://github.com/kubernetes/kubernetes/pull/93702), [@thtanaka](https://github.com/thtanaka)) [SIG Cluster Lifecycle]
-- Kubeadm: ensure the etcd data directory is created with 0700 permissions during control-plane init and join ([#94102](https://github.com/kubernetes/kubernetes/pull/94102), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR ([#94555](https://github.com/kubernetes/kubernetes/pull/94555), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: make the kubeconfig files for the kube-controller-manager and kube-scheduler use the LocalAPIEndpoint instead of the ControlPlaneEndpoint. This makes kubeadm clusters more reseliant to version skew problems during immutable upgrades: https://kubernetes.io/docs/setup/release/version-skew-policy/#kube-controller-manager-kube-scheduler-and-cloud-controller-manager ([#94398](https://github.com/kubernetes/kubernetes/pull/94398), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: relax the validation of kubeconfig server URLs. Allow the user to define custom kubeconfig server URLs without erroring out during validation of existing kubeconfig files (e.g. when using external CA mode). ([#94816](https://github.com/kubernetes/kubernetes/pull/94816), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove duplicate DNS names and IP addresses from generated certificates ([#92753](https://github.com/kubernetes/kubernetes/pull/92753), [@QianChenglong](https://github.com/QianChenglong)) [SIG Cluster Lifecycle]
-- Kubelet: assume that swap is disabled when `/proc/swaps` does not exist ([#93931](https://github.com/kubernetes/kubernetes/pull/93931), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
-- Kubelet: fix race condition in pluginWatcher ([#93622](https://github.com/kubernetes/kubernetes/pull/93622), [@knight42](https://github.com/knight42)) [SIG Node]
-- Kuberuntime security: pod sandbox now always runs with `runtime/default` seccomp profile
-  kuberuntime seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90949](https://github.com/kubernetes/kubernetes/pull/90949), [@pjbgf](https://github.com/pjbgf)) [SIG Node]
-- NONE ([#71269](https://github.com/kubernetes/kubernetes/pull/71269), [@DeliangFan](https://github.com/DeliangFan)) [SIG Node]
-- New Azure instance types do now have correct max data disk count information. ([#94340](https://github.com/kubernetes/kubernetes/pull/94340), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Cloud Provider and Storage]
-- Pods with invalid Affinity/AntiAffinity LabelSelectors will now fail scheduling when these plugins are enabled ([#93660](https://github.com/kubernetes/kubernetes/pull/93660), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Require feature flag CustomCPUCFSQuotaPeriod if setting a non-default cpuCFSQuotaPeriod in kubelet config. ([#94687](https://github.com/kubernetes/kubernetes/pull/94687), [@karan](https://github.com/karan)) [SIG Node]
-- Reverted devicemanager for Windows node added in 1.19rc1. ([#93263](https://github.com/kubernetes/kubernetes/pull/93263), [@liggitt](https://github.com/liggitt)) [SIG Node and Windows]
-- Scheduler bugfix: Scheduler doesn't lose pod information when nodes are quickly recreated. This could happen when nodes are restarted or quickly recreated reusing a nodename. ([#93938](https://github.com/kubernetes/kubernetes/pull/93938), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scalability, Scheduling and Testing]
-- The EndpointSlice controller now waits for EndpointSlice and Node caches to be synced before starting. ([#94086](https://github.com/kubernetes/kubernetes/pull/94086), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- The `/debug/api_priority_and_fairness/dump_requests` path at an apiserver will no longer return a phantom line for each exempt priority level. ([#93406](https://github.com/kubernetes/kubernetes/pull/93406), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
-- The kubelet recognizes the --containerd-namespace flag to configure the namespace used by cadvisor. ([#87054](https://github.com/kubernetes/kubernetes/pull/87054), [@changyaowei](https://github.com/changyaowei)) [SIG Node]
-- The terminationGracePeriodSeconds from pod spec is respected for the mirror pod. ([#92442](https://github.com/kubernetes/kubernetes/pull/92442), [@tedyu](https://github.com/tedyu)) [SIG Node and Testing]
-- Update Calico to v3.15.2 ([#94241](https://github.com/kubernetes/kubernetes/pull/94241), [@lmm](https://github.com/lmm)) [SIG Cloud Provider]
-- Update default etcd server version to 3.4.13 ([#94287](https://github.com/kubernetes/kubernetes/pull/94287), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
-- Updated Cluster Autoscaler to 1.19.0; ([#93577](https://github.com/kubernetes/kubernetes/pull/93577), [@vivekbagade](https://github.com/vivekbagade)) [SIG Autoscaling and Cloud Provider]
-- Use NLB Subnet CIDRs instead of VPC CIDRs in Health Check SG Rules ([#93515](https://github.com/kubernetes/kubernetes/pull/93515), [@t0rr3sp3dr0](https://github.com/t0rr3sp3dr0)) [SIG Cloud Provider]
-- Users will see increase in time for deletion of pods and also guarantee that removal of pod from api server  would mean deletion of all the resources from container runtime. ([#92817](https://github.com/kubernetes/kubernetes/pull/92817), [@kmala](https://github.com/kmala)) [SIG Node]
-- Very large patches may now be specified to `kubectl patch` with the `--patch-file` flag instead of including them directly on the command line. The `--patch` and `--patch-file` flags are mutually exclusive. ([#93548](https://github.com/kubernetes/kubernetes/pull/93548), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
-- When creating a networking.k8s.io/v1 Ingress API object, `spec.rules[*].http` values are now validated consistently when the `host` field contains a wildcard. ([#93954](https://github.com/kubernetes/kubernetes/pull/93954), [@Miciah](https://github.com/Miciah)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Storage and Testing]
+- Add missing --kube-api-content-type in kubemark hollow template ([#98911](https://github.com/kubernetes/kubernetes/pull/98911), [@Jeffwan](https://github.com/Jeffwan)) [SIG Scalability and Testing]
+- Avoid duplicate error messages when runing kubectl edit quota ([#98201](https://github.com/kubernetes/kubernetes/pull/98201), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery and Apps]
+- Cleanup subnet in frontend IP configs to prevent huge subnet request bodies in some scenarios. ([#98133](https://github.com/kubernetes/kubernetes/pull/98133), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Fix errors when accessing Windows container stats for Dockershim ([#98510](https://github.com/kubernetes/kubernetes/pull/98510), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node and Windows]
+- Fixes spurious errors about IPv6 in kube-proxy logs on nodes with IPv6 disabled. ([#99127](https://github.com/kubernetes/kubernetes/pull/99127), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
+- In the method that ensures that the docker and containerd are in the correct containers with the proper OOM score set up, fixed the bug of identifying containerd process. ([#97888](https://github.com/kubernetes/kubernetes/pull/97888), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
+- Kubelet now cleans up orphaned volume directories automatically ([#95301](https://github.com/kubernetes/kubernetes/pull/95301), [@lorenz](https://github.com/lorenz)) [SIG Node and Storage]
+- When dynamically provisioning Azure File volumes for a premium account, the requested size will be set to 100GB if the request is initially lower than this value to accommodate Azure File requirements. ([#99122](https://github.com/kubernetes/kubernetes/pull/99122), [@huffmanca](https://github.com/huffmanca)) [SIG Cloud Provider and Storage]
 
 ### Other (Cleanup or Flake)
 
-- --cache-dir sets cache directory for both http and discovery, defaults to $HOME/.kube/cache ([#92910](https://github.com/kubernetes/kubernetes/pull/92910), [@soltysh](https://github.com/soltysh)) [SIG API Machinery and CLI]
-- Adds a bootstrapping ClusterRole, ClusterRoleBinding and group for /metrics, /livez/*, /readyz/*, & /healthz/- endpoints. ([#93311](https://github.com/kubernetes/kubernetes/pull/93311), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Auth, Cloud Provider and Instrumentation]
-- Base-images: Update to debian-iptables:buster-v1.3.0
+- APIs for kubelet annotations and labels from k8s.io/kubernetes/pkg/kubelet/apis are now available under k8s.io/kubelet/pkg/apis/ ([#98931](https://github.com/kubernetes/kubernetes/pull/98931), [@michaelbeaumont](https://github.com/michaelbeaumont)) [SIG Apps, Auth and Node]
+- Migrate `pkg/kubelet/(pod, pleg)` to structured logging ([#98990](https://github.com/kubernetes/kubernetes/pull/98990), [@gjkim42](https://github.com/gjkim42)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/nodestatus to structured logging ([#99001](https://github.com/kubernetes/kubernetes/pull/99001), [@QiWang19](https://github.com/QiWang19)) [SIG Node]
+- Migrate pkg/kubelet/server logs to structured logging ([#98643](https://github.com/kubernetes/kubernetes/pull/98643), [@chenyw1990](https://github.com/chenyw1990)) [SIG Node]
+- Migrate proxy/winkernel/proxier.go logs to structured logging ([#98001](https://github.com/kubernetes/kubernetes/pull/98001), [@JornShen](https://github.com/JornShen)) [SIG Network and Windows]
+- Migrate scheduling_queue.go to structured logging ([#98358](https://github.com/kubernetes/kubernetes/pull/98358), [@tanjing2020](https://github.com/tanjing2020)) [SIG Scheduling]
+- Several flags related to the deprecated dockershim which are present in the kubelet command line are now deprecated. ([#98730](https://github.com/kubernetes/kubernetes/pull/98730), [@dims](https://github.com/dims)) [SIG Node]
+- The deprecated feature gates `CSIDriverRegistry`, `BlockVolume` and `CSIBlockVolume` are now unconditionally enabled and can no longer be specified in component invocations. ([#98021](https://github.com/kubernetes/kubernetes/pull/98021), [@gavinfish](https://github.com/gavinfish)) [SIG Storage]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.0.3
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.21.0-alpha.3
+
+
+## Downloads for v1.21.0-alpha.3
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes.tar.gz) | 704ec916a1dbd134c54184d2652671f80ae09274f9d23dbbed312944ebeccbc173e2e6b6949b38bdbbfdaf8aa032844deead5efeda1b3150f9751386d9184bc8
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-src.tar.gz) | 57db9e7560cfc9c10e7059cb5faf9c4bd5eb8f9b7964f44f000a417021cf80873184b774e7c66c80d4aba84c14080c6bc335618db3d2e5f276436ae065e25408
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | e2706efda92d5cf4f8b69503bb2f7703a8754407eff7f199bb77847838070e720e5f572126c14daa4c0c03b59bb1a63c1dfdeb6e936a40eff1d5497e871e3409
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-386.tar.gz) | 007bb23c576356ed0890bdfd25a0f98d552599e0ffec19fb982591183c7c1f216d8a3ffa3abf15216be12ae5c4b91fdcd48a7306a2d26b007b86a6abd553fc61
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | 39504b0c610348beba60e8866fff265bad58034f74504951cd894c151a248db718d10f77ebc83f2c38b2d517f8513a46325b38889eefa261ca6dbffeceba50ff
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | 30bc2c40d0c759365422ad1651a6fb35909be771f463c5b971caf401f9209525d05256ab70c807e88628dd357c2896745eecf13eda0b748464da97d0a5ef2066
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | 085cdf574dc8fd33ece667130b8c45830b522a07860e03a2384283b1adea73a9652ef3dfaa566e69ee00aea1a6461608814b3ce7a3f703e4a934304f7ae12f97
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | b34b845037d83ea7b3e2d80a9ede4f889b71b17b93b1445f0d936a36e98c13ed6ada125630a68d9243a5fcd311ee37cdcc0c05da484da8488ea5060bc529dbfc
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | c4758adc7a404b776556efaa79655db2a70777c562145d6ea6887f3335988367a0c2fcd4383e469340f2a768b22e786951de212805ca1cb91104d41c21e0c9ce
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-windows-386.tar.gz) | f51edc79702bbd1d9cb3a672852a405e11b20feeab64c5411a7e85c9af304960663eb6b23ef96e0f8c44a722fecf58cb6d700ea2c42c05b3269d8efd5ad803f2
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | 6a3507ce4ac40a0dc7e4720538863fa15f8faf025085a032f34b8fa0f6fa4e8c26849baf649b5b32829b9182e04f82721b13950d31cf218c35be6bf1c05d6abf
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | 19181d162dfb0b30236e2bf1111000e037eece87c037ca2b24622ca94cb88db86aa4da4ca533522518b209bc9983bbfd6b880a7898e0da96b33f3f6c4690539b
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | 42a02f9e08a78ad5da6e5fa1ab12bf1e3c967c472fdbdadbd8746586da74dc8093682ba8513ff2a5301393c47ee9021b860e88ada56b13da386ef485708e46ca
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | 3c8ba8eb02f70061689bd7fab7813542005efe2edc6cfc6b7aecd03ffedf0b81819ad91d69fff588e83023d595eefbfe636aa55e1856add8733bf42fff3c748f
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | cd9e6537450411c39a06fd0b5819db3d16b668d403fb3627ec32c0e32dd1c4860e942934578ca0e1d1b8e6f21f450ff81e37e0cd46ff5c5faf7847ab074aefc5
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | ada3f65e53bc0e0c0229694dd48c425388089d6d77111a62476d1b08f6ad1d8ab3d60b9ed7d95ac1b42c2c6be8dc0618f40679717160769743c43583d8452362
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | ae0fec6aa59e49624b55d9a11c12fdf717ddfe04bdfd4f69965d03004a34e52ee4a3e83f7b61d0c6a86f43b72c99f3decb195b39ae529ef30526d18ec5f58f83
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | 9a48c140ab53b7ed8ecec6903988a1a474efc16d2538e5974bc9a12f0c9190be78c4f9e326bf4e982d0b7045a80b99dd0fda7e9b650663be5b89bfd991596746
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | 6912adbc9300344bea470d6435f7b387bfce59767078c11728ce59faf47cd3f72b41b9604fcc5cda45e9816fe939fbe2fb33e52a773e6ff2dfa9a615b4df6141
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | d66dccfe3e6ed6d81567c70703f15375a53992b3a5e2814b98c32e581b861ad95912e03ed2562415d087624c008038bb4a816611fa255442ae752968ea15856b
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | ad8c69a28f1fbafa3f1cb54909bfd3fc22b104bed63d7ca2b296208c9d43eb5f2943a0ff267da4c185186cdd9f7f77b315cd7f5f1bf9858c0bf42eceb9ac3c58
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | 91d723aa848a9cb028f5bcb41090ca346fb973961521d025c4399164de2c8029b57ca2c4daca560d3c782c05265d2eb0edb0abcce6f23d3efbecf2316a54d650
+
+## Changelog since v1.21.0-alpha.2
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Newly provisioned PVs by gce-pd will no longer have the beta FailureDomain label. gce-pd volume plugin will start to have GA topology label instead. ([#98700](https://github.com/kubernetes/kubernetes/pull/98700), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider, Storage and Testing]
+  - Remove alpha CSIMigrationXXComplete flag and add alpha InTreePluginXXUnregister flag. Deprecate CSIMigrationvSphereComplete flag and it will be removed in 1.22. ([#98243](https://github.com/kubernetes/kubernetes/pull/98243), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Node and Storage]
+ 
+## Changes by Kind
+
+### API Change
+
+- Adds support for portRange / EndPort in Network Policy ([#97058](https://github.com/kubernetes/kubernetes/pull/97058), [@rikatz](https://github.com/rikatz)) [SIG Apps and Network]
+- Fixes using server-side apply with APIService resources ([#98576](https://github.com/kubernetes/kubernetes/pull/98576), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Apps and Testing]
+- Kubernetes is now built using go1.15.7 ([#98363](https://github.com/kubernetes/kubernetes/pull/98363), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Node, Release and Testing]
+- Scheduler extender filter interface now can report unresolvable failed nodes in the new field `FailedAndUnresolvableNodes` of  `ExtenderFilterResult` struct. Nodes in this map will be skipped in the preemption phase. ([#92866](https://github.com/kubernetes/kubernetes/pull/92866), [@cofyc](https://github.com/cofyc)) [SIG Scheduling]
+
+### Feature
+
+- A lease can only attach up to 10k objects. ([#98257](https://github.com/kubernetes/kubernetes/pull/98257), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery]
+- Add ignore-errors flag for drain, support none-break drain in group ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan)) [SIG CLI]
+- Base-images: Update to debian-iptables:buster-v1.4.0
   - Uses iptables 1.8.5
-  - base-images: Update to debian-base:buster-v1.2.0
-  - cluster/images/etcd: Build etcd:3.4.13-1 image
-    - Uses debian-base:buster-v1.2.0 ([#94733](https://github.com/kubernetes/kubernetes/pull/94733), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Build: Update to debian-base@v2.1.2 and debian-iptables@v12.1.1 ([#93667](https://github.com/kubernetes/kubernetes/pull/93667), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Build: Update to debian-base@v2.1.3 and debian-iptables@v12.1.2 ([#93916](https://github.com/kubernetes/kubernetes/pull/93916), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Build: Update to go-runner:buster-v2.0.0 ([#94167](https://github.com/kubernetes/kubernetes/pull/94167), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
-- Fix kubelet to properly log when a container is started. Before, sometimes the log said that a container is dead and was restarted when it was started for the first time. This only happened when using pods with initContainers and regular containers. ([#91469](https://github.com/kubernetes/kubernetes/pull/91469), [@rata](https://github.com/rata)) [SIG Node]
-- Fix: license issue in blob disk feature ([#92824](https://github.com/kubernetes/kubernetes/pull/92824), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fixes the flooding warning messages about setting volume ownership for configmap/secret volumes ([#92878](https://github.com/kubernetes/kubernetes/pull/92878), [@jvanz](https://github.com/jvanz)) [SIG Instrumentation, Node and Storage]
-- Fixes the message about no auth for metrics in scheduler. ([#94035](https://github.com/kubernetes/kubernetes/pull/94035), [@zhouya0](https://github.com/zhouya0)) [SIG Scheduling]
-- Kube-up: defaults to limiting critical pods to the kube-system namespace to match behavior prior to 1.17 ([#93121](https://github.com/kubernetes/kubernetes/pull/93121), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider and Scheduling]
-- Kubeadm: Separate argument key/value in log msg ([#94016](https://github.com/kubernetes/kubernetes/pull/94016), [@mrueg](https://github.com/mrueg)) [SIG Cluster Lifecycle]
-- Kubeadm: remove support for the "ci/k8s-master" version label. This label has been removed in the Kubernetes CI release process and would no longer work in kubeadm. You can use the "ci/latest" version label instead. See kubernetes/test-infra&#35;18517 ([#93626](https://github.com/kubernetes/kubernetes/pull/93626), [@vikkyomkar](https://github.com/vikkyomkar)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the CoreDNS check for known image digests when applying the addon ([#94506](https://github.com/kubernetes/kubernetes/pull/94506), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubernetes is now built with go1.15.0 ([#93939](https://github.com/kubernetes/kubernetes/pull/93939), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Kubernetes is now built with go1.15.0-rc.2 ([#93827](https://github.com/kubernetes/kubernetes/pull/93827), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
-- Lock ExternalPolicyForExternalIP to default, this feature gate will be removed in 1.22. ([#94581](https://github.com/kubernetes/kubernetes/pull/94581), [@knabben](https://github.com/knabben)) [SIG Network]
-- Service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset is removed.  All Standard load balancers will always enable tcp resets. ([#94297](https://github.com/kubernetes/kubernetes/pull/94297), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Stop propagating SelfLink (deprecated in 1.16) in kube-apiserver ([#94397](https://github.com/kubernetes/kubernetes/pull/94397), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Strip unnecessary security contexts on Windows ([#93475](https://github.com/kubernetes/kubernetes/pull/93475), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node, Testing and Windows]
-- To ensure the code be strong,  add unit test for GetAddressAndDialer ([#93180](https://github.com/kubernetes/kubernetes/pull/93180), [@FreeZhang61](https://github.com/FreeZhang61)) [SIG Node]
-- Update CNI plugins to v0.8.7 ([#94367](https://github.com/kubernetes/kubernetes/pull/94367), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Network, Node, Release and Testing]
-- Update Golang to v1.14.5
-  - Update repo-infra to 0.0.7 (to support go1.14.5 and go1.13.13)
-    - Includes:
-      - bazelbuild/bazel-toolchains@3.3.2
-      - bazelbuild/rules_go@v0.22.7 ([#93088](https://github.com/kubernetes/kubernetes/pull/93088), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Update Golang to v1.14.6
-  - Update repo-infra to 0.0.8 (to support go1.14.6 and go1.13.14)
-    - Includes:
-      - bazelbuild/bazel-toolchains@3.4.0
-      - bazelbuild/rules_go@v0.22.8 ([#93198](https://github.com/kubernetes/kubernetes/pull/93198), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Update cri-tools to [v1.19.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.19.0) ([#94307](https://github.com/kubernetes/kubernetes/pull/94307), [@xmudrii](https://github.com/xmudrii)) [SIG Cloud Provider]
-- Update default etcd server version to 3.4.9 ([#92349](https://github.com/kubernetes/kubernetes/pull/92349), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
-- Update etcd client side to v3.4.13 ([#94259](https://github.com/kubernetes/kubernetes/pull/94259), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
-- `kubectl get ingress` now prefers the `networking.k8s.io/v1` over `extensions/v1beta1` (deprecated since v1.14). To explicitly request the deprecated version, use `kubectl get ingress.v1beta1.extensions`. ([#94309](https://github.com/kubernetes/kubernetes/pull/94309), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and CLI]
+  - base-images: Update to debian-base:buster-v1.3.0
+  - cluster/images/etcd: Build etcd:3.4.13-2 image
+    - Uses debian-base:buster-v1.3.0 ([#98401](https://github.com/kubernetes/kubernetes/pull/98401), [@pacoxu](https://github.com/pacoxu)) [SIG Testing]
+- Export NewDebuggingRoundTripper function and DebugLevel options in the k8s.io/client-go/transport package. ([#98324](https://github.com/kubernetes/kubernetes/pull/98324), [@atosatto](https://github.com/atosatto)) [SIG API Machinery]
+- Kubectl wait ensures that observedGeneration >= generation if applicable ([#97408](https://github.com/kubernetes/kubernetes/pull/97408), [@KnicKnic](https://github.com/KnicKnic)) [SIG CLI]
+- Kubernetes is now built using go1.15.8 ([#98834](https://github.com/kubernetes/kubernetes/pull/98834), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- New admission controller "denyserviceexternalips" is available.  Clusters which do not *need- the Service "externalIPs" feature should enable this controller and be more secure. ([#97395](https://github.com/kubernetes/kubernetes/pull/97395), [@thockin](https://github.com/thockin)) [SIG API Machinery]
+- Overall, enable the feature of `PreferNominatedNode` will  improve the performance of scheduling where preemption might frequently happen, but in theory, enable the feature of `PreferNominatedNode`, the pod might not be scheduled to the best candidate node in the cluster. ([#93179](https://github.com/kubernetes/kubernetes/pull/93179), [@chendave](https://github.com/chendave)) [SIG Scheduling and Testing]
+- Pause image upgraded to 3.4.1 in kubelet and kubeadm for both Linux and Windows. ([#98205](https://github.com/kubernetes/kubernetes/pull/98205), [@pacoxu](https://github.com/pacoxu)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Testing and Windows]
+- The `ServiceAccountIssuerDiscovery` feature has graduated to GA, and is unconditionally enabled. The `ServiceAccountIssuerDiscovery` feature-gate will be removed in 1.22. ([#98553](https://github.com/kubernetes/kubernetes/pull/98553), [@mtaufen](https://github.com/mtaufen)) [SIG API Machinery, Auth and Testing]
+
+### Documentation
+
+- Feat: azure file migration go beta in 1.21. Feature gates CSIMigration to Beta (on by default) and CSIMigrationAzureFile to Beta (off by default since it requires installation of the AzureFile CSI Driver)
+  The in-tree AzureFile plugin "kubernetes.io/azure-file" is now deprecated and will be removed in 1.23. Users should enable CSIMigration + CSIMigrationAzureFile features and install the AzureFile CSI Driver (https://github.com/kubernetes-sigs/azurefile-csi-driver) to avoid disruption to existing Pod and PVC objects at that time.
+  Users should start using the AzureFile CSI Driver directly for any new volumes. ([#96293](https://github.com/kubernetes/kubernetes/pull/96293), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+
+### Failing Test
+
+- Kubelet: the HostPort implementation in dockershim was not taking into consideration the HostIP field, causing that the same HostPort can not be used with different IP addresses.
+  This bug causes the conformance test "HostPort validates that there is no conflict between pods with same hostPort but different hostIP and protocol" to fail. ([#98755](https://github.com/kubernetes/kubernetes/pull/98755), [@aojea](https://github.com/aojea)) [SIG Cloud Provider, Network and Node]
+
+### Bug or Regression
+
+- Fix NPE in ephemeral storage eviction ([#98261](https://github.com/kubernetes/kubernetes/pull/98261), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fixed a bug that on k8s nodes, when the policy of INPUT chain in filter table is not ACCEPT, healthcheck nodeport would not work.
+  Added iptables rules to allow healthcheck nodeport traffic. ([#97824](https://github.com/kubernetes/kubernetes/pull/97824), [@hanlins](https://github.com/hanlins)) [SIG Network]
+- Fixed kube-proxy container image architecture for non amd64 images. ([#98526](https://github.com/kubernetes/kubernetes/pull/98526), [@saschagrunert](https://github.com/saschagrunert)) [SIG API Machinery, Release and Testing]
+- Fixed provisioning of Cinder volumes migrated to CSI when StorageClass with AllowedTopologies was used. ([#98311](https://github.com/kubernetes/kubernetes/pull/98311), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixes a panic in the disruption budget controller for PDB objects with invalid selectors ([#98750](https://github.com/kubernetes/kubernetes/pull/98750), [@mortent](https://github.com/mortent)) [SIG Apps]
+- Fixes connection errors when using `--volume-host-cidr-denylist` or `--volume-host-allow-local-loopback` ([#98436](https://github.com/kubernetes/kubernetes/pull/98436), [@liggitt](https://github.com/liggitt)) [SIG Network and Storage]
+- If the user specifies an invalid timeout in the request URL, the request will be aborted with an HTTP 400.
+  - in cases where the client specifies a timeout in the request URL, the overall request deadline is shortened now since the deadline is setup as soon as the request is received by the apiserver. ([#96901](https://github.com/kubernetes/kubernetes/pull/96901), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]
+- Kubeadm: Some text in the `kubeadm upgrade plan` output has changed. If you have scripts or other automation that parses this output, please review these changes and update your scripts to account for the new output. ([#98728](https://github.com/kubernetes/kubernetes/pull/98728), [@stmcginnis](https://github.com/stmcginnis)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where external credentials in an existing admin.conf prevented the CA certificate to be written in the cluster-info ConfigMap. ([#98882](https://github.com/kubernetes/kubernetes/pull/98882), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
+- Kubeadm: fix bad token placeholder text in "config print *-defaults --help" ([#98839](https://github.com/kubernetes/kubernetes/pull/98839), [@Mattias-](https://github.com/Mattias-)) [SIG Cluster Lifecycle]
+- Kubeadm: get k8s CI version markers from k8s infra bucket ([#98836](https://github.com/kubernetes/kubernetes/pull/98836), [@hasheddan](https://github.com/hasheddan)) [SIG Cluster Lifecycle and Release]
+- Mitigate CVE-2020-8555 for kube-up using GCE by preventing local loopback folume hosts. ([#97934](https://github.com/kubernetes/kubernetes/pull/97934), [@mattcary](https://github.com/mattcary)) [SIG Cloud Provider and Storage]
+- Remove CSI topology from migrated in-tree gcepd volume. ([#97823](https://github.com/kubernetes/kubernetes/pull/97823), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider and Storage]
+- Sync node status during kubelet node shutdown.
+  Adds an pod admission handler that rejects new pods when the node is in progress of shutting down. ([#98005](https://github.com/kubernetes/kubernetes/pull/98005), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Truncates a message if it hits the NoteLengthLimit when the scheduler records an event for the pod that indicates the pod has failed to schedule. ([#98715](https://github.com/kubernetes/kubernetes/pull/98715), [@carlory](https://github.com/carlory)) [SIG Scheduling]
+- We will no longer automatically delete all data when a failure is detected during creation of the volume data file on a CSI volume. Now we will only remove the data file and volume path. ([#96021](https://github.com/kubernetes/kubernetes/pull/96021), [@huffmanca](https://github.com/huffmanca)) [SIG Storage]
+
+### Other (Cleanup or Flake)
+
+- Fix the description of command line flags that can override --config ([#98254](https://github.com/kubernetes/kubernetes/pull/98254), [@changshuchao](https://github.com/changshuchao)) [SIG Scheduling]
+- Migrate scheduler/taint_manager.go structured logging ([#98259](https://github.com/kubernetes/kubernetes/pull/98259), [@tanjing2020](https://github.com/tanjing2020)) [SIG Apps]
+- Migrate staging/src/k8s.io/apiserver/pkg/admission logs to  structured logging ([#98138](https://github.com/kubernetes/kubernetes/pull/98138), [@lala123912](https://github.com/lala123912)) [SIG API Machinery]
+- Resolves flakes in the Ingress conformance tests due to conflicts with controllers updating the Ingress object ([#98430](https://github.com/kubernetes/kubernetes/pull/98430), [@liggitt](https://github.com/liggitt)) [SIG Network and Testing]
+- The default delegating authorization options now allow unauthenticated access to healthz, readyz, and livez.  A system:masters user connecting to an authz delegator will not perform an authz check. ([#98325](https://github.com/kubernetes/kubernetes/pull/98325), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth, Cloud Provider and Scheduling]
+- The e2e suite can be instructed not to wait for pods in kube-system to be ready or for all nodes to be ready by passing `--allowed-not-ready-nodes=-1` when invoking the e2e.test program. This allows callers to run subsets of the e2e suite in scenarios other than perfectly healthy clusters. ([#98781](https://github.com/kubernetes/kubernetes/pull/98781), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- The feature gates `WindowsGMSA` and `WindowsRunAsUserName` that are GA since v1.18 are now removed. ([#96531](https://github.com/kubernetes/kubernetes/pull/96531), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Node and Windows]
+- The new `-gce-zones` flag on the `e2e.test` binary instructs tests that check for information about how the cluster interacts with the cloud to limit their queries to the provided zone list. If not specified, the current behavior of asking the cloud provider for all available zones in multi zone clusters is preserved. ([#98787](https://github.com/kubernetes/kubernetes/pull/98787), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Cluster Lifecycle and Testing]
 
 ## Dependencies
 
 ### Added
-- github.com/Azure/go-autorest: [v14.2.0+incompatible](https://github.com/Azure/go-autorest/tree/v14.2.0)
-- github.com/fvbommel/sortorder: [v1.0.1](https://github.com/fvbommel/sortorder/tree/v1.0.1)
-- github.com/yuin/goldmark: [v1.1.27](https://github.com/yuin/goldmark/tree/v1.1.27)
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1
+- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
 
 ### Changed
-- github.com/Azure/go-autorest/autorest/adal: [v0.8.2 → v0.9.0](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.8.2...v0.9.0)
-- github.com/Azure/go-autorest/autorest/date: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.2.0...v0.3.0)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.3.0 → v0.4.0](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.3.0...v0.4.0)
-- github.com/Azure/go-autorest/autorest: [v0.9.6 → v0.11.1](https://github.com/Azure/go-autorest/autorest/compare/v0.9.6...v0.11.1)
-- github.com/Azure/go-autorest/logger: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/logger/compare/v0.1.0...v0.2.0)
-- github.com/Azure/go-autorest/tracing: [v0.5.0 → v0.6.0](https://github.com/Azure/go-autorest/tracing/compare/v0.5.0...v0.6.0)
-- github.com/Microsoft/hcsshim: [v0.8.9 → 5eafd15](https://github.com/Microsoft/hcsshim/compare/v0.8.9...5eafd15)
-- github.com/cilium/ebpf: [9f1617e → 1c8d4c9](https://github.com/cilium/ebpf/compare/9f1617e...1c8d4c9)
-- github.com/containerd/cgroups: [bf292b2 → 0dbf7f0](https://github.com/containerd/cgroups/compare/bf292b2...0dbf7f0)
-- github.com/coredns/corefile-migration: [v1.0.8 → v1.0.10](https://github.com/coredns/corefile-migration/compare/v1.0.8...v1.0.10)
-- github.com/evanphx/json-patch: [e83c0a1 → v4.9.0+incompatible](https://github.com/evanphx/json-patch/compare/e83c0a1...v4.9.0)
-- github.com/google/cadvisor: [8450c56 → v0.37.0](https://github.com/google/cadvisor/compare/8450c56...v0.37.0)
-- github.com/json-iterator/go: [v1.1.9 → v1.1.10](https://github.com/json-iterator/go/compare/v1.1.9...v1.1.10)
-- github.com/opencontainers/go-digest: [v1.0.0-rc1 → v1.0.0](https://github.com/opencontainers/go-digest/compare/v1.0.0-rc1...v1.0.0)
-- github.com/opencontainers/runc: [1b94395 → 819fcc6](https://github.com/opencontainers/runc/compare/1b94395...819fcc6)
-- github.com/prometheus/client_golang: [v1.6.0 → v1.7.1](https://github.com/prometheus/client_golang/compare/v1.6.0...v1.7.1)
-- github.com/prometheus/common: [v0.9.1 → v0.10.0](https://github.com/prometheus/common/compare/v0.9.1...v0.10.0)
-- github.com/prometheus/procfs: [v0.0.11 → v0.1.3](https://github.com/prometheus/procfs/compare/v0.0.11...v0.1.3)
-- github.com/rubiojr/go-vhd: [0bfd3b3 → 02e2102](https://github.com/rubiojr/go-vhd/compare/0bfd3b3...02e2102)
-- github.com/storageos/go-api: [343b3ef → v2.2.0+incompatible](https://github.com/storageos/go-api/compare/343b3ef...v2.2.0)
-- github.com/urfave/cli: [v1.22.1 → v1.22.2](https://github.com/urfave/cli/compare/v1.22.1...v1.22.2)
-- go.etcd.io/etcd: 54ba958 → dd1b699
-- golang.org/x/crypto: bac4c82 → 75b2880
-- golang.org/x/mod: v0.1.0 → v0.3.0
-- golang.org/x/net: d3edc99 → ab34263
-- golang.org/x/tools: c00d67e → c1934b7
-- k8s.io/kube-openapi: 656914f → 6aeccd4
-- k8s.io/system-validators: v1.1.2 → v1.2.0
-- k8s.io/utils: 6e3d28b → d5654de
+- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
+- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
+- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
+- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
+- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
+- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
+- golang.org/x/sync: cd5d95a → 67f06af
+- golang.org/x/tools: c1934b7 → 113979e
+- k8s.io/klog/v2: v2.4.0 → v2.5.0
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
 
 ### Removed
-- github.com/godbus/dbus: [ade71ed](https://github.com/godbus/dbus/tree/ade71ed)
-- github.com/xlab/handysort: [fb3537e](https://github.com/xlab/handysort/tree/fb3537e)
-- sigs.k8s.io/structured-merge-diff/v3: v3.0.0
-- vbom.ml/util: db5cfe1
+- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
+
+
+
+# v1.21.0-alpha.2
+
+
+## Downloads for v1.21.0-alpha.2
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes.tar.gz) | 6836f6c8514253fe0831fd171fc4ed92eb6d9a773491c8dc82b90d171a1b10076bd6bfaea56ec1e199c5f46c273265bdb9f174f0b2d99c5af1de4c99b862329e
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-src.tar.gz) | d137694804741a05ab09e5f9a418448b66aba0146c028eafce61bcd9d7c276521e345ce9223ffbc703e8172041d58dfc56a3242a4df3686f24905a4541fcd306
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | 9478b047a97717953f365c13a098feb7e3cb30a3df22e1b82aa945f2208dcc5cb90afc441ba059a3ae7aafb4ee000ec3a52dc65a8c043a5ac7255a391c875330
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-386.tar.gz) | 44c8dd4b1ddfc256d35786c8abf45b0eb5f0794f5e310d2efc865748adddc50e8bf38aa71295ae8a82884cb65f2e0b9b0737b000f96fd8f2d5c19971d7c4d8e8
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | e1291989892769de6b978c17b8612b94da6f3b735a4d895100af622ca9ebb968c75548afea7ab00445869625dd0da3afec979e333afbb445805f5d31c1c13cc7
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | 3c4bcb8cbe73822d68a2f62553a364e20bec56b638c71d0f58679b4f4b277d809142346f18506914e694f6122a3e0f767eab20b7b1c4dbb79e4c5089981ae0f1
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | 9389974a790268522e187f5ba5237f3ee4684118c7db76bc3d4164de71d8208702747ec333b204c7a78073ab42553cbbce13a1883fab4fec617e093b05fab332
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | 63399e53a083b5af3816c28ff162c9de6b64c75da4647f0d6bbaf97afdf896823cb1e556f2abac75c6516072293026d3ff9f30676fd75143ac6ca3f4d21f4327
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | 50898f197a9d923971ff9046c9f02779b57f7b3cea7da02f3ea9bab8c08d65a9c4a7531a2470fa14783460f52111a52b96ebf916c0a1d8215b4070e4e861c1b0
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-windows-386.tar.gz) | a7743e839e1aa19f5ee20b6ee5000ac8ef9e624ac5be63bb574fad6992e4b9167193ed07e03c9bc524e88bfeed66c95341a38a03bff1b10bc9910345f33019f0
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | 5f1d19c230bd3542866d16051808d184e9dd3e2f8c001ed4cee7b5df91f872380c2bf56a3add8c9413ead9d8c369efce2bcab4412174df9b823d3592677bf74e
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | ef2cac10febde231aeb6f131e589450c560eeaab8046b49504127a091cddc17bc518c2ad56894a6a033033ab6fc6e121b1cc23691683bc36f45fe6b1dd8e0510
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | d11c9730307f08e80b2b8a7c64c3e9a9e43c622002e377dfe3a386f4541e24adc79a199a6f280f40298bb36793194fd44ed45defe8a3ee54a9cb1386bc26e905
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | 28f8c32bf98ee1add7edf5d341c3bac1afc0085f90dcbbfb8b27a92087f13e2b53c327c8935ee29bf1dc3160655b32bbe3e29d5741a8124a3848a777e7d42933
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | 99ae8d44b0de3518c27fa8bbddd2ecf053dfb789fb9d65f8a4ecf4c8331cf63d2f09a41c2bcd5573247d5f66a1b2e51944379df1715017d920d521b98589508a
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | f8c0e954a2dfc6845614488dadeed069cc7f3f08e33c351d7a77c6ef97867af590932e8576d12998a820a0e4d35d2eee797c764e2810f09ab1e90a5acaeaad33
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | c5456d50bfbe0d75fb150b3662ed7468a0abd3970792c447824f326894382c47bbd3a2cc5a290f691c8c09585ff6fe505ab86b4aff2b7e5ccee11b5e6354ae6c
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | 335b5cd8672e053302fd94d932fb2fa2e48eeeb1799650b3f93acdfa635e03a8453637569ab710c46885c8317759f4c60aaaf24dca9817d9fa47500fe4a3ca53
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | 3ee87dbeed8ace9351ac89bdaf7274dd10b4faec3ceba0825f690ec7a2bb7eb7c634274a1065a0939eec8ff3e43f72385f058f4ec141841550109e775bc5eff9
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | 6956f965b8d719b164214ec9195fdb2c776b907fe6d2c524082f00c27872a73475927fd7d2a994045ce78f6ad2aa5aeaf1eb5514df1810d2cfe342fd4e5ce4a1
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | 3b643aa905c709c57083c28dd9e8ffd88cb64466cda1499da7fc54176b775003e08b9c7a07b0964064df67c8142f6f1e6c13bfc261bd65fb064049920bfa57d0
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | b2e6d6fb0091f2541f9925018c2bdbb0138a95bab06b4c6b38abf4b7144b2575422263b78fb3c6fd09e76d90a25a8d35a6d4720dc169794d42c95aa22ecc6d5f
+
+## Changelog since v1.21.0-alpha.1
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Remove storage metrics `storage_operation_errors_total`, since we already have `storage_operation_status_count`.And add new field `status` for `storage_operation_duration_seconds`, so that we can know about all status storage operation latency. ([#98332](https://github.com/kubernetes/kubernetes/pull/98332), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
+ 
+## Changes by Kind
+
+### Deprecation
+
+- Remove the TokenRequest and TokenRequestProjection feature gates ([#97148](https://github.com/kubernetes/kubernetes/pull/97148), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- Removing experimental windows container hyper-v support with Docker ([#97141](https://github.com/kubernetes/kubernetes/pull/97141), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
+- The `export` query parameter (inconsistently supported by API resources and deprecated in v1.14) is fully removed.  Requests setting this query parameter will now receive a 400 status response. ([#98312](https://github.com/kubernetes/kubernetes/pull/98312), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
+
+### API Change
+
+- Enable SPDY pings to keep connections alive, so that `kubectl exec` and `kubectl port-forward` won't be interrupted. ([#97083](https://github.com/kubernetes/kubernetes/pull/97083), [@knight42](https://github.com/knight42)) [SIG API Machinery and CLI]
+
+### Documentation
+
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
+- Set kubelet option `--volume-stats-agg-period` to negative value to disable volume calculations. ([#96675](https://github.com/kubernetes/kubernetes/pull/96675), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
+
+### Bug or Regression
+
+- Clean ReplicaSet by revision instead of creation timestamp in deployment controller ([#97407](https://github.com/kubernetes/kubernetes/pull/97407), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
+- Ensure that client-go's EventBroadcaster is safe (non-racy) during shutdown. ([#95664](https://github.com/kubernetes/kubernetes/pull/95664), [@DirectXMan12](https://github.com/DirectXMan12)) [SIG API Machinery]
+- Fix azure file migration issue ([#97877](https://github.com/kubernetes/kubernetes/pull/97877), [@andyzhangx](https://github.com/andyzhangx)) [SIG Auth, Cloud Provider and Storage]
+- Fix kubelet from panic after getting the wrong signal ([#98200](https://github.com/kubernetes/kubernetes/pull/98200), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fix repeatedly acquire the inhibit lock ([#98088](https://github.com/kubernetes/kubernetes/pull/98088), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fixed a bug that the kubelet cannot start on BtrfS. ([#98042](https://github.com/kubernetes/kubernetes/pull/98042), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Fixed an issue with garbage collection failing to clean up namespaced children of an object also referenced incorrectly by cluster-scoped children ([#98068](https://github.com/kubernetes/kubernetes/pull/98068), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
+- Fixed no effect namespace when exposing deployment with --dry-run=client. ([#97492](https://github.com/kubernetes/kubernetes/pull/97492), [@masap](https://github.com/masap)) [SIG CLI]
+- Fixing a bug where a failed node may not have the NoExecute taint set correctly ([#96876](https://github.com/kubernetes/kubernetes/pull/96876), [@howieyuen](https://github.com/howieyuen)) [SIG Apps and Node]
+- Indentation of `Resource Quota` block in kubectl describe namespaces output gets correct. ([#97946](https://github.com/kubernetes/kubernetes/pull/97946), [@dty1er](https://github.com/dty1er)) [SIG CLI]
+- KUBECTL_EXTERNAL_DIFF now accepts equal sign for additional parameters. ([#98158](https://github.com/kubernetes/kubernetes/pull/98158), [@dougsland](https://github.com/dougsland)) [SIG CLI]
+- Kubeadm: fix a bug where "kubeadm join" would not properly handle missing names for existing etcd members. ([#97372](https://github.com/kubernetes/kubernetes/pull/97372), [@ihgann](https://github.com/ihgann)) [SIG Cluster Lifecycle]
+- Kubelet should ignore cgroup driver check on Windows node. ([#97764](https://github.com/kubernetes/kubernetes/pull/97764), [@pacoxu](https://github.com/pacoxu)) [SIG Node and Windows]
+- Make podTopologyHints protected by lock ([#95111](https://github.com/kubernetes/kubernetes/pull/95111), [@choury](https://github.com/choury)) [SIG Node]
+- Readjust kubelet_containers_per_pod_count bucket ([#98169](https://github.com/kubernetes/kubernetes/pull/98169), [@wawa0210](https://github.com/wawa0210)) [SIG Instrumentation and Node]
+- Scores from InterPodAffinity have stronger differentiation. ([#98096](https://github.com/kubernetes/kubernetes/pull/98096), [@leileiwan](https://github.com/leileiwan)) [SIG Scheduling]
+- Specifying the KUBE_TEST_REPO environment variable when e2e tests are executed will instruct the test infrastructure to load that image from a location within the specified repo, using a predefined pattern. ([#93510](https://github.com/kubernetes/kubernetes/pull/93510), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- Static pods will be deleted gracefully. ([#98103](https://github.com/kubernetes/kubernetes/pull/98103), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Use network.Interface.VirtualMachine.ID to get the binded VM
+  Skip standalone VM when reconciling LoadBalancer ([#97635](https://github.com/kubernetes/kubernetes/pull/97635), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+
+### Other (Cleanup or Flake)
+
+- Kubeadm: change the default image repository for CI images from 'gcr.io/kubernetes-ci-images' to 'gcr.io/k8s-staging-ci-images' ([#97087](https://github.com/kubernetes/kubernetes/pull/97087), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Migrate generic_scheduler.go and types.go to structured logging. ([#98134](https://github.com/kubernetes/kubernetes/pull/98134), [@tanjing2020](https://github.com/tanjing2020)) [SIG Scheduling]
+- Migrate proxy/winuserspace/proxier.go logs to structured logging ([#97941](https://github.com/kubernetes/kubernetes/pull/97941), [@JornShen](https://github.com/JornShen)) [SIG Network]
+- Migrate staging/src/k8s.io/apiserver/pkg/audit/policy/reader.go logs to structured logging. ([#98252](https://github.com/kubernetes/kubernetes/pull/98252), [@lala123912](https://github.com/lala123912)) [SIG API Machinery and Auth]
+- Migrate staging\src\k8s.io\apiserver\pkg\endpoints logs to  structured logging ([#98093](https://github.com/kubernetes/kubernetes/pull/98093), [@lala123912](https://github.com/lala123912)) [SIG API Machinery]
+- Node ([#96552](https://github.com/kubernetes/kubernetes/pull/96552), [@pandaamanda](https://github.com/pandaamanda)) [SIG Apps, Cloud Provider, Node and Scheduling]
+- The kubectl alpha debug command was scheduled to be removed in v1.21. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Update cri-tools to [v1.20.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.20.0) ([#97967](https://github.com/kubernetes/kubernetes/pull/97967), [@rajibmitra](https://github.com/rajibmitra)) [SIG Cloud Provider]
+- Windows nodes on GCE will take longer to start due to dependencies installed at node creation time. ([#98284](https://github.com/kubernetes/kubernetes/pull/98284), [@pjh](https://github.com/pjh)) [SIG Cloud Provider]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- github.com/google/cadvisor: [v0.38.6 → v0.38.7](https://github.com/google/cadvisor/compare/v0.38.6...v0.38.7)
+- k8s.io/gengo: 83324d8 → b6c5ce2
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.21.0-alpha.1
+
+
+## Downloads for v1.21.0-alpha.1
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes.tar.gz) | b2bacd5c3fc9f829e6269b7d2006b0c6e464ff848bb0a2a8f2fe52ad2d7c4438f099bd8be847d8d49ac6e4087f4d74d5c3a967acd798e0b0cb4d7a2bdb122997
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-src.tar.gz) | 518ac5acbcf23902fb1b902b69dbf3e86deca5d8a9b5f57488a15f185176d5a109558f3e4df062366af874eca1bcd61751ee8098b0beb9bcdc025d9a1c9be693
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | eaa7aea84a5ed954df5ec710cbeb6ec88b46465f43cb3d09aabe2f714b84a050a50bf5736089f09dbf1090f2e19b44823d656c917e3c8c877630756c3026f2b6
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-386.tar.gz) | 47f74b8d46ad1779c5b0b5f15aa15d5513a504eeb6f53db4201fbe9ff8956cb986b7c1b0e9d50a99f78e9e2a7f304f3fc1cc2fa239296d9a0dd408eb6069e975
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | 1a148e282628b008c8abd03dd12ec177ced17584b5115d92cd33dd251e607097d42e9da8c7089bd947134b900f85eb75a4740b6a5dd580c105455b843559df39
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | d13d2feb73bd032dc01f7e2955b98d8215a39fe1107d037a73fa1f7d06c3b93ebaa53ed4952d845c64454ef3cca533edb97132d234d50b6fb3bcbd8a8ad990eb
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | 8252105a17b09a78e9ad2c024e4e401a69764ac869708a071aaa06f81714c17b9e7c5b2eb8efde33f24d0b59f75c5da607d5e1e72bdf12adfbb8c829205cd1c1
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | 297a9082df4988389dc4be30eb636dff49f36f5d87047bab44745884e610f46a17ae3a08401e2cab155b7c439f38057bfd8288418215f7dd3bf6a49dbe61ea0e
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | 04c06490dd17cd5dccfd92bafa14acf64280ceaea370d9635f23aeb6984d1beae6d0d1d1506edc6f30f927deeb149b989d3e482b47fbe74008b371f629656e79
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-windows-386.tar.gz) | ec6e9e87a7d685f8751d7e58f24f417753cff5554a7229218cb3a08195d461b2e12409344950228e9fbbc92a8a06d35dd86242da6ff1e6652ec1fae0365a88c1
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | 51039e6221d3126b5d15e797002ae01d4f0b10789c5d2056532f27ef13f35c5a2e51be27764fda68e8303219963126559023aed9421313bec275c0827fbcaf8a
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | 4edf820930c88716263560275e3bd7fadb8dc3700b9f8e1d266562e356e0abeb1a913f536377dab91218e3940b447d6bf1da343b85da25c2256dc4dcde5798dd
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | b15213e53a8ab4ba512ce6ef9ad42dd197d419c61615cd23de344227fd846c90448d8f3d98e555b63ba5b565afa627cca6b7e3990ebbbba359c96f2391302df1
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | 5be29cca9a9358fc68351ee63e99d57dc2ffce6e42fc3345753dbbf7542ff2d770c4852424158540435fa6e097ce3afa9b13affc40c8b3b69fe8406798f8068f
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | 89fd99ab9ce85db0b94b86709932105efc883cc93959cf7ea9a39e79a4acea23064d7010eeb577450cccabe521c04b7ba47bbec212ed37edeed7cb04bad34518
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | 2fbc30862c77d247aa8d96ab9d1a144599505287b0033a3a2d0988958e7bb2f2e8b67f52c1fec74b4ec47d74ba22cd0f6cb5c4228acbaa72b1678d5fece0254d
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | 95658d321a0a371c0900b401d1469d96915310afbc4e4b9b11f031438bb188513b57d5a60b5316c3b0c18f541cda6f0ac42f59a76495f8abc743a067115da23a
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | f375acfb42aad6c65b833c270e7e3acfe9cd1d6b2441c33874e77faae263957f7acfe86f1b71f14298118595e4cc6952c7dea0c832f7f2e72428336f13034362
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | 43b4baccd58d74e7f48d096ab92f2bbbcdf47e30e7a3d2b56c6cc9f90002cfd4fefaac894f69bd5f9f4dbdb09a4749a77eb76b1b97d91746bd96fe94457879ab
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | e7962b522c6c7c14b9ee4c1d254d8bdd9846b2b33b0443fc9c4a41be6c40e5e6981798b720f0148f36263d5cc45d5a2bb1dd2f9ab2838e3d002e45b9bddeb7bf
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | 49ebc97f01829e65f7de15be00b882513c44782eaadd1b1825a227e3bd3c73cc6aca8345af05b303d8c43aa2cb944a069755b2709effb8cc22eae621d25d4ba5
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | 6e0fd7724b09e6befbcb53b33574e97f2db089f2eee4bbf391abb7f043103a5e6e32e3014c0531b88f9a3ca88887bbc68625752c44326f98dd53adb3a6d1bed8
+
+## Changelog since v1.20.0
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Kube-proxy's IPVS proxy mode no longer sets the net.ipv4.conf.all.route_localnet sysctl parameter. Nodes upgrading will have net.ipv4.conf.all.route_localnet set to 1 but new nodes will inherit the system default (usually 0). If you relied on any behavior requiring net.ipv4.conf.all.route_localnet, you must set ensure it is enabled as kube-proxy will no longer set it automatically. This change helps to further mitigate CVE-2020-8558. ([#92938](https://github.com/kubernetes/kubernetes/pull/92938), [@lbernail](https://github.com/lbernail)) [SIG Network and Release]
+ 
+## Changes by Kind
+
+### Deprecation
+
+- Deprecate the `topologyKeys` field in Service. This capability will be replaced with upcoming work around Topology Aware Subsetting and Service Internal Traffic Policy. ([#96736](https://github.com/kubernetes/kubernetes/pull/96736), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
+- Kubeadm: deprecated command "alpha selfhosting pivot" is removed now. ([#97627](https://github.com/kubernetes/kubernetes/pull/97627), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: graduate the command `kubeadm alpha kubeconfig user` to `kubeadm kubeconfig user`. The `kubeadm alpha kubeconfig user` command is deprecated now. ([#97583](https://github.com/kubernetes/kubernetes/pull/97583), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: the "kubeadm alpha certs" command is removed now, please use "kubeadm certs" instead. ([#97706](https://github.com/kubernetes/kubernetes/pull/97706), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Remove the deprecated metrics "scheduling_algorithm_preemption_evaluation_seconds" and "binding_duration_seconds", suggest to use "scheduler_framework_extension_point_duration_seconds" instead. ([#96447](https://github.com/kubernetes/kubernetes/pull/96447), [@chendave](https://github.com/chendave)) [SIG Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- The PodSecurityPolicy API is deprecated in 1.21, and will no longer be served starting in 1.25. ([#97171](https://github.com/kubernetes/kubernetes/pull/97171), [@deads2k](https://github.com/deads2k)) [SIG Auth and CLI]
+
+### API Change
+
+- Change the APIVersion proto name of BoundObjectRef from aPIVersion to apiVersion. ([#97379](https://github.com/kubernetes/kubernetes/pull/97379), [@kebe7jun](https://github.com/kebe7jun)) [SIG Auth]
+- Promote Immutable Secrets/ConfigMaps feature to Stable.
+  This allows to set `Immutable` field in Secrets or ConfigMap object to mark their contents as immutable. ([#97615](https://github.com/kubernetes/kubernetes/pull/97615), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Architecture, Node and Testing]
+
+### Feature
+
+- Add flag --lease-max-object-size and metric etcd_lease_object_counts for kube-apiserver to config and observe max objects attached to a single etcd lease. ([#97480](https://github.com/kubernetes/kubernetes/pull/97480), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery, Instrumentation and Scalability]
+- Add flag --lease-reuse-duration-seconds for kube-apiserver to config etcd lease reuse duration. ([#97009](https://github.com/kubernetes/kubernetes/pull/97009), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery and Scalability]
+- Adds the ability to pass --strict-transport-security-directives to the kube-apiserver to set the HSTS header appropriately.  Be sure you understand the consequences to browsers before setting this field. ([#96502](https://github.com/kubernetes/kubernetes/pull/96502), [@249043822](https://github.com/249043822)) [SIG Auth]
+- Kubeadm now includes CoreDNS v1.8.0. ([#96429](https://github.com/kubernetes/kubernetes/pull/96429), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubeadm: add support for certificate chain validation. When using kubeadm in external CA mode, this allows an intermediate CA to be used to sign the certificates. The intermediate CA certificate must be appended to each signed certificate for this to work correctly. ([#97266](https://github.com/kubernetes/kubernetes/pull/97266), [@robbiemcmichael](https://github.com/robbiemcmichael)) [SIG Cluster Lifecycle]
+- Kubeadm: amend the node kernel validation to treat CGROUP_PIDS, FAIR_GROUP_SCHED as required and CFS_BANDWIDTH, CGROUP_HUGETLB as optional ([#96378](https://github.com/kubernetes/kubernetes/pull/96378), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
+- The Kubernetes pause image manifest list now contains an image for Windows Server 20H2. ([#97322](https://github.com/kubernetes/kubernetes/pull/97322), [@claudiubelu](https://github.com/claudiubelu)) [SIG Windows]
+- The apimachinery util/net function used to detect the bind address `ResolveBindAddress()`
+  takes into consideration global ip addresses on loopback interfaces when:
+      - the host has default routes
+      - there are no global IPs on those interfaces.
+  in order to support more complex network scenarios like BGP Unnumbered RFC 5549 ([#95790](https://github.com/kubernetes/kubernetes/pull/95790), [@aojea](https://github.com/aojea)) [SIG Network]
+
+### Bug or Regression
+
+- ## Changelog
+  
+  ### General
+  - Fix priority expander falling back to a random choice even though there is a higher priority option to choose
+  - Clone `kubernetes/kubernetes` in `update-vendor.sh` shallowly, instead of fetching all revisions
+  - Speed up binpacking by reducing the number of PreFilter calls (call once per pod instead of #pods*#nodes times)
+  - Speed up finding unneeded nodes by 5x+ in very large clusters by reducing the number of PreFilter calls
+  - Expose `--max-nodes-total` as a metric
+  - Errors in `IncreaseSize` changed from type `apiError` to `cloudProviderError`
+  - Make `build-in-docker` and `test-in-docker` work on Linux systems with SELinux enabled
+  - Fix an error where existing nodes were not considered as destinations while finding place for pods in scale-down simulations
+  - Remove redundant log lines and reduce severity around parsing kubeEnv
+  - Don't treat nodes created by virtual kubelet as nodes from non-autoscaled node groups
+  - Remove redundant logging around calculating node utilization
+  - Add configurable `--network` and `--rm` flags for docker in `Makefile`
+  - Subtract DaemonSet pods' requests from node allocatable in the denominator while computing node utilization
+  - Include taints by condition when determining if a node is unready/still starting
+  - Fix `update-vendor.sh` to work on OSX and zsh
+  - Add best-effort eviction for DaemonSet pods while scaling down non-empty nodes
+  - Add build support for ARM64
+  
+  ### AliCloud
+  - Add missing daemonsets and replicasets to ALI example cluster role
+  
+  ### Apache CloudStack
+  - Add support for Apache CloudStack
+  
+  ### AWS
+  - Regenerate list of EC2 instances
+  - Fix pricing endpoint in AWS China Region
+  
+  ### Azure
+  - Add optional jitter on initial VMSS VM cache refresh, keep the refreshes spread over time
+  - Serve from cache for the whole period of ongoing throttling
+  - Fix unwanted VMSS VMs cache invalidations
+  - Enforce setting the number of retries if cloud provider backoff is enabled
+  - Don't update capacity if VMSS provisioning state is updating
+  - Support allocatable resources overrides via VMSS tags
+  - Add missing stable labels in template nodes
+  - Proactively set instance status to deleting on node deletions
+  
+  ### Cluster API
+  - Migrate interaction with the API from using internal types to using Unstructured
+  - Improve tests to work better with constrained resources
+  - Add support for node autodiscovery
+  - Add support for `--cloud-config`
+  - Update group identifier to use for Cluster API annotations
+  
+  ### Exoscale
+  - Add support for Exoscale
+  
+  ### GCE
+  - Decrease the number of GCE Read Requests made while deleting nodes
+  - Base pricing of custom instances on their instance family type
+  - Add pricing information for missing machine types
+  - Add pricing information for different GPU types
+  - Ignore the new `topology.gke.io/zone` label when comparing groups
+  - Add missing stable labels to template nodes
+  
+  ### HuaweiCloud
+  - Add auto scaling group support
+  - Implement node group by AS
+  - Implement getting desired instance number of node group
+  - Implement increasing node group size
+  - Implement TemplateNodeInfo
+  - Implement caching instances
+  
+  ### IONOS
+  - Add support for IONOS
+  
+  ### Kubemark
+  - Skip non-kubemark nodes while computing node infos for node groups.
+  
+  ### Magnum
+  - Add Magnum support in the Cluster Autoscaler helm chart
+  
+  ### Packet
+  - Allow empty nodepools
+  - Add support for multiple nodepools
+  - Add pricing support
+  
+  ## Image
+  Image: `k8s.gcr.io/autoscaling/cluster-autoscaler:v1.20.0` ([#97011](https://github.com/kubernetes/kubernetes/pull/97011), [@towca](https://github.com/towca)) [SIG Cloud Provider]
+- AcceleratorStats will be available in the Summary API of kubelet when cri_stats_provider is used. ([#96873](https://github.com/kubernetes/kubernetes/pull/96873), [@ruiwen-zhao](https://github.com/ruiwen-zhao)) [SIG Node]
+- Add limited lines to log when having tail option ([#93920](https://github.com/kubernetes/kubernetes/pull/93920), [@zhouya0](https://github.com/zhouya0)) [SIG Node]
+- Avoid systemd-logind loading configuration warning ([#97950](https://github.com/kubernetes/kubernetes/pull/97950), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Cloud-controller-manager: routes controller should not depend on --allocate-node-cidrs ([#97029](https://github.com/kubernetes/kubernetes/pull/97029), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider and Testing]
+- Copy annotations with empty value when deployment rolls back ([#94858](https://github.com/kubernetes/kubernetes/pull/94858), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
+- Detach volumes from vSphere nodes not tracked by attach-detach controller ([#96689](https://github.com/kubernetes/kubernetes/pull/96689), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- Fix kubectl label error when local=true is set. ([#97440](https://github.com/kubernetes/kubernetes/pull/97440), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Fix Azure file share not deleted issue when the namespace is deleted ([#97417](https://github.com/kubernetes/kubernetes/pull/97417), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fix CVE-2020-8555 for Gluster client connections. ([#97922](https://github.com/kubernetes/kubernetes/pull/97922), [@liggitt](https://github.com/liggitt)) [SIG Storage]
+- Fix counting error in service/nodeport/loadbalancer quota check ([#97451](https://github.com/kubernetes/kubernetes/pull/97451), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Network and Testing]
+- Fix kubectl-convert import known versions ([#97754](https://github.com/kubernetes/kubernetes/pull/97754), [@wzshiming](https://github.com/wzshiming)) [SIG CLI and Testing]
+- Fix missing cadvisor machine metrics. ([#97006](https://github.com/kubernetes/kubernetes/pull/97006), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node]
+- Fix nil VMSS name when setting service to auto mode ([#97366](https://github.com/kubernetes/kubernetes/pull/97366), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable ([#95269](https://github.com/kubernetes/kubernetes/pull/95269), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
+- Fix the regression with the slow pods termination. Before this fix pods may take an additional time to terminate - up to one minute. Reversing the change that ensured that CNI resources cleaned up when the pod is removed on API server. ([#97980](https://github.com/kubernetes/kubernetes/pull/97980), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Node]
+- Fix to recover CSI volumes from certain dangling attachments ([#96617](https://github.com/kubernetes/kubernetes/pull/96617), [@yuga711](https://github.com/yuga711)) [SIG Apps and Storage]
+- Fix: azure file latency issue for metadata-heavy workloads ([#97082](https://github.com/kubernetes/kubernetes/pull/97082), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fixed Cinder volume IDs on OpenStack Train ([#96673](https://github.com/kubernetes/kubernetes/pull/96673), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider]
+- Fixed FibreChannel volume plugin corrupting filesystems on detach of multipath volumes. ([#97013](https://github.com/kubernetes/kubernetes/pull/97013), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed a bug in kubelet that will saturate CPU utilization after containerd got restarted. ([#97174](https://github.com/kubernetes/kubernetes/pull/97174), [@hanlins](https://github.com/hanlins)) [SIG Node]
+- Fixed bug in CPUManager with race on container map access ([#97427](https://github.com/kubernetes/kubernetes/pull/97427), [@klueska](https://github.com/klueska)) [SIG Node]
+- Fixed cleanup of block devices when /var/lib/kubelet is a symlink. ([#96889](https://github.com/kubernetes/kubernetes/pull/96889), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- GCE Internal LoadBalancer sync loop will now release the ILB IP address upon sync failure. An error in ILB forwarding rule creation will no longer leak IP addresses. ([#97740](https://github.com/kubernetes/kubernetes/pull/97740), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider and Network]
+- Ignore update pod with no new images in alwaysPullImages admission controller ([#96668](https://github.com/kubernetes/kubernetes/pull/96668), [@pacoxu](https://github.com/pacoxu)) [SIG Apps, Auth and Node]
+- Kubeadm now installs version 3.4.13 of etcd when creating a cluster with v1.19 ([#97244](https://github.com/kubernetes/kubernetes/pull/97244), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubeadm: avoid detection of the container runtime for commands that do not need it ([#97625](https://github.com/kubernetes/kubernetes/pull/97625), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug in the host memory detection code on 32bit Linux platforms ([#97403](https://github.com/kubernetes/kubernetes/pull/97403), [@abelbarrera15](https://github.com/abelbarrera15)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where "kubeadm upgrade" commands can fail if CoreDNS v1.8.0 is installed. ([#97919](https://github.com/kubernetes/kubernetes/pull/97919), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Performance regression [#97685](https://github.com/kubernetes/kubernetes/issues/97685) has been fixed. ([#97860](https://github.com/kubernetes/kubernetes/pull/97860), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
+- Remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
+- The current version of the container image publicly exposed IP serving a /metrics endpoint to the Internet. The new version of the container image serves /metrics endpoint on a different port. ([#97621](https://github.com/kubernetes/kubernetes/pull/97621), [@vbannai](https://github.com/vbannai)) [SIG Cloud Provider]
+- Use force unmount for NFS volumes if regular mount fails after 1 minute timeout ([#96844](https://github.com/kubernetes/kubernetes/pull/96844), [@gnufied](https://github.com/gnufied)) [SIG Storage]
+- Users will see increase in time for deletion of pods and also guarantee that removal of pod from api server  would mean deletion of all the resources from container runtime. ([#92817](https://github.com/kubernetes/kubernetes/pull/92817), [@kmala](https://github.com/kmala)) [SIG Node]
+- Using exec auth plugins with kubectl no longer results in warnings about constructing many client instances from the same exec auth config. ([#97857](https://github.com/kubernetes/kubernetes/pull/97857), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Auth]
+- Warning about using a deprecated volume plugin is logged only once. ([#96751](https://github.com/kubernetes/kubernetes/pull/96751), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+
+### Other (Cleanup or Flake)
+
+- Bump github.com/Azure/go-autorest/autorest to v0.11.12 ([#97033](https://github.com/kubernetes/kubernetes/pull/97033), [@patrickshan](https://github.com/patrickshan)) [SIG API Machinery, CLI, Cloud Provider and Cluster Lifecycle]
+- Delete deprecated mixed protocol annotation ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Kube-proxy: Traffic from the cluster directed to ExternalIPs is always sent directly to the Service. ([#96296](https://github.com/kubernetes/kubernetes/pull/96296), [@aojea](https://github.com/aojea)) [SIG Network and Testing]
+- Kubeadm: fix a whitespace issue in the output of the "kubeadm join" command shown as the output of "kubeadm init" and "kubeadm token create --print-join-command" ([#97413](https://github.com/kubernetes/kubernetes/pull/97413), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubeadm: improve the error messaging when the user provides an invalid discovery token CA certificate hash. ([#97290](https://github.com/kubernetes/kubernetes/pull/97290), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Migrate log messages in pkg/scheduler/{scheduler.go,factory.go} to structured logging ([#97509](https://github.com/kubernetes/kubernetes/pull/97509), [@aldudko](https://github.com/aldudko)) [SIG Scheduling]
+- Migrate proxy/iptables/proxier.go logs to structured logging ([#97678](https://github.com/kubernetes/kubernetes/pull/97678), [@JornShen](https://github.com/JornShen)) [SIG Network]
+- Migrate some scheduler log messages to structured logging ([#97349](https://github.com/kubernetes/kubernetes/pull/97349), [@aldudko](https://github.com/aldudko)) [SIG Scheduling]
+- NONE ([#97167](https://github.com/kubernetes/kubernetes/pull/97167), [@geegeea](https://github.com/geegeea)) [SIG Node]
+- NetworkPolicy validation framework optimizations for rapidly verifying CNI's work correctly across several pods and namespaces ([#91592](https://github.com/kubernetes/kubernetes/pull/91592), [@jayunit100](https://github.com/jayunit100)) [SIG Network, Storage and Testing]
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97618](https://github.com/kubernetes/kubernetes/pull/97618), [@jherrera123](https://github.com/jherrera123)) [SIG Release and Testing]
+- Scheduler plugin validation now provides all errors detected instead of the first one. ([#96745](https://github.com/kubernetes/kubernetes/pull/96745), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node, Scheduling and Testing]
+- Storage related e2e testsuite redesign & cleanup ([#96573](https://github.com/kubernetes/kubernetes/pull/96573), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Storage and Testing]
+- The OIDC authenticator no longer waits 10 seconds before attempting to fetch the metadata required to verify tokens. ([#97693](https://github.com/kubernetes/kubernetes/pull/97693), [@enj](https://github.com/enj)) [SIG API Machinery and Auth]
+- The `AttachVolumeLimit` feature gate that is GA since v1.17 is now removed. ([#96539](https://github.com/kubernetes/kubernetes/pull/96539), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Storage]
+- The `CSINodeInfo` feature gate that is GA since v1.17 is unconditionally enabled, and can no longer be specified via the `--feature-gates` argument. ([#96561](https://github.com/kubernetes/kubernetes/pull/96561), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps, Auth, Scheduling, Storage and Testing]
+- The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavinfish](https://github.com/gavinfish)) [SIG Node, Scheduling and Storage]
+- `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior`(locked to false) features have been promoted to GA. 
+  To prevent control plane nodes being added to load balancers automatically, upgrade users need to add "node.kubernetes.io/exclude-from-external-load-balancers"  label to control plane nodes. ([#97543](https://github.com/kubernetes/kubernetes/pull/97543), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Apps, Cloud Provider and Network]
+
+### Uncategorized
+
+- Adding Brazilian Portuguese translation for kubectl ([#61595](https://github.com/kubernetes/kubernetes/pull/61595), [@cpanato](https://github.com/cpanato)) [SIG CLI]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
+- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
+- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
+- github.com/google/cadvisor: [v0.38.5 → v0.38.6](https://github.com/google/cadvisor/compare/v0.38.5...v0.38.6)
+- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
+- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
+- k8s.io/system-validators: v1.2.0 → v1.3.0
+
+### Removed
+- rsc.io/quote/v3: v3.1.0
+- rsc.io/sampler: v1.3.0

From e955fd5d0f7f4983d83e511a22be139bb90da2b3 Mon Sep 17 00:00:00 2001
From: Rey Lejano <rlejano@gmail.com>
Date: Thu, 8 Apr 2021 13:30:49 -0700
Subject: [PATCH 501/788] update config.toml

---
 config.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.toml b/config.toml
index f4922ef075..170e6b1091 100644
--- a/config.toml
+++ b/config.toml
@@ -189,7 +189,7 @@ fullversion = "v1.20.5"
 version = "v1.20"
 githubbranch = "v1.20.5"
 docsbranch = "release-1.20"
-url = "https://v1-20.kubernetes.io"
+url = "https://v1-20.docs.kubernetes.io"
 
 [[params.versions]]
 fullversion = "v1.19.9"

From ff6aa6e3b4751df431ec7121f4f009e66e04cec4 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sat, 3 Apr 2021 16:43:49 +0100
Subject: [PATCH 502/788] Mention API extensibility as a front-page feature

Kubernetes has really good options for extending and customizing its
behavior. Mention these right on the front page.
---
 content/en/docs/concepts/extend-kubernetes/_index.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/content/en/docs/concepts/extend-kubernetes/_index.md b/content/en/docs/concepts/extend-kubernetes/_index.md
index cc5ba809ec..a2d24e3cb2 100644
--- a/content/en/docs/concepts/extend-kubernetes/_index.md
+++ b/content/en/docs/concepts/extend-kubernetes/_index.md
@@ -7,6 +7,10 @@ reviewers:
 - lavalamp
 - cheftako
 - chenopis
+feature:
+  title: Designed for extensibility
+  description: >
+    Add features to your Kubernetes cluster without changing upstream source code.
 content_type: concept
 no_list: true
 ---

From d2c9a401396e6732157e54d1391747bcb36d62a2 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 6 Apr 2021 19:19:16 +0100
Subject: [PATCH 503/788] Document Pod name label for StatefulSet

Add a missing well-known label to our list.
---
 .../en/docs/reference/labels-annotations-taints.md   | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 08861e5811..d2dc4359aa 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -99,6 +99,18 @@ See [topology.kubernetes.io/zone](#topologykubernetesiozone).
 
 {{< note >}} Starting in v1.17, this label is deprecated in favor of [topology.kubernetes.io/zone](#topologykubernetesiozone). {{< /note >}}
 
+## statefulset.kubernetes.io/pod-name {#statefulsetkubernetesiopod-name}
+
+Example:
+
+`statefulset.kubernetes.io/pod-name=mystatefulset-7`
+
+When a StatefulSet controller creates a Pod for the StatefulSet, the control plane
+sets this label on that Pod. The value of the label is the name of the Pod being created.
+
+See [Pod Name Label](/docs/concepts/workloads/controllers/statefulset/#pod-name-label) in the
+StatefulSet topic for more details.
+
 ## topology.kubernetes.io/region {#topologykubernetesioregion}
 
 Example:

From 6214d894455a5cc7af77ada09b976970fa063df7 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sun, 28 Mar 2021 20:04:57 +0100
Subject: [PATCH 504/788] Run local container previews with minimal privileges

---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index 12b6f67d5a..b905a1c337 100644
--- a/Makefile
+++ b/Makefile
@@ -68,7 +68,7 @@ container-build: module-check
 	$(CONTAINER_RUN) --read-only --mount type=tmpfs,destination=/tmp,tmpfs-mode=01777 $(CONTAINER_IMAGE) sh -c "npm ci && hugo --minify"
 
 container-serve: module-check ## Boot the development server using container. Run `make container-image` before this.
-	$(CONTAINER_RUN) --read-only --mount type=tmpfs,destination=/tmp,tmpfs-mode=01777 -p 1313:1313 $(CONTAINER_IMAGE) hugo server --buildFuture --bind 0.0.0.0 --destination /tmp/hugo --cleanDestinationDir
+	$(CONTAINER_RUN) --cap-drop=ALL --cap-add=AUDIT_WRITE --read-only --mount type=tmpfs,destination=/tmp,tmpfs-mode=01777 -p 1313:1313 $(CONTAINER_IMAGE) hugo server --buildFuture --bind 0.0.0.0 --destination /tmp/hugo --cleanDestinationDir
 
 test-examples:
 	scripts/test_examples.sh install

From d6589e0ce3d4265ac311f6e381d7bb4eeb70a0d2 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sat, 3 Apr 2021 17:05:03 +0100
Subject: [PATCH 505/788] =?UTF-8?q?Omit=20=E2=80=9CEdit=20this=20page?=
 =?UTF-8?q?=E2=80=9D=20links=20for=20generated=20content?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Copy the page meta links template from the Docsy theme, and adapt it to only
suggest editing pages that aren't autogenerated.
---
 layouts/partials/page-meta-links.html | 41 +++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 layouts/partials/page-meta-links.html

diff --git a/layouts/partials/page-meta-links.html b/layouts/partials/page-meta-links.html
new file mode 100644
index 0000000000..97e84b55ae
--- /dev/null
+++ b/layouts/partials/page-meta-links.html
@@ -0,0 +1,41 @@
+{{/* template adapted from Docsy theme */}}
+{{ if .Path }}
+  {{ $pathFormatted := replace .Path "\\" "/" }}
+  {{ $gh_repo := ($.Param "github_repo") }}
+  {{ $gh_subdir := ($.Param "github_subdir") }}
+  {{ $gh_project_repo := ($.Param "github_project_repo") }}
+  {{ $gh_branch := (default "master" ($.Param "github_branch")) }}
+  <div class="td-page-meta ml-2 pb-1 pt-2 mb-0">
+  {{ if $gh_repo }}
+    {{ $gh_repo_path := printf "%s/content/%s" $gh_branch $pathFormatted }}
+    {{ if and ($gh_subdir) (.Site.Language.Lang) }}
+      {{ $gh_repo_path = printf "%s/%s/content/%s/%s" $gh_branch $gh_subdir ($.Site.Language.Lang) $pathFormatted }}
+    {{ else if .Site.Language.Lang }}
+      {{ $gh_repo_path = printf "%s/content/%s/%s" $gh_branch ($.Site.Language.Lang) $pathFormatted }}
+    {{ else if $gh_subdir }}
+      {{ $gh_repo_path = printf "%s/%s/content/%s" $gh_branch $gh_subdir $pathFormatted }}
+    {{ end }}
+    {{ $editURL := printf "%s/edit/%s" $gh_repo $gh_repo_path }}
+    {{ $createURL := printf "%s/edit/%s" $gh_repo $gh_repo_path }}
+    {{ $issuesURL := printf "%s/issues/new?title=%s" $gh_repo (htmlEscape $.Title )}}
+    {{ $newPageStub := resources.Get "stubs/new-page-template.md" }}
+    {{ $newPageQS := querify "value" $newPageStub.Content "filename" "change-me.md" | safeURL }}
+    {{ $newPageURL := printf "%s/new/%s?%s"  $gh_repo $gh_repo_path $newPageQS }}
+
+    {{ if not (.Param "auto_generated") }}
+    <a href="{{ $editURL }}" target="_blank"><i class="fa fa-edit fa-fw"></i> {{ T "post_edit_this" }}</a>
+    <a href="{{ $newPageURL }}" target="_blank"><i class="fa fa-edit fa-fw"></i> {{ T "post_create_child_page" }}</a>
+    {{ end }}
+
+    <a href="{{ $issuesURL }}" target="_blank"><i class="fab fa-github fa-fw"></i> {{ T "post_create_issue" }}</a>
+    {{ if $gh_project_repo }}
+      {{ $project_issueURL := printf "%s/issues/new" $gh_project_repo }}
+      <a href="{{ $project_issueURL }}" target="_blank"><i class="fas fa-tasks fa-fw"></i> {{ T "post_create_project_issue" }}</a>
+    {{ end }}
+
+  {{ end }}
+  {{ with .CurrentSection.AlternativeOutputFormats.Get "print" }}
+    <a id="print" href="{{ .Permalink | safeURL }}"><i class="fa fa-print fa-fw"></i> {{ T "print_entire_section" }}</a>
+  {{ end }}
+  </div>
+{{ end }}

From c5bab50cafa5a0694a2eb16eb59eb0f11188b406 Mon Sep 17 00:00:00 2001
From: Han Kang <hankang@google.com>
Date: Mon, 5 Apr 2021 12:42:28 -0700
Subject: [PATCH 506/788] add back the link to stable metrics list

---
 .../en/docs/concepts/cluster-administration/system-metrics.md    | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/concepts/cluster-administration/system-metrics.md b/content/en/docs/concepts/cluster-administration/system-metrics.md
index 9852f9cc99..bfcfec9ecb 100644
--- a/content/en/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/en/docs/concepts/cluster-administration/system-metrics.md
@@ -174,4 +174,5 @@ Here is an example:
 ## {{% heading "whatsnext" %}}
 
 * Read about the [Prometheus text format](https://github.com/prometheus/docs/blob/master/content/docs/instrumenting/exposition_formats.md#text-based-format) for metrics
+* See the list of [stable Kubernetes metrics](https://github.com/kubernetes/kubernetes/blob/master/test/instrumentation/testdata/stable-metrics-list.yaml)
 * Read about the [Kubernetes deprecation policy](/docs/reference/using-api/deprecation-policy/#deprecating-a-feature-or-behavior)

From 937f848340bf5362ddbf183933a0d4dbf1d4574a Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Fri, 9 Apr 2021 08:47:00 +0800
Subject: [PATCH 507/788] API reference for v1.21

---
 .../generated/kubernetes-api/v1.21/index.html | 1129 +++++++++++------
 .../kubernetes-api/v1.21/js/navData.js        |    2 +-
 2 files changed, 774 insertions(+), 357 deletions(-)

diff --git a/static/docs/reference/generated/kubernetes-api/v1.21/index.html b/static/docs/reference/generated/kubernetes-api/v1.21/index.html
index ddab130403..8eee575dd4 100644
--- a/static/docs/reference/generated/kubernetes-api/v1.21/index.html
+++ b/static/docs/reference/generated/kubernetes-api/v1.21/index.html
@@ -25,35 +25,35 @@
  <LI class="nav-level-1"><A href="#container-v1-core" class="nav-item">Container v1 core</A></LI>
 </UL>
 <UL>
- <LI class="nav-level-1"><A href="#cronjob-v1beta1-batch" class="nav-item">CronJob v1beta1 batch</A></LI>
- <UL id="cronjob-v1beta1-batch-nav" style="display: none;">
+ <LI class="nav-level-1"><A href="#cronjob-v1-batch" class="nav-item">CronJob v1 batch</A></LI>
+ <UL id="cronjob-v1-batch-nav" style="display: none;">
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
-   <UL id="-strong-write-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#create-cronjob-v1beta1-batch" class="nav-item">Create</A></LI>
-    <LI class="nav-level-2"><A href="#patch-cronjob-v1beta1-batch" class="nav-item">Patch</A></LI>
-    <LI class="nav-level-2"><A href="#replace-cronjob-v1beta1-batch" class="nav-item">Replace</A></LI>
-    <LI class="nav-level-2"><A href="#delete-cronjob-v1beta1-batch" class="nav-item">Delete</A></LI>
-    <LI class="nav-level-2"><A href="#delete-collection-cronjob-v1beta1-batch" class="nav-item">Delete Collection</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-cronjob-v1-batch-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-cronjob-v1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-cronjob-v1-batch" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-cronjob-v1-batch" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-cronjob-v1-batch" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-cronjob-v1-batch" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-cronjob-v1-batch" class="nav-item">Delete Collection</A></LI>
    </UL>
   </UL>
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
-   <UL id="-strong-read-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#read-cronjob-v1beta1-batch" class="nav-item">Read</A></LI>
-    <LI class="nav-level-2"><A href="#list-cronjob-v1beta1-batch" class="nav-item">List</A></LI>
-    <LI class="nav-level-2"><A href="#list-all-namespaces-cronjob-v1beta1-batch" class="nav-item">List All Namespaces</A></LI>
-    <LI class="nav-level-2"><A href="#watch-cronjob-v1beta1-batch" class="nav-item">Watch</A></LI>
-    <LI class="nav-level-2"><A href="#watch-list-cronjob-v1beta1-batch" class="nav-item">Watch List</A></LI>
-    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-cronjob-v1beta1-batch" class="nav-item">Watch List All Namespaces</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-cronjob-v1-batch-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-cronjob-v1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-cronjob-v1-batch" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-cronjob-v1-batch" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-cronjob-v1-batch" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-cronjob-v1-batch" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-cronjob-v1-batch" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-cronjob-v1-batch" class="nav-item">Watch List All Namespaces</A></LI>
    </UL>
   </UL>
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-cronjob-v1beta1-batch-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
-   <UL id="-strong-status-operations-cronjob-v1beta1-batch-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#patch-status-cronjob-v1beta1-batch" class="nav-item">Patch Status</A></LI>
-    <LI class="nav-level-2"><A href="#read-status-cronjob-v1beta1-batch" class="nav-item">Read Status</A></LI>
-    <LI class="nav-level-2"><A href="#replace-status-cronjob-v1beta1-batch" class="nav-item">Replace Status</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-cronjob-v1-batch-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-cronjob-v1-batch-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-cronjob-v1-batch" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-cronjob-v1-batch" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-cronjob-v1-batch" class="nav-item">Replace Status</A></LI>
    </UL>
   </UL>
  </UL>
@@ -201,6 +201,14 @@
     <LI class="nav-level-2"><A href="#replace-status-pod-v1-core" class="nav-item">Replace Status</A></LI>
    </UL>
   </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-ephemeralcontainers-operations-pod-v1-core-strong-" class="nav-item"><STRONG>EphemeralContainers Operations</STRONG></A></LI>
+   <UL id="-strong-ephemeralcontainers-operations-pod-v1-core-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-ephemeralcontainers-pod-v1-core" class="nav-item">Patch EphemeralContainers</A></LI>
+    <LI class="nav-level-2"><A href="#read-ephemeralcontainers-pod-v1-core" class="nav-item">Read EphemeralContainers</A></LI>
+    <LI class="nav-level-2"><A href="#replace-ephemeralcontainers-pod-v1-core" class="nav-item">Replace EphemeralContainers</A></LI>
+   </UL>
+  </UL>
   <UL>
    <LI class="nav-level-2 strong-nav"><A href="#-strong-proxy-operations-pod-v1-core-strong-" class="nav-item"><STRONG>Proxy Operations</STRONG></A></LI>
    <UL id="-strong-proxy-operations-pod-v1-core-strong--nav" style="display: none;">
@@ -382,27 +390,27 @@
  </UL>
 </UL>
 <UL>
- <LI class="nav-level-1"><A href="#endpointslice-v1beta1-discovery-k8s-io" class="nav-item">EndpointSlice v1beta1 discovery.k8s.io</A></LI>
- <UL id="endpointslice-v1beta1-discovery-k8s-io-nav" style="display: none;">
+ <LI class="nav-level-1"><A href="#endpointslice-v1-discovery-k8s-io" class="nav-item">EndpointSlice v1 discovery.k8s.io</A></LI>
+ <UL id="endpointslice-v1-discovery-k8s-io-nav" style="display: none;">
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
-   <UL id="-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#create-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Create</A></LI>
-    <LI class="nav-level-2"><A href="#patch-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Patch</A></LI>
-    <LI class="nav-level-2"><A href="#replace-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Replace</A></LI>
-    <LI class="nav-level-2"><A href="#delete-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Delete</A></LI>
-    <LI class="nav-level-2"><A href="#delete-collection-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Delete Collection</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-endpointslice-v1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-endpointslice-v1-discovery-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-endpointslice-v1-discovery-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-endpointslice-v1-discovery-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-endpointslice-v1-discovery-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-endpointslice-v1-discovery-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-endpointslice-v1-discovery-k8s-io" class="nav-item">Delete Collection</A></LI>
    </UL>
   </UL>
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
-   <UL id="-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#read-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Read</A></LI>
-    <LI class="nav-level-2"><A href="#list-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">List</A></LI>
-    <LI class="nav-level-2"><A href="#list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">List All Namespaces</A></LI>
-    <LI class="nav-level-2"><A href="#watch-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch</A></LI>
-    <LI class="nav-level-2"><A href="#watch-list-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch List</A></LI>
-    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-endpointslice-v1-discovery-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-endpointslice-v1-discovery-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-endpointslice-v1-discovery-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-endpointslice-v1-discovery-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-endpointslice-v1-discovery-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-endpointslice-v1-discovery-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-endpointslice-v1-discovery-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-endpointslice-v1-discovery-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
    </UL>
   </UL>
  </UL>
@@ -674,6 +682,32 @@
   </UL>
  </UL>
 </UL>
+<UL>
+ <LI class="nav-level-1"><A href="#csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">CSIStorageCapacity v1beta1 storage.k8s.io</A></LI>
+ <UL id="csistoragecapacity-v1beta1-storage-k8s-io-nav" style="display: none;">
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Delete Collection</A></LI>
+   </UL>
+  </UL>
+  <UL>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">Watch List All Namespaces</A></LI>
+   </UL>
+  </UL>
+ </UL>
+</UL>
 <UL>
  <LI class="nav-level-1"><A href="#volume-v1-core" class="nav-item">Volume v1 core</A></LI>
 </UL>
@@ -931,35 +965,35 @@
  </UL>
 </UL>
 <UL>
- <LI class="nav-level-1"><A href="#poddisruptionbudget-v1beta1-policy" class="nav-item">PodDisruptionBudget v1beta1 policy</A></LI>
- <UL id="poddisruptionbudget-v1beta1-policy-nav" style="display: none;">
+ <LI class="nav-level-1"><A href="#poddisruptionbudget-v1-policy" class="nav-item">PodDisruptionBudget v1 policy</A></LI>
+ <UL id="poddisruptionbudget-v1-policy-nav" style="display: none;">
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
-   <UL id="-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#create-poddisruptionbudget-v1beta1-policy" class="nav-item">Create</A></LI>
-    <LI class="nav-level-2"><A href="#patch-poddisruptionbudget-v1beta1-policy" class="nav-item">Patch</A></LI>
-    <LI class="nav-level-2"><A href="#replace-poddisruptionbudget-v1beta1-policy" class="nav-item">Replace</A></LI>
-    <LI class="nav-level-2"><A href="#delete-poddisruptionbudget-v1beta1-policy" class="nav-item">Delete</A></LI>
-    <LI class="nav-level-2"><A href="#delete-collection-poddisruptionbudget-v1beta1-policy" class="nav-item">Delete Collection</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-write-operations-poddisruptionbudget-v1-policy-strong-" class="nav-item"><STRONG>Write Operations</STRONG></A></LI>
+   <UL id="-strong-write-operations-poddisruptionbudget-v1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#create-poddisruptionbudget-v1-policy" class="nav-item">Create</A></LI>
+    <LI class="nav-level-2"><A href="#patch-poddisruptionbudget-v1-policy" class="nav-item">Patch</A></LI>
+    <LI class="nav-level-2"><A href="#replace-poddisruptionbudget-v1-policy" class="nav-item">Replace</A></LI>
+    <LI class="nav-level-2"><A href="#delete-poddisruptionbudget-v1-policy" class="nav-item">Delete</A></LI>
+    <LI class="nav-level-2"><A href="#delete-collection-poddisruptionbudget-v1-policy" class="nav-item">Delete Collection</A></LI>
    </UL>
   </UL>
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
-   <UL id="-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#read-poddisruptionbudget-v1beta1-policy" class="nav-item">Read</A></LI>
-    <LI class="nav-level-2"><A href="#list-poddisruptionbudget-v1beta1-policy" class="nav-item">List</A></LI>
-    <LI class="nav-level-2"><A href="#list-all-namespaces-poddisruptionbudget-v1beta1-policy" class="nav-item">List All Namespaces</A></LI>
-    <LI class="nav-level-2"><A href="#watch-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch</A></LI>
-    <LI class="nav-level-2"><A href="#watch-list-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch List</A></LI>
-    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy" class="nav-item">Watch List All Namespaces</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-read-operations-poddisruptionbudget-v1-policy-strong-" class="nav-item"><STRONG>Read Operations</STRONG></A></LI>
+   <UL id="-strong-read-operations-poddisruptionbudget-v1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#read-poddisruptionbudget-v1-policy" class="nav-item">Read</A></LI>
+    <LI class="nav-level-2"><A href="#list-poddisruptionbudget-v1-policy" class="nav-item">List</A></LI>
+    <LI class="nav-level-2"><A href="#list-all-namespaces-poddisruptionbudget-v1-policy" class="nav-item">List All Namespaces</A></LI>
+    <LI class="nav-level-2"><A href="#watch-poddisruptionbudget-v1-policy" class="nav-item">Watch</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-poddisruptionbudget-v1-policy" class="nav-item">Watch List</A></LI>
+    <LI class="nav-level-2"><A href="#watch-list-all-namespaces-poddisruptionbudget-v1-policy" class="nav-item">Watch List All Namespaces</A></LI>
    </UL>
   </UL>
   <UL>
-   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
-   <UL id="-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong--nav" style="display: none;">
-    <LI class="nav-level-2"><A href="#patch-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Patch Status</A></LI>
-    <LI class="nav-level-2"><A href="#read-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Read Status</A></LI>
-    <LI class="nav-level-2"><A href="#replace-status-poddisruptionbudget-v1beta1-policy" class="nav-item">Replace Status</A></LI>
+   <LI class="nav-level-2 strong-nav"><A href="#-strong-status-operations-poddisruptionbudget-v1-policy-strong-" class="nav-item"><STRONG>Status Operations</STRONG></A></LI>
+   <UL id="-strong-status-operations-poddisruptionbudget-v1-policy-strong--nav" style="display: none;">
+    <LI class="nav-level-2"><A href="#patch-status-poddisruptionbudget-v1-policy" class="nav-item">Patch Status</A></LI>
+    <LI class="nav-level-2"><A href="#read-status-poddisruptionbudget-v1-policy" class="nav-item">Read Status</A></LI>
+    <LI class="nav-level-2"><A href="#replace-status-poddisruptionbudget-v1-policy" class="nav-item">Replace Status</A></LI>
    </UL>
   </UL>
  </UL>
@@ -1656,9 +1690,6 @@
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#csipersistentvolumesource-v1-core" class="nav-item">CSIPersistentVolumeSource v1 core</A></LI>
- </UL>
-  <UL>
-   <LI class="nav-level-2"><A href="#csistoragecapacity-v1beta1-storage-k8s-io" class="nav-item">CSIStorageCapacity v1beta1 storage.k8s.io</A></LI>
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#csivolumesource-v1-core" class="nav-item">CSIVolumeSource v1 core</A></LI>
@@ -1728,9 +1759,6 @@
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#containerstatewaiting-v1-core" class="nav-item">ContainerStateWaiting v1 core</A></LI>
- </UL>
-  <UL>
-   <LI class="nav-level-2"><A href="#cronjob-v1-batch" class="nav-item">CronJob v1 batch</A></LI>
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#crossversionobjectreference-v1-autoscaling" class="nav-item">CrossVersionObjectReference v1 autoscaling</A></LI>
@@ -1803,9 +1831,6 @@
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#endpointport-v1-core" class="nav-item">EndpointPort v1 core</A></LI>
- </UL>
-  <UL>
-   <LI class="nav-level-2"><A href="#endpointslice-v1-discovery-k8s-io" class="nav-item">EndpointSlice v1 discovery.k8s.io</A></LI>
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#endpointsubset-v1-core" class="nav-item">EndpointSubset v1 core</A></LI>
@@ -2145,9 +2170,6 @@
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#poddnsconfigoption-v1-core" class="nav-item">PodDNSConfigOption v1 core</A></LI>
- </UL>
-  <UL>
-   <LI class="nav-level-2"><A href="#poddisruptionbudget-v1-policy" class="nav-item">PodDisruptionBudget v1 policy</A></LI>
  </UL>
   <UL>
    <LI class="nav-level-2"><A href="#podip-v1-core" class="nav-item">PodIP v1 core</A></LI>
@@ -3683,7 +3705,7 @@
  <a href="https://github.com/kubernetes/kubernetes">Copyright 2016-2021 The Kubernetes Authors.</a>
   </DIV>
   <DIV class="col-md-6 text-right">
-    <DIV>Generated at: 2021-04-01 16:11:53 (PDT)</DIV>
+    <DIV>Generated at: 2021-04-09 08:47:46 (CST)</DIV>
     <DIV>API Version: <a href="https://github.com/kubernetes/kubernetes/blob/release-1.21/api/openapi-spec/swagger.json">v1.21.0</a></DIV>
   </DIV>
 </DIV><H1 id="-strong-api-overview-strong-"><STRONG>API OVERVIEW</STRONG></H1>
@@ -3890,19 +3912,19 @@ image: nginx:1.14
 <TR><TD><CODE>state</CODE><BR /><I><a href="#containerstate-v1-core">ContainerState</a></I></TD><TD>Details about the container&#39;s current condition.</TD></TR>
 </TBODY>
 </TABLE>
-<H1 id="cronjob-v1beta1-batch">CronJob v1beta1 batch</H1>
+<H1 id="cronjob-v1-batch">CronJob v1 batch</H1>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CronJob</CODE></TD></TR>
+<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CronJob</CODE></TD></TR>
 </TBODY>
 </TABLE>
 <DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
-<a href="#cronjob-v1-batch">v1</a>
+<a href="#cronjob-v1beta1-batch">v1beta1</a>
 </DIV>
 <DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
  <UL>
-  <LI><a href="#cronjoblist-v1beta1-batch">CronJobList [batch/v1beta1]</a></LI>
+  <LI><a href="#cronjoblist-v1-batch">CronJobList [batch/v1]</a></LI>
  </UL>
 </DIV>
 <TABLE>
@@ -3911,32 +3933,32 @@ image: nginx:1.14
 <TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
 <TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
 <TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
-<TR><TD><CODE>spec</CODE><BR /><I><a href="#cronjobspec-v1beta1-batch">CronJobSpec</a></I></TD><TD>Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
-<TR><TD><CODE>status</CODE><BR /><I><a href="#cronjobstatus-v1beta1-batch">CronJobStatus</a></I></TD><TD>Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#cronjobspec-v1-batch">CronJobSpec</a></I></TD><TD>Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#cronjobstatus-v1-batch">CronJobStatus</a></I></TD><TD>Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
 </TBODY>
 </TABLE>
-<H3 id="cronjobspec-v1beta1-batch">CronJobSpec v1beta1 batch</H3>
+<H3 id="cronjobspec-v1-batch">CronJobSpec v1 batch</H3>
 <DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
  <UL>
-  <LI><a href="#cronjob-v1beta1-batch">CronJob [batch/v1beta1]</a></LI>
+  <LI><a href="#cronjob-v1-batch">CronJob [batch/v1]</a></LI>
  </UL>
 </DIV>
 <TABLE>
 <THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
 <TR><TD><CODE>concurrencyPolicy</CODE><BR /><I>string</I></TD><TD>Specifies how to treat concurrent executions of a Job. Valid values are: - &#34;Allow&#34; (default): allows CronJobs to run concurrently; - &#34;Forbid&#34;: forbids concurrent runs, skipping next run if previous run hasn&#39;t finished yet; - &#34;Replace&#34;: cancels currently running job and replaces it with a new one</TD></TR>
-<TR><TD><CODE>failedJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.</TD></TR>
-<TR><TD><CODE>jobTemplate</CODE><BR /><I><a href="#jobtemplatespec-v1beta1-batch">JobTemplateSpec</a></I></TD><TD>Specifies the job that will be created when executing a CronJob.</TD></TR>
+<TR><TD><CODE>failedJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of failed finished jobs to retain. Value must be non-negative integer. Defaults to 1.</TD></TR>
+<TR><TD><CODE>jobTemplate</CODE><BR /><I><a href="#jobtemplatespec-v1-batch">JobTemplateSpec</a></I></TD><TD>Specifies the job that will be created when executing a CronJob.</TD></TR>
 <TR><TD><CODE>schedule</CODE><BR /><I>string</I></TD><TD>The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.</TD></TR>
 <TR><TD><CODE>startingDeadlineSeconds</CODE><BR /><I>integer</I></TD><TD>Optional deadline in seconds for starting the job if it misses scheduled time for any reason.  Missed jobs executions will be counted as failed ones.</TD></TR>
-<TR><TD><CODE>successfulJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.</TD></TR>
+<TR><TD><CODE>successfulJobsHistoryLimit</CODE><BR /><I>integer</I></TD><TD>The number of successful finished jobs to retain. Value must be non-negative integer. Defaults to 3.</TD></TR>
 <TR><TD><CODE>suspend</CODE><BR /><I>boolean</I></TD><TD>This flag tells the controller to suspend subsequent executions, it does not apply to already started executions.  Defaults to false.</TD></TR>
 </TBODY>
 </TABLE>
-<H3 id="cronjobstatus-v1beta1-batch">CronJobStatus v1beta1 batch</H3>
+<H3 id="cronjobstatus-v1-batch">CronJobStatus v1 batch</H3>
 <DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
  <UL>
-  <LI><a href="#cronjob-v1beta1-batch">CronJob [batch/v1beta1]</a></LI>
+  <LI><a href="#cronjob-v1-batch">CronJob [batch/v1]</a></LI>
  </UL>
 </DIV>
 <TABLE>
@@ -3947,21 +3969,21 @@ image: nginx:1.14
 <TR><TD><CODE>lastSuccessfulTime</CODE><BR /><I><a href="#time-v1-meta">Time</a></I></TD><TD>Information when was the last time the job successfully completed.</TD></TR>
 </TBODY>
 </TABLE>
-<H3 id="cronjoblist-v1beta1-batch">CronJobList v1beta1 batch</H3>
+<H3 id="cronjoblist-v1-batch">CronJobList v1 batch</H3>
 <TABLE>
 <THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
 <TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>items</CODE><BR /><I><a href="#cronjob-v1beta1-batch">CronJob</a> array</I></TD><TD>items is the list of CronJobs.</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#cronjob-v1-batch">CronJob</a> array</I></TD><TD>items is the list of CronJobs.</TD></TR>
 <TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
 <TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-write-operations-cronjob-v1beta1-batch-strong-"><STRONG>Write Operations</STRONG></H2>
-<H2 id="create-cronjob-v1beta1-batch">Create</H2>
+<H2 id="-strong-write-operations-cronjob-v1-batch-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-cronjob-v1-batch">Create</H2>
 <P>create a CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<CODE>POST /apis/batch/v1/namespaces/{namespace}/cronjobs</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -3982,22 +4004,22 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
-<TR><TD>202<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Accepted</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>Accepted</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="patch-cronjob-v1beta1-batch">Patch</H2>
+<H2 id="patch-cronjob-v1-batch">Patch</H2>
 <P>partially update the specified CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<CODE>PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4027,13 +4049,13 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="replace-cronjob-v1beta1-batch">Replace</H2>
+<H2 id="replace-cronjob-v1-batch">Replace</H2>
 <P>replace the specified CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<CODE>PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4055,21 +4077,21 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="delete-cronjob-v1beta1-batch">Delete</H2>
+<H2 id="delete-cronjob-v1-batch">Delete</H2>
 <P>delete a CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<CODE>DELETE /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4104,10 +4126,10 @@ image: nginx:1.14
 <TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="delete-collection-cronjob-v1beta1-batch">Delete Collection</H2>
+<H2 id="delete-collection-cronjob-v1-batch">Delete Collection</H2>
 <P>delete collection of CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<CODE>DELETE /apis/batch/v1/namespaces/{namespace}/cronjobs</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4147,11 +4169,11 @@ image: nginx:1.14
 <TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-read-operations-cronjob-v1beta1-batch-strong-"><STRONG>Read Operations</STRONG></H2>
-<H2 id="read-cronjob-v1beta1-batch">Read</H2>
+<H2 id="-strong-read-operations-cronjob-v1-batch-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-cronjob-v1-batch">Read</H2>
 <P>read the specified CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}</CODE>
+<CODE>GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4171,13 +4193,13 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="list-cronjob-v1beta1-batch">List</H2>
+<H2 id="list-cronjob-v1-batch">List</H2>
 <P>list or watch objects of kind CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs</CODE>
+<CODE>GET /apis/batch/v1/namespaces/{namespace}/cronjobs</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4205,13 +4227,13 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjoblist-v1beta1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjoblist-v1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="list-all-namespaces-cronjob-v1beta1-batch">List All Namespaces</H2>
+<H2 id="list-all-namespaces-cronjob-v1-batch">List All Namespaces</H2>
 <P>list or watch objects of kind CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/batch/v1beta1/cronjobs</CODE>
+<CODE>GET /apis/batch/v1/cronjobs</CODE>
 <H3>Query Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4232,13 +4254,13 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjoblist-v1beta1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjoblist-v1-batch">CronJobList</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-cronjob-v1beta1-batch">Watch</H2>
+<H2 id="watch-cronjob-v1-batch">Watch</H2>
 <P>watch changes to an object of kind CronJob. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs/{name}</CODE>
+<CODE>GET /apis/batch/v1/watch/namespaces/{namespace}/cronjobs/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4270,10 +4292,10 @@ image: nginx:1.14
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-list-cronjob-v1beta1-batch">Watch List</H2>
+<H2 id="watch-list-cronjob-v1-batch">Watch List</H2>
 <P>watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs</CODE>
+<CODE>GET /apis/batch/v1/watch/namespaces/{namespace}/cronjobs</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4304,10 +4326,10 @@ image: nginx:1.14
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-list-all-namespaces-cronjob-v1beta1-batch">Watch List All Namespaces</H2>
+<H2 id="watch-list-all-namespaces-cronjob-v1-batch">Watch List All Namespaces</H2>
 <P>watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/batch/v1beta1/watch/cronjobs</CODE>
+<CODE>GET /apis/batch/v1/watch/cronjobs</CODE>
 <H3>Query Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4331,11 +4353,11 @@ image: nginx:1.14
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-status-operations-cronjob-v1beta1-batch-strong-"><STRONG>Status Operations</STRONG></H2>
-<H2 id="patch-status-cronjob-v1beta1-batch">Patch Status</H2>
+<H2 id="-strong-status-operations-cronjob-v1-batch-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-cronjob-v1-batch">Patch Status</H2>
 <P>partially update status of the specified CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<CODE>PATCH /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4365,13 +4387,13 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="read-status-cronjob-v1beta1-batch">Read Status</H2>
+<H2 id="read-status-cronjob-v1-batch">Read Status</H2>
 <P>read status of the specified CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<CODE>GET /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4391,13 +4413,13 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="replace-status-cronjob-v1beta1-batch">Replace Status</H2>
+<H2 id="replace-status-cronjob-v1-batch">Replace Status</H2>
 <P>replace status of the specified CronJob</P>
 <H3>HTTP Request</H3>
-<CODE>PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
+<CODE>PUT /apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -4419,15 +4441,15 @@ image: nginx:1.14
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#cronjob-v1beta1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
+<TR><TD>200<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#cronjob-v1-batch">CronJob</a></I></TD><TD>Created</TD></TR>
 </TBODY>
 </TABLE>
 <H1 id="daemonset-v1-apps">DaemonSet v1 apps</H1>
@@ -8951,6 +8973,105 @@ spec:
 <TR><TD>201<br /><I><a href="#pod-v1-core">Pod</a></I></TD><TD>Created</TD></TR>
 </TBODY>
 </TABLE>
+<H2 id="-strong-ephemeralcontainers-operations-pod-v1-core-strong-"><STRONG>EphemeralContainers Operations</STRONG></H2>
+<H2 id="patch-ephemeralcontainers-pod-v1-core">Patch EphemeralContainers</H2>
+<P>partially update ephemeralcontainers of the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EphemeralContainers</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ephemeralcontainers-v1-core">EphemeralContainers</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="read-ephemeralcontainers-pod-v1-core">Read EphemeralContainers</H2>
+<P>read ephemeralcontainers of the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>GET /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EphemeralContainers</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ephemeralcontainers-v1-core">EphemeralContainers</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-ephemeralcontainers-pod-v1-core">Replace EphemeralContainers</H2>
+<P>replace ephemeralcontainers of the specified Pod</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the EphemeralContainers</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#ephemeralcontainers-v1-core">EphemeralContainers</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#ephemeralcontainers-v1-core">EphemeralContainers</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#ephemeralcontainers-v1-core">EphemeralContainers</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
 <H2 id="-strong-proxy-operations-pod-v1-core-strong-"><STRONG>Proxy Operations</STRONG></H2>
 <H2 id="create-connect-portforward-pod-v1-core">Create Connect Portforward</H2>
 <P>connect POST requests to portforward of Pod</P>
@@ -11697,19 +11818,19 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H1 id="endpointslice-v1beta1-discovery-k8s-io">EndpointSlice v1beta1 discovery.k8s.io</H1>
+<H1 id="endpointslice-v1-discovery-k8s-io">EndpointSlice v1 discovery.k8s.io</H1>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>EndpointSlice</CODE></TD></TR>
+<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointSlice</CODE></TD></TR>
 </TBODY>
 </TABLE>
 <DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
-<a href="#endpointslice-v1-discovery-k8s-io">v1</a>
+<a href="#endpointslice-v1beta1-discovery-k8s-io">v1beta1</a>
 </DIV>
 <DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
  <UL>
-  <LI><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList [discovery/v1beta1]</a></LI>
+  <LI><a href="#endpointslicelist-v1-discovery-k8s-io">EndpointSliceList [discovery/v1]</a></LI>
  </UL>
 </DIV>
 <TABLE>
@@ -11717,27 +11838,27 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TBODY>
 <TR><TD><CODE>addressType</CODE><BR /><I>string</I></TD><TD>addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.</TD></TR>
 <TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>endpoints</CODE><BR /><I><a href="#endpoint-v1beta1-discovery-k8s-io">Endpoint</a> array</I></TD><TD>endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.</TD></TR>
+<TR><TD><CODE>endpoints</CODE><BR /><I><a href="#endpoint-v1-discovery-k8s-io">Endpoint</a> array</I></TD><TD>endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.</TD></TR>
 <TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
 <TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
-<TR><TD><CODE>ports</CODE><BR /><I><a href="#endpointport-v1beta1-discovery-k8s-io">EndpointPort</a> array</I></TD><TD>ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates &#34;all ports&#34;. Each slice may include a maximum of 100 ports.</TD></TR>
+<TR><TD><CODE>ports</CODE><BR /><I><a href="#endpointport-v1-discovery-k8s-io">EndpointPort</a> array</I></TD><TD>ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates &#34;all ports&#34;. Each slice may include a maximum of 100 ports.</TD></TR>
 </TBODY>
 </TABLE>
-<H3 id="endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList v1beta1 discovery</H3>
+<H3 id="endpointslicelist-v1-discovery-k8s-io">EndpointSliceList v1 discovery</H3>
 <TABLE>
 <THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
 <TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>items</CODE><BR /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a> array</I></TD><TD>List of endpoint slices</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a> array</I></TD><TD>List of endpoint slices</TD></TR>
 <TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
 <TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata.</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
-<H2 id="create-endpointslice-v1beta1-discovery-k8s-io">Create</H2>
+<H2 id="-strong-write-operations-endpointslice-v1-discovery-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-endpointslice-v1-discovery-k8s-io">Create</H2>
 <P>create an EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<CODE>POST /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -11758,22 +11879,22 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
-<TR><TD>202<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Accepted</TD></TR>
+<TR><TD>200<br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Accepted</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="patch-endpointslice-v1beta1-discovery-k8s-io">Patch</H2>
+<H2 id="patch-endpointslice-v1-discovery-k8s-io">Patch</H2>
 <P>partially update the specified EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<CODE>PATCH /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -11803,13 +11924,13 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="replace-endpointslice-v1beta1-discovery-k8s-io">Replace</H2>
+<H2 id="replace-endpointslice-v1-discovery-k8s-io">Replace</H2>
 <P>replace the specified EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<CODE>PUT /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -11831,21 +11952,21 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
+<TR><TD>200<br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>Created</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="delete-endpointslice-v1beta1-discovery-k8s-io">Delete</H2>
+<H2 id="delete-endpointslice-v1-discovery-k8s-io">Delete</H2>
 <P>delete an EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<CODE>DELETE /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -11880,10 +12001,10 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="delete-collection-endpointslice-v1beta1-discovery-k8s-io">Delete Collection</H2>
+<H2 id="delete-collection-endpointslice-v1-discovery-k8s-io">Delete Collection</H2>
 <P>delete collection of EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<CODE>DELETE /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -11923,11 +12044,11 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
-<H2 id="read-endpointslice-v1beta1-discovery-k8s-io">Read</H2>
+<H2 id="-strong-read-operations-endpointslice-v1-discovery-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-endpointslice-v1-discovery-k8s-io">Read</H2>
 <P>read the specified EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}</CODE>
+<CODE>GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -11947,13 +12068,13 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#endpointslice-v1beta1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#endpointslice-v1-discovery-k8s-io">EndpointSlice</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="list-endpointslice-v1beta1-discovery-k8s-io">List</H2>
+<H2 id="list-endpointslice-v1-discovery-k8s-io">List</H2>
 <P>list or watch objects of kind EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices</CODE>
+<CODE>GET /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -11981,13 +12102,13 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#endpointslicelist-v1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io">List All Namespaces</H2>
+<H2 id="list-all-namespaces-endpointslice-v1-discovery-k8s-io">List All Namespaces</H2>
 <P>list or watch objects of kind EndpointSlice</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/discovery.k8s.io/v1beta1/endpointslices</CODE>
+<CODE>GET /apis/discovery.k8s.io/v1/endpointslices</CODE>
 <H3>Query Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -12008,13 +12129,13 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#endpointslicelist-v1beta1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#endpointslicelist-v1-discovery-k8s-io">EndpointSliceList</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-endpointslice-v1beta1-discovery-k8s-io">Watch</H2>
+<H2 id="watch-endpointslice-v1-discovery-k8s-io">Watch</H2>
 <P>watch changes to an object of kind EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices/{name}</CODE>
+<CODE>GET /apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -12046,10 +12167,10 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-list-endpointslice-v1beta1-discovery-k8s-io">Watch List</H2>
+<H2 id="watch-list-endpointslice-v1-discovery-k8s-io">Watch List</H2>
 <P>watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices</CODE>
+<CODE>GET /apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -12080,10 +12201,10 @@ Workloads can be accessed via proxy through the api master using the <code>kubec
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io">Watch List All Namespaces</H2>
+<H2 id="watch-list-all-namespaces-endpointslice-v1-discovery-k8s-io">Watch List All Namespaces</H2>
 <P>watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/discovery.k8s.io/v1beta1/watch/endpointslices</CODE>
+<CODE>GET /apis/discovery.k8s.io/v1/watch/endpointslices</CODE>
 <H3>Query Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -16743,6 +16864,417 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
+<H1 id="csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity v1beta1 storage.k8s.io</H1>
+<TABLE class="col-md-8">
+<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CSIStorageCapacity</CODE></TD></TR>
+</TBODY>
+</TABLE>
+<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
+<a href="#csistoragecapacity-v1alpha1-storage-k8s-io">v1alpha1</a>
+</DIV>
+<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
+ <UL>
+  <LI><a href="#csistoragecapacitylist-v1beta1-storage-k8s-io">CSIStorageCapacityList [storage/v1beta1]</a></LI>
+ </UL>
+</DIV>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>capacity</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>maximumVolumeSize</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>MaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-&lt;uuid&gt;, a generated name, or a reverse-domain name which ends with the unique CSI driver name.  Objects are namespaced.  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>nodeTopology</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.</TD></TR>
+<TR><TD><CODE>storageClassName</CODE><BR /><I>string</I></TD><TD>The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.</TD></TR>
+</TBODY>
+</TABLE>
+<H3 id="csistoragecapacitylist-v1beta1-storage-k8s-io">CSIStorageCapacityList v1beta1 storage</H3>
+<TABLE>
+<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a> array</I></TD><TD>Items is the list of CSIStorageCapacity objects.</TD></TR>
+<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-write-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-csistoragecapacity-v1beta1-storage-k8s-io">Create</H2>
+<P>create a CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>POST /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="patch-csistoragecapacity-v1beta1-storage-k8s-io">Patch</H2>
+<P>partially update the specified CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>PATCH /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).</TD></TR>
+<TR><TD><CODE>force</CODE></TD><TD>Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#patch-v1-meta">Patch</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="replace-csistoragecapacity-v1beta1-storage-k8s-io">Replace</H2>
+<P>replace the specified CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>PUT /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldManager</CODE></TD><TD>fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>Created</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-csistoragecapacity-v1beta1-storage-k8s-io">Delete</H2>
+<P>delete a CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+<TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="delete-collection-csistoragecapacity-v1beta1-storage-k8s-io">Delete Collection</H2>
+<P>delete collection of CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>DELETE /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>dryRun</CODE></TD><TD>When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>gracePeriodSeconds</CODE></TD><TD>The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>orphanDependents</CODE></TD><TD>Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.</TD></TR>
+<TR><TD><CODE>propagationPolicy</CODE></TD><TD>Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Body Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>body</CODE><br /><I><a href="#deleteoptions-v1-meta">DeleteOptions</a></I></TD><TD></TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="-strong-read-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-csistoragecapacity-v1beta1-storage-k8s-io">Read</H2>
+<P>read the specified CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-csistoragecapacity-v1beta1-storage-k8s-io">List</H2>
+<P>list or watch objects of kind CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacitylist-v1beta1-storage-k8s-io">CSIStorageCapacityList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io">List All Namespaces</H2>
+<P>list or watch objects of kind CSIStorageCapacity</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/csistoragecapacities</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#csistoragecapacitylist-v1beta1-storage-k8s-io">CSIStorageCapacityList</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-csistoragecapacity-v1beta1-storage-k8s-io">Watch</H2>
+<P>watch changes to an object of kind CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/namespaces/{namespace}/csistoragecapacities/{name}</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>name</CODE></TD><TD>name of the CSIStorageCapacity</TD></TR>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-csistoragecapacity-v1beta1-storage-k8s-io">Watch List</H2>
+<P>watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/namespaces/{namespace}/csistoragecapacities</CODE>
+<H3>Path Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>namespace</CODE></TD><TD>object name and auth scope, such as for teams and projects</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
+<H2 id="watch-list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io">Watch List All Namespaces</H2>
+<P>watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.</P>
+<H3>HTTP Request</H3>
+<CODE>GET /apis/storage.k8s.io/v1beta1/watch/csistoragecapacities</CODE>
+<H3>Query Parameters</H3>
+<TABLE>
+<THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD><CODE>allowWatchBookmarks</CODE></TD><TD>allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.</TD></TR>
+<TR><TD><CODE>continue</CODE></TD><TD>The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key".  This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.</TD></TR>
+<TR><TD><CODE>fieldSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their fields. Defaults to everything.</TD></TR>
+<TR><TD><CODE>labelSelector</CODE></TD><TD>A selector to restrict the list of returned objects by their labels. Defaults to everything.</TD></TR>
+<TR><TD><CODE>limit</CODE></TD><TD>limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.  The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.</TD></TR>
+<TR><TD><CODE>pretty</CODE></TD><TD>If 'true', then the output is pretty printed.</TD></TR>
+<TR><TD><CODE>resourceVersion</CODE></TD><TD>resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>resourceVersionMatch</CODE></TD><TD>resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.  Defaults to unset</TD></TR>
+<TR><TD><CODE>timeoutSeconds</CODE></TD><TD>Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.</TD></TR>
+<TR><TD><CODE>watch</CODE></TD><TD>Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.</TD></TR>
+</TBODY>
+</TABLE>
+<H3>Response</H3>
+<TABLE>
+<THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
+<TBODY>
+<TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
+</TBODY>
+</TABLE>
 <H1 id="volume-v1-core">Volume v1 core</H1>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
@@ -20548,19 +21080,19 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H1 id="poddisruptionbudget-v1beta1-policy">PodDisruptionBudget v1beta1 policy</H1>
+<H1 id="poddisruptionbudget-v1-policy">PodDisruptionBudget v1 policy</H1>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>PodDisruptionBudget</CODE></TD></TR>
+<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodDisruptionBudget</CODE></TD></TR>
 </TBODY>
 </TABLE>
 <DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
-<a href="#poddisruptionbudget-v1-policy">v1</a>
+<a href="#poddisruptionbudget-v1beta1-policy">v1beta1</a>
 </DIV>
 <DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
  <UL>
-  <LI><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList [policy/v1beta1]</a></LI>
+  <LI><a href="#poddisruptionbudgetlist-v1-policy">PodDisruptionBudgetList [policy/v1]</a></LI>
  </UL>
 </DIV>
 <TABLE>
@@ -20568,15 +21100,15 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TBODY>
 <TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
 <TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
-<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD></TD></TR>
-<TR><TD><CODE>spec</CODE><BR /><I><a href="#poddisruptionbudgetspec-v1beta1-policy">PodDisruptionBudgetSpec</a></I></TD><TD>Specification of the desired behavior of the PodDisruptionBudget.</TD></TR>
-<TR><TD><CODE>status</CODE><BR /><I><a href="#poddisruptionbudgetstatus-v1beta1-policy">PodDisruptionBudgetStatus</a></I></TD><TD>Most recently observed status of the PodDisruptionBudget.</TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
+<TR><TD><CODE>spec</CODE><BR /><I><a href="#poddisruptionbudgetspec-v1-policy">PodDisruptionBudgetSpec</a></I></TD><TD>Specification of the desired behavior of the PodDisruptionBudget.</TD></TR>
+<TR><TD><CODE>status</CODE><BR /><I><a href="#poddisruptionbudgetstatus-v1-policy">PodDisruptionBudgetStatus</a></I></TD><TD>Most recently observed status of the PodDisruptionBudget.</TD></TR>
 </TBODY>
 </TABLE>
-<H3 id="poddisruptionbudgetspec-v1beta1-policy">PodDisruptionBudgetSpec v1beta1 policy</H3>
+<H3 id="poddisruptionbudgetspec-v1-policy">PodDisruptionBudgetSpec v1 policy</H3>
 <DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
  <UL>
-  <LI><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget [policy/v1beta1]</a></LI>
+  <LI><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget [policy/v1]</a></LI>
  </UL>
 </DIV>
 <TABLE>
@@ -20584,13 +21116,13 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TBODY>
 <TR><TD><CODE>maxUnavailable</CODE></TD><TD>An eviction is allowed if at most &#34;maxUnavailable&#34; pods selected by &#34;selector&#34; are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with &#34;minAvailable&#34;.</TD></TR>
 <TR><TD><CODE>minAvailable</CODE></TD><TD>An eviction is allowed if at least &#34;minAvailable&#34; pods selected by &#34;selector&#34; will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying &#34;100%&#34;.</TD></TR>
-<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I><BR /><B>patch strategy</B>: <I>replace</I></TD><TD>Label query over pods whose evictions are managed by the disruption budget. A null selector selects no pods. An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods. In policy/v1, an empty selector will select all pods in the namespace.</TD></TR>
+<TR><TD><CODE>selector</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I><BR /><B>patch strategy</B>: <I>replace</I></TD><TD>Label query over pods whose evictions are managed by the disruption budget. A null selector will match no pods, while an empty ({}) selector will select all pods within the namespace.</TD></TR>
 </TBODY>
 </TABLE>
-<H3 id="poddisruptionbudgetstatus-v1beta1-policy">PodDisruptionBudgetStatus v1beta1 policy</H3>
+<H3 id="poddisruptionbudgetstatus-v1-policy">PodDisruptionBudgetStatus v1 policy</H3>
 <DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
  <UL>
-  <LI><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget [policy/v1beta1]</a></LI>
+  <LI><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget [policy/v1]</a></LI>
  </UL>
 </DIV>
 <TABLE>
@@ -20605,21 +21137,21 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD><CODE>observedGeneration</CODE><BR /><I>integer</I></TD><TD>Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB&#39;s object generation.</TD></TR>
 </TBODY>
 </TABLE>
-<H3 id="poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList v1beta1 policy</H3>
+<H3 id="poddisruptionbudgetlist-v1-policy">PodDisruptionBudgetList v1 policy</H3>
 <TABLE>
 <THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
 <TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>items</CODE><BR /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a> array</I></TD><TD></TD></TR>
+<TR><TD><CODE>items</CODE><BR /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a> array</I></TD><TD>Items is a list of PodDisruptionBudgets</TD></TR>
 <TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
-<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>metadata</CODE><BR /><I><a href="#listmeta-v1-meta">ListMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Write Operations</STRONG></H2>
-<H2 id="create-poddisruptionbudget-v1beta1-policy">Create</H2>
+<H2 id="-strong-write-operations-poddisruptionbudget-v1-policy-strong-"><STRONG>Write Operations</STRONG></H2>
+<H2 id="create-poddisruptionbudget-v1-policy">Create</H2>
 <P>create a PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<CODE>POST /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20640,22 +21172,22 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
-<TR><TD>202<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Accepted</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+<TR><TD>202<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>Accepted</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="patch-poddisruptionbudget-v1beta1-policy">Patch</H2>
+<H2 id="patch-poddisruptionbudget-v1-policy">Patch</H2>
 <P>partially update the specified PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<CODE>PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20685,13 +21217,13 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="replace-poddisruptionbudget-v1beta1-policy">Replace</H2>
+<H2 id="replace-poddisruptionbudget-v1-policy">Replace</H2>
 <P>replace the specified PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<CODE>PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20713,21 +21245,21 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="delete-poddisruptionbudget-v1beta1-policy">Delete</H2>
+<H2 id="delete-poddisruptionbudget-v1-policy">Delete</H2>
 <P>delete a PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<CODE>DELETE /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20762,10 +21294,10 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD>202<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>Accepted</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="delete-collection-poddisruptionbudget-v1beta1-policy">Delete Collection</H2>
+<H2 id="delete-collection-poddisruptionbudget-v1-policy">Delete Collection</H2>
 <P>delete collection of PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<CODE>DELETE /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20805,11 +21337,11 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD>200<br /><I><a href="#status-v1-meta">Status</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Read Operations</STRONG></H2>
-<H2 id="read-poddisruptionbudget-v1beta1-policy">Read</H2>
+<H2 id="-strong-read-operations-poddisruptionbudget-v1-policy-strong-"><STRONG>Read Operations</STRONG></H2>
+<H2 id="read-poddisruptionbudget-v1-policy">Read</H2>
 <P>read the specified PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<CODE>GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20829,13 +21361,13 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="list-poddisruptionbudget-v1beta1-policy">List</H2>
+<H2 id="list-poddisruptionbudget-v1-policy">List</H2>
 <P>list or watch objects of kind PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<CODE>GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20863,13 +21395,13 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="list-all-namespaces-poddisruptionbudget-v1beta1-policy">List All Namespaces</H2>
+<H2 id="list-all-namespaces-poddisruptionbudget-v1-policy">List All Namespaces</H2>
 <P>list or watch objects of kind PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/policy/v1beta1/poddisruptionbudgets</CODE>
+<CODE>GET /apis/policy/v1/poddisruptionbudgets</CODE>
 <H3>Query Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20890,13 +21422,13 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1beta1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudgetlist-v1-policy">PodDisruptionBudgetList</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-poddisruptionbudget-v1beta1-policy">Watch</H2>
+<H2 id="watch-poddisruptionbudget-v1-policy">Watch</H2>
 <P>watch changes to an object of kind PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
+<CODE>GET /apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20928,10 +21460,10 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-list-poddisruptionbudget-v1beta1-policy">Watch List</H2>
+<H2 id="watch-list-poddisruptionbudget-v1-policy">Watch List</H2>
 <P>watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets</CODE>
+<CODE>GET /apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20962,10 +21494,10 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy">Watch List All Namespaces</H2>
+<H2 id="watch-list-all-namespaces-poddisruptionbudget-v1-policy">Watch List All Namespaces</H2>
 <P>watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/policy/v1beta1/watch/poddisruptionbudgets</CODE>
+<CODE>GET /apis/policy/v1/watch/poddisruptionbudgets</CODE>
 <H3>Query Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -20989,11 +21521,11 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TR><TD>200<br /><I><a href="#watchevent-v1-meta">WatchEvent</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-"><STRONG>Status Operations</STRONG></H2>
-<H2 id="patch-status-poddisruptionbudget-v1beta1-policy">Patch Status</H2>
+<H2 id="-strong-status-operations-poddisruptionbudget-v1-policy-strong-"><STRONG>Status Operations</STRONG></H2>
+<H2 id="patch-status-poddisruptionbudget-v1-policy">Patch Status</H2>
 <P>partially update status of the specified PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<CODE>PATCH /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -21023,13 +21555,13 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="read-status-poddisruptionbudget-v1beta1-policy">Read Status</H2>
+<H2 id="read-status-poddisruptionbudget-v1-policy">Read Status</H2>
 <P>read status of the specified PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<CODE>GET /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -21049,13 +21581,13 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="replace-status-poddisruptionbudget-v1beta1-policy">Replace Status</H2>
+<H2 id="replace-status-poddisruptionbudget-v1-policy">Replace Status</H2>
 <P>replace status of the specified PodDisruptionBudget</P>
 <H3>HTTP Request</H3>
-<CODE>PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
+<CODE>PUT /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status</CODE>
 <H3>Path Parameters</H3>
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
@@ -21077,15 +21609,15 @@ $ curl -X GET 'http://127.0.0.1:8001/api/v1/watch/namespaces/default/services/de
 <TABLE>
 <THEAD><TR><TH>Parameter</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
+<TR><TD><CODE>body</CODE><br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
 <H3>Response</H3>
 <TABLE>
 <THEAD><TR><TH>Code</TH><TH>Description</TH></TR></THEAD>
 <TBODY>
-<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
-<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1beta1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
+<TR><TD>200<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>OK</TD></TR>
+<TR><TD>201<br /><I><a href="#poddisruptionbudget-v1-policy">PodDisruptionBudget</a></I></TD><TD>Created</TD></TR>
 </TBODY>
 </TABLE>
 <H1 id="priorityclass-v1-scheduling-k8s-io">PriorityClass v1 scheduling.k8s.io</H1>
@@ -30067,42 +30599,6 @@ An AWS EBS disk must exist before mounting to a container. The disk must also be
 <TR><TD><CODE>volumeHandle</CODE><BR /><I>string</I></TD><TD>VolumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="csistoragecapacity-v1beta1-storage-k8s-io">CSIStorageCapacity v1beta1 storage.k8s.io</H2>
-<TABLE class="col-md-8">
-<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>storage.k8s.io</CODE></TD><TD><CODE>v1beta1</CODE></TD><TD><CODE>CSIStorageCapacity</CODE></TD></TR>
-</TBODY>
-</TABLE>
-<P>CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment.  This can be used when considering where to instantiate new PersistentVolumes.
-
-For example this can express things like: - StorageClass &#34;standard&#34; has &#34;1234 GiB&#34; available in &#34;topology.kubernetes.io/zone=us-east1&#34; - StorageClass &#34;localssd&#34; has &#34;10 GiB&#34; available in &#34;kubernetes.io/hostname=knode-abc123&#34;
-
-The following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero
-
-The producer of these objects can decide which approach is more suitable.
-
-They are consumed by the kube-scheduler if the CSIStorageCapacity beta feature gate is enabled there and a CSI driver opts into capacity-aware scheduling with CSIDriver.StorageCapacity.</P>
-<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
-<a href="#csistoragecapacity-v1alpha1-storage-k8s-io">v1alpha1</a>
-</DIV>
-<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
- <UL>
-  <LI><a href="#csistoragecapacitylist-v1beta1-storage-k8s-io">CSIStorageCapacityList [storage/v1beta1]</a></LI>
- </UL>
-</DIV>
-<TABLE>
-<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>capacity</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity.</TD></TR>
-<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
-<TR><TD><CODE>maximumVolumeSize</CODE><BR /><I><a href="#quantity-resource-core">Quantity</a></I></TD><TD>MaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.  This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.</TD></TR>
-<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-&lt;uuid&gt;, a generated name, or a reverse-domain name which ends with the unique CSI driver name.  Objects are namespaced.  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
-<TR><TD><CODE>nodeTopology</CODE><BR /><I><a href="#labelselector-v1-meta">LabelSelector</a></I></TD><TD>NodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.</TD></TR>
-<TR><TD><CODE>storageClassName</CODE><BR /><I>string</I></TD><TD>The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.</TD></TR>
-</TBODY>
-</TABLE>
 <H2 id="csivolumesource-v1-core">CSIVolumeSource v1 core</H2>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
@@ -30622,32 +31118,6 @@ The contents of the target ConfigMap&#39;s Data field will be presented in a vol
 <TR><TD><CODE>reason</CODE><BR /><I>string</I></TD><TD>(brief) reason the container is not yet running.</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="cronjob-v1-batch">CronJob v1 batch</H2>
-<TABLE class="col-md-8">
-<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>batch</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>CronJob</CODE></TD></TR>
-</TBODY>
-</TABLE>
-<P>CronJob represents the configuration of a single cron job.</P>
-<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
-<a href="#cronjob-v1beta1-batch">v1beta1</a>
-</DIV>
-<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
- <UL>
-  <LI><a href="#cronjoblist-v1-batch">CronJobList [batch/v1]</a></LI>
- </UL>
-</DIV>
-<TABLE>
-<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
-<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
-<TR><TD><CODE>spec</CODE><BR /><I><a href="#cronjobspec-v1-batch">CronJobSpec</a></I></TD><TD>Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
-<TR><TD><CODE>status</CODE><BR /><I><a href="#cronjobstatus-v1-batch">CronJobStatus</a></I></TD><TD>Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status</TD></TR>
-</TBODY>
-</TABLE>
 <H2 id="crossversionobjectreference-v1-autoscaling">CrossVersionObjectReference v1 autoscaling</H2>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
@@ -31211,33 +31681,6 @@ The contents of the target ConfigMap&#39;s Data field will be presented in a vol
 <TR><TD><CODE>protocol</CODE><BR /><I>string</I></TD><TD>The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.</TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="endpointslice-v1-discovery-k8s-io">EndpointSlice v1 discovery.k8s.io</H2>
-<TABLE class="col-md-8">
-<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>discovery.k8s.io</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>EndpointSlice</CODE></TD></TR>
-</TBODY>
-</TABLE>
-<P>EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.</P>
-<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
-<a href="#endpointslice-v1beta1-discovery-k8s-io">v1beta1</a>
-</DIV>
-<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
- <UL>
-  <LI><a href="#endpointslicelist-v1-discovery-k8s-io">EndpointSliceList [discovery/v1]</a></LI>
- </UL>
-</DIV>
-<TABLE>
-<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>addressType</CODE><BR /><I>string</I></TD><TD>addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.</TD></TR>
-<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>endpoints</CODE><BR /><I><a href="#endpoint-v1-discovery-k8s-io">Endpoint</a> array</I></TD><TD>endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.</TD></TR>
-<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
-<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata.</TD></TR>
-<TR><TD><CODE>ports</CODE><BR /><I><a href="#endpointport-v1-discovery-k8s-io">EndpointPort</a> array</I></TD><TD>ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates &#34;all ports&#34;. Each slice may include a maximum of 100 ports.</TD></TR>
-</TBODY>
-</TABLE>
 <H2 id="endpointsubset-v1-core">EndpointSubset v1 core</H2>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
@@ -34058,32 +34501,6 @@ DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mou
 <TR><TD><CODE>value</CODE><BR /><I>string</I></TD><TD></TD></TR>
 </TBODY>
 </TABLE>
-<H2 id="poddisruptionbudget-v1-policy">PodDisruptionBudget v1 policy</H2>
-<TABLE class="col-md-8">
-<THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>policy</CODE></TD><TD><CODE>v1</CODE></TD><TD><CODE>PodDisruptionBudget</CODE></TD></TR>
-</TBODY>
-</TABLE>
-<P>PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods</P>
-<DIV class="alert alert-success col-md-8"><I class="fa fa-toggle-right"></I> Other API versions of this object exist:
-<a href="#poddisruptionbudget-v1beta1-policy">v1beta1</a>
-</DIV>
-<DIV class="alert alert-info col-md-8"><I class="fa fa-info-circle"></I> Appears In:
- <UL>
-  <LI><a href="#poddisruptionbudgetlist-v1-policy">PodDisruptionBudgetList [policy/v1]</a></LI>
- </UL>
-</DIV>
-<TABLE>
-<THEAD><TR><TH>Field</TH><TH>Description</TH></TR></THEAD>
-<TBODY>
-<TR><TD><CODE>apiVersion</CODE><BR /><I>string</I></TD><TD>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</TD></TR>
-<TR><TD><CODE>kind</CODE><BR /><I>string</I></TD><TD>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</TD></TR>
-<TR><TD><CODE>metadata</CODE><BR /><I><a href="#objectmeta-v1-meta">ObjectMeta</a></I></TD><TD>Standard object&#39;s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</TD></TR>
-<TR><TD><CODE>spec</CODE><BR /><I><a href="#poddisruptionbudgetspec-v1-policy">PodDisruptionBudgetSpec</a></I></TD><TD>Specification of the desired behavior of the PodDisruptionBudget.</TD></TR>
-<TR><TD><CODE>status</CODE><BR /><I><a href="#poddisruptionbudgetstatus-v1-policy">PodDisruptionBudgetStatus</a></I></TD><TD>Most recently observed status of the PodDisruptionBudget.</TD></TR>
-</TBODY>
-</TABLE>
 <H2 id="podip-v1-core">PodIP v1 core</H2>
 <TABLE class="col-md-8">
 <THEAD><TR><TH>Group</TH><TH>Version</TH><TH>Kind</TH></TR></THEAD>
diff --git a/static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js b/static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js
index 61546bfa6f..944ac9282d 100644
--- a/static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js
+++ b/static/docs/reference/generated/kubernetes-api/v1.21/js/navData.js
@@ -1 +1 @@
-(function(){navData={"toc":[{"section":"webhookclientconfig-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1-apiextensions-k8s-io","subsections":[]},{"section":"volumenoderesources-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeerror-v1alpha1-storage-k8s-io","subsections":[]},{"section":"volumeerror-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeattachmentsource-v1alpha1-storage-k8s-io","subsections":[]},{"section":"volumeattachmentsource-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeattachment-v1alpha1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]}]}]},{"section":"volumeattachment-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"validatingwebhook-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"userinfo-v1beta1-authentication-k8s-io","subsections":[]},{"section":"tokenreview-v1beta1-authentication-k8s-io","subsections":[{"section":"-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-","subsections":[{"section":"create-tokenreview-v1beta1-authentication-k8s-io","subsections":[]}]}]},{"section":"tokenrequest-v1beta1-storage-k8s-io","subsections":[]},{"section":"tokenrequest-v1-storage-k8s-io","subsections":[]},{"section":"subjectrulesreviewstatus-v1beta1-authorization-k8s-io","subsections":[]},{"section":"subjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-subjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"subject-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"subject-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"subject-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"storageclass-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-storageclass-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-storageclass-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"servicereference-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"servicereference-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"servicereference-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"servicereference-v1-apiregistration-k8s-io","subsections":[]},{"section":"servicereference-v1-apiextensions-k8s-io","subsections":[]},{"section":"selfsubjectrulesreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectrulesreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"selfsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"scheduling-v1alpha1-node-k8s-io","subsections":[]},{"section":"scheduling-v1beta1-node-k8s-io","subsections":[]},{"section":"runtimeclass-v1alpha1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1alpha1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1alpha1-node-k8s-io","subsections":[]}]}]},{"section":"runtimeclass-v1beta1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1beta1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1beta1-node-k8s-io","subsections":[]}]}]},{"section":"rulewithoperations-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"roleref-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"roleref-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"resourcerule-v1beta1-authorization-k8s-io","subsections":[]},{"section":"resourcemetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"resourcemetricsource-v2beta1-autoscaling","subsections":[]},{"section":"resourceattributes-v1beta1-authorization-k8s-io","subsections":[]},{"section":"priorityclass-v1alpha1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]}]}]},{"section":"priorityclass-v1beta1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]}]}]},{"section":"policyrule-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"policyrule-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"podsmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"podsmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"poddisruptionbudget-v1beta1-policy","subsections":[{"section":"-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"replace-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-status-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"delete-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"replace-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"create-poddisruptionbudget-v1beta1-policy","subsections":[]}]}]},{"section":"overhead-v1alpha1-node-k8s-io","subsections":[]},{"section":"overhead-v1beta1-node-k8s-io","subsections":[]},{"section":"objectmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"objectmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"nonresourcerule-v1beta1-authorization-k8s-io","subsections":[]},{"section":"nonresourceattributes-v1beta1-authorization-k8s-io","subsections":[]},{"section":"mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"mutatingwebhook-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"metricstatus-v2beta1-autoscaling","subsections":[]},{"section":"metricspec-v2beta1-autoscaling","subsections":[]},{"section":"localsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-localsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"lease-v1beta1-coordination-k8s-io","subsections":[{"section":"-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"watch-list-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"watch-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"list-all-namespaces-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"list-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"read-lease-v1beta1-coordination-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-","subsections":[{"section":"delete-collection-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"delete-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"replace-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"patch-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"create-lease-v1beta1-coordination-k8s-io","subsections":[]}]}]},{"section":"jobtemplatespec-v1beta1-batch","subsections":[]},{"section":"jsonschemapropsorbool-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemapropsorarray-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemaprops-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"json-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"ingresstls-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingresstls-v1beta1-extensions","subsections":[]},{"section":"ingressrule-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressrule-v1beta1-extensions","subsections":[]},{"section":"ingressclassparametersreference-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressclass-v1beta1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-ingressclass-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"delete-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"replace-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"create-ingressclass-v1beta1-networking-k8s-io","subsections":[]}]}]},{"section":"ingressbackend-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressbackend-v1beta1-extensions","subsections":[]},{"section":"ingress-v1beta1-networking-k8s-io","subsections":[{"section":"-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"replace-status-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-status-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-status-ingress-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-list-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-ingress-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"delete-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"replace-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"create-ingress-v1beta1-networking-k8s-io","subsections":[]}]}]},{"section":"ingress-v1beta1-extensions","subsections":[{"section":"-strong-status-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"replace-status-ingress-v1beta1-extensions","subsections":[]},{"section":"read-status-ingress-v1beta1-extensions","subsections":[]},{"section":"patch-status-ingress-v1beta1-extensions","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1beta1-extensions","subsections":[]},{"section":"watch-list-ingress-v1beta1-extensions","subsections":[]},{"section":"watch-ingress-v1beta1-extensions","subsections":[]},{"section":"list-all-namespaces-ingress-v1beta1-extensions","subsections":[]},{"section":"list-ingress-v1beta1-extensions","subsections":[]},{"section":"read-ingress-v1beta1-extensions","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"delete-collection-ingress-v1beta1-extensions","subsections":[]},{"section":"delete-ingress-v1beta1-extensions","subsections":[]},{"section":"replace-ingress-v1beta1-extensions","subsections":[]},{"section":"patch-ingress-v1beta1-extensions","subsections":[]},{"section":"create-ingress-v1beta1-extensions","subsections":[]}]}]},{"section":"horizontalpodautoscalercondition-v2beta1-autoscaling","subsections":[]},{"section":"horizontalpodautoscaler-v2beta1-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]}]},{"section":"horizontalpodautoscaler-v2beta2-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]}]},{"section":"httpingressrulevalue-v1beta1-networking-k8s-io","subsections":[]},{"section":"httpingressrulevalue-v1beta1-extensions","subsections":[]},{"section":"httpingresspath-v1beta1-networking-k8s-io","subsections":[]},{"section":"httpingresspath-v1beta1-extensions","subsections":[]},{"section":"forzone-v1beta1-discovery-k8s-io","subsections":[]},{"section":"externalmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"externalmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"externaldocumentation-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"eventseries-v1beta1-events-k8s-io","subsections":[]},{"section":"eventseries-v1-events-k8s-io","subsections":[]},{"section":"event-v1beta1-events-k8s-io","subsections":[{"section":"-strong-read-operations-event-v1beta1-events-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1beta1-events-k8s-io","subsections":[]},{"section":"watch-list-event-v1beta1-events-k8s-io","subsections":[]},{"section":"watch-event-v1beta1-events-k8s-io","subsections":[]},{"section":"list-all-namespaces-event-v1beta1-events-k8s-io","subsections":[]},{"section":"list-event-v1beta1-events-k8s-io","subsections":[]},{"section":"read-event-v1beta1-events-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-event-v1beta1-events-k8s-io-strong-","subsections":[{"section":"delete-collection-event-v1beta1-events-k8s-io","subsections":[]},{"section":"delete-event-v1beta1-events-k8s-io","subsections":[]},{"section":"replace-event-v1beta1-events-k8s-io","subsections":[]},{"section":"patch-event-v1beta1-events-k8s-io","subsections":[]},{"section":"create-event-v1beta1-events-k8s-io","subsections":[]}]}]},{"section":"event-v1-events-k8s-io","subsections":[{"section":"-strong-read-operations-event-v1-events-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1-events-k8s-io","subsections":[]},{"section":"watch-list-event-v1-events-k8s-io","subsections":[]},{"section":"watch-event-v1-events-k8s-io","subsections":[]},{"section":"list-all-namespaces-event-v1-events-k8s-io","subsections":[]},{"section":"list-event-v1-events-k8s-io","subsections":[]},{"section":"read-event-v1-events-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-event-v1-events-k8s-io-strong-","subsections":[{"section":"delete-collection-event-v1-events-k8s-io","subsections":[]},{"section":"delete-event-v1-events-k8s-io","subsections":[]},{"section":"replace-event-v1-events-k8s-io","subsections":[]},{"section":"patch-event-v1-events-k8s-io","subsections":[]},{"section":"create-event-v1-events-k8s-io","subsections":[]}]}]},{"section":"endpointslice-v1beta1-discovery-k8s-io","subsections":[{"section":"-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"read-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"delete-collection-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"delete-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"replace-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"patch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"create-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]}]},{"section":"endpointport-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpointport-v1-discovery-k8s-io","subsections":[]},{"section":"endpointhints-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpointconditions-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpoint-v1beta1-discovery-k8s-io","subsections":[]},{"section":"customresourcevalidation-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresources-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcescale-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionversion-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionnames-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[{"section":"-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"watch-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"list-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"read-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"delete-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"replace-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"patch-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"create-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]}]},{"section":"customresourceconversion-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcecolumndefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"crossversionobjectreference-v2beta1-autoscaling","subsections":[]},{"section":"crossversionobjectreference-v2beta2-autoscaling","subsections":[]},{"section":"cronjob-v1beta1-batch","subsections":[{"section":"-strong-status-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"replace-status-cronjob-v1beta1-batch","subsections":[]},{"section":"read-status-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-status-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-read-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-list-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-cronjob-v1beta1-batch","subsections":[]},{"section":"list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"list-cronjob-v1beta1-batch","subsections":[]},{"section":"read-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-write-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"delete-collection-cronjob-v1beta1-batch","subsections":[]},{"section":"delete-cronjob-v1beta1-batch","subsections":[]},{"section":"replace-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-cronjob-v1beta1-batch","subsections":[]},{"section":"create-cronjob-v1beta1-batch","subsections":[]}]}]},{"section":"containerresourcemetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"containerresourcemetricsource-v2beta1-autoscaling","subsections":[]},{"section":"clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"certificatesigningrequestcondition-v1beta1-certificates-k8s-io","subsections":[]},{"section":"certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[{"section":"-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"read-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"watch-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"list-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"read-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"delete-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"replace-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"patch-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"create-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]}]},{"section":"csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-list-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"read-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"delete-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"replace-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"patch-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"create-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]}]}]},{"section":"csinodedriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"csinode-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-csinode-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-csinode-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"csidriver-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-csidriver-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-csidriver-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"aggregationrule-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"aggregationrule-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"apiservicecondition-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"apiservice-v1beta1-apiregistration-k8s-io","subsections":[{"section":"-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"replace-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"read-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"patch-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"watch-list-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"watch-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"list-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"read-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"delete-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"replace-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"patch-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"create-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]}]},{"section":"-strong-old-api-versions-strong-","subsections":[]},{"section":"windowssecuritycontextoptions-v1-core","subsections":[]},{"section":"weightedpodaffinityterm-v1-core","subsections":[]},{"section":"webhookconversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watchevent-v1-meta","subsections":[]},{"section":"vspherevirtualdiskvolumesource-v1-core","subsections":[]},{"section":"volumeprojection-v1-core","subsections":[]},{"section":"volumenoderesources-v1-storage-k8s-io","subsections":[]},{"section":"volumenodeaffinity-v1-core","subsections":[]},{"section":"volumemount-v1-core","subsections":[]},{"section":"volumeerror-v1-storage-k8s-io","subsections":[]},{"section":"volumedevice-v1-core","subsections":[]},{"section":"volumeattachmentsource-v1-storage-k8s-io","subsections":[]},{"section":"validatingwebhook-v1-admissionregistration-k8s-io","subsections":[]},{"section":"usersubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"userinfo-v1-authentication-k8s-io","subsections":[]},{"section":"typedlocalobjectreference-v1-core","subsections":[]},{"section":"topologyspreadconstraint-v1-core","subsections":[]},{"section":"topologyselectorterm-v1-core","subsections":[]},{"section":"topologyselectorlabelrequirement-v1-core","subsections":[]},{"section":"toleration-v1-core","subsections":[]},{"section":"time-v1-meta","subsections":[]},{"section":"taint-v1-core","subsections":[]},{"section":"tcpsocketaction-v1-core","subsections":[]},{"section":"sysctl-v1-core","subsections":[]},{"section":"supplementalgroupsstrategyoptions-v1beta1-policy","subsections":[]},{"section":"subjectrulesreviewstatus-v1-authorization-k8s-io","subsections":[]},{"section":"subject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"storageversioncondition-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"storageosvolumesource-v1-core","subsections":[]},{"section":"storageospersistentvolumesource-v1-core","subsections":[]},{"section":"statusdetails-v1-meta","subsections":[]},{"section":"statuscause-v1-meta","subsections":[]},{"section":"status-v1-meta","subsections":[]},{"section":"statefulsetupdatestrategy-v1-apps","subsections":[]},{"section":"statefulsetcondition-v1-apps","subsections":[]},{"section":"sessionaffinityconfig-v1-core","subsections":[]},{"section":"servicereference-v1-admissionregistration-k8s-io","subsections":[]},{"section":"serviceport-v1-core","subsections":[]},{"section":"servicebackendport-v1-networking-k8s-io","subsections":[]},{"section":"serviceaccounttokenprojection-v1-core","subsections":[]},{"section":"serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"serverstorageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"serveraddressbyclientcidr-v1-meta","subsections":[]},{"section":"securitycontext-v1-core","subsections":[]},{"section":"secretvolumesource-v1-core","subsections":[]},{"section":"secretreference-v1-core","subsections":[]},{"section":"secretprojection-v1-core","subsections":[]},{"section":"secretkeyselector-v1-core","subsections":[]},{"section":"secretenvsource-v1-core","subsections":[]},{"section":"seccompprofile-v1-core","subsections":[]},{"section":"scopedresourceselectorrequirement-v1-core","subsections":[]},{"section":"scopeselector-v1-core","subsections":[]},{"section":"scheduling-v1-node-k8s-io","subsections":[]},{"section":"scaleiovolumesource-v1-core","subsections":[]},{"section":"scaleiopersistentvolumesource-v1-core","subsections":[]},{"section":"scale-v1-autoscaling","subsections":[]},{"section":"selinuxstrategyoptions-v1beta1-policy","subsections":[]},{"section":"selinuxoptions-v1-core","subsections":[]},{"section":"runtimeclassstrategyoptions-v1beta1-policy","subsections":[]},{"section":"runasuserstrategyoptions-v1beta1-policy","subsections":[]},{"section":"runasgroupstrategyoptions-v1beta1-policy","subsections":[]},{"section":"rulewithoperations-v1-admissionregistration-k8s-io","subsections":[]},{"section":"rollingupdatestatefulsetstrategy-v1-apps","subsections":[]},{"section":"roleref-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"resourcerule-v1-authorization-k8s-io","subsections":[]},{"section":"resourcerequirements-v1-core","subsections":[]},{"section":"resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"resourcemetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"resourcemetricsource-v2beta2-autoscaling","subsections":[]},{"section":"resourcefieldselector-v1-core","subsections":[]},{"section":"resourceattributes-v1-authorization-k8s-io","subsections":[]},{"section":"replicationcontrollercondition-v1-core","subsections":[]},{"section":"replicasetcondition-v1-apps","subsections":[]},{"section":"rbdvolumesource-v1-core","subsections":[]},{"section":"rbdpersistentvolumesource-v1-core","subsections":[]},{"section":"quobytevolumesource-v1-core","subsections":[]},{"section":"queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"quantity-resource-core","subsections":[]},{"section":"projectedvolumesource-v1-core","subsections":[]},{"section":"probe-v1-core","subsections":[]},{"section":"prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"preferredschedulingterm-v1-core","subsections":[]},{"section":"preconditions-v1-meta","subsections":[]},{"section":"portworxvolumesource-v1-core","subsections":[]},{"section":"portstatus-v1-core","subsections":[]},{"section":"policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"policyrule-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"podsmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"podsmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"podsecuritycontext-v1-core","subsections":[]},{"section":"podreadinessgate-v1-core","subsections":[]},{"section":"podip-v1-core","subsections":[]},{"section":"poddisruptionbudget-v1-policy","subsections":[]},{"section":"poddnsconfigoption-v1-core","subsections":[]},{"section":"poddnsconfig-v1-core","subsections":[]},{"section":"podcondition-v1-core","subsections":[]},{"section":"podantiaffinity-v1-core","subsections":[]},{"section":"podaffinityterm-v1-core","subsections":[]},{"section":"podaffinity-v1-core","subsections":[]},{"section":"photonpersistentdiskvolumesource-v1-core","subsections":[]},{"section":"persistentvolumeclaimvolumesource-v1-core","subsections":[]},{"section":"persistentvolumeclaimtemplate-v1-core","subsections":[]},{"section":"persistentvolumeclaimcondition-v1-core","subsections":[]},{"section":"patch-v1-meta","subsections":[]},{"section":"ownerreference-v1-meta","subsections":[]},{"section":"overhead-v1-node-k8s-io","subsections":[]},{"section":"objectreference-v1-core","subsections":[]},{"section":"objectmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"objectmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"objectmeta-v1-meta","subsections":[]},{"section":"objectfieldselector-v1-core","subsections":[]},{"section":"nonresourcerule-v1-authorization-k8s-io","subsections":[]},{"section":"nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"nonresourceattributes-v1-authorization-k8s-io","subsections":[]},{"section":"nodesysteminfo-v1-core","subsections":[]},{"section":"nodeselectorterm-v1-core","subsections":[]},{"section":"nodeselectorrequirement-v1-core","subsections":[]},{"section":"nodeselector-v1-core","subsections":[]},{"section":"nodedaemonendpoints-v1-core","subsections":[]},{"section":"nodeconfigstatus-v1-core","subsections":[]},{"section":"nodeconfigsource-v1-core","subsections":[]},{"section":"nodecondition-v1-core","subsections":[]},{"section":"nodeaffinity-v1-core","subsections":[]},{"section":"nodeaddress-v1-core","subsections":[]},{"section":"networkpolicyport-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicypeer-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicyingressrule-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicyegressrule-v1-networking-k8s-io","subsections":[]},{"section":"namespacecondition-v1-core","subsections":[]},{"section":"nfsvolumesource-v1-core","subsections":[]},{"section":"mutatingwebhook-v1-admissionregistration-k8s-io","subsections":[]},{"section":"microtime-v1-meta","subsections":[]},{"section":"metricvaluestatus-v2beta2-autoscaling","subsections":[]},{"section":"metrictarget-v2beta2-autoscaling","subsections":[]},{"section":"metricstatus-v2beta2-autoscaling","subsections":[]},{"section":"metricspec-v2beta2-autoscaling","subsections":[]},{"section":"metricidentifier-v2beta2-autoscaling","subsections":[]},{"section":"managedfieldsentry-v1-meta","subsections":[]},{"section":"localvolumesource-v1-core","subsections":[]},{"section":"localobjectreference-v1-core","subsections":[]},{"section":"loadbalancerstatus-v1-core","subsections":[]},{"section":"loadbalanceringress-v1-core","subsections":[]},{"section":"listmeta-v1-meta","subsections":[]},{"section":"limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"limitresponse-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"limitrangeitem-v1-core","subsections":[]},{"section":"lifecycle-v1-core","subsections":[]},{"section":"labelselectorrequirement-v1-meta","subsections":[]},{"section":"labelselector-v1-meta","subsections":[]},{"section":"keytopath-v1-core","subsections":[]},{"section":"jobtemplatespec-v1-batch","subsections":[]},{"section":"jobcondition-v1-batch","subsections":[]},{"section":"jsonschemapropsorbool-v1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemapropsorarray-v1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemaprops-v1-apiextensions-k8s-io","subsections":[]},{"section":"json-v1-apiextensions-k8s-io","subsections":[]},{"section":"ingresstls-v1-networking-k8s-io","subsections":[]},{"section":"ingressservicebackend-v1-networking-k8s-io","subsections":[]},{"section":"ingressrule-v1-networking-k8s-io","subsections":[]},{"section":"ingressclassparametersreference-v1-networking-k8s-io","subsections":[]},{"section":"ingressbackend-v1-networking-k8s-io","subsections":[]},{"section":"iscsivolumesource-v1-core","subsections":[]},{"section":"iscsipersistentvolumesource-v1-core","subsections":[]},{"section":"ipblock-v1-networking-k8s-io","subsections":[]},{"section":"idrange-v1beta1-policy","subsections":[]},{"section":"hostportrange-v1beta1-policy","subsections":[]},{"section":"hostpathvolumesource-v1-core","subsections":[]},{"section":"hostalias-v1-core","subsections":[]},{"section":"horizontalpodautoscalercondition-v2beta2-autoscaling","subsections":[]},{"section":"horizontalpodautoscalerbehavior-v2beta2-autoscaling","subsections":[]},{"section":"handler-v1-core","subsections":[]},{"section":"httpingressrulevalue-v1-networking-k8s-io","subsections":[]},{"section":"httpingresspath-v1-networking-k8s-io","subsections":[]},{"section":"httpheader-v1-core","subsections":[]},{"section":"httpgetaction-v1-core","subsections":[]},{"section":"hpascalingrules-v2beta2-autoscaling","subsections":[]},{"section":"hpascalingpolicy-v2beta2-autoscaling","subsections":[]},{"section":"groupversionfordiscovery-v1-meta","subsections":[]},{"section":"groupsubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"glusterfsvolumesource-v1-core","subsections":[]},{"section":"glusterfspersistentvolumesource-v1-core","subsections":[]},{"section":"gitrepovolumesource-v1-core","subsections":[]},{"section":"gcepersistentdiskvolumesource-v1-core","subsections":[]},{"section":"forzone-v1-discovery-k8s-io","subsections":[]},{"section":"flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"flockervolumesource-v1-core","subsections":[]},{"section":"flexvolumesource-v1-core","subsections":[]},{"section":"flexpersistentvolumesource-v1-core","subsections":[]},{"section":"fieldsv1-v1-meta","subsections":[]},{"section":"fsgroupstrategyoptions-v1beta1-policy","subsections":[]},{"section":"fcvolumesource-v1-core","subsections":[]},{"section":"externalmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"externalmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"externaldocumentation-v1-apiextensions-k8s-io","subsections":[]},{"section":"execaction-v1-core","subsections":[]},{"section":"eviction-v1beta1-policy","subsections":[]},{"section":"eventsource-v1-core","subsections":[]},{"section":"eventseries-v1-core","subsections":[]},{"section":"ephemeralvolumesource-v1-core","subsections":[]},{"section":"ephemeralcontainers-v1-core","subsections":[]},{"section":"ephemeralcontainer-v1-core","subsections":[]},{"section":"envvarsource-v1-core","subsections":[]},{"section":"envvar-v1-core","subsections":[]},{"section":"envfromsource-v1-core","subsections":[]},{"section":"endpointsubset-v1-core","subsections":[]},{"section":"endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"endpointport-v1-core","subsections":[]},{"section":"endpointhints-v1-discovery-k8s-io","subsections":[]},{"section":"endpointconditions-v1-discovery-k8s-io","subsections":[]},{"section":"endpointaddress-v1-core","subsections":[]},{"section":"endpoint-v1-discovery-k8s-io","subsections":[]},{"section":"emptydirvolumesource-v1-core","subsections":[]},{"section":"downwardapivolumesource-v1-core","subsections":[]},{"section":"downwardapivolumefile-v1-core","subsections":[]},{"section":"downwardapiprojection-v1-core","subsections":[]},{"section":"deploymentcondition-v1-apps","subsections":[]},{"section":"deleteoptions-v1-meta","subsections":[]},{"section":"daemonsetupdatestrategy-v1-apps","subsections":[]},{"section":"daemonsetcondition-v1-apps","subsections":[]},{"section":"daemonendpoint-v1-core","subsections":[]},{"section":"customresourcevalidation-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresources-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcestatus-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcescale-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionnames-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitioncondition-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourceconversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcecolumndefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"crossversionobjectreference-v1-autoscaling","subsections":[]},{"section":"cronjob-v1-batch","subsections":[]},{"section":"containerstatewaiting-v1-core","subsections":[]},{"section":"containerstateterminated-v1-core","subsections":[]},{"section":"containerstaterunning-v1-core","subsections":[]},{"section":"containerstate-v1-core","subsections":[]},{"section":"containerresourcemetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"containerresourcemetricsource-v2beta2-autoscaling","subsections":[]},{"section":"containerport-v1-core","subsections":[]},{"section":"containerimage-v1-core","subsections":[]},{"section":"configmapvolumesource-v1-core","subsections":[]},{"section":"configmapprojection-v1-core","subsections":[]},{"section":"configmapnodeconfigsource-v1-core","subsections":[]},{"section":"configmapkeyselector-v1-core","subsections":[]},{"section":"configmapenvsource-v1-core","subsections":[]},{"section":"condition-v1-meta","subsections":[]},{"section":"componentcondition-v1-core","subsections":[]},{"section":"clientipconfig-v1-core","subsections":[]},{"section":"cindervolumesource-v1-core","subsections":[]},{"section":"cinderpersistentvolumesource-v1-core","subsections":[]},{"section":"certificatesigningrequestcondition-v1-certificates-k8s-io","subsections":[]},{"section":"cephfsvolumesource-v1-core","subsections":[]},{"section":"cephfspersistentvolumesource-v1-core","subsections":[]},{"section":"capabilities-v1-core","subsections":[]},{"section":"csivolumesource-v1-core","subsections":[]},{"section":"csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"csipersistentvolumesource-v1-core","subsections":[]},{"section":"csinodedriver-v1-storage-k8s-io","subsections":[]},{"section":"boundobjectreference-v1-authentication-k8s-io","subsections":[]},{"section":"azurefilevolumesource-v1-core","subsections":[]},{"section":"azurefilepersistentvolumesource-v1-core","subsections":[]},{"section":"azurediskvolumesource-v1-core","subsections":[]},{"section":"attachedvolume-v1-core","subsections":[]},{"section":"allowedhostpath-v1beta1-policy","subsections":[]},{"section":"allowedflexvolume-v1beta1-policy","subsections":[]},{"section":"allowedcsidriver-v1beta1-policy","subsections":[]},{"section":"aggregationrule-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"affinity-v1-core","subsections":[]},{"section":"awselasticblockstorevolumesource-v1-core","subsections":[]},{"section":"apiversions-v1-meta","subsections":[]},{"section":"apiservicecondition-v1-apiregistration-k8s-io","subsections":[]},{"section":"apiresource-v1-meta","subsections":[]},{"section":"apigroup-v1-meta","subsections":[]},{"section":"-strong-definitions-strong-","subsections":[]},{"section":"networkpolicy-v1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"watch-list-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"watch-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"list-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"read-networkpolicy-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"delete-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"replace-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"patch-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"create-networkpolicy-v1-networking-k8s-io","subsections":[]}]}]},{"section":"tokenreview-v1-authentication-k8s-io","subsections":[{"section":"-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-","subsections":[{"section":"create-tokenreview-v1-authentication-k8s-io","subsections":[]}]}]},{"section":"tokenrequest-v1-authentication-k8s-io","subsections":[]},{"section":"subjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-subjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"read-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"watch-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"list-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"read-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"delete-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"replace-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"patch-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"create-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]}]},{"section":"serviceaccount-v1-core","subsections":[{"section":"-strong-read-operations-serviceaccount-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-serviceaccount-v1-core","subsections":[]},{"section":"watch-list-serviceaccount-v1-core","subsections":[]},{"section":"watch-serviceaccount-v1-core","subsections":[]},{"section":"list-all-namespaces-serviceaccount-v1-core","subsections":[]},{"section":"list-serviceaccount-v1-core","subsections":[]},{"section":"read-serviceaccount-v1-core","subsections":[]}]},{"section":"-strong-write-operations-serviceaccount-v1-core-strong-","subsections":[{"section":"delete-collection-serviceaccount-v1-core","subsections":[]},{"section":"delete-serviceaccount-v1-core","subsections":[]},{"section":"replace-serviceaccount-v1-core","subsections":[]},{"section":"patch-serviceaccount-v1-core","subsections":[]},{"section":"create-serviceaccount-v1-core","subsections":[]}]}]},{"section":"selfsubjectrulesreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectrulesreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"selfsubjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"runtimeclass-v1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1-node-k8s-io","subsections":[]}]}]},{"section":"rolebinding-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"resourcequota-v1-core","subsections":[{"section":"-strong-status-operations-resourcequota-v1-core-strong-","subsections":[{"section":"replace-status-resourcequota-v1-core","subsections":[]},{"section":"read-status-resourcequota-v1-core","subsections":[]},{"section":"patch-status-resourcequota-v1-core","subsections":[]}]},{"section":"-strong-read-operations-resourcequota-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-resourcequota-v1-core","subsections":[]},{"section":"watch-list-resourcequota-v1-core","subsections":[]},{"section":"watch-resourcequota-v1-core","subsections":[]},{"section":"list-all-namespaces-resourcequota-v1-core","subsections":[]},{"section":"list-resourcequota-v1-core","subsections":[]},{"section":"read-resourcequota-v1-core","subsections":[]}]},{"section":"-strong-write-operations-resourcequota-v1-core-strong-","subsections":[{"section":"delete-collection-resourcequota-v1-core","subsections":[]},{"section":"delete-resourcequota-v1-core","subsections":[]},{"section":"replace-resourcequota-v1-core","subsections":[]},{"section":"patch-resourcequota-v1-core","subsections":[]},{"section":"create-resourcequota-v1-core","subsections":[]}]}]},{"section":"prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]}]},{"section":"persistentvolume-v1-core","subsections":[{"section":"-strong-status-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"replace-status-persistentvolume-v1-core","subsections":[]},{"section":"read-status-persistentvolume-v1-core","subsections":[]},{"section":"patch-status-persistentvolume-v1-core","subsections":[]}]},{"section":"-strong-read-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"watch-list-persistentvolume-v1-core","subsections":[]},{"section":"watch-persistentvolume-v1-core","subsections":[]},{"section":"list-persistentvolume-v1-core","subsections":[]},{"section":"read-persistentvolume-v1-core","subsections":[]}]},{"section":"-strong-write-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"delete-collection-persistentvolume-v1-core","subsections":[]},{"section":"delete-persistentvolume-v1-core","subsections":[]},{"section":"replace-persistentvolume-v1-core","subsections":[]},{"section":"patch-persistentvolume-v1-core","subsections":[]},{"section":"create-persistentvolume-v1-core","subsections":[]}]}]},{"section":"node-v1-core","subsections":[{"section":"-strong-proxy-operations-node-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-node-v1-core","subsections":[]},{"section":"replace-connect-proxy-node-v1-core","subsections":[]},{"section":"head-connect-proxy-path-node-v1-core","subsections":[]},{"section":"head-connect-proxy-node-v1-core","subsections":[]},{"section":"get-connect-proxy-path-node-v1-core","subsections":[]},{"section":"get-connect-proxy-node-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-node-v1-core","subsections":[]},{"section":"delete-connect-proxy-node-v1-core","subsections":[]},{"section":"create-connect-proxy-path-node-v1-core","subsections":[]},{"section":"create-connect-proxy-node-v1-core","subsections":[]}]},{"section":"-strong-status-operations-node-v1-core-strong-","subsections":[{"section":"replace-status-node-v1-core","subsections":[]},{"section":"read-status-node-v1-core","subsections":[]},{"section":"patch-status-node-v1-core","subsections":[]}]},{"section":"-strong-read-operations-node-v1-core-strong-","subsections":[{"section":"watch-list-node-v1-core","subsections":[]},{"section":"watch-node-v1-core","subsections":[]},{"section":"list-node-v1-core","subsections":[]},{"section":"read-node-v1-core","subsections":[]}]},{"section":"-strong-write-operations-node-v1-core-strong-","subsections":[{"section":"delete-collection-node-v1-core","subsections":[]},{"section":"delete-node-v1-core","subsections":[]},{"section":"replace-node-v1-core","subsections":[]},{"section":"patch-node-v1-core","subsections":[]},{"section":"create-node-v1-core","subsections":[]}]}]},{"section":"namespace-v1-core","subsections":[{"section":"-strong-status-operations-namespace-v1-core-strong-","subsections":[{"section":"replace-status-namespace-v1-core","subsections":[]},{"section":"read-status-namespace-v1-core","subsections":[]},{"section":"patch-status-namespace-v1-core","subsections":[]}]},{"section":"-strong-read-operations-namespace-v1-core-strong-","subsections":[{"section":"watch-list-namespace-v1-core","subsections":[]},{"section":"watch-namespace-v1-core","subsections":[]},{"section":"list-namespace-v1-core","subsections":[]},{"section":"read-namespace-v1-core","subsections":[]}]},{"section":"-strong-write-operations-namespace-v1-core-strong-","subsections":[{"section":"delete-namespace-v1-core","subsections":[]},{"section":"replace-namespace-v1-core","subsections":[]},{"section":"patch-namespace-v1-core","subsections":[]},{"section":"create-namespace-v1-core","subsections":[]}]}]},{"section":"localsubjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-localsubjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"lease-v1-coordination-k8s-io","subsections":[{"section":"-strong-read-operations-lease-v1-coordination-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-lease-v1-coordination-k8s-io","subsections":[]},{"section":"watch-list-lease-v1-coordination-k8s-io","subsections":[]},{"section":"watch-lease-v1-coordination-k8s-io","subsections":[]},{"section":"list-all-namespaces-lease-v1-coordination-k8s-io","subsections":[]},{"section":"list-lease-v1-coordination-k8s-io","subsections":[]},{"section":"read-lease-v1-coordination-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-lease-v1-coordination-k8s-io-strong-","subsections":[{"section":"delete-collection-lease-v1-coordination-k8s-io","subsections":[]},{"section":"delete-lease-v1-coordination-k8s-io","subsections":[]},{"section":"replace-lease-v1-coordination-k8s-io","subsections":[]},{"section":"patch-lease-v1-coordination-k8s-io","subsections":[]},{"section":"create-lease-v1-coordination-k8s-io","subsections":[]}]}]},{"section":"flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]}]},{"section":"componentstatus-v1-core","subsections":[{"section":"-strong-read-operations-componentstatus-v1-core-strong-","subsections":[{"section":"list-componentstatus-v1-core","subsections":[]},{"section":"read-componentstatus-v1-core","subsections":[]}]}]},{"section":"clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"certificatesigningrequest-v1-certificates-k8s-io","subsections":[{"section":"-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"replace-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"read-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"patch-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"watch-list-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"watch-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"list-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"read-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"delete-collection-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"delete-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"replace-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"patch-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"create-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]}]},{"section":"binding-v1-core","subsections":[{"section":"-strong-write-operations-binding-v1-core-strong-","subsections":[{"section":"create-binding-v1-core","subsections":[]}]}]},{"section":"apiservice-v1-apiregistration-k8s-io","subsections":[{"section":"-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"replace-status-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"read-status-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"patch-status-apiservice-v1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"watch-list-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"watch-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"list-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"read-apiservice-v1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"delete-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"replace-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"patch-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"create-apiservice-v1-apiregistration-k8s-io","subsections":[]}]}]},{"section":"-strong-cluster-apis-strong-","subsections":[]},{"section":"podsecuritypolicy-v1beta1-policy","subsections":[{"section":"-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-","subsections":[{"section":"watch-list-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"watch-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"list-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"read-podsecuritypolicy-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"delete-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"replace-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"patch-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"create-podsecuritypolicy-v1beta1-policy","subsections":[]}]}]},{"section":"priorityclass-v1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1-scheduling-k8s-io","subsections":[]}]}]},{"section":"poddisruptionbudget-v1beta1-policy","subsections":[{"section":"-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"replace-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-status-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"delete-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"replace-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"create-poddisruptionbudget-v1beta1-policy","subsections":[]}]}]},{"section":"podtemplate-v1-core","subsections":[{"section":"-strong-read-operations-podtemplate-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-podtemplate-v1-core","subsections":[]},{"section":"watch-list-podtemplate-v1-core","subsections":[]},{"section":"watch-podtemplate-v1-core","subsections":[]},{"section":"list-all-namespaces-podtemplate-v1-core","subsections":[]},{"section":"list-podtemplate-v1-core","subsections":[]},{"section":"read-podtemplate-v1-core","subsections":[]}]},{"section":"-strong-write-operations-podtemplate-v1-core-strong-","subsections":[{"section":"delete-collection-podtemplate-v1-core","subsections":[]},{"section":"delete-podtemplate-v1-core","subsections":[]},{"section":"replace-podtemplate-v1-core","subsections":[]},{"section":"patch-podtemplate-v1-core","subsections":[]},{"section":"create-podtemplate-v1-core","subsections":[]}]}]},{"section":"validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"horizontalpodautoscaler-v1-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]}]},{"section":"limitrange-v1-core","subsections":[{"section":"-strong-read-operations-limitrange-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-limitrange-v1-core","subsections":[]},{"section":"watch-list-limitrange-v1-core","subsections":[]},{"section":"watch-limitrange-v1-core","subsections":[]},{"section":"list-all-namespaces-limitrange-v1-core","subsections":[]},{"section":"list-limitrange-v1-core","subsections":[]},{"section":"read-limitrange-v1-core","subsections":[]}]},{"section":"-strong-write-operations-limitrange-v1-core-strong-","subsections":[{"section":"delete-collection-limitrange-v1-core","subsections":[]},{"section":"delete-limitrange-v1-core","subsections":[]},{"section":"replace-limitrange-v1-core","subsections":[]},{"section":"patch-limitrange-v1-core","subsections":[]},{"section":"create-limitrange-v1-core","subsections":[]}]}]},{"section":"event-v1-core","subsections":[{"section":"-strong-read-operations-event-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1-core","subsections":[]},{"section":"watch-list-event-v1-core","subsections":[]},{"section":"watch-event-v1-core","subsections":[]},{"section":"list-all-namespaces-event-v1-core","subsections":[]},{"section":"list-event-v1-core","subsections":[]},{"section":"read-event-v1-core","subsections":[]}]},{"section":"-strong-write-operations-event-v1-core-strong-","subsections":[{"section":"delete-collection-event-v1-core","subsections":[]},{"section":"delete-event-v1-core","subsections":[]},{"section":"replace-event-v1-core","subsections":[]},{"section":"patch-event-v1-core","subsections":[]},{"section":"create-event-v1-core","subsections":[]}]}]},{"section":"customresourcedefinition-v1-apiextensions-k8s-io","subsections":[{"section":"-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"replace-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"read-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"patch-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"watch-list-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"watch-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"list-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"read-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"delete-collection-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"delete-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"replace-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"patch-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"create-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]}]},{"section":"controllerrevision-v1-apps","subsections":[{"section":"-strong-read-operations-controllerrevision-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-controllerrevision-v1-apps","subsections":[]},{"section":"watch-list-controllerrevision-v1-apps","subsections":[]},{"section":"watch-controllerrevision-v1-apps","subsections":[]},{"section":"list-all-namespaces-controllerrevision-v1-apps","subsections":[]},{"section":"list-controllerrevision-v1-apps","subsections":[]},{"section":"read-controllerrevision-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-controllerrevision-v1-apps-strong-","subsections":[{"section":"delete-collection-controllerrevision-v1-apps","subsections":[]},{"section":"delete-controllerrevision-v1-apps","subsections":[]},{"section":"replace-controllerrevision-v1-apps","subsections":[]},{"section":"patch-controllerrevision-v1-apps","subsections":[]},{"section":"create-controllerrevision-v1-apps","subsections":[]}]}]},{"section":"-strong-metadata-apis-strong-","subsections":[]},{"section":"volumeattachment-v1-storage-k8s-io","subsections":[{"section":"-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"replace-status-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"read-status-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"patch-status-volumeattachment-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1-storage-k8s-io","subsections":[]}]}]},{"section":"volume-v1-core","subsections":[]},{"section":"storageclass-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-storageclass-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"watch-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"list-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"read-storageclass-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageclass-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"delete-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"replace-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"patch-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"create-storageclass-v1-storage-k8s-io","subsections":[]}]}]},{"section":"persistentvolumeclaim-v1-core","subsections":[{"section":"-strong-status-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"replace-status-persistentvolumeclaim-v1-core","subsections":[]},{"section":"read-status-persistentvolumeclaim-v1-core","subsections":[]},{"section":"patch-status-persistentvolumeclaim-v1-core","subsections":[]}]},{"section":"-strong-read-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-persistentvolumeclaim-v1-core","subsections":[]},{"section":"watch-list-persistentvolumeclaim-v1-core","subsections":[]},{"section":"watch-persistentvolumeclaim-v1-core","subsections":[]},{"section":"list-all-namespaces-persistentvolumeclaim-v1-core","subsections":[]},{"section":"list-persistentvolumeclaim-v1-core","subsections":[]},{"section":"read-persistentvolumeclaim-v1-core","subsections":[]}]},{"section":"-strong-write-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"delete-collection-persistentvolumeclaim-v1-core","subsections":[]},{"section":"delete-persistentvolumeclaim-v1-core","subsections":[]},{"section":"replace-persistentvolumeclaim-v1-core","subsections":[]},{"section":"patch-persistentvolumeclaim-v1-core","subsections":[]},{"section":"create-persistentvolumeclaim-v1-core","subsections":[]}]}]},{"section":"secret-v1-core","subsections":[{"section":"-strong-read-operations-secret-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-secret-v1-core","subsections":[]},{"section":"watch-list-secret-v1-core","subsections":[]},{"section":"watch-secret-v1-core","subsections":[]},{"section":"list-all-namespaces-secret-v1-core","subsections":[]},{"section":"list-secret-v1-core","subsections":[]},{"section":"read-secret-v1-core","subsections":[]}]},{"section":"-strong-write-operations-secret-v1-core-strong-","subsections":[{"section":"delete-collection-secret-v1-core","subsections":[]},{"section":"delete-secret-v1-core","subsections":[]},{"section":"replace-secret-v1-core","subsections":[]},{"section":"patch-secret-v1-core","subsections":[]},{"section":"create-secret-v1-core","subsections":[]}]}]},{"section":"csinode-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csinode-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csinode-v1-storage-k8s-io","subsections":[]},{"section":"watch-csinode-v1-storage-k8s-io","subsections":[]},{"section":"list-csinode-v1-storage-k8s-io","subsections":[]},{"section":"read-csinode-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csinode-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csinode-v1-storage-k8s-io","subsections":[]},{"section":"delete-csinode-v1-storage-k8s-io","subsections":[]},{"section":"replace-csinode-v1-storage-k8s-io","subsections":[]},{"section":"patch-csinode-v1-storage-k8s-io","subsections":[]},{"section":"create-csinode-v1-storage-k8s-io","subsections":[]}]}]},{"section":"csidriver-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csidriver-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"watch-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"list-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"read-csidriver-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csidriver-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"delete-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"replace-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"patch-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"create-csidriver-v1-storage-k8s-io","subsections":[]}]}]},{"section":"configmap-v1-core","subsections":[{"section":"-strong-read-operations-configmap-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-configmap-v1-core","subsections":[]},{"section":"watch-list-configmap-v1-core","subsections":[]},{"section":"watch-configmap-v1-core","subsections":[]},{"section":"list-all-namespaces-configmap-v1-core","subsections":[]},{"section":"list-configmap-v1-core","subsections":[]},{"section":"read-configmap-v1-core","subsections":[]}]},{"section":"-strong-write-operations-configmap-v1-core-strong-","subsections":[{"section":"delete-collection-configmap-v1-core","subsections":[]},{"section":"delete-configmap-v1-core","subsections":[]},{"section":"replace-configmap-v1-core","subsections":[]},{"section":"patch-configmap-v1-core","subsections":[]},{"section":"create-configmap-v1-core","subsections":[]}]}]},{"section":"-strong-config-and-storage-apis-strong-","subsections":[]},{"section":"service-v1-core","subsections":[{"section":"-strong-proxy-operations-service-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-service-v1-core","subsections":[]},{"section":"replace-connect-proxy-service-v1-core","subsections":[]},{"section":"head-connect-proxy-path-service-v1-core","subsections":[]},{"section":"head-connect-proxy-service-v1-core","subsections":[]},{"section":"get-connect-proxy-path-service-v1-core","subsections":[]},{"section":"get-connect-proxy-service-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-service-v1-core","subsections":[]},{"section":"delete-connect-proxy-service-v1-core","subsections":[]},{"section":"create-connect-proxy-path-service-v1-core","subsections":[]},{"section":"create-connect-proxy-service-v1-core","subsections":[]}]},{"section":"-strong-status-operations-service-v1-core-strong-","subsections":[{"section":"replace-status-service-v1-core","subsections":[]},{"section":"read-status-service-v1-core","subsections":[]},{"section":"patch-status-service-v1-core","subsections":[]}]},{"section":"-strong-read-operations-service-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-service-v1-core","subsections":[]},{"section":"watch-list-service-v1-core","subsections":[]},{"section":"watch-service-v1-core","subsections":[]},{"section":"list-all-namespaces-service-v1-core","subsections":[]},{"section":"list-service-v1-core","subsections":[]},{"section":"read-service-v1-core","subsections":[]}]},{"section":"-strong-write-operations-service-v1-core-strong-","subsections":[{"section":"delete-service-v1-core","subsections":[]},{"section":"replace-service-v1-core","subsections":[]},{"section":"patch-service-v1-core","subsections":[]},{"section":"create-service-v1-core","subsections":[]}]}]},{"section":"ingressclass-v1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"watch-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"list-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"read-ingressclass-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"delete-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"replace-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"patch-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"create-ingressclass-v1-networking-k8s-io","subsections":[]}]}]},{"section":"ingress-v1-networking-k8s-io","subsections":[{"section":"-strong-status-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"replace-status-ingress-v1-networking-k8s-io","subsections":[]},{"section":"read-status-ingress-v1-networking-k8s-io","subsections":[]},{"section":"patch-status-ingress-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1-networking-k8s-io","subsections":[]},{"section":"watch-list-ingress-v1-networking-k8s-io","subsections":[]},{"section":"watch-ingress-v1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-ingress-v1-networking-k8s-io","subsections":[]},{"section":"list-ingress-v1-networking-k8s-io","subsections":[]},{"section":"read-ingress-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingress-v1-networking-k8s-io","subsections":[]},{"section":"delete-ingress-v1-networking-k8s-io","subsections":[]},{"section":"replace-ingress-v1-networking-k8s-io","subsections":[]},{"section":"patch-ingress-v1-networking-k8s-io","subsections":[]},{"section":"create-ingress-v1-networking-k8s-io","subsections":[]}]}]},{"section":"endpointslice-v1beta1-discovery-k8s-io","subsections":[{"section":"-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"read-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"delete-collection-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"delete-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"replace-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"patch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"create-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]}]},{"section":"endpoints-v1-core","subsections":[{"section":"-strong-read-operations-endpoints-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-endpoints-v1-core","subsections":[]},{"section":"watch-list-endpoints-v1-core","subsections":[]},{"section":"watch-endpoints-v1-core","subsections":[]},{"section":"list-all-namespaces-endpoints-v1-core","subsections":[]},{"section":"list-endpoints-v1-core","subsections":[]},{"section":"read-endpoints-v1-core","subsections":[]}]},{"section":"-strong-write-operations-endpoints-v1-core-strong-","subsections":[{"section":"delete-collection-endpoints-v1-core","subsections":[]},{"section":"delete-endpoints-v1-core","subsections":[]},{"section":"replace-endpoints-v1-core","subsections":[]},{"section":"patch-endpoints-v1-core","subsections":[]},{"section":"create-endpoints-v1-core","subsections":[]}]}]},{"section":"-strong-service-apis-strong-","subsections":[]},{"section":"statefulset-v1-apps","subsections":[{"section":"-strong-misc-operations-statefulset-v1-apps-strong-","subsections":[{"section":"patch-scale-statefulset-v1-apps","subsections":[]},{"section":"replace-scale-statefulset-v1-apps","subsections":[]},{"section":"read-scale-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-statefulset-v1-apps-strong-","subsections":[{"section":"replace-status-statefulset-v1-apps","subsections":[]},{"section":"read-status-statefulset-v1-apps","subsections":[]},{"section":"patch-status-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-statefulset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-statefulset-v1-apps","subsections":[]},{"section":"watch-list-statefulset-v1-apps","subsections":[]},{"section":"watch-statefulset-v1-apps","subsections":[]},{"section":"list-all-namespaces-statefulset-v1-apps","subsections":[]},{"section":"list-statefulset-v1-apps","subsections":[]},{"section":"read-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-statefulset-v1-apps-strong-","subsections":[{"section":"delete-collection-statefulset-v1-apps","subsections":[]},{"section":"delete-statefulset-v1-apps","subsections":[]},{"section":"replace-statefulset-v1-apps","subsections":[]},{"section":"patch-statefulset-v1-apps","subsections":[]},{"section":"create-statefulset-v1-apps","subsections":[]}]}]},{"section":"replicationcontroller-v1-core","subsections":[{"section":"-strong-misc-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"patch-scale-replicationcontroller-v1-core","subsections":[]},{"section":"replace-scale-replicationcontroller-v1-core","subsections":[]},{"section":"read-scale-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-status-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"replace-status-replicationcontroller-v1-core","subsections":[]},{"section":"read-status-replicationcontroller-v1-core","subsections":[]},{"section":"patch-status-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-read-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-replicationcontroller-v1-core","subsections":[]},{"section":"watch-list-replicationcontroller-v1-core","subsections":[]},{"section":"watch-replicationcontroller-v1-core","subsections":[]},{"section":"list-all-namespaces-replicationcontroller-v1-core","subsections":[]},{"section":"list-replicationcontroller-v1-core","subsections":[]},{"section":"read-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-write-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"delete-collection-replicationcontroller-v1-core","subsections":[]},{"section":"delete-replicationcontroller-v1-core","subsections":[]},{"section":"replace-replicationcontroller-v1-core","subsections":[]},{"section":"patch-replicationcontroller-v1-core","subsections":[]},{"section":"create-replicationcontroller-v1-core","subsections":[]}]}]},{"section":"replicaset-v1-apps","subsections":[{"section":"-strong-misc-operations-replicaset-v1-apps-strong-","subsections":[{"section":"patch-scale-replicaset-v1-apps","subsections":[]},{"section":"replace-scale-replicaset-v1-apps","subsections":[]},{"section":"read-scale-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-replicaset-v1-apps-strong-","subsections":[{"section":"replace-status-replicaset-v1-apps","subsections":[]},{"section":"read-status-replicaset-v1-apps","subsections":[]},{"section":"patch-status-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-replicaset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-replicaset-v1-apps","subsections":[]},{"section":"watch-list-replicaset-v1-apps","subsections":[]},{"section":"watch-replicaset-v1-apps","subsections":[]},{"section":"list-all-namespaces-replicaset-v1-apps","subsections":[]},{"section":"list-replicaset-v1-apps","subsections":[]},{"section":"read-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-replicaset-v1-apps-strong-","subsections":[{"section":"delete-collection-replicaset-v1-apps","subsections":[]},{"section":"delete-replicaset-v1-apps","subsections":[]},{"section":"replace-replicaset-v1-apps","subsections":[]},{"section":"patch-replicaset-v1-apps","subsections":[]},{"section":"create-replicaset-v1-apps","subsections":[]}]}]},{"section":"pod-v1-core","subsections":[{"section":"-strong-misc-operations-pod-v1-core-strong-","subsections":[{"section":"read-log-pod-v1-core","subsections":[]}]},{"section":"-strong-proxy-operations-pod-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"replace-connect-proxy-pod-v1-core","subsections":[]},{"section":"head-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"head-connect-proxy-pod-v1-core","subsections":[]},{"section":"get-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"get-connect-proxy-pod-v1-core","subsections":[]},{"section":"get-connect-portforward-pod-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"delete-connect-proxy-pod-v1-core","subsections":[]},{"section":"create-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"create-connect-proxy-pod-v1-core","subsections":[]},{"section":"create-connect-portforward-pod-v1-core","subsections":[]}]},{"section":"-strong-status-operations-pod-v1-core-strong-","subsections":[{"section":"replace-status-pod-v1-core","subsections":[]},{"section":"read-status-pod-v1-core","subsections":[]},{"section":"patch-status-pod-v1-core","subsections":[]}]},{"section":"-strong-read-operations-pod-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-pod-v1-core","subsections":[]},{"section":"watch-list-pod-v1-core","subsections":[]},{"section":"watch-pod-v1-core","subsections":[]},{"section":"list-all-namespaces-pod-v1-core","subsections":[]},{"section":"list-pod-v1-core","subsections":[]},{"section":"read-pod-v1-core","subsections":[]}]},{"section":"-strong-write-operations-pod-v1-core-strong-","subsections":[{"section":"delete-collection-pod-v1-core","subsections":[]},{"section":"delete-pod-v1-core","subsections":[]},{"section":"replace-pod-v1-core","subsections":[]},{"section":"patch-pod-v1-core","subsections":[]},{"section":"create-eviction-pod-v1-core","subsections":[]},{"section":"create-pod-v1-core","subsections":[]}]}]},{"section":"job-v1-batch","subsections":[{"section":"-strong-status-operations-job-v1-batch-strong-","subsections":[{"section":"replace-status-job-v1-batch","subsections":[]},{"section":"read-status-job-v1-batch","subsections":[]},{"section":"patch-status-job-v1-batch","subsections":[]}]},{"section":"-strong-read-operations-job-v1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-job-v1-batch","subsections":[]},{"section":"watch-list-job-v1-batch","subsections":[]},{"section":"watch-job-v1-batch","subsections":[]},{"section":"list-all-namespaces-job-v1-batch","subsections":[]},{"section":"list-job-v1-batch","subsections":[]},{"section":"read-job-v1-batch","subsections":[]}]},{"section":"-strong-write-operations-job-v1-batch-strong-","subsections":[{"section":"delete-collection-job-v1-batch","subsections":[]},{"section":"delete-job-v1-batch","subsections":[]},{"section":"replace-job-v1-batch","subsections":[]},{"section":"patch-job-v1-batch","subsections":[]},{"section":"create-job-v1-batch","subsections":[]}]}]},{"section":"deployment-v1-apps","subsections":[{"section":"-strong-misc-operations-deployment-v1-apps-strong-","subsections":[{"section":"patch-scale-deployment-v1-apps","subsections":[]},{"section":"replace-scale-deployment-v1-apps","subsections":[]},{"section":"read-scale-deployment-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-deployment-v1-apps-strong-","subsections":[{"section":"replace-status-deployment-v1-apps","subsections":[]},{"section":"read-status-deployment-v1-apps","subsections":[]},{"section":"patch-status-deployment-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-deployment-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-deployment-v1-apps","subsections":[]},{"section":"watch-list-deployment-v1-apps","subsections":[]},{"section":"watch-deployment-v1-apps","subsections":[]},{"section":"list-all-namespaces-deployment-v1-apps","subsections":[]},{"section":"list-deployment-v1-apps","subsections":[]},{"section":"read-deployment-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-deployment-v1-apps-strong-","subsections":[{"section":"delete-collection-deployment-v1-apps","subsections":[]},{"section":"delete-deployment-v1-apps","subsections":[]},{"section":"replace-deployment-v1-apps","subsections":[]},{"section":"patch-deployment-v1-apps","subsections":[]},{"section":"create-deployment-v1-apps","subsections":[]}]}]},{"section":"daemonset-v1-apps","subsections":[{"section":"-strong-status-operations-daemonset-v1-apps-strong-","subsections":[{"section":"replace-status-daemonset-v1-apps","subsections":[]},{"section":"read-status-daemonset-v1-apps","subsections":[]},{"section":"patch-status-daemonset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-daemonset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-daemonset-v1-apps","subsections":[]},{"section":"watch-list-daemonset-v1-apps","subsections":[]},{"section":"watch-daemonset-v1-apps","subsections":[]},{"section":"list-all-namespaces-daemonset-v1-apps","subsections":[]},{"section":"list-daemonset-v1-apps","subsections":[]},{"section":"read-daemonset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-daemonset-v1-apps-strong-","subsections":[{"section":"delete-collection-daemonset-v1-apps","subsections":[]},{"section":"delete-daemonset-v1-apps","subsections":[]},{"section":"replace-daemonset-v1-apps","subsections":[]},{"section":"patch-daemonset-v1-apps","subsections":[]},{"section":"create-daemonset-v1-apps","subsections":[]}]}]},{"section":"cronjob-v1beta1-batch","subsections":[{"section":"-strong-status-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"replace-status-cronjob-v1beta1-batch","subsections":[]},{"section":"read-status-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-status-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-read-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-list-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-cronjob-v1beta1-batch","subsections":[]},{"section":"list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"list-cronjob-v1beta1-batch","subsections":[]},{"section":"read-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-write-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"delete-collection-cronjob-v1beta1-batch","subsections":[]},{"section":"delete-cronjob-v1beta1-batch","subsections":[]},{"section":"replace-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-cronjob-v1beta1-batch","subsections":[]},{"section":"create-cronjob-v1beta1-batch","subsections":[]}]}]},{"section":"container-v1-core","subsections":[]},{"section":"-strong-workloads-apis-strong-","subsections":[]},{"section":"-strong-api-groups-strong-","subsections":[]},{"section":"-strong-api-overview-strong-","subsections":[]}],"flatToc":["webhookclientconfig-v1beta1-apiextensions-k8s-io","webhookclientconfig-v1beta1-admissionregistration-k8s-io","webhookclientconfig-v1-apiextensions-k8s-io","volumenoderesources-v1beta1-storage-k8s-io","volumeerror-v1alpha1-storage-k8s-io","volumeerror-v1beta1-storage-k8s-io","volumeattachmentsource-v1alpha1-storage-k8s-io","volumeattachmentsource-v1beta1-storage-k8s-io","watch-list-volumeattachment-v1alpha1-storage-k8s-io","watch-volumeattachment-v1alpha1-storage-k8s-io","list-volumeattachment-v1alpha1-storage-k8s-io","read-volumeattachment-v1alpha1-storage-k8s-io","-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1alpha1-storage-k8s-io","delete-volumeattachment-v1alpha1-storage-k8s-io","replace-volumeattachment-v1alpha1-storage-k8s-io","patch-volumeattachment-v1alpha1-storage-k8s-io","create-volumeattachment-v1alpha1-storage-k8s-io","-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","volumeattachment-v1alpha1-storage-k8s-io","watch-list-volumeattachment-v1beta1-storage-k8s-io","watch-volumeattachment-v1beta1-storage-k8s-io","list-volumeattachment-v1beta1-storage-k8s-io","read-volumeattachment-v1beta1-storage-k8s-io","-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1beta1-storage-k8s-io","delete-volumeattachment-v1beta1-storage-k8s-io","replace-volumeattachment-v1beta1-storage-k8s-io","patch-volumeattachment-v1beta1-storage-k8s-io","create-volumeattachment-v1beta1-storage-k8s-io","-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","volumeattachment-v1beta1-storage-k8s-io","watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","validatingwebhook-v1beta1-admissionregistration-k8s-io","userinfo-v1beta1-authentication-k8s-io","create-tokenreview-v1beta1-authentication-k8s-io","-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-","tokenreview-v1beta1-authentication-k8s-io","tokenrequest-v1beta1-storage-k8s-io","tokenrequest-v1-storage-k8s-io","subjectrulesreviewstatus-v1beta1-authorization-k8s-io","create-subjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-","subjectaccessreview-v1beta1-authorization-k8s-io","subject-v1alpha1-rbac-authorization-k8s-io","subject-v1beta1-rbac-authorization-k8s-io","subject-v1-rbac-authorization-k8s-io","watch-list-storageclass-v1beta1-storage-k8s-io","watch-storageclass-v1beta1-storage-k8s-io","list-storageclass-v1beta1-storage-k8s-io","read-storageclass-v1beta1-storage-k8s-io","-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-","delete-collection-storageclass-v1beta1-storage-k8s-io","delete-storageclass-v1beta1-storage-k8s-io","replace-storageclass-v1beta1-storage-k8s-io","patch-storageclass-v1beta1-storage-k8s-io","create-storageclass-v1beta1-storage-k8s-io","-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-","storageclass-v1beta1-storage-k8s-io","servicereference-v1beta1-apiregistration-k8s-io","servicereference-v1beta1-apiextensions-k8s-io","servicereference-v1beta1-admissionregistration-k8s-io","servicereference-v1-apiregistration-k8s-io","servicereference-v1-apiextensions-k8s-io","create-selfsubjectrulesreview-v1beta1-authorization-k8s-io","-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-","selfsubjectrulesreview-v1beta1-authorization-k8s-io","create-selfsubjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","selfsubjectaccessreview-v1beta1-authorization-k8s-io","scheduling-v1alpha1-node-k8s-io","scheduling-v1beta1-node-k8s-io","watch-list-runtimeclass-v1alpha1-node-k8s-io","watch-runtimeclass-v1alpha1-node-k8s-io","list-runtimeclass-v1alpha1-node-k8s-io","read-runtimeclass-v1alpha1-node-k8s-io","-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","delete-collection-runtimeclass-v1alpha1-node-k8s-io","delete-runtimeclass-v1alpha1-node-k8s-io","replace-runtimeclass-v1alpha1-node-k8s-io","patch-runtimeclass-v1alpha1-node-k8s-io","create-runtimeclass-v1alpha1-node-k8s-io","-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","runtimeclass-v1alpha1-node-k8s-io","watch-list-runtimeclass-v1beta1-node-k8s-io","watch-runtimeclass-v1beta1-node-k8s-io","list-runtimeclass-v1beta1-node-k8s-io","read-runtimeclass-v1beta1-node-k8s-io","-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-","delete-collection-runtimeclass-v1beta1-node-k8s-io","delete-runtimeclass-v1beta1-node-k8s-io","replace-runtimeclass-v1beta1-node-k8s-io","patch-runtimeclass-v1beta1-node-k8s-io","create-runtimeclass-v1beta1-node-k8s-io","-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-","runtimeclass-v1beta1-node-k8s-io","rulewithoperations-v1beta1-admissionregistration-k8s-io","roleref-v1alpha1-rbac-authorization-k8s-io","roleref-v1beta1-rbac-authorization-k8s-io","watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-rolebinding-v1alpha1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","list-rolebinding-v1alpha1-rbac-authorization-k8s-io","read-rolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io","delete-rolebinding-v1alpha1-rbac-authorization-k8s-io","replace-rolebinding-v1alpha1-rbac-authorization-k8s-io","patch-rolebinding-v1alpha1-rbac-authorization-k8s-io","create-rolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io","watch-rolebinding-v1beta1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","list-rolebinding-v1beta1-rbac-authorization-k8s-io","read-rolebinding-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io","delete-rolebinding-v1beta1-rbac-authorization-k8s-io","replace-rolebinding-v1beta1-rbac-authorization-k8s-io","patch-rolebinding-v1beta1-rbac-authorization-k8s-io","create-rolebinding-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","rolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","watch-list-role-v1alpha1-rbac-authorization-k8s-io","watch-role-v1alpha1-rbac-authorization-k8s-io","list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","list-role-v1alpha1-rbac-authorization-k8s-io","read-role-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1alpha1-rbac-authorization-k8s-io","delete-role-v1alpha1-rbac-authorization-k8s-io","replace-role-v1alpha1-rbac-authorization-k8s-io","patch-role-v1alpha1-rbac-authorization-k8s-io","create-role-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","role-v1alpha1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","watch-list-role-v1beta1-rbac-authorization-k8s-io","watch-role-v1beta1-rbac-authorization-k8s-io","list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","list-role-v1beta1-rbac-authorization-k8s-io","read-role-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1beta1-rbac-authorization-k8s-io","delete-role-v1beta1-rbac-authorization-k8s-io","replace-role-v1beta1-rbac-authorization-k8s-io","patch-role-v1beta1-rbac-authorization-k8s-io","create-role-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","role-v1beta1-rbac-authorization-k8s-io","resourcerule-v1beta1-authorization-k8s-io","resourcemetricstatus-v2beta1-autoscaling","resourcemetricsource-v2beta1-autoscaling","resourceattributes-v1beta1-authorization-k8s-io","watch-list-priorityclass-v1alpha1-scheduling-k8s-io","watch-priorityclass-v1alpha1-scheduling-k8s-io","list-priorityclass-v1alpha1-scheduling-k8s-io","read-priorityclass-v1alpha1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1alpha1-scheduling-k8s-io","delete-priorityclass-v1alpha1-scheduling-k8s-io","replace-priorityclass-v1alpha1-scheduling-k8s-io","patch-priorityclass-v1alpha1-scheduling-k8s-io","create-priorityclass-v1alpha1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","priorityclass-v1alpha1-scheduling-k8s-io","watch-list-priorityclass-v1beta1-scheduling-k8s-io","watch-priorityclass-v1beta1-scheduling-k8s-io","list-priorityclass-v1beta1-scheduling-k8s-io","read-priorityclass-v1beta1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1beta1-scheduling-k8s-io","delete-priorityclass-v1beta1-scheduling-k8s-io","replace-priorityclass-v1beta1-scheduling-k8s-io","patch-priorityclass-v1beta1-scheduling-k8s-io","create-priorityclass-v1beta1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","priorityclass-v1beta1-scheduling-k8s-io","policyrule-v1alpha1-rbac-authorization-k8s-io","policyrule-v1beta1-rbac-authorization-k8s-io","podsmetricstatus-v2beta1-autoscaling","podsmetricsource-v2beta1-autoscaling","replace-status-poddisruptionbudget-v1beta1-policy","read-status-poddisruptionbudget-v1beta1-policy","patch-status-poddisruptionbudget-v1beta1-policy","-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","watch-list-poddisruptionbudget-v1beta1-policy","watch-poddisruptionbudget-v1beta1-policy","list-all-namespaces-poddisruptionbudget-v1beta1-policy","list-poddisruptionbudget-v1beta1-policy","read-poddisruptionbudget-v1beta1-policy","-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","delete-collection-poddisruptionbudget-v1beta1-policy","delete-poddisruptionbudget-v1beta1-policy","replace-poddisruptionbudget-v1beta1-policy","patch-poddisruptionbudget-v1beta1-policy","create-poddisruptionbudget-v1beta1-policy","-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","poddisruptionbudget-v1beta1-policy","overhead-v1alpha1-node-k8s-io","overhead-v1beta1-node-k8s-io","objectmetricstatus-v2beta1-autoscaling","objectmetricsource-v2beta1-autoscaling","nonresourcerule-v1beta1-authorization-k8s-io","nonresourceattributes-v1beta1-authorization-k8s-io","watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","mutatingwebhook-v1beta1-admissionregistration-k8s-io","metricstatus-v2beta1-autoscaling","metricspec-v2beta1-autoscaling","create-localsubjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","localsubjectaccessreview-v1beta1-authorization-k8s-io","watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io","watch-list-lease-v1beta1-coordination-k8s-io","watch-lease-v1beta1-coordination-k8s-io","list-all-namespaces-lease-v1beta1-coordination-k8s-io","list-lease-v1beta1-coordination-k8s-io","read-lease-v1beta1-coordination-k8s-io","-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-","delete-collection-lease-v1beta1-coordination-k8s-io","delete-lease-v1beta1-coordination-k8s-io","replace-lease-v1beta1-coordination-k8s-io","patch-lease-v1beta1-coordination-k8s-io","create-lease-v1beta1-coordination-k8s-io","-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-","lease-v1beta1-coordination-k8s-io","jobtemplatespec-v1beta1-batch","jsonschemapropsorbool-v1beta1-apiextensions-k8s-io","jsonschemapropsorarray-v1beta1-apiextensions-k8s-io","jsonschemaprops-v1beta1-apiextensions-k8s-io","json-v1beta1-apiextensions-k8s-io","ingresstls-v1beta1-networking-k8s-io","ingresstls-v1beta1-extensions","ingressrule-v1beta1-networking-k8s-io","ingressrule-v1beta1-extensions","ingressclassparametersreference-v1beta1-networking-k8s-io","watch-list-ingressclass-v1beta1-networking-k8s-io","watch-ingressclass-v1beta1-networking-k8s-io","list-ingressclass-v1beta1-networking-k8s-io","read-ingressclass-v1beta1-networking-k8s-io","-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-","delete-collection-ingressclass-v1beta1-networking-k8s-io","delete-ingressclass-v1beta1-networking-k8s-io","replace-ingressclass-v1beta1-networking-k8s-io","patch-ingressclass-v1beta1-networking-k8s-io","create-ingressclass-v1beta1-networking-k8s-io","-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-","ingressclass-v1beta1-networking-k8s-io","ingressbackend-v1beta1-networking-k8s-io","ingressbackend-v1beta1-extensions","replace-status-ingress-v1beta1-networking-k8s-io","read-status-ingress-v1beta1-networking-k8s-io","patch-status-ingress-v1beta1-networking-k8s-io","-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-","watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io","watch-list-ingress-v1beta1-networking-k8s-io","watch-ingress-v1beta1-networking-k8s-io","list-all-namespaces-ingress-v1beta1-networking-k8s-io","list-ingress-v1beta1-networking-k8s-io","read-ingress-v1beta1-networking-k8s-io","-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-","delete-collection-ingress-v1beta1-networking-k8s-io","delete-ingress-v1beta1-networking-k8s-io","replace-ingress-v1beta1-networking-k8s-io","patch-ingress-v1beta1-networking-k8s-io","create-ingress-v1beta1-networking-k8s-io","-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-","ingress-v1beta1-networking-k8s-io","replace-status-ingress-v1beta1-extensions","read-status-ingress-v1beta1-extensions","patch-status-ingress-v1beta1-extensions","-strong-status-operations-ingress-v1beta1-extensions-strong-","watch-list-all-namespaces-ingress-v1beta1-extensions","watch-list-ingress-v1beta1-extensions","watch-ingress-v1beta1-extensions","list-all-namespaces-ingress-v1beta1-extensions","list-ingress-v1beta1-extensions","read-ingress-v1beta1-extensions","-strong-read-operations-ingress-v1beta1-extensions-strong-","delete-collection-ingress-v1beta1-extensions","delete-ingress-v1beta1-extensions","replace-ingress-v1beta1-extensions","patch-ingress-v1beta1-extensions","create-ingress-v1beta1-extensions","-strong-write-operations-ingress-v1beta1-extensions-strong-","ingress-v1beta1-extensions","horizontalpodautoscalercondition-v2beta1-autoscaling","replace-status-horizontalpodautoscaler-v2beta1-autoscaling","read-status-horizontalpodautoscaler-v2beta1-autoscaling","patch-status-horizontalpodautoscaler-v2beta1-autoscaling","-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","watch-list-horizontalpodautoscaler-v2beta1-autoscaling","watch-horizontalpodautoscaler-v2beta1-autoscaling","list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","list-horizontalpodautoscaler-v2beta1-autoscaling","read-horizontalpodautoscaler-v2beta1-autoscaling","-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v2beta1-autoscaling","delete-horizontalpodautoscaler-v2beta1-autoscaling","replace-horizontalpodautoscaler-v2beta1-autoscaling","patch-horizontalpodautoscaler-v2beta1-autoscaling","create-horizontalpodautoscaler-v2beta1-autoscaling","-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","horizontalpodautoscaler-v2beta1-autoscaling","replace-status-horizontalpodautoscaler-v2beta2-autoscaling","read-status-horizontalpodautoscaler-v2beta2-autoscaling","patch-status-horizontalpodautoscaler-v2beta2-autoscaling","-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","watch-list-horizontalpodautoscaler-v2beta2-autoscaling","watch-horizontalpodautoscaler-v2beta2-autoscaling","list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","list-horizontalpodautoscaler-v2beta2-autoscaling","read-horizontalpodautoscaler-v2beta2-autoscaling","-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v2beta2-autoscaling","delete-horizontalpodautoscaler-v2beta2-autoscaling","replace-horizontalpodautoscaler-v2beta2-autoscaling","patch-horizontalpodautoscaler-v2beta2-autoscaling","create-horizontalpodautoscaler-v2beta2-autoscaling","-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","horizontalpodautoscaler-v2beta2-autoscaling","httpingressrulevalue-v1beta1-networking-k8s-io","httpingressrulevalue-v1beta1-extensions","httpingresspath-v1beta1-networking-k8s-io","httpingresspath-v1beta1-extensions","forzone-v1beta1-discovery-k8s-io","externalmetricstatus-v2beta1-autoscaling","externalmetricsource-v2beta1-autoscaling","externaldocumentation-v1beta1-apiextensions-k8s-io","eventseries-v1beta1-events-k8s-io","eventseries-v1-events-k8s-io","watch-list-all-namespaces-event-v1beta1-events-k8s-io","watch-list-event-v1beta1-events-k8s-io","watch-event-v1beta1-events-k8s-io","list-all-namespaces-event-v1beta1-events-k8s-io","list-event-v1beta1-events-k8s-io","read-event-v1beta1-events-k8s-io","-strong-read-operations-event-v1beta1-events-k8s-io-strong-","delete-collection-event-v1beta1-events-k8s-io","delete-event-v1beta1-events-k8s-io","replace-event-v1beta1-events-k8s-io","patch-event-v1beta1-events-k8s-io","create-event-v1beta1-events-k8s-io","-strong-write-operations-event-v1beta1-events-k8s-io-strong-","event-v1beta1-events-k8s-io","watch-list-all-namespaces-event-v1-events-k8s-io","watch-list-event-v1-events-k8s-io","watch-event-v1-events-k8s-io","list-all-namespaces-event-v1-events-k8s-io","list-event-v1-events-k8s-io","read-event-v1-events-k8s-io","-strong-read-operations-event-v1-events-k8s-io-strong-","delete-collection-event-v1-events-k8s-io","delete-event-v1-events-k8s-io","replace-event-v1-events-k8s-io","patch-event-v1-events-k8s-io","create-event-v1-events-k8s-io","-strong-write-operations-event-v1-events-k8s-io-strong-","event-v1-events-k8s-io","watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","watch-list-endpointslice-v1beta1-discovery-k8s-io","watch-endpointslice-v1beta1-discovery-k8s-io","list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","list-endpointslice-v1beta1-discovery-k8s-io","read-endpointslice-v1beta1-discovery-k8s-io","-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","delete-collection-endpointslice-v1beta1-discovery-k8s-io","delete-endpointslice-v1beta1-discovery-k8s-io","replace-endpointslice-v1beta1-discovery-k8s-io","patch-endpointslice-v1beta1-discovery-k8s-io","create-endpointslice-v1beta1-discovery-k8s-io","-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","endpointslice-v1beta1-discovery-k8s-io","endpointport-v1beta1-discovery-k8s-io","endpointport-v1-discovery-k8s-io","endpointhints-v1beta1-discovery-k8s-io","endpointconditions-v1beta1-discovery-k8s-io","endpoint-v1beta1-discovery-k8s-io","customresourcevalidation-v1beta1-apiextensions-k8s-io","customresourcesubresources-v1beta1-apiextensions-k8s-io","customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io","customresourcesubresourcescale-v1beta1-apiextensions-k8s-io","customresourcedefinitionversion-v1beta1-apiextensions-k8s-io","customresourcedefinitionnames-v1beta1-apiextensions-k8s-io","customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io","replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io","watch-customresourcedefinition-v1beta1-apiextensions-k8s-io","list-customresourcedefinition-v1beta1-apiextensions-k8s-io","read-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io","delete-customresourcedefinition-v1beta1-apiextensions-k8s-io","replace-customresourcedefinition-v1beta1-apiextensions-k8s-io","patch-customresourcedefinition-v1beta1-apiextensions-k8s-io","create-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","customresourcedefinition-v1beta1-apiextensions-k8s-io","customresourceconversion-v1beta1-apiextensions-k8s-io","customresourcecolumndefinition-v1beta1-apiextensions-k8s-io","crossversionobjectreference-v2beta1-autoscaling","crossversionobjectreference-v2beta2-autoscaling","replace-status-cronjob-v1beta1-batch","read-status-cronjob-v1beta1-batch","patch-status-cronjob-v1beta1-batch","-strong-status-operations-cronjob-v1beta1-batch-strong-","watch-list-all-namespaces-cronjob-v1beta1-batch","watch-list-cronjob-v1beta1-batch","watch-cronjob-v1beta1-batch","list-all-namespaces-cronjob-v1beta1-batch","list-cronjob-v1beta1-batch","read-cronjob-v1beta1-batch","-strong-read-operations-cronjob-v1beta1-batch-strong-","delete-collection-cronjob-v1beta1-batch","delete-cronjob-v1beta1-batch","replace-cronjob-v1beta1-batch","patch-cronjob-v1beta1-batch","create-cronjob-v1beta1-batch","-strong-write-operations-cronjob-v1beta1-batch-strong-","cronjob-v1beta1-batch","containerresourcemetricstatus-v2beta1-autoscaling","containerresourcemetricsource-v2beta1-autoscaling","watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io","watch-clusterrole-v1alpha1-rbac-authorization-k8s-io","list-clusterrole-v1alpha1-rbac-authorization-k8s-io","read-clusterrole-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io","delete-clusterrole-v1alpha1-rbac-authorization-k8s-io","replace-clusterrole-v1alpha1-rbac-authorization-k8s-io","patch-clusterrole-v1alpha1-rbac-authorization-k8s-io","create-clusterrole-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","clusterrole-v1alpha1-rbac-authorization-k8s-io","watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io","watch-clusterrole-v1beta1-rbac-authorization-k8s-io","list-clusterrole-v1beta1-rbac-authorization-k8s-io","read-clusterrole-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io","delete-clusterrole-v1beta1-rbac-authorization-k8s-io","replace-clusterrole-v1beta1-rbac-authorization-k8s-io","patch-clusterrole-v1beta1-rbac-authorization-k8s-io","create-clusterrole-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","clusterrole-v1beta1-rbac-authorization-k8s-io","certificatesigningrequestcondition-v1beta1-certificates-k8s-io","replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io","read-status-certificatesigningrequest-v1beta1-certificates-k8s-io","patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io","watch-certificatesigningrequest-v1beta1-certificates-k8s-io","list-certificatesigningrequest-v1beta1-certificates-k8s-io","read-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io","delete-certificatesigningrequest-v1beta1-certificates-k8s-io","replace-certificatesigningrequest-v1beta1-certificates-k8s-io","patch-certificatesigningrequest-v1beta1-certificates-k8s-io","create-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","certificatesigningrequest-v1beta1-certificates-k8s-io","watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","watch-list-csistoragecapacity-v1alpha1-storage-k8s-io","watch-csistoragecapacity-v1alpha1-storage-k8s-io","list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","list-csistoragecapacity-v1alpha1-storage-k8s-io","read-csistoragecapacity-v1alpha1-storage-k8s-io","-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io","delete-csistoragecapacity-v1alpha1-storage-k8s-io","replace-csistoragecapacity-v1alpha1-storage-k8s-io","patch-csistoragecapacity-v1alpha1-storage-k8s-io","create-csistoragecapacity-v1alpha1-storage-k8s-io","-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","csistoragecapacity-v1alpha1-storage-k8s-io","csinodedriver-v1beta1-storage-k8s-io","watch-list-csinode-v1beta1-storage-k8s-io","watch-csinode-v1beta1-storage-k8s-io","list-csinode-v1beta1-storage-k8s-io","read-csinode-v1beta1-storage-k8s-io","-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-","delete-collection-csinode-v1beta1-storage-k8s-io","delete-csinode-v1beta1-storage-k8s-io","replace-csinode-v1beta1-storage-k8s-io","patch-csinode-v1beta1-storage-k8s-io","create-csinode-v1beta1-storage-k8s-io","-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-","csinode-v1beta1-storage-k8s-io","watch-list-csidriver-v1beta1-storage-k8s-io","watch-csidriver-v1beta1-storage-k8s-io","list-csidriver-v1beta1-storage-k8s-io","read-csidriver-v1beta1-storage-k8s-io","-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-","delete-collection-csidriver-v1beta1-storage-k8s-io","delete-csidriver-v1beta1-storage-k8s-io","replace-csidriver-v1beta1-storage-k8s-io","patch-csidriver-v1beta1-storage-k8s-io","create-csidriver-v1beta1-storage-k8s-io","-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-","csidriver-v1beta1-storage-k8s-io","aggregationrule-v1alpha1-rbac-authorization-k8s-io","aggregationrule-v1beta1-rbac-authorization-k8s-io","apiservicecondition-v1beta1-apiregistration-k8s-io","replace-status-apiservice-v1beta1-apiregistration-k8s-io","read-status-apiservice-v1beta1-apiregistration-k8s-io","patch-status-apiservice-v1beta1-apiregistration-k8s-io","-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","watch-list-apiservice-v1beta1-apiregistration-k8s-io","watch-apiservice-v1beta1-apiregistration-k8s-io","list-apiservice-v1beta1-apiregistration-k8s-io","read-apiservice-v1beta1-apiregistration-k8s-io","-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","delete-collection-apiservice-v1beta1-apiregistration-k8s-io","delete-apiservice-v1beta1-apiregistration-k8s-io","replace-apiservice-v1beta1-apiregistration-k8s-io","patch-apiservice-v1beta1-apiregistration-k8s-io","create-apiservice-v1beta1-apiregistration-k8s-io","-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","apiservice-v1beta1-apiregistration-k8s-io","-strong-old-api-versions-strong-","windowssecuritycontextoptions-v1-core","weightedpodaffinityterm-v1-core","webhookconversion-v1-apiextensions-k8s-io","webhookclientconfig-v1-admissionregistration-k8s-io","watchevent-v1-meta","vspherevirtualdiskvolumesource-v1-core","volumeprojection-v1-core","volumenoderesources-v1-storage-k8s-io","volumenodeaffinity-v1-core","volumemount-v1-core","volumeerror-v1-storage-k8s-io","volumedevice-v1-core","volumeattachmentsource-v1-storage-k8s-io","validatingwebhook-v1-admissionregistration-k8s-io","usersubject-v1beta1-flowcontrol-apiserver-k8s-io","userinfo-v1-authentication-k8s-io","typedlocalobjectreference-v1-core","topologyspreadconstraint-v1-core","topologyselectorterm-v1-core","topologyselectorlabelrequirement-v1-core","toleration-v1-core","time-v1-meta","taint-v1-core","tcpsocketaction-v1-core","sysctl-v1-core","supplementalgroupsstrategyoptions-v1beta1-policy","subjectrulesreviewstatus-v1-authorization-k8s-io","subject-v1beta1-flowcontrol-apiserver-k8s-io","storageversioncondition-v1alpha1-internal-apiserver-k8s-io","storageosvolumesource-v1-core","storageospersistentvolumesource-v1-core","statusdetails-v1-meta","statuscause-v1-meta","status-v1-meta","statefulsetupdatestrategy-v1-apps","statefulsetcondition-v1-apps","sessionaffinityconfig-v1-core","servicereference-v1-admissionregistration-k8s-io","serviceport-v1-core","servicebackendport-v1-networking-k8s-io","serviceaccounttokenprojection-v1-core","serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io","serverstorageversion-v1alpha1-internal-apiserver-k8s-io","serveraddressbyclientcidr-v1-meta","securitycontext-v1-core","secretvolumesource-v1-core","secretreference-v1-core","secretprojection-v1-core","secretkeyselector-v1-core","secretenvsource-v1-core","seccompprofile-v1-core","scopedresourceselectorrequirement-v1-core","scopeselector-v1-core","scheduling-v1-node-k8s-io","scaleiovolumesource-v1-core","scaleiopersistentvolumesource-v1-core","scale-v1-autoscaling","selinuxstrategyoptions-v1beta1-policy","selinuxoptions-v1-core","runtimeclassstrategyoptions-v1beta1-policy","runasuserstrategyoptions-v1beta1-policy","runasgroupstrategyoptions-v1beta1-policy","rulewithoperations-v1-admissionregistration-k8s-io","rollingupdatestatefulsetstrategy-v1-apps","roleref-v1-rbac-authorization-k8s-io","resourcerule-v1-authorization-k8s-io","resourcerequirements-v1-core","resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","resourcemetricstatus-v2beta2-autoscaling","resourcemetricsource-v2beta2-autoscaling","resourcefieldselector-v1-core","resourceattributes-v1-authorization-k8s-io","replicationcontrollercondition-v1-core","replicasetcondition-v1-apps","rbdvolumesource-v1-core","rbdpersistentvolumesource-v1-core","quobytevolumesource-v1-core","queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","quantity-resource-core","projectedvolumesource-v1-core","probe-v1-core","prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io","prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io","preferredschedulingterm-v1-core","preconditions-v1-meta","portworxvolumesource-v1-core","portstatus-v1-core","policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io","policyrule-v1-rbac-authorization-k8s-io","podsmetricstatus-v2beta2-autoscaling","podsmetricsource-v2beta2-autoscaling","podsecuritycontext-v1-core","podreadinessgate-v1-core","podip-v1-core","poddisruptionbudget-v1-policy","poddnsconfigoption-v1-core","poddnsconfig-v1-core","podcondition-v1-core","podantiaffinity-v1-core","podaffinityterm-v1-core","podaffinity-v1-core","photonpersistentdiskvolumesource-v1-core","persistentvolumeclaimvolumesource-v1-core","persistentvolumeclaimtemplate-v1-core","persistentvolumeclaimcondition-v1-core","patch-v1-meta","ownerreference-v1-meta","overhead-v1-node-k8s-io","objectreference-v1-core","objectmetricstatus-v2beta2-autoscaling","objectmetricsource-v2beta2-autoscaling","objectmeta-v1-meta","objectfieldselector-v1-core","nonresourcerule-v1-authorization-k8s-io","nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","nonresourceattributes-v1-authorization-k8s-io","nodesysteminfo-v1-core","nodeselectorterm-v1-core","nodeselectorrequirement-v1-core","nodeselector-v1-core","nodedaemonendpoints-v1-core","nodeconfigstatus-v1-core","nodeconfigsource-v1-core","nodecondition-v1-core","nodeaffinity-v1-core","nodeaddress-v1-core","networkpolicyport-v1-networking-k8s-io","networkpolicypeer-v1-networking-k8s-io","networkpolicyingressrule-v1-networking-k8s-io","networkpolicyegressrule-v1-networking-k8s-io","namespacecondition-v1-core","nfsvolumesource-v1-core","mutatingwebhook-v1-admissionregistration-k8s-io","microtime-v1-meta","metricvaluestatus-v2beta2-autoscaling","metrictarget-v2beta2-autoscaling","metricstatus-v2beta2-autoscaling","metricspec-v2beta2-autoscaling","metricidentifier-v2beta2-autoscaling","managedfieldsentry-v1-meta","localvolumesource-v1-core","localobjectreference-v1-core","loadbalancerstatus-v1-core","loadbalanceringress-v1-core","listmeta-v1-meta","limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","limitresponse-v1beta1-flowcontrol-apiserver-k8s-io","limitrangeitem-v1-core","lifecycle-v1-core","labelselectorrequirement-v1-meta","labelselector-v1-meta","keytopath-v1-core","jobtemplatespec-v1-batch","jobcondition-v1-batch","jsonschemapropsorbool-v1-apiextensions-k8s-io","jsonschemapropsorarray-v1-apiextensions-k8s-io","jsonschemaprops-v1-apiextensions-k8s-io","json-v1-apiextensions-k8s-io","ingresstls-v1-networking-k8s-io","ingressservicebackend-v1-networking-k8s-io","ingressrule-v1-networking-k8s-io","ingressclassparametersreference-v1-networking-k8s-io","ingressbackend-v1-networking-k8s-io","iscsivolumesource-v1-core","iscsipersistentvolumesource-v1-core","ipblock-v1-networking-k8s-io","idrange-v1beta1-policy","hostportrange-v1beta1-policy","hostpathvolumesource-v1-core","hostalias-v1-core","horizontalpodautoscalercondition-v2beta2-autoscaling","horizontalpodautoscalerbehavior-v2beta2-autoscaling","handler-v1-core","httpingressrulevalue-v1-networking-k8s-io","httpingresspath-v1-networking-k8s-io","httpheader-v1-core","httpgetaction-v1-core","hpascalingrules-v2beta2-autoscaling","hpascalingpolicy-v2beta2-autoscaling","groupversionfordiscovery-v1-meta","groupsubject-v1beta1-flowcontrol-apiserver-k8s-io","glusterfsvolumesource-v1-core","glusterfspersistentvolumesource-v1-core","gitrepovolumesource-v1-core","gcepersistentdiskvolumesource-v1-core","forzone-v1-discovery-k8s-io","flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io","flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io","flockervolumesource-v1-core","flexvolumesource-v1-core","flexpersistentvolumesource-v1-core","fieldsv1-v1-meta","fsgroupstrategyoptions-v1beta1-policy","fcvolumesource-v1-core","externalmetricstatus-v2beta2-autoscaling","externalmetricsource-v2beta2-autoscaling","externaldocumentation-v1-apiextensions-k8s-io","execaction-v1-core","eviction-v1beta1-policy","eventsource-v1-core","eventseries-v1-core","ephemeralvolumesource-v1-core","ephemeralcontainers-v1-core","ephemeralcontainer-v1-core","envvarsource-v1-core","envvar-v1-core","envfromsource-v1-core","endpointsubset-v1-core","endpointslice-v1-discovery-k8s-io","endpointport-v1-core","endpointhints-v1-discovery-k8s-io","endpointconditions-v1-discovery-k8s-io","endpointaddress-v1-core","endpoint-v1-discovery-k8s-io","emptydirvolumesource-v1-core","downwardapivolumesource-v1-core","downwardapivolumefile-v1-core","downwardapiprojection-v1-core","deploymentcondition-v1-apps","deleteoptions-v1-meta","daemonsetupdatestrategy-v1-apps","daemonsetcondition-v1-apps","daemonendpoint-v1-core","customresourcevalidation-v1-apiextensions-k8s-io","customresourcesubresources-v1-apiextensions-k8s-io","customresourcesubresourcestatus-v1-apiextensions-k8s-io","customresourcesubresourcescale-v1-apiextensions-k8s-io","customresourcedefinitionversion-v1-apiextensions-k8s-io","customresourcedefinitionnames-v1-apiextensions-k8s-io","customresourcedefinitioncondition-v1-apiextensions-k8s-io","customresourceconversion-v1-apiextensions-k8s-io","customresourcecolumndefinition-v1-apiextensions-k8s-io","crossversionobjectreference-v1-autoscaling","cronjob-v1-batch","containerstatewaiting-v1-core","containerstateterminated-v1-core","containerstaterunning-v1-core","containerstate-v1-core","containerresourcemetricstatus-v2beta2-autoscaling","containerresourcemetricsource-v2beta2-autoscaling","containerport-v1-core","containerimage-v1-core","configmapvolumesource-v1-core","configmapprojection-v1-core","configmapnodeconfigsource-v1-core","configmapkeyselector-v1-core","configmapenvsource-v1-core","condition-v1-meta","componentcondition-v1-core","clientipconfig-v1-core","cindervolumesource-v1-core","cinderpersistentvolumesource-v1-core","certificatesigningrequestcondition-v1-certificates-k8s-io","cephfsvolumesource-v1-core","cephfspersistentvolumesource-v1-core","capabilities-v1-core","csivolumesource-v1-core","csistoragecapacity-v1beta1-storage-k8s-io","csipersistentvolumesource-v1-core","csinodedriver-v1-storage-k8s-io","boundobjectreference-v1-authentication-k8s-io","azurefilevolumesource-v1-core","azurefilepersistentvolumesource-v1-core","azurediskvolumesource-v1-core","attachedvolume-v1-core","allowedhostpath-v1beta1-policy","allowedflexvolume-v1beta1-policy","allowedcsidriver-v1beta1-policy","aggregationrule-v1-rbac-authorization-k8s-io","affinity-v1-core","awselasticblockstorevolumesource-v1-core","apiversions-v1-meta","apiservicecondition-v1-apiregistration-k8s-io","apiresource-v1-meta","apigroup-v1-meta","-strong-definitions-strong-","watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io","watch-list-networkpolicy-v1-networking-k8s-io","watch-networkpolicy-v1-networking-k8s-io","list-all-namespaces-networkpolicy-v1-networking-k8s-io","list-networkpolicy-v1-networking-k8s-io","read-networkpolicy-v1-networking-k8s-io","-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-","delete-collection-networkpolicy-v1-networking-k8s-io","delete-networkpolicy-v1-networking-k8s-io","replace-networkpolicy-v1-networking-k8s-io","patch-networkpolicy-v1-networking-k8s-io","create-networkpolicy-v1-networking-k8s-io","-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-","networkpolicy-v1-networking-k8s-io","create-tokenreview-v1-authentication-k8s-io","-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-","tokenreview-v1-authentication-k8s-io","tokenrequest-v1-authentication-k8s-io","create-subjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-","subjectaccessreview-v1-authorization-k8s-io","replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io","read-status-storageversion-v1alpha1-internal-apiserver-k8s-io","patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io","watch-storageversion-v1alpha1-internal-apiserver-k8s-io","list-storageversion-v1alpha1-internal-apiserver-k8s-io","read-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io","delete-storageversion-v1alpha1-internal-apiserver-k8s-io","replace-storageversion-v1alpha1-internal-apiserver-k8s-io","patch-storageversion-v1alpha1-internal-apiserver-k8s-io","create-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","storageversion-v1alpha1-internal-apiserver-k8s-io","watch-list-all-namespaces-serviceaccount-v1-core","watch-list-serviceaccount-v1-core","watch-serviceaccount-v1-core","list-all-namespaces-serviceaccount-v1-core","list-serviceaccount-v1-core","read-serviceaccount-v1-core","-strong-read-operations-serviceaccount-v1-core-strong-","delete-collection-serviceaccount-v1-core","delete-serviceaccount-v1-core","replace-serviceaccount-v1-core","patch-serviceaccount-v1-core","create-serviceaccount-v1-core","-strong-write-operations-serviceaccount-v1-core-strong-","serviceaccount-v1-core","create-selfsubjectrulesreview-v1-authorization-k8s-io","-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-","selfsubjectrulesreview-v1-authorization-k8s-io","create-selfsubjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-","selfsubjectaccessreview-v1-authorization-k8s-io","watch-list-runtimeclass-v1-node-k8s-io","watch-runtimeclass-v1-node-k8s-io","list-runtimeclass-v1-node-k8s-io","read-runtimeclass-v1-node-k8s-io","-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-","delete-collection-runtimeclass-v1-node-k8s-io","delete-runtimeclass-v1-node-k8s-io","replace-runtimeclass-v1-node-k8s-io","patch-runtimeclass-v1-node-k8s-io","create-runtimeclass-v1-node-k8s-io","-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-","runtimeclass-v1-node-k8s-io","watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","watch-list-rolebinding-v1-rbac-authorization-k8s-io","watch-rolebinding-v1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","list-rolebinding-v1-rbac-authorization-k8s-io","read-rolebinding-v1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1-rbac-authorization-k8s-io","delete-rolebinding-v1-rbac-authorization-k8s-io","replace-rolebinding-v1-rbac-authorization-k8s-io","patch-rolebinding-v1-rbac-authorization-k8s-io","create-rolebinding-v1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","rolebinding-v1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io","watch-list-role-v1-rbac-authorization-k8s-io","watch-role-v1-rbac-authorization-k8s-io","list-all-namespaces-role-v1-rbac-authorization-k8s-io","list-role-v1-rbac-authorization-k8s-io","read-role-v1-rbac-authorization-k8s-io","-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1-rbac-authorization-k8s-io","delete-role-v1-rbac-authorization-k8s-io","replace-role-v1-rbac-authorization-k8s-io","patch-role-v1-rbac-authorization-k8s-io","create-role-v1-rbac-authorization-k8s-io","-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-","role-v1-rbac-authorization-k8s-io","replace-status-resourcequota-v1-core","read-status-resourcequota-v1-core","patch-status-resourcequota-v1-core","-strong-status-operations-resourcequota-v1-core-strong-","watch-list-all-namespaces-resourcequota-v1-core","watch-list-resourcequota-v1-core","watch-resourcequota-v1-core","list-all-namespaces-resourcequota-v1-core","list-resourcequota-v1-core","read-resourcequota-v1-core","-strong-read-operations-resourcequota-v1-core-strong-","delete-collection-resourcequota-v1-core","delete-resourcequota-v1-core","replace-resourcequota-v1-core","patch-resourcequota-v1-core","create-resourcequota-v1-core","-strong-write-operations-resourcequota-v1-core-strong-","resourcequota-v1-core","replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","replace-status-persistentvolume-v1-core","read-status-persistentvolume-v1-core","patch-status-persistentvolume-v1-core","-strong-status-operations-persistentvolume-v1-core-strong-","watch-list-persistentvolume-v1-core","watch-persistentvolume-v1-core","list-persistentvolume-v1-core","read-persistentvolume-v1-core","-strong-read-operations-persistentvolume-v1-core-strong-","delete-collection-persistentvolume-v1-core","delete-persistentvolume-v1-core","replace-persistentvolume-v1-core","patch-persistentvolume-v1-core","create-persistentvolume-v1-core","-strong-write-operations-persistentvolume-v1-core-strong-","persistentvolume-v1-core","replace-connect-proxy-path-node-v1-core","replace-connect-proxy-node-v1-core","head-connect-proxy-path-node-v1-core","head-connect-proxy-node-v1-core","get-connect-proxy-path-node-v1-core","get-connect-proxy-node-v1-core","delete-connect-proxy-path-node-v1-core","delete-connect-proxy-node-v1-core","create-connect-proxy-path-node-v1-core","create-connect-proxy-node-v1-core","-strong-proxy-operations-node-v1-core-strong-","replace-status-node-v1-core","read-status-node-v1-core","patch-status-node-v1-core","-strong-status-operations-node-v1-core-strong-","watch-list-node-v1-core","watch-node-v1-core","list-node-v1-core","read-node-v1-core","-strong-read-operations-node-v1-core-strong-","delete-collection-node-v1-core","delete-node-v1-core","replace-node-v1-core","patch-node-v1-core","create-node-v1-core","-strong-write-operations-node-v1-core-strong-","node-v1-core","replace-status-namespace-v1-core","read-status-namespace-v1-core","patch-status-namespace-v1-core","-strong-status-operations-namespace-v1-core-strong-","watch-list-namespace-v1-core","watch-namespace-v1-core","list-namespace-v1-core","read-namespace-v1-core","-strong-read-operations-namespace-v1-core-strong-","delete-namespace-v1-core","replace-namespace-v1-core","patch-namespace-v1-core","create-namespace-v1-core","-strong-write-operations-namespace-v1-core-strong-","namespace-v1-core","create-localsubjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-","localsubjectaccessreview-v1-authorization-k8s-io","watch-list-all-namespaces-lease-v1-coordination-k8s-io","watch-list-lease-v1-coordination-k8s-io","watch-lease-v1-coordination-k8s-io","list-all-namespaces-lease-v1-coordination-k8s-io","list-lease-v1-coordination-k8s-io","read-lease-v1-coordination-k8s-io","-strong-read-operations-lease-v1-coordination-k8s-io-strong-","delete-collection-lease-v1-coordination-k8s-io","delete-lease-v1-coordination-k8s-io","replace-lease-v1-coordination-k8s-io","patch-lease-v1-coordination-k8s-io","create-lease-v1-coordination-k8s-io","-strong-write-operations-lease-v1-coordination-k8s-io-strong-","lease-v1-coordination-k8s-io","replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","flowschema-v1beta1-flowcontrol-apiserver-k8s-io","list-componentstatus-v1-core","read-componentstatus-v1-core","-strong-read-operations-componentstatus-v1-core-strong-","componentstatus-v1-core","watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1-rbac-authorization-k8s-io","list-clusterrolebinding-v1-rbac-authorization-k8s-io","read-clusterrolebinding-v1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1-rbac-authorization-k8s-io","create-clusterrolebinding-v1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1-rbac-authorization-k8s-io","watch-list-clusterrole-v1-rbac-authorization-k8s-io","watch-clusterrole-v1-rbac-authorization-k8s-io","list-clusterrole-v1-rbac-authorization-k8s-io","read-clusterrole-v1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1-rbac-authorization-k8s-io","delete-clusterrole-v1-rbac-authorization-k8s-io","replace-clusterrole-v1-rbac-authorization-k8s-io","patch-clusterrole-v1-rbac-authorization-k8s-io","create-clusterrole-v1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","clusterrole-v1-rbac-authorization-k8s-io","replace-status-certificatesigningrequest-v1-certificates-k8s-io","read-status-certificatesigningrequest-v1-certificates-k8s-io","patch-status-certificatesigningrequest-v1-certificates-k8s-io","-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","watch-list-certificatesigningrequest-v1-certificates-k8s-io","watch-certificatesigningrequest-v1-certificates-k8s-io","list-certificatesigningrequest-v1-certificates-k8s-io","read-certificatesigningrequest-v1-certificates-k8s-io","-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","delete-collection-certificatesigningrequest-v1-certificates-k8s-io","delete-certificatesigningrequest-v1-certificates-k8s-io","replace-certificatesigningrequest-v1-certificates-k8s-io","patch-certificatesigningrequest-v1-certificates-k8s-io","create-certificatesigningrequest-v1-certificates-k8s-io","-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","certificatesigningrequest-v1-certificates-k8s-io","create-binding-v1-core","-strong-write-operations-binding-v1-core-strong-","binding-v1-core","replace-status-apiservice-v1-apiregistration-k8s-io","read-status-apiservice-v1-apiregistration-k8s-io","patch-status-apiservice-v1-apiregistration-k8s-io","-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-","watch-list-apiservice-v1-apiregistration-k8s-io","watch-apiservice-v1-apiregistration-k8s-io","list-apiservice-v1-apiregistration-k8s-io","read-apiservice-v1-apiregistration-k8s-io","-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-","delete-collection-apiservice-v1-apiregistration-k8s-io","delete-apiservice-v1-apiregistration-k8s-io","replace-apiservice-v1-apiregistration-k8s-io","patch-apiservice-v1-apiregistration-k8s-io","create-apiservice-v1-apiregistration-k8s-io","-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-","apiservice-v1-apiregistration-k8s-io","-strong-cluster-apis-strong-","watch-list-podsecuritypolicy-v1beta1-policy","watch-podsecuritypolicy-v1beta1-policy","list-podsecuritypolicy-v1beta1-policy","read-podsecuritypolicy-v1beta1-policy","-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-","delete-collection-podsecuritypolicy-v1beta1-policy","delete-podsecuritypolicy-v1beta1-policy","replace-podsecuritypolicy-v1beta1-policy","patch-podsecuritypolicy-v1beta1-policy","create-podsecuritypolicy-v1beta1-policy","-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-","podsecuritypolicy-v1beta1-policy","watch-list-priorityclass-v1-scheduling-k8s-io","watch-priorityclass-v1-scheduling-k8s-io","list-priorityclass-v1-scheduling-k8s-io","read-priorityclass-v1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1-scheduling-k8s-io","delete-priorityclass-v1-scheduling-k8s-io","replace-priorityclass-v1-scheduling-k8s-io","patch-priorityclass-v1-scheduling-k8s-io","create-priorityclass-v1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-","priorityclass-v1-scheduling-k8s-io","replace-status-poddisruptionbudget-v1beta1-policy","read-status-poddisruptionbudget-v1beta1-policy","patch-status-poddisruptionbudget-v1beta1-policy","-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","watch-list-poddisruptionbudget-v1beta1-policy","watch-poddisruptionbudget-v1beta1-policy","list-all-namespaces-poddisruptionbudget-v1beta1-policy","list-poddisruptionbudget-v1beta1-policy","read-poddisruptionbudget-v1beta1-policy","-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","delete-collection-poddisruptionbudget-v1beta1-policy","delete-poddisruptionbudget-v1beta1-policy","replace-poddisruptionbudget-v1beta1-policy","patch-poddisruptionbudget-v1beta1-policy","create-poddisruptionbudget-v1beta1-policy","-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","poddisruptionbudget-v1beta1-policy","watch-list-all-namespaces-podtemplate-v1-core","watch-list-podtemplate-v1-core","watch-podtemplate-v1-core","list-all-namespaces-podtemplate-v1-core","list-podtemplate-v1-core","read-podtemplate-v1-core","-strong-read-operations-podtemplate-v1-core-strong-","delete-collection-podtemplate-v1-core","delete-podtemplate-v1-core","replace-podtemplate-v1-core","patch-podtemplate-v1-core","create-podtemplate-v1-core","-strong-write-operations-podtemplate-v1-core-strong-","podtemplate-v1-core","watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","validatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-status-horizontalpodautoscaler-v1-autoscaling","read-status-horizontalpodautoscaler-v1-autoscaling","patch-status-horizontalpodautoscaler-v1-autoscaling","-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","watch-list-horizontalpodautoscaler-v1-autoscaling","watch-horizontalpodautoscaler-v1-autoscaling","list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","list-horizontalpodautoscaler-v1-autoscaling","read-horizontalpodautoscaler-v1-autoscaling","-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v1-autoscaling","delete-horizontalpodautoscaler-v1-autoscaling","replace-horizontalpodautoscaler-v1-autoscaling","patch-horizontalpodautoscaler-v1-autoscaling","create-horizontalpodautoscaler-v1-autoscaling","-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-","horizontalpodautoscaler-v1-autoscaling","watch-list-all-namespaces-limitrange-v1-core","watch-list-limitrange-v1-core","watch-limitrange-v1-core","list-all-namespaces-limitrange-v1-core","list-limitrange-v1-core","read-limitrange-v1-core","-strong-read-operations-limitrange-v1-core-strong-","delete-collection-limitrange-v1-core","delete-limitrange-v1-core","replace-limitrange-v1-core","patch-limitrange-v1-core","create-limitrange-v1-core","-strong-write-operations-limitrange-v1-core-strong-","limitrange-v1-core","watch-list-all-namespaces-event-v1-core","watch-list-event-v1-core","watch-event-v1-core","list-all-namespaces-event-v1-core","list-event-v1-core","read-event-v1-core","-strong-read-operations-event-v1-core-strong-","delete-collection-event-v1-core","delete-event-v1-core","replace-event-v1-core","patch-event-v1-core","create-event-v1-core","-strong-write-operations-event-v1-core-strong-","event-v1-core","replace-status-customresourcedefinition-v1-apiextensions-k8s-io","read-status-customresourcedefinition-v1-apiextensions-k8s-io","patch-status-customresourcedefinition-v1-apiextensions-k8s-io","-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","watch-list-customresourcedefinition-v1-apiextensions-k8s-io","watch-customresourcedefinition-v1-apiextensions-k8s-io","list-customresourcedefinition-v1-apiextensions-k8s-io","read-customresourcedefinition-v1-apiextensions-k8s-io","-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","delete-collection-customresourcedefinition-v1-apiextensions-k8s-io","delete-customresourcedefinition-v1-apiextensions-k8s-io","replace-customresourcedefinition-v1-apiextensions-k8s-io","patch-customresourcedefinition-v1-apiextensions-k8s-io","create-customresourcedefinition-v1-apiextensions-k8s-io","-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","customresourcedefinition-v1-apiextensions-k8s-io","watch-list-all-namespaces-controllerrevision-v1-apps","watch-list-controllerrevision-v1-apps","watch-controllerrevision-v1-apps","list-all-namespaces-controllerrevision-v1-apps","list-controllerrevision-v1-apps","read-controllerrevision-v1-apps","-strong-read-operations-controllerrevision-v1-apps-strong-","delete-collection-controllerrevision-v1-apps","delete-controllerrevision-v1-apps","replace-controllerrevision-v1-apps","patch-controllerrevision-v1-apps","create-controllerrevision-v1-apps","-strong-write-operations-controllerrevision-v1-apps-strong-","controllerrevision-v1-apps","-strong-metadata-apis-strong-","replace-status-volumeattachment-v1-storage-k8s-io","read-status-volumeattachment-v1-storage-k8s-io","patch-status-volumeattachment-v1-storage-k8s-io","-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-","watch-list-volumeattachment-v1-storage-k8s-io","watch-volumeattachment-v1-storage-k8s-io","list-volumeattachment-v1-storage-k8s-io","read-volumeattachment-v1-storage-k8s-io","-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1-storage-k8s-io","delete-volumeattachment-v1-storage-k8s-io","replace-volumeattachment-v1-storage-k8s-io","patch-volumeattachment-v1-storage-k8s-io","create-volumeattachment-v1-storage-k8s-io","-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-","volumeattachment-v1-storage-k8s-io","volume-v1-core","watch-list-storageclass-v1-storage-k8s-io","watch-storageclass-v1-storage-k8s-io","list-storageclass-v1-storage-k8s-io","read-storageclass-v1-storage-k8s-io","-strong-read-operations-storageclass-v1-storage-k8s-io-strong-","delete-collection-storageclass-v1-storage-k8s-io","delete-storageclass-v1-storage-k8s-io","replace-storageclass-v1-storage-k8s-io","patch-storageclass-v1-storage-k8s-io","create-storageclass-v1-storage-k8s-io","-strong-write-operations-storageclass-v1-storage-k8s-io-strong-","storageclass-v1-storage-k8s-io","replace-status-persistentvolumeclaim-v1-core","read-status-persistentvolumeclaim-v1-core","patch-status-persistentvolumeclaim-v1-core","-strong-status-operations-persistentvolumeclaim-v1-core-strong-","watch-list-all-namespaces-persistentvolumeclaim-v1-core","watch-list-persistentvolumeclaim-v1-core","watch-persistentvolumeclaim-v1-core","list-all-namespaces-persistentvolumeclaim-v1-core","list-persistentvolumeclaim-v1-core","read-persistentvolumeclaim-v1-core","-strong-read-operations-persistentvolumeclaim-v1-core-strong-","delete-collection-persistentvolumeclaim-v1-core","delete-persistentvolumeclaim-v1-core","replace-persistentvolumeclaim-v1-core","patch-persistentvolumeclaim-v1-core","create-persistentvolumeclaim-v1-core","-strong-write-operations-persistentvolumeclaim-v1-core-strong-","persistentvolumeclaim-v1-core","watch-list-all-namespaces-secret-v1-core","watch-list-secret-v1-core","watch-secret-v1-core","list-all-namespaces-secret-v1-core","list-secret-v1-core","read-secret-v1-core","-strong-read-operations-secret-v1-core-strong-","delete-collection-secret-v1-core","delete-secret-v1-core","replace-secret-v1-core","patch-secret-v1-core","create-secret-v1-core","-strong-write-operations-secret-v1-core-strong-","secret-v1-core","watch-list-csinode-v1-storage-k8s-io","watch-csinode-v1-storage-k8s-io","list-csinode-v1-storage-k8s-io","read-csinode-v1-storage-k8s-io","-strong-read-operations-csinode-v1-storage-k8s-io-strong-","delete-collection-csinode-v1-storage-k8s-io","delete-csinode-v1-storage-k8s-io","replace-csinode-v1-storage-k8s-io","patch-csinode-v1-storage-k8s-io","create-csinode-v1-storage-k8s-io","-strong-write-operations-csinode-v1-storage-k8s-io-strong-","csinode-v1-storage-k8s-io","watch-list-csidriver-v1-storage-k8s-io","watch-csidriver-v1-storage-k8s-io","list-csidriver-v1-storage-k8s-io","read-csidriver-v1-storage-k8s-io","-strong-read-operations-csidriver-v1-storage-k8s-io-strong-","delete-collection-csidriver-v1-storage-k8s-io","delete-csidriver-v1-storage-k8s-io","replace-csidriver-v1-storage-k8s-io","patch-csidriver-v1-storage-k8s-io","create-csidriver-v1-storage-k8s-io","-strong-write-operations-csidriver-v1-storage-k8s-io-strong-","csidriver-v1-storage-k8s-io","watch-list-all-namespaces-configmap-v1-core","watch-list-configmap-v1-core","watch-configmap-v1-core","list-all-namespaces-configmap-v1-core","list-configmap-v1-core","read-configmap-v1-core","-strong-read-operations-configmap-v1-core-strong-","delete-collection-configmap-v1-core","delete-configmap-v1-core","replace-configmap-v1-core","patch-configmap-v1-core","create-configmap-v1-core","-strong-write-operations-configmap-v1-core-strong-","configmap-v1-core","-strong-config-and-storage-apis-strong-","replace-connect-proxy-path-service-v1-core","replace-connect-proxy-service-v1-core","head-connect-proxy-path-service-v1-core","head-connect-proxy-service-v1-core","get-connect-proxy-path-service-v1-core","get-connect-proxy-service-v1-core","delete-connect-proxy-path-service-v1-core","delete-connect-proxy-service-v1-core","create-connect-proxy-path-service-v1-core","create-connect-proxy-service-v1-core","-strong-proxy-operations-service-v1-core-strong-","replace-status-service-v1-core","read-status-service-v1-core","patch-status-service-v1-core","-strong-status-operations-service-v1-core-strong-","watch-list-all-namespaces-service-v1-core","watch-list-service-v1-core","watch-service-v1-core","list-all-namespaces-service-v1-core","list-service-v1-core","read-service-v1-core","-strong-read-operations-service-v1-core-strong-","delete-service-v1-core","replace-service-v1-core","patch-service-v1-core","create-service-v1-core","-strong-write-operations-service-v1-core-strong-","service-v1-core","watch-list-ingressclass-v1-networking-k8s-io","watch-ingressclass-v1-networking-k8s-io","list-ingressclass-v1-networking-k8s-io","read-ingressclass-v1-networking-k8s-io","-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-","delete-collection-ingressclass-v1-networking-k8s-io","delete-ingressclass-v1-networking-k8s-io","replace-ingressclass-v1-networking-k8s-io","patch-ingressclass-v1-networking-k8s-io","create-ingressclass-v1-networking-k8s-io","-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-","ingressclass-v1-networking-k8s-io","replace-status-ingress-v1-networking-k8s-io","read-status-ingress-v1-networking-k8s-io","patch-status-ingress-v1-networking-k8s-io","-strong-status-operations-ingress-v1-networking-k8s-io-strong-","watch-list-all-namespaces-ingress-v1-networking-k8s-io","watch-list-ingress-v1-networking-k8s-io","watch-ingress-v1-networking-k8s-io","list-all-namespaces-ingress-v1-networking-k8s-io","list-ingress-v1-networking-k8s-io","read-ingress-v1-networking-k8s-io","-strong-read-operations-ingress-v1-networking-k8s-io-strong-","delete-collection-ingress-v1-networking-k8s-io","delete-ingress-v1-networking-k8s-io","replace-ingress-v1-networking-k8s-io","patch-ingress-v1-networking-k8s-io","create-ingress-v1-networking-k8s-io","-strong-write-operations-ingress-v1-networking-k8s-io-strong-","ingress-v1-networking-k8s-io","watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","watch-list-endpointslice-v1beta1-discovery-k8s-io","watch-endpointslice-v1beta1-discovery-k8s-io","list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","list-endpointslice-v1beta1-discovery-k8s-io","read-endpointslice-v1beta1-discovery-k8s-io","-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","delete-collection-endpointslice-v1beta1-discovery-k8s-io","delete-endpointslice-v1beta1-discovery-k8s-io","replace-endpointslice-v1beta1-discovery-k8s-io","patch-endpointslice-v1beta1-discovery-k8s-io","create-endpointslice-v1beta1-discovery-k8s-io","-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","endpointslice-v1beta1-discovery-k8s-io","watch-list-all-namespaces-endpoints-v1-core","watch-list-endpoints-v1-core","watch-endpoints-v1-core","list-all-namespaces-endpoints-v1-core","list-endpoints-v1-core","read-endpoints-v1-core","-strong-read-operations-endpoints-v1-core-strong-","delete-collection-endpoints-v1-core","delete-endpoints-v1-core","replace-endpoints-v1-core","patch-endpoints-v1-core","create-endpoints-v1-core","-strong-write-operations-endpoints-v1-core-strong-","endpoints-v1-core","-strong-service-apis-strong-","patch-scale-statefulset-v1-apps","replace-scale-statefulset-v1-apps","read-scale-statefulset-v1-apps","-strong-misc-operations-statefulset-v1-apps-strong-","replace-status-statefulset-v1-apps","read-status-statefulset-v1-apps","patch-status-statefulset-v1-apps","-strong-status-operations-statefulset-v1-apps-strong-","watch-list-all-namespaces-statefulset-v1-apps","watch-list-statefulset-v1-apps","watch-statefulset-v1-apps","list-all-namespaces-statefulset-v1-apps","list-statefulset-v1-apps","read-statefulset-v1-apps","-strong-read-operations-statefulset-v1-apps-strong-","delete-collection-statefulset-v1-apps","delete-statefulset-v1-apps","replace-statefulset-v1-apps","patch-statefulset-v1-apps","create-statefulset-v1-apps","-strong-write-operations-statefulset-v1-apps-strong-","statefulset-v1-apps","patch-scale-replicationcontroller-v1-core","replace-scale-replicationcontroller-v1-core","read-scale-replicationcontroller-v1-core","-strong-misc-operations-replicationcontroller-v1-core-strong-","replace-status-replicationcontroller-v1-core","read-status-replicationcontroller-v1-core","patch-status-replicationcontroller-v1-core","-strong-status-operations-replicationcontroller-v1-core-strong-","watch-list-all-namespaces-replicationcontroller-v1-core","watch-list-replicationcontroller-v1-core","watch-replicationcontroller-v1-core","list-all-namespaces-replicationcontroller-v1-core","list-replicationcontroller-v1-core","read-replicationcontroller-v1-core","-strong-read-operations-replicationcontroller-v1-core-strong-","delete-collection-replicationcontroller-v1-core","delete-replicationcontroller-v1-core","replace-replicationcontroller-v1-core","patch-replicationcontroller-v1-core","create-replicationcontroller-v1-core","-strong-write-operations-replicationcontroller-v1-core-strong-","replicationcontroller-v1-core","patch-scale-replicaset-v1-apps","replace-scale-replicaset-v1-apps","read-scale-replicaset-v1-apps","-strong-misc-operations-replicaset-v1-apps-strong-","replace-status-replicaset-v1-apps","read-status-replicaset-v1-apps","patch-status-replicaset-v1-apps","-strong-status-operations-replicaset-v1-apps-strong-","watch-list-all-namespaces-replicaset-v1-apps","watch-list-replicaset-v1-apps","watch-replicaset-v1-apps","list-all-namespaces-replicaset-v1-apps","list-replicaset-v1-apps","read-replicaset-v1-apps","-strong-read-operations-replicaset-v1-apps-strong-","delete-collection-replicaset-v1-apps","delete-replicaset-v1-apps","replace-replicaset-v1-apps","patch-replicaset-v1-apps","create-replicaset-v1-apps","-strong-write-operations-replicaset-v1-apps-strong-","replicaset-v1-apps","read-log-pod-v1-core","-strong-misc-operations-pod-v1-core-strong-","replace-connect-proxy-path-pod-v1-core","replace-connect-proxy-pod-v1-core","head-connect-proxy-path-pod-v1-core","head-connect-proxy-pod-v1-core","get-connect-proxy-path-pod-v1-core","get-connect-proxy-pod-v1-core","get-connect-portforward-pod-v1-core","delete-connect-proxy-path-pod-v1-core","delete-connect-proxy-pod-v1-core","create-connect-proxy-path-pod-v1-core","create-connect-proxy-pod-v1-core","create-connect-portforward-pod-v1-core","-strong-proxy-operations-pod-v1-core-strong-","replace-status-pod-v1-core","read-status-pod-v1-core","patch-status-pod-v1-core","-strong-status-operations-pod-v1-core-strong-","watch-list-all-namespaces-pod-v1-core","watch-list-pod-v1-core","watch-pod-v1-core","list-all-namespaces-pod-v1-core","list-pod-v1-core","read-pod-v1-core","-strong-read-operations-pod-v1-core-strong-","delete-collection-pod-v1-core","delete-pod-v1-core","replace-pod-v1-core","patch-pod-v1-core","create-eviction-pod-v1-core","create-pod-v1-core","-strong-write-operations-pod-v1-core-strong-","pod-v1-core","replace-status-job-v1-batch","read-status-job-v1-batch","patch-status-job-v1-batch","-strong-status-operations-job-v1-batch-strong-","watch-list-all-namespaces-job-v1-batch","watch-list-job-v1-batch","watch-job-v1-batch","list-all-namespaces-job-v1-batch","list-job-v1-batch","read-job-v1-batch","-strong-read-operations-job-v1-batch-strong-","delete-collection-job-v1-batch","delete-job-v1-batch","replace-job-v1-batch","patch-job-v1-batch","create-job-v1-batch","-strong-write-operations-job-v1-batch-strong-","job-v1-batch","patch-scale-deployment-v1-apps","replace-scale-deployment-v1-apps","read-scale-deployment-v1-apps","-strong-misc-operations-deployment-v1-apps-strong-","replace-status-deployment-v1-apps","read-status-deployment-v1-apps","patch-status-deployment-v1-apps","-strong-status-operations-deployment-v1-apps-strong-","watch-list-all-namespaces-deployment-v1-apps","watch-list-deployment-v1-apps","watch-deployment-v1-apps","list-all-namespaces-deployment-v1-apps","list-deployment-v1-apps","read-deployment-v1-apps","-strong-read-operations-deployment-v1-apps-strong-","delete-collection-deployment-v1-apps","delete-deployment-v1-apps","replace-deployment-v1-apps","patch-deployment-v1-apps","create-deployment-v1-apps","-strong-write-operations-deployment-v1-apps-strong-","deployment-v1-apps","replace-status-daemonset-v1-apps","read-status-daemonset-v1-apps","patch-status-daemonset-v1-apps","-strong-status-operations-daemonset-v1-apps-strong-","watch-list-all-namespaces-daemonset-v1-apps","watch-list-daemonset-v1-apps","watch-daemonset-v1-apps","list-all-namespaces-daemonset-v1-apps","list-daemonset-v1-apps","read-daemonset-v1-apps","-strong-read-operations-daemonset-v1-apps-strong-","delete-collection-daemonset-v1-apps","delete-daemonset-v1-apps","replace-daemonset-v1-apps","patch-daemonset-v1-apps","create-daemonset-v1-apps","-strong-write-operations-daemonset-v1-apps-strong-","daemonset-v1-apps","replace-status-cronjob-v1beta1-batch","read-status-cronjob-v1beta1-batch","patch-status-cronjob-v1beta1-batch","-strong-status-operations-cronjob-v1beta1-batch-strong-","watch-list-all-namespaces-cronjob-v1beta1-batch","watch-list-cronjob-v1beta1-batch","watch-cronjob-v1beta1-batch","list-all-namespaces-cronjob-v1beta1-batch","list-cronjob-v1beta1-batch","read-cronjob-v1beta1-batch","-strong-read-operations-cronjob-v1beta1-batch-strong-","delete-collection-cronjob-v1beta1-batch","delete-cronjob-v1beta1-batch","replace-cronjob-v1beta1-batch","patch-cronjob-v1beta1-batch","create-cronjob-v1beta1-batch","-strong-write-operations-cronjob-v1beta1-batch-strong-","cronjob-v1beta1-batch","container-v1-core","-strong-workloads-apis-strong-","-strong-api-groups-strong-","-strong-api-overview-strong-"]};})();
\ No newline at end of file
+(function(){navData={"toc":[{"section":"webhookclientconfig-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1-apiextensions-k8s-io","subsections":[]},{"section":"volumenoderesources-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeerror-v1alpha1-storage-k8s-io","subsections":[]},{"section":"volumeerror-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeattachmentsource-v1alpha1-storage-k8s-io","subsections":[]},{"section":"volumeattachmentsource-v1beta1-storage-k8s-io","subsections":[]},{"section":"volumeattachment-v1alpha1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1alpha1-storage-k8s-io","subsections":[]}]}]},{"section":"volumeattachment-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"validatingwebhook-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"userinfo-v1beta1-authentication-k8s-io","subsections":[]},{"section":"tokenreview-v1beta1-authentication-k8s-io","subsections":[{"section":"-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-","subsections":[{"section":"create-tokenreview-v1beta1-authentication-k8s-io","subsections":[]}]}]},{"section":"tokenrequest-v1beta1-storage-k8s-io","subsections":[]},{"section":"tokenrequest-v1-storage-k8s-io","subsections":[]},{"section":"subjectrulesreviewstatus-v1beta1-authorization-k8s-io","subsections":[]},{"section":"subjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-subjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"subject-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"subject-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"subject-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"storageclass-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-storageclass-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-storageclass-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-storageclass-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"servicereference-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"servicereference-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"servicereference-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"servicereference-v1-apiregistration-k8s-io","subsections":[]},{"section":"servicereference-v1-apiextensions-k8s-io","subsections":[]},{"section":"selfsubjectrulesreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectrulesreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"selfsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"scheduling-v1alpha1-node-k8s-io","subsections":[]},{"section":"scheduling-v1beta1-node-k8s-io","subsections":[]},{"section":"runtimeclass-v1alpha1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1alpha1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1alpha1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1alpha1-node-k8s-io","subsections":[]}]}]},{"section":"runtimeclass-v1beta1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1beta1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1beta1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1beta1-node-k8s-io","subsections":[]}]}]},{"section":"rulewithoperations-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"roleref-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"roleref-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"resourcerule-v1beta1-authorization-k8s-io","subsections":[]},{"section":"resourcemetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"resourcemetricsource-v2beta1-autoscaling","subsections":[]},{"section":"resourceattributes-v1beta1-authorization-k8s-io","subsections":[]},{"section":"priorityclass-v1alpha1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1alpha1-scheduling-k8s-io","subsections":[]}]}]},{"section":"priorityclass-v1beta1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1beta1-scheduling-k8s-io","subsections":[]}]}]},{"section":"policyrule-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"policyrule-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"podsmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"podsmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"poddisruptionbudget-v1beta1-policy","subsections":[{"section":"-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"replace-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-status-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-status-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"watch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-all-namespaces-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"list-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"read-poddisruptionbudget-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"delete-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"replace-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"patch-poddisruptionbudget-v1beta1-policy","subsections":[]},{"section":"create-poddisruptionbudget-v1beta1-policy","subsections":[]}]}]},{"section":"overhead-v1alpha1-node-k8s-io","subsections":[]},{"section":"overhead-v1beta1-node-k8s-io","subsections":[]},{"section":"objectmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"objectmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"nonresourcerule-v1beta1-authorization-k8s-io","subsections":[]},{"section":"nonresourceattributes-v1beta1-authorization-k8s-io","subsections":[]},{"section":"mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"mutatingwebhook-v1beta1-admissionregistration-k8s-io","subsections":[]},{"section":"metricstatus-v2beta1-autoscaling","subsections":[]},{"section":"metricspec-v2beta1-autoscaling","subsections":[]},{"section":"localsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","subsections":[{"section":"create-localsubjectaccessreview-v1beta1-authorization-k8s-io","subsections":[]}]}]},{"section":"lease-v1beta1-coordination-k8s-io","subsections":[{"section":"-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"watch-list-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"watch-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"list-all-namespaces-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"list-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"read-lease-v1beta1-coordination-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-","subsections":[{"section":"delete-collection-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"delete-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"replace-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"patch-lease-v1beta1-coordination-k8s-io","subsections":[]},{"section":"create-lease-v1beta1-coordination-k8s-io","subsections":[]}]}]},{"section":"jobtemplatespec-v1beta1-batch","subsections":[]},{"section":"jsonschemapropsorbool-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemapropsorarray-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemaprops-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"json-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"ingresstls-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingresstls-v1beta1-extensions","subsections":[]},{"section":"ingressrule-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressrule-v1beta1-extensions","subsections":[]},{"section":"ingressclassparametersreference-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressclass-v1beta1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-ingressclass-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"delete-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"replace-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-ingressclass-v1beta1-networking-k8s-io","subsections":[]},{"section":"create-ingressclass-v1beta1-networking-k8s-io","subsections":[]}]}]},{"section":"ingressbackend-v1beta1-networking-k8s-io","subsections":[]},{"section":"ingressbackend-v1beta1-extensions","subsections":[]},{"section":"ingress-v1beta1-networking-k8s-io","subsections":[{"section":"-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"replace-status-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-status-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-status-ingress-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-list-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"watch-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"list-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"read-ingress-v1beta1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"delete-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"replace-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"patch-ingress-v1beta1-networking-k8s-io","subsections":[]},{"section":"create-ingress-v1beta1-networking-k8s-io","subsections":[]}]}]},{"section":"ingress-v1beta1-extensions","subsections":[{"section":"-strong-status-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"replace-status-ingress-v1beta1-extensions","subsections":[]},{"section":"read-status-ingress-v1beta1-extensions","subsections":[]},{"section":"patch-status-ingress-v1beta1-extensions","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1beta1-extensions","subsections":[]},{"section":"watch-list-ingress-v1beta1-extensions","subsections":[]},{"section":"watch-ingress-v1beta1-extensions","subsections":[]},{"section":"list-all-namespaces-ingress-v1beta1-extensions","subsections":[]},{"section":"list-ingress-v1beta1-extensions","subsections":[]},{"section":"read-ingress-v1beta1-extensions","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1beta1-extensions-strong-","subsections":[{"section":"delete-collection-ingress-v1beta1-extensions","subsections":[]},{"section":"delete-ingress-v1beta1-extensions","subsections":[]},{"section":"replace-ingress-v1beta1-extensions","subsections":[]},{"section":"patch-ingress-v1beta1-extensions","subsections":[]},{"section":"create-ingress-v1beta1-extensions","subsections":[]}]}]},{"section":"horizontalpodautoscalercondition-v2beta1-autoscaling","subsections":[]},{"section":"horizontalpodautoscaler-v2beta1-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v2beta1-autoscaling","subsections":[]}]}]},{"section":"horizontalpodautoscaler-v2beta2-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v2beta2-autoscaling","subsections":[]}]}]},{"section":"httpingressrulevalue-v1beta1-networking-k8s-io","subsections":[]},{"section":"httpingressrulevalue-v1beta1-extensions","subsections":[]},{"section":"httpingresspath-v1beta1-networking-k8s-io","subsections":[]},{"section":"httpingresspath-v1beta1-extensions","subsections":[]},{"section":"forzone-v1beta1-discovery-k8s-io","subsections":[]},{"section":"externalmetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"externalmetricsource-v2beta1-autoscaling","subsections":[]},{"section":"externaldocumentation-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"eventseries-v1beta1-events-k8s-io","subsections":[]},{"section":"eventseries-v1-events-k8s-io","subsections":[]},{"section":"event-v1beta1-events-k8s-io","subsections":[{"section":"-strong-read-operations-event-v1beta1-events-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1beta1-events-k8s-io","subsections":[]},{"section":"watch-list-event-v1beta1-events-k8s-io","subsections":[]},{"section":"watch-event-v1beta1-events-k8s-io","subsections":[]},{"section":"list-all-namespaces-event-v1beta1-events-k8s-io","subsections":[]},{"section":"list-event-v1beta1-events-k8s-io","subsections":[]},{"section":"read-event-v1beta1-events-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-event-v1beta1-events-k8s-io-strong-","subsections":[{"section":"delete-collection-event-v1beta1-events-k8s-io","subsections":[]},{"section":"delete-event-v1beta1-events-k8s-io","subsections":[]},{"section":"replace-event-v1beta1-events-k8s-io","subsections":[]},{"section":"patch-event-v1beta1-events-k8s-io","subsections":[]},{"section":"create-event-v1beta1-events-k8s-io","subsections":[]}]}]},{"section":"event-v1-events-k8s-io","subsections":[{"section":"-strong-read-operations-event-v1-events-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1-events-k8s-io","subsections":[]},{"section":"watch-list-event-v1-events-k8s-io","subsections":[]},{"section":"watch-event-v1-events-k8s-io","subsections":[]},{"section":"list-all-namespaces-event-v1-events-k8s-io","subsections":[]},{"section":"list-event-v1-events-k8s-io","subsections":[]},{"section":"read-event-v1-events-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-event-v1-events-k8s-io-strong-","subsections":[{"section":"delete-collection-event-v1-events-k8s-io","subsections":[]},{"section":"delete-event-v1-events-k8s-io","subsections":[]},{"section":"replace-event-v1-events-k8s-io","subsections":[]},{"section":"patch-event-v1-events-k8s-io","subsections":[]},{"section":"create-event-v1-events-k8s-io","subsections":[]}]}]},{"section":"endpointslice-v1beta1-discovery-k8s-io","subsections":[{"section":"-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"watch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"list-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"read-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","subsections":[{"section":"delete-collection-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"delete-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"replace-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"patch-endpointslice-v1beta1-discovery-k8s-io","subsections":[]},{"section":"create-endpointslice-v1beta1-discovery-k8s-io","subsections":[]}]}]},{"section":"endpointport-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpointport-v1-discovery-k8s-io","subsections":[]},{"section":"endpointhints-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpointconditions-v1beta1-discovery-k8s-io","subsections":[]},{"section":"endpoint-v1beta1-discovery-k8s-io","subsections":[]},{"section":"customresourcevalidation-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresources-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcescale-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionversion-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionnames-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[{"section":"-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"watch-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"list-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"read-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","subsections":[{"section":"delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"delete-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"replace-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"patch-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"create-customresourcedefinition-v1beta1-apiextensions-k8s-io","subsections":[]}]}]},{"section":"customresourceconversion-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcecolumndefinition-v1beta1-apiextensions-k8s-io","subsections":[]},{"section":"crossversionobjectreference-v2beta1-autoscaling","subsections":[]},{"section":"crossversionobjectreference-v2beta2-autoscaling","subsections":[]},{"section":"cronjob-v1beta1-batch","subsections":[{"section":"-strong-status-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"replace-status-cronjob-v1beta1-batch","subsections":[]},{"section":"read-status-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-status-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-read-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-list-cronjob-v1beta1-batch","subsections":[]},{"section":"watch-cronjob-v1beta1-batch","subsections":[]},{"section":"list-all-namespaces-cronjob-v1beta1-batch","subsections":[]},{"section":"list-cronjob-v1beta1-batch","subsections":[]},{"section":"read-cronjob-v1beta1-batch","subsections":[]}]},{"section":"-strong-write-operations-cronjob-v1beta1-batch-strong-","subsections":[{"section":"delete-collection-cronjob-v1beta1-batch","subsections":[]},{"section":"delete-cronjob-v1beta1-batch","subsections":[]},{"section":"replace-cronjob-v1beta1-batch","subsections":[]},{"section":"patch-cronjob-v1beta1-batch","subsections":[]},{"section":"create-cronjob-v1beta1-batch","subsections":[]}]}]},{"section":"containerresourcemetricstatus-v2beta1-autoscaling","subsections":[]},{"section":"containerresourcemetricsource-v2beta1-autoscaling","subsections":[]},{"section":"clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1alpha1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1beta1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"certificatesigningrequestcondition-v1beta1-certificates-k8s-io","subsections":[]},{"section":"certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[{"section":"-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"read-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"watch-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"list-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"read-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","subsections":[{"section":"delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"delete-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"replace-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"patch-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]},{"section":"create-certificatesigningrequest-v1beta1-certificates-k8s-io","subsections":[]}]}]},{"section":"csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-list-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"watch-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"list-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"read-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"delete-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"replace-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"patch-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]},{"section":"create-csistoragecapacity-v1alpha1-storage-k8s-io","subsections":[]}]}]},{"section":"csinodedriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"csinode-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-csinode-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-csinode-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-csinode-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"csidriver-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-csidriver-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-csidriver-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-csidriver-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"aggregationrule-v1alpha1-rbac-authorization-k8s-io","subsections":[]},{"section":"aggregationrule-v1beta1-rbac-authorization-k8s-io","subsections":[]},{"section":"apiservicecondition-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"apiservice-v1beta1-apiregistration-k8s-io","subsections":[{"section":"-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"replace-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"read-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"patch-status-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"watch-list-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"watch-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"list-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"read-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"delete-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"replace-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"patch-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]},{"section":"create-apiservice-v1beta1-apiregistration-k8s-io","subsections":[]}]}]},{"section":"-strong-old-api-versions-strong-","subsections":[]},{"section":"windowssecuritycontextoptions-v1-core","subsections":[]},{"section":"weightedpodaffinityterm-v1-core","subsections":[]},{"section":"webhookconversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"webhookclientconfig-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watchevent-v1-meta","subsections":[]},{"section":"vspherevirtualdiskvolumesource-v1-core","subsections":[]},{"section":"volumeprojection-v1-core","subsections":[]},{"section":"volumenoderesources-v1-storage-k8s-io","subsections":[]},{"section":"volumenodeaffinity-v1-core","subsections":[]},{"section":"volumemount-v1-core","subsections":[]},{"section":"volumeerror-v1-storage-k8s-io","subsections":[]},{"section":"volumedevice-v1-core","subsections":[]},{"section":"volumeattachmentsource-v1-storage-k8s-io","subsections":[]},{"section":"validatingwebhook-v1-admissionregistration-k8s-io","subsections":[]},{"section":"usersubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"userinfo-v1-authentication-k8s-io","subsections":[]},{"section":"typedlocalobjectreference-v1-core","subsections":[]},{"section":"topologyspreadconstraint-v1-core","subsections":[]},{"section":"topologyselectorterm-v1-core","subsections":[]},{"section":"topologyselectorlabelrequirement-v1-core","subsections":[]},{"section":"toleration-v1-core","subsections":[]},{"section":"time-v1-meta","subsections":[]},{"section":"taint-v1-core","subsections":[]},{"section":"tcpsocketaction-v1-core","subsections":[]},{"section":"sysctl-v1-core","subsections":[]},{"section":"supplementalgroupsstrategyoptions-v1beta1-policy","subsections":[]},{"section":"subjectrulesreviewstatus-v1-authorization-k8s-io","subsections":[]},{"section":"subject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"storageversioncondition-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"storageosvolumesource-v1-core","subsections":[]},{"section":"storageospersistentvolumesource-v1-core","subsections":[]},{"section":"statusdetails-v1-meta","subsections":[]},{"section":"statuscause-v1-meta","subsections":[]},{"section":"status-v1-meta","subsections":[]},{"section":"statefulsetupdatestrategy-v1-apps","subsections":[]},{"section":"statefulsetcondition-v1-apps","subsections":[]},{"section":"sessionaffinityconfig-v1-core","subsections":[]},{"section":"servicereference-v1-admissionregistration-k8s-io","subsections":[]},{"section":"serviceport-v1-core","subsections":[]},{"section":"servicebackendport-v1-networking-k8s-io","subsections":[]},{"section":"serviceaccounttokenprojection-v1-core","subsections":[]},{"section":"serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"serverstorageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"serveraddressbyclientcidr-v1-meta","subsections":[]},{"section":"securitycontext-v1-core","subsections":[]},{"section":"secretvolumesource-v1-core","subsections":[]},{"section":"secretreference-v1-core","subsections":[]},{"section":"secretprojection-v1-core","subsections":[]},{"section":"secretkeyselector-v1-core","subsections":[]},{"section":"secretenvsource-v1-core","subsections":[]},{"section":"seccompprofile-v1-core","subsections":[]},{"section":"scopedresourceselectorrequirement-v1-core","subsections":[]},{"section":"scopeselector-v1-core","subsections":[]},{"section":"scheduling-v1-node-k8s-io","subsections":[]},{"section":"scaleiovolumesource-v1-core","subsections":[]},{"section":"scaleiopersistentvolumesource-v1-core","subsections":[]},{"section":"scale-v1-autoscaling","subsections":[]},{"section":"selinuxstrategyoptions-v1beta1-policy","subsections":[]},{"section":"selinuxoptions-v1-core","subsections":[]},{"section":"runtimeclassstrategyoptions-v1beta1-policy","subsections":[]},{"section":"runasuserstrategyoptions-v1beta1-policy","subsections":[]},{"section":"runasgroupstrategyoptions-v1beta1-policy","subsections":[]},{"section":"rulewithoperations-v1-admissionregistration-k8s-io","subsections":[]},{"section":"rollingupdatestatefulsetstrategy-v1-apps","subsections":[]},{"section":"roleref-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"resourcerule-v1-authorization-k8s-io","subsections":[]},{"section":"resourcerequirements-v1-core","subsections":[]},{"section":"resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"resourcemetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"resourcemetricsource-v2beta2-autoscaling","subsections":[]},{"section":"resourcefieldselector-v1-core","subsections":[]},{"section":"resourceattributes-v1-authorization-k8s-io","subsections":[]},{"section":"replicationcontrollercondition-v1-core","subsections":[]},{"section":"replicasetcondition-v1-apps","subsections":[]},{"section":"rbdvolumesource-v1-core","subsections":[]},{"section":"rbdpersistentvolumesource-v1-core","subsections":[]},{"section":"quobytevolumesource-v1-core","subsections":[]},{"section":"queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"quantity-resource-core","subsections":[]},{"section":"projectedvolumesource-v1-core","subsections":[]},{"section":"probe-v1-core","subsections":[]},{"section":"prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"preferredschedulingterm-v1-core","subsections":[]},{"section":"preconditions-v1-meta","subsections":[]},{"section":"portworxvolumesource-v1-core","subsections":[]},{"section":"portstatus-v1-core","subsections":[]},{"section":"policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"policyrule-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"podsmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"podsmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"podsecuritycontext-v1-core","subsections":[]},{"section":"podreadinessgate-v1-core","subsections":[]},{"section":"podip-v1-core","subsections":[]},{"section":"poddnsconfigoption-v1-core","subsections":[]},{"section":"poddnsconfig-v1-core","subsections":[]},{"section":"podcondition-v1-core","subsections":[]},{"section":"podantiaffinity-v1-core","subsections":[]},{"section":"podaffinityterm-v1-core","subsections":[]},{"section":"podaffinity-v1-core","subsections":[]},{"section":"photonpersistentdiskvolumesource-v1-core","subsections":[]},{"section":"persistentvolumeclaimvolumesource-v1-core","subsections":[]},{"section":"persistentvolumeclaimtemplate-v1-core","subsections":[]},{"section":"persistentvolumeclaimcondition-v1-core","subsections":[]},{"section":"patch-v1-meta","subsections":[]},{"section":"ownerreference-v1-meta","subsections":[]},{"section":"overhead-v1-node-k8s-io","subsections":[]},{"section":"objectreference-v1-core","subsections":[]},{"section":"objectmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"objectmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"objectmeta-v1-meta","subsections":[]},{"section":"objectfieldselector-v1-core","subsections":[]},{"section":"nonresourcerule-v1-authorization-k8s-io","subsections":[]},{"section":"nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"nonresourceattributes-v1-authorization-k8s-io","subsections":[]},{"section":"nodesysteminfo-v1-core","subsections":[]},{"section":"nodeselectorterm-v1-core","subsections":[]},{"section":"nodeselectorrequirement-v1-core","subsections":[]},{"section":"nodeselector-v1-core","subsections":[]},{"section":"nodedaemonendpoints-v1-core","subsections":[]},{"section":"nodeconfigstatus-v1-core","subsections":[]},{"section":"nodeconfigsource-v1-core","subsections":[]},{"section":"nodecondition-v1-core","subsections":[]},{"section":"nodeaffinity-v1-core","subsections":[]},{"section":"nodeaddress-v1-core","subsections":[]},{"section":"networkpolicyport-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicypeer-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicyingressrule-v1-networking-k8s-io","subsections":[]},{"section":"networkpolicyegressrule-v1-networking-k8s-io","subsections":[]},{"section":"namespacecondition-v1-core","subsections":[]},{"section":"nfsvolumesource-v1-core","subsections":[]},{"section":"mutatingwebhook-v1-admissionregistration-k8s-io","subsections":[]},{"section":"microtime-v1-meta","subsections":[]},{"section":"metricvaluestatus-v2beta2-autoscaling","subsections":[]},{"section":"metrictarget-v2beta2-autoscaling","subsections":[]},{"section":"metricstatus-v2beta2-autoscaling","subsections":[]},{"section":"metricspec-v2beta2-autoscaling","subsections":[]},{"section":"metricidentifier-v2beta2-autoscaling","subsections":[]},{"section":"managedfieldsentry-v1-meta","subsections":[]},{"section":"localvolumesource-v1-core","subsections":[]},{"section":"localobjectreference-v1-core","subsections":[]},{"section":"loadbalancerstatus-v1-core","subsections":[]},{"section":"loadbalanceringress-v1-core","subsections":[]},{"section":"listmeta-v1-meta","subsections":[]},{"section":"limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"limitresponse-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"limitrangeitem-v1-core","subsections":[]},{"section":"lifecycle-v1-core","subsections":[]},{"section":"labelselectorrequirement-v1-meta","subsections":[]},{"section":"labelselector-v1-meta","subsections":[]},{"section":"keytopath-v1-core","subsections":[]},{"section":"jobtemplatespec-v1-batch","subsections":[]},{"section":"jobcondition-v1-batch","subsections":[]},{"section":"jsonschemapropsorbool-v1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemapropsorarray-v1-apiextensions-k8s-io","subsections":[]},{"section":"jsonschemaprops-v1-apiextensions-k8s-io","subsections":[]},{"section":"json-v1-apiextensions-k8s-io","subsections":[]},{"section":"ingresstls-v1-networking-k8s-io","subsections":[]},{"section":"ingressservicebackend-v1-networking-k8s-io","subsections":[]},{"section":"ingressrule-v1-networking-k8s-io","subsections":[]},{"section":"ingressclassparametersreference-v1-networking-k8s-io","subsections":[]},{"section":"ingressbackend-v1-networking-k8s-io","subsections":[]},{"section":"iscsivolumesource-v1-core","subsections":[]},{"section":"iscsipersistentvolumesource-v1-core","subsections":[]},{"section":"ipblock-v1-networking-k8s-io","subsections":[]},{"section":"idrange-v1beta1-policy","subsections":[]},{"section":"hostportrange-v1beta1-policy","subsections":[]},{"section":"hostpathvolumesource-v1-core","subsections":[]},{"section":"hostalias-v1-core","subsections":[]},{"section":"horizontalpodautoscalercondition-v2beta2-autoscaling","subsections":[]},{"section":"horizontalpodautoscalerbehavior-v2beta2-autoscaling","subsections":[]},{"section":"handler-v1-core","subsections":[]},{"section":"httpingressrulevalue-v1-networking-k8s-io","subsections":[]},{"section":"httpingresspath-v1-networking-k8s-io","subsections":[]},{"section":"httpheader-v1-core","subsections":[]},{"section":"httpgetaction-v1-core","subsections":[]},{"section":"hpascalingrules-v2beta2-autoscaling","subsections":[]},{"section":"hpascalingpolicy-v2beta2-autoscaling","subsections":[]},{"section":"groupversionfordiscovery-v1-meta","subsections":[]},{"section":"groupsubject-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"glusterfsvolumesource-v1-core","subsections":[]},{"section":"glusterfspersistentvolumesource-v1-core","subsections":[]},{"section":"gitrepovolumesource-v1-core","subsections":[]},{"section":"gcepersistentdiskvolumesource-v1-core","subsections":[]},{"section":"forzone-v1-discovery-k8s-io","subsections":[]},{"section":"flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"flockervolumesource-v1-core","subsections":[]},{"section":"flexvolumesource-v1-core","subsections":[]},{"section":"flexpersistentvolumesource-v1-core","subsections":[]},{"section":"fieldsv1-v1-meta","subsections":[]},{"section":"fsgroupstrategyoptions-v1beta1-policy","subsections":[]},{"section":"fcvolumesource-v1-core","subsections":[]},{"section":"externalmetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"externalmetricsource-v2beta2-autoscaling","subsections":[]},{"section":"externaldocumentation-v1-apiextensions-k8s-io","subsections":[]},{"section":"execaction-v1-core","subsections":[]},{"section":"eviction-v1beta1-policy","subsections":[]},{"section":"eventsource-v1-core","subsections":[]},{"section":"eventseries-v1-core","subsections":[]},{"section":"ephemeralvolumesource-v1-core","subsections":[]},{"section":"ephemeralcontainers-v1-core","subsections":[]},{"section":"ephemeralcontainer-v1-core","subsections":[]},{"section":"envvarsource-v1-core","subsections":[]},{"section":"envvar-v1-core","subsections":[]},{"section":"envfromsource-v1-core","subsections":[]},{"section":"endpointsubset-v1-core","subsections":[]},{"section":"endpointport-v1-core","subsections":[]},{"section":"endpointhints-v1-discovery-k8s-io","subsections":[]},{"section":"endpointconditions-v1-discovery-k8s-io","subsections":[]},{"section":"endpointaddress-v1-core","subsections":[]},{"section":"endpoint-v1-discovery-k8s-io","subsections":[]},{"section":"emptydirvolumesource-v1-core","subsections":[]},{"section":"downwardapivolumesource-v1-core","subsections":[]},{"section":"downwardapivolumefile-v1-core","subsections":[]},{"section":"downwardapiprojection-v1-core","subsections":[]},{"section":"deploymentcondition-v1-apps","subsections":[]},{"section":"deleteoptions-v1-meta","subsections":[]},{"section":"daemonsetupdatestrategy-v1-apps","subsections":[]},{"section":"daemonsetcondition-v1-apps","subsections":[]},{"section":"daemonendpoint-v1-core","subsections":[]},{"section":"customresourcevalidation-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresources-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcestatus-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcesubresourcescale-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitionnames-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcedefinitioncondition-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourceconversion-v1-apiextensions-k8s-io","subsections":[]},{"section":"customresourcecolumndefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"crossversionobjectreference-v1-autoscaling","subsections":[]},{"section":"containerstatewaiting-v1-core","subsections":[]},{"section":"containerstateterminated-v1-core","subsections":[]},{"section":"containerstaterunning-v1-core","subsections":[]},{"section":"containerstate-v1-core","subsections":[]},{"section":"containerresourcemetricstatus-v2beta2-autoscaling","subsections":[]},{"section":"containerresourcemetricsource-v2beta2-autoscaling","subsections":[]},{"section":"containerport-v1-core","subsections":[]},{"section":"containerimage-v1-core","subsections":[]},{"section":"configmapvolumesource-v1-core","subsections":[]},{"section":"configmapprojection-v1-core","subsections":[]},{"section":"configmapnodeconfigsource-v1-core","subsections":[]},{"section":"configmapkeyselector-v1-core","subsections":[]},{"section":"configmapenvsource-v1-core","subsections":[]},{"section":"condition-v1-meta","subsections":[]},{"section":"componentcondition-v1-core","subsections":[]},{"section":"clientipconfig-v1-core","subsections":[]},{"section":"cindervolumesource-v1-core","subsections":[]},{"section":"cinderpersistentvolumesource-v1-core","subsections":[]},{"section":"certificatesigningrequestcondition-v1-certificates-k8s-io","subsections":[]},{"section":"cephfsvolumesource-v1-core","subsections":[]},{"section":"cephfspersistentvolumesource-v1-core","subsections":[]},{"section":"capabilities-v1-core","subsections":[]},{"section":"csivolumesource-v1-core","subsections":[]},{"section":"csipersistentvolumesource-v1-core","subsections":[]},{"section":"csinodedriver-v1-storage-k8s-io","subsections":[]},{"section":"boundobjectreference-v1-authentication-k8s-io","subsections":[]},{"section":"azurefilevolumesource-v1-core","subsections":[]},{"section":"azurefilepersistentvolumesource-v1-core","subsections":[]},{"section":"azurediskvolumesource-v1-core","subsections":[]},{"section":"attachedvolume-v1-core","subsections":[]},{"section":"allowedhostpath-v1beta1-policy","subsections":[]},{"section":"allowedflexvolume-v1beta1-policy","subsections":[]},{"section":"allowedcsidriver-v1beta1-policy","subsections":[]},{"section":"aggregationrule-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"affinity-v1-core","subsections":[]},{"section":"awselasticblockstorevolumesource-v1-core","subsections":[]},{"section":"apiversions-v1-meta","subsections":[]},{"section":"apiservicecondition-v1-apiregistration-k8s-io","subsections":[]},{"section":"apiresource-v1-meta","subsections":[]},{"section":"apigroup-v1-meta","subsections":[]},{"section":"-strong-definitions-strong-","subsections":[]},{"section":"networkpolicy-v1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"watch-list-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"watch-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"list-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"read-networkpolicy-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"delete-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"replace-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"patch-networkpolicy-v1-networking-k8s-io","subsections":[]},{"section":"create-networkpolicy-v1-networking-k8s-io","subsections":[]}]}]},{"section":"tokenreview-v1-authentication-k8s-io","subsections":[{"section":"-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-","subsections":[{"section":"create-tokenreview-v1-authentication-k8s-io","subsections":[]}]}]},{"section":"tokenrequest-v1-authentication-k8s-io","subsections":[]},{"section":"subjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-subjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"read-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"watch-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"list-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"read-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"delete-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"replace-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"patch-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]},{"section":"create-storageversion-v1alpha1-internal-apiserver-k8s-io","subsections":[]}]}]},{"section":"serviceaccount-v1-core","subsections":[{"section":"-strong-read-operations-serviceaccount-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-serviceaccount-v1-core","subsections":[]},{"section":"watch-list-serviceaccount-v1-core","subsections":[]},{"section":"watch-serviceaccount-v1-core","subsections":[]},{"section":"list-all-namespaces-serviceaccount-v1-core","subsections":[]},{"section":"list-serviceaccount-v1-core","subsections":[]},{"section":"read-serviceaccount-v1-core","subsections":[]}]},{"section":"-strong-write-operations-serviceaccount-v1-core-strong-","subsections":[{"section":"delete-collection-serviceaccount-v1-core","subsections":[]},{"section":"delete-serviceaccount-v1-core","subsections":[]},{"section":"replace-serviceaccount-v1-core","subsections":[]},{"section":"patch-serviceaccount-v1-core","subsections":[]},{"section":"create-serviceaccount-v1-core","subsections":[]}]}]},{"section":"selfsubjectrulesreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectrulesreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"selfsubjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-selfsubjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"runtimeclass-v1-node-k8s-io","subsections":[{"section":"-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-","subsections":[{"section":"watch-list-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"watch-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"list-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"read-runtimeclass-v1-node-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-","subsections":[{"section":"delete-collection-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"delete-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"replace-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"patch-runtimeclass-v1-node-k8s-io","subsections":[]},{"section":"create-runtimeclass-v1-node-k8s-io","subsections":[]}]}]},{"section":"rolebinding-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-rolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"role-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-list-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-all-namespaces-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-role-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-role-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-role-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"resourcequota-v1-core","subsections":[{"section":"-strong-status-operations-resourcequota-v1-core-strong-","subsections":[{"section":"replace-status-resourcequota-v1-core","subsections":[]},{"section":"read-status-resourcequota-v1-core","subsections":[]},{"section":"patch-status-resourcequota-v1-core","subsections":[]}]},{"section":"-strong-read-operations-resourcequota-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-resourcequota-v1-core","subsections":[]},{"section":"watch-list-resourcequota-v1-core","subsections":[]},{"section":"watch-resourcequota-v1-core","subsections":[]},{"section":"list-all-namespaces-resourcequota-v1-core","subsections":[]},{"section":"list-resourcequota-v1-core","subsections":[]},{"section":"read-resourcequota-v1-core","subsections":[]}]},{"section":"-strong-write-operations-resourcequota-v1-core-strong-","subsections":[{"section":"delete-collection-resourcequota-v1-core","subsections":[]},{"section":"delete-resourcequota-v1-core","subsections":[]},{"section":"replace-resourcequota-v1-core","subsections":[]},{"section":"patch-resourcequota-v1-core","subsections":[]},{"section":"create-resourcequota-v1-core","subsections":[]}]}]},{"section":"prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]}]},{"section":"persistentvolume-v1-core","subsections":[{"section":"-strong-status-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"replace-status-persistentvolume-v1-core","subsections":[]},{"section":"read-status-persistentvolume-v1-core","subsections":[]},{"section":"patch-status-persistentvolume-v1-core","subsections":[]}]},{"section":"-strong-read-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"watch-list-persistentvolume-v1-core","subsections":[]},{"section":"watch-persistentvolume-v1-core","subsections":[]},{"section":"list-persistentvolume-v1-core","subsections":[]},{"section":"read-persistentvolume-v1-core","subsections":[]}]},{"section":"-strong-write-operations-persistentvolume-v1-core-strong-","subsections":[{"section":"delete-collection-persistentvolume-v1-core","subsections":[]},{"section":"delete-persistentvolume-v1-core","subsections":[]},{"section":"replace-persistentvolume-v1-core","subsections":[]},{"section":"patch-persistentvolume-v1-core","subsections":[]},{"section":"create-persistentvolume-v1-core","subsections":[]}]}]},{"section":"node-v1-core","subsections":[{"section":"-strong-proxy-operations-node-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-node-v1-core","subsections":[]},{"section":"replace-connect-proxy-node-v1-core","subsections":[]},{"section":"head-connect-proxy-path-node-v1-core","subsections":[]},{"section":"head-connect-proxy-node-v1-core","subsections":[]},{"section":"get-connect-proxy-path-node-v1-core","subsections":[]},{"section":"get-connect-proxy-node-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-node-v1-core","subsections":[]},{"section":"delete-connect-proxy-node-v1-core","subsections":[]},{"section":"create-connect-proxy-path-node-v1-core","subsections":[]},{"section":"create-connect-proxy-node-v1-core","subsections":[]}]},{"section":"-strong-status-operations-node-v1-core-strong-","subsections":[{"section":"replace-status-node-v1-core","subsections":[]},{"section":"read-status-node-v1-core","subsections":[]},{"section":"patch-status-node-v1-core","subsections":[]}]},{"section":"-strong-read-operations-node-v1-core-strong-","subsections":[{"section":"watch-list-node-v1-core","subsections":[]},{"section":"watch-node-v1-core","subsections":[]},{"section":"list-node-v1-core","subsections":[]},{"section":"read-node-v1-core","subsections":[]}]},{"section":"-strong-write-operations-node-v1-core-strong-","subsections":[{"section":"delete-collection-node-v1-core","subsections":[]},{"section":"delete-node-v1-core","subsections":[]},{"section":"replace-node-v1-core","subsections":[]},{"section":"patch-node-v1-core","subsections":[]},{"section":"create-node-v1-core","subsections":[]}]}]},{"section":"namespace-v1-core","subsections":[{"section":"-strong-status-operations-namespace-v1-core-strong-","subsections":[{"section":"replace-status-namespace-v1-core","subsections":[]},{"section":"read-status-namespace-v1-core","subsections":[]},{"section":"patch-status-namespace-v1-core","subsections":[]}]},{"section":"-strong-read-operations-namespace-v1-core-strong-","subsections":[{"section":"watch-list-namespace-v1-core","subsections":[]},{"section":"watch-namespace-v1-core","subsections":[]},{"section":"list-namespace-v1-core","subsections":[]},{"section":"read-namespace-v1-core","subsections":[]}]},{"section":"-strong-write-operations-namespace-v1-core-strong-","subsections":[{"section":"delete-namespace-v1-core","subsections":[]},{"section":"replace-namespace-v1-core","subsections":[]},{"section":"patch-namespace-v1-core","subsections":[]},{"section":"create-namespace-v1-core","subsections":[]}]}]},{"section":"localsubjectaccessreview-v1-authorization-k8s-io","subsections":[{"section":"-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-","subsections":[{"section":"create-localsubjectaccessreview-v1-authorization-k8s-io","subsections":[]}]}]},{"section":"lease-v1-coordination-k8s-io","subsections":[{"section":"-strong-read-operations-lease-v1-coordination-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-lease-v1-coordination-k8s-io","subsections":[]},{"section":"watch-list-lease-v1-coordination-k8s-io","subsections":[]},{"section":"watch-lease-v1-coordination-k8s-io","subsections":[]},{"section":"list-all-namespaces-lease-v1-coordination-k8s-io","subsections":[]},{"section":"list-lease-v1-coordination-k8s-io","subsections":[]},{"section":"read-lease-v1-coordination-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-lease-v1-coordination-k8s-io-strong-","subsections":[{"section":"delete-collection-lease-v1-coordination-k8s-io","subsections":[]},{"section":"delete-lease-v1-coordination-k8s-io","subsections":[]},{"section":"replace-lease-v1-coordination-k8s-io","subsections":[]},{"section":"patch-lease-v1-coordination-k8s-io","subsections":[]},{"section":"create-lease-v1-coordination-k8s-io","subsections":[]}]}]},{"section":"flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[{"section":"-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","subsections":[{"section":"delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]},{"section":"create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","subsections":[]}]}]},{"section":"componentstatus-v1-core","subsections":[{"section":"-strong-read-operations-componentstatus-v1-core-strong-","subsections":[{"section":"list-componentstatus-v1-core","subsections":[]},{"section":"read-componentstatus-v1-core","subsections":[]}]}]},{"section":"clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrolebinding-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"clusterrole-v1-rbac-authorization-k8s-io","subsections":[{"section":"-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"watch-list-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"watch-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"list-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"read-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","subsections":[{"section":"delete-collection-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"delete-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"replace-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"patch-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]},{"section":"create-clusterrole-v1-rbac-authorization-k8s-io","subsections":[]}]}]},{"section":"certificatesigningrequest-v1-certificates-k8s-io","subsections":[{"section":"-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"replace-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"read-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"patch-status-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"watch-list-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"watch-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"list-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"read-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","subsections":[{"section":"delete-collection-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"delete-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"replace-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"patch-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]},{"section":"create-certificatesigningrequest-v1-certificates-k8s-io","subsections":[]}]}]},{"section":"binding-v1-core","subsections":[{"section":"-strong-write-operations-binding-v1-core-strong-","subsections":[{"section":"create-binding-v1-core","subsections":[]}]}]},{"section":"apiservice-v1-apiregistration-k8s-io","subsections":[{"section":"-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"replace-status-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"read-status-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"patch-status-apiservice-v1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"watch-list-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"watch-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"list-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"read-apiservice-v1-apiregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"delete-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"replace-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"patch-apiservice-v1-apiregistration-k8s-io","subsections":[]},{"section":"create-apiservice-v1-apiregistration-k8s-io","subsections":[]}]}]},{"section":"-strong-cluster-apis-strong-","subsections":[]},{"section":"podsecuritypolicy-v1beta1-policy","subsections":[{"section":"-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-","subsections":[{"section":"watch-list-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"watch-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"list-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"read-podsecuritypolicy-v1beta1-policy","subsections":[]}]},{"section":"-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-","subsections":[{"section":"delete-collection-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"delete-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"replace-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"patch-podsecuritypolicy-v1beta1-policy","subsections":[]},{"section":"create-podsecuritypolicy-v1beta1-policy","subsections":[]}]}]},{"section":"priorityclass-v1-scheduling-k8s-io","subsections":[{"section":"-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-","subsections":[{"section":"watch-list-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"watch-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"list-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"read-priorityclass-v1-scheduling-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-","subsections":[{"section":"delete-collection-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"delete-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"replace-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"patch-priorityclass-v1-scheduling-k8s-io","subsections":[]},{"section":"create-priorityclass-v1-scheduling-k8s-io","subsections":[]}]}]},{"section":"poddisruptionbudget-v1-policy","subsections":[{"section":"-strong-status-operations-poddisruptionbudget-v1-policy-strong-","subsections":[{"section":"replace-status-poddisruptionbudget-v1-policy","subsections":[]},{"section":"read-status-poddisruptionbudget-v1-policy","subsections":[]},{"section":"patch-status-poddisruptionbudget-v1-policy","subsections":[]}]},{"section":"-strong-read-operations-poddisruptionbudget-v1-policy-strong-","subsections":[{"section":"watch-list-all-namespaces-poddisruptionbudget-v1-policy","subsections":[]},{"section":"watch-list-poddisruptionbudget-v1-policy","subsections":[]},{"section":"watch-poddisruptionbudget-v1-policy","subsections":[]},{"section":"list-all-namespaces-poddisruptionbudget-v1-policy","subsections":[]},{"section":"list-poddisruptionbudget-v1-policy","subsections":[]},{"section":"read-poddisruptionbudget-v1-policy","subsections":[]}]},{"section":"-strong-write-operations-poddisruptionbudget-v1-policy-strong-","subsections":[{"section":"delete-collection-poddisruptionbudget-v1-policy","subsections":[]},{"section":"delete-poddisruptionbudget-v1-policy","subsections":[]},{"section":"replace-poddisruptionbudget-v1-policy","subsections":[]},{"section":"patch-poddisruptionbudget-v1-policy","subsections":[]},{"section":"create-poddisruptionbudget-v1-policy","subsections":[]}]}]},{"section":"podtemplate-v1-core","subsections":[{"section":"-strong-read-operations-podtemplate-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-podtemplate-v1-core","subsections":[]},{"section":"watch-list-podtemplate-v1-core","subsections":[]},{"section":"watch-podtemplate-v1-core","subsections":[]},{"section":"list-all-namespaces-podtemplate-v1-core","subsections":[]},{"section":"list-podtemplate-v1-core","subsections":[]},{"section":"read-podtemplate-v1-core","subsections":[]}]},{"section":"-strong-write-operations-podtemplate-v1-core-strong-","subsections":[{"section":"delete-collection-podtemplate-v1-core","subsections":[]},{"section":"delete-podtemplate-v1-core","subsections":[]},{"section":"replace-podtemplate-v1-core","subsections":[]},{"section":"patch-podtemplate-v1-core","subsections":[]},{"section":"create-podtemplate-v1-core","subsections":[]}]}]},{"section":"validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[{"section":"-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","subsections":[{"section":"delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]},{"section":"create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","subsections":[]}]}]},{"section":"horizontalpodautoscaler-v1-autoscaling","subsections":[{"section":"-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"replace-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"read-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"patch-status-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]},{"section":"-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"watch-list-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"watch-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"list-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"read-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]},{"section":"-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-","subsections":[{"section":"delete-collection-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"delete-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"replace-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"patch-horizontalpodautoscaler-v1-autoscaling","subsections":[]},{"section":"create-horizontalpodautoscaler-v1-autoscaling","subsections":[]}]}]},{"section":"limitrange-v1-core","subsections":[{"section":"-strong-read-operations-limitrange-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-limitrange-v1-core","subsections":[]},{"section":"watch-list-limitrange-v1-core","subsections":[]},{"section":"watch-limitrange-v1-core","subsections":[]},{"section":"list-all-namespaces-limitrange-v1-core","subsections":[]},{"section":"list-limitrange-v1-core","subsections":[]},{"section":"read-limitrange-v1-core","subsections":[]}]},{"section":"-strong-write-operations-limitrange-v1-core-strong-","subsections":[{"section":"delete-collection-limitrange-v1-core","subsections":[]},{"section":"delete-limitrange-v1-core","subsections":[]},{"section":"replace-limitrange-v1-core","subsections":[]},{"section":"patch-limitrange-v1-core","subsections":[]},{"section":"create-limitrange-v1-core","subsections":[]}]}]},{"section":"event-v1-core","subsections":[{"section":"-strong-read-operations-event-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-event-v1-core","subsections":[]},{"section":"watch-list-event-v1-core","subsections":[]},{"section":"watch-event-v1-core","subsections":[]},{"section":"list-all-namespaces-event-v1-core","subsections":[]},{"section":"list-event-v1-core","subsections":[]},{"section":"read-event-v1-core","subsections":[]}]},{"section":"-strong-write-operations-event-v1-core-strong-","subsections":[{"section":"delete-collection-event-v1-core","subsections":[]},{"section":"delete-event-v1-core","subsections":[]},{"section":"replace-event-v1-core","subsections":[]},{"section":"patch-event-v1-core","subsections":[]},{"section":"create-event-v1-core","subsections":[]}]}]},{"section":"customresourcedefinition-v1-apiextensions-k8s-io","subsections":[{"section":"-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"replace-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"read-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"patch-status-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"watch-list-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"watch-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"list-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"read-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","subsections":[{"section":"delete-collection-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"delete-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"replace-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"patch-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]},{"section":"create-customresourcedefinition-v1-apiextensions-k8s-io","subsections":[]}]}]},{"section":"controllerrevision-v1-apps","subsections":[{"section":"-strong-read-operations-controllerrevision-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-controllerrevision-v1-apps","subsections":[]},{"section":"watch-list-controllerrevision-v1-apps","subsections":[]},{"section":"watch-controllerrevision-v1-apps","subsections":[]},{"section":"list-all-namespaces-controllerrevision-v1-apps","subsections":[]},{"section":"list-controllerrevision-v1-apps","subsections":[]},{"section":"read-controllerrevision-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-controllerrevision-v1-apps-strong-","subsections":[{"section":"delete-collection-controllerrevision-v1-apps","subsections":[]},{"section":"delete-controllerrevision-v1-apps","subsections":[]},{"section":"replace-controllerrevision-v1-apps","subsections":[]},{"section":"patch-controllerrevision-v1-apps","subsections":[]},{"section":"create-controllerrevision-v1-apps","subsections":[]}]}]},{"section":"-strong-metadata-apis-strong-","subsections":[]},{"section":"volumeattachment-v1-storage-k8s-io","subsections":[{"section":"-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"replace-status-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"read-status-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"patch-status-volumeattachment-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"watch-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"list-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"read-volumeattachment-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"delete-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"replace-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"patch-volumeattachment-v1-storage-k8s-io","subsections":[]},{"section":"create-volumeattachment-v1-storage-k8s-io","subsections":[]}]}]},{"section":"volume-v1-core","subsections":[]},{"section":"csistoragecapacity-v1beta1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-list-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"watch-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"list-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"read-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"delete-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"replace-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"patch-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]},{"section":"create-csistoragecapacity-v1beta1-storage-k8s-io","subsections":[]}]}]},{"section":"storageclass-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-storageclass-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"watch-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"list-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"read-storageclass-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-storageclass-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"delete-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"replace-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"patch-storageclass-v1-storage-k8s-io","subsections":[]},{"section":"create-storageclass-v1-storage-k8s-io","subsections":[]}]}]},{"section":"persistentvolumeclaim-v1-core","subsections":[{"section":"-strong-status-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"replace-status-persistentvolumeclaim-v1-core","subsections":[]},{"section":"read-status-persistentvolumeclaim-v1-core","subsections":[]},{"section":"patch-status-persistentvolumeclaim-v1-core","subsections":[]}]},{"section":"-strong-read-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-persistentvolumeclaim-v1-core","subsections":[]},{"section":"watch-list-persistentvolumeclaim-v1-core","subsections":[]},{"section":"watch-persistentvolumeclaim-v1-core","subsections":[]},{"section":"list-all-namespaces-persistentvolumeclaim-v1-core","subsections":[]},{"section":"list-persistentvolumeclaim-v1-core","subsections":[]},{"section":"read-persistentvolumeclaim-v1-core","subsections":[]}]},{"section":"-strong-write-operations-persistentvolumeclaim-v1-core-strong-","subsections":[{"section":"delete-collection-persistentvolumeclaim-v1-core","subsections":[]},{"section":"delete-persistentvolumeclaim-v1-core","subsections":[]},{"section":"replace-persistentvolumeclaim-v1-core","subsections":[]},{"section":"patch-persistentvolumeclaim-v1-core","subsections":[]},{"section":"create-persistentvolumeclaim-v1-core","subsections":[]}]}]},{"section":"secret-v1-core","subsections":[{"section":"-strong-read-operations-secret-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-secret-v1-core","subsections":[]},{"section":"watch-list-secret-v1-core","subsections":[]},{"section":"watch-secret-v1-core","subsections":[]},{"section":"list-all-namespaces-secret-v1-core","subsections":[]},{"section":"list-secret-v1-core","subsections":[]},{"section":"read-secret-v1-core","subsections":[]}]},{"section":"-strong-write-operations-secret-v1-core-strong-","subsections":[{"section":"delete-collection-secret-v1-core","subsections":[]},{"section":"delete-secret-v1-core","subsections":[]},{"section":"replace-secret-v1-core","subsections":[]},{"section":"patch-secret-v1-core","subsections":[]},{"section":"create-secret-v1-core","subsections":[]}]}]},{"section":"csinode-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csinode-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csinode-v1-storage-k8s-io","subsections":[]},{"section":"watch-csinode-v1-storage-k8s-io","subsections":[]},{"section":"list-csinode-v1-storage-k8s-io","subsections":[]},{"section":"read-csinode-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csinode-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csinode-v1-storage-k8s-io","subsections":[]},{"section":"delete-csinode-v1-storage-k8s-io","subsections":[]},{"section":"replace-csinode-v1-storage-k8s-io","subsections":[]},{"section":"patch-csinode-v1-storage-k8s-io","subsections":[]},{"section":"create-csinode-v1-storage-k8s-io","subsections":[]}]}]},{"section":"csidriver-v1-storage-k8s-io","subsections":[{"section":"-strong-read-operations-csidriver-v1-storage-k8s-io-strong-","subsections":[{"section":"watch-list-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"watch-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"list-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"read-csidriver-v1-storage-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-csidriver-v1-storage-k8s-io-strong-","subsections":[{"section":"delete-collection-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"delete-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"replace-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"patch-csidriver-v1-storage-k8s-io","subsections":[]},{"section":"create-csidriver-v1-storage-k8s-io","subsections":[]}]}]},{"section":"configmap-v1-core","subsections":[{"section":"-strong-read-operations-configmap-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-configmap-v1-core","subsections":[]},{"section":"watch-list-configmap-v1-core","subsections":[]},{"section":"watch-configmap-v1-core","subsections":[]},{"section":"list-all-namespaces-configmap-v1-core","subsections":[]},{"section":"list-configmap-v1-core","subsections":[]},{"section":"read-configmap-v1-core","subsections":[]}]},{"section":"-strong-write-operations-configmap-v1-core-strong-","subsections":[{"section":"delete-collection-configmap-v1-core","subsections":[]},{"section":"delete-configmap-v1-core","subsections":[]},{"section":"replace-configmap-v1-core","subsections":[]},{"section":"patch-configmap-v1-core","subsections":[]},{"section":"create-configmap-v1-core","subsections":[]}]}]},{"section":"-strong-config-and-storage-apis-strong-","subsections":[]},{"section":"service-v1-core","subsections":[{"section":"-strong-proxy-operations-service-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-service-v1-core","subsections":[]},{"section":"replace-connect-proxy-service-v1-core","subsections":[]},{"section":"head-connect-proxy-path-service-v1-core","subsections":[]},{"section":"head-connect-proxy-service-v1-core","subsections":[]},{"section":"get-connect-proxy-path-service-v1-core","subsections":[]},{"section":"get-connect-proxy-service-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-service-v1-core","subsections":[]},{"section":"delete-connect-proxy-service-v1-core","subsections":[]},{"section":"create-connect-proxy-path-service-v1-core","subsections":[]},{"section":"create-connect-proxy-service-v1-core","subsections":[]}]},{"section":"-strong-status-operations-service-v1-core-strong-","subsections":[{"section":"replace-status-service-v1-core","subsections":[]},{"section":"read-status-service-v1-core","subsections":[]},{"section":"patch-status-service-v1-core","subsections":[]}]},{"section":"-strong-read-operations-service-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-service-v1-core","subsections":[]},{"section":"watch-list-service-v1-core","subsections":[]},{"section":"watch-service-v1-core","subsections":[]},{"section":"list-all-namespaces-service-v1-core","subsections":[]},{"section":"list-service-v1-core","subsections":[]},{"section":"read-service-v1-core","subsections":[]}]},{"section":"-strong-write-operations-service-v1-core-strong-","subsections":[{"section":"delete-service-v1-core","subsections":[]},{"section":"replace-service-v1-core","subsections":[]},{"section":"patch-service-v1-core","subsections":[]},{"section":"create-service-v1-core","subsections":[]}]}]},{"section":"ingressclass-v1-networking-k8s-io","subsections":[{"section":"-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"watch-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"list-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"read-ingressclass-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"delete-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"replace-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"patch-ingressclass-v1-networking-k8s-io","subsections":[]},{"section":"create-ingressclass-v1-networking-k8s-io","subsections":[]}]}]},{"section":"ingress-v1-networking-k8s-io","subsections":[{"section":"-strong-status-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"replace-status-ingress-v1-networking-k8s-io","subsections":[]},{"section":"read-status-ingress-v1-networking-k8s-io","subsections":[]},{"section":"patch-status-ingress-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-read-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-ingress-v1-networking-k8s-io","subsections":[]},{"section":"watch-list-ingress-v1-networking-k8s-io","subsections":[]},{"section":"watch-ingress-v1-networking-k8s-io","subsections":[]},{"section":"list-all-namespaces-ingress-v1-networking-k8s-io","subsections":[]},{"section":"list-ingress-v1-networking-k8s-io","subsections":[]},{"section":"read-ingress-v1-networking-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-ingress-v1-networking-k8s-io-strong-","subsections":[{"section":"delete-collection-ingress-v1-networking-k8s-io","subsections":[]},{"section":"delete-ingress-v1-networking-k8s-io","subsections":[]},{"section":"replace-ingress-v1-networking-k8s-io","subsections":[]},{"section":"patch-ingress-v1-networking-k8s-io","subsections":[]},{"section":"create-ingress-v1-networking-k8s-io","subsections":[]}]}]},{"section":"endpointslice-v1-discovery-k8s-io","subsections":[{"section":"-strong-read-operations-endpointslice-v1-discovery-k8s-io-strong-","subsections":[{"section":"watch-list-all-namespaces-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"watch-list-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"watch-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"list-all-namespaces-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"list-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"read-endpointslice-v1-discovery-k8s-io","subsections":[]}]},{"section":"-strong-write-operations-endpointslice-v1-discovery-k8s-io-strong-","subsections":[{"section":"delete-collection-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"delete-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"replace-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"patch-endpointslice-v1-discovery-k8s-io","subsections":[]},{"section":"create-endpointslice-v1-discovery-k8s-io","subsections":[]}]}]},{"section":"endpoints-v1-core","subsections":[{"section":"-strong-read-operations-endpoints-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-endpoints-v1-core","subsections":[]},{"section":"watch-list-endpoints-v1-core","subsections":[]},{"section":"watch-endpoints-v1-core","subsections":[]},{"section":"list-all-namespaces-endpoints-v1-core","subsections":[]},{"section":"list-endpoints-v1-core","subsections":[]},{"section":"read-endpoints-v1-core","subsections":[]}]},{"section":"-strong-write-operations-endpoints-v1-core-strong-","subsections":[{"section":"delete-collection-endpoints-v1-core","subsections":[]},{"section":"delete-endpoints-v1-core","subsections":[]},{"section":"replace-endpoints-v1-core","subsections":[]},{"section":"patch-endpoints-v1-core","subsections":[]},{"section":"create-endpoints-v1-core","subsections":[]}]}]},{"section":"-strong-service-apis-strong-","subsections":[]},{"section":"statefulset-v1-apps","subsections":[{"section":"-strong-misc-operations-statefulset-v1-apps-strong-","subsections":[{"section":"patch-scale-statefulset-v1-apps","subsections":[]},{"section":"replace-scale-statefulset-v1-apps","subsections":[]},{"section":"read-scale-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-statefulset-v1-apps-strong-","subsections":[{"section":"replace-status-statefulset-v1-apps","subsections":[]},{"section":"read-status-statefulset-v1-apps","subsections":[]},{"section":"patch-status-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-statefulset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-statefulset-v1-apps","subsections":[]},{"section":"watch-list-statefulset-v1-apps","subsections":[]},{"section":"watch-statefulset-v1-apps","subsections":[]},{"section":"list-all-namespaces-statefulset-v1-apps","subsections":[]},{"section":"list-statefulset-v1-apps","subsections":[]},{"section":"read-statefulset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-statefulset-v1-apps-strong-","subsections":[{"section":"delete-collection-statefulset-v1-apps","subsections":[]},{"section":"delete-statefulset-v1-apps","subsections":[]},{"section":"replace-statefulset-v1-apps","subsections":[]},{"section":"patch-statefulset-v1-apps","subsections":[]},{"section":"create-statefulset-v1-apps","subsections":[]}]}]},{"section":"replicationcontroller-v1-core","subsections":[{"section":"-strong-misc-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"patch-scale-replicationcontroller-v1-core","subsections":[]},{"section":"replace-scale-replicationcontroller-v1-core","subsections":[]},{"section":"read-scale-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-status-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"replace-status-replicationcontroller-v1-core","subsections":[]},{"section":"read-status-replicationcontroller-v1-core","subsections":[]},{"section":"patch-status-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-read-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-replicationcontroller-v1-core","subsections":[]},{"section":"watch-list-replicationcontroller-v1-core","subsections":[]},{"section":"watch-replicationcontroller-v1-core","subsections":[]},{"section":"list-all-namespaces-replicationcontroller-v1-core","subsections":[]},{"section":"list-replicationcontroller-v1-core","subsections":[]},{"section":"read-replicationcontroller-v1-core","subsections":[]}]},{"section":"-strong-write-operations-replicationcontroller-v1-core-strong-","subsections":[{"section":"delete-collection-replicationcontroller-v1-core","subsections":[]},{"section":"delete-replicationcontroller-v1-core","subsections":[]},{"section":"replace-replicationcontroller-v1-core","subsections":[]},{"section":"patch-replicationcontroller-v1-core","subsections":[]},{"section":"create-replicationcontroller-v1-core","subsections":[]}]}]},{"section":"replicaset-v1-apps","subsections":[{"section":"-strong-misc-operations-replicaset-v1-apps-strong-","subsections":[{"section":"patch-scale-replicaset-v1-apps","subsections":[]},{"section":"replace-scale-replicaset-v1-apps","subsections":[]},{"section":"read-scale-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-replicaset-v1-apps-strong-","subsections":[{"section":"replace-status-replicaset-v1-apps","subsections":[]},{"section":"read-status-replicaset-v1-apps","subsections":[]},{"section":"patch-status-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-replicaset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-replicaset-v1-apps","subsections":[]},{"section":"watch-list-replicaset-v1-apps","subsections":[]},{"section":"watch-replicaset-v1-apps","subsections":[]},{"section":"list-all-namespaces-replicaset-v1-apps","subsections":[]},{"section":"list-replicaset-v1-apps","subsections":[]},{"section":"read-replicaset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-replicaset-v1-apps-strong-","subsections":[{"section":"delete-collection-replicaset-v1-apps","subsections":[]},{"section":"delete-replicaset-v1-apps","subsections":[]},{"section":"replace-replicaset-v1-apps","subsections":[]},{"section":"patch-replicaset-v1-apps","subsections":[]},{"section":"create-replicaset-v1-apps","subsections":[]}]}]},{"section":"pod-v1-core","subsections":[{"section":"-strong-misc-operations-pod-v1-core-strong-","subsections":[{"section":"read-log-pod-v1-core","subsections":[]}]},{"section":"-strong-proxy-operations-pod-v1-core-strong-","subsections":[{"section":"replace-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"replace-connect-proxy-pod-v1-core","subsections":[]},{"section":"head-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"head-connect-proxy-pod-v1-core","subsections":[]},{"section":"get-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"get-connect-proxy-pod-v1-core","subsections":[]},{"section":"get-connect-portforward-pod-v1-core","subsections":[]},{"section":"delete-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"delete-connect-proxy-pod-v1-core","subsections":[]},{"section":"create-connect-proxy-path-pod-v1-core","subsections":[]},{"section":"create-connect-proxy-pod-v1-core","subsections":[]},{"section":"create-connect-portforward-pod-v1-core","subsections":[]}]},{"section":"-strong-ephemeralcontainers-operations-pod-v1-core-strong-","subsections":[{"section":"replace-ephemeralcontainers-pod-v1-core","subsections":[]},{"section":"read-ephemeralcontainers-pod-v1-core","subsections":[]},{"section":"patch-ephemeralcontainers-pod-v1-core","subsections":[]}]},{"section":"-strong-status-operations-pod-v1-core-strong-","subsections":[{"section":"replace-status-pod-v1-core","subsections":[]},{"section":"read-status-pod-v1-core","subsections":[]},{"section":"patch-status-pod-v1-core","subsections":[]}]},{"section":"-strong-read-operations-pod-v1-core-strong-","subsections":[{"section":"watch-list-all-namespaces-pod-v1-core","subsections":[]},{"section":"watch-list-pod-v1-core","subsections":[]},{"section":"watch-pod-v1-core","subsections":[]},{"section":"list-all-namespaces-pod-v1-core","subsections":[]},{"section":"list-pod-v1-core","subsections":[]},{"section":"read-pod-v1-core","subsections":[]}]},{"section":"-strong-write-operations-pod-v1-core-strong-","subsections":[{"section":"delete-collection-pod-v1-core","subsections":[]},{"section":"delete-pod-v1-core","subsections":[]},{"section":"replace-pod-v1-core","subsections":[]},{"section":"patch-pod-v1-core","subsections":[]},{"section":"create-eviction-pod-v1-core","subsections":[]},{"section":"create-pod-v1-core","subsections":[]}]}]},{"section":"job-v1-batch","subsections":[{"section":"-strong-status-operations-job-v1-batch-strong-","subsections":[{"section":"replace-status-job-v1-batch","subsections":[]},{"section":"read-status-job-v1-batch","subsections":[]},{"section":"patch-status-job-v1-batch","subsections":[]}]},{"section":"-strong-read-operations-job-v1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-job-v1-batch","subsections":[]},{"section":"watch-list-job-v1-batch","subsections":[]},{"section":"watch-job-v1-batch","subsections":[]},{"section":"list-all-namespaces-job-v1-batch","subsections":[]},{"section":"list-job-v1-batch","subsections":[]},{"section":"read-job-v1-batch","subsections":[]}]},{"section":"-strong-write-operations-job-v1-batch-strong-","subsections":[{"section":"delete-collection-job-v1-batch","subsections":[]},{"section":"delete-job-v1-batch","subsections":[]},{"section":"replace-job-v1-batch","subsections":[]},{"section":"patch-job-v1-batch","subsections":[]},{"section":"create-job-v1-batch","subsections":[]}]}]},{"section":"deployment-v1-apps","subsections":[{"section":"-strong-misc-operations-deployment-v1-apps-strong-","subsections":[{"section":"patch-scale-deployment-v1-apps","subsections":[]},{"section":"replace-scale-deployment-v1-apps","subsections":[]},{"section":"read-scale-deployment-v1-apps","subsections":[]}]},{"section":"-strong-status-operations-deployment-v1-apps-strong-","subsections":[{"section":"replace-status-deployment-v1-apps","subsections":[]},{"section":"read-status-deployment-v1-apps","subsections":[]},{"section":"patch-status-deployment-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-deployment-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-deployment-v1-apps","subsections":[]},{"section":"watch-list-deployment-v1-apps","subsections":[]},{"section":"watch-deployment-v1-apps","subsections":[]},{"section":"list-all-namespaces-deployment-v1-apps","subsections":[]},{"section":"list-deployment-v1-apps","subsections":[]},{"section":"read-deployment-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-deployment-v1-apps-strong-","subsections":[{"section":"delete-collection-deployment-v1-apps","subsections":[]},{"section":"delete-deployment-v1-apps","subsections":[]},{"section":"replace-deployment-v1-apps","subsections":[]},{"section":"patch-deployment-v1-apps","subsections":[]},{"section":"create-deployment-v1-apps","subsections":[]}]}]},{"section":"daemonset-v1-apps","subsections":[{"section":"-strong-status-operations-daemonset-v1-apps-strong-","subsections":[{"section":"replace-status-daemonset-v1-apps","subsections":[]},{"section":"read-status-daemonset-v1-apps","subsections":[]},{"section":"patch-status-daemonset-v1-apps","subsections":[]}]},{"section":"-strong-read-operations-daemonset-v1-apps-strong-","subsections":[{"section":"watch-list-all-namespaces-daemonset-v1-apps","subsections":[]},{"section":"watch-list-daemonset-v1-apps","subsections":[]},{"section":"watch-daemonset-v1-apps","subsections":[]},{"section":"list-all-namespaces-daemonset-v1-apps","subsections":[]},{"section":"list-daemonset-v1-apps","subsections":[]},{"section":"read-daemonset-v1-apps","subsections":[]}]},{"section":"-strong-write-operations-daemonset-v1-apps-strong-","subsections":[{"section":"delete-collection-daemonset-v1-apps","subsections":[]},{"section":"delete-daemonset-v1-apps","subsections":[]},{"section":"replace-daemonset-v1-apps","subsections":[]},{"section":"patch-daemonset-v1-apps","subsections":[]},{"section":"create-daemonset-v1-apps","subsections":[]}]}]},{"section":"cronjob-v1-batch","subsections":[{"section":"-strong-status-operations-cronjob-v1-batch-strong-","subsections":[{"section":"replace-status-cronjob-v1-batch","subsections":[]},{"section":"read-status-cronjob-v1-batch","subsections":[]},{"section":"patch-status-cronjob-v1-batch","subsections":[]}]},{"section":"-strong-read-operations-cronjob-v1-batch-strong-","subsections":[{"section":"watch-list-all-namespaces-cronjob-v1-batch","subsections":[]},{"section":"watch-list-cronjob-v1-batch","subsections":[]},{"section":"watch-cronjob-v1-batch","subsections":[]},{"section":"list-all-namespaces-cronjob-v1-batch","subsections":[]},{"section":"list-cronjob-v1-batch","subsections":[]},{"section":"read-cronjob-v1-batch","subsections":[]}]},{"section":"-strong-write-operations-cronjob-v1-batch-strong-","subsections":[{"section":"delete-collection-cronjob-v1-batch","subsections":[]},{"section":"delete-cronjob-v1-batch","subsections":[]},{"section":"replace-cronjob-v1-batch","subsections":[]},{"section":"patch-cronjob-v1-batch","subsections":[]},{"section":"create-cronjob-v1-batch","subsections":[]}]}]},{"section":"container-v1-core","subsections":[]},{"section":"-strong-workloads-apis-strong-","subsections":[]},{"section":"-strong-api-groups-strong-","subsections":[]},{"section":"-strong-api-overview-strong-","subsections":[]}],"flatToc":["webhookclientconfig-v1beta1-apiextensions-k8s-io","webhookclientconfig-v1beta1-admissionregistration-k8s-io","webhookclientconfig-v1-apiextensions-k8s-io","volumenoderesources-v1beta1-storage-k8s-io","volumeerror-v1alpha1-storage-k8s-io","volumeerror-v1beta1-storage-k8s-io","volumeattachmentsource-v1alpha1-storage-k8s-io","volumeattachmentsource-v1beta1-storage-k8s-io","watch-list-volumeattachment-v1alpha1-storage-k8s-io","watch-volumeattachment-v1alpha1-storage-k8s-io","list-volumeattachment-v1alpha1-storage-k8s-io","read-volumeattachment-v1alpha1-storage-k8s-io","-strong-read-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1alpha1-storage-k8s-io","delete-volumeattachment-v1alpha1-storage-k8s-io","replace-volumeattachment-v1alpha1-storage-k8s-io","patch-volumeattachment-v1alpha1-storage-k8s-io","create-volumeattachment-v1alpha1-storage-k8s-io","-strong-write-operations-volumeattachment-v1alpha1-storage-k8s-io-strong-","volumeattachment-v1alpha1-storage-k8s-io","watch-list-volumeattachment-v1beta1-storage-k8s-io","watch-volumeattachment-v1beta1-storage-k8s-io","list-volumeattachment-v1beta1-storage-k8s-io","read-volumeattachment-v1beta1-storage-k8s-io","-strong-read-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1beta1-storage-k8s-io","delete-volumeattachment-v1beta1-storage-k8s-io","replace-volumeattachment-v1beta1-storage-k8s-io","patch-volumeattachment-v1beta1-storage-k8s-io","create-volumeattachment-v1beta1-storage-k8s-io","-strong-write-operations-volumeattachment-v1beta1-storage-k8s-io-strong-","volumeattachment-v1beta1-storage-k8s-io","watch-list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","watch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","list-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","read-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-read-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","delete-collection-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","delete-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","replace-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","patch-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","create-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-write-operations-validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","validatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","validatingwebhook-v1beta1-admissionregistration-k8s-io","userinfo-v1beta1-authentication-k8s-io","create-tokenreview-v1beta1-authentication-k8s-io","-strong-write-operations-tokenreview-v1beta1-authentication-k8s-io-strong-","tokenreview-v1beta1-authentication-k8s-io","tokenrequest-v1beta1-storage-k8s-io","tokenrequest-v1-storage-k8s-io","subjectrulesreviewstatus-v1beta1-authorization-k8s-io","create-subjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-subjectaccessreview-v1beta1-authorization-k8s-io-strong-","subjectaccessreview-v1beta1-authorization-k8s-io","subject-v1alpha1-rbac-authorization-k8s-io","subject-v1beta1-rbac-authorization-k8s-io","subject-v1-rbac-authorization-k8s-io","watch-list-storageclass-v1beta1-storage-k8s-io","watch-storageclass-v1beta1-storage-k8s-io","list-storageclass-v1beta1-storage-k8s-io","read-storageclass-v1beta1-storage-k8s-io","-strong-read-operations-storageclass-v1beta1-storage-k8s-io-strong-","delete-collection-storageclass-v1beta1-storage-k8s-io","delete-storageclass-v1beta1-storage-k8s-io","replace-storageclass-v1beta1-storage-k8s-io","patch-storageclass-v1beta1-storage-k8s-io","create-storageclass-v1beta1-storage-k8s-io","-strong-write-operations-storageclass-v1beta1-storage-k8s-io-strong-","storageclass-v1beta1-storage-k8s-io","servicereference-v1beta1-apiregistration-k8s-io","servicereference-v1beta1-apiextensions-k8s-io","servicereference-v1beta1-admissionregistration-k8s-io","servicereference-v1-apiregistration-k8s-io","servicereference-v1-apiextensions-k8s-io","create-selfsubjectrulesreview-v1beta1-authorization-k8s-io","-strong-write-operations-selfsubjectrulesreview-v1beta1-authorization-k8s-io-strong-","selfsubjectrulesreview-v1beta1-authorization-k8s-io","create-selfsubjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-selfsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","selfsubjectaccessreview-v1beta1-authorization-k8s-io","scheduling-v1alpha1-node-k8s-io","scheduling-v1beta1-node-k8s-io","watch-list-runtimeclass-v1alpha1-node-k8s-io","watch-runtimeclass-v1alpha1-node-k8s-io","list-runtimeclass-v1alpha1-node-k8s-io","read-runtimeclass-v1alpha1-node-k8s-io","-strong-read-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","delete-collection-runtimeclass-v1alpha1-node-k8s-io","delete-runtimeclass-v1alpha1-node-k8s-io","replace-runtimeclass-v1alpha1-node-k8s-io","patch-runtimeclass-v1alpha1-node-k8s-io","create-runtimeclass-v1alpha1-node-k8s-io","-strong-write-operations-runtimeclass-v1alpha1-node-k8s-io-strong-","runtimeclass-v1alpha1-node-k8s-io","watch-list-runtimeclass-v1beta1-node-k8s-io","watch-runtimeclass-v1beta1-node-k8s-io","list-runtimeclass-v1beta1-node-k8s-io","read-runtimeclass-v1beta1-node-k8s-io","-strong-read-operations-runtimeclass-v1beta1-node-k8s-io-strong-","delete-collection-runtimeclass-v1beta1-node-k8s-io","delete-runtimeclass-v1beta1-node-k8s-io","replace-runtimeclass-v1beta1-node-k8s-io","patch-runtimeclass-v1beta1-node-k8s-io","create-runtimeclass-v1beta1-node-k8s-io","-strong-write-operations-runtimeclass-v1beta1-node-k8s-io-strong-","runtimeclass-v1beta1-node-k8s-io","rulewithoperations-v1beta1-admissionregistration-k8s-io","roleref-v1alpha1-rbac-authorization-k8s-io","roleref-v1beta1-rbac-authorization-k8s-io","watch-list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-rolebinding-v1alpha1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1alpha1-rbac-authorization-k8s-io","list-rolebinding-v1alpha1-rbac-authorization-k8s-io","read-rolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1alpha1-rbac-authorization-k8s-io","delete-rolebinding-v1alpha1-rbac-authorization-k8s-io","replace-rolebinding-v1alpha1-rbac-authorization-k8s-io","patch-rolebinding-v1alpha1-rbac-authorization-k8s-io","create-rolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","rolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-rolebinding-v1beta1-rbac-authorization-k8s-io","watch-rolebinding-v1beta1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1beta1-rbac-authorization-k8s-io","list-rolebinding-v1beta1-rbac-authorization-k8s-io","read-rolebinding-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1beta1-rbac-authorization-k8s-io","delete-rolebinding-v1beta1-rbac-authorization-k8s-io","replace-rolebinding-v1beta1-rbac-authorization-k8s-io","patch-rolebinding-v1beta1-rbac-authorization-k8s-io","create-rolebinding-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1beta1-rbac-authorization-k8s-io-strong-","rolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","watch-list-role-v1alpha1-rbac-authorization-k8s-io","watch-role-v1alpha1-rbac-authorization-k8s-io","list-all-namespaces-role-v1alpha1-rbac-authorization-k8s-io","list-role-v1alpha1-rbac-authorization-k8s-io","read-role-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1alpha1-rbac-authorization-k8s-io","delete-role-v1alpha1-rbac-authorization-k8s-io","replace-role-v1alpha1-rbac-authorization-k8s-io","patch-role-v1alpha1-rbac-authorization-k8s-io","create-role-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-role-v1alpha1-rbac-authorization-k8s-io-strong-","role-v1alpha1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","watch-list-role-v1beta1-rbac-authorization-k8s-io","watch-role-v1beta1-rbac-authorization-k8s-io","list-all-namespaces-role-v1beta1-rbac-authorization-k8s-io","list-role-v1beta1-rbac-authorization-k8s-io","read-role-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1beta1-rbac-authorization-k8s-io","delete-role-v1beta1-rbac-authorization-k8s-io","replace-role-v1beta1-rbac-authorization-k8s-io","patch-role-v1beta1-rbac-authorization-k8s-io","create-role-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-role-v1beta1-rbac-authorization-k8s-io-strong-","role-v1beta1-rbac-authorization-k8s-io","resourcerule-v1beta1-authorization-k8s-io","resourcemetricstatus-v2beta1-autoscaling","resourcemetricsource-v2beta1-autoscaling","resourceattributes-v1beta1-authorization-k8s-io","watch-list-priorityclass-v1alpha1-scheduling-k8s-io","watch-priorityclass-v1alpha1-scheduling-k8s-io","list-priorityclass-v1alpha1-scheduling-k8s-io","read-priorityclass-v1alpha1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1alpha1-scheduling-k8s-io","delete-priorityclass-v1alpha1-scheduling-k8s-io","replace-priorityclass-v1alpha1-scheduling-k8s-io","patch-priorityclass-v1alpha1-scheduling-k8s-io","create-priorityclass-v1alpha1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1alpha1-scheduling-k8s-io-strong-","priorityclass-v1alpha1-scheduling-k8s-io","watch-list-priorityclass-v1beta1-scheduling-k8s-io","watch-priorityclass-v1beta1-scheduling-k8s-io","list-priorityclass-v1beta1-scheduling-k8s-io","read-priorityclass-v1beta1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1beta1-scheduling-k8s-io","delete-priorityclass-v1beta1-scheduling-k8s-io","replace-priorityclass-v1beta1-scheduling-k8s-io","patch-priorityclass-v1beta1-scheduling-k8s-io","create-priorityclass-v1beta1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1beta1-scheduling-k8s-io-strong-","priorityclass-v1beta1-scheduling-k8s-io","policyrule-v1alpha1-rbac-authorization-k8s-io","policyrule-v1beta1-rbac-authorization-k8s-io","podsmetricstatus-v2beta1-autoscaling","podsmetricsource-v2beta1-autoscaling","replace-status-poddisruptionbudget-v1beta1-policy","read-status-poddisruptionbudget-v1beta1-policy","patch-status-poddisruptionbudget-v1beta1-policy","-strong-status-operations-poddisruptionbudget-v1beta1-policy-strong-","watch-list-all-namespaces-poddisruptionbudget-v1beta1-policy","watch-list-poddisruptionbudget-v1beta1-policy","watch-poddisruptionbudget-v1beta1-policy","list-all-namespaces-poddisruptionbudget-v1beta1-policy","list-poddisruptionbudget-v1beta1-policy","read-poddisruptionbudget-v1beta1-policy","-strong-read-operations-poddisruptionbudget-v1beta1-policy-strong-","delete-collection-poddisruptionbudget-v1beta1-policy","delete-poddisruptionbudget-v1beta1-policy","replace-poddisruptionbudget-v1beta1-policy","patch-poddisruptionbudget-v1beta1-policy","create-poddisruptionbudget-v1beta1-policy","-strong-write-operations-poddisruptionbudget-v1beta1-policy-strong-","poddisruptionbudget-v1beta1-policy","overhead-v1alpha1-node-k8s-io","overhead-v1beta1-node-k8s-io","objectmetricstatus-v2beta1-autoscaling","objectmetricsource-v2beta1-autoscaling","nonresourcerule-v1beta1-authorization-k8s-io","nonresourceattributes-v1beta1-authorization-k8s-io","watch-list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","watch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","list-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","read-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-read-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","delete-collection-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","delete-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","replace-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","patch-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","create-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","-strong-write-operations-mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io-strong-","mutatingwebhookconfiguration-v1beta1-admissionregistration-k8s-io","mutatingwebhook-v1beta1-admissionregistration-k8s-io","metricstatus-v2beta1-autoscaling","metricspec-v2beta1-autoscaling","create-localsubjectaccessreview-v1beta1-authorization-k8s-io","-strong-write-operations-localsubjectaccessreview-v1beta1-authorization-k8s-io-strong-","localsubjectaccessreview-v1beta1-authorization-k8s-io","watch-list-all-namespaces-lease-v1beta1-coordination-k8s-io","watch-list-lease-v1beta1-coordination-k8s-io","watch-lease-v1beta1-coordination-k8s-io","list-all-namespaces-lease-v1beta1-coordination-k8s-io","list-lease-v1beta1-coordination-k8s-io","read-lease-v1beta1-coordination-k8s-io","-strong-read-operations-lease-v1beta1-coordination-k8s-io-strong-","delete-collection-lease-v1beta1-coordination-k8s-io","delete-lease-v1beta1-coordination-k8s-io","replace-lease-v1beta1-coordination-k8s-io","patch-lease-v1beta1-coordination-k8s-io","create-lease-v1beta1-coordination-k8s-io","-strong-write-operations-lease-v1beta1-coordination-k8s-io-strong-","lease-v1beta1-coordination-k8s-io","jobtemplatespec-v1beta1-batch","jsonschemapropsorbool-v1beta1-apiextensions-k8s-io","jsonschemapropsorarray-v1beta1-apiextensions-k8s-io","jsonschemaprops-v1beta1-apiextensions-k8s-io","json-v1beta1-apiextensions-k8s-io","ingresstls-v1beta1-networking-k8s-io","ingresstls-v1beta1-extensions","ingressrule-v1beta1-networking-k8s-io","ingressrule-v1beta1-extensions","ingressclassparametersreference-v1beta1-networking-k8s-io","watch-list-ingressclass-v1beta1-networking-k8s-io","watch-ingressclass-v1beta1-networking-k8s-io","list-ingressclass-v1beta1-networking-k8s-io","read-ingressclass-v1beta1-networking-k8s-io","-strong-read-operations-ingressclass-v1beta1-networking-k8s-io-strong-","delete-collection-ingressclass-v1beta1-networking-k8s-io","delete-ingressclass-v1beta1-networking-k8s-io","replace-ingressclass-v1beta1-networking-k8s-io","patch-ingressclass-v1beta1-networking-k8s-io","create-ingressclass-v1beta1-networking-k8s-io","-strong-write-operations-ingressclass-v1beta1-networking-k8s-io-strong-","ingressclass-v1beta1-networking-k8s-io","ingressbackend-v1beta1-networking-k8s-io","ingressbackend-v1beta1-extensions","replace-status-ingress-v1beta1-networking-k8s-io","read-status-ingress-v1beta1-networking-k8s-io","patch-status-ingress-v1beta1-networking-k8s-io","-strong-status-operations-ingress-v1beta1-networking-k8s-io-strong-","watch-list-all-namespaces-ingress-v1beta1-networking-k8s-io","watch-list-ingress-v1beta1-networking-k8s-io","watch-ingress-v1beta1-networking-k8s-io","list-all-namespaces-ingress-v1beta1-networking-k8s-io","list-ingress-v1beta1-networking-k8s-io","read-ingress-v1beta1-networking-k8s-io","-strong-read-operations-ingress-v1beta1-networking-k8s-io-strong-","delete-collection-ingress-v1beta1-networking-k8s-io","delete-ingress-v1beta1-networking-k8s-io","replace-ingress-v1beta1-networking-k8s-io","patch-ingress-v1beta1-networking-k8s-io","create-ingress-v1beta1-networking-k8s-io","-strong-write-operations-ingress-v1beta1-networking-k8s-io-strong-","ingress-v1beta1-networking-k8s-io","replace-status-ingress-v1beta1-extensions","read-status-ingress-v1beta1-extensions","patch-status-ingress-v1beta1-extensions","-strong-status-operations-ingress-v1beta1-extensions-strong-","watch-list-all-namespaces-ingress-v1beta1-extensions","watch-list-ingress-v1beta1-extensions","watch-ingress-v1beta1-extensions","list-all-namespaces-ingress-v1beta1-extensions","list-ingress-v1beta1-extensions","read-ingress-v1beta1-extensions","-strong-read-operations-ingress-v1beta1-extensions-strong-","delete-collection-ingress-v1beta1-extensions","delete-ingress-v1beta1-extensions","replace-ingress-v1beta1-extensions","patch-ingress-v1beta1-extensions","create-ingress-v1beta1-extensions","-strong-write-operations-ingress-v1beta1-extensions-strong-","ingress-v1beta1-extensions","horizontalpodautoscalercondition-v2beta1-autoscaling","replace-status-horizontalpodautoscaler-v2beta1-autoscaling","read-status-horizontalpodautoscaler-v2beta1-autoscaling","patch-status-horizontalpodautoscaler-v2beta1-autoscaling","-strong-status-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","watch-list-horizontalpodautoscaler-v2beta1-autoscaling","watch-horizontalpodautoscaler-v2beta1-autoscaling","list-all-namespaces-horizontalpodautoscaler-v2beta1-autoscaling","list-horizontalpodautoscaler-v2beta1-autoscaling","read-horizontalpodautoscaler-v2beta1-autoscaling","-strong-read-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v2beta1-autoscaling","delete-horizontalpodautoscaler-v2beta1-autoscaling","replace-horizontalpodautoscaler-v2beta1-autoscaling","patch-horizontalpodautoscaler-v2beta1-autoscaling","create-horizontalpodautoscaler-v2beta1-autoscaling","-strong-write-operations-horizontalpodautoscaler-v2beta1-autoscaling-strong-","horizontalpodautoscaler-v2beta1-autoscaling","replace-status-horizontalpodautoscaler-v2beta2-autoscaling","read-status-horizontalpodautoscaler-v2beta2-autoscaling","patch-status-horizontalpodautoscaler-v2beta2-autoscaling","-strong-status-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","watch-list-horizontalpodautoscaler-v2beta2-autoscaling","watch-horizontalpodautoscaler-v2beta2-autoscaling","list-all-namespaces-horizontalpodautoscaler-v2beta2-autoscaling","list-horizontalpodautoscaler-v2beta2-autoscaling","read-horizontalpodautoscaler-v2beta2-autoscaling","-strong-read-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v2beta2-autoscaling","delete-horizontalpodautoscaler-v2beta2-autoscaling","replace-horizontalpodautoscaler-v2beta2-autoscaling","patch-horizontalpodautoscaler-v2beta2-autoscaling","create-horizontalpodautoscaler-v2beta2-autoscaling","-strong-write-operations-horizontalpodautoscaler-v2beta2-autoscaling-strong-","horizontalpodautoscaler-v2beta2-autoscaling","httpingressrulevalue-v1beta1-networking-k8s-io","httpingressrulevalue-v1beta1-extensions","httpingresspath-v1beta1-networking-k8s-io","httpingresspath-v1beta1-extensions","forzone-v1beta1-discovery-k8s-io","externalmetricstatus-v2beta1-autoscaling","externalmetricsource-v2beta1-autoscaling","externaldocumentation-v1beta1-apiextensions-k8s-io","eventseries-v1beta1-events-k8s-io","eventseries-v1-events-k8s-io","watch-list-all-namespaces-event-v1beta1-events-k8s-io","watch-list-event-v1beta1-events-k8s-io","watch-event-v1beta1-events-k8s-io","list-all-namespaces-event-v1beta1-events-k8s-io","list-event-v1beta1-events-k8s-io","read-event-v1beta1-events-k8s-io","-strong-read-operations-event-v1beta1-events-k8s-io-strong-","delete-collection-event-v1beta1-events-k8s-io","delete-event-v1beta1-events-k8s-io","replace-event-v1beta1-events-k8s-io","patch-event-v1beta1-events-k8s-io","create-event-v1beta1-events-k8s-io","-strong-write-operations-event-v1beta1-events-k8s-io-strong-","event-v1beta1-events-k8s-io","watch-list-all-namespaces-event-v1-events-k8s-io","watch-list-event-v1-events-k8s-io","watch-event-v1-events-k8s-io","list-all-namespaces-event-v1-events-k8s-io","list-event-v1-events-k8s-io","read-event-v1-events-k8s-io","-strong-read-operations-event-v1-events-k8s-io-strong-","delete-collection-event-v1-events-k8s-io","delete-event-v1-events-k8s-io","replace-event-v1-events-k8s-io","patch-event-v1-events-k8s-io","create-event-v1-events-k8s-io","-strong-write-operations-event-v1-events-k8s-io-strong-","event-v1-events-k8s-io","watch-list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","watch-list-endpointslice-v1beta1-discovery-k8s-io","watch-endpointslice-v1beta1-discovery-k8s-io","list-all-namespaces-endpointslice-v1beta1-discovery-k8s-io","list-endpointslice-v1beta1-discovery-k8s-io","read-endpointslice-v1beta1-discovery-k8s-io","-strong-read-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","delete-collection-endpointslice-v1beta1-discovery-k8s-io","delete-endpointslice-v1beta1-discovery-k8s-io","replace-endpointslice-v1beta1-discovery-k8s-io","patch-endpointslice-v1beta1-discovery-k8s-io","create-endpointslice-v1beta1-discovery-k8s-io","-strong-write-operations-endpointslice-v1beta1-discovery-k8s-io-strong-","endpointslice-v1beta1-discovery-k8s-io","endpointport-v1beta1-discovery-k8s-io","endpointport-v1-discovery-k8s-io","endpointhints-v1beta1-discovery-k8s-io","endpointconditions-v1beta1-discovery-k8s-io","endpoint-v1beta1-discovery-k8s-io","customresourcevalidation-v1beta1-apiextensions-k8s-io","customresourcesubresources-v1beta1-apiextensions-k8s-io","customresourcesubresourcestatus-v1beta1-apiextensions-k8s-io","customresourcesubresourcescale-v1beta1-apiextensions-k8s-io","customresourcedefinitionversion-v1beta1-apiextensions-k8s-io","customresourcedefinitionnames-v1beta1-apiextensions-k8s-io","customresourcedefinitioncondition-v1beta1-apiextensions-k8s-io","replace-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","read-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","patch-status-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-status-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","watch-list-customresourcedefinition-v1beta1-apiextensions-k8s-io","watch-customresourcedefinition-v1beta1-apiextensions-k8s-io","list-customresourcedefinition-v1beta1-apiextensions-k8s-io","read-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-read-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","delete-collection-customresourcedefinition-v1beta1-apiextensions-k8s-io","delete-customresourcedefinition-v1beta1-apiextensions-k8s-io","replace-customresourcedefinition-v1beta1-apiextensions-k8s-io","patch-customresourcedefinition-v1beta1-apiextensions-k8s-io","create-customresourcedefinition-v1beta1-apiextensions-k8s-io","-strong-write-operations-customresourcedefinition-v1beta1-apiextensions-k8s-io-strong-","customresourcedefinition-v1beta1-apiextensions-k8s-io","customresourceconversion-v1beta1-apiextensions-k8s-io","customresourcecolumndefinition-v1beta1-apiextensions-k8s-io","crossversionobjectreference-v2beta1-autoscaling","crossversionobjectreference-v2beta2-autoscaling","replace-status-cronjob-v1beta1-batch","read-status-cronjob-v1beta1-batch","patch-status-cronjob-v1beta1-batch","-strong-status-operations-cronjob-v1beta1-batch-strong-","watch-list-all-namespaces-cronjob-v1beta1-batch","watch-list-cronjob-v1beta1-batch","watch-cronjob-v1beta1-batch","list-all-namespaces-cronjob-v1beta1-batch","list-cronjob-v1beta1-batch","read-cronjob-v1beta1-batch","-strong-read-operations-cronjob-v1beta1-batch-strong-","delete-collection-cronjob-v1beta1-batch","delete-cronjob-v1beta1-batch","replace-cronjob-v1beta1-batch","patch-cronjob-v1beta1-batch","create-cronjob-v1beta1-batch","-strong-write-operations-cronjob-v1beta1-batch-strong-","cronjob-v1beta1-batch","containerresourcemetricstatus-v2beta1-autoscaling","containerresourcemetricsource-v2beta1-autoscaling","watch-list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","list-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","read-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","create-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1alpha1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1alpha1-rbac-authorization-k8s-io","watch-list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","list-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","read-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","create-clusterrolebinding-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1beta1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1beta1-rbac-authorization-k8s-io","watch-list-clusterrole-v1alpha1-rbac-authorization-k8s-io","watch-clusterrole-v1alpha1-rbac-authorization-k8s-io","list-clusterrole-v1alpha1-rbac-authorization-k8s-io","read-clusterrole-v1alpha1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1alpha1-rbac-authorization-k8s-io","delete-clusterrole-v1alpha1-rbac-authorization-k8s-io","replace-clusterrole-v1alpha1-rbac-authorization-k8s-io","patch-clusterrole-v1alpha1-rbac-authorization-k8s-io","create-clusterrole-v1alpha1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1alpha1-rbac-authorization-k8s-io-strong-","clusterrole-v1alpha1-rbac-authorization-k8s-io","watch-list-clusterrole-v1beta1-rbac-authorization-k8s-io","watch-clusterrole-v1beta1-rbac-authorization-k8s-io","list-clusterrole-v1beta1-rbac-authorization-k8s-io","read-clusterrole-v1beta1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1beta1-rbac-authorization-k8s-io","delete-clusterrole-v1beta1-rbac-authorization-k8s-io","replace-clusterrole-v1beta1-rbac-authorization-k8s-io","patch-clusterrole-v1beta1-rbac-authorization-k8s-io","create-clusterrole-v1beta1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1beta1-rbac-authorization-k8s-io-strong-","clusterrole-v1beta1-rbac-authorization-k8s-io","certificatesigningrequestcondition-v1beta1-certificates-k8s-io","replace-status-certificatesigningrequest-v1beta1-certificates-k8s-io","read-status-certificatesigningrequest-v1beta1-certificates-k8s-io","patch-status-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-status-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","watch-list-certificatesigningrequest-v1beta1-certificates-k8s-io","watch-certificatesigningrequest-v1beta1-certificates-k8s-io","list-certificatesigningrequest-v1beta1-certificates-k8s-io","read-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-read-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","delete-collection-certificatesigningrequest-v1beta1-certificates-k8s-io","delete-certificatesigningrequest-v1beta1-certificates-k8s-io","replace-certificatesigningrequest-v1beta1-certificates-k8s-io","patch-certificatesigningrequest-v1beta1-certificates-k8s-io","create-certificatesigningrequest-v1beta1-certificates-k8s-io","-strong-write-operations-certificatesigningrequest-v1beta1-certificates-k8s-io-strong-","certificatesigningrequest-v1beta1-certificates-k8s-io","watch-list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","watch-list-csistoragecapacity-v1alpha1-storage-k8s-io","watch-csistoragecapacity-v1alpha1-storage-k8s-io","list-all-namespaces-csistoragecapacity-v1alpha1-storage-k8s-io","list-csistoragecapacity-v1alpha1-storage-k8s-io","read-csistoragecapacity-v1alpha1-storage-k8s-io","-strong-read-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","delete-collection-csistoragecapacity-v1alpha1-storage-k8s-io","delete-csistoragecapacity-v1alpha1-storage-k8s-io","replace-csistoragecapacity-v1alpha1-storage-k8s-io","patch-csistoragecapacity-v1alpha1-storage-k8s-io","create-csistoragecapacity-v1alpha1-storage-k8s-io","-strong-write-operations-csistoragecapacity-v1alpha1-storage-k8s-io-strong-","csistoragecapacity-v1alpha1-storage-k8s-io","csinodedriver-v1beta1-storage-k8s-io","watch-list-csinode-v1beta1-storage-k8s-io","watch-csinode-v1beta1-storage-k8s-io","list-csinode-v1beta1-storage-k8s-io","read-csinode-v1beta1-storage-k8s-io","-strong-read-operations-csinode-v1beta1-storage-k8s-io-strong-","delete-collection-csinode-v1beta1-storage-k8s-io","delete-csinode-v1beta1-storage-k8s-io","replace-csinode-v1beta1-storage-k8s-io","patch-csinode-v1beta1-storage-k8s-io","create-csinode-v1beta1-storage-k8s-io","-strong-write-operations-csinode-v1beta1-storage-k8s-io-strong-","csinode-v1beta1-storage-k8s-io","watch-list-csidriver-v1beta1-storage-k8s-io","watch-csidriver-v1beta1-storage-k8s-io","list-csidriver-v1beta1-storage-k8s-io","read-csidriver-v1beta1-storage-k8s-io","-strong-read-operations-csidriver-v1beta1-storage-k8s-io-strong-","delete-collection-csidriver-v1beta1-storage-k8s-io","delete-csidriver-v1beta1-storage-k8s-io","replace-csidriver-v1beta1-storage-k8s-io","patch-csidriver-v1beta1-storage-k8s-io","create-csidriver-v1beta1-storage-k8s-io","-strong-write-operations-csidriver-v1beta1-storage-k8s-io-strong-","csidriver-v1beta1-storage-k8s-io","aggregationrule-v1alpha1-rbac-authorization-k8s-io","aggregationrule-v1beta1-rbac-authorization-k8s-io","apiservicecondition-v1beta1-apiregistration-k8s-io","replace-status-apiservice-v1beta1-apiregistration-k8s-io","read-status-apiservice-v1beta1-apiregistration-k8s-io","patch-status-apiservice-v1beta1-apiregistration-k8s-io","-strong-status-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","watch-list-apiservice-v1beta1-apiregistration-k8s-io","watch-apiservice-v1beta1-apiregistration-k8s-io","list-apiservice-v1beta1-apiregistration-k8s-io","read-apiservice-v1beta1-apiregistration-k8s-io","-strong-read-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","delete-collection-apiservice-v1beta1-apiregistration-k8s-io","delete-apiservice-v1beta1-apiregistration-k8s-io","replace-apiservice-v1beta1-apiregistration-k8s-io","patch-apiservice-v1beta1-apiregistration-k8s-io","create-apiservice-v1beta1-apiregistration-k8s-io","-strong-write-operations-apiservice-v1beta1-apiregistration-k8s-io-strong-","apiservice-v1beta1-apiregistration-k8s-io","-strong-old-api-versions-strong-","windowssecuritycontextoptions-v1-core","weightedpodaffinityterm-v1-core","webhookconversion-v1-apiextensions-k8s-io","webhookclientconfig-v1-admissionregistration-k8s-io","watchevent-v1-meta","vspherevirtualdiskvolumesource-v1-core","volumeprojection-v1-core","volumenoderesources-v1-storage-k8s-io","volumenodeaffinity-v1-core","volumemount-v1-core","volumeerror-v1-storage-k8s-io","volumedevice-v1-core","volumeattachmentsource-v1-storage-k8s-io","validatingwebhook-v1-admissionregistration-k8s-io","usersubject-v1beta1-flowcontrol-apiserver-k8s-io","userinfo-v1-authentication-k8s-io","typedlocalobjectreference-v1-core","topologyspreadconstraint-v1-core","topologyselectorterm-v1-core","topologyselectorlabelrequirement-v1-core","toleration-v1-core","time-v1-meta","taint-v1-core","tcpsocketaction-v1-core","sysctl-v1-core","supplementalgroupsstrategyoptions-v1beta1-policy","subjectrulesreviewstatus-v1-authorization-k8s-io","subject-v1beta1-flowcontrol-apiserver-k8s-io","storageversioncondition-v1alpha1-internal-apiserver-k8s-io","storageosvolumesource-v1-core","storageospersistentvolumesource-v1-core","statusdetails-v1-meta","statuscause-v1-meta","status-v1-meta","statefulsetupdatestrategy-v1-apps","statefulsetcondition-v1-apps","sessionaffinityconfig-v1-core","servicereference-v1-admissionregistration-k8s-io","serviceport-v1-core","servicebackendport-v1-networking-k8s-io","serviceaccounttokenprojection-v1-core","serviceaccountsubject-v1beta1-flowcontrol-apiserver-k8s-io","serverstorageversion-v1alpha1-internal-apiserver-k8s-io","serveraddressbyclientcidr-v1-meta","securitycontext-v1-core","secretvolumesource-v1-core","secretreference-v1-core","secretprojection-v1-core","secretkeyselector-v1-core","secretenvsource-v1-core","seccompprofile-v1-core","scopedresourceselectorrequirement-v1-core","scopeselector-v1-core","scheduling-v1-node-k8s-io","scaleiovolumesource-v1-core","scaleiopersistentvolumesource-v1-core","scale-v1-autoscaling","selinuxstrategyoptions-v1beta1-policy","selinuxoptions-v1-core","runtimeclassstrategyoptions-v1beta1-policy","runasuserstrategyoptions-v1beta1-policy","runasgroupstrategyoptions-v1beta1-policy","rulewithoperations-v1-admissionregistration-k8s-io","rollingupdatestatefulsetstrategy-v1-apps","roleref-v1-rbac-authorization-k8s-io","resourcerule-v1-authorization-k8s-io","resourcerequirements-v1-core","resourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","resourcemetricstatus-v2beta2-autoscaling","resourcemetricsource-v2beta2-autoscaling","resourcefieldselector-v1-core","resourceattributes-v1-authorization-k8s-io","replicationcontrollercondition-v1-core","replicasetcondition-v1-apps","rbdvolumesource-v1-core","rbdpersistentvolumesource-v1-core","quobytevolumesource-v1-core","queuingconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","quantity-resource-core","projectedvolumesource-v1-core","probe-v1-core","prioritylevelconfigurationreference-v1beta1-flowcontrol-apiserver-k8s-io","prioritylevelconfigurationcondition-v1beta1-flowcontrol-apiserver-k8s-io","preferredschedulingterm-v1-core","preconditions-v1-meta","portworxvolumesource-v1-core","portstatus-v1-core","policyruleswithsubjects-v1beta1-flowcontrol-apiserver-k8s-io","policyrule-v1-rbac-authorization-k8s-io","podsmetricstatus-v2beta2-autoscaling","podsmetricsource-v2beta2-autoscaling","podsecuritycontext-v1-core","podreadinessgate-v1-core","podip-v1-core","poddnsconfigoption-v1-core","poddnsconfig-v1-core","podcondition-v1-core","podantiaffinity-v1-core","podaffinityterm-v1-core","podaffinity-v1-core","photonpersistentdiskvolumesource-v1-core","persistentvolumeclaimvolumesource-v1-core","persistentvolumeclaimtemplate-v1-core","persistentvolumeclaimcondition-v1-core","patch-v1-meta","ownerreference-v1-meta","overhead-v1-node-k8s-io","objectreference-v1-core","objectmetricstatus-v2beta2-autoscaling","objectmetricsource-v2beta2-autoscaling","objectmeta-v1-meta","objectfieldselector-v1-core","nonresourcerule-v1-authorization-k8s-io","nonresourcepolicyrule-v1beta1-flowcontrol-apiserver-k8s-io","nonresourceattributes-v1-authorization-k8s-io","nodesysteminfo-v1-core","nodeselectorterm-v1-core","nodeselectorrequirement-v1-core","nodeselector-v1-core","nodedaemonendpoints-v1-core","nodeconfigstatus-v1-core","nodeconfigsource-v1-core","nodecondition-v1-core","nodeaffinity-v1-core","nodeaddress-v1-core","networkpolicyport-v1-networking-k8s-io","networkpolicypeer-v1-networking-k8s-io","networkpolicyingressrule-v1-networking-k8s-io","networkpolicyegressrule-v1-networking-k8s-io","namespacecondition-v1-core","nfsvolumesource-v1-core","mutatingwebhook-v1-admissionregistration-k8s-io","microtime-v1-meta","metricvaluestatus-v2beta2-autoscaling","metrictarget-v2beta2-autoscaling","metricstatus-v2beta2-autoscaling","metricspec-v2beta2-autoscaling","metricidentifier-v2beta2-autoscaling","managedfieldsentry-v1-meta","localvolumesource-v1-core","localobjectreference-v1-core","loadbalancerstatus-v1-core","loadbalanceringress-v1-core","listmeta-v1-meta","limitedprioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","limitresponse-v1beta1-flowcontrol-apiserver-k8s-io","limitrangeitem-v1-core","lifecycle-v1-core","labelselectorrequirement-v1-meta","labelselector-v1-meta","keytopath-v1-core","jobtemplatespec-v1-batch","jobcondition-v1-batch","jsonschemapropsorbool-v1-apiextensions-k8s-io","jsonschemapropsorarray-v1-apiextensions-k8s-io","jsonschemaprops-v1-apiextensions-k8s-io","json-v1-apiextensions-k8s-io","ingresstls-v1-networking-k8s-io","ingressservicebackend-v1-networking-k8s-io","ingressrule-v1-networking-k8s-io","ingressclassparametersreference-v1-networking-k8s-io","ingressbackend-v1-networking-k8s-io","iscsivolumesource-v1-core","iscsipersistentvolumesource-v1-core","ipblock-v1-networking-k8s-io","idrange-v1beta1-policy","hostportrange-v1beta1-policy","hostpathvolumesource-v1-core","hostalias-v1-core","horizontalpodautoscalercondition-v2beta2-autoscaling","horizontalpodautoscalerbehavior-v2beta2-autoscaling","handler-v1-core","httpingressrulevalue-v1-networking-k8s-io","httpingresspath-v1-networking-k8s-io","httpheader-v1-core","httpgetaction-v1-core","hpascalingrules-v2beta2-autoscaling","hpascalingpolicy-v2beta2-autoscaling","groupversionfordiscovery-v1-meta","groupsubject-v1beta1-flowcontrol-apiserver-k8s-io","glusterfsvolumesource-v1-core","glusterfspersistentvolumesource-v1-core","gitrepovolumesource-v1-core","gcepersistentdiskvolumesource-v1-core","forzone-v1-discovery-k8s-io","flowschemacondition-v1beta1-flowcontrol-apiserver-k8s-io","flowdistinguishermethod-v1beta1-flowcontrol-apiserver-k8s-io","flockervolumesource-v1-core","flexvolumesource-v1-core","flexpersistentvolumesource-v1-core","fieldsv1-v1-meta","fsgroupstrategyoptions-v1beta1-policy","fcvolumesource-v1-core","externalmetricstatus-v2beta2-autoscaling","externalmetricsource-v2beta2-autoscaling","externaldocumentation-v1-apiextensions-k8s-io","execaction-v1-core","eviction-v1beta1-policy","eventsource-v1-core","eventseries-v1-core","ephemeralvolumesource-v1-core","ephemeralcontainers-v1-core","ephemeralcontainer-v1-core","envvarsource-v1-core","envvar-v1-core","envfromsource-v1-core","endpointsubset-v1-core","endpointport-v1-core","endpointhints-v1-discovery-k8s-io","endpointconditions-v1-discovery-k8s-io","endpointaddress-v1-core","endpoint-v1-discovery-k8s-io","emptydirvolumesource-v1-core","downwardapivolumesource-v1-core","downwardapivolumefile-v1-core","downwardapiprojection-v1-core","deploymentcondition-v1-apps","deleteoptions-v1-meta","daemonsetupdatestrategy-v1-apps","daemonsetcondition-v1-apps","daemonendpoint-v1-core","customresourcevalidation-v1-apiextensions-k8s-io","customresourcesubresources-v1-apiextensions-k8s-io","customresourcesubresourcestatus-v1-apiextensions-k8s-io","customresourcesubresourcescale-v1-apiextensions-k8s-io","customresourcedefinitionversion-v1-apiextensions-k8s-io","customresourcedefinitionnames-v1-apiextensions-k8s-io","customresourcedefinitioncondition-v1-apiextensions-k8s-io","customresourceconversion-v1-apiextensions-k8s-io","customresourcecolumndefinition-v1-apiextensions-k8s-io","crossversionobjectreference-v1-autoscaling","containerstatewaiting-v1-core","containerstateterminated-v1-core","containerstaterunning-v1-core","containerstate-v1-core","containerresourcemetricstatus-v2beta2-autoscaling","containerresourcemetricsource-v2beta2-autoscaling","containerport-v1-core","containerimage-v1-core","configmapvolumesource-v1-core","configmapprojection-v1-core","configmapnodeconfigsource-v1-core","configmapkeyselector-v1-core","configmapenvsource-v1-core","condition-v1-meta","componentcondition-v1-core","clientipconfig-v1-core","cindervolumesource-v1-core","cinderpersistentvolumesource-v1-core","certificatesigningrequestcondition-v1-certificates-k8s-io","cephfsvolumesource-v1-core","cephfspersistentvolumesource-v1-core","capabilities-v1-core","csivolumesource-v1-core","csipersistentvolumesource-v1-core","csinodedriver-v1-storage-k8s-io","boundobjectreference-v1-authentication-k8s-io","azurefilevolumesource-v1-core","azurefilepersistentvolumesource-v1-core","azurediskvolumesource-v1-core","attachedvolume-v1-core","allowedhostpath-v1beta1-policy","allowedflexvolume-v1beta1-policy","allowedcsidriver-v1beta1-policy","aggregationrule-v1-rbac-authorization-k8s-io","affinity-v1-core","awselasticblockstorevolumesource-v1-core","apiversions-v1-meta","apiservicecondition-v1-apiregistration-k8s-io","apiresource-v1-meta","apigroup-v1-meta","-strong-definitions-strong-","watch-list-all-namespaces-networkpolicy-v1-networking-k8s-io","watch-list-networkpolicy-v1-networking-k8s-io","watch-networkpolicy-v1-networking-k8s-io","list-all-namespaces-networkpolicy-v1-networking-k8s-io","list-networkpolicy-v1-networking-k8s-io","read-networkpolicy-v1-networking-k8s-io","-strong-read-operations-networkpolicy-v1-networking-k8s-io-strong-","delete-collection-networkpolicy-v1-networking-k8s-io","delete-networkpolicy-v1-networking-k8s-io","replace-networkpolicy-v1-networking-k8s-io","patch-networkpolicy-v1-networking-k8s-io","create-networkpolicy-v1-networking-k8s-io","-strong-write-operations-networkpolicy-v1-networking-k8s-io-strong-","networkpolicy-v1-networking-k8s-io","create-tokenreview-v1-authentication-k8s-io","-strong-write-operations-tokenreview-v1-authentication-k8s-io-strong-","tokenreview-v1-authentication-k8s-io","tokenrequest-v1-authentication-k8s-io","create-subjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-subjectaccessreview-v1-authorization-k8s-io-strong-","subjectaccessreview-v1-authorization-k8s-io","replace-status-storageversion-v1alpha1-internal-apiserver-k8s-io","read-status-storageversion-v1alpha1-internal-apiserver-k8s-io","patch-status-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-status-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","watch-list-storageversion-v1alpha1-internal-apiserver-k8s-io","watch-storageversion-v1alpha1-internal-apiserver-k8s-io","list-storageversion-v1alpha1-internal-apiserver-k8s-io","read-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-read-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","delete-collection-storageversion-v1alpha1-internal-apiserver-k8s-io","delete-storageversion-v1alpha1-internal-apiserver-k8s-io","replace-storageversion-v1alpha1-internal-apiserver-k8s-io","patch-storageversion-v1alpha1-internal-apiserver-k8s-io","create-storageversion-v1alpha1-internal-apiserver-k8s-io","-strong-write-operations-storageversion-v1alpha1-internal-apiserver-k8s-io-strong-","storageversion-v1alpha1-internal-apiserver-k8s-io","watch-list-all-namespaces-serviceaccount-v1-core","watch-list-serviceaccount-v1-core","watch-serviceaccount-v1-core","list-all-namespaces-serviceaccount-v1-core","list-serviceaccount-v1-core","read-serviceaccount-v1-core","-strong-read-operations-serviceaccount-v1-core-strong-","delete-collection-serviceaccount-v1-core","delete-serviceaccount-v1-core","replace-serviceaccount-v1-core","patch-serviceaccount-v1-core","create-serviceaccount-v1-core","-strong-write-operations-serviceaccount-v1-core-strong-","serviceaccount-v1-core","create-selfsubjectrulesreview-v1-authorization-k8s-io","-strong-write-operations-selfsubjectrulesreview-v1-authorization-k8s-io-strong-","selfsubjectrulesreview-v1-authorization-k8s-io","create-selfsubjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-selfsubjectaccessreview-v1-authorization-k8s-io-strong-","selfsubjectaccessreview-v1-authorization-k8s-io","watch-list-runtimeclass-v1-node-k8s-io","watch-runtimeclass-v1-node-k8s-io","list-runtimeclass-v1-node-k8s-io","read-runtimeclass-v1-node-k8s-io","-strong-read-operations-runtimeclass-v1-node-k8s-io-strong-","delete-collection-runtimeclass-v1-node-k8s-io","delete-runtimeclass-v1-node-k8s-io","replace-runtimeclass-v1-node-k8s-io","patch-runtimeclass-v1-node-k8s-io","create-runtimeclass-v1-node-k8s-io","-strong-write-operations-runtimeclass-v1-node-k8s-io-strong-","runtimeclass-v1-node-k8s-io","watch-list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","watch-list-rolebinding-v1-rbac-authorization-k8s-io","watch-rolebinding-v1-rbac-authorization-k8s-io","list-all-namespaces-rolebinding-v1-rbac-authorization-k8s-io","list-rolebinding-v1-rbac-authorization-k8s-io","read-rolebinding-v1-rbac-authorization-k8s-io","-strong-read-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","delete-collection-rolebinding-v1-rbac-authorization-k8s-io","delete-rolebinding-v1-rbac-authorization-k8s-io","replace-rolebinding-v1-rbac-authorization-k8s-io","patch-rolebinding-v1-rbac-authorization-k8s-io","create-rolebinding-v1-rbac-authorization-k8s-io","-strong-write-operations-rolebinding-v1-rbac-authorization-k8s-io-strong-","rolebinding-v1-rbac-authorization-k8s-io","watch-list-all-namespaces-role-v1-rbac-authorization-k8s-io","watch-list-role-v1-rbac-authorization-k8s-io","watch-role-v1-rbac-authorization-k8s-io","list-all-namespaces-role-v1-rbac-authorization-k8s-io","list-role-v1-rbac-authorization-k8s-io","read-role-v1-rbac-authorization-k8s-io","-strong-read-operations-role-v1-rbac-authorization-k8s-io-strong-","delete-collection-role-v1-rbac-authorization-k8s-io","delete-role-v1-rbac-authorization-k8s-io","replace-role-v1-rbac-authorization-k8s-io","patch-role-v1-rbac-authorization-k8s-io","create-role-v1-rbac-authorization-k8s-io","-strong-write-operations-role-v1-rbac-authorization-k8s-io-strong-","role-v1-rbac-authorization-k8s-io","replace-status-resourcequota-v1-core","read-status-resourcequota-v1-core","patch-status-resourcequota-v1-core","-strong-status-operations-resourcequota-v1-core-strong-","watch-list-all-namespaces-resourcequota-v1-core","watch-list-resourcequota-v1-core","watch-resourcequota-v1-core","list-all-namespaces-resourcequota-v1-core","list-resourcequota-v1-core","read-resourcequota-v1-core","-strong-read-operations-resourcequota-v1-core-strong-","delete-collection-resourcequota-v1-core","delete-resourcequota-v1-core","replace-resourcequota-v1-core","patch-resourcequota-v1-core","create-resourcequota-v1-core","-strong-write-operations-resourcequota-v1-core-strong-","resourcequota-v1-core","replace-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","read-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","patch-status-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-status-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","watch-list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","watch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","list-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","read-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-read-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","delete-collection-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","delete-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","replace-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","patch-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","create-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","-strong-write-operations-prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io-strong-","prioritylevelconfiguration-v1beta1-flowcontrol-apiserver-k8s-io","replace-status-persistentvolume-v1-core","read-status-persistentvolume-v1-core","patch-status-persistentvolume-v1-core","-strong-status-operations-persistentvolume-v1-core-strong-","watch-list-persistentvolume-v1-core","watch-persistentvolume-v1-core","list-persistentvolume-v1-core","read-persistentvolume-v1-core","-strong-read-operations-persistentvolume-v1-core-strong-","delete-collection-persistentvolume-v1-core","delete-persistentvolume-v1-core","replace-persistentvolume-v1-core","patch-persistentvolume-v1-core","create-persistentvolume-v1-core","-strong-write-operations-persistentvolume-v1-core-strong-","persistentvolume-v1-core","replace-connect-proxy-path-node-v1-core","replace-connect-proxy-node-v1-core","head-connect-proxy-path-node-v1-core","head-connect-proxy-node-v1-core","get-connect-proxy-path-node-v1-core","get-connect-proxy-node-v1-core","delete-connect-proxy-path-node-v1-core","delete-connect-proxy-node-v1-core","create-connect-proxy-path-node-v1-core","create-connect-proxy-node-v1-core","-strong-proxy-operations-node-v1-core-strong-","replace-status-node-v1-core","read-status-node-v1-core","patch-status-node-v1-core","-strong-status-operations-node-v1-core-strong-","watch-list-node-v1-core","watch-node-v1-core","list-node-v1-core","read-node-v1-core","-strong-read-operations-node-v1-core-strong-","delete-collection-node-v1-core","delete-node-v1-core","replace-node-v1-core","patch-node-v1-core","create-node-v1-core","-strong-write-operations-node-v1-core-strong-","node-v1-core","replace-status-namespace-v1-core","read-status-namespace-v1-core","patch-status-namespace-v1-core","-strong-status-operations-namespace-v1-core-strong-","watch-list-namespace-v1-core","watch-namespace-v1-core","list-namespace-v1-core","read-namespace-v1-core","-strong-read-operations-namespace-v1-core-strong-","delete-namespace-v1-core","replace-namespace-v1-core","patch-namespace-v1-core","create-namespace-v1-core","-strong-write-operations-namespace-v1-core-strong-","namespace-v1-core","create-localsubjectaccessreview-v1-authorization-k8s-io","-strong-write-operations-localsubjectaccessreview-v1-authorization-k8s-io-strong-","localsubjectaccessreview-v1-authorization-k8s-io","watch-list-all-namespaces-lease-v1-coordination-k8s-io","watch-list-lease-v1-coordination-k8s-io","watch-lease-v1-coordination-k8s-io","list-all-namespaces-lease-v1-coordination-k8s-io","list-lease-v1-coordination-k8s-io","read-lease-v1-coordination-k8s-io","-strong-read-operations-lease-v1-coordination-k8s-io-strong-","delete-collection-lease-v1-coordination-k8s-io","delete-lease-v1-coordination-k8s-io","replace-lease-v1-coordination-k8s-io","patch-lease-v1-coordination-k8s-io","create-lease-v1-coordination-k8s-io","-strong-write-operations-lease-v1-coordination-k8s-io-strong-","lease-v1-coordination-k8s-io","replace-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","read-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","patch-status-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-status-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","watch-list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","watch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","list-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","read-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-read-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","delete-collection-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","delete-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","replace-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","patch-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","create-flowschema-v1beta1-flowcontrol-apiserver-k8s-io","-strong-write-operations-flowschema-v1beta1-flowcontrol-apiserver-k8s-io-strong-","flowschema-v1beta1-flowcontrol-apiserver-k8s-io","list-componentstatus-v1-core","read-componentstatus-v1-core","-strong-read-operations-componentstatus-v1-core-strong-","componentstatus-v1-core","watch-list-clusterrolebinding-v1-rbac-authorization-k8s-io","watch-clusterrolebinding-v1-rbac-authorization-k8s-io","list-clusterrolebinding-v1-rbac-authorization-k8s-io","read-clusterrolebinding-v1-rbac-authorization-k8s-io","-strong-read-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrolebinding-v1-rbac-authorization-k8s-io","delete-clusterrolebinding-v1-rbac-authorization-k8s-io","replace-clusterrolebinding-v1-rbac-authorization-k8s-io","patch-clusterrolebinding-v1-rbac-authorization-k8s-io","create-clusterrolebinding-v1-rbac-authorization-k8s-io","-strong-write-operations-clusterrolebinding-v1-rbac-authorization-k8s-io-strong-","clusterrolebinding-v1-rbac-authorization-k8s-io","watch-list-clusterrole-v1-rbac-authorization-k8s-io","watch-clusterrole-v1-rbac-authorization-k8s-io","list-clusterrole-v1-rbac-authorization-k8s-io","read-clusterrole-v1-rbac-authorization-k8s-io","-strong-read-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","delete-collection-clusterrole-v1-rbac-authorization-k8s-io","delete-clusterrole-v1-rbac-authorization-k8s-io","replace-clusterrole-v1-rbac-authorization-k8s-io","patch-clusterrole-v1-rbac-authorization-k8s-io","create-clusterrole-v1-rbac-authorization-k8s-io","-strong-write-operations-clusterrole-v1-rbac-authorization-k8s-io-strong-","clusterrole-v1-rbac-authorization-k8s-io","replace-status-certificatesigningrequest-v1-certificates-k8s-io","read-status-certificatesigningrequest-v1-certificates-k8s-io","patch-status-certificatesigningrequest-v1-certificates-k8s-io","-strong-status-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","watch-list-certificatesigningrequest-v1-certificates-k8s-io","watch-certificatesigningrequest-v1-certificates-k8s-io","list-certificatesigningrequest-v1-certificates-k8s-io","read-certificatesigningrequest-v1-certificates-k8s-io","-strong-read-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","delete-collection-certificatesigningrequest-v1-certificates-k8s-io","delete-certificatesigningrequest-v1-certificates-k8s-io","replace-certificatesigningrequest-v1-certificates-k8s-io","patch-certificatesigningrequest-v1-certificates-k8s-io","create-certificatesigningrequest-v1-certificates-k8s-io","-strong-write-operations-certificatesigningrequest-v1-certificates-k8s-io-strong-","certificatesigningrequest-v1-certificates-k8s-io","create-binding-v1-core","-strong-write-operations-binding-v1-core-strong-","binding-v1-core","replace-status-apiservice-v1-apiregistration-k8s-io","read-status-apiservice-v1-apiregistration-k8s-io","patch-status-apiservice-v1-apiregistration-k8s-io","-strong-status-operations-apiservice-v1-apiregistration-k8s-io-strong-","watch-list-apiservice-v1-apiregistration-k8s-io","watch-apiservice-v1-apiregistration-k8s-io","list-apiservice-v1-apiregistration-k8s-io","read-apiservice-v1-apiregistration-k8s-io","-strong-read-operations-apiservice-v1-apiregistration-k8s-io-strong-","delete-collection-apiservice-v1-apiregistration-k8s-io","delete-apiservice-v1-apiregistration-k8s-io","replace-apiservice-v1-apiregistration-k8s-io","patch-apiservice-v1-apiregistration-k8s-io","create-apiservice-v1-apiregistration-k8s-io","-strong-write-operations-apiservice-v1-apiregistration-k8s-io-strong-","apiservice-v1-apiregistration-k8s-io","-strong-cluster-apis-strong-","watch-list-podsecuritypolicy-v1beta1-policy","watch-podsecuritypolicy-v1beta1-policy","list-podsecuritypolicy-v1beta1-policy","read-podsecuritypolicy-v1beta1-policy","-strong-read-operations-podsecuritypolicy-v1beta1-policy-strong-","delete-collection-podsecuritypolicy-v1beta1-policy","delete-podsecuritypolicy-v1beta1-policy","replace-podsecuritypolicy-v1beta1-policy","patch-podsecuritypolicy-v1beta1-policy","create-podsecuritypolicy-v1beta1-policy","-strong-write-operations-podsecuritypolicy-v1beta1-policy-strong-","podsecuritypolicy-v1beta1-policy","watch-list-priorityclass-v1-scheduling-k8s-io","watch-priorityclass-v1-scheduling-k8s-io","list-priorityclass-v1-scheduling-k8s-io","read-priorityclass-v1-scheduling-k8s-io","-strong-read-operations-priorityclass-v1-scheduling-k8s-io-strong-","delete-collection-priorityclass-v1-scheduling-k8s-io","delete-priorityclass-v1-scheduling-k8s-io","replace-priorityclass-v1-scheduling-k8s-io","patch-priorityclass-v1-scheduling-k8s-io","create-priorityclass-v1-scheduling-k8s-io","-strong-write-operations-priorityclass-v1-scheduling-k8s-io-strong-","priorityclass-v1-scheduling-k8s-io","replace-status-poddisruptionbudget-v1-policy","read-status-poddisruptionbudget-v1-policy","patch-status-poddisruptionbudget-v1-policy","-strong-status-operations-poddisruptionbudget-v1-policy-strong-","watch-list-all-namespaces-poddisruptionbudget-v1-policy","watch-list-poddisruptionbudget-v1-policy","watch-poddisruptionbudget-v1-policy","list-all-namespaces-poddisruptionbudget-v1-policy","list-poddisruptionbudget-v1-policy","read-poddisruptionbudget-v1-policy","-strong-read-operations-poddisruptionbudget-v1-policy-strong-","delete-collection-poddisruptionbudget-v1-policy","delete-poddisruptionbudget-v1-policy","replace-poddisruptionbudget-v1-policy","patch-poddisruptionbudget-v1-policy","create-poddisruptionbudget-v1-policy","-strong-write-operations-poddisruptionbudget-v1-policy-strong-","poddisruptionbudget-v1-policy","watch-list-all-namespaces-podtemplate-v1-core","watch-list-podtemplate-v1-core","watch-podtemplate-v1-core","list-all-namespaces-podtemplate-v1-core","list-podtemplate-v1-core","read-podtemplate-v1-core","-strong-read-operations-podtemplate-v1-core-strong-","delete-collection-podtemplate-v1-core","delete-podtemplate-v1-core","replace-podtemplate-v1-core","patch-podtemplate-v1-core","create-podtemplate-v1-core","-strong-write-operations-podtemplate-v1-core-strong-","podtemplate-v1-core","watch-list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","list-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","read-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-read-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","delete-collection-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","delete-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","patch-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","create-validatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-write-operations-validatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","validatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","watch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","list-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","read-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-read-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","delete-collection-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","delete-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","patch-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","create-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","-strong-write-operations-mutatingwebhookconfiguration-v1-admissionregistration-k8s-io-strong-","mutatingwebhookconfiguration-v1-admissionregistration-k8s-io","replace-status-horizontalpodautoscaler-v1-autoscaling","read-status-horizontalpodautoscaler-v1-autoscaling","patch-status-horizontalpodautoscaler-v1-autoscaling","-strong-status-operations-horizontalpodautoscaler-v1-autoscaling-strong-","watch-list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","watch-list-horizontalpodautoscaler-v1-autoscaling","watch-horizontalpodautoscaler-v1-autoscaling","list-all-namespaces-horizontalpodautoscaler-v1-autoscaling","list-horizontalpodautoscaler-v1-autoscaling","read-horizontalpodautoscaler-v1-autoscaling","-strong-read-operations-horizontalpodautoscaler-v1-autoscaling-strong-","delete-collection-horizontalpodautoscaler-v1-autoscaling","delete-horizontalpodautoscaler-v1-autoscaling","replace-horizontalpodautoscaler-v1-autoscaling","patch-horizontalpodautoscaler-v1-autoscaling","create-horizontalpodautoscaler-v1-autoscaling","-strong-write-operations-horizontalpodautoscaler-v1-autoscaling-strong-","horizontalpodautoscaler-v1-autoscaling","watch-list-all-namespaces-limitrange-v1-core","watch-list-limitrange-v1-core","watch-limitrange-v1-core","list-all-namespaces-limitrange-v1-core","list-limitrange-v1-core","read-limitrange-v1-core","-strong-read-operations-limitrange-v1-core-strong-","delete-collection-limitrange-v1-core","delete-limitrange-v1-core","replace-limitrange-v1-core","patch-limitrange-v1-core","create-limitrange-v1-core","-strong-write-operations-limitrange-v1-core-strong-","limitrange-v1-core","watch-list-all-namespaces-event-v1-core","watch-list-event-v1-core","watch-event-v1-core","list-all-namespaces-event-v1-core","list-event-v1-core","read-event-v1-core","-strong-read-operations-event-v1-core-strong-","delete-collection-event-v1-core","delete-event-v1-core","replace-event-v1-core","patch-event-v1-core","create-event-v1-core","-strong-write-operations-event-v1-core-strong-","event-v1-core","replace-status-customresourcedefinition-v1-apiextensions-k8s-io","read-status-customresourcedefinition-v1-apiextensions-k8s-io","patch-status-customresourcedefinition-v1-apiextensions-k8s-io","-strong-status-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","watch-list-customresourcedefinition-v1-apiextensions-k8s-io","watch-customresourcedefinition-v1-apiextensions-k8s-io","list-customresourcedefinition-v1-apiextensions-k8s-io","read-customresourcedefinition-v1-apiextensions-k8s-io","-strong-read-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","delete-collection-customresourcedefinition-v1-apiextensions-k8s-io","delete-customresourcedefinition-v1-apiextensions-k8s-io","replace-customresourcedefinition-v1-apiextensions-k8s-io","patch-customresourcedefinition-v1-apiextensions-k8s-io","create-customresourcedefinition-v1-apiextensions-k8s-io","-strong-write-operations-customresourcedefinition-v1-apiextensions-k8s-io-strong-","customresourcedefinition-v1-apiextensions-k8s-io","watch-list-all-namespaces-controllerrevision-v1-apps","watch-list-controllerrevision-v1-apps","watch-controllerrevision-v1-apps","list-all-namespaces-controllerrevision-v1-apps","list-controllerrevision-v1-apps","read-controllerrevision-v1-apps","-strong-read-operations-controllerrevision-v1-apps-strong-","delete-collection-controllerrevision-v1-apps","delete-controllerrevision-v1-apps","replace-controllerrevision-v1-apps","patch-controllerrevision-v1-apps","create-controllerrevision-v1-apps","-strong-write-operations-controllerrevision-v1-apps-strong-","controllerrevision-v1-apps","-strong-metadata-apis-strong-","replace-status-volumeattachment-v1-storage-k8s-io","read-status-volumeattachment-v1-storage-k8s-io","patch-status-volumeattachment-v1-storage-k8s-io","-strong-status-operations-volumeattachment-v1-storage-k8s-io-strong-","watch-list-volumeattachment-v1-storage-k8s-io","watch-volumeattachment-v1-storage-k8s-io","list-volumeattachment-v1-storage-k8s-io","read-volumeattachment-v1-storage-k8s-io","-strong-read-operations-volumeattachment-v1-storage-k8s-io-strong-","delete-collection-volumeattachment-v1-storage-k8s-io","delete-volumeattachment-v1-storage-k8s-io","replace-volumeattachment-v1-storage-k8s-io","patch-volumeattachment-v1-storage-k8s-io","create-volumeattachment-v1-storage-k8s-io","-strong-write-operations-volumeattachment-v1-storage-k8s-io-strong-","volumeattachment-v1-storage-k8s-io","volume-v1-core","watch-list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io","watch-list-csistoragecapacity-v1beta1-storage-k8s-io","watch-csistoragecapacity-v1beta1-storage-k8s-io","list-all-namespaces-csistoragecapacity-v1beta1-storage-k8s-io","list-csistoragecapacity-v1beta1-storage-k8s-io","read-csistoragecapacity-v1beta1-storage-k8s-io","-strong-read-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-","delete-collection-csistoragecapacity-v1beta1-storage-k8s-io","delete-csistoragecapacity-v1beta1-storage-k8s-io","replace-csistoragecapacity-v1beta1-storage-k8s-io","patch-csistoragecapacity-v1beta1-storage-k8s-io","create-csistoragecapacity-v1beta1-storage-k8s-io","-strong-write-operations-csistoragecapacity-v1beta1-storage-k8s-io-strong-","csistoragecapacity-v1beta1-storage-k8s-io","watch-list-storageclass-v1-storage-k8s-io","watch-storageclass-v1-storage-k8s-io","list-storageclass-v1-storage-k8s-io","read-storageclass-v1-storage-k8s-io","-strong-read-operations-storageclass-v1-storage-k8s-io-strong-","delete-collection-storageclass-v1-storage-k8s-io","delete-storageclass-v1-storage-k8s-io","replace-storageclass-v1-storage-k8s-io","patch-storageclass-v1-storage-k8s-io","create-storageclass-v1-storage-k8s-io","-strong-write-operations-storageclass-v1-storage-k8s-io-strong-","storageclass-v1-storage-k8s-io","replace-status-persistentvolumeclaim-v1-core","read-status-persistentvolumeclaim-v1-core","patch-status-persistentvolumeclaim-v1-core","-strong-status-operations-persistentvolumeclaim-v1-core-strong-","watch-list-all-namespaces-persistentvolumeclaim-v1-core","watch-list-persistentvolumeclaim-v1-core","watch-persistentvolumeclaim-v1-core","list-all-namespaces-persistentvolumeclaim-v1-core","list-persistentvolumeclaim-v1-core","read-persistentvolumeclaim-v1-core","-strong-read-operations-persistentvolumeclaim-v1-core-strong-","delete-collection-persistentvolumeclaim-v1-core","delete-persistentvolumeclaim-v1-core","replace-persistentvolumeclaim-v1-core","patch-persistentvolumeclaim-v1-core","create-persistentvolumeclaim-v1-core","-strong-write-operations-persistentvolumeclaim-v1-core-strong-","persistentvolumeclaim-v1-core","watch-list-all-namespaces-secret-v1-core","watch-list-secret-v1-core","watch-secret-v1-core","list-all-namespaces-secret-v1-core","list-secret-v1-core","read-secret-v1-core","-strong-read-operations-secret-v1-core-strong-","delete-collection-secret-v1-core","delete-secret-v1-core","replace-secret-v1-core","patch-secret-v1-core","create-secret-v1-core","-strong-write-operations-secret-v1-core-strong-","secret-v1-core","watch-list-csinode-v1-storage-k8s-io","watch-csinode-v1-storage-k8s-io","list-csinode-v1-storage-k8s-io","read-csinode-v1-storage-k8s-io","-strong-read-operations-csinode-v1-storage-k8s-io-strong-","delete-collection-csinode-v1-storage-k8s-io","delete-csinode-v1-storage-k8s-io","replace-csinode-v1-storage-k8s-io","patch-csinode-v1-storage-k8s-io","create-csinode-v1-storage-k8s-io","-strong-write-operations-csinode-v1-storage-k8s-io-strong-","csinode-v1-storage-k8s-io","watch-list-csidriver-v1-storage-k8s-io","watch-csidriver-v1-storage-k8s-io","list-csidriver-v1-storage-k8s-io","read-csidriver-v1-storage-k8s-io","-strong-read-operations-csidriver-v1-storage-k8s-io-strong-","delete-collection-csidriver-v1-storage-k8s-io","delete-csidriver-v1-storage-k8s-io","replace-csidriver-v1-storage-k8s-io","patch-csidriver-v1-storage-k8s-io","create-csidriver-v1-storage-k8s-io","-strong-write-operations-csidriver-v1-storage-k8s-io-strong-","csidriver-v1-storage-k8s-io","watch-list-all-namespaces-configmap-v1-core","watch-list-configmap-v1-core","watch-configmap-v1-core","list-all-namespaces-configmap-v1-core","list-configmap-v1-core","read-configmap-v1-core","-strong-read-operations-configmap-v1-core-strong-","delete-collection-configmap-v1-core","delete-configmap-v1-core","replace-configmap-v1-core","patch-configmap-v1-core","create-configmap-v1-core","-strong-write-operations-configmap-v1-core-strong-","configmap-v1-core","-strong-config-and-storage-apis-strong-","replace-connect-proxy-path-service-v1-core","replace-connect-proxy-service-v1-core","head-connect-proxy-path-service-v1-core","head-connect-proxy-service-v1-core","get-connect-proxy-path-service-v1-core","get-connect-proxy-service-v1-core","delete-connect-proxy-path-service-v1-core","delete-connect-proxy-service-v1-core","create-connect-proxy-path-service-v1-core","create-connect-proxy-service-v1-core","-strong-proxy-operations-service-v1-core-strong-","replace-status-service-v1-core","read-status-service-v1-core","patch-status-service-v1-core","-strong-status-operations-service-v1-core-strong-","watch-list-all-namespaces-service-v1-core","watch-list-service-v1-core","watch-service-v1-core","list-all-namespaces-service-v1-core","list-service-v1-core","read-service-v1-core","-strong-read-operations-service-v1-core-strong-","delete-service-v1-core","replace-service-v1-core","patch-service-v1-core","create-service-v1-core","-strong-write-operations-service-v1-core-strong-","service-v1-core","watch-list-ingressclass-v1-networking-k8s-io","watch-ingressclass-v1-networking-k8s-io","list-ingressclass-v1-networking-k8s-io","read-ingressclass-v1-networking-k8s-io","-strong-read-operations-ingressclass-v1-networking-k8s-io-strong-","delete-collection-ingressclass-v1-networking-k8s-io","delete-ingressclass-v1-networking-k8s-io","replace-ingressclass-v1-networking-k8s-io","patch-ingressclass-v1-networking-k8s-io","create-ingressclass-v1-networking-k8s-io","-strong-write-operations-ingressclass-v1-networking-k8s-io-strong-","ingressclass-v1-networking-k8s-io","replace-status-ingress-v1-networking-k8s-io","read-status-ingress-v1-networking-k8s-io","patch-status-ingress-v1-networking-k8s-io","-strong-status-operations-ingress-v1-networking-k8s-io-strong-","watch-list-all-namespaces-ingress-v1-networking-k8s-io","watch-list-ingress-v1-networking-k8s-io","watch-ingress-v1-networking-k8s-io","list-all-namespaces-ingress-v1-networking-k8s-io","list-ingress-v1-networking-k8s-io","read-ingress-v1-networking-k8s-io","-strong-read-operations-ingress-v1-networking-k8s-io-strong-","delete-collection-ingress-v1-networking-k8s-io","delete-ingress-v1-networking-k8s-io","replace-ingress-v1-networking-k8s-io","patch-ingress-v1-networking-k8s-io","create-ingress-v1-networking-k8s-io","-strong-write-operations-ingress-v1-networking-k8s-io-strong-","ingress-v1-networking-k8s-io","watch-list-all-namespaces-endpointslice-v1-discovery-k8s-io","watch-list-endpointslice-v1-discovery-k8s-io","watch-endpointslice-v1-discovery-k8s-io","list-all-namespaces-endpointslice-v1-discovery-k8s-io","list-endpointslice-v1-discovery-k8s-io","read-endpointslice-v1-discovery-k8s-io","-strong-read-operations-endpointslice-v1-discovery-k8s-io-strong-","delete-collection-endpointslice-v1-discovery-k8s-io","delete-endpointslice-v1-discovery-k8s-io","replace-endpointslice-v1-discovery-k8s-io","patch-endpointslice-v1-discovery-k8s-io","create-endpointslice-v1-discovery-k8s-io","-strong-write-operations-endpointslice-v1-discovery-k8s-io-strong-","endpointslice-v1-discovery-k8s-io","watch-list-all-namespaces-endpoints-v1-core","watch-list-endpoints-v1-core","watch-endpoints-v1-core","list-all-namespaces-endpoints-v1-core","list-endpoints-v1-core","read-endpoints-v1-core","-strong-read-operations-endpoints-v1-core-strong-","delete-collection-endpoints-v1-core","delete-endpoints-v1-core","replace-endpoints-v1-core","patch-endpoints-v1-core","create-endpoints-v1-core","-strong-write-operations-endpoints-v1-core-strong-","endpoints-v1-core","-strong-service-apis-strong-","patch-scale-statefulset-v1-apps","replace-scale-statefulset-v1-apps","read-scale-statefulset-v1-apps","-strong-misc-operations-statefulset-v1-apps-strong-","replace-status-statefulset-v1-apps","read-status-statefulset-v1-apps","patch-status-statefulset-v1-apps","-strong-status-operations-statefulset-v1-apps-strong-","watch-list-all-namespaces-statefulset-v1-apps","watch-list-statefulset-v1-apps","watch-statefulset-v1-apps","list-all-namespaces-statefulset-v1-apps","list-statefulset-v1-apps","read-statefulset-v1-apps","-strong-read-operations-statefulset-v1-apps-strong-","delete-collection-statefulset-v1-apps","delete-statefulset-v1-apps","replace-statefulset-v1-apps","patch-statefulset-v1-apps","create-statefulset-v1-apps","-strong-write-operations-statefulset-v1-apps-strong-","statefulset-v1-apps","patch-scale-replicationcontroller-v1-core","replace-scale-replicationcontroller-v1-core","read-scale-replicationcontroller-v1-core","-strong-misc-operations-replicationcontroller-v1-core-strong-","replace-status-replicationcontroller-v1-core","read-status-replicationcontroller-v1-core","patch-status-replicationcontroller-v1-core","-strong-status-operations-replicationcontroller-v1-core-strong-","watch-list-all-namespaces-replicationcontroller-v1-core","watch-list-replicationcontroller-v1-core","watch-replicationcontroller-v1-core","list-all-namespaces-replicationcontroller-v1-core","list-replicationcontroller-v1-core","read-replicationcontroller-v1-core","-strong-read-operations-replicationcontroller-v1-core-strong-","delete-collection-replicationcontroller-v1-core","delete-replicationcontroller-v1-core","replace-replicationcontroller-v1-core","patch-replicationcontroller-v1-core","create-replicationcontroller-v1-core","-strong-write-operations-replicationcontroller-v1-core-strong-","replicationcontroller-v1-core","patch-scale-replicaset-v1-apps","replace-scale-replicaset-v1-apps","read-scale-replicaset-v1-apps","-strong-misc-operations-replicaset-v1-apps-strong-","replace-status-replicaset-v1-apps","read-status-replicaset-v1-apps","patch-status-replicaset-v1-apps","-strong-status-operations-replicaset-v1-apps-strong-","watch-list-all-namespaces-replicaset-v1-apps","watch-list-replicaset-v1-apps","watch-replicaset-v1-apps","list-all-namespaces-replicaset-v1-apps","list-replicaset-v1-apps","read-replicaset-v1-apps","-strong-read-operations-replicaset-v1-apps-strong-","delete-collection-replicaset-v1-apps","delete-replicaset-v1-apps","replace-replicaset-v1-apps","patch-replicaset-v1-apps","create-replicaset-v1-apps","-strong-write-operations-replicaset-v1-apps-strong-","replicaset-v1-apps","read-log-pod-v1-core","-strong-misc-operations-pod-v1-core-strong-","replace-connect-proxy-path-pod-v1-core","replace-connect-proxy-pod-v1-core","head-connect-proxy-path-pod-v1-core","head-connect-proxy-pod-v1-core","get-connect-proxy-path-pod-v1-core","get-connect-proxy-pod-v1-core","get-connect-portforward-pod-v1-core","delete-connect-proxy-path-pod-v1-core","delete-connect-proxy-pod-v1-core","create-connect-proxy-path-pod-v1-core","create-connect-proxy-pod-v1-core","create-connect-portforward-pod-v1-core","-strong-proxy-operations-pod-v1-core-strong-","replace-ephemeralcontainers-pod-v1-core","read-ephemeralcontainers-pod-v1-core","patch-ephemeralcontainers-pod-v1-core","-strong-ephemeralcontainers-operations-pod-v1-core-strong-","replace-status-pod-v1-core","read-status-pod-v1-core","patch-status-pod-v1-core","-strong-status-operations-pod-v1-core-strong-","watch-list-all-namespaces-pod-v1-core","watch-list-pod-v1-core","watch-pod-v1-core","list-all-namespaces-pod-v1-core","list-pod-v1-core","read-pod-v1-core","-strong-read-operations-pod-v1-core-strong-","delete-collection-pod-v1-core","delete-pod-v1-core","replace-pod-v1-core","patch-pod-v1-core","create-eviction-pod-v1-core","create-pod-v1-core","-strong-write-operations-pod-v1-core-strong-","pod-v1-core","replace-status-job-v1-batch","read-status-job-v1-batch","patch-status-job-v1-batch","-strong-status-operations-job-v1-batch-strong-","watch-list-all-namespaces-job-v1-batch","watch-list-job-v1-batch","watch-job-v1-batch","list-all-namespaces-job-v1-batch","list-job-v1-batch","read-job-v1-batch","-strong-read-operations-job-v1-batch-strong-","delete-collection-job-v1-batch","delete-job-v1-batch","replace-job-v1-batch","patch-job-v1-batch","create-job-v1-batch","-strong-write-operations-job-v1-batch-strong-","job-v1-batch","patch-scale-deployment-v1-apps","replace-scale-deployment-v1-apps","read-scale-deployment-v1-apps","-strong-misc-operations-deployment-v1-apps-strong-","replace-status-deployment-v1-apps","read-status-deployment-v1-apps","patch-status-deployment-v1-apps","-strong-status-operations-deployment-v1-apps-strong-","watch-list-all-namespaces-deployment-v1-apps","watch-list-deployment-v1-apps","watch-deployment-v1-apps","list-all-namespaces-deployment-v1-apps","list-deployment-v1-apps","read-deployment-v1-apps","-strong-read-operations-deployment-v1-apps-strong-","delete-collection-deployment-v1-apps","delete-deployment-v1-apps","replace-deployment-v1-apps","patch-deployment-v1-apps","create-deployment-v1-apps","-strong-write-operations-deployment-v1-apps-strong-","deployment-v1-apps","replace-status-daemonset-v1-apps","read-status-daemonset-v1-apps","patch-status-daemonset-v1-apps","-strong-status-operations-daemonset-v1-apps-strong-","watch-list-all-namespaces-daemonset-v1-apps","watch-list-daemonset-v1-apps","watch-daemonset-v1-apps","list-all-namespaces-daemonset-v1-apps","list-daemonset-v1-apps","read-daemonset-v1-apps","-strong-read-operations-daemonset-v1-apps-strong-","delete-collection-daemonset-v1-apps","delete-daemonset-v1-apps","replace-daemonset-v1-apps","patch-daemonset-v1-apps","create-daemonset-v1-apps","-strong-write-operations-daemonset-v1-apps-strong-","daemonset-v1-apps","replace-status-cronjob-v1-batch","read-status-cronjob-v1-batch","patch-status-cronjob-v1-batch","-strong-status-operations-cronjob-v1-batch-strong-","watch-list-all-namespaces-cronjob-v1-batch","watch-list-cronjob-v1-batch","watch-cronjob-v1-batch","list-all-namespaces-cronjob-v1-batch","list-cronjob-v1-batch","read-cronjob-v1-batch","-strong-read-operations-cronjob-v1-batch-strong-","delete-collection-cronjob-v1-batch","delete-cronjob-v1-batch","replace-cronjob-v1-batch","patch-cronjob-v1-batch","create-cronjob-v1-batch","-strong-write-operations-cronjob-v1-batch-strong-","cronjob-v1-batch","container-v1-core","-strong-workloads-apis-strong-","-strong-api-groups-strong-","-strong-api-overview-strong-"]};})();
\ No newline at end of file

From 5db5305f5e869dca128ce4ab9843024e10487e7d Mon Sep 17 00:00:00 2001
From: translucens <mail@w-st.com>
Date: Fri, 9 Apr 2021 11:35:18 +0900
Subject: [PATCH 508/788] Update
 content/ja/docs/concepts/configuration/pod-priority-preemption.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../ja/docs/concepts/configuration/pod-priority-preemption.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/configuration/pod-priority-preemption.md b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
index 5aa3cf42ca..bd0f8e5feb 100644
--- a/content/ja/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
@@ -49,7 +49,7 @@ PriorityClassはnamespaceによらないオブジェクトで、優先度クラ
 PriorityClassオブジェクトのメタデータの`name`フィールドにて名称を指定します。
 値は`value`フィールドで指定し、必須です。
 値が大きいほど、高い優先度を示します。
-PriorityClassオブジェクトの名称は[DNSサブドメイン名](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)として適切であり、かつ`system-`から始まらないことが必要です。
+PriorityClassオブジェクトの名称は[DNSサブドメイン名](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)として適切であり、かつ`system-`から始まってはいけません。
 
 PriorityClassオブジェクトは10億以下の任意の32ビットの整数値を持つことができます。
 それよりも大きな値は通常はプリエンプトや追い出すべきではない重要なシステム用のPodのために予約されています。

From fb4e0c4066a8db13646c860f8975531a2148311d Mon Sep 17 00:00:00 2001
From: Marc Bihlmaier <30314040+rdxmb@users.noreply.github.com>
Date: Fri, 9 Apr 2021 06:38:36 +0200
Subject: [PATCH 509/788] Update kubeadm-config.md (#27201)

add link to https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/kubelet-integration/
---
 .../docs/reference/setup-tools/kubeadm/kubeadm-config.md   | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
index 93f89c594b..62a0f32209 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
@@ -20,6 +20,13 @@ For more information navigate to
 [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)
 or [Using kubeadm join with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-join/#config-file).
 
+You can also configure several kubelet-configuration options with `kubeadm init`. These options will be the same on any node in your cluster. 
+See [Configuring each kubelet in your cluster using kubeadm](/docs/setup/production-environment/tools/kubeadm/kubelet-integration/) for details.
+
+In Kubernetes v1.13.0 and later to list/pull kube-dns images instead of the CoreDNS image
+the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
+has to be used.
+
 <!-- body -->
 ## kubeadm config view {#cmd-config-view}
 

From 6f0674ef1900e8620d67e36e5c584b7335e680bd Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Fri, 9 Apr 2021 08:39:01 +0800
Subject: [PATCH 510/788] Component reference for 1.21

---
 .../kube-apiserver.md                         |  78 ++++++++----
 .../kube-controller-manager.md                |  96 +++++++++-----
 .../kube-proxy.md                             |   3 +-
 .../kube-scheduler.md                         | 118 +++++++++++-------
 .../setup-tools/kubeadm/generated/kubeadm.md  |  17 ++-
 .../kubeadm/generated/kubeadm_alpha.md        |  17 ++-
 .../generated/kubeadm_alpha_kubeconfig.md     |  63 ++++++++++
 .../kubeadm_alpha_kubeconfig_user.md          | 102 +++++++++++++++
 .../kubeadm/generated/kubeadm_certs.md        |  17 ++-
 .../kubeadm_certs_certificate-key.md          |  17 ++-
 .../kubeadm_certs_check-expiration.md         |  23 +++-
 .../generated/kubeadm_certs_generate-csr.md   |  23 +++-
 .../kubeadm/generated/kubeadm_certs_renew.md  |  17 ++-
 .../kubeadm_certs_renew_admin.conf.md         |  27 ++--
 .../generated/kubeadm_certs_renew_all.md      |  27 ++--
 ...beadm_certs_renew_apiserver-etcd-client.md |  27 ++--
 ...dm_certs_renew_apiserver-kubelet-client.md |  27 ++--
 .../kubeadm_certs_renew_apiserver.md          |  27 ++--
 ...adm_certs_renew_controller-manager.conf.md |  27 ++--
 ...adm_certs_renew_etcd-healthcheck-client.md |  27 ++--
 .../kubeadm_certs_renew_etcd-peer.md          |  27 ++--
 .../kubeadm_certs_renew_etcd-server.md        |  27 ++--
 .../kubeadm_certs_renew_front-proxy-client.md |  27 ++--
 .../kubeadm_certs_renew_scheduler.conf.md     |  27 ++--
 .../kubeadm/generated/kubeadm_completion.md   |  17 ++-
 .../kubeadm/generated/kubeadm_config.md       |  19 ++-
 .../generated/kubeadm_config_images.md        |  19 ++-
 .../generated/kubeadm_config_images_list.md   |  38 ++++--
 .../generated/kubeadm_config_images_pull.md   |  29 +++--
 .../generated/kubeadm_config_migrate.md       |  23 +++-
 .../kubeadm/generated/kubeadm_config_print.md |  19 ++-
 .../kubeadm_config_print_init-defaults.md     |  25 +++-
 .../kubeadm_config_print_join-defaults.md     |  25 +++-
 .../kubeadm/generated/kubeadm_config_view.md  |  63 ----------
 .../kubeadm/generated/kubeadm_init.md         |  73 ++++++-----
 .../kubeadm/generated/kubeadm_init_phase.md   |  17 ++-
 .../generated/kubeadm_init_phase_addon.md     |  17 ++-
 .../generated/kubeadm_init_phase_addon_all.md |  39 ++++--
 .../kubeadm_init_phase_addon_coredns.md       |  31 +++--
 .../kubeadm_init_phase_addon_kube-proxy.md    |  33 +++--
 .../kubeadm_init_phase_bootstrap-token.md     |  23 +++-
 .../generated/kubeadm_init_phase_certs.md     |  17 ++-
 .../generated/kubeadm_init_phase_certs_all.md |  35 ++++--
 ..._init_phase_certs_apiserver-etcd-client.md |  23 +++-
 ...it_phase_certs_apiserver-kubelet-client.md |  23 +++-
 .../kubeadm_init_phase_certs_apiserver.md     |  35 ++++--
 .../generated/kubeadm_init_phase_certs_ca.md  |  23 +++-
 .../kubeadm_init_phase_certs_etcd-ca.md       |  23 +++-
 ...nit_phase_certs_etcd-healthcheck-client.md |  23 +++-
 .../kubeadm_init_phase_certs_etcd-peer.md     |  23 +++-
 .../kubeadm_init_phase_certs_etcd-server.md   |  23 +++-
 ...kubeadm_init_phase_certs_front-proxy-ca.md |  23 +++-
 ...adm_init_phase_certs_front-proxy-client.md |  23 +++-
 .../generated/kubeadm_init_phase_certs_sa.md  |  19 ++-
 .../kubeadm_init_phase_control-plane.md       |  17 ++-
 .../kubeadm_init_phase_control-plane_all.md   |  51 +++++---
 ...eadm_init_phase_control-plane_apiserver.md |  41 +++---
 ..._phase_control-plane_controller-manager.md |  33 +++--
 ...eadm_init_phase_control-plane_scheduler.md |  31 +++--
 .../generated/kubeadm_init_phase_etcd.md      |  17 ++-
 .../kubeadm_init_phase_etcd_local.md          |  25 +++-
 .../kubeadm_init_phase_kubeconfig.md          |  17 ++-
 .../kubeadm_init_phase_kubeconfig_admin.md    |  31 +++--
 .../kubeadm_init_phase_kubeconfig_all.md      |  33 +++--
 ...nit_phase_kubeconfig_controller-manager.md |  31 +++--
 .../kubeadm_init_phase_kubeconfig_kubelet.md  |  33 +++--
 ...kubeadm_init_phase_kubeconfig_scheduler.md |  31 +++--
 .../kubeadm_init_phase_kubelet-finalize.md    |  17 ++-
 ...kubeadm_init_phase_kubelet-finalize_all.md |  21 +++-
 ...let-finalize_experimental-cert-rotation.md |  21 +++-
 .../kubeadm_init_phase_kubelet-start.md       |  23 +++-
 .../kubeadm_init_phase_mark-control-plane.md  |  23 +++-
 .../generated/kubeadm_init_phase_preflight.md |  25 +++-
 .../kubeadm_init_phase_upload-certs.md        |  27 ++--
 .../kubeadm_init_phase_upload-config.md       |  17 ++-
 .../kubeadm_init_phase_upload-config_all.md   |  21 +++-
 ...ubeadm_init_phase_upload-config_kubeadm.md |  21 +++-
 ...ubeadm_init_phase_upload-config_kubelet.md |  21 +++-
 .../kubeadm/generated/kubeadm_join.md         |  55 ++++----
 .../kubeadm/generated/kubeadm_join_phase.md   |  17 ++-
 .../kubeadm_join_phase_control-plane-join.md  |  17 ++-
 ...beadm_join_phase_control-plane-join_all.md |  25 +++-
 ...eadm_join_phase_control-plane-join_etcd.md |  27 ++--
 ...e_control-plane-join_mark-control-plane.md |  23 +++-
 ..._phase_control-plane-join_update-status.md |  25 +++-
 ...ubeadm_join_phase_control-plane-prepare.md |  17 ++-
 ...dm_join_phase_control-plane-prepare_all.md |  45 ++++---
 ..._join_phase_control-plane-prepare_certs.md |  39 ++++--
 ...ase_control-plane-prepare_control-plane.md |  27 ++--
 ...se_control-plane-prepare_download-certs.md |  37 ++++--
 ..._phase_control-plane-prepare_kubeconfig.md |  37 ++++--
 .../kubeadm_join_phase_kubelet-start.md       |  37 ++++--
 .../generated/kubeadm_join_phase_preflight.md |  51 +++++---
 .../kubeadm/generated/kubeadm_kubeconfig.md   |  19 ++-
 .../generated/kubeadm_kubeconfig_user.md      |  30 +++--
 .../kubeadm/generated/kubeadm_reset.md        |  33 +++--
 .../kubeadm/generated/kubeadm_reset_phase.md  |  17 ++-
 .../kubeadm_reset_phase_cleanup-node.md       |  21 +++-
 .../kubeadm_reset_phase_preflight.md          |  23 +++-
 .../kubeadm_reset_phase_remove-etcd-member.md |  19 ++-
 ...beadm_reset_phase_update-cluster-status.md |  17 ++-
 .../kubeadm/generated/kubeadm_token.md        |  21 +++-
 .../kubeadm/generated/kubeadm_token_create.md |  39 ++++--
 .../kubeadm/generated/kubeadm_token_delete.md |  21 +++-
 .../generated/kubeadm_token_generate.md       |  21 +++-
 .../kubeadm/generated/kubeadm_token_list.md   |  32 ++++-
 .../kubeadm/generated/kubeadm_upgrade.md      |  17 ++-
 .../generated/kubeadm_upgrade_apply.md        |  45 ++++---
 .../kubeadm/generated/kubeadm_upgrade_diff.md |  29 +++--
 .../kubeadm/generated/kubeadm_upgrade_node.md |  35 ++++--
 .../generated/kubeadm_upgrade_node_phase.md   |  17 ++-
 ...ubeadm_upgrade_node_phase_control-plane.md |  27 ++--
 ...beadm_upgrade_node_phase_kubelet-config.md |  21 +++-
 .../kubeadm_upgrade_node_phase_preflight.md   |  21 +++-
 .../kubeadm/generated/kubeadm_upgrade_plan.md |  33 +++--
 .../kubeadm/generated/kubeadm_version.md      |  19 ++-
 .../setup-tools/kubeadm/kubeadm-config.md     |   4 +-
 117 files changed, 2515 insertions(+), 884 deletions(-)
 create mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig.md
 create mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig_user.md
 delete mode 100644 content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md

diff --git a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
index edf25ad835..77fe552879 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
@@ -5,6 +5,7 @@ weight: 30
 auto_generated: true
 ---
 
+
 <!--
 The file is auto-generated from the Go source code of the component using a generic
 [generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
@@ -39,7 +40,7 @@ kube-apiserver [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--add-dir-header</td>
+<td colspan="2">--add_dir_header</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
@@ -59,6 +60,13 @@ kube-apiserver [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--allow-metric-labels stringToString&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: []</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The map from metric-label to value allow-list of this label. The key's format is <!-- raw HTML omitted -->,<!-- raw HTML omitted -->. The value's format is &lt;allowed_value&gt;,&lt;allowed_value&gt;...e.g. metric1,label1='v1,v2,v3', metric1,label2='v1,v2,v3' metric2,label1='v1,v2,v3'.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--allow-privileged</td>
 </tr>
@@ -469,7 +477,14 @@ kube-apiserver [flags]
 <td colspan="2">--disable-admission-plugins strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>admission plugins that should be disabled although they are in the default enabled plugins list (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>admission plugins that should be disabled although they are in the default enabled plugins list (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--disabled-metrics strings</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>This flag provides an escape hatch for misbehaving metrics. You must provide the fully qualified metric name in order to disable it. Disclaimer: disabling metrics is higher in precedence than showing hidden metrics.</p></td>
 </tr>
 
 <tr>
@@ -483,7 +498,7 @@ kube-apiserver [flags]
 <td colspan="2">--enable-admission-plugins strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>admission plugins that should be enabled in addition to default enabled ones (NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota). Comma-delimited list of admission plugins: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, DenyServiceExternalIPs, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, RuntimeClass, SecurityContextDeny, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook. The order of plugins in this flag does not matter.</p></td>
 </tr>
 
 <tr>
@@ -595,7 +610,7 @@ kube-apiserver [flags]
 <td colspan="2">--etcd-servers-overrides strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are URLs, semicolon separated.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are URLs, semicolon separated. Note that this applies only to resources compiled into this server binary.</p></td>
 </tr>
 
 <tr>
@@ -623,7 +638,7 @@ kube-apiserver [flags]
 <td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (BETA - default=true)<br/>CPUManager=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureFile=true|false (BETA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=true)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (BETA - default=true)<br/>CSIStorageCapacity=true|false (BETA - default=true)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>CSIVolumeHealth=true|false (ALPHA - default=false)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>ControllerManagerLeaderMigration=true|false (ALPHA - default=false)<br/>CronJobControllerV2=true|false (BETA - default=true)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DaemonSetUpdateSurge=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (BETA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (BETA - default=true)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (BETA - default=true)<br/>GracefulNodeShutdown=true|false (BETA - default=true)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (BETA - default=true)<br/>InTreePluginAWSUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureDiskUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureFileUnregister=true|false (ALPHA - default=false)<br/>InTreePluginGCEUnregister=true|false (ALPHA - default=false)<br/>InTreePluginOpenStackUnregister=true|false (ALPHA - default=false)<br/>InTreePluginvSphereUnregister=true|false (ALPHA - default=false)<br/>IndexedJob=true|false (ALPHA - default=false)<br/>IngressClassNamespacedParams=true|false (ALPHA - default=false)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>KubeletPodResourcesGetAllocatable=true|false (ALPHA - default=false)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>LogarithmicScaleDown=true|false (ALPHA - default=false)<br/>MemoryManager=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NamespaceDefaultLabelName=true|false (BETA - default=true)<br/>NetworkPolicyEndPort=true|false (ALPHA - default=false)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodAffinityNamespaceSelector=true|false (ALPHA - default=false)<br/>PodDeletionCost=true|false (ALPHA - default=false)<br/>PodOverhead=true|false (BETA - default=true)<br/>PreferNominatedNode=true|false (ALPHA - default=false)<br/>ProbeTerminationGracePeriod=true|false (ALPHA - default=false)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceInternalTrafficPolicy=true|false (ALPHA - default=false)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceLoadBalancerClass=true|false (ALPHA - default=false)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>SuspendJob=true|false (ALPHA - default=false)<br/>TTLAfterFinished=true|false (BETA - default=true)<br/>TopologyAwareHints=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>VolumeCapacityPriority=true|false (ALPHA - default=false)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (BETA - default=true)</p></td>
 </tr>
 
 <tr>
@@ -703,6 +718,13 @@ kube-apiserver [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the port. If zero, the Kubernetes master service will be of type ClusterIP.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--lease-reuse-duration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 60</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The time in seconds that each lease is reused. A lower value could avoid large number of objects reusing the same lease. Notice that a too small value may cause performance problems at storage layer.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--livez-grace-period duration</td>
 </tr>
@@ -711,40 +733,40 @@ kube-apiserver [flags]
 </tr>
 
 <tr>
-<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+<td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log_backtrace_at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--log-dir string</td>
+<td colspan="2">--log_dir string</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--log-file string</td>
+<td colspan="2">--log_file string</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
+<td colspan="2">--log_file_max_size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
 </tr>
 
-<tr>
-<td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
-</tr>
-
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
@@ -858,10 +880,17 @@ kube-apiserver [flags]
 </tr>
 
 <tr>
-<td colspan="2">--one-output</td>
+<td colspan="2">--one_output</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level)</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--permit-address-sharing</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, SO_REUSEADDR will be used when binding the port. This allows binding to wildcard IPs like 0.0.0.0 and specific IPs in parallel, and it avoids waiting for the kernel to release sockets in TIME_WAIT state. [default=false]</p></td>
 </tr>
 
 <tr>
@@ -1001,7 +1030,7 @@ kube-apiserver [flags]
 <td colspan="2">--service-cluster-ip-range string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes or pods.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes or pods. Max of two dual-stack CIDRs is allowed.</p></td>
 </tr>
 
 <tr>
@@ -1026,14 +1055,14 @@ kube-apiserver [flags]
 </tr>
 
 <tr>
-<td colspan="2">--skip-headers</td>
+<td colspan="2">--skip_headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip-log-headers</td>
+<td colspan="2">--skip_log_headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
@@ -1060,6 +1089,13 @@ kube-apiserver [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The media type to use to store objects in storage. Some resources or storage backends may only support a specific media type and will ignore this setting.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--strict-transport-security-directives strings</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of directives for HSTS, comma separated. If this list is empty, then HSTS directives will not be added. Example: 'max-age=31536000,includeSubDomains,preload'</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--tls-cert-file string</td>
 </tr>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md b/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
index a7ad248e94..ae6df0502d 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
@@ -5,6 +5,7 @@ weight: 30
 auto_generated: true
 ---
 
+
 <!--
 The file is auto-generated from the Go source code of the component using a generic
 [generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
@@ -43,7 +44,7 @@ kube-controller-manager [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--add-dir-header</td>
+<td colspan="2">--add_dir_header</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
@@ -56,6 +57,13 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Should CIDRs for Pods be allocated and set on the cloud provider.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--allow-metric-labels stringToString&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: []</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The map from metric-label to value allow-list of this label. The key's format is <!-- raw HTML omitted -->,<!-- raw HTML omitted -->. The value's format is &lt;allowed_value&gt;,&lt;allowed_value&gt;...e.g. metric1,label1='v1,v2,v3', metric1,label2='v1,v2,v3' metric2,label1='v1,v2,v3'.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--alsologtostderr</td>
 </tr>
@@ -99,7 +107,7 @@ kube-controller-manager [flags]
 </tr>
 
 <tr>
-<td colspan="2">--authorization-always-allow-paths strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/healthz"</td>
+<td colspan="2">--authorization-always-allow-paths strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/healthz,/readyz,/livez"</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of HTTP paths to skip during authorization, i.e. these are authorized without contacting the 'core' kubernetes server.</p></td>
@@ -392,6 +400,13 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Disable volume attach detach reconciler sync. Disabling this may cause volumes to be mismatched with pods. Use wisely.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--disabled-metrics strings</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>This flag provides an escape hatch for misbehaving metrics. You must provide the fully qualified metric name in order to disable it. Disclaimer: disabling metrics is higher in precedence than showing hidden metrics.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--enable-dynamic-provisioning&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
@@ -413,6 +428,13 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Enable HostPath PV provisioning when running without a cloud provider. This allows testing and development of provisioning features.  HostPath provisioning is not supported in any way, won't work in a multi-node cluster, and should not be used for anything other than testing or development.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--enable-leader-migration</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether to enable controller leader migration.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--enable-taint-manager&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
@@ -452,7 +474,7 @@ kube-controller-manager [flags]
 <td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (BETA - default=true)<br/>CPUManager=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureFile=true|false (BETA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=true)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (BETA - default=true)<br/>CSIStorageCapacity=true|false (BETA - default=true)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>CSIVolumeHealth=true|false (ALPHA - default=false)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>ControllerManagerLeaderMigration=true|false (ALPHA - default=false)<br/>CronJobControllerV2=true|false (BETA - default=true)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DaemonSetUpdateSurge=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (BETA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (BETA - default=true)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (BETA - default=true)<br/>GracefulNodeShutdown=true|false (BETA - default=true)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (BETA - default=true)<br/>InTreePluginAWSUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureDiskUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureFileUnregister=true|false (ALPHA - default=false)<br/>InTreePluginGCEUnregister=true|false (ALPHA - default=false)<br/>InTreePluginOpenStackUnregister=true|false (ALPHA - default=false)<br/>InTreePluginvSphereUnregister=true|false (ALPHA - default=false)<br/>IndexedJob=true|false (ALPHA - default=false)<br/>IngressClassNamespacedParams=true|false (ALPHA - default=false)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>KubeletPodResourcesGetAllocatable=true|false (ALPHA - default=false)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>LogarithmicScaleDown=true|false (ALPHA - default=false)<br/>MemoryManager=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NamespaceDefaultLabelName=true|false (BETA - default=true)<br/>NetworkPolicyEndPort=true|false (ALPHA - default=false)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodAffinityNamespaceSelector=true|false (ALPHA - default=false)<br/>PodDeletionCost=true|false (ALPHA - default=false)<br/>PodOverhead=true|false (BETA - default=true)<br/>PreferNominatedNode=true|false (ALPHA - default=false)<br/>ProbeTerminationGracePeriod=true|false (ALPHA - default=false)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceInternalTrafficPolicy=true|false (ALPHA - default=false)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceLoadBalancerClass=true|false (ALPHA - default=false)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>SuspendJob=true|false (ALPHA - default=false)<br/>TTLAfterFinished=true|false (BETA - default=true)<br/>TopologyAwareHints=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>VolumeCapacityPriority=true|false (ALPHA - default=false)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (BETA - default=true)</p></td>
 </tr>
 
 <tr>
@@ -596,31 +618,10 @@ kube-controller-manager [flags]
 </tr>
 
 <tr>
-<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+<td colspan="2">--leader-migration-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log-dir string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log-file string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the config file for controller leader migration, or empty to use the value that reflects default configuration of the controller manager. The config file should be of type LeaderMigrationConfiguration, group controllermanager.config.k8s.io, version v1alpha1.</p></td>
 </tr>
 
 <tr>
@@ -630,6 +631,34 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--log_backtrace_at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log_dir string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log_file string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log_file_max_size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
@@ -743,10 +772,17 @@ kube-controller-manager [flags]
 </tr>
 
 <tr>
-<td colspan="2">--one-output</td>
+<td colspan="2">--one_output</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level)</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--permit-address-sharing</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, SO_REUSEADDR will be used when binding the port. This allows binding to wildcard IPs like 0.0.0.0 and specific IPs in parallel, and it avoids waiting for the kernel to release sockets in TIME_WAIT state. [default=false]</p></td>
 </tr>
 
 <tr>
@@ -911,14 +947,14 @@ kube-controller-manager [flags]
 </tr>
 
 <tr>
-<td colspan="2">--skip-headers</td>
+<td colspan="2">--skip_headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip-log-headers</td>
+<td colspan="2">--skip_log_headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-proxy.md b/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
index ad9d8b022d..ffe104c22e 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
@@ -5,6 +5,7 @@ weight: 30
 auto_generated: true
 ---
 
+
 <!--
 The file is auto-generated from the Go source code of the component using a generic
 [generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
@@ -129,7 +130,7 @@ kube-proxy [flags]
 <td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (BETA - default=true)<br/>CPUManager=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureFile=true|false (BETA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=true)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (BETA - default=true)<br/>CSIStorageCapacity=true|false (BETA - default=true)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>CSIVolumeHealth=true|false (ALPHA - default=false)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>ControllerManagerLeaderMigration=true|false (ALPHA - default=false)<br/>CronJobControllerV2=true|false (BETA - default=true)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DaemonSetUpdateSurge=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (BETA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (BETA - default=true)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (BETA - default=true)<br/>GracefulNodeShutdown=true|false (BETA - default=true)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (BETA - default=true)<br/>InTreePluginAWSUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureDiskUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureFileUnregister=true|false (ALPHA - default=false)<br/>InTreePluginGCEUnregister=true|false (ALPHA - default=false)<br/>InTreePluginOpenStackUnregister=true|false (ALPHA - default=false)<br/>InTreePluginvSphereUnregister=true|false (ALPHA - default=false)<br/>IndexedJob=true|false (ALPHA - default=false)<br/>IngressClassNamespacedParams=true|false (ALPHA - default=false)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>KubeletPodResourcesGetAllocatable=true|false (ALPHA - default=false)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>LogarithmicScaleDown=true|false (ALPHA - default=false)<br/>MemoryManager=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NamespaceDefaultLabelName=true|false (BETA - default=true)<br/>NetworkPolicyEndPort=true|false (ALPHA - default=false)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodAffinityNamespaceSelector=true|false (ALPHA - default=false)<br/>PodDeletionCost=true|false (ALPHA - default=false)<br/>PodOverhead=true|false (BETA - default=true)<br/>PreferNominatedNode=true|false (ALPHA - default=false)<br/>ProbeTerminationGracePeriod=true|false (ALPHA - default=false)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceInternalTrafficPolicy=true|false (ALPHA - default=false)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceLoadBalancerClass=true|false (ALPHA - default=false)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>SuspendJob=true|false (ALPHA - default=false)<br/>TTLAfterFinished=true|false (BETA - default=true)<br/>TopologyAwareHints=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>VolumeCapacityPriority=true|false (ALPHA - default=false)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (BETA - default=true)</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md b/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
index 913d7eb925..811dc417e0 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
@@ -5,6 +5,7 @@ weight: 30
 auto_generated: true
 ---
 
+
 <!--
 The file is auto-generated from the Go source code of the component using a generic
 [generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
@@ -43,7 +44,7 @@ kube-scheduler [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--add-dir-header</td>
+<td colspan="2">--add_dir_header</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
@@ -53,7 +54,7 @@ kube-scheduler [flags]
 <td colspan="2">--address string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "0.0.0.0"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the IP address on which to listen for the --port port (set to 0.0.0.0 for all IPv4 interfaces and :: for all IPv6 interfaces). See --bind-address instead.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the IP address on which to listen for the --port port (set to 0.0.0.0 or :: for listening in all interfaces and IP families). See --bind-address instead. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
@@ -63,6 +64,13 @@ kube-scheduler [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the scheduling algorithm provider to use, this sets the default plugins for component config profiles. Choose one of: ClusterAutoscalerProvider | DefaultProvider</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--allow-metric-labels stringToString&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: []</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The map from metric-label to value allow-list of this label. The key's format is <!-- raw HTML omitted -->,<!-- raw HTML omitted -->. The value's format is &lt;allowed_value&gt;,&lt;allowed_value&gt;...e.g. metric1,label1='v1,v2,v3', metric1,label2='v1,v2,v3' metric2,label1='v1,v2,v3'.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--alsologtostderr</td>
 </tr>
@@ -99,7 +107,7 @@ kube-scheduler [flags]
 </tr>
 
 <tr>
-<td colspan="2">--authorization-always-allow-paths strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/healthz"</td>
+<td colspan="2">--authorization-always-allow-paths strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/healthz,/readyz,/livez"</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of HTTP paths to skip during authorization, i.e. these are authorized without contacting the 'core' kubernetes server.</p></td>
@@ -158,14 +166,21 @@ kube-scheduler [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the configuration file. The following flags can overwrite fields in this file:<br/>--address<br/>--port<br/>--use-legacy-policy-config<br/>--policy-configmap<br/>--policy-config-file<br/>--algorithm-provider</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the configuration file. The following flags can overwrite fields in this file:<br/>--algorithm-provider<br/>--policy-config-file<br/>--policy-configmap<br/>--policy-configmap-namespace</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--contention-profiling&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: enable lock contention profiling, if profiling is enabled</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: enable lock contention profiling, if profiling is enabled. This parameter is ignored if a config file is specified in --config.</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--disabled-metrics strings</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>This flag provides an escape hatch for misbehaving metrics. You must provide the fully qualified metric name in order to disable it. Disclaimer: disabling metrics is higher in precedence than showing hidden metrics.</p></td>
 </tr>
 
 <tr>
@@ -179,14 +194,14 @@ kube-scheduler [flags]
 <td colspan="2">--feature-gates &lt;comma-separated 'key=True|False' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (ALPHA - default=false)<br/>CSIStorageCapacity=true|false (ALPHA - default=false)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>CronJobControllerV2=true|false (ALPHA - default=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (ALPHA - default=false)<br/>EndpointSlice=true|false (BETA - default=true)<br/>EndpointSliceNodeName=true|false (ALPHA - default=false)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>GracefulNodeShutdown=true|false (ALPHA - default=false)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodDisruptionBudget=true|false (BETA - default=true)<br/>PodOverhead=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RootCAConfigMap=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceAccountIssuerDiscovery=true|false (BETA - default=true)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceNodeExclusion=true|false (BETA - default=true)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - default=false)</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIPriorityAndFairness=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>APIServerIdentity=true|false (ALPHA - default=false)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AllBeta=true|false (BETA - default=false)<br/>AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BoundServiceAccountTokenVolume=true|false (BETA - default=true)<br/>CPUManager=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (BETA - default=true)<br/>CSIMigrationAWS=true|false (BETA - default=false)<br/>CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>CSIMigrationAzureFile=true|false (BETA - default=false)<br/>CSIMigrationGCE=true|false (BETA - default=false)<br/>CSIMigrationOpenStack=true|false (BETA - default=true)<br/>CSIMigrationvSphere=true|false (BETA - default=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>CSIServiceAccountToken=true|false (BETA - default=true)<br/>CSIStorageCapacity=true|false (BETA - default=true)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - default=true)<br/>CSIVolumeHealth=true|false (ALPHA - default=false)<br/>ConfigurableFSGroupPolicy=true|false (BETA - default=true)<br/>ControllerManagerLeaderMigration=true|false (ALPHA - default=false)<br/>CronJobControllerV2=true|false (BETA - default=true)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>DaemonSetUpdateSurge=true|false (ALPHA - default=false)<br/>DefaultPodTopologySpread=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - default=true)<br/>DownwardAPIHugePages=true|false (BETA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EfficientWatchResumption=true|false (BETA - default=true)<br/>EndpointSliceProxying=true|false (BETA - default=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>GenericEphemeralVolume=true|false (BETA - default=true)<br/>GracefulNodeShutdown=true|false (BETA - default=true)<br/>HPAContainerMetrics=true|false (ALPHA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HugePageStorageMediumSize=true|false (BETA - default=true)<br/>IPv6DualStack=true|false (BETA - default=true)<br/>InTreePluginAWSUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureDiskUnregister=true|false (ALPHA - default=false)<br/>InTreePluginAzureFileUnregister=true|false (ALPHA - default=false)<br/>InTreePluginGCEUnregister=true|false (ALPHA - default=false)<br/>InTreePluginOpenStackUnregister=true|false (ALPHA - default=false)<br/>InTreePluginvSphereUnregister=true|false (ALPHA - default=false)<br/>IndexedJob=true|false (ALPHA - default=false)<br/>IngressClassNamespacedParams=true|false (ALPHA - default=false)<br/>KubeletCredentialProviders=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>KubeletPodResourcesGetAllocatable=true|false (ALPHA - default=false)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>LogarithmicScaleDown=true|false (ALPHA - default=false)<br/>MemoryManager=true|false (ALPHA - default=false)<br/>MixedProtocolLBService=true|false (ALPHA - default=false)<br/>NamespaceDefaultLabelName=true|false (BETA - default=true)<br/>NetworkPolicyEndPort=true|false (ALPHA - default=false)<br/>NonPreemptingPriority=true|false (BETA - default=true)<br/>PodAffinityNamespaceSelector=true|false (ALPHA - default=false)<br/>PodDeletionCost=true|false (ALPHA - default=false)<br/>PodOverhead=true|false (BETA - default=true)<br/>PreferNominatedNode=true|false (ALPHA - default=false)<br/>ProbeTerminationGracePeriod=true|false (ALPHA - default=false)<br/>ProcMountType=true|false (ALPHA - default=false)<br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceInternalTrafficPolicy=true|false (ALPHA - default=false)<br/>ServiceLBNodePortControl=true|false (ALPHA - default=false)<br/>ServiceLoadBalancerClass=true|false (ALPHA - default=false)<br/>ServiceTopology=true|false (ALPHA - default=false)<br/>SetHostnameAsFQDN=true|false (BETA - default=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - default=false)<br/>StorageVersionAPI=true|false (ALPHA - default=false)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>SuspendJob=true|false (ALPHA - default=false)<br/>TTLAfterFinished=true|false (BETA - default=true)<br/>TopologyAwareHints=true|false (ALPHA - default=false)<br/>TopologyManager=true|false (BETA - default=true)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>VolumeCapacityPriority=true|false (ALPHA - default=false)<br/>WarningHeaders=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (BETA - default=true)<br/>WindowsEndpointSliceProxying=true|false (BETA - default=true)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--hard-pod-affinity-symmetric-weight int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule corresponding to every RequiredDuringScheduling affinity rule. --hard-pod-affinity-symmetric-weight represents the weight of implicit PreferredDuringScheduling affinity rule. Must be in the range 0-100.This option was moved to the policy configuration file</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule corresponding to every RequiredDuringScheduling affinity rule. --hard-pod-affinity-symmetric-weight represents the weight of implicit PreferredDuringScheduling affinity rule. Must be in the range 0-100.This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
@@ -207,28 +222,28 @@ kube-scheduler [flags]
 <td colspan="2">--kube-api-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 100</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: burst to use while talking with kubernetes apiserver</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: burst to use while talking with kubernetes apiserver. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-content-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "application/vnd.kubernetes.protobuf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: content type of requests sent to apiserver.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: content type of requests sent to apiserver. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kube-api-qps float&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 50</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: QPS to use while talking with kubernetes apiserver</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: QPS to use while talking with kubernetes apiserver. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: path to kubeconfig file with authorization and master location information.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: path to kubeconfig file with authorization and master location information. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
@@ -284,42 +299,14 @@ kube-scheduler [flags]
 <td colspan="2">--lock-object-name string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-scheduler"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: define the name of the lock object. Will be removed in favor of leader-elect-resource-name</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: define the name of the lock object. Will be removed in favor of leader-elect-resource-name. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--lock-object-namespace string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "kube-system"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: define the namespace of the lock object. Will be removed in favor of leader-elect-resource-namespace.</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log-dir string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log-file string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: define the namespace of the lock object. Will be removed in favor of leader-elect-resource-namespace. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
@@ -329,6 +316,34 @@ kube-scheduler [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--log_backtrace_at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log_dir string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log_file string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log_file_max_size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
@@ -351,10 +366,17 @@ kube-scheduler [flags]
 </tr>
 
 <tr>
-<td colspan="2">--one-output</td>
+<td colspan="2">--one_output</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level)</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--permit-address-sharing</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, SO_REUSEADDR will be used when binding the port. This allows binding to wildcard IPs like 0.0.0.0 and specific IPs in parallel, and it avoids waiting for the kernel to release sockets in TIME_WAIT state. [default=false]</p></td>
 </tr>
 
 <tr>
@@ -389,14 +411,14 @@ kube-scheduler [flags]
 <td colspan="2">--port int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10251</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the port on which to serve HTTP insecurely without authentication and authorization. If 0, don't serve plain HTTP at all. See --secure-port instead.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: the port on which to serve HTTP insecurely without authentication and authorization. If 0, don't serve plain HTTP at all. See --secure-port instead. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--profiling&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: enable profiling via web interface host:port/debug/pprof/</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: enable profiling via web interface host:port/debug/pprof/. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
@@ -438,7 +460,7 @@ kube-scheduler [flags]
 <td colspan="2">--scheduler-name string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "default-scheduler"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: name of the scheduler, used to select which pods will be processed by this scheduler, based on pod's &quot;spec.schedulerName&quot;.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: name of the scheduler, used to select which pods will be processed by this scheduler, based on pod's &quot;spec.schedulerName&quot;. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
 <tr>
@@ -456,14 +478,14 @@ kube-scheduler [flags]
 </tr>
 
 <tr>
-<td colspan="2">--skip-headers</td>
+<td colspan="2">--skip_headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip-log-headers</td>
+<td colspan="2">--skip_log_headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm.md
index ed03bf49c4..ff545b4042 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+kubeadm: easily bootstrap a secure Kubernetes cluster
 
 ### Synopsis
 
@@ -47,14 +60,14 @@ Example usage:
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubeadm</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubeadm</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha.md
index 95b034be1b..af458320a5 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Kubeadm experimental sub-commands
 
 ### Synopsis
 
@@ -17,7 +30,7 @@ Kubeadm experimental sub-commands
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for alpha</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for alpha</p></td>
 </tr>
 
 </tbody>
@@ -38,7 +51,7 @@ Kubeadm experimental sub-commands
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig.md
new file mode 100644
index 0000000000..b678061bb0
--- /dev/null
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig.md
@@ -0,0 +1,63 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Kubeconfig file utilities
+
+### Synopsis
+
+
+Kubeconfig file utilities.
+
+Alpha Disclaimer: this command is currently alpha.
+
+### Options
+
+   <table style="width: 100%; table-layout: fixed;">
+<colgroup>
+<col span="1" style="width: 10px;" />
+<col span="1" />
+</colgroup>
+<tbody>
+
+<tr>
+<td colspan="2">-h, --help</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubeconfig</p></td>
+</tr>
+
+</tbody>
+</table>
+
+
+
+### Options inherited from parent commands
+
+   <table style="width: 100%; table-layout: fixed;">
+<colgroup>
+<col span="1" style="width: 10px;" />
+<col span="1" />
+</colgroup>
+<tbody>
+
+<tr>
+<td colspan="2">--rootfs string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
+</tr>
+
+</tbody>
+</table>
+
+
+
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig_user.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig_user.md
new file mode 100644
index 0000000000..de07cd0f7d
--- /dev/null
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubeconfig_user.md
@@ -0,0 +1,102 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Output a kubeconfig file for an additional user
+
+### Synopsis
+
+
+Output a kubeconfig file for an additional user.
+
+Alpha Disclaimer: this command is currently alpha.
+
+```
+kubeadm alpha kubeconfig user [flags]
+```
+
+### Examples
+
+```
+  # Output a kubeconfig file for an additional user named foo using a kubeadm config file bar
+  kubeadm alpha kubeconfig user --client-name=foo --config=bar
+```
+
+### Options
+
+   <table style="width: 100%; table-layout: fixed;">
+<colgroup>
+<col span="1" style="width: 10px;" />
+<col span="1" />
+</colgroup>
+<tbody>
+
+<tr>
+<td colspan="2">--client-name string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The name of user. It will be used as the CN if client certificates are created</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--config string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
+</tr>
+
+<tr>
+<td colspan="2">-h, --help</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for user</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--org strings</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The orgnizations of the client certificate. It will be used as the O if client certificates are created</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--token string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The token that should be used as the authentication mechanism for this kubeconfig, instead of client certificates</p></td>
+</tr>
+
+</tbody>
+</table>
+
+
+
+### Options inherited from parent commands
+
+   <table style="width: 100%; table-layout: fixed;">
+<colgroup>
+<col span="1" style="width: 10px;" />
+<col span="1" />
+</colgroup>
+<tbody>
+
+<tr>
+<td colspan="2">--rootfs string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
+</tr>
+
+</tbody>
+</table>
+
+
+
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs.md
index fef772e702..9458702330 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Commands related to handling kubernetes certificates
 
 ### Synopsis
 
@@ -17,7 +30,7 @@ Commands related to handling kubernetes certificates
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for certs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for certs</p></td>
 </tr>
 
 </tbody>
@@ -38,7 +51,7 @@ Commands related to handling kubernetes certificates
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_certificate-key.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_certificate-key.md
index 2de0366641..3f978e50fd 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_certificate-key.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_certificate-key.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate certificate keys
 
 ### Synopsis
 
@@ -27,7 +40,7 @@ kubeadm certs certificate-key [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for certificate-key</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for certificate-key</p></td>
 </tr>
 
 </tbody>
@@ -48,7 +61,7 @@ kubeadm certs certificate-key [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_check-expiration.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_check-expiration.md
index 50a3cb8bf2..e321a5a029 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_check-expiration.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_check-expiration.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Check certificates expiration for a Kubernetes cluster
 
 ### Synopsis
 
@@ -21,28 +34,28 @@ kubeadm certs check-expiration [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for check-expiration</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for check-expiration</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -63,7 +76,7 @@ kubeadm certs check-expiration [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_generate-csr.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_generate-csr.md
index 81b248e4f0..52d21a2cff 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_generate-csr.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_generate-csr.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate keys and certificate signing requests
 
 ### Synopsis
 
@@ -32,28 +45,28 @@ kubeadm certs generate-csr [flags]
 <td colspan="2">--cert-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for generate-csr</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for generate-csr</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -74,7 +87,7 @@ kubeadm certs generate-csr [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew.md
index 8b627a595d..e728f9f060 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew certificates for a Kubernetes cluster
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm certs renew [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for renew</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for renew</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm certs renew [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_admin.conf.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_admin.conf.md
index 536164c45a..2a81cee1d4 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_admin.conf.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_admin.conf.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate embedded in the kubeconfig file for the admin to use and for kubeadm itself
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew admin.conf [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for admin.conf</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for admin.conf</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew admin.conf [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_all.md
index 13c12ed0d0..b948adb65c 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew all available certificates
 
 ### Synopsis
 
@@ -21,42 +34,42 @@ kubeadm certs renew all [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -77,7 +90,7 @@ kubeadm certs renew all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-etcd-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-etcd-client.md
index fac6861a7c..cb8fe0d5f7 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-etcd-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-etcd-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate the apiserver uses to access etcd
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew apiserver-etcd-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apiserver-etcd-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apiserver-etcd-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew apiserver-etcd-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-kubelet-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-kubelet-client.md
index 030fb1425a..475e8c9f22 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-kubelet-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver-kubelet-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate for the API server to connect to kubelet
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew apiserver-kubelet-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apiserver-kubelet-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apiserver-kubelet-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew apiserver-kubelet-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver.md
index 8ab01efd89..750df89d83 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_apiserver.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate for serving the Kubernetes API
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew apiserver [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew apiserver [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_controller-manager.conf.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_controller-manager.conf.md
index 10b44f7c3e..b052fb3e54 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_controller-manager.conf.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_controller-manager.conf.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate embedded in the kubeconfig file for the controller manager to use
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew controller-manager.conf [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for controller-manager.conf</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for controller-manager.conf</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew controller-manager.conf [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-healthcheck-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-healthcheck-client.md
index b9ddadd6f1..252296e395 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-healthcheck-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-healthcheck-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate for liveness probes to healthcheck etcd
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew etcd-healthcheck-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd-healthcheck-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd-healthcheck-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew etcd-healthcheck-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-peer.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-peer.md
index 3b15fa02f0..f25b86fa15 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-peer.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-peer.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate for etcd nodes to communicate with each other
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew etcd-peer [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd-peer</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd-peer</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew etcd-peer [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-server.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-server.md
index 82b9e43e34..059d0d9bbb 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-server.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_etcd-server.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate for serving etcd
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew etcd-server [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd-server</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd-server</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew etcd-server [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_front-proxy-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_front-proxy-client.md
index b1f3bc0c84..d93fca8d46 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_front-proxy-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_front-proxy-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate for the front proxy client
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew front-proxy-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for front-proxy-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for front-proxy-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew front-proxy-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_scheduler.conf.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_scheduler.conf.md
index f26fbc22b1..5d7ade453b 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_scheduler.conf.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_scheduler.conf.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Renew the certificate embedded in the kubeconfig file for the scheduler manager to use
 
 ### Synopsis
 
@@ -27,42 +40,42 @@ kubeadm certs renew scheduler.conf [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to output the CSRs and private keys to</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to output the CSRs and private keys to</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--csr-only</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create CSRs instead of generating certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create CSRs instead of generating certificates</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for scheduler.conf</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for scheduler.conf</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -83,7 +96,7 @@ kubeadm certs renew scheduler.conf [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_completion.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_completion.md
index f5a69d79fd..5fe7d65b40 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_completion.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_completion.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Output shell completion code for the specified shell (bash or zsh)
 
 ### Synopsis
 
@@ -59,7 +72,7 @@ source <(kubeadm completion zsh)
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for completion</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for completion</p></td>
 </tr>
 
 </tbody>
@@ -80,7 +93,7 @@ source <(kubeadm completion zsh)
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config.md
index b39cdd7a0d..50cb9f63b9 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Manage configuration for a kubeadm cluster persisted in a ConfigMap in the cluster
 
 ### Synopsis
 
@@ -26,14 +39,14 @@ kubeadm config [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for config</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for config</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -54,7 +67,7 @@ kubeadm config [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images.md
index 436f3c3c7e..0f85b4fbc2 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Interact with container images used by kubeadm
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm config images [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for images</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for images</p></td>
 </tr>
 
 </tbody>
@@ -42,14 +55,14 @@ kubeadm config images [flags]
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_list.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_list.md
index 842fb2fe92..4634bd0a27 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_list.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_list.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Print a list of images kubeadm will use. The configuration file is used in case any images or image repositories are customized
 
 ### Synopsis
 
@@ -21,49 +34,56 @@ kubeadm config images list [flags]
 <td colspan="2">--allow-missing-template-keys&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-o, --experimental-output string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Output format. One of: text|json|yaml|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Output format. One of: text|json|yaml|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for list</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for list</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--show-managed-fields</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, keep the managedFields when printing objects in JSON or YAML format.</p></td>
 </tr>
 
 </tbody>
@@ -84,14 +104,14 @@ kubeadm config images list [flags]
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_pull.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_pull.md
index d2f5961f85..840072d167 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_pull.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_images_pull.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Pull images used by kubeadm
 
 ### Synopsis
 
@@ -21,42 +34,42 @@ kubeadm config images pull [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for pull</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for pull</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -77,14 +90,14 @@ kubeadm config images pull [flags]
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_migrate.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_migrate.md
index d07ffe8677..5858bdb307 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_migrate.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_migrate.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Read an older version of the kubeadm configuration API types from a file, and output the similar config object for the newer version
 
 ### Synopsis
 
@@ -34,21 +47,21 @@ kubeadm config migrate [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for migrate</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for migrate</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--new-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the resulting equivalent kubeadm config file using the new API version. Optional, if not specified output will be sent to STDOUT.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the resulting equivalent kubeadm config file using the new API version. Optional, if not specified output will be sent to STDOUT.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--old-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the kubeadm config file that is using an old API version and should be converted. This flag is mandatory.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the kubeadm config file that is using an old API version and should be converted. This flag is mandatory.</p></td>
 </tr>
 
 </tbody>
@@ -69,14 +82,14 @@ kubeadm config migrate [flags]
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md
index c6e1ea2173..2f20d9d1ce 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Print configuration
 
 ### Synopsis
 
@@ -23,7 +36,7 @@ kubeadm config print [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for print</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for print</p></td>
 </tr>
 
 </tbody>
@@ -44,14 +57,14 @@ kubeadm config print [flags]
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_init-defaults.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_init-defaults.md
index adc76ee41c..f8200dfd52 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_init-defaults.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_init-defaults.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Print default init configuration, that can be used for 'kubeadm init'
 
 ### Synopsis
 
@@ -5,7 +18,7 @@
 
 This command prints objects such as the default init configuration that is used for 'kubeadm init'.
 
-Note that sensitive values like the Bootstrap Token fields are replaced with placeholder values like {"abcdef.0123456789abcdef" "" "nil" &lt;nil&gt; [] []} in order to pass validation but
+Note that sensitive values like the Bootstrap Token fields are replaced with placeholder values like "abcdef.0123456789abcdef" in order to pass validation but
 not perform the real computation for creating a token.
 
 
@@ -23,17 +36,17 @@ kubeadm config print init-defaults [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--component-configs stringSlice</td>
+<td colspan="2">--component-configs strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A comma-separated list for component config API objects to print the default values for. Available values: [KubeProxyConfiguration KubeletConfiguration]. If this flag is not set, no component configs will be printed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A comma-separated list for component config API objects to print the default values for. Available values: [KubeProxyConfiguration KubeletConfiguration]. If this flag is not set, no component configs will be printed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for init-defaults</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for init-defaults</p></td>
 </tr>
 
 </tbody>
@@ -54,14 +67,14 @@ kubeadm config print init-defaults [flags]
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_join-defaults.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_join-defaults.md
index b1c976c663..1c634871eb 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_join-defaults.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print_join-defaults.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Print default join configuration, that can be used for 'kubeadm join'
 
 ### Synopsis
 
@@ -5,7 +18,7 @@
 
 This command prints objects such as the default join configuration that is used for 'kubeadm join'.
 
-Note that sensitive values like the Bootstrap Token fields are replaced with placeholder values like {"abcdef.0123456789abcdef" "" "nil" &lt;nil&gt; [] []} in order to pass validation but
+Note that sensitive values like the Bootstrap Token fields are replaced with placeholder values like "abcdef.0123456789abcdef" in order to pass validation but
 not perform the real computation for creating a token.
 
 
@@ -23,17 +36,17 @@ kubeadm config print join-defaults [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--component-configs stringSlice</td>
+<td colspan="2">--component-configs strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A comma-separated list for component config API objects to print the default values for. Available values: [KubeProxyConfiguration KubeletConfiguration]. If this flag is not set, no component configs will be printed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A comma-separated list for component config API objects to print the default values for. Available values: [KubeProxyConfiguration KubeletConfiguration]. If this flag is not set, no component configs will be printed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for join-defaults</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for join-defaults</p></td>
 </tr>
 
 </tbody>
@@ -54,14 +67,14 @@ kubeadm config print join-defaults [flags]
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md
deleted file mode 100644
index c3a3137105..0000000000
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md
+++ /dev/null
@@ -1,63 +0,0 @@
-
-### Synopsis
-
-
-
-Using this command, you can view the ConfigMap in the cluster where the configuration for kubeadm is located.
-
-The configuration is located in the "kube-system" namespace in the "kubeadm-config" ConfigMap.
-
-
-```
-kubeadm config view [flags]
-```
-
-### Options
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for view</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
-### Options inherited from parent commands
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
-</tr>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
-</tr>
-
-</tbody>
-</table>
-
-
-
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init.md
index 49c7fd112a..4294cffe8b 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run this command in order to set up the Kubernetes control plane
 
 ### Synopsis
 
@@ -39,7 +52,7 @@ mark-control-plane           Mark a node as a control-plane
 bootstrap-token              Generates bootstrap tokens used to join a node to a cluster
 kubelet-finalize             Updates settings relevant to the kubelet after TLS bootstrap
   /experimental-cert-rotation  Enable kubelet client certificate rotation
-addon                        Install required addons for passing Conformance tests
+addon                        Install required addons for passing conformance tests
   /coredns                     Install the CoreDNS addon to a Kubernetes cluster
   /kube-proxy                  Install the kube-proxy addon to a Kubernetes cluster
 ```
@@ -62,175 +75,175 @@ kubeadm init [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--apiserver-cert-extra-sans stringSlice</td>
+<td colspan="2">--apiserver-cert-extra-sans strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Key used to encrypt the control-plane certificates in the kubeadm-certs Secret.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Key used to encrypt the control-plane certificates in the kubeadm-certs Secret.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Don't apply any changes; just output what would be done.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Don't apply any changes; just output what would be done.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for init</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for init</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-network-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "10.96.0.0/12"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative range of IP address for service VIPs.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative range of IP address for service VIPs.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-dns-domain string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "cluster.local"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative domain for services, e.g. "myorg.internal".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative domain for services, e.g. &quot;myorg.internal&quot;.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-certificate-key-print</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Don't print the key used to encrypt the control-plane certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Don't print the key used to encrypt the control-plane certificates.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip-phases stringSlice</td>
+<td colspan="2">--skip-phases strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of phases to be skipped</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of phases to be skipped</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-token-print</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Skip printing of the default bootstrap token generated by 'kubeadm init'.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Skip printing of the default bootstrap token generated by 'kubeadm init'.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The token to use for establishing bidirectional trust between nodes and control-plane nodes. The format is [a-z0-9]{6}\.[a-z0-9]{16} - e.g. abcdef.0123456789abcdef</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The token to use for establishing bidirectional trust between nodes and control-plane nodes. The format is [a-z0-9]{6}.[a-z0-9]{16} - e.g. abcdef.0123456789abcdef</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 24h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--upload-certs</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Upload control-plane certificates to the kubeadm-certs Secret.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Upload control-plane certificates to the kubeadm-certs Secret.</p></td>
 </tr>
 
 </tbody>
@@ -251,7 +264,7 @@ kubeadm init [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase.md
index 2db3ea5e54..48ccd99cd5 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Use this command to invoke single phase of the init workflow
 
 ### Synopsis
 
@@ -17,7 +30,7 @@ Use this command to invoke single phase of the init workflow
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for phase</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for phase</p></td>
 </tr>
 
 </tbody>
@@ -38,7 +51,7 @@ Use this command to invoke single phase of the init workflow
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon.md
index 67b9c3af75..64777661d0 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Install required addons for passing conformance tests
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm init phase addon [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for addon</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for addon</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm init phase addon [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_all.md
index 103dd7e7c5..48ae42ca48 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Install all the addons
 
 ### Synopsis
 
@@ -21,84 +34,84 @@ kubeadm init phase addon all [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-network-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "10.96.0.0/12"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative range of IP address for service VIPs.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative range of IP address for service VIPs.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-dns-domain string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "cluster.local"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative domain for services, e.g. "myorg.internal".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative domain for services, e.g. &quot;myorg.internal&quot;.</p></td>
 </tr>
 
 </tbody>
@@ -119,7 +132,7 @@ kubeadm init phase addon all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_coredns.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_coredns.md
index 3eebcb828b..68f0d0d025 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_coredns.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_coredns.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Install the CoreDNS addon to a Kubernetes cluster
 
 ### Synopsis
 
@@ -21,56 +34,56 @@ kubeadm init phase addon coredns [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for coredns</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for coredns</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "10.96.0.0/12"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative range of IP address for service VIPs.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative range of IP address for service VIPs.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-dns-domain string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "cluster.local"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative domain for services, e.g. "myorg.internal".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative domain for services, e.g. &quot;myorg.internal&quot;.</p></td>
 </tr>
 
 </tbody>
@@ -91,7 +104,7 @@ kubeadm init phase addon coredns [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_kube-proxy.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_kube-proxy.md
index 78140e94e8..4dc9a18339 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_kube-proxy.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_addon_kube-proxy.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Install the kube-proxy addon to a Kubernetes cluster
 
 ### Synopsis
 
@@ -21,63 +34,63 @@ kubeadm init phase addon kube-proxy [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kube-proxy</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kube-proxy</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-network-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</p></td>
 </tr>
 
 </tbody>
@@ -98,7 +111,7 @@ kubeadm init phase addon kube-proxy [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_bootstrap-token.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_bootstrap-token.md
index 123ab38fdc..652399d5cf 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_bootstrap-token.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_bootstrap-token.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generates bootstrap tokens used to join a node to a cluster
 
 ### Synopsis
 
@@ -31,28 +44,28 @@ kubeadm init phase bootstrap-token [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for bootstrap-token</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for bootstrap-token</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-token-print</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Skip printing of the default bootstrap token generated by 'kubeadm init'.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Skip printing of the default bootstrap token generated by 'kubeadm init'.</p></td>
 </tr>
 
 </tbody>
@@ -73,7 +86,7 @@ kubeadm init phase bootstrap-token [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs.md
index 28f5acc3e3..c779b920e1 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Certificate generation
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm init phase certs [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for certs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for certs</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm init phase certs [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_all.md
index 7ac391c078..7485310462 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate all certificates
 
 ### Synopsis
 
@@ -21,63 +34,63 @@ kubeadm init phase certs all [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--apiserver-cert-extra-sans stringSlice</td>
+<td colspan="2">--apiserver-cert-extra-sans strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "10.96.0.0/12"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative range of IP address for service VIPs.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative range of IP address for service VIPs.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-dns-domain string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "cluster.local"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative domain for services, e.g. "myorg.internal".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative domain for services, e.g. &quot;myorg.internal&quot;.</p></td>
 </tr>
 
 </tbody>
@@ -98,7 +111,7 @@ kubeadm init phase certs all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-etcd-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-etcd-client.md
index eef07b2afa..4c8bed971a 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-etcd-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-etcd-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificate the apiserver uses to access etcd
 
 ### Synopsis
 
@@ -25,28 +38,28 @@ kubeadm init phase certs apiserver-etcd-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apiserver-etcd-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apiserver-etcd-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -67,7 +80,7 @@ kubeadm init phase certs apiserver-etcd-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-kubelet-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-kubelet-client.md
index 1d03b13ef1..814a9c15ff 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-kubelet-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver-kubelet-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificate for the API server to connect to kubelet
 
 ### Synopsis
 
@@ -25,28 +38,28 @@ kubeadm init phase certs apiserver-kubelet-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apiserver-kubelet-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apiserver-kubelet-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -67,7 +80,7 @@ kubeadm init phase certs apiserver-kubelet-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver.md
index 28f6cc6244..fa2d46ab8e 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_apiserver.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificate for serving the Kubernetes API
 
 ### Synopsis
 
@@ -27,63 +40,63 @@ kubeadm init phase certs apiserver [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--apiserver-cert-extra-sans stringSlice</td>
+<td colspan="2">--apiserver-cert-extra-sans strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "10.96.0.0/12"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative range of IP address for service VIPs.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative range of IP address for service VIPs.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-dns-domain string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "cluster.local"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative domain for services, e.g. "myorg.internal".</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative domain for services, e.g. &quot;myorg.internal&quot;.</p></td>
 </tr>
 
 </tbody>
@@ -104,7 +117,7 @@ kubeadm init phase certs apiserver [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_ca.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_ca.md
index 81ccc2cbc2..d12b74f19f 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_ca.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_ca.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the self-signed Kubernetes CA to provision identities for other Kubernetes components
 
 ### Synopsis
 
@@ -25,28 +38,28 @@ kubeadm init phase certs ca [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for ca</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for ca</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -67,7 +80,7 @@ kubeadm init phase certs ca [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-ca.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-ca.md
index 17066413dd..2cddb77ade 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-ca.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-ca.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the self-signed CA to provision identities for etcd
 
 ### Synopsis
 
@@ -25,28 +38,28 @@ kubeadm init phase certs etcd-ca [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd-ca</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd-ca</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -67,7 +80,7 @@ kubeadm init phase certs etcd-ca [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-healthcheck-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-healthcheck-client.md
index 6ee2e7ea11..9876d5bce7 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-healthcheck-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-healthcheck-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificate for liveness probes to healthcheck etcd
 
 ### Synopsis
 
@@ -25,28 +38,28 @@ kubeadm init phase certs etcd-healthcheck-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd-healthcheck-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd-healthcheck-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -67,7 +80,7 @@ kubeadm init phase certs etcd-healthcheck-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-peer.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-peer.md
index a127d4095a..d86991f8f8 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-peer.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-peer.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificate for etcd nodes to communicate with each other
 
 ### Synopsis
 
@@ -27,28 +40,28 @@ kubeadm init phase certs etcd-peer [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd-peer</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd-peer</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -69,7 +82,7 @@ kubeadm init phase certs etcd-peer [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-server.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-server.md
index 07a58373c1..213cf22d2f 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-server.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_etcd-server.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificate for serving etcd
 
 ### Synopsis
 
@@ -27,28 +40,28 @@ kubeadm init phase certs etcd-server [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd-server</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd-server</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -69,7 +82,7 @@ kubeadm init phase certs etcd-server [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-ca.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-ca.md
index 4a05b78d77..c2d37be74f 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-ca.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-ca.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the self-signed CA to provision identities for front proxy
 
 ### Synopsis
 
@@ -25,28 +38,28 @@ kubeadm init phase certs front-proxy-ca [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for front-proxy-ca</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for front-proxy-ca</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -67,7 +80,7 @@ kubeadm init phase certs front-proxy-ca [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-client.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-client.md
index 8e2d76f451..58a81fa7a2 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-client.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_front-proxy-client.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificate for the front proxy client
 
 ### Synopsis
 
@@ -25,28 +38,28 @@ kubeadm init phase certs front-proxy-client [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for front-proxy-client</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for front-proxy-client</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -67,7 +80,7 @@ kubeadm init phase certs front-proxy-client [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_sa.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_sa.md
index 8d36df6c52..a3df321d88 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_sa.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_certs_sa.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate a private key for signing service account tokens along with its public key
 
 ### Synopsis
 
@@ -23,14 +36,14 @@ kubeadm init phase certs sa [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for sa</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for sa</p></td>
 </tr>
 
 </tbody>
@@ -51,7 +64,7 @@ kubeadm init phase certs sa [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane.md
index 2bed8442d3..86ef35d14d 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate all static Pod manifest files necessary to establish the control plane
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm init phase control-plane [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for control-plane</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for control-plane</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm init phase control-plane [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md
index e03cdb6274..daad2e9a39 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate all static Pod manifest files
 
 ### Synopsis
 
@@ -32,105 +45,105 @@ kubeadm init phase control-plane all [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--apiserver-extra-args mapStringString</td>
+<td colspan="2">--apiserver-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of extra flags to pass to the API Server or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the API Server or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--controller-manager-extra-args mapStringString</td>
+<td colspan="2">--controller-manager-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of extra flags to pass to the Controller Manager or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Controller Manager or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-network-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--scheduler-extra-args mapStringString</td>
+<td colspan="2">--scheduler-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of extra flags to pass to the Scheduler or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Scheduler or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "10.96.0.0/12"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative range of IP address for service VIPs.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative range of IP address for service VIPs.</p></td>
 </tr>
 
 </tbody>
@@ -151,7 +164,7 @@ kubeadm init phase control-plane all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md
index 50aef041fd..f95da1c6d2 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generates the kube-apiserver static Pod manifest
 
 ### Synopsis
 
@@ -21,84 +34,84 @@ kubeadm init phase control-plane apiserver [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--apiserver-extra-args mapStringString</td>
+<td colspan="2">--apiserver-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of extra flags to pass to the API Server or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the API Server or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apiserver</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apiserver</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--service-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "10.96.0.0/12"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use alternative range of IP address for service VIPs.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use alternative range of IP address for service VIPs.</p></td>
 </tr>
 
 </tbody>
@@ -119,7 +132,7 @@ kubeadm init phase control-plane apiserver [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md
index c1f0989cb6..0931956c54 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generates the kube-controller-manager static Pod manifest
 
 ### Synopsis
 
@@ -21,56 +34,56 @@ kubeadm init phase control-plane controller-manager [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--controller-manager-extra-args mapStringString</td>
+<td colspan="2">--controller-manager-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of extra flags to pass to the Controller Manager or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Controller Manager or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for controller-manager</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for controller-manager</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-network-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.</p></td>
 </tr>
 
 </tbody>
@@ -91,7 +104,7 @@ kubeadm init phase control-plane controller-manager [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md
index ce2f366b13..5fe483282a 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generates the kube-scheduler static Pod manifest
 
 ### Synopsis
 
@@ -21,49 +34,49 @@ kubeadm init phase control-plane scheduler [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for scheduler</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for scheduler</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--scheduler-extra-args mapStringString</td>
+<td colspan="2">--scheduler-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of extra flags to pass to the Scheduler or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Scheduler or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
 </tr>
 
 </tbody>
@@ -84,7 +97,7 @@ kubeadm init phase control-plane scheduler [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd.md
index dc5227a34c..be2aef8c3b 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate static Pod manifest file for local etcd
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm init phase etcd [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm init phase etcd [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd_local.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd_local.md
index 0e4cb7181e..1e4e8fa22f 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd_local.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_etcd_local.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the static Pod manifest file for a local, single-node local etcd instance
 
 ### Synopsis
 
@@ -33,35 +46,35 @@ kubeadm init phase etcd local [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for local</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for local</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--image-repository string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "k8s.gcr.io"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a container registry to pull control plane images from</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a container registry to pull control plane images from</p></td>
 </tr>
 
 </tbody>
@@ -82,7 +95,7 @@ kubeadm init phase etcd local [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig.md
index b3a200a228..da4fde7ebc 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate all kubeconfig files necessary to establish the control plane and the admin kubeconfig file
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm init phase kubeconfig [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubeconfig</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubeconfig</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm init phase kubeconfig [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_admin.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_admin.md
index 85885559f7..a664e126ff 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_admin.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_admin.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate a kubeconfig file for the admin to use and for kubeadm itself
 
 ### Synopsis
 
@@ -21,56 +34,56 @@ kubeadm init phase kubeconfig admin [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for admin</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for admin</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -91,7 +104,7 @@ kubeadm init phase kubeconfig admin [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_all.md
index 9296e84a19..f1ebdbcf12 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate all kubeconfig files
 
 ### Synopsis
 
@@ -21,63 +34,63 @@ kubeadm init phase kubeconfig all [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -98,7 +111,7 @@ kubeadm init phase kubeconfig all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_controller-manager.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_controller-manager.md
index 295d7e57dc..c49ab4b6c4 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_controller-manager.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_controller-manager.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate a kubeconfig file for the controller manager to use
 
 ### Synopsis
 
@@ -21,56 +34,56 @@ kubeadm init phase kubeconfig controller-manager [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for controller-manager</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for controller-manager</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -91,7 +104,7 @@ kubeadm init phase kubeconfig controller-manager [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_kubelet.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_kubelet.md
index 9fd3145290..fd141ea0fc 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_kubelet.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_kubelet.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate a kubeconfig file for the kubelet to use *only* for cluster bootstrapping purposes
 
 ### Synopsis
 
@@ -23,63 +36,63 @@ kubeadm init phase kubeconfig kubelet [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubelet</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubelet</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -100,7 +113,7 @@ kubeadm init phase kubeconfig kubelet [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_scheduler.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_scheduler.md
index c608732717..9618c2d874 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_scheduler.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubeconfig_scheduler.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate a kubeconfig file for the scheduler to use
 
 ### Synopsis
 
@@ -21,56 +34,56 @@ kubeadm init phase kubeconfig scheduler [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify a stable IP address or DNS name for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify a stable IP address or DNS name for the control plane.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for scheduler</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for scheduler</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save the kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubernetes-version string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "stable-1"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Choose a specific Kubernetes version for the control plane.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Choose a specific Kubernetes version for the control plane.</p></td>
 </tr>
 
 </tbody>
@@ -91,7 +104,7 @@ kubeadm init phase kubeconfig scheduler [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize.md
index 4e5febf638..d2eb7f0125 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Updates settings relevant to the kubelet after TLS bootstrap
 
 ### Synopsis
 
@@ -28,7 +41,7 @@ kubeadm init phase kubelet-finalize [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubelet-finalize</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubelet-finalize</p></td>
 </tr>
 
 </tbody>
@@ -49,7 +62,7 @@ kubeadm init phase kubelet-finalize [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_all.md
index fce712fc45..70e4c634b0 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run all kubelet-finalize phases
 
 ### Synopsis
 
@@ -28,21 +41,21 @@ kubeadm init phase kubelet-finalize all [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 </tbody>
@@ -63,7 +76,7 @@ kubeadm init phase kubelet-finalize all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_experimental-cert-rotation.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_experimental-cert-rotation.md
index 2ace62929b..6ce904cc2b 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_experimental-cert-rotation.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-finalize_experimental-cert-rotation.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Enable kubelet client certificate rotation
 
 ### Synopsis
 
@@ -21,21 +34,21 @@ kubeadm init phase kubelet-finalize experimental-cert-rotation [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save and store the certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path where to save and store the certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for experimental-cert-rotation</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for experimental-cert-rotation</p></td>
 </tr>
 
 </tbody>
@@ -56,7 +69,7 @@ kubeadm init phase kubelet-finalize experimental-cert-rotation [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-start.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-start.md
index f9898b58e0..11d2407499 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-start.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_kubelet-start.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Write kubelet settings and (re)start the kubelet
 
 ### Synopsis
 
@@ -28,28 +41,28 @@ kubeadm init phase kubelet-start [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubelet-start</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubelet-start</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -70,7 +83,7 @@ kubeadm init phase kubelet-start [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_mark-control-plane.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_mark-control-plane.md
index 453783db52..6ba7e90479 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_mark-control-plane.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_mark-control-plane.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Mark a node as a control-plane
 
 ### Synopsis
 
@@ -12,7 +25,7 @@ kubeadm init phase mark-control-plane [flags]
 
 ```
   # Applies control-plane label and taint to the current node, functionally equivalent to what executed by kubeadm init.
-  kubeadm init phase mark-control-plane --config config.yml
+  kubeadm init phase mark-control-plane --config config.yaml
   
   # Applies control-plane label and taint to a specific node
   kubeadm init phase mark-control-plane --node-name myNode
@@ -31,21 +44,21 @@ kubeadm init phase mark-control-plane [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for mark-control-plane</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for mark-control-plane</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -66,7 +79,7 @@ kubeadm init phase mark-control-plane [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_preflight.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_preflight.md
index 06d47e861c..345621f703 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_preflight.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_preflight.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run pre-flight checks
 
 ### Synopsis
 
@@ -12,7 +25,7 @@ kubeadm init phase preflight [flags]
 
 ```
   # Run pre-flight checks for kubeadm init using a config file.
-  kubeadm init phase preflight --config kubeadm-config.yml
+  kubeadm init phase preflight --config kubeadm-config.yaml
 ```
 
 ### Options
@@ -28,21 +41,21 @@ kubeadm init phase preflight [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for preflight</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for preflight</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 </tbody>
@@ -63,7 +76,7 @@ kubeadm init phase preflight [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-certs.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-certs.md
index 404f62d725..515060a76c 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-certs.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-certs.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upload certificates to kubeadm-certs
 
 ### Synopsis
 
@@ -21,42 +34,42 @@ kubeadm init phase upload-certs [flags]
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Key used to encrypt the control-plane certificates in the kubeadm-certs Secret.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Key used to encrypt the control-plane certificates in the kubeadm-certs Secret.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for upload-certs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for upload-certs</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-certificate-key-print</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Don't print the key used to encrypt the control-plane certificates.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Don't print the key used to encrypt the control-plane certificates.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--upload-certs</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Upload control-plane certificates to the kubeadm-certs Secret.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Upload control-plane certificates to the kubeadm-certs Secret.</p></td>
 </tr>
 
 </tbody>
@@ -77,7 +90,7 @@ kubeadm init phase upload-certs [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config.md
index c1b5c96092..7d007e7b56 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upload the kubeadm and kubelet configuration to a ConfigMap
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm init phase upload-config [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for upload-config</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for upload-config</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm init phase upload-config [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_all.md
index 6370094df9..3c087368a7 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upload all configuration to a config map
 
 ### Synopsis
 
@@ -21,21 +34,21 @@ kubeadm init phase upload-config all [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -56,7 +69,7 @@ kubeadm init phase upload-config all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubeadm.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubeadm.md
index 030595466b..13e561f486 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubeadm.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubeadm.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upload the kubeadm ClusterConfiguration to a ConfigMap
 
 ### Synopsis
 
@@ -30,21 +43,21 @@ kubeadm init phase upload-config kubeadm [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubeadm</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubeadm</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -65,7 +78,7 @@ kubeadm init phase upload-config kubeadm [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubelet.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubelet.md
index bd334e091c..ba27f728cb 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubelet.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_upload-config_kubelet.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upload the kubelet component config to a ConfigMap
 
 ### Synopsis
 
@@ -28,21 +41,21 @@ kubeadm init phase upload-config kubelet [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubelet</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubelet</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -63,7 +76,7 @@ kubeadm init phase upload-config kubelet [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md
index 3a6f7299d6..ae528a44df 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run this on any machine you wish to join an existing cluster
 
 ### Synopsis
 
@@ -78,119 +91,119 @@ kubeadm join [api-server-endpoint] [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this key to decrypt the certificate secrets uploaded by init.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this key to decrypt the certificate secrets uploaded by init.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For file-based discovery, a file or URL from which to load cluster information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For file-based discovery, a file or URL from which to load cluster information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, the token used to validate cluster information fetched from the API server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, the token used to validate cluster information fetched from the API server.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--discovery-token-ca-cert-hash stringSlice</td>
+<td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, validate that the root CA public key matches this hash (format: "&lt;type&gt;:&lt;value&gt;").</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token-unsafe-skip-ca-verification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for join</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for join</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip-phases stringSlice</td>
+<td colspan="2">--skip-phases strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of phases to be skipped</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of phases to be skipped</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-bootstrap-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</p></td>
 </tr>
 
 </tbody>
@@ -211,7 +224,7 @@ kubeadm join [api-server-endpoint] [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase.md
index 873f64aa16..b780de18cc 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Use this command to invoke single phase of the join workflow
 
 ### Synopsis
 
@@ -17,7 +30,7 @@ Use this command to invoke single phase of the join workflow
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for phase</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for phase</p></td>
 </tr>
 
 </tbody>
@@ -38,7 +51,7 @@ Use this command to invoke single phase of the join workflow
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join.md
index 20170c783c..07768a16c6 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Join a machine as a control plane instance
 
 ### Synopsis
 
@@ -28,7 +41,7 @@ kubeadm join phase control-plane-join [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for control-plane-join</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for control-plane-join</p></td>
 </tr>
 
 </tbody>
@@ -49,7 +62,7 @@ kubeadm join phase control-plane-join [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_all.md
index 9515d0dfe7..ed1753457a 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Join a machine as a control plane instance
 
 ### Synopsis
 
@@ -21,35 +34,35 @@ kubeadm join phase control-plane-join all [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -70,7 +83,7 @@ kubeadm join phase control-plane-join all [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_etcd.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_etcd.md
index 4618107dd2..9990ce3dc1 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_etcd.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_etcd.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Add a new local etcd member
 
 ### Synopsis
 
@@ -21,42 +34,42 @@ kubeadm join phase control-plane-join etcd [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for etcd</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for etcd</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -77,7 +90,7 @@ kubeadm join phase control-plane-join etcd [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_mark-control-plane.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_mark-control-plane.md
index 37bd9675b8..9e2d117ed9 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_mark-control-plane.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_mark-control-plane.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Mark a node as a control-plane
 
 ### Synopsis
 
@@ -21,28 +34,28 @@ kubeadm join phase control-plane-join mark-control-plane [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for mark-control-plane</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for mark-control-plane</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -63,7 +76,7 @@ kubeadm join phase control-plane-join mark-control-plane [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_update-status.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_update-status.md
index 258210f303..10127f967f 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_update-status.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-join_update-status.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Register the new control-plane node into the ClusterStatus maintained in the kubeadm-config ConfigMap
 
 ### Synopsis
 
@@ -21,35 +34,35 @@ kubeadm join phase control-plane-join update-status [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for update-status</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for update-status</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 </tbody>
@@ -70,7 +83,7 @@ kubeadm join phase control-plane-join update-status [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare.md
index 81a88bdaa5..6952dbca80 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Prepare the machine for serving a control plane
 
 ### Synopsis
 
@@ -28,7 +41,7 @@ kubeadm join phase control-plane-prepare [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for control-plane-prepare</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for control-plane-prepare</p></td>
 </tr>
 
 </tbody>
@@ -49,7 +62,7 @@ kubeadm join phase control-plane-prepare [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md
index 932ef5f27b..cfc54c9bb4 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Prepare the machine for serving a control plane
 
 ### Synopsis
 
@@ -21,98 +34,98 @@ kubeadm join phase control-plane-prepare all [api-server-endpoint] [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this key to decrypt the certificate secrets uploaded by init.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this key to decrypt the certificate secrets uploaded by init.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For file-based discovery, a file or URL from which to load cluster information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For file-based discovery, a file or URL from which to load cluster information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, the token used to validate cluster information fetched from the API server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, the token used to validate cluster information fetched from the API server.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--discovery-token-ca-cert-hash stringSlice</td>
+<td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, validate that the root CA public key matches this hash (format: "&lt;type&gt;:&lt;value&gt;").</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token-unsafe-skip-ca-verification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for all</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for all</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-bootstrap-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</p></td>
 </tr>
 
 </tbody>
@@ -133,7 +146,7 @@ kubeadm join phase control-plane-prepare all [api-server-endpoint] [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md
index c8d59d58eb..d26c5e1adb 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the certificates for the new control plane components
 
 ### Synopsis
 
@@ -21,77 +34,77 @@ kubeadm join phase control-plane-prepare certs [api-server-endpoint] [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For file-based discovery, a file or URL from which to load cluster information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For file-based discovery, a file or URL from which to load cluster information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, the token used to validate cluster information fetched from the API server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, the token used to validate cluster information fetched from the API server.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--discovery-token-ca-cert-hash stringSlice</td>
+<td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, validate that the root CA public key matches this hash (format: "&lt;type&gt;:&lt;value&gt;").</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token-unsafe-skip-ca-verification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for certs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for certs</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-bootstrap-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</p></td>
 </tr>
 
 </tbody>
@@ -112,7 +125,7 @@ kubeadm join phase control-plane-prepare certs [api-server-endpoint] [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_control-plane.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_control-plane.md
index 3e9a120c00..820f499c41 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_control-plane.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_control-plane.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the manifests for the new control plane components
 
 ### Synopsis
 
@@ -21,42 +34,42 @@ kubeadm join phase control-plane-prepare control-plane [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for control-plane</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for control-plane</p></td>
 </tr>
 
 </tbody>
@@ -77,7 +90,7 @@ kubeadm join phase control-plane-prepare control-plane [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md
index 26e65cce87..e45e23cf7d 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+[EXPERIMENTAL] Download certificates shared among control-plane nodes from the kubeadm-certs Secret
 
 ### Synopsis
 
@@ -21,70 +34,70 @@ kubeadm join phase control-plane-prepare download-certs [api-server-endpoint] [f
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this key to decrypt the certificate secrets uploaded by init.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this key to decrypt the certificate secrets uploaded by init.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For file-based discovery, a file or URL from which to load cluster information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For file-based discovery, a file or URL from which to load cluster information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, the token used to validate cluster information fetched from the API server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, the token used to validate cluster information fetched from the API server.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--discovery-token-ca-cert-hash stringSlice</td>
+<td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, validate that the root CA public key matches this hash (format: "&lt;type&gt;:&lt;value&gt;").</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token-unsafe-skip-ca-verification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for download-certs</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for download-certs</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-bootstrap-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</p></td>
 </tr>
 
 </tbody>
@@ -105,7 +118,7 @@ kubeadm join phase control-plane-prepare download-certs [api-server-endpoint] [f
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md
index 722ec2263d..995c6290c4 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate the kubeconfig for the new control plane components
 
 ### Synopsis
 
@@ -21,70 +34,70 @@ kubeadm join phase control-plane-prepare kubeconfig [api-server-endpoint] [flags
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this key to decrypt the certificate secrets uploaded by init.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this key to decrypt the certificate secrets uploaded by init.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For file-based discovery, a file or URL from which to load cluster information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For file-based discovery, a file or URL from which to load cluster information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, the token used to validate cluster information fetched from the API server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, the token used to validate cluster information fetched from the API server.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--discovery-token-ca-cert-hash stringSlice</td>
+<td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, validate that the root CA public key matches this hash (format: "&lt;type&gt;:&lt;value&gt;").</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token-unsafe-skip-ca-verification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubeconfig</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubeconfig</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-bootstrap-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</p></td>
 </tr>
 
 </tbody>
@@ -105,7 +118,7 @@ kubeadm join phase control-plane-prepare kubeconfig [api-server-endpoint] [flags
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md
index 719700b9a0..9c1cef31c0 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Write kubelet settings, certificates and (re)start the kubelet
 
 ### Synopsis
 
@@ -21,70 +34,70 @@ kubeadm join phase kubelet-start [api-server-endpoint] [flags]
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For file-based discovery, a file or URL from which to load cluster information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For file-based discovery, a file or URL from which to load cluster information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, the token used to validate cluster information fetched from the API server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, the token used to validate cluster information fetched from the API server.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--discovery-token-ca-cert-hash stringSlice</td>
+<td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, validate that the root CA public key matches this hash (format: "&lt;type&gt;:&lt;value&gt;").</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token-unsafe-skip-ca-verification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubelet-start</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubelet-start</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-bootstrap-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</p></td>
 </tr>
 
 </tbody>
@@ -105,7 +118,7 @@ kubeadm join phase kubelet-start [api-server-endpoint] [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md
index ca975f9d92..5d8e10522b 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run join pre-flight checks
 
 ### Synopsis
 
@@ -12,7 +25,7 @@ kubeadm join phase preflight [api-server-endpoint] [flags]
 
 ```
   # Run join pre-flight checks using a config file.
-  kubeadm join phase preflight --config kubeadm-config.yml
+  kubeadm join phase preflight --config kubeadm-config.yaml
 ```
 
 ### Options
@@ -28,105 +41,105 @@ kubeadm join phase preflight [api-server-endpoint] [flags]
 <td colspan="2">--apiserver-advertise-address string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on. If not set the default network interface will be used.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--apiserver-bind-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 6443</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If the node should host a new control plane instance, the port for the API Server to bind to.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If the node should host a new control plane instance, the port for the API Server to bind to.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this key to decrypt the certificate secrets uploaded by init.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this key to decrypt the certificate secrets uploaded by init.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to kubeadm config file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeadm config file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--control-plane</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Create a new control plane instance on this node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Create a new control plane instance on this node</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For file-based discovery, a file or URL from which to load cluster information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For file-based discovery, a file or URL from which to load cluster information.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, the token used to validate cluster information fetched from the API server.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, the token used to validate cluster information fetched from the API server.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--discovery-token-ca-cert-hash stringSlice</td>
+<td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, validate that the root CA public key matches this hash (format: "&lt;type&gt;:&lt;value&gt;").</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--discovery-token-unsafe-skip-ca-verification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for preflight</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for preflight</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--node-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the node name.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the node name.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-bootstrap-token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Use this token for both discovery-token and tls-bootstrap-token when those values are not provided.</p></td>
 </tr>
 
 </tbody>
@@ -147,7 +160,7 @@ kubeadm join phase preflight [api-server-endpoint] [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig.md
index 67ee58fdd7..b678061bb0 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig.md
@@ -1,9 +1,24 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Kubeconfig file utilities
 
 ### Synopsis
 
 
 Kubeconfig file utilities.
 
+Alpha Disclaimer: this command is currently alpha.
+
 ### Options
 
    <table style="width: 100%; table-layout: fixed;">
@@ -17,7 +32,7 @@ Kubeconfig file utilities.
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubeconfig</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubeconfig</p></td>
 </tr>
 
 </tbody>
@@ -38,7 +53,7 @@ Kubeconfig file utilities.
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig_user.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig_user.md
index 8ff987503c..8293ee2f27 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig_user.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_kubeconfig_user.md
@@ -1,9 +1,23 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Output a kubeconfig file for an additional user
 
 ### Synopsis
 
 
 Output a kubeconfig file for an additional user.
 
+Alpha Disclaimer: this command is currently alpha.
 
 ```
 kubeadm kubeconfig user [flags]
@@ -13,7 +27,7 @@ kubeadm kubeconfig user [flags]
 
 ```
   # Output a kubeconfig file for an additional user named foo using a kubeadm config file bar
-  kubeadm kubeconfig user --client-name=foo --config=bar
+  kubeadm alpha kubeconfig user --client-name=foo --config=bar
 ```
 
 ### Options
@@ -29,35 +43,35 @@ kubeadm kubeconfig user [flags]
 <td colspan="2">--client-name string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The name of user. It will be used as the CN if client certificates are created</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The name of user. It will be used as the CN if client certificates are created</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for user</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for user</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--org stringSlice</td>
+<td colspan="2">--org strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The orgnizations of the client certificate. It will be used as the O if client certificates are created</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The orgnizations of the client certificate. It will be used as the O if client certificates are created</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--token string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The token that should be used as the authentication mechanism for this kubeconfig, instead of client certificates</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The token that should be used as the authentication mechanism for this kubeconfig, instead of client certificates</p></td>
 </tr>
 
 </tbody>
@@ -78,7 +92,7 @@ kubeadm kubeconfig user [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset.md
index 4cfa48be37..a745cb8c9e 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Performs a best effort revert of changes made to this host by 'kubeadm init' or 'kubeadm join'
 
 ### Synopsis
 
@@ -30,49 +43,49 @@ kubeadm reset [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the directory where the certificates are stored. If specified, clean this directory.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the directory where the certificates are stored. If specified, clean this directory.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-f, --force</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Reset the node without prompting for confirmation.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Reset the node without prompting for confirmation.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for reset</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for reset</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip-phases stringSlice</td>
+<td colspan="2">--skip-phases strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of phases to be skipped</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of phases to be skipped</p></td>
 </tr>
 
 </tbody>
@@ -93,7 +106,7 @@ kubeadm reset [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase.md
index 498621b95d..e526dafa1f 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Use this command to invoke single phase of the reset workflow
 
 ### Synopsis
 
@@ -17,7 +30,7 @@ Use this command to invoke single phase of the reset workflow
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for phase</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for phase</p></td>
 </tr>
 
 </tbody>
@@ -38,7 +51,7 @@ Use this command to invoke single phase of the reset workflow
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_cleanup-node.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_cleanup-node.md
index 84376e67b2..ceabd2045e 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_cleanup-node.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_cleanup-node.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run cleanup node.
 
 ### Synopsis
 
@@ -21,21 +34,21 @@ kubeadm reset phase cleanup-node [flags]
 <td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the directory where the certificates are stored. If specified, clean this directory.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The path to the directory where the certificates are stored. If specified, clean this directory.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--cri-socket string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the CRI socket to connect. If empty kubeadm will try to auto-detect this value; use this option only if you have more than one CRI installed or if you have non-standard CRI socket.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for cleanup-node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for cleanup-node</p></td>
 </tr>
 
 </tbody>
@@ -56,7 +69,7 @@ kubeadm reset phase cleanup-node [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_preflight.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_preflight.md
index 8f3537bc7c..b3d1502184 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_preflight.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_preflight.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run reset pre-flight checks
 
 ### Synopsis
 
@@ -21,21 +34,21 @@ kubeadm reset phase preflight [flags]
 <td colspan="2">-f, --force</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Reset the node without prompting for confirmation.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Reset the node without prompting for confirmation.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for preflight</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for preflight</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 </tbody>
@@ -56,7 +69,7 @@ kubeadm reset phase preflight [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_remove-etcd-member.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_remove-etcd-member.md
index c7350d27ca..d2c1060ff4 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_remove-etcd-member.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_remove-etcd-member.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Remove a local etcd member.
 
 ### Synopsis
 
@@ -21,14 +34,14 @@ kubeadm reset phase remove-etcd-member [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for remove-etcd-member</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for remove-etcd-member</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -49,7 +62,7 @@ kubeadm reset phase remove-etcd-member [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_update-cluster-status.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_update-cluster-status.md
index de4700032b..b73f736958 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_update-cluster-status.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_reset_phase_update-cluster-status.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Remove this node from the ClusterStatus object.
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm reset phase update-cluster-status [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for update-cluster-status</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for update-cluster-status</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm reset phase update-cluster-status [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token.md
index 2662497699..5384fc4d6c 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Manage bootstrap tokens
 
 ### Synopsis
 
@@ -38,21 +51,21 @@ kubeadm token [flags]
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether to enable dry-run mode or not</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether to enable dry-run mode or not</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for token</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for token</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -73,7 +86,7 @@ kubeadm token [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_create.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_create.md
index b2212bba44..a2a217033c 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_create.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_create.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Create bootstrap tokens on the server
 
 ### Synopsis
 
@@ -28,56 +41,56 @@ kubeadm token create [token]
 <td colspan="2">--certificate-key string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">When used together with '--print-join-command', print the full 'kubeadm join' flag needed to join the cluster as a control-plane. To create a new certificate key you must use 'kubeadm init phase upload-certs --upload-certs'.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>When used together with '--print-join-command', print the full 'kubeadm join' flag needed to join the cluster as a control-plane. To create a new certificate key you must use 'kubeadm init phase upload-certs --upload-certs'.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--description string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A human friendly description of how this token is used.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A human friendly description of how this token is used.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--groups stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [system:bootstrappers:kubeadm:default-node-token]</td>
+<td colspan="2">--groups strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "system:bootstrappers:kubeadm:default-node-token"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Extra groups that this token will authenticate as when used for authentication. Must match "\\Asystem:bootstrappers:[a-z0-9:-]{0,255}[a-z0-9]\\z"</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Extra groups that this token will authenticate as when used for authentication. Must match &quot;\Asystem:bootstrappers:[a-z0-9:-]{0,255}[a-z0-9]\z&quot;</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for create</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for create</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--print-join-command</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Instead of printing only the token, print the full 'kubeadm join' flag needed to join the cluster using the token.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Instead of printing only the token, print the full 'kubeadm join' flag needed to join the cluster using the token.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 24h0m0s</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--usages stringSlice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: [signing,authentication]</td>
+<td colspan="2">--usages strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "signing,authentication"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Describes the ways in which this token can be used. You can pass --usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication]</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Describes the ways in which this token can be used. You can pass --usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication]</p></td>
 </tr>
 
 </tbody>
@@ -98,21 +111,21 @@ kubeadm token create [token]
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether to enable dry-run mode or not</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether to enable dry-run mode or not</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_delete.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_delete.md
index d1ddd8bd2c..2040bd3f94 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_delete.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_delete.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Delete bootstrap tokens on the server
 
 ### Synopsis
 
@@ -26,7 +39,7 @@ kubeadm token delete [token-value] ...
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for delete</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for delete</p></td>
 </tr>
 
 </tbody>
@@ -47,21 +60,21 @@ kubeadm token delete [token-value] ...
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether to enable dry-run mode or not</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether to enable dry-run mode or not</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_generate.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_generate.md
index 72ca0220ee..60de389d6c 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_generate.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_generate.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Generate and print a bootstrap token, but do not create it on the server
 
 ### Synopsis
 
@@ -31,7 +44,7 @@ kubeadm token generate [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for generate</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for generate</p></td>
 </tr>
 
 </tbody>
@@ -52,21 +65,21 @@ kubeadm token generate [flags]
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether to enable dry-run mode or not</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether to enable dry-run mode or not</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_list.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_list.md
index 20ba81f63f..089424492e 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_list.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_token_list.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+List bootstrap tokens on the server
 
 ### Synopsis
 
@@ -23,21 +36,28 @@ kubeadm token list [flags]
 <td colspan="2">--allow-missing-template-keys&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-o, --experimental-output string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Output format. One of: text|json|yaml|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Output format. One of: text|json|yaml|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for list</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for list</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--show-managed-fields</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, keep the managedFields when printing objects in JSON or YAML format.</p></td>
 </tr>
 
 </tbody>
@@ -58,21 +78,21 @@ kubeadm token list [flags]
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether to enable dry-run mode or not</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Whether to enable dry-run mode or not</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade.md
index b3fe44532b..0c2a465194 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upgrade your cluster smoothly to a newer version with this command
 
 ### Synopsis
 
@@ -21,7 +34,7 @@ kubeadm upgrade [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for upgrade</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for upgrade</p></td>
 </tr>
 
 </tbody>
@@ -42,7 +55,7 @@ kubeadm upgrade [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_apply.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_apply.md
index ed6896b0a7..d34e01da47 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_apply.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_apply.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upgrade your Kubernetes cluster to the specified version
 
 ### Synopsis
 
@@ -21,98 +34,98 @@ kubeadm upgrade apply [version]
 <td colspan="2">--allow-experimental-upgrades</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--allow-release-candidate-upgrades</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--certificate-renewal&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Perform the renewal of certificates used by component changed during upgrades.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Perform the renewal of certificates used by component changed during upgrades.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Do not change any state, just output what actions would be performed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Do not change any state, just output what actions would be performed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-upgrade&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Perform the upgrade of etcd.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Perform the upgrade of etcd.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-f, --force</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Force upgrading although some requirements might not be met. This also implies non-interactive mode.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Force upgrading although some requirements might not be met. This also implies non-interactive mode.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for apply</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for apply</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--print-config</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specifies whether the configuration file that will be used in the upgrade should be printed or not.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specifies whether the configuration file that will be used in the upgrade should be printed or not.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-y, --yes</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Perform the upgrade and do not prompt for confirmation (non-interactive mode).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Perform the upgrade and do not prompt for confirmation (non-interactive mode).</p></td>
 </tr>
 
 </tbody>
@@ -133,7 +146,7 @@ kubeadm upgrade apply [version]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_diff.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_diff.md
index c15b118075..eb5e3c4cac 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_diff.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_diff.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Show what differences would be applied to existing static pod manifests. See also: kubeadm upgrade apply --dry-run
 
 ### Synopsis
 
@@ -21,49 +34,49 @@ kubeadm upgrade diff [version] [flags]
 <td colspan="2">--api-server-manifest string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/manifests/kube-apiserver.yaml"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">path to API server manifest</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>path to API server manifest</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-c, --context-lines int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 3</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">How many lines of context in the diff</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>How many lines of context in the diff</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--controller-manager-manifest string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/manifests/kube-controller-manager.yaml"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">path to controller manifest</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>path to controller manifest</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for diff</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for diff</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--scheduler-manifest string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/manifests/kube-scheduler.yaml"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">path to scheduler manifest</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>path to scheduler manifest</p></td>
 </tr>
 
 </tbody>
@@ -84,7 +97,7 @@ kubeadm upgrade diff [version] [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node.md
index b9198f77d7..5bd05a9822 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upgrade commands for a node in the cluster
 
 ### Synopsis
 
@@ -29,56 +42,56 @@ kubeadm upgrade node [flags]
 <td colspan="2">--certificate-renewal&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Perform the renewal of certificates used by component changed during upgrades.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Perform the renewal of certificates used by component changed during upgrades.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Do not change any state, just output the actions that would be performed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Do not change any state, just output the actions that would be performed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-upgrade&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Perform the upgrade of etcd.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Perform the upgrade of etcd.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for node</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for node</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip-phases stringSlice</td>
+<td colspan="2">--skip-phases strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">List of phases to be skipped</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>List of phases to be skipped</p></td>
 </tr>
 
 </tbody>
@@ -99,7 +112,7 @@ kubeadm upgrade node [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase.md
index 39a2e05ab0..6b86c95054 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Use this command to invoke single phase of the node workflow
 
 ### Synopsis
 
@@ -17,7 +30,7 @@ Use this command to invoke single phase of the node workflow
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for phase</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for phase</p></td>
 </tr>
 
 </tbody>
@@ -38,7 +51,7 @@ Use this command to invoke single phase of the node workflow
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_control-plane.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_control-plane.md
index 1ca65f50a7..835eba6842 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_control-plane.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_control-plane.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upgrade the control plane instance deployed on this node, if any
 
 ### Synopsis
 
@@ -21,42 +34,42 @@ kubeadm upgrade node phase control-plane [flags]
 <td colspan="2">--certificate-renewal&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Perform the renewal of certificates used by component changed during upgrades.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Perform the renewal of certificates used by component changed during upgrades.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Do not change any state, just output the actions that would be performed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Do not change any state, just output the actions that would be performed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--etcd-upgrade&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Perform the upgrade of etcd.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Perform the upgrade of etcd.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-patches string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a directory that contains files named "target[suffix][+patchtype].extension". For example, "kube-apiserver0+merge.yaml" or just "etcd.json". "patchtype" can be one of "strategic", "merge" or "json" and they match the patch formats supported by kubectl. The default "patchtype" is "strategic". "extension" must be either "json" or "yaml". "suffix" is an optional string that can be used to determine which patches are applied first alpha-numerically.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a directory that contains files named &quot;target[suffix][+patchtype].extension&quot;. For example, &quot;kube-apiserver0+merge.yaml&quot; or just &quot;etcd.json&quot;. &quot;patchtype&quot; can be one of &quot;strategic&quot;, &quot;merge&quot; or &quot;json&quot; and they match the patch formats supported by kubectl. The default &quot;patchtype&quot; is &quot;strategic&quot;. &quot;extension&quot; must be either &quot;json&quot; or &quot;yaml&quot;. &quot;suffix&quot; is an optional string that can be used to determine which patches are applied first alpha-numerically.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for control-plane</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for control-plane</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -77,7 +90,7 @@ kubeadm upgrade node phase control-plane [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_kubelet-config.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_kubelet-config.md
index a4f5ceeafb..d2b03974c2 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_kubelet-config.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_kubelet-config.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Upgrade the kubelet configuration for this node
 
 ### Synopsis
 
@@ -21,21 +34,21 @@ kubeadm upgrade node phase kubelet-config [flags]
 <td colspan="2">--dry-run</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Do not change any state, just output the actions that would be performed.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Do not change any state, just output the actions that would be performed.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for kubelet-config</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for kubelet-config</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 </tbody>
@@ -56,7 +69,7 @@ kubeadm upgrade node phase kubelet-config [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_preflight.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_preflight.md
index 943e05cb6e..d82a193898 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_preflight.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_node_phase_preflight.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Run upgrade node pre-flight checks
 
 ### Synopsis
 
@@ -21,14 +34,14 @@ kubeadm upgrade node phase preflight [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for preflight</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for preflight</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 </tbody>
@@ -49,7 +62,7 @@ kubeadm upgrade node phase preflight [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md
index eaa58b588f..7d16866b9a 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Check which versions are available to upgrade to and validate whether your current cluster is upgradeable. To skip the internet check, pass in the optional [version] parameter
 
 ### Synopsis
 
@@ -21,56 +34,56 @@ kubeadm upgrade plan [version] [flags]
 <td colspan="2">--allow-experimental-upgrades</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--allow-release-candidate-upgrades</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to a kubeadm configuration file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of key=value pairs that describe feature gates for various features. Options are:<br/>IPv6DualStack=true|false (BETA - default=true)<br/>PublicKeysECDSA=true|false (ALPHA - default=false)</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for plan</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for plan</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--ignore-preflight-errors stringSlice</td>
+<td colspan="2">--ignore-preflight-errors strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--print-config</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specifies whether the configuration file that will be used in the upgrade should be printed or not.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Specifies whether the configuration file that will be used in the upgrade should be printed or not.</p></td>
 </tr>
 
 </tbody>
@@ -91,7 +104,7 @@ kubeadm upgrade plan [version] [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_version.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_version.md
index 658075c4ea..b86c725977 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_version.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_version.md
@@ -1,3 +1,16 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+
+Print the version of kubeadm
 
 ### Synopsis
 
@@ -21,14 +34,14 @@ kubeadm version [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">help for version</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>help for version</p></td>
 </tr>
 
 <tr>
 <td colspan="2">-o, --output string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Output format; available options are 'yaml', 'json' and 'short'</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Output format; available options are 'yaml', 'json' and 'short'</p></td>
 </tr>
 
 </tbody>
@@ -49,7 +62,7 @@ kubeadm version [flags]
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
index 62a0f32209..0b373ee423 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/kubeadm-config.md
@@ -28,9 +28,9 @@ the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubea
 has to be used.
 
 <!-- body -->
-## kubeadm config view {#cmd-config-view}
+## kubeadm config print {#cmd-config-view}
 
-{{< include "generated/kubeadm_config_view.md" >}}
+{{< include "generated/kubeadm_config_print.md" >}}
 
 ## kubeadm config print init-defaults {#cmd-config-print-init-defaults}
 

From 9713a00e3ca03a091fb99389e47364d174bdcb8e Mon Sep 17 00:00:00 2001
From: divya-mohan0209 <divya.mohan0209@gmail.com>
Date: Fri, 9 Apr 2021 10:51:53 +0530
Subject: [PATCH 511/788] Addressing whitespace nits & grammatical errors

---
 content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md b/content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md
index 1a253ffbbe..ed0da32f25 100644
--- a/content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md
+++ b/content/en/blog/_posts/2021-04-08-kubernetes-release-1.21.md
@@ -9,7 +9,7 @@ slug: kubernetes-1-21-release-announcement
 
 We’re pleased to announce the release of Kubernetes 1.21, our first release of 2021! This release consists of 51 enhancements: 13 enhancements have graduated to stable, 16 enhancements are moving to beta, 20 enhancements are entering alpha, and 2 features have been deprecated.
 
-This release cycle, we saw a major shift in ownership of processes around the release team. We moved from a  synchronous mode of communcation, where we periodically asked the community for inputs, to a mode where the community opts-in features and/or blogs to the release. These changes have resulted in an increase in collaboration and teamwork across the community. The result of all that is reflected in Kubernetes 1.21 having the most number of features in the recent times.
+This release cycle, we saw a major shift in ownership of processes around the release team. We moved from a synchronous mode of communication, where we periodically asked the community for inputs, to a mode where the community opts-in to contribute features and/or blogs to the release. These changes have resulted in an increase in collaboration and teamwork across the community. The result of all that is reflected in Kubernetes 1.21 having the most number of features in the recent times.
 
 ## Major Themes
 

From cbe453b9c90d96359b4cd1bc7c2a823b53c8d213 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Fri, 9 Apr 2021 10:42:05 +0100
Subject: [PATCH 512/788] Remove accidentally-included API reference files

Fixup for commit 965aa51daff63e2eadfd1f70d6afbc2bc755fcf2

Co-Authored-By: Philippe Martin <contact@elol.fr>
---
 .../downward-api-volume-file.md               |  40 -
 .../common-definitions/exec-action.md         |  28 -
 .../common-definitions/http-get-action.md     |  58 --
 .../common-definitions/json-schema-props.md   | 226 -----
 .../common-definitions/key-to-path.md         |  36 -
 .../common-definitions/node-affinity.md       |  72 --
 .../common-definitions/pod-affinity.md        |  73 --
 .../common-definitions/pod-anti-affinity.md   |  73 --
 .../common-definitions/tcp-socket-action.md   |  35 -
 .../pod-disruption-budget-v1beta1.md          | 738 -----------------
 .../endpoint-slice-v1beta1.md                 | 618 --------------
 .../workload-resources/container.md           | 774 ------------------
 .../workload-resources/cron-job-v1beta1.md    | 746 -----------------
 .../workload-resources/cron-job-v2alpha1.md   | 746 -----------------
 .../workload-resources/ephemeral-container.md | 571 -------------
 15 files changed, 4834 deletions(-)
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1beta1.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1beta1.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/container.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1beta1.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v2alpha1.md
 delete mode 100644 content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-container.md

diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md b/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
deleted file mode 100644
index 5aa9f29822..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/downward-api-volume-file.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "DownwardAPIVolumeFile"
-content_type: "api_reference"
-description: "DownwardAPIVolumeFile represents information to create the file containing the pod field."
-title: "DownwardAPIVolumeFile"
-weight: 2
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-DownwardAPIVolumeFile represents information to create the file containing the pod field
-
-<hr>
-
-- **path** (string), required
-
-  Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'
-
-- **fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
-
-  Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.
-
-- **mode** (int32)
-
-  Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
-- **resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
-
-  Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
deleted file mode 100644
index 0078859720..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/exec-action.md
+++ /dev/null
@@ -1,28 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "ExecAction"
-content_type: "api_reference"
-description: "ExecAction describes a \"run in container\" action."
-title: "ExecAction"
-weight: 3
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-ExecAction describes a "run in container" action.
-
-<hr>
-
-- **command** ([]string)
-
-  Command is the command line to execute inside the container, the working directory for the command  is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
deleted file mode 100644
index 1eabe9ac2d..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/http-get-action.md
+++ /dev/null
@@ -1,58 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "HTTPGetAction"
-content_type: "api_reference"
-description: "HTTPGetAction describes an action based on HTTP Get requests."
-title: "HTTPGetAction"
-weight: 4
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-HTTPGetAction describes an action based on HTTP Get requests.
-
-<hr>
-
-- **port** (IntOrString), required
-
-  Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-  <a name="IntOrString"></a>
-  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-- **host** (string)
-
-  Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
-
-- **httpHeaders** ([]HTTPHeader)
-
-  Custom headers to set in the request. HTTP allows repeated headers.
-
-  <a name="HTTPHeader"></a>
-  *HTTPHeader describes a custom header to be used in HTTP probes*
-
-  - **httpHeaders.name** (string), required
-
-    The header field name
-
-  - **httpHeaders.value** (string), required
-
-    The header field value
-
-- **path** (string)
-
-  Path to access on the HTTP server.
-
-- **scheme** (string)
-
-  Scheme to use for connecting to the host. Defaults to HTTP.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md b/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
deleted file mode 100644
index 622dba69a2..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/json-schema-props.md
+++ /dev/null
@@ -1,226 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
-  kind: "JSONSchemaProps"
-content_type: "api_reference"
-description: "JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema."
-title: "JSONSchemaProps"
-weight: 5
----
-
-
-
-`import "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"`
-
-
-JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).
-
-<hr>
-
-- **$ref** (string)
-
-
-- **$schema** (string)
-
-
-- **additionalItems** (JSONSchemaPropsOrBool)
-
-
-  <a name="JSONSchemaPropsOrBool"></a>
-  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
-
-- **additionalProperties** (JSONSchemaPropsOrBool)
-
-
-  <a name="JSONSchemaPropsOrBool"></a>
-  *JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property.*
-
-- **allOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **anyOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **default** (JSON)
-
-  default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false.
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **definitions** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **dependencies** (map[string]JSONSchemaPropsOrStringArray)
-
-
-  <a name="JSONSchemaPropsOrStringArray"></a>
-  *JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array.*
-
-- **description** (string)
-
-
-- **enum** ([]JSON)
-
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **example** (JSON)
-
-
-  <a name="JSON"></a>
-  *JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.*
-
-- **exclusiveMaximum** (boolean)
-
-
-- **exclusiveMinimum** (boolean)
-
-
-- **externalDocs** (ExternalDocumentation)
-
-
-  <a name="ExternalDocumentation"></a>
-  *ExternalDocumentation allows referencing an external resource for extended documentation.*
-
-  - **externalDocs.description** (string)
-
-
-  - **externalDocs.url** (string)
-
-
-- **format** (string)
-
-  format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:
-  
-  - bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041" - isbn10: an ISBN10 number string like "0321751043" - isbn13: an ISBN13 number string like "978-0321751041" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559" - byte: base64 encoded binary data - password: any kind of string - date: a date string like "2006-01-02" as defined by full-date in RFC3339 - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.
-
-- **id** (string)
-
-
-- **items** (JSONSchemaPropsOrArray)
-
-
-  <a name="JSONSchemaPropsOrArray"></a>
-  *JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes.*
-
-- **maxItems** (int64)
-
-
-- **maxLength** (int64)
-
-
-- **maxProperties** (int64)
-
-
-- **maximum** (double)
-
-
-- **minItems** (int64)
-
-
-- **minLength** (int64)
-
-
-- **minProperties** (int64)
-
-
-- **minimum** (double)
-
-
-- **multipleOf** (double)
-
-
-- **not** (<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **nullable** (boolean)
-
-
-- **oneOf** ([]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **pattern** (string)
-
-
-- **patternProperties** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **properties** (map[string]<a href="{{< ref "../common-definitions/json-schema-props#JSONSchemaProps" >}}">JSONSchemaProps</a>)
-
-
-- **required** ([]string)
-
-
-- **title** (string)
-
-
-- **type** (string)
-
-
-- **uniqueItems** (boolean)
-
-
-- **x-kubernetes-embedded-resource** (boolean)
-
-  x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).
-
-- **x-kubernetes-int-or-string** (boolean)
-
-  x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:
-  
-  1) anyOf:
-     - type: integer
-     - type: string
-  2) allOf:
-     - anyOf:
-       - type: integer
-       - type: string
-     - ... zero or more
-
-- **x-kubernetes-list-map-keys** ([]string)
-
-  x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.
-  
-  This tag MUST only be used on lists that have the "x-kubernetes-list-type" extension set to "map". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).
-  
-  The properties specified must either be required or have a default value, to ensure those properties are present for all list items.
-
-- **x-kubernetes-list-type** (string)
-
-  x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:
-  
-  1) `atomic`: the list is treated as a single entity, like a scalar.
-       Atomic lists will be entirely replaced when updated. This extension
-       may be used on any type of list (struct, scalar, ...).
-  2) `set`:
-       Sets are lists that must not have multiple items with the same value. Each
-       value must be a scalar, an object with x-kubernetes-map-type `atomic` or an
-       array with x-kubernetes-list-type `atomic`.
-  3) `map`:
-       These lists are like maps in that their elements have a non-index key
-       used to identify them. Order is preserved upon merge. The map tag
-       must only be used on a list with elements of type object.
-  Defaults to atomic for arrays.
-
-- **x-kubernetes-map-type** (string)
-
-  x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:
-  
-  1) `granular`:
-       These maps are actual maps (key-value pairs) and each fields are independent
-       from each other (they can each be manipulated by separate actors). This is
-       the default behaviour for all maps.
-  2) `atomic`: the list is treated as a single entity, like a scalar.
-       Atomic maps will be entirely replaced when updated.
-
-- **x-kubernetes-preserve-unknown-fields** (boolean)
-
-  x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md b/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
deleted file mode 100644
index 64068fe1a2..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/key-to-path.md
+++ /dev/null
@@ -1,36 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "KeyToPath"
-content_type: "api_reference"
-description: "Maps a string key to a path within a volume."
-title: "KeyToPath"
-weight: 6
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Maps a string key to a path within a volume.
-
-<hr>
-
-- **key** (string), required
-
-  The key to project.
-
-- **path** (string), required
-
-  The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
-
-- **mode** (int32)
-
-  Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
deleted file mode 100644
index 57b0b62715..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/node-affinity.md
+++ /dev/null
@@ -1,72 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "NodeAffinity"
-content_type: "api_reference"
-description: "Node affinity is a group of node affinity scheduling rules."
-title: "NodeAffinity"
-weight: 10
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Node affinity is a group of node affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]PreferredSchedulingTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.
-
-  <a name="PreferredSchedulingTerm"></a>
-  *An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.preference** (NodeSelectorTerm), required
-
-    A node selector term, associated with the corresponding weight.
-
-    <a name="NodeSelectorTerm"></a>
-    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's labels.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.preference.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's fields.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** (NodeSelector)
-
-  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.
-
-  <a name="NodeSelector"></a>
-  *A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms** ([]NodeSelectorTerm), required
-
-    Required. A list of node selector terms. The terms are ORed.
-
-    <a name="NodeSelectorTerm"></a>
-    *A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchExpressions** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's labels.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields** ([]<a href="{{< ref "../common-definitions/node-selector-requirement#NodeSelectorRequirement" >}}">NodeSelectorRequirement</a>)
-
-    A list of node selector requirements by node's fields.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
deleted file mode 100644
index 06291de393..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/pod-affinity.md
+++ /dev/null
@@ -1,73 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "PodAffinity"
-content_type: "api_reference"
-description: "Pod affinity is a group of inter pod affinity scheduling rules."
-title: "PodAffinity"
-weight: 16
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Pod affinity is a group of inter pod affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
-
-  <a name="WeightedPodAffinityTerm"></a>
-  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
-
-    Required. A pod affinity term, associated with the corresponding weight.
-
-    <a name="PodAffinityTerm"></a>
-    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
-
-  If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
-
-  <a name="PodAffinityTerm"></a>
-  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md b/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
deleted file mode 100644
index baebcc3c0c..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/pod-anti-affinity.md
+++ /dev/null
@@ -1,73 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "PodAntiAffinity"
-content_type: "api_reference"
-description: "Pod anti affinity is a group of inter pod anti affinity scheduling rules."
-title: "PodAntiAffinity"
-weight: 17
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-Pod anti affinity is a group of inter pod anti affinity scheduling rules.
-
-<hr>
-
-- **preferredDuringSchedulingIgnoredDuringExecution** ([]WeightedPodAffinityTerm)
-
-  The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.
-
-  <a name="WeightedPodAffinityTerm"></a>
-  *The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm** (PodAffinityTerm), required
-
-    Required. A pod affinity term, associated with the corresponding weight.
-
-    <a name="PodAffinityTerm"></a>
-    *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-  - **preferredDuringSchedulingIgnoredDuringExecution.weight** (int32), required
-
-    weight associated with matching the corresponding podAffinityTerm, in the range 1-100.
-
-- **requiredDuringSchedulingIgnoredDuringExecution** ([]PodAffinityTerm)
-
-  If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.
-
-  <a name="PodAffinityTerm"></a>
-  *Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key <topologyKey> matches that of any node on which a pod of the set of pods is running*
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.topologyKey** (string), required
-
-    This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.labelSelector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-    A label query over a set of resources, in this case pods.
-
-  - **requiredDuringSchedulingIgnoredDuringExecution.namespaces** ([]string)
-
-    namespaces specifies which namespaces the labelSelector applies to (matches against); null or empty list means "this pod's namespace"
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md b/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
deleted file mode 100644
index 991518a57a..0000000000
--- a/content/en/docs/reference/kubernetes-api/common-definitions/tcp-socket-action.md
+++ /dev/null
@@ -1,35 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "TCPSocketAction"
-content_type: "api_reference"
-description: "TCPSocketAction describes an action based on opening a socket."
-title: "TCPSocketAction"
-weight: 21
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-TCPSocketAction describes an action based on opening a socket
-
-<hr>
-
-- **port** (IntOrString), required
-
-  Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
-
-  <a name="IntOrString"></a>
-  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-- **host** (string)
-
-  Optional: Host name to connect to, defaults to the pod IP.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1beta1.md b/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1beta1.md
deleted file mode 100644
index 9120b19468..0000000000
--- a/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1beta1.md
+++ /dev/null
@@ -1,738 +0,0 @@
----
-api_metadata:
-  apiVersion: "policy/v1beta1"
-  import: "k8s.io/api/policy/v1beta1"
-  kind: "PodDisruptionBudget"
-content_type: "api_reference"
-description: "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods."
-title: "PodDisruptionBudget v1beta1"
-weight: 4
----
-
-`apiVersion: policy/v1beta1`
-
-`import "k8s.io/api/policy/v1beta1"`
-
-
-## PodDisruptionBudget {#PodDisruptionBudget}
-
-PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
-
-<hr>
-
-- **apiVersion**: policy/v1beta1
-
-
-- **kind**: PodDisruptionBudget
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-
-- **spec** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetSpec" >}}">PodDisruptionBudgetSpec</a>)
-
-  Specification of the desired behavior of the PodDisruptionBudget.
-
-- **status** (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetStatus" >}}">PodDisruptionBudgetStatus</a>)
-
-  Most recently observed status of the PodDisruptionBudget.
-
-
-
-
-
-## PodDisruptionBudgetSpec {#PodDisruptionBudgetSpec}
-
-PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
-
-<hr>
-
-- **maxUnavailable** (IntOrString)
-
-  An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
-
-  <a name="IntOrString"></a>
-  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-- **minAvailable** (IntOrString)
-
-  An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
-
-  <a name="IntOrString"></a>
-  *IntOrString is a type that can hold an int32 or a string.  When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type.  This allows you to have, for example, a JSON field that can accept a name or number.*
-
-- **selector** (<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
-
-  Label query over pods whose evictions are managed by the disruption budget.
-
-
-
-
-
-## PodDisruptionBudgetStatus {#PodDisruptionBudgetStatus}
-
-PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
-
-<hr>
-
-- **currentHealthy** (int32), required
-
-  current number of healthy pods
-
-- **desiredHealthy** (int32), required
-
-  minimum desired number of healthy pods
-
-- **disruptionsAllowed** (int32), required
-
-  Number of pod disruptions that are currently allowed.
-
-- **expectedPods** (int32), required
-
-  total number of pods counted by this disruption budget
-
-- **disruptedPods** (map[string]Time)
-
-  DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
-
-  <a name="Time"></a>
-  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-- **observedGeneration** (int64)
-
-  Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
-
-
-
-
-
-## PodDisruptionBudgetList {#PodDisruptionBudgetList}
-
-PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
-
-<hr>
-
-- **apiVersion**: policy/v1beta1
-
-
-- **kind**: PodDisruptionBudgetList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-
-- **items** ([]<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>), required
-
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified PodDisruptionBudget
-
-#### HTTP Request
-
-GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the PodDisruptionBudget
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
-
-401: Unauthorized
-
-
-### `get` read status of the specified PodDisruptionBudget
-
-#### HTTP Request
-
-GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the PodDisruptionBudget
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind PodDisruptionBudget
-
-#### HTTP Request
-
-GET /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind PodDisruptionBudget
-
-#### HTTP Request
-
-GET /apis/policy/v1beta1/poddisruptionbudgets
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudgetList" >}}">PodDisruptionBudgetList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create a PodDisruptionBudget
-
-#### HTTP Request
-
-POST /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
-
-201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
-
-202 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified PodDisruptionBudget
-
-#### HTTP Request
-
-PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the PodDisruptionBudget
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
-
-201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
-
-401: Unauthorized
-
-
-### `update` replace status of the specified PodDisruptionBudget
-
-#### HTTP Request
-
-PUT /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the PodDisruptionBudget
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
-
-201 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified PodDisruptionBudget
-
-#### HTTP Request
-
-PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the PodDisruptionBudget
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
-
-401: Unauthorized
-
-
-### `patch` partially update status of the specified PodDisruptionBudget
-
-#### HTTP Request
-
-PATCH /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the PodDisruptionBudget
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../policy-resources/pod-disruption-budget-v1beta1#PodDisruptionBudget" >}}">PodDisruptionBudget</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete a PodDisruptionBudget
-
-#### HTTP Request
-
-DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the PodDisruptionBudget
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of PodDisruptionBudget
-
-#### HTTP Request
-
-DELETE /apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1beta1.md b/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1beta1.md
deleted file mode 100644
index 1ad467b022..0000000000
--- a/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1beta1.md
+++ /dev/null
@@ -1,618 +0,0 @@
----
-api_metadata:
-  apiVersion: "discovery.k8s.io/v1beta1"
-  import: "k8s.io/api/discovery/v1beta1"
-  kind: "EndpointSlice"
-content_type: "api_reference"
-description: "EndpointSlice represents a subset of the endpoints that implement a service."
-title: "EndpointSlice v1beta1"
-weight: 3
----
-
-`apiVersion: discovery.k8s.io/v1beta1`
-
-`import "k8s.io/api/discovery/v1beta1"`
-
-
-## EndpointSlice {#EndpointSlice}
-
-EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.
-
-<hr>
-
-- **apiVersion**: discovery.k8s.io/v1beta1
-
-
-- **kind**: EndpointSlice
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata.
-
-- **addressType** (string), required
-
-  addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.
-
-- **endpoints** ([]Endpoint), required
-
-  *Atomic: will be replaced during a merge*
-  
-  endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.
-
-  <a name="Endpoint"></a>
-  *Endpoint represents a single logical "backend" implementing a service.*
-
-  - **endpoints.addresses** ([]string), required
-
-    *Set: unique values will be kept during a merge*
-    
-    addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100.
-
-  - **endpoints.conditions** (EndpointConditions)
-
-    conditions contains information about the current status of the endpoint.
-
-    <a name="EndpointConditions"></a>
-    *EndpointConditions represents the current condition of an endpoint.*
-
-  - **endpoints.conditions.ready** (boolean)
-
-    ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be "true" for terminating endpoints.
-
-  - **endpoints.conditions.serving** (boolean)
-
-    serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
-
-  - **endpoints.conditions.terminating** (boolean)
-
-    terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.
-
-  - **endpoints.hostname** (string)
-
-    hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.
-
-  - **endpoints.nodeName** (string)
-
-    nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node. This field can be enabled with the EndpointSliceNodeName feature gate.
-
-  - **endpoints.targetRef** (<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
-
-    targetRef is a reference to a Kubernetes object that represents this endpoint.
-
-  - **endpoints.topology** (map[string]string)
-
-    topology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node
-      where the endpoint is located. This should match the corresponding
-      node label.
-    * topology.kubernetes.io/zone: the value indicates the zone where the
-      endpoint is located. This should match the corresponding node label.
-    * topology.kubernetes.io/region: the value indicates the region where the
-      endpoint is located. This should match the corresponding node label.
-    This field is deprecated and will be removed in future api versions.
-
-- **ports** ([]EndpointPort)
-
-  *Atomic: will be replaced during a merge*
-  
-  ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates "all ports". Each slice may include a maximum of 100 ports.
-
-  <a name="EndpointPort"></a>
-  *EndpointPort represents a Port used by an EndpointSlice*
-
-  - **ports.port** (int32)
-
-    The port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.
-
-  - **ports.protocol** (string)
-
-    The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.
-
-  - **ports.name** (string)
-
-    The name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is dervied from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.
-
-  - **ports.appProtocol** (string)
-
-    The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.
-
-
-
-
-
-## EndpointSliceList {#EndpointSliceList}
-
-EndpointSliceList represents a list of endpoint slices
-
-<hr>
-
-- **apiVersion**: discovery.k8s.io/v1beta1
-
-
-- **kind**: EndpointSliceList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-  Standard list metadata.
-
-- **items** ([]<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>), required
-
-  List of endpoint slices
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified EndpointSlice
-
-#### HTTP Request
-
-GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the EndpointSlice
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind EndpointSlice
-
-#### HTTP Request
-
-GET /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind EndpointSlice
-
-#### HTTP Request
-
-GET /apis/discovery.k8s.io/v1beta1/endpointslices
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSliceList" >}}">EndpointSliceList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create an EndpointSlice
-
-#### HTTP Request
-
-POST /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
-
-201 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
-
-202 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified EndpointSlice
-
-#### HTTP Request
-
-PUT /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the EndpointSlice
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
-
-201 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified EndpointSlice
-
-#### HTTP Request
-
-PATCH /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the EndpointSlice
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../service-resources/endpoint-slice-v1beta1#EndpointSlice" >}}">EndpointSlice</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete an EndpointSlice
-
-#### HTTP Request
-
-DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the EndpointSlice
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of EndpointSlice
-
-#### HTTP Request
-
-DELETE /apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/container.md b/content/en/docs/reference/kubernetes-api/workload-resources/container.md
deleted file mode 100644
index d87cd422c8..0000000000
--- a/content/en/docs/reference/kubernetes-api/workload-resources/container.md
+++ /dev/null
@@ -1,774 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "Container"
-content_type: "api_reference"
-description: "A single application container that you want to run within a pod."
-title: "Container"
-weight: 2
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-## Container {#Container}
-
-A single application container that you want to run within a pod.
-
-<hr>
-
-- **name** (string), required
-
-  Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.
-
-
-
-### Image
-
-
-- **image** (string)
-
-  Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.
-
-- **imagePullPolicy** (string)
-
-  Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
-### Entrypoint
-
-
-- **command** ([]string)
-
-  Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **args** ([]string)
-
-  Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **workingDir** (string)
-
-  Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
-
-### Ports
-
-
-- **ports** ([]ContainerPort)
-
-  *Patch strategy: merge on key `containerPort`*
-  
-  *Map: unique values on keys `containerPort, protocol` will be kept during a merge*
-  
-  List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Cannot be updated.
-
-  <a name="ContainerPort"></a>
-  *ContainerPort represents a network port in a single container.*
-
-  - **ports.containerPort** (int32), required
-
-    Number of port to expose on the pod's IP address. This must be a valid port number, 0 \< x \< 65536.
-
-  - **ports.hostIP** (string)
-
-    What host IP to bind the external port to.
-
-  - **ports.hostPort** (int32)
-
-    Number of port to expose on the host. If specified, this must be a valid port number, 0 \< x \< 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
-  - **ports.name** (string)
-
-    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
-  - **ports.protocol** (string)
-
-    Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
-
-### Environment variables
-
-
-- **env** ([]EnvVar)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of environment variables to set in the container. Cannot be updated.
-
-  <a name="EnvVar"></a>
-  *EnvVar represents an environment variable present in a Container.*
-
-  - **env.name** (string), required
-
-    Name of the environment variable. Must be a C_IDENTIFIER.
-
-  - **env.value** (string)
-
-    Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
-
-  - **env.valueFrom** (EnvVarSource)
-
-    Source for the environment variable's value. Cannot be used if value is not empty.
-
-    <a name="EnvVarSource"></a>
-    *EnvVarSource represents a source for the value of an EnvVar.*
-
-  - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
-
-    Selects a key of a ConfigMap.
-
-    <a name="ConfigMapKeySelector"></a>
-    *Selects a key from a ConfigMap.*
-
-  - **env.valueFrom.configMapKeyRef.key** (string), required
-
-    The key to select.
-
-  - **env.valueFrom.configMapKeyRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **env.valueFrom.configMapKeyRef.optional** (boolean)
-
-    Specify whether the ConfigMap or its key must be defined
-
-  - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
-
-    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
-
-  - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
-
-    Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
-  - **env.valueFrom.secretKeyRef** (SecretKeySelector)
-
-    Selects a key of a secret in the pod's namespace
-
-    <a name="SecretKeySelector"></a>
-    *SecretKeySelector selects a key of a Secret.*
-
-  - **env.valueFrom.secretKeyRef.key** (string), required
-
-    The key of the secret to select from.  Must be a valid secret key.
-
-  - **env.valueFrom.secretKeyRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **env.valueFrom.secretKeyRef.optional** (boolean)
-
-    Specify whether the Secret or its key must be defined
-
-- **envFrom** ([]EnvFromSource)
-
-  List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
-  <a name="EnvFromSource"></a>
-  *EnvFromSource represents the source of a set of ConfigMaps*
-
-  - **envFrom.configMapRef** (ConfigMapEnvSource)
-
-    The ConfigMap to select from
-
-    <a name="ConfigMapEnvSource"></a>
-    *ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.
-    
-    The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
-
-  - **envFrom.configMapRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **envFrom.configMapRef.optional** (boolean)
-
-    Specify whether the ConfigMap must be defined
-
-  - **envFrom.prefix** (string)
-
-    An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
-
-  - **envFrom.secretRef** (SecretEnvSource)
-
-    The Secret to select from
-
-    <a name="SecretEnvSource"></a>
-    *SecretEnvSource selects a Secret to populate the environment variables with.
-    
-    The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
-
-  - **envFrom.secretRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **envFrom.secretRef.optional** (boolean)
-
-    Specify whether the Secret must be defined
-
-### Volumes
-
-
-- **volumeMounts** ([]VolumeMount)
-
-  *Patch strategy: merge on key `mountPath`*
-  
-  Pod volumes to mount into the container's filesystem. Cannot be updated.
-
-  <a name="VolumeMount"></a>
-  *VolumeMount describes a mounting of a Volume within a container.*
-
-  - **volumeMounts.mountPath** (string), required
-
-    Path within the container at which the volume should be mounted.  Must not contain ':'.
-
-  - **volumeMounts.name** (string), required
-
-    This must match the Name of a Volume.
-
-  - **volumeMounts.mountPropagation** (string)
-
-    mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-
-  - **volumeMounts.readOnly** (boolean)
-
-    Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
-  - **volumeMounts.subPath** (string)
-
-    Path within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).
-
-  - **volumeMounts.subPathExpr** (string)
-
-    Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive.
-
-- **volumeDevices** ([]VolumeDevice)
-
-  *Patch strategy: merge on key `devicePath`*
-  
-  volumeDevices is the list of block devices to be used by the container.
-
-  <a name="VolumeDevice"></a>
-  *volumeDevice describes a mapping of a raw block device within a container.*
-
-  - **volumeDevices.devicePath** (string), required
-
-    devicePath is the path inside of the container that the device will be mapped to.
-
-  - **volumeDevices.name** (string), required
-
-    name must match the name of a persistentVolumeClaim in the pod
-
-### Resources
-
-
-- **resources** (ResourceRequirements)
-
-  Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-  <a name="ResourceRequirements"></a>
-  *ResourceRequirements describes the compute resource requirements.*
-
-  - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-  - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-### Lifecycle
-
-
-- **lifecycle** (Lifecycle)
-
-  Actions that the management system should take in response to container lifecycle events. Cannot be updated.
-
-  <a name="Lifecycle"></a>
-  *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
-
-  - **lifecycle.postStart** (Handler)
-
-    PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.postStart.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.postStart.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.postStart.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **lifecycle.preStop** (Handler)
-
-    PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.preStop.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.preStop.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.preStop.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-- **terminationMessagePath** (string)
-
-  Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
-- **terminationMessagePolicy** (string)
-
-  Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
-- **livenessProbe** (Probe)
-
-  Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **livenessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **livenessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **livenessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **livenessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **livenessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **livenessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-- **readinessProbe** (Probe)
-
-  Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **readinessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **readinessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **readinessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **readinessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **readinessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **readinessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-### Security Context
-
-
-- **securityContext** (SecurityContext)
-
-  Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
-
-  <a name="SecurityContext"></a>
-  *SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext.  When both are set, the values in SecurityContext take precedence.*
-
-  - **securityContext.runAsUser** (int64)
-
-    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsNonRoot** (boolean)
-
-    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsGroup** (int64)
-
-    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.readOnlyRootFilesystem** (boolean)
-
-    Whether this container has a read-only root filesystem. Default is false.
-
-  - **securityContext.procMount** (string)
-
-    procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.
-
-  - **securityContext.privileged** (boolean)
-
-    Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
-
-  - **securityContext.allowPrivilegeEscalation** (boolean)
-
-    AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN
-
-  - **securityContext.capabilities** (Capabilities)
-
-    The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
-
-    <a name="Capabilities"></a>
-    *Adds and removes POSIX capabilities from running containers.*
-
-  - **securityContext.capabilities.add** ([]string)
-
-    Added capabilities
-
-  - **securityContext.capabilities.drop** ([]string)
-
-    Removed capabilities
-
-  - **securityContext.seccompProfile** (SeccompProfile)
-
-    The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options.
-
-    <a name="SeccompProfile"></a>
-    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
-
-  - **securityContext.seccompProfile.type** (string), required
-
-    type indicates which kind of seccomp profile will be applied. Valid options are:
-    
-    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-  - **securityContext.seccompProfile.localhostProfile** (string)
-
-    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
-
-  - **securityContext.seLinuxOptions** (SELinuxOptions)
-
-    The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="SELinuxOptions"></a>
-    *SELinuxOptions are the labels to be applied to the container*
-
-  - **securityContext.seLinuxOptions.level** (string)
-
-    Level is SELinux level label that applies to the container.
-
-  - **securityContext.seLinuxOptions.role** (string)
-
-    Role is a SELinux role label that applies to the container.
-
-  - **securityContext.seLinuxOptions.type** (string)
-
-    Type is a SELinux type label that applies to the container.
-
-  - **securityContext.seLinuxOptions.user** (string)
-
-    User is a SELinux user label that applies to the container.
-
-  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
-
-    The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="WindowsSecurityContextOptions"></a>
-    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
-
-  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
-
-    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
-  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
-
-    GMSACredentialSpecName is the name of the GMSA credential spec to use.
-
-  - **securityContext.windowsOptions.runAsUserName** (string)
-
-    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-### Debugging
-
-
-- **stdin** (boolean)
-
-  Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
-- **stdinOnce** (boolean)
-
-  Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
-- **tty** (boolean)
-
-  Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
-
-### Beta level
-
-
-- **startupProbe** (Probe)
-
-  StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **startupProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **startupProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **startupProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **startupProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **startupProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **startupProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-
-
-## ContainerStatus {#ContainerStatus}
-
-ContainerStatus contains details for the current status of this container.
-
-<hr>
-
-- **name** (string), required
-
-  This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.
-
-- **image** (string), required
-
-  The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images
-
-- **imageID** (string), required
-
-  ImageID of the container's image.
-
-- **containerID** (string)
-
-  Container's ID in the format 'docker://\<container_id>'.
-
-- **state** (ContainerState)
-
-  Details about the container's current condition.
-
-  <a name="ContainerState"></a>
-  *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-  - **state.running** (ContainerStateRunning)
-
-    Details about a running container
-
-    <a name="ContainerStateRunning"></a>
-    *ContainerStateRunning is a running state of a container.*
-
-  - **state.running.startedAt** (Time)
-
-    Time at which the container was last (re-)started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **state.terminated** (ContainerStateTerminated)
-
-    Details about a terminated container
-
-    <a name="ContainerStateTerminated"></a>
-    *ContainerStateTerminated is a terminated state of a container.*
-
-  - **state.terminated.containerID** (string)
-
-    Container's ID in the format 'docker://\<container_id>'
-
-  - **state.terminated.exitCode** (int32), required
-
-    Exit status from the last termination of the container
-
-  - **state.terminated.startedAt** (Time)
-
-    Time at which previous execution of the container started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **state.terminated.finishedAt** (Time)
-
-    Time at which the container last terminated
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **state.terminated.message** (string)
-
-    Message regarding the last termination of the container
-
-  - **state.terminated.reason** (string)
-
-    (brief) reason from the last termination of the container
-
-  - **state.terminated.signal** (int32)
-
-    Signal from the last termination of the container
-
-  - **state.waiting** (ContainerStateWaiting)
-
-    Details about a waiting container
-
-    <a name="ContainerStateWaiting"></a>
-    *ContainerStateWaiting is a waiting state of a container.*
-
-  - **state.waiting.message** (string)
-
-    Message regarding why the container is not yet running.
-
-  - **state.waiting.reason** (string)
-
-    (brief) reason the container is not yet running.
-
-- **lastState** (ContainerState)
-
-  Details about the container's last termination condition.
-
-  <a name="ContainerState"></a>
-  *ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.*
-
-  - **lastState.running** (ContainerStateRunning)
-
-    Details about a running container
-
-    <a name="ContainerStateRunning"></a>
-    *ContainerStateRunning is a running state of a container.*
-
-  - **lastState.running.startedAt** (Time)
-
-    Time at which the container was last (re-)started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **lastState.terminated** (ContainerStateTerminated)
-
-    Details about a terminated container
-
-    <a name="ContainerStateTerminated"></a>
-    *ContainerStateTerminated is a terminated state of a container.*
-
-  - **lastState.terminated.containerID** (string)
-
-    Container's ID in the format 'docker://\<container_id>'
-
-  - **lastState.terminated.exitCode** (int32), required
-
-    Exit status from the last termination of the container
-
-  - **lastState.terminated.startedAt** (Time)
-
-    Time at which previous execution of the container started
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **lastState.terminated.finishedAt** (Time)
-
-    Time at which the container last terminated
-
-    <a name="Time"></a>
-    *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-  - **lastState.terminated.message** (string)
-
-    Message regarding the last termination of the container
-
-  - **lastState.terminated.reason** (string)
-
-    (brief) reason from the last termination of the container
-
-  - **lastState.terminated.signal** (int32)
-
-    Signal from the last termination of the container
-
-  - **lastState.waiting** (ContainerStateWaiting)
-
-    Details about a waiting container
-
-    <a name="ContainerStateWaiting"></a>
-    *ContainerStateWaiting is a waiting state of a container.*
-
-  - **lastState.waiting.message** (string)
-
-    Message regarding why the container is not yet running.
-
-  - **lastState.waiting.reason** (string)
-
-    (brief) reason the container is not yet running.
-
-- **ready** (boolean), required
-
-  Specifies whether the container has passed its readiness probe.
-
-- **restartCount** (int32), required
-
-  The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
-
-- **started** (boolean)
-
-  Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.
-
-
-
-
-
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1beta1.md b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1beta1.md
deleted file mode 100644
index c99aa57998..0000000000
--- a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1beta1.md
+++ /dev/null
@@ -1,746 +0,0 @@
----
-api_metadata:
-  apiVersion: "batch/v1beta1"
-  import: "k8s.io/api/batch/v1beta1"
-  kind: "CronJob"
-content_type: "api_reference"
-description: "CronJob represents the configuration of a single cron job."
-title: "CronJob v1beta1"
-weight: 12
----
-
-`apiVersion: batch/v1beta1`
-
-`import "k8s.io/api/batch/v1beta1"`
-
-
-## CronJob {#CronJob}
-
-CronJob represents the configuration of a single cron job.
-
-<hr>
-
-- **apiVersion**: batch/v1beta1
-
-
-- **kind**: CronJob
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **spec** (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobSpec" >}}">CronJobSpec</a>)
-
-  Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **status** (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobStatus" >}}">CronJobStatus</a>)
-
-  Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-
-
-
-
-## CronJobSpec {#CronJobSpec}
-
-CronJobSpec describes how the job execution will look like and when it will actually run.
-
-<hr>
-
-- **jobTemplate** (JobTemplateSpec), required
-
-  Specifies the job that will be created when executing a CronJob.
-
-  <a name="JobTemplateSpec"></a>
-  *JobTemplateSpec describes the data a Job should have when created from a template*
-
-  - **jobTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-    Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-  - **jobTemplate.spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
-
-    Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **schedule** (string), required
-
-  The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.
-
-- **concurrencyPolicy** (string)
-
-  Specifies how to treat concurrent executions of a Job. Valid values are: - "Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - "Replace": cancels currently running job and replaces it with a new one
-
-- **startingDeadlineSeconds** (int64)
-
-  Optional deadline in seconds for starting the job if it misses scheduled time for any reason.  Missed jobs executions will be counted as failed ones.
-
-- **suspend** (boolean)
-
-  This flag tells the controller to suspend subsequent executions, it does not apply to already started executions.  Defaults to false.
-
-- **successfulJobsHistoryLimit** (int32)
-
-  The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.
-
-- **failedJobsHistoryLimit** (int32)
-
-  The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.
-
-
-
-
-
-## CronJobStatus {#CronJobStatus}
-
-CronJobStatus represents the current state of a cron job.
-
-<hr>
-
-- **active** ([]<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
-
-  A list of pointers to currently running jobs.
-
-- **lastScheduleTime** (Time)
-
-  Information when was the last time the job was successfully scheduled.
-
-  <a name="Time"></a>
-  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-
-
-
-
-## CronJobList {#CronJobList}
-
-CronJobList is a collection of cron jobs.
-
-<hr>
-
-- **apiVersion**: batch/v1beta1
-
-
-- **kind**: CronJobList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **items** ([]<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>), required
-
-  items is the list of CronJobs.
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `get` read status of the specified CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v1beta1/cronjobs
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJobList" >}}">CronJobList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create a CronJob
-
-#### HTTP Request
-
-POST /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
-
-202 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified CronJob
-
-#### HTTP Request
-
-PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
-
-401: Unauthorized
-
-
-### `update` replace status of the specified CronJob
-
-#### HTTP Request
-
-PUT /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified CronJob
-
-#### HTTP Request
-
-PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `patch` partially update status of the specified CronJob
-
-#### HTTP Request
-
-PATCH /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v1beta1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete a CronJob
-
-#### HTTP Request
-
-DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of CronJob
-
-#### HTTP Request
-
-DELETE /apis/batch/v1beta1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v2alpha1.md b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v2alpha1.md
deleted file mode 100644
index fc6a933131..0000000000
--- a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v2alpha1.md
+++ /dev/null
@@ -1,746 +0,0 @@
----
-api_metadata:
-  apiVersion: "batch/v2alpha1"
-  import: "k8s.io/api/batch/v2alpha1"
-  kind: "CronJob"
-content_type: "api_reference"
-description: "CronJob represents the configuration of a single cron job."
-title: "CronJob v2alpha1"
-weight: 13
----
-
-`apiVersion: batch/v2alpha1`
-
-`import "k8s.io/api/batch/v2alpha1"`
-
-
-## CronJob {#CronJob}
-
-CronJob represents the configuration of a single cron job.
-
-<hr>
-
-- **apiVersion**: batch/v2alpha1
-
-
-- **kind**: CronJob
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-  Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **spec** (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobSpec" >}}">CronJobSpec</a>)
-
-  Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **status** (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobStatus" >}}">CronJobStatus</a>)
-
-  Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-
-
-
-
-## CronJobSpec {#CronJobSpec}
-
-CronJobSpec describes how the job execution will look like and when it will actually run.
-
-<hr>
-
-- **jobTemplate** (JobTemplateSpec), required
-
-  Specifies the job that will be created when executing a CronJob.
-
-  <a name="JobTemplateSpec"></a>
-  *JobTemplateSpec describes the data a Job should have when created from a template*
-
-  - **jobTemplate.metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
-
-    Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-  - **jobTemplate.spec** (<a href="{{< ref "../workload-resources/job-v1#JobSpec" >}}">JobSpec</a>)
-
-    Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
-
-- **schedule** (string), required
-
-  The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.
-
-- **concurrencyPolicy** (string)
-
-  Specifies how to treat concurrent executions of a Job. Valid values are: - "Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - "Replace": cancels currently running job and replaces it with a new one
-
-- **failedJobsHistoryLimit** (int32)
-
-  The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
-
-- **startingDeadlineSeconds** (int64)
-
-  Optional deadline in seconds for starting the job if it misses scheduled time for any reason.  Missed jobs executions will be counted as failed ones.
-
-- **successfulJobsHistoryLimit** (int32)
-
-  The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
-
-- **suspend** (boolean)
-
-  This flag tells the controller to suspend subsequent executions, it does not apply to already started executions.  Defaults to false.
-
-
-
-
-
-## CronJobStatus {#CronJobStatus}
-
-CronJobStatus represents the current state of a cron job.
-
-<hr>
-
-- **active** ([]<a href="{{< ref "../common-definitions/object-reference#ObjectReference" >}}">ObjectReference</a>)
-
-  A list of pointers to currently running jobs.
-
-- **lastScheduleTime** (Time)
-
-  Information when was the last time the job was successfully scheduled.
-
-  <a name="Time"></a>
-  *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*
-
-
-
-
-
-## CronJobList {#CronJobList}
-
-CronJobList is a collection of cron jobs.
-
-<hr>
-
-- **apiVersion**: batch/v2alpha1
-
-
-- **kind**: CronJobList
-
-
-- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
-
-  Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-
-- **items** ([]<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>), required
-
-  items is the list of CronJobs.
-
-
-
-
-
-## Operations {#Operations}
-
-
-
-<hr>
-
-
-
-
-
-
-### `get` read the specified CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `get` read status of the specified CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
-
-401: Unauthorized
-
-
-### `list` list or watch objects of kind CronJob
-
-#### HTTP Request
-
-GET /apis/batch/v2alpha1/cronjobs
-
-#### Parameters
-
-
-- **allowWatchBookmarks** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-- **watch** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJobList" >}}">CronJobList</a>): OK
-
-401: Unauthorized
-
-
-### `create` create a CronJob
-
-#### HTTP Request
-
-POST /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
-
-202 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Accepted
-
-401: Unauthorized
-
-
-### `update` replace the specified CronJob
-
-#### HTTP Request
-
-PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
-
-401: Unauthorized
-
-
-### `update` replace status of the specified CronJob
-
-#### HTTP Request
-
-PUT /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-201 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): Created
-
-401: Unauthorized
-
-
-### `patch` partially update the specified CronJob
-
-#### HTTP Request
-
-PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `patch` partially update status of the specified CronJob
-
-#### HTTP Request
-
-PATCH /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}/status
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldManager** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
-
-
-- **force** (*in query*): boolean
-
-  <a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../workload-resources/cron-job-v2alpha1#CronJob" >}}">CronJob</a>): OK
-
-401: Unauthorized
-
-
-### `delete` delete a CronJob
-
-#### HTTP Request
-
-DELETE /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs/{name}
-
-#### Parameters
-
-
-- **name** (*in path*): string, required
-
-  name of the CronJob
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
-
-401: Unauthorized
-
-
-### `deletecollection` delete collection of CronJob
-
-#### HTTP Request
-
-DELETE /apis/batch/v2alpha1/namespaces/{namespace}/cronjobs
-
-#### Parameters
-
-
-- **namespace** (*in path*): string, required
-
-  <a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
-
-
-- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
-
-  
-
-
-- **continue** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
-
-
-- **dryRun** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
-
-
-- **fieldSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
-
-
-- **gracePeriodSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
-
-
-- **labelSelector** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
-
-
-- **limit** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
-
-
-- **pretty** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
-
-
-- **propagationPolicy** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
-
-
-- **resourceVersion** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
-
-
-- **resourceVersionMatch** (*in query*): string
-
-  <a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
-
-
-- **timeoutSeconds** (*in query*): integer
-
-  <a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
-
-
-
-#### Response
-
-
-200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
-
-401: Unauthorized
-
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-container.md b/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-container.md
deleted file mode 100644
index 7355af9df8..0000000000
--- a/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-container.md
+++ /dev/null
@@ -1,571 +0,0 @@
----
-api_metadata:
-  apiVersion: ""
-  import: "k8s.io/api/core/v1"
-  kind: "EphemeralContainer"
-content_type: "api_reference"
-description: "An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging."
-title: "EphemeralContainer"
-weight: 3
----
-
-
-
-`import "k8s.io/api/core/v1"`
-
-
-An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.
-
-<hr>
-
-- **name** (string), required
-
-  Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.
-
-- **targetContainerName** (string)
-
-  If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container is run in whatever namespaces are shared for the pod. Note that the container runtime must support this feature.
-
-
-
-### Image {#Image}
-
-
-- **image** (string)
-
-  Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images
-
-- **imagePullPolicy** (string)
-
-  Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
-
-### Entrypoint {#Entrypoint}
-
-
-- **command** ([]string)
-
-  Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **args** ([]string)
-
-  Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
-
-- **workingDir** (string)
-
-  Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.
-
-### Environment variables {#Environment-variables}
-
-
-- **env** ([]EnvVar)
-
-  *Patch strategy: merge on key `name`*
-  
-  List of environment variables to set in the container. Cannot be updated.
-
-  <a name="EnvVar"></a>
-  *EnvVar represents an environment variable present in a Container.*
-
-  - **env.name** (string), required
-
-    Name of the environment variable. Must be a C_IDENTIFIER.
-
-  - **env.value** (string)
-
-    Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".
-
-  - **env.valueFrom** (EnvVarSource)
-
-    Source for the environment variable's value. Cannot be used if value is not empty.
-
-    <a name="EnvVarSource"></a>
-    *EnvVarSource represents a source for the value of an EnvVar.*
-
-  - **env.valueFrom.configMapKeyRef** (ConfigMapKeySelector)
-
-    Selects a key of a ConfigMap.
-
-    <a name="ConfigMapKeySelector"></a>
-    *Selects a key from a ConfigMap.*
-
-  - **env.valueFrom.configMapKeyRef.key** (string), required
-
-    The key to select.
-
-  - **env.valueFrom.configMapKeyRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **env.valueFrom.configMapKeyRef.optional** (boolean)
-
-    Specify whether the ConfigMap or its key must be defined
-
-  - **env.valueFrom.fieldRef** (<a href="{{< ref "../common-definitions/object-field-selector#ObjectFieldSelector" >}}">ObjectFieldSelector</a>)
-
-    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\<KEY>']`, `metadata.annotations['\<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
-
-  - **env.valueFrom.resourceFieldRef** (<a href="{{< ref "../common-definitions/resource-field-selector#ResourceFieldSelector" >}}">ResourceFieldSelector</a>)
-
-    Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
-
-  - **env.valueFrom.secretKeyRef** (SecretKeySelector)
-
-    Selects a key of a secret in the pod's namespace
-
-    <a name="SecretKeySelector"></a>
-    *SecretKeySelector selects a key of a Secret.*
-
-  - **env.valueFrom.secretKeyRef.key** (string), required
-
-    The key of the secret to select from.  Must be a valid secret key.
-
-  - **env.valueFrom.secretKeyRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **env.valueFrom.secretKeyRef.optional** (boolean)
-
-    Specify whether the Secret or its key must be defined
-
-- **envFrom** ([]EnvFromSource)
-
-  List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.
-
-  <a name="EnvFromSource"></a>
-  *EnvFromSource represents the source of a set of ConfigMaps*
-
-  - **envFrom.configMapRef** (ConfigMapEnvSource)
-
-    The ConfigMap to select from
-
-    <a name="ConfigMapEnvSource"></a>
-    *ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.
-    
-    The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.*
-
-  - **envFrom.configMapRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **envFrom.configMapRef.optional** (boolean)
-
-    Specify whether the ConfigMap must be defined
-
-  - **envFrom.prefix** (string)
-
-    An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
-
-  - **envFrom.secretRef** (SecretEnvSource)
-
-    The Secret to select from
-
-    <a name="SecretEnvSource"></a>
-    *SecretEnvSource selects a Secret to populate the environment variables with.
-    
-    The contents of the target Secret's Data field will represent the key-value pairs as environment variables.*
-
-  - **envFrom.secretRef.name** (string)
-
-    Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-
-  - **envFrom.secretRef.optional** (boolean)
-
-    Specify whether the Secret must be defined
-
-### Volumes {#Volumes}
-
-
-- **volumeMounts** ([]VolumeMount)
-
-  *Patch strategy: merge on key `mountPath`*
-  
-  Pod volumes to mount into the container's filesystem. Cannot be updated.
-
-  <a name="VolumeMount"></a>
-  *VolumeMount describes a mounting of a Volume within a container.*
-
-  - **volumeMounts.mountPath** (string), required
-
-    Path within the container at which the volume should be mounted.  Must not contain ':'.
-
-  - **volumeMounts.name** (string), required
-
-    This must match the Name of a Volume.
-
-  - **volumeMounts.mountPropagation** (string)
-
-    mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.
-
-  - **volumeMounts.readOnly** (boolean)
-
-    Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.
-
-  - **volumeMounts.subPath** (string)
-
-    Path within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).
-
-  - **volumeMounts.subPathExpr** (string)
-
-    Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive.
-
-- **volumeDevices** ([]VolumeDevice)
-
-  *Patch strategy: merge on key `devicePath`*
-  
-  volumeDevices is the list of block devices to be used by the container.
-
-  <a name="VolumeDevice"></a>
-  *volumeDevice describes a mapping of a raw block device within a container.*
-
-  - **volumeDevices.devicePath** (string), required
-
-    devicePath is the path inside of the container that the device will be mapped to.
-
-  - **volumeDevices.name** (string), required
-
-    name must match the name of a persistentVolumeClaim in the pod
-
-### Lifecycle {#Lifecycle}
-
-
-- **terminationMessagePath** (string)
-
-  Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.
-
-- **terminationMessagePolicy** (string)
-
-  Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.
-
-### Debugging {#Debugging}
-
-
-- **stdin** (boolean)
-
-  Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.
-
-- **stdinOnce** (boolean)
-
-  Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false
-
-- **tty** (boolean)
-
-  Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.
-
-### Not allowed {#Not-allowed}
-
-
-- **ports** ([]ContainerPort)
-
-  Ports are not allowed for ephemeral containers.
-
-  <a name="ContainerPort"></a>
-  *ContainerPort represents a network port in a single container.*
-
-  - **ports.containerPort** (int32), required
-
-    Number of port to expose on the pod's IP address. This must be a valid port number, 0 \< x \< 65536.
-
-  - **ports.hostIP** (string)
-
-    What host IP to bind the external port to.
-
-  - **ports.hostPort** (int32)
-
-    Number of port to expose on the host. If specified, this must be a valid port number, 0 \< x \< 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
-
-  - **ports.name** (string)
-
-    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
-
-  - **ports.protocol** (string)
-
-    Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
-
-- **resources** (ResourceRequirements)
-
-  Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod.
-
-  <a name="ResourceRequirements"></a>
-  *ResourceRequirements describes the compute resource requirements.*
-
-  - **resources.limits** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-  - **resources.requests** (map[string]<a href="{{< ref "../common-definitions/quantity#Quantity" >}}">Quantity</a>)
-
-    Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
-
-- **lifecycle** (Lifecycle)
-
-  Lifecycle is not allowed for ephemeral containers.
-
-  <a name="Lifecycle"></a>
-  *Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.*
-
-  - **lifecycle.postStart** (Handler)
-
-    PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.postStart.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.postStart.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.postStart.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **lifecycle.preStop** (Handler)
-
-    PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
-
-    <a name="Handler"></a>
-    *Handler defines a specific action that should be taken*
-
-  - **lifecycle.preStop.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **lifecycle.preStop.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **lifecycle.preStop.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-- **livenessProbe** (Probe)
-
-  Probes are not allowed for ephemeral containers.
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **livenessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **livenessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **livenessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **livenessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **livenessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **livenessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **livenessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-- **readinessProbe** (Probe)
-
-  Probes are not allowed for ephemeral containers.
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **readinessProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **readinessProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **readinessProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **readinessProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **readinessProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **readinessProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **readinessProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-- **securityContext** (SecurityContext)
-
-  SecurityContext is not allowed for ephemeral containers.
-
-  <a name="SecurityContext"></a>
-  *SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext.  When both are set, the values in SecurityContext take precedence.*
-
-  - **securityContext.runAsUser** (int64)
-
-    The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsNonRoot** (boolean)
-
-    Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.runAsGroup** (int64)
-
-    The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-  - **securityContext.readOnlyRootFilesystem** (boolean)
-
-    Whether this container has a read-only root filesystem. Default is false.
-
-  - **securityContext.procMount** (string)
-
-    procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.
-
-  - **securityContext.privileged** (boolean)
-
-    Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.
-
-  - **securityContext.allowPrivilegeEscalation** (boolean)
-
-    AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN
-
-  - **securityContext.capabilities** (Capabilities)
-
-    The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime.
-
-    <a name="Capabilities"></a>
-    *Adds and removes POSIX capabilities from running containers.*
-
-  - **securityContext.capabilities.add** ([]string)
-
-    Added capabilities
-
-  - **securityContext.capabilities.drop** ([]string)
-
-    Removed capabilities
-
-  - **securityContext.seccompProfile** (SeccompProfile)
-
-    The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options.
-
-    <a name="SeccompProfile"></a>
-    *SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.*
-
-  - **securityContext.seccompProfile.type** (string), required
-
-    type indicates which kind of seccomp profile will be applied. Valid options are:
-    
-    Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.
-
-  - **securityContext.seccompProfile.localhostProfile** (string)
-
-    localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
-
-  - **securityContext.seLinuxOptions** (SELinuxOptions)
-
-    The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container.  May also be set in PodSecurityContext.  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="SELinuxOptions"></a>
-    *SELinuxOptions are the labels to be applied to the container*
-
-  - **securityContext.seLinuxOptions.level** (string)
-
-    Level is SELinux level label that applies to the container.
-
-  - **securityContext.seLinuxOptions.role** (string)
-
-    Role is a SELinux role label that applies to the container.
-
-  - **securityContext.seLinuxOptions.type** (string)
-
-    Type is a SELinux type label that applies to the container.
-
-  - **securityContext.seLinuxOptions.user** (string)
-
-    User is a SELinux user label that applies to the container.
-
-  - **securityContext.windowsOptions** (WindowsSecurityContextOptions)
-
-    The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-    <a name="WindowsSecurityContextOptions"></a>
-    *WindowsSecurityContextOptions contain Windows-specific options and credentials.*
-
-  - **securityContext.windowsOptions.gmsaCredentialSpec** (string)
-
-    GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.
-
-  - **securityContext.windowsOptions.gmsaCredentialSpecName** (string)
-
-    GMSACredentialSpecName is the name of the GMSA credential spec to use.
-
-  - **securityContext.windowsOptions.runAsUserName** (string)
-
-    The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
-
-- **startupProbe** (Probe)
-
-  Probes are not allowed for ephemeral containers.
-
-  <a name="Probe"></a>
-  *Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.*
-
-  - **startupProbe.exec** (<a href="{{< ref "../common-definitions/exec-action#ExecAction" >}}">ExecAction</a>)
-
-    One and only one of the following should be specified. Exec specifies the action to take.
-
-  - **startupProbe.httpGet** (<a href="{{< ref "../common-definitions/http-get-action#HTTPGetAction" >}}">HTTPGetAction</a>)
-
-    HTTPGet specifies the http request to perform.
-
-  - **startupProbe.tcpSocket** (<a href="{{< ref "../common-definitions/tcp-socket-action#TCPSocketAction" >}}">TCPSocketAction</a>)
-
-    TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported
-
-  - **startupProbe.initialDelaySeconds** (int32)
-
-    Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.periodSeconds** (int32)
-
-    How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.
-
-  - **startupProbe.timeoutSeconds** (int32)
-
-    Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
-
-  - **startupProbe.failureThreshold** (int32)
-
-    Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
-
-  - **startupProbe.successThreshold** (int32)
-
-    Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
-
-
-

From 0bfee99fa4e12d2d703083e09cd53d50365a5e3a Mon Sep 17 00:00:00 2001
From: Soichiro KAWAMURA <mail@w-st.com>
Date: Fri, 9 Apr 2021 19:57:57 +0900
Subject: [PATCH 513/788] change links to ja pages

---
 .../concepts/configuration/pod-priority-preemption.md     | 8 ++++----
 content/ja/docs/concepts/policy/resource-quotas.md        | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/ja/docs/concepts/configuration/pod-priority-preemption.md b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
index bd0f8e5feb..c06b3b41b0 100644
--- a/content/ja/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/ja/docs/concepts/configuration/pod-priority-preemption.md
@@ -8,7 +8,7 @@ weight: 70
 
 {{< feature-state for_k8s_version="v1.14" state="stable" >}}
 
-[Pod](/docs/concepts/workloads/pods/)は _priority_（優先度）を持つことができます。 
+[Pod](/ja/docs/concepts/workloads/pods/)は _priority_（優先度）を持つことができます。 
 優先度は他のPodに対する相対的なPodの重要度を示します。
 もしPodをスケジューリングできないときには、スケジューラーはそのPodをスケジューリングできるようにするため、優先度の低いPodをプリエンプトする（追い出す）ことを試みます。
 
@@ -21,7 +21,7 @@ weight: 70
 クラスターの全てのユーザーが信用されていない場合、悪意のあるユーザーが可能な範囲で最も高い優先度のPodを作成することが可能です。これは他のPodが追い出されたりスケジューリングできない状態を招きます。
 管理者はResourceQuotaを使用して、ユーザーがPodを高い優先度で作成することを防ぐことができます。
 
-詳細は[デフォルトで優先度クラスの消費を制限する](/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+詳細は[デフォルトで優先度クラスの消費を制限する](/ja/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
 を参照してください。
 {{< /warning >}}
 
@@ -49,7 +49,7 @@ PriorityClassはnamespaceによらないオブジェクトで、優先度クラ
 PriorityClassオブジェクトのメタデータの`name`フィールドにて名称を指定します。
 値は`value`フィールドで指定し、必須です。
 値が大きいほど、高い優先度を示します。
-PriorityClassオブジェクトの名称は[DNSサブドメイン名](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)として適切であり、かつ`system-`から始まってはいけません。
+PriorityClassオブジェクトの名称は[DNSサブドメイン名](/ja/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)として適切であり、かつ`system-`から始まってはいけません。
 
 PriorityClassオブジェクトは10億以下の任意の32ビットの整数値を持つことができます。
 それよりも大きな値は通常はプリエンプトや追い出すべきではない重要なシステム用のPodのために予約されています。
@@ -237,4 +237,4 @@ kubeletによるリソース不足時のPodの追い出しでは、リソース
 
 ## {{% heading "whatsnext" %}}
 
-* PriorityClassと関連付けてResourceQuotaを使用することに関して [デフォルトで優先度クラスの消費を制限する](/ja/docs/concepts/policy/resource-quotas/#デフォルトで優先度クラスの消費を制限する)
+* PriorityClassと関連付けてResourceQuotaを使用することに関して [デフォルトで優先度クラスの消費を制限する](/ja/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
diff --git a/content/ja/docs/concepts/policy/resource-quotas.md b/content/ja/docs/concepts/policy/resource-quotas.md
index e7368a8f94..bfbc6afc27 100644
--- a/content/ja/docs/concepts/policy/resource-quotas.md
+++ b/content/ja/docs/concepts/policy/resource-quotas.md
@@ -484,7 +484,7 @@ count/secrets                 1     4
 
 リソースクォータは集約されたクラスターリソースを分割しますが、ノードに対しては何の制限も行わないことに注意して下さい。例: 複数の名前空間のPodは同一のノード上で稼働する可能性があります。
 
-## デフォルトで優先度クラスの消費を制限する
+## デフォルトで優先度クラスの消費を制限する {#limit-priority-class-consumption-by-default}
 
 例えば"cluster-services"のように、条件に一致するクォータオブジェクトが存在する場合に限り、特定の優先度のPodを名前空間で許可することが望ましい場合があります。
 

From eb558e244272b5ae4e94ede41494b76bfe6e518e Mon Sep 17 00:00:00 2001
From: Adhityaa Chandrasekar <adtac@google.com>
Date: Fri, 9 Apr 2021 15:57:31 +0000
Subject: [PATCH 514/788] blog: make minor corrections to upcoming SuspendJob
 post

Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
---
 .../2021-04-12-introducing-suspended-jobs.md  | 26 +++++++++----------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md b/content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md
index 4d46453adf..d03c9d0c25 100644
--- a/content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md
+++ b/content/en/blog/_posts/2021-04-12-introducing-suspended-jobs.md
@@ -8,7 +8,7 @@ layout: blog
 **Author:** Adhityaa Chandrasekar (Google)
 
 [Jobs](/docs/concepts/workloads/controllers/job/) are a crucial part of
-Kubernetes API. While other kinds of workloads such as [Deployments](/docs/concepts/workloads/controllers/deployment/),
+Kubernetes' API. While other kinds of workloads such as [Deployments](/docs/concepts/workloads/controllers/deployment/),
 [ReplicaSets](/docs/concepts/workloads/controllers/replicaset/),
 [StatefulSets](/docs/concepts/workloads/controllers/statefulset/), and
 [DaemonSets](/docs/concepts/workloads/controllers/daemonset/)
@@ -33,8 +33,8 @@ in order to use it.
 
 ## API changes
 
-A new boolean field `suspend` is introduced in the Job spec API. Let's say I
-create the following Job:
+We introduced a new boolean field `suspend` into the `.spec` of Jobs. Let's say
+I create the following Job:
 
 ```yaml
 apiVersion: batch/v1
@@ -55,17 +55,17 @@ spec:
 ```
 
 Jobs are not suspended by default, so I'm explicitly setting the `suspend` field
-to true in the above Job spec. In the above example, the Job controller will
-refrain from creating Pods until I'm ready to start the Job, which I can do by
-updating the field to false.
+to _true_ in the `.spec` of the above Job manifest. In the above example, the
+Job controller will refrain from creating Pods until I'm ready to start the Job,
+which I can do by updating `suspend` to false.
 
 As another example, consider a Job that was created with the `suspend` field
 omitted. The Job controller will happily create Pods to work towards Job
 completion. However, before the Job completes, if I explicitly set the field to
 true with a Job update, the Job controller will terminate all active Pods that
 are running and will wait indefinitely for the flag to be flipped back to false.
-Pod termination is done by sending a SIGTERM signal to all active Pods; the
-[graceful termination period](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)
+Typically, Pod termination is done by sending a SIGTERM signal to all container
+processes in the Pod; the [graceful termination period](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)
 defined in the Pod spec will be honoured. Pods terminated this way will not be
 counted as failures by the Job controller.
 
@@ -91,8 +91,8 @@ resources are cheaper at night than in the morning. If I have a long-running Job
 that takes multiple days to complete, being able to suspend the Job in the
 morning and then resume it in the evening every day can reduce costs.
 
-Since this field is a part of the Job spec, CronJobs automatically get this
-feature for free too.
+Since this field is a part of the Job spec, [CronJobs](/docs/concepts/workloads/controllers/cron-jobs/)
+automatically get this feature for free too.
 
 ## References and next steps
 
@@ -101,9 +101,9 @@ the decisions we have taken, consider reading the [enhancement proposal](https:/
 There's more detail on suspending and resuming jobs in the documentation for [Job](/docs/concepts/workloads/controllers/job#suspending-a-job).
 
 As previously mentioned, this feature is currently in alpha and is available
-only if you explicitly opt-in through the `SuspendJob` feature gate. If this is
-a feature you're interested in, please consider testing suspended Jobs in your
-cluster and providing feedback. You can discuss this enhancement [on GitHub](https://github.com/kubernetes/enhancements/issues/2232).
+only if you explicitly opt-in through the `SuspendJob` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/).
+If this is a feature you're interested in, please consider testing suspended
+Jobs in your cluster and providing feedback. You can discuss this enhancement [on GitHub](https://github.com/kubernetes/enhancements/issues/2232).
 The SIG Apps community also [meets regularly](https://github.com/kubernetes/community/tree/master/sig-apps#meetings)
 and can be reached through [Slack or the mailing list](https://github.com/kubernetes/community/tree/master/sig-apps#contact).
 Barring any unexpected changes to the API, we intend to graduate the feature to

From 0db9ae6f528bf9c564777aee444c086eb7f8fb2b Mon Sep 17 00:00:00 2001
From: Sergey Kanzhelev <S.Kanzhelev@live.com>
Date: Fri, 9 Apr 2021 13:36:25 -0700
Subject: [PATCH 515/788] Revert "update container-lifecycle-hooks.md for third
 hook handler i,.e. TCP"

---
 .../en/docs/concepts/containers/container-lifecycle-hooks.md   | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/containers/container-lifecycle-hooks.md b/content/en/docs/concepts/containers/container-lifecycle-hooks.md
index 49cc25ffbd..96569f9518 100644
--- a/content/en/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/en/docs/concepts/containers/container-lifecycle-hooks.md
@@ -50,11 +50,10 @@ A more detailed description of the termination behavior can be found in
 ### Hook handler implementations
 
 Containers can access a hook by implementing and registering a handler for that hook.
-There are three types of hook handlers that can be implemented for Containers:
+There are two types of hook handlers that can be implemented for Containers:
 
 * Exec - Executes a specific command, such as `pre-stop.sh`, inside the cgroups and namespaces of the Container.
 Resources consumed by the command are counted against the Container.
-* TCP - Opens a TCP connecton against a specific port on the Container.
 * HTTP - Executes an HTTP request against a specific endpoint on the Container.
 
 ### Hook handler execution

From 370c659ddcfd5a73eeefedff6782a70a464b0bc8 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 8 Apr 2021 21:35:08 +0800
Subject: [PATCH 516/788] Regenerate reference for kube-proxy configuration

---
 .../config-api/kube-proxy-config.v1alpha1.md  | 66 ++++++++++++++++++-
 1 file changed, 65 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md b/content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md
index e66bcd7443..86315856b2 100644
--- a/content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md
+++ b/content/en/docs/reference/config-api/kube-proxy-config.v1alpha1.md
@@ -9,7 +9,6 @@ auto_generated: true
 ## Resource Types 
 
 
-  
 - [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
   
     
@@ -535,3 +534,68 @@ this always falls back to the userspace proxy.
 
     
   
+  
+    
+
+## `ClientConnectionConfiguration`     {#ClientConnectionConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+ClientConnectionConfiguration contains details for constructing a client.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>kubeconfig</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   kubeconfig is the path to a KubeConfig file.</td>
+</tr>
+    
+  
+<tr><td><code>acceptContentTypes</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the
+default value of 'application/json'. This field will control all connections to the server used by a particular
+client.</td>
+</tr>
+    
+  
+<tr><td><code>contentType</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   contentType is the content type used when sending data to the server from this client.</td>
+</tr>
+    
+  
+<tr><td><code>qps</code> <B>[Required]</B><br/>
+<code>float32</code>
+</td>
+<td>
+   qps controls the number of queries per second allowed for this connection.</td>
+</tr>
+    
+  
+<tr><td><code>burst</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   burst allows extra queries to accumulate when a client is exceeding its rate.</td>
+</tr>
+    
+  
+</tbody>
+</table>

From a7175d4d354f52c1b4ecad818375c97040c54217 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 7 Apr 2021 19:54:45 +0800
Subject: [PATCH 517/788] Revise extending kubernetes

This PR fixes two problems. One was introduced by f265aed794bf30cf5c321941d608a157c9e72a32
which folded the extend-cluster.md content into section index without
removing the original content. Another problem is that the PNG images
stored on google docs are not accessible by some people from the far end
of the planet.
---
 .../docs/concepts/extend-kubernetes/_index.md |  13 +-
 .../extend-kubernetes/control-plane.png       | Bin 0 -> 67498 bytes
 .../extend-kubernetes/extend-cluster.md       | 207 ------------------
 .../extend-kubernetes/extension-points.png    | Bin 0 -> 114442 bytes
 .../concepts/extend-kubernetes/flowchart.png  | Bin 0 -> 163257 bytes
 5 files changed, 4 insertions(+), 216 deletions(-)
 create mode 100644 content/en/docs/concepts/extend-kubernetes/control-plane.png
 delete mode 100644 content/en/docs/concepts/extend-kubernetes/extend-cluster.md
 create mode 100644 content/en/docs/concepts/extend-kubernetes/extension-points.png
 create mode 100644 content/en/docs/concepts/extend-kubernetes/flowchart.png

diff --git a/content/en/docs/concepts/extend-kubernetes/_index.md b/content/en/docs/concepts/extend-kubernetes/_index.md
index a2d24e3cb2..083dca6964 100644
--- a/content/en/docs/concepts/extend-kubernetes/_index.md
+++ b/content/en/docs/concepts/extend-kubernetes/_index.md
@@ -84,18 +84,15 @@ and by kubectl.
 Below is a diagram showing how the extension points interact with the
 Kubernetes control plane.
 
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vQBRWyXLVUlQPlp7BvxvV9S1mxyXSM6rAc_cbLANvKlu6kCCf-kGTporTMIeG5GZtUdxXz1xowN7RmL/pub?w=960&h=720">
-
 <!-- image source drawing https://docs.google.com/drawings/d/1muJ7Oxuj_7Gtv7HV9-2zJbOnkQJnjxq-v1ym_kZfB-4/edit?ts=5a01e054 -->
-
+![Extension Points and the Control Plane](/docs/concepts/extend-kubernetes/control-plane.png)
 
 ## Extension Points
 
 This diagram shows the extension points in a Kubernetes system.
 
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vSH5ZWUO2jH9f34YHenhnCd14baEb4vT-pzfxeFC7NzdNqRDgdz4DDAVqArtH4onOGqh0bhwMX0zGBb/pub?w=425&h=809">
-
 <!-- image source diagrams: https://docs.google.com/drawings/d/1k2YdJgNTtNfW7_A8moIIkij-DmVgEhNrn3y2OODwqQQ/view -->
+![Extension Points](/docs/concepts/extend-kubernetes/extension-points.png)
 
 1.   Users often interact with the Kubernetes API using `kubectl`. [Kubectl plugins](/docs/tasks/extend-kubectl/kubectl-plugins/) extend the kubectl binary. They only affect the individual user's local environment, and so cannot enforce site-wide policies.
 2.   The apiserver handles all requests. Several types of extension points in the apiserver allow authenticating requests, or blocking them based on their content, editing content, and handling deletion. These are described in the [API Access Extensions](#api-access-extensions) section.
@@ -107,12 +104,11 @@ This diagram shows the extension points in a Kubernetes system.
 
 If you are unsure where to start, this flowchart can help. Note that some solutions may involve several types of extensions.
 
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vRWXNNIVWFDqzDY0CsKZJY3AR8sDeFDXItdc5awYxVH8s0OLherMlEPVUpxPIB1CSUu7GPk7B2fEnzM/pub?w=1440&h=1080">
-
 <!-- image source drawing: https://docs.google.com/drawings/d/1sdviU6lDz4BpnzJNHfNpQrqI9F19QZ07KnhnxVrp2yg/edit -->
+![Flowchart for Extension](/docs/concepts/extend-kubernetes/flowchart.png)
 
 ## API Extensions
+
 ### User-Defined Types
 
 Consider adding a Custom Resource to Kubernetes if you want to define new controllers, application configuration objects or other declarative APIs, and to manage them using Kubernetes tools, such as `kubectl`.
@@ -161,7 +157,6 @@ After a request is authorized, if it is a write operation, it also goes through
 
 ## Infrastructure Extensions
 
-
 ### Storage Plugins
 
 [Flex Volumes](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/flexvolume-deployment.md
diff --git a/content/en/docs/concepts/extend-kubernetes/control-plane.png b/content/en/docs/concepts/extend-kubernetes/control-plane.png
new file mode 100644
index 0000000000000000000000000000000000000000..fa61599e94118e87046cd0bb2211d859c8b93751
GIT binary patch
literal 67498
zcmeGEWmr^E*EkN(Ffh~*A`Jo}NH@|kC@KviokN3kNXGyop@d53&;}Ap2?zs%AT1~z
zLkUQC4Dmms-uLsnzrLSexVYw=IeV|Y*4k^YKE&#1-6tbqBmsdyWU4C4x*!nVAP5B3
zAc6wl%riZc20p;vy7zB`%KMpDftx3GMymFjnjl`_ng~PyrUF55Lx5ipm=Q$q=Nbf3
z12g^iS{KayZwwv?6zv4U|2M`2_{9CF0Dr*jf1eN(`2QfH@cuIzZx99f&ox*BH|=Ua
zH*OZOhl;T`2t;}n_Xh@LX43=EjGgq1e2g?TWNh4B1+8q|t?dN;T|IEKKyv;vz@@95
zj}@E0tBaerjK4hlpAj;^HSTL6cD6r5e4ORkjWl)G?znr|u}KID3ktI<kg&0_$$8n@
z%jhcK`!^l9lV^AI@$rxm67uu&6Z8`kboX))5|Ngc77`W}5)~ByMhJKZxcON53%GgT
z_zUDeaFp%5ZM>X3e4O0f*l=*Itlb~`$g{KK7W(hcUp#%B?Eh~iH}8LB0R#%+o(PEu
z3Jd)gHZWBV_pOY!my;c^G7i3ih}@r%|MT6yb>xI_i~m2!{H65Iw*aXMByvLkWt##C
zgT)*n2m}YIDl6&vgV)Uo5wsm6pLw2G6h*3Bp?sjHb4BTH+-F1TAiAE9N6-<6fB}cC
z&x&VxpP$7Pyhfr5j3`$>`w?-R3}l?U8QqS+Cpu|foLXG(-R$r0&vtkCwK?7R(dp(D
zh&3GM!VGbelA{<Se@(audb!&Ps)$?<JwGLbc=cEw=-Y^}LA$R)*0(u;p)uiP_9)Xj
zw~R<AnaR&4yR7{4ivy3&sq814MKgAh(wa38Z*TASx=Y<7mnWs`Iir?k5xYX_H8QW8
z{>+{iPBPAJSL1`WBk8&0!UcZ+Fr5gfU`fq=QOnLHDOC8{XTk!?(ACrPPLD_4rrqyO
zYI5tu8?`@kYv_~kKGSkeutD3=Plc0Sy?WK`GOpXx*VEJ6^X*%u_|bYyR>A7(6-y!i
zo3jIz!aVCniY1l%cU}4XHG<_s-4rdYupyRb%sW0)79O7~U3bJ;g!mV$<Vv>|0zKOk
zZB%x4vA%Amv;JrPVkRhW1O1xyb(#iG_FGgq4#+`tQ9WncWh8OoeP7@v4aR{o`}W*c
zUdU;=Y_4JBA+aIPfkm|d(G(54zf28;3NNYxWK!Z-90LYm05?XK&?0z+&_gvY+}-~@
zLL;di&7uF#K;RLI9;Om52sKvY{ok=g@HNK&oB0P!2LevwBhsa-`*)T9J|!?2{eM>h
z#&SaeI-V(|zKr{a(Z8`ggAM<?N;_Nx;I}#KL$cm~vHvqxC4A)8A6ovq3N)@2Nxfp7
zR9y7G1i(qE%l~&35giynKV2k0Ck^C(#_FOTll_NBf8mB(3$qb4(A)C7`G4315RioT
z-ueId`DZM3B$#KggH2tv<9~?-So*)K{Qp_{{|if16rj7iyZn-pe(xhre4mDK<sNPg
zIko&}TSVCaDGLYgczQrIvm`XUMoZoL`~m_3Ei6;H85vIcZw)?@7#r6La>^8GF22Z9
z;<-PfKcg#{sU`GR;sDvL7K8wjtNRkno58@4A@O)undz_(VcP8Cq*LG&Uos@;aHzp_
z{9RVUb7~BwL06LO#YD61)MayA7diSYx^36E0`g2nPq^i^hH>hvk8gE4S`erHwQCb}
z+NJe>@dR|7E=n>%@tOd%9nK>P=i5u14Ra`E`TpfsUyhB_>Z(r6N0-CrtG;VL>Bd9q
zX6dPIc~d`ql6K}U3JCa=`tgyzPVMFK0iEp9Hj9plcLWtnvE{J9lQ`+R(gkLgqqp8U
zDB*b4t;u?MmZO7+6VDuy^De8|v5$#o4)Hc;{w5O)4kmP#LS-(w_wxT?Bm*1;cNxKy
zSHOKS8XjoUP%~vO+tc^0rmQSZ!ugl@T2MzoElKyztILpCM%PdJI&tp|-d*AUuH$)!
z=OeEHi6G05J8xnh@*2Kjyj^biR!`bewfKX{8?PnQl<sP|S#g{lTRb0Hu3Wb*p5rQs
za0-TZ?CXZ!ql|>k`X^^eVFn#>+{@ibl8HT$)@D_@oLLHwKg1tzI=?e`A1IaEDWd52
z@Qv={$IVmAOI8-oqnoTrB!*S~YAwXD2xUBDmZ0Ji2W}6?nqcUI0KutSul@UTrKe9V
zMml+Kk8cEx-Z6ORJB`rKC3v>)-g4%+;XBdsX!L#J?$S7G;r;Pyo>yg^;OHg363eiQ
z*z>btqIV>Ak4O8>U9&bO#=F<oQSAvAo=@VDcK$Qj#v=tkYexWEQF}M1q1K~S4*U2=
zq7w0i)p6a3N6*dLJ-48-^x4qbIGv$S?kBs&wdV=4rk(vk3|h3*haxSP)`~FfNQp)+
z!t~bkgpA)tf=%6ryn8TGL7u(kzM26{#0T|Kd7Zj$iQ~OQ*M039k!_#vU=v0{N40cP
z-;H;t@U3^w&9)LOz0*lGsLxm#D}ML0+)$BwG3%&vaQqKfmLkE%sGiQPGLyJ)(H_t=
zU8dVK@A2(RY^rlUW9fL`WuQ3s0H2{fq52NY$mi1Y_xDyI8TlLX^?_%{=Q@p;#TyWz
zRR)IZ!E>?L_Zx?@<Lky^8!Neu6X}*=<U-sDjMBXc)9!wzwLYpkWtPG73XKa-)dggO
zKD{?;o+@wL){tEt{Jar#{9rgQQ|<6mC#!XxrJtwH`bWdEO78^4vE~ymMAw!d_tyRO
z>DI63CykHC-<6UviFPGyR6Xm<k|#A-RjYMu4K{@dZ<Up)9kym&)_5n#jxkC+vVLFZ
z>acvM&_08mb@o{5s`_@7%V;a|uzKS0ZzbX_Cqqk*x8~!^MVQ=q+BH$^!aHl6b`RIJ
zhSRR-vRjk_+8(jMfUK+f9%VC;9IL~q4O0_)U$ghCzc#a`7InvKdkmu<<vOuR)Z-r2
z6$#0D*CuaW!9w`t_Tb|PugMT?<8x?yS<j5T>pE-8gr8*yxwAJ@<8gA~#vx&D?TrLk
zhTj31HRGG+jg%xOh7d*Kk(rx)reohiF033Z`~y5VGo&sCl4j4fkLv6NOryO8jhnij
zlAjD6%I<pvE&N>GsNNI&$cLS#8LFAC`fT3l_=4>0SYGy`+8aTm_#;)&*p`sxd(Xw$
z23_OD{KxfAk_t6iL60d`XD?6bWc?F2-ebYh_)$4blYUdvwfBq(FGV|^!WbznZuhE8
z(Laf-{%6uOzXEnr^Iowi6=2=P=}|(vy-p7|rqnAwE@(;jY&NW_6>^^TN9U1_Se!Cl
z{pg_ajQUZ(FCjr@>RPcnZ8W>sOug#EcQtoiO{=T}JjSJny4Nl(0w)4l{GZ%<G$UGX
z%5PCEY?S|Q^ff_UtoufVNXxie&^lSMG#B%h(4I(<UIZUeNXd<sl`=$puA-lUnWp^{
z<2x3CyVp&dtuyqI)&twaN3+#8g7O%<?~PuW0rgscx?UK1Jaex#o&%!rQ{9TVlpmRO
zfAZRdsl5S#Y<<t+Vd6V1f#Hk(dhlz#H)<Y7Dp&Y?<_(E|4&BCi4N3d3uBaQUVeB+I
zfH)M;qi&^(Ip~nfm(<;I8fg=3dRswux)_3ONy{aU<1URZ!PC4eOLskG+N>AdYAiM1
zZI|-s=WD}goAg|vORMn5y}jWZHESauC$`_rSU;2TKdF4AGuXK4%@&+wXhM5daWc=A
zNID^%s?-)Z7<tuB^`m}zuAppC)Gfy!^Z_F^CN+-;JI-G(Xw`faYTz~cQ5dX4oBTax
zCy<PBeyZkuV0`9C_4tVIQK8UNsg#R>uyjOX%VBf;c}Vqv^p0@jZqq}TU;A&;e+k`q
za8pQUD2h39+X&8%Q-CT0P}^{=_p|E7fTW|?AUe9HHRFQ4#GhTpMV)6JF$FCa*KM4=
zBCo66@ckg)utjIToE|$a{aSqVwLXE+HNnc+(2LgJKb$G6O?i95E+i&C%z2x=^SxF$
zu#3{3t(%?`eNYj42YV82<$FqyHZj+E_*B=q)@O$bJIgl!brv^Q8G2J(ai>15n?EGe
zd7<MA<1Oc?GzJRULyq4oW4UB`zYHVwGwt%N2h!O249X}i^lV4UY@!pc<?Arnucki|
zY73ku9@)yb46~|!zU9~Tpmsosa9r`;tPA1hjD*IPAKI#OaTZZl=${otw~Cr)-ZZ4V
z_v=*Ug~g{&q=kF2I4@7)3E+h>wPhv%?k}4YJ%;f9#gnC!R1@A0J|QUUfJb@i8@)CZ
zl@u-KG@)JZZwDv_V=qxIf^9H{ma)CWY4>R6klU4mLur}2>xGw9@(ml#ufAT|ZS9AB
zo1vGQdW$wZoz-r#PRk34cyIElyEY;P>wHYF7(CE-*q^5ObWbo_QIY%Y57-G+p=px5
z<*%H0uLt3!ZNbM?TocBh$zg7+@9U-&l3TWxLe`CsrH5Z?E@c?(4=7#?)=pMM9(-Dt
zk+sj8USAzmBoTr)Uw(C#z++96K5tTQd(M)U`?zWPV0&+*`mQ>bz>Ot&17oP^_7eV@
z{}m%|w_8CX3sbslqHB6)djhB&8j7Djlk!NJ^N$K#v|$T8kUQxvrUICx6A058_vE{t
z!VnP>)ftjADav^3k)GA=;<tB<5^i3<9(>kzjdLAj-AgZNj}m*tpRFil^wMuUL|bDG
znrBn*=n=Z)I=MkVMK8){+eS6b(%c(88J*rYe-Sq0Xdc9Z=*$`6I=;F!^+tVL)$K=p
z>`(V<PK9PK^YrMG*~Au?_o%7zh-Y6%-cL?wHTry@%k@V?gSTl*qI<$gJ4kCaC$B~5
z2M}8vJAa%`nDeKq^VzXJ<`Jruw>tl&=j*iUBw;f_{m!()N(yQ=o-2R&@j^(!j`j0-
zgJy<Q|E52NVXe}18I|Ns{+qLFAxJ~B?*37T=bb?^K~~N67eQ`S*DZq|xz@V7OU@ji
zem=oM_a2Sr7s?;4d_Mf?z&b8>e0TPs%e(eK!u8Jhf*UXALFD$+aG^)@&yx6}LvO9P
zWk+Yqnv2cHiD?hGZXiE~%OZQiEkIiy7T}wBO}+)PjLLrlR9jnQPL?vDZg#)GoBD#}
zScZ1%ltx-|WPBO6hbHq5dc%i>?Q6JyW_k1aY+kM@w4X`EVb!CZ){?#+?JSoTsCt;j
ze9_YgbNbcs_}6l$cTPF&nGxv%6MJvs^6ps%>)x`=!Vk6#v0-6>j-H-#>XPMAx=;Nd
zbemi(Mk=eG(DBoqx3QiaZK$(0eRMa^b~9d2Cc83Az5*Q_(jbu0Vw_2>=11`fOI>lW
zOTSsJLPvA|!>u7t^FMlo`vG*Z?LomlueV6$ID<#Wll;y%l#RP{*GXv;y{DtPHONo~
z{AEx5UD11Gu~P42Kc$ySk?vi0DC_Q@xtXtXZ{nJ7YN}2wtef*TZ~CCxUW)mqx1E@U
z0&jVFuV}9(cV{`<a#@5Hp}HtB<|6(<Zh(bi?n&p~-s6%viuQxE1~#o&zL_%9*A$1Y
zZ$Cu6a_Ne=;NzYNjb?56$>rWMLblV7&P9{M&5UlfTokBf2xxGiZhy{iYnmUmJd+D;
zChIfp{G$tY8ItgFw4>Oq**F<IqQb8$^_ZJkB^buViA>71@J!>6@rIYgR*Kx_?N32=
zgN6f)Y%S+PYxRDkx|XbKpVi|<@~ho9+bNDv-FeLWZjEYoYjtn<r8)E3{fZhz#kteF
zXUFUVbUh^qlg(Y%lW!7M<GXwO22UjUoPvofhhNXlP9-G8eI!k>wxAO)#@2Kv&Cm73
z3=pP26&E|#Meqs}rsH{NDSl<}l06zWf3j@XwJ-)HAsJ|8Qi!Xgc!~@6+tE-Fokdi=
z(x+86;8raYY$!obrAJG`3)72O1D)C5N|~=k*TTJ#YGSN!9;#l*S~ctG*mJfy4lSxY
znDgc38(bKA%`5<~m((FdYNanPwF|1AAV89Ip91uBqqipal5SY|&&|D}R0NNaVfvUV
zN<I46o<Fnf49>5Vx*Zh&7QUKJ^jsUke4BSn@9Q!r+PMw`W0ez1@kx!<6@Fg(hzDnP
zxN$l+DycxznoX5{8=TwW$@vMxrX3ZP*!d>78b1?a3aRFmgv3$tqTM<QITLqQL9B%j
z#}V|2SP2&i-d;ZX{4x`oRZbdSgEM|HzITND->cWZ$JKv}8ZkM=-c}tL2qN=)diI`)
zWlnnjgpQA^;Q{Ev?n^``)Q`$#e<+&u>axwXvuuqoqV-En2o}}P32zI7Kk4K;aW=F1
zGfUA*(X0^H*B_*jlvxT<uwU?@xmd5WJ_*Ltr9eAyl6jLq&AR<{4dTN$AJ5*J)gIAS
z(YHO}I~XBPP7gWDhzV+J`^`w@9%PYvi^}mX?nL(i{?qO`_TAyPP7n=A*b_}s(_myp
z%;QteEqot*$MM3UCQkGQL6q9A3x)#YfK>aUj3gmQvEilHdroZVNNFzQd2P_-nm=MB
zk2SO&&%}l{r5Ob;H>B-QS1x|}uxaND=UGD@U&C29t0kpR-u(O$qqgRf+zsxPUgtYc
zn!9|Q-soI+e*eXICMBIP^GxbK#|zJX#GKH%-GX`y5V__vJKMcvWICI`9DiW;zp_HH
zPHaZ9PH{Z;rBR6YHOIOLLR=?#`wel5GX=x);{h(-zHnL*oz`-aYAujbbERgV3WC2a
z4{1qt-JK)A+o*D*O0(g^Ky90-I&QN&Vg6hO2|PMKJK%3bG2Ku?hdQ56qCIp6nc(ai
z1O*_93)S5nQEJ`pXbyxNob!o+gvs7bkS8beyQnz6&E{bm{HHthTLTo%{n-pDbmdGh
zTz|e=<{DoiN*Ta~oStV!K?mcV>vuJ{mc8s+8aIS{-}UlLOD!?e=#nJn9|sz>w$W@w
zV28JrsQZ7O^(4;POf<ND83mj32&Jb6bku#1F#F_1!zAqzGaWLlf7r{Ew>W^;=A#$m
zFp%jcY37v>vey9;QX`^}J2R49n}7EuT30Iiz_^pe(QtNGC|JDsqkw6xIQLMfAPZ#$
zMV<HbQRmT#YOrOiO-LB=Q@z_KHaaIox~Il?jW?PorHD|s#)~c3ZxdvU@+U4Oc1cx;
zSS+`n679K?i$9Apy)i@Y_>zcW3&aem*SPmYGHVt*3t0fW74oSxU8~aKH}!e(p1evG
z(7W&eT>32FI7PqH)*7h>PSGbJv}Hwxc>F3{nMRs}$Tu7D^tk75=Pj}#AAnNqOwx%>
ze#TMdrp;Sb*Pfo~>6m#Qg{;vSR9H-}Ra&e*%Zedk6KJrxJpM^O+xR)hcc%DoBHA)q
z+gk_-JG5lIShKcA=^NL-%0A!YdYG|P?QZo}CY%2QiA{qfcP4(_a0k2C)fpkgm-k<3
z_zZ~m?uoT1DQXg_RWuqXcitNw*|Fh{T1xEQ;cT@#Tp;>wL4d!U|1-OL@3G&MgKYKe
zE$&X^O1ZH8&CB%_md1%m%L{~nNlg_H>((swh>$YxM%ptQcZkg1QcG<3-geEL*Lj3f
z>_<G-=vRGZu2rUND6L#oUZ>m5xth5+aqaE{_p6SH+sY`(N=}R`!j3<|G08uC!E<&X
zcwsajtB|;lADiSF8|Sl!@0jlfae-9hzc#x{2%=WVv63y+)#SUi;1c8=9?|Bz@tEHz
zH^Qk#5MX$m7#o31M;M$&(T*O~5eMN<AvUBoI{ppk!XQwjgLoe5%mvraIi6TTBEh`)
zKCLL{uT*S;a`#)oQz>x~R%i7^2@l5$P1}346<wm+hJwG}I!A1D5I#g{=t{3&eybaC
zZkgWLw%{@jGIBMvuc*FDN;kGu81|v}Imt-F#-Tw?U_44($h4uIRxq7aq42zO<v}gw
z>hX(|w?E%TQRHdlN-21VSWOxAI-3au_de-fp1(_aJNGPGLh-pMD=Xj0!sr8~Z!;yX
zjY+A54T;`e9JQFlw!}9&$9ApLhhtxWfYB|ZUc@ne!7^}ODND|(smAS&p>NUMoD4>>
zOia_>mp;f^dj+k8Ba!)4**CTWd9t0qZ#mj7e7(4$@T0Ba$7_NGK5BQ89tFFh<L%-v
z_NH|oZfcq?&cdJIXSrW7<Q^v{;w@+oK`SB&Kpho79R*Cj)^#lGi0}9-`yzOCR@bT#
zdnK<t@^#IbK%PpmGYr??FK&c4z?bnU@h`(niZ1cSZW7{^L1;FPbDq`txdDG=YB&``
zic2|@wiNtMDua0p9)@Q{zNRRu_TL~H?7qAGz{|{0^MdS{_LzzuY6}6>ED_-&@*zE5
zxiICPr-PZ@115<l2M%kOZLfT1hcBa2K9NvQ-c>U0(=xr1+zr0*)nr5F0AbZv!}>Ig
z^qr5k?A&uwjL_#ci?AJ@pw(%mk*c1V*bwZP2v?4idMdvN?~h1@(9xM|XRq|%J@_(n
zy7er)zHWzMEAy6fE2G@hOz?(u*8XUoL=cc1+&<5faQ+Hg3mIe?!9L%c6MgAg%DFpB
zmPe7;s9ttJ%JD;?SI_F0P|EqPTd!s2!^OL?=@comxQJ(&Ijl0r_hLzjr+GWMaJ{6F
zwRS;EzBBZ4iAxq+4|zYzvpi;L6I!R{aeZ|ds}pn(*;>0G*f{C+V<W|Zr6%aq-0rfz
zA@3YpyXG?Bh8;gKoI>btcYJ-E`uKgD`w&@^1+hhA*)}zX5gmn<FraebA~FY31ve(+
z>ojW_cz-tWa5~zB5~2n>GrN86Bj}JDwFH%q@vv;`q}$&pCRf>zlJyJ7Rb<_L#nRE9
zo~Il*2Sqmpu>5aMd)`ca>q1f_GqXt>iSD<)gm_RON6O^G1Cc$t%1}H@up(FykGYpL
zj^cD`b9r0o6JkR2V?Q017UMllZSr6>O+)f|J=5*!K(e+|Al($P8~i1QV&Xw(9@P}X
z3a#f*{<O<+{YmAq0nthIOzpL^5^W+uIz7}5@uRhn(@(yKcMT_G&n>IH=Uz?KtBNsQ
zY>Y~Htx#gO?%yc`!f7c#EuCEV`aQ7h?(xG&Jiw<O$ZPJ8QuVp6oQ6kZ*}PwmCqz2b
zzb?p1w$0$_*MfRRbYAsFZZ`Dtp)Y;eT1Hpn2D$9`&*i*Fow>pG7{puzL8Y!?rRin}
zKeM{}3Egq_QEjDiBJ-i9PVVek@DtaThlI@Dspj6TPKU&1_X2agB-~ioFMqdnH)hm+
zicpP`D0sc7-Me=jaPG3>+u>?KTdQ8H8lg*!dPYODdJSaqhPa>H%LR|<Hq!;m91&8o
z^-Flf@?syP0~_n8sg7g&)9|(+Y%)(X2`}_z1ehG{qRz|_f-2G-q?RI)Vjd%YO<X^C
z`+#6u5MDa23bL&B+Nu2p9!arf9h29TCSDlse)0QORH`0t(f%tSbt$P7u--h|nm%4&
z?UA+8e0km1Z<a5zV}xc3LZSHe?Uy#Q8k5Jed#r|SM*(qm6-MBr=iS%6e-Q}9Vd|zr
zF7M<cH(iWr_$E5H&M1ViuI|%EvK&o6RO+6)#mqh)ra5Gyw&|zREkb1<FiL!wEdSi~
z*5ExksfSyo=&1Wtd#?Y+IYQNefm^TWjWPwZbU%<uwkG}6_c3<iqPpecSfD$1#2NWv
z_WJ!c&SH!7oF{hIE;cZTeAex`N#7L_uC{60gpi%pXamT>`zSgf-!Bf@6y%EbzMqkD
zI#jVW#M{*{K{F{LBomSP`vq~+(@MrcO3ZN4Cb3J7(Q@r@_z5VFn+!TO5^#1KjU`qt
z6bhsT64W^9ewhwtEqYZS!<$L3Vgi+V?S))IbkXH;S8ILeeGIFlfWJ#270~tRJf=Km
z#=sfr+!OV<SNH_L5WSo4^b<GbOEfd+gERLG%5y^^;(oceJpb@Mv##>)w!2&H<295|
z`I8`mX|`kQIl-L6>QCPG1YuS$O{%<>gl!1->@%MTGA5gB`Yk1Y?P@q+LeJ7STowOq
zELLjDcYNJ2LbvCn!ik_l@6*eT4_FHcij&bdhI!EyoJ~4XJ)LE%!|N9gmK00I4YpT)
z>)+tsc{f0J?YAUB*oDYMzw{=;`TK|X$J0k}QzCV_lna%|2}1_A&833wzb5TokR&Gk
z)n8+`{fcG(8@6>KK2h1^j?vGoIv27YtgeS1S*Nm)VYxoS)dM=;{khJsHo&cPb}x^(
zDLm;m>0?QxcE-x!4EdNqc+ZvHdnd#A$3?N-HAmOxL|acAr~}tiap^c1>=>B?vwOhM
z4(Am{x4wd0OR*>SfjNVtAy}|p=7PzO3ZpOzdZJ(gkHL7-y+UCjp1$z7pQOBXdgP|n
z6JN=tPw|;#7S-1#_Rt8={-_(C9cnbLzl&mh*P9#17b-r}S-ix~57)Ww%*#eZNncZ2
zd&&811H0AyLEXJczJ&f^e!TrsjG5B$tJ{_FFZ+#!Joux8pdXlh>Rv+(U(DXWbX2Dm
zfGG@VeDo37jsAHwwB{bEe&4KyEIRt`Sf*45ZOt0|g*%8Y?sq;+FZfHvmLXmOCOPCP
z!n0)eY#=(fCP&t{>SmwG69yT;I-Ka_o=v@w?zz&(PM^b(%pgg7O?HboY}NbDXQykd
zN6TAE8RZdaH@z_lRDO})2DD!k&|?O=4z+YteCG}O3<Jk!V()`z4mL=9@DA}Bz@}ga
z4q=KpN(>VMgywp%LmCsX_ZIbmWi~-S7FWXQgO~LPZWOGXS+l)iKn<|FOG&4Df|g{?
z*)Ac213S_fd}OznWn3WD7~Klgj35|aC%~R%$G7uL93Jtc;K_(lf3W8d;?i;N#3|<r
zIV`t*2Wm%Q;AT9wM^L&j?V5kP=ZIUWIi|VlYT3K-biqwAQ)0iEV*eML@4{K5%j#zH
zA;~-SX&OHFcq@HMQT2FDc(e|eZS19?g$18T#KPByoG6&0=?-ya0FM)ldQ7C^B?q&*
zWa9em-Q|9i9j6}KsfTxi^i!pPer?JR#H6|IEcRn47c$n(U-jYXw`?*$@BjE>#Z=mU
zC;v`xJVEVUR_kw-7Td3yOJ{#dusl4|e}esn*ULO~6u0LpeB9OB%X@ZwOLVw<Rv68S
zLSUD)H$n&;Xii}D5ELKXw2T(s%0;U}#K%x(*c5b|y?}k14$%_9%FW%k?(CmS0@_Q#
zNh}A<LpTk%&=H4}uY0i-ih~cKTHrv?%+rz^3Pk=)$Do)-2M^2wx?2u)q7wH7l%m?~
zQMc!2zCK4cQ{B0VEuHq9<~%XZ_V`8MJD;&kz-q}`lI^*Wn^jTOoOVQ9v^Bnm6n6Kq
z(@-bWl)99<moAyogTQ~ftLjIjrS1nWb=}Cg456ChWDj%fZGGN!!ak?I#dc|GxI9~o
zy?AhuJ|1yGbMpr>IIdCn(r13kxztY0(N4<HbPAU3dtv801vW49T=+U-owe~rJVfs`
zmo_tD-g=iTcQ;+<+*I~qg5@n+>Do@Rj)QdX)AZbH?@g9SYW>I6wtd2{{lr!a2N4ac
zOGrb`z@IDFTFdtZ?*wb$3Ee2V+@Arte`o{+e@id7RJKHLZ_^4B9W!A1Bs;J-a-)-Q
z98-h6CKTYDe>_oSk0yN6#m_*K63IMUtw`<2;7ZbS-ROb>P@lJ4VrgAWXPW0v+FvHe
zJJz{PixQGCRzE6D$Y}}Qc^@7$cOaqhJ$oVU%gy&3DPJ<SZ{*52-QJ!prut?qd`tsB
zm3!#9sKF#ws$Ii#wUf{=x}?u^g4X|Af`O@4Sm#1kts_I<V)&4V!278KCW)^*+Yg@>
z`<?z!RT<`8{8qsv(f%w{<BqbOQO>17SDw(0NSMi2hrV<cd(v3G;pf9Nc0*4*M^FzI
zFjx&c#oVXLBA3MJq7@dAPYpgAxYp<Kf2eA?WbAG=mSMa#(|z;#<y9fb2yypC^|!0<
zAG|7Qy*;q7+@DLMFxa-c+oAUBKB@Tofu<{tpEOP1nbrJev~*eYWa6tXGE{0#Ji{Iq
zQ_PIl3GNoQaU1uc8%`tRR7PmVAX1<e{B}EGgJ#eSWaZZtx>_;bA-jgeSVJREktBZD
zF({9J>49`R+({JPk>SB7!df_V`v)PA?t7%1LEs@A#DaMi{tQI&{yTH;6kdm`orOdx
zo@P`Mtr_pP^`?5QI$~ar^5=n!r)RsJC~M87RP1U`@4`Ykt)6&5#eyJH^}J|2-=bWC
zT6NFt(ty(vi8qavf}V8%OTS@GSkMv!*X>h9F)|vL)U=ObgO{0t9Q=ed{wA-D9d^;K
z{8yudD81|{XKDLm_ZiYjD1V1}$i{l7NG;tX1ghaNZ4u{WV)?T^&d5AzMXE7!grc&Q
z;+KnGkC8$GS`f2tyV->lLvE;ABslEMjB$BHx&!_}7;gSNl7Yt3#ETJ#^>PT;N$P{6
zy0Xyk;8u}od^5Qgb2shTxIgL$zL{$9V4Bkv)(mdJvOE-dY@DH!AWy-YS51qR8K!yu
zu=POn%={vhh4<50AVTi**0bmxaXk%bOR*^ZqNwbP@m#`%orYsg<kqsM#sbys<|K70
zBV^r~$fC(jwPbdG8{bW-p2<UM5P}NooFN7>ew)_8r+44&!;tfI5?ike8sAnLlLEek
z#4TLq|5jnQkUo73UmvsMYdLq)Z2Uoe8zy8Mc=HlDiu3~;z6_89vJ6ZGFJIatLXy!1
zL)5i7lk>Vpna81DpQ%0k;j5@nzJ6L8VI`+&b<%OvxzHQEN~+c>PH^P>`3FPH(e<6s
zsL54Q%|VjstC*`*h2bS=9^$j-N$%Yr!cOr#tSt0ik4K9L;S5Dq65zULC282Dh{Eb?
zI?V+pP>X4J_d#S-HR-WQaeEKZUF{N37csd6$V(_^5*tuYLA(;tskF?e>b;0dG*i&P
zxINiVQ(#zuR;wemd!K>_@U}pEphNxM8#C@!`anhl{T1lS2()4NvGb-KX=-ccIl~a8
z$b|a&$)te2kaDPVn*pI_%>-dZ+PWsZD0mGZ#n}y_d2}dUt}>h{cMY`${f;Nag6c6g
zL~P;TWDjORWpy4Qk4*Kx+P#1hQ;Aeo!RlLneEn6p&;b_}Ln}qLwZ?RNJ79P)&L|2v
zP+0l32PVH=ho_foK4;$rj_JhZuK>!kz=lO{&b+1$tAd#4FYz0|dIhWmzwk7}nZmDw
z$nZXgcZ0Bszd97+&)M(bSjB`!O16<n=|#tc7daqD>r4}j$H>uP;o3;Ca5Z!y`VHI<
z895M)?DRm)!EZQ|so)e}k~pkVo1J^T^h{Os9OZ<+LNv%3-~4?)M*-?jKu<CS62}{>
zdytX9n)t_Vuk`>)#REIFRoz%HInc4>k(9qwFR)Dych(R>(mI&rX%kBId?iKWAt6^L
zpOp2nDdAE^Lt^l|>E|>Z?q`>`&lFJd9vpB$xeV>6{2IR1@aB7BCiZipZ3|Zjh(o0v
zeJYBAer(p@G3ONqbi`=2sbMBtC>`AH#0*$~_d6HfboereTtV(>r|4$twSSePWCUBe
zN>JE6(mhj9JXAhB6s?RR_uxc_?nooCV_N~UoeRV`9<3qZ@wV3%9Szk);A^CWSIF^9
zL8ExgY~^ZYmkCL<%OPNe{>3yAe^^xKwh?ZEHCqb9w!$D*Od<A0D98;e1EvG{Y`w<I
zCh_p4XsEdc*26c;C`U?>k>Xr&5-T7#cD=~)p_&MqJQsrhzH@zB8?v(IM>t4LPijUs
zsJ|eM;K3xy1Uv_dE`ZrFU_jAidfW|^nNI{|hp$ir&QhqiB}Nmey`lwu3lSI9xssL(
zqT;~SNgvS@FnkYuD~xtdLl6#t3uL#!+x&wh>5wTBAA*&wI(kGP@04D4K=xnIEc70C
zC$MndP9Z$KYzjOJy!5AW2c#gHHE&SE=kM&Ab5&1p1BFpvQ9W!l3@Cz(9GUMhe<}>q
z3Kn#RK|chs>d)Y75Txg}?dxVkXiRYUk^`qVyjpD-1*ao7$vH{hbV6LIWZIU3KieM%
zP0Rc9D?PiF_$nsc3zvNMI^QcbTN-!zI9y7QA?D=q_GW`~HbLdXOV}7IB3h9aVPdhM
zA@rvKFedybY>}hD4S~uN#|{ai#n8bh$Tt4=H4mr`X_7M`PF8VUce>$V!)zyc`_eFB
zKq4$q3fpw>;s8qoC3-CrVPc~3r>X@Osg!`MKXgJMSbG#+UAGjLyShRwhtCg@BA6Kl
zVa@v;m5V2_28_J^0IQPufX<?{cX_g$d_Dacx9#e$!~Np@Knm7HmU}J8e$cdp6uq##
ztnb#;6`YTSt9HoHBWAw=fDiC^yKW%EKt3B7xl>Zmsfw5aJ*MoMUiP@;!={Rak!os)
zT{eKW-5H_Q&hM%__RGCm=gP<n|KRqnwbalcb8x?d%vD4*>sD_S?>{zJi^A__8aN%c
ztUtUDSq3*kv?1bV!u`gwGlUJ0^}=yOtVoPnJAB+85VY}&kcTzCq2?d%%s`KYwy6g3
z(xKZ|*k_qpiG>AZ1ALFy+yB&60e<YjDld!uS+Pv>;)p^0O?{*n+cv{CdnGB_W-4yu
zTuMR}fN2A#^B>1*KKy*InxhfhaW^K6cwbHLH_ekEQ1F|mwzW}K*{5VUF~Bk5rVX;Y
z@~BE&uQKd{Rth{uNKfQ}RRz&FHTa1W_`_QFsYG;c0+lWEn_(l#Wz@1(7Kzmyb>JDu
zCLtrJI+&SoFy4k4lSn+S^jF<kqZS!ZqJ0<RDb~Eb^5HWeht=1_+p8F1j2DU*y}v#>
z-lE<P&#(sQ&N!8R_(62t2&ncIFZi?*g0r0>ci9GMRw%XuInP9{7yKzo0i9OQVLCj%
zk%V7HLA*mD$SRP-z4@ML2)Nl%<qjd%Z>t5^(eNJ*0L0&yPv4k9EW*~2Zzv`4E%0(x
z+dJ9hU?`?eexw0~Z~LE<0+6ki2$u90ww-Ol$3z=SMek38EX5Z!RNX<Bgf0~Rmm9P$
zE-wL)b~un1zHcnNOmaTok!Rki05v%3Sl~C{ZQ(WD%Sbh#_@i3jFb+D%W{FZqx){4T
zS>@#~{%hh%%w!(W;w&I1Rl2MYORr)KNN4G~cG?F5hf>w3bc1CzbQrP@nTqzoh+~qK
zvq!m7TuS~4CfrLD9V)XqAwsow9~=xmBSb+xt_l;O2E>Pl1N*ArapEdTMJ#}Uf4C*7
zzC?vRxEJLwi+PB7sT?Jh=V*utKwf*xHvov&pUzM=0(y^8^26EnPD{cD@F@5r_z;_|
z85=q*p6S8wAxQ~nUbe^d9#J<RtChVh;f0h_e*9QOFz=1fMo4>*c@V){985U4t9AZ$
z!Lc3CZ(n4&T|0}IQw)~}@%B^qzuhPEP(W9Ok2r5(aa*y7+lt-Gdv^Ix*6GLd4e(b!
zD3RjN{wQhd9hca|<8ES^X1^lgcpX>F13D<bf#Nwm>k<?zwHAn%lP<2J6!*WN?}IF*
zd<^AzhS=`BJOlExS{Jk2De7JK{nugRB5tI?u=*b8Z2t@sJ&`ckaKlf$2mf{=84P``
z^3lDtxi$1cA35U4JD^v2V)sQm+!Xm1)Je*El@f=bEr6icg`i!&-a0qWI*fu4z%VL+
z(?b9)`LPrn+}<g^Zu{@Z=}0hmKw<|*Jg>hEpcJOYs6Um&i$uzUS+5oqB4MgtqNrzL
z(qU<OLNxCQ^<rZAK>d*JfZUU@1VJW0JZg)uYWP3Kq1MIFBH<wlWc=%wP63<5`vj?=
zM!YHCtMI#7YISAb*_2)e;|Oh@<@l+-NW0Yiy2}PF52_;r9fHTCy>jMh|E1$_DQgOt
z&I{kAbXN0E1S?<|m=`PwVdk5FxW$*S3tWMyegU+0(FsqtveH=V_l7~3KZO(>N{*bF
zL<96%uID!lFhsakHLre9ip}rq_~z2Dm1n`WkZGh6x&svDRIE(MTde|x`hQo$c~$66
z&-Jmf)(zrdXypwv;=!mwib`h8!ObNGz|Q}bF=4p6c<YW8frq>Y+xAtRtMwHAgk#Vc
zz9}Ps-9t72yH`Ce4f-{fGTIX2EptvO9f>sv6TlZ_!erOe$o{x{ID~5GF~^v%>ESVc
z1T1Pr^H+NZ00lC9<-@&5eAQJEppSRIUWnA;*TEf2i3oSS7N{QN9w<9A#sIRln11h1
zGXY@fQQS}|twH)bhKixcC06tmG(AdWn*?46o2{~v0ZN<zMtwcVmfo6xfwv!12%ux0
zRgl6dk||1S`#iRy6oeq9_N%e?s4~$c!Ymy@+JJz7)GT$#i=rmsr07{$NlBrz!=>W>
zw+^wQa6`o~uM>&+S%}XPX1_EI+z2|0n{z~yh5z<}KegQhFb>@FG*9hcj1#HIyC43M
zDrEux1Q0NA`!E|X4+YHDzNDi2ZIWF^M#i{wz$XUg^X^xel6<_}jw0j0iMQ3&)l<8A
zms8nh@ARa_AT5fsL4(63yFPPiX66Cct}r{?g!m9Q(bf}>F&#74<74XYd{4i+gIcn;
zM$(li!>FUdTSaddP-)07RD`pMNjVH1!^+MksZLN@0TXJU4xm6Zk|F2Rw6wUWC#c<B
zcv;_*Ch)~EFD)xYUqtLiq&Z*b#qRasd7V#c`dQL8jFzXoiHcz-$NB1|snz$e>ATwP
z(GUteS5SkG4_-O=xS*l*jvhNyEfxIOhqK4sxF^R1Ec-DK&4kVcMHz(4-r*0-F1hbS
zEZVJ#zW@5H@8m^xDku-0T-qF!=|zB{MbV<^@{U>HG$^?mf{R~0*rTn>;0lY+Q=dt*
zIDl|K7`^r^gskHIQ_v)XxeRw?_%N~s#QWXFZ)usFHsw#|qzP8}us|G7%92Z#Yi1`8
zTwm$^Dp?!aeeT}!c&%1Z(s}%51-3bQpFb}R`A7gNK?)IHtT&4y>b#zC|0>8msNBWo
z72r$2AWdBy)|f4N)NXI%g+RDpI5}Du!vXkn-B)FWr*|Tsc=0ojb=%~%t>r$xgstG2
z;cs8@zKfDGMm?Bj+mB3*34dve?&Qdg6jP9gh=WtXhM+_cb%N$n71`5nXF&78S4GhY
zaYM|Q_Cq~dTD)L0?YWEH*WyvQht@E;XsO9gn=02h;DrSpQJBZn&dwW}`8%Lm#d$FL
zC?H1jk7Y#vvO>$U_-eJ_t*8HjU?Is~mtzVAN<Civ$hydnt&qtsZuF#<bm_gHbP&#d
zP~L^kF<Hbi*swrRxk&`RBmO-z^^Y2$vPIJ%N2EGgL9)f4;1tMtY~d||4)}>3da}(8
zh1_@|^q^LIFuzocn4LN%oXVE1oNcezH!Rjee7^B!|Jp`1{<Hit;57v9EttQ<518^9
zREH;>__&PecMSZgGK_;BXhnS}8w#%cynRKqV^X)eq!`fqoE=C-V(W|S92;76trP^P
zY<sNl9y0#33uAh)dao%ELjwL7xDR^lMcr|9-`NCU2OKIDe{IPN>1xl9PIKeg374NJ
z_y;cWK_do#Gq4_iXPAo1HYk}YhwTooM?dQ+c*|cZZDSNf18x=`yNc?{q}@Rk({pzr
z`M#N2by|WZ$rVrGJH9mUoq!G#xT+XNvbxWcowaA|W<^|%k($qQ*j<3WF%M{PQbim;
z6twP=3XTR-&$9lVpagA-H;cXIqWBD%5UboQRP`38%&6?qlT)-(1E!!!jvXO%$MA8(
zZJf&mucG%@Gp0=lBt&q1B#{E6jxYY!Sw=cQ%V8HR2-#Cwj3&?B4eog*b&<+X^d1Bm
zw5wdezFESXyb36DZ~lP~c!Qy^c2*nt#5+xq(vqI_(DQ?Z2XERz4BLl83_Bg5$>E2{
zXIn>)qkv6L=7)F^ocLyUcS<ond&Hr2P5a@8;s=|!C&bX#a#&<2-~3F~wz?Me<}<!A
zt3q1fN!cqf>vJJxUiXL0_2x}|Cx5V4OASAk@+H>l5L)}-8j3&I5n13D%+3P1$kqsX
z`t9%wm!gC4i<vRc9WAa};|Bn}BdzeJ=}P&4$p#VM=XIaQZsJ(UtppttJpXmT+<x*c
zptf%S*#Nq$=F=XD6Ueei@D?|@awZK(_T@#@z9%Q!KR}V;{@7To#SE*g!QU-G+ar)0
zLzC01G1xIldQYuswVm_-2sJ&VT+R<I5y}?TEhbC(c^x0Hd5Ehbm=QtyBW_IU%H^FV
z3CY`1MxDb^@qa?10$BaaVD|pD@scr#7H};-x5B-9e<Y3#ibhh5taBe{JoII5fn>L&
z&R<jiE5l4*kad#3zEgN`o;tLj_vFSrLf^z?3K$r+tIFy6SB1{J4zq8@iXLC|8FA#O
z0YYJGhi2v5+dPFJBc%lf8^P3%>90@#z4Myi;AXK31PlY<vBTrX)$hPsRd=nhdlG-o
z13XrQ(r;Oc%E1^^X+A_{PJwdNc<w)_3rlu}ju{`rLnY?{{BG`k2i?7P7so{u2YpOk
z%Qer4El{nJHD#qNrmc3x^=BOquumvk`t7PM58JKO740jd)P9^_>bz(mJe^3aPtKE<
zSoE~y15#hM55dJ#+Hdhn*&s9IC(W(q$d>kMO3(hW2do}D)y?I&*5;R1=t&cI+dMLl
z=fPJo_g`=~<j4O(N*3C*v-Lc406HdpCiFETd6}LeE)I7d1T5q<C6S5G&r1%4+NC=T
zXpr-%&Nbg-C;)Y%DvUl{+IYD!FuCw7CTMc6lB2&u4iFWU+t8-(qqoP;_S#z5HXk0=
zd*wX2Yxn|)A?(-`5W|ci48qs8!-I(Cxj>$Cpo&9A2W3x@N+;kHbR4d@?z|Y|36_g@
z)dgPY3jfdrZ>rkU%DmRbj`A+}5Zakzq>qb%?CsI4*Y>IfkX)dnFSbGFR8p{QI<hNd
zJN}cuByf%;(*S5Ph3|XF6+fU=U3p}xv^EW=TDW^)$CzM2-qma178#YDkiW8*ObcO7
zUXc8Ft?Gg?iPXRG+LL1u<iO7aNBWgp>92tF#h4GQQZt~jfzZ=El8!^`iu=2)&9ZJ)
z0Kp<FG*f_Va#v|zpv(iA>APHg14R)r;lWTT$Hs$aOhI@R5Cx>z8Dl*WN<Eb{(I)6f
zX||3JclN#j`&~?zL@+tyg&9=#6@_!g=m0P9@j_e{^B^u~h2b(F&KYTCQ`|viGp0w0
zG8+~hp=BKKQCONuQ4#10;W1$nC0VB<g6k?Ez&kL1rn0AHP_T>NF!B)85wG`;HezU#
z)$H?$%I_8Uhnhcnk2nozfIu?o32ggj9ZFPVG@%nrK3}dfaQ93R&c!CkeD=7I8Mh%i
z!O-9)mxMcEgkzhb_`waTh9Ca6A-xsDM7mMv*%F|kVa^4*GYlMmAuhsnh;PnA4r+~B
z!1NUL?0uh{rEe|mz|W%Yu=Mx}*)igBOi*Er4X>iFI0YgLOS$b^QcEDpVa@iFVOyzI
zg14>FR$^ZXDd{tt_{U!AJ_pxYvi2JLgu2yJ2vd37&77k^)4*-eQIWxCMzeoJy2SxK
z*<YpdTj=O?-`B-dx8O4OPBA4!wGYYHb@5A>b*tNw?@gE}jTVeL3v80S0C<X<iTKBD
zR#V!ULKL&4gV8dA8Wmv0{+M~dePGy@@S}NoO18!j`z3gGcDaBWP;VU9AT!7#<!`BA
z7fc$L+G^ZmYki!RvO|J-TL~r)%g20Wg#ik3x8O}=+4#0#Ppg*eb}~4KD4+_uv1rF(
zg)MmT_73}}#MW4S0sv$Y9%QESBz;vKNrojwQNjPC1(R<<rTjYyJwl!KT`;m}R_TwH
z^aO(uCF8R22*5pj1#Yo=AGt7=I#%)&{1Y7abs~lkIEdZCm<!`-sgFwD&E4g(L)hl_
zw|Iaa?-qvW6@(-mJz{y%#fJ_?o<o$55(vZVg9sCE6yYQBW9hjgz%36pBF-;<4su;}
z8u$GX8po!U1*FeKFp+kq)XyW?3GbiE>o(>8wd6V$fW44YNZ)&~*N2uu)2!;pT(Wx5
zQ>L|1?;MAAbif1b(VZitN)dIO3Oo5-jx;!%tr7?gMlP~-Jw4;o;d}6CHto*|hD+Nb
zBR^9dmnk@GNs*y~qA4zX_UQ3E80Es4;~jONKN6FGb7#~CZ_;c+_PN|A1%)}yl9|3s
z)X~75I%_mx$Cn4ZtVD@w$%99n`r-QYxFkV5_>h=@@bE^}h5$0vaqG^?<Ov1p3Z`vg
zUM<ocC=qn?L1t2GK|r&Kiy{Pg4N3`MDu)<EA${j=t2;<y=AsG@d-2!aQ9_ii2)?G=
zBD2T^rGm;;E}tIPz|GOc!kkk_fKFbD2TST5z&p-w?q}i?>lXD){zRRYz#ubH(}d2~
z)n<4e1kR?3raVx>nNAug32*yZ_go9|4U%uj=1L2d$EdKfo!t%MmtF%PGJUt$W+u;C
zhS2v(!>YRCwD;v4d7v+!g54|6hUf_;B}^`PUoyH3ooVpK(5nE(AD?<%G7~Xrj^+Ti
z;CoCSfgY4wulb;ePbdGbG_V5;j2KK1a$`vhJ()Z~)RhF-FhEOjD5j&osySaFl#APX
zhRcxQ3^yxeU6#m@$p6O(`aMXIelBhw(M|z1OSd>r_?TZQCyLHeRntbY3R;`a1+OLh
z2gTI_sI|l22xA~LrSBI^TU=fna;OzN&1AccI}uDBAS^>2N~CZEZG#*LQV$zQ3pYSM
z<GX@0KgnFs;Iqeu<Ou_^oJ89pOR*F`^>JrQK}A05<%0kg;(GT2MyH{3Gu|Y66({J}
zY&({w*<nWzGqS=ElSf+bf4R6u0>~I(!-&nL?}1!yxO4DsVX5Ac03q$z6rkAKKixck
z!5c!wLsJ09wZQ<nG6y8B(^gpeNi2E`VEq=`=7?j-9+w?1llRFAoj2hjW9-h<$?<3l
z+fBys_BFi<EmVr_#C-iu%tz1Ns3>00U5LS7CnuR1;<;3>ptUE3POPj{%p_vQtM?CE
z`hyYzT@hrGH!k=T?-mu!QOMsj?m`Z2nydNpjTY>ZzRaP;TnFQn;Q8~4RWcET;Qjae
z82&Ku`m5I(-kXkeTXn(a`Sjdtu;W_;TpigKsT=b{%Ecj;e>F{3B)CpkG3Hg3(yp_W
zTgVLa@~HHmINlRFuicSp)7c5a-UI@TV&UR&$@9RX4Hyr<GY-@nwsDpcNFP<oewEx`
z9~X#nn5HD8VrReSzL3h7{P9w*WtSEw3)CG*zP9yeECgn;p<vH2nP2D0M|J{L6-@u)
z4z>e^?X}NW-iksIS*XUV9h3h&D$Z`8@eAugE1~R|7nub5_rC!8o2u^4KcCUL`e%0l
zk3J{7o+_BHKNr%T0;TOrari0((L&(QpPS<RGHxc=@#7Gdw_j?}P8+_OdVT+_lnxcF
zK4J=#fz9D3WR0_*iNQH5KzhOfNh1240h9J14Wh^F2H~DbbB#R~0+qHGwx?`4K1;R6
zA<OiYU(b#nU5n-tr>-TKW&IPUpi3OkDT|~@x0o>aC~5c(n8#!o00{(bfw219gIDhQ
zU!@0?fyUeqpk^y{YI%e2shEBwN{f;7FhWAT{b_l>`c~qPU4Nize)K1{dWk?2ay0Wx
zQ6eCVgnHb8_|!O^M+y1%1<41K%vZ@4aFj!bIx7q^Vtg#Jzg$otQ>EjMym7V}wJxGV
ztbfXYFvScr#Fb<JsPb50jNfbdBw3~zHFU`9AIEA>yzGD%>(TdwG3Qh?t6QK$)6MQ3
z!TCC_TC#g8o>8(m^poYG!OV(e`Zhr*q5WFWf43$pJDl#t4W^mSEI9`|Zd~$itQuC|
zR!R54oS<@x9q23?QqE@0K&_~n05Wcu26m?i-U-7;*KQjXG&F>3Q04>wbwLe!)}I_2
zq40QGB=)L*<W%zVLkmD$V!|~$kVg-W*zfSdf&;%Mv6@(QovicdvH_t5|0L|VQDeC<
zv+1G~l%1M7@5=dy%i-}ri9hw(i>pjiTktQ+<&QjYJOrGPWSBpzK1Fe1ix^heq|iLP
znbGq<OmY#$Y~)M4J>o+jdgvFtEjQybpeZ7OTojh51@t_W9!GN%-VYCnNpdguM$fTv
z{7L3>@Bs<?m0S_hl`L-C;HG?ng!yx`KXR4@^AEz1R<m-x^`~xQ1m*R&Pu{bx!x>B9
zy|B9O>dw}WU~<v>9HK7=5D`Q;OU-c$;&aEl14Gt6p7`JeO2|j@KhgHM9eP?+I(}Ld
zxnXsw{P-t1l`=P=0(+2(L!a;%s$QJq>#5uRju-wH`z2Mw{KI}SauyxLpEE2!btBLT
z4*P=>E37H;(FcJh6NR_$fViUX3zC96Tk@qFlZ!0{r<TB)_g_ScU=TO+Mruy`u&>hj
z(`-qiDLP6W=$i;2<bToi%r)G**gdCfwDY3<ZG^1@s*<&=()F7~;s-s22KQ~dtQ_PV
zDCO5Cnhkz2z;^xHlN^L7(WJl&{v}nYmfq7v1X2w$E#XLgjOPdz$E%OWN-W=6bG7x(
zy{fOFcAc*OzAkMgjJA97Hsr^K7y=M84^lMO05g{JTL-f4$^pZ-gGOre%;(Rai&aWi
z>=^Wg@yMhca)2Q&X2k;Ebe<0Vf-h@>q2%%&6`%da$~hJH%qMhbCN%;o!kjF_YD1zE
zB=yTp;?>46x<b!MDivU5KkY}x1}iKt%R<isZyjcz?n}3^1g#5L3V6?Pre)h7O&^(w
zjy#M1eZgq@Lppe_N&50`_VDy}zy3=(Smg#k*gn<kg%P=hP_?5Tf%qL#m83F7$S8`n
z$$M`<vdO^7YK>%jmC>?jg8zJiGh}d7@sN2^^=nmUuGsRyXdY%1)3m{6QqJ)sD9<MG
zy)@=vbPe?@m<sLsvhNEhk9RKwqy^jd$$`fI>dO$>ux)Q4d<#;YjkX+G_7B>usdKpq
z4z;azQPWWT{{Z|z1HWV+#j$<{utuNZjfSoPY($;Ux#Zd*+wa)HZoB;sn>F?aJEix*
zwtL5RwneQPmYbK0qx}%14#GYuo~OqPrb{FbW4-V5V|`y?VLZ*c;ygBf?s!`6%L`{t
zPfNE23m4n}y)(!L4E)CWTzajwY1iJCELvn~={!EFA&;hbNu#xmU#?xM)#qRd)6>&!
z@xq1n<b(Iv%xRPJF1zucX$=}RwpFV*?yP3NU_R?AnWyzS#nU=tzHL+2*YhnH#>?dA
z^le3@<@R`*c)Z{-f4A<(#>4nAabDu_s00}G@jE?u_bp#eoj7jqZr!?N4jMG5R35$g
zxtla^`Sk@?+}I^Im(4hSrNnEscHHZ~_MXDG#M8&)@zh0akEi*&IP;+RwZV8{`Np@!
z<4nIUDVR3C&bUkbxA(I6eqZ;r9>(+XZ5tYTUh#AKws@ZLZSi=)G+bx7*_T(VR^7fD
z_`dz$%P-i;#~)-}I_+q+YF3Z+^YNSt#yuy7>m#d==eg6<oIMYVmq*d5qkf(}<*J+<
zn>=Nvz4Ctp?B`#8x65z(r`6h`j@@|aIXC0@en1wG4U{+WdiT5jpAYn{RvlwIxJpa>
zCaZs`)wC40jeEJB;=f{1>7rDtm!2+uyl-PFkH`0~K6-V`)5VWjy*G-*(-hpduH)7x
zZ9MP4E34<1e}#gykKg%U-WQ*~pLYD|=UMw*J6R5X2g>S^-j7-{jGs5Yr>O1go2JO)
zQC60X*UE%3KihqG-fDaAxr-fk&|cQ4L0x3;wda{O^lIR-@e;)2+*cea>ezK{$Jw!a
z)|~nF#aAQk&36adai^VUo%ZNz_uPE#kZF_0@8RREm!#lJX&IgO>W+K#O4+9zvQy^i
zCtjD<uznq@Qx{*LtXwh5J)a!UB9%h0!%kv(wjFs`5Bq7<@AllgzggQII#|ort!>rH
z)tyLb)QSzOLWK+)Ic%umj+8}6JM@?ntZDP6dD$yUw``@sM`@oE14<smdxKCMZo}xG
zi;bE6UwA4F3Up}~Gn~I({f0S5pKvO>pH<L+(hHWms6rN2$D-0|dulTferwB1%gxQT
ziWM_$)QA!G`|wN~GT<58rd6}D)z5RBLOru#EIIw8!)(a6Bl3n#tg>>~E?qH@tuflC
z_K&)8rO!R|nBLZ)QQZ|QmgUm_c8$Jn<FeM#>tX=?bY50gdfL1>v(unJTg{qV<n4dx
z(N?u;HOqk!<nI*db>&?W`*_ovm6d5TrcJZaBZk<!{qMD%+izzL>esf6YJBjSBEs>z
zz?i;f$+3IMGCQ%?fp*nJC+0o-)(^Scx9^y_UArA~pg^yg6l-fJ&^x!Su<G=qkF<Ml
zKO_CN>(5TFRI4V2<5iZo5@Yg0Sg?!Jyl{mSn!c#*YZWcAf$1qc_xi+{wup2g3+zjW
zrMZ5?dbUrKhSsEU9lP@S6YZ2M9<sLWcC;1Cm%|cGi#;>(3VYl`o@7IW$5Z0@u3qQB
zR=G+Q8~XJZp%ES4>!e`mT(odW8ZFQm0K?JI!pq_zw|d;eSn{=^OhXB*MA0>tzCC_U
zCMbAZVf%esyc`AN%&Xuz;%T_wCBEI`3@LuDXf0ZLn)tS&;-1#?^K_wXiOl^RNRx-3
zAtNJ?7POq4<ayG@vMgP)1iEuxT3$|0dbm-{zaG3!486V{CxM}^i9{avkeeBIDR{i^
zTc7RBBc9IljEBCTVPWFui|_Me;@kc%UhtUsdi>mezQXqVzWBM~>A1b%dSTn*X*^z7
z$YXg<-^cZ0Nu)eis$^q-``Mo8dxSmt#G}@D>t==b^E?g3Pgz);+X@yZeq3SueH+7d
zQMj&r;`<7oKaoGX%dCnOtl?G-?WnB|N~`kzXK4o>e5h4{{dH-1v^$fRH6?8s`iv!u
zYNRb+wiFL%<KvzayygL`*9!h{@$|mWxB2?&qt}kbf5iB41>@_J*V?%kevx`!@pJ#(
zvGKG8%N9S@^X4``#?xa9`stNf6>Xcg?ZQEi-*-pa5yzcmTQ+TO*(+A$KMjv^^y3TW
z<>&DIo_~BhkKwxS<2uFDFz&|}jB`Dd)iN?OZNc2xcI#!QTffVXvQB$-4mYR<-7se{
zy&Kjc@$BQt;@ds$A=5EV@uJ4}MSF@~7L^v`cYc06x<ERficgp8HmGBDw`!DDvqqJ?
z^DaNdzWDOTa4tM)4xumBP@qTry0Xq~H=Sb_UwEpe!xEYUO`OUm6}OBGuZ16)+F@=s
zKK_%PZQJg&gWY@QRd(6!57;%g{>!S@s1Y7jq`}o=a|?gCY$))!D-EaKtLK4MyG~tO
zxpF1=r<aW+85l^%Z^2er3YSQc)n{4K(^;;(<aeMevKHD=q72~qWI6`IyquNx{(J9O
zzkYqKam(hGyJTtT<I7?{55t+|Eng7^#RCrPVP_mL(4Ki|Oo`H*N}01SOV0$@r>$Y2
zNu^q(W?5-4+o8j*w$rYi?Z@HY*!aK3SmUjl1!XmvYDBk&3b;lFe*Kjlf5=YOsp}q=
zw`>`20z$jW2sd8IRN{><OE4O*$hNi}+uNzf_k;pHq|i)VON<<E%uYC<XD3UqRwaEE
z4$jD+A**aD&dvgF45+a3LTJ5R8|%JP75ibta6H<q6fO);x4FVRG^Pp_vTWk`zih}C
z1Hx(R)^A{$*p|mpKq3ajfEd^a254-lkd<ZArcSk`W8b&7ZMTIHVP(GZyb)O^?V%jL
z*w06jXT6TvKWWRVf|V}@*dDW>Z?xZaw@~rVKYl;F>y&Id7j>oOFzkKv;Y-$~b0^%9
z=H@HUW%U>1ZxH$oJPp{r<BqImP=vd6>$XOfy=URZtdoyBXwT-&wuF!HinOwLSFuLT
z3#@e8Ygb#c)E}J`*tr>2*_bkLmp6az92@=92y3}bTdPsC7OdfL-H3j>%}@%RLJWw3
zvdjQoj~2myp?kNkR;^|=%UjDetZdev)-pr?+IHI(WwU~+Rq8Q-Ym!fvci*c=DEowQ
zW0KNXMrAS^?}xQ%+1Q#j#UyPouCBf*O+DJzx5VK_28PY8n{R2mv~N@BVQ~dIeY>_T
z>eOjm-*Q*3#Ia@5@?1Cz=~lfuo%cD*Na;ylZk{b!!VeRf?cTMAHEPlnFE+x}q&)o=
zrANQcEC$Lv1MEsxuFAD~d@;OY7JcT+e4X<vh{{*5##zE7VxaUH;7wgdMy9oB6)9&^
zCr`5JQzl1G#*?UBQYXrRZc?j8Rm-Yg1@GpTqdo&wtys0PRj$N$kJpyC0?oa!TL+)#
za>P(X%9@Jv=Ba+Lis1B7L&~tlix%4Nqeq1T)o<9?YS!8!;g7v$>7o*ADF(!V7}zid
z@_V@a$cE*kqr`w1*l-3o_Geb8fJqG+*`#rQ+UQXugFpI)=U9?QmebB+9o3F2(2<t5
zj>IMT)0D@&Gx<VK;!cw<aV%M~*oI*S4odavHQ{O${TQC6JaVKuivckp2E>3ED2ohm
z$~w-ieDn!tgzC-0^tIvLtR%8Pmqp%-Ri|~>FXIYyex6X+)^SLFva%J~%r&Nq%v{X2
zk(pT`a>&Q}s+HOH&6l4AUYj&)fk!1dp)qA)x*I9cW$SWNZNz{W5CdYM{4zitAP4Ut
z)TmL*wr{^{AY%5+8Mb8cB8>YP8uL@&(kN7cPJwc#bP=fx^RW%B%|pK)WR)tzuL#@t
zrYmKe?RT<PZMF-IC_8(F{qX&_L6Od%7cr%4ufmG~F(3xSfEW-1WPplvwd&Oa8Q*>N
zxlNrk0W)&pyEd{yC;bIdr~-{2be)bIQ~)>BBDygS=o@q1WcwxfS<DWdy4YFx;>}Pr
z8a9}pMhpwZtOeiay7e2{%;{6@p}TIjDHF#Bg&V9VTQyW3F(3xYC<C0Qc7ytBbW{AW
z&xVc>JdWpHU)j*}tZ)8GCk9HA0bc8L<ET};4rbsQX^R#v2nMrM9PQa(6sPURdF62%
z+Ln17CxKXB+0gS8%)d|tx?rM$>uFgPEDciv6<ctpm0k&-fkL<;k_II+t->1LeknSe
zB))s&9Vh2~u2Z+Z9d_(VcKXr#+1H<cY9qe;D%7X@{s-HrkwfjGGmf<vpM21|?RzlX
zI|_b@u;{95j~EaGsl&jg>dZH3jnPG?SE-Ety70Hp*Lf~{bStBJRl^rMi#;Hci!{s*
zl8!gu*H^+=w1H#F`kq7S#6U?f5ZpN6s#&vEZR^-&?{Eq}iB7|04yh>A@7Ql_h>n+D
zwTe-<+>rh-4eyg>aE6`r><8F4al(v^mEtMTC>$*dqkjC&X3dzx8S2;X{JfPy+NDdE
z+3;_FwB^fItpBlo2Aq5BALDKO*h%Y05*7SSK#-q)Q-{1r__Dwu$Mg<a(-Qse>o14+
zxIf3(iHGcMqhOK#_v0_a#iKGVs`bCS+SFxLequljY<dQKpy12INhRoOS7F}QkKX&-
zzWHi+et*mIdYR*KFMF_7V_;geV6i>^&`UON?)+eADas<{dBpRifn?;cQTEpBAA7bT
zWE$r0X?-WxXHK7OEAX|!^&LF@ScPJsv>6BrH2k3J)T?hTT5c1HL%-;h6!aTIzxl!5
zfBQ3A$uB))o$b@xETZ{wub=PZ`YX@BWxxJBCfq>t34MH@r)Rikp2!q^&g6;H?D?nu
z4-+vg#X3Ha7tXt8+Wb6FuDNsO!_tpWkZ+`pSf~b!ldq+khsvN}i&4On&%Vii`04k2
zg4jX&qrQS>cpkS3WU!L+=P$C3-A=K&^A?0-SFOs)Kh7)1^ih7yGhxyX9r`MJss9J|
z(tkhnq=BTh(sC~p({G`uKlkE0_zX5KMjW4P!g_KJ$mUx|jb^JBt->P+evPpI3r|?X
zEt`cR@3<?z3<>T6|H)Pfl}8MSfem7S?U{oo`+zaO{v76e=Xz;N=x0z4_M6YW{H}fR
z)%WN>qk$+5{VFXz6k2e&o-as~j`4wm*WxA1tj{I?w1pg?@a4mFJUOHdCEkZ|ya@Rv
zo@PdUJrW_$pMDu*=U@7-C~K63`|xEiORtD0kT@^bgTP4g#aAQj=6^nkZ8!r4!}vL(
zL|Tf0<Ys`^GmT_b;l@FkiJ3T7zzUsmA1gsy{buMWd+721;=?Ocpd;QxpMf~7>cR3G
zZ4S%G5*#VKC!TeKjrnr|`iu&e!F~aKf$Nn_%(hJg4+z|7N9)*ud}qv@ZKw6=2O}-s
zBTF2|?lkh2$PD>}z5)H$SQue1y!<YkH*X<6t`zMHh1q~btOs0uG&*wjcZCY4R$GBD
z(V!lzQK%$M@9CBCs1F6E`JRP#cU?YS%cN;Nrs-#Kf0ZhhiN}2DmEqEnkU$PPNPJ2h
zz&?cG@mzv9o||_jF0@wUr=|Jd6-{h^>-|ACYxX>=ka!dr$nyh}BwU5B4DxG(=Uj44
zm;<slTsl@_CXVK<w#9_%6YQqDAGUh%h33apl3{R7653P@F_6*>urK1^$QgLP81R8T
zc=yerA6>Ij(O|)}MIm&;*iVUf*ojSRX2&%7JL0L=N)~NEU%q9ddR7A;n8F**p-*SO
zKOdGG=Cfqck}wX0K@w?m@Nt#}3-A#rJfX~>A`PjIk1i~qztE;knilHE{@Uxp@q%t?
zlP65I1sKTED_4s8IOJWmN+s*kY5S-gSm(ZF7#JswpJGcFFAeM5nF}k|uYZiQ$x~<8
ze4cwfsug9br5H#q2G}ktR*c-G{`~D1TZ$=dQ*Jst)S-H{%GRP;<IpwX)5?M5xwGe@
zf5-`*2W-D_S+sDGtwK9?{iZHI@B|NqiQ}h27g`xye!b5KF1*n3rca(>v+&f3dS-ei
z`Wl?K0{Rw8xamNDl>t{09yev;RGT+vUdSh$15fhDW7`KGe-rf?;Y+OX5*06Ar~-`>
zqf0D8u!n^WE(K7Imn~avuf6!TeKlxkc<lGi8=u%8qsKzCN7m>_>FV*)b8p%zxNrC!
z)lV?fzxvGU_VE2L*tdg6ggXXSmL2T8xeM&2XWy_V9)8)LeWJfj1zG%JR@jeQiiiaC
zlt{}C^%>ml@Nwa*D8qbMw$sot55r@G?}q(sLx=xt{a^dQa-nql4^%|0Hv49lhmUIb
zv6K$GbqVLMTm@hHsaQF@Jje|@?%WaU6<1qaHhU>`LNOo)HYEe>$N2eP^knvS{}=5a
zrygyc_Uw+nk?wKPV@vi8oW?2x))BgQP|;ou-v*yQ>?8Puig_{&arDa`kB3a-Sf4tr
z#Gsd*ooxm`=owRH2CL0GAAX5}E6bihAN|3{UvV%9PZ#IFUE`ROuC_%`n0XFL|2GHN
zC0GB;dLDY7{pW!fqd^a4qoHHeh|zZ0wfBa7C!TqOz4gCO@P$M?EyRrl-2@{e4f=Vc
zAN=`ucJ9TuTbF&$v@<Wb*#-?563R3P*75rue#M4<|FiYG<8jNOp#jHB#6T)BKuan6
z1-?W`8U51;T>tcgPO)nl^`OOgDRjat=x3`C-UA))&U>E^eZt@&BkjINUWtAh^mj~q
z`E~!XQF!7+tMiWAx3-T5d}FuX@tEzt&*^r}O%K|izy5{(0#Ck>-xRoM+<DK_cEHj9
zu)~hK)E<ZKH-BzqMP{Et2~Vf8GVPDw{<15s|Bv-J<UH$r#`X5%3vUN~^v^L9?OzYR
zWQ`iuvg1#?#->l36%=vuzabK-?ZrHD8T`#SYeWw26z;tDS-a)Vr)>J4AKN0_U7UK}
zE%xO7*J3KRR^iTo?iwebbCVr<P}eX>@KhJ0Q|)!+zG1-V45B`K;{iM1(C#*O>dat<
zA2(r|oqNVn_7OVDGtR#Sd4FQ{>*1?>?$QB;dMt=-)&2-OvDX2%+b-?w(I;QG0qAHS
zxaZ1nF)|ODB!asLPs&?@4daMMmx!=PoJhUVmRniV7A<Y!Uw^=LqbaP<6YcDaueR20
zx5r)E>Kl&|DTFc=17cvaFu)gwIeq2w<;(2VXCJfw+;)99Z|AN(t!lLz;f9(|rLtG7
z2v40Ng*tL&V_(5Rm5+B9Em#2mJ^Ju143?@@t5(`#ytxl60W7qOL!Q}qk`-JZyk^*!
zi$SJZm5TPlQ^W0(w@wNDv+ph}WcuoON;rGU4C{GFAKR--dpqWco*bp@=U@Mf4&mqz
z(B)&mpzrYLmM=R;yYBqY^Y-x@4_e=A&au4?ILqc>EV%9Fi)_-wDYj$h<L$`@ueX2Q
zeu<44JJH&8I?mqff1e$EM32x{FTvoO2F3jc_(OL+;B0%h|9|ZH$Dlk99&X(a?qeec
zzhphScC?H79FJ|^+fCP;Z5bG3^KxK_Nu0m1I%%62NInK|!BT<VqIM|S_d~u67TaVq
z`mGOdREpVWP>JTv?ag;SX_J0^Ke`Ero5gz{eP!2OaR#ztBh9lXpL@%WKW6{XhiuiP
zf!%V~Q#Rn;N9^MBdfQ#-KU#M<+Lq1yD(G}K-To-7^c8H-`;X(sex;pw=Ji46yyD_h
zprA)L8}x2i0HbZ24oBHNw_RjE4SCfj;0aiposSM@Jn7`a(PtcIS3@~}{_&fwVZ(Zc
zJ9qRM8`fzQUx9`aS_AGC^o4%(sn_8P{fEt&@R`+aT;FEHTHI}q_PCiyxNsz_EhIj&
zszil+=wDaa-aR`9D{_PSwe4Qq5gf2j7kjz?M=&hIIx(z2Ts&&ng&^jZz7N`?Prq(A
zTzM80@N^ip;V%OP{`I#8*hS|ZZ}&ga7rAHJMHig}>vMZM`mi2$5N5SF{^)(Je%;#E
z=j>kL;^g49p(L^VB_X`S<Y38{2lhYg7~FW=6%=Zot832#QP&L1!JkA7h=J5*fEJDl
zc$ze4)(m^*k^k5WkKJcY(e5XW{UZzxf4~o#A5fTwk1LJGwu$(x@5J$c1=lWyn_AK{
zIEbyoqJUkM@ECOLUz39o<M?Ctv+J)sGnxeniggVPlH4BzX}xb{=ws1aFW+Nr+O-aY
z<Nsc~+uHAOf}M5hkv8y)q1Jt`UF^Vp_pk*E7u!}%8rlm_+-!&Ry2SF9;#0<H>39^3
zx$!Xwe}=RN@4u&Y-fhQV4B4^WHZYnTXrFxct##<Ioz<;V3lAtOgfKcWEm0db7)F)R
zQVeW<2G|lSRf4N4gjaA%P8z^|0D3IF5^jOw{QH>kHh1Dc+oC=!>v+19g(p{y8rBVU
zj4v|z#0s6p`*@=D(v!DX&wcg?*5ZrL?`=;#|Bih-d{pQUp20h9zYOgk3<Fe@@92A>
z?biKNJN=|XkvDWs2>aQQnB;<T#39{n30%J#HmGaVIiGv^9qV<}zF4mVBSyB>s{?lt
z+;rzcpLFkta9}YO#a5u<k!M>ru4nf?^des1_`yE^;4vuA4Zs>K1|VSt?hN=*5V!co
zP2=25X}4X=;45dVmfN0PI@tM_-DP9PO##QNY%JU|UV+=iJXkB}e>Z)`Y$(ug+BKJ+
z9<r<q7mYb^^LXy1cdSRZj`kGXH)y_hADEwi9c%mJE$~bz;(R2?$9frvCu^rlerT0y
zxlP-^&8%rtY~MqUwC#3mANcTrDeTlj42Xf0V!->qiWMu_Ut@l=2QaVur|<pGwrtwM
zCPGnevweGe@`1bTgE#-XUiG4C$gh;vZO|yZxnI3{&0xK*R--xw;L3QXVhhW}V6sK+
zy0FSbKF3s)xxF&pJE;UE{`;SPv+U&)qtUL2v$CJ(fcMXTKO0i)zt8R=%%imiH~#E%
z!wWu%PTlJnDdmv@%Ylpj(|Pz9)VA9+56AOGa$3eeht>GB^ZMB|Sc|9tPr&2Z9XKvv
zAJ0u+%7yT=9`VC(_VegJY@fr<$MKQ-%hc&JLmms^_soHht|qjAM;@f%G+Ky()M5bb
zs1n*|7W#>7JZWNkO1axWl({1MjHh3CCvbn}DTf6YG&IiO=EXX(ogyf*ZjJHYg;mI~
zRk*RP59{#Jhj+6{lc!so*3CnnSKfF()@KC$t`a;ED68=Ph3B{uvj@>dm~#B-*M;*%
z?s2PZ_8h#A0hbNlpfACT&h)X43bWx%7h8d5!RW%#yy=#9+`R`__k;Qb7mEfkzpwt$
z!4Nt^cAim(%A;0Gs4!W?{)(7&g2KvVz%ORn^tm<}j|^GC*>e_HtCm~Yd#~S%P8*LP
z;Q&sBlIQvT&neck`))RM+U(GovLk&E?i)M8;^7t$lEc#^v#{KJNsx0uw%%?B8#8(o
zd~^Chsm=<IbfrKi^RK6}iGiXSU_V8nVmos9H+K0sC&E2zk~M154E}uMf?xCRzx-eX
zeU-cKf2g%VAFu*XrK(^st>3V*ZBeJL)vedS>NRW>@(CHDgA0G?6WKqcVL(U^A$_M|
z0z#aA$f2(c2hgAstyiv6!B*s<Z<!noGKt-51<aq*j$U&qEIcP479N4pM{%!iyRowl
z{c-*%h<=#{i%1F#Mu|Q<yd94OOt%=WeixqG%kI77vS5Lx0?nD4mT`Jhl$$S$le(xb
zW|v-YQm|a}u`P`u?jKDnI0xh`_&f%xlf18Ai)3vO0|^Fr{Z_^oi8+w~T{xq@qd;3q
zcDB&((Cur-cCGBqSN?6so_v+P@XEV(0o*azCq<HIq|gsT`^Ltw#dot)35^+3Y2y70
z&ges>+$WEC^_e?@zQ??1x#r8m^kU#F926?c>`PBO@esTF){7&{H1ebS?}`;GgY|jX
zh+nK;-CEIku`mDBA&25E3RR%d@v=^Z=F3ibBJKeCUVXOhwre}QDDtU21{aIIFsHL~
z<o@hzybOYAS=iD3iAR7zSkMHC93bd4&KE>R|NfV?YrC~IYud=>!a70Mi>q!pFL8|7
z&oJLFh9x2pgMor?b5_Ay*}aeHiQ`(?d6%9B!g&W`Hu#gTU>$E@>ByTMD<3gt!eWiy
z8GBdXrG&(rap420pVE2ob?&c?7YN#H+s@L#eE5tvxGLzp@pt)nehS5a7$`Xg*0&vU
zfZ)r2Uk&`&&gp$fC{V-3Tj7PgNg+<(WlEj;jcm@$Y1RzyLG(P}Fl*VSEv&^=gU@r+
z%QIDC;PF^kjkZP6HRH7M#><&wtHQvOW|hNx6%`YGF>@|d(EIaABHb&tK|lNaWBr0J
zGT%pO&|=G=<j$HkFY3p0GHe)L3Jii{e6Sooa<m<Sv~XOs4`2Vtnm2D0-q2^B_u!?%
ze%GFBb(=TC)5vUl<+(TPBe-R}@bv8%0Mjv}$6~8dtA_R5dpEn{hKKCDvyQc@4I9FG
zv)HbK6{>BUt?gtyx@A52?hT(z;w}Ms73?(&t(`WCfz8T5ye;y?Yv}-J-)!@oRDcR}
zk%IOWwe%<jZ*&XS)QZfZ<aVGayb<mMy|CF<4eiN?ZnRzYI>~m2`_(Rcb%Z`v!QTCF
zaMV4(yI}ONpF&yamP@6XPpQ5c`lEH<yQ5`pQOkb#dbqs^Z-kq#?-SfYn0O-mncH>h
z5RUtQ_O1fJs-g=YYT2c`ySuv^5otjY6vaRkQ6yEAP!L2gzyg0%L<vEV5CJ8n5kb1U
zyB3!Gzwg|g<*_WV@!rOJGrGL@Zp_R*cg~q_&YW1cbhR{X*IPEP_*s4OcrX#1s;gBl
zC0%<ClL2qPEa`JYz5q#0MvUp@sQc3)JrtjB-hR*l*T9OmU7~<!#S!=?OaT3$`zarH
z?A$MBf&BeaC6`ZzbeGbwZL3_dgfwVeTMFdMAwxd-9vbQ_atfZ=uXG!#)lnEz*s%=7
z`Hs&tS38szPxX+|pT8{uuw`q~sD_lQ@w61kpF;&FZD^Xe?V-ZEJRAk7`R0lwX_}PM
z5ys&4o4u;5k0OQg$oh>tq%BnT^M3n6@)XQ1X&`*Rflw}xKNsw)E8jC<wId$-hs<Ia
z#+gJDqJ4Oh1}{m>dFPX32O1o#vT8rtR4Uc1i>=v=x{bqo$!M;B?6SF^t1{A*^*Rh0
z+<=Fk%T{YC;ENP6{6_Agc7vu74o|Aw$AsqaJFla3)=w~H5KI?l{yI_Kef@<HvK>2e
z5O^{`(xy!h&=&xWDi{0Lpil6Vv0n_=Kkh&^Y}!hSmoDdGh7nSQeo<M%U`Y>Pc}FJP
zxliQ@wbqa;u9NVcEAIYAjqqh?q4`XYx2Pu*r_O~_&}jK`WM71tE2-Y?>EYZ>jqz)k
zuvn<+fj(TnH)+#NzWSt(e(&6Eh|HZfN|Hj(H-P_3<?_YV3!d8T0|$@ETm8R~g>Vj{
zQiYo4Lq|@6*zu(CBh?XCcCtp{s9(FHY}>I9W+mUtrd2R`f$3W=gv|PF_F@?|dZN78
zp(V^&U`NXLV2h<d3{t?z40hq+7{D2?Ns=a&180wGuN^bk;JKeTfd7SH0q4Qk2Iqg*
z=slr%-nlaR{-xrQ;Vh}`EmO9r3?KZ4V!Ep*S4f^**|j5s5J@8|eCEaj9J6Q&ZpaY&
zGrTkKD?HO}#g8Lko;w^)#<_E6!)pGPjQFsd6tDE8{O^l*^|@bsZIH^Bl&Mq7p1qEu
zmb55Uynwv+avNaB?(+I8PwFn$>%E4{^a&rUGh?O<X|d~n74hT0k%0i`nW1#Ojr$@)
zyD$MXUJU9ALo(xq(aG<v?$07B20TV#h+V35Vfh}~i9Z*vmRi-yp~FvM>n}*&|7eWl
z%adKc{G=D6X{^wd0Uxf*OKm{NtTKA+R5=J!jnSXKBOTf`5dknR3xY47KUO~bdV;Kl
zn*9`PohOVPq+XgNDpx2RjMQw`t5ZpSn>ZXs=F=q|0QIpGXXKA*Bc(pTGBwVvVJyA|
z8j#t4ERlNHc1%Q#w}%C*VH$>(Vw4hwq6$J3jSKLazkcHyR#8_F6LlYKA-5x>(-A0M
zXoG{esQ}lBFp<)v<rci~zlNP8J@s!=v(D{V^qpI{dGZy6mMWjxCMNbvEXm-x&ut%i
z?qA1t$1OzkaDaLk?@ouR{l`+kQXsq(FbjV2GW`@di7`Iw#X#^gWYEP+7i9mQow9%T
zPC0k#lnP<WfP~=tgaFyxV%)cVt2A!ZLMJ%_YEG4j;e?$bdrpnAlQ(}Mc&(>U08M^Q
znk<=Ig$*PxBrmfMD)YkXv<KK+<v!Zvw&^o%8%xTRhyx8@k|ZgT$;gj;tAozjlV?;W
zr^g&H1<u@MN*0vE+vmtSIPWB7`fmW=852iH(IR<d#_vmHFJiiGTscvS!35+sd}WfO
zu5qK^m-!1<sxx4E#D3knc8V0D4K!qTNjM6AGPE1y{0+$nJL<)AMyu2KQiLbXi^-I2
zWx)gtLLmZEQTc7caM`$JmukO2G>^;quwI2dW+^}lP#H#;aTf-_T&@@Z3*{^LP7JUY
z{tzdR0s}yf+=kf$<pr6(N#*)Fey4o<l`7S)W0#6Dg~^DLLpz-{S8feDkScXr#Z*b4
zwWiGAqL@Bp!~wjXd>kf*^XO}eCpD^;mLi36JKA0J;n{XgB^v<h5!fCVhn)Ct#Y6;)
zm;;};LvW_<C%g6@1X#|j0J$%mlyl_BBwG++ZThUmFu{03>eMXffLrV?G2#xj+f#m9
zpfp<Y#~7(zwTv#bDJP}_4{|4pVKPSy?k;oxS|M}hFINXdl|M!Dsm!3Y!^*$DmtSWt
zK(r88Lr`W!vbf$E@L~T~PxX1HbCTPESMGzL(F*TC2MPALD$oK@%@emV7&P$-I&=-*
zkA4V4q}ys7Q2@_+Gw+3fWe7Z-Y!Eb`f>K8vD`Q=lI4&WcC<E$iQWl<P;k_(c7e3)Z
z$$nhKiibj3+cMV@Xa|Qj(fakqd;ihF22IeejT_{bHHqZ$){o1@iwNwGNiaOc8LYfA
zz785{r_P=^El06Ud-mKJq&;6No7b+E%&F2#o*a3QZ78{d-qc`#lqpgIX#3$g5&szz
zRth)-QNwlN{5fc0g5)A5Ylfq`c=0?u&`--1L_WEQa8<ka?~;>&7o<#;8d9Wa2}zCc
zH(6j;nKW5)Fc3mufsxoRmgr|9ZPu&*!8^JM@s!}{=5>~CShJ!=ty;AbE?TrGc#uZ#
zqnox%man|z$LR~IL;s1$h}cuNCBhUiJVO~5KVAYj^uRv@Y{bxUC$Qi>dFq6$UAa__
z?bsnXv*eWQ*>k}u&mRlf<lw=y`bn^zG-)yb(8K`7<Y$;8Amki*@-q0DN`&+0&%#Oi
z41_n5kpKi9J$6|39X%kK3lxwt<to9PE4`$F?Q{B!nUsI8A%O`O$EHM<r}=yVFn{}Z
z!xl+?YBr)?0NBG>$Ao|~^@n__yrt}R%t1`nFam0wbSPgbXDMnp7jSOCwJOUg$9dey
zV4hb~I-bS^&$@YzlNYa}vLN`p*2&|b6~!3iz}|H&X~A|_c%9aRYuK+~x#yg`^RKp<
z#Q)maqbL2+<fzjhX9nPp4mb#O?Q_LEcfZ9O5B7(0=GxW3K)=Y2E1#pD%L5ykfl;Vq
zk@NT+3~&G#;H+YREvr^aX7F|HT=^tfQiB1~NQxAxG-?^O&x!r~HL)6H$T?sKM(7H>
z5~z#y%a<?8X+-GZqMgT2K^E=Uvt9f%rk6_9>ma&CRt<xfC0h>caQW-**Dd8!hb5x&
zZfRn19%fQ2rw)-GJ)S{yoNKyBb|J%^ugdSBhVm}>obrLPfV@rKG<?rH41VM%@uZO%
zz=z7$JVvaC`;>oK7w_kJz27;n5!To)&r??6KKjf#SkheUB42o~=?D8|`k|GE`X_$;
zo16@)*Xi*0-z)#CUMtjG&t*@<3i_;`*c4pBg}+(&l5VR<Bs{n|`JiJ|jhl10Q$aR=
ztI$Rjw=p@mzFbpRGGwtLQC;m*ZgW7OnCs2C<SCMdv}MjIA@6EiZ*|K*e3|@Xk^=*@
z8KZUe%9XNf+ZH5v*)8V}9g&)qYf0T=m84nKhLQ?i@ciRF)GG0%(<zc;%2~BK+cB({
zc2Indj95sJ%=8-NK%}D(Ba4u^&S4Thhe>$Tik0&7`c;y%P!Y)rtyXa)U!kU&_mJM4
zxF4v+atlRlC6)qlmjdKD7KfjiR#p_`{<~ng9NfQG_8>D@!1dcwvqn8>UAw6yZ<bP0
zgGagGC4-WGxkG07*vJR+9ep<RI@F&IW*aQjC>x&UJ(m!^?(~^ca{k;oIeO@T%=l%p
zoVjsD3YI7>x$@+fl4UDODzs;01)YxBZiuYYTHXJTBX8MGuxux2g-q3U(HSGFU0XJN
z3OVP9Y`w&s(@&SV!Q5}otL%pC;%~O?I*;6QtxG>b?l%|NPfGz0QNZxHCNm0Fwh;rY
zS+P`hZU+X~yIU?CJOqtw9mN36t2ESkJv<nI$&0x7mgMmyy@EwL2RjbJ+?8Uv0$@$0
z8Zp3Wfaz7!r^}8bdn6AOYTTtRS+)X96S4<CJ)>U)YqAM4Jy{?hD5o6WCBO><!@0-=
zcE#{*h|F;5pE;+W%IlDQE+wQL%3tinJHK&3aJw#-hP1<DD%;QxQ@`tV5&0f*0FBy1
zH|qLZ1s+uqq~b%ag^av!T_zy@-E~u%-YMoBw?O#a{MIXQDURH^*iGL!DbmB;4;m(}
z3QwIpfy`LH%aPr?Bv~SVsaB!7w5<N9E+CR5Nv4zXO}toYo`SG_g8((?iPNvU`pcsZ
z@icRyLp`U{W`gH0Uc)Wl)Tz=){5%Duc!@I7tVLT*ps;4`a+&qRShN8{{@V4WWT|qP
zc+-d<wl$cLh4-2^oSN;wmIA&_0rGPqYK<_laChg>q5TLmH%)@hUyyW&MPIvS18Li!
zrSdzqL|nw)04OF;Uk<!{hj^jnjdD2o8UK^_S<I&^Kl3<up|WMk0Y~cGQmj}hsfxrZ
z+=|_gh4|vX7s#3g^WkrjQfk(JRPyF62rX4gHCMO}O_VO+wK3M@-V$0?@Ntan(r?az
zFdGehZ&(-I_ZlVJ-4Au&YuTd*^dqcx?J-M%s8Ap@1~_Ukz^+}AJW*n)TCqlyFaXCh
zvnLY+1d9%Q;{yFouek`%kS?QYo;m!>m9GN3;~;?P<FaJw0+|Sn_l-pHrBbbWiV<k?
z!Fy;L%KAOWGpzegKl#nIE!XdNUv>9&q0gD$5xGAi*P8kx`WYzz9nnT2bA9NS@Sr*#
zM5qVd7m;(E^w<t<j%ZS`{-0Gc>$k~RA^J;E#By!gzO!V`oDG8<1D*e2Vy2fpO)*UW
zs6`Gnw!-cL2e``_bH6#niI@{O8H!AiBp@lag_6l*kF}CVVQ;x*+eX=faCo0g{#o*r
zD=&5HH`Y}t`^AZwC3KypZu@B|;0qKWpK>A05OXI_9FuhjGdK6w$x<?J5vf?Pq?9RL
zLAO_xpMy2bL05z0vjz(%@?LmKXkH8bn-lW2Td-Zc=ExZOL(l}ISn<+QqGUN}rq3d_
z={ni+*8&+k>SJm7)N`;WEF&2*X3<C;3d}>vjPUf!USla>DG+`NgoOcSPoE^|hyk$h
zZTht5FaTz3%-Jq|h5Vv@G)+8toD1osSl}m1mRFw1onM0xY})dl?AozS-XHsoRBh5+
zDpjhkG2|I)j*iPLp=FUv3-)U`C=e!q#y|mGUEfwXYVy)c?yNTb;2asK+UAAxf0vAj
zlFIYVpOKtMYCxMN0%Zluq=S;qp<j3>*@%$Oc{g_$>eelqX@n^K;jB|iN|q=q_3AZ}
z&6_sJsDW=wkxEsh7Jlc+S4hD(O*^!!_B}_0^!C~~P66^WO*QBgcp93cWsCom#q)lb
z>Ln^jpDu4p)~wl8Bh2ks@-vH(h5R(%-AM*hr}^YW%>^>c?c3Ldn(vx5>PyuswWa>S
zy|Q@GJQ+H5f>f#9K&sZPC+Ra}(#1M?I>PeCig|awN?Vr~QXotWFmJYEfR4>OI2Zta
z5C#K~1csOSJ;FT6n;upui*Su;M`Z^1-zcf6tSeilf|M^;S!zR0{IhnYeDYo|DOs(C
zRIAlM9TDkQ5fL0<>V8<)yzcx19^4f`6E*9l!Jj@QTB*&wQ=DWi9F&Ru{Snanx-7%C
z$REE>lI*E7%FC^vmu%T{sna00P3RoNfoulzoqD3{oAas+7A7OJ@2OL!ks8<zE(gb?
zRjdA%A3q%?8S>?mX06*vRyZ5b){5FIk1%+2J-ThjQXm`@AV07$Y7L!q|C%>TR{u3m
z$`>yy1A7dF(_VU*aWF~8Rkar+PsAKQv!{1>ntcz1xd{0?XU@FR?&+7L(W#TNaM4^D
z{%%jH(YUG9#x4`X;%SV1-fe^ds|urpoW4u$g>j*m9rCG3&CA|h^gj;$lJ3R;a}5S)
zV=#c9@?6Yg08j@^?K-}7#|($l!_?!EM$M&awK}qP&2ssE#1P3{vZOS7yq(HDYNNx0
z10E(*qW}FwM~e`UA;R+B_FMrpX|Hbp0voh)eHHiK=xs+_pO=n32@?2eWQ@JLx67oT
zzmw!wZ^|oAzan{IcZ@IxYNN!kbhL?#Z2*+d!ar{DAb*0|Z`Q8;h;HF5U%o_!^y(^)
zwSQKs!6}N7J7^ch;z|Q=d%yO1e3t?QptLh4Uo#`%_%WlTYViv4&YS%uL$LPtCbTy<
zZgV>{rh#+V@5#s*@+!YGO2-pVbdXxmCe1=>@P2=Gk*A*RBqiYYz~`lA>3;l7nZ-D*
z+_u73-zk_2gBUv07E6JLP=Gu{vxtBIKiRu$yG#ZKNCphhxjisI-q?=;_;|)-lx7|*
z%x+qzZX>Bsv8pUt@|W~`<0Wa<z9VozT}h0^H=}#pPi9a|Fike2Y50`Pz{B1`VnF)6
zgjHMt^eyBGzYuu(Jj{FpZX<dIXz3%;6%)xt&32dya|&XhA`HwWgtD9Q>kL^oYX)K&
zzNA`Q+Drxo!3dx0JkZ8WYGDyJHXJkWkIzKS8pG=}fTpT=@lrAa_S^4c>-yQ3x<~<J
zK;(qW>&!i|q5rlImI6_s04G6?XY%ur!w2NoN#i7N|6zHf;~P?-KoLa9xDn!1!*+~^
zdsN!=^u0#rP-8@%O`A4@JonryQgz2x83$X(l?4__i#F{gQ<iM%IL!XI@-#?-(0d7F
z!{)8h^kN`PS)A0_-Y)8u2B6vIZF@srQPHABW%K6EA;0YxO99FZtUz_=nLAa)0Ly32
zkPhu#F~C(v(;Ejc0N<$Le}e-k4;wdbDWyx7m+8|c$dE<zrR~!%N+Cq>AWkrH(~JgC
z1QCN1$lm=3<$3%x!fU3}C>Ew(bDg(+DjlG#*u8hZY~Ou2%*PAyg2BbtMt(hM{jS{y
zC}H6PN3wZ;(Ln&<xN`Nsk_4&06Jv7OwSBAf>-mbrKYd<48azrhx6a_>3JoNSgR_kp
z?2H`1ENIWa*j1iy@wAK^F;pgw`&OBTcA<PuTPy|QIt4h68B?8cS^vfaF}P<JDVM9T
zywmqX$)CTlE`*tY$nZs6d|vk5aa6u01q&9Hcl!>N(%JJ%ug)Fhzkk>2&JzJQHSeZS
zlad}8zt--!Dkn~!X6!!YeRJNcKk@88PnzxWh!#A%5X0xc8sO*;Gp}7(kQxjy^uy2?
zz)_&ZMS@XgFu(!B;AP5`MPBOkraaU53Hfs1J2Ge1uc{O@p?1ylQI`5AMq;>>d1Tx6
z-PqFh4V<7D7z>A`%l<*!{&T^Ac#$ECei{IcT|Kpb9{=ygos6Awi*cGcpuD;0^I?*`
zjQFc7w+2d~!bN2MA9G}2*B9lD=iZQZPrZN$7fEzg24ci|jdOV36(>|`t{9D@c=0ka
zXyB)E8=1w14Cp1Njvv#g1m6DM!$T)~P28mb1wMTjkQ_pO9Q&m#_<6hx>Hn$JsnbXw
z>e@AEkYcH+MntL336Xy^?cfd>w`hm;`$WbMAEFv}0_;SH=s}wBI@&v?rcGq4XJyKi
zsoGq8OcLaIZ~fDUL;{(=m#vd!>+fiitnxXcqs@D-C#WQFB#$hZKU)TO>+H1{01v5H
z#_@r=fzX+y<>R4W$*yI~kU4s=oI%1C`if9yuuv`}Na!a`9)C)Ho-k3aoVg$gz)#*P
zFZf&p&k2$xk^R`Q`fc7?Pyv~uQ5G%IkC1;1fL2?L+LcP|dbZPhGV{0j3{EQX@JC`h
z6*5_XxBOvYz(pjV59OEXe@TX1C1l>5X|jIqAM(vtKTDA!+|IZXGVzcO-cl$eSm<o%
z2gZ2*`PZaT#X2&mPgnV8^)h81!yMl7%=S5ag94OM6#h(PF!1fJlKMt`=|6CUq)(qg
zK_<s_Trky$=-YBM&9~(W77e*_<&i-jd@i@J-8$gyH{>iPL~h$s6HVTyqhaOhwPf>&
zwDP~v-%AkEYsX8B6u8jV>nFc^!ylgqf0W$|exEO2{JcU2fA&p8No%k7atcsp_+h*U
zUb-ZsMhueeOP0vU&%XC+48T`vZ~zzI$&#gzZr%Dy`8-9X$II<y8$#ewj#6H-5Nzkn
zomcWzd0zVU|3FS1J>i`)BUlc`hn9UiGPb_iXRx&I(qA5J)>P?Gt5z-jH2=8TK+D3F
z|0Nps)sM1x>q*(Zc{ptAp4N2J36lf>YzC)h4KI!)-NU-}e#cFZLVr5%&#5as-+BLo
zu4A7N2k|yiiJv}sTz>m~seJ$YUT9ypO4p~mO1(Fp)zuldIE=kv=q`E7Z!(ZNL|(t8
zS=RC(e&h%5_mbo7j!2`Xtuz{e131EZk={ZD`yAdv0ghFFIKyn*@Q?I)v8{ai@&BYa
z;<Iwcg`m;f`I+yL&v+H_s=0I4p~K6Pd+DFj>DiVtV$=_k9U(V45mMWh00|#Dz1~}9
zOc^h)_V`$8Rmvyj%9fBcsZyx+B}~~JR|X2?KQp%lVqvgp%MMwv^gp?jFsHo!&R|j~
zt~`b9XEacNi%KpoPazh3?`|*1Gfke7`t=$sANc|XAc-k6xKl+uP_N#jk{g)}UufS_
z`hD>~DO;hMo}+BN0o>HE>Ep62c~W_!?-;3AEUi?nTt>2F&JYc6%JWSS<?tDI?>Qig
z{{BaH97`lmcONB1kgRU+-hE+q;4T1-D{g1VoK+r!s{XerlcZyxpQU)l^HQl|X-SjD
zaj*-smbh||f;9mIYami?uKiaw97!o@GG>!=$F|A9?t`Ra`Kqd=;)Lr9lPzBxnTE_k
z=Yee5a>|HL$I9UM`yjpW1vn!;t)9Hhiey%+aphIpe)<jt%p#BW&Z`k+=CilD%MbsX
zrkVX1DTl>Z_}M%w7sfY(Zc6Q14WV61E?qjblp&+Om%_zLI^ioJ;}Re;Nt<Un$-#Yf
zW&PSUvh(jCfal{%uaJMJj0nAcHVO(}WX_pm{C&TB%sJj?in*V^UF$Hv&H1qEG<CRs
zn(Ocx4<OnvVP>h+w3ZaYHZ^Tqk04dLEtUeL0Of|CpT8X3zeoDK_Po5+<t?dPrKURH
z`Vs~pEesBzyv&!cp#1dH@A781j`C#J?oy}zV{!`%4QlFdfM(U}HkM+gD#+TEOJ&Bo
z%TU6dU=?>4!-qWT`u*;!?));>@RP+=Ru~!JoVoj7b03f1@4M?AuGhF85B|=k5+q0}
zSxY}5jVn~q#CcRmBuW$-DmypabCfo6oNSu3XeHHZ)<SCALvr%UbvY6U5EVv)=8$W@
zT)&(1=JP@4%rz1H46Dwtj<H_6e>|T^{<`%g?Wx1EVCFO#^wuybg^XWU7;6<LeGM!+
z&&#ddt8f+wkaznJlP^boBtL!kl|1qE3m80!HL-)Q(Iuke&|V+?6foeKA*Yz&XwDD+
zldnflluQ{jYvLnc0?w|~H@wRDwB^cHl95A4%iw;!rPJF3q;%PejwV_c&OwqTM;^(Q
zw~$U+j*K^w-c^c*{?69Sb^PvnKJ;&%V+nn|IcDxPpL#L=34LE!=UwYG_nA-TUWHbP
zI}n%z8Fj^1$Ah7W{d6ecfM-87RT$B)rwr`*zLY9eUIH&))-huE$Cv2EXXYOh#$|?s
z;mA=x%CMpDsaaSfXr6hFbmMMb@|3Bejc%>SG%8sLp<H=3G{1&i^nfp+@8_it;_>@c
z6;|7>b>II!Ud3#U#6#DvUq`57U_ye%Fv>juT8RV%*tRtQ06+jqL_t)s!@&K?Q>Ky<
z>C$VgW6;hk3I_mJ6C2n6EAu8#l$W0AECmt9jnC`r!j;c|<Hj{fh;VmZy7rNue;O<Q
z`|=a%@ZxI{fEbbtoyGBCi={wpp#aAt$L$|8r^r^=E`9*p-&Cp6z{}i;mmFLA8B_fr
zZ8#woE>v9J?>AgN8Zl53yxvnvAcPftAV|L(m?Y>_d<U?`RBt`eE<pjNVEzM*v@Mnb
z4tP#18`iCsai4x91Nscn$UGJUIAen{gId=#sna29(GdCKi;rY36cjY;BnDvNt~3`L
z-YGNqgqT+#GaiO_?g7xem4!sq<N^?`-cpRc)29E{%jfU)k%8}hBsp{C)sQZHURyZP
z;Jt%6NRRf24f*TTpX7%zBjx#5-h`Jj!`E04ZO2LMpn%aLF{|LVrAy__?(a#`BuQ0s
zVEOsZJ0dOUD3l9X412%%o(vfBj&vJ1RPy96q?%ctf7nEEr?$BHjbp_YO97f8Fhb9c
zt(%aM??dU^dywRSZ-B4ZJBN1!P$qDJt>#}{ddo+{`bqK>DWqoIM^pn%c|m~b>*ax{
zQHcaXl9+M*k1yKaKZzVZctAdWuZO(T`+ZG|8)P+A_wWGUI|U7$jas#8C+Xw)$>j0>
z!zAlya_nSu56SF-Xr_Rf2x;^D7sAxN_F5kW&)2!-26<)6-4q~A6huQ|(6j41GN9+H
za_sOSb)X_GZLt*ab_%G>fWzRS{rhBC-|o`m^}doLM{c!wwld@1w@;c-o+eG2T;6#7
z9hv&|C`9R6uAy$N%y8)C6Eh8gU}A(Pp{H%HuFpxI*Wc5`1DsIqXWMe`aPqAq21GL+
zV!QS)%Edj1hdAYDO-$iil(0`5+bBTc%@9lfty?Q!_UohDj5OO|gb9vYTf(LQCq$aI
z6fIg(-s;*{x_5a-&Yn4?A-wFOIBc5PquxP*yD-3O&r0vt-wnY47Chho9aElC6P-3~
zIz;IDOa>$U_m)lTRsLEK4NHytlg>NNaAIJFy-OD_$~!$f%UhlMNEz7w*)5xgzh4JL
z-;@Nff9i@A=*Ic;WbW+g8Y;|AxDThFy~6zzpc$4wwqW<}+AeQ1R2|~AW=x;Snr(!W
z)C3E(^{jx1LvKF!rVQ@i6LFwnFODQEmZ!r>M0;7BqQE^E;FY&528h5Lq|BhQF*72x
zef{-hc^jEd4;|d6nNEFOW_Ue-rUNHm@{iwrDQ)VvkSbMbsZ)(zb%u|F2%@heMkGUo
zy*psI%pN;Noi7-8-mXByM?-s+dniCYP5=kj^XJaWCqv$ok)Mx~?Ade46$p3B&*7)B
z0ns&T)|IM-O3RF2C%|zSasF+w6!1n0xL|-MECz_w8)lRvDjjpf1nm8Hhsn2J4i8aU
z_%ew0Y5+}bRe*nhtoVDO+&Fqt8a8aAD=E9l8!;Z@gv;&mWUz&L3&{w+`(n79J98S*
zO#HAovG$V@qo%z&aui?&!FakGGG*cq(zsd!DN?uugu0EM6FGW{M&4-F><QVpa3L1O
zYwXTaWC>~Si?tNE8v~q>1{MQE`dtwR5JZ<PQ%MS>%__5}PgX5-q$~7-8@(1lb5-OA
zhk;!?w#m0c-<OUZyGSBLkx;;A?Ia^SbR7^KBzg1Xmu9t_$k=Z_g=!zEfw406<rQdz
z32ASL6a~P}YOA~GuRrAEmTl7Lk>;8qi{XZBi8uwg7-6&>br5>vZ5j4ncR74uznZ&Q
zevUXj?H#d?0*V2UC`B>AkbxEhxak!ULp|B{Iaxbrwya*U#HUR;yb?f@acI+b`O-!C
z=Ch&F@13ENDO2WPCnK+XWH+(K!>gety5S>DCHa+`GI!2&U6efhE_;QgK;$Vve&%k+
zfxWxs*Rfy8>i~TGZR3(ho~FE$i()1V$dxmX^nCRlnK*8=+y<y7xVFVoATCoN1Or?S
z#sGak0tU!pF+dbwDrEx`6D0{qDm{A*lnJ9p$=S1~Btb$(ME1Q<k=}_Wb;3;~i~pJ{
zrE?XMB1O5?YwZ9eLEFA0qsTitv8o0i^nK>p&az<YWI1y9AixYY`@Y9KQKhH7Kl~J6
z{PD?1?9;LR%aS%tdi4w^0JJ4)6d(<mG@*R?%97yxWoVR^s;1xiH$;uD_U;&_fW-hF
zdjV$QojqGlX;iC`{PxRFFs+M^4Qb!Q0A4o(skRCZZif%<mwA(Zlol=9`s9oC6!$RE
z3S&butj&`x+RK!m$6E00DPr4t)lt<yAVAiv{9F7kUXe<bs$1~v=5axpnGhPJ_D{bg
z6Tkaf&YwLK?BC#f6QY|*YpaU^3Rn!_d7=|UU%!4$8q|MG_N@I!c5K@WABrSC7g)gS
z05rE4m}ZjNs`gJjk93r2^+nrlN%t|8vjPp0N|kF!;Gv_kal=10xVrnuYikOofKG(i
z-8g&tl>GeNSMubO&tVq?nhv|$;np!i*+|o@?AdZiBRFTyoIc5#ak!PjwzBA?KnMna
za>rr-&rzPcRQ?Fk&;fZOejNLST!y&}O*wo?K6@2_=8I!^wSU*Hlv}6HB4k}n2|^HX
z0zO;ZO92CJIy}=!#v|4D#S7=GDTjMW?DMs8B4qfa-)Byd##I|guH1R;V%USDg0_tf
z8Z?pZ%a_aEJv%Hvdyv+)YR^#ME(~zeVgS!j*{PNCnOf*##Y;<pG+AX8vcmdWI83iX
zmVBXCVe33^*00hUDX6(E=}W62PclpBx=Cwlt@7k4Ams~`1oJGG_|Oj8VkzJ*3eXYw
z_^~6hW%)9xUAv*&fa#Deo}mEwnE*O@@)XjlSzDR=+f>!|`=VozXDDoIjSdP}3=kbu
zzSD-|D-ll~eXNzt{bhn&Lf{4}J$$8j4dOA|37a;olO#bmC4c_HSRGxrTag|d$y}UJ
zVAZM9Naj!b1qm$zt+wBT^!BBy$<K67T`+H!RIgMEHuvcj;Bma!;u#7UyT&qQE6VXb
zyAb|sizH4Q;B$73o}sR-)zcKX8w1?37{Jp6NBxu;O!b{JM{X%usJN_Lwn&q%F?G5x
z6t4i#1ah>!3A}ts=3u+G6|~P>1zGL0XNRz33w>2`A`DiM+y!OTGQ@<035~BXk7udt
zyS0;VnfdbQp@Xu1`BJG}t3gQCE8nF`^gKC1NMgj#Z_%igEM4>`LIvKiN{Hwoy=^55
z6u1`yJY_LJ6zCa|TjR&)?$vc^P`9xxL*%oI7tU)KVPC*sUIC!_vJ)c3@6H`tCH2h&
zk}G$9eW4K<1oqm<QGgmjh8U|?_fc8CXdV_Zmyuk>Ylc<ih+^-G8U+BLxd2`Xv!HsF
zYD<cgsqA7nY7~vo-E_h(R-%mTS+iP>96I3Bi4r12ID2u7Qov$>m?FQElqpNr?2;>0
zMp^&QDoO0`?-MfHE07K~p<DsYo;FeH)^99H5l+P>S%@BHB7mmtWNs{4lHH6an;4M;
zVaKS+vc*y$q7<OkA`!IDr%oQ1g|nwgm8!Kh*Pt(GGa^bWPh3xaz7AQMDpeY3+^B{8
zHGh^aka^q|OM%!*fe;KZ-C}^4ct@1aRC+wpsF}?DeVSZ2ch)C-(7XabGqly2(<db{
zY@Z7iEDBp(n=~alnMj!@L40Y}q>ZdyvqFMw(wgWbzt^?J$?(AbJyN4|RY{wUNmH&_
zGlFP*%L=0DU0<xU?Ax#b;i)cTa`cL+A{wb^n~F{fSPT%I)DF8XDlxNU$u1e<`^(WI
zhXJ4yg?*tH9gXu+k@mK9Hd?m$FUgrLmn2V?+-g5#V1VAbc}p^8&LX>3u8`BGPU4;T
z`NS4Z43OHZn<P-9^Y8D!{UU{m6xUSoR{I>iuiOF9*Cli2tdcipK5WUZ^tt%1(MxgL
zT2v@-7Y4{`F+fyk8QFU&Gw3goG-)!aT&0#QSvXg%0=#|aD$WCF+S>*NU6lj7cSwzD
zb#(jDYD*%^29djuOmgGKHA#m^3H53>lAXJ@p(2~bEOONJ?YpQ+I(z1{B!xLpVR&_u
zx8qy$foLBT4o}~Z3S}$Fmi7PW4uD<AMEh&74TggP76XKXNYQW!Wj7;o6ev(wj%?p9
zSFb{Ld-={)oCeUevt`tW9a}farK86s6Er5)_BI+gC5$Fu0)-M!^5!oD+tul+Mf7&&
z34;vwP!uRYfR->(LRs<m0?Cmzhonf6QhgbK-l9;ey)`lvFdC(T1&hg{-MeJp?w!_|
zFfxR+_jr^7t{C9rF^d5_O6-SJPMN{o!_1kpN%l<H<X`SwA-ID#FTCS4fad#50K@eI
z2lh(+S`9JzCUP%;c2MCx!zSzj5nhe!L$13|oA-1gG6y_ZH^DNsg#{3QJ5{12a`x<L
zuU~ye<`vj`9!vpl#~$9hSE^L39%FIb$=_l9x%S+gcRl89-}#ITX;-0WS=qOT0Gei5
z);ZYQ-g8`k9)kfI)bs!bi0j0O=Kd2zGb&g4GL>X2a&j;k7UhVymN*Nb`BJ#LxquYX
z8`rOuJoyT_H4|PuXjA#}Ll+K^1YrycZeQ@+!^*?13#-kC)fwLN@vztkPanfuU+C+o
z4M+wX^b9cN*tl-BdgXdE^MrnW`#bU!;5ebv$&tec<;;m=k_8%Q3Sv)=*ZcLB{h(ik
z>mNg8xsGLKIpv=>7nQLI6G%CjaWF*al`Bk?bgxYGW*XRMi@g-k@##Sf5PP3I_V$eO
zni0?n7b+^}Po0*t2=2ff9j>x7_VzyFJ&Usdnvco}?EKlYa&pH`Nt!H~8nH*51YzHC
z6O;E9M3ZnW92^YU78r<$#06XvY%?c3qXj&y1O)}%x1StjR}n$PQ-h5fV)p;xF#lms
z5%zh*Jh^k_l|%dXdj0A%Y%18Jk)Z&`d?LR@a%lfvNtMuF7pXB}M$bhccTY~i5%%<%
zQ_kP%Q*!b0MW;`}4|nn61>v8!7di(gO_2f#ZI&R?(J7U=o{~@APD}fI?x%oa0EA3C
zvCI7!!2P}TjT#+Uo>;D(J12W#`sK|51>!V-CSW^z?u=BaP+iibPUnEbaA<)aG>o}L
zNzK!t!v|!<=Y!<n!Tli<r$z_(W4a6-(O=G?UA9ltg+QdR{_e+bWbL{Yj@bgh00)ul
zAFn0Io-p})S@-W6orpMDn`<Zt&YeFi0|vjPbyK@;&WG-=xrd)&mC)zeHjjPr^~bVp
z$7Z!<45|A*b%a&#!;Y~XY7L7PEh(2TU6gCq0qkKUv*%qYfZ==+@t><B_A_Ha--<?a
z0rCfTmM&hpAg{jhtW>N~NGen-==@bLD6O7oAltTYR{o~9`NyBUFYmqIGekpfc+NZy
zf4dgf-=VJsb1HwD>s_xk$713W><pQDUDBjUD`g9oluO`gSH(e0^vSkqDd0*0&N*k#
zo{_5M+=l^N>$l${P65g<g63*4!(({igsN=3TOLNd*4TMRoCVNioSV?5u3NKQav+to
zA3(2r?DGf$Z)rHZ6)Ts>sx`~h&YF|!d6<jzc<UAUdE$4ncCBL|PXJA@$O$z=`ph9_
zBn07p7(|H}3sEOiCqcoo<%{INp?wNsImif{IpFv_*P+3l^6O7(`$>C4)?v=;@X>li
zkMmxhXE775smHX<t!Q(O*M0r%XDV#iXC8OzcW<ml(vHqwrw$yDgZp+X5OU9Z;S<>6
zjTGQm<T$^81?0crtE|~`VVA^H`y>ydpwlK7fjzptEAwZsl6kXM>Sv4QPe_wiwUmGS
z{1Qv27vGScxQ2ZvKXJip_?5CEw8@7#$LAzp@){QMJ@4gl9y8y0+?97}I>C0Lw>Yve
zX+TmbRJgco+xnj{OCkGai={wJQ-I?z1Ow!9CkBY=CyU$d8<|+3P%+uM<v+xc=fa!j
zZr%r?<E#-Mndcfbx;y_{FV!9|B{!fIVibs|7S?M#N$b>lL^aWxni|0H0&={UDOFz6
zRPNrpGejFj%`r=w)M;SvlR*2$EnsTU2%u9U6)_7zL26vXW85ab2;iLrSrZvMQTrY|
zG2OzXd<NUcObC-0lQr*WpUecxbDC)p6KbjysdUn%rih@MW*S_Pvuy(S6v<QGMHWud
z9LD@)J^Y>$b-1gLc?bfsrO%|n)bqg>>Nd<)f*;LY&DeUpi~<~w=dtB?;oxCOk~Hak
z&73^_*yK@~W@OHkRg*GtL6{hkez+(c{^<u22s_~P2{J+(dqMe;z<0;at;&!7{sA)Y
zui26{b9Sj(xrS!*GZ|4SFP39Lelb{v6f0Uvk|as0yG}cHZj)?CgS%|SV#$k)o|i9Q
zf(>CY$&ewFnuW2Ab?aA4GRTR71&XRxI66Tr&DqkxuVMb&sZy`OV|Z@wb`0|L7_;@e
zhXMuz?AW+Ls<tYvJJ5EbaSv^yS__pB$&#gzo$J<WSkep`v*-@Ix8Z>3R%t}_y@cFP
z=21;?;sBj!ZrpI6W`r-9(ExHl6Gm<Ec?HO~W!|5&q*aTj<e8^llucVU$f?sOv_F3>
z{6jiD-&K+WtkQ1!yK!IZ7Vu-Os!O@5`Gs0%M;m-gC(RkNr%F?3v#QoECZ#Lo3EmoZ
z%pX|cq+iBKsfxL!a?K*rrd=c14G(xuq6DXZ%%3Ucv9(;IK{2UVy^#Do`3DTlAf4pT
zoj)gEjs8^I=DlUB<dfyAmfWSuGJxQpe^+Teo3TQ4r(+QN$Y(89w6v2E63&(0xbozC
zvc-KA&{(dFA)2RvI-+u%MtwOP@&3V>LV1a%VMmW1mLo?F%1!{>RjZdt(IO?#w`3aY
zblPu|<oh2-qk(v`dFw`btYuB<)3>XnPn$u$7(GHdb$MD&tIcpCnF)Sx(72K$N{~o0
z0ho7w<2m_g_(0|9W5<t5yJwrqTkpOuzs>jsAbOE>eEA7ky>_{>4Hw1xkd^U?_K!Mo
zRik+ZqMW@6*_t7JMoDn}CP2zfeddT$*4|+$;9d%ZU;w`W$(SJ{lxV;JF(NhG`&`~o
z+fDdRP*&#7ltcZxjPlPLp3U_c;;aUm6BoV0)57*SEwm%l(2}9tQ{XHJjdsNfRpqVs
zUYD0&cpZSS6l|gg%lPl6OW86NrE}M3<b`Knl?>%G>hW*CnxI;$Z@>FOrp=fvfBwE2
zlTIf2Z__$y|6FsKJ$<R<1Ry^T4b&CbOpp0$qF%pf@qB6ecx_p~8fG2P7_(eQ+YA0!
zE7WLxFytNidD8bXc;F{8Yxb|w_08wy=O1QD0Yn`+jLE%O>pGGYnyltc+sLoeC&<XJ
zhUvZ3YSU)3!waos#*~FpyjUr%n_91R|E`v&Iy99pKl?#yR<EnH1Ih+T-9tYzOXe)u
zkdAq)Y6Td1#1>0|2T_0{kM_rTa_7T%PNrJe7!kT)gH$O~%TE)&lYiH(L1HHCa_!zO
zd-v^<Z@-)%Y15=rC*tJEQ-tgYshJk~|Jm?wb<tg=a!p+v@7%pj7x!a-_)>oS-!!RL
zrxCU?<0}{?U-s)e1iMj=2(DM>QE34lrpG!H$b14>Q@LUdq{huA`(O&iQmj}>l}qlE
zb6V{K|6yB{h17;;#NyyOcDksMr?{}iQXpn2;9!7ssndD@1H|l;#pTwWh0P6BgcK}T
zL=|b#DYK%Jc5xCwtBnmNqC<%PoB-gACIgIs;jWkD41imb1p&cX=sa`w+-d!uI#pWn
zht`{gA@nX^zO3KVU}7bRA26u5eD?7etcWw~%BxtBlG3tyTUmhAmM?bfqM*NJvnO?X
znA^LxYS!2L={%+87Wmcv$>$_@&b<0uG#NQ?V4qG{OO`E=S37lACo4wl$doa&d_D3<
zbv&$!^qGT(_LWIL{w{f;#iOGWC;O_H%r|Y`fUVymQUrF4(`QbW<trA;&<{pR<3`Qp
zDm3Pt3*ALKJ`CSaVu1fW0PumJT_S&fYdcB8*b*iMIQFRJ+yhN-W`sd>&oVB|rXGF}
zjnj0hZtaFryGDKG3z}4H+`L|1c%`k{Lvv?}w!lV9PJl_r$4ub)z`)CrK3xWFhvySO
zPL2P5hH9;;Ro<|1o%&VKY>M)NyuwnpbOkl<;_nj0O3Myp^SpHVg6@9(`rAbLbl4d6
zuV9_gUD#$oK!Ez097CAF0x-)mrYX_g7u%kt04Z=61_<^+a3=<^RE`=2DAtI}Ql?5H
z2cQ68LMC@&jHva_eRs!M)nI%8=R^DV2_0O>OzwU;%AjD(Hm#mkJH;i)j>hlQkkQ_F
z@PJQc{eS<+p9|*5<1N}r?p*oQ{<uW3GV*$l7o~W)>@blipr#nq4AYL86A`t_oM36I
z%(R!>a>|ShipLTAmbQj03=B{E?x1T|VM>CL7(bp~Pozuj7(>xrWk@<q;sLOsrUuMR
ztl6^V(Egc_b!AFbkb^Kop|(C<nhY`rQA7?L+^5k?Xl}yk+x@h2>_$%?Jg9&oMl^{^
zN&8P+pa91oLFk^H+hPBlEMzRlMBh~t4jbtF$f#MlQgx|NzKYbZ_ozJo+^bTnMgy5V
zb-XT49j6%dFc|HVuc@8oSm)x^6z;zKF>j`tTYd4(2;F7MpSPeoB;&C|irx=EO%RX@
zlg?|Md*Z%XY6dcA-VCWwt}-U1n6W+9enL<rPLx>o@7*1uc@OEl{bDH)0~AmU0OgXW
zFhJ->A|?o3!a5fEn(+K~S3TirE4r@Hg*SG*cWm8!mrRVV_M@YnIH`eF<3LP44APxb
zwLSL^?5Glt1DbZn)E3X0GYu2j2`O2!oB~z?SWc|Zb!siSa^%5QYfYGvq*bRtnrw_5
zF;+Fd)Lb!I#)(tMRU1s;4YaRz(geL~vxV7-wwCGArVE*v*fv3hnm*t;sqLW`KMR2~
z`^C^O{NuHUkL)w^xH>6ih31^AKThT}^Wc^+w_TSk`%Av~^n1ydw}3QkQbkIZC@YmK
zRC8>Vajm<GE))Rl1LFB<e<|o}u@ra^1vthpojDz{&<q*S54y=C=i+IE94>6ZS}JO8
zVG&E8h~&_Yn}uq8ENacdki5$8cNU@!GNwru%`e`1x2t?N`WLBKzAE@Uz5Km=k$gI8
zh{NA#Ck5gxvye}&-@LBv(0q)hU&)dtmoA-qND3^#DR*L~fEM_V3;$zS=%eH428rW5
zXUz1;w(8py!1%-PBL>LfAq)_jzMOYiC=WRP&Aet5UwSeU|4?o)Y7dnNktw|20C3mu
zk*Uj__t24$io-L<jw*(UDFuK#pDA=*aTD2a{Gu@IThipoor%sl<ko))V6$e)CgUf3
zE4%mZl2XOXsCJi)(C(Nv&P$gqgjPCl$N*{E=2=<u58^=s+-5^IH8R&1Uk#Uy8~;`3
zI!;8Z*RH_!>?OGYE%SDG@Ux^(ml5(HctX+%ibokD%L$3aQ-!c~O6R5hG+hD19X@hM
z#!nmz8|^n$YenbA(PKxdc1wXZwp+RVOOJkPs#!Roi(`wpZ=XTZ_L;|^`97-AI}8Kr
zMN#~RbvY40Qs|@~@;Fhf*WT{E6yTVNhlwe`KM5kp;Je|4XnbUHAEVb?ym(&rg5Ni8
z`d6KWX?pSbm&0V{?^C5^(<f9D%-x%-SFu9`Sw!&95SO6~c|TZG=>*5gZSA^M(i5RD
zS-8Mvh{p>TE;zs(9pE+8Lg#~)x>=Jph&A0qDq)eE93Jg4X*R*<Oo>P&*YM0*%!4_<
z?7x-*(My5g@kb26?6(}Bo-E|cgNOD@-vK@3$)_8`skgE8!NPd&{@p4MOxu)WTx9D)
z+oe-HZvJ?V-%a7~?K`(<^dF6I6MUYs!Sy=+Huv&4m1;+h9+Lha^u}&=keY{$89OS(
zAMAeZndAJ_ewvQB@ssr8LW4Ld9vlii)s7px9I2|}B!D(Uk1L!cm~b6!NTi<sfj804
zks-BcU%UeYoL=}G2;8Dg4UKc1nho{-GO%B~4($+ESg%1_^dBbPQWbK^kdOPRGZ7t*
zsIg`u6?(D%`12Tf>D9I}@WZ#DWojnhkC}pG1?f~<%L>h4BZvqLyd)=~!M=X&x-@>I
zxzw)JK&sWDlhKD7ZNo32pLA&dk_wUMI&_vL%l|?|fEw!9ShGQCd8hXvDN(#MOhAIP
zua_=e()y`c&x4RzpTp@;L*%(pOH9TjEyz61vji^;v<LPdOM%c7a5N~1uvlc&iI|ET
z&T-3~p@t2b!aQrO3?BBbyg%e^8TN@2F=O(0_!nUJhN`d3nX*VOWZaC8iGrHxa-}ON
z=tmV=8Z~UHAt-a@$SuPLe<2+^wUNT5GRs$EK9z1=-<BuabbvPZsA`y-HEE57gTGFe
zoOoyo!Z3Qp3YXBNL<G~69XuCv<u*cYGQ6N;W@cn?%=O2%?8_7|<4@;k4`KkyA_7&0
zs;u3xtUB+Le|x_9uH=EQQT@ghvCFha=R0TKOQ`+=R9I=!p<sbPxk3##KN-5#$T@y8
z;?JYatLt1zr{aWYkMk#et(@ze9qGjQ&3oA&wnaH~{rU|A8Tby$xa%5b_dh7=h)*ah
z_?I}bzjF`T#ZCIhx>*PR*iTQ%7532&?I(m>H~satF&jrsIGoo&`{1MixX#OQ@2laU
zq6UevSBJd+xjF<gfdbp&ADN+bt9EcUdPGvgW|2UV<CEU%jL32H=n)Nb*Q9YP)kJfZ
zOwH2Uy#`AEzC#g%8F8SY>3ZS0*Wj#}RRh8^j`W=0{?>TXoTykQf$lXh2hBfNN7q++
z$>VTJJbm^QoB&&B{8+|Yq>VG3n|`16w;YD%`O1~cu+4r-Ct`n0&fNZGQV8~y*Rrk&
zh~~jieELlBj7W+a9Z5GspQLC*0d!2x`%!xwdv`QY07C|2#)(_bvC8oi-No=bqtv|k
zTo=clIe1aY{*Yf7*@nIaT-cKLF!SiPD>cLw%2k23*_ogSst3ONvHCkuGsFlv6>$xB
zoKk_u(_rz<dzfu8G0Z&rVv);`Pe#K`9|+Rq5)u&9uiZ#_n9hmDWF)$2!}dr6K0i%a
zY_SxGEfnx12GDs7p(hz0cF4#5v1>aR%BmOD+=5{@>0fm0*kSo|;T-7*<rTp(%{3Y2
ziuaa>-vS-^`F#(f_z<v?$N#~3no%;q0O#ek|EyGUa;K{rlywIWA5c>-hM1+vS8+rD
zW8^NziD&+ZB3M{+QO#+Ua>5iw_(_r^iSBw)lg)X4#j2$+KRqd>V6K@9feE<7#()LP
zUBMmpJ%~?VrE(2j$a67rSB0kHNPbeL`vX8H4hH<}D@fs0B~AlqzKJ9VdBvCFGLGE*
zg5n`DLN<v9n@0j*7EZPt_?!qc!1RK4$vnow<8<`nz-KH(PI?5tJWe~OoX|*dgcCHg
zu<xpw#;TF4MVec%9WovN7&n%6^BRItGDzXV#q>MtruLZiJKuvetRKxmSTXOTGa}pO
z_xuQb$JHsbH{pPW{>g|)9s~vMEbKQ|(F&l!L@}`)@6PA3b$Olw95X6x!2|s6Ievcd
zvye|xAVLN~u#xrb3m4OzkjQ5Q$^_Ib+yyg<koa8-?q$Lx@~hF<GEoZaX0#ESf22y4
zTA!2G@LF>npMCwNe`F2JygvJ4sLY+YTzQ}O##CX;=$7ur#Z(_`yOsj?qktzd0JX?W
zn)LVbg)-!W&(MW<av6(R@*`zIpB@90KWS3A0lQW$pKKt{w0lu`pXL-)mT_^tV9{Lp
zaM*jQ5aaH3ueV>7QJ;J#_3J(glTQag6G$_H)-O|kl3fUaNw8b5RwLb=W?0M1*o~&o
z)kmKWlHSOI+PrD&yGa5bb#R80B&}PomsG=?JzGv0_4P36_2vL+3WeUTJv-!?=Uc)l
zy1oMPVns_z%H*k32DwYhI5NXkrhDhYJMIE#3>Hpu)DWxY$Ac3LL8t;!FpMc=AP!bF
ze+c8aIt(fd;56)Pr?8&}gqwQ!$-4N*$&-^S8PgO3XBKk}CtAnLUxz5q=sD*a0BV3~
zsJi$Q<xboD6@>6yxH#l`2iS9K_)dGgE~<sk!PR&QXvRZ8MN})b_j@%3X!p$RNk*eE
z3%;0oU|nQ}(YPyL8o*1wbp38_Gta>DEDqm0{K$IDd7g9q&U4HVx_!qMHSMCA73(+k
z@cL*kluh`L4vmz#DpsPs6ShH1flw5P77TD3{OK%=%{)mSReprbQd0~66mkZd;oeB3
zG<@jS(yIBB$|GaG8>Oa}+>vIX2Dnep0h+0_N~Id|JQ5}`{{ziF$Ne-~UVF8tnr)oF
zcusen-okD*!(EPnUlT*=ellz{lyj-15llH-w5f|-tg0~aNPHJj2;?bCry}xKkwPVe
zbuf$SQiQ;5-ny=8xS8mTrPrJNpwP>ui(@)4x>d$NPEa{Od7i`{rkv=LH<q{ypo8B=
zbi5cHSiuva>mcCqum+uT%$Ya|a9vAS*Snr~ouqj@^z{#_``+tAwe14T?_7KLH9YQ)
zLJ&;`3jO@<sN2@zofP1h;a^Ob&^#Abe_XF|{cf%eea!iNhu2)syME{WHLKTi90%b$
z!3BD(DY4+)#2Q-Ij>H-YcoqY=MB54d#F+mnuQ+F42@I5-h~3V-3taGW?rT{8G0n}u
zY{mq(k3P~&G9#rm%`plVD6F;7B+BqO7ukvZ{MB5v>7%V+ZkZO~{W^jM?9;lq>lKK0
za_7vWeoYJ}z#Zf}g@E2!oG)1T2Z9b1m!A-1fZ=j40)Vq@-M$H7avg<P0fg!_GS^db
zSCyMyyyAAR>haE-^!zu>MP!`IuoDD~#fr~!6E6oB8N&5X9i80NrZb46XN$u;izi<Y
z0Rb7GHr~#Hz;o}$lh0x6jy?)dvl$2z2_^{QnDLZA56=@B9&zP&^WEHUt}(x(^66SP
z>m~ot7CWrns;IOR>3i8H{70K?1uJ*f0g<lK-e@ThWeP+K2B5!F0_`g06T?@MU%5-g
z(6H+_td;M_eG~F11jOWFf@p$a7G6ux%7`IG(@W<+Q^4*{Q9J>x0n<-LBO<1u4B%mE
zjaerFDcjGKfj}I29PXN0O-0Bhq1R)F9QQMD0C$7?zcW;_Wy!Afut5TM+K{uq?k=p8
za-8y9=@#;k?rte&>x;VpI+$+89?AVf;LeM2wrK)_y=(cIMD3L|<V;itAMU3^B0X$9
zUeFd-!rWHzWN`rW4Nc8V!Qshw<H_f+bw?isxIIc=0(H`hL19b5PiG(6H8Y9~os`X=
z@mM$45adR+urAiiOn>}tN{pLrn2z9+y&_Lj*4knz5Zfr=Nen>qDr$mXe(?<%iBOgo
zkz|QccNkXk<jE7#e{dfK#q{}MId=T0VgqIsW;8DPIx*ZWorwv8RoRE@)D%kZxbqL?
zfSOkj2ZP^e15K@Sk|Y6Yw`}AR>zeo1Z1txiHVG-Xk9^8GH)YC{>ZJJ63tiQ0gpqz2
z(Ss4ejGW=M)IEBtuzt#O$44yAL(MSB6sJu%xEc&ZDs7GfPZSO`g4+}DS~cNec#MB3
zFc29}nQ@gFLMAeuU_E3CCOg@IG{*G6^_2Ea+X4e0J$^*CZrg~qYODPgkGr$5K0X6i
zx3t^hBEuqRcT(8<>f#Wju)T&|i>p_I;9y5#8|;u5jgL#s4x@n3`~A-ae<-LWkmW4H
z9VbqPwQDxeNH$FEO|N){kYwL^-q=X8%Z9IXk_vtX9^;=m#_w#8nMyfvHfh`v&ws}u
znf;+`bFDYHs%ZaUKUCI&w{5W$h%FRgGz?E+0P-n)c(}NI>WOFJc-Kna9oSPUl&z$X
z&+No$0Ir)o_P9FakAVGiizn*I#~*&FJlnm`%lbWIhRkXsO$TBJusYzFl{oUi;i;b{
zekY9T#bb2zH|;ZuPrK(@XmEl|FxmJE<{3}JQ86pD$&5{H3T4$PMBJc~tm`Yi5gM<W
zwwntkAJb+`mNjesmR5+&71@L>rk(J9s!{~<oKeL1EO;!hD{)d98oaEbTId+(p=A^Y
zGM(WL9^5A{zt&!U7(WKa`4eS22IB`q-jy<y^E!dl0kU~5|2XNn{_&V8VV&p1xfj{W
zUg-R!-p^|}8M6*^Z|M8XapzjLd;d0h4eKIvG0Y7!qrLdbQ#|akLT2H%l?lCt9(t@T
zTd_A#zyXyvFj-x@j`a3KYcW!s9h##EP4(%h59I>1O&4H>L{lV&d+gS$lWL*ZKQ5~2
zRZm`|9Ad^%*TRK2|4iX^yoS3!yq}Ytqdjs=S4<=v-oxWugz{QHq|bKccT->Vf5ubW
zP0A3Kn0iCe|J=64*hm30{x}{3VN>j>5lIk8GYZCKpYrn`QX1jlw!y)7%eGBY2Vj?(
zeN!Up7B$t6J=#*neluA%Zr-3tn0`i>Scbc#29{Y!nG1sE8Jw>fafmq@$m@*4^S`er
zLZ%#3)5m6wAD7ITvnbiAh$>d3luVuQhn`=xW*O|PYe>&G`l>vk8A(5wW-x+R=8RdT
zDZo4xi-ignK}g%B8bM^`>c3Svw_xr%-R)vV(f8l`*yFF2a*p!+#%<#S?R_}lj)eC(
zIo;SmF!%Uj@LafX9utxq>kd_wzVhG(-g|qnFeD5CDJR!2zZotgzZfP%2aVK8k&_<1
zVoi4l9LapV9$ceg>=^r1&*Pt<AV%15G`6N$PL_VKono5qAlyqJ%1M=({j}gd+E1Cp
z3fdm}$HA)GLO6dT_&f>2<J=lzJNzWWdAc}^0~=^)pc%T);%84&Jnq*|p^v@C;81an
za}LK*^cJ*7KE<Mz<xM0^;CARu@GrMNt5>a~2~l2t>5X8X!d5KKU&RDYFMMj6*k}Ho
zMkEc6d&XTS!;=pV9p10IGP!f*)2(1mqzq~GNc|={k#dpCn5_iP+?k?N63s-I(UgVf
zqn{?)G};xFd7P-VME9$4TDAXL3OE!99)C>KL9+@^iVE@^=Wy;ebH~Xv#<`lnnS9Le
zysj1;fNR&Rk3KruYigb8#K+^50~#d@XVW6g?eoue*14KEfg$DU)OtiU&kSYDEPjUH
zsg2Hu@OEz@f(HwlQlQOxGePDsHZ_4Z9TN*9TQU1Y+)<!F5$T1Hw``dGGfFLnvn^Dx
zsNTclo+zxBGM%A6Z$qxDeD_2{F<fWd1kfCbc<*V`XOxqB_k)D^ttgG3o-4@_4u%sR
z4f8W06IuPbja73z<b%(3f<1Zagv|SMwoZ~9K(sfiU#AgbLTAt}9y@kK{+K^Y2S1sE
z9=i;-ZU!+wIe9K$u~^ovUn5PhqGjCZ{Rj8TT-?XF(sa%vvyoA_nq7%N>6ei-h2|26
z4<A$}u3WLYlq|ut<2Q8mJ9G9_Z1o&~EmlUgOC|%EHa$Tt1r=Z%EFJJX{%XtRiFRzA
z-a!EjdjQo0k|KS2Id|@?g3_3LGQ%63a3KA4%QG<+#*FXIa-NI!;0{u&yk+Y~Z0+`t
zNk7ig1vKxU^6Ssa%TGV`yxKqhHuD$V!P>cNt8{&}H$3b2NR^5;uoe4)d^&Qd+F8He
zrMJxfW4i80F+Atj-+qQVlE?@BhfBkHkLlu96Pb7tEd)Q;-5;D}p>>CROOqR5Ugumx
zfxEA?zbpl!hXNRXiUBgniM<EVB*&vOPCeB=L3GefC!?=v!z^gcr-r;WC-KSS{4>DW
zTt^u}kZXPu00Uk-PZ4arX3p^-=W_m;!gKtiQ}4~-dWb0u=;k>mOs%=&PG4NFyK~n4
z--rV!&r_w(pz@t^-rGu?G~wV&;9$<0Gq+s9DvX0AI$q8xOdtfor_P*2_Mlbr&6v+L
z>mVo5vuDpp&pxlnk3Wr3+azk9-W||gew#H#0VK~q(Y_IEsn<!)?74JnxH)1uZri>&
zM7vB|t7R(|N!t!hBukcTu(`}8N3fmza+jxN^_u0#G?-I^sWVmg&RyH#X`4`XKuh&v
z=eDvDDLe^~Y2VzoV-rl!dv!AZ{>N{md!No)9|N(E{PIIR?#Y3y+g?Z=o;gn*b;i;R
zN1klZ)*Z(w0MiMK<$TbXT+xhsE{-uV@MN5dS<YWLry0Ab;W~WefGl46ryeK&8aqPD
z9-3clf=#q3oE#}DE?vF=xpYf;w{QP9<+G1R%hvTrB@4EL38?8s&-*VTQ3ErB#m9E>
zW%zWApYT5^SEiC)`vsCM^Z@@d-7j~dVqy-WY-K;W6`dV2S9jFR!`e?vff%9y$05h#
z)gXtDq5}hv4_yC3Kf3EVemBJ&H^2EA=6RR;Ltks^aJ|p99&_H@XMUT{(8tYhPkpM1
zE#!G#XvQhugIC_3YA#0VjguN^4hRL%0F<ktC1Q$P9`jT&HMc^Rq0ps&=8tq@yL|bQ
zG;7jE>eYEfvj=k9h2|Rn`|b;*{BDo<i<{-}(ZezmnTgT^=+>^)P;$T=<l;qy;loOe
zg-%KBpKC5-M^Dx*AKFRM-kNDUKl^x$1Rx7xi>6NiNavQ1M)a3&M*W236G`F7kXm|o
z?}zhAHD2Vb3e)5`yn&gKaKvYWWYYNG)dq^I+|1CNcj?yAv-HBdAP~w0#tDEX&17&3
zO*{MBQh*d7;G`{JuDto>$eMLA4$urgmakgit{0R$cV1|jXKS(p?*5oUO^X&6bjw9G
z&8w*G>GysQWF7lniXsIsd9Vqxfi1_*5w~D59mCHeq54`-(-er^q~|-lD)o?|jNrR?
zu~J%fXw8;sJ32loTTQmqENa3QbEYKG@w~Q;*iQim1Kbpj$5r4lW6~J=d+s|uBu2Z4
z-MU=m%cy*(?DHf}iwVlcNdT>c!lX-kJZghaojNJ$uuZ@%4o|!wGcQgUH%sji%~r~+
zIn$(Z^Xjtt@9mNkp00EzpqA>$(L>so<p9LgA`?unSh+-c!0?|Y4S@jL>}Tti?KExh
z`~`FLkqDkyN){^<ycGin37A4`#uo7p&}^SSe@?^NY~QgNsX^!IHB2#F1raq+p<G24
zLt~@J72j^8?4)UF+B9j^p^qA@j0oiJ$-?JipSVSxA{|m90~mSZ%F~lH^u@ZVJxZD+
zne5)Z16tTij<yv7nBzLS3jsaLyjd%iPj!0>{b2a2G-=W)uyyT|kq^dMmiOy_`YEt|
zJ_vKJ<XRWC&a|b>4!dRr#dth!!<sf}qLIkYvB9RCApmEg42g-teo=0mgwy0n$Xb;z
z=7D3PL$*yz0Yd?dLykv|OYZnkG36-?V4Ad_52pZS1{ETd<CN$5Yt~Q^`tUpB-W74y
zgo6_lv+e{!`+VZmF@0fX67tk*pxtx!Y&l?}kxlaFEui+zY>Q?X1kJC!{)|kXI$pi@
zb6}gdF>IJ=FG<Z3ZJ@ZN!D8m03)s5l)~qqG|MK&3(x_o`*h-F8Eu3Np48}|uGfBF1
z=_NykjGC5{HqPIV{zYv?83>&Yhb-}cmR)H;8u|Ov`OpC&JV%Wec8c%1PH%SOKNMoy
zw{1o+c*M3P2nufBjZN69yo>_Ww$jdc=fT~Yu!A<yhEJmVQ4J4q=cfSt1@iF^-?^j1
zv90|I6W2RCV+5Ssbs?{rhoHS97Xx$-qz}be*aq?$&G|deXw1=q!`+#7%;%j8qvacE
z!O4(OM*?qNcjWB7osO2i*hVY`Tq)pSfCM@&IX*c~4ez>MXTL{31t{B?c!~0ya-H(s
z8%x{;&=Bn0CM{C7yqr0G3R)6sZ9FsOnz@Uf^fasBB*>N++KPoCZfKKC6AXs2>HF4T
z#9M3&jqzC>INai`0B6CEMhpOuzM*!(98?U<K7Hn71)8kqG32=K{Nn5K`IjHb2G~k7
z8xaQ{oe&!}XeQ6L?<8&8bU=ukZ1DO&qZ%!0d}%uwx=?eKCwG2mu&-%E0DAM2UbO4v
zSoVabo_$aaG@kMJ*;A4k3k{QbDRlqrZ%YAJ3fzFVdMbo-%9tNx7McrZ=fd@h==*N?
zJqWgywEJZ?E&g#4d=KBK9C9?qyY_6Clqpil@e{|?j+r60IH?cn|A~wkIav1W-KoD9
z|NWQzJZUT<Y=FP<pJ`8@5I=O`9DR@bkd~aNB$Tnm%2jk^AD-D3OM#fC0KqcnVvb8s
zV}O``*0|O_<u~Ox<vHa#<-0eQIBUY8nh|JvN|dc2o951kBM+Sk?*)=keQBKB7{-ca
z!sPE^4v}89!?a)gVf;7J=JBT`Z=U=b#){X>fYV^stl5wlWvc>a9;3ZvnbH;bRUHp2
zR;a4yscBw3?_W8DL@F$oFyM+7DIvYy>?dv7HIfyJHp`Q(J4m&<B{ZT3gRCDqd_bKO
zM||{+YM?p6(*Y@TxdwWqO_NUR>OZJA0;~5@o6E1qe4>|nYNgJ_!g*-b)8)t^*>mMl
zZQDJdBXno&Z=a@sF1p~$z$iB*N|l$rdv;2W9C>1fCSZ6?SB=&wPuRB*8)qCde8Zg|
z7RrGF`3g(Bw$DrR)^+7wES@*Oq1V_u6CE=P*v2jE<@uMN)C5K+PaW5LO<e@$32!=C
z%I<7IQ}Wy?F@;&VYepHfXZLm~)wr=b1KsK4o&MQxmIBdDfe;K(y1cBPJzK6;uLE9n
zc4MQvFSfnADZqELch4@B=alO-=WvyycV8WMf5lk<O_I|*fEu5bYnIBRkF}IEsncPl
z6NZ*3lJAF_Alma1h<1Ldn}(e^fRJ*SS^=VO%6o4QL2TICx~*HXco`Y_$yiwk+vMa(
z<C!x@E}1)Xg-n|Iqt=lrJu(Q*SpyLM1G1dW(R+TKI3HT#d_q%>*Ad!^lQkzwYME);
zu@8|n80v05Y%wSNGENpQp06=yzx`^0)TmZhugwK7<Rk%2g70-Eb%x1Gn>L*~EVXaj
zQTzYrUvu<W#}2QAgxQNES?+rqnT7(4SsRnW<})FjD6a=%D?4_n)b87Vdm?5jK;W7V
z@llsf`$Z~)uPAU0$c&DjahzVi#(1hl<QF7OAcPIwzFq^fF~(e-I$@q_km=VzC*JDF
zBuXvwYn^+*(J(R0IIaXo*0?Bd^%x*W5y6LX>+`}{lBs?vM+iorz#^P+-swQtrd2!T
zYsxV?;V@+|6F8&?T^PplZdmPEs_@yV;bV5Q73)_>&9+Ykn`C*mU0b`QKzJ$OV1Sge
z;@=hWSku-jKfKXdExh!I4cAd_)4yZsibYbR<>Mg=iP+FLclRMq187b@+#bkWq=*Dw
zx)f}q$asqGDbzrb8FS~#E4{kCr+cfe6Bu*Vvkwk%j4zF0zx-IEmYj7tH>v~ByT~>~
z4O0+O^yWnLjCXo}fX)%<0))fN;xeLD6e>_OSYve!^<7sJkGFdb)ccvuFE>CoHCyIB
z3JuoDIJGs9+(9RG{AS_ceWObsy_ey&7+0E6K&UC_{RR;5xy*OH(GCBwKH8--ZguXG
zB~|lo!Lu6(>jPDAoG_YB4n(>L!Wg2{Tzr5^XUs<r0kjX`sf-yiA*)xGkWh85t@9e1
zM{y@gZK82KWdJjaHK^AZyokQzJWa27EkW?N-+ifB{9b#dCp7E1WYy|rGVzxmWcIWr
z!kwZ5`3vi{+(pZagb6IhdC(64wluWz{LMu>E_CgV$G>wyOxc>dcqxs6&u6v8QXsZa
zfa8(58FH5>rQ<Yy`b_AW`!GOkdCs`i56DR1k!uO!Ne*BqPe)0MN!r9&0Bt5RYI}>7
zEGs*aUXw8)Ju$s-;tIk97FJ<DSO^}&3N?l4RVPPIe6$BP@ncP0&U4V)-novySr;c$
z7XGG?2t9F`b_t}-b@~PWa9i0N(|!g2Hs{Sb*Wd2=PVmmHnzOL8exy`co%BsV-BG`-
z!+R;9;~a~+jBwOVg@h{m_U)2F$jEj5dh~}(Bj~*ul72R9nsf2YEMx39{~SJJW>Ke5
zDsY)hzlruwb(9xhX(ye#KBEBn7dRS^LVV`}`HQGL;JqwLgJ6Kl?<_nMQyMk)fwFJQ
zmJL$4SV`Sgx(qN)KDWhEAf_q6@yUfHcRM*gIZksB0|fI<O!v<h+ovo`m@vNV+__8T
zIOTZ|<K26y%!u=nkR}#6kge~pCG)Y;f%%3<UX(LQk}*U7xiU%UbLO|X#{72u<T>-(
zTo?M7Iq&*ut~JNZ@6h+U{x;Y0)7^!jgCT`z`+er(Ikji?R?k~^)6UixOo8BWnY&<N
zS%t(wbPP7&GP-FL9v%sO&0YKzEGsCV=wv*7@}KhYhhNH5ZJw2XR_xMv?W$46gPHsI
zjIQ6!Gly=+9QX7m+a-8kv~rQ;q9(~|pFK@-TYn@dz;Vg($#EJ}i_J)M+beHz0CXai
z-<0E8AV<8l#AyIcO$bdR@*&@Q@+_I<$l-%(gNs?$Ti;i#eJ=6{nP=CIZBnOcE47^@
zsJ6vYAiNYHV513Bh04`s|KS62=FDl0S`kwqI=uaU*mYb;GPE5NAeAUyTJ4`>J8zKY
z^rSxkKa4clvP<5AMbzBHYM&qWw(a@oqyWbw&7e3wIZioVId0>+%!p1Jx~nbHoKc4;
zw<*6V$KC0Z=B|Favz|B&pp_7KX$%RMJ6}Orx@@6l^)g=c?j)40>;4oV<0MSzr{VGz
zF8l*2nYr@x-c{%QDPhk<l>!8oG|P&gI=QB$r)_cEp9~!n4^Af3ki~ZJ%y&qdGehFv
z%NI%BLPc}|5Y=~U@3$226a~0I<v9I&xq|`XzRd6xr94+JX-;{)b=yXj-<0EVLDofu
zB5@u-(`18_Ql%PoG#uQeOBbz;UQ|XzB=4p3;PGRJC11sgk`_r{Y--g=64J+SQ{V>2
zxrU8f$fp1Pl_1#fdyCdHEc1-m_`3NHs7Ye7mjj3QOQmYH9P>CY-inQl@4@ydd=$`~
zD`EhQ(*w|aYLX(Wg$^I_+<28*1VCO>Zc~11z6{6`Z!U2jK=b8ri!=?wwp~teOSU2_
zAT!{3`^qOa4N3|yI&;jOGhIp`CZ|6VL>T+d*wjzkm$*RzhHJ}~EvKyA^`D$Laoi^a
zacp`ss!2j<zO7sSlZ5F~BUET=D^Fw73$lH=hXS1MIZioVIc^zRlH=Hx=%Ij7d{ACf
zZc~0!j(dCY3II*!NeHb~)7I_euX(c&Pc_ghY$xN!;B&N9M~)nl6W1<FF+|_Eiukvl
zNNN)|=wW*q6$)@M#@&lF*u`krthFpe%yiC!JZ_8UDZq)4+u;{4UX<UlAbu3FbrU2?
zXu*i*NpD+-0tGm3IZioVIc_<AIgTxejsj65a4Y3A<uv6r<u>KFFYH2l1%T#zrYCOR
ze1+s}{2K^?wHwUiq}PqW7_gT{f&#aYk&U!o0NdvZRclG|l&LhnwFNwpAf~-VDZsJA
zh&ttwv2)edf93S)6JBG+5f@%@0)*aUSkOe7(o62#`So4Ig?`&U`Zfh9GdNy3ZaIEA
zj%|q^3ebFma+>m*a$6&!`GC^HD*!YnTn6q=nmmO(()4keHf@5M5LgiBS>|!JZT#f$
zk%RIdVsKWjSr;DB*E|$T(6i5CYmYq?Am7rjA$`WoQUSgV%%bTBM`3H0<@tA{ix<SC
zpNv@54H`9*!~y;`p1bGCZd-^V1r!6ojF97%<95>2pESn0#Q;$xY&dSGT&8@coTj{{
z-1e1lf?ffj`Hq<}>ncn)iX*AYg?Kk*@7`V3b}}4;KPs0v06L+pS@pM+t=B-3!Ryw>
zevS%7?Y)Kq8lDOcDYfb~l9lUL$}u>oCPHRHyCrKV<o-|6*3ZvRHg8%li8H3x<P<c=
z@)jpf_fyQ)7@H`-amw+^q$>Uy)9E<oc(yXbb8pGP0Df{5@_7a1H03oDx%rCB@EQQk
zU}L_Z002M$Nkl<ZA;Om#00*`@jhf0-tUygVT+a<3->un9wufQ+JbS?`saB&d-+&cX
zzB?q`{^aD})M?U5rG|}U?jJLJMku?Tkm0D1{LD%33bKYx`emFv(xjCnfDNfFmI85&
z0vxv-zZ}OL&m7kr-?n&$0;KP}xih3P<TT~AFX1k)0?^#9VG8VuRclIMKtlNkE24k^
z8<E2kY(tkWIttF5K3N*KeMYx!u3dxqh7Z_1d4is{&af%K6!&!-J|-)6Zjc?YYqT1r
zu;~=lqXZb#@Gn|8PcjuNDn*d+<vL`k<>#nU*4`hT6ySK}xaIieI9{}HuHCuv&<ik1
zG|J@_J2t4Cro8s0;#B~eFODyjz^+ZZ=VjcFqvg!mGu9i|%_CYTTi85p-TI$wKY2i^
z)vTx6Hg>XgGogLFI*ung2Qwgl`{z2#xbdTX#<ngxU%i<Kj~_oGlV?tpW-Z&IdF&=d
zXD4i1mI7{~fHQ7y>o}e~bCPge+l9BAi0e{~E>_^HLb=@j+0H7bDX)DA2Y4NTc3$c=
z$(^@=RD86F{5fx?u0UPhyZssk3OEZCC)C)ai9bl|b{!=kX)^1y83mf!TklT+ZVz6?
zHf%}67f+i%pDbEDPZA^Bm31h*Kg}X@hCAF7Cw?!jpYJRgGiAYo*zP7phK}~0n5O_S
z0LL%KF~>8<wYA`I?|Y&Ar5vU_rd%#rro75&%4=ULUi-9M3Ds-ZL}o9Ut6RT`6DPKI
zP;MC6j<zbXFlBf0JUI~extv_PdR4XlZm8Z?VJQ$M1t_qaw{9=vr;L-shYx6?1Ph|W
zBvphCl7;~RNo4KX<#P1uMX6M!rkcU|k`^gK1hW^%2?}uh(wvjy`AE=39p4=1R%S%~
z^^t~5R6{vTdE5eW*;nc6l>nN|!?1R#k)80>-tWn%FNev63+HWel_>HK!7~|W|AD<S
zX~raJ{ZvO?l-RA_C=%A*{y++lpSd8;oF%Kg@a9`GWJq7Rbor7bM4VTSNn0XE0Zw{}
zVT!dEar1|K{(-#MrHA-|zZpr#0_e!m)ZP_4D8TW{am?}j(yKi%zTd|<-=*W-SHYe;
z-VEg}<u2tf<uK)OCdg%9Gu<$>^hyBDhl>}y^;@`TNh$xxqcY`}AJwbeP7LPNNBlEE
zf&_Bu(na}b$h-1Fw?1$j%w%m+BThzpM<ggfzP*Z_j&c>NO4&w_%5=nfkDo9>Bx<s^
zkOG_t$<J4=2FmC$pGuDbA4!&MIS|L)Iu6<q;vE#A%;0$Dxb87v7{>W$I^H?%?ZP|q
z@0fCz@|SX$@|bejS8<is0%$WlxH4+oyp3!<aX=O?a_lE9^BC%c|5I0<2oE&<w@Fg5
zNmD6RzLEq5hX@LPE%r)Ffv8b{0s0#wUGJJbn`O<K<&q>xQlH&Ej2b0HlOHhLXU;NZ
zV8d9!Cv6y`N<({p?50474+X|I$2rG4lYZC|aSBj#PkBqZOZiJVOnL0f#j61{S4E6T
zm<YktyL5k7#!Ve3+jneM2C@l1!awY9-MXoElB-rPla)x-*$6Q<ud9=hR}Y`?6Ubf}
zEfgR>Q;0Lx`x`y`OP}|<BNEI;2zA;v-i($$ctazUeY6LiGiSQ|vu~TUZu_iVgm}Y?
zwa;*03Q%rvoO8T$+;jX}3~*m^-E)HSm2#HymU5T!mvWeN^;PXNiRASNh$~QT<D^TU
zL0;+IPd@+RBMocgWHq~W&p@#U?xuiQb#C6gL3)4CU3&B#492lqzq_eqe?=DsD6Hum
zlreKw8Ts85d81b+*@LX3{{GfMC_L}rHYPmMYVndkW%8fXrO$gqB_ZNJQ_<kd6JdC0
zXRnEy6yUh#_~tn0c%M9f8pi*8<pc7AEf1yuF#u%-<?I{1JE`2I{G}ZBb(!Jy0GdNX
zK{Pa`MT(V@<{dl9kfHtLB5ZjRCQM{)p&r0H4&wx9TJ-LHUY4(Zm?jxAGsKl;oClE2
zp7JmS%(iTvd<A8|$T2eDgWgCbd&q{jdkEcWhUE{<+q!itW$cvir2pX0Bw6wla^t!U
zS@#gq+0${H0t9*-=N#|-Kl~iy|9efeMt-m+o%esa!~hIecl78X8Tdgj8SwcSq1<I?
zQOaRoFFr#7GEh*^RjG=kAJtp7lA(j%R{NcVu<Nx9bT1ni#yN4~m<)!uZU4`|m7IC<
z$<-^Caqgv-Jrdm%pztO?GvnAZ-FnOL5%0_C(<d#6zR!!`cD28MfNa_FpM3elDCrHS
zsx;V@)5Wlz2=7BRd)S*Oz`z0=?;Q6W|6hR*$PeTTYtC`+n>HALa+UJ+X#@_SyrtZ=
z;Mt*<&j4sMJh*atwCUqgs8%f*Jm@XChE=Hr(S|zCr(v8^r;dYh2FT+tza~XXfN|j6
zePvf$O}I8t+$k;Y?(Pz-xV5-zad&rjclT1HMS{C)aSIUK-5uUM>-}=hUpSesSu1<?
zO!nOSzRb=B|G-{n#gJVZnkCvQU%g9(yYk_u5B}}esxxeMGL%9jQGXNP7snn>?y0Ju
z1HAo^trL_iEX{If`uEjVI*Rp2AfyE%Nc6EAqTB<ytZX_hOg{^%@BS+BD)}n4i#DqU
zd)0BXE)i0%`>If&<r7D^J3b<0WJntQr)Rf}@kpyoI;=_l(^C1Nt>|1`9#T|)-D9B@
zB?k2>yZ(jsN#1)+reY|{GqoypL!FM>=v(g-^_5PKinxD45B+)E?{KhGY1DtcNS^v-
zjsQl#b{Vy_IDz<HcrgZLXVGPW!}NtH4uKFe+nh~=Yq+NnUlY%voxI3FG|W$IAoxAH
zJ^DR{J;uFiW)Ib#3Mekpya@>!q&9bT9pM$RF_A^JXN*JgimBY$Gs6Nm1}H_;9U{@<
z)ULNS*>R;ma@?66YaOyfbx4fo=EN_IJl}f)drp>R8DcU^*AXx>l=MO4<&!7WvML*S
zn4{zKO-}4WFAs)$FB?Ph9|>KFw*1bzmqdi{wPz9#<vQddKRpG%iUG*G6CFlGx-=%X
zgPc>YQ=C(;Qz2`dHaMbdSTgyRzjOfQIzk3T!nIF?1`?(uMLnkUxjzj}L4#y_Pfor?
z?%NIDd0l<ibF*J<k~O$^4|esoAPX+loEu&A0(*k*m+!qgB4NIqa<Man4#*ZH6ws`{
zbk{m<VD}6M(dcw>kzZ?P87H#q49C4l?bm8Eg-H8STFsVaoGiM4W28F$Qh$99<Oq2c
z?IH_ER32g7CA?1fGm1JUJ0`zBUiex{R3=oW2khZLP1;X^$}VO56in78l^1@kwnTE>
zTk+}VR$uGysC|aip4nBDNsY{`sEG#8D_^gg3r3F1@j8|2pW1FMY_8Yt0?P+6FJH)}
zk_(PbpC=Q#N7n+<$1-OMD17#*7nq!?eK?hK!bEWU5YW$6R|k7a{bwDfE2f8NJ-DU{
zlOV+y#7_zCP)jDq@*3eO^i@2^@EYT3<TAB+cH9dvY@4DTPR~luOE1E085q}e)uVYa
zH=DYd7!YfrRjtN<B=TyLb@d?hv=#Bkt=@Qu!oiHJpDzj<f$s3pcx~zW<#+eb+eiH5
zW+*$Vv)?yCxu(iPa>#U%Ql)s-X>I+obow*mvo*TX18nQ`{)oe=WI+#BC6En}K9fL6
z{+`ZiNafJ6u1#__{R1StDhrh3wbyG#@2PVh04WV}!66oplFoM}8;<bq7VM4V(u*Yh
z88O`DbYSqM8Iu^392>S@&)4*lZIykpqO=!&wR_<T<k@u+y;YY@;pyxUJj8Cz=ZHcb
zVsK?u6nN!7qPhHiMik-nnQn(@K<?$N*)U~5n^Qi)16~&7il6GVJ=h@8AB*vV-%KZp
zS(C+a^`zB6TRP`MI<lD*^7A<L%9;C6?k^8WaH8>-`oYbt`wfIZ^x<%!0OilnCgPu1
zcB=dBo?4EoUW$UDD3wXp2lOD>X$N`$-+RX-%ULOdD2vomQyW+0zm4duJO_vz0B(f3
z4-R?_V>~A=ea<^wEcX9FVt6<Xa`{akz%C7)e9zqNZ(HO|4*=#hB4S?Im8Kzw)3fvl
zC=Mvk;1_t$PwyR6LNEnARcpJ1#Hqm@*teK%h<>3;;;bPWByFGPhR89=Q=v&M+MH9T
za(D~w`1XIE_?j5D@7Gpwx8ygbF>3y_eQUMjTxS}fFO^K~UX5WDGSdV*XSs=-_@00|
z6C9ZOO@bo%2&J<<Jx(H^6auf}<%jd@S@iu@-<nE|3|^+pELKC2cJy>(%%d7>tkPjf
z<~*2Ws^cwuw&iR2r>udt#&5MPvV<h+jfMgGM>ss8A(<4g6tFz#(3hd4kO}B9{Wk%|
zOB5lAL#ndv%^}@&?{jzog!LT+;!qNC+@geO*+c5R!UA?X0vJKtwvl^Pm|d}w2J<@|
zo4+2a?OXq#?}uzyL1vn{Hnb!G;R{tu)4&<TEK8^6uVS3HX=meJ!&BXvmI)$Pi3^sC
z6SeI&fe_yg0hc1E2h(WG5j0Fh(<cur?dY$p#=;2@Ul$$+GiAVYVVvKGzMujqeN6o~
zJ|)SdYEMed-TJ4w`$0f`bP@Z@X~PxIZC0;Fk-zZCpRn(zU&e|_xh_|c{XjZf#4kWU
z@t!oR%>+l=5A=v-5|Gf(<rwAFLz@@vg!5q;^yTqAs7s6@0s(Bx$wkCE(Iw<BbenaJ
z=2O|mteryh{yM<5X9ItrdR1MH<%Ujc{rm5S$l#lO-+nsL11RRiAZ^PelffFzf|Q@L
zR`ye<Bu11{UHQGPRjcvW3Ga$mrLww=*RbI+gkvD!393h&X1K5oX9n|M0}K7auT4H}
z)0lpF&Umowj7y?W<%t7q`lbtwXlH|(;Gd*^m-*|0kANz@;#jvM-%|B8U^EWe*)Bn*
z+sXU#@6f5h;g;mO8kQKpatKtN?`0gh$ErWpmhT;Y#!{~IYt&Fvs>Y=jzvW8uog0x#
zNVvCR7SwwA*mba+I$E$Y&MIs()yX%|M(UrsPz`MVO0P2Sv5#V}qMO1LxS31qKvH2-
zeUr`Yl8xrGr=9aQKIJZYQ0s0R^R_#rJ<VGJGyTI8{JMn$cZk*#t4(*6@U$>n+!j;Y
z(hDFK`A32$(DNII+3XDDQNJE4>UA@^p#rMv*-Z|5bg*)AVn>4UBVqhb*4=31<r~x^
z=+JF%IFV%?LF8U~r{*c3ffu4y`m55JZ9t?I4<@KCEU)q2#wSrZRwU;#Y5i&7O{3wP
zmraSK5JY$A6y9L{mEZ^%zXZ)x6zBM+Ok6}wl|PITcY`jt+dLS9YqivvVE4#4rClV~
zu2r$4G`rYl+3${trnBc4*Yc|Dm$rO<j}RoZ9f#~j`;Jah997%!lFzdjGj*EQ9KPx>
z1+dB!u+iKRxU2p-s*+v$$GvL0n;Zo;yO+24PfKwz--|lR?>fE&f~RuDH?w><wE!O;
zduz!U9FJa+>Hf2e)pubBBDll2o}?fd9cmYJfEY8dQsyoEWm(fusXn5B#8O=@tr=%h
zXC>eHY~)WCMB-Srv`nz!NfiTazl#;{q`^?Xk3GAaF@0)J$HA=le(gf|(%a5sw$HoR
zx>V<G88TPxIXbID)iN7)0CAyi#jXoN46=iTF`oFiUzJ<h|J+w^ykpKI$@kX6)n<nL
zrRjLVT4#LU&R5Lt{gon#;?oJo1aMPV9OoU-V8?(iA%U5m5;h(c<#{~saN3_Rw0x^Q
zS8deF;XaUMp}TMltS-c(S}dvg@dAuPjaZ&U3{n&)n~qi2;r(Vk{VS@v`OdC97`3Bz
z^z_65qv2THTC1VFrrLUe0I($)=$1_m!I#*g+{JbCuW;X~U|iDsVr6+)Xdf+&>|VTj
zmG9qMeyHRt0t+;2{>Dc<G?GLg>8WYBxtk0vJzbnm8G5GKwOM~D{2(o0MfJwP?rS8l
zu^`!|3Sd9NCVT=T`j|g9EVi5*ELMBjFjBfGvrnFj5;TfOC49knYEPoo9)T)hCfhKN
zXY|+K(sfkMeXNTk5gCd;)BAUCzc|}g;8n{LxiY#aSJI@iZ-~j<G54`^XPSf<q=x`K
zk*2`K>C`4GU-d_l>n0%E#<aA?>oF^+$$pgMWcnPlN)Om}VXamFjehAqc&=Aq4~Mic
zg?$A*5Lvv*u<E-vRCOpcjRN<Tl@gC{FSG5{b{P22XhDFrDS*UIay+A1r+ujbJK@-F
zFgooLPE_I8X(^K60P4y!7W2`99MjXhryb;WpZMWur`vXm`{Fp!e!nKjx;pE1Q|*?r
zsPX3=Y`@1$KFPHR7UkqC-}bjo(AUq9mHxcNcL$iQn<M->a6Etkf@aov9jDN3H3^%{
z=U)dCT>ai-Hkfy>R9R@t_5FROXOF90g5uqp#+cF0!PX&vf4{S^FHVL$odeCj#3qj&
zHiQrabV|W#Qf~0GTa2~3uW`R@|Hz7{xg1+qES4l>tmKPUZ&W<|XEw&)SB>3Zz*r<;
z`;{b-P6+TOAjm--n_iFV%Qa~^a5R-n-My^2q0l5L!unS>g=Tq4WU3C57@~7A_YZgs
zbiZ-7`5BDdU{O#O9x-GZ+T)HEH1G`taPz5vL9O~{XM)J2M&yj|+aOiW(;KRf*9gR;
zJlCtqVZ2GBPUR~jHKP(lzxpaeJYb5a8{D63@dm}(C*aF&tTXyepjD~wjQP>4i%aT8
z-!cFBO!K~%*0jdEUrIx_eCxa--;CRRb=@7aA@qrZefSRfxu*egGDTu8*JC<%V8;uR
zAUDV0vQjUNkTjLwVDa4L(DRsrJnnaMrdDpF3bbORUUU>&1Jl1uineMr-TtfpY{Oo#
z8+2y{&qdYV<Sm>{J`n-WG)v_Z)Hp$O;42~@Q!K4h6utNLwJ-{Jva))7y3&Juq4tf7
zQky7m^n+S(;Pyf6zZF0lXLAXWErx?ZVNkENUI6k{X2Bl7q3nCT9yV|I&mh-uSGBmn
zG1ffJwrf<|E-+|%U`M0$S_Tb5@js9fSU>6Z;w@2UrkzFdk7QLSuyR@`H?O#KHN)K;
zfPC3E3N%>i%4<M6IR>3IIoo_0SS}GO@TEvo%M+S$gOspMD2RciRE`8<1mz(;Aer>?
zp~(ke(;0@-$Btx-f72CdJn*Prq<L0SPD@)c{st)`28U&v&tMJM54UTmHGynZXXqsP
zuGMZ{!>oNDqfp+xf~+0TGb%ZY!>sq%@K!z<T}bYNI{{3y(bWE=ICMhln|QX`8L=ik
zreh4mrs=i`n<^^UYSH)2eN4uJ(WQjlTm`f8uu}vN5_E%V&hwih8mAc3iEUBJ=5^X^
zql{&<xwg$#=?$S*%a}l$FdDx^$!B6YG~_gx8~ek6cvuB{+miB@5*fa=c>M%G+ZC1O
zpR7sggxPhrgB+Rz%#TmBx-GA`RV<pxL&by@?v@w+%Y$WC?-DVE*t~H+#p=q>vl>lp
zVE3BVD(FN%!u}k@Dnt%I2tGUUI)e#h`ik#S%(}oEh|f>?ss%QnaYYqS=afRb>}(aQ
z$)ayk7GopD01LvB(ycE2nv@lx%@FHDPNVlk&uUOVl66YKOp@L0*tLhfokpiR^o}{l
zQfhGqZmcBMYtHAi(U>!VplpA%$T{Qw3fBI9Lm}nWShpv~ybPBSDkTof`L<h0p@}Z8
z9emOv5o94Uk#D>)m214gl4)w=pSzW!r^y^;WlW!}buR7|oS10<R1)JeY*K++t<iB?
zmBhAj^gu|vD|s!*q7x*M-wc->&aCzggA|EP28f}uXADT4p&_Q4{mAVaP5OgXHsitb
zmE%cGQd}XDJ}w6n=~aVVIouAlifMzHvh5?Gj5~!Gh#k|oQ(q{hcOaa1>e9&78e_jz
z_4Kp8>_!Pg%&rtS<$#u1R9^JYZZO0*v5yC&L86eyJN(~ZA+KvHCv9T<d78+;0G0Li
zlT{KD6XeNjffutG@f?v0Y2KyJf6}fQ_xc-s&n|c@wlHepO6<YnUNxdg&P^qWrFuaE
zi;dr88QWdF7)waSd5~N%wvPCUorVqwc4Nx*5tLsW;>4iP9F4wJ>Oc5$WPY`$u=^FK
zs5XA(-b3lgwaNW9&RVW6s^8mOm-~uBI37UIfr6BQu8bey$aq-YB8|@_8AYFAI_*!J
z&7^}e_0Tl?ZhI&^O1lR;+(_fxvG%>4A16Kw3+96ZmWRuL7XgE3eyG5UyP2ViqBgq{
z#|U=w)eCu9Nhc<>7?s&gK=|^&F4UZF0n?wew|wf$9?^-0OinR=>Ub2->sLHm^lAwa
zmvQzbq-nrks_*s4Jlt?nX^)iV?CtX$TS8W*H>SPi=o8aYMjb_VJg#)~lbmlQ9S>9z
zY%*tQJ3rt#OPN8vYN3T48an$ue^m=wTRHzhF<wOYwyI!9%7XC3%hQ!bD*k+sYE>-7
zEUnVQ;)N&>sa}O$$pYHVw-!SQ=Y~G-FdKILln2M9t*-f0@=2|Src>1fCakF9AfR#?
znewHA-Jjj=oBGqlSLp?098ctGu(`B0Hwt7Go<D`WbKaTeAqFwSK@SP<2>W#ed&HVz
zVO)*5zD|JKr{SaNVCTD;k5*P5Tc5vm%LKe8sTQ;hOWDh|cKlZUaFMHg{P%Wyl6#zp
zpkPT#kfTG30v`}>ZuA82E@r+wedA*4U;DWbpXjs+p&xBu6QGmKT9c$lrXl~hrgkck
z`-*RC8Cm(Fsd6k@Mhwp?)9GJz#E(DHe-kEiOKY=v5UZ6lrwoqKW@pnbnf94TmoRLV
zo=4CB+_!G4w3@nJ>G<Pe;~OIhXnl>x<mv1aOf1F_>0?uhLJDGTY_H=$24*f;)<3u{
ziSoPUjz<kfVIIXbF<8awtuAkq<}D)L$Q&*ES9g{2$<I0+1`%uD(ja*peYTnbLl&v~
z2x+vHwS$=h>TV{D(jwwK7Dr;$(4IwP=*L5qI1fEq56lgWM(85%N<HdclrI{Da+@sJ
zMii=FS#;E9Dyh)zg4nwOlZ6q}Xfr~0LBDjSW4p0Gh#=Pe(Ra2LeX?qp&%GF4hy_-!
ze_hU3!^tvtSu+ZFk;S_DH&zbfMBGkVa`ewy+-{GQ?}9N9IJ0iv6bSF`ZL&ybZw5#F
zzrUaK=QmjCQ0Ghxd`7eJ#M^sh4>X_3G~fA>j~@Py`-#8oJMEi)3;IJP;dKWwFv>CU
zEka7*N_QLYd`n(Zhb_S1bFYM(gq)qoZkTCH##t*q@2G^Q0U2pE)}L;Zxvv(B%}=TO
z`93{YD0a(iM=1%fLXExbuYE2m36*<N-8XH2(93J)Uw4HpJj<KDPBmj7vXS%*vjT`6
zmhJ_|ajea}if3fF7(-KSRJ-dnngUL0<&Uz}kNfFRM*cj?GcUFtzp8R_lds7S>EbX+
z81R{|%Q|xHMtD~)Z3zM6NfM*5W%G6kI`TvwqzOgrUCjf2;err{=bOY0_{za3ZdmC4
z*@DCIA|0KbALqI&(V|rbep^;P{v(tCS&T-;M%?(yv=Ipx*iPdl(+?EohNBI?v+U0A
zfV)f`-h64qS3*o9p}y|@_s0-@|MSuNGtCr9!q19aPa6tPeet$S%K*GPrFa7C=ZQ=N
z>42HO&3GU6MW-3~aTNd|`r#9K*}jXC+!V@Fk&=?xNI%-GrXu1{9R5)YqEfMyyaOwc
zczx~A?|2p+`=s5zV=P?gIWW}4PPJCZNOZz$(Q@7E?Q4^QO+(~t+Iz>{OTnGO^YwCw
z2S{s%!g8+s#QfxqCm<;X_Ry{N>goK1^=!UG;3Z=Bq!3P=4A5dl>~nQAtY_2DhM^$f
zD+d2X#5c1`&G!Jijrb6xX>Mz56k2b+wi<CoNv6UYT2X?!C%g9G0=pmED@h`wBuAV%
zU%_<dgu0Ju?tWn<&i49L(SfeOzGiy)XG6n#18@FB8RyqaCk|i!%mEwu)ZTrJdBqb4
z4jX$;z<pHE{XpQ$Jb>H-qQ_f_eLo_GDGq(u6zCv4sJJ~YO#~PUydF8UOua;@R4>s6
zv_4wAga!`vCsW6q)oii;9O8km0Q;S&3%<12yDw2rSq^uG6Ffu}PQY?fWs+&oUIr^l
zN_9O&CrH3r<17ct#|nRzzDykSe#f?xNj|Rvn5MAjGEEdsc7U4>%;uptR8~U_zITy5
zxT#6R7YNG52ucbD5-;6B1>js@<Kax1%b(9T&Hs9Ed+RcDWha_fuC`I|p5iZRck~S3
z!SmbZRqo@)Hl_KR&$VIhOaxMlKv)8k-eo*f8j$XT=#HJy@)Vw{2IcS@$*lO^<1imR
z$a-2P7}s7EUpNYXY1hhp-6Vc|0lFidf{U{5gtlB)KYEk^;rJh7Sdt07HrJM)gtWVO
ziZC{*Oo_oGoHAR8_6S5U2ND22R6o&wg{ZD{G4WKM!=2Tsjq>?(sKQfEos7`PbVO%U
z?!`Ybp5ZRc*o|r8f7{+S-Lh2PN<Zl1j2`-U()fvwqb78}3^AU~C4e8A?mmMJtF={2
zeI3U;Hb>g8(6{{Nwy-vb^YJ=fnpJ7!MGez?zPTMq{K}agVB!l0?4_F)gD1W^r1(CH
zo4``RLz7}ms#m1norZF<{8jz;l5nAq@yX=x7m$-QsVEug64SM*F=lz>A_CFrC*vpz
zlT90~Vl}IT-(u~kiLc`I)C8WPS$&NiC3+-m?QB}wNb-aOmMl=gNLY&_X~xonW_sn0
zT$yof%t7<yLh8_HLuL#Gw>GrA^fikLPC(GBUbYeUX>5aIS23XF2w_T^PYE=3;aB7!
zhzT!Uu9cYRf2s5hc{E*3gluPoH=MtYztM;ELc}h8wajGyMJ3_=%3va~QgdFymD<Tl
z%rSqQbD{cKRgc_@it138jLWgWLqB__qIi%^8245(p@*>?5gHaqK~NRyXu{Na0~&YV
zqVGKGCGW2ebB8kPpd>TRX4WVUMJW_T%Qe>1_^q>kk~GZsZKrRUp?t8p#WhfqP0)QS
zx7o312TdVZvUO90uhnx4rUKu#wohDtqKz?~*~L82J$)dPr3}+$Q+S8K4m~Egmm6Hv
zXwo@*P652TQNF2mig~jI=U&u=;-F(qhWI`Y!Sv-tfBE50Kb$0F9rN%gc^eLE%24B&
z+7s-dtlVyc^;zK}Kj&qYyIG{r-x!eg8M?fxOD6aJy&8Kx>tTmzn44y2ljbsz<PsH(
z;u%!XjnXw3mh))1?Sh`qnxTQ5IfnqwyYx1ODF9b^5|jTeBkOsT@}y#~jrw-A5}Htb
zAjW)}d~*KRzB2)r1@|-f!@N6Exv#+K2N@Q1$l&W9<7xH^yeFH*{e*%h{33mCK(7eR
zIi#R;C+Owoi?@ZIH2Q!$gfffD{glsY*fn49R>i{;(jAgAFRMaPA<9`O+aZAzRv)s+
zq}w*{Kkp)QQ>rg5I#^~GMuWIX=NVz7BR9hbvk{7JoU~2i$N1xS>^QertxSH@W8(15
zxTR`&moP>hugLq*25HBT9jpi2*kSh^oIA$=j55VG!q!#pP?QqX99*$ohX}`)+fWBl
z-Dxb#ZRPqd=w`*4y6JAayUen&6^#wDnhnHWDtHi+ooUpi?{C-x)qkDyJ51L<x|i&Q
zJ=Q(L8ub}{r`au~y7<=&0*<svsrnR2Q~Mj2-u&Ih+tcsg9>Ak?Icym-lm^Y5FRsA1
zp9b$2ZW&%$1c}I;BRxJ2Ko0{y+3ZUef$nv{k5etKwi2-ag13jQ*~^)>tofpJo^g;b
zYDW}lLPLy_;LvLOeR9Jo<7BCrw*qCzPYSP{J&UuZsu%vg-f06*>qO$UU**7B&Cz^(
zA<^=SCxDh%DV9S=@xkfIR4ed<n#c6G*&yMdl!gX=p!$pz-gnT;@2qOHpfyp9JrY`6
zBnsd!?3KLkccTvOMtQz(`Z0?hEJ}vxKWn<-x2hy`O=bg>hV!{eJ4mZQiZVho5z~Xr
z8DDTK@>8esr}I|*%eP)&P~}_H!73~4Uq>pZ>6_(4EQglM*AW*79T%jjSk6Y0&{&&|
zmhv6eJ_Z<Y%M4|8KLAMN$cCxX%^BZNwHxhdl(HV0ld)>T&fh4ExXNqjRYW}R%G>@F
zjdBLHg<<+N2v=l;kX6u-W~*zl$cefAu@UguH{fp*TGdLK1&PDD4)5)~BW)J<ncy(?
z;qd0idfCBJlkT6cffx4Mx`^B?KWg9B@{KH>t&j)XO}}P-mQ8}0HgN6YkHx<+Q<$}o
z;L5kX12B%lb({QDoqf&y=X}HBhw3ydx9g0t$9~tjtbFiYn;<C<lf43uI2~iCC8YX;
zJHhy?M?C#2T;F4K<v75uUG@Ua1>POytHk@_`x|V6fcp%+->I5*TzX_wKiyTo9vMx*
zJ(BdZ-<l2RTzvuXZq&HrE5Iy!W-63``B*`o*!B(M^-an%^wM{d_#@@gH+YB+C1J^n
zXb(H#urLos+MC4H^xvs={P^WD)qLp+T1KA5L4j{7@mh85-BEqP<d^t47RYT+6pK&T
zMCaPuYPWYMPxA2fp8ohos^lmDO`J*F<-SgRuq;_YVs|EK*i+-~quH!1^4<fd_IT6o
zfY$7eRwdX)T6%Baw(YCQveo5o^ASVr3aQfi!(ORp2@E|Ts$IQ9?7Qi<h}(&sPp>5B
z__t?Z-P(I3??gs%{&+eJC4n206ZhLF=k}KIjY&8sc3)WgA2<i2EqP}fg}?LsZ;QYm
z5;}`c&3M%wjaR|_CFS}oSw+$jG(4|i6}j#%q(v`9f(|N%)-j6)yN*6vM`B71Dlf^p
z|6KB*YFPI+;9(D!eLZZzZF$52&rh{cVMUwef7SL)@Q7ox=y4~Y_QL}jQNr*MN2@P@
zR~sv%2XassE297cLAi!y3LbIPliL!EhMU@s87V)&s`cW^dVyqnBll*$?wL6GG&^m9
z*`!Xh8#9Ii)<CPzB?^z{a{IsO%ZmZq(7$UH@`QpqdmAs?J~nejDa0#Xm7K#;le#NO
z(gi<jRy`WAr#eO~YLro1mhv?|BI0w690E8Nx-$91f}ic)Pp?dt55^jOP9!8w*JT^3
zP4*ZTTh;xfr`1#y@Ooga9mw(Wyz02LO&%u(h@VQyP1!#mG?Xg??Gd<USnSg51_qAY
zuUBwawTDT_`8swdNIw?lyglmVxo<4Y1>Zy1!9qGhc<(pL0P8m;kwyC!i^9&A6@`L5
z1MfwoCWiiDp<8N_W<$h4UUf*%X^Cs55ALLgW!;w7?(-%LWgk$9>|Riwkua0i?OL9#
zoM>PpE9hT5;0U$-WyZp8pkj`@)px`X8LJ0D*par3X!zXs=Pxurm)wN$(E>k;p!&i_
z<?iu%l{IkwW#0PxrE0CyUJMa=_zj45V}))@bu|P7sF_blQKLY9aq?0Eu1_kM{3}S}
zJ!?StP`2*8AjxCAhG#Qd4Ac*J5Upy~q!fIZwaL@&EoH@=#1nCeLi64t_PMOotR4=U
z)bEcWJ*YDIHkFX~^Mm-Z5zX@+t^H&1z19sQo97wEO@c4~bp^I+>2ICB;~<**3O_A>
zjZtz>uu;(970%po+ChPdawm_*1?K=5yT+t<D&^C~0}@={9mLnjc6R{(z9)rsb&q$w
zpE8%GC@f$zo^Vf~p*ilwyleg8G3I{Y?+<t9hY(3dZO$KTIjh;4u>p{t3K?wA$Msi+
zw&3GKrJA=<ADbJ>#$via#~CR6-;2wWz-l9mkMGB!Uo55C<0C-pA^AY3jepI4jpPKc
zUyKQj@5;yj0k<xc(-~L3`$)gKpZ;pzJHD;w4H9CzU+1-3&Xm3XS20(u_Y{5Zy{Pqw
z@yF+*s<jqNL`+=h75C%xM)}x`wc{mfo%4|2=i|idTnAcl1t`bee!Te7xt??GGf~rn
zIMSjujXo9d)ERZ&#(lQ>=ggueCK!zB?^U|){9$^3j9>`b!B{_gx)l~S#-ikLBOS$;
zAZgu5b5ZDU!WR2mfu6mW5-+rD-{Fyn=H*r`@(>$S>*fWk6H9S6G(M#%0%&-F7jeKq
z#XnC7>Pj~7ar*Vev;UNNW?B#dVD~2>$3%jpYYB`yk=b}N>8v{D2IDFk&l!JYjo^N6
z4(Y<@Oyo~1U7g)RV<F2zd%5mU%u*`<M4Vr{aC@!PsFZUPEHuSE@%cv$*kn7}miK$#
z<6S<FzKD$~Gs{8Os8*xTp~C(go9`Nuc_0?y-e3+Q$K>QVqO-%&YX;|Q{OJX|gWxh&
z4|IM-K%B*J3(_xr%NKAZ2KI_uL(e;NxSC}@D~wxO^j?4U048%x&QGTow%7@I4x_o(
zn1lAlH2-c}6F#KUl5`E1TM-&f^vDo*pn&#BhI4IMk+sPgEJGW>StQhXVfZAAB?*4?
zVlb0DW@KD8Wuu?}t>*OSFTI(b{=!yrfthjsxIfQ`E_bM#*qRW1(f4V;h*WFUK@)7>
zQ0F?2!b{^dbSqk?7g@9h{e)Llk5GzeAIi<L=MkCyPEXRzib!@jn#`_^-CL9(Y}+i4
z=ckI|zcHN<3Wa}oZenGnf?bPQ)mTDmicceIy;9z}mLARbsZGa|Lj?!Fu?BKd55nmV
z@#-w+g^8SD@ULZ#n8=EibSU2}YP9MocH=s>ij~kf>o2dkW8G9joO5+5)vFdqt#6CY
z7FxnMNfgo%w_2ivX==FqSjs0g4|&biebZ-x7dF}}ITg6%%YZ55M+Z+Lt=j1>Op4Wt
zMlTzX9qrVisBb8imB<FYW4(BFnSbANwlwbAF>!=&5kUd9RE_<w<2!b&Fz40`aLI{B
zioieggtWVW8RY&;efoY^f#^Q*ud;Yb==EkRExguhh`@Mu<18-w1yeK2=NwT?DGUNE
zNSCD>8hVIi$9L<M|9r^xio032g3^2Cqx4O$RnI=WzR)Nxh<s;1QC760fqsW4#Bhgo
z61{71Pidxd^~Zg(=W8yh`HF|iZ(`7m=Y|+x-P#vOYgvLWbTdKA3FE}8T0JE(K6o??
zQvY`5G&&jsC;shKOVtRxtHCa4&z1jn0ClQ0LdS6utcIYUu`u7l)$RsQrSKJ#4_max
z=rKkm2kA;~QOJfCWzBWFt%THT6?Uf?#aF>$2ac)RL;}nt7m87lvY_C!_3du__Lv`@
zpFcN24+G7TK;gK`spTDFJLb+gHYX7Hw~E^a*uC^2o^nqbka>2VzhE7eQDwkvx4Wn$
z2WR<3=ky&n&we=9xk-6C2)CB}PLgssj^qgRzD6VZM?}%-yIp?(M~lHm!;5SnppT^W
z0$p%_`c0ouz3G+3ei3PckI2vbH#F2I_yW<Ef718v85msbEg`4XZ4KrM4Gv}ydg6xD
zdcbQ2awYvN)l%hBPs48%D^W-Iuh|#gKHTo5Pj1vjSC`l<TOjIJa!5Y5gUCcSGx;NU
ze!trOP0FN6e_qKXeo%e8Ij!3}%cT@LpK*g$MV;Mu7KVLW;|zTs^~UyuqK5M*+2-PJ
z`U~l1!v-3fL1Ke-oX&lBMMQhKp9s5|Z>zr+Pybe(n*Zt^qlR+<6Sz|bYyzPFrB(L(
zkBR@$QEzrlywhWiPV20P-OdUkR*QAwbaaH8URR+!?9$3y1%K=z?%!xDh~*H#@9~*;
zLu3Tb$k%&no(fOMdaYW$4;7y_`=w9FZ{js6)EF6t#w!ijPU_iVufN@`CAM?Fg8|7m
zSXEBX^RaK64M*)*!dD;{{zPg?<Bm9}6_VMry@L=B@4H39H^EI{a2WK*OsgG~pON@9
z8d0(yheX~XcL!Q*G$XXAo|nLeFOgiPHWtq2KC=;FWwcWtt`+WJ1vcugP)>E5u|k?p
z>nkQ0-2rd<pK2ryYUA7UlkO4rCry5Fa^Z`7tF=BuKi&o%bv%7GgBJHW`GoEqr~4Vl
zM*nk&0Sw1E+wRx7`<?0rN1I%b1KkkDD~tkZ+X>CE)1j8^lYzM5WrP9^<5pFf8<T+)
z;_D8k%uxRHOl{)cZe&UP(r#lEaodK$P$(`hy2lYr5@&M3HEq~Z=&BYF(P_MeC5?Qb
z_-U~F0ZtN_#r;P3AUVVgOC<6#YvW7&X%8z|^G`2=PBg8)&#b9NlzAZ>MoZXBzqnm*
zr}v#e`!|?JWJAy9f84vnx5DFIWVgZJ@*DwrNpA4Mj_vK@^^^=C=Trm9u=c6Wn>w2H
zDedNa#SXC5fuVV4>7jTX{M%^yEqLU!&0=-hw14U0<|h?+^d@}<wR#Q}nnWC%c1KND
zSw1PS=r5_KMFoxH3+j(e1|6W(*-w??>&r8S1segoP{5+i@<54m2bCldU{m4eSb7y1
z0eF^soxbql!0sf#IS+~$o{h$6g0WMHZ-J!s!90udkH-ytjJpxUexE9blkAW>C*`NF
z(iRO$dhmAy3J$y(y#_LeuvgeW-8O;TR;>j!sXdW@zJT--nc3FAjn{;~ihSbTNy4Wk
zcN9dF%3XDNpWDbjUtP@NZP2oa$FB;`k~K9bBK=3SFdtx6ysvK*Oook0Qq*kJOMG^V
z!s5co1DFgs@9y`j20tF!RM9EUdB-3v;G7lHOT8@0>p1Iu*IGfPfTp)d7e|joy+F|O
z%=6N54cbqHt-q>Y^XS`aWs*rm);-D}&VLw%!-h|c=82M)4Nw`kP>YE;LxqWr$Qw_?
zX5U!Il8$);jV3z*BW(Jae<e3E#Qss=Mv4^))$%>j&eW;q!^!`t_b;D){pySSm%Zuz
z^Y)J*7QF5Vl(fro_4bf8Wz7A{JUv>iYJ{#L^{`$(u*D{0LC{S8F7+0zSFKHODA91f
zdp>am=>%3T?KTF%nvuBK78zepCT*V6*52%+#@#^?f5G#l=KH^xuSzIVt}AgKpfJt#
zQn+C3b>`n{SsaVM&&1*nz@lTMhd7V@Fk>I+MAip+%l$esFI^Q(+NIXqHmehr8~kVD
z(^3-uifJw3-CBl<;W~?$!B}Wt9wS8rj@CZ(EEXgY3R$TXTG;gPI{F7(b_yVf21?ME
z+s0$yNsHqU79hlD%f9`>DlXIW#1Ozk{22ocFv%2)CMyAu75I!N8Uo_(RQViJkj~B|
zX{pxxiAim945Puk%@O5dd^aM<9u`{X3{K$lWvFD!<!PJGx!D7{f08smcuPkt6m=It
zk4|Pf=KBSmb|2vwMVv{3&|0S!)F@THfZx=Sg&$R50~^+oa_A|THvil#M5wR-*Eoib
z=C|zAoV|Oe(7v~`)qBwkTr+JUeu?vHEl^R+bfY0Pir+6FO_Ujbf}Zvjt+FMxYX+d?
zFwkBh|FLfUxyNWp4!b(&p+`6!F6qR#Asgxv_H^~x5G_S7oudnb6z>MHd}%l$A&K9)
zu&=i>dsNTM2Ht*VTe30Jp^Q~3n4U8-67#A_+?sjTwp#0|xK_At3NHn&JZ8+qHItU@
zZgHc%3!_c?;^U9Tv3~(Qn|a7@cxJnDbYgg#SX5P|3d;CdiV!CbEY14oxa0PtgB4nm
znZ8I_{JuJ#fFIhQQBY)W8#MCPchQqAvp*g-2=(dk?$=Uy9*cZ(@geRO>-w~GQ|*D@
zD(T67*-sZfyp=YvI2$^=b{M}G3z`%H?K&E52a3%H*;1k^uX{m2YsCV;o%p_Bc`gVG
z1NUZ7^PLD7m6Z!y@<*d2d`*p@g&xW7#W!r#1WTGG*=O|8!Y8cfSlv=T@-$gN1LJIE
z7}?T)NL&wAjY+2T!eY`<b(dEa;6b_}*Czq%2&*{@%M1!z2})Sf^DQSP!=@}B0r*WV
z@)2)~Q|&9@V3V%5#<AjEw*mhA%hWqb3?l_se_V|=4S5xb3u^WIWv|@K;_cADyZoeB
zQzdV_taK+=d%RzHbTVOcAtt@j_Sf~4g!#bAzl!@NI7wlGgNQ|3SW5A}xhjj?73N<T
zB(iB*^(MGnSCMZ+I<k~#fjzk!7=n=kcg~Z;P=!Ac>)-J>Z)7v~j#<^ZN^(wfJv-ft
zt~>#Lv`7x5cCEa@>hw$cl41&ruqaOS=N*DNghn<KK9aHf#EAFMdh}_+PL#i#J9Gl!
zi<L9p&S<YJA4P=rPeuz~bUxuc33DHcU6Aewm0}Ec*eIApwcTBFCg>($Pt86T{dUf&
zE(z=NusIDl@Qp!w(RZ#gx^m8Jln-}(#|O!YzzYN`1mCA~E1$zt2ju}UIxgHjc1lGQ
zwq<Vuo@bs|3HI6@+T?DTu%w)J`1Yrplw2aadMP9?ae6zdtF5Zj#*)k<aS<Lg2B3^I
zs?JHeluWDjmU|qYgE9DDM0_9L>8wUF<o_C4k|q%E`GHErD66P&C)p{%x7@hX%UQ)p
ze`NLp{lz`rUEcCYP=mU}Op^q)e4oNBDY%d__sUaaxTbwGQ3GfJDewxIDkqjnGwRK2
z78$ut9lqH%T6Rxog=d{AIV`yzPj~0oGHh3!1iVWJZxSJlSQ_{(nZby*fY&E-9V)KD
z)qw-NW=wcA^OB4R0L##8C@T&!!R5F9T-2|{+K|lXmw%bTU*a667y{t6EuQqSm|>|b
z=e95nL)o;Fc-!uUq^3p~dmEZ4P>8C!G#hHKC5O7(mU@}FLx@ge;}`0se-(s|^?vbP
zS)py)jN`vgNf?qlWHD-w#@l4g&I<k3+ZY;7NQF>27Ui^K=;xde4}jLDbWwegXtQ?e
z;goVsgq#8<hE{_&H98$V#T4#Dr^~>0H*j;8O-JNXOac#55&po>x&iIzgLW<dUx<QC
z(^_TU#oOhuBMi03*s}a$Xje&Lx!!SNv_cwUBh(25EwxDqc^19tizm+S2tixY#1<Lr
zj+*6ynAy9OFS$%o{HrHajH8M;6{|v2#4PF-2EJ+B_FaE$M3feHFWn_4jMaTZh7|oK
z`<`?{BdC$!f#O>g9K*$zlrx!!sy$A8hY0c2X-KX>-$JKuQI`R^XDP*AAV#j&jwb4x
ztoUx$S-TIMp{2}xZ2!HD<%3n3uN~6g4F;uW{n<#$HQx2+xI<9~i^vyC=vhz6cD|2j
z!i5KocZFxkoLlnSBuAH5i9o6Txt--Md%&Q#lr|2pq04Z{qQnf+^pM~67T!rMHx^U<
zfE`Ll*bi*x!uZ$Hki}Qt-eSv{ZFh}s#+m|(#OV(xRxtE))HFtaEWP;VMj({00Ah46
z2$sZ%9Pr+Fb0&Lc>^Q!FyQ=sgbj;_KjMEKZ@+d{#c8G8l1hu1*{D`>CUc3^bFGH_e
z#W?iLByTBh?Bi|Q;BMAldLu+a$c{AkJ+;Zv!X9wh+Ocf@q=bCc(RqpRiW)3nb}}}2
zgL7qvgRx|@EJLuW%#~GB0T(+ZgR}gjqwTMzaO0f;&utvWDV<evg|cGt!|9xYt5|e3
z%F6~*_i>xOdi$>rW|F|b(bs`1Qtu4`;+Z+)2K&5M-PA*@mNuDlN+kM_XvE;p%MTeH
zK^Qkn-VWD^<Rk>o*>_(*SPlI(b9gThswypnU+#z79F%D7+dLAvmR__%Iv<?Gx_*v+
zR>Jts;>v$b_ar-2AM&*a8Z;PuyhF_j{7O`}7Ur-Yw-+peWRWQT?V?Y{n*Xwuci1{<
znIKFZL_VR_6!s8mOjd0yZpN<iqNMLPP1Vr$dfxr*7q>5w7&6WqreyF4fi(T0fKwcM
z6x%1tU<C49O#1@wTYtmHx${jHlf$&!EaT+78cZ)+0XE|`OF>bTB#`UjVK$|2`Non9
zfy`f)_L#;$$GGtinbG*)nFOf(_@jFEx>pQdxE}nA*NH3dm-S<{T_gTQjC)w(T7*vA
zF6%qRzv4vE!7y6P^bq#v--U_l`w%m3b!X+cSo)Nkk2{R9TG#W0TCLZXP$0NM;2$3<
zqp+uE+QEpt(kO`-9)uRM+|WFE-=<9C5~tysPm>&+4w(W3_Bc`$hZhtdDi+7$L_7{g
zG{~<`Ib!XxD2QDPWax|!Gu8q8R>8013GPAABA23i$@zAK0o+bHjD4AZri|@|6$nIX
z-Ew&B-0`@r)x>L>E*V2Dc$X`l4u=g1R^)#Ea7hM6F}R~V>`ejC_xrcg_c#dClaa85
z%=NA$3TfimQ43wQO)$rQ{;C5?nSN%buSJ?4oE7_q&!b6pF3^ISUmV0hm1|hSK9XsX
z#EgP0v1&G+=D|ssBD+Rdh><BNix`zE*&uOC@+?bafu|S=!9g7}oF@EU$%_axWjhtq
z4s!Xf9|={{6Ws>1!;R}5qr6|mH|F^Zazj2cMg7=QALy|1vHWM$+Q-vj51<$o=3Thy
zrDMX%A|J{yEMuc4vz6JH=#4ugFSAFPVK_l%8aHzRIK-SqVNstDxXhVo24WQhg1A#)
zuA8|#;G_r;s<_;d>3od>f^MweE~{jHRbA_e%Pzs1^v9|J+U^=wvuc6tEj3in1eZ|Y
zxJ{zVz^f?k$U1!;{}-)vi8V7GEe3=7(j5#_{Izd46Yp5l7$DK4Fbt<)%BN6?s=NX?
z;~cHSODURDSZK1K7^>s`muN-}VH`d3rX4|+q)pD-Soa?O;`d7up%@E@Y4DrzXH>rs
z|DcfFAeT)(ah4NqO9b%54H4;`EzJ&?cU}H1zk{|h1^}n2`ixwoPem|%<G2FlKCQFH
z@mD8lb8eayj0>H~mIc9^HsZrj1c{5{FQkhe<SoaP(REW}gW%^P?3nGMmk?rC_TdgM
zjr$6X9YY8BNi!2LIK{t*j$VtkX0XBH@d)leWj^#u=W#RaWRv{k?n$|?><@<vjg?cN
z+zqkp&0w3kr}0DdD;6m-%&!obfEks4{l$sHajebOzJRK=aK*!U987o1NJinte;_*w
zHMMi`$=Peem32m?hINDbO@&mUyc*Tfix@a1{I4GaFUd0FfU^}jhG^u#|MDc9{gdhO
ztRYA|6X~+Jn<~?17NL91{M{D0vS~M_aTF8WYz9r>$)0~b3hK)=S_>U$jZm0_g8Sey
zBGSa;1q}5f#L?1N#R@X<%sb^yCkYs%hWidt$d(AM`oSuV!HZw);E=09-tFLo5Z_>N
ze;w>-txHJ|=O5hl5<dTaC`LyeH=RPRqd&O#rmU6$@YxXcHtYE=p$p!M6_IU^a?EAW
zo0A4r*dLObtrvVQFc<!m3unKpn*Z)XDvk|aH7@Mp@0bth`{7KQJ@k^K{ANc#b3i9*
z;a_KG5V)@hL(-#(*Fb(%vsH1aI2@qgP=vn}YwQ>@In=`nax^sGv$&=P;(A))oos&f
zO-+rKFh;}NlYl8uc}bn-$<GKAtmKo`e*WT!OdvsgeMGqw#4=r=mc7p=QzTO9hw^q+
z0#0!!Y7YA#pCPf6K=?)YlMKAn5A_@J_Ut3Xh)v=xy(l|P;x&!)JnqGyNG?)jx&rrn
z`C9YVLT^wIqsN!5yhX}+R&}}cH0{-BnHWkoNk&ybO3F8?j5#nI@(yb}gCGk(cNHv7
zl}J91(MPdFAT}B(hy1*e`<#l}HeFDPQ6wCCyg)w{Qs=d59almb)U8Z$*hW@#5Y7?A
z=Bd4~r@dt$*Ua&pbxXb*aj!b=LV_u@hM~YWFYjj_i1r{ZNS<(V`yS4-?er1`HJ~ZM
z?a~1&!)6ft(Val8=se?FTF!<eLAWLlJ6EcP7h-(+13<+FSd&Ji4YRonw+OR2FPlZa
z?j5{+54|=JDO0piDdskb;o768M<JHOQ@7rr!vx96(FUZrH#{(=D*8oy=j~x_#Jc96
z4dC)Rit>5IL{$k3Nh~k`7)T@9S|P#;ZMMdaC-O~&SF{De(QwzyTK^oIk?O$@9Y_@S
z8D%f}v_&%PC^DVpIN2HKK+aku9~DS+Esj5yA`Uo^-AL(z0M$r@#V8}lgvBC_X;~^@
z&O7bghzF%>Y@IJgpO4?N6IY?2;231TiK#^hY-NH2#+(uimAI(qQO+QoidyVK-dp2Y
z5u+CPpgu2e{p(g`IacgiURROM8by7F>P|=2#w52q%i0l$^`*c^gP*(|<69P?HRt@6
zKOcsh>PvIcbEVnN6GZHgJERaOe(!@6gz=z~urgi-9u?To%E~=2JFq(zIFTJ)*-uqw
z%>ip1--VCurxvIhSlXCA&^1)P6y^QLN9QH`TXdC`U*MkyT8dkjAG0HwlyzWz%jR(z
zL-CXA&hRH5d%`N>)*T9G<(XGfdg9+JYwD<bA#Be8N!jxyREawGYsOw+LgY~YbNn47
z!-P9zhChBRM1&|9{^wYO3WA7j!vElHkc*T3uVEA;X4DUuURg@Ft3w||kVLdS!<2dL
zXs$J|w##D$lhwn<@R|Ha-yR8u;;Vv6z~ZeJ-L{yHhRQe__25QBz2Xojvp{S~XkF~H
z3oP4*{K|Nag<Zby(=`=&k)!8S>)E{CA}Gvx1e~Q_ukV={J>eY6H_DI+%KoQ%vFEB}
zAT`!OO!6CbO1|~JSTCZl2$eUL^!Z{q)?_z=hHl@Dzr3m6O{U1Mw%_ZRom!BK$leEg
zg+++ADlc~2@v@jdtwL1Cf4@D<hlmp#<REo*Y5$HUOj)APl7WW#lc7wQwh;@=3<+AQ
z-{K&0vHn-kYpO<fdxCM-A5!`AR<Oc8%-dff04i&K(vtJ;aL<Zu&p_&GLUTvQcw~`b
zO&RcY9ZKhi^*Bw<;=guP<86#T<1v^Jf}v=rC=M*5p~l}$^d})62l2Ohd;4w+uR!S{
z@u!=;QPt)CWV`OdNCy(~zW~_AZ>m^uNUK$jbo`~R&^q;EfXUe!GIl7W2b|DtqGR)M
zIpz$-U!(3x<cML}RuAG$r2pNS{NxPhY_6hMTdzvoEuk8P!+?EuT?-BtaeWrmDT$T&
z4##|V)C_+0m7h69DxSXHrd$3x{!Jcoof%H&5k%J#F8uc~IhAfaZh0C!df}!@3!{`_
z?>9oM1wZJ4_9`3^-IZY~|0Hsbq#ei`3v>WwR#pvPoHJV%Pm=YWRL<XYD{l5D4E!G^
zHL+2iG?7qXKjP{C+c=`4oMwY32A#VZlAE@XtIeJNxcYrQ?l0GQZ735|x*3QFdnZ0M
zZnHza3niJII*KgOg8j-(8weXK)+Uvs(d>QJ76KGpbby2i{m49Z6s-8o&MIyMp`iU0
zFKS)Fc{;v{q73+WTS9>i`-?Txjg%Pd&4<0+L-aA(HDCdGiqv3^%r!e~sACA<e%F}Z
zr~y`dICjHEyas>D`TZ^X3Zq|ur(011N-Q(ax!yrE@m}tSj?yQY4#=M_K$L8I^5c_C
zoy>pB_y31|u&BVz)Lgk@&d-9qwcGS7eG1rjXvA0oZsbYD#U}TU9!`@KESUd`<3w!p
a1L})9XY_LQ-Zd2DBP*%&tybJ9`2PX$*VYIC

literal 0
HcmV?d00001

diff --git a/content/en/docs/concepts/extend-kubernetes/extend-cluster.md b/content/en/docs/concepts/extend-kubernetes/extend-cluster.md
deleted file mode 100644
index 2bdc74e7e9..0000000000
--- a/content/en/docs/concepts/extend-kubernetes/extend-cluster.md
+++ /dev/null
@@ -1,207 +0,0 @@
----
-title: Extending your Kubernetes Cluster
-reviewers:
-- erictune
-- lavalamp
-- cheftako
-- chenopis
-content_type: concept
-weight: 10
----
-
-<!-- overview -->
-
-Kubernetes is highly configurable and extensible. As a result,
-there is rarely a need to fork or submit patches to the Kubernetes
-project code.
-
-This guide describes the options for customizing a Kubernetes cluster. It is
-aimed at {{< glossary_tooltip text="cluster operators" term_id="cluster-operator" >}}
-who want to understand how to adapt their
-Kubernetes cluster to the needs of their work environment. Developers who are prospective
-{{< glossary_tooltip text="Platform Developers" term_id="platform-developer" >}}
-or Kubernetes Project {{< glossary_tooltip text="Contributors" term_id="contributor" >}}
-will also find it useful as an introduction to what extension points and
-patterns exist, and their trade-offs and limitations.
-
-
-<!-- body -->
-
-## Overview
-
-Customization approaches can be broadly divided into *configuration*, which only involves changing flags, local configuration files, or API resources; and *extensions*, which involve running additional programs or services. This document is primarily about extensions.
-
-## Configuration
-
-*Configuration files* and *flags* are documented in the Reference section of the online documentation, under each binary:
-
-* [kubelet](/docs/reference/command-line-tools-reference/kubelet/)
-* [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/)
-* [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/)
-* [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/).
-
-Flags and configuration files may not always be changeable in a hosted Kubernetes service or a distribution with managed installation. When they are changeable, they are usually only changeable by the cluster administrator. Also, they are subject to change in future Kubernetes versions, and setting them may require restarting processes. For those reasons, they should be used only when there are no other options.
-
-*Built-in Policy APIs*, such as [ResourceQuota](/docs/concepts/policy/resource-quotas/), [PodSecurityPolicies](/docs/concepts/policy/pod-security-policy/), [NetworkPolicy](/docs/concepts/services-networking/network-policies/) and Role-based Access Control ([RBAC](/docs/reference/access-authn-authz/rbac/)), are built-in Kubernetes APIs. APIs are typically used with hosted Kubernetes services and with managed Kubernetes installations. They are declarative and use the same conventions as other Kubernetes resources like pods, so new cluster configuration can be repeatable and be managed the same way as applications. And, where they are stable, they enjoy a [defined support policy](/docs/reference/using-api/deprecation-policy/) like other Kubernetes APIs. For these reasons, they are preferred over *configuration files* and *flags* where suitable.
-
-## Extensions
-
-Extensions are software components that extend and deeply integrate with Kubernetes.
-They adapt it to support new types and new kinds of hardware.
-
-Most cluster administrators will use a hosted or distribution
-instance of Kubernetes. As a result, most Kubernetes users will not need to
-install extensions and fewer will need to author new ones.
-
-## Extension Patterns
-
-Kubernetes is designed to be automated by writing client programs. Any
-program that reads and/or writes to the Kubernetes API can provide useful
-automation. *Automation* can run on the cluster or off it. By following
-the guidance in this doc you can write highly available and robust automation.
-Automation generally works with any Kubernetes cluster, including hosted
-clusters and managed installations.
-
-There is a specific pattern for writing client programs that work well with
-Kubernetes called the *Controller* pattern. Controllers typically read an
-object's `.spec`, possibly do things, and then update the object's `.status`.
-
-A controller is a client of Kubernetes. When Kubernetes is the client and
-calls out to a remote service, it is called a *Webhook*. The remote service
-is called a *Webhook Backend*. Like Controllers, Webhooks do add a point of
-failure.
-
-In the webhook model, Kubernetes makes a network request to a remote service.
-In the *Binary Plugin* model, Kubernetes executes a binary (program).
-Binary plugins are used by the kubelet (e.g.
-[Flex Volume Plugins](/docs/concepts/storage/volumes/#flexvolume)
-and [Network Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/))
-and by kubectl.
-
-Below is a diagram showing how the extension points interact with the
-Kubernetes control plane.
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vQBRWyXLVUlQPlp7BvxvV9S1mxyXSM6rAc_cbLANvKlu6kCCf-kGTporTMIeG5GZtUdxXz1xowN7RmL/pub?w=960&h=720">
-
-<!-- image source drawing https://docs.google.com/drawings/d/1muJ7Oxuj_7Gtv7HV9-2zJbOnkQJnjxq-v1ym_kZfB-4/edit?ts=5a01e054 -->
-
-
-## Extension Points
-
-This diagram shows the extension points in a Kubernetes system.
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vSH5ZWUO2jH9f34YHenhnCd14baEb4vT-pzfxeFC7NzdNqRDgdz4DDAVqArtH4onOGqh0bhwMX0zGBb/pub?w=425&h=809">
-
-<!-- image source diagrams: https://docs.google.com/drawings/d/1k2YdJgNTtNfW7_A8moIIkij-DmVgEhNrn3y2OODwqQQ/view -->
-
-1. Users often interact with the Kubernetes API using `kubectl`. [Kubectl plugins](/docs/tasks/extend-kubectl/kubectl-plugins/) extend the kubectl binary. They only affect the individual user's local environment, and so cannot enforce site-wide policies.
-2. The apiserver handles all requests. Several types of extension points in the apiserver allow authenticating requests, or blocking them based on their content, editing content, and handling deletion. These are described in the [API Access Extensions](/docs/concepts/extend-kubernetes/#api-access-extensions) section.
-3. The apiserver serves various kinds of *resources*. *Built-in resource kinds*, like `pods`, are defined by the Kubernetes project and can't be changed. You can also add resources that you define, or that other projects have defined, called *Custom Resources*, as explained in the [Custom Resources](/docs/concepts/extend-kubernetes/#user-defined-types) section. Custom Resources are often used with API Access Extensions.
-4. The Kubernetes scheduler decides which nodes to place pods on. There are several ways to extend scheduling. These are described in the [Scheduler Extensions](/docs/concepts/extend-kubernetes/#scheduler-extensions) section.
-5. Much of the behavior of Kubernetes is implemented by programs called Controllers which are clients of the API-Server. Controllers are often used in conjunction with Custom Resources.
-6. The kubelet runs on servers, and helps pods appear like virtual servers with their own IPs on the cluster network. [Network Plugins](/docs/concepts/extend-kubernetes/#network-plugins) allow for different implementations of pod networking.
-7. The kubelet also mounts and unmounts volumes for containers. New types of storage can be supported via [Storage Plugins](/docs/concepts/extend-kubernetes/#storage-plugins).
-
-If you are unsure where to start, this flowchart can help. Note that some solutions may involve several types of extensions.
-
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vRWXNNIVWFDqzDY0CsKZJY3AR8sDeFDXItdc5awYxVH8s0OLherMlEPVUpxPIB1CSUu7GPk7B2fEnzM/pub?w=1440&h=1080">
-
-<!-- image source drawing: https://docs.google.com/drawings/d/1sdviU6lDz4BpnzJNHfNpQrqI9F19QZ07KnhnxVrp2yg/edit -->
-
-## API Extensions
-### User-Defined Types
-
-Consider adding a Custom Resource to Kubernetes if you want to define new controllers, application configuration objects or other declarative APIs, and to manage them using Kubernetes tools, such as `kubectl`.
-
-Do not use a Custom Resource as data storage for application, user, or monitoring data.
-
-For more about Custom Resources, see the [Custom Resources concept guide](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
-
-
-### Combining New APIs with Automation
-
-The combination of a custom resource API and a control loop is called the [Operator pattern](/docs/concepts/extend-kubernetes/operator/). The Operator pattern is used to manage specific, usually stateful, applications. These custom APIs and control loops can also be used to control other resources, such as storage or policies.
-
-### Changing Built-in Resources
-
-When you extend the Kubernetes API by adding custom resources, the added resources always fall into a new API Groups. You cannot replace or change existing API groups.
-Adding an API does not directly let you affect the behavior of existing APIs (e.g. Pods), but API Access Extensions do.
-
-
-### API Access Extensions
-
-When a request reaches the Kubernetes API Server, it is first Authenticated, then Authorized, then subject to various types of Admission Control. See [Controlling Access to the Kubernetes API](/docs/concepts/security/controlling-access/) for more on this flow.
-
-Each of these steps offers extension points.
-
-Kubernetes has several built-in authentication methods that it supports. It can also sit behind an authenticating proxy, and it can send a token from an Authorization header to a remote service for verification (a webhook). All of these methods are covered in the [Authentication documentation](/docs/reference/access-authn-authz/authentication/).
-
-### Authentication
-
-[Authentication](/docs/reference/access-authn-authz/authentication/) maps headers or certificates in all requests to a username for the client making the request.
-
-Kubernetes provides several built-in authentication methods, and an [Authentication webhook](/docs/reference/access-authn-authz/authentication/#webhook-token-authentication) method if those don't meet your needs.
-
-
-### Authorization
-
-[Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It works at the level of whole resources -- it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
-
-
-### Dynamic Admission Control
-
-After a request is authorized, if it is a write operation, it also goes through [Admission Control](/docs/reference/access-authn-authz/admission-controllers/) steps. In addition to the built-in steps, there are several extensions:
-
-*   The [Image Policy webhook](/docs/reference/access-authn-authz/admission-controllers/#imagepolicywebhook) restricts what images can be run in containers.
-*   To make arbitrary admission control decisions, a general [Admission webhook](/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks) can be used. Admission Webhooks can reject creations or updates.
-
-## Infrastructure Extensions
-
-
-### Storage Plugins
-
-[Flex Volumes](/docs/concepts/storage/volumes/#flexvolume)
-allow users to mount volume types without built-in support by having the
-Kubelet call a Binary Plugin to mount the volume.
-
-
-### Device Plugins
-
-Device plugins allow a node to discover new Node resources (in addition to the
-builtin ones like cpu and memory) via a
-[Device Plugin](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/).
-
-### Network Plugins
-
-Different networking fabrics can be supported via node-level
-[Network Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/).
-
-### Scheduler Extensions
-
-The scheduler is a special type of controller that watches pods, and assigns
-pods to nodes. The default scheduler can be replaced entirely, while
-continuing to use other Kubernetes components, or
-[multiple schedulers](/docs/tasks/extend-kubernetes/configure-multiple-schedulers/)
-can run at the same time.
-
-This is a significant undertaking, and almost all Kubernetes users find they
-do not need to modify the scheduler.
-
-The scheduler also supports a
-[webhook](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/scheduling/scheduler_extender.md)
-that permits a webhook backend (scheduler extension) to filter and prioritize
-the nodes chosen for a pod.
-
-
-## {{% heading "whatsnext" %}}
-
-* Learn more about [Custom Resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
-* Learn about [Dynamic admission control](/docs/reference/access-authn-authz/extensible-admission-controllers/)
-* Learn more about Infrastructure extensions
-  * [Network Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
-  * [Device Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
-* Learn about [kubectl plugins](/docs/tasks/extend-kubectl/kubectl-plugins/)
-* Learn about the [Operator pattern](/docs/concepts/extend-kubernetes/operator/)
-
-
diff --git a/content/en/docs/concepts/extend-kubernetes/extension-points.png b/content/en/docs/concepts/extend-kubernetes/extension-points.png
new file mode 100644
index 0000000000000000000000000000000000000000..01fb689e7bc42890529cc8d6157721434e57166d
GIT binary patch
literal 114442
zcmdqJ^;;al^FIiLz~UC%AwYt=y9aj(?(Xgm!QI{6-C=PjxD(vn{g(GfzIXQr+z+?&
z%+ozR)zvaxHPx@G*-$wdF$7o~STHa!gkR#q3SeO1F<@X2j{qo8iSlKxF(?6dP!JOY
ztD3|+0$l_esr@pRmIk8)<pE${!BN4!e3F0;FmN2Oum8z|fk}Yl{%>9Z{KtROK!AaT
zn1Mn5H_dNQ`uP(FouJzPoqovy|34gaApVCMJSOMM|KuSaKdTL`OPzrd7+Z052QV-=
zw9gY9EG+{I#7*5yNzGABT8h)a#)?+Y&_>^g*44`PvlbY)D<>#xW#p(w<Z5MU?ZD~E
zL-HRAPEh`{n2v<#KO~M8JS1w;azsKl_C`dkwDh#}B)qUhL`2;7hQ^!<!lM6O9dyM*
zV(RE<%SlJ);^IQ<!bEFhZ$ihw!NEaC&q&9}NCTpvad5MC)N`e=b|C#PCjY}n*vP@a
z-ptm~%*LANldqn>jgun}3CU+e|NHx|ema^N|DTqu9sYY*paIf--l1clrKkH}-k_@7
zpQW6#_GU()mOuIPGI0Ng^8Zox-|cYIeK!7o>&$<R^gpGbq4L6V)BW$X@xo$jZ$X2B
z@q_&m7Ep2pKh1>pRT_93GI^ksc1J(*SFlu*6X?Ow(9hGo_-l$PJ*TFR%9A%}Dz&{S
zY_O;{?aO0+s@oT=B~S}C!!;8{)qe5uGJZ~dLD25v0Xo`Ux;NKPJ#04SF2-NInYw>Y
zVUdaOqsT#i1ONXvIgaEn*&t>%0?UF){iQGUOR-3BXA&K<iaK}DRXtO)a#mf7TRpKw
zvt&yBYYMq2N(moC>$+K)&pS)teh7d3{1JJ0%Z3qq<@fHF#Z61h5hkx|sgeN9>+6Wn
zIW9GXoK|9@#y+@2kH5odqxwufcfXKm#~1LN-T(Dlg|QtV++G9MN&lKsp;f}CzFJCG
z7L|`6{|WApFksym%a^3m2s-$cslBLVHX;qKVDEgA)yZ~-3FAQ#Ca535kSk*wS_C1#
zGocTu4_p36Qzel5rVd8rqtmlj=;F@;Q<`+?x&5MDCy@N&QSOIh#DQA?nN`palf-X+
zmB=w0b(if5dT#akS#IBdBYS(!mp;&}jB1gp?W&;D{Deu5i!)8;iss_}HktlCbaO&H
z+yXL#IZRUwOkmp$UVifyxKXW=!TXeNIim3JB4fRiC{oR=cO!{{Q&}KmB00m1zZ}Is
zr(q1t^-)epUT@hqQS46MRdB<x%A#|D8kV9BmdKk~Y7?Q#rwE7Nn1@9|>6HlMPXp|x
zmNZAtrO!@ChiL0he(0#Dz2hvXGjmD=4ymL5qFTM>shmZCb7g|%!8@jPdQJiQt6WG{
zWhEgxi%aDz=h#m2b2#}+TQDoMrURmLfsnwN{PEOX3&DCYa24GkDed7K@99eA5JdGD
z5`!YC;Ty`%zVAj>WIVrf>+|I7f1orC20{r-8zxBKO;6!EJ*II%^e2{Lp3_R@WHzxt
z|IwZm^&Jczon_MMkjt9OrOsi&?~5zqji}y}{e@EU1w#8oZqBimzy!f!PDXqZCdO9D
zJw{ZNaAoCK?(bZ<60Vspu_6&^Y=uDI4Xhz^<u<7W?Du3;)OgGpIzgxT!&h#XeSUNG
zq6SfV=>`dk<V=yv)XQ3j3%7g4X|GG{=Hu>PS3>zm%X~h)U(eOMNs73YIiNGxRtziy
z3>r)0a>M41T*DgP2YhW^FX!M_37t62nK0-csN0z(!3B9p3`7`v35o_<2lt`*w76ai
zPFPd9?lw&yMG70OlD4ay+2kVR$8eUZN!!H>o|(~qy<ck~QK)N48W-PH|2@`G;FTwQ
zE#w{}n`Z2esptx0eqJ@E;5QYja~h{c3Xv-O0TsI`LGu+{UfNA>_9sqbVb;J|mC9Ga
z%py`|!mmM<vyInPQ4TnMHAhfz20!A0<|-fou;nqBEJjaH`?ppuEHAffy$zF83Ch+G
z-ukE6L4`TL%Ge+P;nK18H~V>0<61YyDZF2;CXCz9NRgR&-th9cOPga&`yFj&2Q(RN
z`DWX#k}Fiqc99#FGw0Z+o}JefZVsE7#w!rUq$#$H64lAY(-OgI@tLu&D`Wo-(XK<K
z5h4;;tzb5=qM%TAEytWzv8T0h67wT@Nk56!cUi_W=yV(YMsJd(<=>{P;1rpG%(^xT
z5LZL2S}IcJa?t&VHC8+Du0@nbD-g-Iq=sBGB{kg8VjYr7mifDXftmi=p|7ak>EBd~
zn)0Vu9VSM&Y8Q${#gCb{%I!K?<4wj#=9X6rQqygRw>TKv%otfu|D-;uXjYi|A#-oc
zf7Y^UY(mACs4o-G1YM{C`S|xY+V6Kd&E(6|j|0Xz7Mgw{+gi#c8lq`)$wCaydu;2^
zhn__zyeZOmghB<imuMYUSB#ob20Du+0V1he2gX$VuU2rUC&j=ro1@Z?=lRvNONWaS
z)zLdigT9xIILU2$*`t09+~yIW;>U>Gug$8a$54-_=+LN^%@(|0e3OHA%ZIqKI20N<
z;UqbL9}r>uLZmqm1-U2-m*}5*+q4K!0%lh9wR~COQ<3N7qR4^IOam+)!+b&X%!-go
zzRa`!R;QLDs<${?5|OeXg`bAyx8Dv+)z_1hoSZ&7DxoMRrz;&CP>qT=-jbIG98^_P
zGrcx4@oGYYR)zYB8oK1EE6WSiJFA9dm@yF{N=BK+&=NZ8h0HC^_FloW?E&Af9U@=?
z#0L{ChU?TDN4D-IX^f{Z7>tANo9Bm(KFKUgoh(!`rL&IE+7c%(RCm9xydJA|*BM`J
z58P*t<$FyNf`&3|2I_2qx+j%t6|+tETa(*KWix8$F>~j_%5pFQ?zo~Xj}h<Vzb}0}
z2@??y<<(t`CfQz1Zu_YwmcKKnwL0A!Ti@<iE0<gB3>FUh$mM)M^Fd?<S*ODm=d6OW
zkgNFj8#?;(MFg{<W&eDUG%jvXcrrAF@T>DtLElrKmDTI>TjBMXspaLrURLZO0*{K$
zHp1@FGS(~34+Q&(+WHzC$S(*=D8tAQl>9T0GYpDzOy?VJd&{L(x(QKsoXtxdJFhL}
zCza5fTpkBe?6y099{P8h9WGkhn7^*KIJPlAzqNQAu+dc?i@o^Uak@NOtTt8JnK|3F
zT-F_@^@*h#qDQ4+iSQ%Kfh$CtgMA6o-4-wo_lo(o!#jNW_O9E}`w;b$DYnb|&0SGN
z#kkG!DDDrPdP<<s8m;9461k41rqoPD4_widO|;JT`}@m<RT`)BX$oL!;MZ?0*OHar
zjpjyu#tB6Qpk*{c2#!v4M{SUDI8!J&aggm}jZHi5knMF}OVyZyo5Exgb+pmhj?L*<
zVz%Dah>!gk)DN0)bBeuo=QDHXWuxRug#beGdAo;om(A2hi^Y|iHm4I~(I~uBIVX;2
z8P}dyzSm2kdczS^CYN)~K2PCnUaxWIRVx!HL_AX{c&r-b-+(W<b@~IaTyC;m`xEIV
zXO}`59%qfJf~FlelU$)3IIpOLg0SFhmP<ALe*#@3K<jz>^>b=M7@Z(`V4_c|+9%gs
zcOqE}l6Ab7@0av;t2^)0o{nUF%*kakOy94febm6WqocB3TkLi!(907wvD8}7rK>xx
z!%`WI!dkb2aVxk!kerJ%ozsriTI(B~fd)7G6Z;z;7c2)^9#xxe+wT;7PoY}ajho&t
zWT!2}Jb;dLo37=e=FzdozQ#pui%Gr@&-7&Zd{K3cZLylSEhL|ssbo$2P;fLhcL|KB
zm7gGKJ^z$eL?b|c@L?|3mH<*_VHekFO@LPj?i??2{P@V6NC(&Bzkmrix(;3Uhw}*o
ze>vs5!@qr+ph;dhj};?eAQg?MDWh<I2SjbY?z0s&G|aueKXf;bXS4eQcZ$-j8KDVW
zbM8WXA73^<tk1h%tlROP@}qefxh^^!^uO1c&r>>Fk5HsPY<NuJ*$)%%`@_-Fd%fH@
zmX$B+_^iXWY`)(&JI~#O>%0P^ERpfr&)dqSNg<GZWD*k-UsN4YdE|#~K}HxIXw{pC
z5_OuhqUE7J-(-JSzF&O2PX+%A48i?M&uPbVd3+z)<4eqn_zd$=5|BfY?K$&$8Nw&k
zA*zN#E@^Uf_wf&!kG}n)tKF;Hb_>`)96;6pQV{Nmk$)n7FCn{adOf6;SGA22rThuM
zY!P$Ca~Nk(am@*HU^bm5Dqj)IVSwN`Z`qOR_I_Kl@F3HY@zsx&FjcvlTSDRt)wbwA
za@8gBNo|Wt*sNOcD-X#K<$v%4X%l+&KN~FR+waed-Q<DL4*2vkIH?ZF#x*}PQIK%2
zBqStGp+xb3k7f;k8buk70e19nl(c{T4mX(1p1w`_ygS_F6TS_@B0*xC?TnTHa)B9R
zpvg7wdcBrBAxKPBbYsvLaAoJ~m+Vq2@)*Q6NkNn4W+1-A`pKbx`$d_8K6914{TNWN
zFs*nG2+he6H&#9AIXU!m{ulTgKS0g~o1b5d$jtwck_v5HRoktw_2d18hV)}MUKYO7
zVZ%hiHRgNNyYFB$p^dUAy-zVJ2`%}FJU+t|aF?@RqGTkVV%0-QQL2YdqlvoKJq+`a
ztn*RCDfoj}DEPamWQ$%MKI~v9=h(z7J4<4AY0GPSIl}i<Z%4>D=g<~TX?($;UtTLd
zA8%(Qu$*`i5$csgcsd60-5V^<YdD)2AZ={fo43M+gC;EWyd6$=%41&qsd2+r2D^rP
zqQj?PP<>*e1nTo(?eoFhjb@8wo68GR4qT54lTS<fH<tj(^y&;>TS-NcBc?%8Wwp|5
zV{`HLu9<PR(pZ0STl_@&4|14o)6;-lDn<9?3D>4W?<?TOh$6$*ADh>+1)XTp${+^_
zcxYO+uD@~cp0_sWue4JV;r}YG%x&(uEgsKvztl&oXjC{Wf~jSg+;k3FTiEzP>~D2w
z-$zjQ?{(=FF44;KQcQ;mNGOokN(M`_v6gd46cr#f*B$P{QL5?<c6;lrMad#X8elkC
zd|p;J;lnxJ-!6REROWDGVL#tSVC0D`9*n&2j|T0Fdhf4K&XazjW=ew0MTR^Ki--Pt
z!2W>vgUQJ5hl|s-`GH<?z8~xosXQJ{shmz_nefHU`>fwMKl)E1BsD@1@lP!fMI3?s
ztq(ex=c%_G#JfJ#4--h>qp8mVZ_Y*=^(M0A1Wv6^_vfv|)zrFvj(z4rc^TSEoS|6+
zGNCa2AQdsqN}h60`0*%q@)AmsRTF>A%^oZjU>||&ReLgUwb8m2MoEO-3UxH6II_mB
zoW{i#{<s!HAOIaJbNU9gAFYimumzc-sA1=uZ;|sZA0x^4!Y>+4keO29awL_++c@S8
zSrRbE0DlL*gCX$9#gNcl-n<*;vBuHdo1uRJbW-j1Immh*@>pcBvu=&U=q6Mp%+xtp
zn3p!mK0O8!!(*~;IYi?Jn_xshhF)fBxHz4WA2t>8l!N`M@7Maedwi}}(EYN0VF?)L
zsL{v}J)q3h2p;ncD7Ssj;wpY=gSpgYEGe1x`FPO@SQ&>QJ=I+a$Dm=n=>Fi1zF%^w
z8kfcMy8XMB=5gLiakcUL(R=As94RjJ67>4o=pxoSWei#JLgcthLJOwGN}+Y2E?AB2
z^EaW8dNp%8uiGyxuR#?7zcC~pkl{KrJYXq7N~xdZ92-w#q1uYVRc)&3NT$=VmKD|=
zAlN-^HMt`y2a~UTMsTnf@DplZ_I^2=_;`Qd<1#sLk^TMX>2JYR;k?@r-2J*or}D-2
zxU_iX((cRCtS-$q-%`AHRW#qbYhni~VZIXvBr@R{g1um<{JWORy3ytq2Ak$G^%!qW
zl1v#;q8_RRs(*fcCo!!59VV%72CL*>6`QP4fbn>WUNn>*42@JORPQ?yP8q3B$`WxP
zJ0heP9olLLzH>@udXE0=WvWMRY&~v<7cMhm@NJcV!zp*9-(DMD;r6zXA@Cg;;J39#
z>baz7-;W}eqVw^*XuN9G+&Jb7gDK>0>PZhCMQP_D?0Nvm9jrZT`TFI9>!4_)x(#*=
z1Kj8fY0>y{x5EIss@mZ2U$%@ieu@BD*i(=+CZ$4+p$hP8!AHR!8rDF>JokAM9}}Fb
zc>;^n$-C8I&p9a^qlj2rP$|+?<&zl%i*`iTMO$hXL;o^M4wrsJbd{D{R-Mh2#v_o<
zBbgO@)tZD~mbO=r3z3Os8p+0Ui4K<r9YMxI+2(fs3%(a;f7D|kfyx~$8%&Y_Szgp`
zi@v(==LFTOmi3Wuk7$JH`VIsy0xACj)b8C6b3<03e8JeIoulhrzUcKKI=?c8=^2IN
zHvWsgObyS8t?5rfrynBp>Cig!=i#9fvxF+>ZDnSt9Vzk0--;)fX7qWU&9>B3dIwpc
zthI|@J{C0{BG2Tvl2HJX!5j)f!J-*>eL!v0K!_V|CX>mAza;eQ9pO5cy^y*%r`~)Q
z9XF_*?A)!l%V4*~Bgi>;KbVqiNV#>pZfl03@GWMA-;A9I@k!n9=~YJ4zHo40_sV)F
zBI)Ht1#Jm|?3h-Ln{g(zn{VT|jK4pYr@W0Zb6aNNN?hPDsB89np$QuzaJXjdhVWgM
zE-tuVFZ-Mm0(06Qx5Lluo#uubDA=~ibtWHY|M&{2G1wPr3pT*`c%wKMEXo3gK_<;4
zY_!89$57V2FBc$@nbb89PBKNkVnzWos|0pT$6}@>L|w6$c<7s62Ob4PEnnaUM!z>K
z7Tr()f5l4PL(t{p9-WVw$L(ze(Z{tKr6=F=p7c~C)J?U|+Zgxlw9x(#-@BclYYqwj
zTMq!p@U`lZj3*;kWT2Rs(I$Z34)-ex>Z8b^0JHb&3~BrGak<shw_dx0OqVp$Xzm$S
z^FZiG!Y$z)2P|Yl$yDqKTT{}0x8MDeu2FTrEB8>BA*!k-+uj86LWJCA{Bp;21L=)L
zTjq2ip^Y*kbSG)KH%I}8u?~V?oF@22CQ1UI0aqKPrj<dj(_6ag^pH2?_>NUXSgksD
z0{}=8_!WRz4x%DOz+fSMBhDRKZhtZ_@hd7)KC0M~fa5iC9&#p0AoSy9mU|>2^A|km
zKwJM;HMMYz%lHoC2H%L{bdjMSW`^*E90RONFGbhD!=XrA6Dr$k?M}-}C3cyuLa{02
z6r-3xu|EBu^gNvI9`L2umF#({!-wF+eOx%;?)vVo^!l$Ctp{1o*kqAQg@0in)<}g-
z8>Gr+4S@LGrLT`<h>MqhFuPmyHlT|9d;DU1)Lg}~u0kXr?7iKFeuNWXm(Q54?S?Yn
zp%D*vAX{hfohPOtf`@b~&gZD)QRC;68O=qWRCn{rSL@C#k&zz5_x}Wx<PaTWzl6&r
z19R+z9_M^GX)-cws~wAoh8(pX-y7sYuu5}A?awcFj=5A98Hj0>WX|!Qgb(RSOeXy~
zaQ`6US_7t@2Hs~R=^F95LXf<#go;NdjN+g-b}+f3kOY;-0lPT?h$JZ(VjxTLhrOzv
z9GRX1%JGlI{2_$Ih(V#~pjIR$HGw=mVk~;^JRnzQMg2p_+3Dp4PDH%}g0HJt0{w$w
z!g#fXS^@q#Bf0owc6i9cQtXCq+DJ2(^;eg`lZOzkd_}lyVQ3#L4pO*3Sxz-lCD3z(
zDL<TIO%_jNm9<+;Zo&JCn1V{9N|?M!2!^vUww?SV+t9w7h^a-C92I<pX=KbdVB0za
z-n0wF+{RBvWos@uV!f?^ueC6@MRv$wnTWjIo8+OKEBh9JGolAe98&_&xx_mhBK;q#
z;^aBrE;9JmbQOY5PPH^?Pjh@8@H&dZFkNWRa|pA3HS=|Qvz5L+-E0ASCbMm_@X6ol
zao@BJ)$)f@jZhYpFcQ!r78o>+vvlwiDY+i=7o#{IF8h#V-C-g07=PR4yJBLPl_3%P
z9@5t`Wuc&vLe90wL>{lm*147xo5CreT*SxLPldT>Qu{^f7DIfOj)_<1?pCFY^%2iF
zZ&%uaI#Ucfi>7eZ(Mt2T4w&kF47doG8d+PUc-MV=&cKG$b*EQeEH@TGITqnVGj#M{
z`IE&$suKw95wPZB5?2`bd^9O1bhg`tj^-H7InUs<@w9``CjF4w783R}!L}(CF$}X<
zTBC-tM8^x{M;QO{bNH3-?N$+2YdT9Fos?B{wu4kN5XCO9E@-W6Olo%kDn*Fz4(){_
zL0-CyL>I+$i;{YXC=<->Y5<c)(J}r|HxSH^n8|0bZsS;#uxh6#&Z*cqD7JmCH3ACD
zj^A1jy8K(F#CYKlr})hfgSk&}*Z@t1@9ruW)*P^c+Yp;8AD?Xq7{;{yeVrCBkTm|p
zn`A1mR}fW&R}g?`3#0=k29dQGSl1NB!Nw&0zD~Qq2=z5ctAGl8f12`HQ4T0cN~zCZ
zoMiYw_J~pA94i4Y8u1Vd?5ocXeYn`%?Ai}cqStmmFG)hCtr#~*Wh?)N4bJXE%X5AV
zJP6a8#=n<o9Q*;ZA4M<tqvu~ha4Ys75i)=<Z(mOrVpqD*Gcv>yhdl%e@ov)nb{4v3
zf4CknD~REu>!nIdDWE1OZm&0JRkOMbXkJBD{v;8_510MLPAV$YC=i<J?U5J0JW?0*
zicryINYl+HfD8}~>N5qRz~k<p19wt4c;Qp$e?>5=g${gYmdY%w@^m~ah?gn5j%C^q
zi2B=p*@{|Jf3OjYD_z4E_!o7|3<lHw2xPFKLIWfBPA#JhIT$2^f6<w3H*DocagN%4
zk4009_?<G;OY<To=T$2n_|PIIF8ByDd9Z{@vn%#h9PX#-L=nk9F)-0FQTZr_En&#!
z18_Fai{NUlw#a~SuNsPgR#Y}vJ*8emOC>RH91i;et;m5WhkO2~&{+o*32(kPLu-hA
zg4Y73clMpg+gQYA2{-{kclp>_lcOXJ>t7|suXaxtnR0p`L);uiAx8axUqD?_T412o
zQw;8UPMKiOzo^1n&z{K0sHmPlowT}wX_|QFUXrb4U}itbDxZ`fApkkuA*J?3Y26{w
zF_%*wHOZloA@sk7hB+pKH#!V5H1SDAYI;)i>b!x~2Gf&SXh?@|T)n$W;vFWb)I(*+
zRpFQ(<Xh@T0~-j#K}R$CG&_8>(w6pyw>{oeQOA0uwC5uf)@y++t039dull1%wA6n>
z!6!Od`2p&MD)@|o#P6F@KmmVG=6=R@qfy6uqGC&c8PwYoc4_ujF)XIX9ABvtKLE`o
zD+8`?0DR{Gj^lyXRm3akpRN!Ug&_B3&leS<$Jt3iaF>lFuEo&-Ay>c;3N`<&=35hV
zBAQMp(|2?~3|}y`2V@7b2==9=aIkGdGf`6HbZu-aV#ilf;ui&<IFcNQ??0){mn}iU
zHs+dc)mk)+m5&4oA=Y#m`UL~NrT*wuoBc5M>(>~c+bx&;2MrK7VQ3*WR}_n!Ly;1J
z(*WLlsjN0~X?^Y-L5@sPJhE(UX}cQ_SyH(s%mD}aic5&w@Xo?iqwLFE4>56nO2kah
ze0+>UiIDX$-#T*NVg6hP4StM!7c~)_LUbi_@*6oZEnC@lE+V#V7z~10ZW!k4!b5#<
zHq)O&82zbH405(qUnfq}c`*|(PXr(dKYl(zTic<oozo1@35(a~{wq4Mt%4K+0O$A@
zS<JfrJ<F!((h4O>wJsvTAwjKaBubC9wwBE|USA!22ZtL$3*-<$f}o^64%k@mR`#`w
z3|%oq2B+Z0vbtP{T=-X?pSshvoH4-gNWEkD%^x?aNY@8^NZVEuQYXVf$A4_tRG8u~
zlUf^&lB5`Dmnm5dj*#Mm#Y>75^|(*<2hXZ^QoF1E%$b8C{C&wFx^ax=35ts=0lTy&
zY*0Fw^G=1an`PzbyL%*Z=@$_qEy!E?0moPcmqx*!NQ|YeF*_vBVsO8nXAckxL5Q~&
z!WH%H0C&A2LO?5M1(sM*K|!DITmK>oM+TC8d~Tye1g8q*H$Nx=P)7oKR_eZpSbfbG
zBf5>Rk7AGVce=;(59#qup%-%+kl*wqO-GaF10kbasZqE}zaz9Cl@2j=JoTpdwyDX6
zrGr;OR^Cfs%bWg`dWaB_L4bB0Fp*s)a1iu9SRX5m7H3ZaB^7H>G>~vmi5SJ{jMusl
znTmQG4#Qq-5a0q>)&ua_sP7;|;<VSD>%1lZ?cHCdWU<h3E}A4p9rTP0F{UsG(-avP
zP$u0yD7fX+8ID2NZ}3(=ujf&u$Dddj!aD)e#}OEqK-5i>ZV(JL0ouBner~BfatI&>
zTd!VbJwAbKJV>RWd3N^ZKWZ87VTG;5S?*;#s2P2iYZBD_|KxZBVTxO~_gi+N>VW|+
z)~&P;QOL+L;<iyJn`y2f2)IJS<YKMJY5v!3gRX*D7(XZA5bzy8VNUutpk-b@+vmNt
z^)N3So{+}B#$`M!`uZ}6EfC?pr1p_s&M8obB9L9>1%x}+Zzck==6-8oJ<EV_a>i)i
zD1OFhvvByokpzz_%pnU`C<ICh^xhQQU{GAn=}ZT`jUXh=Y-=wNEggQ@_OMGaGs(p1
z6JJH}_l1pt@@w3K8a3`IRV+@^?sPAN?1jO_t68DM7X&bvZ=JY)LTzsZPMq&^k)K#S
z9tdH>L0rYaX7u1%dgwjiC;m9>1CJY@?36qheT6Y+WIKq9$_~WU8cg>UwE5=u3=;Q(
zE<o7_C7@>x8XilRVywJl_}`bZY8H!y@0pHMy39BUAjWgPpuXUM%`7&G<;ai*{1#O_
zkdLSWmXXaIYodrpf^N<&9j0><^?ZL?Yjv0aLG8!?xOnISCpKa^;bL#|<W)h~tK64Q
z{0~fAXAu!RibAiL1L|5fWs$aEu8IROYp=)JNX0z)*Tx~9II7&71WE}mi267<{aL~f
zY^XllZV=n}Xr^#MqzDqQMMVFY1sKXE;!pVWSD1bJD;gfz(w8zhL*MXEX%E_GGpzPL
zh?Kk-$GlPh*m8)4yZ%2Y%a_)7pQdw#CMugZ%w-qJ0-~N4S?VKrk%h;-KK1B+6xTVu
z(?(EL{Gk&K)Lk*aG6*!pN+S92Hj;n)-yi+|CHzzzFHF`p?`8zt$TsRtM`|u{ZNEbA
zxcG-6gc%tbf%e`E3%@ew3^<`t168xp{Ww2C+{x+EAwvMWu@7h~jTNQcy&Xn%3V<Yz
zv;4lj#?<U*dx-`C^ui2uL)uq)oU6q3V&B?%P~7Q^;x`Wz$NvFw^r@V+3g)za1L(u}
zfAs8Dx9;P-F#HGvI8$GV5Iu?^TEcQ4WH^i)C2JW&A>btZ>4U+AL>g*#fW4TN<+F0$
za5Fg>Boqb4Z+v=z@;@KG{FXI#EU~ce<$9Y_eRiG*Scdb8nX?%kgkS6z2#8!@S>-37
zs_A((a9`hSExa8#0YWGBR5h=>V*8Nz)*!@}oN&DUX(+4F<fEF?;(i7B1R^0E#=`p<
zT=#{@WwR`&2KB%7Hcu=M`T6os+wNIXu|i>>qpNehc3qEB-7_^|YTEjJx@pEiK((1b
zMe?Po+dvM73M9@q@HYbS0ARUa09by+CshB5+&JrJ$}UCWvQ5I{u}^2MjENOt#nK~P
zf4UHs>rGbCyg=rWwZl#%TN)xhry3Cx3AZDnFjXN*48y0IftNt|feu0Mt)%Knx;ucW
z)8M}ygsDyciTbOz*ybu*F+3k`c6Vd5TBfvK0^!aMENTq`A&i7wkz>kg_yvBU3<E%m
zk`W>wN&z3Dq#y(A2Q4itNPJoN-i~A^j*7Fb&)lH5CQBRrw>T2jrn?rVI3Y?|437m+
z#6K61(r}5FC<*`;EDJl4nezxx@RxWIkWL3N;eyJuP-@jhR?Jb33jwNvYkgcEiacyB
zx&W!wGe`;T8|`P~BOf1ljO9X&b(bCaI50-e3cT7T(;l*)w703k3EQAcnsOZLbCX*1
zLWce?KcZx?i`EWel2LGWdL`Hh+(D{;2Lzm|+8o(kp1XT>{XhHAg-3i;4IQtgZ@ZW&
zo<Cg{?Uq(*mv&QN$BbpMBz}BLdd9P<QpomNmPwnSOlq{(956W*c%uL>#87D*m^$Fq
z8C`RZDwzFOUnR1OaMGX-gAB<=j|saJzEDY@P4}{3sVHYjqOD|EkMbT&vzGLYGxGE$
zOrhTO4b}iCQUnxE7r7@@$j^^!p4clio*aD|ggf1}!APBxQWEIl1A8)_hp5lhub(^O
z7SbAKHCKW7P6_5Qv&5+?I$l7Rjd`Qf%QY$9)5Xgu{B{859l;ALH3f7w)@opMvokRf
zqb1WRiJ6S1z@_chXdcIVdY0a<A}L%o*D-yY@O#Fk7Qj-;J=)$&wRRIJ(mWPylCMW4
z@`c;AUx_=S%4vpcWU1AHyuxHJp_&(aL@s`=rn+YEG5aTmWYx)BCp}{(e#AYbq!wC6
zntzNhC{i@sP=*`z6Z{tw`&~A<+|P`8lx~I6u}zb`CDNoRkhgsp!>Cc+mo8q^gz(Ud
z!~W~h=^E38;@wP!#v1#><Rnk|M@3Kck&#cV95sgkLvIq}ky3NxEx%9~3Jdnl%k;Ab
zI+E&TRps-Qz4LNZcEK#!yb(ou6$b^s;8w|jh>@mzAA}))vxTz%;o?1q+VA6TN)nbW
z`T4trO5)k~fGaXL44Puqtp2W%3S@#|9zG_?I4q@xSJm9KtaA3GkhC@E&GL^j0OVEa
zQES=7^9~{W6i>(@4IA%#PcSZ@0LuW@)in>@fr6G|)vZ@P(LbyP&G73!>6w3V2Tb3$
zg(Bie<SZcd6MxG%*fzE=5YG(>P1fokRa7FS9+EErseVE<3i?u_m9rJjtgtSO+6ZxI
zGm52on<f@e;9@Q_D^;<qMGzAOs7{q9{9{dtiz~r?cFTv2TSFm2D^lCD`SI;-I@}#D
z!g+~N<*SAqKd@W~J&)48nPj(eBFr;cDtYjt^LrfvI);;`hp4(dJx3gXQf8PMJ_MM}
zA`<3cf*45b{p*+OGB(+!bNj*W(5{6rX+iH@%sxi8vL);z^CX@i*kHtlxwQ6DyWPmo
z2a_RyFsib;{JW;N_TO-Y0i>N+$1r&X$TBfs+K_R8WTtneqr)xCiR<>9=w3)9=UOR2
z<nIoeRJkRuRsY!nt|yIU_qC~Kr9>4PFw0aKA$gmo5w>J%uDjmidIUci7s6((tYn`~
zc)=)^T-!*r<K-l8X<1TIqCP~$pJlHxZuC<(RqEHXBR6DUFC91~B1Kz&@aq$eG#G@W
z%N{DuaWYFZ3<Y$^HONtr;8t$zDhUH4*;L(g>8?Aro0GDg4(cqWJukYYO_l%Vx>BSf
zE=v{(bB!)>Vy>Dr0ara|$lN_Sv<*a-;3h0rJ*s89cu!yJibgdZ%5o-t(n%{5rdf1E
zu2793|M{KG1Zl{GK#qCh$V3A>k@R1|1D`Pgptr|=LIV&XmYJm{iyD{_pBtkKiGwS{
zJSO(!FxSu*gL@nI<>CoV<D$Bgc8h48+Q_!@-IV{|abkWILODkv%XN6oH(C_uI>^_9
z!-!Z-UxOWS6RWd^<9L1+KrGWUS1Y$%rn(hxw$D8@X*YLXaGS}Au)C*VA~@}HLk_G%
zQ>@nZ@EZQ!b8}O~__*ytS{^o!4!`6mw;yv8uEVW)=$2h>VpMSRoP%ply!e|#Y5MG}
zLY6E2-ec$Nh7$h)40A5LNDEbDvTxeUNuQ)znRcJ>(_UH~2zULekd6LQCPH(NHC#+{
zGhVk)^v`;W?7Fb*S$_6HI9myI^n&R?e75LO74L_ciyWDS^<5<_$8ok-Q7+IEO{?8Z
zMZM&e^yhg5ObjdshZw7YHp)g(N&Wg%HoS{!xBWN1<kyut)OI=+9G0!7fg<~X!6($o
zkU=Sv5ZB|(E=7uKUIlHGBNJe*1<(o(&g!Z52(AoqGbMbkdjjC|Oi3>LxYRad`Y<s-
zI69c|3=@O3dZ{9c(Lf2`n1w|-%tyAysS~ED&3>AW;$2Ghi^b;q2L{q|KF+dSld09P
z6vpBNzi-SzjXL4F9C_lOFI9&FWZ)!f;Qmv;I+SW*+mLuw?J{<W4|yLm`X$lJb6);A
zpbu#f^sDz%Rhp6&c2lClIE;%7iU)fbLEMKOw$<IwOqOjnVMy6rwiYRUU5C!DAMZvd
zI=!omXiAbUD`X*?`ry^1CXA+H8!M1`h<T=lpqLzZz2h9axtNOXL@Hu?>_`mp4VvOv
zf@PwL*^GQDtaOb>fpxJ$L$JDEa6?Z#>9`iJMVQk&58qsY&bE*c0EJg^K);5wqaSv1
z`xzRQ=#z4ku(7-W0;z@fZv1j%O3WU&{g|7S)Zsqq{YgK^lKD=W>p8d`>u)<u#jHra
zi|~7eRNGo-F=6}L1$1h)st*o|mR_t<iQo~<81@r{sI)8OCUmx9e^L!1Xi6yXidtYm
zY4PR%T#rV+h=%B9t72EqFDn5%4C8Hi&BgTM?0v(yRw=P`E|&>?>Rvu4kCD&29hBB@
zTK%7EnsX5?91J6!0$YPs1d+ZXsS;|9w%%Iz?&yYds*5v%G}W2vjv7zzSWHT)1b6CU
zg`E3D%8A4Nze$e<ti2`&wDT;VV;aq_M*?+<%cZnR0A%(ny`$cjFc|{$J0h;$BEBYw
z8)(^3V`+@GRrNAU`t+c(?73yBlRR(#`4cHFdhPZwGPWxx@#NaFo%L;s)7yafdohc9
z>d)MQ5p#?rg@b}G_4_Yqgqk;A!HnPA*3s9`IlaB4;$w69SyIeVh6%tSkjfi{D_LzO
z_KcRobG}|VSHK5ZpE*Cklowp6_(ahOMU`M4(E#%))|m^zAl|bq{wYgGYeUk2TM#BF
z5D~#D%ICP}GPQ4dZJWw#s)pgTcL_hVi6>yS!;<QK%X=&qoYS9Wm|y+9%+?9kTGtP^
z?jhLvjXOU6u3EHl)LVvqf7m$qRZCi6W6K#bE!QxFB(J9|rm7BPv7<zm*63&Ac<A3R
z$S5oe17k;RnU##ioWrc_Qy`P&1U9Vg)9$TD@aKAyyyXh#4kXTym7@uEc39@Qe%)Bj
z!Xe`vXBrnWvzplw#1BXaKw3r%6o{)=7#U)bpsxsYtTTP#Ia(YY9a=IgHdqh;wy54$
zU|KYqmN)z?r~R&wT6Ib)NyMnB`Ez?xz~ZRGRa7b%Tz@w=Kf2(q*E>koF(fzA?deRR
znq2Cbt<^|{KH60KQ4)m!ce`&AezABLdx~RqDJJ83v|)tf2M$^9955#NAW@YTg`=*2
zur<%(&Ph>pc0o(~2vtunJLvk_wPGXsZd%_*_cpa^ijq4{nS%2epfZ&ZT6GY<eX(d_
zC}N@lh^bM%k1dHfka%Y#L66@mb`ImGLHQGWeG`Q3Mu(mx%Gcz52FOp7GtH`#u-;3R
zt$dK$U{;q2Gr&rNjWySuRgLuJm+}-xxKkOUoixGFW^YuHoK-BOr-B@wVJfOZ7U?~k
znOqpYl)%+2n^AZf6!g8)&MHw$a^30(>3(_IWdQ`6yX3Yf3<OCnCGgVSJ=My|^Y$U%
zFO?wMVI4KrqWlR(nktX+I;>6<3D*gw$l1te;Tp6)UHcwheHZ;ac089?6_<}vN9U*f
zt*UpPD}H2KkxPUK2EtAx*HOO%x!ti^-EQ#9!!K$0)UA3=FRASb6Be&F{2)tqv*Tb^
zKD;h|a!0WdLpzrwywGyB$6EQ&srU^_2n64rBpFFdhbBz-W}@vk=RNg@i3uf3bq0vo
z@j$Hm<YYH8`;Tfl=C<EaoH4vao53niv8BKT+cE*)vLrgbx?XAWF4ZuwR(rR0XqyIJ
zePwzcaDV9K^1eStPpL?qWVnKpiR-5qzlwig@RC|q&dh%c>>33?%rPvyNM<JOu_Y=T
zX~P8dVN!E?Fb)wLMbs5j&aw&VZ#bIDH?!hL$F60Qwyw!@THy=F49na_?5TeNStKOB
zrZKZfh4pnR$E#v>Ay2`3#Zul~gMDb_!F6|N=5#3Jo!05o#U$OAs3`bi5(pQRR}GAo
z=pbVT2i8x5E3-r3ai2u5TvjPT)JFR)JOpzX@6V-rI}Q~ogNX(W;;;Mx;dYtS>4gd^
z9GcWkja%nVqipfq$r_V_aTa7g2u7%>@ZdeXrs1`cQctU;o?ND)Xu48nw7@6X#8_dk
z(5P5EEc27wOf;w<;1e_!9k<}|H7iVzir0?ZN0=`XIJS%U9c<+!Q*5-fo8$A017Q|L
zbs^&KS%{?{L&jWIwMbZ<%8)pCeoL`usVZl|r{6sTD6~oCAmfOpeP5YZMTs=*qrp-+
zi7gi#;nT@11dR`qRNadKhTr_uQGZWGWgWGUQ&Lj6n;uQM%#jl_8%70QaIk;3GqPDN
zm(H5Aawe$}J-&(KP>3E9!G1F~Az@Mek6rWM=FR`#6GK=(xgv;Be_KH^GO~%EeClAO
z<N}|uov40P)g3c%L4w+fMFKk@4Dr9B`x&G7>yK(T`F7U5I!anc0|ieyOqn-{gKjb6
z#*(NmUY!M+&r{1cvu^@A+Yd&WcGm{8^t&e~efA=sHx<Yc=|W;X_K#0rRZr3R2Bzj=
zj=y~KykBi~(X5@ie@0{6l0duX432y_41GCut1sX>o{@U44?>M#)j(BBc1(~;Pr4Av
z6T@gWtN+-SPM6ZwW=D?LxjG-UaJi_Ol)U6f)Hs;bn)iYCBO(aXxo+FHwO6g=`|Z=z
zkZ8($+-Sbes?=sD<a!-}lpV)*Loq<9pi)|&76gWE-iB^-&l*8PN0kq02!@K#BypPf
zp8*deKpGY(skFiHvUbc+5fUvv89zI^5B{|r<*zBvk~Wj1piz<AZKSd?0UBS3e}`zH
z<em|bS^q><?n(Z+ZIxis*erGliOFjtkmMTF(>J#ALe%!PA{55P4peHS*3HaR;A|M_
zxmm=02AP^51F&V^rPzJ?6MkxMJYMCFTBbvf+@S#C^|ow>Pccg?3Vt6RlA7RzkSl?n
zQJD~b(p%sdn+*oVUoBSahkNIiOy-~Mu9}l@F%O$Qe6qIdI&-T3${`@XeIj2(2PiR4
z&U*V!M(~V`bg0MD!NJ<8THLe;UxzbB^JE|{tr;Dno+ZADPqN`oe46%ZkcN;Xi`Vz~
zTuq4S)BLB#BP7Hxw36QT+P=c0Y-gF-+137}l9UPLLZ2XK7=MYv+)W*)>8|vYx3UuI
zCQ{sAtYZ|lNjPM*>%oyaEqwR6eAE)v&j?)=$n6`V-09)Tv&9FZL{PZIXd0pei105O
zK~IW|)PiqXrLz2NA!v`$8qEJgQ(m6<+07=wgt9&MIaese7@>O14BY<1g2@9mi)&b+
zLbDt_O&i2l4su3-==)5befqt9Stx_hCA}Rmuwq#%r5vJPLYM9vHVyQ@-7$p?M_9qn
zN90Qq6AlQZ92<)?Jr;Yj8jMf@-Wc-N?ZI~yjmycvB2&;q4qmA<C0UFr%(Z}`q;oh(
zb(3#Kx57M}SSz_=|5_d~9u$Dtu?)b442A$XGQTFHcT)a`Ev%odu(QO$-rj{ZC7a8j
ze3Mkc0m(yRe5BCE7n^PxT#JsbQe@RnxEdsBFc8G@8X_8v)&{_>OThJa!l|(^x0nnx
zqVw{AzoXOMd0mvY#}&p3^31sZ(M*;>U_)t23H4O#s}EUb4&gh9X_^7q4iNn`dT<`O
zc2YSfuoacZX}>=gA(IgQKDV%M!kBT;^dalnVgsqi^0eC|2e|$?qz21wIHAGybu8gB
zW9Hnrd4;hUs5^Bqel?aURn$LzV97WA)TfxKC${5o%4i3`?emd5bl%ALC~n>TxgZb@
zWPXyP#f4Rz{oD#p;QGD#L!gzGED6~^kva5AXRc=8_(^4Q&KE7N;;qa2QY9f(9U|Tq
zRSDp9gO(OE21M>?80>vO#Fl2oU|2(&tG$G;<Jro56f<zEqqfeoSxx3&C9Taf?H7PJ
z9mSX2h6p0LVt-6g<#L+*aa@jMJxIX8htqMxC`=5wRSpLkzoy;@!8ngFrZ}n9HF1Wd
zqL2=5`cIBtlt?cVk;Fh2^cnyH2l~o%&l9V(fL<<aY#ROSL!$^khJhPOsYU?RsMJHt
z0r{RE2NN{Om`mTzP;_;N$>2D?6!T1D;V|NL=!U~pN2_r!+opKt)%c{xg+W-D#)w?g
zmZ&a$Z_uW<!M@j1;Srl*&2rNR{}_=5?0KWrG6~Ii7+Ls)3DYJ^kjQ}X(z!?4eI_S%
zSHe-CU1gsVQW!rfWQnZX(?-|zaryUZ+<8h9Q6eFb+C`kdrlJxJAGU%Hu$ZaUAVrU-
zxZ%FF?0(a4YCUpE4r?7xu%TsghW7q)%Y%%pG%aovlzO)Xy+3JD&6wSF6SYN6a0>EU
zX<g<iuozt*{iV2QUtD`CE}x)Lec$lBzSmH>q|(;dDP+Cl=f}x?doIJo@mL*C{dx!Z
zNviE2>YGxk_~ckwq5w1q%xw~FBzdj>Ivj&FOPhouW@l&lAtwYAP01n=D00GTRiT{j
zeAa-e^);gm2_g|bjMVu2AUjp2^E6qklCu1((qtL`p<)0j5od**R3+X@x8>6{`N1Yf
z9`IVQzD=h287K7vOI}XyPnLR;?y@W|t7|UEV@KQ<RzEQ_7WsEU2+6&zs(DNt{L9l>
z-_pRD!B)R_Cgu3E1KoF6lZz@=YWegLee;8`e00=@5o^>d$!F?N9iQj8r_yLGk}hGQ
zek!}`bdpNy!J4XVvvQo^h~dZbL7PI)%3Sflm(=8sUT&@@?^(MwS0>MB9(bKNhrJka
znK)cbA8Hg0ytzO{`b^gBD{e~|qp?hfiy;ye7w&7_j7g+iCDnz=OukbZhOx{9pSgLz
z$M6JeH@dIDLoTP*nAJHWoanq|El8x*`~)6bFHY;(#%#mOv7&K9831yri$e8~>c+=2
z7uT5AqA9cBS>AhtWf&>{&cxUlTBoUBA`-o)b0rWSxOA|$`Z5}3PbKG{)BBnuZX^s@
zPv4pI#f@AFOWeC$1x6GV9a~$aiQ@|I7Rtf@3IhXunQ99tl!93j(@=nF+G{)Gwc-Ee
zDY06d;xd+<Ovm|aI3yIUHzkpmzF3>?v!$F-Y_LO!mPB{ZE)BUZ)I~%6QP)`$qo20n
z?~%jGiU#Jwf5hH1a43A{^vTo~R2P5P=J8<nP^2ifVr5>f22S_z&r2z?038zY@~BYp
zZ%ad?gYot#9#^uhDB4|fr5&%_CrJ%0%&UPf-hkv*&UC1?UrSLLgva3LL@>XB5h-DH
zjIiJR8gIT7Jw4Uh*RqSZS$dOoR%w=0@7Z?@skk}$F+Y@JVpFLrfh#C-$Y%3qTGMV;
zCRW?0$|(IH6Yy2}5g85D;CV&D<THr}C&{L#{}x=cK%~D=tz~c~$!5jeCwi{80*dc5
zLazFoC!6_n%zTB(xQc*h%IR|Pvy&HQQLN>s_4-PMM*G5el3T2kg-ZBI3~^Sb*qK#o
zl*Qa6?s#aZ_x6YBAnyLle0h-Gv?3j&S2LmhGa>=WxJ;DsFfs}sdxd6Ozs!5}$GeB3
zw&-K62%r-hp81P29%ZR$%J3`p+Hd#>>jmhGbm^1Dbnm#Ls!sRikxRPo+36x+F-Wgh
zh()kP?;Vp*w+1(FWy(EbN-9{$-c!6@1GlyC>lYi@T396GcMhqpI<1DG1*$2f$oPK#
zKnNz&N5HH>du5;PQk7cWu;<+og>imCrtR-$E0ZQd*0tNy)kVvVhM&Y8u40;F7_>ET
z44lsAppIkfE9W`%fB4&UHQD8tt=TQc7D-NN$2~}^T++o2;NBP!i>%(CP4wvX30E#J
z=x<L!Ka640v2IR2uQi-3{nejuv(iW>rzjXL%)eUpxL9FU<3eFw_pmW>UUFjV{bnR6
z^>3*mEM~dEE<csx#@kV@r@OqsY#A72JV`<LEAzL-&4SDHz40(@`$|JGkUeE`|59qc
zk#tDTv|{(*zGz%gCW4=rhNf_pM1i!yMP6Rd!pzi`J<T$loPQXts7VQ{@5{#n+s)r}
zo0QDJ+-&bF8=Cw8l-?AAj;m_pTzda*p6h~TQJj{u`N7zHlJ~o9xU<>ncgIXX&_?J+
z)0bw42ZEW$O@``^3-y}?xG4^c0Hy55@SBM(ii~e3b_(@Dx)8Vjx>N5`-L5wumK^Pn
zGxE1QA{qOfSJ&~}PhrTZJ6E4k$G;T471F<%eB8vOQbky10%-XVHjLQn^Xbz`WjIB!
zKvN_p%8xSg5&y7ZWZZpI#nEmUr(Ww=>-L(}K5lZ+k$Jh1Z^L)9GdsoHe!<4t1aeIX
zKJtHfJPO=Qj?s~=wWaImykOR60%+J!9q-R2(voQ(C#5`&VQzYHtJBF8cm>-2wRNXi
zy&#mJLhTLwu?tS<<Erj3-SFDmqudCNT3g3+9IrKA^b(`M0qpe(MpPR`?dy>F&>MK$
zrf?kjZ>Febxk`=RVl%niR|sQy5PJUM*zQ*p2At}ORZ|rh*xw{}*I(E?P8k%Pv7R*p
zbZbRQlETgJo_->QyA8h{HZYANa$V>L!JE+}p&53+xJS9EZ@YiosZL0sFh{w=@Onh@
z^_+g>6Q(0(a;>`eafyyQDiE~aINuBm5vJi5aT|9%UJBg|<2R3P2VzgQAI(>H7u*>#
z-47EgQ<b0*q>V&=qaX?VxQZjAB&o>x_2cC0AEo!0Q~v7R=brQnM8BUB&4K3<Zyd7m
z{8^>qo&Cc*S>3P8p0u6qC?024GA|QGMUv43D&jd=x+&du>(8zQ^NUO#YPht8!GgEn
zavzGi^^?3GGSLABh+M!ZYhKqImYb*ci?k4%t`XS6+7LoBWr{hYq+0KXdAysKS(&=`
z2i`+nrt=Un^?fcyp!;+03r&D%$?Ic8J!(WBXVt8%<@Z`)_Y%S}Q<I0<9jhsfUR81)
zvy@Y4n-1fB&s)Ev8PJDNUWZ$G);|+cOarr)8}tH3EM`Z?U9a43GH(Y}>9ox6Kdxk@
z=uq$oyYGs$f}nOfpEsb%E`(5l0R`to{-rI-xaD0xS2fLzf8mvjm};<;Co+sMK%a=6
zw@h@<*a;4OT&p&TMVXuJv^ni34iTX5Q-d$jSD;Z9z=^naT&;bKPpE2I(;)G@f3H7y
zd^;QMz^3Ch(SEy#H(q#Qnh^1MYX3(+S%nz>gh<8-g}YGA^zpRFR|&SYKGNMae7{}m
zaT0W3)#WidT&y-{tL1*n-2RK5u!D2m^Li3~wpJ2T@w>T{Dw{ZgIa46?T;oAgk+^7i
zp}(1Y`GT{fP|HR4ec8adAxap2yAzWG@B1(}5q|oRQR!pw#bVk{A*ny?_yP}1g8WFB
zNO%R9yZ5Nict>>?vrcHX5IKR#vnAhB$L*mKld9;CW}O=`Cf!3@l!mu5M}13uoM*9P
z#6n3Euz;LF+sz-}7<mX?&(82=S8V2z2>A1bJILZHFp2PV811(EhrMh%>f7h42&m~I
zlNXXS8ydJu8*g6^C)S@1EXFHRFH*G%hTNV9l2a$w+lFvlI#3l;&8Cf=CWx#GC6flh
zCX#~Nf8Vo9wcTjT^C2|F=kACQt+}1eH&MLakI|)hA#u#HzI&qlE>EIin&RbNe&)Gp
z_My+e=j&m_$5H*jcV_N<Mxt-l;Thp}Uc@(^dP7PW+}vd4KFLMo3zS@Wz+>Bp;QYs5
zzId>Fd?f;iTKOQl0p=@?@A|Bnp0}OL8Y3Ou<wc7XLjBDb8|VXA|EodS_kTR}YxaoZ
z>fwGE_8G57TBCq}kY~Ee&`EJVc0EY_pZ@~Lo7DS8aW@?izhQHGxukH?m^a$??tf#M
z(w`Y2PIUuTFEUNU?GB5Pyk?t!L=>^iK(H2p!JXQzALZMz#4Ul7Jf3Z$?Rm?`dZ;7S
zHW-m0j}n2|{pPaN3%_h;GNz>C{whD~)qW;r1C!l~^)o~G(V_c!)bocMkESS2M8(?L
zfG;TAqVeEu&GY`8D=%$LtOm<k?(K}1oSgssWfj4g?q{_MqrXAFSX+zt^`r(XPkS`z
zTbgw%w)WlhhU9Sm%(tx<71wD$BHBPsU~zQdnCX!V1)+_$r(u|~VkFOYh%>X0ZX7;U
z59Qu--ajNQHn*~p+ot;bll6OigR1sR)x7;QBQAsz9V)W5LEUxTv(Yfe-1GeSV0SEK
zIwPZBRiQ5_(u3YGi$wy?g_1b{<T`?AwR4=%I&I$yY<k}$EEo|Xk3W+I?U^5@TWE*$
z#q(528lns@0jb6ZUZUwtw5@B7rz<Rfnbs713Q#5c%8=Bz>=wHx?(^bJgh^*>l3MW}
z;|(gn)VY1S4!i#^;@+`8vgUi^jWw}t+mlRedt!HN+qTu2Xky#8&53Q>IJtlSb6&%F
z)K9v*YFDkQRi9PY_1$KgS$wi4o%hryut>;I?2`9~)+I)e=_aSj(@#mWV-jqe$qBtO
zeL6+jl*0qI8`|CMlo8FkVTg}^%%$c=kWnjF8=5*T!vbs;>`Nd*CMeU{R)p@qsIvS5
zPP+GEQ>A*3fk6g(puz|J;iGVr9+VJkR<Zgh(y*aQaw<hTcJa^jQn;`|vw7~Znxl4-
z=P=_T!x)X*VS#IzaRQtl#)KAbC_oqiAeV2i$MI!my&1g<pK)Jp(beDH2<G!2FPiP%
z=`X#t!x{O0o=pT8tXiZ9ov)A0@?FV@;3kqDLeb`H4K_xcw#(*f4EiKwQ}VD-aN;G^
ze=ndA>nsbE)4K&-9xl$OC!<u1uCTf9<2^_gbhp)s!HVKq1g?)^Ns)`S9&m++zRh)M
zWF;Y08N6cRglogWNy~O*9wxnDV8Jf}eim9t2sc67@%HM{W~aJ1Qq!1?t3wE9HfDh+
z6j3B_q9SuuB3^7doQbjcY)i3CfN@(qVxdGrnwJ~YTZRRsZbd8q<wU6T2Qc#5CGPW>
zWD*y;(oFmQ{f+hlO>5uO?<LIfl|snUXB6k~mZ8GbHqamurlTN)A{wbj?p${~-i+ab
zI00rVB31~!sZaUyhgepvGA{G$JAv!QBC}?<hUe%EBk3~Gi6#YBm*<M~lb$R&bV(10
z++e=R>s5G1Zqvi6?CMOWv)XiJfa9?q5R*2#tow*#^ecjP%+sDpmpX9>4u}{4n{a5K
z{Ts{TC2J5VKcATUuzsBX4Jbq=4y=2IV7H*?z91*yd%Z{F*yPRd?e<$ASPzh!48%RR
z4`aThKP5Tj|Ma|pH0_(7O4)3OuM5FO&?Lc_4vLDyXBi7{-LMnT-efk;2<19M2<tOt
z!U<tvGJ=d6&wOY+IHD5x(A0SzP*Y2w+%*veQkAh$F2E+L%7Ys(xX%piO`^GN(GUbt
z89Vg6xTfGlJ3QPT9G*?{r`#SJLd7l91b|Ku3Ds?{*@=ZC)b+*9{szd86ww(kDiv5d
zotV~Zt|!@1iD}8;N+0<eRkb|G^W2)$7nvj`M{RS79%@Pdw5^GP0u**qeETuMwW%aa
zd8Wf(A1>7OnA^|!v<~ean{EDP(03Rd5JVAUPMXd3V%0J4f#1cK93%2Pz}J5%32<h$
zxz^hdtDKPH*C6-D-c#mRU=l04gC)@TJ(gETsxj)bg%_qbH5#l5M@00GD{%K7W-qc*
z>ATme`iYtt&nRv%H{UDQR0sY-d%h48tU$&XJ)Dba%I%%u0)zbXxxaT<%42KtAR?_r
z*0}?*GW5rca|FL9=;sEo260oz(}>6-Ubh)g$J|S?HTknT{PnQ0n2;r7yqxvEs_v8u
zr&WjhaDa^i-bg(*BK~}}J`98S_|1@Z$)>JnuBP9wS+8?4xPF=?4pt?b3jT;GFE#+E
zNI1zmzfF>w+ut#QrLGofvtBdRCX)5oQUa2cU`0Tm(qwW-?;WctDEN!`HqhUWjuv=V
z-L<rOgZSkvt)aQ-)ZVr9Y0~>>j>1nb+Ow50&1ZBGHaZff>Z>M53=v!bvPV0s<9R-N
zpQ<vqnnG96BZNRs%6%x`7p546st)FMNudi(z&49d5B0Aq2*782JUl2NaoTB74b<Kz
z5C1Uv?e@Tjq@jv$0!R~;$s+a@PY80wH-)-n{vA9tYno7Up8Yo6f7n5W#6jV<Zqr0m
z>tq@tS@Hg>wo~Z(MPrUGO%cBXK0r}~S(8Dqh;=SL>#cmt-Aldo!Y0i}IZ2CoHj3x)
z+-Z`m`D+}pu>0A*=(rH64!(%d@~@~-C6tP#@thWp-GY0HSOX^nwr%TTD;|%xL|k?>
zOx&Il@T&%$NiEeWFLlKu$LHX^5_Bmh3QuS#QT4Z~GLttvvaWZbA>-kal=||v;#sa8
zm0yJ*0QNZVd4w8sXQ|u47uOvnYNL=u>BAmh!Kp_?D=yl42;Va}%gFt$5Nm=JXRwnh
z>7zP)W)L2iUk6iE$5LHnFj#Pe)w!7{<X~wnZh4V)$>5}Cgx`D5rT=Gx(aC1pXhEIX
z?W*$n4>GW^h?kU&VIl)ld9RhfyQ?<$*im2Q)4VoWPiZE5%&%}bB)ch&qSr#q+lF3O
zco{_DYb#jqFrhHwhfA5i;#Yr%Kv>P;)ieqRPew$rmhP7NBEcX*Kv?*_+zd}_{L?l1
zyslm|Ss<&BgaK{R`}K?79r$)&eR5yXJib~wZL`|g_(Mu#%;)>$^G8=Aj+4SH%aF12
zhRBpk^SEzJAYF3(mq?>5s|EVlQ{QZ@<A?iPffVMe7L*Fp(f3sC4yTEBD7vecCion0
zz(AfUb%Km=OqaMJ@?Ao-pC?G2YgfGo=|VO{F|Q|&44_0UHZyP+z1AAniPt?iTd6ar
za?q)*VqN@-Y?C7OA8o!`A6%_Hci9T^Bj#h{q@_fHDB8nDhz0>&5fO*${^-tN2!b1m
z#5?SL_cW=k8&5$Y)b)De%tzv1c-(KlKey;N6&MSvvpj#aqJ#`8e@sX37hP7VweA%@
z!=#kJbywet9EqfRJcGyoHBpg3_*?>xSm)*1mCzbAZ9@7ME1+xQtLNC5r7h?ZCTLFa
z#{8Ghq;Lg0T?Xumi>&tXGORT-Pi?SP${j>H4NTr9Jy~4?YFY;wZ2tuMsveARaj~pW
zW<pSDI0nBy=f3I!3@d{W0x1v=knEXB&u<VXCmeDhgY>|vun=wC6@5{E)7j7*Ao`-0
z)D@jX9&V39Nbe->{(i6{VI2m=fdOQ@a(i2(sAIjktIQLS7AFiNbjwo(Pu$`&t~woC
zyJSuBbuEI)<pFr<8}p`CtT(|`;6}B?k0*7FxI4Hey{)@(=&^p%B3vfia9N>jGoPvX
zuS$hBL1rvfir^(4SX7BUo*tv?GME2VtJWZ~I<RB&Yu^`kdJ(Y0Ab6E5=Pa2kDInR$
z8ilBgH{x`y62*1TWxn!o>XIeHm;+DNLyOLq{x+om5Av8}eDlc6>ajZa)au|0pZq~N
zCm_{QFzS-tCSrP`Ka4Yc<3UH*%HmErqY?$uB&yD{vl+-(!aE6%GkGGXa0oiM&_BF#
zbr0JBH>iI1QkO<amz>odjnSf*kQKUCYV@(N$avMu+KJ^n*+H{8Yw%cixc%^6LQ_Tm
z3e%s~gUEz6maCXEY$i6L39Un5WWvlMK+*-wV$Z`g$PQBNYRyR7B~v9uei&Z{M;MPV
z$$p#qT3W)v;ZMbOvseuiJHo7E-w*GmjmcZ4rc_XD1#tLkXl5=tnjNG&7!kgUs!dtN
zPIrb=n>mzW5}os>NDZ-1RlaO<c`CQXZ<NEqVGTULkgcma?t>#DW`>C#(CFS%88i&A
zLU<jfb@S#JI0U%&=*v&n8hrCtl+-eHUFRnc%bccJ{W4yI2`V)*QF9kAph&1L9Lc+=
zWP!-lK$jooj9q0-$8Etgg1*xG&yNvkVJTaW-zLpM3Z%Nzbf`$We}Rn>{*qr$ikebR
z;j*^E|8m@_bRUGPk)UA4?GbXV;`Ej#Z^eGt<eT~kB>7ILzCRZ1owrx|l7sx4F?=sc
zi8Rp_Q1|RRGd6pXi4y>HlJFW3-<Hbt^M}Z9cxt@i)ae_h%H9uqPFGgW2wfY%gw0B@
zlIoT7$Ga!#>b3!VDRTQNI7i_~!aZ1HAq@vn$K{lc=(QVqCSJ~yfOq8GvE8f@I_qsI
z1q`MdiLLIRI(H%GzM)es_m1Ppib6GnVM9?FfON9j&;8S2;{X_&%~~_C+|%IZD8el6
ziSWAZPVL@7Lfpq3=kOoU<HpoKUPS!sqcJ>HJcq171_<d1s#vVGrLF{=pc|F9kezwL
z?FqY%sPP2e#5B4xs5}hzjT^xoh+B#6H86&59m75SnIX!{EEt+js<n!iWRl+fe?HuP
zSM?^G>ZI;7=_oaOPi`gBzpiqjZB|#^POPWWCYvRq{yyJWnEl!F_08s1gTK$DH!2Pq
z^d-Y|m`TSWS(f8{N;{13+cM#itg6yLa(R#Vk^6|$#c8C_%M7<wVWjACo7&jv;pOcm
z6>;CPikNmdpCf0M$DRB@!jPn)t3n;qr~`DaNITSoa(RxR%HSwh`{O3|<@d&+o_=SH
z+7L&-VXT5j2IiXjguwwj9KlP6L9__QCv=GVNiAX-{!}i?VXEF^016!+3Xv2vGd+#s
zBF3{4A{%mWb&;mW&Q`2Yf0aJckOV~KbZ||L0Su2o+>kYIS=zqsk&i!Xj3yluqBJpM
z$Ksy+T&{j=>RmhyYv_5N?G@Sby$R6;aO+UINd1ub!|OaQaDI6oP$zwyp|BT7o`9X9
zdgfMoPkiDsmmj9|SKdhP0CHucD<8kLw@x-VP^G`7&AL?9U%QCR!r;Uzn;AYlCM|f-
zJi!ApmcuZ)R|lal_ydJ`a>-^@6UwMIjh!Wu1j$NNuo)#_(mPJ|45n$I{jAGKw74s0
z!lA>oitFz8Z28wbt7R~yhNA605BapNSjey??N4C``0~zkqliW_A{fp^8ej4(7^Xe|
z2jTs`&(pGd=*YmefhGbZlspXafE1m~Ux}}6`}Xd`OM$OZxZK`de$IaZxbeR*6Kcrn
zWLs>!$qKa{NdlFE5ky_AWx<MD^?hkhTL<g7-I57F#Yr;`v<%`}HJcfmAiSPOI=>IV
z;RGQ;NaN9(;XTqEr>Ga9`QFFm_FdQqHCH48@vd&6y63%wS+9wUl-TpMq{YcH8dsc6
zxO7&K;Td1?p&UAvGlFa8g^Y_>*Xwr*{mGM0q{tQ5@$k#iXm$%(!J0%qhnl9@#{e89
z<_6Og7@i`f3&q@71p$xgEVXcAN&H6I5w;^er_Pcd#yYjfcXHUY>y;Y?1r$%UR7ODH
z0A<s6A#(9_cov~w5E;IrfO~s*cw}9u)Z;b4Z%r;psQdDz=}5meKiFMiOtaVzV+iu@
zoGG8!71&L}cjvcduZ!`;_xi{|mHA|Kx9U_2tB;pfO_{I-FuY_Ecns%I<sAq2cnLT+
zG62stnMzc+ZPQA1`P{ir3YxmO3;Ow?tCsk|cXL_hb(v;Tl_hr|&Mm6!*)q-d9zQYO
zk?l^@VL`T><F|qED9dolFB{`LUoP;NslS~6xaIxnci5)?#d^$f<Gp93u)<b>@6=4o
z=keAFvxp7FkBr)txD~HI1}t1Tr{BWf8m`NLQT_H}vrEDZqIg|e$R{CGJ&jqwT8qkx
z-QTA>H=UqLz-YNy!=B12N4Cfa43+|<Z4}m>#j$BRpT=YkYm(&Cl74tD&w_jG7=y?&
zgpXt*vpergt}$k98$*)Dxagz&iQ9B2=W~ljjK<gnC{RTaeD3)<H*D~FMAFAm@uwXv
z(8zp1ty4sU!FpA+yq2&1Ok0&O-C{TPSfDGUm@hg=8^MCP^18eDvijGx_mUS@w7~k4
zv0D8UcbY9FiVzQab225HW-`2!s08dh5{E_z`?!N!UjwvnxM=xGaC%f#7JDC{xjFXl
z_83Rxd}UdUGnT}B)61m|pRaZ{7ODxaq4Pp1r2oYgfYpd~hlQUy+$vcT+!ih!O~?^b
zuHNknyU~oG;ajp0l1Hk|#McPvh=_W2)Sbnrjk^mq?w)RZMVYk0UKG&xd~#tH$R%Jg
zMU^9o<eSR39gkp#4>FSeyHZTho@)z^+tm0zH%!X~|Ct!MDvhGyycEY}rne5=MWNof
z*LyALs7Hd+?D3S0mSTnG(({(HvJZI~eguUz7#wXU5~MKN;5qq6bXaRZ*3;(N)HpKH
zi!SxSC{#;`(~*|WVEw~%cx_xVsMn9SAN(ccu=6Z5HDW0vU3i$k>HoY{o;N;gc|O(J
zOHuLpc{Z0|DB11gIPM+CU3Gnqv3j2(yH>>(1PRzGA^6fCDOGAUt+NV1KyXo!X(Ndu
z_c>!tXHdQ9njiX6-2Gy03)HfkpK`uhTq`?YHXdQ2c_x|0?|LcB3~F>;wDhXNf_7V#
zFW6pJ6#Y~rVMOO;;=japTHJUVmu^OJ<?oN#l<b%0J`HUZxScd7>|;7P?3tCg`YyoU
zFaK`WOmf;?CKG8Dfze*@_^-yN^L3r?>N_RiW=gPlIh+)$_kHcyJQ#I^G;}rqiw1NS
z+2rKn(6Lw`JE6!MMnlWubuvvGn;QYITx;YLr8SJo77Po}fTC0%mVHMiGd^eBatF_U
zY>|%RIphUC8;_E2aB<$|lG<m~BeODd3W(&^^&6YBGlPl?F^e5?bNxnI1n*S#<7JfN
z{1!}yuwwb!3wH()BxrARmjoWC?`#nj-|457XMH7vcBuXKOu?97*&i2mG8?}i2|@#5
zc7egSSoUi@{+Cznt8o9Xn>~!cFYzKEw6Hm1EFwjyrM7dMtBKL(xfu++#zLx>60f;G
zBWnINL<u%DxLqi?;-Xa=q{JCWZnhPok{cjb(_vVb{NoP4M3OVYpvggommb>yoG>tm
zSG`vab(ds&9~XZ9pmfNJx4IyJ>+WE|Ak2!jn^{8Jj9h<#2$OtyQ7cg&aZVJwDM2Op
zWiv)49ToAU-|jbO!g9>tQLyP60*zUgy_r#(uh(MkHzW$y-81X?gX`VX-}Xv46obFu
zSwI8rv%bsuPA{Xi9;5Ys`hX#P*OtNI7pl>Pmop~btxUhg##)3PR6D+rr2AlFv8^)i
zX`a*I+5F9T?~w*o^D`1dK2oUz4mwp0+fOpBol%@s(;5?22KUdPzWQkLspmut$_Y|>
zc)U7qIz<|b4q3#z6rnP@n8nIJwZ6uA)o}GFGC)d8W?F%0^da)t^D(liFOqEIzWz`u
zi;&u6+jZmlMX9OdKEBfWXd!H5Cz#TA?c&CFl1jxe#=6mX_x(8UI?_<y--f$VeUuCn
z4)!4dYxgp^mHIbC<kyib&6QiK4tUf*V3|WZCopQ(_}4)LF!v^ymDjXWZpk|b2*~Hc
z@WwKorZnjN>Bd9J8G(Pgt<gRYbmg$g*NfUBsGxHV3X*<wjm{l+un`5;IFw(Xr|aJ=
zB<gL}t`XdZp_NC$;6%)rPW-aCCfY6Rx=&3px%lPW;L<}xbG0MU06vz$ZWN|yXu;$p
zqS)?gb8aaL(W!!96sP@5-nl1r93~Ns{8Z}lN5}<f9$!+;Ch(HqPifkJ{w6yG%y{zc
zYCcaC0T+j~zy9;!;6SNV{H82JzUfbChI^r0D$m;UZbnjK<4+(W85BH3P-UMi3=as4
zVVk&(m)5=Bo~S!V!rk;pP|)SOs9_OW=$3-q6Jup6=rDnix(e?Uk)GlYQm+2QP3QMW
z_LzQ3^)81)ON+dUnlyh30$<1Fe*fmbxK4)iX!ci6<9xQvFs<7#JzX;S-hqZor|Itz
zwHB4V-%!`7cayyiRlLx_W?I)N{i5oEpxYzz9UD=1^oUmmO{(FdpL+cA?ln}05nh)~
zZ!wbpO0mAC7|#Xcq0e&e`b)CQl=KrHLvYJ$tetRVHmkH}E43$M>bnw#KFsn#U>R_@
z=bC6VJsQaHifL)p#sl~$U;a$PgC?N$4$#?*H7w0cmD!ZQPNnhQpMFq2?OC7g{R>gb
zu=3dj2fP;(i08>(AIq4~dgY+m&c{-1PxCGP>;6%^q@JPf7drnVcj-iK8>sjE;Aj%k
z<!mk57z&p>t0Z?~vfmpyU`8oG3?1o9ng33z3HxI9W&wGV$;urZW6=BUEf2>xAoZ#g
zv%=s6FP_ktv0Pec9}|_7n#1!YBtL@)pYREm7WMo2a?#u#73l!{Ku$1+Q%();QiM1S
z@@IGat%v;T?jEi@F6y6Wwuyu>FRj@(UdHiTaS=9=YTw9M#jbM@Y>0(|D*MZdd%ZS?
zV1tcSmcn0Ape~P*jJz-KU`E-4N8LS292O~ya@<2R9Tk7wl>C<;u_l#ZC}O8_uwz7N
zcret+q&+2ep@H`KCz7AxiH|9YU<yb-*IwfI{zRTkfdsXefG82sZ*F5wH3WtXl)vD;
zfk{jzXvB2AT&#qksN}yL=*?UuR_+X|b4DCJF`0<j6Je1~@m!+zwplhjZRmQJ{NROQ
zWRGPuvP6w*=bf~S7>*{}vVHzl&G+^Pcg}#k#P+);m=_46T3pnqD?_lxfW&0aLPv{~
znvnH?A<1iL(2p0WGw9RGq!?|Plm<q^1cv$a1x?drUXR~hz%j0qP$$On4rKcfd57tx
zRt%^+E&7enkpvs#lGFYW+~)z=%q}3g!GR~ljjxmOA5paKIR7B-u3IwW>X&FmS^jp?
z8xWY^2+j8o^zbHYF@oJI<7n0>M;l3D`o7tusG8D48J^sK?E@3Bc8O+R2Z^d#pvO_J
z=pzNqnftEsx`~B;U%$Uhq?@kC`2y5mP2g<Q@P%2=X0L9L1kUY04Z~6*Xv=$Fyn-YY
z@%*I$!zdYV`WY)KkpQztY8Vq$T&pA^m-25N7<aIs&clH6Q`UY`*Lijh6Q1EpeLt-z
z<wW=EIoe%Y<_#2q>pJYCJ6`HZ>S&$obIMi?K2X(_l*1Z2B;oQLNq~7i+k4`iEQkIu
zURIngofrbmLCSpNr%l!RMku$db<o{Z#UF5oqn44x=}iwqyPxfwT9A^Ir)i<N->q8^
zgOG(@+0TJN6LnE+S?=6{m1HmD-QTR)jnaVWr$0KbI;FSN6Y>9`UiJ`u7$nK|=5*hl
z*>UB}=w$xt{L*uZEa_NQPnkujHn-cADew{{-6Tv5P7CGibKI;zC9d)|F*4awyI6He
z%bNEF5ly@LWpH2i-7Z3upf`G7=$wy9@^yJW;!nP&3kIICxEkT$J;%RS>hx(ya(r4w
zT8QtX5MD*=;+mN(Vro{k)aL6b0uA};@P1<K<X|+U#Z>#F7HI9u!9IFMx2G4xUJ&7u
zGZD8BLWen*IVc;0r-*E9ZRI~DasSh1HsC`5rwzb~>1u4Br}Gbg-g4_{%s!LFv9^zg
zbv!S@pVA-xqR&CiO(HflP-CD_%UBwJT0Mwn>JxUK@crU*8r}M`fHMvvExyZJ9it!Q
z6!s*kCR!t=jKyuL5RK)avFI_9s}uKE6zqBFIb-tzDjK_aRiQ=IvPRW}7JWZ*q+krp
z-ztD@zIylPqg60|Rg3EZEw|JYb^TGxP2bxA7Y?@~3;&gYN1E;hnJ|e0C#fSPj!a+L
zm|;Qlh(zhqNI)LehJF4A43H0vaj#FLj(l#ycX*SnlP;e`oMbu!ihrq~mrB!;zLWtG
zu*-#hLMeD|GToh*{GXEb+vN`iflTUb?1hAF{P}sT;z)dqdw185$U2|xIp=$3vRGHB
z%8BC$LiNUy%A{p%>USUDVSDN~;UPgtOP0QQ_-<95cD3)^{3e1+Pj}-H|K9Pg=Qt4i
z;qE0e9b`QD&0m2b>R08zm}%PJB-k&pjzwL3iGwP)!L9io`h{SBf`}0~x-JNh3C$x7
zj3p}t0h7<0xABP<GCy<IWgDb77WxIfk}58j*CZUfRip$0k1>nGv9&AC@4M33sh}Ae
z@ry-&QK}AQ#D5c8&mUTEeAiXuY4w~0Z%|5y1D+oUz<l<gCY(&lEf7tO8BgW%rVGZc
z217oH@}`z6zk-OgUn<{B2XRq<AK^@`9xCLeDjgcS3d}L3_p|--5E;PJR&~<6*V>wq
zEVhL`KHMFV_e{(|M@c0zD}sDB7LDyZr$Q>m^hh=PFoA&UG$aByQX&Q!a<h|@RJoet
zGyf^w#@FmNhTONv9zCD|#bDnbc?V)+$<h1svEQvOANCOc`$z}NfOh7+m3=kflni^M
zYm<1_@Lc4b4};{`&l^6`38QeKuZavmulq}KBvdEtAO1?qIS_g1mb^D4;e~+#-;OJ!
z6V&nz8u<<-4ziv|I`|AYvXqPpd6?e5GFnc&Ih0fd1#E@is%nj7ws;yQjjDMRdM_=%
zO&VHSTFg!k=XQ3tTSGIUzb`f!v@b7kP!r4t4PGwUp;1?odYgnL82&Fx01y?#D7`zu
z;Q0t@My=rJwPphW?L(C5$HYr8U~=O8Jg8q4xgvC8EgX`7?_S1_u9;5J$1@On)w9b}
zTg{09{x90TjoWzX>>)jpsg&X*CDX!6b|WHoor~4vO-KdlaPck1^m=$J;<tQl!l8bo
zVygb+<v5nb|63#oFg*fBYs7s)bRE~onF^5?(51a*7y3WB^IfgR;nvW{pqnSV^7NAx
z-iCgMH%`aC{tu)7caRJj(?!c9!_}sJtYN}n=6Iz__YOZ`q-J_7K5}f5Oslyu-T5q4
z+nYfV<bO|Ef(Dk?1VD<yKQMd>dbfVspu+_a7K};|`}cn$tvK@+DW?vMDu-4`s${{*
z@qGhjzqQYhFe9UpJGYarzYLaxz8PQs<Z_lElk#fJXBb7=wccR96@0P4JCOeyg70J=
z?SHM34xRAfOv0AeM|WxmZt3q4Ux7?qbo};6%JG;S^9zL_V4-!YMB;zCW&q3xjOY|3
z<A3`1w~qIjp3p!FI!@Fv>41$NQIQ8$dW8rn3JB`ol4JCM)DZvksOvn|!E+Cudbz&I
zpcaoKS^wF6vUnPmqJ6QBnPo}quduReR;4oB(EkO^#JAGpHjk&7fnfttkkZ8c`(YtR
z{6WFV5pqAsP}*^HA;Z=FPhZU%;6Fh%?u)EBiieAXfMF{WFOrb~@?v>+SVc<emO9N+
zm#O}pLTF?EmqH>1t;MVcISF_$$3dxrK#WtF*JQ!wzdIsH?MK9~QT-p3<G;akfDm?d
zDUZ1Hoo;9y#J5Tu{UDZO6y#;HtKg#(*lV%y|DRO5!5soH{Kq{vVQ^5!%U}Hc{w^A1
zejkk7vI87PB|_;zRXp-HxYB>#3gQ4k4RK-=kJa+^@vG2_Z!QJfkX6QSf7x^vqqX>(
zrZf}Ni1pL|_#Xf5y+g=?8ltN%$L6<rN?sjr0}*H!k%h7YGrzxe?mcyqo4%~ANyA|p
z|KHT%f`KwksKbd_Mkjs{S5iQ&7y;9-g4iQK9Kia&wd*F<^oz(XR>1#td7l^THhpbb
z9aRFuI@*<zC;hbU=l2&6NKVUdVje3EuuAp*4;U^4BT2<auRmHc!9>4aNPO->dY1l2
z(hd%kl;=cbGw7Retls3iyph0ALeEkDzrSXu1#=BZq~BsloL(0fF~uTv%R#BO6UNo`
zm+Y%tqD4)4K{C44?4uh9myQAabrC%CUkV5<0cSnxRfjtOKKU5mDANI}6g$n3aebh-
zQYnmg`XjZlj@Dk{;pL78m}m9>7kB8O0$_b+KhB+nsGTJ>O$?zu)Zwl$Y~r^xE3fc$
z{mGTFZ`)FAXmv?RmAXh(yJgAy7V!S>hXMOA?v$u-8JypHr2HkZy0yzd0v$!+$?xw7
zJq#BNb+=D)`FM%G$b@>G@p7WKn@sxObfgPzn~_PVMP5d>QvUz*CXDX|6eF0FC9))I
zXeZ5^!Fp+`mHCI^{~e9*5A!CNeU7!v!Zeny39+kLUrZK0CLD)BHw~^N0a9^=!3mgx
zqDBZ2pQ;I2dy6pP4-(sw+A}43wU2MJc7V7@PbuDW!Q}=3_pbf?60OgOV$*BjoLao}
z6XrgV_!6VukC!^k>AhBniI3v`ZQz}mP{wFz<1fy9&v&30SV63poI!eUs7H7AI$dSA
z?qco*$F8f9oM+*!7dwVgZDQGzIagte6GGo26Z>@pPu43xz$A~H#Q<IhvXl_9!?L<F
zl~WR&uEy9>c=GIb90X+HO}HbVN#1!JFD+>$)*;6Ucqqh(%TdhR6jnJA=-H(g#6<?8
zF~G^5$_du_S|C(O*zKS6Y-5~6++*?kVODprc#iy%*3o=v-EO66<RDff+UEy(DGzyA
zU{2szkfR9>5vGJHJdVO|cUDrq@t?jMZ2t^eRZ`=<|Fpt!cYnIqlEoUVyTcE~5Il@t
zVgA>+6|%VnSTGd)-e)7w1(1!r2SXY7D=@S}6#kAZXs{>RG@^Ht1riHUef=-EK7(l$
zHg>3!1n{{Z@hA8IvYiA=i^D!P<mGBO4t0^_gegmbNeZ?JIhZi&uixiQ7)~nhSw_pc
z`>mBg4?xKgPh>7HKib~<NTtbKtOru!5h8#y{6!f4Qb%*Fva|S;xZpK1cfBnl0A>y4
zi4jqpI{758B_Yb?Y}Z-6kBt7^hbh!if~&QSr1^g=^xrTu$QH}YDTRPfN+=!)nCOhb
zo^WKi>WE$f;hkwf6ACzYE|2sjRg@+*)K8$*fHf7A<0UeFag>KDylodcn?f{|X$7_b
z0V5Jq#EaTQ7$E%1kcC-tWV!&r`TCYBcx{Rg1?;4o|8eli$YM0WOFG1I?R7x7vs=7*
zdyT}RAC()88Q!W6FAPnp1Mdt39t})jifH<hQIa0Qu_zjz1I}hd92Jhh@4A3dgDp>t
zSuhn=gTyubSV3!p0ACU)+Hl?b|B}cbRM6oWrg+ih$Xqj+*3f8w1HE9B;dX$*{&!b(
z;3qzLSz<#+5M&9VzO-3df;4w7eOU$$c7rSo6u7$4Mc(HJ41TIb=c71^Or!PQII&Pg
z^fLK+h6m_q87aK-C=-{UI|<{%K~(gIBZ76lwF2}ootl8{gZ^&^0Q_&pf-3x@AG*^Y
zV0U;fVF%R^tX(U|a3slu1prxbAp&}E`w0nv|B#9Y(F?|sd~gFmrfliY$&sXb^uuua
zgMB*30f<EgZ}mj?n)`1PGk1nCpsgaAN`5mNY{||t;<^~PRAOO2#2eu1`!r(lHSH?_
z8G;1ALz4yhk{D!oN~AkQ4vxx^PljH<xT@zRvz0(nFZG1bN$>4Ail9La%3^c0!uf^0
zMGMut8?N`s1JD{~K&Efuq4+#!G#k8NiqvLSHdwf6!ahn<-x%E9ViK&1H#;3B1iarz
z^H!kl{emd43IRS1l9TzhC3ULvi2ap9F{i;`S5PbxB4RYfVkx0JHhhJpoY8~l8y??f
za@S*mDhdz)!mx`^WB|;c4Pd~7j(3FL1{s%h@mjl?KGzw22V<X^V-4hI76DV}B1}st
zC+e$#AT7PYC{0M=G-zn#%#0W!ni7M~=-@V(BCWqj296EVvBzK@P|IY)XQ|5yI^B_1
z)hCcynj=@pLlI$2t`-a#c_GGx0Q{&TIwig0k-Z!EELj6Bo}z7fnDrUJjKOF$krrf=
z%W9$}Wk2))YvG=Uv3eRggapigErt{900^*eTyt^lt!%!;@=Sbdm;tuIpck%REs$xz
zAWWModTehx>j3Tn6+Fp5LC9D9C@#azE`nQXf@pA^#<U9fH1IA4pHB(IFl=;o<Wfw9
zxzyhEZ@G1P?(s+YjMdS+Js-|y1^fmHU^;-^`Q%~I^*}zQgz|&IfN>ke=FNf-r-ljn
zHyDoy(`<90yNCi$%OGAVfaMeloF0%xamx7KR&;z1n#53ETs^9*HdQDM;JZ**7Evzk
z<Jyf))U)(`(jWp-i3Lm8nV$^-$2fY7rZL#z()(tV%dJof6i!d<-q>(pfi)#FRmHT;
zuwV-CPB_SyIwIREgJRg9Ewx84LM+vhB$ZU*-0~BjfLPSKBJ4R86*3emhQO(K9e#!(
zmV1MuUbK!LBFE+7?520pg*9sr+4Wf|13hb#^`RG}CY)}AJ{prK10&~GJeGoh2EhfQ
zOS3y<s<|&2mY<P0bce-&Dy(^hiRuBx&4G))_%&07{j{b%2nm-LXe_Gxa;IS)zqQh-
zN-kAtXwZKxa}F8hwwcIWx~ziWzMR<!zdhVimSO}A7<nQ*)Zqio^09$%ebkaX!wme9
z`d9<iy1VMb5b_CTv^C|=Q-o$e26>qdf3vjoU%9iyZ|P1HnS3alCQq{fpu!Eo+9=Cl
z>lG+K#BqWK6bVBBe=i2$G44Q-gv$r72{|zL`#Q-VfzP^hZd;MLK>^4fniF&mccD5b
zFwCTd?*t^l{AfYAX9g?^k?F)x4_G$^W#zYJD=01TM?Qn=w5HR~PPFjY7hA-K6_)Ee
zY0Q3<P&?}+pY&MYnSukXYEEgi3-ykPrD_MN+U9^DI%5dw&R;9)r5Kxbs}_L&A>efd
zO7zd6@MY=3KNFVO-ym61Y^=^?G}VNTdnC2qtz?^6n=FPSyOFQHp670JZR_$+wg;Qt
z*4;k6_N)?SmQx~wW@?Fn2@6#`1bBF6fVkV%(^pwr8<U`a0reayF7@BnqBfT+zO7Ox
z`9c*`++R<2qMBuJX=oI@oX9RYeR$!@zXYh3P#*{dNXkY<pY(-(&v<3a@#;e-TvMIX
zZ45gdp(a?>JE%+R?vU&zi87tL$O{2IbttF{j``&HD3xKfBl@&=l=IBrf9wk91ttdv
zf9dUph(f{=AQW-Q@&-}&?-NDzxkW$Y<RSg6%jfNu*V$L7!$6W$dbv_0v?Jj}_R$!d
zVjDP$U}#Osj&lkVYrol|d6iy?3>6?Hj6wX$l=;`IHl{A*{Lq`0j>nbDK6dAa{87K0
z^}`7r_y<g{M-rsmVkf56Sn2QvtT@zai!`zqDqI;VXuvRUwbbW&!ULKrS&aj=QMKHY
zK9@}F?{>(5*|Pet!i2vGfvpiG9TdFi$wyzLv{~8Z4UxaPl1kiE!n>Mz*t~o{n)L^$
z#sj-OA{F9j<EI^TBVRS(L|5KfSY*&C^SW!+WjaDj6i+!1$*fbvI|?occeNvSv3838
zx*=!#38DM$BGIsl9e6R#(lH&B+o8n4+Hv?4MTCW4QPH}C9>+$${WI#woc0c<e*N%o
z@h{n~ZYO(sYqn07k9>D@vlRZN(7m<yhgoq|fDEp<^_rDNaYFQdi!$_uLn-95QxwBn
zciscCyIS}|ZkKk~k0R2dJpu_03H6&C>ZsfpExlVmppQZUg6`e5>PMh7(HZqDl2@fG
z>m5Knqz+X0t;aAR4&b@@DO#BRL!RVEe|y9gskD-ekm$*TA%A9Xwk3L>n6OSCl}txC
zHRu<*64*wV$+;vB4D=$qs28j=(Yw>sUhtgM?8tWfc6ao$_`1mb$#UbQb)T+B<W&K7
zHZg4_(k_C}`0hIF&Ih&97AIa%@s_6d`{F<j$~XSZ_go&POtZ|DWK}>glQv7>39+i&
zx-?V9VmgEyPF5yB^fD5tD6BOJ2Zu^HOB|{ikNOO$6llVjsfQj9qG(Pm4SeUA-5a{p
z0p|DMLmpDwJJM{2#9E^NLoRn(QNZN=)ZjqY%*t>&DKLL;TraiwIh<j;3Qwuaweli2
z<~u~-=~*J~z@QYl{~PkFLM7!(r|UbM@_XQOdv0LB(~8n#udw^g!PgGUSeTPA!siI+
zrjY9<IuFs&xiFhz6^dFME*C6>0=VDxK(S3la<8KcAFoD9YWPT`Yh7(7tUYT+3;Ka8
za}G1!kM(F4cj+!9r~OYEvQxuE(54%05l=64tF%Z&I%R#e0s_r^xR9b8VzU<-4H@A}
zW^n=I0}Cph{rF8PN(T$s8R28I%sOV{OSK+=D(~#y14US_R1YlG?xv99=xDa<*vm?f
zR{zXUB!&UMo^F+i&i+wOj_IltZ*kxP&p6AH+)mGuq>w}R-E=1^_?Q}GP<#&A)}iqc
z6ZXc99JA{mG?uB|L7f<%Z3C;$mgG#>W#tOrrs-Jd#*2#DJqK;Qq?ZZxYp&`UpX6J$
zGePr$N^=~%xv{Kh)#3Pjb8d1Xl-;Ec?s&(Jr26a$E>MoDT)YeZrPJjQCc|nE@1x0M
zj0R{Zz|$D!*?+(FDm>#|LT&5q)5D}z)Q2{u@`tR23uQm2Y1#JL+{^&oiW(5akSMg#
z5II@tvlvsFmnl3X-`pQG38CH)8;>+6VJ5i0R+f3<?`Af$?7fqlpC9Xz5&!F8)w>M3
zE0~i22MHu>&tCZh`einQmjr-Lmh#8p-@{n#QylU|<lxa&;)Keng8o%vOz1Uh$naEX
zO%=jF)~N1uF5c{h7!W(a!G+*GLu?}0z;k<ZKtD@AXT}NmR+l~d3K5jybkA`25{H<c
ziXq(qW%rY{;B0A#QOfk&zoBxda@?`q{)f_vQiMJY7r~baC?N`ya^49D4A7R4T3Ox^
zs72&DXSlYb6C9uccBaH~5p`O=ka=j|O!PpX{m4LlCneq$l2L6}mlD**`>guM@yPoJ
zF$I}pl{Y3em{25*yZ=uYh(k6cQ%dIftgF&0B&)P^cT<|VPMqFZcoEAITQayjl*1A#
zpO}qM*=Om2T_GCq*4=n&@rl0dVcOHYB87}8Qp@m@2`*Xw5s*3Cs)xLA>`xr$5W`fK
zlU|{!#$jP6;*r>9*EH3JKN(#GB*lyxLLMgTnQQ2O(v-DtpRnfD8ko<R;RvJUhMG?F
zt1HF^GE$3V5@iCJ*T8JB24$^5?Kw294<uROjX@S5vB88`Q<<gOT6Rakc0$m(8LdIb
zizfZ8;JnDQ3e^IyXQ{i1j{_uLmjT$pVJN>ZV9G?W;osQOpEq*{1j}0wyueW;;owY~
z49>>Q&<^g(pg-*0WD?uj1=P&y$i}IYWa^XUYP294vHaUYH&FY3F_$68RuJy!6Dab_
zCElhJrwkvsj}_0A(VLA>4AL31(%|^uKlo!Epy7khhj?#O1c?YC;}6&`=Wvwrf&18a
zP3G8Qj~cbu5;USWni`y^yS%m;bqakh0agP3h#^B12-N`T>R(Kw*0yw&h?x9bI8(Wp
z;QQ-)Tp>Z2SXcf+=GGCHNK#gU1SG(N3CW6e_OhfEK;T1|bePZ$Ay;mfS^x*&T44Vr
z>n%yIv$jBBj8V^U4q4Dp!saF1I9&dkAbTR2SaqM_clUO3<*jx2OYhEDtti}eBh+=1
zJMuHpBLVu~6?3Un*~w?4YI@i5OFFSDzk3DLGzM`a_OGAy-7tgt090z2C@OZ$q1EO{
z(l7>DA<vz&{`+Ox5U#(-_)U^*be%m5JG9Z<6ww4tWe<eAOPtCLxgC#*wsamg@NW`&
z=O0X4vpT4qSdllhddq-vDmm{za_mNajy@9CwgV;QpJ`9iQR>NAIg@|x0JZ0qGa8}S
zwgFEpm%wh7glI@wD)RW697X;R0y9Sz>GHjP#bc9`GYF1nXzd_0C3v3~{Aoo69J5;{
zX;JJ@dTC6y%8oru_#mveGB!Mm6??crI<$YzWp0sOSYd-WqGRcJ-o4ss_20I^E!y&7
z#10C~aUCe{BNAe@Ylrc`NYp>M%PN)r<{085!QFwZGpYm;pcw0RhE@t)`$PxF%hY3v
z-*~Tq0ipQ#nclp<Kcv!K2*sf<4SX;e8}_eJLX@B8tQ?<$!+v@K=39mvDX@3x`bzzQ
zg;5+8`6Xott3UZRKW|q5B=(M%7<MF7>w&Y=y*!%;X?D!P*%;D^2tK!sW@d9DYD-Wx
zSL+vFZ>*rbWQA8c&fIw~)Mm4yXw%fr-k{WM{FrKQ>0*J|jWeBF34^wM!{ty0o8)9_
z{TkYI$NhBA{nKA_tN)KtHkpF481_ba`CTVPfx3=fEt|ep*jxAoo+gL5lC?@J=op6~
zhYDOIDvfyF$x#6qo{KKKo~nQYMVrG4FFsr<1?AOZf@PK+m45y6X7)V)<(3Bi-=@MB
z?F*(y&B(-v9l9j<P(}CN>z$A#gX$z*pGFIu;W~aYxw&xNBzz6T#4$E_hfVL2TMpwE
zBjugaoB|}J5Ze!@>OD&QeEb+Qq`#I;4m<x&e!rdt`L+0>owQgHz;{ha%X;b13n*FJ
z>9<p&#dTwucye=P%S_tT)-*z<QwmQRQj*4+TW#Ov-#Gsb9aasT=_JGL2Sf?hy>n;V
z991^Y1Uxch`xRg1>wB!i5lVm?mh+lw*-tvr=3s*@%Gi4A(!*^1fMf*!TfcoqX~nD=
zB7~E|Qd}L}dtnDUJipV<7fSeJQDZm2vV}b-ge)9W3rVse-Lx6HMzNd6e*Craagfa0
z`<M4fsXH_%=Utyx^6=|J`YKa}t|8z?;0SzESO+JW%80v=WM<JDSrr?93P>C!`Irji
zj6FbuP^Qc;Q_09$X!ElLtaP7rzI3VmIS0I$w&UD+%y*P@X#_ZGe%KN5(<%LF4Y6G1
zIjPXYNFGX3voL1f)4j`6_VjKPQ0Yrp2CM+6!_D0OLis@*ZLWBo`AlnAo2?4M86GRb
zTU~a20$$nq5%tu`Ow^%FuwBYXiWVuw?s8?$Qif!E<DNt@PCp7?e~<t6`}3!FXpV-K
zO&iDiZo`1rNny)If9pHTN*8N5_X_bP@za^P{M&TctMq?3(kNKqLasVR{!uxH4Bmcv
zDf?P=vZ<<{C*VV{XrW!N3~h^j3DVJh+Ii6B<<vao428iIdU&;z`frh<YA;D(@W!f#
zvqo5g1EDk(Fr+39)<}!X&#9FA`t+Cl8SoU=Jttrk4N;6NeD`!!US7%2jzRbV{`#f{
zU1n2gBiC<ujP4g}WA;3hrjXLb<wI+EimT3(=D~_cVTl^nwdQ#jl;3nuYm*R?UMT22
zxmShv`BTvw&QQw`Bkb2gq*RUUuyMAg$yKtXg=r}0wVl^fR;O*~KjF;V=i4w#OBGFY
ziDxOe-98=t6nZ}09L<hj1fla;Ps?R0KV!u*Of@W!H?vvNy9wSu9tes%QAcUw#+cSy
z{9XOOq^1WYdTJ>DQE~8$6~hyYt&-WGZMcWdYWHs4#}!>MpLXBFx&9&q1{^IyFtY`&
zqFFSRwcovFfb1sy#w+9<0D>W)6^}qhD>`nOvxs;YTdbCC?|pSxt~5PqBAYQH2)hve
ziz(a+TlD;)b|wrFXGc2ogxP!x3}@g2>*JiMS&SR(Py8~z{M1P2K$h3{&UzX0n!~<U
za=#T1E=e9fr_G5~NDzatBr#;|!XEnQKaCvFKHr9+DvyjzGm8W>6sPX5vw^WS0-6?9
zQchtG?(lox+QI+e6OBk7VoMij!upWi9HlYqaj-F~3zZ+SvVhV^P$8`Erv^sHBnN-a
z;no#WK(bzyBB)GquAD?xZzd}e68%xQ>VZ}yM2Kci24&`9x#u{%fj1iITTGsJQzMf9
zr%8HXZt@hhZB|5$jEQB!x^Y3Ipv+<W*L@OFNw7~G9tT3k^q0`?=wH<F%2+$48@f8c
zBkHUJM@)r{f*HnmG|n(MSg)6=d&ElC?SAVmwn9qnwWfyA_|dtzA~}{S>uJ9c%tVJZ
z4H*o&ygFG=*SgGCIt?5-`=3tFwWD-rEZc<w(rt&u!?e%IL6@*)_L?7>lM7dMyT$Zt
zTa%(w8yZ%p<{0`@rYHqPIb8JxIDar~$0%j8v=QW#c?g31%9qV~RES*HM*ZYVpXrMC
zv~y0~z(hj#;^q}_;%w;SQraOa*vqQI`(%}f>FqrV%LYt&Z9e}zeh~;+%+;1;Bxs4o
z<NqsOZZbKuq)6IGk|O`!x*Ki9S&JDIzxVS`dtSURI62}tt7X=$d~+57#z=GpQXeM}
zglE_$^1$n^oj7kzI)J74(}`4^PK?9#;X~Gn^)sYt^40c7r!_a<*2}_eRM(1YLH~Lj
z%kGnQR`WW=Pfjtjd(U_U25trMOIqFu5A3dsGljj_{kXdRy$qa?!oVWC_(iSt=u^1T
zQ0THd-q7+`VthHf*pS{ZXuH?BL;MJ{2A6rKwST_-&bQsh)MsR_IzBqfmJ@tiIunyx
zgxWsEUEHx?awa(}wbyJLUPuB4wR{^1E<QhZ1m&K6*uV6FH|M6$$t))DHZCUh&*Q}z
zIR(B_XM_~^3SWVS5NDotudDT~x0=p)c7xNINaK^>G@V8l=_a+$`oxM`LlAu)&c7^8
ztAPuaeobr=-0~7Wu$WI&ptwe?xddiY!F`DPqfE*ycUux1>CEcx#p9--nOIC(ESe85
zc+*kCY&phYJ6<oQ+>2;UZHIrFGYNj)x&MR<9$vbktDirhj!7zY{z-c$K}q<j@-?aN
zm#CfT>CiokFW>zEL$tKzuwk-7{AdyHg%_%q^}wc%tx0um>igpSPTQ3{A+?<Q;2#F+
z?7wHn{O4N#)$a53QRihpdC%?wT?Xh8qS)_2w#i$5)v?3(eDDsFcK`s<G2QTs9vd&R
zk$D;uC6y4fr}VDgTwyCj7hj*+9xQ~FcEq~fZ*~Ut@z`Ff_Ss_1eFxCE`x!hMgnq)T
zWxr}vRnwKUo`p86^uH2=Q*HJfSERV27CI@A;l6YwrUz8EDERd)wQ}TQ;@sVNm}g90
ziUshBe{H^Ytxi1I&nM0OMN!#GGTFKtI6<VJv{oOQ#8Ag|T5P+&bx}`sVbXpMAjYdI
zJk}L{v2IF&<3Le6m~VGWNX&$Vqlh$=w;;B=M(s6VJDM}bb8;ih4cVvjY2JMDhb;Hc
zeQrGNlSM93LHqb@q=3nofx}b&y>Zt&zPECH!F(Ww4Qd52i4a>F1Yujq0vF>p>sRhE
z#DrAcB8X8D*jvbU=^OZw40O5pTV~fMFPzv-1*ZkX-I^}9-B<O^kTdaPzm9k#s;xf2
zR+)lwkkB<2TIO^y?i{~5^{Q&89~r0ut%-V><A}D_v>pRmQ@On;Q)}|b=q`^%#_g7U
zsFRA;h#9u52A#$uYPWXHv=`5XxpUVb<V+X`<sfc)K2}%SvC$~E)<gjCYA^L8kUU4H
z(L<GQZ^Iy~mj=8xquq3M5FxRI67G(>t%L)Fq21SC*!zVO9YeHUd9uceRWL~d?t&=Z
z-QE7g7s5Pk4|$O_9v~#I5k2{wmn+a1%D*Tu=DafAh|dPAm-%O5gW7ddYi4lWmDL%K
zl3i&16oIrUVYN`Ez^Rs;$m-VDMZ@z>8XaN`M4E=IUc4sttwVK5H9Uxt$cAcgF<KmK
zfy>6s_Q*eid*e?r1NW;yzs&4b=Gv=zzN01ml_dCgIhK=0M<oQ-4QWRb3Ttag<xEXW
zS%2W*a{gl_SK`)6N)bCPtzfq@MP!dQli{hF;R-Lh(_{Oo`xD&Jh5Kxjjh>zP2OnFi
zW|kau<q}(^w>N_o0}K7SOUeJo0vOkx*Gp(&KYXaQe%-akw-(W99f#Jk$m?Zh({EWV
zl8ve)C_4(CQ>qm^3AfI6T$M*8<o;p5*<U75ZsV-aJrGi9-#Fy&WJlts{-Lubb!xMI
zohKEl5CUFG1;zhz!T2U=nKYippwMusnXMe=(J$arLaCd=J#5Uj_GYKMHR*#|`KkGs
zI)74pTGc4$eLwd3_nh15j_>=dn!cynS#DaUQta!)JE0fc^w%5843#G5#*zno%c!K1
zE~jq&VUiHXCjYH%!r?NxyKluCC|P@)u=S6#ty<^0Aev>DrGR<tOpGh_WS{=?7|dI*
z)Z5fodqwwE^eyLL=_bKY;-z6rfilKzb7mrsWisU?R}PoDkLKVaXYg_YQ6=Hc`JFU!
zvhA<Q$Ix6rz;ksi`&!SA{_UbDoZ9$nqe(>WSj~gcQ#5D-I1DqLOz4#9U~S3`bA4cJ
zFa}6>@|nzt5iHR!ffCxmDu4J`!@&kyUF3%iX()>`N1jbu>NCIidU(TwaZHY#$Ho-q
zS+>v;u3%028UM#Q1E!RGwd}^9Xg^$8AgzuJwBJ&_>ysgd`H1LjO7Y=Vm#T;!w$z=T
zV(gIW(lg|++mW?03x%MHFC?>!>{U0^`CI7mCqMm=3xlP1FFw*wp>M@O*)r3d{LUr~
z&SpW@%8aMWh%>mzZ0qRiYYlKx;tJtObm0cI{jE`K-w8T7iW%C91`?JNw_D&I91Nly
zSSQTyWJluFocy1bi`A)~)D}iBZ)VPMwbok}b>605F|j^R2nxr`u^>D)A&1*cv>A&-
zj*#MG5M(9Z>U*`jKl3m~xRDk<m*y?B-JYPC3h+Pp-dovHN7h$9W*_j*-){IAIPhfF
zP=hq@PKb`Wy?T%MmAN%CG*g&Q*y>p718=~`CA--t0`p<DsRd$$D6o~Stu=ppczYbE
zaD#$(tE4ET$c>e7FoxMQ9uw2h<m~9pU72oP5*lKsn!3V!yYo$|a%U?|K4oXfq$Ob!
zny4zX4_y#dW6R%nhy476pp-ar=e_%X0FXd$zh^@?uRk=C%c#C<a-f}LhJ^JSgR-iH
z*};L%3R749zOZ-XHMMtM{{V~he6Q}Fik|?STi9jKm5G-7o04rP6SJo|HMDNs3w)uX
z4YHC<wroM%j4uHG#_T|9UM!wzVrh;>fSyMpmO(Z1;I9hgj3z}@ajf+UDy>4WxlHrp
z7<>?>8K>QMFvw;Hm|e}XnPE2!*ahFpitJ=X#11+bJLB1GXF6Nb!Rn~(gP-{J;R(4)
z8Qi_R%qoq~c8r^K_l%-79b<lB@a-(Y`5uN$zAdOKTNDnaS|{8)0}try$YcUjAC#56
zH5eU#O<mCUV0g#%KZs?rKkK>qo<945Sm-S^U|a979bEVMO?;}N4b}JFG%p+<Uzmtz
z<{OqM3<ky;!vq*-gC^<&%#PM1)S#ZZ3c|FS5i%@qYswHQ6;`q5@|kiY1r&x@kiiJp
zj?gJQz`j<pQ;o43rKMVgu<b-^byAn?V31(Pc#t^6D7lH)${;`~w)9{Syc%q;`tevR
zH#eu=T`_P+)th6%mUol?n;ELUl3L3%@XYZVFH^qy@8G0Fau~#!w~}R1uafwcnQ?O&
z<@1;EF!udLZ5w~N@lSILFQNEbhI$fGChed4(lC_J2&MceCDl;yG`%p9jm;;od9i`<
zMwV!3f*wtzYXGYT=)nq;hVp1?unj7}whUa$r!AjA$8&7$lwW*O1uSRFN|IqXKp7w6
zvheHX6T0AuPV(y@Js2iC&{!R@Z0b<|Ez|&`p_JB-yDO6x!}Zst%+2dZTe&VCOk~F2
zHWc>1n@3*B0G~zK(edvFaaD_pFU%YT0`1f71K^A}9>#i)2TOyJ<jssodPh%o^x2v_
zuHQhz!Os}E@)&~FH%l4gt-A#*nf$~H8S9wNz#wWuhz8PC$I7bG6{QvNOjyOTsHL%Z
zqMX69tc{+ffho=!%&_dVW!Ww~h^)$v(0Y+ZAdZd2Vj~o)vCK&6P-1*wXdv4%Xg(dW
zJfqKFw=Q8W>54Ds8(Rn3L-Xl%vec~7P_pXJ|K1ydc;c-?X5dm7{X&{;76j@e!P=!D
zsEEw$kV1Xn1xo9mAPklU@%T+NN4-6p2%fFG^M*$$)W7Ume)fj8tJXO~L0?Nd`|_d6
zSgWute<3q)m0f3Ef?Rz@g+RKR{+g=s*idCWldVc5;-%C^%VJ@sER4qzv1}HMGgFrZ
z7P7$VmAy(gMSPT(q}4u1#Y0-a!|Z6Xv~(yPf^8GnMr##3eaOFonpzJHCTuOEa)?K(
z-^v*TBw_9LwU^+3?`ov!8+qJ?jNVxcrmla7)nI7ak@!3P0}F~Ha8q`<-+1h7Uij=x
zI`gjmE%9e+@4DeP^zuE>d+X<)p?t!$gij-;efbp6FRV%rUH7$it|(3nDBSAQSQVwL
zG94SQOoZ`Lv}!pXZ%b%lD8Yq#Ntj8i@94-N45`}lo6aW8Xpmyd8uz^INH!fCOIOAQ
zOM-ByZ?JkWU+bNm3&xANWQ{AId%)23Pi6QPWA47PtnSY1E~lyC>M)(U6ix9enl2k{
zO-5x@_0h4inStTt?>@%y)P?34H@%{lDa&dS3daFu6h4dx3+YsSJHGhehK2bNte#fN
z-t(+8{z%Lup6LFAue7yBUs#s?xf>G{Xb0%RDhXe8_N6c>C45|abo8E+x$iqjqtD-T
zUYe?{lwP_u_pG`*XwnI@7l*OnQl!@f2$W@9I+JxV0*Nrhm#k7Z4<;-5Rt$mfP&41S
zELjFS#De)?`!?F0-wd`l)$QK0GkfQaFR&`%V?p`&6TR21-_siXY+3f7|9HZT?TaCd
zaEh*rbjDw|ew@w+S&$R0$mqQ%V_(>A!i=G1-}0Az2e7?vov_NZ=AJ=cPRsaM=3+ke
zb>Mm-Fs|g%GE*8aL4`_H(GJEJYwh+djXN_d*f|jN=V?VjieP-Hj6DW~Tth?8Ewy)D
zzbl&wo=wEV4XLu&lS3c;T6=5s`=aI3l}%lxeBLuk`Bd`|HN2A_tW_fZIf$Y-m#!RN
zK1-Km&Bs5_w>(Jsd@x@=YwrHwDwO5Lv2^%)YC&4iZUvUyGR;ks;vlNVfyo&p8I@He
z<?~3o&pZWE_y&Q3LqW`Md3?}*B6cRj1kW_7@i)^f`N6Eobk^Q=;~^Bvi&&d4WJ@v|
zSxI!qz;)}VR}z|M^7#W(TQaM)T=P-FwgX2p%4+&cJMiP>+pgVqLX$-Gz3F+$FMMcK
zHprYy=kS^!ojspw{371F5mmXs4qx@1i(|GbtmjPqjz@XD8FR^vq>5qrhgh>J)>>3+
zC53S%wXU}ym^#d8vXhz#ZPei=EW8(JJ=_%D9c~-E?enT#P8}qiu7FRb!bx{bhwstS
zcQ63wDA?BAL6gf}H>`?f==2XVYp{RLrB1pSk<y5gXaZaMldaNF2d#vT<7?H&W^$17
zu;mjFWrPPbGbQ3@^WA61vYEG0J`X2G!p{0TZ`jZ0Z^Y@~3p6imid7%j-gDjhzG**Q
zO1kO1;N)RQ`IMInO;oltm!g;$Dod_in7pHIbr@tdaN`2foyEY0W}upffd_^xt)M1O
z;Im$`J%%vn#GH!nXeKKVkA@1I6Wn+(Me_q1%uCIL8udc1osU17tJv=k(y@UcObt_=
z?xi48QwjG38MBY7?7ny^b10oC>!|+wpB`%a(+!1Y691H!u|1P&dgt9YEMXkS!tqRu
z8dJEK0@Om)dj%}E0z0K96U$Wc6;-sa*I<cKGp9Joh=DO_*71VH3741gE;H;_hb;x$
zHV4@9hzO!)62{~6X_7dXg^I4^n+9m5plv%gRD0)*^fzVO;DT0R8zy7>X!Sf8Br=El
zMxJUnSJ{y;CyxwZTYvl7#hJ3?!dN=Hkk+miUbhAKma|>P@J{;F!b;llt9ZW}TdT0x
zdVwS3htG5zT&Qh`0g59y3?)oebJjOeZ>H(6862A_gBQ@C^cJuj;QT;laA2tBt{b~)
zLD++0-IJkg()QFA%ft_+vf~{i4-dARf40rLCyzRxTT)qj*9RA5O?Dwo&x?58V%~EJ
zT(^RkWgFC@;3|1wHSbsrh7Knw4H(TDIqq%rtpyBE-W#5_ITeEfi4xZ{tAM55GiT__
zf~E7+MUs;WEC2N{?HEj)5(}i0@o}1)#|P?`r)uw9jujGW$Yl@r^wGbY3N!IxnjEyq
z55gQFrWRENjlkdsCPP0MCZ=S{81G)DeXdp$>zOvLYspL)lpyF>nl&uprc$nz*tsg)
zZcCQ7+L02}uD-_o&MKy~Umg9)3sXlB$nAuY4lTAZdGRIYZc3wLSYQ+*A_Yn*(vO?*
z*m!NSGDU5GAyT#@6>PKp7!o6-8Q~EFG>vjict%5j?8qdzPDe{v&czC@)`E8pyi>zS
zx)PKI1Bt>Ukd?$@VG_MxN}i>x2jMcxv545@NNnLH1>s%HA&+71BN+jL;iS)|ESV(z
zJ{sWAkfR0`efBcS8slMwA7zxD?2;fhUh?YNadX#=!nB|Cy)^XoqnyX6@C;G|7-TR6
zT52+eoCt$tn9bIP@vt<=236c!O}=$73W`0IWM9tpl01|BT-gkQlKkKb;iJfFABka}
z^NJb4DZj1Q6iDGCqYP`o_Z(120_+mvr7)8_ncs5gnT3uB)^&y>t#nu0G*|Sm1kqrR
z89A;F8e1qB@khRD)AvdJJ)XaHj8!&8a4+QVn<BxiKIO6X^s#jH2RX{*vE^8;DVCy+
ztQHVik4Osyy=r&D7X#D-l*_|z1h{1kkhEJeQ4LqOD?g_ssO9K{g<6lZ{NV@Q=(K-l
zB~qC5y7t^``YF)E(c(x9u>xY0O<P8D@a60%QBbH!m`hvGw#0#&pukWUjtl^xnk)7j
zpvmY^j)KmX&nSi-8uC{5!f+yfIzNYDj>N^QK#t_0BhT1EoMRMw)t;D~&T*|+#<9)h
z>r)>qD-{aM<Wnb^J9`Q#V4>v4ZvAs69O$GFb#ps>lIgY+ZsowrsR<{iyR#s0rcW_<
zWhx4&{7fM6gadbn>o1cAI5v(GZs$N49#8r73S+8woaN_cw*q;o;7?${mwNMD`qP#I
zbGV+i&>Z)R&0%=lq&k@ii&BAzmr5`$le8s_V`kXCu8F41$)w>)&5L#~n(pOCfmKbh
zz-a8XX7WjW$PCX+re+B(5$cjv7qr?HXF~AU>ix&TR_{Ms1Dy@HuZ72<!AvWkdT%vL
zq`>er;l0UiBfm4oDmn!s%BkVBBg;Iz^r$IMRG7wC5@nKLeM!0;0NpaJWn9~#@rsmT
z+jasYN|;DlB(=}WGrh$eOlzhS?;k5Mjq%bsB@#hMbnDJC4=<CViM+%#$8kNB!&VAc
zJ>(M1jPB<5l?g{+3%+V&NrUZSrf81}Tc!upGVNnF2GOT8!<3F}+El{d^C+KqnN**;
z#ZTo^QC(869EJr$&X!LwR9DD2PK4Vs;Fr}Lv{F;YRGnAo9Yw}mr;sIGl$D~_)KGWI
zUa{yDh%B291k4*N7n!Dtdh_kUgJ$0-bC1U4aRPeBD{SA~BA7OX&_)#5APTFHmj$jv
zO_qhDyklZ`*`lCyli6CVWf9X4K^vVBx>69zXN*2t2{v6*9$Ms@8PMhsj2K#m#7l<w
zptRo9Rn9kWD4%C~nL738P`fQ)Dp0dMh<392)>Jf_#bveTsnH(OX0gRnh}yDa<q*8g
zETB+p8iKIRL1MS1oKr2}2y98`@STio0ZWT1KX%Knu=ROGEm5JABqk6vhY^rjDGLcp
z#uS^98rZMNyt%Z&^rVK&juAJn(Z3_N6@AdRjzR28Yg$Z2qRc!n+GU1DnYuH^G{KOv
z7cXZhTZw6)e2!B-5!06DB8;nfit4V`IiY-VZh8zSm(ScW_jn9dKBFZ}L$Lzpb+j{p
z&)D+G$bNOWm(-c&swQ)ONiA{({^Py96eqjiMbPJ4dxULt1de36#L6I1pECKHj-#K*
z;mZ$2r$A~E9$h1Q%)8Ehk9o(MtIbC`_nN~4U8Z-S+Z-D1F}q>d7Xg0f7|Tqj(?;X?
zL{%~85Ef$3I1VUKB9+7{1P((7?KQEnn#9IP-B0vL2u+P2mEsz=BS4%5EQTB+4&p^#
zp%iOHPJ4u+&~Mkkkz~@GS<-0EFK;l*%Nk5`#XM78S!-JA7Mgk0_2%bWA2p9Y_eE1v
zu^6jcMQL^iDS%#t@#~t;Hy=6sYBMl8WDfMTo9@AGb9hMDc7tuV*)C%NY#CE+=`D<e
zM{n9q@2SAr6}HMxxZ~u4t;2R;Qlmr_=W(<|jRpaOgpv`EVt<%8kjJ(pZ+HmXPCYPL
zVpa-Ua9shui!cc4s_V>xn)#-tyvqEr^-1&e=AW5L@>G+^YzYp-Ve|GgFEdv!d6oGj
z*d6TaFg+@tBfX}T@+rgMz!-B08HV2ghAKf4(*2Zyv@Hir#-MzvJo)k|3}qgSfZqTZ
zDZR?5C|kp?>Uuas<eZv4vltgy(?@w9B`Q@VwZR1WDd?UK{gjrO^Gg?)vxOmLQwC{$
zRlRAhU0_PU_ukFFFq>N+H?_I@bnht+lGh@KqUNQ%o_HQ{2~l>7K2sia^ijKs&l5Kg
zJqh)Jx^~h+(J2rKa%SF{`b4?8pti-Vsab5BuGD<cGd5%n4RxE&;a<}_(r<pc?`d=I
zp2tCg8BAPXo~$ruHm){(2&qF@9lL1)v(_V)q(*s~G*%J~PL)BKMM?}RWLlZSCY#74
zz*NEj3(8<!EoJ+fk}76R1!m9SVY4qaXsf)3$@^1hUTxmke4c42uQiR82o{)gURgD(
zm~tx&IY^qv6Hk*bF5N6kvpdU!vpqvol`JzC)Gsr2rIl8otJ$v?Y}+vqx`z9}xXb){
z|BL3E`=2(6@iE&3*i=$!R#q;zys$q#Y<8tpGsrbX2w&}^MydlffV!a4))q?XaGjcs
z!8kEk#@b(kL2v>5!UPf1HVjXJt%mXr#uMgai(hT7Zn+RkwZSx0)SCH~^`@b;8etc=
z3afi;&^*HXodSc<z4&STYeh74YJheZ&0A^8=bsIAQOaP@jWyp++3W_xw*C(D^R}nW
zHxIsO>M+b?jGbB0U>26wTVtRNV_=_Zb}FM%0#Ym%!xB7lCi4<g2H#%%CIXHvlQIr*
zn+1-gW;HTm0WqYuxO=G643n3XOL<9!`QxRpGnXzp$IMr`#Hd@yvujJi8`UJE;{b9*
zO6PZop&q76wQQ7+5U(X_u9?_%Kk*PzZeDb53GubW_Yvh+>|4a|5f!`=az`)ox9Ajz
zr-y{QqUyB*Ty3n2X!cMH=ebn9Fx;K38*Kkb8liGt{YvwxORmQ{O`0JD%sB1UDPmfS
zr@_P--1}_pKVZJN?E$RZ0b3(kgdq8gH6Jm}Fm@8FM0SvtL@r5aj$i_&t2AvRJ?0Bf
zf5+@>f5B9h*3k|=X5Q5DD)as`F3np#_KkR9U$^14-TS*&o%@YYK)Ct_2lX4p!FD0I
zD&jcADqqz&?rYy@>c&&H-FivQ0`o`bzsoGCYBZxLm9ZSQS{N@2w!(R9Z=3o0-p5S`
z!a;o~RVegNE`J+*u?#$2vseO5OKdDL<;haBf4IxswfO<lj-XRbWgP4;T6mUu&zWy9
zwMm-Pd=Q=jRrU>AyYH{f!mTj$G>{TbpqMMDsVyc3l+P{{^5L<5^R@O(h8dicnNjnq
z#xu-^&brz(fy>DFsKYQl?rMkNI7;8)bDg`)-TNLlWn&|@)_#6Xv-wZUUvJK+USN_5
zOfihJ1WTAE={sXxAybwp1^4~tpI-c-*~eD3%Ou9%8(P+w_pG?Yl*wRFurI6)JHpWI
zxofBXSM$|m;hatUOJWQ0$HeavpCe8eF5|*l;{PDNmH6L@vVx_APD)LrXcdSm0#ePI
zH>BVNv+!5Y@NqZ!%TW{WXLM?oAuN_yL8N5%ew*3}EGeSLJ9n7x?|KxsZauWoCQLO9
zcI~Rm%vm*yR0py5=oWXc`aA+tJ8;NU!Kkv7oE6RW+<Pc({@u7KCu4FMxp!BZxlo{h
zsNyN(@XZmEjmK5kQg3j^16v7-v+EX{HS?Bp<bsDldC3ZX?9dkTvyQE1fMyj9wn$)c
zUb*}==E}vdvP~lXKL2bTZ|>P=s;LpFH2U*;w#Qc;!IlMeG50_>b-|}rF0(VZo(RZd
z3FL?axh#gNiM#UY3_ul(8Wi%HhNWhC_53`+awN61SF==gYmK?<&~v6LHD(T?R2Eb=
zm}|~>y}5ASiab8LIZA!z3S$%`tyFdIB>c!Zmw6t;{8K0AFyX?<KJd!pax(sVqM9ZC
zgs57F4=dP_QqdbzC9_Res;xYdix;r{E8=&EA0@UCBOJ-m35KFoAQR{zW#Lb-QxMqs
zv-WD#GSt2mM!EYeLn)t06OWXGm|ejN4qF)9vCl&cYD45&;e~``<UMkdCvwK!JNG*!
z1st8+ucno|P&lhIo|bvsZ6ff^UqR83Fpp#I9tn;Z(BZQzmzG3P3`yrk3i;>SjNRS2
zhic=W;~fzARI`2?p-~hi(Zy0UcRfnoDKV6=2bUOSQ!Jn~xm#^U!qqpOxeNKLHm$D-
zO^1gd_Za##li0wYKG|C}TdC%un#8{ozfAmph(5fEo!f}MA4H$oPuxxXBJrC<b*w*6
zd_Pfne4Y3KqMEiu2&i-7!P51_Z$EwS6i-bTCNsly>HPT#SrvHCUoLE?z2+|za?+WX
z`W}S`&F;Md6^}*-PjjU?@(wRz{1pjzFP!{2<zUY{u<ZWiC%W3i<g=0E=xany&+S41
zPv|Hya`c*xY|-<1409(7**TXoKHL0x()oM*wWF26qg^|ieDQg|%&nT4REt<fRL$dS
z#HjLk3&&p}euAjlNgYv^>KfvEh+iW9AyG9FDG^o3|A4rcC`EEoI&g|qfnYgeB8YLc
ztg>nV$Fed=YJ;~dqKxYH{TaXYcSN_7uT4IVraf|B@9W=FmhD`angUU(PF({y_I*AN
zzjb#^JkmLx@q)x}UD}uSE9E3?eVkf)zO+1Na%$1l(_{jM$7K5gMt;xZ5>@8@+C&=p
zloQV$?~&fuzN>KL?-T|{9`}I1X0w_2f9IYj#iCx^e<Z5r(M!CZcq#D;;#I_75Y++q
ze-JMrN{N&b6+TQngLsP$UT!G5CM?&vT59?jrJ+e>C3KiYgBQ?~n<AoVei!><KgWb9
zx}37GO=h_vf$D%Cx5Gr;Fyr6FJDu*&a78vSBO2IXjV+ocyv7$jN#G70bx()ynTV}>
zqj;QE+^vL@Jv_CjJ00HrRJ?=55RitM2r3#xn~C*2l?l<rVSOsz;P~_OO2T5Ochz4G
zF4k{{15epoN@%IZpqj)o;vW$eRFjZ0_`itf5*7ZKc)#6qKl|7)9Mm>@EzfPAV5{1R
z<h}C!H1S^IH;5g?6AneEK)N*~vuv?h&uE%f<^wEa^v&vd%gpNf#paCKg?84mr&d(>
z_;Wc~?hmKf9*t>qEyrQ@&dJCAs>Z2nWSFY}ddsPe;ino2w7r|ywbwk_j^R<-XnN-6
zfLLm3WR(UjJhJ}<^FMxlhgn(IVpcUQF=sU_Hp>`gV+SgbGLF%J<5gR{9UAWUXvo<I
z9OLImG^f5nc*b+s>OC}~>ky;0wlT_QE7)%9+G8F$ycNIj3<-_0%hcHw)!9)ntYCQi
zw|4x-?CUvTR!}ZigW>A>7PE{AdZijFP0&cj{D6}Q6qp`GFYqTMe~AYc4t|7NLPLHD
z+P5>%8S1;Whq6iB+|_C}v~OWZ|4DDe(JS~7QrEHnTcY|fL>M(`Dg2D6bDA7>A5lRs
zq8HY=UBvA~b)HL^_#ow>d>$h1CjK7r--#z2icW#3)*;sjPYfS6PwZ-AdQGJ{v#j1M
zFRd{Pn3K_5(_|LGs8TH3dk<J4?ghBEVipB|&QsPao2e{DpLX&!pO?Q^dD$7|jNaPW
zf6)AJ&u`8C!4A_l&|wbrA2x?a`<W}!Z=M~cR;rn~@WVXP&iTV~D9GXyEw><yU))O{
z;DJ(btv4$f*11slR?ag^ndGIpHJcb6Rn90J^+5XOz$gwb$HK3KRRPDsd0}dW3a9+G
zaMkgN?vwCht#mH2lGQ-FonzF^T%$ex?W~U4W#>1vF)Z~NO>$(2sybBa5Kz;L!{}3r
zXJ6l|$$yXc?<ekIJW!=Mi{aPHn5Dl!L$RypndOXVtYR+4PG~0rd8sMtY8dWx!Kxgv
zhz1>cT%+fs`?{__jgL{SD9#M@Ef{hEbHp@nY#(LQVo15%3x*q2K2yU;VmI0NBx9%#
zlma=QSVR0O(FfHc6r?~V2VL{8BBh~bE(JAlMT5`dE>7M=yq)OJMbjPEe$goqv5$mw
zErpYj-awHxtqAEIEM#UU9JSMT#BjjnOdyI;ThSy!xmGZVD)ZFf0rR=1zhQ?7R*|L_
zCN5=oUk%%G=5@%b+>G@xtXhs`<iO5keX+aM^fQr70&ax)BZDb7M!j>ikFn}$vxB)K
z&ro3ExKZin-fD&m-?8=Q%xOxPHpa6LjgRo2)J)Z5OTP6O6EWVNb&>41=$qz3fdaDn
z@PGx)LMC)|f-l&r?0}Ufa4uoUZk)Lt+0=*`=6n`wb|1p%KVJNaS;bIZ;i}1qa;2fI
zBC|nk?QfLHWD;1SeVOL{^c^sj4CmG8o)P953~_xJjC*lKGD!YA`wp6o-FtZ-Y8nWl
zdS*|5bN6HByZfFp?W9vvs{D3Y>BM`>^MR%lDt}+v3tu)n_VnGFy`7|4KEz|db_}Sk
z;UUg)g>sgl?6ok_FALr3Far8HU4c>fbk{EP&(D9~tf018O`2+OEMsm*4U-a8J~g3q
z2YAK7ZIm)C1Fj!Izo~l<VgRYYxgpBi2>A|BM*HwOAq-_~9E6X?z(h)62yE}!`T+bC
zH*H`zs`3f;HXv8(!I}CA7@m@*HecM&a}P96<+jHX^14r?Ehm16xR|(^_&8C)-|x3S
z=iEOKD~MP$Cl-oMfrx^t$B80LF{1FQ)&^|>zJ>{cNs$lc=^<K+R+a~JmkX4ASpEO9
z<3U@EE~6PlGl%77BFWY_NsQB+)Pn_C14GMd>4X{o{IM_DW)tD3w)wOs9m1?5Fs;U>
zkEfYUPP=^-&yaGHCA=TE4Kg*<vsKDVr(wu`(#pYHkNAN6%lHyCdg`0zLV*H8v`_s*
znt?3hfR9{Tln7fU2@VkDa>O@*NGW$vySu0LQE*D&!i2Oa6}hHSjB~7vG;y>a;gNz}
zboT)F{J+nC$IcN@=@fPuu$7=1Q|*T4m@L}_JmzaRs_k@OrK;+KI<u}g#+6qN+g|d}
zjP`Qy7WT6h+Y!o6pZrWgze4%M=(DbQM<@fsP)vfFB1}wD9(N2JHk)@mWG4caax5HK
z!7X1tRSQfZ@Y7(}$K6#JXj`c1f99$CxJRN+9<DRam5C;gvagAQS@08v9t+JzKZNn8
zXIF4i5;n!N2E}hG|6&GO2C68Zu91u5lNXe`LJLv*vW~R%ugC5Y;X=-Ql(>-iTH=|+
z-NgS%e3Gcw6d8R`e$v?LPgzM+bJz)mqEjI9wbL;^Xx=@4jak{a%<SygZ4TmU;sCS1
z56a57o?H<=Fp%@6DYt1ZsMWlNnXPgHFXbRX1&hPV1@t7CgoLguh-tgXUy}?K^y{OD
zt40cJWt$Hh8+3gLMPaO0R@f9}A?tZ@tim*76)(c?PIG;;Y3n^?e!%SY`B+#IR<k{b
z#)Hu95+;S6gPWR;!A_b0JIw*S2<*2`3$YSW0=74ucJ^A)H5W7*ubkE8;yG-Eq41pw
zTiqgz<bj}fqz_TAqXMovQi;R~hUEqEh!46pAfafn<w);9Ttw}&g<9`?JQggV8Fdf+
zT~9J8RUG7b$>&kbTVdD-hHqbV9&SnM%prW49l!-mTV}*`$Q6k%pDL6V!-9y?Xv%VG
z0;0WWCc3L$5XDexz?T%Ik%xh9+@l<=e2Nbgqd|OT-vxPMUD)8ZWLdn@EW*3@qRK|o
zfKRL!skyw^*Oupx=>0Ea-;1L<^2k+tc*H~zGC6zob^J-><OcRXMLbsRMM|VGa^Fkd
zEuiy~Z#_M4P}5aMs@+^Q|9bP`i{E30M~6`$J+w>Xi;A{PHF<Om_Lx4L?`_BNUK_Ou
zSsIFJ?&!5v5zHfNBQLadH5bIxxG#x@ZmXE0VkF1HVm?{72#|7WKi=XLlgr88O58To
z;wxz$vt<`mH`4aI(5#?uW?@C0wRZ1&?x*Gl2Yy2nTD9rOzf1JVvuj^%=P7C)YZ_OW
z|MIH$nlcLY0hIS%ny2=vABiYzyM#BMZrkJ-6S}EH3Xx8WtrX1k*j9tDuT7B9^w{Pn
zVe8BFk=V*PqxV-PtNCo&@>k+KaUKG)0Y6yHV7rXI8Fln80NWJS?!8-nVIJt*ZmP(3
zHg%-ibzH#VavWk_zv>Eb$zlX_nLR3>#6vhf?Y92vaCi!a?KB^`9wwQ~VXoFPUHO#4
zR{6BPbh!_Ef*N6;lzDz2ig3(fX_W)zlcmpVz)<NG)F*Nw_${S;Hh@>7EuT$h1%q&w
zRyUa@`q=tt8vDCvzGWWo-D{i6-JK`(S9(%*&hdn8B>FK?eI`qZmlA(T{8QqcM18P6
zFZbc>xgfpyvUI@9y4k<Q>9lp0hSnKKnx<qG<f+2{QIol_aiw+GCZ}zRqgW<i-130=
z>~r6tGc(3Wr!+#n-n?n?8k2;~!?cZ#TR%!^+h!_8RCW14YQStA>7q$nf<#s90N2z@
z%>p{>)qJ5e<p{PURptckvemSo4^m(@9NKC&a$hsb=RkVM+;rYG<^yNGk#_h}TLqVY
zrBW1)h8>H6hY(y6kP?9TrkK--(67L|_yVqxI!$FYrVa;*Efnqx8<ty4$G}j{hg~#9
zes|{v^SLcQHRbe8jeyHS3jGHfSD6}Wc%xverVjDJ7&T4_F_qNA7!$kbARXtt4JiND
zRyUhP@R4v;2W}b9E&(U`Ju9ajegNV0+pgVapK75zr#lfhpF}WTzxr}BA4Q_3&r-0}
zJ;GM)@^b1~j-XSRT%zsCBL1-$LZ=FNdjXh~QBId((Z9Co%zU{N9tSY+zD)W2dz!2k
z)34Nn(m%g?p?Nh}t9f~JY?P*9Fr*xhQsYxgfSR7#7=*Hi<|maKnGO~7kz7!=z%){e
z*R$1JX))w{lJZ$rQik8HA@gYGPBVa$OO3Wlme-h@)?91evHW6F$9?jhC7x6HOwuo+
zn$5wW2Ru)S`1EY9R(Q2wD>z{@kzJI|v(IDfU#o-!HDmoH@mAs;L^1QdL@A^kW3%T%
z0~?5S;^CA~;KX0&<lPC6TI#AoE5OC5iqWuyrXr=13q+H_nPTPH=991a00qCsGPBT;
zFj42J+P+I*o(=d*`pYN2YIY)M0+?|r0_jgLxxt)|j~==FmVl5_5YwsSRh@e~Xou|@
z>NOh&_uB=o)X%Y^YJpjaPanNoG)M{QjI*1gSLXIT1%!*AU!ijv=%84gOHf-<ZWiN3
zb(DS%4M<3#z!yX7-(T|%bB=HV%M5=K7FK~kbG3~>*}l#E<BLBshv^uXNJ>`Jm|NGp
z%Us%gt{tr>Y{f&Gqa%ePVWgqCeb0W|?4o9C`H1t))I3&#uR7<W!N0Se+?p@@(G;_1
zUl=+gOcuZB>S!x}R|;h)*o9@Z;!qgMq4RzQFPuMbx%tF}@53ORXAK3Z2-W6BF#?os
zj9SJo_dRF+_r@QY@==^IqF~OcUur&i!Mn``IbT>B;;oK%4bc^b!u09GJIs!!zK&8F
zv~5N*{v;dDsG4sLLHk0vA3rC=kL-(HJ4yQ@je`0<6x0QyR=TL5(7umSE@~o?f>2bm
z)c;9bLcE6fKH~R@-9)8RdIdFzsQIduc*3D*6$reMqqy7gs93e40}^=ONkT#vi>!=!
zrB$X8*V~hW7)LdO9vHJ;O;`vVIf1K!5ie+9o=I)<<XiH`4dm%2G)kG}0{5y`qfUBR
zPYO~d9Om}jcJB8`3gl_XC9i-*L1CokC%bkBH1&-V>f4gwXrRW@GzGSLf-vX@+e(DK
zH8aRd9$Qz@thfdt6n&=B`_ReIaA8~EFE=tr@1S4}0(&z*xlF`I`2(A3cK$dzI7)c>
zc?`2^X3SC5kxi3=DW4WYwbUFLWCZN%ZD-USH3o>SIVY+?oL#%voX4D@>4L3gP>%H+
zy@#Z%wpu?V$$`hv@>;Hd`f^ILlN~%McH}bFXe@Pv>$OA_|C&CXR|;Y{)i87{Wug8L
zDUhW^DHEOZjHi3m%(ai$K|JA5v<hS*MZB2NS!gIS+K}I|M`B)YS;#ty-lZCWtGv3A
zA-N24X<R;*(fkFr_8u%8C(v|Z;`4m|ejB-UZuccpz*06xUPsR;t=+!xu%!;1ZP00U
zCCI#wOzr2cI<$10ORw`2a<%szSy$Ba^TLrEJie}O=^j1zJCOo;y5@E)&GIK*TG8KA
z+hgK$vA9{_MDW6mzWLW)^0?=3ayyPMYzlwHZhbb|dJGFWPe^()4}1+l!*A93b~VwD
zq;e!M=Jz>wCb5h7w?xTtUGuLeMWfn?g7y`C(0M7E4-?gI;-AOvOAke=KqL@yqovqd
zs(NlX2910&F^m@ix<$=VHh73~huZj4QAV@pbNAT1Y<izb;U0TB`jcY=y}uK8KKE#%
z*}X5?C@P3XzHm=Z6_-|&wAAz<>xLY8-KisKZSUcyfZ@caM0sT5m8p&#xN}Wd;AS!O
z>L3rpR7A_4vsmN+o09Gpr+o6rPL4yOxKFqmIhe4kCr%8W-(2~ec<m$|iAf}vHN^G_
z;+u&7N>rbSnw=OCU_I-;i><<UiN3aCPw=yX_}1LPUbd=fC@615^?kgZ=<{Ir#Dc0j
zMHMXMw0WydT&gxkJGg?{y;X3d!pB~C$v;OjRUwO`T`Q#Wdrm>PDze_qy`%7@4Vb<Y
z+et^Y{H5jUb1%NF!<MED`XDM;%t=9_K{Y&&?Wy_d6Gy=D8`$!W-fGt12-gAYus${K
ze0t{UM0sdR>4zw%uh3%}EuVVx6QN8_P1p}Val{IAJEDAop?@)9sD94;iNb9sW6#$L
z{*BDk2l9zrrk*T+%`vkZZSCO>wo(MEh^vY3B>n^OHAID95Y<txm(|D(<t>HuBjU5f
zmlcYx1~RO+)8s<)Y<DZZq_!}pqTY_el5d>}0Vwk8bVM%rLN26UJ`=iJ#E6a=3prXV
zR8};n+^|u0a+f<8MY5fa+%3#rH;EcX5qW-!yyz_4m75xMaPICqWF9`S(atJgjQbMT
zzZ4~isI4YQ(O<#s<ti=i)JgjF{1VMBk1Z$t1XO=r6B^~sU>5@`^j@(7OZX&3y%mNU
z*8ZaWfgRjrmNPWAnGS1pXip4aI0-OUiae$hQ=jOO%`=jve+&EU-1#VmI;Cj=&v&(&
z{mkWYT@EMu^l9%?fmc`D08z?73gc1YBScwF8;Ji%RA>1W#B+%|iF*B&#3rJG(%ftJ
z+<oedznOR;@g2GIFKbhD3ZxGO(wM9>|8(dX^YDg4=Jj-*on6IHOh#_ZWAaZULkF9*
zPBkNCO0n{zL4w@PN_I$yi9Ca88>6Gm3Wvx|I&Z79q}5gs3dN{3B&Uh4E!MY!hjxWL
zb?o*qgs_9jYKLJ;tp(k|JcjK92hB4~P<ob$N(~G{?w3-W3wG9U1q$Rr91-qf4$o_A
zmY8$!o7BuO(0Nsi*9X@{QYdz$R1((|LPEjOT^>|@$YaY1VdI3pYYkT#2?|ADgHRKu
zj+Ldb^-U-eE`@m`Bp`^dVqn`hK8!D=9@7cFT});>%u0v5@RKEMH!^ywW&)SEdyD;7
zGr#5a;Y<6TG*2^!;vy!5uC88W7P5Z)Jd8bI*bIi^cnxBJMERgnG(nh0%BLMXVOtp-
za{6^a<<hl02tkV>7d(dAiZ8TP(C9m1t0k#J*hNFawN86SZmo9t#M;3MqfhniGuv>R
zQUm^{D5(EK^7(tjvxv77uP1IK>il02)pYey;+u$GX{6czCGpF|`-!TlR1$}X?<ani
zcq_4$__Bjur07Bl254Y>xP0I|(}iNDNy{*L<D9BR=3K0uB{1qDh6rwg0m@+j%WN=p
z4}OdGFtb^%OVk8b0TWrqiZHR7mb@|$;j~|_wa|IyWGhN;$K?yFjX46n3_}#|BdS5-
z3+pGlpRgWxr92KWBzW6!r+IAXFmTJNp|;7yCizXul5fG1))VJKhT)l;y7z(YZiqp7
zVGhn2mGjN{V7sEC5nor82<k(ont41UpsPl}QSRB#1T`&jT1nH1=IVH%A&P2PrxpD0
zgW$Fi+6!+hv?4s9^dk%z9mcQH0oJ=8V5`gWjZ}sZd#LR>Cd2jOZ)w=<<N7X~KR$wU
zPc4ItG$Zq*sm*bb@|t~tn%CH{d31EAd6XrDZ67brFxP<LS>U&#qJgqkW?rED%C(6k
zpfq<MlM44!mgH!$5?nMdBU(N+-$qSiLeG~`4bxRqS-zI9ya+1uaw$JZxm1l}6g<<M
z6xJE={K@Xe%~rfvbfZ9o;WjXQYN(wah<<JcZOZ5G07Gv%eva3bwJT-vpNT&qN>SWN
z{25X65h{rKEGddk;sK(9SX1XdMf`8X|4P(73c99yPB;{$0ueRDKus`%W`YM{iAlp9
zJA3xie6W|Rsv&|+tQ;YYy8~#LjF+1i5a9oSGsXD~_0&W!DG&)2F;yu{D5bJ%@G!1Y
zs0lKARV}#PxL&w-)6eZX>T-QC0`sZ8dz85&a@r;)J%obTio-vx%RNY%dKmxT_WXv|
zP=A<$nkVD-eaiyz0TwaP${}2#n^EcJf+!%NF%L{sBlOtr?>%UCV%58Hr9>t46vpiA
z<t%C2aH#qD7k*?~tZ-ryps-a<1;e2fWuh9xZj??Z!bBbk<QOr5kdxc-7ZD^G%^3m9
zw4HqDCYKK3f#4uM&9=c;G9JWL6{P#>foE8;`te-R6t*$b$UBs)^+D;tR+AfL?atPq
z^0^q=2cZUA<HIV2!I#=+m4+>wB1}*UhPba`w~8|JJO;zRJo6npL9-Ifq}+v}`XW@e
zMB7c2?*xACda1Qb!R*5z{OZ<Unx)iIHR(|P&c-q7#@G(yI%SA*x|caThiQ(I4>Z+s
zM)9R~`yN`1<W|K7hv9t50r@H<UB+Ta%_f)P6m7&Hs^aJ|e?{CwRKLhWL^WTb(QF6#
zKDN_^bGY!&#5&?lMBS^v7rcB1EII`uiVN;8+8jc;FQ7ojVAM)*sD{DhMN^1~dSfK^
z3{Z(MI*d=HuTr(P44i9@5>wjL)EcZ?5@=qFbHrMhR$%~v^1n8#KZ<nft00g3z7p8`
z<@OmSC#n*ycWl6lp$J%GM#nNW<Q2G!y)1e1(zNZP#JH&IbD=<iF|f63q(E;?=BxtI
z3g}!7^73`7p!&ZT(5fAFGyD6S2i0c?rG>4iDr^u624SRHfzH+Ay;;gbL0(z^Zui6N
z30p8hfmn{w{mR0obJ)6B1P;e~i>(Bj<1g`8ihFu^wiJ=Djk>ns@~jJeVAv%A4PDf1
ztnw+35UMe#j4FuQ9zz*%dvI;CxvhhHR9Y+mmc~Y9Q8W9=NBK2CW4Q~`jP+J(4u7@n
z=cE^gaD_0m_z4xx34eH|hI=`(K}MU(XA%Xbpp^3QsJ_U<dbT1MYHgaB@;bFakM~OC
z%j`cz{50`-;s)XmiBA*v67@1-<dwvWiED|?#Jh4)7M6lO^`yLb(J2ryLfdG&`QtO*
zWiC7OVzY&6@V5R#c5Q(ds09o%+tdY`8^EPBCoDuwv5<t3{$x>FhT?*@8I*>6?b_D#
z+&#)i*J{TluG~I;UL7)A5b|P1#{m-?qK06+Ze6hq7?@fn8=i~Hl~uIqpTnd?`A>Rc
z?+fPNcKp<|ls1?FTWIWKX6=tW=XPQ>{@#*{%sZC8)*Pn!Zws}K?bIAL;|Hq)H#1g=
zgGv-z5llGAd#Xhj{8S=s0N;?>X_nEE!qznzx=ZT+r~z9cCvNb9O;=Tm@I5BVI~r7T
z?6Ihet71kINzcIoUPXuT>Y8Tj!sC%co6UWDp1`7wcnywbQl$GyXfF@ef3*6|<|5pe
z?4^dVjpYuuGcaNkHGyI4zf5!sFbd@Iy+B<FE0s?v6V+hyS13mEitNj$3;=&k17&K)
z)rjfnj9RdiRV$R9;>xE_Z7<oMLGDw_giVD^S;(3*=i$v@6~5}us#$E8c=+L-C(Vx!
zZNxatb5kLMle;GoqL<VQZ6->AsB`_D#CH(?gt(X}5=rmwCMw;XL}|}`L?3)U{`h5W
zi%x;4CSlTD=3Hi<zHjBFrWdcDTDzg2=7@gUP&;T&I!IgiK{~}Aqcir&&Rr9jG>z3F
z0pPF_ZMCmWZVUM*cYey6DqQ!>=(n;q=^x46FUB9jn!RHFS?1MEXD|Y#0e?>OOe5}7
zDsjP~wJNkP3#X@-rp(L`1*vIHfdGLOCKT)zTui)c#U)sX32GMorVni8+)nGS90J!i
z1kuwSI~j?`IuJBf<dC!Lf(#x5+uFS7v8bB?V05E_$ORl-@LPv%33=*_?U={i%_YoS
zmvCHK$>L@7xisNhNo&d|)}u_u=_ffv)0b^JCEM9F63b#p4f~w>CFTQXyumgn$v0R(
zilY}CJD^KDQO-}FJiOg(?!#zS=Q#A0T1Znaj)tKOzp5Nce$zjpeEPEm3@fE@au~{J
zPzU;Djc1rO^OiG$v(c8(hO#Q~tF#zuzaM{U&mcQ|4aw(v3b&q(^$1z4>O4|Z^OWQ`
zf-fIbMN=P%vuxdI%cAT?^Kn;R#&6Ln5K9Yd5zwyz!!_a1PTn(p&{__|v~g-tpn4XK
zc?dz%K>BXnNncsJ+<f>|?=%TWtkF^Ov7-f|)R!^DJ+gcb!`#0)xY2ac`6gzqM2OwA
z^b)(cjg*M|V5x0ZZR~Q3A%!qN+HY+Bm3gRpr&)sQiynmC`&PW(yoXqW(x{+$Z1OPU
zL7qu=5uxS3U~a22pm`K>rdVHEnI}jJD>Mb&w6f#3cRp&KVl-PN?cH*(eg;dYe(20M
znR+ZqEh41O(@|;{qofzcaw{X_;<p{UaCX>lX<q?0S2wM)0z}PV8v8F?73Jqj_)2ko
zxAk!p)-K!2*@b|6OY^JDb!S~}eL0C2+?<d6Ym)yU0;_O5EBBzc{E7*~X!(>sEBUw5
z^3LTn5k1Oq=cUkoA9!7ZG5GEkue1FgLtv=E3mT*{%-|Pog`xVo9%tbxb%d+QsfE#&
z*Umo^7ezJHTI8FqjQeTQ&f!<Zd?Fc?U)}i#o`4VAWfPKIdl!xruU&RAwMY6xbH1~p
zILSZWNtVUY>|e^hltfffOn2`o;ke>dAQ2M!fqUNG&<HCD^}MBzFtU|eIz(GaYRxrE
zUt^jO^274d3Ioc&jylD~)ar138mnV#=WerK%_SVSPzY{0_Zn77n{S7FYT+9V3zV`^
z=blFV?4*h1H@j%Mq|KM{An;v=<vVfnP3>dy5Kz6ZtAL*pyd#vE*}JY*F!38SAEbnV
z5$X_cL{W@`wTy@aG_B+K%H|7jrntmfy)q;;=t16lg|k*9d<J8pl~F#UqXX8nYbl<T
zuft>V>ldD5g^$Bki;U5<0`~IEs%4Qkv~P87?mSC&vYM=#aRn|V<M_|Lr?m&z)poX{
zI~@(AY}NU#`CFo+NUFgqA$YaW4EVN|S2N7F!8$pWGfb6D;i#H}Fny@)1@i<=Vp`Xy
z3*%r3wZNOsdb2r?8jpg?q%WH)tE$C5)v?`tf8R6KFNnrUsvoAQlp*1)-J(gWQ(-mL
zIs1TF_EYo<WGXxbzOT<kuj`z;*flCga|sG9sfAQpoJ#9bcrl=Mc`>xAx|4&1oEzRt
z?b6AXd=d#3CtP%4E}RSsh@QgCHYGuOA2d)~=T*zo@Lk2J!a?R~BoSUJ6uLXKZQpff
zIek;p1u2rr2<l$7t<QxMpn%8*L8TB}`6%QeItxS9^4+|+!Zq!w1|k>wYUZ*=A;<E(
zD?@GRQ81K3nH==&0*1MliX@thdF0Zp+C7qTMe_NQAJY}#qk^BisQVSPvCM>}qflTf
zduV^WHEabJXZ&*~7l6VYPM`SS=y|{I^6)wNvvXTf;P|K#MLD|fXsA3~bh$}jsV1V}
z^VeOjlNBVn?*0nbZQ>L8u@CT1Igt#C;~rmbCVWi}sv{Abkjfs2f-X8*+6jX>^gMM{
zj)kp)N6=rhCy(+ol>zCK=d$#NvvymYH4p@WtO_dtEYe~bj_m*Oux3HDyVM%P;lokx
zS7)40X15cMCS00yAm-M;1ePBGrmFNw5Lc6)H1iLItZ(|0aIjQ9DybcM(Ikca+@9SO
z&Uz~8j8FyI6AOaXcH%k#<~eIJr<_>kGx07*NZ~gnhJxy-v@Tqnyr<f}Kj*hm3KgzK
z&mP~tFQ3|~Tq^&Uli%?@_4H3wbPB}Q5P~u@K%d4K;<%LRY&6K~Q5u0ir3DmCd<yry
z#j62{o+-tZel)t)8qw@nopIvt6u!(1$=a&{(Pfm8JQ^C|g^)hM;t369iP{1`>AQYc
zbkwu;E;h0+jD>Ap;4th;tLI6j<j+ld*J3@ixWL<*U^@;CwB%M4Lyfl*O;kSkf5n0x
zZTU#=Aq-{AMKIJbZinG3_KK&)gNsgq*!dDAP3Gawt!B~ohw-!1Y--D^7<Ez3NU3t$
zsqKZdI?<v*Oe3$L;#@J0E8K7jLC2c;?1X|nWq%xdIZoG@^PD}*HRU13^Zv7x#)}I%
z1*8Kn_k5jI2Vft=83!3XGQ@Dkoy=W%rh6BSzBLT{)u_C=pv7mapxG9Dg#B>W<E#R?
z%rwwBUInhz42;l#1qHdT5N#!*9eRa+5n&>1T+r2=F~QdV<u2M(!n?o=4#VjEx~8C<
z+_QiT%r*MTS;QXOVX$T75E$>E<9&<uh#)K6-ac!7#%-BM+SMPI;(BHkbDnA$7AyB8
z8j<Mxr$j$nKA?{$k;lR-W=Aw#bpl>k2tyrvgx!AbY!0gevDLER%BeqRbK^(Pwit3j
z<x@t>fJS~X>P{HGfHTNe{F-@L;_shr+oDq-!!SvGqQd-yA+z6pd=DOED$F}-TFiww
zZ9AiSfmzOIDGlW;hgmh=+_DE2kr*wh4m!@Oy}~<H^b8?IprBD4t^(_>h`H2}s^FTO
z+<E2eg+m3Sacq9Pn^;^kX7%h%2*Na@MZ}bCOsLw9(%3q9$o!~hkLkw$P9>8U>l5XS
zd!KXZE~=&xKBD8(%<uTs(_gXJz7+%E)pd)_nN<s|*X0F_-pOJt9$>IT8T6LwmB7&m
zsxpRbI%`*W`{4E^2sA=Z*!rv5`cXSBb@YlmBcDxrC*dlSLqQ&QH}Z}NW~=owWLLvP
zcOq=IFeLTi{x;Lf5Y@7D+Pcvx2s)QvvHxl+ZZ&1-2TZ_Q-?4?h@M`lO=4`EDa^9It
z($h$*`4x56*VtjZwmC+fB?>D{G9pT4$t&gptsLDof=kNVmgyW8N-JEILQCf!8SrI?
z!J%ugi8VSB_$$+3nHRcRab%IU!>;#JK6f(AcOxFMe=1^r?*ITm07*naR6rbI600Ve
zR_neaGo3YOicW!uMbz+90~0JxF-$YnXEqG=F=KQS5}vF4*D}QN4LEKarf|!frUa9T
zl`(_8&pgbU$_p7g9)}sV_O&b#DF_K6S-KMZW41<MS<+U+C9E`rRC7ygZGvHi<5(=?
z8KxPLb_cU;+f^7?3U>&h7K@ddA218~CkLLzNm~yyaB*qFJ>uR3*PGealhXjKDMxZs
zvHh&!&?!DNK`n7b3fmEEp90&TA4U+#2ms$ohDX01B{GITq&RbThM?g%*LoS6`}l#)
zre}D-4$Vw31Xs8^1%cw=UQO;BqiIZ&!z8q1(MpKPSCafE=~zQX$4Qe0TWwXFXa_?n
z9ywF2=iMGS@SJ(7d$-w+5wJ<lF>&fB>7>b|i(s`C#6g~+nFO;nR71Z-avPKCGQVQ<
z+xHH>;4q}jtx(N`VYGeFzLqrBcLc+24}ilX`(Lz%g36{wWNFl#j052)9?%@17&xh>
zqvKH~k{$$y+QCX&CN)ya4c`VsupGmHd!BhCgUtKVlv5djY0B|;aHja<wr9<Yl<ihL
zKO53<8DD3N^itLUH$Z{aY`xhWicW!mtsRD`W}hrGzN_((BPVDYh?#{M<+frp)nOj&
z@32gu;eKMAIxNZG3>`8*fBYUM`<0ueczCVGGO6LbwhCHPy8}TaXNn~-t_J${qA0$!
z`2kanWh8$~%2bM^m*$Egn0FiVMcPSUJ34IYP#`0`R}IYm6K27S2^)Cfm291h4T&Kb
z7{(kR-(eDH&VjyZE)*yr1wI5(s!#xpG$J&zpVfR0YHVX*`#5e*)Uc!(;-X!MfZ5gG
zZvODu^{lB~!F-<zi+2rpsM$*vYB{x&ZiG)4%3uV#t2Pm*X84_58_b4-TkOQc6wj5D
z%swWy^@H&~W>4>>xv_z!4GrhEI3bjtp!OjnW*#S2C?BDUFtgYq+y>#xQBqH=u@=5>
zHtcEL9?_)&#jpt4EkrQuFC!<UV+YM6!9lLdprX98twmux+_A&_lsQ$4C~He7i`5Lr
zuBB;O6Ff^PQ`+vw-FkrWAmJ|8|NBrnU*GnSZ64EPVD-BUg54l4afIWJ)F3W!hE3zx
zh&421tPOGf;m#cv&k5xdK9Ux(<r55L0L*3#`FtyDwJn+;5!}Osz1PsBQO6ns8)!Nh
z!J(Qgh%$tJJxo;!!#3mWe+VYCuFQR7cV<l!Zj3v&ZQn^Iw(U%8+qN;WZQHh=iEU17
zTPN>2>->lFX@A&juj*Z0-PKiHbzOz8Ua;_No{ROAV=zi~&n|K~rlG_rD6DM2md$=T
zNs`UpcMdm!H#D*eZWuNNFaEhHZPyH`cDA{0r2$s9K)IhCZ@P6M+wmMhb$@20=jV2)
z&oc~cq2K!(QJ3<@t;`(xksRbevxV@Pc%z)z<)6V!@hI{xEGv@DM88;b3Z8phjc8l<
ziCWA<7BgvUEr#@6c_z~OaW8j$OOHN&9BD-Fe3-c|opeY~mr&m?7cGf2LTyA_<W@Fv
zj8@c$q8kaO8A735?E0GgCvQ-;O_Gq*4?zs4DO1G*yg7O7+R<a}#^OodsL(v+*Wvag
zmV~5vCv-2I5T#3{uS&ip5%@-}Wp$;P5X%k^xoQ1HJw_Oj6!XmDy-*QsNcT(6Z0kao
zz;)UlCskT}Q=Lkm&f|KK^0pOKevu-xTX|mdGG;~iach$MUNz>X9=I<aNfosRe)s2#
zSB6g92<&?E=810S0qrTaV_m~_uZ<diayC{=hQJ<G^XCCop4)r-lloc=1(ab3+K)4n
zrO6c*`cY5rIK^A|LcW*_)cqs7rWGwk@yfq1&g<OX<A+pv5+))JT#=qgP_a1bgAwM;
zua?YBdTGEtOMbXB`WicyB^P@B`hCZH*%|hyV{MXRd^6`+h-p3X>uyXUBaZ4$Fm>`G
zjqIFXwlEunnZ(`$Z7UbUm9qJ&mHmwYu<!UDHld>E+7#&WizN3R=T~AN<~`5{FnMFC
z1h5qq^_P_QZrp+Dvn#EDJ~J5$HSOqGP0@{BOqohShcAyAm7^W^k9E~MW!zRi?Vz!n
zObV<_IxKwyF9|3c|CD7bC7dm2Kkp?Q$)AL1OM=r0eI}j8FD~S;JEpRVE;QhQ1{)6!
zQf}d0YF9eh#}O?YUUJ^uyqerkP$|r%Ug&m*BqKd#HGZ7YE^GxlgbCD<<g%^JHMb_z
z-+Ibl`xB^?#Y*YAV*~e7b82Ha1D`$uvoCX;XFGpCUH``r*`F&%>o$(EoY08KHn$Jt
zqi#=0W%(br+UTH3sOF!UV!z5xvPGCT!`&fO*AbI2s~YEHhLsseGc>f;zjDo-shK|=
zA{KT|XmVtgM(Pa=1!o)bP2)lUF*Y?PXivY7Xu8RgsOb?21&n2v7RwN&7Ue>2)1^F8
zeGR;gR+5rYN|^e!(fqk<SKWg4b#dxGy8)|n38^dkgO$pt%+OS@Wl8oLVk&=Afz@w(
z!fuJ0fbt?KCz2}V%4KGdRB(e0@E8fUv)CiyY$}r9L9nZ5YtT8GpsnZ_H|Xq-HrD+e
znUp}+HMjikY=62CEIEc12EUY!ZchY2(ZJ$f)kJNORE*SD+M-&WyU*KAZ8vh1pK-(W
zMgjHWcysin=}q5<A*=`j`Dw9^)uTAqZ{B{vU})+*f#T~%K=k6lQuIx3II0@j5%J5T
zN^Ixq`d;(JK39@cgto_cUbGN~)T8NTTi?YE{ho%njX_^nqb6i*BR!%~1pEM<Q;f0@
z+Hs5wQ`p$_V45C6uw7+!U#;hbHD)((kyKS+`(B$R1tPtt;HM2G6m>cwB5jH!jT~U4
z3VXUl+X{>}SkZW3YUP&~5E*>flfC`uG(Bon??F1Jv?QP|MW#0fmMc$qW~NuU2Cy$(
z_OW!850ukX!y4Y1ANQ?r+b&WkuoSL~wamu6NiA|XSyaz#-ftpJ*{Koepx3nk4$e~H
zro3m`(c7rcK2(O%S9_2bpP8{rO9QA&A`96^adb@^M%IzC3VO6V<kNkNeyYIwu@%iN
z;cCt7hRoNDGW!k$mD&ON$H&pVXiqK6Z_m%4sU_xJHkXB{fsPY*D{Cz)p-CU46v+JR
z<N8UMcswCXABUGnI34EZKJhq18to7Y6Mb!Ga;1pDq9oiiLSwishqIVi^253-<|4D|
z*2Bp$@D|ieWp#<AJ@8~_AywjykIJLHjvlNng0V`-Sik7mR#fhj!R5k9K9P4zznHjG
zRMBpZu6oQqx2Y=RV^_caI$P3qVU9)IMV2UO-RYO|Gr0~<(3Fm!O!o#K3ABD~UYHAp
zKy{ESqN*E!{I~B6d8lp366SokkXZ8aCb(&Sx}piCj7eM6J8b~TCM+%#U2M=oJz2Kb
zhqc$CGO;CHZvkV#h{ppakve7^-j<<%;TO%;;jQ7UZQCl<<hFEZ=6XrG@nM>`-`Ms?
zI@FM7h@(%=JP(uNPOUjt7a($+xc)pFx2-<&`~E+j^jt8^6{$2|5_JY4NFBBE69#t=
z+*V)1eSnTj-EK82u}fE3n^i^}!MgDAsT*s5IdRNCDTkSsY91%C2}sXu-rhmEcRZXw
zpT1TNjV^qtsDHemzxlmlgK{gqn_W-dcs3u`9;&YM03s<^kTHG_@2x)&goilKEy*(&
z@MCeQNQY!v6L|Lumbl&5vv8$^Lj^g;OJF;FcPvqSNX?#DK$nM=@gmcX_2Rx#l22vM
z1;djgw6zPfM+L`a!Po$ovmjhk;jKc|)WB7*qZTTzr+Yyc{>-fTF6VXeIz>UJ@Fe+-
zvXeDj%uIhobK9Hem;H`QN0oj!3k<s|>~<B>p(4`i&EB1}LLM@qJ;y~H|F~&_srBUc
zd&{*Jq3b=!Xn!hqQ>XDwgeF&3NUm<-6*Ygr)e6erH2%I8b7yP-)gBw@J$~)7!$gTQ
z7lt2!zG&`X?TyN7GA!!Itn>6QO$?SC3U9Fuc~aw|e$>#OqP<G*4_%{OiwHo-iRa~e
zbMD@!YhLKi+x>cHBkONirwU4bKCk1=uiLpJ$#wZrDrqU22e8;sy3S*ZnT3`jU8aNL
z9v$f}uCFf2BPCvm+-<bp6UkLd9e&)ULhQFJ)u&RQScQH!?&zMz2=YgmMDvG>i!G)f
z$9O29`J^gz={Kwz@h7Mveg9>3*8<<K*&59m>$~IGQ4aTt);`5spDk?-7a`m0qeI?D
zyn(QymH16GxTGW^lWIAEg4dtMYoBJ@Jt)k5Z!h<FILq#<KLm?^#NMgX<XW+wt&0YT
z-lGZ;D|)?peSPYEkvx`0%EaV>b6I8MML17B`qRCUrq5iOsl*mP9CT)Um!d;~jfrt)
zsw#m*R@c0qjTx$p{P8tIu(5#V*KO)J2`$$?K_uHdLFBFWaAAHZ)w{phmsC6cXTBW$
z94l&0442Ib-&yb@_#+Daa9IgO!Y4ZQ)NDA`497d%Ej5hmkPdPmqoJt%JqGnJnUhb5
zllz-D<-tCVnX-6q<VauCw!&&@I@&yveJ94H%M-TH(}*mr<CGt_SN$&tqPhGmrN}|W
z&lo^q*hz`Oso66?V0_a!zv;^`v}T8Hlht#kjM}D%tJA5%`=aY$w&4%ivmR~Kom#$9
z_St_-o6N6LP5T~Zi-I9fUgGnu)}d!b;dcEDG`8&SZG2{}_SnCy&r)~mZ4)&ATEN#x
zTy7;<xTKns=2fJtrG^HX9}F%eXU<3W-#njY#@?ChBz`dXrCQ<3OdK9tqfKYdMK8z0
zsxJFNNgGE*T6;qwX-oW>nb<)aQk+P<myM$=AmDpZ;Pk4*@%wGPv;wr)BMEaW_4Cf_
z2w<z4skI*MTN6H4Rm#bA3ZU{@_e1VoF+2=NSUMj<DcqopHpuAWSpV3&jzraFD<JcP
z)DxqY*0eb46c4m~{XM0*7TDKx+@(ELhhwG#D=<=&@tPK8H^MR|jVAX!e!;_Hp6-T+
z@7u7gbfO&U9`RU%H>oFHUt?&pWQ9-5XrA+~r54cqRf`QtK{jrx^+HTzdVD^fb8m91
zy|p`T)GL~(*zuAL7=Cz;Xg}k*6-`ZS<G+y1hmF%j-%N+cz;UIH@r57T8OTpB)5v&$
zH5*kI^QgQjZ8Envqed?96=>?D3vcWJm+&`j(B%p`AZCQW+PJNMrIap8F!YzRNn;^3
z#uzkX?oCXs7tRQ?mHtor$%qbXuLmfFVVyj2rl=Ae61zG<2hNkcfQalSTQSWgpt`Ev
z;{|=qA@yv%WrM&f%Anas^MfH<1CywK?H|Ym;cLdxbok6X?9L++!lMz_mE;K)tYHos
zO^1cBtiCemIiD6^RK}fCmpaURS!kRQ>!TS7Irjn*^r9U-^!*ihjKclf47A8Om07@m
zLfC?f%;nd!5wr-a4D|zU2*W!&c<ZMVlSs@WyFfswtu&Ybq&Y7+{WdpQP$jGq*c2RA
z$q!%62)z%RQxy>ho7R=az_N3PBhk5&fR{m0OQSY3%&&bPtPhWXf{HC!Cwzz<<QW)=
z!vo=oBia7t1p25vVmdzpIR+)lPtMNK8<JKcKLMNZ4ch9c{8!mdo$1Z^6xl*urIrAa
zR#P*kK`lWT5lHJ-k!x{!{}c&r_JRLao=nRB_GR2SrE^hb;(A>Mc{4>7=<M8-QN)a3
zS(PB?X<!U>5con*ioEBU>q+;qojt+3YEY#^SG>AaJPEzRJ4SGM?#f;Xp|Rghi50zt
zIFC5((s;l5E2v1+-&R7aw774>IK>u}dRyu)mD9)}!;90@1BIA~`H>c4_V3G+HO4;R
zJ2)yRV?Ho5Jh*C^xu?|I_(Q6qJtud{>-UEb^*Vzd+`72|VwlA`buu{R;-pyn8#M5`
zA|6kn0;UxfMjP0ZZ0UrfU?W7BlkI4rq~?FX7bz>16u%oT(<r;n4S6c$?0Uh&2vUoH
z(*LQ4ilk0qzuzse**Yf2|7BUGgWq_BW#vjPRyHo88~}b48CTga@&cwhB3Soq(0$y^
zkkYX-kP-`@NbGA;X1Smk_BB48%oD>>!<9JitXnFq^D0a|YI*C|4{g^{fgFNDu_!8;
zL|~dDXrO2dZUqrv{!hISg0+>>?_26J_NVexB!+M%1H|OjP-24lXkhU0XZh^0`%qti
ztD=Z}`cg2GeCqOYGR~lhcEPR~JXF|UQNhG0qG+1JFh3xGIWA>wm0s6hJMQ{hSJGvb
zoy+p>OI&|XpU--_{GPX+ulU?OKUzEDT$KKsC6~TOo8d9$y3abnBZgT^xFMb_&Hu0;
z6Uq=63;c65Nzs1mm~K==vyo3WAMyY{%lGfEWZ+!@xbga_(<i4bMQoEBD6auE|8~Th
zAjM<KMz{cH`M?34%u&#=bA}zkdc#KF!s$Q)-w(t2w6VwN)8D7%5VtbNOc129gMp;Y
zkLO?Ob2H0)2J(w`qclsKi(@F}^?AXidRGfxOM8Y{o7j_bp`RA&3by`pQu&jdv}{Gf
z7c{3L84r8w!L83o_*1<IEJnz;KwaOHo6qNkoY<x>(58xZEK_V@&y^znn-3nsgh6(0
zkW!X$$yRtYPATmw0y_s_^FF<9WsU}YQCj2+u*wG4J)@(C?;v|&ujS*pE0soFKkxzP
zHuAh)*GRN5gX@WYtsOj!N{wEX+^;J*9HVd^={;zJ69djG=i>?jGG$FL%-cH1=x{Td
z@DRi+$1E94;9YJTTA1qOzFxSYEIFiqFGa-d${?<AkVRgGad3}|mr|z`bnj-?4S+Eu
zTjZL33xIwIp>OZ)tv(lN(}hEl6}7X+8N!7|vgd2_b8@;-;go(PEe<RDPf^DFvNfYo
z%xvmEP<3wA5D4rhc#rH*Xr0s8VW?}NRdPo{jAx6*jK)K)Z-YM2t=sAnI~Y`2Xn+vm
zGzVnX2Kon(89u`s;U6^*Z4&=xxDwJJx_mnoiq8|LXKIq>*97T$jm;^e1heC;C{76h
zVY5q7(OF;PXZN*jc-pO2FH|oLM~lMKU_q4<<cvtEW)A}XFa_FNl5HM7M>-?U2F&<e
zHcI%jO&+Dg=7P?D@<G<@r+4Jr1}emH5{9qyeQ}NFgLZDQfC^ywhc=MgbymvY(V$}l
z1)9f8m8BUzMCr=V<>5jH9&Jjc;oQM^GM8GwZ#Txg*fEx^9(X`66ar#?GD53w9|G3l
z<y3x^ig4^3M^zKO!eWvMN0~Y`oR5A})Asdl^WTxZkVl@O6~si6YuxpHem{QbAGl*R
z#RWV%givHW{<=VfoRp9ppI!tD<OU1XO+j6V8FX61dVP#3sJL>CNdX<riUO-yZP<S>
zJ`jT=!@<zMLLt5{Hk9fnS-V*keZ#XJ_%~gJ#_o&WaE}p7x9_fAbMF{MWPEuN$A9=v
zQ(|=fQk}NiMD{SN6sO>Q;uY9|fvtN;aJb1wQDlQ;6Qaw^YUU3LBH;v4{z)s<*$XqZ
z7S)PvEYS>R3o*phXcc0EsYFoF?HF=@OxZf#dcuMjwLwr9O^UmHHb0xX=G=x0trH%X
zhiba88HY8L2LQ#79F513O^4a7BCkE!e<GqNb`Uyh3GSi^A%hv?&(pl&Ry=VWsAHwo
zJGen}%{#_OIE4?nvU-}Gd_qS>{Na=<(sRBfA>E;ccj#Hzmj=X+6}P<S{j%F^lsn(0
z*<ohGhTD8vJ9UArS*L|QCKbaRL8<INc2dF2CQza5m81oV2BFxRvGkg;NKi^YZEX+c
zL8!-Q{A5c50^Y#WmH-JY4J;o!2(;R6jy|QN7p5G}zuaew9-ZN;iXI`%zkX>5KO6jV
z<?s@ps1ou7R&C_wJ&WG^Dfpm)Y3%d-GcSA(uM<&HJt&iGOko(J93ercrdOuzPqtKC
zZgoNVt+l2MD+&bcrI?JP`d2J@%&@c!hF&u$Sr)_bzw@56m2Xu0jn>C)x|5y!*6P^F
z#L9cXR>+m3AhAZ?KODj5dt^G#*=8Ct8Zz9Jnr)Yhf12DV|3gl&0J68`Jo5Cn)lw#U
z<>3i-C@tfom7gmpB4myRn|A2o4v%pt;TG~fR#s^nT@~p`z*6A(5tICJ#p6YPOD^)U
zLJ<G}UZ+3ji)bTy17RV>b1K6Y?7UV;{8nE<aL+U1;qIBqq_Z3=ksUn{FQI-5q36>g
zGa4SC7~7j%<OS@tq0IETPQ149u`T|pBI#>L=W%^X3V+M>qhj&H3_+S`Wh{B5>C&vd
zSW^Qn8DIWSbWt5ize;I32|1!~h^2VLP4@O%yorHjoL2#253QIL6HbBWCNlJ7?-TmY
z2^am67XxM~pK656rK-Re>QCOGa2Nyn()>MhPs#Vy$!wj^%)92y=*BV^^8!a`(is`%
zOGpU~M~=W+<U?-6_VgO{U?}xi@Z8pJ1Vmd!Z86t1&RX%m3>XtyigU6wk-~z4!vd;U
zDYw43LC82Y>%;FsS3JUBZnu%~Wu)_*uM*$PV$bhmRmkF`z4ziL(VqPUYpaYwO0YtO
z78FKk^)?w!)ClNIA&8W@OWY<0OzDEJzAWhe2FLGy9W;=5_m~H4j|SQLVe>qn%TK<E
zxf@{})R|dWq;1dxMv6#cIL!)4D9er>8H%Qys)Y0cNq+S0C!?fhtuxSbCjRH_6hv3t
zW#D-vHFidZ3aS8FT3WsPsq4(r<nK2{jhtvPDTx7iM`YSVeB-mdabaUfoHNM${)EF@
zWy4@S_=$c1>@<w9UeGJS?-gIn>*XToFKqr5w>JIjnk&z5rdvot5g~bHfyx7xY^vnB
zVxnBWEjjVnpJHDw2-B(~lDsD3h(a?}7MnP7KeQqn8X#Zxb|gmMuB+tJj*H|D9zpcC
z>qPQw>0&u}oibaBJ6crO1ag!<uAAsHg7x)dy=*STo)>519q!^2xMCQPt7uggCv$Gq
zgGuCwPVtRe<YI3SKim)T6J*-HfBt0WJoKFC+H(h~bpYdD`B7Aml2Hj39xHkMz4Mv<
zsf8R#vDO{_C-8`IzXu|?5r<66!sJ<A{LLC4FJyak6(vzuu7EFd#=a*0EKiig!hpg{
zyf*Hs^MXz4n%TcqslDb8!-$Ss9C7FGyA9e&kE_oBahrN~NMCXu>$Jox$o!gmq7*nI
zjECuv5X!(u@Ie&cn;8_e^%v|)Lo9I6EdALgha@M*Dt&Bu>D7;d)T=jz*UMk@haqO}
zsjteI7v4BD^oS5%UGZ9db}?-}aHg3y*Sh!J2In1c=6}6rmQlUJ@?jAatP~i#kl%gd
znmA*^H*<#XWDNej)*W}ijspRSvM$+`jGGxXoru3o$`Wthj&6M;&E^k(doIpXjT0j~
zo141LP0N0G!b$dFOE#2m*6d#r9KuNH5Hii-vlem5TH#q(x&ot)?eO5nE8#+8F(bln
z2NFE9-q<uM(LRXa(q1i2&0g=i4)}-9%5A}aic1RB!DUHoPL)U3kzUD_=itpzXvfjC
zyZY(W<lH$8$>3$LIUa;N6Q{aORrzYssVCPgG?v=ksk#erR3Hk?e6m?AH_gF`u2uSi
zAoeO&mVwWxB{PsK{|Os+k{!qVCvh!^+bZ~<&0tV~da{%LosU0w$iaff`lHFc;7$~t
zz8)vA(8kuP>V2Fg`(1XZc;F>aW5k)-j2_9z93=k|Y4Qom?PL4`ezWbO;i+QEjEO!+
zEvrC8Z>hHrb^}^3WL`V&G`6gvZa?y};G}B0V+T)G<%7O0(<<+jw8o2$!RqMZI!Aj2
z<L>GA--E#3x~Gvc#^)6h|FEhhbeOA(|2|A$@-gXq^FpLqVXLw-fxI>0p{aB(4gS>n
z<<SAs`DyqP%^E#b?>8Z>iard#_vkVGp-1~S>XSO)*j0SE7JSzpng2zE>81bcxw#8-
zz7`5S_!zTORl#s>+cftEiO<1XKi4k%b$LkvjTkVxiUjZwNT%S1$$Xb86-1T`qw^d0
zLlr#Oo}=VF4&wGBVEb-7gn<qd1FB)u0LL-MxC@$JC^iX0#(eQ~J$eyb&wiIEwK9$`
zKk9GpiR(Kq6D{f|0fNg93)A<n_?~+ZKBceEDRVN$6)xgpfbRov++aUTY-ae=1jx@3
z=VrN1J)vk=(Z*Qqi<nX{IIcUDVpP$%@Uqx>6?h0HE#fW&Wh15?`p-chF_ev;`>bab
z!*)Gc$dEW<y~L-)$dxoCSMfXnPwS(m$D0OYP`&s=4Z|r*$uo;t)FRBF?zv?JBrrry
zNe8C9;YW@?%CI<Y!863)LPyo4C{|31Du=g}GHB%K0K|$MjfL=-n?IC)2v%dZLp?uh
zHuAEz7zW7^hMjf>pSIVtES7IOE#-4|GG)(}BZ%y7Q|!VT;PPbL@qV#4H_0k_khoyh
zgQ1(kRpjNON88l<D~>cc1mZ0+e^$-WI6xcBorEU}XPnuEEY!G`<KbF*=d9E}vO)7L
zY;}}3_5WT!Z5Zzn+AX~&o06Y7;67A{SqatZ0j<LrFXD=3uM{qzwAr=^;I|O;7MAEA
zJG0keYrBlL$kVWm>A-51uz6&rn$3rAkRqsk!`PtUmpt>Zi+e)bS_SO17}pJ}l@%FN
zv41*4W-B5>xS@n_ZT_Vr1qp33_`;3uT)7Gx%WSbul((@c^lN**Gsq_EPneuK4#$#x
zU0}2|LP*-$j_t|sN=F&<G_(5UdGd>1ql-O6?6Ye&vlgw{d0<NQBt!hEt38D%D1ew4
z1_mrhkP*V|l>ESn`WgaMNDvtr;{W4EASrUZ^KBFeg96j=vQw@eWjCu|J=N#?B^tj-
z;{P4}C@!edq;X99FxAh`8OH{|bl!=`%dVl>L(YKjqqVb%WF;(^_urk)X3{wQE&owL
zG8|}Cyf*T#>#h(m)UxJg=)d#723R%?{WbAFZ&k^_S{8W-qwb1!ANs=szlqXcC<j!D
zee~!<cM}Y?jWkB4*%a$pyInx-7c7RD4#r&)aE_RF-Ghigw2ihye{`7-KtYC7&JeDV
zsK*ag^iWnrJBDdTFC5IzKVs987NqG@tJe-ywu)!3OF}^&YTir3t$o3QfCzN_6F?n5
zjsYJ^9m>ai)D1Gl;|NR<>>W(8gYKsaK!Vh!a3Z?m2!JD@TRh)ARlQkEHqTu1L%34-
zWIP!3nFJ$3YL$+;g@OH<VFY4gKru_GO(-=a|0&6hc|TA8Ft0wOaNEYf4wy>d?4qd9
zr|!+n06Cue4c)tbm0;-r>`)`180$F?x(~pZoZjaTP6XKsD4qol_xvbDRuMupP_=cp
zx=@lB7hv^tS3^8QWoG?U=%0uXSA-g-4zuQgxBHit{XEa`vRMGo&BDO03+aV%{9|*#
zgdcUVu$M^e$x*IZ-_Skp_-r2SQ}XF`5}i^lG;PwrZ7VyXpL68hjKutiiZ=cc6|K9s
zs>faT<k!4<@0b>cho{im-o)4T<)kZfn?<MN`M;^&#|M?42mB@s6b|t@R3T&jvFre1
zMW~;zlR-sch5u*Qfm))1=#mVnod=r8=^!w}&29uW64NVk0m&=!sA7SO@|tDGs<Kw6
z7XN*=3+FSq#bspmT(5t%G4^&|kE^J;IG=jrMk-5z8^>+`0b47&!NT|Cg6ONxq{Vi-
z1*XD0*x0ZaA@1B4#ww>-?_BCM7hc=K*{`o+7mHZpWJH@rn#9SVOS;*N4&m|mv>jWl
z`I2nT>A^GeUTsKHUBNc&l?kMI3mL=_&vx$!FDM0NN?MGaE7fw#a(&HcvA1o`w{|~c
z7xAKRCk_v{NR0m{P74?&W#+GQ8`=q$+=c?W7Ycy-0d%Mv1{%7%2K=RU-yJ>)($z_X
z40K3#yX*wSiNPxj-RBV`wohq4!$(%0biLMpZycu&3nvU4rPDbMSGQ0B6rKVvU>EP>
z7GmN3V42YG;0D}-@*uE8)JSw;XZ)e>UlQ~K!~#Je3T{IMhgV>CTv4T!1UyJCDSY4y
z%G&L=?uyUze8=x{&lex0{3CSpJw)S0#89JXw8zHO%_@Jf6$(Dt3}~VKu2r2yz#Ab_
zmTmjUiPP^Ska`$H67V%2jxriFKCZ|1Co4?NYl#FAM<^F+Fpbq}f_f|`z;I?bUw|4f
zDF&Q|6m5Y<3tud2V@<cD;Y-qT!1JViRcx=n4<)I)_#bb}XkV4xS@h|Kb1yS4%u*Ig
zj^-;zg5iM2H;D>e&;&$PoS?5iXd@bNmV`-s3kM0>K>&p<@~)|ABXeV7GdB)j2&6rk
zwbOXQx))T>;lr}!_KL6eVaRI|>T5$=u3yVr))6?m)v4YUbbaKm+luT?$_S3BS-I__
zP94l;9U=5<-3G~FV*~}!|AP@6J)y!2v?TW&RlgEfoW5CYoxst{jgM%$jSEn_yo~Mg
zi`-}LyRd+HIH-?x$X@ynL;^l*#V(gHM&2$ayjzWJSHX?Uu4#YBB*g_OJT|?wrQsm<
zqSzoVqUcl9fByFszjUbat;xUUpTdFde{944+pm@_IfgtD^+iL}iML2A5V8f-@eNGB
z*dYL0P5t%|_wV><zd=~H>LBk!^ht#JiD$QKMO1OC^xe7<W5KwCe*4MPZn3XLNtkyT
z`p3@if%}Z@_@Arvux>gmJQT~zyYiJ`5b;>J`uHcRRc<SB2LZw$HE=Ls_Kmaw)|c<=
zQPv!)?z~4*u}<$~W!WxEPuGUO8WUqNw~NWDW+cL=YB&Fh{18t5Y)SM$Omvu(F|Zq~
zfqS?+u3iF_jCvsjRa4I1IfCbkg-Ql9e(MWCOY)j|4IkI*bAuA@b@$EJ-nt`h65jx~
z&Ciy*GLhYIU|L{Gy9H`*932K^?S+2E8p<-I_77mk?tITR0!x7Sq4*BQ^0Z@A?b+4r
z-pN!BR=Ml+tLzRR(3*kP<RFh#*%QZSQ_=z38v;=**;#pR-QM>=8ZvDsk)fd=8cRs7
zM9ApPLjZ=5$x=i)gf<EU(%HNmEisRhcGQ(SS$uP@%;4%BTQ$OyGr^=5?~iP0<F1A9
zyA&;~4is}7bNV`Zxy?0Mxq^t-kXoIRQ$fr#vW^hah%W|UCM@NJHR5`hg3iky=$zqv
z{%jNl6(r>*%2d@N4*IKa#WPjjFEEmB0ldgT0CIAVH3eKwbqCrXY!jUF66p)ngW3N;
zs#R*uI(K_?agBS}jU?S$CSAT!F@+SFKFbt`?(-<!?jjPto8iFY8=x`=#>@8~!U~(P
zoI@cPV?OguJXkoPG6zPI01Wmm*EoV02KtiQ@JeLhRE)d+oDWBoNa{ywnX+0n$V5^%
zEEd39u!sivY0+|&8{P+obEV7xhmhmT7s7`-osTz@z#c*XhB79NrMS@p@q;?OYwK0J
zoE8Npb;n75j{)oaD5u8vI?#y|TKb<N#-EER+Q<%=gU!{vAY3cA=s4fsV$s-#?KaMm
zG2)*O{)Z<w2=4mZ{hhR`q+rJSg%p$?+1@h}fynnhp>%PKhB6<xFG&WO;hcqB(AmBD
zkOH9)fenHIJiP_9c71${PY)T_%3As$DobFK=CTc?G)aF9>X|WNart5wef~I+0sh3;
zTEyHvGUTp&e@?GP8wnipdUdny3RBKm=f_h-1qr?)E50?KLm|oV9{LK=_$Qo)Jr`Pz
zKZnJd<N4>zC$j|8Ah_ERTxiufyZj4OqawYl8~#HAk_xj+c*p;RdrAl<Tu1;1p<IM0
z+H!FAg+#s|8KtW}HPi`<b#6XJ3R*HUfC8f$?&Oe|`qWhqeVbXV{C!VXmU3iRfQtNc
zRsi$(_Zzv~3xd-<umkbpBKJW2Jx$oq2id9pxAPxvdzlMD(ZA_+I*`IvJxe4dz45DU
zw^#2oD%oXdv?!oT#1vrE+mL~kVjvQ6f}SsBx+|<?DAzrRD*vtrXE}_PIbyzLRfdG@
zL(rda2Hi^hA^1GDi1y_aIFJ7ZMjg`fH*pu}1WIxK&wCQUIAqX0OJ_ShPWPZWx`I1B
z>QN)PaNg^FHyk?%ayQ%ohUNbBJ}1^CVm(tO=4oQ&Jq+8u3jhZJceugy#TD}9$UpuU
zJt(yu1HuXf6tIY$Jl3GUvmT_2KS8XqBX){Qk3B<eOyk+{D+e0iNqM-@6ABMI&JbxE
zdS%ylm;G?G8|lKR;<rkuh;1?+drx?b&QN9jJ8=1B_sC<SjZnw=7?Fy-`g7f3wGftQ
z2=$1Kvxno+7Ufm)_x5ZQES-J%Z~?I*98A4Ltq*O&d)GTZ;=+ulDn9ZQ`g!2fF2OhC
zIEWeJMU#UgZ6u!XSRVc^`UO~^2;pzAI?jjLZXnhRp;w%-EKn7Qk8d8tp~@(P|A6iR
zA2ju}LXMJ!r7OT(k0$leK;&54*VXrWitST<YH{rCAUNmn-5XWA&9(E}j~u;X1NmCc
z=2U0>!3v&|hdR@sXivEq1TgxRaDD|70k%ef=BdmHhK`d8_nfl^jaPd($#`J7h7vJ?
zPmL_GLv+c5hIW|OFI+_(!owC21$MN^g;WI)Q5+IRce~wkf(G+er0OBS4s#g-EW+(8
z37Gf`EcO%gOGG)#e1N{dl2mg?7=Nt1w04X_X@%7|S`=1>_uIqg(q)@s#1elXKP2o^
zF+b*<NIY;Iwo4Ix^ndQE)B=3TGAv&99)cb3hO}tGy|#a&cvO;HRran)4z2wi80fJ3
z^{`rq(Sy{ff96k)A6plxTi(jmu-m*F>&(f$z9fK34goP36hy2@3Rdw|$}E(Ottx&E
zFHrXI--!$%W~|`2OAC4HrJ(+~LTAF8ua93htTLvP04yXjqQv>ufgn@02>AJJM;R9J
z$BIZRf7J5~kNgRR4a^#<o$^LEgPwl($n#JzzBxJZOj(tr3lGOScfpt9e{i9AgN}7;
zaG_fH23iD{@}XUpCt(+maPz;YV=VPHtp`ucFbDJEaQo$2GX4u5gmvWH_YCeEd)c$r
zWyQVH<b!-{Ajmd_XgFheq;)IZ@i}YpMH0EyjkwtfOjzi9g}ojzA^jMmnDF+$4uR%z
zEM$_^Pe=Oq0VAg?-1XzmOt3f)Bv4>9_WVFTQqMKqGwHnsn1T-<R0DvNCXgn@Up4g-
zInsv%9&9lx30^Bv&pl_4&tH&uw_pFfzR1?`KE}|^$LTmxNls@sMcNEDigxYiZ<>~O
zg}l-X)*5xQ$B<|3pIn6(I&)6Oqq2KPR^YSYnwHfKzB0j7Rvi=rai-jd9!ZLu;Fx-`
zT!(f#@9#PvUj_@B-oV7OycYu!P=~zHt0wvPDVEeU=B6d;IT<wkVb1>1r$m2P{k`iY
z+IH=DWBq}e4-1n0PoI<+AbKWL0dqrNcRygeOL@Zx2HFQlK}X)+@``w)Frd5Z(h!^{
zY%11&^{g@H3)8#cNN7fn%?s&*4(1h=ck)h<TdgX!^g5<7G^)BujfRP3Vd?N!^`(nX
z#uN5~f#3@=yn#6VU@*%89JEgTq4y7u&oZV8gCeoRBn_tXzBum9+{V|K1NukX!{Sli
z=Bv`eY5w0ox#2^HGtm%ipz3rf>n?APZ{x#)0^%&w;YtezZVT_bmlFB1+wC5n*Y0PD
z-~ywYifz;hx`F7BjdX-5ZzJp`S|(?i5{K+k4SsIc!70)fD0_Dslvsi0C9hK){+4=S
zb{Xn##~58XIp+OGLxSx9j3|&PATyaNYnt5n;{Mre7I2Ugmz_4Vw(#ZOj_*tRg8MnX
z?-)TEo4vePoI1>C*l;50F-5Zq$%R{Bd+V?RljP^@74cDvqu<i3H4+&qjF;>P`J3NS
z<qe1YP3BdcFZ@wS9CNe}dUy<s9S(i+agMaDwv+9*Yx)8gvUqFTE{WP7W=`m_+?NTc
zAy?=eoQ+ou>IC%@{w&MMFdaH|C1PWh`Q{ug75FsZkqob7f@(xw|JdqhPH4H7@?67d
zlT@M%3Es2|#9-02)Dupfa44z4lnTx#WKfznKe5tG|3E~#!VQ!`$6MsxCf@a3ku})6
ze`b7HK4VL=yOd1ku0;D(gSRYKc+YSEmYO5$l^~vSfraY(tsH0af!WHvou;SQeUtyM
zJ@iW6c~XvXm8vfOvfQ!p>N?|1XNbz1Kr;{Ft_)??_~JPDupAmHhMmp}{t`Vw*Wse(
zUuBT$GHr!|wA$;fk#jE-MH{bt$nxYzWDuumhfNsWSm`E1aDFjyeQwDn3vJ*W*<IAh
z5wHyf^YwtpS2-jiflz?hZgkx_cVF8(2!Wla=b<^qaViU%*N#SL*RagPqgBawlrvIQ
z@9a(GspDAn9X4J8m#<%zC0V-3wZw<UNGQJsHR{se;UUTW6|&$YKWAuJX(91(;z=Al
ztBulO=jUs*+)r@oYNp)?Nm1!29A&}#YUOK09@heuzE$rvA||Ef=ro)OTu<7c;2P4F
zRv?JIO5TAF^g|9PK@v(0+IdJFQi`AWXg!3K8(Y_hM8>5a$aO|~n534aKpTq`yaPY2
zJ~vpQNC{Eh!@s@Yjato^r|PvU<KX^%)pIOJ^HMNdpaIw@OuDr{8!g4C;;(5fn`DFM
z&vTkgj!w)yjTbnf)Qx+W={EUzUzhUhvaLTvNl(0pAlyq6sxU-P9Hisl&)n8G?mfKJ
zz-a|3LZ04iLJNjV#Wz+dIqulld0_B81Sk5PomFLt`jepeS0>mzm>ZPbW93v~GSs}H
zJX96pzy6m91dGg}UZCGoCc$q{&H@J1A{v_#Y2EI`%JnVhxk~X<^955J)vU6tJp^MU
znEMyKM_iX4NBP$_S$*054EI`J_x*z02ElZegYgz&KBP6lR-gx3ue_+Pd5%2%2S1@}
z-(#5!rTs;<qL-156y^}tW+^-Wc4x`;ibiWUND*+^c(SC3Z=tkAR~FinD8laC_o`i?
z&tV~$1HWI6mQBWpuv~V|{wKHc4|T`M$VTFqP6mr!<oMJPkG`1s7PJ51uywbQ>a9yl
z9@_57lh{t+C!+mQCV|_x{!QeX!l>ObC4Uhw{gu3ozdjwiH;DhUmXFD4%99%b;E0bl
zcQG1e*a&%<_=4MWY2_9pf%5xJKzCkMvk66<Wb*k84joZ{SW@oY#@sF*brXjIY^u86
zU5qQwDxLdKG*&BpT8jcFFuCo(*8Y+R=E({;#f<%gi)&R~u@kCeW1o9etsg+dG<;9!
zFwwpK>pJknnpYa8B{uyoRcFbW`Y2$hjuauO9(`rV0!+V2m8kPNBPR}&#O)@0Tv7s$
zk6`C@wp0`?O`eB<K!j5AYZDwjI`*p5M4DrM>LC`Ep?_sF!99EOU+rzumlXye5B6}v
zji6bd8f7wuSZZ_k#Q&-GEs*Nw>Xlh)lQX&)y?`CDiM2NI7i`7aPn8oJo)wM8M%eT@
zCXlM~l6CV+$qUcu+x{k5mDVrl{Jr1CMb?=Av>8x_b5#fGj|^{Uj)|-jbnZSte$Mzp
z;m=BpoL;(azf!=UaINzP!9%_ON*FDg!svw)bFlZgc1G^4%eVc8l3=ZB#j-a^!Xp}J
zugTHkNWgx{&|7KV@kf+#D6&@rGBN>5f>^}FZXamQ@R+3Cw~mvglC*=BfbySWDD^u+
zUyCdzD#R#aAa;n(<lIKym2EJg2U6#};vuKvcqY`;x@rqZ7k+B%NGJa)PL{AUotqt9
ztX%=G<d8Gjz_r#J94lrrQ!H=*h2{+QlHxtULL?JRJ`mJ4h;0Nr=A)0>{f%IDE^dFI
zKC>3(KdW`WAD(miwQ3BA_5p-<zG;m)R)V3v=Z?J-d>fbp!ooc_JFmI*&<TG>k-hI<
zRn=CIdBXP<!ZU^kx1=*D(+5lGjreRFduPsZT{mL2v*Ra>Njp}a>^cpV6cUL@LiuVa
zl8*t<&D`K#|7_RyErFKfL;r*+3SE=Xl#iJ@I^(LgiQlahUNkwy^*X?!XLvFEaafOL
zvW!&&W+mPG;ZOc;kV*H{_+8ULkAWTPs7Q;V|7X`COb7#ph8&m-wmZy)`v~pmz<9jN
z`Su^<Y;zM)?}N)}Vign;+ff>>zLJRy-w{1)+h;IC7VynuEj!ytKepQ`m`q-#zc$%l
zzsbgyv&5{?n1B8o;+p|r5`>jcu8$0aF?hKBi8CK`pYdHn6o$?F8_sBlPK-I)AI^QK
z9J!7}w5A$$aUyp`$4aoZEFO{FI*l<lQVSZwGX&N#1iRf;se|lu%2~V4p0}W>Kt((+
z_%+s+)E_@^nE)ZUS(bZ$DC94aJZH?=il!2Na#{Hn5N{$pJ0LU1rCRVKx`eh8p>yNY
zPK6|lT<#ZN3594%6oeZaD&s4^b$?)R5XqHFX(r~J@$2mVX1)^OEXt+?B$D8HYXt)R
zY^+$ugN%g`J396wC%yTLNDH#~a@5F$B$2W6VDSC7=vaYKw?g;<oOociE0OovQemk|
zc2V;M_Zw;txl3~e-R$o@H`!m6uO;(YSP<Mpk6eITk8CM3Q}`D!$bEJZjU49L$I{M4
zYVxLc+F)A+SkoYx5<$p;41U^Zu3fZ&?8W`<AdW!uz}Hy2lT>|*s>mQA{+~#;8`&ai
z3oUjOPd=EQ2d}GaO&(yiG74Xm%~e|`;Ej5u$n7|dp4NDT;hDmHw#E_9O4yqjN{_mr
zQ*1aIWHK-D(6{as@5srnMn5i`igrkPNR#or9Hio?`8Q%TQ==n;nKm?I_kN%(KvR)7
zJKCEnoiV5ZEB)#kd<SMb`EAPl!ZamI1N#svC&j)QkgmX=Zhq%M!fGdB1Q>`urRvQ9
znn?s6=AIG|!kLN?qk3)O&mj5ggo?zhK8$v%VTX;vgA0sv5k6Hb<e@BJ84`)Malz3Y
zGvBN!tMbh>?BWm|{)Wx|JK>d^62Mcf;YGAFGEmXm1a*Hy4bGnM=K{fy$4Gl`n_zsv
zrZL{KRJ*n2PkD2L8u4WO)WuS}{}2B4O<eysgfkgh9ItsPRd7ewYs;>2zk8rRcrUzc
zVU`n&85;Ii{oGpfn)zWT%Y`yv_NXQMl|g;`?QSw_N~G39^T`HX*pqbj>l6#OwPWvj
z@U`KEkn0@UkuiEw2X>g8pE0%v;TS&5dxbQhu64#8eTJt(N{irN{Sdllb!}-?Hr>|^
z+>AaK9nI=C<$Dy-{E{J-HBYz;RWxI&ehsvYR~Mci--kGzCG0vEoD~`=h-QJ>zgl23
zHEvWnP~(sp?(a8q`k12+-~%~5hzw83u{nrK=*9BJch@~oA1sYF9c37q+1DPdiFg$m
z$Bkxq&?McuKQ1Whx4ha7VHhwLf^||k8KpZdCOvi~*z-b?vC-4OJiv4J)!@{Vc)9vT
zZWq#^lPX0EN{D*tjRVuUO^k{tm}~Ps0v%+E@t^n@$d1xrThiu@$t4wk>r3UOH8Vg{
z>R!X#24$jjlzNsJTL46j*oGf25f01%%TAS+%j3VmX@1uA98)}FFH0_K;0D+R|HMDV
zo8$gu_4EFjAe9|)X4_-x4}R!Lw0?hRJ;b9(@CSvpFy55#QRzV79(w-d%gjI@q(1l+
zSQ0g`x<0>azu!FAvv=}4NHdde;2W9}+dXgwOaPn_n%Ng3y9f`!oQ1iWDoRgJJ0>$Q
z*@RKtJ{3i8M>X(>u^W7U$JQE)i>%8CX>?zYe5G;fdDtW?>O&b^1NQeoJhudybL-W`
zdedDXEcn~35L&iC(Wqy{yx1jC`hX2P&ZqP;li-|3K){ngq5SZ`OAfRzehGaZvy^W2
zslNl(t{pc@+M`dj{3?DGLuPJ3SKR&(d0EY_9=;a5kKn`l#&h?0;3E1tSjuH$hO{{V
z3ACw6?)6pdX39XhW8O53O(;I)eFC0&|2@ba{2SeeB7N8$B0VVexw{w2ht7jAeTF>%
z79@009w@<}O4<j;1ZEGKCY^)~g7Ke^0}k##MW=Lozy!svK){+eb@5HQf0)qsL8K%*
z5*6|7HyGt|5z2X>A|nLw?_~`Ur;O)UpA#znu-9)=5|~B5rU)6Xs9Tb<xHexE{q0-k
zmL|1hk>q`eh8#*T7aFWaRJ}o(wD(Gy_21ZHbS_REUH&xf#h%D?Smwlch(I}Y9g_!a
zPQ1rG$ishLH#xf_yLCZvkpAerFlN4gGpM?WQU;4Usi#2EEKe~vc|m$v9s{nc^Xs2g
zQL%#b;Y#Z%JWNox)@Ai$-`94t`WHt_lp#Rt10*3*ZhxpO%xL4)fZk_(yG9W`PKm!I
z2kIhkSJdXy5_F~=4~qmT#iySPXg6|CkA`2zbU1$fmEBEcV)(Ue;EsPJqVvsX=e{F=
z{NNA0163eMFNK}Tl#+rNsjC(rb@=-wcl^W&^}qDP?(rN5$PX>rP3(^(8Dbu<9caT3
zs1M)^Dv)RX8f*qsg>scWY=flm!V+o+;ft&t!H4JNefPc}zkzrO=kuSV-!E?9YiQCG
z#?W!`$=HA@;!2Q|Dqu370<Is&;|9fnoBD}h>u%fZEx7&o1FYqiX+C$qmD;GCytD?-
zhsc90eVl@?<|QNLB+aaC&EROHbSo@If+7JSF6G}Em`G#$(h!jZ*n;xc8s00{Dq^5Y
z+<hmI&$<6+o%^t&Oe7AYVB<kZkj5BfVQu1)j>7L_1La(Yl`S|Rnyvb_B5iz2uXO}p
zIv0ODt9l8q;K1&Q6H;mQf4^Wx6qxk3?-#eyICeM|-=txEf?jO5nSKlK`HU{hEsZ3w
zvGXwv&_~88fOTyfTvwyv8UU`{y%uuNJ!al!TG1fCVPsRpxvW%fAvcM@2xFdtg1rZ_
z25g>lb`N)>`q}9>F(pz|iP1Gw3DNr(Qw2Z-kXp4c+QO<0vLf|4f-)+?`<wR&pa^NY
zUvvGa%hQ6ma0|d_QsxIX|Md5Q_aaRaHem#{Pf1PUeda>)6W9zjtMk%E(qp!fpid*9
zKs)i9IOc+lW&hU-2pQU93ep?^kQ_x$b~8els}Qqa^Erq#?Qa?U`<1Anp58hWj0DzX
zr`6YvQ5Zvz)X{nV_iLYIemjOWbMO$~_hynxB%KxNrs5UZoxfC_QK!56yQ3?`Yr3>x
zUB>wBBmc@!(~eBgo%w2zp6g~tiL4<S!3x5huJbCo^CcFip(JSq4>rXfZVN+|7P<A=
zy8q%p7vAh5xvaHjcX`sE+><rvB#aDeIxb$L9san+fVN2f#=f6Ii2?&=$c%CuaT`nz
zk}`%K?91$k5nLs5mH={HZr8?SXgB^s`UY>nA4;1faw9PU5d6o0C%p)TuH7*!$);ez
zp5niwF1WxxEfa`p(Nm0ALzZfzp(4%kQn)s*Na?)nn3vjQJ?&P9s$H&-l}6LEW{sJL
z;&cCb1Tiy}NfA9rlMwztpeu!vhU_EHtwI`4g02rmqhln<N|=85PD)k90$6+e5|BR}
z8EE54Y6KN%o(UIb8uuXJVr$gsvW4K>TW28;vIdXQO6^4+6E~TSNwyE7H?X@i!8GCJ
zyf582Hm1+F?fP(pG1Lpx<{W_?<y26;Sd$J>lvxpl;Q#H-ooyxU9Z}qLCU3}M+{kvn
z1Jg4KMtuoo>&3}ZX<JUR1`bt;qgP6IXd(IWVyd;z-G4og^fFQUoQGTDOZ^~;o73hc
zTrK!(`=8DLdd#t-Irs=d!<4qJ<SOWw{#JPtD?SMIV)>(}rxQ3LR-cxi>eaXg>_`1S
zEPyTXmESMX41J!t0!o7ahNN^?p`9@7zD5)KEy(xYxj{h_WW!b;-SmWf+7|=BNS38v
znL)gE*nAa<Nha+D7abrt7iHbX(o(R!9e0J<cxW5*92+J*fF*5Ran%ad@BZOY{z2EE
zO}2`#H(T2VbX{wE|M-fIy*tU87G&B?Hb9TOJ3mQYoOc)c1;DZ7*ipow<44F?MfT(~
zVJSh#c|HJskp8fv{w0JT*ekzxjR$P7i%<qM5&RU!3uuPscrjjb9S>we+ow1tojQ%*
zSW1{T?wv++6f`pCQ{(#1+>Nc+Azqh)XACMX4`2E#!xQm`$?bVFWXXp}+EyGN6BG&c
zgXs&vNK%X1ps`K!Ig#tvBhPcH7_EIO-v;n0!m&?L`oissU$x|p${EYkJN82G@}+QU
zC_#UZx1eJbd(;%B!_7bk_$LE~X(7L|5sxf_no+VD>1rBxc{-)Or_7%?7<g3`1)#CE
zu4pR+(-qg7D<nB>NK2>|(NS|9hZ_W5n1SJH<W)XF`W@f=aVyYAZlv~*fswI-v-kQb
z5nn@*OMJOB96uL|ku)f6ct$pWYWZJghp8Uy$hBSbUb9i;UB()G%}_kEuSzB9zBAU*
zwrx=2M3hxB30vt4eKma}F)uX(Y0&N%dZ)ASTWI3W=oxkp8t8W;@xRf-hgeNdhAITB
zcaIfnu}dzt0i}tYxIQrH(oqYLGl8dZRV^>MT2qNB1ASw`GX2?I#i#AmMx?Y-j}`sz
z5~4;zUU<2A&_~{g6&4#*YqC&%PTv%gCp6f?C;(Wn-_am5rP2&2ri?4q1Gjse-q|}h
z@?P~F7G)dh#V%fDzn}@z#SM}0xQo5LcAPhiHUX}&`|gVojsJyAX0iqTLlEo19CI&2
z&g+i67qb)P((?gK(AfJAA=bcWg-W1*&6Mgfqp<VVR{y)^e1W<NA0Rt@_i(^?!2uq2
z*C0QPaV`g1qWq&iwscTZwS+Wc)A!<)<!zy9IaF7v_#&)z59+x4b5D#Pq)l9-ug4lA
z3ljth-S%^nok9jefhsd&1T9A%&*)dY<2a=QRRRYorZ*fD3{y}=)=E6B;!(gm@7?7Y
zs`NW{Jps>VZRjs!O@NWs&v`aQVy#Kq6n^c87K9w__OESI_Q?a~f7MTjOAUh8EQL`c
z8vHmCF0GrTr1W$v)bAI3`vS<D@kX?9@;5!Z{5L4OtOM83*U)}U>2M}CWdv;^52#m9
z&~ZGFMnb#DQDC{H^r)be_n(gjR(%2i0su-S&v-ou?f#3q`Gg|uePsXg2tBFK`rCDP
zCjtV{0UMX-(T*rV<j_Lb&)j2M$9DWQR`OR=O1}a@S)Pq<xAOhex@*`gM#bJ!i<-VQ
z7;T%7xp?g>Rf|O7y9g8*(QKzouYa){o_c36*wn=uBn1#T78{18ld@E`h`tcACH1J2
zu^w-<;|hDv7`rM1$ANW_aq!@AlQ3a-9TtUVRS*q#EQSyP=ikQxQa;o3`BPUv=RDRI
zI)f|}#EEjQ8iWK~H|7_;o4S7dC1m(8F%ae>w=YD>!yOB-=a!chBlCOt$(L%4adf=~
z!^l2V<df(B!`?S_XVOLM#<q=4(sA;}w%M`mblkCR`;Bee?AW%Aj_s50jC20MzT8(e
zM%B$)g;`@hny&W}swU`<qzA-s*6Kj|zA*z1U68{o-~Num+h8;)?d+&u;GPxnj5rXK
zprdAzxIB^B`nIz_TG6a-kNi(dDo?gfPmXFcPT)^HI5HPvv~yIP$0|HuVsK3NZ3|G=
zvAEK6DMCckMvv7JKOml5{Z?IaAQDefAg5mtXp%(wjsv$rvZ1!%jy&<9Y@<&Fw1+dV
zB#NY|QN*qN4K(Q>93_YNzzbJ*%(ndGCF@?8_K;aTJtDXwUJ!wB18Cbhpr7Jr{!}QD
zvPZPzL6|>v`%y&J=STn1K7FfWmdGl?q+w}YWpCLj!6xxJo)9k^rfJK%NZp$tVYsn$
zz_?A&!CUZ8{)nrHF=Bs<0a&02{}C<kx?Menap1&kU|+^|@7`^KE6_Cf|8lb65+(}E
z_oo)H6nAnYIP}J7r_OV-3&d7L9hPASbh=3*zHUv`h(LUjfhVzJ$%i;11=&O{;WX>M
z#b9AuIrmjrPXBXDER}To!UkZ%@a(_&l?md6P>lI`_f4-t59-i<myO&nee!?S*L4QJ
z<;?bA0hGRYy%?NJ^xI5#Z-LWbj`Bf28QOh8tT%U;P$ZZg`&8)2;q9+wK8wi&tu-t?
z`g)*yuyl|=ae>njMLmD_|L#!iVE5874w>S%2pjwN5^_x8^O}lH)AmU#u@-gy^o@p-
z$~Cse2;-`@qeJ6C+6yxbbGW*_REAbLLD9%M6P~r`f;;!9Y%jO7MlyVgbi|m@z}Tyt
zOp+@=qv@(h40Q4$dH0IiLy{?kWiDA>1vv*~zI3mn)x(E~hm5+2cwkLTZIT+$;0@Vr
z*AYUW!fh0ei=7YAU{u#jr{1v>jLEy4%wwYZV2PiCVjnp=El*%fDxLRQ^&R`E`=`~F
z^rZ$!U`1fs+YNM}_o|TeKx`w}LTKln#5}3{_aK`wu7Cw<=h4Bej6K+NmMEFMxCTJ?
z4bI72yKw;{!jkLIt;b=%_Z<jg^YUCBf8M<};7RR9WuUP|w!Tt5+NZru&~x4pdPb+Q
zbAq&TZsl*ZLgzMin>FuX@>W8!P<M}OPN}rQ!})938V@4GohC;2hPgJ>K-!vl`X<pl
zrOiyD<B2Zfw8Yi7-LQa*-9<h2-E^Ibo`a5OOo#?0g>pQ3z(odEvIQ2fsp<Rpo1XU{
z0g~Uhx6y7mu%qu@pOpzUnLNV~4!9inMTUtRYVy5#>QigaeifLdn#oSgKM)CEXWl!3
zefkiIboPCWFB!0)k+XMhFW}eoI}ZktY_{+}Ltapxe*z>jczT76qXo-NW@k5}`n{5&
znMq-rI~@y$oMIAzt{i-O8c3;&&to#|A4pop6bcp#)sc+CZHUkH287j$z*;J+2=Y>L
z0?E;<#_NduYkNRZYzFZHBKrrI_mrt9gmt6}3acR>5<lidePM3P-GKV;XU-1gcU5i3
zJPkQ5vM$==#*+0w>YUwxyet(wN%`~vdg$E;gQ_M_oupYJ#rA-7BY1%U2cn`(cz)#P
zP!ammSwMuIngZ=0^r1fiZoF`GSQZpzbGz!y7is;~&F>~-#-=%S6#n)Wi)uJ>OZ$~{
zck{di53!G=w61vOGIxsH1yG!Z1WrQ>SON<$n)z33e<3b}Mnq1Gbwaj_4#{x36hz)Q
zF^O(vwqxsG1__zG?D#oW!|Z|^(hSyb<df^~D0wpwvmv|jyf}doq4f@EZd}iN256g)
zeix;|wkiH!P{pTh<mHWEhI^%4Y0vt8b`W34&!PaK`Y3J3>52GkaDA{(av(??4w4Wz
z?7QPP@ZcIajLsymI?~;+Y<)SGquuhD{#lK8l{T$4Y9%%{{V?OWct%aI5P7M||Heg<
z*m^;qrbL1%wfKy5pDnYHnEj___|GO{sh5u9pcagQG$lkp113|#%^r_E%{y|l!16%+
zUkgz#98dx9Pt<3DzPnxrK+YGQtfurD@jLc)!wzLHW8i7_cRlXHv<@#ociEW+*GFnr
zBm8cbF#Z_}$#N!Rsu2NU*Vi4ouw)yc<y7dH6T1F9i|@>Z_kK%esGo(eN1ohNQ0oh_
zUtqHMK(TNzHGdlA)hU<-y4&6G5j|}~D8t^mcMr6_^{J$j;}bbNW8W2ee4;4JKhr}v
zHcHVzRP;(reg;DlH=fNM+1RK*@#C_RuV?=86AmKX%M{PKs5L7y*V@mj%J8%enCn6)
z-35pmC_zyKq*43)z#*oUeb<s$7+d6^9rN=V8Iz@nDCpe=>w$i!0S-((e3Pk#Pmt44
z+G{Zx=Y9H6%09J8xI}WFDm3Z=#E_}7Y9z@73Phj^f&j8@NCBizq*g*%gG(sKt-$1!
z7-1^Wv%XA(e2{LKiF+mc6pA|-O8tDU3l;+`lKEk;gCB4{?R5e64423whor+i(x5cI
z5)iK-Hi*r$F`mp#Uhm>qxyWeD-RO+>C{?Jy>VV^n&@?UPg#5oTBoIxy3|C|5a)d>y
z|2%0`bqi9+>&!Y@iDrDDU$Kl8s89sN6UMN??iTJlS3ml6o+U^zVu6@=WW4)cyJ|-W
z1kqwbhmRfh^k(W8dl|0h1-!7VOi}JHEr5<i5&PN6GcgpQlM%?&C#Q)p{8j~XgmuIH
z#v2`Xhyb)+WNt{$IDq7F#GNaDDX$!)T6c{+0Tr*rJ_7$0_cY;x{GFEm9)+H?4eX2<
zS;OdI^8uYw1&9=eMR~dqhw2W{NU0nrk=efv|9E(K4=X)`i+_W)B8%HS>92LVkFs^?
zKY9BSy#go=D6lBIsI4MM$0$z_E8~`4OSTqLpd(-g#$-IaDS>c-M-`Ym+kq_sT=i~%
z!PbA`Z@Z(uegcqsNT2LL6)artCAc8imRtb%w%m=CLs5th2tUq*^fsg(<R{q5Z=FZk
z(;Qy4fuR;eFKisl@%tDXqH9Nvy$%>48KsQFh5{^BqV20C*nFpPco%$#CIYH!@gy83
zoE6Q5Q84@6*!^nAkW<l<&ozsk5e}k32=(^^DnqmXy9IU8=Ii(ul_sw9Oox@pV7z8V
zqhgTnuIB31Yrfz)=xVuk!R4o4MsTRgkHM%gZw?jg+r+>p<M94zZh_)jGD4`TM#3w1
zF!S-)`d9Rw7XO-Wv4Jc_e+-8yMHPp&XXBcJ+CT84kpn^lnzV-ASpRVvk*6RqA)=5Z
zkYF76%TbK|gm|DlnA9Nik_qIwI_k}r{}a@@Fku=N7Ls~{{ldK_V1B&Oao|A&kPLH|
zIVqrbA?&n{$WQD=1H|;-^(OuXV^<DkoW|YCc!AB}edNWb@H<9o4NSahbI5*NM&uuu
zUMwp|vwANK_)Inv_?W1)@1r|Lc=Vl%%z2cEq)pOgRo{xA7j?!oH{_Wen%s>?uLw5D
z4lQvcca9as-X{**FPo3v1(D<{Uo0NsbOaB`Mm80*ZADU=Scd1X9M2=R&jQKAc)f2~
z%oiB)C^1+M_B-k|yulc(i<7yZc5f#3Do8ilI}aedK5#cF8fPb)yaI)aj!Kk{MGk{E
zWjx&yN)JR6v=!6m6XvIxtohIU-V!iUeTZf_6YxvTll8uTy6b>%!~q9e0y^^h_s-7y
z-Rt_#-}Fysinc_#;sKMVY2qL*zp!Q3Et|b|7i|Y>OLbPy^K$Fq4%|0f{azThz52^E
z4FHhK1-+EFprt5Z{;^tL9TQ2U%>?8#>nhVmTvr6|f?ZM<r9|P#spUq=3V%ps^T3U7
znYDk3w^x2{D-gXCN&gdG^j*8HYWcZ&LOOEKW#Dx};LMaG<=hHhXvXuy@14&~$me*c
z)H^^23WOS(+E{X1ifQs(!f&;jT4FVu!(TnHYNL?A(6h0}L7Ql89&X?$APxU&08S88
zzSv-VVdfi`FFzF(2sFT|ewco0gCPIgvKvk37V`I6ve_sG!OG-SqwOT*b8hoC`?P6y
zm)+{~+1AACK7)v8JmIfph2Y%w?hT6V>1o50Ecgv74VHfqRU{6LJo!B*`KpL5C-*RZ
z5FtND@HOJqQtzmej!~Pg`pr5H7AX$JpEi%(BusA(BRms^dQUn9Q}1SH0Uj^~mX$mI
zE3u&*B(BR?HNCCpgck;w{>jU-Tn=kuS!h%6byj-lr$7m`P0>Cl0VSU(C+&N?pMq2Z
z5Gyb?B8`~g%T7~_g@)><J`!8=m^p_stMBW_?3rHujkcBB_Z5i4dR5wQJcI>KzK_|L
zmBeoopUs9NO&SnNT_>uk&DLW2&%ZRH#dd`ZjmJ$zM~by14Bqok3qn+f0d#dZbph1Z
zb3@P$oD;rzfBHpDVoE0hcH{J8_&6PiLMd*JZ$$S${BK7>KH_?W?SM!rv^;i6y9CL#
zQS|GIaNFvQB0u3EV6Y{N2m5|CTNUqAYIiq0z38z7r+(6H+s|zly&ZeMc6eRc;5g-k
z-y#mT8{@3@k70E4jt2<RJ#0KIcC~u5VlXWYPVgBttm9Emy?%n;4^6KYcP?KC7gvIW
zD(G%cD^UAJm9N4J2D}s!j9lNNTf~Pt<S+fI9nUJZR;V4LZDoAZPpKd@RVa&l@swRl
zph6*`Cx=nN1Y;UrxxISrFYFP)-#GLf;>KOMkuXUL@g8X@MOSKgDSzar8q~RxXEnV!
zkD?Xm_{Er_?2TX0maG82@h45L&*(1+()9z{x_$lCmu%K@V@NUJ-#9M1P`4-2&{6oe
zqPkDh2o+)o#osV57=7Hgi0|skwv_=0MU)1|vX3v^qB*%+q4h>IBFQ=Dd&hI9@*^w9
zZUyBwt40X@eX^4>p#!}oTA}CNp=9f&BE|*Uk$On?XUq3s%-mn1{<1Rxi6-!1Z76{L
z3f<7l?#_6b5#LaXBByKz4B-ZNlRZ%L%9AwtJj;~KBe>3xE$7TYMQCv}-*@4=u4k1C
zxmv?61k*@G$#gvsH{NOpxP!E?KizLLMV@y3OBSuTY6pvOY2W6OBx|jUa!H7ykeo|_
zkM1Ag$%0Q1V72@E>qKF=Z!4MWGb}!$!S=#!b(%#*(EW^Vg~bn^XOi8P0wo1Uhr-&j
zq3gzgiy~_O$@uKAo2F@sGw;64@7P#5cyZc)D=J#f_pDBQJ9K{&HVy8DpjGAA^c87T
z+8YxSXvK<>@Pnm2*5<Av<?PzgXe8VQi$&gxNDWd8UG&&bnJST9NlkQO_d_&XL&o86
zk+&-aqZO2E{mw-_wmWmXLdF3rHH!Ki07plY<36aVg}JR^CgS}3t>rr2cJ$w=xw~vQ
z;Al8CL=U=OZ^(L_j=h@FUKPIgLe|o#qEOl|iKw8qpX&%m+}3kg_P@nKUb3!;*W+4>
zc<s@Dgd1Xu(An9VnY_|5(HU>oBExldgFT(ndbN@|Xb58B067^M!I;P<6i8+dV(a?v
zTL|m~ccL}q4y-VT$itO}>3Q`f)@0pNO!wDI)42A}+lwy7H$9`z>}3f6)6$H+BjD%y
zsX<N_{^3|wf2x?f-}aWwYcFoCdT(IQU}Q6m!;UX{CCa+@2h?j=*of2JWD|IhexO1s
zZ3))~IMD}u&^+T_(*Rua8k7`CF_hY7#+mLN-@6ds>7Ma-eEr}l@EKEIZXkYTue?w_
zkM9^I;dkO{1@^S~r5)@0`+}M2q&Uzv4x>n3z@K)OnnucV>j%P`HNDIb(KDtfC;@tA
z8huBSxWFkPXya(M+jRa+_HOuRZ^1A4aj%jGn~Pm2!a;mRNnZV+EAgnPaGsfEzQbK1
zGiC?>?fi7Ctq%70N)Wrj7=~n#`0qn>&p(~DqoTZa2}fqN_|RdRe7x{b;Y3mYi2^9@
zz76VjBpn1zNa0;CT;Q?24G1<5SRGspr3bUDEvE<EMApS1+MR@{6vgn{gMlIuh+$_O
zsuvKZ`xyQ#Pr3T?jX4Ip2TOu&lDW8oB!27(EzaAcxFnIcvWCTt;C>|V?e^pFJpljG
z7d%Fz4FqpL3n(0xHUlnXv##*+gN~$dzIxuV)9tDxkD&Nx0TGX143pI01mP!ybTRdY
z=lGP#haqRplU((c&t0pn`CC?|He+R=1$b7iI<7y4no}j|3$rKXH?>>ZMz*j}y}-5&
zsN`X%Q9Jqqw}VLh*I`txVjt`8u7~8QIT#dwd2AYV19+AKNN^V3KfP>d3k)^9Q?r2m
z;}Z%0t}HXVv{z8WcY5q(@p%@tJE>}P67*a*XIsmVG8*Foa9n)N#^n+B+51#qP{W8l
z$g|5rFdPUJ#>iWZy7K}&xK|x3h|4)h=!@<CBQeKJ|8~ZjHcysQWv`@O1DE#;Vwc(7
zbdjM85(6sXJA%1TiNnA~YZk0A>-o;Ts>wvAhJP_|obDd}NuBPvuXW3b&C#))`#XNf
zu+GE7yr&aI=v)*^{d6b@A|3RGj+d_8jR^XQDWM#$00FVc)3oq3!#(^(@+1JHs5E7z
z&8p9T+Yu#yhqVT_f{yDkfx$-Lz1>X+#nk;dV5$L#1IKcCetpbM73ggDASif^$RIsh
z6%l)1_k+J0<M@~qyj8E9=Tz+Jf9~2Dy*-#ZDql<w2C;d-HaII@qtd3wrS}RSiuvKp
zM=il+r(iXzZdk@1G?POBDF1{m-8`C3a@a=RQ|5{ChotSeEBw%ziLAj5(S>>RU4NAQ
z>f$tbVW*QC<mgxYfX~JuV)v!*l#(d6CFJBkB^QWzkhc3fz|wOQArIb&J<LmEEl$$M
zL^DL(Fv70>Q<@qf#Nw8TcNDRRT~5Etv94yp-OZDRzaKLI%w7C^hA)bDNPxN_xoz_h
zxj&jIt4=q2X$~1qEN=s5MR84g=imNLnZdg8)P?dERscu_$N9cbnH8zepbaUEV3-Rh
zH)<r?hMRsXwuJ9FvdH&PNE^bwP6+u##4C8vuQV}Q7wgtzrH8l%3_C8gQT1?~7NLMG
z5Kul#<!SBCxHnjJv6v;`=x}{eUMwrA!uuWNESrQx2b|SV28D52J6768F>O>*4vwt*
zlZ1YHzUsL!`GFJpjy3S^h?5%@Gop>8i1^=D#i^YWHVfPj8N7O$6zj{1t2U~*+3}>Y
z0L=Hm9WjH)q$;I88*w95IoH4Cx)F1@%`6bJOqH^e6mC4P`kq=P&YBUcrD*O=rwLYr
zD1hy5!IMOv`jauj^DO)4t`&u6ER3U1&S_ZT1@Ep~5p{<4`tv={B)FJsKc~=8#k0-Y
z{Jc?Vo=bNPqIXa)e6Ns~P6n4vL&3z~_y`f;1g5eY<{KxXZ^ln<S@QTtRyfGwa8XS9
zV|&eAACEJy6c?9`C0Q00XH%L_XP3r0e20h%CY0?oP7wRO%`xQNWtif492UbJ(c6;x
zh>-Oa!s8sIP5TV+2TkCDG$o$9W64s(MLv#;3+_A6y(;w^zJ03V=6-h+aPE8fjR{`f
zrmpJY*Esm|8o&7rh(-&Y261_*-x=@5?3?`=LBBYFCN~H^quXexJD*U){~R>_RAv8j
z@A``1TeS1{^F@!_f|v0W(Rz8>{XA=rPW*Hlj;0y*$y=}h-F#x<zj4~!iAtm7w7nHj
zG%=qufo#CRR<EVMkTyF^7?Kuz;sLG@2T@yQ{OPKWBVNUdY1Iuk*>uTlWS$8#jJR~=
zt$e=5FRq@Sw)2e6j*VNoIzRDGT`qq?^4a}5YQk5rOE*BzxP0X4iZ17GZ;}3q6eONm
zMR3)mQO=9Jwg=!)=^?%i5t0aSMjRL=0bVD44lO+2<v1TrKTQzCMKOc9)xXoL+MB?-
z^z%&>3FeO=sw;L8z6$|*KvK$`TGx}qDDmMgo-4Q2+^zdR8VtH=MPZb}m~B@|qb-Nw
z)T&+fXljH<hGa}f5S3gQLdj^VM~rxv5N+>%8o8pZz(E(ogBgZZ8sU1x?S|Yi+sUr`
z@8BB5B$Ns=K>1?J(){%H|MilA>F<)6wm92YbHp{Zclgne6hT~)b$#>fPFH@-i<6cO
zaozHhEV}2i6R2NJkSzl6M@p+qIw}_AK=ptQx*ujb(*Q|C8P6#}h#`2ut2v5gQYiy{
zJ{`WwqB<mM9hMeCbaANhBzf*&ayk_g1XqA^+80_GZn_#Gefp~br$a1E;I<uv`iteg
z#Yj}lk!3AEJ?4B%LzgWW|LdJR|CX=A99)E?)&B2Fe2y24p^w30(WDis`R7lb#PGHE
zzfjZ%oNX8|kYwL3C49<RuGx&}70LGAl7JrYV*6sSy%RG?973x3xLee6``<ygYC7MY
zFTO14^tayr3sgt)MRS)2@)OwnEk;=HGY^DUmAse9^Tl(+T>+BXcY(jV1MVzvzlmZ?
zGBuT{lO{aVNv{YnP#9xjz;ffhHpvk{Ow?@*j&D-Y+p$j8Ip(S(G!#$~C4P;pyWCiR
z_k&GGy)rlWtJz|@4~Y2%+^_huCv#S=E04SgvH4Ns@mnoOsQ2!73XU=704Q9_i|`4u
z(n&)%MIH{+&Ctdj$8TI-%jREBtr%y~)s9S14(=m>-y|5|OK{}&b}8OMEWJ@?8~xCF
zB4yW{snHsQF1zL98FrC|s%i+h9CnAl<RPqUm`V!pe5FVw^Zh)T2H&&7S2R`<J+Wkc
zml%`bT&)WvOz{%EV{*8{qXTY~!s9A?jvc12;YityUQ6mteodp{kD(h7Nhu-Rbj+SQ
zQmIIOfviJW%xC^unY0%zGW=Mv;`bSpqlU2$XMA_ubDPAYN|3=kCwO7h5PKN!YQFy-
zbXbGi^}gGls6=$J+%r>4vE`X?E1V-VORuym$yvk;7tc5Y&tLol5V8|SPUWusxj<Ig
zBQDfBW_k?v>p2XeU-9fnI2!b;n`1}W4)|0%SoF=xQ;k4L>*ILXAJl=5yY!q=Hh(f6
z%jELToj1U$f0~Hr#(_-{2w(8ZEiPo@HrxJN<UX=XFOd9((tfdgO&+m-xW9TIDFl=(
z5zZT4Re63Ay-akEJDX|~oTm2J=*_SFt~QXxNdg%xB>ncW*8?Dw@b_}1l*rI<969r%
z6k0Wt5b9*^kg8F}|FeD>Yu9+B!chY&`)i~g9yL>f$FSB018%1ktdyi7?Q*qC$#J?=
zSz3v2t+s&B;+jB?p;T`sr{G&ZsJSiqiRz62|7p1jBS)wmy|Wz@(SmIZt&xIIjV^`&
zEp3la9C?1jx*x~;48$Dli>rI`$YdW|uj9^yxWyk?K9h&~ThS5_-wR7*rHL}7-tES4
zMvE}sm5UWEw#M^{763led0g2I!xdv?5j19jtou{xPcc^x3qy|6{nNbrgWmNgvjLoR
z<IM9imAeKQG>erC{Qy+x{`O3bVwb&dm{xdsWnbtv$H6=2&}Vw(#5#MW&9M>9#Zl`v
zeMCX!=6<F}JKAh7BzDqoQhL(3a~0FZ1dB=anTQ=K`V1<{AArwm<T@p79avpy=V3iW
zPsMUX-cq5NE0TzTQEq*k#YI5w$j&~)SVZiu_?8#*ezon6@SElLvCvixwcNtMMHaUR
z0V|h`3vY@n)P0A?#vf1Rx)P>jP%*VIBvEt2v4wJrQ6%M31Qc3~n`{26w`(=+zmY0h
zw-=y>2XHh{TW<Ib92o8m4CjOVvvMHYJ-=*k-6fTfLn~4=!j%is6A9PExcbk92M2aR
z_?@or+CNOAPY7xl745H+2R{bjK<&hV_PwB?FLE{Len+K4*1M!kXKX!B7!q(KGAAgs
z@23<JCrPI5zt_XPn)g*_SgJ#IH|ZAtBznV;iuyM0{6p-cIw1Gb{^&mZm=?71LYQ-9
zg7f%^HIhE%tw~151h^z)f^TGfGC6&Ce*QOBy6^pktlnr3Uaf%pU!s9HU_M|k=!Yj~
zSy7PLFHvf%aT~kQ7@SDN$bP;>X98*Zzh)kh6bv_wFD5t$+r_Cp!R4T!_bbM9%i~$0
z>qf6N@~ux<RQJd`vrH>t%V_^**OhU_nvQ%k-2>uLITEc!rE^a<JiQLLm)ynRpSWOE
zLB73>hmebK^3|zdw9h9h*Bkf4qug-UMq$K7dr)0cJCi%dy}@Yn;*bM!(bfvQQ$an%
zpvE7bv-hlC-4M1=S0DmNSmj0#+{PQ6+@}&Y`fF`ta;3=o_PW_7wICU{RDHugk8xgr
zlT<p<=f<IJkNSh3aoB))f4k(0jygtf)8j$8vdOx7-WH|cA8>`8BU+Hcd3fMG;If9(
za@{GF_-{PRi!oR}uoBTb1>Y3K7c4`F^~Q1^OEACd{U=7IR(L>1KP(@gW74RRP7dTY
zRI}2+P^g6PVj##7a_wyGosk$Qp_O*`J~F4*0ocf`a;^wcE^nyQag0C=y!436SPg8j
z@65J8A6x{O=fs2BHEpQ@V_(!G-4UmnG4|WnW};bfe|g=4!$0P2MPbr|doAhHBLugA
zu7ew*Hu-(ANUAU@&huV`RDIh06aVRm!3-bDz}4|%MdH81Qaci;1M$$vUM3#3P(G;z
zlK&yR?UL^#3beq}J*q-r=iD!NH^}EegT3KKU9e9E;K2PF=Op+`12n2%zz&4x^~?IY
z$a*%{-S(`r8>2X=T|dWihQX4wTwTFR6!U1jn&T&C1w|M*9HiWCY3u%5rLrz(Z3NkI
zRc)b-umvO8j<eenIlq2=Gs_aQ6FYWK;mD<y1T+s*J|~Phg_JnS>TFRhP09)yCr7Uy
z|6ghfIya8uVp|>ROc}(;T}7C?AOofHMJNHdcdL0}beu_-!K36)Q6>zSPa;<&OC-&U
zw0W-=CaNNzg~!2e&&?oy>^qbzK^so6qTf-n1d-SLR_RS&<QUWXxqO`ME3kJe$Om68
z7iSF1$To9h>#Qf@dTXw^pUE*e7&3T<@=$*&(ZANbJaJ6ctlFwb!14v_1Fa+oJF#ds
z<~Hy6KU^Pi8hWIja(r?&B`!Hm4K*B<ZHZsHOj}P4kB_ZZelckr<A=6Zpnx4wxe;hc
z3T?TEd!WwJ={M%TWyc|PLAz8oIM7{g;ix{(5D|pVw6ax7Mrn=>hjQK%<NsvSY2<s!
zAGeD)m!lE3_{(h6ox{I9`yOFfqO`P-v6#_WitxQ4=6z}9G0mMegLI`aY7^AV85jsE
zg;HM5X-6tIjozKm8BsyO(<xx$fn~G2XGdUsZ_XCMeC%VetIOUz{_)<-y7Ejz@97+?
zT$-X?d6b;5$gY>O_b}xmNixbY!?XAOgKO2$iCf-$XHG#G9oCM)Fb>#BRCqrQBbzYZ
zZw0hdN0Q1}6M4FM1PUC`ASMzcc}FciVB%Y6Di?|$0ChA<Tq&TNeu<3-BfOK4d(TTE
z7-{I`v{)nrOk%zNo+C;JIQ{%tK2DhxS+Gx5!B{IZX^Ldrnc5X47=V_4UGJj0c2`BR
ze^5KK@<VX9|5u4p{Pk8krD!~ORJgENlAz-}GiA^lqU4jheA}O4Z=Vrwfrb8#x<BQZ
zjs!T-J01HoB;6I7Tk?0~|2o6>NU+fTMg1X)1{fi?Ao+3Wq{(_sc;CI@!gq*pWK`~j
z(IG))>s|A~4SufLxxTAPe;fuyatO?>Y_y^|5)lupNaCA`<qEFo&+8acvG#pCxY00h
zB#5^`Y9JaY$-8v@YD2@DZ=-jxl}=F(>q6lRS55+@T!weiv?ro#8y?RGm!GQCz>y}j
zK7EZKn6Zh;l47*$K(2&*^94itj`gBLLw(1x{tK!>2W=Q&Zz4XhEz;{h*&h;9zZmEx
zf6<H*GD~G)fVHwliOYTjObztkUMsh)C&Jh-kkalvn!u{i*f!*H0M9weinaIRw^l0{
zGVa}KXVi}bX&^g-X#Z~pP%=sHMX*_<Ve)}QJ?VdE{$DuI{~rEF@5DYRC>s$P(~zY>
z_Ctp8I?_E^o=CD<^eB^juV|!vTg*~-iSSr-%g=<TFDmvb&-}x@wfS|d4oaOXBA>>6
zadW7{!v&-DZzZ1yo-_A9-naAVU+#@0v3qVX{?{|Q(HjFsT7yQ?o~REl5~ojARg@hH
zRBQ<!d-bP0TGWRY`cIcI!2+RzKKeR>dlm067F2LW8ClECueRhzoS&p?!{~QC?{%s&
zVGGrQQxCjNx0Q$5DIbrwU3%pyozbTJzZLvB+v%Gv(Zq>{g{%m6Y1A!eiQCQz7Aq9%
zxMRd!#or!Yvt!^@dn^M`^xF8w*T;UK?9>z_9#L-#zy{A25?FXjOXg+5w9*90E8cQa
z5_l65bO$-G=Ow;oqBrU4=ilk_1kFO<RyZZ%^W%M-2FltPx+1a-1Fk0NYb>8Sx=QYx
zIQ*Y<-&GQQG5x^iB_+8&!@IoK%@^dWaKE^0?0WbPp0}taEy-wE$~j*}m3%|jZbu$7
zUaPzf3NtmiFA0sM-B+0vJ0R7b(((K&HPP?Klm2Xnr91Ybs9F5!>#7oX94l$vzVJSC
z-=V&!c`&b`c2(UYHX03{%R2pi{4lcWs4`@kmb%UtB)Hs9k$8r7d5YueHxtSJFu5e8
zQ&ISt*321HH@Q6nzOiEdIOd9bD-aawE&wZ!#B))8;i#rJ`%32&86^xOldU2`hEm0C
z>-s)l?O7z%aR#H3NNu4Z>`vAjV*1)7*UHmGUwnS|NP|QhA;_x9fs9HZF2_VJLW^hI
z1R)P9=$OM#zIRfPR<Xh?R2w%}g$s!mnP=47t$EBr5TiHL2LfBbI7{-Po|3B`+M~GR
zqQlx~y#4+WF)saMhsF*y$e=-yxZ}Q>7T1a`xC$u<k82GGRza<89G9A|NMdya%?B@F
zIl<T<>WZP;VKKDUGW8Hk%MEd(!49!Su)cC)aiu@QC0v(8zp@5Pbt1xUICpZrRe((x
zgqhxr9=RB$L)VmR1wjR@StBH_2*oo9<^ppzOJ{BVQ7&KZ3jh9-%jcx=Kk!2rH81Qt
z#XL9jbvaifMli0dEtVNd4_(M%L;T{LDF1yVe&WwtdQpDF9o<{H0?CrsVoQS^|IrAN
zkTYyXFphfw`P3XrF7Qt#xBh8xyd_Hr_K!lY`1LvwkPJg?(&kaKTi1X2RrSEA?iFIT
zw~<F+j0>Gc2zN{xf1V<0DJ<mNsZ;T7nnqZ(8gz6-1m{SMAOJ28Z<S;BmD1Fe%8n+w
z_l4sWhP}VvYw(3PZx7WEH1f^7k>99ylO6dd-L?~VByz2p*ODLDY`LRlhU*ZeQ`SDW
zgi&jI>Z!=GEUG$HfwbHo-6j*#AdO(7I0Ffxon-9hiQo@NGi(impa==S^-P158B*uc
zs~}`^L6@n<XF;pK=8Lp(kB>;$$s!WP58YUc2MP-qFuWVE$zguge=9Fg-|VjZQPA<U
zA;9h;h@*SGib|xN88E%az)uV={*@&2?{Q8fyJYU$Qx;PlDdtvrK-Rkpb(BHCF7v>B
zuvVvH(?Ek2&sRK2{q%xiN?>gU39Wmp&^7Mft3RuYY@{*H56iVtTkMb~<ZA1I|08TU
z|57>jp2DcCS}kbN{ipMB-5G{bj}R2MrNz>!Pt^WJp>i<JO)I28Yvvvc+Kg^BnV)^p
zFGA~-CDnEE55W@^w0T>!T&F4#{5eaC(e9O3=1QPkTJGZ`&9u|$YQ=9zqe*q}bC07u
z&pv5XU`;^y&fILp14<IQP>s!}k1kIe6M7aWZm>$H^nitxKb(VzjRp#{?t)7iibM(X
zie$l)OB4TlW2Bzt8K;E1Qi<cf_9EOsdQHNZ09xStOIu!C%OHs#(K^2#v%3eA&)~0J
zn1M>{X#x1(g{T#^|Iph~0zkNvK~roASx5Wrt@w^)4lNRANvigC8OuREtyVNWUT?EA
zvMlyPJ4FS44%K4Gly1N{6?{EDbTHVp2OJ5{JJPx$pb??$!2CK@?rC)wpj^FHr^MLQ
z_H+;`j)DO(EJf@6$KwlY^$^a(Xy>JI=H%j6;qt+`>~N<M;M-;PwozDu{4lF{7dY$d
z!g?U52ve$1C`O5HhJE$gp{6Y4DF#WN{pW{ZqP0ZmJ{x&Kq$goXu!MF58#|>*aL<8C
z7@RQ!`Hj}}O`GE5?xdBNy$N{zZ_j;~yWHCi$Wl~CZvi2Ma<_rxsxaEG4FZTfCm9s<
z$KP<O5dM?!#Tl>XFH@(_C|ZFp*<xZw<)?y}{M!g1Dr8WeiQ%Ht-9I?$7sF@>{S6*e
zqq+=Ak-GL_=&FH4DiPLzk-L0U0PPy!XxT#xA#}zNJf-LLsCPlh3ApFr3Q;SVr(AY`
zOY2d*KOQJSi!HbOE5C=X-^R68+6@ddx($VH9YI1ky9HS!od?pnJ&2@Y)k-zy`vnt5
z7XDgiTQ@f}o)LbBnd)Zt#4c~+d{Wo~#78QQEJ$R=690XP1^MDjN}-8v?ji$r{GGk9
znZbMeO|RB3jmhQ=!_N)9S&8g3j?KX_{=4#@q<Rrp-7pFQcf`0%of?rZ6IMKh`zo#Q
ztX(e8wXP*AmwEZ0%|V3WbmT}RW!}pW!QZx{eTMrbdECF)$bM_Gcj3!Z2uMbsupXrX
zP?@*oLMB(;FOGLa;qx|8dO2IyU?f^HjA3dw#+Esk#V^b;LYbOWwDpE1d{$OeMye!Q
zE><4T^({_Lvbjd&2_*dY$%4^&F%>W>k`t{v@+wrXoMMo~&IzKENk=d{#Dz^I{QAMJ
z_dHL#m*7#}jR{*?#_=){IMuV%nvN=1jI_;Zs-7<{!*IP#Mml+E7{Q)RUi-Sdt7?wt
zEUovd+S^t28gG%SY&6Zo##-B!xp0g7!CB2_#T*Y}^>-O&U;0G3Yi&c)`5!0iF1w--
z;*sSppiCFpZrQB3W!L+qJKJ!gyJJ3J8iXW6-a0USxQGj7X&L}{Txq+udL+!%I?s>)
z*3HgXQ}T1bX4%O!6h~0A6@pQAX3_%VxR)Ka{TAV%nX`cnjl#2X8wM2<L6CQ<&@sdy
z!30l$1-~>ElIOH~Yx#`;yf5nE=f8*?mI8IP^u?6ULz!E>PE=-<31d^hn%Y;I<|atC
zmlK7;t(*ON(q?kmyK96z(6l@NV*b%iASCbLUd@qXi~DmG1?3_eSU6<YmU8u08%N^^
zejabWTR=6QbC}Z#jaFTqWZz0Op|hm2#W22q3z94&W^~gTxSe)LcO0tOF1kI)lFr4h
z+t0EIOh(rQQ{%R4LgcrM`y0DY<_Qh*I+K3^-m27b8Z=gjYZ;JT{x8T40{%q|YsRTY
zHND8Jbm?`umF8Te&R!@Y+K@lWt4KV*VMziEIBK5{2Z0=kR7sm^FA4xVeANvTX{E+Y
z&96syXrN>&J^KCpOwCV7qZkImtr=W?FzI~|rvSwjr7g=t-Bs<FN8w$Mi_?N%u@}HK
zTxBWB5OyjR0x)2suJ;`i?4?+59tFHeym&|=caP|qvqSFDaisRp3~m5kAGUCkr{6jE
zGXcZ_EWc|c3dB1`)Z%=ra!EpVSH5R@%_1z-KKGqu1a}XXGJ`t*(saj^;cnPpOndnZ
z0zFOEdYdVwdHyc90}X2{9#PLD&g}fZ=&`}129p{ZI008%r5st_a?>j4!qQ6^SX$2Q
z)kKg9G&!Pk8L(M59`<n@b(%4jlZQx_jWt}HCs!Kcyx#nBkHSSHezAFkSFLA$NiWjv
zqD6k1Kz$_9S~IQ1zw5$`r)i5C%%3<=bsiWnuIYjHVUxQjTm*i7X61RwGg}JY6KNvs
zrG^`~odv!OyNrB@2*ZFF4V;z%cN7eN{D`31_Zw$(AIoF@zS*BfLo}@u2Hp9v*Nu@*
z=qXqIUW)@HoPm16rbeowd|=ozynBBaPL06*dU6>;m6!MCm4wmY?jxWovp$?9=?`Wv
zNBo^4lwe|vEmb6Op%V|x2i$&CdZ4#%(Wz1wmDNp=qs!O(@^H^{mKW@}z<+U{l0#pY
zAsBm5{a}&|%pq_>^Iq>=&l3GY8kRxA0Fxb~FGRxpMIAv`qXAxZ0nUhX7P|m@W#Mt&
zSkTwmk0K$OJIS@$IN83GT|jDy{p|lz9wwa>LOCXYd*$5uJk=N)yg>uKy};z0{&ylj
z%u+BT?8%1hfs1QKSp{&fQvPF{(r6x4OwYk)shgjvt-6Hm8hhkh6jW-)p_(rk@Z&bK
zinAG_7=2I=taM}xZxWCv8QAdg5}M^%v$1}<-ah3(rW57=!or?;Ka}W`6OmLAzhS?C
zyYZRtcvX)(^@y#uzb=3%iHC)Kb;K`uqR{#shCw&I2P>A<J^70(_UmMGN`xclbR)FU
zTJLS0Br~22^;O0^5zDAI<TAg`g{!Nk(%B0JqyQl;RT@PsbG7Ys0&aKQHYz{b3`7%F
zf(kB|eP69(3tu4z`L;_4%VZWV$T`;eHGEt5jQ3$ZQnqBsiN-psj+*5mSg{B-JB>S<
zz1HCYSuX1l&0DBspgElN_-HA_s>aRY{9Xomd++_F!Vd88vSm7t>XOn%c%G{M2t!}w
z^JL?_)W~$V(%xh{<{XS5H1S;HrZOEr`Zc}f39_W9d%ACKrl**ivEf;>12wc_fD2ZM
z7=-eJvJeG^K0|KhKJM%1E?1su;^t&5-KY|x;e2ILPz<;RN_yWA`(>B<YD(4T*u;C!
z)fE1VREl--lL?<?wbOQ^_B7v9<GQtRSYl&IFbYyukUwX%B@TbKCqKmG=8y;12L?0+
zwT>c<07}v=8*X^apw1LD&TqFI!3nla<RerQJH;z-m=Pz7(I4ouv*GA}(K#IaqCKv>
zrh8c?5S|Mj<2TJaWk1LCO<xheX!(9(FtK^5tE^E6zKR9MmrUL7vH=)}2gl<QsiFDZ
z#nt!$gtKfnko$*%T2ihNmR9UonE7B!FLyqgd~xu#ne=7}+1kglD8+*5HD*5M$c0GW
z>5OqQtfa$sj)5;M9g&O`B?0&=0f8C4hU)1hI|V}aimZuwe(M7c4}_ePX$DDC7Hfx|
zgwt@_@hSV6R>segolQolxK4c+e|B9{#-GoL5+?isIGK9{ou>MVoK>#~j?UZAs$5%N
z51iE7v4OanP$8y06|}?D;mtRYlMOCCK+J4K9IdrcEQ1yz)+|tzh;%)|`UcsHXE8w=
zwq-?UHtZ5@cw%NyPHB1avjy4TF&9d68sa{_VmnsjE;1w~u7tPZ<<g{w%hF~~q*2t>
zH?%qqvcFMMB(viM1f2zoC!OSgnElD2ae5e8q+$1P129MZL0F_6y<YVMOmtIUC7K9Y
zvfw4Bpk;jB68VP1tf(Vrq@R_SG#B=VhOns;g9z$U;yn&Zs_m*jR5^D*&S9B542xN&
zlO@|5984g8$0W~pYhd7Ojp@0D9u%4{!lEB6T@2z}oh<U%{b0Y#&}w-ssCq`wm?f~P
z$io1D!|)6&Q%yAb>_j1Rs(Ts{ugRqv*b)adVK6MGT%Zx-`~t)k?V%qm2>vLNNR}GU
zi6`rO_ebg$R{CLV#H|P{A7OpRec79an%`T2e?tQ%#Ree32srd)7v!2ft8ABZw-Yi;
zBJ`)~GvB^ebc>*C*{mAY%^)*FPb5elqL%S?N+pjAzI<OCe3Q&@x6!RrfaJDEp+|md
zfHOJMzwwgoy4Vva%O$!%R9dWx+PT>(E}9f2!xuGpZy^laqoz_Nh9%m5@UQf`hr{hL
zh`;A^1;y!?*L=(<W4`OikyPum2)>6Fpia5vBOV`sj4ho?Pz4B&xpY##33!RdR6YkP
zXcG7Azz#49AI}*kRwsEA^OI`pfBGLFr%_Y7bTJy&cxrf;z{)T&suHV~C>xBkjy+W+
zIsckMA@ht{AlM+s<?|dHs9{L%{7gLHyw!U<KBs6{#tBy=OmL3v>ksuIfUHS-X$UmR
zb!<?kTtu}^0@~P+#P9~Jk=1Y>7tY)MEBl-bZmL>m1&s;*DNSHkphh^Iyb$+OjSS|<
zLA03xR_ZWD-DFNq2Gf7*bBK|A#ili?^L@LQw;zqaPJQcZT8jAt|4NwZtO}+H`MJS$
zwcyXr6=`4d_)LPtXkpE}9J42a@<7M!jK}Kz#3Wh;H&uMS(kLFM>JTO$=_+JF*k~`}
zy+W`f;`Nj%5lZi4|3uT_;FWZ&V(NGuy^P6%>K8S*`9}Vb9edBUP1(wGxo8yK>cf+1
z{Zlk>0W2r<bDod+J%LyTAt0$janNeBIZ{OCx&qR_3*E{Y*B^op3XFstntFYSS1R0Q
zZAg^$5)cL}ctzgU3MH(#W=do%@D_KUaVtjA=4j75W6sTu*#zb!>jHO=!q-sZF?`ae
zhi>v#A&_AEmmvYy)i${<=OwFB->cxPQ&5tt^GI`5_fN~j`xaiB#~m&6%aOY2{(Ou7
zbx(zgWAe{=v*BT1J_#rYYP&(-={V5fo_Nca9(wFglbU;=Q^r59H&C|gEt?bB!JXIK
z30zH3+^@wJlR2B5ktCiJ+B<L_$2r|h_Xc$Qbnia%t7_bSUg13D-*NYq^ZY`<ni1<`
zJ_G1k=6P>iAa?(%dP%cSMY(jp4MaVuAVI=~-Nv`ze`(~Iv5QKxOPn*2&q5y2C{rUZ
zm<2V+LSnx1jUj4ofnc31@$--`?ItTZU{lp(dA-LUDv>lk;&1(D*?7@17srUZYh_}Z
zz$RteUxwrhUu2<quHsijc=^fKBpTG=-56WicpC#EmhO+bOwYeYX^#(RgR)~!J_vGU
zB~h7AGHLHM<AcjKK!olC{xqj?=`<v-Vg(6w+^HhPQ}QopusHe;d-(y`>8L|N4%Ik$
zpY^PtgYL-Iu);<35Fr(9F{3|}r!)X49^?4+`&HW`t>;AXpvRk~g_N#lDXN~GKBJOx
zc`mdb$fDI7FXd5h?}^L?uZVFo;)40<@EuolW!#-YOli6@-Hd#cUPzL}ad^NyFM#^&
zqFP<U;;;5kbZ-3HAD}b!P?Bm-{z}>ol1xdqf#xH9hq2{$-{W>=wtA%$E})J4bEvtz
zDJ5-tq!QM@Hr&kBlJb4#M&0}MgwG}-EK$2c%xS_pl>humxXLUG!s1@BQXwXe#LJ#`
z0C0xZ|I8aB-(W4e^mq~q_g|53y>x}6w7|<}uV4kAAd+<&Kq*?>Ka1)Kk9uB+4epn6
zxw`4Sz%ObphQpJQ{Q(G7O(9IJBnqTJKnz_Iw9Tpe<95LUuv7&(rrKr;aO^dW!4yY5
z?!Bcn*`W{s@5WO?Ol0DSqXXWuakaa{-j>E^`k?#wBr@?Q(Bp1~N+a2)J!j6^z>Hnt
zMWb8AC3!Z3swW?6r?b-nIaD1U3kx%c!kwVdQ=Vg;&n;h_FMAHcq#R&dFD{H=Ll0d#
z?+N{>#eaHT3O$mrbuAMbl!WX!F_a&|h~fik#w<@1P)9G>@UqAh%&m}2p88t{d~(TH
zQ!;0j+Fa8rJ%7jGq~YK*0dT@vfhc}Xd!yIIm;Rfvm<JNt<+0Xi6^|s`o5pDL+fb)<
z(7+McQ>J<a#6N2|=K!0Pq(xcmsFqxCJOHY_mW9&dyPM)UL&U-EJFo6l;A!l<2<e+D
zLa~V2!-R%2;P=6hX?>i~6etX3fd9;tqn2WRya}GKSQ6-GNUTkYNW~|4!O=FOJNQo#
zWxhP9yiG~x=ZfnoZ_nGYe*36sV{d{S*dt^#$KyXcy0~*R%Am+z_hCTQ4#1Q@EQm+3
z$zP>2U_f}26VhjU3qihF`vOTnrAv8Q>|%$0=;#>))W@3<)GqTWyJsGp{Cqkdyva6r
zAceBS5L6%0FGlCG=c-Q!xR_HQ^HgcFqNKTI#rzpLDi0($Xo`Gq>6(4zl3ezSG#h{$
zzxvqg<?CRkJ=NsgN+5Ce#OZPcg2(@8zmi&ve$hZ5!D_(|xb^?D0N59L8->{?)`Y##
ztbWrq@+_+n^n&c`0TILtBu<T%2$J;B1!x1!zG#;+GfNX^O3P_a6A6XOSmcS^dWn^t
zGf^iJNhT};k2lK9mg5X-(H+#_a53*54R`e9zzp1(ET-~{8Vl+yBEl0jdo5r8VGf0p
zwyq1YV0F%8E=pV-lS5?g!$b(X<cg1#;N!Mw(dqar+F4U&BZMyHwz1ibSf9FX+0?(R
zu9HmW(DDuIApNLhC1m5@+hN2*5k_!Gni_Q2C>=89mX7l`Q1SFCc@A9tO_I$5dkUrZ
zT!Vv60FGElzzi|v6zI}7N-AwHl#YZn?0{#<>>Z3TvsN&yCiNxbOZM?oZy!MJ6KXJo
zYr_4SA<W?9>^v<+@;t@$TkbbUxv12$p#!G$x;J7aEbQu|1Sz7h61EE^wPHG09>C;H
zR+nLLg|3)B&lz)9THbU6SNi*#H?qHkuD|-&9-m71Qh=%87Im>BdGjdaZd61-Ijz62
z8;@DWmIj$iD@g9$LMUV@P*wOFe$q^!_mvQYTnz$_TZYno941`G+YX;KLAe<!7ysUO
z+)D?L_rlq5nShmqjf6fO^)o0HH?JAO+(aa-Tc6QX@-)EZzR?>M<1H3)<_}9V{C(He
zdeqOarl<w?(-|R)@SHC1Y*{LO6ja@~Y$ghlX*Qc^o-N&k*A)-OuP#AUimu@g1o`c%
zwBJrht&|gaJBG)rY`a>Bo=;DumvuJ5_Dgp9nw;>2<-Y0qRsc0@E12A4Z}}jNtGYJD
z6enaoQwI&YG3mPL6TU!V=N6gJjL-oWH8?{=>ne`=DVGu6^$h{rer!~bn@rVU1Zt=p
zAlPeTnX?}ah?X|6Gww?Xt!_+&r}LDjyhACYHof~CQilsbD;5GBDd#33z@ByZHD7av
zEqbrQHHVe0MWWShx!$n!q0R-j&_r0O<<X&2b^-<Gj0zY_gUH5!+JhN!cw;Fng&QSi
z)h#yg^E@>EDue=;nCy@M1D>sT_BYiZ{aPO1r9W|!SdzY?=8zohYZCm!0D&NV34E!?
z%WAyOCoY%Qe7*U>MpX(W;UD>z0e*CBJBRFQgGcn03_(sdet+F`<ewes1+4*(j~qMS
z6FmYBQtGWu&1n4MuhA`3b;%l3?6J7Wo=EDx57YkRFTXT3{R9#Gl-^7Lh~vIMe88-u
z$xKv+Vu;^a=B8oI)ESdtiol;_jLbL4UD-58fiHmw#X6DV0WNP`oy`+ljXK;GK9e4z
zcHO_CtPu`7#o1OEU`@rcy;9=JiNCuejt5S+LZWYw0P#ZD8v%8#P4(}t*rN;Dsgl!*
zISE8$aHi)n0&$DKM3k%ee)iD;b9XoqGh>v!x$=8nzdj+KS#_iZUR|ky9u)|g?mR$o
z#353s(E-L!&87Tb1UgS}Lmwg1i*<x^T~AcFZhcj70xjKMu>`B{Au3mIf<<k6$odHe
zF37kpvpoj&qk~ESEVrIpYWL%A!#UqaWWT>Yt6xi9%=@0_Bs$TG%AWor%$3)k^*5__
z2Jb~mOnIIB#wO1j#N}zx3$4mWteGt2%<au<2SUnMg>*Trk}IcsmI^b)5pIi&V{k$-
zpAZ2H$hZD1yfY+#Uu9tiE>d@d6a*qRZ@pEroD$iN6Qc^PSuhmEBu7QcG?9Hr+R;K%
z(pChy?0)}#{%Zwwf|)AdU<$+W*NmJeMVu(z<#lEo){Fmj06s|;(1aI1rc}n|KNTHA
zIC5Ih|3cy*)^-Tq%+v>6RHQ(wSP>BK3TR<0kCqnsv+og$H?eH)lLS__`%JQ##j0v3
z2M5Je5n~;UrBpnY6J0i3ZL;dM!b*fzK#R5moGO#Y#a0;c6{UDzq!7610H3dOdKL%I
z!RxB%bO6#!sxNk<Kjk9!5SQ_Nr=r*_cws{ExBN44f-d25PK}xCWMObc08?U{q0N<*
zZ4Rfd>s8%DTlO*W2L+;fg$Dhi&fy$jBWW6b`kpb2E*sQ(DMGAxp5m9P(}Bugr~i8#
zndIHU;(!lxAI5+lW?6`dp$X;pjdY@4+9I`bH`xpcKV%u6#bVRpTaqa^h)xMse{f87
z@88dnSNj&IN3!&Z?`~(0MN?;85??Bu_|#r?ye!6YUE=00hw-Cuy{p9Mira1t>JSN}
z<i$1T8FHz`2O4I7qW5>9EWJ62Y!KlTG&wX}o^rfoU;yn8`TR*SUm64yY~n1P^93s}
z^(-(v#{UDoKtjI=zd|?0r|p-jH#*NrhkT$Vuu~B65knDm#VC-k>SRoph)i5oEruV2
zuS*AM(gfx#5_1RzZOTp=PUgh4R9R78b~p>^JBgkQ)7rZx8HmHw37}fk?{hEzwCAhH
z6BY0@kb1DD`4t<2e)_%>BV#f9Pli8m9tM<22^$rqTh2h3TO8MTr|=Wc9G?JQQ`k}O
zaIZ|aAmTticw!{N1ApliKI6S(UUl%u!BzAJgk>I#r|=Q@%x@IN6h1OdJS$VI8&=^o
z<M9*wnKO$@O&bP^s66qF&+2;ub5QB3va_s-ealHtCECiL(=!lNOSFysvSw&sed)*D
zoS6fy%qyLvCDp##-he24@Nf<qdNz=UBWp=^NEyiL%=n-X4Wx_{ZO61l%qP-gfE=B|
z=|mCrTu0c^nK-D;XZ0PO1A7`ZC@1pach$L=1y=u}b1R00Jo#SDcEKPg^L0FDza*ri
z;&5gP%86pBIQ5v6lckdnJGC>guL3tHP4XX|&J3cI4ZF!KO4tA<OWF2bp8Ud|^%T*B
zqd*I%0|zKgB)NaaajgzFh+k2KQwsm$IIi#{jz@|3%RWH7B<?Xh$3vWZmw6C;>?g!w
zh9QmRBk>+W6A=&J`Ay+;B0h7RkKq-&VjT1d3OI}puhJua$G_tS?^zc1ErxgQ6TdS|
zsvHDC4sVXoV)nVI$|D`pO)`SEZ<TY))Z)Pr$hA=^Eh(j8r>f`pocONcePiDnhN+ie
zLVE0AjX0LU^(ya%c`%Nfhnt4`oS2^b&JC0JEk*Z~tWh`;5!_r}n^6Y48(cdULFL!c
zf1rJYI3dKcX842oJdYbvNnN8RvGl4r64Gn<%ujshHc(UF8IEBZ`_6BCPnVdE^G1DB
z{R&~+YhCz+FzS}^-F)0{iC5;+SRRRCQgH7u!@icT&v8=kngUUpG7zV+Vz%!x++n&>
z3J}CgGI<bCb~%o{+LL2Z+nJ3OKffh;nWS+_4wIGlqR09{vb{_#>Pyzzk2D5L$1b`e
zI-G8K-j(+q?+#AbC8<!FG7!x!Tx$D3gDyg=VVX#nY`c!#zY<HQBx#!X^#FF7xpdyQ
zws6Lr=UfQHg>`?nHWarPSQf@Ul5W0oGxM&=f&lOt`jb7}iuuk{X~qSCWTl@D>7*e8
zakP)j4~|blXB&Yz;PLL44&d&>W#oDWnq_pE@9){Irvr(usrH|W1)9y1?rc-Pz?YE=
zIB_G&Q*1h?M)TgBRS2kcRGReHHERwF;%-B8Rtwe6nWr5C35A@FWtiG!P#e2*-md4;
z00Ln1SR7}A-H(eJexBO`*EQ9Cr|#~r!$iYds(L}3ofpIORk+lR>ABf@*Caqd(Vl!v
z3z%|ssJs`p>ftPwE+x>W9RpFVj&%eO(PrbG%e9k$2woB?hX5sNcr+KLuh>^Qv$0a1
zYZ_$WFj3ny2ZNzrh^e$(-qEFqP#QGSX^Kd+mSNa#ZYBe{0`6%dbgED3#Xw+VB$uC`
zamNHS8>TyA61eBm2?8XIP#U!>$|FbOW~_87ern1}^OcD$!m(JDV?&<#Dm7qEVXF2(
zB+kuTvEy{tV*Y7GfQuG5^WycWb_ph_6et^H3emz#I_VHllQwa-^l)FcF*WI_r)h$*
ztrgv{&~Co7z9`viKhhK^=~8TE0nu|{2|4Gp_f+*OF2;`2U1%^ptr*CJ36x%8N!K-U
zd+rsIE@<YJGY$dtH;#tDiltvO?Y8BOZqw1#fEA9IgDhKSVXX|I<C(A04FT9<nv4i*
zmNH|xf^NE1qc!DC8wP?!RyxgBSKeDW0YqplRyKPbtu-xvw&OURjfVeA`}7~%<;_?$
zUtxE{S=e%)Cy8-Rh=<o_8%JA_KN@b3W=1biQHxrUK$=EL8wOG$C915L@h}HMT0gaI
zN16h?OBeejfgGp>Y-Km@((u?`mV-T==5wV!oX0%U5gBO4(zGl~(<lDZePu&=B(Xr?
zO~<OVw9M&JNv&Xfp)=jemKhM#c<4BvPwVlK|FoL8;o?zTFeSWpU#TnKyAJni{*X$`
zeHp)c@f|=A4i1cQ=K`haE5Bf>s%Bc(a70}_b<v+%%hwMen~A-g2#BU(7XO9-P8c=$
z#|4@LQ1{6R;y&S<hrbkC;-GWk!m9(y#5XSNPSOlD(&`3m`s&zbN9mS!KGQ22-!+7R
zv|u1GUuop(m}@;2%{d-tT%g<-kL4Dhr}6j%r&fz{@Rp5_K@)X?7za<{_leJZ=e|$4
zr(uDA_2RnWx_W#U4r~#}ovuyPH~ioqYaQ&u`JrP20P`;CXqL63)<rn)0$X8#0|Qyl
z1UnbT@d+f2;A>rboc!kDZwvab)1MuBL1=@1z@4^T_z_J9HyE)M1DUX%^rG_%M=d!d
z<E(Y^xcSO5eHNzgf{L5r1K{u6x)W`b&`8{0$$eJ$lmal)t{FMHZRaCooR6Hfs&vwf
z30S)tpgx8Qq9>8pHfW2)nxhpE1Oc=t*a#OD?oIsMRqmJd5Wik7lX0&1K>!T9O_Jus
z@wqAZQI>{~V`zGB%=hIv09^%K?N?907%U?ObNMl}2Um82vBv?O*gkHFNLAP_5CK4I
zdd~Z0^}x`Nw7t%_ZRc(vB4fvQY&3KzY+8nWXJjZut7dCX5DaWc1(;_~iPv+ff&dx>
z&0@#MuA7?&+Ql{k89QG3amM!M#_3Gq3JaI|GCwtSI)s}XH3HJ2%4t4W*_#dP7A5Tk
zRuJ$3pMlg?b8(u|I5<zaFWcJu+;_U;6gUb4lnOepOA8I8XhE@#6OzrUm@(L=8`E&Q
zfJ3jE)h@IOKnn1t{5A_(tq-I)bqlrt#5vZwZq>$WNd&tj11Tsh)Q?K#WJ|MgJYY*C
zRp2zo06R5lYCR?<D`o^XMIIt2*!QA2E=;-B(vJ8}7(DjzxP;KEq0Ze(X~96Yf2v5A
zVu2E&U4f%&zK3SQ9A2Cn4TqmIN@0)+pkaEOE;gqVv?UA;S&cOZ-qvd?KC|6;><~__
z`z<29j#qfyxuvy+u-%_|Bp8fkeIKlM1S-#2A-J6C2rs^^_ua9%pBmVElQal`eJFP(
zTEq5<w++o$YhaDsi-_9`F>|y;Y35Eko$)s<7)b4b^{Oe+NaO-IA5#aVA;D>$a~jtP
z-Y^orc`j)XXb4>=;dtk&%Z1O1*<f!)Y&;8jpi4UpXQ(4$n}kC{_%(!9L#TT=-4H@;
zdp;BV-S5O{EHBWzl4&t57>L{a$`nP8jz)6dwdCq{H20bq*XwkN&`AA#-2TGh%B~K2
z%b6(JIxrBIJ$z0*zBVTZCDMY2#OYLXqNIJ8v|=Ewg|^$tuu+6mVeVEnu2J{^K4gOx
zWx*Tp)I;&_IS&Hu2m#0N*HXN5C8!#h=ZVub@dPq~(>a(fk`WKkJnMZsR@cj_Q$e89
zGZ5OmIF+Ib9c(am?mxeWCOyG50_bG5nEG<K!jer#Z7D^7JajrTo0fLwGhqbNq~}k2
zFsb&)Pt}K2;tc>sm?ax-NYZnSK!BV0oB;0Xn8Z7&k1hlAG|34%EmB@<%dX?LYyeIh
zrY+gPa|%w$boJUE38xyT6Z2zUbV;s~N|X60d}jK{AQgG2j5^Uzr)D7RXw{I;`hsyR
z7;VU;A%+a@txGQ)`W8gZYa(DECoI`<(30glV)DjTY@~^IE|Mmroeh+Mh>24kRJwjX
z!=rB}9YL87^JDp`VbM6`r)Gus%r9Av`4F~DGYa@JPhSf1Nmh9~OFC>q;?EJlyl|*4
zvq$@6)Br>Jch@ABst4Q&sMq_BLMYm6$(tKvvKqLZkG3H`B*Qs_koDW1I7Uq;nK<T_
z)y<Fnhm4T*C%yp$YSw`puC3R^e#*MgI+3b=+Sammr1+hdfe<06+K+>TRy4yev&I^d
zO{|DJ64@M_zK{ckG8}&L2t$SzMCC8bV^R%mBpC!A{YolO1`T`84(+CiABEaoZc8<!
z#2kENX_C~hRa&fC8S={lF&UDpNd!G%S2^Z7g&ng-GV|Jte1<^s9h9X>1=8OJMx2HG
zDDf)h#lm<lsSqIXJO<6<D^q-O_4$4o0lckq@y6|yqe(B=u+D|BG;xS7e|aw|Z)`CY
zzO_{oAwi`!e*}5;2Y#{b%OP-WN89J(9m|(29Amv$yD;*r#tp3p`OvZs!&Y~o!p2E*
zabbx8+vwO2DQLz(4Ttq`tP}f@$1yPDeBd+dolK#!jm7Oy(K{srQD!S3L{D_4q8UD!
zJJF{kaSO;uWFWP5kwPInetKqWa`kk-(n^X~#Gr{_eh}WbrbDQ-nHNk9R}MGif{{My
z0|vsGmnXoSR_rjPWV0z{mC2i2OorDD_5Cz7t@DN%l7r4oq^E}U!B$J&+8Prx+V)OI
z#+(Zc?&iscjO?dNR#2A+DAT?pka*Xd^4=~}a)DK;kVZRH&uQnv5bj|xk3tAKU%WUV
zy}`WIZg37dE1XtEBF@H<cKkp?zH+e!LKv1+&`7dC3|reS>{HY>2lhnUk2hpYe_gUO
zownbPwtsDdDI52jVj@gD`!+!c*@=mt$<VMa8E43l0$u#Ts~QL^TMn4=I`Z3AYAH>)
zEg7+_2Gr>}V7APs7t}S5hnAzCezMz=B^zRL6wHJsZx`Ne$*;4;?UW3J=9QgcTmJc6
zpG+GOXCA<mhUXWO&=XPl!%mk44Q1{GpS-i(l)Z<XiNbDYY;MD=^pF<Uz0ZY-;qw>z
zWjK&O(TyK$z~m5<r&mO!3fc%eXImW0m;veRs&jl&G}AA68HouRGNM10;v2Rs0fA>&
ze#NClj&VrD{7CzobNzDhc%OQ96PY~JkU@}$V@qvWg^m}5)@6c;dM-H-;O=iLA=LcW
z1wO?**p7|j4cf>RjwmpV>Z{8Y6AXEKpC#Nco=wuywr4)fuK-Nzix>Fil1V<vNT3{S
z`yqV{`TZLa*>ccSgtjfjRxv9SbP|}<4Hx-kI)t!9HyHv_kGz=t`TdCO;#d!nvlWhT
z;LNF6NdLw{zYOVBzn_j9jB(K{k-vNxlL}}fK97l<0_FM;JLPlwy&x_Tc{4#!2lvt>
zFK!!dE{^3xavuscmijZ}G&i0LDR$lnq_7^)1}=m)Fa#1Cdn}15%f)MV<Z<3eT}Fc7
zvO~AkAv>g{$&67x#XMqo;pWATKNu4SW{m;iL76ylfMsl{V;pwu3Fy=_M&Sqx+`Dxm
zp`x2G$dGv;E+3$?K{4@Mk|0316ULK(mjim#C#Fqh!S+JaE7!NXE<@1v97kx4V_Tm9
z^P*-u4H^)c2g^h63JGHe=+Lwc3B>JKh|(&j%8hgb(B7vbFQ!Z9>?z{p=LZPLRL&WM
z%|=?4ixY``gO-Q$MgTrw9&Vl7da<9*8taoW1<>M9|JE|9HWabLN9}ywoE-;<kqIQD
z#=(2#T7c0UU~e(!NXUl7n<_7*aCT!BfkeRde9Q5WOmvcDIHphSi4qc>+I=COpL&4+
znfRW8?`9o9)Rz|haDsa-XZtWiIJZ7D%`sVa{@e_Qf#TM4NrV7RPkCrV*91japUJsF
zxHDi7_@<i8eR-zH3E!C)$J02|i{>3Vwz-REd?ta<g?6gPaj>oZNA(XdBX<WP5^opZ
zh-+jb>_4hbEI=z9<Fbzi$@J)$N4#Dxd;_2bWSHO|o@)dGadc?pOPanSauLZ7V-L-v
z<!E?F+{!f*0cdC5cLIUYAsD5Z(c+n?Xy~jMXsi<10JA|k%HblTBC-fc4PpCXOLoGB
zn~VlvpWTM^w!wVB^0GTHFFNL34!iOCJ*IGAFcbDY_nQ-<dA}+Se%2kZWPh2Hc*A^3
z0k?NClkGf6ZX`IKOAZ7GdkQ2U0bi<Nnx$(=8`7S?2jgut?Y0=95rtYt4=}G)z@fdE
z;Y9(duI+gPSB}B$Rl8#nVfpZ`CFOHcaDJJ#fx1>Ay$$<JIf}Bo&P|gzy#pipn=!*I
zp1m8SMOXH{QuK)}NT(9zCWB%g^t_LPTW`X6%eG^-^a7J%**sSt0+h8oog?k)3nct-
zrzz7%nQBG~5sir967$4L6EFClD*l??CXf@Igo!Xx3!OqfU?w}#E30Erdoe%<8+2a`
z&M^-%l#jMW<!_knbpQl68EP?+ogLvh4F2nQI1j2nO?O22Ll{JVdwon^SQV2f2GQN=
zwk@odqC1o_4;{DU@sfyq<~+ZQAE-+P2ul=9cQ;`6%EwW8Wt}PAFuSd_=8~3{t1E;j
zesTs?ANVC}qH;s`fMi1(;QOXflx<IGns~7slQyCdp*b6n_}NlNt%nl-CJ@>`zZ;S2
zNI;n@v!MZSV0{k<(N{%f*>+1kw>15R;aNmvCm&!eGAAP{S4{THFpMKo8>j&euip!N
zM*mrZseo<iKkSbYr1v`dM+RWS$u^wwPmS#a`sqsK|LjLG*@tyC{O)Rh4a?h=pF1T3
zA)(6ya<2u#Kl@QsvY}d!z;xcGkd2*?9rP2-AX@xkRBB+uxA3wxosG!E&P(Jxgekj!
zz(C*o8#U>VSy&|QWss;gK$0x4g;bdg^&^hGlrA@*zQ6r@SjMl^r8{i9MEHYXAe%AJ
zNKK6Sv2(W8F)p{Td>zw5w;i%%B*vI>u;e+6dAqxhAs=)!KVWYrv0kk$YiEl`jjlJ$
zgHM5=_3x(3<&%Aq>6%^|R8|Qwzz5>ks~^YYMa(4X)kXqHTq3df2bje6!(r9-6jH(<
zz<VK7aN#2428H(xiqqmpxBRu3BK#bLF!swKSnHC3`chNa0`21<H7cY`;i)Z-G~qD%
z=@aiq<-^S}>5J9G)PRnmpE93g(1d8U^|X)1q1-7M2&+nj=bD7KIbF6YBG+Nw{N$lJ
z2%fWbgbNOAtR=^*MczRtdjS$ORbwI*iDg?I7g)v6!9Lt?Nq9d~gAEzKoLf#aS2FTQ
zEF-tCsD$LSWT&MTTCs1jQ*&BvTbYNO56hf~vhRlWv`(3_K-u6pS0NAisPPc>#`{S&
z1SsSL;eWrBvyUwKG^U-qf(hH2j>MPaTr`jV4YP;dz+ys!lPcOMJgCHx39OT{4+M7;
zgax)d@qzEy_D!loDsszym@fMv7sGBuT~-`se5dbX7CB6@Elcloq1iV${dn0vTWVo8
zL$<1)63;nq$g+5@aR?-_85+;vY`tZp6A^$L@-bB1ZHG-6jag4)`Ww;@(o7H<3Z}=)
z9&|*GRcwbEUIQteL^xRp!*pme>X9(;%tEn~Co2zRQRkQ@ZRLH~s%{1;$d5^9L!#xh
z(8PQwrMcPiljo8P0m7C<wHlK7Utz*|Z&M6rL`>6$y|#NcV2=Q0mCibe^$=PPK#KO^
zoibY{sbQE*7TP{LF+G$i6%snLpeE1B19@(K#Am!`U6bXQ6ye%~(w3Vp^TECQn5?`y
zTRNSVfv}<2_(VV`9a0G!@UlJFvIGmN*rCW+C_&LyPvj?!=hV|=BMj54hwRDD0O=>X
z_R8;+&XwYNCDyTX-E)>6kgu7JV5Y=OoZXE{BD=A+$G_36Gv!e8CQcK-)rN|xz-i>c
za@4tc4|Q*oc2kczr6?~Z+n)V2X}~$l38fVSK?8Gq3!~BO9xcP907MK3PIXcRW4oP<
zOh%>FvLsvAbfgvSmRakH*uJsa1L*BrqZa0dbJ92<-ZCaa+dp@ab{V+~MUI7Wz`I>>
zT2<IBK?`f&8G^I<*nnLS1ZlxQGWv~IO@jek6KfG7m>jNnK}&EC39z3k_S3Md)@yh7
zBVW4r%*YLNx_60j67Svkb#dc-uwDiXbQT<$F{#a2aJFq4nrWp44yFn`m@5~BIzeTa
zzS&Npql3?C9Jyf&DruT8-4DsYUzW~I&n;;j&ovu-P`zsyzzx_=S7dJkr|XY&rabR>
z)zO-<TFfJ9-FZbRFJ%fcNQ=%pyt`N{P<hMH-T`{hT<I(ubpb+Ef{tDAlzY73oLpNs
zaQ<C}#^c}Iu)MnAd7nu1-G1Pv$!~7h#@;n2KGQ^5uziBxwl!E>&+dFBm<G_*Vz4ly
zEG~gzJ=((o7J!3^!zDjykL)^P9(kF^Baw<eiy*%C1pJ*AXozEO!HILOV;DRGmobuO
zV{R5+xZmCQslZ=1Z5RJp9`HUC9An*924-&f>-vaW)^@%Er45XT(`t>)do&w|S-X%(
zc}b8HGSqiye*F+LD_B?B-n}a2bxh+7+7A)Z7)V~xJqUOZ=nxR-8uThHG!O?LG&>Zs
z^^%i%K#S3&V*iSElSWQoxM?Ez_nZi|%i;wZCQ)`xR~WL})CW5ZPEYd?ni!mWK<pA(
zXh}$Ob;7QR*j}wY2zU_iAmBm3gMbGC4+0(pJP3FY@F3tpz=MDX0S^Km1Uv|I3<z|P
zF@cT&jI&aTP)IKtKVB<cU!Ya&-(0Ufa{G_A3&xk)#p~DG5(;@X)w9w-UZx%dJP3FY
z=x7iC;{a1|Cq|yJbfFf8KVyPk01pBl1Uv||5d!rj-ZrM?MQ<Jiuws=n=ebRs$Yr6w
z^^a(=F}B|xtXq<aJt?qU5+5+591A6|6{GCZYt0RB-m_pI!z-qP>1ep?%5%&$z(ETE
z2<xD|;UZFu{|V64?z#)p{~g$>_uh{O0S^KxgMi0CQU=<_66V}+%`RHJ*f_S;H^Q{d
zi@{4~U}o|;;0D9NF}O#aVhjw36tL=E+luvet8m=S3SInfF8%2>n^ekNAl2mvCF&en
zNajHpDL6F-WiV(>7B(YXqmjLr9t1oHG#3IM18FX#+8oYd9)+O?b1b9a5-^P~VMCLd
zSVG(vyuy!F#ke$V4lGaRDthdX2Y&?2<SkRIKOW4_{`=ND=3_76F60sz=GCDWvZ^IK
zGHMuoEr|^<MDqc<5#6?T;Y`&d679aRBs3R$E7Lh}ckaDk4+0(pk_mx^6f2o&duh24
zh!eldehG6`H2MX+z8-!Gw^dO)ShyxFb&W@&e9hK@L8gwe*b;_x{Rw!@le!&z?#-WE
z?U=RVQ9Apj@SbNTf}zf|b(sJo)hGa{H|pHa#@=WE6*f87_dvlb17lue+1eUCroCGd
zx^`!0hl^J~4+3Wk0v-cNHRR*Wqwv=+^s>W|TfqSS84O{N%9aeHIgX|(rUPC=odh>~
zz<eGFXU6{X{qHWo5mKGiIoiWCXdKx_<a#iN1*rQtfT1q{;a411K_za_au_inWJj=T
z<{s>QwhZG+iwaEh?c&e^Fc{By5bz+7Ob9f47Em%X?Luj(af+hQ;(%RMeHoa*S3vj&
z;R=e^Oy)sgDdwSWsFd(<^&ybDzZ$I3uj{n1R5R2x`_g-#8J+73{}k4}yL8>S++n^v
z-5ZeLFbLpiC&Cl2pn(K%_U;I5q_+TH|NV$h|K=6<Jl(I;!pf_d2Z6H$0gr*C67ZNQ
z#N-e9t%*1g{R^OZqe0L};ab2w8Yv)&rpO2o&YLf}``Pmw36b8foGHsz;eF2zjal}c
zsOueo-5}e-^t3u=(G&>z9-iSe&Cqmx3PzFcthMByFS_R`kBOu=W_YFVU=VP&Ht%4C
z>J-JH)-ZRj{iz=<&bR$K$2=B*p5-{=vJ#)$R840JmfZuivMPJd=iV+YDefE_62_Uw
z?E7BqjsxZI)O7nsFoI0flbk^@<Q4!9;j!Pirt$RMNt*5}JNNQ0t=;tcUp#YG3xMba
z^&rp`1UwC-Daf?(ebItq1>10*J_M(3Tm}uK7ieH>h+q>XQKRd5wq~8zQxA-B0&&bB
ztsST6s%dAwX!shKt!~0OE*W4QeAn8#VRDvb;oK22+ixAWA~Vw(LSErL2y`F_v}r5p
z4pfhhRurwcc!60|wAeUo%LGWlBO(2YZN`$wKu~2)`?Y0^=8Mh7)0)CiiBTx&yX8rV
z%+WdhwlK7Kq^(;wYlc4$Fr#MGCQTXInhqWk(+uBG92xid!e2hUzT`*O?d@nt<CVvQ
zK)OM|V<4$$F~|Nc2c|~ze6he79K)MSOA1_TrRc^>Np>XC1B1mwcthe_!khGU3P`43
zE7WamHke0@;~0+O*5*nXNDql<SK86obI^45yV_2hQ}z<@Akal2;4zR?G(1;9LpR9O
zb21}(v>ymyhMFmq^t{MH>>y6@9C7t;myY#!%RLc`=$bEp!)nvavD{HjqW;?BJu1tO
zUuJ`ESW&#Gn}OEm3b9R0-7xytrkp#Y$N6t96De<Vs$K#f1iCN;JO+}2#t$J)`l!To
z&9Z}7xWOH+9Q`B7q#e_O^<XgLJju=pg=1O`rmu<_ORl1WlBeFG+`4AqRPC(1piy~I
zRX76W14|~=uu*cd#~74q28<L<%|20HfK)vOk{r-_sdP~Ycnl;34IgsT#1cOoSZaX~
zCYf!x88}zX=NkxGdo2c><M}uX@Q{0)lO*PUrgw?o6Yt$T&-5<wd*Xd_;*(uqyh6lB
zjSYoQDkoGk*OVDcrh=)HfoyY2<y}1pco1kg1Uv@Pa+sYlMhGG3EgzO4fT~+C!+>}t
znH(YmI8OBf^DwY=2L_rG`BYQ)DjI$gzc=<S@q6NZV__S6ml!AUzOk?;-(kiSG$;;z
zB$anK88Ar{1^>CCXJ9d+=R62_5NHboJO<Jh=rs{H6o0P={80(VDnSfE5hc(l&2A!%
z=DyZ-O$@_uMha-7K}HS9b)0UhBooOp!!`DNHsU*FQKd=dxJOf9G&L*z#)+D$jQ8Gy
zz}bR;w+<u~kms2cZ~@I%ftzhG%v95y57&@3^Ie;qZuo3?rVQ#!8y2=2Y~U4FQ7Vx0
zonhQ??tS9(*@zE)EnX%-%7Imz;Bvai0F-X)W+LxAU2yN42LTTPO+diYK$-wdn_kB^
zKU|_|RfWG;yaB_*2f;*oA<d)`En0antH=~z0K4>(IW>`dTL+@sA->X_05{AD&|&$@
zv||`kZ=yP_ZX2?1BnnVfU<-I}HF~Q7=|%J);6T7*AgRKH_*7mojkUJVeh2G7Mu2!_
zLb@lZPYP*7B4H%;k*)jRgbk~KcEcqVi3+A#V$qCuE<oBjK8<i1h`JT+gZ;0t?ThpQ
zl#&Lkc&#uP1-@jNTkWWvaBJ#aJqUOZXdMJR2GTmXojDdy%>z*^(PZD8yPtj;5oUuz
zPQ>h@q%aR`jUtw1?G8tx|C4vql)uQrVq<&1;SHEbW7}gj_Z_R)+^~&>Ygzo>;luhX
zI3(+myI&Z9?OBE!KL3?gEJ`lcrd8-HMS`<2V@<5ExzZQbOB3FEw;lvM2($tM9s_9w
z(3%;=#<8kU0Ya8lwfF-)+jt&?aS$Znd@vEkT$-6q<H0PuLM;35nN{H>#hOM6-V_yY
zJbnj#%R{oraIyEum2o{SSy~90t6@dLC&0nqd*i-qk9ANGc*XJ{kTwwT7)UCcDujKh
zu)FL(LJLag{`~*`WQsimOysk==$WL7t#MReF!8DiqWNnvu^)fsz6G5|lIGrF+(Qg2
zLEf}XbCqTolPxobB^zxY4I#(ILPZUGVm+^G;guK+X<Y-frqMcD9LHQ}Uvf|7TPWJa
z@DM%-kEXO^7gkMuKT`!$8DEtfR@_X#6|H&e&40@&EDG6y;*dASb*5HH#`i=cc{0-T
z(r5?)G7<F7rPg&DbP4<h8pw0DZB{i5)|_WB4m%^@m(0xUt$|?X<L~@z!HVX@OP4TU
z9)y*YMAmMGj`pZ+n$Q;1!os!^dkaJJT#vI63H_z#YX9DJfk|r1Y5TBYC9qS+oC3|~
zTzTKn^V{jZHw@qKIhFB|wum2dFL1%KUC*^E1Uv@PKH#<`q**1a!z+zQ<kx;*;18L8
z|AByk!v$6Tq>qizNC@8iPWju9uvr-y63Fc?zWiRbnLT=UMiY!<+5^+Is=|MQrSC78
zm1T2<B%sp>fSS>GTvbBx+KN>{z<wfZ*1kh6rx`IjeGu%hW2sF(xzT4Ddvp)T25c@(
z2_T)m;W|(SJqFT_jS-r#-hMOmg^#nk^?N?ht!HUwUN_0g%#;ia?D`-<kx@9t8nO*F
zhsq523@a-mQ!;b%#mMa`Rxn3mns0ba(=IIxE$y5V7fdYg-2bJrKwj@Rv$AqZGlBsn
zU$&yD)c6TDBC7>-{}|Kkzbp%V+1vlB6@cu>Q79mE<nndqvUN@Z)InP;gaw9$GRJ2I
z1O1_G_cj7q;`3*UVMfJ|?K?~}S{V(8_e3KRnz(8VpI++E?KaNvXN<G4SkR;mAF?8r
zOJGfjep%kI?yn#m?D?I<#clJf%{7lNpMe8BK4;jLUkg`b(pkBLBefDU)##Bk5n4%|
zr_?=>nAm=w54#fwt2Lkh?@RCa)GmbP_r_zMl9cztgMbHt(?P&vAg6;)GQY)%WALHn
z1yHyrVTnc$6SU0s1x5E~z{X<RelxaN)2kj1hYzoX#BBNfS+!bLx9f2X6*fy$XNqtX
z6Oj}RoCv-B%8+fZ4q;_OGK+dv(u%`p=HmA<yH{piYTD*EP|JB>B4PxyaVjv(^^qz&
z8m^H@G^Ux{iKI?{COqh90b@c~){b*Te1U-G4`yQ9tK3YCpl3N@JmwLHgLm;D&}ImD
z45ZB<Y+eGPg`$N(;dI093;H$|Od!CRAa=?|4-SCYNB$MDZiAlv#~pJIyQ$7!w6YgC
z#^o5-JXcImM{*CmK&)Ok*W!Yei#{5FuzTF_X?WEzQw?>}tfIy1aw;ooag?p~6R24u
z2^ug~o@c9Bfea{NehFsgYDP`Pj_QgN<zONK#LLIbsthpLDsbTwykdgEAYUM(zaGF*
zDgK~|#UEKX4l*wdVdE9K84v*SP@{CEh-Sp_f+Pz99s@}hB%7HIw&@rGiZ+(BMnL!&
z3p7u$kxG!t)k|&|dAKOFIIz86nZ4rn+oNX0T<iDy-oj~mqYw^+P%#hm8HnGujEide
zrMP(#$)uxM2CNXp2FIAcXkFjx%J6O2zxa#L9mZHz6tkWcPyrpBs$yF@b~lNEksk78
z=KWf$Eng`$mJi?<29}x+@^MIy#&-L%b8-SX-M)+MUHajmE$~=uitG;>W~64|<$qY6
zz2t^-TQvi&na%43^B~ZrAmA~O_GoSh(jgGZD}VQo?v|}jL6*=$z%-O50m=_X0z$aa
z(6qIxIOD}!vEX*lK3mJ{UVON!YSfD$p_ho^n~1&6of0d;D}%8E;g#1s{?QwM`<l{1
zD21g5BT<$nlokUzS3dsHaItE?1*Uj27P;hF;F|alUxALAtIZ*KDwn()v&=<R;i{)g
ze(>2!2N3cO7_Ptgr$u#pTV1ti<!sxs=K&NnXJMmzoQf+}Kc5-PMI4WT!~xe?F2E1s
zz30vX1nR8FXCdz{lO@eptgM}xGX#|Ed^`ks?gj24T$99MVwI(>)H3`V8LqgfNU0{F
zkZ8pV7MR$weLeP%T@gPc9B~i>4r@vv0N9gE!#9J^N}5+U9sGxMof}TVU%hDUc~~I+
zTioA@DZ9B~rU}f03*6N1!Z?~s`@0=8?|$``=}(sY%iPMM#fy!?P>A)H;?RN!c8<}x
z5E0KBY+j`RtAZgu>sE}sMIWMDzCIlsGG6go0RbRWdI(Les9Q&m;%Ol5(L#42lMu+H
zrjNjJNfTj)foWfzN8w0LnsyX@V9oPioOCFJmFppBD=bzh<S+{JMD`KMF8@1-;-$K7
z3<M+LXYdO$A#D)Y&)mZQTKam4rX9y?rrB{j6zT_NVNHAJg{=O*e$W&m{~t7jIb?pe
zWwPFJ%|o5!Xy9#)ZD~)!;P*c--a7pgxlL7Ei*Mh8hY&fireI|kDW+t}s!{;B7LdT~
z1bl^t2iWz(B_9zy*Xbb8anZfgfx1D3JPo7)K$89#H(y=x=zBdtASZ*M^;CJ#1Xbs(
zEwI=)=Bv7QywPkjlvnN;6&54#0baa|1#y_X1#(CUUIoFph-S~q&Ci>yo;e`hQ5~5F
z76}$DUY_4KFyIT8ray@JxpM#)GDFsf%!OBa*5fdKesB1#`(C_x>T31P)n4#1?hux7
zG`py{Sm860*b5L<I7#3G(-$cK6Y>~{3pHFV2q2u60mq-T_0Tz0CE|5peLUAr5bzjC
ziUIAKul&KhK_HLQkX?q-97x^32hf3IpqgupSj}b@B^0{L?F_19&a<uM?9}%d*vAQ7
z<p?wwboY2L#V)k5c>Jf!|L|J2sKcx}piP*BAI#&L$JY$1uF}7bdfcP?10xkI90CA%
z;4Q-uHnzP3un9#B<7Y42Fnzc49^YKXsi0H;XF?G)5ICRM)Wr6~yJ^J?!`~Y-yL$7x
z=Nt$qF+?5Sg*zf++Ik8e<bbL&Uh}pi1UwT~ih&)Hg-#C9$SBBr<FF?aC1MgfpuGAy
z4)ovn{7o|s%Pox&NNORr9tur}%zOOfRgj|BBR*~UD!yVQnuakIZHhnE`&`g~_nh$P
zPaVeD+O&sP_y#<>Vn|G)-$%*5j8hb|t!Tu7gBlBBc}c`57Hi8P9{={>M<4xl#lyEp
z74tX^<EX3VLI>7nSU+J0tsQue2@BLt039sE)MJsp^IqN(d}Tf~x~}XT%ptfpTXvKa
z3oK}CYzsh2F>rip-gCn^?H%9A4=23TR%N4FTUeg${W=ovvqYWOc?=|#ZOhIGd;hin
zy{u<M?8$g2I5j)_09Kf9M>tpdJ|#%#E_8?xUI!w3wP@f)begHqLa_b;W6ZA8WIVe6
zr$V;<LC7JbBom4#xIxa&)ged)0b>?+5B?@<c@>Cx5WDQMY%VF|Ewzp)>bBH2w4c9n
z^R#zWc^w!ws~%kG4=qRZKxMgUXY8w+$fXkEsJcE_J5<&kj|bJOF8kv!hhR?l+mTAY
z-)RL0#AM-)Yu+=%CdNs;Z}_dT=Z5cE8lT~P898<gBVK`sM48@-+ckCNz2{O30gr*C
z5Weo>!J6Ex0Y)r34IMR05q)AkY)-V<V0d@EW!cX7$I0GPzf@!{91HpK1?BS}Tl2Oi
z(e;Qwvo4U+*Sq2QqE%0<ItO7_fst@9zFCB~E}i7wkQCXUS+pwOw9NA@Tl*;(2L{cd
zU|98;2TgK#SB*OT+0gvId*Q}&KaLmWv?i-limTvfYtP@TRm^|l<E^x7Fh8V=8;*n6
z{j3^|;~-s}fjE$R<&K`6a9=PAEN2z(PeIGh{K8`(scT)$(HyYkTw6WT)U?r>fo=Uv
zZsw$roW!jPC#-(*>P=I2#*5K3!H-MVVPEx*Oe?SiV+T_(jW<4?!pTQuM)o<d_gsXu
zR;?>8CILU2&Yt(bALK=A%`d_<{jccMqir?GN>$M*TbyBndF%s)f7<UefBx)Oryory
zbkp!i2$XOO*ebqE5>kml;wU%}wkO9aEZA!da35{>b&i8<N{G{CZ)b##=IP?=6g0pL
zpa(>v(Pbg66Eek)i=v$Zc{(I`p<#fk+gJYXlkTyoeGV*H1!_q{ys#wrAa)oykF9D}
z`Qs+8H$*#j<>RZ~LiFnpZ=xHQlomv@04AV0^B#Kl<>CdiwmD-VXJ?<Rs~=f5%!>HF
zh&`xoH~fJ?b~GAa5Xgekv_=T<#@d0K`!cg-aq)r~Z9b=*GqH-XEexhQ@5d1q#{d*C
z4DK|>sl0lQA+Zb>W?lE{Na@-BtOXd58-~VE)5g;k9>5>sQ_u|fIT7WtqQ$mRyg;4O
znXXkzn{s;$Bt=c-ny<7>vlmp2bAaG+^A$7X4o}$TNw+s-_yeCby9kclZX1u(u8--#
zS2QulLAr<i2mQxkSma9Q>%PoFq`9rx=_WbgrypH061y4x2+7_6CJ~4amOC^4;><%8
z*tTJg)1Q3tYm*lxxd;HU?+7?XDR@+GFjjJq7}n4Xh>6iF>3OAFf<PC*1<t%x4`iK>
z1J2T|2KCBI;lLLRh+SQ^3?Ck={Kr<(we+r3y&87h2X7j0irU7VeFefb1if_(?EhRK
zhptN+PYKW}*KKX>Ia{CQbkk-!kV3?L{?-c)`)un?MA}0sUO5nE-r*U0K-q<yE{i20
z7PSy3KuUjAA*Ma_kbmA2D`#O!&;6+A4akujMpC+U3Q6Wc6BB>}zXUqS4;1rI@JLSi
zCaia+^5U5IW5{F=^TQQj(JUha8}eFOZ?0lbPHt(RO4y9nh!qQ4>Fl{fgB2xL6g9gp
zr{_rZkoK*U1{Fwm4aA|D^#M)fIlBl%f(U~3>BlzaMx|;hjPQLxFjb+bd%%=}M{BES
zvDG2x$lLlgINcNUb=EIpL^c{$@C}%NZdSn^LdjdU>5P~e!4@I1XWjUekA<*6_SFw9
z&$0vBr4R=1)B_n8ni%}xd;F`hY~1sSW~&NR{*RV!|L%pGrmVp|VU@J@av68j7pV-G
znMYK@{IM(@Gr!m@Lt{0QIN>01tc9iPa*lw<LQW{iW_t)3DTJ@WA*SyLDk;p#OS(P;
z(h+fpBqWkJ%vsT7O1Oz0kLnwx%(H?}?&3i+qoM%kQcMT^Qd4f-!YF&Z$VSV|UdO_=
z&?%Z&yQ_9DSke-J;2`Nh+$j=`Y7fD_DRZxVa#>IArNtRsZh$0SsYx(no2%^2pm7tn
zow`pq3^ET+qjcf#a88GkbN18kyB{;Y|ME@K*C_2MiOfUQO)aDZcc@ug1~_9JBn}%~
z)r>67?xRI(a#UFF$Af?efi^)P6@;Zt1v*1ymuYY_D0i+mZQA|fo^$+3s`!l(FsVno
zYguac6*G?-!*Cf7^A*d0QC$2wWh%48T077j*8=mEid*+n5}FH}zP=Kb#eg~zrg=!E
z&A||wj_glGwZIHUC>lTB$(awyaZHc-$oxNkJjBp5z5&hZF3s>yfRxX+VLQ>OFl2D}
zTaU$ozliwspFj13bE{}ZqKVB3mc(B$Bo3l-D}1OvJHX_SI5ixMIjMCs+Q3@F^3DcH
zBFMd@x-JCTow&9V)MRv&XkDg(t-7TUeh55?nfsnLciwM-|2sSvqmf9t?;V1M7b$ab
zlgzBg-pR#*N7F#Wl=+Iq1Q~;n4hm;lJ8)h3a2ppq9WATb+oM~?Tac`;Mtz(U_Y}PZ
zNGyAp#AJ5SgX`WdUNE6DX{I8jb!bw!(Dr3LvU<4Y*M1D*{23eo*v*cG!L&6Or{b`-
zP1JiiCNTf%`CFzxL%6HiVeK$W2I|;R)EgUBN)HZ$kbwX)Lv1raLBn$%1Uv||5d!I;
zfjH8;!x*kXeP4mcx&rABzXASr_}AioDXx3q$G|UyUkrafd<343OenQ(;X*Pr>81s-
zd7nNVETfwv`6_cy+>9cd{C1!<=Bs*TfB(A|)?l0W5ApIJ99Mx;?8CWg&;sna)tM2@
z00YrpNZQ#(7iW$)KCv{IJ81PKx?$c60{vBN!_GQ_Q9EaNfK`%dbEq8Ji2edf_1))h
zn&vPME^thR=Fv#iG@pJDWjKudQFr`fzzEl#x)yadv}`1f_sWBS2Z828z?Bx8AESLk
z(iB3Cf^+x(3!VeR&%r+rf4b?fWE3>td=~x@_`ky63s18azww$H2l1K-V|MK@Xd2^m
zpWg?w4hbq15K?)rO;{Vq)(<gUTb&-ZH&_AfC1@eDKqIqNdNkXBqaeTWwwQAY7wz~s
zbdy%wCM|@_1I!VN19MAb!Hd8n?nWIaV{jTw5ku$PN!M}69jiaElP=2hEWSSQ%FR=`
za$dy`VH7(aE`=AY1fetaBPi8=aE@^*e*i-dW@N>}wSA^NWc$4>FB~v=za9iy3jw#&
zw>Ew%<B_?Mc@)4u4L=zEHu$^Y6PZULo^OS}1)ioH4v>;Tya)gNxc>~UzlV33M{4S=
z%sXNiKDZQ{^T>2i@xB}|$Cci8mTX|FaZ}d7tmJA%_||&&!tK+mp#dxd!&r{77G}g1
zbIguhBu5wHihQXU#T;6#g*f$+t4CkoLy!9Y8RoHHfiX^2gVL1i)l4gnGpKu3n1kgH
z`!(&(SH1@3;SS=rbjBGHX^oq(em%<~F*`;R)&XclPBQLAw+Hn#-|+_0TLat<7zfR&
z+Pec5t<x7NHH5V7U}L#B7|X%V$KfmCKL`IYJhc+KOW|q0dJ_J(asMc;FT-C3PZxma
zSO^)&6!`yuXWA}R$8GXmRxrP(Z76LCXMkV<Hh2dJ8R$7sU6b9>pfbHBEn~Y%--1lu
z!8R#Qnk4wDOK}RVJr0LhaT|HiaV7o7$!IgPM_NV2qF=LU?LfPx@|ze-_yM+IA7^2C
zJyM_teWr4SJULKpYwMtX{hLqI{^PlurW{u@t;jf%J=^Lu#aEju;(Jcbi5grg5`wCM
zbTr3MJD?M{y0pVY4m25>(7_fO`Wp96J2(EVsW^%6QyJf>LA)J_j-G2z2y{dSLIUSv
z!u`0XCh`?{5(6>>Y9$;*e*&INWH3A#%W8P;b950r8O3CHO8GQ@?T055`6u{W;pyBw
zoTp^`#)+iQz`j?uJqA*`!>pJSX533GR*5n6wYELrKr*s((|G9{=agZs$x<+j70_~=
zJQbUO(cc!F!){+Y?};@dRCsU^H{Kbqig~Q}*H(WtHY%}S<2;QYW3aqu-8Ss36&=EX
zgG9k3J~RyD=P%tf`Ei$dwAXk?y}F<s3YRYR731hzKmg1&p{YSIEzQo?jV$6)mv-R%
zfCgaW0EoYh|2ci7@o&v}o67igX{%0_(9m7FY1^&xB+ebp(ac2cqX?ek7&pL^5m58s
z`%L(MhaU*P3w{CoW_X5S_^03}!G9B;W-Z1cv7lMyTk!u4|2F&vcoM+mARQ%e5UwJa
zuc|Hk0!ZQgu}L5@AXmXh!@%NbYj@1HS1j4yhs-dk&d{unQ37nTXirl$a;DBw)AB<Y
zya21{X5xMu)DXUFR=ux&ctvKdUq8<l|Mw9A+puHT6mACTG7j7*r%4Se`AWdBe{$|u
z&e`<Bjd+VHhuUSl!zn_;-_e_MwGzJ6^fJIBj2dIF3lvBl2drUlGMxkITNtFvIkr9=
zWSU(tu@+z&cwBXL-ly9yxnK-ydmuUOWZAv*K-#YbI~oHaYLnpS!(R{2!E(-4BJ&{O
zBJukw{AhT(FT!&clIxb@=6~RS0e>Mp%~mVn$&{D|%~^c@8a$?-s=RPXo;%(nKQB<D
zG2b2_<}}?<nP<774Olx2U0*FJn1w`%fBxeu-UH#@gvESgI4cSOi}No`3KR3HqD3FR
zUVPK}WTb@UX`Qo^u0G$e?K?G}?_2@lZIpRn%^n8Pp9g8a``H`L+y3kgNH)$)Pn$uC
zKW;uyq3USZ`fiwNwgVL7;?<_DE#DL?H^oKhz{!K%!x@3huUlqWN238PhMU6=y9;)O
zBkl0c18Fe?TOXmLArH+jl!oTO(;W3UJRJ!znE>6V;i*xOxqJXm$9QxM_Xs=(*~{Vg
z!_)D-OEmApJ*VmX27Vtr@z4E++g7@``O05o4T5yrkJxPE`0{wt2JWlCOx8vWJzgf#
zF{3?MR{#J!a!Eu%RHq}iGRIS*1vGta#J1iCIL5>?#y%CaVp00m&#$s%@~j^|_O3rG
zGiU@d?8-<6w!fZFIMs7F`LMtjk?So(?$C7q2<$b4qB@Gy$$&^z(|2o@wWvxjzrW<B
zxwUoQ;;^WDJ_|Pm;|o=r+J;?;y#gy8BBKfdTfUKJ*w&D)emdcjA81u)p=nZ_W%Bz~
ziVK|9$#*mc;;Pa#MNv}T15akbaSsv%Y7v9r>A3cTjDgO*@}ARU$y^d0<GS%VRuYD1
z9?!(z<I*Olm{8H;b%E;2@KoE<1}YlLL34`Zx`Dyl*dEQ)mgnbeiWA!8G7pyixf>_%
zx@yttSD}4ef;<O{TAP8BNHEnFgWmn^Xzh3X-MY`gYixIJ>p@?2`Nj7YWBf=f%?RuJ
zj`kZ|)+a~rkI|-EushNnx~AuWc@S>UqS!I(9E?HQ8XOY!yR1Fi7QGl+K=WaTauYCd
zm{Nj`sl1vNE9E*FRs{91b)QeHNKJmPBh|!z;zE~ng&{iwYM3j0r8Nw~*`h_NcA6z2
zOjq|@yFs8MF%U&<QS<Kbec)Z~!XaP|lNgEj90Q@->|E3!Ip47(kkN3~jT=YN3_QEe
zeJ;U^sqlY;cbOJ$TkD+cj@4A=W{7_}6pKDE>o_kt$cTT~lD6x*iRru8n<`ZfTuXao
z^@o^y^&ZZy8f-^uaimgMx5BkzM#4du&@KbvzYHcWRRZ!iFq;^z8zMgQwLaCyJ~51*
zmz%owIfTnlGswt1>N~6_k(HPXa2IycrAe?uI_EGiEYHvBexSPI@V+|zRm~;B;kLRl
zur?zr3x)55QuvvgBrc`<t8cE<?BN&-Nff}&6uHBF=WH@PY6lH}uT3c2gN31`K5q5X
z;R@Ob3)E2=2<PZ;i^JO?#Lfc;K7;Z1lr(0-e;@v0_-^p4;Gctk44xVcnMz{kU|Mt=
z;i-YJ{z)L{jy92H8bi=EvG<kV4~d`Yawl3Hgt!t{>^vKG%vUKKBd9oWtRgE@KWx=v
z313a6RuhTXQPbjB2v`9aj9Qn1l94SCGMZqRLz|@Q+9b=2n0~Vs!v+};)bZ^k^Kjds
z8sVSExBqzlrYXx+h>rS$`o*_Qskw5|%2EzMfnBmaFfs+$h&{Tpx;78RFYTyRNLjh!
ztqGm%2E&*B=YbHXc^*jAIS=H)%%cM-Ati%>xWbcrO>7cE(di|LZ@buiM`9o@=&4Q6
zY;`>TBC(M&@Xjsst+>Ado{WUdhNi0t@YCV1gTEf05($yXWfE>$NAQls!x6=C(^fa_
zq2+!{GcJJHXrS7`BhI{Z!w++NY#)XqJ`CpWuU7e_XpCUS125;<<;UhlB61-#h*-q3
zz#PCflqn54Cz_#LNbri;oY;uOj)ZGCP00>q=WA9*j+ij}pywb2*rKNGNA#B^VBh`n
zm!|GgX{D$hZEXuDzGknJbu@WKP}aSuK^Qe5ZjpsR^OAu9JxmRxD?4=_2--JM$Vx|e
zSXR^zx?qP{_#~VMLWV)%vmxDJ@`;Z0gFPtS;g?va7TtGb`=?9d5-a33EZ>oNa7NV^
z;HSZ#5C1**1Mr*$#i_m|AVh-3BnZ4tic@L#G9tOy*5f=7+I}EVPT4`cIS~t^*xR9q
zIOeNFBA%4&okTAG{;#q#$}6t{J})$N-}JDFA#gH}=H%go(@l)lR7av(xS~vawdLTh
ztOt^?g{!%LV+X?DBlA#;13NVHa4NmMUyW)9)3T1B5<H<$eL$OF496a4n+Ao5F6$^2
zU>5_{pFe5qQ4dHuY}@9cJ1g9TV<Hq#i8n6u=#Tr!@SN2-8~!}_k?<5|8HUWmg&l6Y
zmUE@~j#TR!6o!%n$3p1Xs18AP78AOvX&K(TS_T`Caefca@DIXY0RL(Dr{P_dmfz@l
z!JmM4k%aGB<Lb($8`+~F$c@u+@*vDt+`1h+1N%{#<_T;JwW2m+9d1nq&5L7e;oN7y
zK<#g9KL0Swj7Cu~GS61I8qOZ8EVnZ>*v2z*mz$cgs7msmEcx=VTD1*(JM5&}s)E-=
zqK#i9_dtol8_O5lZd?Annyw8}LsIw#zOKbIYrt*L93Q@YI>*jD*R>%)8bW*_eW3~c
zDtKBmI3CL>-|jdoCyZ3WlYXp&e*=CkJRRw&OP|z>&i>Pp7>LUxjsfT#*c=rHK8b;=
zBJvweR&=kyZ-IA-xZ8Md;~kj`rvZ<Krz3LEDZ+y5IQU)gZD?!|DV7*Q4+rgZD@KMj
zSS?f|^8lp+Gr`^=(IdE9TPBuczH)Z!b?b^KZFd*{qIf7qg};o#OvQ>S)~VIZLzM>N
zc@2`Ws!mveX!vh0|LYYG@jaPGN+$uR%-i&X_H{w4*(DNEc%y}(5*irzVCzHqVC(3<
zfDbbZMr?Ps!3QxQ(@Fl!xHi?si`*;-psTTE+u}$cTpCk^d-NsYc<T=Mx8OIy0Yf#s
z%9Ey0;3RVy1W$_xP36$~)xLYb!Ih?Qn%~J}x`gX!41|clv5$T59OS0sJ5mKU@-}#C
zD0DmFS$?;%Tm)bv^BXl7*T(H4n0qb6w;#hZY|EW8Lm?>;qKocbT%h?X#@jVgh_&Vg
zNDMP%F&cugbIl*XkVs66Vg^+1@y#6kkJ>mfPrK_b5V7PCE1Hwu)S!LX_B;h942sv$
z(3aQiWDHcVHXJd+wc)9S_dPqb<j2?UERJtdcrs8&x&sk$c?TM%@K=lbnh|}Lad+{s
z@Ua79eE#52Om0xfgb4#;_=DgjW_GS^I(>j~xo4TjL^@KVwnte=6G%IF{WW|c{B!WX
zg(od)%zcEH&%{4aQ@I2Fukd%m^Benm7{1fHj>JF+Y%&QF^%d}Q;RnO-hUa^iS?t0+
z2g}F8lX<Y=>1n1SA~0-!csiHaxD1G<igVzZ)++dxJMJutq2|KS;=XdXeg#Ge=3BAI
zxY~;2gE6bc$K8e05^#nB8^OjOeNEH+w)lD%&bj-USFXDMrPt-hS7Cb%5UV6Gk$2@U
zeKql4h_pEN!s$h<f7_fhPJ?j*P+GAs2N(Ps65JV*yCj5z2kR1dOwNk*;$0p2uKV6@
zH*w|xcwYRA7e<M;_-h!}nG6;^-U3{3E{i`F!5DgsYdKLUKwj5<D6sYU8cXsE?|$a5
zvha!JCH9Tj^2B2z?bd8(KO<rT@s=9<Q}Co4H^Z-n9}3?Op5I;J6t~JT9{U-!{WsxX
zgufsD3HWcqFNN<COr)bR5VxUTM+1Bb{&x6(gJ%P~+QO^2zXX0h{JHRK?8HW%hG*I>
zsZMT#r(?QQEouJxIsE^@Q_E?I(=aboE0j69`SZWdv~~R!P@?&mW!0Nh$&5uL1}lj}
zp^z*Ozf=1QYFWBJI0Z)cDONOgMP)4fw+ny%^r90Bi&w8>fHq3JVP9Y*6(MDpA@L(5
zlHpX>Qi<h(A<mi^TKqDqf2?TyVuRbIhnR;mS%4ww+^h3+${Y1LS*1Ifhq}}3%YXe^
zcKGgR=3^obI<S7RFPMooi9#LZ7A)#K7QEJRMvCLuR))_%67$c#iOCOh#h3Gki|&2q
zslJQN!^K4$AxVyg*r1@^W5<Gkiw=*VSfm-y;+6UQ-*LSh{seqeG?Mg$bcuB2N_c7?
zhv6TDrwQz1c*Z4@>9npX;GC@rvq7mzaJ--xo@S;$!*h^|9Gy($G5Bx5Qv-PdJ_P>(
zJmXyr|3i4X<?xi8=~z!P4>Fz6@JyFXMUhEd&+I}V&UeAsdiUbXb<Ou9P|u6GxgZz^
zgj_|ov9`_;$?Fn}KU(UjS7he%VS`2U>oBBDEYOSxCM+&~e%*pP6I@-i#%~&74j^){
zR~3N34}mnzXr~hK#uGd9TZr%o#A#TT-_XbBbn7t+Pam#dSZr+Xca?n`K5kxEg3oWM
zv<k+Lw<oMGayum6Eu^-R@T_i|E}!~R?{h+2l|_?3v+sMcdu>g{53!=<2AHP$LnFlL
zx;5POkt!55J+u%ti<6EIYO({_N+2)+I}HC6upC^v-nc)saN+(CYu?G32*wWZuZD&c
z@|=WDdflO=_|N{2Ym42t5aT@f+3;2H)H*JJr*PUFmzfagKXKm;p60JB;5pb%O(m`2
zi}E+=IvN9EL0!U5E#X4=2jIyV*tldOWG<v%{5~0e5j>>;Hq;RKZ1_#^WD;Z=Y+#zQ
z2E+e9_<P_tz|%Dk;b^u3^O$}AvsYlv>rX(EW^&w)k}U{Pe2)w#!A5^=#oS;CigHCC
z=4R;^*}9e6bE^*~C;Qn3gbGO}6f5D@E%1T`#d_(40<Geq7XsGdFf<@LE1A3_p$>`#
z1_OcVMlkc?E1y`sULQ277FFklUXkoUIUnfyHGr*clviuVR`gr3EW=NljS<J3t0G0k
z>uV|x2Gny---umWaJa4`6~0wysnz0cW~!d`Dods6Bq&rW>Ze|edEa^<SQ)MT30mRn
zFiT~Dc~Hn8E~wMBRA4fL#vK>B*k&{gh0>RU^*XoNux!08<L}4miwB&{JF_OD85&J_
z7B;R)XGbQe&`vRtmegbz0{?&T90)IiCle}#Cw=JyPwk-|(&5=<2o!Mp!aojA$GF73
zd*Nv&{{{Sa;Q77|?{VL$Tt{Re?CoqMUVj9?IPO1-YZyKN{}1>%@VCH!27V$u-FEoD
zz&{GV13m*D1WpFPzXVUF^8`E{5rcW0))f_D=22*YIVW(=OianW6T}|O1JS5;v~awE
z%mbNWq{5_B3>&@mmBNL8-CW{mSZ;Y#;vqYvmn@v4kA65;iv%i+qmf*_qI;%(#nIzg
zzInrk<!aI|+sYd%-72n+RFwrIYU9S!R;9Hc!S9SL?A&?|steCPLV+HALem%E*906i
zpDj_#ua{R7q!|1OR_MEH^zeEkFU-LPy{f|AlU0$o-q7s`;u#+g_;|~_KSp=@bGg@6
zFR>3+nn$`vaPPQ*ve!h*o23g2R0l4RLS|g|-3?dWtM7a)Ww;S}W}$u9QQ2Xe@6;L?
zs2bQH3@1AJ#WZg~>+CKp82|ec!DfR=8mnr4f!Z;oZSS&Ukv@POVVk}VrqozXWe)1G
zi<M}`cJ6Lp`!<5V3jZNI@y3P2M%>dk<u1a99C(<Zl|_W%7}vFQkp57B9R<GyJ~3@P
zb{?lXX9um03v_A}Pr?s@{{s9rcozZ4O!DA)C2^s|KuLmES5laR`^VuaG297H=f-!Q
zn);0sk9nb&^QwH+KSrc)gPJzAM^sa(H2$8ly=|WW(m&wKANc=z^zL6RrR9eBYK%(1
z9)Q(lfS6Wa*u{DyfpG{v1acP6vCvRoD~LXmfw+DxT$LF+enhIlKv=0%xSXskThHqy
zrh!9hl{Al>_>Ucj>+(ba`K%o7Irab(5!*xsL9{3$*Wy``Z2W@PXf@Dg2#FZdU5y0x
zVP+JhVxF9+ZPZMA6Fvq&+G8<^Y|XcfW93Gs;ft7dR<Fw1^1Y=4YO13Di!d{g3N12q
z#c>MK;$Mr0fT7$QunhlSdXF>TE?!W?valYV&J~6#`)2u!AR8s!T>z+98#Zf8LOBP4
zV!(qlwi$)XJ@8}(8ynQ0w4*UxB7>k1`v&|a@K3?t0Pi}+A+Eq8plHr|Tz?Kv`V@ih
zbgm<6ATE%}(b<qRU3~%mr||E<FM|Ii{0VqA$`Sa++(5ki1^it25ImU(o!iLH(`kN-
zii>q{9kbeBH4Er?9R%wP5bipnc$%nZ{-m@REg$2$*ZQ@Zoa)LW)mkPtVYH30x^4Fb
zlgNPuKNrD#D6tPyq71AnLFrL^#&tbG#2Tg2fyk@mS##AtoC}x)OOfCxkkPU8a^EQy
z)^V6Ri=iLg?>;L==zeBsGl~Iit`KMa7|M<!1#%$N9LoST{}F6QU#&~6AsKo_WmVSu
zIl-Jk(b^MJu+kjC+sr(eY5c$`83U+ayL){EvjMeol{OhvCvy(5?PQfYGxH!$vMuMr
z?||P7-_QY}PI06~WFFjvbyEB*&FhJd>5`_>%)T0aCOjPlS~p+yqO<(4vK`s6AqjXk
zz+Lb!z*9Bc4*xcMN&KD-OGnN>7XEU0nzd-MDuicvy5=_`2vRXr`@+zJIUs81fwY0B
z!!;n8>RoGpkd{x^C;BvfBFG<E6Nn{>NJ|${(RKL1KS;)WgHY}VE_R3G?z%Mn*S&YY
zC+CVqcQ``B)i&6V;8gjVBHHoy39zDizyVv=Inm=!s@&ilihDTka0{u8zRu-fR&-qp
zVu#A<F`NPK@bkJbZN1^vGnU~CLJNsp0!5G}h!w6N(bmMh`0W9KGctN&8_|!%{eAe8
zNQsBjIAR~e-U?p;PqWu2@J+c*_;3L{1=+pu>^O<N8jtDkIywU(gcE_j9M9Lm4~4%H
zeir=o@HBHVTsizk_(kwb;19tky2P{+-=A_{gn?>mAExvfuA4Fo+t_9+=Ak6yW+!t>
zx(#2@)FWn;TlT_kgYkGu)2DYFeTh5Vz-*)&An-~!N<If6O~)2lfGZ42ww;OYNqqzv
z+kS2o=~8r6B*h?{{;3FiT{%(Q(`g7!WVcf4T8}X_VxEFhB2jEpuf}3fpkz66F-&$~
za%0dM=i<6zds!JfKQ-b`;>h4NyYRm9TW~=9P_$-ZOQl^MiK1w>AO^Cwy!mf=j}|Sq
zv13A$<2o*~3`0esVK&RL{fQK09GApn{5P(RnWbD<lJ+o8e|RzwH(%U#9+wUbq%mmk
z#LEZczOnCZe#co(YScut3()k#F_6q{*(pdT6%k@c64I{taDF=0yPYgII|WgZxw$$=
zosbSPhmm9DK+%mr&<yyhj4&pyCarLaN#IA*DkGNtK(_ARfpS81S2_|i>S@Jd<4`uI
zAez$ta!G$dn{*T_7p#yPA!nL_$@zRrQ;KUP4x>C-!BZG#z4{}Z^Ni{dELce%3#)OT
zB-Yr0r^?BW`7*M77?>Tvm%|Tq*P2Ud+(bI`H4b*&(!UIVUIdIzZ{`S`gAf&r#llMg
z_eW)Yvj(j>c3RQQc5=0kn-G2|Jk94X!_xtTK*>`b%~+HM*#|nUOIHTM24Ta|H*{`e
zy4Qx^Tl8$`k_jS}55mZJOtY~(Ta;#EU?xZ#KDKJYQF$tH2>rZ)L*{fOu8P3gb~WfP
zklw1ntf3PqO*I(FA!sfb-PUF!B+Ho`Ca0hW(qh{ytB;jFwd9UVPq7sjE?uhdCv(j}
z!_KZA8WejxdJK*qu{qs(JODL>;}~FfF_d={7R~eqEV1dYf+JSYtA$vI!s(=1A7#E~
zh4BFc^8Do!9I8ak3{`U;!E~V|IA?Y_uafzTTr53+D%4_T4_xKZgKj~Rnax>G3+)2C
zBqR|W+XzrQoVl@5sqr5`rM28TmGM=%A=P0zvM!kM*L(+wO^sKaDF)j<j(E!IL9^<w
z;K@Yj+;7g)$zL)Zy7XqwP92*3Z3)1eOyn$mV8b=lcu6Y~`WLJzaj`jRsn$=3lTU5T
za8j$M!__nufjL+;mSr9T-@>*hG{xDNU8Z4{lCcf+trR=tZphEo%Ze9Fs4NUE8fyD<
zeuYl-IZ#%l*21Z*^^3zNN6)gg3he0hG7fm($v1@yON@f?rFAf$fVCV99Fm2W+!3P9
zm)><xyEnXY*V}z&AjcohwXM9ci6i3Yh~Jk31uO;%mVsXCB&HaJ7Q|7CI9ElovA8}4
z#sNaE^+d6#qG8}e>kh35CoI+#B{8cu-z#o`w4q3)CWAJYFa-&mjybed>rQ2SlpF2U
zl6G>#9tIR?k~)(kjif2+3-IIPffwUS29(HL;-Bg+`M4t!IbQds6W*jV1L-u)0Y*_1
ztF2z?*L@q%9}Yt@+=)#Xk41gjCc}*Ed+nABk2P9Zbj%PIIfm}KaaZB}&pw6`n<-)#
zBd{KVQjaSEH5#?amr7dXh@a}0OC%V3viOG!B1P-49;SE!J58O#7?JC!sc0N*=4$kH
z<BPS@^)La>Da7{@so0#W^*=Dpd^n^zor#2B)3|?7qWj;(hb#a1Np~n**|7>Ul983s
zHx{$UTAH2-<t%21F+huizmD+3661LHt$@JkNMI|HJ3CQWi55FfvAwVbv93ngUhvPr
z?}Ts4xrG^m0Mx{{#{;^ItEqTt`QBq7XJ|H<PKXf7mP8D2vEvNUn*AB3C!SYcR$aR1
zKi&>~iO6}1<Dj6(dSiQ8jh%a-!lo7w-x=2qh3>K?r2YTxT?u?t)ww@+nVC!$f*>kx
zpg^lq1zA)?5wtB0i%VOu&$@!k)2dH>Zq+J76_<*winc{%QCn+`sFea17b0p|1EK|5
z6$Q5^%ARB<v)p^%|9|e>VF(GyB$LSy&iUm`?sB&KopZkLe9QTc<A31kx1(0@w~&Y3
zjWU6Ju|krbc{A17a48BZ;y5cT-Fe`ho5y}lclG6aK4V(018H=SMpSnBj!Md>NH~&#
zuHoSzUfzAXrb6p-%mF%N*K&==@0|1V<G7!Pk%6nlT`XRP-92jnO6!j2+3pe)>6Yqf
zvhUq{^_#a4fb1=kG2jitH}F9>A{HUmH1KgA_c0jn2PV@zjsG;(Veraw@7!O>mE*EE
zBF8VwW;weozHr|zf+8S|cB5VkSw<C*-~Je-nGDoMOJ)LBI;MSV_=~Zr!qJA!tO!)a
zN-PqJp%dWl14&>`%t1-6V%HD~rS9k7bYTq~9zJJ68v&u)&Dd4FKlBdn?m}15y~nn5
zCQzJQ2wgX<t3C)P#BFcgI%)}tN5!6rN2(2bzJLNFtpy}DdrVL63TLN;kSH`^f~c5S
zq0{$3mv0ZyA-03jva<oj)uPqG`seW;OW*TLP*4~MklxXY0ggyLs6Iro=Q7mWoIwEH
z<qqGb)##<=a)k)K43Xyk9G!Lh*&DHE;$1Jq)rhnNW#FRHBNp-je#rH6T=zgE0hx)&
z;FaUvwWD7}KpN;wPu8Ds^sTyXe+G}O-H_DPYB!Ll`H!`=nq{vB=RgHGT#CEe;)+m4
zC2EU8W4H9bZ|dVk)`4HbH27**Jq?1A6zUY|=LDK~DVEx0Fhh^Phq@nMRuCu<W>G2j
z%?7JWd<B~`sy*9@0Rw!#oX`-{v2=H`qP@I<p}~B7*hPR@&?Ulrnw5Y$HD4lJ1sh>k
z{P0QFt#uJgRw`13WCsEnav-eK>(6^}eJ3Ib2$6p}m%zDB-A8vsav%&(B7P~ayz!X4
zN&fT7rF$hG;&X@`uj%FDw*7=wLWp}mfXc_vg$0%q#qm#p&X?daLU9v<H%NHh!XV3w
zz~=SC&Q|<$6fLDk%`B9}N2|Q`itP(;Kl@q7Z;ZEX`<Kv%yn~grX7~$zy3c3ARfpk4
z)8{ve0s+0Gs8AGk++P?S4{#EJVwg>tCt}m$S!{<(NHY=<G_(0l%$6js#kzkvdg2Rr
zA4n7PHYJ$`3oN+ALfN0fuMAh5;>i8>tGm){N=YhBjv$caK$=tAOUOiPst_WPJarac
z@D|s@@qilwslQv8d|4mfWO|O1zK9ngK7`1?=UK!Vvdp~ssSgl&)3`Qm2oM$J^owp7
zyT#U=H_?_)lPg_`^|R78lmz0m0_84%!^T*PhZ&J8SLjfzFTCZ)YZw0Nr}v@kahPB~
zjmN?_Tk+U5xS#(sh{H3Cj%7dVD=J-NmL4FS!cq~33oeXwvLrM=DjW6G`-6Cd?U?7w
z^K6_r+8iFrrHjRAXDlmyktzfS!N<`Rnphh5`99&}{62{>)o^u@IRrR%u0$M%I2JLA
zNFP}o?|et4IjyhAoj~f^pciiv2@;@=h*J>fBhE%77eX$k-3E`!w%ZSE$%lD}qk~?s
zG@OXM29;`0h=ee}u%_QdqTk$FY{=NPir_azi)0DO)pc`AODhA)bw>|{;F|mn?IS#A
z6oc>oTZslo9cBSsOkv$s+_5-d2TR8!bZrpyCBT_3rvakF6;oeuFJ#@(wlU0}M}c$>
zv)mAmVgKdnxakF2++re!PPGj~I#XP4Sa$is?}VW&B|&!U%Oe0}r72u(;FDRF{K-n8
zZBU5&9dby>pA4JuFQmU3@%M-%6n{YsAd;9ABhs*i`$(Tgq)v<rNUt7_Ip!ge=!Ez;
z#0`j4&NH-I(UtpoP1{K0rQP@bhe9^Fkn*vkww`v+i{;RR^v9eV0zhyOwJ7NDEd?F-
zVjKze(!41nI9Rh9LLsSm2l8|DF)*toC-LqrXJHfKu3^Nq6^oH_4a9S>aVO!xr^$cV
zWac=-%AWh+CAfuH=Mp4Y=B@>_;oX8;f4X|;q*?c&!Ba4$IoVqhz<EL2WnqiEaGp29
zaNG%)0R~{;QV63Z<>y^qAYPwgVEgA@e;x={b3FYeF82vx<LAej&d*oSIn47QVn4*2
z5E-cNcpQ-gf<%@CgXz5TNg()qIN~FSwCuVbk%5F|&xRs0+1~x5IFLsAkBFB@<Sk8G
zblTm2{UgT3LD1lS2idsr@di>OrR;nS4DA?jO^dS(-v(w1y?N)^EAW=(c&nP7iCcap
zO?=6FBkW>E>pp?CZlL5tCtmfO&kX$9ir2DvoFx1<5|dMnutkEoPNvVppDw+uXE%N9
zJKE6fYhtz?B(~2ukU*q3N@or%*#7YP{pVmaCy7Tp<UW!hg72vJtOSh=!G?I>>3y^J
zzb-J-$9#GorsKVr&-<T){P-LvQCm}lu78i!ee=DZMCwfq-rV!JhkKB5Eh0rxGZ3XE
z9{w}bE%#JByBYDjh?5bgBa*1>6T}1G*__$NZ2MXup>Pq&kYCR_4^r|FY+ZXv_Zk_3
z!f)zMu&`JY!46-+;nI|%qLM$9kL>}0Qrm^Hnac+2w(%z*fbK5gkmG^`g!uS1!}MSE
z$_2eY&POhUP#ZaI#jnkH_~v-^7JsBR3O0#2A%norM1)T0<)~#`zc_Tx`V=C}pqRZa
z>FIZE>jCctMVjGrq{N?2IvNVp2r#6lsqdMaYWLsz($@EE_nhvN`qJ_l+Y^h+-KB7$
zT=nK19oIFZ?>r*Hx=Ij#h&Uecc*IW-S0QddBr)lVcogCQ#4U&<JTnoQj)4oXx`al)
zXpcXN18GvPl6bg8WTE}RbEk;!t<#0|zd$;p;IIm2q{;EZMSHyg4iAB#f&stq1v_X~
z0FHeP-@#Y`P7GIVA5=D@^4@uu^j}<W)*L)6cARzCP%%&Q1+KJWwfq>apb+puj&qWT
zMd`xfW9~4QkMrc`jHi}#4%)t{0DoD+Ul{O}n!@kfCL)orh$djQEZdom8`2ssX(Qg@
z&vC4cSTH|mmiV52>$<Zxy4l(x=aKgLyp+hc&a-xL>v2X+{}^xLa<EX$I}33h;$evW
z5qlvXg2;3vB5xv6+_e^wdr3Tk!TjDeF57?L2dmHw2z>v(=SveYeKZc_xB^&~gDfZ)
z>_AN1d*R|<TkweRU?3oTfuJDau;6hwHCkP#iIhQa0J?f4SW-Hzt+<ghXH@<OIQKaa
zMQj8~3Ut^|evYP1gS7l+xjUTa!$UXJ43K3b3&*Pj-#L%2?HntNJdOJibUx`3aZ00n
zafoH2HKG>o-or5(x4|(B`auRdrc7SpVmrh)FX{p9_no_2tE9NneYcPNVo~G`#`f^V
zvWr_x_)}vn4J3R<&Vv6r_Un%S`tl%I`w#qZ6<PoRI5I4-&EkH#&}j{H7%<sUz_>?%
zDtuv>#;U@S{Ytc8$uP(C9}FdY3elxk$)jLFMDPy&p)~#Ox#Rk9-$^p;6rXudTI2tj
z(^eb|E3=7uAb6=2jZltD?i8Oy45Mv>X5{R-7x!D}8Wlh<l<SZtQy)3)y<ylZ{s5*k
zj2d>EyU=Ffm@TwVPt-1sZQryg5{Y(YS`Z5peX|sN)fUj46$!&X|D9V$f0pY{Y5V%z
zF*WS&s%wE3dq99!7a_KN6EkT6$)KYZ!13qW*KaSJl0EMUnKWYGOsfb;4*GrMwB^IF
zN~UGU83GCgd5BaJGpAQCJ!^v-!DN`C2kob3pEqEWe4mCq)6-}Bdi2Z{KLH(k4#?J9
zZAtQh^*fHcavn+;#+~yo>{CNZ2Sl8+wX3Ilp--@A&GOSN$C!@IeupMcXiNu#gXcV!
zHU^Y<&wz1%yDOx%8Ml<)uKc=A_TTA~s^_C42Lt=&enF63h|mP01OxK51-BIs9}{x?
z<sr?}nq;>oRoX5PP&$xZz|rg*tbs6mlfIkW(|0F|5Q+=oB;L??ZNZsOEM8;jf$?xL
zG7cO^4+@5$gvZKHT0O~%anIFrH$1!7uGLS5iS4~}$M;(<k+l>ZO+Y2BhqyJ%fK9wT
z7iaUF30;WfLa@T1B80V$&>j6LH1vIbC;p=?tsltogp#Mrg=<z#0Jv@hJc1w|tlwJz
z$+p0Ci)JO_Tk!DV;OBw+R+k?GZ^hUTBiI)cWMg?P!vw%GheXh=G~a%mLTsifggtq_
zH7wKiIEKGSv!XS@Of#zVErWnJ0b5pz%DqPjcq?eK*1^L&4bg>tHSlkl?h6#yi74?i
zgVz_h1G;t(qxb;m`*%)thgtKk?X`o6ys~(m?Es%s`trj@kH_geFkzH7^<JA;6{wpC
zZH(LZS6(pycJZw&TEi+?o<$Bb>NB4B;J^YsaVubQ8IV4Y7AC~Jw#jQVSR@kRnh$X@
z*A0ai^?y~Amka1LD4OAW71AM)<Ur1tRP#0#ET_PT0B_Slnx5FZZtT66uA%>}l^;_D
zA~@Y&q+79?x8J<Ic!=Ua8tQ}WKc}cdg;s`u+|-9j+hz5)&b)Db-ZTnIuY^uF<iw*N
z>$=JPYea_LG7#6`N*w6hHT_sjj>oj3>W6;v)H0eBf`Djth-ViP31m5dfB@lYOHu41
zBM{`+V4ITlfT9U;Ue{uyJD#;FS|%X_p&$XUel%lc_kfvr+6V-$L#@GGiHDTk!xGge
z;^FFrSV&(t=i&i#=yXC657|qN|D;Ay>Y{->jlFLmTk3IZ<!8AqEj!gnb&(+iln5(B
zfHgZg#3jIMmgFGL(`YJs|LAGU-*pm+>p%)d>ZTvu2)vZ<wDvF{(t>7P3xK{{60wc`
z*zfQNth#1}H1}Yp*5F2}Yqzf}4wk+H5z)}}Zv~sgo$0-tsB=1=f7DvypY(4UHDl#a
znCRY*qkT_+NR7LJIbL0Cfm3beLAcnGiMEzUZT~fITz>3ESIMt=#5nyE)O8afz~xN(
zfx;G;2SybX1nNS7t4tMg2my~9p+b1}_yO<uV#ZaP?M#3JzmIg&#2MAHF&+ZMy~B;d
za93p<hei1#ap6oJ_2lXkn2Kc)Vd64tOR$Px46BCO?kiA4F9R1sgiT$Dv}%$>L(?u8
zK6N=aQz2xR3nEM;d{A=PlPk}Lr0N;n?>_++Y9t<XOqcvl9OCWs;n)*9g2NYo6OS5K
zpZevjZ`;g53=L~9fgR05kvG99!547q@+JOL8`cy=LBeAqA&E~@0+TU4qdUO%oQviA
z>M0+Kn<mz{=knFt%pssSkj!D$@*EyF0#Q^*(|Fq610$ZSd>_d0dQgiq;7Y@QBSRu?
zk2sh>q9iI1;b4cXR@-mnlgpnh6v5|kxY8E6Y8MkB6l<}?5htQkP~=|~u8O>hmHj|T
zBs4hZh1vn)G_=R*tDDXbQ0JdKWRE;84kRA%xn-3-GB;opcfA29;WEgk4z=RZIPr#8
z0T#k>Fl#=X;`lW*MGwpwcl__rFlW9i*Qd@yg=Rv4osYdhq67|MhJ42mhj!FORm>6Z
ze_@GFH)AvG9?F$@F+!t=JX;1!p+=QYWNK<qKD#cM>f!n;Vfi#U*@2}*0m}9Pb4g7Y
zo?~3HC?-)M#}GhQtI$>u0P(Pa^r_Dfb1&`xD(1%3xV{Hwz8i2VAc;FC#!hYoH&htn
z-1Fmwu1|_+wGTlIc8WygARbiGxA0r!MC6Ho;EEQb9qS-kqv(o=8MBn!knm&o{m*81
zt@Q9oizlupb}D;haR;O1z`Ib-J>Y_lK>Z06o{n1LzJfxZ9gD5B9OtS5<6n6wG%-XA
zIDkbWkrsabzMGw$7)LL60Pz?*&=liN4~TP5^@)py`o+%&`^3>*sg|oh@Oc712X@rN
z2}kJS5S-oF7*9at&k=s?VTL%qn=a%LEDcn^wo!yu3J*X-dg-G30h(;9M?mUtm3o>B
z2(%R8<f4u3yAE;<p$QTRzNTp(jd}i`_lCp%C161Q8*KeZtipBZNfOxcPDBnYiS2&2
zZUe#M>;dfpTiAU^%vdoK7K~55arM!ghb~xPRtz1AqimatP&tb=;fvZ!Vui+Au+r(_
z(lJb9&SXdGAqI5y2L|J=LO#JybAu;#Dx3Ol56$#FYCGCcd>cp>*PF5~77dyrEX_21
ziD<YIr0n`v$Mt{vRlW%URfU@Stt>zV4+5|U6nzfW#gJos;_%MwY&Q)4t|>Nccf^0b
z!A4k$v+yb%*V8=jU=WY9`uRkk?uJ<ZjU{F+ONfs*+EP5l_jN-6%YqY+G{jj0{V2~7
z3sxt@-&Q81_$xg<TS1YSuRs$Q4DyL%yBXq(Ew-3Z5fh()EAq>>G)AuK)~@ce1p&o@
zWDAllDhD$NNR!q_<zr8d(2__C82<zFtUDpf`hq73f_Pw-(CUa&%7OeJ0T&=J$Ku_D
zKtbfO5l=21QZZ~;0%eJ$ZloEllI3eJU47zaXsKU@2x)_E20*+7eSlC@P4vDW@cA`8
zA#Q3$1*t3)z0uNY)Dz2w>b~F%!(Z?tyo7&oiE)w~4!#-WL-z+vs6u7{xm-BslKyY=
z(@9X#oO;kxstR?{1PHLliL}WP9MVY_rODkCd`5jp(5K1ge*E7pAPqa9dly~w1@Slv
zoXWr+rs#E`F1eEW5DdGw2n6BSZl>fu$b}3%5`N6!7?J7IYvF(+!6Jb=8Dh1bDEEXO
ztjB2ohi&Wz?EHIBU;pM`EBBEWfq>B0iA0R>JM~Ghu=9h$)GmdBeGWhXbvou35xE;c
zPcV6T5R_(gfcK7bK}`NwHhuYx!+-nF{fL;GDbnI<9|gnwOV~iv0$d0x!e1(A8c>Zh
z_^6UDgHq2jy+HXCy_HR`JlD~Unb7;3YR9ACtYkr6ZRDh2(kmixHUF>`cW$3IuHPEe
z?KY^{Tvn!yZQtqH-9*x~0jz;9O^*X0qW3x?4262a6Q-tvBbi`x75u|gV{jtRCR}gA
zH8}^CT{p0gqmb8b+-8d^DCr~EGyc_9TY%4&p}ss@!;bhGToA+NYPf9QVW$-Pm<aV{
zk!jUW>q0<@uv!<snV0S%MIhL6O{3?}e~f;5)rWRGz65ylTHWX0U+%)@EF`gEaO9K+
zsx^+*ZE=U*vEalJ)0a=4J8l5-B-421$_$PCuvARRmoGVf+sGNqmjJP!g|bUYtnemT
zr&9_6#hJLTK+Gh_(z!`6GGpbhZ0It;VI3g9i3`x3sKC-)V}fePvu+FPou8<<;)q)L
zJ(+w<CN0~?)A|AXRiE49Ux+97!in%n9&p_^j##|T5*8F4b;VZ%8I!HwWQ&)U#l@=i
z3Gvl7N38wIk_g@-Ms-0OhVuNK4-@dj4nl)v?8?t<l#juctkX-+{M4^(1yTC*yK%8>
zT|yF)wO`v(e8qHF@wj8s%cTD23<3)9IRkaGDw4>SImbNzd9b?rn?axwHvoy2=?Ksh
z>|Ur#Soq=-urg0Lwc#h`Ty^T!j1eyh4{AU2FDtvoBVszd2@i*pMXo{9r#Lo32F{*+
zaqrc;H>BYw)YBAwQi{X5#LqR;D1exbWFvhn+8~rXoBZF<p59*5bH^)EG$-4nR+|k&
zwux_&aFjdIb?ij<T$!*JfXpd|ItgN^t`Hm5Krym%y(N}!utkJQl05_>dOD!us+7{M
z^bV~r8waUZB&1i3n*Y*y4a=uhMV<0pS0-vFIv|tVpg54+!aLL2QZu%E>|yd8f|1kT
zUk}Oje}Q;h4zA#EX&~k54BWEaYiwfIdm_y*oq}NR5i{POJXg~`$f$D8e$@Vo==Xmk
zXD)vw5sjP#j-V8lQEXEZJvfKiA~qiPH#D{E;WOXsZGP&|EeS+!x({tkmd8>-9MFE~
zLi9u|vJ4`SYiD2DZ%Ohw2$~`uO@(u_(k1(R^_RBzbW==pghf^uSbIB09wFZtLEx#f
z2Gcc`FxfcD&kK^*P02%|Vb;@*qzJ2twKfYfDpLaxP&$wX0F$qe=Zrh<lWk57&R^Cq
zhZEJ=!16JA@s-mXEQi<bBzMvg4oJ?0I&<cz>6Mp^p1Qoyd+%mQyW8#3L)IwL&=z2J
zu7^o4tC4IEtAe#u0Or1BXFgNeGii>z`y}>6XefWwv=x1Pw)G?~&qpNjK=V`L2cAhz
zA_1p(kw4p7Z0zg}{gx()h9Vxj^-t?Ppzfj;IuDAXw%4G`>p|KL)!r0Bke-+6Gsz><
z?mo)Wi&WP+gn%L-IRtjLs(N?)DOCeM>+>3{R<6O^o&by2^}xHBh?x3mL`2r7i2xS$
zeSz+OWBK%l;U1({vK=X6v&VK#6xzTG`uzvR&$FZ91dxfLJ8{R1)d(%JL)bN2yG6eK
z>WS0z-hV#ro)>OCZPH(d^$$%2p-K{lB-c<jZN-JK5cn(FaZ)|?!I}(hw=Ek3a;6=K
zUv<)klRkrat|V4S-?X;YQ?Po}JO~g`laNs7k?;6g=|Gy-$JxlGL|EB?VjGkpHxCN&
z*$*H1$CN<lgO*y3bsf-c8T>|>?!G^XbiKLHg#s-5wF_YUJ7~m=m6OBaZ7<MmiEMg9
zx&@hAvn#qSC@87X)&QYwhCBKL!{I6sqvQ!R0y|R*V0v>ZFb&OZ&jNjMN_?Hxo_5y@
zkJ<XHSGV*!YV#4{*k#y8d?)sl9N<|Wr$7b*WB39ZtgJR;U*%nP#Q*fXOHQhqr)WkB
zMCw98AYUP%IFNkpnWnYNnSav{!~HKgu0l8TD<S;39sU<T$7&wj2-lFQ6+BBLcjAXF
z@X_ER9w;g-eQ5aO@Aa0|xVi_VPl=Oo$!pCy{q9-av@f^Zv19w@`?hc2a^SWd+j-tN
z&N8980t^Cn{-F#i)~VYJqE?&{ulE75c-*w@={>e?{}YP6ADl;$c%&Az<SOI=P*${d
z1IoK`z=r-)3itmv-PYrsCql!W3JL-W0(l7mML_bhTQX@BHXwo#`1?hDz6ut{rx==k
zEv%XrVx=F&0ZZ&(VE7~<0a3sfL{gScK+zW%ruEFo=_@Z9{`@~Xf#OJ{&CPvo7R?!Q
z*9*O{?|rhP*|(s)gJ5!-uC8yOk&^Bhs0mHcexQZ7pJQ6lLexrvL1IJdAQdQ3mTOil
zwiHC@Cq*Uwo(bU{_pdOG3JL;Eg#gAk$Ce6h00Bin+5qU;uM!goQ>c8*pxUYp+y0)g
z^s8|HC=BaAhfgicFKov1d};x8Q)Y}nqnW<I<&(|oz`dg%UpkP4LyE>i6SblD%svWf
zCV^!97+Hw<L8j6;l!iWnX-FQB99!b`s&Lp4)mwz$im@Fe9X3qFNKUY^JTk|y^l@`8
z>%XFW43zUbbsi0suAVCh>;?g)1KABEIeVZ8NX|gr$`uhM13y=Yx9mZey}TCZhTLuA
z_*XlTcpajqI5*{?1zg=rP5?iWCg8R+RHYX=rth(lPprD^oTrv_KHh(LXUC4-1OhS!
z>8ab`I6?Xh0tg9Qo@fcgs+t;2RBsi!op3b2pKjQ>A@I?{qJp2zzP#^hT%&ZfUj+pL
z1%bT^0!oR#S9MoojRg`82`4lGT)>8jJBEtWUi5eC{J!ZVF2wmB=V5bRH*C&hAvmZC
z2Smw04=FII70v+YzmJUB=AbTxhkPBct{M*U70FHJ#KSGvEgipc)KDF+c1kF+(sk@5
zcBa+TR!#Z)cqs8fU=;C416clFa=f%Uv3D0Z87^A#A9n4og^GZ*yDr5CaW#)s{m_XM
z?a&7C;rF|ax*z8+tq}3prFb`7*9`*%g`S5<M0jMCL<ztQoebN#z_00e>F`8E&fpev
zsg!BKYRgX4h7B}p)<&~<a^)|E#pT`+y0ljz{~^Fml!0<c?$=2+nNRn0oy?U?y?fdQ
z^Yew=WXiGW)sQMiUE~J@6amSPe#m|+Ktw_;6&U+<oWld(Q!iCl_grJz;^(##Ki}{N
z54U4cX-kC(>JkZ15)FqRI*F(sUJSE3YatF3)!dyH4j;Ck8Rv$^?I0j^(F<FwLcT$O
z#DhqjjyyGIhoe~$_l(=t#Osb9i=9$X94vAu<IL)C%r^+{we3*^WUuYICN*5DvoQg+
za%T)CzqV$~^Q-R-*VI<xjPdb6>LaLMcPy|P&}+lFmgdBxPCOpvc5|tDZ&EEyNdzJV
zcX?b=4tHv|(qZ^^i5Iw_RUv;N;1Um_Z;Gx~z!Gmh_>YYkORd{+nqCB^^@phBGysQn
zHAqCT)M@Zt{sOjrv`i6@_R)`xd<7<$oPyHBZ#5SFFE2Y}#ahP{mDtL0A<km&CVgDd
zOxH?i37l(6&++b@ZKUX?za|Q@48!PTInjQ|HWx^U6JLdVg@8vq&^`zn--E#Op|~iX
zYev^cq8++pM19c;Ek9J2Swd&NiJBGI9|U*)+9{F)a@)g^tU{hZKoO8U>4=;(!$sJx
zsjd)f%l`DyWFuO$5=7%-OwbXSnI=v`gsqe#?QFB(CN5%uj2zK3`(>*VvkC!^c%aAd
z_a4grtzj0u{LW1pykq4i3=KK2YsL;(eVeyoF*8^Zk=(#NlUiD=AkCyQl{PORkXrT6
zJHOYC>d&{%hG+QOAiug>6V`f&oOQ^VDDG;V#-dnT=VnF86SYnqs??T2fW(7=0#HY+
z!kBo_@E5%_pTvV!b5fes%KuSMMF>{lR)_g$%)L;;ES5utytLQ8<X7TdD-G6U1?pde
z5Ksi9LD1|QFDgRA60<MvyV?}`!?8#>6sxWI5B7{eF+x8jD(rI*@Wezw)FAWkVdKz)
zhFS2kBpyW6l8dG2v6Z8&CrL!&h5rB>G6{r(uKh{B_>=0IU2alO)kQ8Kpa@7Vpu88<
z!P5t8Hf{MJ5ld{5?&0gK^7evHP)*Db0(1%>t+Z(_L7XhPPW;IK;(gsQ9`t*hhg{{8
zXyh`mK9`7Cv8As<D>4amqmuf2c%DwR8HpfrWxFJ2o6837^K~f#vd<5JodCe1vl=I2
ze=7-y+#Is=U6!tB4l1w@r4r@k7#U^h3))pNn&mifID-v8@EWi)+Rg_+-M@veGFNQX
zCd9)7v?N*(XAMhqt}L9ZJLX*&M3o?Z_y;+c%PHeKIGi-)N6iCUj{YkpdX50SS5#9Q
z`Bp0mtfMzyq2bW#?4o#<reg!+H$KzZ;KGBl>s+sD_lllq-A200b)aD9F?hUunVUQ4
zu|{$uQvId<yJ-Kyw`O0Vg~<WrK_AJHSYEDKq2A8y3L{bj#rm-rpV+u0y@NVdEF92<
z{;34qYU#44bz!JVmk^MQpMr&gfCqsglgclIfZ&gqoZPFyiJPr4VrlTl<s=f%YL<OP
zMQAL~B4ODQIpDtv3If@HfErWTfMOHNP#j1T0ky9rvn;LBFvLQ`=N}HgSriGhe2ln?
zSx6nQzg^SkR)l`)9%QA6N81i7T2xJ}XMr$*Yx_Lr4ENS{w{35?O6@I24z1EGRcKp5
z;NYX|kG@$aUbGXjlb{PJg?OAqgg&#H9~@!nCInZB_#3*gD%^tdLNwC+Z)y)YT_UkN
z2N=rpkK0?@o#$X}PV<x!y*W^8$9Zs|Qw)5^9DL%lt^f-{X3-LpUM+!xtxP)+-(Xnw
z{crwi?3XV1@_2>Yj{8@Anu0(!A)p9IHlf)*%F-6yKISXS(x<{n)*M|oVKoWwN8W){
zP5(x$Y(YFw0Cu{6iXv|8^e^#d)3d9T3IYlO`3?a^K=QqZa^F5F(lG7)R>R5SgAirC
z2vtQb72s$J#aWE?Z!(0gBgw76HWaFOa2_~b_ao%ErOQg|rSft(bj+So9!063AfO=7
zmJrC6g-u(2gQ~lAAfWZ1I@K)M+_?t`!1>txdmeVEA3>EXPB}!44t%rkW~BwIP~C*S
zLs+qBEwmg9;Dzsx2gcUCS{@3;q#KNUR?fB#995|b0__$8ih#7+uFcAa!SP~9s}OxU
z*rq)ks*ur;XB~?{bGWZ$zmD#PLozHJMvjPwt9a1)dR%@Cg7c0~Gs@q%?d-MWOI%wY
zrT556uc$&41o8v|ih$%vN91WUFg_%KaE69LW>g&0A>h{!fN-iacA*`FLqs3~r9=z#
zLB~<&j$MN@KQ{UtePg6hY*}=}*ogaG%Hqm}gZfnvP!LcM*ykWX0?_QxlDy5XRAp2U
zP!MQ+2&l>3`Y>)UHAoeC2pi8<A5*S<yQWJ$W9Kc=W%V&mdG9rjm@px~H>0(eUQyqn
zAfO<iAfO<iAfO<iAfO<iAfO<iAfO<iAfO<iAfO<iAfO<iAfO=75Cr}o^7AC!vyl^~
P00000NkvXXu0mjfn!>l@

literal 0
HcmV?d00001

diff --git a/content/en/docs/concepts/extend-kubernetes/flowchart.png b/content/en/docs/concepts/extend-kubernetes/flowchart.png
new file mode 100644
index 0000000000000000000000000000000000000000..e75802c0483cc9c8e09a944050970d5a0cc16f69
GIT binary patch
literal 163257
zcmeFZWmp|s(>91p2ogvjB)BHHyKF4DyF+ky4;~=Fo!}0E;O_43?(XgznI`8v=Q;CE
z-f#ZSkAddeO|yDwt-Gr3s>OF1DPiOn?_NMaKp=~X2+Bb~z@|Y!z_1~}0Z*RR+<*rV
zkalvy{18P$IJ>|vUky}54J9QZD1dte2v|sT2<Yb`z&8ZsI|$g{_Ye?bknjJwmxKK9
zcNr)MhyW7^n7_-Y0iVxbBES#u_TQh-X^{V|F%9ZJrD4<3p#O6Z!}k1IUq5F)@PTM8
zqG|^LfrRn=0|}9k^cJX1)kHzXUPV%ZL(j^BMpxhJvjL5>h4u4W5M0h2z^#RWy)J>X
zg}J32hch?P?-Crq{qtj5B7)yV?9I4|R3v2x1gvZg2v}(7Xy}M|UJwuvaM|h`a>xmO
z`ula@H*O+hdwXjRT3RP3CmJV48Y^2PT6%VNc3L_HS_TGcpaiv@i>1A;Gqt51@n4nv
zryfBAJ3U(yYkLzbOM>Tmbw67<*mDyRJva2v*I)g#H!=KgOO|$j4+|I|?ekw~>1pU_
z|EU{zmFxK_hqSGU0nqYu{XFzszf1n#p8eep7wvQ7|LV+NBmMmp7%I;TF4}*ljpqfn
z)+#&%1PDS@kWaxG@*o-3`HeD$KRIiWpf&Q*5l!o&rjJ=VD6cv?wMxd=do5+<=;+9@
zbJ4f^knCvyk(Gqdn?&$PvdJZ-_h^yZZDUct+{y8ZQ;-e~0`mXA{=YZ_-#8(W@z(}u
z#NQ%#LHwVtFZ7V=MY`Ye;&-97{NG_?FGdU>l;Ofb5kUN(E*r9y0bvO`7W%6#1LOD?
z+5Db&>)??{gFyH`BNV~rsE320ga0?-xS{eE>+0$<V{a*7re{Vp8LN}snbV}?FLu*-
z;dHx@rASN-pIa#xYNj!$wOh`d`Nv^^0!ehDiG=<5ynp|h<TWHl(NAXhq-JE47c?eD
zR#;<AX745Av~WMVcU{m|t)33}Vh(DGi7zU_xVX6_+P2CcM82Vh+|_aX<3xcd2)rQd
zDcE}75<O31hp!hj{&*r|e1M5>CARIB4a(tEZn<pG)nIR18`sq2Ef{{JZgbz{@dDNx
z^@y8ky<mqtJw5%&7S?WNxucHgHO!y33!MlQ0_gpQi9jwN1Pq8^6k%gM0sj4aGgp&J
z!mXHJ%2`G39P%L?lT9_P5A`Tx_t;22QaC&&ecr~rD1yV=V&vt^H*0;ekbhccFD-Ns
zgc_|h5(n(_dWuT5_+2Ikm{!jD8yXr;R7mO(Pd90Pu=3_YT#87Xwu}G|_z~_aTf8t(
zMMY*UiPtR4xF&Jd`-uhv0=o7;E&^3V0*K^-n^CssmPsffN5^(r?uLlj&@_5RdkM4b
zhC>ssiY$6R7V2d<9ZdF5S1h=b)(&gE-npF`4}Ra!!xQ0-?FPa5^8ZmY&`?VYP`Skl
zIocvTFlXM*XyLQa;L@gZohc{BK4m&9<Lk%8;CI#LpvZ@$3Cy=|MS$LCvdeG5F4VeA
zCvCEGsif$=yVfJC7nZw*Km1EN{>M%r!GVNH!w4lcg?e5UcXFApoHv!9GI!e`waOD5
zeo?w_2P*dOOE!n$au8x*!r{)j%|vs)X?f5X=odYRyUdB&LHN^@g9?D2<C-aaKzN>U
zIPtVmH+Lf}JG=Ansbn?Nx~n6>p<270L$9O7CTS!?S`^hvXGswmnQ%lWd#w5$L95Yu
zsZ6~;Za@52Ac#9+l9}II^P`U!X;|Cj%!Km~7Li19O@DjBB6m)+IY&!L$16uTM$nXh
zPE3&U_=3q1q?K0VtHC|9gQ(fX*@qe3KUVH40Rd^u&BMO)?k`CP8S-pV>gh@H7P53S
ziF|KM=T=#+^@ytLNEkl-DaDJTTWC7hWI{fe!bQ6>7qg#%@sO~|ZfJL$Q^GqMrj>#9
z$3|qIrzQr0#~0YGUb^TX1{d-A?uHJXO*C@TgJiECHS_dm(f!#Iq%ZCk^3Iu@^3_+C
zaKV!72)F}HkwMb>yyxHBOOXB~F9g^KfH1xs8728GjA)R^)8oN_sGC*J^-Zx%5n6Cm
z%iRsBmWdMC_f>VHrhZ7?i9u2}dAPqf7;6(aK>xPXg4c!u{ippYVhHR{@^eJc`SY02
zP@$^6NQ7NuAZ_&|F_%}lHPdtza#RtZ@ONi&wDWXy&j(CVX_9k{J`ShyRIiLK=wc=B
z+#YEC84tbni2#6M@D?uryY8Vc1AvGh4c-m0WcS6q+@()T?8^3#{Jb0DtPod*f{2Ki
z&OLuUdhqf5o;Iaczm;P&g=&~SO!#B#j@w7Ginqvr5XrZ2fS@C<bEU@tjpQYQNbw%&
zP<~d8yfyo&dw!R2<X$hgy5=Xx8Y3P2*ys1eMm$Gt-JO%%g;Nk0xj#!@f**tWM=<x!
zA_O`=X8noscjuL%$i9HgVrOssFO$XRvr8wdj;E$-#EV0tdGzjTreaL{-MG%v{On@=
zsT|bt2IO!JU#`8bhsjVbhc9pcpWyNvYtSPgphmtUU@1P!3y2GW?S#H@d7sm0Ac8Vr
z%*k@JiCtCY2Qck8L@@Uc(8h~rmrO>1iOcH&Vbm_;dX5oWKiVJt|E$cy5n#}~q+ovj
zM1Pj1H9i7-e8wM@Np5Aar9z$gn*thOhslYb^3-^WtKrhGW}5d229x);oc3l+#ABIH
z^^%R_3uJsoS$Q0AuKoxv9mzn~ZH)Yhp9e-jh*)E7ATaYjF(KZc#cW(~eXbg5lRBK7
za2}*NidN%th&h<Jg;!%UXc)qxVm2VeQvTH6M4qrV1M?>>42U2Cs2lnn3gk01(vlFU
zy~AajcVRQ)#ImurA1SLUw{e@U+K8SyMf%mXYD0Rmw`r!f)kM_czSRbzm9|3Sc_ac0
zUKt!f{x3r53@8nblojjWIuTHM19&rG(8IoLCrLC`k6d$j(3&Cd0q8X}WZ=c4Vn>95
zgB#nboHw4zVsE-WTBu%Y;xbAd;)z=H{qx+T2|xG$)!V?om-Y3kUei{K9oE!)mS3{D
zrXtl%n#={~IAQtLB64VKjyo{>g2UIG4aYzA1;sHh(60dWo&7V2m68AgNyV4`cgI1*
zDH}&-C>+x)tgNUei+R~OX2((+Nu0u5`E7)~d@D<b;Ek>^9JAP>aTr+Gcx!ye(jcje
z*o__3xj$)Y0b(zRiu7dq3oIBAXc<w(7G9Hm{uYq<o;a3dd20Z^B>#rryCtU!S~#c_
zD{hm{j7dVf+*;TM_Xnk+Q|7DQgQEkF|7G5d0Sv=Mer^7&kN}m}Gtm8|(|fxK$Jz0N
zMuCj=uy+yJW#R;>9>%(}LV&<Ugcpm7_&n=jRy@Y`%|eaicmnt)&>aQ*`ilI2Y2aDt
zLm{Al{S7wRw?ERUDo0}%vmAZZ(z)U6$D^s#i2#vD6Ckoans7<DJjPiDY!20u0WrF3
z_cwshF#0p0T)g=M0;5Mg?^RJO2VhaN6rkSWsW4upA1G26Qu)q1Sm+V`1-?vF%&(m9
zPY`PdRo>Rvj_!?kc|q9Wfe9TE1+8>Ybp!semq7WXz@p}JU%mzG3;+aX&gi+9_BlC?
zh7#z1x;0zoJfpAKds#iNY(prXC7ue`-nnqV5&$=zIDc$LbD9w%cjc+a`lFd4hYKL1
z{Nl%MFTnI#<7<fz!yfS7)+#tQSI;;9zJgb9d?43Mc3Sm3-Es_&kGQ|VHyE+Ju}I@y
z8c(f3FOHxBCiA%TPxwVJi3V(=%~VqtT&{7ju2>e8+gC!~mCNw!)YLNuf;OH49|#0A
z#m@-sD)Y5|T`B^|iIa?L!A6;Fok-ru2pxefF-T9N2fgQCoGcbCiYD{>4_$ezp}?am
zieCKBD+mGgT@>QF_wPyn+q!9S12$J~u(n?kS8(J3EOo))3v6upl<<}C0zSw&d%`)H
z@fnl|X!F(_OfuRKNv1G?j~h~6(kE|<wqM|TraUN_@AI*v(OE;0Ej&%(*y9ah^v9G|
zmLndm%nfDz1?H~M`0wgcHDI_>T*AQzLf+!r#R#Y8m*p!SNuT3D7p9K!Eogsv5aDbv
zXV#UZY)F|h?=spN25?29JHtLuYk%4F^e7nk@u4ShhjdwmcVpes1^uBLUdw>D+k;gp
zCJpVsS}aQr7|;8q@6{VL%G=YAzv5M~l{X3OL@i`QYHkW*8ewO1DoN(;l}t@6^*&8C
zNMbMB%(L~b>TW#*S~V_j^MV^Lb0LmFXRf>5N8(Ej7cT3?lww^u?|2!-qn>=A_)*~D
zVU9O(*OpdcOQ4|qrCYoMMiQZi1pu&P7als`TLe2XTm05EB0jHQ!Zam$HG4u7syETt
zZ)Mdk4X1EnxrBBf5Dn4?JRtuqV+4;d<~Jj1_uBPj%cn}Gn_i6YiS1S%<EKNx2WO^f
zREIO;WkIJF3<ff0y1XgpYY!F-jT;UqY*7s~A0C4>t9A#1djgKDhR;Jz33;|4tgyD<
zTl_|}zn9nxkgGX557eaEL}WJ3+Cml)b=9&2A(WPn_0-wJ>!97FahbaXl#L&gu}oyP
z;3T@P!;yXAl#8_?PFI&>YVPJ+e=Y6{5)|jCh%ON`OB36nWpd*;)m4DG57Hsf`37@l
zlM8RRQVS2CLQSbajla;StsM2vAs>59WyA=YsKj%cFM-*lXnR(En*^@S2HjRKPUiyo
zZx0G|fbfk*NzWr=dM@DSYk02^b^?jWD~+#>EpEeu;zOUM=#bVDNDglqzz&Ws1~OV$
z(aLHh>Iq=$uf!vix9codZvVzEkxBrurk3TchBfzfKIdSg;k+ff9@bBt^-mHv$ig9I
zl<E2s8X1$c(HNI@ah_Pb+X{>7YW>LGSVL)Nb_x!{><aURu4H6W)Q9x^lEtzHkFdiE
ziFLGucGX3eLq<3_&qQx~IIS2}?e)dL&l@!M>bEYAXIOSRuPZd1(<$r_-bi0+K5&aH
z!ZJpDhP{`8Af+P<<spuv;p6?@x))6S9ms1!vlt9B1CyP7Z1V{;CHT6$9UiHg!C)6Z
zFnfq{TxoNR#lH+F5y|H<HJ58fl_!F2$qa)=!ez?sYY#qpR+{5D4}lza+hbTRa;BT8
z7Ef0i;1}7>zTs(l5I($Mrf1}Ni<6ezxo<YJsf7avb;sY5#5v|&o*ZzxtTM`kV&YSG
zd1OAfR7uUA?JyC?lYyTX-SR80*kt$Kz}u1$3l{7QE}8hCsh`?I1BoPo-jAjOfJk0~
z7YR%CnvSJ*6G5Mu*e8QqVRuJFj$DIjR*Vo*0GM@~`-bv}y>Z@Z56_M>-mdff+gZ+f
z0qoEHVH3-)Gwe*~vF0_*D#P^Ke0^pL6-M}e^Pa?6f8C6a?uRV`byZK0F0MD<aK6EZ
zZA%|D8YlMcZ_=TO&_M0hu6p1&<MnuNU(}v&zBpk18KAlzi`+9H(KOr!0(m0*ZDH`|
zJ~8(1uRa8vNrSRPa?8bA+Ws~%^1gd<h3^kWJw5bz&tJr|&!%I;r@lY$dI=}EN_Oo)
z3|2bgZRR!ZaKgu87hhLis%Z7{_bvkP_wOwQYIs(?wC0G8;l{=l9{A2QI;p*6753*}
zKDkgDiONuK!|Yq&P`KLf!X_^|N9p%sFIovy5I&u(%Fmw8>Ef_u>|kM_-6j;XpDe`3
zZB1(A!#Eu;4`zLyJk!>or-1OzBCtLfK}=vbxvF0ekP;(MD@%(jk^YP|EBkwAXX!%`
z3A27<^baukj?;Gvuk5J$uFM84*|B7J8+74Y0=l@o_THInh$k)hm*o?F_U!b0*{(?H
z>M%AGu{IV>;i9Xs@4x@#LSaaT5>2WdhMsN^HgB~%aQEK+`a*upIC!bl|H5fuK*RBo
z1`^s^ka*;q8K(O-N78D6#j}B=o;vgi@K3+k_!>zikxuO*7k3jDLeI|5%KA&}wpZ(t
z8oXk2x`WCd4i7EUUvH>?d$189AI%uXn7wZMUH95@IoD-;;mcIfj1DHw>w)iH6+xQz
z8JmNae~pp^3db%-D=C|vB{~<BH-zt6f+Z$OyiqEW<-*Fj{5oK16~v@HGi+yFM{C8=
z`!9FQ`?U~(fe<J1`UIN|Yj^mo%d)C!gu;pJZ)8^4RQ{vqv^$&o0V(!94{|%}l(Zqi
zOrPRZmR$*yopzA&JJJczV!TMLtTzML1XK)(n=_*XbO2k*(1Np?j1&Ads_bK8HM&dF
zdEi{t3#rf>hquheO2?V*GiZ$7+tS=S%cb%=!=A$3DmzDoZWYc;a(4y;Vf3-01GtJo
zwK9oA)Fvm@wzGFL{QUesb-LD=?ouNrs>JuhkVsZAhpSU6%v<{iP(Hyox$T<_Dr)Pc
z4jc^~b^kRs0Wz5w=wW$wHg&*P6=+^<F}D=JlcWMSMfI1ic=m|n(R#8ccCSCBur>y6
zu73CzE$1rjb$qHLDv|~buWeOMB2*kHdG^jBX(y7xXSi*eJ`tB0oLwgSpu5>K*UBHM
zf>K7SBi)Vy?M+KaV3McDc5?qMZXD_LP^w*9fsOsm7!Tu=i`2+Uc~KN#O{Fy&IerBn
zWRHJLv}1WUX9Q!RS}m#kvR?&lroocZVwt43fqp*nwtuH%Rh}M8M96JJS8SQEQ6lWY
zX(YjOSio+pH$EbOH~E1O{Pya{c!dl3Z;Iz4+G_!|&waJEBI$rDRM{{qa-}>etnPrz
zt~!S@EWSDEl8J0B%Xp6f{ESL}U*YJ_BF<zaTQ;#U6K6QEZ9MJqMKUuG7bzmoPjsxJ
zNVsr=BJMkfWWI$)m4io9JImexU%U81BZcdPkbS2$LiAP<&DL_d+q;l0&bT|~!&oa-
z!TswZ2D6C_NbJOu>1siS_v-IsPN^bau1%ULXS?(p$(2S5nG6)Ke<T29x$^#~j$=*c
zaP%*Fa$0ZiqSe5_4)5PC4(}1TxxMw&wK(Nn09^i|)LIcDNuu@OUOaB+g1(zuGL6V0
z>)0wk=zh75i3{O*E6rv}qIkkG%+dG>x6L+B`==w{9mii5452|rw4>wQ!=I_5esFGF
zCwdNtRN*fg(>7l#nklhtHTzlB4%Qz8&2An;|6YE7P}&Pm!rG3dTGVSt?g&w8fgJ~^
z>(Rh{aG*OZe0mW2?Ae~2;o6Y+Egs~*=nP-7mTTq`K{6R1=)!Gwx{*TjeW;21>Ap`_
z@fPT{q7Ow&GYSH28I#A8Oe`kUjAb~zkVmJ+R})wf)5r4JVU1B{N=R3}2f5VL)N_u9
z<FoqLc^03>G4IXf%FMs(@0WkiL%hVF3ee)(Mr4ytQGU?*h<4|8A(*dH!f|OnAD1v?
zEObf1k|VxN(>*i%NilJJ1+Sgx(DPvr`OT1AWR*p@NzgZx10F$UvB~VIOAeXoE$*Lk
z>3bE%M`I^?O0=rtx8qnLS&9#1>)CTvM&PCs+gHjOeG|F7o)JmqbWu9B6ZA*bp7x0f
zY06ciD@ssJ#KQMseOtdIG!q<hLnZ5EZ=n=Tx;kc8H$5K=Utb<`{D5<O&o9>;o!8^O
zSivDt<$U*5HQxjAvv_0TlsPi5QuSH?iL9wPYw@z2ffPRPFUQ`uzg`y#B_}v$Rv~lb
zU*aY@?x6%Zx;QVt%9jO*ne~*zyF9zmGDmgS+cib!TVFR6`N2qsJd1WIh33x~@5ap7
z?1FI?w3=;+6{*QA>hteBo@~r-PJ2s<ny>AY2P&5BT<de>!>;%W+?E2tHVK-KQX9vx
zPy5(V!0rJZBlNg08xucP$A15i$*KK|1i~W6X;EShWpicghBq&wL}$M*Y@GIl;nvbx
zf%OFXzaCmsFho<d2X^x??xH{RFnPh)k8SfV@9k^V=2T9y$ph)s{*<{V&Hf5d$N|Gv
z>g*=>7x-HUXzvd&BpAjBPuz=Zn{&bOjM3oT>*JlCn1>wR(8sAA`KWfGJaSoH%#SpC
z41%o1OA7ri<BPo(Tl{x+V^2G4?c?_Mb9{Y6a=49i*W`#4!ba4bOu2w7`DrYEslky_
zRaITK@Q!)sDuk1%=h7@+?H5CGqg~R_GN-6^$XihJ6PrH|mRCp-_hOaWrRhk-gRld>
z%fpX^*Oxb|7_0MH+JK!v6hB~-H*c#}{e`%;I7K`TFIje}%-wFvE=3IeU~2X;8GfSU
zORgmj;VF7{(CCxLjR0&3{L6ju<wusJ0*iv(x^7a_vHbL-l9TKm3a8!4h_kKX%)aP6
znLrdfUQfKM_YQ}P--njDMYn%=<8W3SS5r{3->)E0YNagUNId#eC>H-5^1E=E-SP|E
z&R`c;5Or}TfHdkg#;VG-@;i0DJacfCWG!CIzz?|R$E~kcKG;kWv(~_uctr8Q1xGPo
z_pX6QiG6UAaf0lcr^@<iH_#k!IenfzU@soDa4>i6F}N1djGLC60U3;%kE$vD$kT(x
zga{hm096o2FnY#%c3DI=8}0my`0oe<obc0i%*4#5t%0RC*yo%H74MbD+3fgoXK<qS
z`hFz5moIE0Wp-$ykSqw%jDZyCAXm<Z_J-^hY>9W0SZO&Y){>%7$~WH1JBl)1o=x6L
zx-Ec;qsRS$Gfyf)Mb;`+N_rj}0b`I@VVT9l$;L6FE&oJ<kB_g`{5f+D^HR8cD&(We
zdkId~{_8WksNnfegYUy@YuO7`D%5t>o~-VRDLzokz2t_oHnf>M+hEa4KMH4~HJdCJ
zC6YWn=(Te=h=A_?36K%?!0fqRZza!FSxrM$O7d*bMu&At;7M*$#K?l#_G1O#tCuwy
zeCA7@olzSf_WV+OM|IbESXU+6dijk{Q*(BPCT>7mN=WRrlDCsQqkQLP!057EY(c!q
z>OzT*?L?iRlHSd*fbop9fP%}ccD{yaU-$Y*h$=%#_7hHrq5%mV&)snZiN%ij8zU{F
zo@no;$5l$wbE0j9AwQn@i+Z=^q8#C(gYxy}xDhD7vw6EGvQl3C)Rv=x-+JA9gNWeT
zMVP(3y6?E5O<6{-e`D`^O0{|*xVzOw&m+OOFMf^kW_{Xq$-o}<zdJR96d*b(RGN&5
zm+{AV4>0WF`XwYi^Rr4zn86t@<l9>TQ*=}G1toT(YQn}^%YzM`o!<nVWib6Gs2JyA
z(<}9^u7p<P#OZ3adNbI<g{qDQDFLj{gWGRWC5CWQjvExts~lNK%Fw0pxU+wj5rj&i
zY$P$lFFL1^;#M}BjOS*XR_2d%G3zqCiPWTY?Vz4xRTQ$afwKhEp$G{tky_pv=`P%H
zP;pG5Ov1s~Og`04OACm@?*8Q^&P4J6^}ue&sJxh(;N9w2T8?SPml#`$n}#302cGv#
zv3K@3pvL)Yd2ofAg)=LIoebM&ZBhbiOdO#pqI)lu0tDZm8k<fT&hej<-0`@5D|VCE
zZWfh#Q$=E{B;L-}s3FDB7a}9>7x#p2^sP(8D&g}JqBA)Sk<tnV#7BRW$pU39w<diF
zE*WRVAiKZ*T%r49DtrshTP#ufU<D2Ye+=I^7JnT2ZC8Xx!%&=roY{D2B-&w$7f(v}
z#UfV}GA$gNBq1KQ4gJEH-E{LWX#X!E-J*lAWAwUP=R{~;wkb77xAWabMxAyXJ$j>_
z$^n8t#fqRs*92X;O-04({9fZ1h07V-?{Xi%dI>7bm#6CUwy7pbx_V9uls_%dtRt3p
z#lQBTwMrk>YqaN)m{%?HHHZY!M;Vg|Y?yn#Kt%j*^MR<{W^czNMzq1BlZ@0&wn2ej
zk>`hReOFf!D`safbJuHh!jty~tR|K8)#L`GA{v9)`H|IZZfiL4HY>Hxc^L}+(Bs{x
z$qHozy9`<K7}R37)caMkgJYM*@!%JcUJfw{F}vHmp5dAi!T1D%cLTEr5j@@70(9je
zp})SDB8Hs{oN#_#JhM)7DV(~Hd^#4@XA=CRe>1H8OTtu>o!ThneWD=BK|c>-+rGp_
znq<bRRoCq9o%z`{<KTlf7<$_&-u`%ba=ERo0rL79q5i(HcX_cJdOPH|3oHVHvem98
z=a$Z|{y|%a#vID6Dr#^W)hIAS$RPXm%d*#h89=XAv=*$PuiT1yHFZnb>KmD7hcC#?
z2lKM3n6L}k5i}QV2Z!O^xw*fvo|c%Ei+jPu+9G~K(YHd8K+(PR9Z)SdIz8@;uLi`J
zb)6u-HCPR*56O^P&b1r8B8I^3T>z8)Lo*$>@gfL_9qhC&!Ykyy+Ggm~Vcu8BWx6sk
z-i}?YFx$s7ov$@;?losG%U`j-@xP{wj8BZY{*K)^j272Yk}ayjQryiLc1^0MHBq3R
z{OO6#{{~0qR?I*#)~eHVQ<Uu9?eT(rGGAG9mtPzi<MAdgf8wVgBbGFBvGsB2gDH13
ze|t4)ml(@-f&D{YNLW55+^mWoCx?3TXWtiG$6TdCyVm=CB3CT?mOsPT*~V4LoTCvj
z9aQJf2v%1ggzMHw42F`}-ao1;aV@)!?IUoEMmX-x23%l|k6&kgQt^Cf*HLS<w-_1t
zZg*C8b;)qFwG2c7w@aG;qFO=x=pVXcEcynN7hrL`y1wGu2vdgH1(f%DUfzCL?g&yo
zz~{Z){A=a@O7$3Fg^G|LzbJI_pG>u?sb9t_S`S`1$4X%p=d?4uZO&Ix3dM}vstrlb
zKGyjd4&uQZS3u$7-P+VPpp0=$sMLRV$lkb^;cLb@w!KmgSk~MgHzW(F$DI5R^<RW?
z!%{a_mRQB!t1!4HR+x)WVimqf&62wCBY$L%XHKaU8)wh4qey6H$XjZg4cZ-j2$+a=
zNOzd3P$aG!hCJ{)CLfAA1VlfLoAXNc+)<YSH@-|?q4U~&IX9Nin~%xpg{S62uqa$b
zbv5g?3$o~nYJptk3;XRYO^%9dk($SHbJPtEVnfEDqsszO^!g2VNIp~SMEsnb9Fn^M
zB31M##4x90E=3)cJ_KJquC2!7Zu0pl8?W1DapgRhd9t%pVk86vg?XYYmsy_}ikgCb
zt94A|-r?a?!v{{*d*|wSq&DUf1HJPq$z34yP+_=Rcft_WEeY2D<mSxBtrpQ-JjBiM
z1FxxKTI=yhWlAXJ>b{d^)X^oMz%%u)-GcySi(egLBtXCRB#6M{NjM7m<;$-Uj;3wD
zFHis8I!hRIqhP#upWrt`YHR>90I_f?b0)4?+w!fR)P$DWthx*(3V-qaD#+MNc}2>y
zfC}s@Xz@CR{0*e&18&>Wk8%ltgep@Uil`kROx3M3mP~r{mLB5cis1f_Z2q6JL2zfX
z@e<BX;4WO#-7zUq?w$^};Z&|n`lwIxMGfo@of(={#>*10@xN*n2z%8g<Be(iVVw1Z
zLvs~_ro*$dNj00S<DsWQ@&NumU*)#1U|6HJATsd>y$y@#mEB^O!-Sw$ooj}AU}&i^
zpSX23e@qF4y?5KKsQoX}m4bP)?lP{xF%L_%%s1J3i>8Q=RR<$JG@3OTP*Vn!v7trZ
z!>ZmGaPP|u;nBwYf_k_BJCQ_*e`1cnkLPuVeD*i=(Z%8qWHzMW?B8e9h{c`($qB|S
zB~1!p-Pp;@X5&9FPhtED_o{L;I*}+{Fzm$b@?~=q_KI<c)rK;i`CGM{v4w!Rivsov
zI?ga2;V-o==8Nvui}R9Y<2>+-v&++LCX)l6ewI3(-F_C`mK3EdQA3FzxFzo6p*&Qx
zMD(G92Tx_kqj60c_<)-WCrrS3?QHaph|!5Cu>x+|{o&xmX@Q#7v560_8_6Y{)~c-K
zzuE|7g-D=sx0y@U9MQF7-qnDDIp~pBF#3Za@4i36<LBxjhLzgsB9EtqOb_XjS`7C}
zyH)`<8YCi3zi&eNK_}Y?_DG>LRyoSzJT^cQGNtK;M{1Aka_)1a5Zb}@MaVbl30oOS
zr^u`JZxvu@)Vd0h4!&~lMO7!os5V~`WAd1LYdTV}6o7j?ox<gs!B8Z0UZc{RAx6&e
znJ@x|-Swm<flKC239zUlJw(DMTj{srQt=nuL;#{(8RO;NUet=Eh{%UGG)gknqSQiX
z{7}OgjT-*Y<&iG#y9)+orIoUWA~_}cEW#7V9@ksA{gDeY7;rC8OY5tTMsFFhqL(T}
zf(4BjAlC}tSLXrj+A5?=??99FRmO|gafK@W_)z+RM<XW|k=gG0PqIU{SD6E<40#0H
z{n9^!x5jXsr*{>3J@@#41ONg?M#lWsG7_g7LZ8M=ZiC(~+OTHURT4RzD#t2?WX5h<
zyA{nWaY6F=5lOsgs)WXldG{-#Ga$^ddaCi8Kt<8;{q36(D8XzHdG<vA?6Fk}?RoV}
zK;}ag%!X#>Bb7-TmT@y$hTQ$Bt9h6Z`+pO~L`(tF)DznV356$>rJR9!#6v?;&rCRo
z_7}3Su=vVQZ|>Y7hLo7TCno2zS^LXxURg(1dU57`FS$+=wE?Py8VJ9p`MAL`g_0ca
zt-16Y@7-YApR8Gyh}qs5%OHI7zsZ?Y_sMzWZr|_C%stE6VF%k^#UJ4PMXlew_Qq}~
zr_J4gn<iRgW1>n&?D4CCmPIfU(B34l$9~*N9kEE``B!fde)qO>R$s93ou_i^2e<Dp
zwUsbJA4$9gkZ4>q=N!9ZksNfj?|a*3@=##{t;w4V8yANP+{~3K4L7|~eCyOjt|$)1
zVOWZmB!aeS<jdZ1scKY2zD_NIbmJpfMf^t9A8j+v1!ywzk4urTjbGi-!3KYk%z~r@
zu3|xR=#3AtJv@6-U!>Teglj3Ln4@;>4WN8^5S1DKO5ge2Tko$xgx3CEb!tQ4I@UZP
zj>3`Z^^=;legVQ)V*!&%RIqll>&izA3``wQ%wN#5AMy~H*5HJeYf+?euomj%k!%mg
zC%-bLM%CfN%`X-1SDQde^QhE)5oKOYZbgB?m5zWBR5F-qw$rjwX`J=XHXd*euYV3N
ziU;D*!2t<YX!uYJ7)O;0_e7m?8TPj8aN-(JQMGq|x{}sq?1$nDQ!<?YA)J9^vcEC}
z$b^5CTy&AX7w-RpOI~LjEGdKw6*~j7#C@KgEpQEE^Xbsk@|WJ{>VP{v$(Bg*x-wKl
z+LpVvM{fAKgzEjVxt^h=P}WueALQOaKC_K87V+2jCP@5^T#Xxt(Pjte&^AWbde4E?
zEG;PU+o2lf<%0MwE>8YEzo@sws2gJHrLVh@G7?)0Y6tOM{!JM@5PD^Oy-5ygeJz%(
zc^AiIJKztYevj7m@B!&P;|mmoD_6&L2UVUsI`Cr6v=1?QxYt0>6>+^tMn$hS9bi{`
zezD@%S{^0iB212`6`FyuL!80O2SVE;7*J=|gBZLCmpCh?DU?=2X=chr@0;EBXZ`ER
z6OI}BHx(UYN&TLC%m78hwRD>NZE1qIOw2$}x@xr#i=*iy<D67<tnzXRzI4@4n(luE
z^_xEgLt3WyS-hkPJNVXeifFeW@m}TCJr6Wxx|5kNzcJs_VevzwFIz7(HXh<2YwTsr
zmaV|-d`VZi=wRI>H2CF_i7dcpso;fv27vivL`$vw_AbExa);vc#K$fxL>$yB9$?H4
zXLX!@mH<lNzoJ{Ej$>yAQWg1=1vBAeD`1+|wxrN+jlU<kTpEm3g--n!xd{xRMnb>E
zOG>!Gone{nQ)mVe+~8oO3og*uk~7~$mu!)pl~;>*<j6SaL)jJ@w|ay>RQUP1Bm(Jw
zCRa&IMe(J^FMNh0R97(&vc#ay(E8j57cOiyji)O^Sod41_0e)?H|q$eQ5Wp!VBR8R
z=>Udy>=QYWI818PHkG&|g!HEm*S*kDx$wsSir;6DLm-Ck)OJ)%^6QybFu0w*RO)=U
z6`J?5ikty5V4#Xj*>TzP)oV13Bp`RCXE6I}PiVf97mR-80XP@p*O#ci5|8ohLmk;3
z)FGPhW|4zXA@Qy7UC;NZXJ`7Z1u;jC=!5U?@AGtC#p^M8Ty2bEyc@AV0PsJ2EXOWT
zo7B}ddYhB>vxRP1S=ajoS6i{qi^#P!CyB3O7w_y@B-g{cw$J>YlA!LPHEMlm4$e-l
zc&|Xu&;aTqDw#>?W{fm&4$qF@BA@b3Y;1e{`qNot2BvhxM=C|$Tj@EU^7oa224azW
zO^|v!!!G!KPbI@9W%zabksxWyvT0xCpjE5IYdx#*pBC9meaS967&G`~(iCbL*8Ttq
zva{m1s04I{zN`unDdCJqg$qICq}C%l$NqF7`y?}!$K{jOF;_cpw^8SGcbF6&yAXN<
zv%VX^Yfcu={3z0HH0fy<xpa@)hcOdW$8UBW(e1nc&Ihnpu}Iw{j<rQSm!0v?Su)`a
z2t5xfrI1{w1U|#PZv32f=Qs|rDisB7{}mt*?Q@VSU_6a}G+1OmiHu2HH+~s9HVNj%
zM31GJsV-Gi!At2OkF1s|%F`dtYp!($<^|XbX(pQGmGw#^d&&KU`%LzPA#icQU)i=F
zA0anR2Z-eqe^t?DTe_3-y(WXaQ>N917JNZSFdb4CVwPyh-N56kA)P;6wADQ?n16v;
zuVJ-O2Mw^wbmma))ZevONo|=9bl-X$_n)8%=7t)`G%??g>cIR>-2)rQ4}yg4vnLr+
zfdAJ=xg150%!^vmJP4r2&O{<FPF{QgA8aKOEriV;EcMRfLtCknA)EH|q&{GYQ}$~t
zf*mI%k{Fk=6uV<{b{TURPgY64Tmz{P0`lF%X$D7>yH_Fe(bXWlF#|tdmy2l30X2!+
z7n|AfQClB)Z8k^@2BN*kj3kE3(3hBu&bT=GF{-}9!okQr^4}T*3A(RezZFz1GfD@-
zqoc8v>Y^UQp4eB3cN$G{sthbFImGaxc~w|Ln*7s68sysx>>olJlk>$H0^;hZb7OH6
z<V8dfs1wQsC$VHHHlM>n`b!KHav5}`pNcu8uGa_mS(&WzIXC+fqZW*)Gl2Y@k#u+A
zp4L(CGX4Gn%1>$*2tW#f)}`Lz8S=%=svarsXG6<R*T)OFopy1uOFk|=W0CEz%(tbq
z)0oAl@@&*p`udRs0kbR<pq*vEGh}3)x9Yz<&#4{vW5k;5T3OMl^Sp+{U9j89ESqOJ
zNPD8u%!cwiryOFbVyW<$Buluumf*0tA;}&LSF(AM;T-i|45(QiH+jWa<8X+%IS>_P
ze#j%zivY&PFg$11=+NV(QcH*?$0vy+Vz`fVs7+xqne552*j7qdAvjFjSGIgTVp{o7
zGxX^ovd%Lkc^T(fzr02B4qll4Xz@);fe`%-iV6cp_>(3)u+myR0!>)G3%E?E|B32A
zK>a}bfYJ;-C|Jv26fa@J1|x(K1$ulpyNMK*wNWK9;3#Lkct#>rrgv0I+aFD;*Sg&G
zAkkfnTXwTGolb^M<>xN3ay*J*B2v6cv7(Wu2Fu}a!NlxjA|8gvrR0~&;~^%`)-qeG
z>O@K?oBu_WW4LufO0s^`*DZq!t#L55)JqD7JKIrA$7SxT>V@KU`o{X9c-*kIZ0l#l
zz$+kL!Ot)7Q!GTxK8ln=t)@a2a_?tlj$~@=f+0=Tr1;dQxk{a@&vT6yRuyx78KTtg
zfK;l7h?B+CyFZ{fm`z3%X*A^Tt%|Cc7^l8sy6dK=sL{;f|2S7+h*W7dqY68Hh<jji
z*P&`}d>nD&h&8O4zsK!*;(Sw8E5E4XvtfI)EnQgRK^JoCz$JR3VT4}rbU44fdnxYn
z%BORMeP+42Upar#e{la7flEM_CcCw}iqkiW@#1p=l#Rp>9&tn3h8`BTgl)KrpJET+
z+2_R3YRUTLZ}u*<`S@SpNCnkAm3$>7n2t+*x?kGe7$lzJeYkB5ljrExSZHGa@-J*P
z+oH7mA)q0l2??%s6AT4sUuHFbY)YJT`Ffl!b5rpzZ-n3$amD>kB?TITQL_G}3r^1*
zA(b0#Y(TmS5xRAsp^?6>9t8(nA$n<iw2A`{-h{%H@PTIxjW)wz0qMB$Q>`WouEu->
zpykAH?0kZE?>t#WpmIGWAALPiPu^eRjs?Y9s)_8f%}{#pepAYnVooTvW<Y*)B%oGf
zO@(3yq<$N6sH!p@$VgO_MT};#SY%t%UEK%r?v|&Uy)X-%GJycD@xl|?NHuZ5`0{vn
zzWcfIU`_^U;0Qi%2r{o!_2=IBF64ws`Bq)TcR{c~BI6YDe4YVV+7q8ztL|-WVTyq7
zr;A+D_lvy)1Hq1VQ`JB8J&zX}f)=I+vQs^tLhn!y1t_bjHxb{E+RcVIkFir|7LnjC
zIVr@%RfXA3Rl(qpQmRrB5O|Ti)vV{EzGPoR6()z@o2!qSn<%irVD_IwHjB`=vC=4K
zZ`gTUgzxR|4@#(r?U<#rThZGt{vq@nk8RF*<U@A32mEJcPW&ZL!KkMMvF6YR*~2Ki
zYMn!_zGT|C7nb7BxoNMOAwf~w4+8FR*IB$|p>pfz4Azo|bR2iL@<ptgZVqKUuA5%t
z1D*1|F6dIVw6{T;Mbfs(k^66+V@%D66>HZbDVvDmFGh}2aw3;{>&?yr)85E-D=_H4
z#P|<U4H|yV;;zStCS{|`GA=6X@d(8&%A$<P{jB6^DT&UV#(v{+K%=2g3}yy06`Ka<
zS?K4!SSQ2CSdgf^0CRZ*QJ}~!mCP(${W9KDM)DyFlke?RimygZCx5+qlr4)m9Gi(?
zHGALP2|U2ox<7f$e2w#3Vm7Hf-!a>ww`oY7t~j#%<nk1m_Lq7Ds2oOXxE#iRh6lwf
zsL6I+3E!uxuIyDD&8s_00}CN+Mk9pddb*zQkKC}fN@by~im|Od-4ARvtW@(Vchqu(
z=wC2Jk$AOv_ZG^baXG*6GZS}zulO{nc3<X5HL$Rd^p4pIlsIjUOxx(u`6>TME@mtz
ziZ!^sz-2zCqj|nAjOubk#ekL9<3>=_`J27SRzZ9_*!^w>yRZA~V|T4~n^M=w)u8&`
zxDAAbMx*Mk4C<{18uHsE)&{8p5<G9<m_cH}ay><qM%*4t{zIrkhMS!kQ7_>%b*;y<
zO@9&Qwcx2(EbzM8)B27z^!0S+J1(Lo#t$7qR39y^-~N*(=hga(j=lzuTsolNuKbf~
zpa>77L@L5YUNrmurl!*-Utm(E#oYue_ij)YqmvGPpH?ul?E{eFJnDF`wAAsjkofU&
z-8oW=%ad<Thq|_E@6BNZLv7j+(cX)GmXwKz=(Lg|5LImC=r2YSb@TB3={m`X*o<VH
zNiiET+aazY9EnAKqTEuCO|pF1`gfwSr@0ap(ZmVH(soR$7LguYZf8k#6+5p=zp2Hw
zRHziXPAYDd>IaKom0x5gh`&iV>2BVeapy#pyY1UlV5#9Cz~oi4H~!R*S)gD`#%^nv
z30;85tvgjCA}p51m2rApb9WO+$_(^2Z;G@ACmEpe@H&DYjk3m?@#t6J6${Ke$C&Qp
z(iIp2l^pCHbky6>&?GNET4FHv3Pv9>Vm5q6jDF|g@hDky6?AZx-^y@>>S=xt`D}!l
z!)!eEXW_|S>F-0n3ylTMmK0`m5N>}c!&9yh)*=3{^G1RPB#wUWuBz#p`KEG4=$I`_
z(TkAfP!+dQF4!ejMhx-b-5>}BE)}n!7I54y(0T~C%<Q6muM(I9MdbmbpTWnOa&o+J
z*{-jDp`}Uhq1d_i^P8l|e9|j1qvMp7-iM4hs5*y-E8)v3<7o-WpR5~TZwe&mvj#-`
znD6~?y8#k9HHO<~Z&CY!O!&yE@Pflk_)to2gZK|JP|MvYxXSS}?r@$sEup3SOV0s>
zz9?Q+Ac-Tyc6(5Wg@r|-Jhb8dq*dRi`x_ab0lk~BTlOq<GkE()>UWcYr@J{v6UnuV
zU1|oRj6rI?eF3a%{uDBz1rn7wcm$k#r@Os+?+V>cvee%7T%!x;t<^5cpsj&__yz9`
zVuEY!bl7haQN>8c>>N-o&Y2Au9jv{i&W6e`X_>xXE&eeOML&UjoJxk#=*sExfP^dm
zU`ct*B2cr=nd_?fqn39nVOn$jAeCg#!kmKK`%NS?Dv2{I8sD1XNA*tAHwA*foThs%
zs))M1R?g!d0(-u?WenojFmUIc=B5)XhBH)Enlb6N?uVm2ioF$&s>;3(mE<JGJsm!d
za$akYG97Ca;au`WQ+<KhA@z<i=HS3Q#$3pL^K*Tn{jHps()uIr?HeS<UF9$q_lYd8
zItwDcGOKP6QdGGJ@{1_1Mu~%J<016O@9&8Ff_6ejsYyp@FyHw}BR%3`Qt!EQUiY`Z
zW~R?PdaD}P<tRAc=s;^QnBrH)X+*qA{%*#t>NrH@>*LKW?cP{JeI!!+&9**sZ|3Xp
z^*JXq0pF(G+@afg)?*^v08~+7P?5StT}2s>y^XZ%wPLxiY9`k=^`{U`55!GZa=Bc9
z8TQ^Flo?CFhbes@UCIQ@tt;KD>?q3G(>k=B!$AA*Y?=a?&r;ChQ<l5R>xAj)q)E0}
zqGM9Hj?IEtP7CQ|yb4+7oo!lXVKd%H>Q>_sesOtABW2O`UknpQZHVE`*t!Yf%myy?
zY4MbX6T7wSom&lD?Qex{=%r>4f0`#k>3`#x4pp^iOwsa8o`W6<xtT!KEpDGp=A)ix
zMLl9~ne1VALP^0wh?RlKpC~Bs`PmNk5Ek&nkzlvmmWetm)GCX8OuA@RVI`ie&roa_
zuz+>3n<|n>xMpAPoqcAVnfB^=MSRlFZf_!@OyvYeKPsW)k17zAy^YCN&Uk~QEQ^)0
za4bLDJc{!;nxll9FfLcUIZ>|3dv_O5+!Il*piHfmc}IkCy*mJ$sYzfoXiDHJktyXj
zEr-ddE?SoA6nmq{F;-V58%Lx~1i24ejuj;mv_ocUzLX<c6WqOro6&|g>u5Fq3#!k-
z*;c?sq~!Cc>77x|fKj*fPZggm%xh6R%!U)^?21&>Qp;+X4$qrqgvpd1i-9Dj01qJV
zMA}0owSlYA7)V4R;d4rE5ZS;y{g{WSP@pyXm3toukeUEQUU9YM%v5}3<0h6B7P$F9
zJ+e;P7!^j2-8-_jZLKDPIXn_VjM<Wyy8fP(E^I6Xp}XJHz-8m@>4VVdX~Z=7P}x2n
z<o1?B?Y9X7X_MG6_={lD8M(O{I=p{~l6HV5yVxF%x3TtON!ACEXDjZ=d^<|@lmZ)R
zr(JnYlgJ05=I$-p;d9ikQEV2+O2Vc(JoL#jKyT)uJ#Z0o+=hde3FheT5L9Q?f38$A
z(?UDXPc~kgbbpnfIGH~qxqKU$-EU&m1-T=!U?fTz!v4Za#5Yh=o4WP~C0OSQ>I%i=
ziyO)T-U4tqQ$F^4%de7`r0J4A8RfAOnejN$(Jk4<#kASOKT^ns@T7r&w(_9pNrlE{
znZ5~W?zXQe1d|=hE%WAe^q|CU?s9V`;0u~uU%692Xa-&z^<rLKCx((!M{_WJ(v5Ga
zQ|pp`pGiVEMWrsiq_sryZnQZB>^J9NQ5dMAs-C}oFed16G?Jw#z|nyL1Awi9vSNie
zQtVZ@qeUi;c7@=pz7$3<n5DpZtq+#TVBuu~g9isJEL`48y=z6giPE}2cJUa%K^AjC
z+CWAPRW6bhjWL<3D=ku~5Z`_J7SV3JScXgzg|`Pa!Vs_5NwL}M>+ll^3l+&!xFAjV
z$?_sRo3RQ1p7A-KGN(?O2=VK_`PqV}f{cdGDFb#UhO`cw;hFK)n8ce1_?H=!g9+_a
z&8L*``;vLKmw_Z_q;wBNEvVBw#{jwV#Bn98#^!d~@4|=~z4@Ju)s7Z8+V;<J6YmZH
zmNkcf*9lG&ZtMrgPMEHAQ)zOpj<!;Hfq-8a?<^_j4J`QG75?nz8X>E~$KDNIR&4}Q
zDXW1ZNm0Fam4AqcmqA_&Y;8P}E#6MeMQdu&fs@0RyOD?u*SnR<6&@3>C^Wj`^DmuK
z8(LNs5eeK}Z{+GvnMFxHbdW&T39fS~l&*L4#eZ9@v)Lg$OmU3mkg`t~;d3Z*nhXQi
z^2nQB{nBmBb25Agi6f8Ij!86gyK;Kfoyb4UcwW==`FQXsnp2x**t;D(J831SY%rNK
zLa(Qy4bmC=@zGxAnozCUXcKE9@;<=-Oz<0x!Jd4aR`O4`r=kcBg|=E8<Xg)T;d$aW
zZ2_;vL1gd-?$)WIdb!R#fc=(o(eOF7oyYG1@i~njV5NKZy{*9K%WsX)`Wr<f)tD^@
zeKaQ?jY{M6r&T9j8rKq3=oGi`#B!glFP0#6LM_p>9-JL~?2J7JJ)*o1CZ=7=inh_k
z`A66J3lr=;#I1%9oVro*NitN6-F+RCfKB?T;;UhAFwMR8Qk!{<vi^89>R0j4DX+-Y
z*6kXCm79>VF#FV7S;0!Y&OC`<_cnP_w0&xG@%`7R^bSRBO7a`SV_f;22Ttr5*YkTc
zii6MTjq0dYB^V}f5%yl*AVDZ{l+-NbUo4|*F5-E1!zi!xhl=n2^S=O`uqW#DDaFYy
zcJRAOQZ6}7M<2)I7vPxL>{<8_dM=Ai61%3{h7Wow%+E7c7&gUk`y3)EoBL^|C2KvN
zi7E70ue#$keAzd2=v6V&6H`gon+8w#;9M;im0|G1EU7$49WC#JbG<$Tm9Dg?Ay}7g
zPs9D@8}mO%geIZ}rMp`$I-iqXNj8hCANvy0*rfVPy^sCz0VBtTW5m1A57OPSTIp*c
zw(_z3wuv~iP!B#6Sw0cfXCYOk{sp-0pDTv486zdt#OE%y>HE~<$+syYycz7$=G&%%
z88%|{t=bvI)ftng_;8ONsN3JS8o5y|7uJ<1GXrPBjK}k`tGYqT<y5l_!Z%u{vm7!6
zZ_uq%E5BVG%@kK;8bI+1Fi+iNdnCgHPAa>&;l0!q3chF9Rx^BA>1JN6PF@Nq&z4jo
z)?6(-gfU%}-1ROf#H^|U0p-O}hYm_9?dRtBJwiy}bo5JaE;;1o59ITm%1u4N`o~>7
zG43#K_Ku;ffjB~4JC0{8@>gO9oU;NmnMiWyhQ8$pP(FL$;8tV^TsYt~*zZe(9)_Ux
z^j2QgF9^r<&W^NCjbw3KoSYxA*F)=RUboD#OeTJ&@ad;iS5Aag2ro0DZo<o{iQVP7
zRqk{5eQ9!Kt;|GWeED$ClDQO`IPNz^hZ3-6hRRVkepoDCZvYx*{a6?|EmwQ06X1>l
zhScfDMeMD03DDj{Wegu24yuiY`rlfATzkvC>>7y;pGJy+4DDTm=Dd3vSy#FD#(MwG
z;{L1y7N^e#M1@EaXYMCrZEtwoPUFhC#yGR-5bzTn=g=kbo;>=2epX_MKF*!CUQ@#F
zr8!vi=-8`-M|rbT7kZzk4(UH6QMeC+$QlF?Hfk_%3imu4oR9d}O#H^Smyf7f_G#D_
zA5cn*!|Lq6D00CC>IpxDVhzI)5zH<=@=dy8W*V_BjR2Y8yF<O?T&t@tt~T4$ipPo?
zPCxmmh?5eR7FN~aMt9ll$NKv6(Tp5D+z<OM8<6vvGOLo+<*Rv;CpMgHe!>aK6GFxx
z(2>HVZcdzbB;=jE{M@6>-?APLPyM6us}hZt<UK_D!d%xKSAVU@{ccy>M35f9IkzEh
ztX8s9xkns`wlCHagJ*?HgN|$zqH?8E>!VP`dkMruwL@<fb|l<WN8MX~A3*&JTO$)d
zVs+hORF214YoO({j(lFF%Q+j&@*nz)-TEw2v7=&kf>g&g`^fRCiTQ{KLJ7oneB_%3
z>f5;jM{zr6q4f$m29MUgq2Idq_Br-d`+Fm*$(_oV^`vFD_V?>k-8oS6lR`o+ovX2r
z6tM=h^e56xxS3bg(lcP?C!FcuK8x86I@FV9otPyf=2%q-=Qnclm!%~oGi{d-L#;-l
za9;tMj|9itO>R=1NLx!##x1;1)a=af6L}|n{4|n~2@kv{PuF9f$gSj3s`p|bcecvc
zpXGNvQF2{=HvgQye~ahc!-3*I{gkyszpRV_OJWDXkq+l--}`2cQy}_;rz)uc6}PYa
z^_>gsmj?N;>Kixso(6``R&AIcueN*1!%~!txEGS7c9Sp<W-2I4{KVDw=E}$q=UqU_
z^{+W?Ujpb20mH)wdUWb_kSPkV)!bMq=k*(l4i694xQCE7EEGJs#kdEKk*|q@7M&VV
z5|?RH6iF6zZ)@`L4$NjUA6utaEyh%P6}}DOopxay(2O23typN`-xW0tfBB!_1%z=^
zs>w^`9KD>*3_+eviKUbg_57Hzi_VhUEK6A<;Ug!$K2R0*y89MoWvt}z(24Uy$C_z^
z1Dk_l!zYm02QlDbJYG9w1O$=oA5*8(Pc&NYlo%Dv`YxdcNJ{8d(zBV;>6x5PdtBTu
z7bLC1PESYB9CmBw6_-5j_rcHc2H?y^n4{-J2terPH|)^2gFyHIbW0Vv**-+=uXHkE
zX<Ik@mp{7rr=_K}HsIB3Te`n}c?SXIFARFbHfAr&V`c4KtQ7!Gz~lKDym{0Jbf*IE
zegJRq9$P!c&(6khlg1|zJia6L_gv7$Ir)bLB8W!-`K+I>R2s&TSpm_?DX?mTAo1N)
zY4>R8&ypa<7}J!vzzK((ZC35^((I=^uX1@7&KIkoi=g^r1vrbw;{L9m^tcwCt|h0J
z(9$lMay~EdiS}Gaib-~Sw)f+Th3z=?s0yg(8r{z=FRX|^ZQnZ$DC~_iQakL8dIPZ|
zF(1pUBC;#<Wnti)eQxNYfmr4Zwoz#mxWJF(?BknXvC1(oZ6DMo*-sKZPJc1^XJQVj
z@|(q3rIkB{3RARVl*zIVVOExwr^A|U3C&@R!(%(eVRH8XF|`wqZUq+h>SB$G=PXCr
zha88f^7qD^uMiu)oCd}YXn%S>@8}NRDvXGU>3m~pS@D0-^%YQ6ZC%@>ph%ZAlF};O
zAl(W`hjfE<b4ckfX(Xld(52Gdedz8yH2j-;^}g}H-x$g`FktVs=bG!8&&-{X(Mlz_
zlcR-Qf%KgaLCE`Qx95~+LTULhJ|Si<7ln8SHS!JT&Bfk{ZVi{a6I68%D=NXPGry9z
zGM~!5+fUCbt~T}Q9rx3{I5x{L#DBtU=#OEx&{%zaYrFGx&mrlGSIMSgZ#V37Doaq_
zk3U6pL`|@Y&w%f4P#|L&Tdz?i3J(kW4$T}@uB%~%@ZW{0394HS>G1Ib1U{TK^L&H1
zy~{61udnaMM(p8A>v^NnuZ>S2vIpuFzG-^njXVPr*{|AW2RNMBc~*q67K_Y4ZY6!Z
z?WI&F*G8hPa#>FzBFAEro7}3`O<*2NYATgy#B31rB_lRYLs^mtP(B*2(Vi*z@YVw-
zobaJYI1)B3GQDlUqV{rmfMT}XT*>tF``1Y+DKc5B87(dMf!Ts^ngCW}CAHOSin3$Z
zhnp514r+#qRY|<f1evrBFvp_r^hc-~zC(2-cK6pli>|8RG$<QP$7;pt2`l1r?+-^-
zByK|dx0V<w1#;>I3u-Pgt4!$h9IZ}#weZWH1d>$1Y6N!~8gapp;P)xF1-GL@d~bbw
zrdZ!+?G|vukQ}p-dfktUEU*n292!0lA(_nre&}S5c?td6Y#GYOg6QI*4-`<=juLx3
z8p!1#O>SRQ1Tgv~;^I=RDxp-TLHw<hDUef=%)U~i+Xia#&dx@Zz=Gi-$z0%E6oGue
zi`ghk7Q^z7h;(&zvllE=Y<cI}v+!~cR<+$tH1-0Rok3Meg7|EcR;F)@%vzhzJ=kuo
zUmg?akAERK#jHyU<icK%rO!8cg)TH7=lF`bj4G#mr8Nnk&Yvn<7-mBIWIPZZ@YV!~
zd?adYO6_bdq#>C%!&Gr{yt)7WoP!D-V9Jp(H~nHjvO$lV#fOk`fbX6pW$Ey6sDkA&
zkNOsis|$;m$q4UfPI{99-0+(ultYZjLHZ-{<2dUWeY?oCR{o$S_P<c|x0#A>>xvFH
z+>h|$AYH<C;1ea1E+cyh5?UM_?z`bDaQ+@sD+0rF(o?^FJf2;(l{w2h8z}(908NH!
zJPV}G6RM48+*bCZWmc7nk(HS?-eKLQ@j42`4{CoPp=6|9tpWNz#)~{bg}Md7$p}m|
z+Ur2M&ii!=y&iq|1~iqfEy7mYeVU1);jbE#W)cGy;BVKsDZ_s5Cva9@kAETV4A(JC
zFwc3rRqx8+K2yp5uy`jtyENUbUW6iGGMJEL#JM5<OhD#{9dw;lZ8o5yZErr4>*`Fn
zaM&n0$5FB%`!QrZ^Rb!3_ThL;E#U-{I`#GHBIkqzfgdr8rD(pY$qBDom9qA=^{~Qt
zo|i<ScFRj(mQWECNY6<C*}9K&M5-3w)S6uH#GPMBE!Epj;Pq;2USvH(EF3ul85i7T
zAu$?Y5OJ@7LcSHtU}()2b~pKJ4k(^0FD^DO?{>MTa6-~9RP&*zyh?quRt3@{$<;u|
zEyS8J*2nwSs^>67t9I?$apg$LRr4O{-gBt^dJx`)<j1BV7mFztLKX&B7t0cXR34LT
zEAssEK{o^zWpy<p$t#WU?8$FzQKSZ<mj=$W3erKR$GAyz$ax9~q&gliqm}DhBY2kU
z1sqwqZ%(fFcWYbiKEFu|h!<0c++-oW<yylp{PCle0NW(iaQ~;i!qRXDe;kv9$`1Q?
zq_lcZSrRU<GtpU~y<<S*Z8)<4pB&QQA&ruf6540zN1vhZV3Xyg!|1-7apUNvuZ<q!
zF42%V=;+enlaUD%d{anz{MyxEXkG;R91B6mUE^~KkRWK*){<4*%OL^J=5zMIZp~=*
zQ`TR*L1tq39$q(461gP7=)JvlqqWPKAI%b`SCbtM+am<YY!_r2D>bR-E{R3GK#%(S
zMS1uFwSp{%lWV<(v!myCT-Ta}=lh2afQNcUY@9`V2V`J#Y43)@TD$#|f(J5MygOy@
zwclWrY!j*4#LR^Sm}itlvYfAEI$wuvOAZFS{`%UTST2K029aJp!l%?-OVLQo*Whm9
zqxszhS=aae8L?f+_?t!rD<z%<$|v`k&^{5L)(6gL@rWDs@a@|>CFQ(#X4ht0lDXk!
z&z2=(Fr#*3v@*=&im~aZijbVibT&I1ZH=39N+OLwX@+USB7hH>@fcK{&Au%@v`4HE
zG<zCU!w&Mq{Kaqg0_pajSrwAvK%rI_+C4mq<|$HE((^GEI8HRdlU34S=%&owPSV0T
z&G6zBNB}9@{_~J|72f5sltJG6^A+$mC))GQxRN60?BOajsV^J70Y%@tysfF;(&_^l
zlqHxQQ@69FH~R|>wDSC=Q*~(UW)tswth*5cz&lf!nyJSOPAA=T4R*)$7DNy42J6?^
zuz(z2NW<BVq|63WWSmd2llbM!7`(U3pCYulgK|-}$`<b<$~g~;fJo=iC_du2k0a4U
z9?&c@T-fpUf~Y{KT-K6a*f4qm19HWYruiX&e%*9rKDRLJHY)f<D+#xjoUz&fby%9E
z&0H>Sk4ZFXG?2YZc!k9rT4A*+f8ql5?UcKT^&8&K<(e?tdIt<v$nU`1QQ=*9IP%!-
ziG5v~FHCu@R4;8buHqW>dN2RwW8@%SZxGvs-pi}S%bd>cW%m7j{JhG5I1CR(zo<^)
zZj@GJA#M=~{S<A2>&$@Mq;V4Jl~HUy#)&xhU%4}&d;_43Kr8f=`tkztCzI$Bi6)m!
z=QNSPzd;lD3QU_Y73w;PvxhE+m~iSu9-TfXmuU=AN^Y-&!;$$6cbI+^l^+<HV_PbB
z)T`ta;0~lXUPh1ja@5pNsxqmMxn23jce3wJWFGM8>DBidDM7ceKRaL<LRZ7qVvJ-&
z3)!7pwCI1SRXVTgX9W<Ch|a04QMQXJs9WxJw^Ev6x4Iom8&%4DQt@3JNkZrije8}l
zG*44VUM}mc_D$N=d<yL7&>`4Z;<EiZ2}S!ymevK{V7tooL@}gz!o0va@V)_J?)ot3
z`IaN1xPUP=OGEhyN6jRVoTDMI-?#h90Ud5x6zAD{YVuleHEd@~mWo$2%dq3;1Qo1h
zniNg_*HlWN0kgmuvcq;AC}`GOx2>FOObt}l@+feq^J<`4Ym=zaJco6yTj|6`Ihd=+
za3w-CW9!7Sybq-QSV|*{@*Utt<k3%yJ$p|trQ%pmKoz3axD#EHLjFa}<yH6g(?vpW
z657%JEx17VcphTxfg0zx%seaiGn>kpPpr!ff|)*qLIjT0ayZ%ccCo<U;xw-&fFya%
z=5p?;?8LGJIx$h5^Nm2t&yHt`7x$%ro1~o})<(UelrN}8RP2-@`n0%L+#vjzwkjsO
zXsVscc%j&}s4|#Ag<+^{yaiOi@s1iV;f>&n*sz5H>)7t`{<wyV-NLt^hg(<1czV^9
zRjGTm9m*`JJUivkYxi%#uf3k)@p8>7T}eli8Frf__yjA*Cnc%p44o`1VLu=uBF5q>
z$i4tuYg3P^8l*S9$&xzKmi67(X7x9c+l8t+7f8>fRne6KZ3VdDdb5qE-Z9TG)#D35
zo0${539%(<;RhIu*g-<CGh|%JmpFcD8$qiq2Q<Bgd8LX_(*`#&-Bh2p6HIsuVPQty
zluO+j^49Tw_?oVW#U2Kr<L4mGK9G&Pf-a8dQ%l4@u?V1}of^Zwn$qk>54j|bwU)!v
z)$zfv8W@!Iu#Lq(FT;B%ZNB9SMX#!+22DM$Kw@!uTXR^yN+~xWr%lH1a@NOr*V^~?
z9`x{jN+7MkYID*sv2zlmD}Kv!FowPAnTs@@6=Fi@aMBieXoOV_@r*-Ciwj*P=7~Ft
z9X2LwVD7$qs<x#C(J6NfOa($lhv@7|86D{TSaQkM?!w|@t&<eocmuiJ(v78ocAya>
z&<8N?soWRnOs2SS>-w`6vetuLWe=?xPYZ`{*i_KXycf9<eMUpZ>)`8m67BbE8Mobz
zI>lZk-gY6J^_=oaz>uvw1sIe4l5s*B)Gk_@qn<)zuI+WC3FF|)YQt*WD+DxEeKQD@
zS1dvsDBzO`II0rI^-qw(GopAGE#^c09Cn0Vx88-F=_{Bk4pbWkbW7RT4;Wm*h9XG)
z9KFNNqZ@|<@{bM(YXW=I(pmZtE|@zb)$5#H2We|FZ1f0SOpkRb2WIL>Y=eKAdS4U6
z)k%c?s(+R{+?t`|E=KD7+E$aeoLYLMF+V+ehylb<>Y<p$7RAGWiu?>Y`TU?nRfW`x
za_~JLzt=cIp-vXZ-SMfe^ca_;elVZ;)3p|_D`~6h${PKvFB)v1PB=9E6O?XCii_9Q
z<APM9n9Qi=g;pOx-Bbbk6d9PBMV&JZKnIz0t2%ApOJUWg6hqg});XUJH+SN^Prlo>
zmbaW)#XP-kr$V+m{G@Qh4X>8N)(+6Ccj$+Lio2Mg{&c=bQ5JRC9AS>)Sy`r8cBPDz
z8go$_oz`5s)%>EN6A|CF$DWYJmG8kMIzMi3dwQqL)OO!iQM>ScpTo%IFJT~aiuk!v
z5GzI2r@|;VM%%9_Y(hu5X*%u<Dt{PcWg{5To+M4^IdHPZ>{;$k@S)}N_vD6+E{fij
z1g|iEv(sJ<)IqAB6o<WsJ)tsS=Jg%YjUZt67P7<o+Fr&yy{9lpnrS7rBzRBv!K7vE
zD>BtTp<MDz76jR|T*@!QkwO_u1f6-w58Cr?bH#x3^<{V+XReEN*IM#ShQezYB%fN<
zbPlu^Xx8uO8*dm>CiZL2hC%9_;PH0`u@B-ImH2Em*u6Dm;+Q*QXRR{N88}C-ZfMQc
z>M{xxx?so4?UZt>ZZDUWPM{}QQug<GKxbSQNpxB>$$I~)Z0mC}F$TPnJoeOpTka~u
z?cknM+R-Iak)B)!{@#x39;{n182rub;KA$QC=$wPsgnV<Eq6VS0h?F00@>)o;Ol#3
z;h(dH*4BAcYUULJcFM8$Q*?_#fCD0qKcthl11?e=f-Nmn1IEK`CB6|H{;JzKHi^oM
z;|El6SIkRDJ?7Q2RB-c$lDJp3XvlAU{5m9{WZA{smBT>bA<0Po+Ho&(*|CTF`l76$
z+GAOo$3+kQj{RI=XU;Zrr)uk?%<J*Ku~3?R!m`R62Gz3fmD#O30?KJ3u0rIV2|d`~
zf=MITbr@pO4mdo0_&hMI@R@eK`&e#VCY@Vels&Tr3Lv~&u%d1%cu#}gj#E@lPRZwe
z@nTvPu59~AF1V5&L)aPm=AS7aFP`{B28g0&FZN8zgtBee!#Df6IVC9u7L!o!Cedi-
zE2{sB31~T}{q=T7cyCN`<|x*pj=*Z)QUU?-33PQ&vuGtZ<in5;<h#?a*^ypSDplIp
zEbWm}pmd8%M)<NIcvrMb?d=yM3UIzcI$iimA-FKgPy*B|8nQI~!@$tML<S3n9|+_a
zb;qSsbr)9MIFr3H3(ler-Qp<dUj@80yQn!$BSs*H6rDAuI7ve8*mUMnK=sOD&Ot_(
zOt-<~K4hmzR`Hb+(67|+8A{QE5ESEhm)eEXPw<Q4=4H|p))7-D>;lkYZ%=*^J^CKc
zHS~L4Y#qkFc{Bx`(y|D_c4W0ujUqvAD`VHQUt?W^-`m{U+nNm(h-?$=7T{uD5gAk1
z*riglt`Qr4dK!Kb-zRp>9~b-*=+4Tb5_Eud=y4P9TB8ci3ChjQeb!I~tuK`ZH`y%<
zHvF)o&<_Z~%ef6WDR8_EB7*IaUu<^d97w4Vx?`>|uA_Z`$gXQpy*OdC27hA%_6!#D
zMYm@fPar6cEmJ-}r_}A}Q*tFQM!mf_kBr^FwO$GdK32S5oGul=;b=%JGv|;i@v3W%
z;B8^y^R?enxvvvET5oo?c@<}8Yt^EwMu`?l1S>Ncd|+j5d=HN##2V5h%sCls4GcDU
zrq)?P9|wfeC8ZENnmm=on|XJ6tJp#?TlsATUz304i?kJR|7t8FP58PKKw@BE2%l?n
zTE=QdXmI~AH6?v|`@^lEwLXgA*aX)4#)NzDB8A4kh9CP(W4?~ieiIiWv{VvM;@Y{%
zxezz-fgWC+mmGx$E=5$gx#2<JuJ)$oc0oE}U|ZA%167n7gE$M78}RbEe4JBPr?yc}
zip~ih%S&s^7HtzOttSO)g591!j>-f|xq<eX{OyPSESqZ(S%b-q03`_Yu<DU^DP1&y
zwxpL~h%W!*SJ&`k+!F(N<zo^g6D+H(x%A7am>L###EZ1+K$0!6iuIBJ=HJ}-vp|>_
z>=kF`J=uY9GTwDbgE2ehkLm67Uhzxc>oAdz&~iFNoRAPN5z>|@iz-6%UNK%hjWd>8
ziWbmW04A&u%H7d8763U+Dvh?s5`;JzAu1U|xIrr-Xa6r>{J)ed_nM>e$aJ12#qpYl
z0ry>EMOZ7nBo_=}u8qzO+80oI(TM%UdmiJ$uvM&mMT1I1C;h1stNG(l!@vLe_`mdi
zzIAE){Po+3rW3b=xpt0b++4?qVoJhRdfV|$WMaEUoa?;}3%bcv5}vFK_ymWWhoJ?}
zHi?f$=){6a4sH_LB%&eY--CL|GrcnvKk`hs^=gcOcR{L_$n-(4$UlC-A<E3eL7}Io
zK$eWAAa6#L9J<LkrJ6x_H$ati(s)zf-_LLXx$*SzOt0s@IBfTCFNjzT3#Y@tt~Xwv
z{i4*_N_6~-Q!r$Gx<sQ{T0DKRX%|cN9gNRB#&GNA$;9UA`WtN_`)QDPcLO_!bo6$X
z(%}XbYU8alh8LJi?k!}Ba+{^}4e3D14^MWiJ2t~#;hcV~T0C?<jq1cIT`MjW7(Wb$
z{P-pRW!pSttc_>qy@JEH@6__<8h+M8Zn>s2z7qQz*(`{Y9<^c{VV_y8pHDaiURGMo
zp41EJDfn-0eBJu`vY}ghyLW=#B7G};G*`kTIC$iNEep7P+tX>dxUqZ>avKXT6Yc4@
zj1=_xGSZ5@C_GWM)t!j*-dnHXkk@M3s@!~#9<o7N(Q~TLj-i~pm+t1_Sn4gRIp133
zP;9Zj08<D4TBO%2VBnnzXRf}B;UyV018xLZnV8U_Pu(Ilt)#7`6}`9m<*AZVtRiT<
z$2q~x&m(I_`U)a`gBmIy5Q^jV_CQDrqTdnPbMDzFb(rENS@1UZwzSFt85SV|cN%Pv
zDC=P#vSq`bLo)5$hK)&ZY%gsWf|wvMUbw6E0T_wqV~I%Nu<QFG8YMr-U$qyC!Lgy-
z7Gtfs6YfZH&HinCv=+2pEjK6u1B(FsHY|dj2+%Bq_R$fuW-$5G?%I{ayt|`$a6r!@
z)vH>_+%CE4;>dTrIb{{PTjo4hjFz$`{FKkfm@vp|Z}^9Z>K6(BK*z0doon<RO7QM1
zhyhqa+akifT7^bucrtm0$5B!?9S5=8;r&ST?O^C_N!b|^EW)iyrmy^fn#RYRZqaDu
zv~M!U6>Xob6s)YE_MCFf$1Ra5`P_f64!D{L973k25W&aSc3Pv$YhESR7K~t)k}W?x
zv!4hK9~hGOEi0<-Y31m4x<59U;k|`rdCy)Ww0GCj(*y5-XXJ2-H;{8!(wr-{D+6!+
z$;`~m&V8}5!)~Po3Ppa3K6Fil(FeNI{vvRtpJ0niuO%6h_=;vzcUZFYU{;tSn*wsT
z$aJeCj_NL=^Wv&Fj=wRialb4)#prTab$zNs24ca+*XlEGyGUN3qV%AY?kmLnl=15g
zI1J?Jn=Kftcg;$Yk(><uqSLESylcN5!xjny_k(Fz{=s0CbpVlR$V_0X_(6eS9)4(l
zWMCYHuN3^f8)2Xp!dY7;ar2ip0bhjV5nRyvgBPOhW6`J=32}+8el<;j;^kzVFEhoG
zU;A7cc*UQGKA?>)oqoELJmTi^Vw~(Ei)fYe8!{0Sb@_68vKqr*dsZh`+Hj`fYBTB}
zB|Un@3#-_oSuWW!6@b^OdDPs0qksRVd7<^e`}T5QKR7%*`WbFtJy@-R;$$=V{N!k<
zYYpn<Y?4~#zDas9?SJXwoRZ65SE{X`4!%XNzxlztri;EvZSkN+I|V+ZOW`=00~361
zIu7=}Yp!Yq?I-J|8H30`m(~?`WHa!D9?bb=&_k9VCK-}r$Z#*|UiXcFBsMILu9BjN
zy$+twdf~3ql>~_40YBN8uYXoT@dp4}u*+{P<5E$mwx4ft5c=O=o$7^J=$xwA(<zmx
z4Qiq;<F%xmH5RAV_8_E>^HBKH`8sahC@PMA$;+W?%7Nd5UL;sW^4kqzg9GnO{Li*P
z&1Ww@H^;qFpD*hY@Z5P`e_0tyMNKW17m-0zGN+wx1wy*p#WNc}Yht_+Z(-B;B6w5C
zsB>1uX659S;0YBz-S72*w>=qYy2y2y89lh)STG(fl;Ta|gOa#z72HH}2cjaUmbRrs
z+>Ju+`Q+Rzq-PiSZx~xo?W_#G=gqq)=rVy{Ap%G7D8QS)EB;cAc5la0`)YBjti_b)
zY*y`?h}Zj~jVT>>p`7>@)Kr^8kwd39`oGTx7e(81)5W`2?bIE#x*I`N`&A~biP}Wa
zo6>a*i|rd{mF}{PQt*e?!t<x@B2P77QS9VK=7$~6z((&pR#H`UUr;Zc&UPDI@YC(8
zJZvYzFSa_j_NQINyUc0Pknrf{R%PO+P4=&$rOh?2YE+ra)vOkQbodEQ*6s*?nDBmg
z30_ew{W()<6FKOZMIHqYd*f~dYGt;Vrr(d>l;A;vcFow>)s8R9ntm@+s>bpd^kK=T
z@D{3pQ`nkRWzs#im^m<BEkM5ghNKRoJC?l1^-BM$Z$*BcFGBbaIGtz$vu14$+iK$c
z$7Nz;6`lHBPKahI^%HG0(N88v6-ln_##v7K!q~G=bkr9{8ht&wpR*LT-HHUFX@BF6
zx7Y=#H(%Yyp~ueY+J(>0o;s<YoujKq_HQbXDLnM=|A;4<mE46U%J}#qu0d+8Mz;#$
z!$H;#=#1(OhBdU+O<4hF4aZ-ANo4msM4aR{!Zy#~Oej8qBH22=7=X$aQqF|+?G#T;
zt@0z7nWsPKZe~cOr1}A7AoYtk|5P|>K8Wud`$vZLaYV045u1_ZSCywxlJ=gB`{P3!
zl79e>9E2$OW7+)yOz3ZoLx6pMp8ue&3?9&y`&q~i)UvBSt;CDPRumme%-J0FQpR_2
zr|JIE{aIf7lcWB-taVo6EY~a>&FZ5-_l+TSwc^2gaPC8<fZYUm|1I7j?>UX9``Q^D
zSqNfqsHwaO!+vSKA|rK|wup7&*47pyzGj7Gu4(2F#25vyRI5e0vx!IEgf(%j17CsZ
zE1&bEs@)J1dbguzL;X~*9jpNPXE@lKnH$SaM%P{Nv00I7>G9T2U+BQr=Q~cQqbJ1E
zS7{~yc>GHZp)uh;p^_9qTvv?;Si3Jfh6`{lEz%e@oC;lMHYL|&*1PDTT3I%=PnKU3
zVEt`2kr67q@1NjPCnAJMh)eX#Ny%Hy7fWb!mx+XHHOMY;HiG6}q6qLda_lRNAtEsy
znZ_EtLe4=E-A+kIeAa${bF_T9V>C!l*=)1(a_anmUMy6Tqo;`p@BP7eVPjbG>vzmH
zbED0dLxQ&y{5()VL+@1qjQ;_FmgKF!7#`T5H)6ueY{_(0a$S4)A{oCE4@t|A&7iwL
zb$j1(d9PHUwVz?NZDKb3o(Fuu%#SorjxKm7bZxAI$@R@UH`vvA<>mys6<pBhbbxjt
z>Y|d9o70?0D>o_KGK{@bfenjrB9z&BFVX!qnSvDMooc@y%99;x8nZ5@V5j2lGM>{J
zywqu;?*`u%f1^G|1KhP34<HRF4Q-wlAtuRv1oQVP+udHs=uS;1miFtniOl$42THG;
zs`|;Q*qGS4_cNblH156<K<|$p-qpe>|1`seDlmtSt=hgH>Auxrq62M#{(O~hF*K;>
zX}wJyU!>C8(Pv^cYb>ZqFupnc{Ebp)a|))nyx?xU?XR`@CytQFk&zFIg|Y=_+WBWZ
z#{+bVU=3V6Qa)-XwAnhZSXmc?nA~Ye8Clsg|A2sjkMW6Ym$!&K!1}$(o`%^w;2rWr
zJG+PAOwKf?Gu(Z*zaPexIk>Hx4A5{)xXdT?XpvvsK`;ddXZ}s^FkApbZ-0?aA}=M|
ztZ_=PSZ~_{)f*#CJ*+=T&(kw1#O;F=JrUa7q0o)grD52#iaQEAA{$j4W4vtQhG~$;
zKUG}{y}Wcm$(b12KDkgJd9X%Dy%yK<%2j<bKdCy{T5ekkWu~K(61e)5=dd@b({Qnq
zyslwy>_vy&DVrduQk*dBXkoO+Py)Mog4<{0Apqf&3YM~~s7*2@KXy=9zr?^QSHDa)
z{&lr;dIhbD$)e++**emltY+yG3G(>{K-;IM9;L3CyW6$>hvqQXD`eoq3ybil#c$T6
zZB$K*M5@hWHkGx@H%Y^J=BWPd!OMXMKV6zMBVWR8?$7##ge7>jG!kGmw5vv0EVVg{
zg^8Pvq<YaRV|ne^$VlAS&s}~RCGQn&qNt>pF{(P5b=<1CKE$t)9v3yP%6sYU^~1i)
zw_bNK*EJ?|ocB<x{<y|VKNNlkpGe^FVLnMWIG1C~(_X=Bx=uI&%9Pf*W_#GJoQ8PU
zei~^!lNgIGqI=hxnmSl7%$WJ$)VrB67|p3mk^;T4VPI-K6+q<z><K#w6iQCYBO(Ih
zvxGUFN}-QJ!3VAArW7>ei9iDD5c93_mPBvC`JLpc+&vi?d61k-r_m2>r$>1-b&sqQ
z1KASxPBAS;0!}cOCN~{><5>1~J)8Yx&{LN?CE=huTjr+A2<;#uafapYRffP#Gx0o8
ztBR6!^>8|WY5Y<ZXg*75ufyricXMQIZLM<lO4vfRWbUX;^B_@0ZjNVFTrSGb7Ri%`
zMy6GdJ2?_fU`~vY^V}#=mjVEOSu~Py-MI4)1k<}{^-L)aWCG^t#&GZ3yh`^s8`rN?
zb7qHb$QbU`@_)UEOHMXc+9w;6KH`QsWY88T_eb30KC(@VAJ)(B){yyp?mhYbCeSiE
zV#bT)bCZhPG^do`$mW)&?@)-)Z!6~0hJSR2^P`QkX8@Cm%WUv@b6a8q*Rm0a@v^9W
zfe9&BIX(+Zse4i#WiW;~gF;3?oxxuGc5M%WmAJ)qQqFTWGGdK9h{;;$fie74`9w)t
zI^-^-uvsNZ&_u7J$6(PGy0<{2(ro;ZPAlhgM1zrVtAb!EHN?#^;hJZRr%|!V&~~PJ
znWf-;y)O=vhA78v{fAkt32EsB`e?{9!JO0KEEC9PhGxIaiZ<XGe*d(!jn}191rD>8
zWRvRj1$*3kyy*tlqNeMgyLN|dNJ^VS>Py@nTSxEC>sXlvDqO-5>Glp`ANLhm*+-5r
z*h`z2tX67mbem$CFb=IKn~05^s9LOxe#qSOV^JQZdj3O{Znk5cm+Y|gKW5(dop(;w
zl{3-4`n7<9%d`PuRCuYQ86qc>#7L#OpTgBtbE+=46#P)@z_n6>SIwjpUmP(WDJE3d
zJjA}XMz(Y_^%SV_MI;mx7ZZp|NS>8LKd-JYbo`pTX*yhY-!rs^jBqQtRI8iNlajpX
zdeC2=^<x7^uHv}V>5#fa=JtDv!(S9ER|qkU`n2*%P9x5U15U$xz3KB=w<A94htt=$
zc@buL5eg4}j34~=6)bwgHyxEKSzel<{L$wlBv`oND-gc48QL5YRe#zKypK1PA$q8D
zs)<;*=eE2;eaoItPj2Q>@jL)ea((4a);?Y!>z6uVrbyPD57T@3hX_=tzx$J1s(c)C
z4`E8@A3s&BG()V>_o7E`GI58;-=3`Rxt>fGttuwoR<mh=R4#UFMtDA@;MTI6A`P}Z
zdVa-lsO<PBV?2~~es`o}sDwcW#bvpbq}cB>7)?eEOES!s)OBOdA~6YFyyO=TNB>R!
ziU7@en4cV-jYs;$r{`?y7P3`k9v@||sTxf<&@1DT^MKS-JyiJtA7ATgLVV_^&#6mb
zH*7P~vGX*Wr_|{Fm#o4&wKf`g)S!q6FY-5UD&BSU;-<FLLeX|-vt!%wf>8DFz8omP
z9S5$idk(M*IE~NIX+F#ne)HKpCv+jr^CT{saPH~2GaEj8+zGCFAx~6M!Cap$i@kzN
zMO0DUqOt+-^@CDniiXIBsV;j-&@EIU!>akm6x)&I45yPh5JvdzeG4-IW5FM+ZEW`y
zGlC?C_UU@e*t4IB=1o}YEGX^!+9}?r#;gP%Wpr8Iv45U{c9EiR_3hZ)+oA1CA&-5!
zIv8JL>svHw{a7c=fCvl1E^if`673M>j|0H9T5{y4{KW#~=k>zqn6~8bB99E{oye!I
z8j=$zQLNF<rL&R)W?xWwdHLbl;xxX)8JXF{3&g)5PYAKlv{~wO8dB&=FC9Ok-oDTF
zq6F5=EOP>s9`n$XeH;qiW+>4$6<n>(7-{Iv5>ID>oFbICgBAaVOJH}SFvwx{7i;V5
zjgen$Nvh$eeIO<xAUROB_E1q<?=;HQ_j{|D`CXuM!&Zv#D;0=oj*ckNvUZ26ojPE<
zcpnEfY)DQ{nxp_SqU;ot+yz;&LryJdL&U^fMmN`iSg?ypsNGo1emN%_m)MyU+?1VL
z<wKB{`P5Mv&oMWX#BER$n~<FM#$*%Tsts;PFkMB2I1G@ue}Xqt&Vo+j5ou0U*4$RD
z1Ev^zw|nptS8#8D#wleIgtYnKLZfx^Ivh%?bCXR1?m)=j{dN2bcnt&~-aod08#p^Y
zwtY;a^Y1KZQDd}=ghQ%|=K`eL^Wsa?=MA=bdX-r=Ho^e{WdF`XIR=fkFMYta(sN&D
zrp35yPpx){yL>h3hBX^@)02nx(BN+3DDvE{3Vc$uEMS+P<bnCUShZR6G=8!0suxAe
zr3Y~o^oi`are4;8#=ONLDD+90_Z_tRmK$ZgWU4dw(Y?!^;rjlN5HW(O>9raDgV#>{
z3-GLKA>O&u=0!dWMUGF-CU{sIzG~+-J@FozfcebtX#-B4e5c|05zSO&x4Lw=L3!8i
z&MKZnf<|w5?9yq!E3jc^2d*T+&d>L^o+A4f!$iloHJxvo)iRNL`p}M!@iB1^_?lP;
zhlEQqDAr`=f8K^u6fMd-iu##rKrQ=Vk{i{cz=Gtw(-cOz-ZuD4A9j<=6MS)Pj)H7_
z>)|iqT9cQ{v&dTzA-@$RrU4q>A?8lQNAMMEqmhN+;F36k6!k~dKUyf;o{BoR+!Kz>
zkNkKm-Wja`m+Y=3;Ic_cz<IL27QV|VX1?Tl3PfuXD!cUwa31%_C-v!cRgs*xbsp^Y
zMlxqZlDJo2E@uJk78|OpyXCJL4JPumiqmcmPuspl37vhtsRgoebA~nzNY?&Ve`r`3
z*|mSURGGn0H*}5xrTV@w{vRQbe-<UDYzvYULQz}TGS;xLDAE52KL%z~(~?qh#u*;U
zSLR#RJJxuRmUEoksplv#@S9}UXdP?NWI*(Jk2(Bc9M2s6AsU^UmYS1MrRnRKL7SuA
zBR9{LPJE6F-?>fcqs{Bww^pHKwDPs5#})}qe5d$2!x8W7bhfEPBDa-a{x2icEe3ld
zcn}Jn9M=$gSj|t)JNRDkaH%q0{o)}d$u<VfwEC)CfY?$ROT8q}noIFvcuGv8XR{dj
zFX=q0@zNuCjiklanzQ=iaNXP@zSvsqSgxWu-y0%#Fum2XiVmQf#uC;5_MMQqxkg}6
zH*$TRW>>jaEi@t7(VW<mI0LhrqTF~wgW%!Xznb9ClY*|tI(0@7ulf6ganEC54+xuy
zcyAg$)S;ij{XRLqYUKQ{2--yqO(mYXoS*WQFo6fB09f}?!Y&Uwg)A?pr?9^u@!Vcd
zlx+2BUdJkvE6gH467;dz0MQ!g5@nq1`-)-m%yH|O@V4f<1MF`0fuw`?uTv?Ab7Y?3
zA`ksVB$D_Wg2>Aek%f?;cf7F+?&nmb#Y3VI_86BEnf@*FSykT-N7PGl9cik^K<^jJ
ziyF14lPlq~F>r^KnNE(+hSmmDyJ+s}jXmR@q(4lyog%Nhi0r0g80k$v#<wz`x`2Q2
z(IU-iXSe?L29_=Wf!^KYT{ZdXSVbdQWK@lQLVjlYOsZZ7egxf={CYknS32jsr9OZ2
zix))9UObRo!W7MQal!Mg<1HJ(#kGIVo%_YyP`hFYi<zfHQQot^O$0)ex9Ux=y&VkX
zbwkMSqv-Pz2-v<ph-Go#p6GNbhvvSrdPzP?&&PMWFg`x+G%_+Gze!Z;cq*z|phJ*C
zjyqj$ogGHT|8oD1j*N%rhFdG}Drr(rqxJddOIAiedgM3=O+1q6u_DXztm1!369J=J
z3BWkl-hF)hQ*##J9-*4Tw7&0`h)KpiMRtuTjIoG<n?@P#9Dn>oN#;cT`R&U_l-I3O
zMbp)6-CBUIm%)_^*114yNm)(#ZtpOT-uR=~-amD5WCO%D!DRIMkJ!*3#kS16W<}QI
z#!Xs$I+<D&kS=6Ka$>cNx$K;qmy_^a^MTl;&Fb#wthQ%>X>Y{v81fOOMF?)v`7!=U
z=Mg8iYMBOh$yJ)O`O+0T$)scnFT96~1KD3%4uaG1?6W_4;ByK517nw>0C!M$0bht&
z22DWP^=>e7;P6Jw0v|TBZ+Wynd1DdJtjSZd*tU><(A*#$ofQD@qV{d%9R6n2a5m?{
zQSXOsu)Fgi*uDN;QSQvw@9ZD`whQESfDDP#WBqp1-xB_o;SoF_L$A-+Cv_+~&7|m)
zu3>}g81H?c$+Xv`1K1FH4i1_U&BN04mfEwJXYsv$t0r(MoL14b5(={J&OdL=f`fxO
zj65S$WUAhb4K+wR|E1R+3`-LmfTEYsl>qPY`r8?O2g7sbh1|qrNLnm%*utv+fN7ek
zT`zGedNDqA#Idg#a1QJQoB8N4$n8ZIzxv6TqN{!TbWT~zSF!>+4#jHu4<U)w_jp-U
z&xruBA+y7lp?%$4d*8SlhW{wW$EdqD5OpubzJVY%%~FyU-yPHpf5X7xlIij=ajDy^
z86U6KKPQ@yX}pTKPoLb^47ElPj<_YLob8)WvNswpfAf?fu`FcdcF>*e=(Yj6fm<?n
zlCP?T`*?No41^{(?ey5wrx|^}<EBDK&oI2v7Tn#NqFo)4&?mdb^myT1Sulzci8F;w
z<c6YE_V-Rqa-n3?v`s*GK(YM&kETPpAgyB{#D8+XhR)b(|1)Br*T7-gq8e?AN5!H^
z<uA8gXbaH5Za&(;1y7Uq-x?Uz2WX%@!8Cfx1ppxBe*wrlowj@a7L8L;;JpZ0EOhV7
zg?3Oq8v`#!_(n|P8Hi4}THvN@92<e4x&98XO=}7sSq4VIKJ&P_8Hd2+j_Kbg*T2+T
zHE_`0ZfgM~9`Spl>ZyQ}oA~LjPQ45oj$|R&BJ6+)i_4|E+nkJ+l|nm@y>PI@@axI*
z9fnPgVw6FGXSXd50ZngKO4_+uH^p~kPnE4UJWE*2@2;Mwtg$_Ajn5MH(N2_$JX*_5
zZ_pp$%K(6H^Axo^u+RNGnNMvKo-a{!={W-Z7Ps?m@s<w{L&NYDK8JkcG1M!)uk0-3
zN&Zk~{V<Q1J$IjK#!%wOuf;Ik>r<Nwb0?wN=5Nmu%nj^K&0cH#bw4GHqn$T=v>9+X
zf&XyWd`cmNRflTdRkboSKcwBIy2LOF2ZU$4?``;EXdCnaZmoEOzJtB+R~9Q6jU+&c
z*zDcAEZK|`p8*$vVmi)eTV_Pn8pBsiCAJ!Le{YN-?b1XzAFT=PFOI)e5YQB)$F1_l
z&&+oNFY>7&Z4G44y=1{Cg-de~KZEC?Y%l|ktCIU!t3cC*9Dj~-lH$wADvK^=*PC#u
zg4l)RWV_2@z0m%L%yYyNGIMY>(Qk7oPqj3W20W5vkmqlu@NOeO#_$$^uZ9uqD7xGH
z!P90#0g(_wOg01ajij+DRBJ(U{Ul7pWcC}t@6a|Qaf^)l84R#Z2EXEdyGpaVWv$lm
z+7yHO{LLHM=$^TpbEU^BV21wsy+we@!zG9DEL8kqpQ;-8)6el}UP0Vf=p%LA-0Jas
zYC?ia=1eYr9>8v=#<I?Hg;}aT9ZV%GUJV1`K*je+?(d6or^}UzcK`5gE^XMd^fvpG
z?Lu3=KLM)GSOEOc!an;6(ILS`pA>d6AW-Z^!BO%_VaK>*K^4u=28*x95!vjL*~(o+
zVBzB8vT;dCNu7*TD;SRV8K7CsRCmA)X#)G=8aC<qXJ1kayj2y}xUXc-xzK-u0|r+F
z4D8lw8^W=1SwuL}E_ut3=S*ve6dyBF@;2&*Y*WR>Lh<Fc?UjatNa0Hpv8Y3l7zZCy
z43!&Bq=Ihxy+7*w-ta`}R%;}OUsTgr{C19_lwiv^+U)J*ak>9O^T#j@mo(4={ek@D
z(MXZO+7BKCYc>&4A;cz)hg`6Mp>odH)wKnmr_DCggvG}(IiC-cCHG1TZdM*Y!!86O
zB;};QVlM<ocw~1yN`7y>2i+22LgoK5p?}bn9yp_CUeEu5)0JVo^7yAnz{$DiVc^-Q
zR7uQ3t1Gdo+X#hf#*67bkZ0?X+P~LDF{51tM@(H;PEP!h)!G+tRibrnZcalpAfWo!
z*1yvLfOHGuRfd*?v^(5*81@1d`&EHs=0<Rf%&BN%fqK69iJbFUWYf;9Qx<E^srD;w
zI(31RH!|WaTs+pR*Kz@1k-6%Y!gI%x#y^|iEe8k+KpN|3V;sLX-#-V~k>SRD9g?@`
zli!>d3EsdZAzFU?na)FbO`3+Otza)gdqFnNdD5_;4UiEN0cM4T!^KA3ycT{YqrL89
zshbOuSDE<Qc@v|SvXjX<zZtNQ4zkNR1t0BZ0Nd1GVX;R)4+|*vP^_IJDOP;|w&d)9
zmr@*{m#SN6eb^8VdU|@W`yuo4?+7l>!m+?yX;msytNra+0hxFXRsJ;29ze*CZUcsx
z---Nv{!$yfRngbEug06Xu>R38YFN18{B|5=Bv*h$sQpbME=4obYxG^S+;=Su`xu(d
zI3Wuxx3?%nH#x`s;kUQHSl*uGj@T{^>MBc`e42Z{DWw6B#*_Z8V_*=-BY5)R9qpXE
z$PXGgF#jP4KUje6zdSr1p*-7pLRuWDvdjtxgze)dIBPA)uQ^cB68Z9V($+K&8s41r
zqFGV#QSjY;9rKctlZqb_OrxYscei@D1`{z3bupJ@SGVLjHvVmUVBoHpmL|}SQd1Y5
zeRhFX{>PmX8h#2Gx&}?RQCQb=WYS`V-ga1I|0bcZXJ=zVXP;0-r<gz1D38k3o=5IX
z7FFTUYi-5ZqIHtQnPD#~5b&>*_<OoTXM&3!t(=a9@1Hx}Q!GtH9Hs8DIQx111JcL{
z#ons!2c}@vM_c&$E$mHJrQc*(HBUvwn;uV_{WOll#Gy1nCq`at@LjWY(|y!Nd<}Wk
zU5de`Ca=eF!EfiG6(HJWz=`S86v_VsX0QlwQf)<P>pys+4qkYQwSf=_%~WZ2inpjD
zyJFosK9<BTrtnkCV9W}*YwFevL3b;Hotjj5Bmag+?^YBSupb}o&5d>z=nnwHz<IGO
zO^}{^+P|m`Mx$7of?Kb47GcL|R@F^=6241&f0Kli2E@PjD~2@o9lxvaM*Mv-p-f~K
za5g|Pdm&jF|8_BeHKiYa+OMq*jChIh9u5&)>ugT$mew-c%3!fyr84)oUnN97jL<Zz
zmmUkhUpk`u+wL5>`yjU-z9bQS1fU~TACcJ#Rfp)GQ)l3qNjZ(N>VHBWe^eDX8LHke
zY=X#t-Jct`JoEHRD#y>Oe=X<tCkzj`^d%xJ%6E@f{(YYQ<I`VJy8F-gTkwBC{SQd}
zxq?4n68(<y-ctSV3kbE5As`Fg{L;=u|Nrj(TLm#5xz^8=-l+e%0$^33$3PCcvyZ^P
zROvrI2|pH)AluN3{9n&;D-3XM!Fj~%|62V&-y(bi;EKGd;Q7=4c>I5f<Os<Jnap9u
z!z#NRefC>$6DHSTx6!EX=|-Uzbv~T!Y}*jGmH#R5rse<t@4IDuQlDfJS(t!&`_Sx}
zGM+v^RhMClQ-y;X4Y9a7zA1f7fd1zL0pAMABia#qGwYMMT&*YO>izn{y^pd<=`F+o
zCzHq=|HBVyj`ZSClOwSFf3LU|r`rr>mLv`_qgkg+7cENuAFlr2w_1yY3B}lm<W&{>
zA8UVn9$y{6Vhk_pKMDG?PQLantUt2={%hgD)nK=7Z8r=5`!>ISPiPng*zIf0ewhC$
zD*zI2F^_sE{9CrJ6$J077ClbG_ZC}qpW!p_F`G}<*&67wdCC%HfbQ$t+uJ2W@t7ij
z3=Arn*X6gl(sOs{-i+OhQKHmD;m0brtGkQEJ~Ghl%QPOx7z(iv!x`r$^uv~$((wW%
z3CoJEJ!uV%WZ6`%56mr>`UUD$d2=n=`8JC!Gb9J6R-lKwT94xn{L$|pD9wg5f4tcr
z$`I7$u%7=~!T<KHVsAVHZAU1+ps}oz4RKd=jn$knF{p_Xc+avv$NBD5Vo(sWdZl5o
z!|tTqGn`kSo0O*iF!2A93oJnWT6j)32FAWFC&dGQ%A2TV7i_Q}NB^<cY&0iWslmbQ
zqUy=Zv}X5<boF0JgKqa%n`wYL7+Kcep7f<1KpIUvpc5&xU<=-X6i#Qhr5z|}XS|?`
zO}j{iiI$PEpFqIl^36>|?KjJr%E4F#0oNvoyrN=^dvooATOa?%`IN4+AlU^1*`dqj
zav<c5w%c~@Oii({Uag>0WMnC!vNIc3nypS>0u#xdKKbft@Pg%B&4AV6w?I<6bgyf(
zi@S}16a@!qp@XVcU5WXo>wiVbF}g_rUSKh#4gI&D9YqVZ<SmuY3=%$fGU=LqKAXnt
z+`G~dYSa}$^45Ms_G&qh%&^THmYZ~E_?yT&@Sody(-3vKUneElqD*Dab3>oCX{uD4
zq1o*m3l+;`VSVg^gx3iNRpYvPV3j=~Iho$3^{(b@drYF`{@Oyl#ly8GFx~y2{-EDD
z9Hy}>5S<J!<xPw60Ac-V1aBq(rXdk4Z@y-JYx<rR^tV;~qvwBg_5fwg0_J)>Q8z&@
zg`<Zy!-K+Vwz}sn@J6fI9?<<MS<)MWFMxEZ`&tAaZj~IID%=-*;E^i#c(47yHgxn3
zG~lhhX~sruZ0rt20oe=zZ3hmk1kY_UM)n{?HGC$GwVK!#{zla_Sf+_0Rp+r!(_S)x
z(e+^@yei2YR`j)tUX8_CKp6tNm{W(MhT7*zsODl70}+R1)Ww3k0^>yINQdHA<pM=&
zgQ}~Jj*fa^m#UhYfz>U2;brwI;~pe35Aqx6zWwfGiDsk#W1q=sm4U;T8s$<gb@6b*
zc%z47f%eYMUhtF-1E6G1WASR_H!d9q111@sG>5GZEz@;lGQn8XIkHJ_6-zYON0QbR
zt4%+Q%&crTy8ds>@PWZUGJhE2LX-$6WKU%%ty`%x!*rOe%&z*z3blwDtv{dCggBrR
zesYvfVB9t(HIg`mF(I};BT94K^$!f>O}3dfn=DRhoKyU)_4x;4#FNmpszIJUI<@jl
zY!Z@vQ*xfwv;DbR-ejej5dv_;6E2bghCNej6A8b1f-d5_PQ_2M$!tB4;;JZ;fe)#+
zK~KEX-UU449^$`9Z5$YNG)#PA*#Gs7wJw`PWlBu@Xsp^IYyOhUPC@?sn~#OcJ#;F?
zU+vE)R2%6CBNBZ@;FkvnI2ZTS=+TQf@K6<bQScbMw-%ijJvU8XPgyCz_mq}+JzX-@
z*$gwNbRWx=!Jit1s?(!2l5tG-cPM_I_UtZwPRcjUE-x?d<V=<ZTyQpG(7}mb`TLSu
zE2C$RAG*NTk#UIg;{Gjk&L+Z(Zu#EQa1S|)GiM3;2t>Ut@Y^~dgm|m+N<WJbs@FXG
zhs}$(6;bkM!&DDyIr-%!!57hn5}4DY($drSj+_x6e50eI8`O4&tXq$bqj&K`>|_K_
z`&kKYm|(1Y`k!Lc)Xgz|GOte=;@(URGnlQlIaG_9hD%WaV03kB&!`J7$3&5l%hKoQ
z45nuAzzMzx2z_SP13KC`N9uX@!8s+|W;jz=Jr$2xYs-t2->up`46)u(Sj2fQ7;d;>
zD=WJy9%9cn5p3`SWM7`envoWQ%fN%j78x1oT)S;)(6xG;`WnV+fBMb^kT%5L!B%W)
z!tT8Za~Fyb5MSdQ_FRuwH6~8yhACkkhp-@x`azwd29ur3^y+_!<N{_S38X;q>bG>(
z%Dh!sY=$QO18cBh%YZI7xZz}!8Pw#67jGzJh(9P<bLo_E%78z8kLPjR;qttJIxglv
z=m|@wJoN-LBnOy2&fW-9jTp;{zZ*DE4b~4`nW<ZF-AwBb<N~ZoMI+?etDysKKFP%W
z0RT^H;8jMSZi8vlKb!F84?U@|Q2RXZ+qLa;onqZUCzClJQSqtx{6ZAgG^HT5ejd1t
zHO6dBZe$<aQc@`5vH~0YES^&}%vq^+<6HSE_0`QZXPr(HcLP{c-a+G%eAPzUNt2X`
zV%JR8h#_L{nx%&DyKA7ZbQB+-Ev3I|g;oCf3MWG5Ic>l{8G^MIKoELE-~U4p(L$3S
zPdvuA3fQvEsONvNxg@P0^<RZLJ}EbqM&VQ~@5F~7-a3eXPFQ6xr#s)7z(!3sp7E+g
zPi~>;dr7#3gKFKtov2!@wtR3i)p}1Y^5uCC7f>1k(DtcHt)YAk2jg<n5R?%d($QAX
zL)aJ_b)ac4>IESWuZBvA26ci2&*?iiC)o{)nKw0=x*Pge=}ZsD!6Ad62P-wlK1%{G
zwCa;6p_7d0QHPZ4iBx!ucQGW4%^pm7UO*CUgP5Ro4%>>HCN+6{J=3KH?{aioy$CW&
zS`%vP9d{@7FJ3q5dsZS+m3ZF06(VFaB`4u=_>2m$q%;VfrO5v#HG){(wJ_C8<R(8<
z(jeQ+pAxOJ%wDz^;%edy!3}SB_zur7^_tAFX^UR#<)4|uF0SG>M&N2PzPCpwv!5P;
zT{1x9GXGU)yDEArD|2^!UbP2=77te3k`+bS?gAQF?q-wF`-!6_$6v-k-p~?8f*rH&
zCi4)pON<2u;ZC|3Lh)G=jQSGlVVC>6w!+LVLgD0oy-b21#(V8`d)&oJ<|ci}-VvhZ
z3~@a0jkVwCk5<)j71QxJ7P|sAAA(4tP=JZ{zqziD2j=6Gg*z>^`RG@LF?G)usg@bQ
zSaMjoRgf1T7K5(0^UvfCit@}p!+%Rors#vFdJHR*9c<%yOvaHB$j!(uD+pYPT0)Ns
z@KQQT>hp5#HwX27w)(}!0wu3b*2VB=?SXYp*L<oD?=d#i97*lB7UH~XYH-}`ov*it
zkXI+EjWmsBaTkuEbMH^l$R!7zkNNiEYdd`CyaMQ2uM6mmh$wVGf9mYj!QOWN4U<qQ
zib$^vOEXn6DfMaTm|Lskt_p#mSJS-9YPkNzRAG2k$lztot~p`+n0ch%|7MNkHi+^z
zv*nRD#;jpXh<>@o<w>Q0DXvO6`7tW{oJ?RI^|iT<@d)DSJcB08C|pW1?d+W;s{;}`
z>E07Fq~|X_&o8LcBMq=JCOco%br~*v0God_8_NslgH9V*YdoK;bw1Roum~gO9+l&b
zzPiM2&S1Al;LY2E+nX!{a4(1%?NxG@y4%IU{@}ZsIP7iK7&4b7*dF4b)~k&aqhDW8
zvqE1qB!bDI0Lpu2F{e6YY|J~2`OVw)F#&KeYRz}jO?k3kyJ+lQirA4apGL3U=)_NR
zX-TWrHtoBG$2TZdF-{Ed;cC9~aV2Xv91EFKo5qW|maxqKqThcQ%V!i9M;DW7<Zpv9
zj-gC!7hBnp4WWnXn%fh22z%oNv8Qu3t+`}7rtc>oS<rmP4M1o&O?C8~Vc%)i9f^v;
zPgyq-9yvPXm1WZjq&|{N?)7lah0l={7HTs!Rw-jyVki<O1dS-0X3tRbHNfVBWv%zg
z>rJtqb<kOhw5lP2xn^spE)92%4S;?OLrPeSwNd0gtVHZr_A%SDsoHf?_&Y^y=r}px
z)hOl35=hw7@e(3C4RMc9_yeTICZTWcoNYM0!fGr}?%-$S_C2AuGeB`SiJR53(=u5n
zAp$IF<>afk*^6o!7L&!>rfxXSnD5dco@Xy-yat<)zma4LTROjdmu9uUfFuWAG0nWM
zOP}E&Tq0tZ3*Rld=q&oTlxh?&oQ~CGdgI=|{cMTS2V}>U>T00F|8dpewB2}QBS-BS
zGAc(O!0hHd1`}ka@#^|Yr=M$UP7m2pY7#z4k@BdlH0;6R1XY6@?KkBw2$S$Dd0mb&
zr+tGG7GBy{R1?kB+Bn;D%~AL!*;APa9Jm}>O@as3m^5qlj?tpSi8vb!xOR)H<_#Dx
zz`4JI!owZAOjg0wWHnK`ZWRPGHPabZyoXJv^D~eHtY3IcVWFY1kVa>dunt9s>8ouN
zK@B3OmVx3LHcF1{nNAzh8i=uOBH%`7-;Nlo%`qPIcZ`0T_AJz@uguAZ?P*$ENXZ48
zg_6x4b7*R}vT<FP8wgk|EkY8k^~fywwl9W^^XD8z3i<)JhwZhENR8me9MM0uhu+>p
zKq6*^uY}M3DmCHBpHu0>ihs0I5HT>EgHYNAK*BshO|lB50S16UPL`7wtV4XU72%v$
zl%GJYdxuFXH#g${lr;VAEcCIe9!!tY|F-G=<w7mY?_T^o@M3q6V_Mm$t>K$USe-SF
z1Dy_V9{BoS%-cump2rXVABSKG2%)2;y2lssPuz|Gh6!|a(0Dk{Mv2aU7L@{BcA?|2
z1GBRIAC8&uV~+Ecb+*kD+aBt~ppXB0^#Ak@mQY|LSqQ(O{vY8F!2Cqu0fF{v<cvQ;
z`u`#X9uz<Y4s96QKPLRYpXYP6(Ep?BtHYvN*S7^JMM@N;5ky2v=?+Or1?d>NyL&)H
zq>+~HkP?QDp*x1|?(VMn7JH*-pWk=37k|iH7i+C~*Aw@1KLtfiHiRY8YZfY{rlqyu
z)#Pf{R*fM#p<)tqR26dGT&*U7J6nT@m?v`7$_vI8T%mNUiLM2=c;ld7jO;cb*56-f
zftn?j{R_+D<%!cidhaMJ$>X(>hJ7SZ`SwW@d~N@O$GP}6mI5LLD)Y&*$f2Q6NrD#R
z#UgYZH5SuVfo!x2KVOLWKj}Ez3Sh^Zo2j(TBIdFaXEPfk2ZCX!Q54(1-VgU%JB+mM
zXh3qH#900|gyO#BtYySkxAH2noYgewji&+PI;q+Cw9zIYXv2L}Ha-ev$dHVVdQ2rD
z-VsJMohcdldU;c_kMw`gC$}#N8yoSQ>pm9)0|Vu;s6jq$VU1j(%LYvj07+U`yiu__
zbwhYx0tW}>4tM^`UB)s;1Gj9SYw(`d-54!o#NyfW9CMCiw~Tr&^tHm550Ez|n<eqn
z>-_SW*8m6MEQ;$el`QBzbpqqw<*5V=m;UZdEx{!)v5f(!sE;g!UUVj;Xrzf^toNt+
z=BYqlF2<k$Wo8*Czs5(R6w?iQVhJvt{wMu&`}|fLh?=}ZKiDl3ZC~n-{n8FjD1;;=
z(8y<UOqQ8<mHlXL7G7NlV05^(-D`QqhFfDrG60kC7s|dhHL&q=%Ov>>iKk-s>w4Gv
z(-M?G?!%mbg^33uL2iI7v1YN_(v<WbAh@RgknA~`$ok88@a3r!1`oF-^gQ!$!nBZ+
z@SY>UCM+sXD&Ac0f~(uc?BSQQaIV6d1AloSv=+1F<pyGmowv6d&Vs!I1(g_mzw9JK
zTN19n@fe@Q&DZ>$=>X)wYYJ!21j1vx98CY84i!VXxnX8z#45wbdJysg<fwd-T)e$f
za%&f@@rfZH!~}p!5i=w-RHxwMo5}f*^4WIQ{j_qDjy&%?o}{NP-a2q4#(@O}AyO}^
z|5XYHf^>r|04YPa%O>LiH^fajW`?Trfs2i8q<?&DhZE1UjLqZvcr=hLQ#x+N;u7G9
zn9KH25I_J4IZ|i;r#^-J6uHLbfooa$Uu5;)JfUX@(g7>7Z_s=&_l}jko*Vr7G*wWq
zU#q0%Y$3qnVSqxeVr5f2vtjU>nZY>_$}IyP-C?tO7rIHB+rW7mgN%-M%UHdz?bTPC
z>%&7HBIw$AOMTHaQRFsQMy}&hbXcQVXw=8$9v(Ma2~a!)N%kY9moqj}^8cbk2uL^7
zp_T#ICaM_cm%DW$^2*|Rdg<y;^F9`(>OEc2jE?u~05q2_mB6I{a1~V5j=NFRiB1b(
zUjBpL-g2Eb<(Xw>`l!uuJZzpSWdYaqfeeB;AiRy)pP6yufj95jx0*(6yZtXx^Y*iM
z8sxKxeY8pi5rB2@qu&~>v|Xh;P0_4%87S759RH>5U0o~e_jsq#ga7(SK5CH({7SQ?
zf+)SWM*5H`peMotuu3aE<Ir+bqlpmR6Jt#i8kORux0B<4XxabI5bAijNj7K;t^gw6
zwHU&`)BB}&N?I~bn}#)(#dyJ@?A}2bm87sOqakrrXec=lsYXNHFRLc$6j~d7&>=`E
zw>A_Yj=}(+tJnRhEZNRs`Jjt2I)v{+-0Y>Di%OkG?PMl$(_ISq|K1*WE@yzp?@HLG
z_;R=kb7aZzQLDCFUwA~w(q1%rOED0tJJ_8RRY%34#F0q%&l~waGF<CR*-8C!%j&tt
zXSP{|{H2r-18K4QlfBs=)8YX;-P?aeAX9EJJ#~F~y6f23)RX`SCs(ZQ#B`K1&N~db
z>VW5f#*Pwj+N3kPomq+9Ukc7Vwpv(Nm|8T)dDnx!4V8rp8S1O;V63*0fu&}fX%YFJ
zYT-22T#E(e-Vwh7?GK&omrl$q3;)RYJp{4`OOua`HtXmKD|A{ORsxSAe7{-8m=lwf
zXRX)2Y`hl;QtW*RNJ!{G?#Gd?Qvkx(UugD|1E|HK2x1IE761^o+y@w}7XTgOIB0Rp
zm>$e|V|6Zdgil`sZowL#vE&mG8|8$5Pw<E*<Z=d&zvKh}a?}8>3nySUXa_*$T3HT)
z_31N7f>Z?aQ}+w9sKhiNz*E8Fmzr&({WsIziKxv<T%!aVeGq#%C34?(3@__1a{M9=
z(L%;<TE9|j#n2Wl?mvoS!!S4ea>aQ02kmN9$sYmJLtEN>v=*qjhw}e<<-0#6Ujy<N
zsMGZN0{@4({r#&a7=RfkA(sM-|GC+J{m&~I7f4Xrl}8}_8wY;_V2ug>o%^-_rfHvL
z$Q$t~RjcfB7-MgtM!TqI9cVoHe{%oi<VZl`fKMxpn8(RV;8Bze1@;``&TRQTvisA2
znppqwfN0Ne(-Yv2xi3}GeM1R^M9BG(7LHO+PJ{j@9ucTVTVlCqe*c<NOH@+qUop*r
zl&1*VVPGu!zkTNvDga-V?69Z(Zwe7;|B(XH4v8OapZ^Q8A};}6jPJ;`LCNnoaqBZf
zYX!!>_pBF=leH-R%O3)kOXg#;m6_R=yU)X?6KQSSZ;Re?^N_-{+(BngV5@Kb{qKs=
zKGCR_>}>)SZV#%4jcq>auFk^Qo83!cKvAV{S{kL;+U4ut$@l+ZJ<#Gm%`E`s2R;2N
zy~c!k4qOhko#$G;)xBigQTm@Q%_b=+DM`2s1iTQFOmgv)O7t=RBM}^;o>vBKp}!FR
zDXE{O$ltXMmMZ(D%5G0W>I{k&TGD}R_rPT)soY8)Qya-fusOHhLY%zbMDu#F<t`tM
za`v3R5GodLK6OnY>v9Ek@%=y7BfsrzMnSgxhj0jxw<GztH8)SKJUE?lJnNg+88%Uj
z<YPaLkQoKhzJ1%D#WVEfi}3kg0s)hDx8AvJj|(rmfg{jBdI)q5TN+Wi%2qzd{3~(!
zm&f=3+yQOI?(1zS^xgRggrX0<RxjBLJ!{&pl?#)nh$}aGd7G`DVT)dN8arI2i+Eru
z6=sP~7Y6h%rGNYOZQt*KAEQZAuI&^D#-Bs}UpYW>VPsWfmmsmz-N{*s*RLg5LLf)g
zrR76;@=dG6ri%HI`)SmjZM*IpFQ}<~TUuLtIo;0oKGgO_^VL1W_|rm*KnF;wrzNSz
ze`${&CKlFi%J~m6?q6_$NVyD2iIAJouH)+}$qqRxn*_tt0^Wn(Gh-(GDehv^RSTd&
zSOu3XX^*US?^C{C<qQJD9~*R5c@M#ezfREZPdUr&Q58RZl~x(E`v^U}nsrXC!eLr<
zz*38By{|H1Y-_cKAr@Da?^-MBwr%>VNT>8z8zdpo*%eFe5^<t0rg`eS`A6?=Zlep(
z4$}31L<vA*@;KQ_+2Sd_taY~KB||0OqLfOk4!PN@j~eAU*=2)o+deH4*PKCg*df$(
zoIFfACUWlv4qf(_od*yY{uqX{@3)U$MetWU$e-&6(^@HfPZc5UXCcBjjzwR06QW+X
zwUy10t39xmZQms!8ZnP}p!>25XtU%1R+mRnUu*(xXkED1Djugnzbg{}S9@zA3ezhw
z|A-18H1P!jd2Ng9WNPFmDS#L&ymECQU|*Z6RZ^mn%WGdRi?nPb8*>!Mly;fL5VeH6
z`WkJ7VgQi{%-FZpGzeB6Y_0uUy~(iv1G0+16#eJH0m1hgeEbTZh{#=5HTIE|loXwE
z-ACT_!t;blhnjbdl#Q~v&%s<AtW*jH-~*q)L7x7uD7xtO_Vx;(?)5ux`d?0LbNP=W
zp?|~@`WVPv)4rehPn-+fBmQALsKP1*Oa`RpOw3=^03{j&;16WCUDNSpn~tlDDp$FI
zM67}<y%z%)Q9qqivrH3>;+|eZX6>Ue|GZdEAT6G7pGW4O2Golf-KoUK)K0rW42zUw
zEZge)yW7zX?8Bnx{>wH~6?N>tmJ9POOoC6T!E?lc+|M%CIX#Ash+!sm`~$HoyVqHN
z3Lxq`fa6J$`gZ+WQEyc?lnBv>weBzou$V%aWL)ZHI?E3&`YI(uWNvF9rz#Rb<vE-M
z_C<|Y%iHWPIe}`@2LZvsGpXxhiK8+h!-T7&30bzkFIfNJ_73-aHGY3^dxtq&uh;!W
z{im53nbR@x5yX>AsjUODhuq~RlX5KN+lK+js@}0!s?c~|*;ZgOMG_P)LP0@^nLA8W
z<z5l2FO(eQd-F$ik&@2|{_E}5U{_RVH6X%+Lu8Gz&>ws)t-W}-4mKs@EZ3f{sc;a`
zTs+O7)tg#-z_ghLBhjeu^9%I9Vxf6!oQ=6s?MaNCAPT7Ft(b&90epH`d4k|SQih?_
zh&V2h1+j9AAEn=ZELYyw8K`x{Uw4<sqOn!{!Lu&#MqLl+ePIF`Ll1VEPZNN8Yc-eP
zSr*<lu)W!?sq}-dZ<$c;q!UdO0kN;a)sleVAJTtL^?`??(biN?Z|It9u~N7+R$=<8
zH=&?TQAa2BFjp1<Jbh=3cT#=81uBf+zklZr4-W_Rc?I=XvCpBl-@CKz<gac^)0fTl
zKm6nDmjVRx*J9RO<>llqj61(&uh7T7Pf~O7EAP=iANZjKT?0Bk^c#u7mnM+|UhqtX
zudV6$#L`~qlN@enk+SRFQSDy!xWLgkod%Nr<7nnA5%VA7(Qz#8%{S$zrKYCqj^?J%
z0#hao5(sZbV9A@XSOru4t2Muaeb*!|pa}5sQ<CG#6~8i-eh|vE76JC%DIndJm3h{f
z+Y$cpTKBx%@PDZjvOjr+eYxA@yJ#BmT0_p|s7|wBcU0rHX>T_Hy%ck6rc`W(fM5D$
zNW#Y2C9wZOD-tE$yrD5i6<4Uod;d;iJmI%kF3D9;_U@c+-!>YO7gOx)Ia>(zf(3>Z
zUam%Y)Dh8`7?+&|HQVKnusTFG^ov0(gN}-imfS#x_k)0Mfn(ue@l5Kj$5kUF=abw8
zzbU4a+d7peyIi_=Qgr(r=8ljzL|TNW3o8>`jSA-fVTcDU{g@AgwfaZ-E1XkT-HQZx
z5`XFS;PSrTotFH+hBzCr!yb?R@z4Tu!iY-7u^2tO#NhW*QYC{KVynMy{r2l&+N3q&
zlk@NOU+szX8)G_{+&fWafMVDl|HLdvDrktoV?}H_o%T*Hu+wkrdyZO}ZtL{_mVKZY
zn;biL^&}uD$oUN)Uy98*r0W}ULiOp!YZ3pa9fFYf*d#>M6OvHl@R{iH*_f@Zu`)_2
ze7dW{_Rl_xrJ()uarT0sTU`fSU;{01Bu=~Zl>bQ7%-JD#I#cjC`noov0*xy81+&?S
zN26E0=G>akfuj7ZNxZhp9M8;;-^Y{Oo-b-9kpo5;KLN*Gz)(13Xa|~VpPS?mXK`mI
z1w3!di~5Mf%Kw2?_fqQ5fmiA^v=qTGVc@jske?3B02s(#cjl`>l0HwX4{NF0`0RtL
z*W1m=DpHdE)yJncIyTk>FqS86Hv`nam6QiiQZGl?+S`99DHMCph;kIjsPjD`BbzPx
zF#k?wG!ee!$N(yeXPn3iy7zeOU{sM^_Q*9nGmC`FsXYynioc$>wrY<?W-N`KoYJRo
zclkYL;PM_0LTmr@fR%I~lqbPFOiaZf8ylMrCVk1SrzEOf!y4S}oX4BupFVwJ041(m
zs|a|*s+8w_0iP5GaUP8N)t=p6$3ha&^Nlo@wKwTfX7=uN*7F0F;BwVHMd|k&k3ozq
zom_`0t?zD+POy^_$gG@talUgQX-8CGsXNq?jafBF7*{2)_Ikn~CvH)>`7)o~pghjJ
z4QCAET6nek-Eg@Gesft7z%ub@aW&EH<JUUlB6T<;fCq0oGMO|Fh2clnj8XTmLRW%4
zgk1UFZKA-*5O{xsL@<sx9P0&m9qT`U<w_;F!lB^D$b@RH-cN<&+Md_E!#WT&c4CFm
zwbk8{oe>Ga`e;OaF%dD|Y=|<q5%$}>X;!7L*C$;}IiE7Zc+RiV2u8=t9qXisnN|4Q
zPAMxly(X7WE>R4&7JK}V4cw0^A3@LgRBA3J7g3UD2{|=2UFYr3mtniIQ!!*a*Y4{N
z3D{jeuW^uIyyGSfS)~NJl0G{O-}C^}knZG|`pGwrc}<5uo+pJ~i}qJ(pNrQ>rmCrl
zy`<BZRV%6QYZZ-Dy5ar_8gB{&_G5-9^dEjP^@L#v<G&_}^T;NiB1qcz*d3{G_wx-)
za0ipUcGX%<vGF~9St27Xb2-~Uv3Wd~RKma|2kujf<CGShvqReAtTVN<I}!p~H86D0
zo4Kwnwn;|r(7#P-c>o}X;w$Q~lbdm+#P8|pF9>+Aq}PE;PFJ%F5v(n4@>~zN5DS&}
zkhxW`(d2q{u=BNR7n>hFHf4)Hepj*OXs`xbxT1gbuU#8qmRAfw6GhmUGo&2F+*rWM
zGA%l7mv2oJsr7PI=ef#U1n0+<OZ4lAWN4*)UXNqa+^zx`ulC1Cy%v)rJz!HJ5vGZ6
z+*W<tz8t}yveh*^70y7Iz|vG~GR6#6g$|%*Rd4kqL9S9&p9TPRr&YdKBvHK8rxm;K
znJVc<9@3&8OFsfii$M3Ug3BzKQzRqk3i#kxr6Hq5g>v^H99cJ<ZSirH30E#)i>9iB
z#&*MHueO~Bac3(LzZ_rII0oJD*bVUXOWLtr+fEdomS!#~!7CW<6!)zB9&_^b<xSt;
z&0Ii)t%eYgtx{hZK9XCaIQ05EGQ~+$!Kb4SEhrhfUBmPW#lkHVz)Xn&hx7CoBr;LF
zaf^DF6Sc;1(c2SshcMoG-&5+RoC9Z=?g=@^^7)WbQlNVnC`!f~ujORoI)E-UFAe;6
zBn3x*rgpE&W?15&vqHPA1hNuRIxs&VbI>g*YlK}DPz_!RNCO&K*rz=6SAy_*$mnJ3
zjw(uwXE$OF&6|>E96QVMCzqQTv-G#h>m3eV=$CshQEt6=N60Kg6zYzX^2zo%H8MJW
zSS?}mwzDqQ?X(>c!?DhCbi58vi}LoV7Dze(<_NZja{H7?-4^(Yv@ZHHETiM5?j5y1
zh@yJO@}@>9HfhuTl2d0(a;J=B(xF`+L#^uz)=XF?KKpk#-${)WDYt_E6B;@{zxO(v
zq1+mdL068=gOBm>UQ&Vx=?|gG$(m1>!`GQbybBh9mg&h|lBM3qNpH7xo%e#l)#j6A
zr+iFjF;8BOwC)*#dN@{mJ_=>%MxQX*wwgIFG#CmSKCRBg>xP=PZ`%xRUo!_Ew*eJ*
zeh2g1%u_u5gb`SSj8DrppFMI49I3q-Grah6r<>>0^^exBAgi5s7H*Cov8R-_+@!SL
z_PMN+a^twY#7>^OamE*kpw8weuL#Wrd2=h}QXdL;s+3A7AG4T&rfX#u8eW{6j?0`M
zw&f$UF^pTg+q{$DuXRctft5mYhCdJF0AYWOK>ps|UIUkk$8FEz5i&ljwRa5=#wL`>
z1gQ>BkN21=!PgT_5k_!ewJ&9B_hRgJr-u`AF2Ny>BEi!(b#8A~HFE4_S{YIF)N==q
zN81yw;eU;YVl`26EC;i?LX|yBg`#t(RGROziUVzmJ<D}XNl}PgrsD?~v+jenJ9KMm
zyHJ|6{6Xiz4T-`>WEZh(dFt#RYK-Rj*BLzew91!R%IZ%595)S2Fag;?Ga^E7gKPH8
zz=$qYjRnmOpzW~pP!=Pc=)y7jYY<VzWE8y$gM!`2A#4+`k`0f=<JjlpM!!hGwnu68
zwlEEcMfIwp-w5M9rmQ(-U^LE@<0STa2C$<}W$R=Vab6bVJS2h^Tvk$7w!Qv{S2m=S
zk=bI+F=6=4;isnJ3!jD$*92}7^0s4jvL_hz8$8=j@PFfgx~F?*=CHMAzddVcH6q?x
zt=gtd{_Gbqm#U$f3ODsO-#E_ln(5~&v0`ybd5if*4XabzE!L_b3{R+7V<V$!cPv!b
zGOf3Dxp=Mp;zv_NV=OH5v)uCR!$%BD6#FF}Xm}|C^9`af!I3C%lntrXHCcR*SGu#V
zLcK4}%mUdq*|}bJCOj}pnkC@xG4J{eQ=~&~qXY;aj0Nc7iR(^T8r*0+(<jbgF?>Bq
zf2&xato&Ht;=(V)-ql3Hzqi<90GKBum_JcwXGm)5?;B_<b1E%~AwU+${i^QfD$ez1
zPb#!nmk97oNpXD5Y`ue?#$B|k;!YJ}CW-PwUu*Z>MEAx|K!f>dwe0|pGp%&lBt?1+
z6Ot1*G?_f3-!ntl?unIIl<F$+8_dYd6apqqxm)awPpos!p%^=?`!EUGTBAx7B{5$*
zLz1|!7oKyye!aoAU46|nVQH?%FT(c$MU4Lr7S&S&K+nBVobope5J1c*Ei7{yG011c
z=dS*c(}l_=QDMBLfIKlZytL(y(fP%h;%XD8<1>hhQjKB9-eSm;eFD!2UhgB9qy0mt
z>iRi}x3qleD=qi@h(7FJmLeC%bIuviUV8P4zQ`&gt+6Z6>X+-;U(~lT0H@q9JM5^h
z6ucq(z{o=hZ&4L+4IM^HWh|=8_J;kqX4mJED4j;czNk|tfLJNs%e72D#2Bq=D;yjj
z20FBRDnwl<F^EPT4aL-;OUyJ;Kbu<N+gIR`)=QcDeM*kob1P;y^KmV)I+P#H6zy^y
z=%-gqM+%-xGnmj>h9tfUnT1Cjt-Ga_)Sj6*CLzZRO3tVHK$arQ2qqP~H>3h8M@*dx
zxM{g<i7;T6<eR~ZvF99MSIeD~LqmSwlf!JzvPomI)eTtZ?!|<x>5W@l7JlX(G!VFX
zcs2^wST00Xy5o<$=I~x+G!gx@ul>?7J<LewxOcItCJ~~Y-#N0c=-*G!hw%2|jcm*(
zW49<fr)(83Xj;J@%evg8Um#}rw{f|AG9&Y6*!NSyfx%k2GrXA%({;!8>cblf8-TH8
zwy56)aE%1OLG`Bh==Q3V9Xa;1klM)9a_#WB?)Hy2is4`CG=J^_3aq|1;Z3O(pDCSx
zy5BDnfcG6QpTQohoVb(pT7|DlIZiPiH?R6fl*>YLVNd#v=>5LifRfv;p&p$DcGwcF
z@nRNy=<NnS4zajdk*vY59z9p}UWiVbRm_x4m|xMda6Ep>WU@fJ1MLQXG2Orf;WPh2
zMh{_FM-j8cih!Ni8u5pqNA(_$!LqL7O=jDS6W8c3E@DQ&ik6Qe5c*~BFmQX3fN-!{
z@@=H_SM*U|hfGoGdTQ*hd>>Xc92;L-u2N`=jz_QdX3m=&*}tV7d3wW%g;i|G5;BrO
ze{Ljwxzs!)!=<QpzO9+h))n{o4DpyHp@Ek$YCAG&MObs9xH4{bT#j`~lz@4Go}K=y
z(x8!YQOiRmI<?4UIXoxL<4dyGrt_ql4iyK|^AF`WoEF%Zhq9}k{<DhWVhMg`%vt%L
z2G|VUuYAUI9Dd-7saLuI$#cz5{!baB-ZFE140+GU&6;e6u#X$rHR%F$=~;G|nb$#k
z-;|XQ^e|L^Ag$W`NRvjx$Y9Yg1pv4z=|Dm@QDBh?{h)!g!=Tw%>ns@JxBN4~;cBkR
zRR9zI#v7nKmSYsVlXW8f+sv>^Fk=0MxHhA)Re1xTHw_2E(L*i7NkjK8>+BuQg-Kvt
zs?n$u6>E%lb~GMZUj(X5@*s-$y7P``XStptZBa(ovKfb+FHeX^xN5d*@goN2Aay6F
zffrAo5<QpZ8a+93tu;SFp59DfH`|dRG%No$f2~S?PxgV7S1v^w<*M;$w1}waQ8jee
z{yU`ZvN<7TGhoiv&FwR{(6|AOTHj$VY_*Hz8l`JW1=LYT3YGLXns`8)P*AN}?oNYV
zch!1r1`c$yE{UTYM+~HXT?SqW96vY=k(_cE2&w%k&&}@MVk=t{gY)5LJ6it$m{6C|
z^__)enKsH6E9tl>znW%e!MCh_uEReAokp|xOCSlWCIi>w^t$YG<S+nWl0h%OmsmIg
z3HvAmN<or=V5Cy>@6Gs0q$@kJ0CCE(qi0FC{4LTPYzcb?>t7WX6*Z~nZRim*7qnBW
zu^POP)(IfZ#D}o27VvJlrq9uw9GWn9ZLccfGX(kv2k#W7sbzxlx`#(|KO3e8BHc-A
zF|HO0Q0M!*2GL6Z|5fJwUp%n;I{v~frIoeTsx4pjB~dPtWk%rblwNCG^sk+vq}AOj
z@WWZyI;VRn=Fmmm+I$D04%p-2*pPbHt{X^BN3Im8mgfd~3~8oa?J;QO^1jJl9?M?%
z(Lzd$1woQ=p`5>_HZw_!U4~UF&%X-p1R8W<)tYZQIJ>P;4xD`!Rq5rw5Naz>>adlq
zeNnnG)GfZQ-S%mK01AU11oF7-h67PrVfyWGM!I!2rP8Pdtm$<&-8S{nEMTV5)vF@p
zOFGY~tzrYY&G=X`(914ENp0<bM^JX-s_NvV?GlyY)wRH_$Sy^HrPGXP0FAugA>Ly&
zw$*l}0p-->sZ=T!)E1=Wo$Ds#^}kIrDH@-N!mrW|=)GmPo!4kCcc@K`htgBHyDl0h
zqC1;p`N@ISFnTN=kHVUxr1_mQGsP1!T1Cm-I9JtBw#^Q~gB*$D&Vw-sR@dBfM<;;y
z1+|7G4#^pomivF(%LAAsNITpqe_xPE{p)Xu7efk`u0g^0jV!Ro5T#2lca5=s>NK4U
z<1$nf$TWP*-m53=CphsKES%Jzi2>naZp-{y{{hcBrpc$4Np}4@x==!lK4v$|%_`Dj
zPSZgnvcdk7`kFO#ylnAlYNf61)LB0U9sJm_XdJqp;ncAZdy<+>geEiVaI`6!kY9bY
zI-3sEGT7Ys1WhOJ^aDlf;|9+_Bfm<gY*z2Fo45C0E@Bc#h=9Pmy%v1sf*M8lmizU6
zP=e^+sMQ*<8Yc%lQJtmN(m2^#H0&QQGWRu8F8@f#$}2lyNUbKbb{}<NiAQ6J(H6k)
zK)>$73dF*u|J+8gvbfk~nXm{t%2{4!HeI7o2Cr>0r@iKh<Aq8YnyG!@b}wo@GF6QY
z*=p5ZwU{XpDccA<d>Gj!S@{s&y*C5Q(!HJa5{Fw2?VVvzn%_F=Lb}eSU*Nb5XI#qv
zzBuRss%lJQPCd=Y%!C%)FBhIt^CtB~_&X-XrU3AT(2^*#)ZeE3o$wqc$!Y-CCTC7l
zsDV%CCx~BPiiX@{dHwl{44T{(xPIMv*#}eE{5T=CmO@c56lHp6IKFebL}}i9qWs||
zf3|FtRu<^^goRsoo&D?7`8Nh}b}?WWtw*e(t<$RqV>*$yL(Mpu>+I~NaxReTt1nC-
zsbEYh)YiYpSO~niC5Bq7J7fNKEoi)6h+Iqis?`eFAg-Ox25EFL{F3)|5q4gzvlda#
zX<%uY_cB4aVlHbZ;K!SpWc8++568IZMvY|VP{YE*83#lT;tP1WeUJNx(AS+q4vU#9
zt@Fw1H0XqOT!iKA&BEh$Yx;X=5{O1qdggF{#V-Lv^hQcv>}GAyxnFy{yi!YedYu}4
zM43;m>BV%$@eJp0`Mj$`qxAmU|B<I7o2f2SSFLG640wB`&4-FmzOOD`acs>xh#Nrn
zgcfG#t#JsyKvl4a9OH$?<GB&be$L*Leqe2BBWKeB40$m1Sk=_luxqIN96Lf0(|Owk
zJ)kDflB_w?Lv8N-g9a@=*mIdMsUScu*wtO<XQp63M~Pt?!;BGgs`+qh#h`J3?j2$T
z=5RVa?goMX(3_mNzh3-Ia&2tdP`7p*+%v(C?}7BZ=K+Rs>W!fDzcAN?(n?^tf7)cG
z=Jc87#LrHZp310<x9pEEM~+h;8q>%wP?(I0Jso{11Qfgg!E#i<W!Lzj-d210pvSqj
z--_P}@sPmLGhUA`BN%PmA>026=dQ$J;Zx`?zw=UA)E|Vfl5k1aX-4N$3_dPzMsd|b
zgwEDVhTw*~boFUfWv^-$-%VLNI{MBrG^B_pe@KqNd-dd1gbwn<5&`2Bacf8aYT%y_
zwqt^`D=7B)g9nTPdM_cpmzcJzGnAKCjs}`l1~4uYuA|eI81A;j0LCMpg6m5E-PaNu
zkF#5i<AhWMOj{Npg5iomk6cc+Wm+WhC8t&15TdO;K$yu6#e=DdZqXOWwfxjuZ11T#
znypM6!bMVkiT3xl%e5B>XnkDHli0w}`+K)PYrF{TFRdDf8aZ4ylT2ecmy3p7$&(Q0
zhBo4UN~-O?f4GyRj_T3*Z0(Q~0q1y<Anq9)8<#|Wq_tOcILFns$)dJ8G$5|aHOLwf
z7^uGZz{%Bl@W3b62xx{W67*_Vzy(H?r)C|B6IHajU42_aKqSBS*H35^61hMYl|~@O
zpHJ|Rn#E4h4Edt>o+%ABQzdDrcBioGCMsKN*y~^3$4P0kCdp+-m%aA!$9E>{wIgk0
zBPsy4Tz|Yu;N>cPX=@7^O2VK7b}M`k76v2&BC_x2aj@ryqc%~q03z<zW6|lK#}dA~
z{XN79!FqA-Mgbt%^5+345Es;Hdg}X<B?ifUJ~O1<h)I<(is125&rpB#*{xB>oeXt&
zUXfxf{ymhn;Dul^b`nt=v?O;7Guax*m*k1c624c*kcgrYY;6t0&IgH@JyxHJ57)5!
z^y!In*=AZvM<lgj@%949X@83<XB>TOs*&f$n0S*D!5Q3f83@+adKJPq!>5wS@7^Ek
zv$lJ79TT}fwYrhJ8uQETZUlY172??OizZ71#6PqC&(IK=E6k^>uDb|VUSn{3hs>Qc
zWZKugHjOB+QDb3$43*{^dxpP=Hnf;@ZMjNaE-fuxw<2W-*%o65<}Vy})C%TTu(_O8
z*v;4w4jHbYj`lQ?*E(H%ZhY6oH^#8DP|JOqqY|XJw0-?@=LxCc953PlRIS)LC8Y*y
z($2!%LdS$+=A^vxrmJ+umBb2=f_s1ckWZrtc*?L3#i0HEWRCfPlNG#Bk{wpapw6tX
z5}w4FG-J0KXk)^Wo$BZAkZZ)0yj-(K>;gFpQOkBRb}Ftr#PFE1G&LMtnj}McMhvZi
z%|#O|W@~*%Bx6^7X|}z63>VR1W@f%!;=yXB$S;C~c<ud)hlfJMydMo|$^F%C8)ft<
zQRn4g?~Dxe)1;-AmQ^GfZ)GE{@AKrl^{)ahk3EsaTn1Xz|42fT1UWT&TD3Dout{`Q
z@eN+X6Ds=$&j<-V^vW@`vSabQ{g^v6>~y5Bu8_kW&>Q@6{bUwWcgSThSSc`nB_q`K
z=xxkZ8<O`=R@(543?CW#Kz6b8kKS#ekX&48qEl{j)mk4X>7}g&VOdh%41#cj{?tlI
z<J}YYW|f%-UyhSK$zu;Mc`jB9sY<km4P5NtZ=b$a6xaS`-h?^P?omVWj^AT1#%8rE
zLmdRQqWbYmp;1<-b-;%?I$I)0g2iBs!^X}gId5E_|04xI2pr39`uw^@cXzBN;IsGV
z9H;e#qq&*;7mK6(krjIC3VHqy58d8BJ-N3s2LGTld%a8QuLqu^pn8al9wKpw48i{n
zBO;rq)Mvjwp5)Ot?+A(<I^)Pv0}fXuM-_RazdTpFfTwbab!lyNarEmp=Y<U(w8q%d
z8e=$L;koLa)b>duwtJ5BTz<_47Hr<ihd>fq`z$SOkaSQUAx43biBTXwXkcSyQol46
zkmDbFXA}amQn}7{MpKW8H{apqB^G_-EO4le4Zgw!PdMm>3&zRhf6HgLGosmj7o^ZK
zkjbiMY*dGHbhOX>a1WilcOz46)KWg~f@FPW8&$%=23RO;yi}fMys|VN+Y7QkkHy^L
z6E58xO|QZ*rPZ+xVFNw3yb>)tDbq98%@2&^HFTJ9>sQAK7RkPW!qJ#mnKRf6XG6VG
zQkd$x=|!4X*^asUpb4ni)&VG=ewsaq<<mxye#ZHpK<JA#4TA+kCvj)EFkHRP&0BTY
zT=sOACwYZbI!AoJk!8QFgGFb~NV*Hy%+v=wt<zvtzFun)u+PP`V4nQ&ap-AI4QM>J
zNqMFYcs#3!Q|8gEnhhWIW%poU3CNx4{EBpBsT9HT#V_UVIPW11eDS0XQH3ZL%IR&!
zQc1t8Pu@j)k{6Yb2s#d~v|n2PAU9|NwOO84sO2<i{ZZ$wtE;<Nr19nFG`{(x>eKVj
z2TQPooO^n(AJROwtfm_io#FmAt$W2i0pCO%muvJyL!NQ?#~`R!iLPfHDy<b}K(al;
zt2&Q?l`Q>_Puwy0u+mkJP5OQ;8tPMWTo}ZR?LJQ6bxwR?>N3#1KU5Y_vDWA6Ko}-X
z@{~XXPC6qDY-y7q5;GKw<+aCj=Xb%rJa_36?H$+|$fbNr7hlrTvGi6xQfga24iCrh
zC#~)iMvXw|HtQE2Ww!_^dm1R8hZ(#mZY)aBIT(Bt;8}xNLCEK^_a%y6*|^N3MO1d?
z$)RNCuaHf;0`8*#G{xTwyw`>9(Fm_M5kT%#{~nqfAp%jaT-<_OJzu7HzIqZHqKi9=
zmx)FIQCuuhn^hZs<wn4)-_?t{x}u_a4Uegvxup+=V=)bOR}+FwZ{<C@?G~5|znc_m
z5i7kDdiT`zQ3o*}cmpwk*IFirt&HtSR~dd*NWw?qNi)vkepu7XzC0T6!1*9Pu>Dcz
zXmYkL%sb6}>ce|Je~tuoPWvsEN?SJj_%pigDv$9Wy;Gd61jC9Q_Ji^G;5A^04y{Uo
z^#VlwNr*8{YzP@wjxp`{Fm@6v$I*!ZR4VNB*l*J}aLIjVX-nBx+iVqH_gxx&c@p=W
zN8rx_6LBg)4`rxApZ(suDL^ib7N{6L;Ri{=I1)vX#tkH6&;Aifqp+*lxYbwFl}hNa
zShck%+Ltpj&N1O7D*E+W*{GCOE;YMK2~KK;+~4;G8j~YWE1~`C1antdx2OS|2xDK2
zuVU5eGtLY7ScvdA^LS{KS&S^i<65%A1&`4P$ClgGA=%Owt4~jwdhKc!w`f(o;1}aA
z{OPaoP1@D_oR_M?Hik;8NIlU0bi&`W0F<R(h#8_DoF0zGm)i=gKu}OH+gp3Tx_}1*
zTuwH%Yg{Ka_t{|J#f=`$D|AoL+4Y+c96xxsWHRFK<t=ACh}g;eA!IJV{+hqve>#a5
z4;>d)Shr!c8+OnDrtJVFzCBEO^pwZn>F|ZsYc*@LIYsUF<wN6;WzK^JIu`pSv9t^6
z4T7Vs*@R9-x->?D*&5E-YFGSdW4b7OYej<H0w{N90weo1pXF;2F%epoHZ^v$tV-q;
zT7rdq?h?1rH~sy-P{HEjVjcdKWF+3krbbT6ONz*x4_poB>51Z76l|A}Z;2J{m1jSO
z2QZP59^-~G#>G0bd^e#RKMGi(E1j;}oU@wA+jA}0thjzufdBZk$@b57ng|@glXY^W
zJiYsZo&p!RXTdELX`Lhi@7_v)PyF{qF<@aUbbQqZN4(4wUsz(~Z%&T2zyQp5;tNoS
z>Yc9JFsXr0F?jRiT{A4$5=!L|2}!)PZJ<Clnr!`oSFy0Jp08})61>>ilKZLBO1jE<
z8}CO<?1zkvr^bzz{Io#(yW7pi_B)liNU4nwn&sSxjBqg-d8v{LXbt_PBWe0f!iDXL
z%{@cKx@)u#xkJ{`xI72$={i&aeJ4HDkK_4U%ASXfYoz$Qjd~&?(om8o-G|`A-bBEB
zNZqS{{5q|4dvBk(`LRGpFBtyS0PWSCMcjLfv<FTk6GAutk3kIZbmBi{_`q5%h=+Q3
z6pMTKf+Do^8ztvzQF!<2bM@Jst*GpvV4lc?ZKy7~pYK&g2Wzfr<VRfJ!J=H$M`FQb
zqB?KA-W@f;W(UXRSB<q`4R(6)x2m;z^cd^x@ixmH@0V4Y={1X=jdM@*&lP^{Z&ip}
zpW6{)DS@N4#Cp?9KKXKjS$4G1LL19<!d~Tg>EZwDgy4({*#^aKmJy{d1=tVU!k=rr
zkWKS~V3^Z(HJKw9dp}_YqH*HyTK9<Hm?U9wtnT{2mCI$0BOh4(jdDsL$~u+%aawd|
z*Rh@e`-~rH$ySgL7!)_5%*R-~Y?a%n!L|=)??AugF0gd$zT#h;WBM%#o)&Olq#d%~
zzY45Sk;e&?=1tb+3F5h;^$|G7(VKNk?IgK8H)t5Goat^?=F{HcnKFEY4$D0=Jfi1>
z^cxH@Qa);xAu)e7f|;3_ne--o$ML(=!l9Yv$6O1H&dAg0mBh-!<x~Ln3@#rk8C`b<
z*#V2eOs0yTOP{&Z{rD00{kf|EMBxE1_~NsJ#k92VDT#iFK6PySsQ%$Qnsf9Od89R8
zEK+%|#`6w;NI1yVIb5twkub!lR5ioQNm+iy&{~a+%dD9QMYGz?dxU;gz|nF#4Rd;8
zpf3r9)^-A7$!wTE=<SLX+4i$k7*$GHkK}Rnn1h*erC%biM}e~66^ro;0-`#5k{b6#
z2K}BD(a4_);$s9bfw}v@QKs6R%MI1aDy5}T`G=08Gj1v|*2WgQ!`QDXDOwjDD^T3D
z(A0mMlUi!eq>_zm$y@vMH=?;jd-jZw$A;D@sY_Q~`bw47+Y$?%u4F5&RyzfX6U`a1
zK|m}ckyY4=;cJzd>iaEIT8*7;YrLHMDWe8m#&tjD?PbEKtQI?^Rj*E&BHeJ(7BJqN
z+uAU*-z02y=yA^@-o3rGw?GW%;&xbM_ZwcxA?kA$1lV6jW>D<x7BiQ!DAuBFE{wQt
z4CY2Itxna<8LCzpy|*=Q`%x?ec>b=#R@<Tk7rQqbBh~1Y6_rND?P%x#D2smJWa|LG
zjoyYAO8cKTJbzgeWvedoEh<QD_DAd??vvm5GXzZO@%fJK_MQGECm^-jtZY1kIR`x&
zyAkB39D-yc*1j`dPQETS+2_3$>WX4KA$M1HBJFO3sO`8_>bjn68Z7nau>OFUBR#zR
zUg@k}-@b`Y)EJ=C$3j>())x&kui)B@oU|@@uxig-uqrHM|2KG?d?4UCa>D)P?DyHj
z(0*OFDwMy&q~d8Esh_1$wcAzlC}(`JXFrCF*`XoX_`2EJt&1-Y^z+ke+Y`8g^U0>g
z+Dvj()ED13z%`D(dpe~tCRVdt9PLA1(h2)Quxr0@w&OcG9)Cw2d31-n-ra+1`;H>~
zRv}L|9Bf!n+i(>g`>VkkPqvnf)1r6{u$sNcA_=Rv)#66Dm%zsURG8oN6wpmI{Zj~C
z2nL<b*21aLWZFyAG65Ep2_x-HLuDn$s9m})%r|1zo{ht_xRpBm`9ia467QA-3S?5>
zL*N>m)uF?_i=*uP1-OG9+%G$Jmf}Yhvk+lh4bZA>$+$MsXnnTDD&~YyT1~<P&dGDv
zUIzwkLreU@S{Qz70uOg+TDTCG@8|W~QzKtSa&x~j>It(iv1{;O6Mzfs`$0SHQAUT=
zDJxTdhenyyo(ap$*YvH3zmGl(Ey4gDvs4JvG~uBt*=PIC9uV5IP(6XJm*3YF^iJ#F
z((!b)`UV{0cPrT)km0V6mELc?|MkTCEMC(Q;Sjj48xz8Lm=s@OFo@fTA_;VkzD(Qb
zO>f{DoOQ+VmDb_?wO-X4+FvK0Op6qXkWcIQ(E9EuJo&KSB!jmhYV4alwH8(G?-_`;
ze9nBr(eeybUU1TDYr|z+?7O0+&SOiQ4_}3*Hm2dS`JZ-=P@$`Esu=Y)3%3p&5?Q`l
zvw!v@hUoAa+fqDC##SR5Gs>funq!Djhp~<B$A+<r#NM2@veQoMmGm^x(5K_I$>~t{
z#6cUGz=RGo0H+TEOUQHdD#P@&wG&_GRy(Y7jgO6g*r}=f22ok>?Wz8hsbkE<$|@bX
zFV6(jOg+)ya|CAj(+UH@#nHmJ<blWa*G|P(31K@%X~;-2B;1rlc%o$7PU<(Z)M5Oq
zihGMv1*4_pJV1rP-^!IEQ_nFh*6ewwYQV>Pen`qzbi46wY}3t#516?qzLs6v_#Y@*
zrHOjeLh;Xs6R_5s4>pJFl=VeC`HJ_LocYn53N@zuIurcm&PR&*N&CCv_)1Pg4xiv*
zzaNo_dO|`VgwyabB0mO~b)~X9e^9o>KVa9ERO4WRfal;)qU(`S(dk*R>3zH-ok>S?
z(`H4Y2x{<-ox8LfCZ+pkwN1ZCaktKUQW7=&vjGqvSR@=AD*^cJ4>~yem2qN>6ZQ+B
zPNg@NKbzUz=3f2W(F_umCYDiR&`je?xExFgaHUZL_BS(mNTBTRpD2u!Y8|WpR47C-
zSB3bDFiesYlu4Z0W-;`6O`{q&S7_4^V45>|db<5+9bVe^rY^C&c^HmC%kF%Dj}EeV
zby?vrdldW#4PE}X0>$EZ-b*krdi&<L=GKcnegp7h#S>L3?t0}g)18R6s7}`>skTHG
zgH4daSD*~XcVT*BNh*#3{v#dI&YfLA+qmQiMerxEKxIYN1JcFfY~55HV_5g$QcTxZ
zE*W}RJT@I&sTZ1^+*wH(l<0*oXq>2@Np&T1td#W}tbJCpz?Ae5p>`n7`S?O(D!k6^
zS@TV=PkcOyuFJ`;3`tcPbC{I;lkJy#o3Ofmz?T_|gkCz5q&Hm#o9N*5J9lpREp2V&
zaYhqhZLsG^B0pRnr85VXk3S*8O>+*uzfDySD(HvR1v3%z*pTO|6?xs9o4z;a2f<N@
z_st8yRvL}Kq@2HuETDgDEVl%p`z1Ed-Eru>MoeWRj8Unz^!`4QOSk(mlr#Y>B8IP#
zveiP|(e2M1uA<4yvin$NB33?VX8~=$;91<Wuu{l!HST-jb6%{>y=3v%gFJPjZczpl
zn$Z?vA-$GWLPh<rnHGxdGWKe5=EuL~PUY6a0=bD!$=VxjL3oMVx2w?)m+#4%Or@q2
zeJ_&o3L8Pv(N(b9oS=V*j*&*EsFE%2N1>;8baMQR2v<_GP%}Iny^gGV#>1Inzs6%(
zdS%6ca1*sC`vDr-r`~D<cSHTlrFq=tcxB;l3c^<l#|NzAW2)gres48uof4#^f^zIC
z<s`!Q_Ry+Yf3&FN<!3wPr0!SKv<;lDr)70o$0PgjJivUIA`mRp1ILwo=!(i+yu$ff
zA@?lt`fGVK`}-AR8(W_Feb6D#S5eVVCBoW1K}_?gH#pTHbIDp%xUseFtn^Jyjef`?
zow3tFXQc(4WN-mGRtxpomb%byslZOvu+pAOP~&;ce#Y(2XT{zUwuOp?=q*kNu4Q*l
ze3%0ck71rfhLu&<N@iu&{^gu<HClVLd2QXg2=C?bo9S9}#vb@$Qcbz#)Q_gZ48JSV
zI9Px0%7t8Yswm5yZ3wji{IY!SL;C-q;3&`3<QSFAx_jpBscO?V`o>M!X?7;V(l+p)
zk2GfC-!!N9(?)cEhWoX&!8;;adgGmhM5-JQko6gN;suNtMytpbjMO;HjWZk8tjDK$
zN_a<QpC)(N&Nk5H+0B`BkH>9jf=-i*pLV(NEU_r3K_59^?Y$>_YsG?$ic<8!RLF8n
zh{JG)xWwq%tuvCEniqWXnNZO}RFaM1N$x!iJeWf*uzsEJXz>eKw#B(<=XqTwT)Mh!
z=VKnjXT;BImp4u8YhH_Vtp>U{6OuRzhKv^)&I}}6EbH%rV%d|YCr^qvHpSldzy0L1
z`s__QBgPi%mv`^pMc5t_j;3&Sy?7Au>IKJ_ukO5Im^++O6m|jGv<s(w{oe1HRz?}r
z#K1Cfxg`J#1}P`zgi!sO`xY3OUIYZ`QTCG@v=e@#TTMkzQ=DmUJ{6~n#N0%!*4f?o
zKh7PMWMtAUa=#@uO6+y@x0Y@yZRQ^y?+hi4Y$-Do>PtiTGjB4QYgUIGdMeLQw-BV7
z>Ig&x=`<(Dl;w@YUtwIHyKY?Q8%jgQ2Uq%LneksyK=!1Gy9Um?Sn-IPP_M+PLlPA)
z9{L`Yq4pyMdCO9egP^R3Mij$a1C?DRbFh{X-xFfe-ooSE%7R6~7SKu~HAb+^ZyE4H
z3cDfXyMMoN=#R&6k*rr#w1`DOEa|2tdZcJ1|ILELMIwaJsoxkcwX5t^vL0R6@fp<+
z|K}ZI=O{gWBAg6kJXG7CV+C)fIZp!dz@-5v-5g>{j{Gm+_zm$YIdS06KlJ;Z6h~J@
zs=#{NP1_+hyq4O={Y7H47B4Sh+e}(@noVb)NkC%nbrHk#dD3^WK6%#$!lwCioKSap
zppl3wftoyyD*lFbi|*1L!Fc?7`zldPSCjpnt!|USW;*+}SR^&SqEk5_<)Bfo<{vw;
zMJ*8Jt+y666~fFbvT1`gG?RUWVtuLhhY_}E)IoY=i$ZqS2N)T!_}P_ysu?HC(++dH
zqfUgXvpp78<Kb@}aD6-xVd2-~X=xq=DP}0ItV`FApwy*-MUHI<szvriOsx&*uCMAD
zJzoaK=XJle9x7aFgSAMi=<vIqB1O`G{4;|urEwi?P=`&F<iG3#J7rB`#lKea$o7(5
z0$`Qp*Q%CDUmmH3la;^B49~m8%#aj6ewml&p9MOBNbiZZd!wc9dh@Z6-Pr+O75LQ4
zAh;P7{-&;qZfdju6#hlX#YLVv7#YSN;_1fFtHLFD9=~;?phP(%4!IxVl$h%l422`Y
zYu5XS?oi-B#62eIfhUY8sDB6!G{nx`Ug>V!o0==i3$VkWP5#6FG}}U>QA@+8yDJjg
z0WUZWLLHwa=)>01{hh>#RG+<$eqBN%RVh)~*W)d_wyt35Vzsi(n4NGq{*k1&7!Pi&
z@p^x!=d)~(ni(!$!4K1|g_GWbdHJ??b+VMn2G7s3K%zDy)>I<DB0nDBcZyL-;!}4Z
z-V9N=bE<{E?1>csRxp41YTdOW!Cw?Z7l)7t&|)2SQRoy^iiH{q#+2iII<oz#=C-dj
zt72>loa0{lV_zP$(7yhd$x+Fkmv2@PT`oYn%w;L}URsSU)tty76b{D2@AT2T`EIt3
zk;^7;2*dmYJy3%?6t#qItwb}{L}*f|a&t_W@}#vq6l$KL(an6xyiq-<qcKn=B&k}b
zlNLt8a6&<?EPSFb8K}6eR%7~XSA3!qC0O@mNGiu90f8=MTcyjs>M}awOuURAyUYhi
zfJ>j(^_43h;av>+($p<Q&TV*b$cXvK6>E<rg6@)=eRpK(SmLQ=cKK|dp20n3qQCsA
zKqff=+vTT3>3%0fn2^1&RYdHB&A!sN_O*LLq5}GQjSaJH+EVq5t`x;(h(C-pVh-ti
zDs9dRciWMxPfVA1;70OOPYE>RkW?naAqeWulU*5!&0BbJX*$^9bShf>V;8JvhO82?
z*|G3`xOG_d=L7)G#sIYcV&S30#bfM#`C?zJEk5yRM)eG8tfYb3$<y~tHX>HnLkD{^
zlr4B^pH%u=W+Dfk&RlTM8e-`dO@uz?XI5%f0%AlPd)IQ6WVCKMVY+BJfa$MtT;-#W
zsTKEA;EA`?0AEsts$MfdRE^`C`E@kr7q^94#&kJ7`~t*!E7`L}0BlE9^u*a}_c^Zt
z+2$mVuS8_=H5=97k6PErEqwyht}5`;%f~oX;jeE)c=2A$Q!_@(EXU>VXYy()uc>#Y
zos-e}cMFO)&XUB*;Kaeqj0pQIpfWA0d^PCvsOyPw#Hlr5pv{&=^KJ8Lx9emP(`{(l
zZU^KP4Xf1rk-h%r_&j?bf8g;+YfNRfLufUyWd0Q-&CiId#+2ipghI9FQfA-tE+cMb
zH3&1oX!={z(b0kF>rc#vUkgqFad;HuZwgJqB5mV+KfkDbauM0Ret<KNGs_rPm&&V@
zh9bR5@XeRej6+WR?bBGlB%3UQ>Gn8xU}R8^%<}8#48}2Ar<pvT-5`b^P5S|35-*hW
z7P)Es*e3%fBN%U#!=7Jh`jtC_7EICMs#1fk*D{f&pXAu6^FC$~`uK|U#iT4gW|uy2
zwmX`HMK%|;Sn^n$G5SZ_VHi;SxWI@T&O)V&4M4S(@Ygep&iN2qW;r4F^k+oc{c6mC
zW`f1=ZNerZUWu<x>JGM7U-9tpI^`A2=nmb=b5i01aaR}1+pJe8$w~Wk{2-RA2+p_%
zlai%TWQM=a9$~F@J60D_{B@c~NMUDPjDv*)=t#e9OrH!Q!ed1}6!g9vAJOL3!?+!}
z`3cUBiFI=}-KjC_xO1v#ZIV%$Nm5E7RuJYHSkw$(Szx{K+Si7}Neh-zcxpClC?5tf
z0K$KnAT^euF&wv6;<XC|#A5AaJ)T{TGM|S}dJBy?^}AV$OWbJPBt(lN#7~rhX({+5
z@vLpA9B0%!sXC;3mEII)0yWQ;%#n))rVQzO0ySy+-VMFHTzzB4{KhVRAte#Qgq15U
zSNBoN3Vs!r$ssMDt+u2&H~o}m@nNS|zh&{RjYAixNk&C^G8fTTtyjZcpS*SMgbhXp
z5lTx*Kgs>RH1QDYM&w?p+34ryM#_S{OF>&Q;UQ?#kAeLzU!LT}@}{C4oNvpFR1TJt
zlJIVo)GF)c%;$9sh-b%e_Ch_j(Q;Cms&YEv-~7SR4kJnZpRDaYuRtp7=D}P_Ar=b5
zR?$PRaotpfCs!}&ItcO36o1jmQRBa7J1zss^oL6p(nMW~JG;Y@PI{mMcx(m{xq+Lg
z2K`V;_=CQM?-ZvSwgKO0C^>0WuO2`Rp6{fX1+Hoqq`1r{1&Gt(ei-;FppM53j|VX~
z#Aa;1r+co~BtR3~8{CQF?OL`i&xZ8`$7!Y;`3d3UpX-#U6va@NbrB|mVD<4Fo#6wC
zR;&2v5<NB9Md_<%6A_*){)}(+bc)2<+VinHj7fDA&I#gvxE)kcF)_~$v}czqSX=Es
z@MKQ1WUzLPgewz@e;*yIQ9<WO8x!uBz)Rs|A;q1?p|%kdh2kzOwn}Xj8E>|}Q0Zc(
zh8e_#x9V9~M15jjju&f-@)tYGqk*szv1szR`ayTu;~8vDaw8l-B`LPlu)`I<gS7i)
zul)TLTNM*u9ERkr_L!1Ae#`vUSFdW$4h1)KG_@wtG%|;bHp$!3;uW{FN6)D&kH4sm
z&sluKDca!QIRH0O1U&&TDgP15Z}}GIMJy6+{i^Au`CLWbvb}_0eb^kN%4Y=%^Im;5
zFGVk=L`jQ^Zt}MHHA#%^cZVw%E<v?wGsPh{;ipWcefj(?Zb?XfIyBs6R7d*azp6q!
zD1I)e<MFK?=rV)B@RY$;m{k(5eQ=d|G#knSZUPWQhmbxY38U`oPJ2L~P#0fSw())e
zcJ(!%!_3Sqn-jfcRTlK2`2&tj9l=P_i~DEoH)#@4MS6>^=ETp~tDKk_V<8c21vBpq
zcZsudz|yHV)6fi*$k>CgpIagyfw*1OVj){0|Bt!9jEb`T-p65DkZx%N1Zn9m1!+(~
zIuwu|x;qq*4grZ_5D95vhE64<ySux)`Cr_(;QjeN>-YXyix<PiEY9;fW5=<Ny|;2%
zMAYW&^^5cVFj=3cbv?tp!*t#Q`{SoZ>joiwFk{^WMgzIF)FS;!a9}uzLS}n>7`mz(
zdHV`wagjr;1#6D&-t+cHg<5)MlQ0gtNQ$b`ZvypQ-;5q8N8#FpoThwSR}vW?m|>}z
zslO73N*MY};EP1FY@k?8?d=3^(IFfJg&1E&g3s|4Nku-=;p^~E)!7BD7h}8J{4`+H
zdmqp;J#(00<AM3^W}U_=dH%%`Q`}YWkIN_G$m3T#`b_Z!7@*1Omt#$P0Ti|zji|v1
zm8U`nCb3M{F#%ku;aCpOxK2YqQ;-l5(Er&-KW^%%-d8M`^bJw>HZXOR3c@B~b(d)M
z8>rI2hRNv6)0iA`A{>c$=VfE#{p-l)MQvSP2bB#@!yPmEi4R(lhQD!F3EQs>+t`wM
z1XfBFbMuBFI)ZPN&A!_-S!2QUNFV6<fBf<|-@#=Gb5>!UJ6{oqp5$7s#<v`-ckRA@
z{n~MTm1O_m$jDC&JMR6CArOlv(%w-`49Vm%+`}ibdP2shbDXah-E1<JqAVP|u*pqF
zdosSX(f-nF-h)M|B$GY0R-q?V_*+V)1Cvq5%K*Ej{xjyq`Sp~yi0uF#@~Ti+fbg;A
zxa{&aGEpNs0i!rpgbm*wf!K0hLg5~Ym)2?NtB?7hd>K!Bux^TLDtY^E%+%%l8hU&8
z*eH!!2fhE3jyO7W^n;4ExNsDy2Iu8Rxx?R68upjQGdJjnh@Fp})k=wcWShpCRs?v@
z@S2*tJ}y>;gTqU%0k}}=ZDfx;Jua@tMj!}w>*}OX38L;|r*ScKM;m7lv%d*@NXUAs
z?=VKazus)w`8%#1YFgezCpuKdqTP|y+@rJoP8XN#^K8RgruJmEhYSQ;G`8!bB!<|Y
zg0K_Ry_+4WJr5HBY5v#^r>zizzB@#69jEojO@%yom*Wo5@D-=0efG1V_wAsDd@>o`
zlWUU_fO=}5-e_bdQAA<U?L~w?ZP3r?N}QTarNfM2_;o-ZiBI|Xll64gr<c@<+5FEi
zQ8R*lH6vh!6Z&l_+gFN31V<9ISJc!7=T<YYP#=yTlFgKxftQ(K>=PN6Kl6wqO>M5y
zeBb<wFRd~Ic*?o^O0o4FIIe^cqg7pZW$Xg(!W&k~hfu|hMp#jL=%QG(IIXNip1!7)
zk#jTcuA%6rQNopGcyL5qD@f+JzbWo{`5N&n2WkePAG`MPD^D2E*m@#bu{|ruoQJq&
zhyno!d&5lH1hw~im<Vs$8>0A5Ykm@u4Y(oaRc3YS>bk^-%KUNssbv8mAhyXr_Wt;j
zNKzB`TvTX}%%i+dB5qB?c?MEJ>MpD=5Ut;f*vxpEjB-vlL=WyB;^N_=Xix16Z+e*i
z{$d#=)vNloM45#+yk8jI54SCK_oK;BVZqY${IMmFe|irRe@9|`r;gGs+hUKMA7fPA
z%oH%oFih;lA(d~p{vG~Y77hXCJ?)ZD`p0*H#ru9O{^>M=fYmJ0GTb}<=!oOTn}FjW
zWY>?W3#HYTZRhADq$F7LVkREN20s$5A{a#bwlOWtWnEDbfiMLX8u_$~+MbK3-6Fvr
zN>cRY87xX5c&J6sYtfJAPjuH8r?;SB#IEO0ga8hSQw07^n0vqoMZMviL^KK!FB;!L
z$6@G5KXN-t2#ctWy=yY;X;XEs=FkXv&(lJ$?o?5+&&X6Op2!C(C!z+nL>88ue7`rO
zL$`^a!}}@7Q`6AI@D`2Hko4sK#!d~cKd{u_++h)ApOwB*sJ3On`17hNGH@ilj7T3%
z?ssDCWg1J5W3hF8iCU8$xxg#Vq=rnNoxYqmd_&~Y)`dNsf~m&K2~8o+CMG68%@$hu
zvGIvqA!kd|-U1h5d%M_LjMx7F_)dSRb|pu-0BPuj5&nWafQ6{K#bfFkskrclq5Of6
ztK@+V*q#=W#QO6f5!is}pGG78Se2uJh(3A7yL#$*Lom<Tx?mj0ZYa6j5e61R=75F~
zWOZ({dOU>-7c&WFVcZL~aRGcaO}UG26t`Xuo&0P|Tr$jcnsdC=DN>M^UL9m+RuOjv
zesA<Mw$1q$^4*m%LI`xPab}_Tvnb-?@@U@;hqw%;j(K*yAEjmDt}AOscDvz*_AJ-T
zCkn#WV{2sJF%$J1<PGMEY0^Ek97v<}>MMD$HR0x~#xy4Xx<0gr%;3D_g+cDCG$tp|
zk}UJJmLe@mgc1iqQ9@A;fH?z^Y4s8>HgJ79Z13cP`++}jM47Jua5`?2ykd6^sT)%F
zeHZf~hB`{(Gkd%%5mj>9S1~ly5VHNV#}L|mw-Ser?N{B-sf-XV7SZxKQ5;AtLXg9s
zU2FjSjD`1i2t9RLI1&-bBhnB0Q)l92Mgw_Y*sN>G-oF)(bnP2oyh-Wz*wrNbM%qLZ
zP3H0lKq<NsW?Zq-1LKkzlRtb6{E+3CqA;=zsV5rv2u(2Cjhs=L*>P7*^P#Tweo|J-
z$P73gj>k;`53iML6mm6u4Sf6QnK%V=I&MyMjg1LznR<qXv&OqV@4TKPo*9a7zXN=R
z3x|Vokh`n$^!n31wAPiTk~8M-5}8>RXO|WBdr6}>nDd=0`Ir13HjE1IV(4%PRMftT
zsA6yr68>JAF!3nuOnuv%!O)#tXGZI&W(hpo*Zs+Gre9-E0^n3rPxuOp*F=1nx)~T#
zp)@o!CI?2$R5p<4`mpQL`Fw*LmGX=9a6c>UFCwO8YAH$=LGF8-gmEl7{&lNET4-ee
z^rubin7E(0I{Q&Xo0u4(9~%MCdKvH0)%(v0$=<L$53N5i*FWPfJ05F~JSF+)U4!vM
z?w?cTr$z%f*m2^9kNzAoI6pOpXYvK<Hr@Hv?^($3(lfZ=r|ox7ODy}0#l17Kn%9Iq
zv=tfB`<8cigS##@MVSQGgO<?MVM`Wj^|B)CWA#FD1)B5)fQxO{Y%vGuKsl4WRvT$m
zh90cL!#)Qff=`J_as;OD4)DMl0D}FDPoI9V{~<nO>B~UKqATtoviB35?6L-_kMGS(
z&<8MLT&Cz&hvdqEez%S_0J$R|B2tnHA*KhSfH8zOPsm(;Zu)%wlA;HWV^Q;veo#`<
z{oFFXP_^azt4#7E%HG%#&G)k85zA+(TNh1v2|%>2wQVf=RQ^G(es%70mF6p!YY#>}
zVUI+EZAl=Gow04;_47cJ5rnlZDp~FZD%H#|*j=Fk?2l}KX5Z(#b79B3`9_=DH0PI0
z%O=;ZJSV671+8ka)hNszeQT;1V!Q>ESV(6VP%pPCOsb3(jLKgesu3-gwX=m~M@&tq
zmTJG@R+Ppjkp~Hto1kpO@py6Ni+$3BRP1KC!VLQ?sv6YEUZ*Ts?Yvb6EW}LG?IAqA
z<^xxx#iL5sZO-C}S!Ib3o@dWAdm`)i*csWHECXNM?_4A`9C}2g??(VM`6Hp$<YqZM
zEW0bb7IR4Td)M0a5;uqE7!H@;rJ;rPi0yv*aTrP6Wm<znh&#l=s~#76qIG#RJKgvb
zoaFS)Ib3icqN_UCM<22bZ#;;k<zV~-UEYC{kI!h2Pe@B!yMIW2#O$UpASsHdQ(tn%
z)mz#b%XzQ_#Dy1K=GE9uSJy2YN2X!(`gfKdp#;q7g6MGhh>Vo)G66|Z8iV}FScY1q
z`x78^0S^{+ez}HElyuk;$~9y@kW@fGPLLkv5Hit|${W-YdHN9`1Aj#wMK@*7qIwW6
z`%L+gVS;ZfW9I@h+iDD|vVp})c(XH2anbjQHv6-Qp$N^%<;>AUj&<X>TAse5cDW&<
zlX+jjJd3uZr+%p`tJl<mPJ6OgBu!yYa;fjR3zdu*#%Xj&9E)7#{$fUAtm#0=M`oUZ
z$oUHTYyQMrM6OFDiOG8mG$wTVB6avzwnuU~jWa-<Z2k4i-@WuEM4eqLkHiH4W6V$a
zzO8N-co5)HDwVu8n+H0kNr817vwZ;i5~)+JYNN@KEDN9UR@+o#lhNvcgIj&ag}y%e
zzJM*@)l*+1%xM%>j?Gk}Lw!&4mDy4A3ICDw)I(_0h=N1WhT``-tw#4O8rtJdspC2H
zb?a0+P|n?u2`l1j3_T7Bo)m+|B#zN2mu>>X6w^S8R~yX$>YL9N<VCFq*IN%7gAT7A
zpA;Eo$7(t_u8v1oZCY`58NPoU!{NDf`37%Jqr?<HVWg<WeEIVjx8dZoZlvv8UF(@r
zR`kM|{*1o*{`09kJeRLplXU=n820vvoRgb7qfAfOY*(Yv_#3a{1Y(LTi;?rye!*6d
zN5D8Y=yGRq>nIQ)Mi!W#d_}Zjw-L1U<`WPUc-p0)s2JC|x_BP^T|X5X=kw^IwqKGn
z$cK_Q^->^It6j_?J_-`az9qQFE*oF^`6WvPUtXVFn}7HMt^fHxYp8%wm4E;8S?r3V
z>kRI=hY7<{Yn-0I3BU#w^txm@n$6#aGW0OdpNU!Cs3W~K?~O==<qkw>UCGv8C%#Ha
z*svGNx)cV3UJLdq$NGF$UF<6+^g(+oU%!8rRX`eBP+MR>-8~&Kys2CGLtTmPeC2$J
zEX23YaX{>|kPX|C#qaH{?<zmnLv{_yp07!Y93JEtf9fE{l3yuOJFx6%Xd0B{rHry#
zd2;!v5Tf=2;3@p$9Lsp!QU|@V9^u|8aq1(~VB*8wk&{bI8!E3P_iu(7*m(Sv`&ojV
zEZWyfmw_7>YjISY1yEust0Xc?%G4mL<Oj$|RLQ*FC_^l7G(^0c=-e-7KXtQh8X=0g
z9TF77Nn4LieO6p=!h3Ep?O92<fz=imVbEkTe^?9+v1Oij&@~?`besITubIO2QR;i@
z{sDK4m5HeaLsI2i_mE~&5=kqO`6g4h)P#?gZO88o^xe+&qmNBB2`C3mpMoZSyl6w9
z<O5;w*bJzdGbi@mnv_kZ0*v0XZ^o1sPUm8i_9Rz{sv|3CKqdC-w>-=hy{Qz&lme*?
zav|3g7N};-Vd#R(T&EP%E4q663vKg9JCHo$qSrFEs1wGpP?z}cSHvJf^vHuru|l;X
zRUWN9t?|!!YVlYG<JrMIF-xrKkIBZcnp#J{q`Nvud$I3($Dfqe)Gv8$uWYz{N#tG`
ziFWPmTza^d_?Mk-fh&&UXc67Se=i!%rQV{Mik=9Uty&D_OOc0L>BXM7E9Su+nooK#
z81xprP;PqYA~=$9MZ_r<MZqGuGy6XNRkZtP()*37eC?W+3M?INnU}UhNpV~}@CL_}
z%LbIapE(Ambxe87c2G@}S5KdOVCAHtr5!6e1*zLl@(}YSRJ>TSJDw*w{5>cTg2O~v
zP176F^}(1SIWh5xS@L9TlYS2n7L`+V;+%;++}z30H7GZXokwIvsGJmQd)BQ(9T|hB
zS8Q>1lI7rRml1SAY0=$Lv)Al|B57jvE+%cavVsQV+n9?Rl7|%o8xfJLP44;*aT>Ri
zy`5Zd^I83hoz{eXUn*CcnA)PepH#|Jt>+xmzWZ5{l~qBG+E|S2xRa+@N~g18-Ki$8
z4>HBL$A_J432vY2GXIfNA)h&W5oiJ7#vKb51Q-t5$=fJ~cMou6Lf|ZY2cOW(Ie~UM
z9n?V#gPfe)-U;s$)gGi=a3jDMJzwpukvH^a87A9dHihu!vz=6Ri}s1Q!Z(J6W7dm$
zuP(aOa6t6lO)GRm4P3g@LFvX7>-z|?Aye(++5%TQbKyzhr+DR|5Zu&{d>dT69Q19l
zaD(S~XhSqI%9ma&;SkY4F8iWB{b_RBwwaE&%?0m(^QN67i{B-W-|pDBGaiuuU7$p4
z!<H{aA%Wf^{=D0Ijlc3Skx!q5>Cm4X>}eD>BjYLSL<k-IlzvB(d<_K8Rsw)b6PQV~
zW(aE69<-*pT1(E8`B8vt;&OYl<W0U#U38Z67g;f-Q$MZ&vKY(Zasw1KHeJ;nNwc=7
znL2Y~om`eTP@6LNdiASOJ`Z)P{BxU@WiTqm9We=@Y{A1{j_8nzH~&Rha+GFC&{0HY
zgdcJX)-J2(Vn@J#GW_-ic2N%HD1OcKdO^@W9G(~xe&@@hAx)x^$y0?M(@4k^Ra;_#
zQ#)@45dAH%s>wD_M8lfr^e^8-@!kuyVj4|%CYui@TY%8xx-qLWDtowWD%)N+q&6n4
zl<esr&2Kj$)WyiMP&PIG#(L8B-TP=hE=$jX>Tr9|04n<qpiz$+R6-5w=Z=2KC&~@G
z8{fR{dKqNjABp_7?Q^(I<zBJfn?n8Q+Jaibi||vg`b9;!3m39SH=ma)2yF77Ce8|#
zZT6?c22dosK%D|{y~1n`G93~K`?NTZ7n)YcG^|y8ec)#5JF9=1c-jI!I*@HrtAJQq
zV{j%PE96<rU@By~@Ow}9vFPsyfkt=I^u?_-eNpk~&LtM7euHMU+_$VdZFgh&dy-eJ
z!lYY`LKpJD2m%@x+DK{Nk@|san(XqPsOKp0_k&@|wvqS`A3w6s{dV6x5i&f62^`&|
zR*FxRcsU>{PkSoy&JP^L)V~rverzotE3N#*z{Y?{^(z5b*ggqR`tm@IiaOFtlO;Ll
zy3qP?RrY)-OY#<2$jJ|IY17T=pF=hE!>-=>)9{=2B!c<&gmTIGYz7nt*h;Z2Dl{?;
zeqU!96KLdX`%zAM$&hJ)RCp6USJo|Jl9WSxr@tw(pRZ3$(+v|kn07K)k}<Dy?RF?*
zWh=dK$!(%JY|wx4Ih<1Ja=O@!*g;szhb=L2u_9)UC2`hA3DPLq)u#qFBEDHi_F+@$
z{tb%xV!R^BARospp)-6Xe|etKKE%}DcoDg_lXwuPh=GVW-E*omsFw|yuJ(f5A`v%*
zGllV+rm9@3vM(UrzaKcdzeA<`qp}>oH0TU)Q|QAzzYm)BG9$zoYHjTy7YP?4Z(>?a
z%{~B=y4(QN_w@?~gI4wh6g#~{Qls^sk0M7GTm*_7cy2OgHkV6vo@iV{$5;EuIzn0#
zg7|(9EZgsNdzBbb&8=?_eSQWJb<a8#9kJ2YaMQ2$W-W2}k?AFb&4d8b)O>_VDi9^;
zA!jfA8pu=IOUluY6%6?pXsND|+f8=zX}89@`6VX@$JZTcY?>mCBEmd8baeFGnGCkG
zAAI|%pbN8`Zp4tFePz{`uj5GLK6BvT;5QLb(xmX3j|C&Yv&4JX_p{9}cPKaAe0^c7
z(ZMxVIw;<_HF5NlJV`gq*%qcD>>~x|eYQ#Hv^MtX9D9wKvLU2d2FNB{ZTptJsaTs>
zs9PZiI236Bo=gLzXuRido5n)N%r>D^<ZfhGenKocNi<jW61?6%3NTnrs?iBSGZm_B
zSmm9D5=PlqlBMfIy<xGZX*4}xE@dUbro?%j5s)gc206bKoYT(1$E>x=*p-}z7n&W!
z$Zc_WnW3>9HvCWXU2duq3=ItlW-I~!<M2F_kH<_svOpAJ708wtOb2l-=}*pIFeWpp
z&ssU_vFv|rImNBtCB_;6D0f29Or;j^H}+Y~rk*!HH{3EpEuVM(QI}C#s5KLew9tIi
zjr-6`>n2kESme?7=ufZPhK(#ARW4ran&>7{w5$~FEQXLdx?OmYn2?VY+xzazB5k_G
zRuy%2D)^vcN7}XmaVHv5cSj4w<xhNh7a4PXXaJRx1OALgl5;D8RkJPmrDzPh==3h}
zixR(eghHDxD89?DzXW~9TQ28Rw9)gw_AvGAOBBcc&R=xWc^pHEDf^>YzoO3hn$~#u
z*5>0qN_NF6=|Kv4KANH~%`L*>)c`Zf`ynP8E4@~Wp=lq02*oI#z5@JpQHbxUCA&dI
z$S~VX+Hw~==BUtxg|YFXF{K;g$d?`nJWw(5pTIOAw&?-HGDjBQ=ueOoc*5X^!18>D
zkC&%?+RBx1VY4}<-@zK3Do>b~_2PgnXNTO2-Uq#VVH}dDolTqx{;AOs(`-**D#<se
zxQIboZY3jf;ha668ES3{3x0?MOYybJsQ51`WN1+$!o<0*fpw7)9~80s2VW2`y5;e1
zOhh){fp*>att~W%`emX|`)yw#fAb`Su3!51yTkY4a=<Q59CA%HYMY;(FcjhsxGRMz
zyLGa3)@d~7)`dlcl-+vG0IgREVE()-nmzFf{RuFdXDQ&v9_=@5zkn_7ym!1llrro&
zdgjgEwQ>Nh7+P>)wL|*jZc?We0FaL523X>679iu3w>_BUB#$1c<(*4$Fb&keUDwG5
z>ZWNt4ec>C@`51C);UmFm+>cN@q>Ah^0jQQ`zL>SN@|*Yu>^Du0b~_$E`nKw`b}Pj
zJwy<c^JTR%TgdIYr7QB-#6RUFV;?m!B4szl9eGQkNA&A11XWAtdm}#3F%cp4XHmqn
zXy3LmYyT?s+U6{Lee@unkEg>hW{v1f0KLj(UVtLiM}U`Jjxa+#Pv}6?L)29G@QMW?
z=6JHby=6T+DlMvHm{)zUOrA_CtUHx!!W1*Cn>uX+35crYSTR++TcUT8u?>dzdFQ}O
zBW(Dv$dXwjuCNGu?`}s#@qFP5B3&pf??Nk`^0Q=Ri>Fil-7IBmKbV%;&NexB<Wwt4
zzO-rzmMxM_2_AmHz*zmFt*BSAaX{cK4TUkhnr?4j|Gm5WLtQxT^%ecmchj3~wKBs*
z7=(n&*Ov&l!f~6EHMKhIct?=>bu($=Bb%_0;H387#IUCdAMVrMcF}+>@<HHsytmtW
zEf5I#tB$PNqM=qD2x?zJ?`WsLzsf^Y%9~Bq_g0i9(ho;F#^f^Yz}$1E?BU@pSZ=I<
zNKq$${5XbFR=xF`7g0+to>f9*jG@XdG_Z;6k@s-JP0_&?naflDryrQqS#R`Jr^TZS
z^=gi%-7Ix1+YO#lB?7e?3)>!*7fz+qJPC=yG#DwR(QnL-gk*Y@Z$}r@vcAbx_bXWv
zf9bA0Ej=w0bsHQG9h*4=@FZhHLp*XaGNGWIW-8&G4p<7A(Vt}ot{@d~Dc63Ja{axO
zRPeH1sokXsnE`H+Q+4lI?c<zf>&LiUvv6i?+uYSf1W($dKA!4WRqhc6ISL0f{yJo&
zeftwIOIcZ1UzR+u#u~|I3*nItD%=7xrRd+&dP*|mezE-g{e_j2ICB}BoAL*5*BxA*
zoN3NB+~)H0AV_^S5XWO4c^^;##2?Z!$%s|rlHy`F9RP)+{mcXR>U@P=R=?+aEKTak
z+F)d%L9Of)Il^yz)1tRYE~FgRkDP9DEnj|&Ghe}ch??%i%=@GMK(4erq1>;s@@xTU
zw$bLS|BFX>fQ=j-@lU{2<cTk+{OGX7XzWg2x1k~Jp1V5~5H1t%*<LKF!ZymGb0ug7
zCTx9k9FE=tdfGgv;+qQx`nWa2RGOY_U6D8tr<Il<hvOA;B8Y>1Ygc0<jgm5%Sb#-b
zq4a{ZLOKA?XRON|+a5ETf>oAC<IIj?O4}l?1{SH-0Ms$5>a0PKN#`qfIGJel_GC@6
zRecjNU<Jt$_vp)c3N}J+IF8t36m~H^)CZEl%w{uVU?3liR*{k`e0!=AGPn0W9&Yi7
zxo9CNb3J#-iGutQ3q-L?%d@*9(xLLXXEzHU*`4O`a|I6Y?*PBQxR-*ocvE<ZuFs;?
ztR|7kn+p>IRBTUh<%iYpHy>6q4R$^WRBsbCOEy~@&s9Dv@*o{CD|}id`&RnZ+gER}
zYUwWK3iY8@dI}2`tlxdg{T$av69GmK08Qq+oU$0qcfud9HWE8KKYb!l81PM`4ds(v
zsb*U`xA`y<-b4sM6?rnou-68}@*ZMgWj!j>iwa-XG}fSOeBOx1mzmHrqmPY^zM^2v
zzEowb3=y%5p!49(p;>5i+QW+o32`rybyVY?G7iNtZ`3MBE0l-4v~p3&sHg!2^P_`N
zFt&>FcYc{~;dkOA6(K4w9x)Z^xLp-$Rq<*|tuK)~w*l4cv@a`OJc#$jxo4}22Kero
z9!hE4X-9aRUStHC2BqaHU#YQoCrZLpwl|BRqtAz+((#}-z5S0(*C$9bh(G`EMXf5n
z;n17jqYi{ZnxDFojo9fHWoTf0VbDX>#YTG=-9`JL_|4A-AQ#Qc!?x#L@~`HH(F_-o
zfKf~5N9-U+>%PCrcx(QeTpf_TDR`aeO~Uh$H-A#nt9}EV{<sP61FL=vfk!OqTfoqU
zIgg<%sZ8yMoBdp`<ldj?3)vMiX^%`|qrvkS+(<K~6|1=krVme*J0h)SMyQM{B|JMj
z9q8o<Ahe9BQ0gEqOkZ2@VR%7H%gM>9=BfbZN(5|b)uiBtOQ#bXMj))j!pchUwH8E-
zopgGk`5rUoETux&V_!iaj#YZNDPdO_8EH}8cPrT$$h>ulXK_15$DSSO=p5A?nj9Vd
z{$U0#<E=3FUm2+fcpAe~9zm^tmpQ^0n~$oShaJ6-3#j3%WEn`2UMfcZu*Tt#q}g66
zm5rcOPBD_*y$|50876qwYIs>UQt*WK=<quikDE0T&O_NITa`omk_#Ss8{!T%x3+#K
zHboI5f-hGZ3p^Y-tdH%|SF&a*Zp6W@RB9Y=H_{_=1L(Fz##i(s4BNt?!NM!L^CvNe
zGq^6-FCqc<X2vw4y9yA^UW+*4xh4LWTFs<5gQgTqNc42aO03BMc-_~S_9Y|yHT>cD
z1|~(ddlUevNYgT0H>4jHIj&t!B%I%pEcZNDzdUwa>mw0#xZp3{?v1J2BX3F^Ec(nr
zUs9o8;QU6=<pc>_VfV$P6Ot9YRkHS0MJk^L<%m-5%~%Iu(gNV9%9ic67eb5_dy%x8
zUi-!Yzz#pDc%w{|F~x7BUq>BqdMV1A@@H}V6cphQ9JA_bHOc>&R=(nRNYlHOUv(X9
zDHbodSI_(eh}R(OE-%TGTo^aUO8GKE`q((MCF?ZGz19YElVPx%)K#!*Pj75!(aeuW
zBA-U0BJ(y8T*8?{ym5lV!o&4CkICngbs(&)5i-ujsNUaDZWK<eZ+v<TaijQ(rsNcL
zc!rIY%hv|Ai<|h}#ZxTt;_JOHlB?VfRV)s)Db+H~6yJ0G1XAP}X+Xb*8GYy-&d<&V
zieE5%R-%!#nW+d67A%*0*7~K5_7k6pTDQ}7pC1sm|Bl*fZ-{IvrtuDY!@Bl~Y)WhE
zXmDWId4xijf_cZdPn<(ZTRIi`H+Xoz_5=C?(!S$w$vGGonhb0)B-5EvF70j4&r;s|
zJas1jG%<U2fwbtvP$YK3i8;9Mj)9Ij^SfaE;AO(cQ#-T~ng4{J+-2a1$lYBBijD8@
z|3_c38=;MQZLnAD#kAnzU;r}-DcQ><mNf$PG;OTvluX^${$ZA>XsJNS=-|1OE%J-g
zUzTswG+}7P6Yx3ad=H>eQfuJLQ#KIy6m8Q7?dP*_rl?f2nhz6`k|Rb-wr2{hzP(cc
zL%phfhT<m4f}6K5mYU{b7lHJF;$TG|rP$h;(`Ev)yitvOt*Y%>Zy;MK`?=IZGnA56
z!+-d8{Y!G@-Cpey5|mKM#CfZsA1@LQR(~#p$V}$yIds_qY3`qe46M5x1fFWAqfXr@
zo7FpPq#AyEjNo=jliG8#Bl=1Sll+(`eAa4`^vU|u#37yyb%w;oU%!OCiI-g0M`v35
z#-f*tl3pw?uiZ@huv4>&*}2ZV)&@{6Fu%QA)6G*OqlG7zXNNkPnxlHG*c5Yr?Fal@
zivo#s;NI{z<ADc?4l!A%g1UW=UG3YdNi>8$jdzZ7H}OF96e3i*c?-|BFq`?tSwcVQ
z%EkSf=e$kt7&*CGJJPHFqTzCt{^E*eI?IDJiYm0bM0Vu(2H;+n1{mhzG*K(eTHC(;
z@$|<Gbi~@HEc;Q5f0|yMzZ+qZF?Kh11bdeCY}W(O7HBQJJW^!=b-6t`G=h>p%L?HO
zt8`h#z+i<GqQ!Vs@v@r*C2ValBr6;uQ8Gu3zN!XQa<aF#>sNSZe0c3s(prSj<fAQT
zr4UBLB(LspNwZ+mwVah=F`dPD3*i9vW9x>HQs@fXw|Y~yG%@0yjH>X-1($EoY@h(<
zV=w$&xn4MB0`{#g%d*}QWahQGTItUA$pk*@lopcBgUa><kH67S>a@qZ*9Hzr^8ELX
zBOH7!Ewvc#%!NT*bHbdq5GQ|b{{ZteVI`A4O!pZtPY4Xgg<Wn}sy1O-%E?#G0sY}z
zHcPiup8kc9>UUfe-<(|#!6AK^q%D>!As*2xVeZ2tbiVM2FrFc9>KJfOw}VKg8V`6*
znn!~GM+Obv=Xf04<ix~hy|S{w=e>!IkKUbf$>6j)tX`b+jDzRv3lA*SdI>MHhF)*9
z7SH`%G@jh?=VL6kKnR(>B3@lN$%8u+U_cLCgKe7U7=09Ep2fL}U)1b9Vd$2NU<MLN
zzN#$AF)2Gh%?b@|93vypfPOBGjev*wSrLz~=nQD^m?sVv5n|%uru!_s?vim-vu0=r
z?|#Tm`(5Fzr(-iBlnW~24rJ+ComK$J8_mf=@<bhEH7%bu73=({j5sIUiz)A}vftoi
z!1Z<FH@wRsh4br_o#kYgx6mzK3CPt&hrX9irQUg!DO!L0vc^>`3&~;O_orN|L8q8J
zc3?ROKJwPz)dD!xMW8_`MB7EzZHyekz%-xyB}P1=1LVvi?kPt^L}V?4lI!?_H1&c@
zQ6^k_`CeSqyIeUa2cJ^3mQlrQSy`B5X?n}hJJ-@Xt)9sGMClgAKBd(v0lG&79<p=&
zX5Jbp8kKPwb2geh<dEYB36^I;f)vxhI?k3Qun`u$o|TpXh`fnPu}ZUy@TZQF8K{-0
znU!IFa6j(c+-DK#VI+AxY>Vlqk^TYC@lr-k82Ab&Gnx<L`+)FTbFNeuNsl2sHzPN<
zf++OXasTr(8*uB~;9vs{Q0{dJ0>b`)J+6KR{hOxm$DoJY(HTbFi-N%$>V+zFv1gy`
zKlq4KU!kTP9$=a^3@jCwwQ|lc59t^bf4AISa1o0(t>0EFvI8TLZIy1#O914EEC7Of
z6+Qn^m8Tu3+tCluGIJDC<+#1Jiw5V#aCLcUCrh2Mz54Q?CaO)R_#G|2N6ftR%$CgV
zhqD~v<YEfApEDIN3PEer;0K3Z^>f@S<!%HN_=?I@BC4D<WZVVW7+iDZ5OW}&_Fd3J
ze5E}(cH6-NU{v*}lkK6KMlf6M964b(CktNlcnJ|bzW$F}4&YsAE9{&^FQxOmO?_5=
zpSK`xAm4E^PaP5LZu}0{Xww+(mIhcOaTTP=v&F}SP8F2PAqWWL;tjz8W=$mdJOcQq
z9Z|D5D*$Wmsc0XKaOis}V`Dl!0iQVCN!?bSWM;i;*YJJfZsiCiEUGYrl0X~1YAGq#
z0P!*YXO;V_*GBFK=a@^ZQ9-wnc@t$Sv2OsOvOiEHk5Fu-q7Gn@e4|3Slp&@{r9Ups
z!b$z6o5?9>We1w4G!XWX1)K&G8?$sEAL`X{%8qb;rXs-O01J8fL6ZX*u}$3*<}nGv
z!!Q=Am?LSbQpKG7CQGVc1C|fI?mz;Ap>j#I$gk#^v$5C}V{`L4LR{Q4X6RWENox_`
ze~-#Hps>>QQ(dz=Vlm)4G1AX=vpyEjend=a0tf%vKnEyF5P5QP#QqLsBn7I5y>41<
zng?nBKJNI==(yY@aDKAef~4Av)|&uHp#>;_NF%#+PH4ft?CA%9`#^w>cg;CZ6WWLG
zMs$W8#N=e!Xm%fdI+vuL)3`o|+5ZXh-W}n?WZ&SBWG&D5sY|9WUlO-9>ufV~B{Jy`
zK}CQ~rt5ie0D~_z>sHCt%c?6W)^i8Bf8k~Bn|i$@+Hn<sQRn$HM6)!6w{63(d1e2y
zB9XbtbgH&CnEcNLf%(I6rj^d~Qls8W6a|?E@W=;@RRvcguCthuv9U1>(~ghRx~%el
zeR^YKmTih0o!c}#(Z&a3>fcy~Y>SSkXAQgTfH0oLSYb0z4}OQI<r4vZR2Pv8;H%d#
zKGCao1b23JJ|9c>wg&p4U{Ef;4|(wX-fM%$k%0$PE2HlR`ujzp2Ed8QN^GQ6Ww;<V
zZHWedskZ6mcoQ*{^9PlcCQh&O1q2;I(!9>R+PKvIr>+PR@DecVW|U@&g(GI0y-V-z
z#O_$vj3>H{V&0O6fAx*ujWQg<;f?7BqW_G<2#kaejPy82bo^ynVk~sP6~ZUF)D%>y
zXo?M>Jh5WsWzC;lV;=9G{=}DZoQAn`eGHP0Dh)qkoDSO~wyvX1WaGcDx(0`k^AfOP
zbH6r;{~aUB*H=g^01ga?mb%LChu6&(VRUtcr~~~N@EROgnscF{mt)b@E?Ae}Np_uM
zWNJ2cN$6;{gUiXy8CLwPT$30Nk26ujQ{<qKl=;rn$LZw-IEkfO5!8QmLg(`aFfjtW
zAaqhOpH>u}*hBhahxQk39TqlvIg@Taj$4Vc;{mT?>);@_w-C80oZt8FPsf4K6ze;m
z6(H{>rm|8iN-i_CdF5u&wuXzEP66#6&RYS*>Bbp4T*p1qFT;hfEzF6u%H0_1SL*AV
zSXt@Dhc17>aqSH+08XLEk?&C&Y=a^K0e&+H*K<PuqDZO&t&#|JR{a;EHlEEU3%C<j
zVWtoBDqpS>W9Adx32yOZ;5H6tRr_h)3v*6<co%&Pq}5JG>Ed{7-0v&v%ba}|N6Abv
z$W!ThT>G07;SY%zcfX2O#6SGE0>CnB_HA~PvDn1;7$w>+_LqhiR5BmuIFSAdJWpQW
z%t69&5bw=7U-1|~1hOEl()G<6)6>6d<;m;l@fN+N0NVJ5=ZzHRo=R5peUJN;kisD^
zRI~Gae#djZm64N|Bcj{TyqM<MGuMaG4tz#5zw-aH@weH*vJOAB?rs@84xnwfh2fA^
zdoqKstK=G{f404QrDi;s2FTdtKjg?L>FnWo+59}q_T36v8XEJ1BvzQ!PdRr0UeYot
z#t8ltk=T;h;~>C)gMp0$|DPAY19pi49y$Ad>BOlCQ7aA}0a>i@bb-C*2rbK6okCh#
z+TkZ|3$Y^rt3lAwQhv(a<uNfIF<4*I9c5>0N%7XDcIx26o3IS-YME;AZGZ>_0u0E0
zE}~B4y8{8R+W->e;cvVb9)Dj=h6LWl8U<ePeSWW;7^<2>$2#xWMX8G-tr2ZN3oDrl
zz|;cjr5T<VpDSxFg){S+@727AUCh)1iPw2$#n3UTS>k8$L4s#!jbG9K?vybqu!bc5
z6tVZJd=(xz5VS~UA{Bj_^V0aO3o%_wE7bK3Y*vi#w7<#;>~D^M*LezG1O^6DiD;T^
zq^abr{zp5`D^k$1uyn>>uk2j%Lko!SBiT5um%sv=UVDTQ-j8LB0q>GZgy7in<9B|Q
zM8kOBnB7|i$HNmpcnK_^$jmFx^a<y^G{DGnG(ygK^d87Z1?iS*?YVd#FA8XB>C}FT
z2)X9r<g^!6#!m@RefRV~tEB;4-~mED`oCA27Gb+a9jHa(*jPNMO#jyG-TS`b@pcRU
z@{#0U{{uTSVCOPZ017fExElx;rq8C~*xSPD0osFD;KEG%n@r{n@s$6ZLULdQ+oFHE
z{T&>r-n2bQfpECOA!&0(`$|-&+e%fx-d!(Y(4rA2$@IGCdMd}NnKLn>35d;_?@hjk
z`HaBRAR@+r!Ba{GR5Qgjz37S7#hN&G`{b*S4<Oqk<y4`6CBzHhr1Jt20x9e(7muG+
z;h5fUq_YP{sMzRy>{?|=N5+uV7FJR`o44Pg=quq!<|k#furF8OBE2dlARql*R+b66
zzrTOhe!Bkp<}V!nyP<%h7rwv+!fyEa<UcQj0lW|~!l5agqz2Ag1R^CiB}79bBcI)q
zBNykc_4Ip^lOxKjSK>H8TE9f`xa(DWvQfD=AqfeO0H?71V|E%{QzC!ydt^s^7XQ{Z
zKr&msN6i7-fO@tY1k~DuBS`WUmqXRm)+s9~Ed`&hpXCAlGnNOlpg}Y*SK1&#Po}ss
zx)vTN6Z8Qs9=Zr9DJ3G5B8W##7EG~Bqyv#Y$o?IN8W9+$8*cRr-n|@T2QDttWATmV
zf)<*AMDb6$l@1DSXZ?8`I@*th%r%p%02e!VI6tNP9i7<Jf0RZs#;4Nq@~Qn6ojsSj
zR8Mx@d+6%cMF3ROa!rxu--=c(__ixJz@fkN5=Tl*@RbMhlza|P&{y$E@hr3|G#~E+
zo3so{ipt3`uPOqX5`+M$aZ>W5GiN|)4&!&`xP}%c=Nf4~vpeKrE>#acp#6O(ars+G
z9z*8$>|PvkQUDhh7im?&MW>jWmG15G=JKQtMIPzWK?`4AER^;(gevIf{I&x<h#Pxk
z<agvSi<WdAQPJa6$R_z_Dv)p-7Ks|F*&QpL<p%fV&Qb#YJuC$d$&9sL0u}py{Y=p+
z92RlXoQ{tl+v?FpHPg$}KJciP?Sa&>FlhC%j`Ps|Q$8jdA*U|IqkLx|#;wDAB9MY^
ztf#xMJG-W~#%KN$R>ryUqq{mWz%Y)$m}V4pZm55m*LlD&j({RQCwg3=ppf<oD8|EZ
z5csh`lbrXKSUQitHJvtW%6_(6_bsIU0N^FIHVx7RUV%s4>yJr#5NED7e{$TrC~&C8
z&jF#pHK*7dbH8XXe_tVKczA7QYh?dkBZOlC`=v*e1dsTspFSI9GWc0D2qdWfQ~D=4
zIrEYHzqMLF0;T(8v3Ephm@V_D0UkREyf-}573YQk`$OPgxsVogtJUWef5+VKTK`91
zp&r15(0gTshjUtw6sD&Ku8#dWH#$<JzXF4n-<F3`DWBGBZSHz9)@_v|@kd$QayA6`
z1%xrs&`9tJaZBTcn&~ERiSJ+H|9+qjN2@qEwJ6*V25wf`6Qs_9F3aWa<OA5(uU|u0
zxd%7#3#MT<1?K>QsTj9nuU{xHRG!Z!&3|d3U4r!CzUu8Az4iW`LUu9WN!gKbdi4?9
z_K8}nTY#FdAurT4zN;vStS8{Me-kzhjgT?rTaofi3A!)h@mGc3ZG{;jyh{WM0!)1h
z4+#-L7Vk$lnD4|@M`(h&F1M_#c)#2QM%DIvShlQ1_OA^3YiR!CYxN=^Y?C7b=duD9
z6&^`NCJn1R_9S08{lBAS;K4Vlkv?er@3Y&_zHIn7ds=dn3lpZNCqA1~Xer@CWDR?!
z#~jCA22c|Q$>WfAl@hwg^3mxqn;SU~ZN{&PTIm^PuS00?7$xKL9~;jkjIG=Vv!5ir
z3mltTauJ1aoz(8wPdn7@C?u|=y8UfbCLRd%b~Fu+4E<9q`mS{x&c9`>fnQbdsNujd
z7#IJ~FL2TUt>IpH>i(x!>|M)(e|u|0#Q@C!KO2um{_kVo`(L9T0}a$j<`)d_x<~xq
zS@?YhW|>Xb=>7lv0tOn6Z#NDVG40>~`oEttZfE&~<oN&j1!EbY=WXC=#iRQk7XN1!
z)K7p}GPeDo`hR}m1yDMjtLb<1pMux_JAvD^U<78VBpdiYtvdhbTO_xO{aBRk<^LJ`
z{#O}UV3u;6n}2$g{Qpj+H40d4j6J*mwz~VD`H0H_vs8_FCw5m?|9>U`eD(iNj)dPV
zhF;g*QbvIhj*d(!p$CDJ%r6j}lnl1qyIvXTrhpKnkCf!0Th^1U_{h&;s!K{Po%EZZ
z1%LuC6R;MD_YI`(C3t!n`F@?Kk^OuLj-h0K9tg{)r8)<teK8fmcVDPRIDXf|IYU87
ztLhh`y&)Mq*#1~W(T6b?hgIeJgUt0P_wK4yswT(?@-n~NQq4Wq+r9W@kwK;+%gDJh
zY0|vf-RW#FMg9W61&xgNdwjdNr(eV=$$EluX)~O+#zlF#0|R_bQS&v6p9f-5Sb*)k
zr-i?19Ma$;*_)FU@bpe<2Q+ta%jhZwbe*e9B6i29T5=RLE7y-VvS$p1DEhFiTY=9@
zbPRL{ASY|bxY2LHD0-diY|$Nf4~kxtx`8~J?V^$0>nq*Qd$g4;GXJ!<fkW_q0`wOy
zqT~zsrw{F}Gd#Lzxz$+zM3BS{aJBvNi7M1=dPR$5_%QiL`qJ!PrELFryC0{Wms*&x
zY8f@$$;2@prRY({*t;P~qaMmV{r%01XvWE>zV9dLMl_JsiyfGCpWJ=>Tu*&pI9QLE
zAxiN5E%)^`K>gfL(or7x38UY<<q4>XH?I;pOb_(k>*{<9<#kaiUhIog))<ihU$HR5
z*a*<HsQYyhd%L#2bVumtLBGxPcQI;XkBL6KJGrx=z)|+v%i*NITY2D~T)q(J(vw-S
zjrMy@I;x0+_Cx%DN1JtZQ!evsGI4?C1G1FD_}TYC>X?!p3W~@j>c%jXX6beI_XZX>
z(i_(DLlS@AK@NBaWf3Kmfd6?1GeOfzJyUYAEOYh{f<Zot(y|c?b6(-f(ZS8_><tvJ
zD>>7bK6w(3nBp#dV-r4W8~9Zh@&yEUQ*2;BveLu6e}{i=-z+A=87%f@K#Q9<+Er2y
z=tc#57dm`AvcC4ybjvVCMRsPY$SJ;ik}|7k{D$<L^95qx#$jo)y0?KU(%pY@y={$G
zdvVt1@$X3ebU%D<yxms7F2>y{0{cB;H!?r{ku&vc-R*&Aa$rHH{y}v)2Ak;`Ehe?^
zQT=o1+YmvgT+fp!m;GTKo3<C&B6Ot|Loq_z6|`+m=)`QFPiA}!3M-dME7!7;W5}U=
zHg#uNECzL#DOb&*#0fgql~TDHMcbmsmj^xanwnpPcN-A5z1l!2!fq<tRU2%Kz$i7B
z`yFlIU!p+cK0){{wa4Xa33F9xZ>O`)vmoj^=Doxr-HXm9HU`;#s{&P5buyV<G!TpP
z2*RWn?!MdF^XLo47<b(SAPAo6+mIgc>whHr>DLCE`YZaO+&8gvjY0C2_DdPc5K;T1
zA&rir`fH}6jgf>%(etN`Oed2Lk@(!*GB12C_ksoz01zZm*sY`!B6gFqtnYK>l*nNe
zD15&94Uej5?mM(yS?r3=0C*fzt5a_6<Uj1RF&wv3e>3g1Ibl;DHwHDWp2>#oH4_`O
z9<B{6#cAkAXUZpJIg$eElKKESX^oxr_*4I=JB^!YU${o;x!kS*N5Yl;@XHM~Ov(DR
zBEhL@b>CLQsUi;ZVg=g2XJi8j5Fk#GVOamFt0-r`#vtqtOuk9#C-U*1wV)=led(sx
zucl1kPPQgS5~n80Ksv=*zt&hSM+)PF-S#t1>{kS<MV~!;Wxw3H28$DN*{0jtnyS{Q
zJ6k3zrap{%{37M;e(8vQ@*=s1YL)`Y*={3t?53FGY81Ye&tkN6Q%h1jr}ZTN+IVRm
zi&lwbOBl%l5_G^`WQE38JPCP!ozTW&OHY%oTjdRGxWOt(XRjZf1*d?k7E!c!B+}_u
zIaZBjO7N9HD*-zN-qf8s6C(t=Y-eMqzWaC25`4R?r)xdRFM+{j{d=<B{?tz%s`kEe
zXJ8FthNHm8U+9!f<+DlU>Zp*7rMI5|mCHtu3&b=--xg)g{BR@!HU}nrIvaq8i~BhK
z*l2UKSV=C-^K4(hZ-z~;N=96K-;Pec@*Nkfv9WQfU!GkthON<B*lu1DXfz&ueRUx;
zL4={i1_#z<*t#Au@Tm<W7w9L64Hw~Q?vMM@IOQ_KO31AK*)-MdrM|}&Ph0ZHypd_U
zAL4^W;7@VyJK{efcMCbK(``*ml$d49%`Xs{l`m|KmpV`oU8FU%7;)tn6ghW_^4rFZ
zj%p@8d*=@ves=r$CbXQ_-vVP(oBI7Vix(DtN4i8vzkFF0sgq0i5J8{5SItL|!4e`r
zon>$yjP%ic436_#HSTyTPC-?JVS|I<g-*7gvU-B$;g0C`;M8xf1xnam!yHuOQt@@~
zjrMi@UeP}?(m2OAGxEC@G)pzM`gJsolyP6Wl%a$PbNuyuZeC$b5S8~Rn&yO+VKU=X
zz805&^QNY~Vr!vZb<;i_m6*3~nbjDLot>SbIXg=^3|T5qEoUAn!sBTD$<_Ihd>Q71
z`HAbrRylY<S>#A91}=XKCSHzg%_=@s?P60*Knk2nhi>IA;*DfvD^)VjGG10+o1Z2f
z0w945)(T4_IbD_pn;Zqv(^<qEwVW6_Iy!zYpQAVOMAQ+HOA}>@gU*wlg3g<(or`4)
z9><%}9c<N|Xu}EY2GeMZ6Sa6NS(MynQKOq65B=f5sSRLlUCxa_807q~C_OegRuZ++
zCijge>^xElkZL3w=v#&JsFbhreL`Pv(q4sG`EKw2o^_aCd80m4^KFO)cG#~w%6!P<
zfOjIKxc}E)xHG&i_0lpC=sLkd8VgD0>`Csl62u$wM;`@W@JpDIFy!l2_Iq_@DJJ9D
zFSW<*o-RaIpMYz>3S{C7x@>PwgH8tDTKH$x+3pOyb@dN_zucL)?UggtD?Hp?Di}La
zDG6lVtcGnkoM%8&@VUh|ToV)DD2l|SF$$$@;73XXY@>n3VY0>Oq)(N4;XM7>KCFsL
z54g~oiGof%CLRg9+WHGn3A^^z8kqVqtSYP^ffG~G&_(D!GreJI+q>AQ7n4Ao=(Yp*
zfz!C^W65uTl>%R{hnZz7lI5}eShe=)O5#Cd)hScZEVtJ4U;d?piixTCh{xjd#cA%F
zyp#npUMt%jBii@y7ox>GiUq8tDkTQg_0#r+!yh(ymRb<Jt^(X6epXwkNP0QaM|+hF
z@?22iyWI5&M(U?eyRrWI#}4r=LLbdHmJg4vV9~D`l?`~8^Gx>$P&ZCW#ahh;+NE-w
zMpe&0K2#F?1SLL^pIjcB7>+1S<bU(AOTUa{DE_xVL9+?AC5}d6&A!}9KLYYYerPa=
z{zoQ;tS<NJdf3kvpveQf&N)`{Yb&liRUKfZ7dn5GjSUwXqVsFlS;}|JF~#dlsDx^+
zV`vns(On#G#ipfEGn|wyMJah+j+sITJIq19>(AGjO<&7&sDhxdg7JK(j*p-Sbt|Gu
zR+=+FjI;p?VTpw)M?y76x3c5_W9tZz|Bl^#v(VVOrickEvxf+jY_B9PPV$s|tg~|H
z7tz3HDV`-%*i=%yj>^P_FuGp9QmN;TS*O|O&St!m@jCZL+8Pj>09y;P{kwP#9!Tx+
ztQ(7_N|Qz%MOHs$HA>Td<Y@|i>d%y~o~|+gK`7)Ei^-d%BPkWjD9~wi+9O~D@;iHN
z43OZZ*L90A@=g6}npb<jsla7f%8=BI%Jrc<A%Ox`ALtwTfv?b5u;)np3&GOn(x`Wl
zlp>QSu*+d}mh#fPOF-4Dq)VcW=&TIwzpvhQs#_ouE*C%a*r{Eq3kvV@zdoMx)3ba(
z4l`E)&J2UEb!Ev`qE^&IznkV6p#H(18I*<hKH%4styoJ~kJzoy)ltv7AtYE*I~6Yr
zu@#BEmKbr>zY#8!b}N-m`u<d0EJRh%?Zt+rHYoY7IS{IAitm!<x4Ux_iEh@8>b4Nh
zmm;2z%v&%@<C;|WbF7TL>}^_}SuSRAVudL&`t10;dk$m#w=w@B#?shftx6)@QmOMS
zg+!X>5JLHW<PK&~=n0_0yJ`&vUh{{NRJmjrHTq9+nRMbPLLT#a2-p=jqZB9;MX_tc
zzH_ObwMNr^QnuTFKk+M!*I~?rGuv^}glz)D37y>1J&F!Q=WXN$0ijeOA8!Q&<fvx1
z|9ID!V(PY2dm_m76=YILakG{UNm)=9J<D*oO!e57og|n*bqx_m4^Q&WW_)5CCNr8C
z`BOO4BXt71BlOCD_?NcR%R?_g=+j6xCD-be<1eZII1tpnzV#2EA&whBgctr%rMt|2
z)jM@MR=kDF#!Al1d%(7WNh;Vrw}g`k!7HJkR)w(EoLrsE2!)PU9)qtea)h~wi=h)l
zXO^QszM4@k&}Cl%e@zz%?U_)DL076TJ|rtkdv~%u1#YNB?$I0S_q+slQAs;&u~2cR
zt}T{92>le$d0yKdmD}by!az&}{1L9eOJ}pk#E5|n;(eYo`YV8_LV3Fad0?wTAh}Yj
z@-m+yxm54lOH78|E$!aEe(%vBxH8|l4B6Net^RndCKczwLOq@39>@;)i16q>a7KkB
zT!oY*8W535Eg*Hn%_s{DpBAZ4Q;r#o>pQ24N+If3>^q?I{dDy^i<f%#HDLdXtlRaH
z{A==-yc8$??co1~=(Kc@4DkULfnI)h8{uT3o)CkrIsCe4(!^*;SA6L|hR?<#TUkRc
zvM`7j+SRX^qv>tb!3u&Fuzt6I+7Pqpt}gnOHGF3iUxlfbTD&=_Rk2{+^G=qs@*4r{
z+$Ve1C(bi<Uf``JMvln`TtD8e@v+!iF^YAw5%HJ#R&;$RBOnIM&F`y*e)fQV?C?iM
zZ}K0B6y6Wk+%`)tz8W=(Yy+&w?a>K4bgT&;6Kk&TtZ^;-OC4ai>MrYHDbl4tGHcsT
z)}YeNi66Rsh$t91@_dFM;e$@D?tEvVo_>&K@67g&pfyN)c058AXZM-k_&8+ep*h=v
z9gP6!NJ8!$d3#V^2vT*4>*Yp$#cKED&S#1`y9Fs`J`??m=j_V(<rP-R4d-huAU!2!
z)m}uBmX082jL&mx3dSt~Ofl19(Ty79e4nc$4MzQ%3Vh+RhN8@<9~&%sl5)-Vv^tcF
z<<su+&fAlWfR3^=QPjaQL4P~rb92>=;7=r6>g!_B5%WYo187`of6&Fp;PDALnDv<@
zS0D(bxQn!Iv!o+N<YW^ZuR6BR2+?!i9G%N3e8g$oIu<m!10sTDau*}tu)G4H6D1h|
zvKp*LN`&Ez+zbjl*c^j`wZ@$%5zdY!8dm$hfsd2;Y_>bort5v`p<lit53wq?vDaVH
zl#Ql)QNQKN*cd6=$v~<E9Fdfd<gC4*3Fpavhf!CS_rY6G>awnqGUP{$sIF1Iiq6*(
z2akfhzW+4Ee6GqVG5Zemtt-b_e>h?B#wZc(<SW{pBS&3;z@iqd&e8oZ7Bf4K3LBhQ
zZyK#sVhRo&K;91VwLu?c@kj<0HrI7RG3Bz*KbVK2KbNwwn4aG)Nt~|n;d}J0k%}(n
zhst6`*5dbUn~}3})Ngmljxx?$6c~dr^7()88DAgNu-<q2$0;(;ey()-%sw7pM5lqT
zQnPaX(Mo*ID}1o?JoFCi5g)(B%(_CM{{`--y%0o>N`$IDky{tQuO9OJd_#=)G@U^>
zud;MOGIx#L!$xn_GvZ&T0~l9}6#&ihKAQgz<Q2mB^Qm69!_F1W*=(z}AN{x|I~c9N
zoZostk)cRocshFcZbZM&$iNh=8gcKI?ADrUCHEUSB909H|JeJ=u&BDIZ9zgsLJ)Xp
z1Obs!QW}(QL276b2BaAph7b^yZiykJL`u3#q@`ho2I=k|;yXNm^1Rpg{`&rY|Mb$?
z=bW`y-0NOz@1-tw2h&Kwwa6C5i+{)Ib_ZsTDR0vfJx3?oWTV054}c^QwObP`+kW*?
z=ZQGAZ5qw!=nECA2vOP*G`nQUaz(J{@(-U#dx&+(*k`g!mw5vf46toNSU#oKe;i_p
z%Dug}DnNr=zt0$9n$xTF4GpxU8CblOy*<B!?jfFZ8E{1Qur@L@hO9a%F21J4!OI&H
zw+%=xRjRCjEF{&W=L;j{zR%5(Qmbg~a$D&dx1neu_!<d5K8^F%Oeg?>`6Z0SMS+_%
zutrnCYR=j-J{>J-Z))qRUE0@Zcz0)6a}>cIxMj4LmU&QlKHC0--*fXKIr6QOWvhNT
z+a9f$zqc~PF@Pg{vJ)OaDabc44~BnK*S7Jk+WKT1($UmgW@ETGR$2Nhj;AX>jsvW~
zJr2`)FiC)lyC^A9sbzKwPW&g380X8oy&)pHe(mlTyL6*iej?GAyHwYHPFBt0hOAxY
znjo*qN&TVk1}_RSGK|#LC+oe_<m0$oOTr`hfykztshXvxHa-<!a`WcR#<wCOo{(R=
zE}b7&01jyeEq4G`%(>g-r6Mc}r1>=~c;AEn@wk^SOqJiUUpSpGdh?QZ!?OnV#zA`H
zV#K2-)vX97b=GzXXCOHms&X#8|M->ECqkyEDJXMJV^4}?noQ(l1#6zokDHsD=T7N1
zHnzPnIRnlCK%j;1hei4LpfP;4%!_=i%9kOC81loR2&3S4kQyp5f^kyjp5!8QDjiyZ
zgs;)fcCM)Qm9Q#n`3ydzN_s#a@kn^2dxljj7HZ8y>stD3-tL#Fo^04{WX-lQ4i%r^
zEHt>1_dNHSB&8BB<hAh@McLYEcRFSJLapB9)@fN)&;HswIa<ye!xjc|+4FQXOD!kt
z4&mdL;bJqRnU+v|O7}Uoay_Tt=nNa$g~sydu2iEUAV;gTV#EZV9Wx5uAL}hJl4aDX
zDAIOWOjCH`*cwK+1`#@1pk>tfp7bh9O`dtfZ1v%qA9^sAhc-uR0;?W$HxhvOZMWa3
z=YR%y&kDPQAQVyeXeFL;q_4)(h<}m_B;|@1s@WShTZ5dQBCRrYt1BQm6l_XKo}+++
zUYqWS<B7(=CY1uf5zJk)J05^unfTuolR-Lcwh<(3nOkjJ;e3k}oCn%3^}c}*JIYZ0
zM3Hl{oaQd~rA&-a;^@rF1H!Wa9}RiGCX@Hnq?;Pt^SpikcquE7uU;FgyE9RE;&#*C
z>WDf#M{8btdvC<5y-!h?B}F1IESy2{Q-^g4$uA&z4hM2&p3K=m%Yko^9DPneYSPJj
z&e=dl*MzMnMVxnfB<WaLJ7XSL)K3UOj~<#f3=9Hr7+_skd-Dw?d2MGtkOPUUW%(>o
z`Qcog5x{xn_WfMj2I!jBwn(N%qSq?`r6I7>{bCD<z<l#}N!Z0?qL>*mamewu^Mz_o
zkCxe8_sr)H04z6CGGck29%Qg+g@jxP#|b=%O_Qc#&&^;|E`n9<o%Xy(@5XMv(pA00
zYlQ$n@KE^Z?SD1h%m1;ymk!nq24DiQ_QFnwvaZ{~Z$EqzlEq&dB_fddPMA@hCrYPH
zoQ=8YAi&!^TVyuRK>v!|UuOd{Y>2VAmWbo8&rb_ncHcTuBRUI@JAh0(f}?%Vm{+TA
z&{#z)|Aw`lT@i42nb(vP$USG#iol)mi=DMA@lHqn=#?xK@6l_4$E^P9E{W;jE*wT}
z$$f3;4%qQeW2t$-w@^AwqS&MzeupsczDJK{(YI`DG7xo)+m!<x*WKH8ojJm<`NpCq
zc-Vh_b|xl<r@u8BD0(Ewo~H_Wew7-tGS}(-)EWH1aUp|^+bCK-Pw46A-Wf8!`~pmP
z=7-0yn2YLSO{TwMwyrX2C(^8OE7$lwtZL4k&oW;6y75l=9!SeiZaX+3vW5oWBiBw}
z<!TSbbeKCQ_~BBqT8xxL0(!$gfcg_0U3+>Y8_Q`L_He!sy(^B};&GvIhi&3o8{O)#
zfv5=+E2h?9_q%0ZEaE647SOZ85|+s|zAk%;yj#>E^eF9zqf>7gX02m$r)QXnOfpyV
z@XKH6$-Es)j{K8#yeYrIfnN~+nd~ACOhQqcgD4<;7N$(*D76uvIwDG5i<)7nRlYsk
znw<p_tq6%g(sH)q8%|SUPF|uT!iG(E4}ben%>drOvDZZ7Qy}00_zP1A^uQzBTEkps
zyqizsV6bPalD75BKj%lXE#fjyT4;lxnF=%CusqDjp#n%isZ!6ANz78Z6Nw6x!lmcP
zksu$Hz{JB~h}u|y!=>B4;nfEKxkI(fI-S=;)U)I5U=7PTOe(i-z|hvlMx?buXHxsD
z%x!Apc_Dn6Y|Pc~vxa~8mXzrM{xqy|B_0aUg7>vVHrkl-?0Ox|N6UI{qiQ8A0#xyF
z{5DISh1YbU|7xLOCL__$5^)@sRX_B0kHcBwp?pKX!tVxCoRpcS{t!G7>W?Bi&}b#q
zhs>?I<Jxv8@*ipTc<7F7k_2i0K=lw7;B5<iW8yBwN`e~2N?TrGzpR$w9Ys~Ho~NsT
zw+E!(kv7v!tzX3b<BR^uy*J1_eS+NQx3W-!lv<9(M^KzI5ilCI>YcDryFU3T&}cW5
z+BXnzWBl`qaoinH2`|(=_2a43X6to<Y6A<c+M0tYto`Km8l=KpCyYtZC6%>0b9bzG
zBRTDE{_9L0X8RB5a7I8kEWIjt#rI5hzuAhpR;ny#o>e%jB2>mS+a2`O%veLyGiyE&
z{1N=!I}cB^2Jdn=&0Zpl$#T@FSemq<dLp}GVC=SamDA?y!(D_PET%pRwZWJJmyBBu
zNR?>;7TWO}%PW&Yzf!9S){=t>04J|9vkw9RoWZCG;96#8qxGWr?3YsS{Ium6ky~CH
zt854AM)Bh476xLn%{|F4{2;^MsS7(aN;oN^<{FeOG-_GW-ka6`gs}3N`2`+!@J!ed
zy(kjD1GqyL0P;F^7Q~GHt5G6jcW9z2GfXP9q~?8db}B|e!abxmYGf0@(fnf2JD3WU
z6^zfIye0ttHZNBh#B*dSxL+%j%TcvoT;Kpb&D_0J?TEKSei^^3WT@-1Tx7wQ{$I~4
ziq8%<$*&G7De5R9j5DYLjP^cTf!nW=TZ!li0R4JicUXh4sQRw50imxjB#Fu1ch;k3
zvx$rj$Twbdd;sWp$^1r?)e}{99Xdj$VJg?e$0bt9#acNaE(9xslf|M?ESK5bI9PNZ
zU|xCGSq{dkoFV&9v7P`~3#T;R7!hxg8S`gze|-2i)plqNdUKbh@Z-mAF}xP@<;EIu
z{=3kw1VM#Fi=Lk!J`}!CUo#%sFz|BTo|Dc}Bl>Y4$==2N$du^&1l#M1B~%|=f9<fj
zEDk3x!Lk&PRsYeTrUf0bXNmp}0cf?BT(C&3r$T2r8dQrImS27Wf@W4_dFQ7Y?XC-%
zvn$851qS9{(H7u4gTi=#hFz3-4pCW({TFdWTu(O^9-tEI0YNlfz`JU=E!m6aY~1}G
z(SxEJMQJh5lI$bkKbclx6rLro$aqXFvUllnyg&rRSiLnVyY@L?p*yl}?;R~iRyNcX
z?Z@cfQSEfT>^8du%^UPyg=er?d1waU_5LOglbWc9+5CrWQ>Z=^yQc%iLRq_IaKNG2
z2KBon!e`tWmokw4X0R^<(Vx;D@#@5bXI&bY{=|D#)YcO%rmQvb%Kxl6f=cS@fZEN=
z3V*Un9B%-!Ale}VsXX>rLTTUCX7(j`XII-1RI=^HsOSsi(vP{dVAmZj$^tXP9LBW;
z4+1?2Ci*o?h`B;tcxP)~WOdk{s+!q0DqG)|SrhpJ6}RJ;SpF@Btb%g%Fx>q3x@TPI
z@zGUVK>{;S;0#a1fxftkOn4%7m1selj$FHq;)$H2DoBIOX9;~vb~1Vd(biCcI44Q=
zk)DiwO<hwxMux7t4|$_FB!~XQHFoJbHKFvYjf_68*#3}pk>R<wA%x;y!#*2BQJ`jL
z#P1K$?Jvt=B9z2kZ7~CpnaFFmEyg7lHJQnqs&!%r8W$!(O}|-x`C7;(zXHz?yQ(fK
zo|i&072msGq$?q>CO=eD@Y$L4R#&|Ms<C+1?&Aet41`To47+GZeS@}q@}v3`G#&@>
z6eo-&b60dJ+qq>GSHlb29mevd%%Tf%oeq&H;G=an4eL1;tt**|z;6M45v1y%e~Z2%
z)P?9#rryz}1O49sr_k~o#lLH)i;ND6N>mlxhkiq6h^ZGLL$7O;`OG|h8y8$WBsDQY
z<IQHql2rUrO+9~d8w%PsS)CtVq|Mv&L@lEKFi8K0DsQnp&(#!uVPC+27EZ6U7&t!m
z`R8fUCfUdjRY*T%Hj7ns&HAWf6Hh@%mD?ehyK9*fS)>L(N`%)I5%uxOWT9t3Gmo>p
zdm?E3cEY3l6Ea4kwMnop)i4#<VLl_Wple#~DKd;6WwtgGWm?NTt-jMkZ~nW!P?mRW
z^BsH_1TnFXyfx<ZV%aulyBMT!r}C62N4^-tbhr3525%(I%f~o+WHi%PJAw-!w^ajN
zpS5etPtKyY+uK)?DK1bm*TunR;oGCxX_SSr+L>AWIY%z}B$HZ2MEIIh%Z5g7molH^
zMcpGd{Zq>OR~M-Z(W1;KgKor`%5E}ybqrIqSLSQYfV-ARs;{1|2Qa^@?TXR)f6`YV
zES;coS8`h>w`{J|aybel)={~16H)j7xVxZ&<94y5H@wX80KkdeGKzYYS^<ba7=JLs
z@Wd$UgOOX(Ij7+Y7bkRFXy?XVBGS2fAQdt2z-ipizpp*e`W{-%f#O5qm!1C9i9c9y
zmre;myTo-}%Fleq{-{*cxk}-ykzT&Q`D5$y(9@R}2;AQg6*apNFn1^XG#g`LuQ%iq
zm%PvhkvcYjjX*XU8i!o11ElhAvg&GGO2rdDiD`C++is%Qz*%SR4dt=5v$<OV!_6=L
z=Rx=l6cZ1Z;Q+$F9|)lAf0A31AYJV>NSloNXz&Ghe?GqtRiQr^SFUP}Xa#bUJ2Wkt
za3SnJd<L+hr^g+%#qS7pd`1EBn?0w}lO!qb&npcUmF!eoepERB<ZuyZyLxB6^C~Qx
zVyq3#UpE?3jcVgkiQqBWh>6D?!b&`_blvGN&v6#tf!ui4_0eMR^7&pX_w+IB_MSnA
zuaO_eFR7nnR%aG82@4ao*0WI!ov~~LjN7K?3V%(+(EbvqRZxpLdhhZ(k99mrx=&9j
z>JF}u2k;Lqd|m{@I}OWR2gj=LG4Ci9yzir36DA#OTQxQ2*ZMCCbUdYR4JmYDU;FI_
z6ABV$=&lfoq37>2yP1`&S5;5Hkb^WEdt|FEjQ%J&ZpOXFDcGC;LSB;y)L))^%gtSr
z*VX{6+}{@mPHnOwb*~*uz7+!{?yyQZ>-5LIXAPcPCkDjwsu<adHQ3hwKg@s$-N9`7
z-m+M1WFNMygj_41*XnSQI1KVJySHU~wZfDN^=~5OPa|?C$p1&D{I#cV@O$Y~Y<3yY
zU}r3tFR;7w9IudA2aGo<Tbbj348ZT%rJ9{sDd%v!(s8sfVrq2BE!LH5x(YPH5`Gw%
zv+TXG7>X(W`U^*?1&E*J2}sXkQxvu}Dyw%(DAD2fm0M#?0NSbi!CkQHZ^7fWx=ABw
z?_k-TLbF*R-zw&1Rh%OY+WsiledDZ1&OA2#QiE=I*<qojA!RP>IahJ1m-YKgHr^uD
z89w>Du<qwRMV_WS0`s55E9Rf(#O@#NH_*WB!qKU^UcSb>Gy?6rD5%}UFJP|MG;wkQ
zwRUmirrpaQQ4IFewr3?R8w)J6O-eZrXvl&;X(z`u{cXn)cn-9(ND5%^UG2`fB~0A@
z)pw5=l<AK@{KFah#PT49LmzvpeGFt@vAs4;6KJ<BGFK$WbY-w2bLWOnE(!W0UEnLd
zim-n5%6>Xwv>j3yGf9sWf2$l^_DYc=TUFh0)OD)=*Stk$Z7j!?^Z=^>yp>?*=#_l`
z6;v4UfrMjo4zX!92=ctNzn?r-<{dx_mb)CI<dA+pll1Q5_R{Wqt8yh(lr93mcR6?Y
zP+s$0lUAtP_H`o;AM6gqc{qc`M07m}q#B$U7R$TLun9HYUFNpOIkh`8|9no#9pH1+
zEG^&v?d}0O^lq8Z;~cJjmuhC?DgizB?j}@u)}!aRjOxAh6|Pu3hj%F9-Gx|8U%dhb
zH&7{=0Ni0ng-vlCcdVmv(|wTZbvYytWv{e9DEX%Qed1|6|0Gw%vO>-gDKWLJRZ)u)
z)NGkY`OjAcpND{+V871mU*(7@IVIjS@|BCtjzcHyNpg1Qd)8IQyBQedX>98zPzee<
z*HYGJPH7km8AwLVhAZ#Kb{|;F7dMdgn(v#OMkO_jbOw2R>Zjh33w=knE6<WsUUVd@
znR>HY>t<IhF~11dOR-<GYt<fM>_H+teO1Gq!0WCZ|8gxZ0{)Pa3Ga&_8R?^~BGw9G
zxcb8l<FR|c^T#@znoCRx42wG9r1S;Sz}1R9@_{e@?%ewM&Oy5ZD6hX)FlyRP7th28
zg2gbchcy`(Un;YnD^P_E<{CQdEtm2wYkIu&?=_w5ddnB4Zbw|60A1kaxb!T?@_=I3
z3feUJ|J_ATN34Fh$PNeThqa`|XZS8A)JGB&iVxT*`{-AZ%^<FU4{4Mi;cQlKCl8Ir
z#xwrr{!Ya}sL6A8v!nbQYEWtkzh-(Z7yyf<F7l?v%t_aX>g9F6T^Fo25dt$bHq9SZ
zC}-{Q%6NCC*g?wR)u1c1@9C)s7|h<s<`(KdTa1Rcq2*=Ew>4rHT7!~L<BMhH612>j
zkcDCjuw{yOB(x|4jX)l~N7Z}VpZ8R@K~~-RJ0lfl@8I6omj$@fz0BrT{r@bB0>fiL
zEJl09{`eBuNsrT-BC3lmhRHo}Gq7k0Y0ieZ6Xaja`b>42wpf_-zHp|MFhVG30O5OW
z-7df&_J$<e>;Aj0R@??D_KrjM@Jq17JkLjb(vaL_6#bmn#qZ$SAdW2Zp7-3QIw|(P
za8;LDK^Nh%`>^C{S>)3fJQ-#unr0E#%5~cS2LL_2$02e(B!cSP=ksrO2im7df2eue
z<{!p-4_l;pIZgyyLDnXRD5S(fJs+C8HL-}T#n@fK<@<g`K$XB@0rg$8B4(U@w8`7R
z92cs%u`01F^!T&>zb@}s0nm&IL0gP#eaW5^SodFf(Sw*wS-`3{o9w5=WX$C4donv1
zIA@#HI##Ph*@kT^a{CbCpw{{9TYsXL=MBz@n^%tGUq$njk`@1)RU8TTD5`K*f9&cq
zLN8=B@Rn|KFH`UengL2Ar6!^h`tq7Q&*>Wc+hwR7C1$c;PR#$h^VFAhns~H<2y4Ep
zoa-;<xcU<@VAN1i8ihZ-+5cl<JgHzHTJ3zb!T#UYs6z)TGI}8&2>$0U|18-{3t())
zx7ycw9{*a_`Jb#s&qL9}DYR>w_@C9hb^x_k2qs1R*I!%{pSF_cjUDul&rq(J*?(4}
z76de<FQtj=+K>Lb+W!~DA9?)0iNfm46n1qNz`54^Up1r-7Y$V*xMz0>^M&z;|8-9^
z8ADXasJ__y!+rXIbHRImz5ahT_Z$UD6^h)he(fY8QYQ+P|N64>XtO!d^;z=U-8R3K
zYWPhD?JSt&b(ryAMVWkuYQG!sk<=*&=kDEr%B2b>T47+UjKNq!?dZUGsd?Yj2MPov
zWyLMWf#NUFpbkWx;gO~NC*xY^@$^L89$Xh(EgH`#R&{dH_$6OmiLqCnqOSB&nNiVt
zyd0Y0wy}56l1Y$(E+#4Iw^$4*uF17eSBs;Q|NDMro`Bh5-LU!3(Sa&8YHinX$z?%M
z7SUtvCtD@;CqF9ps$Sa8cBWM-s|QgC(kCj!677$-*o0!@k{6A3dzevV?$YLj{&mUc
zcm%K|l=pwKuX78WEJhVCo_92j4df@l$G@YNtHx;CU48S%NJ%Z|-8=7I!LMb5&kj%H
zhS-+|o=WoMOvG!E4QJQ~z)OqQ;C~$?-ZNRi3^l2%u7hKgJi@QZf>htU=5>!qd$*R1
zpO)e-Qh{n;R?AU!_fAB$4)Toi*XXbPxP@&ixr|M3N|9`@nm!SLafR?u*v?T*BW`f+
zf5c4NEm1q3wHq7K9Wt0(YKQavxYMXTy45xz=gd6Z#;{3J9(mwjH~4uFulhH0j+M#D
zgLbRVODX~IO>97tyNZtck@c^`1XPt5HMwG*D2K=?H-^ol=Ig2B?(ND<b>h}I;dNdH
z@NQ58CT@Ggrph$uKNLA5ygTk5ro|#V%^-{SoPV@pLl*F6?uUaUoY!2YE|ZdytGi$N
z&_7=?**@timp||KtVH@1SN;a|40RDhm4Lw@?2sl$_PJfhV5_030V3wnG=Q?p2ko2v
zZw>bs4z|t={jpgWOD#kXTfmRUV&LHspcc=`c+6(<Z-R;@d7QyBNCu(~J@RCjz_~6&
zF}PG;3!ub+TRfS1${}^lpsLi8()LDs&FyaC+zzVUOebTmg(P*l?Zu*4fNC|H0#6^g
z9QEg+PQRXhS2V3>R=h*LUGx`oCZ6wBUvPB&b<7!w8YP>O1xFUc+rxPrcXDpJ`0gzr
zbne{$wH|r1K!Iw|LrI8|htB<&pTIDPl9wpGGRhPxzYGQ$USF92SQ!!=fpUH2VxZ4`
zzSJx>FgeyZMXdae5m$%AME7!~JuqTQ3)0Oa0~E8|cz4Z6_@}A~MoL$|?~wBs1@#{#
zz+e2e3eT={ToohPDsnCEY=FGBhPPcgH{9Yd5+K|aUkv2VDvx}M%D%-Qa2^#?oH=)*
zI<M#0FnH+gNa9eO*-)GzU2@P<&ZI5K;{C2doKwLK6ca^vz8&mq9%q8cB)g$f?`9qh
z)f+XfA#gQy0#=HlR^AUM+sP}i>~L}R==ba4$nYS$PfTp(otQk(3t=wc`GX$nw1A-N
zx*VP|am{r)Wq7juKu9m&1d+|Q!I;v)XK^oF#^5jR5HildXxo13u8$Nd(pT-<9H-)@
z|D+Ul7~KjwPTy6{=__tB{i|fUbU^ZvMM(_1X2gJ!*_w4B6Fb+nOJ2o<J>?tWO@#!L
z(Fu&gr&Ash0fTwNx)?kR3ct`gTAs0K2V3;K&Eys8c6r70*DUS;W}&<JdEw!I%|gc2
zT~S|uvhLvEV04!Z9=Ix8W@Wux!Xob7qs#wwWvOh=Cn~Wfkzu{+(0%5Uu-f~qp?hQd
zx#JV>dPWMfs75ib#443{<7`Scj~sDLJ3Q+S(Uz7)+t){d(H7Jju|XDTXD}#g7NTay
z4Pm_^fSRSA9qK3<=pS>^v66If;NyfX=8>MEm9UUDUmoz{O1O360JREzd05VS`R=L8
zN!bbWM~?nx{G$67f>7wx>MQP6Q-EJXN8N)Azg&ib;^sfJ+#5;hlCQ7E+=+Ni_sO_^
z^|-KAhu^XNz>$Go?sTJXuq8b7!M7)R%gdnJ-nVChseb}6CGF&qc&8zs*k7^>{m#<Y
zIFp>z;!(|kt)}!64c&f^B1`F4h{Zjc9L!?C{;18+Y)uMJI6IoEV~wZrvALV~$n4Cl
zfnyXA@#VJ09TcXjcA?K>_VVXGx+7D*3Rdp<EShfz@-eyi^ak{~;L}{WfI0$zS#$lN
zl7xF9fP-ky6J$y#yeVVZ=m?~nrSh)f-51+Atl(c-%wUo6sq!BU5a0K6jO4%hn9J{I
z#V^0&E!ltNMkmT}Ofj$;F8M`){AgXHKXi-%Re}7|uX|(^(N0E%*e(O>plFj5&E>>%
zLkxN9_1fhS4_g4Yw+?a|Yj5^*OsLGNTNR;0Co1YiViuF7!h%Ok%m%4}(XIy^Q@iZ8
zaV3*}5K8h|$RDoL0y(BtJW#mGF3}1^fI<jSQty?r#nbAmQ0Mgw>n_`a{7oW192+$I
zt1;s#eF4>f_(HfX>!n;y$NA$lRsbT?zxfaE#`?XX>P`J0d#bL%E8}*L9xa*J<@V*A
zW#w@cD<IyYEIv9veIo@EVG&#v!nWJ%CUqMq&Pkilfub(ys`1;aL)4;fGoKmyR-M7i
zG<3?INO^bXgBX@Om<5~Lm@66o@`v*PdjX{+$GKEm;H2EUowr!r6Y0e{@b4ky^)F|a
z3Bzrp39*=T3cvfz-WeDh(o!G~3iD833zheGq#P@Gt*GH<US&V^Sq)39HpM>q+_^tw
zvxZ^BuMZ^6ss8?LU<2I9fL)=w%^&?(h5fK_$h8Np#A@Wh^hC_(jYS_*8(<b*{cz|I
zh()lulsHFa^a^wwD+BqCo{$4Z;J?mHB<fB?ADm@jRNd_3#%OZr04VY{i+Y}he*R;0
zF>m#X5spt7iAK%CCk3WGL0@;VN@dL>!V3(G_tpe+2#UgZhB+t+tINtzquSD=(}&9R
z`pjRkyh>Hlo)E3}uGn1xdYsbf#F32@KDFZ~Ex%LP?Rz;7^#M1CxkpvBLvFTv6D{tZ
z;7cZt!{2!m{{&o|xAQW;zY#xiqtK>%^v<OtC=g3ZFF8tucaly@JyNNZlH28;{m}+z
ze2n6iaHbek_StEu%)~GIbNS+6O^zRneDm!b!y+6+g*xD?JP00T->l(y^vFa?TU)#S
z8`rm=V-D)INoM>dp}>6_O0t{uUW1=C4%f1%W~xhtK4_L2LqD84y5wPenSehHfVX)}
zS1lU!s$W=Am0aDn2iXq0QpE+8;7N5yqZg4;G>(T)bYG<s+89Er9*y;(g?O#_eiV<(
zA%ZLg&NfJyjYTf8Na~kj_ax6`Y`)n0%k-^O-K5wAzE@y@{hk{}CRyAp_($VC{7JtF
zv6UxK!7fF0VZOEPWlyK4=Q<LsGQ+;?@CGB)WxMj>Df|lamm#f=={#o48m9DJShbUn
z2;*v_8K~0N2U8NUs_`@xUL1|)Gq(YY3H5WNik=YGBCa+_Ciox(kQMXxRe5g%0XDb}
zftK5^nZIxPWUHdPyZZo`>59HbGAP@oqYOthwK^$anGY4I3X$?ZFc^+l+yr0^Q9wfG
zE_RM^f{^bY;+nbvfE^riQkNO<0ZimWkkePR78TKYujE~RRh--$FR+e&H~0b0Iv=Y)
zL*B=sqBj|V&|)}$(dks-O=JDjhx-234!Aft?oYV6OC-GB9ZtL8E|Azk5-r2nJcK-K
zH<t4$`JANE-8fafdk75eMtULH{kSwMH=7iTB#>M<-j`jGUU#to((cIv><i~Rsg5dd
zUu0OU#->;6WLN0U^#Vfp>o?Dh5w(@j@^#i=z8c})cMj7<LP@(J6E~hH>ES<0@+QH%
zfBzXLD{GBO+GE0LBybtAeskyQ!-xGs;N*i8&(3#Ic|wVdR8=PiztVT(UT|W!v+6k6
zrh=-nc0Gk-pBP^{-j*@|^aqgjqFzLqQ)+#WSPQJXLJ5WXPI6fz%RbRPjp!%&KP8%5
zsS@*KyUBa_M4$ZDlW*@4r#Rh^#A;fJL?tXn>@VC!@b4gb%1rWUl=I(;GlH_eqhX*+
zuexxhodhDJ#X4{0k&ia6>;!o@%7lLL?INoyjUXNm>z#>qu5BypnVu%<L~=>h>M1Pk
zw_`4u)h`4R_r<tgf^X0LbFQccED?Nx&s!{k!t8NAd`?v>D#&8I)WO>Nb7RU$<;swo
zRE_Iy>E~%oT5<30{ml0)ucSolRM2DJ;`JD>IQH9-;fFHOP%|^XiY+mp+Tr2mRw%I?
zr_WN$jl!q%Z}(ZGlKQAjCt%M^iO4gOjgp;UEp0z06qXr3b`D>i*w;IwKC86)d|dMz
z@g~@HsT147Dgu{FaVI(v3d18NBL?CETX9}gf;XpF!cq4E@r6t&>G2i}PLlaABRf#R
zw%|f+f12!0YEs9|WXoCqD!FmEv(2ddAkoev&0cD#LVR^X#mW@+Ez&e41M0MS3q|&q
zyNb2-Bs)|mgh4L>$9s(o@5y@C5K5!${l1~j;+aOCM930Tie5x!p-@zpv3zKQA5Obq
zsb+R;7|06<x-!6>RnCeNo9iC0z1*#sBJJKEW6>tuJ~-^+_1ZfLXRun^<9m;O<n{h!
zwpkvuiVXNu-%fp0x080?^w|Y@129iJ1C!ef=rS{RDhxCVzvD*}ZMlXNqHsQ8i_CjO
z_zylM^T^q-qp65zQ7<IjY{0bVJ{oJR2xaxQj%dB83c(b?Q52(I`a*Z}8jjQKDluxV
zNzYH|yv^2w%rG83%JQ}MW?^={%2Er@eJZHOGHjjuB$NwwGBvv;ai}7J1gqWE3Q8^P
z#vys0c&cWp-|M&+KjVUkV;nw(cW9;A7R%)7bS?u}6FBoAnI>1>+lh?ns|_#JBV$Tb
zOn49r(Ri#{{u6d;I1=SyH02r&L;Cpom5-2|9P#6SD=hUV6z0M1p1~Ckt#;j$KKwKr
zzinTV8{j;xv$}4>=+T-9jqTHDsyfY`VG2>aL-d#$xwjUL+bkEdxh@yMmi{ZGIO{a3
z*GRUU*x(r2qpZp4kw5c`@PSpe0El=gj+zW%5!M#1=5TbhzhwV<x)^#iA-Agaxs#G@
zZ7t72gRD<D=D|qGDbuFSW+(IFb6+grTFY!VKGWEM0U`IC@@SSoNkR*RafT}>zlb@S
z$Kp{b&I*Y}k=V;a@U*Zv4wb;Dd@bftX5ooZ4okPo>7%L)>`$kc08gak*26QlCi8MG
zo~x7}m*^mI&q6zM$=8ryc!Ea2DnFibbijY2m~WLyW&}x!hK7c&n_Gyw+SS{tW4%e`
zFT9tOjdQe{l#~QJIs%<Y?0yP{ampB<9NABHlsfb!&Bai!9a;}Nn9v?UnQPBn9v7FR
zn^;wSi<3hhU}dVMe2ZXKd9Lez#6>a)`EDZf{!QF)rdNLkmAe9P7Gtcr6aWZaf_q>3
zN><$#a+_y*Digas9Z@n>^WGmnGt1SU_~uVgRx*8NImT*L%?`q$5_)Yl)`;586rE#R
zt5}uqFu+H0*!yUo6^nkvwX#W7jai4$s^+)^BLdPkKIRH@J$<&!05&h?#4JG{tkiY&
zH?bZlp9yZ1HR{hYOqKN0qI>*!n0LMJc4BJ|&mOT(UC)4dte!=Etve5P1R{~_fl*tu
z18P@dz?ocyE~Jp0Z=u{QZg@WwDh#b%h|@=&R;+Bf>`hc6IPt1q=;<NePWb)Jo>=M<
zWy=`{uNX?g@0#WS1jrsOvXfgDwQoT6HYc8aj!H;+KN=^P3+LG3VCr%H(@lT-Ia9Oh
z_l*^-Xw93y@Jzm<Ok)-&EATDzZd5Gi-Cp4TTB;2y1XZ{@LFQZO)b>|~r*|y+nG9!s
zZW3&Dyd&vcF&S}|Z!YOQsYqZy>0?W4XW`+Sr#tOkOkcJy*?AU&Z0PDOIT`3oX3KDA
zX|$U&pEeGB)AMdZ405OaYp_Ji077SxycR0uQJ!p1?0o9cFgw<oLckNfv<kP-Y6FK0
zMML?pDwIN>Z!LHEr+)8T(ye}7OfG2qizIq?u{Tx~rrAa?k+_2PlL2}d>N>ZpI!uLC
zc9!Y2M5N9ISv#2s(osm%UN`H{WZlPcQsO?Yu8&EE=D7SiTEZ-cTGzgTi13(b>z#te
z#iCA5Gw!-uhxE<$f9#tH7WZf=q7upn&#o*Fof(@Vs=_(?jy@7o$?lf1HGSNBAPyjw
zY>eDPvz!i^E-rxP07BGyC2%l_csN77n6>;L=ybwgj|`NEv*$&vE?`U9Aga|{ObmE!
zjq<3f_p&dZo5INSqfAp7KEW~ON1QaNVj}u=<kb}#!=OoXG-Ve3v!M0+<oHz@dLHeO
z{PTe)>q}&uj*I&!QC&lX-E#J3VA$tp>YMKp-9ydttd?<vMl$V}5cpU>I^zV-vY8aC
zbCfcxAe}sk9?L?ODD%se4%WR6%m<sqjG(Fy{0HX1Ft~fHFsrqPSX?INh2DKCq&&6S
zKe%-KiVci@SBdv7mr&y4<A33(@NnGIym8cKwzB=eCg@}fp{THNIP)?5^&)4~QUI7K
zG!)FfIG8<QoReq0Hxm6R_VLfQO~YmwV#iH$qwjepL=*O~tL@z^(RamGF2ViQAhQ)@
zN6q>i3-UpC4K8H1(<o8qI9+tf_h?v}sn*fB*?W@m64!mbafY|ijrpSVQi8Wo8+H=B
zmy5Fg8CjT<)nuT7;U+1SS8)^YJ$m%;dl5!*EyCC~qmYsH1vM{9yC28HhnzE1(39ue
z)I0|hSix=YB8Aa~4rZ#AQ#C?oa;5u(WY6^L2Wd#DOA0(DP+;Y5YhXt4U0ndC%jK^s
zj9FQuW=09S428|U=7m`p7ZJ)XhidCtyf2y+7vf))_{77z?1`QjS7fq+mSFL+F0Gcu
z5w&@j6doyF%Nz<Dacny(CYxz9)8bVJeF_O}kd)4Hu}D)Wf8SfJ!**zp4t0nq(m0*|
zd6=s+vblL%T2ZcnpW{3A@ld07$0(V<pbAo`Kgm4=s`r+4MS?GgjguvSz9s4bP<@#R
z#ElZVKrtcb6$cWu8QTlw<t8?1NztsL8XNu5vNwy5v4Z_T$^TUg17Z~MMCt5#b$aKG
zW97K*D#AwgXA-Pk4k+z~{Mst!#~FE6@NAWofV8~N)iWa^alhkeX(ZF_7c$m8h_tHm
zdI+)Ox$U{L<{k<~;_`0F<52N2^KJ8O<~|%LsWZ^m_xyFbCwVyMziwAzWx?p!nz>U4
zp9_5<4dEYY^ur;yRen8aqn<B*QwO;9UCZ;xZMMw}WP0OBJ%6+VI26{1Z(+RiS{`Y@
z;V&D>xVTcttqXPVaeL-cHEMq*a%iy0vo#+@w>3N%t;m&!p{e<cmG>s31J+zATw1U$
ziL8m=Mmmb_K|xuTf$VP&jg^#=W*Mk*2Wk?ps*RHj=iK0oD2LpIlsajxb0}R?w5wmg
z1aQ)eq#XezQ{GqU4);v$CC5C`q)pNa=_FHUL7n2%p&~jk!J~Y4T#JFpG4EJ5-hFT(
zeS3rz{j)_TZ4Mg(SYmR=IZca5q*_cxeAjGHTjKhfQXW4~r)h1y@8SBUv9~rp$ySD^
zNT64}v{uG=IpDRdtBv8lN?{_5n+$GaET+}w|FhAUYUH^eclgjZ!uI)<$L(htztNg?
z*27&bZ0sRm<2^}32ALPwU*bY%VdES75;5G)6`k&ut2HY;FhXcKWuXAvh$;R~&{@gG
ztKq2~<|ki;*VjtA#=pn65)C>=RxDNQlp1xKTO)*I1z(G9Rgh-y`@Y_bnns3OF`y6c
zuMVu{wi!+|@10~%$9>)H=ZRsv8};-m#D7BlWi1o>{wl-q6=9^9^*L^YNR(8Uiu$An
zZ1{_U5!6|nOf1M!%246jp=VO-yjsgUD-}HZn{QE&qUITgFsk06nvNe39|pVCA>K(i
zN~wvA_pi8T6)v+N=bg2)@??kAQI^`}?B4)BX<Ih*<L3xnolHVvJj24lSrQa;nQ-@y
z7a(Dz)gw*wM-ql5oVb?dDOyfT$T!%G$lrvK|3c_`1S0RZLyqf5s9KYBU(B4IVMo4m
z=>qVRHPNE0)u$Zq#|oA+0*6~Ig~2tC9Pd`^c(-AiC-dh+=b7MV!?7vDw(7X9v$yB_
zmx|dUN1Y+duYJsBLJe@s*h+_bh;~jv5LNZB8lB~5{InCqFjLkjzK6w)0}OF5$9^|0
zr@riaKd&7txo(vy{~p&>b$DV>!DXjfS_rlgv$M{v^j^R&12~D$Cb=#bR!wS6wY{M;
zuf4v?|8^jYk#@qPqc;gHz+-<}p90yj)T1J-f5;0Q<RD^>&)k*s86UxvJHLnKoEE5K
z5pkE~K_|QLkOweND4w7SgfO}mz|9*Usxpkpj$qG;a0iL#NB8Cvd;rR7cyXp#+NBb*
zjq}Ea%4FOO?MHD&sqcGV_irfWm7K!XG4;52?>O22@<)kMqv7ad&j#g#XrZ@lXIfr5
zcEkxM0%H!O6I`JhVaLCG{qKj(<;3wZvZO<geUHCk9dlJpu{*1J_a9=-@UvOA_R`Jt
zeN2?yW{Q*X>s%e3f7|^sx6c=Qe{Gy8(KN0Qe7f+<$^A4CJhRnTuch_uyFoZcC-ZMj
zy%Xw@(zTH01gI1<o#ZZPU?!}MaC8+`eJ_c_3OIaC4_#kiapuyuC=6y9^G%!i$Ej;o
z;VoWey1{h&o90@6t^+}x8f33>iGS7397G{$5cNm2j;`M6$Yx^Upnj#oUNcR`Cl;kL
z0Lp<K^3bbfBbe9Ff;!Sgl2Ln;Y@mqDH3a*t41Zyb$BA?PAWa~5;c+aE#hdN-9qjf~
zoZu*@%wD?Lfv0TJY2OIP5QoF>p;SC(_P*{;HV}QUcj%l9`$xSMpQl;s>%9ayGfHxV
z%4L=hx3dpO?_4%e)-|Jlo}2mGP-so*6}>aq03>RON{gSAkK-l<lt={aoc3*Ejy9?e
z4hDVbVjK4ESggw_j|6ac?$%H%y~4DK?sTfr0t?LNyv(TBsVxj1WHyNVxZE*2>E+#<
z4UgRFY_@7Atat`o<5Y;woVUL}@hfT{V1yBxhh9g&e~O;mFpfyrFM*GN6T2?&!NEIk
z*B#oqmIL2Kk$rL`8A+68m`DDq%UDObKx1+}v9wjuFlt2S$c!Sou{6bb9q(&$eF>6t
zS%eKnK{Z-oA-m`}pQBv+QgD6Y#Mvd&lxQYVUdyN#Q{_#2I?L87n_h*AOZ+@L&SAOd
z>`%%J|L3RA%q-t^f`SKz)(9eg+AfS_0~Z5aM*U2n%)kb<w!7rT?%o<aJDd0O!9=VJ
zE-jH8lxsLXxfzvN`-&sZeX}2RsPM46{$TLH*5yIwGv&N_GjPf6+gQ$z=pWC?=$NpH
z64zlZ2qtAju;?{`o62Vp!l?*sD3`dTyEAy}QKn8_R98Tt*PCijmiN5B$E3H0QrV_b
zzI-uP+ri~yI^wF{#?|z2T)S#Ah&ey=StxFbd%@6k5ijKEkWai7fgQZfX~%GJcZ6p6
zk-9~7Q6*Y&i0bvlK*4Iyw_y+1!y?dE!V|Q9{P;oH;|ZGmA&$kc@Xj5DXLpIld3#>|
z@G+ZEfg*8VdmLMykI#Fj%|{DIjrX6qZG4}@OQfHkfZflVQ1psTH_l1VbQVYM<ii*I
zhj`X5$V}i|8qlo@b7AVdycmHPjm8cy?oLE&cp-8_t=!k+_8TO}iRp^1CePVKna=^5
zmXWz^iK8c(ajA%C^=}GNpK3OGzI2g+CDqjRr14%LTfY6vct3p7U6(0InE$+(7nMM3
zFc!Ou5=#b6oC_-HCpRo!+aLDovAKw+$6}s({MX{E0@i3+UJ4(!+2h76kaj@W7-}=F
zSliDBg{vi2jm?b{u(ADl_aS<vLp%5R8XKF<WR^TjR_NLSOJE#VTM3ReEt=a)eIQ+!
zNy#U8Grn^8McA+>Hg@_ZMFx5b0y*VGLU5rgHPk?Xhd6=8@WMAz+oOuQ3?HGU+0L(@
zzFj`ftn?`?c&^|1HLbv=r!$<?lQn%c9E*=BgiSY&g{z~f0jRTCn3#OETN-}~grw?o
zufwVvT*iSa^ys_kiLrdg)0gQUTdL22!W()DIH8k3unW_#J>&w70*4)u;t^Mr#_5A@
zaX;Q9=d<D8q&{;m7W@x>K?pyE3_waWUXKD3=k<Q(S}*^)_Z>VWC?IeQ9ON6s+@5QP
zv|4y0(W_3^+EEZ=)`9mQEkG0ZR}LIA&@eF%U&V&pMB=t>PBT2D$uOe%;#BE*qFwy9
zPq|`Zn1z~#MzXGgi|nyPLcmJaq9xz5pR1p}n}=E8{+>;*$0ZsR_0$uB{$^yyxcIv=
z!}ljNRvNon%_SXK{*!5IcRJhHy%rnXL#xlohe^l?)!ExEpEqc-geY2BS9UtNOMwN5
zziG_kFLHd3)}F}m9$W!ivBa{Av9joD0Wsk-5X^_P{2o9&4m5%IO~<oe-b&ICQnTN7
z8(YNV$u3161p$SkW}UI92T->>v|jN+gHcc<VG*tMpkwI`Fpc-QJep<Vy^^6O3*P4e
zo+RkS%i?X^^6DM-Z{o^hq>|YfqD}C7Wu_?soVR@Ls)FEf5o7D6RuX#naE1ljdbQU~
zw+6_PeaB$}AY<0gztPOAc@N?-ZUzhQ`krA&uWC6uxd|`o&)pjAf<g7q9TLW1mthJ$
z_9v5eHcWKjJ^=OhdpbgpHL<IX&JZ;KSDO+}yIs6Yl}b{$1Ao%%X=UE3LSzkMxnTE`
zjEKG`8V1I2VX~8-$TT^xty>P&l(}4pPbJ^zAnQt&b7Fg0*LWn5l5PjxiyvqQ7_*iz
zy|WNnzc58{N@6mGEcM(-4{l4|<u(qh)xmS(d+m%lMQ*FnnDVULE^Y86jLE@mATdit
zz!LFOtoa!fAnB`rHiMZ9f7EJ~^6&S>EVtS>Zyp$K7HkJG4q*)~-b3BnHW7~A+aAi7
z^&>wr=o#CCkdc!M=<p8?((*|&Txu>Y%IPUQn3DU&zlG5aGcV`zJ9A%$kgMG2$DsNK
z3@g)Tdsc!4PmkWn(cvzWj`7m!o2A=*`tZSN>gPv-;;p%^IP1c>_*Hu?T*g<a-7$q#
z=F7Ddl{3kel=kns;P%+v(i8kH?Kc%inR4%w^ElM%y2ENU`ZQJ?B-B$B?47OJ{&7@T
zrUG|F8sG{>KQtKyf-s5TZ<f|@o>Jx$i<q4S>nwqjw(zaqaJKf=@K6Q*C}QNm(+2yV
zG8Kq{5bTNkIo-qSu=5!*YMkGBX5%#~lv?|_FfuQrBLYn2@e+rssK17$QI;tDx0N7U
zU@W)Yc;ZQ#^D5I={WMTPY%A#S2hPoCgb1jw#TRVMi+9pFZ_S4Cj5}+_mQ?(3wlXD8
zfbNLL>}?XSQ9JfU$<GYrvq_(#9(L7WuUCudPb5IuH&0sGjgI@#PAKnm3-q+_+zccx
zMiPYtZHF0j%U>#u8qlP!i(FWEcHyoviM~J5>}!*k9eQqh9~b|Thvw6dK>?XxbskTP
zj(uUuK(k$L?<VK{!Q$5d_Vp*s-JOvQZUu;9j8Wv^m@b8zf|OLqgOjz$2EJwIy)Y{y
zprvP~F|?}<nIaTn1^#6#e5R?_6_uguGRkXND9v+P{ZfdWW1QC#r5cGL0E{Kqqw}!P
zTZ%WVUo@&cV@!k|msetsd`|VM{m3B{QCz9kV%Q}#GdkU@Da<>s5ptA?nHUPRjf8UX
zpGEj)&9z0zYmL?$@-Oa-%g!d(2e-1ERJ4Dx@OV~iKcdF|b$_e?g7i?}2Yd9)KQwBK
zj2c;6T1HFMX;x>}VgxwVP~lSMQ0I2A?9i6c%%WeSBSloSUp4(X>w0rF1@^S#@PvOT
z%dpyGvSAG}2;dUr_ZA?-nMb$>0dP%MU2-!feRVJ$xW;j~i~p(?UvPfZny9{)`H~ZV
zsIP+N-3DiA1By>OO4&?wS;R!r)_jr2oC>(hd5Lxz5p$02I$){cq6r>5xK&RN!Fa?v
zF*FCIJC063;MXz<{CKzYxY#Z7c>Pc^o;nBnt6}us)}+e5bPZ}r?o?)Pjyf^W&A~L^
zLC8WX>rIdS#v3C!N6d^b0C~pqYR&o02iN+>Id$$xfURw1h3UY`&bg)jY^{dg4yn8m
zt9#f>l`1ZBhYKp_yyd9#gvjkXIJT%rwwgojsdgivXCy63*Q2Y!o5I5tgQ%q>zE)2z
zCUj;LtD5oUw=#}S@_W4Tn*C$0j*%8xr-ZVN2BsqB+<Qr`R*qdCN;U-mYNIp2RA+GQ
zc?V>)0e!`_**&OM4`>5E(MIIz^=)m`CQkqibQ2Ru*7*Q$f$~CXx{P=$k=5y!#Wd;=
zBCiU3>f63;b9B3Ep#Fm2qd-8F)ejMh^6{*Q?Q;NekA`WbGAjX9PXS62lA)K|{Fpj@
zHGw;1c3H3Tpr&o=PK%*H4a3^SQuO!F^Dc$>(x`V0GUa!q8Rq7H5&l;2GVs#InmG{w
z*JOjrCBQ6Jk-KKx&+^oZOs2HgkCeGz@)P+4wU9iB(i(1?$U?|gzqi-U;L9W0VNu$U
ztMKRY$Qig{Q?#?x&(`W3#cFsmtYRo_J1Jn*wh%D?6DxnN4c5-fza^GxegclefTzs*
zE7n9%)h5nc((!G*N-(KJ&_yzp?HB&8M%@#%PIE7NZNK}8i{0|qLHq=C_vGaE=Iwn9
zbaXdL0)qX5Aj{1Cppb+MvIQuz0C(yvJ9m>^7<j?+B+H=DWXu<~Xke|=`GY~Hq3_my
zKJ&K;Va~9X&kn%2VLu1TaNAvf8M#;SD;mXYL)+$H&(jXIS>v=Wa)f5Xh}zmcGuk7u
z026mJ#)+iQGmK%|zj$@O6W+&vbSN_uMS!Wu{ZYW-@xna%*j^gzupc`GWG>)f0ssZ9
zSa)#jwy5_hyH!3#N}VF%#28eBB&&B{5WnGHx9)Uwn;1Xo-98d3(9<K+=}`h^EImRv
zu2QoJJUx!*?m{S-n`fIygg|7bsBPrrvLhbrJSSbeyYjPfT<cC?QN$#*>>|wV<HwIS
zI2!sjP9I-OE4+nQWJXk`nukHFHnCBVA&bTN4fg3sC<?(i?EcQ;Pg5Pk*FpAJ*tk06
z6eK5ML0e2Yt!~jrO$Q|C7m7CY!1~m~-dGa1?CR(Sa3|l`JEQG*&<Ru4x?RPI2=>fL
z>8WS-iD{Ph*$kmF(A4nIQONy?a*eZT=>05hk#9whSk7`r=!Anbqh{iNS}`jv-w|mR
zYg#Jy-;F&{{wk+?yPf1q{n~1Q$<|xb?&5F#waK<qvV!iFN<#u$UE|Zz8DCu7@~UgR
zdF{|nII$a27!>1~O-&g9+x>1=J}Z%rzU)>V!EC6BDOO@W{y6fRnjP-`0C=Js{m7Qr
z|E%0G{rl$PLDw5(3B}g*dSR-`CQYYil-AMj`d~8=-rf9)HdUt9VO0-?a(|ZlPWoq}
z`$BQ|EKK>CBPFM{#-b+}7Coj67l%ra8kvZsAiK4m*0G<bP|TT9y{Ko5{G<Fs8@wpU
z?!{z-{dOJP(R=#-O71(IsS^C9>+$!9h)U#DiUtD~Y(R=fqje;Bmtv(B!C5dDnIpQ$
zpR~nL;(lwEC=IzK4~_XTxu`iB(|19^<v%47k07q<RPOE`zMXGzLey?rP<-V`+b-;w
z?NrPa&cKNutcUh)<#D%-d*Db%&x52&f3v`D?B^Jc$iVgpXG;~~ZLHXCt}3ls%+Vb;
zN_}Zm5@HwSZ*HyB5cO5nH*h5tsaFE6{)u!G$CF$-AJ+NH?e*DeZwZY|n-0#fGb(3)
z2%y+ZDC@Pz)+*Gcui4KhSdj0a?SDnrX<GjPJXh%U<cOBnN#yLYXrD%E$>``lJp)zo
ztTUXG(^iaFf_$&LQ2O0qRN@ih(0?{V6EfD}e%4`5;)1-ng-FaAMRtyVuhH~S*7`NG
zWgJKz4WO-O(VB?~9>;Xf$Kx4cJB-B^wh8;U2mO@xCT{9@ve%s=ll;|&Igu|jwttL#
zij>Z1cAdamyu2HFh!x26Mq0}sT*~-yh~zra{RDpIhg$33c={r!NcD4RFPaPZIU0J5
znXEJ`WI^M)k~CXsP|;GsI2@VZw$5oSbYLRcLScl}V9vMjcMZL^PAa$C(}L&veO|h%
zMP%Rm8p)*Isp$O<wY0ghQK)}wX^vO;&>>6?wwqtH+AU${0UsTBp;g?79Cz9$)O_NY
zTx4no8|~dxTkM@PHtj9=7>?lO8e99q;RBib#Ymy$5XJ9;6SW+x%LXw%eRK|d*q(fj
zbs#mX+y8BV+rq?$tk6A_=uO%pRQ|q^S^N1`KW^q}*SMyqq&=5`Q^BTB$RtkvSdIy?
zqa)UXXDlG(vIG`OQJF0MDC3%C;}}aB`czHjA((X~Oyv2C57}-RU3Tl^u4}v;>zdrH
zrG=1G`^|-~Z!&QA{*j;{bxdRJaOr-M_wr%f!;;lez8)YpJeJII4*wCx+s+hsmwxzZ
zr|;8nce+#0ccdQu%9*@lK2-bW6Oz;E!O3zldWf_j2o_F9gl8373(~tvu>~o9()5;C
zXdfH#v=$5oSAJ+<1*a#|GGAUaFJ*(u=8+}4Y4DW#*5$SFo}qZwU|~xHmBxb#v1(M)
z1ay|Wdma2)5mO7C5;?azWrauN(I3wyVR$pO8l`=tu67=M8FqJpTzrCMi+qPyk=XI@
zWrHG<O7h$CDT_zxR9z92d26+jmFbE2(OCIo+;kK2b%;4u5}g{X+c=pI$R?ye299e_
z@LHV;&`-K7RsKVM|GD2jMKUmx*f=cu8~m&J=bgdi=~v%B@Ef&<c37`94a7a<isPky
z#mg|%=(k7tAQKkPU}gDDE$gu$Fx{1M)b(osAwIcGwDV2T%*<c23U{aDh1?|=M?&M)
zLv1OxP?Sw>?N?hzzJa_bmCJpV*)7TGex&hsAm8`5P>ddXLfQ|>MO(T|r%cD_ksj;S
z1!yIXlAPV$0jqCn+$8;*82&cv;mTCN<hZ1^0jAL6j&`;OEf^mqaVXQkiV2|~cEbo^
zbY`)U-8?`2Z%)%v8-d-xY+oY%)tYS&DVZ=a{Z5W8ZZNvl3>{SYN>X189ncp5h9{79
zf$9jZ_5~Z2(5btxLnu!HJu9`V^nIG~b^+U7h^(5VZR?sCE}KvW>-1761z2i1PS=xF
zwe|)t*q!CoV%|J+Ld;eql+gzmyUDbhk~n_%Ato_@o62LRSw>jomU>G)Nw>n0mfYMX
zaFVFV==kNP`ci28Q<COD#7pU{^+vsvGa+V9=GuOSD0y`L{S_$^9i0G#8P=}(C>w#s
zPa!#`Qq~8oHc3kQHo-M#E8t;UlWLlGT8~J5EPkTRG{h15tA(y-i|1?Siu){RF^dHo
zL=zW?ljJX3W20TnZRqs{=B?P(2VG4pq3*cVKNo{jbec;)%d*WE{<Oo`gR95e|Fp<*
z=Rv{L*|3{lxNV^cdFdj$2?Gyi7&hjFc^c{c52fWv3S_eG8I*mi1i=fZhv55rQ$~WI
zp>CzIyyx!>t9aA%1!_HhljKlAHAXWV9J)1**+qp5Y)Y1%u#P+tU}tX=XMcmdyO(O5
zL#8sy*GT_Qv}Pr<W`|DfeyYHsEmPc?pzD&NtK(XRkhj3X_PS)O{mQM*o!e4TCsDg2
zt*-BJbp#wW+2_0uv``7k9S%5y6yA2E{2B52#0!xrS@&nSgnkg(bGomeTMpuGq}wNj
zCC68XkYP2ztv+_yKuz~Fi_iWKRbLrb)%ScYh=g=YcS%WiNrN=fA=2I5(%s!%(%mT1
z-CVl6yLk?N)!+Z|b6*HAxclrgduGj=HG61&5IugLR#Gf9q3hakUg?x=YM6)^Hg6QZ
zlCD#1c2wmsN1+{_qcqh=k;X}gA!{7$W?Nld)oeubm1-q7+3Um!6z70uUZ;@Fb<&x0
zv%)LYYzseHXc9c~TkH$y+HTn759NF7WK;yaq*5ikWNLDK(-uQoyTxkr;|PgTBh!69
zjVFEX>PE97Hzc+{zF-Fi7`hVELGtIvL<(<y7-~jRi8hpnC$6VFLR56i9nznt0X2au
zl$<N>>HW-fVvUk*3x%J$Z3oi4O`K!1PBJN*Z1;l1VMc)w;Vz^Ccdxn0gZN+9f3o0%
zgoKz53JO<}FmtLpInZk0kG2q@SSKRXmxm17vE)Yhfr=ys33fXwIe5H<ca~H;>M%6!
zd3W+b3z#F>+%Vh}yFD8hs$>0kx>MpC@A~$26AT?9=)Y4myp<uqHyDW7xAeo_qV^Dj
zh8#z@vtZ{@mr7)Ca>%$SChpvL_G(|1x~Y6wlZ>4^npag<zaHL6KE;r!iK#~154~}r
zJmhMQ@whwZ3LGhtB3K7z!aq=e-6DNjinz*{Hzqrl8KxVCzsXMv4@XeG9rK~pWQBN=
z=@|q2W9;%#UdE4p@xg>2nE!4fmG_r$NgQMpW0VwPo^x1I_>f+hTC+Ecv0<>l<aY_t
zg!Ts!+a!^rjp(7E?4MtE&X$_(_Gd|o*<`QIn9?xNi}m<>s(PxFj9^fE2UFbKf2v+&
z_yzbiZw;pTJY5f9PBsa`c6QstEc;i#c$Y|Ch#MSiW~Yr;d)MMX=Y<RE?VyJ2!QAG4
z+k+M>5hte$_e@ZFS9+@$!SM&`Ka0$z1%^Bs58zb)F=u`?R3x4AVcYghJKFZB$;|5!
zt^}i*tM<vP)GkJaO^2>nDM*>pW@)x??hhA^R+TwTTAPJ>tq=aT`Bq35?6GEe-!p7!
zcYNa<6`+YP-DuYKw(g`<R8&TKd&TBCFHK{%Gqn`eHJL6Ae)axd^fw5zL$e~m`nq7e
z1=mEs9ls>R1KyivU{0P4D=X`gT$G$V#hu7o>7cAX!(cjgpxso6L~>xE5dIxOQvNS-
zx*}Zm8K5C8OeyJ11(S@oh_UYpl{Pl6>M+WJrsW}KEIpKMZER(I4Fw6}r+w0W<#s}#
zZ3c~Gk{S?d;`%Q<YE`eg@ZZ7)&UPk^Ucy(dW;*24BzeHNAs5!w*4COV7Lkd&Z)cMQ
zdxgRv-JFJK7wS~skrKQkt-s}SmG*q(^uBZ769$-xyAhq~@;R~kvSo5AXD>+bZt0b~
zI2?J3<mvJSu@+~O?=dm!R}~c}V+Yp)y4QG5e>dI+Iup{)rf?Pik4=A|1ur1^n9bB9
zWHdfyiX4fGlF>zl!)2Nm>mNHIHu&9q`KH#d)?g-eIJQ7hsXuk5i?qwoJTx4fz#nPG
zn>V#AL>D(^-pYNu%pysnyqXJ&GJX#ppQXcOWcTo5-Zz7Y7pDiCtS{uUgmvtank{CM
ztx{TtD67T*#OZRiq54&GE$zD5K43Vb4e1y+-OH;IB@%IB!(D1=dBc5pc&QEM-lc=X
z=bX&r;HSUkdz}5XAN0Rh?yZO1fmo-f(<${g<jF%wS0@^7dQt@1#EH$28pV8z#~5yF
zAo$2xswketWXzBeH5@et0y#q)mV07hqa;(=P7gA#rRYqync`H{dvd8SiRpT&?|%9+
zn~;%P4V8!wv6R6-ZKi5;qnt6GiToIcsDUx4r5Me0n_w+c<7sC%Nq`+@!5R_#2)0B(
zd-UIcoezw_jHEC#ffa<mrVs9|%bh=cJh_g9k+~?Z;|7=X2^^8m#-TtFK8Q?}MAGyP
zqyF%Pxr$LD)QnSIxmGjwCDw+(o``*4fB%I<QR4WTaV=-^={1eX=y&`$8ik)LcTI6P
zy~D%d$+gBGA9TDXi}QwCIU{51**!K$`|?fX2kO*Hi~U`Rf$4mw4|#THJI4K~WHD9#
z{vqWE%naCSwR*I83$}qZ8hb4!VecmwOQ<>6TOPbtH^vm~&gW?Rx6>n3ymEkX*K#EY
zL-3v44cC#=Hmr8@bfr`PsPaE|WZ!r0+#8b6JW=Qw9`$iWEKD)POkdY`8~0ouezdbX
zMz*oDTVYU_ZS5w&Ihrx4sc~DC;H-KstV+`F!9S#;Bn&h&GcS}ohxGSgf8{+%PDoH^
zzrUE&<YJfI%5@cUJ@`g70-u{Td|&jr-#&X=*jF@Em*6P3j^G`^Uq2YqfwQbHRcic!
z?$17Z@pGb_Y&Rlmah(vln_A_PywXj(12Bo6p(P0!#SwN%MA3?J?RQZ1K}DU?qCr%(
z=LFCnGIOLR06RUX@Jj&j$NUdrM73)0Qdn$hblMHr$Nf#{I7S0a=KYP4E3$bq%XB_Q
zBUkQ<O>R_89+!~L4hNzI5$&I5XLjwFGw+d-*``v0t<nsToq>s6l4E0I{?@{9__OB<
z*w+Kgu>oD{U&%tovz;Xi9l7X(gI!dwHGi$|(ga5ATsIQCX>)smtlDu;_Wb~Gmx~Uo
z+{M*y^u##V<iVwH)t3o96mr|h?C$2{3ZGXyFr#3dt{~wI_m$7Va=zpu>NyPe<jo_C
z3(CtRTcCeWoaEk9Ag3Kql8g0_@!|&<bS@c~^K%TM_{O8`5@t%R#aiZ=5wBd4V!eh&
zDq9u()c82Tzv+oo!mqGKsf1D1|H5}`RFzJgMR(i__D@AAW(#F%{*K5$<SuUJV5Pn4
zqVGmbY$KB2#IB_Za6NRLW0K|M=oXHAk=f(Pgwh{LT3irh+r0@!qyL0zAbCbM=B4vk
zDBXBhW4?}1tWpbZzT6NKPQaT5t$+8)goDpyCBZ-OS+y<viN`7S2~;~S+tX~gY%!TD
zLanyfnp&N}6WazDM!vZ1Gw~DuM`t?F&>cA_YiOSJb5)wCjWY)FE@_F&MDoz&^#t#o
zg(Z&!2WG}++t?>!U$)}uPsp?TY;qG>?xL~mZptHh5qpZtN9JQ~SoTJfm!;NL;1J_J
z{6$q{#=tD-i!MZx+t-O*#Q^@S{lcf#(9o0$3-dOqyJu#+v)nF`$#<JO3E}*!#DC5R
zjT9Jo{YK|2<zKJ*72Fh5A2frwj95P2)=-UnZ_H4($Z_fW)xJ{0ourNpiq>FSs!Ctg
zEq^U9cz3HjF|R+Fr$n{Kl<o(Mk=h7SaO_}j3O%ABRRGmCFzGx~k9oh#kONd>k9zl1
zodJI>)@==_)TvgSU*U1tEm*b5j(r1$APV@r8X}ODZ6znbDQkBgEi+YD+iI4lx|G|@
zk*M*!7I+H>m(7Z&-UgaFX#s;Bx(js~ZYcOB{8rv*M{@c4keeT%;8_DlY+|52^r>SR
z79w6FeSic%BT5S#b%(sn=1qe%D${J!3V%%2hil8rLX2}RQ!r*H$Or#DQcO$-aD58z
zDE<G=j3gnmig@I-(V0J#kDEtl3S<=7D-mw6cRtpvs;j@65i#ac73vTY<`~verq?V{
zD3_1vmFAf@z4sXJQ5E86UMC~mq+Me*#W4*I3;Qhnf}TN3H-rMdOJ*Eeo((4lLGAL(
zjhG1wPSxTZ2=2DSD;L936x51zqJE8oJ^oWT;t)HY4K*TZF0~EZJ^PIpy1N8v%O{Ke
z?uOfO15XF87)!5?hR8R0NBKJvp~c`Yl2Es~wVU126h7I7lH5CZnG>bNS~6ZMrN2(?
zjUQWhE$sFZYrY%-xmC*jTN2(sFWX7#%U37a$>8}Og59^D2g2M5wQR-Da|-IgcgNzk
z8ILW^TsJ$w=d{AD5!Cg|kh!DxFCEm@S~ZjbfN~Qv0@WzK3t3Y`)S<5(8}yZfn#Teb
zF+z5as)wgwgfJWk`UlZten*Rq<(?)^aEKuva6>9IQvB8c9v^#{%<iPj`QmZj(Ol3r
z-)X{dIb3#6J|crb#FOerk7F1W&iiy8=cCela4m?ou9Z@0b}(>betwfunRiT^44$@x
zT%J4YKNZUKQab!?(2P3>6#hH(xinx8r%6@Z4A_61>pLcImV<@ToPlzPchxcREAx#*
zY~uQ*C~+2TWWVl3LW$Ea^r(BY`!k@faK|0Y$3l{)%+MQ*593uzMeao$xut+>jq6xR
zlLn)Ie7DrmNL~Z5%3XoD%XhULM$I+&*93fSUw1q=*FL-4-4v}l=k1~IZnRT~GlpME
zO{+}1ttC?3DTuq6O%$Q~`TCCjs#NG314T(X6vo(Te@ru(DG|Ru=FOa-7{;cPT->!S
z7{N(je+4m~?Da4|+hAb(sncXAy{|ng2Py*8e@}WZ7b&&GM#Niinf>Lzcj%2q1e{;t
z4_}e~o?jU7?1M+V6GGB~k^}V^tGR_#I9FtG0FJJljWmI9)himiuJKQ~H`=tTH+6Ar
z_WhT2ms*C4MT(kqs>z4KU=V8bn2!Y*ur$e-8q~txZ}8}X(P~#nK+x~a>mzZnbGFPF
z$tS4paUt&T`Z`!H3eK|~=B_^ShA2x2vf|neZM?5Fjgxu~$7PogY!w;rs!pJ^aNo`S
zlu9egns?C6xV$-8rD<DLT`k#f4s%sBbE8|V&|bIJ485w*Gej71<sQed9LJHi@`W7+
zoIs3!={R2|5nZj+>2PHP(p}$m<oL-J-v&CRg|GiUw?#Yq4><JdLs|J~^uOuf7(y$=
zJ#*K6VXve>B5&}t+)<am{gio@MZ8O=@NEA=d(1oQ(+cy+Gh%%4HN30UH}hm}5n+){
zov5lpAcQkS5O9anDCTCSsT<VWIgT&j7T%tU+RYr}o2xY^4O>wK5A$%zZtlg!4zBIh
z7R!D51eeBVE6~R{oWvDC^dPxSr{MkZwn)A<SWj11P)dy@KRmK7;O|`kILelz@)_v;
zklsEb7ZmDT>hF~+Y0zoqd~xycim0wnn|EJkb7rNfJH*5uy<^g6j@xb;9>?c#`h|nz
zFF$ZK1b;3hEHWWHTxKy^!>ez&s=6$MyVRru^~ipu-XBHX{KUN2IK(p5_+;l}a2Yqm
zBZJE$Y`;Gv4`Jg@vD6|}gry0TQS%TyVwA$rv}N$P1O-~MR(mZ2Cj6K%sT`Ly6rW#L
zm0X^$B11fdcr6ccF<%v&j<nxwn5K~2M{wFWXFs})oG6nYhnzhb^$n%@T<e|dpX&<#
z=Q}^hfz!iwBo&@p;rszS{Di6y+&6UEmtJp^<u75s@CE7-eOi)|zjwZ@zt=~tx90wt
z(1+7SeDuCkF8m8>)Y4N9=hQc-uy-r(e-b6@qegz(EZwi4=zeX=2kje+z~Owse0j1b
z@qTK6-p}MKvto5<GB?y!Hc<|w$LLK17Q~XU7oT28+SztZ!2@=zj9m6CMzxe)bBF&`
zvR5+Vb;XqK{D42??}^J_vLQ}H3xeoy7a)Jffmhy$gcXs;hn~IHZh1eaY(TSyVox)(
zd>v2&%`EXdnIq0s@~W+YQ{CZp+^>$&D+50~&bH~`TpWAr3eIYrqxa%)Z&VA=(ay6~
z-$kCm9&f^M;=J)jeNJEdwA-`6Wr!TM_GuH*yz=4rwBE8u9vGNwe|hjpC)JzB^o%<g
zE+Q8g3G1<Q(m(*QMBD)ys`1#&-zi!z2skn27$`yDJIy&5y=}6(D}i<TI}_8E*bC0c
zR!!>H-$}aS6td~f>6BV*+KN6zaj7vLI4<M~9dYiC#@C?}Hm=&Nk_&Dh8h18$UF$5&
zNI?A@hE@p2Ooa(jj^!2(s#OMC3PxMfD=|x*ac6j8$!wY8=TA!g=59uVlJ3f*v3&Vs
zw$GUTvce&lS(YC6!6ws>JAwh-kAz<c3Cqj<sxbrZ2DQYHSCO%9esa{om`Q?2@3CmD
z!A;tH;dXxAuDpHm%8775N=;s^XodC{5~p^k;GdRscfQ{bo*WDb3sS&6-UkCx(6Qk1
zt376hIZuxJMg;A#*0$iBYtm7#d&#$El0a}Z4{;dEhJ-uZ2d-Ei8%*E_f}eZ=hw0UK
zD*RkMrSkyn*s&?HuAXkMc*&O(llk#jmA=k=_9%O5ZzH7#2Si?ZSf%m)7_Tw;*z48f
z(yZ0%m*u@90G8KXPksXZXL;knUJn8-GWtNx)n0?gwO%7S(Jy`+!VVj+^l8;=c$uD(
zSqYQ6Htaa>0vCf*iy_?gojL()fy8HONJQK*`kW>?P1r8)3Sby)sCUN_-o0+4QX`+`
z8dbBQf3<V9ltFX1|CI;C<jdS>;Bp_!7f1d<;w2ZeQC&g%6UK6}yj!>@jAwAM4w}Qu
zx4)W)2<^m@dpeB?b5@`F!_B9gn@dDQoKm7P?TnCrwM$QJwDpC<T^eb0uXlJ41y!`*
z{oCS;BncTAgOzAiQJHLi9*i2wJZ$ppf~5ow+s=Z|jz){}57i5JN#k=Z{GLcIBK!)x
zMvfLL_0OzhZ#$yVP{YN<_K#PA7}_2igDD$%A*fsIyHl^Pjb<(sgesZS*6)Ae>N001
zlIFCN%v07C1GAZ<7F(MNxuGtq2GW_DksD!@0it5iuVbP|#`wuDV>FMKT9M`>m$gO@
z=*d96D_=+O{sUkzz-|OE{962tThJg*F!SYTUZ?&sdv7}mLQqaj@Khh>*h!2;`0h~{
z7Q5B;fx_HHPdjID*dh*&B=MPOihxQ!%10>&Mc<ve>FM_-lPx-vUOMh+5()JB@1F{q
zG7yh=NCDzo;&6R3nFbib{E)$004O|=W`L{2j6*FJ0<H<7Bt<amF6d3s1}u34uJEz|
zVq2~<x~tHxF<PW&01dCn=?Z1WF&(SIb)FY9O`5_};klFi=edqTXiuQKQne-U8lAjX
zexni6IIqnI@<c`A9jHI^-s8nrC<DwdA1tgo3$3ISpUyyJDQL7w5a~;AbHjAQjhs7w
zz<z&bUezIv=0LNM#0M*?ZvAHN4Q<6%wn)?Nw)#GRXa34hZ#Ws$_C?3Bs;X*%8%{^Q
z)`+%0h8{6aTv+aDCu@DOO$XCtrWU@jN&nN5ME<H~^w8b?wWqvK{$(_GiBeA9EtA`=
zZN5r>8e4*mcB@2K-`JQpQ1DIMu$C{$`E|bk>`}l(F%s3<iZ@lLz*C#gcyFz0ln=zG
zp74X~F4!fF(cNkIb|bB8Ra_^;I*?i6amHCWxFh~}%uvEm1pI$&cZU#6=4j6Ub+w9w
zC#Vq|mkV1dSEBJ6AL}d_!OjhQYF6tzvCTt|@Iz3goD(DU5d7wOQ@scfiIPTdXGJu)
z9d|(m=_EiV2C36ljj{LhW9LoHCJXX%k2IFll<DW%mX&4X({2`ZqjNs><+1fc$p`|T
zENi}JDdg31KHa<1h~wRL|L#hx{9hA|%A%ZhI*4HpB5gb0uG%0r+<&@mecMsXoBHwa
zq+@@1R!fMl3z5=N-g_THfb$nndUbFC1Gqh)a5etR9bSRKk`lh{`aZE=K7W|#!YE%5
zR?833hj{yg%v0@r9ZbruVT&kaB+MxnXjg@I%qIjm(=RCMa&=cvGLJIW28G2UeGxe#
zo=mK2{c<X5rZai)jhJ*NO0!QR=@X3#+f>BF<5q{KofLL=H(1eO(<mlcL|GF4=3n@~
zd`wv8q<GYCxp&mhsQWb!q}RJZMaUl^+S}#!CwlZbOzqB&QS>;pjV5C>swql@9z;(V
zLuH$dR#j@bcB25r6OXWXQ03=<EyWt4C?~;gp`K9y0-!(ZxBQv|+`Qf1tg%Z5qUf*s
z>H_w3cH#z)hm(pEh#6H+yoeyw$ZNlh=WF#HQL;Ue@JF50#gJ_<!$wC}R%e2!YgD&}
zUZl}Kgd`yq1kH7GfOwV<?_b8N5u$B<)N@FI)70slzL*QdnMvH^*@|X?=P5K#kv>`_
z=HSPMXEyjqD>L;#FV=0}%Gk^lU5aW5F<*!?6@<&)(yjm`xS<0BiYFq!KqwsjWAy8u
zxpeq=&ZsQfYV|g+KbL6*#XHd}{89(_b!OXBMYXN!Z%?X~TBpQ7eAuXVK|rU~@;$m+
z%n_MNo`{rtO~$2IMDch~#CLfxpVoG_%Oqc<C~>G$F8$hQ`;<1eoL>tC?6zE+B6{S&
zFE_}!kx$*Pf757fp`B7WJ+&YA5Zi8R93364^18pPq`%RGrDW8x-BYUbE}XbM#WB{F
zfbF{=6NWTd(J8I@)EW!(RgX0q3T`p?ND3cfSPE~qEaZB?h^Nw?-2Ck9Xk8drEU)yi
z^u@k5-wWU~?)C*STMwdbwmeuqTvSdL>%yurTT)43bNPMq(J~DKrmnA7_Kc^gI~J;z
zPW!uJvzEwAxKYT(5wjSL20l$5E6{JwCF}2_Eq??57P}2Z`TUHY=Z@Mw9LkY`@Du^4
zYy5nayx_5_H`M4)4h{|%WVQ!W<;^+|Y=}a?p7$m!cZUy~`^j8gU9q`MUcuvYc+sUd
z4{pkE_B3zKPWf!~+qaJ`N%1#G<M1&>&XAHkt4Cq(NdV!WV%eRd49KxrB7(3-i(X*}
zegkH30}MJpq@5aS&+nY{B`w8<5UEblLZrK!FMV*aR2kJBp!pm*nFmBRNb~!9r|;4w
z_X%CwoNffawsU_<wtEnhUjjKB@kEAe-EqXuTsCIy_jx+Ii8)${Y16yL_$wyK=?XK&
z>*KgbyOjmH{++##>4*2xIWZ)7?H-8^xbxp9htj#axYBJ);=kuj%_od4O>h|<RVCHv
zJu#~7RdZ_*JjQ@xw#U|PC3nlQJV)awws%%;7xi>a1$|sRiUTL^JZwCHG50&;In~Tv
zuHblFZr@z$4h6LzJ_OV8a0})<KLr7kaQH>92;?j{8n%(#+4d;*_-g3WnjOCl-{9p$
zG)$lJ<0~^ZU77>5+(ta;bI|F|)N92udDXkylCj`-blHc>eD2c3658%ATF4n>sBRZ*
zx;qmiP!pRyhUgid@9yFI_H~!T-4zRs1m@grQWzgvHkr^*RrwO0PEVdZcjuA$WF1H7
z?4F*)IbE+ISj-oF{jcvs0kS&tSj3QnM7=8GIt?UVU`dd7Cp8spl%~>M`~CB?g-?;#
z=}*$iK+olf+hp=*hOqd%GFeufSawqUAjxom61Qr%Csf^SDXWw+t$7=H?fu#n!Fbc%
zn+roP<{Bn&#8R#k=1(Rn#tGmkaYMiKzlYu!Lde(z>xPoX287w1Q%=y7apO2g8#Y+t
zl=Jhe(ZsB04kCRMrD{mYO^qHelnNz+0=zme%}uh@UL(S)4dk^b{6n-!yqxG@5~DUI
z?mM$$>(+$j=(LBSopSaVP*~OWp!A*yz3DqoraMXD(Bb3s2;oH&4c2v!7Hi>DT8;0K
zHqxvOrW1|mwC8cYV>e;X?vW#dev>{-xhZuP-vdD)8$AWa6tan1_K?9la@CzQ7YEs@
z6r6ga!kgT!<o;+KGjm-jyrz1EvPIX=KRZ);O1m$=Lm?dZ;2eUevm2qih~Mv3*Xx^Y
z!%1IsCR$P{Y<=oa)a2o$N*W@5AfFU+d)}I%@6+X%A<I!WF?2j!6i&Jy>&*Q;qsr_E
z6Zc*@TEvYfmb3))<43yg6T#+iObEuHDz2p(^0e(ne_3ER{-Z19&l{fho0dzqhw86B
zHjfcS?bMZG-Hjhir}JT)ZAG}$#-V%Lk5yx~L_8I%q$!`9>zmvsj$xKLe5IBUH{8Jp
z$QdD+|Gb|YS@0X)!vK_DkAGj#5(H^$Ik;tEy;DzYjQw%CJNB*h@)-i_)$|sgJxaE#
z3w0#xvorI1Zc2IHQG$L}7MS|1kW-XM%?*Q=DhzLW@PLSC`;R%|x&<aGCzC)eKqo<V
zNN*i}`;oi4wwfjOM<f>>E*_=rG)=HkF+m^D@KU3e_EdC6xyiUzH@+!3W-=V?QN0Y1
z9aJmAuMU^$0*2FgEgQ(<{Va`@IbJur9Gdi31}<8s<irSaFAJFgWhb)7R^<k|8t94E
zIp?lcslMVihh6*D9iUN*5^Ls88cQQJPB3gsp9AU9`7vkGdUzmDP|x;fNkZB9;{5f_
z`0ap%8K>qrZ$u3Cv^*WD1?n@kA}v9Ad~HdJX$#yY9357yI<uPjf;xOpbfs2}o}5kJ
zO;yIz$2=4CI5_j78QQOGYCj=zV+R(Bma<HhzgKVDd~jGWB}kdHUy41!V~70%^axLg
z0P4*XnrGqfZ{h{`<xlpiAFb@4TP=^%JTbI9zq~1UK(|p5xv&%}3Ys1d`mD@Sz_w69
z9PB<w#>Q!rFteLtdC{W~LrO>-tCEzMn20>!rhM@wr1a8yDDbJXC6#nyW+556$&yw2
z=5gd|%l$p|Ew?`q%~9enUw;tYtPt8=Q*1CIdNkfV&6%5ui$=bSak$Ec>b4}FBcIkg
z|MAr?ME)}Q^SXW1_T7P5V`e#K=`ktR(6LEXqqZfT;MXDh9BSoqG2*goApdsfM0A=l
zKP~IBDmA5IIy0!QtkWU7uWg_KclkyeHH0S2oZvET$@<9N#ID;8>WR)E;IN9_cOQAn
z?Q+t9)`{T-J4;^GS{CqA<}Xfo1tA~bG2dRBdvNpauS9~sgBv<f{)}Wk{KTs_38&{t
zy@|gIca`9p`Z$&-B*$4O(U+3_b*jS%H#$B(5}Ck=;e9IY2blWo5MvZ1xnhEOHZvcD
zLoROLp}tmG?-Os5JFZ%@Wg0F23S<8p9j)ai>y$MEf9-agv@>hS^OS7U;ROz{s_!A^
zBCb^e8Et-k{?<wtye>?@O}RW&5mi63Vi9gHLVlb!S!z@#NyJkjA1~Z<C$Tt}t({Mk
z;Pgc?{mc``sE@sJQurccw%~T;Ol5&l*R~8mGc@VD?c;k&27;yQ^0g2xyLbk@vO!fw
zDt+!H$4|D0^aQeI8m+2qhvlk78XrY`w<+r~W(}%%^#AZGK;|Q+4<1y2l6&^+9sXZx
zrGpd(SFfD9%H4VU0(Eh1l`BW)ds}f(kk}3N0Xdcqxby&dsCqX6>@xcnbmfg(O0$@^
z1~NGjFGa@yoJ^3|C9FDF9j{0I(ZY?(tfOM}WKWbr&&Vj5lHe>HM+^G+_aIwJVvXVi
zq{SA8kZC$?nZxEf=aP&`1B<z0WZJ~mz@vpW(+1wv>%NPrQA<j0ngy#PcSJQuGjUfZ
zg$|&+hGU@#fH8O09qQ=2adC6v<PepjYqIym5=D>SM^fWCL2KpAyA(rLpB>IawqX)H
zET`Hy`b2!Iz_Qy)wQHjQnDNPc_IRTX<1krH%<6;GqhxV+i&;V=TF_)mJm-Q@uGt>@
z=7{kaL0lou)8)zWXBysR9Xj{fjpfP*SO1&A|6x#C=-J#Z(!|&QcJ4cLuj6h{CGC`n
zohP2UbKZH;<qQdREuD!%nX?WKm+1NJCGn2<J3tl3anRk4_<}5{l&F&`)<Ig+s4K6T
zLx>5JVtC8H3y4|moKSg6TXF#OLh>}8+TNYVnlXjF4{edKu&_eT9&K-{tOuv(9r%>|
z3~4!0E2_}R;<5HbCVqx|Nz-A`C%<vDcSvH6k4FH8^~ePG6GHu@wLjHfK)iFc&luRR
zM3Vz&b2RB39rmEt*_m5cbr7S+s!XGj*0u?c<$Ad<{n&(%Z@{7+^SxwJlkRgJDLR!_
zqQ&Bgg8xu7E%jz!LQ31av)ZcLwP^UZ)BOF}9G*0NZOCiv;u~^(HoD3i?k_6K*Jrd#
znGZsYeeI8jp3GYT)-~px2+`Q%+ans8$@Y9}@Q4AepvCNT$=z6x!j>Pvf_9}>PvzBx
z9_SNZra7vjK|}oYYa&7&{ef=Y)PG{iEAV{rOz!4K5_R>Z)DKM`Lx`vKv76`F8(Sax
zo2dLR*0esPsX6jo++{%#bBo%*P0R|}U9)vLt=JZ$P<H2ptWhMzNq;s~4BELiCJ?nJ
z5szkDayS^Zey{Q?t!lGZq)K1~Fteh5(KtAS<z`#$KEhJj#?;jXa|}%qVq!F8CEs-b
z;Ky7SbLb6SCK2#D<;IQ`YCK-P`{DgV0@CL8{iYaWX5MK#1*gXi1W&_rWG;fuRPtxB
ze%qaSfV=MH@Ud;F!Z(yo&-o6jk_GPExmeu!)n4G#))LEO=+M~+L=vixHL(tK>RF-0
zX#4d2`L^;$f_v=y>HxWCN#_){c1J;c-esF0#(GXI`+@I8mKTo4TXsX6T@F18Xdslj
z$3qt7<JU)*NLq|_4TN9uI$xk|4ySM}bq5g#Yq7h^B_(T<oPI^Vk|E&B3;wKaxkIVC
zNxYK);Drkul)cCB`<t6pRKEg|5;+sogc3#8BYnRZ=#9p+jZnuW+>C?8$_xYPL{z)G
zUszPtL{yhcX3<q1VemuDFomE)9<$5YtE#O3SoB277hbN(>K}6(8tFwzz*hm>q|*BJ
zJhl&8sZ5n90lY;uE3W^>b91zNXQw;rzG(u-0<!W|TF^QYm|)xT6VyBtD>IT4CYbY(
zn6)l)&iO`P0!8-oC~x>-Qym#pK*HL7vjuCdsr4J9z9!+<-WP;OSXjcQ@nus($;@n_
zT~3%+tN$@lC}kl(F-Jf7dnNPuy)tJUcmrHq3&Brl4c`4c^JT4V{WqETQugt(MzJ!i
z&*ilts9U%iuG1mgN3Wn#AuDhnUP}t<GUheMl`0q;^BEY~o%?Ywz=p6~uZyh4iW$o+
zj7*PFA<*#!+UQuA-(=KI52s6Mst-g}9H7jm9`UsJ*}B?(*;I(+01j*p8nf%0Ms%ok
z1_(AMVNknl-OT#7X~?>+9i&v5be#`@oB4)?rROc!+&2u|EFjNGqz7BSg&lRnB4PXk
zxGEIEr*WNZS&?&6DnRpd>Y^Lvi6r?}mkU_uaYG_kSO+(Db9FB&F~_T-tGyrhBLrF(
zj#I|=(dpRzb@ApH^F+YLiot-hI3pov&-aTsNU5_-Up?kVXf7}!Q89?Sgc5DC0Fd#!
znNvbJ|I&pOn5`Ni7}Xe~>DfX>T8blwQLTJ@#*+@}>TLzL023FuNjNlk4TzQ+9AGjk
zgaF2o)_Mw==`Z8R17?_BMWrsuikuhsvosv*@LLt;@b>{_a?|buVJ20>;r)*e(sgbe
z`f7?QaN<1MJu~3MN9nHE2gjH@@6fShPN#ORZ>&*Mphxa!^?W#hrNe_CaqoN>emWjt
ziDa@#TY_Hl9j+9ZaLHY}>wBr)1fh<ec1JeX9c5v8jv%bwEyx>?1e)`v#Lk`Q3NmSf
zn;^i0*W8xT69c7&3c{E58dV~{|FhnAFkrWjIh^WY%1V9&uvJt;b4uu|v3*3`x(<eE
z>e7bl0ih1z795Q4f_Dsh$v-n{)r}e=_Y2T;$*<&8j0Ub0_I8M7B}W>rP9qD*VQIxp
z0tx&u)EUd6t{E|VhK}HC?;29VwIs}x$soE|66Nq-j|?YHyPYLzkP|&E-VY7JF9#5M
z6TP29W_GqdB@vt+6t%krI)_LJ86sy0&W;XdcqI$^zA}H>4}}KIn8xcBgb}QYo-gzt
zgh<X$2zyVt`8K$!v0aCFj;uC_(mG{`K3sEioy4qg8;E3~-@I~p>UD7XlzM)Q5#@)7
zQtU6ib}2sF7%)de_z8m~Mi2hNXC7n0W-HTZpyQyUlM(RZe@W@63zsTt{t;mWK+YkZ
zk6v}5wIZ>=ZW~Ag>~0eMho66o-b_TYUhAXJOT<0sAfd>e?kjqAnt43H=0321$AMO(
zG}3dJQluWc_Yyq>?`J=MSNk!!=G9JkA^;&xz$XY458;=ab=zMj6i0<YC|C8}KlCAD
zzhg^b1Y_Ys1e=RhMrs2zgI*of;CFl*uOR*g;#Ux#g1nN`x(M>}YrdXbwnK~Uoy%fm
zK~>zuH#!x4jd~q$ZMzZ%+czh2b^Zx-by;y-sF}d3SgJIohv>F_rJ2m3!wUbrEZd*N
z1@!_+a<$602@&-_akM#Z^P*EGYCE?XEy=HiD(!LoVglLjSuWIBLme)*Ma<cm2op?2
z1@oTH|6)+s>C2%wl{u>hh;#YoGIPpySKiLr<u*J?{r9m--HfSj>nmO7ud23O7R!<}
zmK&nmWF9l_CN}s0$0FE6Mb7CD1Zu&DrYw1V$^3F%@l?%{vGHm6`4{RYYo>gmx1*lN
zFr|~#?~n)wsA<XC-rT5Kg37^!5CQ&!9HL@BD2ayj=ijQ%?-GD9IB}i((3-852d>TK
zI7_?S>-JnV{e9t~G|r4~uYD9~*wcNcY1BpQEj?xvAU_KJL|bLzrqMV(?ERr@=hW^-
zw5q?qYz|$jQX%miYoXC7piHmD#QhxUL*@CYU~&Fxtft+NjD2u;s2P2EO$!bNA<xei
zQz69#Z}-fP+Fvqd+9HdIVi+sE-I?&CYYaB+?y8TdrIy6Z_Rm&zNkq<u?F!;O&(lsy
z7rSQ$`)yn6bxCCk)Fch95si6O<?2w*k6POR8rv=toZX1=E(a0vGW|<EKVX8hZlOT0
z{om((1;#{3$Ynb0q)!W;4h2VWJ>V;X+9N#$^j9wxUw3FtANj$)6Hd$<h|681s3+SS
z(8REijD2s=@HEkI4BtawV|6vj@uF^eWPB361N4VGTea$n4Jujn{;_5&3^AfTT+cf{
zbWJX;xsq8u$fYim-W{ubl>zhx`8!arf`-o9wx0ohu<yfig(o~f4hl6suKU}o&{zte
z7u=6G?CLH#_9`A9_Yk-YX6)kBy7Z~Vk&EaKpyKPL{HmjxqUeG62YGfy03p(@KR)V<
zz5n}kaKQvp&Lo!7Bq*O~?lpg$s4<}4n=!Y#h<Yu$?5rzKXTr?D?3m1UdB_;(akr-2
z<Z#=x%GxKJ#%bYCY=td-_Tz<*>aZAt3lbWP<9!;*HTn3^ozg2OEBhhMMRi8Gu|a>4
zRju75#|9S{EqmeqppU7~HxFzvVD#DFL$n7WBalxPd_<)sm$(a7;YG~`FrhVrj>6!r
zD7<mhGSbCrIT9@@s7JSF-^~K+O-`{l`)roueq9E|y>s$uskeyves-ARfC5`0VFmz~
z_;HlU^8GJ&o1X0xVI^$KO`;M(ZoD_tc@eSjFiyxw<s(Tk+p(^#obZ_hyw6DpM?7W?
zM_RLK0~u~6NEw^oVyaQm->XITz%XAh`M-8<wSikr6~`aI)lC`$zbc_gX=wx4rcUA?
zP=DzpVZh-lAk+E(Db@Zd*rE|ydH3w}<T0I9KRQ`mXYr39Jif4?a>OnoqM{V0!F}@G
zU-z|&Rr0vSlY$V!n#NB_=&xO20X-4bdOigqKRs|sBO=u~kH?M5?m0IY7$;Ex>vMJ7
zbm?rS##;kxweIUZ?#Qddh4M+dttyfYP!@d}mpyORe4H&Zaun%$jnPc#_tMXk#e%lc
zpT2Np#FB4{9^Eb$(15B)^IX5VgR3q)-g>rop@s;{Vj}YqbAS8#^=s^`&@7+r8V!r(
zd~Da9=wzjMy;Eh_qcyJhEsQG^RIzL$t}Q$N3#U9cB@^c?bKbhB?ksC0M)|o|DT<)8
zkp3Ky*EQR;8Z1T_o%Dj8x^V;PMH;Vz{~l{0-m#ktchpQ?3ojrvKqfDr5xfugtsvm5
z6o2c<$Lg&4KV81cD**3dRP;h4|IZimchEowGTw$jk3Gx=FqxJ28+@znpA3nQMj3h3
zZc&bW(-_<H)3arFf*x|B1--iPYwg>M?Gew`nRh|<M@+Lm8k$V<z&$6iQl}{U$}M&b
zYBj?F{vHgz@n$Dvq7)Q!b=HPo7mc|L;R5{paaiGE!_b5u7HbU7)vtTIy?dN&d0P(`
zs#16_akFBNceX&crB5(vy)pFl(Z;khO&3Q(fVi|sKLF!bitzi74Nv%eM|G98S>3eQ
zdooe3Sr5#%V~QptDfrUbA5@W(dLB6i8tFb(>IFTstRvo;{~YPZrdh5ETzAY3(j}*M
z7cz>6$9+z{YPJC~H&1!Qa*K<LQ%Uc+4`U^-Z%;C13Z8-^c<vos&ux-<5@v`z8!}5(
z_twRn-OmDWqVE<1q<puvXHgKm=rjN6tP?4~aL(ai<^KKRH#`NQ1g`bEX{o-ZOJHz2
z%a~A;&iEiXQ>Q>pJtBZ#3`nLQ3{MW5Yd=>7=H*D_Wjko9P0Vz*$xOKPz^6>J-B7KW
z9<?-5hBA4enwB&?h{R#XiTmmpcS&I60i+pn0tEwf*PW}d(@_^jeV_aC;}c8m(JbT9
z?ltFdDj8}K&U7Ap2^;mdiUk_gSt)fkB?!H~Z}H@0AB76z$s<aghL1%b3-!d0H@{nQ
zadGv>f~1gp<D?(jQSw42o;0E23WOU614jnmT!1pmRc0;tYbRND11gtyn!8=y9!_B3
z4^CmGEYBDo8SF!=(oZ>af1oajMQ%x5hO4z3#MCO~)NWBZRshm)P2&$d`Tsorhp)hK
z4s){puQdA4OFlq>Az%Lrw$@zKDM@%*?;<YMy_}o++5&l97Z<wtOYJHZw6577Pl6*J
z^tKOI$=W%j#t0z!)}?d-rA_67_Q%7ew0pZ$Q=tJKK(ozY2LlJa_I>9=^!KkIC)s5^
z!8U^D8|mj*jYY<@RxG#?z777W<bVtOvRKNoT|2vEQ_YAw2d5Sy+pS^bV`nA0`>d%w
zv^F5~QjjQcsyW6fkKjhGRO>z%ZB3IOa1Oe*nd`+`iq@gkXKQ;nWpX)x?Y{}D^!_rV
z=M%R1jqGZvx5BRPWY-qw(kf7F+x?|r1lp<+$G&C(K-IsUAcP)uLjJb_zYS&=6{+%A
z0VA?~yXPtOk?R47TaD+<+aXuj<MU;jGj$s)UkK<WifD1`-&96Y53wkS<SkX;h9F_r
z3;R-(PTMTFE;&EE7raSx*V5Fez96Woug~c_r-%%zC7o?EW59-oKjMguzoUtu;FlDs
z<yBByX3N9p+k)GnQDvgmXJ?;JI79E1{LEX7X6aM}0=@+j;{93`^y)BHsu;wx&$eUF
z;n}qHbCwpV1E9Lj6R9~q@RP_tKZ==O0|ZAXA-1dyrD^6Z0Hs0-$PK3H?nRN)oh^{l
z^{;<rfVNsVx1j#d^E-(Xn#<$x|C0*=Io?Z}M++T@bVC6<CU03kui5Tu=y_+uJoUab
z{MPj1m(!&W;xQM>2tiSlhVKBcUVo}Mvdd=nvx28!hA1L_j2U<0WWL^6cQ<B5jLUJ#
zqYyM8j>MZX%~q=NDw!&la4EU8hBx^|_Fm8SBc15kRw==QMmeC$YiLuQS5erPrZw)_
z(yTG;;ic0a@0PU?Toz^YS+CPnzmiRQn-@oO0Cc;JRa1=Y0J3xI=Fx-<H^I&p5vpxH
z1wm)JQme|3zX(WWkHK1<1Uq}sQ1Nn7XP#yDge38fCoSYXT^`C&?O7zI!=h)<Lq;&2
zrK#8thp#A7TAu#LgYpyNg8{uQo!%7xFvZJ%zF<Hw<91akE5%f&iCQQ5I-KX<%bv4J
zk@3et*KwS0<VKi$RuEDIU04KPLo|xWr{@6TT4v(|W?_}MapWZ?H!3E>NAg<zjZfOh
zI+_|9M!klwV_ej~Jqpoau3iFXn%qfqk5)42ZBf?&L#E+3_h{Ggsj1J6_S3nIlfi6+
zX0r$Si+fk8pXqR5iWQZZjgM~X{k7Yy@}kK!OAXNHeylwW(>5Djjbll)--S&nMzI;;
zPG2+S*@?D2I2+yPr`1?&Lh4Tl>?*cNaO9EK$DS1qU1q%2f*AeTDA_PveOLNv`x*W*
z{H7C9pQNWASKJ#Fb3`k<aiS%s-h9@Aw)~9+4xka?qWM3RG5?Atz^u22Ae8<8J{LGb
zQ70b^Pnv8S19fO7C018MIczpZkLH~_?lLy_sZ8s>GY>gN6I<+crX6u5J>3{{hm0yT
zdQ?%r)Hf|On#F;ONzk&G^aeBah`2Z;-$2rR9Ks<msg(!6(Z{(R`hfjB05Nwlg0VN%
z4uwu7mzYhg_bepe?=1#dU1Hjukf!~p&FH%b+t|ZJAycN&B2l|PmECk{+HNl;?WWj_
z4QQn!EVSD5H0aeUnG=?KW4<i2$pj-EXi+|=6u^%x!eVBEb>2loU!XK=dBt-Mc1fa>
zuq}ywa9mpOf4cJ_B7qv;MKv^rPbmH}&FpwfL*}YpCJA}zHms7)X#x3?BV;$^3OmsC
zF&H0d_Z#?+i&hnrkPsVhW={n-SoCa)V%M9Ab++LWC#=`fXlQc+|CSmN-HBDVU-ECD
z`YD{sWxo`~G)HpF!W_|)Hn?@2wZ880&utA5o!F=w3<P0Dz0`Dne-fd<SOO{oO7Z8l
zUi_PPE~?dPnHCKtf}ud=mojdS9OurDT%e0#4#5X0uo&Ll%}cZ&^$wuBi^HArLa72J
z$X9@HOz}r6Hc$}v2S{XNcFXrrRaxtMWTwW$ipS7&jjO#LA;t9B=WcaKFH{IMxJf!R
z-~L1}>(+}x$y<@s3vNfzHzezYC;Ip4fQAVSWDn}vrh1t5msAgZIBe$Idw9IplfsOU
zX2nk}O;t;|#v%&2cGzuvh9x6$T?~fTGc}b2bekT>456oxpx#l(>5qrOekFDQ<f}?q
zg<&n~s|uIu`J*BPPUb7{K4L(Jt2%3i`hO5VKmu`tA*0W<RrRMfaz(%C9fmcauUch9
zt!&v%ljv8-?4lsV!E>?4&NL%uw;pECOBH*-&%ZplIAzj+{Ke&RUDsOokmVb0{zjDW
z=ehVqFvQZo&3;D>7Q6CcI?h}BpNlvq&fE&QQ9A;(wAj$35ngCa_{H)?kT&oupYr<S
zLw5lNbv{3JliEIHObf;7l-n!!s@BJ+Rh)QLZKcM((_t+Poupi=X{%#XMXTb3JH;pJ
z`%M5j7FsH+C_ufu<=Y>!)<*`O&#MavSLW7|;a-3C8NiH%9B&`wOfV#a2t#ANCZ8_d
zK2tO~#eYxIWha@dvmFVK9ix5f_7>UWTafVb(z7gAsR`baJ`aEEgipD5i_Thfe9(#U
z1K7`QA^xG^6~k7BQfRl|?^F-P>s8t(tA>9CAwo@<LT85ux#TiQuRhv9e%Nq(c6AZ}
zxtJHE<9*MQu5n!j$MEf_5xi`67A-n%vFS^mP271$)!E=<jxtX^5e~PM!U4w86OeIf
z(AEo$2*KaM2nc%WLhXOEBES8t1;ivS(i0_1{bynBZs|-oF7|KL*{)|ftxa-xn#bPw
z#n|@6IL*r#`^!M?X1rvVvE$Q>2x9Q1q^qtBB%r9$tWcqZUWkP*1gSoJXUjwPDS!F1
zk<b9%4)Xe8{O=IukY^ekpNJO8(Icla>4Jke>I5_>?i9*U(@Kqkh_TCw(pdp5Damjo
z>w1M0Ne!UpnQJhB9ZF)P-<!Uizk2Zgp@5NIP<hP+N>3I+J3)a!12=i%^O#=m`fZa2
z`~bs)MMDe>-u~|^VM#N$5>G{o-q3M>WPJ}VFW7(so0_AtLbD&=C)Jt9Vb<j0KwgGr
zt{ATNjR^q!ql_8o8%(Y`%rh?WGT_6NQeV{jF}i@)lrO?Rgs^VdT2zYt@aE;{0h3a^
zq+h+2{^x|>@qn?o2J%USc_gi5zCkwXsFX<CiLZ00t2F1Vm3Kxs5KhH27l0n8nA}&k
zh`ff=K5Y7oBaWIQSBZ%O%56I@yEuie{>C4SEPF0?qnh!RodN0PWaYkyGk1INnf|5L
zqyVvI39v_f+W}kxgtgFU>)rv@&f#qu>7CyDg8ST1&V`d<d->CD7+gny_|lkn#*x=$
zrvc9}OVkSE&dr}8=`gwLqrl1*@JL{*hOLdI@7Dm!s}KY5DXk3%`CqpxHyDek7oUWb
z2Ntpy7HaRW%1c8c7YNv~#<ytw<-1J1o%z3!8DSjPXtdyq%o4yo0b5e%K~0X^ZIg~3
zy+5n<xJGnf#fB3bpddmMy^`HKM_fp>2pfJ&GsVdO2U3(f3K-;nt_$ewC<I{vr|J_m
zxHdnb4mhh@6A5fyMy0G;7nv@k6x#?LYwMkT!2yRpy<kl)lGEJ{6>Vy>FCcr0fPsgp
z-E<AFejKU`mg)pv*p?XokO1&>9Az|LU)Wyum#4GnL;mpBcfSFi&YMqS=qnYn?;GU8
zzRK{g3{7eMYQirqN|#tW0(k=oRfG`7n0qf}5!Ws7#Vvbv@q#JjkQ-BH2;_9c_GPgh
zcyMxY{vj>EFvRKbQeP5v?;9XG_iTF`{_|4#01Iic79l^OLhS?tZi!;GjVe#kM3As;
zRis#&J!~pw`590q29C6XX4cY~Q0Hpx5r<Ot@NDmXsj6cf_^3Li_Ymf`RcCa833SAN
z;vf0}d>dIiI1(4&m_SH?V`7yI;{Usa*??nG1GZ33GW^R>q!(<@hQ7Huk9^4#MsFHh
zecec=)-)jKAlZf+Hh6c`Ecg}{K4(gDdi(*aZ4BtviVu5ZS$#rtnWk_1Bhqm>tc37O
zJm4A7J*HDO$BAD$rX)#Tfz6F8;hz5S%U;e%vbOJTawfT_QRKXS^R++h(O}DJ(^AuF
z(p>Fpu6CAvUKraeJK%B#G1x7dd>~;kA^u5{Yj6byD5myj?aYh_zZ3yq!|pMyzPCqW
z0enq05M1WI$D{uElO}j|Ar<yS9T}92kb9=S^gtv+dH3UXi_vwB`4N=juvmVXGOU1l
zVQ9ItLr}YR*A0!9m<ebT=4C5S%5>C!BnUh4Vin*Z2y{fl6mmF0kH$Z|<v##kk%1uK
zF+enA;C~dqU?GHr%LCV6??X#p&EwUz&u&of=>Q9S1-=F77cv6W)Jq_N9#6KVLfIL|
zz=C4ql5Rb7UGpkr6Bf0(CLOM!&AZ`*VeLBoEFLdY-jOx0{0bgsP{#^8bS?rI3nDBS
zr~T|##TVx!rT|#v1R5LpUp5*^j2sL($G`g0a6mENZTEyVO^vfuy^-PJCn!YvVd{~8
z7(aDrCRgjd5UxMaMQre~BWnGmrm_;NXv`?sU?}}_5$a;2p=ke3{FvTHI0U$SpdW7R
zVYiI|@N2!@-;{58B$vwFW{E$MBeA~)H<sidngFEF>RXAwBaQsa)eMS1f(8CT3Hd;N
zVSGch5EjkZ@B3_}m`qkG+V?hb{n-9|j(glg$=viN*V8<8G&@G1`17uIkTeeGDsYfH
zaG`5fuDy{TEL*Z#TU*O?Bd*>Tp&n|fw88154gu}_d2Q$Y!X>pp*JX55s}H~_NOkWr
zw19)<5N8@#0#{*7MFV&BylfCY;Q9L2{hR+G8~F&Y2aoY@=4k3XP*C^4$OgR9JGiro
zzBIN|_&)q4PcdF5OcQ4kdQCmOSlVT3&zfK)+K)0cFG^OxPANNeLRZevTUA2q6xfP!
z=3T$gm%M~EDLYXF+|BEpH*@Y>h=Dt}T^@96Jwaxeq21!_;Naad{6lmfy;z^@zXiM;
z>5~lLd_PkV+x-nONMa=52;31AK+%RWibXvhD3iEw*zJMR85{Ig6vRyd@oJ6D7<O4D
zC*Sxp$QJATZOT*0QIt5&n^xe#K6&vwTv;Q{1mOeSv(*^1azfi(_Sx!nmLh;G(fEkh
zkbMHs_BIUqM{EItepZ@DzV*9d1yEFynasoj(I;r|d|-V<{9de&_Cmk;Sbn6;Q{eEt
zY~aftT7q-Tddu9DTne&Fevqt05hj6*z+Rcn)z3kkGyBAP5Aah^Lx~@_&VWk+5V(O>
zBTvo|mas!{7pSmXz!Ky`y?7!frSx;|Gz!Mz0Cpv&%y9XrxGX)5N^*LTidFpUYilV(
zKx+C?!rTb_HMsdr>lSzWOm97Xe3dYn1Hmv5wSY?#SgwI~gN(${-&Z4qW&o9-b!`%-
zzm=dZ3I1Dbo)DH+cK-PYoarF^j>|Mab`!gHn$GPK4Ahn|TOE7AsD_X`*G4~j{F+%+
zNM(kE03`9F9dmOoxk@GG7N&+c^Z5$YaoZhQzd&PDNAC<dVn)9Ey`*27K$FCSW^I&I
zn|UR57e%KR;g=-9*|0(w4QRLu!2?OA0q{msK;MXQ|7_X^Fz_%?Pn4OID&e@@-q??R
zTUq*j@HgiLP5X`(%b)jz$~9Uz<KK|rq+3zXL)0A>@p6#A?6o9#ms6FF24oI>!VjxL
z)oYSGY37-br!NFoN3-;oY4#f1Ndd~jXE*0gqkU#GyiQhdfIT54cqM1>dxc9v^t_lC
z(4Ye>X6NS*^S_H>0GE%fg#wC-`iqQ>!k3S~CfX#+!#9%qScU{)-a=<@!YYro81u?K
z#5v#IJvp-?XJb|iSHD!a0U!AZSH#m4XJ1Yuo+1E%iJZfMO11lQ@lHMyq@ukzDdThc
z&yhg?S29=qk%arUC=K^OJ>^!#8&YRNI|wi&CjxMjBRH@-_rNUrm$3Pc3OJD>O&_da
z|Ag#8Uw({mU8DriyMBFo8?^UoA8b}mJP>H-SV@LGq_2@UV3S!NtNjdQ(lPA;-o*9l
z9Oj<G4=+ZlGrgeM#|rQkgn7`tZ1|jWvxRM=Ms{(GP5P7empi$8Q{`OxBUG+f<O}J%
z9ulzIbXj@411v;8vgDU<A=*VBx>}VhjZxZQ4PT5j&?~ve`&HV<4-9a>Arr+5WD+N^
z{R5f2Zc!r3+atbI<|Br%AOLA;=+Sjif@T=!R2b{mCr+N<(e}#-k@^)^^y8I*Az3G~
zb_v_uXCGa{NE&dK+vOYJ8XxuH&^nXp{GiVn-uN$V<(*%EOr7{x74}7UZ_im8e)IT+
zRy#KA4dQ=pkgyg&?cmU(MN(KVH-~ufV*{Z&4KkA9%^v`wf&^gl_xh}ApxL>dIeTM4
zcSvUyOgg1rJtQmgn#rK)Qq?D!@8lvmUwhap#GS)i|BFI`9chAC2Ii%E<x_i%Cy<4e
z0Kr)|S7niMG+8+z59l5T%mz1k<(EOf`w$4tfmLw6+~<M&`#ul;;+IvtS7D(1y9zY0
zqP(#nDaN<d`gZm~M?9GcnvUgVu^b_>+AKp?YtFA|liEXpM)yzzgtt-H(*?5|CD+uT
zud^@Q&7hALY{06%`G9@4Zq2Q#)0OMzWoO<DM1}|?<TucXqyQj>2b&{JK#=~u18zXT
zTR-n$`eWI@^X2uj$J>$vlAHbA#zk246-FHQgE>13VF!oonPkzB@bG+lYSvLeYd8jI
zwq~tc5IM9Sw{*R?kjb)v6ZZxDEG*!`%n|he2>Yt2I<{z8oK5f`2^QSl-Ccvb1$VdL
z?iPZ(yK8WFhu{Pa?yiB?<eYQw`@8%Adob90b@!T5v#Qox2>}Li@RrhqedX3!yWUbe
zK`arlmx@4Q2>(gNFh#Qo#JSUh7QJcuxYVk2XbaC!KEH(=Mi0=F%ctyzSuX=X&MtE(
z5@P>+dGjo3)iloM2K8T@`oB_U7Y*Fcjbc8-&4#x!vSPW303bi905}HosQx;}&pGJ@
z_0ZcnYxTOYEh~Al9nR>sBR=i_&HljH_%0AE!$^Do?;8$C1C_}|B_hv%e_=?VKQ32q
z_>^AZ4wHny2mtkUCvV$iJag{jv$PuiGccY7U?sEZwgN^V=_mrz^%b|q1}n|~#a{h>
z1Kou+O7{0bB-gjb#aH32u~i-gH~p`EGy@G4YI||60D9LCz!>7Q)B0!k73cl6OkCXK
zr~yes`!{@3m0p8bW10~V^2T1`y6Vn_We)NgpfMY2P~87xdZaG}_4Akp%1lX<@&4T#
zSP=I1*nvL&t&ram6Fg~b()OoHpjkh3;!2X5qq1-_6ij=R{n?jW8bl=NzDUD0dur`r
z+$%I*VpwFIYzT5p?<bbX*ng75hvWUXMCsasD^3A&NrVp;*xO<_QM&ZvcB{if|8wBs
zOBXQyBy`B_s#sF44D1uaHFbHF7S9r7{3RjrAApW&Jnb}ZrNtZPz^R4{vq+8UT?v}k
zjL<g%tA8KS|1$v2`1(G7no0#K5*=}Jaan+X&h`n?T@m0^&gi?3CT{^MmU{hLB28fW
ziSr4Qj<w<LtwYJAP5f6R1Vq3MYX}QIXz)jCIu6LUOGPFQ-1lKxEZqN5Xp(IV5xd!c
z4gIG5Dc3G~b;<A%>9+m^;I#o##+Qw5Mu8qEKow**XHbd8+pE@_TOYsoWB8fe?(D$|
z6>dGK?rkr;rIs2X?QsH^OUD}u3HVj+Ez`_e5MlneSa!d3&#x5lSpgdNW6F&}=CT0Z
z&4!r9PGV^}*Lv1BhfbV5cWAb^o55mQ+I0JT06*XM3B2tSvztGqRg97q5dzfT_W>Ai
zvI66$!oF-LtbuoL@0<<X{V3odwttHGWPU#f+%1aAv(=38LclVoMmNi?lu8xwEBS`=
zHL&P&dcni2r-7@@lB_ndW^ZGlPU0o*UgWAXV1xP3N=kr#j|Oz#)+7ITjLi4~r7MeX
zB;~&kF+m21#kBh?Nkl3l9`12N1}~S!-R|QAU>z?>?#f_o0Cl?VCD5Tw?%wa8usk$G
zVX51c(PpEVY3OKhx54w@r+kA<V8NHiK45JETSXlP$SH|66QS?_roJu*(4u2;`;YQo
zQ|<X25x{wd#Vh!_@nE%%7zm>^xbMiY&F$m?DnfmDn<>rIBmYg(C9awq-s_efX02$7
znfgDJvoSvba3rDEySf*S#K~V@F|=0=9YYsB8pzk7c`P2*oczay1vJKw_}OHKeE-RI
zf!r)gfWwcpsW~CsJYbjj-Z<Ry$!p8_SGlucZA}9>2^w*B*z^=&R%U)$|FBH`p;Ggz
zg>TO}0egCODKkZ#!|ub|I%NC=FkNcNv=rD}EpvsQXX}cCDY6nJ*v@1XxA8D~9@e-S
zMHU`lI@Mef@MEf>t8+**d{bM6eC4?4uYvji3_K6$;g`*lV4~lm$y=6-1I7Q=CFW3?
z|1Qn8IA{56Z<QtZNp;RbMRsO<-{=`C8jnkEjrl|0=~71wwWGSIqgXw%2k*C&+6xb4
z<hOm@MFBUo-aWTuQLU~W5wwf_jPZTd{WCMl!4LHWDY@SU+j~{?9bALRQXbcb3Nu+d
z9PuZc(h*()=r{x0=Sl@jwFKim*I&FHBCYXPuy!C`l0Jg7>H)#$BVIb}+b2eQ>nsB?
z;Vb`bU<Gg?5Y;1b`*R%~0Z2_J<n%;26Vl@wP%PQEY)qwt?tirj^VMO_0GO;Z(6UhJ
zzK*xO)PC8da|}nT`MYE)RJ&dKwAzi;RE*7e8mQJ`9vYUx#N8Qe<9qdTlr+!;<(&W5
z>@=&S#fe%Sefy^aYK2s<uYF5%NB7s7Y^eDP7GZ>a<`#UxV0f?~q`%id88BaCn@b2-
z|L1{El<0~MI2~D<$a2KAS^_xK=DaZ1^{2Z_DXUDBKH^$LXb};d3<R->kLB6Wbsx<2
zc#x|bYZP>Vifa2~A5)`Q1f>68=n|k3mR~43zHD+POPjOIpf3HW-Ox^hHf1A)<}%#6
zD_l<az;oGY1*@A%7YA*Q*-yOKsp4tzmxo8hDhzC5wZEG<864OQCe@*!e*$gSF`UsZ
z2-c2p168wvP5j$dP=l^8PlcANnP8*KbCB*gTRo@$yZ~4tNKnx5gpbs0iOvo>T7d7x
zKjf~_D$!^QI8ExpI{s1ZCQ5Z>K%Ncq6T&(aI?f-{aIqUsHzQ@y3=SAnO|#s_$km*f
ztPCtoYxfBEd+TjqDPH-2r;#p1sX9KRWMe`6RW2sKsc{NB{LlaKA?iwpL*Lv8b}R`J
z)VAmzm>W-U*c}$U+#gV_m4Q24ErWbD&X`Nb%9pZ=!RI4{6@PLyiC*v66mP!TA@cBe
zQobN0h2{Nm$MAJh9mT_Ll8|~LHs&|NLo?3{Nh1y=C-T5waU?OheBu%3Yc8P$F%dKT
zgsSyJ4Q3i+*hCm(d{y<azSg+^1LtjqS2Qr9E%7`=2DItEs^j*;z9yi*Ru1}yZ!!7t
zU5^g{B-NA1`;yOg+8)LjKCEV_$@THdNp~_NJ)jnk=U(mMs#*et{i4-UT`3U!OTN^(
z2TKG%1RMZbs04)lucIc4%~HmQ3wGx=5JWUhwm*XsZL|eQr9OPFzN+aZA1b>7<MRAM
zZ|pRhtdDQV^YzaNVu9RsO9GAoD<e%eO2r;B{lL|>pyBlgzPGI{@D7z?(wI%G&Ud9J
z2o|7+S2gU3E4{d>0{SD9l|BQOSAR;OYa?%}oy6xQnt~F}DPF5f_^H2Rk-xi+H2Z_1
z%ulZ$K)(eBK`BK5AEWxcf+DRos@)lmnwly<Dr`J&_7FFY>wCfoRr*P^Twd$M-F<s)
z*|S^VcwDF0@Md0n02sNo0xS+rS``bntmuMFWy>dB9TncTmT6aFpM2BLf6Q-OC@-E`
zBr$EP8oek0d2=KFFBv4Hfvl3J<)>?IF0U;bXX~}^^Cub!#bE6KcL;m>)sf5lBo?qJ
zbT56Ap8|xVrNje3G^h-~(ku&Mi3nVB<;0>X^LPD!oe+~5{Mw#-9p87BH0;H^GxVrF
zUrh+GXWR5$bNa)Vl|0&*vc1i}mghFxqjz88S^crs<WzPX9Don*RK(uYf0%+mau=mx
z_6MS;gs*SgtBPsa7eia6m~w+MbD{>$>p#aC*2AP}XvRk0#kt9~cGP`%h1taa5C-u@
z$VVGeCJNniaPb8DX9Xz@&7LoA6n&|gM#b)J;sfj>o1B-`QFCKzP7Jy8RwG|En7}2g
zP6ksZvdmeRR{<{B{u?s9>}qXD@rR*!uL$nl6vPQ&uKKeq<3m&iQ!3Dc<k=wrcp$VR
z=B)k1){Y_qz&TX81n@fm$&jz?eBfW#fTyIONDlUTkZh9%MzIvRjiDPefWd&=k*ZC8
zY^=Nky|OQG8n2{wjArvKz{YxfYLfivW2Q%?T%YYA_riXf1gG4hEorgVShAV^qW|Kg
zw<TkH$h;`*6F%_gnH?~pigHIjHs)Xl)S}l4Cx`hq%1HoUZ7S|z^Z;mY(DBfOn;rH@
zmI7-G=H5y9aCTa6%aN`f_)O-udf!plcC5m5+URu3`aH8_0zLQVo3!~nGFlwPm5B;O
z$6>!nMnJbgqA^v$#Zr`bqDA58=w+<g;D-37yXxsBE>>QO`#tQvJMx`*?a#oq2w%E-
zofRJ7n3#P93|9K9>O!8mo+7-^d5IU3J%i}U1hc_BN?xA?eQ-zjPTMZ|PHQBgpvYwt
z!IC5kQQLYq=+hsp&W5X`A0&5-YB!&owq2V?5gPHVaIc&vZg01G1FUvef8wrwYIL{q
zSo(JqE)x&tqaXPf9>)|GcyExp%(?8c6}h{cYF6PX{XPBHF{KtE`-lPy+73lr7}K7!
z0@NOQHjz)hmS|A_RD?(O^|c8BZ^v!!#`hy|Xdyijr=$x`rN=MjbS}L3mBuTBz%auE
z3reI7YXWBwQUA+qv%`&4jc$NP#8k<91-6n3i*c&Hr5UHKb)|4Hypb)tro>O^WBv|+
z_H&0-EMkwgVBE54W=0l%m~?xEs6HT%7$9-+I3LV~IsD$LNc|B66*BX?M(JShf}dh?
z@R=bRb3#W3IEB2hg*1EynBWvcCe<YO?(mn^AkXLp%As~|zncP_&+^qVyV2ff=jG*@
zzaZ#c>Jz4M#`2qfjo8oNlqTCrw{x>Q%lXMxSXhx33p&EXaU}+dZHsl4Qup`P+N~+>
z4w(1B?UwOhMeTIkjSvB&vH-wmNK~a%&0yLSGGgG#Y_MkBXi{VAF?EU4!AQCq25|U9
zGaiZ4z~U!|U+sw;RR?UBzd8NxQrKOV-K+<gj+#vdkhDu1IP@kvV#E(wKdTa1j}E6L
zNprccCi?L;pR?M_z+w(9a_j5~;ZAi|f06!ZMQ_?df`0cbK#8#$4ts~`N_h%=y?1?@
zY#R@jl@OAsP5U)2(=mMIv6o5S>T%lUSOj?n_v2I>h3rTKP!ZdaM)rvlKnqbIPr^@D
z?r<_xd72nt<6QO0eJ1AY#BjoXfukb>^}+f{5$GrR`Ht&g6g(p!PZETFE`jm3Qte|$
zozN*v-gOstg1|zejz#5#DqGz!@b@Jk0D&O<eY=SWpz6CbvEgJ;P@vv}z)1$>z0!;l
zh5vZ@Q~4b?Fx1H_M9*MRYF#+R7uaFf$^~aJa<NPlPQ=nDY>DDfEajT;oxWUeJ$ksi
zJm?G*C9U5gTq2($){euHESLn=g1n_d2qmY(A_TC~k2XO$ShWh{hwLR~TL}6_vjdsV
z^Wj;N%hy;lsHOyU6%HEG^qKAXyyQ&^17lbT&WNe=d5;OHQ*q6sW<&daBU~pwGDxqi
zCUHW$FF%_iYR%7Xy^L(W_#td+UT>@kZ_ymA7e?pdb2lhAUTuW@(!9yn3;CSgUi1Tb
z=cxjQDVB5gezzeFkocpD&ZffIC1QScJ44->NQ#Jlc16INHm_-~X2K6G-}7OwfFu8=
zRc|e2e5F$8STqsxy-OxI=JC&mEo-Ye3$+4O=M}&FPLa7I4kbX8o*=W!Hk2MM1(~`q
zXQ{0<e194iX*2J;%K<PwWk%Ur<oip<CI#sWbQ~=-+ewF>N`BYcbkt7Bzg{@^aCE6O
z*{*(3T=xd#&jH^Mc~Jr|ZGf}-GW{1H#t~}rgTOkux^Q)|+{`(o<ta^~kfvEgI^4no
zbDPG}Qw|X9#sk9lSYe20R&@<0;Eh;oSsgnGMjkSU-k-q*`Aluy7v+e2s9s57;18ix
z4TFPN7x4u+s=cf%Fbjo;A83^CcL@udAblXLMV=m56IDbq>>cM|uqLYnbXeNwr6Qof
z1qFb|LIxU~Fk5y<Mv5DFfq)5O%C2$0EO#o?@1<J~Qx!A5)7@o6mk6(5GEMR83I8Sd
zqjsZXZDCtN9R*T_S)H0I-}LrX)yb!H&n2WdJiKoW?jMXEg!%&4F>`S$CLQzgT4M7>
zWNB!|#G#;}lcaa`@h=UF=1np@8r6p8?&smg_s=aKfhey$+$_ZLFlJmQA_5Tq_WL%!
zE4-gd-_(LvMCWEdAwvXjM@(sV#+g&BjrxqwD~y?l`LlfdL&>|?M1YeDkG*Ue7*~Ls
z#KzE_PO4?X<@`G`)tApjb=Zlo?JP9Tyqqw*Y@wvIK4#d^g$)^@=l*!uvE}O@wonJh
z%eyPJdCM1-3Jncr=_Q|`%CRefX!`~w@y|-T<taVGrgR~!O&T4Br}fZKL~3Egl{-gQ
z9EnINTs}mI`0OGLGsYDUon>q+kml<Ud-u37bVeEbCw7spq$d6#Uo}<Go=GyBujwWm
z*JeQo#1srHJf1elh}kuPOK2Vp?e>S}{URJe{sH4N*)!K+o8RCJcdn{7!>4F``<jy;
znkT*=?AkIYp^*Y6(z%EzymXUUBE6fNAJl*Ie(z#hPyVwp_fv#t{j;e(KH@-Wvt;(e
zjL6@+3I$Fq;_HJF0S80@0(~hEdZVOC13snZXCZ(85L3GJfs&Wd+Mo6|v{dVrzHvcg
zDZar*CYUBtWG-`A;fiWW?z^myiP`o1B$ELjO$k-y$kJfMYh#j8iS%QVVbwJ?_`03o
zf8&lsK3Jk>{P12x_^sz3J6SIMygR2Q3ZHWE@I1^q;xL;pi}>gF{`!=$WCS<+8CA+4
zjbS&}kZdnYL9<NJZ#g4ljLg0v6$NYw_3CB=5A7)D<j?-A#@x=w2nki%i6g31!ls1I
zo7*ROX4(toYC203)*1X>s4A420aAM<62CO>@&i1Os4qW`AZfnV-&AU>5qAuHG+Qpy
z!K{Ku0Ffl}F|uusIdmXBxc@$SpK@I=9ZdUW;RtN(>W10`8>B44tlG`ra~Cjl6g;NT
z3a5UL><z*ibqrN>f_l)#9VN&@`x%#0Pjv2bE?I2I9(vN7oCONu@}#n|jaibtcY2AW
zboFKNcWf+6Cg=kF6rBG_tKDS$+SjA*rbw2Bg%Xvs9Xjt9Sef6Ux9gj{7OdiudcuSO
z_3yqzfCeA-Ws7Gfv<D)!fF~-2#kM|g@8oDFmt{ku&9|g?^J8)@!%;`%;mrkDI~D$8
z`&1fZ>g<opnc{4B(VZW$v4y;*>CPcpFeae<lfMwhqHZDznb_bP4RF0d^4CS)I-oc-
z3EXIYtkPfC%!88@BG#NJO;$)qNFxGX%TMP#-zSlxk-n*g&?iA2q%k_eEVo-%G2IiI
zJ|)uWDK4FE{1(vtl-UPW&6Y9>2~m6DvR_Jl#j~H&c%kpbs1e0AQSY+k-r{h9J#;lG
zl~I1f<K1^AHNZ9`9~8UGlsK*@=vYLbU4tgB)S#(C={4XqLJ$$egaHeOr$l?Pz6(0G
zX<d6LB^dB!todxxrcG;U;d;Clz3ggf=mJ{W`-sa#%|-AsaPvf7xejf1ZN=dl9ESA)
zf)d4s+zr`H&<X!xUNDgvq(=oVi6D*AnJmj<7}uJ(tm0;&PQ;ulM?jY^xbO;<qQyhG
z{)M*;p_)G^f>ai&CD+ivUXEmR`vxH)t~QIsKD2S}d6*Bf1LlQ&t+9uFecStRh5EF;
zcY2--=ieIz<@bXywz|`Q8#4fx^ewFlc%lqhZJUi(9qU31YPHLhJrB85$`)wtGIL#W
zGJz=TI20Rn`%6wDu}gVWm{x=m4LO){v%YjH*xA7vz=R6eql{T@ObSRLRjG6a_YQa+
z?PvWeQ%NogB+Jt4^b|%DlT|jNQU9D$q1^mlii}ZO*=(%$*LS&3oU$MH<?9a1C<g}|
z-ov`!=jKgu?{-76+QP>JD#>R8dwa9>P0--UQsd|0cP3bfI9kr8lTQq^7Hbzv+omI3
z{-{Xd^<BnS**<k-6FEKo?<hs+z8{ot^Y{cu5aHzxw{<w3G69-QX)NWKVbex{`AOa9
zW+!2nAD5@c(%Thj^=;VUgqXz|S?~-Q$MEiYn%UrwQPjo7lgqQXX!r+J5-FCWDCdy{
zFukH9*9xKzn}^4pBXuv{v?|e74o=mvbJPtrw8Cz^9#cU%;%ztWQ}Hk>A5k9#jdGTH
zWRw@d9)q8d8y;aaCI;b=6ZPu+*mW`XgEl?&4B9m2gbXm_Ixypgj@Lq<hvz8Ab?_Ap
zVYn<!((^D+@VZqjph|ixc!0X+BNRj&xHU?Vpg#%}lphCyzPYjKg|wai(2osY{ZXch
zE2U|7&f%H)>ra+)2gfC1S?`rgHFW2ed~8<uxSk&AW2ZB+QGY@H$cTh=aggXC>asF{
z+~14#^|moasUfW3ZdAU`U=08x6LGG}>?~A(d}!hj(fnrp%p>!<I6V9f^R>>GLn%25
zmSwfWp4{1HI^z-Hq$G9--jtSX|FcpSq35uO?f5cF4m7ilKzy0mV=m<;Hzu`4pgN4<
zb#~45>A1%u;b*z!RxkcPO-BT>S`3ne^BSgHrl+_pe_}NHu*Pt=OZzPeVRI7?K=d>-
z2uJK{L3}q8;~vFllkM>pC5lD)ZP1rfzqIa(Jzi}##R<NrN8@wlAcQ7&%JaFqy`paE
zl*i652YTFtPmhs=q=Q!4%;5={XVeLGh|dn=h1w^7>lG;grit0II%%pu$_v-<9%nZc
zASq>+mFvCxVOm^|_$pQ*Ec*J&K`>tF?M7Vf-VdqHxwLGRORJcB4H*RuJHrC60=pd9
zxdf1dSc~SLquhdfpZtC_lt9xOcX$X0IFi**e>5l>u~54>;?vr&3`=!KV;$^u;nsEe
z7^AYVVNe+1`);9I2&IG<CpU_wnb4i4hI?tQ8b>!t39%b2n;?gt7_H^KDsSYk>Dr`!
zYh8kDZm8dN+OCUI!@zR@{6eL%qLl$UhqFq}Q+B_CAs$h<jXMb2p_W<7ww7%kF;*-X
z&4^oDeTauRF}3kq7vn`5v;_t%#9fq~zXYFOARofK518`DmwnXnF+ds^ro@9Jt{3h0
zYn@lV5D<{VkW3$sUpl<wIkm_vrW+|`llgS9a6c=NNelk8R7}exdUBghrFD9_hBkos
zdiX3EZWLtFSzK6t<@r1%Ig-ju?R>gK*hA-xJx|2!=(rr+4R?34SY<?8haOCJmFl|d
z_xg$7GdFg&O1DiFhDRooh|}0VU3}93nmE3wUEk1B`fRPE=vHS%z6IfMY!}SO=Mou|
z-68DpjTPp}kXpATnQ3vOvckjswGuM?_Udfbht$JJz7B?Y;q~H=xck#C9;+~06X%vO
zJRF<~OT||Lv5EQJ<gxLw156kO7RYf0)BrXywo{&SsCmHrWZa0w)PmhiGl^%l-Ry{e
zW&ivoFP>6b?9p-_it3%G?A$$9rFI3;sAI8Wp_C-@DbEl@`HF^ymNNp7Z3J3vdjez{
z{)o-coq9b&cVK1ts|fPI68u>z#Bxeh!j^>0h5sI8r2#5t{r$m8u=E$<NK`~6{jvs%
z$TgPL<7KJ1Q_zsRp@=@xgl$%3s3#Qep4Krp%0|7ZXKBfc($RfW4<xo1hmj{FM)68I
z-gmn5g!3Xh#{bG7QLr$me>$R%h!DG~x2kB6UJxOig$+t7r<%#Nm`dMO#Af}W-my>+
zB-7b6ivty{(eP2yP_RvOE<Kt2g`&(D=v;IG8EX>q+r_amsPFKzS1SryefqfN7$#Ux
zlfx!9i$f2CsDE$r3Q^4w47iyP_3u~3ef#w`_lN@VReSvBsO8=6^@BoHN>)H%@MT5F
zP0$F@gXn0Q&=P?g=ZOrTMW5G`^D#j{<cV1LR*h!DAGW7o2GZ}sY@iD7!Zy~to_t!<
z9*6Z#v9rWsJ*k)llNXIP`G?wZq;O0ZXY&&UP$2@b4j_t2prSx5OMFfbqy>=(LNRHP
z*DddyVaT)iG*~G&!?UPWM5P@|hdSQB)Zm<?dGjqk)!~Qk%iAHduoI3XFy)G5qcB;7
zK$yxQHkRuSrnKCg;O132#20+rkYZP37bQ-ubDzv;5eT6>B~Gg@H-tn`6JkPvQvZ$v
ziAlAzL4{!|Sf)x$ojTaFRc^-kizpVipLjZ@rNIB^fLpH7)UYhm059I`X2>SWT1!Yo
z6}O3K+&hAg&4?n;bvWDW9K^PvIf0W^aOX+F2tw{KcpMYSqU%u#Da^ST5X;4KDNxjZ
zlkZOu2po@<u2vOTGXe-49zLSQ2(x8rOxswk!9!t0hp`S^H0eI)-UD_f=OIZrOV@pL
zyU<!l%*j-wKg_@YE<nI~e=XYg)EY6iHV2@csyX}fh&JLDem5Noz?!E}Ny1IXH7gud
zE>&lxRM3EP{6?~)m?;?JnJ|jIT<;=H0aK=|p{e-^aOyTfwQmEbD};oS${CA_B^~l#
zt0pkw(9}B0es4%|$>N_LXtmFt9Q^)|-!POLgZ9`xN^uB&VQU$Y4G)hxq$Z6Y%3^?n
zchELx4Z6Gas)nJ=Zlr!p7b)a&@<eJM)!)UUzbzJ;qE_l{v9REdI9Hzt!3iT2jh&U}
zu(VUtXI60J>|ij5=X8({#+FxdP^5W2VB>1yZ#HAAhYp}4#RV0&H#FQx`1ri?n9mfz
zo&3yeKOBsv#o*O9w2-heya}qTub>^(1o{Mf;jUkE8815RVX#>Uf6h+>-rY@lt@3Zc
zV*F7s9Bqlf0k!a#@|Pw@m+xh#h`2yI>1A~<bU_lx1lfjcw-+nvXRYYpl4_5+p$sAP
zJh&qf4bE{yJ%iIER)faG?7I@9NLL!E90x8YvA(<mx5nL*%0+*BW(mZg0)3-VKP^!J
z3l0nOO~~j!1LqSoti_a-b`Fjwlg5eYLl~qu^!D6D{KNi4WW*?Z76KJCFECXVMP%0t
z_r4A3W}wSo7!ndfX_q=Vspa+{uzT+ibskGD{(TsMeivwCEeDVR&s;*6?Vnb71V-*p
z4uzVSBh6F27<J{~IGDMBY@pjP);^#Ai5Qyij?I$|T)fSj;Qxkrf}EihJH>DCO)U(I
z4+8UE&>eTF*?8X1lP$wF0s-C)Q}Pw=1!WTX8fLfu7``{0Vc9IbMijJfw)qY5pHc)F
zLI^nIsX0yp+AlxQcVuMV!PwVUf3QuZPQD?tAMO%IvgFT&#ZlP`zWHRlBOzecQ6=mz
zT$aP|yoT}w1MyXT9jni4VPgY@dQVfOSo%y(xx-<}7MCmy8n|#|P!s7K;?$Uxxp}bB
z-<zAU+>qxk8GvCqBOdt*5kV}3H1`Fi`X`9yoR8__JUyx!AaP%;20h<tNR;Uu5#H(_
zJf3-DAE_Xo6Z`1*m2;MZv2()u`m3PpL$);><|2woOukj?pYKM3f_&NTXGy@{z13Ie
z)=+`d4{Tz!Awb&Q#{!qex$5`x?*1jsGA_HbJOmH8-oI`uxh`Mq9mIlVbtMtxq=<Uq
zBss)&F;2|0&3E2EJuKAJ*5;a6W0!FOhfVSS9!`NurISU6x(?~edx|kH7`0e_oQ$6G
z^#u#X)H(~{88i~HQ}$8#Xe^6`dgIM7@z6D+VHcCD4n$=z5b<WwTx(SSZ{(ZuXLbRo
z@U6jpQUoruU^LQB=^HzLm)z*}4Y$JUt~3bgYk6bOGCMJFA%VdUqMW*aBPOJP0N+01
z28jgdZE4Wp@Hi2j{?Gnm7?#NqR8AE4#sOnq>=0-8t<#O`a>0R6A*=ql;-ct)NnTL$
zE_ivt^vJ-#u8+63H#Cs<P?tNjv{YJctU*^|OIy?*suY%;%qf&GcS|ED=`vbnqKEO`
zY^N1qCgYIQ=(G#UKi)F}ZIQxhp2h>f7;s0Zty6x8GcqCTRX4X|j6c}>Tv>0k#1C{?
zkMd(>cKB-pUZ5SQWzb$zUw;Qd7keML1e(!f+ECmqM!!J_SSafwUI%=1kuUrVkB1?q
z<g@`yAlNGsFA`-+?bKN#Z~{h`3@3UAoVWir2KwjyBGZBL5Wl7ctP41B>kV?r9<;x^
zkqtCNU$>Y|^7K|s>!L8!vEcOlc6_nW2=bHz>zmz`k#i17WbFNXDn#WthlFmP0M?J~
zh&qh=Y-gm~G2mpqYnAfunbD93uhm6<&c_Wuk2LEc5aF0Do~??#kTHnkkiOCE_Wj{}
z=?B4=-=k6$&46rIe$eFC{_NnSre$6xuh(&8Eq(2B-kRV%85P9paPJ+?x~u2wg;%KW
zeDJTNUdGA0l8*}RzSa1>rzYxTzpq^NkcUq5FU~9NcvRdCAdvLNx={8*-KY>TFEy%)
zf;3*goP!aC7=>H4=$0jo{M*yTF#tQ0eDgcK><1_W1V48|LBd(b#0h~3-f%2+vjH3=
z<PG%-S9=vRiDG6=##uM5_f<oV`Y83ByO_JS@+0wzJ5u>B8thpvS&L#7T=fKrYbes%
zP@0Xla%bxuMF6NMjx{vz)1=f*^nelL0IOl{1UmN`yu)7)@#Mes3KNs5sjhb$y`$cB
z{HT-no=*Rho*i<gj0Pr(#+BI@1AF0Yd?dp}w0V5KOw&FD2ykwc9Hq<c3fLjr&;u;+
z(;G|B9qD0&q|1-w|0#YQfiODH*{A3SywV5ZH@2I&i=$}jtT>0Q9<FSXo<*1_5Bgn^
z9u&?hpO1JSB32hjwE!BSj42<%qe?jZLJ@Rpxtg0Z9-WtFz9jacRI{!YHSpCrls>C7
z_o|3)D#Db$b1jrr&`;3mX2w~x(tnRw%gl`8SBtke<@Rk9ci$-X_VG4gy`W?#&+ygb
zEA`WA^H;Sx&YqtOgK8z)K;RvDj5*_v3(@Lpa?{vLGG?aBY?tZiaGPd_Dbrm^Q7n*?
z<Yv2sze0@~<+J~d-f+0c<O!MNb#m!UDn|dg>ikAwoT27q_Ym{T_mEcdcCSBlo_Ldv
zY3hgDmk-qM#8RWYhw?k@cHf&Xmugg{IJ7>bul{iOE+o`3u@OAM$T;7Iyg+@+3h{RN
zhwn`Db`i@Tymy}F=jUC>Z|PodP|4bZJ^C8A;N7PWh7gQ%C1|`s2tAu$NcO6d@jiCW
z{N9HW%BJS?nnCPmrCYy$51Kxs31&6-ZO3wN74zE5scrr5PN0xO(QG-z<C6SM;5~%;
zU(79Q(3ntf8(@=&9HkFFNOPEV#w%CKdb@i)8SW37o>DVXY>HZay)Z759KT3g7(YI?
z8hpIJ$E>NTgF9I+`d(^y=Mv9FORkPxRCC>T&PRNJ{+m>>NK&-iQM*bKFO})6>Kx(J
zqv=%X!~qfgeTr5J0On|3PWGIGV*r|7={%U|9ApBgjC9<v2DiGMF|koLn%prB=IK`U
zvtsvQE*7g}lvI90)CadKd0i1eZ=F-HNRHK64!_d;75UHY=-CJWcv!5R?jFivl*Z?w
zZu_Xt*BK4G!n{glW@ZA%_lQps76Cwy!tA`lUJK!o%F^v*X%vh1p?YnN-=TH#$zr{h
zxnbV!O#-VpGOqa2HhSFZyQc^DC&l$F4}~nk=fpn?^L0A>q+)bxhNB<K^J!nL@(k6G
zsme6xti^$GUV#_)Z3x<ILOQj4R!%#CEfb0MW1d{E=Jj1IR;q#7=}+i-yITX&j*V;r
zDM-B2CFw$??p%xISVO!uTXg70*w}&u(#_O--GG+aF4XiSN=(3I9B7gAIej*;amzK^
zjWR5NNjRdXmlw|R(vr^I#l>bsw6lpnF}|t6=yRde&BaD=9QIY^=oJS{kmKE?Laqh@
zAHKc|y*7<K%EshD&O_*PINB1497xepQ$QZxJG7XYjK&AO<^vXW-~XUUfg%FQnSmlo
zBkuuR;!Lcor^iY$+g6@&FSB2Hn7J6P@{CRd>7EP%fMJy_<tZ_k#!tp+m0!2OlssOp
zsE-1yt*v#xv@ps(){73vV#^Lz;VB|w@lF*FoANcw{BW4RdSPze|5=e&@4Y|;oaID8
zo7Ne}PVI6{Ff?H=e6aR}GvW<Cw41?=NPphT0r^!TW>dM*0ITKlH*Q9=W4a68x>RKr
zpEyOpoleuUo@Rq_i6W9Tv9`F$S@2xiS2W(94R2!Dml#b~Gs(TvOy!X;Gb-FlkKOGd
zEI*zYEPmF4>v%b2PONjo^)%2&ePU4^)>M5LzNH6v*P|;wOs(~zHr76iwGT94Ks*ok
z7O`X>p*U3PBuwOL(|L^P<(b{)HxtA&Myl{w@h<;)y1tNVEgH`fA&<!{B;*a5^=EaA
zch2*{7kqNX%hp=3p>D7Oj0rKv9CA8MWV1(OCTEsf$&1xXh<?_2@y{3;$Kc%Juv*WB
z((&?%fB2MMnDdGwa#cj1JBXawN31x@AI}|e-?8(QbhgcMFpDl&#vc4@JvNfGV_kOo
z9x<T<k3l`NrL`YDEt$i53z_HBLEJht1mMm8eax<=PcWOabbLv6Xs=IDuWY_CIRvx5
zfmVUOVvgx=gYt$!?L&bp5feB;#G${H@m#{$W_EV_u@G~03a9T<oK(Zm%f-4VGkAdp
zbdiRGA|CCiB^gAQlJkKZa;c!a2pG%N_yb1{J>oze%UP^fSO>~z8d{$L2kC|~o5MyO
ze+H%$g)Dg@DO=Zrk?RzC-Smgm4LCoQYjeNCu2q?|TfF-+HkuO~ym4$qCO|0NQ%2$1
zq5bBdOM0cDfqGkIc^0kw!;R25tN^ukXH04`i$^Vyy=tXY!uUCo#@x&T4J7!8n9|?q
za{qvBa+G8%KxSuw&HCj>+zmV>G(egmJ{*;8qvd)6U@9uzmX9Zk*P_7z!)s5jpX84i
z9-?F|n|wnXi!Qzo24<}Q^SXQsf_$~+^03N%^@=KuPA-)a1<9qPy3z5mv10qtVC8x!
z$1EtJ_8ca!KZj9FIt^~LfN1#hQivJ@jNvP`Y}U7m4&dM<(Y3zW-Uw~}*0?PCc(yMY
zElp}hWK1T*#WbUx$*3DLZXGcX-n&n!XSTSE-_Kk-&KPZ_NDMIBkU9}uoxm=)cb>kE
zC5fdsYHk(}577+%M6L3*>B((_!zL%$_L|aP9qO34pc8u+N)Pc|iBvoF;KxkUVLW{C
zw~hyDp{^#BSbE)cA&EwKpfIXLk=IbypsA^5Q%bM}fOZ`<49R9alp!@z>R)`<G}nKK
z7bs)5Ht;tF9!HEN_j{v*J8aPQ`%@RJ)zeyT4shwb&I|en_y;ux%jdMKCHkHMnIju$
zEpKU-Bi<2?JoZ}A1aznTNGC-!hYXV6l`)>6sMKxJ4BTcijTkyuBCjjT)^9lM=8f&9
z`L1vC5`@29`{v}JJJ7yzN6@}0nxW-{tT)J9-ap2K&Zt3+AjV;H4;54|`;7_OdZjwR
zVdsw^Vd29Mz(PRDujiqYs))i!K%Jb6FHtfA-9!?FY;o3jBPo8)1Ot=%h^J2Xw$~#D
zJtZ!Byv5u_q0n<xSbwz7<8{-^Y&kHc-gXbX08wV2-Da8~ohQaFn?@u8%uoYzfs)%*
zibkt?#$|otHF$#y*T~ws4(}2-ebt?E83Mrva$VkXnl&B)szh|mHEff8AeMM6d}F}h
z7DrYYv(BeW9NVFd>?4kke1dI|_cVPL5!s>?v4tXWAD3S!|8a6ehk;0rbn(A;M=aPE
zWlGGYheTVjD-dP>BRYz5sl$SSQAXrdT;H`nnBp;&GiCYmbLV!6{QAdxQ2Wm`h6Dn4
z3oBb&_JNg^qWGW!PCy_L#&vTnaKP+fkZ-Q3ub(}`z)U;CUYf{sft7KQ?SF#pT)055
zrxaAWgOS_eJc#-G@@}RIsir#gr3~CuF~pOY^E)iR5mVdOG%~$}6VS;)awK!iD=u@&
zt<_4=kZ1Lp(^<D(=&?S^rov{|(ue{gSaAt_270Q7@yL!yWATtZ8DCy43hv|$2E9@w
z6~t%jZI`{F0<zyehbuuAb5(**f&y9o`Gdz{ju^l8=d_Z7Oj9iJsjt?>d~X_x=+n!G
z#tDvoS@ovM(r8VOt#!Y|H5J{RC9i|Wxb<}ESQ(s6LxU^7K)({Xypp)67i#!evmEhw
za@X?N=adf~v(8$T2sVbFsi`;{KXV5}(hozcVA1YQfQ8yOU7|v84QKe6SN|<>9z_JW
zvTni}f4<E^u%V8#C3%>2D$(QDHE1cbmk5-85y!HbI*e$s!kd~Q30f~X>lwCL>U)KF
ze^ft*E?kK#lF<#nar+9!nV7&}e3|lXG%gBlV4wQe1^|ffs~N!$4kS;tdmMeLSZS8R
zBB{FD_@vzIPHKEEK$c)=N%PRX17&zF81-PF&ucBaUCvocg*`OxZ6&lEeI<?*%_x26
zz{dK0s<rW0g()?K!}ih8P*&w#&3GK{w_%fLN(Y!9y98wAkPM*g#&(Y@U5|^_y_E8a
zSV~@|6l<dT8sNmkVrqG;-`||GUv(NJzfm4AX5&;Wwgn>TEf+~-Tj_S5v>wGn5)pOX
z@vgr<<8JH;UjCLNtr=v~7N%$1QTX)G`~_h*)FwI%It*fth<*U2_F|9&MRubIwdG{j
z@V)cr?-%T|C|Xmv{+5~PVRR-RLHPn7MK|59{7G~A|0@;1GYA3R#zc04|689A1Jx1?
z6_j5-1<v2RW2%S1aA2dfH2)xJJkZ&09(!sL<~n>(QC?2gokE)qkGLu0L!TiBJ8`DM
z5~P7mMEUWE^8=-V`mpNlg_!sI<A>P~z*&!_w(nc8Jz3skFN@F|Q8K5LwaeA{I4R8=
zxVSp1)y99-7e;pdj2+>3n;bZ=e$^;@aFAzOZ?xtxPQ~T1mClsCelxnzyCBLw`<@9G
zsQL3)W8am`Wy6qu{>J0EFi?RlG_nmzo8HXf`3oz4JOHxMY&6VSPisI1YyWr{o?rzy
z`IctWPJc3|%Jq4Ibv*W<&2XCzu#Ppj{}y3FufPSp>Z>3jK_QFFo#KWkU0e-K#GTH(
z%xp4|P2(uWg<LyyNdojpzFCmvj1!a4-h96&(juT6_k@m~Av5vh>$9)zsWoiHFVZN?
zWB*uD;)l5Rrr+xzc;2VvQCC2ia35CflISQ|)ORTI77LM@qa##bsGy=<FV-3oc|pRs
zd6SU*ON{W_U$0|L!2HXM=$b-d5Wl^WnCKagjZq=!dk+cz6wel4=1DdeFk9sw7##Q#
z{t-bEz9qE1{f`+x|9WC~x8N@8(Oh<=7q`-dVtU?p7VG8bu%CI>dZntlNIPJJUVFPb
zRKeg+kAGIVRef22^Tt$tt8LcvBZ&TVLGEZ6`m#^3nbfKY$9k7Bko9W3=pRpZPA?lj
z?{X>h?%q&3rz&sGeB7Z<3gYQONoBQ1vIa^bf)pWuasrs$A1N-ZWpt_pIb>=m0sIPP
zsrl+#a2|q<eSYs8%I%`rTUl-lh!<d7AHFKy)S*-FikNlAc}{*f-%{kS6COW|;dNM8
zfdiby7}9$eHY&4D*p8mt?s%0|Eb#65HyqOo253ib02#hh_4RH~0x$`|f47-IXz0Gv
z_Jx2Kp?pEC<dSUY{2S!J)TL|$rS)UIJ)CefoUpI+@DWRC#XW}h?C4%qJ^zopDNy+<
zmit9ods~|Z`Qr*N!J{Y(x5QrekS7u?!LOP}(N7H*tr%%xLZ|O#dp!u!s*6uIXFW(H
z3wxN%O1^Ru+g6fqy@Db8JKCx-{ixBRWD)o!E9DuTiR0lx;{ERopjSj7juzpnO+wk<
zmy+1G#?(ysSB^1-DV8&4HYNLf?8+?wh+AWOMG6~HMr**JSb9mYL|$B<(@ZKNq{FRX
zJx-+5Z3XEtzC!?skezWp-fw;<8dWIO4zp8Ewv$eyLo`RuAJmw!$@&$4Y`*plmW0Ro
zH%oJ?2gP6#jaE9Jk3)g@N0};hbJk{`n;ur<SivH6xlLoo0fwv?+~!&|Q{I*3Wr`Xe
zujfd`e5st+$pVLjBHaLY6lqzr$U1lW^kxxoaPYSRZX|;~$z+zjC|&T+%P&|eosN8_
zWWC>zd>yaFMxU<qeMO})qX{~@?|BBgq6+M2EQRZuTU)3D+0aga-iacBiis~(E~@x^
zdr@Ovm>Gp|!TI2rbR@_nU!;|FAOLmkhx_+fYiZKa#Cxgt!8?3(S)D=vwiS<fNzy-U
zpFN%E^5<B}FgUWvW?z5Pu>U=#U(%%Bv{Vvn-_pzTEm$VK>AB|vWW%xKV(OOmvW#{P
zq^qDmt95!rEaY}T7Y6RCu#SL_%x-@X4d-nd=oy)x$7iq!DWO9t8<wD+`CQH}Q7>$S
z?u#+K8|?iCg$qZR^XMk~#(p)Zi75H#T@`M}z`coje)#raD2>uNAKK_NP8=t3GV!^^
zdEWm&?pcTYr{|i&huFm|bsSb)Nw8tBgW>r273u)_q1bYn>xHD<<NQHG!p`ir_-^V!
z)AHvOYSna1(3-6(*^`@mH{fm^mxo5}6pr;C;wbS|nEBh1=f>)(oq1$0fL3M6L59K3
zQ!CZf69!qH*Dy$~w{C-Jwt7J?2@z|_u!E|V5n!lE5HuxL34Qm*9eHfsx_aj9e183W
z99PtMdN9T#@?h9H%#5@BM8v%h;YYWDW{cJiR&ozH5<(S{9F4LVc(-P8O#YZ#mY)|+
z^r4I}`$0?#!gPkCR#aTT(c~QA-kk$EMF%ny*#^85njd5e(L|b_qGkBU<cZk8m6YpY
z>HLS2X&@OCivY@BP_JtdHI}|@z#E3tTd?Z~%FugUbj=ol8!I6`oT0CyXXyz7e5S%2
z{WrLZ*hY~rHim}dwzYH<naq~+=I~^*n-NbX9-Wm!d`AyPeT^+GQAe=>!b}#*4bV~8
z9KnySSTc~_*irxphH}Z-NMLa?h_yVs`}zH)20WV1n1d-MzuNsn&m@-jT6Sjt^Yi8&
z%I@rb?wW1<5@KJXFgIaVC;0bMcGn(Gu!pg%fN>yA#8u|F={7is=KA?w$#iz7Fhp0_
z(_?&}l;N@szJko-1$HFdxz8r&X8C6AJDc)ESid}WBntt9|4MaV8x#}>P4*vBCBQ2v
ztPng>$yBB(kqWj64esIuT47E!uwb78Q};_QpOKJm%f@KO^b8pq88OnSIqY_i69aIH
z6(Syuz6^7U8U%-fNq;`(Xi0fQJ`x@V&UDc0Zmaj)Hh44~a1%yc%HEdBU}LRWYe@D+
z+1P{UH@*MbJBjE0a_$(KB_6w{pGgTE;-a9w=O-#S0JoAy-<MZ4h?PcgjUG9sl9=~?
z77-%-V>)dTm%TbWYhUiq%f&q`Pj8yr9i3QI89F=hdn-2>H=|L1jPfr7XVrEt4LGYG
zqgFPB<KLq>8b<0FV7?)?0w@fgP`{HpHnWJs<WU%~pah&6Wxi2rgetjv96U3{)>#~x
z$sSx4=DQ;EH-X^Z;Z^lkTX2xNV(*>q>XI@rNPJt|pD820$aXOp2ohj25_nw<(__O#
zgNpnBo*41PwEY4w6wtEzV~Qi)=^~Ly^Z>`M*0j#xBN0+T9W674`*?UW`-NL3*X%{e
z|EK8{rw9+<rz<;pncOeIbD&+jaU~QDaufAl`LFc%TyD;8sBSWi$T)vCDmG$~!{#|E
za#1}Y(__pb+1a+y`j$WpnZ~C&|4uUnP$cA`0->bjISLqnWrl+L{menvya;i?+G$3E
zlnAS#6fe1^ik*a3aGi&$%-VU+&B?{dH*lR@kYJq9od+{jV+m{i9M34kN6xUQm<|-L
zp8OE2a08RX-gFmNa2hiS3L}EvHYsUot^+*$gYTD9Hv$;qsoygrK$VvCZqVp>D@oIA
zqJrJY{1!3#el9xLA!4E`-m4LA$b%b)#<-kNT|sKND&1bAxX71eSW`uKx^+%U(QfJF
zQ=+;1Zz(5(^+xjAsiU?=gF=A!W0I&~7}cg=%x6P{2MI@zDGBbRpCg|!o$tY+=t=FD
z-a>z49vfU4e4|SNLuEUQ)m(7DKsn#70?^-7_8t@5h!5b9@M2W#<E6RI0$xoHtDRT+
zK^g78j$=1s4}freCBMBFSd4+ZQW!+|0465a5kd}?4JQwC*RdN&^3Gja1NQL@ieg4N
zLZ41GqAb#x+3_NiAp4<JELRibr!Ia6>;(IbyqnW4pOvuk49>Th&7WTz*$=~}|9rkB
z-NH`xx;JK=-U}ylhkE}n%UHmlfI!a^4N8ns1Q@Cq_zBoQAA@8w#wn+LJo|{|NgAX_
z#*p%vl!AhT122<2KZ%o9CXRLwe~GV(u^j})JfpP<Bl1aWcqMU;K|d172mewQv(=z}
zd@mPWDGblzamN<9wkSdi`79?8vaAlsa#&+gAK}6KL(+%C7gi&bnZbzUs=BZRjajD&
ztCNeFCO%sPK23v!=3PTc<v089l}EUSgY{|p?ZID=)0gJ=KgyXAQDfr#LW#0-kY8jR
zV4LP*|AB}w!-K#?1@|^-1#TX}{M+Q!ve-!c?a?EL=*OE~gw|Nr+^2=UopnU!YTkmm
z5b)^7rW$5PO-0$qmw`3WBMD(?RBpCJZD~0o<ZXSX>)~65$AZt#ouU1T>(s!@b(d;`
z=O$%S)gF&pkUq1d<afA4;o3izsuO8oVPh^f%uELF>~)|)5)G~<mC5vAds=xq_w4mY
z1<<gP&AU!yoLP=-t9RhSK%K6&h)eI%<pBaepiTxAbou(;U@zoE^DcjnlC|>wG>A8_
zk*$9?Qwn>tzaCZkvl#u(|F?u-S18KH1oJJdD}Jq9{Z4dLYl{I*0G-<!p7WpITu8E<
zSRuRTX=J5}_8js^)3gwt1`Hdxqk$L4pMK4o#23{0L$B!Hvl`RgzTU%k8|XER+2xWG
z*$JzM8-kwMIV^?5jj?IN7a6iDzd%!H5-VVsY#iCyu*^d;BeTN8Fx`mYCLxkw!U_L-
zeWO9@eHR>@fA_lInGhKNvUDLJcv%}VMWRzt6|a^4B5b;_PMG*2k@1UCXbkwdaBpE<
zX_WsVNG4MIWgu;h?_Q>vT11xM%GV3Kwd0O4L;GuhL&Bs8Y3h!cLsPi!uNMi}UESQz
z^gPAdX%MM8Q3k1Gt>06gaH`@6yT1red2(C4JezICuU@#ivd65hzVHcqC_dR(1BG>R
z@Zp0?ckSQ;=xvC=#d09jEO5v?AV-<Le|xjSV*4n>b-B){*>265lE!SCivy2{SfDnk
zhf1R2q~sS*1^UPUv6^zbH@5!9Y=5Ik&OPqn#CFM$#}(PR?;mWkvT<-Euj9gn8>5A9
z$sq=<3g>>etBGVEK2C(C?U(GHjSe?d1?}%o0vt{8ymj22MDn)zC<?Ie^m>K4t1A4|
z8UgL#p6s4{ZB#t9JA>~`cx`(+Zz@j37Q6Lk(0f!r4nvioV{->$?Rc824k`b0$$@wZ
z0)|9#AoKzR;Gw?9gqU&#jr-HA*q$V9tWdjB%2e5SW%t5YQHa!Oe3ZP~Jtc2xeuYc0
zOv@sGf3I6r5CyGr*4xQz*chR8s?brYL42%Lt?FW=v@$)H5mPMDjz2UpOyF(UzZzRz
zA$RZ{b!abA{dbc@fFZ}w^!$7yvK{W`$xa3n#?USy0LPB6un<~WZkyX8oG=f`O7B%=
zJ7LXCKkAf$9+#yeY0x&b%icNL&W0eJa!NR3&&_Kb$Kq%ACfy#Dds3<cr=COoaI~JH
z|5E}01ob;vC-o!7vUKcfcQ?bhapNI@)9ALgw!1YQ2{alc)I%1l{q85RUSVC8J<>gS
zGj+UvH@9~4>Qij|G`PX*K^{GhT^h9nXsbWRkPv%9^f#zk!L2RErH^lYJybzva`mjq
z^zgkXV_!L>?L|nf#<NN-H`6w0H>aJiE|Usr?HW_x;^W>E_gK7Rfkte}f1{vSc_4^n
z$V*6ZzEvV<5YLTy%?<6kKDN{siyZ0-0MmMA?O^X<BsxU7R^!vVcc4Pzh)TuBHp&w9
zJZ;8)yd5?K3DFl_zoE*PM|NdD?4|4?1Q>P(G9>m912pFXXQrK1JF!n$)Z=OS%Z$dt
z^CxC{w(Aoe9Ub%KXR8ga<UwGfF0HrTOjVFjd|vk=JQAtFp7Y8I0Gx7&q!Ecu+1YlD
z6M5u#)k5oJclPD-<|fa8G(x_qBcu1O*<q9FWT^xH60gC0tv)CoAk|Bykdbn7aL6z4
zWw3}+&jQ|wia<wS{B^~I#bk)XV!DzufvTvmn4nqc?Yueay{fq8AWoI4Z5e<w`EIiB
z*6uDpfv)VJCq>%G+`L4a`lRK#_;@s^u6(cs<8`L_``+-cUjYt#<Dz)2O?g0HMD0Av
zFW4oIx-rq%n4zVVCRee)@3;MiUZDSoCf|C&wapsyPB=1M;75I`E8ZF$6t*`~p+a6Q
zZalKUD=Lo;`QS(ICr&n_U5(V|1_klRl=up3$`)S7)qE5YX7TAqR2I6|X5sDip5qlZ
z0|C4y%@@>-=#-5~k=3Fv3<LShdfNe;qq(7_1oJ9>_#u<NuLv=o<5vw#crPDyQC})#
z%#RIXG3Olz#^KUfhZsmH{$^-^cP~b8dH0#vCOnW10LWk>eS4xwVZg_ee^X=#P8)aB
zpYVP4KF@(qJN?#_hCjEj<-aAA>43?4B&E0VCv>8`RrU<OWh+DHW>RI|&*T9y<Y&6H
zF^`G$hlvo97<A_pWpl+B*smeve7bzRM{JeW?Ke{}z_5l=rA&ua?p~Bi57W?3pyH8r
zAF%de`7y|_<u{$IKEHTwFI+6sKa(o@*n9^{<*=dJ8M%U-vsR9f`|^s}usl^1bAN#B
zadAv)4ODuF2b}2ycmi*Jz(b~FX$_=ox&SX3-jq)DH=j^7zNsgl$E7x9Z|`_O>cZnU
z7waWq6-(8^=b+2!-xsq7ci+ZZHy5ZIn@U$OZ>-c<oJN%?L;?D1A>gu1{W#Y)`Fp)^
z)*mZ^!nT`7x#$aRi~UWZ!x%6e|5}$!pnncJ--G3cefT;wDeBGV{`Kq4#-4F$eF;)F
zxG@oH4^JS4W1<B0O|u(bLPeNpkW3+BplN_@2z>~>e;r-_=W~qnAUmZx+>H+x=9w5L
z;bY9Hno2jnKE1?UUn70%?4W*8^-8D~CU(<j;g0Ti?;zliZoz+Mc@|E-;&JV>@-_93
z3BW14C~A#rF&{_}{8H{Kz52JY0QhtykX&$?PUf|M!y$+wzp#OK?=xw%%0X%376-=}
zQ#<6BF^%bH^G>p`Kkbm_H(<Mn9gWM7(h4oBhcdINf25}1%mkR>yo?7Sdp5%38TF_{
z(YQVrj1Bp-Rjya6>VeF>TOV^$QZ#fC>RI=%1}7gNAp>HuR)V<hto|QUZy69(*S!yu
zg3_Rp5~3pA9Rre*(jC&>T?3*b4bnMucXvohBPrbs-9t0;9`5`8J@5Y`=fkki*?X_J
z*0rvsWHnjvKt`gS<AUayDfTYi3;$Q!Zv*p>;ef<Fqjs-djQYV&kCz_)mITi`2aBRe
zKp22=pU<Yr;9DPcto{xd9H}-V){yZ1gFv4CEYBcE?Bpao=_AG^MfSV0>jFOdO%5*m
zBAv40!RpHnGc1jti3Plepcd7E;cdHJ&iouw@TkV1KHJc@)=&Kzu?sIyQX4pxXLEJr
z1Zs~l*|YqOuEb2`8*-7mZ=iz88wog8Q=RM=ds{X@c2rlb2!D#w_eB&aG+6E3hxEMq
zz^Fe{%u_n2MpQK`A1^SiZz?hNt267Wa+tSxkez^B9mkE+Nskn_np-C|jF|$8-FQj&
z794u@_1v+oWOZb1cQxO5kFMyoWbcRvZ@fFHj9|IY8)u$qt=C`KpUXj4k7-NQSx*{7
zjslWV5P1HS<#zXW6+CHMLMqk{Y}Ge+KZx7V5+j&wpKAW=7J;Y;AWi;IO!x};ZFZE<
z>zcd>uWarvfjMIO$b+|&s&MPHv9r2l-4y!yQA3BWsFO{@H@r!eWq%6L)DJ%WFfgJP
zrwlmht;2KO88mD5yC&r()6ZZkC9G&u?xmU(D08Vvx<b|dKn<Z+f-i~<@iuE=(vT2&
zH?Q<1C$v3rD;RAPnCRss-o2=*0cPK7e>>4{GksOoMg0{h^GWsNW@M@rsjA=$;EY0=
z@hP=3?wjI<cTZj<73tK-UcaVNt&=jFuX57lLmoND(dD9+W0ZRaaJ|X<U@qI7LtiYz
z2W)Y&{2n>Snry5~Eh8YS4y_c|qTQ*O$!Eyvc-oV|cHr0c6fxA6$|bUXJl7b7SJw<b
zMUnb}<T1hibg9lmdT+kiV*Ei6Ppj?qhiXTXf#mmPCPjfQC#R0@riWK!Mlcu^yB50Z
z1}qLA=8ZoK-s88XUp}FQ%nI-h3pSH`xnMK@ibTBmKP`ZJMoN;_zvRku`~20og%yg}
zurn_RI#j7N?c{eK?YEOV;WXrtt0xwsHBL}DFHb20He)Q&gRxZ^zsTVVa;K6vuKyWY
zadA;hOL0M3!YFE^6iiR28k7gZtFm_N-=EBf)TnO{WZy-|H4K*=5Knf9u28?-Pv*{d
z(Ht)2I|kp4a|$$HGc56+r9GPsq3>YIpMZ5J>@Qx39?Ga>FP=nFD=`Qr79K8?x)B{O
zi+kse#`XRMo9|LBd@YP|OAiVP`rX%;0?dvs<Vzf?rVyUL%(Lnk%WYybCm7OnG(VFu
zC6wmDkY=_<Cs)nA|3G=(4venNL5}{t%CX$`APS7H$+g0wlVp+7hF_c##WQIN4cfJy
zp$>W?E*~_Vw6wISyPxrEREE^hjRT|UtorkpYOPOos_W{qo{a2I7C!BM8q`dG_Z#qz
zfAKwG>)b;lzVo-o?t-q1e_z9iPNq*VPV`QCL%iHLvxb#|;f|w5M<`LYN>yJ#W&D44
z!W*1;xWHOTKb_`Xk|cdat!D<gL@@Qbx)`Ecv#u{zdp@^m&uLA?Vcb>ro8IFTs>=(K
z?DDinb+>03a!$OH`THNxA{Fphb#wgrMnbF;4gb@Vy7Q}T3apI=T@1)XRo-mj(3fU{
z>g*;nA<VVBva11D{EX+i)c7V6<OF+G9P{ew{d-^b);BV7G@j|L(|vWR;+fp{{=W;6
zcf%4{zAG5timsA!rPw6e$V?I|=6|QQta}uTRjaY*ZuZ`7uAc8=Cp8;Q_!!eZzRX&D
z^ZOPG92?RRpZdcf>^^eikI19Ok%MgGWT(_Y^V?9U5&%_Zt>=ZRZ~${l_YLU~N<N90
z=X$f(^d@nBz|@$Jzzp=f-e{7lni`zMXCaOOOpm@B3GXNbH{JuPn64DWj@;N_LF@bO
z{-?%YF`=<iS7WkRr;$|_M}NH6&V2<`GgXp_52ee+qsG$*CE6ATs%0**Ne^g!xF)Wr
zHG`7l$QR0A0!Hzd6srvon0lWy2im%QBmc(^K~AT}pHB4<D3W;wbchAMi3lKX$biKw
zba4>N22H(sk**I;{qSXaE-l5~&v#F8xx772AXS4h-aH3c>7fIEe6VTaS^PjO?g<68
zdVZRq*K)N&P^4Oo`~x0I01F%6d#9TDx^=F(Ii|UqPYJfk16#*=n@4+;S?LBD2Ck=z
zFA`*xXA&6<Ln%R?A3W^O<Swl@kU0b!b`$}`bD}iVd9ZmRLYF%i&`K1Q_ND>`dT<Rs
zc$y7Vzum!pBU+os9|`veZ>~QOJ6>)LPLra?AC&$*+t1sIJ(FAx6g$fF>kYIGbJX+!
z26Y%mv{?+{H>;CEWME3C*gCcfyI3a)fS*x;Fl-Wvt^y%p!0`E+Rp=XI=&a#&Q;~v*
zOKe<2VEf{WRt6_qw&E?1FMZv#px)`@X9V=Z{eLOrojf=^#PWVv=MYp(3h)j#ajfT)
z81Fy`rm7G>m~hw|b15d3xt2qJ_*5IdHKWKq{O<raONw%2x`kE5JqBvlXw-MoUDTO4
z2G9A&S%2WNt~N+?@L<`v6i<|4^5-=aOq88X+~9cZ9zKlqq)a66yxcrpPNmH7k}Pt0
zQ_!lOJ(C1)R_oT<IL>p$WlJ4}GBB8EM3W9bJz-(ZXeYULIX0ZQ7r6I`I(ld>2D;of
zR+APRWv&XztbXjXQNMW*F%g1U&qnRVIY<E6PA-?#WOQ(F0mo`)M+XRpqH8ejEB3B;
zt@*CN-gG;pIud3{gDy&(N#5r9@Wp|rLUO^p*0+nH8erB+F~2s~wV_&U18Y8t%EETJ
zq6OR?q#X=9a^_;U-;>UlN-kYN4W1z{q4#)11%l{PrdYtNSx7xPEn*7Qk_j$duhA{{
zz9w&?{uBUsBd(V{{4$}7naM1w@x}Hljp7e2*!hP3<WfNA%0#)rHhQ3hWG4^_&M+As
z*SQ{r;=7`p1|1XKYhFKVd>I^)_apy;niQpGU~a@@m8rK1rQA-tGWyAAQS?YHujPng
zk5GXN@uZH$vl<<$fEYm&g)Fb{<KIV+>icLV&VpzpXxZO;&+rDKwj<f&^Zl<rs{h#6
z&hjU|8mNzo1|bopDuF;(zr%MEWA3?hVO-obY^oQKL)Cc+ZId(X%Qz7a*|YmjaW+4@
zgnC2D<h&GUp6lPM<tpeP^;hKaukJD?(q`acyhCVOPY@|tY*YK?=9|XElivf5F{xdf
z&p4A0a75d&Q@E`Z%lIdOp$_(Q<26^AltoDa&*ikx1~pma1S9P=o*bGiSu~8<Z|-c$
zz*45NAh+&WKuXK-g2SoRdPrp^Gw%hKX3!!mi|TAM_eE;L<B)|oKb5?XlF=$OoaYr4
z%J04a6Po3Pc5*L~g5<xPvs+bWMAUWi9_dTF<c}7t_}>H_92^!ZB+g9vIO3W4)Kh3%
zO~PSZ;O|%paJQ77Tf^1NE(v4VT)Rp0uT!|7cqxKz$Usq0oAd{p$u@TAu*_0lUHswV
z%bD=YbMCst`}pkv5Us@OV{zB=^5@tB@1gwn1B(R9fE1*W@5hm5F3(jsvpp4<qNcj+
z&6M8}4a==Ak|;FLgGf_;CH_jb)By3b5t;i+j|LS4Y2xTwFc6iw5UHXx7IE>i&sV*O
zA6=5X@WPL|MSaVj9WBsJ!1tXW{u6hhJmWX`KOZh8%8R+<hJ?AqB_{jW8A~f>MEhgq
zHXS;<*2Bn-DsFU`8PtAs+<IzW`b*H)!S$PCr;(>mquW4r?+PBtA68}=)tm4egEwXf
zOiX!_8{%q+jmn&?+3V6obbu{^nI`5APoqCyF%<Af_EEZDvstTI<y~7bxqtb|NC~_1
z$!rO`IGiz!^!&LFw~NPq)Cup2zzJy0mZ|Cw@u;x~sH>!_Y!z=cY;|lE+%5M@VW812
zZ2DDILK4o#mVD8-Q|mC!ND&n1(As;Ua`$n{#8H~;O~Yo`hE5y>u_4<0ngCedmCAu@
zGt5ETx%K~00RRXvECBV^HrW14xjw?wJ9UTEY{-9R@BTo|$A)%BBa)Wv&m0-U{&ezH
z295}vkSm0yEz_CBV1F{dP8Ze4iAe)jZV<DwG`J;IFdlbkQE^a9W&sw31Zv=^SRm6X
zlQ<k>dW(9NJn;L}(SP*x{K#j(g5pEhPQ1_QV!#iDi02sVp+@pNE(tE=*9@L=o+j6r
zp5E8ajYTnImV|*nHe9}{zS-p5$f8X>!a4KO9CqdwDAoy`mI_#LY>dKX_vM7-w*goG
zUjYF$WPNJ<o4b6Ly=abq9vPwSbzN~i)DfBuLuB#UsnM1}?l}rMQBD%ftGa~LT<>ZY
zeg$`ii5}0ExQyXu0rSTlW#R?QP@c0&KC;fKGs)3BD~G39Y}$bK!|g7P*sO&8ljIYa
z<EVdRg&jtazJ<%{L1jM&RIXe3MZYv;`@sr!?$>8NISFc?NA;Orql{_^p;SBpJ&TIc
z@8<22zhirue@_yD7k(<3V5l#M%Kv<EBbjZV7-02U{@*#IHh)a-%zaHufNgq1fg+Tl
zJbu1^{DH7shMt}V-_z|Jm6+%m)FlqT@6E_FPi0SqXg=x8k7=dOYu155KG=5`t4HFc
zK-mPaQJs!}H=7vGpw+wKuQN&r69zTl>nreq`ZYR<zW7S9yFQ>#F@^88;m_b8Ta{yz
zSqyG+4#l*pdtmEzl_uE}Bz=hyRDGo$WmdG1l6&!<K(ro|{>uXd^w;OpZo0(1ACUcb
z)qwz`6m#eQ7^O-0*WnTUM-WeXLuZo@^aS<7e6Uck$9ZZ}h3h9_Q_6VWhI4d`;KqZc
z_Lch2@#a(2?hAMTAJ<|+_g@fJLL6y~##+7LP}-jb5XYHKfv94BuluC!^aW!0)NXbh
ztHk(Bdbkol;5qVDkMoCe{PAWGHzGUK2TbTis%jB_^!bk=4yR+&hH)@iXm)*0M`+%=
z{}%ct3<woJUQWq%1MWi1sAg8$uw{%@h%nE&=)wjqb4Y;-(&D1BP+!sTZiftRw?dUc
z3LgTdt)Y6?9Tya<HKy#R<n5#0-xD%4v5A=^{CfPzXauX!krcCiRK^$ON8h3N`W?=(
zRH7Z7H#a?F^!^6BgQGdCpN>w6IGNC{djg_28frZ?<Qp(6v*kd%mSU{0&!+6uRlH5n
zB8_{s^^O|<_8VWCY#vrK0kOb8@xcxXpo`%aSR6+WJOK&|FUUVoru#4_SNx&Lg~F6r
zJ{+p}@zn1ZS!+&lqG!BXzU*#^!UI#m64mE~UiiI>NL`1)4}JbS64YzJYKL+S3%t+I
zx36Nr+WwwbYsl7CSYx<QC?N>qYB#3b#ht4mw_Z>l10Ov@bn|!huRW!B_jS?3n7DuG
z1}6ws5@LIuk3Wfra=)7Vy^BW-WwG}_?_r9e?!N_NqDXuY9a4W(ez}!EItz8(?1R(6
zX}Z!(-z5CST>N|Y)v%-W#r7?Ba18_=m>8%jA+^2?=m;-pFl#UtIury#9Q0et#<Z~8
z%Nr_I{@kb%W1b;Bp(;Upk4Zv?axb(y>y^m}GE89AGV2~A@6jR{9i#HcJw2C!)W5>h
zm-DM!y0wjCpY284QMGh2`H7EuO2+y8Hq!6C$h5B%VH5g(%k~?cl@GP#hJ7P}K8C}4
zcXNpn%8BNWgi7GjJ$7Uax&5<xDWhhHMZm~IEGtaEVv6`_pk{-}&wU#upVEvMR<Z5G
zN;$t0PV{JKXk2g)1&x<mXQHP5HuV;u`rv*uPH*2}Z@j%c{HydT)s5DWDq;WeQU*HE
zbdKTp`*S(j-y}omFs>-sH=tONL+DT_4#<OWsD7g;e_c(Ny<2qkhXA%e)sK}a!bvKW
zw4`yW6y5=gpdT}absuZq`R~wdq*a{vo>UHrSQ*ol{a1k<2LWr}r*bJ$#+TW{bljeU
z0SNisw~wGVZbF1*4~g|lP%58Nuc~){zWmTSRb|5cW)X<j?s3=dgJ20#e}ScOuGQ|S
z9?(EcXY;RM2fi@MeVSIgr8+f;_xi@^>Qeak@PrZHV=4XYdB$INbe-;~7;DD$s}R3;
zpFkc?_8M~8X<Y|csF?Ic-#S;sUY65Vqtgy<7AE21ud@1>P`3qI;B~-wK4GZK#QgKM
zfioi-{#fFo6{=PSfDqTOozJ5@mU%+qm5~h5#wJpouspi9)|;-EJ|n?*y{!$)4QBxo
zGT(vhcpC!pYv-|AR4Z}5DZYN-Ia8_tIAHt2)Z!)MLz7`#-gAJ?kJ={xa@!gt(U82t
z;s$pa@>YnXBLJ!H{-7WVG63`$3M~rltj`VQ3X{A!cG>!+Zq`<DJew#3w3G<9Udhnk
z!G<cvKK2}rlSTdV_49oMja|3axd8&sy>(P(C-n#EuPXihc#!sa7DhB=928%DC6b#0
zUJ%{8h;-|LF&tYP;9g;Zl(4NcIV){l><P73q>PM1!a9}JqUe%d01zF|r*)K=#yS_e
zKfQ=7+EwlKzRy4F&I|V6U(|W7-BAkYUE@SofTk3xw<i7%*%kkQl%8q)uW@*Vj5Xys
zDH5+xk6U9sm!vCenAASjS^u=4)o=y=dmel*(9DkAs7C078`z*yr1tVfI%DG%)r_Fz
z=|pek;Duf9FLf@bMYZOO9qhL*GE(DJd1VOug7v(x2@oSM15#3Qvhs14u;ut~_@Fb;
zQ4>Kf5(v0<S)hkA3xH*nfijiVV?%1C1M>@J<*%6y3c$z_*WE=k@AEx?KCKaD&Xj`E
z^rag><~`3YF5U>*T5xzR<{}=^x%g^e1I3mWF0zP|^5x^dBvAn5VzLn(q4?6WvRwey
zp9*RSqL{U<(5?^|>2YUd-1cHSn+gS64LWeXf5VqFJUlWmx*VB5d>6)`!CYb6;eI3F
z>VpxRT0%azun-G`B*0w0FaD_lk&Za;A5n?`!H?Stx;yS?J66(q1^4nB<i<c29hkH6
zqvYC*8N2h6_#zWWNFx@vg45OU55WmaI?AFpjY`iSh@FM4z(1Z`$#N(Zg*BJjS?ina
z4)#-hZ$joM&U>+gV9HMo9m4PSW8XiYu>H^3NJxolK_o<wRobYdB?yduW<sv$K&f)N
z#~ZwmBoP8n=QW%_U-LugsiO%sgp~4KtU#wrfN6^J+3%ug9vlIcrLzb<4~Hf4K~o!*
z8i3S3UVsPLJy_asJ>N3Btum3*VVjg3a5QI17&R0Fq>1v)$n|%6VB)n`Q@B9e#f~N$
zAixooQfKvH-@W{?=Y%Lx5WwNBCz=WLeY^ulmjpjP1jDjoP~p<EtSg@)Avd!t&#H#M
zUKi;~$D2gG5>gc8IZ~+~yLREpQ%u#N8TPuHf5o`_JJ3W{sI@z!n{Kzk5Ds9icN5bV
z#5+QJmVaAC#5e*CI@B!W5d7X8@c`wF1tbziqBwr>Ep~TBJry8bp3A;EW8DQ<tAZ<6
zFa|E?4QOWwZNZnDCL{^x&Kv&EJDZ#kAw1t}X5k-Qo!R~#fgS{t+$fr#kS{Qq99i;B
zcy|4wcgR+c84>*M6%k$he&8?ULy57+Hrep2jBo}q5toWX%*N=kTM)WR&cA`KD9NKi
z&wDiJA>TS_)LP+Zmv=Nr4w4I+hIBN1Y+oap+qQ#lwNM?)+xHYYy$y1hT0a)=G+p|g
z?d-N>wMi8YZdDxA0f`Ax!cQ57{83p-1$veIM}X6Mwk+aj(eT`WEuwT$^ikOFnff68
z(44br-e(j35TWcm1<3a&kvkaG4QN};(ZMs!h{OpC8EINDxfCEA)ssA}@9mLIb#|W_
zHz4if?HLo*fL9&66#wh`?_n^na{Bk*(63&f1#M27gVUo_wx$+rrYo{+4S~*t`0`Jo
zKwEsNDW}VQHvzd)1H49mF1V&bcu9C*NcF*Y_29rRm{$c5LybEGJ~&P174Ok`=NWpj
z=eZx^dQFwGvy@c`D-D8m@5}Zs6=$8(lTta89o>$h3dKh;9`9Ea%@L}WJ;Nc#nY*6&
zJxpY^eFrxgGy0G5si=`i<Wi}KKjFK{b>%pU$G(z(EKv_RvOkW&zY$!|2O~=v8OtE?
zbCx--SB7(g!)ZiZJ+2|0fVj!sUE|F{RwT0Hs06RZx#TL=uhzie7AUpp(#);TU~8v&
zS?aaN@d~&0B~>-4&4Td@UOD|-1qhF?VM3)5*7scW*zVF0-AtLllS3iZLai>$q1Nb!
z-~)m;%vvsU-QBSQ+|sxy34Xo^f|RkSc<!Y;x2*Pb4COk)I(mRKrB-KdCfVN2-jw5g
z7hoUS8tiha69?##6szQ@d_B~|P!ldRsj=7LUj6cQ`@H)uD$dO>_##_5s9&Y`%V;zf
zy?lI$W;Q@9{^`e|xJ)c3iz(!H5uPxrd(^hIa;VWLrB%NE-j~OhcQNUZ-abg%=g0Sl
z9~u&^x)Dv<eFS&7U%klZ#*(mu??|MlKE572Z)7EFe?7nO6xA&|s4u0CzsEQVX~;g)
zMKboNm851-jP8GGGH)1wQ%uKjuhK*vy-DC1b~<|3=C|5>dvLpu^+MqJ^CvpNi9P2f
z$2)*5lSbhea5%-E&+4}<DIecoexNRR;-J^kBrH^Gn>TR;C`HQ}v^#72_2(qs4iD#m
zL+Ibj|NIJzuZyV3r%ioP9a+cx{{4??^RW*jG(!Y)6zNlFF8oH`*ApVZ5NftpAm3-&
zlZfb{6}jD6dXqvs=uA(NO+AFqS-@9tpBM4BDDMLoF_TWf9&Z_W*0XX>zrKsXW+`U!
zPsyQqyB$jyF9sreT@wG?Cx=-cooTC;xld#E4}7tD?YP~;ufsRg`*09)?z@)Ut=Z+3
z*_i66S_N{{biWPz?ZoZsuqFNpR1m)sFNXKT<5$KvRBs?PUnMyT+j9tU5BRDWnYzqj
z6@HD6sOc2Pj{3HJPE&W#hs}f=1};(o$U*-eReUg7HUdV5sLn(C$50ywb&?&_p6ne3
z7x$09dkK)?mLU(8h|;ij>U-@Tk4$^(j~6P*aeKI9PpH60o9GA@=4RCh71&}!>B>t&
z{7%r&&+h=?>k}X*xI4qWd1a-&X;!ANRs&c8<xS3%hreHI(=lkL@W)HZAMOXRtmoSK
zAKF|6(%b#QwaiTpRq9&bTzIjIuF1&+)MBm}WXn70w8*y!Gj56|Va>8YpkA+L2}tl|
zbg6s0k{5xJG;N~W`R-;!H=uj+Zobl6)w7ht#2e`94RxW?sc{v?YX^&o+-1dYtoa(A
zKiJ6vOAsIa7TJz<=0zt%Ye19lgC;5x>|Ok{8D6O1I4ivARJ6vVD9`VZ-QRW!C~Y>z
zMfXHHN&DOpexuN6@WFfs>fXB5*q}lDmt_-@0_h0R4VnxLxb~UUY$OO)$`l{^--mUH
zqCYz^zoLB`U$%m_qCP~=%TAGvevPDG@ZqvY5h8EhAA+(%BFMOAO7+?qM8HZJPy{e3
zN!8xRb3wq>p(MHy<B}ThSzi#AA|fbO+N9pxE@ff^L&<XPK7LIQn8WcBl?b<BU$YT`
zVq64F9WgX{7h6$rtFk_9O+{rGy-XT+IP|hKH)JDU>hBTs&P>ok03zU>a(Q^IGzUT0
z88pO8;ZTUPLfWVSotyPQYzxJ-98<aT%ji}7XD3&9W6_VSVqL_N;#h_dbi`OH5@{vT
zC4U%e_3rs>;Nui7r9Zjlj{kOd&8yj=lerrc)@B-}SYzQ7>fcYz;hvF}QrN5;aAuCb
ziK`&+3_n++G&E2Q@8S`{{Gbh%JFr1xF;OSSht0;!;SFm|Ll>y74T))O{s$(e(->vd
z{LC}@_f$p&fX+B|(9pl?&GW3OoxKFB)jP`A5#QyQjad>H89O2l!bAW;0QStowX5u<
zxeK1_oR5sZTAw`WB?ovxzrJHxu;N;e=Vlm=iGkh@0etP<I)PG2eQ!6E<h#%(4_wci
z$7z7Ei#e9>&#Av{o0pp7*8u~pGW;nylkyS#VL)M2BJIZau1{aGyGd>=a!_pJU1a`|
z-R-BXU(?TVc6_KCV#QLu_F6**FAeD)qM92H#nnUAG@tNH*+S}#s;kpEbF?wM9iu+S
zd6-i^`)-P9142wSU`<=8>CRdFs&(S3g*q08b2x90ih0;Ct70DcgRWHST?D0YNyLc|
z@F33sN%jqi)vl%BO%979-s<f#r&pDf!~WN{jm^*=zEoJ7a*e5tPiu}7&ha3|2fSY*
z*=(a%FX`^2gONNm1ADN)Pd(ko<}9E$zs5Y#`dYWzvCbU$hu8@|u5F^+d9pDh_x1in
zE8AUf;sR}`jIHe%@jsZ!qY@?dGvt^Q&caEWE=-h<l!4hmU%F-WRQ-U?y}{fsmL`Rt
z7;oB<D70Otk4IxHus0p~EPUR&4WS}wefi4Cco>?<u)XXfgGUEQWnhyf0x7K6**ZT^
zT>Ckk^)NgHG_tFhvT_C9(F$JA_wGNV84f~rcISv4rL?EKI6CzCt!bM3sM*k<A-uc#
zt?iNUVtf`QNPo6DR!0BM_m;9>kIyAUi!cy_bvT{(wf5K<iAC0*{i7o>deyvKfWjCZ
z5#e@yN`1e(IB-6A3Dj)qy+`L4yrfN=CgQO)KYr`T&I`r2QL-Vo;CI2+(|BSjp7`O8
znQ7V&+G>AxZS~lT`;B5&L~$F3Di9F#n9SCe6JjxJT>oL|h19rp(y?~6_HjBTYfX3F
zc$K@A7qMk7TWtBpu|@2JsCoQLhUg{Q8+~P_cKKBX`8GZat`p2wvitW!?4>_R`)0cF
z{>p=B!rHK2SIUOJ$IczK0H%YRehadD@}?GL^e4wBW`h5J7x0kbm4yESS<(3KQ3-D=
zRiF5znr|>BF9-}eoHS-oU>}e;dflPI?Y^7RkRl5cM$%U<qK=xn=3kIbdR>xDEwuxr
zAoG}y6EgjzBgO^WAZ4IQ>akgSjXi3IS0|>O4_VlZlk+~D*Z3S@1!erM&ZsjLFy)^h
zb&~t3xa02+uQhv^iI%KM^vogZMP>%0TTCQlNNq7mvuArDWsNy}O1H|S^i*d1h=j%`
z_q?r=rhj^ZJRsrnooLm^GE56DzN)8|eTz>=$08JWofLx!lhvVhAAdLY+td3p|F+Ou
zSj?Kh2-}avN1IUlH)#OWGJ#?;t&kNV!0tf9FMLMm4H4H79FoczOcl&)P(o2qY<%Y|
zwIA|=_uk<M{OdrNNKlxl+%=XlWYS9a*C}~|?85xqEzm?LHJzu4v0uA8N#<q(3~&DM
z(1Mc%uryR7sj9`+*V&g^+#u#G8M54a8k~FePABc-Y5sst?F$xz-#ZJ&dpN7Mw=Y;q
zP-mF$c+sE{E593&pcyd=j=x(%t!O&azx#{}Z(_e9tU22omMR<JASXt97f`s6)#r>K
zX>q1<a7W<SNAq1&)aG?XINr&PXTWoYAa0@gWxN#TcS2@3=gHK|pkhH)EkBdz_pwiT
zwNw6!bBtaCP=MWQI+YX}%p_`*Ej9CEeU18;1N(TaHW@UA3`DlZzj*0^m>r(#_vdP$
zm$&|X`cq1o&_T?dDv4&4OOw~l^h0`6rJ9o!vzd?ste4ydc^@g|Pw;>20OMi+i88Aq
z|5$-><xvtjK2u&XYJbedX7^M*xWS%_(U_Rc3{9|I(7DSl7wZqnFeHm$D%2(oBhp;H
z@T;fK?d~p`1JQf4N=Cl-IFpTW8asXHB$Xy5L>`G?3-;*m81VeXr{4R4x3Or6^Zr5z
z6JvqmmZXO>14mP|^{TJ<{C}MxVx8|Fi5~A2W6|g_-)N&brzDqL#>&RmNI}-kfzrKV
zwP;WNntujzt<Quu#3M?NzdJfM&=l?BFVYoEWUk7ZIt|<}@Zx>iN)8~jN5OCN_pce_
zI3=JnR)G2S>(}?`lvw7Cp3BYtsUd0}e4c7=_b=%4jjP0w_E21(35V>83CwLpEU{N>
zzCqI(Gi~x-(vyE8G0zmX5*)zk&dY_OGx=pRY1bh{@k-R!-bKolm`^EUZv3U0nud_5
zI3&nZ>h8#RsX}YSA&QNa`G4^#plJq342=~16h#kw6DImBzRB9h($RA3e!5yYkLBCI
zL<*5XPc4C`AC%}2;<Y?B%PIQJ*CM<|g1oL_$Ttn&=q&uB<+~i0{Ew;gE&T!Z^?)K4
zZ;jHsYBr}2YPcNQXr7;b0}b6@8;7;G?*QevcCqNfg6L6s5uX&>ZnuR>z4ve=nSu)=
zr82qVw{Ki^b3)=M!`<bPtQvG9=3X;ZOW7BOaIsdUtc8c-#0Sh683!j*j#J%1K*}ld
zT9()jn7sKhD3sI&GJWHedNsfR`1KndlGD~#CI5djWX|K&%n`C9tOY`F{LY2%zpp?2
zu`F=CEY?AlE1KBeG$pPYkN(u$cw=z#jrl6cb9;r!ZdDUK8BMYiJC8dMFHp0-zW&l-
zsS4fgaB@yS^<_+r%%|KuwjA-*>9AR#Zdx3GQ^Nc0_U^9c=>93+8`+Q$!hvyA%u_D^
z-v|BT?^&bX0YZX$aa!`2*G3zd*{e0yUf-*<?rHNM%ydhEE0^(IQPhU4TW62?<cSy+
zC|fp3Grq5**>PrG7KfM1=Uc$_T8JW1GitwZR5;3f=;-q!(a($j&kIUDzMzO7Ve8`y
z7MhydU$PQ@;E1zLkXFzBNXgM)YR_hsvS7n1z=fz@X$cP9?0c3uPIZ*d^=DkSB<5=&
z{+}|oPx+G5DeAsHct`ezt*-2C=+rNsqI?hN1bmOxpMzczX}q+`uFisJTJ_~-qxGAg
zG(8r^?75;o?(1?sH~td-`qTrTjSuB2w_8O&l3Y{c?_Qb9cpL@xZavj#e7=c|8U8I`
zMnpIHRG|v1cHlPC<-;!bXmFXlL=EwGx;`H_<iabm`zgdi3l^JPs10&wFWC{{B8{k{
zOeIp#lVCF^{Y7D#=&!^d0?@w5Inv2E(lru&(WTz`;5b&@xwq({*!{{p*zMKL{+;!4
zo1bnmJR?0rMBh)q`box0Xv*92^)~#R1_YS{Yt*fzqADgnwP=8-4?cc?J)Vy;6{agw
zAU!RnpZ7*)Ul|?5{^$I&1!keHMNn#y_*3j1!Ac>gLogYn=?3=WZpyp=H}uCxH9Ce@
zgP(;wc$ADeA(l`0^3xpxz3vX2I?H3r>fkAPE{W`52A^NbbcqF!->TEcat-DBLuu#3
z$}{^__S(j~z3m8NrdDz;$4|RWyDVmjZ5~XFWeGt8-wj1PkGnbk^bjQ!<x|#pF#4Xu
zc&Ei*K$C1Po#zcl-;W7D`0{W3oRk&et2WzR=>X4}r1}k}?3XF?tk}mU7~);tq&KWE
z2OoK8@gMAn58Y#p^8WQGJME5*5>{6P9SxuL**GMy=r_mZCF&O+fOka9`jY#XBeri`
z9Pbo7;y4wBTE<FPJ9xAkeaT>Hg#}W6ti>FcXdFAfpQjWy82%RY_a3JY^e@-XZ>As!
z%HSsSsI-+=X4q{j93tCq%!Z$G^%Tz=BQ-a5esIeDYZQ77o@$BfU5Dnn;Kq;Y@nT7j
zbh^%XWk(LsdgYG2caZX<*#l>{lfdc<y|!5DIjQGQPI&X~g+-QM)@iDJLqbMD!>koV
zM&5C6kaPPX8cd*7CD)*6fpf6ZxLS&(Wa!`i@XIV^ZapqLJyDa&t3k+h?fju*cZqfK
zXBshVypR-4r7uc!aZT4-YDDM{mOS@}+R8!eEH06K`{BFv{3Pq)2ce_(k>#yqx(vpW
z(k2z#?FA0YPbOaXf9M8-kHK1sBFA5=`vgj+JIFRFP%*HXY*<?C`LC}q;_G;{TpIVm
z=XC~V8{9msi7UQN+N*RR%A<Q)PVsI+o4BQ`l{(w1hx{!n-WBc3rPEI5<#>w(NJaH8
zJdN`x%!H$sNwKY4pK=B)mbA~`vJx>16JQ#91}rVR+0|1Va=3nd8Yd&?N*$l-b-;IL
zHCu@+3kR+0yAK`9TX80etT#xV<VS7!^6XnlI0~2WY>%e1pC#nL0r}!@=zA#%AMT)l
z#T61uMKp$R;G&-?CT?sr49ynAbM$_gPQTr7+%I!fjWN!;e>>48F`C%=3?>SQzqAvn
zlh&Z%R5jOA2H3OwB>tlj@fB90@O-zfoyn}L(UZWTgL$%lC|ud%_J})bXHs(HC&+Sy
z73N0*p-s|{S6W}ev`@V1D52`HQ7lQs<N?1R_sUno_Kh?<irUqFpe#f6dMg@$6zI+v
zjg0-cy>`m0U6>-Qgg7fVZHb_Vp%)k{f;W0{V`>TWmT-=4ArtqWt?RxJ<<YG==@rH(
z!}GHM*5$)V?)g~p&zzX26{kx)3l)lFW0=9E`%;ef9UE}Zbuzk#n<-@B`n~1GjiUvn
zq@1{ZiDa|O<ROS6zjLMfmgVYEiGzkB{M^cf8)+%eCee8;mR2O`B#afV*$!vmtctuj
zgSU7IAnddciA&<F3R3eI9j8acu|*9%wj#{ddchovt1f<ic3a#iU1rUs`OFpu-a5PU
z%;2|i)#KS%z&0Kj*f$-`RGW>B^vh^^x4|`<R)@px3|;2j(w|_HM1wg+p2Ic^lk?R`
zK_~<sEQoNVS@nfP4()?o)=PS`l&Aelx_x&VR3R@ZUNt$>A|-(!(!QGKq+g!}u055&
zZd@es8mgWd0(cFljY~#<JoVp4^0;)ouo7Ii<gp9a7==_3Fz^@i&zyd|clR&Q7~HQK
z$5J*7y>&%vS_v<HG=E5exO8m4FeY&6a=L*lh8`$1AXMUHv=N^!;5L7CXd!aDl^WFn
zx+x8lH%wSGYX4bb*Cf#~Sc2C<9tcHX?>zj`)Zd^9_kwOy<ruuG6ZxCZ>`~QLCmiIg
zO&m$keP`(PM_pICtZck;akk~4W-@oEtZ|s+__!xlo`RlTgDElNuHh#!!)sQzftWwD
zdhT{j`}ID9yek*XVXSqQb53K2LsOIT`gS0ft7Y$Q(BM4#PkvRtVV?fdt#MjBmSm2N
ziE|d#ie8yjZ0qeG>&y)+rQVSJ`z2(ArnhaKQ?B>5yXy%I+)=gY)BmtlqXep$i8*Jf
z?)kM9p}E3jk>TlHR~BoccEmcP+h$uk_hcIC19viPItnG1eNqSw?YxilxhS3Zv6%?*
zy|?0rN6{tt;V#$cd7Vyg6<I>nR28)Acbc@dKW}ZxM*b2x$m}kG>4CR!V!m(WR3CTw
z#N+VlcIY|%QGXkBx~t3z@xA!ywVDw;c#ODjxy^OnhczUoR<zam-k3qG?}R-T%7=wl
z^b}Tj!7i|sa%L*O6Q{ZJ%%zlf9oGjP-8<E1Ei#kryQZ-TVWZ8t@`4YwW<UQPy&yJJ
z=aB4ul3K3Gv*`MOiMFCq9?|Z;$0auB85S`(PY%zv5}uop8*M8Uy6ps&Se<eb(k3^s
z5Gh>Pk+5HF)g>Al9(CMho!wYK66JZTVUfCA=o7Pg9<b_BDI0Edh|AmaVP22jnKIoQ
z!*C7CrL&!&sCXAee#Aat8Q+MVdyKqQRtilKdv11*B}Aa0^%_ODUtf7JvLXJ=OTvII
z!UxIN(X9VH|N6z>-$wZ2(k=4%bJ)LLBXUHh*u5(fO_ZrQO<G?fLra1kpK^o6paDBf
z{FvUCdrJ+7)>o{sj-ll!km6nM59@#Z0KVnBXbh!)jE4SdSR?HIhZyRU5t6_iR1r^D
z&6vH=UX1f@yN6`?rlu@Jsl!SY(1AK!-pUHgU?o0qzsqbH^DMrAUzb3$QOPCCp%kYN
zSB0?HG@j`S+^N6V6NeOTk%hq^-<2Fc@5{eUrA@=lhGwE1=Y&xMXSZMj)=7lrEyH!%
zzOdz0&=3TE%xboL1Eseq>yYxgZkLvg;;w%W@juh9n?tn26wv}JSTPQ6OE5L?7}}OS
zOD-Oo9p;SF?PSYsU~U>^6XvGNyC4c@wK{o|;Y2&|{)kY2WGj}1fgb#1Kc~3!T!299
zfm-UVLlfM6D?ZVHnMexX4KOq%+jq*fB^ju<!?C0EK39tsrq(~P{Vh5LCtX{w7v-i~
z{k*S=>Z>-)TjDieW3~^Uftabl*G_Y0VM{}tN+OythlDxvqU{JZI<xOoBcIxitIV#f
zYhn5gOS*pL2$xCjhJ>edX_ci5er47ZRCvP8_tq8SLrgUzdNWIwhiB&DM@xKCQ5Gy)
zH1P#+m}}GVD8`e!y(N$3lKH<CD-CxiF__fQopTVCzwga}F;@IXI!Gx+>#RdI<Sx-g
zQMhApBwcK`*8j5T-ho0XdVit9w&oA+R(1_5Gf3Zl_v~C<^L?VequJc&SpC5OIBK!i
zsK{2U^Tp?W4Y9LY@0M9`$wO?BLN&0yL(GE;<+ch05pBE)7&n}YnQ@jbV#)@tw=Dwi
zt={)b2UQUGj$RL}DW606z!~Te)T|frzI@t8iScman}(~f)pN?z+e5^-#?&DDVjT9f
z4B|Q;G{^?nqQle2ky)y=Z(m&b1&WC(HF(+EPjltR>|M(A{o;O0$~isSzX2pxAPcj|
zoeW?~>zPj6(6W`R4|IivTcuYj?vBqZN(^*(_Rx~)yx}j*nQK@@#FI^nLv-}1OuoA8
z!lr_^w(geg?{jAn0=+Ub{_M}rQY?3x2s|l;s%Q3eD#XMIuHWZV5x|lPb)`-&1H`W$
zma?T0M`L~sD|QRzx`&mLP<bl$?5z?J!+5apz31csRXakt>9`zYP@KRBzV#VHZIaW-
zTQ}T(ba6-yZX05)6RBh1bAwZ?JkTM$7i~SCNN^y0(r_1VDGs~ISU4_|;-I>l1;y_g
zOE@I(Z)fC~maoyo3)(le$lfTg9GNfJs^HFV%)Xs8DQ&$CHH$6dW#RwAC(UYsyL0v0
z(Pyx#AaM~sBWSN(#?jEGik6CS{mZ^JLC#`3FTc$#vfj9&3GtZs39kO7L?&C$D(!sy
zP$E271irDc(lXg%z;GSqI*x)Cp|tTD_^E1l^b08LH}QNq;NSDC#(dUszYZQ;8STiX
za9gJ`e(v$LJlnQeA!?$gUvcZI<JP3<CU8F`fqaga^l!)h>B1n_q@w<ok%7~ng24_5
zxM&f+qcHtr6Pp2X&<|oo_?{S=RlOxHlPZC}KV6_~ui6a^+_!Di(6(uU4RW*Z@w@1*
zI1TAfV?t5=YaFK26dH~Qh+q2aFZ*0QaLl&4z%xTg4@R+`AUuX0hN6g55Ev_XHXrH{
zXIK@s;bG4nHlVM;{M(qFL^%eO>eO%Xb-V^TZQvFNvwQbzg(#ILWm<z67zrFhrDd&a
zw3Ds!G59%cLy|G}v|q;gC+_A8F(m!yia!MW6Z+y)j}M}wW$NDGP6(l(NqwXarZZUX
z7z@D89G=h9O-vW@emGxR@q%yoX2>V|m($bYKjd)S8FR)_jqob$PVw8XzUns{59mAV
zVuZvuWWXygyw8H>iI1;}$Or<V7TNSrsT2N%4BExGde&&MR;-Sa63J+Xj!C$4pSMMt
z=Vd1jkAcT0G;O*xAioJ-7@~M+w!3<Tk?JrrXHoQJOz?2JCdD72kEg*O!>KQMZUh7J
z4PEr&RMytBJw|T7G~RlMSBA&3@709gIZkmcrEvXXq3J6XZO1h#O?o;G_5R`x%lF9!
zo4GEL<P)XSwZTVzxw1;^lf#_2Gv!TCNXtF5ijJvlsJGQ}c?exb;j;-`R*379R>ZNU
zv|3IpXCWk~*oEtopdU>B+y5FaZNlZ+z`!l#CzvkiQT%1RWBz>Hn#<kq_IEo=?QazI
z6aK_7LAJr+n$hR<oaQB8#`u{dIQaCBP4cIc=x!g}!{3eRu-1&Q>vHP|qmJKn_UykN
zkug;ZAsE3i1Bwx)Y0mJcFl`K<5e#NZ@aD%L^jVD5&+n<uvcjP0{+|)#6-`a5;S-T@
zd0V4}bkc1;@57Q7z0sX_?jhM3L^*-r7qmfF-fU8s($u#PZL-OB88Zt<YxM`QNwl;h
ziBgJ7m_kr5xqSXx@hOWOhJUThV~8w4jfj3sTE{ccmr4JESE*zXdtcqMSe69rE~YK~
zc>VUiYZ7~%HERlZ9L*QW3obk-_>s{p&kI#EyKO39nj9ABCBc!kV1bS;-&9NBxB4#b
zgST>KMOb6Zb7uGodAiWj-|bK}r5}gAa`c;8czv?SXb^wN7~R!YdM-Wgu(A*L-@sL-
ztvFMOq4VzlNH%jV@_z9rwRC-k(?HSmrai&ba4k8r+_v!1`IhEZv|q=Vj~>M0jQ(9k
zN0~uEB-cwA$6Z=YybB8`C(Y@X_Eu7NRLKNr6LZIpmg?M_91JRM6hW{ejyoAv&VcAl
zFT!<nvAaZq`nEC$k5slrr0h$LH2iW5rq0ziN+PzqjJT`bJ<p9*oVXBKG5y5r@*1zi
zRAe*9-$Op$!>dKVo+X)9Am~<(sZFcyuLZ={fWuDu$y{n;^XF~tqY1N<<CHN?Feul3
z6LWvt?8`M?I^~GmWtM?6)z%J-<}l}Jd+ISSSg286q}TNA<PTGk1NpZ<i<F(wyoQv|
ziPIk%s?BpZ3Zo9n9V{#>_+{aXlPuTUr_zulzHL$x*q6cr3BR|+6ZPmE26y{~{k@1J
zLuqR7sKU2WA37E|DYZxtu>}<Obe!$B-}2b!FC3>zXiY|P*ys60py>1D*^~sZo5E+0
zY41NE1vwE3d`^RWKYE*xTGWUH1wr|@gWb9#$0Q@1tZcqW4my43dpQycS)TL>6hmDe
zUKlIk*qtJZAIMJyUSR2sG93$%;!K&mj?xlARqjCk$lsBMyg~MKi(%#V+iZv3*#hv*
zS**igA{AJ_&HvTpUY=^AqMvcxxd{OvC6X_!WmCFDRk4DHC>`6WYr`_FbT}>ymR#Bj
z0gE&_Ono%Zu-mTih!AzX^0d@{2y}J(LGdy5CM;N;!;*iWq9#t4YEWyWQck3@(o5Sv
z&rEJce(d!3LyWjErA$&z5V64l9q6xpr2OawxwcELlSueUY3vwtFqN+<|3fx~grH|K
z(|r8ajEvx)YC{;mkEG%@6Z3*P!e6T*R$^RW(r(dpgxRblBUKZRY;hw%KlNp@@!&uS
zwMXtw5z0J_RU``Iy*coRzF24iwhNo>oA*Feb)<fx>eWMt7)sZ-kyd6n1l|nNLtm}<
zatF1I!S8QR3^ibR#0KTQW4J3!bZKq}M(5kX5SE51ynJp*v{wP=@fCl8!O2Jq!jBj1
z<@b_1XcQ{(@RDZv{h`$A#?An14&@8C7LRq0;h3188%cZ;Wom;3OB-U=r$m!=HjI1r
za3voWYYKdf<>xu+8<&vVF)IV=0V=ow5N!N+;{$mZsF9YWJkrdGsM+RG{ETsUaj(rq
zr}EuK$d6w}#k~sak?H^D4ZeV78@A3`z>)nhaI7h&k{Sx5J^}D4YP0M9{b#iNWimda
zPfy4Uqi$8E3QV{zQfX@mIo+NIV#CcO*v}bl&z8X}f^1(JLBf}KbQcTW!OYFJ4f`|c
z7D=ZI!G{r;zb8&VwfIKsJz?gI5Ko|}0}ihvuXuP8TyE2oQe{B7-Xh&svFR{|yd<Wf
zLkm2DDKMtuUD_lW@6l+sDp+7q4)w!ZE*b7v^;I7c8iECHy6s)qISQh-YjcPKGMg=H
zmoleSpH+z>`8Id<)_gUW{Iw@**V+aG9Lgk(_!8&1CLC>>mfg4ZhRPWYVK?5DuH<se
zHKs3&+F4PyO3LeGC*Rq(!7n)`nK(79I1R!u*mzip6oi~$_&paT7|D=psOpFXY2Fn`
z-@WMUO0I&1f6sf*D!+UtCh+j+RI~@iYtV4uHEwSf^qq40_xaN0LeqRy6RV-;b}u1_
z3iNl|j9336$O`rp$i|eLuG5Cd5bp3T)YlOMU)hCYy`f_|*eqpIp#HFlNOa)$4G0FC
zKWy&)Ww!6wp{%o^7{BdPwOcXlh_liNkNGnhj`4N5YNVCW$AR7u^qf~vA~d2EQ|P^Q
ze$YVXdD)6zB=LVq4z*||GZv<3!&Y0tAsS}5Rp6}gw+hL@$da7xX7cR5CMRuS>&2&f
z<^ZhOCz?1{;;{lhcW?D2w+bV=C0SamK=4kVjhLS%bh4qJVQhyU@0}4a37w=(j;`$7
zbFxr8?^+czyo6UTuqDEehG0Aff>JDo8tx0;6%2f7UHijtDRy5LKPMO0?LT8=)m>lv
zVK!!W#jJZ&>Ggt11aW~?5;F!1Cgm~YK^=sqyNkt>y{5vwK2RM?Y_V@Em;%_Y(^D(?
zS9}kRoI_GEs@@T98jR$&)dn}>;nDET9HpUOVTfEIlBQ_Zmeo+}IEVA+FGd<TbFZ3?
zusQH3_zG=X&NUQjm`*2qhZfIAUfe`0g~vTFiKj2fsNQV>AWIHs`U*Y&wlRkxc<>Ps
z-dSo1*;_vkp~aJ27x=_;BYPd{<<jv=J)y>vGv^b74*K2mMO9Xb$nAS>HgB_j;RaS-
zeIJ{-@;gPdF;ox6rPsW$8*m%jmnBG?TT6w0-CNY{7}{3Tj6KPhhK)k7YtAir3l&px
zN{*SfM{mU7n5K3Xg?CRyO1t;z99Y^Pigml<Klv(s<4jwzgC78!sRr<5gP;E{eW`u^
zp=Xd_>kuwazb{n=&ygpiU4t^_U2(*m8SnDVm@V(nXGa$O)bw5XL8d8ceOlRrXd~(W
zGuFN$;h)~Motm>u2`l-3{D2@K$r^#*Vc}Ra5E%v%yh!3SKOp4}CTXXHg&kW*GVD*6
zZbNT9_`T(5*aT1z5#JD$uyqPQa#|N+zvJ{Px^N6E+%%J;Il&R`u{3e)r0pky9!GlU
z?3@vOFwJGPqgL1v$J}OY0*Dgq3CrwEgT_XIn2$TI#O54pV5w)6O8nE$&6;F7P7h+o
z)RFh4sXUof9GKMLzI)2-vL3~lr159hAP5tqR3_&<{=N>6i&C7ReS68G^Ml>A_`Um*
zNB_^8#2Wb*T`QyM0{z`c2z>#Car!S!Ly6NfI(70K13lCC4F(>%yOYoo2BUPmrJ<iz
zui+2(a%OdPnxsrou95fYSN-P+y|2g9-%_<EA<uZM_<K|;kKQZ+h>{A-p~26iT#5%;
z>wP1+`EiuT5WE$!bxD5wBW5`^afRx9q590jtHI^DbL9G{(M|27lJ0gSH4Gb+k|l&6
zc;@?K-8N=^a~6DU=CuLfxj~fsk|%At@&2Yj&TUgYVz-5gZvnBne1v7EcwcqxLkB;E
zF=@TjaqarK%RMvaSavqLa2#jD(owDh7KuCgI~iGyvePvFjFDASAMLtd!6Shp@8Kg_
z0cYOtgcyTdvw;h`bBR@9*5`|E3&P2|&ByfpY0Gc@?c1$wOVdfup^E%~xQre>+8IfF
ze~oT-1_|tYAuHYwwNF%W92>ED!vyqf#X-yH>>M{KGILIvQw6d&9AEk)PQ@?O(SFiJ
z>iWF9=GgW@w2-Z6e(W*vK8(a<TX}`ZV~q&7<UjSc9`-Q^Zyv?zeVg`lJ@oL-Y2#1O
zDf_#`?i@;d*lnR#!6z<Bt2`7JsTKe=?+EdhRR1R!0YXt)CblljF)Jy+Rk;cUe&2D9
z3@~`R=Lh(%4RNEhzdMo2R}lgp;nr|-prnz+M<u|!Yszk~ygQC!C`pY-AtCTT+9kex
zIC;S1{3eFWHF7@+l^!9<`e0;=mLHj%7<Ri+=)zOt(tCHW&z1caeCb_RSkVWi_=d1j
z%R79^B@z3eFm-vE`jY4$1XF_s@RJPgK~g|yEQ?N-t*=<Gvpc#QFtYdDZ<)<H@}(X-
zB^sYmjUDf9?SuV-yM1y_6Y9KcBTEPQO(v_r-9#TFYrFNQ6^C1QoB#@C9jZU`f7e7^
zJ@uXr6Oa#{2RGtm>rrxpsf1s_$_llumG_TJp2DqoQE>hcfr;u;mx^fr@z_R-&oD)!
zbRBeQMKkSyMY^Qh)|L6qDC@MSxn2Z#@-3Syx0K$7eMc5NZWC`94l1p62rQtbx@ame
z7)N9X9_^FS>pYPfab+g;^sn~2(mU2k78S4UKdp*CjH_CtxbtN~)fN6HBD5Ss;ZKpJ
z0nl6E&-nz=C*%zws~c$%5fS}8-50mERY&!Y-ptP-<bE({9obLzj^Ou0@*Ve;!x6Lv
z;p6~WJZ?hdBrZt2@U;iE=qml+w*J30mdBqKi0<_HGb>Ju&u`OubOQl*Ozd|q;j%C?
zRm*m`C<%640M!PJY)i2I$V1{C`<2Df>|#d~q+?+vxbJQe@xSQx@uzg^0-jTpd0$yl
zAfs$(XVTOkzuY)&C9?I;MW2aydl}X&HEXYrVc$I6M`W6@!w*e1$<;IsJf$56Aksle
z3w@5A;-T^~oE=c6T<!W}Ry9`0ONWFc@bFPWOs&oAzV^4q(|gfOntVPHctD=MQsvkJ
z>}Z<*pIC~`9X&jNvZZ}S@t+UYS10;}em1;W291@q`98Y?PtWECHUyAB{~-QgP?68t
zRkg+7|9*(QqrcKTYFGp}QRQsIpZiiim8$`Q@Bby_-e}Hh5&z}qwV*)aY&k*c=I<*#
z`$u?7=O+eu%Mat&E@Ql!9r~AZR=)rb+v2)EQ}zIBj(`<{5%8^T8wW;cnzum*0Cl+h
z@+{mWt{PK}vQHz0<?zhB8hI>_{Il7>zwE?A%U!)j4tWZkGfP6tA0GDX_UkA45m@ph
zhbtU=$jZd&#>MovSAZ3<*S+}v+PluECf07PfY?whM?k5H$gxnQ*MJ33Y0`U9q&Mk=
zDslupR6#*H8l;6Tgx*wYAOVp?2oj_uKujVD0Rtr5LB-?w*7yIedzbv0l{NFeGkZVJ
z?lVl3=_r4c@oaJTtfX&MA{(b)x2Nw%wiQIqh9J)GL~5vBT%0pl2iRQe6cyu=J>%d$
zdBvg4bA|p)zHW=s0F7?3vE?fdRG<uiYQv@clW9KpRrlTHa;33AHTFyEFNfGP1-ee$
zO{Mi84E4Z*+jikRX$QOs2f}D`=>7-JwiCe&6Zuj0gFMelhP)Cp={aOCLih;tpvcgn
z)_}0jH=A2N;Q8Gn31Z)#kO#uztDa<_cV770GkabZiq7G^Y9n+%-`O^_>i`37RT2vL
z>O=;)nHnWG90f!5`hWDA$zd;`%BI_4B|eU*xsi5v;$g5Wb?HBa2DnGAWY&<sN(O+^
z9I(%LPRIFSNUJdZ%dMp*c)I}jc6*ONL>O)i_pA=97fQ>nTIb?@`shsm0Dph+o@FAY
z(mJS%Hn-7k`+k#XyGi7t=cpypviT<QZwYuvjUN14`{aj;^2_&L>l{X{JX<*;Bq_e@
z#BB$!ivsD>Fxj?Ul-J8=3^?Q0M*7a=d32a6drSska_Y}X4=B9(>SdKR#?%rFGZt4|
zt??b(Wp;3$>X=tC{G|tydx*AJ%nGFc<4x*U{5zJa%gJ4j-P^-KzP7kC-?5RowI|0L
ztM4l7+$E(DqVYaY!{+4uBKcguMS8*k?TWGBAyT`*^7N}s(v->@QpDPZZ_<@>mHyi8
z{_&Z)3+KM_?fI3b{MzdK5)<p%X=&f&7+>5Wd~rtjvG{GoCDz@<P<TK+(VtpZuUGx{
zUEF~Wu4MkE3K;6#OCwQqH7_qO{9`@V3ZYEAzf)gr$pd}u)v)LQVt=#Ii<Q5>H=DMl
zbp?oQgXTY0QokF{2A0;_iLAoKYwN)umoh~2Fy7?cb)+m1(XU{Al8DW;52c|Q{x#QQ
zn^RWg-k62AodY^WHj10^ack|Hq}>@<dd|E9E(oM%+wS4b7!~{`kRSYsFTKY%1Ucsn
zm;$ByfFunQ;fYm6G@m<cz8|PD2AmI@rh&*o<t~*dN38iMZk2A~lm)(n8aaaxUu`Ep
zjYHC{8Y$CI_6VQ@4?elsSuCpAdeY6o_<_3CA(w}GN}#~MR2kudL@HUV<vV`aGz~ji
zUkUGZ3jC><-VmGjPhW`hU;1!fLWz*F6T0b7w2Y4zSYDn%)@tW|MuU|3hMqA7m`?4l
zHnEBYu~UA{6I3OQUrfOKmUF4dpWFMb9?)|vSgNT_7xyU9y0_=5`0S)rS+nOt+qe_!
zDQEvj6T_aCXE1q;Ugn*4QWG(E(^2hJ`xv=+Eb?b^@onW8z;UW_@Yx;yZq|fPf3Y11
zaA9+HeuP%F3;8rBe{h00RWtnpdQf4tma0vb2uT{cVF}k6oAd~RsjWX|^hJcD+po-o
zubBOCM&CV2)Zs$_^VpIHF5gp+J?8Q-7w$85E2up&sj#D|dLzOBJ&!8K<m=Wi3@cKv
zA{CK*kjC-q`rt}5wv?i57qB23y|zlmD#HAo-={(*rB+~WgKXmkfHNFls@5en8F<x(
zgZllsPJdT%{Jj<FZDk*b;ux<u9`JY%&NdjJ)3Vi;Y4@@s%g%3^c3uqcT!2$(Al9j}
z+rthfjmaV=W)iu>4zm4AE|7D{`rc;SPSHVo>Vf$Z;;}qkeyM4lHAt;?H9QC;$!Jl_
zb?(p$B@P9&CZNSHUJmi_3@s)k2>CVA$1(jtI&pUj7@$DCG%C`|)8y5U+l7c<8@|cC
zyz2)EzUwyr3E&rnyBwVWcs^6VvWyn%=JzNfkj%NCNy4h;*pBMlwPy?C&Tv~SVb^p^
z6yG-Q4&gJ~w%xfjA<8a{sgdr|Lmf^$dizbf7EvC>YtPCy9t!~e%~EyvXZT^_gK*Fb
zL);IDMhFS*V6YxJx@GH64;><B+spd|U$KwhU&iG=pfXGdAfoDEp9%><i;WnVBVgb8
zXL$bxn(wb)iJz6X4ltSlx-t}UUKYeD0^i*8wYw}?eVyCop|}zVw#k@iiCqEv9Uy;$
z>W-+#N0RS56f_Lz{CMI^K<U9LNA3RWb)XSJQ?_B$yNg<Sbvd30CAHZU#mJhTAnIx~
zCHa2J;Fj0S#rM_>mv}ok%z&%k8NFze8b4pp@+-d&@l@Q~v3&Q@z%~RNqd3^f{GFfP
zOb4WI8TidTJV=?IiC3Hxw^oTw{@B|Pso|>`jSg>bVA~k|0cO^A;tJI1DDT##KwJ=0
zGEL<yDpIc{0(9H`BKN;k^}StQeSYW=v{GZx?7@yGAJJs)-uj0d14%vZo<N<Gw~ElF
zJSq@IB8^9aLL!P~+mUo%rZuT~uKwYwc*E}dm+d+B$-Hgi6YLRk;Wd96KFJ=Ka^}~d
zVukI*i$1+7%w)vK^omGTm_L4T&l%3eiI>!TT4>owFfqsMAlF|AB*DAJOYGa~#f{mQ
z?*X4?c6m6e1WM$`pqfnATk1&1iKl)D1i0;d-Tg9G2|4!l3pT||#B275dHCMPdXS(N
zRNBVak?4rf_a{f)BbZ)mdzT^*TiK?AS^h~=@>hkx1S`xqk&1$8)yDqfSOZT2e*EtJ
zkK%zZ^=gHq`XCbP8Xfe(;PL>{M59?mV&(`?#Oh8^zv9uo<TGJjpH}_>U+$>yviqAn
zU7}fhPr*8K3j4lU|9sZ{VaLPO6b1eac56X^T!!-NXX>h1L+6!#l|B$Z?(m0Bs-DpL
zjv@{Xp=d;F3?=9LBHw@9ivQV^>QVw-*nhoto5?_UE4?*B1iKRO%hUXFX1Rv?j;6ZL
zdx`&qdH)FUp1Sf;U{cIk**NH*1%HVFhAe@Y$qJr3bnsvB++OPc@77JVX)!LlqYj>`
zGG6wh9DIjf85-<rCtPLJsV<iYFMop1&!+M}hpc@M!+y%nvKi2*JNC*rI+rai9-%Uv
ztMoo<&G+{1MfcDJH`~wP(pG;>wV$VdJ5aYe2B-iUs@IHp(ecOFe5#&O$pzSl+n&{o
zah?3p{VMC9Upa0vR*`|Gn^?>6XxZd{P`jn)TE8v*w?zk3()Ql@()j%ObDFG9+`squ
z9{Ah>PQ1wB7Vr(CTj+wEo>JTkc`IkjRjS7OoT+4c;uZvQVaj4JM92Bkca7T{0|?O4
z7?k>Xk%M7}-;wSDT!U4*^XYhH!o^k*<PDyY7pQF%o2c&yDVAy52FW2FEtcF=$;5om
zLWljqrk8srH$(KlVY@pWuyS8h>TR~c71hb6B6>^mpx{4uU%Nj_kNARH>C!eEegQA=
z1m$`Fx<`pe4*X&n{y9^9eQOR<aNR)Sp9OzK_u>}1KZ*|vZQsBzya5Eu3CL@uT99`C
z-va-!!vBG-fn2wl+-Al6607zk0A*2BR?~lOlmIjv%|lj6s@;Ep*5)C@mS!;WCX>9`
zZ{^);68Pa(tS<mIGr~GvZPOy0`Q;6#mK&onthK#<!WVu`Ou0rn$qTFH6e>)Rlp=V6
z$fRbnEka=?-f%T??x|U3BylU9A5ZAGx0AL1WxA~;47hBOC!?n?d}XX?3(F2=Ns#sC
z_1sWWN#cXn5Zbx+O$HhMSWAE&4QpNM<{edW&Iv$qw((}{g<w#R$53Bz{4y>#>9eW&
znNI6-5|I`ajkwH0q{Fms1yv%Ft_}Y5fcso~QErHvP8mw+r=~TH036Ef6w|Y}-e>L8
zb<B}T$4eCDMTBI8ES6|rxpF1r_TOhqkAB$2ZCw@rsAKx?^A+Y5O^c<&i>N_)thHCe
zrx?mYQC`}9iI%Do8}Bx{6HrgxT*vOIYzI=^m!YeqImRlsa!ncI@hag<jj-~JNV>Hl
z%G@F0v5m(Q9QN*;1Mo5DJk=ZU#Lt(H#{-}LWtZ`dtS!9vws)m#1E3R6rn+suO~}Ga
zZDg)0+&M4YG|j>(qvpfyxTnpeCg_Fgw@2oHPT-007s4v4k>1`_o$SIYo5@Za$VjFU
zLmXlMIYEBXJjVYPt%Zs>Z)O)Bpg5a+r5|k<sai0~5oF0;Ni`oi0Yn7ha6@e|6REGZ
z67>3R;IjusV`|K$B+6tc*`(XMoe>!BXZt;@0W{YQQBPlL@XR`+ZhxAMa@w<*2s=+G
zuea?}UjXi9yw;!HS^91^BtbCZ>!-p62<41cpI3Dk7o^5zL@HHR&SC*wX=lWnRbS^?
zcsMLIe0_t8gdXi1R$UOBJTs!eIyv*Az>ob#w?-f1V&CahW7+!jyshR?t!PwtclSGp
zRuZLix8Rc=!N`_<3g~q+=xG1W-F!EF{XZ{4D{Z-KgFmgA2{ST#9`QM<D!pVXD<mb*
zBVO+n<?{$oH2nG^PW)UulU4~G9!|Fjv={^9b9QGrUj@ZKf+h9_YTn5Ow20dc8KR1p
zT(o&7Z9{#Q?&!~C@{D-C0{t)n>RMcf?vZ*!?XZ|99eJA@c&R~|kqx1***VW#3o}Yn
z-|KWe?i}ai&zXZuw3p$KsY`vLc`ZtccHp_EP_iX6Rg@gLF(atmHW@-F--?qRlT=rV
zoz}^bn^xitQ}<JZpE>7(apw*(X9PDJ=FVk;@O|NVpzwYb>VQ#>xkT;IWnHXnBo&aG
znefv<jAy-@%-u<;Ech%Q0Am|)mh@<#Uk2ak@*1Hsy>(?Ay0M@ic@Ds!?y)Bb1Cvm4
zYfy$mqGBnzvW3!50i>4Z^|9&cXM$6fr)iTveZ|a%{Q%`ENWY(Y=PN*Q@G%c0*pJN;
z_~(sREej8gMXVE{hbN8?Aq|EVeMzEf^y|lF)js`ow7)RR%QAEIycSef{-b|%f*jnj
z5<scj>B$<nxK%<w+;gsN1K6#<b#>AzhfgqgD$2xealP1UxmP&JSU8<ib$Q6`-PxjS
zLsRox4^l?_*lcX?_8xW|t88Zwz2^X>UpT5OV=xvxlK^*vmYdq?9`mrUkJ?qb5(va!
z9PU_IvDpJ#mL<7^KWM^0AoO!}O3=PJ7d+7B-g~Avf{dHTaNC9XRPFE=PlqH^gM68}
zi2bcc^;LYRU0IWMkqp`#psBL^6X5LL{4W<?4Hz;Gwrx=0P;4h%IdD)GT}GPdBOWZd
zP}6&A)aPtc5SY*P_&vno7R5~Ek%zNOiv!ZgjY~V$0L4@?&wOx!BxK4x?zyKW7+%X4
z_NDXXB&y}1vXp1*I;k1ziRU*}ystE3$e8AC|1-;@<~o>Ihc0yma~s)mct;onPjy6@
zC?&LD&LmZW>)*kE3KuTRyKRvi1!%6&%{egyL8kI#^^9t8+tii;Hfc17zN#fa@KbX<
z1R5!lQH#M}Tm#@xQOKZGMwXKnueaL-j=j{89W@?RqL7m|Lh~cSD%#~vg0E~lLrGgU
zrG)hI@jrn=w@5PNk#xC6BI(4qOD<nswkVc1MO7xZ7;)K!E%`1FYo!Bvs=0GWQJ=Ed
zIdD=|h-%=}XO&K!m4}C~el*)<E1jGv8VvT$5RFIMhI-N%$;>eT?a)*>$A*)5w+^RN
zLCVf~NTO2dJ~piXh^~mfeUcjU>mqESWlkab11<2*_`}aei8nzTU*5n?tvpTUWD%)f
zR4yTeF6X*T0;DyuOyS#=F4~^4*<ee#DyQ}2rE~7QlkLzNu`fgXG}XmfQl4L`Dkmz2
zgR8O*WjVKk@s_}6`{~trcx?hcr?e6lqPjZa2R+JMdpkhL*!hJc6MwDDADMr*Ld|<G
zB9$P~_VvZMMB~7N$0s0;;sYEq&Q-0pdLa7jxgDDrEEAR~um4usB?W@@^S5IM)o^A=
zD6d;ctdrX#ErLD<K&P11JpvdRsWN7(*_QDNh~lsYUOChmlPO5y#si+Mv4)Pzk`K?}
zwx9;h0LE<M3E~`C$2GU8!4(&rIzoNzB@jzdc-)h+!JpkuSjBj^F9zM!gYPdmUNtx~
zkbFbnC^g8(HhEyiSOA%su2R8RE>bIxaCXj@OVZd}L$_xl4Jj|21=6$9V+BHr-?O%k
z72!Mw<v2^q!7YgWr8Jn+4kbTBXGst%0^HJ1eieDXyw)&)kGa~uX~VBfz#wNV5-%Vf
z+yrJQ&w`e^xXrj(eEI3&%mXPRn5RAX3*cdu`gD<Wc>YSFGReFZITcRI<G>ZUrg5m_
zFJ4?V5D@eW5lE6Y&&BlC5GtBYSHPX11S(6^&(SU*N{dPalJK1Ju3~fpZ}9Am`1$g=
znkAve!?uzv@9KDV8OI&P6*`^@a;(c$xbB&WqUf?ExEJLFTFNTw&Aa&_6rDW*&QxgJ
zZE!{9s)nLY72CuOqjX0!XLaL26)-_a5OmDpy%&xCP&m=WQbkV_>Uuc2qOhyaou<eF
zAH^#?uK@M*fyMMd?mmV#x=Ge~b$d?Bl#61o-h^@0&zO$f{=>Y^I^N$sQ<P$iPP6vy
zvt+9R)+jFTy7sA%?67QBr;|NoHsWjLL$TJ4v)394qo2`3xi6%M=po!M-fu~RqqXC2
zL%a3{h-vnjq&hvj6=O+_(Aojvf_z+jWmb8(rLwDdzR=YVsTw4v86#gOk2xAe9IqYG
zvx>9I$il%vIHY!VnY=FHPjAYm*@~*$72u_iD46ijAzl8L4tJOlaZ@g0N&AH@r(ZbI
znop53T`f;j*wGQo5W&%DQc9t#81^l{QXS8&k1~qla;WLocZqZ9c3zoW+-^_@b?aJ>
zOt}}{6rQ6|3*#k4xt3xn?Re^H1YAz6eS=cRQ?B~KZRWn87)zz@$SEEx{+Y$2)1Nv<
zFIGozAQpTcH@dl7UoCfnJKP|}Hq6`Dm2Jgwqth(TVk}=rYxkI<r|)}<-N%pOv*pwK
zW~^K9sQG5>kupo2e!ark0>m;a<K7X}ti|<Un1<LU^PzfZ__4a+yLZGiW6?Es7QQx(
zIk+B_N+GVcVF$K0TmB7~OJMed+UFCRFG%Sq?4Y2;b_Lh|?N+11=e*w$9&Z-KQdw;{
z=Dwf5SK<*jTfftuiFf)BkAOq(vWaGmw~pv3o0N#f$c8imEITS1Ir?YiKvo9Cogkux
z#)&o19&6JUAZwZRDroJ*wf>Znt1%|NS4|TI2;+6`vQ~-l{mZ<xBc1o$YRwYA_NPGV
z{Z0o@{++#W&iAy{Bq&=LF7>ge>PF%rxFHr*g&QPGJ-AMS^7WZWfVG1`Y<K;s?s%7~
zkkD7Eif&3;rg#wYFxY~+LYg4cg|2PY;`lEKC8dfbJqF`-s51_2NP`v&%Ib`@-=N7$
zzvA^fN>CMnQLPnJ5hp=*B<RkGcw9+>FYn=6{?8T9Zk0pmLG+;y7ibO|%v_|yO#y67
zkhMo!?#Wi9azafxU2-O*Zy2LE-U!Z<<~N?aZX}_2TiM8Uwpv762?3b)Q5zMyqSj-4
zH7s}SG$sQw=y%$GvQOre2*324Cd2!l^%*kk@BLHJbz=27!UKetpw0R5_h@vdt$sXn
zQu#<7^ADu==AT4+^Cs=@9wk0kJ$=|};vF!?u|LYfIj3%1hn+hsU1b4&6n7y5aneZa
zPT$ns+~v8x0BQ<2$KkC(Uv{#vA>}N^!m^@>3BHP!Zt<Keub~+t(R?#Oi>WbRPe9(Y
zXXUyoP*4*(T}%DvD~)$jYx`(-1~HY=Uvf3UluXg;<3ha~!x_$g=8oORo%v8`wXfnv
z4`yM6@DijX-~mwBM2b5cHtRV!hTTdl)Xbe>SAa4uP}lCweght^1^2}za(8Qth4gJO
zXemAQCmDK(87l#O=>x`$OMx`UnB`1DpMwuPg@7<VCTu0e&=h#J7&U4Qif$gu4U@dZ
zP*AHO4AP}vniMv=Skxc~F`3*RR2~Zn@XjX3waV-?*H?=oBgS1HjZCH#jV!zPl}*k;
z*H+(z4#K*MNrD4uo^ZVRdu<%ttIck)XY3PW@TT1)!JcLJ+ahQ7EU67nyY3762O{PC
zw$oI0?nCzkCf<m$lp6}YlYP>~WmR@UHvq`eOgQ%p#Nb>C)*cpcu%q>L{QfY{RY7U#
z$&-!s+#@Kcjpj5mf$AvGhkMyJnI>8=h(C@YXC?I_jv@!tGDPPWQXy5oZ%siBuGsKZ
zPq!Pm4upY4M!KS(2L9Tsfz}N0D`_Nk=mtB9@G`>C7MX65m#YXNh(v!JOG^{cukyR&
z8=+S4j>6VNS0Yg5$w7MX@Em%cbUJKnhy(aeTF*VcPg$M)Az$Po(O!azPXH1gMr+OD
zmdbO}8<^p3xLp$*Zm=*(dn!1y9Z7qi^k}dsX`mX`W(`x#OGxHC>_Pw15|(>eU_^?W
z`j9Vnk>J5ps)ae_WeFm)1gV)4K+T#y)zgxk)q}ZKVxSs%O0YjG>T_C8-ScwcdMw2|
zA-moYvluQo9-<?7Hi`p;l{eIWmhmH%m;9Rrt7W3;vx`eu-F{-vo$)vzDlb&J=y`l&
zfNPd@VNpcCNm?=-2){=~O)3=)<)SO;JMx}CRcVA)stMkH<|;1r@+#HPj$DNr31e0>
zKt@)x*F!<s643|17_Ui~b)<{Yil|oi+<a+R{=2Q%UNu{iA_RP0XtKZb(b(#zoD1ma
zBlP_4kiL7G<0$Q>*<Dd#UkzLDNGh&gXY4c(tA9!uG;kQyF5G?GmOh4zFeT=#f#7t%
zWm|R(^||$ybp%>Jvr`h_*lPl;i=367ljMyY{zgjHnK?3|MQF@-Ql)K9V<3%tJ(DY5
zelY21V{Qwzka?&jTY|NOuHF$M)IzU$6B60Ei`)1TCK#kXn)F$_mDGsO74el%SMhS}
zn+c=N+|+{#!YSctX+0Sy>ttEyIMp`3NN$RM4fMRSDL>*o`w$;?)5~^G@01@*Ho7Mu
z-9tMK*Hemf*MWY<$YaAsWE3fOW+iQwaO?@)1Js!9LW+F>F!`;OIRNCFN$QE>O7r>A
z{YyQ9b~*0_f+l=Mi49=5J8l=k>Yj8*<LiCrjSmbMTvI%8ffaq6FMKL$_l+b0)zT?<
z6$O{#oM&5EJYW+lPHC}|+tx`U`Y|&*V?>PZ-6@Ub^J(rolO>bTCa~DwJ<OevC@dgn
zK7BHF^t!i7ZS~ve=lv#THYRmK(L2Gs-g-&96`uy18#wxY{S<2^`o_JiT2s~z*E+Bx
zV5QFS=8MUv6NuOQC9HjA#>MI<3=<0U&^Y>YAlqiRu?6D3gaL6g9H<rCe5V4$j+{Yh
z6Q=B9(>rgB;s-i2M6pXkg_Nmi&NM886eJ>W$0S_7EYera`HLzw4Hqco(mLjpWm2g(
z9xH-Z29lgqb%AC|0}aTEjJZ#)0#yW{f^t@2x-)9@qEOPU<3ocf?b1}ziv#i#RVtKT
zVUaxE<g*!+Rd3LFdl!-VRBqpy=i#HU2pZJRBu`qO8Yj_a&L9ydTSJc(AROi%rg603
zmV}bZY5Q{q(+8UaD2eI8JU+6DNyovW`Vk0+u9LBRhPzs`BvN}aS`KA;4u*XgLv2jd
zls67U?H2eDHvBjwkDgEckio4wqL9Z~4ODH+xT^@l2*1Dl*lB*bY20;w4vIC(_`w-h
z+ndNZRv@_nkCIdnKVC1{CgE+C0~f8t?#EvYc6+bQCgy&4s;sNLJmYjDmuNv<OiYaB
zY(iO=%kxgtZ2efI=qNtyutK@Up=K`nx!qYsbFo{MQZCL$=-kM{tE-7Umf7*>Q$;>?
zxqDVn(<@V!@$;UI^LN#HuH=0SC&e@`m{DzkJP?Qt7d$NG^j<?<eNrrS;|{xz;`i(`
z&J*T#qA3bIdta;5_Q*a|Ow-=PGd`7M$rj>%*rfv33dFgkV27*zVw#uG)2ACUB|H}~
zeaENYw!q#SYMT@ucB$-ovkyAw@Yb|0jFHFl$hKV6M);bYGN2!KpWAkEv9c)Vl5FAR
zn{ftiqp(w0f3bQy34BhFt>cNais#^;&Db<cJ$s1QI)%NJj=T|+)V%lHC0)_wZjbRz
z3w{h;wv%qa+e$ihIiIZ%t8b6$zi%hqtfX(AU)6pev(?}5)XG1ZsWjfx+YoFX*WoQD
zkZHDQb2ILV&M0}lH%{#X`Hc#f#*U^nReoWAC>FA`1KWvnrJwW_LErw%KR{=2MlTJ>
zT`SYtXZ-l-%4!1HW^wlZaE(~HqPUA`PgaAu%6t0lKm124dFa;g87H=3sDq~Uj`FSt
zJ(dF08N|!NIjw^7rK--(@sQ8eJ*er+fg?&lP+t#iSI*Rr&yNVm9&{Z`YnU4MZ?W?2
z6LAN}C*F&gv$7Kx=Ri}QadT@yuY*+(#8K@6A>gt1Kpp&7&SL9Tyu_<ISZHHV^h6Oo
zNQ1=c_?C@N6oZh^5c@t&LcBhOS^qR{l(hUnodEP@3%jt4)wDf4^^>M<$D`yf9J=)I
z$fdZ?mzaKbZ3e)o$x&d$=|)elTs2gtMr^-=9_;%tD&TMPiTi-rgTU3Cv~MF=fQ9{8
zOWZohH`y9pUHk~~`S<TXGHjP-7M3B;Agrt6e_r_Qg#YaIZ2R}`TSURm1LI!*AGcOd
zH~pxT@S{V!=g_<)3lg;M5xW3QJi;T$!c0ow48Z*8d9&p+IDU#H-aBe?>>f~HjSQ=Q
zv$EI!kEq2>YpsQ{h##HB88e`|yRnA(*-%qItH0~@I|I?!OZPg=xxY%mk~i^x{7_+s
z!eJna5*?7cJQcdL9u(pIi9hP1*wiNa8CM;MWyW}_&!<V2_vcLlZzE*y(UH`H-3Er>
z3OZ5@a;(=age1M#(*7Rg`6%mE=J~JII@=zO?Usk6DVx-vxRvSZ%kD4PGTA7o+uWg<
z3N8N{B>1oJ_!rW)Yc~IGb^KS<{cN)QKKL!4?da+^etw#f-v|HU#eQSsHza;T;x`L^
zv*0%iezV{=3x2cUHw%8V;5Q3?v*0%iezV{=3;tJG&|THB$r@Hv9uQSqAh`qhyRM;k
Kwc@h<{r>?TydJ&)

literal 0
HcmV?d00001


From 1605036c40dcdfefbb658c50c483b1728a653a5f Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sat, 10 Apr 2021 10:40:25 +0000
Subject: [PATCH 518/788] Copy overview.md and _index.md for the translation

---
 .../ja/docs/contribute/new-content/_index.md  |  4 ++
 .../docs/contribute/new-content/overview.md   | 65 +++++++++++++++++++
 2 files changed, 69 insertions(+)
 create mode 100644 content/ja/docs/contribute/new-content/_index.md
 create mode 100644 content/ja/docs/contribute/new-content/overview.md

diff --git a/content/ja/docs/contribute/new-content/_index.md b/content/ja/docs/contribute/new-content/_index.md
new file mode 100644
index 0000000000..4992a37654
--- /dev/null
+++ b/content/ja/docs/contribute/new-content/_index.md
@@ -0,0 +1,4 @@
+---
+title: Contributing new content
+weight: 20
+---
diff --git a/content/ja/docs/contribute/new-content/overview.md b/content/ja/docs/contribute/new-content/overview.md
new file mode 100644
index 0000000000..a7c6ab083e
--- /dev/null
+++ b/content/ja/docs/contribute/new-content/overview.md
@@ -0,0 +1,65 @@
+---
+title: Contributing new content overview
+linktitle: Overview
+content_type: concept
+main_menu: true
+weight: 5
+---
+
+<!-- overview -->
+
+This section contains information you should know before contributing new content.
+
+
+
+
+<!-- body -->
+
+## Contributing basics
+
+- Write Kubernetes documentation in Markdown and build the Kubernetes site using [Hugo](https://gohugo.io/).
+- The source is in [GitHub](https://github.com/kubernetes/website). You can find Kubernetes documentation at `/content/en/docs/`. Some of the reference documentation is automatically generated from scripts in the `update-imported-docs/` directory.
+- [Page content types](/docs/contribute/style/page-content-types/) describe the presentation of documentation content in Hugo.
+- In addition to the standard Hugo shortcodes, we use a number of
+  [custom Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/) in our documentation to control the presentation of content.
+- Documentation source is available in multiple languages in `/content/`. Each
+  language has its own folder with a two-letter code determined by the
+  [ISO 639-1 standard](https://www.loc.gov/standards/iso639-2/php/code_list.php). For
+  example, English documentation source is stored in `/content/en/docs/`.
+- For more information about contributing to documentation in multiple languages or starting a new translation, see [localization](/docs/contribute/localization).
+
+## Before you begin {#before-you-begin}
+
+### Sign the CNCF CLA {#sign-the-cla}
+
+All Kubernetes contributors **must** read the [Contributor guide](https://github.com/kubernetes/community/blob/master/contributors/guide/README.md) and [sign the Contributor License Agreement (CLA)](https://github.com/kubernetes/community/blob/master/CLA.md).
+
+Pull requests from contributors who haven't signed the CLA fail the automated tests. The name and email you provide must match those found in your `git config`, and your git name and email must match those used for the CNCF CLA.
+
+### Choose which Git branch to use
+
+When opening a pull request, you need to know in advance which branch to base your work on.
+
+Scenario | Branch
+:---------|:------------
+Existing or new English language content for the current release | `master`
+Content for a feature change release | The branch which corresponds to the major and minor version the feature change is in, using the pattern `dev-<version>`. For example, if a feature changes in the `v{{< skew nextMinorVersion >}}` release, then add documentation changes to the ``dev-{{< skew nextMinorVersion >}}`` branch.
+Content in other languages (localizations) | Use the localization's convention. See the [Localization branching strategy](/docs/contribute/localization/#branching-strategy) for more information.
+
+
+If you're still not sure which branch to choose, ask in `#sig-docs` on Slack.
+
+{{< note >}}
+If you already submitted your pull request and you know that the base branch
+was wrong, you (and only you, the submitter) can change it.
+{{< /note >}}
+
+### Languages per PR
+
+Limit pull requests to one language per PR. If you need to make an identical change to the same code sample in multiple languages, open a separate PR for each language.
+
+## Tools for contributors
+
+The [doc contributors tools](https://github.com/kubernetes/website/tree/master/content/en/docs/doc-contributor-tools) directory in the `kubernetes/website` repository contains tools to help your contribution journey go more smoothly.
+
+

From 8aa8acf64e18f8b0cf07a19216243c55e3cd20a6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Mon, 3 Feb 2020 16:27:26 +0100
Subject: [PATCH 519/788] Add French configure-pod-configmap

---
 .../configure-pod-configmap.md                | 682 ++++++++++++++++++
 1 file changed, 682 insertions(+)
 create mode 100644 content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md

diff --git a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
new file mode 100644
index 0000000000..580f66ddef
--- /dev/null
+++ b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -0,0 +1,682 @@
+---
+title: Configure a Pod to Use a ConfigMap
+content_template: templates/task
+weight: 150
+card:
+  name: tasks
+  weight: 50
+---
+
+{{% capture overview %}}
+ConfigMaps allow you to decouple configuration artifacts from image content to keep containerized applications portable.
+This page provides a series of usage examples demonstrating how to create ConfigMaps and configure Pods using data stored in ConfigMaps.
+
+{{% /capture %}}
+
+{{% capture prerequisites %}}
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+{{% /capture %}}
+
+{{% capture steps %}}
+
+## Create a ConfigMap
+
+You can use either `kubectl create configmap` or a ConfigMap generator in `kustomization.yaml` to create a ConfigMap.
+Note that `kubectl` starts to support `kustomization.yaml` since 1.14.
+
+### Create a ConfigMap Using kubectl create configmap
+
+Use the `kubectl create configmap` command to create configmaps from [directories](#create-configmaps-from-directories), [files](#create-configmaps-from-files), or [literal values](#create-configmaps-from-literal-values):
+
+```shell
+kubectl create configmap <map-name> <data-source>
+```
+
+where \<map-name> is the name you want to assign to the ConfigMap and \<data-source> is the directory, file, or literal value to draw the data from.
+
+The data source corresponds to a key-value pair in the ConfigMap, where
+
+* key = the file name or the key you provided on the command line, and
+* value = the file contents or the literal value you provided on the command line.
+
+You can use [`kubectl describe`](/docs/reference/generated/kubectl/kubectl-commands/#describe) or [`kubectl get`](/docs/reference/generated/kubectl/kubectl-commands/#get) to retrieve information about a ConfigMap.
+
+#### Create ConfigMaps from directories
+
+You can use `kubectl create configmap` to create a ConfigMap from multiple files in the same directory.
+
+For example:
+
+```shell
+# Create the local directory
+mkdir -p configure-pod-container/configmap/
+
+# Download the sample files into `configure-pod-container/configmap/` directory
+wget https://kubernetes.io/examples/configmap/game.properties -O configure-pod-container/configmap/game.properties
+wget https://kubernetes.io/examples/configmap/ui.properties -O configure-pod-container/configmap/ui.properties
+
+# Create the configmap
+kubectl create configmap game-config --from-file=configure-pod-container/configmap/
+```
+
+combines the contents of the `configure-pod-container/configmap/` directory
+
+```shell
+game.properties
+ui.properties
+```
+
+into the following ConfigMap:
+
+```shell
+kubectl describe configmaps game-config
+```
+
+where the output is similar to this:
+
+```text
+Name:           game-config
+Namespace:      default
+Labels:         <none>
+Annotations:    <none>
+
+Data
+====
+game.properties:        158 bytes
+ui.properties:          83 bytes
+```
+
+The `game.properties` and `ui.properties` files in the `configure-pod-container/configmap/` directory are represented in the `data` section of the ConfigMap.
+
+```shell
+kubectl get configmaps game-config -o yaml
+```
+
+The output is similar to this:
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: 2016-02-18T18:52:05Z
+  name: game-config
+  namespace: default
+  resourceVersion: "516"
+  uid: b4952dc3-d670-11e5-8cd0-68f728db1985
+data:
+  game.properties: |
+    enemies=aliens
+    lives=3
+    enemies.cheat=true
+    enemies.cheat.level=noGoodRotten
+    secret.code.passphrase=UUDDLRLRBABAS
+    secret.code.allowed=true
+    secret.code.lives=30
+  ui.properties: |
+    color.good=purple
+    color.bad=yellow
+    allow.textmode=true
+    how.nice.to.look=fairlyNice
+```
+
+#### Create ConfigMaps from files
+
+You can use `kubectl create configmap` to create a ConfigMap from an individual file, or from multiple files.
+
+For example,
+
+```shell
+kubectl create configmap game-config-2 --from-file=configure-pod-container/configmap/game.properties
+```
+
+would produce the following ConfigMap:
+
+```shell
+kubectl describe configmaps game-config-2
+```
+
+where the output is similar to this:
+
+```text
+Name:           game-config-2
+Namespace:      default
+Labels:         <none>
+Annotations:    <none>
+
+Data
+====
+game.properties:        158 bytes
+```
+
+You can pass in the `--from-file` argument multiple times to create a ConfigMap from multiple data sources.
+
+```shell
+kubectl create configmap game-config-2 --from-file=configure-pod-container/configmap/game.properties --from-file=configure-pod-container/configmap/ui.properties
+```
+
+Describe the above `game-config-2` configmap created
+
+```shell
+kubectl describe configmaps game-config-2
+```
+
+The output is similar to this:
+
+```text
+Name:           game-config-2
+Namespace:      default
+Labels:         <none>
+Annotations:    <none>
+
+Data
+====
+game.properties:        158 bytes
+ui.properties:          83 bytes
+```
+
+Use the option `--from-env-file` to create a ConfigMap from an env-file, for example:
+
+```shell
+# Env-files contain a list of environment variables.
+# These syntax rules apply:
+#   Each line in an env file has to be in VAR=VAL format.
+#   Lines beginning with # (i.e. comments) are ignored.
+#   Blank lines are ignored.
+#   There is no special handling of quotation marks (i.e. they will be part of the ConfigMap value)).
+
+# Download the sample files into `configure-pod-container/configmap/` directory
+wget https://kubernetes.io/examples/configmap/game-env-file.properties -O configure-pod-container/configmap/game-env-file.properties
+
+# The env-file `game-env-file.properties` looks like below
+cat configure-pod-container/configmap/game-env-file.properties
+enemies=aliens
+lives=3
+allowed="true"
+
+# This comment and the empty line above it are ignored
+```
+
+```shell
+kubectl create configmap game-config-env-file \
+       --from-env-file=configure-pod-container/configmap/game-env-file.properties
+```
+
+would produce the following ConfigMap:
+
+```shell
+kubectl get configmap game-config-env-file -o yaml
+```
+
+where the output is similar to this:
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: 2017-12-27T18:36:28Z
+  name: game-config-env-file
+  namespace: default
+  resourceVersion: "809965"
+  uid: d9d1ca5b-eb34-11e7-887b-42010a8002b8
+data:
+  allowed: '"true"'
+  enemies: aliens
+  lives: "3"
+```
+
+{{< caution >}}
+When passing `--from-env-file` multiple times to create a ConfigMap from multiple data sources, only the last env-file is used.
+{{< /caution >}}
+
+The behavior of passing `--from-env-file` multiple times is demonstrated by:
+
+```shell
+# Download the sample files into `configure-pod-container/configmap/` directory
+wget https://k8s.io/examples/configmap/ui-env-file.properties -O configure-pod-container/configmap/ui-env-file.properties
+
+# Create the configmap
+kubectl create configmap config-multi-env-files \
+        --from-env-file=configure-pod-container/configmap/game-env-file.properties \
+        --from-env-file=configure-pod-container/configmap/ui-env-file.properties
+```
+
+would produce the following ConfigMap:
+
+```shell
+kubectl get configmap config-multi-env-files -o yaml
+```
+
+where the output is similar to this:
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: 2017-12-27T18:38:34Z
+  name: config-multi-env-files
+  namespace: default
+  resourceVersion: "810136"
+  uid: 252c4572-eb35-11e7-887b-42010a8002b8
+data:
+  color: purple
+  how: fairlyNice
+  textmode: "true"
+```
+
+#### Define the key to use when creating a ConfigMap from a file
+
+You can define a key other than the file name to use in the `data` section of your ConfigMap when using the `--from-file` argument:
+
+```shell
+kubectl create configmap game-config-3 --from-file=<my-key-name>=<path-to-file>
+```
+
+where `<my-key-name>` is the key you want to use in the ConfigMap and `<path-to-file>` is the location of the data source file you want the key to represent.
+
+For example:
+
+```shell
+kubectl create configmap game-config-3 --from-file=game-special-key=configure-pod-container/configmap/game.properties
+```
+
+would produce the following ConfigMap:
+
+```shell
+kubectl get configmaps game-config-3 -o yaml
+```
+
+where the output is similar to this:
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: 2016-02-18T18:54:22Z
+  name: game-config-3
+  namespace: default
+  resourceVersion: "530"
+  uid: 05f8da22-d671-11e5-8cd0-68f728db1985
+data:
+  game-special-key: |
+    enemies=aliens
+    lives=3
+    enemies.cheat=true
+    enemies.cheat.level=noGoodRotten
+    secret.code.passphrase=UUDDLRLRBABAS
+    secret.code.allowed=true
+    secret.code.lives=30
+```
+
+#### Create ConfigMaps from literal values
+
+You can use `kubectl create configmap` with the `--from-literal` argument to define a literal value from the command line:
+
+```shell
+kubectl create configmap special-config --from-literal=special.how=very --from-literal=special.type=charm
+```
+
+You can pass in multiple key-value pairs.
+Each pair provided on the command line is represented as a separate entry in the `data` section of the ConfigMap.
+
+```shell
+kubectl get configmaps special-config -o yaml
+```
+
+The output is similar to this:
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: 2016-02-18T19:14:38Z
+  name: special-config
+  namespace: default
+  resourceVersion: "651"
+  uid: dadce046-d673-11e5-8cd0-68f728db1985
+data:
+  special.how: very
+  special.type: charm
+```
+
+### Create a ConfigMap from generator
+
+`kubectl` supports `kustomization.yaml` since 1.14.
+You can also create a ConfigMap from generators and then apply it to create the object on the Apiserver.
+The generators should be specified in a `kustomization.yaml` inside a directory.
+
+#### Generate ConfigMaps from files
+
+For example, to generate a ConfigMap from files `configure-pod-container/configmap/game.properties`
+
+```shell
+# Create a kustomization.yaml file with ConfigMapGenerator
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: game-config-4
+  files:
+  - configure-pod-container/configmap/game.properties
+EOF
+```
+
+Apply the kustomization directory to create the ConfigMap object.
+
+```shell
+kubectl apply -k .
+configmap/game-config-4-m9dm2f92bt created
+```
+
+You can check that the ConfigMap was created like this:
+
+```text
+kubectl get configmap
+NAME                       DATA   AGE
+game-config-4-m9dm2f92bt   1      37s
+
+
+kubectl describe configmaps/game-config-4-m9dm2f92bt
+Name:         game-config-4-m9dm2f92bt
+Namespace:    default
+Labels:       <none>
+Annotations:  kubectl.kubernetes.io/last-applied-configuration:
+                {"apiVersion":"v1","data":{"game.properties":"enemies=aliens\nlives=3\nenemies.cheat=true\nenemies.cheat.level=noGoodRotten\nsecret.code.p...
+
+Data
+====
+game.properties:
+----
+enemies=aliens
+lives=3
+enemies.cheat=true
+enemies.cheat.level=noGoodRotten
+secret.code.passphrase=UUDDLRLRBABAS
+secret.code.allowed=true
+secret.code.lives=30
+Events:  <none>
+```
+
+Note that the generated ConfigMap name has a suffix appended by hashing the contents.
+This ensures that a new ConfigMap is generated each time the content is modified.
+
+#### Define the key to use when generating a ConfigMap from a file
+
+You can define a key other than the file name to use in the ConfigMap generator.
+For example, to generate a ConfigMap from files `configure-pod-container/configmap/game.properties`
+with the key `game-special-key`
+
+```shell
+# Create a kustomization.yaml file with ConfigMapGenerator
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: game-config-5
+  files:
+  - game-special-key=configure-pod-container/configmap/game.properties
+EOF
+```
+
+Apply the kustomization directory to create the ConfigMap object.
+
+```text
+kubectl apply -k .
+configmap/game-config-5-m67dt67794 created
+```
+
+#### Generate ConfigMaps from Literals
+
+To generate a ConfigMap from literals `special.type=charm` and `special.how=very`, you can specify the ConfigMap generator in `kustomization.yaml` as
+
+```shell
+# Create a kustomization.yaml file with ConfigMapGenerator
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: special-config-2
+  literals:
+  - special.how=very
+  - special.type=charm
+EOF
+```
+
+Apply the kustomization directory to create the ConfigMap object.
+
+```text
+kubectl apply -k .
+configmap/special-config-2-c92b5mmcf2 created
+```
+
+## Define container environment variables using ConfigMap data
+
+### Define a container environment variable with data from a single ConfigMap
+
+1. Define an environment variable as a key-value pair in a ConfigMap:
+
+    ```shell
+    kubectl create configmap special-config --from-literal=special.how=very
+    ```
+
+1. Assign the `special.how` value defined in the ConfigMap to the `SPECIAL_LEVEL_KEY` environment variable in the Pod specification.
+
+   {{< codenew file="pods/pod-single-configmap-env-variable.yaml" >}}
+
+   Create the Pod:
+
+ ```shell
+ kubectl create -f https://kubernetes.io/examples/pods/pod-single-configmap-env-variable.yaml
+ ```
+
+   Now, the Pod's output includes environment variable `SPECIAL_LEVEL_KEY=very`.
+
+### Define container environment variables with data from multiple ConfigMaps
+
+* As with the previous example, create the ConfigMaps first.
+
+   {{< codenew file="configmap/configmaps.yaml" >}}
+
+   Create the ConfigMap:
+
+ ```shell
+ kubectl create -f https://kubernetes.io/examples/configmap/configmaps.yaml
+ ```
+
+* Define the environment variables in the Pod specification.
+
+  {{< codenew file="pods/pod-multiple-configmap-env-variable.yaml" >}}
+
+  Create the Pod:
+
+ ```shell
+ kubectl create -f https://kubernetes.io/examples/pods/pod-multiple-configmap-env-variable.yaml
+ ```
+
+  Now, the Pod's output includes environment variables `SPECIAL_LEVEL_KEY=very` and `LOG_LEVEL=INFO`.
+
+## Configure all key-value pairs in a ConfigMap as container environment variables
+
+{{< note >}}
+This functionality is available in Kubernetes v1.6 and later.
+{{< /note >}}
+
+* Create a ConfigMap containing multiple key-value pairs.
+
+  {{< codenew file="configmap/configmap-multikeys.yaml" >}}
+
+  Create the ConfigMap:
+
+ ```shell
+ kubectl create -f https://kubernetes.io/examples/configmap/configmap-multikeys.yaml
+ ```
+
+* Use `envFrom` to define all of the ConfigMap's data as container environment variables.
+  The key from the ConfigMap becomes the environment variable name in the Pod.
+
+ {{< codenew file="pods/pod-configmap-envFrom.yaml" >}}
+
+ Create the Pod:
+
+ ```shell
+ kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-envFrom.yaml
+ ```
+
+ Now, the Pod's output includes environment variables `SPECIAL_LEVEL=very` and `SPECIAL_TYPE=charm`.
+
+## Use ConfigMap-defined environment variables in Pod commands
+
+You can use ConfigMap-defined environment variables in the `command` section of the Pod specification using the `$(VAR_NAME)` Kubernetes substitution syntax.
+
+For example, the following Pod specification
+
+{{< codenew file="pods/pod-configmap-env-var-valueFrom.yaml" >}}
+
+created by running
+
+```shell
+kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-env-var-valueFrom.yaml
+```
+
+produces the following output in the `test-container` container:
+
+```shell
+very charm
+```
+
+## Add ConfigMap data to a Volume
+
+As explained in [Create ConfigMaps from files](#create-configmaps-from-files), when you create a ConfigMap using ``--from-file``, the filename becomes a key stored in the `data` section of the ConfigMap. The file contents become the key's value.
+
+The examples in this section refer to a ConfigMap named special-config, shown below.
+
+{{< codenew file="configmap/configmap-multikeys.yaml" >}}
+
+Create the ConfigMap:
+
+```shell
+kubectl create -f https://kubernetes.io/examples/configmap/configmap-multikeys.yaml
+```
+
+### Populate a Volume with data stored in a ConfigMap
+
+Add the ConfigMap name under the `volumes` section of the Pod specification.
+This adds the ConfigMap data to the directory specified as `volumeMounts.mountPath` (in this case, `/etc/config`).
+The `command` section lists directory files with names that match the keys in ConfigMap.
+
+{{< codenew file="pods/pod-configmap-volume.yaml" >}}
+
+Create the Pod:
+
+```shell
+kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-volume.yaml
+```
+
+When the pod runs, the command `ls /etc/config/` produces the output below:
+
+```shell
+SPECIAL_LEVEL
+SPECIAL_TYPE
+```
+
+{{< caution >}}
+If there are some files in the `/etc/config/` directory, they will be deleted.
+{{< /caution >}}
+
+### Add ConfigMap data to a specific path in the Volume
+
+Use the `path` field to specify the desired file path for specific ConfigMap items.
+In this case, the `SPECIAL_LEVEL` item will be mounted in the `config-volume` volume at `/etc/config/keys`.
+
+{{< codenew file="pods/pod-configmap-volume-specific-key.yaml" >}}
+
+Create the Pod:
+
+```shell
+kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-volume-specific-key.yaml
+```
+
+When the pod runs, the command `cat /etc/config/keys` produces the output below:
+
+```shell
+very
+```
+
+{{< caution >}}
+Like before, all previous files in the `/etc/config/` directory will be deleted.
+{{< /caution >}}
+
+### Project keys to specific paths and file permissions
+
+You can project keys to specific paths and specific permissions on a per-file
+basis. The [Secrets](/docs/concepts/configuration/secret/#using-secrets-as-files-from-a-pod) user guide explains the syntax.
+
+### Mounted ConfigMaps are updated automatically
+
+When a ConfigMap already being consumed in a volume is updated, projected keys are eventually updated as well. Kubelet is checking whether the mounted ConfigMap is fresh on every periodic sync. However, it is using its local ttl-based cache for getting the current value of the ConfigMap. As a result, the total delay from the moment when the ConfigMap is updated to the moment when new keys are projected to the pod can be as long as kubelet sync period (1 minute by default) + ttl of ConfigMaps cache (1 minute by default) in kubelet. You can trigger an immediate refresh by updating one of the pod's annotations.
+
+{{< note >}}
+A container using a ConfigMap as a [subPath](/docs/concepts/storage/volumes/#using-subpath) volume will not receive ConfigMap updates.
+{{< /note >}}
+
+{{% /capture %}}
+
+{{% capture discussion %}}
+
+## Understanding ConfigMaps and Pods
+
+The ConfigMap API resource stores configuration data as key-value pairs. The data can be consumed in pods or provide the configurations for system components such as controllers. ConfigMap is similar to [Secrets](/docs/concepts/configuration/secret/), but provides a means of working with strings that don't contain sensitive information. Users and system components alike can store configuration data in ConfigMap.
+
+{{< note >}}
+ConfigMaps should reference properties files, not replace them. Think of the ConfigMap as representing something similar to the Linux `/etc` directory and its contents. For example, if you create a [Kubernetes Volume](/docs/concepts/storage/volumes/) from a ConfigMap, each data item in the ConfigMap is represented by an individual file in the volume.
+{{< /note >}}
+
+The ConfigMap's `data` field contains the configuration data. As shown in the example below, this can be simple -- like individual properties defined using `--from-literal` -- or complex -- like configuration files or JSON blobs defined using `--from-file`.
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: 2016-02-18T19:14:38Z
+  name: example-config
+  namespace: default
+data:
+  # example of a simple property defined using --from-literal
+  example.property.1: hello
+  example.property.2: world
+  # example of a complex property defined using --from-file
+  example.property.file: |-
+    property.1=value-1
+    property.2=value-2
+    property.3=value-3
+```
+
+### Restrictions
+
+* You must create a ConfigMap before referencing it in a Pod specification (unless you mark the ConfigMap as "optional").
+  If you reference a ConfigMap that doesn't exist, the Pod won't start.
+  Likewise, references to keys that don't exist in the ConfigMap will prevent the pod from starting.
+
+* If you use `envFrom` to define environment variables from ConfigMaps, keys that are considered invalid will be skipped.
+  The pod will be allowed to start, but the invalid names will be recorded in the event log (`InvalidVariableNames`).
+  The log message lists each skipped key.
+  For example:
+
+  ```shell
+  kubectl get events
+  ```
+
+  The output is similar to this:
+  
+  ```text
+  LASTSEEN FIRSTSEEN COUNT NAME          KIND  SUBOBJECT  TYPE      REASON                            SOURCE                MESSAGE
+  0s       0s        1     dapi-test-pod Pod              Warning   InvalidEnvironmentVariableNames   {kubelet, 127.0.0.1}  Keys [1badkey, 2alsobad] from the EnvFrom configMap default/myconfig were skipped since they are considered invalid environment variable names.
+  ```
+
+* ConfigMaps reside in a specific {{< glossary_tooltip term_id="namespace" >}}.
+  A ConfigMap can only be referenced by pods residing in the same namespace.
+
+* You can't use ConfigMaps for {{< glossary_tooltip text="static pods" term_id="static-pod" >}}, because the Kubelet does not support this.
+
+{{% /capture %}}
+
+{{% capture whatsnext %}}
+
+* Follow a real world example of [Configuring Redis using a ConfigMap](/docs/tutorials/configuration/configure-redis-using-configmap/).
+
+{{% /capture %}}

From 6725d2888d244aa914ba6e36aba0565104f91d4d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Tue, 16 Jun 2020 07:18:55 +0200
Subject: [PATCH 520/788] Fix

---
 .../configure-pod-configmap.md                | 231 +++++++++---------
 1 file changed, 116 insertions(+), 115 deletions(-)

diff --git a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
index 580f66ddef..d3a0aa0aba 100644
--- a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -8,8 +8,8 @@ card:
 ---
 
 {{% capture overview %}}
-ConfigMaps allow you to decouple configuration artifacts from image content to keep containerized applications portable.
-This page provides a series of usage examples demonstrating how to create ConfigMaps and configure Pods using data stored in ConfigMaps.
+Les ConfigMaps vous permettent de découpler les artefacts de configuration du contenu de l'image pour garder les applications conteneurisées portables.
+Cette page fournit une série d'exemples d'utilisation montrant comment créer des ConfigMaps et configurer des pods à l'aide des données stockées dans des ConfigMaps.
 
 {{% /capture %}}
 
@@ -21,60 +21,60 @@ This page provides a series of usage examples demonstrating how to create Config
 
 {{% capture steps %}}
 
-## Create a ConfigMap
+## Créer un ConfigMap
 
-You can use either `kubectl create configmap` or a ConfigMap generator in `kustomization.yaml` to create a ConfigMap.
-Note that `kubectl` starts to support `kustomization.yaml` since 1.14.
+Vous pouvez utiliser soit `kubectl create configmap` ou un générateur ConfigMap dans `kustomization.yaml` pour créer un ConfigMap.
+Notez que `kubectl` prends en charge `kustomization.yaml` à partir de la version 1.14.
 
-### Create a ConfigMap Using kubectl create configmap
+### Créer un ConfigMap à l'aide de kubectl create configmap
 
-Use the `kubectl create configmap` command to create configmaps from [directories](#create-configmaps-from-directories), [files](#create-configmaps-from-files), or [literal values](#create-configmaps-from-literal-values):
+Utilisez la commande `kubectl create configmap` pour créer des Configmaps depuis des [dossiers](#create-configmaps-from-directories), [fichiers](#create-configmaps-from-files), ou des [valeurs littérales](#create-configmaps-from-literal-values):
 
 ```shell
 kubectl create configmap <map-name> <data-source>
 ```
 
-where \<map-name> is the name you want to assign to the ConfigMap and \<data-source> is the directory, file, or literal value to draw the data from.
+où \<map-name> est le nom que vous souhaitez attribuer à ConfigMap et \<data-source> est le répertoire, le fichier ou la valeur littérale à partir de laquelle récupérer les données.
 
-The data source corresponds to a key-value pair in the ConfigMap, where
+La source de données correspond à une paire clé-valeur dans ConfigMap, où
 
-* key = the file name or the key you provided on the command line, and
-* value = the file contents or the literal value you provided on the command line.
+* clé = le nom du fichier ou la clé que vous avez fournie sur la ligne de commande, et
+* valeur = le contenu du fichier ou la valeur littérale que vous avez fournie sur la ligne de commande.
 
-You can use [`kubectl describe`](/docs/reference/generated/kubectl/kubectl-commands/#describe) or [`kubectl get`](/docs/reference/generated/kubectl/kubectl-commands/#get) to retrieve information about a ConfigMap.
+Vous pouvez utiliser [`kubectl describe`](/docs/reference/generated/kubectl/kubectl-commands/#describe) ou [`kubectl get`](/docs/reference/generated/kubectl/kubectl-commands/#get) pour récupérer des informations sur un ConfigMap.
 
-#### Create ConfigMaps from directories
+#### Créer des ConfigMaps à partir de répertoires
 
-You can use `kubectl create configmap` to create a ConfigMap from multiple files in the same directory.
+Vous pouvez utiliser `kubectl create configmap` pour créer un ConfigMap à partir de plusieurs fichiers dans le même répertoire.
 
-For example:
+Par exemple:
 
 ```shell
-# Create the local directory
+# Créez le répertoire local
 mkdir -p configure-pod-container/configmap/
 
-# Download the sample files into `configure-pod-container/configmap/` directory
+# Téléchargez les exemples de fichiers dans le répertoire `configure-pod-container/configmap/`
 wget https://kubernetes.io/examples/configmap/game.properties -O configure-pod-container/configmap/game.properties
 wget https://kubernetes.io/examples/configmap/ui.properties -O configure-pod-container/configmap/ui.properties
 
-# Create the configmap
+# Créer la configmap
 kubectl create configmap game-config --from-file=configure-pod-container/configmap/
 ```
 
-combines the contents of the `configure-pod-container/configmap/` directory
+combine le contenu du répertoire `configure-pod-container/configmap/`
 
 ```shell
 game.properties
 ui.properties
 ```
 
-into the following ConfigMap:
+dans le ConfigMap suivant:
 
 ```shell
 kubectl describe configmaps game-config
 ```
 
-where the output is similar to this:
+où la sortie est similaire à ceci:
 
 ```text
 Name:           game-config
@@ -88,13 +88,13 @@ game.properties:        158 bytes
 ui.properties:          83 bytes
 ```
 
-The `game.properties` and `ui.properties` files in the `configure-pod-container/configmap/` directory are represented in the `data` section of the ConfigMap.
+Les fichiers `game.properties` et `ui.properties` dans le répertoire `configure-pod-container/configmap/` sont représentés dans la section `data` de la ConfigMap.
 
 ```shell
 kubectl get configmaps game-config -o yaml
 ```
 
-The output is similar to this:
+La sortie est similaire à ceci:
 
 ```yaml
 apiVersion: v1
@@ -121,23 +121,23 @@ data:
     how.nice.to.look=fairlyNice
 ```
 
-#### Create ConfigMaps from files
+#### Créer des ConfigMaps à partir de fichiers
 
-You can use `kubectl create configmap` to create a ConfigMap from an individual file, or from multiple files.
+Vous pouvez utiliser `kubectl create configmap` pour créer un ConfigMap à partir d'un fichier individuel ou de plusieurs fichiers.
 
-For example,
+Par exemple,
 
 ```shell
 kubectl create configmap game-config-2 --from-file=configure-pod-container/configmap/game.properties
 ```
 
-would produce the following ConfigMap:
+produirait le ConfigMap suivant:
 
 ```shell
 kubectl describe configmaps game-config-2
 ```
 
-where the output is similar to this:
+où la sortie est similaire à ceci:
 
 ```text
 Name:           game-config-2
@@ -150,19 +150,19 @@ Data
 game.properties:        158 bytes
 ```
 
-You can pass in the `--from-file` argument multiple times to create a ConfigMap from multiple data sources.
+Vous pouvez passer l'argument `--from-file` plusieurs fois pour créer un ConfigMap à partir de plusieurs sources de données.
 
 ```shell
 kubectl create configmap game-config-2 --from-file=configure-pod-container/configmap/game.properties --from-file=configure-pod-container/configmap/ui.properties
 ```
 
-Describe the above `game-config-2` configmap created
+Décrivez la ConfigMap crée `game-config-2`:
 
 ```shell
 kubectl describe configmaps game-config-2
 ```
 
-The output is similar to this:
+La sortie est similaire à ceci:
 
 ```text
 Name:           game-config-2
@@ -176,26 +176,26 @@ game.properties:        158 bytes
 ui.properties:          83 bytes
 ```
 
-Use the option `--from-env-file` to create a ConfigMap from an env-file, for example:
+Utilisez l'option `--from-env-file` pour créer un ConfigMap à partir d'un fichier env, par exemple:
 
 ```shell
-# Env-files contain a list of environment variables.
-# These syntax rules apply:
-#   Each line in an env file has to be in VAR=VAL format.
-#   Lines beginning with # (i.e. comments) are ignored.
-#   Blank lines are ignored.
-#   There is no special handling of quotation marks (i.e. they will be part of the ConfigMap value)).
+# Les fichiers env contiennent une liste de variables d'environnement.
+# Ces règles de syntaxe s'appliquent:
+#   Chaque ligne d'un fichier env doit être au format VAR=VAL.
+#   Les lignes commençant par # (c'est-à-dire les commentaires) sont ignorées.
+#   Les lignes vides sont ignorées.
+#   Il n'y a pas de traitement spécial des guillemets (c'est-à-dire qu'ils feront partie de la valeur ConfigMap)).
 
-# Download the sample files into `configure-pod-container/configmap/` directory
+# Téléchargez les exemples de fichiers dans le dossier `configure-pod-container/configmap/`
 wget https://kubernetes.io/examples/configmap/game-env-file.properties -O configure-pod-container/configmap/game-env-file.properties
 
-# The env-file `game-env-file.properties` looks like below
+# Le fichier env `game-env-file.properties` ressemble à ceci
 cat configure-pod-container/configmap/game-env-file.properties
 enemies=aliens
 lives=3
 allowed="true"
 
-# This comment and the empty line above it are ignored
+# Ce commentaire et la ligne vide au-dessus sont ignorés
 ```
 
 ```shell
@@ -203,13 +203,13 @@ kubectl create configmap game-config-env-file \
        --from-env-file=configure-pod-container/configmap/game-env-file.properties
 ```
 
-would produce the following ConfigMap:
+produirait le ConfigMap suivant:
 
 ```shell
 kubectl get configmap game-config-env-file -o yaml
 ```
 
-where the output is similar to this:
+où la sortie est similaire à ceci:
 
 ```yaml
 apiVersion: v1
@@ -227,28 +227,28 @@ data:
 ```
 
 {{< caution >}}
-When passing `--from-env-file` multiple times to create a ConfigMap from multiple data sources, only the last env-file is used.
+Lorsque vous passez plusieurs fois `--from-env-file` pour créer un ConfigMap à partir de plusieurs sources de données, seul le dernier fichier env est utilisé.
 {{< /caution >}}
 
-The behavior of passing `--from-env-file` multiple times is demonstrated by:
+Le comportement consistant à passer plusieurs fois `--from-env-file` est démontré par:
 
 ```shell
-# Download the sample files into `configure-pod-container/configmap/` directory
+# Téléchargez les exemples de fichiers dans le répertoire `configure-pod-container/configmap/`
 wget https://k8s.io/examples/configmap/ui-env-file.properties -O configure-pod-container/configmap/ui-env-file.properties
 
-# Create the configmap
+# Créez le configmap
 kubectl create configmap config-multi-env-files \
         --from-env-file=configure-pod-container/configmap/game-env-file.properties \
         --from-env-file=configure-pod-container/configmap/ui-env-file.properties
 ```
 
-would produce the following ConfigMap:
+produirait le ConfigMap suivant:
 
 ```shell
 kubectl get configmap config-multi-env-files -o yaml
 ```
 
-where the output is similar to this:
+où la sortie est similaire à ceci:
 
 ```yaml
 apiVersion: v1
@@ -265,29 +265,29 @@ data:
   textmode: "true"
 ```
 
-#### Define the key to use when creating a ConfigMap from a file
+#### Définissez la clé à utiliser lors de la création d'un ConfigMap à partir d'un fichier
 
-You can define a key other than the file name to use in the `data` section of your ConfigMap when using the `--from-file` argument:
+Vous pouvez définir une clé autre que le nom de fichier à utiliser dans la section `data` de votre ConfigMap lorsque vous utilisez l'argument `--from-file`:
 
 ```shell
 kubectl create configmap game-config-3 --from-file=<my-key-name>=<path-to-file>
 ```
 
-where `<my-key-name>` is the key you want to use in the ConfigMap and `<path-to-file>` is the location of the data source file you want the key to represent.
+où `<my-key-name>` est la clé que vous souhaitez utiliser dans la ConfigMap et `<path-to-file>` est l'emplacement du fichier de source de données que vous souhaitez que la clé représente.
 
-For example:
+Par exemple:
 
 ```shell
 kubectl create configmap game-config-3 --from-file=game-special-key=configure-pod-container/configmap/game.properties
 ```
 
-would produce the following ConfigMap:
+produirait la ConfigMap suivante:
 
 ```shell
 kubectl get configmaps game-config-3 -o yaml
 ```
 
-where the output is similar to this:
+où la sortie est similaire à ceci:
 
 ```yaml
 apiVersion: v1
@@ -309,22 +309,22 @@ data:
     secret.code.lives=30
 ```
 
-#### Create ConfigMaps from literal values
+#### Créer des ConfigMaps à partir de valeurs littérales
 
-You can use `kubectl create configmap` with the `--from-literal` argument to define a literal value from the command line:
+Vous pouvez utiliser `kubectl create configmap` avec l'argument `--from-literal` définir une valeur littérale à partir de la ligne de commande:
 
 ```shell
 kubectl create configmap special-config --from-literal=special.how=very --from-literal=special.type=charm
 ```
 
-You can pass in multiple key-value pairs.
-Each pair provided on the command line is represented as a separate entry in the `data` section of the ConfigMap.
+Vous pouvez transmettre plusieurs paires clé-valeur.
+Chaque paire fournie sur la ligne de commande est représentée comme une entrée distincte dans la section `data` de la ConfigMap.
 
 ```shell
 kubectl get configmaps special-config -o yaml
 ```
 
-The output is similar to this:
+La sortie est similaire à ceci:
 
 ```yaml
 apiVersion: v1
@@ -340,15 +340,15 @@ data:
   special.type: charm
 ```
 
-### Create a ConfigMap from generator
+### Créer un ConfigMap à partir du générateur
 
-`kubectl` supports `kustomization.yaml` since 1.14.
-You can also create a ConfigMap from generators and then apply it to create the object on the Apiserver.
-The generators should be specified in a `kustomization.yaml` inside a directory.
+`kubectl` supporte `kustomization.yaml` depuis 1.14.
+Vous pouvez également créer un ConfigMap à partir de générateurs, puis l'appliquer pour créer l'objet sur l'Apiserver.
+Les générateurs doivent être spécifiés dans un `kustomization.yaml` à l'intérieur d'un répertoire.
 
-#### Generate ConfigMaps from files
+#### Générer des ConfigMaps à partir de fichiers
 
-For example, to generate a ConfigMap from files `configure-pod-container/configmap/game.properties`
+Par exemple, pour générer un ConfigMap à partir de fichiers `configure-pod-container/configmap/game.properties`
 
 ```shell
 # Create a kustomization.yaml file with ConfigMapGenerator
@@ -360,14 +360,14 @@ configMapGenerator:
 EOF
 ```
 
-Apply the kustomization directory to create the ConfigMap object.
+Appliquer le dossier kustomization pour créer l'objet ConfigMap.
 
 ```shell
 kubectl apply -k .
 configmap/game-config-4-m9dm2f92bt created
 ```
 
-You can check that the ConfigMap was created like this:
+Vous pouvez vérifier que le ConfigMap a été créé comme ceci:
 
 ```text
 kubectl get configmap
@@ -396,17 +396,17 @@ secret.code.lives=30
 Events:  <none>
 ```
 
-Note that the generated ConfigMap name has a suffix appended by hashing the contents.
-This ensures that a new ConfigMap is generated each time the content is modified.
+Notez que le nom ConfigMap généré a un suffixe obtenu par hachage de son contenu.
+Cela garantit qu'un nouveau ConfigMap est généré chaque fois que le contenu est modifié.
 
-#### Define the key to use when generating a ConfigMap from a file
+#### Définissez la clé à utiliser lors de la génération d'un ConfigMap à partir d'un fichier
 
-You can define a key other than the file name to use in the ConfigMap generator.
-For example, to generate a ConfigMap from files `configure-pod-container/configmap/game.properties`
-with the key `game-special-key`
+Vous pouvez définir une clé autre que le nom de fichier à utiliser dans le générateur ConfigMap.
+Par exemple, pour générer un ConfigMap à partir du fichier `configure-pod-container/configmap/game.properties`
+avec la clé `game-special-key`
 
 ```shell
-# Create a kustomization.yaml file with ConfigMapGenerator
+# Créer un fichier kustomization.yaml avec ConfigMapGenerator
 cat <<EOF >./kustomization.yaml
 configMapGenerator:
 - name: game-config-5
@@ -415,16 +415,16 @@ configMapGenerator:
 EOF
 ```
 
-Apply the kustomization directory to create the ConfigMap object.
+Appliquer le dossier kustomization pour créer l'objet ConfigMap.
 
 ```text
 kubectl apply -k .
 configmap/game-config-5-m67dt67794 created
 ```
 
-#### Generate ConfigMaps from Literals
+#### Générer des ConfigMaps à partir de littéraux
 
-To generate a ConfigMap from literals `special.type=charm` and `special.how=very`, you can specify the ConfigMap generator in `kustomization.yaml` as
+Pour générer un ConfigMap à partir de littéraux `special.type=charm` et `special.how=very`, vous pouvez spécifier le générateur ConfigMap dans `kustomization.yaml` comme
 
 ```shell
 # Create a kustomization.yaml file with ConfigMapGenerator
@@ -437,137 +437,138 @@ configMapGenerator:
 EOF
 ```
 
-Apply the kustomization directory to create the ConfigMap object.
+Appliquez le dossier kustomization pour créer l'objet ConfigMap.
 
 ```text
 kubectl apply -k .
 configmap/special-config-2-c92b5mmcf2 created
 ```
 
-## Define container environment variables using ConfigMap data
+## Définir des variables d'environnement de conteneur à l'aide des données ConfigMap
 
-### Define a container environment variable with data from a single ConfigMap
+### Définissez une variable d'environnement de conteneur avec les données d'une seule ConfigMap
 
-1. Define an environment variable as a key-value pair in a ConfigMap:
+1. Définissez une variable d'environnement comme paire clé-valeur dans un ConfigMap:
 
     ```shell
     kubectl create configmap special-config --from-literal=special.how=very
     ```
 
-1. Assign the `special.how` value defined in the ConfigMap to the `SPECIAL_LEVEL_KEY` environment variable in the Pod specification.
+1. Attribuez la valeur `special.how` défini dans ConfigMap à la variable d'environnement `SPECIAL_LEVEL_KEY` dans la spécification du Pod.
 
    {{< codenew file="pods/pod-single-configmap-env-variable.yaml" >}}
 
-   Create the Pod:
+   Créez le pod:
 
  ```shell
  kubectl create -f https://kubernetes.io/examples/pods/pod-single-configmap-env-variable.yaml
  ```
 
-   Now, the Pod's output includes environment variable `SPECIAL_LEVEL_KEY=very`.
+   Maintenant, la sortie du Pod comprend une variable d'environnement `SPECIAL_LEVEL_KEY=very`.
 
-### Define container environment variables with data from multiple ConfigMaps
+### Définir des variables d'environnement de conteneur avec des données de plusieurs ConfigMaps
 
-* As with the previous example, create the ConfigMaps first.
+* Comme avec l'exemple précédent, créez d'abord les ConfigMaps.
 
    {{< codenew file="configmap/configmaps.yaml" >}}
 
-   Create the ConfigMap:
+   Créez le ConfigMap:
 
  ```shell
  kubectl create -f https://kubernetes.io/examples/configmap/configmaps.yaml
  ```
 
-* Define the environment variables in the Pod specification.
+* Définissez les variables d'environnement dans la spécification Pod.
 
   {{< codenew file="pods/pod-multiple-configmap-env-variable.yaml" >}}
 
-  Create the Pod:
+  Créez le pod:
 
  ```shell
  kubectl create -f https://kubernetes.io/examples/pods/pod-multiple-configmap-env-variable.yaml
  ```
 
-  Now, the Pod's output includes environment variables `SPECIAL_LEVEL_KEY=very` and `LOG_LEVEL=INFO`.
+  Maintenant, la sortie du Pod comprend des variables d'environnement `SPECIAL_LEVEL_KEY=very` et `LOG_LEVEL=INFO`.
 
-## Configure all key-value pairs in a ConfigMap as container environment variables
+## Configurer toutes les paires clé-valeur dans un ConfigMap en tant que variables d'environnement de conteneur
 
 {{< note >}}
-This functionality is available in Kubernetes v1.6 and later.
+Cette fonctionnalité est disponible dans Kubernetes v1.6 et versions ultérieures.
 {{< /note >}}
 
-* Create a ConfigMap containing multiple key-value pairs.
+* Créez un ConfigMap contenant plusieurs paires clé-valeur.
 
   {{< codenew file="configmap/configmap-multikeys.yaml" >}}
 
-  Create the ConfigMap:
+  Créez le ConfigMap:
 
  ```shell
  kubectl create -f https://kubernetes.io/examples/configmap/configmap-multikeys.yaml
  ```
 
-* Use `envFrom` to define all of the ConfigMap's data as container environment variables.
-  The key from the ConfigMap becomes the environment variable name in the Pod.
+* Utilisez `envFrom` pour définir toutes les données du ConfigMap en tant que variables d'environnement du conteneur.
+  La clé de ConfigMap devient le nom de la variable d'environnement dans le pod.
 
  {{< codenew file="pods/pod-configmap-envFrom.yaml" >}}
 
- Create the Pod:
+ Créez le pod:
 
  ```shell
  kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-envFrom.yaml
  ```
 
- Now, the Pod's output includes environment variables `SPECIAL_LEVEL=very` and `SPECIAL_TYPE=charm`.
+ Maintenant, la sortie du Pod comprend les variables d'environnement `SPECIAL_LEVEL=very` et `SPECIAL_TYPE=charm`.
 
-## Use ConfigMap-defined environment variables in Pod commands
+## Utiliser des variables d'environnement définies par ConfigMap dans les commandes du Pod
 
-You can use ConfigMap-defined environment variables in the `command` section of the Pod specification using the `$(VAR_NAME)` Kubernetes substitution syntax.
+Vous pouvez utiliser des variables d'environnement définies par ConfigMap dans la section `command` de la spécification du Pod en utilisant la syntaxe de substitution Kubernetes `$(VAR_NAME)`.
 
-For example, the following Pod specification
+Par exemple, la spécification de pod suivante
 
 {{< codenew file="pods/pod-configmap-env-var-valueFrom.yaml" >}}
 
-created by running
+créé en exécutant
 
 ```shell
 kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-env-var-valueFrom.yaml
 ```
 
-produces the following output in the `test-container` container:
+produit la sortie suivante dans le conteneur `test-container`:
 
 ```shell
 very charm
 ```
 
-## Add ConfigMap data to a Volume
+## Ajouter des données ConfigMap à un volume
 
-As explained in [Create ConfigMaps from files](#create-configmaps-from-files), when you create a ConfigMap using ``--from-file``, the filename becomes a key stored in the `data` section of the ConfigMap. The file contents become the key's value.
+Comme expliqué dans [Créer des ConfigMaps à partir de fichiers](#create-configmaps-from-files), lorsque vous créez un ConfigMap à l'aide `--from-file`, le nom de fichier devient une clé stockée dans la section `data` du ConfigMap.
+Le contenu du fichier devient la valeur de la clé.
 
-The examples in this section refer to a ConfigMap named special-config, shown below.
+Les exemples de cette section se réfèrent à un ConfigMap nommé special-config, illustré ci-dessous.
 
 {{< codenew file="configmap/configmap-multikeys.yaml" >}}
 
-Create the ConfigMap:
+Créez le ConfigMap:
 
 ```shell
 kubectl create -f https://kubernetes.io/examples/configmap/configmap-multikeys.yaml
 ```
 
-### Populate a Volume with data stored in a ConfigMap
+### Remplissez un volume avec des données stockées dans un ConfigMap
 
-Add the ConfigMap name under the `volumes` section of the Pod specification.
-This adds the ConfigMap data to the directory specified as `volumeMounts.mountPath` (in this case, `/etc/config`).
-The `command` section lists directory files with names that match the keys in ConfigMap.
+Ajoutez le nom ConfigMap sous la section `volumes` de la spécification Pod.
+Ceci ajoute les données ConfigMap au répertoire spécifié comme `volumeMounts.mountPath` (dans ce cas, `/etc/config`).
+La section `command` répertorie les fichiers de répertoire dont les noms correspondent aux clés de ConfigMap.
 
 {{< codenew file="pods/pod-configmap-volume.yaml" >}}
 
-Create the Pod:
+Créez le pod:
 
 ```shell
 kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-volume.yaml
 ```
 
-When the pod runs, the command `ls /etc/config/` produces the output below:
+Lorsque le pod s'exécute, la commande `ls /etc/config/` produit la sortie ci-dessous:
 
 ```shell
 SPECIAL_LEVEL
@@ -575,7 +576,7 @@ SPECIAL_TYPE
 ```
 
 {{< caution >}}
-If there are some files in the `/etc/config/` directory, they will be deleted.
+S'il y a des fichiers dans le dossier `/etc/config/`, ils seront supprimés.
 {{< /caution >}}
 
 ### Add ConfigMap data to a specific path in the Volume

From fb9823b9ecba18686d2d6acc760f395a08857cf4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Sat, 10 Apr 2021 17:23:40 +0200
Subject: [PATCH 521/788] Fix

---
 .../configure-pod-configmap.md                | 66 +++++++++++--------
 1 file changed, 38 insertions(+), 28 deletions(-)

diff --git a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
index d3a0aa0aba..72e642b12d 100644
--- a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -579,55 +579,65 @@ SPECIAL_TYPE
 S'il y a des fichiers dans le dossier `/etc/config/`, ils seront supprimés.
 {{< /caution >}}
 
-### Add ConfigMap data to a specific path in the Volume
+### Ajouter un configmap à un chemin spécifique dans un volume
 
-Use the `path` field to specify the desired file path for specific ConfigMap items.
-In this case, the `SPECIAL_LEVEL` item will be mounted in the `config-volume` volume at `/etc/config/keys`.
+Utilisez le champ `path` pour spécifier le chemin de fichier souhaité pour les éléments de configmap spécifiques.
+Dans ce cas, le `SPECIAL_LEVEL` sera monté dans le volume `config-volume` au chemin `/etc/config/keys`.
 
 {{< codenew file="pods/pod-configmap-volume-specific-key.yaml" >}}
 
-Create the Pod:
+Créez le Pod :
 
 ```shell
 kubectl create -f https://kubernetes.io/examples/pods/pod-configmap-volume-specific-key.yaml
 ```
 
-When the pod runs, the command `cat /etc/config/keys` produces the output below:
+Lorsque le pod fonctionne, la commande `cat /etc/config/keys` produit la sortie ci-dessous :
 
 ```shell
 very
 ```
 
 {{< caution >}}
-Like before, all previous files in the `/etc/config/` directory will be deleted.
+Comme avant, tous les fichiers précédents dans le répertoire `/etc/config/` seront supprimés.
 {{< /caution >}}
 
-### Project keys to specific paths and file permissions
+### Clés de projet pour des chemins et des autorisations de fichiers spécifiques
 
-You can project keys to specific paths and specific permissions on a per-file
-basis. The [Secrets](/docs/concepts/configuration/secret/#using-secrets-as-files-from-a-pod) user guide explains the syntax.
+You can project keys to specific paths and specific permissions on a per-file basis.
+Le guide de l'utilisateur [Secrets](/docs/concepts/configuration/secret/#using-secrets-as-files-from-a-pod) explique la syntaxe.
 
-### Mounted ConfigMaps are updated automatically
+### Les ConfigMaps montées sont mises à jour automatiquement
 
-When a ConfigMap already being consumed in a volume is updated, projected keys are eventually updated as well. Kubelet is checking whether the mounted ConfigMap is fresh on every periodic sync. However, it is using its local ttl-based cache for getting the current value of the ConfigMap. As a result, the total delay from the moment when the ConfigMap is updated to the moment when new keys are projected to the pod can be as long as kubelet sync period (1 minute by default) + ttl of ConfigMaps cache (1 minute by default) in kubelet. You can trigger an immediate refresh by updating one of the pod's annotations.
+Lorsqu'une ConfigMap déjà consommée dans un volume est mise à jour, les clés projetées sont éventuellement mises à jour elles aussi.
+Kubelet vérifie si la ConfigMap montée est fraîche à chaque synchronisation périodique.
+Cependant, il utilise son cache local basé sur le ttl pour obtenir la valeur actuelle de la ConfigMap.
+Par conséquent, le délai total entre le moment où la ConfigMap est mise à jour et le moment où les nouvelles clés sont projetées vers le pod peut être aussi long que la période de synchronisation de kubelet (1 minute par défaut) + le ttl du cache ConfigMaps (1 minute par défaut) dans kubelet.
+Vous pouvez déclencher un rafraîchissement immédiat en mettant à jour l'une des annotations du pod.
 
 {{< note >}}
-A container using a ConfigMap as a [subPath](/docs/concepts/storage/volumes/#using-subpath) volume will not receive ConfigMap updates.
+Un conteneur utilisant un ConfigMap comme volume [subPath](/docs/concepts/storage/volumes/#using-subpath) ne recevra pas les mises à jour de ConfigMap.
 {{< /note >}}
 
 {{% /capture %}}
 
 {{% capture discussion %}}
 
-## Understanding ConfigMaps and Pods
+## Comprendre le lien entre les ConfigMaps et les Pods
 
-The ConfigMap API resource stores configuration data as key-value pairs. The data can be consumed in pods or provide the configurations for system components such as controllers. ConfigMap is similar to [Secrets](/docs/concepts/configuration/secret/), but provides a means of working with strings that don't contain sensitive information. Users and system components alike can store configuration data in ConfigMap.
+La ressource API ConfigMap stocke les données de configuration sous forme de paires clé-valeur.
+Les données peuvent être consommées dans des pods ou fournir les configurations des composants du système tels que les contrôleurs.
+ConfigMap est similaire à [Secrets](/docs/concepts/configuration/secret/), mais fournit un moyen de travailler avec des chaînes de caractères qui ne contiennent pas d'informations sensibles.
+Les utilisateurs comme les composants du système peuvent stocker des données de configuration dans un ConfigMap.
 
 {{< note >}}
-ConfigMaps should reference properties files, not replace them. Think of the ConfigMap as representing something similar to the Linux `/etc` directory and its contents. For example, if you create a [Kubernetes Volume](/docs/concepts/storage/volumes/) from a ConfigMap, each data item in the ConfigMap is represented by an individual file in the volume.
+Les ConfigMaps doivent faire référence aux fichiers de propriétés, et non les remplacer.
+Pensez à la ConfigMap comme représentant quelque chose de similaire au répertoire `/etc` de Linux et à son contenu.
+Par exemple, si vous créez un [volume Kubernetes] (/docs/concepts/storage/volumes/) à partir d'une ConfigMap, chaque élément de données de la ConfigMap est représenté par un fichier individuel dans le volume.
 {{< /note >}}
 
-The ConfigMap's `data` field contains the configuration data. As shown in the example below, this can be simple -- like individual properties defined using `--from-literal` -- or complex -- like configuration files or JSON blobs defined using `--from-file`.
+Le champ `data` de la ConfigMap contient les données de configuration.
+Comme le montre l'exemple ci-dessous, cela peut être simple -- comme des propriétés individuelles définies à l'aide de `--from-literal` -- ou complexe -- comme des fichiers de configuration ou des blobs JSON définis à l'aide de `--from-file`.
 
 ```yaml
 apiVersion: v1
@@ -649,35 +659,35 @@ data:
 
 ### Restrictions
 
-* You must create a ConfigMap before referencing it in a Pod specification (unless you mark the ConfigMap as "optional").
-  If you reference a ConfigMap that doesn't exist, the Pod won't start.
-  Likewise, references to keys that don't exist in the ConfigMap will prevent the pod from starting.
+* Vous devez créer un ConfigMap avant de le référencer dans une spécification de Pod (sauf si vous marquez le ConfigMap comme "facultatif").
+  Si vous faites référence à un ConfigMap qui n'existe pas, le Pod ne démarrera pas.
+  De même, les références à des clés qui n'existent pas dans la ConfigMap empêcheront le pod de démarrer.
 
-* If you use `envFrom` to define environment variables from ConfigMaps, keys that are considered invalid will be skipped.
-  The pod will be allowed to start, but the invalid names will be recorded in the event log (`InvalidVariableNames`).
-  The log message lists each skipped key.
-  For example:
+* Si vous utilisez `envFrom` pour définir des variables d'environnement à partir de ConfigMaps, les clés considérées comme invalides seront ignorées.
+  Le pod sera autorisé à démarrer, mais les noms invalides seront enregistrés dans le journal des événements (`InvalidVariableNames`).
+  Le message du journal énumère chaque clé sautée.
+  Par exemple :
 
   ```shell
   kubectl get events
   ```
 
-  The output is similar to this:
+  Le résultat est similaire à celui-ci :
   
   ```text
   LASTSEEN FIRSTSEEN COUNT NAME          KIND  SUBOBJECT  TYPE      REASON                            SOURCE                MESSAGE
   0s       0s        1     dapi-test-pod Pod              Warning   InvalidEnvironmentVariableNames   {kubelet, 127.0.0.1}  Keys [1badkey, 2alsobad] from the EnvFrom configMap default/myconfig were skipped since they are considered invalid environment variable names.
   ```
 
-* ConfigMaps reside in a specific {{< glossary_tooltip term_id="namespace" >}}.
-  A ConfigMap can only be referenced by pods residing in the same namespace.
+* Les ConfigMaps résident dans un {{< glossary_tooltip term_id="namespace" >}}.
+  Un ConfigMap ne peut être référencé que par des pods résidant dans le même namespace.
 
-* You can't use ConfigMaps for {{< glossary_tooltip text="static pods" term_id="static-pod" >}}, because the Kubelet does not support this.
+* Vous ne pouvez pas utiliser des ConfigMaps pour {{< glossary_tooltip text="static pods" term_id="static-pod" >}}, car le Kubelet ne le supporte pas.
 
 {{% /capture %}}
 
 {{% capture whatsnext %}}
 
-* Follow a real world example of [Configuring Redis using a ConfigMap](/docs/tutorials/configuration/configure-redis-using-configmap/).
+* Suivez un exemple concret de [Configurer Redis en utilisant un ConfigMap](/docs/tutorials/configuration/configure-redis-using-configmap/).
 
 {{% /capture %}}

From 049c832f33b813b9599845f7642869996b1c2dcd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Sat, 10 Apr 2021 22:52:11 +0200
Subject: [PATCH 522/788] Fix

---
 .../configure-pod-configmap.md                |  4 ++--
 .../configmap/configmap-multikeys.yaml        |  8 +++++++
 content/fr/examples/configmap/configmaps.yaml | 15 +++++++++++++
 .../pods/pod-configmap-env-var-valueFrom.yaml | 21 +++++++++++++++++++
 .../examples/pods/pod-configmap-envFrom.yaml  | 13 ++++++++++++
 .../pod-configmap-volume-specific-key.yaml    | 20 ++++++++++++++++++
 .../examples/pods/pod-configmap-volume.yaml   | 18 ++++++++++++++++
 .../pod-multiple-configmap-env-variable.yaml  | 21 +++++++++++++++++++
 .../pod-single-configmap-env-variable.yaml    | 19 +++++++++++++++++
 9 files changed, 137 insertions(+), 2 deletions(-)
 create mode 100644 content/fr/examples/configmap/configmap-multikeys.yaml
 create mode 100644 content/fr/examples/configmap/configmaps.yaml
 create mode 100644 content/fr/examples/pods/pod-configmap-env-var-valueFrom.yaml
 create mode 100644 content/fr/examples/pods/pod-configmap-envFrom.yaml
 create mode 100644 content/fr/examples/pods/pod-configmap-volume-specific-key.yaml
 create mode 100644 content/fr/examples/pods/pod-configmap-volume.yaml
 create mode 100644 content/fr/examples/pods/pod-multiple-configmap-env-variable.yaml
 create mode 100644 content/fr/examples/pods/pod-single-configmap-env-variable.yaml

diff --git a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
index 72e642b12d..ce2c14dc99 100644
--- a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -602,9 +602,9 @@ very
 Comme avant, tous les fichiers précédents dans le répertoire `/etc/config/` seront supprimés.
 {{< /caution >}}
 
-### Clés de projet pour des chemins et des autorisations de fichiers spécifiques
+### Projections de clés pour des chemins et des autorisations de fichiers spécifiques
 
-You can project keys to specific paths and specific permissions on a per-file basis.
+Vous pouvez projeter des clés vers des chemins spécifiques avec des autorisations spécifiques fichiers par fichiers.
 Le guide de l'utilisateur [Secrets](/docs/concepts/configuration/secret/#using-secrets-as-files-from-a-pod) explique la syntaxe.
 
 ### Les ConfigMaps montées sont mises à jour automatiquement
diff --git a/content/fr/examples/configmap/configmap-multikeys.yaml b/content/fr/examples/configmap/configmap-multikeys.yaml
new file mode 100644
index 0000000000..289702d123
--- /dev/null
+++ b/content/fr/examples/configmap/configmap-multikeys.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: special-config
+  namespace: default
+data:
+  SPECIAL_LEVEL: very
+  SPECIAL_TYPE: charm
diff --git a/content/fr/examples/configmap/configmaps.yaml b/content/fr/examples/configmap/configmaps.yaml
new file mode 100644
index 0000000000..91b9f29755
--- /dev/null
+++ b/content/fr/examples/configmap/configmaps.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: special-config
+  namespace: default
+data:
+  special.how: very
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: env-config
+  namespace: default
+data:
+  log_level: INFO
diff --git a/content/fr/examples/pods/pod-configmap-env-var-valueFrom.yaml b/content/fr/examples/pods/pod-configmap-env-var-valueFrom.yaml
new file mode 100644
index 0000000000..00827ec98a
--- /dev/null
+++ b/content/fr/examples/pods/pod-configmap-env-var-valueFrom.yaml
@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dapi-test-pod
+spec:
+  containers:
+    - name: test-container
+      image: k8s.gcr.io/busybox
+      command: [ "/bin/echo", "$(SPECIAL_LEVEL_KEY) $(SPECIAL_TYPE_KEY)" ]
+      env:
+        - name: SPECIAL_LEVEL_KEY
+          valueFrom:
+            configMapKeyRef:
+              name: special-config
+              key: SPECIAL_LEVEL
+        - name: SPECIAL_TYPE_KEY
+          valueFrom:
+            configMapKeyRef:
+              name: special-config
+              key: SPECIAL_TYPE
+  restartPolicy: Never
diff --git a/content/fr/examples/pods/pod-configmap-envFrom.yaml b/content/fr/examples/pods/pod-configmap-envFrom.yaml
new file mode 100644
index 0000000000..70ae7e5bcf
--- /dev/null
+++ b/content/fr/examples/pods/pod-configmap-envFrom.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dapi-test-pod
+spec:
+  containers:
+    - name: test-container
+      image: k8s.gcr.io/busybox
+      command: [ "/bin/sh", "-c", "env" ]
+      envFrom:
+      - configMapRef:
+          name: special-config
+  restartPolicy: Never
diff --git a/content/fr/examples/pods/pod-configmap-volume-specific-key.yaml b/content/fr/examples/pods/pod-configmap-volume-specific-key.yaml
new file mode 100644
index 0000000000..72e38fd836
--- /dev/null
+++ b/content/fr/examples/pods/pod-configmap-volume-specific-key.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dapi-test-pod
+spec:
+  containers:
+    - name: test-container
+      image: k8s.gcr.io/busybox
+      command: [ "/bin/sh","-c","cat /etc/config/keys" ]
+      volumeMounts:
+      - name: config-volume
+        mountPath: /etc/config
+  volumes:
+    - name: config-volume
+      configMap:
+        name: special-config
+        items:
+        - key: SPECIAL_LEVEL
+          path: keys
+  restartPolicy: Never
diff --git a/content/fr/examples/pods/pod-configmap-volume.yaml b/content/fr/examples/pods/pod-configmap-volume.yaml
new file mode 100644
index 0000000000..478c2e8d2b
--- /dev/null
+++ b/content/fr/examples/pods/pod-configmap-volume.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dapi-test-pod
+spec:
+  containers:
+    - name: test-container
+      image: k8s.gcr.io/busybox
+      command: [ "/bin/sh", "-c", "ls /etc/config/" ]
+      volumeMounts:
+      - name: config-volume
+        mountPath: /etc/config
+  volumes:
+    - name: config-volume
+      configMap:
+        # Indiquez le nom de la ConfigMap contenant les fichiers que vous souhaitez ajouter au conteneur
+        name: special-config
+  restartPolicy: Never
diff --git a/content/fr/examples/pods/pod-multiple-configmap-env-variable.yaml b/content/fr/examples/pods/pod-multiple-configmap-env-variable.yaml
new file mode 100644
index 0000000000..4790a9c661
--- /dev/null
+++ b/content/fr/examples/pods/pod-multiple-configmap-env-variable.yaml
@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dapi-test-pod
+spec:
+  containers:
+    - name: test-container
+      image: k8s.gcr.io/busybox
+      command: [ "/bin/sh", "-c", "env" ]
+      env:
+        - name: SPECIAL_LEVEL_KEY
+          valueFrom:
+            configMapKeyRef:
+              name: special-config
+              key: special.how
+        - name: LOG_LEVEL
+          valueFrom:
+            configMapKeyRef:
+              name: env-config
+              key: log_level
+  restartPolicy: Never
diff --git a/content/fr/examples/pods/pod-single-configmap-env-variable.yaml b/content/fr/examples/pods/pod-single-configmap-env-variable.yaml
new file mode 100644
index 0000000000..09d6f4a696
--- /dev/null
+++ b/content/fr/examples/pods/pod-single-configmap-env-variable.yaml
@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dapi-test-pod
+spec:
+  containers:
+    - name: test-container
+      image: k8s.gcr.io/busybox
+      command: [ "/bin/sh", "-c", "env" ]
+      env:
+        # Définie la variable d'environnement
+        - name: SPECIAL_LEVEL_KEY
+          valueFrom:
+            configMapKeyRef:
+              # La ConfigMap contenant la valeur que vous voulez attribuer à SPECIAL_LEVEL_KEY
+              name: special-config
+              # Spécifier la clé associée à la valeur
+              key: special.how
+  restartPolicy: Never

From 28d522427a798121745919a5c73579d3f3fdf67c Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 11 Apr 2021 03:28:25 +0000
Subject: [PATCH 523/788] Translate _index.md into Japanese

---
 content/ja/docs/contribute/new-content/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/new-content/_index.md b/content/ja/docs/contribute/new-content/_index.md
index 4992a37654..f9cb2e1301 100644
--- a/content/ja/docs/contribute/new-content/_index.md
+++ b/content/ja/docs/contribute/new-content/_index.md
@@ -1,4 +1,4 @@
 ---
-title: Contributing new content
+title: 新しいコンテンツの貢献
 weight: 20
 ---

From de812122a6bb85cc6ee3fbae731b625eecc584be Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 11 Apr 2021 03:29:04 +0000
Subject: [PATCH 524/788] Translate contribute/new-content/overview into
 Japanese

---
 .../docs/contribute/new-content/overview.md   | 63 ++++++++-----------
 1 file changed, 26 insertions(+), 37 deletions(-)

diff --git a/content/ja/docs/contribute/new-content/overview.md b/content/ja/docs/contribute/new-content/overview.md
index a7c6ab083e..e7851a5397 100644
--- a/content/ja/docs/contribute/new-content/overview.md
+++ b/content/ja/docs/contribute/new-content/overview.md
@@ -1,6 +1,6 @@
 ---
-title: Contributing new content overview
-linktitle: Overview
+title: 新しいコンテンツの貢献の概要
+linktitle: 概要
 content_type: concept
 main_menu: true
 weight: 5
@@ -8,58 +8,47 @@ weight: 5
 
 <!-- overview -->
 
-This section contains information you should know before contributing new content.
-
-
-
+このセクションでは、新しいコンテンツの貢献を行う前に知っておくべき情報を説明します。
 
 <!-- body -->
 
-## Contributing basics
+## 貢献の基本
 
-- Write Kubernetes documentation in Markdown and build the Kubernetes site using [Hugo](https://gohugo.io/).
-- The source is in [GitHub](https://github.com/kubernetes/website). You can find Kubernetes documentation at `/content/en/docs/`. Some of the reference documentation is automatically generated from scripts in the `update-imported-docs/` directory.
-- [Page content types](/docs/contribute/style/page-content-types/) describe the presentation of documentation content in Hugo.
-- In addition to the standard Hugo shortcodes, we use a number of
-  [custom Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/) in our documentation to control the presentation of content.
-- Documentation source is available in multiple languages in `/content/`. Each
-  language has its own folder with a two-letter code determined by the
-  [ISO 639-1 standard](https://www.loc.gov/standards/iso639-2/php/code_list.php). For
-  example, English documentation source is stored in `/content/en/docs/`.
-- For more information about contributing to documentation in multiple languages or starting a new translation, see [localization](/docs/contribute/localization).
+- KubernetesのドキュメントはMarkdownで書き、Kubernetesのウェブサイトは[Hugo](https://gohugo.io/)を使ってビルドします。
+- ソースは[GitHub](https://github.com/kubernetes/website)にあります。Kubernetesのドキュメントは`/content/en/docs/`にあります。リファレンスドキュメントの一部は、`update-imported-docs/`ディレクトリ内のスクリプトから自動的に生成されます。
+- [Page content types](/docs/contribute/style/page-content-types/)はHugo内のドキュメントのコンテンツの見え方を？指定します？
+- 標準のHugoのshortcodeに加えて、多数の[カスタムのHugo shortcode](/docs/contribute/style/hugo-shortcodes/)を使用してコンテンツの見え方をコントロールしています。
+- ドキュメントのソースは`/content/`内にある複数の言語で利用できます。各言語はそれぞれ[ISO 639-1標準](https://www.loc.gov/standards/iso639-2/php/code_list.php)で定義された2文字のコードの名前のフォルダを持ちます。たとえば、英語のドキュメントのソースは`/content/en/docs/`内に置かれています。
+- 複数言語でのドキュメントへの貢献や新しい翻訳の開始に関する情報については、[ローカライゼーション](/docs/contribute/localization)を参照してください。
 
-## Before you begin {#before-you-begin}
+## 始める前に {#before-you-begin}
 
-### Sign the CNCF CLA {#sign-the-cla}
+### CNCF CLAに署名する {#sign-the-cla}
 
-All Kubernetes contributors **must** read the [Contributor guide](https://github.com/kubernetes/community/blob/master/contributors/guide/README.md) and [sign the Contributor License Agreement (CLA)](https://github.com/kubernetes/community/blob/master/CLA.md).
+すべてのKubernetesのコントリビューターは、[コントリビューターガイド](https://github.com/kubernetes/community/blob/master/contributors/guide/README.md)を読み、[Contributor License Agreement(コントリビューターライセンス契約、CLA)への署名](https://github.com/kubernetes/community/blob/master/CLA.md)を**必ず行わなければなりません**。
 
-Pull requests from contributors who haven't signed the CLA fail the automated tests. The name and email you provide must match those found in your `git config`, and your git name and email must match those used for the CNCF CLA.
+CLAへの署名が完了していないコントリビューターからのpull requestは、自動化されたテストで失敗します。名前とメールアドレスは`git config`コマンドで表示されるものに一致し、gitの名前とメールアドレスはCNCF CLAで使われたものに一致しなければなりません。
 
-### Choose which Git branch to use
+### どのGitブランチを使用するかを選ぶ
 
-When opening a pull request, you need to know in advance which branch to base your work on.
+pull requestをオープンするときは、どのブランチをベースにして作業するかをあらかじめ知っておく必要があります。
 
-Scenario | Branch
+シナリオ | ブランチ
 :---------|:------------
-Existing or new English language content for the current release | `master`
-Content for a feature change release | The branch which corresponds to the major and minor version the feature change is in, using the pattern `dev-<version>`. For example, if a feature changes in the `v{{< skew nextMinorVersion >}}` release, then add documentation changes to the ``dev-{{< skew nextMinorVersion >}}`` branch.
-Content in other languages (localizations) | Use the localization's convention. See the [Localization branching strategy](/docs/contribute/localization/#branching-strategy) for more information.
+現在のリリースに対する既存または新しい英語のコンテンツ | `master`
+機能変更のリリースに対するコンテンツ | 機能変更が含まれるメジャーおよびマイナーバージョンに対応する、`dev-<version>`というパターンのブランチを使います。たとえば、機能変更が`v{{< skew nextMinorVersion >}}`に含まれる場合、ドキュメントの変更は``dev-{{< skew nextMinorVersion >}}``ブランチに追加します。
+他の言語内のコンテンツ(翻訳) | 各翻訳対象の言語のルールに従います。詳しい情報は、[翻訳のブランチ戦略](/docs/contribute/localization/#branching-strategy)を読んでください。
 
-
-If you're still not sure which branch to choose, ask in `#sig-docs` on Slack.
+それでも選ぶべきブランチがわからないときは、Slack上の`#sig-docs`チャンネルで質問してください。
 
 {{< note >}}
-If you already submitted your pull request and you know that the base branch
-was wrong, you (and only you, the submitter) can change it.
+すでにpull requestを作成していて、ベースブランチが間違っていたことに気づいた場合は、作成者であるあなただけがベースブランチを変更できます。
 {{< /note >}}
 
-### Languages per PR
+### 言語ごとのPR
 
-Limit pull requests to one language per PR. If you need to make an identical change to the same code sample in multiple languages, open a separate PR for each language.
-
-## Tools for contributors
-
-The [doc contributors tools](https://github.com/kubernetes/website/tree/master/content/en/docs/doc-contributor-tools) directory in the `kubernetes/website` repository contains tools to help your contribution journey go more smoothly.
+pull requestはPRごとに1つの言語に限定してください。複数の言語に同一の変更を行う必要がある場合は、言語ごとに別々のPRを作成してください。
 
+## コントリビューターのためのツール
 
+`kubernetes/website`リポジトリ内の[doc contributors tools](https://github.com/kubernetes/website/tree/master/content/en/docs/doc-contributor-tools)ディレクトリには、コントリビューターとしての旅を楽にしてくれるツールがあります。

From 12883afcdf1d4a490d3114a9d73c56c4dcff64ce Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 11 Apr 2021 14:21:50 +0900
Subject: [PATCH 525/788] Update the anchor text

---
 content/ja/docs/contribute/new-content/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/new-content/overview.md b/content/ja/docs/contribute/new-content/overview.md
index e7851a5397..b106b0fb28 100644
--- a/content/ja/docs/contribute/new-content/overview.md
+++ b/content/ja/docs/contribute/new-content/overview.md
@@ -19,7 +19,7 @@ weight: 5
 - [Page content types](/docs/contribute/style/page-content-types/)はHugo内のドキュメントのコンテンツの見え方を？指定します？
 - 標準のHugoのshortcodeに加えて、多数の[カスタムのHugo shortcode](/docs/contribute/style/hugo-shortcodes/)を使用してコンテンツの見え方をコントロールしています。
 - ドキュメントのソースは`/content/`内にある複数の言語で利用できます。各言語はそれぞれ[ISO 639-1標準](https://www.loc.gov/standards/iso639-2/php/code_list.php)で定義された2文字のコードの名前のフォルダを持ちます。たとえば、英語のドキュメントのソースは`/content/en/docs/`内に置かれています。
-- 複数言語でのドキュメントへの貢献や新しい翻訳の開始に関する情報については、[ローカライゼーション](/docs/contribute/localization)を参照してください。
+- 複数言語でのドキュメントへの貢献や新しい翻訳の開始に関する情報については、[Kubernetesのドキュメントを翻訳する](/docs/contribute/localization)を参照してください。
 
 ## 始める前に {#before-you-begin}
 

From a2e42f79d2323c8ef0455570a71f8b7df2492dc3 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 11 Apr 2021 05:59:08 +0000
Subject: [PATCH 526/788] Replace featured png logo with svg image

---
 layouts/case-studies/list.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/layouts/case-studies/list.html b/layouts/case-studies/list.html
index 06dc81d865..0064737743 100644
--- a/layouts/case-studies/list.html
+++ b/layouts/case-studies/list.html
@@ -68,7 +68,7 @@
 {{ end }}
 {{ define "case-study-featured-block" }}
 {{ $isForeignLanguage := (ne .page.Lang .ctx.Lang)}}
-{{ $logo := .page.Resources.GetMatch "**{feature,logo}*.png" }}
+{{ $logo := .page.Resources.GetMatch "**{feature,logo}*.svg" }}
 {{ $altText := .page.LinkTitle}}
 <div class="case-study">
 	{{ with $logo }}<img src="{{ .RelPermalink }}" alt="{{ $altText }}">{{ end }}

From b04d764a22d7a6544f764932cf836f137f9ed522 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 11 Apr 2021 06:11:55 +0000
Subject: [PATCH 527/788] Change the backgrounds of logo iamges from gray to
 transparent

---
 content/en/case-studies/adform/adform_featured_logo.svg         | 2 +-
 content/en/case-studies/adidas/adidas-featured.svg              | 2 +-
 content/en/case-studies/amadeus/amadeus_featured.svg            | 2 +-
 content/en/case-studies/ancestry/ancestry_featured.svg          | 2 +-
 .../case-studies/ant-financial/ant-financial_featured_logo.svg  | 2 +-
 content/en/case-studies/appdirect/appdirect_featured_logo.svg   | 2 +-
 content/en/case-studies/babylon/babylon_featured_logo.svg       | 2 +-
 content/en/case-studies/blablacar/blablacar_featured.svg        | 2 +-
 content/en/case-studies/blackrock/blackrock_featured.svg        | 2 +-
 .../en/case-studies/booking-com/booking.com_featured_logo.svg   | 2 +-
 content/en/case-studies/booz-allen/booz-allen-featured-logo.svg | 2 +-
 content/en/case-studies/bose/bose_featured_logo.svg             | 2 +-
 content/en/case-studies/box/box_featured.svg                    | 2 +-
 content/en/case-studies/buffer/buffer_featured.svg              | 2 +-
 .../en/case-studies/capital-one/capitalone_featured_logo.svg    | 2 +-
 .../en/case-studies/chinaunicom/chinaunicom_featured_logo.svg   | 2 +-
 .../city-of-montreal/city-of-montreal_featured_logo.svg         | 2 +-
 content/en/case-studies/crowdfire/crowdfire_featured_logo.svg   | 2 +-
 content/en/case-studies/denso/denso_featured_logo.svg           | 2 +-
 content/en/case-studies/golfnow/golfnow_featured.svg            | 2 +-
 content/en/case-studies/haufegroup/haufegroup_featured.svg      | 2 +-
 content/en/case-studies/huawei/huawei_featured.svg              | 2 +-
 content/en/case-studies/ibm/ibm_featured_logo.svg               | 2 +-
 content/en/case-studies/ing/ing_featured_logo.svg               | 2 +-
 content/en/case-studies/naic/naic_featured_logo.svg             | 2 +-
 content/en/case-studies/nav/nav_featured_logo.svg               | 2 +-
 content/en/case-studies/nerdalize/nerdalize_featured_logo.svg   | 2 +-
 content/en/case-studies/netease/netease_featured_logo.svg       | 2 +-
 content/en/case-studies/newyorktimes/newyorktimes_featured.svg  | 2 +-
 content/en/case-studies/nokia/nokia_featured_logo.svg           | 2 +-
 content/en/case-studies/nordstrom/nordstrom_featured_logo.svg   | 2 +-
 .../northwestern-mutual/northwestern_featured_logo.svg          | 2 +-
 content/en/case-studies/ocado/ocado_featured_logo.svg           | 2 +-
 content/en/case-studies/openAI/openai_featured.svg              | 2 +-
 content/en/case-studies/peardeck/peardeck_featured.svg          | 2 +-
 content/en/case-studies/pingcap/pingcap_featured_logo.svg       | 2 +-
 content/en/case-studies/pinterest/pinterest_feature.svg         | 2 +-
 content/en/case-studies/prowise/prowise_featured_logo.svg       | 2 +-
 content/en/case-studies/ricardo-ch/ricardo.ch_featured_logo.svg | 2 +-
 content/en/case-studies/slamtec/slamtec_featured_logo.svg       | 2 +-
 content/en/case-studies/slingtv/slingtv_featured_logo.svg       | 2 +-
 content/en/case-studies/spotify/spotify-featured.svg            | 2 +-
 .../en/case-studies/squarespace/squarespace_featured_logo.svg   | 2 +-
 content/en/case-studies/thredup/thredup_featured_logo.svg       | 2 +-
 content/en/case-studies/vsco/vsco_featured_logo.svg             | 2 +-
 content/en/case-studies/wikimedia/wikimedia_featured.svg        | 2 +-
 content/en/case-studies/wink/wink_featured.svg                  | 2 +-
 content/en/case-studies/woorank/woorank_featured_logo.svg       | 2 +-
 content/en/case-studies/workiva/workiva_featured_logo.svg       | 2 +-
 content/en/case-studies/yahoo-japan/yahoojapan_featured.svg     | 2 +-
 content/en/case-studies/ygrene/ygrene_featured_logo.svg         | 2 +-
 content/en/case-studies/zalando/zalando_feature_logo.svg        | 2 +-
 static/images/babylon_featured.svg                              | 2 +-
 static/images/babylon_featured_logo.svg                         | 2 +-
 static/images/denso_featured_logo.svg                           | 2 +-
 55 files changed, 55 insertions(+), 55 deletions(-)

diff --git a/content/en/case-studies/adform/adform_featured_logo.svg b/content/en/case-studies/adform/adform_featured_logo.svg
index ce058af82e..b31ef3235a 100644
--- a/content/en/case-studies/adform/adform_featured_logo.svg
+++ b/content/en/case-studies/adform/adform_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#64c3a5;}.cls-2,.cls-3,.cls-4,.cls-5{fill-rule:evenodd;}.cls-3{fill:#e9d661;}.cls-4{fill:#0582bd;}.cls-5{fill:#808285;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.21396" y="-3.67916" width="223.25536" height="134.51136"/><path class="cls-2" d="M109.66922,82.43741A19.57065,19.57065,0,0,1,90.35516,66.01248a19.57588,19.57588,0,0,1,17.35089-16.32394A19.571,19.571,0,0,0,96.842,72.59509a13.28048,13.28048,0,0,0,12.82726,9.84232"/><path class="cls-3" d="M107.70538,49.68854q.96877-.09621,1.96384-.09714a19.59034,19.59034,0,0,1,5.971.93243c-1.19879,3.42362-2.9112,5.60261-4.58257,5.4263a13.51316,13.51316,0,0,0-1.38838-.07249,13.2911,13.2911,0,0,0-12.94535,16.2528,19.572,19.572,0,0,1,10.98151-22.4419"/><path class="cls-4" d="M118.5549,59.2884c-1.24844-1.1244-.77543-3.85447.96614-7.03615a19.56137,19.56137,0,1,1-29.16566,13.762,19.57091,19.57091,0,0,0,19.31384,16.42316,13.27982,13.27982,0,0,0,8.88568-23.149"/><path class="cls-5" d="M148.72465,56.68991a6.07242,6.07242,0,0,0-9.10641,5.25828v24.793H133.331v-24.793a12.36017,12.36017,0,0,1,18.53664-10.70293l-3.143,5.44465Zm24.605-2.97568a12.35685,12.35685,0,0,1,21.57057,8.234v24.793h-6.28659v-24.793a6.07039,6.07039,0,1,0-12.14078,0v24.793h-6.28662v-24.793a6.07006,6.07006,0,1,0-12.14012,0v24.793h-6.28747v-24.793a12.35715,12.35715,0,0,1,21.571-8.234m-79.275-11.71068a6.07292,6.07292,0,0,0-9.10642,5.25869v3.15422h6.60732l-2.79511,6.27307H84.94817V86.74119H78.66091v-39.479A12.3589,12.3589,0,0,1,97.19756,36.55965L94.625,42.333l-.57036-.32949ZM20.49076,54.8028a13.15543,13.15543,0,0,1,10.7037-5.2114c7.03714,0,12.74106,5.1005,12.74106,11.39221l-.01237,16.34832c0,6.29168-5.704,11.39208-12.74112,11.39208s-12.741-5.1004-12.741-11.39208c0-5.26947,3.663-9.84144,9.772-11.47815l9.43621-2.52868.01242-2.34149c0-2.82005-2.895-5.106-6.46627-5.106a7.12669,7.12669,0,0,0-5.22007,2.0919l-.66586.73592L20.49076,54.8028ZM37.64921,69.84037l-.00073,7.49156c-.00018,2.81872-2.89507,5.10548-6.46645,5.10548s-6.46627-2.28565-6.46627-5.10548c0-2.41256,2.2001-4.61169,5.09086-5.38735l7.84259-2.10421Zm29.58343-32.952v14.2779a13.83819,13.83819,0,0,0-6.46716-1.57488c-7.03708,0-12.74094,5.1005-12.74094,11.39221V77.33193c0,6.29168,5.70386,11.39208,12.74094,11.39208s12.74117-5.1004,12.74117-11.39208V36.88838Zm0,24.09523V77.33193c0,2.81983-2.89487,5.10548-6.46628,5.10548s-6.46627-2.28565-6.46627-5.10548V60.98361c0-2.82005,2.89487-5.106,6.46627-5.106s6.46628,2.28592,6.46628,5.106"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#64c3a5;}.cls-2,.cls-3,.cls-4,.cls-5{fill-rule:evenodd;}.cls-3{fill:#e9d661;}.cls-4{fill:#0582bd;}.cls-5{fill:#808285;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.21396" y="-3.67916" width="223.25536" height="134.51136"/><path class="cls-2" d="M109.66922,82.43741A19.57065,19.57065,0,0,1,90.35516,66.01248a19.57588,19.57588,0,0,1,17.35089-16.32394A19.571,19.571,0,0,0,96.842,72.59509a13.28048,13.28048,0,0,0,12.82726,9.84232"/><path class="cls-3" d="M107.70538,49.68854q.96877-.09621,1.96384-.09714a19.59034,19.59034,0,0,1,5.971.93243c-1.19879,3.42362-2.9112,5.60261-4.58257,5.4263a13.51316,13.51316,0,0,0-1.38838-.07249,13.2911,13.2911,0,0,0-12.94535,16.2528,19.572,19.572,0,0,1,10.98151-22.4419"/><path class="cls-4" d="M118.5549,59.2884c-1.24844-1.1244-.77543-3.85447.96614-7.03615a19.56137,19.56137,0,1,1-29.16566,13.762,19.57091,19.57091,0,0,0,19.31384,16.42316,13.27982,13.27982,0,0,0,8.88568-23.149"/><path class="cls-5" d="M148.72465,56.68991a6.07242,6.07242,0,0,0-9.10641,5.25828v24.793H133.331v-24.793a12.36017,12.36017,0,0,1,18.53664-10.70293l-3.143,5.44465Zm24.605-2.97568a12.35685,12.35685,0,0,1,21.57057,8.234v24.793h-6.28659v-24.793a6.07039,6.07039,0,1,0-12.14078,0v24.793h-6.28662v-24.793a6.07006,6.07006,0,1,0-12.14012,0v24.793h-6.28747v-24.793a12.35715,12.35715,0,0,1,21.571-8.234m-79.275-11.71068a6.07292,6.07292,0,0,0-9.10642,5.25869v3.15422h6.60732l-2.79511,6.27307H84.94817V86.74119H78.66091v-39.479A12.3589,12.3589,0,0,1,97.19756,36.55965L94.625,42.333l-.57036-.32949ZM20.49076,54.8028a13.15543,13.15543,0,0,1,10.7037-5.2114c7.03714,0,12.74106,5.1005,12.74106,11.39221l-.01237,16.34832c0,6.29168-5.704,11.39208-12.74112,11.39208s-12.741-5.1004-12.741-11.39208c0-5.26947,3.663-9.84144,9.772-11.47815l9.43621-2.52868.01242-2.34149c0-2.82005-2.895-5.106-6.46627-5.106a7.12669,7.12669,0,0,0-5.22007,2.0919l-.66586.73592L20.49076,54.8028ZM37.64921,69.84037l-.00073,7.49156c-.00018,2.81872-2.89507,5.10548-6.46645,5.10548s-6.46627-2.28565-6.46627-5.10548c0-2.41256,2.2001-4.61169,5.09086-5.38735l7.84259-2.10421Zm29.58343-32.952v14.2779a13.83819,13.83819,0,0,0-6.46716-1.57488c-7.03708,0-12.74094,5.1005-12.74094,11.39221V77.33193c0,6.29168,5.70386,11.39208,12.74094,11.39208s12.74117-5.1004,12.74117-11.39208V36.88838Zm0,24.09523V77.33193c0,2.81983-2.89487,5.10548-6.46628,5.10548s-6.46627-2.28565-6.46627-5.10548V60.98361c0-2.82005,2.89487-5.106,6.46627-5.106s6.46628,2.28592,6.46628,5.106"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/adidas/adidas-featured.svg b/content/en/case-studies/adidas/adidas-featured.svg
index 07e595356a..a53d467552 100644
--- a/content/en/case-studies/adidas/adidas-featured.svg
+++ b/content/en/case-studies/adidas/adidas-featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#040606;}</style></defs><title>kubernetes.io-54664</title><rect class="cls-1" x="-4.55738" y="-4.48481" width="223.25536" height="134.51136"/><path class="cls-2" d="M169.05853,71.307c.23549,6.07483,5.42615,10.38072,14.09569,10.38072,7.0783,0,12.91766-3.06693,12.91766-9.85009,0-4.71846-2.65436-7.49024-8.78885-8.66954l-4.77685-.94382c-3.06756-.59028-5.19066-1.17992-5.19066-3.0079,0-2.00568,2.06471-2.89047,4.65943-2.89047,3.77525,0,5.3081,1.887,5.42678,4.1288H194.951c-.41258-5.89838-5.1304-9.8501-12.73994-9.8501-7.845,0-12.50382,4.30588-12.50382,9.90912,0,6.84157,5.54483,7.96247,10.3217,8.84662l3.95171.70834c2.83082.53062,4.06977,1.35638,4.06977,3.0079,0,1.47444-1.41541,2.94887-4.77748,2.94887-4.89553,0-6.488-2.53631-6.54705-4.71845Zm-27.4259-5.13164a8.58413,8.58413,0,0,1,8.557-8.61113q.02706-.00009.05409,0a8.58415,8.58415,0,0,1,8.61115,8.557q.00009.02706,0,.0541a8.58413,8.58413,0,0,1-8.55641,8.61177q-.02738.00009-.05473,0a8.58413,8.58413,0,0,1-8.61113-8.557q-.00009-.02738,0-.05473M158.79589,81.098h7.49149V50.95811h-7.49149v2.41825a15.58033,15.58033,0,1,0-9.01133,28.37034q.05285.00018.10567,0a15.47693,15.47693,0,0,0,8.90566-2.77179ZM106.59844,66.17532a8.58413,8.58413,0,0,1,8.557-8.61113q.02706-.00009.05409,0a8.58414,8.58414,0,0,1,8.61114,8.557q.00009.02706,0,.05409a8.58413,8.58413,0,0,1-8.55641,8.61177q-.02738.00009-.05473,0a8.58413,8.58413,0,0,1-8.61113-8.557q-.00009-.02738,0-.05473m17.16387-25.47987V53.37636a15.58048,15.58048,0,1,0-9.01195,28.37034q.05251.00018.105,0a15.48233,15.48233,0,0,0,8.90691-2.77179V81.098h7.49023V40.69545ZM96.21772,50.95811H88.72811V81.098h7.49023Zm0-10.26266H88.72811v7.49023h7.49023ZM60.41805,66.17532a8.58414,8.58414,0,0,1,8.557-8.61113q.02673-.00009.05346,0a8.58414,8.58414,0,0,1,8.61114,8.557q.00009.02706,0,.05409a8.58414,8.58414,0,0,1-8.55642,8.61177q-.02736.00009-.05472,0a8.58412,8.58412,0,0,1-8.61113-8.557q-.00009-.02738,0-.05473M77.58067,40.69545V53.37636A15.58033,15.58033,0,1,0,68.56935,81.7467q.05283.00018.10567,0a15.4769,15.4769,0,0,0,8.90565-2.77179V81.098h7.4915V40.69545ZM25.38259,66.176a8.58414,8.58414,0,0,1,8.557-8.61114q.02736-.00009.05472,0a8.58414,8.58414,0,0,1,8.61114,8.557q.00009.027,0,.05409a8.58414,8.58414,0,0,1-8.55642,8.61176q-.02736.00009-.05472,0a8.58413,8.58413,0,0,1-8.61177-8.55641q-.00009-.02768,0-.05535m17.16388,14.9227H50.038V50.95872H42.54647V53.377a15.58048,15.58048,0,1,0-9.01069,28.37035q.0522.00016.10441,0a15.48032,15.48032,0,0,0,8.90628-2.77179Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#040606;}</style></defs><title>kubernetes.io-54664</title><rect class="cls-1" x="-4.55738" y="-4.48481" width="223.25536" height="134.51136"/><path class="cls-2" d="M169.05853,71.307c.23549,6.07483,5.42615,10.38072,14.09569,10.38072,7.0783,0,12.91766-3.06693,12.91766-9.85009,0-4.71846-2.65436-7.49024-8.78885-8.66954l-4.77685-.94382c-3.06756-.59028-5.19066-1.17992-5.19066-3.0079,0-2.00568,2.06471-2.89047,4.65943-2.89047,3.77525,0,5.3081,1.887,5.42678,4.1288H194.951c-.41258-5.89838-5.1304-9.8501-12.73994-9.8501-7.845,0-12.50382,4.30588-12.50382,9.90912,0,6.84157,5.54483,7.96247,10.3217,8.84662l3.95171.70834c2.83082.53062,4.06977,1.35638,4.06977,3.0079,0,1.47444-1.41541,2.94887-4.77748,2.94887-4.89553,0-6.488-2.53631-6.54705-4.71845Zm-27.4259-5.13164a8.58413,8.58413,0,0,1,8.557-8.61113q.02706-.00009.05409,0a8.58415,8.58415,0,0,1,8.61115,8.557q.00009.02706,0,.0541a8.58413,8.58413,0,0,1-8.55641,8.61177q-.02738.00009-.05473,0a8.58413,8.58413,0,0,1-8.61113-8.557q-.00009-.02738,0-.05473M158.79589,81.098h7.49149V50.95811h-7.49149v2.41825a15.58033,15.58033,0,1,0-9.01133,28.37034q.05285.00018.10567,0a15.47693,15.47693,0,0,0,8.90566-2.77179ZM106.59844,66.17532a8.58413,8.58413,0,0,1,8.557-8.61113q.02706-.00009.05409,0a8.58414,8.58414,0,0,1,8.61114,8.557q.00009.02706,0,.05409a8.58413,8.58413,0,0,1-8.55641,8.61177q-.02738.00009-.05473,0a8.58413,8.58413,0,0,1-8.61113-8.557q-.00009-.02738,0-.05473m17.16387-25.47987V53.37636a15.58048,15.58048,0,1,0-9.01195,28.37034q.05251.00018.105,0a15.48233,15.48233,0,0,0,8.90691-2.77179V81.098h7.49023V40.69545ZM96.21772,50.95811H88.72811V81.098h7.49023Zm0-10.26266H88.72811v7.49023h7.49023ZM60.41805,66.17532a8.58414,8.58414,0,0,1,8.557-8.61113q.02673-.00009.05346,0a8.58414,8.58414,0,0,1,8.61114,8.557q.00009.02706,0,.05409a8.58414,8.58414,0,0,1-8.55642,8.61177q-.02736.00009-.05472,0a8.58412,8.58412,0,0,1-8.61113-8.557q-.00009-.02738,0-.05473M77.58067,40.69545V53.37636A15.58033,15.58033,0,1,0,68.56935,81.7467q.05283.00018.10567,0a15.4769,15.4769,0,0,0,8.90565-2.77179V81.098h7.4915V40.69545ZM25.38259,66.176a8.58414,8.58414,0,0,1,8.557-8.61114q.02736-.00009.05472,0a8.58414,8.58414,0,0,1,8.61114,8.557q.00009.027,0,.05409a8.58414,8.58414,0,0,1-8.55642,8.61176q-.02736.00009-.05472,0a8.58413,8.58413,0,0,1-8.61177-8.55641q-.00009-.02768,0-.05535m17.16388,14.9227H50.038V50.95872H42.54647V53.377a15.58048,15.58048,0,1,0-9.01069,28.37035q.0522.00016.10441,0a15.48032,15.48032,0,0,0,8.90628-2.77179Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/amadeus/amadeus_featured.svg b/content/en/case-studies/amadeus/amadeus_featured.svg
index 6b711f9bae..9d0c40b8e1 100644
--- a/content/en/case-studies/amadeus/amadeus_featured.svg
+++ b/content/en/case-studies/amadeus/amadeus_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{clip-path:url(#clip-path);}.cls-2{fill:none;}.cls-3{fill:url(#linear-gradient);}.cls-4{fill:url(#linear-gradient-2);}.cls-5{fill:#fbfbfb;}.cls-6{clip-path:url(#clip-path-3);}.cls-7{mask:url(#mask);}.cls-8{fill:url(#linear-gradient-3);}.cls-9{clip-path:url(#clip-path-4);}.cls-10{fill:url(#linear-gradient-4);}.cls-11{clip-path:url(#clip-path-5);}.cls-12{fill:#1b69bc;}</style><clipPath id="clip-path"><rect class="cls-2" x="-8026.77345" y="-8033.23135" width="16138.71031" height="16138.71031"/></clipPath><linearGradient id="linear-gradient" x1="-1349.13476" y1="1499.87891" x2="-1348.8885" y2="1499.87891" gradientTransform="translate(132024.65166 250328.99756) rotate(110.225) scale(140.25966)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff"/><stop offset="0.323" stop-color="#fff" stop-opacity="0"/><stop offset="1" stop-color="#fff" stop-opacity="0"/></linearGradient><linearGradient id="linear-gradient-2" x1="-1349.13014" y1="1500.07289" x2="-1348.88388" y2="1500.07289" gradientTransform="translate(131979.93168 250204.14448) rotate(110.225) scale(140.18478)" xlink:href="#linear-gradient"/><clipPath id="clip-path-3"><path class="cls-2" d="M61.08443,58.53454a8.028,8.028,0,0,0-6.36226,9.40319,6.22061,6.22061,0,0,0,.2526.97072c.01223.03187.02427.07209.03817.10822q.03372.09873.07024.19644c.0884.22888.17661.44941.27687.666l.00815-.00815c.07617.16067.1844.33283.28058.50147a43.60056,43.60056,0,0,0,6.575-1.20736l-.78224-.84266a2.78017,2.78017,0,0,1-.69811-1.13917,2.71606,2.71606,0,0,1-.13232-.96274,2.33328,2.33328,0,0,1,.29077-.93458,2.64483,2.64483,0,0,1,.59581-.7663l5.568-4.77369a7.99706,7.99706,0,0,0-5.98125-1.21144"/></clipPath><mask id="mask" x="-8026.77345" y="-8033.23135" width="16138.71031" height="16138.71031" maskUnits="userSpaceOnUse"><g id="i"><g class="cls-1"><path class="cls-3" d="M-8026.77345,8105.479H8111.93686V-8033.23135H-8026.77345Z"/></g></g></mask><linearGradient id="linear-gradient-3" x1="-1375.21069" y1="1505.74642" x2="-1374.96443" y2="1505.74642" gradientTransform="matrix(-36.48979, -99.04297, -99.04297, 36.48979, 99018.04746, -191072.57465)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff"/><stop offset="0.323" stop-color="#fff"/><stop offset="1" stop-color="#fff"/></linearGradient><clipPath id="clip-path-4"><path class="cls-2" d="M64.32978,65.52263q-.25464.19871-.48943.421a.6895.6895,0,0,0-.20052.47368.95028.95028,0,0,0,.18458.67383,7.376,7.376,0,0,0,.51742.60581l.6097.62546a33.10767,33.10767,0,0,0,5.64822-2.5591,8.225,8.225,0,0,0-.11212-.86656,7.92871,7.92871,0,0,0-1.43438-3.26128Z"/></clipPath><linearGradient id="linear-gradient-4" x1="-1375.22" y1="1505.89408" x2="-1374.97374" y2="1505.89408" gradientTransform="matrix(-36.47031, -98.99009, -98.99009, 36.47031, 98984.39389, -190978.61772)" xlink:href="#linear-gradient-3"/><clipPath id="clip-path-5"><rect class="cls-2" x="27.15344" y="53.1655" width="158.22407" height="21.04312"/></clipPath></defs><title>kubernetes.io-logos</title><rect class="cls-5" x="-3.37342" y="-3.34411" width="223.25536" height="134.51136"/><g class="cls-6"><g class="cls-7"><path class="cls-8" d="M61.08443,58.53454a8.028,8.028,0,0,0-6.36226,9.40319,6.22061,6.22061,0,0,0,.2526.97072c.01223.03187.02427.07209.03817.10822q.03372.09873.07024.19644c.0884.22888.17661.44941.27687.666l.00815-.00815c.07617.16067.1844.33283.28058.50147a43.60056,43.60056,0,0,0,6.575-1.20736l-.78224-.84266a2.78017,2.78017,0,0,1-.69811-1.13917,2.71606,2.71606,0,0,1-.13232-.96274,2.33328,2.33328,0,0,1,.29077-.93458,2.64483,2.64483,0,0,1,.59581-.7663l5.568-4.77369a7.99706,7.99706,0,0,0-5.98125-1.21144"/></g></g><g class="cls-9"><g class="cls-7"><path class="cls-10" d="M64.32978,65.52263q-.25464.19871-.48943.421a.6895.6895,0,0,0-.20052.47368.95028.95028,0,0,0,.18458.67383,7.376,7.376,0,0,0,.51742.60581l.6097.62546a33.10767,33.10767,0,0,0,5.64822-2.5591,8.225,8.225,0,0,0-.11212-.86656,7.92871,7.92871,0,0,0-1.43438-3.26128Z"/></g></g><g class="cls-11"><path class="cls-12" d="M126.64047,73.244a32.8669,32.8669,0,0,0,7.92026.9646,33.31087,33.31087,0,0,0,6.92563-.526V70.17531a32.307,32.307,0,0,1-5.66927.4679,24.7074,24.7074,0,0,1-4.67615-.38033V65.29474h8.97319V61.78739H131.141V57.05294a26.80522,26.80522,0,0,1,4.38437-.32178,36.526,36.526,0,0,1,5.611.46791V53.66244a32.53783,32.53783,0,0,0-6.13769-.49694,34.67491,34.67491,0,0,0-8.35815.9068ZM62.51773,65.265c-.11735.29275-.26274.848-.35056,1.16978-.08733-.32179-.23371-.877-.35031-1.16978L57.84135,55.06568c-.6721-1.69525-1.72378-1.90018-3.65274-1.90018-.67234,0-2.0463.08783-2.0463.08783l-2.04581,20.663H54.627l.99338-13.853,4.2963,10.492c.32178.81823.96435,1.13976,2.2505,1.13976,1.28539,0,1.929-.32153,2.25024-1.13976l4.29606-10.492.99412,13.853h4.52951l-2.04556-20.663s-1.37371-.08783-2.04556-.08783c-1.929,0-2.9809.20493-3.65349,1.90018ZM39.83841,69.50321a16.39754,16.39754,0,0,1-5.027,1.14c-1.8709,0-3.27339-.64307-3.27339-2.68912,0-1.78258.96385-2.80524,3.53662-2.89307l4.76372-.1754ZM37.14928,53.1655a20.749,20.749,0,0,0-8.41719,1.60792l.9646,3.39a20.9981,20.9981,0,0,1,6.13743-1.11049c2.60106,0,3.94525.7304,3.94525,3.30218V61.8169H35.83412c-6.69267,0-8.68068,3.06871-8.68068,6.45921,0,4.50024,3.50761,5.9325,6.69318,5.9325A13.56017,13.56017,0,0,0,39.9843,72.66c.20468,0,.9646.81772,4.35436.81772V59.157c0-4.2958-2.65911-5.99154-7.18937-5.99154Zm54.2445,16.33771a16.39754,16.39754,0,0,1-5.027,1.14c-1.8709,0-3.27389-.64307-3.27389-2.68912,0-1.78258.96485-2.80524,3.53662-2.89307l4.76422-.1754ZM88.7044,53.1655a20.74691,20.74691,0,0,0-8.41719,1.60792l.9646,3.39A20.99761,20.99761,0,0,1,87.389,57.05293c2.6013,0,3.94574.7304,3.94574,3.30218V61.8169H87.389c-6.69242,0-8.68018,3.06871-8.68018,6.45921,0,4.50024,3.50735,5.9325,6.69342,5.9325A13.55932,13.55932,0,0,0,91.53941,72.66c.20469,0,.96461.81772,4.35486.81772V59.157c0-4.2958-2.65961-5.99154-7.18987-5.99154Zm71.69219,15.60706a14.19794,14.19794,0,0,1-5.55242,1.40275c-3.099,0-3.6247-1.40275-3.6247-4.61759V53.34091h-.67235a32.51787,32.51787,0,0,0-3.85741.2925V66.14223c0,5.46559,1.34468,8.06639,6.8971,8.06639a14.982,14.982,0,0,0,6.89711-1.63645,9.56837,9.56837,0,0,0,4.44391.90555V53.63341a35.28033,35.28033,0,0,0-3.6257-.2925h-.90556V68.77256Zm9.8822,4.70517a29.39981,29.39981,0,0,0,6.72219.7309c3.71179,0,8.38767-1.25662,8.38767-6.28307,0-3.27414-2.42564-4.67689-6.37139-6.10865-2.13339-.7892-3.94574-1.49082-3.94574-2.95211,0-.70137.52671-2.07484,3.24438-2.07484a14.55754,14.55754,0,0,1,5.14429,1.16879l1.14-3.36073a15.61943,15.61943,0,0,0-6.69318-1.43251c-3.74105,0-7.39454,1.98776-7.39454,5.99155,0,4.12139,3.74106,5.37776,6.6634,6.34261,1.988.67185,3.65372,1.37371,3.65372,2.68863,0,1.28514-.70138,2.39637-4.06259,2.39637a32.02034,32.02034,0,0,1-5.67-.61354l-.81822,3.50661ZM106.99983,57.082a20.02065,20.02065,0,0,1,3.59493-.35081c3.27339,0,5.84592,1.84138,5.84592,6.81052,0,4.82227-1.2576,7.10153-6.25454,7.10153a24.837,24.837,0,0,1-3.18632-.23395V57.082Zm3.79961-3.91647a28.40043,28.40043,0,0,0-8.32937,1.22759V73.59483a45.31454,45.31454,0,0,0,7.56995.61379c8.06639,0,11.19365-3.15654,11.19365-10.66694,0-6.48874-3.9755-10.37618-10.43423-10.37618"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{clip-path:url(#clip-path);}.cls-2{fill:none;}.cls-3{fill:url(#linear-gradient);}.cls-4{fill:url(#linear-gradient-2);}.cls-5{fill:transparent;}.cls-6{clip-path:url(#clip-path-3);}.cls-7{mask:url(#mask);}.cls-8{fill:url(#linear-gradient-3);}.cls-9{clip-path:url(#clip-path-4);}.cls-10{fill:url(#linear-gradient-4);}.cls-11{clip-path:url(#clip-path-5);}.cls-12{fill:#1b69bc;}</style><clipPath id="clip-path"><rect class="cls-2" x="-8026.77345" y="-8033.23135" width="16138.71031" height="16138.71031"/></clipPath><linearGradient id="linear-gradient" x1="-1349.13476" y1="1499.87891" x2="-1348.8885" y2="1499.87891" gradientTransform="translate(132024.65166 250328.99756) rotate(110.225) scale(140.25966)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff"/><stop offset="0.323" stop-color="#fff" stop-opacity="0"/><stop offset="1" stop-color="#fff" stop-opacity="0"/></linearGradient><linearGradient id="linear-gradient-2" x1="-1349.13014" y1="1500.07289" x2="-1348.88388" y2="1500.07289" gradientTransform="translate(131979.93168 250204.14448) rotate(110.225) scale(140.18478)" xlink:href="#linear-gradient"/><clipPath id="clip-path-3"><path class="cls-2" d="M61.08443,58.53454a8.028,8.028,0,0,0-6.36226,9.40319,6.22061,6.22061,0,0,0,.2526.97072c.01223.03187.02427.07209.03817.10822q.03372.09873.07024.19644c.0884.22888.17661.44941.27687.666l.00815-.00815c.07617.16067.1844.33283.28058.50147a43.60056,43.60056,0,0,0,6.575-1.20736l-.78224-.84266a2.78017,2.78017,0,0,1-.69811-1.13917,2.71606,2.71606,0,0,1-.13232-.96274,2.33328,2.33328,0,0,1,.29077-.93458,2.64483,2.64483,0,0,1,.59581-.7663l5.568-4.77369a7.99706,7.99706,0,0,0-5.98125-1.21144"/></clipPath><mask id="mask" x="-8026.77345" y="-8033.23135" width="16138.71031" height="16138.71031" maskUnits="userSpaceOnUse"><g id="i"><g class="cls-1"><path class="cls-3" d="M-8026.77345,8105.479H8111.93686V-8033.23135H-8026.77345Z"/></g></g></mask><linearGradient id="linear-gradient-3" x1="-1375.21069" y1="1505.74642" x2="-1374.96443" y2="1505.74642" gradientTransform="matrix(-36.48979, -99.04297, -99.04297, 36.48979, 99018.04746, -191072.57465)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff"/><stop offset="0.323" stop-color="#fff"/><stop offset="1" stop-color="#fff"/></linearGradient><clipPath id="clip-path-4"><path class="cls-2" d="M64.32978,65.52263q-.25464.19871-.48943.421a.6895.6895,0,0,0-.20052.47368.95028.95028,0,0,0,.18458.67383,7.376,7.376,0,0,0,.51742.60581l.6097.62546a33.10767,33.10767,0,0,0,5.64822-2.5591,8.225,8.225,0,0,0-.11212-.86656,7.92871,7.92871,0,0,0-1.43438-3.26128Z"/></clipPath><linearGradient id="linear-gradient-4" x1="-1375.22" y1="1505.89408" x2="-1374.97374" y2="1505.89408" gradientTransform="matrix(-36.47031, -98.99009, -98.99009, 36.47031, 98984.39389, -190978.61772)" xlink:href="#linear-gradient-3"/><clipPath id="clip-path-5"><rect class="cls-2" x="27.15344" y="53.1655" width="158.22407" height="21.04312"/></clipPath></defs><title>kubernetes.io-logos</title><rect class="cls-5" x="-3.37342" y="-3.34411" width="223.25536" height="134.51136"/><g class="cls-6"><g class="cls-7"><path class="cls-8" d="M61.08443,58.53454a8.028,8.028,0,0,0-6.36226,9.40319,6.22061,6.22061,0,0,0,.2526.97072c.01223.03187.02427.07209.03817.10822q.03372.09873.07024.19644c.0884.22888.17661.44941.27687.666l.00815-.00815c.07617.16067.1844.33283.28058.50147a43.60056,43.60056,0,0,0,6.575-1.20736l-.78224-.84266a2.78017,2.78017,0,0,1-.69811-1.13917,2.71606,2.71606,0,0,1-.13232-.96274,2.33328,2.33328,0,0,1,.29077-.93458,2.64483,2.64483,0,0,1,.59581-.7663l5.568-4.77369a7.99706,7.99706,0,0,0-5.98125-1.21144"/></g></g><g class="cls-9"><g class="cls-7"><path class="cls-10" d="M64.32978,65.52263q-.25464.19871-.48943.421a.6895.6895,0,0,0-.20052.47368.95028.95028,0,0,0,.18458.67383,7.376,7.376,0,0,0,.51742.60581l.6097.62546a33.10767,33.10767,0,0,0,5.64822-2.5591,8.225,8.225,0,0,0-.11212-.86656,7.92871,7.92871,0,0,0-1.43438-3.26128Z"/></g></g><g class="cls-11"><path class="cls-12" d="M126.64047,73.244a32.8669,32.8669,0,0,0,7.92026.9646,33.31087,33.31087,0,0,0,6.92563-.526V70.17531a32.307,32.307,0,0,1-5.66927.4679,24.7074,24.7074,0,0,1-4.67615-.38033V65.29474h8.97319V61.78739H131.141V57.05294a26.80522,26.80522,0,0,1,4.38437-.32178,36.526,36.526,0,0,1,5.611.46791V53.66244a32.53783,32.53783,0,0,0-6.13769-.49694,34.67491,34.67491,0,0,0-8.35815.9068ZM62.51773,65.265c-.11735.29275-.26274.848-.35056,1.16978-.08733-.32179-.23371-.877-.35031-1.16978L57.84135,55.06568c-.6721-1.69525-1.72378-1.90018-3.65274-1.90018-.67234,0-2.0463.08783-2.0463.08783l-2.04581,20.663H54.627l.99338-13.853,4.2963,10.492c.32178.81823.96435,1.13976,2.2505,1.13976,1.28539,0,1.929-.32153,2.25024-1.13976l4.29606-10.492.99412,13.853h4.52951l-2.04556-20.663s-1.37371-.08783-2.04556-.08783c-1.929,0-2.9809.20493-3.65349,1.90018ZM39.83841,69.50321a16.39754,16.39754,0,0,1-5.027,1.14c-1.8709,0-3.27339-.64307-3.27339-2.68912,0-1.78258.96385-2.80524,3.53662-2.89307l4.76372-.1754ZM37.14928,53.1655a20.749,20.749,0,0,0-8.41719,1.60792l.9646,3.39a20.9981,20.9981,0,0,1,6.13743-1.11049c2.60106,0,3.94525.7304,3.94525,3.30218V61.8169H35.83412c-6.69267,0-8.68068,3.06871-8.68068,6.45921,0,4.50024,3.50761,5.9325,6.69318,5.9325A13.56017,13.56017,0,0,0,39.9843,72.66c.20468,0,.9646.81772,4.35436.81772V59.157c0-4.2958-2.65911-5.99154-7.18937-5.99154Zm54.2445,16.33771a16.39754,16.39754,0,0,1-5.027,1.14c-1.8709,0-3.27389-.64307-3.27389-2.68912,0-1.78258.96485-2.80524,3.53662-2.89307l4.76422-.1754ZM88.7044,53.1655a20.74691,20.74691,0,0,0-8.41719,1.60792l.9646,3.39A20.99761,20.99761,0,0,1,87.389,57.05293c2.6013,0,3.94574.7304,3.94574,3.30218V61.8169H87.389c-6.69242,0-8.68018,3.06871-8.68018,6.45921,0,4.50024,3.50735,5.9325,6.69342,5.9325A13.55932,13.55932,0,0,0,91.53941,72.66c.20469,0,.96461.81772,4.35486.81772V59.157c0-4.2958-2.65961-5.99154-7.18987-5.99154Zm71.69219,15.60706a14.19794,14.19794,0,0,1-5.55242,1.40275c-3.099,0-3.6247-1.40275-3.6247-4.61759V53.34091h-.67235a32.51787,32.51787,0,0,0-3.85741.2925V66.14223c0,5.46559,1.34468,8.06639,6.8971,8.06639a14.982,14.982,0,0,0,6.89711-1.63645,9.56837,9.56837,0,0,0,4.44391.90555V53.63341a35.28033,35.28033,0,0,0-3.6257-.2925h-.90556V68.77256Zm9.8822,4.70517a29.39981,29.39981,0,0,0,6.72219.7309c3.71179,0,8.38767-1.25662,8.38767-6.28307,0-3.27414-2.42564-4.67689-6.37139-6.10865-2.13339-.7892-3.94574-1.49082-3.94574-2.95211,0-.70137.52671-2.07484,3.24438-2.07484a14.55754,14.55754,0,0,1,5.14429,1.16879l1.14-3.36073a15.61943,15.61943,0,0,0-6.69318-1.43251c-3.74105,0-7.39454,1.98776-7.39454,5.99155,0,4.12139,3.74106,5.37776,6.6634,6.34261,1.988.67185,3.65372,1.37371,3.65372,2.68863,0,1.28514-.70138,2.39637-4.06259,2.39637a32.02034,32.02034,0,0,1-5.67-.61354l-.81822,3.50661ZM106.99983,57.082a20.02065,20.02065,0,0,1,3.59493-.35081c3.27339,0,5.84592,1.84138,5.84592,6.81052,0,4.82227-1.2576,7.10153-6.25454,7.10153a24.837,24.837,0,0,1-3.18632-.23395V57.082Zm3.79961-3.91647a28.40043,28.40043,0,0,0-8.32937,1.22759V73.59483a45.31454,45.31454,0,0,0,7.56995.61379c8.06639,0,11.19365-3.15654,11.19365-10.66694,0-6.48874-3.9755-10.37618-10.43423-10.37618"/></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/ancestry/ancestry_featured.svg b/content/en/case-studies/ancestry/ancestry_featured.svg
index 301e6fec92..9a3e80186b 100644
--- a/content/en/case-studies/ancestry/ancestry_featured.svg
+++ b/content/en/case-studies/ancestry/ancestry_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#565451;}.cls-3{fill:#9dbe33;}</style></defs><title>kubernetes.io-logos-ancestry</title><rect class="cls-1" x="-3.85086" y="-2.94673" width="223.25536" height="134.51136"/><path class="cls-2" d="M206.49065,55.80916c-.23044.02913-.20328.26043-.29916.39258a1.56017,1.56017,0,0,1-2.1031.48232,1.75339,1.75339,0,0,1-.58141-2.24039,1.57994,1.57994,0,0,1,1.95488-.77725c.48643.16341.62638.67544,1.02879.9088Zm-1.57882-1.99542a1.3767,1.3767,0,0,0-1.3278,1.41688,1.33158,1.33158,0,0,0,1.24295,1.40309,1.30025,1.30025,0,0,0,1.35524-1.35688A1.3676,1.3676,0,0,0,204.91183,53.81374Z"/><path class="cls-3" d="M33.15727,60.80375c-.39477-.15567-.78576-.32186-1.1849-.46541-4.43263-1.59405-6.8414-4.79888-7.50539-9.39616-.17243-1.19389-.327-2.391-.53493-3.57874-.06634-.37906-.01393-.49931.38233-.50488a20.12647,20.12647,0,0,1,10.87914,2.58421,15.4397,15.4397,0,0,1,5.28939,6.105,30.8206,30.8206,0,0,1,2.17066,4.842c.13915.39287.31114.59973.761.558.71265-.06605,1.62436.28663,2.09418-.13432.49025-.43927.11175-1.35559.0869-2.05652q-.20071-5.66111-.47912-11.31932c-.02707-.56128.08076-.78855.69385-.733.76671.06944,1.54192.05141,2.31358.05737.37575.0029.535.09848.502.54136-.27136,3.642-.24374,7.29114-.19758,10.93934q.11607,9.17322.268,18.34592c.00863.51578-.13369.74341-.6664.76334a10.978,10.978,0,0,1-2.30611-.12653.77283.77283,0,0,1-.72491-.95631c.26327-3.921.48607-7.84474.73162-11.767.064-1.02246.07955-1.02149-.91023-1.02238-1.72477-.00155-1.72476-.00154-1.98642,1.69947A14.06034,14.06034,0,0,1,30.26561,77.56085a29.9153,29.9153,0,0,1-5.30577.289,4.90759,4.90759,0,0,1-1.35-.16374c.76879-6.4372,4.406-10.86314,9.94146-14.14071-1.19563,0-2.26718-.00877-3.33816.01215-.1208.00236-.25155.15939-.35544.26627a11.18324,11.18324,0,0,1-7.581,3.35256A16.51578,16.51578,0,0,1,9.46437,62.75823c-.48548-.4525-.58169-.69376-.00259-1.14595A17.295,17.295,0,0,1,19.453,57.59519a16.64457,16.64457,0,0,1,9.38179,2.58265,4.49881,4.49881,0,0,0,2.88479.77092,13.973,13.973,0,0,1,1.41886-.00808Zm-3.18306,13.932c.4122-.032.92791-.04621,1.43592-.11617a7.34849,7.34849,0,0,0,5.211-2.64016,14.03974,14.03974,0,0,0,2.64642-7.20007c.05747-.5544-.11425-.72075-.66874-.656a10.192,10.192,0,0,0-7.0857,3.74738,15.37241,15.37241,0,0,0-2.70854,5.48C28.40169,74.74268,28.38971,74.73922,29.97421,74.73578Zm-1.1565-24.89886a22.14934,22.14934,0,0,0,2.085,6.84429,6.17326,6.17326,0,0,0,4.7339,3.54224,18.71433,18.71433,0,0,0,3.15687.08348c.4764-.01754.57021-.21249.45634-.61941a15.67573,15.67573,0,0,0-4.78119-8.101A6.948,6.948,0,0,0,28.81771,49.83692Zm-6.712,15.086a6.77368,6.77368,0,0,0,4.5878-1.29971c.43477-.34373.42862-.59152.04807-.97355A12.60921,12.60921,0,0,0,22.85783,59.919c-2.8255-1.23675-5.00051-.55547-7.6388,1.44738-.24024.18238-.26167.3126-.00193.52544C17.325,63.6191,19.57233,65.00231,22.10571,64.92291Z"/><path class="cls-2" d="M81.04332,57.35669c.26661-.39168.52053-.79271.802-1.17343a7.14228,7.14228,0,0,1,5.18065-3.125,5.66676,5.66676,0,0,1,6.27557,5.63041c.10377,1.87038.04409,3.74953.07128,5.62452.01563,1.0785.034,2.1579.09316,3.2346.07514,1.368.46772,1.77922,1.81825,2.06023.21266.04425.48136-.02353.631.203a.52965.52965,0,0,1-.45348.79329c-2.82886.02744-5.65786.0401-8.4868.05886-.24876.00165-.45582-.0126-.458-.355-.002-.31663.04854-.51409.41857-.60362,1.52687-.36943,1.68841-.52736,1.8022-2.106a64.76241,64.76241,0,0,0,.04574-7.85693c-.1598-3.22513-3.09694-4.67992-5.8174-2.99718a3.36885,3.36885,0,0,0-1.68216,2.94655c-.0382,2.517-.04655,5.036.01552,7.55223.04241,1.71951.30284,1.97583,2.00913,2.46345.38479.11.37745.3664.37873.64819.00164.35954-.27436.30664-.498.30681q-4.08951.00315-8.179.00328c-.30336.00037-.5531.0017-.55191-.42614.001-.3434.095-.47948.453-.55723,1.52506-.33118,1.8344-.69056,1.87973-2.23215.09968-3.39039.10636-6.78211-.0016-10.17223-.05865-1.8417-.44537-2.28015-2.23331-2.645-.38587-.07874-.60153-.16982-.5568-.61911.04512-.4534.35716-.35572.62037-.35638,1.90328-.00478,3.80674.01089,5.70974-.01244.44815-.0055.57078.14221.56036.57-.02523,1.03526-.0082,2.07154-.0082,3.10741Z"/><path class="cls-2" d="M192.97256,66.87483c1.221-3.39271,2.64877-6.5153,3.63606-9.79887.52064-1.73161.07549-2.32121-1.71943-2.47934-.42365-.03731-.678-.08985-.63544-.5993.02772-.33171.138-.445.46843-.42977a58.69589,58.69589,0,0,0,6.24644-.0094c.33409-.02021.48366.10547.47594.42542-.00581.23951.10083.545-.29675.59145-1.5206.17779-2.23364,1.25856-2.73687,2.51626-1.0856,2.71318-2.13147,5.44222-3.19586,8.16388-1.438,3.677-2.86921,7.35675-4.32216,11.02788a13.90381,13.90381,0,0,1-2.006,3.62505,5.20157,5.20157,0,0,1-6.38469,1.49486,1.04433,1.04433,0,0,1-.69384-1.39755,9.23223,9.23223,0,0,1,.87274-2.12836.63642.63642,0,0,1,.89354-.30875,21.4698,21.4698,0,0,0,2.03815.69638,2.78406,2.78406,0,0,0,3.39648-1.28141,24.7073,24.7073,0,0,0,1.85008-4.3846c.12729-.31465-.08677-.60067-.198-.879-1.4848-3.71576-3.17381-7.343-4.78848-11.00256-.63124-1.43073-1.25148-2.8663-1.88265-4.29708a2.76805,2.76805,0,0,0-2.42029-1.87c-.34608-.0253-.56153-.15622-.54956-.57411.01468-.51228.35932-.41049.6494-.40079q4.32011.14451,8.64-.00047c.26794-.00911.5744-.09521.59568.36985.01828.40011-.158.52317-.51173.60445-1.54959.35611-1.89971.83467-1.43817,2.23635C190.07069,60.172,191.61933,63.38744,192.97256,66.87483Z"/><path class="cls-2" d="M65.241,68.46883a6.98514,6.98514,0,0,1-2.32851,2.21578,4.89144,4.89144,0,0,1-6.42206-1.5179,4.72225,4.72225,0,0,1,1.31567-6.30762,10.77835,10.77835,0,0,1,5.59907-1.95641c.51081-.05743,1.02489-.09364,1.53849-.11522.27981-.01176.38542-.09711.41924-.40105.32626-2.932-1.4972-4.7893-4.42583-4.43908a6.51928,6.51928,0,0,0-4.00842,2.26238c-.29269.31464-.49334.39387-.78824.03567a.38653.38653,0,0,1-.02609-.48756,8.31565,8.31565,0,0,1,8.4268-4.64361,5.57944,5.57944,0,0,1,4.84056,5.3047,48.21422,48.21422,0,0,1-.07877,5.31443c-.0224.92485-.06908,1.8491-.09448,2.77391a3.948,3.948,0,0,0,.03664.8458c.13465.70138.362,1.36574,1.16223,1.568a1.74016,1.74016,0,0,0,1.859-.9543c.14689-.22122.10385-.73138.55372-.58809.48684.15505.27634.61671.2246.93479a3.55176,3.55176,0,0,1-3.01187,2.90459,4.06032,4.06032,0,0,1-4.41406-1.95364C65.49677,69.04087,65.39918,68.80408,65.241,68.46883Zm-.03526-3.88272.18907.00011c0-.76945-.00885-1.539.00454-2.30826.00506-.29049.00283-.51711-.39338-.45085a6.607,6.607,0,0,0-4.15629,1.96235,3.24306,3.24306,0,0,0-.43135,3.79,2.62386,2.62386,0,0,0,3.02587,1.10275A2.04108,2.04108,0,0,0,65.20331,66.355C65.2179,65.76568,65.20573,65.17574,65.20573,64.58611Z"/><path class="cls-2" d="M126.45284,61.22031c-1.82562.00009-3.65163.02167-5.4766-.0129-.55692-.01055-.73347.21555-.73271.70958a7.81408,7.81408,0,0,0,1.2303,4.53454,5.64692,5.64692,0,0,0,8.35633.91724,6.91815,6.91815,0,0,0,1.39056-1.434c.18428-.26783.36009-.39969.69185-.2298.39152.2005.20381.46758.109.7143a8.29833,8.29833,0,0,1-7.90737,4.86268c-4.81726-.18571-8.31534-3.49282-8.5687-8.10089-.29165-5.30464,2.79251-9.30383,7.7211-10.023a8.31324,8.31324,0,0,1,6.32359,1.29779,7.16952,7.16952,0,0,1,2.9626,6.35389c-.00868.44375-.25318.41254-.546.41206Q129.22982,61.21716,126.45284,61.22031Zm-2.6843-1.24219c1.02788,0,2.056-.01313,3.08351.00681.38253.00743.5767-.08319.53935-.50844-.06274-.71478-.03383-1.44294-.15558-2.1461a3.02081,3.02081,0,0,0-5.83071-1.05765,8.64953,8.64953,0,0,0-1.08656,3.09948c-.08061.459.00115.6407.52106.61808C121.81424,59.94789,122.79205,59.97809,123.76854,59.97812Z"/><path class="cls-2" d="M153.2439,61.20831c-.00049-1.69663-.016-3.3935.00954-5.08975.00706-.46924-.12125-.63718-.60494-.608-.66663.04027-1.33758.01425-2.00658.007-.19356-.00209-.42772.06384-.51936-.207a.62191.62191,0,0,1,.09393-.65255,6.01471,6.01471,0,0,1,.44828-.42337c1.99484-1.82029,3.9934-3.63657,5.89363-5.55708.21089-.21314.3914-.501.77428-.36928.45829.15767.30143.54544.30465.85143.01386,1.3109.02384,2.62238-.00316,3.93286-.01012.49075.12819.6714.64617.66177,1.62065-.03012,3.24337.025,4.86292-.02695.73772-.02364.69586.40773.699.87836.00327.48763-.00253.88853-.723.86491-1.61947-.05309-3.24208-.00256-4.863-.02545-.45507-.00643-.62762.102-.62367.59548.02547,3.18737-.01307,6.37549.037,9.56231a2.65187,2.65187,0,0,0,2.63865,2.90878,3.1731,3.1731,0,0,0,2.57122-1.47888c.1801-.23392.25418-.56521.6965-.32613.44853.24243.20431.5209.10335.77405a5.91633,5.91633,0,0,1-6.994,3.509c-2.126-.61843-3.34305-2.3354-3.43481-4.846-.00283-.07706-.00588-.15418-.00589-.23126Q153.24413,63.56047,153.2439,61.20831Z"/><path class="cls-2" d="M147.5336,56.255c0,.77066.01355,1.54171-.00863,2.31173-.00635.22059.17031.57867-.21359.63274-.356.05013-.76559.1694-1.00813-.30124a11.87542,11.87542,0,0,0-1.58792-2.359c-1.07313-1.23445-2.31346-2.12341-4.08018-1.82967a2.43863,2.43863,0,0,0-2.05168,1.74106,2.20721,2.20721,0,0,0,1.11939,2.34644,20.25671,20.25671,0,0,0,3.4744,1.63852,15.17627,15.17627,0,0,1,2.98986,1.57717,4.75006,4.75006,0,0,1-.48243,8.26352,9.95008,9.95008,0,0,1-6.2224.89642,12.57053,12.57053,0,0,1-3.4294-.84038.91512.91512,0,0,1-.64976-.842,32.8457,32.8457,0,0,1-.22528-3.61163c.00455-.25584-.129-.60049.32578-.64262.37135-.0344.7002-.04465.88766.39245a9.41211,9.41211,0,0,0,1.36386,2.226c1.26379,1.55352,2.778,2.60033,4.91108,2.30523a2.74567,2.74567,0,0,0,2.247-1.42306,2.16474,2.16474,0,0,0-.67646-2.75052,14.18181,14.18181,0,0,0-3.66555-1.9286,14.89579,14.89579,0,0,1-3.14491-1.60562,4.73523,4.73523,0,0,1,.18769-7.98166,7.41653,7.41653,0,0,1,6.0667-.90363c.424.09944.835.25377,1.25786.35935a1.17364,1.17364,0,0,0,1.38209-.3957.83691.83691,0,0,1,1.04-.257c.35362.11455.17776.48977.18532.74717C147.54776,54.76464,147.53365,55.51,147.5336,56.255Z"/><path class="cls-2" d="M112.82775,56.44632c0,.8736.01045,1.74741-.00733,2.62065-.00446.21913.15226.57843-.2663.59434-.33184.01262-.71327.15964-.9388-.29414-.28494-.57329-.61025-1.1281-.94323-1.67567a9.478,9.478,0,0,0-2.07583-2.46471,3.70523,3.70523,0,0,0-5.9005,1.03993,10.3569,10.3569,0,0,0-1.13211,6.33795,8.0183,8.0183,0,0,0,1.35165,3.96245,4.9134,4.9134,0,0,0,5.76207,1.95236,6.99392,6.99392,0,0,0,3.64466-2.584c.19688-.27334.34886-.4738.73521-.26394.4356.23661.2127.50059.0937.76716a8.32892,8.32892,0,0,1-7.70123,4.8466,8.54,8.54,0,0,1-7.96624-5.54911c-1.77306-4.65862.21169-9.985,4.45328-11.86656a10.54109,10.54109,0,0,1,7.46162-.32608c.34439.10112.69207.19186,1.03344.30222a.90122.90122,0,0,0,1.14915-.362c.26839-.44586.66779-.35574,1.01927-.2905.40314.07483.21115.46382.21819.70957C112.84264,54.75008,112.82775,55.59841,112.82775,56.44632Z"/><path class="cls-2" d="M172.8039,58.09716c.21562-.4505.41877-.90748.64924-1.35027a7.5644,7.5644,0,0,1,2.78564-3.12276,3.08376,3.08376,0,0,1,3.7221.26959,2.18893,2.18893,0,0,1,.34765,2.991,4.71828,4.71828,0,0,1-.59219.708c-.9549.94606-1.18022.95526-2.26231.1373q-.06154-.04653-.1233-.09277c-1.73279-1.2968-2.97172-.96605-3.84865,1.03338a6.53315,6.53315,0,0,0-.58042,2.61485c-.00616,2.02994-.06664,4.0612.071,6.08937.11306,1.66563.47585,2.10807,2.10838,2.41878.43076.082.5528.241.53218.6429-.02535.4942-.388.32168-.62387.32261q-4.16808.01651-8.33624.00335c-.25552-.00055-.58009.117-.61833-.35031-.036-.43963.16961-.54968.55344-.63732,1.47954-.33784,1.78575-.56906,1.84152-2.0236a100.61811,100.61811,0,0,0-.04282-10.8626c-.10157-1.45547-.60505-1.89767-2.05786-2.14722-.37116-.06376-.727-.06339-.67117-.6082.05654-.55124.45646-.38237.75138-.38409,1.87817-.01094,3.7566.008,5.63456-.015.47414-.00581.61812.14233.60653.614-.03021,1.23184-.01016,2.46489-.01016,3.69746Z"/><path class="cls-2" d="M205.56931,56.12061c-.43077-.07413-.76286-1.49787-1.2563-.06144,0-.43605.01737-.873-.00432-1.30792-.02846-.57066.35928-.45094.67331-.41266.36966.04507.75934.29894.5243.63553C205.21018,55.39814,205.45361,55.70278,205.56931,56.12061Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#565451;}.cls-3{fill:#9dbe33;}</style></defs><title>kubernetes.io-logos-ancestry</title><rect class="cls-1" x="-3.85086" y="-2.94673" width="223.25536" height="134.51136"/><path class="cls-2" d="M206.49065,55.80916c-.23044.02913-.20328.26043-.29916.39258a1.56017,1.56017,0,0,1-2.1031.48232,1.75339,1.75339,0,0,1-.58141-2.24039,1.57994,1.57994,0,0,1,1.95488-.77725c.48643.16341.62638.67544,1.02879.9088Zm-1.57882-1.99542a1.3767,1.3767,0,0,0-1.3278,1.41688,1.33158,1.33158,0,0,0,1.24295,1.40309,1.30025,1.30025,0,0,0,1.35524-1.35688A1.3676,1.3676,0,0,0,204.91183,53.81374Z"/><path class="cls-3" d="M33.15727,60.80375c-.39477-.15567-.78576-.32186-1.1849-.46541-4.43263-1.59405-6.8414-4.79888-7.50539-9.39616-.17243-1.19389-.327-2.391-.53493-3.57874-.06634-.37906-.01393-.49931.38233-.50488a20.12647,20.12647,0,0,1,10.87914,2.58421,15.4397,15.4397,0,0,1,5.28939,6.105,30.8206,30.8206,0,0,1,2.17066,4.842c.13915.39287.31114.59973.761.558.71265-.06605,1.62436.28663,2.09418-.13432.49025-.43927.11175-1.35559.0869-2.05652q-.20071-5.66111-.47912-11.31932c-.02707-.56128.08076-.78855.69385-.733.76671.06944,1.54192.05141,2.31358.05737.37575.0029.535.09848.502.54136-.27136,3.642-.24374,7.29114-.19758,10.93934q.11607,9.17322.268,18.34592c.00863.51578-.13369.74341-.6664.76334a10.978,10.978,0,0,1-2.30611-.12653.77283.77283,0,0,1-.72491-.95631c.26327-3.921.48607-7.84474.73162-11.767.064-1.02246.07955-1.02149-.91023-1.02238-1.72477-.00155-1.72476-.00154-1.98642,1.69947A14.06034,14.06034,0,0,1,30.26561,77.56085a29.9153,29.9153,0,0,1-5.30577.289,4.90759,4.90759,0,0,1-1.35-.16374c.76879-6.4372,4.406-10.86314,9.94146-14.14071-1.19563,0-2.26718-.00877-3.33816.01215-.1208.00236-.25155.15939-.35544.26627a11.18324,11.18324,0,0,1-7.581,3.35256A16.51578,16.51578,0,0,1,9.46437,62.75823c-.48548-.4525-.58169-.69376-.00259-1.14595A17.295,17.295,0,0,1,19.453,57.59519a16.64457,16.64457,0,0,1,9.38179,2.58265,4.49881,4.49881,0,0,0,2.88479.77092,13.973,13.973,0,0,1,1.41886-.00808Zm-3.18306,13.932c.4122-.032.92791-.04621,1.43592-.11617a7.34849,7.34849,0,0,0,5.211-2.64016,14.03974,14.03974,0,0,0,2.64642-7.20007c.05747-.5544-.11425-.72075-.66874-.656a10.192,10.192,0,0,0-7.0857,3.74738,15.37241,15.37241,0,0,0-2.70854,5.48C28.40169,74.74268,28.38971,74.73922,29.97421,74.73578Zm-1.1565-24.89886a22.14934,22.14934,0,0,0,2.085,6.84429,6.17326,6.17326,0,0,0,4.7339,3.54224,18.71433,18.71433,0,0,0,3.15687.08348c.4764-.01754.57021-.21249.45634-.61941a15.67573,15.67573,0,0,0-4.78119-8.101A6.948,6.948,0,0,0,28.81771,49.83692Zm-6.712,15.086a6.77368,6.77368,0,0,0,4.5878-1.29971c.43477-.34373.42862-.59152.04807-.97355A12.60921,12.60921,0,0,0,22.85783,59.919c-2.8255-1.23675-5.00051-.55547-7.6388,1.44738-.24024.18238-.26167.3126-.00193.52544C17.325,63.6191,19.57233,65.00231,22.10571,64.92291Z"/><path class="cls-2" d="M81.04332,57.35669c.26661-.39168.52053-.79271.802-1.17343a7.14228,7.14228,0,0,1,5.18065-3.125,5.66676,5.66676,0,0,1,6.27557,5.63041c.10377,1.87038.04409,3.74953.07128,5.62452.01563,1.0785.034,2.1579.09316,3.2346.07514,1.368.46772,1.77922,1.81825,2.06023.21266.04425.48136-.02353.631.203a.52965.52965,0,0,1-.45348.79329c-2.82886.02744-5.65786.0401-8.4868.05886-.24876.00165-.45582-.0126-.458-.355-.002-.31663.04854-.51409.41857-.60362,1.52687-.36943,1.68841-.52736,1.8022-2.106a64.76241,64.76241,0,0,0,.04574-7.85693c-.1598-3.22513-3.09694-4.67992-5.8174-2.99718a3.36885,3.36885,0,0,0-1.68216,2.94655c-.0382,2.517-.04655,5.036.01552,7.55223.04241,1.71951.30284,1.97583,2.00913,2.46345.38479.11.37745.3664.37873.64819.00164.35954-.27436.30664-.498.30681q-4.08951.00315-8.179.00328c-.30336.00037-.5531.0017-.55191-.42614.001-.3434.095-.47948.453-.55723,1.52506-.33118,1.8344-.69056,1.87973-2.23215.09968-3.39039.10636-6.78211-.0016-10.17223-.05865-1.8417-.44537-2.28015-2.23331-2.645-.38587-.07874-.60153-.16982-.5568-.61911.04512-.4534.35716-.35572.62037-.35638,1.90328-.00478,3.80674.01089,5.70974-.01244.44815-.0055.57078.14221.56036.57-.02523,1.03526-.0082,2.07154-.0082,3.10741Z"/><path class="cls-2" d="M192.97256,66.87483c1.221-3.39271,2.64877-6.5153,3.63606-9.79887.52064-1.73161.07549-2.32121-1.71943-2.47934-.42365-.03731-.678-.08985-.63544-.5993.02772-.33171.138-.445.46843-.42977a58.69589,58.69589,0,0,0,6.24644-.0094c.33409-.02021.48366.10547.47594.42542-.00581.23951.10083.545-.29675.59145-1.5206.17779-2.23364,1.25856-2.73687,2.51626-1.0856,2.71318-2.13147,5.44222-3.19586,8.16388-1.438,3.677-2.86921,7.35675-4.32216,11.02788a13.90381,13.90381,0,0,1-2.006,3.62505,5.20157,5.20157,0,0,1-6.38469,1.49486,1.04433,1.04433,0,0,1-.69384-1.39755,9.23223,9.23223,0,0,1,.87274-2.12836.63642.63642,0,0,1,.89354-.30875,21.4698,21.4698,0,0,0,2.03815.69638,2.78406,2.78406,0,0,0,3.39648-1.28141,24.7073,24.7073,0,0,0,1.85008-4.3846c.12729-.31465-.08677-.60067-.198-.879-1.4848-3.71576-3.17381-7.343-4.78848-11.00256-.63124-1.43073-1.25148-2.8663-1.88265-4.29708a2.76805,2.76805,0,0,0-2.42029-1.87c-.34608-.0253-.56153-.15622-.54956-.57411.01468-.51228.35932-.41049.6494-.40079q4.32011.14451,8.64-.00047c.26794-.00911.5744-.09521.59568.36985.01828.40011-.158.52317-.51173.60445-1.54959.35611-1.89971.83467-1.43817,2.23635C190.07069,60.172,191.61933,63.38744,192.97256,66.87483Z"/><path class="cls-2" d="M65.241,68.46883a6.98514,6.98514,0,0,1-2.32851,2.21578,4.89144,4.89144,0,0,1-6.42206-1.5179,4.72225,4.72225,0,0,1,1.31567-6.30762,10.77835,10.77835,0,0,1,5.59907-1.95641c.51081-.05743,1.02489-.09364,1.53849-.11522.27981-.01176.38542-.09711.41924-.40105.32626-2.932-1.4972-4.7893-4.42583-4.43908a6.51928,6.51928,0,0,0-4.00842,2.26238c-.29269.31464-.49334.39387-.78824.03567a.38653.38653,0,0,1-.02609-.48756,8.31565,8.31565,0,0,1,8.4268-4.64361,5.57944,5.57944,0,0,1,4.84056,5.3047,48.21422,48.21422,0,0,1-.07877,5.31443c-.0224.92485-.06908,1.8491-.09448,2.77391a3.948,3.948,0,0,0,.03664.8458c.13465.70138.362,1.36574,1.16223,1.568a1.74016,1.74016,0,0,0,1.859-.9543c.14689-.22122.10385-.73138.55372-.58809.48684.15505.27634.61671.2246.93479a3.55176,3.55176,0,0,1-3.01187,2.90459,4.06032,4.06032,0,0,1-4.41406-1.95364C65.49677,69.04087,65.39918,68.80408,65.241,68.46883Zm-.03526-3.88272.18907.00011c0-.76945-.00885-1.539.00454-2.30826.00506-.29049.00283-.51711-.39338-.45085a6.607,6.607,0,0,0-4.15629,1.96235,3.24306,3.24306,0,0,0-.43135,3.79,2.62386,2.62386,0,0,0,3.02587,1.10275A2.04108,2.04108,0,0,0,65.20331,66.355C65.2179,65.76568,65.20573,65.17574,65.20573,64.58611Z"/><path class="cls-2" d="M126.45284,61.22031c-1.82562.00009-3.65163.02167-5.4766-.0129-.55692-.01055-.73347.21555-.73271.70958a7.81408,7.81408,0,0,0,1.2303,4.53454,5.64692,5.64692,0,0,0,8.35633.91724,6.91815,6.91815,0,0,0,1.39056-1.434c.18428-.26783.36009-.39969.69185-.2298.39152.2005.20381.46758.109.7143a8.29833,8.29833,0,0,1-7.90737,4.86268c-4.81726-.18571-8.31534-3.49282-8.5687-8.10089-.29165-5.30464,2.79251-9.30383,7.7211-10.023a8.31324,8.31324,0,0,1,6.32359,1.29779,7.16952,7.16952,0,0,1,2.9626,6.35389c-.00868.44375-.25318.41254-.546.41206Q129.22982,61.21716,126.45284,61.22031Zm-2.6843-1.24219c1.02788,0,2.056-.01313,3.08351.00681.38253.00743.5767-.08319.53935-.50844-.06274-.71478-.03383-1.44294-.15558-2.1461a3.02081,3.02081,0,0,0-5.83071-1.05765,8.64953,8.64953,0,0,0-1.08656,3.09948c-.08061.459.00115.6407.52106.61808C121.81424,59.94789,122.79205,59.97809,123.76854,59.97812Z"/><path class="cls-2" d="M153.2439,61.20831c-.00049-1.69663-.016-3.3935.00954-5.08975.00706-.46924-.12125-.63718-.60494-.608-.66663.04027-1.33758.01425-2.00658.007-.19356-.00209-.42772.06384-.51936-.207a.62191.62191,0,0,1,.09393-.65255,6.01471,6.01471,0,0,1,.44828-.42337c1.99484-1.82029,3.9934-3.63657,5.89363-5.55708.21089-.21314.3914-.501.77428-.36928.45829.15767.30143.54544.30465.85143.01386,1.3109.02384,2.62238-.00316,3.93286-.01012.49075.12819.6714.64617.66177,1.62065-.03012,3.24337.025,4.86292-.02695.73772-.02364.69586.40773.699.87836.00327.48763-.00253.88853-.723.86491-1.61947-.05309-3.24208-.00256-4.863-.02545-.45507-.00643-.62762.102-.62367.59548.02547,3.18737-.01307,6.37549.037,9.56231a2.65187,2.65187,0,0,0,2.63865,2.90878,3.1731,3.1731,0,0,0,2.57122-1.47888c.1801-.23392.25418-.56521.6965-.32613.44853.24243.20431.5209.10335.77405a5.91633,5.91633,0,0,1-6.994,3.509c-2.126-.61843-3.34305-2.3354-3.43481-4.846-.00283-.07706-.00588-.15418-.00589-.23126Q153.24413,63.56047,153.2439,61.20831Z"/><path class="cls-2" d="M147.5336,56.255c0,.77066.01355,1.54171-.00863,2.31173-.00635.22059.17031.57867-.21359.63274-.356.05013-.76559.1694-1.00813-.30124a11.87542,11.87542,0,0,0-1.58792-2.359c-1.07313-1.23445-2.31346-2.12341-4.08018-1.82967a2.43863,2.43863,0,0,0-2.05168,1.74106,2.20721,2.20721,0,0,0,1.11939,2.34644,20.25671,20.25671,0,0,0,3.4744,1.63852,15.17627,15.17627,0,0,1,2.98986,1.57717,4.75006,4.75006,0,0,1-.48243,8.26352,9.95008,9.95008,0,0,1-6.2224.89642,12.57053,12.57053,0,0,1-3.4294-.84038.91512.91512,0,0,1-.64976-.842,32.8457,32.8457,0,0,1-.22528-3.61163c.00455-.25584-.129-.60049.32578-.64262.37135-.0344.7002-.04465.88766.39245a9.41211,9.41211,0,0,0,1.36386,2.226c1.26379,1.55352,2.778,2.60033,4.91108,2.30523a2.74567,2.74567,0,0,0,2.247-1.42306,2.16474,2.16474,0,0,0-.67646-2.75052,14.18181,14.18181,0,0,0-3.66555-1.9286,14.89579,14.89579,0,0,1-3.14491-1.60562,4.73523,4.73523,0,0,1,.18769-7.98166,7.41653,7.41653,0,0,1,6.0667-.90363c.424.09944.835.25377,1.25786.35935a1.17364,1.17364,0,0,0,1.38209-.3957.83691.83691,0,0,1,1.04-.257c.35362.11455.17776.48977.18532.74717C147.54776,54.76464,147.53365,55.51,147.5336,56.255Z"/><path class="cls-2" d="M112.82775,56.44632c0,.8736.01045,1.74741-.00733,2.62065-.00446.21913.15226.57843-.2663.59434-.33184.01262-.71327.15964-.9388-.29414-.28494-.57329-.61025-1.1281-.94323-1.67567a9.478,9.478,0,0,0-2.07583-2.46471,3.70523,3.70523,0,0,0-5.9005,1.03993,10.3569,10.3569,0,0,0-1.13211,6.33795,8.0183,8.0183,0,0,0,1.35165,3.96245,4.9134,4.9134,0,0,0,5.76207,1.95236,6.99392,6.99392,0,0,0,3.64466-2.584c.19688-.27334.34886-.4738.73521-.26394.4356.23661.2127.50059.0937.76716a8.32892,8.32892,0,0,1-7.70123,4.8466,8.54,8.54,0,0,1-7.96624-5.54911c-1.77306-4.65862.21169-9.985,4.45328-11.86656a10.54109,10.54109,0,0,1,7.46162-.32608c.34439.10112.69207.19186,1.03344.30222a.90122.90122,0,0,0,1.14915-.362c.26839-.44586.66779-.35574,1.01927-.2905.40314.07483.21115.46382.21819.70957C112.84264,54.75008,112.82775,55.59841,112.82775,56.44632Z"/><path class="cls-2" d="M172.8039,58.09716c.21562-.4505.41877-.90748.64924-1.35027a7.5644,7.5644,0,0,1,2.78564-3.12276,3.08376,3.08376,0,0,1,3.7221.26959,2.18893,2.18893,0,0,1,.34765,2.991,4.71828,4.71828,0,0,1-.59219.708c-.9549.94606-1.18022.95526-2.26231.1373q-.06154-.04653-.1233-.09277c-1.73279-1.2968-2.97172-.96605-3.84865,1.03338a6.53315,6.53315,0,0,0-.58042,2.61485c-.00616,2.02994-.06664,4.0612.071,6.08937.11306,1.66563.47585,2.10807,2.10838,2.41878.43076.082.5528.241.53218.6429-.02535.4942-.388.32168-.62387.32261q-4.16808.01651-8.33624.00335c-.25552-.00055-.58009.117-.61833-.35031-.036-.43963.16961-.54968.55344-.63732,1.47954-.33784,1.78575-.56906,1.84152-2.0236a100.61811,100.61811,0,0,0-.04282-10.8626c-.10157-1.45547-.60505-1.89767-2.05786-2.14722-.37116-.06376-.727-.06339-.67117-.6082.05654-.55124.45646-.38237.75138-.38409,1.87817-.01094,3.7566.008,5.63456-.015.47414-.00581.61812.14233.60653.614-.03021,1.23184-.01016,2.46489-.01016,3.69746Z"/><path class="cls-2" d="M205.56931,56.12061c-.43077-.07413-.76286-1.49787-1.2563-.06144,0-.43605.01737-.873-.00432-1.30792-.02846-.57066.35928-.45094.67331-.41266.36966.04507.75934.29894.5243.63553C205.21018,55.39814,205.45361,55.70278,205.56931,56.12061Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/ant-financial/ant-financial_featured_logo.svg b/content/en/case-studies/ant-financial/ant-financial_featured_logo.svg
index 1d20786a5d..4eb8a51127 100644
--- a/content/en/case-studies/ant-financial/ant-financial_featured_logo.svg
+++ b/content/en/case-studies/ant-financial/ant-financial_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:#fbfbfb;}.cls-20,.cls-3{isolation:isolate;}.cls-4{fill:#3e3a39;}.cls-5{clip-path:url(#clip-path);}.cls-6{clip-path:url(#clip-path-2);}.cls-7{clip-path:url(#clip-path-3);}.cls-8{clip-path:url(#clip-path-5);}.cls-9{clip-path:url(#clip-path-9);}.cls-10{clip-path:url(#clip-path-11);}.cls-11{clip-path:url(#clip-path-12);}.cls-12{clip-path:url(#clip-path-13);}.cls-13{fill:#008bd5;}.cls-14{fill:#fff;}.cls-15{clip-path:url(#clip-path-17);}.cls-16{mask:url(#mask);}.cls-17{mask:url(#mask-2);}.cls-18{clip-path:url(#clip-path-20);}.cls-19{mask:url(#mask-3);}.cls-20{opacity:0.2;}.cls-21{clip-path:url(#clip-path-21);}.cls-22{clip-path:url(#clip-path-22);}.cls-23{clip-path:url(#clip-path-23);}.cls-24{mask:url(#mask-4);}.cls-25{mask:url(#mask-5);}.cls-26{clip-path:url(#clip-path-24);}.cls-27{clip-path:url(#clip-path-25);}.cls-28{mask:url(#mask-6);}</style><clipPath id="clip-path"><path class="cls-1" d="M41.25772,85.60659c0,6.00919,3.56106,10.88241,7.95407,10.88241,4.39471,0,7.95727-4.87322,7.95727-10.88241,0-6.009-3.56256-10.88242-7.95727-10.88242-4.393,0-7.95407,4.87341-7.95407,10.88242"/></clipPath><clipPath id="clip-path-2"><rect class="cls-1" x="22.4604" y="21.33933" width="166.41645" height="80.12644"/></clipPath><clipPath id="clip-path-3"><rect class="cls-1" x="22.46052" y="21.33973" width="166.4165" height="80.12646"/></clipPath><clipPath id="clip-path-5"><path class="cls-1" d="M44.57688,70.84161c0,2.98947,2.12174,5.41268,4.73818,5.41268,2.61492,0,4.73516-2.42321,4.73516-5.41268S51.93,65.43244,49.31506,65.43244c-2.61644,0-4.73818,2.41983-4.73818,5.40917"/></clipPath><clipPath id="clip-path-9"><path class="cls-1" d="M31.28348,51.51343C30.79048,62.7869,38.971,66.97489,48.9082,66.439c11.27023-.60769,17.64785-6.446,16.90525-15.06147-1.35129-15.68167-15.34893-9.97357-19.07157-16.21633-4.538,6.901-14.92984,4.261-15.4584,16.35228"/></clipPath><clipPath id="clip-path-11"><rect class="cls-1" x="64.06634" y="-22.54553" width="83.20597" height="167.89618" transform="translate(42.31348 165.91246) rotate(-88.93509)"/></clipPath><clipPath id="clip-path-12"><rect class="cls-1" x="60.94699" y="-24.11126" width="89.4454" height="171.0277" transform="translate(42.28956 165.89815) rotate(-88.92179)"/></clipPath><clipPath id="clip-path-13"><path class="cls-1" d="M31.62413,56.098c.02313.10557.04458.21128.06922.31911C33.47312,64.01019,40.5721,66.89062,48.9082,66.439c6.89565-.37182,11.94512-2.70841,14.66933-6.43368,1.30521-2.457-1.32514-6.09454-4.43608-4.02636-.53175.35287-11.69232,9.6389-27.76241-1.39187.06019.52234.14182,1.02452.24509,1.511"/></clipPath><clipPath id="clip-path-17"><path class="cls-1" d="M40.156,58.06622c-1.09867-.32465-1.76886.86953-.49469,1.63349,1.27586.76273,10.47664,3.23541,17.14563-1.39187l-.09555-1.47619A24.96312,24.96312,0,0,1,40.156,58.06622"/></clipPath><mask id="mask" x="1840.26207" y="-307.47657" width="124.28717" height="62.95429" maskUnits="userSpaceOnUse"/><mask id="mask-2" x="19.32905" y="15.09864" width="172.68127" height="92.60791" maskUnits="userSpaceOnUse"><rect x="19.95319" y="17.24708" width="171.43066" height="88.31104"/></mask><clipPath id="clip-path-20"><rect class="cls-1" x="60.94699" y="-24.11126" width="89.4454" height="171.0277" transform="matrix(0.01858, -0.99983, 0.99983, 0.01858, 42.31395, 165.91294)"/></clipPath><mask id="mask-3" x="19.26484" y="-309.97361" width="1946.64" height="417.84" maskUnits="userSpaceOnUse"/><clipPath id="clip-path-21"><rect class="cls-1" x="45.5738" y="45.99362" width="6.16357" height="4.62268"/></clipPath><clipPath id="clip-path-22"><path class="cls-1" d="M48.27187,47.00074a2.88312,2.88312,0,0,0-2.64879,3.09938s.00771.26517.38993.23484a23.399,23.399,0,0,1,5.10646-.41452.27085.27085,0,0,0,.26973-.28648,2.88642,2.88642,0,0,0-3.11733-2.63322"/></clipPath><clipPath id="clip-path-23"><rect class="cls-1" x="45.61386" y="46.99096" width="5.7759" height="3.34677"/></clipPath><mask id="mask-4" x="1858.30173" y="-286.58517" width="4.32887" height="2.59753" maskUnits="userSpaceOnUse"/><mask id="mask-5" x="44.55085" y="45.8838" width="7.90137" height="5.56152" maskUnits="userSpaceOnUse"><rect x="44.55085" y="45.8838" width="7.90137" height="5.56152"/></mask><clipPath id="clip-path-24"><rect class="cls-1" x="46.77429" y="45.74612" width="3.4537" height="5.83785" transform="translate(-1.05211 96.25836) rotate(-88.94086)"/></clipPath><clipPath id="clip-path-25"><rect class="cls-1" x="46.6661" y="45.68202" width="3.67008" height="5.96606" transform="translate(-1.06677 96.24309) rotate(-88.92321)"/></clipPath><mask id="mask-6" x="45.42484" y="-286.69361" width="1817.28" height="337.44" maskUnits="userSpaceOnUse"/><image id="image" width="694" height="335" xlink:href="data:image/png;base64,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"/></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-3.37342" y="-3.34411" width="223.25536" height="134.51136"/><g class="cls-3"><path class="cls-4" d="M55.53882,86.93253s8.94177,7.38089,14.16391,11.606c0,0,.54379.42232.91058,0,0,0,4.615-4.406,5.58725-4.22514,0,0,.28365-.03931-.12321.7863a28.999,28.999,0,0,1-4.43477,5.79236,1.67082,1.67082,0,0,1-2.36513.12019S54.813,88.92213,54.206,88.44013a1.11494,1.11494,0,0,1-.16195-1.52885,1.0884,1.0884,0,0,1,1.49481.02125"/><path class="cls-4" d="M43.21769,86.93253s-8.94026,7.38089-14.16372,11.606c0,0-.54549.42232-.90927,0,0,0-4.61647-4.406-5.58724-4.22514,0,0-.285-.03931.1217.7863a29.03527,29.03527,0,0,0,4.43157,5.79236,1.67635,1.67635,0,0,0,2.37.12019s14.4613-12.09014,15.06829-12.57214a1.11457,1.11457,0,0,0,.16345-1.52885,1.0884,1.0884,0,0,0-1.49481.02125"/><path class="cls-4" d="M53.65277,72.96894s1.00914-1.01667,8.97261-4.816a.49313.49313,0,0,1,.65026.16181s2.47761,2.795,5.38071,2.65231a.88067.88067,0,0,0,.712-.5752c.38522-.96043-2.26827-2.0907-2.26827-2.0907a1.69984,1.69984,0,0,1-1.08325-1.72777,1.37424,1.37424,0,0,0-.44993-1.17848c-.93992-.74364-4.074,1.24149-4.074,1.24149-4.73366,2.51181-8.609,4.75642-8.609,4.75642s-1.06783.4977-.63182,1.33582c0,0,.33443.75935,1.40076.24034"/><path class="cls-4" d="M45.28564,73.30131s-1.07254-.95257-9.26079-4.24193a.48911.48911,0,0,0-.63633.20113s-2.29742,2.94555-5.20371,2.986a.88684.88684,0,0,1-.74882-.52917c-.44372-.93456,2.13265-2.23107,2.13265-2.23107a1.69628,1.69628,0,0,0,.96926-1.79172,1.37762,1.37762,0,0,1,.37281-1.2033c.89064-.801,4.14661.98309,4.14661.98309,4.8862,2.20624,8.894,4.20369,8.894,4.20369s1.09868.43041.71816,1.29529c0,0-.28516.77862-1.38383.328"/><g class="cls-5"><g class="cls-6"><g class="cls-7"><g class="cls-7"><use transform="translate(22.38484 21.22639) scale(0.24)" xlink:href="#image"/></g></g></g></g><g class="cls-8"><g class="cls-6"><g class="cls-7"><g class="cls-7"><use transform="translate(22.38484 21.22639) scale(0.24)" xlink:href="#image"/></g></g></g></g><path class="cls-4" d="M38.324,45.75479s-2.69055-10.00734,4.87849-20.12251l.6162.95948s-5.21894,6.49782-3.83981,17.53307Z"/><path class="cls-4" d="M48.46448,22.04968c.91227,1.06167.46535,2.93432-.99993,4.18014-1.467,1.24473-3.39628,1.39314-4.31156.32912-.91359-1.06256-.46686-2.93432,1.00011-4.18013,1.46547-1.24474,3.39459-1.393,4.31138-.32913"/><path class="cls-4" d="M54.17511,42.90845s3.866-9.61854,16.01912-13.226l-.08483,1.13367S62.01821,32.92363,56.485,42.58826Z"/><path class="cls-4" d="M76.76146,29.83842c.094,1.39638-1.38985,2.62988-3.316,2.75793-1.9231.12588-3.56105-.90329-3.65341-2.29855-.09254-1.39531,1.39136-2.6288,3.31747-2.75685,1.92142-.127,3.55956.90221,3.65191,2.29747"/><g class="cls-9"><g class="cls-6"><g class="cls-10"><g class="cls-11"><image width="720" height="387" transform="translate(19.26484 14.98639) scale(0.24)" xlink:href="data:image/png;base64,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"/></g></g></g></g><g class="cls-12"><g class="cls-6"><g class="cls-7"><g class="cls-7"><image width="694" height="335" transform="translate(22.38484 21.22639) scale(0.24)" xlink:href="data:image/png;base64,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"/></g></g></g></g><path class="cls-13" d="M48.21036,55.73608c-12.785.83021-12.36721-6.76069-12.36721-6.76069.21255-7.0932,11.49651-7.292,11.49651-7.292s13.16079-.87968,13.26086,6.70106c0,0,.46084,6.69993-12.39016,7.3516"/><path class="cls-14" d="M48.201,56.22315c-13.05283.61113-12.34408-6.74836-12.34408-6.74836.21274-7.07853,11.47036-7.11,11.47036-7.11s13.13935-1.04361,13.23942,6.52246c0,0,.59326,6.74386-12.3657,7.33589"/><g class="cls-15"><g class="cls-6"><g class="cls-16"><g class="cls-17"><g class="cls-10"><g class="cls-18"><g class="cls-19"><image width="720" height="387" transform="translate(19.26484 14.98639) scale(0.24)" xlink:href="data:image/png;base64,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"/></g></g></g></g></g></g></g><path class="cls-4" d="M48.235,46.80583a3.6332,3.6332,0,0,0-3.3391,3.90711s.01072.33373.4915.29658a29.46031,29.46031,0,0,1,6.43631-.52343.341.341,0,0,0,.34046-.36072A3.63891,3.63891,0,0,0,48.235,46.80583"/><g class="cls-20"><g class="cls-21"><g class="cls-22"><g class="cls-23"><g class="cls-24"><g class="cls-25"><g class="cls-26"><g class="cls-27"><g class="cls-28"><image width="26" height="17" transform="translate(45.42484 46.66639) scale(0.24)" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABoAAAARCAYAAADDjbwNAAAACXBIWXMAAC4jAAAuIwF4pT92AAAAKklEQVQ4T2P8////fwY6ACZCCqgFRi0iG4xaRDYYtYhsMGoR2WDUIrIBAD1MBB4Kpik5AAAAAElFTkSuQmCC"/></g></g></g></g></g></g></g></g></g><path class="cls-4" d="M85.526,78.706,81.526,87.50007h1.75965l1.205-2.61879h3.32217l1.16959,2.61879h1.75194L86.80341,78.706Zm-.37751,4.75769.02935-.06179c.35437-.77294.65326-1.42009.94612-2.07947l.04308-.091,1.00933,2.23229Z"/><path class="cls-4" d="M116.498,81.39241a1.18855,1.18855,0,0,1,.34365-.9167,1.27321,1.27321,0,0,1,.8645-.27857h3.37446V78.78829h-3.37446a3.04533,3.04533,0,0,0-2.06795.68646,2.43176,2.43176,0,0,0-.77815,1.91766v6.10794h1.638V83.83918h4.67045V82.42929H116.498Z"/><path class="cls-4" d="M174.96575,78.706l-4.00027,8.79407h1.75815l1.20344-2.61879h3.32368l1.1726,2.61879h1.74592L176.24311,78.706Zm-.38222,4.75769.02935-.06179q.47823-1.04154.94913-2.07947l.04308-.091,1.00782,2.23229Z"/><path class="cls-4" d="M183.51138,85.45267v-6.709h-1.64717v6.709c0,2.15569,2.02638,2.15569,2.692,2.15569h3.37917v-1.412h-3.37917c-.87992,0-1.04488-.25953-1.04488-.74365"/><path class="cls-4" d="M98.68984,79.06766c0,.98507-.0015,2.05125-.01072,3.34546q0,1.12561-.00451,2.25462v.13266L93.944,78.716H92.58947v8.78386h1.66109l-.01223-4.82159c0-.309-.0047-.61344-.0047-.9213v-.1336l.08333.1066L98.81,87.49988h1.52246V78.75194H98.68984Z"/><polygon class="cls-4" points="102.571 80.345 105.524 80.345 105.524 87.511 107.165 87.511 107.165 80.345 110.182 80.345 110.182 78.937 102.571 78.937 102.571 80.345"/><path class="cls-4" d="M141.20774,78.706l-4.00159,8.79407h1.76436l1.20325-2.61879h3.32067l1.16809,2.61879H146.413L142.4851,78.706Zm-.382,4.75769.03085-.06518c.325-.70776.64705-1.40654.95215-2.07608l.04006-.091,1.01234,2.23229Z"/><rect class="cls-4" x="123.4474" y="78.85944" width="1.64359" height="8.64016"/><path class="cls-4" d="M164.62942,86.14158c-.51313.03146-1.08475.06964-1.6735.06964-1.39455,0-2.19265-.21461-2.44225-.66055a4.99666,4.99666,0,0,1-.45313-2.25251,5.73631,5.73631,0,0,1,.38842-2.16923c.282-.59312,1.07855-.87738,2.45-.87738.53006,0,1.131.028,1.79369.082l.47758.04839-.00451-1.42672L164.839,78.927c-.73508-.05375-1.34978-.0775-1.94-.0775-1.37443,0-3.28512.17752-3.98165,1.75029a6.57,6.57,0,0,0-.51463,2.6984,6.71179,6.71179,0,0,0,.63013,2.84789c.53946,1.00778,1.786,1.47388,3.92314,1.47388.56241,0,1.16037-.03357,1.69664-.06734l.52065-.027-.00451-1.42455Z"/><path class="cls-4" d="M154.36082,79.06766c0,1.11655-.00151,2.24339-.00452,3.36563l-.0047.5q-.00226.89122-.00151,1.776v.13717L149.61644,78.716h-1.35129v8.78386h1.65638v-.30665c0-1.08292-.0047-2.17388-.00621-3.26913-.0015-.72239-.00451-1.44134-.00451-2.16711v-.1336l4.5717,5.8731h1.524V78.75194h-1.64566Z"/><path class="cls-4" d="M133.71281,79.06766c0,.45826-.00451.92008-.00451,1.38064l-.01091,4.39818L128.96693,78.716h-1.35449v8.78386H129.272v-.30665q0-1.42236-.00621-2.85677l-.003-.94938c0-.54595-.003-1.08739-.003-1.63009v-.1336l4.5702,5.8731h1.524V78.75194h-1.64115Z"/><rect class="cls-4" x="167.50618" y="78.85949" width="1.64698" height="8.63564"/><polygon class="cls-4" points="129.683 56.571 128.808 50.324 126.592 50.324 127.471 56.571 129.683 56.571"/><path class="cls-4" d="M103.35428,52.95153l-.29136,8.0729h-6.179c-.41287,0-.66248-.15057-.62091-.509l.62862-6.24939H94.76519l-.63482,6.4405a2.0021,2.0021,0,0,0,.63482,1.76924,2.46662,2.46662,0,0,0,1.8522.57642h7.42552c.41155,0,.6241.17414.6241.51224v3.33539H93.74665l.41456,2.03568h10.51351V72.863c0,.39646-.1817.59415-.53626.59415H95.35394l.4345,2.03568h8.55185a2.43343,2.43343,0,0,0,1.85219-.60431,2.2284,2.2284,0,0,0,.60417-1.76713V63.36906a2.20858,2.20858,0,0,0-.63182-1.76835,1.9957,1.9957,0,0,0-.97227-.48754l.29117-8.35486a2.23275,2.23275,0,0,0-.62712-1.77268,2.49274,2.49274,0,0,0-1.8552-.57628H93.32155v2.03676h9.41314c.41156,0,.61959.165.61959.50542"/><path class="cls-4" d="M182.9659,71.65028c.90607,1.23237,1.93383,2.53,3.09721,3.84311h2.81375s-2.19416-2.46247-4.58412-5.7854a37.40756,37.40756,0,0,0,3.76439-6.58783,1.81961,1.81961,0,0,0-1.79671-2.43661h-8.99575V52.98374q0-.51406.62411-.51346h6.68441c.41607,0,.63163.17075.63163.51346v3.15557c0,.39435-.17718.59542-.53777.59542h-4.17256v2.03568h4.37608a2.46709,2.46709,0,0,0,1.85521-.601,2.24718,2.24718,0,0,0,.59946-1.77169V52.79052a2.22228,2.22228,0,0,0-.62881-1.7716,2.48309,2.48309,0,0,0-1.8552-.57966H177.619a2.49262,2.49262,0,0,0-1.85521.57966,2.1911,2.1911,0,0,0-.6241,1.72.03369.03369,0,0,0-.006.01678V75.49339h2.13095V62.57656h7.98022a.40772.40772,0,0,1,.35287.59646,28.95592,28.95592,0,0,1-2.61794,4.643c-.872-1.3076-1.72429-2.68946-2.45768-4.07353h-2.37755a43.90375,43.90375,0,0,0,3.51008,6.053c-.09555.14051-.151.21909-.151.21909-1.65187,2.35695-3.21571,4.65875-3.92465,5.4788h2.65349c1.00933-1.19973,1.7905-2.55234,2.56866-3.6094,0,0,.06-.08535.16477-.23371"/><polygon class="cls-4" points="137.721 75.493 160.99 75.493 160.99 73.459 156.549 73.459 157.17 68.61 154.868 68.61 154.247 73.459 150.413 73.459 150.413 66.013 159.48 66.013 159.48 63.98 150.413 63.98 150.413 59.476 156.771 59.476 156.771 57.439 141.85 57.439 141.85 59.476 148.21 59.476 148.21 63.98 139.14 63.98 139.14 66.013 148.21 66.013 148.21 73.459 144.337 73.459 143.716 68.61 141.414 68.61 142.034 73.459 137.721 73.459 137.721 75.493"/><path class="cls-4" d="M144.18945,53.17466c.35908-.54365.68882-.68632,1.72429-.68632h6.7952c1.03247,0,1.36521.14267,1.72429.68632,1.01234,1.53135,3.15891,4.9139,4.11576,6.30131h2.92924c-1.02156-1.502-3.71041-5.7238-4.73817-7.21123a3.76754,3.76754,0,0,0-3.3361-1.80531h-.64724l-.51313-1.13794c1.407-.48092,2.30833-1.58975,2.0433-2.57035-.28515-1.05274-1.792-1.55938-3.36525-1.13705a3.26084,3.26084,0,0,0-2.30532,1.82906,1.27786,1.27786,0,0,0-1.10319-.68877,1.90758,1.90758,0,0,0,.09085-.5942,1.97053,1.97053,0,0,0-1.61011-1.89635l-.03555-1.56708a.42352.42352,0,0,0-.43149-.41344h-.02145a.42423.42423,0,0,0-.41607.43253l.03536,1.58279a1.96143,1.96143,0,0,0-.67169.32019l-1.01554-1.14025a.42086.42086,0,0,0-.32672-.14714.43585.43585,0,0,0-.27726.10445l-.01241.0134a.43782.43782,0,0,0-.14484.29216.44415.44415,0,0,0,.10646.309l1.09849,1.23458a1.93264,1.93264,0,0,0-.23418.95271,1.97274,1.97274,0,0,0,2.01866,1.9255,1.906,1.906,0,0,0,.50993-.08318,1.28737,1.28737,0,0,0,.40385.90221l-.76593,1.47722h-.59627a3.76564,3.76564,0,0,0-3.3361,1.80531c-1.03077,1.48743-3.71661,5.70918-4.73967,7.21123h2.93225c.95384-1.38741,3.10172-4.77,4.11575-6.30131m7.19134-3.651.41908.93579h-1.06933l-.11719-.90879a3.93745,3.93745,0,0,0,.76744-.027m-1.66729-.15621.13862,1.092h-1.01384l.15555-1.51884a2.033,2.033,0,0,0,.71967.42684m-2.333-.04594a.68867.68867,0,0,0,.1202.0134,1.348,1.348,0,0,0,.598-.1652l-.13562,1.28974H146.792Z"/><path class="cls-4" d="M94.36,75.49292l-1.07554-5.6036H91.13021l.47307,2.46482-3.41152.192V67.055H89.927a2.48932,2.48932,0,0,0,1.8567-.57755,2.24874,2.24874,0,0,0,.62712-1.77047V55.28845a2.251,2.251,0,0,0-.62712-1.77282,2.49436,2.49436,0,0,0-1.8567-.57628h-1.7352V50.324h-2.131v2.61535H84.32109a2.49342,2.49342,0,0,0-1.8537.57628,2.23547,2.23547,0,0,0-.62711,1.77282V64.707a2.22808,2.22808,0,0,0,.62711,1.77047,2.48838,2.48838,0,0,0,1.8537.57755H86.0608v5.60915l.003.00231-4.72274.265v2.03784l10.65063-.5988.21405,1.12237ZM88.19176,54.97043h1.46847c.41608,0,.6211.17192.6211.51124v9.02994c0,.33806-.205.5145-.6211.5145H88.19176Zm-2.131,10.05568H84.59233c-.41607,0-.62411-.17644-.62411-.5145V55.48167c0-.33932.208-.51124.62411-.51124H86.0608Z"/><path class="cls-4" d="M171.57717,72.86262q0,.595-.53457.59434h-2.64578v2.03676h2.84761a2.44774,2.44774,0,0,0,1.8552-.60435,2.24214,2.24214,0,0,0,.601-1.76831V52.67385a2.22842,2.22842,0,0,0-.63031-1.77046,2.4821,2.4821,0,0,0-1.8537-.57972h-4.2604a2.49371,2.49371,0,0,0-1.8554.57972,2.23428,2.23428,0,0,0-.62711,1.77046v17.36c0,3.996-.72117,5.31267-.80431,5.45985h2.04632c.08483,0,.88763-.46845.88763-5.45985V67.26131h4.97385ZM166.60332,52.8683c0-.34267.20954-.51464.62241-.51464h3.72282c.41306,0,.62862.172.62862.51464v4.48339h-4.97385Zm0,6.48766h4.97235v5.90127h-4.97235Z"/><path class="cls-4" d="M123.93909,75.49339s1.67632-2.475,4.27131-6.27883c2.5948,3.80385,4.27131,6.27883,4.27131,6.27883h2.4701s-2.67663-4.07348-5.424-8.2538a34.99234,34.99234,0,0,0,2.655-4.92265A34.40341,34.40341,0,0,0,134.54044,51.194l-2.17742-.00109a32.75637,32.75637,0,0,1-2.1633,10.187,31.58491,31.58491,0,0,1-1.98932,3.81066,31.55776,31.55776,0,0,1-1.98932-3.81066,32.7594,32.7594,0,0,1-2.16349-10.187l-2.17723.00109A34.40341,34.40341,0,0,0,124.238,62.31694a34.98676,34.98676,0,0,0,2.6533,4.92265c-2.74584,4.18032-5.42228,8.2538-5.42228,8.2538Z"/><path class="cls-4" d="M118.153,69.88932l.49149,2.55572-1.88153.10449V67.055h1.73971a2.49062,2.49062,0,0,0,1.8537-.57755A2.24339,2.24339,0,0,0,120.985,64.707V55.28845a2.2457,2.2457,0,0,0-.62862-1.77282,2.49567,2.49567,0,0,0-1.8537-.57628H116.763V50.324h-2.131v2.61535h-1.73821a2.495,2.495,0,0,0-1.8552.57628,2.25274,2.25274,0,0,0-.63013,1.77282V64.707a2.24527,2.24527,0,0,0,.63013,1.77047,2.49,2.49,0,0,0,1.8552.57755H114.632v5.61362l-4.71823.26287v2.03784l9.11745-.50772.19732,1.03129h2.15409l-1.077-5.6036Zm-1.39-14.91889h1.47016c.41438,0,.62242.17192.62242.51124v9.02994c0,.33806-.208.5145-.62242.5145H116.763Zm-3.60094,10.05568c-.41457,0-.62411-.17644-.62411-.5145V55.48167c0-.33932.20954-.51124.62411-.51124h1.47V65.02611Z"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:transparent;}.cls-20,.cls-3{isolation:isolate;}.cls-4{fill:#3e3a39;}.cls-5{clip-path:url(#clip-path);}.cls-6{clip-path:url(#clip-path-2);}.cls-7{clip-path:url(#clip-path-3);}.cls-8{clip-path:url(#clip-path-5);}.cls-9{clip-path:url(#clip-path-9);}.cls-10{clip-path:url(#clip-path-11);}.cls-11{clip-path:url(#clip-path-12);}.cls-12{clip-path:url(#clip-path-13);}.cls-13{fill:#008bd5;}.cls-14{fill:#fff;}.cls-15{clip-path:url(#clip-path-17);}.cls-16{mask:url(#mask);}.cls-17{mask:url(#mask-2);}.cls-18{clip-path:url(#clip-path-20);}.cls-19{mask:url(#mask-3);}.cls-20{opacity:0.2;}.cls-21{clip-path:url(#clip-path-21);}.cls-22{clip-path:url(#clip-path-22);}.cls-23{clip-path:url(#clip-path-23);}.cls-24{mask:url(#mask-4);}.cls-25{mask:url(#mask-5);}.cls-26{clip-path:url(#clip-path-24);}.cls-27{clip-path:url(#clip-path-25);}.cls-28{mask:url(#mask-6);}</style><clipPath id="clip-path"><path class="cls-1" d="M41.25772,85.60659c0,6.00919,3.56106,10.88241,7.95407,10.88241,4.39471,0,7.95727-4.87322,7.95727-10.88241,0-6.009-3.56256-10.88242-7.95727-10.88242-4.393,0-7.95407,4.87341-7.95407,10.88242"/></clipPath><clipPath id="clip-path-2"><rect class="cls-1" x="22.4604" y="21.33933" width="166.41645" height="80.12644"/></clipPath><clipPath id="clip-path-3"><rect class="cls-1" x="22.46052" y="21.33973" width="166.4165" height="80.12646"/></clipPath><clipPath id="clip-path-5"><path class="cls-1" d="M44.57688,70.84161c0,2.98947,2.12174,5.41268,4.73818,5.41268,2.61492,0,4.73516-2.42321,4.73516-5.41268S51.93,65.43244,49.31506,65.43244c-2.61644,0-4.73818,2.41983-4.73818,5.40917"/></clipPath><clipPath id="clip-path-9"><path class="cls-1" d="M31.28348,51.51343C30.79048,62.7869,38.971,66.97489,48.9082,66.439c11.27023-.60769,17.64785-6.446,16.90525-15.06147-1.35129-15.68167-15.34893-9.97357-19.07157-16.21633-4.538,6.901-14.92984,4.261-15.4584,16.35228"/></clipPath><clipPath id="clip-path-11"><rect class="cls-1" x="64.06634" y="-22.54553" width="83.20597" height="167.89618" transform="translate(42.31348 165.91246) rotate(-88.93509)"/></clipPath><clipPath id="clip-path-12"><rect class="cls-1" x="60.94699" y="-24.11126" width="89.4454" height="171.0277" transform="translate(42.28956 165.89815) rotate(-88.92179)"/></clipPath><clipPath id="clip-path-13"><path class="cls-1" d="M31.62413,56.098c.02313.10557.04458.21128.06922.31911C33.47312,64.01019,40.5721,66.89062,48.9082,66.439c6.89565-.37182,11.94512-2.70841,14.66933-6.43368,1.30521-2.457-1.32514-6.09454-4.43608-4.02636-.53175.35287-11.69232,9.6389-27.76241-1.39187.06019.52234.14182,1.02452.24509,1.511"/></clipPath><clipPath id="clip-path-17"><path class="cls-1" d="M40.156,58.06622c-1.09867-.32465-1.76886.86953-.49469,1.63349,1.27586.76273,10.47664,3.23541,17.14563-1.39187l-.09555-1.47619A24.96312,24.96312,0,0,1,40.156,58.06622"/></clipPath><mask id="mask" x="1840.26207" y="-307.47657" width="124.28717" height="62.95429" maskUnits="userSpaceOnUse"/><mask id="mask-2" x="19.32905" y="15.09864" width="172.68127" height="92.60791" maskUnits="userSpaceOnUse"><rect x="19.95319" y="17.24708" width="171.43066" height="88.31104"/></mask><clipPath id="clip-path-20"><rect class="cls-1" x="60.94699" y="-24.11126" width="89.4454" height="171.0277" transform="matrix(0.01858, -0.99983, 0.99983, 0.01858, 42.31395, 165.91294)"/></clipPath><mask id="mask-3" x="19.26484" y="-309.97361" width="1946.64" height="417.84" maskUnits="userSpaceOnUse"/><clipPath id="clip-path-21"><rect class="cls-1" x="45.5738" y="45.99362" width="6.16357" height="4.62268"/></clipPath><clipPath id="clip-path-22"><path class="cls-1" d="M48.27187,47.00074a2.88312,2.88312,0,0,0-2.64879,3.09938s.00771.26517.38993.23484a23.399,23.399,0,0,1,5.10646-.41452.27085.27085,0,0,0,.26973-.28648,2.88642,2.88642,0,0,0-3.11733-2.63322"/></clipPath><clipPath id="clip-path-23"><rect class="cls-1" x="45.61386" y="46.99096" width="5.7759" height="3.34677"/></clipPath><mask id="mask-4" x="1858.30173" y="-286.58517" width="4.32887" height="2.59753" maskUnits="userSpaceOnUse"/><mask id="mask-5" x="44.55085" y="45.8838" width="7.90137" height="5.56152" maskUnits="userSpaceOnUse"><rect x="44.55085" y="45.8838" width="7.90137" height="5.56152"/></mask><clipPath id="clip-path-24"><rect class="cls-1" x="46.77429" y="45.74612" width="3.4537" height="5.83785" transform="translate(-1.05211 96.25836) rotate(-88.94086)"/></clipPath><clipPath id="clip-path-25"><rect class="cls-1" x="46.6661" y="45.68202" width="3.67008" height="5.96606" transform="translate(-1.06677 96.24309) rotate(-88.92321)"/></clipPath><mask id="mask-6" x="45.42484" y="-286.69361" width="1817.28" height="337.44" maskUnits="userSpaceOnUse"/><image id="image" width="694" height="335" xlink:href="data:image/png;base64,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"/></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-3.37342" y="-3.34411" width="223.25536" height="134.51136"/><g class="cls-3"><path class="cls-4" d="M55.53882,86.93253s8.94177,7.38089,14.16391,11.606c0,0,.54379.42232.91058,0,0,0,4.615-4.406,5.58725-4.22514,0,0,.28365-.03931-.12321.7863a28.999,28.999,0,0,1-4.43477,5.79236,1.67082,1.67082,0,0,1-2.36513.12019S54.813,88.92213,54.206,88.44013a1.11494,1.11494,0,0,1-.16195-1.52885,1.0884,1.0884,0,0,1,1.49481.02125"/><path class="cls-4" d="M43.21769,86.93253s-8.94026,7.38089-14.16372,11.606c0,0-.54549.42232-.90927,0,0,0-4.61647-4.406-5.58724-4.22514,0,0-.285-.03931.1217.7863a29.03527,29.03527,0,0,0,4.43157,5.79236,1.67635,1.67635,0,0,0,2.37.12019s14.4613-12.09014,15.06829-12.57214a1.11457,1.11457,0,0,0,.16345-1.52885,1.0884,1.0884,0,0,0-1.49481.02125"/><path class="cls-4" d="M53.65277,72.96894s1.00914-1.01667,8.97261-4.816a.49313.49313,0,0,1,.65026.16181s2.47761,2.795,5.38071,2.65231a.88067.88067,0,0,0,.712-.5752c.38522-.96043-2.26827-2.0907-2.26827-2.0907a1.69984,1.69984,0,0,1-1.08325-1.72777,1.37424,1.37424,0,0,0-.44993-1.17848c-.93992-.74364-4.074,1.24149-4.074,1.24149-4.73366,2.51181-8.609,4.75642-8.609,4.75642s-1.06783.4977-.63182,1.33582c0,0,.33443.75935,1.40076.24034"/><path class="cls-4" d="M45.28564,73.30131s-1.07254-.95257-9.26079-4.24193a.48911.48911,0,0,0-.63633.20113s-2.29742,2.94555-5.20371,2.986a.88684.88684,0,0,1-.74882-.52917c-.44372-.93456,2.13265-2.23107,2.13265-2.23107a1.69628,1.69628,0,0,0,.96926-1.79172,1.37762,1.37762,0,0,1,.37281-1.2033c.89064-.801,4.14661.98309,4.14661.98309,4.8862,2.20624,8.894,4.20369,8.894,4.20369s1.09868.43041.71816,1.29529c0,0-.28516.77862-1.38383.328"/><g class="cls-5"><g class="cls-6"><g class="cls-7"><g class="cls-7"><use transform="translate(22.38484 21.22639) scale(0.24)" xlink:href="#image"/></g></g></g></g><g class="cls-8"><g class="cls-6"><g class="cls-7"><g class="cls-7"><use transform="translate(22.38484 21.22639) scale(0.24)" xlink:href="#image"/></g></g></g></g><path class="cls-4" d="M38.324,45.75479s-2.69055-10.00734,4.87849-20.12251l.6162.95948s-5.21894,6.49782-3.83981,17.53307Z"/><path class="cls-4" d="M48.46448,22.04968c.91227,1.06167.46535,2.93432-.99993,4.18014-1.467,1.24473-3.39628,1.39314-4.31156.32912-.91359-1.06256-.46686-2.93432,1.00011-4.18013,1.46547-1.24474,3.39459-1.393,4.31138-.32913"/><path class="cls-4" d="M54.17511,42.90845s3.866-9.61854,16.01912-13.226l-.08483,1.13367S62.01821,32.92363,56.485,42.58826Z"/><path class="cls-4" d="M76.76146,29.83842c.094,1.39638-1.38985,2.62988-3.316,2.75793-1.9231.12588-3.56105-.90329-3.65341-2.29855-.09254-1.39531,1.39136-2.6288,3.31747-2.75685,1.92142-.127,3.55956.90221,3.65191,2.29747"/><g class="cls-9"><g class="cls-6"><g class="cls-10"><g class="cls-11"><image width="720" height="387" transform="translate(19.26484 14.98639) scale(0.24)" xlink:href="data:image/png;base64,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"/></g></g></g></g><g class="cls-12"><g class="cls-6"><g class="cls-7"><g class="cls-7"><image width="694" height="335" transform="translate(22.38484 21.22639) scale(0.24)" xlink:href="data:image/png;base64,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"/></g></g></g></g><path class="cls-13" d="M48.21036,55.73608c-12.785.83021-12.36721-6.76069-12.36721-6.76069.21255-7.0932,11.49651-7.292,11.49651-7.292s13.16079-.87968,13.26086,6.70106c0,0,.46084,6.69993-12.39016,7.3516"/><path class="cls-14" d="M48.201,56.22315c-13.05283.61113-12.34408-6.74836-12.34408-6.74836.21274-7.07853,11.47036-7.11,11.47036-7.11s13.13935-1.04361,13.23942,6.52246c0,0,.59326,6.74386-12.3657,7.33589"/><g class="cls-15"><g class="cls-6"><g class="cls-16"><g class="cls-17"><g class="cls-10"><g class="cls-18"><g class="cls-19"><image width="720" height="387" transform="translate(19.26484 14.98639) scale(0.24)" xlink:href="data:image/png;base64,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"/></g></g></g></g></g></g></g><path class="cls-4" d="M48.235,46.80583a3.6332,3.6332,0,0,0-3.3391,3.90711s.01072.33373.4915.29658a29.46031,29.46031,0,0,1,6.43631-.52343.341.341,0,0,0,.34046-.36072A3.63891,3.63891,0,0,0,48.235,46.80583"/><g class="cls-20"><g class="cls-21"><g class="cls-22"><g class="cls-23"><g class="cls-24"><g class="cls-25"><g class="cls-26"><g class="cls-27"><g class="cls-28"><image width="26" height="17" transform="translate(45.42484 46.66639) scale(0.24)" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABoAAAARCAYAAADDjbwNAAAACXBIWXMAAC4jAAAuIwF4pT92AAAAKklEQVQ4T2P8////fwY6ACZCCqgFRi0iG4xaRDYYtYhsMGoR2WDUIrIBAD1MBB4Kpik5AAAAAElFTkSuQmCC"/></g></g></g></g></g></g></g></g></g><path class="cls-4" d="M85.526,78.706,81.526,87.50007h1.75965l1.205-2.61879h3.32217l1.16959,2.61879h1.75194L86.80341,78.706Zm-.37751,4.75769.02935-.06179c.35437-.77294.65326-1.42009.94612-2.07947l.04308-.091,1.00933,2.23229Z"/><path class="cls-4" d="M116.498,81.39241a1.18855,1.18855,0,0,1,.34365-.9167,1.27321,1.27321,0,0,1,.8645-.27857h3.37446V78.78829h-3.37446a3.04533,3.04533,0,0,0-2.06795.68646,2.43176,2.43176,0,0,0-.77815,1.91766v6.10794h1.638V83.83918h4.67045V82.42929H116.498Z"/><path class="cls-4" d="M174.96575,78.706l-4.00027,8.79407h1.75815l1.20344-2.61879h3.32368l1.1726,2.61879h1.74592L176.24311,78.706Zm-.38222,4.75769.02935-.06179q.47823-1.04154.94913-2.07947l.04308-.091,1.00782,2.23229Z"/><path class="cls-4" d="M183.51138,85.45267v-6.709h-1.64717v6.709c0,2.15569,2.02638,2.15569,2.692,2.15569h3.37917v-1.412h-3.37917c-.87992,0-1.04488-.25953-1.04488-.74365"/><path class="cls-4" d="M98.68984,79.06766c0,.98507-.0015,2.05125-.01072,3.34546q0,1.12561-.00451,2.25462v.13266L93.944,78.716H92.58947v8.78386h1.66109l-.01223-4.82159c0-.309-.0047-.61344-.0047-.9213v-.1336l.08333.1066L98.81,87.49988h1.52246V78.75194H98.68984Z"/><polygon class="cls-4" points="102.571 80.345 105.524 80.345 105.524 87.511 107.165 87.511 107.165 80.345 110.182 80.345 110.182 78.937 102.571 78.937 102.571 80.345"/><path class="cls-4" d="M141.20774,78.706l-4.00159,8.79407h1.76436l1.20325-2.61879h3.32067l1.16809,2.61879H146.413L142.4851,78.706Zm-.382,4.75769.03085-.06518c.325-.70776.64705-1.40654.95215-2.07608l.04006-.091,1.01234,2.23229Z"/><rect class="cls-4" x="123.4474" y="78.85944" width="1.64359" height="8.64016"/><path class="cls-4" d="M164.62942,86.14158c-.51313.03146-1.08475.06964-1.6735.06964-1.39455,0-2.19265-.21461-2.44225-.66055a4.99666,4.99666,0,0,1-.45313-2.25251,5.73631,5.73631,0,0,1,.38842-2.16923c.282-.59312,1.07855-.87738,2.45-.87738.53006,0,1.131.028,1.79369.082l.47758.04839-.00451-1.42672L164.839,78.927c-.73508-.05375-1.34978-.0775-1.94-.0775-1.37443,0-3.28512.17752-3.98165,1.75029a6.57,6.57,0,0,0-.51463,2.6984,6.71179,6.71179,0,0,0,.63013,2.84789c.53946,1.00778,1.786,1.47388,3.92314,1.47388.56241,0,1.16037-.03357,1.69664-.06734l.52065-.027-.00451-1.42455Z"/><path class="cls-4" d="M154.36082,79.06766c0,1.11655-.00151,2.24339-.00452,3.36563l-.0047.5q-.00226.89122-.00151,1.776v.13717L149.61644,78.716h-1.35129v8.78386h1.65638v-.30665c0-1.08292-.0047-2.17388-.00621-3.26913-.0015-.72239-.00451-1.44134-.00451-2.16711v-.1336l4.5717,5.8731h1.524V78.75194h-1.64566Z"/><path class="cls-4" d="M133.71281,79.06766c0,.45826-.00451.92008-.00451,1.38064l-.01091,4.39818L128.96693,78.716h-1.35449v8.78386H129.272v-.30665q0-1.42236-.00621-2.85677l-.003-.94938c0-.54595-.003-1.08739-.003-1.63009v-.1336l4.5702,5.8731h1.524V78.75194h-1.64115Z"/><rect class="cls-4" x="167.50618" y="78.85949" width="1.64698" height="8.63564"/><polygon class="cls-4" points="129.683 56.571 128.808 50.324 126.592 50.324 127.471 56.571 129.683 56.571"/><path class="cls-4" d="M103.35428,52.95153l-.29136,8.0729h-6.179c-.41287,0-.66248-.15057-.62091-.509l.62862-6.24939H94.76519l-.63482,6.4405a2.0021,2.0021,0,0,0,.63482,1.76924,2.46662,2.46662,0,0,0,1.8522.57642h7.42552c.41155,0,.6241.17414.6241.51224v3.33539H93.74665l.41456,2.03568h10.51351V72.863c0,.39646-.1817.59415-.53626.59415H95.35394l.4345,2.03568h8.55185a2.43343,2.43343,0,0,0,1.85219-.60431,2.2284,2.2284,0,0,0,.60417-1.76713V63.36906a2.20858,2.20858,0,0,0-.63182-1.76835,1.9957,1.9957,0,0,0-.97227-.48754l.29117-8.35486a2.23275,2.23275,0,0,0-.62712-1.77268,2.49274,2.49274,0,0,0-1.8552-.57628H93.32155v2.03676h9.41314c.41156,0,.61959.165.61959.50542"/><path class="cls-4" d="M182.9659,71.65028c.90607,1.23237,1.93383,2.53,3.09721,3.84311h2.81375s-2.19416-2.46247-4.58412-5.7854a37.40756,37.40756,0,0,0,3.76439-6.58783,1.81961,1.81961,0,0,0-1.79671-2.43661h-8.99575V52.98374q0-.51406.62411-.51346h6.68441c.41607,0,.63163.17075.63163.51346v3.15557c0,.39435-.17718.59542-.53777.59542h-4.17256v2.03568h4.37608a2.46709,2.46709,0,0,0,1.85521-.601,2.24718,2.24718,0,0,0,.59946-1.77169V52.79052a2.22228,2.22228,0,0,0-.62881-1.7716,2.48309,2.48309,0,0,0-1.8552-.57966H177.619a2.49262,2.49262,0,0,0-1.85521.57966,2.1911,2.1911,0,0,0-.6241,1.72.03369.03369,0,0,0-.006.01678V75.49339h2.13095V62.57656h7.98022a.40772.40772,0,0,1,.35287.59646,28.95592,28.95592,0,0,1-2.61794,4.643c-.872-1.3076-1.72429-2.68946-2.45768-4.07353h-2.37755a43.90375,43.90375,0,0,0,3.51008,6.053c-.09555.14051-.151.21909-.151.21909-1.65187,2.35695-3.21571,4.65875-3.92465,5.4788h2.65349c1.00933-1.19973,1.7905-2.55234,2.56866-3.6094,0,0,.06-.08535.16477-.23371"/><polygon class="cls-4" points="137.721 75.493 160.99 75.493 160.99 73.459 156.549 73.459 157.17 68.61 154.868 68.61 154.247 73.459 150.413 73.459 150.413 66.013 159.48 66.013 159.48 63.98 150.413 63.98 150.413 59.476 156.771 59.476 156.771 57.439 141.85 57.439 141.85 59.476 148.21 59.476 148.21 63.98 139.14 63.98 139.14 66.013 148.21 66.013 148.21 73.459 144.337 73.459 143.716 68.61 141.414 68.61 142.034 73.459 137.721 73.459 137.721 75.493"/><path class="cls-4" d="M144.18945,53.17466c.35908-.54365.68882-.68632,1.72429-.68632h6.7952c1.03247,0,1.36521.14267,1.72429.68632,1.01234,1.53135,3.15891,4.9139,4.11576,6.30131h2.92924c-1.02156-1.502-3.71041-5.7238-4.73817-7.21123a3.76754,3.76754,0,0,0-3.3361-1.80531h-.64724l-.51313-1.13794c1.407-.48092,2.30833-1.58975,2.0433-2.57035-.28515-1.05274-1.792-1.55938-3.36525-1.13705a3.26084,3.26084,0,0,0-2.30532,1.82906,1.27786,1.27786,0,0,0-1.10319-.68877,1.90758,1.90758,0,0,0,.09085-.5942,1.97053,1.97053,0,0,0-1.61011-1.89635l-.03555-1.56708a.42352.42352,0,0,0-.43149-.41344h-.02145a.42423.42423,0,0,0-.41607.43253l.03536,1.58279a1.96143,1.96143,0,0,0-.67169.32019l-1.01554-1.14025a.42086.42086,0,0,0-.32672-.14714.43585.43585,0,0,0-.27726.10445l-.01241.0134a.43782.43782,0,0,0-.14484.29216.44415.44415,0,0,0,.10646.309l1.09849,1.23458a1.93264,1.93264,0,0,0-.23418.95271,1.97274,1.97274,0,0,0,2.01866,1.9255,1.906,1.906,0,0,0,.50993-.08318,1.28737,1.28737,0,0,0,.40385.90221l-.76593,1.47722h-.59627a3.76564,3.76564,0,0,0-3.3361,1.80531c-1.03077,1.48743-3.71661,5.70918-4.73967,7.21123h2.93225c.95384-1.38741,3.10172-4.77,4.11575-6.30131m7.19134-3.651.41908.93579h-1.06933l-.11719-.90879a3.93745,3.93745,0,0,0,.76744-.027m-1.66729-.15621.13862,1.092h-1.01384l.15555-1.51884a2.033,2.033,0,0,0,.71967.42684m-2.333-.04594a.68867.68867,0,0,0,.1202.0134,1.348,1.348,0,0,0,.598-.1652l-.13562,1.28974H146.792Z"/><path class="cls-4" d="M94.36,75.49292l-1.07554-5.6036H91.13021l.47307,2.46482-3.41152.192V67.055H89.927a2.48932,2.48932,0,0,0,1.8567-.57755,2.24874,2.24874,0,0,0,.62712-1.77047V55.28845a2.251,2.251,0,0,0-.62712-1.77282,2.49436,2.49436,0,0,0-1.8567-.57628h-1.7352V50.324h-2.131v2.61535H84.32109a2.49342,2.49342,0,0,0-1.8537.57628,2.23547,2.23547,0,0,0-.62711,1.77282V64.707a2.22808,2.22808,0,0,0,.62711,1.77047,2.48838,2.48838,0,0,0,1.8537.57755H86.0608v5.60915l.003.00231-4.72274.265v2.03784l10.65063-.5988.21405,1.12237ZM88.19176,54.97043h1.46847c.41608,0,.6211.17192.6211.51124v9.02994c0,.33806-.205.5145-.6211.5145H88.19176Zm-2.131,10.05568H84.59233c-.41607,0-.62411-.17644-.62411-.5145V55.48167c0-.33932.208-.51124.62411-.51124H86.0608Z"/><path class="cls-4" d="M171.57717,72.86262q0,.595-.53457.59434h-2.64578v2.03676h2.84761a2.44774,2.44774,0,0,0,1.8552-.60435,2.24214,2.24214,0,0,0,.601-1.76831V52.67385a2.22842,2.22842,0,0,0-.63031-1.77046,2.4821,2.4821,0,0,0-1.8537-.57972h-4.2604a2.49371,2.49371,0,0,0-1.8554.57972,2.23428,2.23428,0,0,0-.62711,1.77046v17.36c0,3.996-.72117,5.31267-.80431,5.45985h2.04632c.08483,0,.88763-.46845.88763-5.45985V67.26131h4.97385ZM166.60332,52.8683c0-.34267.20954-.51464.62241-.51464h3.72282c.41306,0,.62862.172.62862.51464v4.48339h-4.97385Zm0,6.48766h4.97235v5.90127h-4.97235Z"/><path class="cls-4" d="M123.93909,75.49339s1.67632-2.475,4.27131-6.27883c2.5948,3.80385,4.27131,6.27883,4.27131,6.27883h2.4701s-2.67663-4.07348-5.424-8.2538a34.99234,34.99234,0,0,0,2.655-4.92265A34.40341,34.40341,0,0,0,134.54044,51.194l-2.17742-.00109a32.75637,32.75637,0,0,1-2.1633,10.187,31.58491,31.58491,0,0,1-1.98932,3.81066,31.55776,31.55776,0,0,1-1.98932-3.81066,32.7594,32.7594,0,0,1-2.16349-10.187l-2.17723.00109A34.40341,34.40341,0,0,0,124.238,62.31694a34.98676,34.98676,0,0,0,2.6533,4.92265c-2.74584,4.18032-5.42228,8.2538-5.42228,8.2538Z"/><path class="cls-4" d="M118.153,69.88932l.49149,2.55572-1.88153.10449V67.055h1.73971a2.49062,2.49062,0,0,0,1.8537-.57755A2.24339,2.24339,0,0,0,120.985,64.707V55.28845a2.2457,2.2457,0,0,0-.62862-1.77282,2.49567,2.49567,0,0,0-1.8537-.57628H116.763V50.324h-2.131v2.61535h-1.73821a2.495,2.495,0,0,0-1.8552.57628,2.25274,2.25274,0,0,0-.63013,1.77282V64.707a2.24527,2.24527,0,0,0,.63013,1.77047,2.49,2.49,0,0,0,1.8552.57755H114.632v5.61362l-4.71823.26287v2.03784l9.11745-.50772.19732,1.03129h2.15409l-1.077-5.6036Zm-1.39-14.91889h1.47016c.41438,0,.62242.17192.62242.51124v9.02994c0,.33806-.208.5145-.62242.5145H116.763Zm-3.60094,10.05568c-.41457,0-.62411-.17644-.62411-.5145V55.48167c0-.33932.20954-.51124.62411-.51124h1.47V65.02611Z"/></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/appdirect/appdirect_featured_logo.svg b/content/en/case-studies/appdirect/appdirect_featured_logo.svg
index d655c7f2fa..36fcba1abb 100644
--- a/content/en/case-studies/appdirect/appdirect_featured_logo.svg
+++ b/content/en/case-studies/appdirect/appdirect_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#57565a;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51136"/><path class="cls-2" d="M81.14242,56.12567,77.99668,64.0731h6.29149l-3.14575-7.94743Zm7.0534,17.78238-2.58263-6.49093h-8.9411L74.089,73.90805h-3.775l9.17231-23.114h3.31256l9.17318,23.114Z"/><path class="cls-2" d="M102.9876,62.3189a2.97367,2.97367,0,0,0-2.74772-1.35853A2.91125,2.91125,0,0,0,97.4913,62.3189a3.7299,3.7299,0,0,0-.43087,1.48937v4.23808A3.73648,3.73648,0,0,0,97.4913,69.537a3.40988,3.40988,0,0,0,5.4963,0,7.0611,7.0611,0,0,0,.66165-3.60929,7.3468,7.3468,0,0,0-.66165-3.60884Zm2.94694,8.8744a6.31949,6.31949,0,0,1-5.69466,3.07919,6.89537,6.89537,0,0,1-3.17945-.72845v7.64965H93.68261v-23.379h3.37782v.49738a6.8926,6.8926,0,0,1,3.17945-.72842,6.31935,6.31935,0,0,1,5.69466,3.079,10.006,10.006,0,0,1,1.09252,5.29783,10.16391,10.16391,0,0,1-1.09252,5.23285Z"/><path class="cls-2" d="M118.79367,62.3189a2.97667,2.97667,0,0,0-2.74944-1.35853,2.9108,2.9108,0,0,0-2.74859,1.35853,3.75853,3.75853,0,0,0-.43,1.48937v4.23808a3.76517,3.76517,0,0,0,.43,1.49068,3.41159,3.41159,0,0,0,5.498,0,7.07027,7.07027,0,0,0,.66078-3.60929,7.35645,7.35645,0,0,0-.66078-3.60884Zm2.94608,8.8744a6.32,6.32,0,0,1-5.69552,3.07919,6.88941,6.88941,0,0,1-3.1786-.72845v7.64965h-3.3778v-23.379h3.3778v.49738a6.88664,6.88664,0,0,1,3.1786-.72842,6.31981,6.31981,0,0,1,5.69552,3.079,10.00267,10.00267,0,0,1,1.093,5.29783,10.16449,10.16449,0,0,1-1.093,5.23285Z"/><path class="cls-2" d="M132.96442,54.20565h-3.80825v16.259h3.80825c6.58968,0,6.35717-2.25263,6.35717-8.113,0-5.8944.23251-8.14595-6.35717-8.14595Zm9.60232,13.179c-.828,5.53-4.6687,6.52343-9.60232,6.52343h-7.31875v-23.114h7.31875c4.93362,0,8.7743.96057,9.60232,6.52326a36.3302,36.3302,0,0,1,.26577,5.03426,36.58042,36.58042,0,0,1-.26577,5.033Z"/><polygon class="cls-2" points="146.109 73.908 146.109 57.55 149.52 57.55 149.52 73.908 146.109 73.908 146.109 73.908"/><polygon class="cls-2" points="146.109 54.565 146.109 50.638 149.52 50.638 149.52 54.565 146.109 54.565 146.109 54.565"/><path class="cls-2" d="M161.67111,61.45749a3.97853,3.97853,0,0,0-2.185-.66277c-1.35871,0-3.08048.79467-3.08048,2.352V73.90805h-3.30952V57.71553h3.30952v.49609a7.36373,7.36373,0,0,1,3.08048-.662,8.37517,8.37517,0,0,1,3.676.86135l-1.491,3.04647Z"/><path class="cls-2" d="M173.35993,62.25243a3.00221,3.00221,0,0,0-2.71661-1.39145,3.30382,3.30382,0,0,0-3.609,2.98125h6.72194a4.32873,4.32873,0,0,0-.3963-1.5898ZM166.934,67.11957a5.0516,5.0516,0,0,0,.66295,2.352,3.97682,3.97682,0,0,0,3.345,1.48937,4.29333,4.29333,0,0,0,3.44307-1.55606l2.71705,2.01943a7.84563,7.84563,0,0,1-6.12728,2.78251,7.20688,7.20688,0,0,1-6.22535-2.94833,9.72791,9.72791,0,0,1-1.2589-5.397,9.71813,9.71813,0,0,1,1.2589-5.39724,6.77573,6.77573,0,0,1,5.92674-2.88061,6.353,6.353,0,0,1,5.5313,2.91333c1.19191,1.78819,1.02553,4.53689.99181,6.62261Z"/><path class="cls-2" d="M186.53109,74.17309c-4.70242,0-7.48386-3.54363-7.48386-8.411,0-4.90111,2.78144-8.44475,7.48386-8.44475,2.31728,0,3.84152.62923,6.2258,3.17962l-2.48411,2.18509c-1.78787-1.92-2.51607-2.18509-3.74169-2.18509a3.67433,3.67433,0,0,0-3.14532,1.49064,6.08445,6.08445,0,0,0-.86174,3.77449,6.04264,6.04264,0,0,0,.86174,3.74221,3.59542,3.59542,0,0,0,3.14532,1.48939c1.22562,0,1.95382-.26505,3.74169-2.15137l2.48411,2.18534c-2.38428,2.51638-3.90852,3.14543-6.2258,3.14543Z"/><path class="cls-2" d="M194.70206,57.54967V53.72892l3.24471-.55054v4.37129h2.88082v3.04669h-2.88082V69.6035a2.65978,2.65978,0,0,0,.03327.7282.3886.3886,0,0,0,.3963.23233h2.0878v3.344h-2.0878a3.50427,3.50427,0,0,1-3.07832-1.655,4.8599,4.8599,0,0,1-.596-2.64952V57.54967Z"/><polygon class="cls-2" points="16.87 77.995 30.665 71.993 37.34 52.213 30.585 41.486 16.87 77.995 16.87 77.995"/><polygon class="cls-2" points="30.277 38.06 47.2 64.828 57.151 60.51 41.284 38.06 30.277 38.06 30.277 38.06"/><polygon class="cls-2" points="64.356 59.132 14.131 80.907 24.836 88.213 58.498 73.908 64.356 59.132 64.356 59.132"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#57565a;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51136"/><path class="cls-2" d="M81.14242,56.12567,77.99668,64.0731h6.29149l-3.14575-7.94743Zm7.0534,17.78238-2.58263-6.49093h-8.9411L74.089,73.90805h-3.775l9.17231-23.114h3.31256l9.17318,23.114Z"/><path class="cls-2" d="M102.9876,62.3189a2.97367,2.97367,0,0,0-2.74772-1.35853A2.91125,2.91125,0,0,0,97.4913,62.3189a3.7299,3.7299,0,0,0-.43087,1.48937v4.23808A3.73648,3.73648,0,0,0,97.4913,69.537a3.40988,3.40988,0,0,0,5.4963,0,7.0611,7.0611,0,0,0,.66165-3.60929,7.3468,7.3468,0,0,0-.66165-3.60884Zm2.94694,8.8744a6.31949,6.31949,0,0,1-5.69466,3.07919,6.89537,6.89537,0,0,1-3.17945-.72845v7.64965H93.68261v-23.379h3.37782v.49738a6.8926,6.8926,0,0,1,3.17945-.72842,6.31935,6.31935,0,0,1,5.69466,3.079,10.006,10.006,0,0,1,1.09252,5.29783,10.16391,10.16391,0,0,1-1.09252,5.23285Z"/><path class="cls-2" d="M118.79367,62.3189a2.97667,2.97667,0,0,0-2.74944-1.35853,2.9108,2.9108,0,0,0-2.74859,1.35853,3.75853,3.75853,0,0,0-.43,1.48937v4.23808a3.76517,3.76517,0,0,0,.43,1.49068,3.41159,3.41159,0,0,0,5.498,0,7.07027,7.07027,0,0,0,.66078-3.60929,7.35645,7.35645,0,0,0-.66078-3.60884Zm2.94608,8.8744a6.32,6.32,0,0,1-5.69552,3.07919,6.88941,6.88941,0,0,1-3.1786-.72845v7.64965h-3.3778v-23.379h3.3778v.49738a6.88664,6.88664,0,0,1,3.1786-.72842,6.31981,6.31981,0,0,1,5.69552,3.079,10.00267,10.00267,0,0,1,1.093,5.29783,10.16449,10.16449,0,0,1-1.093,5.23285Z"/><path class="cls-2" d="M132.96442,54.20565h-3.80825v16.259h3.80825c6.58968,0,6.35717-2.25263,6.35717-8.113,0-5.8944.23251-8.14595-6.35717-8.14595Zm9.60232,13.179c-.828,5.53-4.6687,6.52343-9.60232,6.52343h-7.31875v-23.114h7.31875c4.93362,0,8.7743.96057,9.60232,6.52326a36.3302,36.3302,0,0,1,.26577,5.03426,36.58042,36.58042,0,0,1-.26577,5.033Z"/><polygon class="cls-2" points="146.109 73.908 146.109 57.55 149.52 57.55 149.52 73.908 146.109 73.908 146.109 73.908"/><polygon class="cls-2" points="146.109 54.565 146.109 50.638 149.52 50.638 149.52 54.565 146.109 54.565 146.109 54.565"/><path class="cls-2" d="M161.67111,61.45749a3.97853,3.97853,0,0,0-2.185-.66277c-1.35871,0-3.08048.79467-3.08048,2.352V73.90805h-3.30952V57.71553h3.30952v.49609a7.36373,7.36373,0,0,1,3.08048-.662,8.37517,8.37517,0,0,1,3.676.86135l-1.491,3.04647Z"/><path class="cls-2" d="M173.35993,62.25243a3.00221,3.00221,0,0,0-2.71661-1.39145,3.30382,3.30382,0,0,0-3.609,2.98125h6.72194a4.32873,4.32873,0,0,0-.3963-1.5898ZM166.934,67.11957a5.0516,5.0516,0,0,0,.66295,2.352,3.97682,3.97682,0,0,0,3.345,1.48937,4.29333,4.29333,0,0,0,3.44307-1.55606l2.71705,2.01943a7.84563,7.84563,0,0,1-6.12728,2.78251,7.20688,7.20688,0,0,1-6.22535-2.94833,9.72791,9.72791,0,0,1-1.2589-5.397,9.71813,9.71813,0,0,1,1.2589-5.39724,6.77573,6.77573,0,0,1,5.92674-2.88061,6.353,6.353,0,0,1,5.5313,2.91333c1.19191,1.78819,1.02553,4.53689.99181,6.62261Z"/><path class="cls-2" d="M186.53109,74.17309c-4.70242,0-7.48386-3.54363-7.48386-8.411,0-4.90111,2.78144-8.44475,7.48386-8.44475,2.31728,0,3.84152.62923,6.2258,3.17962l-2.48411,2.18509c-1.78787-1.92-2.51607-2.18509-3.74169-2.18509a3.67433,3.67433,0,0,0-3.14532,1.49064,6.08445,6.08445,0,0,0-.86174,3.77449,6.04264,6.04264,0,0,0,.86174,3.74221,3.59542,3.59542,0,0,0,3.14532,1.48939c1.22562,0,1.95382-.26505,3.74169-2.15137l2.48411,2.18534c-2.38428,2.51638-3.90852,3.14543-6.2258,3.14543Z"/><path class="cls-2" d="M194.70206,57.54967V53.72892l3.24471-.55054v4.37129h2.88082v3.04669h-2.88082V69.6035a2.65978,2.65978,0,0,0,.03327.7282.3886.3886,0,0,0,.3963.23233h2.0878v3.344h-2.0878a3.50427,3.50427,0,0,1-3.07832-1.655,4.8599,4.8599,0,0,1-.596-2.64952V57.54967Z"/><polygon class="cls-2" points="16.87 77.995 30.665 71.993 37.34 52.213 30.585 41.486 16.87 77.995 16.87 77.995"/><polygon class="cls-2" points="30.277 38.06 47.2 64.828 57.151 60.51 41.284 38.06 30.277 38.06 30.277 38.06"/><polygon class="cls-2" points="64.356 59.132 14.131 80.907 24.836 88.213 58.498 73.908 64.356 59.132 64.356 59.132"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/babylon/babylon_featured_logo.svg b/content/en/case-studies/babylon/babylon_featured_logo.svg
index 8bea0b8fc3..e84da19268 100644
--- a/content/en/case-studies/babylon/babylon_featured_logo.svg
+++ b/content/en/case-studies/babylon/babylon_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#400198;}.cls-3{fill:#ed1cb0;}.cls-4{fill:#e422b2;}.cls-5{fill:#e91fb1;}.cls-6{fill:#df26b3;}.cls-7{fill:#1eb6cf;}.cls-8{fill:#1db4d6;}.cls-9{fill:#ca35b8;}.cls-10{fill:#d42eb6;}.cls-11{fill:#cf32b7;}.cls-12{fill:#26b0ce;}.cls-13{fill:#d72cb5;}.cls-14{fill:#c538b8;}.cls-15{fill:#bb40bb;}.cls-16{fill:#da29b4;}.cls-17{fill:#c13cb9;}.cls-18{fill:#b544bc;}.cls-19{fill:#2aaad5;}.cls-20{fill:#af49be;}.cls-21{fill:#8964c5;}.cls-22{fill:#a94dbe;}.cls-23{fill:#826ac7;}.cls-24{fill:#a54fbf;}.cls-25{fill:#e026b1;}.cls-26{fill:#905fc3;}.cls-27{fill:#7b6fc8;}.cls-28{fill:#965ac2;}.cls-29{fill:#2aadcd;}.cls-30{fill:#9b58c2;}.cls-31{fill:#d034af;}.cls-32{fill:#d331b0;}.cls-33{fill:#d72db0;}.cls-34{fill:#db2ab0;}.cls-35{fill:#7077cb;}.cls-36{fill:#7573c9;}.cls-37{fill:#24b0d1;}.cls-38{fill:#35a2d4;}.cls-39{fill:#af49bb;}.cls-40{fill:#4a92d2;}.cls-41{fill:#4f8fce;}.cls-42{fill:#6b7bcb;}.cls-43{fill:#cb36b4;}.cls-44{fill:#5d85ce;}.cls-45{fill:#6380cd;}.cls-46{fill:#b743bb;}.cls-47{fill:#2eaacd;}.cls-48{fill:#38a3c9;}.cls-49{fill:#c43ab5;}.cls-50{fill:#667fc9;}.cls-51{fill:#4595d2;}.cls-52{fill:#a84ebc;}.cls-53{fill:#528cd0;}.cls-54{fill:#5887cf;}.cls-55{fill:#2ea7d5;}.cls-56{fill:#3a9ed3;}.cls-57{fill:#bb41ba;}.cls-58{fill:#9a58c2;}.cls-59{fill:#7475c3;}.cls-60{fill:#8f60c4;}.cls-61{fill:#32a7cb;}.cls-62{fill:#687fc3;}.cls-63{fill:#4099d4;}.cls-64{fill:#a450bf;}.cls-65{fill:#4698c9;}.cls-66{fill:#588bc5;}.cls-67{fill:#fcfcfc;}.cls-68{fill:#409dc8;}.cls-69{fill:#9f54c1;}.cls-70{fill:#955cc3;}.cls-71{fill:#5091c6;}.cls-72{fill:#d031b4;}.cls-73{fill:#8866c6;}.cls-74{fill:#c03cba;}.cls-75{fill:#6185c5;}.cls-76{fill:#7b6ec9;}.cls-77{fill:#6f79c6;}.cls-78{fill:#fefefe;}.cls-79{fill:#24b3cc;}.cls-80{fill:#da2ab2;}.cls-81{fill:#20b5ca;}.cls-82{fill:#25b1cb;}.cls-83{fill:#cc34b4;}.cls-84{fill:#d131b3;}.cls-85{fill:#29aecc;}.cls-86{fill:#26b2c7;}.cls-87{fill:#cb37af;}.cls-88{fill:#c53bb4;}.cls-89{fill:#bb42b6;}.cls-90{fill:#bf3eb5;}.cls-91{fill:#b546b6;}.cls-92{fill:#b04ab8;}.cls-93{fill:#2ea9d1;}.cls-94{fill:#aa4db9;}.cls-95{fill:#8d64bc;}.cls-96{fill:#8966be;}.cls-97{fill:#8568c2;}.cls-98{fill:#7e6dc4;}.cls-99{fill:#a155ba;}.cls-100{fill:#945ebb;}.cls-101{fill:#7673c4;}.cls-102{fill:#9a5aba;}.cls-103{fill:#2eaec3;}.cls-104{fill:#28b2c4;}.cls-105{fill:#7078c5;}.cls-106{fill:#6a7cc7;}.cls-107{fill:#32a6d1;}.cls-108{fill:#37a1d0;}.cls-109{fill:#b249b4;}.cls-110{fill:#ab4db9;}.cls-111{fill:#4d92ca;}.cls-112{fill:#4498ce;}.cls-113{fill:#4796ca;}.cls-114{fill:#528fc9;}.cls-115{fill:#5b87c9;}.cls-116{fill:#6182c9;}.cls-117{fill:#b944b3;}.cls-118{fill:#33a8c6;}.cls-119{fill:#38a6c2;}.cls-120{fill:#3da1c4;}.cls-121{fill:#c33daf;}.cls-122{fill:#bf3fb5;}.cls-123{fill:#6383c4;}.cls-124{fill:#409bd0;}.cls-125{fill:#a254bb;}.cls-126{fill:#a652b6;}.cls-127{fill:#568acc;}.cls-128{fill:#3ba0cd;}.cls-129{fill:#9a5abb;}.cls-130{fill:#9e57b9;}.cls-131{fill:#7e6fc0;}.cls-132{fill:#6d7ebd;}.cls-133{fill:#7a74ba;}.cls-134{fill:#747aba;}.cls-135{fill:#9160bc;}.cls-136{fill:#8b65bf;}.cls-137{fill:#6684bb;}.cls-138{fill:#4a97c1;}.cls-139{fill:#449cc1;}.cls-140{fill:#6088bb;}.cls-141{fill:#5491bf;}.cls-142{fill:#5b8bbf;}.cls-143{fill:#8469c1;}.cls-144{fill:#21b7c5;}.cls-145{fill:#24b5c5;}.cls-146{fill:#2dadc5;}.cls-147{fill:#25b6c1;}.cls-148{fill:#2faebe;}.cls-149{fill:#c63bb0;}.cls-150{fill:#c13fb0;}.cls-151{fill:#bd41b3;}.cls-152{fill:#b945b3;}.cls-153{fill:#b549ae;}.cls-154{fill:#ad4eb3;}.cls-155{fill:#a651b7;}.cls-156{fill:#8f64b6;}.cls-157{fill:#816ebe;}.cls-158{fill:#8869ba;}.cls-159{fill:#7973bf;}.cls-160{fill:#a357b0;}.cls-161{fill:#9e5ab3;}.cls-162{fill:#965fb5;}.cls-163{fill:#32aeb8;}.cls-164{fill:#2bb2ba;}.cls-165{fill:#33abbe;}.cls-166{fill:#27b5be;}.cls-167{fill:#6e7bc1;}.cls-168{fill:#7477bd;}.cls-169{fill:#6a7ec0;}.cls-170{fill:#37a4c8;}.cls-171{fill:#31a9c9;}.cls-172{fill:#b14dad;}.cls-173{fill:#ac4eb3;}.cls-174{fill:#4e94c3;}.cls-175{fill:#4b95c6;}.cls-176{fill:#429bca;}.cls-177{fill:#4599c6;}.cls-178{fill:#548fc3;}.cls-179{fill:#578bc6;}.cls-180{fill:#5b8ac2;}.cls-181{fill:#bd43ae;}.cls-182{fill:#bf40b0;}.cls-183{fill:#3aa7bb;}.cls-184{fill:#40a1bd;}.cls-185{fill:#6385c0;}.cls-186{fill:#a257b2;}.cls-187{fill:#a853af;}.cls-188{fill:#3e9fc7;}.cls-189{fill:#945fb9;}.cls-190{fill:#9c5bb4;}.cls-191{fill:#846cb8;}.cls-192{fill:#806fb9;}.cls-193{fill:#6b83b3;}.cls-194{fill:#6f7eb7;}.cls-195{fill:#7b76b3;}.cls-196{fill:#7778b6;}.cls-197{fill:#737db1;}.cls-198{fill:#8a68b8;}.cls-199{fill:#8e65b5;}.cls-200{fill:#6487b5;}.cls-201{fill:#469dbb;}.cls-202{fill:#4d97bb;}.cls-203{fill:#5b8db7;}.cls-204{fill:#5492b9;}.cls-205{fill:#21bac0;}.cls-206{fill:#34a9c5;}.cls-207{fill:#20bbba;}.cls-208{fill:#25b8b9;}.cls-209{fill:#2bb2bb;}.cls-210{fill:#39abb2;}.cls-211{fill:#30b0b5;}.cls-212{fill:#39a7bb;}.cls-213{fill:#a754af;}.cls-214{fill:#9265af;}.cls-215{fill:#8a69b4;}.cls-216{fill:#7e73b8;}.cls-217{fill:#856cb7;}.cls-218{fill:#7778b8;}.cls-219{fill:#9e5cac;}.cls-220{fill:#a458ab;}.cls-221{fill:#9b5eb0;}.cls-222{fill:#39a9b3;}.cls-223{fill:#2eb3b2;}.cls-224{fill:#34b0ad;}.cls-225{fill:#27b8b6;}.cls-226{fill:#707db9;}.cls-227{fill:#6b82b8;}.cls-228{fill:#aa53ab;}.cls-229{fill:#4a99bd;}.cls-230{fill:#5194b9;}.cls-231{fill:#439ebf;}.cls-232{fill:#598eba;}.cls-233{fill:#6189ba;}.cls-234{fill:#43a1b8;}.cls-235{fill:#41a4b2;}.cls-236{fill:#995fb1;}.cls-237{fill:#8071b5;}.cls-238{fill:#896ab2;}.cls-239{fill:#6d82b0;}.cls-240{fill:#6687af;}.cls-241{fill:#6c85a7;}.cls-242{fill:#7979ad;}.cls-243{fill:#7280a8;}.cls-244{fill:#8e69ab;}.cls-245{fill:#9364ae;}.cls-246{fill:#618dad;}.cls-247{fill:#5e8db1;}.cls-248{fill:#4a9bb6;}.cls-249{fill:#4f99b4;}.cls-250{fill:#5895ab;}.cls-251{fill:#5495b1;}.cls-252{fill:#21bcb5;}.cls-253{fill:#26bab2;}.cls-254{fill:#2cb5b2;}.cls-255{fill:#3daca6;}.cls-256{fill:#32b3a9;}.cls-257{fill:#40a3b8;}.cls-258{fill:#32b1af;}.cls-259{fill:#40a7ae;}.cls-260{fill:#9a60aa;}.cls-261{fill:#9465a9;}.cls-262{fill:#866eaf;}.cls-263{fill:#7e74b2;}.cls-264{fill:#767bb2;}.cls-265{fill:#3fa8ac;}.cls-266{fill:#39adab;}.cls-267{fill:#28b9ad;}.cls-268{fill:#30b4aa;}.cls-269{fill:#35b2a6;}.cls-270{fill:#22beb0;}.cls-271{fill:#6d82b1;}.cls-272{fill:#6588b4;}.cls-273{fill:#4a9cb6;}.cls-274{fill:#5099b0;}.cls-275{fill:#5793b2;}.cls-276{fill:#5f8db1;}.cls-277{fill:#47a0b0;}.cls-278{fill:#45a5a8;}.cls-279{fill:#8373a9;}.cls-280{fill:#856fae;}.cls-281{fill:#6789a6;}.cls-282{fill:#6887ac;}.cls-283{fill:#7e77a9;}.cls-284{fill:#777ca8;}.cls-285{fill:#886fa9;}.cls-286{fill:#5d91ab;}.cls-287{fill:#618fa5;}.cls-288{fill:#4f9bad;}.cls-289{fill:#5598a5;}.cls-290{fill:#5299a8;}.cls-291{fill:#5b93a5;}.cls-292{fill:#26bcab;}.cls-293{fill:#2cb7ac;}.cls-294{fill:#39afa2;}.cls-295{fill:#41a9a3;}.cls-296{fill:#44a4a9;}.cls-297{fill:#33b4a1;}.cls-298{fill:#2db8a6;}.cls-299{fill:#23bfa9;}.cls-300{fill:#2abaa6;}.cls-301{fill:#509da5;}.cls-302{fill:#5b92ab;}.cls-303{fill:#638caa;}.cls-304{fill:#49a1a6;}.cls-305{fill:#45a5a3;}.cls-306{fill:#4e9da7;}.cls-307{fill:#24c0a3;}.cls-308{fill:#2eb9a1;}</style></defs><title>babylon_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g id="lZQzip.tif"><path class="cls-2" d="M105.41242,102.38161l-.00032,1.63174c-.0627.13341.00024.28369-.05621.41793a11.38311,11.38311,0,0,1-2.01033,5.06153,11.067,11.067,0,0,1-3.3906,3.02011,10.84647,10.84647,0,0,1-4.08857,1.32846c-.1868.06553-.38843-.017-.57433.05755l-1.089-.00025c-.20941-.07879-.43384.01163-.64415-.05713a10.19579,10.19579,0,0,1-3.70134-1.065c-.48065-.24244-.92492-.557-1.38588-.83845-.06063-.037-.09079-.14074-.18466-.10308-.11421.04582-.06434.15491-.06525.2351-.00276.24289.00733.48591.01241.72888-.04373.09358-.13.06517-.20175.06525q-2.00022.00226-4.00042.00105a.2189.2189,0,0,1-.17784-.05013q.00179-12.68058.00359-25.36114c.00007-.49836.00007-.49838.51672-.49839,1.14195,0,2.28413.01292,3.42569-.00811.33035-.00608.43083.06512.428.416-.01821,2.2576-.00931,4.51543-.00931,6.77318v.49616a11.05883,11.05883,0,0,1,5.10888-2.07265c.13193-.05882.28125.00852.4123-.0568l.5892-.02108a2.452,2.452,0,0,1,.76686.00027l.58451.02113c.13295.06326.28351-.00195.417.05717a11.59144,11.59144,0,0,1,3.62542,1.17991,10.5452,10.5452,0,0,1,5.46726,7.37007c.05888.28588.11169.573.16732.85955C105.4121,102.10265,105.3474,102.25077,105.41242,102.38161Z"/><path class="cls-2" d="M34.63653,86.95277l4.29235-.00054c.09161.12769.04478.27327.045.40941.00339,2.27909.00048,4.5582.00786,6.83726.00039.12039-.097.284.08547.36982A10.467,10.467,0,0,1,43.578,92.65287c.17488-.0308.34953-.0629.52429-.09438.12944-.05756.27686.01345.40456-.05657l.59672-.02a2.09239,2.09239,0,0,1,.68969-.00017l.59843.01974c.12693.0712.27387-.00048.4028.05643a11.00511,11.00511,0,0,1,4.67914,1.79236,10.4814,10.4814,0,0,1,4.49119,6.91367c.05776.31192.11043.6248.16546.93723.06769.21176-.0209.43721.05681.64808a2.5436,2.5436,0,0,0,.00035.69962c-.07312.18609.00488.38662-.0549.574a10.76306,10.76306,0,0,1-2.32311,5.73583,10.60091,10.60091,0,0,1-6.22918,3.81747,13.59407,13.59407,0,0,1-2.67368.22263c-.18573-.07349-.38628.00608-.57316-.05551a10.43588,10.43588,0,0,1-5.25691-2.01274c-.22287.18028-.09238.42551-.08856.63086.00576.31021-.07424.41724-.40251.41178-1.18-.01964-2.36055-.00755-3.54089-.00779-.45637-.00009-.45687-.00053-.45688-.45163q-.00017-11.04411-.00007-22.08823c0-1.0005-.00178-2.001.00227-3.00152C34.59038,87.2003,34.54594,87.06672,34.63653,86.95277Z"/><path class="cls-2" d="M70.59875,92.56a11.608,11.608,0,0,1,3.789,1.26288c.427.24032.83354.51681,1.28941.80181a3.2784,3.2784,0,0,0,.01372-1.00883c.02837-.10709.118-.07834.18769-.07842q2.02682-.00267,4.05362-.00136a.21665.21665,0,0,1,.14177.04475l-.00015,19.23937c-1.44837.09646-2.898.03169-4.347.03046-.0119,0-.02376-.04231-.03565-.06486.03551-.3164.15843-.77168-.03968-.91009-.21749-.15194-.50493.23574-.75607.39269a10.241,10.241,0,0,1-3.92419,1.482c-.176.02672-.35093.05994-.52637.09015-.18449.06812-.38468-.01774-.5684.05795l-1.17047,0c-.21022-.07641-.43394.0082-.64534-.05409a9.69788,9.69788,0,0,1-3.54018-.98888,10.61343,10.61343,0,0,1-3.67078-2.958,11.10393,11.10393,0,0,1-2.09314-4.33279c-.093-.37677-.13-.75531-.18841-1.13379-.05411-.13074.01294-.2778-.05476-.40671l.00085-1.71014c.06237-.13445-.00032-.28595.05741-.421a9.69545,9.69545,0,0,1,1.34064-4.07919,10.37686,10.37686,0,0,1,5.04614-4.46406,13.59363,13.59363,0,0,1,2.94821-.79295c.13132-.05309.27845.01255.40795-.05428l.59309-.02042a2.07215,2.07215,0,0,1,.68971,0l.58835.02142C70.31706,92.5682,70.46642,92.50184,70.59875,92.56Z"/><path class="cls-2" d="M136.22286,101.739a10.55646,10.55646,0,0,1,2.44338-5.48159,10.26677,10.26677,0,0,1,6.4419-3.61265c.12549-.01986.2484-.05608.37252-.08468.13471-.057.28572.00589.41964-.057l.659-.02133a1.60255,1.60255,0,0,1,.61285.001l.58664.02047c.13217.06357.28091.00119.41442.05453a11.17161,11.17161,0,0,1,4.92871,1.94918c.12262-.01494.18515.05812.23.157a11.48323,11.48323,0,0,1,2.37081,2.52474,10.21138,10.21138,0,0,1,1.71935,4.44978c.01946.13779.05893.27275.08909.409.05146.13548-.00713.28517.05419.41937l.00014,1.46681c-.06137.13448-.00271.28456-.05466.42026a11.2611,11.2611,0,0,1-1.86152,4.91853,11.06171,11.06171,0,0,1-4.001,3.49915,10.90974,10.90974,0,0,1-3.62934,1.0724c-.21173.06282-.43585-.02183-.64644.05434l-1.01887.00044c-.23463-.08194-.48355.01422-.719-.05762a10.64855,10.64855,0,0,1-9.41034-9.17862c-.06328-.12961.01014-.279-.05913-.40779l-.02026-.43963a6.29627,6.29627,0,0,1-.00059-1.2288l.01948-.44508C136.23691,102.015,136.161,101.8669,136.22286,101.739Z"/><path class="cls-3" d="M108.10551,24.18116A19.04342,19.04342,0,0,1,109.618,19.0384a20.56281,20.56281,0,0,1,3.31319-5.17462c.058-.0676.128-.12492.19239-.187a.58705.58705,0,0,1,.30652-.35745,18.23673,18.23673,0,0,1,1.928-1.783.609.609,0,0,1,.28754-.21982l.63689-.47672c.06835-.11283.201-.138.29477-.21626a19.95434,19.95434,0,0,1,5.77059-2.78765.43228.43228,0,0,0,.09747-.06037c.09611-.08387.20175-.03963.30525-.02284a5.07713,5.07713,0,0,1,.36456,1.6745c.151,1.37575.37846,2.73751.65136,4.09323.06239.30994.12178.61909.19791.96579.2284-.13609.22764-.356.33537-.50349.09127-.125.17341-.26722.36041-.23759.18012.02855.24682.16669.28139.32576a8.05405,8.05405,0,0,1,.20257,3.34968,2.66144,2.66144,0,0,0-.01076.91779,6.59283,6.59283,0,0,1-.13906,1.71245,21.01406,21.01406,0,0,1-.59418,3.3667c-.15548.54323-.2648.61154-.82409.68574a21.8299,21.8299,0,0,0-3.85755.58227,23.657,23.657,0,0,1-2.935.77053c-1.03225.19041-2.07612.31678-3.11833.41641-1.19354.11409-2.38765.20907-3.57118.40622a3.20552,3.20552,0,0,0-1.11469.40294c-.39873.23506-.60487.14073-.71986-.31493-.11921-.47236-.16719-.96034-.30723-1.42885A1.117,1.117,0,0,1,108.10551,24.18116Z"/><path class="cls-2" d="M170.976,92.48275l.58774.02046c.13173.064.28022.001.41332.05454a11.1725,11.1725,0,0,1,4.92872,1.94918c.12263-.01494.18515.05812.23.157a11.48038,11.48038,0,0,1,2.3709,2.52482,10.21276,10.21276,0,0,1,1.71959,4.44975,1.54145,1.54145,0,0,0,.08058.25287.22939.22939,0,0,1,.05237.16618.73794.73794,0,0,0,.00993.40828q.002,5.17333.00394,10.34666c-.11124.09873-.2459.05-.36866.05044-1.116.00426-2.23216-.009-3.34783.00986-.31466.00533-.408-.0757-.40676-.3992.01219-3.15484.00781-6.30975.00589-9.46463a1.19973,1.19973,0,0,0-.03-.45689,6.52161,6.52161,0,0,0-3.58673-5.22192,6.08072,6.08072,0,0,0-2.17483-.68356c-.15521-.07359-.32837.006-.48484-.0568l-.61966-.00051c-.155.06482-.32791-.01827-.48157.058a4.26881,4.26881,0,0,0-1.75677.42321,6.52565,6.52565,0,0,0-3.73969,3.95482,1.25874,1.25874,0,0,0-.03719.22353,1.01223,1.01223,0,0,0-.03018.41834q-.00264,5.38994-.00155,10.77989c0,.41716-.00091.418-.4118.41816-1.20657.00043-2.41328-.00941-3.61963.00708-.29077.004-.36373-.079-.36335-.36573q.01226-9.29764-.00054-18.59531c-.00044-.30609.08376-.38661.38565-.38242q1.82877.02544,3.658-.0003c.2999-.00433.38945.09348.35491.37275a2.0816,2.0816,0,0,0,.00108.42292c.00653.07974.03607.155.14608.11113a12.10607,12.10607,0,0,1,1.51035-.93027.21345.21345,0,0,1,.22648-.09535c.08646-.08622.24858.00183.31277-.13571a.20878.20878,0,0,1,.22666-.09361l1.54193-.45154a.20231.20231,0,0,1,.2437-.04837l.75951-.121c.13151-.05807.28029.0096.4107-.05644l.59077-.02112A2.04541,2.04541,0,0,1,170.976,92.48275Z"/><path class="cls-2" d="M110.80912,119.22141q1.101-2.6006,2.202-5.20118c.20717-.48933.41254-.97944.62317-1.46727a.44549.44549,0,0,0-.01-.40023c-.5558-1.17222-1.0978-2.351-1.65525-3.52245-.54807-1.15167-1.1181-2.293-1.66239-3.4464-.53858-1.14134-1.04855-2.29617-1.58682-3.43768-.5224-1.10784-1.10178-2.19026-1.58832-3.31322-.51253-1.183-1.112-2.3238-1.6277-3.50481-.2036-.46627-.45856-.91047-.63115-1.40686,1.52426,0,3.02608.00276,4.52787-.00345a.3571.3571,0,0,1,.38162.23425q2.01563,4.32179,4.04609,8.63667c.67916,1.44332,1.37116,2.88058,2.05344,4.32246a.34623.34623,0,0,0,.135.181c.398-.93367.79593-1.86114,1.18884-2.79074.46761-1.10636.9283-2.21566,1.39686-3.32163.38072-.89869.77272-1.79262,1.1523-2.69179.46721-1.10675.92695-2.21666,1.38944-3.3254.1476-.35384.30266-.705.43619-1.06407a.25849.25849,0,0,1,.29272-.17794c1.42488.00128,2.84979.00606,4.2746-.00277.388-.00241.18142.225.13284.34162-.58851,1.41215-1.18988,2.81893-1.78593,4.22794q-1.64718,3.89383-3.29287,7.78828c-.96233,2.27075-1.93428,4.53744-2.89327,6.80959-.93871,2.22409-1.86642,4.45281-2.799,6.67951-.07529.07089-.16938.04616-.25636.04625-1.38334.00146-2.76668.00417-4.15-.005C110.99384,119.40531,110.74847,119.52949,110.80912,119.22141Z"/><path class="cls-4" d="M104.40436,15.7113a9.72922,9.72922,0,0,1,1.07941,1.77089c.37952,2.434.8474,4.8511,1.38458,7.2551.23236,1.03988.52955,2.06343.77838,3.0983a1.06754,1.06754,0,0,0,1.00368.90079c1.0857.12054,2.14446.39755,3.22979.51729.867.09565,1.73753.13786,2.60645.19994,1.11068.07934,2.22544.00787,3.33963.05847a11.36973,11.36973,0,0,0,2.14325-.17673c1.22033-.179,2.45-.2313,3.67574-.3382.75336-.0657,1.5106-.09005,2.25855-.217a1.32551,1.32551,0,0,0,.65474-.30225,7.85559,7.85559,0,0,0,2.17918-2.99069,8.74582,8.74582,0,0,0,.2993-1.73971,8.56519,8.56519,0,0,0-.20349-3.05462c-.54855-3.39645-1.29737-6.75407-1.98865-10.12282a3.84919,3.84919,0,0,0-.618-1.75573,1.91816,1.91816,0,0,1-.24025-1.03876.7167.7167,0,0,0-.38049-.61708c.08346-.097.21035-.04319.30857-.0889.12731-.0632.27536.0134.40122-.05951l.29225-.01824c.31089-.07614.633.02978.94318-.05835l1.49352.00081c.31346.0851.63795-.01643.95214.05632l-.00682.02572a.62359.62359,0,0,1,.1485.34794c.54487,2.27087,1.001,4.5644,1.616,6.81618.31761,1.163.601,2.33124.86147,3.50572a5.991,5.991,0,0,1,.19829,2.43576.67474.67474,0,0,0,.0383.3791,2.07008,2.07008,0,0,1,.07913,1.1021,20.78858,20.78858,0,0,0-.13777,2.16187,9.80274,9.80274,0,0,1-2.78369,6.72779,10.86767,10.86767,0,0,1-1.92378,1.646,2.58061,2.58061,0,0,1-.94221.30048,10.54388,10.54388,0,0,0-1.78057.14844.16694.16694,0,0,1-.0762.0084c-1.00624-.136-2.008.21928-3.01777.02143a1.76573,1.76573,0,0,0-.83694.06885,3.38971,3.38971,0,0,1-1.29915.03958,1.25374,1.25374,0,0,0-.79279-.01767.47864.47864,0,0,1-.34034-.00558,2.832,2.832,0,0,0-1.29419-.07036,9.74052,9.74052,0,0,1-3.95844-.27935c-1.28946-.42113-2.648-.47565-3.92582-.91149a5.72982,5.72982,0,0,1-2.86508-1.91321,1.444,1.444,0,0,1-.24188-.43406,43.99708,43.99708,0,0,1-2.02107-8.83215c-.141-1.40228-.29239-2.80366-.4259-4.20676C104.25612,15.92726,104.20252,15.76342,104.40436,15.7113Z"/><path class="cls-5" d="M125.60614,7.15852c.334-.04964.44222.10351.46852.42956a2.73972,2.73972,0,0,0,.533,1.63842c.32663.39387.26146.948.36642,1.429.39118,1.79269.75765,3.591,1.11329,5.39114.36267,1.83589.67805,3.68076,1.009,5.52239a9.689,9.689,0,0,1-.15082,3.56582,5.94459,5.94459,0,0,1-1.47962,2.61c-.082.09806-.19606.1715-.26862.275a2.7822,2.7822,0,0,1-2.32588,1.01306c-1.67713.12281-3.35476.2187-5.02712.4294a10.09409,10.09409,0,0,1-2.58783.12679c-.726-.09453-1.4719.02294-2.21141-.013a28.35478,28.35478,0,0,1-4.97651-.51966c-.60516-.13825-1.23554-.137-1.8369-.32228a.8218.8218,0,0,1-.61118-.609c-.50159-1.75511-.92218-3.52925-1.27681-5.31937-.22026-1.1118-.44565-2.22266-.65441-3.33663-.10541-.56253-.18158-1.13065-.26442-1.6972a.30353.30353,0,0,1,.0589-.28981,27.37527,27.37527,0,0,1,1.3355,2.69419c.03969.10518.16076.17715.12746.31212a32.58288,32.58288,0,0,1,.948,3.76744c.15772.20248.05231.459.13885.67607a6.49762,6.49762,0,0,1,.31029,1.37543c.09965.445.20245.49741.59626.27425a5.34532,5.34532,0,0,1,1.75183-.50721,14.50255,14.50255,0,0,1,1.60607-.17717,5.27,5.27,0,0,1,1.29524-.13348,1.817,1.817,0,0,0,.97131-.13538,2.02351,2.02351,0,0,1,.7164-.08442,14.13442,14.13442,0,0,0,3.63991-.71728,19.1927,19.1927,0,0,1,2.241-.57,9.82731,9.82731,0,0,1,1.05-.11654,2.6934,2.6934,0,0,0,1.16143-.146c.01119-.00627.02429-.01878.034-.01669.91757.19757.891-.55369,1.02257-1.07177a11.68384,11.68384,0,0,0,.36774-2.10232,12.89731,12.89731,0,0,1,.17056-1.56984c.15435-.79639-.04244-1.5773.136-2.37582a7.18116,7.18116,0,0,0-.27341-2.862.23041.23041,0,0,0-.177-.18067c-.11082-.03782-.1466.05865-.21013.1212-.15509.15269-.11749.39058-.26066.54584-.06535.07086-.08659.22694-.20915.181a.33072.33072,0,0,1-.16927-.23691c-.07681-.84944-.3084-1.67088-.44584-2.50925-.09208-.56173-.13436-1.1322-.24168-1.686a9.44422,9.44422,0,0,0-.3478-2.02733,1.38587,1.38587,0,0,1-.02829-.45785l.01093-.04942c.7478-.16168,1.49455-.32854,2.24412-.48156A5.36662,5.36662,0,0,1,125.60614,7.15852Z"/><path class="cls-6" d="M120.1343,32.65112a6.38178,6.38178,0,0,0,1.51764-.12865c.52566-.15559,1.08742.09262,1.639.05314a1.22157,1.22157,0,0,0,.66694-.11847.56742.56742,0,0,1,.37383-.02619,2.20881,2.20881,0,0,0,1.38392-.07044.746.746,0,0,1,.41369.0198.74566.74566,0,0,0,.625-.058c.18866-.1304.38213.05149.59393.0033a4.068,4.068,0,0,0,1.74195-1.06385,12.58324,12.58324,0,0,0,2.67706-3.41047,7.4936,7.4936,0,0,0,.69578-2.33112,7.57262,7.57262,0,0,0,.19148-1.57514,6.34588,6.34588,0,0,0,.05565-1.83495c-.078-.24927.19046-.509.14126-.807a2.23962,2.23962,0,0,0-.13041-.81843c-.12336-.22556.01836-.49877.044-.75126a5.74362,5.74362,0,0,0-.16118-1.56459,19.44289,19.44289,0,0,0-.61712-2.83256c-.28438-.85129-.48483-1.71675-.69585-2.58192-.44076-1.80708-.85644-3.62029-1.27906-5.43176a1.881,1.881,0,0,1-.0215-.30615A15.98507,15.98507,0,0,1,132.845,7.479a.50148.50148,0,0,1,.13081.23158,49.688,49.688,0,0,1,2.01791,8.4048,18.21828,18.21828,0,0,1,.27926,2.63092.76591.76591,0,0,0,.10263.36755.50529.50529,0,0,1,.05306.40814,2.02686,2.02686,0,0,0-.08194.91352,9.35413,9.35413,0,0,0,.10765,2.02284.241.241,0,0,1,.00743.11458,33.91307,33.91307,0,0,1-1.62343,7.27583,9.70686,9.70686,0,0,1-1.38024,2.07526,9.48749,9.48749,0,0,1-2.71467,2.467,4.50315,4.50315,0,0,1-1.35042.53045,3.08355,3.08355,0,0,1-1.276.07831,1.11311,1.11311,0,0,0-.74571.13083.56453.56453,0,0,1-.41165.03573,3.51367,3.51367,0,0,0-1.73081.059,3.571,3.571,0,0,1-2.00817-.04747,4.346,4.346,0,0,0-1.90189-.05094.879.879,0,0,1-.59233-.04171.75263.75263,0,0,0-.40915-.09023c-1.2409.05239-2.46072-.201-3.69449-.25138a2.50064,2.50064,0,0,0-.30847-.05935,19.87577,19.87577,0,0,1-5.66911-1.2823,1.31418,1.31418,0,0,1-.3671-.20423.56291.56291,0,0,0-.3023-.17487,6.69961,6.69961,0,0,1-3.33281-4.03482c-.38037-1.32939-.76285-2.65991-1.0232-4.016-.18022-.93879-.2569-1.89952-.38408-2.84985-.09-.67233-.13218-1.349-.20538-2.02275a.45857.45857,0,0,1,.07613-.39964c.2335.01019.24471.19.25938.35439.10708,1.2.2803,2.39105.45046,3.58347a26.43026,26.43026,0,0,0,1.07152,4.44272,7.53319,7.53319,0,0,0,1.2159,2.51222,6.109,6.109,0,0,0,3.85119,2.11473.40553.40553,0,0,0,.19119-.00021,6.8954,6.8954,0,0,1,2.77067.03242,44.72289,44.72289,0,0,0,5.25789.1827.97314.97314,0,0,0,.54036-.17747C119.84031,32.65729,119.96677,32.5574,120.1343,32.65112Z"/><path class="cls-7" d="M103.34009,72.70127c-.83063-.32459-1.63712-.70182-2.44339-1.0828A33.43745,33.43745,0,0,1,97.641,69.97632a8.83717,8.83717,0,0,1-.46461-2.73078,8.47071,8.47071,0,0,0-.08149-1.56152,5.15678,5.15678,0,0,1,.06829-1.14823.67531.67531,0,0,0-.376-.65364,14.08384,14.08384,0,0,1-2.37946-1.68747,3.94162,3.94162,0,0,0-.9147-.56584,20.74024,20.74024,0,0,0-2.05258-.95975,3.20772,3.20772,0,0,1-.75-.3885c-.16453-.11534-.29447-.14228-.38073.0943-.07678.21052-.23739.20568-.40857.1135A4.54453,4.54453,0,0,1,89.438,60.213a33.71361,33.71361,0,0,0-4.58-2.52155c-.54052-.26638-1.07543-.54568-1.60021-.84342a.63617.63617,0,0,1-.36347-.46453.82455.82455,0,0,0-.39825-.54009,14.46986,14.46986,0,0,1-2.0368-1.44187.2658.2658,0,0,0-.37837-.01093c-.44554.28888-.62066.24055-.91818-.22906-.04451-.15711-.01573-.33414-.11628-.4753a.46367.46367,0,0,1,.10826-.67732,1.29208,1.29208,0,0,0,.50413-.96574.65162.65162,0,0,1,.0479-.14416c.14958-.2654.17024-.62573.53679-.73228a2.58723,2.58723,0,0,1,1.397.66306c.34593.28579.71493.54391,1.07586.81143a1.16594,1.16594,0,0,0,.70164.2767,1.23,1.23,0,0,1,.63253.26328A20.46455,20.46455,0,0,0,88.174,55.156c.59193.21194,1.1727.45456,1.76515.66583a.53615.53615,0,0,1,.29389.17513,2.24633,2.24633,0,0,0,1.54488.84813c.89211.21477,1.71631.60142,2.57578.89628,1.5427.52925,3.01121,1.23918,4.51994,1.85118a8.569,8.569,0,0,0,2.52622.45256,3.6449,3.6449,0,0,1,.82979.15793c.18193.06023.36873.12644.43906.33752-.13873.2345-.34989.10311-.5124.07185a2.45059,2.45059,0,0,0-1.10328.04482,1.205,1.205,0,0,0-.80807,1.33007.50453.50453,0,0,0,.2601.31769c.46964.28853.88546.65331,1.35906.93847.45356.27309.51725.56049.21856.99355a4.22715,4.22715,0,0,0-.72292,2.42157,7.94336,7.94336,0,0,1-.25423,1.66848,1.28623,1.28623,0,0,0,.42541,1.38309,4.81378,4.81378,0,0,1,.59991.69914,1.615,1.615,0,0,1,.388,1.09893.50924.50924,0,0,0,.05627.33414.84151.84151,0,0,0,.46643.2233,1.0586,1.0586,0,0,1,.58077.32266C103.696,72.71666,103.66373,72.75239,103.34009,72.70127Z"/><path class="cls-2" d="M128.7694,86.95128l4.294.002c.09292.11323.048.24722.048.37065q.00359,12.56722.002,25.13443c0,.40628-.00109.40683-.42258.40694-1.19347.0003-2.387-.00829-3.58031.00619-.288.0035-.39377-.05181-.39339-.37336q.01462-12.60569.00933-25.2114C128.72653,87.17467,128.69189,87.05481,128.7694,86.95128Z"/><path class="cls-8" d="M79.22829,54.13966c.35955.44678.4117.45726.86273.09658a.2307.2307,0,0,1,.365.01476,12.19076,12.19076,0,0,0,2.11086,1.5163c.17055.12085.37583.24107.38569.45216.02046.438.3492.5399.64969.70063a58.52889,58.52889,0,0,1,6.28747,3.4531c.20324.14307.34382.19342.35951-.14292.01249-.2677.17974-.25488.34171-.13515a15.89082,15.89082,0,0,0,1.89472.90954,10.26468,10.26468,0,0,1,2.37251,1.44961,9.00619,9.00619,0,0,0,1.726,1.19833c.69444.412.81447.59681.64272,1.38551a1.94865,1.94865,0,0,0,.00633.871,2.45465,2.45465,0,0,1,.03857,1.09691,2.17314,2.17314,0,0,0,.07959,1.10055c.16848.53806.03545,1.13771.33748,1.65174.02765.047-.02993.14416-.04794.218-.76852-.38787-1.53152-.78491-2.283-1.20629-1.67951-.94172-3.30679-1.9678-4.93093-2.99949-1.45911-.92685-2.865-1.93088-4.25461-2.95791-1.2152-.89816-2.41793-1.81541-3.55793-2.80577-1.2359-1.07366-2.44176-2.182-3.6354-3.30493a24.86359,24.86359,0,0,1-3.06066-3.57054c.05134-.20435.08335-.2423.23629-.15312a4.828,4.828,0,0,0,1.43812.511.52668.52668,0,0,1,.23813.12122,1.60359,1.60359,0,0,0,1.19108.43817A.29762.29762,0,0,1,79.22829,54.13966Z"/><path class="cls-9" d="M142.40007,12.61785a13.48494,13.48494,0,0,1,1.614,1.7162,3.12216,3.12216,0,0,1,.6203.826.83243.83243,0,0,1,.10336.40486,29.93735,29.93735,0,0,1-1.018,9.32673,35.60688,35.60688,0,0,1-2.89424,7.23567,28.89817,28.89817,0,0,1-3.46014,5.16935,15.18468,15.18468,0,0,1-4.90338,3.95859,7.14585,7.14585,0,0,1-2.633.66228c-1.485.11313-2.97374.0919-4.46119.07893-1.64028-.0143-3.27788-.10843-4.91429-.21955-.15389-.01045-.30791-.0098-.46183-.0077a1.39138,1.39138,0,0,1-.92223-.19241.46476.46476,0,0,0-.21986-.06594,5.42163,5.42163,0,0,1-1.53577-.45045,7.89493,7.89493,0,0,0-1.96512-.51987,23.65433,23.65433,0,0,1-5.86638-1.81751,11.52866,11.52866,0,0,1-1.30791-.73542c-.15028-.0924-.31543-.1872-.30243-.407.22846-.127.4242-.00546.61067.097a23.4676,23.4676,0,0,0,3.85491,1.62176,3.38848,3.38848,0,0,0,1.09277.18276,15.30779,15.30779,0,0,1,1.92664.33265,2.34707,2.34707,0,0,0,1.34955-.14457,2.16867,2.16867,0,0,1,.8951-.19275c.64091.01848,1.27227.13354,1.91353.16926,1.38226.077,2.76328.13827,4.14817.1429.89634.003,1.79334.13281,2.68912.06411,1.11215-.08529,2.23-.01911,3.33935-.15465A7.78215,7.78215,0,0,0,133.002,38.427a15.81364,15.81364,0,0,0,4.35407-4.18769,29.11489,29.11489,0,0,0,5.03734-12.19864,23.78845,23.78845,0,0,0,.35491-4.89843,38.02859,38.02859,0,0,0-.4891-3.92815C142.22722,12.99725,142.18344,12.77648,142.40007,12.61785Z"/><path class="cls-10" d="M136.69742,8.77316a14.21436,14.21436,0,0,1,2.6957,1.46552.45578.45578,0,0,1,.08343.17234c.32548,1.92136,1.0284,3.76048,1.21959,5.71318a27.30971,27.30971,0,0,1,.24759,3.79337A23.71647,23.71647,0,0,1,140.062,25.414a23.80923,23.80923,0,0,1-4.3702,8.75267,12.24255,12.24255,0,0,1-4.75074,3.64252,7.18317,7.18317,0,0,1-2.47409.50461c-1.58774.07127-3.17507.15184-4.76461.13975-.69139-.00525-1.38075-.0874-2.07394-.08812a1.84631,1.84631,0,0,1-.74621-.172,2.064,2.064,0,0,0-.97192-.18471,14.85159,14.85159,0,0,1-2.817-.35447c-.36107-.0828-.73942-.0556-1.107-.11906a35.14306,35.14306,0,0,1-5.67583-1.34769c-.67579-.23653-1.21766-.70464-1.86969-.97131-.51207-.44135-1.11846-.76242-1.59875-1.24557a7.96692,7.96692,0,0,1-1.15038-1.32454.44662.44662,0,0,1-.09218-.395c.0743-.14146.18785-.116.29474-.05686a5.07379,5.07379,0,0,1,1.2102.797,7.99059,7.99059,0,0,0,3.52791,2.01639,1.39959,1.39959,0,0,0,.45393.06736.25708.25708,0,0,1,.1095.05665,3.42377,3.42377,0,0,0,1.26833.41414,44.22112,44.22112,0,0,0,5.62021.89464c1.5407.14345,3.0661.40147,4.623.45061a47.21536,47.21536,0,0,0,6.10616-.183,6.87517,6.87517,0,0,0,3.20539-1.32462,14.68648,14.68648,0,0,0,5.08011-6.533,17.30226,17.30226,0,0,0,1.344-5.89343c.05562-.88241.16533-1.76392.14232-2.64783a35.49512,35.49512,0,0,0-.75113-6.64016c-.31414-1.44484-.75379-2.85254-1.1487-4.27388C136.62934,9.1933,136.52481,8.97667,136.69742,8.77316Z"/><path class="cls-11" d="M120.90466,38.11948a4.59279,4.59279,0,0,0,1.21038.15815c.86994-.01815,1.73663.13085,2.6078.07151,1.04812-.07139,2.09746-.06515,3.147-.08059a8.4591,8.4591,0,0,0,5.07176-1.69475,15.41812,15.41812,0,0,0,4.1368-4.52523,27.46938,27.46938,0,0,0,2.57869-5.64,23.77878,23.77878,0,0,0,.983-4.4755,16.45488,16.45488,0,0,0,.204-2.39583,34.55309,34.55309,0,0,0-.55742-5.23756c-.19506-1.046-.58713-2.0343-.77952-3.07542a3.55363,3.55363,0,0,1-.11395-.98561,16.19331,16.19331,0,0,1,3.00695,2.37917,3.2753,3.2753,0,0,0,.11807,1.54061,21.12739,21.12739,0,0,1,.33107,4.806,28.53027,28.53027,0,0,1-1.53383,7.8049,29.71264,29.71264,0,0,1-3.00979,6.24523,18.248,18.248,0,0,1-3.00861,3.76365,11.13691,11.13691,0,0,1-4.89267,2.90377,6.29249,6.29249,0,0,1-1.43458.19727c-1.37172-.01-2.74177.18135-4.1098.077-1.115-.085-2.23-.00474-3.34068-.07709-1.30966-.08531-2.62432-.11695-3.92712-.2964a.82473.82473,0,0,0-.59637-.30008,44.4847,44.4847,0,0,1-4.97073-1.103,2.00012,2.00012,0,0,1-.60752-.23107c-.15143-.09259-.27477-.2048-.13612-.40094a.72165.72165,0,0,1,.56059-.00062c.9515.21,1.90057.43047,2.85812.61341.36816.07033.74035.06535,1.1088.113a.29419.29419,0,0,0,.189-.02085c.61733-.38027,1.27194-.14593,1.91247-.11665a20.67854,20.67854,0,0,0,2.34471-.00586A3.37271,3.37271,0,0,1,120.90466,38.11948Z"/><path class="cls-12" d="M103.57168,72.393c-.32184-.24194-.76469-.20157-1.07856-.46212-.0928-.59992-.00825-.6786.56354-.52367.08664.02348.17391.04445.26081.06683.1864.048.2846-.00283.31137-.21294.111-.87076.53558-1.65205.72824-2.50077a.28672.28672,0,0,1,.29772-.25254c.19583.0164.2235.1819.24019.34056.00538.05105-.00194.103.00309.1536.014.1408-.10938.33042.09433.40678a.49906.49906,0,0,0,.57477-.09782,1.24,1.24,0,0,1,.88792-.389,1.00218,1.00218,0,0,0,.50867-.24574c.6278-.50684,1.28668-.97346,1.93005-1.45964.74578-.56358,1.49655-1.122,2.22744-1.7054a8.60687,8.60687,0,0,1,1.05635-.767c.38111-.21947.39572-.46259.03886-.74032-.40479-.315-.80951-.62924-1.19027-.97358a.5836.5836,0,0,1-.25881-.408c.03-.15775.155-.22481.27891-.29315a.74582.74582,0,0,1,.71764.16675,16.38552,16.38552,0,0,1,1.61072,1.23028.40822.40822,0,0,0,.15181.11346c.87366.28791,1.66947.75,2.50706,1.1184a6.22362,6.22362,0,0,0,1.81591.56985.46712.46712,0,0,1,.43017.62711c-.02656.11375-.10114.20642-.13451.31685a.61968.61968,0,0,1-.16442.25674,17.28919,17.28919,0,0,1-1.85563,1.54729c-1.22158.73238-2.33765,1.61933-3.50552,2.4303a14.362,14.362,0,0,1-3.41307,1.97371,3.62208,3.62208,0,0,0-1.65361,1.26619.5305.5305,0,0,1-.50961.275,15.80776,15.80776,0,0,1-2.1755-.81795,6.0907,6.0907,0,0,1-1.28914-.57558C103.59822,72.68233,103.7507,72.535,103.57168,72.393Z"/><path class="cls-13" d="M136.69742,8.77316a7.82984,7.82984,0,0,0,.50587,1.99784,34.88882,34.88882,0,0,1,1.08788,4.72767c.12928.879.21759,1.7678.28267,2.65907a20.88063,20.88063,0,0,1,.11719,2.71373,27.25263,27.25263,0,0,1-.69478,5.83083,18.77469,18.77469,0,0,1-1.66285,3.9533,13.56122,13.56122,0,0,1-1.4845,2.27488,14.27748,14.27748,0,0,1-2.69851,2.48827,7.72612,7.72612,0,0,1-4.23116,1.48914c-1.50756.0591-3.01363.16174-4.52264.12776a15.98027,15.98027,0,0,1-3.01449-.18016c-1.5243-.33169-3.08218-.30792-4.61-.61778-1.11509-.22615-2.25578-.38308-3.38242-.586-.33682-.06068-.65058-.21584-.99617-.25858a.2807.2807,0,0,1-.27235-.27737c.06083-.21.22161-.11914.34211-.10144q2.546.37405,5.10281.6636c.40593.04655.81782.03961,1.22667.07736a1.92914,1.92914,0,0,0,.93-.19767c.09868.02591.15051.14128.26822.1349.62743-.03405,1.25255.09338,1.8796.03347a3.83828,3.83828,0,0,1,.80679-.01844,24.918,24.918,0,0,0,3.38405.05673c.83054-.01609,1.66271-.09366,2.49366-.14318a6.80616,6.80616,0,0,0,1.55634-.20228,8.78292,8.78292,0,0,0,3.43676-2.05583c.42479-.3897.82317-.80927,1.21988-1.2293A6.70621,6.70621,0,0,0,135.2198,29.452a28.81233,28.81233,0,0,0,1.29992-6.51405,33.26675,33.26675,0,0,0-.05988-4.83817,38.233,38.233,0,0,0-1.93276-9.24093c-.10169-.3107-.32829-.62677-.14153-.98813A18.36523,18.36523,0,0,1,136.69742,8.77316Z"/><path class="cls-14" d="M107.88567,37.58044a4.88922,4.88922,0,0,0,1.70638,1.07067,21.11875,21.11875,0,0,0,4.04608,1.4196c.94379.21238,1.9021.36589,2.8363.61243a3.24543,3.24543,0,0,1,1.2041.43323c.37215.27847.87317.15874,1.28652.31677a10.83015,10.83015,0,0,0,3.06813.31228,59.5159,59.5159,0,0,0,6.25651.13492,11.93408,11.93408,0,0,0,3.07535-.31255,7.78777,7.78777,0,0,0,2.04512-.92869,16.12508,16.12508,0,0,0,2.97282-2.40721,25.57575,25.57575,0,0,0,2.14975-2.59223,27.33583,27.33583,0,0,0,1.81613-2.83937,36.16541,36.16541,0,0,0,1.68174-3.40353,29.99814,29.99814,0,0,0,1.40915-3.87671,30.41675,30.41675,0,0,0,1.04545-5.16361,24.07754,24.07754,0,0,0,.14838-2.48292c-.00775-.90442-.0001-1.809.00084-2.71345a11.5173,11.5173,0,0,1,.91542,1.25159.20678.20678,0,0,1,.07913.16825,17.0005,17.0005,0,0,1-.086,2.83832,31.19139,31.19139,0,0,1-.41736,3.27895,37.32673,37.32673,0,0,1-1.68239,6.03414A36.19168,36.19168,0,0,1,140.97,34.024a28.53852,28.53852,0,0,1-3.618,5.10692,14.29922,14.29922,0,0,1-4.445,3.49744,6.95075,6.95075,0,0,1-2.85246.6972c-1.03784.027-2.07672.09239-3.11343.05245-1.57375-.06064-3.14811-.10794-4.71817-.27085-1.22315-.12691-2.45235-.20024-3.66373-.42056-.65494-.11912-1.29957-.29214-1.94416-.46013a.577.577,0,0,1-.29162-.17829.497.497,0,0,0-.40532-.255,9.837,9.837,0,0,1-1.71025-.43629,21.07741,21.07741,0,0,1-6.67215-3.13787,20.58954,20.58954,0,0,1-2.763-2.76113.62885.62885,0,0,1-.23213-.544c.26974-.13867.39625.09383.5317.232a22.55314,22.55314,0,0,0,2.0488,1.8916,2.14474,2.14474,0,0,0,.38423.24814A1.00664,1.00664,0,0,1,107.88567,37.58044Z"/><path class="cls-15" d="M146.40217,18.02018l.35708.6233c.12143.0401.09686.13789.09035.22855l.403,1.06605a4.20541,4.20541,0,0,1-.07476,1.44719A35.69489,35.69489,0,0,1,143.34637,33.502c-.55665,1.06619-1.14052,2.1221-1.79854,3.13453a32.45482,32.45482,0,0,1-3.65764,4.69265,13.18608,13.18608,0,0,1-5.71823,3.88944,7.66226,7.66226,0,0,1-2.04954.3098c-1.32031.02436-2.63926.08715-3.96028.1023a46.41328,46.41328,0,0,1-6.96116-.56232,10.33953,10.33953,0,0,1-1.98439-.40584.94674.94674,0,0,1-.50427-.25532.77586.77586,0,0,0-.66629-.49471c-.27141-.05715-.60233-.09659-.60945-.49984a4.28146,4.28146,0,0,1,1.00356-.26032c.94346.1892,1.8853.39468,2.84218.50043q1.87179.20685,3.74752.38043a16.58352,16.58352,0,0,0,1.76319.10077,27.56619,27.56619,0,0,0,3.37586-.01085,9.19709,9.19709,0,0,1,1.57684-.02,7.95344,7.95344,0,0,0,5.14872-1.83418,24.26924,24.26924,0,0,0,5.56139-6.222,35.8574,35.8574,0,0,0,3.81839-7.74542,34.26946,34.26946,0,0,0,1.79874-7.74236,15.46379,15.46379,0,0,0,.15263-2.1076C146.2216,18.29007,146.2084,18.10825,146.40217,18.02018Z"/><path class="cls-16" d="M134.38555,7.87075a17.10437,17.10437,0,0,0,.6488,2.20209,42.39188,42.39188,0,0,1,1.2854,5.70263,37.27131,37.27131,0,0,1,.37471,6.14779,25.43922,25.43922,0,0,1-.56921,4.54341,26.38461,26.38461,0,0,1-1.27153,4.29165,4.907,4.907,0,0,1-1.00191,1.43776,11.65417,11.65417,0,0,1-3.52481,2.8643,7.23923,7.23923,0,0,1-2.89689.69248c-1.6493.07855-3.29791.18278-4.947.12089-1.14556-.043-2.29053-.03577-3.43549-.06307-.166-.004-.31936-.00084-.3-.23283a.3586.3586,0,0,1,.2412-.10419c-1.0197-.129-2.01157-.13571-2.99473-.24575-.22887-.02561-.456-.06269-.685-.08692-.12533-.01325-.26238-.02359-.299-.1864a.23531.23531,0,0,1,.17622-.21013c.12526-.06836.28414.01015.40282-.09084a19.76312,19.76312,0,0,1,2.51409.18613,9.71547,9.71547,0,0,0,1.21073.04455c.03828.00285.082-.01146.1147.0023.78444.32984,1.59014-.04531,2.38151.07132.13865.02043.294-.00905.405.08717a.83527.83527,0,0,0,.61654.14842c.23086-.00337.4619.00312.69271-.00169a2.843,2.843,0,0,0,.95113-.16487,2.28811,2.28811,0,0,1,1.43194.01338c.123.03807.24276.11954.36436.0379a1.51783,1.51783,0,0,1,1.39357-.09046.27369.27369,0,0,0,.14543.01189,7.68861,7.68861,0,0,0,2.64236-1.20681,12.47917,12.47917,0,0,0,3.14478-3.70567,10.02531,10.02531,0,0,0,.92631-2.83265c.26474-1.076.40945-2.17446.58978-3.26642.07284-.44115-.11924-.95669.2544-1.35152.06555-.06927.00218-.19824-.0514-.2889a.71217.71217,0,0,1-.08266-.44632,11.94481,11.94481,0,0,0-.00578-1.55951c-.01569-.524.01749-1.04063-.03434-1.57546A45.38392,45.38392,0,0,0,134.1761,12.307c-.37363-1.52253-.85675-3.01818-1.288-4.52668A2.16709,2.16709,0,0,1,132.845,7.479,9.28381,9.28381,0,0,1,134.38555,7.87075Z"/><path class="cls-17" d="M146.40217,18.02017a.83957.83957,0,0,0-.07545.48653,24.43214,24.43214,0,0,1-.36172,3.57166,30.34962,30.34962,0,0,1-.82279,3.84972,30.41932,30.41932,0,0,1-1.12158,3.33812c-.43008,1.07616-.86055,2.15237-1.37821,3.18829a38.30493,38.30493,0,0,1-2.73659,4.59542,25.51091,25.51091,0,0,1-3.87119,4.44641,12.94028,12.94028,0,0,1-2.62947,1.83244,7.40629,7.40629,0,0,1-3.86923.87207c-.924-.03728-1.84.11383-2.7634.0822-1.72872-.05921-3.45522-.09123-5.18022-.2883-1.55726-.1779-3.11788-.30817-4.65312-.63837a1.17762,1.17762,0,0,1-.5026-.15339c.04939-.23758-.13689-.23728-.27986-.26875a26.8308,26.8308,0,0,1-3.135-.9114,22.52186,22.52186,0,0,1-4.70418-2.246c-.13126-.08408-.31288-.14481-.27879-.36274.19881-.09.34881.03527.49432.12831a13.42536,13.42536,0,0,0,3.86889,1.75183c1.09646.28053,2.19254.60163,3.31449.79786.25125.04394.41494-.16671.6431-.12167a2.68655,2.68655,0,0,0,1.15236.36711,27.04228,27.04228,0,0,0,4.6463.64792c1.24785.10165,2.49529.1673,3.74419.238,1.026.05811,2.051.07791,3.07134.03737a10.64265,10.64265,0,0,0,2.326-.159,9.4743,9.4743,0,0,0,2.56019-1.10276,14.8314,14.8314,0,0,0,3.13769-2.62639,28.28851,28.28851,0,0,0,2.79982-3.63554,38.61212,38.61212,0,0,0,2.59542-4.72434,30.88875,30.88875,0,0,0,1.47885-3.85522,36.85593,36.85593,0,0,0,1.10168-4.21907,30.99759,30.99759,0,0,0,.444-3.33018c.08044-1.02067.15412-2.03811.14146-3.06155.09716-.02738.11878.04239.14189.11026Z"/><path class="cls-18" d="M116.74475,44.358a5.1833,5.1833,0,0,0,1.737.52215c.7304.04074,1.43451.22642,2.15995.28081.8883.06662,1.76484.26653,2.65892.27123a7.257,7.257,0,0,1,1.52068.14476c.22517.04927.423-.07709.64424-.06883.46142.0172.92409.01255,1.386.00372,1.13913-.02178,2.27979-.02076,3.4168-.08387a9.224,9.224,0,0,0,5.25782-2.08835c.54263-.42526,1.05222-.88882,1.59355-1.31634A12.65237,12.65237,0,0,0,138.658,40.3167c.7976-.91026,1.53132-1.87873,2.25554-2.84981a12.84585,12.84585,0,0,0,.70629-1.131c.7495-1.26163,1.49117-2.52986,2.131-3.85233a37.12655,37.12655,0,0,0,2.88092-8.43209,29.2205,29.2205,0,0,0,.54422-3.66192c.01281-.15157.05048-.301.07663-.45149a7.86825,7.86825,0,0,1,.61288,1.931,7.13353,7.13353,0,0,1-.18453,1.5628,37.2579,37.2579,0,0,1-2.05,6.92862,41.37794,41.37794,0,0,1-3.3565,6.568,29.046,29.046,0,0,1-4.64327,5.82247,15.8524,15.8524,0,0,1-3.25338,2.50978,9.61266,9.61266,0,0,1-4.40463,1.21746c-1.5741.05856-3.15.10062-4.723.20241a8.07208,8.07208,0,0,1-1.60468-.09262c-.60716-.082-1.23518-.08586-1.854-.12354a15.4016,15.4016,0,0,1-2.40393-.28528,14.04761,14.04761,0,0,1-2.06986-.31742,7.76694,7.76694,0,0,1-1.81892-.43235,23.17278,23.17278,0,0,1-3.13076-1.01841c-.15282-.06474-.3681-.08589-.34864-.33718.174-.1304.3437-.02395.50758.02054.6167.16743,1.21384.40207,1.838.5443a7.48162,7.48162,0,0,0,1.28562.16063c.01455-.11975-.09661-.17079-.08155-.26521A1.08042,1.08042,0,0,1,116.74475,44.358Z"/><path class="cls-19" d="M107.04324,74.221a1.16486,1.16486,0,0,0,.4876-.402,3.66645,3.66645,0,0,1,1.77182-1.286,12.2819,12.2819,0,0,0,3.03944-1.74819C113.745,69.81005,115.13,68.81,116.545,67.85164a6.59833,6.59833,0,0,0,1.50939-1.38909,8.54066,8.54066,0,0,1,.92914-.89265c.07356-.053.15321-.12853.11768-.22-.17008-.438.13347-.48922.43342-.55026.04939-.01005.09734-.02752.14753-.03819a2.1906,2.1906,0,0,1,1.12757.10089,3.22648,3.22648,0,0,0,2.04985.08594,1.3074,1.3074,0,0,1,.30165-.04055,2.908,2.908,0,0,1,.63671.13584,1.11393,1.11393,0,0,0,.78747-.01481.509.509,0,0,1,.33949-.02526c.15064.03876.21194.15176.07786.23942-.51247.335-.63118.95113-1.01508,1.37434-1.67021,1.05792-3.37093,2.06336-5.12186,2.98287-.5821.30569-1.16052.6184-1.74063.92789a9.56661,9.56661,0,0,1-1.38995.70674c-.58892.26689-1.18253.52395-1.76591.80245-1.91187.91272-3.86955,1.715-5.856,2.449a.6926.6926,0,0,1-.378.00127A2.12354,2.12354,0,0,1,107.04324,74.221Z"/><path class="cls-20" d="M117.36081,45.74476a2.37123,2.37123,0,0,0,1.52856.12722c.11486-.04632.11408.17394.277.19009.82263.08153,1.63983.2302,2.46356.28261.36381.02314.73909.22524,1.12089-.00208.0829-.04935.22982.21176.35914.15974.56872-.22878,1.08319.14806,1.64744.107,1.43945-.10479,2.88794-.08445,4.32769-.18648a20.4284,20.4284,0,0,0,2.47363-.21231,8.97054,8.97054,0,0,0,1.85458-.59473,13.92409,13.92409,0,0,0,3.59124-2.443,27.76573,27.76573,0,0,0,4.95592-5.91555,42.37251,42.37251,0,0,0,2.34388-4.171,39.69047,39.69047,0,0,0,2.89611-7.89769,23.01548,23.01548,0,0,0,.59278-3.15074.635.635,0,0,1,.07223-.16867,5.8063,5.8063,0,0,1,.37392,1.77335,28.64387,28.64387,0,0,1-.99262,3.83407,36.172,36.172,0,0,1-2.33752,5.89743,38.876,38.876,0,0,1-5.0879,7.82153,21.50176,21.50176,0,0,1-5.30465,4.64015,7.956,7.956,0,0,1-3.70236,1.19581c-1.98083.093-3.95484.32428-5.943.28413a30.06792,30.06792,0,0,1-3.52744-.22894c-1.25382-.17361-2.50744-.35015-3.76433-.50349a21.02157,21.02157,0,0,1-2.33428-.6002c-.14683-.0416-.34725-.037-.3778-.2607a.21673.21673,0,0,1,.24606-.13817,5.32863,5.32863,0,0,1,1.31919.07982A1.39052,1.39052,0,0,0,117.36081,45.74476Z"/><path class="cls-21" d="M148.2477,32.57313a10.80361,10.80361,0,0,1-.23985,1.77607,20.3438,20.3438,0,0,1-1.64358,3.03818,42.84148,42.84148,0,0,1-4.68447,6.32727,31.25654,31.25654,0,0,1-5.39619,4.90135,11.66564,11.66564,0,0,1-5.764,2.16729c-.98176.086-1.95133.29277-2.93218.40249q-1.183.13233-2.3719.19793a8.57713,8.57713,0,0,1-1.84045.05628c-.63793-.0492-1.27334-.12809-1.90935-.179-1.38047-.11058-2.75033-.31323-4.12947-.42973-.24419-.105-.50621-.15649-.75516-.24687-.15179-.0551-.32366-.09922-.33165-.31175.08531-.18554.25088-.15905.39788-.13056.29007.05622.58961.01455.87622.09741a.4298.4298,0,0,0,.32987-.06641,7.04169,7.04169,0,0,1,1.56353.12508,6.12282,6.12282,0,0,0,.87759.04789c.96026-.02789,1.91519.10886,2.8738.10632a11.07486,11.07486,0,0,1,1.8787.03485.54316.54316,0,0,0,.32966-.0901.97973.97973,0,0,1,.55666-.12562,8.27806,8.27806,0,0,0,2.16119-.14523,33.32937,33.32937,0,0,0,4.5927-.705,4.039,4.039,0,0,0,1.883-.79983,3.16155,3.16155,0,0,1,1.07142-.57884,3.33652,3.33652,0,0,0,1.21459-.90491,14.96337,14.96337,0,0,1,1.26465-.98311c.05712-.0501.15008-.0732.18353-.13673.41855-.79467,1.29254-1.10587,1.85225-1.75046a2.92808,2.92808,0,0,0,.43486-.58222c.181-.356.55619-.54186.77534-.88154.37791-.58576.99718-.9876,1.328-1.61118.32356-.60992.87237-1.03549,1.238-1.60858.32919-.516.7021-1.01789.993-1.542.33987-.61242.73875-1.19,1.07631-1.804.34093-.62009.68064-1.24637,1.04458-1.85678.27231-.45675.44132-.9802.69821-1.45287C147.84653,32.74112,147.93168,32.47908,148.2477,32.57313Z"/><path class="cls-22" d="M117.59213,46.51457c.88566.02016,1.74834.23406,2.62565.31462.94634.08689,1.87787.27184,2.83264.323a30.27866,30.27866,0,0,0,3.0705.03964,34.19161,34.19161,0,0,0,3.91921-.27145c.465-.07629.954.02631,1.43506-.06046a10.00722,10.00722,0,0,0,4.159-1.86976,21.742,21.742,0,0,0,3.38043-3.04795,36.68708,36.68708,0,0,0,3.11655-3.97461,40.08348,40.08348,0,0,0,2.624-4.50677,41.52752,41.52752,0,0,0,2.89124-7.70721c.17332-.64084.34025-1.28138.45722-1.9347a.25108.25108,0,0,1,.13579-.17645,7.34615,7.34615,0,0,1,.1654,1.08033,1.50077,1.50077,0,0,1-.02256.82923,44.22622,44.22622,0,0,1-2.58363,7.08036,39.25853,39.25853,0,0,1-4.01591,6.82338,33.01778,33.01778,0,0,1-3.999,4.61605,13.15388,13.15388,0,0,1-5.7015,3.37679,14.66635,14.66635,0,0,1-2.29183.24407c-1.54424.14569-3.09564.18811-4.64236.29974a14.40709,14.40709,0,0,1-2.2657-.092c-1.08522-.0925-2.16963-.19414-3.2552-.28309-.86953-.07124-1.72928-.22584-2.59562-.32578a.38667.38667,0,0,1-.236-.11966c-.2359-.50293-.21136-.55887.3132-.638A.96506.96506,0,0,1,117.59213,46.51457Z"/><path class="cls-23" d="M123.44683,51.36678a40.07889,40.07889,0,0,0,4.76459-.38072c1.22184-.17662,2.448-.32589,3.66633-.52352a10.25257,10.25257,0,0,0,3.73867-1.53287,24.63415,24.63415,0,0,0,3.123-2.40369c.69-.5981,1.32317-1.25064,1.9578-1.90132a39.69824,39.69824,0,0,0,3.96531-4.81784,41.99537,41.99537,0,0,0,3.10991-5.10987,3.33646,3.33646,0,0,1,.2354-.34776,13.2907,13.2907,0,0,1-.45,2.3048c-.97638,1.54833-1.93538,3.10774-3.03461,4.57516-.81455,1.08738-1.70826,2.106-2.61813,3.11314-.69567.77006-1.42163,1.50945-2.1686,2.22792a22.36163,22.36163,0,0,1-4.63882,3.51939,8.26011,8.26011,0,0,1-2.48339.99468c-.731.11648-1.45835.25031-2.19365.33841-.944.11311-1.88266.26781-2.82241.41269a3.21121,3.21121,0,0,1-.68818.04218,7.7503,7.7503,0,0,0-1.30939.15166.77886.77886,0,0,1-.26658-.01033,3.38045,3.38045,0,0,0-1.26009-.06851,6.24526,6.24526,0,0,1-1.74969-.10888c-.2287-.03238-.45711-.0528-.6878-.0629-.14621-.00641-.3199.01527-.37811-.18427.09257-.27058.33176-.262.54243-.25608C122.34951,51.35357,122.89926,51.304,123.44683,51.36678Z"/><path class="cls-24" d="M116.82178,47.13073a12.30022,12.30022,0,0,0,1.54371.22842c1.19127.22439,2.40548.24782,3.608.363a16.1517,16.1517,0,0,0,2.97965.17388c1.44678-.12956,2.90162-.11371,4.34711-.28721.71854-.08624,1.44936-.08366,2.17277-.16325a7.10224,7.10224,0,0,0,2.19331-.65366,14.144,14.144,0,0,0,3.50555-2.31625,30.82014,30.82014,0,0,0,3.16683-3.33153,37.89455,37.89455,0,0,0,3.49007-4.97607,41.20671,41.20671,0,0,0,2.52666-5.03909,42.33039,42.33039,0,0,0,2.00324-5.9126,2.17753,2.17753,0,0,0,.0461-.49359c.11531.10774.051.25964.09469.385.05368.12759-.01716.2724.055.39743l.02082.44944a.64976.64976,0,0,1,.01249.30106,21.18542,21.18542,0,0,1-.98329,3.11462,43.13881,43.13881,0,0,1-4.24813,8.48519,34.05981,34.05981,0,0,1-3.68938,4.82382,18.42115,18.42115,0,0,1-6.55781,4.93168,8.95581,8.95581,0,0,1-2.62535.554c-1.02142.08232-2.04225.17665-3.063.26933a13.602,13.602,0,0,1-1.41778.09459c-.80611-.0119-1.60671.0745-2.41723.03137-1.51283-.08051-3.01073-.2809-4.51354-.44225a2.4891,2.4891,0,0,1-.79681-.10286.65089.65089,0,0,0-.43622-.2197,5.25869,5.25869,0,0,1-1.254-.35945c-.14776-.04472-.37194-.084-.2704-.34748A.44962.44962,0,0,1,116.82178,47.13073Z"/><path class="cls-25" d="M120.1343,32.65112c-.051.00423-.12522-.01192-.14942.01572-.40368.46126-.94536.36587-1.46161.3687-.55147.003-1.10365.01851-1.65431-.0028-1.42546-.05518-2.84479-.17766-4.264-.33219a2.56123,2.56123,0,0,0-1.37314.09729c-.36572.16312-.80414-.046-1.17968-.16926a6.83821,6.83821,0,0,1-2.29375-1.20591,5.66318,5.66318,0,0,1-1.57275-2.26738,24.20071,24.20071,0,0,1-1.33-4.66094c-.193-.97127-.30294-1.95959-.43373-2.94244-.07043-.52935-.10808-1.06313-.15607-1.59532a.26887.26887,0,0,0-.15466-.2447.96612.96612,0,0,1-.18688-.60855c-.144-1.22913-.13816-2.46772-.2266-3.70051-.01242-.17313-.06563-.39147.18916-.46995a3.44666,3.44666,0,0,1,.51756.77842c-.14011.17313.0045.3409.00637.511.01029.9329.1731,1.852.25171,2.77853.09024,1.06348.27264,2.11907.41206,3.17848a36.37318,36.37318,0,0,0,1.21962,5.20748,13.61022,13.61022,0,0,0,.57091,1.78048,3.57339,3.57339,0,0,0,1.46766,1.47429,9.9056,9.9056,0,0,0,3.65679,1.17055,4.46966,4.46966,0,0,1,1.57571.40077,1.0574,1.0574,0,0,0,.82494.14939,1.38873,1.38873,0,0,1,.63866.10051,10.20224,10.20224,0,0,0,2.64251.05678,2.39956,2.39956,0,0,1,1.38566.10446.28873.28873,0,0,0,.25629-.00451C119.60252,32.40426,119.86483,32.55542,120.1343,32.65112Z"/><path class="cls-26" d="M148.2477,32.57313a.47992.47992,0,0,0-.372.302c-.201.39841-.394.80154-.56981,1.21155-.09115.21263-.23361.39807-.32607.59583a4.40163,4.40163,0,0,0-.52474,1.07639c-.03849.22206-.291.27392-.38484.49287a3.24934,3.24934,0,0,1-.69655,1.15472.58586.58586,0,0,0-.19562.36726.71736.71736,0,0,1-.2318.47409,11.60433,11.60433,0,0,0-1.088,1.62136,6.85465,6.85465,0,0,0-1.063,1.36284c-.21565.47456-.72048.71628-.94815,1.14048-.1715.31956-.56882.448-.6114.83655a.0507.0507,0,0,1-.017.03382c-.66924.43469-.93557,1.25468-1.59987,1.68506-.26329.17057-.59721.26444-.75364.54742a2.76389,2.76389,0,0,1-1.17849,1.09835c-.39231.203-.56629.62869-.98175.77312-.12945.045-.09981.23749-.23493.32956a7.38783,7.38783,0,0,1-1.6006.85995c-.32477.1192-.46926.44472-.81072.54954a17.27,17.27,0,0,1-2.05127.60827c-.57027.1-1.16129.14229-1.72189.25514-.30637.06168-.73092-.16848-.958.2342a.89924.89924,0,0,0-.76623-.05155c-.47283.1204-.97092.10718-1.43681.19231a11.61484,11.61484,0,0,1-1.26888.04137c-.05109.004-.11886-.01437-.151.01182-.44906.36561-.95762.10124-1.4357.14907a22.843,22.843,0,0,1-2.322.00638c-.47945-.00079-.98353-.10322-1.47643-.08376a18.75811,18.75811,0,0,1-2.57016-.23767.61116.61116,0,0,1-.46889.02662,7.66734,7.66734,0,0,1-1.033-.22274c-.14814-.04322-.37571-.0435-.344-.30752.20133-.20982.44914-.12552.68882-.11492.727.03212,1.45429.05667,2.18144.0167.74163.01489,1.47628.13829,2.21866.15379.10127.00211.20268.03835.30524.03406,1.03928-.0435,2.07373.1348,3.11194.07767,1.12433-.06186,2.24743-.13288,3.36834-.26025,1.10707-.1258,2.21541-.24583,3.3219-.37663a10.11311,10.11311,0,0,0,4.742-1.98046,32.51407,32.51407,0,0,0,7.86674-8.40788,49.94772,49.94772,0,0,0,3.10735-5.263c.40692-.79852.79173-1.61058,1.13407-2.44114a1.15619,1.15619,0,0,1,.33754-.58959.08513.08513,0,0,1,.08839.06922.2057.2057,0,0,1-.033.177A16.83549,16.83549,0,0,1,148.2477,32.57313Z"/><path class="cls-27" d="M132.69108,50.98169a2.85122,2.85122,0,0,0,.97-.323,16.38384,16.38384,0,0,0,3.281-1.86653,26.65153,26.65153,0,0,0,3.08651-2.62642c.5762-.54839,1.12758-1.14166,1.67348-1.73043.64976-.70076,1.24055-1.44918,1.88-2.1569a21.266,21.266,0,0,0,1.76044-2.35926c.59459-.87625,1.15305-1.77693,1.73357-2.66282.14079-.21485.18579-.51047.48185-.60238a10.9656,10.9656,0,0,1-.46328,1.92339,40.71771,40.71771,0,0,1-3.39635,4.65641c-.66335.8172-1.35737,1.6108-2.09229,2.3597a24.76406,24.76406,0,0,1-1.905,1.79123c-1.06881.88057-2.10177,1.80189-3.25372,2.58273a12.81455,12.81455,0,0,1-5.5705,2.186c-1.10576.147-2.2035.3755-3.31092.49669a14.68121,14.68121,0,0,1-2.29174.20934c-.49885.01525-.99533.00854-1.49458.06765a11.5058,11.5058,0,0,1-2.02516-.166.18578.18578,0,0,1-.17149-.13344c.10047-.15869.26669-.138.41512-.13724.6913.00359,1.38013-.09613,2.07248-.04651a1.2164,1.2164,0,0,0,.27891-.00575c-.23486.01216-.47854.009-.722.00226-.12274-.00337-.24689-.041-.252-.18162-.00539-.14762.11145-.22.24437-.25554a.22394.22394,0,0,1,.11464-.00351,5.84678,5.84678,0,0,0,2.20455-.0283c.99771-.10544,1.99822-.18284,2.99041-.35449.91457-.15823,1.83818-.27156,2.75842-.40013A7.25026,7.25026,0,0,0,132.69108,50.98169Z"/><path class="cls-28" d="M148.47678,30.57166c-.41239.90673-.79564,1.82816-1.24413,2.71668-.63971,1.26731-1.32165,2.51253-2.06372,3.72555a43.19359,43.19359,0,0,1-3.67137,5.18324,31.52858,31.52858,0,0,1-3.88275,3.92249,18.32131,18.32131,0,0,1-3.031,2.13776,10.8828,10.8828,0,0,1-4.3576,1.206,25.19828,25.19828,0,0,0-2.84085.3423c-.38677.0776-.78631.0337-1.18278.0836a30.95328,30.95328,0,0,1-4.90538-.005,14.04221,14.04221,0,0,1-2.31845-.21193,3.86454,3.86454,0,0,1-1.53393-.18732c-.38815-.125-.76993-.26942-1.16034-.3898-.163-.05029-.40747-.08143-.31024-.37091a.41067.41067,0,0,1,.32712-.05719,5.06347,5.06347,0,0,0,1.47081.053c.6191.00989,1.20711.225,1.82217.27291,1.27633.09948,2.54574.275,3.82485.34834a31.75671,31.75671,0,0,0,4.5568-.2123c1.11086-.09587,2.22035-.21081,3.32734-.333a9.34072,9.34072,0,0,0,4.15041-1.63673,24.7394,24.7394,0,0,0,3.6461-3.06539,36.80168,36.80168,0,0,0,5.32948-6.79224,48.10432,48.10432,0,0,0,3.84461-7.65833c.05846-.14682.05172-.37572.30292-.38221a.48555.48555,0,0,1-.00286.305l-.02021.60118C148.47245,30.29149,148.57675,30.451,148.47678,30.57166Z"/><path class="cls-29" d="M73.06682,48.74368a21.82411,21.82411,0,0,1-1.61407-3.16934c-.09946-.22694-.01608-.29037.20212-.21886a.59486.59486,0,0,1,.22424.14611c.45813.45041,1.01478.77568,1.502,1.19257a2.025,2.025,0,0,0,1.97928.54614,7.24792,7.24792,0,0,1,1.208-.20551c.609.16277,1.24073.20351,1.85364.345a.33249.33249,0,0,1,.16409.2043,2.02222,2.02222,0,0,0,.4481.83532.2748.2748,0,0,1,.063.25191c-.20706.2749-.55933.2829-.83062.44369-.20611.12215-.276.19607-.19328.4671a6.39866,6.39866,0,0,0,.30361,1.24294.40046.40046,0,0,1-.048.46318.22952.22952,0,0,1-.25448-.01671,1.00549,1.00549,0,0,0-.80554-.14336.52942.52942,0,0,1-.42577-.142,8.27,8.27,0,0,0-2.02095-.91354,2.90189,2.90189,0,0,1-.97338-.59672A6.12912,6.12912,0,0,0,73.06682,48.74368Z"/><path class="cls-30" d="M148.55512,29.26227c-.6266,1.455-1.21663,2.92621-1.93327,4.34115a44.71082,44.71082,0,0,1-4.09737,6.7004,33.07006,33.07006,0,0,1-2.49771,3.00024A26.83065,26.83065,0,0,1,135.5079,47.252a9.70184,9.70184,0,0,1-4.19817,1.65274c-1.07146.12951-2.15693.15623-3.22237.319-1.21548.18569-2.44275.13322-3.65964.276a8.02556,8.02556,0,0,1-1.64013-.0887c-.56985-.05231-1.13584-.17382-1.70581-.19146a18.25738,18.25738,0,0,1-2.84129-.34994,2.47733,2.47733,0,0,0-.41725-.04447.09128.09128,0,0,1-.00651-.11068.90216.90216,0,0,1,.80426-.082,7.06508,7.06508,0,0,0,2.16225.13151,8.15274,8.15274,0,0,1,1.6.11805,3.82927,3.82927,0,0,0,1.92864.02232.67962.67962,0,0,1,.26731-.024,38.62478,38.62478,0,0,0,3.96332-.28986c.803-.0757,1.60556-.15951,2.40905-.22713a9.45445,9.45445,0,0,0,3.86159-1.32088c.90169-.50659,1.647-1.22232,2.52438-1.75435a.29627.29627,0,0,0,.08713-.07529c.49464-.68493,1.26638-1.079,1.80393-1.71846.40211-.47838.79028-.97516,1.23086-1.41247a15.07293,15.07293,0,0,0,1.51132-1.83623c.87089-1.18925,1.65913-2.43258,2.43653-3.68474.3293-.5304.67268-1.05956.97626-1.59977a21.669,21.669,0,0,0,1.44614-2.96879,14.88158,14.88158,0,0,1,1.047-2.34539,1.18982,1.18982,0,0,0,.14755-.47311,2.24323,2.24323,0,0,1,.32929-1.01532,1.00283,1.00283,0,0,0,.10773-.5562,3.0553,3.0553,0,0,1,.07535-1.02752q.05463-.05295.09316.0125l.00284,2.43058C148.56877,29.0873,148.63377,29.19755,148.55512,29.26227Z"/><path class="cls-31" d="M94.79179,8.17326A16.61389,16.61389,0,0,1,98.688,10.01711a1.17548,1.17548,0,0,0,.16865.0733.33067.33067,0,0,1,.17534.163c.21456.3628.60557.54466.87072.86058A10.36609,10.36609,0,0,1,102.137,16.5091c.19769,1.41144.14359,2.8366.24177,4.25269.092,1.327.1554,2.6556.26636,3.982a22.36482,22.36482,0,0,0,.86228,4.36423,11.77584,11.77584,0,0,0,.78748,1.95854,2.51923,2.51923,0,0,1,.19023.46043,1.86679,1.86679,0,0,0,.22136.48492.46959.46959,0,0,1,.04915.47158c-.24862.08442-.30631-.13095-.39048-.269a16.51989,16.51989,0,0,1-.97687-1.95936,12.13351,12.13351,0,0,0-.8058-1.2379,8.35835,8.35835,0,0,1-.48822-2.40215c-.071-.97184-.2265-1.93354-.28609-2.90631-.03284-.536-.07721-1.07486-.09837-1.60952-.04454-1.12558-.06217-2.254-.10694-3.37917a12.29371,12.29371,0,0,0-1.364-5.51533,8.5525,8.5525,0,0,0-4.37375-3.7619c-.50818-.21651-1.034-.38246-1.55189-.57118a8.73952,8.73952,0,0,0-1.2541-.29784.653.653,0,0,1-.52421-.32729c.04946-.25011.24079-.22215.41985-.20973a12.0891,12.0891,0,0,1,1.212.2046A.71474.71474,0,0,0,94.79179,8.17326Z"/><path class="cls-32" d="M104.41907,31.57285a18.45677,18.45677,0,0,1-1.92132-7.29483c-.10884-1.51407-.20855-3.0285-.25683-4.547-.01573-.49506-.03322-.99409-.05587-1.491a13.05622,13.05622,0,0,0-1.13327-5.15422,7.06852,7.06852,0,0,0-1.91307-2.55321c-.07911-.06281-.28137-.11488-.15856-.30462a.55645.55645,0,0,1,.43176.30211l.92786.63147c.1175.06036.2624.08732.29957.24561a11.35333,11.35333,0,0,1,.85555.82481,9.3291,9.3291,0,0,1,1.09757,3.45809,27.00512,27.00512,0,0,1,.26116,3.17516c.0416.96792.11235,1.93928.18539,2.90783.09355,1.24048.20543,2.47532.411,3.70158a20.81678,20.81678,0,0,0,1.5252,5.186,3.91758,3.91758,0,0,0,.56906.95525.56119.56119,0,0,1,.10737.65015,1.26374,1.26374,0,0,0,.41879.75215,8.79961,8.79961,0,0,0,2.04707,1.82033.67.67,0,0,1,.30741.27723c-.23973.15437-.41407-.02774-.58864-.13172a7.56852,7.56852,0,0,1-2.13265-2.00544,1.43788,1.43788,0,0,0-.49414-.4686A1.7617,1.7617,0,0,1,104.41907,31.57285Z"/><path class="cls-33" d="M105.65164,32.266c.03953-.40179-.26736-.64113-.44557-.93887a12.11781,12.11781,0,0,1-.928-2.099,19.66518,19.66518,0,0,1-.88735-3.47992c-.15485-.91638-.29186-1.83351-.37111-2.7622-.06817-.79894-.13883-1.60177-.18559-2.3991-.0415-.70765-.11683-1.41746-.11506-2.13067a16.48652,16.48652,0,0,0-.78934-5.07975,11.87874,11.87874,0,0,1-.43473-1.14455,8.36766,8.36766,0,0,1,1.38656,1.464,4.83522,4.83522,0,0,1,.41037,2.05656c.19307,2.65747.30547,5.32159.6403,7.967a27.99021,27.99021,0,0,0,.82314,3.99165c.04817.173.102.34443.13331.521a9.23193,9.23193,0,0,0,1.52766,3.53072A7.24876,7.24876,0,0,0,108.68,33.91351a14.19971,14.19971,0,0,0,1.99675.89186c.15221.05622.37724.05173.3674.31019-.19074.162-.37057.00288-.53351-.04517a8.04279,8.04279,0,0,1-3.58276-2.11373,6.7875,6.7875,0,0,0-1.18589-.74183C105.72955,32.20627,105.68252,32.24783,105.65164,32.266Z"/><path class="cls-34" d="M104.80425,28.338a34.12914,34.12914,0,0,1-.986-4.50682c-.12585-.84095-.15167-1.69635-.25046-2.542-.14173-1.21332-.12683-2.43818-.29513-3.6498-.0735-.52918-.01121-1.06664-.06328-1.60467-.0761-.7863-.20336-1.56142-.32788-2.33879a6.87847,6.87847,0,0,1,1.00535,1.2369.507.507,0,0,0-.07332.50888,11.278,11.278,0,0,1,.06922,1.56888c.0667.90112.15131,1.80091.22841,2.70125.08427,1.08941.17845,2.17761.3536,3.25729.126.77658.16156,1.56453.331,2.33708.27284,1.24425.60919,2.471.962,3.69356a6.11756,6.11756,0,0,0,2.618,3.51192c.22358.1465.44376.29818.66551.44746.06865.06391.17145.07662.2311.154a15.99893,15.99893,0,0,0,4.27325,1.23154c.60272.08737,1.20829.15514,1.81255.23183.05757.10476-.01837.165-.077.23106l-.23111.0772a3.15389,3.15389,0,0,1-1.134.02051,19.52773,19.52773,0,0,1-4.25142-1.16469,14.49944,14.49944,0,0,1-2.326-1.14871,5.01068,5.01068,0,0,1-1.60015-2.02789C105.39212,29.83643,105.13971,29.06992,104.80425,28.338Z"/><path class="cls-35" d="M146.71142,39.89043a5.62425,5.62425,0,0,1-.39789,1.23567,17.12,17.12,0,0,1-1.91484,2.54432,39.62619,39.62619,0,0,1-3.11974,3.44832,17.31867,17.31867,0,0,1-1.86945,1.5957c-.75335.55355-1.45456,1.17413-2.21214,1.72654a15.55454,15.55454,0,0,1-7.331,2.87819c-1.11816.14288-2.23274.3243-3.34217.53385a22.11521,22.11521,0,0,1-2.31921.23237,1.41975,1.41975,0,0,1-.60679-.032c-.12589-.24912-.05988-.39248.23-.45628.16925-.03725.3517-.02792.47222-.185.83931-.17726,1.69609-.23553,2.54226-.36864,1.64625-.259,3.29263-.512,4.92977-.82969a13.60078,13.60078,0,0,0,5.50948-2.60931,36.83694,36.83694,0,0,0,5.06454-4.53631,44.52769,44.52769,0,0,0,3.94646-4.91287c.10151-.146.1616-.36451.41324-.33072.00522.0007.011.01817.01146.02807A.17125.17125,0,0,1,146.71142,39.89043Z"/><path class="cls-36" d="M146.71142,39.89043c-.18891-.06421-.193.11189-.25548.20266-.72443,1.05256-1.48348,2.08223-2.29812,3.06373a44.01132,44.01132,0,0,1-3.2085,3.46409,37.719,37.719,0,0,1-4.27118,3.54794,13.89874,13.89874,0,0,1-3.36086,1.75054,16.50294,16.50294,0,0,1-3.04993.67883c-1.59613.25752-3.19195.51717-4.79022.76075-.38968.05939-.78837.0598-1.18291.08733a1.78043,1.78043,0,0,1-1.07323.16621c-.9369-.12685-1.8812-.13657-2.82156-.20658-.30724-.02288-.64415.0014-.80879-.3552a1.052,1.052,0,0,1,.78139-.08607,6.04642,6.04642,0,0,0,1.607-.00331,6.6506,6.6506,0,0,1,.99777-.01689,12.97032,12.97032,0,0,0,2.39592-.19133,30.24977,30.24977,0,0,0,3.05332-.32095c1.32039-.20644,2.64177-.40646,3.95347-.66983a9.86574,9.86574,0,0,0,2.52968-.98306,17.435,17.435,0,0,0,3.46411-2.38915c.859-.7442,1.73367-1.47169,2.54793-2.27147a46.53757,46.53757,0,0,0,5.26562-6.31247,5.98462,5.98462,0,0,1,.90778-1.22881A5.6038,5.6038,0,0,1,146.71142,39.89043Z"/><path class="cls-37" d="M73.06682,48.74368c.12777-.05487.129-.05615.24925.06265A3.766,3.766,0,0,0,74.70423,49.932c.56419.17616,1.08088.45455,1.63674.63843a1.34977,1.34977,0,0,1,.46082.266A.60482.60482,0,0,0,77.46216,51c.33852-.11991.5586.19626.84189.28974a1.02782,1.02782,0,0,1,.39369.22921.91308.91308,0,0,0,.73878.24089.3063.3063,0,0,1,.33132.14624c-.03541.20028-.086.39938-.10179.60119a.44518.44518,0,0,1-.24954.3909.49976.49976,0,0,0-.23236.78826,1.10956,1.10956,0,0,1,.04414.4532,1.7619,1.7619,0,0,1-1.4494-.44078c-.29142-.279-.76047-.1647-1.115-.364a2.52819,2.52819,0,0,1-.46767-.23529c-.066-.05618-.21608-.22265-.27788.03177-.91231-1.17223-1.68885-2.43627-2.4861-3.686C73.291,49.22393,73.18767,48.97821,73.06682,48.74368Z"/><path class="cls-38" d="M133.0008,60.07318a22.18137,22.18137,0,0,1-1.84216,1.54044c-.80875.634-1.64837,1.22859-2.47468,1.84017a2.47794,2.47794,0,0,0-1.65044.05836,1.47462,1.47462,0,0,1-.90652.01113c-.21637-.145-.02982-.44891-.23933-.60956-.04163-.03192.04051-.14807.11689-.16817.31782-.08363.43965-.37944.6381-.58749.21533-.22575.15478-.37542-.162-.44146-.1873-.03906-.37688-.0718-.56806-.0931-.09621-.01072-.21273-.00164-.24678-.13464a3.02321,3.02321,0,0,1,1.40876-.42224c.356-.047.70578-.122,1.05815-.18582a1.1234,1.1234,0,0,0,.61687-.28547c.21412-.21081.52-.1992.77194-.319a6.65855,6.65855,0,0,1,2.84139-.5332C132.60138,59.75169,132.92676,59.69987,133.0008,60.07318Z"/><path class="cls-39" d="M76.84062,9.95466A7.32113,7.32113,0,0,1,78.45584,9.076c.32112.55329.88748.45965,1.38938.51a2.798,2.798,0,0,1,.86.16609c.16724.07281.33106.16238.35718.36606.02442.19044.12661.22815.29272.19315a.64622.64622,0,0,1,.45065.02154,2.98093,2.98093,0,0,0,1.37788.26788,24.24153,24.24153,0,0,1,2.64759.41875.16754.16754,0,0,1,.11465.09417.46414.46414,0,0,1-.5294.43478.63386.63386,0,0,0-.36349.10758.62224.62224,0,0,1-.3357.05594,17.78213,17.78213,0,0,0-3.66207.09591,8.46876,8.46876,0,0,1-2.86041-.18685.7767.7767,0,0,1-.47135-.24455c-.28869-.30936-.56779-.62768-.84413-.948C76.75989,10.29,76.66251,10.12778,76.84062,9.95466Z"/><path class="cls-40" d="M141.07493,51.675a14.6887,14.6887,0,0,1-1.21722,1.69933,17.97155,17.97155,0,0,1-4.84748,2.76691,19.321,19.321,0,0,1-3.50809.97452,23.71784,23.71784,0,0,0-3.33849.87583c-.9746.14521-1.94854.29333-2.934.34425a3.75043,3.75043,0,0,0-.79123.04561,1.98722,1.98722,0,0,1-1.37565-.2951c.00829-.234.20512-.18908.33677-.21053.84584-.1379,1.67719-.358,2.53124-.44674a27.5192,27.5192,0,0,0,3.62773-.67071q1.06575-.26166,2.14782-.44093a15.01447,15.01447,0,0,0,4.78224-1.84444c1.441-.79541,2.76937-1.7586,4.14877-2.64567C140.76722,51.74378,140.87633,51.5722,141.07493,51.675Z"/><path class="cls-41" d="M141.07493,51.675c-.63763.421-1.28635.82631-1.91033,1.26665-.97214.686-2.01444,1.25129-3.04466,1.83991a13.37105,13.37105,0,0,1-3.60738,1.47512c-1.05434.24432-2.13166.38881-3.18154.65844-.96429.24764-1.944.40839-2.92465.56923a2.90923,2.90923,0,0,1-.41738.044,2.90134,2.90134,0,0,0-.90241-.01459c-.5548.10944-1.09671-.07036-1.64414-.00456a.36131.36131,0,0,1-.31066-.12389c-.01023-.146.10439-.16312.20129-.17874,1.31285-.21159,2.62942-.398,3.9468-.57554,1.71825-.41676,3.47156-.66414,5.19532-1.0502a14.52909,14.52909,0,0,0,4.44409-1.97872,21.16168,21.16168,0,0,0,2.86284-2.07226c.64067-.56436,1.436-.93638,2.06969-1.52368.13652-.12652.15555-.106.31751-.02C141.83541,50.56908,141.465,51.12841,141.07493,51.675Z"/><path class="cls-42" d="M126.60528,53.7546c.757-.17373,1.52644-.27337,2.29379-.38534a17.11263,17.11263,0,0,0,6.50111-1.901,31.98047,31.98047,0,0,0,3.53466-2.49569,30.93388,30.93388,0,0,0,3.17644-2.83051c.95035-1.00054,1.83791-2.05649,2.698-3.13542q.75056-.94151,1.50423-1.88053a10.71143,10.71143,0,0,1-.60427,1.68955,40.27266,40.27266,0,0,1-4.31059,4.79408,25.00917,25.00917,0,0,1-2.29128,1.92462,31.55283,31.55283,0,0,1-3.58429,2.52044,11.79782,11.79782,0,0,1-3.62138,1.363c-1.62684.29967-3.2553.59215-4.90392.75109a.58594.58594,0,0,1-.22937-.00574A.43289.43289,0,0,1,126.60528,53.7546Z"/><path class="cls-43" d="M92.55579,8.23593c.3514.30749.81362.26251,1.22516.37434a4.14415,4.14415,0,0,1,.54648.16493,1.13547,1.13547,0,0,0,.67417.467,4.10576,4.10576,0,0,1,.8014.35541c.14833.0787.30155.16292.28168.36625a.37414.37414,0,0,1-.32439.3288.70788.70788,0,0,1-.36647-.09755,9.82322,9.82322,0,0,0-3.44416-.871,12.22285,12.22285,0,0,1-4.23395-.85951A5.34745,5.34745,0,0,1,85.86011,7.405c-.17144-.17764-.25932-.3247.04027-.44982a6.13431,6.13431,0,0,0,1.13208-.0215,4.40877,4.40877,0,0,1,1.136.0828,2.05081,2.05081,0,0,1,.80356.17186,18.73535,18.73535,0,0,0,2.87532.79517A1.2075,1.2075,0,0,1,92.55579,8.23593Z"/><path class="cls-44" d="M144.7068,45.20157a12.03765,12.03765,0,0,1-.69357,1.46238,22.80941,22.80941,0,0,1-3.54025,3.39856,29.149,29.149,0,0,1-5.34378,3.61825,11.91127,11.91127,0,0,1-3.23372,1.09683c-.68341.11486-1.35514.29058-2.03882.40549a.97418.97418,0,0,1-.3824.01524,8.955,8.955,0,0,0-2.12634.13872c-.25086.02749-.50246.08453-.75478.11734-.1449.01884-.314.0502-.39-.14285a.29268.29268,0,0,1,.2415-.1675c.97748-.11679,1.89892-.50074,2.8789-.60213,1.11659-.28738,2.27178-.38867,3.3824-.71362a13.98577,13.98577,0,0,0,3.05319-1.33767c1.19112-.6858,2.25446-1.5579,3.38862-2.32155a32.03228,32.03228,0,0,0,3.33022-2.8215,19.66387,19.66387,0,0,0,1.746-1.88388c.12724-.14783.229-.34748.47563-.3271.00528.00044.0122.01746.013.02716A.16015.16015,0,0,1,144.7068,45.20157Z"/><path class="cls-45" d="M144.7068,45.20157c-.20664-.03007-.27951.15451-.364.267a21.02991,21.02991,0,0,1-1.70328,1.86308,19.08609,19.08609,0,0,1-2.07168,1.86875c-.00993.00769-.02463.00952-.034.01769a39.94234,39.94234,0,0,1-3.20127,2.389,18.34558,18.34558,0,0,1-3.29555,1.85242,16.49658,16.49658,0,0,1-3.83693.98333,2.3663,2.3663,0,0,1-.82156.15878c-1.05723.08336-2.09572.31145-3.15129.40764a.905.905,0,0,1-.37966-.02643c-.0963-.19153-.05769-.28658.19754-.30146a8.4733,8.4733,0,0,0,1.3596-.25841c1.3897-.31148,2.78973-.57042,4.19151-.81833a12.17778,12.17778,0,0,0,3.18-1.13142,20.47787,20.47787,0,0,0,3.62179-2.32363,37.13751,37.13751,0,0,0,4.1256-3.56256q1.34126-1.40472,2.5856-2.89973c.09388-.11328.16049-.275.35462-.25048A16.013,16.013,0,0,1,144.7068,45.20157Z"/><path class="cls-46" d="M85.93075,11.16261a18.72282,18.72282,0,0,0-2.88592-.45961,2.36436,2.36436,0,0,1-1.28918-.289c-.17518-.11107-.34005.01148-.51042.03645-.15641.02292-.38161.08615-.27681-.222.06227-.18306-.041-.25548-.177-.32573a1.95167,1.95167,0,0,0-.81022-.20524c-.35648-.01855-.71294-.04413-1.0681-.07981-.31912-.032-.39168-.28752-.45725-.54169a8.19984,8.19984,0,0,1,1.85644-.81651,8.04727,8.04727,0,0,1,2.60071.90068,2.91058,2.91058,0,0,0,.94894.29773,1.76954,1.76954,0,0,1,.88622.34571.97662.97662,0,0,0,.41472.19432,15.54676,15.54676,0,0,1,1.58863.569,2.038,2.038,0,0,0,.73813.44825c.1.04153.34255.08015.128.28823-.47049-.00175-.9399-.03307-1.41013-.03428A.34772.34772,0,0,1,85.93075,11.16261Z"/><path class="cls-47" d="M76.53205,47.13073c-.49932.09393-.99609.20579-1.49858.2775a2.34143,2.34143,0,0,1-1.79976-.689c-.527-.41573-1.04917-.83761-1.57027-1.26073-.17933-.14561-.21545-.059-.21069.11581a15.47856,15.47856,0,0,1-1.08064-2.534.14208.14208,0,0,1-.00594-.20483c.07372-.06332.15028-.00037.19439.059a10.83823,10.83823,0,0,0,2.741,2.16462,1.584,1.584,0,0,0,1.59372.22146c.47136-.07154.92776.1396,1.40014.07278a.2044.2044,0,0,1,.18891.11168,2.9577,2.9577,0,0,0,.22439,1.07129A.43626.43626,0,0,1,76.53205,47.13073Z"/><path class="cls-48" d="M69.62251,41.11829c-.29757-.90836-.58652-1.81909-.82277-2.74612-.02885-.11323-.02216-.22421-.04657-.33392-.077-.11688-.01922-.16609.09447-.169a.498.498,0,0,1,.35673.11974c.55676.53132,1.27206.85366,1.82331,1.39091a5.30539,5.30539,0,0,0,1.66264,1.83154.703.703,0,0,1,.20188.2252c.27327.52009.50674,1.06.79606,1.57232.07654.13552.19529.2856.06.458-.2391.10473-.46677-.01817-.69978-.03419a12.79536,12.79536,0,0,1-3.2716-2.20422A.59511.59511,0,0,0,69.62251,41.11829Z"/><path class="cls-49" d="M85.8535,7.01828c-.194.11714-.05906.20144.03173.28353a5.88283,5.88283,0,0,0,2.20553,1.16977,11.61449,11.61449,0,0,0,1.90991.54607c.66723.096,1.34218.16524,2.01.20055a9.8531,9.8531,0,0,1,3.3912.86379c.12843.0551.25931.1045.389.15654a7.77668,7.77668,0,0,1,.8994.49167c.12322.07693.27772.14516.27082.33482a.23229.23229,0,0,1-.31054.06715,12.43885,12.43885,0,0,0-2.61211-.729,16.22877,16.22877,0,0,1-1.696-.27034,8.3362,8.3362,0,0,1-.98108-.16494A23.497,23.497,0,0,1,87.54108,9.214a8.72176,8.72176,0,0,1-.97631-.33323c-.29665-.14827-.59382-.29628-.90345-.41739a.73018.73018,0,0,1-.30641-.15247,2.61655,2.61655,0,0,0-1.405-.70734c-.13539-.04069-.30738-.07784-.32587-.275l.30364-.09581a.17959.17959,0,0,1,.23094-.01089l1.61811-.228A.05009.05009,0,0,1,85.8535,7.01828Z"/><path class="cls-50" d="M145.46387,43.43678q-.82291.932-1.64623,1.8636a23.66334,23.66334,0,0,1-2.122,2.21027c-.57785.50217-1.0939,1.08007-1.71642,1.53063-1.2882.93235-2.47142,2.00467-3.85412,2.81291a22.02235,22.02235,0,0,1-3.25867,1.53236,12.9026,12.9026,0,0,1-2.3098.51434c-1.31516.24191-2.63163.4782-3.926.81525-.28992.07549-.63167-.08607-.87275.19315a.32521.32521,0,0,1-.23948.1062,24.0001,24.0001,0,0,1-3.25875.0623c-.57227-.10007-1.1603-.06523-1.729-.19968-.1572-.03717-.336-.02541-.41435-.21314.058-.17506.21458-.16832.34981-.173a6.34718,6.34718,0,0,0,1.71708-.14978,1.14859,1.14859,0,0,1,.46-.00718,14.79479,14.79479,0,0,0,3.67221-.23417c.15125-.02046.30433-.0705.444.03862.5277-.077,1.05622-.14891,1.583-.232a21.09637,21.09637,0,0,0,6.47675-1.57662,20.47848,20.47848,0,0,0,3.06779-1.95888,37.5806,37.5806,0,0,0,5.08925-4.4764q1.33371-1.45449,2.574-2.99022c.04005-.04961.045-.16884.15916-.0897Z"/><path class="cls-51" d="M128.223,57.91323a.27923.27923,0,0,1,.20482-.15375c.97626-.24707,1.94-.567,2.92982-.73064a21.82817,21.82817,0,0,0,2.998-.76231,17.84664,17.84664,0,0,0,3.69676-1.7509,16.03384,16.03384,0,0,0,1.52132-1.03026c.06929-.05254.14191-.20344.284-.11107a14.006,14.006,0,0,1-2.23464,2.46314,18.92335,18.92335,0,0,1-2.61966,1.27625,12.91124,12.91124,0,0,1-2.58585.72908,8.66635,8.66635,0,0,0-2.82568.3551,2.33616,2.33616,0,0,1-.78408.13664C128.64611,58.14863,128.31793,58.19258,128.223,57.91323Z"/><path class="cls-52" d="M76.84062,9.95466c-.00578.07387-.04623.18209-.01215.21645.52192.52629.80344,1.33772,1.70438,1.41809.46843.04179.93167.14189,1.4001.18379a3.11634,3.11634,0,0,0,1.06734-.07093,1.26809,1.26809,0,0,0,.69464.18669,11.968,11.968,0,0,1,2.74294.25893,2.1025,2.1025,0,0,1,1.21477.47241c-.046.19111-.20029.15736-.33763.16573-.59515.03624-1.193.026-1.78583.10327a23.1,23.1,0,0,0-2.46856.20258,1.44,1.44,0,0,0-.53292-.05205,4.7112,4.7112,0,0,1-2.10174-.34625,1.3957,1.3957,0,0,0-.56188-.11292.79459.79459,0,0,1-.80516-.40913,1.49917,1.49917,0,0,0-.50093-.469,2.04639,2.04639,0,0,1-.6763-.91559.19036.19036,0,0,1,.03477-.21495Z"/><path class="cls-53" d="M142.16932,49.98612c-.27818-.0201-.4137.20765-.57193.3618-.45439.44267-1.05407.67657-1.52588,1.08192a24.3938,24.3938,0,0,1-2.89542,2.12738,15.74783,15.74783,0,0,1-6.34216,2.45218,23.74453,23.74453,0,0,0-3.24567.66308c-.06611.01856-.1393.08235-.21263.00863-.14929-.07423-.383-.0353-.39471-.29425a.27274.27274,0,0,1,.19279-.11276c1.14616-.18777,2.22435-.64955,3.37073-.83467a3.19761,3.19761,0,0,0,.48037-.12268,16.32107,16.32107,0,0,0,2.78836-.70458,20.02321,20.02321,0,0,0,4.32856-2.39047,45.74269,45.74269,0,0,0,4.24651-3.48188,3.421,3.421,0,0,1,.45585-.35232c.077-.0494.20494-.16739.24491.04895A12.65224,12.65224,0,0,1,142.16932,49.98612Z"/><path class="cls-54" d="M143.089,48.43645c-.06662-.08769-.128-.04877-.19134.006-.56908.492-1.14169.97988-1.70742,1.47565a30.68639,30.68639,0,0,1-5.12458,3.73353,14.64976,14.64976,0,0,1-3.41784,1.43478,9.08739,9.08739,0,0,1-1.57449.2854c-.89241.19554-1.81121.17949-2.70869.33628a.51225.51225,0,0,1-.33264-.05711c-.13981-.24544.0862-.2754.21489-.32715a2.85272,2.85272,0,0,1,1.28574-.18308,28.75483,28.75483,0,0,0,4.34561-1.01719,19.65521,19.65521,0,0,0,4.51447-2.57777,38.35238,38.35238,0,0,0,5.21469-4.49528c.12662-.13228.17188-.36431.40583-.38653A15.04484,15.04484,0,0,1,143.089,48.43645Z"/><path class="cls-55" d="M126.066,63.45861a4.14282,4.14282,0,0,0,1.3084-.16339,1.23058,1.23058,0,0,1,1.30953.15857c-1.51566,1.12835-3.08655,2.17476-4.69633,3.16344a2.77072,2.77072,0,0,1,.88825-1.371.18958.18958,0,0,0,.12559-.20533,2.41863,2.41863,0,0,1-1.78575-.0417,4.06841,4.06841,0,0,1,1.23648-1.70644c.08371-.06255.18856-.14282.27775-.11135C125.164,63.33458,125.63673,63.29205,126.066,63.45861Z"/><path class="cls-56" d="M133.0008,60.07318a1.537,1.537,0,0,0-1.33909-.21262,6.84642,6.84642,0,0,0-2.12908.51747,11.46608,11.46608,0,0,1-1.646.25037,2.07649,2.07649,0,0,1-1.08631-.11323c-.08906-.28041-.03135-.392.33705-.456a.779.779,0,0,0,.6687-.49072.9781.9781,0,0,1,.60051-.21184,6.6471,6.6471,0,0,0,1.55531-.36873,13.06129,13.06129,0,0,1,1.41676-.30239,9.73651,9.73651,0,0,0,3.55343-.71005c.12366-.05024.29549-.13849.37479.08534A19.3589,19.3589,0,0,1,133.0008,60.07318Z"/><path class="cls-57" d="M86.70108,10.62358a11.43744,11.43744,0,0,1-2.21427-.87118.78.78,0,0,0-.31818-.12567,7.48264,7.48264,0,0,1-2.34912-.88094,6.228,6.228,0,0,0-1.24873-.34763c-.10307-.02558-.2002-.03959-.2585-.13866a6.48677,6.48677,0,0,1,1.83979-.57109.21574.21574,0,0,1,.07384.018,14.4358,14.4358,0,0,0,3.01022,1.05571.81445.81445,0,0,1,.20439.10211,1.72093,1.72093,0,0,0,1.14668.63246c.83474.20353,1.61643.57557,2.45914.75119.12734.02654.29195.04781.289.24568a.40237.40237,0,0,1-.411.22512C88.18318,10.68994,87.44165,10.66765,86.70108,10.62358Z"/><path class="cls-58" d="M73.29507,12.77577a4.25045,4.25045,0,0,1,.92627-.84184.45963.45963,0,0,1,.22237.29691,2.27059,2.27059,0,0,0,1.67275,1.66008,1.311,1.311,0,0,1,.40961.20267.65248.65248,0,0,0,.47165.12134c.415-.07469.84089-.0079,1.25269-.10888a4.8266,4.8266,0,0,1,.71719.07554.876.876,0,0,1,.324.27249c.15742.26849.03855.42976-.227.46751-.79619.11317-1.57823.30664-2.37605.40672a1.179,1.179,0,0,0-.54371.16146c-.28257.18981-.59455.06921-.89577.055a.72822.72822,0,0,1-.52224-.408.82848.82848,0,0,0-.18378-.243A10.59352,10.59352,0,0,1,73.32124,13.057C73.26367,12.97324,73.21605,12.8775,73.29507,12.77577Z"/><path class="cls-59" d="M67.76878,23.25483A8.85088,8.85088,0,0,1,68.28347,21.25c.32532-.145.62136-.41194,1.02179-.246a1.38354,1.38354,0,0,1,.64159.7806c.06509.24787.28463.38721.473.54044.16011.13027.33016.25107.33474.48731a5.069,5.069,0,0,0-.24709.95839,3.319,3.319,0,0,1-.43115.68805c-.3033.22616-.66432.15239-1.00364.19324a.99763.99763,0,0,1-.659-.51533C68.226,23.82726,67.97967,23.55223,67.76878,23.25483Z"/><path class="cls-60" d="M71.061,15.47131A11.35678,11.35678,0,0,1,72.446,13.697c.03789.00713.08457.01418.1027.04459a9.719,9.719,0,0,1,1.29892,2.26854,1.44679,1.44679,0,0,0,.17974.648c.08595.17275.10738.33913-.09271.45715a1.33143,1.33143,0,0,0-1.43423.41976c-.10335.09006-.219.18851-.38.12223a15.495,15.495,0,0,1-1.05793-1.82778A.30317.30317,0,0,1,71.061,15.47131Z"/><path class="cls-61" d="M69.62251,41.11829c.077-.0509.13289-.02427.20035.03252.44525.37487.89567.74361,1.34319,1.11579a10.934,10.934,0,0,0,1.25.72159,2.88841,2.88841,0,0,1,.57257.3686c.22945.0996.30522.33344.44077.513.1994.26415.38734.537.5837.80374a1.06271,1.06271,0,0,0,.60731.49112.27369.27369,0,0,1,.21726.195,1.29847,1.29847,0,0,1-1.43721-.12357,20.03056,20.03056,0,0,1-2.45186-1.73,1.35316,1.35316,0,0,1-.42726-.53187c-.01852-.04646-.044-.14255-.12735-.07774-.02779.0216-.01572.09445-.02186.14387a3.54168,3.54168,0,0,1-.37091-.88245A10.46189,10.46189,0,0,1,69.62251,41.11829Z"/><path class="cls-62" d="M67.3514,26.87892l.0205-.908c.07905-.17914-.00849-.37519.05645-.55576l.02644-.46538a.66219.66219,0,0,1,.65677.20617,1.1139,1.1139,0,0,0,.58305.26477c.87917.37166,1.05494,1.159,1.17134,1.98183a1.25693,1.25693,0,0,1-.84445.60742,6.78435,6.78435,0,0,1-1.43737.07753c-.09564-.0135-.2098.02255-.255-.1083A9.68465,9.68465,0,0,1,67.3514,26.87892Z"/><path class="cls-63" d="M135.30686,58.06082c-.13563-.15016-.27191-.02087-.383.02375a9.72665,9.72665,0,0,1-2.19435.61408,12.58469,12.58469,0,0,1-1.348.062.96005.96005,0,0,1-.08319-.4087c-.0278-.25815.09827-.39038.34334-.47158.26963-.08934.56011.01021.81834-.121a16.94853,16.94853,0,0,0,2.48847-.73624,14.72051,14.72051,0,0,0,2.40988-1.1681c.071-.04892.16845-.1487.26475-.0176A20.80478,20.80478,0,0,1,135.30686,58.06082Z"/><path class="cls-64" d="M75.91646,10.57176A1.81222,1.81222,0,0,0,76.72,11.67819c.27183.13271.37913.40572.56323.61243.06842.07683.11461.18861.23038.17419a4.05174,4.05174,0,0,1,1.44429.29761,3.96385,3.96385,0,0,0,1.68417.177.3414.3414,0,0,1,.35821.07175.35091.35091,0,0,1-.28537.16744,27.69242,27.69242,0,0,1-3.368.33022,3.31468,3.31468,0,0,1-.34244-.01575.56436.56436,0,0,1-.3163-.124,8.44389,8.44389,0,0,1-1.59781-1.62379c-.09079-.14424-.23532-.28819-.09841-.48338A5.11209,5.11209,0,0,1,75.91646,10.57176Z"/><path class="cls-65" d="M68.3117,36.34338l-.4514-2.46718c.033-.11586.13494-.15017.20744-.0886.4184.35533.99491.41207,1.41453.76069a2.60322,2.60322,0,0,1,.34975.84c.1653.53468.60371.90469.7818,1.42247a1.01492,1.01492,0,0,1-.041.73373.86537.86537,0,0,1-.90823-.20032C69.23692,36.97468,68.77048,36.66609,68.3117,36.34338Z"/><path class="cls-66" d="M67.52542,31.324l-.01965-.37093a1.71537,1.71537,0,0,1-.024-.43734A2.05062,2.05062,0,0,1,67.573,29.654c.08827-.17765.17809-.28411.40656-.24315a3.17643,3.17643,0,0,1,.93314.152,1.26254,1.26254,0,0,1,.4527.64721,2.46593,2.46593,0,0,0,.10606,1.32028c.10474.34436-.0014.71007.10707,1.05556a.15053.15053,0,0,1-.08157.15988,2.61511,2.61511,0,0,1-1.91017-1.14914C67.53573,31.51267,67.58246,31.40669,67.52542,31.324Z"/><path class="cls-67" d="M128.7694,86.95128c-.00928.14011-.02668.28023-.0267.42034q-.002,12.51152-.011,25.023c-.0006.38327.10488.45875.46557.4513,1.18032-.0244,2.36154-.01658,3.54221-.00335.25644.00288.34767-.04581.3474-.32848q-.01219-12.66547-.00735-25.331c0-.0766-.01056-.15319-.01619-.22979.14675.10314.0877.25794.08775.39032q.00417,12.57035.00993,25.14067c.00038.34179-.09261.43486-.43145.42909q-1.79012-.03052-3.581.00061c-.36751.007-.47339-.09245-.47242-.46659q.01876-7.238.00828-14.47609,0-5.29378.003-10.58757C128.68762,87.23863,128.6228,87.07222,128.7694,86.95128Z"/><path class="cls-68" d="M68.3117,36.34338c.27408-.0402.43228.17691.6096.30975a8.71552,8.71552,0,0,1,.83673.65369c.17865.171.505.18774.76526.27343a.15064.15064,0,0,1,.17552.03153c.38727.348.749.72351,1.14673,1.0605a.19812.19812,0,0,1,.07043.239,1.74465,1.74465,0,0,0-.1118.15408c-.23018.42963-.33583.47654-.81851.3636-.55913-.48185-1.24075-.79879-1.77165-1.32345-.0954-.09428-.27337-.29549-.46084-.0673A12.50431,12.50431,0,0,1,68.3117,36.34338Z"/><path class="cls-69" d="M74.992,11.26191A2.80759,2.80759,0,0,0,76.13715,12.745c.2767.20389.42261.558.78027.65137.08316.05784.185.09918.21772.20649.06041.19813.21056.232.39034.2341a.85577.85577,0,0,1,.70154.33009c-.6531.08321-1.31764.36843-1.93911-.1126a.29249.29249,0,0,0-.14235-.05085,2.35345,2.35345,0,0,1-1.55337-1.12737c-.21966-.27658-.20642-.64429-.37085-.94231A3.28557,3.28557,0,0,1,74.992,11.26191Z"/><path class="cls-70" d="M73.759,16.015c-.14564-.70105-.70022-1.17622-.99459-1.7959A5.62028,5.62028,0,0,0,72.446,13.697a5.926,5.926,0,0,1,.84905-.92122,9.51589,9.51589,0,0,0,1.32929,2.05847c.20734.20741.26382.555.59864.64164a.435.435,0,0,1,.09767.45765,5.22844,5.22844,0,0,0-.67944.19388C74.357,16.24844,74.06007,16.02343,73.759,16.015Z"/><path class="cls-71" d="M67.60117,31.57294c.01265.00147.032-.00185.037.00511a3.84853,3.84853,0,0,0,1.807,1.14984c.21464.10589.22583.33.28685.5176a4.18853,4.18853,0,0,1,.241.92345c-.08858.24893-.22019.44283-.52821.40812-.45836-.26716-1.0229-.32993-1.41082-.73592-.04873-.051-.119.00366-.17372.03507-.118-.71422-.22132-1.43033-.27658-2.15261A.1116.1116,0,0,1,67.60117,31.57294Z"/><path class="cls-72" d="M92.55579,8.23593a18.867,18.867,0,0,1-3.95548-1.097c-.14323-.0621-.31167-.00312-.43185-.12247l.16082-.04246a3.78373,3.78373,0,0,1,.75609.01592l.3746.01852c.12347.07653.26983-.00106.39578.05874.97491.155,1.95709.26575,2.92221.4803.09573.0552.24293-.05721.30893.09482a15.14264,15.14264,0,0,1,1.70489.531c-.07123.388-.374.21746-.55717.18827-.4485-.07147-.89177-.17635-1.34375-.23743A.33717.33717,0,0,0,92.55579,8.23593Z"/><path class="cls-73" d="M71.061,15.47131a1.20379,1.20379,0,0,0,.2398.5949c.28591.51889.561,1.04374.8404,1.56623.1925.262.35529.5277.10808.84574-.45551-.06694-.88708-.25231-1.35192-.27683a3.08271,3.08271,0,0,1-.71293-.941.50568.50568,0,0,1,.03-.47772A8.37128,8.37128,0,0,1,71.061,15.47131Z"/><path class="cls-67" d="M164.46326,94.43542c-.04432.05941-.11112.092-.147.01611a.59628.59628,0,0,1-.01482-.22767c-.01434-.66011-.0142-.66012-.6613-.66012-1.12887,0-2.25781.00685-3.38656-.00554-.23583-.00258-.29944.0585-.29917.29765q.01035,9.34962-.00065,18.69925c-.00032.25522.09144.28774.31.28613,1.23143-.009,2.46315-.01608,3.69433.004.307.005.34953-.10016.34888-.37093q-.01282-5.38663-.0036-10.77331a.84848.84848,0,0,1,.04124-.452q.00438,5.677.01279,11.35421c.00054.23991-.08691.30733-.31545.306-1.28322-.00773-2.56664-.01357-3.8497.0026-.35885.00453-.30783-.21143-.30782-.42784q.00027-4.73425-.00013-9.46851c0-3.02788.00675-6.05578-.00823-9.08358-.00181-.36487.111-.449.45594-.44346q1.80894.0292,3.61858.00051c.321-.00468.43339.08949.411.41093C164.3493,94.076,164.26863,94.28905,164.46326,94.43542Z"/><path class="cls-74" d="M85.39131,8.92912a9.46466,9.46466,0,0,0-1.60971-.46668,4.19062,4.19062,0,0,1-1.62953-.774A5.82331,5.82331,0,0,1,83.624,7.32859a.88789.88789,0,0,0,.2637.149c1.02037.16108,1.71262.98981,2.65915,1.29751-.03457.3169-.26716.2455-.45287.21125A1.40021,1.40021,0,0,0,85.39131,8.92912Z"/><path class="cls-75" d="M68.90592,29.64728c-.32724-.166-.70285-.02548-1.03538-.16412-.13285-.05539-.14441.06965-.17891.14219a1.81476,1.81476,0,0,0-.18362.89067.04856.04856,0,0,1-.05992-.03733l-.01951-.45c-.0652-.18083.02207-.37712-.05645-.55659l-.0205-.90669a.93226.93226,0,0,1,.01871-.53561c.56286-.03042,1.1239-.10075,1.68923-.0769a.46509.46509,0,0,1,.16022.47274A3.49691,3.49691,0,0,1,68.90592,29.64728Z"/><path class="cls-76" d="M69.29082,21.09765a.4402.4402,0,0,0-.5016.01883.75968.75968,0,0,1-.50575.13351,14.60789,14.60789,0,0,1,.79053-2.21337c.0772-.186.15648-.37106.23481-.55656.1732-.10042.26454.038.34924.13741a5.26256,5.26256,0,0,1,.76116,1.27061c-.05633.36962-.37928.44735-.64875.51637-.28767.07369-.42.19184-.39068.48766A.24574.24574,0,0,1,69.29082,21.09765Z"/><path class="cls-23" d="M70.36945,19.86586c-.23146-.3602-.46141-.72138-.69514-1.0801a.54869.54869,0,0,0-.36552-.3057,17.32791,17.32791,0,0,1,.90564-1.6974c-.0787.43334.24147.69649.435,1.01265.0794.12969.17251.251.25938.37613.00916.48039.14334.95.12435,1.433A.80118.80118,0,0,1,70.36945,19.86586Z"/><path class="cls-67" d="M34.63653,86.95277c-.00687.14054-.01973.28109-.01975.42164q-.00144,12.50859-.01034,25.01718c-.00055.37548.0918.46315.4598.45488,1.16713-.02627,2.3355-.02395,3.50275-.00071.3342.00665.41439-.09655.39121-.407a1.2725,1.2725,0,0,1,.04269-.672.04674.04674,0,0,1,.03562.00652.37674.37674,0,0,1,.038.05725,1.63217,1.63217,0,0,0-.05443.75391c-.00359.21661-.04738.32712-.29792.32531-1.29548-.00938-2.59107-.00758-3.88657-.00117-.21348.00106-.31232-.06961-.2911-.2882.00739-.07622.001-.15378.001-.23073q0-12.48455.00352-24.96912C34.55111,87.26433,34.47637,87.08386,34.63653,86.95277Z"/><path class="cls-77" d="M68.67462,25.48821a.5946.5946,0,0,1-.57647-.22418,1.4173,1.4173,0,0,0-.64337-.31429c.17693-.55158.17005-1.13721.314-1.69491.39349.13231.5242.52965.71969.81871a1.22841,1.22841,0,0,0,.57152.49075l.02128.02922C68.89316,24.868,68.85718,25.21151,68.67462,25.48821Z"/><path class="cls-67" d="M177.22583,102.5521a1.79587,1.79587,0,0,1,.06058.72045c.00315,3.04846.00956,6.09694-.00762,9.1453-.00207.36752.11249.43365.44558.42644,1.21592-.02631,2.43248-.02357,3.64879-.03177-.07453.12847-.20111.09144-.311.09163-1.16753.00215-2.33509-.003-3.50257.005-.23243.00159-.348-.04219-.34715-.31354Q177.228,107.57389,177.22583,102.5521Z"/><path class="cls-67" d="M39.0672,94.56872c-.10942.11769-.11257.01719-.11348-.05939-.00323-.26857-.00145-.53718-.00145-.80579q0-3.14653-.001-6.29306c-.00011-.15276-.01458-.3055-.02237-.45825.15108.11868.08429.28588.08457.43047q.00663,3.38709.00493,6.7742A.66221.66221,0,0,0,39.0672,94.56872Z"/><path class="cls-67" d="M110.80912,119.22141c-.02047.14383.06162.16559.18093.16491q2.25971-.0131,4.51942-.0215c-.07912.1212-.204.08593-.31417.08607-1.38145.00189-2.76291.00348-4.14433-.00248C110.92411,119.44786,110.66086,119.53811,110.80912,119.22141Z"/><path class="cls-67" d="M83.85417,112.81517c1.46011.02565,2.92025.05633,4.38-.01616-.062.14254-.19115.10494-.30007.10512q-1.9029.00318-3.80578.00071C84.0286,112.90477,83.91883,112.92636,83.85417,112.81517Z"/><path class="cls-67" d="M75.69107,112.78575a.73742.73742,0,0,0,.18212.0474q2.10029-.00345,4.20058-.013c-.08116.11919-.20614.08393-.31684.0841q-1.868.003-3.736-.00073C75.90187,112.90322,75.75452,112.95374,75.69107,112.78575Z"/><path class="cls-67" d="M80.07392,93.58078q-2.10051-.00788-4.201-.01359a.72057.72057,0,0,0-.18194.04848c.04132-.13017.15081-.11919.25267-.11922q1.96436-.00063,3.92869-.00005A.21032.21032,0,0,1,80.07392,93.58078Z"/><path class="cls-67" d="M115.73519,71.23472l1.38995-.70672A3.1534,3.1534,0,0,1,115.73519,71.23472Z"/><path class="cls-67" d="M67.37034,28.02985l-.0187.53562a4.58512,4.58512,0,0,1-.00024-1.68656Z"/><path class="cls-78" d="M85.8535,7.01828l-.07681-.02435c.01324-.08648.05893-.15975.15008-.12893a4.99557,4.99557,0,0,0,1.10552.06864A9.78464,9.78464,0,0,1,85.8535,7.01828Z"/><path class="cls-78" d="M99.41191,10.53007l-.43182-.3021-.12341-.13757A.44587.44587,0,0,1,99.41191,10.53007Z"/><path class="cls-78" d="M108.03358,24.932a1.5484,1.5484,0,0,1-.13885-.67607l.21078-.07478Z"/><path class="cls-67" d="M136.14438,102.58635l.00059,1.2288A2.48882,2.48882,0,0,1,136.14438,102.58635Z"/><path class="cls-67" d="M127.55136,6.93352a3.19851,3.19851,0,0,1-.94319.05835A2.61183,2.61183,0,0,1,127.55136,6.93352Z"/><path class="cls-67" d="M129.997,6.99065a3.18526,3.18526,0,0,1-.952-.05633A2.63447,2.63447,0,0,1,129.997,6.99065Z"/><path class="cls-79" d="M103.57168,72.393c.26022.14072.12576.28773.00692.43446l-.23851-.12623C103.58485,72.72437,103.64182,72.60644,103.57168,72.393Z"/><path class="cls-78" d="M89.08537,6.98991q-.37809-.00792-.75614-.01587A1.10273,1.10273,0,0,1,89.08537,6.98991Z"/><path class="cls-78" d="M113.43006,13.3193a.80042.80042,0,0,1-.30652.35746C113.10711,13.45594,113.16417,13.29812,113.43006,13.3193Z"/><path class="cls-67" d="M95.0961,92.48258l-.76687-.00027A.98154.98154,0,0,1,95.0961,92.48258Z"/><path class="cls-67" d="M69.59728,92.48205l-.68972,0A.826.826,0,0,1,69.59728,92.48205Z"/><path class="cls-67" d="M145.6347,113.84119a2.29485,2.29485,0,0,1,.71885.05762C146.11363,113.88453,145.86559,113.96979,145.6347,113.84119Z"/><path class="cls-67" d="M45.79328,92.48174l-.6897.00016A.82888.82888,0,0,1,45.79328,92.48174Z"/><path class="cls-67" d="M170.976,92.48275l-.68992-.0007A.82278.82278,0,0,1,170.976,92.48275Z"/><path class="cls-67" d="M147.37256,113.89837a1.81826,1.81826,0,0,1,.64644-.05434C147.81257,113.96978,147.5885,113.88582,147.37256,113.89837Z"/><path class="cls-67" d="M148.62978,26.58731a.4945.4945,0,0,0-.06057-.03968.25033.25033,0,0,1-.01159-.28822l.01768-.30478C148.69974,26.15638,148.616,26.376,148.62978,26.58731Z"/><path class="cls-67" d="M93.5589,113.84155a2.07483,2.07483,0,0,1,.644.05712C93.98787,113.88489,93.76374,113.97187,93.5589,113.84155Z"/><path class="cls-67" d="M68.06055,113.84437a1.81789,1.81789,0,0,1,.64516.05407C68.49031,113.88594,68.26669,113.96943,68.06055,113.84437Z"/><path class="cls-78" d="M106.94673,20.4885a.60286.60286,0,0,1-.12747-.31212C106.91882,20.25713,107.15882,20.28054,106.94673,20.4885Z"/><path class="cls-67" d="M56.18711,102.84925a1.90021,1.90021,0,0,1-.05681-.64808C56.26027,102.40747,56.17332,102.63277,56.18711,102.84925Z"/><path class="cls-67" d="M147.17211,92.48275l-.61285-.001A.65221.65221,0,0,1,147.17211,92.48275Z"/><path class="cls-67" d="M148.55511,29.26227l.07753-.2443c-.01694.183.06457.37651-.05864.54817Z"/><path class="cls-67" d="M67.37213,29.47215a1.142,1.142,0,0,1,.05646.55659C67.30524,29.8538,67.38535,29.65824,67.37213,29.47215Z"/><path class="cls-67" d="M67.42835,25.41513a1.13391,1.13391,0,0,1-.05647.55562C67.38536,25.78509,67.30543,25.58981,67.42835,25.41513Z"/><path class="cls-67" d="M95.29206,113.89893a1.531,1.531,0,0,1,.57433-.05755C95.68576,113.96848,95.484,113.885,95.29206,113.89893Z"/><path class="cls-78" d="M116.5773,10.62354a.41966.41966,0,0,1-.29477.21626C116.29923,10.6566,116.42141,10.61711,116.5773,10.62354Z"/><path class="cls-67" d="M69.87636,113.89849a1.5555,1.5555,0,0,1,.5684-.05795C70.26635,113.96824,70.06653,113.8861,69.87636,113.89849Z"/><path class="cls-67" d="M44.33343,113.84327a1.5841,1.5841,0,0,1,.57293.05545C44.715,113.88594,44.5143,113.9669,44.33343,113.84327Z"/><path class="cls-78" d="M100.63934,11.40715l-.29957-.24561C100.51254,11.15453,100.67566,11.15926,100.63934,11.40715Z"/><path class="cls-67" d="M56.13256,104.12285a1.47371,1.47371,0,0,1,.05483-.57375C56.17435,103.74069,56.25487,103.94147,56.13256,104.12285Z"/><path class="cls-78" d="M145.70077,16.657l-.14189-.11026-.009-.13512C145.86351,16.33153,145.65194,16.57433,145.70077,16.657Z"/><path class="cls-78" d="M177.13585,94.664l-.23-.157C177.15084,94.31281,177.12909,94.50926,177.13585,94.664Z"/><path class="cls-78" d="M153.3319,94.664l-.23-.157C153.34688,94.31281,153.32513,94.50926,153.3319,94.664Z"/><path class="cls-78" d="M93.08689,7.64229c-.10336-.03035-.22221-.01023-.30892-.09483C92.90517,7.50015,93.06036,7.36172,93.08689,7.64229Z"/><path class="cls-78" d="M168.52515,92.68056c-.07028.07127-.15917.0488-.2437.04838C168.3283,92.53969,168.41,92.52569,168.52515,92.68056Z"/><path class="cls-67" d="M148.47678,30.57166c.0488-.13029-.0137-.2818.07705-.40422l.00841.40518c.035.07238-.003.08233-.0629.07349Z"/><path class="cls-78" d="M84.15858,7.22189l-.23094.01089c.01033-.0765.02934-.147.12844-.13953C84.13368,7.09912,84.147,7.161,84.15858,7.22189Z"/><path class="cls-78" d="M146.8496,18.872c-.08761-.05349-.05432-.15468-.09029-.22856C146.951,18.65581,146.99407,18.72686,146.8496,18.872Z"/><path class="cls-78" d="M122.75194,7.69635a.17449.17449,0,0,0-.01092.04944l-.29566.02973C122.485,7.50715,122.65249,7.73336,122.75194,7.69635Z"/><path class="cls-67" d="M67.44809,30.47869l.06.03725-.00228.43713C67.38812,30.8069,67.45957,30.63776,67.44809,30.47869Z"/><path class="cls-67" d="M170.97943,96.58982a.97509.97509,0,0,1,.48476.05681C171.30151,96.63748,171.12939,96.70816,170.97943,96.58982Z"/><path class="cls-78" d="M115.64564,11.31652a.44344.44344,0,0,1-.28754.21983C115.37228,11.3563,115.4891,11.31043,115.64564,11.31652Z"/><path class="cls-67" d="M169.8782,96.64735a.95321.95321,0,0,1,.48157-.058C170.21127,96.70841,170.03982,96.63716,169.8782,96.64735Z"/><path class="cls-67" d="M67.60117,31.57294l-.01749.15066c-.11141-.11971-.05081-.26452-.05828-.3995Z"/><path class="cls-67" d="M107.73534,74.48749l.378-.00127A.2889.2889,0,0,1,107.73534,74.48749Z"/><path class="cls-78" d="M89.85575,7.06717a.6531.6531,0,0,1-.3957-.05876C89.59326,7.01881,89.73715,6.95783,89.85575,7.06717Z"/><path class="cls-78" d="M166.73952,93.18048c-.07411.03471-.1316.10962-.22666.09361C166.53274,93.10816,166.60268,93.06335,166.73952,93.18048Z"/><path class="cls-67" d="M136.22286,101.739a.73958.73958,0,0,1-.059.40222C136.17074,102.00531,136.11111,101.85959,136.22286,101.739Z"/><path class="cls-67" d="M58.57154,101.893a.7577.7577,0,0,1-.05736.42086C58.52094,102.172,58.457,102.02032,58.57154,101.893Z"/><path class="cls-78" d="M181.3152,102.04668l-.00828-.15528c.162.03346.19188.10877.07318.23109A.11621.11621,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M105.41242,102.38161a.78319.78319,0,0,1-.05479-.4112C105.46656,102.0954,105.40791,102.24271,105.41242,102.38161Z"/><path class="cls-67" d="M157.56534,102.46688a.79407.79407,0,0,1-.05419-.41937C157.62058,102.1755,157.5595,102.32551,157.56534,102.46688Z"/><path class="cls-67" d="M181.3152,102.04668l.06488.07581-.01089.34318A.79228.79228,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M169.69536,92.50317a.73628.73628,0,0,1-.4107.05643C169.40886,92.44834,169.55655,92.508,169.69536,92.50317Z"/><path class="cls-78" d="M148.49933,30.64611l.06288-.07351c.11869.11874.09154.194-.06841.22982Z"/><path class="cls-67" d="M148.17317,92.55775a.86279.86279,0,0,1-.41425-.05452C147.89865,92.508,148.047,92.44853,148.17317,92.55775Z"/><path class="cls-67" d="M157.51082,104.354a.78474.78474,0,0,1,.0546-.42006C157.55914,104.07532,157.62092,104.22581,157.51082,104.354Z"/><path class="cls-67" d="M58.51328,104.02416a.78392.78392,0,0,1,.05476.40671C58.46078,104.30727,58.51821,104.16152,58.51328,104.02416Z"/><path class="cls-67" d="M105.35589,104.43128a.77055.77055,0,0,1,.05618-.41775C105.40653,104.15444,105.4684,104.30457,105.35589,104.43128Z"/><path class="cls-67" d="M136.16523,104.25478a.74668.74668,0,0,1,.05913.40779C136.11021,104.54033,136.17078,104.39276,136.16523,104.25478Z"/><path class="cls-67" d="M126.31593,7.01011a.67723.67723,0,0,1-.40122.05951C126.03457,6.95625,126.1804,7.01787,126.31593,7.01011Z"/><path class="cls-67" d="M171.97711,92.55775a.856.856,0,0,1-.41317-.05454C171.70334,92.50788,171.85133,92.4487,171.97711,92.55775Z"/><path class="cls-67" d="M46.79451,92.55791a.72668.72668,0,0,1-.40275-.05644C46.52775,92.50765,46.67279,92.44962,46.79451,92.55791Z"/><path class="cls-67" d="M145.9003,92.5031a.82161.82161,0,0,1-.41964.057C145.6077,92.44659,145.75871,92.50953,145.9003,92.5031Z"/><path class="cls-67" d="M44.50687,92.50191a.7261.7261,0,0,1-.40456.05658C44.22449,92.44908,44.37021,92.50785,44.50687,92.50191Z"/><path class="cls-67" d="M96.09763,92.56088a.73186.73186,0,0,1-.41686-.05716C95.8215,92.50906,95.97166,92.44679,96.09763,92.56088Z"/><path class="cls-67" d="M148.55448,25.5052a.65338.65338,0,0,1-.055-.39744C148.60536,25.22813,148.54706,25.37121,148.55448,25.5052Z"/><path class="cls-67" d="M93.74,92.50339a.734.734,0,0,1-.41231.0568C93.45229,92.44781,93.60066,92.50825,93.74,92.50339Z"/><path class="cls-67" d="M70.59875,92.56a.73207.73207,0,0,1-.413-.05648C70.32525,92.50828,70.47381,92.4478,70.59875,92.56Z"/><path class="cls-78" d="M166.20009,93.4098c-.07332.03694-.13047.11228-.22648.09535C165.99277,93.33963,166.063,93.29538,166.20009,93.4098Z"/><path class="cls-67" d="M68.31448,92.5025a.87433.87433,0,0,1-.40795.05428C68.03067,92.44974,68.17673,92.5073,68.31448,92.5025Z"/><path class="cls-78" d="M88.19546,102.93568c-.30886-3.22483,2.68818-5.7422,5.19528-6.2551a6.69059,6.69059,0,0,1,7.87565,5.582A6.62838,6.62838,0,0,1,88.262,104.754,15.06279,15.06279,0,0,1,88.19546,102.93568Z"/><path class="cls-78" d="M45.44046,96.56916A6.62622,6.62622,0,0,1,46.56915,109.729a6.54828,6.54828,0,0,1-7.53825-5.02078c-.70494-3.98962,1.20424-7.08688,5.18448-8.02618A4.79038,4.79038,0,0,1,45.44046,96.56916Z"/><path class="cls-78" d="M75.724,103.1979c.32487,3.37788-2.5467,6.07615-5.37,6.52935a6.62965,6.62965,0,1,1,5.27949-8.25142A9.738,9.738,0,0,1,75.724,103.1979Z"/><path class="cls-78" d="M140.22787,103.2052a6.62809,6.62809,0,1,1,6.60744,6.61506A6.605,6.605,0,0,1,140.22787,103.2052Z"/><path class="cls-4" d="M127.64944,20.49762a.36642.36642,0,0,1-.0085-.339A.36642.36642,0,0,1,127.64944,20.49762Z"/><path class="cls-80" d="M115.28107,34.80766l.077-.23106.23111.077C115.608,34.94785,115.34875,34.68625,115.28107,34.80766Z"/><path class="cls-80" d="M109.2723,33.11323a.2326.2326,0,0,1-.2311-.154C109.15331,32.95794,109.26523,32.957,109.2723,33.11323Z"/><path class="cls-79" d="M110.81264,62.61159a5.14418,5.14418,0,0,0,1.13217,1.06258c.14042.12791.31519.21754.45971.34162a.43277.43277,0,0,1-.06156.75676c-1.02975.6414-1.94556,1.43484-2.90376,2.17218-.70619.54343-1.4564,1.03175-2.14217,1.59882a1.98579,1.98579,0,0,1-1.28743.54442.32064.32064,0,0,0-.265.19868.4644.4644,0,0,1-.22055.2032.95766.95766,0,0,1-.60409.03844c-.34866-.07437-.08543-.33042-.11459-.50192a1.49819,1.49819,0,0,1-.002-.19184c-.00437-.11608-.00177-.25751-.15759-.258a.22724.22724,0,0,0-.21645.23111,8.37813,8.37813,0,0,1-.28926.98762c-.09036.56337-.49176,1.04671-.42108,1.6545.0187.16079-.11527.18646-.23722.16639a3.81142,3.81142,0,0,1-.44537-.10861c-.54111-.15779-.54072-.15914-.54337.4234-.02416-.0432-.07393-.08977-.06874-.1291a2.40675,2.40675,0,0,0-1.02794-2.07307,1.336,1.336,0,0,1-.39207-1.38891,17.65093,17.65093,0,0,0,.33857-2.6837,2.96015,2.96015,0,0,1,.56487-1.32078c.378-.59108.3537-.759-.24547-1.10936-.48175-.28168-.92758-.62533-1.3851-.94753a.3725.3725,0,0,1-.17012-.36338c.13152-1.19084.69191-1.535,1.92084-1.423.206.01877.40656.12556.61929.04.60574.16018,1.1457.48479,1.73227.69546a.75036.75036,0,0,0,.61525-.01923,9.27991,9.27991,0,0,0,1.23314-.61986c.44822-.2792.47176-.4158.1147-.79984-.27163-.29214-.49246-.62271-.74658-.92766-.097-.11641-.19681-.24466-.11485-.41643a.87423.87423,0,0,1,.80245.24627,3.76621,3.76621,0,0,1,.49574.53338c.26786.318.48725.69989.95868.77316a.42918.42918,0,0,1,.24465.17789c.42841.52907.94151.97631,1.41511,1.46164A2.52952,2.52952,0,0,0,110.81264,62.61159Z"/><path class="cls-81" d="M105.49757,58.45255a3.71917,3.71917,0,0,0,.83212,1.16791c.5622.6528.53769.67223-.19689,1.13939-.40042.25465-.85555.388-1.26285.62275-.07739.04461-.16235.09566-.25267.05043a14.58081,14.58081,0,0,1-1.97-.901,2.28094,2.28094,0,0,0-1.26123-.38546,8.20584,8.20584,0,0,1-2.511-.44969c-.56383-.24151-1.14414-.44743-1.69621-.7127a18.11658,18.11658,0,0,0-1.73617-.71807c-.98341-.35287-1.94235-.77371-2.92448-1.1305a14.75411,14.75411,0,0,1-1.50083-.43854,1.66367,1.66367,0,0,1-.81427-.58461c-.19293-.30721-.62839-.30513-.95632-.4358a34.161,34.161,0,0,1-4.02688-1.70007c-.38-.211-.754-.43288-1.13153-.64834a1.344,1.344,0,0,0-.87054-.3095c-.2355.0269-.453-.21023-.65754-.36394-.35708-.26832-.73194-.51753-1.062-.816a3.97283,3.97283,0,0,0-1.26831-.62612.24035.24035,0,0,1-.07084-.2472c.11286-.344.07985-.71074.17515-1.0567a1.03684,1.03684,0,0,1,1.3013-.08118,2.05142,2.05142,0,0,1,.69881.79915.4927.4927,0,0,0,.20972.221,1.79638,1.79638,0,0,1,.87019.98312.46894.46894,0,0,0,.242.23944c.95208.55871,1.92946,1.06958,2.92568,1.54473a.36088.36088,0,0,0,.1439.05242,10.18569,10.18569,0,0,1,2.90529.81684,1.00022,1.00022,0,0,0,.815.00412.76847.76847,0,0,1,.52756.01337c.71544.14462,1.398.40886,2.12956.51113.7473.10445,1.48294-.03164,2.22283.016a.30515.30515,0,0,0,.31278-.23769.52524.52524,0,0,1,.64175-.35914,16.24625,16.24625,0,0,0,2.26689.06291,4.34521,4.34521,0,0,1,1.10607.11165,1.23046,1.23046,0,0,0,.75864-.02782,1.00574,1.00574,0,0,1,1.05844.1435c-.041-.44062-.00643-.48163.49742-.61932a.625.625,0,0,1,.41642.31474c.83356,1.16852,1.86025,2.1824,2.68319,3.35876A3.00284,3.00284,0,0,1,105.49757,58.45255Z"/><path class="cls-82" d="M80.38439,49.90345a4.82756,4.82756,0,0,1-.15445,1.3093c-.27457.15081-.261.49361-.4621.69336-.42907-.06363-.89022-.01217-1.23178-.37832-.07463-.08-.18133-.1317-.232-.238.16243-.34512-.10392-.63272-.19693-.90733-.11009-.325.048-.69953-.231-.98714-.1061-.10937.03839-.227.16345-.28118.34436-.14905.68982-.29552,1.03485-.443.28842-.15866.47413.08748.69989.17664A4.532,4.532,0,0,1,80.38439,49.90345Z"/><path class="cls-83" d="M102.64725,29.03122c.03722.00786.10175.00683.10764.02489.13027.40006.5055.63973.664,1.01992a19.336,19.336,0,0,0,1.07193,2.18063.55212.55212,0,0,0,.23636.24042c.14024.04022.18516.16885.24995.27584a10.23179,10.23179,0,0,0,5.0529,4.17554c.31912.1315.6399.25907.96373.37928.11938.04432.29074.055.28143.25266-.01854.29048.22811.31711.407.37583.88481.29043,1.80826.437,2.70135.68906a16.53567,16.53567,0,0,0,2.87668.55315.3312.3312,0,0,1,.3319.38441,1.16781,1.16781,0,0,0-.75216.14618,2.41072,2.41072,0,0,1-1.67474.15976c-.78777-.14729-1.59648-.21315-2.36976-.383a16.7331,16.7331,0,0,1-4.33757-1.7281,3.29828,3.29828,0,0,0-.57223-.19724.70765.70765,0,0,1-.38518-.23124,9.24839,9.24839,0,0,1-2.0468-1.94635,17.92431,17.92431,0,0,1-2.59848-5.13885A3.10335,3.10335,0,0,1,102.64725,29.03122Z"/><path class="cls-84" d="M111.27522,37.5804c-.59464-.25852-1.19543-.50393-1.78255-.77855a11.14581,11.14581,0,0,1-2.64452-1.66567,9.95154,9.95154,0,0,1-2.12094-2.6391c.07061-.36584-.303-.58364-.30814-.92423a2.90965,2.90965,0,0,0,1.05926.99121c.27487.16053.42237.53062.64414.79216a7.022,7.022,0,0,0,1.93982,1.65524.61045.61045,0,0,0,.36262.10427c.7619.26014,1.37875.80079,2.15422,1.05737,1.12912.37359,2.28715.60328,3.438.87844a16.09879,16.09879,0,0,0,2.23833.39849,33.76317,33.76317,0,0,0,3.66874.453,1.37861,1.37861,0,0,1,.98047.21643,2.3304,2.3304,0,0,1-.88782.14906,19.2957,19.2957,0,0,1-3.3243-.14295.25082.25082,0,0,0-.15147.00416c-.9598.574-1.89437.05546-2.83708-.063C112.88286,37.96362,112.10541,37.64,111.27522,37.5804Z"/><path class="cls-80" d="M104.80425,28.338a3.80185,3.80185,0,0,1,.68549,1.435,6.74169,6.74169,0,0,0,1.51765,2.4138,4.03126,4.03126,0,0,0,1.51724.88893c.45414.143.85466.45045,1.30848.63223a24.48073,24.48073,0,0,0,3.494.97422c.58014.13787,1.16266.03673,1.72281.20267.212.299.55662.18314.82451.21291,1.07127.11907,2.14994.1713,3.22572.25038.081.006.21145-.03819.2179.08621.007.134-.123.13848-.22555.1418-.11486.00371-.22991.00139-.34488.00169-.30426.391-.74817.3223-1.13971.28462-.683-.06571-1.36922-.12964-2.05117-.18509-.71453-.05809-1.40653-.2278-2.11633-.29353-.77473-.07175-1.54633-.1773-2.3193-.26812l-.077-.00017c-.08243-.18221-.27161-.17635-.42155-.22735a9.16877,9.16877,0,0,1-3.22461-1.78475,8.919,8.919,0,0,1-1.04677-1.26113A9.28838,9.28838,0,0,1,104.80425,28.338Z"/><path class="cls-85" d="M119.59505,64.84514c-.08038.11624-.21628.04618-.31413.09314-.12943.06211-.2703.13624-.09909.30272.08286.08056.13436.18544.02169.25621-.42869.26921-.67841.74889-1.14918.96534-.00427-.11289.09008-.18045.12594-.27345.11927-.30935-.02548-.567-.3424-.569a3.68853,3.68853,0,0,1-1.58407-.46539c-.80188-.39162-1.62429-.74157-2.42386-1.13956a17.01924,17.01924,0,0,1-1.75963-1.19271c-.31921-.21067-.60129-.48537-1.0262-.44192a30.20019,30.20019,0,0,1-2.73937-2.57077c-.31534-.31636-.52035-.71637-.80432-1.06193-1.0406-1.26636-2.2616-2.36824-3.278-3.65248-.28551-.36074-.5694-.723-.85618-1.083-.079-.0991-.16343-.20238-.11046-.34633.21257-.09237.29814.07812.39816.20075a18.13988,18.13988,0,0,0,1.75515,1.74335,4.75563,4.75563,0,0,1,.6604.69454,25.68717,25.68717,0,0,0,7.9502,5.5791,2.87581,2.87581,0,0,1,1.03351.65364.2609.2609,0,0,0,.09068.07063c.86191.33951,1.63136.86158,2.46919,1.2484a.36006.36006,0,0,0,.18369.05208,2.32657,2.32657,0,0,1,1.38018.39486C119.42825,64.3976,119.67784,64.49365,119.59505,64.84514Z"/><path class="cls-86" d="M103.26354,53.67736a10.00561,10.00561,0,0,0,1.12035,1.4513c1.16684,1.33877,2.44269,2.589,3.5335,3.985.6044.77354,1.31178,1.42329,1.96628,2.13395a9.87627,9.87627,0,0,0,.89817.77376c.11591.0987.2539.18174.26228.35913l-.23148.23106a1.0539,1.0539,0,0,1-.98021-.40014c-.63536-.68445-1.363-1.28007-1.94507-2.01646a.2722.2722,0,0,0-.15184-.10975c-.57727-.05411-.80156-.535-1.10722-.91172a1.7525,1.7525,0,0,0-1.13073-.721,11.43557,11.43557,0,0,1-.934-1.20161q-.89905-1.09157-1.79692-2.1841c-.24978-.30546-.49087-.618-.73591-.92736-.21436-.07335-.29066-.27691-.40733-.4394q-.71349-.99367-1.38989-2.01316c-.09689-.14647-.22054-.28832-.16511-.4884a1.71656,1.71656,0,0,0-.28914-1.56466c-.10061-.18191-.31567-.31519-.2376-.57128.21207-.12427.29583.052.38347.17788a4.60249,4.60249,0,0,0,.60678.76821c.78269,1.15729,1.69081,2.21826,2.55157,3.3157C103.16549,53.42886,103.31348,53.504,103.26354,53.67736Z"/><path class="cls-87" d="M102.64725,29.03122a19.29163,19.29163,0,0,0,.65037,2.23841,26.312,26.312,0,0,0,1.2426,2.50022c.42964.71876.8928,1.40344,1.38909,2.07365a8.77941,8.77941,0,0,0,1.19952,1.12284,1.87046,1.87046,0,0,1,.37166.38286.77273.77273,0,0,1-.40136-.20553,21.74617,21.74617,0,0,1-2.1227-1.973,1.16161,1.16161,0,0,0-.4031-.28579c-.129.03945-.19-.05347-.24212-.13776-.4757-.76965-.93758-1.54732-1.339-2.35972a23.77022,23.77022,0,0,1-1.2735-3.86448,34.23876,34.23876,0,0,1-.68445-3.97577,14.153,14.153,0,0,1-.19288-2.60013,2.89712,2.89712,0,0,0-.06579-.80076,13.33422,13.33422,0,0,0-.22315-3.66223,9.92653,9.92653,0,0,0-2.409-5.02522,9.1848,9.1848,0,0,0-1.01185-1.04934.53028.53028,0,0,1-.18517-.40059c-.34179-.32184-.85562-.38573-1.15554-.77036.3373-.3008.32492-.3663-.07693-.57989a5.74349,5.74349,0,0,0-.98236-.40543c-.23827-.07469-.40736-.202-.40419-.478a13.009,13.009,0,0,1,3.5316,1.63325,8.66,8.66,0,0,1,3.47038,5.4176,15.05439,15.05439,0,0,1,.39683,3.25761c.00994,1.03163.00618,2.0662.0848,3.09363q.14706,1.9218.34417,3.8415A26.60036,26.60036,0,0,0,102.64725,29.03122Z"/><path class="cls-88" d="M103.10947,32.42006a19.21964,19.21964,0,0,0,1.46386,2.46483,2.60093,2.60093,0,0,0,.81354,1.13934,14.56487,14.56487,0,0,0,3.14495,2.78041,17.06018,17.06018,0,0,0,3.54767,1.72112,35.233,35.233,0,0,0,3.39469,1.08257c.211.04646.42237.09337.63576.12562.14642.02213.24106.07863.24962.23649a.69347.69347,0,0,1-.78726.192c-.82189-.17633-1.61678-.49362-2.43876-.61346a11.72724,11.72724,0,0,1-2.47332-.80044,14.00665,14.00665,0,0,1-2.07416-1.0568,1.69571,1.69571,0,0,0-.54632-.2629c-.3471.04715-.45511-.28164-.67815-.4301a4.64282,4.64282,0,0,0-.9657-.86872,12.09344,12.09344,0,0,1-2.37324-2.66244,18.86892,18.86892,0,0,1-2.23343-4.70817c-.03953-.12224-.09458-.24338.00656-.36262.31608-.063.38853.18654.46687.39059a12.6471,12.6471,0,0,0,.53571,1.25862A.96543.96543,0,0,0,103.10947,32.42006Z"/><path class="cls-89" d="M116.74475,44.358a3.528,3.528,0,0,0-1.15554.15423,2.65074,2.65074,0,0,1-1.15609-.19358,22.35364,22.35364,0,0,1-4.0636-1.61624,17.73923,17.73923,0,0,1-3.2828-2.12182,14.31458,14.31458,0,0,0-1.16832-1.10492,16.75888,16.75888,0,0,1-1.80177-2.03472c-.08-.09762-.1786-.19423-.09064-.33866a.24447.24447,0,0,1,.32775.1188,5.18528,5.18528,0,0,0,1.49114,1.35049c.54589.36431,1.01642.85688,1.54657,1.257a11.24313,11.24313,0,0,0,2.46794,1.46475,21.35126,21.35126,0,0,0,5.00981,1.92128,1.1779,1.1779,0,0,1,.56594.21929.89678.89678,0,0,0,.80944.42509A.49158.49158,0,0,1,116.74475,44.358Z"/><path class="cls-90" d="M115.43514,43.4339a14.41738,14.41738,0,0,1-2.38941-.63624,20.67328,20.67328,0,0,1-2.73736-1.157c-.16893-.08916-.33138-.1906-.49682-.28638a14.80842,14.80842,0,0,1-3.66336-2.56961,12.65126,12.65126,0,0,1-1.84819-2.056c-.0726-.11428-.20266-.21045-.13055-.37574.13773-.06822.21442.03916.29757.11023.98158.83892,1.9185,1.73048,2.95606,2.50334.23581.11373.35405.38425.61666.46226a8.85834,8.85834,0,0,0,1.87955,1.15889A26.12916,26.12916,0,0,0,116.2061,42.835c.139.02991.32807.03265.39619.18592.03552.07988-.08813.13822-.16569.1821A2.53,2.53,0,0,1,115.43514,43.4339Z"/><path class="cls-91" d="M107.11531,40.50708a21.8878,21.8878,0,0,0,6.78573,3.54577c.558.18071,1.14546.235,1.68817.45941.04746.16844.29968.15041.32505.377a11.74626,11.74626,0,0,1-3.86868-.83908.81387.81387,0,0,1-.7713-.0949,28.55056,28.55056,0,0,1-2.71993-1.51c-.36966-.26174-.84134-.30614-1.18546-.62193-.35838-.32888-.76067-.61117-1.116-.94273-.51548-.48095-1.094-.88637-1.60205-1.37421a17.44945,17.44945,0,0,1-1.8655-2.24491c-.17565-.23659-.31411-.4998-.51047-.72217-.22928-.33816-.433-.69234-.64958-1.03847a.49213.49213,0,0,1-.09282-.46953c.32989-.33664.4598.0606.66571.18055.44508.58866.80928,1.23148,1.29425,1.79826a14.19458,14.19458,0,0,0,1.63486,1.70757c.62175.52179,1.19127,1.11283,1.80639,1.64917A2.0178,2.0178,0,0,0,107.11531,40.50708Z"/><path class="cls-92" d="M102.3393,36.502c.42779.45665.72563,1.0095,1.116,1.49691a13.80188,13.80188,0,0,0,2.33989,2.34166c.60177.46443,1.15863.99645,1.74509,1.488.36962.30979.85863.34985,1.24184.64889a25.53168,25.53168,0,0,0,2.26589,1.26673,2.15424,2.15424,0,0,0,.99757.306c.003.12766.0997.17049.19563.208a26.56889,26.56889,0,0,0,3.49243,1.114,5.53236,5.53236,0,0,0,1.62718.37259c-.38769.2047-.76464.001-1.14291-.03978a7.1041,7.1041,0,0,0-1.322.03941.31643.31643,0,0,1-.36267.02483c-.82464-.32873-1.722-.43357-2.53448-.77986a18.85522,18.85522,0,0,1-5.43253-3.07053,16.91478,16.91478,0,0,1-1.53388-1.14942c-.29883-.33429-.60292-.66357-.88748-1.01051a4.68307,4.68307,0,0,0-.7147-.989c-.42719-.61827-.74025-1.30691-1.18222-1.91742C102.17167,36.74713,102.1,36.56351,102.3393,36.502Z"/><path class="cls-93" d="M119.59505,64.84514a.56326.56326,0,0,0-.46221-.46211c-.25421-.18462-.08279-.385.04848-.47478a8.31656,8.31656,0,0,0,1.285-1.3115,2.88351,2.88351,0,0,1,1.3623.11106c.735.18387,1.483.30259,2.21794.48293.14842.03642.30947.03966.40173.19123-.25594.35785-.66448.59309-.84273,1.00787-.09841.229-.1472.47731-.38984.60934-.35129.105-.72183.07027-1.07942.2018a1.61772,1.61772,0,0,1-1.03923-.15216A3.80322,3.80322,0,0,0,119.59505,64.84514Z"/><path class="cls-94" d="M104.188,39.73679a8.10424,8.10424,0,0,1,.97124,1.02746c.49432.514,1.15492.78011,1.68251,1.2463a17.59011,17.59011,0,0,0,4.426,2.56268,24.49831,24.49831,0,0,0,2.60583.86606,3.826,3.826,0,0,0,1.02239.30509,17.04312,17.04312,0,0,0,2.52954.693.69112.69112,0,0,1,.1667.07715,2.946,2.946,0,0,1-.85426.15383l.08391.46233-.53925.00019c-.19649.16947-.41238.06665-.62163.04236a5.90669,5.90669,0,0,1-.85834-.18693A19.38764,19.38764,0,0,1,110.81,45.38972a24.83688,24.83688,0,0,1-5.12777-3.58044c-.67549-.63439-1.26825-1.33793-1.8993-2.00922a.64972.64972,0,0,1-.23991-.57956C103.93475,39.17168,103.9978,39.53361,104.188,39.73679Z"/><path class="cls-95" d="M116.05142,49.74938a5.22327,5.22327,0,0,0,1.84885.46212c-.09923.19457-.26346.15476-.43291.1301-.33838-.04924-.67838-.0876-1.01806-.12758a.17656.17656,0,0,0-.16677.0745c-.184.15507-.38893.08471-.58825.051a15.86658,15.86658,0,0,1-5.207-1.9169,33.46586,33.46586,0,0,1-3.7352-2.43035,18.7315,18.7315,0,0,1-3.08239-2.769,3.17933,3.17933,0,0,1-.65667-.92658c.22406-.14659.35844.04549.49248.1533.28916.23255.53338.51554.79809.77575a1.15183,1.15183,0,0,0,.3953.29763c.59694.46295,1.13616.99413,1.73815,1.45251a30.24018,30.24018,0,0,0,5.10324,3.19792,25.92753,25.92753,0,0,0,2.9957,1.19736c.33319.11334.6794.12452,1.012.21608C115.71791,49.634,115.9093,49.61609,116.05142,49.74938Z"/><path class="cls-96" d="M103.03262,42.27852a12.98047,12.98047,0,0,0,2.21187,2.37448,34.7846,34.7846,0,0,0,3.07266,2.32413c1.04806.68327,2.12709,1.3072,3.2264,1.89794a13.03931,13.03931,0,0,0,3.64439,1.25789,3.92274,3.92274,0,0,0,1.09459.15556c.14818.23128.41725.21088.634.29305.12793.04849.27309.0492.36749.16906a.57712.57712,0,0,1-.46376.11266,14.57069,14.57069,0,0,1-1.69214-.1572,10.88228,10.88228,0,0,1-2.70693-.82659,27.16411,27.16411,0,0,1-3.47006-1.80118,1.60635,1.60635,0,0,1-.24646-.18175q-.97491-.772-1.94877-1.5459A14.43452,14.43452,0,0,1,104.336,44.184c-.4256-.532-.974-.93844-1.3664-1.49475a2.36218,2.36218,0,0,0-.42047-.58709c-.08232-.06413-.06332-.18794.00167-.283A.45517.45517,0,0,1,103.03262,42.27852Z"/><path class="cls-97" d="M115.05,50.597a15.72194,15.72194,0,0,0,2.234.15362c1.15087.06313,2.29136.23065,3.43653.33972a18.49094,18.49094,0,0,0,2.24129.2.82085.82085,0,0,1,.485.07642.1763.1763,0,0,1-.20259.07231c-.52913-.188-1.05426.07457-1.582.00753a.40547.40547,0,0,0-.37237.15122c-.32895.20782-.67925.047-1.00785.02466-1.15935-.07878-2.32149-.14473-3.47205-.322a9.44389,9.44389,0,0,0-1.39316-.39869C115.25571,50.86731,115.04524,50.84977,115.05,50.597Z"/><path class="cls-98" d="M116.74474,51.21275c1.08465.0992,2.16905.2012,3.25406.29621.42964.03762.86065.05972,1.291.08888.3703.16441.77448.04089,1.15784.147a8.51531,8.51531,0,0,0,2.23215.08291,3.00438,3.00438,0,0,1,.56712.06449,1.90942,1.90942,0,0,0,1.02547-.10673c.28556-.10238.57124.02376.8652-.02188.595-.09239,1.19577-.20143,1.78766-.247.51177-.03935.99475-.19805,1.5072-.22232a7.54978,7.54978,0,0,0,1.9147-.30227,1.26286,1.26286,0,0,1,.34391-.01042,2.99632,2.99632,0,0,1-1.42073.37549c-1.3267.23436-2.66374.41519-3.99819.59131-.66255.08744-1.34106.14366-2.01439.19077a3.06629,3.06629,0,0,1-1.54788-.05334c-.153-.0683-.21365.08687-.32673.24114a5.6982,5.6982,0,0,0,1.30707.03694,15.89358,15.89358,0,0,1-3.09226.23509.582.582,0,0,1-.50525.1107c-1.08957-.1072-2.188-.08193-3.27518-.22222a1.83966,1.83966,0,0,1-.48356-.10372,11.45869,11.45869,0,0,0-1.34332-.4094c-.18053-.06607-.41515-.05189-.49331-.29331.23384-.19142.48379.0138.7195-.03054-.33635-.21222-.76694-.21868-1.09939-.4912A3.87768,3.87768,0,0,1,116.74474,51.21275Z"/><path class="cls-69" d="M148.55762,26.25941l.01154.2883c-.00289.15373-.0041.3076-.00909.46135a2.42513,2.42513,0,0,1-.24347,1.46081,1.35422,1.35422,0,0,0-.19633.803.74459.74459,0,0,1-.16415.45773,5.2388,5.2388,0,0,0-.68073,1.38676,18.69578,18.69578,0,0,1-1.1476,2.57084c-.25431.41-.35947.89708-.62191,1.31335-.55516.88057-1.10875,1.76193-1.63924,2.65882-.52836.8933-1.19611,1.703-1.76059,2.57662a14.70086,14.70086,0,0,1-1.04835,1.362,10.91082,10.91082,0,0,1-1.05055,1.13016c-.33576.30583-.55431.72652-.90174,1.03574-.93764.83454-1.84141,1.70395-2.86025,2.44852a16.13436,16.13436,0,0,1-2.96824,1.719,7.46953,7.46953,0,0,1-2.06983.51169c-.9908.13125-1.98946.18265-2.98181.30362a10.35671,10.35671,0,0,1-1.11416.10427,5.09152,5.09152,0,0,0-1.64285.16519c-.19512.06863-.35253-.01921-.52413-.04131a5.497,5.497,0,0,0-1.16623.15058c-.63618.04975-1.25455-.21108-1.8845-.17671-.46684.02547-.91382-.28924-1.40859-.00328-.18487.10684-.51955-.08169-.78079-.06316-.55911.03965-1.07553-.20626-1.62634-.202a.632.632,0,0,0-.25445.06685,4.44389,4.44389,0,0,1-1.64123-.3324c-.09872-.02955-.23785-.05415-.20792-.22012a.5426.5426,0,0,1,.47373-.0549c.4032.07211.81157.00983,1.21539.05336.07279.00785.09415-.00563.1191-.08689.09224-.30044.293-.2484.50314-.12924,1.2072.07749,2.40939.20261,3.60793.36673a5.90721,5.90721,0,0,0,1.0275.08762c.68723-.02753,1.36845.05735,2.05971.02881,1.49251-.06161,2.97764-.18038,4.46341-.32054a17.93,17.93,0,0,0,2.61447-.31371,10.96573,10.96573,0,0,0,3.67612-1.76863,22.15609,22.15609,0,0,0,3.05627-2.60906,34.50924,34.50924,0,0,0,3.98745-4.92792,43.26384,43.26384,0,0,0,3.24224-5.653,42.36023,42.36023,0,0,0,2.47212-6.51691A.34868.34868,0,0,1,148.55762,26.25941Z"/><path class="cls-99" d="M118.28545,47.97794a1.35672,1.35672,0,0,0-.15364.00107c-.09614.011-.21832-.04328-.27764.07232-.07994.15577.15985.13233.17017.28293l-2.04995-.12513c-.158.14325-.33745.08335-.51119.04962a17.47507,17.47507,0,0,1-4.931-1.78356,24.47971,24.47971,0,0,1-5.74458-4.20255c-.43442-.43068-.86348-.87223-1.25621-1.34469-.27719-.4316-.588-.84054-.89763-1.24776a19.84407,19.84407,0,0,1-1.54917-2.42788c-.06138-.111-.14187-.21936-.07534-.35789.2627-.064.30707.1731.41581.31078.16331.20679.22576.494.49628.61474a3.30225,3.30225,0,0,1,.81288.96226,21.82918,21.82918,0,0,0,5.30249,5.24571,19.27,19.27,0,0,0,2.57919,1.36231,22.746,22.746,0,0,0,4.12592,1.50945,12.394,12.394,0,0,0,1.54071.23125,3.42084,3.42084,0,0,0,1.42628.53689C117.9336,47.717,118.20843,47.65926,118.28545,47.97794Z"/><path class="cls-34" d="M103.9912,15.76834a.36618.36618,0,0,1,.00851.339A.36618.36618,0,0,1,103.9912,15.76834Z"/><path class="cls-100" d="M116.05142,49.74938a9.04608,9.04608,0,0,1-1.60607-.30927,24.82036,24.82036,0,0,1-6.2407-3.08084,32.69528,32.69528,0,0,1-3.55447-2.77152c-.59419-.54027-1.11406-1.15082-1.65888-1.73833-.3913-.422-.64613-.94271-1.0407-1.36135a.49466.49466,0,0,1-.169-.51663c.19936-.06005.26687.10536.35429.21839a22.45843,22.45843,0,0,0,2.6744,2.77081.50126.50126,0,0,0,.22488.13966.69671.69671,0,0,1,.32959.19,15.20824,15.20824,0,0,0,3.31756,2.48578,20.89584,20.89584,0,0,0,7.08818,2.878.2989.2989,0,0,1,.20385.0946c.06436.26076.31134.23641.49073.29647a10.08826,10.08826,0,0,0,2.51365.62719c-.0432.02416-.08833.07226-.1293.06894-.73193-.05937-1.468.06634-2.19912-.05507A.86267.86267,0,0,0,116.05142,49.74938Z"/><path class="cls-101" d="M117.284,52.291c1.4294.223,2.87469.22357,4.314.30808a7.45441,7.45441,0,0,0,1.15328.15137,19.94371,19.94371,0,0,0,2.62146.00267c-.20049.23675-.50134.16619-.75056.21239a8.67985,8.67985,0,0,1-1.29058.09316,17.32487,17.32487,0,0,0-1.79255.07164c-.64666.0885-1.29274-.11316-1.94378-.0687a.6576.6576,0,0,1-.54789.10765,19.09292,19.09292,0,0,1-2.13054-.27882,1.33547,1.33547,0,0,0-.72659-.31323,1.44753,1.44753,0,0,1-.33605-.07979c-.12009-.04575-.28218-.09806-.25692-.24226.028-.16.20195-.12624.32183-.107A6.08538,6.08538,0,0,1,117.284,52.291Z"/><path class="cls-102" d="M115.97439,48.7487a6.61089,6.61089,0,0,1-1.79314-.36266,24.25482,24.25482,0,0,1-3.03227-1.18546,26.04683,26.04683,0,0,1-5.05172-3.08789,7.00689,7.00689,0,0,1-.72254-.68117c-.11916-.1184-.22086-.25513-.4164-.22905A8.45292,8.45292,0,0,0,103.786,41.992a27.85578,27.85578,0,0,1-2.23175-2.93572c-.1703-.23986-.30342-.50512-.47248-.74788-.09891-.142-.22463-.29021-.14863-.49139.15841-.07041.24866.04634.31406.14421a24.5847,24.5847,0,0,0,2.32465,2.93091c.41991.3695.777.80039,1.16857,1.1966A23.22635,23.22635,0,0,0,108.763,45.311a20.1061,20.1061,0,0,0,4.9384,2.40532,8.89788,8.89788,0,0,0,2.273.49284,6.18975,6.18975,0,0,0,1.64316.46074c.07691.01008.15442.00617.20569.07826v.077A6.7637,6.7637,0,0,1,115.97439,48.7487Z"/><path class="cls-103" d="M76.53205,47.13073a.67985.67985,0,0,0,.05348-.67741c-.09813-.3008-.32672-.59488-.13028-.94.03777-.388-.04941-.77367-.022-1.16168a.34373.34373,0,0,1,.23632-.10811,2.9581,2.9581,0,0,0,1.57493-.66083.25416.25416,0,0,1,.18106-.03869c.199.103.30742.304.47681.43969a.53043.53043,0,0,1,.10908.31866,2.96067,2.96067,0,0,0,.26058,1.21143c-.02812.16872-.15877.20981-.29866.25078-.4654.13636-.56629.33077-.43005.82576.08126.2952.19306.59074-.08521.84867A10.04146,10.04146,0,0,1,76.53205,47.13073Z"/><path class="cls-104" d="M78.45812,47.439a1.18761,1.18761,0,0,0-.02451-.84554c-.21443-.51363-.00367-.83849.55466-.9245a.28034.28034,0,0,0,.24059-.15544c.2125-.05962.348.089.50326.18492a.92893.92893,0,0,1,.33322.62053c.03255.32656.34787.52716.4421.83579-.30052.483-.079,1.14647-.54487,1.57484-.064.05882-.09862.14955-.19484.17259-.24948-.02191-.42843-.25538-.69332-.23107A2.7363,2.7363,0,0,1,78.45812,47.439Z"/><path class="cls-105" d="M116.89881,52.83a17.37,17.37,0,0,1,1.85531.20526c.28053.014.56114.009.84112.02639a2.09262,2.09262,0,0,0,1.012.24076,20.6139,20.6139,0,0,1,2.62214.21012c.36133.074.70655-.09858,1.06486-.06619.06853.27093-.1584.22881-.27743.22243a.42488.42488,0,0,0-.49293.31671.53364.53364,0,0,1-.43024.11793c-1.59569-.02474-3.18952-.10007-4.78259-.18025a9.56748,9.56748,0,0,0-2.03386-.52353,19.99246,19.99246,0,0,1-3.98214-1.25751,24.58873,24.58873,0,0,1-3.12776-1.63554c-.11564-.07268-.26578-.11058-.29762-.27483.16433-.17569.32438-.0701.47627.01579.37461.21184.75763.4078,1.13648.61158a1.3061,1.3061,0,0,0,.75365.21593,9.62624,9.62624,0,0,1,1.56257.63739,14.05587,14.05587,0,0,0,3.55494.94772A1.2,1.2,0,0,1,116.89881,52.83Z"/><path class="cls-106" d="M118.20841,53.83123c1.09849-.03665,2.19357.07338,3.2905.10011.6735.01641,1.35.03131,2.025.0541a16.4266,16.4266,0,0,0,2.66007-.22057,1.99491,1.99491,0,0,1,.42135-.01027c.06969.12095.1861.22322.15407.38488a27.88555,27.88555,0,0,1-3.09228.37723,4.18622,4.18622,0,0,1-.72118-.03266,24.06236,24.06236,0,0,0-2.81159.19437.38655.38655,0,0,1-.35366.10644c-1.136-.1592-2.29656-.06617-3.42161-.3341a.91655.91655,0,0,1-.35755-.126c-.06832-.2096.08713-.34.17629-.49453A9.42514,9.42514,0,0,1,118.20841,53.83123Z"/><path class="cls-107" d="M124.44829,63.382c-1.255-.23049-2.48523-.584-3.75249-.75459a.46839.46839,0,0,0-.25336.06141,9.4734,9.4734,0,0,1-3.63219-.37224,1.56741,1.56741,0,0,1-.87083-.35078.86807.86807,0,0,1,.26982-.72782.62067.62067,0,0,1,.47882-.06317,22.06993,22.06993,0,0,0,2.95958.34985.75646.75646,0,0,0,.34058-.02551,3.3359,3.3359,0,0,1,1.3951-.15547,11.75309,11.75309,0,0,1,2.44621.04691c.46019.02469.92.04317,1.3807.039.1646-.00151.33586-.03086.47062.1038a4.31449,4.31449,0,0,1,.86625.08318.36735.36735,0,0,1,.34156.26129c.05646.15392-.045.25089-.14533.32011-.28819.19888-.33468.68454-.84993.66391.40028.14069.21063.38431.17263.5968a2.236,2.236,0,0,1-1.19508-.17232C124.69978,63.18535,124.58646,63.33815,124.44829,63.382Z"/><path class="cls-108" d="M125.68085,61.53332a25.09434,25.09434,0,0,1-3.072-.09823,10.52167,10.52167,0,0,0-1.242.02121.72321.72321,0,0,1,.18915-.66947.83759.83759,0,0,1,.41418-.06027,21.09871,21.09871,0,0,0,4.20118-.3429.67408.67408,0,0,1,.588.0712,12.83539,12.83539,0,0,0,2.77328-.07683,7.58847,7.58847,0,0,1-2.09293.76072A5.09844,5.09844,0,0,0,125.68085,61.53332Z"/><path class="cls-109" d="M85.93075,11.16261a9.97044,9.97044,0,0,1,1.77163.07693c.1403-.13439.30772-.08818.47259-.07493.85644.06885,1.69843.23359,2.54327.3779a25.74877,25.74877,0,0,1,2.69026,1.34888c.33979.22284.37115.31509.226.68368a.80144.80144,0,0,1-.58826-.10173,5.86873,5.86873,0,0,0-1.5115-.40262,1.837,1.837,0,0,0-.8882-.19466,7.67235,7.67235,0,0,1-1.39322-.25808,10.31743,10.31743,0,0,0-1.60515-.117,20.79374,20.79374,0,0,1-2.37481-.713c-.10953-.0273-.21893-.08747-.19023-.24007.04938-.03633.10983-.11278.14641-.10268A.65046.65046,0,0,0,85.93075,11.16261Z"/><path class="cls-110" d="M85.08317,11.54785c.139.23507.405.19969.61166.25649a12.29917,12.29917,0,0,0,1.93046.59085,2.26167,2.26167,0,0,1-.20947.53136.38131.38131,0,0,1-.36106.05766,5.60577,5.60577,0,0,1-1.43234-.35811,8.31711,8.31711,0,0,0-2.43045-.54691,9.94053,9.94053,0,0,0-1.62336-.08263.57762.57762,0,0,1-.56832-.2945,23.83645,23.83645,0,0,1,3.265-.16128C84.538,11.54024,84.81055,11.73672,85.08317,11.54785Z"/><path class="cls-111" d="M123.13868,57.37428a13.4008,13.4008,0,0,0,1.92694.01431,1.756,1.756,0,0,1,.92337.13973c-.95636.09149-1.87688.39746-2.83574.47553-.032.00261-.06113.04145-.0916.06342-.07232.15784-.21271.16751-.356.15489-.8383-.07389-1.67818-.02247-2.51723-.03278a6.78787,6.78787,0,0,1-.9495-.07573,8.801,8.801,0,0,1-1.42089-.2495.53946.53946,0,0,1-.06668-.59553.86121.86121,0,0,1,.55867-.05,14.53737,14.53737,0,0,0,1.75593.01932c.954-.06319,1.91344.0267,2.87082.03952A.26356.26356,0,0,1,123.13868,57.37428Z"/><path class="cls-112" d="M128.223,57.91323c.11755.06392.21259.1704.368.15845.15987-.0123.17278.10624.17126.22646a.5714.5714,0,0,1-.41674.24573,24.57588,24.57588,0,0,1-5.27359.6326c-.46834-.06446-.94087-.03706-1.4098-.06345a2.79261,2.79261,0,0,1-1.39209-.29857c.05405-.23313.24882-.24709.42334-.23892a25.58976,25.58976,0,0,0,3.624-.24083c.30081-.02861.60256-.06181.90124-.11321.82161-.00985,1.62606-.18052,2.4392-.26913C127.84694,57.93175,128.03452,57.92424,128.223,57.91323Z"/><path class="cls-113" d="M125.21864,58.22149c-.54453.1026-1.08624.225-1.63422.30346a16.179,16.179,0,0,1-2.97463.15855.29046.29046,0,0,0-.32142.15377,1.47233,1.47233,0,0,1-.95828.08683c-.64261-.14626-1.30043-.21163-1.94338-.35932-.19967-.04587-.40558-.06076-.5213-.26437-.0007-.34688.241-.32707.47476-.30787a14.41435,14.41435,0,0,1,1.65823.0675.2813.2813,0,0,0,.21148-.0696,21.68134,21.68134,0,0,0,3.06845.06666c.26073.0014.52223.19012.78332.01017.42782.02309.80783.32341,1.2532.22772A3.6659,3.6659,0,0,1,125.21864,58.22149Z"/><path class="cls-114" d="M123.13868,57.37428c-1.79693-.065-3.59693.08479-5.39248-.07684a.33118.33118,0,0,1-.28661.06949,16.13033,16.13033,0,0,1-2.36894-.59294.58078.58078,0,0,1-.22527-.14144.33353.33353,0,0,1-.06013-.42117c.11131-.16057.27291-.09486.42-.05552a2.01514,2.01514,0,0,0,.79164.10344c.80524.04874,1.59946.19465,2.40217.2704a6.9666,6.9666,0,0,0,1.41635.00226,9.47631,9.47631,0,0,1,1.76335-.01364,15.0547,15.0547,0,0,0,2.4538.00731c.9316-.06493,1.86755-.03705,2.79793-.13023a.20215.20215,0,0,1,.14.05465c.12183.08794.31765.0526.38517.23106a12.76153,12.76153,0,0,1-1.80316.30323C124.75521,57.08087,123.9471,57.22674,123.13868,57.37428Z"/><path class="cls-115" d="M129.53263,55.14072a10.0376,10.0376,0,0,0-1.26468.28162c-.106.04361-.227.05386-.276.1805-.11288.17617-.30173.174-.477.202a29.12646,29.12646,0,0,1-5.16482.45448,7.14344,7.14344,0,0,1-.88091.05769c-.82509-.00028-1.64062-.13735-2.47455-.09654a6.02955,6.02955,0,0,1-1.92391-.22507,1.84636,1.84636,0,0,0-.84033-.301c-.32384-.06157-.40747-.17721-.36643-.4502a.844.844,0,0,1,.49043-.01817,20.537,20.537,0,0,0,2.3702.17255,3.67919,3.67919,0,0,1,1.41244.043,7.03336,7.03336,0,0,0,1.38066-.00388,9.47431,9.47431,0,0,1,1.65351-.0199,19.77184,19.77184,0,0,0,2.377-.14058c.22327-.01474.45212-.1312.67191.01776.38074.1665.73614-.04593,1.10409-.07156A6.62416,6.62416,0,0,1,129.53263,55.14072Z"/><path class="cls-116" d="M126.2201,55.295c-.83557.17525-1.69283.15786-2.53485.28255a5.78792,5.78792,0,0,1-.68052-.04761,14.8899,14.8899,0,0,0-1.7585.05914,6.69873,6.69873,0,0,1-1.825-.11145,1.07719,1.07719,0,0,0-.67359.04786c-.09518-.12555-.37526-.11636-.3201-.32806.0561-.2153.29428-.14808.46422-.17283,1.01757-.14824,2.04392.067,3.06213-.07273a.34275.34275,0,0,1,.26035.03487c1.18292.05267,2.36188-.07612,3.54363-.07739a14.21488,14.21488,0,0,0,2.255-.258c.45813-.07276.91133-.02082,1.36568-.04976q-1.35383.30794-2.7079.6148C126.5221,55.2498,126.37036,55.26912,126.2201,55.295Z"/><path class="cls-117" d="M90.7838,11.625c-.65286.02107-1.26571-.23923-1.91288-.26913-.39047-.018-.77909-.0762-1.16854-.11633-.17687-.20337-.47009-.16095-.67058-.31864-.11724-.09221-.26724-.14581-.33072-.29733.29036-.191.59424-.064.899-.06877.57162-.009,1.163.21317,1.72005-.08529.12774-.12347.28053-.083.431-.0685.55444.05351,1.0997.17716,1.65582.21484.707.31757,1.4139.63716,2.14791.89223.18534.21342.42657.39713.39224.72907a.52421.52421,0,0,1-.6131.02593,9.40185,9.40185,0,0,0-1.74439-.42521A5.12161,5.12161,0,0,1,90.7838,11.625Z"/><path class="cls-118" d="M76.4552,44.35823a1.48392,1.48392,0,0,1,.00005,1.15509c-.04277-.02413-.0907-.07533-.12752-.0683a10.96527,10.96527,0,0,1-1.49008-.08536c-.89144-.22478-1.14588-1.07462-1.64689-1.68178a2.85976,2.85976,0,0,1-.20215-.32109c.264-.04644.50984.0886.77035.07683.15983-.10717.26472.02346.37055.09817a.90816.90816,0,0,0,.96278.13093,1.5418,1.5418,0,0,1,.708-.12407A2.42132,2.42132,0,0,1,76.4552,44.35823Z"/><path class="cls-119" d="M75.83892,43.58794c-.35248.09954-.71494.14907-1.064.27912-.27015.10064-.49564-.144-.72548-.26925-.09712-.05291-.15973-.16765-.29045-.16419-.19462-.59916-.58736-1.10247-.81829-1.68528a.67941.67941,0,0,1-.10613-.317c.27824-.14481.46508-.32138.39124-.68808-.05339-.26511.17245-.36948.386-.44764a.469.469,0,0,1,.2995.02266,1.88035,1.88035,0,0,0,.8815.18955.34259.34259,0,0,1,.23836.10766,1.92018,1.92018,0,0,1,.56963,1.20987c.00814.343.24937.606.33757.92306C75.98042,43.03715,76.12693,43.3385,75.83892,43.58794Z"/><path class="cls-120" d="M73.60489,40.35313c-.22284.14185-.38183.28051-.25894.60371.10078.265-.12214.4448-.51141.47447a9.51753,9.51753,0,0,1-1.15215-.92568,4.53532,4.53532,0,0,1-.69673-1.07664.52651.52651,0,0,1,.24968-.04152c.21441.00722.4448-.01274.44462-.32133-.0001-.16164.10667-.17871.23015-.17656a.60374.60374,0,0,1,.54745-.07432.58279.58279,0,0,1,.278.24906,7.37975,7.37975,0,0,0,.7371.92009A.32669.32669,0,0,1,73.60489,40.35313Z"/><path class="cls-121" d="M96.94645,11.00889c.07634.19751.25213.30205.3963.44041a10.77855,10.77855,0,0,1,3.28481,5.7857,21.89474,21.89474,0,0,1,.31663,2.76075,8.23181,8.23181,0,0,1-.06875,1.10253,3.19065,3.19065,0,0,0-.02993,1.09527c.04882,1.23581.09342,2.47278.22712,3.70342.08268.76106.23517,1.51353.29044,2.27816.01332.18431.11427.37585-.03419.55042-.22122.00845-.21957-.17486-.2587-.31236a21.32067,21.32067,0,0,1-.6968-4.62259c-.02978-.50977-.04636-1.0228-.1183-1.53084a14.50825,14.50825,0,0,1,.05745-1.64784,11.27551,11.27551,0,0,0-1.82182-6.37145,6.98664,6.98664,0,0,0-2.05228-1.94234,5.75763,5.75763,0,0,0-.55767-.33859,12.17131,12.17131,0,0,0-2.6499-1.34316,3.08933,3.08933,0,0,1-.60928-.27114c-.09224-.06838-.24185-.09416-.22-.26074a.283.283,0,0,1,.10249-.02473c.98157.16281,1.96725.306,2.94171.50417a5.85108,5.85108,0,0,1,1.12846.43163C96.70745,11.05356,96.816,11.14553,96.94645,11.00889Z"/><path class="cls-122" d="M92.40154,10.0845a3.91252,3.91252,0,0,0,.84739.46209c-.02917.21065-.20336.18066-.32376.159a1.58036,1.58036,0,0,0-1.11842.03992.38748.38748,0,0,1-.32963-.04474c-.73053.03045-1.43226-.20769-2.157-.23124-.89261-.2817-1.78842-.55382-2.67653-.849-.45645-.15173-.996-.17058-1.25228-.69135.16061-.266.37457-.1312.57782-.07692s.41723.189.57772-.07707a16.072,16.072,0,0,0,4.11061.94118A11.04484,11.04484,0,0,1,92.40154,10.0845Z"/><path class="cls-123" d="M122.21426,54.98669a3.71864,3.71864,0,0,0-1.13346.125,1.66174,1.66174,0,0,1-.8351-.00155,12.336,12.336,0,0,0-1.82836.03217c.13519.18532.35252.187.33032.38318-.98146-.00488-1.95223-.14532-2.92734-.23069a2.93279,2.93279,0,0,1-1.29309-.24859,24.0785,24.0785,0,0,1-6.52229-3.313,22.52266,22.52266,0,0,1-3.18279-2.7161c-.11391-.11828-.25693-.21793-.28662-.39771.08568-.22456.20132-.074.28944-.01215a9.694,9.694,0,0,1,.9427.78917,17.80193,17.80193,0,0,0,2.48592,1.86735c.84068.53217,1.67774,1.06678,2.56633,1.51559.05352.00859.02721-.07915.02267-.028-.00184.02061-.014.02817-.03386.01782a12.55141,12.55141,0,0,1-3.03619-1.99325c-.07666-.0741-.196-.14526-.095-.284.17513-.0507.28654.07628.41586.15044.69875.40069,1.35552.87247,2.06567,1.252a21.86418,21.86418,0,0,0,5.46435,2.189c.122.02753.25784.02643.351.1332a3.76769,3.76769,0,0,0,1.40728.28656c.923.01034,1.83225.17228,2.75263.17537a8.92557,8.92557,0,0,0,1.6075.23427C121.90006,54.91712,122.07517,54.84841,122.21426,54.98669Z"/><path class="cls-124" d="M123.06165,59.0687a20.52446,20.52446,0,0,0,3.19693-.27309c.67143-.08712,1.32992-.2265,1.99532-.33548.18289-.03.32545-.15329.50837-.162a15.727,15.727,0,0,1,2.71806-.55179,3.01193,3.01193,0,0,1,.97964.013c-.01365.135-.10717.16341-.218.1523a3.39913,3.39913,0,0,0-.56287.07173c-.2968.01815-.3409.1897-.27218.41574a.41.41,0,0,1-.02544.36148,1.94561,1.94561,0,0,1-.61779.155c-.97528.23079-1.93789.51508-2.92584.69241a.49635.49635,0,0,1-.38358.15048,8.7551,8.7551,0,0,0-1.98592.13729c-.855.09549-1.71548-.00467-2.56648.13048a4.2281,4.2281,0,0,1-.99336-.07042c-.54843-.043-1.096-.08624-1.64709-.08528a1.587,1.587,0,0,1-.70942-.14224c-.08478-.28551.13454-.27346.2964-.28043.99384-.0428,1.96674-.30308,2.96651-.28258A.42788.42788,0,0,0,123.06165,59.0687Z"/><path class="cls-125" d="M78.227,14.16705a1.8593,1.8593,0,0,0-.97814-.23746c-.12913.02254-.183-.07447-.17482-.193.01-.14491-.10247-.228-.15664-.34019.62471-.00873,1.24681-.06873,1.86755-.10927.74871-.04889,1.47027-.24823,2.21532-.27595a14.70159,14.70159,0,0,1,2.54217-.23095c.59285.069,1.11293.40551,1.71295.46024.17083.01559.41944.04543.32235.349a15.5069,15.5069,0,0,1-2.41548.06968,6.04938,6.04938,0,0,0-1.63247.20286,22.30777,22.30777,0,0,1-2.26751.40507.53733.53733,0,0,1-.26494-.02344A2.13132,2.13132,0,0,1,78.227,14.16705Z"/><path class="cls-126" d="M85.62261,13.55a.362.362,0,0,0-.33807-.21712c-.58856.042-1.049-.38044-1.61123-.42479-.04669-.00368-.08737-.08344-.13085-.12785a11.6074,11.6074,0,0,1,1.87426-.07909.20518.20518,0,0,0,.2057-.075,15.21682,15.21682,0,0,1,1.53273.27239c.09.00665.17206.05056.23965-.04118a5.30563,5.30563,0,0,1,1.8887.35177,2.10033,2.10033,0,0,1,.66187.27046c.03908.16491.05467.33675.22024.446.08217.0542.15563.14229.01255.22591a6.38465,6.38465,0,0,1-1.71311-.17235,4.64876,4.64876,0,0,0-1.33938-.06467,2.08746,2.08746,0,0,1-.94524-.08354C85.98685,13.75286,85.76066,13.73856,85.62261,13.55Z"/><path class="cls-127" d="M121.4439,56.21938a40.81437,40.81437,0,0,0,5.42083-.45068c.37126-.07688.75122-.11167,1.12719-.16586.74569-.0727,1.49087-.15152,2.23734-.215.2798-.02378.56263-.01178.84407-.0161a3.99352,3.99352,0,0,1-1.34923.34551c-.65045.12888-1.247.41855-1.89359.5456a2.55292,2.55292,0,0,0-.84005.18716,3.38119,3.38119,0,0,1-1.234.13583c-1.31786.01657-2.63282.15239-3.95188.09534a.24214.24214,0,0,1-.20661-.07713C121.46252,56.50952,121.33469,56.41189,121.4439,56.21938Z"/><path class="cls-128" d="M119.51877,59.68505c.95944.11689,1.93072.05908,2.88936.21626a14.28581,14.28581,0,0,0,1.75486-.06939,14.52464,14.52464,0,0,0,2.61953-.21353,7.99256,7.99256,0,0,0,1.05533-.01036c-.004.41265-.28963.49954-.61956.5369-.20627.02336-.41673.04275-.45894.30993a12.3114,12.3114,0,0,0-2.0816.25287,20.84851,20.84851,0,0,1-2.84916.13207c-.10248.00287-.20509.00085-.30765.0011a.37166.37166,0,0,1-.32711.06824,1.55144,1.55144,0,0,0-.8325.07023.76175.76175,0,0,1-.41829.02823c-.84072-.17638-1.70561-.20619-2.53989-.42113a.8116.8116,0,0,1-.452-.19091c-.10513-.58545.16787-.90354.73133-.84752a16.22878,16.22878,0,0,1,1.64339.10842A.78524.78524,0,0,1,119.51877,59.68505Z"/><path class="cls-129" d="M75.29962,15.93791a1.37171,1.37171,0,0,1-.07661-.462c.51642.14195.95246-.20867,1.44-.23491.3805-.02047.73169-.18122,1.09578-.23117.41541-.057.83219-.13,1.2526-.16186.23984-.01818.36424-.12127.217-.37317a.809.809,0,0,1,.69893-.08465,2.22517,2.22517,0,0,0,.91149-.049,7.08118,7.08118,0,0,1,2.4303-.27232c.55868.05647,1.11338.15159,1.677.15455a4.18994,4.18994,0,0,1,1.40915.63054c.07151.06953.19628.05132.28754.09326.10277.04724.27232.05761.19431.25073a.60389.60389,0,0,1-.48361.034,10.35961,10.35961,0,0,0-5.80369.56027,16.86327,16.86327,0,0,1-3.91728,1.06251C75.85166,16.95213,75.42019,16.65506,75.29962,15.93791Z"/><path class="cls-130" d="M85.006,14.32051a11.5939,11.5939,0,0,1-1.66771-.13127,4.7051,4.7051,0,0,0-2.10992.20177,6.41311,6.41311,0,0,1-1.99984.08376.48417.48417,0,0,1-.23112-.23112c.6507-.23468,1.35874-.178,2.01223-.38646a11.63945,11.63945,0,0,1,3.71422-.30108c.29994.00265.59915-.15884.8988-.00615l.53906.15462a2.94958,2.94958,0,0,0,1.01242.43073c.10953.04168.26143-.006.31.15624-.026.04622-.06286.09262-.113.09473a4.70771,4.70771,0,0,1-1.95877.00618A.69194.69194,0,0,0,85.006,14.32051Z"/><path class="cls-131" d="M70.36945,19.86586a1.414,1.414,0,0,1,.61618-.23094.51892.51892,0,0,1,.41518.142,2.05349,2.05349,0,0,0,.81834.43734,2.13243,2.13243,0,0,1,.58435.82824c-.03776.17558-.14744.322-.19981.4923a.22788.22788,0,0,1-.22359.1786c-.53447-.03143-.7842.34-1.036.71283-.24.08907-.37944.362-.6662.36643-.01406-.18825-.16177-.27269-.28821-.37572a1.249,1.249,0,0,1-.59139-.78188c-.03654-.23094-.30154-.38934-.5075-.53736,0-.11467-.00277-.22942.0007-.344.00642-.21251-.08533-.42476.32854-.40342A.74106.74106,0,0,0,70.36945,19.86586Z"/><path class="cls-132" d="M68.67462,25.48821c.005-.01159.01588-.024.01432-.03465a1.02571,1.02571,0,0,1,.371-.88927,3.63165,3.63165,0,0,0,1.00127-.15422,1.70323,1.70323,0,0,1,1.064,1.08381c-.10466.59643.042.86277.62681,1.10948.1427.06019.3014.08762.31578.2847a1.21213,1.21213,0,0,1-.50739.81725,3.03818,3.03818,0,0,1-1.73034-.29168,12.45671,12.45671,0,0,0-.41229-1.30134C69.3238,25.78783,68.90458,25.72309,68.67462,25.48821Z"/><path class="cls-133" d="M70.67792,22.79262c.20927-.1222.33855-.37224.61609-.38532.11895-.08783.21754-.00852.32023.03875a6.24089,6.24089,0,0,0,1.77016.48329.76874.76874,0,0,0,.688-.1318.19643.19643,0,0,1,.218-.02684c.089.09736.04381.189-.011.28056a1.92469,1.92469,0,0,1-1.09005.7075c-.38026.09048-.69568.36374-1.09007.43243a3.6154,3.6154,0,0,1-1.65278-.39739A1.94226,1.94226,0,0,1,70.67792,22.79262Z"/><path class="cls-134" d="M70.44644,23.7938a12.25887,12.25887,0,0,0,1.69478.30828,4.64569,4.64569,0,0,1,1.01823.4373c.14867.10327.29793.21213.26788.43a.46216.46216,0,0,1-.325.28368,14.99121,14.99121,0,0,0-1.681.28775.35364.35364,0,0,1-.35867-.0524,2.856,2.856,0,0,0-1.00146-1.07836C70.19493,24.20794,70.22075,23.93844,70.44644,23.7938Z"/><path class="cls-135" d="M75.29962,15.93791c.12116.26612.38376.43386.48741.716.06139.16709.22888.12783.365.13052.15236.003.30482.00065.45724.00062a1.43989,1.43989,0,0,1,1.03941.12339,1.12717,1.12717,0,0,0,.81812.01084c.88143-.27044,1.75143-.57255,2.62151-.87656a9.73823,9.73823,0,0,1,2.83516-.44126.71685.71685,0,0,1,.44723.07409c.01053.313-.26029.303-.43856.33543-.80331.14617-1.56859.43-2.35851.62254a4.006,4.006,0,0,0-.91164.37925A14.216,14.216,0,0,1,76.99864,18.468a8.39357,8.39357,0,0,0-1.22334.32913,1.00475,1.00475,0,0,1-.74961.03751c-.1281-.10081-.04571-.26407-.11585-.38575a1.746,1.746,0,0,0-.5718-.72886c-.209-.1269-.504-.27152-.42519-.62682a.29768.29768,0,0,0,.03291-.40308.98148.98148,0,0,1-.1868-.67515Z"/><path class="cls-136" d="M73.91285,17.09325a.72834.72834,0,0,0,.44519.53009c.38091.15209.44809.51128.65572.77485.10325.13107.04184.26261-.02223.38932a.6866.6866,0,0,0-.22372.73057.30624.30624,0,0,1-.09269.30879,7.73889,7.73889,0,0,1-1.68485.0677,1.45467,1.45467,0,0,1-.7722-1.41518c.188-.30169-.06786-.56313-.07684-.84695a1.34323,1.34323,0,0,0,.6573-.429C73.16245,16.7754,73.5226,16.92236,73.91285,17.09325Z"/><path class="cls-137" d="M69.83015,27.41363a10.3291,10.3291,0,0,0,1.77182.231c.09534-.0641.15126-.02555.18529.07082a9.66333,9.66333,0,0,1-.38909,1.39885,1.69681,1.69681,0,0,1-2.261-.69921,1.389,1.389,0,0,0-.07764-.46219C69.38744,27.87459,69.54109,27.54741,69.83015,27.41363Z"/><path class="cls-138" d="M69.44479,34.57706a.89927.89927,0,0,0,.4624-.38565c.01953-.01637.04418-.04384.06229-.039.50975.13677,1.07878.13871,1.43773.62331a2.78493,2.78493,0,0,0,1.05418,1.881.328.328,0,0,1,.10074.16154c-.03917.22157.15442.48082-.1068.66718a.31824.31824,0,0,1-.22291.01483,11.90535,11.90535,0,0,1-1.70876-.6902,3.97793,3.97793,0,0,0-.54053-.82454c-.1845-.221-.17829-.54563-.336-.8005A2.67873,2.67873,0,0,1,69.44479,34.57706Z"/><path class="cls-139" d="M70.52366,36.81006a8.1717,8.1717,0,0,1,1.52424.536.90461.90461,0,0,0,.40146.08046c.16816.29523.38618.55857.54867.85745.07316.13457.15918.26849.00611.40645a2.631,2.631,0,0,1-.47793.19927l-.6161-.00009-1.38682-1.30933C70.492,37.32351,70.65,37.06685,70.52366,36.81006Z"/><path class="cls-140" d="M69.13721,28.41514c.2062.16753.41854.32812.6172.50415a1.0914,1.0914,0,0,0,1.08934.24518,1.9777,1.9777,0,0,1,.52711-.05633c.23669-.10734.32333.08034.40326.22737a1.73813,1.73813,0,0,1,.241,1.05508,1.05531,1.05531,0,0,0-.729.45984.37083.37083,0,0,1-.37417.15443,6.90629,6.90629,0,0,0-1.365-.59885.42318.42318,0,0,1-.25581-.21941c-.17707-.145-.18946-.40761-.38517-.53932A9.638,9.638,0,0,1,69.13721,28.41514Z"/><path class="cls-141" d="M71.37086,34.80766a3.89661,3.89661,0,0,0-1.46367-.61625l-.462-1.46352a6.961,6.961,0,0,0-.07723-1.155c.11189-.09062.22345-.0362.3221.01624.28527.15167.61438.17636.9013.32058.199.29856.617.40518.70583.80118a1.80527,1.80527,0,0,0,.44777,1.79709.17341.17341,0,0,1,.028.14581A.54634.54634,0,0,1,71.37086,34.80766Z"/><path class="cls-142" d="M70.60051,31.958a4.82858,4.82858,0,0,1-1.23257-.38519,2.1396,2.1396,0,0,1-.07685-1.38625,5.79434,5.79434,0,0,1,1.61794.77019C70.87408,31.31145,70.9232,31.692,70.60051,31.958Z"/><path class="cls-143" d="M72.21807,18.47939c.16053.49322.24221,1.03281.77054,1.30975.03492.183-.09473.25465-.22715.297a2.66194,2.66194,0,0,1-.54339.16507,1.00245,1.00245,0,0,1-.81772-.37536c-.09727-.13478-.31726-.08825-.41472-.24094-.0336-.4874-.28587-.96334-.07679-1.46348A1.85149,1.85149,0,0,1,72.21807,18.47939Z"/><path class="cls-144" d="M100.10509,51.21275a4.98266,4.98266,0,0,0,.72812,1.20217c.37854.58814.79643,1.151,1.19757,1.72456-.50371.249-.50371.249-.34674.7912-.04735.053-.098.02748-.13193-.00836a.94587.94587,0,0,0-1.18206-.21984.81882.81882,0,0,1-.56668.042,9.15052,9.15052,0,0,0-2.32974-.14268,5.92572,5.92572,0,0,1-1.14665-.06675c-.29734-.06987-.57225-.01442-.61449.37728-.02863.26556-.23411.21392-.409.22976a11.26842,11.26842,0,0,1-4.47769-.5614c-.08328-.02656-.20151-.07492-.2562-.03972-.65758.42334-1.18559-.09726-1.75671-.24284a10.13328,10.13328,0,0,0-1.49222-.48264c-1.47344-.12828-2.53353-1.1225-3.79438-1.68909a.48716.48716,0,0,1-.272-.35672,1.03539,1.03539,0,0,0-.52759-.6637,1.13787,1.13787,0,0,1-.6104-.69487c-.05191-.23085-.40007-.26674-.49973-.5077a.35379.35379,0,0,1-.00307-.26082,1.01653,1.01653,0,0,0-.09507-1.06331A.65742.65742,0,0,1,81.921,47.663a.80954.80954,0,0,1,.83549.36132,4.57442,4.57442,0,0,0,1.4204.89808A23.07867,23.07867,0,0,0,88.442,50.66466a2.60935,2.60935,0,0,0,2.10325-.17611.83141.83141,0,0,1,.41216-.07145,12.00146,12.00146,0,0,0,1.68886-.06774,1.03888,1.03888,0,0,1,.778.13946.22891.22891,0,0,0,.14283.05232A4.946,4.946,0,0,0,95.84,50.11726a12.36668,12.36668,0,0,0,1.89609-1.23368.50978.50978,0,0,1,.3907-.13406.24987.24987,0,0,1,.17169.07361A16.27471,16.27471,0,0,1,100.10509,51.21275Z"/><path class="cls-145" d="M81.92453,47.74688c-.26091.0619-.528.66281-.32626.8288.42511.34981.24093.70347.11046,1.07762-.02926.08388-.06136.16677-.09215.25012a1.28872,1.28872,0,0,0-1.2322,0,3.17914,3.17914,0,0,1-.61665-1.00127,2.35618,2.35618,0,0,1,.31661-.52354c.07263-.08.16165-.22983.13212-.30373-.15419-.386.10372-.64655.24459-.94418a.35738.35738,0,0,1,.55621-.14148,4.28957,4.28957,0,0,0,.696.52916C81.8,47.57334,81.94637,47.58671,81.92453,47.74688Z"/><path class="cls-47" d="M115.97439,61.91841a11.06617,11.06617,0,0,0,2.3839.61783,8.48555,8.48555,0,0,0,1.63858.07419.82912.82912,0,0,1,.44557.07836,3.5031,3.5031,0,0,1-1.08,1.16659c-.17192.10065-.36243.26187-.22956.52765a2.89727,2.89727,0,0,0-1.36558-.39452,2.05221,2.05221,0,0,1-1.03642-.47209,13.55661,13.55661,0,0,0-1.53858-.76812c-.28516-.13652-.46114-.432-.76-.56375-.39778-.17532-.78555-.37331-1.183-.54944a21.96656,21.96656,0,0,1-4.65882-2.93614,17.10949,17.10949,0,0,1-2.90691-2.71212,2.69424,2.69424,0,0,0-.34-.307,3.1238,3.1238,0,0,0-.52624-.8379.39546.39546,0,0,1-.12062-.4523c.1894-.0974.27241.06948.37645.16166a3.55281,3.55281,0,0,1,.39885.41105,31.07431,31.07431,0,0,0,5.35635,4.51423,21.91871,21.91871,0,0,0,2.99908,1.62931,14.47057,14.47057,0,0,0,1.90513.706A.48452.48452,0,0,1,115.97439,61.91841Z"/><path class="cls-146" d="M104.7274,54.37053a.732.732,0,0,0,.28856.56028.96309.96309,0,0,1,.32754.749,15.10068,15.10068,0,0,1-1.80342-1.82613.34356.34356,0,0,0-.27654-.17637c-.854-1.022-1.67-2.07408-2.48286-3.12881a3.69371,3.69371,0,0,1-.29061-.4909,1.358,1.358,0,0,0-.34955-.67117c-.16578-.22956-.33882-.47429-.07451-.75345.26223-.06715.36792.13543.48123.29718.63841.91129,1.31151,1.79682,2.007,2.66433.61528.76746,1.24286,1.5257,1.89928,2.25934C104.585,54.00079,104.76182,54.13211,104.7274,54.37053Z"/><path class="cls-147" d="M100.10509,51.21275a5.68051,5.68051,0,0,1-.90864-1.16963A10.79138,10.79138,0,0,1,98.17892,48.825a1.05136,1.05136,0,0,1-.45972-.59193,1.28384,1.28384,0,0,0-.27659-.49995,15.0151,15.0151,0,0,1-1.31507-1.54588c-.06787-.23957-.10312-.48568-.147-.7301a2.51917,2.51917,0,0,0,.33105-1.02076c.25885-.05276.32856.16887.41535.3188.45568.78723,1.00525,1.51126,1.50415,2.269.38831.51016.79652,1.00515,1.17556,1.522.105.14319.28081.28676.15944.5102a.50037.50037,0,0,0,.156.341c.43729.38889.41907.9636.60072,1.45518C100.38534,51.02188,100.24705,51.13358,100.10509,51.21275Z"/><path class="cls-148" d="M99.56612,49.0564a5.28542,5.28542,0,0,0-.94163-1.36251c-.14494-.21576-.29677-.4269-.44548-.64014a19.50347,19.50347,0,0,0-1.44784-3.11088.952.952,0,0,1-.113-.28312,7.77129,7.77129,0,0,0-.24572-.87524.58052.58052,0,0,1-.00645-.47779c.252-.11649.29407.11617.4018.2404.53991.71528.92071,1.53028,1.4204,2.271a2.0609,2.0609,0,0,1,.28539.5401,2.68963,2.68963,0,0,0,.29075.62424.7056.7056,0,0,1,.13052.233c.10729.806.74629,1.31179,1.10508,1.97487.08046.14871.25011.28128.10513.48059-.22049.34759.04261.56244.22171.79812.13356.17575.35169.32483.16327.58861a2.3225,2.3225,0,0,1-.627-.74489C99.78391,49.20517,99.744,49.0503,99.56612,49.0564Z"/><path class="cls-149" d="M101.26062,28.72314c.15986-.12858.01118-.26117-.00215-.38731a43.448,43.448,0,0,1-.4752-5.73687c.01-.37322-.061-.759-.0624-1.14135-.00052-.14341-.00688-.28673.15457-.35933.00179.20456.09.394.081.60472a21.265,21.265,0,0,0,.31808,3.76392,27.71887,27.71887,0,0,0,.75415,3.81531,25.51912,25.51912,0,0,0,1.08076,3.13783c-.20517.02849-.28611-.10579-.36529-.2619a9.393,9.393,0,0,1-.56178-1.32248c-.06345-.19362-.13411-.38925-.38216-.41821a.25658.25658,0,0,1-.21793-.134A3.12,3.12,0,0,1,101.26062,28.72314Z"/><path class="cls-150" d="M101.26062,28.72314q.12164.54068.2434,1.08133a1.06425,1.06425,0,0,0,.29622.613,17.661,17.661,0,0,0,.85642,2.33428,14.88147,14.88147,0,0,0,1.02441,1.97389,12.918,12.918,0,0,0,3.11417,3.60388c.22673.17545.55038.298.62784.637-.50916-.10373-.79692-.52666-1.16347-.82752-.70538-.579-1.3827-1.19209-2.07165-1.791a.35728.35728,0,0,1-.20209-.16663,23.6376,23.6376,0,0,1-1.8428-3.00233c-.41545-.80942-.70368-1.66765-1.09124-2.48657a9.877,9.877,0,0,1-.57418-2.25864c-.02052-.1002-.04231-.19986-.068-.29916a45.591,45.591,0,0,1-.52229-4.92912c-.03771-.75925.102-1.5.0374-2.25348A13.97517,13.97517,0,0,0,98.86848,16.133,7.65612,7.65612,0,0,0,97.664,14.3102a1.48206,1.48206,0,0,1-.30113-.44205c-.02642-.05718-.03081-.13418-.07381-.17333-.47456-.43208-.71443-1.05353-1.19808-1.47779-.10946-.096-.26583-.16867-.22286-.36107A7.32692,7.32692,0,0,1,98.0605,13.5547a8.86827,8.86827,0,0,1,2.085,4.478,11.14262,11.14262,0,0,1,.20032,3.68444,6.748,6.748,0,0,0,.08673,1.48676c.062.73339.11446,1.47.19032,2.20332a13.58749,13.58749,0,0,0,.4401,2.46364C101.14526,28.1501,101.19565,28.43876,101.26062,28.72314Z"/><path class="cls-151" d="M100.49026,28.18391c.10771.44123.24089.87806.31783,1.32459a12.983,12.983,0,0,0,.9628,2.60282,17.62735,17.62735,0,0,0,2.21771,3.9106c.07553.102.13333.21707.19936.32607a4.31788,4.31788,0,0,0,.83719,1.17079,16.68366,16.68366,0,0,0,3.65157,3.13243,6.78227,6.78227,0,0,1,1.13483.70308,4.13863,4.13863,0,0,1-1.28306-.65351,14.23841,14.23841,0,0,1-2.66756-2.03461,2.79517,2.79517,0,0,0-.49951-.27079,3.61411,3.61411,0,0,1-1.00977-1.0326c-.08336-.11793-.15441-.23708-.31776-.24455a1.96222,1.96222,0,0,1-.69341-.72895,21.65015,21.65015,0,0,1-1.78423-3.255,1.13623,1.13623,0,0,1-.0955-.36982c-.06667-.31476-.26118-.58765-.31978-.89921-.21437-1.13974-.59449-2.241-.77525-3.38757C100.34823,28.36669,100.28336,28.21076,100.49026,28.18391Z"/><path class="cls-152" d="M101.56876,32.80506a.81993.81993,0,0,0,.03922.22274,19.489,19.489,0,0,0,2.1083,3.70083c.10421.13114.31594.17708.31761.3896a7.6069,7.6069,0,0,0,.844,1.10886,17.30827,17.30827,0,0,0,1.96089,1.96693c.09861.09786.18464.20839.27649.31306a3.29766,3.29766,0,0,1-.94965-.692c-.50943-.43975-.96233-.9396-1.50316-1.35082a12.59356,12.59356,0,0,1-1.512-1.72851,9.34923,9.34923,0,0,1-.96548-1.46609,4.68342,4.68342,0,0,1-.86152-1.52969,19.512,19.512,0,0,1-1.2481-3.792c-.02741-.14933-.09182-.29863.00681-.44577.20467-.03.20571.14581.24482.26108.07761.22874.12344.46741.183.70183a.72925.72925,0,0,0,.09234.28925A12.84074,12.84074,0,0,1,101.56876,32.80506Z"/><path class="cls-153" d="M100.10652,29.49368a14.97194,14.97194,0,0,0,.84808,3.05317,23.0404,23.0404,0,0,0,1.23044,2.72283.2548.2548,0,0,1-.23539-.16061c-.09509-.189-.23416-.15286-.3807-.07036-.29742-.05915-.36626-.329-.46649-.54568-.16515-.357-.29836-.72909-.47866-1.08047a32.534,32.534,0,0,1-1.11739-3.55191,41.22811,41.22811,0,0,1-.71808-5.01551c-.04535-.54345-.04311-1.0956-.0377-1.64631a10.6171,10.6171,0,0,0-2.27969-7.20427,11.752,11.752,0,0,0-2.502-2.14428c-.12459-.08452-.28213-.13445-.3348-.3a.52662.52662,0,0,0-.32035-.607,12.774,12.774,0,0,0-1.80592-.90866,3.02878,3.02878,0,0,1-.724-.40957,12.5179,12.5179,0,0,1,2.48618.49225c.23494.07836.43439.201.67227.04718a.208.208,0,0,1,.1838.02318c2.10925,1.2313,3.95136,2.71364,4.80969,5.11986a8.8222,8.8222,0,0,1,.60349,2.7228,14.08481,14.08481,0,0,0,.118,1.91415,6.71133,6.71133,0,0,1-.06535,1.10949,30.54062,30.54062,0,0,0,.50652,5.84273C100.1364,29.0906,100.22423,29.29354,100.10652,29.49368Z"/><path class="cls-154" d="M100.72137,33.42118c.3386.50981.39472,1.16757.84758,1.61753a1.07836,1.07836,0,0,0,.23959.58961c.17916.28984.35406.58231.53076.87367-.13727.13092-.0735.25152.01922.37044a20.01592,20.01592,0,0,0,1.634,2.42364.50389.50389,0,0,1,.19541.44072l-.61583-.53894a2.054,2.054,0,0,1-.70358-.73765,20.12785,20.12785,0,0,1-2.76914-4.89433,18.05126,18.05126,0,0,1-.89768-2.65252.5774.5774,0,0,1-.02106-.41274c.21-.0957.27073.05775.32051.20349.074.21651.14395.43459.213.65281a1.659,1.659,0,0,0,.38207.69074,2.62906,2.62906,0,0,1,.38517.902A1.85154,1.85154,0,0,0,100.72137,33.42118Z"/><path class="cls-155" d="M100.18212,33.57544a22.53537,22.53537,0,0,0,2.2789,4.17267c.35207.49623.73969.96723,1.11111,1.44974.11575.55441.58173.86189.91744,1.24947a20.67708,20.67708,0,0,0,5.42126,4.33327,16.94068,16.94068,0,0,0,4.34035,1.921,1.03137,1.03137,0,0,1,.49064.19809,10.14386,10.14386,0,0,1-1.65693-.44128,16.416,16.416,0,0,1-3.18314-1.29667,13.39793,13.39793,0,0,1-3.71765-2.46464c-.24154-.22765-.49577-.44177-.74064-.666a23.40167,23.40167,0,0,1-3.24736-3.81852,1.01093,1.01093,0,0,0-.319-.32419,17.20707,17.20707,0,0,1-1.75331-3.34878,1.04946,1.04946,0,0,1-.10729-.51927A.77949.77949,0,0,1,100.18212,33.57544Z"/><path class="cls-156" d="M101.80005,39.968a1.17328,1.17328,0,0,0,.27255.54195c.48714.57207.8881,1.2119,1.41106,1.75744.40606.4236.77891.879,1.16652,1.32032-.415-.1679-.63068-.5624-.95008-.83916a1.67411,1.67411,0,0,0-.66748-.47007,1.67155,1.67155,0,0,0-.4624-.46212,3.61646,3.61646,0,0,1-.77946-.81978,26.08007,26.08007,0,0,1-1.78526-2.82529,3.16931,3.16931,0,0,1-.48909-1.11533.61119.61119,0,0,1,.20112-.33883c.12937-.006.17013.09474.21372.18484a22.90586,22.90586,0,0,0,1.74708,2.76671C101.73971,39.75978,101.84793,39.83235,101.80005,39.968Z"/><path class="cls-157" d="M116.74474,51.21275a9.63628,9.63628,0,0,1-1.53348-.04933,10.50278,10.50278,0,0,1,1.17739.43076c.06743.0304.16981.0362.14413.13715-.02432.09554-.10946.06884-.19.056-.27586-.04384-.55359-.07593-.83061-.11251-.14822.13651-.31108.07454-.47163.03374a21.87417,21.87417,0,0,1-5.10378-2.09381,20.27968,20.27968,0,0,1-3.75281-2.453,12.22682,12.22682,0,0,1-1.66-1.52868,7.24028,7.24028,0,0,0-.82364-.90293c-.68966-.83256-1.37484-1.669-2.03206-2.52764-.08128-.1062-.18853-.2199-.11878-.38038.16162-.07268.27513.06429.41355.09393a6.80131,6.80131,0,0,1,1.20546,1.28187,21.82971,21.82971,0,0,0,2.456,2.37912c.98848.81129,2.0494,1.52944,3.10853,2.24679a21.04338,21.04338,0,0,0,6.164,2.75979,1.04783,1.04783,0,0,0,.15288.01331c.10908.192.31071.18895.49.22969A3.625,3.625,0,0,1,116.74474,51.21275Z"/><path class="cls-158" d="M108.73305,47.8239a9.77984,9.77984,0,0,1-1.76558-1.12318,20.17726,20.17726,0,0,1-3.54554-3.07676c-.50837-.533-.97981-1.10118-1.468-1.65342a21.70644,21.70644,0,0,1-1.60361-2.426c-.05946-.1107-.14964-.21218-.1027-.35367.24917-.10151.30685.109.38813.25245a9.01009,9.01009,0,0,0,1.24095,1.52585l.69351.84721c-.01454.3458.315.4952.448.76425.18871.38164.60516.60642.872.93a10.93529,10.93529,0,0,0,1.32005,1.43018c.54175.45877,1.08962.91418,1.63653,1.36681a5.73277,5.73277,0,0,1,1.14776.92735C108.18288,47.49425,108.55624,47.53915,108.73305,47.8239Z"/><path class="cls-159" d="M104.57314,45.59034c.57724.59647,1.22586,1.113,1.85486,1.65122a24.51107,24.51107,0,0,0,4.83039,2.95352A18.61123,18.61123,0,0,0,115.169,51.649a1.89494,1.89494,0,0,0,.34313.02589,6.35246,6.35246,0,0,0,1.49041.45642c.11737.028.22662.03625.28141.15973a8.78622,8.78622,0,0,1-1.6261-.05771c.219.25549.53522.22074.81059.27931a.50818.50818,0,0,1,.43033.31735,13.76889,13.76889,0,0,1-4.052-.98877c-.55248-.22808-1.09925-.47-1.64861-.70565a14.87842,14.87842,0,0,1-2.695-1.53995,34.34456,34.34456,0,0,1-5.002-4.2883c-.42339-.44582-.80175-.92978-1.20866-1.38954a9.34161,9.34161,0,0,0-.75608-1.06162c-.07786-.12537-.21029-.23693-.14275-.41437.25622-.06246.36061.154.48178.2926C102.73828,43.72114,103.68575,44.62734,104.57314,45.59034Z"/><path class="cls-160" d="M100.10509,34.03756a3.815,3.815,0,0,0,.51142,1.384,11.06448,11.06448,0,0,0,1.17137,2.141.4543.4543,0,0,1,.08921.32583c-.25225-.022-.28238-.26131-.39379-.41483-.14545-.20042-.22328-.45156-.45379-.58641-.20083-.04455-.286-.20958-.36468-.36923a28.97375,28.97375,0,0,1-1.42472-3.02837,6.043,6.043,0,0,0-.37657-.625A19.90608,19.90608,0,0,1,98.009,30.049a12.99634,12.99634,0,0,1-.39572-1.90942,18.93417,18.93417,0,0,1-.24229-2.519.92191.92191,0,0,1,.07543-.48725c.31537-.08193.25678.17834.29892.33532.12755.47524.13364.97368.27193,1.44692a16.69761,16.69761,0,0,1,.4072,2.18756,21.95423,21.95423,0,0,0,1.49452,4.47379C99.98719,33.7287,100.02264,33.89244,100.10509,34.03756Z"/><path class="cls-161" d="M98.94988,32.88208a3.07944,3.07944,0,0,1,.65927,1.26919c.36456.81367.78908,1.59632,1.17886,2.39662a2.45075,2.45075,0,0,0,.2415.33929,13.23978,13.23978,0,0,0,1.24742,2.13365c.41276.54791.8159,1.10314,1.21838,1.65868a.81245.81245,0,0,1,.07656.21266,12.161,12.161,0,0,1-2.00871-2.30606c-.19966-.26009-.29618-.60469-.61009-.77463-.23767-.07149-.27059-.30915-.38933-.47764a12.38022,12.38022,0,0,1-1.236-2.67087c-.15643-.42749-.286-.87139-.41908-1.31044A.43387.43387,0,0,1,98.94988,32.88208Z"/><path class="cls-162" d="M100.64448,37.3492l.30859.46228a7.74791,7.74791,0,0,0,1.06342,1.76085,18.89517,18.89517,0,0,0,1.30266,1.74622,12.19219,12.19219,0,0,0,1.34522,1.40653.6848.6848,0,0,1,.29395.47739c-.54209-.517-1.09831-1.01829-1.63193-1.54551-.54418-.53765-.98315-1.15848-1.52635-1.68892a22.84119,22.84119,0,0,1-2.08013-3.2349,1.71972,1.71972,0,0,1-.48942-1.14132c.21373-.081.32643.08277.38.218A9.64945,9.64945,0,0,0,100.64448,37.3492Z"/><path class="cls-163" d="M78.84311,43.97313c-.23786-.01886-.29524-.21859-.38593-.38494-.37479-.429-.751-.8568-1.13462-1.27805a.63415.63415,0,0,1-.17468-.28963c-.09282-.47795.333-.7158.4972-1.07518a1.63653,1.63653,0,0,0,.93469-.7178.48984.48984,0,0,1,.4959-.294.27227.27227,0,0,1,.12645.12261,1.28639,1.28639,0,0,0,.55643,1.03713c.42624.3293.40406.82752.44636,1.297a3.00209,3.00209,0,0,1-.82528.994C79.14729,43.53286,79.08678,43.836,78.84311,43.97313Z"/><path class="cls-164" d="M78.84311,43.97313a1.61123,1.61123,0,0,1,.67121-.803c.29432-.17378.31364-.58822.6384-.73743a1.20631,1.20631,0,0,1,.62422.661c.01208.3155.26214.60257.11367.93747a1.0692,1.0692,0,0,0-.53278.735,1.373,1.373,0,0,1-.66714.978l-.46184-.23076a1.29486,1.29486,0,0,1-.304-.94267A2.26283,2.26283,0,0,0,78.84311,43.97313Z"/><path class="cls-165" d="M77.22556,42.04746c.31427.35271.625.70865.94452,1.05657a.83637.83637,0,0,1,.28711.48415,1.78306,1.78306,0,0,0-.67081.40255,2.65305,2.65305,0,0,1-1.33118.3675,2.17132,2.17132,0,0,1-.61628-.77029,1.361,1.361,0,0,0,.00019-.84749,2.41172,2.41172,0,0,0,1.185-.67624A.137.137,0,0,1,77.22556,42.04746Z"/><path class="cls-166" d="M79.69069,45.74427a2.66277,2.66277,0,0,0,.64856-1.28033.44391.44391,0,0,1,.507-.414,1.49509,1.49509,0,0,1,.83516.61191.404.404,0,0,1-.01066.22336.56356.56356,0,0,0-.06044.638.86554.86554,0,0,1-.27963.949c-.14426.09087-.15331.16051-.09459.306.08584.21274.00473.322-.23577.27543-.20491-.15041-.36687-.00027-.53924.077-.19234-.30046-.54252-.50817-.49343-.95009C79.98708,46.00551,79.77458,45.89777,79.69069,45.74427Z"/><path class="cls-167" d="M118.20841,53.83123l-2.07958.07719a21.43971,21.43971,0,0,1-9.80543-5.08971,3.50989,3.50989,0,0,1-.75037-.652c-.06886-.10466-.18308-.18481-.17038-.331.13484-.12091.24309-.019.33575.05661a23.15163,23.15163,0,0,0,2.99227,2.11311.29012.29012,0,0,1,.15646.20611,23.26752,23.26752,0,0,0,5.74114,2.6786c.58768.17538,1.19024.27325,1.78247.41695.51773.12563,1.036.24734,1.55728.35681A.29536.29536,0,0,1,118.20841,53.83123Z"/><path class="cls-168" d="M108.88713,50.2115A25.38448,25.38448,0,0,1,106.27,48.44541a2.78975,2.78975,0,0,0-.84949-.62151.22451.22451,0,0,1-.1964-.084,1.52978,1.52978,0,0,0-.49571-.57882,15.62826,15.62826,0,0,1-2.0097-2.16295c-.50108-.54515-.88632-1.19221-1.39978-1.73354-.11189-.118-.23049-.25109-.1538-.44275.17505-.06949.25437.07706.352.165a7.06194,7.06194,0,0,1,.822.909,10.06659,10.06659,0,0,1,1.02018,1.13332,38.47546,38.47546,0,0,0,3.56418,3.25439,23.058,23.058,0,0,0,4.0794,2.678.35775.35775,0,0,1,.19532.17393c-.20048.12162-.3738.00157-.53672-.08041-.46585-.23443-.92812-.47732-1.37981-.73769A.68561.68561,0,0,0,108.88713,50.2115Z"/><path class="cls-169" d="M105.26665,47.74617a.16041.16041,0,0,1,.15388.07773,12.26179,12.26179,0,0,0,2.07966,1.83588c.452.36928.94206.69524,1.40875,1.05038a15.58254,15.58254,0,0,0,2.92818,1.62164,24.746,24.746,0,0,0,3.77081,1.37526c.169.04742.44022-.09073.5209.20136.10066.17893.05889.28649-.15444.30807a9.81511,9.81511,0,0,1-2.53338-.69278,28.29827,28.29827,0,0,1-5.581-2.91463,1.29086,1.29086,0,0,0-.20547-.08951,3.9207,3.9207,0,0,1-1.03254-.71588,23.28415,23.28415,0,0,1-2.34989-2.14094,13.99846,13.99846,0,0,1-1.99022-2.22493,1.87552,1.87552,0,0,0-.463-.69309c-.22712-.293-.432-.60144-.63254-.91271-.07463-.11587-.168-.2322-.10206-.3875.21039-.07462.29731.09834.39641.21461.75218.88245,1.537,1.73605,2.3081,2.60152.35493.39835.78286.72875,1.168,1.10041A1.629,1.629,0,0,1,105.26665,47.74617Z"/><path class="cls-170" d="M116.97585,60.37765c.99806.273,2.03558.32283,3.0443.53628a.36372.36372,0,0,0,.2278-.0076,1.91248,1.91248,0,0,1,1.273-.06544,1.30328,1.30328,0,0,1-.15407.61541,6.60568,6.60568,0,0,0-1.38317.14062,4.88645,4.88645,0,0,1-1.83716-.09435,12.83936,12.83936,0,0,1-1.64775-.25937c-.08393-.02559-.19486.03728-.2933.05925a32.85015,32.85015,0,0,1-5.2825-2.41462c-.67548-.43881-1.34992-.8781-1.99039-1.36735a28.1494,28.1494,0,0,1-2.55173-2.25018.918.918,0,0,1-.32462-.54359c-.02105-.19786-.182-.32967-.30441-.47648-.10486-.12576-.238-.25024-.1006-.43448.35257.06572.55285.35654.79081.57141a27.67191,27.67191,0,0,0,5.86707,4.12129,25.09582,25.09582,0,0,0,3.64033,1.44947A8.54368,8.54368,0,0,1,116.97585,60.37765Z"/><path class="cls-171" d="M108.96416,57.4513a25.49534,25.49534,0,0,0,4.1366,2.49352,24.55979,24.55979,0,0,0,2.4332.93933,1.38248,1.38248,0,0,1,.67153.4183l-.2311.616a4.00675,4.00675,0,0,1-1.62364-.51864,22.596,22.596,0,0,1-6.25225-3.83142c-.91665-.75691-1.69676-1.65182-2.60566-2.4116-.04209-.03519-.049-.11242-.07231-.17006a1.35261,1.35261,0,0,1,1.07324.38967c.67616.61607,1.33385,1.25181,2.05081,1.82282A2.85631,2.85631,0,0,0,108.96416,57.4513Z"/><path class="cls-172" d="M100.72137,33.42118c-.06633-.05807-.17514-.1056-.19255-.17578-.22067-.88993-.95846-1.54672-1.10734-2.46552-.02455-.15155-.05671-.277-.24044-.2853l-.045-.04312a26.83823,26.83823,0,0,1-.68032-3.6567c-.06464-.63725-.12707-1.27443-.15718-1.91447-.03305-.70224.00474-1.40441-.06228-2.10831a10.98467,10.98467,0,0,0-2.20422-5.89068,9.81962,9.81962,0,0,0-2.63124-2.14272,3.55114,3.55114,0,0,1-.6578-.463,12.09515,12.09515,0,0,1-1.04552-.90667c-.10179-.10058-.26388-.16639-.20781-.35794.00174-.006.01863-.01069.02825-.01032a.14836.14836,0,0,1,.0362.01048,4.24349,4.24349,0,0,1,1.64556.40372c.14531.04341.28963.09016.4344.13538A10.17462,10.17462,0,0,1,97.19088,16.801a10.76909,10.76909,0,0,1,1.62046,5.04694c.08259.94335-.02994,1.88272.063,2.82.06779.68374.16324,1.3648.22687,2.04887a24.38862,24.38862,0,0,0,.705,3.90467C100.05388,31.56966,100.41228,32.489,100.72137,33.42118Z"/><path class="cls-173" d="M91.55415,13.01117c-.08427.0975.01874.15054.06631.17493.40539.20791.56657.713,1.03588.84314a.20632.20632,0,0,1,.13057.21409.39422.39422,0,0,1-.46949.01151,10.92987,10.92987,0,0,0-2.21565-.61463.293.293,0,0,1-.16536-.09007,10.13376,10.13376,0,0,0-2.326-.61869,1.18131,1.18131,0,0,1-.21563-.07414.43534.43534,0,0,1,.23051-.46212,8.3843,8.3843,0,0,1,2.70743.34609.96785.96785,0,0,0,.4146.03265A.93451.93451,0,0,1,91.55415,13.01117Z"/><path class="cls-174" d="M114.89589,56.6039a16.31456,16.31456,0,0,0,2.85031.69354,1.44011,1.44011,0,0,1,.077.53877,4.45242,4.45242,0,0,1-1.51142-.197c-1.17892-.3974-2.39686-.67442-3.54315-1.17418a21.35082,21.35082,0,0,1-3.06146-1.61415c-1.1427-.73754-2.26377-1.50786-3.34754-2.33079a7.14411,7.14411,0,0,0-.86524-.70149c-.31277-.26535-.58858-.56912-.87921-.85755a13.99873,13.99873,0,0,1-1.65877-1.73361,1.59434,1.59434,0,0,1-.15223-.22071c-.27233-.38486-.53633-.77863-.8441-1.13364a20.1804,20.1804,0,0,1-1.373-1.93749c-.08371-.12315-.19264-.24836-.11525-.41981.22161-.07617.31237.095.4348.221.21946.22592.30354.56913.619.71031.55.68982,1.08094,1.39612,1.66023,2.06183a29.49384,29.49384,0,0,0,2.825,2.87657,28.98836,28.98836,0,0,0,3.44731,2.57455,23.204,23.204,0,0,0,4.46836,2.216A2.34933,2.34933,0,0,1,114.89589,56.6039Z"/><path class="cls-175" d="M105.49757,51.75188c.46033.122.69623.54259,1.057.79985a46.70514,46.70514,0,0,0,4.5637,3.01389,25.71434,25.71434,0,0,0,4.738,1.835c.65157.20555,1.33528.1901,1.967.43557l1.38664.15423c-.07258.16216-.21716.16505-.35991.1526a4.15369,4.15369,0,0,0-1.21213-.00574,1.25181,1.25181,0,0,1-.37348-.05965c-.17787-.02375-.34258-.01632-.36555.22067a.24906.24906,0,0,1-.25412.02441,23.26357,23.26357,0,0,1-9.06767-4.4433c-.60591-.49353-1.1309-1.07575-1.77145-1.52977C105.63047,52.22555,105.40571,52.04962,105.49757,51.75188Z"/><path class="cls-176" d="M119.51877,59.68505l-.07779.07664a.69747.69747,0,0,0-.44109-.09522,30.553,30.553,0,0,1-3.15647-.84044c-.14753-.02556-.38266-.05158-.316-.325a.92555.92555,0,0,1,.74109.01719,24.40638,24.40638,0,0,0,3.01845.31944l1.00146-.00038c.33785.04908.679.08207,1.01264.1515a8.45886,8.45886,0,0,0,1.12731.02152,6.17767,6.17767,0,0,0,.63333.05841.40177.40177,0,0,1-.40272.23335,9.3667,9.3667,0,0,0-2.44765.293.61962.61962,0,0,1-.29764-.04682C119.75923,59.51426,119.60331,59.50459,119.51877,59.68505Z"/><path class="cls-177" d="M119.28691,58.83765a1.13843,1.13843,0,0,1-.711.0576,13.45358,13.45358,0,0,0-1.46383-.08177,4.355,4.355,0,0,1-1.072-.228,2.0237,2.0237,0,0,0-.52793-.05531c-.23836.1199-.44948-.01684-.65989-.08442a22.9398,22.9398,0,0,1-7.50126-4.11556c-.80482-.65407-1.526-1.40411-2.37143-2.00836a.97883.97883,0,0,1-.23007-.25645c-.06872-.1087-.15608-.2034-.23421-.30513a17.13829,17.13829,0,0,0-1.15412-1.32978,22.42306,22.42306,0,0,1-1.96393-2.6372.31416.31416,0,0,1-.07656-.353c.24373-.05148.31658.16244.44609.28784.4019.3892.71251.85953,1.11158,1.25129a7.07817,7.07817,0,0,0,1.05072,1.245,16.92634,16.92634,0,0,1,1.56849,1.52755.96228.96228,0,0,0,.35482.53052c1.05238.84906,2.02392,1.79864,3.15316,2.55212a21.9599,21.9599,0,0,0,7.20383,3.2359c.23473.05492.45985.151.68943.2279a8.70273,8.70273,0,0,0,1.6971.37955A2.6949,2.6949,0,0,1,119.28691,58.83765Z"/><path class="cls-178" d="M114.89589,56.6039A26.65089,26.65089,0,0,1,101.4921,46.51457c-.34954-.35084-.57133-.79849-.88862-1.17422a.247.247,0,0,1-.05645-.28076.15762.15762,0,0,1,.22858.062,6.14327,6.14327,0,0,0,.84142.814,44.95065,44.95065,0,0,0,3.74737,4.00281,29.7785,29.7785,0,0,0,4.30436,3.26823c.40111.25.81617.47864,1.20948.7428a5.10977,5.10977,0,0,0,1.283.7577c.76583.28439,1.4138.81409,2.21511,1.04012.43.1213.86332.23532,1.2915.365.13931.04219.31995.03812.30654.26073a2.18,2.18,0,0,1-.73963-.10392c-.117-.02662-.23816-.13848-.35153-.04849C114.73611,56.33743,114.90746,56.474,114.89589,56.6039Z"/><path class="cls-179" d="M115.97439,56.373c-.21065-.24517-.53154-.20472-.799-.29126a7.69652,7.69652,0,0,1-2.25-.90729,4.86,4.86,0,0,0-1.07639-.49272,3.58089,3.58089,0,0,1-1.036-.69632c.14453-.10092.27135-.01313.39324.04638a20.12171,20.12171,0,0,0,5.59609,1.79135.53625.53625,0,0,1,.25054.08775,11.758,11.758,0,0,0,2.33187.17159,5.66067,5.66067,0,0,1,1.475.09827c.199.03231.40394-.1276.58418.03859l.15407.38472c-1.02-.07355-2.035.15589-3.05318.06431C117.68607,56.59116,116.83105,56.47305,115.97439,56.373Z"/><path class="cls-180" d="M117.05288,55.91092a11.43331,11.43331,0,0,1-3.15415-.692,23.39552,23.39552,0,0,1-3.08572-1.23347,31.6403,31.6403,0,0,1-2.8109-1.7696,29.44615,29.44615,0,0,1-4.47017-3.95035,21.72806,21.72806,0,0,1-1.96318-2.28986,8.01355,8.01355,0,0,1-.97895-1.41438c-.07069-.13217-.19-.24929-.12293-.42126.14872-.084.20271.04979.27608.12549a8.75172,8.75172,0,0,1,.95968,1.1439,2.16687,2.16687,0,0,0,.59387.59095c.71311.80519,1.372,1.65947,2.16225,2.39537a.55415.55415,0,0,1,.11438.19831,16.892,16.892,0,0,0,2.30881,2.17622,24.65,24.65,0,0,0,4.8101,3.03613,19.45863,19.45863,0,0,0,4.12827,1.4884.62044.62044,0,0,0,.52139.322C116.593,55.643,116.88769,55.64334,117.05288,55.91092Z"/><path class="cls-181" d="M100.10652,29.49368a30.14923,30.14923,0,0,1-.48572-3.4016A28.004,28.004,0,0,1,99.50005,23.07c.047-.69045-.01217-1.37369-.01015-2.06013A9.37748,9.37748,0,0,0,98.02314,15.733a7.84317,7.84317,0,0,0-1.6996-1.90317c-.76458-.60432-1.60782-1.08239-2.38129-1.66536a2.78723,2.78723,0,0,1-.38518-.61643.99413.99413,0,0,1,.72446.187c.58142.32488,1.19475.58571,1.76736.931a5.48079,5.48079,0,0,1,1.35995,1.11485c.227.41691.60144.71786.86515,1.10763a9.68184,9.68184,0,0,1,1.60365,4.68545c.05263.60753.13942,1.2121.2109,1.818.03539.3-.16719.554-.14311.86122a43.16917,43.16917,0,0,0,.376,4.49083c.08743.47426.11424.95968.16878,1.44-.12906.33331.06346.63814.11336.94786.08841.54876.33347,1.07363.40893,1.6228a13.19244,13.19244,0,0,0,.55621,2.05049,2.46338,2.46338,0,0,1-.52194-1.07723,1.72555,1.72555,0,0,0-.3525-.6156c-.31291-.31632-.286-.773-.42025-1.16388A1.2,1.2,0,0,0,100.10652,29.49368Z"/><path class="cls-182" d="M97.40884,13.7808c-.05838-.02138-.13324-.02652-.17275-.06653a10.97811,10.97811,0,0,0-3.679-2.16627,7.51828,7.51828,0,0,1-1.7354-.62687,1.9514,1.9514,0,0,1-.34455-.22037.66976.66976,0,0,0,.50184-.12867c.23352-.19571.48779-.06125.73018-.01018.1842.0388.36339.13374.53979-.01532A9.44763,9.44763,0,0,1,95.86814,11.856a1.11258,1.11258,0,0,0,.31989.31912c.21614.1684.46452.317.46256.65314-.00081.13808.13922.1957.23993.275A1.10108,1.10108,0,0,1,97.40884,13.7808Z"/><path class="cls-183" d="M77.22556,42.04746c-.2133.06608-.32267.2664-.48843.39413a1.14265,1.14265,0,0,1-.898.29886,3.72707,3.72707,0,0,1-.4112-1.33209c-.03243-.263-.28378-.49892-.43642-.74705-.26268-.26252-.12022-.53924-.02709-.81318a1.29848,1.29848,0,0,1,.183-.37424c.28159-.19551.67737-.16911.90782-.46592a.35259.35259,0,0,1,.3681.12171c.3321.6742.90632,1.18279,1.26449,1.8397a1.03083,1.03083,0,0,1-.30034.51042A.6031.6031,0,0,0,77.22556,42.04746Z"/><path class="cls-184" d="M75.22264,39.50592c-.15.37053-.40109.72087-.23115,1.15539a8.09283,8.09283,0,0,1-1.3866-.30818c-.2221-.43445-.65274-.70888-.87655-1.143-.05766-.11183-.13424-.21391-.20213-.32048a.49012.49012,0,0,1,.46252-.23127.2682.2682,0,0,1,.21308-.06824c.39214.11942.81191.07131,1.201.203A2.86255,2.86255,0,0,1,75.22264,39.50592Z"/><path class="cls-185" d="M104.57314,48.594a12.51863,12.51863,0,0,1-1.61251-1.68362q-.34878-.42936-.69855-.85793c-.567-.70518-1.05756-1.46423-1.56046-2.21451-.06278-.09366-.13585-.19027-.07888-.31634.12144-.07607.19768.01249.25829.08787a22.80785,22.80785,0,0,1,1.45808,1.82664c.70726.82049,1.46057,1.59574,2.22276,2.36626.96962.98023,2.03735,1.83954,3.09269,2.71719a9.34413,9.34413,0,0,0,2.0878,1.59516,3.89926,3.89926,0,0,1,1.168.74763,12.77687,12.77687,0,0,1-1.90066-1.027,24.22035,24.22035,0,0,1-4.25687-3.17446C104.70559,48.61929,104.67229,48.50853,104.57314,48.594Z"/><path class="cls-186" d="M87.47109,14.24382c-.47429.11054-.81575-.27071-1.243-.33984-.07817-.01265-.06174-.12556-.06638-.1994a1.66313,1.66313,0,0,0,.99595.08579,7.84682,7.84682,0,0,1,1.99611.17924q.54546.05951,1.09082.11986c.10216-.08891.19726-.0275.28092.02543.575.3638,1.19209.65462,1.7654,1.02065.12629.08063.27624.15046.29275.33257a.63529.63529,0,0,1-.4347.45808,4.0129,4.0129,0,0,1-1.20416-.3473,4.78288,4.78288,0,0,0-.72471-.23362c-.78838-.30375-1.61369-.502-2.39194-.83476C87.68769,14.45047,87.534,14.40775,87.47109,14.24382Z"/><path class="cls-187" d="M92.55561,15.4756a7.04062,7.04062,0,0,0-1.51576-.94271,3.37191,3.37191,0,0,0-.7953-.44342c-.10549-.17819-.56589-.15369-.30814-.53933a7.27367,7.27367,0,0,1,2.16147.50558,1.5615,1.5615,0,0,0,.689.18761l.61609.38539a7.238,7.238,0,0,0,.90074,1.13511c.26921.2326.2313.60129.28108.92391a.11421.11421,0,0,1-.17058.00653C93.85329,16.19821,93.13638,15.94062,92.55561,15.4756Z"/><path class="cls-188" d="M104.80331,51.9834A8.55327,8.55327,0,0,0,106.06,53.09977a26.2133,26.2133,0,0,0,3.69346,2.853,20.90189,20.90189,0,0,0,5.75871,2.57736c.18433.26572.49622.225.754.29842a15.83339,15.83339,0,0,1,1.96256.64751,3.05066,3.05066,0,0,0,.89373.12812c.13211.013.2558.01611.31849.15751-.63556-.04537-1.272-.0813-1.90625-.14072a.42084.42084,0,0,0-.46667.30882,2.45053,2.45053,0,0,0-.09221.44787,4.73093,4.73093,0,0,1-1.36694-.43482,19.84418,19.84418,0,0,1-2.88621-1.12722,24.72176,24.72176,0,0,1-4.10712-2.514c-1.01771-.789-1.99017-1.62981-2.96394-2.47019-.07365-.03722-.12074-.08551-.0726-.1736.17167-.09947.28524.02419.414.10365.28112.17349.47.46736.78616.5968-.6003-.64262-1.19515-1.28846-1.8234-1.90241a.91.91,0,0,1-.24176-.29458C104.68309,52.083,104.643,51.97642,104.80331,51.9834Z"/><path class="cls-189" d="M84.38985,15.70694a10.7322,10.7322,0,0,0-4.4584.86678c-.56946.24456-1.189.37135-1.78247.56212a.46825.46825,0,0,1-.327-.04945,2.92226,2.92226,0,0,0-1.21272-.30135c.55715-.23435,1.17493-.18954,1.74228-.38043.77495-.26072,1.55878-.49629,2.32775-.77331a9.69286,9.69286,0,0,1,4.77167-.62419c.46563.0691.93576.10784,1.40383.16051.088-.05958.14424-.03622.17074.06522-.2603.23164-.45289.52445-.6964.77237A5.6494,5.6494,0,0,1,84.38985,15.70694Z"/><path class="cls-190" d="M87.00906,15.2445a.15972.15972,0,0,0-.15426-.07687.87346.87346,0,0,0-.15066-.1084c-.56512-.24839-1.13188-.493-1.69819-.73872.16476-.15869.33053-.04561.49533-.00092a5.22784,5.22784,0,0,0,1.96981-.07578c.88913.43161,1.85361.65454,2.77346,1.001a.30687.30687,0,0,1-.22166.362,19.15317,19.15317,0,0,1-2.55122-.21023A.70717.70717,0,0,1,87.00906,15.2445Z"/><path class="cls-191" d="M72.21807,20.25122c.08116-.1797.2654-.1873.41576-.21789a.45838.45838,0,0,0,.35478-.2442.40992.40992,0,0,0,.36239.06915c.4387-.2175.89037-.02515,1.33239-.06955a.42881.42881,0,0,1,.35951-.1,6.69346,6.69346,0,0,0,3.57078-.85622c.59915-.26807,1.11017-.68259,1.71142-.94495a10.26509,10.26509,0,0,1,2.01683-.73263,4.5834,4.5834,0,0,1,1.96213.07455c.141.05147.3047.05019.40327.18988-.06427.22862-.27113.21041-.43468.22477a10.22176,10.22176,0,0,0-4.29543,1.44333,16.25284,16.25284,0,0,1-2.97535,1.57887,3.65374,3.65374,0,0,1-.81025.23368,6.48027,6.48027,0,0,1-2.237.15483,3.04119,3.04119,0,0,0-.76364.05427.462.462,0,0,1-.43312-.08787C72.60379,20.74644,72.32108,20.56179,72.21807,20.25122Z"/><path class="cls-192" d="M72.75788,21.02123c1.1476-.1941,2.32849.1111,3.46622-.231.00787.30861-.263.33656-.45247.43384-.22317.11457-.481.16973-.64581.42614a.70923.70923,0,0,0,.43454.02093c.1978-.01117.29347.06069.24328.26954a4.34229,4.34229,0,0,1-1.50543.852c-.51093.46208-1.09239.25008-1.632.1198a4.22256,4.22256,0,0,1-1.37219-.50515c.203-.45161.45828-.831,1.0414-.773a.14936.14936,0,0,0,.1864-.14247A1.115,1.115,0,0,1,72.75788,21.02123Z"/><path class="cls-193" d="M71.756,27.72189a.15918.15918,0,0,0-.15407-.0772c.0501-.29589.41064-.43648.38537-.77007.04938-.07462.10033-.18857.18688-.17749.48028.06148.8249-.309,1.2611-.37928a1.05451,1.05451,0,0,0,.69115-.18085.70747.70747,0,0,1,.51293-.12307,1.787,1.787,0,0,0,1.574-.60915c.56751-.57426,1.28483-.959,1.90346-1.47294.75478-.62708,1.54884-1.20778,2.32546-1.809a7.83582,7.83582,0,0,1,1.52376-.87871,2.81978,2.81978,0,0,1,1.09324-.42046,1.65131,1.65131,0,0,1,1.10464.19616c.23355.09778.3834.23932.27035.51755a.25416.25416,0,0,1-.31254.07655,2.7585,2.7585,0,0,0-2.45919.46508c-1.00711.5994-1.85223,1.405-2.79832,2.07716-.67606.48031-1.257,1.0704-1.90178,1.58373a16.12428,16.12428,0,0,0-1.77306,1.50748,1.56489,1.56489,0,0,1-1.12786.58961.35808.35808,0,0,0-.38831.07546.92774.92774,0,0,1-.98936.19593A1.67471,1.67471,0,0,1,71.756,27.72189Z"/><path class="cls-194" d="M73.45078,26.41256a.48076.48076,0,0,0-.29109.07028c-.26365.16481-.50625.37247-.865.26045-.08089-.02526-.20382.084-.30739.13133-.1033-.2576-.39761-.1837-.58293-.34452-.48073-.41715-.53084-.46209-.34169-1.04167.51025-.06149.99786-.24121,1.51684-.27205.18631-.01107.37522-.02545.56312-.03612.2691.26232.57434.06174.86064.05589.16523-.00338.3255-.06367.45869.08279A1.75161,1.75161,0,0,1,73.45078,26.41256Z"/><path class="cls-195" d="M74.29821,22.79266c.45388-.3412.98587-.54756,1.46367-.84749a.708.708,0,0,1,.42371-.1611,2.84811,2.84811,0,0,0,.72133-.24289c1.47531-.58615,2.64848-1.687,4.06537-2.36827a4.47383,4.47383,0,0,1,4.05777-.25842.30319.30319,0,0,1,.147.1174,1.28441,1.28441,0,0,1-1.3687.44948,2.96782,2.96782,0,0,0-2.29731.32151A12.2813,12.2813,0,0,0,78.60072,21.653a2.77913,2.77913,0,0,1-.79053.46487,11.37483,11.37483,0,0,1-2.46935.93762,1.78023,1.78023,0,0,1-1.11966-.03184Z"/><path class="cls-196" d="M74.22118,23.02368a6.77263,6.77263,0,0,0,2.76778-.62659,22.82958,22.82958,0,0,0,3.19947-1.9989,7.883,7.883,0,0,1,2.70135-1.125,1.3,1.3,0,0,1,.88379.13054.30669.30669,0,0,1-.18041.13861,7.46432,7.46432,0,0,0-3.64009,1.5272c-.98161.62707-1.95615,1.272-2.91856,1.92042-.9482.63882-2.02283.98534-2.96893,1.59407-.21651.1393-.38447.39124-.69161.36517-.086-.33152-.37776-.43828-.64515-.52131a1.55271,1.55271,0,0,1-.5876-.32585,12.23849,12.23849,0,0,1,1.42032-.56646C73.85205,23.4755,73.97507,23.16229,74.22118,23.02368Z"/><path class="cls-197" d="M73.374,24.94924a22.80236,22.80236,0,0,1,2.33315-1.28349,40.63625,40.63625,0,0,0,3.52608-2.2059,10.28515,10.28515,0,0,1,3.62591-1.92293,4.626,4.626,0,0,1,.76039-.05614.95883.95883,0,0,1,.68588.1784,7.12591,7.12591,0,0,0,.9259.3609c.13942.07029.33807.0875.32454.31726a.92433.92433,0,0,1-.44871.15608c-.46266-.00094-.91252-.1247-1.37075-.15452a4.02208,4.02208,0,0,0-2.13684.65814,28.35288,28.35288,0,0,0-3.47823,2.39641,22.41405,22.41405,0,0,1-3.37723,1.89982.3077.3077,0,0,1-.29178.04112,2.10652,2.10652,0,0,0-.98752.08631c-.27588.07075-.32128-.01681-.32208-.24044Z"/><path class="cls-198" d="M82.3099,17.24728a9.70826,9.70826,0,0,0-2.5767,1.07549c-.635.39389-1.31968.66027-1.98169.98558a4.68719,4.68719,0,0,1-2.37548.48247c-.23023-.01257-.46173-.002-.69264-.00209a1.16025,1.16025,0,0,0-.01711-.37243c-.13724-.34787-.04242-.55306.32525-.62879.5622.09533,1.0319-.25093,1.55933-.32626a15.62168,15.62168,0,0,0,3.59925-1.25675,3.86144,3.86144,0,0,0,.465-.26534,7.68886,7.68886,0,0,1,3.39067-.49746c.25184.01374.51881-.00835.70584.2191-.05.18663-.21256.195-.35939.22076C83.67107,17.0013,82.99879,17.17078,82.3099,17.24728Z"/><path class="cls-199" d="M84.698,16.7081a1.17732,1.17732,0,0,0-.57619-.154,9.38544,9.38544,0,0,0-3.17023.33321,2.202,2.202,0,0,1-.33646.0518,2.6117,2.6117,0,0,1,.8628-.38322c.8385-.20681,1.64717-.52631,2.50688-.655a.57317.57317,0,0,0,.405-.194c.67437.01774,1.32553.23659,2.00259.231a2.02394,2.02394,0,0,1,.88964.258c.15768.152.3548.25289.51861.39528.14725.128.29907.26972.098.47648a1.16577,1.16577,0,0,1-.58013.03876c-.76946-.1652-1.55489-.21715-2.33225-.32646C84.88742,16.76611,84.78131,16.78352,84.698,16.7081Z"/><path class="cls-200" d="M71.756,27.72189a10.055,10.055,0,0,0,1.12146.32719.73394.73394,0,0,0,.74435-.227c.138-.14379.28245-.29685.44525-.02314.11595.16871-.01467.28579-.0929.40669-.3627.56046-.32641.66734.30823.86878.10507.3284-.19189.51807-.27027.78364a3.70953,3.70953,0,0,0-.73868.581,1.51953,1.51953,0,0,1-1.28633-.02169,6.27573,6.27573,0,0,0-.24029-.93418c-.08972-.16508-.14533-.355-.376-.37505A4.40724,4.40724,0,0,1,71.756,27.72189Z"/><path class="cls-201" d="M74.45209,38.88967l-1.46337-.23127c.06864-.346-.2329-.52289-.35785-.78033-.07114-.14657-.27583-.23854-.18151-.45158.17342-.18688-.12449-.4328.07721-.61615a.47769.47769,0,0,1,.41434-.09033,3.42118,3.42118,0,0,1,1.23457.55443,1.7053,1.7053,0,0,0,.59361.21792.16673.16673,0,0,1-.00381.21356A1.62135,1.62135,0,0,0,74.45209,38.88967Z"/><path class="cls-202" d="M72.98861,36.81016l-.462.00018a5.82618,5.82618,0,0,1-.88808-.88077,2.58542,2.58542,0,0,1-.26762-1.12191.44494.44494,0,0,1,.385-.15418,1.37678,1.37678,0,0,1,.78659.16323c.36546.31564.85176.52678.94245,1.08212C73.27917,36.18044,73.28909,36.57987,72.98861,36.81016Z"/><path class="cls-203" d="M71.98715,30.41737c.43427-.06418.88705.18747,1.3096-.07673.112.122.05456.26379.04444.39891-.03585.47921-.005.51341.4547.60417a1.59,1.59,0,0,1,.58924.12866.36109.36109,0,0,1,.04923.35934,14.58816,14.58816,0,0,1-1.87614,1.272,11.69984,11.69984,0,0,0-1.34124-.37556c-.0217-.20286-.1778-.29292-.32447-.3948-.13484-.09366-.27767-.18585-.292-.3753.189-.30719.09709-.70094.30851-1.00125a.535.535,0,0,0,.42527-.27828C71.45856,30.29876,71.69381,30.31308,71.98715,30.41737Z"/><path class="cls-204" d="M71.217,32.72814a2.41031,2.41031,0,0,1,1.38664.3085,1.69185,1.69185,0,0,1,.553.9365c.10426.52106-.3228.675-.63045.91154-.24581-.11361-.53353-.08763-.77035-.2312q-.17065-.22626-.34133-.45248A1.58,1.58,0,0,1,71.217,32.72814Z"/><path class="cls-205" d="M81.00029,47.05371c.11838-.06268.34414-.08257.13168-.28856-.18549-.17986-.10715-.27615.0897-.3559a.746.746,0,0,0,.28272-.89481.3962.3962,0,0,1,.11238-.61727c.2785.12933.34171.41616.47646.65073a2.84073,2.84073,0,0,0,1.434,1.365,13.71014,13.71014,0,0,1,1.32088.62331,8.59006,8.59006,0,0,0,3.049.86331c.75122.07686,1.49846.20076,2.24749.30356a5.9934,5.9934,0,0,0,1.148-.07043c.62528-.03321,1.25307-.06774,1.87458-.1592a.65692.65692,0,0,0,.223-.05642,20.07214,20.07214,0,0,0,2.282-1.26534.86012.86012,0,0,0,.407-.70315.29958.29958,0,0,1,.09727-.242c.25426.01481.27417.27753.42181.40709.10089.08854.13085.26062.23422.34311A6.28939,6.28939,0,0,1,98.17892,48.825c-.3971-.0072-.5785.345-.8646.52216a5.37644,5.37644,0,0,1-3.16992,1.26354c-.34558-.02081-.69884.13469-1.00472-.15521-.04177-.03959-.15-.02011-.22555-.01135a17.53143,17.53143,0,0,1-2.14556.07764.34369.34369,0,0,0-.18482.03623,2.438,2.438,0,0,1-2.16164.20331A22.4232,22.4232,0,0,1,82.94054,48.332c-.07591-.04692-.18725-.07829-.21978-.14657a.66473.66473,0,0,0-.79623-.43859A2.78,2.78,0,0,1,81.00029,47.05371Z"/><path class="cls-206" d="M105.57416,53.67775l.07748.15365a.41164.41164,0,0,0,.14217.33872c.18537.19918.42623.37037.37168.70546-.00829.05091.07971.12316.1317.17735a23.2704,23.2704,0,0,0,2.54008,2.26,1.08717,1.08717,0,0,1,.12689.13837.55431.55431,0,0,1-.39055-.11439c-.7262-.56786-1.37611-1.22052-2.05456-1.8406a3.2672,3.2672,0,0,0-1.09852-.50962l-.69313-.61616c-.4524-.68236-1.04365-1.25092-1.55743-1.8834-.87542-1.07767-1.73906-2.16155-2.5445-3.293-.138-.19388-.21451-.48312-.52038-.52323a5.44,5.44,0,0,0-.93606-1.50385c-.13-.18534-.29378-.31528-.25745-.59323.02442-.18687-.12484-.37389-.23338-.5506a1.22518,1.22518,0,0,1-.26789-.66377c.20331-.03316.24225.14931.33075.2592a7.20822,7.20822,0,0,0,1.03768,1.24754,1.90635,1.90635,0,0,1,.48605.53529,52.52339,52.52339,0,0,0,4.11868,4.93979A8.51142,8.51142,0,0,1,105.57416,53.67775Z"/><path class="cls-207" d="M96.17647,46.2065a1.12327,1.12327,0,0,1-.70348,1.23026c-.61747.35815-1.25553.68067-1.88178,1.02392a2.53328,2.53328,0,0,1-1.04557.1931c-.69713.0608-1.39745.14482-2.09413.153a13.893,13.893,0,0,1-1.93062-.21479c-.63014-.082-1.26175-.15867-1.88727-.26865a11.04069,11.04069,0,0,1-2.23613-.88438c-.40038-.1648-.80038-.34431-1.18305-.53519a2.81852,2.81852,0,0,1-1.14095-1.14487,7.46813,7.46813,0,0,1-.45672-.86177l.00018-.23068c.30318-.08439.47877-.40278.80791-.44078,1.59576.383,3.15737.89221,4.75256,1.2772a15.07276,15.07276,0,0,0,2.401.286c.22962.01766.4596.01874.68914.05265a2.22741,2.22741,0,0,0,1.24289-.14427c.47026-.20407.94843-.39132,1.42827-.57246a2.28514,2.28514,0,0,0,1.10736-.72862.48077.48077,0,0,1,.39811-.20141,6.17752,6.17752,0,0,0,1.342.8581.60152.60152,0,0,1,.23606.38342A1.34234,1.34234,0,0,1,96.17647,46.2065Z"/><path class="cls-208" d="M96.02221,45.43631c-.13661-.06043-.19568-.18928-.27751-.30156-.09738-.13363-.21341-.2674-.40417-.23517a.51973.51973,0,0,1-.6216-.4151c-.043-.12293-.10422-.19838-.23743-.20346a1.52508,1.52508,0,0,0-.05365-.95388,1.46388,1.46388,0,0,1-.0282-.71053.95388.95388,0,0,1,.37479-.52433c.37193-.02162.42686.3427.63521.52095a17.30994,17.30994,0,0,0,.88931,1.50961.22871.22871,0,0,1,.03172.31258A.95467.95467,0,0,1,96.02221,45.43631Z"/><path class="cls-209" d="M96.33068,44.43542l-1.0016-1.77171c.03823-.13644-.03832-.31176.13607-.40219a.26035.26035,0,0,1,.28815.1395c.27208.45933.6639.82595.96223,1.264.33342.65409.67753,1.303.99657,1.96406a3.49474,3.49474,0,0,1,.46691,1.42462,18.34748,18.34748,0,0,1-1.312-1.89613A2.067,2.067,0,0,0,96.33068,44.43542Z"/><path class="cls-210" d="M96.71553,42.587c-.11268-.0928-.156-.2549-.30815-.30826a16.20978,16.20978,0,0,1-1.21585-1.99552,7.16513,7.16513,0,0,0-.38764-.66321c-.58166-1.06339-1.1218-2.15-1.77-3.17633a2.27432,2.27432,0,0,0-.50463-.6672,2.23136,2.23136,0,0,1-.58921-.98545c.44834-.03045.75589.28822,1.12359.45669a1.25676,1.25676,0,0,1,.23814.18422,2.85865,2.85865,0,0,1,.54015.83214,16.40306,16.40306,0,0,1,.95216,1.92014,1.39413,1.39413,0,0,0,.52405.64831,11.64726,11.64726,0,0,1,1.00964,1.93,2.39038,2.39038,0,0,1,.41241,1.02205C96.7042,42.05129,96.863,42.324,96.71553,42.587Z"/><path class="cls-211" d="M94.86649,39.58275c.54066.88321,1.07138,1.7721,1.54089,2.696-.02359.49019.26992.90992.30815,1.38637a3.34382,3.34382,0,0,1-.89791-1.02887.90324.90324,0,0,0-.335-.3574c-.10283.02209-.12525-.0594-.16156-.12434-.39273-.70251-.65011-1.4683-1.01963-2.18187-.05643-.109-.12911-.22782-.03659-.3578A.47922.47922,0,0,1,94.86649,39.58275Z"/><path class="cls-212" d="M96.71553,42.587a2.97943,2.97943,0,0,1-.07685-.84749c.2095-.097.27289.0871.34515.20126q.92334,1.45884,1.80653,2.94279a9.9561,9.9561,0,0,0,.789,1.5352c.07459.14811.25806.27387.1407.48125-.29894-.04725-.35716-.34412-.52111-.52448-.2875-.31631-.52831-.67506-.78868-1.016-.56171-.77981-.92672-1.68225-1.52326-2.44143A.51231.51231,0,0,1,96.71553,42.587Z"/><path class="cls-213" d="M100.10509,34.03756c-.14671-.06262-.18342-.20823-.24069-.33285a19.98871,19.98871,0,0,1-1.69-5.4434c-.06448-.43815-.15034-.87316-.22636-1.30961a11.85229,11.85229,0,0,1-.14341-1.89478,10.85156,10.85156,0,0,0-.16745-1.9457.89762.89762,0,0,1,.04409-.599c.2142-.09079.19649.1047.22313.20171a3.11409,3.11409,0,0,1,.15.86856,17.65964,17.65964,0,0,0,.2142,2.21326,35.33137,35.33137,0,0,0,.912,4.69856l.00037.00027c.29572,1.03929.60647,2.0737,1.00109,3.08086A1.38044,1.38044,0,0,1,100.10509,34.03756Z"/><path class="cls-214" d="M99.25805,35.57793c.03048.43441.38035.74119.46186,1.15521a.42218.42218,0,0,1-.15407.30807c-.272.01772-.33117-.20844-.40626-.384-.3518-.82239-.8-1.59907-1.14246-2.42588a29.20645,29.20645,0,0,1-1.42375-5.45413,5.50592,5.50592,0,0,1-.11327-1.71568c.05794-.1502-.00764-.29926-.00464-.44878.00667-.33139.16257-.53456.42912-.562a3.814,3.814,0,0,1,.13229.9793c.08459.55469.17037,1.108.29871,1.65422a25.70611,25.70611,0,0,0,1.11668,4.72384,18.39214,18.39214,0,0,0,.73675,1.80739C99.2423,35.32886,99.31611,35.44183,99.25805,35.57793Z"/><path class="cls-215" d="M98.10216,34.26825q.54233,1.11019,1.08387,2.22077c.099.204.15336.43664.37981.55219a13.09018,13.09018,0,0,0,1.17984,2.215c.351.58657.75213,1.14315,1.131,1.713a4.41014,4.41014,0,0,1-1.29713-1.43883c-.08683-.13187-.10437-.32633-.32024-.33261a3.06253,3.06253,0,0,1-.68777-1.0367c-.34163-.62476-.714-1.23517-1.00471-1.88777-.19626-.527-.39073-1.05468-.62135-1.56807a.42379.42379,0,0,1-.042-.333A.19474.19474,0,0,1,98.10216,34.26825Z"/><path class="cls-216" d="M104.57314,45.59034c-.25216-.01556-.29027-.26759-.43124-.4031-.62857-.60425-1.2396-1.22679-1.8548-1.84487a5.97848,5.97848,0,0,0-.87241-.90981c-.11.04-.17015-.03422-.21874-.10753-.71937-1.08526-1.446-2.16588-2.11349-3.28451a.622.622,0,0,1-.05529-.14274c-.01742-.1808-.19062-.43446.01341-.52289.217-.09408.27219.20872.37439.353.31626.44652.64012.88748.95986,1.33111.41245.44053.67839.99121,1.08141,1.43989a.40731.40731,0,0,1,.11252.3176,12.9363,12.9363,0,0,0,1.25889,1.6991,15.51757,15.51757,0,0,0,1.70205,1.93182C104.56007,45.48046,104.55937,45.54205,104.57314,45.59034Z"/><path class="cls-217" d="M101.56876,41.8165,100.336,40.12189a19.35055,19.35055,0,0,1-1.96175-3.55716c-.05244-.1267-.14488-.251-.04152-.39519.13868-.0745.23389-.01726.30883.10148l1.61774,2.92673a18.49294,18.49294,0,0,0,1.45549,2.27161c.11367.14492.26206.28569.23911.50118C101.79219,42.00256,101.68992,41.88592,101.56876,41.8165Z"/><path class="cls-218" d="M99.10362,38.88958c.62623.9901,1.19241,2.01966,1.91338,2.94735.1481.19056.16641.46408.39769.59563a2.43642,2.43642,0,0,0,.5167.78769,1.44433,1.44433,0,0,1,.40772.67567c-.35834-.14964-.49265-.53379-.78712-.752-.13129-.0973-.24611-.21684-.36841-.32628-.07483.02609-.1188-.02-.15959-.07a17.8073,17.8073,0,0,1-2.087-3.23638c-.134-.31578-.27033-.63045-.40408-.94612-.07772-.18345-.18369-.37074-.07629-.58175.3177-.018.34577.27438.46114.45513A3.802,3.802,0,0,1,99.10362,38.88958Z"/><path class="cls-219" d="M90.09048,15.55281c-.01118-.13393.1107-.20131.15407-.30795.65871.15309,1.25442.503,1.92588.61622A6.70168,6.70168,0,0,1,93.624,16.92577,10.99332,10.99332,0,0,1,97.45175,23.714c.05884.38172.02609.767.11268,1.143a.25278.25278,0,0,1-.07855.24625,20.01716,20.01716,0,0,0,.23092,3.08086c-.30675-.02235-.29762-.27995-.31734-.47519a4.273,4.273,0,0,0-.20455-.96c-.17249-1.08428-.231-2.18668-.49822-3.2563a10.2795,10.2795,0,0,0-1.7901-3.832,10.84018,10.84018,0,0,0-2.52112-2.3393,7.3441,7.3441,0,0,0-2.17255-1.63171A.2082.2082,0,0,1,90.09048,15.55281Z"/><path class="cls-220" d="M97.48588,25.10324a10.94175,10.94175,0,0,0-1.94169-5.93882,12.98393,12.98393,0,0,0-3.13278-3.06457.6517.6517,0,0,1-.241-.23878c.19433-.06263.20858-.30512.38518-.38546a8.167,8.167,0,0,1,1.76793,1.03689c.08076.062.15678.13008.235.19535.18791-.04449.27516.1063.38017.20669a9.85994,9.85994,0,0,1,2.77106,5.15256.84013.84013,0,0,1,.00723.41745c.0268.74758.13372,1.48736.2163,2.22953a.78642.78642,0,0,1,.0113.26611,10.07378,10.07378,0,0,0,.0035,1.97151,9.4651,9.4651,0,0,1-.30244-1.495C97.612,25.32388,97.64591,25.17436,97.48588,25.10324Z"/><path class="cls-221" d="M97.25477,26.72064a1.76866,1.76866,0,0,1,.2314.85855c.01409.22514.01343.45679.23063.60491a32.69788,32.69788,0,0,0,1.00354,4.01425c.06951.23.15268.45593.22954.68373a.97735.97735,0,0,0,.0955.59849,13.29179,13.29179,0,0,1,.575,1.65518,14.754,14.754,0,0,0,.98555,2.06643.57756.57756,0,0,1,.03856.147,3.75139,3.75139,0,0,1-1.04172-1.3826.70453.70453,0,0,0-.34472-.38867,18.93087,18.93087,0,0,1-1.41011-3.83213c-.2106-.81285-.32132-1.64624-.56293-2.45112a2.3749,2.3749,0,0,1-.03009-.57173c.10552-.3212-.05408-.62134-.07341-.93251A1.74334,1.74334,0,0,1,97.25477,26.72064Z"/><path class="cls-222" d="M77.68777,40.96938a.21036.21036,0,0,1-.19556-.09868c-.29769-.60691-.87-1.03072-1.11385-1.67292a2.0976,2.0976,0,0,1,.67582-1.065,6.51326,6.51326,0,0,0,.61227-.56258c.22446-.03543.3362.12951.39534.28447.11575.30322.286.38713.575.24126a.17792.17792,0,0,1,.14761.0116,5.66514,5.66514,0,0,1,.43458.59953,3.78506,3.78506,0,0,1-.14507,1.2612.75494.75494,0,0,0-.53188.44435A.95627.95627,0,0,1,77.68777,40.96938Z"/><path class="cls-223" d="M80.69234,43.04853l-.53962-.61583a2.5832,2.5832,0,0,1-.074-.36919,1.19664,1.19664,0,0,0-.49783-1.00628.95276.95276,0,0,1-.42909-1.01173,5.67521,5.67521,0,0,0,.96837-1.04535.341.341,0,0,1,.25743-.14327c.29875.08822.47709.34946.72834.50669.165.63764.30989,1.28.45367,1.92284-.48316.36429-.434.97166-.6635,1.45177C80.84252,42.85034,80.89618,43.0346,80.69234,43.04853Z"/><path class="cls-224" d="M80.384,38.88977a2.11264,2.11264,0,0,0-.58065.65466,1.30851,1.30851,0,0,1-.65154.50106l-.07788-.07719c-.10822-.44444.10972-.86964.07732-1.30961-.01706-.01991-.04195-.04863-.03355-.06485A8.94679,8.94679,0,0,1,80.24562,36.506a.15858.15858,0,0,1,.06915-.03125.44625.44625,0,0,1,.38067.37184.48506.48506,0,0,1-.00691.228,3.27406,3.27406,0,0,0-.206,1.53681A.29874.29874,0,0,1,80.384,38.88977Z"/><path class="cls-225" d="M80.69234,43.04853c.127-.40314.284-.79993.371-1.21152a.66033.66033,0,0,1,.47619-.55985,5.385,5.385,0,0,1,.95772.438.19.19,0,0,1,.04878.21864.57948.57948,0,0,0-.12049.39061,16.817,16.817,0,0,1-.03846,1.95658c-.255.132-.39556.49243-.77017.38554l-.77073-.61657C80.92923,43.69549,80.63677,43.39874,80.69234,43.04853Z"/><path class="cls-226" d="M99.02659,39.50583a16.91547,16.91547,0,0,0,1.92307,2.9682,3.3199,3.3199,0,0,1,.23392.34359.51039.51039,0,0,0,.13163.31361c1.04045,1.1723,1.93044,2.47233,3.04,3.58529.24277.24351.50912.46364.7665.69242a.376.376,0,0,1,.14491.33724,29.76731,29.76731,0,0,1-3.11459-3.20178c-.31709-.39543-.69538-.7418-1.0457-1.11059-.07785.02432-.11725-.02754-.15415-.08007q-1.46991-2.09267-2.74208-4.31107a.65912.65912,0,0,1-.05334-.144c-.18159-.459-.39685-.904-.56424-1.36853-.05475-.15193-.14373-.30257-.057-.47274.189-.081.20754.09694.26924.18838a14.46363,14.46363,0,0,1,1.00639,1.897A2.03893,2.03893,0,0,0,99.02659,39.50583Z"/><path class="cls-227" d="M98.25623,38.88967a22.7982,22.7982,0,0,0,1.27951,2.1619c.51508.79953,1.04638,1.58861,1.57062,2.38224a5.39228,5.39228,0,0,0,.97783,1.47236.76284.76284,0,0,1,.25492.52995,13.31381,13.31381,0,0,1-1.07116-1.22056,5.862,5.862,0,0,0-.62362-.70491.3493.3493,0,0,1-.23167-.18391,26.29251,26.29251,0,0,1-1.60484-2.50194c-.34341-.68688-.66718-1.38371-1.04839-2.05128a.36156.36156,0,0,1-.07038-.32458C98.053,38.37073,98.07271,38.73556,98.25623,38.88967Z"/><path class="cls-228" d="M97.717,22.48455a21.40869,21.40869,0,0,0-.60072-2.07473,9.0579,9.0579,0,0,0-2.55774-3.702c-.05709-.20157-.19544-.37537-.16139-.60953.02486-.171-.119-.28458-.2485-.35474-.36735-.199-.44329-.61871-.705-.89612-.04278-.04534-.02852-.14448-.04062-.21875a8.57844,8.57844,0,0,1,2.1783,1.54849A9.87326,9.87326,0,0,1,97.56749,19.318a13.61158,13.61158,0,0,1,.79117,3.72516c.04669.63593-.00443,1.26564.04182,1.89876a29.92182,29.92182,0,0,0,.5015,4.01383,7.86653,7.86653,0,0,1,.27868,1.53857,14.88475,14.88475,0,0,1-.61312-2.27159,32.39087,32.39087,0,0,1-.60057-3.94529,12.47715,12.47715,0,0,0-.17492-1.62595A1.01407,1.01407,0,0,0,97.717,22.48455Z"/><path class="cls-229" d="M102.87836,48.97938c-.19052-.01511-.28076-.16023-.3778-.29426a10.77921,10.77921,0,0,0-1.16291-1.24631.29473.29473,0,0,1-.25282-.14893A46.16,46.16,0,0,1,98.3954,43.4164a.78967.78967,0,0,1-.08534-.21315,3.97494,3.97494,0,0,0-.278-.8525.381.381,0,0,1-.03976-.35759c.20822-.09679.27655.08518.338.20067.51758.97289,1.22974,1.8181,1.79435,2.75879.11546.19238.33915.313.36563.56071a9.30619,9.30619,0,0,0,1.12073,1.76459c.37434.52745.80078,1.01783,1.20044,1.52755A.6386.6386,0,0,1,102.87836,48.97938Z"/><path class="cls-230" d="M100.49026,45.51333a4.781,4.781,0,0,1-.91956-1.24987,13.3173,13.3173,0,0,1-1.26425-1.94178.64411.64411,0,0,0-.28132-.35124,3.01027,3.01027,0,0,1-.62341-1.09633c-.01275-.214-.141-.42152-.03752-.64215.24113-.13184.27609.0953.34485.21691a13.80487,13.80487,0,0,0,.82746,1.31995c.60972,1.07777,1.311,2.09819,1.97654,3.14109a.32217.32217,0,0,1,.05387.1413,9.28026,9.28026,0,0,0,.81174,1.23016c.04646.07555.11366.13647.11343.2332-.373-.08248-.41276-.47464-.63635-.69837A1.1299,1.1299,0,0,0,100.49026,45.51333Z"/><path class="cls-120" d="M99.7201,46.9q-.34682-.63571-.6939-1.27129a1.62749,1.62749,0,0,1-.30775-.73171c.20689-.04063.2869.12973.39179.24582.19627.21721.32639.48376.51114.7103a7.16273,7.16273,0,0,1,.65821.84967c.59362.86832,1.33325,1.61541,1.98887,2.4314.72953.908,1.51871,1.76082,2.30468,2.61771a.47559.47559,0,0,1,.23018.23151c-.15193.16832.03927.229.11257.296.58366.53342,1.06617,1.166,1.66676,1.68353a4.24121,4.24121,0,0,1,.452.56162.95926.95926,0,0,1-.68179-.33892c-.23912-.2008-.43209-.472-.77875-.50788a13.53247,13.53247,0,0,1-1.67192-1.73211c-.50853-.56807-1.03126-1.1247-1.52371-1.7097-.76278-.90612-1.48829-1.83783-2.194-2.78722C100.04189,47.25679,99.87554,47.08244,99.7201,46.9Z"/><path class="cls-231" d="M104.57314,51.75188a18.41091,18.41091,0,0,1-2.14435-2.28427c-.51687-.59384-1.02349-1.19627-1.54835-1.7837-.3974-.44478-.71447-.96133-1.06731-1.44592l-.24729-.33938c-.48925-.86487-1.03385-1.69829-1.47475-2.59051-.07176-.1452-.17858-.28772-.09895-.4671.30241-.06806.26194.26048.41817.36166a19.0241,19.0241,0,0,0,1.6451,2.52566c.416.57839.854,1.14089,1.28224,1.71049.29974.55985.67331,1.07235,1.02223,1.6009a24.53793,24.53793,0,0,0,2.06973,2.45158C104.49715,51.56927,104.57558,51.63716,104.57314,51.75188Z"/><path class="cls-232" d="M100.56692,45.05121c-.29073-.17671-.38437-.50036-.55788-.762a23.18628,23.18628,0,0,1-1.52189-2.47288c-.17583-.39056-.47726-.73777-.418-1.20971.06758-.07976.14131-.042.21478-.01173a1.47224,1.47224,0,0,1,.35682.48825,26.24915,26.24915,0,0,0,1.63183,2.53214.76765.76765,0,0,1,.21767.51168,6.70529,6.70529,0,0,0,.75809,1.298,1.36223,1.36223,0,0,1,.32041.55064A4.936,4.936,0,0,1,100.56692,45.05121Z"/><path class="cls-233" d="M100.49026,44.127c-.67733-.94156-1.29736-1.92-1.88486-2.91961-.10945-.18622-.23243-.3645-.34917-.54644-.13377-.32845-.48591-.5635-.41868-.978.14319-.10342.21614.01679.26438.10666.20512.38208.5347.66843.77078,1.02558l1.77162,2.6955a16.59666,16.59666,0,0,0,1.267,1.92235,1.434,1.434,0,0,1,.35074.61946c-.46413-.18381-.65323-.63466-.93241-.98952C101.06868,44.73121,100.74791,44.45829,100.49026,44.127Z"/><path class="cls-234" d="M74.45209,38.88967a1.03542,1.03542,0,0,1,.11274-1.06942c.0659-.105.19717-.16887.19578-.31642.02863-.2791.22943-.35091.46245-.38468a1.80274,1.80274,0,0,1,.82683.65751,2.54442,2.54442,0,0,0,.08508,1.019.24028.24028,0,0,1-.06476.24822c-.15333.39091-.544.34659-.84757.462C74.88172,39.40558,74.73665,39.06046,74.45209,38.88967Z"/><path class="cls-235" d="M76.07021,39.0439a2.35527,2.35527,0,0,1-.07722-1.30959c-.00186-.30525.25935-.41779.44163-.57818a1.449,1.449,0,0,0,.46529-.54578.53206.53206,0,0,1,.44084-.325.30458.30458,0,0,1,.31892.14824c.06656.38072.27327.75835.02829,1.1469a.56149.56149,0,0,1-.27651.4308c-.55539.22368-.67826.80237-1.03309,1.18647A.42133.42133,0,0,0,76.07021,39.0439Z"/><path class="cls-236" d="M90.09048,15.55281a5.89116,5.89116,0,0,1,2.31106,1.69442.60411.60411,0,0,1-.639.02231,1.4824,1.4824,0,0,0-.69346-.12626c-.6249-.18518-1.2614-.32693-1.88994-.49824a5.023,5.023,0,0,0-1.31833-.22346,1.20543,1.20543,0,0,1-.62041-.17555,4.301,4.301,0,0,1-.8479-.308.862.862,0,0,1,.61661-.69349Z"/><path class="cls-237" d="M85.1601,19.01886c-.40777.00775-.72966-.26806-1.12689-.32513a4.83843,4.83843,0,0,0-3.01663.58147,10.62779,10.62779,0,0,0-1.90165,1.13638,15.31055,15.31055,0,0,1-2.3871,1.34156,2.46537,2.46537,0,0,1-.96595.192c-.00668-.11691.01056-.2419-.18673-.1832a1.50581,1.50581,0,0,1-.62035.00957c.10233-.37089.39284-.47825.67576-.59165a.99224.99224,0,0,0,.59354-.38968,9.95124,9.95124,0,0,0,2.96679-1.35868,9.34374,9.34374,0,0,1,2.22561-1.17565c.46659-.16265.94039-.30469,1.40654-.46852a11.29013,11.29013,0,0,1,1.875-.309,2.5895,2.5895,0,0,1,1.51727.21245.55728.55728,0,0,1,.20675.78649c-.14019.15781-.22174.30869-.018.49026.07466.06654.17636.19244-.02734.25745A6.11324,6.11324,0,0,1,85.1601,19.01886Z"/><path class="cls-238" d="M86.2387,17.78653a7.50048,7.50048,0,0,0-1.5407-.30819,3.23773,3.23773,0,0,0-1.81463-.2449,2.32144,2.32144,0,0,1-.57347.01384c.64691-.154,1.29343-.30976,1.941-.46085.14711-.03433.298-.05264.44707-.07833a6.32732,6.32732,0,0,1,1.54127.104,5.58539,5.58539,0,0,1,1.07793.20417c.53586.36424,1.16279.57583,1.667.9925.11407.09426.33709.1558.13861.371a1.07791,1.07791,0,0,1-.71064-.05882,8.89424,8.89424,0,0,0-1.76051-.35154A.84335.84335,0,0,1,86.2387,17.78653Z"/><path class="cls-239" d="M74.45228,25.33439c.16053-.08.318-.16688.48205-.23887a24.386,24.386,0,0,0,4.91288-3.09943,12.25283,12.25283,0,0,1,2.75109-1.58033,3.833,3.833,0,0,1,2.068-.05356,3.5921,3.5921,0,0,0,.41686.04291c.36265.23561.6782.53714,1.05787.75021.07944.04458.19094.125.041.23067a1.61682,1.61682,0,0,1-.78694-.08318,7.98913,7.98913,0,0,0-1.31343-.20462,1.1993,1.1993,0,0,0-1.06216-.14107,6.41313,6.41313,0,0,0-2.29614,1.08213,5.85365,5.85365,0,0,0-1.0298.80994c-.30412.29776-.72314.50436-1.05585.79657-.36914.32421-.76605.61786-1.15736.90656-.58033.42816-1.12563.8923-1.68774,1.33706a1.13719,1.13719,0,0,1-.99731.23023.66128.66128,0,0,0-.62555.09657.93548.93548,0,0,1-.719.19638A4.93429,4.93429,0,0,0,74.45228,25.33439Z"/><path class="cls-240" d="M74.29821,29.10824c-.13649-.012-.29243.04821-.40635-.03947-.21688-.16694-.38295-.34808-.17836-.659.12793-.19441.34315-.34663.3536-.61087a2.55581,2.55581,0,0,0,1.24633-.86456c.1694-.255.52439-.38544.79176-.57748a1.33778,1.33778,0,0,0,.321-.26921c.36686-.51076.97419-.7172,1.41152-1.13632.03636-.03485.10074-.04928.12246-.08928.30609-.56361.89646-.80673,1.36374-1.18009a14.07221,14.07221,0,0,1,1.64236-1.27865,10.77887,10.77887,0,0,1,1.82831-.99494,1.88541,1.88541,0,0,1,1.22909.07123.92893.92893,0,0,0,.366.08074.114.114,0,0,1,.09292.12569c-.14206.17563-.35787.14647-.54559.19028-.13228.03087-.27342.02965-.3608.15854a.27745.27745,0,0,1-.17672.06756c-1.0495-.05085-1.71483.69946-2.49929,1.1991-.0955.06082-.16337.16492-.26346.22286A13.95392,13.95392,0,0,0,77.91057,25.82a18.89028,18.89028,0,0,1-1.582,1.51457,1.37589,1.37589,0,0,0-.323.37944c-.34882.57984-.96847.8678-1.42594,1.33028A.23712.23712,0,0,1,74.29821,29.10824Z"/><path class="cls-241" d="M84.467,21.63756l-.0773-.07721a.34985.34985,0,0,0-.308-.46216c.3792-.19881.74138.0071,1.10769.05475a6.7961,6.7961,0,0,0,1.04949.1764,1.19164,1.19164,0,0,1,.74085.11615,10.34661,10.34661,0,0,1,3.15461,1.79333A14.08641,14.08641,0,0,1,94.33683,28.303q.291.60627.52427,1.23772c.05326.1431.16122.31343-.04995.43531-.15023-.04134-.15512-.18357-.21112-.29449a13.553,13.553,0,0,0-1.40573-2.22242,1.759,1.759,0,0,0-.39393-.36079,11.65669,11.65669,0,0,0-1.80471-1.98251,12.7678,12.7678,0,0,0-2.6969-2.08324,8.67484,8.67484,0,0,0-1.41355-.57189c-.74445-.2306-1.502-.42426-2.23723-.68632A.36474.36474,0,0,1,84.467,21.63756Z"/><path class="cls-242" d="M85.1601,19.01886a3.50652,3.50652,0,0,1,1.30957.15356c.15946-.13067.32026-.0393.46906.01274a8.69883,8.69883,0,0,1,1.85062.78522c-.01321.42146.34356.62612.54316.92309.06549.09744.24842.16256.08745.322-.54612-.08877-1.0962-.14364-1.64529-.20663-.68558-.129-1.34468-.35953-2.01977-.52907a.31364.31364,0,0,1-.20951-.15182.28414.28414,0,0,0-.16446-.14915q-.8816-.34674-1.76143-.698a.1591.1591,0,0,1,.15407-.077A1.74365,1.74365,0,0,0,85.1601,19.01886Z"/><path class="cls-243" d="M85.54539,20.328l2.234.61622a2.48873,2.48873,0,0,1,.9082.3985,18.48189,18.48189,0,0,1,3.60485,2.866,11.10923,11.10923,0,0,1,2.79221,4.76167c.3694,1.359.56084,2.764,1.05641,4.0907a.348.348,0,0,1,.00834.2272.11788.11788,0,0,1-.08277.07559c-.17377-.03259-.19274-.18425-.24155-.31347a7.57646,7.57646,0,0,0-.55566-1.26153,13.35947,13.35947,0,0,0-.44534-1.54c-.031-.096-.08482-.18826-.03408-.29329.12977-.34229-.10948-.60382-.22007-.87915a12.88253,12.88253,0,0,0-3.32365-4.771,14.40106,14.40106,0,0,0-3.14156-2.30063,8.26638,8.26638,0,0,0-1.86585-.67545c-.39477-.29617-.8844-.47375-1.15572-.92423A1.38678,1.38678,0,0,1,85.54539,20.328Z"/><path class="cls-244" d="M89.16624,18.32512a3.65813,3.65813,0,0,0-1.33779-.88592.91878.91878,0,0,1-.51125-.42288l.61647-.00052c.28134-.18775.54934-.02932.80509.05427a10.79829,10.79829,0,0,1,2.51772,1.11725,20.9102,20.9102,0,0,1,3.1929,3.08889,11.14,11.14,0,0,1,2.03689,4.75926c.05619.32868.01867.66454.07518.99325a13.64594,13.64594,0,0,0,.56419,3.798,18.01848,18.01848,0,0,0,.96293,3.2897.47381.47381,0,0,1,.01359.15184.159.159,0,0,1-.15407.07749c-.20554-.01573-.20567-.2-.25721-.3299a37.5739,37.5739,0,0,1-1.22414-3.94245c-.03714-.13525-.07884-.26881-.12044-.40242a12.69628,12.69628,0,0,1-.27486-2.05276,9.64193,9.64193,0,0,0-.37022-1.76526,9.0422,9.0422,0,0,0-1.89884-3.8619,11.54532,11.54532,0,0,0-4.4609-3.43734A.34337.34337,0,0,1,89.16624,18.32512Z"/><path class="cls-245" d="M91.246,18.24862a16.17309,16.17309,0,0,0-2.13324-.938,4.207,4.207,0,0,0-1.1791-.29478.406.406,0,0,0-.23651-.392c-.16323-.10991-.36448-.18029-.45681-.37781a13.30705,13.30705,0,0,1,3.85155.84718,5.54842,5.54842,0,0,1,1.05214.7474.23645.23645,0,0,1,.10634.29811A.77066.77066,0,0,1,91.246,18.24862Z"/><path class="cls-246" d="M74.29821,29.10824a7.39706,7.39706,0,0,0,1.49536-1.29289,7.08112,7.08112,0,0,1,.90715-.92707c.90526-.87,1.76349-1.78865,2.708-2.6182a3.94157,3.94157,0,0,1,.33269-.25767c.90716-.639,1.78916-1.31466,2.74541-1.882.33534-.199.70377-.07174,1.0556-.108.10926-.088.21887-.031.326.00259,1.02189.32016,2.05715.59818,3.06309.96847.13738.05057.31078.066.3259.26868a.358.358,0,0,1-.35578.16482,5.21788,5.21788,0,0,1-1.30563.00334,1.91169,1.91169,0,0,1-.6188-.20021,4.00291,4.00291,0,0,0-2.12963-.34163.92174.92174,0,0,0-.42881.15278,17.54069,17.54069,0,0,0-2.81478,2.135,11.95043,11.95043,0,0,0-1.66845,1.74468,7.02224,7.02224,0,0,1-1.43771,1.48942,6.0644,6.0644,0,0,0-.76075,1.0091c-.05658.06817-.09187.15636-.18892.182-.25165.04276-.469.18932-.71727.24006a1.057,1.057,0,0,1-.841-.03989C74.01616,29.53647,74.215,29.34806,74.29821,29.10824Z"/><path class="cls-247" d="M73.98993,29.8016a2.28242,2.28242,0,0,0,1.42907-.30933c.08943-.05758.1033.01053.11178.078.12138.18664-.00921.34347-.06807.50348-.06635.18041-.1198.36421-.17621.54739-.24249.355-.44837.74884-.91078.87556a4.14885,4.14885,0,0,1-.8656-.08455.28738.28738,0,0,1-.29571-.32021,4.71856,4.71856,0,0,1,.08234-.75131A1.26637,1.26637,0,0,1,73.98993,29.8016Z"/><path class="cls-248" d="M75.22264,37.19488a.64963.64963,0,0,0-.462.309.36522.36522,0,0,1-.42642-.00112,4.46865,4.46865,0,0,0-1.34558-.69255c.172-.29907.16076-.68978.46221-.92414.54127-.51375,1.09373-.21645,1.64529-.02314A1.238,1.238,0,0,1,75.22264,37.19488Z"/><path class="cls-249" d="M75.06838,35.886c-.122-.02475-.24677-.04014-.3654-.07593a1.62694,1.62694,0,0,0-1.25216.07593c-.16942-.46188-.61119-.67238-.92461-1.00134a.30259.30259,0,0,1,.21062-.29084c.33352-.10451.35543-.352.329-.6333.38012-.19472.58464-.15877.95132.16721.43266.38464.43342.38583.93366.0696a.52841.52841,0,0,1,.384-.13464c.42142.05682.509.35854.52479.71344A1.3239,1.3239,0,0,1,75.06838,35.886Z"/><path class="cls-250" d="M74.37573,31.49671a6.69368,6.69368,0,0,0,.84691-.84817c.41789-.48353.87721-.92788,1.2961-1.41231a44.24661,44.24661,0,0,1,3.46244-3.90795c.69213-.63214,1.44707-1.184,2.18345-1.76021a1.90023,1.90023,0,0,1,1.05737-.30271,3.45,3.45,0,0,1,1.74727.32681,2.26686,2.26686,0,0,0,1.0631.70793,2.26118,2.26118,0,0,1,.60374.32067c.0857.07175.24295.13878.1045.2981a1.21652,1.21652,0,0,1-.87789-.14936,4.46178,4.46178,0,0,0-1.87853-.41506,5.56485,5.56485,0,0,0-.71727-.11882,1.874,1.874,0,0,0-1.26153.55454c-.65554.62723-1.40662,1.14878-2.03426,1.814A8.30531,8.30531,0,0,0,78.69182,28.278c-.02477.045.01679-.00106-.01934.03259a13.09967,13.09967,0,0,0-1.47081,2.36735c-.07426.1054-.13568.21865-.26645.26527a2.63516,2.63516,0,0,0-1.51735.94035,2.42675,2.42675,0,0,1-.36.39546.36369.36369,0,0,1-.46207.01674c-.13969-.09348-.331-.17984-.22071-.41474Z"/><path class="cls-251" d="M74.37506,31.881c.22.48486.478.54478.79636.15724a2.32272,2.32272,0,0,1,.5923-.63839c.36978-.19654.6683-.57694,1.1537-.52019.11239.1642-.00533.28926-.08455.40728a5.21654,5.21654,0,0,0-.35878.61576,3.44891,3.44891,0,0,0-1.07117,1.85849c-.02192.1221.00536.2571-.10344.35327-.11394-.00256-.17951.07955-.26071.14078-.5494.41437-.59469.41888-1.0733-.05589a.89068.89068,0,0,0-.89964-.23883c-.06535-.35233-.342-.599-.46221-.92391q.67413-.50091,1.34816-1.002A.62294.62294,0,0,1,74.37506,31.881Z"/><path class="cls-252" d="M82.38712,44.281c-.2776-.3469-.039-.73011-.05421-1.0928a6.16031,6.16031,0,0,0-.00671-.74375c-.03017-.19143-.1415-.482.2148-.551a2.36253,2.36253,0,0,1,.94333.28141,15.40568,15.40568,0,0,0,3.63485.92654,2.61986,2.61986,0,0,1,.37683.07135c1.40908.46109,2.69637-.05117,3.98358-.511.40363-.14419.63614-.54583.98116-.789a4.00672,4.00672,0,0,1,.43092-.31821c.24745-.10828.40487.0742.58066.18589a7.10112,7.10112,0,0,1,1.009.84622,3.43427,3.43427,0,0,0,.17222,1.25773.38546.38546,0,0,1-.172.43669.30632.30632,0,0,0-.30764.11938c-.3928.63593-1.0953.755-1.70493,1.02593-.32651.14511-.66677.259-.99551.39946a1.71144,1.71144,0,0,1-.74357.15173,21.47431,21.47431,0,0,1-5.64168-.90463,14.08386,14.08386,0,0,0-2.43535-.64822A.85145.85145,0,0,1,82.38712,44.281Z"/><path class="cls-253" d="M94.48131,42.5866c-.48907-.16295-.74491-.64925-1.19991-.86581-.11244-.05352-.20136-.15126-.34061-.13535a.5785.5785,0,0,1-.1852-.33,5.1235,5.1235,0,0,0-.63976-1.43534.44171.44171,0,0,1-.082-.29112c.1184-.2663.39982-.34922.59566-.52909.39535-.06432.52424.28015.74484.48473.3157.76758.93172,1.34709,1.30414,2.07873.08828.17342.26205.33725.11135.56106Z"/><path class="cls-254" d="M94.78983,42.12439a4.24758,4.24758,0,0,0-.79595-1.447,3.13724,3.13724,0,0,1-.66791-1.17149c-.20487-.33274-.02549-.68242-.04559-1.02318.17176-.16211.2417.01723.31158.10953a10.9313,10.9313,0,0,1,.65811,1.06813l1.23255,2.6184c-.09665.11018-.03121.285-.15354.38491C95.13891,42.49435,95.07526,42.19854,94.78983,42.12439Z"/><path class="cls-255" d="M93.24912,35.50075a4.67475,4.67475,0,0,0-1.30923-.69319,3.809,3.809,0,0,1-.82528-1.07669,4.08033,4.08033,0,0,0-1.10027-1.64537c-.46567-.52684-.94815-1.04281-1.43663-1.55156a8.94938,8.94938,0,0,0-2.61722-1.65011c-.39957-.19989-.83338-.33142-1.25089-.495a2.97658,2.97658,0,0,0-1.32254-.16727.64836.64836,0,0,0-.386.15873,4.23272,4.23272,0,0,0-.98618,1.17085A16.66987,16.66987,0,0,0,80.71949,33.158c-.15845.62046-.32595,1.24-.43709,1.87248a3.25618,3.25618,0,0,1-.57128.61386.29679.29679,0,0,1-.34245.10426.4655.4655,0,0,1-.17162-.44142,6.05163,6.05163,0,0,1,.02294-.953c.21231-.50778.40394-1.02644.65906-1.515a19.30453,19.30453,0,0,0,.84646-2.101,5.64371,5.64371,0,0,1,1.08525-2.01494,2.482,2.482,0,0,0,.37084-.4906,1.52636,1.52636,0,0,1,1.72259-.69281,4.90583,4.90583,0,0,1,1.70627.6743c.72683.38435,1.48181.7055,2.21378,1.07635a10.165,10.165,0,0,1,2.15765,1.78164,26.6289,26.6289,0,0,1,2.14468,2.20553,3.27367,3.27367,0,0,1,.41912.60535,7.69792,7.69792,0,0,0,.62291,1.1736C93.24934,35.19134,93.38783,35.3231,93.24912,35.50075Z"/><path class="cls-256" d="M91.16916,33.72938l.77072,1.07819.61734.92479a.76212.76212,0,0,1,.33312.65716c-.0022.39952.1962.79163.043,1.19573-.16578.02544-.216-.12177-.28725-.213a9.79,9.79,0,0,0-1.28949-1.31521A11.85372,11.85372,0,0,0,89.44445,33.407a1.08441,1.08441,0,0,1-.29817-.39435,1.14653,1.14653,0,0,1,.04018-.94817.24547.24547,0,0,1,.37655.01126A15.526,15.526,0,0,1,91.176,33.65709C91.18984,33.67483,91.18059,33.70439,91.16916,33.72938Z"/><path class="cls-257" d="M98.02515,42.81737a5.76906,5.76906,0,0,0,.76126,1.56255,9.96136,9.96136,0,0,1,.77943,1.51869c-.31572-.30576-.45113-.764-.84739-1.00163-.59018-.94908-1.17824-1.89949-1.77312-2.84563-.077-.12246-.12418-.28757-.30665-.31187a.52078.52078,0,0,0-.07091-.2947c-.47284-.83413-.77186-1.75777-1.31611-2.55518a1.74005,1.74005,0,0,1-.35109-1.19762c.24335-.12333.27094.11937.35084.228.47886.65078.80383,1.3932,1.21934,2.08218a19.7116,19.7116,0,0,0,1.45737,2.46624C98.00017,42.56787,98.08689,42.67521,98.02515,42.81737Z"/><path class="cls-258" d="M92.86394,37.58025c.2138-.23911-.02635-.4748-.0321-.70974a1.54794,1.54794,0,0,0-.27464-1.13816c.15873-.00338.206.1239.276.22956a35.02421,35.02421,0,0,1,2.0333,3.62084,1.59811,1.59811,0,0,0-.61642.07764c-.32713-.16333-.37088-.53542-.57878-.78714-.1195-.14468-.17264-.34118-.34514-.4455A1.61619,1.61619,0,0,1,92.86394,37.58025Z"/><path class="cls-259" d="M94.94368,37.65812a6.55177,6.55177,0,0,0,.308,1.23148,2.24606,2.24606,0,0,1-.6562-.95,14.18463,14.18463,0,0,0-1.34634-2.43885c-.04225-.38227-.344-.63289-.49728-.96087a3.21485,3.21485,0,0,1-.2736-.656c.33459.02836.49981.31489.72977.495a3.91465,3.91465,0,0,1,.81671.94528A6.50455,6.50455,0,0,1,94.94368,37.65812Z"/><path class="cls-260" d="M92.24747,18.09444a4.39361,4.39361,0,0,0-.92094-.76363.76515.76515,0,0,1-.23463-.2376c.18133-.17209.37248-.05725.53166.01651a1.5564,1.5564,0,0,0,.778.13751,10.94346,10.94346,0,0,1,2.167,1.867,9.53934,9.53934,0,0,1,1.81665,3.04321,10.26737,10.26737,0,0,1,.71678,3.27457,7.38061,7.38061,0,0,1,.15278,1.28859,5.64532,5.64532,0,0,0,.13735,1.61236.29319.29319,0,0,1-.13721.39,9.76466,9.76466,0,0,1-.3855-2.69532c-.22246-.11781-.197-.35069-.22549-.5408a11.89249,11.89249,0,0,0-.86846-3.01494,9.16129,9.16129,0,0,0-1.77364-2.67233,15.04972,15.04972,0,0,0-1.50191-1.42613C92.40218,18.29569,92.28332,18.2308,92.24747,18.09444Z"/><path class="cls-261" d="M92.24747,18.09444a2.387,2.387,0,0,1,.72882.55284,10.62212,10.62212,0,0,1,3.744,6.75094,6.45721,6.45721,0,0,0,.1491.6294.68728.68728,0,0,0-.25607.80025.15237.15237,0,0,1-.05189.20085c-.103-.55754-.17918-1.12166-.314-1.6714a11.01735,11.01735,0,0,0-2.26632-4.50324,28.17214,28.17214,0,0,0-2.565-2.40026,2.02851,2.02851,0,0,1-.17007-.2052A1.333,1.333,0,0,0,92.24747,18.09444Z"/><path class="cls-262" d="M96.40738,29.64728c.32129.73663.44142,1.53369.68871,2.29293a21.13659,21.13659,0,0,0,.852,2.40553c.14212.60753.48446,1.14121.64314,1.74264.01611.06106.03355.12177.05037.18264a.51879.51879,0,0,0-.30814-.077,9.5899,9.5899,0,0,1-.82268-1.6314c-.36449-.84566-.61579-1.73276-.97874-2.57817a3.45834,3.45834,0,0,1-.23786-1.11308C96.24477,30.45519,96.1167,30.03175,96.40738,29.64728Z"/><path class="cls-263" d="M96.6383,31.958a.91537.91537,0,0,1,.08783.16271,28.432,28.432,0,0,0,1.55246,3.89192,1.23521,1.23521,0,0,1,.05487.18133,20.32555,20.32555,0,0,0,1.6099,3.19421,2.14674,2.14674,0,0,1,.39268.73368,13.67272,13.67272,0,0,1-1.11053-1.528c-.04444-.07071-.05642-.1719-.16679-.18959-.08966.17652.08072.32115.0449.48526a8.52112,8.52112,0,0,0-.61628-.92414c-.145-.03051-.19722-.14782-.253-.26505q-1.07305-2.25423-1.91953-4.60313c-.19442-.64609-.33411-1.30655-.52309-1.95411a.87978.87978,0,0,1-.0345-.704c.19809-.07187.26058.09869.28217.21007.11443.59043.422,1.11493.552,1.61429A.28583.28583,0,0,1,96.6383,31.958Z"/><path class="cls-264" d="M96.4072,33.11318c.36026.9142.70225,1.83618,1.0866,2.74015.30421.71549.66042,1.4089.99354,2.11211a3.65183,3.65183,0,0,0,.40115,1.18611c.038.12062.09163.23632.1381.35428a6.40689,6.40689,0,0,1-.88107-1.49484c-.183-.33178-.40209-.63853-.5826-.96952-.16061.01414-.17764-.12534-.22166-.22094A19.28365,19.28365,0,0,1,96.156,33.86477c-.04634-.16966-.13686-.33614-.05677-.52026l.00019-.00031C96.20764,33.27468,96.22344,33.0821,96.4072,33.11318Z"/><path class="cls-265" d="M79.30551,34.26853c0,.36886.00113.73773-.00054,1.10658-.00064.1429-.00538.28479.15462.35687a.46285.46285,0,0,1-.02717.40666,7.27628,7.27628,0,0,0-.54479,1.74859.34653.34653,0,0,1-.12136.23235,1.36918,1.36918,0,0,0-.31168.133c-.21069.15938-.3113.02355-.36726-.14a.90822.90822,0,0,0-.39937-.53206c.05521-.39053-.09974-.767-.07723-1.15536a.71069.71069,0,0,1,.157-.81488,11.92236,11.92236,0,0,0,1.04913-1.9035c.17221-.28278.29066-.59721.45634-.88491.07919-.13752.15563-.306.37353-.243a.54129.54129,0,0,1,.08247.60128C79.59172,33.54437,79.43738,33.90208,79.30551,34.26853Z"/><path class="cls-266" d="M78.76627,38.11958a5.62311,5.62311,0,0,1,.50226-1.85458c.07859-.17082.12817-.355.19106-.533l.77054-.69336c.11234-.02651.17446.03448.21976.12551a1.77072,1.77072,0,0,1-.14273,1.3379c-.49092.6623-.725,1.46221-1.1559,2.15666A.74551.74551,0,0,1,78.76627,38.11958Z"/><path class="cls-267" d="M82.46379,41.73929a1.96825,1.96825,0,0,1-.92422-.46213,11.25081,11.25081,0,0,1-.51386-1.78475c-.01378-.03459.03279-.09319.05128-.14062a1.5716,1.5716,0,0,1,.22363-1.11065c.64051-.463.8616-.37131,1.5258.443-.06509.34337.13984.66364.08813,1.00649a8.72339,8.72339,0,0,0-.2754,1.60509A.54.54,0,0,1,82.46379,41.73929Z"/><path class="cls-268" d="M81.38547,38.27343c-.24.32022-.16819.72962-.30848,1.07836-.33967.00892-.44744-.32983-.693-.462a5.4246,5.4246,0,0,1,.23111-2.07968,12.10138,12.10138,0,0,1,.723-1.72086c.04351-.1194.14826-.23686.27217-.04286a20.03326,20.03326,0,0,1-.075,2.21542A2.024,2.024,0,0,1,81.38547,38.27343Z"/><path class="cls-269" d="M81.54,34.96257q-.30256.61191-.60479,1.224c-.103.20979-.10561.47091-.32011.62351a.79177.79177,0,0,0-.308-.30806,6.07493,6.07493,0,0,0,.07685-1.3863,4.5744,4.5744,0,0,1,.394-1.14781,6.04688,6.04688,0,0,0,.48808-1.27521c.0283-.14176.036-.37572.30323-.33236a.42552.42552,0,0,1,.03525.36891,4.94864,4.94864,0,0,0,.06493,2.00158C81.67438,34.83481,81.70037,34.95109,81.54,34.96257Z"/><path class="cls-270" d="M82.46379,41.73929a8.64365,8.64365,0,0,1,.38554-2.07952c.14475-.10235.27225-.01418.394.04626a1.62408,1.62408,0,0,0,.62148.19018,9.15906,9.15906,0,0,1,1.76946.34781,4.27679,4.27679,0,0,0,1.56043-.08681c.40735-.041.811-.1185,1.219-.16108a2.6639,2.6639,0,0,0,1.61279-.63735,3.30839,3.30839,0,0,1,.80474-.52082,1.11648,1.11648,0,0,1,1.26193.668c.102.3968.42441.68257.53886,1.074.09838.33648.20547.67042.30872,1.00548a5.89129,5.89129,0,0,1-3.40016,1.78827,4.97139,4.97139,0,0,1-2.02487-.09088,19.52056,19.52056,0,0,1-3.41707-.76923,9.46729,9.46729,0,0,1-1.55769-.62018Z"/><path class="cls-271" d="M96.09924,33.34451a20.87443,20.87443,0,0,0,1.46368,3.697,6.84558,6.84558,0,0,0,.52225,1.42606c.05564.14126.114.28146.17106.42215l-.53906-.4622a.28245.28245,0,0,1-.17436-.18761c-.25444-.59413-.58705-1.151-.83428-1.74884a15.76069,15.76069,0,0,1-.90774-2.36891c-.18044-.62769-.33828-1.26183-.53744-1.88463a.40064.40064,0,0,1,.06573-.43357,3.58279,3.58279,0,0,1,.60878,1.29956C95.97844,33.20029,95.99413,33.29742,96.09924,33.34451Z"/><path class="cls-272" d="M96.79275,36.5018c.32125.63559.66454,1.26062.92442,1.92567.3224.64465.64664,1.2884.96578,1.93466.07235.14651.127.30179.18976.453a4.8547,4.8547,0,0,1-1.00165-1.15538.32007.32007,0,0,1-.20253-.21218c-.37-.83541-.79379-1.64669-1.12473-2.49955a.73226.73226,0,0,1-.10027-.40009C96.54182,36.39751,96.67346,36.49625,96.79275,36.5018Z"/><path class="cls-273" d="M98.02515,42.81737a21.72746,21.72746,0,0,1-1.61777-2.77222c-.279-.5682-.45512-1.1784-.71712-1.75371a.88361.88361,0,0,1-.15951-.60975c.26959-.08456.33254.157.397.30068.45149,1.007,1.14768,1.88208,1.558,2.90978l.53944,1.07829c.0738.4278.34161.795.38518,1.23222C98.23335,43.12277,98.15505,42.94428,98.02515,42.81737Z"/><path class="cls-274" d="M97.48569,40.89215a8.718,8.718,0,0,1-.68647-1.141c-.44173-.59884-.67888-1.31233-1.0828-1.93216a1.15614,1.15614,0,0,0-.15624-.1617c-.12776-.04-.157-.15832-.20875-.25984a12.70141,12.70141,0,0,1-.96388-2.1751c-.12343-.42226-.41787-.76451-.54976-1.18275a4.11333,4.11333,0,0,0-.30017-1.10421.4485.4485,0,0,1-.02138-.40793c.253-.12826.315.10148.386.23631.233.44217.51272.85706.74193,1.30078a3.55187,3.55187,0,0,1,.33535.85634,19.03479,19.03479,0,0,0,1.46866,3.12118c.293.59788.598,1.19.87569,1.79523.05129.1118.13637.22271.08476.36158Z"/><path class="cls-275" d="M97.40866,40.19886c-.37668-.75286-.747-1.509-1.132-2.2576-.33908-.65941-.72168-1.29781-1.03345-1.96944-.21881-.47135-.34966-.98336-.52261-1.47623a.86893.86893,0,0,0-.16192-.38113,5.40146,5.40146,0,0,0-.35382-1.03176.80805.80805,0,0,1-.08845-.40245c.185-.27592.2507-.01677.30372.08653a11.99616,11.99616,0,0,1,.53712,1.18835,3.06779,3.06779,0,0,0,.42725.81191,3.81038,3.81038,0,0,1,.25706.68138c.495,1.16944,1.10227,2.28343,1.69043,3.406.24981.47682.46738.96961.73155,1.439a.285.285,0,0,1,.03871.29079c.04242.43752.31144.8043.38486,1.23214a6.62615,6.62615,0,0,1-.80372-1.22259C97.59726,40.4584,97.57723,40.27693,97.40866,40.19886Z"/><path class="cls-276" d="M98.10229,40.58422c-.60375-1.18148-1.20394-2.36479-1.81258-3.54375a10.45394,10.45394,0,0,1-.96082-2.23272,2.17,2.17,0,0,1-.35435-1.42705c.0943-.10773.1503-.02248.19537.04738a2.37221,2.37221,0,0,0,.21846.3384,13.797,13.797,0,0,1,.85456,1.95694c.11321.24528.32472.46923.24168.77865a20.87839,20.87839,0,0,0,.88634,2.0784c.16151.36208.33308.71968.50011,1.0793-.02542.23883.15358.38968.24838.57675a.76351.76351,0,0,1,.13679.42441Z"/><path class="cls-277" d="M75.06838,35.886a.245.245,0,0,1,.16041-.2331,1.00068,1.00068,0,0,0,.53328-.84517c.34925-.25417.6984-.50734,1.03177-.78373a.69943.69943,0,0,1,.67734-.15545.26644.26644,0,0,1,.05751.10312.45845.45845,0,0,1-.069.40015.85782.85782,0,0,0-.11453.86484,1.9254,1.9254,0,0,1-.04257,1.11131.63939.63939,0,0,0-.36515.4c-.08042.27224-.35548.3881-.555.56474a5.38946,5.38946,0,0,0-.38948.42163c-.32669-.08-.43856-.46671-.77035-.53944A2.4042,2.4042,0,0,0,75.06838,35.886Z"/><path class="cls-278" d="M77.30259,36.348c-.05633-.04146-.09805-.10816-.07233-.16527.21473-.47678-.02385-.92735-.07364-1.388A.35777.35777,0,0,1,77.275,34.487a.64067.64067,0,0,0,.18189-.52648,5.14681,5.14681,0,0,0,1.267-1.75519,22.45872,22.45872,0,0,0,1.16475-2.58559,2.94636,2.94636,0,0,1,.3108-.57123c.066-.09338.12208-.25091.29271-.13344a3.69719,3.69719,0,0,1-.19454,1.18919,2.7785,2.7785,0,0,0-.16258,1.00481,10.11912,10.11912,0,0,1-.52172,1.46529.49052.49052,0,0,0-.236.24342c-.34934.754-.79455,1.46155-1.089,2.24222a.8309.8309,0,0,1-.236.34573,1.45449,1.45449,0,0,0-.44148,1.0194A.516.516,0,0,0,77.30259,36.348Z"/><path class="cls-279" d="M88.78087,20.02016a12.543,12.543,0,0,0-2.3112-.84774,1.01573,1.01573,0,0,0-.16781-.20052c-.33268-.23589-.14937-.36736.09092-.49227A3.5919,3.5919,0,0,1,88.043,18.883c.693.2965,1.40815.51219,2.11512.75889a12.55162,12.55162,0,0,1,3.2662,2.81,16.85853,16.85853,0,0,1,1.3965,2.1083,11.0896,11.0896,0,0,1,1.22163,4.01249,2.68882,2.68882,0,0,1,.00769,1.06037c-.27179.02914-.2664-.20375-.28466-.35059a12.67686,12.67686,0,0,0-.78807-2.93722,6.61515,6.61515,0,0,0-.55024-1.09131A14.75251,14.75251,0,0,0,92.828,23.05574a10.7847,10.7847,0,0,0-3.64851-2.75823C89.02721,20.2303,88.86244,20.18652,88.78087,20.02016Z"/><path class="cls-280" d="M90.167,19.71185a8.26141,8.26141,0,0,1-1.16641-.3306,18.45416,18.45416,0,0,0-2.60785-.90162c-.01826-.05726-.06965-.1459-.04968-.167.21867-.23093-.00255-.36544-.1044-.52612.99737.06262,1.93758.43576,2.92754.53859a.26866.26866,0,0,1,.15407.15437,7.36,7.36,0,0,0,.80616.89915A.21316.21316,0,0,1,90.167,19.71185Z"/><path class="cls-281" d="M87.24017,23.25474a6.40624,6.40624,0,0,0-1.30464-.49439c-.79419-.25682-1.595-.49313-2.39307-.738-.01578-.18343.07985-.23306.24892-.234a1.54384,1.54384,0,0,0,.67559-.15082c.76971.26531,1.56322.453,2.33829.70463a15.76928,15.76928,0,0,1,1.58272.628,8.70981,8.70981,0,0,1,1.8531,1.34317,16.79761,16.79761,0,0,1,2.28862,2.2594c.12235.14614.1387.36678.334.456a10.03991,10.03991,0,0,1,1.46632,2.65348.27925.27925,0,0,1,.02281.25637c-.28632.06075-.34141-.1919-.41163-.35116a13.41754,13.41754,0,0,0-2.0375-2.72846,1.13789,1.13789,0,0,0-.29666-.24276,26.01539,26.01539,0,0,0-2.24377-2.0182,8.81254,8.81254,0,0,0-1.93525-1.218A.3866.3866,0,0,1,87.24017,23.25474Z"/><path class="cls-282" d="M94.32724,29.95556A13.457,13.457,0,0,0,92.93093,27.203a.66729.66729,0,0,1-.06718-.17429,5.588,5.588,0,0,1,1.31158,1.71142,3.50483,3.50483,0,0,1,.61468,1.2154,5.41156,5.41156,0,0,1,.53907,1.84837,5.52537,5.52537,0,0,0,.39776,1.59032,11.61256,11.61256,0,0,0,.92031,2.67286,3.27231,3.27231,0,0,1,.1456.43471c-.10259.14076-.2054.039-.30814.00027L95.32889,33.8063c-.44037-1.1717-.66347-2.40587-1.03393-3.59772A.243.243,0,0,1,94.32724,29.95556Z"/><path class="cls-283" d="M88.78087,20.02016a10.64342,10.64342,0,0,1,3.84306,2.65638,13.26417,13.26417,0,0,1,1.56557,1.96295,11.56445,11.56445,0,0,1,1.42989,3.31956c.10735.39071.12682.80479.20928,1.20346.03468.16766.02626.36511.19354.48486.22732.11421.18185.34691.22129.53585a1.86158,1.86158,0,0,0,.1637.69657c.08916.35682.00421.75094.2311,1.07825v.53147a7.74276,7.74276,0,0,1-.64515-1.71509.52763.52763,0,0,0-.20243-.357c-.13244.02189-.1438-.08587-.163-.16625-.04764-.19956-.12143-.392-.158-.5943a11.66832,11.66832,0,0,0-2.59793-5.4544,17.22283,17.22283,0,0,0-3.03778-2.69713c-.1306-.09775-.30067-.15422-.35986-.33033-.27955-.21262-.40031-.57208-.71177-.75841C88.54087,20.2841,88.81527,20.15508,88.78087,20.02016Z"/><path class="cls-284" d="M89.47419,21.17505A11.98563,11.98563,0,0,1,91.29492,22.507a12.01112,12.01112,0,0,1,2.52875,2.80891A11.38946,11.38946,0,0,1,95.567,29.65749a6.72715,6.72715,0,0,0,.22374.76,10.69914,10.69914,0,0,0,.41686,1.886c.0442.27121.17.53008.19961.80974-.10373.0755-.13544.24689-.30777.231-.13-.72037-.4642-1.38342-.61-2.09543-.17133-.83672-.33823-1.67174-.56489-2.497a10.4245,10.4245,0,0,0-1.77119-3.38219,15.99624,15.99624,0,0,0-4.18675-3.73026c-.385-.25664-.82136-.41368-1.18718-.6952.09257-.04253.18253-.1.29074-.04671a1.62777,1.62777,0,0,0,.90257.11768C89.17482,20.99485,89.29589,21.16074,89.47419,21.17505Z"/><path class="cls-285" d="M96.4072,30.87979c-.2667-.26065-.18341-.635-.30516-.94309a2.6823,2.6823,0,0,1-.07983-.28933,11.35494,11.35494,0,0,0-1.2935-5.05066,18.76832,18.76832,0,0,0-1.32029-2.00987,14.55844,14.55844,0,0,0-3.24138-2.875.34343.34343,0,0,0-.175-.35161,1.69931,1.69931,0,0,1-.67168-.88075,7.40494,7.40494,0,0,1,2.59881,1.5056,10.56505,10.56505,0,0,1,3.19285,3.8747,11.54786,11.54786,0,0,1,1.072,4.12431c.03091.55681.14645,1.10892.22343,1.66318A2.69957,2.69957,0,0,0,96.4072,30.87979Z"/><path class="cls-286" d="M84.9291,23.63987a3.99873,3.99873,0,0,0-2.24662-.21162,3.43647,3.43647,0,0,0-1.18359.75993A18.39541,18.39541,0,0,0,78.97275,26.481c-.62764.68788-1.17905,1.44356-1.79542,2.13848a9.80387,9.80387,0,0,1-1.95469,2.02905c-.02486-.39586.25287-.70528.30814-1.07826a6.43989,6.43989,0,0,1,1.1497-1.44405,5.919,5.919,0,0,0,1.28944-1.4094,11.42389,11.42389,0,0,1,.92538-.95813A15.62982,15.62982,0,0,1,81.325,23.67087a9.04037,9.04037,0,0,1,1.17748-.787,1.52829,1.52829,0,0,1,.95846-.12461,4.742,4.742,0,0,1,1.8292.49574,1.07857,1.07857,0,0,0,.25524.07679c.13311.0948.30606.09955.43915.19582.10971.07935.24361.14124.19355.31724A4.22538,4.22538,0,0,1,84.9291,23.63987Z"/><path class="cls-287" d="M86.16167,23.794c-.13037-.2541-.48588-.20809-.61628-.46215a6.09749,6.09749,0,0,0,1.69478-.07706,3.35457,3.35457,0,0,1,1.361.6602,19.18626,19.18626,0,0,1,2.9156,2.50029,1.67187,1.67187,0,0,1,.11443.15128,6.32744,6.32744,0,0,1,1.54091,2.16c.16022.37559.43322.69309.59905,1.06725.09595.21647.24225.43055.12259.68816-.19414.081-.26293-.07971-.34767-.19031a3.45849,3.45849,0,0,0-.41133-.53012,18.04779,18.04779,0,0,0-3.96055-4.3117A8.07486,8.07486,0,0,0,86.6729,24.05,1.272,1.272,0,0,1,86.16167,23.794Z"/><path class="cls-288" d="M77.45648,33.88361a1.90491,1.90491,0,0,0-1.12879.64131,1.20957,1.20957,0,0,1-.56562.28283.59633.59633,0,0,0-.46259-.69327,1.93105,1.93105,0,0,1,.48567-1.46732A.79211.79211,0,0,0,76,32.25255a.4205.4205,0,0,1,.45519-.37162c.17325-.19393.34927-.31828.51935-.00009.075.1403.14317.08674.23259.016.08119-.06417.16136-.1769.2884-.06928a1.18093,1.18093,0,0,0,.40947.75557A2.05872,2.05872,0,0,1,77.45648,33.88361Z"/><path class="cls-289" d="M94.17335,32.651c.09285.49718.46962.91963.38537,1.46343-.25049-.44843-.50327-.89561-.74989-1.34616a.58866.58866,0,0,0-.25192-.2716c-.21723-.05983-.2725-.259-.35359-.42732a12.73846,12.73846,0,0,0-2.23515-3.14423,27.14363,27.14363,0,0,0-2.64506-2.39709,4.66825,4.66825,0,0,0-1.0499-.55521c-.7913-.36618-1.62806-.61875-2.42423-.97279a5.1958,5.1958,0,0,0-.7525-.52488c-.0833-.043-.19849-.08069-.16884-.21915a4.21907,4.21907,0,0,1,2.03509.44194,1.85955,1.85955,0,0,0,.81522.17421,3.63465,3.63465,0,0,1,1.66059.73249A20.07434,20.07434,0,0,1,92.43529,29.466c.17873.21941.39263.40532.561.63262a20.53878,20.53878,0,0,1,1.05868,2.07815A1.5619,1.5619,0,0,1,94.17335,32.651Z"/><path class="cls-290" d="M83.92764,24.256c.29635.24673.71535.32992.92443.693-.21873.1044-.47593-.03066-.68873.11126a2.02813,2.02813,0,0,0-2.35257.65867c-.6455.63473-1.34008,1.22984-1.921,1.92393a13.561,13.561,0,0,0-1.26612,1.963c-.41527.719-.77606,1.46666-1.16774,2.198l-.42425.3556c-.11891-.25654-.23792-.52355-.57646-.27858-.05972-.25035.13867-.38992.24722-.5662a.98007.98007,0,0,0,.215-.43505,6.03249,6.03249,0,0,0,.92026-1.57676,1.63354,1.63354,0,0,1,.40871-.63921c.47513-.42182.66972-1.04547,1.09757-1.5096a15.51924,15.51924,0,0,1,1.86965-1.8123,4.43293,4.43293,0,0,0,.67546-.56095A1.78223,1.78223,0,0,1,83.92764,24.256Z"/><path class="cls-291" d="M92.9406,30.10958a8.85134,8.85134,0,0,1-1.30087-1.44374q-.82153-.91447-1.71722-1.7482a9.13407,9.13407,0,0,0-1.93158-1.48549c-.3937-.20687-.808-.37459-1.213-.56-.32262-.39449-.82535-.46942-1.24459-.69046a1.23859,1.23859,0,0,1-.60426-.54185,3.67852,3.67852,0,0,1,1.23257.15408,8.11872,8.11872,0,0,1,2.803,1.36856,21.42287,21.42287,0,0,1,2.65,2.44373,8.4772,8.4772,0,0,1,1.55724,2.11793A.64361.64361,0,0,1,92.9406,30.10958Z"/><path class="cls-292" d="M92.09321,39.50593a1.56537,1.56537,0,0,0-1.23258-.616c-.21089-.015-.19451-.19706-.23239-.32989-.038-.13321-.02818-.30061-.15735-.37454a1.34022,1.34022,0,0,1-.56157-.91171,5.31673,5.31673,0,0,0-.38389-.90751.17716.17716,0,0,1,.0878-.1922.64011.64011,0,0,0,.336-.58254c.148-.22089.26558-.044.36039.04521a5.39524,5.39524,0,0,1,.77565.82835,11.70052,11.70052,0,0,1,1.48613,2.0496c.095.16483.216.33262.06122.529C92.52771,39.28513,92.266,39.34369,92.09321,39.50593Z"/><path class="cls-293" d="M92.63265,39.04371a.84994.84994,0,0,0-.14876-.5016,14.43747,14.43747,0,0,0-1.46918-2.03992,1.17093,1.17093,0,0,1,.38556-.462,4.68237,4.68237,0,0,1,1.46367,1.5401,2.92611,2.92611,0,0,1,.46221.84749c.15407.35942-.06928.71878-.00018,1.07818C93.06789,39.39229,92.98138,39.02141,92.63265,39.04371Z"/><path class="cls-294" d="M81.53954,32.343a.37329.37329,0,0,0-.14949.25793c-.12671.85569-.69718,1.548-.877,2.38426-.01084.05042-.08458.08732-.12906.1305l-.15388-.07711a10.15539,10.15539,0,0,1,.44054-2.08775,12.6096,12.6096,0,0,1,.6331-2.04111,6.06861,6.06861,0,0,1,1.526-2.524,1.098,1.098,0,0,1,.68784-.28033,5.74941,5.74941,0,0,1,2.09091.5234,14.92549,14.92549,0,0,1,2.18035,1.11485,6.07489,6.07489,0,0,1,1.51252,1.40486,18.23646,18.23646,0,0,1,1.63525,1.92028.90861.90861,0,0,1,.23248.66061c-.53735-.52184-1.07268-1.0458-1.61423-1.56325a.48423.48423,0,0,0-.31177-.13107.18551.18551,0,0,1-.101-.05164c-1.1898-1.44969-2.90957-2.05121-4.53237-2.79013a1.72639,1.72639,0,0,0-2.2123,1.00987,11.80449,11.80449,0,0,1-.50991,1.20061,1.61671,1.61671,0,0,0-.17441.58535C81.69945,32.12633,81.70635,32.27874,81.53954,32.343Z"/><path class="cls-295" d="M79.61328,32.57438a4.65459,4.65459,0,0,1,.46259-1.46364,4.747,4.747,0,0,1,.48815-1.47426,11.82112,11.82112,0,0,1,1.63709-2.25659,1.6612,1.6612,0,0,1,1.63323-.55055A13.26141,13.26141,0,0,1,86.525,27.83126a8.08238,8.08238,0,0,1,3.11459,2.18434c.43615.48522.93971.90731,1.36258,1.40673a7.75852,7.75852,0,0,1,1.0026,1.46844c.07054.13724.20158.27527.08839.45352Q90.99,32.222,89.88623,31.10013a9.46881,9.46881,0,0,0-3.52576-2.38706,10.448,10.448,0,0,1-1.43259-.72547,2.81374,2.81374,0,0,0-1.79314-.34752,1.05158,1.05158,0,0,0-.73266.43317A11.36656,11.36656,0,0,0,80.939,30.39339a4.01851,4.01851,0,0,0-.17081.50691,22.12465,22.12465,0,0,1-1.46264,3.36823,2.10173,2.10173,0,0,1,.22129-.75239A1.05685,1.05685,0,0,0,79.61328,32.57438Z"/><path class="cls-296" d="M92.09321,33.34429a6.2045,6.2045,0,0,0-1.15534-1.84855.31655.31655,0,0,1,.13286-.41036c.1991-.07134.30791.074.42605.18466a7.56645,7.56645,0,0,1,1.30536,1.54549c.22061.35891.4982.67944.701,1.05024a7.621,7.621,0,0,1,.386.79243c.079.21872.21965.44572.05309.68859a6.61418,6.61418,0,0,0-1.464-1.463Z"/><path class="cls-297" d="M81.53954,32.343a8.08981,8.08981,0,0,1,.77952-2.18,2.08177,2.08177,0,0,1,1.50745-1.24222,1.72028,1.72028,0,0,1,1.12513.28885,19.70692,19.70692,0,0,1,3.3603,1.82485,3.18164,3.18164,0,0,1,.93122,1.00052,1.70129,1.70129,0,0,0-.00007,1.00116c-.235-.00447-.39259-.18435-.59585-.262a2.43549,2.43549,0,0,0-.86892-.79836c-.88021-.57681-1.83727-1.01524-2.76456-1.507a2.0667,2.0667,0,0,0-1.08125-.22483,1.19844,1.19844,0,0,0-.93279.70817A8.68858,8.68858,0,0,0,82.04227,33.89c-.17509.26323-.13926.63364-.42569.8405-.19434-.20265-.10186-.46821-.15409-.702A4.61423,4.61423,0,0,1,81.53954,32.343Z"/><path class="cls-298" d="M88.70384,32.80506c.26592-.12389.35793.15775.53925.23116.34936.3878.69646.77768,1.049,1.16258a13.23818,13.23818,0,0,1,1.10818,1.84135c-.03684.23049-.22128.33785-.38556.462-.322-.32084-.56109-.73157-1.00141-.92433-.14273.01711-.13594-.10154-.169-.1844A1.28075,1.28075,0,0,0,89.543,34.822c-.36078-.51219-.77651-.98038-1.17321-1.46409A1.41819,1.41819,0,0,1,88.70384,32.80506Z"/><path class="cls-277" d="M93.94225,35.34679a3.54723,3.54723,0,0,0-.539-1.46329.27461.27461,0,0,1,.21774-.0823c.1642.001.24026.12209.32127.23645.50762.84407.69531,1.82866,1.1821,2.68342.16978.29812.29193.62335.43583.9362.24222.63872.47922,1.2795.73041,1.91467a.97557.97557,0,0,1,.11679.47321c-.457-.66884-.75372-1.43257-1.23586-2.08647-.0746-.10118-.15183-.20043-.22784-.30057-.24487-.61814-.48474-1.23834-.738-1.853A3.88446,3.88446,0,0,0,93.94225,35.34679Z"/><path class="cls-299" d="M89.55123,36.348a2.27705,2.27705,0,0,1,.52538,1.11651c.08922.2471.15219.4781.42015.59364a.36117.36117,0,0,1,.21285.37363.6644.6644,0,0,0,.151.4581c-.62161.3614-1.08023.997-1.84632,1.11367-.96839.14755-1.93736.2927-2.90878.41788a1.382,1.382,0,0,1-.5639-.08586,9.25625,9.25625,0,0,0-1.83519-.35723c-.322-.03295-.5491-.27544-.85712-.31861.00181-.33587-.25133-.65209-.07722-1.00125a.23607.23607,0,0,1-.03263-.21654,12.48112,12.48112,0,0,0,.29392-1.60278c.02046-.13361.02036-.2835.16453-.36441.69282.01569,1.361.21927,2.05024.27025.34367.02542.68747.06125,1.03052.10226a1.73106,1.73106,0,0,0,1.22174-.37783,1.86915,1.86915,0,0,1,1.49639-.40092A.75989.75989,0,0,1,89.55123,36.348Z"/><path class="cls-300" d="M83.23413,36.50208a14.88446,14.88446,0,0,0-.29385,1.619,2.96607,2.96607,0,0,0-.16817.53747c-.14167-.12792-.29191-.24767-.42331-.38538-.32522-.34085-.64257-.158-.96333.00029L81.54,34.96256c.08954-.05622.0744-.147.07656-.232.1583-.26883.12435-.625.38524-.84725.25561-.06757.422.14379.6664.21209.018-.16237.05384-.32419.0552-.48028a5.89861,5.89861,0,0,1,.87785-2.34743.40246.40246,0,0,1,.442-.24094,3.01711,3.01711,0,0,1,1.188.27933c.922.52892,1.867,1.0185,2.75811,1.60017.16911.11038.35414.21523.40634.43816a6.7559,6.7559,0,0,1,1.54052,2.0025,1.642,1.642,0,0,1-.87384-.57435,17.54537,17.54537,0,0,0-2.86125-1.98234c-.31814-.21219-.65848-.396-.99411-.58359a.66374.66374,0,0,0-.61328-.00033c-1.00077.36922-1.06769,1.22767-1.191,2.09332-.09586.673-.04028,1.34909-.11905,2.01954A.38367.38367,0,0,1,83.23413,36.50208Z"/><path class="cls-301" d="M93.94225,34.03765c-.10665-.04364-.174-.16536-.308-.15479-.30216-.51843-.638-1.02047-.91859-1.547a7.22577,7.22577,0,0,0-1.3833-1.87737c-.87326-.8287-1.75522-1.65032-2.68147-2.42036A9.20463,9.20463,0,0,0,86.377,26.7631a15.85339,15.85339,0,0,0-2.36362-1.0138c-.09805-.02493-.19639-.07409-.19407-.20576.25557-.28036.56438-.14907.85162-.0929a4.51232,4.51232,0,0,1,.60625.23231,8.54289,8.54289,0,0,1-.83271-.36913c-.1221-.06786-.25308-.12971-.28576-.28762.20032-.30222.45639-.10368.69332-.07716.73281.225,1.43209.54076,2.152.79855a9.44807,9.44807,0,0,1,3.15895,2.252,14.07379,14.07379,0,0,1,1.71545,1.81118,9.628,9.628,0,0,1,1.3445,2.08238,5.51644,5.51644,0,0,0,.33392.60359,1.23121,1.23121,0,0,0,.05557.33536A4.37234,4.37234,0,0,1,93.94225,34.03765Z"/><path class="cls-302" d="M92.9406,30.10958a.47869.47869,0,0,1,.23129-.38541c.23868.06571.28231.30762.41451.468.088.10672.14172.24148.27881.3025.23146.1353.26514.39431.37285.60505.30771.602.47584,1.2606.74784,1.87772a.40762.40762,0,0,1,.03485.36675,5.64419,5.64419,0,0,0,.30814,1.46355,3.37165,3.37165,0,0,1-.60666-1.164c-.1514-.31987-.28524-.648-.43067-.97078-.02228-.04944-.06757-.07533-.11821-.0219Z"/><path class="cls-303" d="M95.02075,33.3442c-.37346-.9546-.71444-1.92235-1.15554-2.84952a1.71875,1.71875,0,0,0-.38143-1.0229,9.99693,9.99693,0,0,1-.70835-1.302,5.57814,5.57814,0,0,0-.9635-1.313,1.65511,1.65511,0,0,1-.18074-.29033c.4268.13283.58611.5472.86233.83518.29841.31111.55126.66572.82608.99964a3.68756,3.68756,0,0,1,.693,1.13412.7553.7553,0,0,0,.31459.42011c.32624,1.16984.65423,2.33921.9758,3.51033a1.74364,1.74364,0,0,1,.02585.34041C95.12052,33.72269,95.1571,33.47581,95.02075,33.3442Z"/><path class="cls-304" d="M83.85061,25.56526c1.16963.41118,2.26753.984,3.39089,1.49987a10.6697,10.6697,0,0,1,2.4004,1.69337c.5472.46472,1.0366.98705,1.57523,1.46a6.0493,6.0493,0,0,1,1.5766,2.0875,4.07494,4.07494,0,0,0,.41612.63893,2.65575,2.65575,0,0,1,.42445.93791l-.23106.00063a12.29769,12.29769,0,0,0-2.05206-2.63056c-.0771-.06772-.14523-.14456-.25905-.1422a16.69429,16.69429,0,0,0-3.06657-3.15593,5.63716,5.63716,0,0,0-1.72744-.82337,7.99974,7.99974,0,0,1-1.034-.41161,4.25133,4.25133,0,0,0-1.65342-.46777,1.7396,1.7396,0,0,0-1.27241.53673c-.42631.39-.78712.84093-1.18252,1.25936a2.73376,2.73376,0,0,0-.64953.80224l-.04523.02679a4.21843,4.21843,0,0,0-.802,1.54763,18.33611,18.33611,0,0,1-1.60189,3.09559.84709.84709,0,0,1-.60036.44014l-.00037-.07693a.47723.47723,0,0,1,.07307-.3644,1.6355,1.6355,0,0,0,.31249-.94508,1.73761,1.73761,0,0,1,.11177-.36241,38.13723,38.13723,0,0,1,2.08915-4.058,10.55437,10.55437,0,0,1,1.76345-1.91154,2.94456,2.94456,0,0,1,1.37118-.87409C83.44107,25.31749,83.68915,25.284,83.85061,25.56526Z"/><path class="cls-305" d="M81.07733,28.03a9.26763,9.26763,0,0,1,1.30243-1.406,1.9932,1.9932,0,0,1,1.99545-.34067c.4438.13573.85184.34568,1.28041.51054.61973.23841,1.2432.46373,1.84733.74413a4.54722,4.54722,0,0,1,1.32321.9672c.6921.70279,1.4357,1.356,2.05908,2.1259a.699.699,0,0,1,.20689.47967l-.15426.385c-1.18126-1.161-2.17133-2.55431-3.74551-3.24708a15.94074,15.94074,0,0,0-3.41342-1.33778,1.76132,1.76132,0,0,0-1.5963.62507c-.22469.39828-.59574.6658-.8411,1.03933a6.72152,6.72152,0,0,0-1.09838,2.11885,1.20927,1.20927,0,0,1-.16729.41661c-.12483-.11872-.07034-.25232-.03846-.38875.14357-.61439.28282-1.22978.42364-1.84481A8.58716,8.58716,0,0,1,81.07733,28.03Z"/><path class="cls-306" d="M83.85061,25.56526a1.49417,1.49417,0,0,0-1.5087.3067,20.24352,20.24352,0,0,0-2.01469,2.04585,6.00647,6.00647,0,0,0-.79845,1.29986c-.50588.99174-.98,1.99965-1.47059,2.99923-.06109.12445-.14358.23841-.21614.35723-.38983-.1259-.41808-.433-.38612-.77022a6.64912,6.64912,0,0,1,.89293-1.89733,13.095,13.095,0,0,1,1.27551-2.08516,9.92942,9.92942,0,0,1,1.97681-2.02117,4.2134,4.2134,0,0,0,.48347-.43534,1.56021,1.56021,0,0,1,2.07411-.33871L85.391,25.705a1.494,1.494,0,0,1-.6609-.14337A1.201,1.201,0,0,0,83.85061,25.56526Z"/><path class="cls-307" d="M83.23413,36.50208a.51187.51187,0,0,1-.06357-.17836,20.28912,20.28912,0,0,1,.29038-2.9961,1.32493,1.32493,0,0,1,.70381-.98809,3.97033,3.97033,0,0,0,.46429-.268.43847.43847,0,0,1,.53222.00058c.83715.51175,1.66614,1.0454,2.5104,1.53413.84587.48965,1.462,1.22657,2.26456,1.74064.00293.08458-.01341.17559.07708.231.11932.42065-.19881.579-.46207.77018-.33192-.25006-.74518-.09233-1.10377-.2191-.141-.04983-.25679.03426-.38217.11572a2.79811,2.79811,0,0,1-1.45873.7006A13.56359,13.56359,0,0,1,83.23413,36.50208Z"/><path class="cls-308" d="M88.3957,33.34439a25.267,25.267,0,0,0-3.33725-2.01065,3.32323,3.32323,0,0,0-1.0774-.21974.21212.21212,0,0,0-.26.11874c-.171.60552-.69374,1.05162-.78132,1.68554a7.42694,7.42694,0,0,0-.17355,1.35626l-.76439-.39125a5.85552,5.85552,0,0,1,.60666-2.33715,2.41861,2.41861,0,0,0,.21674-.40467A1.30362,1.30362,0,0,1,84.683,30.256a17.316,17.316,0,0,1,2.36618,1.17411,6.92509,6.92509,0,0,1,1.22556.7802c.18488.16375.44089.28551.4291.59473A.83488.83488,0,0,1,88.3957,33.34439Z"/><path class="cls-278" d="M81.07733,28.03a2.13447,2.13447,0,0,1-.61628.84721A1.37911,1.37911,0,0,1,81.07733,28.03Z"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#400198;}.cls-3{fill:#ed1cb0;}.cls-4{fill:#e422b2;}.cls-5{fill:#e91fb1;}.cls-6{fill:#df26b3;}.cls-7{fill:#1eb6cf;}.cls-8{fill:#1db4d6;}.cls-9{fill:#ca35b8;}.cls-10{fill:#d42eb6;}.cls-11{fill:#cf32b7;}.cls-12{fill:#26b0ce;}.cls-13{fill:#d72cb5;}.cls-14{fill:#c538b8;}.cls-15{fill:#bb40bb;}.cls-16{fill:#da29b4;}.cls-17{fill:#c13cb9;}.cls-18{fill:#b544bc;}.cls-19{fill:#2aaad5;}.cls-20{fill:#af49be;}.cls-21{fill:#8964c5;}.cls-22{fill:#a94dbe;}.cls-23{fill:#826ac7;}.cls-24{fill:#a54fbf;}.cls-25{fill:#e026b1;}.cls-26{fill:#905fc3;}.cls-27{fill:#7b6fc8;}.cls-28{fill:#965ac2;}.cls-29{fill:#2aadcd;}.cls-30{fill:#9b58c2;}.cls-31{fill:#d034af;}.cls-32{fill:#d331b0;}.cls-33{fill:#d72db0;}.cls-34{fill:#db2ab0;}.cls-35{fill:#7077cb;}.cls-36{fill:#7573c9;}.cls-37{fill:#24b0d1;}.cls-38{fill:#35a2d4;}.cls-39{fill:#af49bb;}.cls-40{fill:#4a92d2;}.cls-41{fill:#4f8fce;}.cls-42{fill:#6b7bcb;}.cls-43{fill:#cb36b4;}.cls-44{fill:#5d85ce;}.cls-45{fill:#6380cd;}.cls-46{fill:#b743bb;}.cls-47{fill:#2eaacd;}.cls-48{fill:#38a3c9;}.cls-49{fill:#c43ab5;}.cls-50{fill:#667fc9;}.cls-51{fill:#4595d2;}.cls-52{fill:#a84ebc;}.cls-53{fill:#528cd0;}.cls-54{fill:#5887cf;}.cls-55{fill:#2ea7d5;}.cls-56{fill:#3a9ed3;}.cls-57{fill:#bb41ba;}.cls-58{fill:#9a58c2;}.cls-59{fill:#7475c3;}.cls-60{fill:#8f60c4;}.cls-61{fill:#32a7cb;}.cls-62{fill:#687fc3;}.cls-63{fill:#4099d4;}.cls-64{fill:#a450bf;}.cls-65{fill:#4698c9;}.cls-66{fill:#588bc5;}.cls-67{fill:#fcfcfc;}.cls-68{fill:#409dc8;}.cls-69{fill:#9f54c1;}.cls-70{fill:#955cc3;}.cls-71{fill:#5091c6;}.cls-72{fill:#d031b4;}.cls-73{fill:#8866c6;}.cls-74{fill:#c03cba;}.cls-75{fill:#6185c5;}.cls-76{fill:#7b6ec9;}.cls-77{fill:#6f79c6;}.cls-78{fill:#fefefe;}.cls-79{fill:#24b3cc;}.cls-80{fill:#da2ab2;}.cls-81{fill:#20b5ca;}.cls-82{fill:#25b1cb;}.cls-83{fill:#cc34b4;}.cls-84{fill:#d131b3;}.cls-85{fill:#29aecc;}.cls-86{fill:#26b2c7;}.cls-87{fill:#cb37af;}.cls-88{fill:#c53bb4;}.cls-89{fill:#bb42b6;}.cls-90{fill:#bf3eb5;}.cls-91{fill:#b546b6;}.cls-92{fill:#b04ab8;}.cls-93{fill:#2ea9d1;}.cls-94{fill:#aa4db9;}.cls-95{fill:#8d64bc;}.cls-96{fill:#8966be;}.cls-97{fill:#8568c2;}.cls-98{fill:#7e6dc4;}.cls-99{fill:#a155ba;}.cls-100{fill:#945ebb;}.cls-101{fill:#7673c4;}.cls-102{fill:#9a5aba;}.cls-103{fill:#2eaec3;}.cls-104{fill:#28b2c4;}.cls-105{fill:#7078c5;}.cls-106{fill:#6a7cc7;}.cls-107{fill:#32a6d1;}.cls-108{fill:#37a1d0;}.cls-109{fill:#b249b4;}.cls-110{fill:#ab4db9;}.cls-111{fill:#4d92ca;}.cls-112{fill:#4498ce;}.cls-113{fill:#4796ca;}.cls-114{fill:#528fc9;}.cls-115{fill:#5b87c9;}.cls-116{fill:#6182c9;}.cls-117{fill:#b944b3;}.cls-118{fill:#33a8c6;}.cls-119{fill:#38a6c2;}.cls-120{fill:#3da1c4;}.cls-121{fill:#c33daf;}.cls-122{fill:#bf3fb5;}.cls-123{fill:#6383c4;}.cls-124{fill:#409bd0;}.cls-125{fill:#a254bb;}.cls-126{fill:#a652b6;}.cls-127{fill:#568acc;}.cls-128{fill:#3ba0cd;}.cls-129{fill:#9a5abb;}.cls-130{fill:#9e57b9;}.cls-131{fill:#7e6fc0;}.cls-132{fill:#6d7ebd;}.cls-133{fill:#7a74ba;}.cls-134{fill:#747aba;}.cls-135{fill:#9160bc;}.cls-136{fill:#8b65bf;}.cls-137{fill:#6684bb;}.cls-138{fill:#4a97c1;}.cls-139{fill:#449cc1;}.cls-140{fill:#6088bb;}.cls-141{fill:#5491bf;}.cls-142{fill:#5b8bbf;}.cls-143{fill:#8469c1;}.cls-144{fill:#21b7c5;}.cls-145{fill:#24b5c5;}.cls-146{fill:#2dadc5;}.cls-147{fill:#25b6c1;}.cls-148{fill:#2faebe;}.cls-149{fill:#c63bb0;}.cls-150{fill:#c13fb0;}.cls-151{fill:#bd41b3;}.cls-152{fill:#b945b3;}.cls-153{fill:#b549ae;}.cls-154{fill:#ad4eb3;}.cls-155{fill:#a651b7;}.cls-156{fill:#8f64b6;}.cls-157{fill:#816ebe;}.cls-158{fill:#8869ba;}.cls-159{fill:#7973bf;}.cls-160{fill:#a357b0;}.cls-161{fill:#9e5ab3;}.cls-162{fill:#965fb5;}.cls-163{fill:#32aeb8;}.cls-164{fill:#2bb2ba;}.cls-165{fill:#33abbe;}.cls-166{fill:#27b5be;}.cls-167{fill:#6e7bc1;}.cls-168{fill:#7477bd;}.cls-169{fill:#6a7ec0;}.cls-170{fill:#37a4c8;}.cls-171{fill:#31a9c9;}.cls-172{fill:#b14dad;}.cls-173{fill:#ac4eb3;}.cls-174{fill:#4e94c3;}.cls-175{fill:#4b95c6;}.cls-176{fill:#429bca;}.cls-177{fill:#4599c6;}.cls-178{fill:#548fc3;}.cls-179{fill:#578bc6;}.cls-180{fill:#5b8ac2;}.cls-181{fill:#bd43ae;}.cls-182{fill:#bf40b0;}.cls-183{fill:#3aa7bb;}.cls-184{fill:#40a1bd;}.cls-185{fill:#6385c0;}.cls-186{fill:#a257b2;}.cls-187{fill:#a853af;}.cls-188{fill:#3e9fc7;}.cls-189{fill:#945fb9;}.cls-190{fill:#9c5bb4;}.cls-191{fill:#846cb8;}.cls-192{fill:#806fb9;}.cls-193{fill:#6b83b3;}.cls-194{fill:#6f7eb7;}.cls-195{fill:#7b76b3;}.cls-196{fill:#7778b6;}.cls-197{fill:#737db1;}.cls-198{fill:#8a68b8;}.cls-199{fill:#8e65b5;}.cls-200{fill:#6487b5;}.cls-201{fill:#469dbb;}.cls-202{fill:#4d97bb;}.cls-203{fill:#5b8db7;}.cls-204{fill:#5492b9;}.cls-205{fill:#21bac0;}.cls-206{fill:#34a9c5;}.cls-207{fill:#20bbba;}.cls-208{fill:#25b8b9;}.cls-209{fill:#2bb2bb;}.cls-210{fill:#39abb2;}.cls-211{fill:#30b0b5;}.cls-212{fill:#39a7bb;}.cls-213{fill:#a754af;}.cls-214{fill:#9265af;}.cls-215{fill:#8a69b4;}.cls-216{fill:#7e73b8;}.cls-217{fill:#856cb7;}.cls-218{fill:#7778b8;}.cls-219{fill:#9e5cac;}.cls-220{fill:#a458ab;}.cls-221{fill:#9b5eb0;}.cls-222{fill:#39a9b3;}.cls-223{fill:#2eb3b2;}.cls-224{fill:#34b0ad;}.cls-225{fill:#27b8b6;}.cls-226{fill:#707db9;}.cls-227{fill:#6b82b8;}.cls-228{fill:#aa53ab;}.cls-229{fill:#4a99bd;}.cls-230{fill:#5194b9;}.cls-231{fill:#439ebf;}.cls-232{fill:#598eba;}.cls-233{fill:#6189ba;}.cls-234{fill:#43a1b8;}.cls-235{fill:#41a4b2;}.cls-236{fill:#995fb1;}.cls-237{fill:#8071b5;}.cls-238{fill:#896ab2;}.cls-239{fill:#6d82b0;}.cls-240{fill:#6687af;}.cls-241{fill:#6c85a7;}.cls-242{fill:#7979ad;}.cls-243{fill:#7280a8;}.cls-244{fill:#8e69ab;}.cls-245{fill:#9364ae;}.cls-246{fill:#618dad;}.cls-247{fill:#5e8db1;}.cls-248{fill:#4a9bb6;}.cls-249{fill:#4f99b4;}.cls-250{fill:#5895ab;}.cls-251{fill:#5495b1;}.cls-252{fill:#21bcb5;}.cls-253{fill:#26bab2;}.cls-254{fill:#2cb5b2;}.cls-255{fill:#3daca6;}.cls-256{fill:#32b3a9;}.cls-257{fill:#40a3b8;}.cls-258{fill:#32b1af;}.cls-259{fill:#40a7ae;}.cls-260{fill:#9a60aa;}.cls-261{fill:#9465a9;}.cls-262{fill:#866eaf;}.cls-263{fill:#7e74b2;}.cls-264{fill:#767bb2;}.cls-265{fill:#3fa8ac;}.cls-266{fill:#39adab;}.cls-267{fill:#28b9ad;}.cls-268{fill:#30b4aa;}.cls-269{fill:#35b2a6;}.cls-270{fill:#22beb0;}.cls-271{fill:#6d82b1;}.cls-272{fill:#6588b4;}.cls-273{fill:#4a9cb6;}.cls-274{fill:#5099b0;}.cls-275{fill:#5793b2;}.cls-276{fill:#5f8db1;}.cls-277{fill:#47a0b0;}.cls-278{fill:#45a5a8;}.cls-279{fill:#8373a9;}.cls-280{fill:#856fae;}.cls-281{fill:#6789a6;}.cls-282{fill:#6887ac;}.cls-283{fill:#7e77a9;}.cls-284{fill:#777ca8;}.cls-285{fill:#886fa9;}.cls-286{fill:#5d91ab;}.cls-287{fill:#618fa5;}.cls-288{fill:#4f9bad;}.cls-289{fill:#5598a5;}.cls-290{fill:#5299a8;}.cls-291{fill:#5b93a5;}.cls-292{fill:#26bcab;}.cls-293{fill:#2cb7ac;}.cls-294{fill:#39afa2;}.cls-295{fill:#41a9a3;}.cls-296{fill:#44a4a9;}.cls-297{fill:#33b4a1;}.cls-298{fill:#2db8a6;}.cls-299{fill:#23bfa9;}.cls-300{fill:#2abaa6;}.cls-301{fill:#509da5;}.cls-302{fill:#5b92ab;}.cls-303{fill:#638caa;}.cls-304{fill:#49a1a6;}.cls-305{fill:#45a5a3;}.cls-306{fill:#4e9da7;}.cls-307{fill:#24c0a3;}.cls-308{fill:#2eb9a1;}</style></defs><title>babylon_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g id="lZQzip.tif"><path class="cls-2" d="M105.41242,102.38161l-.00032,1.63174c-.0627.13341.00024.28369-.05621.41793a11.38311,11.38311,0,0,1-2.01033,5.06153,11.067,11.067,0,0,1-3.3906,3.02011,10.84647,10.84647,0,0,1-4.08857,1.32846c-.1868.06553-.38843-.017-.57433.05755l-1.089-.00025c-.20941-.07879-.43384.01163-.64415-.05713a10.19579,10.19579,0,0,1-3.70134-1.065c-.48065-.24244-.92492-.557-1.38588-.83845-.06063-.037-.09079-.14074-.18466-.10308-.11421.04582-.06434.15491-.06525.2351-.00276.24289.00733.48591.01241.72888-.04373.09358-.13.06517-.20175.06525q-2.00022.00226-4.00042.00105a.2189.2189,0,0,1-.17784-.05013q.00179-12.68058.00359-25.36114c.00007-.49836.00007-.49838.51672-.49839,1.14195,0,2.28413.01292,3.42569-.00811.33035-.00608.43083.06512.428.416-.01821,2.2576-.00931,4.51543-.00931,6.77318v.49616a11.05883,11.05883,0,0,1,5.10888-2.07265c.13193-.05882.28125.00852.4123-.0568l.5892-.02108a2.452,2.452,0,0,1,.76686.00027l.58451.02113c.13295.06326.28351-.00195.417.05717a11.59144,11.59144,0,0,1,3.62542,1.17991,10.5452,10.5452,0,0,1,5.46726,7.37007c.05888.28588.11169.573.16732.85955C105.4121,102.10265,105.3474,102.25077,105.41242,102.38161Z"/><path class="cls-2" d="M34.63653,86.95277l4.29235-.00054c.09161.12769.04478.27327.045.40941.00339,2.27909.00048,4.5582.00786,6.83726.00039.12039-.097.284.08547.36982A10.467,10.467,0,0,1,43.578,92.65287c.17488-.0308.34953-.0629.52429-.09438.12944-.05756.27686.01345.40456-.05657l.59672-.02a2.09239,2.09239,0,0,1,.68969-.00017l.59843.01974c.12693.0712.27387-.00048.4028.05643a11.00511,11.00511,0,0,1,4.67914,1.79236,10.4814,10.4814,0,0,1,4.49119,6.91367c.05776.31192.11043.6248.16546.93723.06769.21176-.0209.43721.05681.64808a2.5436,2.5436,0,0,0,.00035.69962c-.07312.18609.00488.38662-.0549.574a10.76306,10.76306,0,0,1-2.32311,5.73583,10.60091,10.60091,0,0,1-6.22918,3.81747,13.59407,13.59407,0,0,1-2.67368.22263c-.18573-.07349-.38628.00608-.57316-.05551a10.43588,10.43588,0,0,1-5.25691-2.01274c-.22287.18028-.09238.42551-.08856.63086.00576.31021-.07424.41724-.40251.41178-1.18-.01964-2.36055-.00755-3.54089-.00779-.45637-.00009-.45687-.00053-.45688-.45163q-.00017-11.04411-.00007-22.08823c0-1.0005-.00178-2.001.00227-3.00152C34.59038,87.2003,34.54594,87.06672,34.63653,86.95277Z"/><path class="cls-2" d="M70.59875,92.56a11.608,11.608,0,0,1,3.789,1.26288c.427.24032.83354.51681,1.28941.80181a3.2784,3.2784,0,0,0,.01372-1.00883c.02837-.10709.118-.07834.18769-.07842q2.02682-.00267,4.05362-.00136a.21665.21665,0,0,1,.14177.04475l-.00015,19.23937c-1.44837.09646-2.898.03169-4.347.03046-.0119,0-.02376-.04231-.03565-.06486.03551-.3164.15843-.77168-.03968-.91009-.21749-.15194-.50493.23574-.75607.39269a10.241,10.241,0,0,1-3.92419,1.482c-.176.02672-.35093.05994-.52637.09015-.18449.06812-.38468-.01774-.5684.05795l-1.17047,0c-.21022-.07641-.43394.0082-.64534-.05409a9.69788,9.69788,0,0,1-3.54018-.98888,10.61343,10.61343,0,0,1-3.67078-2.958,11.10393,11.10393,0,0,1-2.09314-4.33279c-.093-.37677-.13-.75531-.18841-1.13379-.05411-.13074.01294-.2778-.05476-.40671l.00085-1.71014c.06237-.13445-.00032-.28595.05741-.421a9.69545,9.69545,0,0,1,1.34064-4.07919,10.37686,10.37686,0,0,1,5.04614-4.46406,13.59363,13.59363,0,0,1,2.94821-.79295c.13132-.05309.27845.01255.40795-.05428l.59309-.02042a2.07215,2.07215,0,0,1,.68971,0l.58835.02142C70.31706,92.5682,70.46642,92.50184,70.59875,92.56Z"/><path class="cls-2" d="M136.22286,101.739a10.55646,10.55646,0,0,1,2.44338-5.48159,10.26677,10.26677,0,0,1,6.4419-3.61265c.12549-.01986.2484-.05608.37252-.08468.13471-.057.28572.00589.41964-.057l.659-.02133a1.60255,1.60255,0,0,1,.61285.001l.58664.02047c.13217.06357.28091.00119.41442.05453a11.17161,11.17161,0,0,1,4.92871,1.94918c.12262-.01494.18515.05812.23.157a11.48323,11.48323,0,0,1,2.37081,2.52474,10.21138,10.21138,0,0,1,1.71935,4.44978c.01946.13779.05893.27275.08909.409.05146.13548-.00713.28517.05419.41937l.00014,1.46681c-.06137.13448-.00271.28456-.05466.42026a11.2611,11.2611,0,0,1-1.86152,4.91853,11.06171,11.06171,0,0,1-4.001,3.49915,10.90974,10.90974,0,0,1-3.62934,1.0724c-.21173.06282-.43585-.02183-.64644.05434l-1.01887.00044c-.23463-.08194-.48355.01422-.719-.05762a10.64855,10.64855,0,0,1-9.41034-9.17862c-.06328-.12961.01014-.279-.05913-.40779l-.02026-.43963a6.29627,6.29627,0,0,1-.00059-1.2288l.01948-.44508C136.23691,102.015,136.161,101.8669,136.22286,101.739Z"/><path class="cls-3" d="M108.10551,24.18116A19.04342,19.04342,0,0,1,109.618,19.0384a20.56281,20.56281,0,0,1,3.31319-5.17462c.058-.0676.128-.12492.19239-.187a.58705.58705,0,0,1,.30652-.35745,18.23673,18.23673,0,0,1,1.928-1.783.609.609,0,0,1,.28754-.21982l.63689-.47672c.06835-.11283.201-.138.29477-.21626a19.95434,19.95434,0,0,1,5.77059-2.78765.43228.43228,0,0,0,.09747-.06037c.09611-.08387.20175-.03963.30525-.02284a5.07713,5.07713,0,0,1,.36456,1.6745c.151,1.37575.37846,2.73751.65136,4.09323.06239.30994.12178.61909.19791.96579.2284-.13609.22764-.356.33537-.50349.09127-.125.17341-.26722.36041-.23759.18012.02855.24682.16669.28139.32576a8.05405,8.05405,0,0,1,.20257,3.34968,2.66144,2.66144,0,0,0-.01076.91779,6.59283,6.59283,0,0,1-.13906,1.71245,21.01406,21.01406,0,0,1-.59418,3.3667c-.15548.54323-.2648.61154-.82409.68574a21.8299,21.8299,0,0,0-3.85755.58227,23.657,23.657,0,0,1-2.935.77053c-1.03225.19041-2.07612.31678-3.11833.41641-1.19354.11409-2.38765.20907-3.57118.40622a3.20552,3.20552,0,0,0-1.11469.40294c-.39873.23506-.60487.14073-.71986-.31493-.11921-.47236-.16719-.96034-.30723-1.42885A1.117,1.117,0,0,1,108.10551,24.18116Z"/><path class="cls-2" d="M170.976,92.48275l.58774.02046c.13173.064.28022.001.41332.05454a11.1725,11.1725,0,0,1,4.92872,1.94918c.12263-.01494.18515.05812.23.157a11.48038,11.48038,0,0,1,2.3709,2.52482,10.21276,10.21276,0,0,1,1.71959,4.44975,1.54145,1.54145,0,0,0,.08058.25287.22939.22939,0,0,1,.05237.16618.73794.73794,0,0,0,.00993.40828q.002,5.17333.00394,10.34666c-.11124.09873-.2459.05-.36866.05044-1.116.00426-2.23216-.009-3.34783.00986-.31466.00533-.408-.0757-.40676-.3992.01219-3.15484.00781-6.30975.00589-9.46463a1.19973,1.19973,0,0,0-.03-.45689,6.52161,6.52161,0,0,0-3.58673-5.22192,6.08072,6.08072,0,0,0-2.17483-.68356c-.15521-.07359-.32837.006-.48484-.0568l-.61966-.00051c-.155.06482-.32791-.01827-.48157.058a4.26881,4.26881,0,0,0-1.75677.42321,6.52565,6.52565,0,0,0-3.73969,3.95482,1.25874,1.25874,0,0,0-.03719.22353,1.01223,1.01223,0,0,0-.03018.41834q-.00264,5.38994-.00155,10.77989c0,.41716-.00091.418-.4118.41816-1.20657.00043-2.41328-.00941-3.61963.00708-.29077.004-.36373-.079-.36335-.36573q.01226-9.29764-.00054-18.59531c-.00044-.30609.08376-.38661.38565-.38242q1.82877.02544,3.658-.0003c.2999-.00433.38945.09348.35491.37275a2.0816,2.0816,0,0,0,.00108.42292c.00653.07974.03607.155.14608.11113a12.10607,12.10607,0,0,1,1.51035-.93027.21345.21345,0,0,1,.22648-.09535c.08646-.08622.24858.00183.31277-.13571a.20878.20878,0,0,1,.22666-.09361l1.54193-.45154a.20231.20231,0,0,1,.2437-.04837l.75951-.121c.13151-.05807.28029.0096.4107-.05644l.59077-.02112A2.04541,2.04541,0,0,1,170.976,92.48275Z"/><path class="cls-2" d="M110.80912,119.22141q1.101-2.6006,2.202-5.20118c.20717-.48933.41254-.97944.62317-1.46727a.44549.44549,0,0,0-.01-.40023c-.5558-1.17222-1.0978-2.351-1.65525-3.52245-.54807-1.15167-1.1181-2.293-1.66239-3.4464-.53858-1.14134-1.04855-2.29617-1.58682-3.43768-.5224-1.10784-1.10178-2.19026-1.58832-3.31322-.51253-1.183-1.112-2.3238-1.6277-3.50481-.2036-.46627-.45856-.91047-.63115-1.40686,1.52426,0,3.02608.00276,4.52787-.00345a.3571.3571,0,0,1,.38162.23425q2.01563,4.32179,4.04609,8.63667c.67916,1.44332,1.37116,2.88058,2.05344,4.32246a.34623.34623,0,0,0,.135.181c.398-.93367.79593-1.86114,1.18884-2.79074.46761-1.10636.9283-2.21566,1.39686-3.32163.38072-.89869.77272-1.79262,1.1523-2.69179.46721-1.10675.92695-2.21666,1.38944-3.3254.1476-.35384.30266-.705.43619-1.06407a.25849.25849,0,0,1,.29272-.17794c1.42488.00128,2.84979.00606,4.2746-.00277.388-.00241.18142.225.13284.34162-.58851,1.41215-1.18988,2.81893-1.78593,4.22794q-1.64718,3.89383-3.29287,7.78828c-.96233,2.27075-1.93428,4.53744-2.89327,6.80959-.93871,2.22409-1.86642,4.45281-2.799,6.67951-.07529.07089-.16938.04616-.25636.04625-1.38334.00146-2.76668.00417-4.15-.005C110.99384,119.40531,110.74847,119.52949,110.80912,119.22141Z"/><path class="cls-4" d="M104.40436,15.7113a9.72922,9.72922,0,0,1,1.07941,1.77089c.37952,2.434.8474,4.8511,1.38458,7.2551.23236,1.03988.52955,2.06343.77838,3.0983a1.06754,1.06754,0,0,0,1.00368.90079c1.0857.12054,2.14446.39755,3.22979.51729.867.09565,1.73753.13786,2.60645.19994,1.11068.07934,2.22544.00787,3.33963.05847a11.36973,11.36973,0,0,0,2.14325-.17673c1.22033-.179,2.45-.2313,3.67574-.3382.75336-.0657,1.5106-.09005,2.25855-.217a1.32551,1.32551,0,0,0,.65474-.30225,7.85559,7.85559,0,0,0,2.17918-2.99069,8.74582,8.74582,0,0,0,.2993-1.73971,8.56519,8.56519,0,0,0-.20349-3.05462c-.54855-3.39645-1.29737-6.75407-1.98865-10.12282a3.84919,3.84919,0,0,0-.618-1.75573,1.91816,1.91816,0,0,1-.24025-1.03876.7167.7167,0,0,0-.38049-.61708c.08346-.097.21035-.04319.30857-.0889.12731-.0632.27536.0134.40122-.05951l.29225-.01824c.31089-.07614.633.02978.94318-.05835l1.49352.00081c.31346.0851.63795-.01643.95214.05632l-.00682.02572a.62359.62359,0,0,1,.1485.34794c.54487,2.27087,1.001,4.5644,1.616,6.81618.31761,1.163.601,2.33124.86147,3.50572a5.991,5.991,0,0,1,.19829,2.43576.67474.67474,0,0,0,.0383.3791,2.07008,2.07008,0,0,1,.07913,1.1021,20.78858,20.78858,0,0,0-.13777,2.16187,9.80274,9.80274,0,0,1-2.78369,6.72779,10.86767,10.86767,0,0,1-1.92378,1.646,2.58061,2.58061,0,0,1-.94221.30048,10.54388,10.54388,0,0,0-1.78057.14844.16694.16694,0,0,1-.0762.0084c-1.00624-.136-2.008.21928-3.01777.02143a1.76573,1.76573,0,0,0-.83694.06885,3.38971,3.38971,0,0,1-1.29915.03958,1.25374,1.25374,0,0,0-.79279-.01767.47864.47864,0,0,1-.34034-.00558,2.832,2.832,0,0,0-1.29419-.07036,9.74052,9.74052,0,0,1-3.95844-.27935c-1.28946-.42113-2.648-.47565-3.92582-.91149a5.72982,5.72982,0,0,1-2.86508-1.91321,1.444,1.444,0,0,1-.24188-.43406,43.99708,43.99708,0,0,1-2.02107-8.83215c-.141-1.40228-.29239-2.80366-.4259-4.20676C104.25612,15.92726,104.20252,15.76342,104.40436,15.7113Z"/><path class="cls-5" d="M125.60614,7.15852c.334-.04964.44222.10351.46852.42956a2.73972,2.73972,0,0,0,.533,1.63842c.32663.39387.26146.948.36642,1.429.39118,1.79269.75765,3.591,1.11329,5.39114.36267,1.83589.67805,3.68076,1.009,5.52239a9.689,9.689,0,0,1-.15082,3.56582,5.94459,5.94459,0,0,1-1.47962,2.61c-.082.09806-.19606.1715-.26862.275a2.7822,2.7822,0,0,1-2.32588,1.01306c-1.67713.12281-3.35476.2187-5.02712.4294a10.09409,10.09409,0,0,1-2.58783.12679c-.726-.09453-1.4719.02294-2.21141-.013a28.35478,28.35478,0,0,1-4.97651-.51966c-.60516-.13825-1.23554-.137-1.8369-.32228a.8218.8218,0,0,1-.61118-.609c-.50159-1.75511-.92218-3.52925-1.27681-5.31937-.22026-1.1118-.44565-2.22266-.65441-3.33663-.10541-.56253-.18158-1.13065-.26442-1.6972a.30353.30353,0,0,1,.0589-.28981,27.37527,27.37527,0,0,1,1.3355,2.69419c.03969.10518.16076.17715.12746.31212a32.58288,32.58288,0,0,1,.948,3.76744c.15772.20248.05231.459.13885.67607a6.49762,6.49762,0,0,1,.31029,1.37543c.09965.445.20245.49741.59626.27425a5.34532,5.34532,0,0,1,1.75183-.50721,14.50255,14.50255,0,0,1,1.60607-.17717,5.27,5.27,0,0,1,1.29524-.13348,1.817,1.817,0,0,0,.97131-.13538,2.02351,2.02351,0,0,1,.7164-.08442,14.13442,14.13442,0,0,0,3.63991-.71728,19.1927,19.1927,0,0,1,2.241-.57,9.82731,9.82731,0,0,1,1.05-.11654,2.6934,2.6934,0,0,0,1.16143-.146c.01119-.00627.02429-.01878.034-.01669.91757.19757.891-.55369,1.02257-1.07177a11.68384,11.68384,0,0,0,.36774-2.10232,12.89731,12.89731,0,0,1,.17056-1.56984c.15435-.79639-.04244-1.5773.136-2.37582a7.18116,7.18116,0,0,0-.27341-2.862.23041.23041,0,0,0-.177-.18067c-.11082-.03782-.1466.05865-.21013.1212-.15509.15269-.11749.39058-.26066.54584-.06535.07086-.08659.22694-.20915.181a.33072.33072,0,0,1-.16927-.23691c-.07681-.84944-.3084-1.67088-.44584-2.50925-.09208-.56173-.13436-1.1322-.24168-1.686a9.44422,9.44422,0,0,0-.3478-2.02733,1.38587,1.38587,0,0,1-.02829-.45785l.01093-.04942c.7478-.16168,1.49455-.32854,2.24412-.48156A5.36662,5.36662,0,0,1,125.60614,7.15852Z"/><path class="cls-6" d="M120.1343,32.65112a6.38178,6.38178,0,0,0,1.51764-.12865c.52566-.15559,1.08742.09262,1.639.05314a1.22157,1.22157,0,0,0,.66694-.11847.56742.56742,0,0,1,.37383-.02619,2.20881,2.20881,0,0,0,1.38392-.07044.746.746,0,0,1,.41369.0198.74566.74566,0,0,0,.625-.058c.18866-.1304.38213.05149.59393.0033a4.068,4.068,0,0,0,1.74195-1.06385,12.58324,12.58324,0,0,0,2.67706-3.41047,7.4936,7.4936,0,0,0,.69578-2.33112,7.57262,7.57262,0,0,0,.19148-1.57514,6.34588,6.34588,0,0,0,.05565-1.83495c-.078-.24927.19046-.509.14126-.807a2.23962,2.23962,0,0,0-.13041-.81843c-.12336-.22556.01836-.49877.044-.75126a5.74362,5.74362,0,0,0-.16118-1.56459,19.44289,19.44289,0,0,0-.61712-2.83256c-.28438-.85129-.48483-1.71675-.69585-2.58192-.44076-1.80708-.85644-3.62029-1.27906-5.43176a1.881,1.881,0,0,1-.0215-.30615A15.98507,15.98507,0,0,1,132.845,7.479a.50148.50148,0,0,1,.13081.23158,49.688,49.688,0,0,1,2.01791,8.4048,18.21828,18.21828,0,0,1,.27926,2.63092.76591.76591,0,0,0,.10263.36755.50529.50529,0,0,1,.05306.40814,2.02686,2.02686,0,0,0-.08194.91352,9.35413,9.35413,0,0,0,.10765,2.02284.241.241,0,0,1,.00743.11458,33.91307,33.91307,0,0,1-1.62343,7.27583,9.70686,9.70686,0,0,1-1.38024,2.07526,9.48749,9.48749,0,0,1-2.71467,2.467,4.50315,4.50315,0,0,1-1.35042.53045,3.08355,3.08355,0,0,1-1.276.07831,1.11311,1.11311,0,0,0-.74571.13083.56453.56453,0,0,1-.41165.03573,3.51367,3.51367,0,0,0-1.73081.059,3.571,3.571,0,0,1-2.00817-.04747,4.346,4.346,0,0,0-1.90189-.05094.879.879,0,0,1-.59233-.04171.75263.75263,0,0,0-.40915-.09023c-1.2409.05239-2.46072-.201-3.69449-.25138a2.50064,2.50064,0,0,0-.30847-.05935,19.87577,19.87577,0,0,1-5.66911-1.2823,1.31418,1.31418,0,0,1-.3671-.20423.56291.56291,0,0,0-.3023-.17487,6.69961,6.69961,0,0,1-3.33281-4.03482c-.38037-1.32939-.76285-2.65991-1.0232-4.016-.18022-.93879-.2569-1.89952-.38408-2.84985-.09-.67233-.13218-1.349-.20538-2.02275a.45857.45857,0,0,1,.07613-.39964c.2335.01019.24471.19.25938.35439.10708,1.2.2803,2.39105.45046,3.58347a26.43026,26.43026,0,0,0,1.07152,4.44272,7.53319,7.53319,0,0,0,1.2159,2.51222,6.109,6.109,0,0,0,3.85119,2.11473.40553.40553,0,0,0,.19119-.00021,6.8954,6.8954,0,0,1,2.77067.03242,44.72289,44.72289,0,0,0,5.25789.1827.97314.97314,0,0,0,.54036-.17747C119.84031,32.65729,119.96677,32.5574,120.1343,32.65112Z"/><path class="cls-7" d="M103.34009,72.70127c-.83063-.32459-1.63712-.70182-2.44339-1.0828A33.43745,33.43745,0,0,1,97.641,69.97632a8.83717,8.83717,0,0,1-.46461-2.73078,8.47071,8.47071,0,0,0-.08149-1.56152,5.15678,5.15678,0,0,1,.06829-1.14823.67531.67531,0,0,0-.376-.65364,14.08384,14.08384,0,0,1-2.37946-1.68747,3.94162,3.94162,0,0,0-.9147-.56584,20.74024,20.74024,0,0,0-2.05258-.95975,3.20772,3.20772,0,0,1-.75-.3885c-.16453-.11534-.29447-.14228-.38073.0943-.07678.21052-.23739.20568-.40857.1135A4.54453,4.54453,0,0,1,89.438,60.213a33.71361,33.71361,0,0,0-4.58-2.52155c-.54052-.26638-1.07543-.54568-1.60021-.84342a.63617.63617,0,0,1-.36347-.46453.82455.82455,0,0,0-.39825-.54009,14.46986,14.46986,0,0,1-2.0368-1.44187.2658.2658,0,0,0-.37837-.01093c-.44554.28888-.62066.24055-.91818-.22906-.04451-.15711-.01573-.33414-.11628-.4753a.46367.46367,0,0,1,.10826-.67732,1.29208,1.29208,0,0,0,.50413-.96574.65162.65162,0,0,1,.0479-.14416c.14958-.2654.17024-.62573.53679-.73228a2.58723,2.58723,0,0,1,1.397.66306c.34593.28579.71493.54391,1.07586.81143a1.16594,1.16594,0,0,0,.70164.2767,1.23,1.23,0,0,1,.63253.26328A20.46455,20.46455,0,0,0,88.174,55.156c.59193.21194,1.1727.45456,1.76515.66583a.53615.53615,0,0,1,.29389.17513,2.24633,2.24633,0,0,0,1.54488.84813c.89211.21477,1.71631.60142,2.57578.89628,1.5427.52925,3.01121,1.23918,4.51994,1.85118a8.569,8.569,0,0,0,2.52622.45256,3.6449,3.6449,0,0,1,.82979.15793c.18193.06023.36873.12644.43906.33752-.13873.2345-.34989.10311-.5124.07185a2.45059,2.45059,0,0,0-1.10328.04482,1.205,1.205,0,0,0-.80807,1.33007.50453.50453,0,0,0,.2601.31769c.46964.28853.88546.65331,1.35906.93847.45356.27309.51725.56049.21856.99355a4.22715,4.22715,0,0,0-.72292,2.42157,7.94336,7.94336,0,0,1-.25423,1.66848,1.28623,1.28623,0,0,0,.42541,1.38309,4.81378,4.81378,0,0,1,.59991.69914,1.615,1.615,0,0,1,.388,1.09893.50924.50924,0,0,0,.05627.33414.84151.84151,0,0,0,.46643.2233,1.0586,1.0586,0,0,1,.58077.32266C103.696,72.71666,103.66373,72.75239,103.34009,72.70127Z"/><path class="cls-2" d="M128.7694,86.95128l4.294.002c.09292.11323.048.24722.048.37065q.00359,12.56722.002,25.13443c0,.40628-.00109.40683-.42258.40694-1.19347.0003-2.387-.00829-3.58031.00619-.288.0035-.39377-.05181-.39339-.37336q.01462-12.60569.00933-25.2114C128.72653,87.17467,128.69189,87.05481,128.7694,86.95128Z"/><path class="cls-8" d="M79.22829,54.13966c.35955.44678.4117.45726.86273.09658a.2307.2307,0,0,1,.365.01476,12.19076,12.19076,0,0,0,2.11086,1.5163c.17055.12085.37583.24107.38569.45216.02046.438.3492.5399.64969.70063a58.52889,58.52889,0,0,1,6.28747,3.4531c.20324.14307.34382.19342.35951-.14292.01249-.2677.17974-.25488.34171-.13515a15.89082,15.89082,0,0,0,1.89472.90954,10.26468,10.26468,0,0,1,2.37251,1.44961,9.00619,9.00619,0,0,0,1.726,1.19833c.69444.412.81447.59681.64272,1.38551a1.94865,1.94865,0,0,0,.00633.871,2.45465,2.45465,0,0,1,.03857,1.09691,2.17314,2.17314,0,0,0,.07959,1.10055c.16848.53806.03545,1.13771.33748,1.65174.02765.047-.02993.14416-.04794.218-.76852-.38787-1.53152-.78491-2.283-1.20629-1.67951-.94172-3.30679-1.9678-4.93093-2.99949-1.45911-.92685-2.865-1.93088-4.25461-2.95791-1.2152-.89816-2.41793-1.81541-3.55793-2.80577-1.2359-1.07366-2.44176-2.182-3.6354-3.30493a24.86359,24.86359,0,0,1-3.06066-3.57054c.05134-.20435.08335-.2423.23629-.15312a4.828,4.828,0,0,0,1.43812.511.52668.52668,0,0,1,.23813.12122,1.60359,1.60359,0,0,0,1.19108.43817A.29762.29762,0,0,1,79.22829,54.13966Z"/><path class="cls-9" d="M142.40007,12.61785a13.48494,13.48494,0,0,1,1.614,1.7162,3.12216,3.12216,0,0,1,.6203.826.83243.83243,0,0,1,.10336.40486,29.93735,29.93735,0,0,1-1.018,9.32673,35.60688,35.60688,0,0,1-2.89424,7.23567,28.89817,28.89817,0,0,1-3.46014,5.16935,15.18468,15.18468,0,0,1-4.90338,3.95859,7.14585,7.14585,0,0,1-2.633.66228c-1.485.11313-2.97374.0919-4.46119.07893-1.64028-.0143-3.27788-.10843-4.91429-.21955-.15389-.01045-.30791-.0098-.46183-.0077a1.39138,1.39138,0,0,1-.92223-.19241.46476.46476,0,0,0-.21986-.06594,5.42163,5.42163,0,0,1-1.53577-.45045,7.89493,7.89493,0,0,0-1.96512-.51987,23.65433,23.65433,0,0,1-5.86638-1.81751,11.52866,11.52866,0,0,1-1.30791-.73542c-.15028-.0924-.31543-.1872-.30243-.407.22846-.127.4242-.00546.61067.097a23.4676,23.4676,0,0,0,3.85491,1.62176,3.38848,3.38848,0,0,0,1.09277.18276,15.30779,15.30779,0,0,1,1.92664.33265,2.34707,2.34707,0,0,0,1.34955-.14457,2.16867,2.16867,0,0,1,.8951-.19275c.64091.01848,1.27227.13354,1.91353.16926,1.38226.077,2.76328.13827,4.14817.1429.89634.003,1.79334.13281,2.68912.06411,1.11215-.08529,2.23-.01911,3.33935-.15465A7.78215,7.78215,0,0,0,133.002,38.427a15.81364,15.81364,0,0,0,4.35407-4.18769,29.11489,29.11489,0,0,0,5.03734-12.19864,23.78845,23.78845,0,0,0,.35491-4.89843,38.02859,38.02859,0,0,0-.4891-3.92815C142.22722,12.99725,142.18344,12.77648,142.40007,12.61785Z"/><path class="cls-10" d="M136.69742,8.77316a14.21436,14.21436,0,0,1,2.6957,1.46552.45578.45578,0,0,1,.08343.17234c.32548,1.92136,1.0284,3.76048,1.21959,5.71318a27.30971,27.30971,0,0,1,.24759,3.79337A23.71647,23.71647,0,0,1,140.062,25.414a23.80923,23.80923,0,0,1-4.3702,8.75267,12.24255,12.24255,0,0,1-4.75074,3.64252,7.18317,7.18317,0,0,1-2.47409.50461c-1.58774.07127-3.17507.15184-4.76461.13975-.69139-.00525-1.38075-.0874-2.07394-.08812a1.84631,1.84631,0,0,1-.74621-.172,2.064,2.064,0,0,0-.97192-.18471,14.85159,14.85159,0,0,1-2.817-.35447c-.36107-.0828-.73942-.0556-1.107-.11906a35.14306,35.14306,0,0,1-5.67583-1.34769c-.67579-.23653-1.21766-.70464-1.86969-.97131-.51207-.44135-1.11846-.76242-1.59875-1.24557a7.96692,7.96692,0,0,1-1.15038-1.32454.44662.44662,0,0,1-.09218-.395c.0743-.14146.18785-.116.29474-.05686a5.07379,5.07379,0,0,1,1.2102.797,7.99059,7.99059,0,0,0,3.52791,2.01639,1.39959,1.39959,0,0,0,.45393.06736.25708.25708,0,0,1,.1095.05665,3.42377,3.42377,0,0,0,1.26833.41414,44.22112,44.22112,0,0,0,5.62021.89464c1.5407.14345,3.0661.40147,4.623.45061a47.21536,47.21536,0,0,0,6.10616-.183,6.87517,6.87517,0,0,0,3.20539-1.32462,14.68648,14.68648,0,0,0,5.08011-6.533,17.30226,17.30226,0,0,0,1.344-5.89343c.05562-.88241.16533-1.76392.14232-2.64783a35.49512,35.49512,0,0,0-.75113-6.64016c-.31414-1.44484-.75379-2.85254-1.1487-4.27388C136.62934,9.1933,136.52481,8.97667,136.69742,8.77316Z"/><path class="cls-11" d="M120.90466,38.11948a4.59279,4.59279,0,0,0,1.21038.15815c.86994-.01815,1.73663.13085,2.6078.07151,1.04812-.07139,2.09746-.06515,3.147-.08059a8.4591,8.4591,0,0,0,5.07176-1.69475,15.41812,15.41812,0,0,0,4.1368-4.52523,27.46938,27.46938,0,0,0,2.57869-5.64,23.77878,23.77878,0,0,0,.983-4.4755,16.45488,16.45488,0,0,0,.204-2.39583,34.55309,34.55309,0,0,0-.55742-5.23756c-.19506-1.046-.58713-2.0343-.77952-3.07542a3.55363,3.55363,0,0,1-.11395-.98561,16.19331,16.19331,0,0,1,3.00695,2.37917,3.2753,3.2753,0,0,0,.11807,1.54061,21.12739,21.12739,0,0,1,.33107,4.806,28.53027,28.53027,0,0,1-1.53383,7.8049,29.71264,29.71264,0,0,1-3.00979,6.24523,18.248,18.248,0,0,1-3.00861,3.76365,11.13691,11.13691,0,0,1-4.89267,2.90377,6.29249,6.29249,0,0,1-1.43458.19727c-1.37172-.01-2.74177.18135-4.1098.077-1.115-.085-2.23-.00474-3.34068-.07709-1.30966-.08531-2.62432-.11695-3.92712-.2964a.82473.82473,0,0,0-.59637-.30008,44.4847,44.4847,0,0,1-4.97073-1.103,2.00012,2.00012,0,0,1-.60752-.23107c-.15143-.09259-.27477-.2048-.13612-.40094a.72165.72165,0,0,1,.56059-.00062c.9515.21,1.90057.43047,2.85812.61341.36816.07033.74035.06535,1.1088.113a.29419.29419,0,0,0,.189-.02085c.61733-.38027,1.27194-.14593,1.91247-.11665a20.67854,20.67854,0,0,0,2.34471-.00586A3.37271,3.37271,0,0,1,120.90466,38.11948Z"/><path class="cls-12" d="M103.57168,72.393c-.32184-.24194-.76469-.20157-1.07856-.46212-.0928-.59992-.00825-.6786.56354-.52367.08664.02348.17391.04445.26081.06683.1864.048.2846-.00283.31137-.21294.111-.87076.53558-1.65205.72824-2.50077a.28672.28672,0,0,1,.29772-.25254c.19583.0164.2235.1819.24019.34056.00538.05105-.00194.103.00309.1536.014.1408-.10938.33042.09433.40678a.49906.49906,0,0,0,.57477-.09782,1.24,1.24,0,0,1,.88792-.389,1.00218,1.00218,0,0,0,.50867-.24574c.6278-.50684,1.28668-.97346,1.93005-1.45964.74578-.56358,1.49655-1.122,2.22744-1.7054a8.60687,8.60687,0,0,1,1.05635-.767c.38111-.21947.39572-.46259.03886-.74032-.40479-.315-.80951-.62924-1.19027-.97358a.5836.5836,0,0,1-.25881-.408c.03-.15775.155-.22481.27891-.29315a.74582.74582,0,0,1,.71764.16675,16.38552,16.38552,0,0,1,1.61072,1.23028.40822.40822,0,0,0,.15181.11346c.87366.28791,1.66947.75,2.50706,1.1184a6.22362,6.22362,0,0,0,1.81591.56985.46712.46712,0,0,1,.43017.62711c-.02656.11375-.10114.20642-.13451.31685a.61968.61968,0,0,1-.16442.25674,17.28919,17.28919,0,0,1-1.85563,1.54729c-1.22158.73238-2.33765,1.61933-3.50552,2.4303a14.362,14.362,0,0,1-3.41307,1.97371,3.62208,3.62208,0,0,0-1.65361,1.26619.5305.5305,0,0,1-.50961.275,15.80776,15.80776,0,0,1-2.1755-.81795,6.0907,6.0907,0,0,1-1.28914-.57558C103.59822,72.68233,103.7507,72.535,103.57168,72.393Z"/><path class="cls-13" d="M136.69742,8.77316a7.82984,7.82984,0,0,0,.50587,1.99784,34.88882,34.88882,0,0,1,1.08788,4.72767c.12928.879.21759,1.7678.28267,2.65907a20.88063,20.88063,0,0,1,.11719,2.71373,27.25263,27.25263,0,0,1-.69478,5.83083,18.77469,18.77469,0,0,1-1.66285,3.9533,13.56122,13.56122,0,0,1-1.4845,2.27488,14.27748,14.27748,0,0,1-2.69851,2.48827,7.72612,7.72612,0,0,1-4.23116,1.48914c-1.50756.0591-3.01363.16174-4.52264.12776a15.98027,15.98027,0,0,1-3.01449-.18016c-1.5243-.33169-3.08218-.30792-4.61-.61778-1.11509-.22615-2.25578-.38308-3.38242-.586-.33682-.06068-.65058-.21584-.99617-.25858a.2807.2807,0,0,1-.27235-.27737c.06083-.21.22161-.11914.34211-.10144q2.546.37405,5.10281.6636c.40593.04655.81782.03961,1.22667.07736a1.92914,1.92914,0,0,0,.93-.19767c.09868.02591.15051.14128.26822.1349.62743-.03405,1.25255.09338,1.8796.03347a3.83828,3.83828,0,0,1,.80679-.01844,24.918,24.918,0,0,0,3.38405.05673c.83054-.01609,1.66271-.09366,2.49366-.14318a6.80616,6.80616,0,0,0,1.55634-.20228,8.78292,8.78292,0,0,0,3.43676-2.05583c.42479-.3897.82317-.80927,1.21988-1.2293A6.70621,6.70621,0,0,0,135.2198,29.452a28.81233,28.81233,0,0,0,1.29992-6.51405,33.26675,33.26675,0,0,0-.05988-4.83817,38.233,38.233,0,0,0-1.93276-9.24093c-.10169-.3107-.32829-.62677-.14153-.98813A18.36523,18.36523,0,0,1,136.69742,8.77316Z"/><path class="cls-14" d="M107.88567,37.58044a4.88922,4.88922,0,0,0,1.70638,1.07067,21.11875,21.11875,0,0,0,4.04608,1.4196c.94379.21238,1.9021.36589,2.8363.61243a3.24543,3.24543,0,0,1,1.2041.43323c.37215.27847.87317.15874,1.28652.31677a10.83015,10.83015,0,0,0,3.06813.31228,59.5159,59.5159,0,0,0,6.25651.13492,11.93408,11.93408,0,0,0,3.07535-.31255,7.78777,7.78777,0,0,0,2.04512-.92869,16.12508,16.12508,0,0,0,2.97282-2.40721,25.57575,25.57575,0,0,0,2.14975-2.59223,27.33583,27.33583,0,0,0,1.81613-2.83937,36.16541,36.16541,0,0,0,1.68174-3.40353,29.99814,29.99814,0,0,0,1.40915-3.87671,30.41675,30.41675,0,0,0,1.04545-5.16361,24.07754,24.07754,0,0,0,.14838-2.48292c-.00775-.90442-.0001-1.809.00084-2.71345a11.5173,11.5173,0,0,1,.91542,1.25159.20678.20678,0,0,1,.07913.16825,17.0005,17.0005,0,0,1-.086,2.83832,31.19139,31.19139,0,0,1-.41736,3.27895,37.32673,37.32673,0,0,1-1.68239,6.03414A36.19168,36.19168,0,0,1,140.97,34.024a28.53852,28.53852,0,0,1-3.618,5.10692,14.29922,14.29922,0,0,1-4.445,3.49744,6.95075,6.95075,0,0,1-2.85246.6972c-1.03784.027-2.07672.09239-3.11343.05245-1.57375-.06064-3.14811-.10794-4.71817-.27085-1.22315-.12691-2.45235-.20024-3.66373-.42056-.65494-.11912-1.29957-.29214-1.94416-.46013a.577.577,0,0,1-.29162-.17829.497.497,0,0,0-.40532-.255,9.837,9.837,0,0,1-1.71025-.43629,21.07741,21.07741,0,0,1-6.67215-3.13787,20.58954,20.58954,0,0,1-2.763-2.76113.62885.62885,0,0,1-.23213-.544c.26974-.13867.39625.09383.5317.232a22.55314,22.55314,0,0,0,2.0488,1.8916,2.14474,2.14474,0,0,0,.38423.24814A1.00664,1.00664,0,0,1,107.88567,37.58044Z"/><path class="cls-15" d="M146.40217,18.02018l.35708.6233c.12143.0401.09686.13789.09035.22855l.403,1.06605a4.20541,4.20541,0,0,1-.07476,1.44719A35.69489,35.69489,0,0,1,143.34637,33.502c-.55665,1.06619-1.14052,2.1221-1.79854,3.13453a32.45482,32.45482,0,0,1-3.65764,4.69265,13.18608,13.18608,0,0,1-5.71823,3.88944,7.66226,7.66226,0,0,1-2.04954.3098c-1.32031.02436-2.63926.08715-3.96028.1023a46.41328,46.41328,0,0,1-6.96116-.56232,10.33953,10.33953,0,0,1-1.98439-.40584.94674.94674,0,0,1-.50427-.25532.77586.77586,0,0,0-.66629-.49471c-.27141-.05715-.60233-.09659-.60945-.49984a4.28146,4.28146,0,0,1,1.00356-.26032c.94346.1892,1.8853.39468,2.84218.50043q1.87179.20685,3.74752.38043a16.58352,16.58352,0,0,0,1.76319.10077,27.56619,27.56619,0,0,0,3.37586-.01085,9.19709,9.19709,0,0,1,1.57684-.02,7.95344,7.95344,0,0,0,5.14872-1.83418,24.26924,24.26924,0,0,0,5.56139-6.222,35.8574,35.8574,0,0,0,3.81839-7.74542,34.26946,34.26946,0,0,0,1.79874-7.74236,15.46379,15.46379,0,0,0,.15263-2.1076C146.2216,18.29007,146.2084,18.10825,146.40217,18.02018Z"/><path class="cls-16" d="M134.38555,7.87075a17.10437,17.10437,0,0,0,.6488,2.20209,42.39188,42.39188,0,0,1,1.2854,5.70263,37.27131,37.27131,0,0,1,.37471,6.14779,25.43922,25.43922,0,0,1-.56921,4.54341,26.38461,26.38461,0,0,1-1.27153,4.29165,4.907,4.907,0,0,1-1.00191,1.43776,11.65417,11.65417,0,0,1-3.52481,2.8643,7.23923,7.23923,0,0,1-2.89689.69248c-1.6493.07855-3.29791.18278-4.947.12089-1.14556-.043-2.29053-.03577-3.43549-.06307-.166-.004-.31936-.00084-.3-.23283a.3586.3586,0,0,1,.2412-.10419c-1.0197-.129-2.01157-.13571-2.99473-.24575-.22887-.02561-.456-.06269-.685-.08692-.12533-.01325-.26238-.02359-.299-.1864a.23531.23531,0,0,1,.17622-.21013c.12526-.06836.28414.01015.40282-.09084a19.76312,19.76312,0,0,1,2.51409.18613,9.71547,9.71547,0,0,0,1.21073.04455c.03828.00285.082-.01146.1147.0023.78444.32984,1.59014-.04531,2.38151.07132.13865.02043.294-.00905.405.08717a.83527.83527,0,0,0,.61654.14842c.23086-.00337.4619.00312.69271-.00169a2.843,2.843,0,0,0,.95113-.16487,2.28811,2.28811,0,0,1,1.43194.01338c.123.03807.24276.11954.36436.0379a1.51783,1.51783,0,0,1,1.39357-.09046.27369.27369,0,0,0,.14543.01189,7.68861,7.68861,0,0,0,2.64236-1.20681,12.47917,12.47917,0,0,0,3.14478-3.70567,10.02531,10.02531,0,0,0,.92631-2.83265c.26474-1.076.40945-2.17446.58978-3.26642.07284-.44115-.11924-.95669.2544-1.35152.06555-.06927.00218-.19824-.0514-.2889a.71217.71217,0,0,1-.08266-.44632,11.94481,11.94481,0,0,0-.00578-1.55951c-.01569-.524.01749-1.04063-.03434-1.57546A45.38392,45.38392,0,0,0,134.1761,12.307c-.37363-1.52253-.85675-3.01818-1.288-4.52668A2.16709,2.16709,0,0,1,132.845,7.479,9.28381,9.28381,0,0,1,134.38555,7.87075Z"/><path class="cls-17" d="M146.40217,18.02017a.83957.83957,0,0,0-.07545.48653,24.43214,24.43214,0,0,1-.36172,3.57166,30.34962,30.34962,0,0,1-.82279,3.84972,30.41932,30.41932,0,0,1-1.12158,3.33812c-.43008,1.07616-.86055,2.15237-1.37821,3.18829a38.30493,38.30493,0,0,1-2.73659,4.59542,25.51091,25.51091,0,0,1-3.87119,4.44641,12.94028,12.94028,0,0,1-2.62947,1.83244,7.40629,7.40629,0,0,1-3.86923.87207c-.924-.03728-1.84.11383-2.7634.0822-1.72872-.05921-3.45522-.09123-5.18022-.2883-1.55726-.1779-3.11788-.30817-4.65312-.63837a1.17762,1.17762,0,0,1-.5026-.15339c.04939-.23758-.13689-.23728-.27986-.26875a26.8308,26.8308,0,0,1-3.135-.9114,22.52186,22.52186,0,0,1-4.70418-2.246c-.13126-.08408-.31288-.14481-.27879-.36274.19881-.09.34881.03527.49432.12831a13.42536,13.42536,0,0,0,3.86889,1.75183c1.09646.28053,2.19254.60163,3.31449.79786.25125.04394.41494-.16671.6431-.12167a2.68655,2.68655,0,0,0,1.15236.36711,27.04228,27.04228,0,0,0,4.6463.64792c1.24785.10165,2.49529.1673,3.74419.238,1.026.05811,2.051.07791,3.07134.03737a10.64265,10.64265,0,0,0,2.326-.159,9.4743,9.4743,0,0,0,2.56019-1.10276,14.8314,14.8314,0,0,0,3.13769-2.62639,28.28851,28.28851,0,0,0,2.79982-3.63554,38.61212,38.61212,0,0,0,2.59542-4.72434,30.88875,30.88875,0,0,0,1.47885-3.85522,36.85593,36.85593,0,0,0,1.10168-4.21907,30.99759,30.99759,0,0,0,.444-3.33018c.08044-1.02067.15412-2.03811.14146-3.06155.09716-.02738.11878.04239.14189.11026Z"/><path class="cls-18" d="M116.74475,44.358a5.1833,5.1833,0,0,0,1.737.52215c.7304.04074,1.43451.22642,2.15995.28081.8883.06662,1.76484.26653,2.65892.27123a7.257,7.257,0,0,1,1.52068.14476c.22517.04927.423-.07709.64424-.06883.46142.0172.92409.01255,1.386.00372,1.13913-.02178,2.27979-.02076,3.4168-.08387a9.224,9.224,0,0,0,5.25782-2.08835c.54263-.42526,1.05222-.88882,1.59355-1.31634A12.65237,12.65237,0,0,0,138.658,40.3167c.7976-.91026,1.53132-1.87873,2.25554-2.84981a12.84585,12.84585,0,0,0,.70629-1.131c.7495-1.26163,1.49117-2.52986,2.131-3.85233a37.12655,37.12655,0,0,0,2.88092-8.43209,29.2205,29.2205,0,0,0,.54422-3.66192c.01281-.15157.05048-.301.07663-.45149a7.86825,7.86825,0,0,1,.61288,1.931,7.13353,7.13353,0,0,1-.18453,1.5628,37.2579,37.2579,0,0,1-2.05,6.92862,41.37794,41.37794,0,0,1-3.3565,6.568,29.046,29.046,0,0,1-4.64327,5.82247,15.8524,15.8524,0,0,1-3.25338,2.50978,9.61266,9.61266,0,0,1-4.40463,1.21746c-1.5741.05856-3.15.10062-4.723.20241a8.07208,8.07208,0,0,1-1.60468-.09262c-.60716-.082-1.23518-.08586-1.854-.12354a15.4016,15.4016,0,0,1-2.40393-.28528,14.04761,14.04761,0,0,1-2.06986-.31742,7.76694,7.76694,0,0,1-1.81892-.43235,23.17278,23.17278,0,0,1-3.13076-1.01841c-.15282-.06474-.3681-.08589-.34864-.33718.174-.1304.3437-.02395.50758.02054.6167.16743,1.21384.40207,1.838.5443a7.48162,7.48162,0,0,0,1.28562.16063c.01455-.11975-.09661-.17079-.08155-.26521A1.08042,1.08042,0,0,1,116.74475,44.358Z"/><path class="cls-19" d="M107.04324,74.221a1.16486,1.16486,0,0,0,.4876-.402,3.66645,3.66645,0,0,1,1.77182-1.286,12.2819,12.2819,0,0,0,3.03944-1.74819C113.745,69.81005,115.13,68.81,116.545,67.85164a6.59833,6.59833,0,0,0,1.50939-1.38909,8.54066,8.54066,0,0,1,.92914-.89265c.07356-.053.15321-.12853.11768-.22-.17008-.438.13347-.48922.43342-.55026.04939-.01005.09734-.02752.14753-.03819a2.1906,2.1906,0,0,1,1.12757.10089,3.22648,3.22648,0,0,0,2.04985.08594,1.3074,1.3074,0,0,1,.30165-.04055,2.908,2.908,0,0,1,.63671.13584,1.11393,1.11393,0,0,0,.78747-.01481.509.509,0,0,1,.33949-.02526c.15064.03876.21194.15176.07786.23942-.51247.335-.63118.95113-1.01508,1.37434-1.67021,1.05792-3.37093,2.06336-5.12186,2.98287-.5821.30569-1.16052.6184-1.74063.92789a9.56661,9.56661,0,0,1-1.38995.70674c-.58892.26689-1.18253.52395-1.76591.80245-1.91187.91272-3.86955,1.715-5.856,2.449a.6926.6926,0,0,1-.378.00127A2.12354,2.12354,0,0,1,107.04324,74.221Z"/><path class="cls-20" d="M117.36081,45.74476a2.37123,2.37123,0,0,0,1.52856.12722c.11486-.04632.11408.17394.277.19009.82263.08153,1.63983.2302,2.46356.28261.36381.02314.73909.22524,1.12089-.00208.0829-.04935.22982.21176.35914.15974.56872-.22878,1.08319.14806,1.64744.107,1.43945-.10479,2.88794-.08445,4.32769-.18648a20.4284,20.4284,0,0,0,2.47363-.21231,8.97054,8.97054,0,0,0,1.85458-.59473,13.92409,13.92409,0,0,0,3.59124-2.443,27.76573,27.76573,0,0,0,4.95592-5.91555,42.37251,42.37251,0,0,0,2.34388-4.171,39.69047,39.69047,0,0,0,2.89611-7.89769,23.01548,23.01548,0,0,0,.59278-3.15074.635.635,0,0,1,.07223-.16867,5.8063,5.8063,0,0,1,.37392,1.77335,28.64387,28.64387,0,0,1-.99262,3.83407,36.172,36.172,0,0,1-2.33752,5.89743,38.876,38.876,0,0,1-5.0879,7.82153,21.50176,21.50176,0,0,1-5.30465,4.64015,7.956,7.956,0,0,1-3.70236,1.19581c-1.98083.093-3.95484.32428-5.943.28413a30.06792,30.06792,0,0,1-3.52744-.22894c-1.25382-.17361-2.50744-.35015-3.76433-.50349a21.02157,21.02157,0,0,1-2.33428-.6002c-.14683-.0416-.34725-.037-.3778-.2607a.21673.21673,0,0,1,.24606-.13817,5.32863,5.32863,0,0,1,1.31919.07982A1.39052,1.39052,0,0,0,117.36081,45.74476Z"/><path class="cls-21" d="M148.2477,32.57313a10.80361,10.80361,0,0,1-.23985,1.77607,20.3438,20.3438,0,0,1-1.64358,3.03818,42.84148,42.84148,0,0,1-4.68447,6.32727,31.25654,31.25654,0,0,1-5.39619,4.90135,11.66564,11.66564,0,0,1-5.764,2.16729c-.98176.086-1.95133.29277-2.93218.40249q-1.183.13233-2.3719.19793a8.57713,8.57713,0,0,1-1.84045.05628c-.63793-.0492-1.27334-.12809-1.90935-.179-1.38047-.11058-2.75033-.31323-4.12947-.42973-.24419-.105-.50621-.15649-.75516-.24687-.15179-.0551-.32366-.09922-.33165-.31175.08531-.18554.25088-.15905.39788-.13056.29007.05622.58961.01455.87622.09741a.4298.4298,0,0,0,.32987-.06641,7.04169,7.04169,0,0,1,1.56353.12508,6.12282,6.12282,0,0,0,.87759.04789c.96026-.02789,1.91519.10886,2.8738.10632a11.07486,11.07486,0,0,1,1.8787.03485.54316.54316,0,0,0,.32966-.0901.97973.97973,0,0,1,.55666-.12562,8.27806,8.27806,0,0,0,2.16119-.14523,33.32937,33.32937,0,0,0,4.5927-.705,4.039,4.039,0,0,0,1.883-.79983,3.16155,3.16155,0,0,1,1.07142-.57884,3.33652,3.33652,0,0,0,1.21459-.90491,14.96337,14.96337,0,0,1,1.26465-.98311c.05712-.0501.15008-.0732.18353-.13673.41855-.79467,1.29254-1.10587,1.85225-1.75046a2.92808,2.92808,0,0,0,.43486-.58222c.181-.356.55619-.54186.77534-.88154.37791-.58576.99718-.9876,1.328-1.61118.32356-.60992.87237-1.03549,1.238-1.60858.32919-.516.7021-1.01789.993-1.542.33987-.61242.73875-1.19,1.07631-1.804.34093-.62009.68064-1.24637,1.04458-1.85678.27231-.45675.44132-.9802.69821-1.45287C147.84653,32.74112,147.93168,32.47908,148.2477,32.57313Z"/><path class="cls-22" d="M117.59213,46.51457c.88566.02016,1.74834.23406,2.62565.31462.94634.08689,1.87787.27184,2.83264.323a30.27866,30.27866,0,0,0,3.0705.03964,34.19161,34.19161,0,0,0,3.91921-.27145c.465-.07629.954.02631,1.43506-.06046a10.00722,10.00722,0,0,0,4.159-1.86976,21.742,21.742,0,0,0,3.38043-3.04795,36.68708,36.68708,0,0,0,3.11655-3.97461,40.08348,40.08348,0,0,0,2.624-4.50677,41.52752,41.52752,0,0,0,2.89124-7.70721c.17332-.64084.34025-1.28138.45722-1.9347a.25108.25108,0,0,1,.13579-.17645,7.34615,7.34615,0,0,1,.1654,1.08033,1.50077,1.50077,0,0,1-.02256.82923,44.22622,44.22622,0,0,1-2.58363,7.08036,39.25853,39.25853,0,0,1-4.01591,6.82338,33.01778,33.01778,0,0,1-3.999,4.61605,13.15388,13.15388,0,0,1-5.7015,3.37679,14.66635,14.66635,0,0,1-2.29183.24407c-1.54424.14569-3.09564.18811-4.64236.29974a14.40709,14.40709,0,0,1-2.2657-.092c-1.08522-.0925-2.16963-.19414-3.2552-.28309-.86953-.07124-1.72928-.22584-2.59562-.32578a.38667.38667,0,0,1-.236-.11966c-.2359-.50293-.21136-.55887.3132-.638A.96506.96506,0,0,1,117.59213,46.51457Z"/><path class="cls-23" d="M123.44683,51.36678a40.07889,40.07889,0,0,0,4.76459-.38072c1.22184-.17662,2.448-.32589,3.66633-.52352a10.25257,10.25257,0,0,0,3.73867-1.53287,24.63415,24.63415,0,0,0,3.123-2.40369c.69-.5981,1.32317-1.25064,1.9578-1.90132a39.69824,39.69824,0,0,0,3.96531-4.81784,41.99537,41.99537,0,0,0,3.10991-5.10987,3.33646,3.33646,0,0,1,.2354-.34776,13.2907,13.2907,0,0,1-.45,2.3048c-.97638,1.54833-1.93538,3.10774-3.03461,4.57516-.81455,1.08738-1.70826,2.106-2.61813,3.11314-.69567.77006-1.42163,1.50945-2.1686,2.22792a22.36163,22.36163,0,0,1-4.63882,3.51939,8.26011,8.26011,0,0,1-2.48339.99468c-.731.11648-1.45835.25031-2.19365.33841-.944.11311-1.88266.26781-2.82241.41269a3.21121,3.21121,0,0,1-.68818.04218,7.7503,7.7503,0,0,0-1.30939.15166.77886.77886,0,0,1-.26658-.01033,3.38045,3.38045,0,0,0-1.26009-.06851,6.24526,6.24526,0,0,1-1.74969-.10888c-.2287-.03238-.45711-.0528-.6878-.0629-.14621-.00641-.3199.01527-.37811-.18427.09257-.27058.33176-.262.54243-.25608C122.34951,51.35357,122.89926,51.304,123.44683,51.36678Z"/><path class="cls-24" d="M116.82178,47.13073a12.30022,12.30022,0,0,0,1.54371.22842c1.19127.22439,2.40548.24782,3.608.363a16.1517,16.1517,0,0,0,2.97965.17388c1.44678-.12956,2.90162-.11371,4.34711-.28721.71854-.08624,1.44936-.08366,2.17277-.16325a7.10224,7.10224,0,0,0,2.19331-.65366,14.144,14.144,0,0,0,3.50555-2.31625,30.82014,30.82014,0,0,0,3.16683-3.33153,37.89455,37.89455,0,0,0,3.49007-4.97607,41.20671,41.20671,0,0,0,2.52666-5.03909,42.33039,42.33039,0,0,0,2.00324-5.9126,2.17753,2.17753,0,0,0,.0461-.49359c.11531.10774.051.25964.09469.385.05368.12759-.01716.2724.055.39743l.02082.44944a.64976.64976,0,0,1,.01249.30106,21.18542,21.18542,0,0,1-.98329,3.11462,43.13881,43.13881,0,0,1-4.24813,8.48519,34.05981,34.05981,0,0,1-3.68938,4.82382,18.42115,18.42115,0,0,1-6.55781,4.93168,8.95581,8.95581,0,0,1-2.62535.554c-1.02142.08232-2.04225.17665-3.063.26933a13.602,13.602,0,0,1-1.41778.09459c-.80611-.0119-1.60671.0745-2.41723.03137-1.51283-.08051-3.01073-.2809-4.51354-.44225a2.4891,2.4891,0,0,1-.79681-.10286.65089.65089,0,0,0-.43622-.2197,5.25869,5.25869,0,0,1-1.254-.35945c-.14776-.04472-.37194-.084-.2704-.34748A.44962.44962,0,0,1,116.82178,47.13073Z"/><path class="cls-25" d="M120.1343,32.65112c-.051.00423-.12522-.01192-.14942.01572-.40368.46126-.94536.36587-1.46161.3687-.55147.003-1.10365.01851-1.65431-.0028-1.42546-.05518-2.84479-.17766-4.264-.33219a2.56123,2.56123,0,0,0-1.37314.09729c-.36572.16312-.80414-.046-1.17968-.16926a6.83821,6.83821,0,0,1-2.29375-1.20591,5.66318,5.66318,0,0,1-1.57275-2.26738,24.20071,24.20071,0,0,1-1.33-4.66094c-.193-.97127-.30294-1.95959-.43373-2.94244-.07043-.52935-.10808-1.06313-.15607-1.59532a.26887.26887,0,0,0-.15466-.2447.96612.96612,0,0,1-.18688-.60855c-.144-1.22913-.13816-2.46772-.2266-3.70051-.01242-.17313-.06563-.39147.18916-.46995a3.44666,3.44666,0,0,1,.51756.77842c-.14011.17313.0045.3409.00637.511.01029.9329.1731,1.852.25171,2.77853.09024,1.06348.27264,2.11907.41206,3.17848a36.37318,36.37318,0,0,0,1.21962,5.20748,13.61022,13.61022,0,0,0,.57091,1.78048,3.57339,3.57339,0,0,0,1.46766,1.47429,9.9056,9.9056,0,0,0,3.65679,1.17055,4.46966,4.46966,0,0,1,1.57571.40077,1.0574,1.0574,0,0,0,.82494.14939,1.38873,1.38873,0,0,1,.63866.10051,10.20224,10.20224,0,0,0,2.64251.05678,2.39956,2.39956,0,0,1,1.38566.10446.28873.28873,0,0,0,.25629-.00451C119.60252,32.40426,119.86483,32.55542,120.1343,32.65112Z"/><path class="cls-26" d="M148.2477,32.57313a.47992.47992,0,0,0-.372.302c-.201.39841-.394.80154-.56981,1.21155-.09115.21263-.23361.39807-.32607.59583a4.40163,4.40163,0,0,0-.52474,1.07639c-.03849.22206-.291.27392-.38484.49287a3.24934,3.24934,0,0,1-.69655,1.15472.58586.58586,0,0,0-.19562.36726.71736.71736,0,0,1-.2318.47409,11.60433,11.60433,0,0,0-1.088,1.62136,6.85465,6.85465,0,0,0-1.063,1.36284c-.21565.47456-.72048.71628-.94815,1.14048-.1715.31956-.56882.448-.6114.83655a.0507.0507,0,0,1-.017.03382c-.66924.43469-.93557,1.25468-1.59987,1.68506-.26329.17057-.59721.26444-.75364.54742a2.76389,2.76389,0,0,1-1.17849,1.09835c-.39231.203-.56629.62869-.98175.77312-.12945.045-.09981.23749-.23493.32956a7.38783,7.38783,0,0,1-1.6006.85995c-.32477.1192-.46926.44472-.81072.54954a17.27,17.27,0,0,1-2.05127.60827c-.57027.1-1.16129.14229-1.72189.25514-.30637.06168-.73092-.16848-.958.2342a.89924.89924,0,0,0-.76623-.05155c-.47283.1204-.97092.10718-1.43681.19231a11.61484,11.61484,0,0,1-1.26888.04137c-.05109.004-.11886-.01437-.151.01182-.44906.36561-.95762.10124-1.4357.14907a22.843,22.843,0,0,1-2.322.00638c-.47945-.00079-.98353-.10322-1.47643-.08376a18.75811,18.75811,0,0,1-2.57016-.23767.61116.61116,0,0,1-.46889.02662,7.66734,7.66734,0,0,1-1.033-.22274c-.14814-.04322-.37571-.0435-.344-.30752.20133-.20982.44914-.12552.68882-.11492.727.03212,1.45429.05667,2.18144.0167.74163.01489,1.47628.13829,2.21866.15379.10127.00211.20268.03835.30524.03406,1.03928-.0435,2.07373.1348,3.11194.07767,1.12433-.06186,2.24743-.13288,3.36834-.26025,1.10707-.1258,2.21541-.24583,3.3219-.37663a10.11311,10.11311,0,0,0,4.742-1.98046,32.51407,32.51407,0,0,0,7.86674-8.40788,49.94772,49.94772,0,0,0,3.10735-5.263c.40692-.79852.79173-1.61058,1.13407-2.44114a1.15619,1.15619,0,0,1,.33754-.58959.08513.08513,0,0,1,.08839.06922.2057.2057,0,0,1-.033.177A16.83549,16.83549,0,0,1,148.2477,32.57313Z"/><path class="cls-27" d="M132.69108,50.98169a2.85122,2.85122,0,0,0,.97-.323,16.38384,16.38384,0,0,0,3.281-1.86653,26.65153,26.65153,0,0,0,3.08651-2.62642c.5762-.54839,1.12758-1.14166,1.67348-1.73043.64976-.70076,1.24055-1.44918,1.88-2.1569a21.266,21.266,0,0,0,1.76044-2.35926c.59459-.87625,1.15305-1.77693,1.73357-2.66282.14079-.21485.18579-.51047.48185-.60238a10.9656,10.9656,0,0,1-.46328,1.92339,40.71771,40.71771,0,0,1-3.39635,4.65641c-.66335.8172-1.35737,1.6108-2.09229,2.3597a24.76406,24.76406,0,0,1-1.905,1.79123c-1.06881.88057-2.10177,1.80189-3.25372,2.58273a12.81455,12.81455,0,0,1-5.5705,2.186c-1.10576.147-2.2035.3755-3.31092.49669a14.68121,14.68121,0,0,1-2.29174.20934c-.49885.01525-.99533.00854-1.49458.06765a11.5058,11.5058,0,0,1-2.02516-.166.18578.18578,0,0,1-.17149-.13344c.10047-.15869.26669-.138.41512-.13724.6913.00359,1.38013-.09613,2.07248-.04651a1.2164,1.2164,0,0,0,.27891-.00575c-.23486.01216-.47854.009-.722.00226-.12274-.00337-.24689-.041-.252-.18162-.00539-.14762.11145-.22.24437-.25554a.22394.22394,0,0,1,.11464-.00351,5.84678,5.84678,0,0,0,2.20455-.0283c.99771-.10544,1.99822-.18284,2.99041-.35449.91457-.15823,1.83818-.27156,2.75842-.40013A7.25026,7.25026,0,0,0,132.69108,50.98169Z"/><path class="cls-28" d="M148.47678,30.57166c-.41239.90673-.79564,1.82816-1.24413,2.71668-.63971,1.26731-1.32165,2.51253-2.06372,3.72555a43.19359,43.19359,0,0,1-3.67137,5.18324,31.52858,31.52858,0,0,1-3.88275,3.92249,18.32131,18.32131,0,0,1-3.031,2.13776,10.8828,10.8828,0,0,1-4.3576,1.206,25.19828,25.19828,0,0,0-2.84085.3423c-.38677.0776-.78631.0337-1.18278.0836a30.95328,30.95328,0,0,1-4.90538-.005,14.04221,14.04221,0,0,1-2.31845-.21193,3.86454,3.86454,0,0,1-1.53393-.18732c-.38815-.125-.76993-.26942-1.16034-.3898-.163-.05029-.40747-.08143-.31024-.37091a.41067.41067,0,0,1,.32712-.05719,5.06347,5.06347,0,0,0,1.47081.053c.6191.00989,1.20711.225,1.82217.27291,1.27633.09948,2.54574.275,3.82485.34834a31.75671,31.75671,0,0,0,4.5568-.2123c1.11086-.09587,2.22035-.21081,3.32734-.333a9.34072,9.34072,0,0,0,4.15041-1.63673,24.7394,24.7394,0,0,0,3.6461-3.06539,36.80168,36.80168,0,0,0,5.32948-6.79224,48.10432,48.10432,0,0,0,3.84461-7.65833c.05846-.14682.05172-.37572.30292-.38221a.48555.48555,0,0,1-.00286.305l-.02021.60118C148.47245,30.29149,148.57675,30.451,148.47678,30.57166Z"/><path class="cls-29" d="M73.06682,48.74368a21.82411,21.82411,0,0,1-1.61407-3.16934c-.09946-.22694-.01608-.29037.20212-.21886a.59486.59486,0,0,1,.22424.14611c.45813.45041,1.01478.77568,1.502,1.19257a2.025,2.025,0,0,0,1.97928.54614,7.24792,7.24792,0,0,1,1.208-.20551c.609.16277,1.24073.20351,1.85364.345a.33249.33249,0,0,1,.16409.2043,2.02222,2.02222,0,0,0,.4481.83532.2748.2748,0,0,1,.063.25191c-.20706.2749-.55933.2829-.83062.44369-.20611.12215-.276.19607-.19328.4671a6.39866,6.39866,0,0,0,.30361,1.24294.40046.40046,0,0,1-.048.46318.22952.22952,0,0,1-.25448-.01671,1.00549,1.00549,0,0,0-.80554-.14336.52942.52942,0,0,1-.42577-.142,8.27,8.27,0,0,0-2.02095-.91354,2.90189,2.90189,0,0,1-.97338-.59672A6.12912,6.12912,0,0,0,73.06682,48.74368Z"/><path class="cls-30" d="M148.55512,29.26227c-.6266,1.455-1.21663,2.92621-1.93327,4.34115a44.71082,44.71082,0,0,1-4.09737,6.7004,33.07006,33.07006,0,0,1-2.49771,3.00024A26.83065,26.83065,0,0,1,135.5079,47.252a9.70184,9.70184,0,0,1-4.19817,1.65274c-1.07146.12951-2.15693.15623-3.22237.319-1.21548.18569-2.44275.13322-3.65964.276a8.02556,8.02556,0,0,1-1.64013-.0887c-.56985-.05231-1.13584-.17382-1.70581-.19146a18.25738,18.25738,0,0,1-2.84129-.34994,2.47733,2.47733,0,0,0-.41725-.04447.09128.09128,0,0,1-.00651-.11068.90216.90216,0,0,1,.80426-.082,7.06508,7.06508,0,0,0,2.16225.13151,8.15274,8.15274,0,0,1,1.6.11805,3.82927,3.82927,0,0,0,1.92864.02232.67962.67962,0,0,1,.26731-.024,38.62478,38.62478,0,0,0,3.96332-.28986c.803-.0757,1.60556-.15951,2.40905-.22713a9.45445,9.45445,0,0,0,3.86159-1.32088c.90169-.50659,1.647-1.22232,2.52438-1.75435a.29627.29627,0,0,0,.08713-.07529c.49464-.68493,1.26638-1.079,1.80393-1.71846.40211-.47838.79028-.97516,1.23086-1.41247a15.07293,15.07293,0,0,0,1.51132-1.83623c.87089-1.18925,1.65913-2.43258,2.43653-3.68474.3293-.5304.67268-1.05956.97626-1.59977a21.669,21.669,0,0,0,1.44614-2.96879,14.88158,14.88158,0,0,1,1.047-2.34539,1.18982,1.18982,0,0,0,.14755-.47311,2.24323,2.24323,0,0,1,.32929-1.01532,1.00283,1.00283,0,0,0,.10773-.5562,3.0553,3.0553,0,0,1,.07535-1.02752q.05463-.05295.09316.0125l.00284,2.43058C148.56877,29.0873,148.63377,29.19755,148.55512,29.26227Z"/><path class="cls-31" d="M94.79179,8.17326A16.61389,16.61389,0,0,1,98.688,10.01711a1.17548,1.17548,0,0,0,.16865.0733.33067.33067,0,0,1,.17534.163c.21456.3628.60557.54466.87072.86058A10.36609,10.36609,0,0,1,102.137,16.5091c.19769,1.41144.14359,2.8366.24177,4.25269.092,1.327.1554,2.6556.26636,3.982a22.36482,22.36482,0,0,0,.86228,4.36423,11.77584,11.77584,0,0,0,.78748,1.95854,2.51923,2.51923,0,0,1,.19023.46043,1.86679,1.86679,0,0,0,.22136.48492.46959.46959,0,0,1,.04915.47158c-.24862.08442-.30631-.13095-.39048-.269a16.51989,16.51989,0,0,1-.97687-1.95936,12.13351,12.13351,0,0,0-.8058-1.2379,8.35835,8.35835,0,0,1-.48822-2.40215c-.071-.97184-.2265-1.93354-.28609-2.90631-.03284-.536-.07721-1.07486-.09837-1.60952-.04454-1.12558-.06217-2.254-.10694-3.37917a12.29371,12.29371,0,0,0-1.364-5.51533,8.5525,8.5525,0,0,0-4.37375-3.7619c-.50818-.21651-1.034-.38246-1.55189-.57118a8.73952,8.73952,0,0,0-1.2541-.29784.653.653,0,0,1-.52421-.32729c.04946-.25011.24079-.22215.41985-.20973a12.0891,12.0891,0,0,1,1.212.2046A.71474.71474,0,0,0,94.79179,8.17326Z"/><path class="cls-32" d="M104.41907,31.57285a18.45677,18.45677,0,0,1-1.92132-7.29483c-.10884-1.51407-.20855-3.0285-.25683-4.547-.01573-.49506-.03322-.99409-.05587-1.491a13.05622,13.05622,0,0,0-1.13327-5.15422,7.06852,7.06852,0,0,0-1.91307-2.55321c-.07911-.06281-.28137-.11488-.15856-.30462a.55645.55645,0,0,1,.43176.30211l.92786.63147c.1175.06036.2624.08732.29957.24561a11.35333,11.35333,0,0,1,.85555.82481,9.3291,9.3291,0,0,1,1.09757,3.45809,27.00512,27.00512,0,0,1,.26116,3.17516c.0416.96792.11235,1.93928.18539,2.90783.09355,1.24048.20543,2.47532.411,3.70158a20.81678,20.81678,0,0,0,1.5252,5.186,3.91758,3.91758,0,0,0,.56906.95525.56119.56119,0,0,1,.10737.65015,1.26374,1.26374,0,0,0,.41879.75215,8.79961,8.79961,0,0,0,2.04707,1.82033.67.67,0,0,1,.30741.27723c-.23973.15437-.41407-.02774-.58864-.13172a7.56852,7.56852,0,0,1-2.13265-2.00544,1.43788,1.43788,0,0,0-.49414-.4686A1.7617,1.7617,0,0,1,104.41907,31.57285Z"/><path class="cls-33" d="M105.65164,32.266c.03953-.40179-.26736-.64113-.44557-.93887a12.11781,12.11781,0,0,1-.928-2.099,19.66518,19.66518,0,0,1-.88735-3.47992c-.15485-.91638-.29186-1.83351-.37111-2.7622-.06817-.79894-.13883-1.60177-.18559-2.3991-.0415-.70765-.11683-1.41746-.11506-2.13067a16.48652,16.48652,0,0,0-.78934-5.07975,11.87874,11.87874,0,0,1-.43473-1.14455,8.36766,8.36766,0,0,1,1.38656,1.464,4.83522,4.83522,0,0,1,.41037,2.05656c.19307,2.65747.30547,5.32159.6403,7.967a27.99021,27.99021,0,0,0,.82314,3.99165c.04817.173.102.34443.13331.521a9.23193,9.23193,0,0,0,1.52766,3.53072A7.24876,7.24876,0,0,0,108.68,33.91351a14.19971,14.19971,0,0,0,1.99675.89186c.15221.05622.37724.05173.3674.31019-.19074.162-.37057.00288-.53351-.04517a8.04279,8.04279,0,0,1-3.58276-2.11373,6.7875,6.7875,0,0,0-1.18589-.74183C105.72955,32.20627,105.68252,32.24783,105.65164,32.266Z"/><path class="cls-34" d="M104.80425,28.338a34.12914,34.12914,0,0,1-.986-4.50682c-.12585-.84095-.15167-1.69635-.25046-2.542-.14173-1.21332-.12683-2.43818-.29513-3.6498-.0735-.52918-.01121-1.06664-.06328-1.60467-.0761-.7863-.20336-1.56142-.32788-2.33879a6.87847,6.87847,0,0,1,1.00535,1.2369.507.507,0,0,0-.07332.50888,11.278,11.278,0,0,1,.06922,1.56888c.0667.90112.15131,1.80091.22841,2.70125.08427,1.08941.17845,2.17761.3536,3.25729.126.77658.16156,1.56453.331,2.33708.27284,1.24425.60919,2.471.962,3.69356a6.11756,6.11756,0,0,0,2.618,3.51192c.22358.1465.44376.29818.66551.44746.06865.06391.17145.07662.2311.154a15.99893,15.99893,0,0,0,4.27325,1.23154c.60272.08737,1.20829.15514,1.81255.23183.05757.10476-.01837.165-.077.23106l-.23111.0772a3.15389,3.15389,0,0,1-1.134.02051,19.52773,19.52773,0,0,1-4.25142-1.16469,14.49944,14.49944,0,0,1-2.326-1.14871,5.01068,5.01068,0,0,1-1.60015-2.02789C105.39212,29.83643,105.13971,29.06992,104.80425,28.338Z"/><path class="cls-35" d="M146.71142,39.89043a5.62425,5.62425,0,0,1-.39789,1.23567,17.12,17.12,0,0,1-1.91484,2.54432,39.62619,39.62619,0,0,1-3.11974,3.44832,17.31867,17.31867,0,0,1-1.86945,1.5957c-.75335.55355-1.45456,1.17413-2.21214,1.72654a15.55454,15.55454,0,0,1-7.331,2.87819c-1.11816.14288-2.23274.3243-3.34217.53385a22.11521,22.11521,0,0,1-2.31921.23237,1.41975,1.41975,0,0,1-.60679-.032c-.12589-.24912-.05988-.39248.23-.45628.16925-.03725.3517-.02792.47222-.185.83931-.17726,1.69609-.23553,2.54226-.36864,1.64625-.259,3.29263-.512,4.92977-.82969a13.60078,13.60078,0,0,0,5.50948-2.60931,36.83694,36.83694,0,0,0,5.06454-4.53631,44.52769,44.52769,0,0,0,3.94646-4.91287c.10151-.146.1616-.36451.41324-.33072.00522.0007.011.01817.01146.02807A.17125.17125,0,0,1,146.71142,39.89043Z"/><path class="cls-36" d="M146.71142,39.89043c-.18891-.06421-.193.11189-.25548.20266-.72443,1.05256-1.48348,2.08223-2.29812,3.06373a44.01132,44.01132,0,0,1-3.2085,3.46409,37.719,37.719,0,0,1-4.27118,3.54794,13.89874,13.89874,0,0,1-3.36086,1.75054,16.50294,16.50294,0,0,1-3.04993.67883c-1.59613.25752-3.19195.51717-4.79022.76075-.38968.05939-.78837.0598-1.18291.08733a1.78043,1.78043,0,0,1-1.07323.16621c-.9369-.12685-1.8812-.13657-2.82156-.20658-.30724-.02288-.64415.0014-.80879-.3552a1.052,1.052,0,0,1,.78139-.08607,6.04642,6.04642,0,0,0,1.607-.00331,6.6506,6.6506,0,0,1,.99777-.01689,12.97032,12.97032,0,0,0,2.39592-.19133,30.24977,30.24977,0,0,0,3.05332-.32095c1.32039-.20644,2.64177-.40646,3.95347-.66983a9.86574,9.86574,0,0,0,2.52968-.98306,17.435,17.435,0,0,0,3.46411-2.38915c.859-.7442,1.73367-1.47169,2.54793-2.27147a46.53757,46.53757,0,0,0,5.26562-6.31247,5.98462,5.98462,0,0,1,.90778-1.22881A5.6038,5.6038,0,0,1,146.71142,39.89043Z"/><path class="cls-37" d="M73.06682,48.74368c.12777-.05487.129-.05615.24925.06265A3.766,3.766,0,0,0,74.70423,49.932c.56419.17616,1.08088.45455,1.63674.63843a1.34977,1.34977,0,0,1,.46082.266A.60482.60482,0,0,0,77.46216,51c.33852-.11991.5586.19626.84189.28974a1.02782,1.02782,0,0,1,.39369.22921.91308.91308,0,0,0,.73878.24089.3063.3063,0,0,1,.33132.14624c-.03541.20028-.086.39938-.10179.60119a.44518.44518,0,0,1-.24954.3909.49976.49976,0,0,0-.23236.78826,1.10956,1.10956,0,0,1,.04414.4532,1.7619,1.7619,0,0,1-1.4494-.44078c-.29142-.279-.76047-.1647-1.115-.364a2.52819,2.52819,0,0,1-.46767-.23529c-.066-.05618-.21608-.22265-.27788.03177-.91231-1.17223-1.68885-2.43627-2.4861-3.686C73.291,49.22393,73.18767,48.97821,73.06682,48.74368Z"/><path class="cls-38" d="M133.0008,60.07318a22.18137,22.18137,0,0,1-1.84216,1.54044c-.80875.634-1.64837,1.22859-2.47468,1.84017a2.47794,2.47794,0,0,0-1.65044.05836,1.47462,1.47462,0,0,1-.90652.01113c-.21637-.145-.02982-.44891-.23933-.60956-.04163-.03192.04051-.14807.11689-.16817.31782-.08363.43965-.37944.6381-.58749.21533-.22575.15478-.37542-.162-.44146-.1873-.03906-.37688-.0718-.56806-.0931-.09621-.01072-.21273-.00164-.24678-.13464a3.02321,3.02321,0,0,1,1.40876-.42224c.356-.047.70578-.122,1.05815-.18582a1.1234,1.1234,0,0,0,.61687-.28547c.21412-.21081.52-.1992.77194-.319a6.65855,6.65855,0,0,1,2.84139-.5332C132.60138,59.75169,132.92676,59.69987,133.0008,60.07318Z"/><path class="cls-39" d="M76.84062,9.95466A7.32113,7.32113,0,0,1,78.45584,9.076c.32112.55329.88748.45965,1.38938.51a2.798,2.798,0,0,1,.86.16609c.16724.07281.33106.16238.35718.36606.02442.19044.12661.22815.29272.19315a.64622.64622,0,0,1,.45065.02154,2.98093,2.98093,0,0,0,1.37788.26788,24.24153,24.24153,0,0,1,2.64759.41875.16754.16754,0,0,1,.11465.09417.46414.46414,0,0,1-.5294.43478.63386.63386,0,0,0-.36349.10758.62224.62224,0,0,1-.3357.05594,17.78213,17.78213,0,0,0-3.66207.09591,8.46876,8.46876,0,0,1-2.86041-.18685.7767.7767,0,0,1-.47135-.24455c-.28869-.30936-.56779-.62768-.84413-.948C76.75989,10.29,76.66251,10.12778,76.84062,9.95466Z"/><path class="cls-40" d="M141.07493,51.675a14.6887,14.6887,0,0,1-1.21722,1.69933,17.97155,17.97155,0,0,1-4.84748,2.76691,19.321,19.321,0,0,1-3.50809.97452,23.71784,23.71784,0,0,0-3.33849.87583c-.9746.14521-1.94854.29333-2.934.34425a3.75043,3.75043,0,0,0-.79123.04561,1.98722,1.98722,0,0,1-1.37565-.2951c.00829-.234.20512-.18908.33677-.21053.84584-.1379,1.67719-.358,2.53124-.44674a27.5192,27.5192,0,0,0,3.62773-.67071q1.06575-.26166,2.14782-.44093a15.01447,15.01447,0,0,0,4.78224-1.84444c1.441-.79541,2.76937-1.7586,4.14877-2.64567C140.76722,51.74378,140.87633,51.5722,141.07493,51.675Z"/><path class="cls-41" d="M141.07493,51.675c-.63763.421-1.28635.82631-1.91033,1.26665-.97214.686-2.01444,1.25129-3.04466,1.83991a13.37105,13.37105,0,0,1-3.60738,1.47512c-1.05434.24432-2.13166.38881-3.18154.65844-.96429.24764-1.944.40839-2.92465.56923a2.90923,2.90923,0,0,1-.41738.044,2.90134,2.90134,0,0,0-.90241-.01459c-.5548.10944-1.09671-.07036-1.64414-.00456a.36131.36131,0,0,1-.31066-.12389c-.01023-.146.10439-.16312.20129-.17874,1.31285-.21159,2.62942-.398,3.9468-.57554,1.71825-.41676,3.47156-.66414,5.19532-1.0502a14.52909,14.52909,0,0,0,4.44409-1.97872,21.16168,21.16168,0,0,0,2.86284-2.07226c.64067-.56436,1.436-.93638,2.06969-1.52368.13652-.12652.15555-.106.31751-.02C141.83541,50.56908,141.465,51.12841,141.07493,51.675Z"/><path class="cls-42" d="M126.60528,53.7546c.757-.17373,1.52644-.27337,2.29379-.38534a17.11263,17.11263,0,0,0,6.50111-1.901,31.98047,31.98047,0,0,0,3.53466-2.49569,30.93388,30.93388,0,0,0,3.17644-2.83051c.95035-1.00054,1.83791-2.05649,2.698-3.13542q.75056-.94151,1.50423-1.88053a10.71143,10.71143,0,0,1-.60427,1.68955,40.27266,40.27266,0,0,1-4.31059,4.79408,25.00917,25.00917,0,0,1-2.29128,1.92462,31.55283,31.55283,0,0,1-3.58429,2.52044,11.79782,11.79782,0,0,1-3.62138,1.363c-1.62684.29967-3.2553.59215-4.90392.75109a.58594.58594,0,0,1-.22937-.00574A.43289.43289,0,0,1,126.60528,53.7546Z"/><path class="cls-43" d="M92.55579,8.23593c.3514.30749.81362.26251,1.22516.37434a4.14415,4.14415,0,0,1,.54648.16493,1.13547,1.13547,0,0,0,.67417.467,4.10576,4.10576,0,0,1,.8014.35541c.14833.0787.30155.16292.28168.36625a.37414.37414,0,0,1-.32439.3288.70788.70788,0,0,1-.36647-.09755,9.82322,9.82322,0,0,0-3.44416-.871,12.22285,12.22285,0,0,1-4.23395-.85951A5.34745,5.34745,0,0,1,85.86011,7.405c-.17144-.17764-.25932-.3247.04027-.44982a6.13431,6.13431,0,0,0,1.13208-.0215,4.40877,4.40877,0,0,1,1.136.0828,2.05081,2.05081,0,0,1,.80356.17186,18.73535,18.73535,0,0,0,2.87532.79517A1.2075,1.2075,0,0,1,92.55579,8.23593Z"/><path class="cls-44" d="M144.7068,45.20157a12.03765,12.03765,0,0,1-.69357,1.46238,22.80941,22.80941,0,0,1-3.54025,3.39856,29.149,29.149,0,0,1-5.34378,3.61825,11.91127,11.91127,0,0,1-3.23372,1.09683c-.68341.11486-1.35514.29058-2.03882.40549a.97418.97418,0,0,1-.3824.01524,8.955,8.955,0,0,0-2.12634.13872c-.25086.02749-.50246.08453-.75478.11734-.1449.01884-.314.0502-.39-.14285a.29268.29268,0,0,1,.2415-.1675c.97748-.11679,1.89892-.50074,2.8789-.60213,1.11659-.28738,2.27178-.38867,3.3824-.71362a13.98577,13.98577,0,0,0,3.05319-1.33767c1.19112-.6858,2.25446-1.5579,3.38862-2.32155a32.03228,32.03228,0,0,0,3.33022-2.8215,19.66387,19.66387,0,0,0,1.746-1.88388c.12724-.14783.229-.34748.47563-.3271.00528.00044.0122.01746.013.02716A.16015.16015,0,0,1,144.7068,45.20157Z"/><path class="cls-45" d="M144.7068,45.20157c-.20664-.03007-.27951.15451-.364.267a21.02991,21.02991,0,0,1-1.70328,1.86308,19.08609,19.08609,0,0,1-2.07168,1.86875c-.00993.00769-.02463.00952-.034.01769a39.94234,39.94234,0,0,1-3.20127,2.389,18.34558,18.34558,0,0,1-3.29555,1.85242,16.49658,16.49658,0,0,1-3.83693.98333,2.3663,2.3663,0,0,1-.82156.15878c-1.05723.08336-2.09572.31145-3.15129.40764a.905.905,0,0,1-.37966-.02643c-.0963-.19153-.05769-.28658.19754-.30146a8.4733,8.4733,0,0,0,1.3596-.25841c1.3897-.31148,2.78973-.57042,4.19151-.81833a12.17778,12.17778,0,0,0,3.18-1.13142,20.47787,20.47787,0,0,0,3.62179-2.32363,37.13751,37.13751,0,0,0,4.1256-3.56256q1.34126-1.40472,2.5856-2.89973c.09388-.11328.16049-.275.35462-.25048A16.013,16.013,0,0,1,144.7068,45.20157Z"/><path class="cls-46" d="M85.93075,11.16261a18.72282,18.72282,0,0,0-2.88592-.45961,2.36436,2.36436,0,0,1-1.28918-.289c-.17518-.11107-.34005.01148-.51042.03645-.15641.02292-.38161.08615-.27681-.222.06227-.18306-.041-.25548-.177-.32573a1.95167,1.95167,0,0,0-.81022-.20524c-.35648-.01855-.71294-.04413-1.0681-.07981-.31912-.032-.39168-.28752-.45725-.54169a8.19984,8.19984,0,0,1,1.85644-.81651,8.04727,8.04727,0,0,1,2.60071.90068,2.91058,2.91058,0,0,0,.94894.29773,1.76954,1.76954,0,0,1,.88622.34571.97662.97662,0,0,0,.41472.19432,15.54676,15.54676,0,0,1,1.58863.569,2.038,2.038,0,0,0,.73813.44825c.1.04153.34255.08015.128.28823-.47049-.00175-.9399-.03307-1.41013-.03428A.34772.34772,0,0,1,85.93075,11.16261Z"/><path class="cls-47" d="M76.53205,47.13073c-.49932.09393-.99609.20579-1.49858.2775a2.34143,2.34143,0,0,1-1.79976-.689c-.527-.41573-1.04917-.83761-1.57027-1.26073-.17933-.14561-.21545-.059-.21069.11581a15.47856,15.47856,0,0,1-1.08064-2.534.14208.14208,0,0,1-.00594-.20483c.07372-.06332.15028-.00037.19439.059a10.83823,10.83823,0,0,0,2.741,2.16462,1.584,1.584,0,0,0,1.59372.22146c.47136-.07154.92776.1396,1.40014.07278a.2044.2044,0,0,1,.18891.11168,2.9577,2.9577,0,0,0,.22439,1.07129A.43626.43626,0,0,1,76.53205,47.13073Z"/><path class="cls-48" d="M69.62251,41.11829c-.29757-.90836-.58652-1.81909-.82277-2.74612-.02885-.11323-.02216-.22421-.04657-.33392-.077-.11688-.01922-.16609.09447-.169a.498.498,0,0,1,.35673.11974c.55676.53132,1.27206.85366,1.82331,1.39091a5.30539,5.30539,0,0,0,1.66264,1.83154.703.703,0,0,1,.20188.2252c.27327.52009.50674,1.06.79606,1.57232.07654.13552.19529.2856.06.458-.2391.10473-.46677-.01817-.69978-.03419a12.79536,12.79536,0,0,1-3.2716-2.20422A.59511.59511,0,0,0,69.62251,41.11829Z"/><path class="cls-49" d="M85.8535,7.01828c-.194.11714-.05906.20144.03173.28353a5.88283,5.88283,0,0,0,2.20553,1.16977,11.61449,11.61449,0,0,0,1.90991.54607c.66723.096,1.34218.16524,2.01.20055a9.8531,9.8531,0,0,1,3.3912.86379c.12843.0551.25931.1045.389.15654a7.77668,7.77668,0,0,1,.8994.49167c.12322.07693.27772.14516.27082.33482a.23229.23229,0,0,1-.31054.06715,12.43885,12.43885,0,0,0-2.61211-.729,16.22877,16.22877,0,0,1-1.696-.27034,8.3362,8.3362,0,0,1-.98108-.16494A23.497,23.497,0,0,1,87.54108,9.214a8.72176,8.72176,0,0,1-.97631-.33323c-.29665-.14827-.59382-.29628-.90345-.41739a.73018.73018,0,0,1-.30641-.15247,2.61655,2.61655,0,0,0-1.405-.70734c-.13539-.04069-.30738-.07784-.32587-.275l.30364-.09581a.17959.17959,0,0,1,.23094-.01089l1.61811-.228A.05009.05009,0,0,1,85.8535,7.01828Z"/><path class="cls-50" d="M145.46387,43.43678q-.82291.932-1.64623,1.8636a23.66334,23.66334,0,0,1-2.122,2.21027c-.57785.50217-1.0939,1.08007-1.71642,1.53063-1.2882.93235-2.47142,2.00467-3.85412,2.81291a22.02235,22.02235,0,0,1-3.25867,1.53236,12.9026,12.9026,0,0,1-2.3098.51434c-1.31516.24191-2.63163.4782-3.926.81525-.28992.07549-.63167-.08607-.87275.19315a.32521.32521,0,0,1-.23948.1062,24.0001,24.0001,0,0,1-3.25875.0623c-.57227-.10007-1.1603-.06523-1.729-.19968-.1572-.03717-.336-.02541-.41435-.21314.058-.17506.21458-.16832.34981-.173a6.34718,6.34718,0,0,0,1.71708-.14978,1.14859,1.14859,0,0,1,.46-.00718,14.79479,14.79479,0,0,0,3.67221-.23417c.15125-.02046.30433-.0705.444.03862.5277-.077,1.05622-.14891,1.583-.232a21.09637,21.09637,0,0,0,6.47675-1.57662,20.47848,20.47848,0,0,0,3.06779-1.95888,37.5806,37.5806,0,0,0,5.08925-4.4764q1.33371-1.45449,2.574-2.99022c.04005-.04961.045-.16884.15916-.0897Z"/><path class="cls-51" d="M128.223,57.91323a.27923.27923,0,0,1,.20482-.15375c.97626-.24707,1.94-.567,2.92982-.73064a21.82817,21.82817,0,0,0,2.998-.76231,17.84664,17.84664,0,0,0,3.69676-1.7509,16.03384,16.03384,0,0,0,1.52132-1.03026c.06929-.05254.14191-.20344.284-.11107a14.006,14.006,0,0,1-2.23464,2.46314,18.92335,18.92335,0,0,1-2.61966,1.27625,12.91124,12.91124,0,0,1-2.58585.72908,8.66635,8.66635,0,0,0-2.82568.3551,2.33616,2.33616,0,0,1-.78408.13664C128.64611,58.14863,128.31793,58.19258,128.223,57.91323Z"/><path class="cls-52" d="M76.84062,9.95466c-.00578.07387-.04623.18209-.01215.21645.52192.52629.80344,1.33772,1.70438,1.41809.46843.04179.93167.14189,1.4001.18379a3.11634,3.11634,0,0,0,1.06734-.07093,1.26809,1.26809,0,0,0,.69464.18669,11.968,11.968,0,0,1,2.74294.25893,2.1025,2.1025,0,0,1,1.21477.47241c-.046.19111-.20029.15736-.33763.16573-.59515.03624-1.193.026-1.78583.10327a23.1,23.1,0,0,0-2.46856.20258,1.44,1.44,0,0,0-.53292-.05205,4.7112,4.7112,0,0,1-2.10174-.34625,1.3957,1.3957,0,0,0-.56188-.11292.79459.79459,0,0,1-.80516-.40913,1.49917,1.49917,0,0,0-.50093-.469,2.04639,2.04639,0,0,1-.6763-.91559.19036.19036,0,0,1,.03477-.21495Z"/><path class="cls-53" d="M142.16932,49.98612c-.27818-.0201-.4137.20765-.57193.3618-.45439.44267-1.05407.67657-1.52588,1.08192a24.3938,24.3938,0,0,1-2.89542,2.12738,15.74783,15.74783,0,0,1-6.34216,2.45218,23.74453,23.74453,0,0,0-3.24567.66308c-.06611.01856-.1393.08235-.21263.00863-.14929-.07423-.383-.0353-.39471-.29425a.27274.27274,0,0,1,.19279-.11276c1.14616-.18777,2.22435-.64955,3.37073-.83467a3.19761,3.19761,0,0,0,.48037-.12268,16.32107,16.32107,0,0,0,2.78836-.70458,20.02321,20.02321,0,0,0,4.32856-2.39047,45.74269,45.74269,0,0,0,4.24651-3.48188,3.421,3.421,0,0,1,.45585-.35232c.077-.0494.20494-.16739.24491.04895A12.65224,12.65224,0,0,1,142.16932,49.98612Z"/><path class="cls-54" d="M143.089,48.43645c-.06662-.08769-.128-.04877-.19134.006-.56908.492-1.14169.97988-1.70742,1.47565a30.68639,30.68639,0,0,1-5.12458,3.73353,14.64976,14.64976,0,0,1-3.41784,1.43478,9.08739,9.08739,0,0,1-1.57449.2854c-.89241.19554-1.81121.17949-2.70869.33628a.51225.51225,0,0,1-.33264-.05711c-.13981-.24544.0862-.2754.21489-.32715a2.85272,2.85272,0,0,1,1.28574-.18308,28.75483,28.75483,0,0,0,4.34561-1.01719,19.65521,19.65521,0,0,0,4.51447-2.57777,38.35238,38.35238,0,0,0,5.21469-4.49528c.12662-.13228.17188-.36431.40583-.38653A15.04484,15.04484,0,0,1,143.089,48.43645Z"/><path class="cls-55" d="M126.066,63.45861a4.14282,4.14282,0,0,0,1.3084-.16339,1.23058,1.23058,0,0,1,1.30953.15857c-1.51566,1.12835-3.08655,2.17476-4.69633,3.16344a2.77072,2.77072,0,0,1,.88825-1.371.18958.18958,0,0,0,.12559-.20533,2.41863,2.41863,0,0,1-1.78575-.0417,4.06841,4.06841,0,0,1,1.23648-1.70644c.08371-.06255.18856-.14282.27775-.11135C125.164,63.33458,125.63673,63.29205,126.066,63.45861Z"/><path class="cls-56" d="M133.0008,60.07318a1.537,1.537,0,0,0-1.33909-.21262,6.84642,6.84642,0,0,0-2.12908.51747,11.46608,11.46608,0,0,1-1.646.25037,2.07649,2.07649,0,0,1-1.08631-.11323c-.08906-.28041-.03135-.392.33705-.456a.779.779,0,0,0,.6687-.49072.9781.9781,0,0,1,.60051-.21184,6.6471,6.6471,0,0,0,1.55531-.36873,13.06129,13.06129,0,0,1,1.41676-.30239,9.73651,9.73651,0,0,0,3.55343-.71005c.12366-.05024.29549-.13849.37479.08534A19.3589,19.3589,0,0,1,133.0008,60.07318Z"/><path class="cls-57" d="M86.70108,10.62358a11.43744,11.43744,0,0,1-2.21427-.87118.78.78,0,0,0-.31818-.12567,7.48264,7.48264,0,0,1-2.34912-.88094,6.228,6.228,0,0,0-1.24873-.34763c-.10307-.02558-.2002-.03959-.2585-.13866a6.48677,6.48677,0,0,1,1.83979-.57109.21574.21574,0,0,1,.07384.018,14.4358,14.4358,0,0,0,3.01022,1.05571.81445.81445,0,0,1,.20439.10211,1.72093,1.72093,0,0,0,1.14668.63246c.83474.20353,1.61643.57557,2.45914.75119.12734.02654.29195.04781.289.24568a.40237.40237,0,0,1-.411.22512C88.18318,10.68994,87.44165,10.66765,86.70108,10.62358Z"/><path class="cls-58" d="M73.29507,12.77577a4.25045,4.25045,0,0,1,.92627-.84184.45963.45963,0,0,1,.22237.29691,2.27059,2.27059,0,0,0,1.67275,1.66008,1.311,1.311,0,0,1,.40961.20267.65248.65248,0,0,0,.47165.12134c.415-.07469.84089-.0079,1.25269-.10888a4.8266,4.8266,0,0,1,.71719.07554.876.876,0,0,1,.324.27249c.15742.26849.03855.42976-.227.46751-.79619.11317-1.57823.30664-2.37605.40672a1.179,1.179,0,0,0-.54371.16146c-.28257.18981-.59455.06921-.89577.055a.72822.72822,0,0,1-.52224-.408.82848.82848,0,0,0-.18378-.243A10.59352,10.59352,0,0,1,73.32124,13.057C73.26367,12.97324,73.21605,12.8775,73.29507,12.77577Z"/><path class="cls-59" d="M67.76878,23.25483A8.85088,8.85088,0,0,1,68.28347,21.25c.32532-.145.62136-.41194,1.02179-.246a1.38354,1.38354,0,0,1,.64159.7806c.06509.24787.28463.38721.473.54044.16011.13027.33016.25107.33474.48731a5.069,5.069,0,0,0-.24709.95839,3.319,3.319,0,0,1-.43115.68805c-.3033.22616-.66432.15239-1.00364.19324a.99763.99763,0,0,1-.659-.51533C68.226,23.82726,67.97967,23.55223,67.76878,23.25483Z"/><path class="cls-60" d="M71.061,15.47131A11.35678,11.35678,0,0,1,72.446,13.697c.03789.00713.08457.01418.1027.04459a9.719,9.719,0,0,1,1.29892,2.26854,1.44679,1.44679,0,0,0,.17974.648c.08595.17275.10738.33913-.09271.45715a1.33143,1.33143,0,0,0-1.43423.41976c-.10335.09006-.219.18851-.38.12223a15.495,15.495,0,0,1-1.05793-1.82778A.30317.30317,0,0,1,71.061,15.47131Z"/><path class="cls-61" d="M69.62251,41.11829c.077-.0509.13289-.02427.20035.03252.44525.37487.89567.74361,1.34319,1.11579a10.934,10.934,0,0,0,1.25.72159,2.88841,2.88841,0,0,1,.57257.3686c.22945.0996.30522.33344.44077.513.1994.26415.38734.537.5837.80374a1.06271,1.06271,0,0,0,.60731.49112.27369.27369,0,0,1,.21726.195,1.29847,1.29847,0,0,1-1.43721-.12357,20.03056,20.03056,0,0,1-2.45186-1.73,1.35316,1.35316,0,0,1-.42726-.53187c-.01852-.04646-.044-.14255-.12735-.07774-.02779.0216-.01572.09445-.02186.14387a3.54168,3.54168,0,0,1-.37091-.88245A10.46189,10.46189,0,0,1,69.62251,41.11829Z"/><path class="cls-62" d="M67.3514,26.87892l.0205-.908c.07905-.17914-.00849-.37519.05645-.55576l.02644-.46538a.66219.66219,0,0,1,.65677.20617,1.1139,1.1139,0,0,0,.58305.26477c.87917.37166,1.05494,1.159,1.17134,1.98183a1.25693,1.25693,0,0,1-.84445.60742,6.78435,6.78435,0,0,1-1.43737.07753c-.09564-.0135-.2098.02255-.255-.1083A9.68465,9.68465,0,0,1,67.3514,26.87892Z"/><path class="cls-63" d="M135.30686,58.06082c-.13563-.15016-.27191-.02087-.383.02375a9.72665,9.72665,0,0,1-2.19435.61408,12.58469,12.58469,0,0,1-1.348.062.96005.96005,0,0,1-.08319-.4087c-.0278-.25815.09827-.39038.34334-.47158.26963-.08934.56011.01021.81834-.121a16.94853,16.94853,0,0,0,2.48847-.73624,14.72051,14.72051,0,0,0,2.40988-1.1681c.071-.04892.16845-.1487.26475-.0176A20.80478,20.80478,0,0,1,135.30686,58.06082Z"/><path class="cls-64" d="M75.91646,10.57176A1.81222,1.81222,0,0,0,76.72,11.67819c.27183.13271.37913.40572.56323.61243.06842.07683.11461.18861.23038.17419a4.05174,4.05174,0,0,1,1.44429.29761,3.96385,3.96385,0,0,0,1.68417.177.3414.3414,0,0,1,.35821.07175.35091.35091,0,0,1-.28537.16744,27.69242,27.69242,0,0,1-3.368.33022,3.31468,3.31468,0,0,1-.34244-.01575.56436.56436,0,0,1-.3163-.124,8.44389,8.44389,0,0,1-1.59781-1.62379c-.09079-.14424-.23532-.28819-.09841-.48338A5.11209,5.11209,0,0,1,75.91646,10.57176Z"/><path class="cls-65" d="M68.3117,36.34338l-.4514-2.46718c.033-.11586.13494-.15017.20744-.0886.4184.35533.99491.41207,1.41453.76069a2.60322,2.60322,0,0,1,.34975.84c.1653.53468.60371.90469.7818,1.42247a1.01492,1.01492,0,0,1-.041.73373.86537.86537,0,0,1-.90823-.20032C69.23692,36.97468,68.77048,36.66609,68.3117,36.34338Z"/><path class="cls-66" d="M67.52542,31.324l-.01965-.37093a1.71537,1.71537,0,0,1-.024-.43734A2.05062,2.05062,0,0,1,67.573,29.654c.08827-.17765.17809-.28411.40656-.24315a3.17643,3.17643,0,0,1,.93314.152,1.26254,1.26254,0,0,1,.4527.64721,2.46593,2.46593,0,0,0,.10606,1.32028c.10474.34436-.0014.71007.10707,1.05556a.15053.15053,0,0,1-.08157.15988,2.61511,2.61511,0,0,1-1.91017-1.14914C67.53573,31.51267,67.58246,31.40669,67.52542,31.324Z"/><path class="cls-67" d="M128.7694,86.95128c-.00928.14011-.02668.28023-.0267.42034q-.002,12.51152-.011,25.023c-.0006.38327.10488.45875.46557.4513,1.18032-.0244,2.36154-.01658,3.54221-.00335.25644.00288.34767-.04581.3474-.32848q-.01219-12.66547-.00735-25.331c0-.0766-.01056-.15319-.01619-.22979.14675.10314.0877.25794.08775.39032q.00417,12.57035.00993,25.14067c.00038.34179-.09261.43486-.43145.42909q-1.79012-.03052-3.581.00061c-.36751.007-.47339-.09245-.47242-.46659q.01876-7.238.00828-14.47609,0-5.29378.003-10.58757C128.68762,87.23863,128.6228,87.07222,128.7694,86.95128Z"/><path class="cls-68" d="M68.3117,36.34338c.27408-.0402.43228.17691.6096.30975a8.71552,8.71552,0,0,1,.83673.65369c.17865.171.505.18774.76526.27343a.15064.15064,0,0,1,.17552.03153c.38727.348.749.72351,1.14673,1.0605a.19812.19812,0,0,1,.07043.239,1.74465,1.74465,0,0,0-.1118.15408c-.23018.42963-.33583.47654-.81851.3636-.55913-.48185-1.24075-.79879-1.77165-1.32345-.0954-.09428-.27337-.29549-.46084-.0673A12.50431,12.50431,0,0,1,68.3117,36.34338Z"/><path class="cls-69" d="M74.992,11.26191A2.80759,2.80759,0,0,0,76.13715,12.745c.2767.20389.42261.558.78027.65137.08316.05784.185.09918.21772.20649.06041.19813.21056.232.39034.2341a.85577.85577,0,0,1,.70154.33009c-.6531.08321-1.31764.36843-1.93911-.1126a.29249.29249,0,0,0-.14235-.05085,2.35345,2.35345,0,0,1-1.55337-1.12737c-.21966-.27658-.20642-.64429-.37085-.94231A3.28557,3.28557,0,0,1,74.992,11.26191Z"/><path class="cls-70" d="M73.759,16.015c-.14564-.70105-.70022-1.17622-.99459-1.7959A5.62028,5.62028,0,0,0,72.446,13.697a5.926,5.926,0,0,1,.84905-.92122,9.51589,9.51589,0,0,0,1.32929,2.05847c.20734.20741.26382.555.59864.64164a.435.435,0,0,1,.09767.45765,5.22844,5.22844,0,0,0-.67944.19388C74.357,16.24844,74.06007,16.02343,73.759,16.015Z"/><path class="cls-71" d="M67.60117,31.57294c.01265.00147.032-.00185.037.00511a3.84853,3.84853,0,0,0,1.807,1.14984c.21464.10589.22583.33.28685.5176a4.18853,4.18853,0,0,1,.241.92345c-.08858.24893-.22019.44283-.52821.40812-.45836-.26716-1.0229-.32993-1.41082-.73592-.04873-.051-.119.00366-.17372.03507-.118-.71422-.22132-1.43033-.27658-2.15261A.1116.1116,0,0,1,67.60117,31.57294Z"/><path class="cls-72" d="M92.55579,8.23593a18.867,18.867,0,0,1-3.95548-1.097c-.14323-.0621-.31167-.00312-.43185-.12247l.16082-.04246a3.78373,3.78373,0,0,1,.75609.01592l.3746.01852c.12347.07653.26983-.00106.39578.05874.97491.155,1.95709.26575,2.92221.4803.09573.0552.24293-.05721.30893.09482a15.14264,15.14264,0,0,1,1.70489.531c-.07123.388-.374.21746-.55717.18827-.4485-.07147-.89177-.17635-1.34375-.23743A.33717.33717,0,0,0,92.55579,8.23593Z"/><path class="cls-73" d="M71.061,15.47131a1.20379,1.20379,0,0,0,.2398.5949c.28591.51889.561,1.04374.8404,1.56623.1925.262.35529.5277.10808.84574-.45551-.06694-.88708-.25231-1.35192-.27683a3.08271,3.08271,0,0,1-.71293-.941.50568.50568,0,0,1,.03-.47772A8.37128,8.37128,0,0,1,71.061,15.47131Z"/><path class="cls-67" d="M164.46326,94.43542c-.04432.05941-.11112.092-.147.01611a.59628.59628,0,0,1-.01482-.22767c-.01434-.66011-.0142-.66012-.6613-.66012-1.12887,0-2.25781.00685-3.38656-.00554-.23583-.00258-.29944.0585-.29917.29765q.01035,9.34962-.00065,18.69925c-.00032.25522.09144.28774.31.28613,1.23143-.009,2.46315-.01608,3.69433.004.307.005.34953-.10016.34888-.37093q-.01282-5.38663-.0036-10.77331a.84848.84848,0,0,1,.04124-.452q.00438,5.677.01279,11.35421c.00054.23991-.08691.30733-.31545.306-1.28322-.00773-2.56664-.01357-3.8497.0026-.35885.00453-.30783-.21143-.30782-.42784q.00027-4.73425-.00013-9.46851c0-3.02788.00675-6.05578-.00823-9.08358-.00181-.36487.111-.449.45594-.44346q1.80894.0292,3.61858.00051c.321-.00468.43339.08949.411.41093C164.3493,94.076,164.26863,94.28905,164.46326,94.43542Z"/><path class="cls-74" d="M85.39131,8.92912a9.46466,9.46466,0,0,0-1.60971-.46668,4.19062,4.19062,0,0,1-1.62953-.774A5.82331,5.82331,0,0,1,83.624,7.32859a.88789.88789,0,0,0,.2637.149c1.02037.16108,1.71262.98981,2.65915,1.29751-.03457.3169-.26716.2455-.45287.21125A1.40021,1.40021,0,0,0,85.39131,8.92912Z"/><path class="cls-75" d="M68.90592,29.64728c-.32724-.166-.70285-.02548-1.03538-.16412-.13285-.05539-.14441.06965-.17891.14219a1.81476,1.81476,0,0,0-.18362.89067.04856.04856,0,0,1-.05992-.03733l-.01951-.45c-.0652-.18083.02207-.37712-.05645-.55659l-.0205-.90669a.93226.93226,0,0,1,.01871-.53561c.56286-.03042,1.1239-.10075,1.68923-.0769a.46509.46509,0,0,1,.16022.47274A3.49691,3.49691,0,0,1,68.90592,29.64728Z"/><path class="cls-76" d="M69.29082,21.09765a.4402.4402,0,0,0-.5016.01883.75968.75968,0,0,1-.50575.13351,14.60789,14.60789,0,0,1,.79053-2.21337c.0772-.186.15648-.37106.23481-.55656.1732-.10042.26454.038.34924.13741a5.26256,5.26256,0,0,1,.76116,1.27061c-.05633.36962-.37928.44735-.64875.51637-.28767.07369-.42.19184-.39068.48766A.24574.24574,0,0,1,69.29082,21.09765Z"/><path class="cls-23" d="M70.36945,19.86586c-.23146-.3602-.46141-.72138-.69514-1.0801a.54869.54869,0,0,0-.36552-.3057,17.32791,17.32791,0,0,1,.90564-1.6974c-.0787.43334.24147.69649.435,1.01265.0794.12969.17251.251.25938.37613.00916.48039.14334.95.12435,1.433A.80118.80118,0,0,1,70.36945,19.86586Z"/><path class="cls-67" d="M34.63653,86.95277c-.00687.14054-.01973.28109-.01975.42164q-.00144,12.50859-.01034,25.01718c-.00055.37548.0918.46315.4598.45488,1.16713-.02627,2.3355-.02395,3.50275-.00071.3342.00665.41439-.09655.39121-.407a1.2725,1.2725,0,0,1,.04269-.672.04674.04674,0,0,1,.03562.00652.37674.37674,0,0,1,.038.05725,1.63217,1.63217,0,0,0-.05443.75391c-.00359.21661-.04738.32712-.29792.32531-1.29548-.00938-2.59107-.00758-3.88657-.00117-.21348.00106-.31232-.06961-.2911-.2882.00739-.07622.001-.15378.001-.23073q0-12.48455.00352-24.96912C34.55111,87.26433,34.47637,87.08386,34.63653,86.95277Z"/><path class="cls-77" d="M68.67462,25.48821a.5946.5946,0,0,1-.57647-.22418,1.4173,1.4173,0,0,0-.64337-.31429c.17693-.55158.17005-1.13721.314-1.69491.39349.13231.5242.52965.71969.81871a1.22841,1.22841,0,0,0,.57152.49075l.02128.02922C68.89316,24.868,68.85718,25.21151,68.67462,25.48821Z"/><path class="cls-67" d="M177.22583,102.5521a1.79587,1.79587,0,0,1,.06058.72045c.00315,3.04846.00956,6.09694-.00762,9.1453-.00207.36752.11249.43365.44558.42644,1.21592-.02631,2.43248-.02357,3.64879-.03177-.07453.12847-.20111.09144-.311.09163-1.16753.00215-2.33509-.003-3.50257.005-.23243.00159-.348-.04219-.34715-.31354Q177.228,107.57389,177.22583,102.5521Z"/><path class="cls-67" d="M39.0672,94.56872c-.10942.11769-.11257.01719-.11348-.05939-.00323-.26857-.00145-.53718-.00145-.80579q0-3.14653-.001-6.29306c-.00011-.15276-.01458-.3055-.02237-.45825.15108.11868.08429.28588.08457.43047q.00663,3.38709.00493,6.7742A.66221.66221,0,0,0,39.0672,94.56872Z"/><path class="cls-67" d="M110.80912,119.22141c-.02047.14383.06162.16559.18093.16491q2.25971-.0131,4.51942-.0215c-.07912.1212-.204.08593-.31417.08607-1.38145.00189-2.76291.00348-4.14433-.00248C110.92411,119.44786,110.66086,119.53811,110.80912,119.22141Z"/><path class="cls-67" d="M83.85417,112.81517c1.46011.02565,2.92025.05633,4.38-.01616-.062.14254-.19115.10494-.30007.10512q-1.9029.00318-3.80578.00071C84.0286,112.90477,83.91883,112.92636,83.85417,112.81517Z"/><path class="cls-67" d="M75.69107,112.78575a.73742.73742,0,0,0,.18212.0474q2.10029-.00345,4.20058-.013c-.08116.11919-.20614.08393-.31684.0841q-1.868.003-3.736-.00073C75.90187,112.90322,75.75452,112.95374,75.69107,112.78575Z"/><path class="cls-67" d="M80.07392,93.58078q-2.10051-.00788-4.201-.01359a.72057.72057,0,0,0-.18194.04848c.04132-.13017.15081-.11919.25267-.11922q1.96436-.00063,3.92869-.00005A.21032.21032,0,0,1,80.07392,93.58078Z"/><path class="cls-67" d="M115.73519,71.23472l1.38995-.70672A3.1534,3.1534,0,0,1,115.73519,71.23472Z"/><path class="cls-67" d="M67.37034,28.02985l-.0187.53562a4.58512,4.58512,0,0,1-.00024-1.68656Z"/><path class="cls-78" d="M85.8535,7.01828l-.07681-.02435c.01324-.08648.05893-.15975.15008-.12893a4.99557,4.99557,0,0,0,1.10552.06864A9.78464,9.78464,0,0,1,85.8535,7.01828Z"/><path class="cls-78" d="M99.41191,10.53007l-.43182-.3021-.12341-.13757A.44587.44587,0,0,1,99.41191,10.53007Z"/><path class="cls-78" d="M108.03358,24.932a1.5484,1.5484,0,0,1-.13885-.67607l.21078-.07478Z"/><path class="cls-67" d="M136.14438,102.58635l.00059,1.2288A2.48882,2.48882,0,0,1,136.14438,102.58635Z"/><path class="cls-67" d="M127.55136,6.93352a3.19851,3.19851,0,0,1-.94319.05835A2.61183,2.61183,0,0,1,127.55136,6.93352Z"/><path class="cls-67" d="M129.997,6.99065a3.18526,3.18526,0,0,1-.952-.05633A2.63447,2.63447,0,0,1,129.997,6.99065Z"/><path class="cls-79" d="M103.57168,72.393c.26022.14072.12576.28773.00692.43446l-.23851-.12623C103.58485,72.72437,103.64182,72.60644,103.57168,72.393Z"/><path class="cls-78" d="M89.08537,6.98991q-.37809-.00792-.75614-.01587A1.10273,1.10273,0,0,1,89.08537,6.98991Z"/><path class="cls-78" d="M113.43006,13.3193a.80042.80042,0,0,1-.30652.35746C113.10711,13.45594,113.16417,13.29812,113.43006,13.3193Z"/><path class="cls-67" d="M95.0961,92.48258l-.76687-.00027A.98154.98154,0,0,1,95.0961,92.48258Z"/><path class="cls-67" d="M69.59728,92.48205l-.68972,0A.826.826,0,0,1,69.59728,92.48205Z"/><path class="cls-67" d="M145.6347,113.84119a2.29485,2.29485,0,0,1,.71885.05762C146.11363,113.88453,145.86559,113.96979,145.6347,113.84119Z"/><path class="cls-67" d="M45.79328,92.48174l-.6897.00016A.82888.82888,0,0,1,45.79328,92.48174Z"/><path class="cls-67" d="M170.976,92.48275l-.68992-.0007A.82278.82278,0,0,1,170.976,92.48275Z"/><path class="cls-67" d="M147.37256,113.89837a1.81826,1.81826,0,0,1,.64644-.05434C147.81257,113.96978,147.5885,113.88582,147.37256,113.89837Z"/><path class="cls-67" d="M148.62978,26.58731a.4945.4945,0,0,0-.06057-.03968.25033.25033,0,0,1-.01159-.28822l.01768-.30478C148.69974,26.15638,148.616,26.376,148.62978,26.58731Z"/><path class="cls-67" d="M93.5589,113.84155a2.07483,2.07483,0,0,1,.644.05712C93.98787,113.88489,93.76374,113.97187,93.5589,113.84155Z"/><path class="cls-67" d="M68.06055,113.84437a1.81789,1.81789,0,0,1,.64516.05407C68.49031,113.88594,68.26669,113.96943,68.06055,113.84437Z"/><path class="cls-78" d="M106.94673,20.4885a.60286.60286,0,0,1-.12747-.31212C106.91882,20.25713,107.15882,20.28054,106.94673,20.4885Z"/><path class="cls-67" d="M56.18711,102.84925a1.90021,1.90021,0,0,1-.05681-.64808C56.26027,102.40747,56.17332,102.63277,56.18711,102.84925Z"/><path class="cls-67" d="M147.17211,92.48275l-.61285-.001A.65221.65221,0,0,1,147.17211,92.48275Z"/><path class="cls-67" d="M148.55511,29.26227l.07753-.2443c-.01694.183.06457.37651-.05864.54817Z"/><path class="cls-67" d="M67.37213,29.47215a1.142,1.142,0,0,1,.05646.55659C67.30524,29.8538,67.38535,29.65824,67.37213,29.47215Z"/><path class="cls-67" d="M67.42835,25.41513a1.13391,1.13391,0,0,1-.05647.55562C67.38536,25.78509,67.30543,25.58981,67.42835,25.41513Z"/><path class="cls-67" d="M95.29206,113.89893a1.531,1.531,0,0,1,.57433-.05755C95.68576,113.96848,95.484,113.885,95.29206,113.89893Z"/><path class="cls-78" d="M116.5773,10.62354a.41966.41966,0,0,1-.29477.21626C116.29923,10.6566,116.42141,10.61711,116.5773,10.62354Z"/><path class="cls-67" d="M69.87636,113.89849a1.5555,1.5555,0,0,1,.5684-.05795C70.26635,113.96824,70.06653,113.8861,69.87636,113.89849Z"/><path class="cls-67" d="M44.33343,113.84327a1.5841,1.5841,0,0,1,.57293.05545C44.715,113.88594,44.5143,113.9669,44.33343,113.84327Z"/><path class="cls-78" d="M100.63934,11.40715l-.29957-.24561C100.51254,11.15453,100.67566,11.15926,100.63934,11.40715Z"/><path class="cls-67" d="M56.13256,104.12285a1.47371,1.47371,0,0,1,.05483-.57375C56.17435,103.74069,56.25487,103.94147,56.13256,104.12285Z"/><path class="cls-78" d="M145.70077,16.657l-.14189-.11026-.009-.13512C145.86351,16.33153,145.65194,16.57433,145.70077,16.657Z"/><path class="cls-78" d="M177.13585,94.664l-.23-.157C177.15084,94.31281,177.12909,94.50926,177.13585,94.664Z"/><path class="cls-78" d="M153.3319,94.664l-.23-.157C153.34688,94.31281,153.32513,94.50926,153.3319,94.664Z"/><path class="cls-78" d="M93.08689,7.64229c-.10336-.03035-.22221-.01023-.30892-.09483C92.90517,7.50015,93.06036,7.36172,93.08689,7.64229Z"/><path class="cls-78" d="M168.52515,92.68056c-.07028.07127-.15917.0488-.2437.04838C168.3283,92.53969,168.41,92.52569,168.52515,92.68056Z"/><path class="cls-67" d="M148.47678,30.57166c.0488-.13029-.0137-.2818.07705-.40422l.00841.40518c.035.07238-.003.08233-.0629.07349Z"/><path class="cls-78" d="M84.15858,7.22189l-.23094.01089c.01033-.0765.02934-.147.12844-.13953C84.13368,7.09912,84.147,7.161,84.15858,7.22189Z"/><path class="cls-78" d="M146.8496,18.872c-.08761-.05349-.05432-.15468-.09029-.22856C146.951,18.65581,146.99407,18.72686,146.8496,18.872Z"/><path class="cls-78" d="M122.75194,7.69635a.17449.17449,0,0,0-.01092.04944l-.29566.02973C122.485,7.50715,122.65249,7.73336,122.75194,7.69635Z"/><path class="cls-67" d="M67.44809,30.47869l.06.03725-.00228.43713C67.38812,30.8069,67.45957,30.63776,67.44809,30.47869Z"/><path class="cls-67" d="M170.97943,96.58982a.97509.97509,0,0,1,.48476.05681C171.30151,96.63748,171.12939,96.70816,170.97943,96.58982Z"/><path class="cls-78" d="M115.64564,11.31652a.44344.44344,0,0,1-.28754.21983C115.37228,11.3563,115.4891,11.31043,115.64564,11.31652Z"/><path class="cls-67" d="M169.8782,96.64735a.95321.95321,0,0,1,.48157-.058C170.21127,96.70841,170.03982,96.63716,169.8782,96.64735Z"/><path class="cls-67" d="M67.60117,31.57294l-.01749.15066c-.11141-.11971-.05081-.26452-.05828-.3995Z"/><path class="cls-67" d="M107.73534,74.48749l.378-.00127A.2889.2889,0,0,1,107.73534,74.48749Z"/><path class="cls-78" d="M89.85575,7.06717a.6531.6531,0,0,1-.3957-.05876C89.59326,7.01881,89.73715,6.95783,89.85575,7.06717Z"/><path class="cls-78" d="M166.73952,93.18048c-.07411.03471-.1316.10962-.22666.09361C166.53274,93.10816,166.60268,93.06335,166.73952,93.18048Z"/><path class="cls-67" d="M136.22286,101.739a.73958.73958,0,0,1-.059.40222C136.17074,102.00531,136.11111,101.85959,136.22286,101.739Z"/><path class="cls-67" d="M58.57154,101.893a.7577.7577,0,0,1-.05736.42086C58.52094,102.172,58.457,102.02032,58.57154,101.893Z"/><path class="cls-78" d="M181.3152,102.04668l-.00828-.15528c.162.03346.19188.10877.07318.23109A.11621.11621,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M105.41242,102.38161a.78319.78319,0,0,1-.05479-.4112C105.46656,102.0954,105.40791,102.24271,105.41242,102.38161Z"/><path class="cls-67" d="M157.56534,102.46688a.79407.79407,0,0,1-.05419-.41937C157.62058,102.1755,157.5595,102.32551,157.56534,102.46688Z"/><path class="cls-67" d="M181.3152,102.04668l.06488.07581-.01089.34318A.79228.79228,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M169.69536,92.50317a.73628.73628,0,0,1-.4107.05643C169.40886,92.44834,169.55655,92.508,169.69536,92.50317Z"/><path class="cls-78" d="M148.49933,30.64611l.06288-.07351c.11869.11874.09154.194-.06841.22982Z"/><path class="cls-67" d="M148.17317,92.55775a.86279.86279,0,0,1-.41425-.05452C147.89865,92.508,148.047,92.44853,148.17317,92.55775Z"/><path class="cls-67" d="M157.51082,104.354a.78474.78474,0,0,1,.0546-.42006C157.55914,104.07532,157.62092,104.22581,157.51082,104.354Z"/><path class="cls-67" d="M58.51328,104.02416a.78392.78392,0,0,1,.05476.40671C58.46078,104.30727,58.51821,104.16152,58.51328,104.02416Z"/><path class="cls-67" d="M105.35589,104.43128a.77055.77055,0,0,1,.05618-.41775C105.40653,104.15444,105.4684,104.30457,105.35589,104.43128Z"/><path class="cls-67" d="M136.16523,104.25478a.74668.74668,0,0,1,.05913.40779C136.11021,104.54033,136.17078,104.39276,136.16523,104.25478Z"/><path class="cls-67" d="M126.31593,7.01011a.67723.67723,0,0,1-.40122.05951C126.03457,6.95625,126.1804,7.01787,126.31593,7.01011Z"/><path class="cls-67" d="M171.97711,92.55775a.856.856,0,0,1-.41317-.05454C171.70334,92.50788,171.85133,92.4487,171.97711,92.55775Z"/><path class="cls-67" d="M46.79451,92.55791a.72668.72668,0,0,1-.40275-.05644C46.52775,92.50765,46.67279,92.44962,46.79451,92.55791Z"/><path class="cls-67" d="M145.9003,92.5031a.82161.82161,0,0,1-.41964.057C145.6077,92.44659,145.75871,92.50953,145.9003,92.5031Z"/><path class="cls-67" d="M44.50687,92.50191a.7261.7261,0,0,1-.40456.05658C44.22449,92.44908,44.37021,92.50785,44.50687,92.50191Z"/><path class="cls-67" d="M96.09763,92.56088a.73186.73186,0,0,1-.41686-.05716C95.8215,92.50906,95.97166,92.44679,96.09763,92.56088Z"/><path class="cls-67" d="M148.55448,25.5052a.65338.65338,0,0,1-.055-.39744C148.60536,25.22813,148.54706,25.37121,148.55448,25.5052Z"/><path class="cls-67" d="M93.74,92.50339a.734.734,0,0,1-.41231.0568C93.45229,92.44781,93.60066,92.50825,93.74,92.50339Z"/><path class="cls-67" d="M70.59875,92.56a.73207.73207,0,0,1-.413-.05648C70.32525,92.50828,70.47381,92.4478,70.59875,92.56Z"/><path class="cls-78" d="M166.20009,93.4098c-.07332.03694-.13047.11228-.22648.09535C165.99277,93.33963,166.063,93.29538,166.20009,93.4098Z"/><path class="cls-67" d="M68.31448,92.5025a.87433.87433,0,0,1-.40795.05428C68.03067,92.44974,68.17673,92.5073,68.31448,92.5025Z"/><path class="cls-78" d="M88.19546,102.93568c-.30886-3.22483,2.68818-5.7422,5.19528-6.2551a6.69059,6.69059,0,0,1,7.87565,5.582A6.62838,6.62838,0,0,1,88.262,104.754,15.06279,15.06279,0,0,1,88.19546,102.93568Z"/><path class="cls-78" d="M45.44046,96.56916A6.62622,6.62622,0,0,1,46.56915,109.729a6.54828,6.54828,0,0,1-7.53825-5.02078c-.70494-3.98962,1.20424-7.08688,5.18448-8.02618A4.79038,4.79038,0,0,1,45.44046,96.56916Z"/><path class="cls-78" d="M75.724,103.1979c.32487,3.37788-2.5467,6.07615-5.37,6.52935a6.62965,6.62965,0,1,1,5.27949-8.25142A9.738,9.738,0,0,1,75.724,103.1979Z"/><path class="cls-78" d="M140.22787,103.2052a6.62809,6.62809,0,1,1,6.60744,6.61506A6.605,6.605,0,0,1,140.22787,103.2052Z"/><path class="cls-4" d="M127.64944,20.49762a.36642.36642,0,0,1-.0085-.339A.36642.36642,0,0,1,127.64944,20.49762Z"/><path class="cls-80" d="M115.28107,34.80766l.077-.23106.23111.077C115.608,34.94785,115.34875,34.68625,115.28107,34.80766Z"/><path class="cls-80" d="M109.2723,33.11323a.2326.2326,0,0,1-.2311-.154C109.15331,32.95794,109.26523,32.957,109.2723,33.11323Z"/><path class="cls-79" d="M110.81264,62.61159a5.14418,5.14418,0,0,0,1.13217,1.06258c.14042.12791.31519.21754.45971.34162a.43277.43277,0,0,1-.06156.75676c-1.02975.6414-1.94556,1.43484-2.90376,2.17218-.70619.54343-1.4564,1.03175-2.14217,1.59882a1.98579,1.98579,0,0,1-1.28743.54442.32064.32064,0,0,0-.265.19868.4644.4644,0,0,1-.22055.2032.95766.95766,0,0,1-.60409.03844c-.34866-.07437-.08543-.33042-.11459-.50192a1.49819,1.49819,0,0,1-.002-.19184c-.00437-.11608-.00177-.25751-.15759-.258a.22724.22724,0,0,0-.21645.23111,8.37813,8.37813,0,0,1-.28926.98762c-.09036.56337-.49176,1.04671-.42108,1.6545.0187.16079-.11527.18646-.23722.16639a3.81142,3.81142,0,0,1-.44537-.10861c-.54111-.15779-.54072-.15914-.54337.4234-.02416-.0432-.07393-.08977-.06874-.1291a2.40675,2.40675,0,0,0-1.02794-2.07307,1.336,1.336,0,0,1-.39207-1.38891,17.65093,17.65093,0,0,0,.33857-2.6837,2.96015,2.96015,0,0,1,.56487-1.32078c.378-.59108.3537-.759-.24547-1.10936-.48175-.28168-.92758-.62533-1.3851-.94753a.3725.3725,0,0,1-.17012-.36338c.13152-1.19084.69191-1.535,1.92084-1.423.206.01877.40656.12556.61929.04.60574.16018,1.1457.48479,1.73227.69546a.75036.75036,0,0,0,.61525-.01923,9.27991,9.27991,0,0,0,1.23314-.61986c.44822-.2792.47176-.4158.1147-.79984-.27163-.29214-.49246-.62271-.74658-.92766-.097-.11641-.19681-.24466-.11485-.41643a.87423.87423,0,0,1,.80245.24627,3.76621,3.76621,0,0,1,.49574.53338c.26786.318.48725.69989.95868.77316a.42918.42918,0,0,1,.24465.17789c.42841.52907.94151.97631,1.41511,1.46164A2.52952,2.52952,0,0,0,110.81264,62.61159Z"/><path class="cls-81" d="M105.49757,58.45255a3.71917,3.71917,0,0,0,.83212,1.16791c.5622.6528.53769.67223-.19689,1.13939-.40042.25465-.85555.388-1.26285.62275-.07739.04461-.16235.09566-.25267.05043a14.58081,14.58081,0,0,1-1.97-.901,2.28094,2.28094,0,0,0-1.26123-.38546,8.20584,8.20584,0,0,1-2.511-.44969c-.56383-.24151-1.14414-.44743-1.69621-.7127a18.11658,18.11658,0,0,0-1.73617-.71807c-.98341-.35287-1.94235-.77371-2.92448-1.1305a14.75411,14.75411,0,0,1-1.50083-.43854,1.66367,1.66367,0,0,1-.81427-.58461c-.19293-.30721-.62839-.30513-.95632-.4358a34.161,34.161,0,0,1-4.02688-1.70007c-.38-.211-.754-.43288-1.13153-.64834a1.344,1.344,0,0,0-.87054-.3095c-.2355.0269-.453-.21023-.65754-.36394-.35708-.26832-.73194-.51753-1.062-.816a3.97283,3.97283,0,0,0-1.26831-.62612.24035.24035,0,0,1-.07084-.2472c.11286-.344.07985-.71074.17515-1.0567a1.03684,1.03684,0,0,1,1.3013-.08118,2.05142,2.05142,0,0,1,.69881.79915.4927.4927,0,0,0,.20972.221,1.79638,1.79638,0,0,1,.87019.98312.46894.46894,0,0,0,.242.23944c.95208.55871,1.92946,1.06958,2.92568,1.54473a.36088.36088,0,0,0,.1439.05242,10.18569,10.18569,0,0,1,2.90529.81684,1.00022,1.00022,0,0,0,.815.00412.76847.76847,0,0,1,.52756.01337c.71544.14462,1.398.40886,2.12956.51113.7473.10445,1.48294-.03164,2.22283.016a.30515.30515,0,0,0,.31278-.23769.52524.52524,0,0,1,.64175-.35914,16.24625,16.24625,0,0,0,2.26689.06291,4.34521,4.34521,0,0,1,1.10607.11165,1.23046,1.23046,0,0,0,.75864-.02782,1.00574,1.00574,0,0,1,1.05844.1435c-.041-.44062-.00643-.48163.49742-.61932a.625.625,0,0,1,.41642.31474c.83356,1.16852,1.86025,2.1824,2.68319,3.35876A3.00284,3.00284,0,0,1,105.49757,58.45255Z"/><path class="cls-82" d="M80.38439,49.90345a4.82756,4.82756,0,0,1-.15445,1.3093c-.27457.15081-.261.49361-.4621.69336-.42907-.06363-.89022-.01217-1.23178-.37832-.07463-.08-.18133-.1317-.232-.238.16243-.34512-.10392-.63272-.19693-.90733-.11009-.325.048-.69953-.231-.98714-.1061-.10937.03839-.227.16345-.28118.34436-.14905.68982-.29552,1.03485-.443.28842-.15866.47413.08748.69989.17664A4.532,4.532,0,0,1,80.38439,49.90345Z"/><path class="cls-83" d="M102.64725,29.03122c.03722.00786.10175.00683.10764.02489.13027.40006.5055.63973.664,1.01992a19.336,19.336,0,0,0,1.07193,2.18063.55212.55212,0,0,0,.23636.24042c.14024.04022.18516.16885.24995.27584a10.23179,10.23179,0,0,0,5.0529,4.17554c.31912.1315.6399.25907.96373.37928.11938.04432.29074.055.28143.25266-.01854.29048.22811.31711.407.37583.88481.29043,1.80826.437,2.70135.68906a16.53567,16.53567,0,0,0,2.87668.55315.3312.3312,0,0,1,.3319.38441,1.16781,1.16781,0,0,0-.75216.14618,2.41072,2.41072,0,0,1-1.67474.15976c-.78777-.14729-1.59648-.21315-2.36976-.383a16.7331,16.7331,0,0,1-4.33757-1.7281,3.29828,3.29828,0,0,0-.57223-.19724.70765.70765,0,0,1-.38518-.23124,9.24839,9.24839,0,0,1-2.0468-1.94635,17.92431,17.92431,0,0,1-2.59848-5.13885A3.10335,3.10335,0,0,1,102.64725,29.03122Z"/><path class="cls-84" d="M111.27522,37.5804c-.59464-.25852-1.19543-.50393-1.78255-.77855a11.14581,11.14581,0,0,1-2.64452-1.66567,9.95154,9.95154,0,0,1-2.12094-2.6391c.07061-.36584-.303-.58364-.30814-.92423a2.90965,2.90965,0,0,0,1.05926.99121c.27487.16053.42237.53062.64414.79216a7.022,7.022,0,0,0,1.93982,1.65524.61045.61045,0,0,0,.36262.10427c.7619.26014,1.37875.80079,2.15422,1.05737,1.12912.37359,2.28715.60328,3.438.87844a16.09879,16.09879,0,0,0,2.23833.39849,33.76317,33.76317,0,0,0,3.66874.453,1.37861,1.37861,0,0,1,.98047.21643,2.3304,2.3304,0,0,1-.88782.14906,19.2957,19.2957,0,0,1-3.3243-.14295.25082.25082,0,0,0-.15147.00416c-.9598.574-1.89437.05546-2.83708-.063C112.88286,37.96362,112.10541,37.64,111.27522,37.5804Z"/><path class="cls-80" d="M104.80425,28.338a3.80185,3.80185,0,0,1,.68549,1.435,6.74169,6.74169,0,0,0,1.51765,2.4138,4.03126,4.03126,0,0,0,1.51724.88893c.45414.143.85466.45045,1.30848.63223a24.48073,24.48073,0,0,0,3.494.97422c.58014.13787,1.16266.03673,1.72281.20267.212.299.55662.18314.82451.21291,1.07127.11907,2.14994.1713,3.22572.25038.081.006.21145-.03819.2179.08621.007.134-.123.13848-.22555.1418-.11486.00371-.22991.00139-.34488.00169-.30426.391-.74817.3223-1.13971.28462-.683-.06571-1.36922-.12964-2.05117-.18509-.71453-.05809-1.40653-.2278-2.11633-.29353-.77473-.07175-1.54633-.1773-2.3193-.26812l-.077-.00017c-.08243-.18221-.27161-.17635-.42155-.22735a9.16877,9.16877,0,0,1-3.22461-1.78475,8.919,8.919,0,0,1-1.04677-1.26113A9.28838,9.28838,0,0,1,104.80425,28.338Z"/><path class="cls-85" d="M119.59505,64.84514c-.08038.11624-.21628.04618-.31413.09314-.12943.06211-.2703.13624-.09909.30272.08286.08056.13436.18544.02169.25621-.42869.26921-.67841.74889-1.14918.96534-.00427-.11289.09008-.18045.12594-.27345.11927-.30935-.02548-.567-.3424-.569a3.68853,3.68853,0,0,1-1.58407-.46539c-.80188-.39162-1.62429-.74157-2.42386-1.13956a17.01924,17.01924,0,0,1-1.75963-1.19271c-.31921-.21067-.60129-.48537-1.0262-.44192a30.20019,30.20019,0,0,1-2.73937-2.57077c-.31534-.31636-.52035-.71637-.80432-1.06193-1.0406-1.26636-2.2616-2.36824-3.278-3.65248-.28551-.36074-.5694-.723-.85618-1.083-.079-.0991-.16343-.20238-.11046-.34633.21257-.09237.29814.07812.39816.20075a18.13988,18.13988,0,0,0,1.75515,1.74335,4.75563,4.75563,0,0,1,.6604.69454,25.68717,25.68717,0,0,0,7.9502,5.5791,2.87581,2.87581,0,0,1,1.03351.65364.2609.2609,0,0,0,.09068.07063c.86191.33951,1.63136.86158,2.46919,1.2484a.36006.36006,0,0,0,.18369.05208,2.32657,2.32657,0,0,1,1.38018.39486C119.42825,64.3976,119.67784,64.49365,119.59505,64.84514Z"/><path class="cls-86" d="M103.26354,53.67736a10.00561,10.00561,0,0,0,1.12035,1.4513c1.16684,1.33877,2.44269,2.589,3.5335,3.985.6044.77354,1.31178,1.42329,1.96628,2.13395a9.87627,9.87627,0,0,0,.89817.77376c.11591.0987.2539.18174.26228.35913l-.23148.23106a1.0539,1.0539,0,0,1-.98021-.40014c-.63536-.68445-1.363-1.28007-1.94507-2.01646a.2722.2722,0,0,0-.15184-.10975c-.57727-.05411-.80156-.535-1.10722-.91172a1.7525,1.7525,0,0,0-1.13073-.721,11.43557,11.43557,0,0,1-.934-1.20161q-.89905-1.09157-1.79692-2.1841c-.24978-.30546-.49087-.618-.73591-.92736-.21436-.07335-.29066-.27691-.40733-.4394q-.71349-.99367-1.38989-2.01316c-.09689-.14647-.22054-.28832-.16511-.4884a1.71656,1.71656,0,0,0-.28914-1.56466c-.10061-.18191-.31567-.31519-.2376-.57128.21207-.12427.29583.052.38347.17788a4.60249,4.60249,0,0,0,.60678.76821c.78269,1.15729,1.69081,2.21826,2.55157,3.3157C103.16549,53.42886,103.31348,53.504,103.26354,53.67736Z"/><path class="cls-87" d="M102.64725,29.03122a19.29163,19.29163,0,0,0,.65037,2.23841,26.312,26.312,0,0,0,1.2426,2.50022c.42964.71876.8928,1.40344,1.38909,2.07365a8.77941,8.77941,0,0,0,1.19952,1.12284,1.87046,1.87046,0,0,1,.37166.38286.77273.77273,0,0,1-.40136-.20553,21.74617,21.74617,0,0,1-2.1227-1.973,1.16161,1.16161,0,0,0-.4031-.28579c-.129.03945-.19-.05347-.24212-.13776-.4757-.76965-.93758-1.54732-1.339-2.35972a23.77022,23.77022,0,0,1-1.2735-3.86448,34.23876,34.23876,0,0,1-.68445-3.97577,14.153,14.153,0,0,1-.19288-2.60013,2.89712,2.89712,0,0,0-.06579-.80076,13.33422,13.33422,0,0,0-.22315-3.66223,9.92653,9.92653,0,0,0-2.409-5.02522,9.1848,9.1848,0,0,0-1.01185-1.04934.53028.53028,0,0,1-.18517-.40059c-.34179-.32184-.85562-.38573-1.15554-.77036.3373-.3008.32492-.3663-.07693-.57989a5.74349,5.74349,0,0,0-.98236-.40543c-.23827-.07469-.40736-.202-.40419-.478a13.009,13.009,0,0,1,3.5316,1.63325,8.66,8.66,0,0,1,3.47038,5.4176,15.05439,15.05439,0,0,1,.39683,3.25761c.00994,1.03163.00618,2.0662.0848,3.09363q.14706,1.9218.34417,3.8415A26.60036,26.60036,0,0,0,102.64725,29.03122Z"/><path class="cls-88" d="M103.10947,32.42006a19.21964,19.21964,0,0,0,1.46386,2.46483,2.60093,2.60093,0,0,0,.81354,1.13934,14.56487,14.56487,0,0,0,3.14495,2.78041,17.06018,17.06018,0,0,0,3.54767,1.72112,35.233,35.233,0,0,0,3.39469,1.08257c.211.04646.42237.09337.63576.12562.14642.02213.24106.07863.24962.23649a.69347.69347,0,0,1-.78726.192c-.82189-.17633-1.61678-.49362-2.43876-.61346a11.72724,11.72724,0,0,1-2.47332-.80044,14.00665,14.00665,0,0,1-2.07416-1.0568,1.69571,1.69571,0,0,0-.54632-.2629c-.3471.04715-.45511-.28164-.67815-.4301a4.64282,4.64282,0,0,0-.9657-.86872,12.09344,12.09344,0,0,1-2.37324-2.66244,18.86892,18.86892,0,0,1-2.23343-4.70817c-.03953-.12224-.09458-.24338.00656-.36262.31608-.063.38853.18654.46687.39059a12.6471,12.6471,0,0,0,.53571,1.25862A.96543.96543,0,0,0,103.10947,32.42006Z"/><path class="cls-89" d="M116.74475,44.358a3.528,3.528,0,0,0-1.15554.15423,2.65074,2.65074,0,0,1-1.15609-.19358,22.35364,22.35364,0,0,1-4.0636-1.61624,17.73923,17.73923,0,0,1-3.2828-2.12182,14.31458,14.31458,0,0,0-1.16832-1.10492,16.75888,16.75888,0,0,1-1.80177-2.03472c-.08-.09762-.1786-.19423-.09064-.33866a.24447.24447,0,0,1,.32775.1188,5.18528,5.18528,0,0,0,1.49114,1.35049c.54589.36431,1.01642.85688,1.54657,1.257a11.24313,11.24313,0,0,0,2.46794,1.46475,21.35126,21.35126,0,0,0,5.00981,1.92128,1.1779,1.1779,0,0,1,.56594.21929.89678.89678,0,0,0,.80944.42509A.49158.49158,0,0,1,116.74475,44.358Z"/><path class="cls-90" d="M115.43514,43.4339a14.41738,14.41738,0,0,1-2.38941-.63624,20.67328,20.67328,0,0,1-2.73736-1.157c-.16893-.08916-.33138-.1906-.49682-.28638a14.80842,14.80842,0,0,1-3.66336-2.56961,12.65126,12.65126,0,0,1-1.84819-2.056c-.0726-.11428-.20266-.21045-.13055-.37574.13773-.06822.21442.03916.29757.11023.98158.83892,1.9185,1.73048,2.95606,2.50334.23581.11373.35405.38425.61666.46226a8.85834,8.85834,0,0,0,1.87955,1.15889A26.12916,26.12916,0,0,0,116.2061,42.835c.139.02991.32807.03265.39619.18592.03552.07988-.08813.13822-.16569.1821A2.53,2.53,0,0,1,115.43514,43.4339Z"/><path class="cls-91" d="M107.11531,40.50708a21.8878,21.8878,0,0,0,6.78573,3.54577c.558.18071,1.14546.235,1.68817.45941.04746.16844.29968.15041.32505.377a11.74626,11.74626,0,0,1-3.86868-.83908.81387.81387,0,0,1-.7713-.0949,28.55056,28.55056,0,0,1-2.71993-1.51c-.36966-.26174-.84134-.30614-1.18546-.62193-.35838-.32888-.76067-.61117-1.116-.94273-.51548-.48095-1.094-.88637-1.60205-1.37421a17.44945,17.44945,0,0,1-1.8655-2.24491c-.17565-.23659-.31411-.4998-.51047-.72217-.22928-.33816-.433-.69234-.64958-1.03847a.49213.49213,0,0,1-.09282-.46953c.32989-.33664.4598.0606.66571.18055.44508.58866.80928,1.23148,1.29425,1.79826a14.19458,14.19458,0,0,0,1.63486,1.70757c.62175.52179,1.19127,1.11283,1.80639,1.64917A2.0178,2.0178,0,0,0,107.11531,40.50708Z"/><path class="cls-92" d="M102.3393,36.502c.42779.45665.72563,1.0095,1.116,1.49691a13.80188,13.80188,0,0,0,2.33989,2.34166c.60177.46443,1.15863.99645,1.74509,1.488.36962.30979.85863.34985,1.24184.64889a25.53168,25.53168,0,0,0,2.26589,1.26673,2.15424,2.15424,0,0,0,.99757.306c.003.12766.0997.17049.19563.208a26.56889,26.56889,0,0,0,3.49243,1.114,5.53236,5.53236,0,0,0,1.62718.37259c-.38769.2047-.76464.001-1.14291-.03978a7.1041,7.1041,0,0,0-1.322.03941.31643.31643,0,0,1-.36267.02483c-.82464-.32873-1.722-.43357-2.53448-.77986a18.85522,18.85522,0,0,1-5.43253-3.07053,16.91478,16.91478,0,0,1-1.53388-1.14942c-.29883-.33429-.60292-.66357-.88748-1.01051a4.68307,4.68307,0,0,0-.7147-.989c-.42719-.61827-.74025-1.30691-1.18222-1.91742C102.17167,36.74713,102.1,36.56351,102.3393,36.502Z"/><path class="cls-93" d="M119.59505,64.84514a.56326.56326,0,0,0-.46221-.46211c-.25421-.18462-.08279-.385.04848-.47478a8.31656,8.31656,0,0,0,1.285-1.3115,2.88351,2.88351,0,0,1,1.3623.11106c.735.18387,1.483.30259,2.21794.48293.14842.03642.30947.03966.40173.19123-.25594.35785-.66448.59309-.84273,1.00787-.09841.229-.1472.47731-.38984.60934-.35129.105-.72183.07027-1.07942.2018a1.61772,1.61772,0,0,1-1.03923-.15216A3.80322,3.80322,0,0,0,119.59505,64.84514Z"/><path class="cls-94" d="M104.188,39.73679a8.10424,8.10424,0,0,1,.97124,1.02746c.49432.514,1.15492.78011,1.68251,1.2463a17.59011,17.59011,0,0,0,4.426,2.56268,24.49831,24.49831,0,0,0,2.60583.86606,3.826,3.826,0,0,0,1.02239.30509,17.04312,17.04312,0,0,0,2.52954.693.69112.69112,0,0,1,.1667.07715,2.946,2.946,0,0,1-.85426.15383l.08391.46233-.53925.00019c-.19649.16947-.41238.06665-.62163.04236a5.90669,5.90669,0,0,1-.85834-.18693A19.38764,19.38764,0,0,1,110.81,45.38972a24.83688,24.83688,0,0,1-5.12777-3.58044c-.67549-.63439-1.26825-1.33793-1.8993-2.00922a.64972.64972,0,0,1-.23991-.57956C103.93475,39.17168,103.9978,39.53361,104.188,39.73679Z"/><path class="cls-95" d="M116.05142,49.74938a5.22327,5.22327,0,0,0,1.84885.46212c-.09923.19457-.26346.15476-.43291.1301-.33838-.04924-.67838-.0876-1.01806-.12758a.17656.17656,0,0,0-.16677.0745c-.184.15507-.38893.08471-.58825.051a15.86658,15.86658,0,0,1-5.207-1.9169,33.46586,33.46586,0,0,1-3.7352-2.43035,18.7315,18.7315,0,0,1-3.08239-2.769,3.17933,3.17933,0,0,1-.65667-.92658c.22406-.14659.35844.04549.49248.1533.28916.23255.53338.51554.79809.77575a1.15183,1.15183,0,0,0,.3953.29763c.59694.46295,1.13616.99413,1.73815,1.45251a30.24018,30.24018,0,0,0,5.10324,3.19792,25.92753,25.92753,0,0,0,2.9957,1.19736c.33319.11334.6794.12452,1.012.21608C115.71791,49.634,115.9093,49.61609,116.05142,49.74938Z"/><path class="cls-96" d="M103.03262,42.27852a12.98047,12.98047,0,0,0,2.21187,2.37448,34.7846,34.7846,0,0,0,3.07266,2.32413c1.04806.68327,2.12709,1.3072,3.2264,1.89794a13.03931,13.03931,0,0,0,3.64439,1.25789,3.92274,3.92274,0,0,0,1.09459.15556c.14818.23128.41725.21088.634.29305.12793.04849.27309.0492.36749.16906a.57712.57712,0,0,1-.46376.11266,14.57069,14.57069,0,0,1-1.69214-.1572,10.88228,10.88228,0,0,1-2.70693-.82659,27.16411,27.16411,0,0,1-3.47006-1.80118,1.60635,1.60635,0,0,1-.24646-.18175q-.97491-.772-1.94877-1.5459A14.43452,14.43452,0,0,1,104.336,44.184c-.4256-.532-.974-.93844-1.3664-1.49475a2.36218,2.36218,0,0,0-.42047-.58709c-.08232-.06413-.06332-.18794.00167-.283A.45517.45517,0,0,1,103.03262,42.27852Z"/><path class="cls-97" d="M115.05,50.597a15.72194,15.72194,0,0,0,2.234.15362c1.15087.06313,2.29136.23065,3.43653.33972a18.49094,18.49094,0,0,0,2.24129.2.82085.82085,0,0,1,.485.07642.1763.1763,0,0,1-.20259.07231c-.52913-.188-1.05426.07457-1.582.00753a.40547.40547,0,0,0-.37237.15122c-.32895.20782-.67925.047-1.00785.02466-1.15935-.07878-2.32149-.14473-3.47205-.322a9.44389,9.44389,0,0,0-1.39316-.39869C115.25571,50.86731,115.04524,50.84977,115.05,50.597Z"/><path class="cls-98" d="M116.74474,51.21275c1.08465.0992,2.16905.2012,3.25406.29621.42964.03762.86065.05972,1.291.08888.3703.16441.77448.04089,1.15784.147a8.51531,8.51531,0,0,0,2.23215.08291,3.00438,3.00438,0,0,1,.56712.06449,1.90942,1.90942,0,0,0,1.02547-.10673c.28556-.10238.57124.02376.8652-.02188.595-.09239,1.19577-.20143,1.78766-.247.51177-.03935.99475-.19805,1.5072-.22232a7.54978,7.54978,0,0,0,1.9147-.30227,1.26286,1.26286,0,0,1,.34391-.01042,2.99632,2.99632,0,0,1-1.42073.37549c-1.3267.23436-2.66374.41519-3.99819.59131-.66255.08744-1.34106.14366-2.01439.19077a3.06629,3.06629,0,0,1-1.54788-.05334c-.153-.0683-.21365.08687-.32673.24114a5.6982,5.6982,0,0,0,1.30707.03694,15.89358,15.89358,0,0,1-3.09226.23509.582.582,0,0,1-.50525.1107c-1.08957-.1072-2.188-.08193-3.27518-.22222a1.83966,1.83966,0,0,1-.48356-.10372,11.45869,11.45869,0,0,0-1.34332-.4094c-.18053-.06607-.41515-.05189-.49331-.29331.23384-.19142.48379.0138.7195-.03054-.33635-.21222-.76694-.21868-1.09939-.4912A3.87768,3.87768,0,0,1,116.74474,51.21275Z"/><path class="cls-69" d="M148.55762,26.25941l.01154.2883c-.00289.15373-.0041.3076-.00909.46135a2.42513,2.42513,0,0,1-.24347,1.46081,1.35422,1.35422,0,0,0-.19633.803.74459.74459,0,0,1-.16415.45773,5.2388,5.2388,0,0,0-.68073,1.38676,18.69578,18.69578,0,0,1-1.1476,2.57084c-.25431.41-.35947.89708-.62191,1.31335-.55516.88057-1.10875,1.76193-1.63924,2.65882-.52836.8933-1.19611,1.703-1.76059,2.57662a14.70086,14.70086,0,0,1-1.04835,1.362,10.91082,10.91082,0,0,1-1.05055,1.13016c-.33576.30583-.55431.72652-.90174,1.03574-.93764.83454-1.84141,1.70395-2.86025,2.44852a16.13436,16.13436,0,0,1-2.96824,1.719,7.46953,7.46953,0,0,1-2.06983.51169c-.9908.13125-1.98946.18265-2.98181.30362a10.35671,10.35671,0,0,1-1.11416.10427,5.09152,5.09152,0,0,0-1.64285.16519c-.19512.06863-.35253-.01921-.52413-.04131a5.497,5.497,0,0,0-1.16623.15058c-.63618.04975-1.25455-.21108-1.8845-.17671-.46684.02547-.91382-.28924-1.40859-.00328-.18487.10684-.51955-.08169-.78079-.06316-.55911.03965-1.07553-.20626-1.62634-.202a.632.632,0,0,0-.25445.06685,4.44389,4.44389,0,0,1-1.64123-.3324c-.09872-.02955-.23785-.05415-.20792-.22012a.5426.5426,0,0,1,.47373-.0549c.4032.07211.81157.00983,1.21539.05336.07279.00785.09415-.00563.1191-.08689.09224-.30044.293-.2484.50314-.12924,1.2072.07749,2.40939.20261,3.60793.36673a5.90721,5.90721,0,0,0,1.0275.08762c.68723-.02753,1.36845.05735,2.05971.02881,1.49251-.06161,2.97764-.18038,4.46341-.32054a17.93,17.93,0,0,0,2.61447-.31371,10.96573,10.96573,0,0,0,3.67612-1.76863,22.15609,22.15609,0,0,0,3.05627-2.60906,34.50924,34.50924,0,0,0,3.98745-4.92792,43.26384,43.26384,0,0,0,3.24224-5.653,42.36023,42.36023,0,0,0,2.47212-6.51691A.34868.34868,0,0,1,148.55762,26.25941Z"/><path class="cls-99" d="M118.28545,47.97794a1.35672,1.35672,0,0,0-.15364.00107c-.09614.011-.21832-.04328-.27764.07232-.07994.15577.15985.13233.17017.28293l-2.04995-.12513c-.158.14325-.33745.08335-.51119.04962a17.47507,17.47507,0,0,1-4.931-1.78356,24.47971,24.47971,0,0,1-5.74458-4.20255c-.43442-.43068-.86348-.87223-1.25621-1.34469-.27719-.4316-.588-.84054-.89763-1.24776a19.84407,19.84407,0,0,1-1.54917-2.42788c-.06138-.111-.14187-.21936-.07534-.35789.2627-.064.30707.1731.41581.31078.16331.20679.22576.494.49628.61474a3.30225,3.30225,0,0,1,.81288.96226,21.82918,21.82918,0,0,0,5.30249,5.24571,19.27,19.27,0,0,0,2.57919,1.36231,22.746,22.746,0,0,0,4.12592,1.50945,12.394,12.394,0,0,0,1.54071.23125,3.42084,3.42084,0,0,0,1.42628.53689C117.9336,47.717,118.20843,47.65926,118.28545,47.97794Z"/><path class="cls-34" d="M103.9912,15.76834a.36618.36618,0,0,1,.00851.339A.36618.36618,0,0,1,103.9912,15.76834Z"/><path class="cls-100" d="M116.05142,49.74938a9.04608,9.04608,0,0,1-1.60607-.30927,24.82036,24.82036,0,0,1-6.2407-3.08084,32.69528,32.69528,0,0,1-3.55447-2.77152c-.59419-.54027-1.11406-1.15082-1.65888-1.73833-.3913-.422-.64613-.94271-1.0407-1.36135a.49466.49466,0,0,1-.169-.51663c.19936-.06005.26687.10536.35429.21839a22.45843,22.45843,0,0,0,2.6744,2.77081.50126.50126,0,0,0,.22488.13966.69671.69671,0,0,1,.32959.19,15.20824,15.20824,0,0,0,3.31756,2.48578,20.89584,20.89584,0,0,0,7.08818,2.878.2989.2989,0,0,1,.20385.0946c.06436.26076.31134.23641.49073.29647a10.08826,10.08826,0,0,0,2.51365.62719c-.0432.02416-.08833.07226-.1293.06894-.73193-.05937-1.468.06634-2.19912-.05507A.86267.86267,0,0,0,116.05142,49.74938Z"/><path class="cls-101" d="M117.284,52.291c1.4294.223,2.87469.22357,4.314.30808a7.45441,7.45441,0,0,0,1.15328.15137,19.94371,19.94371,0,0,0,2.62146.00267c-.20049.23675-.50134.16619-.75056.21239a8.67985,8.67985,0,0,1-1.29058.09316,17.32487,17.32487,0,0,0-1.79255.07164c-.64666.0885-1.29274-.11316-1.94378-.0687a.6576.6576,0,0,1-.54789.10765,19.09292,19.09292,0,0,1-2.13054-.27882,1.33547,1.33547,0,0,0-.72659-.31323,1.44753,1.44753,0,0,1-.33605-.07979c-.12009-.04575-.28218-.09806-.25692-.24226.028-.16.20195-.12624.32183-.107A6.08538,6.08538,0,0,1,117.284,52.291Z"/><path class="cls-102" d="M115.97439,48.7487a6.61089,6.61089,0,0,1-1.79314-.36266,24.25482,24.25482,0,0,1-3.03227-1.18546,26.04683,26.04683,0,0,1-5.05172-3.08789,7.00689,7.00689,0,0,1-.72254-.68117c-.11916-.1184-.22086-.25513-.4164-.22905A8.45292,8.45292,0,0,0,103.786,41.992a27.85578,27.85578,0,0,1-2.23175-2.93572c-.1703-.23986-.30342-.50512-.47248-.74788-.09891-.142-.22463-.29021-.14863-.49139.15841-.07041.24866.04634.31406.14421a24.5847,24.5847,0,0,0,2.32465,2.93091c.41991.3695.777.80039,1.16857,1.1966A23.22635,23.22635,0,0,0,108.763,45.311a20.1061,20.1061,0,0,0,4.9384,2.40532,8.89788,8.89788,0,0,0,2.273.49284,6.18975,6.18975,0,0,0,1.64316.46074c.07691.01008.15442.00617.20569.07826v.077A6.7637,6.7637,0,0,1,115.97439,48.7487Z"/><path class="cls-103" d="M76.53205,47.13073a.67985.67985,0,0,0,.05348-.67741c-.09813-.3008-.32672-.59488-.13028-.94.03777-.388-.04941-.77367-.022-1.16168a.34373.34373,0,0,1,.23632-.10811,2.9581,2.9581,0,0,0,1.57493-.66083.25416.25416,0,0,1,.18106-.03869c.199.103.30742.304.47681.43969a.53043.53043,0,0,1,.10908.31866,2.96067,2.96067,0,0,0,.26058,1.21143c-.02812.16872-.15877.20981-.29866.25078-.4654.13636-.56629.33077-.43005.82576.08126.2952.19306.59074-.08521.84867A10.04146,10.04146,0,0,1,76.53205,47.13073Z"/><path class="cls-104" d="M78.45812,47.439a1.18761,1.18761,0,0,0-.02451-.84554c-.21443-.51363-.00367-.83849.55466-.9245a.28034.28034,0,0,0,.24059-.15544c.2125-.05962.348.089.50326.18492a.92893.92893,0,0,1,.33322.62053c.03255.32656.34787.52716.4421.83579-.30052.483-.079,1.14647-.54487,1.57484-.064.05882-.09862.14955-.19484.17259-.24948-.02191-.42843-.25538-.69332-.23107A2.7363,2.7363,0,0,1,78.45812,47.439Z"/><path class="cls-105" d="M116.89881,52.83a17.37,17.37,0,0,1,1.85531.20526c.28053.014.56114.009.84112.02639a2.09262,2.09262,0,0,0,1.012.24076,20.6139,20.6139,0,0,1,2.62214.21012c.36133.074.70655-.09858,1.06486-.06619.06853.27093-.1584.22881-.27743.22243a.42488.42488,0,0,0-.49293.31671.53364.53364,0,0,1-.43024.11793c-1.59569-.02474-3.18952-.10007-4.78259-.18025a9.56748,9.56748,0,0,0-2.03386-.52353,19.99246,19.99246,0,0,1-3.98214-1.25751,24.58873,24.58873,0,0,1-3.12776-1.63554c-.11564-.07268-.26578-.11058-.29762-.27483.16433-.17569.32438-.0701.47627.01579.37461.21184.75763.4078,1.13648.61158a1.3061,1.3061,0,0,0,.75365.21593,9.62624,9.62624,0,0,1,1.56257.63739,14.05587,14.05587,0,0,0,3.55494.94772A1.2,1.2,0,0,1,116.89881,52.83Z"/><path class="cls-106" d="M118.20841,53.83123c1.09849-.03665,2.19357.07338,3.2905.10011.6735.01641,1.35.03131,2.025.0541a16.4266,16.4266,0,0,0,2.66007-.22057,1.99491,1.99491,0,0,1,.42135-.01027c.06969.12095.1861.22322.15407.38488a27.88555,27.88555,0,0,1-3.09228.37723,4.18622,4.18622,0,0,1-.72118-.03266,24.06236,24.06236,0,0,0-2.81159.19437.38655.38655,0,0,1-.35366.10644c-1.136-.1592-2.29656-.06617-3.42161-.3341a.91655.91655,0,0,1-.35755-.126c-.06832-.2096.08713-.34.17629-.49453A9.42514,9.42514,0,0,1,118.20841,53.83123Z"/><path class="cls-107" d="M124.44829,63.382c-1.255-.23049-2.48523-.584-3.75249-.75459a.46839.46839,0,0,0-.25336.06141,9.4734,9.4734,0,0,1-3.63219-.37224,1.56741,1.56741,0,0,1-.87083-.35078.86807.86807,0,0,1,.26982-.72782.62067.62067,0,0,1,.47882-.06317,22.06993,22.06993,0,0,0,2.95958.34985.75646.75646,0,0,0,.34058-.02551,3.3359,3.3359,0,0,1,1.3951-.15547,11.75309,11.75309,0,0,1,2.44621.04691c.46019.02469.92.04317,1.3807.039.1646-.00151.33586-.03086.47062.1038a4.31449,4.31449,0,0,1,.86625.08318.36735.36735,0,0,1,.34156.26129c.05646.15392-.045.25089-.14533.32011-.28819.19888-.33468.68454-.84993.66391.40028.14069.21063.38431.17263.5968a2.236,2.236,0,0,1-1.19508-.17232C124.69978,63.18535,124.58646,63.33815,124.44829,63.382Z"/><path class="cls-108" d="M125.68085,61.53332a25.09434,25.09434,0,0,1-3.072-.09823,10.52167,10.52167,0,0,0-1.242.02121.72321.72321,0,0,1,.18915-.66947.83759.83759,0,0,1,.41418-.06027,21.09871,21.09871,0,0,0,4.20118-.3429.67408.67408,0,0,1,.588.0712,12.83539,12.83539,0,0,0,2.77328-.07683,7.58847,7.58847,0,0,1-2.09293.76072A5.09844,5.09844,0,0,0,125.68085,61.53332Z"/><path class="cls-109" d="M85.93075,11.16261a9.97044,9.97044,0,0,1,1.77163.07693c.1403-.13439.30772-.08818.47259-.07493.85644.06885,1.69843.23359,2.54327.3779a25.74877,25.74877,0,0,1,2.69026,1.34888c.33979.22284.37115.31509.226.68368a.80144.80144,0,0,1-.58826-.10173,5.86873,5.86873,0,0,0-1.5115-.40262,1.837,1.837,0,0,0-.8882-.19466,7.67235,7.67235,0,0,1-1.39322-.25808,10.31743,10.31743,0,0,0-1.60515-.117,20.79374,20.79374,0,0,1-2.37481-.713c-.10953-.0273-.21893-.08747-.19023-.24007.04938-.03633.10983-.11278.14641-.10268A.65046.65046,0,0,0,85.93075,11.16261Z"/><path class="cls-110" d="M85.08317,11.54785c.139.23507.405.19969.61166.25649a12.29917,12.29917,0,0,0,1.93046.59085,2.26167,2.26167,0,0,1-.20947.53136.38131.38131,0,0,1-.36106.05766,5.60577,5.60577,0,0,1-1.43234-.35811,8.31711,8.31711,0,0,0-2.43045-.54691,9.94053,9.94053,0,0,0-1.62336-.08263.57762.57762,0,0,1-.56832-.2945,23.83645,23.83645,0,0,1,3.265-.16128C84.538,11.54024,84.81055,11.73672,85.08317,11.54785Z"/><path class="cls-111" d="M123.13868,57.37428a13.4008,13.4008,0,0,0,1.92694.01431,1.756,1.756,0,0,1,.92337.13973c-.95636.09149-1.87688.39746-2.83574.47553-.032.00261-.06113.04145-.0916.06342-.07232.15784-.21271.16751-.356.15489-.8383-.07389-1.67818-.02247-2.51723-.03278a6.78787,6.78787,0,0,1-.9495-.07573,8.801,8.801,0,0,1-1.42089-.2495.53946.53946,0,0,1-.06668-.59553.86121.86121,0,0,1,.55867-.05,14.53737,14.53737,0,0,0,1.75593.01932c.954-.06319,1.91344.0267,2.87082.03952A.26356.26356,0,0,1,123.13868,57.37428Z"/><path class="cls-112" d="M128.223,57.91323c.11755.06392.21259.1704.368.15845.15987-.0123.17278.10624.17126.22646a.5714.5714,0,0,1-.41674.24573,24.57588,24.57588,0,0,1-5.27359.6326c-.46834-.06446-.94087-.03706-1.4098-.06345a2.79261,2.79261,0,0,1-1.39209-.29857c.05405-.23313.24882-.24709.42334-.23892a25.58976,25.58976,0,0,0,3.624-.24083c.30081-.02861.60256-.06181.90124-.11321.82161-.00985,1.62606-.18052,2.4392-.26913C127.84694,57.93175,128.03452,57.92424,128.223,57.91323Z"/><path class="cls-113" d="M125.21864,58.22149c-.54453.1026-1.08624.225-1.63422.30346a16.179,16.179,0,0,1-2.97463.15855.29046.29046,0,0,0-.32142.15377,1.47233,1.47233,0,0,1-.95828.08683c-.64261-.14626-1.30043-.21163-1.94338-.35932-.19967-.04587-.40558-.06076-.5213-.26437-.0007-.34688.241-.32707.47476-.30787a14.41435,14.41435,0,0,1,1.65823.0675.2813.2813,0,0,0,.21148-.0696,21.68134,21.68134,0,0,0,3.06845.06666c.26073.0014.52223.19012.78332.01017.42782.02309.80783.32341,1.2532.22772A3.6659,3.6659,0,0,1,125.21864,58.22149Z"/><path class="cls-114" d="M123.13868,57.37428c-1.79693-.065-3.59693.08479-5.39248-.07684a.33118.33118,0,0,1-.28661.06949,16.13033,16.13033,0,0,1-2.36894-.59294.58078.58078,0,0,1-.22527-.14144.33353.33353,0,0,1-.06013-.42117c.11131-.16057.27291-.09486.42-.05552a2.01514,2.01514,0,0,0,.79164.10344c.80524.04874,1.59946.19465,2.40217.2704a6.9666,6.9666,0,0,0,1.41635.00226,9.47631,9.47631,0,0,1,1.76335-.01364,15.0547,15.0547,0,0,0,2.4538.00731c.9316-.06493,1.86755-.03705,2.79793-.13023a.20215.20215,0,0,1,.14.05465c.12183.08794.31765.0526.38517.23106a12.76153,12.76153,0,0,1-1.80316.30323C124.75521,57.08087,123.9471,57.22674,123.13868,57.37428Z"/><path class="cls-115" d="M129.53263,55.14072a10.0376,10.0376,0,0,0-1.26468.28162c-.106.04361-.227.05386-.276.1805-.11288.17617-.30173.174-.477.202a29.12646,29.12646,0,0,1-5.16482.45448,7.14344,7.14344,0,0,1-.88091.05769c-.82509-.00028-1.64062-.13735-2.47455-.09654a6.02955,6.02955,0,0,1-1.92391-.22507,1.84636,1.84636,0,0,0-.84033-.301c-.32384-.06157-.40747-.17721-.36643-.4502a.844.844,0,0,1,.49043-.01817,20.537,20.537,0,0,0,2.3702.17255,3.67919,3.67919,0,0,1,1.41244.043,7.03336,7.03336,0,0,0,1.38066-.00388,9.47431,9.47431,0,0,1,1.65351-.0199,19.77184,19.77184,0,0,0,2.377-.14058c.22327-.01474.45212-.1312.67191.01776.38074.1665.73614-.04593,1.10409-.07156A6.62416,6.62416,0,0,1,129.53263,55.14072Z"/><path class="cls-116" d="M126.2201,55.295c-.83557.17525-1.69283.15786-2.53485.28255a5.78792,5.78792,0,0,1-.68052-.04761,14.8899,14.8899,0,0,0-1.7585.05914,6.69873,6.69873,0,0,1-1.825-.11145,1.07719,1.07719,0,0,0-.67359.04786c-.09518-.12555-.37526-.11636-.3201-.32806.0561-.2153.29428-.14808.46422-.17283,1.01757-.14824,2.04392.067,3.06213-.07273a.34275.34275,0,0,1,.26035.03487c1.18292.05267,2.36188-.07612,3.54363-.07739a14.21488,14.21488,0,0,0,2.255-.258c.45813-.07276.91133-.02082,1.36568-.04976q-1.35383.30794-2.7079.6148C126.5221,55.2498,126.37036,55.26912,126.2201,55.295Z"/><path class="cls-117" d="M90.7838,11.625c-.65286.02107-1.26571-.23923-1.91288-.26913-.39047-.018-.77909-.0762-1.16854-.11633-.17687-.20337-.47009-.16095-.67058-.31864-.11724-.09221-.26724-.14581-.33072-.29733.29036-.191.59424-.064.899-.06877.57162-.009,1.163.21317,1.72005-.08529.12774-.12347.28053-.083.431-.0685.55444.05351,1.0997.17716,1.65582.21484.707.31757,1.4139.63716,2.14791.89223.18534.21342.42657.39713.39224.72907a.52421.52421,0,0,1-.6131.02593,9.40185,9.40185,0,0,0-1.74439-.42521A5.12161,5.12161,0,0,1,90.7838,11.625Z"/><path class="cls-118" d="M76.4552,44.35823a1.48392,1.48392,0,0,1,.00005,1.15509c-.04277-.02413-.0907-.07533-.12752-.0683a10.96527,10.96527,0,0,1-1.49008-.08536c-.89144-.22478-1.14588-1.07462-1.64689-1.68178a2.85976,2.85976,0,0,1-.20215-.32109c.264-.04644.50984.0886.77035.07683.15983-.10717.26472.02346.37055.09817a.90816.90816,0,0,0,.96278.13093,1.5418,1.5418,0,0,1,.708-.12407A2.42132,2.42132,0,0,1,76.4552,44.35823Z"/><path class="cls-119" d="M75.83892,43.58794c-.35248.09954-.71494.14907-1.064.27912-.27015.10064-.49564-.144-.72548-.26925-.09712-.05291-.15973-.16765-.29045-.16419-.19462-.59916-.58736-1.10247-.81829-1.68528a.67941.67941,0,0,1-.10613-.317c.27824-.14481.46508-.32138.39124-.68808-.05339-.26511.17245-.36948.386-.44764a.469.469,0,0,1,.2995.02266,1.88035,1.88035,0,0,0,.8815.18955.34259.34259,0,0,1,.23836.10766,1.92018,1.92018,0,0,1,.56963,1.20987c.00814.343.24937.606.33757.92306C75.98042,43.03715,76.12693,43.3385,75.83892,43.58794Z"/><path class="cls-120" d="M73.60489,40.35313c-.22284.14185-.38183.28051-.25894.60371.10078.265-.12214.4448-.51141.47447a9.51753,9.51753,0,0,1-1.15215-.92568,4.53532,4.53532,0,0,1-.69673-1.07664.52651.52651,0,0,1,.24968-.04152c.21441.00722.4448-.01274.44462-.32133-.0001-.16164.10667-.17871.23015-.17656a.60374.60374,0,0,1,.54745-.07432.58279.58279,0,0,1,.278.24906,7.37975,7.37975,0,0,0,.7371.92009A.32669.32669,0,0,1,73.60489,40.35313Z"/><path class="cls-121" d="M96.94645,11.00889c.07634.19751.25213.30205.3963.44041a10.77855,10.77855,0,0,1,3.28481,5.7857,21.89474,21.89474,0,0,1,.31663,2.76075,8.23181,8.23181,0,0,1-.06875,1.10253,3.19065,3.19065,0,0,0-.02993,1.09527c.04882,1.23581.09342,2.47278.22712,3.70342.08268.76106.23517,1.51353.29044,2.27816.01332.18431.11427.37585-.03419.55042-.22122.00845-.21957-.17486-.2587-.31236a21.32067,21.32067,0,0,1-.6968-4.62259c-.02978-.50977-.04636-1.0228-.1183-1.53084a14.50825,14.50825,0,0,1,.05745-1.64784,11.27551,11.27551,0,0,0-1.82182-6.37145,6.98664,6.98664,0,0,0-2.05228-1.94234,5.75763,5.75763,0,0,0-.55767-.33859,12.17131,12.17131,0,0,0-2.6499-1.34316,3.08933,3.08933,0,0,1-.60928-.27114c-.09224-.06838-.24185-.09416-.22-.26074a.283.283,0,0,1,.10249-.02473c.98157.16281,1.96725.306,2.94171.50417a5.85108,5.85108,0,0,1,1.12846.43163C96.70745,11.05356,96.816,11.14553,96.94645,11.00889Z"/><path class="cls-122" d="M92.40154,10.0845a3.91252,3.91252,0,0,0,.84739.46209c-.02917.21065-.20336.18066-.32376.159a1.58036,1.58036,0,0,0-1.11842.03992.38748.38748,0,0,1-.32963-.04474c-.73053.03045-1.43226-.20769-2.157-.23124-.89261-.2817-1.78842-.55382-2.67653-.849-.45645-.15173-.996-.17058-1.25228-.69135.16061-.266.37457-.1312.57782-.07692s.41723.189.57772-.07707a16.072,16.072,0,0,0,4.11061.94118A11.04484,11.04484,0,0,1,92.40154,10.0845Z"/><path class="cls-123" d="M122.21426,54.98669a3.71864,3.71864,0,0,0-1.13346.125,1.66174,1.66174,0,0,1-.8351-.00155,12.336,12.336,0,0,0-1.82836.03217c.13519.18532.35252.187.33032.38318-.98146-.00488-1.95223-.14532-2.92734-.23069a2.93279,2.93279,0,0,1-1.29309-.24859,24.0785,24.0785,0,0,1-6.52229-3.313,22.52266,22.52266,0,0,1-3.18279-2.7161c-.11391-.11828-.25693-.21793-.28662-.39771.08568-.22456.20132-.074.28944-.01215a9.694,9.694,0,0,1,.9427.78917,17.80193,17.80193,0,0,0,2.48592,1.86735c.84068.53217,1.67774,1.06678,2.56633,1.51559.05352.00859.02721-.07915.02267-.028-.00184.02061-.014.02817-.03386.01782a12.55141,12.55141,0,0,1-3.03619-1.99325c-.07666-.0741-.196-.14526-.095-.284.17513-.0507.28654.07628.41586.15044.69875.40069,1.35552.87247,2.06567,1.252a21.86418,21.86418,0,0,0,5.46435,2.189c.122.02753.25784.02643.351.1332a3.76769,3.76769,0,0,0,1.40728.28656c.923.01034,1.83225.17228,2.75263.17537a8.92557,8.92557,0,0,0,1.6075.23427C121.90006,54.91712,122.07517,54.84841,122.21426,54.98669Z"/><path class="cls-124" d="M123.06165,59.0687a20.52446,20.52446,0,0,0,3.19693-.27309c.67143-.08712,1.32992-.2265,1.99532-.33548.18289-.03.32545-.15329.50837-.162a15.727,15.727,0,0,1,2.71806-.55179,3.01193,3.01193,0,0,1,.97964.013c-.01365.135-.10717.16341-.218.1523a3.39913,3.39913,0,0,0-.56287.07173c-.2968.01815-.3409.1897-.27218.41574a.41.41,0,0,1-.02544.36148,1.94561,1.94561,0,0,1-.61779.155c-.97528.23079-1.93789.51508-2.92584.69241a.49635.49635,0,0,1-.38358.15048,8.7551,8.7551,0,0,0-1.98592.13729c-.855.09549-1.71548-.00467-2.56648.13048a4.2281,4.2281,0,0,1-.99336-.07042c-.54843-.043-1.096-.08624-1.64709-.08528a1.587,1.587,0,0,1-.70942-.14224c-.08478-.28551.13454-.27346.2964-.28043.99384-.0428,1.96674-.30308,2.96651-.28258A.42788.42788,0,0,0,123.06165,59.0687Z"/><path class="cls-125" d="M78.227,14.16705a1.8593,1.8593,0,0,0-.97814-.23746c-.12913.02254-.183-.07447-.17482-.193.01-.14491-.10247-.228-.15664-.34019.62471-.00873,1.24681-.06873,1.86755-.10927.74871-.04889,1.47027-.24823,2.21532-.27595a14.70159,14.70159,0,0,1,2.54217-.23095c.59285.069,1.11293.40551,1.71295.46024.17083.01559.41944.04543.32235.349a15.5069,15.5069,0,0,1-2.41548.06968,6.04938,6.04938,0,0,0-1.63247.20286,22.30777,22.30777,0,0,1-2.26751.40507.53733.53733,0,0,1-.26494-.02344A2.13132,2.13132,0,0,1,78.227,14.16705Z"/><path class="cls-126" d="M85.62261,13.55a.362.362,0,0,0-.33807-.21712c-.58856.042-1.049-.38044-1.61123-.42479-.04669-.00368-.08737-.08344-.13085-.12785a11.6074,11.6074,0,0,1,1.87426-.07909.20518.20518,0,0,0,.2057-.075,15.21682,15.21682,0,0,1,1.53273.27239c.09.00665.17206.05056.23965-.04118a5.30563,5.30563,0,0,1,1.8887.35177,2.10033,2.10033,0,0,1,.66187.27046c.03908.16491.05467.33675.22024.446.08217.0542.15563.14229.01255.22591a6.38465,6.38465,0,0,1-1.71311-.17235,4.64876,4.64876,0,0,0-1.33938-.06467,2.08746,2.08746,0,0,1-.94524-.08354C85.98685,13.75286,85.76066,13.73856,85.62261,13.55Z"/><path class="cls-127" d="M121.4439,56.21938a40.81437,40.81437,0,0,0,5.42083-.45068c.37126-.07688.75122-.11167,1.12719-.16586.74569-.0727,1.49087-.15152,2.23734-.215.2798-.02378.56263-.01178.84407-.0161a3.99352,3.99352,0,0,1-1.34923.34551c-.65045.12888-1.247.41855-1.89359.5456a2.55292,2.55292,0,0,0-.84005.18716,3.38119,3.38119,0,0,1-1.234.13583c-1.31786.01657-2.63282.15239-3.95188.09534a.24214.24214,0,0,1-.20661-.07713C121.46252,56.50952,121.33469,56.41189,121.4439,56.21938Z"/><path class="cls-128" d="M119.51877,59.68505c.95944.11689,1.93072.05908,2.88936.21626a14.28581,14.28581,0,0,0,1.75486-.06939,14.52464,14.52464,0,0,0,2.61953-.21353,7.99256,7.99256,0,0,0,1.05533-.01036c-.004.41265-.28963.49954-.61956.5369-.20627.02336-.41673.04275-.45894.30993a12.3114,12.3114,0,0,0-2.0816.25287,20.84851,20.84851,0,0,1-2.84916.13207c-.10248.00287-.20509.00085-.30765.0011a.37166.37166,0,0,1-.32711.06824,1.55144,1.55144,0,0,0-.8325.07023.76175.76175,0,0,1-.41829.02823c-.84072-.17638-1.70561-.20619-2.53989-.42113a.8116.8116,0,0,1-.452-.19091c-.10513-.58545.16787-.90354.73133-.84752a16.22878,16.22878,0,0,1,1.64339.10842A.78524.78524,0,0,1,119.51877,59.68505Z"/><path class="cls-129" d="M75.29962,15.93791a1.37171,1.37171,0,0,1-.07661-.462c.51642.14195.95246-.20867,1.44-.23491.3805-.02047.73169-.18122,1.09578-.23117.41541-.057.83219-.13,1.2526-.16186.23984-.01818.36424-.12127.217-.37317a.809.809,0,0,1,.69893-.08465,2.22517,2.22517,0,0,0,.91149-.049,7.08118,7.08118,0,0,1,2.4303-.27232c.55868.05647,1.11338.15159,1.677.15455a4.18994,4.18994,0,0,1,1.40915.63054c.07151.06953.19628.05132.28754.09326.10277.04724.27232.05761.19431.25073a.60389.60389,0,0,1-.48361.034,10.35961,10.35961,0,0,0-5.80369.56027,16.86327,16.86327,0,0,1-3.91728,1.06251C75.85166,16.95213,75.42019,16.65506,75.29962,15.93791Z"/><path class="cls-130" d="M85.006,14.32051a11.5939,11.5939,0,0,1-1.66771-.13127,4.7051,4.7051,0,0,0-2.10992.20177,6.41311,6.41311,0,0,1-1.99984.08376.48417.48417,0,0,1-.23112-.23112c.6507-.23468,1.35874-.178,2.01223-.38646a11.63945,11.63945,0,0,1,3.71422-.30108c.29994.00265.59915-.15884.8988-.00615l.53906.15462a2.94958,2.94958,0,0,0,1.01242.43073c.10953.04168.26143-.006.31.15624-.026.04622-.06286.09262-.113.09473a4.70771,4.70771,0,0,1-1.95877.00618A.69194.69194,0,0,0,85.006,14.32051Z"/><path class="cls-131" d="M70.36945,19.86586a1.414,1.414,0,0,1,.61618-.23094.51892.51892,0,0,1,.41518.142,2.05349,2.05349,0,0,0,.81834.43734,2.13243,2.13243,0,0,1,.58435.82824c-.03776.17558-.14744.322-.19981.4923a.22788.22788,0,0,1-.22359.1786c-.53447-.03143-.7842.34-1.036.71283-.24.08907-.37944.362-.6662.36643-.01406-.18825-.16177-.27269-.28821-.37572a1.249,1.249,0,0,1-.59139-.78188c-.03654-.23094-.30154-.38934-.5075-.53736,0-.11467-.00277-.22942.0007-.344.00642-.21251-.08533-.42476.32854-.40342A.74106.74106,0,0,0,70.36945,19.86586Z"/><path class="cls-132" d="M68.67462,25.48821c.005-.01159.01588-.024.01432-.03465a1.02571,1.02571,0,0,1,.371-.88927,3.63165,3.63165,0,0,0,1.00127-.15422,1.70323,1.70323,0,0,1,1.064,1.08381c-.10466.59643.042.86277.62681,1.10948.1427.06019.3014.08762.31578.2847a1.21213,1.21213,0,0,1-.50739.81725,3.03818,3.03818,0,0,1-1.73034-.29168,12.45671,12.45671,0,0,0-.41229-1.30134C69.3238,25.78783,68.90458,25.72309,68.67462,25.48821Z"/><path class="cls-133" d="M70.67792,22.79262c.20927-.1222.33855-.37224.61609-.38532.11895-.08783.21754-.00852.32023.03875a6.24089,6.24089,0,0,0,1.77016.48329.76874.76874,0,0,0,.688-.1318.19643.19643,0,0,1,.218-.02684c.089.09736.04381.189-.011.28056a1.92469,1.92469,0,0,1-1.09005.7075c-.38026.09048-.69568.36374-1.09007.43243a3.6154,3.6154,0,0,1-1.65278-.39739A1.94226,1.94226,0,0,1,70.67792,22.79262Z"/><path class="cls-134" d="M70.44644,23.7938a12.25887,12.25887,0,0,0,1.69478.30828,4.64569,4.64569,0,0,1,1.01823.4373c.14867.10327.29793.21213.26788.43a.46216.46216,0,0,1-.325.28368,14.99121,14.99121,0,0,0-1.681.28775.35364.35364,0,0,1-.35867-.0524,2.856,2.856,0,0,0-1.00146-1.07836C70.19493,24.20794,70.22075,23.93844,70.44644,23.7938Z"/><path class="cls-135" d="M75.29962,15.93791c.12116.26612.38376.43386.48741.716.06139.16709.22888.12783.365.13052.15236.003.30482.00065.45724.00062a1.43989,1.43989,0,0,1,1.03941.12339,1.12717,1.12717,0,0,0,.81812.01084c.88143-.27044,1.75143-.57255,2.62151-.87656a9.73823,9.73823,0,0,1,2.83516-.44126.71685.71685,0,0,1,.44723.07409c.01053.313-.26029.303-.43856.33543-.80331.14617-1.56859.43-2.35851.62254a4.006,4.006,0,0,0-.91164.37925A14.216,14.216,0,0,1,76.99864,18.468a8.39357,8.39357,0,0,0-1.22334.32913,1.00475,1.00475,0,0,1-.74961.03751c-.1281-.10081-.04571-.26407-.11585-.38575a1.746,1.746,0,0,0-.5718-.72886c-.209-.1269-.504-.27152-.42519-.62682a.29768.29768,0,0,0,.03291-.40308.98148.98148,0,0,1-.1868-.67515Z"/><path class="cls-136" d="M73.91285,17.09325a.72834.72834,0,0,0,.44519.53009c.38091.15209.44809.51128.65572.77485.10325.13107.04184.26261-.02223.38932a.6866.6866,0,0,0-.22372.73057.30624.30624,0,0,1-.09269.30879,7.73889,7.73889,0,0,1-1.68485.0677,1.45467,1.45467,0,0,1-.7722-1.41518c.188-.30169-.06786-.56313-.07684-.84695a1.34323,1.34323,0,0,0,.6573-.429C73.16245,16.7754,73.5226,16.92236,73.91285,17.09325Z"/><path class="cls-137" d="M69.83015,27.41363a10.3291,10.3291,0,0,0,1.77182.231c.09534-.0641.15126-.02555.18529.07082a9.66333,9.66333,0,0,1-.38909,1.39885,1.69681,1.69681,0,0,1-2.261-.69921,1.389,1.389,0,0,0-.07764-.46219C69.38744,27.87459,69.54109,27.54741,69.83015,27.41363Z"/><path class="cls-138" d="M69.44479,34.57706a.89927.89927,0,0,0,.4624-.38565c.01953-.01637.04418-.04384.06229-.039.50975.13677,1.07878.13871,1.43773.62331a2.78493,2.78493,0,0,0,1.05418,1.881.328.328,0,0,1,.10074.16154c-.03917.22157.15442.48082-.1068.66718a.31824.31824,0,0,1-.22291.01483,11.90535,11.90535,0,0,1-1.70876-.6902,3.97793,3.97793,0,0,0-.54053-.82454c-.1845-.221-.17829-.54563-.336-.8005A2.67873,2.67873,0,0,1,69.44479,34.57706Z"/><path class="cls-139" d="M70.52366,36.81006a8.1717,8.1717,0,0,1,1.52424.536.90461.90461,0,0,0,.40146.08046c.16816.29523.38618.55857.54867.85745.07316.13457.15918.26849.00611.40645a2.631,2.631,0,0,1-.47793.19927l-.6161-.00009-1.38682-1.30933C70.492,37.32351,70.65,37.06685,70.52366,36.81006Z"/><path class="cls-140" d="M69.13721,28.41514c.2062.16753.41854.32812.6172.50415a1.0914,1.0914,0,0,0,1.08934.24518,1.9777,1.9777,0,0,1,.52711-.05633c.23669-.10734.32333.08034.40326.22737a1.73813,1.73813,0,0,1,.241,1.05508,1.05531,1.05531,0,0,0-.729.45984.37083.37083,0,0,1-.37417.15443,6.90629,6.90629,0,0,0-1.365-.59885.42318.42318,0,0,1-.25581-.21941c-.17707-.145-.18946-.40761-.38517-.53932A9.638,9.638,0,0,1,69.13721,28.41514Z"/><path class="cls-141" d="M71.37086,34.80766a3.89661,3.89661,0,0,0-1.46367-.61625l-.462-1.46352a6.961,6.961,0,0,0-.07723-1.155c.11189-.09062.22345-.0362.3221.01624.28527.15167.61438.17636.9013.32058.199.29856.617.40518.70583.80118a1.80527,1.80527,0,0,0,.44777,1.79709.17341.17341,0,0,1,.028.14581A.54634.54634,0,0,1,71.37086,34.80766Z"/><path class="cls-142" d="M70.60051,31.958a4.82858,4.82858,0,0,1-1.23257-.38519,2.1396,2.1396,0,0,1-.07685-1.38625,5.79434,5.79434,0,0,1,1.61794.77019C70.87408,31.31145,70.9232,31.692,70.60051,31.958Z"/><path class="cls-143" d="M72.21807,18.47939c.16053.49322.24221,1.03281.77054,1.30975.03492.183-.09473.25465-.22715.297a2.66194,2.66194,0,0,1-.54339.16507,1.00245,1.00245,0,0,1-.81772-.37536c-.09727-.13478-.31726-.08825-.41472-.24094-.0336-.4874-.28587-.96334-.07679-1.46348A1.85149,1.85149,0,0,1,72.21807,18.47939Z"/><path class="cls-144" d="M100.10509,51.21275a4.98266,4.98266,0,0,0,.72812,1.20217c.37854.58814.79643,1.151,1.19757,1.72456-.50371.249-.50371.249-.34674.7912-.04735.053-.098.02748-.13193-.00836a.94587.94587,0,0,0-1.18206-.21984.81882.81882,0,0,1-.56668.042,9.15052,9.15052,0,0,0-2.32974-.14268,5.92572,5.92572,0,0,1-1.14665-.06675c-.29734-.06987-.57225-.01442-.61449.37728-.02863.26556-.23411.21392-.409.22976a11.26842,11.26842,0,0,1-4.47769-.5614c-.08328-.02656-.20151-.07492-.2562-.03972-.65758.42334-1.18559-.09726-1.75671-.24284a10.13328,10.13328,0,0,0-1.49222-.48264c-1.47344-.12828-2.53353-1.1225-3.79438-1.68909a.48716.48716,0,0,1-.272-.35672,1.03539,1.03539,0,0,0-.52759-.6637,1.13787,1.13787,0,0,1-.6104-.69487c-.05191-.23085-.40007-.26674-.49973-.5077a.35379.35379,0,0,1-.00307-.26082,1.01653,1.01653,0,0,0-.09507-1.06331A.65742.65742,0,0,1,81.921,47.663a.80954.80954,0,0,1,.83549.36132,4.57442,4.57442,0,0,0,1.4204.89808A23.07867,23.07867,0,0,0,88.442,50.66466a2.60935,2.60935,0,0,0,2.10325-.17611.83141.83141,0,0,1,.41216-.07145,12.00146,12.00146,0,0,0,1.68886-.06774,1.03888,1.03888,0,0,1,.778.13946.22891.22891,0,0,0,.14283.05232A4.946,4.946,0,0,0,95.84,50.11726a12.36668,12.36668,0,0,0,1.89609-1.23368.50978.50978,0,0,1,.3907-.13406.24987.24987,0,0,1,.17169.07361A16.27471,16.27471,0,0,1,100.10509,51.21275Z"/><path class="cls-145" d="M81.92453,47.74688c-.26091.0619-.528.66281-.32626.8288.42511.34981.24093.70347.11046,1.07762-.02926.08388-.06136.16677-.09215.25012a1.28872,1.28872,0,0,0-1.2322,0,3.17914,3.17914,0,0,1-.61665-1.00127,2.35618,2.35618,0,0,1,.31661-.52354c.07263-.08.16165-.22983.13212-.30373-.15419-.386.10372-.64655.24459-.94418a.35738.35738,0,0,1,.55621-.14148,4.28957,4.28957,0,0,0,.696.52916C81.8,47.57334,81.94637,47.58671,81.92453,47.74688Z"/><path class="cls-47" d="M115.97439,61.91841a11.06617,11.06617,0,0,0,2.3839.61783,8.48555,8.48555,0,0,0,1.63858.07419.82912.82912,0,0,1,.44557.07836,3.5031,3.5031,0,0,1-1.08,1.16659c-.17192.10065-.36243.26187-.22956.52765a2.89727,2.89727,0,0,0-1.36558-.39452,2.05221,2.05221,0,0,1-1.03642-.47209,13.55661,13.55661,0,0,0-1.53858-.76812c-.28516-.13652-.46114-.432-.76-.56375-.39778-.17532-.78555-.37331-1.183-.54944a21.96656,21.96656,0,0,1-4.65882-2.93614,17.10949,17.10949,0,0,1-2.90691-2.71212,2.69424,2.69424,0,0,0-.34-.307,3.1238,3.1238,0,0,0-.52624-.8379.39546.39546,0,0,1-.12062-.4523c.1894-.0974.27241.06948.37645.16166a3.55281,3.55281,0,0,1,.39885.41105,31.07431,31.07431,0,0,0,5.35635,4.51423,21.91871,21.91871,0,0,0,2.99908,1.62931,14.47057,14.47057,0,0,0,1.90513.706A.48452.48452,0,0,1,115.97439,61.91841Z"/><path class="cls-146" d="M104.7274,54.37053a.732.732,0,0,0,.28856.56028.96309.96309,0,0,1,.32754.749,15.10068,15.10068,0,0,1-1.80342-1.82613.34356.34356,0,0,0-.27654-.17637c-.854-1.022-1.67-2.07408-2.48286-3.12881a3.69371,3.69371,0,0,1-.29061-.4909,1.358,1.358,0,0,0-.34955-.67117c-.16578-.22956-.33882-.47429-.07451-.75345.26223-.06715.36792.13543.48123.29718.63841.91129,1.31151,1.79682,2.007,2.66433.61528.76746,1.24286,1.5257,1.89928,2.25934C104.585,54.00079,104.76182,54.13211,104.7274,54.37053Z"/><path class="cls-147" d="M100.10509,51.21275a5.68051,5.68051,0,0,1-.90864-1.16963A10.79138,10.79138,0,0,1,98.17892,48.825a1.05136,1.05136,0,0,1-.45972-.59193,1.28384,1.28384,0,0,0-.27659-.49995,15.0151,15.0151,0,0,1-1.31507-1.54588c-.06787-.23957-.10312-.48568-.147-.7301a2.51917,2.51917,0,0,0,.33105-1.02076c.25885-.05276.32856.16887.41535.3188.45568.78723,1.00525,1.51126,1.50415,2.269.38831.51016.79652,1.00515,1.17556,1.522.105.14319.28081.28676.15944.5102a.50037.50037,0,0,0,.156.341c.43729.38889.41907.9636.60072,1.45518C100.38534,51.02188,100.24705,51.13358,100.10509,51.21275Z"/><path class="cls-148" d="M99.56612,49.0564a5.28542,5.28542,0,0,0-.94163-1.36251c-.14494-.21576-.29677-.4269-.44548-.64014a19.50347,19.50347,0,0,0-1.44784-3.11088.952.952,0,0,1-.113-.28312,7.77129,7.77129,0,0,0-.24572-.87524.58052.58052,0,0,1-.00645-.47779c.252-.11649.29407.11617.4018.2404.53991.71528.92071,1.53028,1.4204,2.271a2.0609,2.0609,0,0,1,.28539.5401,2.68963,2.68963,0,0,0,.29075.62424.7056.7056,0,0,1,.13052.233c.10729.806.74629,1.31179,1.10508,1.97487.08046.14871.25011.28128.10513.48059-.22049.34759.04261.56244.22171.79812.13356.17575.35169.32483.16327.58861a2.3225,2.3225,0,0,1-.627-.74489C99.78391,49.20517,99.744,49.0503,99.56612,49.0564Z"/><path class="cls-149" d="M101.26062,28.72314c.15986-.12858.01118-.26117-.00215-.38731a43.448,43.448,0,0,1-.4752-5.73687c.01-.37322-.061-.759-.0624-1.14135-.00052-.14341-.00688-.28673.15457-.35933.00179.20456.09.394.081.60472a21.265,21.265,0,0,0,.31808,3.76392,27.71887,27.71887,0,0,0,.75415,3.81531,25.51912,25.51912,0,0,0,1.08076,3.13783c-.20517.02849-.28611-.10579-.36529-.2619a9.393,9.393,0,0,1-.56178-1.32248c-.06345-.19362-.13411-.38925-.38216-.41821a.25658.25658,0,0,1-.21793-.134A3.12,3.12,0,0,1,101.26062,28.72314Z"/><path class="cls-150" d="M101.26062,28.72314q.12164.54068.2434,1.08133a1.06425,1.06425,0,0,0,.29622.613,17.661,17.661,0,0,0,.85642,2.33428,14.88147,14.88147,0,0,0,1.02441,1.97389,12.918,12.918,0,0,0,3.11417,3.60388c.22673.17545.55038.298.62784.637-.50916-.10373-.79692-.52666-1.16347-.82752-.70538-.579-1.3827-1.19209-2.07165-1.791a.35728.35728,0,0,1-.20209-.16663,23.6376,23.6376,0,0,1-1.8428-3.00233c-.41545-.80942-.70368-1.66765-1.09124-2.48657a9.877,9.877,0,0,1-.57418-2.25864c-.02052-.1002-.04231-.19986-.068-.29916a45.591,45.591,0,0,1-.52229-4.92912c-.03771-.75925.102-1.5.0374-2.25348A13.97517,13.97517,0,0,0,98.86848,16.133,7.65612,7.65612,0,0,0,97.664,14.3102a1.48206,1.48206,0,0,1-.30113-.44205c-.02642-.05718-.03081-.13418-.07381-.17333-.47456-.43208-.71443-1.05353-1.19808-1.47779-.10946-.096-.26583-.16867-.22286-.36107A7.32692,7.32692,0,0,1,98.0605,13.5547a8.86827,8.86827,0,0,1,2.085,4.478,11.14262,11.14262,0,0,1,.20032,3.68444,6.748,6.748,0,0,0,.08673,1.48676c.062.73339.11446,1.47.19032,2.20332a13.58749,13.58749,0,0,0,.4401,2.46364C101.14526,28.1501,101.19565,28.43876,101.26062,28.72314Z"/><path class="cls-151" d="M100.49026,28.18391c.10771.44123.24089.87806.31783,1.32459a12.983,12.983,0,0,0,.9628,2.60282,17.62735,17.62735,0,0,0,2.21771,3.9106c.07553.102.13333.21707.19936.32607a4.31788,4.31788,0,0,0,.83719,1.17079,16.68366,16.68366,0,0,0,3.65157,3.13243,6.78227,6.78227,0,0,1,1.13483.70308,4.13863,4.13863,0,0,1-1.28306-.65351,14.23841,14.23841,0,0,1-2.66756-2.03461,2.79517,2.79517,0,0,0-.49951-.27079,3.61411,3.61411,0,0,1-1.00977-1.0326c-.08336-.11793-.15441-.23708-.31776-.24455a1.96222,1.96222,0,0,1-.69341-.72895,21.65015,21.65015,0,0,1-1.78423-3.255,1.13623,1.13623,0,0,1-.0955-.36982c-.06667-.31476-.26118-.58765-.31978-.89921-.21437-1.13974-.59449-2.241-.77525-3.38757C100.34823,28.36669,100.28336,28.21076,100.49026,28.18391Z"/><path class="cls-152" d="M101.56876,32.80506a.81993.81993,0,0,0,.03922.22274,19.489,19.489,0,0,0,2.1083,3.70083c.10421.13114.31594.17708.31761.3896a7.6069,7.6069,0,0,0,.844,1.10886,17.30827,17.30827,0,0,0,1.96089,1.96693c.09861.09786.18464.20839.27649.31306a3.29766,3.29766,0,0,1-.94965-.692c-.50943-.43975-.96233-.9396-1.50316-1.35082a12.59356,12.59356,0,0,1-1.512-1.72851,9.34923,9.34923,0,0,1-.96548-1.46609,4.68342,4.68342,0,0,1-.86152-1.52969,19.512,19.512,0,0,1-1.2481-3.792c-.02741-.14933-.09182-.29863.00681-.44577.20467-.03.20571.14581.24482.26108.07761.22874.12344.46741.183.70183a.72925.72925,0,0,0,.09234.28925A12.84074,12.84074,0,0,1,101.56876,32.80506Z"/><path class="cls-153" d="M100.10652,29.49368a14.97194,14.97194,0,0,0,.84808,3.05317,23.0404,23.0404,0,0,0,1.23044,2.72283.2548.2548,0,0,1-.23539-.16061c-.09509-.189-.23416-.15286-.3807-.07036-.29742-.05915-.36626-.329-.46649-.54568-.16515-.357-.29836-.72909-.47866-1.08047a32.534,32.534,0,0,1-1.11739-3.55191,41.22811,41.22811,0,0,1-.71808-5.01551c-.04535-.54345-.04311-1.0956-.0377-1.64631a10.6171,10.6171,0,0,0-2.27969-7.20427,11.752,11.752,0,0,0-2.502-2.14428c-.12459-.08452-.28213-.13445-.3348-.3a.52662.52662,0,0,0-.32035-.607,12.774,12.774,0,0,0-1.80592-.90866,3.02878,3.02878,0,0,1-.724-.40957,12.5179,12.5179,0,0,1,2.48618.49225c.23494.07836.43439.201.67227.04718a.208.208,0,0,1,.1838.02318c2.10925,1.2313,3.95136,2.71364,4.80969,5.11986a8.8222,8.8222,0,0,1,.60349,2.7228,14.08481,14.08481,0,0,0,.118,1.91415,6.71133,6.71133,0,0,1-.06535,1.10949,30.54062,30.54062,0,0,0,.50652,5.84273C100.1364,29.0906,100.22423,29.29354,100.10652,29.49368Z"/><path class="cls-154" d="M100.72137,33.42118c.3386.50981.39472,1.16757.84758,1.61753a1.07836,1.07836,0,0,0,.23959.58961c.17916.28984.35406.58231.53076.87367-.13727.13092-.0735.25152.01922.37044a20.01592,20.01592,0,0,0,1.634,2.42364.50389.50389,0,0,1,.19541.44072l-.61583-.53894a2.054,2.054,0,0,1-.70358-.73765,20.12785,20.12785,0,0,1-2.76914-4.89433,18.05126,18.05126,0,0,1-.89768-2.65252.5774.5774,0,0,1-.02106-.41274c.21-.0957.27073.05775.32051.20349.074.21651.14395.43459.213.65281a1.659,1.659,0,0,0,.38207.69074,2.62906,2.62906,0,0,1,.38517.902A1.85154,1.85154,0,0,0,100.72137,33.42118Z"/><path class="cls-155" d="M100.18212,33.57544a22.53537,22.53537,0,0,0,2.2789,4.17267c.35207.49623.73969.96723,1.11111,1.44974.11575.55441.58173.86189.91744,1.24947a20.67708,20.67708,0,0,0,5.42126,4.33327,16.94068,16.94068,0,0,0,4.34035,1.921,1.03137,1.03137,0,0,1,.49064.19809,10.14386,10.14386,0,0,1-1.65693-.44128,16.416,16.416,0,0,1-3.18314-1.29667,13.39793,13.39793,0,0,1-3.71765-2.46464c-.24154-.22765-.49577-.44177-.74064-.666a23.40167,23.40167,0,0,1-3.24736-3.81852,1.01093,1.01093,0,0,0-.319-.32419,17.20707,17.20707,0,0,1-1.75331-3.34878,1.04946,1.04946,0,0,1-.10729-.51927A.77949.77949,0,0,1,100.18212,33.57544Z"/><path class="cls-156" d="M101.80005,39.968a1.17328,1.17328,0,0,0,.27255.54195c.48714.57207.8881,1.2119,1.41106,1.75744.40606.4236.77891.879,1.16652,1.32032-.415-.1679-.63068-.5624-.95008-.83916a1.67411,1.67411,0,0,0-.66748-.47007,1.67155,1.67155,0,0,0-.4624-.46212,3.61646,3.61646,0,0,1-.77946-.81978,26.08007,26.08007,0,0,1-1.78526-2.82529,3.16931,3.16931,0,0,1-.48909-1.11533.61119.61119,0,0,1,.20112-.33883c.12937-.006.17013.09474.21372.18484a22.90586,22.90586,0,0,0,1.74708,2.76671C101.73971,39.75978,101.84793,39.83235,101.80005,39.968Z"/><path class="cls-157" d="M116.74474,51.21275a9.63628,9.63628,0,0,1-1.53348-.04933,10.50278,10.50278,0,0,1,1.17739.43076c.06743.0304.16981.0362.14413.13715-.02432.09554-.10946.06884-.19.056-.27586-.04384-.55359-.07593-.83061-.11251-.14822.13651-.31108.07454-.47163.03374a21.87417,21.87417,0,0,1-5.10378-2.09381,20.27968,20.27968,0,0,1-3.75281-2.453,12.22682,12.22682,0,0,1-1.66-1.52868,7.24028,7.24028,0,0,0-.82364-.90293c-.68966-.83256-1.37484-1.669-2.03206-2.52764-.08128-.1062-.18853-.2199-.11878-.38038.16162-.07268.27513.06429.41355.09393a6.80131,6.80131,0,0,1,1.20546,1.28187,21.82971,21.82971,0,0,0,2.456,2.37912c.98848.81129,2.0494,1.52944,3.10853,2.24679a21.04338,21.04338,0,0,0,6.164,2.75979,1.04783,1.04783,0,0,0,.15288.01331c.10908.192.31071.18895.49.22969A3.625,3.625,0,0,1,116.74474,51.21275Z"/><path class="cls-158" d="M108.73305,47.8239a9.77984,9.77984,0,0,1-1.76558-1.12318,20.17726,20.17726,0,0,1-3.54554-3.07676c-.50837-.533-.97981-1.10118-1.468-1.65342a21.70644,21.70644,0,0,1-1.60361-2.426c-.05946-.1107-.14964-.21218-.1027-.35367.24917-.10151.30685.109.38813.25245a9.01009,9.01009,0,0,0,1.24095,1.52585l.69351.84721c-.01454.3458.315.4952.448.76425.18871.38164.60516.60642.872.93a10.93529,10.93529,0,0,0,1.32005,1.43018c.54175.45877,1.08962.91418,1.63653,1.36681a5.73277,5.73277,0,0,1,1.14776.92735C108.18288,47.49425,108.55624,47.53915,108.73305,47.8239Z"/><path class="cls-159" d="M104.57314,45.59034c.57724.59647,1.22586,1.113,1.85486,1.65122a24.51107,24.51107,0,0,0,4.83039,2.95352A18.61123,18.61123,0,0,0,115.169,51.649a1.89494,1.89494,0,0,0,.34313.02589,6.35246,6.35246,0,0,0,1.49041.45642c.11737.028.22662.03625.28141.15973a8.78622,8.78622,0,0,1-1.6261-.05771c.219.25549.53522.22074.81059.27931a.50818.50818,0,0,1,.43033.31735,13.76889,13.76889,0,0,1-4.052-.98877c-.55248-.22808-1.09925-.47-1.64861-.70565a14.87842,14.87842,0,0,1-2.695-1.53995,34.34456,34.34456,0,0,1-5.002-4.2883c-.42339-.44582-.80175-.92978-1.20866-1.38954a9.34161,9.34161,0,0,0-.75608-1.06162c-.07786-.12537-.21029-.23693-.14275-.41437.25622-.06246.36061.154.48178.2926C102.73828,43.72114,103.68575,44.62734,104.57314,45.59034Z"/><path class="cls-160" d="M100.10509,34.03756a3.815,3.815,0,0,0,.51142,1.384,11.06448,11.06448,0,0,0,1.17137,2.141.4543.4543,0,0,1,.08921.32583c-.25225-.022-.28238-.26131-.39379-.41483-.14545-.20042-.22328-.45156-.45379-.58641-.20083-.04455-.286-.20958-.36468-.36923a28.97375,28.97375,0,0,1-1.42472-3.02837,6.043,6.043,0,0,0-.37657-.625A19.90608,19.90608,0,0,1,98.009,30.049a12.99634,12.99634,0,0,1-.39572-1.90942,18.93417,18.93417,0,0,1-.24229-2.519.92191.92191,0,0,1,.07543-.48725c.31537-.08193.25678.17834.29892.33532.12755.47524.13364.97368.27193,1.44692a16.69761,16.69761,0,0,1,.4072,2.18756,21.95423,21.95423,0,0,0,1.49452,4.47379C99.98719,33.7287,100.02264,33.89244,100.10509,34.03756Z"/><path class="cls-161" d="M98.94988,32.88208a3.07944,3.07944,0,0,1,.65927,1.26919c.36456.81367.78908,1.59632,1.17886,2.39662a2.45075,2.45075,0,0,0,.2415.33929,13.23978,13.23978,0,0,0,1.24742,2.13365c.41276.54791.8159,1.10314,1.21838,1.65868a.81245.81245,0,0,1,.07656.21266,12.161,12.161,0,0,1-2.00871-2.30606c-.19966-.26009-.29618-.60469-.61009-.77463-.23767-.07149-.27059-.30915-.38933-.47764a12.38022,12.38022,0,0,1-1.236-2.67087c-.15643-.42749-.286-.87139-.41908-1.31044A.43387.43387,0,0,1,98.94988,32.88208Z"/><path class="cls-162" d="M100.64448,37.3492l.30859.46228a7.74791,7.74791,0,0,0,1.06342,1.76085,18.89517,18.89517,0,0,0,1.30266,1.74622,12.19219,12.19219,0,0,0,1.34522,1.40653.6848.6848,0,0,1,.29395.47739c-.54209-.517-1.09831-1.01829-1.63193-1.54551-.54418-.53765-.98315-1.15848-1.52635-1.68892a22.84119,22.84119,0,0,1-2.08013-3.2349,1.71972,1.71972,0,0,1-.48942-1.14132c.21373-.081.32643.08277.38.218A9.64945,9.64945,0,0,0,100.64448,37.3492Z"/><path class="cls-163" d="M78.84311,43.97313c-.23786-.01886-.29524-.21859-.38593-.38494-.37479-.429-.751-.8568-1.13462-1.27805a.63415.63415,0,0,1-.17468-.28963c-.09282-.47795.333-.7158.4972-1.07518a1.63653,1.63653,0,0,0,.93469-.7178.48984.48984,0,0,1,.4959-.294.27227.27227,0,0,1,.12645.12261,1.28639,1.28639,0,0,0,.55643,1.03713c.42624.3293.40406.82752.44636,1.297a3.00209,3.00209,0,0,1-.82528.994C79.14729,43.53286,79.08678,43.836,78.84311,43.97313Z"/><path class="cls-164" d="M78.84311,43.97313a1.61123,1.61123,0,0,1,.67121-.803c.29432-.17378.31364-.58822.6384-.73743a1.20631,1.20631,0,0,1,.62422.661c.01208.3155.26214.60257.11367.93747a1.0692,1.0692,0,0,0-.53278.735,1.373,1.373,0,0,1-.66714.978l-.46184-.23076a1.29486,1.29486,0,0,1-.304-.94267A2.26283,2.26283,0,0,0,78.84311,43.97313Z"/><path class="cls-165" d="M77.22556,42.04746c.31427.35271.625.70865.94452,1.05657a.83637.83637,0,0,1,.28711.48415,1.78306,1.78306,0,0,0-.67081.40255,2.65305,2.65305,0,0,1-1.33118.3675,2.17132,2.17132,0,0,1-.61628-.77029,1.361,1.361,0,0,0,.00019-.84749,2.41172,2.41172,0,0,0,1.185-.67624A.137.137,0,0,1,77.22556,42.04746Z"/><path class="cls-166" d="M79.69069,45.74427a2.66277,2.66277,0,0,0,.64856-1.28033.44391.44391,0,0,1,.507-.414,1.49509,1.49509,0,0,1,.83516.61191.404.404,0,0,1-.01066.22336.56356.56356,0,0,0-.06044.638.86554.86554,0,0,1-.27963.949c-.14426.09087-.15331.16051-.09459.306.08584.21274.00473.322-.23577.27543-.20491-.15041-.36687-.00027-.53924.077-.19234-.30046-.54252-.50817-.49343-.95009C79.98708,46.00551,79.77458,45.89777,79.69069,45.74427Z"/><path class="cls-167" d="M118.20841,53.83123l-2.07958.07719a21.43971,21.43971,0,0,1-9.80543-5.08971,3.50989,3.50989,0,0,1-.75037-.652c-.06886-.10466-.18308-.18481-.17038-.331.13484-.12091.24309-.019.33575.05661a23.15163,23.15163,0,0,0,2.99227,2.11311.29012.29012,0,0,1,.15646.20611,23.26752,23.26752,0,0,0,5.74114,2.6786c.58768.17538,1.19024.27325,1.78247.41695.51773.12563,1.036.24734,1.55728.35681A.29536.29536,0,0,1,118.20841,53.83123Z"/><path class="cls-168" d="M108.88713,50.2115A25.38448,25.38448,0,0,1,106.27,48.44541a2.78975,2.78975,0,0,0-.84949-.62151.22451.22451,0,0,1-.1964-.084,1.52978,1.52978,0,0,0-.49571-.57882,15.62826,15.62826,0,0,1-2.0097-2.16295c-.50108-.54515-.88632-1.19221-1.39978-1.73354-.11189-.118-.23049-.25109-.1538-.44275.17505-.06949.25437.07706.352.165a7.06194,7.06194,0,0,1,.822.909,10.06659,10.06659,0,0,1,1.02018,1.13332,38.47546,38.47546,0,0,0,3.56418,3.25439,23.058,23.058,0,0,0,4.0794,2.678.35775.35775,0,0,1,.19532.17393c-.20048.12162-.3738.00157-.53672-.08041-.46585-.23443-.92812-.47732-1.37981-.73769A.68561.68561,0,0,0,108.88713,50.2115Z"/><path class="cls-169" d="M105.26665,47.74617a.16041.16041,0,0,1,.15388.07773,12.26179,12.26179,0,0,0,2.07966,1.83588c.452.36928.94206.69524,1.40875,1.05038a15.58254,15.58254,0,0,0,2.92818,1.62164,24.746,24.746,0,0,0,3.77081,1.37526c.169.04742.44022-.09073.5209.20136.10066.17893.05889.28649-.15444.30807a9.81511,9.81511,0,0,1-2.53338-.69278,28.29827,28.29827,0,0,1-5.581-2.91463,1.29086,1.29086,0,0,0-.20547-.08951,3.9207,3.9207,0,0,1-1.03254-.71588,23.28415,23.28415,0,0,1-2.34989-2.14094,13.99846,13.99846,0,0,1-1.99022-2.22493,1.87552,1.87552,0,0,0-.463-.69309c-.22712-.293-.432-.60144-.63254-.91271-.07463-.11587-.168-.2322-.10206-.3875.21039-.07462.29731.09834.39641.21461.75218.88245,1.537,1.73605,2.3081,2.60152.35493.39835.78286.72875,1.168,1.10041A1.629,1.629,0,0,1,105.26665,47.74617Z"/><path class="cls-170" d="M116.97585,60.37765c.99806.273,2.03558.32283,3.0443.53628a.36372.36372,0,0,0,.2278-.0076,1.91248,1.91248,0,0,1,1.273-.06544,1.30328,1.30328,0,0,1-.15407.61541,6.60568,6.60568,0,0,0-1.38317.14062,4.88645,4.88645,0,0,1-1.83716-.09435,12.83936,12.83936,0,0,1-1.64775-.25937c-.08393-.02559-.19486.03728-.2933.05925a32.85015,32.85015,0,0,1-5.2825-2.41462c-.67548-.43881-1.34992-.8781-1.99039-1.36735a28.1494,28.1494,0,0,1-2.55173-2.25018.918.918,0,0,1-.32462-.54359c-.02105-.19786-.182-.32967-.30441-.47648-.10486-.12576-.238-.25024-.1006-.43448.35257.06572.55285.35654.79081.57141a27.67191,27.67191,0,0,0,5.86707,4.12129,25.09582,25.09582,0,0,0,3.64033,1.44947A8.54368,8.54368,0,0,1,116.97585,60.37765Z"/><path class="cls-171" d="M108.96416,57.4513a25.49534,25.49534,0,0,0,4.1366,2.49352,24.55979,24.55979,0,0,0,2.4332.93933,1.38248,1.38248,0,0,1,.67153.4183l-.2311.616a4.00675,4.00675,0,0,1-1.62364-.51864,22.596,22.596,0,0,1-6.25225-3.83142c-.91665-.75691-1.69676-1.65182-2.60566-2.4116-.04209-.03519-.049-.11242-.07231-.17006a1.35261,1.35261,0,0,1,1.07324.38967c.67616.61607,1.33385,1.25181,2.05081,1.82282A2.85631,2.85631,0,0,0,108.96416,57.4513Z"/><path class="cls-172" d="M100.72137,33.42118c-.06633-.05807-.17514-.1056-.19255-.17578-.22067-.88993-.95846-1.54672-1.10734-2.46552-.02455-.15155-.05671-.277-.24044-.2853l-.045-.04312a26.83823,26.83823,0,0,1-.68032-3.6567c-.06464-.63725-.12707-1.27443-.15718-1.91447-.03305-.70224.00474-1.40441-.06228-2.10831a10.98467,10.98467,0,0,0-2.20422-5.89068,9.81962,9.81962,0,0,0-2.63124-2.14272,3.55114,3.55114,0,0,1-.6578-.463,12.09515,12.09515,0,0,1-1.04552-.90667c-.10179-.10058-.26388-.16639-.20781-.35794.00174-.006.01863-.01069.02825-.01032a.14836.14836,0,0,1,.0362.01048,4.24349,4.24349,0,0,1,1.64556.40372c.14531.04341.28963.09016.4344.13538A10.17462,10.17462,0,0,1,97.19088,16.801a10.76909,10.76909,0,0,1,1.62046,5.04694c.08259.94335-.02994,1.88272.063,2.82.06779.68374.16324,1.3648.22687,2.04887a24.38862,24.38862,0,0,0,.705,3.90467C100.05388,31.56966,100.41228,32.489,100.72137,33.42118Z"/><path class="cls-173" d="M91.55415,13.01117c-.08427.0975.01874.15054.06631.17493.40539.20791.56657.713,1.03588.84314a.20632.20632,0,0,1,.13057.21409.39422.39422,0,0,1-.46949.01151,10.92987,10.92987,0,0,0-2.21565-.61463.293.293,0,0,1-.16536-.09007,10.13376,10.13376,0,0,0-2.326-.61869,1.18131,1.18131,0,0,1-.21563-.07414.43534.43534,0,0,1,.23051-.46212,8.3843,8.3843,0,0,1,2.70743.34609.96785.96785,0,0,0,.4146.03265A.93451.93451,0,0,1,91.55415,13.01117Z"/><path class="cls-174" d="M114.89589,56.6039a16.31456,16.31456,0,0,0,2.85031.69354,1.44011,1.44011,0,0,1,.077.53877,4.45242,4.45242,0,0,1-1.51142-.197c-1.17892-.3974-2.39686-.67442-3.54315-1.17418a21.35082,21.35082,0,0,1-3.06146-1.61415c-1.1427-.73754-2.26377-1.50786-3.34754-2.33079a7.14411,7.14411,0,0,0-.86524-.70149c-.31277-.26535-.58858-.56912-.87921-.85755a13.99873,13.99873,0,0,1-1.65877-1.73361,1.59434,1.59434,0,0,1-.15223-.22071c-.27233-.38486-.53633-.77863-.8441-1.13364a20.1804,20.1804,0,0,1-1.373-1.93749c-.08371-.12315-.19264-.24836-.11525-.41981.22161-.07617.31237.095.4348.221.21946.22592.30354.56913.619.71031.55.68982,1.08094,1.39612,1.66023,2.06183a29.49384,29.49384,0,0,0,2.825,2.87657,28.98836,28.98836,0,0,0,3.44731,2.57455,23.204,23.204,0,0,0,4.46836,2.216A2.34933,2.34933,0,0,1,114.89589,56.6039Z"/><path class="cls-175" d="M105.49757,51.75188c.46033.122.69623.54259,1.057.79985a46.70514,46.70514,0,0,0,4.5637,3.01389,25.71434,25.71434,0,0,0,4.738,1.835c.65157.20555,1.33528.1901,1.967.43557l1.38664.15423c-.07258.16216-.21716.16505-.35991.1526a4.15369,4.15369,0,0,0-1.21213-.00574,1.25181,1.25181,0,0,1-.37348-.05965c-.17787-.02375-.34258-.01632-.36555.22067a.24906.24906,0,0,1-.25412.02441,23.26357,23.26357,0,0,1-9.06767-4.4433c-.60591-.49353-1.1309-1.07575-1.77145-1.52977C105.63047,52.22555,105.40571,52.04962,105.49757,51.75188Z"/><path class="cls-176" d="M119.51877,59.68505l-.07779.07664a.69747.69747,0,0,0-.44109-.09522,30.553,30.553,0,0,1-3.15647-.84044c-.14753-.02556-.38266-.05158-.316-.325a.92555.92555,0,0,1,.74109.01719,24.40638,24.40638,0,0,0,3.01845.31944l1.00146-.00038c.33785.04908.679.08207,1.01264.1515a8.45886,8.45886,0,0,0,1.12731.02152,6.17767,6.17767,0,0,0,.63333.05841.40177.40177,0,0,1-.40272.23335,9.3667,9.3667,0,0,0-2.44765.293.61962.61962,0,0,1-.29764-.04682C119.75923,59.51426,119.60331,59.50459,119.51877,59.68505Z"/><path class="cls-177" d="M119.28691,58.83765a1.13843,1.13843,0,0,1-.711.0576,13.45358,13.45358,0,0,0-1.46383-.08177,4.355,4.355,0,0,1-1.072-.228,2.0237,2.0237,0,0,0-.52793-.05531c-.23836.1199-.44948-.01684-.65989-.08442a22.9398,22.9398,0,0,1-7.50126-4.11556c-.80482-.65407-1.526-1.40411-2.37143-2.00836a.97883.97883,0,0,1-.23007-.25645c-.06872-.1087-.15608-.2034-.23421-.30513a17.13829,17.13829,0,0,0-1.15412-1.32978,22.42306,22.42306,0,0,1-1.96393-2.6372.31416.31416,0,0,1-.07656-.353c.24373-.05148.31658.16244.44609.28784.4019.3892.71251.85953,1.11158,1.25129a7.07817,7.07817,0,0,0,1.05072,1.245,16.92634,16.92634,0,0,1,1.56849,1.52755.96228.96228,0,0,0,.35482.53052c1.05238.84906,2.02392,1.79864,3.15316,2.55212a21.9599,21.9599,0,0,0,7.20383,3.2359c.23473.05492.45985.151.68943.2279a8.70273,8.70273,0,0,0,1.6971.37955A2.6949,2.6949,0,0,1,119.28691,58.83765Z"/><path class="cls-178" d="M114.89589,56.6039A26.65089,26.65089,0,0,1,101.4921,46.51457c-.34954-.35084-.57133-.79849-.88862-1.17422a.247.247,0,0,1-.05645-.28076.15762.15762,0,0,1,.22858.062,6.14327,6.14327,0,0,0,.84142.814,44.95065,44.95065,0,0,0,3.74737,4.00281,29.7785,29.7785,0,0,0,4.30436,3.26823c.40111.25.81617.47864,1.20948.7428a5.10977,5.10977,0,0,0,1.283.7577c.76583.28439,1.4138.81409,2.21511,1.04012.43.1213.86332.23532,1.2915.365.13931.04219.31995.03812.30654.26073a2.18,2.18,0,0,1-.73963-.10392c-.117-.02662-.23816-.13848-.35153-.04849C114.73611,56.33743,114.90746,56.474,114.89589,56.6039Z"/><path class="cls-179" d="M115.97439,56.373c-.21065-.24517-.53154-.20472-.799-.29126a7.69652,7.69652,0,0,1-2.25-.90729,4.86,4.86,0,0,0-1.07639-.49272,3.58089,3.58089,0,0,1-1.036-.69632c.14453-.10092.27135-.01313.39324.04638a20.12171,20.12171,0,0,0,5.59609,1.79135.53625.53625,0,0,1,.25054.08775,11.758,11.758,0,0,0,2.33187.17159,5.66067,5.66067,0,0,1,1.475.09827c.199.03231.40394-.1276.58418.03859l.15407.38472c-1.02-.07355-2.035.15589-3.05318.06431C117.68607,56.59116,116.83105,56.47305,115.97439,56.373Z"/><path class="cls-180" d="M117.05288,55.91092a11.43331,11.43331,0,0,1-3.15415-.692,23.39552,23.39552,0,0,1-3.08572-1.23347,31.6403,31.6403,0,0,1-2.8109-1.7696,29.44615,29.44615,0,0,1-4.47017-3.95035,21.72806,21.72806,0,0,1-1.96318-2.28986,8.01355,8.01355,0,0,1-.97895-1.41438c-.07069-.13217-.19-.24929-.12293-.42126.14872-.084.20271.04979.27608.12549a8.75172,8.75172,0,0,1,.95968,1.1439,2.16687,2.16687,0,0,0,.59387.59095c.71311.80519,1.372,1.65947,2.16225,2.39537a.55415.55415,0,0,1,.11438.19831,16.892,16.892,0,0,0,2.30881,2.17622,24.65,24.65,0,0,0,4.8101,3.03613,19.45863,19.45863,0,0,0,4.12827,1.4884.62044.62044,0,0,0,.52139.322C116.593,55.643,116.88769,55.64334,117.05288,55.91092Z"/><path class="cls-181" d="M100.10652,29.49368a30.14923,30.14923,0,0,1-.48572-3.4016A28.004,28.004,0,0,1,99.50005,23.07c.047-.69045-.01217-1.37369-.01015-2.06013A9.37748,9.37748,0,0,0,98.02314,15.733a7.84317,7.84317,0,0,0-1.6996-1.90317c-.76458-.60432-1.60782-1.08239-2.38129-1.66536a2.78723,2.78723,0,0,1-.38518-.61643.99413.99413,0,0,1,.72446.187c.58142.32488,1.19475.58571,1.76736.931a5.48079,5.48079,0,0,1,1.35995,1.11485c.227.41691.60144.71786.86515,1.10763a9.68184,9.68184,0,0,1,1.60365,4.68545c.05263.60753.13942,1.2121.2109,1.818.03539.3-.16719.554-.14311.86122a43.16917,43.16917,0,0,0,.376,4.49083c.08743.47426.11424.95968.16878,1.44-.12906.33331.06346.63814.11336.94786.08841.54876.33347,1.07363.40893,1.6228a13.19244,13.19244,0,0,0,.55621,2.05049,2.46338,2.46338,0,0,1-.52194-1.07723,1.72555,1.72555,0,0,0-.3525-.6156c-.31291-.31632-.286-.773-.42025-1.16388A1.2,1.2,0,0,0,100.10652,29.49368Z"/><path class="cls-182" d="M97.40884,13.7808c-.05838-.02138-.13324-.02652-.17275-.06653a10.97811,10.97811,0,0,0-3.679-2.16627,7.51828,7.51828,0,0,1-1.7354-.62687,1.9514,1.9514,0,0,1-.34455-.22037.66976.66976,0,0,0,.50184-.12867c.23352-.19571.48779-.06125.73018-.01018.1842.0388.36339.13374.53979-.01532A9.44763,9.44763,0,0,1,95.86814,11.856a1.11258,1.11258,0,0,0,.31989.31912c.21614.1684.46452.317.46256.65314-.00081.13808.13922.1957.23993.275A1.10108,1.10108,0,0,1,97.40884,13.7808Z"/><path class="cls-183" d="M77.22556,42.04746c-.2133.06608-.32267.2664-.48843.39413a1.14265,1.14265,0,0,1-.898.29886,3.72707,3.72707,0,0,1-.4112-1.33209c-.03243-.263-.28378-.49892-.43642-.74705-.26268-.26252-.12022-.53924-.02709-.81318a1.29848,1.29848,0,0,1,.183-.37424c.28159-.19551.67737-.16911.90782-.46592a.35259.35259,0,0,1,.3681.12171c.3321.6742.90632,1.18279,1.26449,1.8397a1.03083,1.03083,0,0,1-.30034.51042A.6031.6031,0,0,0,77.22556,42.04746Z"/><path class="cls-184" d="M75.22264,39.50592c-.15.37053-.40109.72087-.23115,1.15539a8.09283,8.09283,0,0,1-1.3866-.30818c-.2221-.43445-.65274-.70888-.87655-1.143-.05766-.11183-.13424-.21391-.20213-.32048a.49012.49012,0,0,1,.46252-.23127.2682.2682,0,0,1,.21308-.06824c.39214.11942.81191.07131,1.201.203A2.86255,2.86255,0,0,1,75.22264,39.50592Z"/><path class="cls-185" d="M104.57314,48.594a12.51863,12.51863,0,0,1-1.61251-1.68362q-.34878-.42936-.69855-.85793c-.567-.70518-1.05756-1.46423-1.56046-2.21451-.06278-.09366-.13585-.19027-.07888-.31634.12144-.07607.19768.01249.25829.08787a22.80785,22.80785,0,0,1,1.45808,1.82664c.70726.82049,1.46057,1.59574,2.22276,2.36626.96962.98023,2.03735,1.83954,3.09269,2.71719a9.34413,9.34413,0,0,0,2.0878,1.59516,3.89926,3.89926,0,0,1,1.168.74763,12.77687,12.77687,0,0,1-1.90066-1.027,24.22035,24.22035,0,0,1-4.25687-3.17446C104.70559,48.61929,104.67229,48.50853,104.57314,48.594Z"/><path class="cls-186" d="M87.47109,14.24382c-.47429.11054-.81575-.27071-1.243-.33984-.07817-.01265-.06174-.12556-.06638-.1994a1.66313,1.66313,0,0,0,.99595.08579,7.84682,7.84682,0,0,1,1.99611.17924q.54546.05951,1.09082.11986c.10216-.08891.19726-.0275.28092.02543.575.3638,1.19209.65462,1.7654,1.02065.12629.08063.27624.15046.29275.33257a.63529.63529,0,0,1-.4347.45808,4.0129,4.0129,0,0,1-1.20416-.3473,4.78288,4.78288,0,0,0-.72471-.23362c-.78838-.30375-1.61369-.502-2.39194-.83476C87.68769,14.45047,87.534,14.40775,87.47109,14.24382Z"/><path class="cls-187" d="M92.55561,15.4756a7.04062,7.04062,0,0,0-1.51576-.94271,3.37191,3.37191,0,0,0-.7953-.44342c-.10549-.17819-.56589-.15369-.30814-.53933a7.27367,7.27367,0,0,1,2.16147.50558,1.5615,1.5615,0,0,0,.689.18761l.61609.38539a7.238,7.238,0,0,0,.90074,1.13511c.26921.2326.2313.60129.28108.92391a.11421.11421,0,0,1-.17058.00653C93.85329,16.19821,93.13638,15.94062,92.55561,15.4756Z"/><path class="cls-188" d="M104.80331,51.9834A8.55327,8.55327,0,0,0,106.06,53.09977a26.2133,26.2133,0,0,0,3.69346,2.853,20.90189,20.90189,0,0,0,5.75871,2.57736c.18433.26572.49622.225.754.29842a15.83339,15.83339,0,0,1,1.96256.64751,3.05066,3.05066,0,0,0,.89373.12812c.13211.013.2558.01611.31849.15751-.63556-.04537-1.272-.0813-1.90625-.14072a.42084.42084,0,0,0-.46667.30882,2.45053,2.45053,0,0,0-.09221.44787,4.73093,4.73093,0,0,1-1.36694-.43482,19.84418,19.84418,0,0,1-2.88621-1.12722,24.72176,24.72176,0,0,1-4.10712-2.514c-1.01771-.789-1.99017-1.62981-2.96394-2.47019-.07365-.03722-.12074-.08551-.0726-.1736.17167-.09947.28524.02419.414.10365.28112.17349.47.46736.78616.5968-.6003-.64262-1.19515-1.28846-1.8234-1.90241a.91.91,0,0,1-.24176-.29458C104.68309,52.083,104.643,51.97642,104.80331,51.9834Z"/><path class="cls-189" d="M84.38985,15.70694a10.7322,10.7322,0,0,0-4.4584.86678c-.56946.24456-1.189.37135-1.78247.56212a.46825.46825,0,0,1-.327-.04945,2.92226,2.92226,0,0,0-1.21272-.30135c.55715-.23435,1.17493-.18954,1.74228-.38043.77495-.26072,1.55878-.49629,2.32775-.77331a9.69286,9.69286,0,0,1,4.77167-.62419c.46563.0691.93576.10784,1.40383.16051.088-.05958.14424-.03622.17074.06522-.2603.23164-.45289.52445-.6964.77237A5.6494,5.6494,0,0,1,84.38985,15.70694Z"/><path class="cls-190" d="M87.00906,15.2445a.15972.15972,0,0,0-.15426-.07687.87346.87346,0,0,0-.15066-.1084c-.56512-.24839-1.13188-.493-1.69819-.73872.16476-.15869.33053-.04561.49533-.00092a5.22784,5.22784,0,0,0,1.96981-.07578c.88913.43161,1.85361.65454,2.77346,1.001a.30687.30687,0,0,1-.22166.362,19.15317,19.15317,0,0,1-2.55122-.21023A.70717.70717,0,0,1,87.00906,15.2445Z"/><path class="cls-191" d="M72.21807,20.25122c.08116-.1797.2654-.1873.41576-.21789a.45838.45838,0,0,0,.35478-.2442.40992.40992,0,0,0,.36239.06915c.4387-.2175.89037-.02515,1.33239-.06955a.42881.42881,0,0,1,.35951-.1,6.69346,6.69346,0,0,0,3.57078-.85622c.59915-.26807,1.11017-.68259,1.71142-.94495a10.26509,10.26509,0,0,1,2.01683-.73263,4.5834,4.5834,0,0,1,1.96213.07455c.141.05147.3047.05019.40327.18988-.06427.22862-.27113.21041-.43468.22477a10.22176,10.22176,0,0,0-4.29543,1.44333,16.25284,16.25284,0,0,1-2.97535,1.57887,3.65374,3.65374,0,0,1-.81025.23368,6.48027,6.48027,0,0,1-2.237.15483,3.04119,3.04119,0,0,0-.76364.05427.462.462,0,0,1-.43312-.08787C72.60379,20.74644,72.32108,20.56179,72.21807,20.25122Z"/><path class="cls-192" d="M72.75788,21.02123c1.1476-.1941,2.32849.1111,3.46622-.231.00787.30861-.263.33656-.45247.43384-.22317.11457-.481.16973-.64581.42614a.70923.70923,0,0,0,.43454.02093c.1978-.01117.29347.06069.24328.26954a4.34229,4.34229,0,0,1-1.50543.852c-.51093.46208-1.09239.25008-1.632.1198a4.22256,4.22256,0,0,1-1.37219-.50515c.203-.45161.45828-.831,1.0414-.773a.14936.14936,0,0,0,.1864-.14247A1.115,1.115,0,0,1,72.75788,21.02123Z"/><path class="cls-193" d="M71.756,27.72189a.15918.15918,0,0,0-.15407-.0772c.0501-.29589.41064-.43648.38537-.77007.04938-.07462.10033-.18857.18688-.17749.48028.06148.8249-.309,1.2611-.37928a1.05451,1.05451,0,0,0,.69115-.18085.70747.70747,0,0,1,.51293-.12307,1.787,1.787,0,0,0,1.574-.60915c.56751-.57426,1.28483-.959,1.90346-1.47294.75478-.62708,1.54884-1.20778,2.32546-1.809a7.83582,7.83582,0,0,1,1.52376-.87871,2.81978,2.81978,0,0,1,1.09324-.42046,1.65131,1.65131,0,0,1,1.10464.19616c.23355.09778.3834.23932.27035.51755a.25416.25416,0,0,1-.31254.07655,2.7585,2.7585,0,0,0-2.45919.46508c-1.00711.5994-1.85223,1.405-2.79832,2.07716-.67606.48031-1.257,1.0704-1.90178,1.58373a16.12428,16.12428,0,0,0-1.77306,1.50748,1.56489,1.56489,0,0,1-1.12786.58961.35808.35808,0,0,0-.38831.07546.92774.92774,0,0,1-.98936.19593A1.67471,1.67471,0,0,1,71.756,27.72189Z"/><path class="cls-194" d="M73.45078,26.41256a.48076.48076,0,0,0-.29109.07028c-.26365.16481-.50625.37247-.865.26045-.08089-.02526-.20382.084-.30739.13133-.1033-.2576-.39761-.1837-.58293-.34452-.48073-.41715-.53084-.46209-.34169-1.04167.51025-.06149.99786-.24121,1.51684-.27205.18631-.01107.37522-.02545.56312-.03612.2691.26232.57434.06174.86064.05589.16523-.00338.3255-.06367.45869.08279A1.75161,1.75161,0,0,1,73.45078,26.41256Z"/><path class="cls-195" d="M74.29821,22.79266c.45388-.3412.98587-.54756,1.46367-.84749a.708.708,0,0,1,.42371-.1611,2.84811,2.84811,0,0,0,.72133-.24289c1.47531-.58615,2.64848-1.687,4.06537-2.36827a4.47383,4.47383,0,0,1,4.05777-.25842.30319.30319,0,0,1,.147.1174,1.28441,1.28441,0,0,1-1.3687.44948,2.96782,2.96782,0,0,0-2.29731.32151A12.2813,12.2813,0,0,0,78.60072,21.653a2.77913,2.77913,0,0,1-.79053.46487,11.37483,11.37483,0,0,1-2.46935.93762,1.78023,1.78023,0,0,1-1.11966-.03184Z"/><path class="cls-196" d="M74.22118,23.02368a6.77263,6.77263,0,0,0,2.76778-.62659,22.82958,22.82958,0,0,0,3.19947-1.9989,7.883,7.883,0,0,1,2.70135-1.125,1.3,1.3,0,0,1,.88379.13054.30669.30669,0,0,1-.18041.13861,7.46432,7.46432,0,0,0-3.64009,1.5272c-.98161.62707-1.95615,1.272-2.91856,1.92042-.9482.63882-2.02283.98534-2.96893,1.59407-.21651.1393-.38447.39124-.69161.36517-.086-.33152-.37776-.43828-.64515-.52131a1.55271,1.55271,0,0,1-.5876-.32585,12.23849,12.23849,0,0,1,1.42032-.56646C73.85205,23.4755,73.97507,23.16229,74.22118,23.02368Z"/><path class="cls-197" d="M73.374,24.94924a22.80236,22.80236,0,0,1,2.33315-1.28349,40.63625,40.63625,0,0,0,3.52608-2.2059,10.28515,10.28515,0,0,1,3.62591-1.92293,4.626,4.626,0,0,1,.76039-.05614.95883.95883,0,0,1,.68588.1784,7.12591,7.12591,0,0,0,.9259.3609c.13942.07029.33807.0875.32454.31726a.92433.92433,0,0,1-.44871.15608c-.46266-.00094-.91252-.1247-1.37075-.15452a4.02208,4.02208,0,0,0-2.13684.65814,28.35288,28.35288,0,0,0-3.47823,2.39641,22.41405,22.41405,0,0,1-3.37723,1.89982.3077.3077,0,0,1-.29178.04112,2.10652,2.10652,0,0,0-.98752.08631c-.27588.07075-.32128-.01681-.32208-.24044Z"/><path class="cls-198" d="M82.3099,17.24728a9.70826,9.70826,0,0,0-2.5767,1.07549c-.635.39389-1.31968.66027-1.98169.98558a4.68719,4.68719,0,0,1-2.37548.48247c-.23023-.01257-.46173-.002-.69264-.00209a1.16025,1.16025,0,0,0-.01711-.37243c-.13724-.34787-.04242-.55306.32525-.62879.5622.09533,1.0319-.25093,1.55933-.32626a15.62168,15.62168,0,0,0,3.59925-1.25675,3.86144,3.86144,0,0,0,.465-.26534,7.68886,7.68886,0,0,1,3.39067-.49746c.25184.01374.51881-.00835.70584.2191-.05.18663-.21256.195-.35939.22076C83.67107,17.0013,82.99879,17.17078,82.3099,17.24728Z"/><path class="cls-199" d="M84.698,16.7081a1.17732,1.17732,0,0,0-.57619-.154,9.38544,9.38544,0,0,0-3.17023.33321,2.202,2.202,0,0,1-.33646.0518,2.6117,2.6117,0,0,1,.8628-.38322c.8385-.20681,1.64717-.52631,2.50688-.655a.57317.57317,0,0,0,.405-.194c.67437.01774,1.32553.23659,2.00259.231a2.02394,2.02394,0,0,1,.88964.258c.15768.152.3548.25289.51861.39528.14725.128.29907.26972.098.47648a1.16577,1.16577,0,0,1-.58013.03876c-.76946-.1652-1.55489-.21715-2.33225-.32646C84.88742,16.76611,84.78131,16.78352,84.698,16.7081Z"/><path class="cls-200" d="M71.756,27.72189a10.055,10.055,0,0,0,1.12146.32719.73394.73394,0,0,0,.74435-.227c.138-.14379.28245-.29685.44525-.02314.11595.16871-.01467.28579-.0929.40669-.3627.56046-.32641.66734.30823.86878.10507.3284-.19189.51807-.27027.78364a3.70953,3.70953,0,0,0-.73868.581,1.51953,1.51953,0,0,1-1.28633-.02169,6.27573,6.27573,0,0,0-.24029-.93418c-.08972-.16508-.14533-.355-.376-.37505A4.40724,4.40724,0,0,1,71.756,27.72189Z"/><path class="cls-201" d="M74.45209,38.88967l-1.46337-.23127c.06864-.346-.2329-.52289-.35785-.78033-.07114-.14657-.27583-.23854-.18151-.45158.17342-.18688-.12449-.4328.07721-.61615a.47769.47769,0,0,1,.41434-.09033,3.42118,3.42118,0,0,1,1.23457.55443,1.7053,1.7053,0,0,0,.59361.21792.16673.16673,0,0,1-.00381.21356A1.62135,1.62135,0,0,0,74.45209,38.88967Z"/><path class="cls-202" d="M72.98861,36.81016l-.462.00018a5.82618,5.82618,0,0,1-.88808-.88077,2.58542,2.58542,0,0,1-.26762-1.12191.44494.44494,0,0,1,.385-.15418,1.37678,1.37678,0,0,1,.78659.16323c.36546.31564.85176.52678.94245,1.08212C73.27917,36.18044,73.28909,36.57987,72.98861,36.81016Z"/><path class="cls-203" d="M71.98715,30.41737c.43427-.06418.88705.18747,1.3096-.07673.112.122.05456.26379.04444.39891-.03585.47921-.005.51341.4547.60417a1.59,1.59,0,0,1,.58924.12866.36109.36109,0,0,1,.04923.35934,14.58816,14.58816,0,0,1-1.87614,1.272,11.69984,11.69984,0,0,0-1.34124-.37556c-.0217-.20286-.1778-.29292-.32447-.3948-.13484-.09366-.27767-.18585-.292-.3753.189-.30719.09709-.70094.30851-1.00125a.535.535,0,0,0,.42527-.27828C71.45856,30.29876,71.69381,30.31308,71.98715,30.41737Z"/><path class="cls-204" d="M71.217,32.72814a2.41031,2.41031,0,0,1,1.38664.3085,1.69185,1.69185,0,0,1,.553.9365c.10426.52106-.3228.675-.63045.91154-.24581-.11361-.53353-.08763-.77035-.2312q-.17065-.22626-.34133-.45248A1.58,1.58,0,0,1,71.217,32.72814Z"/><path class="cls-205" d="M81.00029,47.05371c.11838-.06268.34414-.08257.13168-.28856-.18549-.17986-.10715-.27615.0897-.3559a.746.746,0,0,0,.28272-.89481.3962.3962,0,0,1,.11238-.61727c.2785.12933.34171.41616.47646.65073a2.84073,2.84073,0,0,0,1.434,1.365,13.71014,13.71014,0,0,1,1.32088.62331,8.59006,8.59006,0,0,0,3.049.86331c.75122.07686,1.49846.20076,2.24749.30356a5.9934,5.9934,0,0,0,1.148-.07043c.62528-.03321,1.25307-.06774,1.87458-.1592a.65692.65692,0,0,0,.223-.05642,20.07214,20.07214,0,0,0,2.282-1.26534.86012.86012,0,0,0,.407-.70315.29958.29958,0,0,1,.09727-.242c.25426.01481.27417.27753.42181.40709.10089.08854.13085.26062.23422.34311A6.28939,6.28939,0,0,1,98.17892,48.825c-.3971-.0072-.5785.345-.8646.52216a5.37644,5.37644,0,0,1-3.16992,1.26354c-.34558-.02081-.69884.13469-1.00472-.15521-.04177-.03959-.15-.02011-.22555-.01135a17.53143,17.53143,0,0,1-2.14556.07764.34369.34369,0,0,0-.18482.03623,2.438,2.438,0,0,1-2.16164.20331A22.4232,22.4232,0,0,1,82.94054,48.332c-.07591-.04692-.18725-.07829-.21978-.14657a.66473.66473,0,0,0-.79623-.43859A2.78,2.78,0,0,1,81.00029,47.05371Z"/><path class="cls-206" d="M105.57416,53.67775l.07748.15365a.41164.41164,0,0,0,.14217.33872c.18537.19918.42623.37037.37168.70546-.00829.05091.07971.12316.1317.17735a23.2704,23.2704,0,0,0,2.54008,2.26,1.08717,1.08717,0,0,1,.12689.13837.55431.55431,0,0,1-.39055-.11439c-.7262-.56786-1.37611-1.22052-2.05456-1.8406a3.2672,3.2672,0,0,0-1.09852-.50962l-.69313-.61616c-.4524-.68236-1.04365-1.25092-1.55743-1.8834-.87542-1.07767-1.73906-2.16155-2.5445-3.293-.138-.19388-.21451-.48312-.52038-.52323a5.44,5.44,0,0,0-.93606-1.50385c-.13-.18534-.29378-.31528-.25745-.59323.02442-.18687-.12484-.37389-.23338-.5506a1.22518,1.22518,0,0,1-.26789-.66377c.20331-.03316.24225.14931.33075.2592a7.20822,7.20822,0,0,0,1.03768,1.24754,1.90635,1.90635,0,0,1,.48605.53529,52.52339,52.52339,0,0,0,4.11868,4.93979A8.51142,8.51142,0,0,1,105.57416,53.67775Z"/><path class="cls-207" d="M96.17647,46.2065a1.12327,1.12327,0,0,1-.70348,1.23026c-.61747.35815-1.25553.68067-1.88178,1.02392a2.53328,2.53328,0,0,1-1.04557.1931c-.69713.0608-1.39745.14482-2.09413.153a13.893,13.893,0,0,1-1.93062-.21479c-.63014-.082-1.26175-.15867-1.88727-.26865a11.04069,11.04069,0,0,1-2.23613-.88438c-.40038-.1648-.80038-.34431-1.18305-.53519a2.81852,2.81852,0,0,1-1.14095-1.14487,7.46813,7.46813,0,0,1-.45672-.86177l.00018-.23068c.30318-.08439.47877-.40278.80791-.44078,1.59576.383,3.15737.89221,4.75256,1.2772a15.07276,15.07276,0,0,0,2.401.286c.22962.01766.4596.01874.68914.05265a2.22741,2.22741,0,0,0,1.24289-.14427c.47026-.20407.94843-.39132,1.42827-.57246a2.28514,2.28514,0,0,0,1.10736-.72862.48077.48077,0,0,1,.39811-.20141,6.17752,6.17752,0,0,0,1.342.8581.60152.60152,0,0,1,.23606.38342A1.34234,1.34234,0,0,1,96.17647,46.2065Z"/><path class="cls-208" d="M96.02221,45.43631c-.13661-.06043-.19568-.18928-.27751-.30156-.09738-.13363-.21341-.2674-.40417-.23517a.51973.51973,0,0,1-.6216-.4151c-.043-.12293-.10422-.19838-.23743-.20346a1.52508,1.52508,0,0,0-.05365-.95388,1.46388,1.46388,0,0,1-.0282-.71053.95388.95388,0,0,1,.37479-.52433c.37193-.02162.42686.3427.63521.52095a17.30994,17.30994,0,0,0,.88931,1.50961.22871.22871,0,0,1,.03172.31258A.95467.95467,0,0,1,96.02221,45.43631Z"/><path class="cls-209" d="M96.33068,44.43542l-1.0016-1.77171c.03823-.13644-.03832-.31176.13607-.40219a.26035.26035,0,0,1,.28815.1395c.27208.45933.6639.82595.96223,1.264.33342.65409.67753,1.303.99657,1.96406a3.49474,3.49474,0,0,1,.46691,1.42462,18.34748,18.34748,0,0,1-1.312-1.89613A2.067,2.067,0,0,0,96.33068,44.43542Z"/><path class="cls-210" d="M96.71553,42.587c-.11268-.0928-.156-.2549-.30815-.30826a16.20978,16.20978,0,0,1-1.21585-1.99552,7.16513,7.16513,0,0,0-.38764-.66321c-.58166-1.06339-1.1218-2.15-1.77-3.17633a2.27432,2.27432,0,0,0-.50463-.6672,2.23136,2.23136,0,0,1-.58921-.98545c.44834-.03045.75589.28822,1.12359.45669a1.25676,1.25676,0,0,1,.23814.18422,2.85865,2.85865,0,0,1,.54015.83214,16.40306,16.40306,0,0,1,.95216,1.92014,1.39413,1.39413,0,0,0,.52405.64831,11.64726,11.64726,0,0,1,1.00964,1.93,2.39038,2.39038,0,0,1,.41241,1.02205C96.7042,42.05129,96.863,42.324,96.71553,42.587Z"/><path class="cls-211" d="M94.86649,39.58275c.54066.88321,1.07138,1.7721,1.54089,2.696-.02359.49019.26992.90992.30815,1.38637a3.34382,3.34382,0,0,1-.89791-1.02887.90324.90324,0,0,0-.335-.3574c-.10283.02209-.12525-.0594-.16156-.12434-.39273-.70251-.65011-1.4683-1.01963-2.18187-.05643-.109-.12911-.22782-.03659-.3578A.47922.47922,0,0,1,94.86649,39.58275Z"/><path class="cls-212" d="M96.71553,42.587a2.97943,2.97943,0,0,1-.07685-.84749c.2095-.097.27289.0871.34515.20126q.92334,1.45884,1.80653,2.94279a9.9561,9.9561,0,0,0,.789,1.5352c.07459.14811.25806.27387.1407.48125-.29894-.04725-.35716-.34412-.52111-.52448-.2875-.31631-.52831-.67506-.78868-1.016-.56171-.77981-.92672-1.68225-1.52326-2.44143A.51231.51231,0,0,1,96.71553,42.587Z"/><path class="cls-213" d="M100.10509,34.03756c-.14671-.06262-.18342-.20823-.24069-.33285a19.98871,19.98871,0,0,1-1.69-5.4434c-.06448-.43815-.15034-.87316-.22636-1.30961a11.85229,11.85229,0,0,1-.14341-1.89478,10.85156,10.85156,0,0,0-.16745-1.9457.89762.89762,0,0,1,.04409-.599c.2142-.09079.19649.1047.22313.20171a3.11409,3.11409,0,0,1,.15.86856,17.65964,17.65964,0,0,0,.2142,2.21326,35.33137,35.33137,0,0,0,.912,4.69856l.00037.00027c.29572,1.03929.60647,2.0737,1.00109,3.08086A1.38044,1.38044,0,0,1,100.10509,34.03756Z"/><path class="cls-214" d="M99.25805,35.57793c.03048.43441.38035.74119.46186,1.15521a.42218.42218,0,0,1-.15407.30807c-.272.01772-.33117-.20844-.40626-.384-.3518-.82239-.8-1.59907-1.14246-2.42588a29.20645,29.20645,0,0,1-1.42375-5.45413,5.50592,5.50592,0,0,1-.11327-1.71568c.05794-.1502-.00764-.29926-.00464-.44878.00667-.33139.16257-.53456.42912-.562a3.814,3.814,0,0,1,.13229.9793c.08459.55469.17037,1.108.29871,1.65422a25.70611,25.70611,0,0,0,1.11668,4.72384,18.39214,18.39214,0,0,0,.73675,1.80739C99.2423,35.32886,99.31611,35.44183,99.25805,35.57793Z"/><path class="cls-215" d="M98.10216,34.26825q.54233,1.11019,1.08387,2.22077c.099.204.15336.43664.37981.55219a13.09018,13.09018,0,0,0,1.17984,2.215c.351.58657.75213,1.14315,1.131,1.713a4.41014,4.41014,0,0,1-1.29713-1.43883c-.08683-.13187-.10437-.32633-.32024-.33261a3.06253,3.06253,0,0,1-.68777-1.0367c-.34163-.62476-.714-1.23517-1.00471-1.88777-.19626-.527-.39073-1.05468-.62135-1.56807a.42379.42379,0,0,1-.042-.333A.19474.19474,0,0,1,98.10216,34.26825Z"/><path class="cls-216" d="M104.57314,45.59034c-.25216-.01556-.29027-.26759-.43124-.4031-.62857-.60425-1.2396-1.22679-1.8548-1.84487a5.97848,5.97848,0,0,0-.87241-.90981c-.11.04-.17015-.03422-.21874-.10753-.71937-1.08526-1.446-2.16588-2.11349-3.28451a.622.622,0,0,1-.05529-.14274c-.01742-.1808-.19062-.43446.01341-.52289.217-.09408.27219.20872.37439.353.31626.44652.64012.88748.95986,1.33111.41245.44053.67839.99121,1.08141,1.43989a.40731.40731,0,0,1,.11252.3176,12.9363,12.9363,0,0,0,1.25889,1.6991,15.51757,15.51757,0,0,0,1.70205,1.93182C104.56007,45.48046,104.55937,45.54205,104.57314,45.59034Z"/><path class="cls-217" d="M101.56876,41.8165,100.336,40.12189a19.35055,19.35055,0,0,1-1.96175-3.55716c-.05244-.1267-.14488-.251-.04152-.39519.13868-.0745.23389-.01726.30883.10148l1.61774,2.92673a18.49294,18.49294,0,0,0,1.45549,2.27161c.11367.14492.26206.28569.23911.50118C101.79219,42.00256,101.68992,41.88592,101.56876,41.8165Z"/><path class="cls-218" d="M99.10362,38.88958c.62623.9901,1.19241,2.01966,1.91338,2.94735.1481.19056.16641.46408.39769.59563a2.43642,2.43642,0,0,0,.5167.78769,1.44433,1.44433,0,0,1,.40772.67567c-.35834-.14964-.49265-.53379-.78712-.752-.13129-.0973-.24611-.21684-.36841-.32628-.07483.02609-.1188-.02-.15959-.07a17.8073,17.8073,0,0,1-2.087-3.23638c-.134-.31578-.27033-.63045-.40408-.94612-.07772-.18345-.18369-.37074-.07629-.58175.3177-.018.34577.27438.46114.45513A3.802,3.802,0,0,1,99.10362,38.88958Z"/><path class="cls-219" d="M90.09048,15.55281c-.01118-.13393.1107-.20131.15407-.30795.65871.15309,1.25442.503,1.92588.61622A6.70168,6.70168,0,0,1,93.624,16.92577,10.99332,10.99332,0,0,1,97.45175,23.714c.05884.38172.02609.767.11268,1.143a.25278.25278,0,0,1-.07855.24625,20.01716,20.01716,0,0,0,.23092,3.08086c-.30675-.02235-.29762-.27995-.31734-.47519a4.273,4.273,0,0,0-.20455-.96c-.17249-1.08428-.231-2.18668-.49822-3.2563a10.2795,10.2795,0,0,0-1.7901-3.832,10.84018,10.84018,0,0,0-2.52112-2.3393,7.3441,7.3441,0,0,0-2.17255-1.63171A.2082.2082,0,0,1,90.09048,15.55281Z"/><path class="cls-220" d="M97.48588,25.10324a10.94175,10.94175,0,0,0-1.94169-5.93882,12.98393,12.98393,0,0,0-3.13278-3.06457.6517.6517,0,0,1-.241-.23878c.19433-.06263.20858-.30512.38518-.38546a8.167,8.167,0,0,1,1.76793,1.03689c.08076.062.15678.13008.235.19535.18791-.04449.27516.1063.38017.20669a9.85994,9.85994,0,0,1,2.77106,5.15256.84013.84013,0,0,1,.00723.41745c.0268.74758.13372,1.48736.2163,2.22953a.78642.78642,0,0,1,.0113.26611,10.07378,10.07378,0,0,0,.0035,1.97151,9.4651,9.4651,0,0,1-.30244-1.495C97.612,25.32388,97.64591,25.17436,97.48588,25.10324Z"/><path class="cls-221" d="M97.25477,26.72064a1.76866,1.76866,0,0,1,.2314.85855c.01409.22514.01343.45679.23063.60491a32.69788,32.69788,0,0,0,1.00354,4.01425c.06951.23.15268.45593.22954.68373a.97735.97735,0,0,0,.0955.59849,13.29179,13.29179,0,0,1,.575,1.65518,14.754,14.754,0,0,0,.98555,2.06643.57756.57756,0,0,1,.03856.147,3.75139,3.75139,0,0,1-1.04172-1.3826.70453.70453,0,0,0-.34472-.38867,18.93087,18.93087,0,0,1-1.41011-3.83213c-.2106-.81285-.32132-1.64624-.56293-2.45112a2.3749,2.3749,0,0,1-.03009-.57173c.10552-.3212-.05408-.62134-.07341-.93251A1.74334,1.74334,0,0,1,97.25477,26.72064Z"/><path class="cls-222" d="M77.68777,40.96938a.21036.21036,0,0,1-.19556-.09868c-.29769-.60691-.87-1.03072-1.11385-1.67292a2.0976,2.0976,0,0,1,.67582-1.065,6.51326,6.51326,0,0,0,.61227-.56258c.22446-.03543.3362.12951.39534.28447.11575.30322.286.38713.575.24126a.17792.17792,0,0,1,.14761.0116,5.66514,5.66514,0,0,1,.43458.59953,3.78506,3.78506,0,0,1-.14507,1.2612.75494.75494,0,0,0-.53188.44435A.95627.95627,0,0,1,77.68777,40.96938Z"/><path class="cls-223" d="M80.69234,43.04853l-.53962-.61583a2.5832,2.5832,0,0,1-.074-.36919,1.19664,1.19664,0,0,0-.49783-1.00628.95276.95276,0,0,1-.42909-1.01173,5.67521,5.67521,0,0,0,.96837-1.04535.341.341,0,0,1,.25743-.14327c.29875.08822.47709.34946.72834.50669.165.63764.30989,1.28.45367,1.92284-.48316.36429-.434.97166-.6635,1.45177C80.84252,42.85034,80.89618,43.0346,80.69234,43.04853Z"/><path class="cls-224" d="M80.384,38.88977a2.11264,2.11264,0,0,0-.58065.65466,1.30851,1.30851,0,0,1-.65154.50106l-.07788-.07719c-.10822-.44444.10972-.86964.07732-1.30961-.01706-.01991-.04195-.04863-.03355-.06485A8.94679,8.94679,0,0,1,80.24562,36.506a.15858.15858,0,0,1,.06915-.03125.44625.44625,0,0,1,.38067.37184.48506.48506,0,0,1-.00691.228,3.27406,3.27406,0,0,0-.206,1.53681A.29874.29874,0,0,1,80.384,38.88977Z"/><path class="cls-225" d="M80.69234,43.04853c.127-.40314.284-.79993.371-1.21152a.66033.66033,0,0,1,.47619-.55985,5.385,5.385,0,0,1,.95772.438.19.19,0,0,1,.04878.21864.57948.57948,0,0,0-.12049.39061,16.817,16.817,0,0,1-.03846,1.95658c-.255.132-.39556.49243-.77017.38554l-.77073-.61657C80.92923,43.69549,80.63677,43.39874,80.69234,43.04853Z"/><path class="cls-226" d="M99.02659,39.50583a16.91547,16.91547,0,0,0,1.92307,2.9682,3.3199,3.3199,0,0,1,.23392.34359.51039.51039,0,0,0,.13163.31361c1.04045,1.1723,1.93044,2.47233,3.04,3.58529.24277.24351.50912.46364.7665.69242a.376.376,0,0,1,.14491.33724,29.76731,29.76731,0,0,1-3.11459-3.20178c-.31709-.39543-.69538-.7418-1.0457-1.11059-.07785.02432-.11725-.02754-.15415-.08007q-1.46991-2.09267-2.74208-4.31107a.65912.65912,0,0,1-.05334-.144c-.18159-.459-.39685-.904-.56424-1.36853-.05475-.15193-.14373-.30257-.057-.47274.189-.081.20754.09694.26924.18838a14.46363,14.46363,0,0,1,1.00639,1.897A2.03893,2.03893,0,0,0,99.02659,39.50583Z"/><path class="cls-227" d="M98.25623,38.88967a22.7982,22.7982,0,0,0,1.27951,2.1619c.51508.79953,1.04638,1.58861,1.57062,2.38224a5.39228,5.39228,0,0,0,.97783,1.47236.76284.76284,0,0,1,.25492.52995,13.31381,13.31381,0,0,1-1.07116-1.22056,5.862,5.862,0,0,0-.62362-.70491.3493.3493,0,0,1-.23167-.18391,26.29251,26.29251,0,0,1-1.60484-2.50194c-.34341-.68688-.66718-1.38371-1.04839-2.05128a.36156.36156,0,0,1-.07038-.32458C98.053,38.37073,98.07271,38.73556,98.25623,38.88967Z"/><path class="cls-228" d="M97.717,22.48455a21.40869,21.40869,0,0,0-.60072-2.07473,9.0579,9.0579,0,0,0-2.55774-3.702c-.05709-.20157-.19544-.37537-.16139-.60953.02486-.171-.119-.28458-.2485-.35474-.36735-.199-.44329-.61871-.705-.89612-.04278-.04534-.02852-.14448-.04062-.21875a8.57844,8.57844,0,0,1,2.1783,1.54849A9.87326,9.87326,0,0,1,97.56749,19.318a13.61158,13.61158,0,0,1,.79117,3.72516c.04669.63593-.00443,1.26564.04182,1.89876a29.92182,29.92182,0,0,0,.5015,4.01383,7.86653,7.86653,0,0,1,.27868,1.53857,14.88475,14.88475,0,0,1-.61312-2.27159,32.39087,32.39087,0,0,1-.60057-3.94529,12.47715,12.47715,0,0,0-.17492-1.62595A1.01407,1.01407,0,0,0,97.717,22.48455Z"/><path class="cls-229" d="M102.87836,48.97938c-.19052-.01511-.28076-.16023-.3778-.29426a10.77921,10.77921,0,0,0-1.16291-1.24631.29473.29473,0,0,1-.25282-.14893A46.16,46.16,0,0,1,98.3954,43.4164a.78967.78967,0,0,1-.08534-.21315,3.97494,3.97494,0,0,0-.278-.8525.381.381,0,0,1-.03976-.35759c.20822-.09679.27655.08518.338.20067.51758.97289,1.22974,1.8181,1.79435,2.75879.11546.19238.33915.313.36563.56071a9.30619,9.30619,0,0,0,1.12073,1.76459c.37434.52745.80078,1.01783,1.20044,1.52755A.6386.6386,0,0,1,102.87836,48.97938Z"/><path class="cls-230" d="M100.49026,45.51333a4.781,4.781,0,0,1-.91956-1.24987,13.3173,13.3173,0,0,1-1.26425-1.94178.64411.64411,0,0,0-.28132-.35124,3.01027,3.01027,0,0,1-.62341-1.09633c-.01275-.214-.141-.42152-.03752-.64215.24113-.13184.27609.0953.34485.21691a13.80487,13.80487,0,0,0,.82746,1.31995c.60972,1.07777,1.311,2.09819,1.97654,3.14109a.32217.32217,0,0,1,.05387.1413,9.28026,9.28026,0,0,0,.81174,1.23016c.04646.07555.11366.13647.11343.2332-.373-.08248-.41276-.47464-.63635-.69837A1.1299,1.1299,0,0,0,100.49026,45.51333Z"/><path class="cls-120" d="M99.7201,46.9q-.34682-.63571-.6939-1.27129a1.62749,1.62749,0,0,1-.30775-.73171c.20689-.04063.2869.12973.39179.24582.19627.21721.32639.48376.51114.7103a7.16273,7.16273,0,0,1,.65821.84967c.59362.86832,1.33325,1.61541,1.98887,2.4314.72953.908,1.51871,1.76082,2.30468,2.61771a.47559.47559,0,0,1,.23018.23151c-.15193.16832.03927.229.11257.296.58366.53342,1.06617,1.166,1.66676,1.68353a4.24121,4.24121,0,0,1,.452.56162.95926.95926,0,0,1-.68179-.33892c-.23912-.2008-.43209-.472-.77875-.50788a13.53247,13.53247,0,0,1-1.67192-1.73211c-.50853-.56807-1.03126-1.1247-1.52371-1.7097-.76278-.90612-1.48829-1.83783-2.194-2.78722C100.04189,47.25679,99.87554,47.08244,99.7201,46.9Z"/><path class="cls-231" d="M104.57314,51.75188a18.41091,18.41091,0,0,1-2.14435-2.28427c-.51687-.59384-1.02349-1.19627-1.54835-1.7837-.3974-.44478-.71447-.96133-1.06731-1.44592l-.24729-.33938c-.48925-.86487-1.03385-1.69829-1.47475-2.59051-.07176-.1452-.17858-.28772-.09895-.4671.30241-.06806.26194.26048.41817.36166a19.0241,19.0241,0,0,0,1.6451,2.52566c.416.57839.854,1.14089,1.28224,1.71049.29974.55985.67331,1.07235,1.02223,1.6009a24.53793,24.53793,0,0,0,2.06973,2.45158C104.49715,51.56927,104.57558,51.63716,104.57314,51.75188Z"/><path class="cls-232" d="M100.56692,45.05121c-.29073-.17671-.38437-.50036-.55788-.762a23.18628,23.18628,0,0,1-1.52189-2.47288c-.17583-.39056-.47726-.73777-.418-1.20971.06758-.07976.14131-.042.21478-.01173a1.47224,1.47224,0,0,1,.35682.48825,26.24915,26.24915,0,0,0,1.63183,2.53214.76765.76765,0,0,1,.21767.51168,6.70529,6.70529,0,0,0,.75809,1.298,1.36223,1.36223,0,0,1,.32041.55064A4.936,4.936,0,0,1,100.56692,45.05121Z"/><path class="cls-233" d="M100.49026,44.127c-.67733-.94156-1.29736-1.92-1.88486-2.91961-.10945-.18622-.23243-.3645-.34917-.54644-.13377-.32845-.48591-.5635-.41868-.978.14319-.10342.21614.01679.26438.10666.20512.38208.5347.66843.77078,1.02558l1.77162,2.6955a16.59666,16.59666,0,0,0,1.267,1.92235,1.434,1.434,0,0,1,.35074.61946c-.46413-.18381-.65323-.63466-.93241-.98952C101.06868,44.73121,100.74791,44.45829,100.49026,44.127Z"/><path class="cls-234" d="M74.45209,38.88967a1.03542,1.03542,0,0,1,.11274-1.06942c.0659-.105.19717-.16887.19578-.31642.02863-.2791.22943-.35091.46245-.38468a1.80274,1.80274,0,0,1,.82683.65751,2.54442,2.54442,0,0,0,.08508,1.019.24028.24028,0,0,1-.06476.24822c-.15333.39091-.544.34659-.84757.462C74.88172,39.40558,74.73665,39.06046,74.45209,38.88967Z"/><path class="cls-235" d="M76.07021,39.0439a2.35527,2.35527,0,0,1-.07722-1.30959c-.00186-.30525.25935-.41779.44163-.57818a1.449,1.449,0,0,0,.46529-.54578.53206.53206,0,0,1,.44084-.325.30458.30458,0,0,1,.31892.14824c.06656.38072.27327.75835.02829,1.1469a.56149.56149,0,0,1-.27651.4308c-.55539.22368-.67826.80237-1.03309,1.18647A.42133.42133,0,0,0,76.07021,39.0439Z"/><path class="cls-236" d="M90.09048,15.55281a5.89116,5.89116,0,0,1,2.31106,1.69442.60411.60411,0,0,1-.639.02231,1.4824,1.4824,0,0,0-.69346-.12626c-.6249-.18518-1.2614-.32693-1.88994-.49824a5.023,5.023,0,0,0-1.31833-.22346,1.20543,1.20543,0,0,1-.62041-.17555,4.301,4.301,0,0,1-.8479-.308.862.862,0,0,1,.61661-.69349Z"/><path class="cls-237" d="M85.1601,19.01886c-.40777.00775-.72966-.26806-1.12689-.32513a4.83843,4.83843,0,0,0-3.01663.58147,10.62779,10.62779,0,0,0-1.90165,1.13638,15.31055,15.31055,0,0,1-2.3871,1.34156,2.46537,2.46537,0,0,1-.96595.192c-.00668-.11691.01056-.2419-.18673-.1832a1.50581,1.50581,0,0,1-.62035.00957c.10233-.37089.39284-.47825.67576-.59165a.99224.99224,0,0,0,.59354-.38968,9.95124,9.95124,0,0,0,2.96679-1.35868,9.34374,9.34374,0,0,1,2.22561-1.17565c.46659-.16265.94039-.30469,1.40654-.46852a11.29013,11.29013,0,0,1,1.875-.309,2.5895,2.5895,0,0,1,1.51727.21245.55728.55728,0,0,1,.20675.78649c-.14019.15781-.22174.30869-.018.49026.07466.06654.17636.19244-.02734.25745A6.11324,6.11324,0,0,1,85.1601,19.01886Z"/><path class="cls-238" d="M86.2387,17.78653a7.50048,7.50048,0,0,0-1.5407-.30819,3.23773,3.23773,0,0,0-1.81463-.2449,2.32144,2.32144,0,0,1-.57347.01384c.64691-.154,1.29343-.30976,1.941-.46085.14711-.03433.298-.05264.44707-.07833a6.32732,6.32732,0,0,1,1.54127.104,5.58539,5.58539,0,0,1,1.07793.20417c.53586.36424,1.16279.57583,1.667.9925.11407.09426.33709.1558.13861.371a1.07791,1.07791,0,0,1-.71064-.05882,8.89424,8.89424,0,0,0-1.76051-.35154A.84335.84335,0,0,1,86.2387,17.78653Z"/><path class="cls-239" d="M74.45228,25.33439c.16053-.08.318-.16688.48205-.23887a24.386,24.386,0,0,0,4.91288-3.09943,12.25283,12.25283,0,0,1,2.75109-1.58033,3.833,3.833,0,0,1,2.068-.05356,3.5921,3.5921,0,0,0,.41686.04291c.36265.23561.6782.53714,1.05787.75021.07944.04458.19094.125.041.23067a1.61682,1.61682,0,0,1-.78694-.08318,7.98913,7.98913,0,0,0-1.31343-.20462,1.1993,1.1993,0,0,0-1.06216-.14107,6.41313,6.41313,0,0,0-2.29614,1.08213,5.85365,5.85365,0,0,0-1.0298.80994c-.30412.29776-.72314.50436-1.05585.79657-.36914.32421-.76605.61786-1.15736.90656-.58033.42816-1.12563.8923-1.68774,1.33706a1.13719,1.13719,0,0,1-.99731.23023.66128.66128,0,0,0-.62555.09657.93548.93548,0,0,1-.719.19638A4.93429,4.93429,0,0,0,74.45228,25.33439Z"/><path class="cls-240" d="M74.29821,29.10824c-.13649-.012-.29243.04821-.40635-.03947-.21688-.16694-.38295-.34808-.17836-.659.12793-.19441.34315-.34663.3536-.61087a2.55581,2.55581,0,0,0,1.24633-.86456c.1694-.255.52439-.38544.79176-.57748a1.33778,1.33778,0,0,0,.321-.26921c.36686-.51076.97419-.7172,1.41152-1.13632.03636-.03485.10074-.04928.12246-.08928.30609-.56361.89646-.80673,1.36374-1.18009a14.07221,14.07221,0,0,1,1.64236-1.27865,10.77887,10.77887,0,0,1,1.82831-.99494,1.88541,1.88541,0,0,1,1.22909.07123.92893.92893,0,0,0,.366.08074.114.114,0,0,1,.09292.12569c-.14206.17563-.35787.14647-.54559.19028-.13228.03087-.27342.02965-.3608.15854a.27745.27745,0,0,1-.17672.06756c-1.0495-.05085-1.71483.69946-2.49929,1.1991-.0955.06082-.16337.16492-.26346.22286A13.95392,13.95392,0,0,0,77.91057,25.82a18.89028,18.89028,0,0,1-1.582,1.51457,1.37589,1.37589,0,0,0-.323.37944c-.34882.57984-.96847.8678-1.42594,1.33028A.23712.23712,0,0,1,74.29821,29.10824Z"/><path class="cls-241" d="M84.467,21.63756l-.0773-.07721a.34985.34985,0,0,0-.308-.46216c.3792-.19881.74138.0071,1.10769.05475a6.7961,6.7961,0,0,0,1.04949.1764,1.19164,1.19164,0,0,1,.74085.11615,10.34661,10.34661,0,0,1,3.15461,1.79333A14.08641,14.08641,0,0,1,94.33683,28.303q.291.60627.52427,1.23772c.05326.1431.16122.31343-.04995.43531-.15023-.04134-.15512-.18357-.21112-.29449a13.553,13.553,0,0,0-1.40573-2.22242,1.759,1.759,0,0,0-.39393-.36079,11.65669,11.65669,0,0,0-1.80471-1.98251,12.7678,12.7678,0,0,0-2.6969-2.08324,8.67484,8.67484,0,0,0-1.41355-.57189c-.74445-.2306-1.502-.42426-2.23723-.68632A.36474.36474,0,0,1,84.467,21.63756Z"/><path class="cls-242" d="M85.1601,19.01886a3.50652,3.50652,0,0,1,1.30957.15356c.15946-.13067.32026-.0393.46906.01274a8.69883,8.69883,0,0,1,1.85062.78522c-.01321.42146.34356.62612.54316.92309.06549.09744.24842.16256.08745.322-.54612-.08877-1.0962-.14364-1.64529-.20663-.68558-.129-1.34468-.35953-2.01977-.52907a.31364.31364,0,0,1-.20951-.15182.28414.28414,0,0,0-.16446-.14915q-.8816-.34674-1.76143-.698a.1591.1591,0,0,1,.15407-.077A1.74365,1.74365,0,0,0,85.1601,19.01886Z"/><path class="cls-243" d="M85.54539,20.328l2.234.61622a2.48873,2.48873,0,0,1,.9082.3985,18.48189,18.48189,0,0,1,3.60485,2.866,11.10923,11.10923,0,0,1,2.79221,4.76167c.3694,1.359.56084,2.764,1.05641,4.0907a.348.348,0,0,1,.00834.2272.11788.11788,0,0,1-.08277.07559c-.17377-.03259-.19274-.18425-.24155-.31347a7.57646,7.57646,0,0,0-.55566-1.26153,13.35947,13.35947,0,0,0-.44534-1.54c-.031-.096-.08482-.18826-.03408-.29329.12977-.34229-.10948-.60382-.22007-.87915a12.88253,12.88253,0,0,0-3.32365-4.771,14.40106,14.40106,0,0,0-3.14156-2.30063,8.26638,8.26638,0,0,0-1.86585-.67545c-.39477-.29617-.8844-.47375-1.15572-.92423A1.38678,1.38678,0,0,1,85.54539,20.328Z"/><path class="cls-244" d="M89.16624,18.32512a3.65813,3.65813,0,0,0-1.33779-.88592.91878.91878,0,0,1-.51125-.42288l.61647-.00052c.28134-.18775.54934-.02932.80509.05427a10.79829,10.79829,0,0,1,2.51772,1.11725,20.9102,20.9102,0,0,1,3.1929,3.08889,11.14,11.14,0,0,1,2.03689,4.75926c.05619.32868.01867.66454.07518.99325a13.64594,13.64594,0,0,0,.56419,3.798,18.01848,18.01848,0,0,0,.96293,3.2897.47381.47381,0,0,1,.01359.15184.159.159,0,0,1-.15407.07749c-.20554-.01573-.20567-.2-.25721-.3299a37.5739,37.5739,0,0,1-1.22414-3.94245c-.03714-.13525-.07884-.26881-.12044-.40242a12.69628,12.69628,0,0,1-.27486-2.05276,9.64193,9.64193,0,0,0-.37022-1.76526,9.0422,9.0422,0,0,0-1.89884-3.8619,11.54532,11.54532,0,0,0-4.4609-3.43734A.34337.34337,0,0,1,89.16624,18.32512Z"/><path class="cls-245" d="M91.246,18.24862a16.17309,16.17309,0,0,0-2.13324-.938,4.207,4.207,0,0,0-1.1791-.29478.406.406,0,0,0-.23651-.392c-.16323-.10991-.36448-.18029-.45681-.37781a13.30705,13.30705,0,0,1,3.85155.84718,5.54842,5.54842,0,0,1,1.05214.7474.23645.23645,0,0,1,.10634.29811A.77066.77066,0,0,1,91.246,18.24862Z"/><path class="cls-246" d="M74.29821,29.10824a7.39706,7.39706,0,0,0,1.49536-1.29289,7.08112,7.08112,0,0,1,.90715-.92707c.90526-.87,1.76349-1.78865,2.708-2.6182a3.94157,3.94157,0,0,1,.33269-.25767c.90716-.639,1.78916-1.31466,2.74541-1.882.33534-.199.70377-.07174,1.0556-.108.10926-.088.21887-.031.326.00259,1.02189.32016,2.05715.59818,3.06309.96847.13738.05057.31078.066.3259.26868a.358.358,0,0,1-.35578.16482,5.21788,5.21788,0,0,1-1.30563.00334,1.91169,1.91169,0,0,1-.6188-.20021,4.00291,4.00291,0,0,0-2.12963-.34163.92174.92174,0,0,0-.42881.15278,17.54069,17.54069,0,0,0-2.81478,2.135,11.95043,11.95043,0,0,0-1.66845,1.74468,7.02224,7.02224,0,0,1-1.43771,1.48942,6.0644,6.0644,0,0,0-.76075,1.0091c-.05658.06817-.09187.15636-.18892.182-.25165.04276-.469.18932-.71727.24006a1.057,1.057,0,0,1-.841-.03989C74.01616,29.53647,74.215,29.34806,74.29821,29.10824Z"/><path class="cls-247" d="M73.98993,29.8016a2.28242,2.28242,0,0,0,1.42907-.30933c.08943-.05758.1033.01053.11178.078.12138.18664-.00921.34347-.06807.50348-.06635.18041-.1198.36421-.17621.54739-.24249.355-.44837.74884-.91078.87556a4.14885,4.14885,0,0,1-.8656-.08455.28738.28738,0,0,1-.29571-.32021,4.71856,4.71856,0,0,1,.08234-.75131A1.26637,1.26637,0,0,1,73.98993,29.8016Z"/><path class="cls-248" d="M75.22264,37.19488a.64963.64963,0,0,0-.462.309.36522.36522,0,0,1-.42642-.00112,4.46865,4.46865,0,0,0-1.34558-.69255c.172-.29907.16076-.68978.46221-.92414.54127-.51375,1.09373-.21645,1.64529-.02314A1.238,1.238,0,0,1,75.22264,37.19488Z"/><path class="cls-249" d="M75.06838,35.886c-.122-.02475-.24677-.04014-.3654-.07593a1.62694,1.62694,0,0,0-1.25216.07593c-.16942-.46188-.61119-.67238-.92461-1.00134a.30259.30259,0,0,1,.21062-.29084c.33352-.10451.35543-.352.329-.6333.38012-.19472.58464-.15877.95132.16721.43266.38464.43342.38583.93366.0696a.52841.52841,0,0,1,.384-.13464c.42142.05682.509.35854.52479.71344A1.3239,1.3239,0,0,1,75.06838,35.886Z"/><path class="cls-250" d="M74.37573,31.49671a6.69368,6.69368,0,0,0,.84691-.84817c.41789-.48353.87721-.92788,1.2961-1.41231a44.24661,44.24661,0,0,1,3.46244-3.90795c.69213-.63214,1.44707-1.184,2.18345-1.76021a1.90023,1.90023,0,0,1,1.05737-.30271,3.45,3.45,0,0,1,1.74727.32681,2.26686,2.26686,0,0,0,1.0631.70793,2.26118,2.26118,0,0,1,.60374.32067c.0857.07175.24295.13878.1045.2981a1.21652,1.21652,0,0,1-.87789-.14936,4.46178,4.46178,0,0,0-1.87853-.41506,5.56485,5.56485,0,0,0-.71727-.11882,1.874,1.874,0,0,0-1.26153.55454c-.65554.62723-1.40662,1.14878-2.03426,1.814A8.30531,8.30531,0,0,0,78.69182,28.278c-.02477.045.01679-.00106-.01934.03259a13.09967,13.09967,0,0,0-1.47081,2.36735c-.07426.1054-.13568.21865-.26645.26527a2.63516,2.63516,0,0,0-1.51735.94035,2.42675,2.42675,0,0,1-.36.39546.36369.36369,0,0,1-.46207.01674c-.13969-.09348-.331-.17984-.22071-.41474Z"/><path class="cls-251" d="M74.37506,31.881c.22.48486.478.54478.79636.15724a2.32272,2.32272,0,0,1,.5923-.63839c.36978-.19654.6683-.57694,1.1537-.52019.11239.1642-.00533.28926-.08455.40728a5.21654,5.21654,0,0,0-.35878.61576,3.44891,3.44891,0,0,0-1.07117,1.85849c-.02192.1221.00536.2571-.10344.35327-.11394-.00256-.17951.07955-.26071.14078-.5494.41437-.59469.41888-1.0733-.05589a.89068.89068,0,0,0-.89964-.23883c-.06535-.35233-.342-.599-.46221-.92391q.67413-.50091,1.34816-1.002A.62294.62294,0,0,1,74.37506,31.881Z"/><path class="cls-252" d="M82.38712,44.281c-.2776-.3469-.039-.73011-.05421-1.0928a6.16031,6.16031,0,0,0-.00671-.74375c-.03017-.19143-.1415-.482.2148-.551a2.36253,2.36253,0,0,1,.94333.28141,15.40568,15.40568,0,0,0,3.63485.92654,2.61986,2.61986,0,0,1,.37683.07135c1.40908.46109,2.69637-.05117,3.98358-.511.40363-.14419.63614-.54583.98116-.789a4.00672,4.00672,0,0,1,.43092-.31821c.24745-.10828.40487.0742.58066.18589a7.10112,7.10112,0,0,1,1.009.84622,3.43427,3.43427,0,0,0,.17222,1.25773.38546.38546,0,0,1-.172.43669.30632.30632,0,0,0-.30764.11938c-.3928.63593-1.0953.755-1.70493,1.02593-.32651.14511-.66677.259-.99551.39946a1.71144,1.71144,0,0,1-.74357.15173,21.47431,21.47431,0,0,1-5.64168-.90463,14.08386,14.08386,0,0,0-2.43535-.64822A.85145.85145,0,0,1,82.38712,44.281Z"/><path class="cls-253" d="M94.48131,42.5866c-.48907-.16295-.74491-.64925-1.19991-.86581-.11244-.05352-.20136-.15126-.34061-.13535a.5785.5785,0,0,1-.1852-.33,5.1235,5.1235,0,0,0-.63976-1.43534.44171.44171,0,0,1-.082-.29112c.1184-.2663.39982-.34922.59566-.52909.39535-.06432.52424.28015.74484.48473.3157.76758.93172,1.34709,1.30414,2.07873.08828.17342.26205.33725.11135.56106Z"/><path class="cls-254" d="M94.78983,42.12439a4.24758,4.24758,0,0,0-.79595-1.447,3.13724,3.13724,0,0,1-.66791-1.17149c-.20487-.33274-.02549-.68242-.04559-1.02318.17176-.16211.2417.01723.31158.10953a10.9313,10.9313,0,0,1,.65811,1.06813l1.23255,2.6184c-.09665.11018-.03121.285-.15354.38491C95.13891,42.49435,95.07526,42.19854,94.78983,42.12439Z"/><path class="cls-255" d="M93.24912,35.50075a4.67475,4.67475,0,0,0-1.30923-.69319,3.809,3.809,0,0,1-.82528-1.07669,4.08033,4.08033,0,0,0-1.10027-1.64537c-.46567-.52684-.94815-1.04281-1.43663-1.55156a8.94938,8.94938,0,0,0-2.61722-1.65011c-.39957-.19989-.83338-.33142-1.25089-.495a2.97658,2.97658,0,0,0-1.32254-.16727.64836.64836,0,0,0-.386.15873,4.23272,4.23272,0,0,0-.98618,1.17085A16.66987,16.66987,0,0,0,80.71949,33.158c-.15845.62046-.32595,1.24-.43709,1.87248a3.25618,3.25618,0,0,1-.57128.61386.29679.29679,0,0,1-.34245.10426.4655.4655,0,0,1-.17162-.44142,6.05163,6.05163,0,0,1,.02294-.953c.21231-.50778.40394-1.02644.65906-1.515a19.30453,19.30453,0,0,0,.84646-2.101,5.64371,5.64371,0,0,1,1.08525-2.01494,2.482,2.482,0,0,0,.37084-.4906,1.52636,1.52636,0,0,1,1.72259-.69281,4.90583,4.90583,0,0,1,1.70627.6743c.72683.38435,1.48181.7055,2.21378,1.07635a10.165,10.165,0,0,1,2.15765,1.78164,26.6289,26.6289,0,0,1,2.14468,2.20553,3.27367,3.27367,0,0,1,.41912.60535,7.69792,7.69792,0,0,0,.62291,1.1736C93.24934,35.19134,93.38783,35.3231,93.24912,35.50075Z"/><path class="cls-256" d="M91.16916,33.72938l.77072,1.07819.61734.92479a.76212.76212,0,0,1,.33312.65716c-.0022.39952.1962.79163.043,1.19573-.16578.02544-.216-.12177-.28725-.213a9.79,9.79,0,0,0-1.28949-1.31521A11.85372,11.85372,0,0,0,89.44445,33.407a1.08441,1.08441,0,0,1-.29817-.39435,1.14653,1.14653,0,0,1,.04018-.94817.24547.24547,0,0,1,.37655.01126A15.526,15.526,0,0,1,91.176,33.65709C91.18984,33.67483,91.18059,33.70439,91.16916,33.72938Z"/><path class="cls-257" d="M98.02515,42.81737a5.76906,5.76906,0,0,0,.76126,1.56255,9.96136,9.96136,0,0,1,.77943,1.51869c-.31572-.30576-.45113-.764-.84739-1.00163-.59018-.94908-1.17824-1.89949-1.77312-2.84563-.077-.12246-.12418-.28757-.30665-.31187a.52078.52078,0,0,0-.07091-.2947c-.47284-.83413-.77186-1.75777-1.31611-2.55518a1.74005,1.74005,0,0,1-.35109-1.19762c.24335-.12333.27094.11937.35084.228.47886.65078.80383,1.3932,1.21934,2.08218a19.7116,19.7116,0,0,0,1.45737,2.46624C98.00017,42.56787,98.08689,42.67521,98.02515,42.81737Z"/><path class="cls-258" d="M92.86394,37.58025c.2138-.23911-.02635-.4748-.0321-.70974a1.54794,1.54794,0,0,0-.27464-1.13816c.15873-.00338.206.1239.276.22956a35.02421,35.02421,0,0,1,2.0333,3.62084,1.59811,1.59811,0,0,0-.61642.07764c-.32713-.16333-.37088-.53542-.57878-.78714-.1195-.14468-.17264-.34118-.34514-.4455A1.61619,1.61619,0,0,1,92.86394,37.58025Z"/><path class="cls-259" d="M94.94368,37.65812a6.55177,6.55177,0,0,0,.308,1.23148,2.24606,2.24606,0,0,1-.6562-.95,14.18463,14.18463,0,0,0-1.34634-2.43885c-.04225-.38227-.344-.63289-.49728-.96087a3.21485,3.21485,0,0,1-.2736-.656c.33459.02836.49981.31489.72977.495a3.91465,3.91465,0,0,1,.81671.94528A6.50455,6.50455,0,0,1,94.94368,37.65812Z"/><path class="cls-260" d="M92.24747,18.09444a4.39361,4.39361,0,0,0-.92094-.76363.76515.76515,0,0,1-.23463-.2376c.18133-.17209.37248-.05725.53166.01651a1.5564,1.5564,0,0,0,.778.13751,10.94346,10.94346,0,0,1,2.167,1.867,9.53934,9.53934,0,0,1,1.81665,3.04321,10.26737,10.26737,0,0,1,.71678,3.27457,7.38061,7.38061,0,0,1,.15278,1.28859,5.64532,5.64532,0,0,0,.13735,1.61236.29319.29319,0,0,1-.13721.39,9.76466,9.76466,0,0,1-.3855-2.69532c-.22246-.11781-.197-.35069-.22549-.5408a11.89249,11.89249,0,0,0-.86846-3.01494,9.16129,9.16129,0,0,0-1.77364-2.67233,15.04972,15.04972,0,0,0-1.50191-1.42613C92.40218,18.29569,92.28332,18.2308,92.24747,18.09444Z"/><path class="cls-261" d="M92.24747,18.09444a2.387,2.387,0,0,1,.72882.55284,10.62212,10.62212,0,0,1,3.744,6.75094,6.45721,6.45721,0,0,0,.1491.6294.68728.68728,0,0,0-.25607.80025.15237.15237,0,0,1-.05189.20085c-.103-.55754-.17918-1.12166-.314-1.6714a11.01735,11.01735,0,0,0-2.26632-4.50324,28.17214,28.17214,0,0,0-2.565-2.40026,2.02851,2.02851,0,0,1-.17007-.2052A1.333,1.333,0,0,0,92.24747,18.09444Z"/><path class="cls-262" d="M96.40738,29.64728c.32129.73663.44142,1.53369.68871,2.29293a21.13659,21.13659,0,0,0,.852,2.40553c.14212.60753.48446,1.14121.64314,1.74264.01611.06106.03355.12177.05037.18264a.51879.51879,0,0,0-.30814-.077,9.5899,9.5899,0,0,1-.82268-1.6314c-.36449-.84566-.61579-1.73276-.97874-2.57817a3.45834,3.45834,0,0,1-.23786-1.11308C96.24477,30.45519,96.1167,30.03175,96.40738,29.64728Z"/><path class="cls-263" d="M96.6383,31.958a.91537.91537,0,0,1,.08783.16271,28.432,28.432,0,0,0,1.55246,3.89192,1.23521,1.23521,0,0,1,.05487.18133,20.32555,20.32555,0,0,0,1.6099,3.19421,2.14674,2.14674,0,0,1,.39268.73368,13.67272,13.67272,0,0,1-1.11053-1.528c-.04444-.07071-.05642-.1719-.16679-.18959-.08966.17652.08072.32115.0449.48526a8.52112,8.52112,0,0,0-.61628-.92414c-.145-.03051-.19722-.14782-.253-.26505q-1.07305-2.25423-1.91953-4.60313c-.19442-.64609-.33411-1.30655-.52309-1.95411a.87978.87978,0,0,1-.0345-.704c.19809-.07187.26058.09869.28217.21007.11443.59043.422,1.11493.552,1.61429A.28583.28583,0,0,1,96.6383,31.958Z"/><path class="cls-264" d="M96.4072,33.11318c.36026.9142.70225,1.83618,1.0866,2.74015.30421.71549.66042,1.4089.99354,2.11211a3.65183,3.65183,0,0,0,.40115,1.18611c.038.12062.09163.23632.1381.35428a6.40689,6.40689,0,0,1-.88107-1.49484c-.183-.33178-.40209-.63853-.5826-.96952-.16061.01414-.17764-.12534-.22166-.22094A19.28365,19.28365,0,0,1,96.156,33.86477c-.04634-.16966-.13686-.33614-.05677-.52026l.00019-.00031C96.20764,33.27468,96.22344,33.0821,96.4072,33.11318Z"/><path class="cls-265" d="M79.30551,34.26853c0,.36886.00113.73773-.00054,1.10658-.00064.1429-.00538.28479.15462.35687a.46285.46285,0,0,1-.02717.40666,7.27628,7.27628,0,0,0-.54479,1.74859.34653.34653,0,0,1-.12136.23235,1.36918,1.36918,0,0,0-.31168.133c-.21069.15938-.3113.02355-.36726-.14a.90822.90822,0,0,0-.39937-.53206c.05521-.39053-.09974-.767-.07723-1.15536a.71069.71069,0,0,1,.157-.81488,11.92236,11.92236,0,0,0,1.04913-1.9035c.17221-.28278.29066-.59721.45634-.88491.07919-.13752.15563-.306.37353-.243a.54129.54129,0,0,1,.08247.60128C79.59172,33.54437,79.43738,33.90208,79.30551,34.26853Z"/><path class="cls-266" d="M78.76627,38.11958a5.62311,5.62311,0,0,1,.50226-1.85458c.07859-.17082.12817-.355.19106-.533l.77054-.69336c.11234-.02651.17446.03448.21976.12551a1.77072,1.77072,0,0,1-.14273,1.3379c-.49092.6623-.725,1.46221-1.1559,2.15666A.74551.74551,0,0,1,78.76627,38.11958Z"/><path class="cls-267" d="M82.46379,41.73929a1.96825,1.96825,0,0,1-.92422-.46213,11.25081,11.25081,0,0,1-.51386-1.78475c-.01378-.03459.03279-.09319.05128-.14062a1.5716,1.5716,0,0,1,.22363-1.11065c.64051-.463.8616-.37131,1.5258.443-.06509.34337.13984.66364.08813,1.00649a8.72339,8.72339,0,0,0-.2754,1.60509A.54.54,0,0,1,82.46379,41.73929Z"/><path class="cls-268" d="M81.38547,38.27343c-.24.32022-.16819.72962-.30848,1.07836-.33967.00892-.44744-.32983-.693-.462a5.4246,5.4246,0,0,1,.23111-2.07968,12.10138,12.10138,0,0,1,.723-1.72086c.04351-.1194.14826-.23686.27217-.04286a20.03326,20.03326,0,0,1-.075,2.21542A2.024,2.024,0,0,1,81.38547,38.27343Z"/><path class="cls-269" d="M81.54,34.96257q-.30256.61191-.60479,1.224c-.103.20979-.10561.47091-.32011.62351a.79177.79177,0,0,0-.308-.30806,6.07493,6.07493,0,0,0,.07685-1.3863,4.5744,4.5744,0,0,1,.394-1.14781,6.04688,6.04688,0,0,0,.48808-1.27521c.0283-.14176.036-.37572.30323-.33236a.42552.42552,0,0,1,.03525.36891,4.94864,4.94864,0,0,0,.06493,2.00158C81.67438,34.83481,81.70037,34.95109,81.54,34.96257Z"/><path class="cls-270" d="M82.46379,41.73929a8.64365,8.64365,0,0,1,.38554-2.07952c.14475-.10235.27225-.01418.394.04626a1.62408,1.62408,0,0,0,.62148.19018,9.15906,9.15906,0,0,1,1.76946.34781,4.27679,4.27679,0,0,0,1.56043-.08681c.40735-.041.811-.1185,1.219-.16108a2.6639,2.6639,0,0,0,1.61279-.63735,3.30839,3.30839,0,0,1,.80474-.52082,1.11648,1.11648,0,0,1,1.26193.668c.102.3968.42441.68257.53886,1.074.09838.33648.20547.67042.30872,1.00548a5.89129,5.89129,0,0,1-3.40016,1.78827,4.97139,4.97139,0,0,1-2.02487-.09088,19.52056,19.52056,0,0,1-3.41707-.76923,9.46729,9.46729,0,0,1-1.55769-.62018Z"/><path class="cls-271" d="M96.09924,33.34451a20.87443,20.87443,0,0,0,1.46368,3.697,6.84558,6.84558,0,0,0,.52225,1.42606c.05564.14126.114.28146.17106.42215l-.53906-.4622a.28245.28245,0,0,1-.17436-.18761c-.25444-.59413-.58705-1.151-.83428-1.74884a15.76069,15.76069,0,0,1-.90774-2.36891c-.18044-.62769-.33828-1.26183-.53744-1.88463a.40064.40064,0,0,1,.06573-.43357,3.58279,3.58279,0,0,1,.60878,1.29956C95.97844,33.20029,95.99413,33.29742,96.09924,33.34451Z"/><path class="cls-272" d="M96.79275,36.5018c.32125.63559.66454,1.26062.92442,1.92567.3224.64465.64664,1.2884.96578,1.93466.07235.14651.127.30179.18976.453a4.8547,4.8547,0,0,1-1.00165-1.15538.32007.32007,0,0,1-.20253-.21218c-.37-.83541-.79379-1.64669-1.12473-2.49955a.73226.73226,0,0,1-.10027-.40009C96.54182,36.39751,96.67346,36.49625,96.79275,36.5018Z"/><path class="cls-273" d="M98.02515,42.81737a21.72746,21.72746,0,0,1-1.61777-2.77222c-.279-.5682-.45512-1.1784-.71712-1.75371a.88361.88361,0,0,1-.15951-.60975c.26959-.08456.33254.157.397.30068.45149,1.007,1.14768,1.88208,1.558,2.90978l.53944,1.07829c.0738.4278.34161.795.38518,1.23222C98.23335,43.12277,98.15505,42.94428,98.02515,42.81737Z"/><path class="cls-274" d="M97.48569,40.89215a8.718,8.718,0,0,1-.68647-1.141c-.44173-.59884-.67888-1.31233-1.0828-1.93216a1.15614,1.15614,0,0,0-.15624-.1617c-.12776-.04-.157-.15832-.20875-.25984a12.70141,12.70141,0,0,1-.96388-2.1751c-.12343-.42226-.41787-.76451-.54976-1.18275a4.11333,4.11333,0,0,0-.30017-1.10421.4485.4485,0,0,1-.02138-.40793c.253-.12826.315.10148.386.23631.233.44217.51272.85706.74193,1.30078a3.55187,3.55187,0,0,1,.33535.85634,19.03479,19.03479,0,0,0,1.46866,3.12118c.293.59788.598,1.19.87569,1.79523.05129.1118.13637.22271.08476.36158Z"/><path class="cls-275" d="M97.40866,40.19886c-.37668-.75286-.747-1.509-1.132-2.2576-.33908-.65941-.72168-1.29781-1.03345-1.96944-.21881-.47135-.34966-.98336-.52261-1.47623a.86893.86893,0,0,0-.16192-.38113,5.40146,5.40146,0,0,0-.35382-1.03176.80805.80805,0,0,1-.08845-.40245c.185-.27592.2507-.01677.30372.08653a11.99616,11.99616,0,0,1,.53712,1.18835,3.06779,3.06779,0,0,0,.42725.81191,3.81038,3.81038,0,0,1,.25706.68138c.495,1.16944,1.10227,2.28343,1.69043,3.406.24981.47682.46738.96961.73155,1.439a.285.285,0,0,1,.03871.29079c.04242.43752.31144.8043.38486,1.23214a6.62615,6.62615,0,0,1-.80372-1.22259C97.59726,40.4584,97.57723,40.27693,97.40866,40.19886Z"/><path class="cls-276" d="M98.10229,40.58422c-.60375-1.18148-1.20394-2.36479-1.81258-3.54375a10.45394,10.45394,0,0,1-.96082-2.23272,2.17,2.17,0,0,1-.35435-1.42705c.0943-.10773.1503-.02248.19537.04738a2.37221,2.37221,0,0,0,.21846.3384,13.797,13.797,0,0,1,.85456,1.95694c.11321.24528.32472.46923.24168.77865a20.87839,20.87839,0,0,0,.88634,2.0784c.16151.36208.33308.71968.50011,1.0793-.02542.23883.15358.38968.24838.57675a.76351.76351,0,0,1,.13679.42441Z"/><path class="cls-277" d="M75.06838,35.886a.245.245,0,0,1,.16041-.2331,1.00068,1.00068,0,0,0,.53328-.84517c.34925-.25417.6984-.50734,1.03177-.78373a.69943.69943,0,0,1,.67734-.15545.26644.26644,0,0,1,.05751.10312.45845.45845,0,0,1-.069.40015.85782.85782,0,0,0-.11453.86484,1.9254,1.9254,0,0,1-.04257,1.11131.63939.63939,0,0,0-.36515.4c-.08042.27224-.35548.3881-.555.56474a5.38946,5.38946,0,0,0-.38948.42163c-.32669-.08-.43856-.46671-.77035-.53944A2.4042,2.4042,0,0,0,75.06838,35.886Z"/><path class="cls-278" d="M77.30259,36.348c-.05633-.04146-.09805-.10816-.07233-.16527.21473-.47678-.02385-.92735-.07364-1.388A.35777.35777,0,0,1,77.275,34.487a.64067.64067,0,0,0,.18189-.52648,5.14681,5.14681,0,0,0,1.267-1.75519,22.45872,22.45872,0,0,0,1.16475-2.58559,2.94636,2.94636,0,0,1,.3108-.57123c.066-.09338.12208-.25091.29271-.13344a3.69719,3.69719,0,0,1-.19454,1.18919,2.7785,2.7785,0,0,0-.16258,1.00481,10.11912,10.11912,0,0,1-.52172,1.46529.49052.49052,0,0,0-.236.24342c-.34934.754-.79455,1.46155-1.089,2.24222a.8309.8309,0,0,1-.236.34573,1.45449,1.45449,0,0,0-.44148,1.0194A.516.516,0,0,0,77.30259,36.348Z"/><path class="cls-279" d="M88.78087,20.02016a12.543,12.543,0,0,0-2.3112-.84774,1.01573,1.01573,0,0,0-.16781-.20052c-.33268-.23589-.14937-.36736.09092-.49227A3.5919,3.5919,0,0,1,88.043,18.883c.693.2965,1.40815.51219,2.11512.75889a12.55162,12.55162,0,0,1,3.2662,2.81,16.85853,16.85853,0,0,1,1.3965,2.1083,11.0896,11.0896,0,0,1,1.22163,4.01249,2.68882,2.68882,0,0,1,.00769,1.06037c-.27179.02914-.2664-.20375-.28466-.35059a12.67686,12.67686,0,0,0-.78807-2.93722,6.61515,6.61515,0,0,0-.55024-1.09131A14.75251,14.75251,0,0,0,92.828,23.05574a10.7847,10.7847,0,0,0-3.64851-2.75823C89.02721,20.2303,88.86244,20.18652,88.78087,20.02016Z"/><path class="cls-280" d="M90.167,19.71185a8.26141,8.26141,0,0,1-1.16641-.3306,18.45416,18.45416,0,0,0-2.60785-.90162c-.01826-.05726-.06965-.1459-.04968-.167.21867-.23093-.00255-.36544-.1044-.52612.99737.06262,1.93758.43576,2.92754.53859a.26866.26866,0,0,1,.15407.15437,7.36,7.36,0,0,0,.80616.89915A.21316.21316,0,0,1,90.167,19.71185Z"/><path class="cls-281" d="M87.24017,23.25474a6.40624,6.40624,0,0,0-1.30464-.49439c-.79419-.25682-1.595-.49313-2.39307-.738-.01578-.18343.07985-.23306.24892-.234a1.54384,1.54384,0,0,0,.67559-.15082c.76971.26531,1.56322.453,2.33829.70463a15.76928,15.76928,0,0,1,1.58272.628,8.70981,8.70981,0,0,1,1.8531,1.34317,16.79761,16.79761,0,0,1,2.28862,2.2594c.12235.14614.1387.36678.334.456a10.03991,10.03991,0,0,1,1.46632,2.65348.27925.27925,0,0,1,.02281.25637c-.28632.06075-.34141-.1919-.41163-.35116a13.41754,13.41754,0,0,0-2.0375-2.72846,1.13789,1.13789,0,0,0-.29666-.24276,26.01539,26.01539,0,0,0-2.24377-2.0182,8.81254,8.81254,0,0,0-1.93525-1.218A.3866.3866,0,0,1,87.24017,23.25474Z"/><path class="cls-282" d="M94.32724,29.95556A13.457,13.457,0,0,0,92.93093,27.203a.66729.66729,0,0,1-.06718-.17429,5.588,5.588,0,0,1,1.31158,1.71142,3.50483,3.50483,0,0,1,.61468,1.2154,5.41156,5.41156,0,0,1,.53907,1.84837,5.52537,5.52537,0,0,0,.39776,1.59032,11.61256,11.61256,0,0,0,.92031,2.67286,3.27231,3.27231,0,0,1,.1456.43471c-.10259.14076-.2054.039-.30814.00027L95.32889,33.8063c-.44037-1.1717-.66347-2.40587-1.03393-3.59772A.243.243,0,0,1,94.32724,29.95556Z"/><path class="cls-283" d="M88.78087,20.02016a10.64342,10.64342,0,0,1,3.84306,2.65638,13.26417,13.26417,0,0,1,1.56557,1.96295,11.56445,11.56445,0,0,1,1.42989,3.31956c.10735.39071.12682.80479.20928,1.20346.03468.16766.02626.36511.19354.48486.22732.11421.18185.34691.22129.53585a1.86158,1.86158,0,0,0,.1637.69657c.08916.35682.00421.75094.2311,1.07825v.53147a7.74276,7.74276,0,0,1-.64515-1.71509.52763.52763,0,0,0-.20243-.357c-.13244.02189-.1438-.08587-.163-.16625-.04764-.19956-.12143-.392-.158-.5943a11.66832,11.66832,0,0,0-2.59793-5.4544,17.22283,17.22283,0,0,0-3.03778-2.69713c-.1306-.09775-.30067-.15422-.35986-.33033-.27955-.21262-.40031-.57208-.71177-.75841C88.54087,20.2841,88.81527,20.15508,88.78087,20.02016Z"/><path class="cls-284" d="M89.47419,21.17505A11.98563,11.98563,0,0,1,91.29492,22.507a12.01112,12.01112,0,0,1,2.52875,2.80891A11.38946,11.38946,0,0,1,95.567,29.65749a6.72715,6.72715,0,0,0,.22374.76,10.69914,10.69914,0,0,0,.41686,1.886c.0442.27121.17.53008.19961.80974-.10373.0755-.13544.24689-.30777.231-.13-.72037-.4642-1.38342-.61-2.09543-.17133-.83672-.33823-1.67174-.56489-2.497a10.4245,10.4245,0,0,0-1.77119-3.38219,15.99624,15.99624,0,0,0-4.18675-3.73026c-.385-.25664-.82136-.41368-1.18718-.6952.09257-.04253.18253-.1.29074-.04671a1.62777,1.62777,0,0,0,.90257.11768C89.17482,20.99485,89.29589,21.16074,89.47419,21.17505Z"/><path class="cls-285" d="M96.4072,30.87979c-.2667-.26065-.18341-.635-.30516-.94309a2.6823,2.6823,0,0,1-.07983-.28933,11.35494,11.35494,0,0,0-1.2935-5.05066,18.76832,18.76832,0,0,0-1.32029-2.00987,14.55844,14.55844,0,0,0-3.24138-2.875.34343.34343,0,0,0-.175-.35161,1.69931,1.69931,0,0,1-.67168-.88075,7.40494,7.40494,0,0,1,2.59881,1.5056,10.56505,10.56505,0,0,1,3.19285,3.8747,11.54786,11.54786,0,0,1,1.072,4.12431c.03091.55681.14645,1.10892.22343,1.66318A2.69957,2.69957,0,0,0,96.4072,30.87979Z"/><path class="cls-286" d="M84.9291,23.63987a3.99873,3.99873,0,0,0-2.24662-.21162,3.43647,3.43647,0,0,0-1.18359.75993A18.39541,18.39541,0,0,0,78.97275,26.481c-.62764.68788-1.17905,1.44356-1.79542,2.13848a9.80387,9.80387,0,0,1-1.95469,2.02905c-.02486-.39586.25287-.70528.30814-1.07826a6.43989,6.43989,0,0,1,1.1497-1.44405,5.919,5.919,0,0,0,1.28944-1.4094,11.42389,11.42389,0,0,1,.92538-.95813A15.62982,15.62982,0,0,1,81.325,23.67087a9.04037,9.04037,0,0,1,1.17748-.787,1.52829,1.52829,0,0,1,.95846-.12461,4.742,4.742,0,0,1,1.8292.49574,1.07857,1.07857,0,0,0,.25524.07679c.13311.0948.30606.09955.43915.19582.10971.07935.24361.14124.19355.31724A4.22538,4.22538,0,0,1,84.9291,23.63987Z"/><path class="cls-287" d="M86.16167,23.794c-.13037-.2541-.48588-.20809-.61628-.46215a6.09749,6.09749,0,0,0,1.69478-.07706,3.35457,3.35457,0,0,1,1.361.6602,19.18626,19.18626,0,0,1,2.9156,2.50029,1.67187,1.67187,0,0,1,.11443.15128,6.32744,6.32744,0,0,1,1.54091,2.16c.16022.37559.43322.69309.59905,1.06725.09595.21647.24225.43055.12259.68816-.19414.081-.26293-.07971-.34767-.19031a3.45849,3.45849,0,0,0-.41133-.53012,18.04779,18.04779,0,0,0-3.96055-4.3117A8.07486,8.07486,0,0,0,86.6729,24.05,1.272,1.272,0,0,1,86.16167,23.794Z"/><path class="cls-288" d="M77.45648,33.88361a1.90491,1.90491,0,0,0-1.12879.64131,1.20957,1.20957,0,0,1-.56562.28283.59633.59633,0,0,0-.46259-.69327,1.93105,1.93105,0,0,1,.48567-1.46732A.79211.79211,0,0,0,76,32.25255a.4205.4205,0,0,1,.45519-.37162c.17325-.19393.34927-.31828.51935-.00009.075.1403.14317.08674.23259.016.08119-.06417.16136-.1769.2884-.06928a1.18093,1.18093,0,0,0,.40947.75557A2.05872,2.05872,0,0,1,77.45648,33.88361Z"/><path class="cls-289" d="M94.17335,32.651c.09285.49718.46962.91963.38537,1.46343-.25049-.44843-.50327-.89561-.74989-1.34616a.58866.58866,0,0,0-.25192-.2716c-.21723-.05983-.2725-.259-.35359-.42732a12.73846,12.73846,0,0,0-2.23515-3.14423,27.14363,27.14363,0,0,0-2.64506-2.39709,4.66825,4.66825,0,0,0-1.0499-.55521c-.7913-.36618-1.62806-.61875-2.42423-.97279a5.1958,5.1958,0,0,0-.7525-.52488c-.0833-.043-.19849-.08069-.16884-.21915a4.21907,4.21907,0,0,1,2.03509.44194,1.85955,1.85955,0,0,0,.81522.17421,3.63465,3.63465,0,0,1,1.66059.73249A20.07434,20.07434,0,0,1,92.43529,29.466c.17873.21941.39263.40532.561.63262a20.53878,20.53878,0,0,1,1.05868,2.07815A1.5619,1.5619,0,0,1,94.17335,32.651Z"/><path class="cls-290" d="M83.92764,24.256c.29635.24673.71535.32992.92443.693-.21873.1044-.47593-.03066-.68873.11126a2.02813,2.02813,0,0,0-2.35257.65867c-.6455.63473-1.34008,1.22984-1.921,1.92393a13.561,13.561,0,0,0-1.26612,1.963c-.41527.719-.77606,1.46666-1.16774,2.198l-.42425.3556c-.11891-.25654-.23792-.52355-.57646-.27858-.05972-.25035.13867-.38992.24722-.5662a.98007.98007,0,0,0,.215-.43505,6.03249,6.03249,0,0,0,.92026-1.57676,1.63354,1.63354,0,0,1,.40871-.63921c.47513-.42182.66972-1.04547,1.09757-1.5096a15.51924,15.51924,0,0,1,1.86965-1.8123,4.43293,4.43293,0,0,0,.67546-.56095A1.78223,1.78223,0,0,1,83.92764,24.256Z"/><path class="cls-291" d="M92.9406,30.10958a8.85134,8.85134,0,0,1-1.30087-1.44374q-.82153-.91447-1.71722-1.7482a9.13407,9.13407,0,0,0-1.93158-1.48549c-.3937-.20687-.808-.37459-1.213-.56-.32262-.39449-.82535-.46942-1.24459-.69046a1.23859,1.23859,0,0,1-.60426-.54185,3.67852,3.67852,0,0,1,1.23257.15408,8.11872,8.11872,0,0,1,2.803,1.36856,21.42287,21.42287,0,0,1,2.65,2.44373,8.4772,8.4772,0,0,1,1.55724,2.11793A.64361.64361,0,0,1,92.9406,30.10958Z"/><path class="cls-292" d="M92.09321,39.50593a1.56537,1.56537,0,0,0-1.23258-.616c-.21089-.015-.19451-.19706-.23239-.32989-.038-.13321-.02818-.30061-.15735-.37454a1.34022,1.34022,0,0,1-.56157-.91171,5.31673,5.31673,0,0,0-.38389-.90751.17716.17716,0,0,1,.0878-.1922.64011.64011,0,0,0,.336-.58254c.148-.22089.26558-.044.36039.04521a5.39524,5.39524,0,0,1,.77565.82835,11.70052,11.70052,0,0,1,1.48613,2.0496c.095.16483.216.33262.06122.529C92.52771,39.28513,92.266,39.34369,92.09321,39.50593Z"/><path class="cls-293" d="M92.63265,39.04371a.84994.84994,0,0,0-.14876-.5016,14.43747,14.43747,0,0,0-1.46918-2.03992,1.17093,1.17093,0,0,1,.38556-.462,4.68237,4.68237,0,0,1,1.46367,1.5401,2.92611,2.92611,0,0,1,.46221.84749c.15407.35942-.06928.71878-.00018,1.07818C93.06789,39.39229,92.98138,39.02141,92.63265,39.04371Z"/><path class="cls-294" d="M81.53954,32.343a.37329.37329,0,0,0-.14949.25793c-.12671.85569-.69718,1.548-.877,2.38426-.01084.05042-.08458.08732-.12906.1305l-.15388-.07711a10.15539,10.15539,0,0,1,.44054-2.08775,12.6096,12.6096,0,0,1,.6331-2.04111,6.06861,6.06861,0,0,1,1.526-2.524,1.098,1.098,0,0,1,.68784-.28033,5.74941,5.74941,0,0,1,2.09091.5234,14.92549,14.92549,0,0,1,2.18035,1.11485,6.07489,6.07489,0,0,1,1.51252,1.40486,18.23646,18.23646,0,0,1,1.63525,1.92028.90861.90861,0,0,1,.23248.66061c-.53735-.52184-1.07268-1.0458-1.61423-1.56325a.48423.48423,0,0,0-.31177-.13107.18551.18551,0,0,1-.101-.05164c-1.1898-1.44969-2.90957-2.05121-4.53237-2.79013a1.72639,1.72639,0,0,0-2.2123,1.00987,11.80449,11.80449,0,0,1-.50991,1.20061,1.61671,1.61671,0,0,0-.17441.58535C81.69945,32.12633,81.70635,32.27874,81.53954,32.343Z"/><path class="cls-295" d="M79.61328,32.57438a4.65459,4.65459,0,0,1,.46259-1.46364,4.747,4.747,0,0,1,.48815-1.47426,11.82112,11.82112,0,0,1,1.63709-2.25659,1.6612,1.6612,0,0,1,1.63323-.55055A13.26141,13.26141,0,0,1,86.525,27.83126a8.08238,8.08238,0,0,1,3.11459,2.18434c.43615.48522.93971.90731,1.36258,1.40673a7.75852,7.75852,0,0,1,1.0026,1.46844c.07054.13724.20158.27527.08839.45352Q90.99,32.222,89.88623,31.10013a9.46881,9.46881,0,0,0-3.52576-2.38706,10.448,10.448,0,0,1-1.43259-.72547,2.81374,2.81374,0,0,0-1.79314-.34752,1.05158,1.05158,0,0,0-.73266.43317A11.36656,11.36656,0,0,0,80.939,30.39339a4.01851,4.01851,0,0,0-.17081.50691,22.12465,22.12465,0,0,1-1.46264,3.36823,2.10173,2.10173,0,0,1,.22129-.75239A1.05685,1.05685,0,0,0,79.61328,32.57438Z"/><path class="cls-296" d="M92.09321,33.34429a6.2045,6.2045,0,0,0-1.15534-1.84855.31655.31655,0,0,1,.13286-.41036c.1991-.07134.30791.074.42605.18466a7.56645,7.56645,0,0,1,1.30536,1.54549c.22061.35891.4982.67944.701,1.05024a7.621,7.621,0,0,1,.386.79243c.079.21872.21965.44572.05309.68859a6.61418,6.61418,0,0,0-1.464-1.463Z"/><path class="cls-297" d="M81.53954,32.343a8.08981,8.08981,0,0,1,.77952-2.18,2.08177,2.08177,0,0,1,1.50745-1.24222,1.72028,1.72028,0,0,1,1.12513.28885,19.70692,19.70692,0,0,1,3.3603,1.82485,3.18164,3.18164,0,0,1,.93122,1.00052,1.70129,1.70129,0,0,0-.00007,1.00116c-.235-.00447-.39259-.18435-.59585-.262a2.43549,2.43549,0,0,0-.86892-.79836c-.88021-.57681-1.83727-1.01524-2.76456-1.507a2.0667,2.0667,0,0,0-1.08125-.22483,1.19844,1.19844,0,0,0-.93279.70817A8.68858,8.68858,0,0,0,82.04227,33.89c-.17509.26323-.13926.63364-.42569.8405-.19434-.20265-.10186-.46821-.15409-.702A4.61423,4.61423,0,0,1,81.53954,32.343Z"/><path class="cls-298" d="M88.70384,32.80506c.26592-.12389.35793.15775.53925.23116.34936.3878.69646.77768,1.049,1.16258a13.23818,13.23818,0,0,1,1.10818,1.84135c-.03684.23049-.22128.33785-.38556.462-.322-.32084-.56109-.73157-1.00141-.92433-.14273.01711-.13594-.10154-.169-.1844A1.28075,1.28075,0,0,0,89.543,34.822c-.36078-.51219-.77651-.98038-1.17321-1.46409A1.41819,1.41819,0,0,1,88.70384,32.80506Z"/><path class="cls-277" d="M93.94225,35.34679a3.54723,3.54723,0,0,0-.539-1.46329.27461.27461,0,0,1,.21774-.0823c.1642.001.24026.12209.32127.23645.50762.84407.69531,1.82866,1.1821,2.68342.16978.29812.29193.62335.43583.9362.24222.63872.47922,1.2795.73041,1.91467a.97557.97557,0,0,1,.11679.47321c-.457-.66884-.75372-1.43257-1.23586-2.08647-.0746-.10118-.15183-.20043-.22784-.30057-.24487-.61814-.48474-1.23834-.738-1.853A3.88446,3.88446,0,0,0,93.94225,35.34679Z"/><path class="cls-299" d="M89.55123,36.348a2.27705,2.27705,0,0,1,.52538,1.11651c.08922.2471.15219.4781.42015.59364a.36117.36117,0,0,1,.21285.37363.6644.6644,0,0,0,.151.4581c-.62161.3614-1.08023.997-1.84632,1.11367-.96839.14755-1.93736.2927-2.90878.41788a1.382,1.382,0,0,1-.5639-.08586,9.25625,9.25625,0,0,0-1.83519-.35723c-.322-.03295-.5491-.27544-.85712-.31861.00181-.33587-.25133-.65209-.07722-1.00125a.23607.23607,0,0,1-.03263-.21654,12.48112,12.48112,0,0,0,.29392-1.60278c.02046-.13361.02036-.2835.16453-.36441.69282.01569,1.361.21927,2.05024.27025.34367.02542.68747.06125,1.03052.10226a1.73106,1.73106,0,0,0,1.22174-.37783,1.86915,1.86915,0,0,1,1.49639-.40092A.75989.75989,0,0,1,89.55123,36.348Z"/><path class="cls-300" d="M83.23413,36.50208a14.88446,14.88446,0,0,0-.29385,1.619,2.96607,2.96607,0,0,0-.16817.53747c-.14167-.12792-.29191-.24767-.42331-.38538-.32522-.34085-.64257-.158-.96333.00029L81.54,34.96256c.08954-.05622.0744-.147.07656-.232.1583-.26883.12435-.625.38524-.84725.25561-.06757.422.14379.6664.21209.018-.16237.05384-.32419.0552-.48028a5.89861,5.89861,0,0,1,.87785-2.34743.40246.40246,0,0,1,.442-.24094,3.01711,3.01711,0,0,1,1.188.27933c.922.52892,1.867,1.0185,2.75811,1.60017.16911.11038.35414.21523.40634.43816a6.7559,6.7559,0,0,1,1.54052,2.0025,1.642,1.642,0,0,1-.87384-.57435,17.54537,17.54537,0,0,0-2.86125-1.98234c-.31814-.21219-.65848-.396-.99411-.58359a.66374.66374,0,0,0-.61328-.00033c-1.00077.36922-1.06769,1.22767-1.191,2.09332-.09586.673-.04028,1.34909-.11905,2.01954A.38367.38367,0,0,1,83.23413,36.50208Z"/><path class="cls-301" d="M93.94225,34.03765c-.10665-.04364-.174-.16536-.308-.15479-.30216-.51843-.638-1.02047-.91859-1.547a7.22577,7.22577,0,0,0-1.3833-1.87737c-.87326-.8287-1.75522-1.65032-2.68147-2.42036A9.20463,9.20463,0,0,0,86.377,26.7631a15.85339,15.85339,0,0,0-2.36362-1.0138c-.09805-.02493-.19639-.07409-.19407-.20576.25557-.28036.56438-.14907.85162-.0929a4.51232,4.51232,0,0,1,.60625.23231,8.54289,8.54289,0,0,1-.83271-.36913c-.1221-.06786-.25308-.12971-.28576-.28762.20032-.30222.45639-.10368.69332-.07716.73281.225,1.43209.54076,2.152.79855a9.44807,9.44807,0,0,1,3.15895,2.252,14.07379,14.07379,0,0,1,1.71545,1.81118,9.628,9.628,0,0,1,1.3445,2.08238,5.51644,5.51644,0,0,0,.33392.60359,1.23121,1.23121,0,0,0,.05557.33536A4.37234,4.37234,0,0,1,93.94225,34.03765Z"/><path class="cls-302" d="M92.9406,30.10958a.47869.47869,0,0,1,.23129-.38541c.23868.06571.28231.30762.41451.468.088.10672.14172.24148.27881.3025.23146.1353.26514.39431.37285.60505.30771.602.47584,1.2606.74784,1.87772a.40762.40762,0,0,1,.03485.36675,5.64419,5.64419,0,0,0,.30814,1.46355,3.37165,3.37165,0,0,1-.60666-1.164c-.1514-.31987-.28524-.648-.43067-.97078-.02228-.04944-.06757-.07533-.11821-.0219Z"/><path class="cls-303" d="M95.02075,33.3442c-.37346-.9546-.71444-1.92235-1.15554-2.84952a1.71875,1.71875,0,0,0-.38143-1.0229,9.99693,9.99693,0,0,1-.70835-1.302,5.57814,5.57814,0,0,0-.9635-1.313,1.65511,1.65511,0,0,1-.18074-.29033c.4268.13283.58611.5472.86233.83518.29841.31111.55126.66572.82608.99964a3.68756,3.68756,0,0,1,.693,1.13412.7553.7553,0,0,0,.31459.42011c.32624,1.16984.65423,2.33921.9758,3.51033a1.74364,1.74364,0,0,1,.02585.34041C95.12052,33.72269,95.1571,33.47581,95.02075,33.3442Z"/><path class="cls-304" d="M83.85061,25.56526c1.16963.41118,2.26753.984,3.39089,1.49987a10.6697,10.6697,0,0,1,2.4004,1.69337c.5472.46472,1.0366.98705,1.57523,1.46a6.0493,6.0493,0,0,1,1.5766,2.0875,4.07494,4.07494,0,0,0,.41612.63893,2.65575,2.65575,0,0,1,.42445.93791l-.23106.00063a12.29769,12.29769,0,0,0-2.05206-2.63056c-.0771-.06772-.14523-.14456-.25905-.1422a16.69429,16.69429,0,0,0-3.06657-3.15593,5.63716,5.63716,0,0,0-1.72744-.82337,7.99974,7.99974,0,0,1-1.034-.41161,4.25133,4.25133,0,0,0-1.65342-.46777,1.7396,1.7396,0,0,0-1.27241.53673c-.42631.39-.78712.84093-1.18252,1.25936a2.73376,2.73376,0,0,0-.64953.80224l-.04523.02679a4.21843,4.21843,0,0,0-.802,1.54763,18.33611,18.33611,0,0,1-1.60189,3.09559.84709.84709,0,0,1-.60036.44014l-.00037-.07693a.47723.47723,0,0,1,.07307-.3644,1.6355,1.6355,0,0,0,.31249-.94508,1.73761,1.73761,0,0,1,.11177-.36241,38.13723,38.13723,0,0,1,2.08915-4.058,10.55437,10.55437,0,0,1,1.76345-1.91154,2.94456,2.94456,0,0,1,1.37118-.87409C83.44107,25.31749,83.68915,25.284,83.85061,25.56526Z"/><path class="cls-305" d="M81.07733,28.03a9.26763,9.26763,0,0,1,1.30243-1.406,1.9932,1.9932,0,0,1,1.99545-.34067c.4438.13573.85184.34568,1.28041.51054.61973.23841,1.2432.46373,1.84733.74413a4.54722,4.54722,0,0,1,1.32321.9672c.6921.70279,1.4357,1.356,2.05908,2.1259a.699.699,0,0,1,.20689.47967l-.15426.385c-1.18126-1.161-2.17133-2.55431-3.74551-3.24708a15.94074,15.94074,0,0,0-3.41342-1.33778,1.76132,1.76132,0,0,0-1.5963.62507c-.22469.39828-.59574.6658-.8411,1.03933a6.72152,6.72152,0,0,0-1.09838,2.11885,1.20927,1.20927,0,0,1-.16729.41661c-.12483-.11872-.07034-.25232-.03846-.38875.14357-.61439.28282-1.22978.42364-1.84481A8.58716,8.58716,0,0,1,81.07733,28.03Z"/><path class="cls-306" d="M83.85061,25.56526a1.49417,1.49417,0,0,0-1.5087.3067,20.24352,20.24352,0,0,0-2.01469,2.04585,6.00647,6.00647,0,0,0-.79845,1.29986c-.50588.99174-.98,1.99965-1.47059,2.99923-.06109.12445-.14358.23841-.21614.35723-.38983-.1259-.41808-.433-.38612-.77022a6.64912,6.64912,0,0,1,.89293-1.89733,13.095,13.095,0,0,1,1.27551-2.08516,9.92942,9.92942,0,0,1,1.97681-2.02117,4.2134,4.2134,0,0,0,.48347-.43534,1.56021,1.56021,0,0,1,2.07411-.33871L85.391,25.705a1.494,1.494,0,0,1-.6609-.14337A1.201,1.201,0,0,0,83.85061,25.56526Z"/><path class="cls-307" d="M83.23413,36.50208a.51187.51187,0,0,1-.06357-.17836,20.28912,20.28912,0,0,1,.29038-2.9961,1.32493,1.32493,0,0,1,.70381-.98809,3.97033,3.97033,0,0,0,.46429-.268.43847.43847,0,0,1,.53222.00058c.83715.51175,1.66614,1.0454,2.5104,1.53413.84587.48965,1.462,1.22657,2.26456,1.74064.00293.08458-.01341.17559.07708.231.11932.42065-.19881.579-.46207.77018-.33192-.25006-.74518-.09233-1.10377-.2191-.141-.04983-.25679.03426-.38217.11572a2.79811,2.79811,0,0,1-1.45873.7006A13.56359,13.56359,0,0,1,83.23413,36.50208Z"/><path class="cls-308" d="M88.3957,33.34439a25.267,25.267,0,0,0-3.33725-2.01065,3.32323,3.32323,0,0,0-1.0774-.21974.21212.21212,0,0,0-.26.11874c-.171.60552-.69374,1.05162-.78132,1.68554a7.42694,7.42694,0,0,0-.17355,1.35626l-.76439-.39125a5.85552,5.85552,0,0,1,.60666-2.33715,2.41861,2.41861,0,0,0,.21674-.40467A1.30362,1.30362,0,0,1,84.683,30.256a17.316,17.316,0,0,1,2.36618,1.17411,6.92509,6.92509,0,0,1,1.22556.7802c.18488.16375.44089.28551.4291.59473A.83488.83488,0,0,1,88.3957,33.34439Z"/><path class="cls-278" d="M81.07733,28.03a2.13447,2.13447,0,0,1-.61628.84721A1.37911,1.37911,0,0,1,81.07733,28.03Z"/></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/blablacar/blablacar_featured.svg b/content/en/case-studies/blablacar/blablacar_featured.svg
index f66f6ca954..5b887f24a8 100644
--- a/content/en/case-studies/blablacar/blablacar_featured.svg
+++ b/content/en/case-studies/blablacar/blablacar_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#054752;}.cls-3{fill:#2dbeff;}.cls-4{fill:#9ef769;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M50.5482,62.90483a10.09648,10.09648,0,0,0-11.657-8.30871l1.61214-9.2636L34.588,44.27843a57.39373,57.39373,0,0,0-3.80713,11.905,10.13238,10.13238,0,0,1,2.10818,14.83168,9.63322,9.63322,0,0,0,1.52534,1.48812,9.86967,9.86967,0,0,0,7.81267,2.05858,10.07841,10.07841,0,0,0,8.30871-11.657Z"/><path class="cls-3" d="M30.68169,56.82831l.124-.62006a10.13042,10.13042,0,0,0-7.41584-1.63694L25.002,45.32012,19.0991,44.27843a55.66705,55.66705,0,0,0-3.91874,12.52508c-.81847,4.81161-.78126,9.97045,1.73615,13.604a10.08313,10.08313,0,0,0,2.009,2.10818A9.93749,9.93749,0,0,0,26.763,74.57423a10.09554,10.09554,0,0,0,6.12612-3.5343l-.47124-.62c-2.52981-3.62112-2.567-8.78-1.73615-13.57917Z"/><path class="cls-4" d="M35.08407,62.90483a10.17941,10.17941,0,0,0-4.29076-6.69658l-.124.62006c-.80606,4.81161-.76886,9.97045,1.761,13.604l.45883.62a10.19257,10.19257,0,0,0,2.18259-8.1847Z"/><path class="cls-2" d="M169.59843,72.55286h-3.52191a.24759.24759,0,0,0-.248.16121,7.01907,7.01907,0,0,1-2.18259,3.17468,6.34021,6.34021,0,0,1-3.93113,1.1905,6.43828,6.43828,0,0,1-5.33245-2.65383,11.13989,11.13989,0,0,1-1.93457-6.647,10.95044,10.95044,0,0,1,1.93457-6.647,6.47719,6.47719,0,0,1,5.33245-2.64143,6.2133,6.2133,0,0,1,3.90634,1.1905A7.2073,7.2073,0,0,1,165.8037,62.818a.25746.25746,0,0,0,.248.17361H169.586a.21832.21832,0,0,0,.16122-.0744.20809.20809,0,0,0,.0744-.17362v-.062a10.03023,10.03023,0,0,0-3.42269-5.70449,10.489,10.489,0,0,0-6.72139-2.15779,10.7838,10.7838,0,0,0-8.12269,3.59631,13.85069,13.85069,0,0,0-3.28629,9.4,13.82781,13.82781,0,0,0,3.28629,9.4A10.70465,10.70465,0,0,0,159.69,80.812a10.545,10.545,0,0,0,6.75858-2.14538,9.92832,9.92832,0,0,0,3.4103-5.7665v-.062a.27339.27339,0,0,0-.07441-.186.22487.22487,0,0,0-.17362-.062Zm30.91586-10.4417a5.38777,5.38777,0,0,0-1.07889-.09921,8.38178,8.38178,0,0,0-1.53773.14882,5.46227,5.46227,0,0,0-1.52534.57044,6.48422,6.48422,0,0,0-1.43852,1.0913,5.49933,5.49933,0,0,0-.71927.90528l-.16122.248V62.57a.27165.27165,0,0,0-.248-.27282h-3.37308a.27165.27165,0,0,0-.248.27282V80.17951a.26672.26672,0,0,0,.248.248h3.39789a.27165.27165,0,0,0,.27282-.248V71.62278a8.7445,8.7445,0,0,1,.33482-2.52982,3.94241,3.94241,0,0,1,.99209-1.66174,4.49984,4.49984,0,0,1,1.56253-.95488,6.36982,6.36982,0,0,1,2.10818-.32243,8.20808,8.20808,0,0,1,1.27731.09921h.03721a.23432.23432,0,0,0,.248-.248V62.384a.21954.21954,0,0,0-.186-.27282ZM127.4348,54.79453h-.062l-3.41029.59525a.28913.28913,0,0,0-.248.248v24.5293a.27809.27809,0,0,0,.28522.27283h3.43509a.27165.27165,0,0,0,.248-.27283V55.06736a.27809.27809,0,0,0-.28523-.27283Zm-7.0314,14.55885a7.9223,7.9223,0,0,0-2.04618-2.60422l-.248-.186a6.38048,6.38048,0,0,0-1.2153-.74407l-.124-.062.08681-.08681a6.40257,6.40257,0,0,0,1.55013-4.142,6.80726,6.80726,0,0,0-.57045-2.72823,6.41616,6.41616,0,0,0-1.57493-2.20739,6.83761,6.83761,0,0,0-2.20739-1.33932,8.85505,8.85505,0,0,0-3.13747-.496h-7.515a.2781.2781,0,0,0-.27283.28522V80.15471a.27525.27525,0,0,0,.27283.27282h9.276a10.61184,10.61184,0,0,0,3.32348-.44643,7.65771,7.65771,0,0,0,2.3562-1.30212,8.12356,8.12356,0,0,0,2.04618-2.60422c.124-.248.21082-.45884.29763-.68206l.0372-.09921.062-.17361a7.84216,7.84216,0,0,0,.39684-2.41821,7.68179,7.68179,0,0,0-.80607-3.37309ZM107.13426,58.56446h3.14987a7.66577,7.66577,0,0,1,2.23219.248,2.84473,2.84473,0,0,1,1.1161.74406,3.0471,3.0471,0,0,1,.80607,2.10818,2.9205,2.9205,0,0,1-.80607,2.08338,2.6737,2.6737,0,0,1-1.1161.74407,6.33407,6.33407,0,0,1-1.48812.248h-3.93114V58.56446Zm9.67283,15.57574a4.08418,4.08418,0,0,1-.81847,1.28971,4.3996,4.3996,0,0,1-1.45092.91767,7.89853,7.89853,0,0,1-2.57942.33484h-4.83642v-8.1475h4.83642a7.81441,7.81441,0,0,1,2.567.33482,4.21706,4.21706,0,0,1,1.42612.91768,4.56288,4.56288,0,0,1,.83087,1.26491,3.6881,3.6881,0,0,1,.31,1.52533,3.86352,3.86352,0,0,1-.31,1.56254Zm27.03433-10.36729a7.694,7.694,0,0,0-5.38207-1.79816,7.82222,7.82222,0,0,0-4.96042,1.48813,6.57984,6.57984,0,0,0-2.3562,3.16227.23831.23831,0,0,0,.186.31l3.19948.558a.21008.21008,0,0,0,.248-.124,3.66565,3.66565,0,0,1,3.69551-2.15778,3.80152,3.80152,0,0,1,2.85225,1.01689,3.71173,3.71173,0,0,1,.99208,2.72823v.64486a16.84223,16.84223,0,0,0-4.762-.74407,8.45394,8.45394,0,0,0-5.27045,1.58734,5.35873,5.35873,0,0,0-2.10818,4.48918A5.27785,5.27785,0,0,0,132.11,79.24943a7.0769,7.0769,0,0,0,4.6256,1.56254,7.62438,7.62438,0,0,0,5.60528-2.05858v1.38892a.315.315,0,0,0,.31.31h2.95146a.29377.29377,0,0,0,.29762-.29763V68.70853a6.40037,6.40037,0,0,0-2.04617-4.93563ZM140.84036,76.174a5.45021,5.45021,0,0,1-3.63351,1.24011,3.71342,3.71342,0,0,1-2.43061-.71926,2.43147,2.43147,0,0,1-.83087-1.93457,2.24937,2.24937,0,0,1,1.06649-2.009,4.99394,4.99394,0,0,1,2.72823-.68206,16.04837,16.04837,0,0,1,4.58841.74406,4.028,4.028,0,0,1-1.48813,3.34829ZM81.42685,54.79453h-.0496l-3.4227.59525a.28913.28913,0,0,0-.248.248v24.5293a.27809.27809,0,0,0,.28523.27283h3.43509a.27165.27165,0,0,0,.248-.27283V55.06736a.27525.27525,0,0,0-.27282-.27283Zm-7.0686,14.55885a7.85163,7.85163,0,0,0-2.02138-2.60422l-.248-.186a6.38094,6.38094,0,0,0-1.2153-.74406l-.124-.062.08681-.0868a6.40257,6.40257,0,0,0,1.55013-4.142,6.79674,6.79674,0,0,0-.55805-2.72823,6.41616,6.41616,0,0,0-1.57493-2.20739,6.99369,6.99369,0,0,0-2.18259-1.33932,8.85505,8.85505,0,0,0-3.13747-.496H57.4308a.27809.27809,0,0,0-.27283.28522V80.15471a.27525.27525,0,0,0,.27283.27282h9.23879a10.6118,10.6118,0,0,0,3.32348-.44643,7.65783,7.65783,0,0,0,2.3562-1.30212,8.1237,8.1237,0,0,0,2.04618-2.60422c.124-.248.21082-.45884.29762-.68206l.0372-.09921a.45985.45985,0,0,1,.04961-.17361,7.84245,7.84245,0,0,0,.39683-2.41821,7.68179,7.68179,0,0,0-.80607-3.37309ZM61.08911,58.56446h3.17467a7.66547,7.66547,0,0,1,2.23219.248,2.84459,2.84459,0,0,1,1.1161.74406,3.0471,3.0471,0,0,1,.80607,2.10818,2.9205,2.9205,0,0,1-.80607,2.08338,2.67383,2.67383,0,0,1-1.1161.74407,6.33469,6.33469,0,0,1-1.48813.248H61.08911Zm9.71,15.57573a4.60764,4.60764,0,0,1-.83087,1.28971,4.39994,4.39994,0,0,1-1.45093.91768,7.89857,7.89857,0,0,1-2.57942.33483H61.1015v-8.1475h4.83642a7.79382,7.79382,0,0,1,2.57942.33483,4.095,4.095,0,0,1,1.45093.91768,4.5631,4.5631,0,0,1,.83087,1.26491,3.68807,3.68807,0,0,1,.31,1.52533,4.0912,4.0912,0,0,1-.32243,1.56253ZM97.83346,63.7729A7.74768,7.74768,0,0,0,92.439,61.97475a7.87061,7.87061,0,0,0-4.96043,1.48813,6.65849,6.65849,0,0,0-2.3562,3.16227.25413.25413,0,0,0,.19841.31l3.18708.558a.25973.25973,0,0,0,.28522-.124,3.62753,3.62753,0,0,1,3.68312-2.15778,3.79873,3.79873,0,0,1,2.82744,1.01688,3.72647,3.72647,0,0,1,1.01689,2.72824v.64485a17.14094,17.14094,0,0,0-4.78681-.74406,8.45388,8.45388,0,0,0-5.27045,1.58734,5.84479,5.84479,0,0,0-.21082,8.80475A7.07688,7.07688,0,0,0,90.678,80.812a7.65409,7.65409,0,0,0,5.61769-2.05857v1.38892a.29455.29455,0,0,0,.28522.31h2.95146a.2968.2968,0,0,0,.31-.29762V68.70853a6.392,6.392,0,0,0-2.03377-4.93563ZM94.8076,76.174a5.53956,5.53956,0,0,1-3.65832,1.2401,3.71337,3.71337,0,0,1-2.4306-.71926,2.38429,2.38429,0,0,1-.86808-1.93456,2.23414,2.23414,0,0,1,1.0789-2.009,5.02341,5.02341,0,0,1,2.72823-.68205,15.91563,15.91563,0,0,1,4.5884.74406,3.94327,3.94327,0,0,1-1.46333,3.34828ZM185.40978,63.7729a7.74766,7.74766,0,0,0-5.39446-1.79815,7.91944,7.91944,0,0,0-4.96043,1.48813,6.73916,6.73916,0,0,0-2.3562,3.16227.27225.27225,0,0,0,.21081.31l3.19949.558a.21008.21008,0,0,0,.248-.124,3.66566,3.66566,0,0,1,3.69552-2.15778,3.85883,3.85883,0,0,1,2.85225,1.01688,3.76279,3.76279,0,0,1,.99208,2.72824v.64485a16.99125,16.99125,0,0,0-4.77441-.74406,8.45388,8.45388,0,0,0-5.27045,1.58734,5.32625,5.32625,0,0,0-2.10818,4.48918,5.26853,5.26853,0,0,0,1.92216,4.31557,7.07691,7.07691,0,0,0,4.6256,1.56253,7.68389,7.68389,0,0,0,5.63009-2.05857v1.38892a.29681.29681,0,0,0,.29763.31h2.95146a.29377.29377,0,0,0,.29763-.29762V68.70853a6.48672,6.48672,0,0,0-2.04618-4.93563ZM182.37152,76.174a5.41713,5.41713,0,0,1-3.6211,1.2401,3.71342,3.71342,0,0,1-2.43061-.71926,2.43144,2.43144,0,0,1-.83086-1.93456,2.24939,2.24939,0,0,1,1.06649-2.009,5.02336,5.02336,0,0,1,2.72823-.68205,15.78472,15.78472,0,0,1,4.58839.74406,4.028,4.028,0,0,1-1.48812,3.34828Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#054752;}.cls-3{fill:#2dbeff;}.cls-4{fill:#9ef769;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M50.5482,62.90483a10.09648,10.09648,0,0,0-11.657-8.30871l1.61214-9.2636L34.588,44.27843a57.39373,57.39373,0,0,0-3.80713,11.905,10.13238,10.13238,0,0,1,2.10818,14.83168,9.63322,9.63322,0,0,0,1.52534,1.48812,9.86967,9.86967,0,0,0,7.81267,2.05858,10.07841,10.07841,0,0,0,8.30871-11.657Z"/><path class="cls-3" d="M30.68169,56.82831l.124-.62006a10.13042,10.13042,0,0,0-7.41584-1.63694L25.002,45.32012,19.0991,44.27843a55.66705,55.66705,0,0,0-3.91874,12.52508c-.81847,4.81161-.78126,9.97045,1.73615,13.604a10.08313,10.08313,0,0,0,2.009,2.10818A9.93749,9.93749,0,0,0,26.763,74.57423a10.09554,10.09554,0,0,0,6.12612-3.5343l-.47124-.62c-2.52981-3.62112-2.567-8.78-1.73615-13.57917Z"/><path class="cls-4" d="M35.08407,62.90483a10.17941,10.17941,0,0,0-4.29076-6.69658l-.124.62006c-.80606,4.81161-.76886,9.97045,1.761,13.604l.45883.62a10.19257,10.19257,0,0,0,2.18259-8.1847Z"/><path class="cls-2" d="M169.59843,72.55286h-3.52191a.24759.24759,0,0,0-.248.16121,7.01907,7.01907,0,0,1-2.18259,3.17468,6.34021,6.34021,0,0,1-3.93113,1.1905,6.43828,6.43828,0,0,1-5.33245-2.65383,11.13989,11.13989,0,0,1-1.93457-6.647,10.95044,10.95044,0,0,1,1.93457-6.647,6.47719,6.47719,0,0,1,5.33245-2.64143,6.2133,6.2133,0,0,1,3.90634,1.1905A7.2073,7.2073,0,0,1,165.8037,62.818a.25746.25746,0,0,0,.248.17361H169.586a.21832.21832,0,0,0,.16122-.0744.20809.20809,0,0,0,.0744-.17362v-.062a10.03023,10.03023,0,0,0-3.42269-5.70449,10.489,10.489,0,0,0-6.72139-2.15779,10.7838,10.7838,0,0,0-8.12269,3.59631,13.85069,13.85069,0,0,0-3.28629,9.4,13.82781,13.82781,0,0,0,3.28629,9.4A10.70465,10.70465,0,0,0,159.69,80.812a10.545,10.545,0,0,0,6.75858-2.14538,9.92832,9.92832,0,0,0,3.4103-5.7665v-.062a.27339.27339,0,0,0-.07441-.186.22487.22487,0,0,0-.17362-.062Zm30.91586-10.4417a5.38777,5.38777,0,0,0-1.07889-.09921,8.38178,8.38178,0,0,0-1.53773.14882,5.46227,5.46227,0,0,0-1.52534.57044,6.48422,6.48422,0,0,0-1.43852,1.0913,5.49933,5.49933,0,0,0-.71927.90528l-.16122.248V62.57a.27165.27165,0,0,0-.248-.27282h-3.37308a.27165.27165,0,0,0-.248.27282V80.17951a.26672.26672,0,0,0,.248.248h3.39789a.27165.27165,0,0,0,.27282-.248V71.62278a8.7445,8.7445,0,0,1,.33482-2.52982,3.94241,3.94241,0,0,1,.99209-1.66174,4.49984,4.49984,0,0,1,1.56253-.95488,6.36982,6.36982,0,0,1,2.10818-.32243,8.20808,8.20808,0,0,1,1.27731.09921h.03721a.23432.23432,0,0,0,.248-.248V62.384a.21954.21954,0,0,0-.186-.27282ZM127.4348,54.79453h-.062l-3.41029.59525a.28913.28913,0,0,0-.248.248v24.5293a.27809.27809,0,0,0,.28522.27283h3.43509a.27165.27165,0,0,0,.248-.27283V55.06736a.27809.27809,0,0,0-.28523-.27283Zm-7.0314,14.55885a7.9223,7.9223,0,0,0-2.04618-2.60422l-.248-.186a6.38048,6.38048,0,0,0-1.2153-.74407l-.124-.062.08681-.08681a6.40257,6.40257,0,0,0,1.55013-4.142,6.80726,6.80726,0,0,0-.57045-2.72823,6.41616,6.41616,0,0,0-1.57493-2.20739,6.83761,6.83761,0,0,0-2.20739-1.33932,8.85505,8.85505,0,0,0-3.13747-.496h-7.515a.2781.2781,0,0,0-.27283.28522V80.15471a.27525.27525,0,0,0,.27283.27282h9.276a10.61184,10.61184,0,0,0,3.32348-.44643,7.65771,7.65771,0,0,0,2.3562-1.30212,8.12356,8.12356,0,0,0,2.04618-2.60422c.124-.248.21082-.45884.29763-.68206l.0372-.09921.062-.17361a7.84216,7.84216,0,0,0,.39684-2.41821,7.68179,7.68179,0,0,0-.80607-3.37309ZM107.13426,58.56446h3.14987a7.66577,7.66577,0,0,1,2.23219.248,2.84473,2.84473,0,0,1,1.1161.74406,3.0471,3.0471,0,0,1,.80607,2.10818,2.9205,2.9205,0,0,1-.80607,2.08338,2.6737,2.6737,0,0,1-1.1161.74407,6.33407,6.33407,0,0,1-1.48812.248h-3.93114V58.56446Zm9.67283,15.57574a4.08418,4.08418,0,0,1-.81847,1.28971,4.3996,4.3996,0,0,1-1.45092.91767,7.89853,7.89853,0,0,1-2.57942.33484h-4.83642v-8.1475h4.83642a7.81441,7.81441,0,0,1,2.567.33482,4.21706,4.21706,0,0,1,1.42612.91768,4.56288,4.56288,0,0,1,.83087,1.26491,3.6881,3.6881,0,0,1,.31,1.52533,3.86352,3.86352,0,0,1-.31,1.56254Zm27.03433-10.36729a7.694,7.694,0,0,0-5.38207-1.79816,7.82222,7.82222,0,0,0-4.96042,1.48813,6.57984,6.57984,0,0,0-2.3562,3.16227.23831.23831,0,0,0,.186.31l3.19948.558a.21008.21008,0,0,0,.248-.124,3.66565,3.66565,0,0,1,3.69551-2.15778,3.80152,3.80152,0,0,1,2.85225,1.01689,3.71173,3.71173,0,0,1,.99208,2.72823v.64486a16.84223,16.84223,0,0,0-4.762-.74407,8.45394,8.45394,0,0,0-5.27045,1.58734,5.35873,5.35873,0,0,0-2.10818,4.48918A5.27785,5.27785,0,0,0,132.11,79.24943a7.0769,7.0769,0,0,0,4.6256,1.56254,7.62438,7.62438,0,0,0,5.60528-2.05858v1.38892a.315.315,0,0,0,.31.31h2.95146a.29377.29377,0,0,0,.29762-.29763V68.70853a6.40037,6.40037,0,0,0-2.04617-4.93563ZM140.84036,76.174a5.45021,5.45021,0,0,1-3.63351,1.24011,3.71342,3.71342,0,0,1-2.43061-.71926,2.43147,2.43147,0,0,1-.83087-1.93457,2.24937,2.24937,0,0,1,1.06649-2.009,4.99394,4.99394,0,0,1,2.72823-.68206,16.04837,16.04837,0,0,1,4.58841.74406,4.028,4.028,0,0,1-1.48813,3.34829ZM81.42685,54.79453h-.0496l-3.4227.59525a.28913.28913,0,0,0-.248.248v24.5293a.27809.27809,0,0,0,.28523.27283h3.43509a.27165.27165,0,0,0,.248-.27283V55.06736a.27525.27525,0,0,0-.27282-.27283Zm-7.0686,14.55885a7.85163,7.85163,0,0,0-2.02138-2.60422l-.248-.186a6.38094,6.38094,0,0,0-1.2153-.74406l-.124-.062.08681-.0868a6.40257,6.40257,0,0,0,1.55013-4.142,6.79674,6.79674,0,0,0-.55805-2.72823,6.41616,6.41616,0,0,0-1.57493-2.20739,6.99369,6.99369,0,0,0-2.18259-1.33932,8.85505,8.85505,0,0,0-3.13747-.496H57.4308a.27809.27809,0,0,0-.27283.28522V80.15471a.27525.27525,0,0,0,.27283.27282h9.23879a10.6118,10.6118,0,0,0,3.32348-.44643,7.65783,7.65783,0,0,0,2.3562-1.30212,8.1237,8.1237,0,0,0,2.04618-2.60422c.124-.248.21082-.45884.29762-.68206l.0372-.09921a.45985.45985,0,0,1,.04961-.17361,7.84245,7.84245,0,0,0,.39683-2.41821,7.68179,7.68179,0,0,0-.80607-3.37309ZM61.08911,58.56446h3.17467a7.66547,7.66547,0,0,1,2.23219.248,2.84459,2.84459,0,0,1,1.1161.74406,3.0471,3.0471,0,0,1,.80607,2.10818,2.9205,2.9205,0,0,1-.80607,2.08338,2.67383,2.67383,0,0,1-1.1161.74407,6.33469,6.33469,0,0,1-1.48813.248H61.08911Zm9.71,15.57573a4.60764,4.60764,0,0,1-.83087,1.28971,4.39994,4.39994,0,0,1-1.45093.91768,7.89857,7.89857,0,0,1-2.57942.33483H61.1015v-8.1475h4.83642a7.79382,7.79382,0,0,1,2.57942.33483,4.095,4.095,0,0,1,1.45093.91768,4.5631,4.5631,0,0,1,.83087,1.26491,3.68807,3.68807,0,0,1,.31,1.52533,4.0912,4.0912,0,0,1-.32243,1.56253ZM97.83346,63.7729A7.74768,7.74768,0,0,0,92.439,61.97475a7.87061,7.87061,0,0,0-4.96043,1.48813,6.65849,6.65849,0,0,0-2.3562,3.16227.25413.25413,0,0,0,.19841.31l3.18708.558a.25973.25973,0,0,0,.28522-.124,3.62753,3.62753,0,0,1,3.68312-2.15778,3.79873,3.79873,0,0,1,2.82744,1.01688,3.72647,3.72647,0,0,1,1.01689,2.72824v.64485a17.14094,17.14094,0,0,0-4.78681-.74406,8.45388,8.45388,0,0,0-5.27045,1.58734,5.84479,5.84479,0,0,0-.21082,8.80475A7.07688,7.07688,0,0,0,90.678,80.812a7.65409,7.65409,0,0,0,5.61769-2.05857v1.38892a.29455.29455,0,0,0,.28522.31h2.95146a.2968.2968,0,0,0,.31-.29762V68.70853a6.392,6.392,0,0,0-2.03377-4.93563ZM94.8076,76.174a5.53956,5.53956,0,0,1-3.65832,1.2401,3.71337,3.71337,0,0,1-2.4306-.71926,2.38429,2.38429,0,0,1-.86808-1.93456,2.23414,2.23414,0,0,1,1.0789-2.009,5.02341,5.02341,0,0,1,2.72823-.68205,15.91563,15.91563,0,0,1,4.5884.74406,3.94327,3.94327,0,0,1-1.46333,3.34828ZM185.40978,63.7729a7.74766,7.74766,0,0,0-5.39446-1.79815,7.91944,7.91944,0,0,0-4.96043,1.48813,6.73916,6.73916,0,0,0-2.3562,3.16227.27225.27225,0,0,0,.21081.31l3.19949.558a.21008.21008,0,0,0,.248-.124,3.66566,3.66566,0,0,1,3.69552-2.15778,3.85883,3.85883,0,0,1,2.85225,1.01688,3.76279,3.76279,0,0,1,.99208,2.72824v.64485a16.99125,16.99125,0,0,0-4.77441-.74406,8.45388,8.45388,0,0,0-5.27045,1.58734,5.32625,5.32625,0,0,0-2.10818,4.48918,5.26853,5.26853,0,0,0,1.92216,4.31557,7.07691,7.07691,0,0,0,4.6256,1.56253,7.68389,7.68389,0,0,0,5.63009-2.05857v1.38892a.29681.29681,0,0,0,.29763.31h2.95146a.29377.29377,0,0,0,.29763-.29762V68.70853a6.48672,6.48672,0,0,0-2.04618-4.93563ZM182.37152,76.174a5.41713,5.41713,0,0,1-3.6211,1.2401,3.71342,3.71342,0,0,1-2.43061-.71926,2.43144,2.43144,0,0,1-.83086-1.93456,2.24939,2.24939,0,0,1,1.06649-2.009,5.02336,5.02336,0,0,1,2.72823-.68205,15.78472,15.78472,0,0,1,4.58839.74406,4.028,4.028,0,0,1-1.48812,3.34828Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/blackrock/blackrock_featured.svg b/content/en/case-studies/blackrock/blackrock_featured.svg
index d70c169bc8..f98ea323d7 100644
--- a/content/en/case-studies/blackrock/blackrock_featured.svg
+++ b/content/en/case-studies/blackrock/blackrock_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.00001" y="-3.45836" width="223.25536" height="134.51136"/><g id="layer1"><path id="path14" d="M52.57518,56.39988v16.0054h8.94419l-1.2105,3.09349H48.6747V56.39991h3.90048"/><path id="path16" d="M127.89467,65.07506c2.48824-.94148,5.38-3.09349,5.38-6.65769,0-4.43848-3.83322-6.65769-9.28044-6.65769h-7.12845V75.49877h4.23673V65.74759h2.48823l6.59044,9.75118h4.77473l-7.0612-10.42368Zm-4.70747-2.35373h-2.08473V54.58412h2.62273c3.42972,0,5.31272,1.076,5.31272,4.035,0,3.16072-2.28649,4.10223-5.85071,4.10223"/><path id="path18" d="M68.98407,56.39988l.60525,1.47949L62.19187,75.49874h3.63148l1.614-3.90048h8.40619l1.68124,3.90048h4.304L73.3553,56.39988H68.98407Zm-.33625,12.30668,2.89174-7.06121,2.959,7.06121H68.64783"/><path id="path28" d="M41.27726,62.78859a5.40414,5.40414,0,0,0,4.10222-5.24547c0-5.78347-6.99395-5.78347-9.21318-5.78347H28.7016V75.49874h7.12845c4.16947,0,10.89442-1.00874,10.89442-6.85945C46.72447,65.41131,44.77423,63.32659,41.27726,62.78859Zm-5.649-8.13721c3.16072,0,5.31271.33625,5.31271,3.16073,0,3.83322-3.90047,3.63146-5.78345,3.63146h-2.152V54.58412l2.62273.06726Zm.06724,17.75387-2.69-.06726V64.537h2.48823c3.766,0,6.7922.538,6.7922,3.90048,0,3.29522-2.48823,3.96772-6.59046,3.96772"/><path id="path30" d="M98.84287,56.39988h3.96772V75.49874H98.84287Zm12.23941,0-8.06994,9.14595,8.13719,9.95294h4.50571L107.4508,65.34408l7.59921-8.9442h-3.96773"/><path id="path40" d="M80.95449,65.34405c0,6.25421,3.90048,10.49094,9.21318,10.49094a10.18329,10.18329,0,0,0,6.38871-1.95023l-.94149-1.883A9.90036,9.90036,0,0,1,91.17642,73.145c-3.42973,0-5.918-2.48823-5.918-7.66644,0-4.16946,1.54675-6.65769,4.50572-6.65769,1.614,0,2.959.538,3.497,2.152l3.42972-.87425c-.33625-1.345-2.152-3.96771-7.12845-3.96771-4.573,0-8.60794,3.09349-8.60794,9.21318"/><path id="path50" d="M171.67412,56.39988h3.90048V75.49874h-3.90048Zm12.23941,0-8.13721,9.14595,8.13721,9.95294h4.64021L180.282,65.34408l7.5992-8.9442h-3.96771"/><path id="path52" d="M153.71849,65.34405c0,6.25421,3.83322,10.49094,9.07869,10.49094a10.11878,10.11878,0,0,0,6.456-1.95023l-.94148-1.883A9.953,9.953,0,0,1,163.806,73.145c-3.42973,0-5.8507-2.48823-5.8507-7.66644,0-4.16946,1.54674-6.65769,4.573-6.65769a3.35862,3.35862,0,0,1,3.497,2.152l3.36248-.87425c-.33625-1.345-2.08475-3.96771-7.0612-3.96771-4.64021,0-8.60795,3.09349-8.60795,9.21318"/><path id="path54" d="M143.16032,56.13087c-5.17821,0-8.94419,3.09349-8.94419,9.81844s3.56423,9.88568,8.94419,9.88568,8.9442-3.16072,8.9442-9.88568S148.33853,56.13087,143.16032,56.13087Zm0,17.01414c-3.96771,0-4.90922-3.228-4.90922-7.1957,0-3.90048.94148-7.26295,4.90922-7.26295s4.90922,3.36247,4.90922,7.26295c0,3.96772-.94148,7.1957-4.90922,7.1957"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.00001" y="-3.45836" width="223.25536" height="134.51136"/><g id="layer1"><path id="path14" d="M52.57518,56.39988v16.0054h8.94419l-1.2105,3.09349H48.6747V56.39991h3.90048"/><path id="path16" d="M127.89467,65.07506c2.48824-.94148,5.38-3.09349,5.38-6.65769,0-4.43848-3.83322-6.65769-9.28044-6.65769h-7.12845V75.49877h4.23673V65.74759h2.48823l6.59044,9.75118h4.77473l-7.0612-10.42368Zm-4.70747-2.35373h-2.08473V54.58412h2.62273c3.42972,0,5.31272,1.076,5.31272,4.035,0,3.16072-2.28649,4.10223-5.85071,4.10223"/><path id="path18" d="M68.98407,56.39988l.60525,1.47949L62.19187,75.49874h3.63148l1.614-3.90048h8.40619l1.68124,3.90048h4.304L73.3553,56.39988H68.98407Zm-.33625,12.30668,2.89174-7.06121,2.959,7.06121H68.64783"/><path id="path28" d="M41.27726,62.78859a5.40414,5.40414,0,0,0,4.10222-5.24547c0-5.78347-6.99395-5.78347-9.21318-5.78347H28.7016V75.49874h7.12845c4.16947,0,10.89442-1.00874,10.89442-6.85945C46.72447,65.41131,44.77423,63.32659,41.27726,62.78859Zm-5.649-8.13721c3.16072,0,5.31271.33625,5.31271,3.16073,0,3.83322-3.90047,3.63146-5.78345,3.63146h-2.152V54.58412l2.62273.06726Zm.06724,17.75387-2.69-.06726V64.537h2.48823c3.766,0,6.7922.538,6.7922,3.90048,0,3.29522-2.48823,3.96772-6.59046,3.96772"/><path id="path30" d="M98.84287,56.39988h3.96772V75.49874H98.84287Zm12.23941,0-8.06994,9.14595,8.13719,9.95294h4.50571L107.4508,65.34408l7.59921-8.9442h-3.96773"/><path id="path40" d="M80.95449,65.34405c0,6.25421,3.90048,10.49094,9.21318,10.49094a10.18329,10.18329,0,0,0,6.38871-1.95023l-.94149-1.883A9.90036,9.90036,0,0,1,91.17642,73.145c-3.42973,0-5.918-2.48823-5.918-7.66644,0-4.16946,1.54675-6.65769,4.50572-6.65769,1.614,0,2.959.538,3.497,2.152l3.42972-.87425c-.33625-1.345-2.152-3.96771-7.12845-3.96771-4.573,0-8.60794,3.09349-8.60794,9.21318"/><path id="path50" d="M171.67412,56.39988h3.90048V75.49874h-3.90048Zm12.23941,0-8.13721,9.14595,8.13721,9.95294h4.64021L180.282,65.34408l7.5992-8.9442h-3.96771"/><path id="path52" d="M153.71849,65.34405c0,6.25421,3.83322,10.49094,9.07869,10.49094a10.11878,10.11878,0,0,0,6.456-1.95023l-.94148-1.883A9.953,9.953,0,0,1,163.806,73.145c-3.42973,0-5.8507-2.48823-5.8507-7.66644,0-4.16946,1.54674-6.65769,4.573-6.65769a3.35862,3.35862,0,0,1,3.497,2.152l3.36248-.87425c-.33625-1.345-2.08475-3.96771-7.0612-3.96771-4.64021,0-8.60795,3.09349-8.60795,9.21318"/><path id="path54" d="M143.16032,56.13087c-5.17821,0-8.94419,3.09349-8.94419,9.81844s3.56423,9.88568,8.94419,9.88568,8.9442-3.16072,8.9442-9.88568S148.33853,56.13087,143.16032,56.13087Zm0,17.01414c-3.96771,0-4.90922-3.228-4.90922-7.1957,0-3.90048.94148-7.26295,4.90922-7.26295s4.90922,3.36247,4.90922,7.26295c0,3.96772-.94148,7.1957-4.90922,7.1957"/></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/booking-com/booking.com_featured_logo.svg b/content/en/case-studies/booking-com/booking.com_featured_logo.svg
index 298c77c773..0b245c2700 100644
--- a/content/en/case-studies/booking-com/booking.com_featured_logo.svg
+++ b/content/en/case-studies/booking-com/booking.com_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#01adee;}.cls-3{fill:#1f3e79;}</style></defs><title>booking.com_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.21858" width="223.25536" height="134.51135"/><path class="cls-2" d="M127.77738,74.4058a10.7609,10.7609,0,0,1,3.68118-2.87628,9.23363,9.23363,0,0,1,8.78854.39836,7.15709,7.15709,0,0,1,2.38378,2.61946c.34616.56737.34324.55711.75843.07174a10.51431,10.51431,0,0,1,11.19732-3.60461c3.03777.73869,4.70183,2.88042,5.4235,5.83718a16.54378,16.54378,0,0,1,.44132,3.88865c.01522,5.44857-.00045,10.89725.01789,16.3458.00167.49834-.14164.59658-.61525.57295a33.70923,33.70923,0,0,1-3.80223-.08626,3.0809,3.0809,0,0,1-2.96457-3.44718c-.02364-3.86934-.00511-7.73892-.0081-11.6084a14.17722,14.17722,0,0,0-.19326-2.75762c-.37433-1.89368-1.61029-2.55555-3.50163-2.25654a5.64551,5.64551,0,0,0-4.2141,3.50195,10.11617,10.11617,0,0,0-1.003,4.463c-.0041,3.85062-.01048,7.70126.0099,11.55179.00261.49376-.10141.66411-.62871.65623-2.07887-.031-4.15866-.02716-6.23767-.00117-.44407.00555-.53331-.12471-.532-.546.01519-4.89025.00966-9.78054.00976-14.67083a10.67307,10.67307,0,0,0-.18762-2.23745,3.236,3.236,0,0,0-5.101-2.27318,7.23361,7.23361,0,0,0-3.14723,4.45758,15.60462,15.60462,0,0,0-.57311,4.61952q-.01713,5.05387.00676,10.1078c.00235.42763-.09823.54752-.53605.5422q-3.08965-.03767-6.17994.00056c-.4514.00586-.53449-.13848-.53393-.55372q.01705-12.64926-.00159-25.29853c-.00078-.47441.1186-.637.60512-.61125,1.17016.062,2.34394-.07935,3.5156.09919a3.13012,3.13012,0,0,1,2.912,2.46C127.61072,73.95258,127.68426,74.12724,127.77738,74.4058Z"/><path class="cls-3" d="M37.48154,46.19185c.28333.16511.47969.28349.67964.39546,3.45942,1.93722,4.83641,5.03874,4.623,8.82672-.28648,5.08551-3.456,8.5543-8.53612,9.66008a18.29386,18.29386,0,0,1-3.949.41709q-6.15137-.014-12.30274.006c-.43736.00169-.57954-.08954-.57889-.56067q.02227-16.086.01287-32.172a3.77063,3.77063,0,0,1,3.75784-3.73481c3.15751-.00435,6.31583-.045,9.47232.01186A11.70967,11.70967,0,0,1,38.4075,31.7a8.64228,8.64228,0,0,1,2.97605,7.36671A9.01256,9.01256,0,0,1,37.48154,46.19185ZM24.53945,55.227c0,1.13514.01792,2.2707-.00914,3.40519-.01029.43143.08248.592.55826.58482,1.94318-.02918,3.887-.01386,5.83066-.011a4.787,4.787,0,0,0,1.42092-.19879c1.971-.60332,3.06606-2.192,3.15764-4.58844a4.477,4.477,0,0,0-3.437-4.76347,19.68847,19.68847,0,0,0-5.80263-.13816,1.80613,1.80613,0,0,0-1.66118,1.79241A27.47114,27.47114,0,0,0,24.53945,55.227Zm0-15.05421c0,1.09987.029,2.04346-.01211,2.984-.02085.47686.15089.56213.58144.55552,1.55684-.02388,3.116-.05549,4.67109.00143a4.01674,4.01674,0,0,0,4.36157-3.74652,3.98538,3.98538,0,0,0-3.76532-4.8284A32.75577,32.75577,0,0,0,26.573,35.1377a1.91629,1.91629,0,0,0-1.98817,1.97059A18.4794,18.4794,0,0,0,24.53945,40.1728Z"/><path class="cls-3" d="M189.36223,63.12754c-4.46864,3.49221-13.69049,2.73324-16.97189-4.98065a15.92141,15.92141,0,0,1-.127-12.63122c1.87031-4.584,5.46354-6.8355,10.36906-7.02632a10.61047,10.61047,0,0,1,7.27228,2.25966c.21492.17138.32375.20091.47593-.05762a3.26326,3.26326,0,0,1,3.00192-1.60778c1.11629-.01268,2.233.00564,3.34909-.01489.2918-.00536.38172.093.35484.36025-.00959.09531-.00137.19241-.00137.28869q0,11.785-.00522,23.57a12.52785,12.52785,0,0,1-1.85268,6.92379,11.86528,11.86528,0,0,1-7.21819,5.01878,19.73,19.73,0,0,1-14.32566-1.6353c-.293-.14553-.43054-.26731-.26835-.64917.51745-1.21821.91224-2.48724,1.50593-3.67525a2.06076,2.06076,0,0,1,2.69032-1.23324,25.86826,25.86826,0,0,0,3.92017.91709,9.90338,9.90338,0,0,0,4.88041-.51538A4.89745,4.89745,0,0,0,189.36223,63.12754ZM189.534,51.152c-.01861-.30678-.02095-.61554-.05834-.92-.38675-3.149-1.82389-4.69227-4.624-4.97411-2.19636-.22106-4.18325.46238-5.09184,2.4511a8.44255,8.44255,0,0,0,.57819,8.701,4.74613,4.74613,0,0,0,4.76733,1.946A4.45745,4.45745,0,0,0,188.96,55.39473,10.06388,10.06388,0,0,0,189.534,51.152Z"/><path class="cls-3" d="M129.47525,39.13475c-.99878,1.49173-1.92454,2.88-2.85612,4.26443q-2.06079,3.06246-4.12758,6.12091a13.38005,13.38005,0,0,1-1.17312,1.49668c-.11625.12865-.28744.22754-.08277.46461a26.0382,26.0382,0,0,1,2.85293,4.923c1.598,2.96015,3.40825,5.79362,5.125,8.68289.09612.16176.19036.32466.33008.56318-1.90942,0-3.74455.00344-5.57964-.00226-.49989-.00155-1.00142-.00969-1.4992-.051a3.7165,3.7165,0,0,1-3.14926-2.029q-2.14173-3.98157-4.27032-7.97022a2.0729,2.0729,0,0,0-2.323-.93359c-.28556.08756-.17346.31218-.174.4781-.00759,2.48369-.00363,4.9674-.00614,7.45111-.00089.88536-.02682,1.771-.01041,2.65591.0061.32971-.09566.41634-.41911.4145-2.2911-.01306-4.58249-.02219-6.87334.005-.50107.006-.44033-.26271-.44026-.57531q.00329-14.9889.00181-29.97779c0-1.8676-.0028-3.73521.00406-5.60278.00074-.19953-.12094-.49036.282-.48654,1.53985.01458,3.08647-.06743,4.618.0503a2.8182,2.8182,0,0,1,2.8102,3.05025c.04554,1.59665.02766,3.19528.02667,4.793-.00217,3.50384-.004,7.00772-.02712,10.51145-.00285.43366.08062.63477.55615.57265.34138-.0446.6931-.00353,1.03775-.03123a1.87533,1.87533,0,0,0,1.51625-.91013c1.58549-2.47609,3.19742-4.93525,4.77972-7.41336a1.00053,1.00053,0,0,1,.972-.52616c2.48348.024,4.96731.01138,7.451.01138Z"/><path class="cls-3" d="M150.96748,42.08974a10.19024,10.19024,0,0,1,5.60221-3.28927,11.754,11.754,0,0,1,6.97095.53773c2.86307,1.19173,4.23263,3.531,4.793,6.45868a20.06551,20.06551,0,0,1,.22672,3.73848q.02235,7.42167.0148,14.84338c-.00044.39765.24063.89262-.03753,1.16852-.26788.26571-.76828.07656-1.16534.0884a23.74287,23.74287,0,0,1-3.46-.07489,3.15682,3.15682,0,0,1-2.96861-3.00281,12.47859,12.47859,0,0,1-.06517-1.26728q-.00726-5.71885-.00518-11.43773a7.9267,7.9267,0,0,0-.141-1.6638,2.72292,2.72292,0,0,0-2.9991-2.50249,6.29519,6.29519,0,0,0-6.26032,5.03661,9.72642,9.72642,0,0,0-.29628,2.3973c.00361,3.98585-.00817,7.97176.01409,11.95748.00278.49618-.14252.59577-.61022.59033-2.19483-.02551-4.3902-.02127-6.58515-.00214-.39116.0034-.51594-.07742-.51529-.4961q.02005-12.76635.01589-25.53271c.00016-.18956-.15052-.501.26111-.50251,1.05618-.00391,2.11306-.041,3.16834-.01364C148.89167,39.17216,150.49845,39.77566,150.96748,42.08974Z"/><path class="cls-3" d="M58.72153,38.60667c4.36138.08424,8.15613,1.47245,10.95457,4.96547a13.67511,13.67511,0,0,1,2.91063,9.76768A13.13665,13.13665,0,0,1,61.40211,65.81656a14.363,14.363,0,0,1-10.80676-2.15148,12.83589,12.83589,0,0,1-5.7207-10.36384c-.46694-7.45962,4.21606-13.6857,11.9403-14.58289A17.35191,17.35191,0,0,1,58.72153,38.60667ZM58.767,59.56276a5.907,5.907,0,0,0,5.41026-3.28243,8.38183,8.38183,0,0,0,.09509-7.66666,5.79684,5.79684,0,0,0-5.35185-3.49128,5.70853,5.70853,0,0,0-5.61412,3.23609,8.26179,8.26179,0,0,0-.13652,7.6681A5.956,5.956,0,0,0,58.767,59.56276Z"/><path class="cls-3" d="M74.44514,52.83345a13.947,13.947,0,0,1,2.87332-9.18339,12.971,12.971,0,0,1,9.07826-4.91834A14.41,14.41,0,0,1,96.5673,41.04809a12.69109,12.69109,0,0,1,5.439,8.69715,14.24172,14.24172,0,0,1-1.46513,9.44823,12.78866,12.78866,0,0,1-9.55609,6.62137,14.19413,14.19413,0,0,1-11.63967-2.77862,12.887,12.887,0,0,1-4.71868-8.3301c-.05094-.303-.08728-.60911-.11547-.91515C74.47777,53.42729,74.46042,53.06212,74.44514,52.83345Zm20.28779-.4646a8.7726,8.7726,0,0,0-.67052-3.41542,5.92642,5.92642,0,0,0-5.3718-3.82843,5.74969,5.74969,0,0,0-5.83613,3.351,8.24457,8.24457,0,0,0,.124,7.92152,6.15989,6.15989,0,0,0,9.91549,1.195A7.65565,7.65565,0,0,0,94.73293,52.36885Z"/><path class="cls-2" d="M117.97294,84.225c.0009,7.67808-5.28,13.316-12.80686,13.80242a14.1081,14.1081,0,0,1-10.36233-3.201,12.72657,12.72657,0,0,1-4.39914-7.94978,14.20636,14.20636,0,0,1,1.69548-9.796,12.55048,12.55048,0,0,1,8.24773-6.00937,14.72042,14.72042,0,0,1,11.44707,1.66063,12.83961,12.83961,0,0,1,6.0402,9.503A11.95515,11.95515,0,0,1,117.97294,84.225ZM97.69346,83.9863A8.764,8.764,0,0,0,98.20411,87.33a5.98,5.98,0,0,0,5.1079,4.18274,5.73868,5.73868,0,0,0,6.02911-2.88852,8.16484,8.16484,0,0,0-.12606-8.71394,6.12621,6.12621,0,0,0-8.80271-1.60614A7.13425,7.13425,0,0,0,97.69346,83.9863Z"/><path class="cls-2" d="M85.82208,80.33152c-.53888.00008-1.07854-.01831-1.61653.00381A2.34479,2.34479,0,0,1,81.73974,78.709a2.45192,2.45192,0,0,0-2.187-1.60365,6.77653,6.77653,0,0,0-7.931,5.63735A7.51883,7.51883,0,0,0,72.8532,88.894a7.25481,7.25481,0,0,0,7.08949,2.70508,10.52041,10.52041,0,0,0,6.15124-3.26553c.31435-.31186.456-.38837.71839.06749.86294,1.49926,1.767,2.97522,2.67731,4.44651a.51152.51152,0,0,1-.08526.74135A15.68016,15.68016,0,0,1,70.52,96.193a12.65446,12.65446,0,0,1-6.23878-9.24976,13.68473,13.68473,0,0,1,2.92407-11.41334,13.52842,13.52842,0,0,1,8.4-4.64534A14.94034,14.94034,0,0,1,84.733,72.00076,5.50225,5.50225,0,0,1,88.10838,75.835a15.23875,15.23875,0,0,1,.10378,3.33841c-.00708,1.14874-.00167,1.14971-1.12,1.15757C86.66883,80.33394,86.24544,80.33145,85.82208,80.33152Z"/><path class="cls-3" d="M131.56972,52.37616c0-4.21481.00756-8.42966-.01056-12.64438-.002-.47043.10856-.62763.59776-.60758a24.27674,24.27674,0,0,1,4.42719.17955,3.16386,3.16386,0,0,1,2.62451,3.19223c.02069,7.58354.01714,15.16716.0321,22.75072.00065.32718-.09316.41907-.41836.41719-2.252-.01306-4.50421-.02091-6.756.00474-.461.00525-.42675-.22947-.42635-.53294q.00591-4.533.00241-9.06592V52.37619Z"/><path class="cls-2" d="M54.05716,93.46868a4.44619,4.44619,0,0,1,4.45521-4.42294,4.47318,4.47318,0,1,1-4.45521,4.42294Z"/><path class="cls-3" d="M135.064,27.82742a4.46313,4.46313,0,1,1-4.39666,4.56246A4.48079,4.48079,0,0,1,135.064,27.82742Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#01adee;}.cls-3{fill:#1f3e79;}</style></defs><title>booking.com_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.21858" width="223.25536" height="134.51135"/><path class="cls-2" d="M127.77738,74.4058a10.7609,10.7609,0,0,1,3.68118-2.87628,9.23363,9.23363,0,0,1,8.78854.39836,7.15709,7.15709,0,0,1,2.38378,2.61946c.34616.56737.34324.55711.75843.07174a10.51431,10.51431,0,0,1,11.19732-3.60461c3.03777.73869,4.70183,2.88042,5.4235,5.83718a16.54378,16.54378,0,0,1,.44132,3.88865c.01522,5.44857-.00045,10.89725.01789,16.3458.00167.49834-.14164.59658-.61525.57295a33.70923,33.70923,0,0,1-3.80223-.08626,3.0809,3.0809,0,0,1-2.96457-3.44718c-.02364-3.86934-.00511-7.73892-.0081-11.6084a14.17722,14.17722,0,0,0-.19326-2.75762c-.37433-1.89368-1.61029-2.55555-3.50163-2.25654a5.64551,5.64551,0,0,0-4.2141,3.50195,10.11617,10.11617,0,0,0-1.003,4.463c-.0041,3.85062-.01048,7.70126.0099,11.55179.00261.49376-.10141.66411-.62871.65623-2.07887-.031-4.15866-.02716-6.23767-.00117-.44407.00555-.53331-.12471-.532-.546.01519-4.89025.00966-9.78054.00976-14.67083a10.67307,10.67307,0,0,0-.18762-2.23745,3.236,3.236,0,0,0-5.101-2.27318,7.23361,7.23361,0,0,0-3.14723,4.45758,15.60462,15.60462,0,0,0-.57311,4.61952q-.01713,5.05387.00676,10.1078c.00235.42763-.09823.54752-.53605.5422q-3.08965-.03767-6.17994.00056c-.4514.00586-.53449-.13848-.53393-.55372q.01705-12.64926-.00159-25.29853c-.00078-.47441.1186-.637.60512-.61125,1.17016.062,2.34394-.07935,3.5156.09919a3.13012,3.13012,0,0,1,2.912,2.46C127.61072,73.95258,127.68426,74.12724,127.77738,74.4058Z"/><path class="cls-3" d="M37.48154,46.19185c.28333.16511.47969.28349.67964.39546,3.45942,1.93722,4.83641,5.03874,4.623,8.82672-.28648,5.08551-3.456,8.5543-8.53612,9.66008a18.29386,18.29386,0,0,1-3.949.41709q-6.15137-.014-12.30274.006c-.43736.00169-.57954-.08954-.57889-.56067q.02227-16.086.01287-32.172a3.77063,3.77063,0,0,1,3.75784-3.73481c3.15751-.00435,6.31583-.045,9.47232.01186A11.70967,11.70967,0,0,1,38.4075,31.7a8.64228,8.64228,0,0,1,2.97605,7.36671A9.01256,9.01256,0,0,1,37.48154,46.19185ZM24.53945,55.227c0,1.13514.01792,2.2707-.00914,3.40519-.01029.43143.08248.592.55826.58482,1.94318-.02918,3.887-.01386,5.83066-.011a4.787,4.787,0,0,0,1.42092-.19879c1.971-.60332,3.06606-2.192,3.15764-4.58844a4.477,4.477,0,0,0-3.437-4.76347,19.68847,19.68847,0,0,0-5.80263-.13816,1.80613,1.80613,0,0,0-1.66118,1.79241A27.47114,27.47114,0,0,0,24.53945,55.227Zm0-15.05421c0,1.09987.029,2.04346-.01211,2.984-.02085.47686.15089.56213.58144.55552,1.55684-.02388,3.116-.05549,4.67109.00143a4.01674,4.01674,0,0,0,4.36157-3.74652,3.98538,3.98538,0,0,0-3.76532-4.8284A32.75577,32.75577,0,0,0,26.573,35.1377a1.91629,1.91629,0,0,0-1.98817,1.97059A18.4794,18.4794,0,0,0,24.53945,40.1728Z"/><path class="cls-3" d="M189.36223,63.12754c-4.46864,3.49221-13.69049,2.73324-16.97189-4.98065a15.92141,15.92141,0,0,1-.127-12.63122c1.87031-4.584,5.46354-6.8355,10.36906-7.02632a10.61047,10.61047,0,0,1,7.27228,2.25966c.21492.17138.32375.20091.47593-.05762a3.26326,3.26326,0,0,1,3.00192-1.60778c1.11629-.01268,2.233.00564,3.34909-.01489.2918-.00536.38172.093.35484.36025-.00959.09531-.00137.19241-.00137.28869q0,11.785-.00522,23.57a12.52785,12.52785,0,0,1-1.85268,6.92379,11.86528,11.86528,0,0,1-7.21819,5.01878,19.73,19.73,0,0,1-14.32566-1.6353c-.293-.14553-.43054-.26731-.26835-.64917.51745-1.21821.91224-2.48724,1.50593-3.67525a2.06076,2.06076,0,0,1,2.69032-1.23324,25.86826,25.86826,0,0,0,3.92017.91709,9.90338,9.90338,0,0,0,4.88041-.51538A4.89745,4.89745,0,0,0,189.36223,63.12754ZM189.534,51.152c-.01861-.30678-.02095-.61554-.05834-.92-.38675-3.149-1.82389-4.69227-4.624-4.97411-2.19636-.22106-4.18325.46238-5.09184,2.4511a8.44255,8.44255,0,0,0,.57819,8.701,4.74613,4.74613,0,0,0,4.76733,1.946A4.45745,4.45745,0,0,0,188.96,55.39473,10.06388,10.06388,0,0,0,189.534,51.152Z"/><path class="cls-3" d="M129.47525,39.13475c-.99878,1.49173-1.92454,2.88-2.85612,4.26443q-2.06079,3.06246-4.12758,6.12091a13.38005,13.38005,0,0,1-1.17312,1.49668c-.11625.12865-.28744.22754-.08277.46461a26.0382,26.0382,0,0,1,2.85293,4.923c1.598,2.96015,3.40825,5.79362,5.125,8.68289.09612.16176.19036.32466.33008.56318-1.90942,0-3.74455.00344-5.57964-.00226-.49989-.00155-1.00142-.00969-1.4992-.051a3.7165,3.7165,0,0,1-3.14926-2.029q-2.14173-3.98157-4.27032-7.97022a2.0729,2.0729,0,0,0-2.323-.93359c-.28556.08756-.17346.31218-.174.4781-.00759,2.48369-.00363,4.9674-.00614,7.45111-.00089.88536-.02682,1.771-.01041,2.65591.0061.32971-.09566.41634-.41911.4145-2.2911-.01306-4.58249-.02219-6.87334.005-.50107.006-.44033-.26271-.44026-.57531q.00329-14.9889.00181-29.97779c0-1.8676-.0028-3.73521.00406-5.60278.00074-.19953-.12094-.49036.282-.48654,1.53985.01458,3.08647-.06743,4.618.0503a2.8182,2.8182,0,0,1,2.8102,3.05025c.04554,1.59665.02766,3.19528.02667,4.793-.00217,3.50384-.004,7.00772-.02712,10.51145-.00285.43366.08062.63477.55615.57265.34138-.0446.6931-.00353,1.03775-.03123a1.87533,1.87533,0,0,0,1.51625-.91013c1.58549-2.47609,3.19742-4.93525,4.77972-7.41336a1.00053,1.00053,0,0,1,.972-.52616c2.48348.024,4.96731.01138,7.451.01138Z"/><path class="cls-3" d="M150.96748,42.08974a10.19024,10.19024,0,0,1,5.60221-3.28927,11.754,11.754,0,0,1,6.97095.53773c2.86307,1.19173,4.23263,3.531,4.793,6.45868a20.06551,20.06551,0,0,1,.22672,3.73848q.02235,7.42167.0148,14.84338c-.00044.39765.24063.89262-.03753,1.16852-.26788.26571-.76828.07656-1.16534.0884a23.74287,23.74287,0,0,1-3.46-.07489,3.15682,3.15682,0,0,1-2.96861-3.00281,12.47859,12.47859,0,0,1-.06517-1.26728q-.00726-5.71885-.00518-11.43773a7.9267,7.9267,0,0,0-.141-1.6638,2.72292,2.72292,0,0,0-2.9991-2.50249,6.29519,6.29519,0,0,0-6.26032,5.03661,9.72642,9.72642,0,0,0-.29628,2.3973c.00361,3.98585-.00817,7.97176.01409,11.95748.00278.49618-.14252.59577-.61022.59033-2.19483-.02551-4.3902-.02127-6.58515-.00214-.39116.0034-.51594-.07742-.51529-.4961q.02005-12.76635.01589-25.53271c.00016-.18956-.15052-.501.26111-.50251,1.05618-.00391,2.11306-.041,3.16834-.01364C148.89167,39.17216,150.49845,39.77566,150.96748,42.08974Z"/><path class="cls-3" d="M58.72153,38.60667c4.36138.08424,8.15613,1.47245,10.95457,4.96547a13.67511,13.67511,0,0,1,2.91063,9.76768A13.13665,13.13665,0,0,1,61.40211,65.81656a14.363,14.363,0,0,1-10.80676-2.15148,12.83589,12.83589,0,0,1-5.7207-10.36384c-.46694-7.45962,4.21606-13.6857,11.9403-14.58289A17.35191,17.35191,0,0,1,58.72153,38.60667ZM58.767,59.56276a5.907,5.907,0,0,0,5.41026-3.28243,8.38183,8.38183,0,0,0,.09509-7.66666,5.79684,5.79684,0,0,0-5.35185-3.49128,5.70853,5.70853,0,0,0-5.61412,3.23609,8.26179,8.26179,0,0,0-.13652,7.6681A5.956,5.956,0,0,0,58.767,59.56276Z"/><path class="cls-3" d="M74.44514,52.83345a13.947,13.947,0,0,1,2.87332-9.18339,12.971,12.971,0,0,1,9.07826-4.91834A14.41,14.41,0,0,1,96.5673,41.04809a12.69109,12.69109,0,0,1,5.439,8.69715,14.24172,14.24172,0,0,1-1.46513,9.44823,12.78866,12.78866,0,0,1-9.55609,6.62137,14.19413,14.19413,0,0,1-11.63967-2.77862,12.887,12.887,0,0,1-4.71868-8.3301c-.05094-.303-.08728-.60911-.11547-.91515C74.47777,53.42729,74.46042,53.06212,74.44514,52.83345Zm20.28779-.4646a8.7726,8.7726,0,0,0-.67052-3.41542,5.92642,5.92642,0,0,0-5.3718-3.82843,5.74969,5.74969,0,0,0-5.83613,3.351,8.24457,8.24457,0,0,0,.124,7.92152,6.15989,6.15989,0,0,0,9.91549,1.195A7.65565,7.65565,0,0,0,94.73293,52.36885Z"/><path class="cls-2" d="M117.97294,84.225c.0009,7.67808-5.28,13.316-12.80686,13.80242a14.1081,14.1081,0,0,1-10.36233-3.201,12.72657,12.72657,0,0,1-4.39914-7.94978,14.20636,14.20636,0,0,1,1.69548-9.796,12.55048,12.55048,0,0,1,8.24773-6.00937,14.72042,14.72042,0,0,1,11.44707,1.66063,12.83961,12.83961,0,0,1,6.0402,9.503A11.95515,11.95515,0,0,1,117.97294,84.225ZM97.69346,83.9863A8.764,8.764,0,0,0,98.20411,87.33a5.98,5.98,0,0,0,5.1079,4.18274,5.73868,5.73868,0,0,0,6.02911-2.88852,8.16484,8.16484,0,0,0-.12606-8.71394,6.12621,6.12621,0,0,0-8.80271-1.60614A7.13425,7.13425,0,0,0,97.69346,83.9863Z"/><path class="cls-2" d="M85.82208,80.33152c-.53888.00008-1.07854-.01831-1.61653.00381A2.34479,2.34479,0,0,1,81.73974,78.709a2.45192,2.45192,0,0,0-2.187-1.60365,6.77653,6.77653,0,0,0-7.931,5.63735A7.51883,7.51883,0,0,0,72.8532,88.894a7.25481,7.25481,0,0,0,7.08949,2.70508,10.52041,10.52041,0,0,0,6.15124-3.26553c.31435-.31186.456-.38837.71839.06749.86294,1.49926,1.767,2.97522,2.67731,4.44651a.51152.51152,0,0,1-.08526.74135A15.68016,15.68016,0,0,1,70.52,96.193a12.65446,12.65446,0,0,1-6.23878-9.24976,13.68473,13.68473,0,0,1,2.92407-11.41334,13.52842,13.52842,0,0,1,8.4-4.64534A14.94034,14.94034,0,0,1,84.733,72.00076,5.50225,5.50225,0,0,1,88.10838,75.835a15.23875,15.23875,0,0,1,.10378,3.33841c-.00708,1.14874-.00167,1.14971-1.12,1.15757C86.66883,80.33394,86.24544,80.33145,85.82208,80.33152Z"/><path class="cls-3" d="M131.56972,52.37616c0-4.21481.00756-8.42966-.01056-12.64438-.002-.47043.10856-.62763.59776-.60758a24.27674,24.27674,0,0,1,4.42719.17955,3.16386,3.16386,0,0,1,2.62451,3.19223c.02069,7.58354.01714,15.16716.0321,22.75072.00065.32718-.09316.41907-.41836.41719-2.252-.01306-4.50421-.02091-6.756.00474-.461.00525-.42675-.22947-.42635-.53294q.00591-4.533.00241-9.06592V52.37619Z"/><path class="cls-2" d="M54.05716,93.46868a4.44619,4.44619,0,0,1,4.45521-4.42294,4.47318,4.47318,0,1,1-4.45521,4.42294Z"/><path class="cls-3" d="M135.064,27.82742a4.46313,4.46313,0,1,1-4.39666,4.56246A4.48079,4.48079,0,0,1,135.064,27.82742Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/booz-allen/booz-allen-featured-logo.svg b/content/en/case-studies/booz-allen/booz-allen-featured-logo.svg
index b844d99846..3ce58c68f7 100644
--- a/content/en/case-studies/booz-allen/booz-allen-featured-logo.svg
+++ b/content/en/case-studies/booz-allen/booz-allen-featured-logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}</style></defs><title>booz-allen-featured</title><rect class="cls-1" x="-3.84547" y="-2.87787" width="223.25536" height="134.51136"/><path d="M17.60286,61.11939a3.71056,3.71056,0,0,1,2.5882,2.38564,3.95958,3.95958,0,0,1-3.29637,5.44135c-2.01368.1603-4.03478.03547-6.05223.06918-.3726.00623-.35776-.22838-.3574-.50139q.00463-3.55729.00171-7.11461c0-2.26124.00315-4.52249-.00367-6.7837-.00089-.29478.02147-.4768.3777-.47273,1.91453.02186,3.831-.03171,5.74353.03934a3.53381,3.53381,0,0,1,3.28526,4.48932A3.21084,3.21084,0,0,1,17.60286,61.11939ZM12.21047,64.713c0,.80868.00148,1.61736-.001,2.426-.00065.21243-.01061.40111.28252.39a33.573,33.573,0,0,0,4.08014-.09365,2.40209,2.40209,0,0,0,2.09821-2.71722,2.64506,2.64506,0,0,0-2.22908-2.728c-1.306-.16626-2.61874-.04126-3.92779-.08164-.272-.00839-.30653.14661-.30495.37847C12.21405,63.09557,12.21067,63.90428,12.21047,64.713Zm0-6.73284c0,.71584.00316,1.43172-.00188,2.14753-.00157.22336.01281.3973.29254.39063,1.2389-.02954,2.48177.08272,3.7166-.065a2.39478,2.39478,0,0,0,2.06737-2.57715A2.21907,2.21907,0,0,0,16.034,55.593c-1.1532-.03253-2.30794.00078-3.46167-.01761-.31134-.005-.37328.12989-.36667.42247C12.2206,56.65827,12.21036,57.31932,12.21046,57.98011Z"/><path d="M154.6706,59.74265c1.37924-2.56728,4.82436-2.93355,6.06119.25059a3.84871,3.84871,0,0,1,2.02583-2.03738c2.12411-.86523,4.22083.54908,4.31581,3.0281.09782,2.55289.03429,5.11273.04794,7.66949.00137.25541-.0793.34276-.3245.36322-1.26334.10546-1.26277.11319-1.26277-1.238q0-2.84219-.00237-5.68436c-.00071-.29326-.02335-.5875-.05221-.87945a2.115,2.115,0,0,0-1.44315-2.01169,2.04056,2.04056,0,0,0-2.2275.79595,3.10653,3.10653,0,0,0-.81563,2.08975c-.01624,2.11528-.02781,4.23083-.01083,6.346.00371.46151-.12175.59533-.55082.58729-1.07861-.0202-1.07895.00091-1.07895-1.17234q0-2.89737-.00044-5.79475a5.31558,5.31558,0,0,0-.12169-1.31313,1.93733,1.93733,0,0,0-2.85957-1.35535,3.20386,3.20386,0,0,0-1.54573,3.078c-.00284,1.96837-.01431,3.93692.0086,5.905.00566.48739-.099.67315-.59355.6552-1.01618-.03688-1.01716-.00658-1.01716-1.11514,0-3.10891.01-6.2179-.01058-9.32665-.00316-.47557.09593-.63624.56356-.61685.89339.03707.89451.00654.89452.96919Z"/><path d="M129.93171,61.50767c0-2.28134.01-4.56276-.009-6.84392-.00347-.41681.108-.52751.49405-.52369,1.20218.0119,1.20229-.00573,1.20234,1.25222.00006,1.527.00668,3.0541-.00473,4.581-.00255.34169.07321.48228.43217.47849q2.77062-.02925,5.54164-.00065c.36465.00357.47028-.11645.46674-.49847-.016-1.72923.00635-3.45891-.01568-5.188-.00583-.45664.07292-.64484.5577-.62831,1.10164.03758,1.10256.00746,1.10256,1.19632,0,4.34189-.00948,8.68384.01187,13.02561.00266.54229-.14358.68377-.63722.66589-1.02516-.03714-1.02607-.00857-1.02609-1.121,0-1.83978-.01189-3.67972.00876-5.51924.00473-.4209-.1193-.52288-.4998-.51862-1.81253.02033-3.62558.0245-5.438-.00221-.42945-.00633-.51086.15432-.50742.56655.01662,1.98681-.00449,3.974.01629,5.96072.00479.45883-.078.6476-.56064.63462-1.135-.03053-1.13561-.00244-1.13561-1.22525Q129.93169,64.65371,129.93171,61.50767Z"/><path d="M74.37542,54.15021c.96477,0,.96761-.001,1.2732.99819q2.042,6.67683,4.089,13.35191c.13548.43878.04225.523-.36392.52037-1.18658-.00765-1.1837.00741-1.576-1.21225-.29049-.90319-.6017-1.799-.87884-2.70675-.09293-.30438-.20724-.44481-.537-.44-1.44987.02131-2.90027.0187-4.35023.00152-.30161-.00357-.42264.11541-.50287.40713-.30528,1.11-.65843,2.20589-.93594,3.32333-.11823.4761-.29983.6496-.76808.63014-.91775-.03814-.91461-.00787-.62423-.96279q1.96777-6.47122,3.93109-12.944C73.425,54.15069,73.42354,54.15021,74.37542,54.15021Zm-.02624,2.256-.12747-.00461q-.99335,3.25788-1.98766,6.51542c-.07695.25168.01574.32514.24428.32406q1.78366-.00841,3.56737.00072c.2494.00139.33311-.05017.24354-.34537C75.63373,60.73607,74.99394,58.57029,74.34918,56.40622Z"/><path d="M148.95068,67.04177a3.64,3.64,0,0,1-2.45008,2.05867,4.62158,4.62158,0,0,1-2.3537-.0662,3.06343,3.06343,0,0,1-2.219-2.61922,3.42817,3.42817,0,0,1,1.66077-3.50157,7.34762,7.34762,0,0,1,3.51845-.73754q.75028-.0199,1.50137.00064c.2692.00721.34583-.10459.35655-.38761.06434-1.70254-.5904-2.526-2.1811-2.72006a3.778,3.778,0,0,0-1.73427.20632,2.12664,2.12664,0,0,0-1.22235,1.12283c-.09578.19522-.031.5717-.30705.56256a5.67052,5.67052,0,0,1-1.26648-.23626c-.15314-.04125-.04917-.22552-.0257-.34073a2.74933,2.74933,0,0,1,1.35681-1.9204,5.80644,5.80644,0,0,1,5.05923-.40091,2.95825,2.95825,0,0,1,1.78043,2.8573c.11562,1.67047.02783,3.34558.0479,5.01852a16.23229,16.23229,0,0,0,.14519,2.69276c.016.08894.04175.24471.00839.2644-.39845.23509-.83414.07757-1.25373.10854-.27844.02056-.27113-.21786-.28857-.42021C149.04434,68.12666,149.00488,67.66974,148.95068,67.04177Zm-3.32268.83158c2.00992.04292,3.46567-1.79659,3.33068-4.159-.0162-.28367-.19332-.2561-.36425-.25666-.50016-.00164-1.0022-.02883-1.50007.00739a5.35674,5.35674,0,0,0-2.55023.593,2.18276,2.18276,0,0,0-.95346,2.36383,1.72455,1.72455,0,0,0,1.53889,1.4038A4.93707,4.93707,0,0,0,145.628,67.87335Z"/><path d="M95.41414,63.64065c-1.105.00011-2.21028.01766-3.31467-.00908-.40483-.0098-.50056.12506-.45258.53959a7.52275,7.52275,0,0,0,.22166,1.40766,3.02635,3.02635,0,0,0,2.69582,2.21456,2.69971,2.69971,0,0,0,2.81507-1.72449c.16563-.36737.3664-.35095.65473-.29806,1.15775.21235,1.19445.27248.51565,1.31464a4.4702,4.4702,0,0,1-4.55359,2.08673,4.13343,4.13343,0,0,1-3.52824-2.77,7.17965,7.17965,0,0,1,.277-6.31307A4.24142,4.24142,0,0,1,95.20221,57.736a4.19193,4.19193,0,0,1,3.68561,3.2938,9.92154,9.92154,0,0,1,.344,2.1688c.02748.32747-.07158.45435-.39934.44907C97.69328,63.62928,96.55364,63.64054,95.41414,63.64065Zm-.80764-1.28487c.844,0,1.68827-.0107,2.532.00577.29785.00582.39228-.09453.36047-.413a3.24272,3.24272,0,0,0-1-2.22222,2.50936,2.50936,0,0,0-2.90289-.4394,3.34343,3.34343,0,0,0-1.838,2.7381c-.04507.30236.09251.3349.31624.33323C92.91838,62.352,93.76245,62.35577,94.6065,62.35578Z"/><path d="M185.219,63.50033a6.58346,6.58346,0,0,1,.763-3.44154,4.24956,4.24956,0,0,1,4.21063-2.34018,4.09652,4.09652,0,0,1,3.72025,2.78938,7.50378,7.50378,0,0,1,.1069,5.57983,4.46166,4.46166,0,0,1-4.7928,3.1057c-1.79284-.11517-3.23682-1.52025-3.77371-3.68082A7.00273,7.00273,0,0,1,185.219,63.50033Zm1.72563-.11651a7.85628,7.85628,0,0,0,.39318,2.56713,2.59208,2.59208,0,0,0,2.33435,1.878A2.39885,2.39885,0,0,0,192.1798,66.25a7.00084,7.00084,0,0,0-.02331-5.65336,2.41374,2.41374,0,0,0-2.34665-1.512,2.49885,2.49885,0,0,0-2.3274,1.54724A6.5726,6.5726,0,0,0,186.94461,63.38382Z"/><path d="M31.23452,63.39354a6.83045,6.83045,0,0,1-1.05161,3.83931,4.30281,4.30281,0,0,1-4.45146,1.92846,4.01152,4.01152,0,0,1-3.26924-2.85762,7.73529,7.73529,0,0,1-.0881-5.43538,4.40108,4.40108,0,0,1,8.501.18648A8.165,8.165,0,0,1,31.23452,63.39354Zm-1.75541.01335A7.51417,7.51417,0,0,0,29.11078,61,2.74961,2.74961,0,0,0,26.578,59.07665a2.61427,2.61427,0,0,0-2.502,1.94471,7.71831,7.71831,0,0,0,.04191,4.96805,2.56556,2.56556,0,0,0,4.82511.27475A6.55872,6.55872,0,0,0,29.47911,63.40689Z"/><path d="M37.5312,69.2124a4.17473,4.17473,0,0,1-4.2753-2.92585,7.85155,7.85155,0,0,1-.18412-5.12628,4.49506,4.49506,0,0,1,4.41748-3.45912,4.33854,4.33854,0,0,1,4.20258,3.42332,7.40136,7.40136,0,0,1-.2937,5.36561A4.23246,4.23246,0,0,1,37.5312,69.2124Zm-3.01943-5.47565a7.01226,7.01226,0,0,0,.36316,2.14845A2.57447,2.57447,0,0,0,37.2152,67.826a2.44,2.44,0,0,0,2.56393-1.66047,7.0418,7.0418,0,0,0-.00928-5.45467,2.45331,2.45331,0,0,0-2.48921-1.6246,2.54742,2.54742,0,0,0-2.34638,1.776A7.36849,7.36849,0,0,0,34.51177,63.73675Z"/><path d="M198.07687,59.65646a3.85241,3.85241,0,0,1,3.01387-1.941,3.30148,3.30148,0,0,1,3.59395,3.31887c.16429,2.53293.0523,5.07382.06874,7.61117.00091.13935.02674.33521-.1668.34348a8.13477,8.13477,0,0,1-1.29081-.00717c-.26666-.0313-.15057-.33026-.15127-.50745-.00843-2.11521-.00547-4.23047-.00549-6.34571,0-.12875.00078-.25751-.00018-.38626-.01024-1.36511-.39047-2.06054-1.3244-2.423a2.53511,2.53511,0,0,0-2.79791.90734,3.93625,3.93625,0,0,0-.8299,2.4397q-.03818,2.89626-.0145,5.79322c.00344.43391-.11267.5665-.52125.56194-1.10753-.01237-1.1077.00664-1.1077-1.1961,0-3.09009.00894-6.18025-.00962-9.27022-.00276-.46146.12154-.59661.55055-.587.99216.02223.99262,0,.99273,1.08306Q198.07689,59.35393,198.07687,59.65646Z"/><path d="M102.99354,59.62359a4.17158,4.17158,0,0,1,2.52185-1.83122,3.32055,3.32055,0,0,1,4.09176,3.26177c.125,2.0386.02554,4.08218.04925,6.12337q.00607.52424,0,1.0486c-.00878.88025.08642.7787-.75913.78457-.84148.00584-.84152.00164-.84153-.90235,0-2.11562-.00465-4.23127.002-6.34687a2.27047,2.27047,0,0,0-1.20875-2.39621,2.45044,2.45044,0,0,0-2.7907.733,4.27473,4.27473,0,0,0-.97585,2.99467c-.0073,1.78445-.01808,3.56923.00875,5.35325.007.46817-.12255.5864-.54831.57653-1.06329-.02465-1.06375-.00245-1.06375-1.13459,0-3.09065.00979-6.18137-.00987-9.27188-.00315-.49569.11193-.66929.59832-.64986.9249.03693.926.00675.926.99622Q102.99357,59.29309,102.99354,59.62359Z"/><path d="M45.06857,67.65528c1.68608,0,3.34155.02957,4.99518-.01629.56661-.01572.54618.27794.5528.69931.00692.44022-.01935.69727-.56227.68835-2.19034-.036-4.38158-.02425-6.57231-.00611-.38114.00316-.48955-.10182-.49955-.51946a2.46472,2.46472,0,0,1,.44471-1.52186c1.57519-2.34525,3.11862-4.71472,4.67248-7.07623.097-.14741.18744-.29971.28194-.45134-.14119-.16648-.30536-.09316-.44671-.09385-1.3628-.00671-2.72573-.01358-4.08838.00293-.32219.00391-.45589-.06749-.44149-.44784.04224-1.11511-.14257-.92386.87041-.93071q2.79453-.01889,5.58922.00353c.23881.00165.59753-.16146.69762.14264a1.24957,1.24957,0,0,1-.12793,1.10378c-.69761,1.04909-1.37755,2.11152-2.06395,3.16907q-1.559,2.4019-3.11592,4.80531A.68626.68626,0,0,0,45.06857,67.65528Z"/><path d="M60.91717,62.44406c0,3.6048-.00785,7.20964.00971,10.81434.00225.46285-.0759.64926-.55614.62318-.915-.04969-.77762.05448-.77805-.82966q-.00518-10.704.00344-21.40807c.00019-.219-.13026-.57417.11861-.63547a2.6989,2.6989,0,0,1,1.12418.00676c.15751.03.07474.32916.075.50419Q60.92044,56.98169,60.91717,62.44406Z"/><path d="M120.06987,62.3898c0,3.62318-.00794,7.24641.00982,10.8695.00227.46453-.07852.648-.55712.6222-.914-.04932-.77678.05429-.7772-.83051q-.0052-10.704.00348-21.40807c.0002-.21876-.13074-.57363.11937-.63485a2.70229,2.70229,0,0,1,1.124.00777c.15676.03.07417.32931.07437.50441Q120.07314,56.955,120.06987,62.3898Z"/><path d="M179.95051,62.94509c0-1.08548-.01181-2.17118.00693-3.25629.00592-.3425-.09452-.45636-.412-.4334-.36086.0261-.7252-.00677-1.08709.00955-.26636.012-.3514-.09081-.36166-.3791-.03493-.98252-.04635-.98206.82862-.98212,1.02529-.00007,1.02529-.00007,1.02529-1.09071v-.44155c0-1.32559.0002-1.31449,1.25388-1.34085.28845-.00606.35345.10228.34959.37449-.00965.68056.01227,1.36188-.00778,2.04191-.01066.36146.10507.48334.44552.464.49923-.02842,1.00149.008,1.5014-.01261.3001-.01238.3848.1108.3783.41658-.02495,1.17241.10931.91081-.8597.94783-.46271.01767-1.06472-.20712-1.35163.08766-.31638.32508-.10143.97917-.10239,1.48783-.00347,1.82071-.01169,3.64241.04,5.46186.03106,1.09339.53556,1.53955,1.56076,1.53785.13749-.00023.27489-.0263.41242-.02746.2684-.00226.63152-.21092.78152.01876.188.288.05279.71071.0587,1.07513.003.18461-.14084.19086-.25473.20228a6.56583,6.56583,0,0,1-2.2641-.00324,2.43637,2.43637,0,0,1-1.84153-2.19238,3.64888,3.64888,0,0,1-.08182-.59972c-.00791-1.122-.00382-2.24415-.00382-3.36625Z"/><path d="M81.48535,61.50453c.00009-2.27942.00917-4.55893-.00828-6.8382-.00314-.41063.10386-.53142.49284-.52639,1.09893.01421,1.09915-.00505,1.09915,1.19182,0,4.35664-.00717,8.71332.01014,13.06989.00191.4791-.10682.63577-.57091.62208-1.02231-.03014-1.023-.00364-1.023-1.067Q81.48525,64.73066,81.48535,61.50453Z"/><path d="M86.21467,61.50734c0-2.27943.00922-4.55894-.00851-6.83821-.00317-.40723.09389-.53478.48777-.52954,1.10428.0147,1.10451-.00525,1.10451,1.18936q0,6.47984-.00018,12.95965c-.00006.72173-.001.72173-.66178.72323-.92182.00211-.92182.00211-.92183-.9971Q86.21464,64.761,86.21467,61.50734Z"/><path d="M174.85767,61.5636c0-2.29864.009-4.59737-.0085-6.89586-.00308-.40361.087-.53476.48351-.52849,1.09256.01728,1.09285-.00359,1.09285,1.13356,0,4.37662-.00674,8.75328.0098,13.12983.00177.46606-.08172.63921-.55785.62239-1.0189-.036-1.01983-.006-1.01983-1.11715Q174.85765,64.73574,174.85767,61.5636Z"/><path d="M171.60667,63.48963c-.00007,1.65349-.01071,3.30711.0074,4.96038.00453.41335-.08384.579-.51.57288-1.08089-.0156-1.08117.007-1.08117-1.16786,0-3.08652.00908-6.17311-.00965-9.2595-.00285-.46786.08915-.64385.56359-.62937,1.02907.0314,1.02986.00332,1.02988,1.11415Q171.60679,61.285,171.60667,63.48963Z"/><path d="M169.91931,55.0938c0-.94361,0-.94361.90522-.94359.85243,0,.85243,0,.85243.93851,0,.97111,0,.97111-.92511.97107C169.91931,56.05976,169.91931,56.05976,169.91931,55.0938Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}</style></defs><title>booz-allen-featured</title><rect class="cls-1" x="-3.84547" y="-2.87787" width="223.25536" height="134.51136"/><path d="M17.60286,61.11939a3.71056,3.71056,0,0,1,2.5882,2.38564,3.95958,3.95958,0,0,1-3.29637,5.44135c-2.01368.1603-4.03478.03547-6.05223.06918-.3726.00623-.35776-.22838-.3574-.50139q.00463-3.55729.00171-7.11461c0-2.26124.00315-4.52249-.00367-6.7837-.00089-.29478.02147-.4768.3777-.47273,1.91453.02186,3.831-.03171,5.74353.03934a3.53381,3.53381,0,0,1,3.28526,4.48932A3.21084,3.21084,0,0,1,17.60286,61.11939ZM12.21047,64.713c0,.80868.00148,1.61736-.001,2.426-.00065.21243-.01061.40111.28252.39a33.573,33.573,0,0,0,4.08014-.09365,2.40209,2.40209,0,0,0,2.09821-2.71722,2.64506,2.64506,0,0,0-2.22908-2.728c-1.306-.16626-2.61874-.04126-3.92779-.08164-.272-.00839-.30653.14661-.30495.37847C12.21405,63.09557,12.21067,63.90428,12.21047,64.713Zm0-6.73284c0,.71584.00316,1.43172-.00188,2.14753-.00157.22336.01281.3973.29254.39063,1.2389-.02954,2.48177.08272,3.7166-.065a2.39478,2.39478,0,0,0,2.06737-2.57715A2.21907,2.21907,0,0,0,16.034,55.593c-1.1532-.03253-2.30794.00078-3.46167-.01761-.31134-.005-.37328.12989-.36667.42247C12.2206,56.65827,12.21036,57.31932,12.21046,57.98011Z"/><path d="M154.6706,59.74265c1.37924-2.56728,4.82436-2.93355,6.06119.25059a3.84871,3.84871,0,0,1,2.02583-2.03738c2.12411-.86523,4.22083.54908,4.31581,3.0281.09782,2.55289.03429,5.11273.04794,7.66949.00137.25541-.0793.34276-.3245.36322-1.26334.10546-1.26277.11319-1.26277-1.238q0-2.84219-.00237-5.68436c-.00071-.29326-.02335-.5875-.05221-.87945a2.115,2.115,0,0,0-1.44315-2.01169,2.04056,2.04056,0,0,0-2.2275.79595,3.10653,3.10653,0,0,0-.81563,2.08975c-.01624,2.11528-.02781,4.23083-.01083,6.346.00371.46151-.12175.59533-.55082.58729-1.07861-.0202-1.07895.00091-1.07895-1.17234q0-2.89737-.00044-5.79475a5.31558,5.31558,0,0,0-.12169-1.31313,1.93733,1.93733,0,0,0-2.85957-1.35535,3.20386,3.20386,0,0,0-1.54573,3.078c-.00284,1.96837-.01431,3.93692.0086,5.905.00566.48739-.099.67315-.59355.6552-1.01618-.03688-1.01716-.00658-1.01716-1.11514,0-3.10891.01-6.2179-.01058-9.32665-.00316-.47557.09593-.63624.56356-.61685.89339.03707.89451.00654.89452.96919Z"/><path d="M129.93171,61.50767c0-2.28134.01-4.56276-.009-6.84392-.00347-.41681.108-.52751.49405-.52369,1.20218.0119,1.20229-.00573,1.20234,1.25222.00006,1.527.00668,3.0541-.00473,4.581-.00255.34169.07321.48228.43217.47849q2.77062-.02925,5.54164-.00065c.36465.00357.47028-.11645.46674-.49847-.016-1.72923.00635-3.45891-.01568-5.188-.00583-.45664.07292-.64484.5577-.62831,1.10164.03758,1.10256.00746,1.10256,1.19632,0,4.34189-.00948,8.68384.01187,13.02561.00266.54229-.14358.68377-.63722.66589-1.02516-.03714-1.02607-.00857-1.02609-1.121,0-1.83978-.01189-3.67972.00876-5.51924.00473-.4209-.1193-.52288-.4998-.51862-1.81253.02033-3.62558.0245-5.438-.00221-.42945-.00633-.51086.15432-.50742.56655.01662,1.98681-.00449,3.974.01629,5.96072.00479.45883-.078.6476-.56064.63462-1.135-.03053-1.13561-.00244-1.13561-1.22525Q129.93169,64.65371,129.93171,61.50767Z"/><path d="M74.37542,54.15021c.96477,0,.96761-.001,1.2732.99819q2.042,6.67683,4.089,13.35191c.13548.43878.04225.523-.36392.52037-1.18658-.00765-1.1837.00741-1.576-1.21225-.29049-.90319-.6017-1.799-.87884-2.70675-.09293-.30438-.20724-.44481-.537-.44-1.44987.02131-2.90027.0187-4.35023.00152-.30161-.00357-.42264.11541-.50287.40713-.30528,1.11-.65843,2.20589-.93594,3.32333-.11823.4761-.29983.6496-.76808.63014-.91775-.03814-.91461-.00787-.62423-.96279q1.96777-6.47122,3.93109-12.944C73.425,54.15069,73.42354,54.15021,74.37542,54.15021Zm-.02624,2.256-.12747-.00461q-.99335,3.25788-1.98766,6.51542c-.07695.25168.01574.32514.24428.32406q1.78366-.00841,3.56737.00072c.2494.00139.33311-.05017.24354-.34537C75.63373,60.73607,74.99394,58.57029,74.34918,56.40622Z"/><path d="M148.95068,67.04177a3.64,3.64,0,0,1-2.45008,2.05867,4.62158,4.62158,0,0,1-2.3537-.0662,3.06343,3.06343,0,0,1-2.219-2.61922,3.42817,3.42817,0,0,1,1.66077-3.50157,7.34762,7.34762,0,0,1,3.51845-.73754q.75028-.0199,1.50137.00064c.2692.00721.34583-.10459.35655-.38761.06434-1.70254-.5904-2.526-2.1811-2.72006a3.778,3.778,0,0,0-1.73427.20632,2.12664,2.12664,0,0,0-1.22235,1.12283c-.09578.19522-.031.5717-.30705.56256a5.67052,5.67052,0,0,1-1.26648-.23626c-.15314-.04125-.04917-.22552-.0257-.34073a2.74933,2.74933,0,0,1,1.35681-1.9204,5.80644,5.80644,0,0,1,5.05923-.40091,2.95825,2.95825,0,0,1,1.78043,2.8573c.11562,1.67047.02783,3.34558.0479,5.01852a16.23229,16.23229,0,0,0,.14519,2.69276c.016.08894.04175.24471.00839.2644-.39845.23509-.83414.07757-1.25373.10854-.27844.02056-.27113-.21786-.28857-.42021C149.04434,68.12666,149.00488,67.66974,148.95068,67.04177Zm-3.32268.83158c2.00992.04292,3.46567-1.79659,3.33068-4.159-.0162-.28367-.19332-.2561-.36425-.25666-.50016-.00164-1.0022-.02883-1.50007.00739a5.35674,5.35674,0,0,0-2.55023.593,2.18276,2.18276,0,0,0-.95346,2.36383,1.72455,1.72455,0,0,0,1.53889,1.4038A4.93707,4.93707,0,0,0,145.628,67.87335Z"/><path d="M95.41414,63.64065c-1.105.00011-2.21028.01766-3.31467-.00908-.40483-.0098-.50056.12506-.45258.53959a7.52275,7.52275,0,0,0,.22166,1.40766,3.02635,3.02635,0,0,0,2.69582,2.21456,2.69971,2.69971,0,0,0,2.81507-1.72449c.16563-.36737.3664-.35095.65473-.29806,1.15775.21235,1.19445.27248.51565,1.31464a4.4702,4.4702,0,0,1-4.55359,2.08673,4.13343,4.13343,0,0,1-3.52824-2.77,7.17965,7.17965,0,0,1,.277-6.31307A4.24142,4.24142,0,0,1,95.20221,57.736a4.19193,4.19193,0,0,1,3.68561,3.2938,9.92154,9.92154,0,0,1,.344,2.1688c.02748.32747-.07158.45435-.39934.44907C97.69328,63.62928,96.55364,63.64054,95.41414,63.64065Zm-.80764-1.28487c.844,0,1.68827-.0107,2.532.00577.29785.00582.39228-.09453.36047-.413a3.24272,3.24272,0,0,0-1-2.22222,2.50936,2.50936,0,0,0-2.90289-.4394,3.34343,3.34343,0,0,0-1.838,2.7381c-.04507.30236.09251.3349.31624.33323C92.91838,62.352,93.76245,62.35577,94.6065,62.35578Z"/><path d="M185.219,63.50033a6.58346,6.58346,0,0,1,.763-3.44154,4.24956,4.24956,0,0,1,4.21063-2.34018,4.09652,4.09652,0,0,1,3.72025,2.78938,7.50378,7.50378,0,0,1,.1069,5.57983,4.46166,4.46166,0,0,1-4.7928,3.1057c-1.79284-.11517-3.23682-1.52025-3.77371-3.68082A7.00273,7.00273,0,0,1,185.219,63.50033Zm1.72563-.11651a7.85628,7.85628,0,0,0,.39318,2.56713,2.59208,2.59208,0,0,0,2.33435,1.878A2.39885,2.39885,0,0,0,192.1798,66.25a7.00084,7.00084,0,0,0-.02331-5.65336,2.41374,2.41374,0,0,0-2.34665-1.512,2.49885,2.49885,0,0,0-2.3274,1.54724A6.5726,6.5726,0,0,0,186.94461,63.38382Z"/><path d="M31.23452,63.39354a6.83045,6.83045,0,0,1-1.05161,3.83931,4.30281,4.30281,0,0,1-4.45146,1.92846,4.01152,4.01152,0,0,1-3.26924-2.85762,7.73529,7.73529,0,0,1-.0881-5.43538,4.40108,4.40108,0,0,1,8.501.18648A8.165,8.165,0,0,1,31.23452,63.39354Zm-1.75541.01335A7.51417,7.51417,0,0,0,29.11078,61,2.74961,2.74961,0,0,0,26.578,59.07665a2.61427,2.61427,0,0,0-2.502,1.94471,7.71831,7.71831,0,0,0,.04191,4.96805,2.56556,2.56556,0,0,0,4.82511.27475A6.55872,6.55872,0,0,0,29.47911,63.40689Z"/><path d="M37.5312,69.2124a4.17473,4.17473,0,0,1-4.2753-2.92585,7.85155,7.85155,0,0,1-.18412-5.12628,4.49506,4.49506,0,0,1,4.41748-3.45912,4.33854,4.33854,0,0,1,4.20258,3.42332,7.40136,7.40136,0,0,1-.2937,5.36561A4.23246,4.23246,0,0,1,37.5312,69.2124Zm-3.01943-5.47565a7.01226,7.01226,0,0,0,.36316,2.14845A2.57447,2.57447,0,0,0,37.2152,67.826a2.44,2.44,0,0,0,2.56393-1.66047,7.0418,7.0418,0,0,0-.00928-5.45467,2.45331,2.45331,0,0,0-2.48921-1.6246,2.54742,2.54742,0,0,0-2.34638,1.776A7.36849,7.36849,0,0,0,34.51177,63.73675Z"/><path d="M198.07687,59.65646a3.85241,3.85241,0,0,1,3.01387-1.941,3.30148,3.30148,0,0,1,3.59395,3.31887c.16429,2.53293.0523,5.07382.06874,7.61117.00091.13935.02674.33521-.1668.34348a8.13477,8.13477,0,0,1-1.29081-.00717c-.26666-.0313-.15057-.33026-.15127-.50745-.00843-2.11521-.00547-4.23047-.00549-6.34571,0-.12875.00078-.25751-.00018-.38626-.01024-1.36511-.39047-2.06054-1.3244-2.423a2.53511,2.53511,0,0,0-2.79791.90734,3.93625,3.93625,0,0,0-.8299,2.4397q-.03818,2.89626-.0145,5.79322c.00344.43391-.11267.5665-.52125.56194-1.10753-.01237-1.1077.00664-1.1077-1.1961,0-3.09009.00894-6.18025-.00962-9.27022-.00276-.46146.12154-.59661.55055-.587.99216.02223.99262,0,.99273,1.08306Q198.07689,59.35393,198.07687,59.65646Z"/><path d="M102.99354,59.62359a4.17158,4.17158,0,0,1,2.52185-1.83122,3.32055,3.32055,0,0,1,4.09176,3.26177c.125,2.0386.02554,4.08218.04925,6.12337q.00607.52424,0,1.0486c-.00878.88025.08642.7787-.75913.78457-.84148.00584-.84152.00164-.84153-.90235,0-2.11562-.00465-4.23127.002-6.34687a2.27047,2.27047,0,0,0-1.20875-2.39621,2.45044,2.45044,0,0,0-2.7907.733,4.27473,4.27473,0,0,0-.97585,2.99467c-.0073,1.78445-.01808,3.56923.00875,5.35325.007.46817-.12255.5864-.54831.57653-1.06329-.02465-1.06375-.00245-1.06375-1.13459,0-3.09065.00979-6.18137-.00987-9.27188-.00315-.49569.11193-.66929.59832-.64986.9249.03693.926.00675.926.99622Q102.99357,59.29309,102.99354,59.62359Z"/><path d="M45.06857,67.65528c1.68608,0,3.34155.02957,4.99518-.01629.56661-.01572.54618.27794.5528.69931.00692.44022-.01935.69727-.56227.68835-2.19034-.036-4.38158-.02425-6.57231-.00611-.38114.00316-.48955-.10182-.49955-.51946a2.46472,2.46472,0,0,1,.44471-1.52186c1.57519-2.34525,3.11862-4.71472,4.67248-7.07623.097-.14741.18744-.29971.28194-.45134-.14119-.16648-.30536-.09316-.44671-.09385-1.3628-.00671-2.72573-.01358-4.08838.00293-.32219.00391-.45589-.06749-.44149-.44784.04224-1.11511-.14257-.92386.87041-.93071q2.79453-.01889,5.58922.00353c.23881.00165.59753-.16146.69762.14264a1.24957,1.24957,0,0,1-.12793,1.10378c-.69761,1.04909-1.37755,2.11152-2.06395,3.16907q-1.559,2.4019-3.11592,4.80531A.68626.68626,0,0,0,45.06857,67.65528Z"/><path d="M60.91717,62.44406c0,3.6048-.00785,7.20964.00971,10.81434.00225.46285-.0759.64926-.55614.62318-.915-.04969-.77762.05448-.77805-.82966q-.00518-10.704.00344-21.40807c.00019-.219-.13026-.57417.11861-.63547a2.6989,2.6989,0,0,1,1.12418.00676c.15751.03.07474.32916.075.50419Q60.92044,56.98169,60.91717,62.44406Z"/><path d="M120.06987,62.3898c0,3.62318-.00794,7.24641.00982,10.8695.00227.46453-.07852.648-.55712.6222-.914-.04932-.77678.05429-.7772-.83051q-.0052-10.704.00348-21.40807c.0002-.21876-.13074-.57363.11937-.63485a2.70229,2.70229,0,0,1,1.124.00777c.15676.03.07417.32931.07437.50441Q120.07314,56.955,120.06987,62.3898Z"/><path d="M179.95051,62.94509c0-1.08548-.01181-2.17118.00693-3.25629.00592-.3425-.09452-.45636-.412-.4334-.36086.0261-.7252-.00677-1.08709.00955-.26636.012-.3514-.09081-.36166-.3791-.03493-.98252-.04635-.98206.82862-.98212,1.02529-.00007,1.02529-.00007,1.02529-1.09071v-.44155c0-1.32559.0002-1.31449,1.25388-1.34085.28845-.00606.35345.10228.34959.37449-.00965.68056.01227,1.36188-.00778,2.04191-.01066.36146.10507.48334.44552.464.49923-.02842,1.00149.008,1.5014-.01261.3001-.01238.3848.1108.3783.41658-.02495,1.17241.10931.91081-.8597.94783-.46271.01767-1.06472-.20712-1.35163.08766-.31638.32508-.10143.97917-.10239,1.48783-.00347,1.82071-.01169,3.64241.04,5.46186.03106,1.09339.53556,1.53955,1.56076,1.53785.13749-.00023.27489-.0263.41242-.02746.2684-.00226.63152-.21092.78152.01876.188.288.05279.71071.0587,1.07513.003.18461-.14084.19086-.25473.20228a6.56583,6.56583,0,0,1-2.2641-.00324,2.43637,2.43637,0,0,1-1.84153-2.19238,3.64888,3.64888,0,0,1-.08182-.59972c-.00791-1.122-.00382-2.24415-.00382-3.36625Z"/><path d="M81.48535,61.50453c.00009-2.27942.00917-4.55893-.00828-6.8382-.00314-.41063.10386-.53142.49284-.52639,1.09893.01421,1.09915-.00505,1.09915,1.19182,0,4.35664-.00717,8.71332.01014,13.06989.00191.4791-.10682.63577-.57091.62208-1.02231-.03014-1.023-.00364-1.023-1.067Q81.48525,64.73066,81.48535,61.50453Z"/><path d="M86.21467,61.50734c0-2.27943.00922-4.55894-.00851-6.83821-.00317-.40723.09389-.53478.48777-.52954,1.10428.0147,1.10451-.00525,1.10451,1.18936q0,6.47984-.00018,12.95965c-.00006.72173-.001.72173-.66178.72323-.92182.00211-.92182.00211-.92183-.9971Q86.21464,64.761,86.21467,61.50734Z"/><path d="M174.85767,61.5636c0-2.29864.009-4.59737-.0085-6.89586-.00308-.40361.087-.53476.48351-.52849,1.09256.01728,1.09285-.00359,1.09285,1.13356,0,4.37662-.00674,8.75328.0098,13.12983.00177.46606-.08172.63921-.55785.62239-1.0189-.036-1.01983-.006-1.01983-1.11715Q174.85765,64.73574,174.85767,61.5636Z"/><path d="M171.60667,63.48963c-.00007,1.65349-.01071,3.30711.0074,4.96038.00453.41335-.08384.579-.51.57288-1.08089-.0156-1.08117.007-1.08117-1.16786,0-3.08652.00908-6.17311-.00965-9.2595-.00285-.46786.08915-.64385.56359-.62937,1.02907.0314,1.02986.00332,1.02988,1.11415Q171.60679,61.285,171.60667,63.48963Z"/><path d="M169.91931,55.0938c0-.94361,0-.94361.90522-.94359.85243,0,.85243,0,.85243.93851,0,.97111,0,.97111-.92511.97107C169.91931,56.05976,169.91931,56.05976,169.91931,55.0938Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/bose/bose_featured_logo.svg b/content/en/case-studies/bose/bose_featured_logo.svg
index 13f1ff2616..58b2add614 100644
--- a/content/en/case-studies/bose/bose_featured_logo.svg
+++ b/content/en/case-studies/bose/bose_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path id="path5" d="M141.73824,63.05113H127.82345l2.25647-3.85486c.93932-1.59742,1.78587-2.16178,3.19675-2.16178,1.40994,0,1.88056,1.12776,1.12871,2.5377h14.197l1.4109-2.5377c1.034-1.88055,1.034-3.94955-1.50463-3.94955h-25.0097c-2.25648,0-4.04329.28218-5.35949,2.44492l-4.41922,7.52127c-1.2215,2.16274-1.12776,3.94956,1.88056,3.94956h14.3854L127.636,71.13676a3.487,3.487,0,0,1-3.47894,1.88056c-1.69307,0-1.59837-1.12776-.84654-2.25552H109.20724l-1.69307,2.82084c-1.034,1.78681-.18748,3.38519,2.25648,3.38519h24.82127a6.07295,6.07295,0,0,0,5.35949-2.91457l4.23078-7.05162C145.12343,65.21387,144.65281,63.05113,141.73824,63.05113Z"/><path id="path7" d="M202.14279,57.7299a2.01608,2.01608,0,1,0,2.06708,2.00395A2.04547,2.04547,0,0,0,202.14279,57.7299Zm0,3.63676a1.62259,1.62259,0,1,1,1.673-1.63377A1.64448,1.64448,0,0,1,202.14279,61.36666Z"/><path id="path9" d="M109.67787,53.08494H88.42834c-2.91458,0-6.67569,0-8.93217,3.94955l-9.4028,15.98283c-1.31619,2.16274-.18748,3.94956,2.25648,3.94956H97.07833c2.53865,0,4.137-.7528,6.11133-3.94956l9.40279-15.98283C113.814,54.96645,111.9334,53.08494,109.67787,53.08494ZM97.73642,59.19627l-7.05065,11.9405c-.94028,1.69307-1.78682,1.88055-3.94955,1.88055s-2.7271-.75184-2.068-1.88055l7.14535-11.94049a3.9896,3.9896,0,0,1,4.0433-2.16179C97.64364,57.03449,98.6767,57.59885,97.73642,59.19627Z"/><path id="path11" d="M72.44455,53.08494H45.17837L33.42631,73.01732h-25.95l.01294,3.94956H59.846c3.47893,0,4.60669-1.69308,5.35949-3.00928l2.81988-4.88887c.7528-1.3162.7528-2.82084-.75184-3.66642a5.94452,5.94452,0,0,0,4.79513-3.19676l2.82085-4.79514C76.30036,55.06019,74.60728,53.08494,72.44455,53.08494ZM58.436,69.16342,57.02512,71.419a2.662,2.662,0,0,1-2.6324,1.59837H47.43485l3.57554-6.01663H57.777C58.99942,67.00069,58.99942,68.12845,58.436,69.16342Zm5.9229-9.96715L62.948,61.45275a2.662,2.662,0,0,1-2.6324,1.59838H53.35774l3.57268-6.01664h6.76943C64.92327,57.03449,64.92327,58.16225,64.35891,59.19627Z"/><path id="path13" d="M203.20455,59.20871a.55269.55269,0,0,0-.25635-.485,1.13731,1.13731,0,0,0-.56532-.10809h-1.01107v2.25457h.34244V59.83046h.40462l.66193,1.0388h.3941l-.7021-1.0388C202.88507,59.81994,203.20455,59.6535,203.20455,59.20871Zm-1.11341.34244h-.37687V58.872h.5988c.29173,0,.54809.03922.54809.331C202.86211,59.60854,202.41636,59.55115,202.09114,59.55115Z"/><path id="polygon1317" d="M168.49306,57.03164h35.25806l-.011-3.94955H156.741L142.73151,76.964h32.71941l2.35022-3.94955H159.09122l3.57267-6.01664h18.70993l2.25649-3.94955H165.01508Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path id="path5" d="M141.73824,63.05113H127.82345l2.25647-3.85486c.93932-1.59742,1.78587-2.16178,3.19675-2.16178,1.40994,0,1.88056,1.12776,1.12871,2.5377h14.197l1.4109-2.5377c1.034-1.88055,1.034-3.94955-1.50463-3.94955h-25.0097c-2.25648,0-4.04329.28218-5.35949,2.44492l-4.41922,7.52127c-1.2215,2.16274-1.12776,3.94956,1.88056,3.94956h14.3854L127.636,71.13676a3.487,3.487,0,0,1-3.47894,1.88056c-1.69307,0-1.59837-1.12776-.84654-2.25552H109.20724l-1.69307,2.82084c-1.034,1.78681-.18748,3.38519,2.25648,3.38519h24.82127a6.07295,6.07295,0,0,0,5.35949-2.91457l4.23078-7.05162C145.12343,65.21387,144.65281,63.05113,141.73824,63.05113Z"/><path id="path7" d="M202.14279,57.7299a2.01608,2.01608,0,1,0,2.06708,2.00395A2.04547,2.04547,0,0,0,202.14279,57.7299Zm0,3.63676a1.62259,1.62259,0,1,1,1.673-1.63377A1.64448,1.64448,0,0,1,202.14279,61.36666Z"/><path id="path9" d="M109.67787,53.08494H88.42834c-2.91458,0-6.67569,0-8.93217,3.94955l-9.4028,15.98283c-1.31619,2.16274-.18748,3.94956,2.25648,3.94956H97.07833c2.53865,0,4.137-.7528,6.11133-3.94956l9.40279-15.98283C113.814,54.96645,111.9334,53.08494,109.67787,53.08494ZM97.73642,59.19627l-7.05065,11.9405c-.94028,1.69307-1.78682,1.88055-3.94955,1.88055s-2.7271-.75184-2.068-1.88055l7.14535-11.94049a3.9896,3.9896,0,0,1,4.0433-2.16179C97.64364,57.03449,98.6767,57.59885,97.73642,59.19627Z"/><path id="path11" d="M72.44455,53.08494H45.17837L33.42631,73.01732h-25.95l.01294,3.94956H59.846c3.47893,0,4.60669-1.69308,5.35949-3.00928l2.81988-4.88887c.7528-1.3162.7528-2.82084-.75184-3.66642a5.94452,5.94452,0,0,0,4.79513-3.19676l2.82085-4.79514C76.30036,55.06019,74.60728,53.08494,72.44455,53.08494ZM58.436,69.16342,57.02512,71.419a2.662,2.662,0,0,1-2.6324,1.59837H47.43485l3.57554-6.01663H57.777C58.99942,67.00069,58.99942,68.12845,58.436,69.16342Zm5.9229-9.96715L62.948,61.45275a2.662,2.662,0,0,1-2.6324,1.59838H53.35774l3.57268-6.01664h6.76943C64.92327,57.03449,64.92327,58.16225,64.35891,59.19627Z"/><path id="path13" d="M203.20455,59.20871a.55269.55269,0,0,0-.25635-.485,1.13731,1.13731,0,0,0-.56532-.10809h-1.01107v2.25457h.34244V59.83046h.40462l.66193,1.0388h.3941l-.7021-1.0388C202.88507,59.81994,203.20455,59.6535,203.20455,59.20871Zm-1.11341.34244h-.37687V58.872h.5988c.29173,0,.54809.03922.54809.331C202.86211,59.60854,202.41636,59.55115,202.09114,59.55115Z"/><path id="polygon1317" d="M168.49306,57.03164h35.25806l-.011-3.94955H156.741L142.73151,76.964h32.71941l2.35022-3.94955H159.09122l3.57267-6.01664h18.70993l2.25649-3.94955H165.01508Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/box/box_featured.svg b/content/en/case-studies/box/box_featured.svg
index c4ebadaffe..2b4fb6552b 100644
--- a/content/en/case-studies/box/box_featured.svg
+++ b/content/en/case-studies/box/box_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#0071f7;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M174.27862,87.85821a5.22494,5.22494,0,0,1-.67887,7.12815,5.66277,5.66277,0,0,1-7.46759-.67888l-11.88024-15.2746L142.71111,93.968c-1.69718,2.37606-5.09153,2.37606-7.46758.67888a4.96011,4.96011,0,0,1-1.01831-7.12815l13.57742-17.65065L134.22522,52.21747a5.32925,5.32925,0,0,1,8.48589-6.44927l11.54081,15.2746,11.88024-14.59574c1.69718-2.376,4.75211-2.71548,7.46759-1.0183,2.376,1.69717,2.376,5.09153.67887,7.46758l-13.238,17.31121Zm-61.77727-2.03662a15.64926,15.64926,0,0,1-15.95348-15.614,15.95716,15.95716,0,0,1,31.907,0A16.08546,16.08546,0,0,1,112.50135,85.82159Zm-46.84212,0a15.64926,15.64926,0,0,1-15.95347-15.614,15.95716,15.95716,0,0,1,31.907,0A15.64926,15.64926,0,0,1,65.65923,85.82159Zm46.84212-41.41114A26.28086,26.28086,0,0,0,89.41973,57.98787,26.42342,26.42342,0,0,0,65.99867,44.41045,27.90043,27.90043,0,0,0,50.0452,49.502V27.77811a5.22038,5.22038,0,0,0-5.09153-5.09154,5.297,5.297,0,0,0-5.431,5.09154V70.547A26.00829,26.00829,0,0,0,65.65923,96.00466,26.718,26.718,0,0,0,89.08029,82.0878a26.58818,26.58818,0,0,0,23.08162,13.91686,26.22192,26.22192,0,0,0,26.476-26.13654C138.97732,55.95126,127.09708,44.41045,112.50135,44.41045Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#0071f7;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M174.27862,87.85821a5.22494,5.22494,0,0,1-.67887,7.12815,5.66277,5.66277,0,0,1-7.46759-.67888l-11.88024-15.2746L142.71111,93.968c-1.69718,2.37606-5.09153,2.37606-7.46758.67888a4.96011,4.96011,0,0,1-1.01831-7.12815l13.57742-17.65065L134.22522,52.21747a5.32925,5.32925,0,0,1,8.48589-6.44927l11.54081,15.2746,11.88024-14.59574c1.69718-2.376,4.75211-2.71548,7.46759-1.0183,2.376,1.69717,2.376,5.09153.67887,7.46758l-13.238,17.31121Zm-61.77727-2.03662a15.64926,15.64926,0,0,1-15.95348-15.614,15.95716,15.95716,0,0,1,31.907,0A16.08546,16.08546,0,0,1,112.50135,85.82159Zm-46.84212,0a15.64926,15.64926,0,0,1-15.95347-15.614,15.95716,15.95716,0,0,1,31.907,0A15.64926,15.64926,0,0,1,65.65923,85.82159Zm46.84212-41.41114A26.28086,26.28086,0,0,0,89.41973,57.98787,26.42342,26.42342,0,0,0,65.99867,44.41045,27.90043,27.90043,0,0,0,50.0452,49.502V27.77811a5.22038,5.22038,0,0,0-5.09153-5.09154,5.297,5.297,0,0,0-5.431,5.09154V70.547A26.00829,26.00829,0,0,0,65.65923,96.00466,26.718,26.718,0,0,0,89.08029,82.0878a26.58818,26.58818,0,0,0,23.08162,13.91686,26.22192,26.22192,0,0,0,26.476-26.13654C138.97732,55.95126,127.09708,44.41045,112.50135,44.41045Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/buffer/buffer_featured.svg b/content/en/case-studies/buffer/buffer_featured.svg
index 6527f94f4d..b8e321f31d 100644
--- a/content/en/case-studies/buffer/buffer_featured.svg
+++ b/content/en/case-studies/buffer/buffer_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#fbfbfb;}.cls-3{fill:#192534;}.cls-4{mask:url(#mask);}.cls-5{mask:url(#mask-2-2);}.cls-6{mask:url(#mask-3);}</style><mask id="mask" x="14.75095" y="70.72244" width="32.48851" height="10.3304" maskUnits="userSpaceOnUse"><g id="mask-2"><polygon id="path-1" class="cls-1" points="14.751 81.053 14.751 70.722 47.239 70.722 47.239 81.053 14.751 81.053"/></g></mask><mask id="mask-2-2" x="14.75095" y="60.57418" width="32.48851" height="10.3304" maskUnits="userSpaceOnUse"><g id="mask-4"><polygon id="path-3" class="cls-1" points="14.751 70.905 14.751 60.574 47.239 60.574 47.239 70.905 14.751 70.905"/></g></mask><mask id="mask-3" x="14.75079" y="45.87467" width="32.48853" height="14.92678" maskUnits="userSpaceOnUse"><g id="mask-6"><polygon id="path-5" class="cls-1" points="14.751 60.801 14.751 45.875 47.239 45.875 47.239 60.801 14.751 60.801"/></g></mask></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><g id="Symbols"><g id="Mobile-Header"><g id="Group-4"><g id="Mobile-Logo"><g id="Group"><g id="Group-3"><path id="Fill-1" class="cls-3" d="M190.28379,79.32487h-6.37906V54.34018h6.37906v3.41436a10.33414,10.33414,0,0,1,7.73637-4.03515v6.41449a8.21414,8.21414,0,0,0-1.75906-.15516c-2.10911,0-4.92212,1.24163-5.97731,2.84489ZM173.10344,64.47949a5.69574,5.69574,0,0,0-5.97731-5.53592c-3.96771,0-5.67637,3.05266-5.97732,5.53592ZM167.5278,79.94566c-7.38379,0-12.9595-5.12161-12.9595-13.13943,0-7.24181,5.174-13.08684,12.55783-13.08684,7.234,0,12.15607,5.58723,12.15607,13.76022v1.4481H161.24952c.40168,3.15535,2.86336,5.79371,6.98219,5.79371a10.15786,10.15786,0,0,0,6.47972-2.48319l2.813,4.24168c-2.41134,2.27549-6.22917,3.46575-9.99665,3.46575Zm-19.24929-.62079h-6.43068V60.08257h-4.018V54.34018h4.018V52.99592c0-5.32809,3.31543-8.68991,8.18843-8.68991a8.489,8.489,0,0,1,6.32989,2.32674l-2.41135,3.88a3.50681,3.50681,0,0,0-2.66312-1.03509c-1.75782,0-3.01317,1.19026-3.01317,3.51828v1.34426h4.92207v5.74239h-4.92207Zm-16.426,0H125.4218V60.08257h-4.0194V54.34018h4.0194V52.99592c0-5.32809,3.31541-8.68991,8.18843-8.68991a8.48418,8.48418,0,0,1,6.3286,2.32674l-2.41012,3.88a3.50683,3.50683,0,0,0-2.66312-1.03509c-1.75782,0-3.01318,1.19026-3.01318,3.51828v1.34426h4.92212v5.74239h-4.92212v19.2423Zm-14.43053,0h-6.38022V76.16952a11.21263,11.21263,0,0,1-8.53978,3.77613c-5.32385,0-7.83586-3.00012-7.83586-7.86259V54.34018h6.379v15.157c0,3.46574,1.75911,4.60345,4.4714,4.60345a7.07632,7.07632,0,0,0,5.52531-2.8449V54.34017H117.422v24.9847ZM71.87264,71.307a7.0348,7.0348,0,0,0,5.4762,2.79359c3.7171,0,6.17877-2.8975,6.17877-7.24181,0-4.34567-2.46168-7.29441-6.17877-7.29441a6.9786,6.9786,0,0,0-5.47621,2.8975V71.307Zm0,8.01788h-6.379V43.734h6.379V57.54807a9.2539,9.2539,0,0,1,7.48587-3.82868c6.17748,0,10.74961,4.96639,10.74961,13.13944,0,8.32821-4.62118,13.08683-10.74961,13.08683a9.33043,9.33043,0,0,1-7.48587-3.82745v3.20666Z"/></g><g id="Group-6"><g class="cls-4"><path id="Fill-4" class="cls-3" d="M47.00136,72.68049l-3.69521-1.83918a1.4583,1.4583,0,0,0-1.15329,0L31.57117,76.108a1.455,1.455,0,0,1-1.15194,0L19.83748,70.84131a1.45828,1.45828,0,0,0-1.15328,0L14.989,72.68049c-.31738.15841-.31738.416,0,.57308L30.41923,80.934a1.45553,1.45553,0,0,0,1.15194,0l15.43019-7.68046c.31738-.15706.31738-.41467,0-.57308"/></g></g><g id="Group-9"><g class="cls-5"><path id="Fill-7" class="cls-3" d="M47.00136,62.53223l-3.69521-1.83917a1.45872,1.45872,0,0,0-1.15329,0L31.57117,65.95984a1.46694,1.46694,0,0,1-1.15194,0L19.83748,60.69306a1.4587,1.4587,0,0,0-1.15328,0L14.989,62.53223c-.31738.15842-.31738.416,0,.5745l15.43024,7.67905a1.45553,1.45553,0,0,0,1.15194,0l15.43019-7.67905c.31738-.15848.31738-.41608,0-.5745"/></g></g><g id="Group-12"><g class="cls-6"><path id="Fill-10" class="cls-3" d="M14.98887,53.6031l15.43018,7.08965a1.58033,1.58033,0,0,0,1.15194,0L47.00123,53.6031c.31744-.14628.31744-.38408,0-.52907L31.571,45.98438a1.56676,1.56676,0,0,0-1.15194,0L14.98887,53.074c-.31744.145-.31744.38279,0,.52907"/></g></g></g></g></g></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:transparent;}.cls-3{fill:#192534;}.cls-4{mask:url(#mask);}.cls-5{mask:url(#mask-2-2);}.cls-6{mask:url(#mask-3);}</style><mask id="mask" x="14.75095" y="70.72244" width="32.48851" height="10.3304" maskUnits="userSpaceOnUse"><g id="mask-2"><polygon id="path-1" class="cls-1" points="14.751 81.053 14.751 70.722 47.239 70.722 47.239 81.053 14.751 81.053"/></g></mask><mask id="mask-2-2" x="14.75095" y="60.57418" width="32.48851" height="10.3304" maskUnits="userSpaceOnUse"><g id="mask-4"><polygon id="path-3" class="cls-1" points="14.751 70.905 14.751 60.574 47.239 60.574 47.239 70.905 14.751 70.905"/></g></mask><mask id="mask-3" x="14.75079" y="45.87467" width="32.48853" height="14.92678" maskUnits="userSpaceOnUse"><g id="mask-6"><polygon id="path-5" class="cls-1" points="14.751 60.801 14.751 45.875 47.239 45.875 47.239 60.801 14.751 60.801"/></g></mask></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><g id="Symbols"><g id="Mobile-Header"><g id="Group-4"><g id="Mobile-Logo"><g id="Group"><g id="Group-3"><path id="Fill-1" class="cls-3" d="M190.28379,79.32487h-6.37906V54.34018h6.37906v3.41436a10.33414,10.33414,0,0,1,7.73637-4.03515v6.41449a8.21414,8.21414,0,0,0-1.75906-.15516c-2.10911,0-4.92212,1.24163-5.97731,2.84489ZM173.10344,64.47949a5.69574,5.69574,0,0,0-5.97731-5.53592c-3.96771,0-5.67637,3.05266-5.97732,5.53592ZM167.5278,79.94566c-7.38379,0-12.9595-5.12161-12.9595-13.13943,0-7.24181,5.174-13.08684,12.55783-13.08684,7.234,0,12.15607,5.58723,12.15607,13.76022v1.4481H161.24952c.40168,3.15535,2.86336,5.79371,6.98219,5.79371a10.15786,10.15786,0,0,0,6.47972-2.48319l2.813,4.24168c-2.41134,2.27549-6.22917,3.46575-9.99665,3.46575Zm-19.24929-.62079h-6.43068V60.08257h-4.018V54.34018h4.018V52.99592c0-5.32809,3.31543-8.68991,8.18843-8.68991a8.489,8.489,0,0,1,6.32989,2.32674l-2.41135,3.88a3.50681,3.50681,0,0,0-2.66312-1.03509c-1.75782,0-3.01317,1.19026-3.01317,3.51828v1.34426h4.92207v5.74239h-4.92207Zm-16.426,0H125.4218V60.08257h-4.0194V54.34018h4.0194V52.99592c0-5.32809,3.31541-8.68991,8.18843-8.68991a8.48418,8.48418,0,0,1,6.3286,2.32674l-2.41012,3.88a3.50683,3.50683,0,0,0-2.66312-1.03509c-1.75782,0-3.01318,1.19026-3.01318,3.51828v1.34426h4.92212v5.74239h-4.92212v19.2423Zm-14.43053,0h-6.38022V76.16952a11.21263,11.21263,0,0,1-8.53978,3.77613c-5.32385,0-7.83586-3.00012-7.83586-7.86259V54.34018h6.379v15.157c0,3.46574,1.75911,4.60345,4.4714,4.60345a7.07632,7.07632,0,0,0,5.52531-2.8449V54.34017H117.422v24.9847ZM71.87264,71.307a7.0348,7.0348,0,0,0,5.4762,2.79359c3.7171,0,6.17877-2.8975,6.17877-7.24181,0-4.34567-2.46168-7.29441-6.17877-7.29441a6.9786,6.9786,0,0,0-5.47621,2.8975V71.307Zm0,8.01788h-6.379V43.734h6.379V57.54807a9.2539,9.2539,0,0,1,7.48587-3.82868c6.17748,0,10.74961,4.96639,10.74961,13.13944,0,8.32821-4.62118,13.08683-10.74961,13.08683a9.33043,9.33043,0,0,1-7.48587-3.82745v3.20666Z"/></g><g id="Group-6"><g class="cls-4"><path id="Fill-4" class="cls-3" d="M47.00136,72.68049l-3.69521-1.83918a1.4583,1.4583,0,0,0-1.15329,0L31.57117,76.108a1.455,1.455,0,0,1-1.15194,0L19.83748,70.84131a1.45828,1.45828,0,0,0-1.15328,0L14.989,72.68049c-.31738.15841-.31738.416,0,.57308L30.41923,80.934a1.45553,1.45553,0,0,0,1.15194,0l15.43019-7.68046c.31738-.15706.31738-.41467,0-.57308"/></g></g><g id="Group-9"><g class="cls-5"><path id="Fill-7" class="cls-3" d="M47.00136,62.53223l-3.69521-1.83917a1.45872,1.45872,0,0,0-1.15329,0L31.57117,65.95984a1.46694,1.46694,0,0,1-1.15194,0L19.83748,60.69306a1.4587,1.4587,0,0,0-1.15328,0L14.989,62.53223c-.31738.15842-.31738.416,0,.5745l15.43024,7.67905a1.45553,1.45553,0,0,0,1.15194,0l15.43019-7.67905c.31738-.15848.31738-.41608,0-.5745"/></g></g><g id="Group-12"><g class="cls-6"><path id="Fill-10" class="cls-3" d="M14.98887,53.6031l15.43018,7.08965a1.58033,1.58033,0,0,0,1.15194,0L47.00123,53.6031c.31744-.14628.31744-.38408,0-.52907L31.571,45.98438a1.56676,1.56676,0,0,0-1.15194,0L14.98887,53.074c-.31744.145-.31744.38279,0,.52907"/></g></g></g></g></g></g></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/capital-one/capitalone_featured_logo.svg b/content/en/case-studies/capital-one/capitalone_featured_logo.svg
index 28552e569c..124adae9af 100644
--- a/content/en/case-studies/capital-one/capitalone_featured_logo.svg
+++ b/content/en/case-studies/capital-one/capitalone_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#d03027;}.cls-3{fill:#004977;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M139.7354,76.14142c-.01007.01006-.02012.01006-.02012.02012-7.60536,5.3821-16.60906,11.03582-26.29683,16.97121l-.38228.22132a.28887.28887,0,0,0,.332.47283l.32192-.171c8.219-4.28556,17.65529-9.37592,27.15193-14.59706a1.1001,1.1001,0,0,1,.1509-.08048A12.04527,12.04527,0,0,1,139.7354,76.14142ZM189.633,35.75053c-11.98146-13.21883-89.09133-1.32792-121.87687,5.8348l-.76455.161a.28614.28614,0,0,0,.1006.56336l.7545-.1509c27.162-4.83886,83.65893-11.53882,95.8114.51306,3.71214,3.682,2.82685,8.41016-1.47882,14.00351a11.11073,11.11073,0,0,1,4.70807,6.76032c16.80019-11.14647,28.07745-21.8,22.74565-27.68511Z"/><path class="cls-3" d="M144.58431,72.67072c.15091,4.64772,3.09848,8.46046,6.93135,8.46046,7.43434,0,10.60323-9.13448,10.38191-15.23084-.161-4.65778-3.179-8.46045-7.01182-8.46045C148.49764,57.42983,144.363,66.52406,144.58431,72.67072Zm-3.9234-.2515c-.27161-7.93734,5.94547-16.05575,14.97934-16.05575,6.036,0,9.98957,4.024,10.21089,10.19077C166.14287,74.92416,160.3282,82.61,150.88186,82.61c-6.05612,0-10.00969-4.01394-10.221-10.19078Z"/><path class="cls-3" d="M55.10366,70.32674a8.79568,8.79568,0,0,1-1.2575.3521c-.51306.12072-1.4587.28168-2.82686.503a4.8615,4.8615,0,0,0-1.97176.61366,1.45209,1.45209,0,0,0-.62372.96576.94824.94824,0,0,0,.41246.99594,3.29032,3.29032,0,0,0,1.82086.38228,5.87842,5.87842,0,0,0,1.87116-.3018,4.41135,4.41135,0,0,0,1.52912-.81486,2.47454,2.47454,0,0,0,.664-.96576A11.11761,11.11761,0,0,0,55.10366,70.32674Zm7.8468-4.87909a19.84085,19.84085,0,0,1-.3521,2.48482l-1.32792,7.45445a1.39028,1.39028,0,0,0,.74444,1.53918l-.04024.29174-7.60536-.01006-.07042-1.89128a15.30571,15.30571,0,0,1-3.65178,1.5593,13.23617,13.23617,0,0,1-3.64172.44264c-2.45464,0-3.863-.2515-4.83886-1.1066-.98587-.87522-1.46876-1.4587-1.41845-2.6659a4.20416,4.20416,0,0,1,.91545-2.2132,5.73727,5.73727,0,0,1,2.02206-1.41846,10.88556,10.88556,0,0,1,3.04818-.8551c1.348-.22132,3.2192-.43258,5.72414-.64383a8.23008,8.23008,0,0,0,2.49488-.56337c.52312-.2012.73438-.43258.8048-.85509.14084-.76456-.1006-1.2072-1.12672-1.4084-2.73632-.54325-7.877.35209-10.52275,1.006l1.43858-3.88315a68.95387,68.95387,0,0,1,10.21089-.835C61.26038,61.87635,63.01082,63.43565,62.95046,65.44765Z"/><path class="cls-3" d="M85.002,77.20778l2.63572-14.89886h7.28343L92.2854,77.20778Zm3.03811-18.34943c.22132-1.22732,2.15284-2.2132,4.30568-2.2132,2.1629,0,3.74232.99594,3.53106,2.2132-.23138,1.22732-2.15284,2.22326-4.3258,2.22326C89.39818,61.08161,87.82882,60.08567,88.04008,58.85835Z"/><path class="cls-3" d="M120.78236,70.35692c-.332.11066-.7545.23138-1.26756.3521s-1.4587.27162-2.82686.49294a4.80343,4.80343,0,0,0-1.9617.61366,1.52278,1.52278,0,0,0-.63377.9557.94172.94172,0,0,0,.41246.99594,3.36585,3.36585,0,0,0,1.83092.37222,6.252,6.252,0,0,0,1.87116-.28168,4.63961,4.63961,0,0,0,1.53918-.81486,2.50884,2.50884,0,0,0,.64384-.96576A11.41118,11.41118,0,0,0,120.78236,70.35692Zm7.8468-4.88916a17.96168,17.96168,0,0,1-.36216,2.48482l-1.31786,7.46452a1.39628,1.39628,0,0,0,.74444,1.53918l-.04024.26156-7.60536.01005-.06035-1.90134a14.69057,14.69057,0,0,1-3.65178,1.5593,12.90064,12.90064,0,0,1-3.66184.4527c-2.45464,0-3.853-.24144-4.8288-1.10659-.99594-.88528-1.46876-1.4587-1.41846-2.6659a3.98919,3.98919,0,0,1,.91546-2.2132,5.56473,5.56473,0,0,1,2.03212-1.41846,11.22574,11.22574,0,0,1,3.03811-.86516c1.348-.21126,3.22926-.43258,5.7342-.64384a8.32389,8.32389,0,0,0,2.48482-.5533c.53318-.2012.73438-.43258.81485-.86516.13078-.7545-.10059-1.19714-1.11666-1.4084-2.75643-.54324-7.877.35209-10.52275,1.006l1.42852-3.88316a69.06448,69.06448,0,0,1,10.21089-.835C126.929,61.89646,128.67945,63.46582,128.62916,65.46776Z"/><path class="cls-3" d="M39.76216,71.85586a26.49141,26.49141,0,0,1-6.04605.6539c-3.48076,0-6.24726-1.73032-6.09636-4.89921.11066-2.1126,2.60554-6.55912,8.9534-6.55912a10.37144,10.37144,0,0,1,5.66377,1.54924l.92552-5.17084a17.66921,17.66921,0,0,0-7.203-1.21726c-8.32967.09054-16.31731,3.8731-17.31325,11.569-1.006,7.81662,8.54094,9.77832,12.7762,9.7582,2.44458-.01006,4.98976-.11066,7.36392-.3521Z"/><path class="cls-3" d="M98.93507,62.22845l.52311-3.03812,7.61542-1.6599-.81486,4.688H109.991l-.70419,2.99788-3.6216-.01006-2.20314,11.98145s-7.33374-.0503-7.36392,0l2.19308-11.95127H95.53479l.56336-3.018h2.83692Z"/><polygon class="cls-3" points="139.568 56.625 136.027 77.197 128.612 77.207 132.345 56.423 139.568 56.625"/><path class="cls-3" d="M75.36449,65.79974a4.21247,4.21247,0,0,0-2.58542.86516,3.87654,3.87654,0,0,0-1.43858,2.54518,3.26663,3.26663,0,0,0,.42252,2.80674,2.88884,2.88884,0,0,0,2.25344.86516,4.31439,4.31439,0,0,0,1.851-.37222A3.62468,3.62468,0,0,0,77.296,71.28244a4.9387,4.9387,0,0,0,.8048-1.9617,2.93679,2.93679,0,0,0-.51306-2.63571A2.85654,2.85654,0,0,0,75.36449,65.79974ZM62.10542,82.34844l3.55117-19.959h6.39816l-.49294,2.54517a5.96855,5.96855,0,0,1,2.6659-1.89128,10.95182,10.95182,0,0,1,4.13466-.87522,7.66162,7.66162,0,0,1,3.94352.73438,5.262,5.262,0,0,1,2.57535,2.82686,7.35256,7.35256,0,0,1,.32192,4.05418,8.77874,8.77874,0,0,1-3.60148,5.82474,11.29908,11.29908,0,0,1-8.46045,1.56936,5.20993,5.20993,0,0,1-1.44864-.58348,6.37058,6.37058,0,0,1-1.19714-1.08649l-1.18708,6.8408Z"/><path class="cls-3" d="M194.31088,67.63066c-.04023-1.19713-.64384-2.012-1.88122-2.012-2.98782,0-6.16678,5.85492-6.71,8.209C190.61886,73.83768,194.43161,70.92028,194.31088,67.63066Zm.64384,9.17472.57342.39234a9.13558,9.13558,0,0,1-7.90715,5.35192c-2.847,0-5.191-1.90134-5.31168-5.46258-.23138-6.3881,5.75432-12.31344,10.65353-12.31344,2.10254,0,4.05418.91546,4.13466,3.179.18107,5.0803-6.95146,6.62954-11.64948,6.7402a5.68878,5.68878,0,0,0-.18107,1.87116,3.74051,3.74051,0,0,0,3.98377,3.87309c2.27355,0,4.54712-1.83091,5.704-3.63165Z"/><path class="cls-3" d="M165.74048,67.4697c.503-.07042,1.31786-.161,1.67-.161.53318,0,1.03618.1006,1.06636.63378.01005.31187-.5533,2.57537-.674,3.09848L166.666,76.05088c-.46277,2.05224-.9557,4.195-1.39834,5.89516h2.91739l1.63978-7.93734c4.99982-5.21108,6.93134-6.91122,8.10836-6.91122a.852.852,0,0,1,.92552.91546,16.13806,16.13806,0,0,1-.73438,3.60148l-1.67,5.7845a11.79561,11.79561,0,0,0-.63379,3.30974,1.74683,1.74683,0,0,0,1.9617,1.83092c2.13272,0,3.682-2.22326,5.03-4.40628l-.39234-.71426c-.54323.87522-1.8108,2.79668-2.80673,2.79668-.31186,0-.61366-.21126-.62372-.73438a8.5396,8.5396,0,0,1,.4527-2.3641l1.8611-6.78044a16.63045,16.63045,0,0,0,.72433-3.71213,1.74309,1.74309,0,0,0-1.92147-1.8611c-1.92146,0-4.46664,1.4084-9.86885,7.61542h-.08048l.68407-3.02806c.37221-1.6599.73437-3.39022,1.07643-4.58736a49.58693,49.58693,0,0,1-6.197,1.75044Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#d03027;}.cls-3{fill:#004977;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M139.7354,76.14142c-.01007.01006-.02012.01006-.02012.02012-7.60536,5.3821-16.60906,11.03582-26.29683,16.97121l-.38228.22132a.28887.28887,0,0,0,.332.47283l.32192-.171c8.219-4.28556,17.65529-9.37592,27.15193-14.59706a1.1001,1.1001,0,0,1,.1509-.08048A12.04527,12.04527,0,0,1,139.7354,76.14142ZM189.633,35.75053c-11.98146-13.21883-89.09133-1.32792-121.87687,5.8348l-.76455.161a.28614.28614,0,0,0,.1006.56336l.7545-.1509c27.162-4.83886,83.65893-11.53882,95.8114.51306,3.71214,3.682,2.82685,8.41016-1.47882,14.00351a11.11073,11.11073,0,0,1,4.70807,6.76032c16.80019-11.14647,28.07745-21.8,22.74565-27.68511Z"/><path class="cls-3" d="M144.58431,72.67072c.15091,4.64772,3.09848,8.46046,6.93135,8.46046,7.43434,0,10.60323-9.13448,10.38191-15.23084-.161-4.65778-3.179-8.46045-7.01182-8.46045C148.49764,57.42983,144.363,66.52406,144.58431,72.67072Zm-3.9234-.2515c-.27161-7.93734,5.94547-16.05575,14.97934-16.05575,6.036,0,9.98957,4.024,10.21089,10.19077C166.14287,74.92416,160.3282,82.61,150.88186,82.61c-6.05612,0-10.00969-4.01394-10.221-10.19078Z"/><path class="cls-3" d="M55.10366,70.32674a8.79568,8.79568,0,0,1-1.2575.3521c-.51306.12072-1.4587.28168-2.82686.503a4.8615,4.8615,0,0,0-1.97176.61366,1.45209,1.45209,0,0,0-.62372.96576.94824.94824,0,0,0,.41246.99594,3.29032,3.29032,0,0,0,1.82086.38228,5.87842,5.87842,0,0,0,1.87116-.3018,4.41135,4.41135,0,0,0,1.52912-.81486,2.47454,2.47454,0,0,0,.664-.96576A11.11761,11.11761,0,0,0,55.10366,70.32674Zm7.8468-4.87909a19.84085,19.84085,0,0,1-.3521,2.48482l-1.32792,7.45445a1.39028,1.39028,0,0,0,.74444,1.53918l-.04024.29174-7.60536-.01006-.07042-1.89128a15.30571,15.30571,0,0,1-3.65178,1.5593,13.23617,13.23617,0,0,1-3.64172.44264c-2.45464,0-3.863-.2515-4.83886-1.1066-.98587-.87522-1.46876-1.4587-1.41845-2.6659a4.20416,4.20416,0,0,1,.91545-2.2132,5.73727,5.73727,0,0,1,2.02206-1.41846,10.88556,10.88556,0,0,1,3.04818-.8551c1.348-.22132,3.2192-.43258,5.72414-.64383a8.23008,8.23008,0,0,0,2.49488-.56337c.52312-.2012.73438-.43258.8048-.85509.14084-.76456-.1006-1.2072-1.12672-1.4084-2.73632-.54325-7.877.35209-10.52275,1.006l1.43858-3.88315a68.95387,68.95387,0,0,1,10.21089-.835C61.26038,61.87635,63.01082,63.43565,62.95046,65.44765Z"/><path class="cls-3" d="M85.002,77.20778l2.63572-14.89886h7.28343L92.2854,77.20778Zm3.03811-18.34943c.22132-1.22732,2.15284-2.2132,4.30568-2.2132,2.1629,0,3.74232.99594,3.53106,2.2132-.23138,1.22732-2.15284,2.22326-4.3258,2.22326C89.39818,61.08161,87.82882,60.08567,88.04008,58.85835Z"/><path class="cls-3" d="M120.78236,70.35692c-.332.11066-.7545.23138-1.26756.3521s-1.4587.27162-2.82686.49294a4.80343,4.80343,0,0,0-1.9617.61366,1.52278,1.52278,0,0,0-.63377.9557.94172.94172,0,0,0,.41246.99594,3.36585,3.36585,0,0,0,1.83092.37222,6.252,6.252,0,0,0,1.87116-.28168,4.63961,4.63961,0,0,0,1.53918-.81486,2.50884,2.50884,0,0,0,.64384-.96576A11.41118,11.41118,0,0,0,120.78236,70.35692Zm7.8468-4.88916a17.96168,17.96168,0,0,1-.36216,2.48482l-1.31786,7.46452a1.39628,1.39628,0,0,0,.74444,1.53918l-.04024.26156-7.60536.01005-.06035-1.90134a14.69057,14.69057,0,0,1-3.65178,1.5593,12.90064,12.90064,0,0,1-3.66184.4527c-2.45464,0-3.853-.24144-4.8288-1.10659-.99594-.88528-1.46876-1.4587-1.41846-2.6659a3.98919,3.98919,0,0,1,.91546-2.2132,5.56473,5.56473,0,0,1,2.03212-1.41846,11.22574,11.22574,0,0,1,3.03811-.86516c1.348-.21126,3.22926-.43258,5.7342-.64384a8.32389,8.32389,0,0,0,2.48482-.5533c.53318-.2012.73438-.43258.81485-.86516.13078-.7545-.10059-1.19714-1.11666-1.4084-2.75643-.54324-7.877.35209-10.52275,1.006l1.42852-3.88316a69.06448,69.06448,0,0,1,10.21089-.835C126.929,61.89646,128.67945,63.46582,128.62916,65.46776Z"/><path class="cls-3" d="M39.76216,71.85586a26.49141,26.49141,0,0,1-6.04605.6539c-3.48076,0-6.24726-1.73032-6.09636-4.89921.11066-2.1126,2.60554-6.55912,8.9534-6.55912a10.37144,10.37144,0,0,1,5.66377,1.54924l.92552-5.17084a17.66921,17.66921,0,0,0-7.203-1.21726c-8.32967.09054-16.31731,3.8731-17.31325,11.569-1.006,7.81662,8.54094,9.77832,12.7762,9.7582,2.44458-.01006,4.98976-.11066,7.36392-.3521Z"/><path class="cls-3" d="M98.93507,62.22845l.52311-3.03812,7.61542-1.6599-.81486,4.688H109.991l-.70419,2.99788-3.6216-.01006-2.20314,11.98145s-7.33374-.0503-7.36392,0l2.19308-11.95127H95.53479l.56336-3.018h2.83692Z"/><polygon class="cls-3" points="139.568 56.625 136.027 77.197 128.612 77.207 132.345 56.423 139.568 56.625"/><path class="cls-3" d="M75.36449,65.79974a4.21247,4.21247,0,0,0-2.58542.86516,3.87654,3.87654,0,0,0-1.43858,2.54518,3.26663,3.26663,0,0,0,.42252,2.80674,2.88884,2.88884,0,0,0,2.25344.86516,4.31439,4.31439,0,0,0,1.851-.37222A3.62468,3.62468,0,0,0,77.296,71.28244a4.9387,4.9387,0,0,0,.8048-1.9617,2.93679,2.93679,0,0,0-.51306-2.63571A2.85654,2.85654,0,0,0,75.36449,65.79974ZM62.10542,82.34844l3.55117-19.959h6.39816l-.49294,2.54517a5.96855,5.96855,0,0,1,2.6659-1.89128,10.95182,10.95182,0,0,1,4.13466-.87522,7.66162,7.66162,0,0,1,3.94352.73438,5.262,5.262,0,0,1,2.57535,2.82686,7.35256,7.35256,0,0,1,.32192,4.05418,8.77874,8.77874,0,0,1-3.60148,5.82474,11.29908,11.29908,0,0,1-8.46045,1.56936,5.20993,5.20993,0,0,1-1.44864-.58348,6.37058,6.37058,0,0,1-1.19714-1.08649l-1.18708,6.8408Z"/><path class="cls-3" d="M194.31088,67.63066c-.04023-1.19713-.64384-2.012-1.88122-2.012-2.98782,0-6.16678,5.85492-6.71,8.209C190.61886,73.83768,194.43161,70.92028,194.31088,67.63066Zm.64384,9.17472.57342.39234a9.13558,9.13558,0,0,1-7.90715,5.35192c-2.847,0-5.191-1.90134-5.31168-5.46258-.23138-6.3881,5.75432-12.31344,10.65353-12.31344,2.10254,0,4.05418.91546,4.13466,3.179.18107,5.0803-6.95146,6.62954-11.64948,6.7402a5.68878,5.68878,0,0,0-.18107,1.87116,3.74051,3.74051,0,0,0,3.98377,3.87309c2.27355,0,4.54712-1.83091,5.704-3.63165Z"/><path class="cls-3" d="M165.74048,67.4697c.503-.07042,1.31786-.161,1.67-.161.53318,0,1.03618.1006,1.06636.63378.01005.31187-.5533,2.57537-.674,3.09848L166.666,76.05088c-.46277,2.05224-.9557,4.195-1.39834,5.89516h2.91739l1.63978-7.93734c4.99982-5.21108,6.93134-6.91122,8.10836-6.91122a.852.852,0,0,1,.92552.91546,16.13806,16.13806,0,0,1-.73438,3.60148l-1.67,5.7845a11.79561,11.79561,0,0,0-.63379,3.30974,1.74683,1.74683,0,0,0,1.9617,1.83092c2.13272,0,3.682-2.22326,5.03-4.40628l-.39234-.71426c-.54323.87522-1.8108,2.79668-2.80673,2.79668-.31186,0-.61366-.21126-.62372-.73438a8.5396,8.5396,0,0,1,.4527-2.3641l1.8611-6.78044a16.63045,16.63045,0,0,0,.72433-3.71213,1.74309,1.74309,0,0,0-1.92147-1.8611c-1.92146,0-4.46664,1.4084-9.86885,7.61542h-.08048l.68407-3.02806c.37221-1.6599.73437-3.39022,1.07643-4.58736a49.58693,49.58693,0,0,1-6.197,1.75044Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/chinaunicom/chinaunicom_featured_logo.svg b/content/en/case-studies/chinaunicom/chinaunicom_featured_logo.svg
index a1b39cc109..aae1978cf2 100644
--- a/content/en/case-studies/chinaunicom/chinaunicom_featured_logo.svg
+++ b/content/en/case-studies/chinaunicom/chinaunicom_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#d61920;}.cls-3{fill:#231f20;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><g id="g7"><path id="path9" class="cls-2" d="M128.13594,59.24415l5.78-5.79283-4.61116-4.5983,4.61116-4.61115-5.78-5.78-4.61115,4.5983-3.04413-3.04412a12.4928,12.4928,0,1,0,0,17.66107c1.4-1.3872,3.04413-3.04413,3.04413-3.04413l4.61115,4.61114m-13.44811-7.347a4.305,4.305,0,1,1,0-6.08825c1.37435,1.36151,3.04413,3.04412,3.04413,3.04412l-3.04413,3.04413m76.96375-11.88108a12.55877,12.55877,0,0,0-17.72529,0c-1.4129,1.4-3.01845,3.04412-3.01845,3.04412l-4.59829-4.5983-5.79284,5.78,4.61114,4.61115-4.61114,4.5983,5.79284,5.79283,4.59829-4.61114s1.60555,1.65693,3.01845,3.04413a12.55879,12.55879,0,0,0,17.72529,0,12.63926,12.63926,0,0,0,0-17.66107m-5.78,11.88108a4.42022,4.42022,0,0,1-6.16532,0c-1.28444-1.37436-2.95422-3.04413-2.95422-3.04413s1.66978-1.68261,2.95422-3.04412a4.396,4.396,0,0,1,6.16532,0,4.58609,4.58609,0,0,1,0,6.08825M153.067,48.853s13.56371-13.57655,14.92521-14.92522a12.49735,12.49735,0,0,0-17.67392-17.67391C148.40443,18.16771,147.287,19.298,147.287,19.298s-1.14315-1.1303-3.04412-3.04412A12.49735,12.49735,0,1,0,126.56892,33.9278L141.49413,48.853s-13.57655,13.56371-14.92521,14.91237a12.49735,12.49735,0,1,0,17.67392,17.67392c1.901-1.91382,3.04412-3.04413,3.04412-3.04413s1.11747,1.13031,3.03128,3.04413a12.49735,12.49735,0,0,0,17.67392-17.67392C166.63066,62.41673,153.067,48.853,153.067,48.853m-20.7052-20.718A4.305,4.305,0,1,1,138.45,22.04672l3.04413,3.04413L136.883,29.702l5.79284,5.78,4.61114-4.59831,4.5983,4.59831,5.79284-5.78L153.067,25.09085l3.04413-3.04413a4.305,4.305,0,0,1,6.08825,6.08826c-1.75968,1.77253-14.97659,14.98943-14.97659,14.98943s-13.10131-13.2169-14.861-14.98943m29.83758,47.5115a4.30252,4.30252,0,0,1-6.08825,0L153.067,72.60235l4.61115-4.61115-5.79284-5.78-4.5983,4.5983-4.61114-4.5983-5.79284,5.78,4.61115,4.61115L138.45,75.64648a4.305,4.305,0,1,1-6.08825-6.08826c1.75968-1.75968,14.861-14.98943,14.861-14.98943s13.21691,13.22975,14.97659,14.98943a4.30253,4.30253,0,0,1,0,6.08826"/><path id="path11" class="cls-3" d="M81.76759,75.23545V76.841a6.2696,6.2696,0,0,0-4.53408-1.9652,6.43865,6.43865,0,0,0-4.868,2.04227,7.26347,7.26347,0,0,0-1.95236,5.17629,7.41007,7.41007,0,0,0,1.95236,5.22768,6.63706,6.63706,0,0,0,9.40211.20551V88.979h3.36523V75.23545H81.76759m-.95049,10.07A3.92,3.92,0,0,1,77.82435,86.5a3.75037,3.75037,0,0,1-2.87715-1.23307,4.59046,4.59046,0,0,1-1.11746-3.2111,4.46773,4.46773,0,0,1,1.14315-3.08266A3.75841,3.75841,0,0,1,77.85,77.753a3.838,3.838,0,0,1,2.96706,1.22022,4.95613,4.95613,0,0,1,0,6.3323"/><path id="path13" class="cls-3" d="M35.42108,69.01876h3.48983v7.79656a5.07464,5.07464,0,0,1,4.014-1.79822c2.50967,0,4.7934,1.66978,4.7934,5.8699v8.169h-3.179V80.6558c0-1.43858-.58314-3.26248-2.64325-3.26248-1.964,0-2.97361,1.47711-2.98517,3.26248v8.40025H35.42108V69.01876"/><path id="path15" class="cls-3" d="M34.16361,85.63943a8.84381,8.84381,0,0,1-2.93495,2.64595,9.40054,9.40054,0,0,1-4.69206,1.20738,8.865,8.865,0,0,1-6.4479-2.6588,9.10759,9.10759,0,0,1,.3468-13.2169,8.83518,8.83518,0,0,1,6.08825-2.37622,9.39181,9.39181,0,0,1,4.67537,1.23306A8.91664,8.91664,0,0,1,34.15847,75.107l-2.994,2.145a5.28278,5.28278,0,0,0-.86571-1.37435,5.01949,5.01949,0,0,0-7.58977.02569,7.56547,7.56547,0,0,0,0,9.01678,4.7079,4.7079,0,0,0,3.76341,1.734,4.79577,4.79577,0,0,0,3.79681-1.77253,5.29148,5.29148,0,0,0,.89526-1.4s2.22594,1.59271,2.99917,2.15786"/><path id="path17" class="cls-3" d="M63.97807,75.0171c-3.31386-.05138-4.39279,1.79822-4.39279,1.79822l-.167-1.6184H56.42555V89.0432h3.468V80.643a2.97925,2.97925,0,0,1,2.99275-3.26248c2.068,0,2.67164,1.83675,2.67164,3.26248V89.0432H68.769V80.887c0-4.213-2.28631-5.85706-4.791-5.8699"/><path id="path19" class="cls-2" d="M50.336,89.0432h3.25606V75.15839H50.336Z"/><path id="path21" class="cls-2" d="M51.94285,73.7455a1.93426,1.93426,0,1,1,.02826,0h-.02826"/><path id="path23" class="cls-2" d="M51.94285,94.19381a1.80031,1.80031,0,0,1-1.88556-1.81106,1.91618,1.91618,0,0,1,3.83149,0,1.80923,1.80923,0,0,1-1.91767,1.81106h-.02826"/><path id="path25" class="cls-3" d="M101.27826,95.52963a5.82122,5.82122,0,0,0-4.7139,2.145,4.04358,4.04358,0,0,0-3.59644-2.145,4.981,4.981,0,0,0-4.213,1.78538l-.1156-1.68262H85.49247v13.85013H88.999V101.1298c.01284-1.78537.95048-3.23679,2.7487-3.23679,1.88813,0,2.44044,1.81106,2.44044,3.24963v8.33988h3.17257v-8.16c.01285-2.32484,1.09178-3.42946,2.69733-3.42946,1.901,0,2.44044,1.81106,2.44044,3.24963v8.33988h3.17257v-8.10868c0-4.18728-2.10648-5.79283-4.39279-5.84421"/><path id="path27" class="cls-2" d="M50.336,109.48252h3.25606V95.63624H50.336Z"/><path id="path29" class="cls-3" d="M76.617,95.32412a7.28758,7.28758,0,0,1,3.64781.97618,7.19357,7.19357,0,0,1,2.67164,9.87736,6.79065,6.79065,0,0,1-2.6331,2.63952,7.10618,7.10618,0,0,1-3.67351.9582,6.85364,6.85364,0,0,1-5.0607-2.10777A7.2452,7.2452,0,0,1,76.617,95.32412m.25689,2.41475a3.466,3.466,0,0,0-2.7744,1.34867,5.3146,5.3146,0,0,0-1.11746,3.48083,5.40413,5.40413,0,0,0,1.10462,3.50653,3.53845,3.53845,0,0,0,5.54879-.01284,5.28081,5.28081,0,0,0,1.11746-3.49369,5.38579,5.38579,0,0,0-1.09178-3.49368,3.49788,3.49788,0,0,0-2.78723-1.33582"/><path id="path31" class="cls-3" d="M42.92492,95.45257c-3.30115-.03854-4.39164,1.79822-4.39164,1.79822l-.167-1.6184H35.371v13.85013h3.48469v-8.39125a2.95244,2.95244,0,0,1,2.9903-3.24964c2.055,0,2.64711,1.81106,2.64711,3.24964v8.39125h3.22523v-8.13437c0-4.22581-2.28373-5.8442-4.7934-5.89558"/><path id="path33" class="cls-3" d="M25.0338,109.66877c3.31386.045,4.40563-1.80207,4.40563-1.80207l.167,1.61582h2.994V95.63239H29.11832v8.40025c-.01284,1.78537-1.02755,3.26248-2.99275,3.26248a2.99348,2.99348,0,0,1-2.87715-3.26248V95.63239H19.76759v8.14336c0,4.22324,2.76155,5.86091,5.26621,5.893"/><path id="path35" class="cls-3" d="M69.23144,106.7685a6.94169,6.94169,0,0,1-2.32484,2.09492,7.36885,7.36885,0,0,1-3.72488.94792,7.18355,7.18355,0,0,1-7.23141-7.21728,6.89561,6.89561,0,0,1,2.40191-5.35612,6.99655,6.99655,0,0,1,4.81665-1.87528,7.46068,7.46068,0,0,1,3.712.97617,6.99158,6.99158,0,0,1,2.33768,2.06795L66.624,100.26922a3.66928,3.66928,0,0,0-.62937-1.00186,3.38833,3.38833,0,0,0-2.74871-1.29729,3.43633,3.43633,0,0,0-2.73586,1.29729,5.03476,5.03476,0,0,0-1.09178,3.3267,5.14588,5.14588,0,0,0,1.07893,3.37809,3.54465,3.54465,0,0,0,5.47173-.01285,3.90725,3.90725,0,0,0,.65506-1.05324l2.60742,1.86244"/><path id="path37" class="cls-3" d="M172.51339,107.64192a1.08524,1.08524,0,0,1-1.02754-1.07893V97.98292h-3.73773v1.65693h1.23306v7.5782a2.10585,2.10585,0,0,0,1.99089,2.08337h14.2573v-1.6595h-12.716m6.03688-11.36731c-1.156-.71929-2.312-1.28444-2.312-1.28444l-.89911,1.14315.89911.78351h-3.33955v9.95442h.64222a1.44886,1.44886,0,0,0,1.54133-1.50279v-1.37435h2.69733v2.87714h.64222a1.37627,1.37627,0,0,0,1.54133-1.50279v-1.37435h2.69732v.68075c0,.32111-.38532.53946-.77066.53946h-1.02756l.51378,1.65693h1.66978a1.98874,1.98874,0,0,0,1.92666-1.99088v-6.602a1.37566,1.37566,0,0,0-1.28444-1.36151h-2.69732l3.468-2.08079V92.92222H172.77029v1.65693h8.47731l-2.69733,1.69546m-.77066,6.12679h-2.69733v-1.11747h2.69733v1.11747m0-2.71017h-2.69733V98.57376h2.69733v1.11747m4.88087,2.71017h-2.69732v-1.11747h2.69732v1.11747m-2.69732-3.82764h2.69732v1.11747h-2.69732V98.57376m-8.092-2.62026a13.7296,13.7296,0,0,0-2.65879-2.6588l-1.29728.93765,2.18355,3.00559,1.77252-1.28444"/><path id="path39" class="cls-3" d="M157.11294,103.62162l-1.11747.30826V94.64337a1.47922,1.47922,0,0,0-1.4-1.65693H148.687v1.65693h4.93226v2.56888h-2.01658V95.504h-2.23492v10.28837l-.989.28258v1.86116l5.24052-1.47583v3.36267h.9248c.78351,0,1.27159-.4624,1.45141-1.34609v-2.67164l1.11747-.32111v-1.86244m-3.49368.97617-2.01658.56516v-2.59458h2.01658v2.02942m0-3.68635h-2.01658V98.86918h2.01658v2.04226m9.13238,1.25876H165.616v-1.65693h-3.19827v-2.556H165.616V96.31314h-2.0808l1.901-2.37621-1.79822-1.29729-2.37622,3.6735h-1.69546l1.38719-1.00186a25.71168,25.71168,0,0,0-2.20923-2.67164l-1.323.78351,1.69547,2.89h-2.08079v1.64409h2.76155v2.556h-2.76155v1.65693h2.45327l-2.90283,7.44591h1.2459a1.84681,1.84681,0,0,0,1.60556-1.05325l1.77253-4.44031,2.45328,5.49356h2.42759l-3.33954-7.44591"/><path id="path41" class="cls-3" d="M124.334,94.95164h-5.446v-2.312h-2.82578v2.312h-3.5579v1.66977h3.5579v6.75616h-4.41847V94.95164h-2.83862v10.09571h7.25709v4.77555h.44956c1.59271-.04752,2.312-.75011,2.37622-1.9562v-2.81935h4.791a2.46765,2.46765,0,0,0,2.45328-2.35053V96.6471a1.81092,1.81092,0,0,0-1.79821-1.69546m-1.0404,7.35985a1.06346,1.06346,0,0,1-1.06609,1.06608H118.888V96.62141h4.40563v5.69008"/><path id="path43" class="cls-3" d="M143.93456,92.92222H132.16908v1.65693h10.95629v12.03522a1.08323,1.08323,0,0,1-1.07893,1.07636H131.29566V92.92222h-2.60741v16.428h14.68117a2.36043,2.36043,0,0,0,2.36337-2.36338V94.72044a1.80351,1.80351,0,0,0-1.79823-1.79822M142.252,104.37944H140.9932l.83488-1.02756a18.83963,18.83963,0,0,0-1.978-1.55417l-1.0147,1.01471,1.42572,1.567h-1.91381V101.605h3.84047V99.94811h-3.84047V97.893h3.84047V96.23608H132.2333V97.893H135.727v2.0551H132.2333V101.605H135.727v2.7744h-3.5579v1.65693H142.252v-1.65693"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#d61920;}.cls-3{fill:#231f20;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><g id="g7"><path id="path9" class="cls-2" d="M128.13594,59.24415l5.78-5.79283-4.61116-4.5983,4.61116-4.61115-5.78-5.78-4.61115,4.5983-3.04413-3.04412a12.4928,12.4928,0,1,0,0,17.66107c1.4-1.3872,3.04413-3.04413,3.04413-3.04413l4.61115,4.61114m-13.44811-7.347a4.305,4.305,0,1,1,0-6.08825c1.37435,1.36151,3.04413,3.04412,3.04413,3.04412l-3.04413,3.04413m76.96375-11.88108a12.55877,12.55877,0,0,0-17.72529,0c-1.4129,1.4-3.01845,3.04412-3.01845,3.04412l-4.59829-4.5983-5.79284,5.78,4.61114,4.61115-4.61114,4.5983,5.79284,5.79283,4.59829-4.61114s1.60555,1.65693,3.01845,3.04413a12.55879,12.55879,0,0,0,17.72529,0,12.63926,12.63926,0,0,0,0-17.66107m-5.78,11.88108a4.42022,4.42022,0,0,1-6.16532,0c-1.28444-1.37436-2.95422-3.04413-2.95422-3.04413s1.66978-1.68261,2.95422-3.04412a4.396,4.396,0,0,1,6.16532,0,4.58609,4.58609,0,0,1,0,6.08825M153.067,48.853s13.56371-13.57655,14.92521-14.92522a12.49735,12.49735,0,0,0-17.67392-17.67391C148.40443,18.16771,147.287,19.298,147.287,19.298s-1.14315-1.1303-3.04412-3.04412A12.49735,12.49735,0,1,0,126.56892,33.9278L141.49413,48.853s-13.57655,13.56371-14.92521,14.91237a12.49735,12.49735,0,1,0,17.67392,17.67392c1.901-1.91382,3.04412-3.04413,3.04412-3.04413s1.11747,1.13031,3.03128,3.04413a12.49735,12.49735,0,0,0,17.67392-17.67392C166.63066,62.41673,153.067,48.853,153.067,48.853m-20.7052-20.718A4.305,4.305,0,1,1,138.45,22.04672l3.04413,3.04413L136.883,29.702l5.79284,5.78,4.61114-4.59831,4.5983,4.59831,5.79284-5.78L153.067,25.09085l3.04413-3.04413a4.305,4.305,0,0,1,6.08825,6.08826c-1.75968,1.77253-14.97659,14.98943-14.97659,14.98943s-13.10131-13.2169-14.861-14.98943m29.83758,47.5115a4.30252,4.30252,0,0,1-6.08825,0L153.067,72.60235l4.61115-4.61115-5.79284-5.78-4.5983,4.5983-4.61114-4.5983-5.79284,5.78,4.61115,4.61115L138.45,75.64648a4.305,4.305,0,1,1-6.08825-6.08826c1.75968-1.75968,14.861-14.98943,14.861-14.98943s13.21691,13.22975,14.97659,14.98943a4.30253,4.30253,0,0,1,0,6.08826"/><path id="path11" class="cls-3" d="M81.76759,75.23545V76.841a6.2696,6.2696,0,0,0-4.53408-1.9652,6.43865,6.43865,0,0,0-4.868,2.04227,7.26347,7.26347,0,0,0-1.95236,5.17629,7.41007,7.41007,0,0,0,1.95236,5.22768,6.63706,6.63706,0,0,0,9.40211.20551V88.979h3.36523V75.23545H81.76759m-.95049,10.07A3.92,3.92,0,0,1,77.82435,86.5a3.75037,3.75037,0,0,1-2.87715-1.23307,4.59046,4.59046,0,0,1-1.11746-3.2111,4.46773,4.46773,0,0,1,1.14315-3.08266A3.75841,3.75841,0,0,1,77.85,77.753a3.838,3.838,0,0,1,2.96706,1.22022,4.95613,4.95613,0,0,1,0,6.3323"/><path id="path13" class="cls-3" d="M35.42108,69.01876h3.48983v7.79656a5.07464,5.07464,0,0,1,4.014-1.79822c2.50967,0,4.7934,1.66978,4.7934,5.8699v8.169h-3.179V80.6558c0-1.43858-.58314-3.26248-2.64325-3.26248-1.964,0-2.97361,1.47711-2.98517,3.26248v8.40025H35.42108V69.01876"/><path id="path15" class="cls-3" d="M34.16361,85.63943a8.84381,8.84381,0,0,1-2.93495,2.64595,9.40054,9.40054,0,0,1-4.69206,1.20738,8.865,8.865,0,0,1-6.4479-2.6588,9.10759,9.10759,0,0,1,.3468-13.2169,8.83518,8.83518,0,0,1,6.08825-2.37622,9.39181,9.39181,0,0,1,4.67537,1.23306A8.91664,8.91664,0,0,1,34.15847,75.107l-2.994,2.145a5.28278,5.28278,0,0,0-.86571-1.37435,5.01949,5.01949,0,0,0-7.58977.02569,7.56547,7.56547,0,0,0,0,9.01678,4.7079,4.7079,0,0,0,3.76341,1.734,4.79577,4.79577,0,0,0,3.79681-1.77253,5.29148,5.29148,0,0,0,.89526-1.4s2.22594,1.59271,2.99917,2.15786"/><path id="path17" class="cls-3" d="M63.97807,75.0171c-3.31386-.05138-4.39279,1.79822-4.39279,1.79822l-.167-1.6184H56.42555V89.0432h3.468V80.643a2.97925,2.97925,0,0,1,2.99275-3.26248c2.068,0,2.67164,1.83675,2.67164,3.26248V89.0432H68.769V80.887c0-4.213-2.28631-5.85706-4.791-5.8699"/><path id="path19" class="cls-2" d="M50.336,89.0432h3.25606V75.15839H50.336Z"/><path id="path21" class="cls-2" d="M51.94285,73.7455a1.93426,1.93426,0,1,1,.02826,0h-.02826"/><path id="path23" class="cls-2" d="M51.94285,94.19381a1.80031,1.80031,0,0,1-1.88556-1.81106,1.91618,1.91618,0,0,1,3.83149,0,1.80923,1.80923,0,0,1-1.91767,1.81106h-.02826"/><path id="path25" class="cls-3" d="M101.27826,95.52963a5.82122,5.82122,0,0,0-4.7139,2.145,4.04358,4.04358,0,0,0-3.59644-2.145,4.981,4.981,0,0,0-4.213,1.78538l-.1156-1.68262H85.49247v13.85013H88.999V101.1298c.01284-1.78537.95048-3.23679,2.7487-3.23679,1.88813,0,2.44044,1.81106,2.44044,3.24963v8.33988h3.17257v-8.16c.01285-2.32484,1.09178-3.42946,2.69733-3.42946,1.901,0,2.44044,1.81106,2.44044,3.24963v8.33988h3.17257v-8.10868c0-4.18728-2.10648-5.79283-4.39279-5.84421"/><path id="path27" class="cls-2" d="M50.336,109.48252h3.25606V95.63624H50.336Z"/><path id="path29" class="cls-3" d="M76.617,95.32412a7.28758,7.28758,0,0,1,3.64781.97618,7.19357,7.19357,0,0,1,2.67164,9.87736,6.79065,6.79065,0,0,1-2.6331,2.63952,7.10618,7.10618,0,0,1-3.67351.9582,6.85364,6.85364,0,0,1-5.0607-2.10777A7.2452,7.2452,0,0,1,76.617,95.32412m.25689,2.41475a3.466,3.466,0,0,0-2.7744,1.34867,5.3146,5.3146,0,0,0-1.11746,3.48083,5.40413,5.40413,0,0,0,1.10462,3.50653,3.53845,3.53845,0,0,0,5.54879-.01284,5.28081,5.28081,0,0,0,1.11746-3.49369,5.38579,5.38579,0,0,0-1.09178-3.49368,3.49788,3.49788,0,0,0-2.78723-1.33582"/><path id="path31" class="cls-3" d="M42.92492,95.45257c-3.30115-.03854-4.39164,1.79822-4.39164,1.79822l-.167-1.6184H35.371v13.85013h3.48469v-8.39125a2.95244,2.95244,0,0,1,2.9903-3.24964c2.055,0,2.64711,1.81106,2.64711,3.24964v8.39125h3.22523v-8.13437c0-4.22581-2.28373-5.8442-4.7934-5.89558"/><path id="path33" class="cls-3" d="M25.0338,109.66877c3.31386.045,4.40563-1.80207,4.40563-1.80207l.167,1.61582h2.994V95.63239H29.11832v8.40025c-.01284,1.78537-1.02755,3.26248-2.99275,3.26248a2.99348,2.99348,0,0,1-2.87715-3.26248V95.63239H19.76759v8.14336c0,4.22324,2.76155,5.86091,5.26621,5.893"/><path id="path35" class="cls-3" d="M69.23144,106.7685a6.94169,6.94169,0,0,1-2.32484,2.09492,7.36885,7.36885,0,0,1-3.72488.94792,7.18355,7.18355,0,0,1-7.23141-7.21728,6.89561,6.89561,0,0,1,2.40191-5.35612,6.99655,6.99655,0,0,1,4.81665-1.87528,7.46068,7.46068,0,0,1,3.712.97617,6.99158,6.99158,0,0,1,2.33768,2.06795L66.624,100.26922a3.66928,3.66928,0,0,0-.62937-1.00186,3.38833,3.38833,0,0,0-2.74871-1.29729,3.43633,3.43633,0,0,0-2.73586,1.29729,5.03476,5.03476,0,0,0-1.09178,3.3267,5.14588,5.14588,0,0,0,1.07893,3.37809,3.54465,3.54465,0,0,0,5.47173-.01285,3.90725,3.90725,0,0,0,.65506-1.05324l2.60742,1.86244"/><path id="path37" class="cls-3" d="M172.51339,107.64192a1.08524,1.08524,0,0,1-1.02754-1.07893V97.98292h-3.73773v1.65693h1.23306v7.5782a2.10585,2.10585,0,0,0,1.99089,2.08337h14.2573v-1.6595h-12.716m6.03688-11.36731c-1.156-.71929-2.312-1.28444-2.312-1.28444l-.89911,1.14315.89911.78351h-3.33955v9.95442h.64222a1.44886,1.44886,0,0,0,1.54133-1.50279v-1.37435h2.69733v2.87714h.64222a1.37627,1.37627,0,0,0,1.54133-1.50279v-1.37435h2.69732v.68075c0,.32111-.38532.53946-.77066.53946h-1.02756l.51378,1.65693h1.66978a1.98874,1.98874,0,0,0,1.92666-1.99088v-6.602a1.37566,1.37566,0,0,0-1.28444-1.36151h-2.69732l3.468-2.08079V92.92222H172.77029v1.65693h8.47731l-2.69733,1.69546m-.77066,6.12679h-2.69733v-1.11747h2.69733v1.11747m0-2.71017h-2.69733V98.57376h2.69733v1.11747m4.88087,2.71017h-2.69732v-1.11747h2.69732v1.11747m-2.69732-3.82764h2.69732v1.11747h-2.69732V98.57376m-8.092-2.62026a13.7296,13.7296,0,0,0-2.65879-2.6588l-1.29728.93765,2.18355,3.00559,1.77252-1.28444"/><path id="path39" class="cls-3" d="M157.11294,103.62162l-1.11747.30826V94.64337a1.47922,1.47922,0,0,0-1.4-1.65693H148.687v1.65693h4.93226v2.56888h-2.01658V95.504h-2.23492v10.28837l-.989.28258v1.86116l5.24052-1.47583v3.36267h.9248c.78351,0,1.27159-.4624,1.45141-1.34609v-2.67164l1.11747-.32111v-1.86244m-3.49368.97617-2.01658.56516v-2.59458h2.01658v2.02942m0-3.68635h-2.01658V98.86918h2.01658v2.04226m9.13238,1.25876H165.616v-1.65693h-3.19827v-2.556H165.616V96.31314h-2.0808l1.901-2.37621-1.79822-1.29729-2.37622,3.6735h-1.69546l1.38719-1.00186a25.71168,25.71168,0,0,0-2.20923-2.67164l-1.323.78351,1.69547,2.89h-2.08079v1.64409h2.76155v2.556h-2.76155v1.65693h2.45327l-2.90283,7.44591h1.2459a1.84681,1.84681,0,0,0,1.60556-1.05325l1.77253-4.44031,2.45328,5.49356h2.42759l-3.33954-7.44591"/><path id="path41" class="cls-3" d="M124.334,94.95164h-5.446v-2.312h-2.82578v2.312h-3.5579v1.66977h3.5579v6.75616h-4.41847V94.95164h-2.83862v10.09571h7.25709v4.77555h.44956c1.59271-.04752,2.312-.75011,2.37622-1.9562v-2.81935h4.791a2.46765,2.46765,0,0,0,2.45328-2.35053V96.6471a1.81092,1.81092,0,0,0-1.79821-1.69546m-1.0404,7.35985a1.06346,1.06346,0,0,1-1.06609,1.06608H118.888V96.62141h4.40563v5.69008"/><path id="path43" class="cls-3" d="M143.93456,92.92222H132.16908v1.65693h10.95629v12.03522a1.08323,1.08323,0,0,1-1.07893,1.07636H131.29566V92.92222h-2.60741v16.428h14.68117a2.36043,2.36043,0,0,0,2.36337-2.36338V94.72044a1.80351,1.80351,0,0,0-1.79823-1.79822M142.252,104.37944H140.9932l.83488-1.02756a18.83963,18.83963,0,0,0-1.978-1.55417l-1.0147,1.01471,1.42572,1.567h-1.91381V101.605h3.84047V99.94811h-3.84047V97.893h3.84047V96.23608H132.2333V97.893H135.727v2.0551H132.2333V101.605H135.727v2.7744h-3.5579v1.65693H142.252v-1.65693"/></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/city-of-montreal/city-of-montreal_featured_logo.svg b/content/en/case-studies/city-of-montreal/city-of-montreal_featured_logo.svg
index 1d90a6536f..44ac9b0b1d 100644
--- a/content/en/case-studies/city-of-montreal/city-of-montreal_featured_logo.svg
+++ b/content/en/case-studies/city-of-montreal/city-of-montreal_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#e6372e;}.cls-3{fill:#070708;}.cls-4{fill:#060607;}.cls-5{fill:#09090a;}.cls-6{fill:#fdf8f8;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M174.7331,79.063a5.29278,5.29278,0,0,1-2.48424-2.40624,6.05586,6.05586,0,0,1-.746-3.545c.18463-1.11019-.24237-1.06687-1.0716-1.03492a6.779,6.779,0,0,1-7.073-7.77979,6.398,6.398,0,0,1,2.23632-3.98911c.6433-.52644.61488-.81785.00853-1.40172-2.988-2.87715-3.16895-6.94063-.46508-9.74752a6.54235,6.54235,0,0,1,5.70066-2.01454c.59833.06772.82125-.00057.71489-.66525a6.82983,6.82983,0,0,1,3.99524-7.06773,6.76016,6.76016,0,0,1,7.84308,1.779c.49791.51259.77461.62169,1.33971.01359a6.71168,6.71168,0,0,1,11.79137,4.96284c-.05075.921.15855,1.03967,1.03654.95488a6.77552,6.77552,0,0,1,6.76164,4.16268,6.52891,6.52891,0,0,1-1.68251,7.51236c-.75219.66029-.65593.96758.01876,1.57127a6.588,6.588,0,0,1,1.76326,7.29366,6.6751,6.6751,0,0,1-6.59653,4.40928c-1.106-.05773-1.38882.15191-1.29533,1.27611a6.39262,6.39262,0,0,1-2.375,5.42224c-.22528.20332.29229-.29659,0,0-1.67387,1.69851-5.35054,1.33544-7.57943.4876-.90454-.34407-1.56463-1.47678-2.38256-1.63609-.96562-.18809-1.39018,1.27061-2.30866,1.6792-.07145.03179-.11333.10413-.18961.1312A8.74048,8.74048,0,0,1,174.7331,79.063Zm10.51232-28.33053q0,2.45925.00059,4.91851c.00362,2.08055.71058,2.778,2.83666,2.78253q4.06993.00872,8.13995-.00071a9.51892,9.51892,0,0,0,2.69814-.16721,4.43021,4.43021,0,0,0,3.47836-3.58146,4.53295,4.53295,0,0,0-7.075-4.5649A1.91974,1.91974,0,0,0,194.27,52.00951a2.59651,2.59651,0,0,1-2.77231,2.88755,2.65076,2.65076,0,0,1-2.8207-2.7522,2.76226,2.76226,0,0,1,3.03826-2.81208,1.64492,1.64492,0,0,0,1.631-.8134,4.51223,4.51223,0,0,0,.20385-5.39041,4.53377,4.53377,0,0,0-8.29927,2.56209C185.22875,47.37126,185.24632,49.052,185.24542,50.73247Zm7.67363,10.02636c-1.80707,0-3.61443-.01933-5.42113.00619a2.04863,2.04863,0,0,0-2.24323,2.20868c-.02513,3.52124-.04737,7.04337.00512,10.564a4.59356,4.59356,0,0,0,4.52671,4.43528,4.64457,4.64457,0,0,0,4.647-4.33789,5.21932,5.21932,0,0,0-1.20127-3.2721c-.54173-.7776-1.254-.55374-1.96878-.60237A2.63624,2.63624,0,0,1,188.76733,66.72a2.669,2.669,0,0,1,2.76486-2.55634,2.82718,2.82718,0,0,1,2.83413,2.93081c-.1399,1.12018.47435,1.5794,1.20282,2.02024a4.5365,4.5365,0,1,0,2.27829-8.35426C196.20474,60.74723,194.56185,60.75781,192.91905,60.75883Zm-17.54754.003c-1.84857,0-3.69853-.04493-5.54531.01255a4.69721,4.69721,0,0,0-4.13243,3.49468,4.57106,4.57106,0,0,0,2.13822,4.95359,4.48877,4.48877,0,0,0,5.45319-.63892,1.49447,1.49447,0,0,0,.53574-1.27327,2.80235,2.80235,0,1,1,2.50089,2.47929,1.50608,1.50608,0,0,0-1.36813.57687,4.64555,4.64555,0,0,0-.53314,5.4781,4.57308,4.57308,0,0,0,8.471-2.28763c.04339-3.52171.0273-7.04443.00545-10.56654a2.08892,2.08892,0,0,0-2.22627-2.22658C178.90455,60.7428,177.13792,60.75882,175.37151,60.76187Zm7.53217-9.914c0-1.76027.03138-3.52125-.0086-5.28062a4.68941,4.68941,0,0,0-3.0932-4.19154,4.78317,4.78317,0,0,0-5.18575,1.62294,4.60765,4.60765,0,0,0-.15038,5.0973c.42136.63842.82242,1.35422,1.90013,1.24021a2.77426,2.77426,0,0,1,3.10278,2.76161,2.74172,2.74172,0,0,1-2.90273,2.82144,2.69974,2.69974,0,0,1-2.72371-3.085,1.43677,1.43677,0,0,0-.59514-1.35538,4.50161,4.50161,0,0,0-5.58-.42534,4.51864,4.51864,0,0,0,2.42439,8.32222c3.52989.066,7.06217.044,10.59291.00775a2.08,2.08,0,0,0,2.21484-2.25484C182.92152,54.36863,182.90464,52.60815,182.90368,50.84787Z"/><path class="cls-3" d="M13.91124,50.53455c0,7.12823-.03528,14.25679.033,21.38436.01208,1.26107-.31832,1.59473-1.55832,1.53633-2.224-.10478-2.22759-.02792-2.22759-2.20507,0-8.031.03208-16.06235-.0338-24.09286-.01015-1.23751.35266-1.51529,1.50028-1.4298a39.56436,39.56436,0,0,0,4.18971.01085c.64168-.02043.89623.20078,1.11832.8127Q20.6553,56.80788,24.46,67.035c.07751.20965.08149.5.551.645.62916-1.63209,1.28125-3.26985,1.8937-4.92222q3.02523-8.16195,6.01119-16.33826a.85915.85915,0,0,1,.97359-.67656c1.5613.02561,3.12414.03917,4.68461-.00486.6677-.01884.816.22312.81472.84743q-.02709,12.96837-.00034,25.93679c.00147.69909-.23616.89506-.92494.919-3.4877.1211-3.487.1403-3.487-3.25969q0-9.09638-.00026-18.19277c0-.2868.0031-.57384-.00751-.86032-.00738-.19937-.005-.43332-.29431-.42937-.20555.00281-.19911.18377-.25479.33808C31.9097,57.9926,29.36873,64.937,26.8946,71.90491c-.3959,1.115-.87267,1.63869-2.1636,1.55628-2.09449-.13373-2.1113-.032-2.81871-1.95346q-3.66385-9.95193-7.31608-19.90812c-.13578-.36937-.29073-.73174-.43676-1.09738Z"/><path class="cls-4" d="M68.48078,58.67439c1.23375-1.90166,2.37041-3.42867,4.24024-4.19665a7.85313,7.85313,0,0,1,3.73433-.57907A4.66174,4.66174,0,0,1,80.89457,58.39c.18458,4.78552.0945,9.5815.12433,14.3731.0029.46551-.20048.66646-.66645.66139-1.027-.01114-2.0546-.0189-3.08134.00206-.88325.018-.704-.613-.7051-1.11365-.00762-3.56381-.00091-7.12766-.0074-10.69147a9.65726,9.65726,0,0,0-.083-1.71487c-.20546-1.12-.32046-2.38821-1.64325-2.793a3.4639,3.4639,0,0,0-3.69405,1.0647c-1.96476,2.09489-2.544,4.71873-2.64094,7.46471-.07943,2.25021-.04666,4.506-.00019,6.75808.01612.78077-.17355,1.11781-1.01436,1.03485-1.09622-.10816-2.519.43839-3.21814-.20815-.70867-.65537-.2161-2.08713-.22191-3.17566-.02575-4.83356.00884-9.6675-.02928-14.5009-.007-.88775.11384-1.35183,1.16345-1.23282,1.04931.119,2.44378-.324,3.08829.20468.67988.55773.14472,1.9931.21322,3.04233C68.49437,57.80957,68.48078,58.05563,68.48078,58.67439Z"/><path class="cls-5" d="M142.96981,71.03a7.80331,7.80331,0,0,1-4.40537,2.65425,7.3545,7.3545,0,0,1-3.76049-.2927,4.56424,4.56424,0,0,1-3.19945-3.70665,4.70511,4.70511,0,0,1,2.30857-4.91383,14.92043,14.92043,0,0,1,6.6773-1.88572c2.97238-.32332,2.38484.38635,2.4284-2.7245a6.96147,6.96147,0,0,0-.53155-3.00016,2.39753,2.39753,0,0,0-2.436-1.52227,2.6333,2.6333,0,0,0-2.7,1.74391c-.04.11586-.07038.235-.10557.35247-.6238,2.08238-.62382,2.08238-2.8599,2.0824-2.46714,0-2.58758-.20942-1.60986-2.51643a4.65783,4.65783,0,0,1,2.84365-2.70051,13.10087,13.10087,0,0,1,7.86268-.3131,4.74446,4.74446,0,0,1,3.87294,4.62075c.34286,4.57661.07114,9.16416.15658,13.746.01112.59648-.24876.795-.812.77807a15.38129,15.38129,0,0,0-2.33824.01282c-1.13055.14-1.48991-.32248-1.33523-1.37322A6.69467,6.69467,0,0,0,142.96981,71.03Zm.07445-4.962c-.33906-.357.50391-1.453-.477-1.46794a6.99167,6.99167,0,0,0-5.42793,1.82132,2.95186,2.95186,0,0,0-.191,3.8297,2.65143,2.65143,0,0,0,3.34173.60219C142.27764,69.95374,143.07423,68.3263,143.04426,66.06794Z"/><path class="cls-5" d="M60.75624,63.94219a12.07765,12.07765,0,0,1-.86855,5.03763,7.17577,7.17577,0,0,1-4.95119,4.40366,12.07268,12.07268,0,0,1-6.92313-.09654,7.07163,7.07163,0,0,1-4.80878-4.84843,15.33548,15.33548,0,0,1-.13872-8.8265c1.11836-4.08635,4.80883-6.21022,9.78476-5.6986,4.84831.4985,7.50687,3.33007,7.90014,8.433C60.79154,62.87533,60.75624,63.41011,60.75624,63.94219Zm-4.75178-.11451a18.22689,18.22689,0,0,0-.89307-5.65219,3.58422,3.58422,0,0,0-3.28821-2.53538,3.46612,3.46612,0,0,0-3.39843,1.977,6.66574,6.66574,0,0,0-.80681,2.67677c-.27114,3.17443-.60373,6.37032.67532,9.423a3.41114,3.41114,0,0,0,3.53413,2.33372,3.65833,3.65833,0,0,0,3.31843-2.67145A18.48479,18.48479,0,0,0,56.00446,63.82768Z"/><path class="cls-5" d="M122.99881,61.73207c-1.76771.00011-3.53621.031-5.30271-.01478-.7297-.01892-.86138.19837-.78929.90558a12.4082,12.4082,0,0,0,1.97156,5.87064c1.90664,2.79671,5.17778,3.76169,8.75535,2.70306.33078-.09788.91691-.69766,1.09029-.00572.14132.56408.46379,1.46184-.53243,1.76483-3.63632,1.10594-7.26549,1.35124-10.80578-.33026a8.26488,8.26488,0,0,1-4.37857-5.36421,14.11,14.11,0,0,1-.15136-7.76545,6.88982,6.88982,0,0,1,6.236-5.44685c2.94272-.37221,5.8481-.40236,8.20618,1.85637,1.47675,1.41451,1.73746,3.2738,1.8841,5.17653.05559.7214-.42041.652-.88029.6513Q125.65035,61.72885,122.99881,61.73207Zm-2.09491-1.941c1.06525,0,2.1306-.00875,3.19569.00424.4346.00531.67473-.09588.68661-.60819a3.73127,3.73127,0,0,0-2.28746-3.33894,4.0592,4.0592,0,0,0-5.3484,3.061c-.14245.62317-.03246.91867.6811.89225C118.8543,59.76353,119.87963,59.79175,120.9039,59.791Z"/><path class="cls-3" d="M87.12567,63.50661c-.00076-1.96628-.04331-3.93387.018-5.89824.02863-.91663-.26435-1.29522-1.18686-1.17787a7.48608,7.48608,0,0,1-.98526.00617,1.19928,1.19928,0,0,1-1.2038-1.80355c.21242-.46733.63231-.27748.9644-.287,2.39256-.06849,2.527-.0715,2.34674-2.46962a2.664,2.664,0,0,1,1.94922-3.15279c.84828-.28765,1.70812-1.45551,2.32344-1.05093.65945.43359.18022,1.73038.21914,2.64809.04509,1.06316.04252,2.131-.00138,3.19425-.02608.63193.16165.86269.8237.83712,1.27179-.04913,2.54994.03943,3.81947-.0331.84349-.0482.92288.33856.91408,1.01768-.00892.689-.02038,1.17791-.95485,1.1191-1.22772-.07727-2.46452.00171-3.69642-.02776-.57826-.01383-.91117.07274-.90549.77744.0314,3.89121-.02329,7.78362.05058,11.67376.03893,2.05024,1.44076,2.8696,3.86975,2.53332.33037-.04574,1.09421-.73723,1.0831.19976-.00818.6885.78755,1.88887-.83027,2.05275a17.08918,17.08918,0,0,1-5.26933-.165,3.91427,3.91427,0,0,1-3.3405-4.09493C87.10105,67.43956,87.12642,65.47288,87.12567,63.50661Z"/><path class="cls-5" d="M151.92425,59.43486c0-4.17608.02312-8.3524-.01885-12.52807-.00869-.86527.13461-1.29642,1.12121-1.16962,1.08407.13934,2.50074-.44845,3.18884.24171.63285.63472.17655,2.027.1784,3.0839.01351,7.69708-.01218,15.39429.03029,23.09116.00571,1.03426-.29978,1.3104-1.3149,1.296-3.18448-.04512-3.185-.005-3.185-3.20638Q151.92421,64.83921,151.92425,59.43486Z"/><path class="cls-5" d="M104.57084,58.39812c.601-.80063,1.16722-1.63035,1.811-2.39515a6.13919,6.13919,0,0,1,3.81845-2.04536c.59015-.102.8721.0429.82945.66408-.00841.12232.00055.24574-.00108.36862-.01242.94119.26248,2.0241-.11475,2.78595-.42549.85934-1.687.4282-2.56323.66986a4.85269,4.85269,0,0,0-3.97009,4.95332c-.15535,2.85955-.11574,5.73294-.06506,8.59858.01895,1.07188-.1941,1.49349-1.3929,1.46-3.09616-.08641-3.09792-.024-3.09791-3.06065,0-4.998.02125-9.99625-.02018-14.99395-.00719-.867.2363-1.154,1.09793-1.082a17.90006,17.90006,0,0,0,2.5866.00291c.67817-.04194.83815.23535.81394.8535-.0413,1.0541-.01138,2.111-.01138,3.16667Z"/><path class="cls-5" d="M126.456,45.7558c-1.46,1.80824-2.71414,3.37234-3.98283,4.92462a6.29714,6.29714,0,0,1-3.29628.40063c-.3486-.17529-.17807-.389-.0635-.59738.78806-1.43332,1.59251-2.85794,2.35835-4.30292a.6673.6673,0,0,1,.658-.42621C123.47124,45.75753,124.81276,45.7558,126.456,45.7558Z"/><path class="cls-6" d="M143.04426,66.06794c.03,2.25836-.76662,3.8858-2.75419,4.78527a2.65143,2.65143,0,0,1-3.34173-.60219,2.95186,2.95186,0,0,1,.191-3.8297A6.99167,6.99167,0,0,1,142.56731,64.6C143.54817,64.61491,142.7052,65.71089,143.04426,66.06794Z"/><path class="cls-6" d="M56.00446,63.82768a18.48479,18.48479,0,0,1-.85864,5.55147,3.65833,3.65833,0,0,1-3.31843,2.67145,3.41114,3.41114,0,0,1-3.53413-2.33372c-1.279-3.05264-.94646-6.24853-.67532-9.423a6.66574,6.66574,0,0,1,.80681-2.67677,3.46612,3.46612,0,0,1,3.39843-1.977,3.58422,3.58422,0,0,1,3.28821,2.53538A18.22689,18.22689,0,0,1,56.00446,63.82768Z"/><path class="cls-6" d="M120.9039,59.79138c-1.02427.00037-2.0496-.02785-3.07246.01-.71356.02642-.82355-.26908-.6811-.89225a4.0592,4.0592,0,0,1,5.3484-3.061,3.73127,3.73127,0,0,1,2.28746,3.33894c-.01188.51231-.252.6135-.68661.60819C123.0345,59.78227,121.96915,59.791,120.9039,59.79138Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#e6372e;}.cls-3{fill:#070708;}.cls-4{fill:#060607;}.cls-5{fill:#09090a;}.cls-6{fill:#fdf8f8;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M174.7331,79.063a5.29278,5.29278,0,0,1-2.48424-2.40624,6.05586,6.05586,0,0,1-.746-3.545c.18463-1.11019-.24237-1.06687-1.0716-1.03492a6.779,6.779,0,0,1-7.073-7.77979,6.398,6.398,0,0,1,2.23632-3.98911c.6433-.52644.61488-.81785.00853-1.40172-2.988-2.87715-3.16895-6.94063-.46508-9.74752a6.54235,6.54235,0,0,1,5.70066-2.01454c.59833.06772.82125-.00057.71489-.66525a6.82983,6.82983,0,0,1,3.99524-7.06773,6.76016,6.76016,0,0,1,7.84308,1.779c.49791.51259.77461.62169,1.33971.01359a6.71168,6.71168,0,0,1,11.79137,4.96284c-.05075.921.15855,1.03967,1.03654.95488a6.77552,6.77552,0,0,1,6.76164,4.16268,6.52891,6.52891,0,0,1-1.68251,7.51236c-.75219.66029-.65593.96758.01876,1.57127a6.588,6.588,0,0,1,1.76326,7.29366,6.6751,6.6751,0,0,1-6.59653,4.40928c-1.106-.05773-1.38882.15191-1.29533,1.27611a6.39262,6.39262,0,0,1-2.375,5.42224c-.22528.20332.29229-.29659,0,0-1.67387,1.69851-5.35054,1.33544-7.57943.4876-.90454-.34407-1.56463-1.47678-2.38256-1.63609-.96562-.18809-1.39018,1.27061-2.30866,1.6792-.07145.03179-.11333.10413-.18961.1312A8.74048,8.74048,0,0,1,174.7331,79.063Zm10.51232-28.33053q0,2.45925.00059,4.91851c.00362,2.08055.71058,2.778,2.83666,2.78253q4.06993.00872,8.13995-.00071a9.51892,9.51892,0,0,0,2.69814-.16721,4.43021,4.43021,0,0,0,3.47836-3.58146,4.53295,4.53295,0,0,0-7.075-4.5649A1.91974,1.91974,0,0,0,194.27,52.00951a2.59651,2.59651,0,0,1-2.77231,2.88755,2.65076,2.65076,0,0,1-2.8207-2.7522,2.76226,2.76226,0,0,1,3.03826-2.81208,1.64492,1.64492,0,0,0,1.631-.8134,4.51223,4.51223,0,0,0,.20385-5.39041,4.53377,4.53377,0,0,0-8.29927,2.56209C185.22875,47.37126,185.24632,49.052,185.24542,50.73247Zm7.67363,10.02636c-1.80707,0-3.61443-.01933-5.42113.00619a2.04863,2.04863,0,0,0-2.24323,2.20868c-.02513,3.52124-.04737,7.04337.00512,10.564a4.59356,4.59356,0,0,0,4.52671,4.43528,4.64457,4.64457,0,0,0,4.647-4.33789,5.21932,5.21932,0,0,0-1.20127-3.2721c-.54173-.7776-1.254-.55374-1.96878-.60237A2.63624,2.63624,0,0,1,188.76733,66.72a2.669,2.669,0,0,1,2.76486-2.55634,2.82718,2.82718,0,0,1,2.83413,2.93081c-.1399,1.12018.47435,1.5794,1.20282,2.02024a4.5365,4.5365,0,1,0,2.27829-8.35426C196.20474,60.74723,194.56185,60.75781,192.91905,60.75883Zm-17.54754.003c-1.84857,0-3.69853-.04493-5.54531.01255a4.69721,4.69721,0,0,0-4.13243,3.49468,4.57106,4.57106,0,0,0,2.13822,4.95359,4.48877,4.48877,0,0,0,5.45319-.63892,1.49447,1.49447,0,0,0,.53574-1.27327,2.80235,2.80235,0,1,1,2.50089,2.47929,1.50608,1.50608,0,0,0-1.36813.57687,4.64555,4.64555,0,0,0-.53314,5.4781,4.57308,4.57308,0,0,0,8.471-2.28763c.04339-3.52171.0273-7.04443.00545-10.56654a2.08892,2.08892,0,0,0-2.22627-2.22658C178.90455,60.7428,177.13792,60.75882,175.37151,60.76187Zm7.53217-9.914c0-1.76027.03138-3.52125-.0086-5.28062a4.68941,4.68941,0,0,0-3.0932-4.19154,4.78317,4.78317,0,0,0-5.18575,1.62294,4.60765,4.60765,0,0,0-.15038,5.0973c.42136.63842.82242,1.35422,1.90013,1.24021a2.77426,2.77426,0,0,1,3.10278,2.76161,2.74172,2.74172,0,0,1-2.90273,2.82144,2.69974,2.69974,0,0,1-2.72371-3.085,1.43677,1.43677,0,0,0-.59514-1.35538,4.50161,4.50161,0,0,0-5.58-.42534,4.51864,4.51864,0,0,0,2.42439,8.32222c3.52989.066,7.06217.044,10.59291.00775a2.08,2.08,0,0,0,2.21484-2.25484C182.92152,54.36863,182.90464,52.60815,182.90368,50.84787Z"/><path class="cls-3" d="M13.91124,50.53455c0,7.12823-.03528,14.25679.033,21.38436.01208,1.26107-.31832,1.59473-1.55832,1.53633-2.224-.10478-2.22759-.02792-2.22759-2.20507,0-8.031.03208-16.06235-.0338-24.09286-.01015-1.23751.35266-1.51529,1.50028-1.4298a39.56436,39.56436,0,0,0,4.18971.01085c.64168-.02043.89623.20078,1.11832.8127Q20.6553,56.80788,24.46,67.035c.07751.20965.08149.5.551.645.62916-1.63209,1.28125-3.26985,1.8937-4.92222q3.02523-8.16195,6.01119-16.33826a.85915.85915,0,0,1,.97359-.67656c1.5613.02561,3.12414.03917,4.68461-.00486.6677-.01884.816.22312.81472.84743q-.02709,12.96837-.00034,25.93679c.00147.69909-.23616.89506-.92494.919-3.4877.1211-3.487.1403-3.487-3.25969q0-9.09638-.00026-18.19277c0-.2868.0031-.57384-.00751-.86032-.00738-.19937-.005-.43332-.29431-.42937-.20555.00281-.19911.18377-.25479.33808C31.9097,57.9926,29.36873,64.937,26.8946,71.90491c-.3959,1.115-.87267,1.63869-2.1636,1.55628-2.09449-.13373-2.1113-.032-2.81871-1.95346q-3.66385-9.95193-7.31608-19.90812c-.13578-.36937-.29073-.73174-.43676-1.09738Z"/><path class="cls-4" d="M68.48078,58.67439c1.23375-1.90166,2.37041-3.42867,4.24024-4.19665a7.85313,7.85313,0,0,1,3.73433-.57907A4.66174,4.66174,0,0,1,80.89457,58.39c.18458,4.78552.0945,9.5815.12433,14.3731.0029.46551-.20048.66646-.66645.66139-1.027-.01114-2.0546-.0189-3.08134.00206-.88325.018-.704-.613-.7051-1.11365-.00762-3.56381-.00091-7.12766-.0074-10.69147a9.65726,9.65726,0,0,0-.083-1.71487c-.20546-1.12-.32046-2.38821-1.64325-2.793a3.4639,3.4639,0,0,0-3.69405,1.0647c-1.96476,2.09489-2.544,4.71873-2.64094,7.46471-.07943,2.25021-.04666,4.506-.00019,6.75808.01612.78077-.17355,1.11781-1.01436,1.03485-1.09622-.10816-2.519.43839-3.21814-.20815-.70867-.65537-.2161-2.08713-.22191-3.17566-.02575-4.83356.00884-9.6675-.02928-14.5009-.007-.88775.11384-1.35183,1.16345-1.23282,1.04931.119,2.44378-.324,3.08829.20468.67988.55773.14472,1.9931.21322,3.04233C68.49437,57.80957,68.48078,58.05563,68.48078,58.67439Z"/><path class="cls-5" d="M142.96981,71.03a7.80331,7.80331,0,0,1-4.40537,2.65425,7.3545,7.3545,0,0,1-3.76049-.2927,4.56424,4.56424,0,0,1-3.19945-3.70665,4.70511,4.70511,0,0,1,2.30857-4.91383,14.92043,14.92043,0,0,1,6.6773-1.88572c2.97238-.32332,2.38484.38635,2.4284-2.7245a6.96147,6.96147,0,0,0-.53155-3.00016,2.39753,2.39753,0,0,0-2.436-1.52227,2.6333,2.6333,0,0,0-2.7,1.74391c-.04.11586-.07038.235-.10557.35247-.6238,2.08238-.62382,2.08238-2.8599,2.0824-2.46714,0-2.58758-.20942-1.60986-2.51643a4.65783,4.65783,0,0,1,2.84365-2.70051,13.10087,13.10087,0,0,1,7.86268-.3131,4.74446,4.74446,0,0,1,3.87294,4.62075c.34286,4.57661.07114,9.16416.15658,13.746.01112.59648-.24876.795-.812.77807a15.38129,15.38129,0,0,0-2.33824.01282c-1.13055.14-1.48991-.32248-1.33523-1.37322A6.69467,6.69467,0,0,0,142.96981,71.03Zm.07445-4.962c-.33906-.357.50391-1.453-.477-1.46794a6.99167,6.99167,0,0,0-5.42793,1.82132,2.95186,2.95186,0,0,0-.191,3.8297,2.65143,2.65143,0,0,0,3.34173.60219C142.27764,69.95374,143.07423,68.3263,143.04426,66.06794Z"/><path class="cls-5" d="M60.75624,63.94219a12.07765,12.07765,0,0,1-.86855,5.03763,7.17577,7.17577,0,0,1-4.95119,4.40366,12.07268,12.07268,0,0,1-6.92313-.09654,7.07163,7.07163,0,0,1-4.80878-4.84843,15.33548,15.33548,0,0,1-.13872-8.8265c1.11836-4.08635,4.80883-6.21022,9.78476-5.6986,4.84831.4985,7.50687,3.33007,7.90014,8.433C60.79154,62.87533,60.75624,63.41011,60.75624,63.94219Zm-4.75178-.11451a18.22689,18.22689,0,0,0-.89307-5.65219,3.58422,3.58422,0,0,0-3.28821-2.53538,3.46612,3.46612,0,0,0-3.39843,1.977,6.66574,6.66574,0,0,0-.80681,2.67677c-.27114,3.17443-.60373,6.37032.67532,9.423a3.41114,3.41114,0,0,0,3.53413,2.33372,3.65833,3.65833,0,0,0,3.31843-2.67145A18.48479,18.48479,0,0,0,56.00446,63.82768Z"/><path class="cls-5" d="M122.99881,61.73207c-1.76771.00011-3.53621.031-5.30271-.01478-.7297-.01892-.86138.19837-.78929.90558a12.4082,12.4082,0,0,0,1.97156,5.87064c1.90664,2.79671,5.17778,3.76169,8.75535,2.70306.33078-.09788.91691-.69766,1.09029-.00572.14132.56408.46379,1.46184-.53243,1.76483-3.63632,1.10594-7.26549,1.35124-10.80578-.33026a8.26488,8.26488,0,0,1-4.37857-5.36421,14.11,14.11,0,0,1-.15136-7.76545,6.88982,6.88982,0,0,1,6.236-5.44685c2.94272-.37221,5.8481-.40236,8.20618,1.85637,1.47675,1.41451,1.73746,3.2738,1.8841,5.17653.05559.7214-.42041.652-.88029.6513Q125.65035,61.72885,122.99881,61.73207Zm-2.09491-1.941c1.06525,0,2.1306-.00875,3.19569.00424.4346.00531.67473-.09588.68661-.60819a3.73127,3.73127,0,0,0-2.28746-3.33894,4.0592,4.0592,0,0,0-5.3484,3.061c-.14245.62317-.03246.91867.6811.89225C118.8543,59.76353,119.87963,59.79175,120.9039,59.791Z"/><path class="cls-3" d="M87.12567,63.50661c-.00076-1.96628-.04331-3.93387.018-5.89824.02863-.91663-.26435-1.29522-1.18686-1.17787a7.48608,7.48608,0,0,1-.98526.00617,1.19928,1.19928,0,0,1-1.2038-1.80355c.21242-.46733.63231-.27748.9644-.287,2.39256-.06849,2.527-.0715,2.34674-2.46962a2.664,2.664,0,0,1,1.94922-3.15279c.84828-.28765,1.70812-1.45551,2.32344-1.05093.65945.43359.18022,1.73038.21914,2.64809.04509,1.06316.04252,2.131-.00138,3.19425-.02608.63193.16165.86269.8237.83712,1.27179-.04913,2.54994.03943,3.81947-.0331.84349-.0482.92288.33856.91408,1.01768-.00892.689-.02038,1.17791-.95485,1.1191-1.22772-.07727-2.46452.00171-3.69642-.02776-.57826-.01383-.91117.07274-.90549.77744.0314,3.89121-.02329,7.78362.05058,11.67376.03893,2.05024,1.44076,2.8696,3.86975,2.53332.33037-.04574,1.09421-.73723,1.0831.19976-.00818.6885.78755,1.88887-.83027,2.05275a17.08918,17.08918,0,0,1-5.26933-.165,3.91427,3.91427,0,0,1-3.3405-4.09493C87.10105,67.43956,87.12642,65.47288,87.12567,63.50661Z"/><path class="cls-5" d="M151.92425,59.43486c0-4.17608.02312-8.3524-.01885-12.52807-.00869-.86527.13461-1.29642,1.12121-1.16962,1.08407.13934,2.50074-.44845,3.18884.24171.63285.63472.17655,2.027.1784,3.0839.01351,7.69708-.01218,15.39429.03029,23.09116.00571,1.03426-.29978,1.3104-1.3149,1.296-3.18448-.04512-3.185-.005-3.185-3.20638Q151.92421,64.83921,151.92425,59.43486Z"/><path class="cls-5" d="M104.57084,58.39812c.601-.80063,1.16722-1.63035,1.811-2.39515a6.13919,6.13919,0,0,1,3.81845-2.04536c.59015-.102.8721.0429.82945.66408-.00841.12232.00055.24574-.00108.36862-.01242.94119.26248,2.0241-.11475,2.78595-.42549.85934-1.687.4282-2.56323.66986a4.85269,4.85269,0,0,0-3.97009,4.95332c-.15535,2.85955-.11574,5.73294-.06506,8.59858.01895,1.07188-.1941,1.49349-1.3929,1.46-3.09616-.08641-3.09792-.024-3.09791-3.06065,0-4.998.02125-9.99625-.02018-14.99395-.00719-.867.2363-1.154,1.09793-1.082a17.90006,17.90006,0,0,0,2.5866.00291c.67817-.04194.83815.23535.81394.8535-.0413,1.0541-.01138,2.111-.01138,3.16667Z"/><path class="cls-5" d="M126.456,45.7558c-1.46,1.80824-2.71414,3.37234-3.98283,4.92462a6.29714,6.29714,0,0,1-3.29628.40063c-.3486-.17529-.17807-.389-.0635-.59738.78806-1.43332,1.59251-2.85794,2.35835-4.30292a.6673.6673,0,0,1,.658-.42621C123.47124,45.75753,124.81276,45.7558,126.456,45.7558Z"/><path class="cls-6" d="M143.04426,66.06794c.03,2.25836-.76662,3.8858-2.75419,4.78527a2.65143,2.65143,0,0,1-3.34173-.60219,2.95186,2.95186,0,0,1,.191-3.8297A6.99167,6.99167,0,0,1,142.56731,64.6C143.54817,64.61491,142.7052,65.71089,143.04426,66.06794Z"/><path class="cls-6" d="M56.00446,63.82768a18.48479,18.48479,0,0,1-.85864,5.55147,3.65833,3.65833,0,0,1-3.31843,2.67145,3.41114,3.41114,0,0,1-3.53413-2.33372c-1.279-3.05264-.94646-6.24853-.67532-9.423a6.66574,6.66574,0,0,1,.80681-2.67677,3.46612,3.46612,0,0,1,3.39843-1.977,3.58422,3.58422,0,0,1,3.28821,2.53538A18.22689,18.22689,0,0,1,56.00446,63.82768Z"/><path class="cls-6" d="M120.9039,59.79138c-1.02427.00037-2.0496-.02785-3.07246.01-.71356.02642-.82355-.26908-.6811-.89225a4.0592,4.0592,0,0,1,5.3484-3.061,3.73127,3.73127,0,0,1,2.28746,3.33894c-.01188.51231-.252.6135-.68661.60819C123.0345,59.78227,121.96915,59.791,120.9039,59.79138Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/crowdfire/crowdfire_featured_logo.svg b/content/en/case-studies/crowdfire/crowdfire_featured_logo.svg
index 3c7a565f11..a4f020161a 100644
--- a/content/en/case-studies/crowdfire/crowdfire_featured_logo.svg
+++ b/content/en/case-studies/crowdfire/crowdfire_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2,.cls-3{fill-rule:evenodd;}.cls-2{fill:url(#linear-gradient);}.cls-3{fill:url(#linear-gradient-2);}</style><linearGradient id="linear-gradient" x1="-3137.65754" y1="1644.36414" x2="-3137.70622" y2="1644.36292" gradientTransform="matrix(2793, 0, 0, -441.00006, 8763675.71297, 725229.10048)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#f5286e"/><stop offset="1" stop-color="#fa461e"/></linearGradient><linearGradient id="linear-gradient-2" x1="-3134.50784" y1="1645.52546" x2="-3134.55653" y2="1645.47965" gradientTransform="matrix(800, 0, 0, -776, 2507658.98376, 1276974.5)" xlink:href="#linear-gradient"/></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M73.12738,75.22779a11.43076,11.43076,0,0,0,7.99043-3.25709L77.915,69.25159a6.54848,6.54848,0,0,1-4.78767,2.18113,6.27512,6.27512,0,1,1,0-12.54865A6.54851,6.54851,0,0,1,77.915,61.0652l3.20276-2.71911A11.30858,11.30858,0,0,0,73.12738,55.089c-5.89573,0-10.92371,4.58875-10.92371,10.05486C62.20367,70.61115,67.23166,75.22779,73.12738,75.22779ZM87.2185,62.96274V60.24363H82.847V74.8885h4.37024V67.89326c0-2.74823,2.06429-4.504,5.29615-4.504V59.90555A5.81225,5.81225,0,0,0,87.21723,62.964ZM101.398,75.22779c4.57892,0,8.41035-3.51278,8.41035-7.67626s-3.83144-7.64715-8.41035-7.64715c-4.60807,0-8.46857,3.48368-8.46857,7.64715S96.79,75.22779,101.398,75.22779Zm0-3.48372a4.17862,4.17862,0,1,1,4.25-4.19254A4.2883,4.2883,0,0,1,101.398,71.74407Zm13.67233,3.14321h3.92121l2.90169-9.20544,2.87388,9.20544h3.91994l5.267-14.64366H129.675l-2.93333,9.12063-3.05221-9.12063H120.068l-3.05221,9.12063-2.93333-9.12063h-4.27915l5.267,14.64366Zm31.95657-19.7995v7.25216a6.48235,6.48235,0,0,0-5.20633-2.43556c-4.12993,0-7.12271,3.17228-7.12271,7.64715,0,4.50393,2.99273,7.67626,7.12144,7.67626a6.48139,6.48139,0,0,0,5.20758-2.43556V74.8885h4.37024V55.089h-4.37024v-.00121Zm-3.95028,16.65629a4.17829,4.17829,0,0,1,0-8.356,4.18457,4.18457,0,0,1,0,8.356ZM159.533,59.45116a1.52877,1.52877,0,0,1,1.466-1.6431,2.32868,2.32868,0,0,1,1.49515.48107l1.0486-2.52038a5.82958,5.82958,0,0,0-3.562-1.27474,4.36676,4.36676,0,0,0-4.63845,4.47492v1.27469h-2.125v3.34317h2.125V74.88728h4.18943V63.58679h3.352V60.24363h-3.352v-.79247h.00127Zm7.47558-1.21778a2.24007,2.24007,0,1,0,0-4.47609,2.24316,2.24316,0,1,0,0,4.47609Zm-2.21356,16.6539h4.369V60.24363h-4.37024V74.8885l.00126-.00122ZM176.46128,62.964V60.24362H172.091V74.88849h4.37024V67.89326c0-2.74823,2.06428-4.504,5.29615-4.504V59.90555a5.81228,5.81228,0,0,0-5.29615,3.05845Zm14.24029,8.61049a3.72844,3.72844,0,0,1-3.6809-2.66336h11.16279c0-5.523-2.8435-9.0067-7.69063-9.0067-4.52078,0-7.96131,3.20012-7.96131,7.6193,0,4.50393,3.59107,7.70411,8.1991,7.70411a9.76074,9.76074,0,0,0,6.31568-2.26594l-2.78279-2.69a5.79593,5.79593,0,0,1-3.562,1.30259Zm-.03038-8.01677a3.204,3.204,0,0,1,3.32165,2.37987h-6.91269a3.73543,3.73543,0,0,1,3.59228-2.37987h-.00124Z"/><path class="cls-3" d="M48.815,64.51747H41.02529v-7.5563H33.23554v-7.5563H48.815Zm3.89487,0H44.92016A11.51324,11.51324,0,0,1,33.23554,75.85073a11.33911,11.33911,0,1,1,0-22.66768v-7.5563c-10.75594,0-19.47437,8.45767-19.47437,18.89072S22.4796,83.407,33.23554,83.407,52.70991,74.94936,52.70991,64.5163Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2,.cls-3{fill-rule:evenodd;}.cls-2{fill:url(#linear-gradient);}.cls-3{fill:url(#linear-gradient-2);}</style><linearGradient id="linear-gradient" x1="-3137.65754" y1="1644.36414" x2="-3137.70622" y2="1644.36292" gradientTransform="matrix(2793, 0, 0, -441.00006, 8763675.71297, 725229.10048)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#f5286e"/><stop offset="1" stop-color="#fa461e"/></linearGradient><linearGradient id="linear-gradient-2" x1="-3134.50784" y1="1645.52546" x2="-3134.55653" y2="1645.47965" gradientTransform="matrix(800, 0, 0, -776, 2507658.98376, 1276974.5)" xlink:href="#linear-gradient"/></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-2" d="M73.12738,75.22779a11.43076,11.43076,0,0,0,7.99043-3.25709L77.915,69.25159a6.54848,6.54848,0,0,1-4.78767,2.18113,6.27512,6.27512,0,1,1,0-12.54865A6.54851,6.54851,0,0,1,77.915,61.0652l3.20276-2.71911A11.30858,11.30858,0,0,0,73.12738,55.089c-5.89573,0-10.92371,4.58875-10.92371,10.05486C62.20367,70.61115,67.23166,75.22779,73.12738,75.22779ZM87.2185,62.96274V60.24363H82.847V74.8885h4.37024V67.89326c0-2.74823,2.06429-4.504,5.29615-4.504V59.90555A5.81225,5.81225,0,0,0,87.21723,62.964ZM101.398,75.22779c4.57892,0,8.41035-3.51278,8.41035-7.67626s-3.83144-7.64715-8.41035-7.64715c-4.60807,0-8.46857,3.48368-8.46857,7.64715S96.79,75.22779,101.398,75.22779Zm0-3.48372a4.17862,4.17862,0,1,1,4.25-4.19254A4.2883,4.2883,0,0,1,101.398,71.74407Zm13.67233,3.14321h3.92121l2.90169-9.20544,2.87388,9.20544h3.91994l5.267-14.64366H129.675l-2.93333,9.12063-3.05221-9.12063H120.068l-3.05221,9.12063-2.93333-9.12063h-4.27915l5.267,14.64366Zm31.95657-19.7995v7.25216a6.48235,6.48235,0,0,0-5.20633-2.43556c-4.12993,0-7.12271,3.17228-7.12271,7.64715,0,4.50393,2.99273,7.67626,7.12144,7.67626a6.48139,6.48139,0,0,0,5.20758-2.43556V74.8885h4.37024V55.089h-4.37024v-.00121Zm-3.95028,16.65629a4.17829,4.17829,0,0,1,0-8.356,4.18457,4.18457,0,0,1,0,8.356ZM159.533,59.45116a1.52877,1.52877,0,0,1,1.466-1.6431,2.32868,2.32868,0,0,1,1.49515.48107l1.0486-2.52038a5.82958,5.82958,0,0,0-3.562-1.27474,4.36676,4.36676,0,0,0-4.63845,4.47492v1.27469h-2.125v3.34317h2.125V74.88728h4.18943V63.58679h3.352V60.24363h-3.352v-.79247h.00127Zm7.47558-1.21778a2.24007,2.24007,0,1,0,0-4.47609,2.24316,2.24316,0,1,0,0,4.47609Zm-2.21356,16.6539h4.369V60.24363h-4.37024V74.8885l.00126-.00122ZM176.46128,62.964V60.24362H172.091V74.88849h4.37024V67.89326c0-2.74823,2.06428-4.504,5.29615-4.504V59.90555a5.81228,5.81228,0,0,0-5.29615,3.05845Zm14.24029,8.61049a3.72844,3.72844,0,0,1-3.6809-2.66336h11.16279c0-5.523-2.8435-9.0067-7.69063-9.0067-4.52078,0-7.96131,3.20012-7.96131,7.6193,0,4.50393,3.59107,7.70411,8.1991,7.70411a9.76074,9.76074,0,0,0,6.31568-2.26594l-2.78279-2.69a5.79593,5.79593,0,0,1-3.562,1.30259Zm-.03038-8.01677a3.204,3.204,0,0,1,3.32165,2.37987h-6.91269a3.73543,3.73543,0,0,1,3.59228-2.37987h-.00124Z"/><path class="cls-3" d="M48.815,64.51747H41.02529v-7.5563H33.23554v-7.5563H48.815Zm3.89487,0H44.92016A11.51324,11.51324,0,0,1,33.23554,75.85073a11.33911,11.33911,0,1,1,0-22.66768v-7.5563c-10.75594,0-19.47437,8.45767-19.47437,18.89072S22.4796,83.407,33.23554,83.407,52.70991,74.94936,52.70991,64.5163Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/denso/denso_featured_logo.svg b/content/en/case-studies/denso/denso_featured_logo.svg
index 375d9cefbc..e2b26b2c8c 100644
--- a/content/en/case-studies/denso/denso_featured_logo.svg
+++ b/content/en/case-studies/denso/denso_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:#fbfbfb;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#ee3248;fill-rule:evenodd;}</style><clipPath id="clip-path"><rect class="cls-1" x="4.70501" y="-8.81268" width="206.90403" height="145.3255"/></clipPath></defs><rect class="cls-2" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M28.02166,50.76936l7.69058-.0617c6.9525.12305,7.75228,4.1837,4.61435,13.41275-2.64567,7.87531-6.76768,12.67414-14.58165,12.61279h-6.091ZM169.22325,61.044c4.55274-11.01316,10.52065-15.19686,22.76431-15.50454,10.9518-.24609,15.81224,4.79908,11.813,17.41187C199.49376,76.67151,191.67987,82.209,179.86693,82.209c-12.98175.06134-16.24263-7.87514-10.64368-21.165m8.429.73843c2.83006-7.01411,6.95215-11.87463,13.04345-11.93633,5.47555-.06125,6.46007,3.938,3.99905,12.36706-3.13794,10.82842-7.69068,15.5659-13.90466,15.44286-6.89106-.06135-6.768-6.82946-3.13784-15.87359m-15.07382-8.67536,2.09172-6.02932a34.76316,34.76316,0,0,0-10.95146-1.66134c-7.62924-.0616-13.35114,2.33806-15.6892,7.69066-3.69162,8.183,1.4766,10.70564,7.69084,13.59749,9.10583,4.245,3.876,11.56684-4.86069,10.82842-3.50688-.3077-6.58311-1.90724-9.65961-3.38384l-1.96859,6.15264A33.79646,33.79646,0,0,0,142.64393,82.209c9.0444-.55369,14.64308-4.184,16.91972-9.90595,2.584-6.52159-1.41525-10.52064-7.38324-12.42789-12.42831-3.99939-4.98338-15.75088,10.398-6.76811M95.57659,46.15492a19.153,19.153,0,0,1,2.215,3.62993L87.76306,81.47059H93.854l8.36766-26.45618,9.59791,26.45618h8.61375l-.36939-.98451,10.89012-34.33116h-6.15273l-7.99827,25.34837-9.22879-25.34837c-3.999,0-7.99836.06135-11.99767,0m-34.39259,0a14.395,14.395,0,0,1,2.21468,3.62993L53.43173,81.47059H79.826L81.05656,77.533H63.21437L67.152,65.16635H78.96492l1.23051-3.87627H68.3825L71.95081,49.9695H89.17822L90.347,46.15492c-9.72121,0-19.44208.06135-29.163,0m-42.26817,0a16.4482,16.4482,0,0,1,2.21468,3.62993L11.102,81.47059h8.61366l5.04517-.06135c14.766,0,21.77988-7.32179,24.73333-16.85828,4.245-13.5973-.92316-18.33469-13.47418-18.33469Z"/></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:transparent;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#ee3248;fill-rule:evenodd;}</style><clipPath id="clip-path"><rect class="cls-1" x="4.70501" y="-8.81268" width="206.90403" height="145.3255"/></clipPath></defs><rect class="cls-2" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M28.02166,50.76936l7.69058-.0617c6.9525.12305,7.75228,4.1837,4.61435,13.41275-2.64567,7.87531-6.76768,12.67414-14.58165,12.61279h-6.091ZM169.22325,61.044c4.55274-11.01316,10.52065-15.19686,22.76431-15.50454,10.9518-.24609,15.81224,4.79908,11.813,17.41187C199.49376,76.67151,191.67987,82.209,179.86693,82.209c-12.98175.06134-16.24263-7.87514-10.64368-21.165m8.429.73843c2.83006-7.01411,6.95215-11.87463,13.04345-11.93633,5.47555-.06125,6.46007,3.938,3.99905,12.36706-3.13794,10.82842-7.69068,15.5659-13.90466,15.44286-6.89106-.06135-6.768-6.82946-3.13784-15.87359m-15.07382-8.67536,2.09172-6.02932a34.76316,34.76316,0,0,0-10.95146-1.66134c-7.62924-.0616-13.35114,2.33806-15.6892,7.69066-3.69162,8.183,1.4766,10.70564,7.69084,13.59749,9.10583,4.245,3.876,11.56684-4.86069,10.82842-3.50688-.3077-6.58311-1.90724-9.65961-3.38384l-1.96859,6.15264A33.79646,33.79646,0,0,0,142.64393,82.209c9.0444-.55369,14.64308-4.184,16.91972-9.90595,2.584-6.52159-1.41525-10.52064-7.38324-12.42789-12.42831-3.99939-4.98338-15.75088,10.398-6.76811M95.57659,46.15492a19.153,19.153,0,0,1,2.215,3.62993L87.76306,81.47059H93.854l8.36766-26.45618,9.59791,26.45618h8.61375l-.36939-.98451,10.89012-34.33116h-6.15273l-7.99827,25.34837-9.22879-25.34837c-3.999,0-7.99836.06135-11.99767,0m-34.39259,0a14.395,14.395,0,0,1,2.21468,3.62993L53.43173,81.47059H79.826L81.05656,77.533H63.21437L67.152,65.16635H78.96492l1.23051-3.87627H68.3825L71.95081,49.9695H89.17822L90.347,46.15492c-9.72121,0-19.44208.06135-29.163,0m-42.26817,0a16.4482,16.4482,0,0,1,2.21468,3.62993L11.102,81.47059h8.61366l5.04517-.06135c14.766,0,21.77988-7.32179,24.73333-16.85828,4.245-13.5973-.92316-18.33469-13.47418-18.33469Z"/></g></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/golfnow/golfnow_featured.svg b/content/en/case-studies/golfnow/golfnow_featured.svg
index 761782a756..b5b42d6fcd 100644
--- a/content/en/case-studies/golfnow/golfnow_featured.svg
+++ b/content/en/case-studies/golfnow/golfnow_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#77bc43;}.cls-3{fill:#0076bb;}.cls-4{fill:#0067a5;}.cls-5{fill:#fff;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-5.0578" y="-5.66637" width="223.25536" height="134.51136"/><path class="cls-2" d="M129.80847,39.45853h-4.008V57.66878L116.129,41.46253a3.99162,3.99162,0,0,0-3.54331-2.004h-3.45617V65.801a1.763,1.763,0,0,0,1.82974,1.8007h4.008V49.71087l9.352,15.88678a3.92569,3.92569,0,0,0,3.54331,2.004h3.77565V58.16252c-.029-.08712-.05809-.17426-.08713-.29043a15.63328,15.63328,0,0,1,0-8.94539c.02905-.08712.05809-.17426.08713-.29043V41.23019a1.75656,1.75656,0,0,0-1.82975-1.77166m61.456,0h-4.008l-4.008,17.397-4.008-14.66695a3.58219,3.58219,0,0,0-3.45618-2.73008h-2.26538l-4.76314,17.397-3.74661-15.94486a1.97107,1.97107,0,0,0-1.94592-1.45218h-4.41461l1.336,5.22783.05809.23234a15.48047,15.48047,0,0,1,2.49773,9.43913c0,.08712-.029.17426-.029.26139l2.73009,10.659a3.32589,3.32589,0,0,0,3.28191,2.32348h2.64295l4.8212-17.51321,4.18227,15.16069a3.37327,3.37327,0,0,0,3.34,2.32348h2.643l6.6219-25.96485c.43569-1.68454-.029-2.14923-1.51021-2.14923"/><path class="cls-3" d="M58.10017,62.66425a9.10156,9.10156,0,1,1,8.655-9.0906,8.90784,8.90784,0,0,1-8.655,9.0906m37.0885-17.86173h9.78765a1.43209,1.43209,0,0,0,1.24887-.75513l2.033-4.58887H92.69093A3.30342,3.30342,0,0,0,89.38,42.74043V66.527l-1.5393-3.48522a1.34431,1.34431,0,0,0-1.19078-.75513H76.4266V41.28826a1.847,1.847,0,0,0-1.85878-1.82974h-4.008v4.41461a15.335,15.335,0,0,1,1.56834,5.80869,14.59291,14.59291,0,0,0-28.43355,1.77165H35.911a1.28733,1.28733,0,0,0-1.16174.697l-1.85878,4.24035h8.77113a8.65024,8.65024,0,0,1-8.36452,6.24434,9.096,9.096,0,0,1,.08713-18.1812,11.54665,11.54665,0,0,1,6.33148,2.26539,1.187,1.187,0,0,0,1.62643-.34852l2.033-3.51427A15.3906,15.3906,0,0,0,33.50036,39.139c-8.30643,0-14.84121,6.30243-14.84121,14.34747a14.55105,14.55105,0,0,0,28.753,3.04957,13.59322,13.59322,0,0,1-.95844,5.60538,14.62892,14.62892,0,0,0,24.077-1.13269v3.311a3.30948,3.30948,0,0,0,3.31095,3.31095H93.30084A1.847,1.847,0,0,0,95.15962,65.801V56.39087h8.33548a1.39844,1.39844,0,0,0,1.24886-.75513l1.85878-4.18226H95.18866v-6.651"/><path class="cls-4" d="M146.82794,38.79053a14.58054,14.58054,0,1,0,14.725,14.57982A14.65773,14.65773,0,0,0,146.82794,38.79053Zm10.688,18.76208s-.2033.43565-.26139.60991a18.08052,18.08052,0,0,1-.84225,1.74261c-.23235.37756-.72609.84226-.78418,1.27791s-.05809.29043-.34853.78418-.26139.34852-.46469.49374a.66846.66846,0,0,1-.34853.14522l-.08712.52278a.78566.78566,0,0,1-.40661.2033c-.26139.05809-.29044.37757-.81322.90035a1.36245,1.36245,0,0,0-.46469.81322c-.05809.11617-.60992.72608-.668.84225a.19816.19816,0,0,1-.26139.0581,1.46521,1.46521,0,0,1-.20331-.55183,9.036,9.036,0,0,1,.05809-1.01652c.0581-.55182.11618-.40661.08713-.639a1.27484,1.27484,0,0,1,.08713-.52278l.17426-.4647a1.225,1.225,0,0,0-.05809-.52277c-.11617-.11618-.029-.52278-.05809-.639,0-.11618-.29043-.26139-.84226-.40661s-.60991-.14522-.81321-.20331-.11617-.05809-.34853-.20331a1.42145,1.42145,0,0,0-.55182-.29043c-.31948-.05809-.23235-.11617-.31948-.26139a.44008.44008,0,0,0-.29044-.23234c-.14521-.0581-.05809-.23235-.05809-.34853a.2596.2596,0,0,0-.11617-.23234.524.524,0,0,1-.05809-.34853,2.79035,2.79035,0,0,0-.14522-.668c-.05809-.20331.14522-.34853.29044-.49375s-.08713-.49374-.08713-.49374a.88617.88617,0,0,0-.23234-.20331c-.08713-.08712-.17426-.029-.4647-.029-.26139,0-.26139.05809-.43565.17426s-.23235.14522-.34853.05809-.29043-.029-.37756-.08713-.29043-.23234-.52278-.4066-.029-.11618-.14521-.23235a.95564.95564,0,0,0-.52278-.14521.63688.63688,0,0,0-.4647.05809c-.11617.08712-.14522.11617-.34852.029s-.11618-.11617-.26139-.29043-.029-.14522-.20331-.14522a3.15321,3.15321,0,0,0-.81322.23234c-.23234.05809-.17426-.08712-.23234-.14521-.08713-.05809-.40661-.05809-.4647-.17427s-.37756-.17426-.58087-.08712a.50206.50206,0,0,1-.43565-.05809l.05809-.52278a2.0541,2.0541,0,0,0-.05809-.34853s-1.59739-1.68452-1.74261-1.74261,0,.31948,0,.31948l.20331.49375.87131,1.01652-.08713.11617h-.20331s-.55182-.58087-.60991-.639-.20331-.29043-.23235-.31948c-.08712-.05809-.17426-.08713-.26139-.14522l-.05809-.11617s0-.17426-.05809-.20331a8.48855,8.48855,0,0,1-.29043-1.01652c0-.05809-.26139-.17426-.60992-.55182a2.05772,2.05772,0,0,1-.37756-1.336,2.10591,2.10591,0,0,1,.26139-.78418l-.029-.43565a1.66144,1.66144,0,0,0,.029-.40661c0-.05809-.17426-.23234-.20331-.37756s.05809-.08713.14522-.17426.05809-.20331.05809-.29044a7.09575,7.09575,0,0,0-.29043-.697c-.14522-.23234-.02905-.26139.029-.34852a.47828.47828,0,0,0,.11617-.4647.69053.69053,0,0,0-.49374-.43565.32512.32512,0,0,0-.43565.14521s-.26139.20331-.34853.29044c-.08712.05809-.55182.29043-.55182.29043s-.40661.05809-.49374-.029.029-.17426.26139-.20331.58087-.4647.8713-.75513.05809-.40661.14522-.58087c.05809-.14522.34852-.20331.4647-.31948.11617-.14522.029-.31948,0-.40661-.029-.05809.46469,0,.49374,0s.11617-.26139.11617-.26139.20331-.14521.37756-.29043a.73127.73127,0,0,1,.4647-.05809.84637.84637,0,0,1,.29043.26139c.11618.17426.11618.11617.37756.34852.26139.20331.37757,0,.55183-.029s.11617.05809.29043.20331a.855.855,0,0,0,.52278.17426c.08713,0,.20331-.20331.14522-.26139a1.86338,1.86338,0,0,0-.29044-.17426l-.14521-.26139h-.37756c-.11618,0,0-.11618.08712-.26139s-.029-.20331-.029-.20331l-.23235.029-.37756.0581s-.31948.029-.43565.029c-.14522,0-.23234-.20331-.29043-.49374s.2033-.29044.2033-.29044.05809-.46469.17427-.46469a12.81,12.81,0,0,1,1.56834-.92939,2.81579,2.81579,0,0,0,.95843-.639c.11617-.11617-.029-.17426-.08712-.14522a3.44836,3.44836,0,0,0-.4647.23235l-1.51027.78417s-.029.20331-.2033.20331a5.549,5.549,0,0,0-1.307.9294c-.26139.31948-.08713.17426-.08713.31948.029.14521-.029.14521-.29043.37756-.26139.26139-.029.29043-.05809.34852-.029.08713-.20331.11618-.31948.11618-.11617-.029-.08713-.05809-.17426-.20331s-.11618-.02905-.26139.17426-.23235.14522-.26139.11617c-.02905,0-.05809-.14521-.05809-.14521a3.3977,3.3977,0,0,1-.58087.34852c-.08713,0,.05809-.23234.14522-.34852s1.88782-1.88783,2.26538-2.17826a21.18485,21.18485,0,0,1,3.8047-1.77166,18.41792,18.41792,0,0,1,5.77964-.639,7.767,7.767,0,0,1,2.32348.55182c.20331.08713,2.12017.92939,3.02052,1.365.8713.43565.697.34852.72609.43565.05809.08714-.08713.029-.17427-.029a1.59381,1.59381,0,0,0-.49374-.14522c-.08713,0-.029.11617.029.20331s.49374.26139.46469.43565-.60991-.23234-.75513-.20331.14522.40661.34853.52278c.17426.11618.4066.14522.60991.29044s.14522.31948.26139.697c.11617.34852-.08713.40661-.08713.40661s-.14521.14521-.49374-.14522a4.75472,4.75472,0,0,0-.49374-.37756s-.43565-.11618-.43565-.34853.23234-.20331.05809-.34852-.55183-.11618-.697-.17427-.23235-.639-.31948-.72608-.40661-.08713-.43566.08713c-.05809.17426-.05809.26139-.14521.26139s-.14522.14522-.17427.20331c0,.05809-.11617.08713-.17426.08713a2.11045,2.11045,0,0,1-.58087-.37756c-.14521-.14522.29044,0,.4647-.14522.17426-.11617-.11617-.2033-.14522-.26139s-.34852.029-.4066.029a1.09557,1.09557,0,0,1-.55183-.29043c-.20331-.17426.029-.17426.20331-.23235s.52278.11617.75513.08713.14522-.14521.08713-.2033-.26139-.05809-.37756-.08713c-.11618,0-.17427-.14522-.14522-.23235,0-.08713.26139-.11617.29043-.17426s-.14521-.17427-.29043-.29044-.14522.029-.23234.14522-.37757.08713-.49375.11617-.029.08713-.029.2033-.08713.05809-.23235.05809-.2033-.23235-.37756-.31948a5.22714,5.22714,0,0,0-.78417-.2033,2.68617,2.68617,0,0,0-.29044.08713.667.667,0,0,1-.58087-.14522c-.29043-.2033-.37756,0-.40661,0a.89071.89071,0,0,1-.37756-.029c-.08712-.05809-.05809-.23235-.08712-.29044s-.14522-.08713-.43566-.08713a11.90084,11.90084,0,0,0-1.45217.05809c-.26139.05808-.78418.08713-1.13269.17426s-.14522.2033-.05809.2033c.05809,0,.37756,0,.668.029a5.7121,5.7121,0,0,1,.75514.05808c.23234.05809.34852.29044.49374.60992s-.31948.14522-.43565.14522c-.14522,0-.029.2033-.029.2033l.49374.14522s.40661,0,.52278.14521.14522.11618.23235.05809a.62771.62771,0,0,1,.31948-.029c.08712.029.23234.29044.31948.40662a3.8766,3.8766,0,0,1,.31948.697,2.8636,2.8636,0,0,0,.31948.668c.05809.08713.11617.31948.05809.37756a4.433,4.433,0,0,1-.90035-.029s-.23235.029-.58087-.34853-.43565-.26139-.52278-.37756a.12342.12342,0,0,1,.029-.20331,2.42666,2.42666,0,0,1-.52277-.17426c-.23235-.11617-.37757-.29043-.55183-.29043-.14522-.029-.17426.14521-.31948.29043a.55456.55456,0,0,1-.43565.08713.80253.80253,0,0,1-.14522-.34853.72884.72884,0,0,1,.05809-.29043,2.57477,2.57477,0,0,0,.17427-.60992c0-.14521-.29044-.05808-.31948-.029-.0581.029-.23235.14522-.23235.23235-.029.08713.05809.31947-.029.49374a1.99665,1.99665,0,0,0-.17427.37756c-.029.11617.05809.14521.02905.43565s-.05809.11617-.23235.08713c-.14521-.029-.26138.08712-.31948.11617s-.17426-.029-.23234-.14522a1.27919,1.27919,0,0,1,.05809-.4647c.02905-.08712.37756-.08712.37756-.08712s-.08712-.34853-.11617-.40661c0-.08713-.4647.17426-.4647.17426s-.17426.14522-.34852.26139a2.62684,2.62684,0,0,1-.72609.29044c-.37756.11617-.23234.11617-.37756.26139a.37773.37773,0,0,0-.08713.34852,1.79333,1.79333,0,0,0,.29044.08713c.23234.05809.11617.029.29043.14522.17426.14521.43565.05809.43565.34852,0,.26139-.05809.31948-.05809.55182,0,.20331.20331.029.4647,0,.23235-.029.08713-.11617.08713-.29043a.41132.41132,0,0,1,.14522-.29043.95186.95186,0,0,1,.23234.17426c.05809.05809.20331-.05809.23234-.11617a.69084.69084,0,0,0-.14521-.40661c-.08713-.11617,0-.14522.14521-.31948s.14522.26139.20331.40661c.08713.14521.08713.05809.20331-.26139s.31948-.23235.37756-.23235.29044.08713.40661.08713c.11617.029.52278.20331.72608.26139.23235.08713.20331-.029.29044-.029s.26139.08713.26139.14522-.37756.14522-.37756.14522-.08713.05809-.05809.11617.2033.11617.37756.14522.14521.23234.08712.46469-.17426.08713-.17426.08713-.26139-.029-.43565-.05809a1.593,1.593,0,0,0-.37756,0c-.11617,0-.34853.029-.34853.029a1.39044,1.39044,0,0,1,.14522-.31948.40511.40511,0,0,0,0-.31948c-.05809-.11618-.40661-.23235-.52278-.11618a8.52976,8.52976,0,0,0-.49374.75514c-.11617.14521-.05809.26139.029.29043s.40661-.029.52278.029c.14522.05809.029.31948,0,.34852,0,.029-.17426.08713-.2033.08713a.95471.95471,0,0,1-.34853-.17426.18238.18238,0,0,0-.23234-.029c-.05809,0-.14522.29044-.29044.639-.11617.34853-.029.14522.14522.40661s.26139.14521.52278.08712.29043.02905.49374.05809c.23234.05809.14522.20331.14522.20331l.23234.23235s.14522.11617.26139.2033.08713-.029.17426-.26139,0-.17426-.2033-.34852c-.23235-.17426.26139-.43565.26139-.43565a.79278.79278,0,0,0-.31948-.17427c-.20331-.05809-.11618-.29043-.11618-.46469a.82417.82417,0,0,1,.14522-.40661,1.54326,1.54326,0,0,1,.55182.05809c.29044.08713.31948.08713.37757.17426.05809.05809.17426-.17426.17426-.17426s-.02905-.34852.31948-.11617.17426.23234.37756.20331c.17426,0,.11617.14521.4647.23234a1.71936,1.71936,0,0,0,.58087.05809,1.63457,1.63457,0,0,0,.29043.05809c.08713,0,.26139.29044.40661.40661s.20331,0,.37756,0,.26139-.05809.43565.11617-.05809.14522-.29043.26139a3.45479,3.45479,0,0,1-.40661.17426l-.31948-.05809a1.4253,1.4253,0,0,0-.11617-.29043c-.05809-.11617-.20331-.05809-.40661.05809a2.37793,2.37793,0,0,0-.81321.8713c-.14522.34853.05809.26139.14521.23235s.14522-.17427.20331-.23235a.82334.82334,0,0,1,.4647-.17426c.11617,0,.26139.23234.31948.31948s.11617.029.17426-.05809a1.019,1.019,0,0,0,.14522-.23235c.05809-.05809.11617.11618.14522.29044a.6999.6999,0,0,1-.20331.52278c-.11617.11617-.14522.11617-.23234.11617s-.0581-.17426-.20331-.31948-.17427.11617-.20331.14522a.86952.86952,0,0,0-.11617.29043c0,.02905-.08713.02905-.08713.02905l-.31948.34852a.78632.78632,0,0,0,.23234.34853c.14522.14522-.37756.34852-.37756.34852l-.14521.14522v.52278a5.58158,5.58158,0,0,1-.02905.95843.458.458,0,0,1-.37756.43565,2.16131,2.16131,0,0,0-.23234.55183c-.029.2033.14521.17426.43565.46469s.2033.26139.26139.49375-.08713.14521-.31948.11617c-.26139-.029-.11618-.08713-.17427-.17427s-.29043-.14521-.34852-.2033a4.44635,4.44635,0,0,0-.37756-.4647c-.11617-.08713-.23235,0-.4647,0s-.4647.029-.40661.49374c.029.4647-.08712.05809-.46469.029a1.1139,1.1139,0,0,0-.75514.26139,6.62933,6.62933,0,0,0-.05809.78417.73872.73872,0,0,1,.05809.20331,2.89521,2.89521,0,0,0-.11617.31948c-.029.14522.08713.26139.11617.37756s.37757.34853.639.58087a.463.463,0,0,0,.52278.08713.544.544,0,0,0,.37756-.29044,3.61474,3.61474,0,0,1,.31948-.668.52685.52685,0,0,1,.37757-.08713c.14521.029.08712.37756.08712.37756s-.17426.55183-.23234.697c-.02905.14522-.02905.11618.08713.23235s.17426,0,.34852-.08713.17426-.20331.26139-.23234.20331.029.49374.23234.11617.20331,0,.49374c-.11617.26139,0,.11618.11617.26139a2.71969,2.71969,0,0,0,.40661.4647c.17426.17426.26139.029.26139.029a.57483.57483,0,0,1,.81321-.43566c.668.29044.31948-.029.52278-.14521.20331-.14522.26139-.668.58087-.84226s.05809-.26139.17426-.29044c.14522-.029.11618.29044.26139.37756s.05809-.17426.08713-.43565c0-.26139.05809-.23234.37756-.029s.14522.14522.43565.17426.17427-.20331.52278-.40661c.34853-.23234.34853-.08712.49375,0s.52277.08713.75513.20331a4.41166,4.41166,0,0,0,.58087.17426c.23234.08713.31948-.23234.49374-.34852a.37891.37891,0,0,1,.40661.029,2.19769,2.19769,0,0,0,.43565-.029c.05809,0,.75513.26139.52278.639s.08712.26139.08712.26139.29044-.08713.78418-.26139c.4647-.17426.49374-.20331.668-.26139.17426-.029.46469.029.668,0,.20331,0,.26139-.17426.668,0s0,.78418,0,1.365c-.11613.639-.14517.92941-.14517.92941Z"/><path class="cls-4" d="M140.93213,46.10948a2.4898,2.4898,0,0,0-.37757.08712c-.05809.02905-.14521.05809-.2033.08713a.63659.63659,0,0,0,.08712.23234l.29044-.029s.26139-.11617.26139-.17426c.029-.05808.08713-.17425-.05808-.20329m2.643,2.84626c.05809-.05809.31948-.14522.37756-.05809.05809.05809.14522.23234.05809.23234s-.14521-.23234-.2033.05809a2.45038,2.45038,0,0,0-.02905.60992.6323.6323,0,0,0,.14522.23234c.05809,0,.17426.17427.23234.029.08713-.14522-.14521-.49374-.14521-.60992s0-.2033.05809-.26139a.21338.21338,0,0,1,.17426-.05809c.05809,0,.08713-.08712.14522-.029s.05809.11617.08712.17426a.40534.40534,0,0,0,.14522.11617s.14522-.08712.17426-.029c.029.029-.20331.05809.05809.14522s.26139.26139.34853.05809a.88914.88914,0,0,0,.08712-.26139s-.14521-.029-.17426,0c-.05809,0-.14522,0-.14522-.05809a1.32934,1.32934,0,0,0-.11617-.43566.43744.43744,0,0,0-.23234-.11617,2.25162,2.25162,0,0,0-.26139.02905l-.26139-.20331-.23234-.05809-.17427-.029a.97078.97078,0,0,0-.34852.14522c-.08713.05809-.29044.05809-.23235.20331.14521.08714.4066.20332.46469.17427m-2.99148-3.22383a1.09939,1.09939,0,0,0-.23234-.34852c-.17427,0-.43566,0-.29044.14522.14522.17426.23235.29043.31948.29043.08713.029.26139.08714.2033-.08713"/><path class="cls-5" d="M145.9276,53.89313c-.02905.08713-.02905.20331.08712.23234a2.2975,2.2975,0,0,0,.668-.23234c.14522-.05809.4647.14522.4647.14522a.65386.65386,0,0,0,.37756.029,3.211,3.211,0,0,0,.37756-.20331s.11617-.11617-.11617-.17426a4.83735,4.83735,0,0,1-.75514-.17426c-.17426-.05809-.26138-.11617-.4066-.029-.17425.11618-.697.40662-.697.40662m2.46869-.11617s-.17426.37756-.14522.46469c.02905.0581.52278.029.52278.029a3.31374,3.31374,0,0,0,.43565-.17426c.08713-.05809.37756-.14522.23235-.29044a.492.492,0,0,0-.31948-.14521l-.72608.11617m-.40661-11.67548c-.05809.029-.31948.23235-.2033.37757s.52277.29043.639.11617a1.77731,1.77731,0,0,0,.17426-.37756c0-.08713-.14522-.2033-.23235-.23235-.05809-.029-.37757.11617-.37757.11617m7.23182,1.56835a1.81745,1.81745,0,0,1-.23234-.49375s-.02905-.26138.05809-.2033.17426.26139.23234.26139.17427-.17427.17427-.17427a24.54859,24.54859,0,0,1,1.91687,1.94592,17.71335,17.71335,0,0,1,1.59739,2.29443c.20331.43565.81321,1.51026.81321,1.51026l.29044.87131s.2033.34852.05809.31948c-.11619-.029-.60992-1.04557-.69705-.90035a.88567.88567,0,0,0-.08712.4647,2.42831,2.42831,0,0,1-.20331.46469s-.697-.639-.84226-.639a1.30856,1.30856,0,0,1-.43565-.17426.72956.72956,0,0,0-.23234-.98747c-.58087-.43566-.55183-.37757-.78418-.58087a2.754,2.754,0,0,1-.52278-.52278c0-.08713-.31948-.37756-.31948-.37756l.05809-.78418s-.23234-.29044-.37756-.43565a2.2716,2.2716,0,0,1-.37756-.58087l-.05809-.81322-.02907-.46469"/><path class="cls-3" d="M190.18984,65.62669c.17425,0,.29043-.14522.29043-.37756a.291.291,0,0,0-.29043-.29044h-.34853v.668Zm.639,1.24886c-.08713,0-.23234,0-.29044-.11617l-.37756-.668h-.29043v.81322h-.29044c-.11618,0-.2033-.05809-.2033-.11617V64.523h.92939a.70167.70167,0,0,1,.75512.75513.73918.73918,0,0,1-.40661.697l.58087.95843h-.4066Zm-.668-2.96243a1.79848,1.79848,0,0,0-1.8007,1.74261v.029a1.78508,1.78508,0,0,0,1.8007,1.77165,1.804,1.804,0,0,0,1.80069-1.77165,1.82347,1.82347,0,0,0-1.80069-1.77166Zm0,4.008a2.24365,2.24365,0,0,1-2.26539-2.23635h0a2.23728,2.23728,0,0,1,2.23635-2.23635h.029a2.23654,2.23654,0,1,1,0,4.4727Zm-52.133,10.36852.75513-1.71356a.62268.62268,0,0,1,.55182-.31948h4.79218a5.19773,5.19773,0,0,1,.05809.84225,6.01228,6.01228,0,1,1-5.983-5.95391,6.46079,6.46079,0,0,1,4.18226,1.5393l-.84226,1.45218a.48461.48461,0,0,1-.668.14521,4.91685,4.91685,0,0,0-2.701-.95843,3.7764,3.7764,0,1,0,3.54329,4.96644h-3.68851m13.50521.34851a2.18471,2.18471,0,1,0-4.35652,0,2.18471,2.18471,0,1,0,4.35652,0m-2.17826,4.38557a4.41545,4.41545,0,1,1,4.50174-4.41461,4.4321,4.4321,0,0,1-4.50174,4.41461m4.50174-1.59739a1.61156,1.61156,0,0,1,1.59739-1.59739,1.59274,1.59274,0,0,1,1.59739,1.59739,1.61157,1.61157,0,0,1-1.59739,1.59739,1.59274,1.59274,0,0,1-1.59739-1.59739m10.65894-4.61791a1.68555,1.68555,0,0,0,0-3.369h-1.56835v3.369Zm-3.22382,6.09913a.7189.7189,0,0,1-.75512-.697V71.26112h4.24034a3.86288,3.86288,0,0,1,0,7.72555h-1.82973v3.92088Zm8.39355,0V71.14494h1.65549a.56466.56466,0,0,1,.58086.58087V82.90755h-2.23635m10.07809-4.2694a2.31649,2.31649,0,0,0-2.2073-2.35252,2.3573,2.3573,0,1,0,2.2073,2.35252m0,4.2694V81.891a3.47984,3.47984,0,0,1-2.55582,1.13269,4.40932,4.40932,0,0,1,0-8.80018,3.5591,3.5591,0,0,1,2.55582,1.16174V74.36876h1.65548a.56466.56466,0,0,1,.58087.58087v7.95792h-2.23635m4.38557,3.80469,1.85879-4.55983-3.13669-7.81268h1.8007a.85585.85585,0,0,1,.81321.58086l1.71357,4.38557,2.03305-4.96643h1.80069c.34853,0,.46469.26138.31948.58086l-4.85028,11.79165H184.1488m5.5473-5.28591a1.61156,1.61156,0,0,1,1.59739-1.59739,1.59275,1.59275,0,0,1,1.59739,1.59739,1.61157,1.61157,0,0,1-1.59739,1.59739,1.59274,1.59274,0,0,1-1.59739-1.59739"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#77bc43;}.cls-3{fill:#0076bb;}.cls-4{fill:#0067a5;}.cls-5{fill:#fff;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-5.0578" y="-5.66637" width="223.25536" height="134.51136"/><path class="cls-2" d="M129.80847,39.45853h-4.008V57.66878L116.129,41.46253a3.99162,3.99162,0,0,0-3.54331-2.004h-3.45617V65.801a1.763,1.763,0,0,0,1.82974,1.8007h4.008V49.71087l9.352,15.88678a3.92569,3.92569,0,0,0,3.54331,2.004h3.77565V58.16252c-.029-.08712-.05809-.17426-.08713-.29043a15.63328,15.63328,0,0,1,0-8.94539c.02905-.08712.05809-.17426.08713-.29043V41.23019a1.75656,1.75656,0,0,0-1.82975-1.77166m61.456,0h-4.008l-4.008,17.397-4.008-14.66695a3.58219,3.58219,0,0,0-3.45618-2.73008h-2.26538l-4.76314,17.397-3.74661-15.94486a1.97107,1.97107,0,0,0-1.94592-1.45218h-4.41461l1.336,5.22783.05809.23234a15.48047,15.48047,0,0,1,2.49773,9.43913c0,.08712-.029.17426-.029.26139l2.73009,10.659a3.32589,3.32589,0,0,0,3.28191,2.32348h2.64295l4.8212-17.51321,4.18227,15.16069a3.37327,3.37327,0,0,0,3.34,2.32348h2.643l6.6219-25.96485c.43569-1.68454-.029-2.14923-1.51021-2.14923"/><path class="cls-3" d="M58.10017,62.66425a9.10156,9.10156,0,1,1,8.655-9.0906,8.90784,8.90784,0,0,1-8.655,9.0906m37.0885-17.86173h9.78765a1.43209,1.43209,0,0,0,1.24887-.75513l2.033-4.58887H92.69093A3.30342,3.30342,0,0,0,89.38,42.74043V66.527l-1.5393-3.48522a1.34431,1.34431,0,0,0-1.19078-.75513H76.4266V41.28826a1.847,1.847,0,0,0-1.85878-1.82974h-4.008v4.41461a15.335,15.335,0,0,1,1.56834,5.80869,14.59291,14.59291,0,0,0-28.43355,1.77165H35.911a1.28733,1.28733,0,0,0-1.16174.697l-1.85878,4.24035h8.77113a8.65024,8.65024,0,0,1-8.36452,6.24434,9.096,9.096,0,0,1,.08713-18.1812,11.54665,11.54665,0,0,1,6.33148,2.26539,1.187,1.187,0,0,0,1.62643-.34852l2.033-3.51427A15.3906,15.3906,0,0,0,33.50036,39.139c-8.30643,0-14.84121,6.30243-14.84121,14.34747a14.55105,14.55105,0,0,0,28.753,3.04957,13.59322,13.59322,0,0,1-.95844,5.60538,14.62892,14.62892,0,0,0,24.077-1.13269v3.311a3.30948,3.30948,0,0,0,3.31095,3.31095H93.30084A1.847,1.847,0,0,0,95.15962,65.801V56.39087h8.33548a1.39844,1.39844,0,0,0,1.24886-.75513l1.85878-4.18226H95.18866v-6.651"/><path class="cls-4" d="M146.82794,38.79053a14.58054,14.58054,0,1,0,14.725,14.57982A14.65773,14.65773,0,0,0,146.82794,38.79053Zm10.688,18.76208s-.2033.43565-.26139.60991a18.08052,18.08052,0,0,1-.84225,1.74261c-.23235.37756-.72609.84226-.78418,1.27791s-.05809.29043-.34853.78418-.26139.34852-.46469.49374a.66846.66846,0,0,1-.34853.14522l-.08712.52278a.78566.78566,0,0,1-.40661.2033c-.26139.05809-.29044.37757-.81322.90035a1.36245,1.36245,0,0,0-.46469.81322c-.05809.11617-.60992.72608-.668.84225a.19816.19816,0,0,1-.26139.0581,1.46521,1.46521,0,0,1-.20331-.55183,9.036,9.036,0,0,1,.05809-1.01652c.0581-.55182.11618-.40661.08713-.639a1.27484,1.27484,0,0,1,.08713-.52278l.17426-.4647a1.225,1.225,0,0,0-.05809-.52277c-.11617-.11618-.029-.52278-.05809-.639,0-.11618-.29043-.26139-.84226-.40661s-.60991-.14522-.81321-.20331-.11617-.05809-.34853-.20331a1.42145,1.42145,0,0,0-.55182-.29043c-.31948-.05809-.23235-.11617-.31948-.26139a.44008.44008,0,0,0-.29044-.23234c-.14521-.0581-.05809-.23235-.05809-.34853a.2596.2596,0,0,0-.11617-.23234.524.524,0,0,1-.05809-.34853,2.79035,2.79035,0,0,0-.14522-.668c-.05809-.20331.14522-.34853.29044-.49375s-.08713-.49374-.08713-.49374a.88617.88617,0,0,0-.23234-.20331c-.08713-.08712-.17426-.029-.4647-.029-.26139,0-.26139.05809-.43565.17426s-.23235.14522-.34853.05809-.29043-.029-.37756-.08713-.29043-.23234-.52278-.4066-.029-.11618-.14521-.23235a.95564.95564,0,0,0-.52278-.14521.63688.63688,0,0,0-.4647.05809c-.11617.08712-.14522.11617-.34852.029s-.11618-.11617-.26139-.29043-.029-.14522-.20331-.14522a3.15321,3.15321,0,0,0-.81322.23234c-.23234.05809-.17426-.08712-.23234-.14521-.08713-.05809-.40661-.05809-.4647-.17427s-.37756-.17426-.58087-.08712a.50206.50206,0,0,1-.43565-.05809l.05809-.52278a2.0541,2.0541,0,0,0-.05809-.34853s-1.59739-1.68452-1.74261-1.74261,0,.31948,0,.31948l.20331.49375.87131,1.01652-.08713.11617h-.20331s-.55182-.58087-.60991-.639-.20331-.29043-.23235-.31948c-.08712-.05809-.17426-.08713-.26139-.14522l-.05809-.11617s0-.17426-.05809-.20331a8.48855,8.48855,0,0,1-.29043-1.01652c0-.05809-.26139-.17426-.60992-.55182a2.05772,2.05772,0,0,1-.37756-1.336,2.10591,2.10591,0,0,1,.26139-.78418l-.029-.43565a1.66144,1.66144,0,0,0,.029-.40661c0-.05809-.17426-.23234-.20331-.37756s.05809-.08713.14522-.17426.05809-.20331.05809-.29044a7.09575,7.09575,0,0,0-.29043-.697c-.14522-.23234-.02905-.26139.029-.34852a.47828.47828,0,0,0,.11617-.4647.69053.69053,0,0,0-.49374-.43565.32512.32512,0,0,0-.43565.14521s-.26139.20331-.34853.29044c-.08712.05809-.55182.29043-.55182.29043s-.40661.05809-.49374-.029.029-.17426.26139-.20331.58087-.4647.8713-.75513.05809-.40661.14522-.58087c.05809-.14522.34852-.20331.4647-.31948.11617-.14522.029-.31948,0-.40661-.029-.05809.46469,0,.49374,0s.11617-.26139.11617-.26139.20331-.14521.37756-.29043a.73127.73127,0,0,1,.4647-.05809.84637.84637,0,0,1,.29043.26139c.11618.17426.11618.11617.37756.34852.26139.20331.37757,0,.55183-.029s.11617.05809.29043.20331a.855.855,0,0,0,.52278.17426c.08713,0,.20331-.20331.14522-.26139a1.86338,1.86338,0,0,0-.29044-.17426l-.14521-.26139h-.37756c-.11618,0,0-.11618.08712-.26139s-.029-.20331-.029-.20331l-.23235.029-.37756.0581s-.31948.029-.43565.029c-.14522,0-.23234-.20331-.29043-.49374s.2033-.29044.2033-.29044.05809-.46469.17427-.46469a12.81,12.81,0,0,1,1.56834-.92939,2.81579,2.81579,0,0,0,.95843-.639c.11617-.11617-.029-.17426-.08712-.14522a3.44836,3.44836,0,0,0-.4647.23235l-1.51027.78417s-.029.20331-.2033.20331a5.549,5.549,0,0,0-1.307.9294c-.26139.31948-.08713.17426-.08713.31948.029.14521-.029.14521-.29043.37756-.26139.26139-.029.29043-.05809.34852-.029.08713-.20331.11618-.31948.11618-.11617-.029-.08713-.05809-.17426-.20331s-.11618-.02905-.26139.17426-.23235.14522-.26139.11617c-.02905,0-.05809-.14521-.05809-.14521a3.3977,3.3977,0,0,1-.58087.34852c-.08713,0,.05809-.23234.14522-.34852s1.88782-1.88783,2.26538-2.17826a21.18485,21.18485,0,0,1,3.8047-1.77166,18.41792,18.41792,0,0,1,5.77964-.639,7.767,7.767,0,0,1,2.32348.55182c.20331.08713,2.12017.92939,3.02052,1.365.8713.43565.697.34852.72609.43565.05809.08714-.08713.029-.17427-.029a1.59381,1.59381,0,0,0-.49374-.14522c-.08713,0-.029.11617.029.20331s.49374.26139.46469.43565-.60991-.23234-.75513-.20331.14522.40661.34853.52278c.17426.11618.4066.14522.60991.29044s.14522.31948.26139.697c.11617.34852-.08713.40661-.08713.40661s-.14521.14521-.49374-.14522a4.75472,4.75472,0,0,0-.49374-.37756s-.43565-.11618-.43565-.34853.23234-.20331.05809-.34852-.55183-.11618-.697-.17427-.23235-.639-.31948-.72608-.40661-.08713-.43566.08713c-.05809.17426-.05809.26139-.14521.26139s-.14522.14522-.17427.20331c0,.05809-.11617.08713-.17426.08713a2.11045,2.11045,0,0,1-.58087-.37756c-.14521-.14522.29044,0,.4647-.14522.17426-.11617-.11617-.2033-.14522-.26139s-.34852.029-.4066.029a1.09557,1.09557,0,0,1-.55183-.29043c-.20331-.17426.029-.17426.20331-.23235s.52278.11617.75513.08713.14522-.14521.08713-.2033-.26139-.05809-.37756-.08713c-.11618,0-.17427-.14522-.14522-.23235,0-.08713.26139-.11617.29043-.17426s-.14521-.17427-.29043-.29044-.14522.029-.23234.14522-.37757.08713-.49375.11617-.029.08713-.029.2033-.08713.05809-.23235.05809-.2033-.23235-.37756-.31948a5.22714,5.22714,0,0,0-.78417-.2033,2.68617,2.68617,0,0,0-.29044.08713.667.667,0,0,1-.58087-.14522c-.29043-.2033-.37756,0-.40661,0a.89071.89071,0,0,1-.37756-.029c-.08712-.05809-.05809-.23235-.08712-.29044s-.14522-.08713-.43566-.08713a11.90084,11.90084,0,0,0-1.45217.05809c-.26139.05808-.78418.08713-1.13269.17426s-.14522.2033-.05809.2033c.05809,0,.37756,0,.668.029a5.7121,5.7121,0,0,1,.75514.05808c.23234.05809.34852.29044.49374.60992s-.31948.14522-.43565.14522c-.14522,0-.029.2033-.029.2033l.49374.14522s.40661,0,.52278.14521.14522.11618.23235.05809a.62771.62771,0,0,1,.31948-.029c.08712.029.23234.29044.31948.40662a3.8766,3.8766,0,0,1,.31948.697,2.8636,2.8636,0,0,0,.31948.668c.05809.08713.11617.31948.05809.37756a4.433,4.433,0,0,1-.90035-.029s-.23235.029-.58087-.34853-.43565-.26139-.52278-.37756a.12342.12342,0,0,1,.029-.20331,2.42666,2.42666,0,0,1-.52277-.17426c-.23235-.11617-.37757-.29043-.55183-.29043-.14522-.029-.17426.14521-.31948.29043a.55456.55456,0,0,1-.43565.08713.80253.80253,0,0,1-.14522-.34853.72884.72884,0,0,1,.05809-.29043,2.57477,2.57477,0,0,0,.17427-.60992c0-.14521-.29044-.05808-.31948-.029-.0581.029-.23235.14522-.23235.23235-.029.08713.05809.31947-.029.49374a1.99665,1.99665,0,0,0-.17427.37756c-.029.11617.05809.14521.02905.43565s-.05809.11617-.23235.08713c-.14521-.029-.26138.08712-.31948.11617s-.17426-.029-.23234-.14522a1.27919,1.27919,0,0,1,.05809-.4647c.02905-.08712.37756-.08712.37756-.08712s-.08712-.34853-.11617-.40661c0-.08713-.4647.17426-.4647.17426s-.17426.14522-.34852.26139a2.62684,2.62684,0,0,1-.72609.29044c-.37756.11617-.23234.11617-.37756.26139a.37773.37773,0,0,0-.08713.34852,1.79333,1.79333,0,0,0,.29044.08713c.23234.05809.11617.029.29043.14522.17426.14521.43565.05809.43565.34852,0,.26139-.05809.31948-.05809.55182,0,.20331.20331.029.4647,0,.23235-.029.08713-.11617.08713-.29043a.41132.41132,0,0,1,.14522-.29043.95186.95186,0,0,1,.23234.17426c.05809.05809.20331-.05809.23234-.11617a.69084.69084,0,0,0-.14521-.40661c-.08713-.11617,0-.14522.14521-.31948s.14522.26139.20331.40661c.08713.14521.08713.05809.20331-.26139s.31948-.23235.37756-.23235.29044.08713.40661.08713c.11617.029.52278.20331.72608.26139.23235.08713.20331-.029.29044-.029s.26139.08713.26139.14522-.37756.14522-.37756.14522-.08713.05809-.05809.11617.2033.11617.37756.14522.14521.23234.08712.46469-.17426.08713-.17426.08713-.26139-.029-.43565-.05809a1.593,1.593,0,0,0-.37756,0c-.11617,0-.34853.029-.34853.029a1.39044,1.39044,0,0,1,.14522-.31948.40511.40511,0,0,0,0-.31948c-.05809-.11618-.40661-.23235-.52278-.11618a8.52976,8.52976,0,0,0-.49374.75514c-.11617.14521-.05809.26139.029.29043s.40661-.029.52278.029c.14522.05809.029.31948,0,.34852,0,.029-.17426.08713-.2033.08713a.95471.95471,0,0,1-.34853-.17426.18238.18238,0,0,0-.23234-.029c-.05809,0-.14522.29044-.29044.639-.11617.34853-.029.14522.14522.40661s.26139.14521.52278.08712.29043.02905.49374.05809c.23234.05809.14522.20331.14522.20331l.23234.23235s.14522.11617.26139.2033.08713-.029.17426-.26139,0-.17426-.2033-.34852c-.23235-.17426.26139-.43565.26139-.43565a.79278.79278,0,0,0-.31948-.17427c-.20331-.05809-.11618-.29043-.11618-.46469a.82417.82417,0,0,1,.14522-.40661,1.54326,1.54326,0,0,1,.55182.05809c.29044.08713.31948.08713.37757.17426.05809.05809.17426-.17426.17426-.17426s-.02905-.34852.31948-.11617.17426.23234.37756.20331c.17426,0,.11617.14521.4647.23234a1.71936,1.71936,0,0,0,.58087.05809,1.63457,1.63457,0,0,0,.29043.05809c.08713,0,.26139.29044.40661.40661s.20331,0,.37756,0,.26139-.05809.43565.11617-.05809.14522-.29043.26139a3.45479,3.45479,0,0,1-.40661.17426l-.31948-.05809a1.4253,1.4253,0,0,0-.11617-.29043c-.05809-.11617-.20331-.05809-.40661.05809a2.37793,2.37793,0,0,0-.81321.8713c-.14522.34853.05809.26139.14521.23235s.14522-.17427.20331-.23235a.82334.82334,0,0,1,.4647-.17426c.11617,0,.26139.23234.31948.31948s.11617.029.17426-.05809a1.019,1.019,0,0,0,.14522-.23235c.05809-.05809.11617.11618.14522.29044a.6999.6999,0,0,1-.20331.52278c-.11617.11617-.14522.11617-.23234.11617s-.0581-.17426-.20331-.31948-.17427.11617-.20331.14522a.86952.86952,0,0,0-.11617.29043c0,.02905-.08713.02905-.08713.02905l-.31948.34852a.78632.78632,0,0,0,.23234.34853c.14522.14522-.37756.34852-.37756.34852l-.14521.14522v.52278a5.58158,5.58158,0,0,1-.02905.95843.458.458,0,0,1-.37756.43565,2.16131,2.16131,0,0,0-.23234.55183c-.029.2033.14521.17426.43565.46469s.2033.26139.26139.49375-.08713.14521-.31948.11617c-.26139-.029-.11618-.08713-.17427-.17427s-.29043-.14521-.34852-.2033a4.44635,4.44635,0,0,0-.37756-.4647c-.11617-.08713-.23235,0-.4647,0s-.4647.029-.40661.49374c.029.4647-.08712.05809-.46469.029a1.1139,1.1139,0,0,0-.75514.26139,6.62933,6.62933,0,0,0-.05809.78417.73872.73872,0,0,1,.05809.20331,2.89521,2.89521,0,0,0-.11617.31948c-.029.14522.08713.26139.11617.37756s.37757.34853.639.58087a.463.463,0,0,0,.52278.08713.544.544,0,0,0,.37756-.29044,3.61474,3.61474,0,0,1,.31948-.668.52685.52685,0,0,1,.37757-.08713c.14521.029.08712.37756.08712.37756s-.17426.55183-.23234.697c-.02905.14522-.02905.11618.08713.23235s.17426,0,.34852-.08713.17426-.20331.26139-.23234.20331.029.49374.23234.11617.20331,0,.49374c-.11617.26139,0,.11618.11617.26139a2.71969,2.71969,0,0,0,.40661.4647c.17426.17426.26139.029.26139.029a.57483.57483,0,0,1,.81321-.43566c.668.29044.31948-.029.52278-.14521.20331-.14522.26139-.668.58087-.84226s.05809-.26139.17426-.29044c.14522-.029.11618.29044.26139.37756s.05809-.17426.08713-.43565c0-.26139.05809-.23234.37756-.029s.14522.14522.43565.17426.17427-.20331.52278-.40661c.34853-.23234.34853-.08712.49375,0s.52277.08713.75513.20331a4.41166,4.41166,0,0,0,.58087.17426c.23234.08713.31948-.23234.49374-.34852a.37891.37891,0,0,1,.40661.029,2.19769,2.19769,0,0,0,.43565-.029c.05809,0,.75513.26139.52278.639s.08712.26139.08712.26139.29044-.08713.78418-.26139c.4647-.17426.49374-.20331.668-.26139.17426-.029.46469.029.668,0,.20331,0,.26139-.17426.668,0s0,.78418,0,1.365c-.11613.639-.14517.92941-.14517.92941Z"/><path class="cls-4" d="M140.93213,46.10948a2.4898,2.4898,0,0,0-.37757.08712c-.05809.02905-.14521.05809-.2033.08713a.63659.63659,0,0,0,.08712.23234l.29044-.029s.26139-.11617.26139-.17426c.029-.05808.08713-.17425-.05808-.20329m2.643,2.84626c.05809-.05809.31948-.14522.37756-.05809.05809.05809.14522.23234.05809.23234s-.14521-.23234-.2033.05809a2.45038,2.45038,0,0,0-.02905.60992.6323.6323,0,0,0,.14522.23234c.05809,0,.17426.17427.23234.029.08713-.14522-.14521-.49374-.14521-.60992s0-.2033.05809-.26139a.21338.21338,0,0,1,.17426-.05809c.05809,0,.08713-.08712.14522-.029s.05809.11617.08712.17426a.40534.40534,0,0,0,.14522.11617s.14522-.08712.17426-.029c.029.029-.20331.05809.05809.14522s.26139.26139.34853.05809a.88914.88914,0,0,0,.08712-.26139s-.14521-.029-.17426,0c-.05809,0-.14522,0-.14522-.05809a1.32934,1.32934,0,0,0-.11617-.43566.43744.43744,0,0,0-.23234-.11617,2.25162,2.25162,0,0,0-.26139.02905l-.26139-.20331-.23234-.05809-.17427-.029a.97078.97078,0,0,0-.34852.14522c-.08713.05809-.29044.05809-.23235.20331.14521.08714.4066.20332.46469.17427m-2.99148-3.22383a1.09939,1.09939,0,0,0-.23234-.34852c-.17427,0-.43566,0-.29044.14522.14522.17426.23235.29043.31948.29043.08713.029.26139.08714.2033-.08713"/><path class="cls-5" d="M145.9276,53.89313c-.02905.08713-.02905.20331.08712.23234a2.2975,2.2975,0,0,0,.668-.23234c.14522-.05809.4647.14522.4647.14522a.65386.65386,0,0,0,.37756.029,3.211,3.211,0,0,0,.37756-.20331s.11617-.11617-.11617-.17426a4.83735,4.83735,0,0,1-.75514-.17426c-.17426-.05809-.26138-.11617-.4066-.029-.17425.11618-.697.40662-.697.40662m2.46869-.11617s-.17426.37756-.14522.46469c.02905.0581.52278.029.52278.029a3.31374,3.31374,0,0,0,.43565-.17426c.08713-.05809.37756-.14522.23235-.29044a.492.492,0,0,0-.31948-.14521l-.72608.11617m-.40661-11.67548c-.05809.029-.31948.23235-.2033.37757s.52277.29043.639.11617a1.77731,1.77731,0,0,0,.17426-.37756c0-.08713-.14522-.2033-.23235-.23235-.05809-.029-.37757.11617-.37757.11617m7.23182,1.56835a1.81745,1.81745,0,0,1-.23234-.49375s-.02905-.26138.05809-.2033.17426.26139.23234.26139.17427-.17427.17427-.17427a24.54859,24.54859,0,0,1,1.91687,1.94592,17.71335,17.71335,0,0,1,1.59739,2.29443c.20331.43565.81321,1.51026.81321,1.51026l.29044.87131s.2033.34852.05809.31948c-.11619-.029-.60992-1.04557-.69705-.90035a.88567.88567,0,0,0-.08712.4647,2.42831,2.42831,0,0,1-.20331.46469s-.697-.639-.84226-.639a1.30856,1.30856,0,0,1-.43565-.17426.72956.72956,0,0,0-.23234-.98747c-.58087-.43566-.55183-.37757-.78418-.58087a2.754,2.754,0,0,1-.52278-.52278c0-.08713-.31948-.37756-.31948-.37756l.05809-.78418s-.23234-.29044-.37756-.43565a2.2716,2.2716,0,0,1-.37756-.58087l-.05809-.81322-.02907-.46469"/><path class="cls-3" d="M190.18984,65.62669c.17425,0,.29043-.14522.29043-.37756a.291.291,0,0,0-.29043-.29044h-.34853v.668Zm.639,1.24886c-.08713,0-.23234,0-.29044-.11617l-.37756-.668h-.29043v.81322h-.29044c-.11618,0-.2033-.05809-.2033-.11617V64.523h.92939a.70167.70167,0,0,1,.75512.75513.73918.73918,0,0,1-.40661.697l.58087.95843h-.4066Zm-.668-2.96243a1.79848,1.79848,0,0,0-1.8007,1.74261v.029a1.78508,1.78508,0,0,0,1.8007,1.77165,1.804,1.804,0,0,0,1.80069-1.77165,1.82347,1.82347,0,0,0-1.80069-1.77166Zm0,4.008a2.24365,2.24365,0,0,1-2.26539-2.23635h0a2.23728,2.23728,0,0,1,2.23635-2.23635h.029a2.23654,2.23654,0,1,1,0,4.4727Zm-52.133,10.36852.75513-1.71356a.62268.62268,0,0,1,.55182-.31948h4.79218a5.19773,5.19773,0,0,1,.05809.84225,6.01228,6.01228,0,1,1-5.983-5.95391,6.46079,6.46079,0,0,1,4.18226,1.5393l-.84226,1.45218a.48461.48461,0,0,1-.668.14521,4.91685,4.91685,0,0,0-2.701-.95843,3.7764,3.7764,0,1,0,3.54329,4.96644h-3.68851m13.50521.34851a2.18471,2.18471,0,1,0-4.35652,0,2.18471,2.18471,0,1,0,4.35652,0m-2.17826,4.38557a4.41545,4.41545,0,1,1,4.50174-4.41461,4.4321,4.4321,0,0,1-4.50174,4.41461m4.50174-1.59739a1.61156,1.61156,0,0,1,1.59739-1.59739,1.59274,1.59274,0,0,1,1.59739,1.59739,1.61157,1.61157,0,0,1-1.59739,1.59739,1.59274,1.59274,0,0,1-1.59739-1.59739m10.65894-4.61791a1.68555,1.68555,0,0,0,0-3.369h-1.56835v3.369Zm-3.22382,6.09913a.7189.7189,0,0,1-.75512-.697V71.26112h4.24034a3.86288,3.86288,0,0,1,0,7.72555h-1.82973v3.92088Zm8.39355,0V71.14494h1.65549a.56466.56466,0,0,1,.58086.58087V82.90755h-2.23635m10.07809-4.2694a2.31649,2.31649,0,0,0-2.2073-2.35252,2.3573,2.3573,0,1,0,2.2073,2.35252m0,4.2694V81.891a3.47984,3.47984,0,0,1-2.55582,1.13269,4.40932,4.40932,0,0,1,0-8.80018,3.5591,3.5591,0,0,1,2.55582,1.16174V74.36876h1.65548a.56466.56466,0,0,1,.58087.58087v7.95792h-2.23635m4.38557,3.80469,1.85879-4.55983-3.13669-7.81268h1.8007a.85585.85585,0,0,1,.81321.58086l1.71357,4.38557,2.03305-4.96643h1.80069c.34853,0,.46469.26138.31948.58086l-4.85028,11.79165H184.1488m5.5473-5.28591a1.61156,1.61156,0,0,1,1.59739-1.59739,1.59275,1.59275,0,0,1,1.59739,1.59739,1.61157,1.61157,0,0,1-1.59739,1.59739,1.59274,1.59274,0,0,1-1.59739-1.59739"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/haufegroup/haufegroup_featured.svg b/content/en/case-studies/haufegroup/haufegroup_featured.svg
index b552d11773..a61b577ab8 100644
--- a/content/en/case-studies/haufegroup/haufegroup_featured.svg
+++ b/content/en/case-studies/haufegroup/haufegroup_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#005da5;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.55738" y="-3.79362" width="223.25536" height="134.51136"/><path d="M70.73011,68.57377c-7.72723,0-10.07255-2.04907-10.07255-4.666V54.5512h5.061v8.83817c0,2.14782,2.24658,2.74033,5.25847,2.74033a39.0795,39.0795,0,0,0,4.71533-.1975V54.57589h5.061V68.006A79.45679,79.45679,0,0,1,70.73011,68.57377Z"/><polygon points="25.502 68.228 25.502 62.575 15.529 62.575 15.529 68.228 10.468 68.228 10.468 54.527 15.529 54.527 15.529 60.131 25.502 60.131 25.502 54.527 30.563 54.527 30.563 68.228 25.502 68.228"/><path d="M92.40584,57.26684h13.677V54.52651H91.34428c-3.9994,0-5.3819.71594-5.3819,2.7897V68.25283h5.061V62.5253H106.0581V60.08123H91.02333V58.1309C91.048,57.61246,91.34428,57.26684,92.40584,57.26684Z"/><path d="M116.501,57.26684c-1.08626,0-1.35782.34562-1.35782.83938v1.99969h15.03476v2.34533H115.14315v2.1972c0,.49375.29625.83938,1.35782.83938h13.67694v2.74032H115.4394c-3.9994,0-5.3819-.71594-5.3819-2.7897V57.29153c0-2.07377,1.3825-2.78971,5.3819-2.78971h14.73852v2.74033H116.501Z"/><path class="cls-2" d="M135.28825,65.66063c0-.69125.395-.93813,1.58-.93813h2.02439c1.16032,0,1.58.24688,1.58.93813V67.3147c0,.69126-.395.93813-1.58.93813h-2.02439c-1.16032,0-1.58-.24687-1.58-.93813Z"/><path d="M45.72154,59.785a50.47135,50.47135,0,0,0-8.1716.64187c-1.45657.22219-2.09845.79-2.09845,2.02439v3.45627c0,1.23438.64188,1.77751,2.09845,2.02438a50.47023,50.47023,0,0,0,8.1716.64188,66.931,66.931,0,0,0,9.85037-.61719V59.069c0-4.29564-1.65407-4.54252-7.25816-4.54252H37.05619v2.37H48.1903c2.09845,0,2.29595.56782,2.29595,1.82689V59.785Zm0,6.51753a24.08331,24.08331,0,0,1-4.1722-.32094c-.71595-.12344-1.03688-.395-1.03688-.98751V63.38937c0-.61719.32094-.88876,1.03688-.98751a24.08232,24.08232,0,0,1,4.1722-.32093h4.74V66.1297C49.49875,66.22845,47.62249,66.30251,45.72154,66.30251Z"/><path d="M152.17459,68.42564c-3.9994,0-7.1841-2.32063-7.1841-6.98659,0-4.22159,2.81438-6.9866,7.38159-6.9866a9.10468,9.10468,0,0,1,3.82659.74063l-.64188,1.13563a7.75929,7.75929,0,0,0-3.06127-.59251c-3.30814,0-5.1844,2.22189-5.1844,5.77691,0,3.82658,2.24657,5.62878,4.78941,5.62878a7.32732,7.32732,0,0,0,2.1972-.27157V61.76h-3.11065V60.62435h5.28316V67.7097A12.10491,12.10491,0,0,1,152.17459,68.42564Z"/><path d="M165.259,58.7481a4.6438,4.6438,0,0,0-1.35782-.17282,4.308,4.308,0,0,0-1.65407.27157v9.38129h-2.17251V58.15559a12.37618,12.37618,0,0,1,4.51783-.74063c.49375,0,1.03688.04938,1.16032.04938Z"/><path d="M172.44312,68.42564c-3.5797,0-5.20908-2.32063-5.20908-5.53s1.62938-5.50534,5.20908-5.50534,5.20908,2.32063,5.20908,5.50534S176.02283,68.42564,172.44312,68.42564Zm0-9.92442c-2.29594,0-3.06127,1.9997-3.06127,4.36971s.76531,4.3944,3.06127,4.3944,3.06127-2.02439,3.06127-4.3944S174.76376,58.50122,172.44312,58.50122Z"/><path d="M185.57694,68.42564c-3.16,0-4.81409-1.08625-4.81409-3.481V57.58778h2.14783v7.431c0,1.48126.86407,2.22189,2.691,2.22189A7.23093,7.23093,0,0,0,187.947,66.895V57.58778h2.14783V67.63564A12.37028,12.37028,0,0,1,185.57694,68.42564Z"/><path d="M197.89607,68.401a9.11009,9.11009,0,0,1-2.04907-.24688v4.32034h-2.12313V58.1309a10.93672,10.93672,0,0,1,4.09814-.74062c3.77721,0,5.851,2.09844,5.851,5.33252C203.64829,66.27782,201.377,68.401,197.89607,68.401Zm-.17281-9.94912a5.46342,5.46342,0,0,0-1.87626.27157v8.34441a5.51753,5.51753,0,0,0,1.58.22219c2.691,0,4.07346-1.62938,4.07346-4.46846C201.50046,60.15529,200.48827,58.45184,197.72326,58.45184Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#005da5;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.55738" y="-3.79362" width="223.25536" height="134.51136"/><path d="M70.73011,68.57377c-7.72723,0-10.07255-2.04907-10.07255-4.666V54.5512h5.061v8.83817c0,2.14782,2.24658,2.74033,5.25847,2.74033a39.0795,39.0795,0,0,0,4.71533-.1975V54.57589h5.061V68.006A79.45679,79.45679,0,0,1,70.73011,68.57377Z"/><polygon points="25.502 68.228 25.502 62.575 15.529 62.575 15.529 68.228 10.468 68.228 10.468 54.527 15.529 54.527 15.529 60.131 25.502 60.131 25.502 54.527 30.563 54.527 30.563 68.228 25.502 68.228"/><path d="M92.40584,57.26684h13.677V54.52651H91.34428c-3.9994,0-5.3819.71594-5.3819,2.7897V68.25283h5.061V62.5253H106.0581V60.08123H91.02333V58.1309C91.048,57.61246,91.34428,57.26684,92.40584,57.26684Z"/><path d="M116.501,57.26684c-1.08626,0-1.35782.34562-1.35782.83938v1.99969h15.03476v2.34533H115.14315v2.1972c0,.49375.29625.83938,1.35782.83938h13.67694v2.74032H115.4394c-3.9994,0-5.3819-.71594-5.3819-2.7897V57.29153c0-2.07377,1.3825-2.78971,5.3819-2.78971h14.73852v2.74033H116.501Z"/><path class="cls-2" d="M135.28825,65.66063c0-.69125.395-.93813,1.58-.93813h2.02439c1.16032,0,1.58.24688,1.58.93813V67.3147c0,.69126-.395.93813-1.58.93813h-2.02439c-1.16032,0-1.58-.24687-1.58-.93813Z"/><path d="M45.72154,59.785a50.47135,50.47135,0,0,0-8.1716.64187c-1.45657.22219-2.09845.79-2.09845,2.02439v3.45627c0,1.23438.64188,1.77751,2.09845,2.02438a50.47023,50.47023,0,0,0,8.1716.64188,66.931,66.931,0,0,0,9.85037-.61719V59.069c0-4.29564-1.65407-4.54252-7.25816-4.54252H37.05619v2.37H48.1903c2.09845,0,2.29595.56782,2.29595,1.82689V59.785Zm0,6.51753a24.08331,24.08331,0,0,1-4.1722-.32094c-.71595-.12344-1.03688-.395-1.03688-.98751V63.38937c0-.61719.32094-.88876,1.03688-.98751a24.08232,24.08232,0,0,1,4.1722-.32093h4.74V66.1297C49.49875,66.22845,47.62249,66.30251,45.72154,66.30251Z"/><path d="M152.17459,68.42564c-3.9994,0-7.1841-2.32063-7.1841-6.98659,0-4.22159,2.81438-6.9866,7.38159-6.9866a9.10468,9.10468,0,0,1,3.82659.74063l-.64188,1.13563a7.75929,7.75929,0,0,0-3.06127-.59251c-3.30814,0-5.1844,2.22189-5.1844,5.77691,0,3.82658,2.24657,5.62878,4.78941,5.62878a7.32732,7.32732,0,0,0,2.1972-.27157V61.76h-3.11065V60.62435h5.28316V67.7097A12.10491,12.10491,0,0,1,152.17459,68.42564Z"/><path d="M165.259,58.7481a4.6438,4.6438,0,0,0-1.35782-.17282,4.308,4.308,0,0,0-1.65407.27157v9.38129h-2.17251V58.15559a12.37618,12.37618,0,0,1,4.51783-.74063c.49375,0,1.03688.04938,1.16032.04938Z"/><path d="M172.44312,68.42564c-3.5797,0-5.20908-2.32063-5.20908-5.53s1.62938-5.50534,5.20908-5.50534,5.20908,2.32063,5.20908,5.50534S176.02283,68.42564,172.44312,68.42564Zm0-9.92442c-2.29594,0-3.06127,1.9997-3.06127,4.36971s.76531,4.3944,3.06127,4.3944,3.06127-2.02439,3.06127-4.3944S174.76376,58.50122,172.44312,58.50122Z"/><path d="M185.57694,68.42564c-3.16,0-4.81409-1.08625-4.81409-3.481V57.58778h2.14783v7.431c0,1.48126.86407,2.22189,2.691,2.22189A7.23093,7.23093,0,0,0,187.947,66.895V57.58778h2.14783V67.63564A12.37028,12.37028,0,0,1,185.57694,68.42564Z"/><path d="M197.89607,68.401a9.11009,9.11009,0,0,1-2.04907-.24688v4.32034h-2.12313V58.1309a10.93672,10.93672,0,0,1,4.09814-.74062c3.77721,0,5.851,2.09844,5.851,5.33252C203.64829,66.27782,201.377,68.401,197.89607,68.401Zm-.17281-9.94912a5.46342,5.46342,0,0,0-1.87626.27157v8.34441a5.51753,5.51753,0,0,0,1.58.22219c2.691,0,4.07346-1.62938,4.07346-4.46846C201.50046,60.15529,200.48827,58.45184,197.72326,58.45184Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/huawei/huawei_featured.svg b/content/en/case-studies/huawei/huawei_featured.svg
index 860f62dd4e..a8a8f22c8f 100644
--- a/content/en/case-studies/huawei/huawei_featured.svg
+++ b/content/en/case-studies/huawei/huawei_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#020302;}.cls-3{fill:#e42026;}.cls-4{fill:#020202;}.cls-5{fill:#9f1d20;}.cls-6{fill:#d92126;}.cls-7{fill:#df2026;}.cls-8{fill:#e53026;}.cls-9{fill:#020303;}.cls-10{fill:#d32127;}.cls-11{fill:#f3a07b;}.cls-12{fill:#f29c77;}.cls-13{fill:#f1946f;}.cls-14{fill:#e83a25;}.cls-15{fill:#e64125;}.cls-16{fill:#ea532e;}.cls-17{fill:#cc2227;}.cls-18{fill:#c02226;}.cls-19{fill:#e64025;}.cls-20{fill:#e52926;}.cls-21{fill:#f1916a;}.cls-22{fill:#f28e66;}.cls-23{fill:#c62227;}.cls-24{fill:#f3a582;}.cls-25{fill:#eb5c36;}.cls-26{fill:#f29873;}.cls-27{fill:#e84727;}.cls-28{fill:#cd2227;}.cls-29{fill:#e84d2b;}.cls-30{fill:#f3a37f;}.cls-31{fill:#ef865e;}.cls-32{fill:#ee8159;}.cls-33{fill:#eb5832;}.cls-34{fill:#eb5732;}.cls-35{fill:#f08962;}.cls-36{fill:#e73725;}.cls-37{fill:#ea5f39;}.cls-38{fill:#eb5631;}.cls-39{fill:#e74426;}.cls-40{fill:#f19671;}.cls-41{fill:#ba2125;}.cls-42{fill:#b12024;}.cls-43{fill:#b52125;}.cls-44{fill:#ec764e;}.cls-45{fill:#ea633b;}.cls-46{fill:#f4aa89;}.cls-47{fill:#ed7d55;}.cls-48{fill:#ee7b53;}.cls-49{fill:#f4a886;}.cls-50{fill:#ab1f23;}.cls-51{fill:#ed724a;}.cls-52{fill:#e73f25;}.cls-53{fill:#f4ae8d;}.cls-54{fill:#f4b090;}.cls-55{fill:#df2126;}.cls-56{fill:#e84526;}.cls-57{fill:#f3ac8b;}.cls-58{fill:#ec6c46;}.cls-59{fill:#e74a29;}.cls-60{fill:#dc2126;}.cls-61{fill:#a61f22;}.cls-62{fill:#ec6842;}.cls-63{fill:#e74b29;}.cls-64{fill:#eb653f;}.cls-65{fill:#ec6b45;}.cls-66{fill:#eb5f38;}.cls-67{fill:#ec6d47;}.cls-68{fill:#ec6640;}.cls-69{fill:#ed714a;}.cls-70{fill:#ea633c;}.cls-71{fill:#eb643d;}.cls-72{fill:#b62125;}.cls-73{fill:#eb5e38;}.cls-74{fill:#eb5a33;}.cls-75{fill:#d82628;}.cls-76{fill:#fff;}.cls-77{fill:#f4b192;}.cls-78{fill:#f5b495;}.cls-79{fill:#f5b597;}.cls-80{fill:#f5b79a;}.cls-81{fill:#f7bda1;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.02874" y="-3.39352" width="223.25536" height="134.51136"/><path class="cls-2" d="M55.12573,99.2679l3.35929.02072c.60972.005.52686-.08015.52776.54757.00361,1.96784.00721,3.93479-.0045,5.90217-.00225.294.05674.39628.37825.39448q3.86949-.02161,7.739,0c.32287.00225.38006-.10177.37826-.39492-.01171-2.01963-.00045-4.03926-.01171-6.05843-.0018-.29225.05133-.40708.37961-.39987,1.05507.02341,2.11059.01666,3.16566.0027.25757-.00316.35664.03962.35574.33142q-.014,8.12985-.0009,16.25969c.00045.27063-.06484.34988-.34179.34583q-1.58238-.0252-3.16565,0c-.30126.0045-.39718-.06664-.39492-.385.01531-2.08492.00135-4.16939.01531-6.25386.0018-.30891-.04954-.41564-.39222-.41338q-3.86949.0252-7.739.0027c-.28459-.00136-.3697.05764-.36745.358.01486,2.04529.00991,4.091.00631,6.13633-.00135.63719.08781.54173-.56739.54758-1.10641.00945-2.21326.014-3.31967.02072Z"/><path class="cls-3" d="M65.94121,31.88261a35.15188,35.15188,0,0,1,4.66067-6.04718c.63944-.67456.6543-.666,1.22214.05809a243.83276,243.83276,0,0,1,23.171,35.636q2.80226,5.24157,5.28345,10.643c.03828.08241.0734.16617.11258.24767a.39357.39357,0,0,1-.03062.5021.43408.43408,0,0,1-.54172.05493q-.70218-.338-1.395-.69482c-5.42891-2.77164-10.78891-5.66982-16.01112-8.817-3.28724-1.98135-6.51594-4.05187-9.60145-6.33943-.09276-.06889-.17652-.1495-.26433-.22425-.35709-.97806-.78488-1.92731-1.16629-2.89547a86.456,86.456,0,0,1-4.01584-13.339c-.58945-2.7122-1.04291-5.44646-1.38514-8.20009-.02432-.19453-.01981-.39-.03828-.5845Zm61.10847,45.02214c-1.48422.00586-2.96842.01531-4.45264.01621-1.53645.00045-3.07334-.00991-4.60979-.00945-.25668,0-.52326.01531-.60161-.2936-.07115-.27874.1477-.41969.34494-.55208,2.74236-1.84085,5.53517-3.60291,8.35544-5.32128,10.23412-6.23495,20.68576-12.08939,31.20312-17.82945.51336-.28009,1.03571-.54307,1.5405-.83667.25983-.15131.35124-.07971.43049.18462a18.9688,18.9688,0,0,1,.79075,4.56071,20.06207,20.06207,0,0,1-.48093,5.38477,1.43016,1.43016,0,0,1-.06574.18013,3.23773,3.23773,0,0,0-1.05823.84027,55.05972,55.05972,0,0,1-7.56606,5.58606,56.17661,56.17661,0,0,1-22.05739,7.88307,11.37319,11.37319,0,0,1-1.51438.13329.42831.42831,0,0,0-.25848.0734Zm22.91252-43.932a18.3173,18.3173,0,0,1,2.11645,5.14656,14.42908,14.42908,0,0,1-3.86634,14.05318,52.15515,52.15515,0,0,1-8.85843,7.14457A198.4585,198.4585,0,0,1,120.62921,70.3046c-1.66659.8781-3.35073,1.72288-5.02543,2.58477-.2166.11167-.4413.21614-.64934.02161-.209-.19543-.11979-.43364-.02027-.65024q3.199-6.96176,6.90861-13.665a.35142.35142,0,0,1,.05134-.05854.71415.71415,0,0,1,.4476-.10041,24.074,24.074,0,0,0,7.6201-1.54771,27.92524,27.92524,0,0,0,8.65985-5.27309,34.07542,34.07542,0,0,0,6.33087-7.54265,40.447,40.447,0,0,0,4.23739-9.2439c.17111-.53316.31791-1.074.48452-1.608.04053-.12924.04233-.34089.28775-.24857Z"/><path class="cls-4" d="M108.41372,99.28816c1.29373,0,2.60637.0036,3.91857-.0027.28234-.00135.25217.23416.30035.38141q1.35093,4.11354,2.68384,8.23387c.45346,1.39595.90872,2.79235,1.3991,4.29908.18012-.63584.33367-1.16585.47958-1.69766q1.49276-5.45322,2.97923-10.90869c.059-.21615.14184-.31521.39222-.31206q1.97369.02205,3.94739,0c.263-.00315.35259.09907.42464.32872q1.94937,6.22639,3.91317,12.44874c.00585.018.02657.032.07385.08646.24181-.79074.476-1.55446.70878-2.31818q1.54995-5.09073,3.09181-10.18369c.08105-.26929.17967-.3688.47192-.3634,1.09379.02026,2.18849.0153,3.28274.0027.25938-.0027.33773.04052.24632.31431q-2.74013,8.17441-5.46447,16.35425a.34044.34044,0,0,1-.39312.26614q-2.07141-.01532-4.14282,0c-.23687.00225-.32558-.06755-.39718-.30126q-1.81563-5.92152-3.65559-11.83542c-.03422-.11033-.072-.21976-.13058-.40078-.30892,1.13658-.60026,2.20741-.89071,3.27824q-1.21,4.46253-2.41365,8.92689c-.06349.23866-.14094.33637-.40527.33367q-2.0322-.01841-4.06447-.00225c-.2202.00135-.34809-.04233-.43094-.27333q-2.945-8.20639-5.90353-16.40784c-.02522-.0707-.08556-.13689-.02116-.24722Z"/><path class="cls-3" d="M93.58015,53.46q-2.32539-4.00368-4.368-8.15822a67.5133,67.5133,0,0,1-4.57692-11.36214,24.257,24.257,0,0,1-1.092-7.41746,14.76739,14.76739,0,0,1,7.21392-12.60409,2.06093,2.06093,0,0,1,.24452-.11573c.163.0797.14725.22785.14229.3715-.11888,3.462-.12744,6.92572-.07655,10.38723.02792,1.88409.08781,3.77.19634,5.65361q.09861,1.713.18462,3.42818c.05629,1.0911.14861,2.18084.24047,3.26923q.27784,3.26788.6642,6.52495c.37016,3.11747.84207,6.21919,1.37209,9.31235a1.43033,1.43033,0,0,1,.04052.46517c-.01756.10942-.01441.24722-.186.24541Z"/><path class="cls-4" d="M147.286,109.11837c-1.65444,0-3.30886.009-4.96284-.00856-.3026-.00315-.371.08105-.35438.3661a6.06858,6.06858,0,0,0,.27559,1.60715,3.19094,3.19094,0,0,0,3.15214,2.10563c2.25154.10943,4.50487.03287,6.75686.04053.36024.00135.49038.05989.47058.45346-.03783.7403-.01982,1.48466-.00585,2.22677.0045.23281-.04953.30981-.29855.30891-2.31908-.01035-4.63772.01621-6.95589-.0144a8.57427,8.57427,0,0,1-4.16444-.96051,6.63438,6.63438,0,0,1-3.403-4.91285,13.1445,13.1445,0,0,1,.33908-6.20793,6.38276,6.38276,0,0,1,5.07181-4.53279,13.2716,13.2716,0,0,1,2.9405-.3017c2.01873-.00046,4.03791.01081,6.05664-.00991.36024-.00405.42869.10222.41652.4323q-.03792,1.0545,0,2.10968c.01171.33728-.05674.45571-.43049.45167-1.94082-.02252-3.88164-.01487-5.82246-.00766a7.0511,7.0511,0,0,0-1.54906.1531,3.40343,3.40343,0,0,0-2.76173,3.08146c-.08016.65474-.08016.65474.59081.65474,3.19178,0,6.38309.00585,9.57442-.009.33053-.0009.41068.08376.399.40527q-.03845,1.07409-.00046,2.14887c.01126.32467-.04908.43545-.41112.43-1.64093-.02432-3.28275-.01036-4.92366-.01036Zm-56.15508,7.09369c.71418-1.56257,1.39595-3.05759,2.08041-4.55081q2.76174-6.02285,5.519-12.04841a.47643.47643,0,0,1,.51966-.331c1.13342.01531,2.26685.01261,3.39982.00136a.43319.43319,0,0,1,.47417.28639q3.7398,8.13886,7.50032,16.26824c.12878.27829.15085.38952-.22786.38277q-1.7975-.02942-3.59524-.0009a.4323.4323,0,0,1-.47868-.32872c-.45211-1.11632-.93574-2.22-1.38695-3.33633a.48408.48408,0,0,0-.52776-.37285q-3.59525.02206-7.1914.00045a.4305.4305,0,0,0-.47913.32467c-.44805,1.146-.91276,2.28486-1.37478,3.425-.05583.13825-.08466.28685-.30621.285-1.28652-.00991-2.5735-.0045-3.92532-.0045Z"/><path class="cls-2" d="M90.44151,104.84405c0,1.66749.01441,3.335-.00585,5.002a12.77569,12.77569,0,0,1-.24226,2.47669,4.58865,4.58865,0,0,1-2.83153,3.19538,9.90243,9.90243,0,0,1-4.00773.84928,13.4538,13.4538,0,0,1-5.37531-.67231,6.045,6.045,0,0,1-2.47489-1.70757,4.27527,4.27527,0,0,1-.90287-2.6424c-.18192-3.0049-.04233-6.01385-.0797-9.021-.01126-.91142.00225-1.82375-.005-2.73517-.00135-.19813.01892-.30891.26659-.3062,1.1073.0126,2.21461.01576,3.32146-.00046.33683-.005.26118.20669.26118.38727.0018,3.26922-.00225,6.53846.00586,9.80768a7.58045,7.58045,0,0,0,.10447,1.3185,2.81964,2.81964,0,0,0,2.77929,2.74822,7.52015,7.52015,0,0,0,2.86981-.07565,2.83339,2.83339,0,0,0,2.3569-2.76938q.07768-.85491.072-1.71433c-.00225-3.113.0036-6.22639-.00811-9.33937-.0009-.29269.06935-.37015.36385-.36474q1.58193.029,3.16476.0009c.28775-.0045.37691.06574.3742.36564-.01441,1.73233-.00721,3.46467-.00721,5.197Z"/><path class="cls-5" d="M85.84838,87.37619A20.00248,20.00248,0,0,1,80.134,90.02174,10.24477,10.24477,0,0,1,72.33962,88.674a19.99248,19.99248,0,0,1-6.26287-6.0071C65.64221,82.05,65.245,81.40962,64.86,80.76029c-.13374-.22651-.20308-.34584.172-.35665,2.17183-.063,4.34321-.15086,6.51459-.22561.84478-.02927,1.69-.04728,2.53523-.07025a1.65264,1.65264,0,0,1,1.40406.33953,68.0043,68.0043,0,0,0,9.02731,6.008c.32917.18462.66465.358.99247.54487.1468.08376.35124.1396.34223.376Z"/><path class="cls-6" d="M70.13582,59.70933c1.45134.81055,2.90853,1.61075,4.35267,2.43346,6.78837,3.86768,13.54028,7.79707,20.117,12.01869.99608.63944,1.98,1.29779,2.96932,1.94713.19273.12609.37646.26748.2909.53227-.08286.25532-.30036.2837-.53857.2837q-11.85929.01215-23.71857.02881a1.9907,1.9907,0,0,1-.26568-.03422c.31432-.23236.67321-.09637,1.01229-.12339.44311-.01936.88621-.004,1.32931-.00315.42059-.01171.84162-.00766,1.26266.0018.85513-.01756,1.70981-.01486,2.565,0,.75336-.02026,1.50672-.009,2.25964-.00316.92313-.0063,1.84581-.0126,2.76759.00361,1.50853.041,3.017,0,4.60123.02206-.64664-.42554-1.2622-.76912-1.85841-1.14378a66.5833,66.5833,0,0,1-7.88128-5.80356c-1.24555-1.06632-2.46138-2.16732-3.61236-3.33046a63.15888,63.15888,0,0,1-5.482-6.289c-.11482-.15176-.32827-.294-.17066-.54037Z"/><path class="cls-7" d="M127.04968,76.90475c.27694-.2945.662-.17022.98527-.21164q1.74944-.22292,3.484-.52912a54.59524,54.59524,0,0,0,7.37152-1.86832q2.38651-.7799,4.6922-1.78051c1.37344-.59441,2.714-1.25636,4.03791-1.94983a54.957,54.957,0,0,0,6.53982-4.06177c1.56976-1.12577,3.05848-2.34971,4.52334-3.60516.16751-.14365.31251-.313.47281-.46562.10178-.09681.20625-.23235.34764-.04458a16.56829,16.56829,0,0,1-1.41261,3.97666,18.98407,18.98407,0,0,1-17.1013,10.55205c-4.504-.02432-9.0084.0009-13.51282.0045-.14274,0-.28549-.01081-.42779-.01667Z"/><path class="cls-6" d="M125.955,85.35116c-1.60354-.9515-3.13459-2.01377-4.67869-3.05623-.48048-.32422-.94969-.66555-1.42387-.99878.05629-.26568.27784-.19814.43815-.19319a57.71738,57.71738,0,0,0,13.19084-1.21448.8827.8827,0,0,1,.535-.01171c1.63507.04864,3.27013.09276,4.9052.14771q3.679.12382,7.35712.25937c-.023.28865-.27829.31792-.46921.39852a59.35923,59.35923,0,0,1-6.62672,2.31323,65.77316,65.77316,0,0,1-10.32014,2.0579c-.96726.118-1.94262.15852-2.90763.29766Z"/><path class="cls-8" d="M149.9622,32.9728c-.14139.0045-.145.10987-.17427.21435a45.13632,45.13632,0,0,1-2.20244,6.15389,38.12769,38.12769,0,0,1-3.80374,6.65374,33.38767,33.38767,0,0,1-3.874,4.56116,29.838,29.838,0,0,1-6.46191,4.83134,25.80617,25.80617,0,0,1-6.592,2.54469,22.97045,22.97045,0,0,1-3.48357.54172q-.73709.05135-1.47611.06394.56586-1.12354,1.223-2.1975a6.11519,6.11519,0,0,1,1.41712-.22965,23.26223,23.26223,0,0,0,6.71138-2.00342,26.12067,26.12067,0,0,0,6.10706-3.9636,31.36417,31.36417,0,0,0,5.23348-5.82472,38.80264,38.80264,0,0,0,5.75717-12.87338c.05449-.2175.01531-.51875.3481-.58089a10.7214,10.7214,0,0,1,1.27076,2.10833Z"/><path class="cls-7" d="M65.94121,31.88261c.24812.23731.1531.56963.18642.84432.1351,1.12847.30576,2.25019.48634,3.37145.27513,1.70892.60791,3.40567.98077,5.09657a87.07933,87.07933,0,0,0,2.77569,9.78743c.65385,1.88678,1.38695,3.74385,2.17723,5.578.04774.11078.16166.22831-.0009.34088a27.47052,27.47052,0,0,1-2.41589-1.88453,36.86544,36.86544,0,0,1-3.44125-3.19988c-.33863-1.21358-.75246-2.40464-1.09424-3.61732a97.25213,97.25213,0,0,1-2.23083-9.60189.91407.91407,0,0,0-.16661-.54532A21.99371,21.99371,0,0,1,65.94121,31.88261Z"/><path class="cls-9" d="M155.9747,107.74358c0-2.682.00856-5.3645-.00991-8.04654-.00226-.35844.10041-.42329.43185-.417,1.09289.02162,2.18714.01711,3.28049.0018.27558-.0036.34853.07791.34853.35034q-.01171,8.12444.00045,16.24933c.00046.29269-.10672.33818-.362.33593q-1.67958-.02078-3.35928.0018c-.28415.0045-.33639-.08872-.33548-.35124.009-2.70815.0054-5.41629.0054-8.12444Z"/><path class="cls-10" d="M70.13582,59.70933a.46332.46332,0,0,0,.14275.34628q1.41261,1.83186,2.93825,3.57094c.897,1.02805,1.81924,2.03493,2.79011,2.98824q2.10834,2.07141,4.39,3.9618a66.954,66.954,0,0,0,5.52391,4.09914c1.03706.68943,2.11194,1.32165,3.17016,1.97865.08646.05359.19228.08376.21615.23776H84.67488c-.96591-.75381-2.01828-1.38379-2.99635-2.12185q-2.05924-1.55355-4.02485-3.2215a61.24,61.24,0,0,1-4.71831-4.49991,65.32971,65.32971,0,0,1-5.94676-7.236c-.52236-.73174-1.01409-1.48421-1.50988-2.23352-.10176-.154-.26342-.31161-.11257-.52641q1.93632,1.06319,3.87129,2.1277c.304.168.59891.35214.89836.52867Z"/><path class="cls-11" d="M128.05566,16.95042a5.291,5.291,0,0,1,.94114,1.25006c.04053,1.42747.16661,2.84864.06844,4.28422-.086,1.25726-.127,2.51856-.267,3.77267a31.282,31.282,0,0,1-2.23307,9.14664,12.44062,12.44062,0,0,1-2.066,3.38766,5.3894,5.3894,0,0,1-1.51483,1.21673,3.30705,3.30705,0,0,1-3.58354-.22651,8.0784,8.0784,0,0,1-2.52037-2.98328,26.65062,26.65062,0,0,1-2.75363-9.15159,44.04354,44.04354,0,0,1-.41878-4.70076c-.03017-.81955-.07521-1.63866-.054-2.45687a48.24078,48.24078,0,0,1,.65745-7.22112.574.574,0,0,0,.01711-.30621,6.89235,6.89235,0,0,1,.90783-1.56887.16872.16872,0,0,1,.07069-.03062c.57459-.04053.6543.04413.51425.60341a37.018,37.018,0,0,0-.94879,6.366,40.78909,40.78909,0,0,0-.04414,4.72372,32.7579,32.7579,0,0,0,1.44639,8.68417,14.11581,14.11581,0,0,0,2.16238,4.3959,6.17864,6.17864,0,0,0,1.232,1.18971,2.945,2.945,0,0,0,3.403.01666,7.49,7.49,0,0,0,2.23127-2.77434A23.524,23.524,0,0,0,127.477,27.4606a43.20012,43.20012,0,0,0,.462-8.37166,10.9989,10.9989,0,0,0-.12069-1.55581.952.952,0,0,1,.01711-.46472c.03377-.10042.07925-.20624.22065-.118Z"/><path class="cls-5" d="M70.36638,76.5319a15.74052,15.74052,0,0,1-4.97454-1.74179A19.06421,19.06421,0,0,1,55.55173,61.656a1.47382,1.47382,0,0,1-.04368-.30891q.0018-1.83456.01081-3.67c.263-.09636.30891.1441.385.27829q.77228,1.359,1.59048,2.69013a71.75,71.75,0,0,0,6.09536,8.45407c1.11676,1.33966,2.29882,2.62079,3.48538,3.89966.98617,1.06137,2.06465,2.021,3.07469,3.05308.12339.12608.34494.23055.2166.47958Z"/><path class="cls-12" d="M114.3285,12.96206c.17112.03917.13194.16076.10943.27738-.2211,1.15594-.34584,2.32314-.453,3.49484a43.25636,43.25636,0,0,0-.22155,4.65887c.02611,1.56617.14,3.12694.29135,4.68815a35.95771,35.95771,0,0,0,1.28247,6.69561,16.59072,16.59072,0,0,0,2.69554,5.582,5.08485,5.08485,0,0,0,2.311,1.77646,3.21968,3.21968,0,0,0,3.0855-.53451,8.09746,8.09746,0,0,0,2.35286-2.8518,24.45755,24.45755,0,0,0,2.43661-7.31343,40.72665,40.72665,0,0,0,.56153-4.18515c.0716-.879.10492-1.758.16121-2.6361a21.08455,21.08455,0,0,0,.04953-2.33484c-.027-.56964-.07159-1.13838-.06394-1.70937.0018-.12518-.04278-.26343.0698-.36925a5.6625,5.6625,0,0,1,.93214,1.486c-.073.97537.00135,1.953-.03648,2.92835a43.68916,43.68916,0,0,1-2.02188,12.40776,16.15877,16.15877,0,0,1-2.57215,5.06145,6.14278,6.14278,0,0,1-2.52083,2.10474,3.706,3.706,0,0,1-3.6691-.47373,9.56673,9.56673,0,0,1-2.7158-3.23365A25.77255,25.77255,0,0,1,113.8818,31.358a47.68024,47.68024,0,0,1-.87495-6.18271,61.56132,61.56132,0,0,1-.12383-6.24486c.01711-.97176.09727-1.94713.18148-2.918a20.03139,20.03139,0,0,1,1.264-3.05038Z"/><path class="cls-13" d="M111.27407,22.42526a27.34966,27.34966,0,0,1,.70158-2.90133c.06754-.11843.13914-.10627.195.0045a.90912.90912,0,0,1,.054.42239c.00136.7295-.009,1.459.0018,2.18849a48.25028,48.25028,0,0,0,1.8314,12.95083,21.08656,21.08656,0,0,0,2.93465,6.443,7.273,7.273,0,0,0,2.57756,2.39653,3.801,3.801,0,0,0,3.969-.20084,8.707,8.707,0,0,0,2.72976-2.96167,26.261,26.261,0,0,0,3.01706-7.9245,47.96012,47.96012,0,0,0,1.07308-7.02119c.10087-1.22979.17742-2.465.17832-3.70152a1.93336,1.93336,0,0,1,.023-.467c.027-.10762.04638-.249.22336-.17022a10.45792,10.45792,0,0,1,.70833,2.57576,3.38635,3.38635,0,0,0-.1.99428,52.69759,52.69759,0,0,1-1.11811,8.31357,30.341,30.341,0,0,1-2.23578,6.93878,14.552,14.552,0,0,1-2.22046,3.70783,7.62093,7.62093,0,0,1-3.15035,2.34925,4.16985,4.16985,0,0,1-3.48808-.41878,8.38022,8.38022,0,0,1-2.86845-2.75948,26.572,26.572,0,0,1-3.41378-8.056,49.49343,49.49343,0,0,1-1.33336-7.53318c-.13374-1.29238-.25352-2.58837-.26613-3.892-.0045-.42509-.05133-.85108-.02342-1.27752Z"/><path class="cls-14" d="M148.69142,30.86446c-.24677.20264-.2256.51245-.2954.77993a40.40392,40.40392,0,0,1-2.27315,6.57629,37.19553,37.19553,0,0,1-3.0891,5.63064,34.64862,34.64862,0,0,1-2.796,3.58174,28.92619,28.92619,0,0,1-5.80851,5.029,24.36785,24.36785,0,0,1-8.62157,3.54706,12.65968,12.65968,0,0,1-2.69059.33053l.97672-1.71117a1.68178,1.68178,0,0,1,.71374-.16976,23.22507,23.22507,0,0,0,8.88906-3.46512,27.35531,27.35531,0,0,0,4.98625-4.12076,32.35529,32.35529,0,0,0,3.83661-4.96913,35.40466,35.40466,0,0,0,3.5984-7.567,38.582,38.582,0,0,0,1.242-4.477c.04052-.19.02567-.43364.3062-.47867a9.60361,9.60361,0,0,1,1.02535,1.48331Z"/><path class="cls-15" d="M147.66563,29.38115a2.11337,2.11337,0,0,0-.34538,1.0902,39.94958,39.94958,0,0,1-1.99037,6.21468,34.18233,34.18233,0,0,1-3.62047,6.60961,34.97456,34.97456,0,0,1-2.465,3.10036,26.46728,26.46728,0,0,1-6.78522,5.47214,22.0121,22.0121,0,0,1-7.17564,2.60367,5.24065,5.24065,0,0,1-1.18971.15716q.50343-.96276,1.092-1.87643a1.34189,1.34189,0,0,1,.59756-.15626,23.34715,23.34715,0,0,0,9.94773-5.02182,29.26963,29.26963,0,0,0,6.86492-8.62834,35.712,35.712,0,0,0,3.6637-10.38453c.04323-.21975.02027-.48.267-.61692a18.1322,18.1322,0,0,1,1.13928,1.43648Z"/><path class="cls-16" d="M97.88509,11.62915a2.6872,2.6872,0,0,1,.85468-.15806c.23776-.0725.22065.09952.21975.23866-.00721.85874-.07205,1.71657-.12158,2.57306q-.08511,1.48105-.11618,2.963c-.04368,2.00476.0009,4.01178-.01711,6.01745-.01711,1.87553.07205,3.74836.17517,5.618a131.5118,131.5118,0,0,0,1.609,14.74395,97.87074,97.87074,0,0,0,3.36829,14.046c.47283,1.44954.97267,2.88782,1.54455,4.30089.06125.1513.16437.30485.0734.48272-.0054.8083-.09591,1.6103-.17246,2.41365-.2873-.00765-.34359-.24542-.42555-.44265q-1.192-2.86982-2.12185-5.83508a99.642,99.642,0,0,1-2.81352-11.2892q-.99741-5.25958-1.55986-10.584c-.20129-1.94083-.38817-3.88345-.50885-5.83013q-.12659-2.00523-.19273-4.01359c-.07565-2.39293-.18147-4.78586-.13239-7.17969.03872-1.885.06259-3.77222.163-5.655a20.09646,20.09646,0,0,1,.17427-2.41Z"/><path class="cls-8" d="M92.02479,13.27052a4.51619,4.51619,0,0,1,1.0965-.46607c.24451.05989.17246.25577.16346.40978-.06034,1.05191-.10852,2.10563-.11348,3.158-.00675,1.40586-.06439,2.80992-.0851,4.21487-.02792,1.9003.05719,3.80059.095,5.69954q.06531,3.27464.30171,6.547c.2247,3.18006.517,6.35383.90016,9.51949q.6669,5.5104,1.73458,10.95506.56682,2.91478,1.28788,5.79636c.05269.20984.19678.45481-.07835.634q-1.06272-1.622-2.00927-3.31426c-.48184-2.50461-.97627-5.00652-1.37524-7.52644q-.757-4.78361-1.23519-9.60234c-.20444-2.08357-.38367-4.16985-.5021-6.26062-.08736-1.54456-.15355-3.09046-.23416-4.635-.19273-3.68081-.16256-7.36342-.12564-11.04468.01351-1.3104.01081-2.62709.1351-3.93569a.42758.42758,0,0,1,.04368-.14905Z"/><path class="cls-17" d="M65.36662,57.053a.62413.62413,0,0,0,.13284.399q1.73729,2.6307,3.68216,5.11143a66.23257,66.23257,0,0,0,6.244,6.84467c1.39279,1.33832,2.86755,2.58477,4.38013,3.78933,1.48241,1.18116,3.0022,2.30557,4.58953,3.34038a.49667.49667,0,0,1,.27964.35439l-2.89908.0009a22.216,22.216,0,0,1-2.306-1.67064c-1.81114-1.40225-3.53671-2.90313-5.20915-4.4711a68.8455,68.8455,0,0,1-5.21681-5.53067,67.56408,67.56408,0,0,1-4.97049-6.66094q-.81507-1.24-1.56842-2.519a1.05729,1.05729,0,0,1-.26523-.70968Q63.83241,56.13885,65.36662,57.053Z"/><path class="cls-10" d="M125.955,85.35116c.23371-.27919.58045-.19633.86549-.2193,1.341-.10807,2.67212-.28054,4.00458-.46381,1.47521-.20264,2.931-.49669,4.3878-.79254,1.5378-.31251,3.05082-.72184,4.55441-1.16585a60.6459,60.6459,0,0,0,6.09265-2.157.74662.74662,0,0,0,.41878-.26884l4.25765.1369a2.38822,2.38822,0,0,1-.412.71464,61.91936,61.91936,0,0,1-9.11015,3.58444,67.10356,67.10356,0,0,1-9.54651,2.18219c-.797.12293-1.60174.18822-2.39383.34584-1.06272-.59441-2.111-1.21223-3.11882-1.8967Z"/><path class="cls-18" d="M79.51661,76.893H76.9359q-2.4258-1.96918-4.70751-4.10319c-1.13387-1.06048-2.20785-2.175-3.26562-3.30436A68.69753,68.69753,0,0,1,63.78694,63.179,72.24852,72.24852,0,0,1,59.527,56.63148q-.95519-1.63682-1.77421-3.34758c-.06349-.13374-.17742-.27244-.04773-.4323.847.4368,1.69315.87585,2.50686,1.37254A62.83047,62.83047,0,0,0,63.9585,60.3965a73.07686,73.07686,0,0,0,4.7656,6.18271,71.15841,71.15841,0,0,0,5.11324,5.31768,63.04655,63.04655,0,0,0,5.38882,4.56432c.13554.10356.37825.16526.29045.43184Z"/><path class="cls-19" d="M103.66613,69.50126a19.63714,19.63714,0,0,1-1.164-1.681c-.49308-.748-.98076-1.49952-1.4707-2.24929a3.15769,3.15769,0,0,0-.19589-.75066A115.85867,115.85867,0,0,1,96.34413,45.712c-.47552-3.06344-.84207-6.13994-1.13207-9.22544q-.21343-2.27226-.34088-4.55261-.14634-2.55234-.24767-5.10558c-.036-.93754-.05764-1.87373-.05-2.80992.00631-.78263-.07881-1.55986-.08151-2.34024-.0072-1.88724.0743-3.77358.095-5.66126.01215-1.12847.04683-2.26235.13825-3.39082a.557.557,0,0,1,.11437-.36384l.78083-.16662a.83851.83851,0,0,1,.10177.71149,21.57791,21.57791,0,0,0-.12113,2.49335c-.08826,2.836-.16571,5.67477-.08556,8.5117.04593,1.63777.06754,3.27734.1504,4.9142A155.80659,155.80659,0,0,0,97.5298,46.57657a110.46531,110.46531,0,0,0,4.54539,18.2505c.46382,1.3284.99518,2.63069,1.50763,3.94018C103.67288,68.996,103.8485,69.23377,103.66613,69.50126Z"/><path class="cls-20" d="M92.02479,13.27052a.94784.94784,0,0,1,.06664.68581,8.0008,8.0008,0,0,0-.06619,1.359c-.127,3.02921-.08466,6.05978-.07025,9.0899.009,1.73818.07429,3.47637.15805,5.21275.04638.9569.08556,1.91561.15986,2.86936.11753,1.52023.22155,3.04182.35935,4.56071.11077,1.22258.2139,2.447.344,3.6673q.2211,2.07771.51155,4.15.30119,2.20647.64575,4.40671c.31026,1.95208.6741,3.8938,1.05147,5.83372.08376.43005.32737.85649.13284,1.319-.61872-.96545-1.17666-1.966-1.73819-2.96482.20309-.24406.04638-.49714.00721-.74075-.222-1.38965-.46967-2.77524-.67772-4.16669-.18552-1.23835-.33052-2.483-.49353-3.72494-.12608-.95961-.26568-1.91786-.37555-2.87926-.09952-.87315-.16662-1.7499-.24948-2.62485q-.14994-1.58147-.3017-3.163c-.03513-.37376-.041-.74886-.07385-1.12352-.09231-1.05732-.10042-2.12185-.17652-3.181-.08556-1.19061-.10042-2.38392-.172-3.57273-.05179-.85829-.009-1.71432-.06034-2.569-.168-2.79461-.07881-5.59282-.05044-8.38742a31.60228,31.60228,0,0,1,.10447-3.34218c.00676-.05764-.03782-.12158-.05854-.18238a3.448,3.448,0,0,1,1.0231-.53181Z"/><path class="cls-21" d="M111.27407,22.42526c.04638.408.12608.815.13374,1.22438.03017,1.64587.19588,3.27914.385,4.91285a47.88293,47.88293,0,0,0,1.26221,6.7438,28.59581,28.59581,0,0,0,2.01467,5.514,15.39162,15.39162,0,0,0,1.9093,3.10622,6.99069,6.99069,0,0,0,3.498,2.44382,3.99289,3.99289,0,0,0,3.29445-.6507,8.96922,8.96922,0,0,0,2.73786-2.80316,25.91243,25.91243,0,0,0,2.81982-6.30655,51.37053,51.37053,0,0,0,1.18927-5.02407c.18642-.99023.30486-1.99126.4458-2.98869.186-1.3203.23281-2.65231.37826-3.97621a3.48212,3.48212,0,0,0,.0045-.46832c-.0027-.11888.05359-.12924.14455-.09367a18.88377,18.88377,0,0,1,.04683,5.16818,41.83465,41.83465,0,0,1-3.74655,12.33391c-.59485,1.35587-1.205,2.70589-1.9093,4.01a3.855,3.855,0,0,0-.76418.70518,6.13034,6.13034,0,0,1-1.81879,1.264,4.55169,4.55169,0,0,1-4.53909-.37825,9.9734,9.9734,0,0,1-2.88062-2.98554,27.34253,27.34253,0,0,1-3.34353-7.91955,52.06943,52.06943,0,0,1-1.35813-7.05225q-.23113-1.7996-.34358-3.61147c-.00766-.12878.0045-.26433-.10808-.362.15806-.94024.29765-1.88364.54757-2.80587Z"/><path class="cls-22" d="M110.72649,25.23112c.27829-.04683.20534.17967.213.30351a55.44675,55.44675,0,0,0,1.73819,10.8605,29.47454,29.47454,0,0,0,2.36276,6.17281,13.50019,13.50019,0,0,0,2.97112,3.92127,4.85522,4.85522,0,0,0,4.43012,1.24961,5.33306,5.33306,0,0,0,2.44472-1.3874c.249-.22966.47733-.48093.7223-.71464.07025-.06709.13869-.23055.27378-.06574q-.86773,1.71025-1.73683,3.42008c-.05854.11438-.13419.2193-.20219.32873a5.5515,5.5515,0,0,1-2.56765.72229,5.81036,5.81036,0,0,1-3.55923-1.41937,13.18951,13.18951,0,0,1-3.28949-4.26981,35.63283,35.63283,0,0,1-3.21609-9.18717c-.46246-2.08717-.77543-4.19731-1.0276-6.3178a3.15505,3.15505,0,0,0-.0698-.344c.1396-1.096.29315-2.18939.51291-3.27283Z"/><path class="cls-23" d="M79.51661,76.893a4.68967,4.68967,0,0,0-1.10145-.94879q-1.68351-1.3491-3.30885-2.76849c-1.54456-1.34236-2.96978-2.80631-4.3959-4.26666-1.368-1.40045-2.61854-2.90808-3.84562-4.436a68.2684,68.2684,0,0,1-4.042-5.61983c-.8826-1.36263-1.72512-2.74958-2.47894-4.18876a.70519.70519,0,0,1-.13194-.4404A22.2743,22.2743,0,0,1,62.23969,55.331a50.13752,50.13752,0,0,0,3.30975,5.22356q1.16946,1.672,2.45327,3.25887.97853,1.20727,1.99982,2.37807c1.20682,1.37974,2.44382,2.73112,3.77537,3.98882,1.42207,1.34327,2.86351,2.66582,4.39726,3.8866,1.105.8799,2.211,1.7553,3.36289,2.57216a1.69855,1.69855,0,0,1,.23776.254h-2.2592Z"/><path class="cls-24" d="M116.417,11.47244a2.97905,2.97905,0,0,1,.70743.1c.24542.14139.12924.344.07115.51785a24.08848,24.08848,0,0,0-.997,4.57512,30.99764,30.99764,0,0,0-.2864,5.33569,29.94792,29.94792,0,0,0,1.0956,7.39989,13.47628,13.47628,0,0,0,1.7634,3.90056,4.98419,4.98419,0,0,0,1.10551,1.14919,2.30557,2.30557,0,0,0,2.99229.0108,6.6636,6.6636,0,0,0,1.99756-2.70679,21.93359,21.93359,0,0,0,1.7643-6.97751,31.64252,31.64252,0,0,0,.2229-3.81635,34.15272,34.15272,0,0,0-.34718-4.62916,4.64476,4.64476,0,0,1-.05584-.50434c-.00585-.1468-.0072-.30171.2112-.29a4.25616,4.25616,0,0,1,.71959.69347c.15761,1.38379.23461,2.77029.26118,4.164A31.97258,31.97258,0,0,1,126.073,31.57954a12.8997,12.8997,0,0,1-1.631,3.27644,5.64708,5.64708,0,0,1-1.32841,1.364,2.78155,2.78155,0,0,1-3.5124-.018,7.28613,7.28613,0,0,1-2.07591-2.65411,20.5749,20.5749,0,0,1-1.8314-5.668,37.41716,37.41716,0,0,1-.57865-5.58381,37.17177,37.17177,0,0,1,.65205-8.45991A10.57689,10.57689,0,0,1,116.417,11.472Z"/><path class="cls-25" d="M105.85822,56.26988c-.01666.88936-.04458,1.77826-.15,2.66267a1.60317,1.60317,0,0,1-.42689-.73265,84.45365,84.45365,0,0,1-2.94546-10.321A111.82534,111.82534,0,0,1,100.464,36.59417c-.21029-1.821-.39357-3.64568-.51425-5.47708-.1513-2.29747-.25127-4.59494-.32422-6.89646-.05719-1.80978-.08556-3.61956-.036-5.42529.04818-1.753.05-3.51015.19859-5.26139.04413-.517.06124-1.03841.09771-1.55716.01351-.19364.00765-.39627.19994-.52236a5.33932,5.33932,0,0,1,.69347,1.19962.43725.43725,0,0,1,.05.3017c-.1324,1.54185-.12293,3.09091-.22876,4.63456-.01171.16932-.01486.33773-.01486.5075,0,1.37974.01171,2.76038-.00315,4.13967-.02072,1.96559.06664,3.92893.17426,5.88867A118.78923,118.78923,0,0,0,102.8326,45.0032a81.84423,81.84423,0,0,0,2.80451,10.56106,5.47071,5.47071,0,0,0,.2211.70563Z"/><path class="cls-26" d="M113.06449,16.012a1.76116,1.76116,0,0,1,.05854.95645,46.03658,46.03658,0,0,0-.14635,4.82729,47.81867,47.81867,0,0,0,.30171,5.00291,37.35591,37.35591,0,0,0,1.81473,8.48739,17.06423,17.06423,0,0,0,2.17183,4.38329,7.28967,7.28967,0,0,0,2.37627,2.25784,3.83844,3.83844,0,0,0,4.368-.62188,13.91939,13.91939,0,0,0,3.45835-5.487,29.8951,29.8951,0,0,0,1.42747-5.08622c.25848-1.30454.43906-2.62394.58721-3.94829a55.06675,55.06675,0,0,0,.30305-6.72308c-.0018-.14365-.01576-.29225.14411-.37376a4.677,4.677,0,0,1,.55387,1.0911,10.80981,10.80981,0,0,0-.11438,1.38694,47.67329,47.67329,0,0,1-1.0258,9.61271,28.49771,28.49771,0,0,1-2.47083,7.3472,11.67726,11.67726,0,0,1-2.53388,3.39352,4.20767,4.20767,0,0,1-5.95049-.02488l-.00211-.00214a13.606,13.606,0,0,1-3.20349-4.85116,35.7251,35.7251,0,0,1-2.30737-8.94174,50.14943,50.14943,0,0,1-.49263-6.026c-.01441-.76552-.08331-1.53465-.05313-2.30107.02611-.67546.08375-1.34957.07655-2.02683a.349.349,0,0,0-.03693-.22426,18.78294,18.78294,0,0,1,.69573-2.10833Z"/><path class="cls-27" d="M146.52725,27.94467c-.28279.90377-.39493,1.84626-.634,2.75993a39.30194,39.30194,0,0,1-2.31548,6.5209,34.21441,34.21441,0,0,1-3.73979,6.18677,24.4413,24.4413,0,0,1-3.0747,3.41017,25.90625,25.90625,0,0,1-6.85773,4.53684,23.65859,23.65859,0,0,1-4.2527,1.37389,2.38869,2.38869,0,0,1-.467.01981,12.70171,12.70171,0,0,1,.84117-1.40991,4.13775,4.13775,0,0,1,1.11226-.34718,21.02052,21.02052,0,0,0,5.50366-2.57261,26.92334,26.92334,0,0,0,8.53782-9.084,33.54872,33.54872,0,0,0,3.77492-9.51274q.267-1.142.48183-2.29386c.03558-.18913-.0036-.46742.308-.5066a5.28336,5.28336,0,0,1,.78128.91863Z"/><path class="cls-14" d="M93.57565,12.64144a2.28313,2.28313,0,0,1,.77-.24137c.24316.00225.20173.20174.21029.33638a4.64782,4.64782,0,0,1-.02072.97492,3.52621,3.52621,0,0,0-.04278.38816c-.12834,3.89155-.11348,7.78491-.06394,11.67646.02791,2.19615.1513,4.3932.3053,6.58574a156.47885,156.47885,0,0,0,2.28666,18.31714,120.10175,120.10175,0,0,0,3.09676,12.66758c.08286.272.25623.56019.02567.84973-.61151-.87-1.16809-1.77511-1.71972-2.68383.05764-.11978-.0018-.2283-.03242-.33953a133.22061,133.22061,0,0,1-3.60561-18.54094c-.31837-2.53072-.589-5.066-.78039-7.61019-.12158-1.60759-.236-3.21519-.31071-4.82639-.06259-1.35092-.09861-2.70319-.15806-4.05366-.13509-3.072-.06168-6.144-.04188-9.21463a26.01231,26.01231,0,0,1,.11754-3.11748A4.11357,4.11357,0,0,0,93.57565,12.64144Z"/><path class="cls-28" d="M129.0738,87.24786c.05719-.1441.17518-.16166.31387-.17878q2.38212-.2963,4.73993-.74885a65.58737,65.58737,0,0,0,9.40062-2.54243c1.6873-.59441,3.34308-1.273,4.98264-1.99126a5.19345,5.19345,0,0,1,1.61346-.65114,26.76732,26.76732,0,0,1-1.82014,2.68383c-.09636.11708-.16076.26658-.308.33953-1.91246.78624-3.84608,1.51483-5.818,2.14031a69.98645,69.98645,0,0,1-10.36607,2.42851,30.76417,30.76417,0,0,1-2.73786-1.47971Z"/><path class="cls-29" d="M97.88509,11.62915c.1459.14049.091.32377.07565.48092-.10447,1.07219-.095,2.15067-.16887,3.2224-.07115,1.04111.01847,2.08222-.07025,3.11613a39.193,39.193,0,0,0-.04773,4.4058c.03017,1.13027.00721,2.26189.0689,3.38946.05989,1.08749.09006,2.17588.15175,3.26247.08241,1.45945.18148,2.91889.31432,4.37474.15851,1.73728.32962,3.47411.55117,5.20375.31477,2.45957.70113,4.90834,1.14288,7.34991q.88935,4.9151,2.23983,9.72032a76.48794,76.48794,0,0,0,2.87836,8.3505.66778.66778,0,0,0,.28144.36249l-.15356,1.72018c-.2999-.02162-.35214-.28009-.4422-.48454-.53406-1.21763-.99968-2.46228-1.44638-3.71368a101.40842,101.40842,0,0,1-4.40986-17.48452c-.49939-2.99364-.8781-6.00349-1.16809-9.025-.19769-2.05925-.3589-4.12031-.467-6.18677-.06665-1.27347-.09907-2.54829-.15851-3.8213-.12834-2.76084-.06665-5.52212-.04819-8.28205.01081-1.70216.06079-3.40838.20264-5.10783.01756-.21255.08646-.44311-.0806-.63719l-.02792-.063a2.22727,2.22727,0,0,1,.78218-.15311Z"/><path class="cls-30" d="M116.417,11.47244a10.38128,10.38128,0,0,1-.41744,1.812,35.95375,35.95375,0,0,0-.60882,3.90416,32.61854,32.61854,0,0,0-.20714,3.87939,38.88449,38.88449,0,0,0,.43274,5.686,26.08137,26.08137,0,0,0,1.43108,5.47843,9.80571,9.80571,0,0,0,2.15472,3.48808,2.8803,2.8803,0,0,0,4.34861.009,9.96173,9.96173,0,0,0,2.22407-3.6691,25.24347,25.24347,0,0,0,1.44008-5.87156c.19093-1.49367.27559-2.98869.32422-4.49316.03107-.96051-.03423-1.91561-.04233-2.87206a12.20368,12.20368,0,0,0-.19813-2.19885c-.02612-.13509-.0626-.28774.08286-.394.285.18373.38816.53722.67456.71959-.28685.11708-.15176.36925-.13374.54127a22.37351,22.37351,0,0,1,.1441,2.52037c-.00586.76822.014,1.5369-.00406,2.30467a36.41837,36.41837,0,0,1-.87539,7.22788,20.00225,20.00225,0,0,1-1.84536,5.192,7.21036,7.21036,0,0,1-2.25965,2.72886,3.02156,3.02156,0,0,1-3.59615-.12924,7.34064,7.34064,0,0,1-1.94352-2.352,21.94794,21.94794,0,0,1-2.30107-7.10134c-.236-1.40271-.385-2.81352-.48138-4.23469a41.17649,41.17649,0,0,1-.03918-4.79487A32.33737,32.33737,0,0,1,115.697,12.034c.16887-.62953.16076-.63133-.46066-.64079.40843-.19993.78758.04639,1.1807.07926Z"/><path class="cls-16" d="M126.90918,49.86021l.99518-1.64362a7.67373,7.67373,0,0,1,1.06812-.47462,21.89309,21.89309,0,0,0,6.33177-4.35717,27.89531,27.89531,0,0,0,6.12867-9.19527,32.21559,32.21559,0,0,0,2.22271-8.10823,2.652,2.652,0,0,0,.02208-.46652c.30575-.45706.30756-.45886.6786-.08376.20625.2085.40618.42374.60881.63584a2.12636,2.12636,0,0,0-.21254.78623,33.78087,33.78087,0,0,1-2.4983,8.56484,29.22047,29.22047,0,0,1-4.69895,7.43727,23.83791,23.83791,0,0,1-7.66243,5.94586,18.97468,18.97468,0,0,1-2.46813.97581c-.16977.054-.34854.13329-.51561-.01666Z"/><path class="cls-29" d="M126.90918,49.86021a7.00857,7.00857,0,0,0,2.0669-.65745,21.91108,21.91108,0,0,0,5.82337-3.634,24.8764,24.8764,0,0,0,3.49213-3.65424,30.29335,30.29335,0,0,0,3.1481-4.90655,32.78994,32.78994,0,0,0,2.02187-4.97589,35.20412,35.20412,0,0,0,1.25591-5.52031c.02431-.15986.04729-.31432.24766-.34494a5.59916,5.59916,0,0,1,.78039.85919c-.295.29585-.24181.70248-.308,1.05867a36.374,36.374,0,0,1-1.92057,6.71723,32.23294,32.23294,0,0,1-4.15723,7.46519,27.95643,27.95643,0,0,1-3.61326,3.92037,22.87239,22.87239,0,0,1-8.10192,4.757,6.34906,6.34906,0,0,1-1.6175.39852Z"/><path class="cls-31" d="M122.66458,51.63712a25.38489,25.38489,0,0,1-1.24194,2.21416,4.28334,4.28334,0,0,1-2.27-.45165,8.59415,8.59415,0,0,1-3.11387-2.36412,24.47208,24.47208,0,0,1-4.30359-7.82,50.24665,50.24665,0,0,1-2.15292-8.101.263.263,0,0,0-.04052-.10717c.02161-.97131.14995-1.93362.24631-2.89818.05989-.127-.01666-.27379.05765-.39852l.02341-.37285c.27334.0797.27064.32917.30171.53451a57.54911,57.54911,0,0,0,1.57787,7.32785,28.471,28.471,0,0,0,3.77268,8.45226,10.7307,10.7307,0,0,0,3.11252,3.08911,5.02273,5.02273,0,0,0,3.35794.76327c.2175-.02657.5093-.20624.67276.13239Z"/><path class="cls-32" d="M109.54174,35.00729a3.00771,3.00771,0,0,1,.37691,1.327,45.59357,45.59357,0,0,0,2.98058,9.47041,22.2277,22.2277,0,0,0,2.78289,4.66473,9.119,9.119,0,0,0,3.25572,2.71986,4.93765,4.93765,0,0,0,2.238.57954.25758.25758,0,0,1,.24677.08241c-.40978.77633-.84433,1.5378-1.32706,2.27135a7.85385,7.85385,0,0,1-3.09181-1.5986,13.714,13.714,0,0,1-3.0927-3.68981,35.74608,35.74608,0,0,1-3.98522-9.54516c-.21119-.76372-.3634-1.5432-.61872-2.29521-.02522-1.074.10042-2.14031.16661-3.20979.0689-.18193-.02116-.38006.05719-.56063Z"/><path class="cls-33" d="M100.08574,11.45443a3.71359,3.71359,0,0,0-.14005,1.22934c-.03423.64619-.091,1.29328-.10988,1.94172-.03287,1.12982-.01936,2.26279-.08781,3.38811-.11078,1.82149-.0743,3.64208-.04323,5.46.02657,1.52969.05854,3.06209.1486,4.59.0707,1.201.13645,2.40374.23371,3.60246.11979,1.48061.30666,2.95536.45526,4.43327a106.51609,106.51609,0,0,0,1.73549,10.98119q.76193,3.6718,1.85977,7.2612.55477,1.82509,1.1726,3.62947a4.98431,4.98431,0,0,1,.39807.96141,19.46122,19.46122,0,0,1-.15445,2.428c-.16166-.55928-.37691-1.0992-.5764-1.64542a85.89987,85.89987,0,0,1-3.19808-11.10457c-.8074-3.679-1.42207-7.39134-1.87058-11.13023-.24631-2.0543-.4512-4.11311-.5836-6.17912-.09006-1.4018-.16481-2.80406-.23776-4.20676q-.2229-4.29278-.12518-8.58736c.03872-1.70171.054-3.407.19948-5.10693.045-.52956.06439-1.06453.09681-1.59679a.66331.66331,0,0,1,.095-.40978,1.39912,1.39912,0,0,1,.69707.0036.05134.05134,0,0,1,.03513.05719Z"/><path class="cls-34" d="M143.67771,25.61478c.26658.33188.04548.68627-.00271,1.00374a31.53183,31.53183,0,0,1-1.4689,5.86434,30.98806,30.98806,0,0,1-3.992,7.67549,25.091,25.091,0,0,1-3.4561,3.89155,20.64148,20.64148,0,0,1-4.22658,3.02021,16.53788,16.53788,0,0,1-2.32583,1.08164,2.38621,2.38621,0,0,1-.30081.06439l1.169-1.87778a20.414,20.414,0,0,0,5.00337-3.36334,24.6194,24.6194,0,0,0,4.866-6.11427,29.72035,29.72035,0,0,0,3.50113-9.68475,16.08211,16.08211,0,0,1,1.2334-1.56122Z"/><path class="cls-35" d="M122.66458,51.63712c-.20714-.17652-.4512-.07024-.65654-.04007a4.89349,4.89349,0,0,1-3.40927-.76192,12.15373,12.15373,0,0,1-3.919-4.29908,32.7,32.7,0,0,1-3.27193-8.17218c-.55028-2.03673-.9434-4.10454-1.30544-6.17956a1.75,1.75,0,0,0-.23326-.84658c.09411-.947.18327-1.89489.34448-2.83378.30261.208.20489.55748.23686.82767.14995,1.27076.349,2.53207.56559,3.79293.272,1.58283.63628,3.14405,1.06227,4.69085a31.65316,31.65316,0,0,0,2.60637,6.61771,14.374,14.374,0,0,0,2.6433,3.63533,6.42768,6.42768,0,0,0,3.56823,1.85076,4.28738,4.28738,0,0,0,2.42266-.42374.99073.99073,0,0,1,.62457-.17562,24.22975,24.22975,0,0,1-1.27887,2.31728Z"/><path class="cls-36" d="M93.57565,12.64144c.2139.03152.15761.199.17022.33412a13.96679,13.96679,0,0,1-.08286,1.7472c-.11393,3.44755-.08015,6.8951-.0662,10.34265.00585,1.51708.08376,3.03417.1531,4.55035q.08917,1.95883.23416,3.91542.16753,2.3015.39448,4.59809c.16031,1.59318.33007,3.18682.54937,4.7728.33953,2.45508.70113,4.907,1.13928,7.34856q.8826,4.91195,2.1313,9.74014.16077.62007.33863,1.23654c.04008.13645.09457.25758-.11393.285a14.35016,14.35016,0,0,1-1.096-1.77376c.12744-.16031.04143-.33008.00046-.48408-.53677-2.01467-.96681-4.05411-1.36623-6.09806q-.6472-3.32988-1.13973-6.68706c-.24362-1.64857-.44941-3.30165-.67276-4.95247-.14861-1.101-.2202-2.21236-.326-3.31922-.12924-1.35092-.27288-2.70094-.38231-4.05366-.07835-.96816-.11617-1.93992-.163-2.91033-.07025-1.43874-.14049-2.87747-.17967-4.31755-.01531-.56784-.06169-1.14063-.05043-1.70982.03242-1.65262-.16076-3.3021-.07746-4.95337.07791-1.53375.00226-3.0711.09682-4.59989a16.36585,16.36585,0,0,1,.12608-2.56135.26251.26251,0,0,0-.07159-.28729A.90323.90323,0,0,1,93.57565,12.64144Z"/><path class="cls-37" d="M105.85822,56.26988a.51743.51743,0,0,1-.22921-.34718q-.96276-2.837-1.72467-5.73467-.73423-2.81622-1.28878-5.67476c-.317-1.62111-.60792-3.249-.82271-4.889-.16932-1.29238-.371-2.58071-.52956-3.87444-.10807-.88485-.16751-1.77556-.24767-2.66357-.10357-1.15818-.213-2.31593-.3062-3.475-.03693-.46427-.02882-.92989-.0698-1.39686-.07565-.86459-.04864-1.73773-.09637-2.60547-.12878-2.33935-.07745-4.68-.0662-7.02029.00766-1.56842.08872-3.13729.15356-4.70571.01711-.41068.09727-.81956.1486-1.22889a7.70275,7.70275,0,0,1,.64845,1.39145,12.24527,12.24527,0,0,0-.12114,1.8269c-.10987,2.66672-.16075,5.33749-.08015,8.00466.0698,2.29971.18283,4.599.358,6.89555a105.61079,105.61079,0,0,0,3.00895,18.59813c.36385,1.3991.75832,2.7901,1.22078,4.16083a1.14877,1.14877,0,0,1,.12834.63223,16.25991,16.25991,0,0,1-.0842,2.10609Z"/><path class="cls-38" d="M99.37335,11.40534l-.231,4.14958c-.00225.03918-.00135.07836-.0027.11708-.08286,2.69149-.12338,5.38432-.06394,8.07581q.04617,2.23659.14725,4.47155c.05583,1.20232.12023,2.40554.23821,3.60245.14861,1.504.27469,3.00941.44446,4.51208q.35709,3.158.86278,6.29259c.39762,2.4902.89746,4.95878,1.4644,7.41566a84.84047,84.84047,0,0,0,2.50461,8.66256c.22875.66195.48678,1.31354.74841,1.96334a2.47085,2.47085,0,0,1,.06754.69257,4.28443,4.28443,0,0,1-.07835,1.09424c-.19948-.50344-.40573-1.00418-.59755-1.51033-.85108-2.247-1.58238-4.53234-2.21777-6.84917q-1.02266-3.72808-1.758-7.52373c-.31206-1.62381-.61106-3.25121-.82856-4.89168-.16437-1.242-.372-2.478-.52686-3.72134-.13374-1.07713-.22741-2.15967-.32738-3.24131q-.20309-2.202-.38591-4.40535c-.036-.4386-.03377-.879-.06979-1.3194-.07295-.89206-.04954-1.79132-.09592-2.68608-.15671-3.00535-.05719-6.0125-.06529-9.01875-.00406-1.40046.06034-2.80316.16661-4.19957a9.53308,9.53308,0,0,1,.10222-1.47025c.02567-.10987-.04954-.13194-.131-.1468a.84393.84393,0,0,1,.46742-.0788.11528.11528,0,0,1,.16275.00949l.00341.004Z"/><path class="cls-27" d="M104.99859,68.15258a8.9654,8.9654,0,0,1-.14365,1.50538,21.53967,21.53967,0,0,1-.942-2.0525,82.86556,82.86556,0,0,1-3.57949-10.61464A115.76428,115.76428,0,0,1,97.909,45.571c-.47958-2.96888-.8799-5.94856-1.16539-8.94355q-.28911-3.03012-.46652-6.06789c-.12293-2.11689-.17562-4.23558-.24451-6.35428q-.08662-2.53629-.04233-5.07451c.03423-1.80708.06935-3.61506.154-5.4208.02117-.45436.0734-.90736.068-1.36353a.5552.5552,0,0,1,.11258-.40347l.46337-.09817a.63629.63629,0,0,1,.10626.59171,19.04606,19.04606,0,0,0-.12293,2.22c-.14995,3.48583-.13689,6.97661-.08015,10.46423.036,2.20876.1486,4.41842.30531,6.62357A137.77776,137.77776,0,0,0,99.576,50.68743a93.59711,93.59711,0,0,0,4.47065,15.156c.308.77363.66465,1.52744.95195,2.30918Z"/><path class="cls-39" d="M103.66613,69.50126a7.75072,7.75072,0,0,0-.66915-1.9003c-1.04607-2.632-1.912-5.32263-2.70139-8.04068-1.00779-3.47187-1.77737-6.99822-2.45958-10.54439-.31972-1.66074-.594-3.33138-.81236-5.01012-.19182-1.4725-.41923-2.9396-.60566-4.41256-.109-.85873-.16571-1.72378-.24992-2.58566-.09906-1.01589-.204-2.03089-.3017-3.04678-.03828-.39942-.05224-.8029-.07115-1.20142-.054-1.12577-.136-2.25108-.18778-3.3773-.0734-1.608-.08421-3.21834-.16076-4.82414-.10042-2.10789-.0671-4.21487-.036-6.31961.01487-1.03706-.0117-2.08042.0662-3.11477.07611-1.00914.0698-2.02008.14365-3.02832a.607.607,0,0,1,.38952-.08285,2.4806,2.4806,0,0,1,.10176,1.37568c-.09186,1.68956-.12608,3.37956-.1522,5.07091-.018,1.13162-.11663,2.265-.05764,3.39532.0725,1.39234.02252,2.7856.08061,4.17614.0851,2.05295.15805,4.1068.30981,6.15615a147.23288,147.23288,0,0,0,2.03989,16.30562c.68221,3.63758,1.49007,7.245,2.51857,10.80151a81.44034,81.44034,0,0,0,3.79744,10.45748,3.45241,3.45241,0,0,1,.14049.36384c-.32738.33773-.53992.33909-.77768-.03827a1.79722,1.79722,0,0,1-.34494-.5755Z"/><path class="cls-40" d="M112.36876,18.12032a.14906.14906,0,0,1,.13645.16067v.00009c-.00135.48183.03333.96681-.0135,1.44414a12.12377,12.12377,0,0,0,.0045,2.6388,3.459,3.459,0,0,1,.01125.42914,40.602,40.602,0,0,0,.30171,4.45354,45.12018,45.12018,0,0,0,1.10145,6.21783,26.6357,26.6357,0,0,0,1.81023,5.13125,12.36993,12.36993,0,0,0,2.84279,3.91722,4.0352,4.0352,0,0,0,5.05785.412,9.33711,9.33711,0,0,0,2.69824-3.02741,25.60128,25.60128,0,0,0,2.72661-7.26255,43.12715,43.12715,0,0,0,.82406-4.73363c.13825-1.169.23506-2.34024.32332-3.5142.06079-.80695.02522-1.60984.063-2.41364a8.67343,8.67343,0,0,0,.08106-1.04471c-.00676-.09322.05944-.13645.14544-.15086l.30036.70473c-.21029.05494-.141.22966-.13419.35575a26.66827,26.66827,0,0,1-.10177,2.841c-.0662,1.22259-.20219,2.44427-.35574,3.6628a43.59013,43.59013,0,0,1-1.11991,5.822,23.29436,23.29436,0,0,1-3.02067,7.13872,7.4813,7.4813,0,0,1-3.14089,2.88061,3.7362,3.7362,0,0,1-3.05623.00316,7.22794,7.22794,0,0,1-3.10127-2.81037,24.65118,24.65118,0,0,1-3.23-7.84389,42.76574,42.76574,0,0,1-.91862-4.75615c-.15761-1.13747-.25127-2.28576-.34449-3.43314-.1504-1.85526-.13734-3.71053-.15-5.56714-.00045-.07881.1378-.2945-.13419-.25218l.39312-1.4036Z"/><path class="cls-41" d="M57.70509,52.8516a10.80234,10.80234,0,0,0,.90872,1.93587c.71554,1.38425,1.51754,2.72211,2.3389,4.04511a65.25324,65.25324,0,0,0,3.90686,5.62164c1.00149,1.28787,2.01513,2.56719,3.113,3.77987,1.16,1.28113,2.30692,2.57576,3.55922,3.76683,1.522,1.44728,3.04633,2.89412,4.703,4.19371.25127.19768.59936.33593.70068.69887q-.62864,0-1.25681.0009c-.711-.50749-1.34507-1.10775-2.00432-1.67514-1.58958-1.36893-3.06028-2.864-4.52153-4.36528a65.85437,65.85437,0,0,1-4.88808-5.67567,72.57663,72.57663,0,0,1-5.2794-7.83219c-.89161-1.52924-1.73639-3.0846-2.48569-4.68994-.06845-.14635-.18958-.29675-.041-.46562a10.31106,10.31106,0,0,1,1.246.66105Z"/><path class="cls-42" d="M74.357,76.8944l-1.01409.02431-.23687-.0126a4.78723,4.78723,0,0,1-.97987-.82812c-1.48826-1.35993-2.959-2.73562-4.33915-4.21172a81.29744,81.29744,0,0,1-5.38793-6.37815,70.31686,70.31686,0,0,1-5.00651-7.59128c-.64664-1.12982-1.22663-2.29521-1.87328-3.42413a4.4,4.4,0,0,1,.24632-1.25321c.09366-.17066.19318-.07655.28009.0009a.9925.9925,0,0,1,.208.32873c.96816,1.97865,2.04215,3.89966,3.20168,5.77113a72.50877,72.50877,0,0,0,6.1467,8.51441A77.17294,77.17294,0,0,0,71.15576,73.758q1.35231,1.29735,2.78065,2.51181C74.12374,76.42968,74.43535,76.54136,74.357,76.8944Z"/><path class="cls-43" d="M74.357,76.8944c-.22291-.49984-.73445-.71464-1.0857-1.08975-.29-.31025-.65429-.54937-.96906-.83711-1.3257-1.21223-2.61178-2.46768-3.84111-3.77492-1.67605-1.78457-3.27374-3.63939-4.76966-5.58246-1.27527-1.65623-2.46768-3.3683-3.607-5.11774-1.0267-1.57833-1.966-3.20844-2.86305-4.86422-.38411-.70968-.7331-1.43648-1.11046-2.14841-.06935-.13059-.091-.36025-.34538-.26028.0752-.29811.1567-.59441.22425-.89386.07655-.34.23821-.34989.46922-.1351a3.24536,3.24536,0,0,0,.45706,1.14738c.929,1.80123,1.88859,3.5858,2.95582,5.31047q1.57742,2.5501,3.34262,4.97364c.95466,1.309,1.96649,2.57261,2.98914,3.82761.56469.69257,1.1708,1.35272,1.76971,2.01737,1.15008,1.27707,2.38663,2.47129,3.60426,3.68217,1.23384,1.22709,2.56539,2.3461,3.883,3.48a.7331.7331,0,0,1,.2184.26523H74.357Z"/><path class="cls-44" d="M109.15087,48.92267l-.00721-.85378c-.081-.89431-.0135-1.79042-.03467-2.68563-.0018-.06755.00766-.13644.08061-.159a.17157.17157,0,0,1,.19543.09457,1.88878,1.88878,0,0,1,.20354.50434,40.08913,40.08913,0,0,0,2.67527,6.44479,20.39417,20.39417,0,0,0,3.55338,5.011,10.61363,10.61363,0,0,0,2.143,1.6828c.10537.06124.25307.09456.24947.26388a18.29717,18.29717,0,0,1-1.06452,1.74359c-.22426.10131-.37061-.05134-.52416-.16662a14.67206,14.67206,0,0,1-2.82793-2.89547,28.66489,28.66489,0,0,1-3.41467-5.94541c-.43725-1.00238-.82677-2.02278-1.22754-3.03957Z"/><path class="cls-45" d="M105.94243,54.1638a52.7501,52.7501,0,0,1-1.87552-6.41237c-.64214-2.5609-1.12982-5.15467-1.54546-7.76015q-.34493-2.16147-.57864-4.34186c-.17472-1.63326-.3508-3.26472-.46832-4.90384-.09321-1.30544-.1549-2.61178-.236-3.91767-.17878-2.87161-.16841-5.74592-.12879-8.61843.018-1.282.08015-2.56675.1387-3.84967.00675-.14185.036-.25668.17922-.31387a5.50093,5.50093,0,0,1,.46337,1.14829c-.054,3.09631-.11123,6.194-.03693,9.28938.05269,2.16958.17922,4.33916.35349,6.50559a113.96066,113.96066,0,0,0,1.75124,12.80222q.72636,3.70423,1.80483,7.317c.09366.31071.1468.63178.25083.93979A14.52013,14.52013,0,0,1,105.94243,54.1638Z"/><path class="cls-46" d="M125.021,14.28551l.62457.46516a13.95607,13.95607,0,0,1,.47733,2.4902,27.95,27.95,0,0,1,.24767,4.205,24.55249,24.55249,0,0,1-1.46935,8.42119,8.46353,8.46353,0,0,1-1.3113,2.3452,2.93358,2.93358,0,0,1-2.07456,1.25816,2.39291,2.39291,0,0,1-1.8377-.72,8.26638,8.26638,0,0,1-1.99036-3.32057,22.02077,22.02077,0,0,1-1.15143-5.53067,26.44587,26.44587,0,0,1-.14725-3.54707,24.304,24.304,0,0,1,1.44773-8.07175,1.0447,1.0447,0,0,1,.30036-.49354,1.192,1.192,0,0,1,.625.16437c.10222.1477.01215.27739-.04864.40077a17.24673,17.24673,0,0,0-1.49187,5.83283,25.23913,25.23913,0,0,0-.14049,3.77987,21.12846,21.12846,0,0,0,1.30634,7.06712,7.9028,7.9028,0,0,0,1.24465,2.157,3.00087,3.00087,0,0,0,.93979.75067,1.96415,1.96415,0,0,0,2.41319-.61062,9.37679,9.37679,0,0,0,1.939-4.00323,24.82171,24.82171,0,0,0,.70158-4.662,25.68984,25.68984,0,0,0-.70518-7.93486C124.88325,14.58316,124.75131,14.37737,125.021,14.28551Z"/><path class="cls-47" d="M109.30713,38.99386a.57592.57592,0,0,1,.23686.42509c.38366,1.56121.80155,3.11387,1.32976,4.6323a31.30621,31.30621,0,0,0,3.72043,7.64622,11.04881,11.04881,0,0,0,4.47246,3.98972,3.53775,3.53775,0,0,1,1.02895.43545,14.8862,14.8862,0,0,1-.93754,1.56526,5.09654,5.09654,0,0,1-1.4635-.71418,13.35087,13.35087,0,0,1-3.52275-3.55293,30.80543,30.80543,0,0,1-3.65784-7.30353q-.6807-1.88295-1.21493-3.8141c-.018.0725.01215.19363-.13374.20309-.02612-.83577.05043-1.66884.0806-2.50281.059-.28819-.02971-.5854.05044-.87224Z"/><path class="cls-48" d="M109.16528,42.50625c.10672-.08511.01711-.22966.09952-.32918.1441.05494.15805.18913.19138.30846a44.51643,44.51643,0,0,0,2.356,6.54612,24.71365,24.71365,0,0,0,2.69914,4.67779,11.34648,11.34648,0,0,0,4.42832,3.824,1.29311,1.29311,0,0,1,.2184.15446,12.2001,12.2001,0,0,1-.94835,1.5378,11.388,11.388,0,0,1-2.877-2.29071,20.492,20.492,0,0,1-2.74013-3.85553,40.0018,40.0018,0,0,1-3.17015-7.43412,2.60524,2.60524,0,0,0-.11393-.28865c-.01351-.02927-.05224-.04728-.16482-.14275v2.855a.519.519,0,0,1-.04322-.14545Q109.13016,45.21485,109.16528,42.50625Z"/><path class="cls-49" d="M126.662,15.53736a.20175.20175,0,0,0-.12249.24767c.19229,1.29238.27919,2.59467.37916,3.89741a26.08777,26.08777,0,0,1-.04323,3.65334,25.84651,25.84651,0,0,1-1.24509,6.81179,11.48046,11.48046,0,0,1-1.76611,3.49348,3.38633,3.38633,0,0,1-2.37176,1.47611,2.40643,2.40643,0,0,1-1.622-.52641,7.24463,7.24463,0,0,1-2.25874-3.16566,20.36507,20.36507,0,0,1-1.41081-5.12c-.18238-1.18746-.28009-2.38662-.35034-3.58984a24.20673,24.20673,0,0,1-.04638-2.569,38.172,38.172,0,0,1,.353-3.97621,24.31836,24.31836,0,0,1,.99112-4.26756.33952.33952,0,0,0-.02386-.33007l.54757.12383a.51155.51155,0,0,1,.0018.52056,24.14087,24.14087,0,0,0-1.23249,6.18542,26.75321,26.75321,0,0,0-.13869,2.84233,27.28628,27.28628,0,0,0,1.40271,8.71029,9.32717,9.32717,0,0,0,2.06241,3.45791,2.4168,2.4168,0,0,0,3.21564.00766,9.35794,9.35794,0,0,0,2.09078-3.53131,25.11249,25.11249,0,0,0,1.25455-6.22189c.07611-.83127.07835-1.66434.10988-2.49335a21.26509,21.26509,0,0,0-.08556-2.41365q-.12018-1.61625-.39627-3.21519c-.02522-.14635-.1333-.42329.22155-.39537Z"/><path class="cls-50" d="M55.5193,54.47226a1.01268,1.01268,0,0,1,.39132.47192,67.62,67.62,0,0,0,4.52108,7.63451,69.54578,69.54578,0,0,0,4.36483,5.75672q1.50673,1.78322,3.09226,3.49438c.77723.84207,1.58778,1.649,2.40509,2.44877.82451.806,1.70306,1.55807,2.555,2.3371a3.50581,3.50581,0,0,1,.25668.29045,5.64462,5.64462,0,0,1-1.40766-.14861,5.3684,5.3684,0,0,1-.89837-.7439q-2.79459-2.58792-5.319-5.442a77.22142,77.22142,0,0,1-6.4484-8.4329q-1.80663-2.71716-3.36019-5.58921a2.23168,2.23168,0,0,0-.15265-.3571Z"/><path class="cls-51" d="M109.15087,48.92267c.34313.2882.37916.7295.52731,1.10731a33.185,33.185,0,0,0,3.73935,7.20626,16.11494,16.11494,0,0,0,3.34218,3.55878.78048.78048,0,0,0,.38547.17427c-.39762.62592-.73715,1.28877-1.192,1.87823a.48638.48638,0,0,1-.25668-.16662,22.808,22.808,0,0,1-4.64581-6.12552c-.67637-1.26267-1.26987-2.5609-1.8215-3.8803C109.14546,51.42548,109.13151,50.17408,109.15087,48.92267Z"/><path class="cls-52" d="M100.14293,64.19619a3.81176,3.81176,0,0,0-.34494-1.50583,115.25308,115.25308,0,0,1-2.82387-11.58055c-.40978-2.10473-.78128-4.218-1.047-6.348-.18733-1.49952-.426-2.99183-.607-4.49181-.13644-1.12892-.21254-2.265-.326-3.39756q-.20175-2.00838-.32107-4.0235c-.04908-.83982-.10718-1.67964-.1558-2.51992-.07565-1.30859-.10222-2.61853-.15806-3.92667-.14545-3.38406-.05493-6.76812-.045-10.15128.00315-1.14918.04593-2.30692.13149-3.45835.00991-.13419.05133-.29225-.09951-.39267a1.48132,1.48132,0,0,1,.49353-.13779c.01982,1.03975-.05449,2.07906-.10267,3.11477-.04188.91007-.04728,1.81834-.04683,2.72661.0009,1.26131-.17247,2.52082-.077,3.77987.109,1.44324.01351,2.88737.08061,4.32746.05764,1.23114.09817,2.46227.15175,3.693.054,1.2415.1369,2.48255.23371,3.72134.11438,1.46935.23146,2.93961.39492,4.404.18373,1.64272.37916,3.28408.60026,4.9232q.52325,3.88165,1.255,7.72637.86144,4.563,2.08222,9.04036.73847,2.68317,1.6139,5.32578c.054.16436.21615.34944.00585.526a8.651,8.651,0,0,1-.88846-1.37479Z"/><path class="cls-53" d="M123.67057,13.51548l.72049.39267a6.183,6.183,0,0,1,.63944,1.998,24.0775,24.0775,0,0,1,.50344,4.1802,24.103,24.103,0,0,1-.34223,5.28255,12.66858,12.66858,0,0,1-1.45629,4.30809,4.77321,4.77321,0,0,1-.97987,1.20772,1.96873,1.96873,0,0,1-2.75948-.0063,5.67825,5.67825,0,0,1-1.43333-2.07231,16.58485,16.58485,0,0,1-1.241-5.183,21.49486,21.49486,0,0,1-.14951-2.882,20.29325,20.29325,0,0,1,1.32751-7.29678,4.5276,4.5276,0,0,1,.8092-1.414l.707.159c.18328.11708.09322.26118.00811.36565a9.73471,9.73471,0,0,0-1.88994,4.81378,21.34,21.34,0,0,0,.44761,9.32045,7.57868,7.57868,0,0,0,1.1789,2.4938,2.15153,2.15153,0,0,0,1.50222,1.02,1.67511,1.67511,0,0,0,1.35272-.5809,5.881,5.881,0,0,0,1.32706-2.2754,15.91907,15.91907,0,0,0,.902-4.50082,21.56444,21.56444,0,0,0-.52236-6.89555,10.23808,10.23808,0,0,0-.67546-1.91155c-.07655-.16076-.26253-.3634.02386-.52326Z"/><path class="cls-23" d="M131.81257,88.72711a2.39257,2.39257,0,0,1,1.25366-.31161,69.88272,69.88272,0,0,0,11.3752-2.99c1.02716-.36249,2.03089-.79074,3.04858-1.1807.1585-.06034.31342-.204.50614-.086a17.41209,17.41209,0,0,1-1.86247,2.09033c-.10086.095-.18012.21884-.32511.25982a4.73408,4.73408,0,0,0-.84162.2927,69.44754,69.44754,0,0,1-9.90946,2.72616,5.17946,5.17946,0,0,0-.90512.23055A16.08479,16.08479,0,0,1,131.81257,88.72711Z"/><path class="cls-54" d="M123.67057,13.51548c-.12339.1396-.03918.26884.02341.39492a13.80338,13.80338,0,0,1,1.17485,4.404,21.25906,21.25906,0,0,1,.13284,3.96316,14.58974,14.58974,0,0,1-1.5504,6.40066,3.59887,3.59887,0,0,1-1.15369,1.34417,1.62244,1.62244,0,0,1-2.09753-.18328,6.90368,6.90368,0,0,1-1.74134-3.16971,20.30216,20.30216,0,0,1-.69528-7.12386,14.72075,14.72075,0,0,1,1.29328-5.67927,4.538,4.538,0,0,1,.84073-1.30229c.10042-.1.20444-.21029.118-.37465a18.52237,18.52237,0,0,1,2.79865.92043,2.24748,2.24748,0,0,1,.85648.40527Z"/><path class="cls-55" d="M134.01637,79.87678a14.33963,14.33963,0,0,0-1.58508.34223c-1.33471.22876-2.669.453-4.01584.60477q-1.86876.21119-3.74385.32647c-.59621.036-1.19106.04413-1.78592.05539a15.93309,15.93309,0,0,1-1.62921.08376,5.78043,5.78043,0,0,1-.8119-.06169.61558.61558,0,0,0-.59215.06844c-.56514-.394-1.12757-.79164-1.69676-1.1789a.47193.47193,0,0,1-.23641-.56334c.072-.2274.2882-.18147.46652-.18282,2.35555-.02387,4.7075.10807,7.06081.18462q4.21082.13555,8.42164.285a.7407.7407,0,0,1,.14859.036Z"/><path class="cls-25" d="M142.44432,27.176c.17247.3697-.03016.716-.10357,1.05326A30.07162,30.07162,0,0,1,139.2773,36.487a28.13365,28.13365,0,0,1-2.968,4.32114,22.27369,22.27369,0,0,1-6.02511,5.03669,2.36057,2.36057,0,0,1-1.21043.49353l1.01409-1.56391a22.53015,22.53015,0,0,0,2.963-2.09168,23.34826,23.34826,0,0,0,4.71111-5.48609,28.75468,28.75468,0,0,0,3.48177-8.15641,1.80163,1.80163,0,0,1,.10943-.45166,14.46354,14.46354,0,0,1,1.0911-1.41261Z"/><path class="cls-56" d="M104.78874,70.115c-.258-.141-.27919-.42239-.38366-.6534a72.777,72.777,0,0,1-2.96528-7.82723c-.98482-3.08731-1.78907-6.22325-2.47128-9.393-.52236-2.42715-.97041-4.86782-1.37344-7.31614-.22786-1.38875-.38771-2.7892-.566-4.186-.16391-1.28113-.32827-2.56225-.46021-3.84742-.10627-1.02941-.154-2.06421-.24632-3.09542-.15356-1.71612-.25217-3.43494-.32332-5.15691-.05-1.21763-.1405-2.43526-.13734-3.65379.00495-1.73008-.17922-3.45926-.07205-5.18709.08105-1.30049.01441-2.60052.0752-3.89786.06124-1.296.16527-2.58971.145-3.8884a.42918.42918,0,0,1,.31522-.06935c-.02612,1.0258-.0009,2.05611-.09276,3.0756-.09142,1.01544.01035,2.03044-.0725,3.03867-.1387,1.67785-.07791,3.35614-.05134,5.03173.018,1.15549.01487,2.31368.0716,3.46737.05539,1.13972.09232,2.28035.15176,3.41918q.11842,2.2682.313,4.53189c.1324,1.54455.2828,3.0891.47147,4.62825.199,1.62741.46382,3.24672.68,4.87232.31972,2.41095.78082,4.79668,1.27437,7.17565q.72994,3.5178,1.70351,6.97976.713,2.52976,1.56887,5.016,1.01229,2.927,2.27269,5.75672c.10357.23416.2819.43995.23912.72184a.75508.75508,0,0,1-.0662.45706Z"/><path class="cls-57" d="M119.3089,12.03037c-.24542.61467-.61963,1.16539-.85558,1.78772a17.47884,17.47884,0,0,0-.87405,3.53671,22.66929,22.66929,0,0,0-.29135,4.1023,21.40632,21.40632,0,0,0,.89746,6.04537,7.31027,7.31027,0,0,0,1.77737,3.19988,1.89758,1.89758,0,0,0,2.83558-.004,8.16905,8.16905,0,0,0,1.96784-3.91632,23.38346,23.38346,0,0,0,.66915-4.83405,25.04254,25.04254,0,0,0-.04953-2.755,18.97457,18.97457,0,0,0-.938-5.02092,2.32589,2.32589,0,0,1-.05629-.26388l.62953.37736c-.11573.0815-.05719.17652-.03062.27829a21.73449,21.73449,0,0,1,.634,3.27058,27.32751,27.32751,0,0,1,.16616,4.27431,25.03292,25.03292,0,0,1-.77363,5.32353,10.53962,10.53962,0,0,1-1.56121,3.49979,2.71221,2.71221,0,0,1-1.99981,1.3266,2.27854,2.27854,0,0,1-1.89579-.98887,10.79447,10.79447,0,0,1-2.03989-4.74174,25.74012,25.74012,0,0,1-.49489-3.64613,25.70611,25.70611,0,0,1-.05089-2.76354,21.28128,21.28128,0,0,1,1.33336-7.177,9.44228,9.44228,0,0,0,.45391-.99022Z"/><path class="cls-58" d="M109.22922,52.67508a2.945,2.945,0,0,1,.58315,1.12712,29.07183,29.07183,0,0,0,4.15994,6.95364c.51875.62187,1.12622,1.15144,1.67379,1.74179.10582.11347.20489.23326.30711.34989a14.11937,14.11937,0,0,1-1.00238,1.56166c-.21165.05494-.29991-.12248-.41384-.23191a19.10479,19.10479,0,0,1-2.91574-3.69342,28.32116,28.32116,0,0,1-1.94082-3.55472,1.98265,1.98265,0,0,0-.2954-.50254,14.6247,14.6247,0,0,1-.08782-2.01738c-.08286-.33908.00946-.68717-.05178-1.02715Z"/><path class="cls-59" d="M104.99859,68.15258a5.09237,5.09237,0,0,1-.74751-1.52384,64.368,64.368,0,0,1-2.32809-6.44569c-.91412-2.9189-1.67964-5.87831-2.32629-8.8697q-.63492-2.9387-1.13747-5.90173c-.25307-1.50267-.48453-3.00985-.65475-4.52558-.13419-1.19377-.31926-2.38168-.4503-3.57544-.10673-.96366-.16661-1.93272-.24767-2.9-.10177-1.22393-.20805-2.44787-.304-3.6727-.03918-.50345-.027-1.00869-.07115-1.51484-.07925-.91682-.05224-1.84265-.09637-2.76308-.1486-3.12243-.07205-6.24666-.06169-9.36954.0045-1.41216.10672-2.82568.15536-4.23919.0117-.33323.0761-.66825.05944-1.00643.08871-.10267.208-.05134.31521-.06215l.01351.01666a.458.458,0,0,1,.09051.36745c-.14274,2.22092-.195,4.44363-.24136,6.6686-.02386,1.15729-.086,2.31773-.04232,3.47322.06935,1.84626.05223,3.69522.15085,5.53968.12429,2.32448.25353,4.64942.46967,6.9667.2927,3.13684.66015,6.26467,1.15729,9.37674.57324,3.5903,1.27572,7.154,2.18714,10.67408.6597,2.54648,1.38785,5.075,2.28306,7.55165a4.977,4.977,0,0,1,.19769.63268,5.836,5.836,0,0,0,.50974,1.51123c.38547.96726.74616,1.94488,1.19152,2.88692l-.00676.16121c-.06394.1513.02522.322-.059.471a.06845.06845,0,0,1-.00631.07205Z"/><path class="cls-60" d="M63.19794,38.05226c.22065-.09321.19453.07655.21569.19994.46427,2.7176,1.07534,5.40278,1.77872,8.06725.444,1.6801.92718,3.348,1.4788,4.99616.05134.154.20939.32872.01847.50119A13.40346,13.40346,0,0,1,64.606,48.94294a14.20314,14.20314,0,0,1-1.61029-10.07472,3.98039,3.98039,0,0,1,.20264-.816Z"/><path class="cls-49" d="M126.17788,15.14965c-.23281.06439-.15356.25262-.12744.38636a28.73126,28.73126,0,0,1,.46382,4.744,30.91413,30.91413,0,0,1-.47013,6.325,17.10359,17.10359,0,0,1-1.66028,5.12,6.11154,6.11154,0,0,1-1.74719,2.11194,2.6235,2.6235,0,0,1-2.86531-.26118,9.18667,9.18667,0,0,1-2.09888-3.37911,20.7808,20.7808,0,0,1-1.16179-4.703,26.46761,26.46761,0,0,1-.26658-3.28724c-.00585-.5021-.07835-1.00869-.05854-1.51349a30.23245,30.23245,0,0,1,1.21673-8.0695,2.52185,2.52185,0,0,0,.27018-.92718l.46427.09051a20.325,20.325,0,0,0-1.20907,4.21488q-.18583,1.14842-.28594,2.30827a26.18317,26.18317,0,0,0-.14275,3.26337,25.33622,25.33622,0,0,0,1.309,7.85876,8.32761,8.32761,0,0,0,1.86157,3.16026,2.26731,2.26731,0,0,0,3.41783.0063,8.12891,8.12891,0,0,0,1.84851-3.12963,20.55655,20.55655,0,0,0,1.1064-4.99256,28.04014,28.04014,0,0,0-.36744-9.19482.81911.81911,0,0,1-.02928-.53136c.18733.12023.41429.18643.53272.39942Z"/><path class="cls-61" d="M55.5193,56.19243a6.99663,6.99663,0,0,1,.89251,1.49412A80.17291,80.17291,0,0,0,60.91128,64.687q1.41981,1.971,2.94951,3.85553c.73535.90332,1.53555,1.75485,2.30017,2.63475,1.07533,1.237,2.22452,2.40284,3.39757,3.54527.60341.5881,1.24149,1.14063,1.85976,1.71341a3.78234,3.78234,0,0,1,.27919.32152,4.34838,4.34838,0,0,1-1.3311-.2256c.01035-.18553-.1378-.27289-.24632-.37826-.6624-.64214-1.34642-1.264-1.99126-1.92371-.97176-.99383-1.94893-1.98586-2.86755-3.02832a77.4419,77.4419,0,0,1-6.07464-7.77455q-1.79133-2.64646-3.35749-5.42755c-.07251-.12879-.12564-.2936-.31027-.322Z"/><path class="cls-62" d="M106.09284,46.73148c.023.75562.03557,1.51123-.00586,2.26639-.313-.04233-.31071-.322-.371-.52956-.37826-1.3-.69033-2.61718-.98662-3.93838a96.42889,96.42889,0,0,1-1.77466-11.05729c-.18733-1.78367-.33773-3.57139-.42644-5.365-.06755-1.35092-.09547-2.70319-.16437-4.05232-.086-1.69225-.02567-3.3818-.05629-5.0727-.009-.48138.09637-.95736.09142-1.44009a.39809.39809,0,0,1,.18327-.3679,11.26322,11.26322,0,0,1,.47012,1.55987c.07791,1.80483-.01035,3.61146.04414,5.41584q.06529,2.16147.20579,4.3225.17742,2.72616.48048,5.43926a92.778,92.778,0,0,0,1.645,9.97159c.21344.9515.47732,1.89129.6651,2.84819Z"/><path class="cls-63" d="M103.28292,63.14967c-.40167-1.21943-.82316-2.43345-1.20142-3.66009-.83982-2.72346-1.57337-5.47438-2.175-8.26223-.417-1.93317-.802-3.87264-1.133-5.82112-.25442-1.50088-.45931-3.01211-.66555-4.522-.19634-1.43332-.33548-2.8725-.51831-4.30673-.13058-1.0249-.16751-2.062-.24857-3.09361-.10176-1.28833-.213-2.57666-.30575-3.86589q-.05529-.83382-.06485-1.66974c-.02026-1.20772-.11617-2.41274-.10807-3.62226.0108-1.51979-.145-3.04093-.05675-4.55936.07116-1.22169.01711-2.44337.077-3.6619.05764-1.16539.122-2.32944.1495-3.49573.00631-.27064.05539-.54037.08511-.80966.17877-.02927.23326.06485.2238.22471l-.13825,2.40374c-.0036.06439-.01486.12878-.01711.19363-.10808,3.48628-.10357,6.97435-.0644,10.46063.01531,1.34687.08782,2.696.14995,4.04331.0716,1.5378.18688,3.07424.31162,4.60934.10807,1.32615.22875,2.65276.39222,3.97306.21254,1.717.42959,3.43314.67861,5.14611a111.17738,111.17738,0,0,0,2.60593,12.72568,75.08483,75.08483,0,0,0,2.76443,8.5081c.26973.67456.54307,1.34777.80785,2.02458a1.08528,1.08528,0,0,0,.317.476,1.31268,1.31268,0,0,1-.05494.55118c-.2238.05583-.25217-.13239-.313-.26208-.42779-.911-.75381-1.86382-1.14648-2.7892-.13059-.308-.2193-.63133-.35124-.93844Z"/><path class="cls-62" d="M109.385,56.42659c.34088.08871.35844.42329.47372.66375a28.80467,28.80467,0,0,0,3.10262,5.14791,12.64011,12.64011,0,0,0,1.98945,2.17093c-.38546.55974-.68086,1.17845-1.11631,1.70577-.399-.16212-.5863-.54263-.83893-.84478a28.75229,28.75229,0,0,1-2.98418-4.46569c-.09637-.17292-.10718-.44806-.40167-.45617a22.61381,22.61381,0,0,1-.15311-2.58656c-.08871-.25668.01081-.52686-.05944-.78488Z"/><path class="cls-64" d="M106.01448,52.04826a3.78618,3.78618,0,0,1-.526-1.43874c-.5129-1.67063-.93033-3.36964-1.305-5.0754-.34313-1.563-.62142-3.14135-.8943-4.71832-.23146-1.33516-.4323-2.67618-.61332-4.01854-.1378-1.024-.22515-2.0543-.33052-3.08235-.10447-1.015-.20939-2.02954-.30261-3.04543q-.05316-.57977-.07475-1.16179c-.05269-1.42477-.12879-2.85-.18958-4.27431-.10627-2.48435-.03467-4.96689-.045-7.44988-.00361-.74932.07249-1.50223.063-2.25469a.77.77,0,0,1,.09457-.33413l.37825,1.04336c-.03017,1.93722-.18643,3.874-.109,5.81031.0752,1.87013.07745,3.74206.20263,5.61263.11708,1.75169.23371,3.502.40393,5.24968q.39155,4.08118,1.09965,8.12264a85.30228,85.30228,0,0,0,2.10653,9.0872,4.65737,4.65737,0,0,1,.04818,1.699Z"/><path class="cls-18" d="M91.32141,84.0079a11.50223,11.50223,0,0,1-1.40991.93348,18.01073,18.01073,0,0,1-2.01737-1.01q-2.9646-1.57-5.76843-3.41872a1.82684,1.82684,0,0,1-.31792-.22426.94115.94115,0,0,0-.8011-.31837.26429.26429,0,0,1-.24541-.09276,18.621,18.621,0,0,1,2.25513-.0815,2.34117,2.34117,0,0,1,1.65533.30981,59.926,59.926,0,0,0,6.26963,3.46736c.17021.08286.467.10627.38.435Zm42.83141,5.75042c.06574-.19994.258-.21975.412-.24722,1.93676-.34494,3.84382-.81641,5.7387-1.341,1.67515-.46382,3.32282-1.01229,4.95878-1.59859.17021-.06124.34539-.213.54623-.0626a13.65237,13.65237,0,0,1-5.76978,3.40162,8.999,8.999,0,0,1-5.88641-.1522Z"/><path class="cls-65" d="M106.09284,46.73148a5.76951,5.76951,0,0,1-.53092-1.77151q-.77723-3.20168-1.27391-6.461c-.23822-1.54365-.45031-3.08911-.62143-4.64177-.1549-1.39955-.2972-2.79865-.394-4.20451-.09906-1.44684-.16121-2.89458-.24046-4.34186-.10807-1.976-.01486-3.95009-.06349-5.92424a1.96008,1.96008,0,0,1,.08375-.65205,10.6701,10.6701,0,0,1,.47193,1.79043c.04052.49083.03467.98347.03287,1.47565-.00765,1.862.06394,3.72314.17292,5.57976a100.6501,100.6501,0,0,0,1.78322,14.17431q.276,1.35766.57954,2.71v2.26684Z"/><path class="cls-66" d="M141.35323,28.58861a3.05761,3.05761,0,0,1-.27468,1.39235A27.36564,27.36564,0,0,1,135.737,40.13043a22.06569,22.06569,0,0,1-5.24742,4.522.60434.60434,0,0,1-.40168.122,15.19729,15.19729,0,0,1,1.00644-1.56752,17.00359,17.00359,0,0,0,2.782-2.25469,22.04756,22.04756,0,0,0,2.515-2.97293,27.55561,27.55561,0,0,0,3.86-7.924A14.74235,14.74235,0,0,1,141.35323,28.58861Z"/><path class="cls-67" d="M106.09284,44.46463a4.39913,4.39913,0,0,1-.45616-1.55c-.41384-1.78772-.70744-3.59976-1.00419-5.40954-.17562-1.06948-.254-2.15472-.41878-3.22645-.17246-1.12487-.23686-2.26009-.37015-3.38856-.09366-.7957-.11979-1.5995-.16887-2.40014-.08736-1.43738-.11708-2.87746-.18193-4.31439-.04953-1.07939-.01486-2.15607-.04863-3.23321a1.89856,1.89856,0,0,1,.08015-.41743c.29.79029.33368,1.63776.56109,2.44291a3.7,3.7,0,0,1,.06619.3661,101.224,101.224,0,0,0,1.708,16.85319,2.57834,2.57834,0,0,0,.1549.75967c.07745,1.17125.09951,2.34385.07835,3.5178Z"/><path class="cls-68" d="M106.02123,51.82a6.83372,6.83372,0,0,0-.50209-2.87746q-.95046-3.46417-1.6112-6.99822c-.33008-1.7526-.60116-3.5151-.847-5.2803-.17652-1.26626-.26028-2.54559-.40888-3.81635-.1468-1.26-.23326-2.524-.31567-3.78934-.06529-.99608-.08916-1.99486-.16526-2.98824-.07475-.97626.02026-1.95343-.0743-2.92114a25.6632,25.6632,0,0,1-.05133-3.117c.02521-1.05192.06844-2.10294.068-3.15575a1.65847,1.65847,0,0,1,.15581-.63809,3.42252,3.42252,0,0,1,.313.93664,8.14365,8.14365,0,0,0-.14634,1.69766c-.03873,1.44458-.05584,2.89277-.0009,4.33645.05493,1.43873.07385,2.87882.149,4.31665.05855,1.124.12519,2.24883.23687,3.36829.2193,2.1975.4485,4.3932.75651,6.58214a92.52132,92.52132,0,0,0,2.06241,10.30123,2.764,2.764,0,0,0,.44715,1.22078,24.8268,24.8268,0,0,1-.06574,2.82162Z"/><path class="cls-69" d="M106.01448,40.94684c-.2864-.2175-.24316-.56289-.29585-.85333-.25217-1.38425-.49534-2.77074-.69753-4.16309-.16841-1.16225-.25937-2.33574-.41383-3.50069-.17832-1.346-.22875-2.70274-.37736-4.05141-.04953-.44941-.05764-.90737-.06844-1.35678-.02476-.99878-.1468-1.99486-.10087-2.99679a2.51413,2.51413,0,0,1,.091-.69077c.2828,1.08209.43545,2.18849.612,3.28949.47552,2.96708.788,5.95306.99788,8.9494C105.88659,37.36149,106.01583,39.15147,106.01448,40.94684Z"/><path class="cls-10" d="M89.368,79.57147q2.40723-.14207,4.81918-.16841a3.47355,3.47355,0,0,1,2.44968.60836.23505.23505,0,0,1,.15535.24407q-1.28816.99457-2.65681,1.87778c-1.49682-.71509-3.00354-1.41036-4.45218-2.22226-.13779-.077-.33007-.11618-.31521-.33953Z"/><path class="cls-17" d="M89.368,79.57147a2.98335,2.98335,0,0,0,.88441.54712c1.18431.59756,2.38077,1.17035,3.57,1.75755.12023.05944.28819.0761.31341.25668a10.42982,10.42982,0,0,1-1.56437,1.024,16.00347,16.00347,0,0,1-1.80348-.83893c-1.41576-.71914-2.82792-1.45-4.17885-2.288a1.64679,1.64679,0,0,0-.92943-.208c-.1522-.00045-.317.03152-.4413-.1q1.803-.077,3.60651-.1531c.18012-.00721.362.0018.54307.00315Z"/><path class="cls-42" d="M88.19448,85.97574a3.12751,3.12751,0,0,1-.85739.55657,76.33071,76.33071,0,0,1-7.29722-4.36437c-.82857-.56334-1.65263-1.13343-2.44788-1.74269a1.18254,1.18254,0,0,0-.85378-.29631.47643.47643,0,0,1-.439-.09816,19.76861,19.76861,0,0,1,2.25965-.07925c.1441-.068.249.01486.35393.09276a66.13953,66.13953,0,0,0,6.62762,4.26936q1.18926.67316,2.39564,1.31535C88.06479,85.69835,88.29309,85.724,88.19448,85.97574Z"/><path class="cls-70" d="M140.25133,30.05526a4.10571,4.10571,0,0,1-.42058,1.56482,27.3515,27.3515,0,0,1-2.81128,5.62388,24.71115,24.71115,0,0,1-2.44471,3.10982A21.69023,21.69023,0,0,1,131.65,42.9516a1.02444,1.02444,0,0,1-.55567.25533A18.28567,18.28567,0,0,1,132.312,41.3395a17.91685,17.91685,0,0,0,2.6433-2.63655,24.95927,24.95927,0,0,0,3.6718-6.04492c.11438-.26253.19949-.53586.29541-.80515a19.86,19.86,0,0,1,1.32841-1.79762Z"/><path class="cls-23" d="M85.218,79.721a2.92782,2.92782,0,0,1,2.1232.62908q1.26808.75941,2.59332,1.41667c.76777.37691,1.531.76417,2.29431,1.14918.12519.063.27379.09591.34268.24046a5.61075,5.61075,0,0,1-1.25005.85108c-.00721-.18147-.15986-.2229-.28459-.28234a57.82972,57.82972,0,0,1-6.52315-3.60381,2.76479,2.76479,0,0,0-1.49727-.32557,18.24057,18.24057,0,0,1,2.202-.0743Z"/><path class="cls-71" d="M109.60973,60.34831c.036-.06844-.04593-.32557.16437-.11573a1.607,1.607,0,0,1,.25442.38727,29.44375,29.44375,0,0,0,3.41559,5.0646c.12473.1486.26027.2873.39041.4305a13.25321,13.25321,0,0,1-1.00553,1.513,15.21529,15.21529,0,0,1-1.41081-1.80888c-.44716-.63854-.88125-1.287-1.27977-1.95839-.06215-.10492-.08106-.2999-.2918-.23371a15.3261,15.3261,0,0,1-.15671-2.10834c-.081-.17877.0036-.37285-.05359-.55387Z"/><path class="cls-50" d="M76.29917,80.03078c.83262-.199,1.38695.33819,1.971.76552A66.16338,66.16338,0,0,0,84.932,85.08908c.73535.412,1.4752.816,2.21325,1.223.09186.05043.19139.09141.19183.22065a3.46854,3.46854,0,0,1-.78353.46382c-1.5995-.83983-3.15665-1.7544-4.69626-2.69914-1.91966-1.17756-3.7515-2.48209-5.54868-3.83617-.131-.09907-.34719-.177-.23146-.42193Z"/><path class="cls-61" d="M76.07672,80.03934c.03513.2972.31657.3688.5012.50749A70.80526,70.80526,0,0,0,83.052,84.92066c1.03751.61558,2.10023,1.18972,3.153,1.77962a.69072.69072,0,0,1,.349.2963,1.8458,1.8458,0,0,1-.70564.37961,4.66687,4.66687,0,0,0-1.291-.78128,77.5651,77.5651,0,0,1-8.8742-5.82922,1.60321,1.60321,0,0,1-.22876-.21255,1.48644,1.48644,0,0,0-1.37253-.4458,14.3537,14.3537,0,0,1,1.99486-.068Z"/><path class="cls-41" d="M80.76127,79.87723a1.66435,1.66435,0,0,1,1.164.35934,48.20724,48.20724,0,0,0,4.59223,2.82793c1.06453.5917,2.14527,1.15369,3.217,1.73143a1.15975,1.15975,0,0,1,.177.14545l-.85694.54352a53.86191,53.86191,0,0,1-5.15826-2.83063q-1.60266-.96816-3.1508-2.02052A5.895,5.895,0,0,1,80.211,80.242c-.10177-.08736-.24767-.17022-.1468-.349Z"/><path class="cls-72" d="M80.06419,79.893c.05629.3008.34178.38456.54217.52146q3.06839,2.09752,6.32861,3.8848c.60477.331,1.22574.62772,1.83276.9515.10942.05854.25937.0734.28684.23416-.31072.122-.50344.45031-.86009.49083-.0045-.1495-.13194-.17922-.23236-.231a78.09913,78.09913,0,0,1-8.24242-4.97228,8.985,8.985,0,0,0-1.16089-.82091,8.64109,8.64109,0,0,1,1.50537-.05854Z"/><path class="cls-73" d="M109.8466,63.627c.02386-.08691-.02612-.31386.16661-.10988a2.66525,2.66525,0,0,1,.3008.44851,32.62947,32.62947,0,0,0,2.37852,3.39171.45839.45839,0,0,1,.13644.27019,17.493,17.493,0,0,1-1.1699,1.73008q-.65669-.859-1.25906-1.75755a.75914.75914,0,0,0-.24632-.29135,26.08141,26.08141,0,0,1-.22785-2.66762c-.08826-.17607.01081-.3733-.06169-.55117Z"/><path class="cls-68" d="M138.92246,31.85334a1.36932,1.36932,0,0,1-.21479.85288,25.1908,25.1908,0,0,1-3.91226,6.33132c-.63673.743-1.36443,1.39144-2.03494,2.09843a.59263.59263,0,0,1-.4485.20354c1.45583-2.25964,2.99454-4.463,4.54675-6.65689.67411-.95285,1.33065-1.91921,2.06376-2.82928Z"/><path class="cls-74" d="M110.1537,67.30871c.1369-.10988.19.03828.231.09907.38546.57774.77453,1.15144,1.21133,1.69225.05043.0626.04368.17067.063.25758-.17562.26793-.349.53677-.52686.80244a.39267.39267,0,0,1-.74076-.177c-.02567-.32107-.05-.64213-.07475-.96366-.08466-.1495.00811-.322-.06169-.47327l-.01981-.37735c-.06935-.12789-.0018-.27289-.05179-.403Z"/><path class="cls-75" d="M96.79219,80.25549a4.00383,4.00383,0,0,0-2.605-.85243c.94295-.11348,1.88949-.03423,2.83379-.05855a.29722.29722,0,0,1,.30981.18643.34584.34584,0,0,1-.07205.39628,1.17543,1.17543,0,0,1-.46652.32872Z"/><path class="cls-59" d="M103.28292,63.14967c.35214.66286.56018,1.38515.85739,2.071.22155.5102.42149,1.0294.63718,1.5423a.6007.6007,0,0,0,.31657.37645l-.02342.30891a2.42253,2.42253,0,0,1-.5818-1.115c-.38006-.90511-.73535-1.821-1.09424-2.73516A3.44679,3.44679,0,0,1,103.28292,63.14967Z"/><path class="cls-51" d="M109.24543,53.38206a3.30049,3.30049,0,0,1,.05179,1.0267A4.05788,4.05788,0,0,1,109.24543,53.38206Z"/><path class="cls-25" d="M99.37335,11.40534l-.16661-.01351a1.18343,1.18343,0,0,1,.84387.00541Z"/><path class="cls-32" d="M109.29632,39.1312a2.41278,2.41278,0,0,1-.05043.87224A2.84282,2.84282,0,0,1,109.29632,39.1312Z"/><path class="cls-58" d="M109.39719,56.97687a1.9627,1.9627,0,0,1,.05944.78488A2.4735,2.4735,0,0,1,109.39719,56.97687Z"/><path class="cls-71" d="M109.86416,64.08991c.12428.17247.045.367.06169.55118A1.31288,1.31288,0,0,1,109.86416,64.08991Z"/><path class="cls-62" d="M109.6363,60.96479c.11257.17562.04008.3688.05359.55387A1.28328,1.28328,0,0,1,109.6363,60.96479Z"/><path class="cls-31" d="M109.53093,35.22343c-.01216.18733.06664.38457-.05764.56064A1.27666,1.27666,0,0,1,109.53093,35.22343Z"/><path class="cls-73" d="M110.255,68.54615c.118.145.04818.31477.06169.47373A.99779.99779,0,0,1,110.255,68.54615Z"/><path class="cls-59" d="M105.00444,68.08054c.01846-.15761-.054-.32558.05944-.471a1.00978,1.00978,0,0,1-.059.471Z"/><path class="cls-73" d="M110.18343,67.76577c.10086.12339.04773.267.05178.40257A.73129.73129,0,0,1,110.18343,67.76577Z"/><path class="cls-35" d="M109.84524,31.71059c-.00765.13419.05.27829-.05719.39852a.65072.65072,0,0,1,.05765-.39852Z"/><path class="cls-76" d="M103.50943,109.12152H98.14717l2.63249-6.38175,2.72976,6.3813Z"/><path class="cls-77" d="M124.63108,20.78209a17.25947,17.25947,0,0,1-.81821,5.74817,6.23609,6.23609,0,0,1-.95465,1.86112c-1.01454,1.30183-2.14527,1.1136-3.0049-.05539a9.09839,9.09839,0,0,1-1.40721-3.67451,18.48056,18.48056,0,0,1-.29045-4.9196,12.79216,12.79216,0,0,1,1.3185-5.39108,3.37042,3.37042,0,0,1,1.033-1.24735,1.48745,1.48745,0,0,1,2.04079.23911,4.11735,4.11735,0,0,1,.87225,1.28068,12.272,12.272,0,0,1,1.05191,3.88164,14.86752,14.86752,0,0,1,.159,2.27721Z"/><path class="cls-78" d="M118.60687,21.11126a13.65468,13.65468,0,0,1,.77-5.016,4.6022,4.6022,0,0,1,.779-1.42882c.86459-1.01544,1.71162-.97,2.51812.10717a7.895,7.895,0,0,1,1.2487,3.35974,15.66035,15.66035,0,0,1,.21794,3.99152,11.38355,11.38355,0,0,1-1.07353,4.57963,3.66521,3.66521,0,0,1-.75066,1.03525,1.29419,1.29419,0,0,1-1.82984.03925q-.02675-.02564-.052-.05276a5.396,5.396,0,0,1-1.35272-2.63339,13.44848,13.44848,0,0,1-.47507-3.98162Z"/><path class="cls-79" d="M118.98288,21.43638a12.5763,12.5763,0,0,1,.80514-4.95563,3.23513,3.23513,0,0,1,.86729-1.23023c.575-.48949,1.33651-.30621,1.858.4413a6.85666,6.85666,0,0,1,1.01679,2.66626,13.8892,13.8892,0,0,1,.2238,3.56193,10.44483,10.44483,0,0,1-.79884,3.73755,3.36064,3.36064,0,0,1-.82227,1.1717,1.11856,1.11856,0,0,1-1.52068-.018,4.78391,4.78391,0,0,1-1.28338-2.614,11.14373,11.14373,0,0,1-.34584-2.76083Z"/><path class="cls-80" d="M123.37066,20.96086a9.233,9.233,0,0,1-.47417,3.44034,3.12827,3.12827,0,0,1-.92178,1.504.96491.96491,0,0,1-1.4779-.27559,6.12553,6.12553,0,0,1-1.0312-2.89772,12.15641,12.15641,0,0,1-.0653-2.5672,6.64634,6.64634,0,0,1,1.08074-3.67586,1.0252,1.0252,0,0,1,1.80258.01171,5.2844,5.2844,0,0,1,.929,2.40689,8.4784,8.4784,0,0,1,.15806,2.0534Z"/><path class="cls-81" d="M120.16493,21.04417a6.48222,6.48222,0,0,1,.48859-2.338,1.47515,1.47515,0,0,1,.3634-.45256.51334.51334,0,0,1,.726-.00539l.008.0081a2.22718,2.22718,0,0,1,.62413,1.26536,6.23938,6.23938,0,0,1-.16977,3.62362,1.27622,1.27622,0,0,1-.12158.28549c-.16887.25758-.313.54578-.68987.55388-.37961.00856-.53947-.27018-.70248-.53136A3.38311,3.38311,0,0,1,120.26,21.9718a3.33349,3.33349,0,0,1-.09457-.92763Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#020302;}.cls-3{fill:#e42026;}.cls-4{fill:#020202;}.cls-5{fill:#9f1d20;}.cls-6{fill:#d92126;}.cls-7{fill:#df2026;}.cls-8{fill:#e53026;}.cls-9{fill:#020303;}.cls-10{fill:#d32127;}.cls-11{fill:#f3a07b;}.cls-12{fill:#f29c77;}.cls-13{fill:#f1946f;}.cls-14{fill:#e83a25;}.cls-15{fill:#e64125;}.cls-16{fill:#ea532e;}.cls-17{fill:#cc2227;}.cls-18{fill:#c02226;}.cls-19{fill:#e64025;}.cls-20{fill:#e52926;}.cls-21{fill:#f1916a;}.cls-22{fill:#f28e66;}.cls-23{fill:#c62227;}.cls-24{fill:#f3a582;}.cls-25{fill:#eb5c36;}.cls-26{fill:#f29873;}.cls-27{fill:#e84727;}.cls-28{fill:#cd2227;}.cls-29{fill:#e84d2b;}.cls-30{fill:#f3a37f;}.cls-31{fill:#ef865e;}.cls-32{fill:#ee8159;}.cls-33{fill:#eb5832;}.cls-34{fill:#eb5732;}.cls-35{fill:#f08962;}.cls-36{fill:#e73725;}.cls-37{fill:#ea5f39;}.cls-38{fill:#eb5631;}.cls-39{fill:#e74426;}.cls-40{fill:#f19671;}.cls-41{fill:#ba2125;}.cls-42{fill:#b12024;}.cls-43{fill:#b52125;}.cls-44{fill:#ec764e;}.cls-45{fill:#ea633b;}.cls-46{fill:#f4aa89;}.cls-47{fill:#ed7d55;}.cls-48{fill:#ee7b53;}.cls-49{fill:#f4a886;}.cls-50{fill:#ab1f23;}.cls-51{fill:#ed724a;}.cls-52{fill:#e73f25;}.cls-53{fill:#f4ae8d;}.cls-54{fill:#f4b090;}.cls-55{fill:#df2126;}.cls-56{fill:#e84526;}.cls-57{fill:#f3ac8b;}.cls-58{fill:#ec6c46;}.cls-59{fill:#e74a29;}.cls-60{fill:#dc2126;}.cls-61{fill:#a61f22;}.cls-62{fill:#ec6842;}.cls-63{fill:#e74b29;}.cls-64{fill:#eb653f;}.cls-65{fill:#ec6b45;}.cls-66{fill:#eb5f38;}.cls-67{fill:#ec6d47;}.cls-68{fill:#ec6640;}.cls-69{fill:#ed714a;}.cls-70{fill:#ea633c;}.cls-71{fill:#eb643d;}.cls-72{fill:#b62125;}.cls-73{fill:#eb5e38;}.cls-74{fill:#eb5a33;}.cls-75{fill:#d82628;}.cls-76{fill:#fff;}.cls-77{fill:#f4b192;}.cls-78{fill:#f5b495;}.cls-79{fill:#f5b597;}.cls-80{fill:#f5b79a;}.cls-81{fill:#f7bda1;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.02874" y="-3.39352" width="223.25536" height="134.51136"/><path class="cls-2" d="M55.12573,99.2679l3.35929.02072c.60972.005.52686-.08015.52776.54757.00361,1.96784.00721,3.93479-.0045,5.90217-.00225.294.05674.39628.37825.39448q3.86949-.02161,7.739,0c.32287.00225.38006-.10177.37826-.39492-.01171-2.01963-.00045-4.03926-.01171-6.05843-.0018-.29225.05133-.40708.37961-.39987,1.05507.02341,2.11059.01666,3.16566.0027.25757-.00316.35664.03962.35574.33142q-.014,8.12985-.0009,16.25969c.00045.27063-.06484.34988-.34179.34583q-1.58238-.0252-3.16565,0c-.30126.0045-.39718-.06664-.39492-.385.01531-2.08492.00135-4.16939.01531-6.25386.0018-.30891-.04954-.41564-.39222-.41338q-3.86949.0252-7.739.0027c-.28459-.00136-.3697.05764-.36745.358.01486,2.04529.00991,4.091.00631,6.13633-.00135.63719.08781.54173-.56739.54758-1.10641.00945-2.21326.014-3.31967.02072Z"/><path class="cls-3" d="M65.94121,31.88261a35.15188,35.15188,0,0,1,4.66067-6.04718c.63944-.67456.6543-.666,1.22214.05809a243.83276,243.83276,0,0,1,23.171,35.636q2.80226,5.24157,5.28345,10.643c.03828.08241.0734.16617.11258.24767a.39357.39357,0,0,1-.03062.5021.43408.43408,0,0,1-.54172.05493q-.70218-.338-1.395-.69482c-5.42891-2.77164-10.78891-5.66982-16.01112-8.817-3.28724-1.98135-6.51594-4.05187-9.60145-6.33943-.09276-.06889-.17652-.1495-.26433-.22425-.35709-.97806-.78488-1.92731-1.16629-2.89547a86.456,86.456,0,0,1-4.01584-13.339c-.58945-2.7122-1.04291-5.44646-1.38514-8.20009-.02432-.19453-.01981-.39-.03828-.5845Zm61.10847,45.02214c-1.48422.00586-2.96842.01531-4.45264.01621-1.53645.00045-3.07334-.00991-4.60979-.00945-.25668,0-.52326.01531-.60161-.2936-.07115-.27874.1477-.41969.34494-.55208,2.74236-1.84085,5.53517-3.60291,8.35544-5.32128,10.23412-6.23495,20.68576-12.08939,31.20312-17.82945.51336-.28009,1.03571-.54307,1.5405-.83667.25983-.15131.35124-.07971.43049.18462a18.9688,18.9688,0,0,1,.79075,4.56071,20.06207,20.06207,0,0,1-.48093,5.38477,1.43016,1.43016,0,0,1-.06574.18013,3.23773,3.23773,0,0,0-1.05823.84027,55.05972,55.05972,0,0,1-7.56606,5.58606,56.17661,56.17661,0,0,1-22.05739,7.88307,11.37319,11.37319,0,0,1-1.51438.13329.42831.42831,0,0,0-.25848.0734Zm22.91252-43.932a18.3173,18.3173,0,0,1,2.11645,5.14656,14.42908,14.42908,0,0,1-3.86634,14.05318,52.15515,52.15515,0,0,1-8.85843,7.14457A198.4585,198.4585,0,0,1,120.62921,70.3046c-1.66659.8781-3.35073,1.72288-5.02543,2.58477-.2166.11167-.4413.21614-.64934.02161-.209-.19543-.11979-.43364-.02027-.65024q3.199-6.96176,6.90861-13.665a.35142.35142,0,0,1,.05134-.05854.71415.71415,0,0,1,.4476-.10041,24.074,24.074,0,0,0,7.6201-1.54771,27.92524,27.92524,0,0,0,8.65985-5.27309,34.07542,34.07542,0,0,0,6.33087-7.54265,40.447,40.447,0,0,0,4.23739-9.2439c.17111-.53316.31791-1.074.48452-1.608.04053-.12924.04233-.34089.28775-.24857Z"/><path class="cls-4" d="M108.41372,99.28816c1.29373,0,2.60637.0036,3.91857-.0027.28234-.00135.25217.23416.30035.38141q1.35093,4.11354,2.68384,8.23387c.45346,1.39595.90872,2.79235,1.3991,4.29908.18012-.63584.33367-1.16585.47958-1.69766q1.49276-5.45322,2.97923-10.90869c.059-.21615.14184-.31521.39222-.31206q1.97369.02205,3.94739,0c.263-.00315.35259.09907.42464.32872q1.94937,6.22639,3.91317,12.44874c.00585.018.02657.032.07385.08646.24181-.79074.476-1.55446.70878-2.31818q1.54995-5.09073,3.09181-10.18369c.08105-.26929.17967-.3688.47192-.3634,1.09379.02026,2.18849.0153,3.28274.0027.25938-.0027.33773.04052.24632.31431q-2.74013,8.17441-5.46447,16.35425a.34044.34044,0,0,1-.39312.26614q-2.07141-.01532-4.14282,0c-.23687.00225-.32558-.06755-.39718-.30126q-1.81563-5.92152-3.65559-11.83542c-.03422-.11033-.072-.21976-.13058-.40078-.30892,1.13658-.60026,2.20741-.89071,3.27824q-1.21,4.46253-2.41365,8.92689c-.06349.23866-.14094.33637-.40527.33367q-2.0322-.01841-4.06447-.00225c-.2202.00135-.34809-.04233-.43094-.27333q-2.945-8.20639-5.90353-16.40784c-.02522-.0707-.08556-.13689-.02116-.24722Z"/><path class="cls-3" d="M93.58015,53.46q-2.32539-4.00368-4.368-8.15822a67.5133,67.5133,0,0,1-4.57692-11.36214,24.257,24.257,0,0,1-1.092-7.41746,14.76739,14.76739,0,0,1,7.21392-12.60409,2.06093,2.06093,0,0,1,.24452-.11573c.163.0797.14725.22785.14229.3715-.11888,3.462-.12744,6.92572-.07655,10.38723.02792,1.88409.08781,3.77.19634,5.65361q.09861,1.713.18462,3.42818c.05629,1.0911.14861,2.18084.24047,3.26923q.27784,3.26788.6642,6.52495c.37016,3.11747.84207,6.21919,1.37209,9.31235a1.43033,1.43033,0,0,1,.04052.46517c-.01756.10942-.01441.24722-.186.24541Z"/><path class="cls-4" d="M147.286,109.11837c-1.65444,0-3.30886.009-4.96284-.00856-.3026-.00315-.371.08105-.35438.3661a6.06858,6.06858,0,0,0,.27559,1.60715,3.19094,3.19094,0,0,0,3.15214,2.10563c2.25154.10943,4.50487.03287,6.75686.04053.36024.00135.49038.05989.47058.45346-.03783.7403-.01982,1.48466-.00585,2.22677.0045.23281-.04953.30981-.29855.30891-2.31908-.01035-4.63772.01621-6.95589-.0144a8.57427,8.57427,0,0,1-4.16444-.96051,6.63438,6.63438,0,0,1-3.403-4.91285,13.1445,13.1445,0,0,1,.33908-6.20793,6.38276,6.38276,0,0,1,5.07181-4.53279,13.2716,13.2716,0,0,1,2.9405-.3017c2.01873-.00046,4.03791.01081,6.05664-.00991.36024-.00405.42869.10222.41652.4323q-.03792,1.0545,0,2.10968c.01171.33728-.05674.45571-.43049.45167-1.94082-.02252-3.88164-.01487-5.82246-.00766a7.0511,7.0511,0,0,0-1.54906.1531,3.40343,3.40343,0,0,0-2.76173,3.08146c-.08016.65474-.08016.65474.59081.65474,3.19178,0,6.38309.00585,9.57442-.009.33053-.0009.41068.08376.399.40527q-.03845,1.07409-.00046,2.14887c.01126.32467-.04908.43545-.41112.43-1.64093-.02432-3.28275-.01036-4.92366-.01036Zm-56.15508,7.09369c.71418-1.56257,1.39595-3.05759,2.08041-4.55081q2.76174-6.02285,5.519-12.04841a.47643.47643,0,0,1,.51966-.331c1.13342.01531,2.26685.01261,3.39982.00136a.43319.43319,0,0,1,.47417.28639q3.7398,8.13886,7.50032,16.26824c.12878.27829.15085.38952-.22786.38277q-1.7975-.02942-3.59524-.0009a.4323.4323,0,0,1-.47868-.32872c-.45211-1.11632-.93574-2.22-1.38695-3.33633a.48408.48408,0,0,0-.52776-.37285q-3.59525.02206-7.1914.00045a.4305.4305,0,0,0-.47913.32467c-.44805,1.146-.91276,2.28486-1.37478,3.425-.05583.13825-.08466.28685-.30621.285-1.28652-.00991-2.5735-.0045-3.92532-.0045Z"/><path class="cls-2" d="M90.44151,104.84405c0,1.66749.01441,3.335-.00585,5.002a12.77569,12.77569,0,0,1-.24226,2.47669,4.58865,4.58865,0,0,1-2.83153,3.19538,9.90243,9.90243,0,0,1-4.00773.84928,13.4538,13.4538,0,0,1-5.37531-.67231,6.045,6.045,0,0,1-2.47489-1.70757,4.27527,4.27527,0,0,1-.90287-2.6424c-.18192-3.0049-.04233-6.01385-.0797-9.021-.01126-.91142.00225-1.82375-.005-2.73517-.00135-.19813.01892-.30891.26659-.3062,1.1073.0126,2.21461.01576,3.32146-.00046.33683-.005.26118.20669.26118.38727.0018,3.26922-.00225,6.53846.00586,9.80768a7.58045,7.58045,0,0,0,.10447,1.3185,2.81964,2.81964,0,0,0,2.77929,2.74822,7.52015,7.52015,0,0,0,2.86981-.07565,2.83339,2.83339,0,0,0,2.3569-2.76938q.07768-.85491.072-1.71433c-.00225-3.113.0036-6.22639-.00811-9.33937-.0009-.29269.06935-.37015.36385-.36474q1.58193.029,3.16476.0009c.28775-.0045.37691.06574.3742.36564-.01441,1.73233-.00721,3.46467-.00721,5.197Z"/><path class="cls-5" d="M85.84838,87.37619A20.00248,20.00248,0,0,1,80.134,90.02174,10.24477,10.24477,0,0,1,72.33962,88.674a19.99248,19.99248,0,0,1-6.26287-6.0071C65.64221,82.05,65.245,81.40962,64.86,80.76029c-.13374-.22651-.20308-.34584.172-.35665,2.17183-.063,4.34321-.15086,6.51459-.22561.84478-.02927,1.69-.04728,2.53523-.07025a1.65264,1.65264,0,0,1,1.40406.33953,68.0043,68.0043,0,0,0,9.02731,6.008c.32917.18462.66465.358.99247.54487.1468.08376.35124.1396.34223.376Z"/><path class="cls-6" d="M70.13582,59.70933c1.45134.81055,2.90853,1.61075,4.35267,2.43346,6.78837,3.86768,13.54028,7.79707,20.117,12.01869.99608.63944,1.98,1.29779,2.96932,1.94713.19273.12609.37646.26748.2909.53227-.08286.25532-.30036.2837-.53857.2837q-11.85929.01215-23.71857.02881a1.9907,1.9907,0,0,1-.26568-.03422c.31432-.23236.67321-.09637,1.01229-.12339.44311-.01936.88621-.004,1.32931-.00315.42059-.01171.84162-.00766,1.26266.0018.85513-.01756,1.70981-.01486,2.565,0,.75336-.02026,1.50672-.009,2.25964-.00316.92313-.0063,1.84581-.0126,2.76759.00361,1.50853.041,3.017,0,4.60123.02206-.64664-.42554-1.2622-.76912-1.85841-1.14378a66.5833,66.5833,0,0,1-7.88128-5.80356c-1.24555-1.06632-2.46138-2.16732-3.61236-3.33046a63.15888,63.15888,0,0,1-5.482-6.289c-.11482-.15176-.32827-.294-.17066-.54037Z"/><path class="cls-7" d="M127.04968,76.90475c.27694-.2945.662-.17022.98527-.21164q1.74944-.22292,3.484-.52912a54.59524,54.59524,0,0,0,7.37152-1.86832q2.38651-.7799,4.6922-1.78051c1.37344-.59441,2.714-1.25636,4.03791-1.94983a54.957,54.957,0,0,0,6.53982-4.06177c1.56976-1.12577,3.05848-2.34971,4.52334-3.60516.16751-.14365.31251-.313.47281-.46562.10178-.09681.20625-.23235.34764-.04458a16.56829,16.56829,0,0,1-1.41261,3.97666,18.98407,18.98407,0,0,1-17.1013,10.55205c-4.504-.02432-9.0084.0009-13.51282.0045-.14274,0-.28549-.01081-.42779-.01667Z"/><path class="cls-6" d="M125.955,85.35116c-1.60354-.9515-3.13459-2.01377-4.67869-3.05623-.48048-.32422-.94969-.66555-1.42387-.99878.05629-.26568.27784-.19814.43815-.19319a57.71738,57.71738,0,0,0,13.19084-1.21448.8827.8827,0,0,1,.535-.01171c1.63507.04864,3.27013.09276,4.9052.14771q3.679.12382,7.35712.25937c-.023.28865-.27829.31792-.46921.39852a59.35923,59.35923,0,0,1-6.62672,2.31323,65.77316,65.77316,0,0,1-10.32014,2.0579c-.96726.118-1.94262.15852-2.90763.29766Z"/><path class="cls-8" d="M149.9622,32.9728c-.14139.0045-.145.10987-.17427.21435a45.13632,45.13632,0,0,1-2.20244,6.15389,38.12769,38.12769,0,0,1-3.80374,6.65374,33.38767,33.38767,0,0,1-3.874,4.56116,29.838,29.838,0,0,1-6.46191,4.83134,25.80617,25.80617,0,0,1-6.592,2.54469,22.97045,22.97045,0,0,1-3.48357.54172q-.73709.05135-1.47611.06394.56586-1.12354,1.223-2.1975a6.11519,6.11519,0,0,1,1.41712-.22965,23.26223,23.26223,0,0,0,6.71138-2.00342,26.12067,26.12067,0,0,0,6.10706-3.9636,31.36417,31.36417,0,0,0,5.23348-5.82472,38.80264,38.80264,0,0,0,5.75717-12.87338c.05449-.2175.01531-.51875.3481-.58089a10.7214,10.7214,0,0,1,1.27076,2.10833Z"/><path class="cls-7" d="M65.94121,31.88261c.24812.23731.1531.56963.18642.84432.1351,1.12847.30576,2.25019.48634,3.37145.27513,1.70892.60791,3.40567.98077,5.09657a87.07933,87.07933,0,0,0,2.77569,9.78743c.65385,1.88678,1.38695,3.74385,2.17723,5.578.04774.11078.16166.22831-.0009.34088a27.47052,27.47052,0,0,1-2.41589-1.88453,36.86544,36.86544,0,0,1-3.44125-3.19988c-.33863-1.21358-.75246-2.40464-1.09424-3.61732a97.25213,97.25213,0,0,1-2.23083-9.60189.91407.91407,0,0,0-.16661-.54532A21.99371,21.99371,0,0,1,65.94121,31.88261Z"/><path class="cls-9" d="M155.9747,107.74358c0-2.682.00856-5.3645-.00991-8.04654-.00226-.35844.10041-.42329.43185-.417,1.09289.02162,2.18714.01711,3.28049.0018.27558-.0036.34853.07791.34853.35034q-.01171,8.12444.00045,16.24933c.00046.29269-.10672.33818-.362.33593q-1.67958-.02078-3.35928.0018c-.28415.0045-.33639-.08872-.33548-.35124.009-2.70815.0054-5.41629.0054-8.12444Z"/><path class="cls-10" d="M70.13582,59.70933a.46332.46332,0,0,0,.14275.34628q1.41261,1.83186,2.93825,3.57094c.897,1.02805,1.81924,2.03493,2.79011,2.98824q2.10834,2.07141,4.39,3.9618a66.954,66.954,0,0,0,5.52391,4.09914c1.03706.68943,2.11194,1.32165,3.17016,1.97865.08646.05359.19228.08376.21615.23776H84.67488c-.96591-.75381-2.01828-1.38379-2.99635-2.12185q-2.05924-1.55355-4.02485-3.2215a61.24,61.24,0,0,1-4.71831-4.49991,65.32971,65.32971,0,0,1-5.94676-7.236c-.52236-.73174-1.01409-1.48421-1.50988-2.23352-.10176-.154-.26342-.31161-.11257-.52641q1.93632,1.06319,3.87129,2.1277c.304.168.59891.35214.89836.52867Z"/><path class="cls-11" d="M128.05566,16.95042a5.291,5.291,0,0,1,.94114,1.25006c.04053,1.42747.16661,2.84864.06844,4.28422-.086,1.25726-.127,2.51856-.267,3.77267a31.282,31.282,0,0,1-2.23307,9.14664,12.44062,12.44062,0,0,1-2.066,3.38766,5.3894,5.3894,0,0,1-1.51483,1.21673,3.30705,3.30705,0,0,1-3.58354-.22651,8.0784,8.0784,0,0,1-2.52037-2.98328,26.65062,26.65062,0,0,1-2.75363-9.15159,44.04354,44.04354,0,0,1-.41878-4.70076c-.03017-.81955-.07521-1.63866-.054-2.45687a48.24078,48.24078,0,0,1,.65745-7.22112.574.574,0,0,0,.01711-.30621,6.89235,6.89235,0,0,1,.90783-1.56887.16872.16872,0,0,1,.07069-.03062c.57459-.04053.6543.04413.51425.60341a37.018,37.018,0,0,0-.94879,6.366,40.78909,40.78909,0,0,0-.04414,4.72372,32.7579,32.7579,0,0,0,1.44639,8.68417,14.11581,14.11581,0,0,0,2.16238,4.3959,6.17864,6.17864,0,0,0,1.232,1.18971,2.945,2.945,0,0,0,3.403.01666,7.49,7.49,0,0,0,2.23127-2.77434A23.524,23.524,0,0,0,127.477,27.4606a43.20012,43.20012,0,0,0,.462-8.37166,10.9989,10.9989,0,0,0-.12069-1.55581.952.952,0,0,1,.01711-.46472c.03377-.10042.07925-.20624.22065-.118Z"/><path class="cls-5" d="M70.36638,76.5319a15.74052,15.74052,0,0,1-4.97454-1.74179A19.06421,19.06421,0,0,1,55.55173,61.656a1.47382,1.47382,0,0,1-.04368-.30891q.0018-1.83456.01081-3.67c.263-.09636.30891.1441.385.27829q.77228,1.359,1.59048,2.69013a71.75,71.75,0,0,0,6.09536,8.45407c1.11676,1.33966,2.29882,2.62079,3.48538,3.89966.98617,1.06137,2.06465,2.021,3.07469,3.05308.12339.12608.34494.23055.2166.47958Z"/><path class="cls-12" d="M114.3285,12.96206c.17112.03917.13194.16076.10943.27738-.2211,1.15594-.34584,2.32314-.453,3.49484a43.25636,43.25636,0,0,0-.22155,4.65887c.02611,1.56617.14,3.12694.29135,4.68815a35.95771,35.95771,0,0,0,1.28247,6.69561,16.59072,16.59072,0,0,0,2.69554,5.582,5.08485,5.08485,0,0,0,2.311,1.77646,3.21968,3.21968,0,0,0,3.0855-.53451,8.09746,8.09746,0,0,0,2.35286-2.8518,24.45755,24.45755,0,0,0,2.43661-7.31343,40.72665,40.72665,0,0,0,.56153-4.18515c.0716-.879.10492-1.758.16121-2.6361a21.08455,21.08455,0,0,0,.04953-2.33484c-.027-.56964-.07159-1.13838-.06394-1.70937.0018-.12518-.04278-.26343.0698-.36925a5.6625,5.6625,0,0,1,.93214,1.486c-.073.97537.00135,1.953-.03648,2.92835a43.68916,43.68916,0,0,1-2.02188,12.40776,16.15877,16.15877,0,0,1-2.57215,5.06145,6.14278,6.14278,0,0,1-2.52083,2.10474,3.706,3.706,0,0,1-3.6691-.47373,9.56673,9.56673,0,0,1-2.7158-3.23365A25.77255,25.77255,0,0,1,113.8818,31.358a47.68024,47.68024,0,0,1-.87495-6.18271,61.56132,61.56132,0,0,1-.12383-6.24486c.01711-.97176.09727-1.94713.18148-2.918a20.03139,20.03139,0,0,1,1.264-3.05038Z"/><path class="cls-13" d="M111.27407,22.42526a27.34966,27.34966,0,0,1,.70158-2.90133c.06754-.11843.13914-.10627.195.0045a.90912.90912,0,0,1,.054.42239c.00136.7295-.009,1.459.0018,2.18849a48.25028,48.25028,0,0,0,1.8314,12.95083,21.08656,21.08656,0,0,0,2.93465,6.443,7.273,7.273,0,0,0,2.57756,2.39653,3.801,3.801,0,0,0,3.969-.20084,8.707,8.707,0,0,0,2.72976-2.96167,26.261,26.261,0,0,0,3.01706-7.9245,47.96012,47.96012,0,0,0,1.07308-7.02119c.10087-1.22979.17742-2.465.17832-3.70152a1.93336,1.93336,0,0,1,.023-.467c.027-.10762.04638-.249.22336-.17022a10.45792,10.45792,0,0,1,.70833,2.57576,3.38635,3.38635,0,0,0-.1.99428,52.69759,52.69759,0,0,1-1.11811,8.31357,30.341,30.341,0,0,1-2.23578,6.93878,14.552,14.552,0,0,1-2.22046,3.70783,7.62093,7.62093,0,0,1-3.15035,2.34925,4.16985,4.16985,0,0,1-3.48808-.41878,8.38022,8.38022,0,0,1-2.86845-2.75948,26.572,26.572,0,0,1-3.41378-8.056,49.49343,49.49343,0,0,1-1.33336-7.53318c-.13374-1.29238-.25352-2.58837-.26613-3.892-.0045-.42509-.05133-.85108-.02342-1.27752Z"/><path class="cls-14" d="M148.69142,30.86446c-.24677.20264-.2256.51245-.2954.77993a40.40392,40.40392,0,0,1-2.27315,6.57629,37.19553,37.19553,0,0,1-3.0891,5.63064,34.64862,34.64862,0,0,1-2.796,3.58174,28.92619,28.92619,0,0,1-5.80851,5.029,24.36785,24.36785,0,0,1-8.62157,3.54706,12.65968,12.65968,0,0,1-2.69059.33053l.97672-1.71117a1.68178,1.68178,0,0,1,.71374-.16976,23.22507,23.22507,0,0,0,8.88906-3.46512,27.35531,27.35531,0,0,0,4.98625-4.12076,32.35529,32.35529,0,0,0,3.83661-4.96913,35.40466,35.40466,0,0,0,3.5984-7.567,38.582,38.582,0,0,0,1.242-4.477c.04052-.19.02567-.43364.3062-.47867a9.60361,9.60361,0,0,1,1.02535,1.48331Z"/><path class="cls-15" d="M147.66563,29.38115a2.11337,2.11337,0,0,0-.34538,1.0902,39.94958,39.94958,0,0,1-1.99037,6.21468,34.18233,34.18233,0,0,1-3.62047,6.60961,34.97456,34.97456,0,0,1-2.465,3.10036,26.46728,26.46728,0,0,1-6.78522,5.47214,22.0121,22.0121,0,0,1-7.17564,2.60367,5.24065,5.24065,0,0,1-1.18971.15716q.50343-.96276,1.092-1.87643a1.34189,1.34189,0,0,1,.59756-.15626,23.34715,23.34715,0,0,0,9.94773-5.02182,29.26963,29.26963,0,0,0,6.86492-8.62834,35.712,35.712,0,0,0,3.6637-10.38453c.04323-.21975.02027-.48.267-.61692a18.1322,18.1322,0,0,1,1.13928,1.43648Z"/><path class="cls-16" d="M97.88509,11.62915a2.6872,2.6872,0,0,1,.85468-.15806c.23776-.0725.22065.09952.21975.23866-.00721.85874-.07205,1.71657-.12158,2.57306q-.08511,1.48105-.11618,2.963c-.04368,2.00476.0009,4.01178-.01711,6.01745-.01711,1.87553.07205,3.74836.17517,5.618a131.5118,131.5118,0,0,0,1.609,14.74395,97.87074,97.87074,0,0,0,3.36829,14.046c.47283,1.44954.97267,2.88782,1.54455,4.30089.06125.1513.16437.30485.0734.48272-.0054.8083-.09591,1.6103-.17246,2.41365-.2873-.00765-.34359-.24542-.42555-.44265q-1.192-2.86982-2.12185-5.83508a99.642,99.642,0,0,1-2.81352-11.2892q-.99741-5.25958-1.55986-10.584c-.20129-1.94083-.38817-3.88345-.50885-5.83013q-.12659-2.00523-.19273-4.01359c-.07565-2.39293-.18147-4.78586-.13239-7.17969.03872-1.885.06259-3.77222.163-5.655a20.09646,20.09646,0,0,1,.17427-2.41Z"/><path class="cls-8" d="M92.02479,13.27052a4.51619,4.51619,0,0,1,1.0965-.46607c.24451.05989.17246.25577.16346.40978-.06034,1.05191-.10852,2.10563-.11348,3.158-.00675,1.40586-.06439,2.80992-.0851,4.21487-.02792,1.9003.05719,3.80059.095,5.69954q.06531,3.27464.30171,6.547c.2247,3.18006.517,6.35383.90016,9.51949q.6669,5.5104,1.73458,10.95506.56682,2.91478,1.28788,5.79636c.05269.20984.19678.45481-.07835.634q-1.06272-1.622-2.00927-3.31426c-.48184-2.50461-.97627-5.00652-1.37524-7.52644q-.757-4.78361-1.23519-9.60234c-.20444-2.08357-.38367-4.16985-.5021-6.26062-.08736-1.54456-.15355-3.09046-.23416-4.635-.19273-3.68081-.16256-7.36342-.12564-11.04468.01351-1.3104.01081-2.62709.1351-3.93569a.42758.42758,0,0,1,.04368-.14905Z"/><path class="cls-17" d="M65.36662,57.053a.62413.62413,0,0,0,.13284.399q1.73729,2.6307,3.68216,5.11143a66.23257,66.23257,0,0,0,6.244,6.84467c1.39279,1.33832,2.86755,2.58477,4.38013,3.78933,1.48241,1.18116,3.0022,2.30557,4.58953,3.34038a.49667.49667,0,0,1,.27964.35439l-2.89908.0009a22.216,22.216,0,0,1-2.306-1.67064c-1.81114-1.40225-3.53671-2.90313-5.20915-4.4711a68.8455,68.8455,0,0,1-5.21681-5.53067,67.56408,67.56408,0,0,1-4.97049-6.66094q-.81507-1.24-1.56842-2.519a1.05729,1.05729,0,0,1-.26523-.70968Q63.83241,56.13885,65.36662,57.053Z"/><path class="cls-10" d="M125.955,85.35116c.23371-.27919.58045-.19633.86549-.2193,1.341-.10807,2.67212-.28054,4.00458-.46381,1.47521-.20264,2.931-.49669,4.3878-.79254,1.5378-.31251,3.05082-.72184,4.55441-1.16585a60.6459,60.6459,0,0,0,6.09265-2.157.74662.74662,0,0,0,.41878-.26884l4.25765.1369a2.38822,2.38822,0,0,1-.412.71464,61.91936,61.91936,0,0,1-9.11015,3.58444,67.10356,67.10356,0,0,1-9.54651,2.18219c-.797.12293-1.60174.18822-2.39383.34584-1.06272-.59441-2.111-1.21223-3.11882-1.8967Z"/><path class="cls-18" d="M79.51661,76.893H76.9359q-2.4258-1.96918-4.70751-4.10319c-1.13387-1.06048-2.20785-2.175-3.26562-3.30436A68.69753,68.69753,0,0,1,63.78694,63.179,72.24852,72.24852,0,0,1,59.527,56.63148q-.95519-1.63682-1.77421-3.34758c-.06349-.13374-.17742-.27244-.04773-.4323.847.4368,1.69315.87585,2.50686,1.37254A62.83047,62.83047,0,0,0,63.9585,60.3965a73.07686,73.07686,0,0,0,4.7656,6.18271,71.15841,71.15841,0,0,0,5.11324,5.31768,63.04655,63.04655,0,0,0,5.38882,4.56432c.13554.10356.37825.16526.29045.43184Z"/><path class="cls-19" d="M103.66613,69.50126a19.63714,19.63714,0,0,1-1.164-1.681c-.49308-.748-.98076-1.49952-1.4707-2.24929a3.15769,3.15769,0,0,0-.19589-.75066A115.85867,115.85867,0,0,1,96.34413,45.712c-.47552-3.06344-.84207-6.13994-1.13207-9.22544q-.21343-2.27226-.34088-4.55261-.14634-2.55234-.24767-5.10558c-.036-.93754-.05764-1.87373-.05-2.80992.00631-.78263-.07881-1.55986-.08151-2.34024-.0072-1.88724.0743-3.77358.095-5.66126.01215-1.12847.04683-2.26235.13825-3.39082a.557.557,0,0,1,.11437-.36384l.78083-.16662a.83851.83851,0,0,1,.10177.71149,21.57791,21.57791,0,0,0-.12113,2.49335c-.08826,2.836-.16571,5.67477-.08556,8.5117.04593,1.63777.06754,3.27734.1504,4.9142A155.80659,155.80659,0,0,0,97.5298,46.57657a110.46531,110.46531,0,0,0,4.54539,18.2505c.46382,1.3284.99518,2.63069,1.50763,3.94018C103.67288,68.996,103.8485,69.23377,103.66613,69.50126Z"/><path class="cls-20" d="M92.02479,13.27052a.94784.94784,0,0,1,.06664.68581,8.0008,8.0008,0,0,0-.06619,1.359c-.127,3.02921-.08466,6.05978-.07025,9.0899.009,1.73818.07429,3.47637.15805,5.21275.04638.9569.08556,1.91561.15986,2.86936.11753,1.52023.22155,3.04182.35935,4.56071.11077,1.22258.2139,2.447.344,3.6673q.2211,2.07771.51155,4.15.30119,2.20647.64575,4.40671c.31026,1.95208.6741,3.8938,1.05147,5.83372.08376.43005.32737.85649.13284,1.319-.61872-.96545-1.17666-1.966-1.73819-2.96482.20309-.24406.04638-.49714.00721-.74075-.222-1.38965-.46967-2.77524-.67772-4.16669-.18552-1.23835-.33052-2.483-.49353-3.72494-.12608-.95961-.26568-1.91786-.37555-2.87926-.09952-.87315-.16662-1.7499-.24948-2.62485q-.14994-1.58147-.3017-3.163c-.03513-.37376-.041-.74886-.07385-1.12352-.09231-1.05732-.10042-2.12185-.17652-3.181-.08556-1.19061-.10042-2.38392-.172-3.57273-.05179-.85829-.009-1.71432-.06034-2.569-.168-2.79461-.07881-5.59282-.05044-8.38742a31.60228,31.60228,0,0,1,.10447-3.34218c.00676-.05764-.03782-.12158-.05854-.18238a3.448,3.448,0,0,1,1.0231-.53181Z"/><path class="cls-21" d="M111.27407,22.42526c.04638.408.12608.815.13374,1.22438.03017,1.64587.19588,3.27914.385,4.91285a47.88293,47.88293,0,0,0,1.26221,6.7438,28.59581,28.59581,0,0,0,2.01467,5.514,15.39162,15.39162,0,0,0,1.9093,3.10622,6.99069,6.99069,0,0,0,3.498,2.44382,3.99289,3.99289,0,0,0,3.29445-.6507,8.96922,8.96922,0,0,0,2.73786-2.80316,25.91243,25.91243,0,0,0,2.81982-6.30655,51.37053,51.37053,0,0,0,1.18927-5.02407c.18642-.99023.30486-1.99126.4458-2.98869.186-1.3203.23281-2.65231.37826-3.97621a3.48212,3.48212,0,0,0,.0045-.46832c-.0027-.11888.05359-.12924.14455-.09367a18.88377,18.88377,0,0,1,.04683,5.16818,41.83465,41.83465,0,0,1-3.74655,12.33391c-.59485,1.35587-1.205,2.70589-1.9093,4.01a3.855,3.855,0,0,0-.76418.70518,6.13034,6.13034,0,0,1-1.81879,1.264,4.55169,4.55169,0,0,1-4.53909-.37825,9.9734,9.9734,0,0,1-2.88062-2.98554,27.34253,27.34253,0,0,1-3.34353-7.91955,52.06943,52.06943,0,0,1-1.35813-7.05225q-.23113-1.7996-.34358-3.61147c-.00766-.12878.0045-.26433-.10808-.362.15806-.94024.29765-1.88364.54757-2.80587Z"/><path class="cls-22" d="M110.72649,25.23112c.27829-.04683.20534.17967.213.30351a55.44675,55.44675,0,0,0,1.73819,10.8605,29.47454,29.47454,0,0,0,2.36276,6.17281,13.50019,13.50019,0,0,0,2.97112,3.92127,4.85522,4.85522,0,0,0,4.43012,1.24961,5.33306,5.33306,0,0,0,2.44472-1.3874c.249-.22966.47733-.48093.7223-.71464.07025-.06709.13869-.23055.27378-.06574q-.86773,1.71025-1.73683,3.42008c-.05854.11438-.13419.2193-.20219.32873a5.5515,5.5515,0,0,1-2.56765.72229,5.81036,5.81036,0,0,1-3.55923-1.41937,13.18951,13.18951,0,0,1-3.28949-4.26981,35.63283,35.63283,0,0,1-3.21609-9.18717c-.46246-2.08717-.77543-4.19731-1.0276-6.3178a3.15505,3.15505,0,0,0-.0698-.344c.1396-1.096.29315-2.18939.51291-3.27283Z"/><path class="cls-23" d="M79.51661,76.893a4.68967,4.68967,0,0,0-1.10145-.94879q-1.68351-1.3491-3.30885-2.76849c-1.54456-1.34236-2.96978-2.80631-4.3959-4.26666-1.368-1.40045-2.61854-2.90808-3.84562-4.436a68.2684,68.2684,0,0,1-4.042-5.61983c-.8826-1.36263-1.72512-2.74958-2.47894-4.18876a.70519.70519,0,0,1-.13194-.4404A22.2743,22.2743,0,0,1,62.23969,55.331a50.13752,50.13752,0,0,0,3.30975,5.22356q1.16946,1.672,2.45327,3.25887.97853,1.20727,1.99982,2.37807c1.20682,1.37974,2.44382,2.73112,3.77537,3.98882,1.42207,1.34327,2.86351,2.66582,4.39726,3.8866,1.105.8799,2.211,1.7553,3.36289,2.57216a1.69855,1.69855,0,0,1,.23776.254h-2.2592Z"/><path class="cls-24" d="M116.417,11.47244a2.97905,2.97905,0,0,1,.70743.1c.24542.14139.12924.344.07115.51785a24.08848,24.08848,0,0,0-.997,4.57512,30.99764,30.99764,0,0,0-.2864,5.33569,29.94792,29.94792,0,0,0,1.0956,7.39989,13.47628,13.47628,0,0,0,1.7634,3.90056,4.98419,4.98419,0,0,0,1.10551,1.14919,2.30557,2.30557,0,0,0,2.99229.0108,6.6636,6.6636,0,0,0,1.99756-2.70679,21.93359,21.93359,0,0,0,1.7643-6.97751,31.64252,31.64252,0,0,0,.2229-3.81635,34.15272,34.15272,0,0,0-.34718-4.62916,4.64476,4.64476,0,0,1-.05584-.50434c-.00585-.1468-.0072-.30171.2112-.29a4.25616,4.25616,0,0,1,.71959.69347c.15761,1.38379.23461,2.77029.26118,4.164A31.97258,31.97258,0,0,1,126.073,31.57954a12.8997,12.8997,0,0,1-1.631,3.27644,5.64708,5.64708,0,0,1-1.32841,1.364,2.78155,2.78155,0,0,1-3.5124-.018,7.28613,7.28613,0,0,1-2.07591-2.65411,20.5749,20.5749,0,0,1-1.8314-5.668,37.41716,37.41716,0,0,1-.57865-5.58381,37.17177,37.17177,0,0,1,.65205-8.45991A10.57689,10.57689,0,0,1,116.417,11.472Z"/><path class="cls-25" d="M105.85822,56.26988c-.01666.88936-.04458,1.77826-.15,2.66267a1.60317,1.60317,0,0,1-.42689-.73265,84.45365,84.45365,0,0,1-2.94546-10.321A111.82534,111.82534,0,0,1,100.464,36.59417c-.21029-1.821-.39357-3.64568-.51425-5.47708-.1513-2.29747-.25127-4.59494-.32422-6.89646-.05719-1.80978-.08556-3.61956-.036-5.42529.04818-1.753.05-3.51015.19859-5.26139.04413-.517.06124-1.03841.09771-1.55716.01351-.19364.00765-.39627.19994-.52236a5.33932,5.33932,0,0,1,.69347,1.19962.43725.43725,0,0,1,.05.3017c-.1324,1.54185-.12293,3.09091-.22876,4.63456-.01171.16932-.01486.33773-.01486.5075,0,1.37974.01171,2.76038-.00315,4.13967-.02072,1.96559.06664,3.92893.17426,5.88867A118.78923,118.78923,0,0,0,102.8326,45.0032a81.84423,81.84423,0,0,0,2.80451,10.56106,5.47071,5.47071,0,0,0,.2211.70563Z"/><path class="cls-26" d="M113.06449,16.012a1.76116,1.76116,0,0,1,.05854.95645,46.03658,46.03658,0,0,0-.14635,4.82729,47.81867,47.81867,0,0,0,.30171,5.00291,37.35591,37.35591,0,0,0,1.81473,8.48739,17.06423,17.06423,0,0,0,2.17183,4.38329,7.28967,7.28967,0,0,0,2.37627,2.25784,3.83844,3.83844,0,0,0,4.368-.62188,13.91939,13.91939,0,0,0,3.45835-5.487,29.8951,29.8951,0,0,0,1.42747-5.08622c.25848-1.30454.43906-2.62394.58721-3.94829a55.06675,55.06675,0,0,0,.30305-6.72308c-.0018-.14365-.01576-.29225.14411-.37376a4.677,4.677,0,0,1,.55387,1.0911,10.80981,10.80981,0,0,0-.11438,1.38694,47.67329,47.67329,0,0,1-1.0258,9.61271,28.49771,28.49771,0,0,1-2.47083,7.3472,11.67726,11.67726,0,0,1-2.53388,3.39352,4.20767,4.20767,0,0,1-5.95049-.02488l-.00211-.00214a13.606,13.606,0,0,1-3.20349-4.85116,35.7251,35.7251,0,0,1-2.30737-8.94174,50.14943,50.14943,0,0,1-.49263-6.026c-.01441-.76552-.08331-1.53465-.05313-2.30107.02611-.67546.08375-1.34957.07655-2.02683a.349.349,0,0,0-.03693-.22426,18.78294,18.78294,0,0,1,.69573-2.10833Z"/><path class="cls-27" d="M146.52725,27.94467c-.28279.90377-.39493,1.84626-.634,2.75993a39.30194,39.30194,0,0,1-2.31548,6.5209,34.21441,34.21441,0,0,1-3.73979,6.18677,24.4413,24.4413,0,0,1-3.0747,3.41017,25.90625,25.90625,0,0,1-6.85773,4.53684,23.65859,23.65859,0,0,1-4.2527,1.37389,2.38869,2.38869,0,0,1-.467.01981,12.70171,12.70171,0,0,1,.84117-1.40991,4.13775,4.13775,0,0,1,1.11226-.34718,21.02052,21.02052,0,0,0,5.50366-2.57261,26.92334,26.92334,0,0,0,8.53782-9.084,33.54872,33.54872,0,0,0,3.77492-9.51274q.267-1.142.48183-2.29386c.03558-.18913-.0036-.46742.308-.5066a5.28336,5.28336,0,0,1,.78128.91863Z"/><path class="cls-14" d="M93.57565,12.64144a2.28313,2.28313,0,0,1,.77-.24137c.24316.00225.20173.20174.21029.33638a4.64782,4.64782,0,0,1-.02072.97492,3.52621,3.52621,0,0,0-.04278.38816c-.12834,3.89155-.11348,7.78491-.06394,11.67646.02791,2.19615.1513,4.3932.3053,6.58574a156.47885,156.47885,0,0,0,2.28666,18.31714,120.10175,120.10175,0,0,0,3.09676,12.66758c.08286.272.25623.56019.02567.84973-.61151-.87-1.16809-1.77511-1.71972-2.68383.05764-.11978-.0018-.2283-.03242-.33953a133.22061,133.22061,0,0,1-3.60561-18.54094c-.31837-2.53072-.589-5.066-.78039-7.61019-.12158-1.60759-.236-3.21519-.31071-4.82639-.06259-1.35092-.09861-2.70319-.15806-4.05366-.13509-3.072-.06168-6.144-.04188-9.21463a26.01231,26.01231,0,0,1,.11754-3.11748A4.11357,4.11357,0,0,0,93.57565,12.64144Z"/><path class="cls-28" d="M129.0738,87.24786c.05719-.1441.17518-.16166.31387-.17878q2.38212-.2963,4.73993-.74885a65.58737,65.58737,0,0,0,9.40062-2.54243c1.6873-.59441,3.34308-1.273,4.98264-1.99126a5.19345,5.19345,0,0,1,1.61346-.65114,26.76732,26.76732,0,0,1-1.82014,2.68383c-.09636.11708-.16076.26658-.308.33953-1.91246.78624-3.84608,1.51483-5.818,2.14031a69.98645,69.98645,0,0,1-10.36607,2.42851,30.76417,30.76417,0,0,1-2.73786-1.47971Z"/><path class="cls-29" d="M97.88509,11.62915c.1459.14049.091.32377.07565.48092-.10447,1.07219-.095,2.15067-.16887,3.2224-.07115,1.04111.01847,2.08222-.07025,3.11613a39.193,39.193,0,0,0-.04773,4.4058c.03017,1.13027.00721,2.26189.0689,3.38946.05989,1.08749.09006,2.17588.15175,3.26247.08241,1.45945.18148,2.91889.31432,4.37474.15851,1.73728.32962,3.47411.55117,5.20375.31477,2.45957.70113,4.90834,1.14288,7.34991q.88935,4.9151,2.23983,9.72032a76.48794,76.48794,0,0,0,2.87836,8.3505.66778.66778,0,0,0,.28144.36249l-.15356,1.72018c-.2999-.02162-.35214-.28009-.4422-.48454-.53406-1.21763-.99968-2.46228-1.44638-3.71368a101.40842,101.40842,0,0,1-4.40986-17.48452c-.49939-2.99364-.8781-6.00349-1.16809-9.025-.19769-2.05925-.3589-4.12031-.467-6.18677-.06665-1.27347-.09907-2.54829-.15851-3.8213-.12834-2.76084-.06665-5.52212-.04819-8.28205.01081-1.70216.06079-3.40838.20264-5.10783.01756-.21255.08646-.44311-.0806-.63719l-.02792-.063a2.22727,2.22727,0,0,1,.78218-.15311Z"/><path class="cls-30" d="M116.417,11.47244a10.38128,10.38128,0,0,1-.41744,1.812,35.95375,35.95375,0,0,0-.60882,3.90416,32.61854,32.61854,0,0,0-.20714,3.87939,38.88449,38.88449,0,0,0,.43274,5.686,26.08137,26.08137,0,0,0,1.43108,5.47843,9.80571,9.80571,0,0,0,2.15472,3.48808,2.8803,2.8803,0,0,0,4.34861.009,9.96173,9.96173,0,0,0,2.22407-3.6691,25.24347,25.24347,0,0,0,1.44008-5.87156c.19093-1.49367.27559-2.98869.32422-4.49316.03107-.96051-.03423-1.91561-.04233-2.87206a12.20368,12.20368,0,0,0-.19813-2.19885c-.02612-.13509-.0626-.28774.08286-.394.285.18373.38816.53722.67456.71959-.28685.11708-.15176.36925-.13374.54127a22.37351,22.37351,0,0,1,.1441,2.52037c-.00586.76822.014,1.5369-.00406,2.30467a36.41837,36.41837,0,0,1-.87539,7.22788,20.00225,20.00225,0,0,1-1.84536,5.192,7.21036,7.21036,0,0,1-2.25965,2.72886,3.02156,3.02156,0,0,1-3.59615-.12924,7.34064,7.34064,0,0,1-1.94352-2.352,21.94794,21.94794,0,0,1-2.30107-7.10134c-.236-1.40271-.385-2.81352-.48138-4.23469a41.17649,41.17649,0,0,1-.03918-4.79487A32.33737,32.33737,0,0,1,115.697,12.034c.16887-.62953.16076-.63133-.46066-.64079.40843-.19993.78758.04639,1.1807.07926Z"/><path class="cls-16" d="M126.90918,49.86021l.99518-1.64362a7.67373,7.67373,0,0,1,1.06812-.47462,21.89309,21.89309,0,0,0,6.33177-4.35717,27.89531,27.89531,0,0,0,6.12867-9.19527,32.21559,32.21559,0,0,0,2.22271-8.10823,2.652,2.652,0,0,0,.02208-.46652c.30575-.45706.30756-.45886.6786-.08376.20625.2085.40618.42374.60881.63584a2.12636,2.12636,0,0,0-.21254.78623,33.78087,33.78087,0,0,1-2.4983,8.56484,29.22047,29.22047,0,0,1-4.69895,7.43727,23.83791,23.83791,0,0,1-7.66243,5.94586,18.97468,18.97468,0,0,1-2.46813.97581c-.16977.054-.34854.13329-.51561-.01666Z"/><path class="cls-29" d="M126.90918,49.86021a7.00857,7.00857,0,0,0,2.0669-.65745,21.91108,21.91108,0,0,0,5.82337-3.634,24.8764,24.8764,0,0,0,3.49213-3.65424,30.29335,30.29335,0,0,0,3.1481-4.90655,32.78994,32.78994,0,0,0,2.02187-4.97589,35.20412,35.20412,0,0,0,1.25591-5.52031c.02431-.15986.04729-.31432.24766-.34494a5.59916,5.59916,0,0,1,.78039.85919c-.295.29585-.24181.70248-.308,1.05867a36.374,36.374,0,0,1-1.92057,6.71723,32.23294,32.23294,0,0,1-4.15723,7.46519,27.95643,27.95643,0,0,1-3.61326,3.92037,22.87239,22.87239,0,0,1-8.10192,4.757,6.34906,6.34906,0,0,1-1.6175.39852Z"/><path class="cls-31" d="M122.66458,51.63712a25.38489,25.38489,0,0,1-1.24194,2.21416,4.28334,4.28334,0,0,1-2.27-.45165,8.59415,8.59415,0,0,1-3.11387-2.36412,24.47208,24.47208,0,0,1-4.30359-7.82,50.24665,50.24665,0,0,1-2.15292-8.101.263.263,0,0,0-.04052-.10717c.02161-.97131.14995-1.93362.24631-2.89818.05989-.127-.01666-.27379.05765-.39852l.02341-.37285c.27334.0797.27064.32917.30171.53451a57.54911,57.54911,0,0,0,1.57787,7.32785,28.471,28.471,0,0,0,3.77268,8.45226,10.7307,10.7307,0,0,0,3.11252,3.08911,5.02273,5.02273,0,0,0,3.35794.76327c.2175-.02657.5093-.20624.67276.13239Z"/><path class="cls-32" d="M109.54174,35.00729a3.00771,3.00771,0,0,1,.37691,1.327,45.59357,45.59357,0,0,0,2.98058,9.47041,22.2277,22.2277,0,0,0,2.78289,4.66473,9.119,9.119,0,0,0,3.25572,2.71986,4.93765,4.93765,0,0,0,2.238.57954.25758.25758,0,0,1,.24677.08241c-.40978.77633-.84433,1.5378-1.32706,2.27135a7.85385,7.85385,0,0,1-3.09181-1.5986,13.714,13.714,0,0,1-3.0927-3.68981,35.74608,35.74608,0,0,1-3.98522-9.54516c-.21119-.76372-.3634-1.5432-.61872-2.29521-.02522-1.074.10042-2.14031.16661-3.20979.0689-.18193-.02116-.38006.05719-.56063Z"/><path class="cls-33" d="M100.08574,11.45443a3.71359,3.71359,0,0,0-.14005,1.22934c-.03423.64619-.091,1.29328-.10988,1.94172-.03287,1.12982-.01936,2.26279-.08781,3.38811-.11078,1.82149-.0743,3.64208-.04323,5.46.02657,1.52969.05854,3.06209.1486,4.59.0707,1.201.13645,2.40374.23371,3.60246.11979,1.48061.30666,2.95536.45526,4.43327a106.51609,106.51609,0,0,0,1.73549,10.98119q.76193,3.6718,1.85977,7.2612.55477,1.82509,1.1726,3.62947a4.98431,4.98431,0,0,1,.39807.96141,19.46122,19.46122,0,0,1-.15445,2.428c-.16166-.55928-.37691-1.0992-.5764-1.64542a85.89987,85.89987,0,0,1-3.19808-11.10457c-.8074-3.679-1.42207-7.39134-1.87058-11.13023-.24631-2.0543-.4512-4.11311-.5836-6.17912-.09006-1.4018-.16481-2.80406-.23776-4.20676q-.2229-4.29278-.12518-8.58736c.03872-1.70171.054-3.407.19948-5.10693.045-.52956.06439-1.06453.09681-1.59679a.66331.66331,0,0,1,.095-.40978,1.39912,1.39912,0,0,1,.69707.0036.05134.05134,0,0,1,.03513.05719Z"/><path class="cls-34" d="M143.67771,25.61478c.26658.33188.04548.68627-.00271,1.00374a31.53183,31.53183,0,0,1-1.4689,5.86434,30.98806,30.98806,0,0,1-3.992,7.67549,25.091,25.091,0,0,1-3.4561,3.89155,20.64148,20.64148,0,0,1-4.22658,3.02021,16.53788,16.53788,0,0,1-2.32583,1.08164,2.38621,2.38621,0,0,1-.30081.06439l1.169-1.87778a20.414,20.414,0,0,0,5.00337-3.36334,24.6194,24.6194,0,0,0,4.866-6.11427,29.72035,29.72035,0,0,0,3.50113-9.68475,16.08211,16.08211,0,0,1,1.2334-1.56122Z"/><path class="cls-35" d="M122.66458,51.63712c-.20714-.17652-.4512-.07024-.65654-.04007a4.89349,4.89349,0,0,1-3.40927-.76192,12.15373,12.15373,0,0,1-3.919-4.29908,32.7,32.7,0,0,1-3.27193-8.17218c-.55028-2.03673-.9434-4.10454-1.30544-6.17956a1.75,1.75,0,0,0-.23326-.84658c.09411-.947.18327-1.89489.34448-2.83378.30261.208.20489.55748.23686.82767.14995,1.27076.349,2.53207.56559,3.79293.272,1.58283.63628,3.14405,1.06227,4.69085a31.65316,31.65316,0,0,0,2.60637,6.61771,14.374,14.374,0,0,0,2.6433,3.63533,6.42768,6.42768,0,0,0,3.56823,1.85076,4.28738,4.28738,0,0,0,2.42266-.42374.99073.99073,0,0,1,.62457-.17562,24.22975,24.22975,0,0,1-1.27887,2.31728Z"/><path class="cls-36" d="M93.57565,12.64144c.2139.03152.15761.199.17022.33412a13.96679,13.96679,0,0,1-.08286,1.7472c-.11393,3.44755-.08015,6.8951-.0662,10.34265.00585,1.51708.08376,3.03417.1531,4.55035q.08917,1.95883.23416,3.91542.16753,2.3015.39448,4.59809c.16031,1.59318.33007,3.18682.54937,4.7728.33953,2.45508.70113,4.907,1.13928,7.34856q.8826,4.91195,2.1313,9.74014.16077.62007.33863,1.23654c.04008.13645.09457.25758-.11393.285a14.35016,14.35016,0,0,1-1.096-1.77376c.12744-.16031.04143-.33008.00046-.48408-.53677-2.01467-.96681-4.05411-1.36623-6.09806q-.6472-3.32988-1.13973-6.68706c-.24362-1.64857-.44941-3.30165-.67276-4.95247-.14861-1.101-.2202-2.21236-.326-3.31922-.12924-1.35092-.27288-2.70094-.38231-4.05366-.07835-.96816-.11617-1.93992-.163-2.91033-.07025-1.43874-.14049-2.87747-.17967-4.31755-.01531-.56784-.06169-1.14063-.05043-1.70982.03242-1.65262-.16076-3.3021-.07746-4.95337.07791-1.53375.00226-3.0711.09682-4.59989a16.36585,16.36585,0,0,1,.12608-2.56135.26251.26251,0,0,0-.07159-.28729A.90323.90323,0,0,1,93.57565,12.64144Z"/><path class="cls-37" d="M105.85822,56.26988a.51743.51743,0,0,1-.22921-.34718q-.96276-2.837-1.72467-5.73467-.73423-2.81622-1.28878-5.67476c-.317-1.62111-.60792-3.249-.82271-4.889-.16932-1.29238-.371-2.58071-.52956-3.87444-.10807-.88485-.16751-1.77556-.24767-2.66357-.10357-1.15818-.213-2.31593-.3062-3.475-.03693-.46427-.02882-.92989-.0698-1.39686-.07565-.86459-.04864-1.73773-.09637-2.60547-.12878-2.33935-.07745-4.68-.0662-7.02029.00766-1.56842.08872-3.13729.15356-4.70571.01711-.41068.09727-.81956.1486-1.22889a7.70275,7.70275,0,0,1,.64845,1.39145,12.24527,12.24527,0,0,0-.12114,1.8269c-.10987,2.66672-.16075,5.33749-.08015,8.00466.0698,2.29971.18283,4.599.358,6.89555a105.61079,105.61079,0,0,0,3.00895,18.59813c.36385,1.3991.75832,2.7901,1.22078,4.16083a1.14877,1.14877,0,0,1,.12834.63223,16.25991,16.25991,0,0,1-.0842,2.10609Z"/><path class="cls-38" d="M99.37335,11.40534l-.231,4.14958c-.00225.03918-.00135.07836-.0027.11708-.08286,2.69149-.12338,5.38432-.06394,8.07581q.04617,2.23659.14725,4.47155c.05583,1.20232.12023,2.40554.23821,3.60245.14861,1.504.27469,3.00941.44446,4.51208q.35709,3.158.86278,6.29259c.39762,2.4902.89746,4.95878,1.4644,7.41566a84.84047,84.84047,0,0,0,2.50461,8.66256c.22875.66195.48678,1.31354.74841,1.96334a2.47085,2.47085,0,0,1,.06754.69257,4.28443,4.28443,0,0,1-.07835,1.09424c-.19948-.50344-.40573-1.00418-.59755-1.51033-.85108-2.247-1.58238-4.53234-2.21777-6.84917q-1.02266-3.72808-1.758-7.52373c-.31206-1.62381-.61106-3.25121-.82856-4.89168-.16437-1.242-.372-2.478-.52686-3.72134-.13374-1.07713-.22741-2.15967-.32738-3.24131q-.20309-2.202-.38591-4.40535c-.036-.4386-.03377-.879-.06979-1.3194-.07295-.89206-.04954-1.79132-.09592-2.68608-.15671-3.00535-.05719-6.0125-.06529-9.01875-.00406-1.40046.06034-2.80316.16661-4.19957a9.53308,9.53308,0,0,1,.10222-1.47025c.02567-.10987-.04954-.13194-.131-.1468a.84393.84393,0,0,1,.46742-.0788.11528.11528,0,0,1,.16275.00949l.00341.004Z"/><path class="cls-27" d="M104.99859,68.15258a8.9654,8.9654,0,0,1-.14365,1.50538,21.53967,21.53967,0,0,1-.942-2.0525,82.86556,82.86556,0,0,1-3.57949-10.61464A115.76428,115.76428,0,0,1,97.909,45.571c-.47958-2.96888-.8799-5.94856-1.16539-8.94355q-.28911-3.03012-.46652-6.06789c-.12293-2.11689-.17562-4.23558-.24451-6.35428q-.08662-2.53629-.04233-5.07451c.03423-1.80708.06935-3.61506.154-5.4208.02117-.45436.0734-.90736.068-1.36353a.5552.5552,0,0,1,.11258-.40347l.46337-.09817a.63629.63629,0,0,1,.10626.59171,19.04606,19.04606,0,0,0-.12293,2.22c-.14995,3.48583-.13689,6.97661-.08015,10.46423.036,2.20876.1486,4.41842.30531,6.62357A137.77776,137.77776,0,0,0,99.576,50.68743a93.59711,93.59711,0,0,0,4.47065,15.156c.308.77363.66465,1.52744.95195,2.30918Z"/><path class="cls-39" d="M103.66613,69.50126a7.75072,7.75072,0,0,0-.66915-1.9003c-1.04607-2.632-1.912-5.32263-2.70139-8.04068-1.00779-3.47187-1.77737-6.99822-2.45958-10.54439-.31972-1.66074-.594-3.33138-.81236-5.01012-.19182-1.4725-.41923-2.9396-.60566-4.41256-.109-.85873-.16571-1.72378-.24992-2.58566-.09906-1.01589-.204-2.03089-.3017-3.04678-.03828-.39942-.05224-.8029-.07115-1.20142-.054-1.12577-.136-2.25108-.18778-3.3773-.0734-1.608-.08421-3.21834-.16076-4.82414-.10042-2.10789-.0671-4.21487-.036-6.31961.01487-1.03706-.0117-2.08042.0662-3.11477.07611-1.00914.0698-2.02008.14365-3.02832a.607.607,0,0,1,.38952-.08285,2.4806,2.4806,0,0,1,.10176,1.37568c-.09186,1.68956-.12608,3.37956-.1522,5.07091-.018,1.13162-.11663,2.265-.05764,3.39532.0725,1.39234.02252,2.7856.08061,4.17614.0851,2.05295.15805,4.1068.30981,6.15615a147.23288,147.23288,0,0,0,2.03989,16.30562c.68221,3.63758,1.49007,7.245,2.51857,10.80151a81.44034,81.44034,0,0,0,3.79744,10.45748,3.45241,3.45241,0,0,1,.14049.36384c-.32738.33773-.53992.33909-.77768-.03827a1.79722,1.79722,0,0,1-.34494-.5755Z"/><path class="cls-40" d="M112.36876,18.12032a.14906.14906,0,0,1,.13645.16067v.00009c-.00135.48183.03333.96681-.0135,1.44414a12.12377,12.12377,0,0,0,.0045,2.6388,3.459,3.459,0,0,1,.01125.42914,40.602,40.602,0,0,0,.30171,4.45354,45.12018,45.12018,0,0,0,1.10145,6.21783,26.6357,26.6357,0,0,0,1.81023,5.13125,12.36993,12.36993,0,0,0,2.84279,3.91722,4.0352,4.0352,0,0,0,5.05785.412,9.33711,9.33711,0,0,0,2.69824-3.02741,25.60128,25.60128,0,0,0,2.72661-7.26255,43.12715,43.12715,0,0,0,.82406-4.73363c.13825-1.169.23506-2.34024.32332-3.5142.06079-.80695.02522-1.60984.063-2.41364a8.67343,8.67343,0,0,0,.08106-1.04471c-.00676-.09322.05944-.13645.14544-.15086l.30036.70473c-.21029.05494-.141.22966-.13419.35575a26.66827,26.66827,0,0,1-.10177,2.841c-.0662,1.22259-.20219,2.44427-.35574,3.6628a43.59013,43.59013,0,0,1-1.11991,5.822,23.29436,23.29436,0,0,1-3.02067,7.13872,7.4813,7.4813,0,0,1-3.14089,2.88061,3.7362,3.7362,0,0,1-3.05623.00316,7.22794,7.22794,0,0,1-3.10127-2.81037,24.65118,24.65118,0,0,1-3.23-7.84389,42.76574,42.76574,0,0,1-.91862-4.75615c-.15761-1.13747-.25127-2.28576-.34449-3.43314-.1504-1.85526-.13734-3.71053-.15-5.56714-.00045-.07881.1378-.2945-.13419-.25218l.39312-1.4036Z"/><path class="cls-41" d="M57.70509,52.8516a10.80234,10.80234,0,0,0,.90872,1.93587c.71554,1.38425,1.51754,2.72211,2.3389,4.04511a65.25324,65.25324,0,0,0,3.90686,5.62164c1.00149,1.28787,2.01513,2.56719,3.113,3.77987,1.16,1.28113,2.30692,2.57576,3.55922,3.76683,1.522,1.44728,3.04633,2.89412,4.703,4.19371.25127.19768.59936.33593.70068.69887q-.62864,0-1.25681.0009c-.711-.50749-1.34507-1.10775-2.00432-1.67514-1.58958-1.36893-3.06028-2.864-4.52153-4.36528a65.85437,65.85437,0,0,1-4.88808-5.67567,72.57663,72.57663,0,0,1-5.2794-7.83219c-.89161-1.52924-1.73639-3.0846-2.48569-4.68994-.06845-.14635-.18958-.29675-.041-.46562a10.31106,10.31106,0,0,1,1.246.66105Z"/><path class="cls-42" d="M74.357,76.8944l-1.01409.02431-.23687-.0126a4.78723,4.78723,0,0,1-.97987-.82812c-1.48826-1.35993-2.959-2.73562-4.33915-4.21172a81.29744,81.29744,0,0,1-5.38793-6.37815,70.31686,70.31686,0,0,1-5.00651-7.59128c-.64664-1.12982-1.22663-2.29521-1.87328-3.42413a4.4,4.4,0,0,1,.24632-1.25321c.09366-.17066.19318-.07655.28009.0009a.9925.9925,0,0,1,.208.32873c.96816,1.97865,2.04215,3.89966,3.20168,5.77113a72.50877,72.50877,0,0,0,6.1467,8.51441A77.17294,77.17294,0,0,0,71.15576,73.758q1.35231,1.29735,2.78065,2.51181C74.12374,76.42968,74.43535,76.54136,74.357,76.8944Z"/><path class="cls-43" d="M74.357,76.8944c-.22291-.49984-.73445-.71464-1.0857-1.08975-.29-.31025-.65429-.54937-.96906-.83711-1.3257-1.21223-2.61178-2.46768-3.84111-3.77492-1.67605-1.78457-3.27374-3.63939-4.76966-5.58246-1.27527-1.65623-2.46768-3.3683-3.607-5.11774-1.0267-1.57833-1.966-3.20844-2.86305-4.86422-.38411-.70968-.7331-1.43648-1.11046-2.14841-.06935-.13059-.091-.36025-.34538-.26028.0752-.29811.1567-.59441.22425-.89386.07655-.34.23821-.34989.46922-.1351a3.24536,3.24536,0,0,0,.45706,1.14738c.929,1.80123,1.88859,3.5858,2.95582,5.31047q1.57742,2.5501,3.34262,4.97364c.95466,1.309,1.96649,2.57261,2.98914,3.82761.56469.69257,1.1708,1.35272,1.76971,2.01737,1.15008,1.27707,2.38663,2.47129,3.60426,3.68217,1.23384,1.22709,2.56539,2.3461,3.883,3.48a.7331.7331,0,0,1,.2184.26523H74.357Z"/><path class="cls-44" d="M109.15087,48.92267l-.00721-.85378c-.081-.89431-.0135-1.79042-.03467-2.68563-.0018-.06755.00766-.13644.08061-.159a.17157.17157,0,0,1,.19543.09457,1.88878,1.88878,0,0,1,.20354.50434,40.08913,40.08913,0,0,0,2.67527,6.44479,20.39417,20.39417,0,0,0,3.55338,5.011,10.61363,10.61363,0,0,0,2.143,1.6828c.10537.06124.25307.09456.24947.26388a18.29717,18.29717,0,0,1-1.06452,1.74359c-.22426.10131-.37061-.05134-.52416-.16662a14.67206,14.67206,0,0,1-2.82793-2.89547,28.66489,28.66489,0,0,1-3.41467-5.94541c-.43725-1.00238-.82677-2.02278-1.22754-3.03957Z"/><path class="cls-45" d="M105.94243,54.1638a52.7501,52.7501,0,0,1-1.87552-6.41237c-.64214-2.5609-1.12982-5.15467-1.54546-7.76015q-.34493-2.16147-.57864-4.34186c-.17472-1.63326-.3508-3.26472-.46832-4.90384-.09321-1.30544-.1549-2.61178-.236-3.91767-.17878-2.87161-.16841-5.74592-.12879-8.61843.018-1.282.08015-2.56675.1387-3.84967.00675-.14185.036-.25668.17922-.31387a5.50093,5.50093,0,0,1,.46337,1.14829c-.054,3.09631-.11123,6.194-.03693,9.28938.05269,2.16958.17922,4.33916.35349,6.50559a113.96066,113.96066,0,0,0,1.75124,12.80222q.72636,3.70423,1.80483,7.317c.09366.31071.1468.63178.25083.93979A14.52013,14.52013,0,0,1,105.94243,54.1638Z"/><path class="cls-46" d="M125.021,14.28551l.62457.46516a13.95607,13.95607,0,0,1,.47733,2.4902,27.95,27.95,0,0,1,.24767,4.205,24.55249,24.55249,0,0,1-1.46935,8.42119,8.46353,8.46353,0,0,1-1.3113,2.3452,2.93358,2.93358,0,0,1-2.07456,1.25816,2.39291,2.39291,0,0,1-1.8377-.72,8.26638,8.26638,0,0,1-1.99036-3.32057,22.02077,22.02077,0,0,1-1.15143-5.53067,26.44587,26.44587,0,0,1-.14725-3.54707,24.304,24.304,0,0,1,1.44773-8.07175,1.0447,1.0447,0,0,1,.30036-.49354,1.192,1.192,0,0,1,.625.16437c.10222.1477.01215.27739-.04864.40077a17.24673,17.24673,0,0,0-1.49187,5.83283,25.23913,25.23913,0,0,0-.14049,3.77987,21.12846,21.12846,0,0,0,1.30634,7.06712,7.9028,7.9028,0,0,0,1.24465,2.157,3.00087,3.00087,0,0,0,.93979.75067,1.96415,1.96415,0,0,0,2.41319-.61062,9.37679,9.37679,0,0,0,1.939-4.00323,24.82171,24.82171,0,0,0,.70158-4.662,25.68984,25.68984,0,0,0-.70518-7.93486C124.88325,14.58316,124.75131,14.37737,125.021,14.28551Z"/><path class="cls-47" d="M109.30713,38.99386a.57592.57592,0,0,1,.23686.42509c.38366,1.56121.80155,3.11387,1.32976,4.6323a31.30621,31.30621,0,0,0,3.72043,7.64622,11.04881,11.04881,0,0,0,4.47246,3.98972,3.53775,3.53775,0,0,1,1.02895.43545,14.8862,14.8862,0,0,1-.93754,1.56526,5.09654,5.09654,0,0,1-1.4635-.71418,13.35087,13.35087,0,0,1-3.52275-3.55293,30.80543,30.80543,0,0,1-3.65784-7.30353q-.6807-1.88295-1.21493-3.8141c-.018.0725.01215.19363-.13374.20309-.02612-.83577.05043-1.66884.0806-2.50281.059-.28819-.02971-.5854.05044-.87224Z"/><path class="cls-48" d="M109.16528,42.50625c.10672-.08511.01711-.22966.09952-.32918.1441.05494.15805.18913.19138.30846a44.51643,44.51643,0,0,0,2.356,6.54612,24.71365,24.71365,0,0,0,2.69914,4.67779,11.34648,11.34648,0,0,0,4.42832,3.824,1.29311,1.29311,0,0,1,.2184.15446,12.2001,12.2001,0,0,1-.94835,1.5378,11.388,11.388,0,0,1-2.877-2.29071,20.492,20.492,0,0,1-2.74013-3.85553,40.0018,40.0018,0,0,1-3.17015-7.43412,2.60524,2.60524,0,0,0-.11393-.28865c-.01351-.02927-.05224-.04728-.16482-.14275v2.855a.519.519,0,0,1-.04322-.14545Q109.13016,45.21485,109.16528,42.50625Z"/><path class="cls-49" d="M126.662,15.53736a.20175.20175,0,0,0-.12249.24767c.19229,1.29238.27919,2.59467.37916,3.89741a26.08777,26.08777,0,0,1-.04323,3.65334,25.84651,25.84651,0,0,1-1.24509,6.81179,11.48046,11.48046,0,0,1-1.76611,3.49348,3.38633,3.38633,0,0,1-2.37176,1.47611,2.40643,2.40643,0,0,1-1.622-.52641,7.24463,7.24463,0,0,1-2.25874-3.16566,20.36507,20.36507,0,0,1-1.41081-5.12c-.18238-1.18746-.28009-2.38662-.35034-3.58984a24.20673,24.20673,0,0,1-.04638-2.569,38.172,38.172,0,0,1,.353-3.97621,24.31836,24.31836,0,0,1,.99112-4.26756.33952.33952,0,0,0-.02386-.33007l.54757.12383a.51155.51155,0,0,1,.0018.52056,24.14087,24.14087,0,0,0-1.23249,6.18542,26.75321,26.75321,0,0,0-.13869,2.84233,27.28628,27.28628,0,0,0,1.40271,8.71029,9.32717,9.32717,0,0,0,2.06241,3.45791,2.4168,2.4168,0,0,0,3.21564.00766,9.35794,9.35794,0,0,0,2.09078-3.53131,25.11249,25.11249,0,0,0,1.25455-6.22189c.07611-.83127.07835-1.66434.10988-2.49335a21.26509,21.26509,0,0,0-.08556-2.41365q-.12018-1.61625-.39627-3.21519c-.02522-.14635-.1333-.42329.22155-.39537Z"/><path class="cls-50" d="M55.5193,54.47226a1.01268,1.01268,0,0,1,.39132.47192,67.62,67.62,0,0,0,4.52108,7.63451,69.54578,69.54578,0,0,0,4.36483,5.75672q1.50673,1.78322,3.09226,3.49438c.77723.84207,1.58778,1.649,2.40509,2.44877.82451.806,1.70306,1.55807,2.555,2.3371a3.50581,3.50581,0,0,1,.25668.29045,5.64462,5.64462,0,0,1-1.40766-.14861,5.3684,5.3684,0,0,1-.89837-.7439q-2.79459-2.58792-5.319-5.442a77.22142,77.22142,0,0,1-6.4484-8.4329q-1.80663-2.71716-3.36019-5.58921a2.23168,2.23168,0,0,0-.15265-.3571Z"/><path class="cls-51" d="M109.15087,48.92267c.34313.2882.37916.7295.52731,1.10731a33.185,33.185,0,0,0,3.73935,7.20626,16.11494,16.11494,0,0,0,3.34218,3.55878.78048.78048,0,0,0,.38547.17427c-.39762.62592-.73715,1.28877-1.192,1.87823a.48638.48638,0,0,1-.25668-.16662,22.808,22.808,0,0,1-4.64581-6.12552c-.67637-1.26267-1.26987-2.5609-1.8215-3.8803C109.14546,51.42548,109.13151,50.17408,109.15087,48.92267Z"/><path class="cls-52" d="M100.14293,64.19619a3.81176,3.81176,0,0,0-.34494-1.50583,115.25308,115.25308,0,0,1-2.82387-11.58055c-.40978-2.10473-.78128-4.218-1.047-6.348-.18733-1.49952-.426-2.99183-.607-4.49181-.13644-1.12892-.21254-2.265-.326-3.39756q-.20175-2.00838-.32107-4.0235c-.04908-.83982-.10718-1.67964-.1558-2.51992-.07565-1.30859-.10222-2.61853-.15806-3.92667-.14545-3.38406-.05493-6.76812-.045-10.15128.00315-1.14918.04593-2.30692.13149-3.45835.00991-.13419.05133-.29225-.09951-.39267a1.48132,1.48132,0,0,1,.49353-.13779c.01982,1.03975-.05449,2.07906-.10267,3.11477-.04188.91007-.04728,1.81834-.04683,2.72661.0009,1.26131-.17247,2.52082-.077,3.77987.109,1.44324.01351,2.88737.08061,4.32746.05764,1.23114.09817,2.46227.15175,3.693.054,1.2415.1369,2.48255.23371,3.72134.11438,1.46935.23146,2.93961.39492,4.404.18373,1.64272.37916,3.28408.60026,4.9232q.52325,3.88165,1.255,7.72637.86144,4.563,2.08222,9.04036.73847,2.68317,1.6139,5.32578c.054.16436.21615.34944.00585.526a8.651,8.651,0,0,1-.88846-1.37479Z"/><path class="cls-53" d="M123.67057,13.51548l.72049.39267a6.183,6.183,0,0,1,.63944,1.998,24.0775,24.0775,0,0,1,.50344,4.1802,24.103,24.103,0,0,1-.34223,5.28255,12.66858,12.66858,0,0,1-1.45629,4.30809,4.77321,4.77321,0,0,1-.97987,1.20772,1.96873,1.96873,0,0,1-2.75948-.0063,5.67825,5.67825,0,0,1-1.43333-2.07231,16.58485,16.58485,0,0,1-1.241-5.183,21.49486,21.49486,0,0,1-.14951-2.882,20.29325,20.29325,0,0,1,1.32751-7.29678,4.5276,4.5276,0,0,1,.8092-1.414l.707.159c.18328.11708.09322.26118.00811.36565a9.73471,9.73471,0,0,0-1.88994,4.81378,21.34,21.34,0,0,0,.44761,9.32045,7.57868,7.57868,0,0,0,1.1789,2.4938,2.15153,2.15153,0,0,0,1.50222,1.02,1.67511,1.67511,0,0,0,1.35272-.5809,5.881,5.881,0,0,0,1.32706-2.2754,15.91907,15.91907,0,0,0,.902-4.50082,21.56444,21.56444,0,0,0-.52236-6.89555,10.23808,10.23808,0,0,0-.67546-1.91155c-.07655-.16076-.26253-.3634.02386-.52326Z"/><path class="cls-23" d="M131.81257,88.72711a2.39257,2.39257,0,0,1,1.25366-.31161,69.88272,69.88272,0,0,0,11.3752-2.99c1.02716-.36249,2.03089-.79074,3.04858-1.1807.1585-.06034.31342-.204.50614-.086a17.41209,17.41209,0,0,1-1.86247,2.09033c-.10086.095-.18012.21884-.32511.25982a4.73408,4.73408,0,0,0-.84162.2927,69.44754,69.44754,0,0,1-9.90946,2.72616,5.17946,5.17946,0,0,0-.90512.23055A16.08479,16.08479,0,0,1,131.81257,88.72711Z"/><path class="cls-54" d="M123.67057,13.51548c-.12339.1396-.03918.26884.02341.39492a13.80338,13.80338,0,0,1,1.17485,4.404,21.25906,21.25906,0,0,1,.13284,3.96316,14.58974,14.58974,0,0,1-1.5504,6.40066,3.59887,3.59887,0,0,1-1.15369,1.34417,1.62244,1.62244,0,0,1-2.09753-.18328,6.90368,6.90368,0,0,1-1.74134-3.16971,20.30216,20.30216,0,0,1-.69528-7.12386,14.72075,14.72075,0,0,1,1.29328-5.67927,4.538,4.538,0,0,1,.84073-1.30229c.10042-.1.20444-.21029.118-.37465a18.52237,18.52237,0,0,1,2.79865.92043,2.24748,2.24748,0,0,1,.85648.40527Z"/><path class="cls-55" d="M134.01637,79.87678a14.33963,14.33963,0,0,0-1.58508.34223c-1.33471.22876-2.669.453-4.01584.60477q-1.86876.21119-3.74385.32647c-.59621.036-1.19106.04413-1.78592.05539a15.93309,15.93309,0,0,1-1.62921.08376,5.78043,5.78043,0,0,1-.8119-.06169.61558.61558,0,0,0-.59215.06844c-.56514-.394-1.12757-.79164-1.69676-1.1789a.47193.47193,0,0,1-.23641-.56334c.072-.2274.2882-.18147.46652-.18282,2.35555-.02387,4.7075.10807,7.06081.18462q4.21082.13555,8.42164.285a.7407.7407,0,0,1,.14859.036Z"/><path class="cls-25" d="M142.44432,27.176c.17247.3697-.03016.716-.10357,1.05326A30.07162,30.07162,0,0,1,139.2773,36.487a28.13365,28.13365,0,0,1-2.968,4.32114,22.27369,22.27369,0,0,1-6.02511,5.03669,2.36057,2.36057,0,0,1-1.21043.49353l1.01409-1.56391a22.53015,22.53015,0,0,0,2.963-2.09168,23.34826,23.34826,0,0,0,4.71111-5.48609,28.75468,28.75468,0,0,0,3.48177-8.15641,1.80163,1.80163,0,0,1,.10943-.45166,14.46354,14.46354,0,0,1,1.0911-1.41261Z"/><path class="cls-56" d="M104.78874,70.115c-.258-.141-.27919-.42239-.38366-.6534a72.777,72.777,0,0,1-2.96528-7.82723c-.98482-3.08731-1.78907-6.22325-2.47128-9.393-.52236-2.42715-.97041-4.86782-1.37344-7.31614-.22786-1.38875-.38771-2.7892-.566-4.186-.16391-1.28113-.32827-2.56225-.46021-3.84742-.10627-1.02941-.154-2.06421-.24632-3.09542-.15356-1.71612-.25217-3.43494-.32332-5.15691-.05-1.21763-.1405-2.43526-.13734-3.65379.00495-1.73008-.17922-3.45926-.07205-5.18709.08105-1.30049.01441-2.60052.0752-3.89786.06124-1.296.16527-2.58971.145-3.8884a.42918.42918,0,0,1,.31522-.06935c-.02612,1.0258-.0009,2.05611-.09276,3.0756-.09142,1.01544.01035,2.03044-.0725,3.03867-.1387,1.67785-.07791,3.35614-.05134,5.03173.018,1.15549.01487,2.31368.0716,3.46737.05539,1.13972.09232,2.28035.15176,3.41918q.11842,2.2682.313,4.53189c.1324,1.54455.2828,3.0891.47147,4.62825.199,1.62741.46382,3.24672.68,4.87232.31972,2.41095.78082,4.79668,1.27437,7.17565q.72994,3.5178,1.70351,6.97976.713,2.52976,1.56887,5.016,1.01229,2.927,2.27269,5.75672c.10357.23416.2819.43995.23912.72184a.75508.75508,0,0,1-.0662.45706Z"/><path class="cls-57" d="M119.3089,12.03037c-.24542.61467-.61963,1.16539-.85558,1.78772a17.47884,17.47884,0,0,0-.87405,3.53671,22.66929,22.66929,0,0,0-.29135,4.1023,21.40632,21.40632,0,0,0,.89746,6.04537,7.31027,7.31027,0,0,0,1.77737,3.19988,1.89758,1.89758,0,0,0,2.83558-.004,8.16905,8.16905,0,0,0,1.96784-3.91632,23.38346,23.38346,0,0,0,.66915-4.83405,25.04254,25.04254,0,0,0-.04953-2.755,18.97457,18.97457,0,0,0-.938-5.02092,2.32589,2.32589,0,0,1-.05629-.26388l.62953.37736c-.11573.0815-.05719.17652-.03062.27829a21.73449,21.73449,0,0,1,.634,3.27058,27.32751,27.32751,0,0,1,.16616,4.27431,25.03292,25.03292,0,0,1-.77363,5.32353,10.53962,10.53962,0,0,1-1.56121,3.49979,2.71221,2.71221,0,0,1-1.99981,1.3266,2.27854,2.27854,0,0,1-1.89579-.98887,10.79447,10.79447,0,0,1-2.03989-4.74174,25.74012,25.74012,0,0,1-.49489-3.64613,25.70611,25.70611,0,0,1-.05089-2.76354,21.28128,21.28128,0,0,1,1.33336-7.177,9.44228,9.44228,0,0,0,.45391-.99022Z"/><path class="cls-58" d="M109.22922,52.67508a2.945,2.945,0,0,1,.58315,1.12712,29.07183,29.07183,0,0,0,4.15994,6.95364c.51875.62187,1.12622,1.15144,1.67379,1.74179.10582.11347.20489.23326.30711.34989a14.11937,14.11937,0,0,1-1.00238,1.56166c-.21165.05494-.29991-.12248-.41384-.23191a19.10479,19.10479,0,0,1-2.91574-3.69342,28.32116,28.32116,0,0,1-1.94082-3.55472,1.98265,1.98265,0,0,0-.2954-.50254,14.6247,14.6247,0,0,1-.08782-2.01738c-.08286-.33908.00946-.68717-.05178-1.02715Z"/><path class="cls-59" d="M104.99859,68.15258a5.09237,5.09237,0,0,1-.74751-1.52384,64.368,64.368,0,0,1-2.32809-6.44569c-.91412-2.9189-1.67964-5.87831-2.32629-8.8697q-.63492-2.9387-1.13747-5.90173c-.25307-1.50267-.48453-3.00985-.65475-4.52558-.13419-1.19377-.31926-2.38168-.4503-3.57544-.10673-.96366-.16661-1.93272-.24767-2.9-.10177-1.22393-.20805-2.44787-.304-3.6727-.03918-.50345-.027-1.00869-.07115-1.51484-.07925-.91682-.05224-1.84265-.09637-2.76308-.1486-3.12243-.07205-6.24666-.06169-9.36954.0045-1.41216.10672-2.82568.15536-4.23919.0117-.33323.0761-.66825.05944-1.00643.08871-.10267.208-.05134.31521-.06215l.01351.01666a.458.458,0,0,1,.09051.36745c-.14274,2.22092-.195,4.44363-.24136,6.6686-.02386,1.15729-.086,2.31773-.04232,3.47322.06935,1.84626.05223,3.69522.15085,5.53968.12429,2.32448.25353,4.64942.46967,6.9667.2927,3.13684.66015,6.26467,1.15729,9.37674.57324,3.5903,1.27572,7.154,2.18714,10.67408.6597,2.54648,1.38785,5.075,2.28306,7.55165a4.977,4.977,0,0,1,.19769.63268,5.836,5.836,0,0,0,.50974,1.51123c.38547.96726.74616,1.94488,1.19152,2.88692l-.00676.16121c-.06394.1513.02522.322-.059.471a.06845.06845,0,0,1-.00631.07205Z"/><path class="cls-60" d="M63.19794,38.05226c.22065-.09321.19453.07655.21569.19994.46427,2.7176,1.07534,5.40278,1.77872,8.06725.444,1.6801.92718,3.348,1.4788,4.99616.05134.154.20939.32872.01847.50119A13.40346,13.40346,0,0,1,64.606,48.94294a14.20314,14.20314,0,0,1-1.61029-10.07472,3.98039,3.98039,0,0,1,.20264-.816Z"/><path class="cls-49" d="M126.17788,15.14965c-.23281.06439-.15356.25262-.12744.38636a28.73126,28.73126,0,0,1,.46382,4.744,30.91413,30.91413,0,0,1-.47013,6.325,17.10359,17.10359,0,0,1-1.66028,5.12,6.11154,6.11154,0,0,1-1.74719,2.11194,2.6235,2.6235,0,0,1-2.86531-.26118,9.18667,9.18667,0,0,1-2.09888-3.37911,20.7808,20.7808,0,0,1-1.16179-4.703,26.46761,26.46761,0,0,1-.26658-3.28724c-.00585-.5021-.07835-1.00869-.05854-1.51349a30.23245,30.23245,0,0,1,1.21673-8.0695,2.52185,2.52185,0,0,0,.27018-.92718l.46427.09051a20.325,20.325,0,0,0-1.20907,4.21488q-.18583,1.14842-.28594,2.30827a26.18317,26.18317,0,0,0-.14275,3.26337,25.33622,25.33622,0,0,0,1.309,7.85876,8.32761,8.32761,0,0,0,1.86157,3.16026,2.26731,2.26731,0,0,0,3.41783.0063,8.12891,8.12891,0,0,0,1.84851-3.12963,20.55655,20.55655,0,0,0,1.1064-4.99256,28.04014,28.04014,0,0,0-.36744-9.19482.81911.81911,0,0,1-.02928-.53136c.18733.12023.41429.18643.53272.39942Z"/><path class="cls-61" d="M55.5193,56.19243a6.99663,6.99663,0,0,1,.89251,1.49412A80.17291,80.17291,0,0,0,60.91128,64.687q1.41981,1.971,2.94951,3.85553c.73535.90332,1.53555,1.75485,2.30017,2.63475,1.07533,1.237,2.22452,2.40284,3.39757,3.54527.60341.5881,1.24149,1.14063,1.85976,1.71341a3.78234,3.78234,0,0,1,.27919.32152,4.34838,4.34838,0,0,1-1.3311-.2256c.01035-.18553-.1378-.27289-.24632-.37826-.6624-.64214-1.34642-1.264-1.99126-1.92371-.97176-.99383-1.94893-1.98586-2.86755-3.02832a77.4419,77.4419,0,0,1-6.07464-7.77455q-1.79133-2.64646-3.35749-5.42755c-.07251-.12879-.12564-.2936-.31027-.322Z"/><path class="cls-62" d="M106.09284,46.73148c.023.75562.03557,1.51123-.00586,2.26639-.313-.04233-.31071-.322-.371-.52956-.37826-1.3-.69033-2.61718-.98662-3.93838a96.42889,96.42889,0,0,1-1.77466-11.05729c-.18733-1.78367-.33773-3.57139-.42644-5.365-.06755-1.35092-.09547-2.70319-.16437-4.05232-.086-1.69225-.02567-3.3818-.05629-5.0727-.009-.48138.09637-.95736.09142-1.44009a.39809.39809,0,0,1,.18327-.3679,11.26322,11.26322,0,0,1,.47012,1.55987c.07791,1.80483-.01035,3.61146.04414,5.41584q.06529,2.16147.20579,4.3225.17742,2.72616.48048,5.43926a92.778,92.778,0,0,0,1.645,9.97159c.21344.9515.47732,1.89129.6651,2.84819Z"/><path class="cls-63" d="M103.28292,63.14967c-.40167-1.21943-.82316-2.43345-1.20142-3.66009-.83982-2.72346-1.57337-5.47438-2.175-8.26223-.417-1.93317-.802-3.87264-1.133-5.82112-.25442-1.50088-.45931-3.01211-.66555-4.522-.19634-1.43332-.33548-2.8725-.51831-4.30673-.13058-1.0249-.16751-2.062-.24857-3.09361-.10176-1.28833-.213-2.57666-.30575-3.86589q-.05529-.83382-.06485-1.66974c-.02026-1.20772-.11617-2.41274-.10807-3.62226.0108-1.51979-.145-3.04093-.05675-4.55936.07116-1.22169.01711-2.44337.077-3.6619.05764-1.16539.122-2.32944.1495-3.49573.00631-.27064.05539-.54037.08511-.80966.17877-.02927.23326.06485.2238.22471l-.13825,2.40374c-.0036.06439-.01486.12878-.01711.19363-.10808,3.48628-.10357,6.97435-.0644,10.46063.01531,1.34687.08782,2.696.14995,4.04331.0716,1.5378.18688,3.07424.31162,4.60934.10807,1.32615.22875,2.65276.39222,3.97306.21254,1.717.42959,3.43314.67861,5.14611a111.17738,111.17738,0,0,0,2.60593,12.72568,75.08483,75.08483,0,0,0,2.76443,8.5081c.26973.67456.54307,1.34777.80785,2.02458a1.08528,1.08528,0,0,0,.317.476,1.31268,1.31268,0,0,1-.05494.55118c-.2238.05583-.25217-.13239-.313-.26208-.42779-.911-.75381-1.86382-1.14648-2.7892-.13059-.308-.2193-.63133-.35124-.93844Z"/><path class="cls-62" d="M109.385,56.42659c.34088.08871.35844.42329.47372.66375a28.80467,28.80467,0,0,0,3.10262,5.14791,12.64011,12.64011,0,0,0,1.98945,2.17093c-.38546.55974-.68086,1.17845-1.11631,1.70577-.399-.16212-.5863-.54263-.83893-.84478a28.75229,28.75229,0,0,1-2.98418-4.46569c-.09637-.17292-.10718-.44806-.40167-.45617a22.61381,22.61381,0,0,1-.15311-2.58656c-.08871-.25668.01081-.52686-.05944-.78488Z"/><path class="cls-64" d="M106.01448,52.04826a3.78618,3.78618,0,0,1-.526-1.43874c-.5129-1.67063-.93033-3.36964-1.305-5.0754-.34313-1.563-.62142-3.14135-.8943-4.71832-.23146-1.33516-.4323-2.67618-.61332-4.01854-.1378-1.024-.22515-2.0543-.33052-3.08235-.10447-1.015-.20939-2.02954-.30261-3.04543q-.05316-.57977-.07475-1.16179c-.05269-1.42477-.12879-2.85-.18958-4.27431-.10627-2.48435-.03467-4.96689-.045-7.44988-.00361-.74932.07249-1.50223.063-2.25469a.77.77,0,0,1,.09457-.33413l.37825,1.04336c-.03017,1.93722-.18643,3.874-.109,5.81031.0752,1.87013.07745,3.74206.20263,5.61263.11708,1.75169.23371,3.502.40393,5.24968q.39155,4.08118,1.09965,8.12264a85.30228,85.30228,0,0,0,2.10653,9.0872,4.65737,4.65737,0,0,1,.04818,1.699Z"/><path class="cls-18" d="M91.32141,84.0079a11.50223,11.50223,0,0,1-1.40991.93348,18.01073,18.01073,0,0,1-2.01737-1.01q-2.9646-1.57-5.76843-3.41872a1.82684,1.82684,0,0,1-.31792-.22426.94115.94115,0,0,0-.8011-.31837.26429.26429,0,0,1-.24541-.09276,18.621,18.621,0,0,1,2.25513-.0815,2.34117,2.34117,0,0,1,1.65533.30981,59.926,59.926,0,0,0,6.26963,3.46736c.17021.08286.467.10627.38.435Zm42.83141,5.75042c.06574-.19994.258-.21975.412-.24722,1.93676-.34494,3.84382-.81641,5.7387-1.341,1.67515-.46382,3.32282-1.01229,4.95878-1.59859.17021-.06124.34539-.213.54623-.0626a13.65237,13.65237,0,0,1-5.76978,3.40162,8.999,8.999,0,0,1-5.88641-.1522Z"/><path class="cls-65" d="M106.09284,46.73148a5.76951,5.76951,0,0,1-.53092-1.77151q-.77723-3.20168-1.27391-6.461c-.23822-1.54365-.45031-3.08911-.62143-4.64177-.1549-1.39955-.2972-2.79865-.394-4.20451-.09906-1.44684-.16121-2.89458-.24046-4.34186-.10807-1.976-.01486-3.95009-.06349-5.92424a1.96008,1.96008,0,0,1,.08375-.65205,10.6701,10.6701,0,0,1,.47193,1.79043c.04052.49083.03467.98347.03287,1.47565-.00765,1.862.06394,3.72314.17292,5.57976a100.6501,100.6501,0,0,0,1.78322,14.17431q.276,1.35766.57954,2.71v2.26684Z"/><path class="cls-66" d="M141.35323,28.58861a3.05761,3.05761,0,0,1-.27468,1.39235A27.36564,27.36564,0,0,1,135.737,40.13043a22.06569,22.06569,0,0,1-5.24742,4.522.60434.60434,0,0,1-.40168.122,15.19729,15.19729,0,0,1,1.00644-1.56752,17.00359,17.00359,0,0,0,2.782-2.25469,22.04756,22.04756,0,0,0,2.515-2.97293,27.55561,27.55561,0,0,0,3.86-7.924A14.74235,14.74235,0,0,1,141.35323,28.58861Z"/><path class="cls-67" d="M106.09284,44.46463a4.39913,4.39913,0,0,1-.45616-1.55c-.41384-1.78772-.70744-3.59976-1.00419-5.40954-.17562-1.06948-.254-2.15472-.41878-3.22645-.17246-1.12487-.23686-2.26009-.37015-3.38856-.09366-.7957-.11979-1.5995-.16887-2.40014-.08736-1.43738-.11708-2.87746-.18193-4.31439-.04953-1.07939-.01486-2.15607-.04863-3.23321a1.89856,1.89856,0,0,1,.08015-.41743c.29.79029.33368,1.63776.56109,2.44291a3.7,3.7,0,0,1,.06619.3661,101.224,101.224,0,0,0,1.708,16.85319,2.57834,2.57834,0,0,0,.1549.75967c.07745,1.17125.09951,2.34385.07835,3.5178Z"/><path class="cls-68" d="M106.02123,51.82a6.83372,6.83372,0,0,0-.50209-2.87746q-.95046-3.46417-1.6112-6.99822c-.33008-1.7526-.60116-3.5151-.847-5.2803-.17652-1.26626-.26028-2.54559-.40888-3.81635-.1468-1.26-.23326-2.524-.31567-3.78934-.06529-.99608-.08916-1.99486-.16526-2.98824-.07475-.97626.02026-1.95343-.0743-2.92114a25.6632,25.6632,0,0,1-.05133-3.117c.02521-1.05192.06844-2.10294.068-3.15575a1.65847,1.65847,0,0,1,.15581-.63809,3.42252,3.42252,0,0,1,.313.93664,8.14365,8.14365,0,0,0-.14634,1.69766c-.03873,1.44458-.05584,2.89277-.0009,4.33645.05493,1.43873.07385,2.87882.149,4.31665.05855,1.124.12519,2.24883.23687,3.36829.2193,2.1975.4485,4.3932.75651,6.58214a92.52132,92.52132,0,0,0,2.06241,10.30123,2.764,2.764,0,0,0,.44715,1.22078,24.8268,24.8268,0,0,1-.06574,2.82162Z"/><path class="cls-69" d="M106.01448,40.94684c-.2864-.2175-.24316-.56289-.29585-.85333-.25217-1.38425-.49534-2.77074-.69753-4.16309-.16841-1.16225-.25937-2.33574-.41383-3.50069-.17832-1.346-.22875-2.70274-.37736-4.05141-.04953-.44941-.05764-.90737-.06844-1.35678-.02476-.99878-.1468-1.99486-.10087-2.99679a2.51413,2.51413,0,0,1,.091-.69077c.2828,1.08209.43545,2.18849.612,3.28949.47552,2.96708.788,5.95306.99788,8.9494C105.88659,37.36149,106.01583,39.15147,106.01448,40.94684Z"/><path class="cls-10" d="M89.368,79.57147q2.40723-.14207,4.81918-.16841a3.47355,3.47355,0,0,1,2.44968.60836.23505.23505,0,0,1,.15535.24407q-1.28816.99457-2.65681,1.87778c-1.49682-.71509-3.00354-1.41036-4.45218-2.22226-.13779-.077-.33007-.11618-.31521-.33953Z"/><path class="cls-17" d="M89.368,79.57147a2.98335,2.98335,0,0,0,.88441.54712c1.18431.59756,2.38077,1.17035,3.57,1.75755.12023.05944.28819.0761.31341.25668a10.42982,10.42982,0,0,1-1.56437,1.024,16.00347,16.00347,0,0,1-1.80348-.83893c-1.41576-.71914-2.82792-1.45-4.17885-2.288a1.64679,1.64679,0,0,0-.92943-.208c-.1522-.00045-.317.03152-.4413-.1q1.803-.077,3.60651-.1531c.18012-.00721.362.0018.54307.00315Z"/><path class="cls-42" d="M88.19448,85.97574a3.12751,3.12751,0,0,1-.85739.55657,76.33071,76.33071,0,0,1-7.29722-4.36437c-.82857-.56334-1.65263-1.13343-2.44788-1.74269a1.18254,1.18254,0,0,0-.85378-.29631.47643.47643,0,0,1-.439-.09816,19.76861,19.76861,0,0,1,2.25965-.07925c.1441-.068.249.01486.35393.09276a66.13953,66.13953,0,0,0,6.62762,4.26936q1.18926.67316,2.39564,1.31535C88.06479,85.69835,88.29309,85.724,88.19448,85.97574Z"/><path class="cls-70" d="M140.25133,30.05526a4.10571,4.10571,0,0,1-.42058,1.56482,27.3515,27.3515,0,0,1-2.81128,5.62388,24.71115,24.71115,0,0,1-2.44471,3.10982A21.69023,21.69023,0,0,1,131.65,42.9516a1.02444,1.02444,0,0,1-.55567.25533A18.28567,18.28567,0,0,1,132.312,41.3395a17.91685,17.91685,0,0,0,2.6433-2.63655,24.95927,24.95927,0,0,0,3.6718-6.04492c.11438-.26253.19949-.53586.29541-.80515a19.86,19.86,0,0,1,1.32841-1.79762Z"/><path class="cls-23" d="M85.218,79.721a2.92782,2.92782,0,0,1,2.1232.62908q1.26808.75941,2.59332,1.41667c.76777.37691,1.531.76417,2.29431,1.14918.12519.063.27379.09591.34268.24046a5.61075,5.61075,0,0,1-1.25005.85108c-.00721-.18147-.15986-.2229-.28459-.28234a57.82972,57.82972,0,0,1-6.52315-3.60381,2.76479,2.76479,0,0,0-1.49727-.32557,18.24057,18.24057,0,0,1,2.202-.0743Z"/><path class="cls-71" d="M109.60973,60.34831c.036-.06844-.04593-.32557.16437-.11573a1.607,1.607,0,0,1,.25442.38727,29.44375,29.44375,0,0,0,3.41559,5.0646c.12473.1486.26027.2873.39041.4305a13.25321,13.25321,0,0,1-1.00553,1.513,15.21529,15.21529,0,0,1-1.41081-1.80888c-.44716-.63854-.88125-1.287-1.27977-1.95839-.06215-.10492-.08106-.2999-.2918-.23371a15.3261,15.3261,0,0,1-.15671-2.10834c-.081-.17877.0036-.37285-.05359-.55387Z"/><path class="cls-50" d="M76.29917,80.03078c.83262-.199,1.38695.33819,1.971.76552A66.16338,66.16338,0,0,0,84.932,85.08908c.73535.412,1.4752.816,2.21325,1.223.09186.05043.19139.09141.19183.22065a3.46854,3.46854,0,0,1-.78353.46382c-1.5995-.83983-3.15665-1.7544-4.69626-2.69914-1.91966-1.17756-3.7515-2.48209-5.54868-3.83617-.131-.09907-.34719-.177-.23146-.42193Z"/><path class="cls-61" d="M76.07672,80.03934c.03513.2972.31657.3688.5012.50749A70.80526,70.80526,0,0,0,83.052,84.92066c1.03751.61558,2.10023,1.18972,3.153,1.77962a.69072.69072,0,0,1,.349.2963,1.8458,1.8458,0,0,1-.70564.37961,4.66687,4.66687,0,0,0-1.291-.78128,77.5651,77.5651,0,0,1-8.8742-5.82922,1.60321,1.60321,0,0,1-.22876-.21255,1.48644,1.48644,0,0,0-1.37253-.4458,14.3537,14.3537,0,0,1,1.99486-.068Z"/><path class="cls-41" d="M80.76127,79.87723a1.66435,1.66435,0,0,1,1.164.35934,48.20724,48.20724,0,0,0,4.59223,2.82793c1.06453.5917,2.14527,1.15369,3.217,1.73143a1.15975,1.15975,0,0,1,.177.14545l-.85694.54352a53.86191,53.86191,0,0,1-5.15826-2.83063q-1.60266-.96816-3.1508-2.02052A5.895,5.895,0,0,1,80.211,80.242c-.10177-.08736-.24767-.17022-.1468-.349Z"/><path class="cls-72" d="M80.06419,79.893c.05629.3008.34178.38456.54217.52146q3.06839,2.09752,6.32861,3.8848c.60477.331,1.22574.62772,1.83276.9515.10942.05854.25937.0734.28684.23416-.31072.122-.50344.45031-.86009.49083-.0045-.1495-.13194-.17922-.23236-.231a78.09913,78.09913,0,0,1-8.24242-4.97228,8.985,8.985,0,0,0-1.16089-.82091,8.64109,8.64109,0,0,1,1.50537-.05854Z"/><path class="cls-73" d="M109.8466,63.627c.02386-.08691-.02612-.31386.16661-.10988a2.66525,2.66525,0,0,1,.3008.44851,32.62947,32.62947,0,0,0,2.37852,3.39171.45839.45839,0,0,1,.13644.27019,17.493,17.493,0,0,1-1.1699,1.73008q-.65669-.859-1.25906-1.75755a.75914.75914,0,0,0-.24632-.29135,26.08141,26.08141,0,0,1-.22785-2.66762c-.08826-.17607.01081-.3733-.06169-.55117Z"/><path class="cls-68" d="M138.92246,31.85334a1.36932,1.36932,0,0,1-.21479.85288,25.1908,25.1908,0,0,1-3.91226,6.33132c-.63673.743-1.36443,1.39144-2.03494,2.09843a.59263.59263,0,0,1-.4485.20354c1.45583-2.25964,2.99454-4.463,4.54675-6.65689.67411-.95285,1.33065-1.91921,2.06376-2.82928Z"/><path class="cls-74" d="M110.1537,67.30871c.1369-.10988.19.03828.231.09907.38546.57774.77453,1.15144,1.21133,1.69225.05043.0626.04368.17067.063.25758-.17562.26793-.349.53677-.52686.80244a.39267.39267,0,0,1-.74076-.177c-.02567-.32107-.05-.64213-.07475-.96366-.08466-.1495.00811-.322-.06169-.47327l-.01981-.37735c-.06935-.12789-.0018-.27289-.05179-.403Z"/><path class="cls-75" d="M96.79219,80.25549a4.00383,4.00383,0,0,0-2.605-.85243c.94295-.11348,1.88949-.03423,2.83379-.05855a.29722.29722,0,0,1,.30981.18643.34584.34584,0,0,1-.07205.39628,1.17543,1.17543,0,0,1-.46652.32872Z"/><path class="cls-59" d="M103.28292,63.14967c.35214.66286.56018,1.38515.85739,2.071.22155.5102.42149,1.0294.63718,1.5423a.6007.6007,0,0,0,.31657.37645l-.02342.30891a2.42253,2.42253,0,0,1-.5818-1.115c-.38006-.90511-.73535-1.821-1.09424-2.73516A3.44679,3.44679,0,0,1,103.28292,63.14967Z"/><path class="cls-51" d="M109.24543,53.38206a3.30049,3.30049,0,0,1,.05179,1.0267A4.05788,4.05788,0,0,1,109.24543,53.38206Z"/><path class="cls-25" d="M99.37335,11.40534l-.16661-.01351a1.18343,1.18343,0,0,1,.84387.00541Z"/><path class="cls-32" d="M109.29632,39.1312a2.41278,2.41278,0,0,1-.05043.87224A2.84282,2.84282,0,0,1,109.29632,39.1312Z"/><path class="cls-58" d="M109.39719,56.97687a1.9627,1.9627,0,0,1,.05944.78488A2.4735,2.4735,0,0,1,109.39719,56.97687Z"/><path class="cls-71" d="M109.86416,64.08991c.12428.17247.045.367.06169.55118A1.31288,1.31288,0,0,1,109.86416,64.08991Z"/><path class="cls-62" d="M109.6363,60.96479c.11257.17562.04008.3688.05359.55387A1.28328,1.28328,0,0,1,109.6363,60.96479Z"/><path class="cls-31" d="M109.53093,35.22343c-.01216.18733.06664.38457-.05764.56064A1.27666,1.27666,0,0,1,109.53093,35.22343Z"/><path class="cls-73" d="M110.255,68.54615c.118.145.04818.31477.06169.47373A.99779.99779,0,0,1,110.255,68.54615Z"/><path class="cls-59" d="M105.00444,68.08054c.01846-.15761-.054-.32558.05944-.471a1.00978,1.00978,0,0,1-.059.471Z"/><path class="cls-73" d="M110.18343,67.76577c.10086.12339.04773.267.05178.40257A.73129.73129,0,0,1,110.18343,67.76577Z"/><path class="cls-35" d="M109.84524,31.71059c-.00765.13419.05.27829-.05719.39852a.65072.65072,0,0,1,.05765-.39852Z"/><path class="cls-76" d="M103.50943,109.12152H98.14717l2.63249-6.38175,2.72976,6.3813Z"/><path class="cls-77" d="M124.63108,20.78209a17.25947,17.25947,0,0,1-.81821,5.74817,6.23609,6.23609,0,0,1-.95465,1.86112c-1.01454,1.30183-2.14527,1.1136-3.0049-.05539a9.09839,9.09839,0,0,1-1.40721-3.67451,18.48056,18.48056,0,0,1-.29045-4.9196,12.79216,12.79216,0,0,1,1.3185-5.39108,3.37042,3.37042,0,0,1,1.033-1.24735,1.48745,1.48745,0,0,1,2.04079.23911,4.11735,4.11735,0,0,1,.87225,1.28068,12.272,12.272,0,0,1,1.05191,3.88164,14.86752,14.86752,0,0,1,.159,2.27721Z"/><path class="cls-78" d="M118.60687,21.11126a13.65468,13.65468,0,0,1,.77-5.016,4.6022,4.6022,0,0,1,.779-1.42882c.86459-1.01544,1.71162-.97,2.51812.10717a7.895,7.895,0,0,1,1.2487,3.35974,15.66035,15.66035,0,0,1,.21794,3.99152,11.38355,11.38355,0,0,1-1.07353,4.57963,3.66521,3.66521,0,0,1-.75066,1.03525,1.29419,1.29419,0,0,1-1.82984.03925q-.02675-.02564-.052-.05276a5.396,5.396,0,0,1-1.35272-2.63339,13.44848,13.44848,0,0,1-.47507-3.98162Z"/><path class="cls-79" d="M118.98288,21.43638a12.5763,12.5763,0,0,1,.80514-4.95563,3.23513,3.23513,0,0,1,.86729-1.23023c.575-.48949,1.33651-.30621,1.858.4413a6.85666,6.85666,0,0,1,1.01679,2.66626,13.8892,13.8892,0,0,1,.2238,3.56193,10.44483,10.44483,0,0,1-.79884,3.73755,3.36064,3.36064,0,0,1-.82227,1.1717,1.11856,1.11856,0,0,1-1.52068-.018,4.78391,4.78391,0,0,1-1.28338-2.614,11.14373,11.14373,0,0,1-.34584-2.76083Z"/><path class="cls-80" d="M123.37066,20.96086a9.233,9.233,0,0,1-.47417,3.44034,3.12827,3.12827,0,0,1-.92178,1.504.96491.96491,0,0,1-1.4779-.27559,6.12553,6.12553,0,0,1-1.0312-2.89772,12.15641,12.15641,0,0,1-.0653-2.5672,6.64634,6.64634,0,0,1,1.08074-3.67586,1.0252,1.0252,0,0,1,1.80258.01171,5.2844,5.2844,0,0,1,.929,2.40689,8.4784,8.4784,0,0,1,.15806,2.0534Z"/><path class="cls-81" d="M120.16493,21.04417a6.48222,6.48222,0,0,1,.48859-2.338,1.47515,1.47515,0,0,1,.3634-.45256.51334.51334,0,0,1,.726-.00539l.008.0081a2.22718,2.22718,0,0,1,.62413,1.26536,6.23938,6.23938,0,0,1-.16977,3.62362,1.27622,1.27622,0,0,1-.12158.28549c-.16887.25758-.313.54578-.68987.55388-.37961.00856-.53947-.27018-.70248-.53136A3.38311,3.38311,0,0,1,120.26,21.9718a3.33349,3.33349,0,0,1-.09457-.92763Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/ibm/ibm_featured_logo.svg b/content/en/case-studies/ibm/ibm_featured_logo.svg
index 577d8e97d9..f79fd7847b 100644
--- a/content/en/case-studies/ibm/ibm_featured_logo.svg
+++ b/content/en/case-studies/ibm/ibm_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215.9892 128.40633"><defs><style>.cls-1{fill:#f9f9f9;}.cls-2{fill:#4c81c2;}</style></defs><title>ibm_featured_logo</title><rect class="cls-1" x="-5.9997" y="-8.99955" width="229.48853" height="143.9928"/><polygon class="cls-2" points="190.441 33.693 162.454 33.693 164.178 28.868 190.441 28.868 190.441 33.693"/><path class="cls-2" d="M115.83346,28.867l25.98433-.003,1.7014,4.83715c.01251-.00687-27.677.00593-27.677,0C115.84224,33.69422,115.82554,28.867,115.83346,28.867Z"/><path class="cls-2" d="M95.19668,28.86593A18.6894,18.6894,0,0,1,106.37358,33.7s-47.10052.00489-47.10052,0V28.86488Z"/><rect class="cls-2" x="22.31176" y="28.86593" width="32.72063" height="4.82558"/><path class="cls-2" d="M190.44115,42.74673h-31.194s1.70142-4.79994,1.691-4.80193h29.50305Z"/><polygon class="cls-2" points="146.734 42.753 115.832 42.753 115.832 37.944 145.041 37.944 146.734 42.753"/><path class="cls-2" d="M110.04127,37.94271a12.47,12.47,0,0,1,1.35553,4.80214H59.28193V37.94271Z"/><rect class="cls-2" x="22.31176" y="37.94271" width="32.72063" height="4.80214"/><polygon class="cls-2" points="156.056 51.823 157.768 46.998 181.191 47.005 181.191 51.812 156.056 51.823"/><polygon class="cls-2" points="148.237 46.997 149.944 51.823 125.046 51.823 125.046 46.997 148.237 46.997"/><path class="cls-2" d="M111.81,46.99627a15.748,15.748,0,0,1-.68923,4.82641H96.85137V46.99627Z"/><rect class="cls-2" x="31.43162" y="47.01973" width="14.06406" height="4.8019"/><rect class="cls-2" x="68.7486" y="46.99627" width="14.03976" height="4.82537"/><path class="cls-2" d="M138.87572,57.03292s.004,3.65225.001,3.65913H125.04558V55.89h26.35583l1.637,4.4773c.00773.00292,1.57841-4.48815,1.58153-4.47835h26.56223V60.692h-13.763c-.00124-.00687-.00771-3.65819-.00771-3.65819l-1.273,3.65819-25.99183-.00687Z"/><path class="cls-2" d="M68.7486,55.889h40.30365v-.00188a18.13723,18.13723,0,0,1-3.99812,4.80494s-36.30647.00668-36.30647,0Z"/><rect class="cls-2" x="31.43162" y="55.88794" width="14.06406" height="4.80316"/><rect class="cls-2" x="167.41912" y="64.94348" width="13.76302" height="4.80212"/><path class="cls-2" d="M138.87572,64.94348H125.04558V69.7456c-.00688-.0025,13.83411.00167,13.83411,0C138.87969,69.7431,138.89532,64.94348,138.87572,64.94348Z"/><path class="cls-2" d="M164.63927,64.94348c-.06255-.007-1.61218,4.79962-1.67723,4.80212l-19.60378.00835c-.01543-.00751-1.72371-4.81745-1.725-4.81047Z"/><path class="cls-2" d="M68.74672,64.94233H104.985a23.7047,23.7047,0,0,1,4.32076,4.80327c.06609-.0025-40.5581.00167-40.5581,0Z"/><path class="cls-2" d="M45.49359,69.74436v-4.802H31.45487V69.7431Z"/><rect class="cls-2" x="167.41912" y="73.99693" width="13.76198" height="4.80295"/><rect class="cls-2" x="125.04474" y="73.99693" width="13.83097" height="4.80212"/><path class="cls-2" d="M159.74351,78.8224c.00376-.02169,1.69745-4.82964,1.72373-4.82547H144.80219c-.029-.00209,1.70848,4.80378,1.70848,4.80378S159.7404,78.84241,159.74351,78.8224Z"/><path class="cls-2" d="M68.74766,78.79905c0,.01919-.00094-4.80212,0-4.803H82.9958s.01272,4.80462,0,4.80462C82.98224,78.80072,68.74766,78.79489,68.74766,78.79905Z"/><path class="cls-2" d="M111.30529,73.9961a13.94783,13.94783,0,0,1,.89542,4.825H97.10364v-4.825Z"/><rect class="cls-2" x="31.45487" y="73.9961" width="14.03872" height="4.80171"/><rect class="cls-2" x="167.41912" y="82.86525" width="23.0212" height="4.80421"/><rect class="cls-2" x="115.83139" y="82.86525" width="23.04432" height="4.80421"/><polygon class="cls-2" points="156.647 87.669 149.618 87.669 147.931 82.865 158.272 82.865 156.647 87.669"/><path class="cls-2" d="M22.3099,82.86525v4.80212H55.008c.01366.00751-.01469-4.79919,0-4.79919Z"/><path class="cls-2" d="M111.60237,82.86525c-.3442,1.58445-.65962,3.5158-1.81732,4.80421l-.43175-.00209H59.28005V82.86525Z"/><polygon class="cls-2" points="153.461 96.733 152.814 96.733 151.171 91.92 155.147 91.92 153.461 96.733"/><rect class="cls-2" x="167.41788" y="91.91953" width="23.02244" height="4.82547"/><path class="cls-2" d="M59.27307,96.73333V91.92745s47.24073.00585,47.37623.00585A17.945,17.945,0,0,1,94.43864,96.745l-35.15859-.00959"/><rect class="cls-2" x="115.83139" y="91.91953" width="23.04432" height="4.82547"/><path class="cls-2" d="M55.008,91.94079s-.01469,4.79253,0,4.79253c.01366,0-32.6885.0196-32.69809.00961-.00888-.00961.00875-4.81548,0-4.81548S54.9933,91.95664,55.008,91.94079Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215.9892 128.40633"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#4c81c2;}</style></defs><title>ibm_featured_logo</title><rect class="cls-1" x="-5.9997" y="-8.99955" width="229.48853" height="143.9928"/><polygon class="cls-2" points="190.441 33.693 162.454 33.693 164.178 28.868 190.441 28.868 190.441 33.693"/><path class="cls-2" d="M115.83346,28.867l25.98433-.003,1.7014,4.83715c.01251-.00687-27.677.00593-27.677,0C115.84224,33.69422,115.82554,28.867,115.83346,28.867Z"/><path class="cls-2" d="M95.19668,28.86593A18.6894,18.6894,0,0,1,106.37358,33.7s-47.10052.00489-47.10052,0V28.86488Z"/><rect class="cls-2" x="22.31176" y="28.86593" width="32.72063" height="4.82558"/><path class="cls-2" d="M190.44115,42.74673h-31.194s1.70142-4.79994,1.691-4.80193h29.50305Z"/><polygon class="cls-2" points="146.734 42.753 115.832 42.753 115.832 37.944 145.041 37.944 146.734 42.753"/><path class="cls-2" d="M110.04127,37.94271a12.47,12.47,0,0,1,1.35553,4.80214H59.28193V37.94271Z"/><rect class="cls-2" x="22.31176" y="37.94271" width="32.72063" height="4.80214"/><polygon class="cls-2" points="156.056 51.823 157.768 46.998 181.191 47.005 181.191 51.812 156.056 51.823"/><polygon class="cls-2" points="148.237 46.997 149.944 51.823 125.046 51.823 125.046 46.997 148.237 46.997"/><path class="cls-2" d="M111.81,46.99627a15.748,15.748,0,0,1-.68923,4.82641H96.85137V46.99627Z"/><rect class="cls-2" x="31.43162" y="47.01973" width="14.06406" height="4.8019"/><rect class="cls-2" x="68.7486" y="46.99627" width="14.03976" height="4.82537"/><path class="cls-2" d="M138.87572,57.03292s.004,3.65225.001,3.65913H125.04558V55.89h26.35583l1.637,4.4773c.00773.00292,1.57841-4.48815,1.58153-4.47835h26.56223V60.692h-13.763c-.00124-.00687-.00771-3.65819-.00771-3.65819l-1.273,3.65819-25.99183-.00687Z"/><path class="cls-2" d="M68.7486,55.889h40.30365v-.00188a18.13723,18.13723,0,0,1-3.99812,4.80494s-36.30647.00668-36.30647,0Z"/><rect class="cls-2" x="31.43162" y="55.88794" width="14.06406" height="4.80316"/><rect class="cls-2" x="167.41912" y="64.94348" width="13.76302" height="4.80212"/><path class="cls-2" d="M138.87572,64.94348H125.04558V69.7456c-.00688-.0025,13.83411.00167,13.83411,0C138.87969,69.7431,138.89532,64.94348,138.87572,64.94348Z"/><path class="cls-2" d="M164.63927,64.94348c-.06255-.007-1.61218,4.79962-1.67723,4.80212l-19.60378.00835c-.01543-.00751-1.72371-4.81745-1.725-4.81047Z"/><path class="cls-2" d="M68.74672,64.94233H104.985a23.7047,23.7047,0,0,1,4.32076,4.80327c.06609-.0025-40.5581.00167-40.5581,0Z"/><path class="cls-2" d="M45.49359,69.74436v-4.802H31.45487V69.7431Z"/><rect class="cls-2" x="167.41912" y="73.99693" width="13.76198" height="4.80295"/><rect class="cls-2" x="125.04474" y="73.99693" width="13.83097" height="4.80212"/><path class="cls-2" d="M159.74351,78.8224c.00376-.02169,1.69745-4.82964,1.72373-4.82547H144.80219c-.029-.00209,1.70848,4.80378,1.70848,4.80378S159.7404,78.84241,159.74351,78.8224Z"/><path class="cls-2" d="M68.74766,78.79905c0,.01919-.00094-4.80212,0-4.803H82.9958s.01272,4.80462,0,4.80462C82.98224,78.80072,68.74766,78.79489,68.74766,78.79905Z"/><path class="cls-2" d="M111.30529,73.9961a13.94783,13.94783,0,0,1,.89542,4.825H97.10364v-4.825Z"/><rect class="cls-2" x="31.45487" y="73.9961" width="14.03872" height="4.80171"/><rect class="cls-2" x="167.41912" y="82.86525" width="23.0212" height="4.80421"/><rect class="cls-2" x="115.83139" y="82.86525" width="23.04432" height="4.80421"/><polygon class="cls-2" points="156.647 87.669 149.618 87.669 147.931 82.865 158.272 82.865 156.647 87.669"/><path class="cls-2" d="M22.3099,82.86525v4.80212H55.008c.01366.00751-.01469-4.79919,0-4.79919Z"/><path class="cls-2" d="M111.60237,82.86525c-.3442,1.58445-.65962,3.5158-1.81732,4.80421l-.43175-.00209H59.28005V82.86525Z"/><polygon class="cls-2" points="153.461 96.733 152.814 96.733 151.171 91.92 155.147 91.92 153.461 96.733"/><rect class="cls-2" x="167.41788" y="91.91953" width="23.02244" height="4.82547"/><path class="cls-2" d="M59.27307,96.73333V91.92745s47.24073.00585,47.37623.00585A17.945,17.945,0,0,1,94.43864,96.745l-35.15859-.00959"/><rect class="cls-2" x="115.83139" y="91.91953" width="23.04432" height="4.82547"/><path class="cls-2" d="M55.008,91.94079s-.01469,4.79253,0,4.79253c.01366,0-32.6885.0196-32.69809.00961-.00888-.00961.00875-4.81548,0-4.81548S54.9933,91.95664,55.008,91.94079Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/ing/ing_featured_logo.svg b/content/en/case-studies/ing/ing_featured_logo.svg
index 20418a0dbf..5a2df497c7 100644
--- a/content/en/case-studies/ing/ing_featured_logo.svg
+++ b/content/en/case-studies/ing/ing_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#091c5a;}.cls-2,.cls-3,.cls-4{fill-rule:evenodd;}.cls-3{fill:#fff;}.cls-4{fill:#f60;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><g id="Layer_1-2" data-name="Layer 1"><g id="g9"><g id="g11"><path id="path13" class="cls-2" d="M16.12,50.174a4.0335,4.0335,0,0,1,2.95108.89221c.671.6703.97142,1.7775.97142,3.5895V77.28841c0,3.13191-.6572,4.52885-4.536,4.52885h-.53175v1.38889H32.40618v-1.382l-.526-.0069c-3.84194-.046-4.48994-1.43489-4.48994-4.52885V54.65451c0-1.80625.29926-2.90885.97027-3.578a4.09567,4.09567,0,0,1,3.00288-.9037H32.405V48.76436H14.97474V50.1728H16.12Z"/><path id="path15" class="cls-2" d="M71.87064,71.6604a19.39223,19.39223,0,0,1-.34644-2.20406V59.119c-.06791-6.02811.755-9.02895-4.521-9.00595v-1.3544h12.137V50.113c-5.43373-.02185-4.75,2.979-4.78112,9.00595V83.25674l-1.72761-.0184L46.42269,55.8399a19.991,19.991,0,0,1,.33839,2.20291V74.97052c-.14848,6.17529.61691,6.92147,4.59927,6.849V83.2303H38.70774V81.81956c3.98811.0046,4.77192-.52543,4.76732-7.35262V58.19228l-.03223-2.64786c.14848-3.42739-1.11874-5.4153-4.98715-5.38311V48.80576h11.649Z"/><path id="path17" class="cls-2" d="M115.80547,48.101H114.468l-.06216.4576c-.09093.68295-.36025,1.82695-1.13945,1.82695a4.00888,4.00888,0,0,1-1.39959-.38977,24.64235,24.64235,0,0,0-9.17553-1.89478,20.48871,20.48871,0,0,0-14.69558,5.797,18.33213,18.33213,0,0,0-5.26915,13.16459A15.46005,15.46005,0,0,0,88.5551,79.24068c3.92826,3.35725,8.32957,4.78869,14.72551,4.78869a23.797,23.797,0,0,0,13.0589-3.27448l.81949-.4438V71.27984c0-3.84935.4719-4.44837,3.60715-4.57484l.50988-.01955V65.3437H105.95892v1.34175l.50988.01955c3.492.13567,4.15155.76113,4.15155,3.94363v8.369a11.54506,11.54506,0,0,1-6.84827,2.35583,12.59683,12.59683,0,0,1-9.042-3.75277c-2.81182-2.81112-4.18378-6.90537-4.18378-11.53195,0-4.98414,1.32822-9.2359,4.06522-11.9677a11.60427,11.60427,0,0,1,8.37331-3.38485,15.00838,15.00838,0,0,1,8.72321,3.125,10.23544,10.23544,0,0,1,3.64972,5.57282l.11395.37826h1.3075Z"/></g><g id="g19"><path id="path21" class="cls-3" d="M182.89436,83.113a4.21534,4.21534,0,0,0,2.43431-.73239,11.18164,11.18164,0,0,0,8.05563-1.85224,16.83129,16.83129,0,0,0,3.1341-3.29172,11.8419,11.8419,0,0,0,1.75752-3.271,15.19659,15.19659,0,0,0,.69519-2.30179,21.86771,21.86771,0,0,0-.8264-11.448,20.30835,20.30835,0,0,0-.75274-1.90513c-1.517-3.13191-3.58182-6.511-6.76079-8.492a13.57171,13.57171,0,0,1-4.45081-4.62773c-.55016-.49439-1.07731-1.14974-1.7886-1.26817a2.74406,2.74406,0,0,1,.46154,1.00948l-.04143.05289a2.62023,2.62023,0,0,1-1.86343-.86l.56973-.51624a3.05131,3.05131,0,0,0-.69979-.2058c-2.1742-.2472-3.96279.75538-5.89182,1.23827l-.02993.10693c1.18436.52659,1.43181,1.8304,2.12124,2.71225.17034-.20465.46154-.05519.69979-.07358.34414.01954.66757.26789,1.00134.18051a3.16388,3.16388,0,0,0-.20372-.77378,1.44144,1.44144,0,0,1,.67906,0c.62384.36447,1.624-.06439,2.013.77378a11.7115,11.7115,0,0,0-2.04642.35642c.04373.269.31307.48289.2912.75308a6.757,6.757,0,0,0-1.81047-.46105l-.03223.09543a6.23063,6.23063,0,0,0,3.04892,1.8396c1.62747.376,3.05929-.39781,4.63035-.12877a18.02291,18.02291,0,0,1,8.58624,9.63257c.07022.184.13811.37021.20143.55992a18.61636,18.61636,0,0,1,.22558,11.448,14.0279,14.0279,0,0,1-2.47343,4.18393,8.56677,8.56677,0,0,1-1.41225,1.38889,6.34321,6.34321,0,0,1-5.66623,1.24978c-.12891-.08853-.38788-.11038-.34413-.33458.07135-.30009.13811-.60362.19682-.9152a22.67024,22.67024,0,0,0,.40629-5.42795l-.00691-.2357a20.75277,20.75277,0,0,0-1.62861-7.38137,25.6873,25.6873,0,0,0-2.3215-4.0678,9.63728,9.63728,0,0,0-4.315-3.54926,3.23412,3.23412,0,0,0-3.28488.568,2.213,2.213,0,0,0-.75388,1.98216,6.78122,6.78122,0,0,1-3.10187.99913,8.50841,8.50841,0,0,1-.85057.123,4.7694,4.7694,0,0,1-.80337-.031,7.96716,7.96716,0,0,1-3.79245-1.743c-.02186-.55992-.05409-1.08651-.07595-1.67862a2.02344,2.02344,0,0,1-1.14061-1.6039l.053-.05289a4.569,4.569,0,0,1,.95875.46105,7.11353,7.11353,0,0,0-.72052-2.39952c-.389-.16211-.77691-.29089-1.14176-.48519a1.835,1.835,0,0,1-.75275-1.24633c.37637.36562,1.03243.23685,1.32361.62317-.50757-1.49582-.51563-3.20665-1.34663-4.57369-.42011-1.01063-1.51929-1.474-2.27317-2.21556-.29121-.35643-.40859-.85082-.93575-.906-.43161-.10693-.46384-.58982-.53865-.9037.26817.03219.49376.215.71935.25754-.62383-1.65449-1.174-3.49638-2.86362-4.55069l-.29.18395a18.30869,18.30869,0,0,1-2.0142.16212,2.77577,2.77577,0,0,1,1.21658-.80942,2.89527,2.89527,0,0,0-1.45713-.53578,3.02238,3.02238,0,0,1-1.40879.61281l-.05525-.04369c-.0115-.38746-.099-.86.48457-.95774a3.37957,3.37957,0,0,0-2.06024,0c-.16.41966-.62268.79678-.5893,1.29347a8.8185,8.8185,0,0,1-.91617,1.05431,9.93175,9.93175,0,0,1,.49377-2.29144c-.48456.18281-.97717.4415-1.45253.66685a19.90355,19.90355,0,0,0-2.38711-1.21643c-.07366-.03219-.2371-.06324-.20487.07588.70094.50474.42931,1.45328.50413,2.17187l-.442-.36447c-.21522-.54842-.83675-.94624-.94379-1.5487a8.2112,8.2112,0,0,0-1.88069.62431l-.09323.054a1.51447,1.51447,0,0,1,1.1832.79677,13.90309,13.90309,0,0,1-2.1972-.33573c-.07482-.07358-.14042-.16211-.259-.15061a4.08844,4.08844,0,0,0-1.03242.66685,7.23207,7.23207,0,0,0-1.85306,2.50875,1.62555,1.62555,0,0,1,.74353.18166c-.4086.24719-.76425.668-1.16248.9037a9.91065,9.91065,0,0,0-.15194,1.80855,7.96249,7.96249,0,0,0-.93574,1.42223,21.07216,21.07216,0,0,0-.74353,7.01345c-.21639.20581-.49722.33573-.69979.49669l.02186,2.19372h.05294c.09669-.461.64685-.71859.98063-1.03132h.10819c-.05409.49439-.11854.98993-.12891,1.49582l-.62382.51623c-.62613.54958-.09783,1.3774-.15078,2.06724.04374.18051.07367.45071.20373.4944a2.93668,2.93668,0,0,1,.46384-.7002c.26818-.06323.50528-.28054.75273-.31043a11.63258,11.63258,0,0,1-.53865,1.5809,1.82648,1.82648,0,0,0-.328.269.78186.78186,0,0,0-.22214.39781,48.97679,48.97679,0,0,0,2.12009,7.46645c-.59045,1.00143-.92653,2.17992-1.41915,3.21354-.07136.14372-.13466.292-.19336.4415-.49492,1.25093-.64569,2.65017-1.26147,3.85165a4.53928,4.53928,0,0,0-.79647-.41966,3.24358,3.24358,0,0,0-3.36083.75423,2.87922,2.87922,0,0,0-2.12354.38747,2.8125,2.8125,0,0,0-.9415,1.14975,2.33057,2.33057,0,0,0-.168,1.02442,2.47566,2.47566,0,0,0-.90352,1.3659,4.24846,4.24846,0,0,0,.85057,3.26527h53.6893Z"/><path id="path23" class="cls-3" d="M175.76409,58.91892c-.0115.27939-.21522.59327-.03222.829.259-.29089.69058-.28054,1.03472-.40816a8.4945,8.4945,0,0,1,2.76694.43115c-.22445-.35642-.37636-.75193-.62383-1.07616-.49723-.12877-1.25.215-1.33513-.51624-.30271-.25869-.77805-.07358-1.08768-.05518a2.442,2.442,0,0,0-.72281.79562Z"/><path id="path25" class="cls-3" d="M142.84405,49.629a.04228.04228,0,0,0-.01611-.01034l.0023.01034Z"/><path id="path27" class="cls-3" d="M146.75965,59.19256l.64684-.62316a.14234.14234,0,0,1,.12891.05519l-.05409,1.19343a1.68138,1.68138,0,0,0,1.10838.40931c.03338-.32308.28084-.54843.42125-.829.11855-.22535.04374-.55993.27968-.72205l.07367.07589a3.54473,3.54473,0,0,0,.2394,1.06466c.02187.17132.05294.38747.07367.53808a2.68832,2.68832,0,0,0,1.27066-.27938,4.897,4.897,0,0,1,.18185-1.11986c.099-.12992-.11854-.36562.15194-.35412.15077.32193.4201.65536.57088.99913a4.21056,4.21056,0,0,0,1.03357-2.32249c-.18185-.24949-.46269-.24949-.67907-.40931a8.10663,8.10663,0,0,0-5.94706.20351A2.76264,2.76264,0,0,0,146.75965,59.19256Z"/><path id="path29" class="cls-3" d="M129.64243,79.38439a16.69073,16.69073,0,0,0,.05179,2.42482,1.24434,1.24434,0,0,0,.79648.60362l.0564-.54958c.12776-.76573-.28084-1.57745.15077-2.22246a5.29213,5.29213,0,0,1,.86208.38747,1.88411,1.88411,0,0,0-.73317-1.96837Z"/><path id="path31" class="cls-3" d="M132.30117,78.2243a6.31616,6.31616,0,0,0-.22444,4.13564,4.69785,4.69785,0,0,0,.84827-.645,4.47782,4.47782,0,0,1,.40974-2.933,1.90626,1.90626,0,0,1,1.08767,1.16354,1.99076,1.99076,0,0,0,.33493-1.68093c.02187-.47139-.51908-.36332-.7769-.55877.08747-.39782.07481-.85887.49606-1.08422l-1.29254.12878A6.117,6.117,0,0,0,132.30117,78.2243Z"/><path id="path33" class="cls-3" d="M134.96221,81.93913c.05524.09888,0,.269.10819.29088.16229-.90255.89431-1.48892,1.29369-2.28454.19222-.269.1807-.64616.49377-.85082.42125,0,.72281.30239,1.13256.33458.1289.09658-.06676.18166-.076.28859a10.64931,10.64931,0,0,0-.31192,2.09253h.07367a10.88639,10.88639,0,0,0,1.37886-1.94192l.07366-.61166c.09668-.73239-.69979-1.20494-1.21657-1.50617l.46269-.59212-.64569-.2265a2.94409,2.94409,0,0,0-1.96126.98074,8.76291,8.76291,0,0,0-.80567,4.0264Z"/><path id="path35" class="cls-3" d="M137.86036,75.55344c.24745.07589.47305-.12877.71935-.0207A6.50642,6.50642,0,0,1,141.349,77.1033l.88394,2.24775.442-1.38659-.29119-.75423c-.24745-.53808-.92653-.4944-1.39037-.51624-.19221-.215.01151-.46335.07711-.66686.22444-.76343-.71245-.722-1.08881-1.03132.023-.46334-.53866-.30238-.85172-.34607l-.107-.12877a.22109.22109,0,0,0-.31192-.02185c-.023-.031-.06445-.05289-.04144-.10807l-.2394.05518a1.52256,1.52256,0,0,0-.56973,1.10721Z"/><path id="path37" class="cls-3" d="M138.48418,73.08034a.68248.68248,0,0,0,.22559.36447c.48571-.12877.94725-.46105,1.50777-.25869a8.54791,8.54791,0,0,0,2.35028,1.64758l.31076-.05518c.19451.06668.4086.07588.53866.29088.11969.29088-.1807.46335-.27969.699.48571.35527.2912.99108.5939,1.41993l.77576-1.03247c-.18185-.453.01036-1.22678-.70094-1.26932a.68071.68071,0,0,1-.38788-.62546c-.46154-.41966-1.03242-.60131-1.49741-1.03132-.37637-.30238-.602-.76573-1.08767-.87265a4.0232,4.0232,0,0,0-1.08536-.36447C139.02284,71.88576,138.95954,72.74462,138.48418,73.08034Z"/><path id="path39" class="cls-3" d="M139.51775,70.96021l.13006.20465c.5375-.03334,1.02436-.269,1.55265-.25869.3545.21615.81834.2058,1.1832.38746a4.16613,4.16613,0,0,0,1.03243,1.11986c.87474.12762,1.35814,1.06466,1.6597,1.75221v-.33343a2.29774,2.29774,0,0,0-.18416-1.41879c-.21523-.21615-.52715-.35757-.75274-.55073a.4412.4412,0,0,1,.03223-.33342,7.06473,7.06473,0,0,0-1.23844-.82782c-.57088-.829-1.67005-.60247-2.54249-.829l-.87244,1.08766Z"/><path id="path41" class="cls-3" d="M139.50048,63.06605c.09554.33458.21293.75424.27624,1.10836.30155-.66685.8966-.96579,1.42374-1.51537a2.71574,2.71574,0,0,0-1.0117-.36677v-.01954C139.95166,62.50843,139.58565,62.74527,139.50048,63.06605Z"/><path id="path43" class="cls-3" d="M141.45714,66.60612l.48455-.49439a3.05352,3.05352,0,0,0,.95876-1.70047,1.38095,1.38095,0,0,0-1.13025.05288,13.542,13.542,0,0,0-.31307,2.142Z"/><path id="path45" class="cls-3" d="M141.81164,68.12378a3.14312,3.14312,0,0,0,2.06944-.2242l.602-1.93847a1.4573,1.4573,0,0,0-.56974-.03219A4.70661,4.70661,0,0,1,141.81164,68.12378Z"/><path id="path47" class="cls-3" d="M142.03032,61.25865a4.30737,4.30737,0,0,0,2.12239,1.73152c-.09668-.90255-.87128-1.528-1.27066-2.30179l-.023-.2587a4.02318,4.02318,0,0,0-1.01285-.668,5.06389,5.06389,0,0,0,.18416,1.497Z"/><path id="path49" class="cls-3" d="M144.65683,68.21a3.766,3.766,0,0,0,1.7115-.16326c.76654-.18051,1.18664-1.021,1.44446-1.67633H146.854l-1.03472,1.01063a8.134,8.134,0,0,0-1.16248.829Z"/><path id="path51" class="cls-3" d="M144.54059,60.28022a6.26631,6.26631,0,0,0,1.0025,2.32478l.1289-1.60389Z"/><path id="path53" class="cls-3" d="M148.07177,64.46529a7.99875,7.99875,0,0,0-.22214-1.70967c-.32457-.21615-.77806-.19431-1.11068-.40816A3.15534,3.15534,0,0,0,148.07177,64.46529Z"/><path id="path55" class="cls-3" d="M147.09113,69.93348a10.67122,10.67122,0,0,0,1.959-.79792c.39823-.568,1.0025-1.08766,1.08766-1.75336-.49491.13912-.92653-.0207-1.38807.2058a3.54546,3.54546,0,0,1-.991,1.44064C147.67353,69.3931,147.27414,69.6426,147.09113,69.93348Z"/><path id="path57" class="cls-3" d="M148.14542,71.25684l.808,1.05317A1.63775,1.63775,0,0,0,150.3,72.15939l-.29119-.95774A3.748,3.748,0,0,1,148.14542,71.25684Z"/><path id="path59" class="cls-3" d="M149.49321,63.63633l.31191,1.42108a2.86382,2.86382,0,0,0,.8874-2.45356,3.36646,3.36646,0,0,1-1.19931,1.03248Z"/><path id="path61" class="cls-3" d="M151.61445,66.14507a1.03182,1.03182,0,0,0,.18416.55993c.83905.30008.92538,1.3222,1.70228,1.70967a1.93037,1.93037,0,0,0,1.5285-.25869c-.33378-.376-.71246-.637-1.03357-1.03363-.22675-.09657-.45348-.23684-.442-.51623l-1.93939-.46105Z"/><path id="path63" class="cls-3" d="M152.282,71.2235a2.50207,2.50207,0,0,0,1.37886.75193c-.08518-.11842.05525,0,.076-.07473l-.648-1.41764c-.32227.00805-.656.07359-.95761.05289a2.932,2.932,0,0,0,.15077.68755Z"/><path id="path65" class="cls-3" d="M153.42492,64.59407a8.29551,8.29551,0,0,1-.51449-2.32249c-.32342.38631-.6572.63466-.95876,1.03132C151.81125,64.09967,152.94956,64.29513,153.42492,64.59407Z"/><path id="path67" class="cls-3" d="M154.73818,63.864c.38789.50473,1.23845.33227,1.715.18166-.22789-.38747-.95761-.61282-1.08652-1.03247a9.2708,9.2708,0,0,0-.46384-2.14083C154.52526,61.78639,154.07062,62.87405,154.73818,63.864Z"/><path id="path69" class="cls-3" d="M155.41609,66.14507c1.07846.78643,2.13275,1.69933,3.64051,1.3659.10819-.07588.29121-.06554.31307-.20465-.44312-.28054-.915-.49555-1.3685-.75194l-.51563-.75423h-.23709a9.44988,9.44988,0,0,1-1.83234.34492Z"/><path id="path71" class="cls-3" d="M155.43912,74.87164h.07365a5.817,5.817,0,0,1,2.1765-.90485c.206.07474.076.30124.259.38862.46384-.19431,1.02436-.15062,1.49741-.31273a3.25554,3.25554,0,0,1,1.4974.28054c.36486.48289,1.05545.43115,1.5308.75193l-.076-.75193c-1.00134-1.17389-2.56436-1.26013-4.00537-1.23713l-.03339-.15177a2.56766,2.56766,0,0,0-1.05429.22766,5.4674,5.4674,0,0,0-1.34779.38631A12.10932,12.10932,0,0,0,155.43912,74.87164Z"/><path id="path73" class="cls-3" d="M156.3035,61.64727a1.82108,1.82108,0,0,0,1.75523.829,2.04259,2.04259,0,0,1-.808-1.23827c.10818-.95774-.94725-1.03248-1.464-1.52917A6.46965,6.46965,0,0,0,156.3035,61.64727Z"/><path id="path75" class="cls-3" d="M156.19416,76.77677h.12545c.572-.35757,1.40188-.08738,1.9624-.46449.31191-.16212.33264.269.55016.38746.52714.32308.59161,1.29,1.33513,1.06582.89316.46219.66757,1.551.6998,2.34663l.82984-.51624c-.076-.41966.16-.92784-.10935-1.29232-.20372-.461-.76308-.50473-1.03242-.88185.32343-.54958-.40859-.806-.56052-1.20493l.04373-.05519,1.13946.15062a1.70681,1.70681,0,0,1,.648,1.06581c.89429.15062,1.10954,1.16124,1.42259,1.8074.183-.4415.25781-.9152.442-1.344.01036-.35643-.46384-.35643-.69979-.51624a1.93012,1.93012,0,0,0-.79647-1.39924,11.86661,11.86661,0,0,0-2.95109-.79678l-.90581.28054c-.49607.11843-1.02322-.03219-1.39959.31043-.56282.04254-.60541.65766-.74352,1.05662Z"/><path id="path77" class="cls-3" d="M156.76274,72.3422l.206.09658c.43967-.20581.88279-.4415,1.34663-.614.72052-.20465,1.281.614,1.88529.09773.22559-.16211.41781.07473.59161.20466.259.47369.86207.4415,1.3144.57027-.22559-.61282-.50527-1.45328-1.29254-1.55216a7.51723,7.51723,0,0,1-.98063-.31043c-.8287-.91405-1.36736.75193-2.27317.34377A2.52534,2.52534,0,0,0,156.76274,72.3422Z"/><path id="path79" class="cls-3" d="M156.96877,77.58275c.34413.28858.69863.78527,1.23615.71974.671.31273.39018,1.19343.75618,1.65678l.38672-.34493-.03222-.02069.05525-.054.023.03219a2.0546,2.0546,0,0,0-.22789-1.27047c-.24745-.17016-.53865.0115-.7746-.15062a1.09008,1.09008,0,0,0-.49607-.73124c-.17264-.12877-.39939.04369-.59275.0322l-.33377.13107Z"/><path id="path81" class="cls-3" d="M158.3154,64.46529a5.55242,5.55242,0,0,0,1.59409,1.36705,2.56212,2.56212,0,0,0,1.52963.15062,9.81419,9.81419,0,0,1-1.27067-1.26013c-.15078-.215-.18416-.48289-.38789-.6772a3.03893,3.03893,0,0,0-1.46518.41966Z"/><path id="path83" class="cls-3" d="M158.90929,60.61479c.49723.61167,1.26146.36562,1.96125.38632v-.07358l-1.07732-.906a2.89313,2.89313,0,0,0-.88395.59327Z"/><path id="path85" class="cls-3" d="M139.08038,50.46714l.62383,1.93732c-.01151-1.098.49492-2.01206.38787-3.13076l.46384-.68985-.98177.30124A3.65173,3.65173,0,0,0,139.08038,50.46714Z"/><path id="path87" class="cls-3" d="M139.50048,47.10988l.84942-.49554v-1.259a4.48161,4.48161,0,0,0-.8287.87265Z"/><path id="path89" class="cls-3" d="M156.97107,49.06905a1.19894,1.19894,0,0,1-.77461.38746,3.67584,3.67584,0,0,0,.31077-2.91805,4.1337,4.1337,0,0,0,.72281-.25755l-.023-.02069.59391-.51854c.78611-.53808.48456-1.559.77575-2.32248-.38789-.60362-.50527-1.33486-1.067-1.8419l.03338-.01954c-.44312-.55993-1.23959-.49669-1.845-.77608-.79647-.269-1.41.27939-1.98081.64731-.24746.04139-.09668.36447-.366.35412a10.975,10.975,0,0,0-.442,1.26932,4.31213,4.31213,0,0,0-3.06963.57027,4.528,4.528,0,0,0-1.5308-.54843c-.38672-.07473-.8287.06554-1.10723-.15176-.4086-.46105-.49722-1.30152-1.19816-1.41879-.2463-.08623-.29925-.35412-.29925-.59212-.46384-.07473-.87474-.28858-1.32707-.38746-.68713-.31273-1.23614.184-1.75408.51623a5.25766,5.25766,0,0,0-.69864.25985,9.84935,9.84935,0,0,0-1.0025,1.881,3.90855,3.90855,0,0,0,.5939,1.49582,3.04313,3.04313,0,0,0,1.67926,1.52916,6.33505,6.33505,0,0,0,0,3.4113l-.01841.01034-.03453.0299a.58263.58263,0,0,1-.2981-.0299h-.01382a4.69041,4.69041,0,0,0,1.418,2.69846c.28084.09888.21639.43115.33609.6473a.50681.50681,0,0,1,.05179.38632,8.45573,8.45573,0,0,0-4.52332,1.129c-.34414.17246-.19221.64731-.22443.97958a8.29853,8.29853,0,0,1,3.10071-1.29,4.68319,4.68319,0,0,1,1.49741-.02185l.0541.92555c-1.281.66685-2.68177,1.05432-3.78094,2.15232a4.33246,4.33246,0,0,0,.05524,1.00143l.98062-.79792a11.6634,11.6634,0,0,1,3.0259-1.73152,3.77848,3.77848,0,0,0,.98177.9244,7.31094,7.31094,0,0,1,2.12124-.9244c.39939-.23685,1.03243-.02184,1.29139-.49439l.18416-.97958c-.03337-.02185-.05294-.06324-.10819-.05174a1.48293,1.48293,0,0,1-.79647-1.38889,1.44813,1.44813,0,0,1-.57089.15061c-.17264-.04369-.33263-.08508-.40859-.25869-.01152-.21615-.1197-.53808.09553-.699a4.16086,4.16086,0,0,1,2.48955-.38631c.656.08508,1.6056.05174,1.83.829-.02992.22535-.01036.47255-.236.62317-.2371.12877-.50528-.0115-.7228-.10693a1.77678,1.77678,0,0,1-1.05544,1.29l.07711.62547c.07367.28053.09553.74158.53866.645a9.44458,9.44458,0,0,1,2.821,1.3452,6.71664,6.71664,0,0,0,.75275-.95774,14.0769,14.0769,0,0,1,4.28737,2.83987l.05525-.9037a14.74542,14.74542,0,0,0-4.08365-2.50759,5.4797,5.4797,0,0,0,.12891-.88186,10.55747,10.55747,0,0,1,4.75121,1.45328l-.023-.77493a10.5652,10.5652,0,0,0-4.89047-1.3452.54213.54213,0,0,1-.07365-.33458,2.39866,2.39866,0,0,0,1.68156-1.80855c.43968-.50474,1.07731-1.05432.92652-1.80625.01957-.06094.04143-.12762.0633-.192A.89683.89683,0,0,0,156.97107,49.06905Z"/><path id="path91" class="cls-3" d="M158.46962,51.83419l.88279-.28054.09552-.49439c.24976-.72089-.27738-1.259-.53866-1.8304l-.43967,2.60532Z"/><path id="path93" class="cls-3" d="M160.69676,55.24548c.42011.46105.82984,1.20494,1.57452.97729a4.70035,4.70035,0,0,0-.33493-.84852c-.19567-.22765-.259-.87266-.64684-.645-.29121-.1943-.36486-.51853-.55016-.77607A7.70054,7.70054,0,0,0,160.69676,55.24548Z"/><path id="path95" class="cls-3" d="M160.84867,58.39579c.1623.22764.206.51853.36486.722a1.73913,1.73913,0,0,0,1.07731.12877c.32343-.07474.5283.27938.82985.07358-.37522-.2357-.60081-.66685-.95875-.97728C161.74068,58.00947,161.29065,58.30035,160.84867,58.39579Z"/><path id="path97" class="cls-3" d="M161.41956,63.40063a4.15073,4.15073,0,0,0,2.67946.722c.107-.05519.2912-.04369.31191-.17361a16.4528,16.4528,0,0,0-1.90256-.95774c-.35679-.54843-.81949.14027-1.27181.09658C161.24692,63.21782,161.37583,63.31555,161.41956,63.40063Z"/><path id="path99" class="cls-3" d="M163.6582,72.901l.1623.34607c.16229,1.11985.87128,2.15117.4834,3.37795.32343.22535.42125.60132.625.90255h.05409a7.20248,7.20248,0,0,0-.05409-2.841C165.02556,73.83687,164.16349,73.34133,163.6582,72.901Z"/><path id="path101" class="cls-3" d="M163.8435,61.883a2.41114,2.41114,0,0,0,2.09938.25869,6.52278,6.52278,0,0,1-1.19586-.77493Z"/><path id="path103" class="cls-3" d="M166.5011,65.18733a1.16819,1.16819,0,0,0,.57088,1.05432,2.43338,2.43338,0,0,0,.33263-.79562,1.96665,1.96665,0,0,0-.7746-1.19344A2.63554,2.63554,0,0,0,166.5011,65.18733Z"/><path id="path105" class="cls-3" d="M166.53447,70.09215c-.076.50474.4834.57142.72051.85081.19452.2357-.12891.39781-.12891.62316a2.917,2.917,0,0,1,.6457,1.8304,17.75417,17.75417,0,0,0,.49837-1.95917c-.04373-.47254-.79647-.376-.67907-.90255a2.32852,2.32852,0,0,0-.18415-1.54871c-.04374-.077-.14042-.22765-.22445-.184C166.9845,69.24364,166.5011,69.55407,166.53447,70.09215Z"/><path id="path107" class="cls-3" d="M168.01,67.53166l.55936,1.08651c.24861-.02989.40745-.269.602-.4392.15193-.453-.24745-.74388-.36486-1.1095-.099-.2587,0-.60247-.18416-.829-.13927-.08508-.3027-.22535-.46384-.184L168.01,67.53166Z"/><path id="path109" class="cls-3" d="M168.73052,64.6711a3.12267,3.12267,0,0,1,1.1832,1.1279c.37866,1.098.98177,2.08794,1.42259,3.1526.1623.74274.2912,1.405.49607,2.13738.076.19086.03223.568.33493.53693.08518-.81747.24746-1.60274.25782-2.45356a3.27005,3.27005,0,0,0-.95875-.722v-.07358c.04373-.184.19452-.399.42125-.36447.09552-.11037.38672-.21615.259-.40931-.56053-.55878-.5283-1.52341-1.42375-1.697a.81076.81076,0,0,1-.41781-.75194A2.57346,2.57346,0,0,0,168.73052,64.6711Z"/><path id="path111" class="cls-3" d="M169.24616,70.50261c.55016.50359.35795,1.236.31306,1.91433-.08517.40931.43162.17246.59391.38746a2.35091,2.35091,0,0,1,.01957,1.75452,10.4958,10.4958,0,0,0,.85172-1.313c-.0115-.184.22445-.269.21639-.49439.09552-.31273-.26932-.17247-.42011-.207-.12891-.03219-.26932-.11842-.22789-.28973a2.61957,2.61957,0,0,0-.08518-1.72117c-.12891-.44265.05525-1.03247-.15077-1.41994-.34414.4737-1.3685.58177-1.11069,1.3889Z"/><path id="path113" class="cls-3" d="M170.24865,62.8614c.95991.96923,1.6597,1.94192,2.69327,2.879a10.94378,10.94378,0,0,0-.05409-1.21643,2.88166,2.88166,0,0,0-.66871-.71974C171.456,63.72831,171.05665,62.70043,170.24865,62.8614Z"/><path id="path115" class="cls-3" d="M172.75892,67.99041a1.67306,1.67306,0,0,0,.107.27939,14.09906,14.09906,0,0,1,1.11068,2.14083c-.08632-.79448.45348-1.78671-.259-2.39837-.09668-.2587-.42011-.17246-.625-.15177Z"/><path id="path117" class="cls-3" d="M175.344,75.85123c.30271.13682.68943-.11038.98063-.28054a.87836.87836,0,0,1,.70094.22535c.08517.17131,0,.33228.02992.49439a6.57991,6.57991,0,0,1,1.85421.79563l.1807-.18167a1.26335,1.26335,0,0,0-.66641-1.05316c-.22559-.13223-.56168-.05519-.72052-.261a1.11879,1.11879,0,0,0,.09553-.62316,1.55743,1.55743,0,0,1-.87359-.28054c-.1807-.05289-.34414-.2035-.49491,0-.5375.36677-.56973.9037-1.08652,1.1647Z"/><path id="path119" class="cls-3" d="M176.099,62.30952a1.93532,1.93532,0,0,0,.77574-.34377c.71936-.65651,1.76559-.21616,2.60465-.22651a5.80718,5.80718,0,0,0-.59161-.829,2.48076,2.48076,0,0,0-.92652-.2587c-.73316-.42885-1.22693.29089-1.78861.645A1.2039,1.2039,0,0,0,176.099,62.30952Z"/><path id="path121" class="cls-3" d="M176.11975,64.52393c0-.02989,0-.06439.03223-.07358.09668.08623-.01151.28973.15077.33227a6.17547,6.17547,0,0,0,.79647-.51393c.72282,0,1.15327-.69905,1.86227-.69905a10.68366,10.68366,0,0,1,3.393,1.03132,2.33031,2.33031,0,0,0-1.29024-1.64758.892.892,0,0,0-.86322.25869c-.72282.45415-.34414-.65536-.85057-.67835a5.32056,5.32056,0,0,1-2.06715.36792c-.43161.15981-.73432.55647-1.21772.51508a2.69774,2.69774,0,0,0,.05409,1.10721Z"/><path id="path123" class="cls-3" d="M176.61582,66.92575c.22444.2357.60081.192.92652.2357l.93574-.36447c.01151-.17246-.27968-.2173-.21638-.40816.259-.29089.61577-.08738.93688-.20695.45464-.06324.91732-.51509,1.36736-.18167-.01037.05289.023.12993-.01957.18167-.14271.33457.09668.53808.3545.66685.52829.09888,1.02322.58292,1.55151.36562a9.51228,9.51228,0,0,0-.28084-1.26932c-.44081-.07588-.75274-.44151-1.16247-.59327a.88421.88421,0,0,1-.64684.28054c-.82984-.19316-1.82084-.7094-2.6599-.18166-.3027.36446-.84136.25754-1.24995.41735A4.76723,4.76723,0,0,0,176.61582,66.92575Z"/><path id="path125" class="cls-3" d="M176.97031,73.32064c-.06561.18281-.24745.48519.08518.57027.69059.023,1.57338-.33228,2.11318.20465.18186.14142.09552.43.08518.614l.90351.75423a7.79436,7.79436,0,0,0,.259-1.3475,1.50589,1.50589,0,0,0-.54786-.9037c-.59391,0-.93918-.6933-1.57452-.60477-.33263-.077-.62268.21845-.95875.21845a5.46294,5.46294,0,0,0-.36486.49439Z"/><path id="path127" class="cls-3" d="M177.22929,68.24911c.13927.28858.3027.76343.57088.79562a3.06363,3.06363,0,0,1,2.27318-.15062c.23709.04254.23709.31158.18416.4852.36485.215.808.38516,1.1947.62316l-.10705-.645c-.023-.70019-.90581-.76573-.95991-1.45558a4.26533,4.26533,0,0,0-2.29387-.12762c-.24976.2265-.60312.19431-.90582.25984C177.166,68.11918,177.21779,68.17207,177.22929,68.24911Z"/><path id="path129" class="cls-3" d="M177.41345,71.73514c.42011-.11843.68713-.58178,1.14061-.62317a2.09987,2.09987,0,0,1,1.73335.88186c.26128.17131.206.614.53866.614a10.63492,10.63492,0,0,1,.05525-1.551c-.45464-.75193-1.57108-.17246-1.99233-1.05431l-.79647.05289c-.57089.14026-.41895.80827-.49723,1.26012-.06445.14027-.19336.24719-.18186.41966Z"/><path id="path131" class="cls-3" d="M181.36357,76.44105c.33493.66685,1.06925,1.17389,1.14291,1.93847a3.636,3.636,0,0,0,.40975-.66685c-.01151-.21616-.26012-.21616-.358-.38747-.09668-.27939.05525-.52659.09784-.77608a2.0831,2.0831,0,0,0-.85057-1.01063Z"/><path id="path133" class="cls-3" d="M182.6918,74.74172l.7746,1.05432a2.77878,2.77878,0,0,0,.20373-1.93847c-.07366-.11843-.21523-.31158-.40859-.22535-.29235.30238-.33378.76343-.56973,1.1095Z"/><path id="path135" class="cls-3" d="M179.53353,45.28868a2.24177,2.24177,0,0,0,.88279.28974,1.13981,1.13981,0,0,1,.79878-.12877c.39822.25869.88279-.054,1.34433-.0322a4.97122,4.97122,0,0,0-1.34433-.84851C180.61084,44.69656,180.12742,45.12542,179.53353,45.28868Z"/><path id="path137" class="cls-3" d="M183.74723,46.30046c.56858.05289.97833.55762,1.36619.98073a1.90839,1.90839,0,0,1,1.14177.77378l-.183-.57142a3.64422,3.64422,0,0,0-.84942-1.46248A4.16621,4.16621,0,0,0,183.74723,46.30046Z"/><path id="path139" class="cls-4" d="M143.54845,41.57845l.31192.0322c.84136.41965,2.19836.63466,2.27316,1.84994a6.65645,6.65645,0,0,0-2.34567,1.474c-.51679-.52773-1.563-.23685-1.73451-1.16124.16228-.87151.47305-1.96722,1.49511-2.19487Z"/><path id="path141" class="cls-4" d="M144.35873,47.03515c.97832-.08508,1.92673.05174,2.94073-.0322a1.28566,1.28566,0,0,1,.62382.57028c-.03222,1.16124-.38787,2.27075-.442,3.46418a1.593,1.593,0,0,0-.97947,1.03362,8.56608,8.56608,0,0,0-1.14291.53694,1.13061,1.13061,0,0,1,.16343-1.21414c.41895-.59326,1.50777-.453,1.41915-1.38889.28084-.453.01151-1.03362.023-1.50732-.1082-.35412-.21523.11843-.38788.10693a1.407,1.407,0,0,1-1.0002-.07358c-.22788-.23915-.50758-.43116-.572-.75424a1.76066,1.76066,0,0,1-.80682-.70019Z"/><path id="path143" class="cls-4" d="M145.54308,54.0509c.46039.06323.94724-.14027,1.34548.08508a.76951.76951,0,0,1-.49492.25869l-.72165.33458C145.40266,54.66256,145.55344,54.23256,145.54308,54.0509Z"/><path id="path145" class="cls-4" d="M147.42837,45.06448c.46154-.15061.95876-.46105,1.45367-.31043a6.94972,6.94972,0,0,0-.90351,1.24632l-1.47554-.031A2.07707,2.07707,0,0,1,147.42837,45.06448Z"/><path id="path147" class="cls-4" d="M151.748,44.71036c.61231-.10693.58008.6887,1.1406.722.09784.12877.23826.246.183.4392a9.36874,9.36874,0,0,1-1.16478.15062c-.48455-.269-.17035-1.10835-.93689-1.05432-.04144-.06323-.12891-.19315-.02072-.23684a1.84978,1.84978,0,0,1,.79878-.0207Z"/><path id="path149" class="cls-4" d="M151.36008,47.59507a1.47446,1.47446,0,0,1,1.0658-.48519l2.79.054c.11854.10692-.107.2035-.107.33342-.17264.161-.42126.20466-.572.35643-.36486.01149-.33493.4392-.59275.62316-.39939.39781-.97947.21615-1.44331.15061a1.23609,1.23609,0,0,1-.4201-.46334l-.12891.12877c.16228.60362.11854,1.27162.23595,1.88328l.66756.44265c.0115.98994,1.17513.72089,1.68156,1.27047a3.01238,3.01238,0,0,1-.61231.95774,3.60154,3.60154,0,0,0-1.36851-.829c-.04259-.58178-.67792-.9244-1.03472-1.21644-.09669-1.05431-.11855-2.13047-.2889-3.1526Z"/><path id="path151" class="cls-4" d="M152.37179,54.23256h1.29368l-.16229.67835-1.29369-.54958c-.02993-.10693.08632-.13912.16228-.12877Z"/><path id="path153" class="cls-4" d="M154.6979,42.043l.95875-.30238a9.8012,9.8012,0,0,1,1.57222.94624,3.79291,3.79291,0,0,1,.15077,2.53864c-.2912.32422-.92652,0-1.16247.51623h-.04373A4.73417,4.73417,0,0,0,153.868,43.364a1.99415,1.99415,0,0,1,.82984-1.32106Z"/><path id="path155" class="cls-3" d="M177.16368,83.03714h5.74678a4.19586,4.19586,0,0,0,2.43315-.73354,11.18837,11.18837,0,0,0,8.05679-1.84879,16.85025,16.85025,0,0,0,3.13294-3.29172,11.86918,11.86918,0,0,0,1.75869-3.27218,15.34137,15.34137,0,0,0,.694-2.30294,21.89843,21.89843,0,0,0-.82294-11.44917q-.33838-.98822-.755-1.90283c-1.517-3.13191-3.57952-6.50986-6.76079-8.492a13.59174,13.59174,0,0,1-4.45081-4.62773c-.55016-.49669-1.07846-1.152-1.78861-1.27047a2.80076,2.80076,0,0,1,.46384,1.01063l-.04373.054a2.61325,2.61325,0,0,1-1.86342-.86231l.572-.51509a3.03215,3.03215,0,0,0-.70093-.20351c-2.17649-.24719-3.96394.75194-5.89066,1.23713l-.03223.10693c1.1832.52658,1.43065,1.82809,2.12124,2.71225.17264-.20581.46384-.05519.69979-.077.34414.02184.66757.269,1.0002.18281a2.93834,2.93834,0,0,0-.20372-.77263,1.41244,1.41244,0,0,1,.67906,0c.62384.36447,1.62632-.06669,2.0142.77263a11.71047,11.71047,0,0,0-2.04642.35527c.04259.269.31191.48519.2912.75423a6.76,6.76,0,0,0-1.81047-.46335l-.02993.09543a6.23676,6.23676,0,0,0,3.04662,1.8419c1.62632.376,3.05813-.39782,4.62921-.12878a18.02506,18.02506,0,0,1,8.58738,9.63257q.10533.27594.20143.55763a18.62885,18.62885,0,0,1,.22558,11.44917,14.03917,14.03917,0,0,1-2.47343,4.18622,8.75984,8.75984,0,0,1-1.41339,1.3889,6.33518,6.33518,0,0,1-5.66393,1.24632c-.12775-.08393-.389-.10692-.34644-.33228.07252-.29893.13927-.60476.198-.914a22.6888,22.6888,0,0,0,.40745-5.428c-.00461-.07934-.00576-.15867-.00921-.23685a20.6976,20.6976,0,0,0-1.62861-7.38022,25.55947,25.55947,0,0,0-2.32036-4.069,9.62886,9.62886,0,0,0-4.315-3.55156,3.23207,3.23207,0,0,0-3.28488.57142,2.20463,2.20463,0,0,0-.755,1.97871,6.74322,6.74322,0,0,1-3.10187,1.00143c-.27738.02415-.56282.12417-.84943.123a4.61755,4.61755,0,0,1-.80223-.03334,7.92788,7.92788,0,0,1-3.79474-1.743c-.02187-.55648-.05525-1.08651-.076-1.67633a2.03111,2.03111,0,0,1-1.14061-1.6039l.05525-.054a4.50416,4.50416,0,0,1,.95645.46335,7.05416,7.05416,0,0,0-.72051-2.39952c-.38789-.16211-.77805-.28974-1.14291-.48519a1.83812,1.83812,0,0,1-.75159-1.24863c.37522.36792,1.03243.238,1.32361.62547-.50527-1.49582-.51679-3.20665-1.34663-4.57369-.42011-1.01178-1.51929-1.474-2.27317-2.21786-.29121-.35412-.40859-.84851-.93689-.9037-.43045-.10693-.46384-.59212-.53865-.90255.26932.031.4949.215.72281.25754-.62613-1.65793-1.17513-3.49638-2.86592-4.55069l-.2912.18166a17.72235,17.72235,0,0,1-2.0142.16211,2.76692,2.76692,0,0,1,1.21773-.80827,2.91273,2.91273,0,0,0-1.45828-.53808,2.98388,2.98388,0,0,1-1.40765.61281l-.05295-.04139c-.0115-.38631-.10128-.86231.48111-.95774a3.35505,3.35505,0,0,0-2.05794,0c-.16228.41966-.62152.79563-.5916,1.29a8.63919,8.63919,0,0,1-.915,1.05546,9.91874,9.91874,0,0,1,.49377-2.29144c-.48456.18166-.97717.4392-1.45022.66685a19.83278,19.83278,0,0,0-2.38826-1.21528c-.076-.03334-.23826-.06553-.206.07359.69979.50588.42931,1.45212.50413,2.17416l-.442-.36446c-.21523-.54958-.83791-.94739-.9438-1.551a8.21409,8.21409,0,0,0-1.88069.62546l-.09434.05289a1.52225,1.52225,0,0,1,1.18434.79562,13.99584,13.99584,0,0,1-2.196-.33227c-.076-.07589-.13927-.16212-.26012-.15062a4.14032,4.14032,0,0,0-1.03357.668,7.23513,7.23513,0,0,0-1.85192,2.50645,1.65587,1.65587,0,0,1,.74353.184c-.40743.24719-.76424.66685-1.16363.9037a9.89383,9.89383,0,0,0-.15077,1.80855,8.11181,8.11181,0,0,0-.93689,1.41878,21.09215,21.09215,0,0,0-.74238,7.01575c-.21638.20351-.49721.33573-.69979.49554l.02187,2.19487h.05294c.099-.46335.648-.72089.98062-1.03247h.1082c-.053.49439-.11855.98878-.12891,1.49582l-.625.51623c-.62267.54843-.09553,1.3751-.15077,2.0638.04489.184.07481.453.20717.49668a2.87074,2.87074,0,0,1,.46039-.699c.26933-.06669.50528-.28054.75274-.31273a11.22631,11.22631,0,0,1-.53866,1.5809,1.97587,1.97587,0,0,0-.328.269.77591.77591,0,0,0-.21754.40011,48.28943,48.28943,0,0,0,2.11894,7.46645c-.5939.99913-.92883,2.17877-1.4226,3.21239-.0702.14487-.13351.29089-.19336.4415-.49492,1.25207-.64569,2.649-1.26146,3.8528a4.23881,4.23881,0,0,0-.79532-.42081,3.24968,3.24968,0,0,0-3.36084.75308,2.88821,2.88821,0,0,0-2.12469.38632,2.83353,2.83353,0,0,0-.94034,1.15319,2.33367,2.33367,0,0,0-.16689,1.02212,2.47136,2.47136,0,0,0-.90466,1.3659,4.23953,4.23953,0,0,0,.84941,3.26528h47.94481Z"/><path id="path157" class="cls-4" d="M198.16314,60.14q-.33839-.9882-.75505-1.90283c-1.517-3.13191-3.57951-6.50986-6.76079-8.492a13.59171,13.59171,0,0,1-4.4508-4.62773c-.55016-.49669-1.07846-1.152-1.78861-1.27047a2.80076,2.80076,0,0,1,.46384,1.01063l-.04373.054a2.61329,2.61329,0,0,1-1.86343-.86231l.572-.51509a3.03178,3.03178,0,0,0-.70093-.2035c-2.1765-.2472-3.96394.75193-5.89066,1.23712l-.03223.10693c1.1832.52658,1.43065,1.8281,2.12124,2.71225.17264-.2058.46384-.05519.69979-.077.34414.02184.66757.269,1.0002.18281a2.938,2.938,0,0,0-.20373-.77263,1.41248,1.41248,0,0,1,.67907,0c.62384.36447,1.62632-.06669,2.0142.77263a11.7103,11.7103,0,0,0-2.04642.35527c.04258.269.3119.48519.2912.75423a6.76018,6.76018,0,0,0-1.81048-.46335l-.02992.09543a6.23667,6.23667,0,0,0,3.04662,1.8419c1.62631.376,3.05812-.39782,4.6292-.12878A18.02507,18.02507,0,0,1,195.89114,59.58q.10532.27594.20142.55763a18.62885,18.62885,0,0,1,.22559,11.44917,14.03938,14.03938,0,0,1-2.47343,4.18622,8.76024,8.76024,0,0,1-1.41339,1.3889,6.33518,6.33518,0,0,1-5.66393,1.24632c-.12775-.08393-.389-.10692-.34644-.33228.07252-.29893.13927-.60476.198-.914a22.68829,22.68829,0,0,0,.40744-5.42795c-.0046-.07934-.00576-.15867-.0092-.23685a20.6976,20.6976,0,0,0-1.62861-7.38022,25.55877,25.55877,0,0,0-2.32037-4.06895,9.62889,9.62889,0,0,0-4.315-3.55157,3.23208,3.23208,0,0,0-3.28487.57143,2.20461,2.20461,0,0,0-.755,1.97871,6.74322,6.74322,0,0,1-3.10187,1.00143c-.27738.02414-.56283.12417-.84943.123a4.61751,4.61751,0,0,1-.80223-.03334,7.92787,7.92787,0,0,1-3.79475-1.743c-.02186-.55648-.05525-1.08651-.076-1.67633a2.03111,2.03111,0,0,1-1.14061-1.6039l.05525-.054a4.50416,4.50416,0,0,1,.95645.46335,7.05411,7.05411,0,0,0-.72052-2.39952c-.38788-.16211-.77805-.28974-1.14291-.48519a1.83807,1.83807,0,0,1-.75158-1.24863c.37522.36792,1.03243.238,1.32361.62546-.50527-1.49581-.51679-3.20664-1.34663-4.57368-.42011-1.01178-1.51929-1.474-2.27318-2.21786-.2912-.35412-.40859-.84852-.93688-.9037-.43045-.10693-.46384-.59212-.53866-.90255.26932.031.49491.215.72282.25754-.62614-1.65793-1.17514-3.49638-2.86592-4.5507l-.2912.18166a17.72026,17.72026,0,0,1-2.0142.16212,2.76672,2.76672,0,0,1,1.21772-.80827,2.91266,2.91266,0,0,0-1.45827-.53808,2.98388,2.98388,0,0,1-1.40765.61281l-.053-.04139c-.0115-.38631-.10128-.86231.48111-.95774a3.35505,3.35505,0,0,0-2.05794,0c-.16229.41966-.62153.79563-.5916,1.29a8.63919,8.63919,0,0,1-.915,1.05546,9.91874,9.91874,0,0,1,.49377-2.29144c-.48456.18166-.97717.4392-1.45023.66685a19.83129,19.83129,0,0,0-2.38826-1.21528c-.076-.03334-.23825-.06553-.206.07358.69979.50589.42931,1.45213.50413,2.17417l-.442-.36446c-.21523-.54958-.8379-.9474-.94379-1.551a8.21409,8.21409,0,0,0-1.88069.62546l-.09437.05289a1.52225,1.52225,0,0,1,1.18434.79562,13.99584,13.99584,0,0,1-2.196-.33227c-.076-.07589-.13927-.16212-.26012-.15062a4.14032,4.14032,0,0,0-1.03357.668,7.23513,7.23513,0,0,0-1.85192,2.50645,1.65587,1.65587,0,0,1,.74353.184c-.40743.24719-.76424.66685-1.16363.9037a9.89383,9.89383,0,0,0-.15077,1.80855,8.11181,8.11181,0,0,0-.93689,1.41878,21.09212,21.09212,0,0,0-.74238,7.01575c-.21638.20351-.49721.33573-.69979.49554l.02187,2.19487h.05294c.099-.46335.648-.72089.98062-1.03247h.1082c-.053.49439-.11855.98878-.12891,1.49582l-.625.51623c-.62267.54843-.09553,1.3751-.15077,2.06379.04489.184.07481.453.20717.49669a2.87074,2.87074,0,0,1,.46039-.699c.26933-.06669.50528-.28054.75274-.31273a11.22631,11.22631,0,0,1-.53866,1.5809,1.97587,1.97587,0,0,0-.328.269.77591.77591,0,0,0-.21754.40011,48.28943,48.28943,0,0,0,2.11894,7.46645c-.5939.99913-.92883,2.17877-1.4226,3.21239-.0702.14487-.13351.29088-.19336.4415-.49492,1.25207-.64569,2.649-1.26146,3.8528a4.23881,4.23881,0,0,0-.79532-.42081,3.24966,3.24966,0,0,0-3.36084.75308,2.88821,2.88821,0,0,0-2.12469.38632,2.83353,2.83353,0,0,0-.94034,1.15319,2.33367,2.33367,0,0,0-.16689,1.02212,2.47133,2.47133,0,0,0-.90466,1.3659,4.23953,4.23953,0,0,0,.84941,3.26528h19.0336a6.1998,6.1998,0,0,1-.73432-1.19343c-.40744-.61512-.12776-1.48548-.1715-2.196.38787-.78183.78151-1.56825,1.22463-2.33283.08978-.15407.17955-.30468.27163-.45415l.87359-.33343c.46269,0,.85172-.33343,1.29254-.21615.59275.59327.59275-.591,1.16479-.645,1.33513-.17246,2.65989-.04369,3.41262,1.08651,0,.15062.23939.15062.18416.29088-.17264.05174-.33494-.05518-.51679-.05518-.81834-.20351-1.77825-.722-2.58509-.2587-.03107.19316-.07251.38977-.11164.58293a5.92083,5.92083,0,0,0-.09438.60016,3.26005,3.26005,0,0,1,1.36736.93589,2.18365,2.18365,0,0,1,1.34663-.93589,3.12879,3.12879,0,0,1,1.29368.38747c.67907.62546.34414,1.69013.28084,2.48575.61232.34377,1.29138.53923,1.91522.8715a3.02285,3.02285,0,0,1-1.03243.49669l-1.03356-.2058c-.11855-.08508-.32457-.08508-.36716-.2357a5.40593,5.40593,0,0,0-.97947,1.32221h14.75542a7.78958,7.78958,0,0,0-.68943-1.19344,6.13143,6.13143,0,0,1-.21522-2.21786l1.37886-2.09828a12.7526,12.7526,0,0,1,2.42278-.15062.89919.89919,0,0,0,.11855-.06324c.33953-.23454.44312-.77953.9484-.71169a2.78554,2.78554,0,0,1,2.27318.57143,1.067,1.067,0,0,1-.06906.14027c-.28428.45415-.816-.05289-1.20392.08393-.16229.17246.076.376.107.57143.14041.192-.14041.17016-.236.2035a.73919.73919,0,0,1-.64684-.2035c-.04259-.05519-.01036-.11843-.09552-.12878a3.32243,3.32243,0,0,0-.55016.97844,2.678,2.678,0,0,1,.69979.77608c.24746.35527-.19452.62316-.27968.93589a.09313.09313,0,0,1-.16229,0c-.22789-.12877-.42012-.453-.66871-.36792-.21639.95889.07481,1.91663-.05409,2.87437a8.10353,8.10353,0,0,0,1.36735,0l.18416-2.02355a6.6221,6.6221,0,0,1,1.88529-3.41245c.98868-.6749,1.62632.65881,2.35719,1.121.11971.02185.07712.15062.12891.22535-.01036.21615-.236.30124-.38672.36677-.45348.15981-.78727-.33458-1.067-.62546-.26818.29088-.38789.6772-.6998.90485l.107.031a2.3539,2.3539,0,0,1,.77805,1.20609,1.35665,1.35665,0,0,1-.648,1.06581,10.655,10.655,0,0,1-.71936-1.551c.01036.023-.01266.03219-.03339.05519-.5939.15981-.75158.82667-.85056,1.3659.03223.52773-.366.74273-.26012,1.26932h7.68157a4.19588,4.19588,0,0,0,2.43315-.73354,11.18837,11.18837,0,0,0,8.05679-1.84879,16.8506,16.8506,0,0,0,3.13294-3.29173,11.86868,11.86868,0,0,0,1.75868-3.27217,15.339,15.339,0,0,0,.694-2.30294A21.895,21.895,0,0,0,198.16314,60.14Z"/><path id="path159" class="cls-4" d="M148.73357,80.111c.4201-.269,1.09918-.33457,1.19471-.95774a1.47548,1.47548,0,0,0-.51678-.33457l-.442.12877a5.28667,5.28667,0,0,1,.26127-.82782l1.4203-.4622a11.48493,11.48493,0,0,0-.33494,2.19487,7.88493,7.88493,0,0,0,.85172,3.18479h-1.53079c-.1715-1.01062-1.22924-1.74416-.90352-2.9261Z"/><path id="path161" class="cls-4" d="M152.04146,78.81872h.08517l1.03241.937.15078-.03219c-.084,1.098-.13927,2.17416-.15078,3.31356H152.0403a13.56532,13.56532,0,0,1-.56052-3.33426,4.99585,4.99585,0,0,1,.56167-.88416Z"/><path id="path163" class="cls-4" d="M154.34454,79.85349c.206-.26789.2912-.722.69979-.77378a1.1012,1.1012,0,0,1,.77805.25754c.37636.47255.00806,1.07732-.12891,1.54986a18.16283,18.16283,0,0,1-.648,2.15117H153.9578l.38672-3.18479Z"/><path id="path165" class="cls-4" d="M170.68487,79.51891c.23709.30239.31191.71055.66756.97959a2.026,2.026,0,0,0,.2371-1.64644l-.31191-.31273c.39938-.09542.81834-.12877,1.21772-.2035a4.4808,4.4808,0,0,0-.442,1.75337c.01036.96923.17149,1.93847.25781,2.94794h-1.18435a6.52127,6.52127,0,0,1-.82984-2.94794,2.59333,2.59333,0,0,1,.38788-.57028Z"/><path id="path167" class="cls-3" d="M175.78021,58.84534c-.0115.27938-.21522.58982-.03338.829.26127-.29088.69059-.28053,1.03586-.40931a8.48974,8.48974,0,0,1,2.76694.43116c-.22558-.35642-.37636-.75424-.625-1.07616-.49607-.12993-1.24995.215-1.33513-.51854-.30155-.25754-.77461-.07358-1.08768-.05289a2.40781,2.40781,0,0,0-.72165.79678Z"/><path id="path169" class="cls-3" d="M142.859,49.55309l-.01611-.0115.0023.0115Z"/><path id="path171" class="cls-3" d="M146.77577,59.119l.64684-.62316a.14435.14435,0,0,1,.1289.05174l-.05294,1.19459a1.68226,1.68226,0,0,0,1.10723.40931c.03338-.32193.28084-.54958.42126-.829.11854-.22535.04373-.55878.27968-.71859l.076.07358a3.38674,3.38674,0,0,0,.2371,1.06467c.02187.17246.0518.38631.07252.53808a2.67058,2.67058,0,0,0,1.27183-.28054,4.84565,4.84565,0,0,1,.18185-1.1164c.099-.12993-.11855-.36792.15077-.35642.15193.32308.4201.65535.572,1.00143a4.18475,4.18475,0,0,0,1.03243-2.32479c-.18185-.246-.46154-.246-.67907-.40816A8.10915,8.10915,0,0,0,146.27855,57,2.73811,2.73811,0,0,0,146.77577,59.119Z"/><path id="path173" class="cls-3" d="M129.65625,79.31081a16.53493,16.53493,0,0,0,.05294,2.42482,1.22915,1.22915,0,0,0,.79877.60131l.05294-.54958c.12891-.76343-.27968-1.574.15194-2.22016a5.202,5.202,0,0,1,.86207.38632,1.88581,1.88581,0,0,0-.73432-1.97067Z"/><path id="path175" class="cls-3" d="M132.31728,78.14727a6.33747,6.33747,0,0,0-.22558,4.13793,4.88988,4.88988,0,0,0,.84941-.64616,4.46571,4.46571,0,0,1,.40975-2.933,1.90653,1.90653,0,0,1,1.08651,1.16125,1.98112,1.98112,0,0,0,.33609-1.67633c.02186-.47485-.51679-.36562-.77576-.55993.08517-.399.07366-.85886.49492-1.08651l-1.29139.12877A6.12846,6.12846,0,0,0,132.31728,78.14727Z"/><path id="path177" class="cls-3" d="M134.97832,81.86555c.0541.09543,0,.269.10935.29088.16-.90485.892-1.49007,1.29254-2.288.19221-.26559.183-.645.49491-.84851.419,0,.72166.30124,1.13141.33343.12891.09773-.06675.184-.07712.29088a10.70922,10.70922,0,0,0-.31191,2.09254h.07481a11.01166,11.01166,0,0,0,1.37886-1.94192l.07367-.61167c.099-.73238-.69749-1.20493-1.21773-1.50731l.46384-.59327-.64684-.22535a2.93892,2.93892,0,0,0-1.9601.98073,8.73222,8.73222,0,0,0-.80568,4.02756Z"/><path id="path179" class="cls-3" d="M137.87647,75.47986c.24631.07358.47305-.12877.71936-.023a6.54938,6.54938,0,0,1,2.76923,1.57056l.88394,2.25.442-1.39-.2912-.75079c-.24861-.53808-.92653-.49439-1.39037-.51623-.19336-.21616.01036-.46335.076-.66686.22559-.76458-.7113-.722-1.08767-1.03362.02187-.46105-.53865-.30238-.85171-.34377l-.107-.12877a.21956.21956,0,0,0-.31306-.023c-.01957-.03219-.06331-.054-.04144-.10692l-.236.05289a1.51378,1.51378,0,0,0-.572,1.1095Z"/><path id="path181" class="cls-3" d="M138.49915,73.00445a.70588.70588,0,0,0,.22559.36562c.4857-.12877.95069-.46449,1.50891-.25869a8.50231,8.50231,0,0,0,2.34913,1.64529l.31307-.05289c.19221.06324.40744.07358.53636.29088.11969.29089-.18185.46105-.27738.6979.4834.35642.29119.98993.5916,1.41993l.77459-1.03132c-.1807-.453.01152-1.22678-.69749-1.27047a.67444.67444,0,0,1-.39017-.62316c-.46154-.41966-1.03243-.60246-1.49512-1.03362-.37982-.30008-.60426-.76228-1.08766-.87035a3.96155,3.96155,0,0,0-1.08767-.36448C139.039,71.80872,138.9745,72.66988,138.49915,73.00445Z"/><path id="path183" class="cls-3" d="M139.535,70.88432l.12891.207c.53866-.03334,1.02206-.269,1.55036-.25984.35449.215.81834.2035,1.18434.38746a4.12313,4.12313,0,0,0,1.03243,1.11755c.87359.12877,1.357,1.06812,1.65855,1.75451v-.33227a2.33094,2.33094,0,0,0-.1807-1.42224c-.21639-.215-.5306-.35412-.755-.54613a.4431.4431,0,0,1,.03223-.33457,7.1713,7.1713,0,0,0-1.2396-.83012c-.57088-.829-1.66775-.60017-2.54134-.829l-.87013,1.08766Z"/><path id="path185" class="cls-3" d="M139.5166,62.99132c.09553.33458.21177.75308.27738,1.1095.3004-.66685.89545-.96923,1.4226-1.51651a2.72042,2.72042,0,0,0-1.0117-.36562v-.02185C139.96663,62.43139,139.60062,62.66939,139.5166,62.99132Z"/><path id="path187" class="cls-3" d="M141.47325,66.53254l.48341-.4944a3.05413,3.05413,0,0,0,.95876-1.70162,1.38289,1.38289,0,0,0-1.12911.05519,13.52666,13.52666,0,0,0-.31307,2.14083Z"/><path id="path189" class="cls-3" d="M141.82775,68.0502a3.13625,3.13625,0,0,0,2.06944-.22765l.60426-1.93617c-.19566-.0115-.39017-.09888-.572-.03219A4.71936,4.71936,0,0,1,141.82775,68.0502Z"/><path id="path191" class="cls-3" d="M142.04644,61.18507a4.34558,4.34558,0,0,0,2.12124,1.73152c-.09553-.90485-.87129-1.52916-1.27067-2.3018l-.02186-.25869a3.95548,3.95548,0,0,0-1.01285-.66685,5.07956,5.07956,0,0,0,.18415,1.49582Z"/><path id="path193" class="cls-3" d="M144.6718,68.13528a3.81885,3.81885,0,0,0,1.71264-.16211c.76425-.184,1.1855-1.02213,1.44331-1.67748H146.869l-1.03243,1.01063a7.84181,7.84181,0,0,0-1.16478.829Z"/><path id="path195" class="cls-3" d="M144.55555,60.20548a6.29052,6.29052,0,0,0,1.00365,2.32479l.12776-1.6039Z"/><path id="path197" class="cls-3" d="M148.08672,64.39056a7.839,7.839,0,0,0-.22329-1.70967c-.32342-.21615-.7746-.19546-1.10953-.40816A3.16459,3.16459,0,0,0,148.08672,64.39056Z"/><path id="path199" class="cls-3" d="M147.10725,69.85645a10.78421,10.78421,0,0,0,1.96125-.79562c.39824-.57143,1.0002-1.08651,1.08767-1.75336-.49837.13912-.92653-.023-1.39037.20465a3.549,3.549,0,0,1-.991,1.44178C147.68849,69.31722,147.29026,69.56557,147.10725,69.85645Z"/><path id="path201" class="cls-3" d="M148.16154,71.17981l.808,1.05432a1.64194,1.64194,0,0,0,1.34663-.14947l-.28889-.95659A3.7721,3.7721,0,0,1,148.16154,71.17981Z"/><path id="path203" class="cls-3" d="M149.50817,63.56274l.31192,1.41879a2.84394,2.84394,0,0,0,.8874-2.45126,3.33978,3.33978,0,0,1-1.19931,1.03247Z"/><path id="path205" class="cls-3" d="M151.63171,66.068a1.01937,1.01937,0,0,0,.1807.55992c.84021.30239.92653,1.32221,1.70343,1.70968a1.90776,1.90776,0,0,0,1.52733-.2587c-.33263-.376-.709-.63466-1.03242-1.03132-.22559-.09658-.45464-.23685-.442-.51623l-1.93708-.46335Z"/><path id="path207" class="cls-3" d="M152.29927,71.14877a2.49355,2.49355,0,0,0,1.37656.75078c-.08517-.11727.05526,0,.076-.07358l-.64684-1.42109c-.32342.0115-.65835.077-.95876.05519A2.96467,2.96467,0,0,0,152.29927,71.14877Z"/><path id="path209" class="cls-3" d="M153.441,64.52048a8.4368,8.4368,0,0,1-.51563-2.32364c-.32112.38747-.656.63581-.95876,1.03133C151.82623,64.02379,152.96684,64.2181,153.441,64.52048Z"/><path id="path211" class="cls-3" d="M154.75315,63.78694c.39018.50819,1.23959.33573,1.71379.184-.22675-.38746-.95645-.61511-1.08536-1.03132a9.15929,9.15929,0,0,0-.46384-2.14083C154.54138,61.71165,154.08558,62.79931,154.75315,63.78694Z"/><path id="path213" class="cls-3" d="M155.43222,66.068c1.07731.78528,2.1339,1.70047,3.63937,1.3659.10818-.07359.29234-.06554.31306-.20351-.442-.27939-.915-.49669-1.36735-.75423l-.51564-.75193h-.23709a9.3318,9.3318,0,0,1-1.83234.34377Z"/><path id="path215" class="cls-3" d="M155.45408,74.79461h.07712a5.75149,5.75149,0,0,1,2.17419-.9037c.206.07588.076.30238.26011.38747.46269-.192,1.02323-.15062,1.49627-.31159a3.23156,3.23156,0,0,1,1.49741.27824c.36831.4852,1.05544.43,1.53079.75423l-.07712-.75423c-1.0002-1.17274-2.56206-1.25782-4.00537-1.236l-.03223-.15062a2.57021,2.57021,0,0,0-1.05544.22535,5.56019,5.56019,0,0,0-1.34664.38631A12.4153,12.4153,0,0,0,155.45408,74.79461Z"/><path id="path217" class="cls-3" d="M156.31961,61.57138a1.81879,1.81879,0,0,0,1.75522.83012c-.36486-.35757-.78727-.73354-.808-1.23828.10819-.95774-.94724-1.03477-1.464-1.52916A6.49646,6.49646,0,0,0,156.31961,61.57138Z"/><path id="path219" class="cls-3" d="M156.20912,76.69859h.12891c.56973-.35412,1.39958-.08393,1.96011-.46105.31191-.16211.33377.269.549.38747.52829.32077.5939,1.29,1.33627,1.06466.892.4622.66756,1.54871.69979,2.34433l.82984-.51509c-.076-.41965.16229-.92554-.10819-1.29116-.20486-.4622-.76538-.50474-1.03472-.8807.32457-.54958-.40859-.80942-.56052-1.20724l.04489-.05289,1.14177.15062a1.70414,1.70414,0,0,1,.64684,1.06581c.892.15062,1.10724,1.16124,1.42029,1.80625.18416-.44035.259-.9152.442-1.3452.0115-.35527-.46268-.35527-.69979-.51624a1.90869,1.90869,0,0,0-.79647-1.39694,11.6983,11.6983,0,0,0-2.94994-.79677l-.90466.27824c-.49723.11957-1.02436-.031-1.40188.31158C156.391,75.688,156.34953,76.30192,156.20912,76.69859Z"/><path id="path221" class="cls-3" d="M156.77885,72.26632l.206.09773c.442-.20466.88279-.4415,1.34664-.614.71935-.2035,1.27987.614,1.88528.09658.22445-.15981.42012.07589.59045.20581.26242.47254.86323.44035,1.31671.568-.22675-.61167-.50757-1.451-1.29368-1.54871a7.62835,7.62835,0,0,1-.97948-.31158c-.82984-.914-1.36735.75423-2.27547.34608A2.50171,2.50171,0,0,0,156.77885,72.26632Z"/><path id="path223" class="cls-3" d="M156.98487,77.50686c.34414.29088.69979.78643,1.23959.72089.66641.31158.38673,1.19459.75159,1.65793l.38788-.34492-.03223-.023.05409-.05289.023.02989a2.04957,2.04957,0,0,0-.22789-1.26932c-.24631-.17131-.53636.0115-.77461-.15062a1.07486,1.07486,0,0,0-.49491-.73008c-.17264-.13107-.39938.04139-.59391.02989Z"/><path id="path225" class="cls-3" d="M158.33151,64.39056a5.56876,5.56876,0,0,0,1.59408,1.3659,2.5546,2.5546,0,0,0,1.52964.14946,9.8703,9.8703,0,0,1-1.27068-1.25782c-.15193-.21615-.18416-.48634-.38788-.67835a3.01852,3.01852,0,0,0-1.46518.42081Z"/><path id="path227" class="cls-3" d="M158.92541,60.54006c.49491.61282,1.26032.36562,1.96011.38746v-.07588l-1.07731-.9037A2.84368,2.84368,0,0,0,158.92541,60.54006Z"/><path id="path229" class="cls-3" d="M139.0965,50.3924l.62382,1.93732c-.01151-1.098.49722-2.01435.389-3.1319l.46154-.68985-.98063.30238A3.63165,3.63165,0,0,0,139.0965,50.3924Z"/><path id="path231" class="cls-3" d="M139.5166,47.03515l.85056-.49439V45.28063a4.54179,4.54179,0,0,0-.82985.87036Z"/><path id="path233" class="cls-3" d="M156.98717,48.99316a1.18942,1.18942,0,0,1-.77575.38632,3.66467,3.66467,0,0,0,.31307-2.91576,4.382,4.382,0,0,0,.72052-.25754l-.02187-.023.59275-.51623c.78611-.53808.48341-1.55906.77461-2.32364-.38673-.60132-.50527-1.3337-1.06579-1.83959l.03222-.02185c-.442-.55992-1.23845-.49439-1.84156-.77378-.79877-.269-1.41224.27939-1.98427.645-.24745.04369-.09552.36562-.36486.35412a11.06065,11.06065,0,0,0-.44311,1.27047,4.30918,4.30918,0,0,0-3.06849.57028,4.48169,4.48169,0,0,0-1.52964-.54843c-.38788-.077-.8287.06323-1.10838-.15177-.4086-.46105-.49722-1.30151-1.19816-1.41879-.24746-.08738-.29926-.35642-.29926-.59326-.46384-.077-.87474-.29089-1.32477-.38747-.68943-.31273-1.23844.184-1.75523.51624a5.21969,5.21969,0,0,0-.70094.25754,10.171,10.171,0,0,0-1.0025,1.88328,3.96035,3.96035,0,0,0,.5939,1.49582,3.051,3.051,0,0,0,1.67927,1.52917,6.32644,6.32644,0,0,0,0,3.409l-.01727.0115-.03452.03219a.57186.57186,0,0,1-.29811-.03219h-.01381a4.72,4.72,0,0,0,1.4203,2.70075c.28084.09658.21522.43116.33263.645a.50262.50262,0,0,1,.05524.38746,8.467,8.467,0,0,0-4.52561,1.1302c-.34415.17247-.19336.645-.22559.97959a8.30813,8.30813,0,0,1,3.10186-1.29232,4.74967,4.74967,0,0,1,1.49742-.02184l.05294.92784c-1.27988.668-2.68176,1.05432-3.77863,2.15233a4.2546,4.2546,0,0,0,.05294.99912l.98177-.79562a11.61928,11.61928,0,0,1,3.02475-1.73267,3.82065,3.82065,0,0,0,.98178.92555,7.25871,7.25871,0,0,1,2.12239-.92555c.39823-.23684,1.03472-.02184,1.29254-.49439l.18185-.97958c-.02993-.02184-.05294-.06553-.10705-.05519a1.47981,1.47981,0,0,1-.79647-1.38659,1.41312,1.41312,0,0,1-.57088.14831c-.17035-.04139-.33378-.08508-.4086-.25869-.01036-.21385-.1197-.53693.09783-.69674a4.17121,4.17121,0,0,1,2.48725-.38862c.656.08738,1.60445.054,1.83235.829-.03223.2265-.01151.47484-.23825.62431-.2371.12877-.50528-.0115-.72166-.10923a1.78654,1.78654,0,0,1-1.05429,1.29232l.07367.62316c.07366.28054.09668.74274.53865.645a9.522,9.522,0,0,1,2.82218,1.3452,6.39327,6.39327,0,0,0,.75274-.95774,14.15437,14.15437,0,0,1,4.28967,2.84332l.05179-.90485a14.66469,14.66469,0,0,0-4.08249-2.50644,5.73606,5.73606,0,0,0,.13121-.88416,10.60957,10.60957,0,0,1,4.74775,1.45213l-.02186-.77378a10.53515,10.53515,0,0,0-4.88816-1.34405.52435.52435,0,0,1-.076-.33343,2.39186,2.39186,0,0,0,1.68042-1.80855c.44312-.50474,1.07846-1.05431.92768-1.80625.01843-.06323.04029-.12877.0633-.1943a.90942.90942,0,0,0,.04259-.55763Z"/><path id="path235" class="cls-3" d="M158.48344,51.75945l.88279-.28054.099-.49324c.24746-.722-.28084-1.26012-.5398-1.83039Z"/><path id="path237" class="cls-3" d="M160.71286,55.16845c.42011.46335.82984,1.20493,1.57338.97958a4.70516,4.70516,0,0,0-.33377-.85081c-.19336-.22535-.26012-.87151-.64684-.645-.2912-.19315-.36486-.51623-.55016-.77493a7.695,7.695,0,0,0-.04259,1.29117Z"/><path id="path239" class="cls-3" d="M160.86364,58.32105c.16229.22535.20716.51739.366.722a1.7606,1.7606,0,0,0,1.07961.12877c.32113-.07588.52714.27824.82754.07474-.37636-.23685-.60195-.66686-.95645-.98074C161.75909,57.93474,161.30675,58.22562,160.86364,58.32105Z"/><path id="path241" class="cls-3" d="M161.43568,63.3259a4.15694,4.15694,0,0,0,2.67946.72089c.107-.05289.2912-.04254.31191-.17132a16.55923,16.55923,0,0,0-1.90371-.95773c-.35566-.54843-.8195.14026-1.27182.09657C161.26188,63.14194,161.39079,63.23851,161.43568,63.3259Z"/><path id="path243" class="cls-3" d="M163.672,72.82625l.16229.34377c.16344,1.11985.87129,2.15117.48456,3.378.32343.22765.42011.60362.62614.90485h.053a7.22369,7.22369,0,0,0-.053-2.841c.09668-.84966-.76655-1.344-1.273-1.78556Z"/><path id="path245" class="cls-3" d="M163.85847,61.80823a2.4139,2.4139,0,0,0,2.09937.25869A6.604,6.604,0,0,1,164.762,61.292Z"/><path id="path247" class="cls-3" d="M166.5172,65.1103a1.17908,1.17908,0,0,0,.57089,1.05662,2.4645,2.4645,0,0,0,.33263-.79678,1.98505,1.98505,0,0,0-.77575-1.19573,2.67934,2.67934,0,0,0-.12775.93589Z"/><path id="path249" class="cls-3" d="M166.54943,70.01856c-.07712.50474.48341.57028.71936.84967.19452.23684-.12891.399-.12891.62431a2.90348,2.90348,0,0,1,.648,1.82809,17.96074,17.96074,0,0,0,.49491-1.95686c-.04373-.47485-.79648-.376-.67907-.9037a2.32343,2.32343,0,0,0-.183-1.551c-.04143-.07358-.14041-.22535-.22445-.18051C167.00061,69.16775,166.5172,69.48048,166.54943,70.01856Z"/><path id="path251" class="cls-3" d="M168.025,67.45693l.55936,1.08651c.24746-.03219.40859-.269.602-.4415.15077-.45185-.24862-.74274-.36486-1.10951-.09784-.25869,0-.60131-.18416-.82666-.14041-.08738-.30041-.22765-.46154-.184l-.15078,1.47512Z"/><path id="path253" class="cls-3" d="M168.74433,64.59407a3.1378,3.1378,0,0,1,1.18665,1.1302c.37637,1.098.97948,2.08563,1.42029,3.15145.1623.74273.29121,1.40614.49491,2.13623.07712.1943.03339.57027.33609.53808.084-.81747.24632-1.6039.25782-2.45356a3.18812,3.18812,0,0,0-.95875-.71974v-.07589c.04373-.18166.19566-.399.42011-.36446.09552-.10808.38788-.215.259-.40931-.56052-.55878-.5283-1.52112-1.42029-1.69473a.815.815,0,0,1-.42011-.75193,2.56556,2.56556,0,0,0-1.57568-.48634Z"/><path id="path255" class="cls-3" d="M169.26458,70.42673c.54786.50473.35566,1.23712.31191,1.91547-.08518.40931.43045.17016.59275.38747a2.34774,2.34774,0,0,1,.023,1.75336,10.4525,10.4525,0,0,0,.84942-1.31416c-.0092-.18166.22675-.269.21639-.49554.09552-.31158-.26932-.17131-.42125-.2035-.12891-.0322-.26818-.11843-.22445-.29089a2.643,2.643,0,0,0-.08748-1.72117c-.12891-.4415.05525-1.03362-.15193-1.42108C170.02767,69.51268,169.0033,69.61961,169.26458,70.42673Z"/><path id="path257" class="cls-3" d="M170.26476,62.78781c.95991.96924,1.6597,1.94192,2.69326,2.879a11.484,11.484,0,0,0-.053-1.21643,2.85347,2.85347,0,0,0-.66986-.72205c-.76425-.07358-1.16248-1.1026-1.97047-.94049Z"/><path id="path259" class="cls-3" d="M172.77272,67.91453a1.47013,1.47013,0,0,0,.11049.27939,14.16,14.16,0,0,1,1.10954,2.142c-.08748-.79678.45118-1.78556-.26128-2.39952-.09552-.25985-.41665-.17247-.62383-.15177l-.33493.12992Z"/><path id="path261" class="cls-3" d="M175.359,75.77419c.30155.14027.68943-.10692.98064-.27939a.88874.88874,0,0,1,.70093.2265c.08518.17131,0,.33343.03223.49554a6.541,6.541,0,0,1,1.85076.79563l.18186-.18281a1.26724,1.26724,0,0,0-.66757-1.05547c-.22445-.12877-.56052-.05289-.72051-.25754a1.11827,1.11827,0,0,0,.09668-.62431,1.5639,1.5639,0,0,1-.87129-.27939c-.18416-.054-.34644-.2058-.49723,0-.5375.36447-.56972.9037-1.08651,1.16124Z"/><path id="path263" class="cls-3" d="M176.11515,62.23479a1.95125,1.95125,0,0,0,.77461-.34608c.72281-.6565,1.76674-.215,2.6081-.22535a5.87275,5.87275,0,0,0-.59391-.829,2.48545,2.48545,0,0,0-.92652-.25755c-.73316-.43115-1.22693.29089-1.78861.645a1.19073,1.19073,0,0,0-.07365,1.01293Z"/><path id="path265" class="cls-3" d="M176.13355,64.45035c0-.03334,0-.06669.03223-.07474.099.08508-.01036.292.15193.33343a6.32029,6.32029,0,0,0,.79648-.51623c.72165,0,1.15327-.7002,1.86226-.7002a10.78573,10.78573,0,0,1,3.39306,1.03247,2.32812,2.32812,0,0,0-1.29138-1.64528.884.884,0,0,0-.86207.25869c-.72052.453-.34414-.6565-.84943-.67835a5.32944,5.32944,0,0,1-2.06944.36447c-.43046.16326-.73316.55993-1.21773.51623A2.80992,2.80992,0,0,0,176.13355,64.45035Z"/><path id="path267" class="cls-3" d="M176.63078,66.84872c.22559.23914.602.19545.92652.23914l.93689-.36792c.01036-.169-.27968-.215-.21523-.40815.259-.29089.61231-.08509.93688-.20351.45118-.06553.915-.51509,1.36736-.184-.0138.05519.01956.12877-.023.184-.13927.33343.09668.53808.35565.66685.5283.09658,1.02206.58177,1.55036.36447a9.69051,9.69051,0,0,0-.27854-1.26932c-.442-.07473-.755-.44035-1.16363-.59212a.881.881,0,0,1-.64684.27939c-.82985-.19431-1.822-.71054-2.661-.18281-.30155.36677-.84021.2587-1.24995.41966A4.88336,4.88336,0,0,0,176.63078,66.84872Z"/><path id="path269" class="cls-3" d="M176.98644,73.2459c-.06446.18281-.24746.48289.08747.57027.68829.0207,1.57223-.33457,2.11088.20351.183.14027.09553.43115.084.614l.90466.75308a7.9382,7.9382,0,0,0,.26127-1.34635,1.50887,1.50887,0,0,0-.55016-.90255c-.5939,0-.93688-.6933-1.57452-.60822-.33263-.07358-.62383.2219-.95875.2219a5.581,5.581,0,0,0-.36486.4944Z"/><path id="path271" class="cls-3" d="M177.24425,68.17207c.13927.29089.30271.76459.57089.79563a3.07537,3.07537,0,0,1,2.27317-.14832c.236.04139.236.31043.18416.48289.36486.215.80683.38747,1.1947.62317l-.10819-.64616c-.02186-.699-.90351-.76228-.95875-1.45213a4.25429,4.25429,0,0,0-2.29387-.12877c-.24746.22535-.60426.19545-.90352.25869-.02186.08623.02993.14142.04143.215Z"/><path id="path273" class="cls-3" d="M177.42725,71.65925c.42011-.11957.69059-.58062,1.14291-.62431a2.10988,2.10988,0,0,1,1.73452.8853c.25781.169.20372.61052.53865.61052a10.476,10.476,0,0,1,.0518-1.54986c-.45-.75193-1.57108-.17016-1.99118-1.05432l-.79647.054c-.572.14142-.42011.80827-.49491,1.26127-.06561.138-.19452.246-.1853.41736Z"/><path id="path275" class="cls-3" d="M181.382,76.36631c.33263.66686,1.06695,1.17274,1.14061,1.93617a3.51648,3.51648,0,0,0,.40859-.66685c-.0115-.215-.259-.215-.3545-.38747-.099-.27939.05179-.52658.09552-.77493a2.11347,2.11347,0,0,0-.85056-1.01178l-.43968.90485Z"/><path id="path277" class="cls-3" d="M182.70676,74.66584l.77461,1.05546a2.77637,2.77637,0,0,0,.20372-1.93732c-.07366-.11957-.21523-.31273-.40745-.22535C182.98644,73.85872,182.94271,74.32206,182.70676,74.66584Z"/><path id="path279" class="cls-3" d="M179.54963,45.21395a2.24788,2.24788,0,0,0,.8851.29089,1.11275,1.11275,0,0,1,.79647-.12878c.39823.2587.88279-.054,1.34663-.03219a4.9986,4.9986,0,0,0-1.34663-.85081C180.627,44.62068,180.14353,45.05184,179.54963,45.21395Z"/><path id="path281" class="cls-3" d="M183.76105,46.22343c.57088.054.98177.55992,1.36735.97958a1.919,1.919,0,0,1,1.14061.77378l-.1807-.56912a3.67323,3.67323,0,0,0-.85172-1.46478A4.24977,4.24977,0,0,0,183.76105,46.22343Z"/><path id="path283" class="cls-4" d="M143.56572,41.50487l.31306.03334c.83791.41966,2.1949.63466,2.27317,1.84994a6.61163,6.61163,0,0,0-2.35028,1.474c-.51563-.52659-1.56072-.23685-1.73452-1.16125C142.23059,42.82708,142.54135,41.72907,143.56572,41.50487Z"/><path id="path285" class="cls-4" d="M144.37484,46.96156c.98063-.08738,1.92788.05174,2.94073-.03334a1.28789,1.28789,0,0,1,.62383.56912c-.03338,1.1624-.38788,2.2719-.44083,3.46534a1.58962,1.58962,0,0,0-.98177,1.03247,8.48941,8.48941,0,0,0-1.14291.53693,1.14421,1.14421,0,0,1,.16344-1.21643c.4201-.591,1.50891-.453,1.42259-1.38889.27969-.4507.01152-1.03247.01957-1.505-.107-.35642-.21523.11842-.38672.10693a1.39918,1.39918,0,0,1-1.00135-.077c-.22674-.23684-.50413-.43115-.57089-.75193a1.76127,1.76127,0,0,1-.808-.699l.16228-.03909Z"/><path id="path287" class="cls-4" d="M145.55919,53.97386c.46039.06669.94725-.14027,1.34548.08738-.084.15177-.31191.215-.49491.2587l-.72281.33227C145.41877,54.589,145.56955,54.15782,145.55919,53.97386Z"/><path id="path289" class="cls-4" d="M147.44333,44.9909c.46154-.15062.95876-.46105,1.45368-.31273a7.03991,7.03991,0,0,0-.90352,1.24862L146.518,45.8946A2.09157,2.09157,0,0,1,147.44333,44.9909Z"/><path id="path291" class="cls-4" d="M151.76292,44.63678c.61346-.10693.58008.68869,1.14061.71859.099.12877.23939.24719.18416.4415a9.22374,9.22374,0,0,1-1.16364.15062c-.4857-.269-.17149-1.10836-.93689-1.05432-.04259-.06554-.12776-.19431-.02186-.23685A1.811,1.811,0,0,1,151.76292,44.63678Z"/><path id="path293" class="cls-4" d="M151.375,47.518a1.47014,1.47014,0,0,1,1.067-.48289l2.79.05173c.11855.10923-.10818.20581-.10818.33458-.1715.16212-.42011.20581-.57089.35527-.366.01035-.33377.4415-.5916.62546-.39939.39782-.98178.21386-1.44447.15062a1.26783,1.26783,0,0,1-.42125-.46335l-.12891.12877c.16229.60362.1197,1.27047.2394,1.88329l.66757.4415c.01036.98878,1.174.71974,1.67926,1.26932a2.959,2.959,0,0,1-.61347.95774,3.656,3.656,0,0,0-1.36736-.829c-.04374-.57832-.67906-.92439-1.03242-1.21413-.099-1.05547-.1197-2.13163-.29119-3.15375Z"/><path id="path295" class="cls-4" d="M152.3879,54.15782h1.29369l-.16229.6772-1.29484-.54843c-.02993-.10692.08747-.13912.16343-.12877Z"/><path id="path297" class="cls-4" d="M154.714,41.96822l.95875-.30124a9.68718,9.68718,0,0,1,1.57222.94624,3.785,3.785,0,0,1,.15077,2.53864c-.2912.32193-.92652,0-1.16247.51624h-.04489a4.70742,4.70742,0,0,0-2.30424-2.37653,1.991,1.991,0,0,1,.82984-1.32335Z"/></g></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#091c5a;}.cls-2,.cls-3,.cls-4{fill-rule:evenodd;}.cls-3{fill:#fff;}.cls-4{fill:#f60;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.55202" y="-3.16104" width="223.25536" height="134.51136"/><g id="Layer_1-2" data-name="Layer 1"><g id="g9"><g id="g11"><path id="path13" class="cls-2" d="M16.12,50.174a4.0335,4.0335,0,0,1,2.95108.89221c.671.6703.97142,1.7775.97142,3.5895V77.28841c0,3.13191-.6572,4.52885-4.536,4.52885h-.53175v1.38889H32.40618v-1.382l-.526-.0069c-3.84194-.046-4.48994-1.43489-4.48994-4.52885V54.65451c0-1.80625.29926-2.90885.97027-3.578a4.09567,4.09567,0,0,1,3.00288-.9037H32.405V48.76436H14.97474V50.1728H16.12Z"/><path id="path15" class="cls-2" d="M71.87064,71.6604a19.39223,19.39223,0,0,1-.34644-2.20406V59.119c-.06791-6.02811.755-9.02895-4.521-9.00595v-1.3544h12.137V50.113c-5.43373-.02185-4.75,2.979-4.78112,9.00595V83.25674l-1.72761-.0184L46.42269,55.8399a19.991,19.991,0,0,1,.33839,2.20291V74.97052c-.14848,6.17529.61691,6.92147,4.59927,6.849V83.2303H38.70774V81.81956c3.98811.0046,4.77192-.52543,4.76732-7.35262V58.19228l-.03223-2.64786c.14848-3.42739-1.11874-5.4153-4.98715-5.38311V48.80576h11.649Z"/><path id="path17" class="cls-2" d="M115.80547,48.101H114.468l-.06216.4576c-.09093.68295-.36025,1.82695-1.13945,1.82695a4.00888,4.00888,0,0,1-1.39959-.38977,24.64235,24.64235,0,0,0-9.17553-1.89478,20.48871,20.48871,0,0,0-14.69558,5.797,18.33213,18.33213,0,0,0-5.26915,13.16459A15.46005,15.46005,0,0,0,88.5551,79.24068c3.92826,3.35725,8.32957,4.78869,14.72551,4.78869a23.797,23.797,0,0,0,13.0589-3.27448l.81949-.4438V71.27984c0-3.84935.4719-4.44837,3.60715-4.57484l.50988-.01955V65.3437H105.95892v1.34175l.50988.01955c3.492.13567,4.15155.76113,4.15155,3.94363v8.369a11.54506,11.54506,0,0,1-6.84827,2.35583,12.59683,12.59683,0,0,1-9.042-3.75277c-2.81182-2.81112-4.18378-6.90537-4.18378-11.53195,0-4.98414,1.32822-9.2359,4.06522-11.9677a11.60427,11.60427,0,0,1,8.37331-3.38485,15.00838,15.00838,0,0,1,8.72321,3.125,10.23544,10.23544,0,0,1,3.64972,5.57282l.11395.37826h1.3075Z"/></g><g id="g19"><path id="path21" class="cls-3" d="M182.89436,83.113a4.21534,4.21534,0,0,0,2.43431-.73239,11.18164,11.18164,0,0,0,8.05563-1.85224,16.83129,16.83129,0,0,0,3.1341-3.29172,11.8419,11.8419,0,0,0,1.75752-3.271,15.19659,15.19659,0,0,0,.69519-2.30179,21.86771,21.86771,0,0,0-.8264-11.448,20.30835,20.30835,0,0,0-.75274-1.90513c-1.517-3.13191-3.58182-6.511-6.76079-8.492a13.57171,13.57171,0,0,1-4.45081-4.62773c-.55016-.49439-1.07731-1.14974-1.7886-1.26817a2.74406,2.74406,0,0,1,.46154,1.00948l-.04143.05289a2.62023,2.62023,0,0,1-1.86343-.86l.56973-.51624a3.05131,3.05131,0,0,0-.69979-.2058c-2.1742-.2472-3.96279.75538-5.89182,1.23827l-.02993.10693c1.18436.52659,1.43181,1.8304,2.12124,2.71225.17034-.20465.46154-.05519.69979-.07358.34414.01954.66757.26789,1.00134.18051a3.16388,3.16388,0,0,0-.20372-.77378,1.44144,1.44144,0,0,1,.67906,0c.62384.36447,1.624-.06439,2.013.77378a11.7115,11.7115,0,0,0-2.04642.35642c.04373.269.31307.48289.2912.75308a6.757,6.757,0,0,0-1.81047-.46105l-.03223.09543a6.23063,6.23063,0,0,0,3.04892,1.8396c1.62747.376,3.05929-.39781,4.63035-.12877a18.02291,18.02291,0,0,1,8.58624,9.63257c.07022.184.13811.37021.20143.55992a18.61636,18.61636,0,0,1,.22558,11.448,14.0279,14.0279,0,0,1-2.47343,4.18393,8.56677,8.56677,0,0,1-1.41225,1.38889,6.34321,6.34321,0,0,1-5.66623,1.24978c-.12891-.08853-.38788-.11038-.34413-.33458.07135-.30009.13811-.60362.19682-.9152a22.67024,22.67024,0,0,0,.40629-5.42795l-.00691-.2357a20.75277,20.75277,0,0,0-1.62861-7.38137,25.6873,25.6873,0,0,0-2.3215-4.0678,9.63728,9.63728,0,0,0-4.315-3.54926,3.23412,3.23412,0,0,0-3.28488.568,2.213,2.213,0,0,0-.75388,1.98216,6.78122,6.78122,0,0,1-3.10187.99913,8.50841,8.50841,0,0,1-.85057.123,4.7694,4.7694,0,0,1-.80337-.031,7.96716,7.96716,0,0,1-3.79245-1.743c-.02186-.55992-.05409-1.08651-.07595-1.67862a2.02344,2.02344,0,0,1-1.14061-1.6039l.053-.05289a4.569,4.569,0,0,1,.95875.46105,7.11353,7.11353,0,0,0-.72052-2.39952c-.389-.16211-.77691-.29089-1.14176-.48519a1.835,1.835,0,0,1-.75275-1.24633c.37637.36562,1.03243.23685,1.32361.62317-.50757-1.49582-.51563-3.20665-1.34663-4.57369-.42011-1.01063-1.51929-1.474-2.27317-2.21556-.29121-.35643-.40859-.85082-.93575-.906-.43161-.10693-.46384-.58982-.53865-.9037.26817.03219.49376.215.71935.25754-.62383-1.65449-1.174-3.49638-2.86362-4.55069l-.29.18395a18.30869,18.30869,0,0,1-2.0142.16212,2.77577,2.77577,0,0,1,1.21658-.80942,2.89527,2.89527,0,0,0-1.45713-.53578,3.02238,3.02238,0,0,1-1.40879.61281l-.05525-.04369c-.0115-.38746-.099-.86.48457-.95774a3.37957,3.37957,0,0,0-2.06024,0c-.16.41966-.62268.79678-.5893,1.29347a8.8185,8.8185,0,0,1-.91617,1.05431,9.93175,9.93175,0,0,1,.49377-2.29144c-.48456.18281-.97717.4415-1.45253.66685a19.90355,19.90355,0,0,0-2.38711-1.21643c-.07366-.03219-.2371-.06324-.20487.07588.70094.50474.42931,1.45328.50413,2.17187l-.442-.36447c-.21522-.54842-.83675-.94624-.94379-1.5487a8.2112,8.2112,0,0,0-1.88069.62431l-.09323.054a1.51447,1.51447,0,0,1,1.1832.79677,13.90309,13.90309,0,0,1-2.1972-.33573c-.07482-.07358-.14042-.16211-.259-.15061a4.08844,4.08844,0,0,0-1.03242.66685,7.23207,7.23207,0,0,0-1.85306,2.50875,1.62555,1.62555,0,0,1,.74353.18166c-.4086.24719-.76425.668-1.16248.9037a9.91065,9.91065,0,0,0-.15194,1.80855,7.96249,7.96249,0,0,0-.93574,1.42223,21.07216,21.07216,0,0,0-.74353,7.01345c-.21639.20581-.49722.33573-.69979.49669l.02186,2.19372h.05294c.09669-.461.64685-.71859.98063-1.03132h.10819c-.05409.49439-.11854.98993-.12891,1.49582l-.62382.51623c-.62613.54958-.09783,1.3774-.15078,2.06724.04374.18051.07367.45071.20373.4944a2.93668,2.93668,0,0,1,.46384-.7002c.26818-.06323.50528-.28054.75273-.31043a11.63258,11.63258,0,0,1-.53865,1.5809,1.82648,1.82648,0,0,0-.328.269.78186.78186,0,0,0-.22214.39781,48.97679,48.97679,0,0,0,2.12009,7.46645c-.59045,1.00143-.92653,2.17992-1.41915,3.21354-.07136.14372-.13466.292-.19336.4415-.49492,1.25093-.64569,2.65017-1.26147,3.85165a4.53928,4.53928,0,0,0-.79647-.41966,3.24358,3.24358,0,0,0-3.36083.75423,2.87922,2.87922,0,0,0-2.12354.38747,2.8125,2.8125,0,0,0-.9415,1.14975,2.33057,2.33057,0,0,0-.168,1.02442,2.47566,2.47566,0,0,0-.90352,1.3659,4.24846,4.24846,0,0,0,.85057,3.26527h53.6893Z"/><path id="path23" class="cls-3" d="M175.76409,58.91892c-.0115.27939-.21522.59327-.03222.829.259-.29089.69058-.28054,1.03472-.40816a8.4945,8.4945,0,0,1,2.76694.43115c-.22445-.35642-.37636-.75193-.62383-1.07616-.49723-.12877-1.25.215-1.33513-.51624-.30271-.25869-.77805-.07358-1.08768-.05518a2.442,2.442,0,0,0-.72281.79562Z"/><path id="path25" class="cls-3" d="M142.84405,49.629a.04228.04228,0,0,0-.01611-.01034l.0023.01034Z"/><path id="path27" class="cls-3" d="M146.75965,59.19256l.64684-.62316a.14234.14234,0,0,1,.12891.05519l-.05409,1.19343a1.68138,1.68138,0,0,0,1.10838.40931c.03338-.32308.28084-.54843.42125-.829.11855-.22535.04374-.55993.27968-.72205l.07367.07589a3.54473,3.54473,0,0,0,.2394,1.06466c.02187.17132.05294.38747.07367.53808a2.68832,2.68832,0,0,0,1.27066-.27938,4.897,4.897,0,0,1,.18185-1.11986c.099-.12992-.11854-.36562.15194-.35412.15077.32193.4201.65536.57088.99913a4.21056,4.21056,0,0,0,1.03357-2.32249c-.18185-.24949-.46269-.24949-.67907-.40931a8.10663,8.10663,0,0,0-5.94706.20351A2.76264,2.76264,0,0,0,146.75965,59.19256Z"/><path id="path29" class="cls-3" d="M129.64243,79.38439a16.69073,16.69073,0,0,0,.05179,2.42482,1.24434,1.24434,0,0,0,.79648.60362l.0564-.54958c.12776-.76573-.28084-1.57745.15077-2.22246a5.29213,5.29213,0,0,1,.86208.38747,1.88411,1.88411,0,0,0-.73317-1.96837Z"/><path id="path31" class="cls-3" d="M132.30117,78.2243a6.31616,6.31616,0,0,0-.22444,4.13564,4.69785,4.69785,0,0,0,.84827-.645,4.47782,4.47782,0,0,1,.40974-2.933,1.90626,1.90626,0,0,1,1.08767,1.16354,1.99076,1.99076,0,0,0,.33493-1.68093c.02187-.47139-.51908-.36332-.7769-.55877.08747-.39782.07481-.85887.49606-1.08422l-1.29254.12878A6.117,6.117,0,0,0,132.30117,78.2243Z"/><path id="path33" class="cls-3" d="M134.96221,81.93913c.05524.09888,0,.269.10819.29088.16229-.90255.89431-1.48892,1.29369-2.28454.19222-.269.1807-.64616.49377-.85082.42125,0,.72281.30239,1.13256.33458.1289.09658-.06676.18166-.076.28859a10.64931,10.64931,0,0,0-.31192,2.09253h.07367a10.88639,10.88639,0,0,0,1.37886-1.94192l.07366-.61166c.09668-.73239-.69979-1.20494-1.21657-1.50617l.46269-.59212-.64569-.2265a2.94409,2.94409,0,0,0-1.96126.98074,8.76291,8.76291,0,0,0-.80567,4.0264Z"/><path id="path35" class="cls-3" d="M137.86036,75.55344c.24745.07589.47305-.12877.71935-.0207A6.50642,6.50642,0,0,1,141.349,77.1033l.88394,2.24775.442-1.38659-.29119-.75423c-.24745-.53808-.92653-.4944-1.39037-.51624-.19221-.215.01151-.46335.07711-.66686.22444-.76343-.71245-.722-1.08881-1.03132.023-.46334-.53866-.30238-.85172-.34607l-.107-.12877a.22109.22109,0,0,0-.31192-.02185c-.023-.031-.06445-.05289-.04144-.10807l-.2394.05518a1.52256,1.52256,0,0,0-.56973,1.10721Z"/><path id="path37" class="cls-3" d="M138.48418,73.08034a.68248.68248,0,0,0,.22559.36447c.48571-.12877.94725-.46105,1.50777-.25869a8.54791,8.54791,0,0,0,2.35028,1.64758l.31076-.05518c.19451.06668.4086.07588.53866.29088.11969.29088-.1807.46335-.27969.699.48571.35527.2912.99108.5939,1.41993l.77576-1.03247c-.18185-.453.01036-1.22678-.70094-1.26932a.68071.68071,0,0,1-.38788-.62546c-.46154-.41966-1.03242-.60131-1.49741-1.03132-.37637-.30238-.602-.76573-1.08767-.87265a4.0232,4.0232,0,0,0-1.08536-.36447C139.02284,71.88576,138.95954,72.74462,138.48418,73.08034Z"/><path id="path39" class="cls-3" d="M139.51775,70.96021l.13006.20465c.5375-.03334,1.02436-.269,1.55265-.25869.3545.21615.81834.2058,1.1832.38746a4.16613,4.16613,0,0,0,1.03243,1.11986c.87474.12762,1.35814,1.06466,1.6597,1.75221v-.33343a2.29774,2.29774,0,0,0-.18416-1.41879c-.21523-.21615-.52715-.35757-.75274-.55073a.4412.4412,0,0,1,.03223-.33342,7.06473,7.06473,0,0,0-1.23844-.82782c-.57088-.829-1.67005-.60247-2.54249-.829l-.87244,1.08766Z"/><path id="path41" class="cls-3" d="M139.50048,63.06605c.09554.33458.21293.75424.27624,1.10836.30155-.66685.8966-.96579,1.42374-1.51537a2.71574,2.71574,0,0,0-1.0117-.36677v-.01954C139.95166,62.50843,139.58565,62.74527,139.50048,63.06605Z"/><path id="path43" class="cls-3" d="M141.45714,66.60612l.48455-.49439a3.05352,3.05352,0,0,0,.95876-1.70047,1.38095,1.38095,0,0,0-1.13025.05288,13.542,13.542,0,0,0-.31307,2.142Z"/><path id="path45" class="cls-3" d="M141.81164,68.12378a3.14312,3.14312,0,0,0,2.06944-.2242l.602-1.93847a1.4573,1.4573,0,0,0-.56974-.03219A4.70661,4.70661,0,0,1,141.81164,68.12378Z"/><path id="path47" class="cls-3" d="M142.03032,61.25865a4.30737,4.30737,0,0,0,2.12239,1.73152c-.09668-.90255-.87128-1.528-1.27066-2.30179l-.023-.2587a4.02318,4.02318,0,0,0-1.01285-.668,5.06389,5.06389,0,0,0,.18416,1.497Z"/><path id="path49" class="cls-3" d="M144.65683,68.21a3.766,3.766,0,0,0,1.7115-.16326c.76654-.18051,1.18664-1.021,1.44446-1.67633H146.854l-1.03472,1.01063a8.134,8.134,0,0,0-1.16248.829Z"/><path id="path51" class="cls-3" d="M144.54059,60.28022a6.26631,6.26631,0,0,0,1.0025,2.32478l.1289-1.60389Z"/><path id="path53" class="cls-3" d="M148.07177,64.46529a7.99875,7.99875,0,0,0-.22214-1.70967c-.32457-.21615-.77806-.19431-1.11068-.40816A3.15534,3.15534,0,0,0,148.07177,64.46529Z"/><path id="path55" class="cls-3" d="M147.09113,69.93348a10.67122,10.67122,0,0,0,1.959-.79792c.39823-.568,1.0025-1.08766,1.08766-1.75336-.49491.13912-.92653-.0207-1.38807.2058a3.54546,3.54546,0,0,1-.991,1.44064C147.67353,69.3931,147.27414,69.6426,147.09113,69.93348Z"/><path id="path57" class="cls-3" d="M148.14542,71.25684l.808,1.05317A1.63775,1.63775,0,0,0,150.3,72.15939l-.29119-.95774A3.748,3.748,0,0,1,148.14542,71.25684Z"/><path id="path59" class="cls-3" d="M149.49321,63.63633l.31191,1.42108a2.86382,2.86382,0,0,0,.8874-2.45356,3.36646,3.36646,0,0,1-1.19931,1.03248Z"/><path id="path61" class="cls-3" d="M151.61445,66.14507a1.03182,1.03182,0,0,0,.18416.55993c.83905.30008.92538,1.3222,1.70228,1.70967a1.93037,1.93037,0,0,0,1.5285-.25869c-.33378-.376-.71246-.637-1.03357-1.03363-.22675-.09657-.45348-.23684-.442-.51623l-1.93939-.46105Z"/><path id="path63" class="cls-3" d="M152.282,71.2235a2.50207,2.50207,0,0,0,1.37886.75193c-.08518-.11842.05525,0,.076-.07473l-.648-1.41764c-.32227.00805-.656.07359-.95761.05289a2.932,2.932,0,0,0,.15077.68755Z"/><path id="path65" class="cls-3" d="M153.42492,64.59407a8.29551,8.29551,0,0,1-.51449-2.32249c-.32342.38631-.6572.63466-.95876,1.03132C151.81125,64.09967,152.94956,64.29513,153.42492,64.59407Z"/><path id="path67" class="cls-3" d="M154.73818,63.864c.38789.50473,1.23845.33227,1.715.18166-.22789-.38747-.95761-.61282-1.08652-1.03247a9.2708,9.2708,0,0,0-.46384-2.14083C154.52526,61.78639,154.07062,62.87405,154.73818,63.864Z"/><path id="path69" class="cls-3" d="M155.41609,66.14507c1.07846.78643,2.13275,1.69933,3.64051,1.3659.10819-.07588.29121-.06554.31307-.20465-.44312-.28054-.915-.49555-1.3685-.75194l-.51563-.75423h-.23709a9.44988,9.44988,0,0,1-1.83234.34492Z"/><path id="path71" class="cls-3" d="M155.43912,74.87164h.07365a5.817,5.817,0,0,1,2.1765-.90485c.206.07474.076.30124.259.38862.46384-.19431,1.02436-.15062,1.49741-.31273a3.25554,3.25554,0,0,1,1.4974.28054c.36486.48289,1.05545.43115,1.5308.75193l-.076-.75193c-1.00134-1.17389-2.56436-1.26013-4.00537-1.23713l-.03339-.15177a2.56766,2.56766,0,0,0-1.05429.22766,5.4674,5.4674,0,0,0-1.34779.38631A12.10932,12.10932,0,0,0,155.43912,74.87164Z"/><path id="path73" class="cls-3" d="M156.3035,61.64727a1.82108,1.82108,0,0,0,1.75523.829,2.04259,2.04259,0,0,1-.808-1.23827c.10818-.95774-.94725-1.03248-1.464-1.52917A6.46965,6.46965,0,0,0,156.3035,61.64727Z"/><path id="path75" class="cls-3" d="M156.19416,76.77677h.12545c.572-.35757,1.40188-.08738,1.9624-.46449.31191-.16212.33264.269.55016.38746.52714.32308.59161,1.29,1.33513,1.06582.89316.46219.66757,1.551.6998,2.34663l.82984-.51624c-.076-.41966.16-.92784-.10935-1.29232-.20372-.461-.76308-.50473-1.03242-.88185.32343-.54958-.40859-.806-.56052-1.20493l.04373-.05519,1.13946.15062a1.70681,1.70681,0,0,1,.648,1.06581c.89429.15062,1.10954,1.16124,1.42259,1.8074.183-.4415.25781-.9152.442-1.344.01036-.35643-.46384-.35643-.69979-.51624a1.93012,1.93012,0,0,0-.79647-1.39924,11.86661,11.86661,0,0,0-2.95109-.79678l-.90581.28054c-.49607.11843-1.02322-.03219-1.39959.31043-.56282.04254-.60541.65766-.74352,1.05662Z"/><path id="path77" class="cls-3" d="M156.76274,72.3422l.206.09658c.43967-.20581.88279-.4415,1.34663-.614.72052-.20465,1.281.614,1.88529.09773.22559-.16211.41781.07473.59161.20466.259.47369.86207.4415,1.3144.57027-.22559-.61282-.50527-1.45328-1.29254-1.55216a7.51723,7.51723,0,0,1-.98063-.31043c-.8287-.91405-1.36736.75193-2.27317.34377A2.52534,2.52534,0,0,0,156.76274,72.3422Z"/><path id="path79" class="cls-3" d="M156.96877,77.58275c.34413.28858.69863.78527,1.23615.71974.671.31273.39018,1.19343.75618,1.65678l.38672-.34493-.03222-.02069.05525-.054.023.03219a2.0546,2.0546,0,0,0-.22789-1.27047c-.24745-.17016-.53865.0115-.7746-.15062a1.09008,1.09008,0,0,0-.49607-.73124c-.17264-.12877-.39939.04369-.59275.0322l-.33377.13107Z"/><path id="path81" class="cls-3" d="M158.3154,64.46529a5.55242,5.55242,0,0,0,1.59409,1.36705,2.56212,2.56212,0,0,0,1.52963.15062,9.81419,9.81419,0,0,1-1.27067-1.26013c-.15078-.215-.18416-.48289-.38789-.6772a3.03893,3.03893,0,0,0-1.46518.41966Z"/><path id="path83" class="cls-3" d="M158.90929,60.61479c.49723.61167,1.26146.36562,1.96125.38632v-.07358l-1.07732-.906a2.89313,2.89313,0,0,0-.88395.59327Z"/><path id="path85" class="cls-3" d="M139.08038,50.46714l.62383,1.93732c-.01151-1.098.49492-2.01206.38787-3.13076l.46384-.68985-.98177.30124A3.65173,3.65173,0,0,0,139.08038,50.46714Z"/><path id="path87" class="cls-3" d="M139.50048,47.10988l.84942-.49554v-1.259a4.48161,4.48161,0,0,0-.8287.87265Z"/><path id="path89" class="cls-3" d="M156.97107,49.06905a1.19894,1.19894,0,0,1-.77461.38746,3.67584,3.67584,0,0,0,.31077-2.91805,4.1337,4.1337,0,0,0,.72281-.25755l-.023-.02069.59391-.51854c.78611-.53808.48456-1.559.77575-2.32248-.38789-.60362-.50527-1.33486-1.067-1.8419l.03338-.01954c-.44312-.55993-1.23959-.49669-1.845-.77608-.79647-.269-1.41.27939-1.98081.64731-.24746.04139-.09668.36447-.366.35412a10.975,10.975,0,0,0-.442,1.26932,4.31213,4.31213,0,0,0-3.06963.57027,4.528,4.528,0,0,0-1.5308-.54843c-.38672-.07473-.8287.06554-1.10723-.15176-.4086-.46105-.49722-1.30152-1.19816-1.41879-.2463-.08623-.29925-.35412-.29925-.59212-.46384-.07473-.87474-.28858-1.32707-.38746-.68713-.31273-1.23614.184-1.75408.51623a5.25766,5.25766,0,0,0-.69864.25985,9.84935,9.84935,0,0,0-1.0025,1.881,3.90855,3.90855,0,0,0,.5939,1.49582,3.04313,3.04313,0,0,0,1.67926,1.52916,6.33505,6.33505,0,0,0,0,3.4113l-.01841.01034-.03453.0299a.58263.58263,0,0,1-.2981-.0299h-.01382a4.69041,4.69041,0,0,0,1.418,2.69846c.28084.09888.21639.43115.33609.6473a.50681.50681,0,0,1,.05179.38632,8.45573,8.45573,0,0,0-4.52332,1.129c-.34414.17246-.19221.64731-.22443.97958a8.29853,8.29853,0,0,1,3.10071-1.29,4.68319,4.68319,0,0,1,1.49741-.02185l.0541.92555c-1.281.66685-2.68177,1.05432-3.78094,2.15232a4.33246,4.33246,0,0,0,.05524,1.00143l.98062-.79792a11.6634,11.6634,0,0,1,3.0259-1.73152,3.77848,3.77848,0,0,0,.98177.9244,7.31094,7.31094,0,0,1,2.12124-.9244c.39939-.23685,1.03243-.02184,1.29139-.49439l.18416-.97958c-.03337-.02185-.05294-.06324-.10819-.05174a1.48293,1.48293,0,0,1-.79647-1.38889,1.44813,1.44813,0,0,1-.57089.15061c-.17264-.04369-.33263-.08508-.40859-.25869-.01152-.21615-.1197-.53808.09553-.699a4.16086,4.16086,0,0,1,2.48955-.38631c.656.08508,1.6056.05174,1.83.829-.02992.22535-.01036.47255-.236.62317-.2371.12877-.50528-.0115-.7228-.10693a1.77678,1.77678,0,0,1-1.05544,1.29l.07711.62547c.07367.28053.09553.74158.53866.645a9.44458,9.44458,0,0,1,2.821,1.3452,6.71664,6.71664,0,0,0,.75275-.95774,14.0769,14.0769,0,0,1,4.28737,2.83987l.05525-.9037a14.74542,14.74542,0,0,0-4.08365-2.50759,5.4797,5.4797,0,0,0,.12891-.88186,10.55747,10.55747,0,0,1,4.75121,1.45328l-.023-.77493a10.5652,10.5652,0,0,0-4.89047-1.3452.54213.54213,0,0,1-.07365-.33458,2.39866,2.39866,0,0,0,1.68156-1.80855c.43968-.50474,1.07731-1.05432.92652-1.80625.01957-.06094.04143-.12762.0633-.192A.89683.89683,0,0,0,156.97107,49.06905Z"/><path id="path91" class="cls-3" d="M158.46962,51.83419l.88279-.28054.09552-.49439c.24976-.72089-.27738-1.259-.53866-1.8304l-.43967,2.60532Z"/><path id="path93" class="cls-3" d="M160.69676,55.24548c.42011.46105.82984,1.20494,1.57452.97729a4.70035,4.70035,0,0,0-.33493-.84852c-.19567-.22765-.259-.87266-.64684-.645-.29121-.1943-.36486-.51853-.55016-.77607A7.70054,7.70054,0,0,0,160.69676,55.24548Z"/><path id="path95" class="cls-3" d="M160.84867,58.39579c.1623.22764.206.51853.36486.722a1.73913,1.73913,0,0,0,1.07731.12877c.32343-.07474.5283.27938.82985.07358-.37522-.2357-.60081-.66685-.95875-.97728C161.74068,58.00947,161.29065,58.30035,160.84867,58.39579Z"/><path id="path97" class="cls-3" d="M161.41956,63.40063a4.15073,4.15073,0,0,0,2.67946.722c.107-.05519.2912-.04369.31191-.17361a16.4528,16.4528,0,0,0-1.90256-.95774c-.35679-.54843-.81949.14027-1.27181.09658C161.24692,63.21782,161.37583,63.31555,161.41956,63.40063Z"/><path id="path99" class="cls-3" d="M163.6582,72.901l.1623.34607c.16229,1.11985.87128,2.15117.4834,3.37795.32343.22535.42125.60132.625.90255h.05409a7.20248,7.20248,0,0,0-.05409-2.841C165.02556,73.83687,164.16349,73.34133,163.6582,72.901Z"/><path id="path101" class="cls-3" d="M163.8435,61.883a2.41114,2.41114,0,0,0,2.09938.25869,6.52278,6.52278,0,0,1-1.19586-.77493Z"/><path id="path103" class="cls-3" d="M166.5011,65.18733a1.16819,1.16819,0,0,0,.57088,1.05432,2.43338,2.43338,0,0,0,.33263-.79562,1.96665,1.96665,0,0,0-.7746-1.19344A2.63554,2.63554,0,0,0,166.5011,65.18733Z"/><path id="path105" class="cls-3" d="M166.53447,70.09215c-.076.50474.4834.57142.72051.85081.19452.2357-.12891.39781-.12891.62316a2.917,2.917,0,0,1,.6457,1.8304,17.75417,17.75417,0,0,0,.49837-1.95917c-.04373-.47254-.79647-.376-.67907-.90255a2.32852,2.32852,0,0,0-.18415-1.54871c-.04374-.077-.14042-.22765-.22445-.184C166.9845,69.24364,166.5011,69.55407,166.53447,70.09215Z"/><path id="path107" class="cls-3" d="M168.01,67.53166l.55936,1.08651c.24861-.02989.40745-.269.602-.4392.15193-.453-.24745-.74388-.36486-1.1095-.099-.2587,0-.60247-.18416-.829-.13927-.08508-.3027-.22535-.46384-.184L168.01,67.53166Z"/><path id="path109" class="cls-3" d="M168.73052,64.6711a3.12267,3.12267,0,0,1,1.1832,1.1279c.37866,1.098.98177,2.08794,1.42259,3.1526.1623.74274.2912,1.405.49607,2.13738.076.19086.03223.568.33493.53693.08518-.81747.24746-1.60274.25782-2.45356a3.27005,3.27005,0,0,0-.95875-.722v-.07358c.04373-.184.19452-.399.42125-.36447.09552-.11037.38672-.21615.259-.40931-.56053-.55878-.5283-1.52341-1.42375-1.697a.81076.81076,0,0,1-.41781-.75194A2.57346,2.57346,0,0,0,168.73052,64.6711Z"/><path id="path111" class="cls-3" d="M169.24616,70.50261c.55016.50359.35795,1.236.31306,1.91433-.08517.40931.43162.17246.59391.38746a2.35091,2.35091,0,0,1,.01957,1.75452,10.4958,10.4958,0,0,0,.85172-1.313c-.0115-.184.22445-.269.21639-.49439.09552-.31273-.26932-.17247-.42011-.207-.12891-.03219-.26932-.11842-.22789-.28973a2.61957,2.61957,0,0,0-.08518-1.72117c-.12891-.44265.05525-1.03247-.15077-1.41994-.34414.4737-1.3685.58177-1.11069,1.3889Z"/><path id="path113" class="cls-3" d="M170.24865,62.8614c.95991.96923,1.6597,1.94192,2.69327,2.879a10.94378,10.94378,0,0,0-.05409-1.21643,2.88166,2.88166,0,0,0-.66871-.71974C171.456,63.72831,171.05665,62.70043,170.24865,62.8614Z"/><path id="path115" class="cls-3" d="M172.75892,67.99041a1.67306,1.67306,0,0,0,.107.27939,14.09906,14.09906,0,0,1,1.11068,2.14083c-.08632-.79448.45348-1.78671-.259-2.39837-.09668-.2587-.42011-.17246-.625-.15177Z"/><path id="path117" class="cls-3" d="M175.344,75.85123c.30271.13682.68943-.11038.98063-.28054a.87836.87836,0,0,1,.70094.22535c.08517.17131,0,.33228.02992.49439a6.57991,6.57991,0,0,1,1.85421.79563l.1807-.18167a1.26335,1.26335,0,0,0-.66641-1.05316c-.22559-.13223-.56168-.05519-.72052-.261a1.11879,1.11879,0,0,0,.09553-.62316,1.55743,1.55743,0,0,1-.87359-.28054c-.1807-.05289-.34414-.2035-.49491,0-.5375.36677-.56973.9037-1.08652,1.1647Z"/><path id="path119" class="cls-3" d="M176.099,62.30952a1.93532,1.93532,0,0,0,.77574-.34377c.71936-.65651,1.76559-.21616,2.60465-.22651a5.80718,5.80718,0,0,0-.59161-.829,2.48076,2.48076,0,0,0-.92652-.2587c-.73316-.42885-1.22693.29089-1.78861.645A1.2039,1.2039,0,0,0,176.099,62.30952Z"/><path id="path121" class="cls-3" d="M176.11975,64.52393c0-.02989,0-.06439.03223-.07358.09668.08623-.01151.28973.15077.33227a6.17547,6.17547,0,0,0,.79647-.51393c.72282,0,1.15327-.69905,1.86227-.69905a10.68366,10.68366,0,0,1,3.393,1.03132,2.33031,2.33031,0,0,0-1.29024-1.64758.892.892,0,0,0-.86322.25869c-.72282.45415-.34414-.65536-.85057-.67835a5.32056,5.32056,0,0,1-2.06715.36792c-.43161.15981-.73432.55647-1.21772.51508a2.69774,2.69774,0,0,0,.05409,1.10721Z"/><path id="path123" class="cls-3" d="M176.61582,66.92575c.22444.2357.60081.192.92652.2357l.93574-.36447c.01151-.17246-.27968-.2173-.21638-.40816.259-.29089.61577-.08738.93688-.20695.45464-.06324.91732-.51509,1.36736-.18167-.01037.05289.023.12993-.01957.18167-.14271.33457.09668.53808.3545.66685.52829.09888,1.02322.58292,1.55151.36562a9.51228,9.51228,0,0,0-.28084-1.26932c-.44081-.07588-.75274-.44151-1.16247-.59327a.88421.88421,0,0,1-.64684.28054c-.82984-.19316-1.82084-.7094-2.6599-.18166-.3027.36446-.84136.25754-1.24995.41735A4.76723,4.76723,0,0,0,176.61582,66.92575Z"/><path id="path125" class="cls-3" d="M176.97031,73.32064c-.06561.18281-.24745.48519.08518.57027.69059.023,1.57338-.33228,2.11318.20465.18186.14142.09552.43.08518.614l.90351.75423a7.79436,7.79436,0,0,0,.259-1.3475,1.50589,1.50589,0,0,0-.54786-.9037c-.59391,0-.93918-.6933-1.57452-.60477-.33263-.077-.62268.21845-.95875.21845a5.46294,5.46294,0,0,0-.36486.49439Z"/><path id="path127" class="cls-3" d="M177.22929,68.24911c.13927.28858.3027.76343.57088.79562a3.06363,3.06363,0,0,1,2.27318-.15062c.23709.04254.23709.31158.18416.4852.36485.215.808.38516,1.1947.62316l-.10705-.645c-.023-.70019-.90581-.76573-.95991-1.45558a4.26533,4.26533,0,0,0-2.29387-.12762c-.24976.2265-.60312.19431-.90582.25984C177.166,68.11918,177.21779,68.17207,177.22929,68.24911Z"/><path id="path129" class="cls-3" d="M177.41345,71.73514c.42011-.11843.68713-.58178,1.14061-.62317a2.09987,2.09987,0,0,1,1.73335.88186c.26128.17131.206.614.53866.614a10.63492,10.63492,0,0,1,.05525-1.551c-.45464-.75193-1.57108-.17246-1.99233-1.05431l-.79647.05289c-.57089.14026-.41895.80827-.49723,1.26012-.06445.14027-.19336.24719-.18186.41966Z"/><path id="path131" class="cls-3" d="M181.36357,76.44105c.33493.66685,1.06925,1.17389,1.14291,1.93847a3.636,3.636,0,0,0,.40975-.66685c-.01151-.21616-.26012-.21616-.358-.38747-.09668-.27939.05525-.52659.09784-.77608a2.0831,2.0831,0,0,0-.85057-1.01063Z"/><path id="path133" class="cls-3" d="M182.6918,74.74172l.7746,1.05432a2.77878,2.77878,0,0,0,.20373-1.93847c-.07366-.11843-.21523-.31158-.40859-.22535-.29235.30238-.33378.76343-.56973,1.1095Z"/><path id="path135" class="cls-3" d="M179.53353,45.28868a2.24177,2.24177,0,0,0,.88279.28974,1.13981,1.13981,0,0,1,.79878-.12877c.39822.25869.88279-.054,1.34433-.0322a4.97122,4.97122,0,0,0-1.34433-.84851C180.61084,44.69656,180.12742,45.12542,179.53353,45.28868Z"/><path id="path137" class="cls-3" d="M183.74723,46.30046c.56858.05289.97833.55762,1.36619.98073a1.90839,1.90839,0,0,1,1.14177.77378l-.183-.57142a3.64422,3.64422,0,0,0-.84942-1.46248A4.16621,4.16621,0,0,0,183.74723,46.30046Z"/><path id="path139" class="cls-4" d="M143.54845,41.57845l.31192.0322c.84136.41965,2.19836.63466,2.27316,1.84994a6.65645,6.65645,0,0,0-2.34567,1.474c-.51679-.52773-1.563-.23685-1.73451-1.16124.16228-.87151.47305-1.96722,1.49511-2.19487Z"/><path id="path141" class="cls-4" d="M144.35873,47.03515c.97832-.08508,1.92673.05174,2.94073-.0322a1.28566,1.28566,0,0,1,.62382.57028c-.03222,1.16124-.38787,2.27075-.442,3.46418a1.593,1.593,0,0,0-.97947,1.03362,8.56608,8.56608,0,0,0-1.14291.53694,1.13061,1.13061,0,0,1,.16343-1.21414c.41895-.59326,1.50777-.453,1.41915-1.38889.28084-.453.01151-1.03362.023-1.50732-.1082-.35412-.21523.11843-.38788.10693a1.407,1.407,0,0,1-1.0002-.07358c-.22788-.23915-.50758-.43116-.572-.75424a1.76066,1.76066,0,0,1-.80682-.70019Z"/><path id="path143" class="cls-4" d="M145.54308,54.0509c.46039.06323.94724-.14027,1.34548.08508a.76951.76951,0,0,1-.49492.25869l-.72165.33458C145.40266,54.66256,145.55344,54.23256,145.54308,54.0509Z"/><path id="path145" class="cls-4" d="M147.42837,45.06448c.46154-.15061.95876-.46105,1.45367-.31043a6.94972,6.94972,0,0,0-.90351,1.24632l-1.47554-.031A2.07707,2.07707,0,0,1,147.42837,45.06448Z"/><path id="path147" class="cls-4" d="M151.748,44.71036c.61231-.10693.58008.6887,1.1406.722.09784.12877.23826.246.183.4392a9.36874,9.36874,0,0,1-1.16478.15062c-.48455-.269-.17035-1.10835-.93689-1.05432-.04144-.06323-.12891-.19315-.02072-.23684a1.84978,1.84978,0,0,1,.79878-.0207Z"/><path id="path149" class="cls-4" d="M151.36008,47.59507a1.47446,1.47446,0,0,1,1.0658-.48519l2.79.054c.11854.10692-.107.2035-.107.33342-.17264.161-.42126.20466-.572.35643-.36486.01149-.33493.4392-.59275.62316-.39939.39781-.97947.21615-1.44331.15061a1.23609,1.23609,0,0,1-.4201-.46334l-.12891.12877c.16228.60362.11854,1.27162.23595,1.88328l.66756.44265c.0115.98994,1.17513.72089,1.68156,1.27047a3.01238,3.01238,0,0,1-.61231.95774,3.60154,3.60154,0,0,0-1.36851-.829c-.04259-.58178-.67792-.9244-1.03472-1.21644-.09669-1.05431-.11855-2.13047-.2889-3.1526Z"/><path id="path151" class="cls-4" d="M152.37179,54.23256h1.29368l-.16229.67835-1.29369-.54958c-.02993-.10693.08632-.13912.16228-.12877Z"/><path id="path153" class="cls-4" d="M154.6979,42.043l.95875-.30238a9.8012,9.8012,0,0,1,1.57222.94624,3.79291,3.79291,0,0,1,.15077,2.53864c-.2912.32422-.92652,0-1.16247.51623h-.04373A4.73417,4.73417,0,0,0,153.868,43.364a1.99415,1.99415,0,0,1,.82984-1.32106Z"/><path id="path155" class="cls-3" d="M177.16368,83.03714h5.74678a4.19586,4.19586,0,0,0,2.43315-.73354,11.18837,11.18837,0,0,0,8.05679-1.84879,16.85025,16.85025,0,0,0,3.13294-3.29172,11.86918,11.86918,0,0,0,1.75869-3.27218,15.34137,15.34137,0,0,0,.694-2.30294,21.89843,21.89843,0,0,0-.82294-11.44917q-.33838-.98822-.755-1.90283c-1.517-3.13191-3.57952-6.50986-6.76079-8.492a13.59174,13.59174,0,0,1-4.45081-4.62773c-.55016-.49669-1.07846-1.152-1.78861-1.27047a2.80076,2.80076,0,0,1,.46384,1.01063l-.04373.054a2.61325,2.61325,0,0,1-1.86342-.86231l.572-.51509a3.03215,3.03215,0,0,0-.70093-.20351c-2.17649-.24719-3.96394.75194-5.89066,1.23713l-.03223.10693c1.1832.52658,1.43065,1.82809,2.12124,2.71225.17264-.20581.46384-.05519.69979-.077.34414.02184.66757.269,1.0002.18281a2.93834,2.93834,0,0,0-.20372-.77263,1.41244,1.41244,0,0,1,.67906,0c.62384.36447,1.62632-.06669,2.0142.77263a11.71047,11.71047,0,0,0-2.04642.35527c.04259.269.31191.48519.2912.75423a6.76,6.76,0,0,0-1.81047-.46335l-.02993.09543a6.23676,6.23676,0,0,0,3.04662,1.8419c1.62632.376,3.05813-.39782,4.62921-.12878a18.02506,18.02506,0,0,1,8.58738,9.63257q.10533.27594.20143.55763a18.62885,18.62885,0,0,1,.22558,11.44917,14.03917,14.03917,0,0,1-2.47343,4.18622,8.75984,8.75984,0,0,1-1.41339,1.3889,6.33518,6.33518,0,0,1-5.66393,1.24632c-.12775-.08393-.389-.10692-.34644-.33228.07252-.29893.13927-.60476.198-.914a22.6888,22.6888,0,0,0,.40745-5.428c-.00461-.07934-.00576-.15867-.00921-.23685a20.6976,20.6976,0,0,0-1.62861-7.38022,25.55947,25.55947,0,0,0-2.32036-4.069,9.62886,9.62886,0,0,0-4.315-3.55156,3.23207,3.23207,0,0,0-3.28488.57142,2.20463,2.20463,0,0,0-.755,1.97871,6.74322,6.74322,0,0,1-3.10187,1.00143c-.27738.02415-.56282.12417-.84943.123a4.61755,4.61755,0,0,1-.80223-.03334,7.92788,7.92788,0,0,1-3.79474-1.743c-.02187-.55648-.05525-1.08651-.076-1.67633a2.03111,2.03111,0,0,1-1.14061-1.6039l.05525-.054a4.50416,4.50416,0,0,1,.95645.46335,7.05416,7.05416,0,0,0-.72051-2.39952c-.38789-.16211-.77805-.28974-1.14291-.48519a1.83812,1.83812,0,0,1-.75159-1.24863c.37522.36792,1.03243.238,1.32361.62547-.50527-1.49582-.51679-3.20665-1.34663-4.57369-.42011-1.01178-1.51929-1.474-2.27317-2.21786-.29121-.35412-.40859-.84851-.93689-.9037-.43045-.10693-.46384-.59212-.53865-.90255.26932.031.4949.215.72281.25754-.62613-1.65793-1.17513-3.49638-2.86592-4.55069l-.2912.18166a17.72235,17.72235,0,0,1-2.0142.16211,2.76692,2.76692,0,0,1,1.21773-.80827,2.91273,2.91273,0,0,0-1.45828-.53808,2.98388,2.98388,0,0,1-1.40765.61281l-.05295-.04139c-.0115-.38631-.10128-.86231.48111-.95774a3.35505,3.35505,0,0,0-2.05794,0c-.16228.41966-.62152.79563-.5916,1.29a8.63919,8.63919,0,0,1-.915,1.05546,9.91874,9.91874,0,0,1,.49377-2.29144c-.48456.18166-.97717.4392-1.45022.66685a19.83278,19.83278,0,0,0-2.38826-1.21528c-.076-.03334-.23826-.06553-.206.07359.69979.50588.42931,1.45212.50413,2.17416l-.442-.36446c-.21523-.54958-.83791-.94739-.9438-1.551a8.21409,8.21409,0,0,0-1.88069.62546l-.09434.05289a1.52225,1.52225,0,0,1,1.18434.79562,13.99584,13.99584,0,0,1-2.196-.33227c-.076-.07589-.13927-.16212-.26012-.15062a4.14032,4.14032,0,0,0-1.03357.668,7.23513,7.23513,0,0,0-1.85192,2.50645,1.65587,1.65587,0,0,1,.74353.184c-.40743.24719-.76424.66685-1.16363.9037a9.89383,9.89383,0,0,0-.15077,1.80855,8.11181,8.11181,0,0,0-.93689,1.41878,21.09215,21.09215,0,0,0-.74238,7.01575c-.21638.20351-.49721.33573-.69979.49554l.02187,2.19487h.05294c.099-.46335.648-.72089.98062-1.03247h.1082c-.053.49439-.11855.98878-.12891,1.49582l-.625.51623c-.62267.54843-.09553,1.3751-.15077,2.0638.04489.184.07481.453.20717.49668a2.87074,2.87074,0,0,1,.46039-.699c.26933-.06669.50528-.28054.75274-.31273a11.22631,11.22631,0,0,1-.53866,1.5809,1.97587,1.97587,0,0,0-.328.269.77591.77591,0,0,0-.21754.40011,48.28943,48.28943,0,0,0,2.11894,7.46645c-.5939.99913-.92883,2.17877-1.4226,3.21239-.0702.14487-.13351.29089-.19336.4415-.49492,1.25207-.64569,2.649-1.26146,3.8528a4.23881,4.23881,0,0,0-.79532-.42081,3.24968,3.24968,0,0,0-3.36084.75308,2.88821,2.88821,0,0,0-2.12469.38632,2.83353,2.83353,0,0,0-.94034,1.15319,2.33367,2.33367,0,0,0-.16689,1.02212,2.47136,2.47136,0,0,0-.90466,1.3659,4.23953,4.23953,0,0,0,.84941,3.26528h47.94481Z"/><path id="path157" class="cls-4" d="M198.16314,60.14q-.33839-.9882-.75505-1.90283c-1.517-3.13191-3.57951-6.50986-6.76079-8.492a13.59171,13.59171,0,0,1-4.4508-4.62773c-.55016-.49669-1.07846-1.152-1.78861-1.27047a2.80076,2.80076,0,0,1,.46384,1.01063l-.04373.054a2.61329,2.61329,0,0,1-1.86343-.86231l.572-.51509a3.03178,3.03178,0,0,0-.70093-.2035c-2.1765-.2472-3.96394.75193-5.89066,1.23712l-.03223.10693c1.1832.52658,1.43065,1.8281,2.12124,2.71225.17264-.2058.46384-.05519.69979-.077.34414.02184.66757.269,1.0002.18281a2.938,2.938,0,0,0-.20373-.77263,1.41248,1.41248,0,0,1,.67907,0c.62384.36447,1.62632-.06669,2.0142.77263a11.7103,11.7103,0,0,0-2.04642.35527c.04258.269.3119.48519.2912.75423a6.76018,6.76018,0,0,0-1.81048-.46335l-.02992.09543a6.23667,6.23667,0,0,0,3.04662,1.8419c1.62631.376,3.05812-.39782,4.6292-.12878A18.02507,18.02507,0,0,1,195.89114,59.58q.10532.27594.20142.55763a18.62885,18.62885,0,0,1,.22559,11.44917,14.03938,14.03938,0,0,1-2.47343,4.18622,8.76024,8.76024,0,0,1-1.41339,1.3889,6.33518,6.33518,0,0,1-5.66393,1.24632c-.12775-.08393-.389-.10692-.34644-.33228.07252-.29893.13927-.60476.198-.914a22.68829,22.68829,0,0,0,.40744-5.42795c-.0046-.07934-.00576-.15867-.0092-.23685a20.6976,20.6976,0,0,0-1.62861-7.38022,25.55877,25.55877,0,0,0-2.32037-4.06895,9.62889,9.62889,0,0,0-4.315-3.55157,3.23208,3.23208,0,0,0-3.28487.57143,2.20461,2.20461,0,0,0-.755,1.97871,6.74322,6.74322,0,0,1-3.10187,1.00143c-.27738.02414-.56283.12417-.84943.123a4.61751,4.61751,0,0,1-.80223-.03334,7.92787,7.92787,0,0,1-3.79475-1.743c-.02186-.55648-.05525-1.08651-.076-1.67633a2.03111,2.03111,0,0,1-1.14061-1.6039l.05525-.054a4.50416,4.50416,0,0,1,.95645.46335,7.05411,7.05411,0,0,0-.72052-2.39952c-.38788-.16211-.77805-.28974-1.14291-.48519a1.83807,1.83807,0,0,1-.75158-1.24863c.37522.36792,1.03243.238,1.32361.62546-.50527-1.49581-.51679-3.20664-1.34663-4.57368-.42011-1.01178-1.51929-1.474-2.27318-2.21786-.2912-.35412-.40859-.84852-.93688-.9037-.43045-.10693-.46384-.59212-.53866-.90255.26932.031.49491.215.72282.25754-.62614-1.65793-1.17514-3.49638-2.86592-4.5507l-.2912.18166a17.72026,17.72026,0,0,1-2.0142.16212,2.76672,2.76672,0,0,1,1.21772-.80827,2.91266,2.91266,0,0,0-1.45827-.53808,2.98388,2.98388,0,0,1-1.40765.61281l-.053-.04139c-.0115-.38631-.10128-.86231.48111-.95774a3.35505,3.35505,0,0,0-2.05794,0c-.16229.41966-.62153.79563-.5916,1.29a8.63919,8.63919,0,0,1-.915,1.05546,9.91874,9.91874,0,0,1,.49377-2.29144c-.48456.18166-.97717.4392-1.45023.66685a19.83129,19.83129,0,0,0-2.38826-1.21528c-.076-.03334-.23825-.06553-.206.07358.69979.50589.42931,1.45213.50413,2.17417l-.442-.36446c-.21523-.54958-.8379-.9474-.94379-1.551a8.21409,8.21409,0,0,0-1.88069.62546l-.09437.05289a1.52225,1.52225,0,0,1,1.18434.79562,13.99584,13.99584,0,0,1-2.196-.33227c-.076-.07589-.13927-.16212-.26012-.15062a4.14032,4.14032,0,0,0-1.03357.668,7.23513,7.23513,0,0,0-1.85192,2.50645,1.65587,1.65587,0,0,1,.74353.184c-.40743.24719-.76424.66685-1.16363.9037a9.89383,9.89383,0,0,0-.15077,1.80855,8.11181,8.11181,0,0,0-.93689,1.41878,21.09212,21.09212,0,0,0-.74238,7.01575c-.21638.20351-.49721.33573-.69979.49554l.02187,2.19487h.05294c.099-.46335.648-.72089.98062-1.03247h.1082c-.053.49439-.11855.98878-.12891,1.49582l-.625.51623c-.62267.54843-.09553,1.3751-.15077,2.06379.04489.184.07481.453.20717.49669a2.87074,2.87074,0,0,1,.46039-.699c.26933-.06669.50528-.28054.75274-.31273a11.22631,11.22631,0,0,1-.53866,1.5809,1.97587,1.97587,0,0,0-.328.269.77591.77591,0,0,0-.21754.40011,48.28943,48.28943,0,0,0,2.11894,7.46645c-.5939.99913-.92883,2.17877-1.4226,3.21239-.0702.14487-.13351.29088-.19336.4415-.49492,1.25207-.64569,2.649-1.26146,3.8528a4.23881,4.23881,0,0,0-.79532-.42081,3.24966,3.24966,0,0,0-3.36084.75308,2.88821,2.88821,0,0,0-2.12469.38632,2.83353,2.83353,0,0,0-.94034,1.15319,2.33367,2.33367,0,0,0-.16689,1.02212,2.47133,2.47133,0,0,0-.90466,1.3659,4.23953,4.23953,0,0,0,.84941,3.26528h19.0336a6.1998,6.1998,0,0,1-.73432-1.19343c-.40744-.61512-.12776-1.48548-.1715-2.196.38787-.78183.78151-1.56825,1.22463-2.33283.08978-.15407.17955-.30468.27163-.45415l.87359-.33343c.46269,0,.85172-.33343,1.29254-.21615.59275.59327.59275-.591,1.16479-.645,1.33513-.17246,2.65989-.04369,3.41262,1.08651,0,.15062.23939.15062.18416.29088-.17264.05174-.33494-.05518-.51679-.05518-.81834-.20351-1.77825-.722-2.58509-.2587-.03107.19316-.07251.38977-.11164.58293a5.92083,5.92083,0,0,0-.09438.60016,3.26005,3.26005,0,0,1,1.36736.93589,2.18365,2.18365,0,0,1,1.34663-.93589,3.12879,3.12879,0,0,1,1.29368.38747c.67907.62546.34414,1.69013.28084,2.48575.61232.34377,1.29138.53923,1.91522.8715a3.02285,3.02285,0,0,1-1.03243.49669l-1.03356-.2058c-.11855-.08508-.32457-.08508-.36716-.2357a5.40593,5.40593,0,0,0-.97947,1.32221h14.75542a7.78958,7.78958,0,0,0-.68943-1.19344,6.13143,6.13143,0,0,1-.21522-2.21786l1.37886-2.09828a12.7526,12.7526,0,0,1,2.42278-.15062.89919.89919,0,0,0,.11855-.06324c.33953-.23454.44312-.77953.9484-.71169a2.78554,2.78554,0,0,1,2.27318.57143,1.067,1.067,0,0,1-.06906.14027c-.28428.45415-.816-.05289-1.20392.08393-.16229.17246.076.376.107.57143.14041.192-.14041.17016-.236.2035a.73919.73919,0,0,1-.64684-.2035c-.04259-.05519-.01036-.11843-.09552-.12878a3.32243,3.32243,0,0,0-.55016.97844,2.678,2.678,0,0,1,.69979.77608c.24746.35527-.19452.62316-.27968.93589a.09313.09313,0,0,1-.16229,0c-.22789-.12877-.42012-.453-.66871-.36792-.21639.95889.07481,1.91663-.05409,2.87437a8.10353,8.10353,0,0,0,1.36735,0l.18416-2.02355a6.6221,6.6221,0,0,1,1.88529-3.41245c.98868-.6749,1.62632.65881,2.35719,1.121.11971.02185.07712.15062.12891.22535-.01036.21615-.236.30124-.38672.36677-.45348.15981-.78727-.33458-1.067-.62546-.26818.29088-.38789.6772-.6998.90485l.107.031a2.3539,2.3539,0,0,1,.77805,1.20609,1.35665,1.35665,0,0,1-.648,1.06581,10.655,10.655,0,0,1-.71936-1.551c.01036.023-.01266.03219-.03339.05519-.5939.15981-.75158.82667-.85056,1.3659.03223.52773-.366.74273-.26012,1.26932h7.68157a4.19588,4.19588,0,0,0,2.43315-.73354,11.18837,11.18837,0,0,0,8.05679-1.84879,16.8506,16.8506,0,0,0,3.13294-3.29173,11.86868,11.86868,0,0,0,1.75868-3.27217,15.339,15.339,0,0,0,.694-2.30294A21.895,21.895,0,0,0,198.16314,60.14Z"/><path id="path159" class="cls-4" d="M148.73357,80.111c.4201-.269,1.09918-.33457,1.19471-.95774a1.47548,1.47548,0,0,0-.51678-.33457l-.442.12877a5.28667,5.28667,0,0,1,.26127-.82782l1.4203-.4622a11.48493,11.48493,0,0,0-.33494,2.19487,7.88493,7.88493,0,0,0,.85172,3.18479h-1.53079c-.1715-1.01062-1.22924-1.74416-.90352-2.9261Z"/><path id="path161" class="cls-4" d="M152.04146,78.81872h.08517l1.03241.937.15078-.03219c-.084,1.098-.13927,2.17416-.15078,3.31356H152.0403a13.56532,13.56532,0,0,1-.56052-3.33426,4.99585,4.99585,0,0,1,.56167-.88416Z"/><path id="path163" class="cls-4" d="M154.34454,79.85349c.206-.26789.2912-.722.69979-.77378a1.1012,1.1012,0,0,1,.77805.25754c.37636.47255.00806,1.07732-.12891,1.54986a18.16283,18.16283,0,0,1-.648,2.15117H153.9578l.38672-3.18479Z"/><path id="path165" class="cls-4" d="M170.68487,79.51891c.23709.30239.31191.71055.66756.97959a2.026,2.026,0,0,0,.2371-1.64644l-.31191-.31273c.39938-.09542.81834-.12877,1.21772-.2035a4.4808,4.4808,0,0,0-.442,1.75337c.01036.96923.17149,1.93847.25781,2.94794h-1.18435a6.52127,6.52127,0,0,1-.82984-2.94794,2.59333,2.59333,0,0,1,.38788-.57028Z"/><path id="path167" class="cls-3" d="M175.78021,58.84534c-.0115.27938-.21522.58982-.03338.829.26127-.29088.69059-.28053,1.03586-.40931a8.48974,8.48974,0,0,1,2.76694.43116c-.22558-.35642-.37636-.75424-.625-1.07616-.49607-.12993-1.24995.215-1.33513-.51854-.30155-.25754-.77461-.07358-1.08768-.05289a2.40781,2.40781,0,0,0-.72165.79678Z"/><path id="path169" class="cls-3" d="M142.859,49.55309l-.01611-.0115.0023.0115Z"/><path id="path171" class="cls-3" d="M146.77577,59.119l.64684-.62316a.14435.14435,0,0,1,.1289.05174l-.05294,1.19459a1.68226,1.68226,0,0,0,1.10723.40931c.03338-.32193.28084-.54958.42126-.829.11854-.22535.04373-.55878.27968-.71859l.076.07358a3.38674,3.38674,0,0,0,.2371,1.06467c.02187.17246.0518.38631.07252.53808a2.67058,2.67058,0,0,0,1.27183-.28054,4.84565,4.84565,0,0,1,.18185-1.1164c.099-.12993-.11855-.36792.15077-.35642.15193.32308.4201.65535.572,1.00143a4.18475,4.18475,0,0,0,1.03243-2.32479c-.18185-.246-.46154-.246-.67907-.40816A8.10915,8.10915,0,0,0,146.27855,57,2.73811,2.73811,0,0,0,146.77577,59.119Z"/><path id="path173" class="cls-3" d="M129.65625,79.31081a16.53493,16.53493,0,0,0,.05294,2.42482,1.22915,1.22915,0,0,0,.79877.60131l.05294-.54958c.12891-.76343-.27968-1.574.15194-2.22016a5.202,5.202,0,0,1,.86207.38632,1.88581,1.88581,0,0,0-.73432-1.97067Z"/><path id="path175" class="cls-3" d="M132.31728,78.14727a6.33747,6.33747,0,0,0-.22558,4.13793,4.88988,4.88988,0,0,0,.84941-.64616,4.46571,4.46571,0,0,1,.40975-2.933,1.90653,1.90653,0,0,1,1.08651,1.16125,1.98112,1.98112,0,0,0,.33609-1.67633c.02186-.47485-.51679-.36562-.77576-.55993.08517-.399.07366-.85886.49492-1.08651l-1.29139.12877A6.12846,6.12846,0,0,0,132.31728,78.14727Z"/><path id="path177" class="cls-3" d="M134.97832,81.86555c.0541.09543,0,.269.10935.29088.16-.90485.892-1.49007,1.29254-2.288.19221-.26559.183-.645.49491-.84851.419,0,.72166.30124,1.13141.33343.12891.09773-.06675.184-.07712.29088a10.70922,10.70922,0,0,0-.31191,2.09254h.07481a11.01166,11.01166,0,0,0,1.37886-1.94192l.07367-.61167c.099-.73238-.69749-1.20493-1.21773-1.50731l.46384-.59327-.64684-.22535a2.93892,2.93892,0,0,0-1.9601.98073,8.73222,8.73222,0,0,0-.80568,4.02756Z"/><path id="path179" class="cls-3" d="M137.87647,75.47986c.24631.07358.47305-.12877.71936-.023a6.54938,6.54938,0,0,1,2.76923,1.57056l.88394,2.25.442-1.39-.2912-.75079c-.24861-.53808-.92653-.49439-1.39037-.51623-.19336-.21616.01036-.46335.076-.66686.22559-.76458-.7113-.722-1.08767-1.03362.02187-.46105-.53865-.30238-.85171-.34377l-.107-.12877a.21956.21956,0,0,0-.31306-.023c-.01957-.03219-.06331-.054-.04144-.10692l-.236.05289a1.51378,1.51378,0,0,0-.572,1.1095Z"/><path id="path181" class="cls-3" d="M138.49915,73.00445a.70588.70588,0,0,0,.22559.36562c.4857-.12877.95069-.46449,1.50891-.25869a8.50231,8.50231,0,0,0,2.34913,1.64529l.31307-.05289c.19221.06324.40744.07358.53636.29088.11969.29089-.18185.46105-.27738.6979.4834.35642.29119.98993.5916,1.41993l.77459-1.03132c-.1807-.453.01152-1.22678-.69749-1.27047a.67444.67444,0,0,1-.39017-.62316c-.46154-.41966-1.03243-.60246-1.49512-1.03362-.37982-.30008-.60426-.76228-1.08766-.87035a3.96155,3.96155,0,0,0-1.08767-.36448C139.039,71.80872,138.9745,72.66988,138.49915,73.00445Z"/><path id="path183" class="cls-3" d="M139.535,70.88432l.12891.207c.53866-.03334,1.02206-.269,1.55036-.25984.35449.215.81834.2035,1.18434.38746a4.12313,4.12313,0,0,0,1.03243,1.11755c.87359.12877,1.357,1.06812,1.65855,1.75451v-.33227a2.33094,2.33094,0,0,0-.1807-1.42224c-.21639-.215-.5306-.35412-.755-.54613a.4431.4431,0,0,1,.03223-.33457,7.1713,7.1713,0,0,0-1.2396-.83012c-.57088-.829-1.66775-.60017-2.54134-.829l-.87013,1.08766Z"/><path id="path185" class="cls-3" d="M139.5166,62.99132c.09553.33458.21177.75308.27738,1.1095.3004-.66685.89545-.96923,1.4226-1.51651a2.72042,2.72042,0,0,0-1.0117-.36562v-.02185C139.96663,62.43139,139.60062,62.66939,139.5166,62.99132Z"/><path id="path187" class="cls-3" d="M141.47325,66.53254l.48341-.4944a3.05413,3.05413,0,0,0,.95876-1.70162,1.38289,1.38289,0,0,0-1.12911.05519,13.52666,13.52666,0,0,0-.31307,2.14083Z"/><path id="path189" class="cls-3" d="M141.82775,68.0502a3.13625,3.13625,0,0,0,2.06944-.22765l.60426-1.93617c-.19566-.0115-.39017-.09888-.572-.03219A4.71936,4.71936,0,0,1,141.82775,68.0502Z"/><path id="path191" class="cls-3" d="M142.04644,61.18507a4.34558,4.34558,0,0,0,2.12124,1.73152c-.09553-.90485-.87129-1.52916-1.27067-2.3018l-.02186-.25869a3.95548,3.95548,0,0,0-1.01285-.66685,5.07956,5.07956,0,0,0,.18415,1.49582Z"/><path id="path193" class="cls-3" d="M144.6718,68.13528a3.81885,3.81885,0,0,0,1.71264-.16211c.76425-.184,1.1855-1.02213,1.44331-1.67748H146.869l-1.03243,1.01063a7.84181,7.84181,0,0,0-1.16478.829Z"/><path id="path195" class="cls-3" d="M144.55555,60.20548a6.29052,6.29052,0,0,0,1.00365,2.32479l.12776-1.6039Z"/><path id="path197" class="cls-3" d="M148.08672,64.39056a7.839,7.839,0,0,0-.22329-1.70967c-.32342-.21615-.7746-.19546-1.10953-.40816A3.16459,3.16459,0,0,0,148.08672,64.39056Z"/><path id="path199" class="cls-3" d="M147.10725,69.85645a10.78421,10.78421,0,0,0,1.96125-.79562c.39824-.57143,1.0002-1.08651,1.08767-1.75336-.49837.13912-.92653-.023-1.39037.20465a3.549,3.549,0,0,1-.991,1.44178C147.68849,69.31722,147.29026,69.56557,147.10725,69.85645Z"/><path id="path201" class="cls-3" d="M148.16154,71.17981l.808,1.05432a1.64194,1.64194,0,0,0,1.34663-.14947l-.28889-.95659A3.7721,3.7721,0,0,1,148.16154,71.17981Z"/><path id="path203" class="cls-3" d="M149.50817,63.56274l.31192,1.41879a2.84394,2.84394,0,0,0,.8874-2.45126,3.33978,3.33978,0,0,1-1.19931,1.03247Z"/><path id="path205" class="cls-3" d="M151.63171,66.068a1.01937,1.01937,0,0,0,.1807.55992c.84021.30239.92653,1.32221,1.70343,1.70968a1.90776,1.90776,0,0,0,1.52733-.2587c-.33263-.376-.709-.63466-1.03242-1.03132-.22559-.09658-.45464-.23685-.442-.51623l-1.93708-.46335Z"/><path id="path207" class="cls-3" d="M152.29927,71.14877a2.49355,2.49355,0,0,0,1.37656.75078c-.08517-.11727.05526,0,.076-.07358l-.64684-1.42109c-.32342.0115-.65835.077-.95876.05519A2.96467,2.96467,0,0,0,152.29927,71.14877Z"/><path id="path209" class="cls-3" d="M153.441,64.52048a8.4368,8.4368,0,0,1-.51563-2.32364c-.32112.38747-.656.63581-.95876,1.03133C151.82623,64.02379,152.96684,64.2181,153.441,64.52048Z"/><path id="path211" class="cls-3" d="M154.75315,63.78694c.39018.50819,1.23959.33573,1.71379.184-.22675-.38746-.95645-.61511-1.08536-1.03132a9.15929,9.15929,0,0,0-.46384-2.14083C154.54138,61.71165,154.08558,62.79931,154.75315,63.78694Z"/><path id="path213" class="cls-3" d="M155.43222,66.068c1.07731.78528,2.1339,1.70047,3.63937,1.3659.10818-.07359.29234-.06554.31306-.20351-.442-.27939-.915-.49669-1.36735-.75423l-.51564-.75193h-.23709a9.3318,9.3318,0,0,1-1.83234.34377Z"/><path id="path215" class="cls-3" d="M155.45408,74.79461h.07712a5.75149,5.75149,0,0,1,2.17419-.9037c.206.07588.076.30238.26011.38747.46269-.192,1.02323-.15062,1.49627-.31159a3.23156,3.23156,0,0,1,1.49741.27824c.36831.4852,1.05544.43,1.53079.75423l-.07712-.75423c-1.0002-1.17274-2.56206-1.25782-4.00537-1.236l-.03223-.15062a2.57021,2.57021,0,0,0-1.05544.22535,5.56019,5.56019,0,0,0-1.34664.38631A12.4153,12.4153,0,0,0,155.45408,74.79461Z"/><path id="path217" class="cls-3" d="M156.31961,61.57138a1.81879,1.81879,0,0,0,1.75522.83012c-.36486-.35757-.78727-.73354-.808-1.23828.10819-.95774-.94724-1.03477-1.464-1.52916A6.49646,6.49646,0,0,0,156.31961,61.57138Z"/><path id="path219" class="cls-3" d="M156.20912,76.69859h.12891c.56973-.35412,1.39958-.08393,1.96011-.46105.31191-.16211.33377.269.549.38747.52829.32077.5939,1.29,1.33627,1.06466.892.4622.66756,1.54871.69979,2.34433l.82984-.51509c-.076-.41965.16229-.92554-.10819-1.29116-.20486-.4622-.76538-.50474-1.03472-.8807.32457-.54958-.40859-.80942-.56052-1.20724l.04489-.05289,1.14177.15062a1.70414,1.70414,0,0,1,.64684,1.06581c.892.15062,1.10724,1.16124,1.42029,1.80625.18416-.44035.259-.9152.442-1.3452.0115-.35527-.46268-.35527-.69979-.51624a1.90869,1.90869,0,0,0-.79647-1.39694,11.6983,11.6983,0,0,0-2.94994-.79677l-.90466.27824c-.49723.11957-1.02436-.031-1.40188.31158C156.391,75.688,156.34953,76.30192,156.20912,76.69859Z"/><path id="path221" class="cls-3" d="M156.77885,72.26632l.206.09773c.442-.20466.88279-.4415,1.34664-.614.71935-.2035,1.27987.614,1.88528.09658.22445-.15981.42012.07589.59045.20581.26242.47254.86323.44035,1.31671.568-.22675-.61167-.50757-1.451-1.29368-1.54871a7.62835,7.62835,0,0,1-.97948-.31158c-.82984-.914-1.36735.75423-2.27547.34608A2.50171,2.50171,0,0,0,156.77885,72.26632Z"/><path id="path223" class="cls-3" d="M156.98487,77.50686c.34414.29088.69979.78643,1.23959.72089.66641.31158.38673,1.19459.75159,1.65793l.38788-.34492-.03223-.023.05409-.05289.023.02989a2.04957,2.04957,0,0,0-.22789-1.26932c-.24631-.17131-.53636.0115-.77461-.15062a1.07486,1.07486,0,0,0-.49491-.73008c-.17264-.13107-.39938.04139-.59391.02989Z"/><path id="path225" class="cls-3" d="M158.33151,64.39056a5.56876,5.56876,0,0,0,1.59408,1.3659,2.5546,2.5546,0,0,0,1.52964.14946,9.8703,9.8703,0,0,1-1.27068-1.25782c-.15193-.21615-.18416-.48634-.38788-.67835a3.01852,3.01852,0,0,0-1.46518.42081Z"/><path id="path227" class="cls-3" d="M158.92541,60.54006c.49491.61282,1.26032.36562,1.96011.38746v-.07588l-1.07731-.9037A2.84368,2.84368,0,0,0,158.92541,60.54006Z"/><path id="path229" class="cls-3" d="M139.0965,50.3924l.62382,1.93732c-.01151-1.098.49722-2.01435.389-3.1319l.46154-.68985-.98063.30238A3.63165,3.63165,0,0,0,139.0965,50.3924Z"/><path id="path231" class="cls-3" d="M139.5166,47.03515l.85056-.49439V45.28063a4.54179,4.54179,0,0,0-.82985.87036Z"/><path id="path233" class="cls-3" d="M156.98717,48.99316a1.18942,1.18942,0,0,1-.77575.38632,3.66467,3.66467,0,0,0,.31307-2.91576,4.382,4.382,0,0,0,.72052-.25754l-.02187-.023.59275-.51623c.78611-.53808.48341-1.55906.77461-2.32364-.38673-.60132-.50527-1.3337-1.06579-1.83959l.03222-.02185c-.442-.55992-1.23845-.49439-1.84156-.77378-.79877-.269-1.41224.27939-1.98427.645-.24745.04369-.09552.36562-.36486.35412a11.06065,11.06065,0,0,0-.44311,1.27047,4.30918,4.30918,0,0,0-3.06849.57028,4.48169,4.48169,0,0,0-1.52964-.54843c-.38788-.077-.8287.06323-1.10838-.15177-.4086-.46105-.49722-1.30151-1.19816-1.41879-.24746-.08738-.29926-.35642-.29926-.59326-.46384-.077-.87474-.29089-1.32477-.38747-.68943-.31273-1.23844.184-1.75523.51624a5.21969,5.21969,0,0,0-.70094.25754,10.171,10.171,0,0,0-1.0025,1.88328,3.96035,3.96035,0,0,0,.5939,1.49582,3.051,3.051,0,0,0,1.67927,1.52917,6.32644,6.32644,0,0,0,0,3.409l-.01727.0115-.03452.03219a.57186.57186,0,0,1-.29811-.03219h-.01381a4.72,4.72,0,0,0,1.4203,2.70075c.28084.09658.21522.43116.33263.645a.50262.50262,0,0,1,.05524.38746,8.467,8.467,0,0,0-4.52561,1.1302c-.34415.17247-.19336.645-.22559.97959a8.30813,8.30813,0,0,1,3.10186-1.29232,4.74967,4.74967,0,0,1,1.49742-.02184l.05294.92784c-1.27988.668-2.68176,1.05432-3.77863,2.15233a4.2546,4.2546,0,0,0,.05294.99912l.98177-.79562a11.61928,11.61928,0,0,1,3.02475-1.73267,3.82065,3.82065,0,0,0,.98178.92555,7.25871,7.25871,0,0,1,2.12239-.92555c.39823-.23684,1.03472-.02184,1.29254-.49439l.18185-.97958c-.02993-.02184-.05294-.06553-.10705-.05519a1.47981,1.47981,0,0,1-.79647-1.38659,1.41312,1.41312,0,0,1-.57088.14831c-.17035-.04139-.33378-.08508-.4086-.25869-.01036-.21385-.1197-.53693.09783-.69674a4.17121,4.17121,0,0,1,2.48725-.38862c.656.08738,1.60445.054,1.83235.829-.03223.2265-.01151.47484-.23825.62431-.2371.12877-.50528-.0115-.72166-.10923a1.78654,1.78654,0,0,1-1.05429,1.29232l.07367.62316c.07366.28054.09668.74274.53865.645a9.522,9.522,0,0,1,2.82218,1.3452,6.39327,6.39327,0,0,0,.75274-.95774,14.15437,14.15437,0,0,1,4.28967,2.84332l.05179-.90485a14.66469,14.66469,0,0,0-4.08249-2.50644,5.73606,5.73606,0,0,0,.13121-.88416,10.60957,10.60957,0,0,1,4.74775,1.45213l-.02186-.77378a10.53515,10.53515,0,0,0-4.88816-1.34405.52435.52435,0,0,1-.076-.33343,2.39186,2.39186,0,0,0,1.68042-1.80855c.44312-.50474,1.07846-1.05431.92768-1.80625.01843-.06323.04029-.12877.0633-.1943a.90942.90942,0,0,0,.04259-.55763Z"/><path id="path235" class="cls-3" d="M158.48344,51.75945l.88279-.28054.099-.49324c.24746-.722-.28084-1.26012-.5398-1.83039Z"/><path id="path237" class="cls-3" d="M160.71286,55.16845c.42011.46335.82984,1.20493,1.57338.97958a4.70516,4.70516,0,0,0-.33377-.85081c-.19336-.22535-.26012-.87151-.64684-.645-.2912-.19315-.36486-.51623-.55016-.77493a7.695,7.695,0,0,0-.04259,1.29117Z"/><path id="path239" class="cls-3" d="M160.86364,58.32105c.16229.22535.20716.51739.366.722a1.7606,1.7606,0,0,0,1.07961.12877c.32113-.07588.52714.27824.82754.07474-.37636-.23685-.60195-.66686-.95645-.98074C161.75909,57.93474,161.30675,58.22562,160.86364,58.32105Z"/><path id="path241" class="cls-3" d="M161.43568,63.3259a4.15694,4.15694,0,0,0,2.67946.72089c.107-.05289.2912-.04254.31191-.17132a16.55923,16.55923,0,0,0-1.90371-.95773c-.35566-.54843-.8195.14026-1.27182.09657C161.26188,63.14194,161.39079,63.23851,161.43568,63.3259Z"/><path id="path243" class="cls-3" d="M163.672,72.82625l.16229.34377c.16344,1.11985.87129,2.15117.48456,3.378.32343.22765.42011.60362.62614.90485h.053a7.22369,7.22369,0,0,0-.053-2.841c.09668-.84966-.76655-1.344-1.273-1.78556Z"/><path id="path245" class="cls-3" d="M163.85847,61.80823a2.4139,2.4139,0,0,0,2.09937.25869A6.604,6.604,0,0,1,164.762,61.292Z"/><path id="path247" class="cls-3" d="M166.5172,65.1103a1.17908,1.17908,0,0,0,.57089,1.05662,2.4645,2.4645,0,0,0,.33263-.79678,1.98505,1.98505,0,0,0-.77575-1.19573,2.67934,2.67934,0,0,0-.12775.93589Z"/><path id="path249" class="cls-3" d="M166.54943,70.01856c-.07712.50474.48341.57028.71936.84967.19452.23684-.12891.399-.12891.62431a2.90348,2.90348,0,0,1,.648,1.82809,17.96074,17.96074,0,0,0,.49491-1.95686c-.04373-.47485-.79648-.376-.67907-.9037a2.32343,2.32343,0,0,0-.183-1.551c-.04143-.07358-.14041-.22535-.22445-.18051C167.00061,69.16775,166.5172,69.48048,166.54943,70.01856Z"/><path id="path251" class="cls-3" d="M168.025,67.45693l.55936,1.08651c.24746-.03219.40859-.269.602-.4415.15077-.45185-.24862-.74274-.36486-1.10951-.09784-.25869,0-.60131-.18416-.82666-.14041-.08738-.30041-.22765-.46154-.184l-.15078,1.47512Z"/><path id="path253" class="cls-3" d="M168.74433,64.59407a3.1378,3.1378,0,0,1,1.18665,1.1302c.37637,1.098.97948,2.08563,1.42029,3.15145.1623.74273.29121,1.40614.49491,2.13623.07712.1943.03339.57027.33609.53808.084-.81747.24632-1.6039.25782-2.45356a3.18812,3.18812,0,0,0-.95875-.71974v-.07589c.04373-.18166.19566-.399.42011-.36446.09552-.10808.38788-.215.259-.40931-.56052-.55878-.5283-1.52112-1.42029-1.69473a.815.815,0,0,1-.42011-.75193,2.56556,2.56556,0,0,0-1.57568-.48634Z"/><path id="path255" class="cls-3" d="M169.26458,70.42673c.54786.50473.35566,1.23712.31191,1.91547-.08518.40931.43045.17016.59275.38747a2.34774,2.34774,0,0,1,.023,1.75336,10.4525,10.4525,0,0,0,.84942-1.31416c-.0092-.18166.22675-.269.21639-.49554.09552-.31158-.26932-.17131-.42125-.2035-.12891-.0322-.26818-.11843-.22445-.29089a2.643,2.643,0,0,0-.08748-1.72117c-.12891-.4415.05525-1.03362-.15193-1.42108C170.02767,69.51268,169.0033,69.61961,169.26458,70.42673Z"/><path id="path257" class="cls-3" d="M170.26476,62.78781c.95991.96924,1.6597,1.94192,2.69326,2.879a11.484,11.484,0,0,0-.053-1.21643,2.85347,2.85347,0,0,0-.66986-.72205c-.76425-.07358-1.16248-1.1026-1.97047-.94049Z"/><path id="path259" class="cls-3" d="M172.77272,67.91453a1.47013,1.47013,0,0,0,.11049.27939,14.16,14.16,0,0,1,1.10954,2.142c-.08748-.79678.45118-1.78556-.26128-2.39952-.09552-.25985-.41665-.17247-.62383-.15177l-.33493.12992Z"/><path id="path261" class="cls-3" d="M175.359,75.77419c.30155.14027.68943-.10692.98064-.27939a.88874.88874,0,0,1,.70093.2265c.08518.17131,0,.33343.03223.49554a6.541,6.541,0,0,1,1.85076.79563l.18186-.18281a1.26724,1.26724,0,0,0-.66757-1.05547c-.22445-.12877-.56052-.05289-.72051-.25754a1.11827,1.11827,0,0,0,.09668-.62431,1.5639,1.5639,0,0,1-.87129-.27939c-.18416-.054-.34644-.2058-.49723,0-.5375.36447-.56972.9037-1.08651,1.16124Z"/><path id="path263" class="cls-3" d="M176.11515,62.23479a1.95125,1.95125,0,0,0,.77461-.34608c.72281-.6565,1.76674-.215,2.6081-.22535a5.87275,5.87275,0,0,0-.59391-.829,2.48545,2.48545,0,0,0-.92652-.25755c-.73316-.43115-1.22693.29089-1.78861.645a1.19073,1.19073,0,0,0-.07365,1.01293Z"/><path id="path265" class="cls-3" d="M176.13355,64.45035c0-.03334,0-.06669.03223-.07474.099.08508-.01036.292.15193.33343a6.32029,6.32029,0,0,0,.79648-.51623c.72165,0,1.15327-.7002,1.86226-.7002a10.78573,10.78573,0,0,1,3.39306,1.03247,2.32812,2.32812,0,0,0-1.29138-1.64528.884.884,0,0,0-.86207.25869c-.72052.453-.34414-.6565-.84943-.67835a5.32944,5.32944,0,0,1-2.06944.36447c-.43046.16326-.73316.55993-1.21773.51623A2.80992,2.80992,0,0,0,176.13355,64.45035Z"/><path id="path267" class="cls-3" d="M176.63078,66.84872c.22559.23914.602.19545.92652.23914l.93689-.36792c.01036-.169-.27968-.215-.21523-.40815.259-.29089.61231-.08509.93688-.20351.45118-.06553.915-.51509,1.36736-.184-.0138.05519.01956.12877-.023.184-.13927.33343.09668.53808.35565.66685.5283.09658,1.02206.58177,1.55036.36447a9.69051,9.69051,0,0,0-.27854-1.26932c-.442-.07473-.755-.44035-1.16363-.59212a.881.881,0,0,1-.64684.27939c-.82985-.19431-1.822-.71054-2.661-.18281-.30155.36677-.84021.2587-1.24995.41966A4.88336,4.88336,0,0,0,176.63078,66.84872Z"/><path id="path269" class="cls-3" d="M176.98644,73.2459c-.06446.18281-.24746.48289.08747.57027.68829.0207,1.57223-.33457,2.11088.20351.183.14027.09553.43115.084.614l.90466.75308a7.9382,7.9382,0,0,0,.26127-1.34635,1.50887,1.50887,0,0,0-.55016-.90255c-.5939,0-.93688-.6933-1.57452-.60822-.33263-.07358-.62383.2219-.95875.2219a5.581,5.581,0,0,0-.36486.4944Z"/><path id="path271" class="cls-3" d="M177.24425,68.17207c.13927.29089.30271.76459.57089.79563a3.07537,3.07537,0,0,1,2.27317-.14832c.236.04139.236.31043.18416.48289.36486.215.80683.38747,1.1947.62317l-.10819-.64616c-.02186-.699-.90351-.76228-.95875-1.45213a4.25429,4.25429,0,0,0-2.29387-.12877c-.24746.22535-.60426.19545-.90352.25869-.02186.08623.02993.14142.04143.215Z"/><path id="path273" class="cls-3" d="M177.42725,71.65925c.42011-.11957.69059-.58062,1.14291-.62431a2.10988,2.10988,0,0,1,1.73452.8853c.25781.169.20372.61052.53865.61052a10.476,10.476,0,0,1,.0518-1.54986c-.45-.75193-1.57108-.17016-1.99118-1.05432l-.79647.054c-.572.14142-.42011.80827-.49491,1.26127-.06561.138-.19452.246-.1853.41736Z"/><path id="path275" class="cls-3" d="M181.382,76.36631c.33263.66686,1.06695,1.17274,1.14061,1.93617a3.51648,3.51648,0,0,0,.40859-.66685c-.0115-.215-.259-.215-.3545-.38747-.099-.27939.05179-.52658.09552-.77493a2.11347,2.11347,0,0,0-.85056-1.01178l-.43968.90485Z"/><path id="path277" class="cls-3" d="M182.70676,74.66584l.77461,1.05546a2.77637,2.77637,0,0,0,.20372-1.93732c-.07366-.11957-.21523-.31273-.40745-.22535C182.98644,73.85872,182.94271,74.32206,182.70676,74.66584Z"/><path id="path279" class="cls-3" d="M179.54963,45.21395a2.24788,2.24788,0,0,0,.8851.29089,1.11275,1.11275,0,0,1,.79647-.12878c.39823.2587.88279-.054,1.34663-.03219a4.9986,4.9986,0,0,0-1.34663-.85081C180.627,44.62068,180.14353,45.05184,179.54963,45.21395Z"/><path id="path281" class="cls-3" d="M183.76105,46.22343c.57088.054.98177.55992,1.36735.97958a1.919,1.919,0,0,1,1.14061.77378l-.1807-.56912a3.67323,3.67323,0,0,0-.85172-1.46478A4.24977,4.24977,0,0,0,183.76105,46.22343Z"/><path id="path283" class="cls-4" d="M143.56572,41.50487l.31306.03334c.83791.41966,2.1949.63466,2.27317,1.84994a6.61163,6.61163,0,0,0-2.35028,1.474c-.51563-.52659-1.56072-.23685-1.73452-1.16125C142.23059,42.82708,142.54135,41.72907,143.56572,41.50487Z"/><path id="path285" class="cls-4" d="M144.37484,46.96156c.98063-.08738,1.92788.05174,2.94073-.03334a1.28789,1.28789,0,0,1,.62383.56912c-.03338,1.1624-.38788,2.2719-.44083,3.46534a1.58962,1.58962,0,0,0-.98177,1.03247,8.48941,8.48941,0,0,0-1.14291.53693,1.14421,1.14421,0,0,1,.16344-1.21643c.4201-.591,1.50891-.453,1.42259-1.38889.27969-.4507.01152-1.03247.01957-1.505-.107-.35642-.21523.11842-.38672.10693a1.39918,1.39918,0,0,1-1.00135-.077c-.22674-.23684-.50413-.43115-.57089-.75193a1.76127,1.76127,0,0,1-.808-.699l.16228-.03909Z"/><path id="path287" class="cls-4" d="M145.55919,53.97386c.46039.06669.94725-.14027,1.34548.08738-.084.15177-.31191.215-.49491.2587l-.72281.33227C145.41877,54.589,145.56955,54.15782,145.55919,53.97386Z"/><path id="path289" class="cls-4" d="M147.44333,44.9909c.46154-.15062.95876-.46105,1.45368-.31273a7.03991,7.03991,0,0,0-.90352,1.24862L146.518,45.8946A2.09157,2.09157,0,0,1,147.44333,44.9909Z"/><path id="path291" class="cls-4" d="M151.76292,44.63678c.61346-.10693.58008.68869,1.14061.71859.099.12877.23939.24719.18416.4415a9.22374,9.22374,0,0,1-1.16364.15062c-.4857-.269-.17149-1.10836-.93689-1.05432-.04259-.06554-.12776-.19431-.02186-.23685A1.811,1.811,0,0,1,151.76292,44.63678Z"/><path id="path293" class="cls-4" d="M151.375,47.518a1.47014,1.47014,0,0,1,1.067-.48289l2.79.05173c.11855.10923-.10818.20581-.10818.33458-.1715.16212-.42011.20581-.57089.35527-.366.01035-.33377.4415-.5916.62546-.39939.39782-.98178.21386-1.44447.15062a1.26783,1.26783,0,0,1-.42125-.46335l-.12891.12877c.16229.60362.1197,1.27047.2394,1.88329l.66757.4415c.01036.98878,1.174.71974,1.67926,1.26932a2.959,2.959,0,0,1-.61347.95774,3.656,3.656,0,0,0-1.36736-.829c-.04374-.57832-.67906-.92439-1.03242-1.21413-.099-1.05547-.1197-2.13163-.29119-3.15375Z"/><path id="path295" class="cls-4" d="M152.3879,54.15782h1.29369l-.16229.6772-1.29484-.54843c-.02993-.10692.08747-.13912.16343-.12877Z"/><path id="path297" class="cls-4" d="M154.714,41.96822l.95875-.30124a9.68718,9.68718,0,0,1,1.57222.94624,3.785,3.785,0,0,1,.15077,2.53864c-.2912.32193-.92652,0-1.16247.51624h-.04489a4.70742,4.70742,0,0,0-2.30424-2.37653,1.991,1.991,0,0,1,.82984-1.32335Z"/></g></g></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/naic/naic_featured_logo.svg b/content/en/case-studies/naic/naic_featured_logo.svg
index 100d158b9b..b4af63931d 100644
--- a/content/en/case-studies/naic/naic_featured_logo.svg
+++ b/content/en/case-studies/naic/naic_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1,.cls-6{fill:none;}.cls-2{fill:#fbfbfb;}.cls-3{fill:#231f20;}.cls-4{fill:#287ac8;}.cls-5{fill:#fff;}.cls-6{stroke:#231f20;stroke-width:0.40668px;}.cls-7{fill:#c8c7c7;}.cls-8{clip-path:url(#clip-path);}</style><clipPath id="clip-path"><rect class="cls-1" x="389.19562" y="-8.94586" width="115.27524" height="49.40367"/></clipPath></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-4.36327" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-1" d="M28.267,14.33938H186.2618v96.7718H28.267Z"/><path class="cls-1" d="M28.267,14.33938H186.2618v96.7718H28.267Z"/><path class="cls-3" d="M29.012,92.11626V79.55173H31.1212l2.40823,5.369c.48979,1.13678,1.21419,2.75859,1.66171,3.97041h.04266c-.10664-1.60325-.23423-3.54184-.23423-5.79722V79.55173h2.00259V92.11626H34.89293l-2.42917-5.3501a38.1621,38.1621,0,0,1-1.55506-3.98937h-.04306c.08532,1.45355.17064,3.22468.17064,5.83475v3.50432H29.012m16.61947-2.06933a12.64927,12.64927,0,0,0,.128,2.06973H43.71417l-.12837-.93217h-.04226A2.65884,2.65884,0,0,1,41.349,92.26517a2.56507,2.56507,0,0,1-2.62113-2.68394c0-2.33042,2.25853-3.31828,4.60278-3.33685v-.24291a1.41215,1.41215,0,0,0-1.55585-1.60286,3.882,3.882,0,0,0-1.939.50321L39.41,83.54109a6.40837,6.40837,0,0,1,2.855-.65252c2.68472,0,3.36647,1.60365,3.36647,3.54146Zm-2.23721-2.47894c-.895.01856-2.49315.22356-2.49315,1.80825,0,1.02538.61815,1.39825,1.12966,1.39825a1.33018,1.33018,0,0,0,1.29951-1.04395,1.56478,1.56478,0,0,0,.064-.46609V87.56759m6.86053-6.78548v2.25577h2.003v1.45434H50.25516V89.1894c0,1.11861.48978,1.39826,1.06527,1.39826a4.2906,4.2906,0,0,0,.70308-.05609l.04266,1.54716a6.01526,6.01526,0,0,1-1.49147.14931,2.76331,2.76331,0,0,1-1.83274-.5597,2.96593,2.96593,0,0,1-.76667-2.46076V84.49222H46.739V83.03788h1.23631V81.47175l2.27947-.68964m5.71072-.11178a1.13461,1.13461,0,0,1-1.25724,1.13717,1.10951,1.10951,0,0,1-1.17232-1.13757,1.21628,1.21628,0,0,1,2.42956.0004ZM53.62163,92.11587v-9.078H55.9015v9.078H53.62124m11.39932-4.56724c0,3.67259-2.15268,4.71653-3.72868,4.71653-2.19494,0-3.70774-1.60364-3.70774-4.66045,0-3.28076,1.85407-4.71614,3.79306-4.71614C63.55041,82.88857,65.02056,84.56608,65.02056,87.54863Zm-5.15656.019c0,1.529.29822,3.16858,1.5128,3.16858,1.12967,0,1.38483-1.80785,1.38483-3.16858,0-1.32321-.25517-3.13146-1.42748-3.13146-1.23552,0-1.47015,1.80825-1.47015,3.13146m6.86092-1.97573c0-1.02578-.04265-1.75255-.08531-2.554h1.98125L68.72751,84.1h.04265a2.88211,2.88211,0,0,1,2.45011-1.21142c1.74742,0,2.66379,1.17469,2.66379,3.28116v5.94613H71.6038v-5.7601c0-.89464-.21329-1.78929-1.21419-1.78929A1.36143,1.36143,0,0,0,69.111,85.68508a2.752,2.752,0,0,0-.10664.81959v5.61119H66.72493v-6.524m15.57512,4.45467a12.65121,12.65121,0,0,0,.12758,2.06973H80.382l-.12758-.93217h-.04226a2.65979,2.65979,0,0,1-2.19534,1.08108,2.56511,2.56511,0,0,1-2.62034-2.68394c0-2.33042,2.25893-3.31828,4.602-3.33685v-.24291a1.41175,1.41175,0,0,0-1.55506-1.60286,3.881,3.881,0,0,0-1.939.50321l-.4258-1.36073a6.40545,6.40545,0,0,1,2.855-.65252c2.68433,0,3.36647,1.60365,3.36647,3.54146Zm-2.23721-2.47894c-.895.01856-2.49315.22356-2.49315,1.80825,0,1.02538.61815,1.39825,1.12926,1.39825a1.33018,1.33018,0,0,0,1.29951-1.04395,1.55148,1.55148,0,0,0,.06438-.46609V87.56759M84.40928,79.216h2.27947V92.11626H84.40967V79.216M94.419,88.88053l-.7564,3.23533H91.47718l3.152-12.39074h2.62666L100.176,92.11586H97.99091l-.7564-3.23533Zm2.5844-1.52584-.58853-2.849c-.16787-.80973-.35747-1.94887-.52534-2.8131h-.0632c-.14654.86424-.35707,2.04011-.52493,2.8131l-.6304,2.849h2.3324m4.58066,2.90473a3.87074,3.87074,0,0,0,1.7652.47794c.79826,0,1.28134-.3859,1.28134-1.03013,0-.55061-.29387-.91795-1.23947-1.452-1.51319-.79-2.08-1.6542-2.08-2.55516a2.83418,2.83418,0,0,1,3.13067-2.68394,4.47692,4.47692,0,0,1,1.97493.4408l-.46213,1.45237a2.86813,2.86813,0,0,0-1.40773-.3855c-.77734,0-1.15573.4408-1.15573.9369,0,.47794.2516.75443,1.23947,1.30623,1.36626.7165,2.08079,1.59891,2.08079,2.70171,0,1.8201-1.45039,2.75779-3.38385,2.75779a4.45065,4.45065,0,0,1-2.18507-.51466l.44159-1.45237m6.47186,0a3.86864,3.86864,0,0,0,1.76441.47794c.79905,0,1.28252-.3859,1.28252-1.03013,0-.55061-.29466-.91795-1.23987-1.452-1.51359-.79-2.08-1.6542-2.08-2.55516a2.83418,2.83418,0,0,1,3.13066-2.68394,4.477,4.477,0,0,1,1.97494.4408l-.46214,1.45237a2.86879,2.86879,0,0,0-1.40852-.3855c-.77655,0-1.15494.4408-1.15494.9369,0,.47794.2516.75443,1.24026,1.30623,1.36547.7165,2.08,1.59891,2.08,2.70171,0,1.8201-1.45039,2.75779-3.38345,2.75779a4.45056,4.45056,0,0,1-2.18586-.51466l.442-1.45237m13.57412-2.64721c0,3.62085-2.12266,4.65137-3.67772,4.65137-2.16414,0-3.656-1.58114-3.656-4.59686,0-3.23494,1.8276-4.65058,3.74053-4.65058C120.18008,83.01615,121.63008,84.67115,121.63008,87.61222Zm-5.08506.01857c0,1.50726.29427,3.12513,1.49147,3.12513,1.11426,0,1.36626-1.78376,1.36626-3.12513,0-1.30583-.252-3.0888-1.40813-3.0888-1.21892,0-1.4496,1.783-1.4496,3.0888m12.14506,4.3014a4.54258,4.54258,0,0,1-1.72372.29427c-2.43747,0-4.05494-1.58153-4.05494-4.5226a4.33226,4.33226,0,0,1,4.412-4.66954,3.9587,3.9587,0,0,1,1.47094.25793l-.33575,1.56217a3.29314,3.29314,0,0,0-1.09253-.20144c-1.45,0-2.2064,1.37811-2.2064,3.01375,0,1.83906.84054,2.94226,2.2064,2.94226a2.53811,2.53811,0,0,0,1.09253-.20263l.23147,1.52584m3.50828-11.10388a1.119,1.119,0,0,1-1.23947,1.12176,1.0935,1.0935,0,0,1-1.15573-1.12176,1.19908,1.19908,0,0,1,2.39521,0ZM129.8869,92.11586V83.16348h2.24826v8.95238H129.8869M140.43462,90.075a12.43368,12.43368,0,0,0,.1264,2.04089h-2.0168l-.1264-.91913H138.376a2.62128,2.62128,0,0,1-2.16453,1.06646,2.52959,2.52959,0,0,1-2.5844-2.6472c0-2.298,2.22733-3.27247,4.53919-3.291v-.239a1.39251,1.39251,0,0,0-1.53413-1.58034,3.83749,3.83749,0,0,0-1.91292.49571l-.41948-1.34177a6.32263,6.32263,0,0,1,2.81586-.64344c2.6468,0,3.31908,1.58074,3.31908,3.49287ZM138.229,87.63079c-.88241.01777-2.4584.2204-2.4584,1.78257,0,1.01117.60907,1.3789,1.11347,1.3789a1.31212,1.31212,0,0,0,1.28213-1.02934,1.56308,1.56308,0,0,0,.0628-.45976V87.63079m6.76574-6.69227v2.225h1.97573v1.43341h-1.97573v4.6328c0,1.1032.48386,1.37929,1.05067,1.37929a4.22446,4.22446,0,0,0,.6936-.05569l.04186,1.52623a5.94691,5.94691,0,0,1-1.47093.14693,2.72452,2.72452,0,0,1-1.80667-.5518,2.92347,2.92347,0,0,1-.75679-2.4264V84.59688h-1.21893V83.16347h1.21893v-1.5444l2.24826-.68056m5.63132-.11019a1.11859,1.11859,0,0,1-1.24026,1.12176,1.09308,1.09308,0,0,1-1.15495-1.12176,1.19908,1.19908,0,0,1,2.3952,0ZM148.315,92.11586V83.16348h2.24866v8.95238H148.315m11.24094-4.50364c0,3.62085-2.12187,4.65137-3.67733,4.65137-2.16374,0-3.656-1.58114-3.656-4.59686,0-3.23494,1.82761-4.65058,3.74052-4.65058C158.10673,83.01615,159.55594,84.67115,159.55594,87.61222Zm-5.08506.01857c0,1.50726.29506,3.12513,1.49227,3.12513,1.11386,0,1.36547-1.78376,1.36547-3.12513,0-1.30583-.25161-3.0888-1.40773-3.0888-1.21893,0-1.45,1.783-1.45,3.0888m6.76612-1.94887c0-1.01117-.04266-1.72807-.08414-2.51844h1.9544l.10427,1.0475h.04266a2.84233,2.84233,0,0,1,2.41614-1.19483c1.72373,0,2.62666,1.1577,2.62666,3.23494v5.86477h-2.24826v-5.6807c0-.882-.21052-1.76441-1.19721-1.76441a1.34263,1.34263,0,0,0-1.26119,1.10281,2.69056,2.69056,0,0,0-.10506.80893v5.53377H161.237V85.68192m17.98571.20224c0,1.89356-.98747,6.379-4.0972,6.379-1.42827,0-2.03813-1.23157-2.03813-2.96,0-2.00338,1.17706-6.15824,4.16079-6.15824,1.702,0,1.97454,1.58113,1.97454,2.73923Zm-5.25214,3.27246c0,1.23118.10467,2.42641,1.34375,2.42641,2.20679,0,3.02638-4.22834,3.02638-5.66214,0-1.12176-.1888-2.0958-1.23987-2.0958-2.01719,0-3.13026,3.4747-3.13026,5.33153m6.21868,2.95964,1.78653-8.16241h-1.19761l.1264-.6616h1.21815l.14694-.662a5.09548,5.09548,0,0,1,1.324-2.66616,2.8047,2.8047,0,0,1,1.87026-.7169,1.78949,1.78949,0,0,1,.79787.14733l-.20975.62487a2.46943,2.46943,0,0,0-.73546-.09164c-1.30267,0-2.03813,1.47054-2.28974,2.90474l-.08452.45976h1.91173l-.14654.66161h-1.91213l-1.80746,8.162h-.79866M31.08091,96.59581v12.8426H29.042V96.59581h2.03892m2.07684,6.17325c0-1.04751-.03831-1.79127-.07623-2.61008h1.77191l.09519,1.08622h.03832a2.491,2.491,0,0,1,2.19138-1.23868c1.56218,0,2.38177,1.20036,2.38177,3.35344v6.07885H37.52117v-5.88847c0-.91479-.19038-1.82879-1.08621-1.82879-.49532,0-.95271.38116-1.14309,1.1427a3.16429,3.16429,0,0,0-.09559.83856v5.7356H33.15775v-6.66935m8.117,4.745a3.18157,3.18157,0,0,0,1.60049.49532,1.02915,1.02915,0,0,0,1.16245-1.06686c0-.57155-.267-.95271-1.12414-1.5053-1.37179-.81921-1.88645-1.715-1.88645-2.64918a2.71824,2.71824,0,0,1,2.83916-2.7815,3.637,3.637,0,0,1,1.79087.457l-.41868,1.50569a2.35508,2.35508,0,0,0-1.277-.40012.95134.95134,0,0,0-1.0479.97167c0,.49531.2283.78128,1.12414,1.35283a3.25619,3.25619,0,0,1,1.88645,2.80085,2.75879,2.75879,0,0,1-3.06786,2.85852,3.63865,3.63865,0,0,1-1.98165-.53323l.40012-1.50569m12.27146-.76232c0,.991.03792,1.90542.07583,2.6867H51.86907l-.1335-.97167h-.03792a2.49641,2.49641,0,0,1-2.07684,1.12413c-1.69608,0-2.36281-1.27621-2.36281-3.69668V100.159h2.01956v5.48755c0,1.31491.24766,2.24827,1.08622,2.24827a1.14121,1.14121,0,0,0,1.02894-.9144,2.45206,2.45206,0,0,0,.11454-.80063V100.159h2.03853v6.59234m1.90542-3.98226c0-.85712-.05727-1.80983-.07623-2.61008h1.77191l.11454,1.41011h.05688a2.19421,2.19421,0,0,1,1.88646-1.56257,2.26149,2.26149,0,0,1,.41947.03792v2.03931a1.36111,1.36111,0,0,0-.41947-.03831,1.81947,1.81947,0,0,0-1.63841,1.60049,3.9053,3.9053,0,0,0-.07663.89583v4.89665H55.45121v-6.66935m10.80408,4.5542a14.71986,14.71986,0,0,0,.11454,2.11515H64.54025l-.11454-.95271h-.03792a2.28815,2.28815,0,0,1-1.9623,1.10517,2.48,2.48,0,0,1-2.34385-2.744c0-2.38177,2.01957-3.39136,4.11576-3.41071v-.24766c0-.95271-.38116-1.6388-1.39114-1.6388a3.14744,3.14744,0,0,0-1.734.51467l-.38077-1.39115a5.16132,5.16132,0,0,1,2.55319-.66674c2.40074,0,3.01059,1.6388,3.01059,3.62ZM64.25468,104.789c-.80064.019-2.22931.22909-2.22931,1.84854,0,1.0479.5522,1.42866,1.00959,1.42866a1.23145,1.23145,0,0,0,1.16245-1.06646,1.808,1.808,0,0,0,.05727-.47635V104.789m3.88667-2.02c0-1.04751-.03792-1.79127-.07584-2.61008h1.77191l.0948,1.08622h.03871a2.49041,2.49041,0,0,1,2.191-1.23868c1.56257,0,2.38177,1.20036,2.38177,3.35344v6.07885H72.50556v-5.88847c0-.91479-.19078-1.82879-1.08621-1.82879-.49532,0-.95271.38116-1.1431,1.1427a3.16723,3.16723,0,0,0-.09519.83856v5.7356H68.14175v-6.66935m13.14713,6.479a3.66575,3.66575,0,0,1-1.56217.30493c-2.21035,0-3.67772-1.63919-3.67772-4.6877,0-2.76254,1.54321-4.83978,4.00121-4.83978a3.19985,3.19985,0,0,1,1.33427.267l-.30493,1.61945a2.65751,2.65751,0,0,0-.991-.20935c-1.31491,0-2.001,1.42867-2.001,3.12435,0,1.90581.76233,3.0493,2.001,3.0493a2.05555,2.05555,0,0,0,.99141-.20974l.20935,1.58153m2.629-3.90642c.019,2.07684.99063,2.64838,2.07684,2.64838a4.04649,4.04649,0,0,0,1.65815-.34284l.28519,1.46737a5.94892,5.94892,0,0,1-2.3245.43844c-2.38177,0-3.67733-1.734-3.67733-4.61148,0-3.06747,1.48634-4.935,3.468-4.935,1.94333,0,2.934,1.77191,2.934,4.24926,0,.53324-.03792.83816-.05728,1.08582Zm2.53384-1.448c.01935-1.48633-.47556-2.36281-1.2-2.36281-.87687,0-1.27659,1.277-1.31491,2.36281h2.51489m12.46144,5.33509a4.52757,4.52757,0,0,1-1.88606.32389c-2.93436,0-4.61148-2.40073-4.61148-6.364,0-4.93536,2.61087-6.70727,4.89745-6.70727a3.61964,3.61964,0,0,1,1.67671.32389l-.38116,1.71543a2.66062,2.66062,0,0,0-1.21972-.24806c-1.39074,0-2.8198,1.2766-2.8198,4.78251,0,3.449,1.29555,4.6877,2.83916,4.6877a3.36722,3.36722,0,0,0,1.25725-.22909l.24765,1.715m7.31752-4.45861c0,3.75356-1.92437,4.82081-3.33487,4.82081-1.96229,0-3.31512-1.6384-3.31512-4.76354,0-3.35344,1.65736-4.82081,3.39175-4.82081C104.91622,100.00652,106.23112,101.72155,106.23112,104.77006Zm-4.61147.019c0,1.56217.26741,3.23968,1.35322,3.23968,1.00959,0,1.23829-1.84854,1.23829-3.23968,0-1.35283-.2287-3.201-1.2766-3.201-1.10517,0-1.31491,1.84854-1.31491,3.201m6.13573-2.02c0-1.04751-.03832-1.79127-.07663-2.61008h1.77191l.11455,1.10478h.03791a2.5243,2.5243,0,0,1,2.15347-1.25724,1.96575,1.96575,0,0,1,1.98165,1.33348h.03831a3.1132,3.1132,0,0,1,.93336-.99063,2.48169,2.48169,0,0,1,1.29556-.34285c1.46737,0,2.32489,1.14309,2.32489,3.42967v6.00222h-2.02v-5.62066c0-1.12492-.15247-2.11555-1.06686-2.11555-.51467,0-.93375.40052-1.12453,1.08622a4.11927,4.11927,0,0,0-.05688.74336v5.90663h-2.03892v-5.926c0-.83816-.11415-1.81022-1.02855-1.81022-.47675,0-.9531.38156-1.12453,1.14309a2.68371,2.68371,0,0,0-.0948.72441v5.86871h-2.02v-6.66935m12.44249,0c0-1.04751-.03831-1.79127-.07623-2.61008h1.77231l.11454,1.10478h.03792a2.523,2.523,0,0,1,2.15268-1.25724,1.96655,1.96655,0,0,1,1.982,1.33348h.03832a3.1088,3.1088,0,0,1,.93335-.99063,2.47971,2.47971,0,0,1,1.29556-.34285c1.467,0,2.32489,1.14309,2.32489,3.42967v6.00222h-2.02v-5.62066c0-1.12492-.15246-2.11555-1.06725-2.11555-.51467,0-.93375.40052-1.12413,1.08622a4.11512,4.11512,0,0,0-.05728.74336v5.90663H124.4657v-5.926c0-.83816-.11375-1.81022-1.02855-1.81022-.47675,0-.95271.38156-1.12453,1.14309a2.68374,2.68374,0,0,0-.09479.72441v5.86871h-2.02v-6.66935m14.53868-5.03016a1.08064,1.08064,0,0,1-1.12452,1.16244,1.064,1.064,0,0,1-1.04751-1.16244,1.08985,1.08985,0,1,1,2.172-.00039Zm-2.0962,11.69951V100.159h2.03853v9.27943h-2.03813m3.75277-1.92438a3.186,3.186,0,0,0,1.60128.49532,1.02871,1.02871,0,0,0,1.16166-1.06686c0-.57155-.26623-.95271-1.12374-1.5053-1.37219-.81921-1.88646-1.715-1.88646-2.64918a2.71824,2.71824,0,0,1,2.83916-2.7815,3.63825,3.63825,0,0,1,1.79087.457l-.41908,1.50569a2.35369,2.35369,0,0,0-1.2766-.40012.95113.95113,0,0,0-1.0479.97167c0,.49531.2283.78128,1.12373,1.35283a3.25639,3.25639,0,0,1,1.88725,2.80085,2.75911,2.75911,0,0,1-3.06827,2.85852,3.63861,3.63861,0,0,1-1.98164-.53323l.39972-1.50569m5.86913,0a3.18153,3.18153,0,0,0,1.60048.49532,1.02928,1.02928,0,0,0,1.16285-1.06686c0-.57155-.26741-.95271-1.12453-1.5053-1.37178-.81921-1.88685-1.715-1.88685-2.64918a2.71867,2.71867,0,0,1,2.84-2.7815,3.63663,3.63663,0,0,1,1.79047.457l-.41909,1.50569a2.35366,2.35366,0,0,0-1.27659-.40012.95156.95156,0,0,0-1.04791.97167c0,.49531.22831.78128,1.12452,1.35283a3.25647,3.25647,0,0,1,1.88606,2.80085,2.75879,2.75879,0,0,1-3.06786,2.85852,3.63767,3.63767,0,0,1-1.98165-.53323l.40012-1.50569m8.117-9.77513a1.08033,1.08033,0,0,1-1.12413,1.16244,1.06453,1.06453,0,0,1-1.04791-1.16244,1.09,1.09,0,1,1,2.17243-.00039Zm-2.0958,11.69951V100.159h2.03892v9.27943H148.2838m10.19422-4.66835c0,3.75356-1.92477,4.82081-3.33527,4.82081-1.96229,0-3.31473-1.6384-3.31473-4.76354,0-3.35344,1.657-4.82081,3.39136-4.82081C157.16272,100.00652,158.478,101.72155,158.478,104.77006Zm-4.61147.019c0,1.56217.26661,3.23968,1.35283,3.23968,1.01,0,1.23867-1.84854,1.23867-3.23968,0-1.35283-.2287-3.201-1.2766-3.201-1.10557,0-1.31491,1.84854-1.31491,3.201m6.13534-2.02c0-1.04751-.03831-1.79127-.07663-2.61008h1.7727l.0948,1.08622h.03831a2.49088,2.49088,0,0,1,2.191-1.23868c1.56256,0,2.38177,1.20036,2.38177,3.35344v6.07885h-2.03814v-5.88847c0-.91479-.19117-1.82879-1.08621-1.82879-.49531,0-.9527.38116-1.14348,1.1427a3.16471,3.16471,0,0,0-.09559.83856v5.7356h-2.03853v-6.66935m9.88891,2.57255c.01935,2.07684.99142,2.64838,2.07723,2.64838a4.04308,4.04308,0,0,0,1.65776-.34284l.28557,1.46737a5.95029,5.95029,0,0,1-2.3245.43844c-2.38177,0-3.67733-1.734-3.67733-4.61148,0-3.06747,1.48594-4.935,3.468-4.935,1.94334,0,2.934,1.77191,2.934,4.24926,0,.53324-.0383.83816-.05688,1.08582Zm2.53462-1.448c.01857-1.48633-.47675-2.36281-1.20076-2.36281-.87687,0-1.2762,1.277-1.31452,2.36281h2.51528m3.35344-1.12452c0-.85712-.05727-1.80983-.07663-2.61008h1.77231l.11455,1.41011h.05688a2.19376,2.19376,0,0,1,1.88646-1.56257,2.2617,2.2617,0,0,1,.41948.03792v2.03931a1.3599,1.3599,0,0,0-.41948-.03831,1.81947,1.81947,0,0,0-1.63841,1.60049,3.9053,3.9053,0,0,0-.07663.89583v4.89665h-2.03853v-6.66935m5.04951,4.745a3.179,3.179,0,0,0,1.60049.49532,1.02914,1.02914,0,0,0,1.16244-1.06686c0-.57155-.267-.95271-1.12452-1.5053-1.37179-.81921-1.88686-1.715-1.88686-2.64918a2.71868,2.71868,0,0,1,2.84-2.7815,3.64229,3.64229,0,0,1,1.79127.457l-.41948,1.50569a2.3561,2.3561,0,0,0-1.277-.40012.95155.95155,0,0,0-1.0479.97167c0,.49531.2283.78128,1.12452,1.35283a3.25575,3.25575,0,0,1,1.88606,2.80085,2.75879,2.75879,0,0,1-3.06786,2.85852,3.64107,3.64107,0,0,1-1.982-.53323l.40092-1.50569m5.106-35.089V15.8585H28.267V72.425H185.93435"/><path class="cls-4" d="M185.93435,72.425V15.8585H143.8639V72.425h42.07084"/><path class="cls-5" d="M74.30907,32.98869,68.26893,64.29417H66.48359L46.25631,33.59894,42.06194,56.23011a11.03141,11.03141,0,0,0-.23067,2.0808q0,3.59813,4.474,4.25914l-.19789,1.14862H33.86952l.19868-1.14862a6.13216,6.13216,0,0,0,3.45969-1.5681q1.2756-1.23591,2.03734-4.76907L44.97576,30.9075a11.56484,11.56484,0,0,0-3.25035-3.43362,10.72065,10.72065,0,0,0-4.66874-.95824l.19907-1.1498h12.971L68.25,52.57214l3.6639-19.85125a13.76517,13.76517,0,0,0,.22988-2.34425q0-3.85882-3.94513-3.861l.1975-1.1498h11.769l-.19947,1.1498q-4.53842.59544-5.65622,6.473M99.19759,56.488V50.60352H88.97809l-4.86623,7.44a4.77542,4.77542,0,0,0-.98984,2.37822q0,1.653,3.327,2.14833l-.19987,1.14862H74.43034l.19828-1.14862a7.27754,7.27754,0,0,0,4.175-1.80193A35.61787,35.61787,0,0,0,82.947,55.39353l20.80318-31.072h3.23257V56.95926q0,3.20118.84132,4.39028.839,1.18614,3.80887,1.22051l-.1975,1.14862H94.33808l.19868-1.14862A5.58013,5.58013,0,0,0,98.139,61.231q1.05758-1.10675,1.05856-4.743Zm0-8.60123V35.23616h-.13232L90.75158,47.88681h8.446M136.5519,32.85005l-5.33864,25.19621a4.741,4.741,0,0,0-.13193,1.08859q0,3.13836,4.45941,3.4352l-.26345,1.14862H117.254l.26227-1.14862a8.55317,8.55317,0,0,0,4.39028-2.03023,8.90358,8.90358,0,0,0,1.826-4.109L128.77936,32.852a11.28919,11.28919,0,0,0,.33061-2.44141q0-3.16858-4.28048-3.89457l.1655-1.15021H142.2812l-.13153,1.14981a7.63055,7.63055,0,0,0-3.90208,1.83116,10.45713,10.45713,0,0,0-1.69567,4.50325"/><path class="cls-3" d="M182.36564,25.636l-1.43776,10.60658h-.99536a9.56871,9.56871,0,0,0-2.72343-5.74706,7.40992,7.40992,0,0,0-5.2711-2.03734q-5.90231,0-10.28349,6.304a25.82275,25.82275,0,0,0-4.37962,15.11615q0,5.94258,2.93752,9.55553a9.39852,9.39852,0,0,0,7.6588,3.61492q6.25779,0,11.12086-6.42684l.88517.52613a22.733,22.733,0,0,1-6.53072,7.1307,16.13917,16.13917,0,0,1-9.04243,2.32252q-7.2668,0-11.40249-4.40687-4.13907-4.40805-4.13867-12.166,0-10.39922,6.65947-17.13454,6.65947-6.73471,15.273-6.73452a22.9311,22.9311,0,0,1,4.65374.44436,17.72266,17.72266,0,0,0,3.36528.44278,2.75742,2.75742,0,0,0,2.54372-1.4109h1.10754"/><path class="cls-6" d="M182.36564,25.636l-1.43776,10.60658h-.99536a9.56871,9.56871,0,0,0-2.72343-5.74706,7.40992,7.40992,0,0,0-5.2711-2.03734q-5.90231,0-10.28349,6.304a25.82275,25.82275,0,0,0-4.37962,15.11615q0,5.94258,2.93752,9.55553a9.39852,9.39852,0,0,0,7.6588,3.61492q6.25779,0,11.12086-6.42684l.88517.52613a22.733,22.733,0,0,1-6.53072,7.1307,16.13917,16.13917,0,0,1-9.04243,2.32252q-7.2668,0-11.40249-4.40687-4.13907-4.40805-4.13867-12.166,0-10.39922,6.65947-17.13454,6.65947-6.73471,15.273-6.73452a22.9311,22.9311,0,0,1,4.65374.44436,17.72266,17.72266,0,0,0,3.36528.44278,2.75742,2.75742,0,0,0,2.54372-1.4109Z"/><path class="cls-7" d="M180.52855,23.79892,179.09,34.4063h-.99536a9.56927,9.56927,0,0,0-2.72265-5.749,7.41048,7.41048,0,0,0-5.27188-2.03694q-5.90229,0-10.28269,6.304A25.82108,25.82108,0,0,0,155.437,48.04125q0,5.94258,2.93871,9.55473a9.39571,9.39571,0,0,0,7.65761,3.61492q6.25954,0,11.12283-6.42683l.88359.52652a22.72279,22.72279,0,0,1-6.53072,7.13149,16.147,16.147,0,0,1-9.04283,2.32252q-7.26678,0-11.40288-4.40805-4.13846-4.40628-4.13827-12.1656,0-10.39982,6.66027-17.13375,6.65889-6.7365,15.273-6.73571a22.96131,22.96131,0,0,1,4.65334.44436,17.70287,17.70287,0,0,0,3.3649.444,2.76,2.76,0,0,0,2.5445-1.41089h1.10754"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1,.cls-6{fill:none;}.cls-2{fill:transparent;}.cls-3{fill:#231f20;}.cls-4{fill:#287ac8;}.cls-5{fill:#fff;}.cls-6{stroke:#231f20;stroke-width:0.40668px;}.cls-7{fill:#c8c7c7;}.cls-8{clip-path:url(#clip-path);}</style><clipPath id="clip-path"><rect class="cls-1" x="389.19562" y="-8.94586" width="115.27524" height="49.40367"/></clipPath></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-4.36327" y="-3.16104" width="223.25536" height="134.51136"/><path class="cls-1" d="M28.267,14.33938H186.2618v96.7718H28.267Z"/><path class="cls-1" d="M28.267,14.33938H186.2618v96.7718H28.267Z"/><path class="cls-3" d="M29.012,92.11626V79.55173H31.1212l2.40823,5.369c.48979,1.13678,1.21419,2.75859,1.66171,3.97041h.04266c-.10664-1.60325-.23423-3.54184-.23423-5.79722V79.55173h2.00259V92.11626H34.89293l-2.42917-5.3501a38.1621,38.1621,0,0,1-1.55506-3.98937h-.04306c.08532,1.45355.17064,3.22468.17064,5.83475v3.50432H29.012m16.61947-2.06933a12.64927,12.64927,0,0,0,.128,2.06973H43.71417l-.12837-.93217h-.04226A2.65884,2.65884,0,0,1,41.349,92.26517a2.56507,2.56507,0,0,1-2.62113-2.68394c0-2.33042,2.25853-3.31828,4.60278-3.33685v-.24291a1.41215,1.41215,0,0,0-1.55585-1.60286,3.882,3.882,0,0,0-1.939.50321L39.41,83.54109a6.40837,6.40837,0,0,1,2.855-.65252c2.68472,0,3.36647,1.60365,3.36647,3.54146Zm-2.23721-2.47894c-.895.01856-2.49315.22356-2.49315,1.80825,0,1.02538.61815,1.39825,1.12966,1.39825a1.33018,1.33018,0,0,0,1.29951-1.04395,1.56478,1.56478,0,0,0,.064-.46609V87.56759m6.86053-6.78548v2.25577h2.003v1.45434H50.25516V89.1894c0,1.11861.48978,1.39826,1.06527,1.39826a4.2906,4.2906,0,0,0,.70308-.05609l.04266,1.54716a6.01526,6.01526,0,0,1-1.49147.14931,2.76331,2.76331,0,0,1-1.83274-.5597,2.96593,2.96593,0,0,1-.76667-2.46076V84.49222H46.739V83.03788h1.23631V81.47175l2.27947-.68964m5.71072-.11178a1.13461,1.13461,0,0,1-1.25724,1.13717,1.10951,1.10951,0,0,1-1.17232-1.13757,1.21628,1.21628,0,0,1,2.42956.0004ZM53.62163,92.11587v-9.078H55.9015v9.078H53.62124m11.39932-4.56724c0,3.67259-2.15268,4.71653-3.72868,4.71653-2.19494,0-3.70774-1.60364-3.70774-4.66045,0-3.28076,1.85407-4.71614,3.79306-4.71614C63.55041,82.88857,65.02056,84.56608,65.02056,87.54863Zm-5.15656.019c0,1.529.29822,3.16858,1.5128,3.16858,1.12967,0,1.38483-1.80785,1.38483-3.16858,0-1.32321-.25517-3.13146-1.42748-3.13146-1.23552,0-1.47015,1.80825-1.47015,3.13146m6.86092-1.97573c0-1.02578-.04265-1.75255-.08531-2.554h1.98125L68.72751,84.1h.04265a2.88211,2.88211,0,0,1,2.45011-1.21142c1.74742,0,2.66379,1.17469,2.66379,3.28116v5.94613H71.6038v-5.7601c0-.89464-.21329-1.78929-1.21419-1.78929A1.36143,1.36143,0,0,0,69.111,85.68508a2.752,2.752,0,0,0-.10664.81959v5.61119H66.72493v-6.524m15.57512,4.45467a12.65121,12.65121,0,0,0,.12758,2.06973H80.382l-.12758-.93217h-.04226a2.65979,2.65979,0,0,1-2.19534,1.08108,2.56511,2.56511,0,0,1-2.62034-2.68394c0-2.33042,2.25893-3.31828,4.602-3.33685v-.24291a1.41175,1.41175,0,0,0-1.55506-1.60286,3.881,3.881,0,0,0-1.939.50321l-.4258-1.36073a6.40545,6.40545,0,0,1,2.855-.65252c2.68433,0,3.36647,1.60365,3.36647,3.54146Zm-2.23721-2.47894c-.895.01856-2.49315.22356-2.49315,1.80825,0,1.02538.61815,1.39825,1.12926,1.39825a1.33018,1.33018,0,0,0,1.29951-1.04395,1.55148,1.55148,0,0,0,.06438-.46609V87.56759M84.40928,79.216h2.27947V92.11626H84.40967V79.216M94.419,88.88053l-.7564,3.23533H91.47718l3.152-12.39074h2.62666L100.176,92.11586H97.99091l-.7564-3.23533Zm2.5844-1.52584-.58853-2.849c-.16787-.80973-.35747-1.94887-.52534-2.8131h-.0632c-.14654.86424-.35707,2.04011-.52493,2.8131l-.6304,2.849h2.3324m4.58066,2.90473a3.87074,3.87074,0,0,0,1.7652.47794c.79826,0,1.28134-.3859,1.28134-1.03013,0-.55061-.29387-.91795-1.23947-1.452-1.51319-.79-2.08-1.6542-2.08-2.55516a2.83418,2.83418,0,0,1,3.13067-2.68394,4.47692,4.47692,0,0,1,1.97493.4408l-.46213,1.45237a2.86813,2.86813,0,0,0-1.40773-.3855c-.77734,0-1.15573.4408-1.15573.9369,0,.47794.2516.75443,1.23947,1.30623,1.36626.7165,2.08079,1.59891,2.08079,2.70171,0,1.8201-1.45039,2.75779-3.38385,2.75779a4.45065,4.45065,0,0,1-2.18507-.51466l.44159-1.45237m6.47186,0a3.86864,3.86864,0,0,0,1.76441.47794c.79905,0,1.28252-.3859,1.28252-1.03013,0-.55061-.29466-.91795-1.23987-1.452-1.51359-.79-2.08-1.6542-2.08-2.55516a2.83418,2.83418,0,0,1,3.13066-2.68394,4.477,4.477,0,0,1,1.97494.4408l-.46214,1.45237a2.86879,2.86879,0,0,0-1.40852-.3855c-.77655,0-1.15494.4408-1.15494.9369,0,.47794.2516.75443,1.24026,1.30623,1.36547.7165,2.08,1.59891,2.08,2.70171,0,1.8201-1.45039,2.75779-3.38345,2.75779a4.45056,4.45056,0,0,1-2.18586-.51466l.442-1.45237m13.57412-2.64721c0,3.62085-2.12266,4.65137-3.67772,4.65137-2.16414,0-3.656-1.58114-3.656-4.59686,0-3.23494,1.8276-4.65058,3.74053-4.65058C120.18008,83.01615,121.63008,84.67115,121.63008,87.61222Zm-5.08506.01857c0,1.50726.29427,3.12513,1.49147,3.12513,1.11426,0,1.36626-1.78376,1.36626-3.12513,0-1.30583-.252-3.0888-1.40813-3.0888-1.21892,0-1.4496,1.783-1.4496,3.0888m12.14506,4.3014a4.54258,4.54258,0,0,1-1.72372.29427c-2.43747,0-4.05494-1.58153-4.05494-4.5226a4.33226,4.33226,0,0,1,4.412-4.66954,3.9587,3.9587,0,0,1,1.47094.25793l-.33575,1.56217a3.29314,3.29314,0,0,0-1.09253-.20144c-1.45,0-2.2064,1.37811-2.2064,3.01375,0,1.83906.84054,2.94226,2.2064,2.94226a2.53811,2.53811,0,0,0,1.09253-.20263l.23147,1.52584m3.50828-11.10388a1.119,1.119,0,0,1-1.23947,1.12176,1.0935,1.0935,0,0,1-1.15573-1.12176,1.19908,1.19908,0,0,1,2.39521,0ZM129.8869,92.11586V83.16348h2.24826v8.95238H129.8869M140.43462,90.075a12.43368,12.43368,0,0,0,.1264,2.04089h-2.0168l-.1264-.91913H138.376a2.62128,2.62128,0,0,1-2.16453,1.06646,2.52959,2.52959,0,0,1-2.5844-2.6472c0-2.298,2.22733-3.27247,4.53919-3.291v-.239a1.39251,1.39251,0,0,0-1.53413-1.58034,3.83749,3.83749,0,0,0-1.91292.49571l-.41948-1.34177a6.32263,6.32263,0,0,1,2.81586-.64344c2.6468,0,3.31908,1.58074,3.31908,3.49287ZM138.229,87.63079c-.88241.01777-2.4584.2204-2.4584,1.78257,0,1.01117.60907,1.3789,1.11347,1.3789a1.31212,1.31212,0,0,0,1.28213-1.02934,1.56308,1.56308,0,0,0,.0628-.45976V87.63079m6.76574-6.69227v2.225h1.97573v1.43341h-1.97573v4.6328c0,1.1032.48386,1.37929,1.05067,1.37929a4.22446,4.22446,0,0,0,.6936-.05569l.04186,1.52623a5.94691,5.94691,0,0,1-1.47093.14693,2.72452,2.72452,0,0,1-1.80667-.5518,2.92347,2.92347,0,0,1-.75679-2.4264V84.59688h-1.21893V83.16347h1.21893v-1.5444l2.24826-.68056m5.63132-.11019a1.11859,1.11859,0,0,1-1.24026,1.12176,1.09308,1.09308,0,0,1-1.15495-1.12176,1.19908,1.19908,0,0,1,2.3952,0ZM148.315,92.11586V83.16348h2.24866v8.95238H148.315m11.24094-4.50364c0,3.62085-2.12187,4.65137-3.67733,4.65137-2.16374,0-3.656-1.58114-3.656-4.59686,0-3.23494,1.82761-4.65058,3.74052-4.65058C158.10673,83.01615,159.55594,84.67115,159.55594,87.61222Zm-5.08506.01857c0,1.50726.29506,3.12513,1.49227,3.12513,1.11386,0,1.36547-1.78376,1.36547-3.12513,0-1.30583-.25161-3.0888-1.40773-3.0888-1.21893,0-1.45,1.783-1.45,3.0888m6.76612-1.94887c0-1.01117-.04266-1.72807-.08414-2.51844h1.9544l.10427,1.0475h.04266a2.84233,2.84233,0,0,1,2.41614-1.19483c1.72373,0,2.62666,1.1577,2.62666,3.23494v5.86477h-2.24826v-5.6807c0-.882-.21052-1.76441-1.19721-1.76441a1.34263,1.34263,0,0,0-1.26119,1.10281,2.69056,2.69056,0,0,0-.10506.80893v5.53377H161.237V85.68192m17.98571.20224c0,1.89356-.98747,6.379-4.0972,6.379-1.42827,0-2.03813-1.23157-2.03813-2.96,0-2.00338,1.17706-6.15824,4.16079-6.15824,1.702,0,1.97454,1.58113,1.97454,2.73923Zm-5.25214,3.27246c0,1.23118.10467,2.42641,1.34375,2.42641,2.20679,0,3.02638-4.22834,3.02638-5.66214,0-1.12176-.1888-2.0958-1.23987-2.0958-2.01719,0-3.13026,3.4747-3.13026,5.33153m6.21868,2.95964,1.78653-8.16241h-1.19761l.1264-.6616h1.21815l.14694-.662a5.09548,5.09548,0,0,1,1.324-2.66616,2.8047,2.8047,0,0,1,1.87026-.7169,1.78949,1.78949,0,0,1,.79787.14733l-.20975.62487a2.46943,2.46943,0,0,0-.73546-.09164c-1.30267,0-2.03813,1.47054-2.28974,2.90474l-.08452.45976h1.91173l-.14654.66161h-1.91213l-1.80746,8.162h-.79866M31.08091,96.59581v12.8426H29.042V96.59581h2.03892m2.07684,6.17325c0-1.04751-.03831-1.79127-.07623-2.61008h1.77191l.09519,1.08622h.03832a2.491,2.491,0,0,1,2.19138-1.23868c1.56218,0,2.38177,1.20036,2.38177,3.35344v6.07885H37.52117v-5.88847c0-.91479-.19038-1.82879-1.08621-1.82879-.49532,0-.95271.38116-1.14309,1.1427a3.16429,3.16429,0,0,0-.09559.83856v5.7356H33.15775v-6.66935m8.117,4.745a3.18157,3.18157,0,0,0,1.60049.49532,1.02915,1.02915,0,0,0,1.16245-1.06686c0-.57155-.267-.95271-1.12414-1.5053-1.37179-.81921-1.88645-1.715-1.88645-2.64918a2.71824,2.71824,0,0,1,2.83916-2.7815,3.637,3.637,0,0,1,1.79087.457l-.41868,1.50569a2.35508,2.35508,0,0,0-1.277-.40012.95134.95134,0,0,0-1.0479.97167c0,.49531.2283.78128,1.12414,1.35283a3.25619,3.25619,0,0,1,1.88645,2.80085,2.75879,2.75879,0,0,1-3.06786,2.85852,3.63865,3.63865,0,0,1-1.98165-.53323l.40012-1.50569m12.27146-.76232c0,.991.03792,1.90542.07583,2.6867H51.86907l-.1335-.97167h-.03792a2.49641,2.49641,0,0,1-2.07684,1.12413c-1.69608,0-2.36281-1.27621-2.36281-3.69668V100.159h2.01956v5.48755c0,1.31491.24766,2.24827,1.08622,2.24827a1.14121,1.14121,0,0,0,1.02894-.9144,2.45206,2.45206,0,0,0,.11454-.80063V100.159h2.03853v6.59234m1.90542-3.98226c0-.85712-.05727-1.80983-.07623-2.61008h1.77191l.11454,1.41011h.05688a2.19421,2.19421,0,0,1,1.88646-1.56257,2.26149,2.26149,0,0,1,.41947.03792v2.03931a1.36111,1.36111,0,0,0-.41947-.03831,1.81947,1.81947,0,0,0-1.63841,1.60049,3.9053,3.9053,0,0,0-.07663.89583v4.89665H55.45121v-6.66935m10.80408,4.5542a14.71986,14.71986,0,0,0,.11454,2.11515H64.54025l-.11454-.95271h-.03792a2.28815,2.28815,0,0,1-1.9623,1.10517,2.48,2.48,0,0,1-2.34385-2.744c0-2.38177,2.01957-3.39136,4.11576-3.41071v-.24766c0-.95271-.38116-1.6388-1.39114-1.6388a3.14744,3.14744,0,0,0-1.734.51467l-.38077-1.39115a5.16132,5.16132,0,0,1,2.55319-.66674c2.40074,0,3.01059,1.6388,3.01059,3.62ZM64.25468,104.789c-.80064.019-2.22931.22909-2.22931,1.84854,0,1.0479.5522,1.42866,1.00959,1.42866a1.23145,1.23145,0,0,0,1.16245-1.06646,1.808,1.808,0,0,0,.05727-.47635V104.789m3.88667-2.02c0-1.04751-.03792-1.79127-.07584-2.61008h1.77191l.0948,1.08622h.03871a2.49041,2.49041,0,0,1,2.191-1.23868c1.56257,0,2.38177,1.20036,2.38177,3.35344v6.07885H72.50556v-5.88847c0-.91479-.19078-1.82879-1.08621-1.82879-.49532,0-.95271.38116-1.1431,1.1427a3.16723,3.16723,0,0,0-.09519.83856v5.7356H68.14175v-6.66935m13.14713,6.479a3.66575,3.66575,0,0,1-1.56217.30493c-2.21035,0-3.67772-1.63919-3.67772-4.6877,0-2.76254,1.54321-4.83978,4.00121-4.83978a3.19985,3.19985,0,0,1,1.33427.267l-.30493,1.61945a2.65751,2.65751,0,0,0-.991-.20935c-1.31491,0-2.001,1.42867-2.001,3.12435,0,1.90581.76233,3.0493,2.001,3.0493a2.05555,2.05555,0,0,0,.99141-.20974l.20935,1.58153m2.629-3.90642c.019,2.07684.99063,2.64838,2.07684,2.64838a4.04649,4.04649,0,0,0,1.65815-.34284l.28519,1.46737a5.94892,5.94892,0,0,1-2.3245.43844c-2.38177,0-3.67733-1.734-3.67733-4.61148,0-3.06747,1.48634-4.935,3.468-4.935,1.94333,0,2.934,1.77191,2.934,4.24926,0,.53324-.03792.83816-.05728,1.08582Zm2.53384-1.448c.01935-1.48633-.47556-2.36281-1.2-2.36281-.87687,0-1.27659,1.277-1.31491,2.36281h2.51489m12.46144,5.33509a4.52757,4.52757,0,0,1-1.88606.32389c-2.93436,0-4.61148-2.40073-4.61148-6.364,0-4.93536,2.61087-6.70727,4.89745-6.70727a3.61964,3.61964,0,0,1,1.67671.32389l-.38116,1.71543a2.66062,2.66062,0,0,0-1.21972-.24806c-1.39074,0-2.8198,1.2766-2.8198,4.78251,0,3.449,1.29555,4.6877,2.83916,4.6877a3.36722,3.36722,0,0,0,1.25725-.22909l.24765,1.715m7.31752-4.45861c0,3.75356-1.92437,4.82081-3.33487,4.82081-1.96229,0-3.31512-1.6384-3.31512-4.76354,0-3.35344,1.65736-4.82081,3.39175-4.82081C104.91622,100.00652,106.23112,101.72155,106.23112,104.77006Zm-4.61147.019c0,1.56217.26741,3.23968,1.35322,3.23968,1.00959,0,1.23829-1.84854,1.23829-3.23968,0-1.35283-.2287-3.201-1.2766-3.201-1.10517,0-1.31491,1.84854-1.31491,3.201m6.13573-2.02c0-1.04751-.03832-1.79127-.07663-2.61008h1.77191l.11455,1.10478h.03791a2.5243,2.5243,0,0,1,2.15347-1.25724,1.96575,1.96575,0,0,1,1.98165,1.33348h.03831a3.1132,3.1132,0,0,1,.93336-.99063,2.48169,2.48169,0,0,1,1.29556-.34285c1.46737,0,2.32489,1.14309,2.32489,3.42967v6.00222h-2.02v-5.62066c0-1.12492-.15247-2.11555-1.06686-2.11555-.51467,0-.93375.40052-1.12453,1.08622a4.11927,4.11927,0,0,0-.05688.74336v5.90663h-2.03892v-5.926c0-.83816-.11415-1.81022-1.02855-1.81022-.47675,0-.9531.38156-1.12453,1.14309a2.68371,2.68371,0,0,0-.0948.72441v5.86871h-2.02v-6.66935m12.44249,0c0-1.04751-.03831-1.79127-.07623-2.61008h1.77231l.11454,1.10478h.03792a2.523,2.523,0,0,1,2.15268-1.25724,1.96655,1.96655,0,0,1,1.982,1.33348h.03832a3.1088,3.1088,0,0,1,.93335-.99063,2.47971,2.47971,0,0,1,1.29556-.34285c1.467,0,2.32489,1.14309,2.32489,3.42967v6.00222h-2.02v-5.62066c0-1.12492-.15246-2.11555-1.06725-2.11555-.51467,0-.93375.40052-1.12413,1.08622a4.11512,4.11512,0,0,0-.05728.74336v5.90663H124.4657v-5.926c0-.83816-.11375-1.81022-1.02855-1.81022-.47675,0-.95271.38156-1.12453,1.14309a2.68374,2.68374,0,0,0-.09479.72441v5.86871h-2.02v-6.66935m14.53868-5.03016a1.08064,1.08064,0,0,1-1.12452,1.16244,1.064,1.064,0,0,1-1.04751-1.16244,1.08985,1.08985,0,1,1,2.172-.00039Zm-2.0962,11.69951V100.159h2.03853v9.27943h-2.03813m3.75277-1.92438a3.186,3.186,0,0,0,1.60128.49532,1.02871,1.02871,0,0,0,1.16166-1.06686c0-.57155-.26623-.95271-1.12374-1.5053-1.37219-.81921-1.88646-1.715-1.88646-2.64918a2.71824,2.71824,0,0,1,2.83916-2.7815,3.63825,3.63825,0,0,1,1.79087.457l-.41908,1.50569a2.35369,2.35369,0,0,0-1.2766-.40012.95113.95113,0,0,0-1.0479.97167c0,.49531.2283.78128,1.12373,1.35283a3.25639,3.25639,0,0,1,1.88725,2.80085,2.75911,2.75911,0,0,1-3.06827,2.85852,3.63861,3.63861,0,0,1-1.98164-.53323l.39972-1.50569m5.86913,0a3.18153,3.18153,0,0,0,1.60048.49532,1.02928,1.02928,0,0,0,1.16285-1.06686c0-.57155-.26741-.95271-1.12453-1.5053-1.37178-.81921-1.88685-1.715-1.88685-2.64918a2.71867,2.71867,0,0,1,2.84-2.7815,3.63663,3.63663,0,0,1,1.79047.457l-.41909,1.50569a2.35366,2.35366,0,0,0-1.27659-.40012.95156.95156,0,0,0-1.04791.97167c0,.49531.22831.78128,1.12452,1.35283a3.25647,3.25647,0,0,1,1.88606,2.80085,2.75879,2.75879,0,0,1-3.06786,2.85852,3.63767,3.63767,0,0,1-1.98165-.53323l.40012-1.50569m8.117-9.77513a1.08033,1.08033,0,0,1-1.12413,1.16244,1.06453,1.06453,0,0,1-1.04791-1.16244,1.09,1.09,0,1,1,2.17243-.00039Zm-2.0958,11.69951V100.159h2.03892v9.27943H148.2838m10.19422-4.66835c0,3.75356-1.92477,4.82081-3.33527,4.82081-1.96229,0-3.31473-1.6384-3.31473-4.76354,0-3.35344,1.657-4.82081,3.39136-4.82081C157.16272,100.00652,158.478,101.72155,158.478,104.77006Zm-4.61147.019c0,1.56217.26661,3.23968,1.35283,3.23968,1.01,0,1.23867-1.84854,1.23867-3.23968,0-1.35283-.2287-3.201-1.2766-3.201-1.10557,0-1.31491,1.84854-1.31491,3.201m6.13534-2.02c0-1.04751-.03831-1.79127-.07663-2.61008h1.7727l.0948,1.08622h.03831a2.49088,2.49088,0,0,1,2.191-1.23868c1.56256,0,2.38177,1.20036,2.38177,3.35344v6.07885h-2.03814v-5.88847c0-.91479-.19117-1.82879-1.08621-1.82879-.49531,0-.9527.38116-1.14348,1.1427a3.16471,3.16471,0,0,0-.09559.83856v5.7356h-2.03853v-6.66935m9.88891,2.57255c.01935,2.07684.99142,2.64838,2.07723,2.64838a4.04308,4.04308,0,0,0,1.65776-.34284l.28557,1.46737a5.95029,5.95029,0,0,1-2.3245.43844c-2.38177,0-3.67733-1.734-3.67733-4.61148,0-3.06747,1.48594-4.935,3.468-4.935,1.94334,0,2.934,1.77191,2.934,4.24926,0,.53324-.0383.83816-.05688,1.08582Zm2.53462-1.448c.01857-1.48633-.47675-2.36281-1.20076-2.36281-.87687,0-1.2762,1.277-1.31452,2.36281h2.51528m3.35344-1.12452c0-.85712-.05727-1.80983-.07663-2.61008h1.77231l.11455,1.41011h.05688a2.19376,2.19376,0,0,1,1.88646-1.56257,2.2617,2.2617,0,0,1,.41948.03792v2.03931a1.3599,1.3599,0,0,0-.41948-.03831,1.81947,1.81947,0,0,0-1.63841,1.60049,3.9053,3.9053,0,0,0-.07663.89583v4.89665h-2.03853v-6.66935m5.04951,4.745a3.179,3.179,0,0,0,1.60049.49532,1.02914,1.02914,0,0,0,1.16244-1.06686c0-.57155-.267-.95271-1.12452-1.5053-1.37179-.81921-1.88686-1.715-1.88686-2.64918a2.71868,2.71868,0,0,1,2.84-2.7815,3.64229,3.64229,0,0,1,1.79127.457l-.41948,1.50569a2.3561,2.3561,0,0,0-1.277-.40012.95155.95155,0,0,0-1.0479.97167c0,.49531.2283.78128,1.12452,1.35283a3.25575,3.25575,0,0,1,1.88606,2.80085,2.75879,2.75879,0,0,1-3.06786,2.85852,3.64107,3.64107,0,0,1-1.982-.53323l.40092-1.50569m5.106-35.089V15.8585H28.267V72.425H185.93435"/><path class="cls-4" d="M185.93435,72.425V15.8585H143.8639V72.425h42.07084"/><path class="cls-5" d="M74.30907,32.98869,68.26893,64.29417H66.48359L46.25631,33.59894,42.06194,56.23011a11.03141,11.03141,0,0,0-.23067,2.0808q0,3.59813,4.474,4.25914l-.19789,1.14862H33.86952l.19868-1.14862a6.13216,6.13216,0,0,0,3.45969-1.5681q1.2756-1.23591,2.03734-4.76907L44.97576,30.9075a11.56484,11.56484,0,0,0-3.25035-3.43362,10.72065,10.72065,0,0,0-4.66874-.95824l.19907-1.1498h12.971L68.25,52.57214l3.6639-19.85125a13.76517,13.76517,0,0,0,.22988-2.34425q0-3.85882-3.94513-3.861l.1975-1.1498h11.769l-.19947,1.1498q-4.53842.59544-5.65622,6.473M99.19759,56.488V50.60352H88.97809l-4.86623,7.44a4.77542,4.77542,0,0,0-.98984,2.37822q0,1.653,3.327,2.14833l-.19987,1.14862H74.43034l.19828-1.14862a7.27754,7.27754,0,0,0,4.175-1.80193A35.61787,35.61787,0,0,0,82.947,55.39353l20.80318-31.072h3.23257V56.95926q0,3.20118.84132,4.39028.839,1.18614,3.80887,1.22051l-.1975,1.14862H94.33808l.19868-1.14862A5.58013,5.58013,0,0,0,98.139,61.231q1.05758-1.10675,1.05856-4.743Zm0-8.60123V35.23616h-.13232L90.75158,47.88681h8.446M136.5519,32.85005l-5.33864,25.19621a4.741,4.741,0,0,0-.13193,1.08859q0,3.13836,4.45941,3.4352l-.26345,1.14862H117.254l.26227-1.14862a8.55317,8.55317,0,0,0,4.39028-2.03023,8.90358,8.90358,0,0,0,1.826-4.109L128.77936,32.852a11.28919,11.28919,0,0,0,.33061-2.44141q0-3.16858-4.28048-3.89457l.1655-1.15021H142.2812l-.13153,1.14981a7.63055,7.63055,0,0,0-3.90208,1.83116,10.45713,10.45713,0,0,0-1.69567,4.50325"/><path class="cls-3" d="M182.36564,25.636l-1.43776,10.60658h-.99536a9.56871,9.56871,0,0,0-2.72343-5.74706,7.40992,7.40992,0,0,0-5.2711-2.03734q-5.90231,0-10.28349,6.304a25.82275,25.82275,0,0,0-4.37962,15.11615q0,5.94258,2.93752,9.55553a9.39852,9.39852,0,0,0,7.6588,3.61492q6.25779,0,11.12086-6.42684l.88517.52613a22.733,22.733,0,0,1-6.53072,7.1307,16.13917,16.13917,0,0,1-9.04243,2.32252q-7.2668,0-11.40249-4.40687-4.13907-4.40805-4.13867-12.166,0-10.39922,6.65947-17.13454,6.65947-6.73471,15.273-6.73452a22.9311,22.9311,0,0,1,4.65374.44436,17.72266,17.72266,0,0,0,3.36528.44278,2.75742,2.75742,0,0,0,2.54372-1.4109h1.10754"/><path class="cls-6" d="M182.36564,25.636l-1.43776,10.60658h-.99536a9.56871,9.56871,0,0,0-2.72343-5.74706,7.40992,7.40992,0,0,0-5.2711-2.03734q-5.90231,0-10.28349,6.304a25.82275,25.82275,0,0,0-4.37962,15.11615q0,5.94258,2.93752,9.55553a9.39852,9.39852,0,0,0,7.6588,3.61492q6.25779,0,11.12086-6.42684l.88517.52613a22.733,22.733,0,0,1-6.53072,7.1307,16.13917,16.13917,0,0,1-9.04243,2.32252q-7.2668,0-11.40249-4.40687-4.13907-4.40805-4.13867-12.166,0-10.39922,6.65947-17.13454,6.65947-6.73471,15.273-6.73452a22.9311,22.9311,0,0,1,4.65374.44436,17.72266,17.72266,0,0,0,3.36528.44278,2.75742,2.75742,0,0,0,2.54372-1.4109Z"/><path class="cls-7" d="M180.52855,23.79892,179.09,34.4063h-.99536a9.56927,9.56927,0,0,0-2.72265-5.749,7.41048,7.41048,0,0,0-5.27188-2.03694q-5.90229,0-10.28269,6.304A25.82108,25.82108,0,0,0,155.437,48.04125q0,5.94258,2.93871,9.55473a9.39571,9.39571,0,0,0,7.65761,3.61492q6.25954,0,11.12283-6.42683l.88359.52652a22.72279,22.72279,0,0,1-6.53072,7.13149,16.147,16.147,0,0,1-9.04283,2.32252q-7.26678,0-11.40288-4.40805-4.13846-4.40628-4.13827-12.1656,0-10.39982,6.66027-17.13375,6.65889-6.7365,15.273-6.73571a22.96131,22.96131,0,0,1,4.65334.44436,17.70287,17.70287,0,0,0,3.3649.444,2.76,2.76,0,0,0,2.5445-1.41089h1.10754"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/nav/nav_featured_logo.svg b/content/en/case-studies/nav/nav_featured_logo.svg
index 79ae438459..42b4ffa967 100644
--- a/content/en/case-studies/nav/nav_featured_logo.svg
+++ b/content/en/case-studies/nav/nav_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#0191e9;}.cls-3{fill:#0091e9;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.04384" y="-3.09231" width="223.25536" height="134.51136"/><path class="cls-2" d="M45.52289,58.40931v.67992q0,13.93346-.00007,27.86692c0,1.38065-.53827,1.91475-1.93728,1.91529q-5.28807.002-10.57613-.00008c-1.38822-.00063-1.92493-.54092-1.925-1.93233q-.00046-24.54695-.00005-49.09388c0-1.353.57919-1.92554,1.94686-1.92565,3.80461-.00032,7.60928.01,11.41379-.00895a2.04535,2.04535,0,0,1,1.71751.81129Q54.03893,46.45059,61.924,56.17238q4.04849,4.99347,8.103,9.98208c.07192.08853.12491.2127.32189.21055V65.8111q0-13.98573.00015-27.97148c0-1.36549.55959-1.92,1.93681-1.92011q5.28806-.00056,10.57612,0c1.34222.00018,1.90831.58125,1.90846,1.96856q.00156,14.66543.00056,29.33085,0,9.85536-.00062,19.71075A2.263,2.263,0,0,1,84.52869,88.14a1.37319,1.37319,0,0,1-1.04378.69444,5.03028,5.03028,0,0,1-.6784.03606c-3.76971.002-7.53949-.01164-11.30906.01172a2.24873,2.24873,0,0,1-1.91838-.92957Q62.60826,79.30668,55.596,70.69411q-4.824-5.946-9.65083-11.88973A1.04432,1.04432,0,0,0,45.52289,58.40931Z"/><path class="cls-3" d="M123.01876,56.06019c-.2594-1.23634-.48657-2.48055-.78675-3.70693a1.60083,1.60083,0,0,1,1.699-2.14585c3.24478.05866,6.49131.01913,9.73714.02113A1.51454,1.51454,0,0,1,135.39865,51.95q.00269,17.59165,0,35.18331a1.50965,1.50965,0,0,1-1.72062,1.73444q-4.89491.01271-9.78984.00037a1.51127,1.51127,0,0,1-1.62212-2.05353c.25809-1.184.504-2.37063.75558-3.55756-.358.33974-.71292.66321-1.053,1.00145a19.61428,19.61428,0,0,1-5.08847,4.04243,16.514,16.514,0,0,1-8.88021,1.51593,18.6292,18.6292,0,0,1-7.80715-2.40237A19.19129,19.19129,0,0,1,91.61794,77.127a22.109,22.109,0,0,1-1.24153-9.90284A20.27607,20.27607,0,0,1,95.94859,54.708a18.01769,18.01769,0,0,1,10.63178-5.53131,17.6862,17.6862,0,0,1,7.30216.3216,15.14214,15.14214,0,0,1,7.36191,4.72185c.56309.63191,1.13169,1.25893,1.69777,1.8882Zm-9.77385,22.141a8.79066,8.79066,0,1,0,.14059-17.58031,8.79085,8.79085,0,1,0-.14059,17.58031Z"/><path class="cls-3" d="M162.37991,77.63555c.49774-1.75171.99389-3.48281,1.48143-5.21633q2.78715-9.91015,5.57042-19.82139a3.04284,3.04284,0,0,1,3.14933-2.36811q5.00009-.00879,10.00019-.001c1.19946.00084,1.72.6945,1.36948,1.8371q-3.41624,11.13649-6.839,22.271-1.962,6.38839-3.92252,12.77725a2.069,2.069,0,0,1-2.39972,1.75589q-8.42949.00264-16.859.0004a2.08773,2.08773,0,0,1-2.45568-1.82338q-5.3462-17.42612-10.69272-34.85212c-.04576-.14911-.10449-.29524-.13769-.447a1.19831,1.19831,0,0,1,1.16194-1.50906c3.56019-.01552,7.12059-.02529,10.68066-.00068a3.01084,3.01084,0,0,1,2.7849,2.42663q1.102,3.90333,2.20008,7.80776,2.35458,8.35854,4.70637,16.71786A.84887.84887,0,0,0,162.37991,77.63555Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#0191e9;}.cls-3{fill:#0091e9;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.04384" y="-3.09231" width="223.25536" height="134.51136"/><path class="cls-2" d="M45.52289,58.40931v.67992q0,13.93346-.00007,27.86692c0,1.38065-.53827,1.91475-1.93728,1.91529q-5.28807.002-10.57613-.00008c-1.38822-.00063-1.92493-.54092-1.925-1.93233q-.00046-24.54695-.00005-49.09388c0-1.353.57919-1.92554,1.94686-1.92565,3.80461-.00032,7.60928.01,11.41379-.00895a2.04535,2.04535,0,0,1,1.71751.81129Q54.03893,46.45059,61.924,56.17238q4.04849,4.99347,8.103,9.98208c.07192.08853.12491.2127.32189.21055V65.8111q0-13.98573.00015-27.97148c0-1.36549.55959-1.92,1.93681-1.92011q5.28806-.00056,10.57612,0c1.34222.00018,1.90831.58125,1.90846,1.96856q.00156,14.66543.00056,29.33085,0,9.85536-.00062,19.71075A2.263,2.263,0,0,1,84.52869,88.14a1.37319,1.37319,0,0,1-1.04378.69444,5.03028,5.03028,0,0,1-.6784.03606c-3.76971.002-7.53949-.01164-11.30906.01172a2.24873,2.24873,0,0,1-1.91838-.92957Q62.60826,79.30668,55.596,70.69411q-4.824-5.946-9.65083-11.88973A1.04432,1.04432,0,0,0,45.52289,58.40931Z"/><path class="cls-3" d="M123.01876,56.06019c-.2594-1.23634-.48657-2.48055-.78675-3.70693a1.60083,1.60083,0,0,1,1.699-2.14585c3.24478.05866,6.49131.01913,9.73714.02113A1.51454,1.51454,0,0,1,135.39865,51.95q.00269,17.59165,0,35.18331a1.50965,1.50965,0,0,1-1.72062,1.73444q-4.89491.01271-9.78984.00037a1.51127,1.51127,0,0,1-1.62212-2.05353c.25809-1.184.504-2.37063.75558-3.55756-.358.33974-.71292.66321-1.053,1.00145a19.61428,19.61428,0,0,1-5.08847,4.04243,16.514,16.514,0,0,1-8.88021,1.51593,18.6292,18.6292,0,0,1-7.80715-2.40237A19.19129,19.19129,0,0,1,91.61794,77.127a22.109,22.109,0,0,1-1.24153-9.90284A20.27607,20.27607,0,0,1,95.94859,54.708a18.01769,18.01769,0,0,1,10.63178-5.53131,17.6862,17.6862,0,0,1,7.30216.3216,15.14214,15.14214,0,0,1,7.36191,4.72185c.56309.63191,1.13169,1.25893,1.69777,1.8882Zm-9.77385,22.141a8.79066,8.79066,0,1,0,.14059-17.58031,8.79085,8.79085,0,1,0-.14059,17.58031Z"/><path class="cls-3" d="M162.37991,77.63555c.49774-1.75171.99389-3.48281,1.48143-5.21633q2.78715-9.91015,5.57042-19.82139a3.04284,3.04284,0,0,1,3.14933-2.36811q5.00009-.00879,10.00019-.001c1.19946.00084,1.72.6945,1.36948,1.8371q-3.41624,11.13649-6.839,22.271-1.962,6.38839-3.92252,12.77725a2.069,2.069,0,0,1-2.39972,1.75589q-8.42949.00264-16.859.0004a2.08773,2.08773,0,0,1-2.45568-1.82338q-5.3462-17.42612-10.69272-34.85212c-.04576-.14911-.10449-.29524-.13769-.447a1.19831,1.19831,0,0,1,1.16194-1.50906c3.56019-.01552,7.12059-.02529,10.68066-.00068a3.01084,3.01084,0,0,1,2.7849,2.42663q1.102,3.90333,2.20008,7.80776,2.35458,8.35854,4.70637,16.71786A.84887.84887,0,0,0,162.37991,77.63555Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/nerdalize/nerdalize_featured_logo.svg b/content/en/case-studies/nerdalize/nerdalize_featured_logo.svg
index 43a001461d..aa2661e503 100644
--- a/content/en/case-studies/nerdalize/nerdalize_featured_logo.svg
+++ b/content/en/case-studies/nerdalize/nerdalize_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#0b5593;}.cls-3{fill:#ea4a27;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.97667" y="-3.55577" width="223.25536" height="134.51136"/><path class="cls-2" d="M11.822,73.482a.8178.8178,0,0,1,1.38415.25617c.06885.11139.15664.21108.23575.31612,1.09989,1.46032,1.0865,1.4429,2.52152.34.42932-.33.5455-.57414.163-1.01159a15.88664,15.88664,0,0,1-1.071-1.41431.62725.62725,0,0,1,.10919-.9575.64627.64627,0,0,1,.94773.20243c.3423.44153.69764.87663.99762,1.34625.32116.50278.64663.60051,1.07576.14786.6588-.69493,1.07141-.36034,1.52866.28615a3.79778,3.79778,0,0,1,.18957,4.82854.68277.68277,0,0,0,.04562.94045,6.63589,6.63589,0,0,1,.99641,6.61,12.41518,12.41518,0,0,0-.51112,1.89932,1.64569,1.64569,0,0,0,1.73871,2.06834,3.95926,3.95926,0,0,0,.492-.02518c1.53281-.157,1.82513-.50215,1.8231-2.00188Q24.47594,77.895,24.485,68.47685c0-6.14729.02053-12.29468-.01081-18.4418a6.0255,6.0255,0,0,1,2.62479-5.3223c.9668-.6816,1.87443-1.4477,2.848-2.11883a1.37952,1.37952,0,0,0,.65935-1.2992c-.02766-3.12271-.017-6.24579-.01129-9.36874a2.75288,2.75288,0,0,1,2.98094-3.0279c.95345-.015,1.90771-.01961,2.861.00128a2.73187,2.73187,0,0,1,2.91512,2.89873c.0201.95291-.008,1.90682.01194,2.85973.00568.27072-.1592.64874.1799.78806.2542.10445.45993-.19118.665-.33661q4.62537-3.28041,9.23921-6.577a8.23223,8.23223,0,0,0,1.64419-1.20956h1.184c2.6786,3.10283,5.36883,6.19571,8.03248,9.31129,2.60585,3.048,5.17767,6.125,7.78012,9.176a3.93914,3.93914,0,0,1,.9994,2.60975c.01391,5.16009.00286,10.32025.01561,15.48035a1.02649,1.02649,0,0,1-.49755.97924c-.64918.421-1.26784.88894-2.0784,1.46433,0-.56536-.00052-.91151.00007-1.25766.0087-5.09413-.008-10.18852.04407-15.28222a4.70681,4.70681,0,0,0-1.208-3.29756q-6.59334-7.7899-13.06631-15.68133c-.47628-.577-.77322-.64719-1.398-.1833-4.24854,3.15466-8.53,6.265-12.80126,9.38909-.33973.24848-.6825.4928-1.01847.73516-.35356-.26444-.20936-.58417-.21072-.84968-.013-2.5307-.054-5.06275.01464-7.59165.02794-1.02968-.33673-1.36335-1.30831-1.2523a7.14411,7.14411,0,0,1-1.47766.00127c-.80114-.07623-1.00507.28324-.99876,1.03547.03,3.58226.00048,7.165.02617,10.74733a1.37646,1.37646,0,0,1-.65707,1.30053c-1.27614.86968-2.48084,1.84778-3.78178,2.67633a3.43253,3.43253,0,0,0-1.65116,3.14783q-.00111,4.97937-.00045,9.95873,0,13.114.00062,26.22793c.00053,2.76782,1.35457,4.13012,4.09941,4.13254,10.38972.00915,20.77971-.018,31.169.05589,2.1477.01529,3.54137-.77448,4.2212-2.77873.24125-.71122.53295-.69675,1.11959-.34988,1.49272.88264,1.496.84843.83078,2.41019a5.36051,5.36051,0,0,1-5.42626,3.46707q-15.09174-.02984-30.18359-.008c-.85487,0-1.70986.00833-2.56459-.00315a5.48693,5.48693,0,0,1-3.8558-1.5033.9423.9423,0,0,0-1.28178-.15451,6.37246,6.37246,0,0,1-3.34959.6442,4.35119,4.35119,0,0,1-4.14216-4.97757,16.029,16.029,0,0,1,.74145-2.8562,3.83848,3.83848,0,0,0-.16793-3.06026c-.4412-.80846-.83528-1.47051-2.08042-1.25405-1.71248.29769-2.889-.783-3.80455-2.14536-.33311-.49567-.03221-.74767.325-.93718.78138-.41454.712-.8744.15691-1.42427-.3648-.36135-.51987-.91018-1.02028-1.15392Z"/><path class="cls-3" d="M36.76065,50.64483c1.21623,0,2.43393.03577,3.6481-.01419a1.3717,1.3717,0,0,1,1.41221.77211q9.08991,15.29009,18.2237,30.5541c.6231,1.04356,1.23559,2.09388,1.8815,3.12321.25236.40216.19192.61486-.22464.8427a8.89123,8.89123,0,0,1-8.15476.25411,2.46242,2.46242,0,0,1-1.10088-1.08972Q42.46873,68.31826,32.47714,51.558c-.53654-.90086-.5277-.9093.53623-.91231C34.26245,50.64213,35.51156,50.64484,36.76065,50.64483Z"/><path class="cls-3" d="M78.33789,78.24985c-1.90656,0-3.81361-.02417-5.7194.014-.61212.01226-.92737-.16547-.94246-.789-.00237-.09808-.02307-.19562-.03329-.29362-.33833-3.24559-.24612-3.3459,2.94791-3.35254,1.24861-.0026,2.49751-.05449,3.74558-.03612.64677.00951.70795-.26859.54721-.78707A3.53347,3.53347,0,0,0,75.896,70.34612a4.0193,4.0193,0,0,0-4.17315,1.6186c-1.607,2.23791-1.49041,6.91226.20393,9.07162a4.34125,4.34125,0,0,0,6.82785-.12092,1.09632,1.09632,0,0,1,1.1542-.49175c1.44.12618,2.88083.26464,4.32433.32012.741.02847.71661.30462.47421.839A9.08842,9.08842,0,0,1,77.566,87.14917c-3.7361.60935-7.2372.12492-10.041-2.71037-3.2428-3.27925-3.82219-9.53527-1.34033-13.80055a10.3865,10.3865,0,0,1,11.77787-4.63037c4.02317,1.07018,6.02112,3.96531,6.86066,7.84513a16.905,16.905,0,0,1,.2282,3.63c-.00079.60168-.19678.789-.79686.77912C82.28283,78.2295,80.31019,78.24984,78.33789,78.24985Z"/><path class="cls-3" d="M202.6379,80.81586a9.17568,9.17568,0,0,1-5.91747,5.96408,12.3009,12.3009,0,0,1-6.13415.41136c-4.83457-.87482-7.88931-4.395-8.24383-9.44658a13.142,13.142,0,0,1,.5498-4.96437c2.66356-8.353,12.889-8.81387,16.9427-4.32636,2.41161,2.66968,3.04276,5.88,2.83268,9.34729-.02573.42468-.28314.44893-.60082.4488-4.0106-.00166-8.02121-.00708-12.03176.00739-.46776.0017-.60692-.18539-.67468-.61893a11.6,11.6,0,0,1-.04395-2.94493c.0624-.63842.29229-.87933.97682-.86087,1.90529.05136,3.81324-.00371,5.71933.02984.62463.011.70486-.18165.546-.73761a3.53443,3.53443,0,0,0-2.8957-2.7584,4.02291,4.02291,0,0,0-4.27613,1.58252c-1.6228,2.246-1.52239,6.876.173,9.06963a4.36351,4.36351,0,0,0,6.83988-.07729c.252-.34325.45756-.5763.93619-.53325C199.06688,80.56386,200.80167,80.6782,202.6379,80.81586Z"/><path class="cls-3" d="M61.71663,82.01122c-2.548-4.2929-5.00508-8.5578-7.599-12.73786A8.43868,8.43868,0,0,1,52.784,64.38321c.10421-4.26707.04972-8.53852.01749-12.80787-.00545-.72127.16478-.96388.92424-.94876,2.46321.04906,4.928.02654,7.39214.01142.495-.003.78554.05182.78432.67573q-.03,15.27168-.02556,30.54345C61.87659,81.87653,61.83832,81.89586,61.71663,82.01122Z"/><path class="cls-3" d="M32.41724,54.3944c.85931,1.44076,1.60995,2.698,2.35935,3.956Q37.877,63.555,40.98114,68.7574a2.409,2.409,0,0,1,.38488,1.29171q-.01863,7.43919.00574,14.87839c.00328.66855-.16169.916-.87213.90455-2.46363-.03976-4.92838-.02637-7.3925-.00689-.54432.0043-.82674-.0742-.82531-.73565q.03279-15.12468.02289-30.24945A3.43086,3.43086,0,0,1,32.41724,54.3944Z"/><path class="cls-3" d="M150.29167,48.97121c0,4.39817,0,8.53733,0,12.6765,0,8.05028-.01093,16.1006.017,24.15079.00277.79958-.1817,1.10307-1.02768,1.05633a34.75867,34.75867,0,0,0-3.84383.00029c-.83352.04643-1.03179-.23118-1.02954-1.03961.02725-9.75884.11722-19.5195-.05142-29.27551-.04289-2.48073.519-4.15647,2.74558-5.30694A28.01308,28.01308,0,0,0,150.29167,48.97121Z"/><path class="cls-3" d="M141.45293,78.84648c0,2.74593-.01832,4.98083.01217,7.21505.00819.59978-.16922.80393-.77932.78717-1.41258-.03881-2.82868-.05435-4.23985.00476-.74854.03135-.93812-.20469-.93193-.94013.03565-4.239.01457-8.47835.02086-12.71759.0029-1.96519-.80309-2.79785-2.79623-2.85748-2.019-.06039-2.89122.45341-3.666,2.23253a.46232.46232,0,0,1-.50939.32469c-1.44649.0006-2.89334-.01776-4.33933.009-.65033.012-.56774-.38547-.51457-.781a6.26924,6.26924,0,0,1,3.29479-5.09456,12.12506,12.12506,0,0,1,11.28334.05085,5.56054,5.56054,0,0,1,3.00179,4.49863C141.64,74.16351,141.354,76.7654,141.45293,78.84648Z"/><path class="cls-3" d="M113.36883,71.49639c-3.10183-1.76774-5.56972-.711-6.44735,2.60246a9.99855,9.99855,0,0,0-.13225,4.39727c.50779,2.80235,2.6614,5.23825,6.57665,3.093,0,1.49608-.00769,2.92582.004,4.3554.00438.53584-.4195.61249-.76594.76712a8.21607,8.21607,0,0,1-10.29386-3.38485,13.89814,13.89814,0,0,1,.392-14.06575,8.30458,8.30458,0,0,1,9.88407-2.98057,1.04887,1.04887,0,0,1,.79792,1.15145C113.333,68.73763,113.36883,70.04672,113.36883,71.49639Z"/><path class="cls-3" d="M120.16444,73.45414c0,4.13993-.02122,8.28007.01872,12.41961.0076.78785-.21625,1.01519-.991.97976-1.34482-.06151-2.69519-.04255-4.04182-.00565-.61439.01684-.86917-.12869-.8675-.81012q.03093-12.61687.0009-25.23383c-.00138-.62351.21308-.77834.79725-.76374,1.4125.0353,2.828.05118,4.23918-.005.72287-.02878.86256.23828.8582.90071C120.15085,65.10847,120.16443,69.28135,120.16444,73.45414Z"/><path class="cls-3" d="M180.4666,68.95252c.391,1.30745-.402,2.37241-1.40552,3.4728-4.11495,4.512-8.16281,9.08508-12.23609,13.635a4.76335,4.76335,0,0,1-3.632.7531c-.27784-.127-.24687-.35684-.24752-.58018-.00341-1.149.01119-2.29822-.008-3.44689a1.30388,1.30388,0,0,1,.48342-.92518q6.87109-7.531,13.74211-15.06208a4.45348,4.45348,0,0,1,3.12376-.51406c.223.15794.1758.4074.17795.63135C180.47034,67.50728,180.4666,68.09823,180.4666,68.95252Z"/><path class="cls-3" d="M93.942,76.59335c0,3.11787-.0165,6.2359.01332,9.35348.00631.65924-.14115.93107-.86121.90533-1.47558-.05274-2.95461-.03193-4.43166-.00739-.50826.00845-.6841-.15758-.683-.67535q.02025-9.649.00271-19.298c-.00063-.44581.11389-.65608.60567-.64935,1.57566.02157,3.15235.03234,4.72749-.00354.67118-.01528.63019.37637.62946.82425Q93.9369,71.81807,93.942,76.59335Z"/><path class="cls-3" d="M153.94111,76.48991c0-3.0895.02031-6.17924-.01494-9.26835-.00835-.7328.12392-1.05809.95752-1.01251,1.37684.07528,2.76118.03973,4.14155.011.55412-.01152.82291.082.82047.74128q-.03556,9.56418-.00106,19.12856c.00215.63613-.232.77045-.80595.75716-1.41307-.03273-2.82882-.048-4.24066.005-.71078.02666-.878-.22313-.87117-.89656C153.95892,82.80058,153.94112,79.64515,153.94111,76.48991Z"/><path class="cls-3" d="M134.69533,84.09767c0,2.3475-.12789,2.52832-2.42593,3.08569a8.78434,8.78434,0,0,1-6.1567-.4198,6.13342,6.13342,0,0,1-3.566-6.16564,5.50152,5.50152,0,0,1,3.99421-5.3895c2.48172-.90947,5.12365-1.10662,7.69061-1.63849.3755-.0778.46365.10857.46291.42406-.00237,1.0175-.01552,2.03529.00482,3.05238.01021.511-.33026.5613-.696.64072-1.05747.22964-2.11638.45531-3.16572.7184a5.59186,5.59186,0,0,0-1.18791.46245,1.949,1.949,0,0,0-1.16068,2.08884,2.02952,2.02952,0,0,0,1.61817,1.77749,4.97417,4.97417,0,0,0,3.8058-.518c.70725-.39009.83863-.18749.78867.50332C134.66852,83.17669,134.69532,83.63815,134.69533,84.09767Z"/><path class="cls-3" d="M167.58927,86.62105c1.3428-1.502,2.71025-3.03112,4.07686-4.56094a.86841.86841,0,0,1,.72492-.22005c2.65866.00129,5.31741.01135,7.97591-.00854.53471-.004.76646.13177.748.71434-.03838,1.21277-.02443,2.42779-.00536,3.64148.007.44308-.1089.65786-.60219.65543-4.26629-.02092-8.53266-.02437-12.799-.03656C167.69108,86.80616,167.67387,86.75489,167.58927,86.62105Z"/><path class="cls-3" d="M176.27305,66.41794c-1.40947,1.51442-2.80083,3.01136-4.19525,4.50542-.20632.221-.488.15527-.74355.15575-2.16393.00406-4.32795-.0089-6.49171.01065-.50755.00458-.795-.0772-.77632-.68318.03634-1.17875.02068-2.35953.00565-3.53921-.0056-.44026.11891-.6481.61115-.64557,3.77017.01938,7.54045.01642,11.31069.025C176.04459,66.24691,176.09532,66.30652,176.27305,66.41794Z"/><path class="cls-3" d="M94.94411,72.59106c0-1.7087.01491-3.17776-.0083-4.64622a1.24842,1.24842,0,0,1,.5945-1.06132,5.88525,5.88525,0,0,1,4.00494-1.03516c.51859.02072.54211.34168.53924.73641-.00978,1.34435-.0211,2.68915.00518,4.03306.01021.52168-.13468.65046-.67618.6A5.204,5.204,0,0,0,94.94411,72.59106Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#0b5593;}.cls-3{fill:#ea4a27;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.97667" y="-3.55577" width="223.25536" height="134.51136"/><path class="cls-2" d="M11.822,73.482a.8178.8178,0,0,1,1.38415.25617c.06885.11139.15664.21108.23575.31612,1.09989,1.46032,1.0865,1.4429,2.52152.34.42932-.33.5455-.57414.163-1.01159a15.88664,15.88664,0,0,1-1.071-1.41431.62725.62725,0,0,1,.10919-.9575.64627.64627,0,0,1,.94773.20243c.3423.44153.69764.87663.99762,1.34625.32116.50278.64663.60051,1.07576.14786.6588-.69493,1.07141-.36034,1.52866.28615a3.79778,3.79778,0,0,1,.18957,4.82854.68277.68277,0,0,0,.04562.94045,6.63589,6.63589,0,0,1,.99641,6.61,12.41518,12.41518,0,0,0-.51112,1.89932,1.64569,1.64569,0,0,0,1.73871,2.06834,3.95926,3.95926,0,0,0,.492-.02518c1.53281-.157,1.82513-.50215,1.8231-2.00188Q24.47594,77.895,24.485,68.47685c0-6.14729.02053-12.29468-.01081-18.4418a6.0255,6.0255,0,0,1,2.62479-5.3223c.9668-.6816,1.87443-1.4477,2.848-2.11883a1.37952,1.37952,0,0,0,.65935-1.2992c-.02766-3.12271-.017-6.24579-.01129-9.36874a2.75288,2.75288,0,0,1,2.98094-3.0279c.95345-.015,1.90771-.01961,2.861.00128a2.73187,2.73187,0,0,1,2.91512,2.89873c.0201.95291-.008,1.90682.01194,2.85973.00568.27072-.1592.64874.1799.78806.2542.10445.45993-.19118.665-.33661q4.62537-3.28041,9.23921-6.577a8.23223,8.23223,0,0,0,1.64419-1.20956h1.184c2.6786,3.10283,5.36883,6.19571,8.03248,9.31129,2.60585,3.048,5.17767,6.125,7.78012,9.176a3.93914,3.93914,0,0,1,.9994,2.60975c.01391,5.16009.00286,10.32025.01561,15.48035a1.02649,1.02649,0,0,1-.49755.97924c-.64918.421-1.26784.88894-2.0784,1.46433,0-.56536-.00052-.91151.00007-1.25766.0087-5.09413-.008-10.18852.04407-15.28222a4.70681,4.70681,0,0,0-1.208-3.29756q-6.59334-7.7899-13.06631-15.68133c-.47628-.577-.77322-.64719-1.398-.1833-4.24854,3.15466-8.53,6.265-12.80126,9.38909-.33973.24848-.6825.4928-1.01847.73516-.35356-.26444-.20936-.58417-.21072-.84968-.013-2.5307-.054-5.06275.01464-7.59165.02794-1.02968-.33673-1.36335-1.30831-1.2523a7.14411,7.14411,0,0,1-1.47766.00127c-.80114-.07623-1.00507.28324-.99876,1.03547.03,3.58226.00048,7.165.02617,10.74733a1.37646,1.37646,0,0,1-.65707,1.30053c-1.27614.86968-2.48084,1.84778-3.78178,2.67633a3.43253,3.43253,0,0,0-1.65116,3.14783q-.00111,4.97937-.00045,9.95873,0,13.114.00062,26.22793c.00053,2.76782,1.35457,4.13012,4.09941,4.13254,10.38972.00915,20.77971-.018,31.169.05589,2.1477.01529,3.54137-.77448,4.2212-2.77873.24125-.71122.53295-.69675,1.11959-.34988,1.49272.88264,1.496.84843.83078,2.41019a5.36051,5.36051,0,0,1-5.42626,3.46707q-15.09174-.02984-30.18359-.008c-.85487,0-1.70986.00833-2.56459-.00315a5.48693,5.48693,0,0,1-3.8558-1.5033.9423.9423,0,0,0-1.28178-.15451,6.37246,6.37246,0,0,1-3.34959.6442,4.35119,4.35119,0,0,1-4.14216-4.97757,16.029,16.029,0,0,1,.74145-2.8562,3.83848,3.83848,0,0,0-.16793-3.06026c-.4412-.80846-.83528-1.47051-2.08042-1.25405-1.71248.29769-2.889-.783-3.80455-2.14536-.33311-.49567-.03221-.74767.325-.93718.78138-.41454.712-.8744.15691-1.42427-.3648-.36135-.51987-.91018-1.02028-1.15392Z"/><path class="cls-3" d="M36.76065,50.64483c1.21623,0,2.43393.03577,3.6481-.01419a1.3717,1.3717,0,0,1,1.41221.77211q9.08991,15.29009,18.2237,30.5541c.6231,1.04356,1.23559,2.09388,1.8815,3.12321.25236.40216.19192.61486-.22464.8427a8.89123,8.89123,0,0,1-8.15476.25411,2.46242,2.46242,0,0,1-1.10088-1.08972Q42.46873,68.31826,32.47714,51.558c-.53654-.90086-.5277-.9093.53623-.91231C34.26245,50.64213,35.51156,50.64484,36.76065,50.64483Z"/><path class="cls-3" d="M78.33789,78.24985c-1.90656,0-3.81361-.02417-5.7194.014-.61212.01226-.92737-.16547-.94246-.789-.00237-.09808-.02307-.19562-.03329-.29362-.33833-3.24559-.24612-3.3459,2.94791-3.35254,1.24861-.0026,2.49751-.05449,3.74558-.03612.64677.00951.70795-.26859.54721-.78707A3.53347,3.53347,0,0,0,75.896,70.34612a4.0193,4.0193,0,0,0-4.17315,1.6186c-1.607,2.23791-1.49041,6.91226.20393,9.07162a4.34125,4.34125,0,0,0,6.82785-.12092,1.09632,1.09632,0,0,1,1.1542-.49175c1.44.12618,2.88083.26464,4.32433.32012.741.02847.71661.30462.47421.839A9.08842,9.08842,0,0,1,77.566,87.14917c-3.7361.60935-7.2372.12492-10.041-2.71037-3.2428-3.27925-3.82219-9.53527-1.34033-13.80055a10.3865,10.3865,0,0,1,11.77787-4.63037c4.02317,1.07018,6.02112,3.96531,6.86066,7.84513a16.905,16.905,0,0,1,.2282,3.63c-.00079.60168-.19678.789-.79686.77912C82.28283,78.2295,80.31019,78.24984,78.33789,78.24985Z"/><path class="cls-3" d="M202.6379,80.81586a9.17568,9.17568,0,0,1-5.91747,5.96408,12.3009,12.3009,0,0,1-6.13415.41136c-4.83457-.87482-7.88931-4.395-8.24383-9.44658a13.142,13.142,0,0,1,.5498-4.96437c2.66356-8.353,12.889-8.81387,16.9427-4.32636,2.41161,2.66968,3.04276,5.88,2.83268,9.34729-.02573.42468-.28314.44893-.60082.4488-4.0106-.00166-8.02121-.00708-12.03176.00739-.46776.0017-.60692-.18539-.67468-.61893a11.6,11.6,0,0,1-.04395-2.94493c.0624-.63842.29229-.87933.97682-.86087,1.90529.05136,3.81324-.00371,5.71933.02984.62463.011.70486-.18165.546-.73761a3.53443,3.53443,0,0,0-2.8957-2.7584,4.02291,4.02291,0,0,0-4.27613,1.58252c-1.6228,2.246-1.52239,6.876.173,9.06963a4.36351,4.36351,0,0,0,6.83988-.07729c.252-.34325.45756-.5763.93619-.53325C199.06688,80.56386,200.80167,80.6782,202.6379,80.81586Z"/><path class="cls-3" d="M61.71663,82.01122c-2.548-4.2929-5.00508-8.5578-7.599-12.73786A8.43868,8.43868,0,0,1,52.784,64.38321c.10421-4.26707.04972-8.53852.01749-12.80787-.00545-.72127.16478-.96388.92424-.94876,2.46321.04906,4.928.02654,7.39214.01142.495-.003.78554.05182.78432.67573q-.03,15.27168-.02556,30.54345C61.87659,81.87653,61.83832,81.89586,61.71663,82.01122Z"/><path class="cls-3" d="M32.41724,54.3944c.85931,1.44076,1.60995,2.698,2.35935,3.956Q37.877,63.555,40.98114,68.7574a2.409,2.409,0,0,1,.38488,1.29171q-.01863,7.43919.00574,14.87839c.00328.66855-.16169.916-.87213.90455-2.46363-.03976-4.92838-.02637-7.3925-.00689-.54432.0043-.82674-.0742-.82531-.73565q.03279-15.12468.02289-30.24945A3.43086,3.43086,0,0,1,32.41724,54.3944Z"/><path class="cls-3" d="M150.29167,48.97121c0,4.39817,0,8.53733,0,12.6765,0,8.05028-.01093,16.1006.017,24.15079.00277.79958-.1817,1.10307-1.02768,1.05633a34.75867,34.75867,0,0,0-3.84383.00029c-.83352.04643-1.03179-.23118-1.02954-1.03961.02725-9.75884.11722-19.5195-.05142-29.27551-.04289-2.48073.519-4.15647,2.74558-5.30694A28.01308,28.01308,0,0,0,150.29167,48.97121Z"/><path class="cls-3" d="M141.45293,78.84648c0,2.74593-.01832,4.98083.01217,7.21505.00819.59978-.16922.80393-.77932.78717-1.41258-.03881-2.82868-.05435-4.23985.00476-.74854.03135-.93812-.20469-.93193-.94013.03565-4.239.01457-8.47835.02086-12.71759.0029-1.96519-.80309-2.79785-2.79623-2.85748-2.019-.06039-2.89122.45341-3.666,2.23253a.46232.46232,0,0,1-.50939.32469c-1.44649.0006-2.89334-.01776-4.33933.009-.65033.012-.56774-.38547-.51457-.781a6.26924,6.26924,0,0,1,3.29479-5.09456,12.12506,12.12506,0,0,1,11.28334.05085,5.56054,5.56054,0,0,1,3.00179,4.49863C141.64,74.16351,141.354,76.7654,141.45293,78.84648Z"/><path class="cls-3" d="M113.36883,71.49639c-3.10183-1.76774-5.56972-.711-6.44735,2.60246a9.99855,9.99855,0,0,0-.13225,4.39727c.50779,2.80235,2.6614,5.23825,6.57665,3.093,0,1.49608-.00769,2.92582.004,4.3554.00438.53584-.4195.61249-.76594.76712a8.21607,8.21607,0,0,1-10.29386-3.38485,13.89814,13.89814,0,0,1,.392-14.06575,8.30458,8.30458,0,0,1,9.88407-2.98057,1.04887,1.04887,0,0,1,.79792,1.15145C113.333,68.73763,113.36883,70.04672,113.36883,71.49639Z"/><path class="cls-3" d="M120.16444,73.45414c0,4.13993-.02122,8.28007.01872,12.41961.0076.78785-.21625,1.01519-.991.97976-1.34482-.06151-2.69519-.04255-4.04182-.00565-.61439.01684-.86917-.12869-.8675-.81012q.03093-12.61687.0009-25.23383c-.00138-.62351.21308-.77834.79725-.76374,1.4125.0353,2.828.05118,4.23918-.005.72287-.02878.86256.23828.8582.90071C120.15085,65.10847,120.16443,69.28135,120.16444,73.45414Z"/><path class="cls-3" d="M180.4666,68.95252c.391,1.30745-.402,2.37241-1.40552,3.4728-4.11495,4.512-8.16281,9.08508-12.23609,13.635a4.76335,4.76335,0,0,1-3.632.7531c-.27784-.127-.24687-.35684-.24752-.58018-.00341-1.149.01119-2.29822-.008-3.44689a1.30388,1.30388,0,0,1,.48342-.92518q6.87109-7.531,13.74211-15.06208a4.45348,4.45348,0,0,1,3.12376-.51406c.223.15794.1758.4074.17795.63135C180.47034,67.50728,180.4666,68.09823,180.4666,68.95252Z"/><path class="cls-3" d="M93.942,76.59335c0,3.11787-.0165,6.2359.01332,9.35348.00631.65924-.14115.93107-.86121.90533-1.47558-.05274-2.95461-.03193-4.43166-.00739-.50826.00845-.6841-.15758-.683-.67535q.02025-9.649.00271-19.298c-.00063-.44581.11389-.65608.60567-.64935,1.57566.02157,3.15235.03234,4.72749-.00354.67118-.01528.63019.37637.62946.82425Q93.9369,71.81807,93.942,76.59335Z"/><path class="cls-3" d="M153.94111,76.48991c0-3.0895.02031-6.17924-.01494-9.26835-.00835-.7328.12392-1.05809.95752-1.01251,1.37684.07528,2.76118.03973,4.14155.011.55412-.01152.82291.082.82047.74128q-.03556,9.56418-.00106,19.12856c.00215.63613-.232.77045-.80595.75716-1.41307-.03273-2.82882-.048-4.24066.005-.71078.02666-.878-.22313-.87117-.89656C153.95892,82.80058,153.94112,79.64515,153.94111,76.48991Z"/><path class="cls-3" d="M134.69533,84.09767c0,2.3475-.12789,2.52832-2.42593,3.08569a8.78434,8.78434,0,0,1-6.1567-.4198,6.13342,6.13342,0,0,1-3.566-6.16564,5.50152,5.50152,0,0,1,3.99421-5.3895c2.48172-.90947,5.12365-1.10662,7.69061-1.63849.3755-.0778.46365.10857.46291.42406-.00237,1.0175-.01552,2.03529.00482,3.05238.01021.511-.33026.5613-.696.64072-1.05747.22964-2.11638.45531-3.16572.7184a5.59186,5.59186,0,0,0-1.18791.46245,1.949,1.949,0,0,0-1.16068,2.08884,2.02952,2.02952,0,0,0,1.61817,1.77749,4.97417,4.97417,0,0,0,3.8058-.518c.70725-.39009.83863-.18749.78867.50332C134.66852,83.17669,134.69532,83.63815,134.69533,84.09767Z"/><path class="cls-3" d="M167.58927,86.62105c1.3428-1.502,2.71025-3.03112,4.07686-4.56094a.86841.86841,0,0,1,.72492-.22005c2.65866.00129,5.31741.01135,7.97591-.00854.53471-.004.76646.13177.748.71434-.03838,1.21277-.02443,2.42779-.00536,3.64148.007.44308-.1089.65786-.60219.65543-4.26629-.02092-8.53266-.02437-12.799-.03656C167.69108,86.80616,167.67387,86.75489,167.58927,86.62105Z"/><path class="cls-3" d="M176.27305,66.41794c-1.40947,1.51442-2.80083,3.01136-4.19525,4.50542-.20632.221-.488.15527-.74355.15575-2.16393.00406-4.32795-.0089-6.49171.01065-.50755.00458-.795-.0772-.77632-.68318.03634-1.17875.02068-2.35953.00565-3.53921-.0056-.44026.11891-.6481.61115-.64557,3.77017.01938,7.54045.01642,11.31069.025C176.04459,66.24691,176.09532,66.30652,176.27305,66.41794Z"/><path class="cls-3" d="M94.94411,72.59106c0-1.7087.01491-3.17776-.0083-4.64622a1.24842,1.24842,0,0,1,.5945-1.06132,5.88525,5.88525,0,0,1,4.00494-1.03516c.51859.02072.54211.34168.53924.73641-.00978,1.34435-.0211,2.68915.00518,4.03306.01021.52168-.13468.65046-.67618.6A5.204,5.204,0,0,0,94.94411,72.59106Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/netease/netease_featured_logo.svg b/content/en/case-studies/netease/netease_featured_logo.svg
index 7ddb664f1a..0ea176812d 100644
--- a/content/en/case-studies/netease/netease_featured_logo.svg
+++ b/content/en/case-studies/netease/netease_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#be3038;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.60453" y="-5.55447" width="223.25536" height="134.51136"/><path id="red" class="cls-2" d="M46.87693,47.72179a3.02022,3.02022,0,0,0,.37341-.42008v-.51344a6.1816,6.1816,0,0,1,.09335-1.40027,9.9391,9.9391,0,0,0,.09335-1.867,3.48615,3.48615,0,0,0-.93352-1.96038c-1.3536-1.1669-2.47382-1.587-3.36066-1.30692a4.01592,4.01592,0,0,1-1.96038-.04668,4.55825,4.55825,0,0,0-3.03393.32673,3.0861,3.0861,0,0,1-1.02687.28005,1.32812,1.32812,0,0,0-.60679,0c-.09335.04668-.14.04668-.1867.09335a8.01461,8.01461,0,0,0-1.727.88685c-.04667.04667-.04667.14-.09335.23338a3.64593,3.64593,0,0,0-.56011,1.727c.09335.79349.1867,1.3536.23338,1.63365a3.10835,3.10835,0,0,0,.3734,1.82036v.09335l.09336.04668c.42008.37341.84016.65346,1.12022.88684l.09335.09335a1.856,1.856,0,0,1,.84016-.09335,2.267,2.267,0,0,0,1.12022,0,2.1395,2.1395,0,0,1,.93352-.04667,1.22109,1.22109,0,0,0,.93352-.18671,3.42953,3.42953,0,0,1,1.30692-.09335h.04668a2.93666,2.93666,0,0,0,.51343-.37341,1.58442,1.58442,0,0,1,.28-.28005.59162.59162,0,0,1,.18671-.42008,4.25726,4.25726,0,0,0,.28-.74682c0-.23338-.04667-.51343-.09335-.93351a1.75092,1.75092,0,0,1,0-.70014,4.1829,4.1829,0,0,0,.32673-1.12022,1.51327,1.51327,0,0,1,.65346-1.30693c.46676-.37341.88685-.56011,1.1669-.46676.28006.04668.46676.28006.65346.56011A3.41022,3.41022,0,0,1,45.29,43.521a4.03657,4.03657,0,0,1-.28006,1.07354,2.91786,2.91786,0,0,1-.60678.93352A2.09055,2.09055,0,0,0,43.983,46.9283c-.04667.14-.04667.28005-.09335.42008a1.48024,1.48024,0,0,1,.23338.28005c.04668,0,.04668.04668.09335.09335a3.54869,3.54869,0,0,1,1.1669.09335,11.38709,11.38709,0,0,0,1.21357.04668c.04667,0,.09335,0,.09335.04667.04667-.09335.09335-.09335.09335-.09335s0-.04666.09336-.09334Zm-7.65484,5.181a.42076.42076,0,0,1,.04668-.23338,1.3307,1.3307,0,0,0-.09335-.74681v-.88685a.59516.59516,0,0,0-.28006-.1867,3.25934,3.25934,0,0,0-.93351-.37341h-.04668a3.31629,3.31629,0,0,1-.98019.37341,5.19706,5.19706,0,0,1-.79349.09335c-.14.04668-.18671.09335-.23338.09335a1.52181,1.52181,0,0,0-.56011.51343,1.10222,1.10222,0,0,0-.28006.42009,5.51448,5.51448,0,0,1-.1867,1.16689,2.5942,2.5942,0,0,0-.1867,1.07355,2.2403,2.2403,0,0,1,1.12022-.65346,2.7251,2.7251,0,0,1,.93351-.18671,1.29529,1.29529,0,0,0,.84017,0,1.02873,1.02873,0,0,1,.74681,0h.09335a2.09384,2.09384,0,0,0,.79349-.46675ZM50.65767,63.45155a3.28957,3.28957,0,0,1,.04668,1.49362,2.80326,2.80326,0,0,0-.23338.65346,1.51966,1.51966,0,0,1-.28006.56011,1.84,1.84,0,0,1-1.26024.46676,1.35888,1.35888,0,0,1-1.07355-.60679,1.99565,1.99565,0,0,1-.42008-1.26024,1.27594,1.27594,0,0,0-.09335-.74682.69238.69238,0,0,1,0-.60679,1.29526,1.29526,0,0,0,0-.84016A3.792,3.792,0,0,1,47.157,60.931a10.56587,10.56587,0,0,0-.09335-3.22063,2.2617,2.2617,0,0,1,0-.79349,5.11939,5.11939,0,0,0,0-1.21357,3.63682,3.63682,0,0,1,.09335-1.49363,4.16354,4.16354,0,0,0,.09336-1.5403,3.64224,3.64224,0,0,1-.14-1.12022,2.72021,2.72021,0,0,0-.60679-.51344,6.15278,6.15278,0,0,0-.65346-.60678c-.04668-.04668-.09335-.04668-.18671-.04668a4.23964,4.23964,0,0,0-2.28711-.09335,2.8799,2.8799,0,0,1-.84017.09335,1.09777,1.09777,0,0,0-.56011.18671,1.0163,1.0163,0,0,0-.37341.23337.14457.14457,0,0,1,.04668.09336,5.95225,5.95225,0,0,0,.04667.88684,1.184,1.184,0,0,1-.09335.56011.17147.17147,0,0,0-.04667.14,2.66339,2.66339,0,0,0,.65346.60679c0,.04668.04667.04668.09335.09335a3.20552,3.20552,0,0,1,1.12022.09335,5.67074,5.67074,0,0,0,1.26025,0,2.074,2.074,0,0,1,1.12022.42009,1.29035,1.29035,0,0,1,.60679,1.16689,1.05192,1.05192,0,0,1-.74681,1.02687,2.97758,2.97758,0,0,1-2.00707-.04668A4.05023,4.05023,0,0,0,41.976,55.75a2.31675,2.31675,0,0,1-1.26024.04668H40.669a10.37668,10.37668,0,0,0-2.05374.88684l.04668.04668a2.70821,2.70821,0,0,1-.23338,1.49362,3.813,3.813,0,0,0-.04668.65346v.74682a1.77736,1.77736,0,0,0,.14.74681.93826.93826,0,0,0,.1867.37341c.32674.1867.37341.46676.23338.84017a1.23518,1.23518,0,0,1-.70013.74681.95452.95452,0,0,1-.51344,0c-.14-.04667-.32673-.09335-.56011-.1867A1.7979,1.7979,0,0,1,36.04813,60.791a7.89782,7.89782,0,0,1-.1867-2.42715,5.19805,5.19805,0,0,0,.09335-.79348v-.28006a.87951.87951,0,0,0-.18671-.42008,1.97581,1.97581,0,0,0-.23337-.32673,2.46564,2.46564,0,0,1-.60679-.04668c-.23338-.14-.42008-.23338-.56011-.32673a.3529.3529,0,0,0,.04667.18671,6.01671,6.01671,0,0,1-.14,1.16689,2.301,2.301,0,0,0-.23338,1.02687,3.15208,3.15208,0,0,1-.09335.65346,1.28106,1.28106,0,0,0-.09336.60679,1.87293,1.87293,0,0,1-.14.70014,1.83065,1.83065,0,0,0-.18671.84016,2.8631,2.8631,0,0,1-.14.74682,11.08241,11.08241,0,0,0-.70014,2.14709,2.602,2.602,0,0,1-.60679,1.02687,2.4084,2.4084,0,0,1-1.21357.65346,2.17689,2.17689,0,0,1-1.02687-.23338,1.51123,1.51123,0,0,1-.60678-.84017,3.33448,3.33448,0,0,1-.09336-.93352,8.81463,8.81463,0,0,1,.28006-.84016,4.04864,4.04864,0,0,0,.60678-.88684,1.96333,1.96333,0,0,0,.60679-1.21358,1.05245,1.05245,0,0,1,.23338-.5601,8.83791,8.83791,0,0,0,.46676-1.49363,2.29884,2.29884,0,0,0,.23338-.84017,7.5469,7.5469,0,0,1,.56011-2.84722,2.4785,2.4785,0,0,0,.09335-1.63366c.04667-.42008.09335-.70013.09335-.88684a2.32729,2.32729,0,0,0,.14-1.12022,6.86942,6.86942,0,0,1-.04668-1.68033,21.02226,21.02226,0,0,0-.09335-2.7072A3.64958,3.64958,0,0,0,31.754,45.388a4.38273,4.38273,0,0,1-.70014-2.42714,5.00874,5.00874,0,0,1,.46676-2.75388,3.44,3.44,0,0,1,1.1669-1.727,1.3294,1.3294,0,0,1,1.49363.04667c-.04668-.04667-.04668-.04667,0-.04667a.92082.92082,0,0,1,.51343,0,3.81294,3.81294,0,0,0,.65346-.04668,3.30653,3.30653,0,0,1,1.63366-.14,2.18694,2.18694,0,0,0,.93351.04667,2.117,2.117,0,0,1,1.12022-.28005.8793.8793,0,0,0,.56011-.09335,2.28887,2.28887,0,0,1,1.54031-.14,2.84876,2.84876,0,0,0,1.40027.04667,5.61328,5.61328,0,0,1,1.96039-.04667,5.66436,5.66436,0,0,0,.84016.04667,1.01183,1.01183,0,0,1,.65347.23338,1.44005,1.44005,0,0,0,.84016.23338,3.1813,3.1813,0,0,1,.98019.09335,1.38743,1.38743,0,0,1,.60679.51343,1.311,1.311,0,0,0,.74681.65347,2.66966,2.66966,0,0,1,1.26025,1.63365,3.08244,3.08244,0,0,1,0,1.30693,1.02429,1.02429,0,0,1-.37341.70013.92158.92158,0,0,0-.28005.65347,1.18585,1.18585,0,0,1-.14.56011,1.106,1.106,0,0,0-.09335.74681,1.15092,1.15092,0,0,1,0,.79349,9.67753,9.67753,0,0,0-.09335,2.61384,3.41009,3.41009,0,0,1-.28006,1.49363,1.63819,1.63819,0,0,0,.04668.93351,2.52434,2.52434,0,0,1-.04668,1.1669,2.27549,2.27549,0,0,0,0,1.12022,7.02806,7.02806,0,0,1,.09335,2.38047,5.20426,5.20426,0,0,0,.14,2.5205,13.6216,13.6216,0,0,1,.74682,3.454,11.85095,11.85095,0,0,1,.51343,1.77369Zm-8.775-3.50069a4.08562,4.08562,0,0,1,.93351-.09335,2.84355,2.84355,0,0,0,.88685-.1867,1.71632,1.71632,0,0,1,1.49362.1867,1.49339,1.49339,0,0,1,.74681,1.12022A1.14139,1.14139,0,0,1,45.43,62.14462a3.1311,3.1311,0,0,1-1.96039.28006,2.05177,2.05177,0,0,0-.42008-.04668,1.58775,1.58775,0,0,1-.46676.04668,1.67814,1.67814,0,0,0-.51343.09335,2.8098,2.8098,0,0,1-1.63366-.04668,1.238,1.238,0,0,1-.56011-.93351,2.42392,2.42392,0,0,1,.28006-.88684,1.51983,1.51983,0,0,1,.98019-.56011,2.655,2.655,0,0,0,.74682-.14Zm-4.94764-16.85a.62748.62748,0,0,0,.28-.32673c.04668-.1867.28006-.28.79349-.28a1.17512,1.17512,0,0,1,.93352.42008,2.87541,2.87541,0,0,1,.46676,1.12022,1.39765,1.39765,0,0,0,.1867.46676.6477.6477,0,0,1,0,.42008c.09335.32673.09335.60679.14.74682a1.72108,1.72108,0,0,1-.09336.79348,1.28326,1.28326,0,0,1-.60678.74682c-.23338.09335-.51343-.04668-.88684-.42009a1.86772,1.86772,0,0,1-.88684-1.07354,7.50592,7.50592,0,0,1-.42009-1.1669c0-.14-.04667-.42008-.09335-.79349,0-.42008.04668-.65346.18671-.65346ZM25.03264,48.42193c-.04668,0-.04668.04667,0,0a1.70291,1.70291,0,0,1-.93352.32673.7457.7457,0,0,0-.65346.56011,2.27483,2.27483,0,0,1-.9802,1.12022.94.94,0,0,0-.51343.74681,1.58536,1.58536,0,0,1-.42008.98019,1.11538,1.11538,0,0,0-.46676.79349,2.8621,2.8621,0,0,0,.70014,1.26025,1.90186,1.90186,0,0,0,.84016.23338,2.46638,2.46638,0,0,1,.79349.1867.60872.60872,0,0,0,.60679.09335,1.14753,1.14753,0,0,1,.74681-.09335,1.93292,1.93292,0,0,0,1.07355-.1867,3.3671,3.3671,0,0,0,1.12022-.88685v-.09335a3.01672,3.01672,0,0,1,.14-1.02686,2.30424,2.30424,0,0,0,.14-1.1669,1.57172,1.57172,0,0,0-.32673-.93352c-.04668-.09335-.09335-.23338-.1867-.42008a1.32785,1.32785,0,0,0-.42009-.65346.97657.97657,0,0,1-.1867-.28006c-.04668-.09335-.09335-.14-.14-.23338-.28-.09334-.60678-.1867-.93351-.32672Zm-6.44127,5.83448a2.19855,2.19855,0,0,0-.09335-.93352,1.6634,1.6634,0,0,1,.28-1.26024c.37341-.84017.74682-1.3536,1.12022-1.49363a.92753.92753,0,0,0,.42009-.74681,2.34762,2.34762,0,0,1,.51343-1.21357,1.57326,1.57326,0,0,0,.04668-1.21358,1.06154,1.06154,0,0,0-.28006-.5601.82794.82794,0,0,0-.46676-.37341,1.22344,1.22344,0,0,1-.79349-.60679.72577.72577,0,0,0-.3734-.28.38517.38517,0,0,1-.23338-.46676.4659.4659,0,0,0-.23338-.46676.82167.82167,0,0,1-.28006-.60679c-.04667-.70014.04668-1.12022.18671-1.21357a.568.568,0,0,0,.23338-.46676,4.63139,4.63139,0,0,1,.56011-1.49362,8.9326,8.9326,0,0,1,.93351-1.54031.99793.99793,0,0,0,.28006-.46676,1.4591,1.4591,0,0,1,.42008-.51343.67972.67972,0,0,0,.28006-.42008.64161.64161,0,0,1,.3734-.46676c.14-.04668.28006-.23338.46676-.51343.37341-.70014.70014-1.07355.93352-1.02687a.99542.99542,0,0,0,.56011-.14,1.22855,1.22855,0,0,1,.93352-.09335,1.20649,1.20649,0,0,0,.65346.09335,1.928,1.928,0,0,1,1.3536.28005,1.84213,1.84213,0,0,1,.93351,1.30693c.04668.46676-.04667.70014-.23338.79349-.42008.32673-.70013.46675-.98019.42008a.64232.64232,0,0,0-.56011.09335,1.07161,1.07161,0,0,1-.65346.1867.70789.70789,0,0,0-.60679.14.558.558,0,0,1-.3734.18671c-.14-.04668-.28006.04667-.42009.23338a1.11848,1.11848,0,0,0-.32673.60678.68339.68339,0,0,1-.28005.51344,1.32784,1.32784,0,0,0-.42008.65346c-.14.32673-.23338.51343-.32674.51343a1.66148,1.66148,0,0,0-.42008,1.07355,1.84959,1.84959,0,0,0-.28,1.447,3.3376,3.3376,0,0,0,.65346.79349c.1867.04667.28.14.28.23338a.54862.54862,0,0,0,.56011.32673,1.808,1.808,0,0,1,.51344.14.63628.63628,0,0,0,.84016-.09336.88976.88976,0,0,1,.56011-.32672.63976.63976,0,0,0,.56011-.51344,1.29261,1.29261,0,0,1,.23338-.37341,1.25414,1.25414,0,0,0,.51344-.79348,1.51983,1.51983,0,0,1,.28-.56011.45742.45742,0,0,0,.14-.56011c0-.18671-.28-.42008-.74681-.65346-.18671-.14-.18671-.37341-.04668-.79349a.6937.6937,0,0,1,.65346-.37341,1.39786,1.39786,0,0,0,.46676-.1867.56627.56627,0,0,1,.60679-.04668,1.10314,1.10314,0,0,0,.60678.09335,2.21566,2.21566,0,0,1,1.68033.93352c.28006.37341.37341.60679.23338.79349s-.09335.46675.04668.79348a1.43923,1.43923,0,0,1,0,.88685c-.18671.42008-.42009.70013-.65347.70013a3.34979,3.34979,0,0,0-1.40027.79349,1.08329,1.08329,0,0,0-.37341.60679,1.48355,1.48355,0,0,0-.14.42008c0,.09335,0,.14.04667.14a4.81421,4.81421,0,0,1,.09335.93352l.09336.09335a.478.478,0,0,0,.23338.28.86077.86077,0,0,1,.51343.60679,1.42136,1.42136,0,0,0,.42008.60679,1.01665,1.01665,0,0,1,.42009.60678,4.33616,4.33616,0,0,1,.32673,1.3536,4.13734,4.13734,0,0,0,.23338,1.12023,1.59813,1.59813,0,0,1,.14.88684,2.61415,2.61415,0,0,1-.46675,1.3536,2.37321,2.37321,0,0,1-.60679.42008c-.14.14-.32673.28-.56011.46676a4.9816,4.9816,0,0,0-1.1669,1.02687,2.65457,2.65457,0,0,1-2.00706.93351,3.55325,3.55325,0,0,0-.98019.14,1.47248,1.47248,0,0,1-1.1669-.1867,2.74622,2.74622,0,0,0-1.40027-.37341,2.81758,2.81758,0,0,1-2.05374-.74681,2.74121,2.74121,0,0,1-1.02687-1.867Zm8.58836,4.15415a.7259.7259,0,0,0,.28-.37341c.04668-.18671.32673-.28006.88684-.28006a1.23357,1.23357,0,0,1,.98019.46676,3.00747,3.00747,0,0,1,.51344,1.12022c.04667.1867.09335.37341.14.51344a.79553.79553,0,0,1,0,.46676,3.14886,3.14886,0,0,1,.14.79349,1.66731,1.66731,0,0,1-.09335.79348c-.23338.42008-.46676.70014-.70014.74682q-.35007.14-.98019-.42008a2.16954,2.16954,0,0,1-.88684-1.1669,3.62818,3.62818,0,0,1-.42008-1.21357,3.83026,3.83026,0,0,0-.14-.84017c.09335-.3734.1867-.60678.28006-.60678ZM23.259,59.4841a1.01637,1.01637,0,0,0,.37341-.23338c.09335-.1867.37341-.1867.88684,0a1.29517,1.29517,0,0,1,.74682.65346,2.79093,2.79093,0,0,1,.14,1.21358,5.4564,5.4564,0,0,0,.18671,1.77368,3.01511,3.01511,0,0,1-.28006,1.5403c-.04668.32673-.04668.60679-.09335.79349a1.587,1.587,0,0,1-.32673.70014,1.39973,1.39973,0,0,1-.84017.51344c-.23338.04668-.46676-.1867-.74681-.65346a2.12638,2.12638,0,0,1-.46676-1.30693,10.17176,10.17176,0,0,1-.1867-2.66052,15.2179,15.2179,0,0,0,.23338-1.77368c.14-.37342.28005-.56012.3734-.56012Zm-4.4342.28006c.1867-.70014.46676-1.12022.88684-1.26025a.87962.87962,0,0,1,1.07354.42009,1.56326,1.56326,0,0,1,0,1.447,12.67383,12.67383,0,0,0-.04667,1.35359,1.65973,1.65973,0,0,1-.09335,1.26025A4.54517,4.54517,0,0,1,19.945,64.105a7.90411,7.90411,0,0,0-.46676,1.26024,1.43107,1.43107,0,0,1-.60678.93352,1.45465,1.45465,0,0,1-1.12023.14,1.0596,1.0596,0,0,1-.74681-.84017,2.7233,2.7233,0,0,1,.04668-1.49362,4.9767,4.9767,0,0,0,.42008-1.40028,3.17853,3.17853,0,0,1,.79349-2.10041,2.92927,2.92927,0,0,0,.56011-.84016Zm49.56974,2.10041a2.64684,2.64684,0,0,1,.9802-.70014,3.73778,3.73778,0,0,0,.98019-.70013,7.409,7.409,0,0,1,1.26024-.79349c.56011-.32673,1.26025-.79349,2.10042-1.30693a11.24352,11.24352,0,0,1,1.447-.98019,2.50017,2.50017,0,0,1,.70014-.70014A11.80326,11.80326,0,0,0,77.823,55.2366a1.72413,1.72413,0,0,1,1.30693-.3734c.56011.14.84016.46675.79349.98019a1.93758,1.93758,0,0,1-.93352,1.21357,2.835,2.835,0,0,0-.74682.74681q-.84016.70014-1.5403,1.26025a2.50949,2.50949,0,0,0-.9802.88684,4.87512,4.87512,0,0,1-1.5403,1.12022,2.2384,2.2384,0,0,0-.23338.79349c-.09335.42008-.14.65345-.1867.65345a1.33239,1.33239,0,0,0-.60679,0c-.1867.04668-.42008.04668-.74681.09335-.09335,0-.14,0-.18671.04668-.04667,0-.04667,0-.09335.04668a3.60574,3.60574,0,0,0-.88684.79349,3.54578,3.54578,0,0,1-1.30692.74682,4.56775,4.56775,0,0,0-1.12022.79348,8.34787,8.34787,0,0,1-1.63366.84017,5.59546,5.59546,0,0,1-2.10041.74682,2.17784,2.17784,0,0,0-1.12022.51343,3.21966,3.21966,0,0,1-1.68033.60679,2.34641,2.34641,0,0,1-1.587-.23338,2.08571,2.08571,0,0,1-.93352-1.30692c-.09335-.42008.14-.84017.60679-1.3536a2.49967,2.49967,0,0,1,1.63365-.70014,5.881,5.881,0,0,0,2.3338-.65346,3.57131,3.57131,0,0,1,1.30692-.42008,8.72135,8.72135,0,0,0,2.75388-1.21358Zm9.89528,5.64778a2.41284,2.41284,0,0,1-1.40027.23337,3.566,3.566,0,0,0-.9802-.23337c-.51344-.09335-.84017-.23338-.9802-.46676a2.50756,2.50756,0,0,0-.46675-.74682,1.05136,1.05136,0,0,1-.37341-.65346,1.57742,1.57742,0,0,0-.28006-.56011A1.8621,1.8621,0,0,1,73.3888,63.965a.88224.88224,0,0,1,.28005-.84017,1.13712,1.13712,0,0,1,1.30693.09335,6.01443,6.01443,0,0,1,.84016.60679,1.06393,1.06393,0,0,0,.51344.14,4.06671,4.06671,0,0,0,2.05373-.14,5.52359,5.52359,0,0,0,2.24045-.79349.574.574,0,0,1,.51343-.32673,4.69163,4.69163,0,0,0,1.68034-1.49363,5.86834,5.86834,0,0,1,.60678-.74681,5.67266,5.67266,0,0,0,1.12022-2.14709,3.64076,3.64076,0,0,0-.04668-2.19376A4.88091,4.88091,0,0,0,83.0507,54.023a.62051.62051,0,0,0-.32673-.14c-.32673,0-.60679.04668-.74682.04668a3.76983,3.76983,0,0,1-.88684.14,3.21256,3.21256,0,0,1-.60678.09335c-.14,0-.28006-.28006-.37341-.74681a9.20761,9.20761,0,0,0-.46676-1.26025c-.09335-.14-.14-.28006-.1867-.32673a1.36279,1.36279,0,0,0-.42008-.09335,2.50076,2.50076,0,0,0-1.30692-.04668,2.29776,2.29776,0,0,1-1.07355.09335h-.09335a1.95429,1.95429,0,0,1-.88684.9802,2.72789,2.72789,0,0,0-.65346.60678c-.51344.42009-.98019.79349-1.447,1.12023a2.86391,2.86391,0,0,0-.88684.79348,12.73455,12.73455,0,0,1-1.40028,1.02687,3.89589,3.89589,0,0,0-.74681.56011,6.2056,6.2056,0,0,1-1.12022.88684,2.2813,2.2813,0,0,0-.84017.65346,2.3289,2.3289,0,0,1-1.1669.65346,3.87953,3.87953,0,0,0-.98019.74682c-.32673.1867-.84016.42008-1.49362.74681a5.23871,5.23871,0,0,1-1.91371.60679c-.18671-.04668-.51344.14-.98019.42008a3.4451,3.4451,0,0,1-1.54031.56011,2.17387,2.17387,0,0,1-1.447-.28006,1.72106,1.72106,0,0,1-.79349-1.21357c-.09335-.32673.09335-.74682.56011-1.1669a2.248,2.248,0,0,1,1.49363-.60679,5.231,5.231,0,0,0,2.14709-.51343,3.78815,3.78815,0,0,1,1.16689-.37341,7.89709,7.89709,0,0,0,2.42714-1.12022,2.93708,2.93708,0,0,1,.93352-.60679,4.23037,4.23037,0,0,0,.88684-.60678,6.92819,6.92819,0,0,1,1.1669-.70014c.56011-.32673,1.21357-.70014,1.96038-1.1669.60679-.42008,1.02687-.70013,1.26025-.88684A4.03079,4.03079,0,0,1,72.922,52.296a8.25324,8.25324,0,0,0,1.49363-.98019l-.04668-.04667a1.18855,1.18855,0,0,1-.51344-1.12022,1.30772,1.30772,0,0,1,.84017-1.12022,4.32487,4.32487,0,0,1,1.49362-.23338c.46676.04667.9802.09335,1.49363.1867a2.26986,2.26986,0,0,0,1.30692.14,1.81989,1.81989,0,0,1,.74682-.09335,2.37434,2.37434,0,0,0,1.02687.1867,1.285,1.285,0,0,1,.84016.23338,7.56735,7.56735,0,0,0,1.68034.93352,2.118,2.118,0,0,1,1.02686.79349,8.20618,8.20618,0,0,0,1.447,1.26024.9424.9424,0,0,1,.42008.84017l.56011,1.12022a1.36663,1.36663,0,0,1,.32673,1.02687,2.3776,2.3776,0,0,0,.32673.79349.57393.57393,0,0,1,.04667.60678,1.38156,1.38156,0,0,0-.09335.98019c.18671.28006.09335.84017-.23337,1.63366a3.24775,3.24775,0,0,0-.09335.74682,3.66052,3.66052,0,0,1-.70014,1.727q-.91018,1.12023-1.26025,1.12022a1.47562,1.47562,0,0,0-.46676.65346,6.71157,6.71157,0,0,1-1.68033,1.447,10.88337,10.88337,0,0,1-3.08061,1.68034,5.989,5.989,0,0,1-1.54029.70014Zm-11.949-29.87254c-.70014-.18671-1.07355-.56011-1.07355-1.12023a1.41362,1.41362,0,0,1,.56011-1.26024,2.67629,2.67629,0,0,1,1.727-.60679c.42008-.04667.84016-.09335,1.30692-.1867a6.349,6.349,0,0,1,2.19377-.37341,16.61818,16.61818,0,0,1,2.38046.09335,6.69908,6.69908,0,0,0,2.38047.14,5.71471,5.71471,0,0,1,3.36066.42008,1.75021,1.75021,0,0,0,1.07354.23338,3.1465,3.1465,0,0,1,1.587.70014c.60679.37341.93352.70014.93352.98019a1.21729,1.21729,0,0,0,.42008.79349,2.51975,2.51975,0,0,1,.42008,1.867,5.38489,5.38489,0,0,0,.32673,1.12022,3.14285,3.14285,0,0,1,.28005,1.49363v2.19376a3.28914,3.28914,0,0,1-.74681,2.24044,3.48678,3.48678,0,0,1-1.77369,1.30693,3.9842,3.9842,0,0,1-2.33379.37341,4.80546,4.80546,0,0,0-1.68033.09335,2.36812,2.36812,0,0,1-1.49363.09335,1.92557,1.92557,0,0,0-1.35359-.09335,1.70364,1.70364,0,0,1-1.49363.09335,1.7936,1.7936,0,0,0-1.12022-.09335,7.15369,7.15369,0,0,1-.51343,1.26024,4.852,4.852,0,0,1-.98019.9802,3.73058,3.73058,0,0,0-.60679.60678,1.2758,1.2758,0,0,1-.70014.70014,2.87083,2.87083,0,0,0-.88684.56011,3.68456,3.68456,0,0,1-1.447.93352,10.02491,10.02491,0,0,0-1.21357.65346,2.336,2.336,0,0,1-1.54031.42008,3.15572,3.15572,0,0,0-1.5403.46676,1.9,1.9,0,0,1-1.07355.28005,1.65663,1.65663,0,0,0-.70014.04668,3.00033,3.00033,0,0,1-1.82035.09335c-.46676-.14-.74682-.32673-.74682-.46676-.04667-.1867-.09335-.32673-.1867-.32673a.87745.87745,0,0,1-.1867-.46676,1.33626,1.33626,0,0,1,.28-1.02686,2.46442,2.46442,0,0,1,.98019-.56011,2.84892,2.84892,0,0,1,1.40028-.04668,4.3713,4.3713,0,0,0,1.16689.09335,2.88451,2.88451,0,0,0,1.26025-.42008,2.09578,2.09578,0,0,1,1.26025-.46676,2.64721,2.64721,0,0,0,1.26024-.60679,2.46537,2.46537,0,0,1,1.12022-.51343,4.01268,4.01268,0,0,0,1.40028-1.07355,2.61592,2.61592,0,0,1,.46676-.70013,2.42632,2.42632,0,0,0-1.727.09335,3.0767,3.0767,0,0,1-1.77368-.14c-.84017-.23338-1.3536-.51344-1.54031-.93352a1.85429,1.85429,0,0,0-.79348-1.07354c-.37341-.23338-.51344-.70014-.42009-1.49363-.04667-1.1669-.09335-2.10041-.1867-2.84723a2.48792,2.48792,0,0,1-.04668-1.30692,5.95057,5.95057,0,0,0,.04668-.93352A3.65641,3.65641,0,0,1,62.56,38.15323a1.86833,1.86833,0,0,1,.60679-.79349,1.121,1.121,0,0,1,.70013-.28005,2.81775,2.81775,0,0,1,.74682.23338,1.47743,1.47743,0,0,1,.46675.84016,4.93869,4.93869,0,0,1,.09335,2.14709,8.89533,8.89533,0,0,0-.09335,2.66052,3.40758,3.40758,0,0,0,.60679,1.63366,2.18631,2.18631,0,0,0,1.3536,1.02686,5.057,5.057,0,0,0,2.98726-.09335,7.87031,7.87031,0,0,1,4.15414-.14,3.763,3.763,0,0,0,2.28712-.09335,6.75411,6.75411,0,0,1,2.24044-.23338,1.67876,1.67876,0,0,0,1.63365-.5601,2.47956,2.47956,0,0,0,.79349-1.3536,3.64151,3.64151,0,0,0-.1867-1.91371,3.87806,3.87806,0,0,1-.28006-1.30693,5.42769,5.42769,0,0,0-.1867-.84016c-.28006-.37341-.46676-.60679-.46676-.74682a1.0166,1.0166,0,0,0-.42008-.60678,2.18327,2.18327,0,0,1-.65345-.37341c-.23338-.32673-1.3536-.51344-3.36066-.60679a25.12078,25.12078,0,0,1-3.40734-.09335,5.28334,5.28334,0,0,0-3.40734.42008,3.07187,3.07187,0,0,1-2.42712.56013ZM71.195,40.02028a6.84281,6.84281,0,0,1,2.75388-.04668,3.71036,3.71036,0,0,0,1.867.09335,2.12625,2.12625,0,0,1,1.63365.09335,1.74983,1.74983,0,0,1,.70014,1.30693,1.49339,1.49339,0,0,1-.60679,1.02686,1.68473,1.68473,0,0,1-1.26024.04668,3.69183,3.69183,0,0,0-2.00706-.04668,2.7178,2.7178,0,0,1-2.00707.04668,5.82614,5.82614,0,0,0-2.47382.14,2.8189,2.8189,0,0,1-1.96038,0,1.47982,1.47982,0,0,1-.56011-1.1669,1.62726,1.62726,0,0,1,.56011-1.12022,1.26068,1.26068,0,0,1,1.30692-.23338,4.03373,4.03373,0,0,0,2.05374-.14Z"/><path id="black" d="M17.00439,71.43312H197.12647v1.49363H17.00439ZM116.0972,52.90281H126.926v2.80055h-6.768v2.10041h6.25456V60.4643H120.158v2.56717h6.95471v2.98725H116.05053V52.90281Zm12.27575,0h12.32243v3.22063h-4.15415v9.89528h-4.01412V56.12344H128.373V52.90281Zm38.97434,13.11591h4.2475l-4.901-13.11591h-4.43421l-4.901,13.11591h4.15414l.65346-2.14709h4.57423l.60681,2.14709Zm-4.34086-4.99431,1.447-4.71426,1.44695,4.71426Zm9.19514.65345,3.82743-.23337a3.25977,3.25977,0,0,0,.51343,1.40027,2.20093,2.20093,0,0,0,1.77368.79349,2.04183,2.04183,0,0,0,1.3536-.42008,1.21251,1.21251,0,0,0,.46676-.93352,1.14953,1.14953,0,0,0-.42008-.88684,4.803,4.803,0,0,0-2.05374-.74681,9.04382,9.04382,0,0,1-3.78074-1.587,3.23751,3.23751,0,0,1-1.1669-2.52049,3.49894,3.49894,0,0,1,2.33379-3.314,8.59394,8.59394,0,0,1,3.22063-.51343,6.709,6.709,0,0,1,3.82743.93351,4.0997,4.0997,0,0,1,1.587,2.98726l-3.82742.23338a1.82035,1.82035,0,0,0-.65346-1.26025,2.04191,2.04191,0,0,0-1.3536-.42008,1.73394,1.73394,0,0,0-1.07354.28005.97441.97441,0,0,0-.3734.74682.66049.66049,0,0,0,.32674.5601,3.07967,3.07967,0,0,0,1.3536.46676,14.58494,14.58494,0,0,1,3.78074,1.1669,4.31591,4.31591,0,0,1,1.68034,1.447,3.83059,3.83059,0,0,1,.51343,1.96038,4.15237,4.15237,0,0,1-.70013,2.3338,4.51913,4.51913,0,0,1-1.9604,1.63365,7.73487,7.73487,0,0,1-3.17395.56011c-2.24043,0-3.78074-.42008-4.6209-1.30693a5.45937,5.45937,0,0,1-1.40031-3.36066Zm13.9094-8.775h10.8288v2.80055h-6.768v2.10041h6.25456V60.4643h-6.25456v2.56717h6.9547v2.98725H186.111Zm-87.23715-3.454h4.0608l5.27437,9.19514V49.4488h4.0608V65.972H108.209l-5.27437-9.14846V65.972h-4.0608Zm44.48207,0H154.9315v3.54736h-7.23476V55.61h6.72132v3.36065h-6.72132V62.238h7.42147V65.972h-11.809V49.4488ZM93.13269,75.26054V89.02991h-3.594V80.02147a10.4962,10.4962,0,0,1-1.68033,1.12022,15.3795,15.3795,0,0,1-2.05374.84017V78.90125a8.65911,8.65911,0,0,0,2.80056-1.49363,6.59709,6.59709,0,0,0,1.587-2.14709h2.94058ZM111.803,76.75416a4.30978,4.30978,0,0,0-1.447-1.12021,6.69326,6.69326,0,0,0-2.38047-.37341,4.84533,4.84533,0,0,0-4.01412,1.727c-.9802,1.12022-1.447,2.94058-1.447,5.36772a9.53167,9.53167,0,0,0,.70014,4.01413,4.751,4.751,0,0,0,1.867,2.24044,5.72448,5.72448,0,0,0,3.03393.70014,5.61936,5.61936,0,0,0,2.66053-.56011,3.79408,3.79408,0,0,0,1.63365-1.68033,5.38444,5.38444,0,0,0,.60679-2.47382,4.601,4.601,0,0,0-1.1669-3.26731,3.67417,3.67417,0,0,0-2.8939-1.30693,3.38187,3.38187,0,0,0-1.5403.32673,4.36634,4.36634,0,0,0-1.30693,1.02687,8.21707,8.21707,0,0,1,.51344-2.84723,1.489,1.489,0,0,1,1.3536-.93352.9615.9615,0,0,1,.79348.32673,2.08436,2.08436,0,0,1,.46676,1.12022l3.50069-.46676a5.54922,5.54922,0,0,0-.9335-1.82035Zm-5.13435,6.16121a1.59824,1.59824,0,0,1,1.26025-.56011,1.48062,1.48062,0,0,1,1.21358.60679,2.71433,2.71433,0,0,1,.46675,1.727,2.49068,2.49068,0,0,1-.46675,1.68033,1.47982,1.47982,0,0,1-1.1669.56011,1.64049,1.64049,0,0,1-1.26025-.60679,2.71831,2.71831,0,0,1-.51343-1.727,2.65909,2.65909,0,0,1,.46675-1.68034Zm17.69015-3.50068-3.36066-.65346a4.54383,4.54383,0,0,1,1.587-2.61385,5.43221,5.43221,0,0,1,3.36066-.88684,5.338,5.338,0,0,1,3.594.98019,3.16871,3.16871,0,0,1,1.12022,2.47382,2.64946,2.64946,0,0,1-.46676,1.587,3.95391,3.95391,0,0,1-1.3536,1.26025,3.21292,3.21292,0,0,1,1.12022.46676,3.07553,3.07553,0,0,1,.98019,1.07354,3.52207,3.52207,0,0,1,.32673,1.63366,5.0136,5.0136,0,0,1-.56011,2.28711,3.66346,3.66346,0,0,1-1.68033,1.68033,6.3476,6.3476,0,0,1-2.8939.60679,7.42149,7.42149,0,0,1-2.75387-.42008,3.96355,3.96355,0,0,1-1.63366-1.26025,6.26078,6.26078,0,0,1-.98019-2.10041l3.54737-.51344a2.8017,2.8017,0,0,0,.65345,1.587,1.514,1.514,0,0,0,1.12022.42008,1.41611,1.41611,0,0,0,1.1669-.56011,2.12587,2.12587,0,0,0,.46676-1.49363,2.00354,2.00354,0,0,0-.46676-1.447,1.58091,1.58091,0,0,0-1.26025-.51344,5.04,5.04,0,0,0-1.16689.23338l.1867-2.7072a1.93315,1.93315,0,0,0,.46675.04668,1.54818,1.54818,0,0,0,1.1669-.46676,1.517,1.517,0,0,0,.46676-1.12021,1.33712,1.33712,0,0,0-.37341-.9802,1.30326,1.30326,0,0,0-.93352-.37341,1.53779,1.53779,0,0,0-1.02686.37341,2.92051,2.92051,0,0,0-.42008,1.40028ZM17.00439,79.228h2.75388l.98019,5.181,1.447-5.181h2.7072l1.44695,5.181.98019-5.181H30.027l-2.05373,9.28849H25.17266L23.539,82.682l-1.63365,5.83448H19.1048Zm19.04375,0h2.70719l.9802,5.181,1.447-5.181h2.7072l1.447,5.181,1.02686-5.181h2.7072L47.017,88.51647H44.21641L42.58275,82.682,40.9491,88.51647H38.14855Zm18.99706,0h2.7072l.9802,5.181,1.447-5.181h2.7072l1.44695,5.181.98019-5.181h2.7072l-2.05374,9.28849H63.1668L61.53315,82.682l-1.63366,5.83448H57.09894Zm20.63073,3.314H78.4298v2.56717H75.67593Zm63.9459,0h2.75387v2.56717h-2.75387Zm18.11023,2.14709,2.52049.74681a4.77292,4.77292,0,0,1-.79349,1.77369,3.385,3.385,0,0,1-1.3536,1.07354,5.04617,5.04617,0,0,1-2.05373.37341,6.20559,6.20559,0,0,1-2.47382-.42008,3.75958,3.75958,0,0,1-1.68033-1.5403,5.2519,5.2519,0,0,1-.70014-2.84723,4.94788,4.94788,0,0,1,1.21358-3.54737,4.54826,4.54826,0,0,1,3.454-1.26025,4.71253,4.71253,0,0,1,2.75387.70014,4.28624,4.28624,0,0,1,1.49363,2.19377l-2.56717.5601a1.84966,1.84966,0,0,0-.28006-.60678,1.62521,1.62521,0,0,0-.60678-.51344,1.53412,1.53412,0,0,0-.79349-.1867,1.68478,1.68478,0,0,0-1.49363.79349,3.11739,3.11739,0,0,0-.37341,1.82035,3.312,3.312,0,0,0,.46676,2.10041,1.62856,1.62856,0,0,0,1.30692.56011,1.55778,1.55778,0,0,0,1.26025-.46676,1.99783,1.99783,0,0,0,.70014-1.30691Zm10.87547,1.867a3.92544,3.92544,0,0,0,1.68033,1.587,6.05571,6.05571,0,0,0,2.61385.51343,5.22838,5.22838,0,0,0,2.56717-.56011,3.829,3.829,0,0,0,1.587-1.63365,5.61946,5.61946,0,0,0,.56011-2.66052,4.73147,4.73147,0,0,0-1.26025-3.50069,4.83915,4.83915,0,0,0-8.40167,3.54737,5.6477,5.6477,0,0,0,.65348,2.70719Zm2.80055-4.71426a1.71217,1.71217,0,0,1,1.40027-.60679,1.80663,1.80663,0,0,1,1.447.60679,3.02523,3.02523,0,0,1,.51343,1.91371,3.42785,3.42785,0,0,1-.51343,2.14709,1.68744,1.68744,0,0,1-1.447.60679,1.65306,1.65306,0,0,1-1.40027-.60679,3.23735,3.23735,0,0,1-.51344-2.00706,2.78873,2.78873,0,0,1,.51344-2.05374Zm21.70427-2.80055a2.33912,2.33912,0,0,0-1.867,1.02686,2.18746,2.18746,0,0,0-1.96039-1.02686,2.1187,2.1187,0,0,0-1.63365.70013v-.46675h-2.42715v8.82173h2.52049V82.822c0-1.26025.56011-1.26025.79349-1.26025.65346,0,.74682.37341.74682,1.30692v5.2277h2.52049v-5.2277c0-1.30692.65346-1.30692.88684-1.30692.42008,0,.65346.42008.65346,1.26025v5.27437h2.52049V82.12188c0-1.867-1.07352-3.0806-2.75385-3.0806Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#be3038;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.60453" y="-5.55447" width="223.25536" height="134.51136"/><path id="red" class="cls-2" d="M46.87693,47.72179a3.02022,3.02022,0,0,0,.37341-.42008v-.51344a6.1816,6.1816,0,0,1,.09335-1.40027,9.9391,9.9391,0,0,0,.09335-1.867,3.48615,3.48615,0,0,0-.93352-1.96038c-1.3536-1.1669-2.47382-1.587-3.36066-1.30692a4.01592,4.01592,0,0,1-1.96038-.04668,4.55825,4.55825,0,0,0-3.03393.32673,3.0861,3.0861,0,0,1-1.02687.28005,1.32812,1.32812,0,0,0-.60679,0c-.09335.04668-.14.04668-.1867.09335a8.01461,8.01461,0,0,0-1.727.88685c-.04667.04667-.04667.14-.09335.23338a3.64593,3.64593,0,0,0-.56011,1.727c.09335.79349.1867,1.3536.23338,1.63365a3.10835,3.10835,0,0,0,.3734,1.82036v.09335l.09336.04668c.42008.37341.84016.65346,1.12022.88684l.09335.09335a1.856,1.856,0,0,1,.84016-.09335,2.267,2.267,0,0,0,1.12022,0,2.1395,2.1395,0,0,1,.93352-.04667,1.22109,1.22109,0,0,0,.93352-.18671,3.42953,3.42953,0,0,1,1.30692-.09335h.04668a2.93666,2.93666,0,0,0,.51343-.37341,1.58442,1.58442,0,0,1,.28-.28005.59162.59162,0,0,1,.18671-.42008,4.25726,4.25726,0,0,0,.28-.74682c0-.23338-.04667-.51343-.09335-.93351a1.75092,1.75092,0,0,1,0-.70014,4.1829,4.1829,0,0,0,.32673-1.12022,1.51327,1.51327,0,0,1,.65346-1.30693c.46676-.37341.88685-.56011,1.1669-.46676.28006.04668.46676.28006.65346.56011A3.41022,3.41022,0,0,1,45.29,43.521a4.03657,4.03657,0,0,1-.28006,1.07354,2.91786,2.91786,0,0,1-.60678.93352A2.09055,2.09055,0,0,0,43.983,46.9283c-.04667.14-.04667.28005-.09335.42008a1.48024,1.48024,0,0,1,.23338.28005c.04668,0,.04668.04668.09335.09335a3.54869,3.54869,0,0,1,1.1669.09335,11.38709,11.38709,0,0,0,1.21357.04668c.04667,0,.09335,0,.09335.04667.04667-.09335.09335-.09335.09335-.09335s0-.04666.09336-.09334Zm-7.65484,5.181a.42076.42076,0,0,1,.04668-.23338,1.3307,1.3307,0,0,0-.09335-.74681v-.88685a.59516.59516,0,0,0-.28006-.1867,3.25934,3.25934,0,0,0-.93351-.37341h-.04668a3.31629,3.31629,0,0,1-.98019.37341,5.19706,5.19706,0,0,1-.79349.09335c-.14.04668-.18671.09335-.23338.09335a1.52181,1.52181,0,0,0-.56011.51343,1.10222,1.10222,0,0,0-.28006.42009,5.51448,5.51448,0,0,1-.1867,1.16689,2.5942,2.5942,0,0,0-.1867,1.07355,2.2403,2.2403,0,0,1,1.12022-.65346,2.7251,2.7251,0,0,1,.93351-.18671,1.29529,1.29529,0,0,0,.84017,0,1.02873,1.02873,0,0,1,.74681,0h.09335a2.09384,2.09384,0,0,0,.79349-.46675ZM50.65767,63.45155a3.28957,3.28957,0,0,1,.04668,1.49362,2.80326,2.80326,0,0,0-.23338.65346,1.51966,1.51966,0,0,1-.28006.56011,1.84,1.84,0,0,1-1.26024.46676,1.35888,1.35888,0,0,1-1.07355-.60679,1.99565,1.99565,0,0,1-.42008-1.26024,1.27594,1.27594,0,0,0-.09335-.74682.69238.69238,0,0,1,0-.60679,1.29526,1.29526,0,0,0,0-.84016A3.792,3.792,0,0,1,47.157,60.931a10.56587,10.56587,0,0,0-.09335-3.22063,2.2617,2.2617,0,0,1,0-.79349,5.11939,5.11939,0,0,0,0-1.21357,3.63682,3.63682,0,0,1,.09335-1.49363,4.16354,4.16354,0,0,0,.09336-1.5403,3.64224,3.64224,0,0,1-.14-1.12022,2.72021,2.72021,0,0,0-.60679-.51344,6.15278,6.15278,0,0,0-.65346-.60678c-.04668-.04668-.09335-.04668-.18671-.04668a4.23964,4.23964,0,0,0-2.28711-.09335,2.8799,2.8799,0,0,1-.84017.09335,1.09777,1.09777,0,0,0-.56011.18671,1.0163,1.0163,0,0,0-.37341.23337.14457.14457,0,0,1,.04668.09336,5.95225,5.95225,0,0,0,.04667.88684,1.184,1.184,0,0,1-.09335.56011.17147.17147,0,0,0-.04667.14,2.66339,2.66339,0,0,0,.65346.60679c0,.04668.04667.04668.09335.09335a3.20552,3.20552,0,0,1,1.12022.09335,5.67074,5.67074,0,0,0,1.26025,0,2.074,2.074,0,0,1,1.12022.42009,1.29035,1.29035,0,0,1,.60679,1.16689,1.05192,1.05192,0,0,1-.74681,1.02687,2.97758,2.97758,0,0,1-2.00707-.04668A4.05023,4.05023,0,0,0,41.976,55.75a2.31675,2.31675,0,0,1-1.26024.04668H40.669a10.37668,10.37668,0,0,0-2.05374.88684l.04668.04668a2.70821,2.70821,0,0,1-.23338,1.49362,3.813,3.813,0,0,0-.04668.65346v.74682a1.77736,1.77736,0,0,0,.14.74681.93826.93826,0,0,0,.1867.37341c.32674.1867.37341.46676.23338.84017a1.23518,1.23518,0,0,1-.70013.74681.95452.95452,0,0,1-.51344,0c-.14-.04667-.32673-.09335-.56011-.1867A1.7979,1.7979,0,0,1,36.04813,60.791a7.89782,7.89782,0,0,1-.1867-2.42715,5.19805,5.19805,0,0,0,.09335-.79348v-.28006a.87951.87951,0,0,0-.18671-.42008,1.97581,1.97581,0,0,0-.23337-.32673,2.46564,2.46564,0,0,1-.60679-.04668c-.23338-.14-.42008-.23338-.56011-.32673a.3529.3529,0,0,0,.04667.18671,6.01671,6.01671,0,0,1-.14,1.16689,2.301,2.301,0,0,0-.23338,1.02687,3.15208,3.15208,0,0,1-.09335.65346,1.28106,1.28106,0,0,0-.09336.60679,1.87293,1.87293,0,0,1-.14.70014,1.83065,1.83065,0,0,0-.18671.84016,2.8631,2.8631,0,0,1-.14.74682,11.08241,11.08241,0,0,0-.70014,2.14709,2.602,2.602,0,0,1-.60679,1.02687,2.4084,2.4084,0,0,1-1.21357.65346,2.17689,2.17689,0,0,1-1.02687-.23338,1.51123,1.51123,0,0,1-.60678-.84017,3.33448,3.33448,0,0,1-.09336-.93352,8.81463,8.81463,0,0,1,.28006-.84016,4.04864,4.04864,0,0,0,.60678-.88684,1.96333,1.96333,0,0,0,.60679-1.21358,1.05245,1.05245,0,0,1,.23338-.5601,8.83791,8.83791,0,0,0,.46676-1.49363,2.29884,2.29884,0,0,0,.23338-.84017,7.5469,7.5469,0,0,1,.56011-2.84722,2.4785,2.4785,0,0,0,.09335-1.63366c.04667-.42008.09335-.70013.09335-.88684a2.32729,2.32729,0,0,0,.14-1.12022,6.86942,6.86942,0,0,1-.04668-1.68033,21.02226,21.02226,0,0,0-.09335-2.7072A3.64958,3.64958,0,0,0,31.754,45.388a4.38273,4.38273,0,0,1-.70014-2.42714,5.00874,5.00874,0,0,1,.46676-2.75388,3.44,3.44,0,0,1,1.1669-1.727,1.3294,1.3294,0,0,1,1.49363.04667c-.04668-.04667-.04668-.04667,0-.04667a.92082.92082,0,0,1,.51343,0,3.81294,3.81294,0,0,0,.65346-.04668,3.30653,3.30653,0,0,1,1.63366-.14,2.18694,2.18694,0,0,0,.93351.04667,2.117,2.117,0,0,1,1.12022-.28005.8793.8793,0,0,0,.56011-.09335,2.28887,2.28887,0,0,1,1.54031-.14,2.84876,2.84876,0,0,0,1.40027.04667,5.61328,5.61328,0,0,1,1.96039-.04667,5.66436,5.66436,0,0,0,.84016.04667,1.01183,1.01183,0,0,1,.65347.23338,1.44005,1.44005,0,0,0,.84016.23338,3.1813,3.1813,0,0,1,.98019.09335,1.38743,1.38743,0,0,1,.60679.51343,1.311,1.311,0,0,0,.74681.65347,2.66966,2.66966,0,0,1,1.26025,1.63365,3.08244,3.08244,0,0,1,0,1.30693,1.02429,1.02429,0,0,1-.37341.70013.92158.92158,0,0,0-.28005.65347,1.18585,1.18585,0,0,1-.14.56011,1.106,1.106,0,0,0-.09335.74681,1.15092,1.15092,0,0,1,0,.79349,9.67753,9.67753,0,0,0-.09335,2.61384,3.41009,3.41009,0,0,1-.28006,1.49363,1.63819,1.63819,0,0,0,.04668.93351,2.52434,2.52434,0,0,1-.04668,1.1669,2.27549,2.27549,0,0,0,0,1.12022,7.02806,7.02806,0,0,1,.09335,2.38047,5.20426,5.20426,0,0,0,.14,2.5205,13.6216,13.6216,0,0,1,.74682,3.454,11.85095,11.85095,0,0,1,.51343,1.77369Zm-8.775-3.50069a4.08562,4.08562,0,0,1,.93351-.09335,2.84355,2.84355,0,0,0,.88685-.1867,1.71632,1.71632,0,0,1,1.49362.1867,1.49339,1.49339,0,0,1,.74681,1.12022A1.14139,1.14139,0,0,1,45.43,62.14462a3.1311,3.1311,0,0,1-1.96039.28006,2.05177,2.05177,0,0,0-.42008-.04668,1.58775,1.58775,0,0,1-.46676.04668,1.67814,1.67814,0,0,0-.51343.09335,2.8098,2.8098,0,0,1-1.63366-.04668,1.238,1.238,0,0,1-.56011-.93351,2.42392,2.42392,0,0,1,.28006-.88684,1.51983,1.51983,0,0,1,.98019-.56011,2.655,2.655,0,0,0,.74682-.14Zm-4.94764-16.85a.62748.62748,0,0,0,.28-.32673c.04668-.1867.28006-.28.79349-.28a1.17512,1.17512,0,0,1,.93352.42008,2.87541,2.87541,0,0,1,.46676,1.12022,1.39765,1.39765,0,0,0,.1867.46676.6477.6477,0,0,1,0,.42008c.09335.32673.09335.60679.14.74682a1.72108,1.72108,0,0,1-.09336.79348,1.28326,1.28326,0,0,1-.60678.74682c-.23338.09335-.51343-.04668-.88684-.42009a1.86772,1.86772,0,0,1-.88684-1.07354,7.50592,7.50592,0,0,1-.42009-1.1669c0-.14-.04667-.42008-.09335-.79349,0-.42008.04668-.65346.18671-.65346ZM25.03264,48.42193c-.04668,0-.04668.04667,0,0a1.70291,1.70291,0,0,1-.93352.32673.7457.7457,0,0,0-.65346.56011,2.27483,2.27483,0,0,1-.9802,1.12022.94.94,0,0,0-.51343.74681,1.58536,1.58536,0,0,1-.42008.98019,1.11538,1.11538,0,0,0-.46676.79349,2.8621,2.8621,0,0,0,.70014,1.26025,1.90186,1.90186,0,0,0,.84016.23338,2.46638,2.46638,0,0,1,.79349.1867.60872.60872,0,0,0,.60679.09335,1.14753,1.14753,0,0,1,.74681-.09335,1.93292,1.93292,0,0,0,1.07355-.1867,3.3671,3.3671,0,0,0,1.12022-.88685v-.09335a3.01672,3.01672,0,0,1,.14-1.02686,2.30424,2.30424,0,0,0,.14-1.1669,1.57172,1.57172,0,0,0-.32673-.93352c-.04668-.09335-.09335-.23338-.1867-.42008a1.32785,1.32785,0,0,0-.42009-.65346.97657.97657,0,0,1-.1867-.28006c-.04668-.09335-.09335-.14-.14-.23338-.28-.09334-.60678-.1867-.93351-.32672Zm-6.44127,5.83448a2.19855,2.19855,0,0,0-.09335-.93352,1.6634,1.6634,0,0,1,.28-1.26024c.37341-.84017.74682-1.3536,1.12022-1.49363a.92753.92753,0,0,0,.42009-.74681,2.34762,2.34762,0,0,1,.51343-1.21357,1.57326,1.57326,0,0,0,.04668-1.21358,1.06154,1.06154,0,0,0-.28006-.5601.82794.82794,0,0,0-.46676-.37341,1.22344,1.22344,0,0,1-.79349-.60679.72577.72577,0,0,0-.3734-.28.38517.38517,0,0,1-.23338-.46676.4659.4659,0,0,0-.23338-.46676.82167.82167,0,0,1-.28006-.60679c-.04667-.70014.04668-1.12022.18671-1.21357a.568.568,0,0,0,.23338-.46676,4.63139,4.63139,0,0,1,.56011-1.49362,8.9326,8.9326,0,0,1,.93351-1.54031.99793.99793,0,0,0,.28006-.46676,1.4591,1.4591,0,0,1,.42008-.51343.67972.67972,0,0,0,.28006-.42008.64161.64161,0,0,1,.3734-.46676c.14-.04668.28006-.23338.46676-.51343.37341-.70014.70014-1.07355.93352-1.02687a.99542.99542,0,0,0,.56011-.14,1.22855,1.22855,0,0,1,.93352-.09335,1.20649,1.20649,0,0,0,.65346.09335,1.928,1.928,0,0,1,1.3536.28005,1.84213,1.84213,0,0,1,.93351,1.30693c.04668.46676-.04667.70014-.23338.79349-.42008.32673-.70013.46675-.98019.42008a.64232.64232,0,0,0-.56011.09335,1.07161,1.07161,0,0,1-.65346.1867.70789.70789,0,0,0-.60679.14.558.558,0,0,1-.3734.18671c-.14-.04668-.28006.04667-.42009.23338a1.11848,1.11848,0,0,0-.32673.60678.68339.68339,0,0,1-.28005.51344,1.32784,1.32784,0,0,0-.42008.65346c-.14.32673-.23338.51343-.32674.51343a1.66148,1.66148,0,0,0-.42008,1.07355,1.84959,1.84959,0,0,0-.28,1.447,3.3376,3.3376,0,0,0,.65346.79349c.1867.04667.28.14.28.23338a.54862.54862,0,0,0,.56011.32673,1.808,1.808,0,0,1,.51344.14.63628.63628,0,0,0,.84016-.09336.88976.88976,0,0,1,.56011-.32672.63976.63976,0,0,0,.56011-.51344,1.29261,1.29261,0,0,1,.23338-.37341,1.25414,1.25414,0,0,0,.51344-.79348,1.51983,1.51983,0,0,1,.28-.56011.45742.45742,0,0,0,.14-.56011c0-.18671-.28-.42008-.74681-.65346-.18671-.14-.18671-.37341-.04668-.79349a.6937.6937,0,0,1,.65346-.37341,1.39786,1.39786,0,0,0,.46676-.1867.56627.56627,0,0,1,.60679-.04668,1.10314,1.10314,0,0,0,.60678.09335,2.21566,2.21566,0,0,1,1.68033.93352c.28006.37341.37341.60679.23338.79349s-.09335.46675.04668.79348a1.43923,1.43923,0,0,1,0,.88685c-.18671.42008-.42009.70013-.65347.70013a3.34979,3.34979,0,0,0-1.40027.79349,1.08329,1.08329,0,0,0-.37341.60679,1.48355,1.48355,0,0,0-.14.42008c0,.09335,0,.14.04667.14a4.81421,4.81421,0,0,1,.09335.93352l.09336.09335a.478.478,0,0,0,.23338.28.86077.86077,0,0,1,.51343.60679,1.42136,1.42136,0,0,0,.42008.60679,1.01665,1.01665,0,0,1,.42009.60678,4.33616,4.33616,0,0,1,.32673,1.3536,4.13734,4.13734,0,0,0,.23338,1.12023,1.59813,1.59813,0,0,1,.14.88684,2.61415,2.61415,0,0,1-.46675,1.3536,2.37321,2.37321,0,0,1-.60679.42008c-.14.14-.32673.28-.56011.46676a4.9816,4.9816,0,0,0-1.1669,1.02687,2.65457,2.65457,0,0,1-2.00706.93351,3.55325,3.55325,0,0,0-.98019.14,1.47248,1.47248,0,0,1-1.1669-.1867,2.74622,2.74622,0,0,0-1.40027-.37341,2.81758,2.81758,0,0,1-2.05374-.74681,2.74121,2.74121,0,0,1-1.02687-1.867Zm8.58836,4.15415a.7259.7259,0,0,0,.28-.37341c.04668-.18671.32673-.28006.88684-.28006a1.23357,1.23357,0,0,1,.98019.46676,3.00747,3.00747,0,0,1,.51344,1.12022c.04667.1867.09335.37341.14.51344a.79553.79553,0,0,1,0,.46676,3.14886,3.14886,0,0,1,.14.79349,1.66731,1.66731,0,0,1-.09335.79348c-.23338.42008-.46676.70014-.70014.74682q-.35007.14-.98019-.42008a2.16954,2.16954,0,0,1-.88684-1.1669,3.62818,3.62818,0,0,1-.42008-1.21357,3.83026,3.83026,0,0,0-.14-.84017c.09335-.3734.1867-.60678.28006-.60678ZM23.259,59.4841a1.01637,1.01637,0,0,0,.37341-.23338c.09335-.1867.37341-.1867.88684,0a1.29517,1.29517,0,0,1,.74682.65346,2.79093,2.79093,0,0,1,.14,1.21358,5.4564,5.4564,0,0,0,.18671,1.77368,3.01511,3.01511,0,0,1-.28006,1.5403c-.04668.32673-.04668.60679-.09335.79349a1.587,1.587,0,0,1-.32673.70014,1.39973,1.39973,0,0,1-.84017.51344c-.23338.04668-.46676-.1867-.74681-.65346a2.12638,2.12638,0,0,1-.46676-1.30693,10.17176,10.17176,0,0,1-.1867-2.66052,15.2179,15.2179,0,0,0,.23338-1.77368c.14-.37342.28005-.56012.3734-.56012Zm-4.4342.28006c.1867-.70014.46676-1.12022.88684-1.26025a.87962.87962,0,0,1,1.07354.42009,1.56326,1.56326,0,0,1,0,1.447,12.67383,12.67383,0,0,0-.04667,1.35359,1.65973,1.65973,0,0,1-.09335,1.26025A4.54517,4.54517,0,0,1,19.945,64.105a7.90411,7.90411,0,0,0-.46676,1.26024,1.43107,1.43107,0,0,1-.60678.93352,1.45465,1.45465,0,0,1-1.12023.14,1.0596,1.0596,0,0,1-.74681-.84017,2.7233,2.7233,0,0,1,.04668-1.49362,4.9767,4.9767,0,0,0,.42008-1.40028,3.17853,3.17853,0,0,1,.79349-2.10041,2.92927,2.92927,0,0,0,.56011-.84016Zm49.56974,2.10041a2.64684,2.64684,0,0,1,.9802-.70014,3.73778,3.73778,0,0,0,.98019-.70013,7.409,7.409,0,0,1,1.26024-.79349c.56011-.32673,1.26025-.79349,2.10042-1.30693a11.24352,11.24352,0,0,1,1.447-.98019,2.50017,2.50017,0,0,1,.70014-.70014A11.80326,11.80326,0,0,0,77.823,55.2366a1.72413,1.72413,0,0,1,1.30693-.3734c.56011.14.84016.46675.79349.98019a1.93758,1.93758,0,0,1-.93352,1.21357,2.835,2.835,0,0,0-.74682.74681q-.84016.70014-1.5403,1.26025a2.50949,2.50949,0,0,0-.9802.88684,4.87512,4.87512,0,0,1-1.5403,1.12022,2.2384,2.2384,0,0,0-.23338.79349c-.09335.42008-.14.65345-.1867.65345a1.33239,1.33239,0,0,0-.60679,0c-.1867.04668-.42008.04668-.74681.09335-.09335,0-.14,0-.18671.04668-.04667,0-.04667,0-.09335.04668a3.60574,3.60574,0,0,0-.88684.79349,3.54578,3.54578,0,0,1-1.30692.74682,4.56775,4.56775,0,0,0-1.12022.79348,8.34787,8.34787,0,0,1-1.63366.84017,5.59546,5.59546,0,0,1-2.10041.74682,2.17784,2.17784,0,0,0-1.12022.51343,3.21966,3.21966,0,0,1-1.68033.60679,2.34641,2.34641,0,0,1-1.587-.23338,2.08571,2.08571,0,0,1-.93352-1.30692c-.09335-.42008.14-.84017.60679-1.3536a2.49967,2.49967,0,0,1,1.63365-.70014,5.881,5.881,0,0,0,2.3338-.65346,3.57131,3.57131,0,0,1,1.30692-.42008,8.72135,8.72135,0,0,0,2.75388-1.21358Zm9.89528,5.64778a2.41284,2.41284,0,0,1-1.40027.23337,3.566,3.566,0,0,0-.9802-.23337c-.51344-.09335-.84017-.23338-.9802-.46676a2.50756,2.50756,0,0,0-.46675-.74682,1.05136,1.05136,0,0,1-.37341-.65346,1.57742,1.57742,0,0,0-.28006-.56011A1.8621,1.8621,0,0,1,73.3888,63.965a.88224.88224,0,0,1,.28005-.84017,1.13712,1.13712,0,0,1,1.30693.09335,6.01443,6.01443,0,0,1,.84016.60679,1.06393,1.06393,0,0,0,.51344.14,4.06671,4.06671,0,0,0,2.05373-.14,5.52359,5.52359,0,0,0,2.24045-.79349.574.574,0,0,1,.51343-.32673,4.69163,4.69163,0,0,0,1.68034-1.49363,5.86834,5.86834,0,0,1,.60678-.74681,5.67266,5.67266,0,0,0,1.12022-2.14709,3.64076,3.64076,0,0,0-.04668-2.19376A4.88091,4.88091,0,0,0,83.0507,54.023a.62051.62051,0,0,0-.32673-.14c-.32673,0-.60679.04668-.74682.04668a3.76983,3.76983,0,0,1-.88684.14,3.21256,3.21256,0,0,1-.60678.09335c-.14,0-.28006-.28006-.37341-.74681a9.20761,9.20761,0,0,0-.46676-1.26025c-.09335-.14-.14-.28006-.1867-.32673a1.36279,1.36279,0,0,0-.42008-.09335,2.50076,2.50076,0,0,0-1.30692-.04668,2.29776,2.29776,0,0,1-1.07355.09335h-.09335a1.95429,1.95429,0,0,1-.88684.9802,2.72789,2.72789,0,0,0-.65346.60678c-.51344.42009-.98019.79349-1.447,1.12023a2.86391,2.86391,0,0,0-.88684.79348,12.73455,12.73455,0,0,1-1.40028,1.02687,3.89589,3.89589,0,0,0-.74681.56011,6.2056,6.2056,0,0,1-1.12022.88684,2.2813,2.2813,0,0,0-.84017.65346,2.3289,2.3289,0,0,1-1.1669.65346,3.87953,3.87953,0,0,0-.98019.74682c-.32673.1867-.84016.42008-1.49362.74681a5.23871,5.23871,0,0,1-1.91371.60679c-.18671-.04668-.51344.14-.98019.42008a3.4451,3.4451,0,0,1-1.54031.56011,2.17387,2.17387,0,0,1-1.447-.28006,1.72106,1.72106,0,0,1-.79349-1.21357c-.09335-.32673.09335-.74682.56011-1.1669a2.248,2.248,0,0,1,1.49363-.60679,5.231,5.231,0,0,0,2.14709-.51343,3.78815,3.78815,0,0,1,1.16689-.37341,7.89709,7.89709,0,0,0,2.42714-1.12022,2.93708,2.93708,0,0,1,.93352-.60679,4.23037,4.23037,0,0,0,.88684-.60678,6.92819,6.92819,0,0,1,1.1669-.70014c.56011-.32673,1.21357-.70014,1.96038-1.1669.60679-.42008,1.02687-.70013,1.26025-.88684A4.03079,4.03079,0,0,1,72.922,52.296a8.25324,8.25324,0,0,0,1.49363-.98019l-.04668-.04667a1.18855,1.18855,0,0,1-.51344-1.12022,1.30772,1.30772,0,0,1,.84017-1.12022,4.32487,4.32487,0,0,1,1.49362-.23338c.46676.04667.9802.09335,1.49363.1867a2.26986,2.26986,0,0,0,1.30692.14,1.81989,1.81989,0,0,1,.74682-.09335,2.37434,2.37434,0,0,0,1.02687.1867,1.285,1.285,0,0,1,.84016.23338,7.56735,7.56735,0,0,0,1.68034.93352,2.118,2.118,0,0,1,1.02686.79349,8.20618,8.20618,0,0,0,1.447,1.26024.9424.9424,0,0,1,.42008.84017l.56011,1.12022a1.36663,1.36663,0,0,1,.32673,1.02687,2.3776,2.3776,0,0,0,.32673.79349.57393.57393,0,0,1,.04667.60678,1.38156,1.38156,0,0,0-.09335.98019c.18671.28006.09335.84017-.23337,1.63366a3.24775,3.24775,0,0,0-.09335.74682,3.66052,3.66052,0,0,1-.70014,1.727q-.91018,1.12023-1.26025,1.12022a1.47562,1.47562,0,0,0-.46676.65346,6.71157,6.71157,0,0,1-1.68033,1.447,10.88337,10.88337,0,0,1-3.08061,1.68034,5.989,5.989,0,0,1-1.54029.70014Zm-11.949-29.87254c-.70014-.18671-1.07355-.56011-1.07355-1.12023a1.41362,1.41362,0,0,1,.56011-1.26024,2.67629,2.67629,0,0,1,1.727-.60679c.42008-.04667.84016-.09335,1.30692-.1867a6.349,6.349,0,0,1,2.19377-.37341,16.61818,16.61818,0,0,1,2.38046.09335,6.69908,6.69908,0,0,0,2.38047.14,5.71471,5.71471,0,0,1,3.36066.42008,1.75021,1.75021,0,0,0,1.07354.23338,3.1465,3.1465,0,0,1,1.587.70014c.60679.37341.93352.70014.93352.98019a1.21729,1.21729,0,0,0,.42008.79349,2.51975,2.51975,0,0,1,.42008,1.867,5.38489,5.38489,0,0,0,.32673,1.12022,3.14285,3.14285,0,0,1,.28005,1.49363v2.19376a3.28914,3.28914,0,0,1-.74681,2.24044,3.48678,3.48678,0,0,1-1.77369,1.30693,3.9842,3.9842,0,0,1-2.33379.37341,4.80546,4.80546,0,0,0-1.68033.09335,2.36812,2.36812,0,0,1-1.49363.09335,1.92557,1.92557,0,0,0-1.35359-.09335,1.70364,1.70364,0,0,1-1.49363.09335,1.7936,1.7936,0,0,0-1.12022-.09335,7.15369,7.15369,0,0,1-.51343,1.26024,4.852,4.852,0,0,1-.98019.9802,3.73058,3.73058,0,0,0-.60679.60678,1.2758,1.2758,0,0,1-.70014.70014,2.87083,2.87083,0,0,0-.88684.56011,3.68456,3.68456,0,0,1-1.447.93352,10.02491,10.02491,0,0,0-1.21357.65346,2.336,2.336,0,0,1-1.54031.42008,3.15572,3.15572,0,0,0-1.5403.46676,1.9,1.9,0,0,1-1.07355.28005,1.65663,1.65663,0,0,0-.70014.04668,3.00033,3.00033,0,0,1-1.82035.09335c-.46676-.14-.74682-.32673-.74682-.46676-.04667-.1867-.09335-.32673-.1867-.32673a.87745.87745,0,0,1-.1867-.46676,1.33626,1.33626,0,0,1,.28-1.02686,2.46442,2.46442,0,0,1,.98019-.56011,2.84892,2.84892,0,0,1,1.40028-.04668,4.3713,4.3713,0,0,0,1.16689.09335,2.88451,2.88451,0,0,0,1.26025-.42008,2.09578,2.09578,0,0,1,1.26025-.46676,2.64721,2.64721,0,0,0,1.26024-.60679,2.46537,2.46537,0,0,1,1.12022-.51343,4.01268,4.01268,0,0,0,1.40028-1.07355,2.61592,2.61592,0,0,1,.46676-.70013,2.42632,2.42632,0,0,0-1.727.09335,3.0767,3.0767,0,0,1-1.77368-.14c-.84017-.23338-1.3536-.51344-1.54031-.93352a1.85429,1.85429,0,0,0-.79348-1.07354c-.37341-.23338-.51344-.70014-.42009-1.49363-.04667-1.1669-.09335-2.10041-.1867-2.84723a2.48792,2.48792,0,0,1-.04668-1.30692,5.95057,5.95057,0,0,0,.04668-.93352A3.65641,3.65641,0,0,1,62.56,38.15323a1.86833,1.86833,0,0,1,.60679-.79349,1.121,1.121,0,0,1,.70013-.28005,2.81775,2.81775,0,0,1,.74682.23338,1.47743,1.47743,0,0,1,.46675.84016,4.93869,4.93869,0,0,1,.09335,2.14709,8.89533,8.89533,0,0,0-.09335,2.66052,3.40758,3.40758,0,0,0,.60679,1.63366,2.18631,2.18631,0,0,0,1.3536,1.02686,5.057,5.057,0,0,0,2.98726-.09335,7.87031,7.87031,0,0,1,4.15414-.14,3.763,3.763,0,0,0,2.28712-.09335,6.75411,6.75411,0,0,1,2.24044-.23338,1.67876,1.67876,0,0,0,1.63365-.5601,2.47956,2.47956,0,0,0,.79349-1.3536,3.64151,3.64151,0,0,0-.1867-1.91371,3.87806,3.87806,0,0,1-.28006-1.30693,5.42769,5.42769,0,0,0-.1867-.84016c-.28006-.37341-.46676-.60679-.46676-.74682a1.0166,1.0166,0,0,0-.42008-.60678,2.18327,2.18327,0,0,1-.65345-.37341c-.23338-.32673-1.3536-.51344-3.36066-.60679a25.12078,25.12078,0,0,1-3.40734-.09335,5.28334,5.28334,0,0,0-3.40734.42008,3.07187,3.07187,0,0,1-2.42712.56013ZM71.195,40.02028a6.84281,6.84281,0,0,1,2.75388-.04668,3.71036,3.71036,0,0,0,1.867.09335,2.12625,2.12625,0,0,1,1.63365.09335,1.74983,1.74983,0,0,1,.70014,1.30693,1.49339,1.49339,0,0,1-.60679,1.02686,1.68473,1.68473,0,0,1-1.26024.04668,3.69183,3.69183,0,0,0-2.00706-.04668,2.7178,2.7178,0,0,1-2.00707.04668,5.82614,5.82614,0,0,0-2.47382.14,2.8189,2.8189,0,0,1-1.96038,0,1.47982,1.47982,0,0,1-.56011-1.1669,1.62726,1.62726,0,0,1,.56011-1.12022,1.26068,1.26068,0,0,1,1.30692-.23338,4.03373,4.03373,0,0,0,2.05374-.14Z"/><path id="black" d="M17.00439,71.43312H197.12647v1.49363H17.00439ZM116.0972,52.90281H126.926v2.80055h-6.768v2.10041h6.25456V60.4643H120.158v2.56717h6.95471v2.98725H116.05053V52.90281Zm12.27575,0h12.32243v3.22063h-4.15415v9.89528h-4.01412V56.12344H128.373V52.90281Zm38.97434,13.11591h4.2475l-4.901-13.11591h-4.43421l-4.901,13.11591h4.15414l.65346-2.14709h4.57423l.60681,2.14709Zm-4.34086-4.99431,1.447-4.71426,1.44695,4.71426Zm9.19514.65345,3.82743-.23337a3.25977,3.25977,0,0,0,.51343,1.40027,2.20093,2.20093,0,0,0,1.77368.79349,2.04183,2.04183,0,0,0,1.3536-.42008,1.21251,1.21251,0,0,0,.46676-.93352,1.14953,1.14953,0,0,0-.42008-.88684,4.803,4.803,0,0,0-2.05374-.74681,9.04382,9.04382,0,0,1-3.78074-1.587,3.23751,3.23751,0,0,1-1.1669-2.52049,3.49894,3.49894,0,0,1,2.33379-3.314,8.59394,8.59394,0,0,1,3.22063-.51343,6.709,6.709,0,0,1,3.82743.93351,4.0997,4.0997,0,0,1,1.587,2.98726l-3.82742.23338a1.82035,1.82035,0,0,0-.65346-1.26025,2.04191,2.04191,0,0,0-1.3536-.42008,1.73394,1.73394,0,0,0-1.07354.28005.97441.97441,0,0,0-.3734.74682.66049.66049,0,0,0,.32674.5601,3.07967,3.07967,0,0,0,1.3536.46676,14.58494,14.58494,0,0,1,3.78074,1.1669,4.31591,4.31591,0,0,1,1.68034,1.447,3.83059,3.83059,0,0,1,.51343,1.96038,4.15237,4.15237,0,0,1-.70013,2.3338,4.51913,4.51913,0,0,1-1.9604,1.63365,7.73487,7.73487,0,0,1-3.17395.56011c-2.24043,0-3.78074-.42008-4.6209-1.30693a5.45937,5.45937,0,0,1-1.40031-3.36066Zm13.9094-8.775h10.8288v2.80055h-6.768v2.10041h6.25456V60.4643h-6.25456v2.56717h6.9547v2.98725H186.111Zm-87.23715-3.454h4.0608l5.27437,9.19514V49.4488h4.0608V65.972H108.209l-5.27437-9.14846V65.972h-4.0608Zm44.48207,0H154.9315v3.54736h-7.23476V55.61h6.72132v3.36065h-6.72132V62.238h7.42147V65.972h-11.809V49.4488ZM93.13269,75.26054V89.02991h-3.594V80.02147a10.4962,10.4962,0,0,1-1.68033,1.12022,15.3795,15.3795,0,0,1-2.05374.84017V78.90125a8.65911,8.65911,0,0,0,2.80056-1.49363,6.59709,6.59709,0,0,0,1.587-2.14709h2.94058ZM111.803,76.75416a4.30978,4.30978,0,0,0-1.447-1.12021,6.69326,6.69326,0,0,0-2.38047-.37341,4.84533,4.84533,0,0,0-4.01412,1.727c-.9802,1.12022-1.447,2.94058-1.447,5.36772a9.53167,9.53167,0,0,0,.70014,4.01413,4.751,4.751,0,0,0,1.867,2.24044,5.72448,5.72448,0,0,0,3.03393.70014,5.61936,5.61936,0,0,0,2.66053-.56011,3.79408,3.79408,0,0,0,1.63365-1.68033,5.38444,5.38444,0,0,0,.60679-2.47382,4.601,4.601,0,0,0-1.1669-3.26731,3.67417,3.67417,0,0,0-2.8939-1.30693,3.38187,3.38187,0,0,0-1.5403.32673,4.36634,4.36634,0,0,0-1.30693,1.02687,8.21707,8.21707,0,0,1,.51344-2.84723,1.489,1.489,0,0,1,1.3536-.93352.9615.9615,0,0,1,.79348.32673,2.08436,2.08436,0,0,1,.46676,1.12022l3.50069-.46676a5.54922,5.54922,0,0,0-.9335-1.82035Zm-5.13435,6.16121a1.59824,1.59824,0,0,1,1.26025-.56011,1.48062,1.48062,0,0,1,1.21358.60679,2.71433,2.71433,0,0,1,.46675,1.727,2.49068,2.49068,0,0,1-.46675,1.68033,1.47982,1.47982,0,0,1-1.1669.56011,1.64049,1.64049,0,0,1-1.26025-.60679,2.71831,2.71831,0,0,1-.51343-1.727,2.65909,2.65909,0,0,1,.46675-1.68034Zm17.69015-3.50068-3.36066-.65346a4.54383,4.54383,0,0,1,1.587-2.61385,5.43221,5.43221,0,0,1,3.36066-.88684,5.338,5.338,0,0,1,3.594.98019,3.16871,3.16871,0,0,1,1.12022,2.47382,2.64946,2.64946,0,0,1-.46676,1.587,3.95391,3.95391,0,0,1-1.3536,1.26025,3.21292,3.21292,0,0,1,1.12022.46676,3.07553,3.07553,0,0,1,.98019,1.07354,3.52207,3.52207,0,0,1,.32673,1.63366,5.0136,5.0136,0,0,1-.56011,2.28711,3.66346,3.66346,0,0,1-1.68033,1.68033,6.3476,6.3476,0,0,1-2.8939.60679,7.42149,7.42149,0,0,1-2.75387-.42008,3.96355,3.96355,0,0,1-1.63366-1.26025,6.26078,6.26078,0,0,1-.98019-2.10041l3.54737-.51344a2.8017,2.8017,0,0,0,.65345,1.587,1.514,1.514,0,0,0,1.12022.42008,1.41611,1.41611,0,0,0,1.1669-.56011,2.12587,2.12587,0,0,0,.46676-1.49363,2.00354,2.00354,0,0,0-.46676-1.447,1.58091,1.58091,0,0,0-1.26025-.51344,5.04,5.04,0,0,0-1.16689.23338l.1867-2.7072a1.93315,1.93315,0,0,0,.46675.04668,1.54818,1.54818,0,0,0,1.1669-.46676,1.517,1.517,0,0,0,.46676-1.12021,1.33712,1.33712,0,0,0-.37341-.9802,1.30326,1.30326,0,0,0-.93352-.37341,1.53779,1.53779,0,0,0-1.02686.37341,2.92051,2.92051,0,0,0-.42008,1.40028ZM17.00439,79.228h2.75388l.98019,5.181,1.447-5.181h2.7072l1.44695,5.181.98019-5.181H30.027l-2.05373,9.28849H25.17266L23.539,82.682l-1.63365,5.83448H19.1048Zm19.04375,0h2.70719l.9802,5.181,1.447-5.181h2.7072l1.447,5.181,1.02686-5.181h2.7072L47.017,88.51647H44.21641L42.58275,82.682,40.9491,88.51647H38.14855Zm18.99706,0h2.7072l.9802,5.181,1.447-5.181h2.7072l1.44695,5.181.98019-5.181h2.7072l-2.05374,9.28849H63.1668L61.53315,82.682l-1.63366,5.83448H57.09894Zm20.63073,3.314H78.4298v2.56717H75.67593Zm63.9459,0h2.75387v2.56717h-2.75387Zm18.11023,2.14709,2.52049.74681a4.77292,4.77292,0,0,1-.79349,1.77369,3.385,3.385,0,0,1-1.3536,1.07354,5.04617,5.04617,0,0,1-2.05373.37341,6.20559,6.20559,0,0,1-2.47382-.42008,3.75958,3.75958,0,0,1-1.68033-1.5403,5.2519,5.2519,0,0,1-.70014-2.84723,4.94788,4.94788,0,0,1,1.21358-3.54737,4.54826,4.54826,0,0,1,3.454-1.26025,4.71253,4.71253,0,0,1,2.75387.70014,4.28624,4.28624,0,0,1,1.49363,2.19377l-2.56717.5601a1.84966,1.84966,0,0,0-.28006-.60678,1.62521,1.62521,0,0,0-.60678-.51344,1.53412,1.53412,0,0,0-.79349-.1867,1.68478,1.68478,0,0,0-1.49363.79349,3.11739,3.11739,0,0,0-.37341,1.82035,3.312,3.312,0,0,0,.46676,2.10041,1.62856,1.62856,0,0,0,1.30692.56011,1.55778,1.55778,0,0,0,1.26025-.46676,1.99783,1.99783,0,0,0,.70014-1.30691Zm10.87547,1.867a3.92544,3.92544,0,0,0,1.68033,1.587,6.05571,6.05571,0,0,0,2.61385.51343,5.22838,5.22838,0,0,0,2.56717-.56011,3.829,3.829,0,0,0,1.587-1.63365,5.61946,5.61946,0,0,0,.56011-2.66052,4.73147,4.73147,0,0,0-1.26025-3.50069,4.83915,4.83915,0,0,0-8.40167,3.54737,5.6477,5.6477,0,0,0,.65348,2.70719Zm2.80055-4.71426a1.71217,1.71217,0,0,1,1.40027-.60679,1.80663,1.80663,0,0,1,1.447.60679,3.02523,3.02523,0,0,1,.51343,1.91371,3.42785,3.42785,0,0,1-.51343,2.14709,1.68744,1.68744,0,0,1-1.447.60679,1.65306,1.65306,0,0,1-1.40027-.60679,3.23735,3.23735,0,0,1-.51344-2.00706,2.78873,2.78873,0,0,1,.51344-2.05374Zm21.70427-2.80055a2.33912,2.33912,0,0,0-1.867,1.02686,2.18746,2.18746,0,0,0-1.96039-1.02686,2.1187,2.1187,0,0,0-1.63365.70013v-.46675h-2.42715v8.82173h2.52049V82.822c0-1.26025.56011-1.26025.79349-1.26025.65346,0,.74682.37341.74682,1.30692v5.2277h2.52049v-5.2277c0-1.30692.65346-1.30692.88684-1.30692.42008,0,.65346.42008.65346,1.26025v5.27437h2.52049V82.12188c0-1.867-1.07352-3.0806-2.75385-3.0806Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/newyorktimes/newyorktimes_featured.svg b/content/en/case-studies/newyorktimes/newyorktimes_featured.svg
index f006841112..e386c15806 100644
--- a/content/en/case-studies/newyorktimes/newyorktimes_featured.svg
+++ b/content/en/case-studies/newyorktimes/newyorktimes_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:#fbfbfb;}.cls-3{clip-path:url(#clip-path);}.cls-4{clip-path:url(#clip-path-2);}.cls-5{fill:#231f20;}.cls-6{clip-path:url(#clip-path-3);}.cls-7{clip-path:url(#clip-path-4);}.cls-8{clip-path:url(#clip-path-5);}.cls-9{clip-path:url(#clip-path-6);}</style><clipPath id="clip-path"><rect class="cls-1" x="70.10441" y="2.08849" width="67.24389" height="48.03135"/></clipPath><clipPath id="clip-path-2"><rect class="cls-1" x="80.18001" y="11.21376" width="293.55801" height="41.22531"/></clipPath><clipPath id="clip-path-3"><rect class="cls-1" x="34.42397" y="37.08276" width="145.46637" height="58.32378"/></clipPath><clipPath id="clip-path-4"><rect class="cls-1" x="-22.47396" y="47.12268" width="293.558" height="41.22531"/></clipPath><clipPath id="clip-path-5"><rect class="cls-1" x="63.24278" y="75.50784" width="115.27524" height="49.40367"/></clipPath><clipPath id="clip-path-6"><polygon class="cls-1" points="-140.248 83.64 153.31 83.64 153.31 124.865 -140.248 124.865 -140.248 83.64 -140.248 83.64"/></clipPath></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-4.04384" y="-3.09231" width="223.25536" height="134.51136"/><path class="cls-1" d="M17.43759,10.00121H196.90967V119.92786H17.43759Z"/><g class="cls-3"><g class="cls-4"><path class="cls-5" d="M98.32557,11.25081a5.772,5.772,0,0,1,3.08429,1.32635,3.98251,3.98251,0,0,1,.90711,3.90221,3.9695,3.9695,0,0,1-1.94115,2.72612,5.15792,5.15792,0,0,1-2.80365.78909v5.33285l2.59506,2.09965-2.59506,2.09623v7.26646a11.75993,11.75993,0,0,0,4.211-4.8299s.07-.17771.21889-.52217a9.64083,9.64083,0,0,1-.94759,5.02339A9.36909,9.36909,0,0,1,97.1639,40.858a10.517,10.517,0,0,1-7.87165,1.36135A11.16054,11.16054,0,0,1,81.962,37.14588a12.12356,12.12356,0,0,1-1.77922-6.83348c.10018-4.9191,3.76085-9.161,7.98555-10.74256a4.17764,4.17764,0,0,1,1.4485-.38631c-.33416.22781-.72322.5256-1.20079.83918a8.83779,8.83779,0,0,0-3.02391,4.04492l8.20032-3.662V31.87136l-6.6146,3.31827A8.61479,8.61479,0,0,0,91.98,38.03172,7.83584,7.83584,0,0,0,97.26614,36.949V29.52262L94.6848,27.4264l2.58546-2.09211v-5.3404a35.89571,35.89571,0,0,1-4.12245-.88172c-1.46976-.35955-6.37307-1.74011-7.14433-1.85264a2.89723,2.89723,0,0,0-2.29521.433,2.28768,2.28768,0,0,0-.68479,2.25473,2.51758,2.51758,0,0,0,.69989,1.00179,2.10493,2.10493,0,0,1-.7987-.33278,3.71281,3.71281,0,0,1-1.7154-2.97795,4.94981,4.94981,0,0,1,2.06534-4.40447,6.19247,6.19247,0,0,1,4.3386-1.09032c2.41324.34034,5.66153,1.70512,8.55233,2.40157a3.6018,3.6018,0,0,0,2.7769-.09675,1.35982,1.35982,0,0,0,.483-1.85264c-.6148-1.06766-1.79431-1.0361-2.79611-1.22617a4.254,4.254,0,0,1,1.6962-.1187Zm-9.749,22.79637V22.97183l-3.32926,1.489a10.93346,10.93346,0,0,0-.70194,4.65629A11.46127,11.46127,0,0,0,86.796,34.92958l1.78059-.8824"/></g><path class="cls-5" d="M130.1333,22.43045s-2.51341,1.52328-4.202,2.53262c-1.69,1.0018-3.95572,2.10789-3.95572,2.10789V37.6358l-1.5123,1.21451.199.23192,1.47319-1.18363,4.62337,4.17256,8.0322-6.36073-.1935-.23192-4.43536,3.48433-3.649-3.41434V34.27224l7.32822-5.38706Zm.10568,8.728-3.72586,2.73024v-9.08l3.72586,6.34974M109.08253,46.04335a7.419,7.419,0,0,0,5.15651-.7191,7.12029,7.12029,0,0,0,3.71419-6.58578l.10636-3.82879v-8.376l1.58777-1.21451-.18526-.23192-1.56034,1.1754-3.60784-4.00993-4.62473,3.97562V12.73155l-5.77955,4.4628A1.50686,1.50686,0,0,1,104.98956,18.66V37.56993L102.542,39.38757l.16605.25114,1.18363-.88172,3.29289,3.063,5.17779-4.12589-.18732-.23193-1.21656.96269-1.2893-1.27969.01372-10.534,1.50819-1.2838,2.25061,2.79611s-.00206,6.8177.00411,9.0841c-.01921,2.41323-.02539,5.42548-1.29547,6.876a4.905,4.905,0,0,1-3.06783,1.95968m35.95628-.951c-2.07084-.24015-2.93884-1.49309-2.9155-2.48253a2.26165,2.26165,0,0,1,1.84852-2.04545,4.06858,4.06858,0,0,1,3.62911,1.69414l4.78186-5.28277-.2278-.20859-1.28587,1.4382a8.35861,8.35861,0,0,0-4.99869-2.69113V19.41408l12.41748,22.62277s.12008.25868.63058.25868c.43708,0,.33073-.35543.33073-.35543L159.24717,19.178a5.678,5.678,0,0,0,3.30043-1.36889c2.392-2.45578,1.4135-5.13936,1.14864-5.39461a2.5942,2.5942,0,0,1-2.54841,2.359,4.41421,4.41421,0,0,1-3.17281-1.454l-4.77981,5.4447.22781.20859,1.37095-1.56651a5.87886,5.87886,0,0,0,4.15334,1.771l-.00207,13.20245-9.21173-16.72863a4.75061,4.75061,0,0,0-4.09364-2.61428,4.322,4.322,0,0,0-4.12246,3.73958,5.20319,5.20319,0,0,0,.02539,2.41324s.33622-2.18131,1.688-2.16553c1.21451.01921,1.84852,1.137,2.33227,1.97615v4.8491c-1.2495.081-4.51083.2285-4.71051,3.61951a3.97187,3.97187,0,0,0,1.454,3.028,3.09608,3.09608,0,0,0,1.57406.57226,1.48833,1.48833,0,0,1-.74243-1.67835c.282-.99425,2.35492-1.15618,2.42833-.739v6.841c-.99562-.01578-4.18833.09263-5.62652,2.827a4.60873,4.60873,0,0,0,.11046,4.80725,4.8106,4.8106,0,0,0,4.98841,1.96517m26.22648-22.66188s-2.51136,1.52328-4.20137,2.53262c-1.688,1.0018-3.95572,2.10789-3.95572,2.10789V37.6358L161.598,38.85031l.199.23192,1.47524-1.18363,4.6213,4.17256,8.03016-6.36073-.18938-.23192-4.43947,3.48433-3.647-3.41434V34.27224l7.32615-5.38706-3.7087-6.45473Zm.1084,8.728-3.72585,2.73024v-9.08l3.72585,6.34974m11.11789,10.99438L178.553,38.88119l-1.72846,1.25705-.17428-.25114,1.75932-1.27969v-9.15c.08508-3.76634-3.4514-2.83454-3.25789-6.82937.081-1.75589,1.78264-3.08636,2.641-3.52688a4.76573,4.76573,0,0,1,1.91232-.46384s-1.61248,1.00934-1.22,2.4592c.60314,2.2314,4.42232,2.43657,4.49574,5.40628V36.8824l2.81737,2.25816.74038-.58049V27.32279l-1.51779-1.50407L188.936,22.3536l3.57559,3.16733-1.36545,1.4773v9.95416l3.34916,2.76523.59765-.38288V27.35435l-1.52533-1.4231,3.92279-3.58863,3.66823,3.03215,1.46563-1.29547.19487.22781-3.29495,2.89629v9.77232l-8.43637,5.19768-4.316-3.415-4.28028,3.39444m29.56467-23.11749c0-1.65091-.67106-2.57174-1.758-2.60261-1.56788-.03088-1.94115,2.17307-1.94115,2.17307a4.13153,4.13153,0,0,1,1.14313-3.24829,4.58855,4.58855,0,0,1,4.633-1.5123,3.8991,3.8991,0,0,1,3.096,4.1108V40.7448s.91258.10842,1.53907.24771c.72733.14684,1.41349.34445,1.41349.34445V13.85685h.29986v3.70871l4.94791-3.98729,3.625,3.225,1.69-1.46565.1935.23193-1.76754,1.51984V38.28148c-.08715,1.38468-.31153,2.78857-1.61659,3.6003-2.91,1.72089-6.42316-.26692-9.55344-.7191-2.322-.34788-5.96688-.785-6.88151,1.34213a1.97437,1.97437,0,0,0,.77536,2.48665c2.11337,1.41556,11.52821-2.37069,14.75728-.87,2.94295,1.373,2.93129,3.54266,2.47842,5.02751-.76575,2.79955-4.294,3.29084-4.294,3.29084s1.725-1.00523,1.23372-2.66437c-.24908-.83918-.81789-1.07522-2.66849-.87006-4.03325.46042-8.85766,2.41323-12.0984,1.056a5.04725,5.04725,0,0,1-2.73778-4.834c.08508-2.95462,3.49187-4.11423,3.49187-4.11423V30.09145c-.09881-.433-1.9185-.32455-2.31441.47963-.60314,1.21382.752,1.76687.752,1.76687a2.42106,2.42106,0,0,1-2.06672-.9126,3.44459,3.44459,0,0,1-.17016-4.11491c1.02307-1.419,2.25061-1.66669,3.79927-1.83274V19.03532h-.00073Zm8.42469,22.38673a3.06368,3.06368,0,0,0,2.48254-.47963,2.84863,2.84863,0,0,0,1.03816-2.30482V30.14909a2.39978,2.39978,0,0,0-1.74421-.87006,2.49564,2.49564,0,0,0-1.77716.90094V41.42205h.00067Zm3.5207-22.28243-2.37411-2.08456-1.14657.90093v7.86547a2.49865,2.49865,0,0,0,1.77716.89339,2.40765,2.40765,0,0,0,1.74422-.85839V19.13962Zm0,7.18892a2.50819,2.50819,0,0,1-1.74765.7733,2.59214,2.59214,0,0,1-1.77305-.77742v3.34916a2.59718,2.59718,0,0,1,1.77305-.77331,2.55641,2.55641,0,0,1,1.74765.73488V26.32854"/></g><g class="cls-6"><path class="cls-5" d="M27.47933,58.33937s-2.51341,1.52328-4.20206,2.53263c-1.69,1.00179-3.95572,2.10789-3.95572,2.10789V73.54473l-1.5123,1.2145.199.23192,1.47319-1.18363,4.62336,4.17256L32.137,71.61867l-.1935-.23192-4.43535,3.48433-3.649-3.41434V70.18048l7.32821-5.38706-3.708-6.454Zm.10567,8.728-3.72586,2.73023v-9.08L27.585,67.06736M6.42856,81.95159a7.419,7.419,0,0,0,5.15651-.7191,7.1203,7.1203,0,0,0,3.71419-6.58578l.10636-3.82879v-8.376l1.58778-1.21451-.18527-.23192-1.56033,1.1754L11.64,58.161,7.01523,62.1366V48.64047l-5.77955,4.4628A1.50687,1.50687,0,0,1,2.3356,54.56891V73.47886L-.11194,75.2965l.16605.25113,1.18363-.88172,3.29289,3.063,5.17778-4.12589-.18732-.23193-1.21657.96269L7.01523,73.05412l.01372-10.534,1.50818-1.28381,2.25062,2.79611s-.00206,6.8177.00411,9.0841c-.01921,2.41323-.02539,5.42548-1.29547,6.876a4.9007,4.9007,0,0,1-3.06783,1.959m35.95627-.951C40.314,80.76041,39.446,79.50747,39.46932,78.518a2.26166,2.26166,0,0,1,1.84852-2.04546A4.0686,4.0686,0,0,1,44.947,78.16671L49.72882,72.884l-.2278-.20859-1.28587,1.43819a8.35862,8.35862,0,0,0-4.9987-2.69112V55.323L55.63393,77.94577s.12008.25868.63058.25868c.43709,0,.33073-.35543.33073-.35543l-.002-22.76206a5.67792,5.67792,0,0,0,3.30043-1.36889c2.392-2.45578,1.4135-5.13935,1.14864-5.39461a2.59472,2.59472,0,0,1-2.5484,2.359,4.41425,4.41425,0,0,1-3.17282-1.454l-4.7798,5.4447.2278.20859,1.371-1.56651a5.87887,5.87887,0,0,0,4.15334,1.771l-.00206,13.20244L47.07955,51.56009a4.75062,4.75062,0,0,0-4.09365-2.61427,4.322,4.322,0,0,0-4.12246,3.73958,5.20315,5.20315,0,0,0,.02539,2.41323s.33622-2.18131,1.688-2.16553c1.2145.01921,1.84852,1.137,2.33226,1.97615v4.84911c-1.2495.081-4.51082.22849-4.70981,3.6195a3.97188,3.97188,0,0,0,1.454,3.028,3.09618,3.09618,0,0,0,1.574.57226,1.48835,1.48835,0,0,1-.74242-1.67836c.282-.99424,2.3549-1.15618,2.42832-.739v6.841c-.99561-.01578-4.18833.09264-5.62652,2.827a4.60871,4.60871,0,0,0,.11047,4.80725,4.80746,4.80746,0,0,0,4.98771,1.96448M68.61132,58.33937S66.1,59.86265,64.41,60.872c-1.688,1.00179-3.95573,2.10789-3.95573,2.10789V73.54473L58.944,74.75923l.199.23192,1.47525-1.18363,4.6213,4.17256,8.03016-6.36141-.18938-.23192-4.43947,3.48433-3.64695-3.41434V70.18048L72.32,64.79342l-3.7087-6.454Zm.10841,8.728-3.72586,2.73023v-9.08l3.72586,6.34975M79.83761,78.06173l-3.93856-3.27162L74.1706,76.04716l-.17428-.25113,1.75932-1.27969V65.36568c.08509-3.76635-3.45139-2.83454-3.2579-6.82938.081-1.75589,1.78265-3.08636,2.641-3.52687a4.76574,4.76574,0,0,1,1.91234-.46385s-1.61248,1.00935-1.22,2.45921c.60314,2.2314,4.42232,2.43656,4.49574,5.40627V72.79063l2.81738,2.25816.74037-.58049V63.231L82.36681,61.727l3.91524-3.46512,3.57559,3.16732-1.36547,1.47731v9.95415l3.34916,2.76524L92.439,75.243V63.26259l-1.52535-1.4231,3.92279-3.58863L98.50464,61.283l1.46564-1.29548.19487.22781-3.295,2.89629V72.884l-8.43636,5.19768-4.316-3.415-4.28029,3.39513M214.70277,62.76306l.19625.22849,1.51231-1.30371,2.24375,2.545v8.72386l-1.091.99837,3.49805,3.95161,3.59412-3.53443-1.47732-1.52739V62.28343l.8927-.71155,2.47911,2.90041v8.70122l-.92838.92837,3.295,3.71214,3.52-3.531-1.29273-1.35723L231.10686,62.326l.95445-.77331,2.58751,2.85032V73.0651l-.85152.84329,3.63939,3.96739,4.88478-4.50534-.21-.22781-1.18226,1.102-1.82176-2.02624V62.33764l1.75453-1.3339-.17977-.24016-1.75658,1.33459-3.32651-3.72449L230.8516,62.129l-3.33473-3.62362-4.58564,3.59275-3.356-3.57354-4.87245,4.23843"/><path class="cls-5" d="M204.7596,62.49271l.19761.22781,1.27558-1.10952,2.00361,2.37v9.97749l-1.41555,1.23371.20174.22781,1.47732-1.26048,3.225,3.71626,4.65492-4.15334-.19213-.22781-1.37027,1.20284-1.93224-2.21973V62.72052l1.62346-1.40732-.19418-.22438-1.54181,1.32224-3.39169-3.94818-4.6213,4.02983"/><g class="cls-7"><path class="cls-5" d="M206.10175,54.22858l3.50628-3.214,2.85169,3.16321-3.5207,3.20232-2.83729-3.15154m-4.71806-7.06953a5.79,5.79,0,0,1,3.087,1.32635,3.9961,3.9961,0,0,1,.90505,3.9022,3.95514,3.95514,0,0,1-1.94252,2.72612,5.15557,5.15557,0,0,1-2.80366.78909v5.33285l2.59575,2.09966-2.59575,2.09622V72.698a11.74262,11.74262,0,0,0,4.21167-4.82989s.06931-.17772.21957-.52217a9.63519,9.63519,0,0,1-.94621,5.02339,9.39464,9.39464,0,0,1-3.89055,4.39692,10.49516,10.49516,0,0,1-7.87028,1.36135,11.17884,11.17884,0,0,1-7.33577-5.07348,12.1725,12.1725,0,0,1-1.77785-6.83349c.10087-4.9191,3.76223-9.16095,7.989-10.74255a4.19085,4.19085,0,0,1,1.44712-.38631c-.3369.2278-.72458.52559-1.20009.83917a8.83162,8.83162,0,0,0-3.02323,4.04492l8.1969-3.662V67.77959l-6.61118,3.31828A8.60772,8.60772,0,0,0,195.04216,73.94a7.83012,7.83012,0,0,0,5.28277-1.08277V65.43155l-2.58408-2.09623,2.58408-2.09211v-5.3404a35.59581,35.59581,0,0,1-4.11423-.88172c-1.46907-.35955-6.3813-1.74011-7.14775-1.85263a2.90209,2.90209,0,0,0-2.29657.433,2.30207,2.30207,0,0,0-.68686,2.25473,2.57785,2.57785,0,0,0,.70262,1.0018,2.09584,2.09584,0,0,1-.796-.33279,3.70372,3.70372,0,0,1-1.71678-2.97795,4.95285,4.95285,0,0,1,2.06328-4.40447,6.20419,6.20419,0,0,1,4.34-1.09031c2.41392.34445,5.66084,1.70511,8.5537,2.40157a3.603,3.603,0,0,0,2.77759-.09675,1.35969,1.35969,0,0,0,.47894-1.85263c-.61206-1.06767-1.79569-1.03611-2.792-1.22618A4.22113,4.22113,0,0,1,201.38367,47.15905ZM191.63811,69.9561V58.88075l-3.332,1.489a10.92613,10.92613,0,0,0-.7047,4.65629,11.53552,11.53552,0,0,0,2.2513,5.81248l1.78539-.8824"/></g><path class="cls-5" d="M143.23968,62.70543l1.41693-1.30714.201.22849-1.37643,1.27969V73.332s-2.62389,1.38811-4.4532,2.42078c-1.82725,1.02856-3.78007,2.2465-3.78007,2.2465l-4.81068-4.05248-1.27215,1.102-.20516-.22438,1.336-1.16373V62.44605h.01921s2.26571-1.02513,4.18216-2.10377q1.81622-1.03376,3.625-2.08044l5.11739,4.44358Zm-8.378,9.18428,4.06208,3.67783V64.31448l-4.06208-3.76292V71.88971m17.83678-10.2444,3.05342-3.12067a4.273,4.273,0,0,0,.81173.5606,2.1945,2.1945,0,0,0,1.99536.12008,3.57034,3.57034,0,0,0,1.02855-.79664,4.91943,4.91943,0,0,1-2.5141,4.84568c-.59558.28613-2.33157.83917-4.14922-1.373V73.1001l1.9336,1.70511,1.61249-1.3339.186.236-5.05427,4.2151-3.84389-3.496-1.386,1.303-.22643-.24359,2.10583-1.89861.01921-9.68312L146.654,61.762l-1.39016,1.22618-.199-.22438,4.89576-4.40105,2.73779,3.2826m12.87583,4.67208,5.64986-8.214a4.36,4.36,0,0,0,2.04544,1.22205c1.76344.46042,3.30318-1.24126,3.30318-1.24126-.29505,2.1964-1.408,4.69472-3.7094,5.07348a5.56108,5.56108,0,0,1-3.91318-1.23715l-.36779.56059,7.84352,11.84865,1.56993-1.37644.19966.22781-5.37881,4.70638-7.24244-11.57006"/><path class="cls-5" d="M160.91042,55.34633c0-1.771-.72733-2.862-1.67835-2.78444l6.16448-4.32763V72.72888l1.62413,1.71335,1.23373-1.06356.1935.22438-4.96506,4.3386L160.122,74.77844l-1.34556,1.18707-.21683-.23192,2.35148-2.042V55.34633m-51.50881-.40277c0-1.65091-.67107-2.57174-1.75795-2.60262-1.56788-.03087-1.94115,2.17308-1.94115,2.17308a4.13146,4.13146,0,0,1,1.14315-3.24829,4.58856,4.58856,0,0,1,4.633-1.51231,3.89911,3.89911,0,0,1,3.096,4.1108V76.653s.9126.10841,1.53906.2477c.72733.14684,1.4135.34445,1.4135.34445V49.76578h.29985v3.7087l4.94791-3.98728,3.625,3.225,1.69-1.46564.1935.23192-1.76756,1.51984V74.1904c-.08714,1.38468-.31151,2.78857-1.6166,3.6003-2.91,1.72089-6.42317-.26692-9.55343-.7191-2.322-.34789-5.96687-.785-6.88153,1.34213a1.9744,1.9744,0,0,0,.77537,2.48666c2.11338,1.41555,11.5282-2.37069,14.75729-.87006,2.943,1.373,2.93129,3.54266,2.47842,5.02752-.76576,2.79953-4.29469,3.29083-4.29469,3.29083s1.725-1.00523,1.23372-2.66437c-.24908-.83918-.81791-1.07522-2.66848-.87-4.03327.46041-8.85767,2.41323-12.09841,1.056a5.04723,5.04723,0,0,1-2.7378-4.834c.08508-2.95461,3.49189-4.11423,3.49189-4.11423V65.99969c-.09881-.433-1.91852-.32456-2.31443.47962-.60313,1.21382.752,1.76687.752,1.76687a2.42107,2.42107,0,0,1-2.06672-.9126,3.44464,3.44464,0,0,1-.17016-4.11491c1.02306-1.419,2.25061-1.66669,3.79928-1.83274V54.94356Zm8.4247,22.38672a3.06367,3.06367,0,0,0,2.48253-.47962,2.84867,2.84867,0,0,0,1.03816-2.30482V66.058a2.3998,2.3998,0,0,0-1.74423-.87,2.49564,2.49564,0,0,0-1.77715.90093v11.2414h.00069Zm3.52069-22.28174L118.97358,52.964l-1.14658.90093v7.86548a2.49862,2.49862,0,0,0,1.77715.89338,2.40765,2.40765,0,0,0,1.74423-.85839V55.04854h-.00068Zm0,7.18892a2.50816,2.50816,0,0,1-1.74765.7733,2.5921,2.5921,0,0,1-1.773-.77742v3.34915a2.59716,2.59716,0,0,1,1.773-.7733,2.55644,2.55644,0,0,1,1.74765.73488V62.23746"/></g><g class="cls-8"><path class="cls-5" d="M134.63384,94.85624s-2.51478,1.52328-4.20137,2.53262c-1.69276,1.0018-3.95984,2.10789-3.95984,2.10789v10.56484l-1.50681,1.21451.19967.23192,1.47113-1.18363,4.62337,4.17255,8.02878-6.36141-.19006-.23192-4.43535,3.48433-3.65107-3.41434v-1.27626l7.32615-5.38706-3.70459-6.454Zm.10705,8.728-3.72861,2.73024v-9.08l3.72861,6.34974M96.92924,99.28061l.19623.2278,1.5123-1.303,2.24306,2.54429v8.72454l-1.091.99768,3.49874,3.95229,3.59412-3.53442-1.47731-1.52809V98.801l.8927-.71156,2.47911,2.90042v8.70053l-.92838.92837,3.29426,3.71282,3.5207-3.531-1.29273-1.35722-.03774-10.59983.95446-.77331,2.58751,2.84963v8.6628l-.85152.84261,3.6394,3.96807L124.548,109.888l-.21-.22849-1.18227,1.102-1.82175-2.02624v-9.88l1.75452-1.33459-.18046-.23947-1.7559,1.3339-3.32652-3.7238-4.74756,3.75468L109.7433,95.023,105.15768,98.615l-3.356-3.57285-4.87244,4.23843"/><path class="cls-5" d="M86.98605,99.00958l.19761.22849,1.27489-1.11021,2.00429,2.37069V110.476l-1.41624,1.233.20242.22848,1.47661-1.26048,3.22565,3.71626L98.60621,110.24l-.19213-.22849-1.37026,1.20285-1.93223-2.21974V99.23808l1.62346-1.408-.19419-.22437-1.54249,1.32292-3.3917-3.94818-4.62061,4.02914"/><g class="cls-9"><path class="cls-5" d="M88.32819,90.74544l3.50629-3.2133,2.851,3.16321-3.52,3.20232-2.83728-3.15223M83.61013,83.6766a5.79,5.79,0,0,1,3.087,1.32635,3.99608,3.99608,0,0,1,.90505,3.9022,3.95512,3.95512,0,0,1-1.94252,2.72613,5.15553,5.15553,0,0,1-2.80366.78908v5.33285l2.59576,2.09966L82.856,101.94909v7.26645a11.74262,11.74262,0,0,0,4.21167-4.82989s.0693-.17772.21957-.52217a9.63529,9.63529,0,0,1-.94621,5.02339,9.39474,9.39474,0,0,1-3.89054,4.39693,10.49515,10.49515,0,0,1-7.87028,1.36134,11.17881,11.17881,0,0,1-7.33576-5.07348,12.17234,12.17234,0,0,1-1.77785-6.83349c.10087-4.9191,3.76223-9.16095,7.989-10.74256a4.20532,4.20532,0,0,1,1.44712-.387c-.3369.22781-.72459.5256-1.2001.83918a8.83159,8.83159,0,0,0-3.02323,4.04493l8.1969-3.662v11.46577l-6.61117,3.31828a8.60764,8.60764,0,0,0,5.00349,2.84208,7.82835,7.82835,0,0,0,5.28277-1.08276v-7.425l-2.58409-2.09622,2.58409-2.09211v-5.3404a35.59791,35.59791,0,0,1-4.11423-.88172c-1.46907-.35955-6.38131-1.74011-7.14775-1.85264a2.90214,2.90214,0,0,0-2.29659.433,2.30208,2.30208,0,0,0-.68685,2.25472,2.57779,2.57779,0,0,0,.70264,1.00181,2.09134,2.09134,0,0,1-.796-.33279,3.70374,3.70374,0,0,1-1.71677-2.97795,4.95287,4.95287,0,0,1,2.06329-4.40447,6.20416,6.20416,0,0,1,4.34-1.09031c2.41392.34445,5.66084,1.70511,8.5537,2.40157a3.60484,3.60484,0,0,0,2.77827-.09675,1.35971,1.35971,0,0,0,.47894-1.85264c-.612-1.06767-1.79569-1.03611-2.792-1.22617a4.21746,4.21746,0,0,1,1.69208-.1194ZM73.86457,106.473V95.39761l-3.332,1.489a10.926,10.926,0,0,0-.70469,4.65629,11.53547,11.53547,0,0,0,2.25129,5.81248l1.7854-.8824m69.70446,9.38944a3.46583,3.46583,0,0,1-3.39925-2.79954c-.54069-2.3357,1.07934-3.9173,3.52825-6.40807l-2.88875-2.641V98.967s2.1223-1.06767,3.78967-2.10377c1.66737-1.04776,3.36769-2.17308,3.36769-2.17308s1.24538,1.56994,2.65339,1.44232a1.95259,1.95259,0,0,0,2.02555-2.33158c.38013.66489,1.384,2.66025-2.48322,7.1155l3.14811,2.54086v6.55834a62.74758,62.74758,0,0,0-7.11208,4.42437s-1.9288-2.41323-3.60784-1.2646c-1.12805.77674-.60931,2.09966.97847,2.687Zm-2.71858-5.05427s1.65914-2.74534,4.51014-2.15386a5.46315,5.46315,0,0,1,3.68881,3.45688v-6.65509l-1.911-1.66326c-2.09622,2.1079-5.82209,5.15514-6.288,7.01532ZM145.082,96.90236V102.146l1.74834,1.51984s3.7938-3.03557,5.16954-5.84747c0,0-1.70442,2.31236-3.99552,1.60493a5.5248,5.5248,0,0,1-2.92236-2.52095"/></g><path class="cls-5" d="M25.46544,99.22229l1.41693-1.30714.201.22849L25.707,99.42334v10.42554s-2.62389,1.38811-4.45319,2.42078c-1.82725,1.02856-3.78007,2.2465-3.78007,2.2465L12.663,110.46368l-1.27215,1.102-.20516-.22437,1.336-1.16373V98.96293h.01921s2.26571-1.02513,4.18216-2.10377q1.8162-1.03376,3.625-2.08044l5.1174,4.44358Zm-8.378,9.18428,4.06208,3.67783V100.83134L17.0874,97.06843v11.33815M34.92488,98.16286l3.05341-3.12067a4.27338,4.27338,0,0,0,.81173.5606,2.19448,2.19448,0,0,0,1.99536.12008,3.57076,3.57076,0,0,0,1.02856-.79663,4.91941,4.91941,0,0,1-2.5141,4.84567c-.59559.28614-2.33158.83918-4.14922-1.373v11.21875l1.9336,1.70512,1.61248-1.3339.186.236L33.82839,114.44l-3.84389-3.496-1.386,1.303-.22644-.24359,2.10583-1.89861.01922-9.68312-1.6166-2.14219L27.4903,99.50569l-.199-.22437,4.89576-4.401,2.73779,3.28259M47.8,102.83426l5.64986-8.214a4.35985,4.35985,0,0,0,2.04545,1.22206c1.76343.46042,3.30318-1.24127,3.30318-1.24127-.29505,2.19641-1.408,4.69472-3.70939,5.07348a5.56111,5.56111,0,0,1-3.91318-1.23715l-.36779.5606,7.84352,11.84865,1.56994-1.37644.19968.22781-5.37883,4.70638L47.8,102.83427"/><path class="cls-5" d="M43.13686,91.8632c0-1.771-.72733-2.862-1.67835-2.78445L47.623,84.75113v24.49462l1.62414,1.71334,1.23372-1.06355.1935.22437-4.96507,4.3386-3.36083-3.16321-1.34556,1.18706-.21683-.23192,2.35148-2.042V91.8632m-51.50882-.40209c0-1.65091-.67107-2.57174-1.75795-2.60262-1.56788-.03087-1.94115,2.17309-1.94115,2.17309a4.13146,4.13146,0,0,1,1.14315-3.24829,4.58852,4.58852,0,0,1,4.633-1.5123,3.89911,3.89911,0,0,1,3.096,4.1108v22.78882s.91259.10841,1.53906.2477c.72733.14684,1.41349.34445,1.41349.34445V86.28265H.05411v3.70871L5.002,86.00407l3.625,3.225,1.69-1.46564.1935.23192L8.743,89.51516V110.708c-.08715,1.38468-.31152,2.78856-1.6166,3.60029-2.91,1.72089-6.42317-.26693-9.55344-.7191-2.322-.34789-5.96686-.785-6.88152,1.34212a1.9744,1.9744,0,0,0,.77536,2.48665c2.11338,1.41556,11.52822-2.37069,14.75729-.87006,2.943,1.373,2.93129,3.54265,2.47842,5.02751-.76575,2.79954-4.29469,3.29084-4.29469,3.29084s1.725-1.00523,1.23372-2.66437c-.24908-.83918-.8179-1.07521-2.66848-.87005-4.03326.46041-8.85767,2.41323-12.09841,1.056a5.04723,5.04723,0,0,1-2.73779-4.834c.08508-2.95461,3.49188-4.11423,3.49188-4.11423v-10.921c-.09881-.433-1.91851-.32456-2.31443.47963-.60313,1.21382.752,1.76687.752,1.76687a2.42106,2.42106,0,0,1-2.06672-.9126,3.44462,3.44462,0,0,1-.17017-4.11491c1.02307-1.419,2.25061-1.66669,3.79928-1.83274V91.46111Zm8.424,22.38673a3.06368,3.06368,0,0,0,2.48254-.47963,2.84867,2.84867,0,0,0,1.03816-2.30482v-8.48851a2.39981,2.39981,0,0,0-1.74422-.87006,2.49567,2.49567,0,0,0-1.77716.90094v11.24208ZM3.57412,91.56541,1.2,89.48085l-1.14658.90094v7.86547a2.49862,2.49862,0,0,0,1.77716.89339,2.40761,2.40761,0,0,0,1.74422-.8584V91.56541Zm0,7.18892a2.50818,2.50818,0,0,1-1.74766.77331,2.5921,2.5921,0,0,1-1.773-.77742v3.34915a2.59716,2.59716,0,0,1,1.773-.7733,2.55648,2.55648,0,0,1,1.74766.73488V98.75433"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:transparent;}.cls-3{clip-path:url(#clip-path);}.cls-4{clip-path:url(#clip-path-2);}.cls-5{fill:#231f20;}.cls-6{clip-path:url(#clip-path-3);}.cls-7{clip-path:url(#clip-path-4);}.cls-8{clip-path:url(#clip-path-5);}.cls-9{clip-path:url(#clip-path-6);}</style><clipPath id="clip-path"><rect class="cls-1" x="70.10441" y="2.08849" width="67.24389" height="48.03135"/></clipPath><clipPath id="clip-path-2"><rect class="cls-1" x="80.18001" y="11.21376" width="293.55801" height="41.22531"/></clipPath><clipPath id="clip-path-3"><rect class="cls-1" x="34.42397" y="37.08276" width="145.46637" height="58.32378"/></clipPath><clipPath id="clip-path-4"><rect class="cls-1" x="-22.47396" y="47.12268" width="293.558" height="41.22531"/></clipPath><clipPath id="clip-path-5"><rect class="cls-1" x="63.24278" y="75.50784" width="115.27524" height="49.40367"/></clipPath><clipPath id="clip-path-6"><polygon class="cls-1" points="-140.248 83.64 153.31 83.64 153.31 124.865 -140.248 124.865 -140.248 83.64 -140.248 83.64"/></clipPath></defs><title>kubernetes.io-logos</title><rect class="cls-2" x="-4.04384" y="-3.09231" width="223.25536" height="134.51136"/><path class="cls-1" d="M17.43759,10.00121H196.90967V119.92786H17.43759Z"/><g class="cls-3"><g class="cls-4"><path class="cls-5" d="M98.32557,11.25081a5.772,5.772,0,0,1,3.08429,1.32635,3.98251,3.98251,0,0,1,.90711,3.90221,3.9695,3.9695,0,0,1-1.94115,2.72612,5.15792,5.15792,0,0,1-2.80365.78909v5.33285l2.59506,2.09965-2.59506,2.09623v7.26646a11.75993,11.75993,0,0,0,4.211-4.8299s.07-.17771.21889-.52217a9.64083,9.64083,0,0,1-.94759,5.02339A9.36909,9.36909,0,0,1,97.1639,40.858a10.517,10.517,0,0,1-7.87165,1.36135A11.16054,11.16054,0,0,1,81.962,37.14588a12.12356,12.12356,0,0,1-1.77922-6.83348c.10018-4.9191,3.76085-9.161,7.98555-10.74256a4.17764,4.17764,0,0,1,1.4485-.38631c-.33416.22781-.72322.5256-1.20079.83918a8.83779,8.83779,0,0,0-3.02391,4.04492l8.20032-3.662V31.87136l-6.6146,3.31827A8.61479,8.61479,0,0,0,91.98,38.03172,7.83584,7.83584,0,0,0,97.26614,36.949V29.52262L94.6848,27.4264l2.58546-2.09211v-5.3404a35.89571,35.89571,0,0,1-4.12245-.88172c-1.46976-.35955-6.37307-1.74011-7.14433-1.85264a2.89723,2.89723,0,0,0-2.29521.433,2.28768,2.28768,0,0,0-.68479,2.25473,2.51758,2.51758,0,0,0,.69989,1.00179,2.10493,2.10493,0,0,1-.7987-.33278,3.71281,3.71281,0,0,1-1.7154-2.97795,4.94981,4.94981,0,0,1,2.06534-4.40447,6.19247,6.19247,0,0,1,4.3386-1.09032c2.41324.34034,5.66153,1.70512,8.55233,2.40157a3.6018,3.6018,0,0,0,2.7769-.09675,1.35982,1.35982,0,0,0,.483-1.85264c-.6148-1.06766-1.79431-1.0361-2.79611-1.22617a4.254,4.254,0,0,1,1.6962-.1187Zm-9.749,22.79637V22.97183l-3.32926,1.489a10.93346,10.93346,0,0,0-.70194,4.65629A11.46127,11.46127,0,0,0,86.796,34.92958l1.78059-.8824"/></g><path class="cls-5" d="M130.1333,22.43045s-2.51341,1.52328-4.202,2.53262c-1.69,1.0018-3.95572,2.10789-3.95572,2.10789V37.6358l-1.5123,1.21451.199.23192,1.47319-1.18363,4.62337,4.17256,8.0322-6.36073-.1935-.23192-4.43536,3.48433-3.649-3.41434V34.27224l7.32822-5.38706Zm.10568,8.728-3.72586,2.73024v-9.08l3.72586,6.34974M109.08253,46.04335a7.419,7.419,0,0,0,5.15651-.7191,7.12029,7.12029,0,0,0,3.71419-6.58578l.10636-3.82879v-8.376l1.58777-1.21451-.18526-.23192-1.56034,1.1754-3.60784-4.00993-4.62473,3.97562V12.73155l-5.77955,4.4628A1.50686,1.50686,0,0,1,104.98956,18.66V37.56993L102.542,39.38757l.16605.25114,1.18363-.88172,3.29289,3.063,5.17779-4.12589-.18732-.23193-1.21656.96269-1.2893-1.27969.01372-10.534,1.50819-1.2838,2.25061,2.79611s-.00206,6.8177.00411,9.0841c-.01921,2.41323-.02539,5.42548-1.29547,6.876a4.905,4.905,0,0,1-3.06783,1.95968m35.95628-.951c-2.07084-.24015-2.93884-1.49309-2.9155-2.48253a2.26165,2.26165,0,0,1,1.84852-2.04545,4.06858,4.06858,0,0,1,3.62911,1.69414l4.78186-5.28277-.2278-.20859-1.28587,1.4382a8.35861,8.35861,0,0,0-4.99869-2.69113V19.41408l12.41748,22.62277s.12008.25868.63058.25868c.43708,0,.33073-.35543.33073-.35543L159.24717,19.178a5.678,5.678,0,0,0,3.30043-1.36889c2.392-2.45578,1.4135-5.13936,1.14864-5.39461a2.5942,2.5942,0,0,1-2.54841,2.359,4.41421,4.41421,0,0,1-3.17281-1.454l-4.77981,5.4447.22781.20859,1.37095-1.56651a5.87886,5.87886,0,0,0,4.15334,1.771l-.00207,13.20245-9.21173-16.72863a4.75061,4.75061,0,0,0-4.09364-2.61428,4.322,4.322,0,0,0-4.12246,3.73958,5.20319,5.20319,0,0,0,.02539,2.41324s.33622-2.18131,1.688-2.16553c1.21451.01921,1.84852,1.137,2.33227,1.97615v4.8491c-1.2495.081-4.51083.2285-4.71051,3.61951a3.97187,3.97187,0,0,0,1.454,3.028,3.09608,3.09608,0,0,0,1.57406.57226,1.48833,1.48833,0,0,1-.74243-1.67835c.282-.99425,2.35492-1.15618,2.42833-.739v6.841c-.99562-.01578-4.18833.09263-5.62652,2.827a4.60873,4.60873,0,0,0,.11046,4.80725,4.8106,4.8106,0,0,0,4.98841,1.96517m26.22648-22.66188s-2.51136,1.52328-4.20137,2.53262c-1.688,1.0018-3.95572,2.10789-3.95572,2.10789V37.6358L161.598,38.85031l.199.23192,1.47524-1.18363,4.6213,4.17256,8.03016-6.36073-.18938-.23192-4.43947,3.48433-3.647-3.41434V34.27224l7.32615-5.38706-3.7087-6.45473Zm.1084,8.728-3.72585,2.73024v-9.08l3.72585,6.34974m11.11789,10.99438L178.553,38.88119l-1.72846,1.25705-.17428-.25114,1.75932-1.27969v-9.15c.08508-3.76634-3.4514-2.83454-3.25789-6.82937.081-1.75589,1.78264-3.08636,2.641-3.52688a4.76573,4.76573,0,0,1,1.91232-.46384s-1.61248,1.00934-1.22,2.4592c.60314,2.2314,4.42232,2.43657,4.49574,5.40628V36.8824l2.81737,2.25816.74038-.58049V27.32279l-1.51779-1.50407L188.936,22.3536l3.57559,3.16733-1.36545,1.4773v9.95416l3.34916,2.76523.59765-.38288V27.35435l-1.52533-1.4231,3.92279-3.58863,3.66823,3.03215,1.46563-1.29547.19487.22781-3.29495,2.89629v9.77232l-8.43637,5.19768-4.316-3.415-4.28028,3.39444m29.56467-23.11749c0-1.65091-.67106-2.57174-1.758-2.60261-1.56788-.03088-1.94115,2.17307-1.94115,2.17307a4.13153,4.13153,0,0,1,1.14313-3.24829,4.58855,4.58855,0,0,1,4.633-1.5123,3.8991,3.8991,0,0,1,3.096,4.1108V40.7448s.91258.10842,1.53907.24771c.72733.14684,1.41349.34445,1.41349.34445V13.85685h.29986v3.70871l4.94791-3.98729,3.625,3.225,1.69-1.46565.1935.23193-1.76754,1.51984V38.28148c-.08715,1.38468-.31153,2.78857-1.61659,3.6003-2.91,1.72089-6.42316-.26692-9.55344-.7191-2.322-.34788-5.96688-.785-6.88151,1.34213a1.97437,1.97437,0,0,0,.77536,2.48665c2.11337,1.41556,11.52821-2.37069,14.75728-.87,2.94295,1.373,2.93129,3.54266,2.47842,5.02751-.76575,2.79955-4.294,3.29084-4.294,3.29084s1.725-1.00523,1.23372-2.66437c-.24908-.83918-.81789-1.07522-2.66849-.87006-4.03325.46042-8.85766,2.41323-12.0984,1.056a5.04725,5.04725,0,0,1-2.73778-4.834c.08508-2.95462,3.49187-4.11423,3.49187-4.11423V30.09145c-.09881-.433-1.9185-.32455-2.31441.47963-.60314,1.21382.752,1.76687.752,1.76687a2.42106,2.42106,0,0,1-2.06672-.9126,3.44459,3.44459,0,0,1-.17016-4.11491c1.02307-1.419,2.25061-1.66669,3.79927-1.83274V19.03532h-.00073Zm8.42469,22.38673a3.06368,3.06368,0,0,0,2.48254-.47963,2.84863,2.84863,0,0,0,1.03816-2.30482V30.14909a2.39978,2.39978,0,0,0-1.74421-.87006,2.49564,2.49564,0,0,0-1.77716.90094V41.42205h.00067Zm3.5207-22.28243-2.37411-2.08456-1.14657.90093v7.86547a2.49865,2.49865,0,0,0,1.77716.89339,2.40765,2.40765,0,0,0,1.74422-.85839V19.13962Zm0,7.18892a2.50819,2.50819,0,0,1-1.74765.7733,2.59214,2.59214,0,0,1-1.77305-.77742v3.34916a2.59718,2.59718,0,0,1,1.77305-.77331,2.55641,2.55641,0,0,1,1.74765.73488V26.32854"/></g><g class="cls-6"><path class="cls-5" d="M27.47933,58.33937s-2.51341,1.52328-4.20206,2.53263c-1.69,1.00179-3.95572,2.10789-3.95572,2.10789V73.54473l-1.5123,1.2145.199.23192,1.47319-1.18363,4.62336,4.17256L32.137,71.61867l-.1935-.23192-4.43535,3.48433-3.649-3.41434V70.18048l7.32821-5.38706-3.708-6.454Zm.10567,8.728-3.72586,2.73023v-9.08L27.585,67.06736M6.42856,81.95159a7.419,7.419,0,0,0,5.15651-.7191,7.1203,7.1203,0,0,0,3.71419-6.58578l.10636-3.82879v-8.376l1.58778-1.21451-.18527-.23192-1.56033,1.1754L11.64,58.161,7.01523,62.1366V48.64047l-5.77955,4.4628A1.50687,1.50687,0,0,1,2.3356,54.56891V73.47886L-.11194,75.2965l.16605.25113,1.18363-.88172,3.29289,3.063,5.17778-4.12589-.18732-.23193-1.21657.96269L7.01523,73.05412l.01372-10.534,1.50818-1.28381,2.25062,2.79611s-.00206,6.8177.00411,9.0841c-.01921,2.41323-.02539,5.42548-1.29547,6.876a4.9007,4.9007,0,0,1-3.06783,1.959m35.95627-.951C40.314,80.76041,39.446,79.50747,39.46932,78.518a2.26166,2.26166,0,0,1,1.84852-2.04546A4.0686,4.0686,0,0,1,44.947,78.16671L49.72882,72.884l-.2278-.20859-1.28587,1.43819a8.35862,8.35862,0,0,0-4.9987-2.69112V55.323L55.63393,77.94577s.12008.25868.63058.25868c.43709,0,.33073-.35543.33073-.35543l-.002-22.76206a5.67792,5.67792,0,0,0,3.30043-1.36889c2.392-2.45578,1.4135-5.13935,1.14864-5.39461a2.59472,2.59472,0,0,1-2.5484,2.359,4.41425,4.41425,0,0,1-3.17282-1.454l-4.7798,5.4447.2278.20859,1.371-1.56651a5.87887,5.87887,0,0,0,4.15334,1.771l-.00206,13.20244L47.07955,51.56009a4.75062,4.75062,0,0,0-4.09365-2.61427,4.322,4.322,0,0,0-4.12246,3.73958,5.20315,5.20315,0,0,0,.02539,2.41323s.33622-2.18131,1.688-2.16553c1.2145.01921,1.84852,1.137,2.33226,1.97615v4.84911c-1.2495.081-4.51082.22849-4.70981,3.6195a3.97188,3.97188,0,0,0,1.454,3.028,3.09618,3.09618,0,0,0,1.574.57226,1.48835,1.48835,0,0,1-.74242-1.67836c.282-.99424,2.3549-1.15618,2.42832-.739v6.841c-.99561-.01578-4.18833.09264-5.62652,2.827a4.60871,4.60871,0,0,0,.11047,4.80725,4.80746,4.80746,0,0,0,4.98771,1.96448M68.61132,58.33937S66.1,59.86265,64.41,60.872c-1.688,1.00179-3.95573,2.10789-3.95573,2.10789V73.54473L58.944,74.75923l.199.23192,1.47525-1.18363,4.6213,4.17256,8.03016-6.36141-.18938-.23192-4.43947,3.48433-3.64695-3.41434V70.18048L72.32,64.79342l-3.7087-6.454Zm.10841,8.728-3.72586,2.73023v-9.08l3.72586,6.34975M79.83761,78.06173l-3.93856-3.27162L74.1706,76.04716l-.17428-.25113,1.75932-1.27969V65.36568c.08509-3.76635-3.45139-2.83454-3.2579-6.82938.081-1.75589,1.78265-3.08636,2.641-3.52687a4.76574,4.76574,0,0,1,1.91234-.46385s-1.61248,1.00935-1.22,2.45921c.60314,2.2314,4.42232,2.43656,4.49574,5.40627V72.79063l2.81738,2.25816.74037-.58049V63.231L82.36681,61.727l3.91524-3.46512,3.57559,3.16732-1.36547,1.47731v9.95415l3.34916,2.76524L92.439,75.243V63.26259l-1.52535-1.4231,3.92279-3.58863L98.50464,61.283l1.46564-1.29548.19487.22781-3.295,2.89629V72.884l-8.43636,5.19768-4.316-3.415-4.28029,3.39513M214.70277,62.76306l.19625.22849,1.51231-1.30371,2.24375,2.545v8.72386l-1.091.99837,3.49805,3.95161,3.59412-3.53443-1.47732-1.52739V62.28343l.8927-.71155,2.47911,2.90041v8.70122l-.92838.92837,3.295,3.71214,3.52-3.531-1.29273-1.35723L231.10686,62.326l.95445-.77331,2.58751,2.85032V73.0651l-.85152.84329,3.63939,3.96739,4.88478-4.50534-.21-.22781-1.18226,1.102-1.82176-2.02624V62.33764l1.75453-1.3339-.17977-.24016-1.75658,1.33459-3.32651-3.72449L230.8516,62.129l-3.33473-3.62362-4.58564,3.59275-3.356-3.57354-4.87245,4.23843"/><path class="cls-5" d="M204.7596,62.49271l.19761.22781,1.27558-1.10952,2.00361,2.37v9.97749l-1.41555,1.23371.20174.22781,1.47732-1.26048,3.225,3.71626,4.65492-4.15334-.19213-.22781-1.37027,1.20284-1.93224-2.21973V62.72052l1.62346-1.40732-.19418-.22438-1.54181,1.32224-3.39169-3.94818-4.6213,4.02983"/><g class="cls-7"><path class="cls-5" d="M206.10175,54.22858l3.50628-3.214,2.85169,3.16321-3.5207,3.20232-2.83729-3.15154m-4.71806-7.06953a5.79,5.79,0,0,1,3.087,1.32635,3.9961,3.9961,0,0,1,.90505,3.9022,3.95514,3.95514,0,0,1-1.94252,2.72612,5.15557,5.15557,0,0,1-2.80366.78909v5.33285l2.59575,2.09966-2.59575,2.09622V72.698a11.74262,11.74262,0,0,0,4.21167-4.82989s.06931-.17772.21957-.52217a9.63519,9.63519,0,0,1-.94621,5.02339,9.39464,9.39464,0,0,1-3.89055,4.39692,10.49516,10.49516,0,0,1-7.87028,1.36135,11.17884,11.17884,0,0,1-7.33577-5.07348,12.1725,12.1725,0,0,1-1.77785-6.83349c.10087-4.9191,3.76223-9.16095,7.989-10.74255a4.19085,4.19085,0,0,1,1.44712-.38631c-.3369.2278-.72458.52559-1.20009.83917a8.83162,8.83162,0,0,0-3.02323,4.04492l8.1969-3.662V67.77959l-6.61118,3.31828A8.60772,8.60772,0,0,0,195.04216,73.94a7.83012,7.83012,0,0,0,5.28277-1.08277V65.43155l-2.58408-2.09623,2.58408-2.09211v-5.3404a35.59581,35.59581,0,0,1-4.11423-.88172c-1.46907-.35955-6.3813-1.74011-7.14775-1.85263a2.90209,2.90209,0,0,0-2.29657.433,2.30207,2.30207,0,0,0-.68686,2.25473,2.57785,2.57785,0,0,0,.70262,1.0018,2.09584,2.09584,0,0,1-.796-.33279,3.70372,3.70372,0,0,1-1.71678-2.97795,4.95285,4.95285,0,0,1,2.06328-4.40447,6.20419,6.20419,0,0,1,4.34-1.09031c2.41392.34445,5.66084,1.70511,8.5537,2.40157a3.603,3.603,0,0,0,2.77759-.09675,1.35969,1.35969,0,0,0,.47894-1.85263c-.61206-1.06767-1.79569-1.03611-2.792-1.22618A4.22113,4.22113,0,0,1,201.38367,47.15905ZM191.63811,69.9561V58.88075l-3.332,1.489a10.92613,10.92613,0,0,0-.7047,4.65629,11.53552,11.53552,0,0,0,2.2513,5.81248l1.78539-.8824"/></g><path class="cls-5" d="M143.23968,62.70543l1.41693-1.30714.201.22849-1.37643,1.27969V73.332s-2.62389,1.38811-4.4532,2.42078c-1.82725,1.02856-3.78007,2.2465-3.78007,2.2465l-4.81068-4.05248-1.27215,1.102-.20516-.22438,1.336-1.16373V62.44605h.01921s2.26571-1.02513,4.18216-2.10377q1.81622-1.03376,3.625-2.08044l5.11739,4.44358Zm-8.378,9.18428,4.06208,3.67783V64.31448l-4.06208-3.76292V71.88971m17.83678-10.2444,3.05342-3.12067a4.273,4.273,0,0,0,.81173.5606,2.1945,2.1945,0,0,0,1.99536.12008,3.57034,3.57034,0,0,0,1.02855-.79664,4.91943,4.91943,0,0,1-2.5141,4.84568c-.59558.28613-2.33157.83917-4.14922-1.373V73.1001l1.9336,1.70511,1.61249-1.3339.186.236-5.05427,4.2151-3.84389-3.496-1.386,1.303-.22643-.24359,2.10583-1.89861.01921-9.68312L146.654,61.762l-1.39016,1.22618-.199-.22438,4.89576-4.40105,2.73779,3.2826m12.87583,4.67208,5.64986-8.214a4.36,4.36,0,0,0,2.04544,1.22205c1.76344.46042,3.30318-1.24126,3.30318-1.24126-.29505,2.1964-1.408,4.69472-3.7094,5.07348a5.56108,5.56108,0,0,1-3.91318-1.23715l-.36779.56059,7.84352,11.84865,1.56993-1.37644.19966.22781-5.37881,4.70638-7.24244-11.57006"/><path class="cls-5" d="M160.91042,55.34633c0-1.771-.72733-2.862-1.67835-2.78444l6.16448-4.32763V72.72888l1.62413,1.71335,1.23373-1.06356.1935.22438-4.96506,4.3386L160.122,74.77844l-1.34556,1.18707-.21683-.23192,2.35148-2.042V55.34633m-51.50881-.40277c0-1.65091-.67107-2.57174-1.75795-2.60262-1.56788-.03087-1.94115,2.17308-1.94115,2.17308a4.13146,4.13146,0,0,1,1.14315-3.24829,4.58856,4.58856,0,0,1,4.633-1.51231,3.89911,3.89911,0,0,1,3.096,4.1108V76.653s.9126.10841,1.53906.2477c.72733.14684,1.4135.34445,1.4135.34445V49.76578h.29985v3.7087l4.94791-3.98728,3.625,3.225,1.69-1.46564.1935.23192-1.76756,1.51984V74.1904c-.08714,1.38468-.31151,2.78857-1.6166,3.6003-2.91,1.72089-6.42317-.26692-9.55343-.7191-2.322-.34789-5.96687-.785-6.88153,1.34213a1.9744,1.9744,0,0,0,.77537,2.48666c2.11338,1.41555,11.5282-2.37069,14.75729-.87006,2.943,1.373,2.93129,3.54266,2.47842,5.02752-.76576,2.79953-4.29469,3.29083-4.29469,3.29083s1.725-1.00523,1.23372-2.66437c-.24908-.83918-.81791-1.07522-2.66848-.87-4.03327.46041-8.85767,2.41323-12.09841,1.056a5.04723,5.04723,0,0,1-2.7378-4.834c.08508-2.95461,3.49189-4.11423,3.49189-4.11423V65.99969c-.09881-.433-1.91852-.32456-2.31443.47962-.60313,1.21382.752,1.76687.752,1.76687a2.42107,2.42107,0,0,1-2.06672-.9126,3.44464,3.44464,0,0,1-.17016-4.11491c1.02306-1.419,2.25061-1.66669,3.79928-1.83274V54.94356Zm8.4247,22.38672a3.06367,3.06367,0,0,0,2.48253-.47962,2.84867,2.84867,0,0,0,1.03816-2.30482V66.058a2.3998,2.3998,0,0,0-1.74423-.87,2.49564,2.49564,0,0,0-1.77715.90093v11.2414h.00069Zm3.52069-22.28174L118.97358,52.964l-1.14658.90093v7.86548a2.49862,2.49862,0,0,0,1.77715.89338,2.40765,2.40765,0,0,0,1.74423-.85839V55.04854h-.00068Zm0,7.18892a2.50816,2.50816,0,0,1-1.74765.7733,2.5921,2.5921,0,0,1-1.773-.77742v3.34915a2.59716,2.59716,0,0,1,1.773-.7733,2.55644,2.55644,0,0,1,1.74765.73488V62.23746"/></g><g class="cls-8"><path class="cls-5" d="M134.63384,94.85624s-2.51478,1.52328-4.20137,2.53262c-1.69276,1.0018-3.95984,2.10789-3.95984,2.10789v10.56484l-1.50681,1.21451.19967.23192,1.47113-1.18363,4.62337,4.17255,8.02878-6.36141-.19006-.23192-4.43535,3.48433-3.65107-3.41434v-1.27626l7.32615-5.38706-3.70459-6.454Zm.10705,8.728-3.72861,2.73024v-9.08l3.72861,6.34974M96.92924,99.28061l.19623.2278,1.5123-1.303,2.24306,2.54429v8.72454l-1.091.99768,3.49874,3.95229,3.59412-3.53442-1.47731-1.52809V98.801l.8927-.71156,2.47911,2.90042v8.70053l-.92838.92837,3.29426,3.71282,3.5207-3.531-1.29273-1.35722-.03774-10.59983.95446-.77331,2.58751,2.84963v8.6628l-.85152.84261,3.6394,3.96807L124.548,109.888l-.21-.22849-1.18227,1.102-1.82175-2.02624v-9.88l1.75452-1.33459-.18046-.23947-1.7559,1.3339-3.32652-3.7238-4.74756,3.75468L109.7433,95.023,105.15768,98.615l-3.356-3.57285-4.87244,4.23843"/><path class="cls-5" d="M86.98605,99.00958l.19761.22849,1.27489-1.11021,2.00429,2.37069V110.476l-1.41624,1.233.20242.22848,1.47661-1.26048,3.22565,3.71626L98.60621,110.24l-.19213-.22849-1.37026,1.20285-1.93223-2.21974V99.23808l1.62346-1.408-.19419-.22437-1.54249,1.32292-3.3917-3.94818-4.62061,4.02914"/><g class="cls-9"><path class="cls-5" d="M88.32819,90.74544l3.50629-3.2133,2.851,3.16321-3.52,3.20232-2.83728-3.15223M83.61013,83.6766a5.79,5.79,0,0,1,3.087,1.32635,3.99608,3.99608,0,0,1,.90505,3.9022,3.95512,3.95512,0,0,1-1.94252,2.72613,5.15553,5.15553,0,0,1-2.80366.78908v5.33285l2.59576,2.09966L82.856,101.94909v7.26645a11.74262,11.74262,0,0,0,4.21167-4.82989s.0693-.17772.21957-.52217a9.63529,9.63529,0,0,1-.94621,5.02339,9.39474,9.39474,0,0,1-3.89054,4.39693,10.49515,10.49515,0,0,1-7.87028,1.36134,11.17881,11.17881,0,0,1-7.33576-5.07348,12.17234,12.17234,0,0,1-1.77785-6.83349c.10087-4.9191,3.76223-9.16095,7.989-10.74256a4.20532,4.20532,0,0,1,1.44712-.387c-.3369.22781-.72459.5256-1.2001.83918a8.83159,8.83159,0,0,0-3.02323,4.04493l8.1969-3.662v11.46577l-6.61117,3.31828a8.60764,8.60764,0,0,0,5.00349,2.84208,7.82835,7.82835,0,0,0,5.28277-1.08276v-7.425l-2.58409-2.09622,2.58409-2.09211v-5.3404a35.59791,35.59791,0,0,1-4.11423-.88172c-1.46907-.35955-6.38131-1.74011-7.14775-1.85264a2.90214,2.90214,0,0,0-2.29659.433,2.30208,2.30208,0,0,0-.68685,2.25472,2.57779,2.57779,0,0,0,.70264,1.00181,2.09134,2.09134,0,0,1-.796-.33279,3.70374,3.70374,0,0,1-1.71677-2.97795,4.95287,4.95287,0,0,1,2.06329-4.40447,6.20416,6.20416,0,0,1,4.34-1.09031c2.41392.34445,5.66084,1.70511,8.5537,2.40157a3.60484,3.60484,0,0,0,2.77827-.09675,1.35971,1.35971,0,0,0,.47894-1.85264c-.612-1.06767-1.79569-1.03611-2.792-1.22617a4.21746,4.21746,0,0,1,1.69208-.1194ZM73.86457,106.473V95.39761l-3.332,1.489a10.926,10.926,0,0,0-.70469,4.65629,11.53547,11.53547,0,0,0,2.25129,5.81248l1.7854-.8824m69.70446,9.38944a3.46583,3.46583,0,0,1-3.39925-2.79954c-.54069-2.3357,1.07934-3.9173,3.52825-6.40807l-2.88875-2.641V98.967s2.1223-1.06767,3.78967-2.10377c1.66737-1.04776,3.36769-2.17308,3.36769-2.17308s1.24538,1.56994,2.65339,1.44232a1.95259,1.95259,0,0,0,2.02555-2.33158c.38013.66489,1.384,2.66025-2.48322,7.1155l3.14811,2.54086v6.55834a62.74758,62.74758,0,0,0-7.11208,4.42437s-1.9288-2.41323-3.60784-1.2646c-1.12805.77674-.60931,2.09966.97847,2.687Zm-2.71858-5.05427s1.65914-2.74534,4.51014-2.15386a5.46315,5.46315,0,0,1,3.68881,3.45688v-6.65509l-1.911-1.66326c-2.09622,2.1079-5.82209,5.15514-6.288,7.01532ZM145.082,96.90236V102.146l1.74834,1.51984s3.7938-3.03557,5.16954-5.84747c0,0-1.70442,2.31236-3.99552,1.60493a5.5248,5.5248,0,0,1-2.92236-2.52095"/></g><path class="cls-5" d="M25.46544,99.22229l1.41693-1.30714.201.22849L25.707,99.42334v10.42554s-2.62389,1.38811-4.45319,2.42078c-1.82725,1.02856-3.78007,2.2465-3.78007,2.2465L12.663,110.46368l-1.27215,1.102-.20516-.22437,1.336-1.16373V98.96293h.01921s2.26571-1.02513,4.18216-2.10377q1.8162-1.03376,3.625-2.08044l5.1174,4.44358Zm-8.378,9.18428,4.06208,3.67783V100.83134L17.0874,97.06843v11.33815M34.92488,98.16286l3.05341-3.12067a4.27338,4.27338,0,0,0,.81173.5606,2.19448,2.19448,0,0,0,1.99536.12008,3.57076,3.57076,0,0,0,1.02856-.79663,4.91941,4.91941,0,0,1-2.5141,4.84567c-.59559.28614-2.33158.83918-4.14922-1.373v11.21875l1.9336,1.70512,1.61248-1.3339.186.236L33.82839,114.44l-3.84389-3.496-1.386,1.303-.22644-.24359,2.10583-1.89861.01922-9.68312-1.6166-2.14219L27.4903,99.50569l-.199-.22437,4.89576-4.401,2.73779,3.28259M47.8,102.83426l5.64986-8.214a4.35985,4.35985,0,0,0,2.04545,1.22206c1.76343.46042,3.30318-1.24127,3.30318-1.24127-.29505,2.19641-1.408,4.69472-3.70939,5.07348a5.56111,5.56111,0,0,1-3.91318-1.23715l-.36779.5606,7.84352,11.84865,1.56994-1.37644.19968.22781-5.37883,4.70638L47.8,102.83427"/><path class="cls-5" d="M43.13686,91.8632c0-1.771-.72733-2.862-1.67835-2.78445L47.623,84.75113v24.49462l1.62414,1.71334,1.23372-1.06355.1935.22437-4.96507,4.3386-3.36083-3.16321-1.34556,1.18706-.21683-.23192,2.35148-2.042V91.8632m-51.50882-.40209c0-1.65091-.67107-2.57174-1.75795-2.60262-1.56788-.03087-1.94115,2.17309-1.94115,2.17309a4.13146,4.13146,0,0,1,1.14315-3.24829,4.58852,4.58852,0,0,1,4.633-1.5123,3.89911,3.89911,0,0,1,3.096,4.1108v22.78882s.91259.10841,1.53906.2477c.72733.14684,1.41349.34445,1.41349.34445V86.28265H.05411v3.70871L5.002,86.00407l3.625,3.225,1.69-1.46564.1935.23192L8.743,89.51516V110.708c-.08715,1.38468-.31152,2.78856-1.6166,3.60029-2.91,1.72089-6.42317-.26693-9.55344-.7191-2.322-.34789-5.96686-.785-6.88152,1.34212a1.9744,1.9744,0,0,0,.77536,2.48665c2.11338,1.41556,11.52822-2.37069,14.75729-.87006,2.943,1.373,2.93129,3.54265,2.47842,5.02751-.76575,2.79954-4.29469,3.29084-4.29469,3.29084s1.725-1.00523,1.23372-2.66437c-.24908-.83918-.8179-1.07521-2.66848-.87005-4.03326.46041-8.85767,2.41323-12.09841,1.056a5.04723,5.04723,0,0,1-2.73779-4.834c.08508-2.95461,3.49188-4.11423,3.49188-4.11423v-10.921c-.09881-.433-1.91851-.32456-2.31443.47963-.60313,1.21382.752,1.76687.752,1.76687a2.42106,2.42106,0,0,1-2.06672-.9126,3.44462,3.44462,0,0,1-.17017-4.11491c1.02307-1.419,2.25061-1.66669,3.79928-1.83274V91.46111Zm8.424,22.38673a3.06368,3.06368,0,0,0,2.48254-.47963,2.84867,2.84867,0,0,0,1.03816-2.30482v-8.48851a2.39981,2.39981,0,0,0-1.74422-.87006,2.49567,2.49567,0,0,0-1.77716.90094v11.24208ZM3.57412,91.56541,1.2,89.48085l-1.14658.90094v7.86547a2.49862,2.49862,0,0,0,1.77716.89339,2.40761,2.40761,0,0,0,1.74422-.8584V91.56541Zm0,7.18892a2.50818,2.50818,0,0,1-1.74766.77331,2.5921,2.5921,0,0,1-1.773-.77742v3.34915a2.59716,2.59716,0,0,1,1.773-.7733,2.55648,2.55648,0,0,1,1.74766.73488V98.75433"/></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/nokia/nokia_featured_logo.svg b/content/en/case-studies/nokia/nokia_featured_logo.svg
index bbf2920f7a..1e3cce4956 100644
--- a/content/en/case-studies/nokia/nokia_featured_logo.svg
+++ b/content/en/case-studies/nokia/nokia_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#006cb7;}</style></defs><title>nokia</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><polygon class="cls-2" points="23.535 77.585 14.624 77.585 14.624 48.305 30.04 48.305 47.717 70.171 47.717 48.305 56.626 48.305 56.626 77.585 41.529 77.585 23.535 55.356 23.535 77.585"/><path class="cls-2" d="M86.96953,70.53817c2.03268,0,2.74956-.11608,3.23784-.54371.45706-.39991.65794-.91707.65794-2.63643V58.4191c0-1.72-.20088-2.23418-.65794-2.63711-.48828-.42873-1.20515-.53939-3.23783-.53939H72.49669c-2.03268,0-2.74592.11066-3.233.53939-.45946.40293-.65671.91714-.65671,2.63711V67.358c0,1.71936.19725,2.23652.65671,2.63643.48711.42763,1.20035.54371,3.233.54371Zm12.2923-2.0014c0,4.06413-.74575,5.47257-1.97375,6.81726-1.89554,2.00436-4.6451,2.60576-9.9469,2.60576H72.12862c-5.30181,0-8.05253-.6014-9.94327-2.60576-1.2328-1.34469-1.97732-2.75313-1.97732-6.81726V57.2488c0-4.07017.74452-5.478,1.97732-6.82508,1.89074-2.00442,4.64146-2.60343,9.94327-2.60343H87.34118c5.3018,0,8.05135.599,9.9469,2.60343,1.228,1.34709,1.97375,2.75491,1.97375,6.82508Z"/><path class="cls-2" d="M127.93816,48.305h12.28866L123.64069,62.0021l18.7126,15.58666H129.19743L112.21318,62.31364Zm-15.725,29.28376h-9.30942V48.305h9.30942Z"/><rect class="cls-2" x="144.07442" y="48.305" width="9.31421" height="29.28376"/><path class="cls-2" d="M171.34711,66.124h11.57544L177.1324,55.52643Zm17.53874,11.46113L186.1315,72.486H168.11293l-2.72431,5.09914H155.10136L171.60454,48.305h11.57784l16.50553,29.28013Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#006cb7;}</style></defs><title>nokia</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><polygon class="cls-2" points="23.535 77.585 14.624 77.585 14.624 48.305 30.04 48.305 47.717 70.171 47.717 48.305 56.626 48.305 56.626 77.585 41.529 77.585 23.535 55.356 23.535 77.585"/><path class="cls-2" d="M86.96953,70.53817c2.03268,0,2.74956-.11608,3.23784-.54371.45706-.39991.65794-.91707.65794-2.63643V58.4191c0-1.72-.20088-2.23418-.65794-2.63711-.48828-.42873-1.20515-.53939-3.23783-.53939H72.49669c-2.03268,0-2.74592.11066-3.233.53939-.45946.40293-.65671.91714-.65671,2.63711V67.358c0,1.71936.19725,2.23652.65671,2.63643.48711.42763,1.20035.54371,3.233.54371Zm12.2923-2.0014c0,4.06413-.74575,5.47257-1.97375,6.81726-1.89554,2.00436-4.6451,2.60576-9.9469,2.60576H72.12862c-5.30181,0-8.05253-.6014-9.94327-2.60576-1.2328-1.34469-1.97732-2.75313-1.97732-6.81726V57.2488c0-4.07017.74452-5.478,1.97732-6.82508,1.89074-2.00442,4.64146-2.60343,9.94327-2.60343H87.34118c5.3018,0,8.05135.599,9.9469,2.60343,1.228,1.34709,1.97375,2.75491,1.97375,6.82508Z"/><path class="cls-2" d="M127.93816,48.305h12.28866L123.64069,62.0021l18.7126,15.58666H129.19743L112.21318,62.31364Zm-15.725,29.28376h-9.30942V48.305h9.30942Z"/><rect class="cls-2" x="144.07442" y="48.305" width="9.31421" height="29.28376"/><path class="cls-2" d="M171.34711,66.124h11.57544L177.1324,55.52643Zm17.53874,11.46113L186.1315,72.486H168.11293l-2.72431,5.09914H155.10136L171.60454,48.305h11.57784l16.50553,29.28013Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/nordstrom/nordstrom_featured_logo.svg b/content/en/case-studies/nordstrom/nordstrom_featured_logo.svg
index 19051f4b21..a162e93f03 100644
--- a/content/en/case-studies/nordstrom/nordstrom_featured_logo.svg
+++ b/content/en/case-studies/nordstrom/nordstrom_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:none;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.85896" y="-3.29932" width="223.25536" height="134.51136"/><rect class="cls-2" x="12.98311" y="52.37137" width="189.57122" height="23.16998"/><path d="M44.97419,73.85506c4.48217,0,6.95205-3.55169,6.95205-9.965,0-6.3344-2.47024-9.965-6.95206-9.965-4.47852,0-6.952,3.63063-6.952,9.8119,0,6.56647,2.39459,10.11816,6.95206,10.11816m0-21.3978c6.25765,0,10.3495,4.63641,10.3495,11.43277,0,6.79929-4.17189,11.51427-10.3495,11.51427-6.10306,0-10.3517-4.87068-10.3517-11.51427,0-6.64286,4.24864-11.43277,10.3517-11.43277"/><path d="M95.44036,63.5834c0-6.02777-2.78053-9.42851-8.187-9.42851a23.51638,23.51638,0,0,0-3.30645.15569,4.15054,4.15054,0,0,1,.19736,1.40305c-.02084,1.926-.05921,5.45654-.05921,8.179,0,2.97313.06652,6.15057.11183,7.99036a4.5992,4.5992,0,0,1-.20247,1.58653,18.99839,18.99839,0,0,0,2.87117.15569c5.71529,0,8.57476-3.55606,8.57476-10.04177m3.3229-.07858c0,7.10519-4.0173,11.50952-10.89443,11.50952H80.9186s.1546-7.02881.1546-11.12175c0-4.02095-.1546-11.04976-.1546-11.04976h7.95674c6.48937,0,9.88792,3.63282,9.88792,10.662"/><path d="M166.24593,73.85506c4.48072,0,6.95205-3.55169,6.95205-9.965,0-6.3344-2.4717-9.965-6.95205-9.965-4.48328,0-6.95426,3.63063-6.95426,9.8119,0,6.56647,2.39239,10.11816,6.95426,10.11816m0-21.3978c6.2529,0,10.348,4.63641,10.348,11.43277,0,6.79929-4.1719,11.51427-10.348,11.51427-6.10671,0-10.35535-4.87068-10.35535-11.51427,0-6.64286,4.24863-11.43277,10.35535-11.43277"/><path d="M15.06887,67.21183c0,5.33556.23135,7.8047.23135,7.8047H12.98311s.30773-8.964.30773-17.53729c0-1.46847-.07894-4.63677-.07894-4.63677H14.839s6.17652,8.76188,10.28664,14.46182a23.721,23.721,0,0,1,1.47287,2.49948s-.17324-1.51233-.17324-2.88286V60.64754a63.2181,63.2181,0,0,0-.31029-7.80471h2.31455s-.30663,8.11134-.30663,17.5373c0,.929.07565,4.63677.07565,4.63677H26.57949S20.5181,66.37818,16.36375,60.61538a15.50923,15.50923,0,0,1-1.44143-2.34379s.14619,1.88621.14619,2.8803v6.05994Z"/><path d="M109.1135,73.85506a4.10637,4.10637,0,0,0,4.06041-4.62216c-.29311-1.89754-1.73052-3.036-4.13461-4.41566-3.07912-1.76049-4.90722-3.04989-5.21934-5.99744-.39-3.67265,2.683-6.28543,6.37607-6.43893a14.00586,14.00586,0,0,1,4.71316.73424V55.468a7.03561,7.03561,0,0,0-4.55747-1.69581c-1.941,0-4.06006,1.23348-4.06006,3.42158,0,1.944,1.52951,2.87811,4.21575,4.45513,3.58421,2.11135,5.38674,3.80715,5.38674,6.98458a6.8388,6.8388,0,0,1-7.08728,6.76895,14.27941,14.27941,0,0,1-4.71316-.73862v-2.585a7.15262,7.15262,0,0,0,5.01979,1.77621"/><path d="M133.52646,52.84283V54.9359a14.69308,14.69308,0,0,0-4.24609-.5409h-1.45422s.04642.58549.03727,1.41439c0,0-.05335,3.96284-.05335,5.0684,0,6.1809.30882,14.13692.30882,14.13692H124.644s.31138-7.956.31138-14.13692c0-1.10556-.05555-5.0684-.05555-5.0684-.01389-.83365.03727-1.41439.03727-1.41439h-1.44947a14.69393,14.69393,0,0,0-4.25084.54091V52.84283Z"/><path d="M202.48016,75.0074h-3.27537s-.18347-8.09088-.497-13.78168c-.03252-.678-.03-1.54011-.03-2.47134a24.35386,24.35386,0,0,1-.85959,2.395l-6.07894,14.392s-3.39855-7.77437-6.08368-13.61173c-.40421-.87787-.9316-2.41542-1.29159-3.17524a31.92871,31.92871,0,0,1-.102,3.49357c-.409,5.71419-.52044,12.75945-.52044,12.75945h-2.13254l1.37053-22.16932h1.90485s4.09039,9.20776,6.713,14.84046a11.52393,11.52393,0,0,1,.90126,2.267,23.44415,23.44415,0,0,1,.81319-2.24145c2.42272-5.70469,6.12279-14.8664,6.12279-14.8664h1.90484Z"/><path d="M151.38463,58.018c0,2.93622-1.8493,4.94524-5.10093,5.79533,2.09052,3.86306,6.3366,11.2007,6.3366,11.2007h-3.47493s-1.85113-3.78413-6.64359-12.20429h.38557c3.55424,0,5.40792-1.46811,5.40792-4.40433,0-2.55065-1.547-4.17153-4.48107-4.17153-.84754,0-2.1786.03-2.1786.03a6.50192,6.50192,0,0,1,.18348,1.92349V67.597c0,4.94523.23243,7.41694.23243,7.41694h-3.32179s.23463-8.72936.23463-13.28427c0-3.16866-.23463-8.88724-.23463-8.88724h6.5504c3.9442.00036,6.10451,1.85624,6.10451,5.17548"/><path d="M74.17121,58.018c0,2.93622-1.85479,4.94524-5.09983,5.79533,2.08613,3.86306,6.3344,11.2007,6.3344,11.2007H71.93085s-1.85478-3.78413-6.64323-12.20429h.38777c3.55059,0,5.40427-1.46811,5.40427-4.40433,0-2.55065-1.54376-4.17153-4.47962-4.17153-.849,0-2.179.03-2.179.03a6.41786,6.41786,0,0,1,.186,1.92349V67.597c0,4.94523.231,7.41694.231,7.41694H61.5152s.23244-8.72936.23244-13.28427c0-3.16866-.23244-8.88724-.23244-8.88724h6.553c3.94165.00036,6.10306,1.85624,6.10306,5.17548"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:none;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.85896" y="-3.29932" width="223.25536" height="134.51136"/><rect class="cls-2" x="12.98311" y="52.37137" width="189.57122" height="23.16998"/><path d="M44.97419,73.85506c4.48217,0,6.95205-3.55169,6.95205-9.965,0-6.3344-2.47024-9.965-6.95206-9.965-4.47852,0-6.952,3.63063-6.952,9.8119,0,6.56647,2.39459,10.11816,6.95206,10.11816m0-21.3978c6.25765,0,10.3495,4.63641,10.3495,11.43277,0,6.79929-4.17189,11.51427-10.3495,11.51427-6.10306,0-10.3517-4.87068-10.3517-11.51427,0-6.64286,4.24864-11.43277,10.3517-11.43277"/><path d="M95.44036,63.5834c0-6.02777-2.78053-9.42851-8.187-9.42851a23.51638,23.51638,0,0,0-3.30645.15569,4.15054,4.15054,0,0,1,.19736,1.40305c-.02084,1.926-.05921,5.45654-.05921,8.179,0,2.97313.06652,6.15057.11183,7.99036a4.5992,4.5992,0,0,1-.20247,1.58653,18.99839,18.99839,0,0,0,2.87117.15569c5.71529,0,8.57476-3.55606,8.57476-10.04177m3.3229-.07858c0,7.10519-4.0173,11.50952-10.89443,11.50952H80.9186s.1546-7.02881.1546-11.12175c0-4.02095-.1546-11.04976-.1546-11.04976h7.95674c6.48937,0,9.88792,3.63282,9.88792,10.662"/><path d="M166.24593,73.85506c4.48072,0,6.95205-3.55169,6.95205-9.965,0-6.3344-2.4717-9.965-6.95205-9.965-4.48328,0-6.95426,3.63063-6.95426,9.8119,0,6.56647,2.39239,10.11816,6.95426,10.11816m0-21.3978c6.2529,0,10.348,4.63641,10.348,11.43277,0,6.79929-4.1719,11.51427-10.348,11.51427-6.10671,0-10.35535-4.87068-10.35535-11.51427,0-6.64286,4.24863-11.43277,10.35535-11.43277"/><path d="M15.06887,67.21183c0,5.33556.23135,7.8047.23135,7.8047H12.98311s.30773-8.964.30773-17.53729c0-1.46847-.07894-4.63677-.07894-4.63677H14.839s6.17652,8.76188,10.28664,14.46182a23.721,23.721,0,0,1,1.47287,2.49948s-.17324-1.51233-.17324-2.88286V60.64754a63.2181,63.2181,0,0,0-.31029-7.80471h2.31455s-.30663,8.11134-.30663,17.5373c0,.929.07565,4.63677.07565,4.63677H26.57949S20.5181,66.37818,16.36375,60.61538a15.50923,15.50923,0,0,1-1.44143-2.34379s.14619,1.88621.14619,2.8803v6.05994Z"/><path d="M109.1135,73.85506a4.10637,4.10637,0,0,0,4.06041-4.62216c-.29311-1.89754-1.73052-3.036-4.13461-4.41566-3.07912-1.76049-4.90722-3.04989-5.21934-5.99744-.39-3.67265,2.683-6.28543,6.37607-6.43893a14.00586,14.00586,0,0,1,4.71316.73424V55.468a7.03561,7.03561,0,0,0-4.55747-1.69581c-1.941,0-4.06006,1.23348-4.06006,3.42158,0,1.944,1.52951,2.87811,4.21575,4.45513,3.58421,2.11135,5.38674,3.80715,5.38674,6.98458a6.8388,6.8388,0,0,1-7.08728,6.76895,14.27941,14.27941,0,0,1-4.71316-.73862v-2.585a7.15262,7.15262,0,0,0,5.01979,1.77621"/><path d="M133.52646,52.84283V54.9359a14.69308,14.69308,0,0,0-4.24609-.5409h-1.45422s.04642.58549.03727,1.41439c0,0-.05335,3.96284-.05335,5.0684,0,6.1809.30882,14.13692.30882,14.13692H124.644s.31138-7.956.31138-14.13692c0-1.10556-.05555-5.0684-.05555-5.0684-.01389-.83365.03727-1.41439.03727-1.41439h-1.44947a14.69393,14.69393,0,0,0-4.25084.54091V52.84283Z"/><path d="M202.48016,75.0074h-3.27537s-.18347-8.09088-.497-13.78168c-.03252-.678-.03-1.54011-.03-2.47134a24.35386,24.35386,0,0,1-.85959,2.395l-6.07894,14.392s-3.39855-7.77437-6.08368-13.61173c-.40421-.87787-.9316-2.41542-1.29159-3.17524a31.92871,31.92871,0,0,1-.102,3.49357c-.409,5.71419-.52044,12.75945-.52044,12.75945h-2.13254l1.37053-22.16932h1.90485s4.09039,9.20776,6.713,14.84046a11.52393,11.52393,0,0,1,.90126,2.267,23.44415,23.44415,0,0,1,.81319-2.24145c2.42272-5.70469,6.12279-14.8664,6.12279-14.8664h1.90484Z"/><path d="M151.38463,58.018c0,2.93622-1.8493,4.94524-5.10093,5.79533,2.09052,3.86306,6.3366,11.2007,6.3366,11.2007h-3.47493s-1.85113-3.78413-6.64359-12.20429h.38557c3.55424,0,5.40792-1.46811,5.40792-4.40433,0-2.55065-1.547-4.17153-4.48107-4.17153-.84754,0-2.1786.03-2.1786.03a6.50192,6.50192,0,0,1,.18348,1.92349V67.597c0,4.94523.23243,7.41694.23243,7.41694h-3.32179s.23463-8.72936.23463-13.28427c0-3.16866-.23463-8.88724-.23463-8.88724h6.5504c3.9442.00036,6.10451,1.85624,6.10451,5.17548"/><path d="M74.17121,58.018c0,2.93622-1.85479,4.94524-5.09983,5.79533,2.08613,3.86306,6.3344,11.2007,6.3344,11.2007H71.93085s-1.85478-3.78413-6.64323-12.20429h.38777c3.55059,0,5.40427-1.46811,5.40427-4.40433,0-2.55065-1.54376-4.17153-4.47962-4.17153-.849,0-2.179.03-2.179.03a6.41786,6.41786,0,0,1,.186,1.92349V67.597c0,4.94523.231,7.41694.231,7.41694H61.5152s.23244-8.72936.23244-13.28427c0-3.16866-.23244-8.88724-.23244-8.88724h6.553c3.94165.00036,6.10306,1.85624,6.10306,5.17548"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/northwestern-mutual/northwestern_featured_logo.svg b/content/en/case-studies/northwestern-mutual/northwestern_featured_logo.svg
index c907eb6e22..7a2f09de54 100644
--- a/content/en/case-studies/northwestern-mutual/northwestern_featured_logo.svg
+++ b/content/en/case-studies/northwestern-mutual/northwestern_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#12284a;}.cls-3{fill:#fbb61c;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.99136" y="-4.21606" width="223.25536" height="134.51136"/><path class="cls-2" d="M70.39228,77.09771c.74716-1.56353,1.479-3.09135,2.20753-4.62075.521-1.09384,1.0154-2.20106,1.56489-3.2804a3.16949,3.16949,0,0,0,.42707-1.89439c-.04213-.31706.05834-.43389.40495-.42984q2.41845.02821,4.83739.00056c.3215-.00338.38915.09829.38791.39943-.00423,1.02388.00775,1.02393-1.02782,1.02393-.97457,0-.97457,0-.97457.97914,0,3.59643.00552,7.19288-.00874,10.78924-.00139.35112.07718.4676.43743.438.424-.03486.85349.00385,1.27966-.01294.22957-.009.2841.06822.293.29205.04467,1.127.05219,1.1267-1.069,1.1267-1.86546,0-3.731-.00785-5.59635.007-.34564.00276-.49327-.04936-.48114-.44955.02946-.97077.00595-.97148.98856-.97148,1.12041,0,1.12042,0,1.12041-1.11124q0-3.904,0-7.808,0-.22641,0-.45282l-.07607-.01962q-.47955,1.01-.95887,2.0201-1.98484,4.20483-3.967,8.41093c-.09332.19816-.14573.37762-.44718.38969-.33136.01326-.39016-.19568-.48926-.40239q-2.2856-4.76754-4.56973-9.5358c-.06777-.14144-.13616-.2826-.20637-.42827-.16843.06208-.08746.19181-.08763.27781-.0055,2.74463.00342,5.48932-.01407,8.23385-.00232.36406.09843.46172.44655.43287.37682-.03124.75825-.00709,1.13766-.00707a.6.6,0,0,1,.23512.00446c.47555.22665.1342.64907.21173.9737.03575.14969.139.4381-.22984.4373-1.75479-.0038-3.51151.04386-5.26329-.02883-.54259-.02252-.14822-.6087-.23469-.92392-.03959-.14435-.17665-.47368.23438-.46475.44245.00962.88712-.0228,1.32733.00991.35212.02617.44384-.075.44209-.434-.01584-3.24931-.00928-6.49872-.00928-9.7481,0-.55209-.01425-1.10469.00593-1.656.01025-.28-.05422-.39388-.36137-.37516-.45676.02785-.91653.0101-1.37493.00477-.09889-.00115-.26041.05166-.26739-.10653-.01734-.39318-.01346-.788.00059-1.18152.00571-.16.15661-.12353.25944-.12365,1.62834-.00189,3.25669.00256,4.885-.00576.23162-.00118.32737.08.29241.30047a3.97655,3.97655,0,0,0,.62992,2.41429c1.1723,2.387,2.32146,4.78522,3.48045,7.17869C70.26256,76.8679,70.31859,76.96191,70.39228,77.09771Z"/><path class="cls-3" d="M45.38927,53.86272a7.19805,7.19805,0,0,0,.046.85924,2.15615,2.15615,0,0,0,1.8606,1.82188,2.53013,2.53013,0,0,0,2.74448-1.33019A3.47766,3.47766,0,0,0,48.7946,50.759a5.25781,5.25781,0,0,0-3.69023-.69757A10.00144,10.00144,0,0,0,38.177,54.5021a22.61414,22.61414,0,0,0-3.58938,8.31956,45.58422,45.58422,0,0,0-1.15081,10.26522,3.61162,3.61162,0,0,1-.05194.729,6.37225,6.37225,0,0,1-.39115-1.61881,37.22825,37.22825,0,0,1-.58256-7.76583A21.54791,21.54791,0,0,1,35.50147,53.415a13.1953,13.1953,0,0,1,8.55089-6.17545,9.378,9.378,0,0,1,6.71794.81163,6.00864,6.00864,0,0,1,1.87278,8.59714,5.325,5.325,0,0,1-6.10064,1.78778,3.11816,3.11816,0,0,1-1.99335-3.55387A1.42134,1.42134,0,0,1,45.38927,53.86272Z"/><path class="cls-3" d="M16.935,55.97634A2.47157,2.47157,0,0,1,15.673,58.064a4.29918,4.29918,0,0,1-5.85076-1.27487,5.85146,5.85146,0,0,1,2.92-8.93563,9.477,9.477,0,0,1,7.59267.42064,15.835,15.835,0,0,1,6.83018,6.29431,22.82684,22.82684,0,0,1,3.45569,10.67918,23.90978,23.90978,0,0,1-1.00259,8.21115c-.03459.12366-.02314.28751-.22325.3949.032-.50486.069-.97569.09058-1.44722a24.65311,24.65311,0,0,0-5.43349-17.264,12.40435,12.40435,0,0,0-6.04047-4.31012,5.77406,5.77406,0,0,0-3.67814-.04,3.185,3.185,0,0,0-1.72464,4.83848,2.76663,2.76663,0,0,0,4.14779.48463,1.73727,1.73727,0,0,1,.186-.13051Z"/><path class="cls-2" d="M73.81731,56.9693v-.50824c0-2.71223-.0081-5.42452.00861-8.13665.00255-.41336-.07578-.60277-.53727-.55708a12.26021,12.26021,0,0,1-1.32659.00743c-.11666-.00118-.27327.03691-.27485-.1615-.00291-.36264-.00593-.72543.00135-1.08795.00384-.191.1609-.16154.28132-.16165,1.78586-.00172,3.57425-.05419,5.35608.03029.55426.02628.16669.66134.25991,1.00553.05476.20218.03737.40134-.29106.38366-.47274-.02544-.9484.00685-1.42181-.01144-.26963-.01042-.37711.08278-.34706.34912a2.96823,2.96823,0,0,1,.00185.33092c0,4.14719-.00586,8.29441.00957,12.44155.00146.39018-.09964.466-.48581.50489a2.043,2.043,0,0,1-1.8584-.80731c-2.81535-3.09307-5.67489-6.14609-8.51943-9.21269-.10565-.11391-.21463-.22474-.32473-.3398-.15469.11914-.08542.27244-.08565.40082-.00475,2.69646.00326,5.393-.012,8.08935-.002.34726.07217.47233.43669.442.42376-.0353.854.0116,1.279-.01488.306-.01906.36372.09944.36607.37827.00881,1.04539.01882,1.04531-1.01464,1.04531-1.454,0-2.908-.00814-4.36186.00668-.2999.003-.3993-.064-.39694-.38308.00767-1.04042-.007-1.04053,1.01537-1.04053.99211,0,.99211,0,.99211-1.00308,0-3.548-.01087-7.096.013-10.64386.00319-.474-.13309-.60951-.5733-.54331a2.88883,2.88883,0,0,1-.56816.00284c-.2806-.014-.74562.112-.80478-.05682a3.75635,3.75635,0,0,1-.05951-1.21285c.00048-.15852.13973-.14193.24817-.142,1.42237-.00088,2.84475.00306,4.26708-.00435.23652-.00123.32831.1026.28511.31219a2.27807,2.27807,0,0,0,.87922,2.09181c2.40408,2.5921,4.77189,5.21769,7.15484,7.82932C73.51095,56.70414,73.63183,56.79913,73.81731,56.9693Z"/><path class="cls-2" d="M114.32532,51.913a18.04214,18.04214,0,0,1,1.70523-.99149,4.27491,4.27491,0,0,1,2.70157-.48215,3.00587,3.00587,0,0,1,2.34033,3.18652c.01049,2.05046.01257,4.10111-.0063,6.15145-.00342.37262.09441.49838.46818.46277.34463-.03284.69653.01376,1.04218-.01325.30053-.02348.36884.08465.36748.3708-.00367.78146.01054.78153-.75415.78153-1.70731,0-3.41475-.011-5.12183.009-.35239.00413-.493-.07893-.43463-.43692a1.64106,1.64106,0,0,0,.001-.425c-.02235-.21952.04749-.31207.2845-.29779.315.019.63313-.01153.94788.00958.26039.01746.31429-.08933.31314-.32627-.00965-2.00312.01305-4.00663-.01826-6.00933a1.57742,1.57742,0,0,0-2.20431-1.61733c-.061.0158-.12236.03052-.18225.0498-1.3706.44131-1.44978.54852-1.44978,1.95988,0,1.81392.01679,3.6281-.01216,5.44156-.007.43639.12813.56428.52811.49855a1.4784,1.4784,0,0,1,.23682-.00182c.82637,0,.81807-.00031.78549.84764-.00834.21685-.05623.30362-.291.30268q-2.8929-.01167-5.78585-.00024c-.21128.00077-.25658-.07129-.26693-.27138-.04544-.87909-.05312-.87869.79374-.8787,1.11693,0,1.11693,0,1.11693-1.12138,0-4.19566-.00619-8.39135.01-12.587.00154-.40005-.10429-.535-.49513-.47984a4.44557,4.44557,0,0,1-.61583.005c-.82691,0-.81506.00006-.81072-.81524.0014-.26315.06879-.34715.34061-.34453,1.3594.01314,2.71914.0165,4.07842-.00182.31884-.0043.3958.09236.39389.3978-.01248,2.0031-.00641,4.00632-.0064,6.00951Z"/><path class="cls-2" d="M131.37442,54.12236q-1.33392,3.555-2.66619,7.10738c-.07.18688-.08916.38413-.385.38428-.275.00014-.33282-.16147-.42123-.35259-1.38038-2.98421-2.77329-5.96269-4.13937-8.95337-.16889-.36977-.354-.56457-.76432-.48093a.24183.24183,0,0,1-.04733.00039c-.90786-.00008-.89955.00075-.8076-.91862.01954-.19538.09339-.23089.26213-.23057q2.703.00518,5.406-.00183c.21773-.00085.252.08964.26338.2803.05181.871.058.87066-.81008.87072-.649.00005-.64935.00021-.381.60036q.95367,2.13246,1.90871,4.26432c.06331.14112.13737.27744.23084.465.63318-1.72122,1.24105-3.39068,1.86552-5.05393.10047-.26757.00218-.29194-.21649-.27766a3.17453,3.17453,0,0,1-.47386-.00059c-.23045-.01959-.55427.12047-.6711-.06964-.15975-.26-.04457-.61217-.0505-.92456-.00311-.16375.1293-.1497.23844-.14975,1.65973-.00076,3.31947.00116,4.97918-.00318.17079-.00044.23964.03535.2575.22951.08457.92012.09285.91938-.84593.92014-.15258.00013-.30515,0-.53113,0l2.41375,5.34875c.31534-.85289.59-1.59532.86436-2.33784.32162-.87035.62538-1.74787.97285-2.60781.14836-.36721.04-.43832-.29978-.406-.1723.01641-.34746.00287-.52134.00286-.65334,0-.62974-.0012-.66139-.63535-.01958-.3924.05661-.53923.49974-.52474,1.16844.0382,2.33912.02206,3.50862.00655.29512-.00391.4066.05545.4.38022-.01577.77293-.00078.82124-.75866.758-.59452-.04961-.82681.166-1.02637.7119-1.05818,2.8949-2.16694,5.77139-3.25832,8.6542-.08068.21313-.105.43629-.44734.44-.31575.00339-.40026-.16629-.503-.388q-1.5674-3.38311-3.14454-6.7617C131.55669,54.34679,131.54227,54.18667,131.37442,54.12236Z"/><path class="cls-2" d="M195.46889,51.96277a16.05943,16.05943,0,0,1,2.08217-1.22208,4.24183,4.24183,0,0,1,2.174-.33763,2.73137,2.73137,0,0,1,2.47064,2.82029c.04717,2.14417.03854,4.29014.01327,6.43486-.00572.4845.12038.65326.59551.58009a2.38423,2.38423,0,0,1,.61524-.00046c.22386.02451.56228-.13907.64737.09114a2.48312,2.48312,0,0,1,.02172.93687c-.00817.16731-.16521.11072-.26223.11089-1.91284.00322-3.82572-.00147-5.73852.00738-.23323.00109-.28563-.07363-.29355-.296-.03048-.85529-.03958-.855.77322-.855.78017,0,.78018,0,.78018-.797,0-1.79817.00283-3.59634-.001-5.3945a1.61519,1.61519,0,0,0-2.25481-1.752,5.88294,5.88294,0,0,0-1.42117.63153.37432.37432,0,0,0-.20479.38128c.00435,2.20826.00712,4.41656-.00284,6.62479-.00117.25957.08819.33053.32763.30923.18821-.01674.3791-.00334.56881-.00332.61382.00008.5905.00124.62183.63112.01953.39244-.05575.53578-.501.52794-1.78582-.03145-3.57263-.02309-5.35881-.00419-.343.00362-.451-.098-.4024-.42075a1.2692,1.2692,0,0,0-.00013-.37762c-.046-.29762.07343-.38172.3642-.36285.39356.02555.7904-.00416,1.18509.01029.23359.00855.33578-.04677.33491-.30943q-.01295-3.90387-.00143-7.8078c.00053-.22747-.07588-.30376-.30119-.29616-.41055.01384-.82256-.01-1.23271.00891-.25535.01178-.35254-.04689-.35376-.32945-.00357-.82286-.01825-.8228.80088-.8228,1.16985,0,2.34017.019,3.50926-.01065.39072-.00991.48737.11937.44952.47232C195.44776,51.3859,195.46889,51.63483,195.46889,51.96277Z"/><path class="cls-2" d="M111.05539,80.91638a7.3344,7.3344,0,0,1-3.018,1.24139,4.5416,4.5416,0,0,1-1.74037-.08511,2.4384,2.4384,0,0,1-1.89083-2.171,11.92582,11.92582,0,0,1-.06241-1.36817c-.00641-1.9235-.011-3.8471.00531-5.77049.0028-.33032-.08175-.44059-.4156-.41442-.37691.02954-.75867-.00738-1.13693.01181-.2466.0125-.31723-.06341-.32187-.31391-.01555-.83848-.02724-.83827.7893-.83827q1.65919,0,3.31839,0c.65782,0,.65783,0,.65783.67986q0,3.40559.00045,6.81116c.00006.18913-.00654.37951.01179.56719a1.46353,1.46353,0,0,0,1.88849,1.38312,6.46576,6.46576,0,0,0,1.76651-.77794c.17856-.10018.16855-.245.16856-.40167.00008-2.27039-.0042-4.5408.00569-6.81114.00113-.26038-.09078-.31788-.32762-.30791-.39434.0166-.7908-.01185-1.18462.01012-.26978.01506-.34065-.07359-.34153-.33991-.00269-.81293-.01521-.81289.8115-.81289,1.15354,0,2.30762.02011,3.46033-.01074.41161-.011.48238.12272.48019.50142-.01654,2.85365.00229,5.70754-.021,8.5611-.00357.43631.12495.54414.52814.50422.34425-.03408.69514.00506,1.042-.01109.24475-.01141.321.071.32839.3204.02469.83518.03575.83486-.80213.83486-1.13774,0-2.27608-.02159-3.41288.01085-.44139.0126-.6548-.07864-.57035-.55483A2.412,2.412,0,0,0,111.05539,80.91638Z"/><path class="cls-2" d="M89.03936,80.91112a9.22638,9.22638,0,0,1-2.12959,1.04326,4.88373,4.88373,0,0,1-2.66224.11546,2.57082,2.57082,0,0,1-1.94113-2.738q-.02463-3.26345.00417-6.52714c.00334-.376-.09945-.50076-.46613-.45436a5.31919,5.31919,0,0,1-.663.005c-.80134,0-.90794-.14128-.77048-.95349.03-.17716.11616-.19409.2532-.194,1.42215.001,2.84432.00571,4.26641-.00278.36827-.00219.24513.25806.24562.42839q.01,3.47645.00376,6.95294a3.93325,3.93325,0,0,0,.09319,1.03326,1.40789,1.40789,0,0,0,1.75426,1.04338,6.08034,6.08034,0,0,0,1.85689-.80132c.16191-.09217.155-.21677.155-.35756.0001-2.28612-.00271-4.57225.00447-6.85834.0007-.22172-.05489-.30536-.28843-.29534-.41008.01759-.82227-.01071-1.232.01039-.26836.01382-.34638-.07125-.349-.3411-.008-.81172-.02058-.8116.77621-.8116,1.18512,0,2.37045.01225,3.55523-.00788.33064-.00562.41941.08335.41783.41565-.01361,2.86941.002,5.739-.01823,8.60832-.00306.43478.11051.59693.5468.5384a5.38268,5.38268,0,0,1,.71033-.00554c.62533.00006.60019.00143.6337.61625.02258.41429-.07582.56048-.52813.5473-1.23148-.0359-2.46515-.03144-3.697-.00189-.42677.01024-.6097-.09626-.53481-.53492A3.37945,3.37945,0,0,0,89.03936,80.91112Z"/><path class="cls-2" d="M83.79349,50.38151c3.2246-.00481,5.42818,1.68552,6.0247,4.48354A5.5514,5.5514,0,0,1,84.634,61.655a7.55792,7.55792,0,0,1-3.21513-.4098A5.55961,5.55961,0,0,1,77.961,55.55829a5.48979,5.48979,0,0,1,4.64421-5.06865A7.63145,7.63145,0,0,1,83.79349,50.38151Zm-2.63428,5.64477a7.14575,7.14575,0,0,0,.56571,2.95461,2.4614,2.4614,0,0,0,1.58686,1.44521A2.38613,2.38613,0,0,0,86.269,58.7943a7.80039,7.80039,0,0,0-.01539-5.58294,2.31874,2.31874,0,0,0-2.28081-1.67056,2.43894,2.43894,0,0,0-2.33473,1.68A7.473,7.473,0,0,0,81.15921,56.02628Z"/><path class="cls-3" d="M48.33261,44.43331a13.22055,13.22055,0,0,1-3.13405,1.0408A65.74139,65.74139,0,0,1,36.456,46.82105a86.38954,86.38954,0,0,1-10.36516.41809A35.42369,35.42369,0,0,1,17.279,46.13893a6.42081,6.42081,0,0,1-1.49456-.58542.95925.95925,0,0,1-.5487-1.14139c.1009-.37175.47211-.60594,1.04207-.53529,1.07963.13384,2.15187.32621,3.22817.48769,1.59471.23925,3.20258.351,4.81044.43359,4.62721.23769,9.25806.17638,13.88718.0832,3.23806-.06517,6.4736-.22711,9.70554-.44678C48.04966,44.425,48.19142,44.43331,48.33261,44.43331Z"/><path class="cls-2" d="M117.14956,73.59472c-.29921-1.0875-.31885-.8315.43018-1.37585a6.02067,6.02067,0,0,1,4.105-1.2932,3.31947,3.31947,0,0,1,3.11119,3.08182c.08315,1.58811.03724,3.18292.04971,4.77477a5.81566,5.81566,0,0,0,.02212.61362,1.22949,1.22949,0,0,0,1.61468,1.11807c.12072-.03042.24-.06644.35909-.09962.01746.03419.04145.05976.04242.08617.03844,1.05524.02535,1.07009-.97871,1.43175a4.22472,4.22472,0,0,1-1.81377.2552,2.44236,2.44236,0,0,1-1.90749-1.264,6.61243,6.61243,0,0,1-2.33218,1.19209,2.54142,2.54142,0,0,1-3.21718-2.37361,2.50823,2.50823,0,0,1,1.88642-2.931,29.93989,29.93989,0,0,1,3.05532-.8254c.31622-.0804.40751-.20648.38445-.50749-.024-.31353-.002-.6303-.00811-.9455a1.83471,1.83471,0,0,0-2.44-1.94546A7.871,7.871,0,0,0,117.14956,73.59472Zm4.80581,4.87274c0-.36165-.00859-.72357.00335-1.08482.0067-.20329-.07862-.2436-.25323-.19759a5.9779,5.9779,0,0,0-1.75774.65815,1.426,1.426,0,0,0-.568,1.8137,1.12713,1.12713,0,0,0,1.28371.72254c.8947-.17726,1.29217-.60578,1.29217-1.3931Q121.95559,78.7269,121.95537,78.46746Z"/><path class="cls-2" d="M179.33643,59.1899a2.83339,2.83339,0,0,0-.025.33664c.05581.926-.48954,1.33589-1.28491,1.63064a7.70723,7.70723,0,0,1-4.78718.27752,5.056,5.056,0,0,1-3.75612-4.34769,6.78565,6.78565,0,0,1,.1224-3.09081,4.7827,4.7827,0,0,1,9.2419-.12465c.1126.35877.15658.73854.25932,1.101.0874.30829-.01981.3694-.31468.36773-1.97435-.0112-3.94895.0066-5.92311-.01619-.39921-.00461-.48241.13012-.43929.48148a9.46061,9.46061,0,0,0,.31543,1.7627,3.4393,3.4393,0,0,0,4.58755,2.51609A6.26651,6.26651,0,0,0,179.33643,59.1899Zm-5.0589-5.00767c.53543,0,1.07086.00091,1.60628-.00063.13519-.00039.29308.03881.25326-.20343a3.35762,3.35762,0,0,0-.90627-2.02256,1.44321,1.44321,0,0,0-2.223.22781,3.6712,3.6712,0,0,0-.5784,1.76869c-.03264.25768.1305.23058.28907.2304Q173.498,54.18158,174.27753,54.18223Z"/><path class="cls-2" d="M151.05647,59.19079c-.063.43985-.12707.82334-.16853,1.20925a.33862.33862,0,0,1-.21.28273,7.18925,7.18925,0,0,1-6.63906.40329,5.11588,5.11588,0,0,1-2.91476-4.44754,6.607,6.607,0,0,1,.30314-3.03117,4.779,4.779,0,0,1,9.0622.06873,10.26647,10.26647,0,0,1,.32266,1.27889c.07428.34739-.046.38621-.3438.38461-1.87993-.01013-3.76-.00513-5.63993-.00513-.73212,0-.73765.00054-.66549.74668a7.16142,7.16142,0,0,0,.29836,1.5265,3.43864,3.43864,0,0,0,4.52863,2.49331A6.68131,6.68131,0,0,0,151.05647,59.19079Zm-5.08994-5.0085c.53743,0,1.07491-.00373,1.61227.00212.17621.00192.31354.00026.26582-.24389a3.64755,3.64755,0,0,0-.80458-1.88533A1.455,1.455,0,0,0,144.71,52.19a3.37611,3.37611,0,0,0-.56611,1.72859c-.01946.208.04986.27279.2579.26779C144.92306,54.17386,145.4449,54.18226,145.96653,54.18229Z"/><path class="cls-2" d="M132.43368,73.07269c0,2.41348.00688,4.827-.00766,7.24039-.0021.34764.08015.48268.44564.45131.37662-.03233.7585.00153,1.13756-.01033.20117-.0063.26279.05807.27557.26537.05485.8895.06338.889-.83477.889-1.77068,0-3.54146-.01005-5.31195.00859-.348.00366-.50231-.07272-.44371-.43638a1.38528,1.38528,0,0,0,.00065-.37778c-.031-.26274.06045-.36624.339-.3513.40987.022.822-.00278,1.23275.00911.20156.00583.29785-.056.27542-.26619a2.23822,2.23822,0,0,1-.00121-.23648c0-4.401-.00553-8.80212.0096-13.20312.00135-.38871-.08265-.5388-.48524-.486-.26418.03468-.54041-.02186-.80458.01291-.4448.05855-.61122-.0734-.57478-.54949.047-.61385.011-.6166.64073-.61661,1.23315,0,2.46652.01251,3.69932-.00815.34008-.00569.41663.1008.41487.42473C132.42766,68.24571,132.43368,70.65921,132.43368,73.07269Z"/><path class="cls-2" d="M153.78828,61.07862c-.14707.18218-.03947.49757-.42071.49463-.60986-.00471-.61021.02488-.61029-.59452-.0001-.78849-.0055-1.577.005-2.36539.0019-.14213-.11271-.39524.19182-.37541.22146.01441.50415-.142.62.23907a3.00469,3.00469,0,0,0,.6814,1.17748,2.332,2.332,0,0,0,2.43466.77567,1.13488,1.13488,0,0,0,.53177-1.96108,6.367,6.367,0,0,0-1.39331-.97089,11.792,11.792,0,0,1-2.03005-1.38137,3.08252,3.08252,0,0,1-.963-3.50761,3.3281,3.3281,0,0,1,3.03272-2.20873,3.36709,3.36709,0,0,1,2.18635.44793c.17285.10557.30311.16332.36091-.11044.09661-.45748.47022-.27332.73216-.27357.32709-.00032.16678.28721.17109.43659.01953.67754.01515,1.35607.00317,2.034-.00251.14139.114.4056-.18719.37554-.23388-.02335-.55019.18431-.69086-.19987a4.30374,4.30374,0,0,0-.25541-.55692,1.83849,1.83849,0,0,0-2.37063-.89585,1.01428,1.01428,0,0,0-.52161,1.57841,2.8995,2.8995,0,0,0,1.04973.93543c.739.4527,1.52948.81894,2.23711,1.32468a3.32473,3.32473,0,0,1-1.777,6.1652A5.84319,5.84319,0,0,1,153.78828,61.07862Z"/><path class="cls-2" d="M188.52124,54.41648a5.70753,5.70753,0,0,0-.70639-.99558,1.37761,1.37761,0,0,0-2.05632-.03745,1.54615,1.54615,0,0,0-.56889,1.30571c.044,1.71713.023,3.43615.00929,5.1543-.00241.30188.06654.42091.38807.3964.377-.02873.75858.00758,1.13677-.01175.24689-.01262.318.06269.32251.314.01513.83729.02691.83707-.7878.83707-1.80109,0-3.60229-.01041-5.40317.00891-.35457.0038-.49579-.08318-.44041-.44157a1.69675,1.69675,0,0,0,.001-.42482c-.02348-.233.078-.29962.30032-.29248.42614.01367.85365-.01019,1.27935.00912.25616.01162.31717-.08454.31654-.3246q-.01046-3.87786.00148-7.75575c.00107-.28088-.099-.34995-.35733-.33508a9.0845,9.0845,0,0,1-.99481-.00038c-.17716-.00926-.46487.11076-.51084-.0932a3.25045,3.25045,0,0,1,.0036-.98065c.009-.101.16032-.06682.24979-.06694,1.40611-.00188,2.81226.00339,4.21831-.00592.23594-.00157.29369.0851.28726.30289-.01345.456-.00407.91272-.00407,1.40189.19736-.04321.23833-.20793.32237-.31986a5.10544,5.10544,0,0,1,1.3888-1.40373,1.95326,1.95326,0,0,1,2.6046.70035.47328.47328,0,0,1,.05075.221A7.24875,7.24875,0,0,1,188.52124,54.41648Z"/><path class="cls-2" d="M98.9078,54.42587c-.25811-.35509-.45506-.68189-.706-.96024a1.36451,1.36451,0,0,0-2.08388-.0871,1.5497,1.5497,0,0,0-.58345,1.30031c.0458,1.68566.0348,3.3737.00385,5.06-.00809.44012.13141.547.52942.49978.24929-.02958.51056.02814.75662-.01255.50332-.08324.56954.13975.58329.58769.01507.49106-.13577.5841-.59812.57711-1.86406-.02822-3.72888-.02118-5.59319-.00323-.34848.00335-.5017-.0735-.44373-.438a1.69134,1.69134,0,0,0,.00115-.42486c-.0223-.22875.07031-.3036.2972-.29582.42611.0146.85342-.0059,1.27957.00821.21908.00725.3028-.05184.30216-.28648q-.01076-3.92556.00011-7.85116c.00071-.24855-.11021-.28066-.31508-.27524-.41053.01086-.82193-.00737-1.23223.00723-.23434.00833-.32847-.04884-.33667-.30948-.0265-.84214-.03905-.84175.79123-.84175,1.20085,0,2.40188.01118,3.60244-.00759.31319-.00489.41329.08117.39477.393a8.07018,8.07018,0,0,0,.03981,1.31237,15.29578,15.29578,0,0,1,1.07261-1.24979,1.90022,1.90022,0,0,1,3.07733.08122c.10749.11654.21881.22.18257.40739A8.32808,8.32808,0,0,1,98.9078,54.42587Z"/><path class="cls-2" d="M94.0235,72.61849l4.499-4.32348c0,.90057.02205,1.69565-.00974,2.48857-.01487.37088.11.44457.45195.43264.74173-.02587,1.48523.00267,2.22752-.01359.26823-.00587.34417.076.34889.34473.0188,1.0713.0288,1.07111-1.04382,1.07113-.553,0-1.10639.01115-1.659-.0049-.24484-.00711-.32267.06336-.32124.31536.01146,2.01793.00345,4.036.01484,6.0539a2.96539,2.96539,0,0,0,.2842,1.28212,1.219,1.219,0,0,0,1.73613.62124,8.91781,8.91781,0,0,0,.844-.51831c.181-.11144.38433-.21508.56045-.03156.16737.17441.08318.38482-.0212.56812a2.28878,2.28878,0,0,1-1.24008.97424,4.94056,4.94056,0,0,1-3.02515.18034,2.62784,2.62784,0,0,1-1.98763-2.72515c-.05685-2.06378-.05113-4.12983-.03548-6.19462.00342-.45-.13577-.57042-.553-.52708C94.78586,72.64422,94.47148,72.61849,94.0235,72.61849Z"/><path class="cls-3" d="M26.56886,74.87049c-.08-.79832-.14031-1.58854-.24113-2.37359a22.09836,22.09836,0,0,0-2.454-8.2779,7.7922,7.7922,0,0,0-1.6094-2.03114,3.88836,3.88836,0,0,0-1.72759-.94028,2.63239,2.63239,0,0,0-2.74562.83449c-.06232.0712-.12035.14613-.18187.218-.0485.05671-.09932.11145-.15266.171a2.69981,2.69981,0,0,1,1.16234-3.92535,4.39185,4.39185,0,0,1,4.71665.65453,9.1973,9.1973,0,0,1,2.9084,4.39945,19.35263,19.35263,0,0,1,.48965,10.98582C26.71135,74.68018,26.74808,74.81459,26.56886,74.87049Z"/><path class="cls-2" d="M160.91749,52.09434l4.48466-4.31743c0,.81748,0,1.545,0,2.27248,0,.63091,0,.63093.60938.631.69516,0,1.39047.009,2.08536-.00482.24252-.00481.31844.06189.32573.31491.03185,1.10417.0414,1.10388-1.05179,1.1039-.553,0-1.10632.0124-1.65871-.0054-.254-.00819-.31644.077-.31513.32187.01068,2.0019.00288,4.00391.01351,6.00581a3.083,3.083,0,0,0,.26933,1.28546,1.23292,1.23292,0,0,0,1.80056.64508,8.65767,8.65767,0,0,0,.79977-.50136c.18423-.11753.39857-.20011.56487-.03073.16121.1642.08546.381-.01972.56957a1.92432,1.92432,0,0,1-.81848.76552,4.60806,4.60806,0,0,1-3.76166.27688,2.66611,2.66611,0,0,1-1.68356-2.75881c-.05262-2.03218-.03555-4.06659-.0178-6.0998.00352-.40348-.112-.52055-.49917-.481C161.71658,52.12093,161.38235,52.09434,160.91749,52.09434Z"/><path class="cls-2" d="M100.61214,52.09433l4.489-4.318c0,.90767.017,1.70324-.008,2.49749-.01059.33636.09417.42454.42214.41416.75746-.024,1.51638.00154,2.27433-.01287.24367-.00464.31513.06127.3208.31231.02508,1.10713.03446,1.10692-1.08777,1.10693-.53707,0-1.07425.00618-1.61116-.00307-.20589-.00355-.31816.03141-.31439.27863.03246,2.127-.05021,4.25483.04922,6.3812a2.62421,2.62421,0,0,0,.09766.55587,1.34221,1.34221,0,0,0,2.26866.85228c.19814-.12847.389-.27043.5966-.38127a.3514.3514,0,0,1,.4395.04048.37225.37225,0,0,1,.04121.4012,1.52928,1.52928,0,0,1-.69817.807,4.50572,4.50572,0,0,1-4.13265.32233,2.49887,2.49887,0,0,1-1.44423-2.12856,7.64994,7.64994,0,0,1-.0951-1.31821c.004-1.76523-.01694-3.53082.01438-5.29551.00808-.455-.14069-.55965-.54923-.51857C101.3757,52.11927,101.06081,52.09433,100.61214,52.09433Z"/><path class="cls-3" d="M45.4793,62.4627a2.88,2.88,0,0,0-3.71952-1.12314,5.469,5.469,0,0,0-2.43614,2.174,16.94761,16.94761,0,0,0-2.2685,5.921,33.35425,33.35425,0,0,0-.68381,5.05217.588.588,0,0,1-.071.26344A7.42021,7.42021,0,0,1,35.87,72.76013a19.91326,19.91326,0,0,1,1.36155-10.37351A7.2888,7.2888,0,0,1,40.24791,58.725a4.13648,4.13648,0,0,1,4.16254-.15865,2.66971,2.66971,0,0,1,1.26213,3.576C45.62618,62.23893,45.56188,62.327,45.4793,62.4627Z"/><path class="cls-3" d="M23.41522,76.29913a18.94571,18.94571,0,0,0-1.07483-4.1398,12.25993,12.25993,0,0,0-2.61112-4.29322,4.483,4.483,0,0,0-2.47059-1.39749,2.41434,2.41434,0,0,0-2.8013,1.41032,1.24168,1.24168,0,0,1-.11484.14571,2.11816,2.11816,0,0,1-.39054-2.00017,2.89829,2.89829,0,0,1,2.92472-2.17119,5.12738,5.12738,0,0,1,4.40785,2.34878,12.9938,12.9938,0,0,1,2.38675,6.0954,10.11022,10.11022,0,0,1-.08988,3.71327C23.55835,76.11343,23.57637,76.23745,23.41522,76.29913Z"/><path class="cls-3" d="M39.26868,76.3362a4.40471,4.40471,0,0,1-.29279-1.63314,14.03846,14.03846,0,0,1,2.19585-8.083,5.5929,5.5929,0,0,1,3.50519-2.631,3.95763,3.95763,0,0,1,2.85111.33671,2.59935,2.59935,0,0,1,1.28519,2.93479,1.46213,1.46213,0,0,1-.43781.76573,2.0258,2.0258,0,0,0-1.38816-1.436,3.44987,3.44987,0,0,0-2.45207.14954A6.17963,6.17963,0,0,0,41.97465,69.063a17.19467,17.19467,0,0,0-2.55156,6.75485A1.03342,1.03342,0,0,1,39.26868,76.3362Z"/><path class="cls-3" d="M22.83661,82.0974a11.14176,11.14176,0,0,1,2.25649-1.20784,19.67937,19.67937,0,0,1,8.94926-1.37779,16.88817,16.88817,0,0,1,3.50686.50461,4.25441,4.25441,0,0,1,1.17564.48687c.51927.33447.70539.74082.5437,1.17914-.14321.3882-.46816.515-1.13486.39974a35.73151,35.73151,0,0,0-4.22953-.49261,58.31284,58.31284,0,0,0-6.58241.09105c-1.40259.08521-2.80115.21548-4.19253.41585C23.076,82.10409,23.02076,82.0974,22.83661,82.0974Z"/><path class="cls-3" d="M22.9541,78.60229a11.759,11.759,0,0,1,3.219-1.55682,21.155,21.155,0,0,1,11.26313-.5178,6.4911,6.4911,0,0,1,1.065.38674,1.58445,1.58445,0,0,1,.5707.41528.81926.81926,0,0,1,.145,1.00345.72163.72163,0,0,1-.82582.31362c-1.07789-.15469-2.14965-.34741-3.23446-.45958a39.56378,39.56378,0,0,0-5.72981-.11177C27.26578,78.16558,25.1139,78.36823,22.9541,78.60229Z"/><path class="cls-3" d="M22.92254,48.378a7.13239,7.13239,0,0,1,5.52882,1.7385,10.67093,10.67093,0,0,1,3.38478,6.88242,4.67874,4.67874,0,0,1,.03014,1.4109c-.06658.36274-.21628.63621-.61419.66515-.43358.03152-.61621-.26986-.71193-.6247a20.10922,20.10922,0,0,0-1.35181-3.66968,13.11023,13.11023,0,0,0-5.31795-5.92049C23.56141,48.687,23.23882,48.53813,22.92254,48.378Z"/><path class="cls-3" d="M32.87614,55.42333a6.28772,6.28772,0,0,1,7.35674-7.86909C36.40769,48.932,34.26025,51.76377,32.87614,55.42333Z"/><path class="cls-2" d="M136.49413,68.84721A1.96921,1.96921,0,1,1,138.433,66.8679,1.973,1.973,0,0,1,136.49413,68.84721Zm-.02947-.36778a1.60466,1.60466,0,0,0,1.60682-1.583,1.6034,1.6034,0,1,0-1.60682,1.583Z"/><path class="cls-3" d="M16.94256,55.98487a.13856.13856,0,0,1,.01377-.03508c.00339-.00464.01609-.00252.02457-.00347l-.04588.03Z"/><path class="cls-2" d="M137.38928,67.87964c-.30337.10581-.50312.04953-.58133-.27612-.02884-.12011-.10458-.22825-.1431-.347-.06924-.21348-.243-.1603-.39221-.16108-.22558-.00117-.1757.172-.18127.30517-.00394.09409-.003.18853-.0005.28271.00355.13412.00061.24731-.19059.24209-.16523-.00451-.26776-.03376-.26517-.23138.0072-.54971.00584-1.09961.00049-1.64937-.00157-.16069.061-.2269.22118-.2214a8.10568,8.10568,0,0,1,1.03605.03408.56992.56992,0,0,1,.39371.95078c-.26384.2469-.16083.41424-.06725.63873C137.27858,67.58909,137.33217,67.73366,137.38928,67.87964Zm-.894-1.69422c-.235-.00093-.42542-.0522-.415.26546.00869.26429.112.32649.33925.29848.21075-.026.493.02013.5079-.28452C136.94385,66.129,136.65,66.20514,136.49527,66.18542Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#12284a;}.cls-3{fill:#fbb61c;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.99136" y="-4.21606" width="223.25536" height="134.51136"/><path class="cls-2" d="M70.39228,77.09771c.74716-1.56353,1.479-3.09135,2.20753-4.62075.521-1.09384,1.0154-2.20106,1.56489-3.2804a3.16949,3.16949,0,0,0,.42707-1.89439c-.04213-.31706.05834-.43389.40495-.42984q2.41845.02821,4.83739.00056c.3215-.00338.38915.09829.38791.39943-.00423,1.02388.00775,1.02393-1.02782,1.02393-.97457,0-.97457,0-.97457.97914,0,3.59643.00552,7.19288-.00874,10.78924-.00139.35112.07718.4676.43743.438.424-.03486.85349.00385,1.27966-.01294.22957-.009.2841.06822.293.29205.04467,1.127.05219,1.1267-1.069,1.1267-1.86546,0-3.731-.00785-5.59635.007-.34564.00276-.49327-.04936-.48114-.44955.02946-.97077.00595-.97148.98856-.97148,1.12041,0,1.12042,0,1.12041-1.11124q0-3.904,0-7.808,0-.22641,0-.45282l-.07607-.01962q-.47955,1.01-.95887,2.0201-1.98484,4.20483-3.967,8.41093c-.09332.19816-.14573.37762-.44718.38969-.33136.01326-.39016-.19568-.48926-.40239q-2.2856-4.76754-4.56973-9.5358c-.06777-.14144-.13616-.2826-.20637-.42827-.16843.06208-.08746.19181-.08763.27781-.0055,2.74463.00342,5.48932-.01407,8.23385-.00232.36406.09843.46172.44655.43287.37682-.03124.75825-.00709,1.13766-.00707a.6.6,0,0,1,.23512.00446c.47555.22665.1342.64907.21173.9737.03575.14969.139.4381-.22984.4373-1.75479-.0038-3.51151.04386-5.26329-.02883-.54259-.02252-.14822-.6087-.23469-.92392-.03959-.14435-.17665-.47368.23438-.46475.44245.00962.88712-.0228,1.32733.00991.35212.02617.44384-.075.44209-.434-.01584-3.24931-.00928-6.49872-.00928-9.7481,0-.55209-.01425-1.10469.00593-1.656.01025-.28-.05422-.39388-.36137-.37516-.45676.02785-.91653.0101-1.37493.00477-.09889-.00115-.26041.05166-.26739-.10653-.01734-.39318-.01346-.788.00059-1.18152.00571-.16.15661-.12353.25944-.12365,1.62834-.00189,3.25669.00256,4.885-.00576.23162-.00118.32737.08.29241.30047a3.97655,3.97655,0,0,0,.62992,2.41429c1.1723,2.387,2.32146,4.78522,3.48045,7.17869C70.26256,76.8679,70.31859,76.96191,70.39228,77.09771Z"/><path class="cls-3" d="M45.38927,53.86272a7.19805,7.19805,0,0,0,.046.85924,2.15615,2.15615,0,0,0,1.8606,1.82188,2.53013,2.53013,0,0,0,2.74448-1.33019A3.47766,3.47766,0,0,0,48.7946,50.759a5.25781,5.25781,0,0,0-3.69023-.69757A10.00144,10.00144,0,0,0,38.177,54.5021a22.61414,22.61414,0,0,0-3.58938,8.31956,45.58422,45.58422,0,0,0-1.15081,10.26522,3.61162,3.61162,0,0,1-.05194.729,6.37225,6.37225,0,0,1-.39115-1.61881,37.22825,37.22825,0,0,1-.58256-7.76583A21.54791,21.54791,0,0,1,35.50147,53.415a13.1953,13.1953,0,0,1,8.55089-6.17545,9.378,9.378,0,0,1,6.71794.81163,6.00864,6.00864,0,0,1,1.87278,8.59714,5.325,5.325,0,0,1-6.10064,1.78778,3.11816,3.11816,0,0,1-1.99335-3.55387A1.42134,1.42134,0,0,1,45.38927,53.86272Z"/><path class="cls-3" d="M16.935,55.97634A2.47157,2.47157,0,0,1,15.673,58.064a4.29918,4.29918,0,0,1-5.85076-1.27487,5.85146,5.85146,0,0,1,2.92-8.93563,9.477,9.477,0,0,1,7.59267.42064,15.835,15.835,0,0,1,6.83018,6.29431,22.82684,22.82684,0,0,1,3.45569,10.67918,23.90978,23.90978,0,0,1-1.00259,8.21115c-.03459.12366-.02314.28751-.22325.3949.032-.50486.069-.97569.09058-1.44722a24.65311,24.65311,0,0,0-5.43349-17.264,12.40435,12.40435,0,0,0-6.04047-4.31012,5.77406,5.77406,0,0,0-3.67814-.04,3.185,3.185,0,0,0-1.72464,4.83848,2.76663,2.76663,0,0,0,4.14779.48463,1.73727,1.73727,0,0,1,.186-.13051Z"/><path class="cls-2" d="M73.81731,56.9693v-.50824c0-2.71223-.0081-5.42452.00861-8.13665.00255-.41336-.07578-.60277-.53727-.55708a12.26021,12.26021,0,0,1-1.32659.00743c-.11666-.00118-.27327.03691-.27485-.1615-.00291-.36264-.00593-.72543.00135-1.08795.00384-.191.1609-.16154.28132-.16165,1.78586-.00172,3.57425-.05419,5.35608.03029.55426.02628.16669.66134.25991,1.00553.05476.20218.03737.40134-.29106.38366-.47274-.02544-.9484.00685-1.42181-.01144-.26963-.01042-.37711.08278-.34706.34912a2.96823,2.96823,0,0,1,.00185.33092c0,4.14719-.00586,8.29441.00957,12.44155.00146.39018-.09964.466-.48581.50489a2.043,2.043,0,0,1-1.8584-.80731c-2.81535-3.09307-5.67489-6.14609-8.51943-9.21269-.10565-.11391-.21463-.22474-.32473-.3398-.15469.11914-.08542.27244-.08565.40082-.00475,2.69646.00326,5.393-.012,8.08935-.002.34726.07217.47233.43669.442.42376-.0353.854.0116,1.279-.01488.306-.01906.36372.09944.36607.37827.00881,1.04539.01882,1.04531-1.01464,1.04531-1.454,0-2.908-.00814-4.36186.00668-.2999.003-.3993-.064-.39694-.38308.00767-1.04042-.007-1.04053,1.01537-1.04053.99211,0,.99211,0,.99211-1.00308,0-3.548-.01087-7.096.013-10.64386.00319-.474-.13309-.60951-.5733-.54331a2.88883,2.88883,0,0,1-.56816.00284c-.2806-.014-.74562.112-.80478-.05682a3.75635,3.75635,0,0,1-.05951-1.21285c.00048-.15852.13973-.14193.24817-.142,1.42237-.00088,2.84475.00306,4.26708-.00435.23652-.00123.32831.1026.28511.31219a2.27807,2.27807,0,0,0,.87922,2.09181c2.40408,2.5921,4.77189,5.21769,7.15484,7.82932C73.51095,56.70414,73.63183,56.79913,73.81731,56.9693Z"/><path class="cls-2" d="M114.32532,51.913a18.04214,18.04214,0,0,1,1.70523-.99149,4.27491,4.27491,0,0,1,2.70157-.48215,3.00587,3.00587,0,0,1,2.34033,3.18652c.01049,2.05046.01257,4.10111-.0063,6.15145-.00342.37262.09441.49838.46818.46277.34463-.03284.69653.01376,1.04218-.01325.30053-.02348.36884.08465.36748.3708-.00367.78146.01054.78153-.75415.78153-1.70731,0-3.41475-.011-5.12183.009-.35239.00413-.493-.07893-.43463-.43692a1.64106,1.64106,0,0,0,.001-.425c-.02235-.21952.04749-.31207.2845-.29779.315.019.63313-.01153.94788.00958.26039.01746.31429-.08933.31314-.32627-.00965-2.00312.01305-4.00663-.01826-6.00933a1.57742,1.57742,0,0,0-2.20431-1.61733c-.061.0158-.12236.03052-.18225.0498-1.3706.44131-1.44978.54852-1.44978,1.95988,0,1.81392.01679,3.6281-.01216,5.44156-.007.43639.12813.56428.52811.49855a1.4784,1.4784,0,0,1,.23682-.00182c.82637,0,.81807-.00031.78549.84764-.00834.21685-.05623.30362-.291.30268q-2.8929-.01167-5.78585-.00024c-.21128.00077-.25658-.07129-.26693-.27138-.04544-.87909-.05312-.87869.79374-.8787,1.11693,0,1.11693,0,1.11693-1.12138,0-4.19566-.00619-8.39135.01-12.587.00154-.40005-.10429-.535-.49513-.47984a4.44557,4.44557,0,0,1-.61583.005c-.82691,0-.81506.00006-.81072-.81524.0014-.26315.06879-.34715.34061-.34453,1.3594.01314,2.71914.0165,4.07842-.00182.31884-.0043.3958.09236.39389.3978-.01248,2.0031-.00641,4.00632-.0064,6.00951Z"/><path class="cls-2" d="M131.37442,54.12236q-1.33392,3.555-2.66619,7.10738c-.07.18688-.08916.38413-.385.38428-.275.00014-.33282-.16147-.42123-.35259-1.38038-2.98421-2.77329-5.96269-4.13937-8.95337-.16889-.36977-.354-.56457-.76432-.48093a.24183.24183,0,0,1-.04733.00039c-.90786-.00008-.89955.00075-.8076-.91862.01954-.19538.09339-.23089.26213-.23057q2.703.00518,5.406-.00183c.21773-.00085.252.08964.26338.2803.05181.871.058.87066-.81008.87072-.649.00005-.64935.00021-.381.60036q.95367,2.13246,1.90871,4.26432c.06331.14112.13737.27744.23084.465.63318-1.72122,1.24105-3.39068,1.86552-5.05393.10047-.26757.00218-.29194-.21649-.27766a3.17453,3.17453,0,0,1-.47386-.00059c-.23045-.01959-.55427.12047-.6711-.06964-.15975-.26-.04457-.61217-.0505-.92456-.00311-.16375.1293-.1497.23844-.14975,1.65973-.00076,3.31947.00116,4.97918-.00318.17079-.00044.23964.03535.2575.22951.08457.92012.09285.91938-.84593.92014-.15258.00013-.30515,0-.53113,0l2.41375,5.34875c.31534-.85289.59-1.59532.86436-2.33784.32162-.87035.62538-1.74787.97285-2.60781.14836-.36721.04-.43832-.29978-.406-.1723.01641-.34746.00287-.52134.00286-.65334,0-.62974-.0012-.66139-.63535-.01958-.3924.05661-.53923.49974-.52474,1.16844.0382,2.33912.02206,3.50862.00655.29512-.00391.4066.05545.4.38022-.01577.77293-.00078.82124-.75866.758-.59452-.04961-.82681.166-1.02637.7119-1.05818,2.8949-2.16694,5.77139-3.25832,8.6542-.08068.21313-.105.43629-.44734.44-.31575.00339-.40026-.16629-.503-.388q-1.5674-3.38311-3.14454-6.7617C131.55669,54.34679,131.54227,54.18667,131.37442,54.12236Z"/><path class="cls-2" d="M195.46889,51.96277a16.05943,16.05943,0,0,1,2.08217-1.22208,4.24183,4.24183,0,0,1,2.174-.33763,2.73137,2.73137,0,0,1,2.47064,2.82029c.04717,2.14417.03854,4.29014.01327,6.43486-.00572.4845.12038.65326.59551.58009a2.38423,2.38423,0,0,1,.61524-.00046c.22386.02451.56228-.13907.64737.09114a2.48312,2.48312,0,0,1,.02172.93687c-.00817.16731-.16521.11072-.26223.11089-1.91284.00322-3.82572-.00147-5.73852.00738-.23323.00109-.28563-.07363-.29355-.296-.03048-.85529-.03958-.855.77322-.855.78017,0,.78018,0,.78018-.797,0-1.79817.00283-3.59634-.001-5.3945a1.61519,1.61519,0,0,0-2.25481-1.752,5.88294,5.88294,0,0,0-1.42117.63153.37432.37432,0,0,0-.20479.38128c.00435,2.20826.00712,4.41656-.00284,6.62479-.00117.25957.08819.33053.32763.30923.18821-.01674.3791-.00334.56881-.00332.61382.00008.5905.00124.62183.63112.01953.39244-.05575.53578-.501.52794-1.78582-.03145-3.57263-.02309-5.35881-.00419-.343.00362-.451-.098-.4024-.42075a1.2692,1.2692,0,0,0-.00013-.37762c-.046-.29762.07343-.38172.3642-.36285.39356.02555.7904-.00416,1.18509.01029.23359.00855.33578-.04677.33491-.30943q-.01295-3.90387-.00143-7.8078c.00053-.22747-.07588-.30376-.30119-.29616-.41055.01384-.82256-.01-1.23271.00891-.25535.01178-.35254-.04689-.35376-.32945-.00357-.82286-.01825-.8228.80088-.8228,1.16985,0,2.34017.019,3.50926-.01065.39072-.00991.48737.11937.44952.47232C195.44776,51.3859,195.46889,51.63483,195.46889,51.96277Z"/><path class="cls-2" d="M111.05539,80.91638a7.3344,7.3344,0,0,1-3.018,1.24139,4.5416,4.5416,0,0,1-1.74037-.08511,2.4384,2.4384,0,0,1-1.89083-2.171,11.92582,11.92582,0,0,1-.06241-1.36817c-.00641-1.9235-.011-3.8471.00531-5.77049.0028-.33032-.08175-.44059-.4156-.41442-.37691.02954-.75867-.00738-1.13693.01181-.2466.0125-.31723-.06341-.32187-.31391-.01555-.83848-.02724-.83827.7893-.83827q1.65919,0,3.31839,0c.65782,0,.65783,0,.65783.67986q0,3.40559.00045,6.81116c.00006.18913-.00654.37951.01179.56719a1.46353,1.46353,0,0,0,1.88849,1.38312,6.46576,6.46576,0,0,0,1.76651-.77794c.17856-.10018.16855-.245.16856-.40167.00008-2.27039-.0042-4.5408.00569-6.81114.00113-.26038-.09078-.31788-.32762-.30791-.39434.0166-.7908-.01185-1.18462.01012-.26978.01506-.34065-.07359-.34153-.33991-.00269-.81293-.01521-.81289.8115-.81289,1.15354,0,2.30762.02011,3.46033-.01074.41161-.011.48238.12272.48019.50142-.01654,2.85365.00229,5.70754-.021,8.5611-.00357.43631.12495.54414.52814.50422.34425-.03408.69514.00506,1.042-.01109.24475-.01141.321.071.32839.3204.02469.83518.03575.83486-.80213.83486-1.13774,0-2.27608-.02159-3.41288.01085-.44139.0126-.6548-.07864-.57035-.55483A2.412,2.412,0,0,0,111.05539,80.91638Z"/><path class="cls-2" d="M89.03936,80.91112a9.22638,9.22638,0,0,1-2.12959,1.04326,4.88373,4.88373,0,0,1-2.66224.11546,2.57082,2.57082,0,0,1-1.94113-2.738q-.02463-3.26345.00417-6.52714c.00334-.376-.09945-.50076-.46613-.45436a5.31919,5.31919,0,0,1-.663.005c-.80134,0-.90794-.14128-.77048-.95349.03-.17716.11616-.19409.2532-.194,1.42215.001,2.84432.00571,4.26641-.00278.36827-.00219.24513.25806.24562.42839q.01,3.47645.00376,6.95294a3.93325,3.93325,0,0,0,.09319,1.03326,1.40789,1.40789,0,0,0,1.75426,1.04338,6.08034,6.08034,0,0,0,1.85689-.80132c.16191-.09217.155-.21677.155-.35756.0001-2.28612-.00271-4.57225.00447-6.85834.0007-.22172-.05489-.30536-.28843-.29534-.41008.01759-.82227-.01071-1.232.01039-.26836.01382-.34638-.07125-.349-.3411-.008-.81172-.02058-.8116.77621-.8116,1.18512,0,2.37045.01225,3.55523-.00788.33064-.00562.41941.08335.41783.41565-.01361,2.86941.002,5.739-.01823,8.60832-.00306.43478.11051.59693.5468.5384a5.38268,5.38268,0,0,1,.71033-.00554c.62533.00006.60019.00143.6337.61625.02258.41429-.07582.56048-.52813.5473-1.23148-.0359-2.46515-.03144-3.697-.00189-.42677.01024-.6097-.09626-.53481-.53492A3.37945,3.37945,0,0,0,89.03936,80.91112Z"/><path class="cls-2" d="M83.79349,50.38151c3.2246-.00481,5.42818,1.68552,6.0247,4.48354A5.5514,5.5514,0,0,1,84.634,61.655a7.55792,7.55792,0,0,1-3.21513-.4098A5.55961,5.55961,0,0,1,77.961,55.55829a5.48979,5.48979,0,0,1,4.64421-5.06865A7.63145,7.63145,0,0,1,83.79349,50.38151Zm-2.63428,5.64477a7.14575,7.14575,0,0,0,.56571,2.95461,2.4614,2.4614,0,0,0,1.58686,1.44521A2.38613,2.38613,0,0,0,86.269,58.7943a7.80039,7.80039,0,0,0-.01539-5.58294,2.31874,2.31874,0,0,0-2.28081-1.67056,2.43894,2.43894,0,0,0-2.33473,1.68A7.473,7.473,0,0,0,81.15921,56.02628Z"/><path class="cls-3" d="M48.33261,44.43331a13.22055,13.22055,0,0,1-3.13405,1.0408A65.74139,65.74139,0,0,1,36.456,46.82105a86.38954,86.38954,0,0,1-10.36516.41809A35.42369,35.42369,0,0,1,17.279,46.13893a6.42081,6.42081,0,0,1-1.49456-.58542.95925.95925,0,0,1-.5487-1.14139c.1009-.37175.47211-.60594,1.04207-.53529,1.07963.13384,2.15187.32621,3.22817.48769,1.59471.23925,3.20258.351,4.81044.43359,4.62721.23769,9.25806.17638,13.88718.0832,3.23806-.06517,6.4736-.22711,9.70554-.44678C48.04966,44.425,48.19142,44.43331,48.33261,44.43331Z"/><path class="cls-2" d="M117.14956,73.59472c-.29921-1.0875-.31885-.8315.43018-1.37585a6.02067,6.02067,0,0,1,4.105-1.2932,3.31947,3.31947,0,0,1,3.11119,3.08182c.08315,1.58811.03724,3.18292.04971,4.77477a5.81566,5.81566,0,0,0,.02212.61362,1.22949,1.22949,0,0,0,1.61468,1.11807c.12072-.03042.24-.06644.35909-.09962.01746.03419.04145.05976.04242.08617.03844,1.05524.02535,1.07009-.97871,1.43175a4.22472,4.22472,0,0,1-1.81377.2552,2.44236,2.44236,0,0,1-1.90749-1.264,6.61243,6.61243,0,0,1-2.33218,1.19209,2.54142,2.54142,0,0,1-3.21718-2.37361,2.50823,2.50823,0,0,1,1.88642-2.931,29.93989,29.93989,0,0,1,3.05532-.8254c.31622-.0804.40751-.20648.38445-.50749-.024-.31353-.002-.6303-.00811-.9455a1.83471,1.83471,0,0,0-2.44-1.94546A7.871,7.871,0,0,0,117.14956,73.59472Zm4.80581,4.87274c0-.36165-.00859-.72357.00335-1.08482.0067-.20329-.07862-.2436-.25323-.19759a5.9779,5.9779,0,0,0-1.75774.65815,1.426,1.426,0,0,0-.568,1.8137,1.12713,1.12713,0,0,0,1.28371.72254c.8947-.17726,1.29217-.60578,1.29217-1.3931Q121.95559,78.7269,121.95537,78.46746Z"/><path class="cls-2" d="M179.33643,59.1899a2.83339,2.83339,0,0,0-.025.33664c.05581.926-.48954,1.33589-1.28491,1.63064a7.70723,7.70723,0,0,1-4.78718.27752,5.056,5.056,0,0,1-3.75612-4.34769,6.78565,6.78565,0,0,1,.1224-3.09081,4.7827,4.7827,0,0,1,9.2419-.12465c.1126.35877.15658.73854.25932,1.101.0874.30829-.01981.3694-.31468.36773-1.97435-.0112-3.94895.0066-5.92311-.01619-.39921-.00461-.48241.13012-.43929.48148a9.46061,9.46061,0,0,0,.31543,1.7627,3.4393,3.4393,0,0,0,4.58755,2.51609A6.26651,6.26651,0,0,0,179.33643,59.1899Zm-5.0589-5.00767c.53543,0,1.07086.00091,1.60628-.00063.13519-.00039.29308.03881.25326-.20343a3.35762,3.35762,0,0,0-.90627-2.02256,1.44321,1.44321,0,0,0-2.223.22781,3.6712,3.6712,0,0,0-.5784,1.76869c-.03264.25768.1305.23058.28907.2304Q173.498,54.18158,174.27753,54.18223Z"/><path class="cls-2" d="M151.05647,59.19079c-.063.43985-.12707.82334-.16853,1.20925a.33862.33862,0,0,1-.21.28273,7.18925,7.18925,0,0,1-6.63906.40329,5.11588,5.11588,0,0,1-2.91476-4.44754,6.607,6.607,0,0,1,.30314-3.03117,4.779,4.779,0,0,1,9.0622.06873,10.26647,10.26647,0,0,1,.32266,1.27889c.07428.34739-.046.38621-.3438.38461-1.87993-.01013-3.76-.00513-5.63993-.00513-.73212,0-.73765.00054-.66549.74668a7.16142,7.16142,0,0,0,.29836,1.5265,3.43864,3.43864,0,0,0,4.52863,2.49331A6.68131,6.68131,0,0,0,151.05647,59.19079Zm-5.08994-5.0085c.53743,0,1.07491-.00373,1.61227.00212.17621.00192.31354.00026.26582-.24389a3.64755,3.64755,0,0,0-.80458-1.88533A1.455,1.455,0,0,0,144.71,52.19a3.37611,3.37611,0,0,0-.56611,1.72859c-.01946.208.04986.27279.2579.26779C144.92306,54.17386,145.4449,54.18226,145.96653,54.18229Z"/><path class="cls-2" d="M132.43368,73.07269c0,2.41348.00688,4.827-.00766,7.24039-.0021.34764.08015.48268.44564.45131.37662-.03233.7585.00153,1.13756-.01033.20117-.0063.26279.05807.27557.26537.05485.8895.06338.889-.83477.889-1.77068,0-3.54146-.01005-5.31195.00859-.348.00366-.50231-.07272-.44371-.43638a1.38528,1.38528,0,0,0,.00065-.37778c-.031-.26274.06045-.36624.339-.3513.40987.022.822-.00278,1.23275.00911.20156.00583.29785-.056.27542-.26619a2.23822,2.23822,0,0,1-.00121-.23648c0-4.401-.00553-8.80212.0096-13.20312.00135-.38871-.08265-.5388-.48524-.486-.26418.03468-.54041-.02186-.80458.01291-.4448.05855-.61122-.0734-.57478-.54949.047-.61385.011-.6166.64073-.61661,1.23315,0,2.46652.01251,3.69932-.00815.34008-.00569.41663.1008.41487.42473C132.42766,68.24571,132.43368,70.65921,132.43368,73.07269Z"/><path class="cls-2" d="M153.78828,61.07862c-.14707.18218-.03947.49757-.42071.49463-.60986-.00471-.61021.02488-.61029-.59452-.0001-.78849-.0055-1.577.005-2.36539.0019-.14213-.11271-.39524.19182-.37541.22146.01441.50415-.142.62.23907a3.00469,3.00469,0,0,0,.6814,1.17748,2.332,2.332,0,0,0,2.43466.77567,1.13488,1.13488,0,0,0,.53177-1.96108,6.367,6.367,0,0,0-1.39331-.97089,11.792,11.792,0,0,1-2.03005-1.38137,3.08252,3.08252,0,0,1-.963-3.50761,3.3281,3.3281,0,0,1,3.03272-2.20873,3.36709,3.36709,0,0,1,2.18635.44793c.17285.10557.30311.16332.36091-.11044.09661-.45748.47022-.27332.73216-.27357.32709-.00032.16678.28721.17109.43659.01953.67754.01515,1.35607.00317,2.034-.00251.14139.114.4056-.18719.37554-.23388-.02335-.55019.18431-.69086-.19987a4.30374,4.30374,0,0,0-.25541-.55692,1.83849,1.83849,0,0,0-2.37063-.89585,1.01428,1.01428,0,0,0-.52161,1.57841,2.8995,2.8995,0,0,0,1.04973.93543c.739.4527,1.52948.81894,2.23711,1.32468a3.32473,3.32473,0,0,1-1.777,6.1652A5.84319,5.84319,0,0,1,153.78828,61.07862Z"/><path class="cls-2" d="M188.52124,54.41648a5.70753,5.70753,0,0,0-.70639-.99558,1.37761,1.37761,0,0,0-2.05632-.03745,1.54615,1.54615,0,0,0-.56889,1.30571c.044,1.71713.023,3.43615.00929,5.1543-.00241.30188.06654.42091.38807.3964.377-.02873.75858.00758,1.13677-.01175.24689-.01262.318.06269.32251.314.01513.83729.02691.83707-.7878.83707-1.80109,0-3.60229-.01041-5.40317.00891-.35457.0038-.49579-.08318-.44041-.44157a1.69675,1.69675,0,0,0,.001-.42482c-.02348-.233.078-.29962.30032-.29248.42614.01367.85365-.01019,1.27935.00912.25616.01162.31717-.08454.31654-.3246q-.01046-3.87786.00148-7.75575c.00107-.28088-.099-.34995-.35733-.33508a9.0845,9.0845,0,0,1-.99481-.00038c-.17716-.00926-.46487.11076-.51084-.0932a3.25045,3.25045,0,0,1,.0036-.98065c.009-.101.16032-.06682.24979-.06694,1.40611-.00188,2.81226.00339,4.21831-.00592.23594-.00157.29369.0851.28726.30289-.01345.456-.00407.91272-.00407,1.40189.19736-.04321.23833-.20793.32237-.31986a5.10544,5.10544,0,0,1,1.3888-1.40373,1.95326,1.95326,0,0,1,2.6046.70035.47328.47328,0,0,1,.05075.221A7.24875,7.24875,0,0,1,188.52124,54.41648Z"/><path class="cls-2" d="M98.9078,54.42587c-.25811-.35509-.45506-.68189-.706-.96024a1.36451,1.36451,0,0,0-2.08388-.0871,1.5497,1.5497,0,0,0-.58345,1.30031c.0458,1.68566.0348,3.3737.00385,5.06-.00809.44012.13141.547.52942.49978.24929-.02958.51056.02814.75662-.01255.50332-.08324.56954.13975.58329.58769.01507.49106-.13577.5841-.59812.57711-1.86406-.02822-3.72888-.02118-5.59319-.00323-.34848.00335-.5017-.0735-.44373-.438a1.69134,1.69134,0,0,0,.00115-.42486c-.0223-.22875.07031-.3036.2972-.29582.42611.0146.85342-.0059,1.27957.00821.21908.00725.3028-.05184.30216-.28648q-.01076-3.92556.00011-7.85116c.00071-.24855-.11021-.28066-.31508-.27524-.41053.01086-.82193-.00737-1.23223.00723-.23434.00833-.32847-.04884-.33667-.30948-.0265-.84214-.03905-.84175.79123-.84175,1.20085,0,2.40188.01118,3.60244-.00759.31319-.00489.41329.08117.39477.393a8.07018,8.07018,0,0,0,.03981,1.31237,15.29578,15.29578,0,0,1,1.07261-1.24979,1.90022,1.90022,0,0,1,3.07733.08122c.10749.11654.21881.22.18257.40739A8.32808,8.32808,0,0,1,98.9078,54.42587Z"/><path class="cls-2" d="M94.0235,72.61849l4.499-4.32348c0,.90057.02205,1.69565-.00974,2.48857-.01487.37088.11.44457.45195.43264.74173-.02587,1.48523.00267,2.22752-.01359.26823-.00587.34417.076.34889.34473.0188,1.0713.0288,1.07111-1.04382,1.07113-.553,0-1.10639.01115-1.659-.0049-.24484-.00711-.32267.06336-.32124.31536.01146,2.01793.00345,4.036.01484,6.0539a2.96539,2.96539,0,0,0,.2842,1.28212,1.219,1.219,0,0,0,1.73613.62124,8.91781,8.91781,0,0,0,.844-.51831c.181-.11144.38433-.21508.56045-.03156.16737.17441.08318.38482-.0212.56812a2.28878,2.28878,0,0,1-1.24008.97424,4.94056,4.94056,0,0,1-3.02515.18034,2.62784,2.62784,0,0,1-1.98763-2.72515c-.05685-2.06378-.05113-4.12983-.03548-6.19462.00342-.45-.13577-.57042-.553-.52708C94.78586,72.64422,94.47148,72.61849,94.0235,72.61849Z"/><path class="cls-3" d="M26.56886,74.87049c-.08-.79832-.14031-1.58854-.24113-2.37359a22.09836,22.09836,0,0,0-2.454-8.2779,7.7922,7.7922,0,0,0-1.6094-2.03114,3.88836,3.88836,0,0,0-1.72759-.94028,2.63239,2.63239,0,0,0-2.74562.83449c-.06232.0712-.12035.14613-.18187.218-.0485.05671-.09932.11145-.15266.171a2.69981,2.69981,0,0,1,1.16234-3.92535,4.39185,4.39185,0,0,1,4.71665.65453,9.1973,9.1973,0,0,1,2.9084,4.39945,19.35263,19.35263,0,0,1,.48965,10.98582C26.71135,74.68018,26.74808,74.81459,26.56886,74.87049Z"/><path class="cls-2" d="M160.91749,52.09434l4.48466-4.31743c0,.81748,0,1.545,0,2.27248,0,.63091,0,.63093.60938.631.69516,0,1.39047.009,2.08536-.00482.24252-.00481.31844.06189.32573.31491.03185,1.10417.0414,1.10388-1.05179,1.1039-.553,0-1.10632.0124-1.65871-.0054-.254-.00819-.31644.077-.31513.32187.01068,2.0019.00288,4.00391.01351,6.00581a3.083,3.083,0,0,0,.26933,1.28546,1.23292,1.23292,0,0,0,1.80056.64508,8.65767,8.65767,0,0,0,.79977-.50136c.18423-.11753.39857-.20011.56487-.03073.16121.1642.08546.381-.01972.56957a1.92432,1.92432,0,0,1-.81848.76552,4.60806,4.60806,0,0,1-3.76166.27688,2.66611,2.66611,0,0,1-1.68356-2.75881c-.05262-2.03218-.03555-4.06659-.0178-6.0998.00352-.40348-.112-.52055-.49917-.481C161.71658,52.12093,161.38235,52.09434,160.91749,52.09434Z"/><path class="cls-2" d="M100.61214,52.09433l4.489-4.318c0,.90767.017,1.70324-.008,2.49749-.01059.33636.09417.42454.42214.41416.75746-.024,1.51638.00154,2.27433-.01287.24367-.00464.31513.06127.3208.31231.02508,1.10713.03446,1.10692-1.08777,1.10693-.53707,0-1.07425.00618-1.61116-.00307-.20589-.00355-.31816.03141-.31439.27863.03246,2.127-.05021,4.25483.04922,6.3812a2.62421,2.62421,0,0,0,.09766.55587,1.34221,1.34221,0,0,0,2.26866.85228c.19814-.12847.389-.27043.5966-.38127a.3514.3514,0,0,1,.4395.04048.37225.37225,0,0,1,.04121.4012,1.52928,1.52928,0,0,1-.69817.807,4.50572,4.50572,0,0,1-4.13265.32233,2.49887,2.49887,0,0,1-1.44423-2.12856,7.64994,7.64994,0,0,1-.0951-1.31821c.004-1.76523-.01694-3.53082.01438-5.29551.00808-.455-.14069-.55965-.54923-.51857C101.3757,52.11927,101.06081,52.09433,100.61214,52.09433Z"/><path class="cls-3" d="M45.4793,62.4627a2.88,2.88,0,0,0-3.71952-1.12314,5.469,5.469,0,0,0-2.43614,2.174,16.94761,16.94761,0,0,0-2.2685,5.921,33.35425,33.35425,0,0,0-.68381,5.05217.588.588,0,0,1-.071.26344A7.42021,7.42021,0,0,1,35.87,72.76013a19.91326,19.91326,0,0,1,1.36155-10.37351A7.2888,7.2888,0,0,1,40.24791,58.725a4.13648,4.13648,0,0,1,4.16254-.15865,2.66971,2.66971,0,0,1,1.26213,3.576C45.62618,62.23893,45.56188,62.327,45.4793,62.4627Z"/><path class="cls-3" d="M23.41522,76.29913a18.94571,18.94571,0,0,0-1.07483-4.1398,12.25993,12.25993,0,0,0-2.61112-4.29322,4.483,4.483,0,0,0-2.47059-1.39749,2.41434,2.41434,0,0,0-2.8013,1.41032,1.24168,1.24168,0,0,1-.11484.14571,2.11816,2.11816,0,0,1-.39054-2.00017,2.89829,2.89829,0,0,1,2.92472-2.17119,5.12738,5.12738,0,0,1,4.40785,2.34878,12.9938,12.9938,0,0,1,2.38675,6.0954,10.11022,10.11022,0,0,1-.08988,3.71327C23.55835,76.11343,23.57637,76.23745,23.41522,76.29913Z"/><path class="cls-3" d="M39.26868,76.3362a4.40471,4.40471,0,0,1-.29279-1.63314,14.03846,14.03846,0,0,1,2.19585-8.083,5.5929,5.5929,0,0,1,3.50519-2.631,3.95763,3.95763,0,0,1,2.85111.33671,2.59935,2.59935,0,0,1,1.28519,2.93479,1.46213,1.46213,0,0,1-.43781.76573,2.0258,2.0258,0,0,0-1.38816-1.436,3.44987,3.44987,0,0,0-2.45207.14954A6.17963,6.17963,0,0,0,41.97465,69.063a17.19467,17.19467,0,0,0-2.55156,6.75485A1.03342,1.03342,0,0,1,39.26868,76.3362Z"/><path class="cls-3" d="M22.83661,82.0974a11.14176,11.14176,0,0,1,2.25649-1.20784,19.67937,19.67937,0,0,1,8.94926-1.37779,16.88817,16.88817,0,0,1,3.50686.50461,4.25441,4.25441,0,0,1,1.17564.48687c.51927.33447.70539.74082.5437,1.17914-.14321.3882-.46816.515-1.13486.39974a35.73151,35.73151,0,0,0-4.22953-.49261,58.31284,58.31284,0,0,0-6.58241.09105c-1.40259.08521-2.80115.21548-4.19253.41585C23.076,82.10409,23.02076,82.0974,22.83661,82.0974Z"/><path class="cls-3" d="M22.9541,78.60229a11.759,11.759,0,0,1,3.219-1.55682,21.155,21.155,0,0,1,11.26313-.5178,6.4911,6.4911,0,0,1,1.065.38674,1.58445,1.58445,0,0,1,.5707.41528.81926.81926,0,0,1,.145,1.00345.72163.72163,0,0,1-.82582.31362c-1.07789-.15469-2.14965-.34741-3.23446-.45958a39.56378,39.56378,0,0,0-5.72981-.11177C27.26578,78.16558,25.1139,78.36823,22.9541,78.60229Z"/><path class="cls-3" d="M22.92254,48.378a7.13239,7.13239,0,0,1,5.52882,1.7385,10.67093,10.67093,0,0,1,3.38478,6.88242,4.67874,4.67874,0,0,1,.03014,1.4109c-.06658.36274-.21628.63621-.61419.66515-.43358.03152-.61621-.26986-.71193-.6247a20.10922,20.10922,0,0,0-1.35181-3.66968,13.11023,13.11023,0,0,0-5.31795-5.92049C23.56141,48.687,23.23882,48.53813,22.92254,48.378Z"/><path class="cls-3" d="M32.87614,55.42333a6.28772,6.28772,0,0,1,7.35674-7.86909C36.40769,48.932,34.26025,51.76377,32.87614,55.42333Z"/><path class="cls-2" d="M136.49413,68.84721A1.96921,1.96921,0,1,1,138.433,66.8679,1.973,1.973,0,0,1,136.49413,68.84721Zm-.02947-.36778a1.60466,1.60466,0,0,0,1.60682-1.583,1.6034,1.6034,0,1,0-1.60682,1.583Z"/><path class="cls-3" d="M16.94256,55.98487a.13856.13856,0,0,1,.01377-.03508c.00339-.00464.01609-.00252.02457-.00347l-.04588.03Z"/><path class="cls-2" d="M137.38928,67.87964c-.30337.10581-.50312.04953-.58133-.27612-.02884-.12011-.10458-.22825-.1431-.347-.06924-.21348-.243-.1603-.39221-.16108-.22558-.00117-.1757.172-.18127.30517-.00394.09409-.003.18853-.0005.28271.00355.13412.00061.24731-.19059.24209-.16523-.00451-.26776-.03376-.26517-.23138.0072-.54971.00584-1.09961.00049-1.64937-.00157-.16069.061-.2269.22118-.2214a8.10568,8.10568,0,0,1,1.03605.03408.56992.56992,0,0,1,.39371.95078c-.26384.2469-.16083.41424-.06725.63873C137.27858,67.58909,137.33217,67.73366,137.38928,67.87964Zm-.894-1.69422c-.235-.00093-.42542-.0522-.415.26546.00869.26429.112.32649.33925.29848.21075-.026.493.02013.5079-.28452C136.94385,66.129,136.65,66.20514,136.49527,66.18542Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/ocado/ocado_featured_logo.svg b/content/en/case-studies/ocado/ocado_featured_logo.svg
index 8f30890dfc..d9e2886e36 100644
--- a/content/en/case-studies/ocado/ocado_featured_logo.svg
+++ b/content/en/case-studies/ocado/ocado_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#b9c200;}.cls-3{fill:#fff;}.cls-4{fill:#4d5152;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.86923" y="-3.17679" width="223.25536" height="134.51136"/><path class="cls-2" d="M132.01169,16.02155H83.40541a6.79387,6.79387,0,0,0-6.78691,6.78691V71.41474a6.79387,6.79387,0,0,0,6.78691,6.78691H138.6988V22.80846a6.64741,6.64741,0,0,0-6.68711-6.78691"/><path class="cls-3" d="M107.95807,68.2209A21.51088,21.51088,0,0,0,129.5165,46.76227c0-2.79461-.89826-6.48749-.89826-5.58922a13.67512,13.67512,0,0,1-15.27056,13.37421c-5.98845-.79846-12.67556-6.28787-11.47787-14.97113a12.75333,12.75333,0,0,1,14.07287-11.27825c8.68325,1.19769,10.47979,7.785,7.8848,10.879a4.41757,4.41757,0,0,1-7.98461-2.595,4.295,4.295,0,0,1,1.69673-3.49326c-4.39154-1.2975-8.98268,2.19576-9.58153,6.78691a8.369,8.369,0,0,0,7.18615,9.48172c7.68518,1.09788,12.07672-5.09019,12.07672-10.5796,0-6.48749-6.88674-13.77344-19.16306-13.77344a21.60862,21.60862,0,0,0-.09981,43.21667"/><path class="cls-4" d="M152.37243,91.77548a10.18085,10.18085,0,1,0,10.28018,10.18037,10.18026,10.18026,0,0,0-10.28018-10.18037m0,3.49327a6.68786,6.68786,0,1,1-6.5873,6.6871,6.603,6.603,0,0,1,6.5873-6.6871M104.864,108.643a6.68786,6.68786,0,1,1,6.5873-6.6871,6.66635,6.66635,0,0,1-6.5873,6.6871m6.5873-16.36844v2.19577h-.09981a9.43621,9.43621,0,0,0-6.58729-2.69481,10.18085,10.18085,0,1,0,0,20.36074,8.87657,8.87657,0,0,0,6.48749-2.79461h.0998v2.096h3.69289v-19.163ZM128.61824,108.643a6.68786,6.68786,0,1,1,6.58729-6.6871,6.66636,6.66636,0,0,1-6.58729,6.6871m6.48749-25.55073V94.47029h-.09981a8.71081,8.71081,0,0,0-6.48749-2.79461,10.18085,10.18085,0,1,0,0,20.36073,8.87657,8.87657,0,0,0,6.48749-2.79461h.09981v2.096h3.69287V83.09222h-3.69287ZM91.1904,106.547a6.47955,6.47955,0,0,1-4.79076,2.096,6.68786,6.68786,0,0,1,0-13.37421,6.47955,6.47955,0,0,1,4.79076,2.096l1.79654-3.39346a10.53878,10.53878,0,0,0-6.5873-2.29558,10.18085,10.18085,0,1,0,0,20.36074,10.755,10.755,0,0,0,6.5873-2.29558L91.1904,106.547ZM63.14448,91.77548a10.18085,10.18085,0,1,0,10.28018,10.18037A10.18026,10.18026,0,0,0,63.14448,91.77548m0,3.49327a6.68786,6.68786,0,1,1-6.5873,6.6871,6.603,6.603,0,0,1,6.5873-6.6871"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#b9c200;}.cls-3{fill:#fff;}.cls-4{fill:#4d5152;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.86923" y="-3.17679" width="223.25536" height="134.51136"/><path class="cls-2" d="M132.01169,16.02155H83.40541a6.79387,6.79387,0,0,0-6.78691,6.78691V71.41474a6.79387,6.79387,0,0,0,6.78691,6.78691H138.6988V22.80846a6.64741,6.64741,0,0,0-6.68711-6.78691"/><path class="cls-3" d="M107.95807,68.2209A21.51088,21.51088,0,0,0,129.5165,46.76227c0-2.79461-.89826-6.48749-.89826-5.58922a13.67512,13.67512,0,0,1-15.27056,13.37421c-5.98845-.79846-12.67556-6.28787-11.47787-14.97113a12.75333,12.75333,0,0,1,14.07287-11.27825c8.68325,1.19769,10.47979,7.785,7.8848,10.879a4.41757,4.41757,0,0,1-7.98461-2.595,4.295,4.295,0,0,1,1.69673-3.49326c-4.39154-1.2975-8.98268,2.19576-9.58153,6.78691a8.369,8.369,0,0,0,7.18615,9.48172c7.68518,1.09788,12.07672-5.09019,12.07672-10.5796,0-6.48749-6.88674-13.77344-19.16306-13.77344a21.60862,21.60862,0,0,0-.09981,43.21667"/><path class="cls-4" d="M152.37243,91.77548a10.18085,10.18085,0,1,0,10.28018,10.18037,10.18026,10.18026,0,0,0-10.28018-10.18037m0,3.49327a6.68786,6.68786,0,1,1-6.5873,6.6871,6.603,6.603,0,0,1,6.5873-6.6871M104.864,108.643a6.68786,6.68786,0,1,1,6.5873-6.6871,6.66635,6.66635,0,0,1-6.5873,6.6871m6.5873-16.36844v2.19577h-.09981a9.43621,9.43621,0,0,0-6.58729-2.69481,10.18085,10.18085,0,1,0,0,20.36074,8.87657,8.87657,0,0,0,6.48749-2.79461h.0998v2.096h3.69289v-19.163ZM128.61824,108.643a6.68786,6.68786,0,1,1,6.58729-6.6871,6.66636,6.66636,0,0,1-6.58729,6.6871m6.48749-25.55073V94.47029h-.09981a8.71081,8.71081,0,0,0-6.48749-2.79461,10.18085,10.18085,0,1,0,0,20.36073,8.87657,8.87657,0,0,0,6.48749-2.79461h.09981v2.096h3.69287V83.09222h-3.69287ZM91.1904,106.547a6.47955,6.47955,0,0,1-4.79076,2.096,6.68786,6.68786,0,0,1,0-13.37421,6.47955,6.47955,0,0,1,4.79076,2.096l1.79654-3.39346a10.53878,10.53878,0,0,0-6.5873-2.29558,10.18085,10.18085,0,1,0,0,20.36074,10.755,10.755,0,0,0,6.5873-2.29558L91.1904,106.547ZM63.14448,91.77548a10.18085,10.18085,0,1,0,10.28018,10.18037A10.18026,10.18026,0,0,0,63.14448,91.77548m0,3.49327a6.68786,6.68786,0,1,1-6.5873,6.6871,6.603,6.603,0,0,1,6.5873-6.6871"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/openAI/openai_featured.svg b/content/en/case-studies/openAI/openai_featured.svg
index 97cf4dab57..cf9b79721e 100644
--- a/content/en/case-studies/openAI/openai_featured.svg
+++ b/content/en/case-studies/openAI/openai_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.16496" y="-4.09655" width="223.25536" height="134.51136"/><path d="M31.35558,46.00662a17.877,17.877,0,0,1,2.59366.88865,26.78738,26.78738,0,0,1,2.38982,1.63834,1.3043,1.3043,0,0,0,.8025.25519,8.67439,8.67439,0,0,1,9.76208,10.67991,1.0409,1.0409,0,0,0,.19922,1.02277,8.59831,8.59831,0,0,1-4.41,13.6442,1.10894,1.10894,0,0,0-.8313.73039,8.69985,8.69985,0,0,1-14.08167,3.03034,1.24423,1.24423,0,0,0-1.13036-.3618,8.65906,8.65906,0,0,1-9.583-10.78712,1.171,1.171,0,0,0-.20441-.87257,8.68023,8.68023,0,0,1,4.54239-13.78485,1.10279,1.10279,0,0,0,.63749-.53985,8.63756,8.63756,0,0,1,6.78184-5.43032,1.14366,1.14366,0,0,0,.25257-.11328ZM21.511,54.4775c-.3249.13991-.56274.22681-.78657.341a6.34462,6.34462,0,0,0-.50587,11.0386c2.24136,1.41389,4.58275,2.6708,6.89,3.97927a.77252.77252,0,0,0,.63363.02951c.87466-.46463,1.7251-.97453,2.64741-1.50534-.28092-.17071-.498-.30917-.72112-.4372-2.44442-1.4028-4.88534-2.81177-7.33818-4.19983a1.45814,1.45814,0,0,1-.829-1.43111c.03082-1.5839.00975-3.16881.00971-4.75331C21.511,56.5542,21.511,55.56932,21.511,54.4775ZM42.52482,71.75369c.12819.01809.17815.041.21407.02736a3.77769,3.77769,0,0,0,.38856-.17166,6.18883,6.18883,0,0,0,3.57632-5.336,6.02666,6.02666,0,0,0-2.97622-5.81866c-2.23-1.38489-4.53859-2.64437-6.82014-3.94594a.75341.75341,0,0,0-.57949-.10875c-.90732.48136-1.7907,1.00755-2.75836,1.563,2.73861,1.58427,5.34814,3.12116,7.98857,4.60336A1.70878,1.70878,0,0,1,42.5363,64.275c-.03566,1.91343-.01149,3.828-.01148,5.742ZM26.66618,64.38818c0-.37834-.00011-.62933,0-.88032.00136-2.79107.01285-5.5822-.003-8.37316a1.53112,1.53112,0,0,1,.86247-1.49259c1.53244-.85067,3.04311-1.7403,4.56246-2.61439.71164-.4094,1.42317-.819,2.28364-1.31419a3.84986,3.84986,0,0,1-.35485-.18479,6.26391,6.26391,0,0,0-6.27436-.77007A5.78218,5.78218,0,0,0,23.8406,53.7595c-.22091,2.84574-.10735,5.71753-.123,8.57812a.62649.62649,0,0,0,.22434.46962C24.80375,63.3323,25.68557,63.82473,26.66618,64.38818Zm-7.53163,3.4954A6.27748,6.27748,0,0,0,21.738,74.14993a6.1124,6.1124,0,0,0,6.77667.47187c2.322-1.22461,4.56987-2.5893,6.83973-3.91051a.78451.78451,0,0,0,.37213-.52123c.0365-.9803.0173-1.96266.0173-3.04763-.32437.173-.55077.28625-.77012.4118-2.42326,1.387-4.85358,2.76209-7.26248,4.17347a1.62584,1.62584,0,0,1-1.8475.00856c-1.72665-1.0306-3.48336-2.0112-5.22921-3.00978C20.16808,68.45969,19.6977,68.19976,19.13455,67.88358ZM44.845,58.46237a6.32328,6.32328,0,0,0-2.66686-6.33312,6.14733,6.14733,0,0,0-6.79158-.39548c-2.2774,1.21506-4.48958,2.55172-6.72578,3.84294-.15351.08865-.38019.24-.384.36782-.03127,1.04385-.01761,2.08905-.01761,3.23357.35383-.19266.5821-.31124.805-.43918,2.34222-1.34455,4.7021-2.66,7.01526-4.05259a1.94559,1.94559,0,0,1,2.28816.02153c1.8761,1.15349,3.80086,2.22841,5.70688,3.33349C44.29164,58.16732,44.51515,58.28262,44.845,58.46237ZM29.69354,76.566a4.3333,4.3333,0,0,0,.36274.31251,6.22651,6.22651,0,0,0,6.47153.55542,5.94526,5.94526,0,0,0,3.658-5.3337c.1171-2.68952.04621-5.38731.044-8.08149a.65535.65535,0,0,0-.18606-.49055c-.85741-.52815-1.73691-1.02068-2.74157-1.60088V62.833c0,2.43444-.09748,4.87417.03535,7.30139a2.86794,2.86794,0,0,1-1.803,3.11682C33.54854,74.23892,31.66606,75.43343,29.69354,76.566ZM28.09725,63.015a3.34441,3.34441,0,0,0,2.00294,3.41331,3.21128,3.21128,0,0,0,3.78883.02035,3.25273,3.25273,0,0,0,1.92944-3.33555A3.21023,3.21023,0,0,0,33.993,59.928a3.29247,3.29247,0,0,0-3.98607-.07639A3.24469,3.24469,0,0,0,28.09725,63.015Z"/><path d="M72.80781,46.00662c.78486.16,1.58007.2813,2.3529.48634a10.50217,10.50217,0,0,1,8.00771,9.58087,32.7324,32.7324,0,0,1-.15564,8.912,10.67144,10.67144,0,0,1-10.27014,8.98469,15.29573,15.29573,0,0,1-6.38223-.73556,10.03716,10.03716,0,0,1-6.76153-7.93475,28.77563,28.77563,0,0,1-.03242-10.3706,10.45557,10.45557,0,0,1,9.49963-8.78151,5.49888,5.49888,0,0,0,.60787-.14151ZM64.12408,59.988l.14073.004c0,1.206-.09365,2.42085.01917,3.61631.248,2.62779,1.28111,4.854,3.92408,5.83574a10.21555,10.21555,0,0,0,3.5456.53778c3.34141-.01738,5.872-2.01966,6.27655-5.31565a47.82173,47.82173,0,0,0,.16749-8.34172c-.198-3.7-2.447-5.94131-6.11014-6.2791-3.86934-.3568-7.05,1.40129-7.6993,5.70213C64.17762,57.14259,64.20537,58.57345,64.12408,59.988Z"/><path d="M197.30693,73.4077a5.11525,5.11525,0,0,1-.63.07651q-7.76169.00624-15.5234.00175c-.13951,0-.279-.01709-.46941-.02953V69.72011H186.403V50.38567h-5.717V46.57452h16.621v3.69133a6.67968,6.67968,0,0,1-.76734.09044c-1.44647.00884-2.893.00256-4.33957.006-.2488.0006-.49756.02335-.71238.03416V69.71637h5.81929Z"/><path d="M92.24412,71.003v9.285h-4.722V53.67519h4.4901v2.82523c.11959-.04373.1764-.04612.19405-.07355,2.01364-3.1297,5.00956-3.71173,8.35612-3.01251a7.299,7.299,0,0,1,5.94211,6.39432,20.276,20.276,0,0,1-.10235,8.11141c-1.39955,5.95438-8.07557,7.20457-11.76094,5.09972A17.23694,17.23694,0,0,1,92.24412,71.003Zm.08644-5.12024a4.57036,4.57036,0,0,0,4.264,4.28654c2.70324.18746,4.718-1.107,5.125-3.62462a25.136,25.136,0,0,0,.1371-5.29414,4.39693,4.39693,0,0,0-4.20522-4.304,4.59752,4.59752,0,0,0-5.176,3.63877,23.061,23.061,0,0,0-.27332,2.95288"/><path d="M177.683,73.4864c-1.55148,0-2.99806.02156-4.44243-.02521-.19736-.00639-.48123-.32031-.55929-.54823q-.79215-2.31294-1.5-4.65418a.64756.64756,0,0,0-.74163-.55141q-5.02051.02877-10.04125,0a.64253.64253,0,0,0-.73453.55344q-.72481,2.37181-1.53152,4.71819a.80606.80606,0,0,1-.53482.48531c-1.44547.04041-2.89259.02224-4.46178.02224.09235-.27932.15661-.48969.231-.69643q4.60979-12.80388,9.21345-25.60995c.15526-.43276.33187-.642.84508-.62578,1.35165.04262,2.70591.02455,4.05859.00085a.63106.63106,0,0,1,.724.48189q4.66768,13.00908,9.35855,26.00992C177.60435,73.15253,177.62469,73.26431,177.683,73.4864Zm-16.62052-9.61073h8.67531c-1.42788-4.4891-2.83613-8.91643-4.24437-13.34376l-.15253.00933C163.92295,54.96048,162.505,59.37972,161.06248,63.87567Z"/><path d="M136.47772,73.43719h-4.79054v-19.739h4.51562v3.06334a3.83031,3.83031,0,0,0,.34285-.45326,5.28894,5.28894,0,0,1,4.1492-2.98568,7.91585,7.91585,0,0,1,5.956.96605A6.27626,6.27626,0,0,1,149.4237,59.33c.14326,2.04838.1078,4.11021.12106,6.16633.01692,2.62279.00411,5.24578.00411,7.93h-4.77659c-.01129-.238-.03318-.4864-.03334-.73481q-.00336-5.2851-.00167-10.57022c0-.23646.00166-.473-.00379-.70937-.07642-3.31374-2.76895-5.10081-5.86656-3.86414a3.82917,3.82917,0,0,0-2.37656,3.92291c-.031,3.71233-.01147,7.42508-.01263,11.13766C136.47765,72.86685,136.47772,73.12538,136.47772,73.43719Z"/><path d="M124.58582,68.0132l2.92226,1.671a7.72345,7.72345,0,0,1-2.38918,2.66672,10.19947,10.19947,0,0,1-6.86,1.55,11.82341,11.82341,0,0,1-2.235-.39341,7.79264,7.79264,0,0,1-5.88312-7.48351,31.78234,31.78234,0,0,1,.30242-6.41684,7.68571,7.68571,0,0,1,7.18671-6.32283,14.78471,14.78471,0,0,1,4.16389.18484,7.66054,7.66054,0,0,1,6.26244,7.2147c.10085,1.451.01654,2.91487.01654,4.436H114.83183c-.55155,3.565,1.67586,5.7971,4.957,5.52283C121.66431,70.486,122.84625,69.80381,124.58582,68.0132Zm-9.888-6.1464h9.06565c.04417-1.843-.11829-3.59745-1.76923-4.70646a4.77574,4.77574,0,0,0-5.13509-.22241C114.93076,57.96492,114.74283,59.86148,114.69779,61.8668Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.16496" y="-4.09655" width="223.25536" height="134.51136"/><path d="M31.35558,46.00662a17.877,17.877,0,0,1,2.59366.88865,26.78738,26.78738,0,0,1,2.38982,1.63834,1.3043,1.3043,0,0,0,.8025.25519,8.67439,8.67439,0,0,1,9.76208,10.67991,1.0409,1.0409,0,0,0,.19922,1.02277,8.59831,8.59831,0,0,1-4.41,13.6442,1.10894,1.10894,0,0,0-.8313.73039,8.69985,8.69985,0,0,1-14.08167,3.03034,1.24423,1.24423,0,0,0-1.13036-.3618,8.65906,8.65906,0,0,1-9.583-10.78712,1.171,1.171,0,0,0-.20441-.87257,8.68023,8.68023,0,0,1,4.54239-13.78485,1.10279,1.10279,0,0,0,.63749-.53985,8.63756,8.63756,0,0,1,6.78184-5.43032,1.14366,1.14366,0,0,0,.25257-.11328ZM21.511,54.4775c-.3249.13991-.56274.22681-.78657.341a6.34462,6.34462,0,0,0-.50587,11.0386c2.24136,1.41389,4.58275,2.6708,6.89,3.97927a.77252.77252,0,0,0,.63363.02951c.87466-.46463,1.7251-.97453,2.64741-1.50534-.28092-.17071-.498-.30917-.72112-.4372-2.44442-1.4028-4.88534-2.81177-7.33818-4.19983a1.45814,1.45814,0,0,1-.829-1.43111c.03082-1.5839.00975-3.16881.00971-4.75331C21.511,56.5542,21.511,55.56932,21.511,54.4775ZM42.52482,71.75369c.12819.01809.17815.041.21407.02736a3.77769,3.77769,0,0,0,.38856-.17166,6.18883,6.18883,0,0,0,3.57632-5.336,6.02666,6.02666,0,0,0-2.97622-5.81866c-2.23-1.38489-4.53859-2.64437-6.82014-3.94594a.75341.75341,0,0,0-.57949-.10875c-.90732.48136-1.7907,1.00755-2.75836,1.563,2.73861,1.58427,5.34814,3.12116,7.98857,4.60336A1.70878,1.70878,0,0,1,42.5363,64.275c-.03566,1.91343-.01149,3.828-.01148,5.742ZM26.66618,64.38818c0-.37834-.00011-.62933,0-.88032.00136-2.79107.01285-5.5822-.003-8.37316a1.53112,1.53112,0,0,1,.86247-1.49259c1.53244-.85067,3.04311-1.7403,4.56246-2.61439.71164-.4094,1.42317-.819,2.28364-1.31419a3.84986,3.84986,0,0,1-.35485-.18479,6.26391,6.26391,0,0,0-6.27436-.77007A5.78218,5.78218,0,0,0,23.8406,53.7595c-.22091,2.84574-.10735,5.71753-.123,8.57812a.62649.62649,0,0,0,.22434.46962C24.80375,63.3323,25.68557,63.82473,26.66618,64.38818Zm-7.53163,3.4954A6.27748,6.27748,0,0,0,21.738,74.14993a6.1124,6.1124,0,0,0,6.77667.47187c2.322-1.22461,4.56987-2.5893,6.83973-3.91051a.78451.78451,0,0,0,.37213-.52123c.0365-.9803.0173-1.96266.0173-3.04763-.32437.173-.55077.28625-.77012.4118-2.42326,1.387-4.85358,2.76209-7.26248,4.17347a1.62584,1.62584,0,0,1-1.8475.00856c-1.72665-1.0306-3.48336-2.0112-5.22921-3.00978C20.16808,68.45969,19.6977,68.19976,19.13455,67.88358ZM44.845,58.46237a6.32328,6.32328,0,0,0-2.66686-6.33312,6.14733,6.14733,0,0,0-6.79158-.39548c-2.2774,1.21506-4.48958,2.55172-6.72578,3.84294-.15351.08865-.38019.24-.384.36782-.03127,1.04385-.01761,2.08905-.01761,3.23357.35383-.19266.5821-.31124.805-.43918,2.34222-1.34455,4.7021-2.66,7.01526-4.05259a1.94559,1.94559,0,0,1,2.28816.02153c1.8761,1.15349,3.80086,2.22841,5.70688,3.33349C44.29164,58.16732,44.51515,58.28262,44.845,58.46237ZM29.69354,76.566a4.3333,4.3333,0,0,0,.36274.31251,6.22651,6.22651,0,0,0,6.47153.55542,5.94526,5.94526,0,0,0,3.658-5.3337c.1171-2.68952.04621-5.38731.044-8.08149a.65535.65535,0,0,0-.18606-.49055c-.85741-.52815-1.73691-1.02068-2.74157-1.60088V62.833c0,2.43444-.09748,4.87417.03535,7.30139a2.86794,2.86794,0,0,1-1.803,3.11682C33.54854,74.23892,31.66606,75.43343,29.69354,76.566ZM28.09725,63.015a3.34441,3.34441,0,0,0,2.00294,3.41331,3.21128,3.21128,0,0,0,3.78883.02035,3.25273,3.25273,0,0,0,1.92944-3.33555A3.21023,3.21023,0,0,0,33.993,59.928a3.29247,3.29247,0,0,0-3.98607-.07639A3.24469,3.24469,0,0,0,28.09725,63.015Z"/><path d="M72.80781,46.00662c.78486.16,1.58007.2813,2.3529.48634a10.50217,10.50217,0,0,1,8.00771,9.58087,32.7324,32.7324,0,0,1-.15564,8.912,10.67144,10.67144,0,0,1-10.27014,8.98469,15.29573,15.29573,0,0,1-6.38223-.73556,10.03716,10.03716,0,0,1-6.76153-7.93475,28.77563,28.77563,0,0,1-.03242-10.3706,10.45557,10.45557,0,0,1,9.49963-8.78151,5.49888,5.49888,0,0,0,.60787-.14151ZM64.12408,59.988l.14073.004c0,1.206-.09365,2.42085.01917,3.61631.248,2.62779,1.28111,4.854,3.92408,5.83574a10.21555,10.21555,0,0,0,3.5456.53778c3.34141-.01738,5.872-2.01966,6.27655-5.31565a47.82173,47.82173,0,0,0,.16749-8.34172c-.198-3.7-2.447-5.94131-6.11014-6.2791-3.86934-.3568-7.05,1.40129-7.6993,5.70213C64.17762,57.14259,64.20537,58.57345,64.12408,59.988Z"/><path d="M197.30693,73.4077a5.11525,5.11525,0,0,1-.63.07651q-7.76169.00624-15.5234.00175c-.13951,0-.279-.01709-.46941-.02953V69.72011H186.403V50.38567h-5.717V46.57452h16.621v3.69133a6.67968,6.67968,0,0,1-.76734.09044c-1.44647.00884-2.893.00256-4.33957.006-.2488.0006-.49756.02335-.71238.03416V69.71637h5.81929Z"/><path d="M92.24412,71.003v9.285h-4.722V53.67519h4.4901v2.82523c.11959-.04373.1764-.04612.19405-.07355,2.01364-3.1297,5.00956-3.71173,8.35612-3.01251a7.299,7.299,0,0,1,5.94211,6.39432,20.276,20.276,0,0,1-.10235,8.11141c-1.39955,5.95438-8.07557,7.20457-11.76094,5.09972A17.23694,17.23694,0,0,1,92.24412,71.003Zm.08644-5.12024a4.57036,4.57036,0,0,0,4.264,4.28654c2.70324.18746,4.718-1.107,5.125-3.62462a25.136,25.136,0,0,0,.1371-5.29414,4.39693,4.39693,0,0,0-4.20522-4.304,4.59752,4.59752,0,0,0-5.176,3.63877,23.061,23.061,0,0,0-.27332,2.95288"/><path d="M177.683,73.4864c-1.55148,0-2.99806.02156-4.44243-.02521-.19736-.00639-.48123-.32031-.55929-.54823q-.79215-2.31294-1.5-4.65418a.64756.64756,0,0,0-.74163-.55141q-5.02051.02877-10.04125,0a.64253.64253,0,0,0-.73453.55344q-.72481,2.37181-1.53152,4.71819a.80606.80606,0,0,1-.53482.48531c-1.44547.04041-2.89259.02224-4.46178.02224.09235-.27932.15661-.48969.231-.69643q4.60979-12.80388,9.21345-25.60995c.15526-.43276.33187-.642.84508-.62578,1.35165.04262,2.70591.02455,4.05859.00085a.63106.63106,0,0,1,.724.48189q4.66768,13.00908,9.35855,26.00992C177.60435,73.15253,177.62469,73.26431,177.683,73.4864Zm-16.62052-9.61073h8.67531c-1.42788-4.4891-2.83613-8.91643-4.24437-13.34376l-.15253.00933C163.92295,54.96048,162.505,59.37972,161.06248,63.87567Z"/><path d="M136.47772,73.43719h-4.79054v-19.739h4.51562v3.06334a3.83031,3.83031,0,0,0,.34285-.45326,5.28894,5.28894,0,0,1,4.1492-2.98568,7.91585,7.91585,0,0,1,5.956.96605A6.27626,6.27626,0,0,1,149.4237,59.33c.14326,2.04838.1078,4.11021.12106,6.16633.01692,2.62279.00411,5.24578.00411,7.93h-4.77659c-.01129-.238-.03318-.4864-.03334-.73481q-.00336-5.2851-.00167-10.57022c0-.23646.00166-.473-.00379-.70937-.07642-3.31374-2.76895-5.10081-5.86656-3.86414a3.82917,3.82917,0,0,0-2.37656,3.92291c-.031,3.71233-.01147,7.42508-.01263,11.13766C136.47765,72.86685,136.47772,73.12538,136.47772,73.43719Z"/><path d="M124.58582,68.0132l2.92226,1.671a7.72345,7.72345,0,0,1-2.38918,2.66672,10.19947,10.19947,0,0,1-6.86,1.55,11.82341,11.82341,0,0,1-2.235-.39341,7.79264,7.79264,0,0,1-5.88312-7.48351,31.78234,31.78234,0,0,1,.30242-6.41684,7.68571,7.68571,0,0,1,7.18671-6.32283,14.78471,14.78471,0,0,1,4.16389.18484,7.66054,7.66054,0,0,1,6.26244,7.2147c.10085,1.451.01654,2.91487.01654,4.436H114.83183c-.55155,3.565,1.67586,5.7971,4.957,5.52283C121.66431,70.486,122.84625,69.80381,124.58582,68.0132Zm-9.888-6.1464h9.06565c.04417-1.843-.11829-3.59745-1.76923-4.70646a4.77574,4.77574,0,0,0-5.13509-.22241C114.93076,57.96492,114.74283,59.86148,114.69779,61.8668Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/peardeck/peardeck_featured.svg b/content/en/case-studies/peardeck/peardeck_featured.svg
index dcaa62f71e..1c42e71920 100644
--- a/content/en/case-studies/peardeck/peardeck_featured.svg
+++ b/content/en/case-studies/peardeck/peardeck_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#c8dc55;}.cls-3{fill:#394646;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.92089" y="-2.95304" width="223.25536" height="134.51136"/><path class="cls-2" d="M27.05906,47.01456q.66441-.008,1.32885-.016A1.92886,1.92886,0,0,0,30.65828,48.677c.777-.05169,1.56037-.01017,2.34087-.00935,2.30578.00241,3.28515.70093,4.08807,2.90382.78526,2.15443,1.58582,4.30338,2.35786,6.46249A4.47189,4.47189,0,0,0,40.49815,59.681a15.1394,15.1394,0,0,1,4.49459,10.23241A15.548,15.548,0,0,1,27.29879,86.0479a14.77809,14.77809,0,0,1-12.3343-9.34377A14.44536,14.44536,0,0,1,16.958,61.215,24.09618,24.09618,0,0,0,20.723,54.48042c.46094-1.2373.97628-2.455,1.48865-3.67252a3.279,3.279,0,0,1,2.9548-2.14408A1.763,1.763,0,0,0,27.05906,47.01456Zm6.82933,29.59683a5.29123,5.29123,0,0,0,3.718-1.51614,1.5714,1.5714,0,0,0,.11025-2.30653,1.51231,1.51231,0,0,0-2.19989-.25756,2.38648,2.38648,0,0,1-3.27451.0123,1.65212,1.65212,0,0,0-2.11649,2.5274A5.23925,5.23925,0,0,0,33.88839,76.61139Zm.6426-10.0711a2.10118,2.10118,0,0,0,1.95349,2.19131,2.05832,2.05832,0,0,0,2.2612-1.98034,2.11,2.11,0,1,0-4.21469-.211ZM31.4116,68.73407a2.10344,2.10344,0,0,0,2.14954-2.11879,2.149,2.149,0,0,0-2.08845-2.0848,2.12109,2.12109,0,0,0-2.12939,2.14441A2.056,2.056,0,0,0,31.4116,68.73407Z"/><path class="cls-3" d="M27.05906,47.01456a1.763,1.763,0,0,1-1.89263,1.64926,3.279,3.279,0,0,0-2.9548,2.14408c-.51237,1.21751-1.02771,2.43522-1.48865,3.67252A24.09618,24.09618,0,0,1,16.958,61.215a14.44536,14.44536,0,0,0-1.99355,15.48918,14.77809,14.77809,0,0,0,12.3343,9.34377A15.548,15.548,0,0,0,44.99274,69.91344,15.1394,15.1394,0,0,0,40.49815,59.681,4.47189,4.47189,0,0,1,39.44508,58.034c-.772-2.15911-1.5726-4.30806-2.35786-6.46249-.80292-2.20289-1.78229-2.90141-4.08807-2.90382-.7805-.00082-1.56383-.04234-2.34087.00935a1.92886,1.92886,0,0,1-2.27037-1.67845,51.1336,51.1336,0,0,1-.704-5.89209c.15935-6.9622,6.95591-12.89908,13.81114-11.99509,1.3898.18328,1.82583.64176,1.915,2.01357A12.57442,12.57442,0,0,1,35.16011,44.022c-1.06609.39387-1.98694.44493-2.62161-.67442-.27389-.48305-.67537-.301-1.02975-.21365-.45867.11312-.23193.48417-.22476.7715.02785,1.11521.48239,1.58937,1.70148,1.47449a6.81892,6.81892,0,0,1,7.264,5.0031c.325,1.11513.83563,2.17525,1.19153,3.28287a18.31213,18.31213,0,0,0,2.95171,5.46082c4.76793,6.34063,5.41052,13.29023,1.74075,20.28158-3.60284,6.86384-9.59006,10.36281-17.39375,10.09084-8.055-.28072-13.87969-4.34619-16.91428-11.7433C8.78562,70.346,10.28711,63.49868,15.656,57.53293a4.14215,4.14215,0,0,0,.7791-1.278c.87514-2.20224,1.70672-4.42308,2.63957-6.60076a6.55451,6.55451,0,0,1,5.89805-4.28536C26.3377,45.27672,26.71565,45.62823,27.05906,47.01456Z"/><path class="cls-3" d="M132.25619,65.61411c-.00007-2.80109-.00711-5.60221.00255-8.40327.00588-1.70444.62067-2.348,2.32556-2.29967,2.83949.08043,5.69781-.30577,8.51739.24687,5.529,1.08368,8.87353,5.53347,8.56677,11.34152a10.53849,10.53849,0,0,1-9.86053,9.67418c-2.56315.174-5.1462.08956-7.71966.06434-1.1815-.01157-1.81763-.77838-1.82631-2.104C132.24335,71.29419,132.25625,68.45411,132.25619,65.61411Zm3.84319-.097c0,2.14164.019,4.28355-.01163,6.42476-.00914.63917.16317.91073.84936.87992,1.4023-.063,2.81045-.01089,4.21106-.09322a6.82567,6.82567,0,0,0,6.504-6.21666,7.02174,7.02174,0,0,0-5.00806-7.84126c-1.99071-.56277-4.03459-.26753-6.0562-.314-.62138-.0143-.48146.49576-.48324.8524C136.094,61.31166,136.0994,63.41439,136.09938,65.5171Z"/><path class="cls-3" d="M58.673,65.69621c0-2.84238-.00564-5.68476.00217-8.52712.00452-1.6422.62122-2.26242,2.24453-2.26661,2.38138-.00614,4.76451-.05817,7.14384.01218,5.16876.15283,8.37579,4.41836,6.97318,9.27847C74.1562,67.244,71.843,68.64667,68.88984,69.22a27.08215,27.08215,0,0,1-5.48782.19542c-.74-.00772-.93073.223-.901.92473.05271,1.24375.0242,2.49141.01219,3.73727-.0146,1.51559-.75853,2.397-1.96954,2.36145-1.20268-.03529-1.86585-.852-1.869-2.33237C58.66869,71.30309,58.673,68.49964,58.673,65.69621Zm3.84384-3.79214c0,1.26186.00084,2.30948-.00047,3.3571-.00044.35891-.02124.72308.51086.69938,1.89675-.0845,3.82125.25653,5.68668-.28512a3.571,3.571,0,0,0,2.68137-3.86256,3.4577,3.4577,0,0,0-3.036-3.31758,10.77915,10.77915,0,0,0-2.08994-.14213c-1.19758.01682-2.76607-.5052-3.49452.19243C61.97976,59.307,62.63268,60.89606,62.51679,61.90407Z"/><path class="cls-3" d="M191.65313,67.28168c2.01754-1.97967,4.00684-3.93344,5.99884-5.88446a13.38409,13.38409,0,0,1,1.023-.95678,1.75026,1.75026,0,0,1,2.51749-.00176,1.804,1.804,0,0,1-.1465,2.52824c-1.06855,1.07686-2.208,2.08446-3.32948,3.10817-1.147,1.047-1.15673,1.04226-.19466,2.30151,1.25258,1.63953,2.51811,3.26927,3.76406,4.91377.81744,1.0789.79394,2.16518-.0295,2.78171a1.98269,1.98269,0,0,1-2.85518-.59786q-2.00423-2.5836-3.93586-5.22279c-.3918-.536-.57817-.681-1.218-.17388a4.19281,4.19281,0,0,0-1.80782,4.06732,1.8571,1.8571,0,0,1-1.85472,2.297c-1.17775-.00445-1.86322-.84031-1.86462-2.32193q-.00848-8.98945-.0004-17.97894c.00119-1.50181.657-2.33825,1.82149-2.36573,1.21277-.0286,1.93033.84861,1.93154,2.37577.00268,3.34673-.00337,6.69348.00744,10.04017A1.53036,1.53036,0,0,0,191.65313,67.28168Z"/><path class="cls-3" d="M85.61008,69.56107c-1.48356.00107-2.96852.03959-4.45016-.01378-.85021-.03063-.88843.33124-.67871.97914.89184,2.75525,4.26276,3.87838,7.09667,2.34653.34118-.18442.65071-.42718.97449-.64353.90291-.60332,1.77574-.557,2.26307.19027a1.594,1.594,0,0,1-.40634,2.27948A8.61531,8.61531,0,0,1,84.32022,76.643a8.05367,8.05367,0,0,1-7.82578-7.41469,8.32189,8.32189,0,0,1,6.10431-9.26521,7.6793,7.6793,0,0,1,9.514,7.4695,1.83757,1.83757,0,0,1-2.05222,2.118C88.57814,69.59267,87.09365,69.56,85.61008,69.56107Zm-5.29944-2.50718c2.48939,0,4.97456-.01568,7.4593.01026.68.0071.63877-.29716.52939-.79382A3.98583,3.98583,0,0,0,84.099,62.87226C82.04056,62.99876,80.51323,64.664,80.31064,67.05389Z"/><path class="cls-3" d="M104.71872,74.52936A7.1542,7.1542,0,0,1,96.909,76.09967a4.93721,4.93721,0,0,1,.20338-9.23222,11.67431,11.67431,0,0,1,6.80762-.12708c.94868.23968.97132-.09118.86894-.80046-.23352-1.61786-1.47789-2.6507-3.406-2.76966a10.28437,10.28437,0,0,0-3.80349.52c-1.16726.37473-2.0855.04687-2.3703-.799-.33465-.99389.13131-1.77995,1.33237-2.21012a13.71064,13.71064,0,0,1,5.75895-.77457c4.02138.32146,6.06733,2.48592,6.19951,6.62223.08332,2.60728.034,5.21952.00881,7.82919A1.87415,1.87415,0,0,1,106.7453,76.439C105.65683,76.50613,105.004,75.9155,104.71872,74.52936Zm-3.27894-5.84094a5.40422,5.40422,0,0,0-2.80852.688,2.31039,2.31039,0,0,0-.21855,3.84021c1.76861,1.35706,5.26371.513,6.19488-1.49612.78333-1.69011.38354-2.47648-1.43777-2.79487C102.59684,68.82546,102.01666,68.76633,101.43978,68.68842Z"/><path class="cls-3" d="M162.59285,69.562c-1.52115,0-3.04265.01911-4.56328-.00887-.66113-.01216-.78851.169-.5908.81809a4.72556,4.72556,0,0,0,6.56367,2.75936,11.63221,11.63221,0,0,0,1.69344-1.0179,1.44411,1.44411,0,0,1,2.08686.26,1.4635,1.4635,0,0,1-.15912,2.10717,7.92692,7.92692,0,0,1-4.59032,2.10055,8.13381,8.13381,0,0,1-9.33078-6.23514c-1.05013-4.392,1.18556-8.82185,5.13156-10.16789a7.62916,7.62916,0,0,1,10.21984,7.38683c-.01757,1.32208-.56315,1.93917-1.89807,1.98195-1.51956.04869-3.04189.01126-4.563.01126Zm-1.4269-2.50773c1.08746,0,2.17934-.06048,3.26108.018.97.07036.99583-.36988.80466-1.09583a3.95552,3.95552,0,0,0-4.087-3.1065,4.30171,4.30171,0,0,0-3.82443,3.50876c-.08747.51331.05227.69736.58352.68355C158.99049,67.034,160.07847,67.05381,161.166,67.05431Z"/><path class="cls-3" d="M178.89437,76.64691a8.43149,8.43149,0,1,1,5.38227-15.18356,1.8524,1.8524,0,0,1,.66209,2.62324c-.61489.86264-1.70873.92959-2.78465.17045-2.40324-1.69566-4.94577-1.53843-6.60342.40833a5.61036,5.61036,0,0,0,.19545,7.26838,4.80322,4.80322,0,0,0,6.01139.64148,9.5311,9.5311,0,0,0,.85222-.6146,1.62558,1.62558,0,1,1,2.12506,2.45777A7.931,7.931,0,0,1,178.89437,76.64691Z"/><path class="cls-3" d="M116.17308,62.679a8.7714,8.7714,0,0,1,1.54106-1.87106,3.59726,3.59726,0,0,1,1.98314-.9133,1.7466,1.7466,0,0,1,2.07144,1.43413,1.72036,1.72036,0,0,1-1.38385,2.20351c-3.03477.52134-4.41367,3.04559-4.4373,5.85091-.01408,1.67228.03242,3.34616-.02577,5.01664a1.90026,1.90026,0,0,1-1.93589,2.0397A1.83421,1.83421,0,0,1,112.13,74.56709q-.06731-6.35844-.0043-12.71795a1.88018,1.88018,0,0,1,1.79311-1.95764,1.98548,1.98548,0,0,1,2.00283,1.87112C115.96952,62.0453,115.81838,62.3801,116.17308,62.679Z"/><path class="cls-3" d="M203.07286,55.11782c.15609-.4052.22926-.584.294-.7657.11288-.31692.12963-.77408.62806-.66.40977.09378.29594.49928.28482.78988a4.59354,4.59354,0,0,1-.11617,1.64026c-.34735-.08915-.62426-1.08808-.95224-.0918-.41817-.40084-1.26883-.015-1.28815-.12694a5.51006,5.51006,0,0,1-.00207-2.06257c.07207-.33368.53958-.22192.715.11505A11.27623,11.27623,0,0,1,203.07286,55.11782Z"/><path class="cls-3" d="M199.54419,53.80122h1.96818a1.3832,1.3832,0,0,0-.68209,1.56378c.02585.26051.14157.71573-.33952.68724-.35888-.02124-.25274-.41111-.26927-.663C200.184,54.81927,200.44845,54.1074,199.54419,53.80122Z"/><path class="cls-3" d="M33.88839,76.61139a5.23925,5.23925,0,0,1-3.76263-1.54053,1.65212,1.65212,0,0,1,2.11649-2.5274,2.38648,2.38648,0,0,0,3.27451-.0123,1.51231,1.51231,0,0,1,2.19989.25756,1.5714,1.5714,0,0,1-.11025,2.30653A5.29123,5.29123,0,0,1,33.88839,76.61139Z"/><path class="cls-3" d="M34.531,66.54029a2.11,2.11,0,1,1,4.21469.211,2.05832,2.05832,0,0,1-2.2612,1.98034A2.10118,2.10118,0,0,1,34.531,66.54029Z"/><path class="cls-3" d="M31.4116,68.73407a2.056,2.056,0,0,1-2.0683-2.05918,2.12109,2.12109,0,0,1,2.12939-2.14441,2.149,2.149,0,0,1,2.08845,2.0848A2.10344,2.10344,0,0,1,31.4116,68.73407Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#c8dc55;}.cls-3{fill:#394646;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.92089" y="-2.95304" width="223.25536" height="134.51136"/><path class="cls-2" d="M27.05906,47.01456q.66441-.008,1.32885-.016A1.92886,1.92886,0,0,0,30.65828,48.677c.777-.05169,1.56037-.01017,2.34087-.00935,2.30578.00241,3.28515.70093,4.08807,2.90382.78526,2.15443,1.58582,4.30338,2.35786,6.46249A4.47189,4.47189,0,0,0,40.49815,59.681a15.1394,15.1394,0,0,1,4.49459,10.23241A15.548,15.548,0,0,1,27.29879,86.0479a14.77809,14.77809,0,0,1-12.3343-9.34377A14.44536,14.44536,0,0,1,16.958,61.215,24.09618,24.09618,0,0,0,20.723,54.48042c.46094-1.2373.97628-2.455,1.48865-3.67252a3.279,3.279,0,0,1,2.9548-2.14408A1.763,1.763,0,0,0,27.05906,47.01456Zm6.82933,29.59683a5.29123,5.29123,0,0,0,3.718-1.51614,1.5714,1.5714,0,0,0,.11025-2.30653,1.51231,1.51231,0,0,0-2.19989-.25756,2.38648,2.38648,0,0,1-3.27451.0123,1.65212,1.65212,0,0,0-2.11649,2.5274A5.23925,5.23925,0,0,0,33.88839,76.61139Zm.6426-10.0711a2.10118,2.10118,0,0,0,1.95349,2.19131,2.05832,2.05832,0,0,0,2.2612-1.98034,2.11,2.11,0,1,0-4.21469-.211ZM31.4116,68.73407a2.10344,2.10344,0,0,0,2.14954-2.11879,2.149,2.149,0,0,0-2.08845-2.0848,2.12109,2.12109,0,0,0-2.12939,2.14441A2.056,2.056,0,0,0,31.4116,68.73407Z"/><path class="cls-3" d="M27.05906,47.01456a1.763,1.763,0,0,1-1.89263,1.64926,3.279,3.279,0,0,0-2.9548,2.14408c-.51237,1.21751-1.02771,2.43522-1.48865,3.67252A24.09618,24.09618,0,0,1,16.958,61.215a14.44536,14.44536,0,0,0-1.99355,15.48918,14.77809,14.77809,0,0,0,12.3343,9.34377A15.548,15.548,0,0,0,44.99274,69.91344,15.1394,15.1394,0,0,0,40.49815,59.681,4.47189,4.47189,0,0,1,39.44508,58.034c-.772-2.15911-1.5726-4.30806-2.35786-6.46249-.80292-2.20289-1.78229-2.90141-4.08807-2.90382-.7805-.00082-1.56383-.04234-2.34087.00935a1.92886,1.92886,0,0,1-2.27037-1.67845,51.1336,51.1336,0,0,1-.704-5.89209c.15935-6.9622,6.95591-12.89908,13.81114-11.99509,1.3898.18328,1.82583.64176,1.915,2.01357A12.57442,12.57442,0,0,1,35.16011,44.022c-1.06609.39387-1.98694.44493-2.62161-.67442-.27389-.48305-.67537-.301-1.02975-.21365-.45867.11312-.23193.48417-.22476.7715.02785,1.11521.48239,1.58937,1.70148,1.47449a6.81892,6.81892,0,0,1,7.264,5.0031c.325,1.11513.83563,2.17525,1.19153,3.28287a18.31213,18.31213,0,0,0,2.95171,5.46082c4.76793,6.34063,5.41052,13.29023,1.74075,20.28158-3.60284,6.86384-9.59006,10.36281-17.39375,10.09084-8.055-.28072-13.87969-4.34619-16.91428-11.7433C8.78562,70.346,10.28711,63.49868,15.656,57.53293a4.14215,4.14215,0,0,0,.7791-1.278c.87514-2.20224,1.70672-4.42308,2.63957-6.60076a6.55451,6.55451,0,0,1,5.89805-4.28536C26.3377,45.27672,26.71565,45.62823,27.05906,47.01456Z"/><path class="cls-3" d="M132.25619,65.61411c-.00007-2.80109-.00711-5.60221.00255-8.40327.00588-1.70444.62067-2.348,2.32556-2.29967,2.83949.08043,5.69781-.30577,8.51739.24687,5.529,1.08368,8.87353,5.53347,8.56677,11.34152a10.53849,10.53849,0,0,1-9.86053,9.67418c-2.56315.174-5.1462.08956-7.71966.06434-1.1815-.01157-1.81763-.77838-1.82631-2.104C132.24335,71.29419,132.25625,68.45411,132.25619,65.61411Zm3.84319-.097c0,2.14164.019,4.28355-.01163,6.42476-.00914.63917.16317.91073.84936.87992,1.4023-.063,2.81045-.01089,4.21106-.09322a6.82567,6.82567,0,0,0,6.504-6.21666,7.02174,7.02174,0,0,0-5.00806-7.84126c-1.99071-.56277-4.03459-.26753-6.0562-.314-.62138-.0143-.48146.49576-.48324.8524C136.094,61.31166,136.0994,63.41439,136.09938,65.5171Z"/><path class="cls-3" d="M58.673,65.69621c0-2.84238-.00564-5.68476.00217-8.52712.00452-1.6422.62122-2.26242,2.24453-2.26661,2.38138-.00614,4.76451-.05817,7.14384.01218,5.16876.15283,8.37579,4.41836,6.97318,9.27847C74.1562,67.244,71.843,68.64667,68.88984,69.22a27.08215,27.08215,0,0,1-5.48782.19542c-.74-.00772-.93073.223-.901.92473.05271,1.24375.0242,2.49141.01219,3.73727-.0146,1.51559-.75853,2.397-1.96954,2.36145-1.20268-.03529-1.86585-.852-1.869-2.33237C58.66869,71.30309,58.673,68.49964,58.673,65.69621Zm3.84384-3.79214c0,1.26186.00084,2.30948-.00047,3.3571-.00044.35891-.02124.72308.51086.69938,1.89675-.0845,3.82125.25653,5.68668-.28512a3.571,3.571,0,0,0,2.68137-3.86256,3.4577,3.4577,0,0,0-3.036-3.31758,10.77915,10.77915,0,0,0-2.08994-.14213c-1.19758.01682-2.76607-.5052-3.49452.19243C61.97976,59.307,62.63268,60.89606,62.51679,61.90407Z"/><path class="cls-3" d="M191.65313,67.28168c2.01754-1.97967,4.00684-3.93344,5.99884-5.88446a13.38409,13.38409,0,0,1,1.023-.95678,1.75026,1.75026,0,0,1,2.51749-.00176,1.804,1.804,0,0,1-.1465,2.52824c-1.06855,1.07686-2.208,2.08446-3.32948,3.10817-1.147,1.047-1.15673,1.04226-.19466,2.30151,1.25258,1.63953,2.51811,3.26927,3.76406,4.91377.81744,1.0789.79394,2.16518-.0295,2.78171a1.98269,1.98269,0,0,1-2.85518-.59786q-2.00423-2.5836-3.93586-5.22279c-.3918-.536-.57817-.681-1.218-.17388a4.19281,4.19281,0,0,0-1.80782,4.06732,1.8571,1.8571,0,0,1-1.85472,2.297c-1.17775-.00445-1.86322-.84031-1.86462-2.32193q-.00848-8.98945-.0004-17.97894c.00119-1.50181.657-2.33825,1.82149-2.36573,1.21277-.0286,1.93033.84861,1.93154,2.37577.00268,3.34673-.00337,6.69348.00744,10.04017A1.53036,1.53036,0,0,0,191.65313,67.28168Z"/><path class="cls-3" d="M85.61008,69.56107c-1.48356.00107-2.96852.03959-4.45016-.01378-.85021-.03063-.88843.33124-.67871.97914.89184,2.75525,4.26276,3.87838,7.09667,2.34653.34118-.18442.65071-.42718.97449-.64353.90291-.60332,1.77574-.557,2.26307.19027a1.594,1.594,0,0,1-.40634,2.27948A8.61531,8.61531,0,0,1,84.32022,76.643a8.05367,8.05367,0,0,1-7.82578-7.41469,8.32189,8.32189,0,0,1,6.10431-9.26521,7.6793,7.6793,0,0,1,9.514,7.4695,1.83757,1.83757,0,0,1-2.05222,2.118C88.57814,69.59267,87.09365,69.56,85.61008,69.56107Zm-5.29944-2.50718c2.48939,0,4.97456-.01568,7.4593.01026.68.0071.63877-.29716.52939-.79382A3.98583,3.98583,0,0,0,84.099,62.87226C82.04056,62.99876,80.51323,64.664,80.31064,67.05389Z"/><path class="cls-3" d="M104.71872,74.52936A7.1542,7.1542,0,0,1,96.909,76.09967a4.93721,4.93721,0,0,1,.20338-9.23222,11.67431,11.67431,0,0,1,6.80762-.12708c.94868.23968.97132-.09118.86894-.80046-.23352-1.61786-1.47789-2.6507-3.406-2.76966a10.28437,10.28437,0,0,0-3.80349.52c-1.16726.37473-2.0855.04687-2.3703-.799-.33465-.99389.13131-1.77995,1.33237-2.21012a13.71064,13.71064,0,0,1,5.75895-.77457c4.02138.32146,6.06733,2.48592,6.19951,6.62223.08332,2.60728.034,5.21952.00881,7.82919A1.87415,1.87415,0,0,1,106.7453,76.439C105.65683,76.50613,105.004,75.9155,104.71872,74.52936Zm-3.27894-5.84094a5.40422,5.40422,0,0,0-2.80852.688,2.31039,2.31039,0,0,0-.21855,3.84021c1.76861,1.35706,5.26371.513,6.19488-1.49612.78333-1.69011.38354-2.47648-1.43777-2.79487C102.59684,68.82546,102.01666,68.76633,101.43978,68.68842Z"/><path class="cls-3" d="M162.59285,69.562c-1.52115,0-3.04265.01911-4.56328-.00887-.66113-.01216-.78851.169-.5908.81809a4.72556,4.72556,0,0,0,6.56367,2.75936,11.63221,11.63221,0,0,0,1.69344-1.0179,1.44411,1.44411,0,0,1,2.08686.26,1.4635,1.4635,0,0,1-.15912,2.10717,7.92692,7.92692,0,0,1-4.59032,2.10055,8.13381,8.13381,0,0,1-9.33078-6.23514c-1.05013-4.392,1.18556-8.82185,5.13156-10.16789a7.62916,7.62916,0,0,1,10.21984,7.38683c-.01757,1.32208-.56315,1.93917-1.89807,1.98195-1.51956.04869-3.04189.01126-4.563.01126Zm-1.4269-2.50773c1.08746,0,2.17934-.06048,3.26108.018.97.07036.99583-.36988.80466-1.09583a3.95552,3.95552,0,0,0-4.087-3.1065,4.30171,4.30171,0,0,0-3.82443,3.50876c-.08747.51331.05227.69736.58352.68355C158.99049,67.034,160.07847,67.05381,161.166,67.05431Z"/><path class="cls-3" d="M178.89437,76.64691a8.43149,8.43149,0,1,1,5.38227-15.18356,1.8524,1.8524,0,0,1,.66209,2.62324c-.61489.86264-1.70873.92959-2.78465.17045-2.40324-1.69566-4.94577-1.53843-6.60342.40833a5.61036,5.61036,0,0,0,.19545,7.26838,4.80322,4.80322,0,0,0,6.01139.64148,9.5311,9.5311,0,0,0,.85222-.6146,1.62558,1.62558,0,1,1,2.12506,2.45777A7.931,7.931,0,0,1,178.89437,76.64691Z"/><path class="cls-3" d="M116.17308,62.679a8.7714,8.7714,0,0,1,1.54106-1.87106,3.59726,3.59726,0,0,1,1.98314-.9133,1.7466,1.7466,0,0,1,2.07144,1.43413,1.72036,1.72036,0,0,1-1.38385,2.20351c-3.03477.52134-4.41367,3.04559-4.4373,5.85091-.01408,1.67228.03242,3.34616-.02577,5.01664a1.90026,1.90026,0,0,1-1.93589,2.0397A1.83421,1.83421,0,0,1,112.13,74.56709q-.06731-6.35844-.0043-12.71795a1.88018,1.88018,0,0,1,1.79311-1.95764,1.98548,1.98548,0,0,1,2.00283,1.87112C115.96952,62.0453,115.81838,62.3801,116.17308,62.679Z"/><path class="cls-3" d="M203.07286,55.11782c.15609-.4052.22926-.584.294-.7657.11288-.31692.12963-.77408.62806-.66.40977.09378.29594.49928.28482.78988a4.59354,4.59354,0,0,1-.11617,1.64026c-.34735-.08915-.62426-1.08808-.95224-.0918-.41817-.40084-1.26883-.015-1.28815-.12694a5.51006,5.51006,0,0,1-.00207-2.06257c.07207-.33368.53958-.22192.715.11505A11.27623,11.27623,0,0,1,203.07286,55.11782Z"/><path class="cls-3" d="M199.54419,53.80122h1.96818a1.3832,1.3832,0,0,0-.68209,1.56378c.02585.26051.14157.71573-.33952.68724-.35888-.02124-.25274-.41111-.26927-.663C200.184,54.81927,200.44845,54.1074,199.54419,53.80122Z"/><path class="cls-3" d="M33.88839,76.61139a5.23925,5.23925,0,0,1-3.76263-1.54053,1.65212,1.65212,0,0,1,2.11649-2.5274,2.38648,2.38648,0,0,0,3.27451-.0123,1.51231,1.51231,0,0,1,2.19989.25756,1.5714,1.5714,0,0,1-.11025,2.30653A5.29123,5.29123,0,0,1,33.88839,76.61139Z"/><path class="cls-3" d="M34.531,66.54029a2.11,2.11,0,1,1,4.21469.211,2.05832,2.05832,0,0,1-2.2612,1.98034A2.10118,2.10118,0,0,1,34.531,66.54029Z"/><path class="cls-3" d="M31.4116,68.73407a2.056,2.056,0,0,1-2.0683-2.05918,2.12109,2.12109,0,0,1,2.12939-2.14441,2.149,2.149,0,0,1,2.08845,2.0848A2.10344,2.10344,0,0,1,31.4116,68.73407Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/pingcap/pingcap_featured_logo.svg b/content/en/case-studies/pingcap/pingcap_featured_logo.svg
index 6beb710c04..46d2d2543d 100644
--- a/content/en/case-studies/pingcap/pingcap_featured_logo.svg
+++ b/content/en/case-studies/pingcap/pingcap_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#1a237e;}.cls-3{fill:#172d72;}.cls-4{fill:#10a6fa;}.cls-5{fill:#3351ff;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.74781" y="-4.12296" width="223.25536" height="134.51136"/><path class="cls-2" d="M37.10629,49.8563l-21.556-6.14854a2.32671,2.32671,0,0,0-2.96549,2.23761V85.67778a2.32882,2.32882,0,0,0,2.32242,2.328,2.34709,2.34709,0,0,0,.54415-.06435l21.55614-5.13762h.00012a2.31961,2.31961,0,0,0,1.78747-2.26369V52.09439A2.33746,2.33746,0,0,0,37.10629,49.8563Z"/><path class="cls-3" d="M153.704,69.18841h-.008l-.05617.08906a9.8204,9.8204,0,0,1-3.36007,3.20787,8.99162,8.99162,0,0,1-4.59992,1.33028,9.18343,9.18343,0,0,1-6.96149-3.17641A10.73277,10.73277,0,0,1,135.93129,63.05a10.56554,10.56554,0,0,1,2.87657-7.19837,9.31614,9.31614,0,0,1,14.802,1.42571l.05637.08757h.0541l2.2873-1.41418a12.68144,12.68144,0,0,0-3.77833-4.01627,11.79162,11.79162,0,0,0-6.54776-1.98039,11.48418,11.48418,0,0,0-8.74292,3.725A13.14057,13.14057,0,0,0,133.27,63.17767a13.73041,13.73041,0,0,0,3.63437,9.52778,11.41872,11.41872,0,0,0,8.6544,3.92759c.04148,0,.08315-.00021.12475-.00063a11.973,11.973,0,0,0,10.3151-6.02531Z"/><polygon class="cls-3" points="170.788 50.285 167.681 50.285 156.131 76.137 159.817 76.137 163.386 67.544 163.392 67.544 164.653 64.859 164.648 64.859 169.297 53.948 173.854 64.859 167.313 64.859 166.121 67.544 174.915 67.544 178.517 76.137 181.766 76.137 170.788 50.285"/><path class="cls-3" d="M198.66156,52.65016a9.26362,9.26362,0,0,0-6.41458-2.33247h-8.3653V76.13651H186.93V66.02369h.00075V63.30585H186.93V53.10174h5.44916a6.05209,6.05209,0,0,1,3.97382,1.37851,4.43489,4.43489,0,0,1,1.806,3.4215,4.53924,4.53924,0,0,1-1.61977,3.93662,5.73177,5.73177,0,0,1-3.99487,1.46748h-3.15645v2.71784H193.04a8.16929,8.16929,0,0,0,5.6887-2.16806,7.1,7.1,0,0,0,2.44523-5.368A7.30676,7.30676,0,0,0,198.66156,52.65016Z"/><path class="cls-4" d="M51.79014,48.44325a2.33792,2.33792,0,0,0-1.68623-2.23235L22.66667,38.35125a2.32707,2.32707,0,0,0-2.968,2.2369v30.149a2.32848,2.32848,0,0,0,2.3223,2.3278,2.3421,2.3421,0,0,0,.54942-.06555l27.46821-6.6119a2.31961,2.31961,0,0,0,1.78239-2.267Z"/><path class="cls-5" d="M37.10629,49.8563,19.69867,44.891v25.8461a2.32848,2.32848,0,0,0,2.3223,2.3278,2.3421,2.3421,0,0,0,.54942-.06555L38.79508,69.0939V52.09439A2.33746,2.33746,0,0,0,37.10629,49.8563Z"/><rect class="cls-2" x="85.15301" y="50.79427" width="3.04719" height="3.04719"/><rect class="cls-2" x="85.15301" y="57.62199" width="3.04719" height="18.55402"/><path class="cls-2" d="M131.05244,74.31986v-7.967a10.13143,10.13143,0,0,0-10.19062-10.08615,9.59233,9.59233,0,0,0-6.81493,3.07035,9.83188,9.83188,0,0,0-2.76544,6.98019,10.02667,10.02667,0,0,0,3.00052,7.24833,9.309,9.309,0,0,0,7.15662,2.86854,9.49975,9.49975,0,0,0,6.73066-3.01977V74.6786m0,0a5.80025,5.80025,0,0,1-1.986,4.38139,6.64244,6.64244,0,0,1-4.65272,1.89407,6.80987,6.80987,0,0,1-4.14535-1.3833,6.35366,6.35366,0,0,1-2.19729-2.58174l-2.33331,1.34714a8.95056,8.95056,0,0,0,2.436,2.945,10.01087,10.01087,0,0,0,5.93453,2.093q.21807.00859.43392.00849a10.01393,10.01393,0,0,0,6.376-2.26668,7.48089,7.48089,0,0,0,3.01743-6.074v-.7222m-2.94919-7.77467a7.15858,7.15858,0,0,1-2.05924,4.95338A6.29606,6.29606,0,0,1,121.2662,73.551a6.68629,6.68629,0,0,1-4.94657-2.05594,6.90735,6.90735,0,0,1-2.12205-4.98282,7.01857,7.01857,0,0,1,1.93033-5.04913,6.6733,6.6733,0,0,1,4.78429-2.31366c.124-.006.24635-.00893.36783-.00893a6.25462,6.25462,0,0,1,4.7642,2.12788A6.97973,6.97973,0,0,1,128.10325,66.54519Z"/><path class="cls-2" d="M79.72761,52.65016A9.26359,9.26359,0,0,0,73.313,50.31769h-8.3653V76.13651h3.04835V66.02369h.00075V63.30585h-.00075V53.10174h5.44917a6.05211,6.05211,0,0,1,3.97382,1.37851,4.43492,4.43492,0,0,1,1.806,3.4215,4.53927,4.53927,0,0,1-1.61977,3.93662,5.73182,5.73182,0,0,1-3.99488,1.46748H70.45394v2.71784h3.65214a8.16926,8.16926,0,0,0,5.68869-2.16806,7.1,7.1,0,0,0,2.44523-5.368A7.3067,7.3067,0,0,0,79.72761,52.65016Z"/><path class="cls-2" d="M100.16589,56.48686a8.23659,8.23659,0,0,0-6.10754,2.49853,8.5458,8.5458,0,0,0-2.42971,6.20353V76.09816h2.94019V64.92532a5.33734,5.33734,0,0,1,1.6541-3.943,5.40682,5.40682,0,0,1,3.943-1.65422,5.26391,5.26391,0,0,1,3.87691,1.65422,5.35592,5.35592,0,0,1,1.68721,3.943V76.09816h2.94019V65.18892a8.54585,8.54585,0,0,0-2.42988-6.20353A8.19692,8.19692,0,0,0,100.16589,56.48686Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#1a237e;}.cls-3{fill:#172d72;}.cls-4{fill:#10a6fa;}.cls-5{fill:#3351ff;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.74781" y="-4.12296" width="223.25536" height="134.51136"/><path class="cls-2" d="M37.10629,49.8563l-21.556-6.14854a2.32671,2.32671,0,0,0-2.96549,2.23761V85.67778a2.32882,2.32882,0,0,0,2.32242,2.328,2.34709,2.34709,0,0,0,.54415-.06435l21.55614-5.13762h.00012a2.31961,2.31961,0,0,0,1.78747-2.26369V52.09439A2.33746,2.33746,0,0,0,37.10629,49.8563Z"/><path class="cls-3" d="M153.704,69.18841h-.008l-.05617.08906a9.8204,9.8204,0,0,1-3.36007,3.20787,8.99162,8.99162,0,0,1-4.59992,1.33028,9.18343,9.18343,0,0,1-6.96149-3.17641A10.73277,10.73277,0,0,1,135.93129,63.05a10.56554,10.56554,0,0,1,2.87657-7.19837,9.31614,9.31614,0,0,1,14.802,1.42571l.05637.08757h.0541l2.2873-1.41418a12.68144,12.68144,0,0,0-3.77833-4.01627,11.79162,11.79162,0,0,0-6.54776-1.98039,11.48418,11.48418,0,0,0-8.74292,3.725A13.14057,13.14057,0,0,0,133.27,63.17767a13.73041,13.73041,0,0,0,3.63437,9.52778,11.41872,11.41872,0,0,0,8.6544,3.92759c.04148,0,.08315-.00021.12475-.00063a11.973,11.973,0,0,0,10.3151-6.02531Z"/><polygon class="cls-3" points="170.788 50.285 167.681 50.285 156.131 76.137 159.817 76.137 163.386 67.544 163.392 67.544 164.653 64.859 164.648 64.859 169.297 53.948 173.854 64.859 167.313 64.859 166.121 67.544 174.915 67.544 178.517 76.137 181.766 76.137 170.788 50.285"/><path class="cls-3" d="M198.66156,52.65016a9.26362,9.26362,0,0,0-6.41458-2.33247h-8.3653V76.13651H186.93V66.02369h.00075V63.30585H186.93V53.10174h5.44916a6.05209,6.05209,0,0,1,3.97382,1.37851,4.43489,4.43489,0,0,1,1.806,3.4215,4.53924,4.53924,0,0,1-1.61977,3.93662,5.73177,5.73177,0,0,1-3.99487,1.46748h-3.15645v2.71784H193.04a8.16929,8.16929,0,0,0,5.6887-2.16806,7.1,7.1,0,0,0,2.44523-5.368A7.30676,7.30676,0,0,0,198.66156,52.65016Z"/><path class="cls-4" d="M51.79014,48.44325a2.33792,2.33792,0,0,0-1.68623-2.23235L22.66667,38.35125a2.32707,2.32707,0,0,0-2.968,2.2369v30.149a2.32848,2.32848,0,0,0,2.3223,2.3278,2.3421,2.3421,0,0,0,.54942-.06555l27.46821-6.6119a2.31961,2.31961,0,0,0,1.78239-2.267Z"/><path class="cls-5" d="M37.10629,49.8563,19.69867,44.891v25.8461a2.32848,2.32848,0,0,0,2.3223,2.3278,2.3421,2.3421,0,0,0,.54942-.06555L38.79508,69.0939V52.09439A2.33746,2.33746,0,0,0,37.10629,49.8563Z"/><rect class="cls-2" x="85.15301" y="50.79427" width="3.04719" height="3.04719"/><rect class="cls-2" x="85.15301" y="57.62199" width="3.04719" height="18.55402"/><path class="cls-2" d="M131.05244,74.31986v-7.967a10.13143,10.13143,0,0,0-10.19062-10.08615,9.59233,9.59233,0,0,0-6.81493,3.07035,9.83188,9.83188,0,0,0-2.76544,6.98019,10.02667,10.02667,0,0,0,3.00052,7.24833,9.309,9.309,0,0,0,7.15662,2.86854,9.49975,9.49975,0,0,0,6.73066-3.01977V74.6786m0,0a5.80025,5.80025,0,0,1-1.986,4.38139,6.64244,6.64244,0,0,1-4.65272,1.89407,6.80987,6.80987,0,0,1-4.14535-1.3833,6.35366,6.35366,0,0,1-2.19729-2.58174l-2.33331,1.34714a8.95056,8.95056,0,0,0,2.436,2.945,10.01087,10.01087,0,0,0,5.93453,2.093q.21807.00859.43392.00849a10.01393,10.01393,0,0,0,6.376-2.26668,7.48089,7.48089,0,0,0,3.01743-6.074v-.7222m-2.94919-7.77467a7.15858,7.15858,0,0,1-2.05924,4.95338A6.29606,6.29606,0,0,1,121.2662,73.551a6.68629,6.68629,0,0,1-4.94657-2.05594,6.90735,6.90735,0,0,1-2.12205-4.98282,7.01857,7.01857,0,0,1,1.93033-5.04913,6.6733,6.6733,0,0,1,4.78429-2.31366c.124-.006.24635-.00893.36783-.00893a6.25462,6.25462,0,0,1,4.7642,2.12788A6.97973,6.97973,0,0,1,128.10325,66.54519Z"/><path class="cls-2" d="M79.72761,52.65016A9.26359,9.26359,0,0,0,73.313,50.31769h-8.3653V76.13651h3.04835V66.02369h.00075V63.30585h-.00075V53.10174h5.44917a6.05211,6.05211,0,0,1,3.97382,1.37851,4.43492,4.43492,0,0,1,1.806,3.4215,4.53927,4.53927,0,0,1-1.61977,3.93662,5.73182,5.73182,0,0,1-3.99488,1.46748H70.45394v2.71784h3.65214a8.16926,8.16926,0,0,0,5.68869-2.16806,7.1,7.1,0,0,0,2.44523-5.368A7.3067,7.3067,0,0,0,79.72761,52.65016Z"/><path class="cls-2" d="M100.16589,56.48686a8.23659,8.23659,0,0,0-6.10754,2.49853,8.5458,8.5458,0,0,0-2.42971,6.20353V76.09816h2.94019V64.92532a5.33734,5.33734,0,0,1,1.6541-3.943,5.40682,5.40682,0,0,1,3.943-1.65422,5.26391,5.26391,0,0,1,3.87691,1.65422,5.35592,5.35592,0,0,1,1.68721,3.943V76.09816h2.94019V65.18892a8.54585,8.54585,0,0,0-2.42988-6.20353A8.19692,8.19692,0,0,0,100.16589,56.48686Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/pinterest/pinterest_feature.svg b/content/en/case-studies/pinterest/pinterest_feature.svg
index 32d0c5d60f..96cd6ded97 100644
--- a/content/en/case-studies/pinterest/pinterest_feature.svg
+++ b/content/en/case-studies/pinterest/pinterest_feature.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#fff;}.cls-3{fill:#e60019;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path class="cls-2" d="M161.62125,64.02487A54.12125,54.12125,0,1,1,107.5,9.90362,54.12125,54.12125,0,0,1,161.62125,64.02487Z"/><path class="cls-3" d="M107.5,9.90362A54.13832,54.13832,0,0,0,87.76673,114.44909c-.49-4.27669-.89069-10.86887.17849-15.54628.97993-4.23162,6.32534-26.90466,6.32534-26.90466a19.71223,19.71223,0,0,1-1.60376-8.0179c0-7.52794,4.36505-13.14064,9.7997-13.14064,4.63278,0,6.85993,3.4748,6.85993,7.61717,0,4.63278-2.94022,11.58151-4.49891,18.04027-1.29184,5.39,2.7171,9.80015,8.01789,9.80015,9.62166,0,17.01573-10.15625,17.01573-24.76677,0-12.96259-9.30975-22.005-22.62843-22.005-15.4124,0-24.45486,11.53689-24.45486,23.47493a21.12584,21.12584,0,0,0,4.009,12.33876,1.61123,1.61123,0,0,1,.35654,1.55913c-.40117,1.69256-1.33646,5.39-1.51451,6.14685-.22267.98036-.80188,1.203-1.82643.71307-6.77068-3.16289-11.0023-13.00677-11.0023-20.98049,0-17.06034,12.38338-32.74,35.76862-32.74,18.75334,0,33.36387,13.36331,33.36387,31.27015,0,18.6641-11.75955,33.67535-28.06264,33.67535-5.47928,0-10.6462-2.851-12.38382-6.2361L98.101,101.62035c-1.2026,4.72158-4.49892,10.60158-6.72606,14.20937A54.16963,54.16963,0,1,0,107.5,9.90362Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#fff;}.cls-3{fill:#e60019;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path class="cls-2" d="M161.62125,64.02487A54.12125,54.12125,0,1,1,107.5,9.90362,54.12125,54.12125,0,0,1,161.62125,64.02487Z"/><path class="cls-3" d="M107.5,9.90362A54.13832,54.13832,0,0,0,87.76673,114.44909c-.49-4.27669-.89069-10.86887.17849-15.54628.97993-4.23162,6.32534-26.90466,6.32534-26.90466a19.71223,19.71223,0,0,1-1.60376-8.0179c0-7.52794,4.36505-13.14064,9.7997-13.14064,4.63278,0,6.85993,3.4748,6.85993,7.61717,0,4.63278-2.94022,11.58151-4.49891,18.04027-1.29184,5.39,2.7171,9.80015,8.01789,9.80015,9.62166,0,17.01573-10.15625,17.01573-24.76677,0-12.96259-9.30975-22.005-22.62843-22.005-15.4124,0-24.45486,11.53689-24.45486,23.47493a21.12584,21.12584,0,0,0,4.009,12.33876,1.61123,1.61123,0,0,1,.35654,1.55913c-.40117,1.69256-1.33646,5.39-1.51451,6.14685-.22267.98036-.80188,1.203-1.82643.71307-6.77068-3.16289-11.0023-13.00677-11.0023-20.98049,0-17.06034,12.38338-32.74,35.76862-32.74,18.75334,0,33.36387,13.36331,33.36387,31.27015,0,18.6641-11.75955,33.67535-28.06264,33.67535-5.47928,0-10.6462-2.851-12.38382-6.2361L98.101,101.62035c-1.2026,4.72158-4.49892,10.60158-6.72606,14.20937A54.16963,54.16963,0,1,0,107.5,9.90362Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/prowise/prowise_featured_logo.svg b/content/en/case-studies/prowise/prowise_featured_logo.svg
index ae03646afc..1f2d5ce41a 100644
--- a/content/en/case-studies/prowise/prowise_featured_logo.svg
+++ b/content/en/case-studies/prowise/prowise_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#0d3e66;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path class="cls-2" d="M101.223,64.40689A19.12774,19.12774,0,1,1,82.09679,45.31077,19.04037,19.04037,0,0,1,101.223,64.40689ZM82.13983,51.43111A12.98147,12.98147,0,1,0,95.11778,64.4027,12.96522,12.96522,0,0,0,82.13983,51.43111Z"/><path class="cls-2" d="M126.26212,67.7127c.87786-2.59667,1.56151-5.19288,2.16751-7.80946.49524-2.13832.99166-4.27652,1.45885-6.421.083-.38115.21927-.52034.61364-.51682,1.88949.01683,3.77967.03033,5.6686-.00621.58945-.01141.53579.22892.41887.62793-1.29117,4.40624-2.63,8.79743-4.08933,13.15179-.96134,2.8684-1.99107,5.71038-3.13519,8.51188a.78919.78919,0,0,1-.87748.59989q-1.92168-.05712-3.846.00071c-.48159.015-.65862-.16664-.79488-.59177-1.25792-3.92447-2.58839-7.82633-3.65465-11.80989-.045-.16828-.11592-.32969-.22482-.63435-.5065,1.79425-.94964,3.45447-1.44537,5.09891-.74332,2.46581-1.53086,4.91834-2.28075,7.38222a.64441.64441,0,0,1-.74461.55328c-1.28135-.034-2.56507-.03927-3.846.0015a.83.83,0,0,1-.92684-.62673c-2.01667-4.99091-3.65445-10.11112-5.24849-15.24591-.66408-2.13919-1.26734-4.29714-1.92552-6.43822-.1393-.45316-.06454-.58136.41892-.57606q2.83413.03105,5.66875-.00005c.43114-.00448.61221.10716.71393.56147.99811,4.45843,1.98474,8.92027,3.20964,13.32424a1.45125,1.45125,0,0,0,.404.91226c.68526-2.52819,1.37583-5.007,2.02624-7.49634q.86633-3.31563,1.65279-6.6518c.11836-.4975.31168-.68.84844-.65692,1.16762.05012,2.3391.02794,3.50856.00867.38112-.00627.53166.10853.62392.50048,1.0725,4.55652,2.14343,9.1139,3.43886,13.61448C126.12479,67.293,126.19577,67.50216,126.26212,67.7127Z"/><path class="cls-2" d="M18.57315,60.98126c0-4.71112.011-9.42229-.01459-14.13326-.003-.56115.14833-.78671.70662-.86682a47.64515,47.64515,0,0,1,12.28926-.40545,16.79328,16.79328,0,0,1,5.2972,1.45743,7.98248,7.98248,0,0,1,4.7193,6.8598,13.26945,13.26945,0,0,1-.30865,4.86975c-.89733,3.31749-3.3001,5.05339-6.40728,6.02415a27.38513,27.38513,0,0,1-8.60256.95447c-.98663-.0122-.86531-.12582-.86735.84734-.006,2.84909-.01651,5.69834.01053,8.54719.00514.54119-.10629.73005-.69.71684q-2.697-.061-5.39622-.00031c-.58945.01311-.75411-.13708-.75078-.73786C18.58481,70.40355,18.57315,65.69237,18.57315,60.98126Zm6.81011-5.43914c0,1.30171.01384,2.60365-.00807,3.905-.007.41331.1286.5495.54016.5362.809-.02613,1.621.02372,2.429-.0148a11.69384,11.69384,0,0,0,4.14788-.7795,3.08942,3.08942,0,0,0,1.90765-2.04938c.78194-2.97109-.17942-5.23877-3.47644-5.81139a21.84237,21.84237,0,0,0-5.10895-.13539c-.43968.027-.43488.268-.43355.57884C25.38634,53.02847,25.3832,54.2853,25.38326,55.54212Z"/><path class="cls-2" d="M188.194,66.54491q-3.33969.00007-6.67936.00058c-.74527.00049-.78979.03888-.563.75694a4.97881,4.97881,0,0,0,4.405,3.4464,15.56708,15.56708,0,0,0,7.50094-.761c.58973-.19918.66579-.00807.73835.47368.19686,1.30649.40775,2.61166.65449,3.90951a.69564.69564,0,0,1-.555.93515,24.22358,24.22358,0,0,1-8.57466,1.0991,12.65375,12.65375,0,0,1-4.078-.80715,9.78941,9.78941,0,0,1-6.43719-7.29243,14.50764,14.50764,0,0,1,1.0513-10.27226A10.66223,10.66223,0,0,1,186.0993,52.3836a10.075,10.075,0,0,1,6.65282,2.841,10.441,10.441,0,0,1,2.73247,5.94653,26.36177,26.36177,0,0,1,.13505,4.83382c-.0116.439-.18539.55309-.61147.54935C192.73691,66.53429,190.46539,66.54486,188.194,66.54491Zm-3.07577-4.41437c1.25931,0,2.51863.004,3.77789-.00375.22461-.00138.50295.08694.526-.32238a4.25234,4.25234,0,0,0-3.05345-3.99856,4.33216,4.33216,0,0,0-5.479,3.83518c-.06048.42389.07971.49892.45066.49486C182.59948,62.12211,183.85887,62.13063,185.11818,62.13054Z"/><path class="cls-2" d="M160.687,76.41272a19.64754,19.64754,0,0,1-6.86211-1.07308c-.56851-.18463-.70585-.411-.56425-.98918.31415-1.28275.57037-2.58084.8084-3.8803.09225-.50365.21275-.642.756-.44074a17.18367,17.18367,0,0,0,7.26654,1.13558,6.879,6.879,0,0,0,1.06445-.15544,1.38761,1.38761,0,0,0,1.15566-1.08793,1.45415,1.45415,0,0,0-.579-1.54661,10.25031,10.25031,0,0,0-2.51112-1.28271A38.77646,38.77646,0,0,1,157.3827,65.462a6.86719,6.86719,0,0,1-2.66513-9.70014,7.39789,7.39789,0,0,1,5.27115-3.17021,20.141,20.141,0,0,1,9.25155.73948c.41713.12314.53565.31284.438.72242-.31159,1.30731-.62168,2.61553-.89343,3.93141-.09085.43991-.22087.54625-.67148.39754a15.30433,15.30433,0,0,0-4.95825-.84494,5.61441,5.61441,0,0,0-1.98388.326,1.51067,1.51067,0,0,0-.3269,2.72164,13.21755,13.21755,0,0,0,2.73028,1.29843,26.3756,26.3756,0,0,1,4.20911,1.9501c2.52957,1.51478,3.21428,3.85631,2.96338,6.585a5.88038,5.88038,0,0,1-4.20123,5.17327A14.97849,14.97849,0,0,1,160.687,76.41272Z"/><path class="cls-2" d="M46.17367,65.01888c0-3.36682.01115-6.73371-.0112-10.10039a.85305.85305,0,0,1,.69976-1.00048,27.95086,27.95086,0,0,1,8.80686-1.43315,23.3059,23.3059,0,0,1,4.60267.60365c.57819.13063.82228.30191.64911.97883-.34377,1.3437-.58636,2.71436-.83576,4.08024-.08584.47012-.3035.51069-.70407.40657a13.7337,13.7337,0,0,0-6.069-.37352c-.51295.09647-.703.26742-.70094.81248.02015,5.3644.00052,10.72895.02749,16.09329.00321.63658-.1914.77972-.79169.765-1.61893-.03961-3.24037-.04457-4.85893.00189-.63732.01831-.83806-.133-.83083-.80148C46.1933,71.70785,46.17367,68.36326,46.17367,65.01888Z"/><path class="cls-2" d="M147.602,64.48456c.00008,3.52214-.01843,7.04446.01647,10.56625.0066.66566-.18961.82015-.82882.80267-1.68527-.0461-3.37284-.02961-5.05905-.00624-.44641.00619-.61993-.08141-.61881-.57863q.02447-10.86921.00218-21.7385c-.00078-.44146.12721-.57191.56725-.56635,1.75371.02214,3.50833.03153,5.2616-.00421.55257-.01126.67122.18114.66869.68944C147.59358,57.26078,147.602,60.87269,147.602,64.48456Z"/><path class="cls-2" d="M140.5681,46.079a3.55318,3.55318,0,0,1,3.7449-3.77564,3.77883,3.77883,0,1,1,.07,7.556A3.57835,3.57835,0,0,1,140.5681,46.079Z"/><path class="cls-2" d="M74.63285,64.82715a7.63631,7.63631,0,0,1,7.03611-8.0411c.31232-.01143.40527.06834.43915.39542a3.88333,3.88333,0,0,0,6.01933,3.09717c.34716-.19371.4859-.12606.68385.17354,2.89555,4.38245-.15691,10.87716-5.40553,11.487a7.60782,7.60782,0,0,1-8.63258-6.04794C74.69832,65.54256,74.67833,65.18214,74.63285,64.82715Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#0d3e66;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path class="cls-2" d="M101.223,64.40689A19.12774,19.12774,0,1,1,82.09679,45.31077,19.04037,19.04037,0,0,1,101.223,64.40689ZM82.13983,51.43111A12.98147,12.98147,0,1,0,95.11778,64.4027,12.96522,12.96522,0,0,0,82.13983,51.43111Z"/><path class="cls-2" d="M126.26212,67.7127c.87786-2.59667,1.56151-5.19288,2.16751-7.80946.49524-2.13832.99166-4.27652,1.45885-6.421.083-.38115.21927-.52034.61364-.51682,1.88949.01683,3.77967.03033,5.6686-.00621.58945-.01141.53579.22892.41887.62793-1.29117,4.40624-2.63,8.79743-4.08933,13.15179-.96134,2.8684-1.99107,5.71038-3.13519,8.51188a.78919.78919,0,0,1-.87748.59989q-1.92168-.05712-3.846.00071c-.48159.015-.65862-.16664-.79488-.59177-1.25792-3.92447-2.58839-7.82633-3.65465-11.80989-.045-.16828-.11592-.32969-.22482-.63435-.5065,1.79425-.94964,3.45447-1.44537,5.09891-.74332,2.46581-1.53086,4.91834-2.28075,7.38222a.64441.64441,0,0,1-.74461.55328c-1.28135-.034-2.56507-.03927-3.846.0015a.83.83,0,0,1-.92684-.62673c-2.01667-4.99091-3.65445-10.11112-5.24849-15.24591-.66408-2.13919-1.26734-4.29714-1.92552-6.43822-.1393-.45316-.06454-.58136.41892-.57606q2.83413.03105,5.66875-.00005c.43114-.00448.61221.10716.71393.56147.99811,4.45843,1.98474,8.92027,3.20964,13.32424a1.45125,1.45125,0,0,0,.404.91226c.68526-2.52819,1.37583-5.007,2.02624-7.49634q.86633-3.31563,1.65279-6.6518c.11836-.4975.31168-.68.84844-.65692,1.16762.05012,2.3391.02794,3.50856.00867.38112-.00627.53166.10853.62392.50048,1.0725,4.55652,2.14343,9.1139,3.43886,13.61448C126.12479,67.293,126.19577,67.50216,126.26212,67.7127Z"/><path class="cls-2" d="M18.57315,60.98126c0-4.71112.011-9.42229-.01459-14.13326-.003-.56115.14833-.78671.70662-.86682a47.64515,47.64515,0,0,1,12.28926-.40545,16.79328,16.79328,0,0,1,5.2972,1.45743,7.98248,7.98248,0,0,1,4.7193,6.8598,13.26945,13.26945,0,0,1-.30865,4.86975c-.89733,3.31749-3.3001,5.05339-6.40728,6.02415a27.38513,27.38513,0,0,1-8.60256.95447c-.98663-.0122-.86531-.12582-.86735.84734-.006,2.84909-.01651,5.69834.01053,8.54719.00514.54119-.10629.73005-.69.71684q-2.697-.061-5.39622-.00031c-.58945.01311-.75411-.13708-.75078-.73786C18.58481,70.40355,18.57315,65.69237,18.57315,60.98126Zm6.81011-5.43914c0,1.30171.01384,2.60365-.00807,3.905-.007.41331.1286.5495.54016.5362.809-.02613,1.621.02372,2.429-.0148a11.69384,11.69384,0,0,0,4.14788-.7795,3.08942,3.08942,0,0,0,1.90765-2.04938c.78194-2.97109-.17942-5.23877-3.47644-5.81139a21.84237,21.84237,0,0,0-5.10895-.13539c-.43968.027-.43488.268-.43355.57884C25.38634,53.02847,25.3832,54.2853,25.38326,55.54212Z"/><path class="cls-2" d="M188.194,66.54491q-3.33969.00007-6.67936.00058c-.74527.00049-.78979.03888-.563.75694a4.97881,4.97881,0,0,0,4.405,3.4464,15.56708,15.56708,0,0,0,7.50094-.761c.58973-.19918.66579-.00807.73835.47368.19686,1.30649.40775,2.61166.65449,3.90951a.69564.69564,0,0,1-.555.93515,24.22358,24.22358,0,0,1-8.57466,1.0991,12.65375,12.65375,0,0,1-4.078-.80715,9.78941,9.78941,0,0,1-6.43719-7.29243,14.50764,14.50764,0,0,1,1.0513-10.27226A10.66223,10.66223,0,0,1,186.0993,52.3836a10.075,10.075,0,0,1,6.65282,2.841,10.441,10.441,0,0,1,2.73247,5.94653,26.36177,26.36177,0,0,1,.13505,4.83382c-.0116.439-.18539.55309-.61147.54935C192.73691,66.53429,190.46539,66.54486,188.194,66.54491Zm-3.07577-4.41437c1.25931,0,2.51863.004,3.77789-.00375.22461-.00138.50295.08694.526-.32238a4.25234,4.25234,0,0,0-3.05345-3.99856,4.33216,4.33216,0,0,0-5.479,3.83518c-.06048.42389.07971.49892.45066.49486C182.59948,62.12211,183.85887,62.13063,185.11818,62.13054Z"/><path class="cls-2" d="M160.687,76.41272a19.64754,19.64754,0,0,1-6.86211-1.07308c-.56851-.18463-.70585-.411-.56425-.98918.31415-1.28275.57037-2.58084.8084-3.8803.09225-.50365.21275-.642.756-.44074a17.18367,17.18367,0,0,0,7.26654,1.13558,6.879,6.879,0,0,0,1.06445-.15544,1.38761,1.38761,0,0,0,1.15566-1.08793,1.45415,1.45415,0,0,0-.579-1.54661,10.25031,10.25031,0,0,0-2.51112-1.28271A38.77646,38.77646,0,0,1,157.3827,65.462a6.86719,6.86719,0,0,1-2.66513-9.70014,7.39789,7.39789,0,0,1,5.27115-3.17021,20.141,20.141,0,0,1,9.25155.73948c.41713.12314.53565.31284.438.72242-.31159,1.30731-.62168,2.61553-.89343,3.93141-.09085.43991-.22087.54625-.67148.39754a15.30433,15.30433,0,0,0-4.95825-.84494,5.61441,5.61441,0,0,0-1.98388.326,1.51067,1.51067,0,0,0-.3269,2.72164,13.21755,13.21755,0,0,0,2.73028,1.29843,26.3756,26.3756,0,0,1,4.20911,1.9501c2.52957,1.51478,3.21428,3.85631,2.96338,6.585a5.88038,5.88038,0,0,1-4.20123,5.17327A14.97849,14.97849,0,0,1,160.687,76.41272Z"/><path class="cls-2" d="M46.17367,65.01888c0-3.36682.01115-6.73371-.0112-10.10039a.85305.85305,0,0,1,.69976-1.00048,27.95086,27.95086,0,0,1,8.80686-1.43315,23.3059,23.3059,0,0,1,4.60267.60365c.57819.13063.82228.30191.64911.97883-.34377,1.3437-.58636,2.71436-.83576,4.08024-.08584.47012-.3035.51069-.70407.40657a13.7337,13.7337,0,0,0-6.069-.37352c-.51295.09647-.703.26742-.70094.81248.02015,5.3644.00052,10.72895.02749,16.09329.00321.63658-.1914.77972-.79169.765-1.61893-.03961-3.24037-.04457-4.85893.00189-.63732.01831-.83806-.133-.83083-.80148C46.1933,71.70785,46.17367,68.36326,46.17367,65.01888Z"/><path class="cls-2" d="M147.602,64.48456c.00008,3.52214-.01843,7.04446.01647,10.56625.0066.66566-.18961.82015-.82882.80267-1.68527-.0461-3.37284-.02961-5.05905-.00624-.44641.00619-.61993-.08141-.61881-.57863q.02447-10.86921.00218-21.7385c-.00078-.44146.12721-.57191.56725-.56635,1.75371.02214,3.50833.03153,5.2616-.00421.55257-.01126.67122.18114.66869.68944C147.59358,57.26078,147.602,60.87269,147.602,64.48456Z"/><path class="cls-2" d="M140.5681,46.079a3.55318,3.55318,0,0,1,3.7449-3.77564,3.77883,3.77883,0,1,1,.07,7.556A3.57835,3.57835,0,0,1,140.5681,46.079Z"/><path class="cls-2" d="M74.63285,64.82715a7.63631,7.63631,0,0,1,7.03611-8.0411c.31232-.01143.40527.06834.43915.39542a3.88333,3.88333,0,0,0,6.01933,3.09717c.34716-.19371.4859-.12606.68385.17354,2.89555,4.38245-.15691,10.87716-5.40553,11.487a7.60782,7.60782,0,0,1-8.63258-6.04794C74.69832,65.54256,74.67833,65.18214,74.63285,64.82715Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/ricardo-ch/ricardo.ch_featured_logo.svg b/content/en/case-studies/ricardo-ch/ricardo.ch_featured_logo.svg
index 60b79ca30c..caefc4b96f 100644
--- a/content/en/case-studies/ricardo-ch/ricardo.ch_featured_logo.svg
+++ b/content/en/case-studies/ricardo-ch/ricardo.ch_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:none;}.cls-3{fill:#0011f6;stroke:#0011f6;}.cls-3,.cls-4{stroke-linecap:round;stroke-linejoin:round;stroke-width:0.06931px;fill-rule:evenodd;}.cls-4{fill:#fe7d02;stroke:#fe7d02;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path class="cls-2" d="M12.29864,3.67745h191.175v117.0947H12.29864Z"/><path class="cls-3" d="M167.117,73.73114h2.63439l.27719.06931.13861.0693.13861.20838.06929.2079v2.63344l-.1386.347-.13861.1386-.13861.0693H166.909l-.1386-.0693-.13861-.1386-.13861-.34651V74.286l.0693-.2079.13861-.20839.1386-.0693.2772-.0693Z"/><path class="cls-4" d="M75.41125,53.55979H80.541l.48511.13908.2079.34651.0693.2079v3.1888l-.0693.2772-.1386.2079-.0693.0693-.27721.1386-.2079.0693h-3.7432l-1.386.13861-1.10929.3465-1.10882.55441-.90139.76279-.693,1.03951c-1.74351,3.84262-1.28565,10.88646,3.95063,11.784l1.386.06931H80.541l.2079.0693.27721.1386.0693.0693.1386.27721.0693.2079V76.92l-.0693.2079-.2079.34651-.48511.1386h-5.1297l-1.80183-.1386-1.5944-.4158-1.5944-.693-1.31719-.90139L67.92531,74.286c-4.74735-5.44371-4.018-15.67014,2.49484-19.47786l1.59488-.693,1.59392-.347,1.8023-.20791Z"/><path class="cls-3" d="M180.35677,59.03648h3.95063l.347.1386.2772.27721V62.2941l-.2772.27721-.347.0693h-2.84182l-1.17812.1386-1.04.3465-.90091.62419-.693.83161-.48558.97021-.34651,1.1786-.06929,1.4558.06929,1.24741.2079,1.10882.34651.9707.48512.90139.693.693.83209.4851.97021.27721,1.1786.1386h2.98089l.13861.13859.13861.06978.1386.2079v2.84182l-.2772.2079-.1386.1386c-4.85106.13621-8.68556.42536-11.15985-4.43622l-.62418-1.4558-.34651-1.59392c-.63327-4.20442.8861-8.89681,5.12922-10.53613l1.386-.41581,1.45627-.1386Z"/><path class="cls-4" d="M153.73948,57.37278l-1.17859.1386-.97022.41581-.90138.5544a8.0571,8.0571,0,0,0-2.426,6.16922l.0693,1.386.06929,1.2479c.48273,2.30127.85121,4.25268,3.119,5.40691l1.04.3465,1.17811.1386,1.04-.1386,1.03951-.3465c1.972-1.24073,2.7185-3.25571,2.98041-5.47621l.13861-1.17811.06978-1.1786c-.065-2.17748-.5028-5.1536-2.42649-6.51572l-.83161-.55441-.97021-.27721-1.04-.1386Zm.13861-4.64412,1.94042.2079,1.733.4158c9.74371,3.17686,9.6247,23.04328-2.07952,24.3992l-1.87159.0693-1.733-.0693c-11.64255-1.06485-12.2978-21.30646-1.80182-24.39919l1.87113-.48511,1.94091-.1386Zm-96.281-6.58551h4.08971l.27721.0693.3465.27721.0693.41581v4.02088l-.0693.48511-.3465.2079-.27721.0693H57.59708l-.2772-.0693-.20791-.1386-.1386-.0693-.0693-.2772-.06978-.20791V46.90594l.06978-.2079.0693-.2079.1386-.1386.20791-.13861Zm0,7.41664h4.08971l.27721.06978.1386.0693.2079.1386v.20791l.0693.2079V76.91994l-.0693.2079v.20791l-.2079.13859-.1386.06931-.27721.0693H57.59708l-.48511-.1386-.2079-.34651-.06978-.2079V54.2528l.06978-.2079.2079-.34651Zm-14.07144,0h4.159l.4158.13908.27721.34651.06978.2079v1.04h.2772l.0693-.0693.0693-.0693.34651-.2079.76231-.55441.97021-.48558,1.10929-.2079,1.04-.13861h.90092l.2079.0693.3465.34651.13861.4158v2.9809l-.0693.2772-.13861.20791-.06929.1386-.27721.0693-.2079.0693h-.1386l-.27721.0693-.4851.1386-.693.1386-1.04.41581c-2.17079,1.06293-2.752,3.69589-2.84181,5.892V76.91947l-.0693.20838-.27721.34651-.4158.1386h-4.1595l-.4851-.1386-.20791-.34651-.0693-.2079V54.2528l.0693-.2079.20791-.34651Zm62.31589,0h4.22832c.89613.13908.65143.87941.693,1.59488l.06931.1386h.2772l.0693-.0693.34651-.2772.76279-.55441,1.03951-.48559,1.10882-.2079,1.04-.1386h.83162l.20838.0693.2772.1386.06931.2079.13859.2079.06931.20791v2.98089l-.06931.27721-.13859.2079-.06931.1386-.2772.0693-.20838.0693h-.1386l-.27721.0693-.4851.1386-.76232.1386c-2.53928.70353-3.423,2.88006-3.7432,5.26831l-.06931,1.03952v3.88181l-.0693,8.24872-.1386.41581-.1386.13859-.4158.1386h-4.22831l-.27721-.0693-.1386-.0693-.20838-.1386v-.2079l-.0693-.2079V54.2528l.0693-.2079V53.837l.2079-.13861.1386-.0693.27721-.06929Zm-12.477,12.26962-1.04.0693-1.10882.2079c-2.30748.65717-4.2957,2.55793-3.8818,5.12923l.2772.62418.34651.55441.55441.34651.693.2772.76278.1386h.90139l1.03952-.0693.90091-.34651.83161-.55441,1.24789-1.386V66.52242l-.0693-.34651-.1386-.1386-.1386-.0693-.3465-.06931-.06931-.0693h-.76231Zm-8.318-12.26914h7.76314l1.3865.0693,1.17859.27721a6.7129,6.7129,0,0,1,4.78273,5.61481l.2079,1.66322.1386,1.94091v7.83339l.0693.83162.2079.6237.27721.4158.2772.27721.2772.0693.27721.06931h.06978l.2079.0693.2079.1386.1386.0693.1386.2772.0693.20839v2.91064l-.0693.20838-.1386.2772-.1386.1386-.2079.1386a8.34712,8.34712,0,0,1-4.9911-.90091l-.76231-.6237-.55441-.55441h-.2079l-.1386.20742h-.1386l-.1386.1386c-11.40359,7.23789-20.06621-8.48626-6.932-13.79375l1.6637-.41581,1.733-.1386,2.35671-.0693h.41581l.2079-.1386.1386-.20791v-.48558l-.06931-.1386-.2772-.83161-.34651-.55441-.48511-.41581-.4851-.2772-.48559-.13861-.4158-.06978-.2079-.0693H85.04648l-.2079-.0693-.2079-.1386-.1386-.0693-.1386-.2079-.06978-.2772v-3.1195l.0693-.27721.1386-.2079.1386-.0693.20838-.1386.20791-.0693Z"/><path class="cls-4" d="M128.85422,57.51138l-1.24741.1386-1.04.3465c-4.49023,2.21333-4.6164,12.48278-.20791,14.76445l.9014.27721,1.10881.13859,1.24742-.13859c2.05322-.17684,3.51571-2.12922,4.09019-3.95111l.2079-.97022.27721-1.9409c.043-2.67215-.1061-6.03731-2.426-7.83292l-.83161-.41581-.90139-.2772Zm5.75341-11.36822h4.57482l.41581.2772.06929.41581V71.02793l.06978.83162.2079.55441.34651.41628.34651.27721.2772.0693.2079.0693h.06929l.2079.06931.34651.2079.13861.48558v2.91064l-.13861.48559-.1386.1386-.20791.1386-.2079.0693h-1.24741l-.76279-.0693-.83161-.1386-1.04-.34651-.90091-.4158-.76231-.62371-.55441-.48558-.13861-.06931h-.20838l-.0693.06931-.6237.3465-.83162.41581-1.04.4158-1.17859.48559c-8.17895,2.047-13.57534-4.137-13.44725-11.99145l.0693-1.733.2772-1.733c1.36356-7.02855,7.9113-10.97392,14.62585-8.11012l.62371.3465.4158.27721h.347l.0693-.1386V54.184l.06931-.0693V46.698l.2079-.3465.1386-.13861.2079-.06978Z"/><path class="cls-3" d="M188.11992,53.35236h3.5353l.20791.0693.1386.13861.0693.3465v7.69432h.1386l.13861-.13861v-.0693a7.04918,7.04918,0,0,1,7.83292-1.733l1.03951.55441.76279.76231.693.83161.34651,1.1093.3465,1.10881.0693,1.2479V77.12784l-.0693.20791-.06929.13859-.2079.1386-.20791.06931h-3.18831l-.2079-.06931-.347-.3465V65.0666l-.2079-.693-.2772-.62371-.41581-.48558-.5544-.48511-.7628-.2079-.97021-.1386c-2.49674-.00812-3.55107,2.07616-3.88181,4.22832V77.12784l-.0693.1386V77.405l-.1386.06931-.20791.1386h-3.3274l-.2079-.06931-.2772-.2079-.06929-.2079V53.76815l.1386-.2079.2079-.2079ZM21.06736,73.17673h1.17811V75.672H21.06736V73.17673Zm9.28823-1.10881h1.10882V75.672H30.35559Zm-10.46683-.1386h1.17859v1.24741H19.88828V71.92932ZM18.71064,70.8205h1.17812v1.10882H18.71064Zm12.75425-1.04H32.643v2.28741H31.46489Zm-13.86354-1.3172h1.10882V70.82H17.60135Zm-1.17859-1.17859h1.17859v1.17859H16.42276ZM32.643,66.1759h1.1786v3.60461H32.643v-3.6046ZM15.24464,64.99684h1.17812v2.28741H15.24464Zm1.17812-1.17812h2.28789v1.17812H16.42276ZM33.8216,61.18481h1.17811v4.99062H33.8216Zm-3.466-3.1888h1.10882v2.01021H33.8216v1.17859H31.46489v3.812H30.35512V57.996Zm-10.46683,0h1.17859v9.28824H19.88828V66.17543H18.71017V64.99684h1.17811V57.996Zm6.93153-1.17859h3.5353V57.996H27.99888v5.82271H26.82029Zm-5.75293,0h3.46552v7.0013H23.35476V57.996h-2.2874Zm3.46552-1.10882h2.28741v1.10882H24.53288Z"/><path class="cls-4" d="M12.33352,57.30348h1.386V74.00883a2.87428,2.87428,0,0,0,2.9116,2.91064H33.5444v1.387H16.56184a4.21568,4.21568,0,0,1-4.22832-4.22831Zm4.29762-4.22832H33.61369l1.10882.13861.97021.4158.90139.693.693.83161.41581.97069.1386,1.1786V74.00883H36.52529V57.37278a2.88054,2.88054,0,0,0-2.98042-2.9809H16.63114Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:none;}.cls-3{fill:#0011f6;stroke:#0011f6;}.cls-3,.cls-4{stroke-linecap:round;stroke-linejoin:round;stroke-width:0.06931px;fill-rule:evenodd;}.cls-4{fill:#fe7d02;stroke:#fe7d02;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path class="cls-2" d="M12.29864,3.67745h191.175v117.0947H12.29864Z"/><path class="cls-3" d="M167.117,73.73114h2.63439l.27719.06931.13861.0693.13861.20838.06929.2079v2.63344l-.1386.347-.13861.1386-.13861.0693H166.909l-.1386-.0693-.13861-.1386-.13861-.34651V74.286l.0693-.2079.13861-.20839.1386-.0693.2772-.0693Z"/><path class="cls-4" d="M75.41125,53.55979H80.541l.48511.13908.2079.34651.0693.2079v3.1888l-.0693.2772-.1386.2079-.0693.0693-.27721.1386-.2079.0693h-3.7432l-1.386.13861-1.10929.3465-1.10882.55441-.90139.76279-.693,1.03951c-1.74351,3.84262-1.28565,10.88646,3.95063,11.784l1.386.06931H80.541l.2079.0693.27721.1386.0693.0693.1386.27721.0693.2079V76.92l-.0693.2079-.2079.34651-.48511.1386h-5.1297l-1.80183-.1386-1.5944-.4158-1.5944-.693-1.31719-.90139L67.92531,74.286c-4.74735-5.44371-4.018-15.67014,2.49484-19.47786l1.59488-.693,1.59392-.347,1.8023-.20791Z"/><path class="cls-3" d="M180.35677,59.03648h3.95063l.347.1386.2772.27721V62.2941l-.2772.27721-.347.0693h-2.84182l-1.17812.1386-1.04.3465-.90091.62419-.693.83161-.48558.97021-.34651,1.1786-.06929,1.4558.06929,1.24741.2079,1.10882.34651.9707.48512.90139.693.693.83209.4851.97021.27721,1.1786.1386h2.98089l.13861.13859.13861.06978.1386.2079v2.84182l-.2772.2079-.1386.1386c-4.85106.13621-8.68556.42536-11.15985-4.43622l-.62418-1.4558-.34651-1.59392c-.63327-4.20442.8861-8.89681,5.12922-10.53613l1.386-.41581,1.45627-.1386Z"/><path class="cls-4" d="M153.73948,57.37278l-1.17859.1386-.97022.41581-.90138.5544a8.0571,8.0571,0,0,0-2.426,6.16922l.0693,1.386.06929,1.2479c.48273,2.30127.85121,4.25268,3.119,5.40691l1.04.3465,1.17811.1386,1.04-.1386,1.03951-.3465c1.972-1.24073,2.7185-3.25571,2.98041-5.47621l.13861-1.17811.06978-1.1786c-.065-2.17748-.5028-5.1536-2.42649-6.51572l-.83161-.55441-.97021-.27721-1.04-.1386Zm.13861-4.64412,1.94042.2079,1.733.4158c9.74371,3.17686,9.6247,23.04328-2.07952,24.3992l-1.87159.0693-1.733-.0693c-11.64255-1.06485-12.2978-21.30646-1.80182-24.39919l1.87113-.48511,1.94091-.1386Zm-96.281-6.58551h4.08971l.27721.0693.3465.27721.0693.41581v4.02088l-.0693.48511-.3465.2079-.27721.0693H57.59708l-.2772-.0693-.20791-.1386-.1386-.0693-.0693-.2772-.06978-.20791V46.90594l.06978-.2079.0693-.2079.1386-.1386.20791-.13861Zm0,7.41664h4.08971l.27721.06978.1386.0693.2079.1386v.20791l.0693.2079V76.91994l-.0693.2079v.20791l-.2079.13859-.1386.06931-.27721.0693H57.59708l-.48511-.1386-.2079-.34651-.06978-.2079V54.2528l.06978-.2079.2079-.34651Zm-14.07144,0h4.159l.4158.13908.27721.34651.06978.2079v1.04h.2772l.0693-.0693.0693-.0693.34651-.2079.76231-.55441.97021-.48558,1.10929-.2079,1.04-.13861h.90092l.2079.0693.3465.34651.13861.4158v2.9809l-.0693.2772-.13861.20791-.06929.1386-.27721.0693-.2079.0693h-.1386l-.27721.0693-.4851.1386-.693.1386-1.04.41581c-2.17079,1.06293-2.752,3.69589-2.84181,5.892V76.91947l-.0693.20838-.27721.34651-.4158.1386h-4.1595l-.4851-.1386-.20791-.34651-.0693-.2079V54.2528l.0693-.2079.20791-.34651Zm62.31589,0h4.22832c.89613.13908.65143.87941.693,1.59488l.06931.1386h.2772l.0693-.0693.34651-.2772.76279-.55441,1.03951-.48559,1.10882-.2079,1.04-.1386h.83162l.20838.0693.2772.1386.06931.2079.13859.2079.06931.20791v2.98089l-.06931.27721-.13859.2079-.06931.1386-.2772.0693-.20838.0693h-.1386l-.27721.0693-.4851.1386-.76232.1386c-2.53928.70353-3.423,2.88006-3.7432,5.26831l-.06931,1.03952v3.88181l-.0693,8.24872-.1386.41581-.1386.13859-.4158.1386h-4.22831l-.27721-.0693-.1386-.0693-.20838-.1386v-.2079l-.0693-.2079V54.2528l.0693-.2079V53.837l.2079-.13861.1386-.0693.27721-.06929Zm-12.477,12.26962-1.04.0693-1.10882.2079c-2.30748.65717-4.2957,2.55793-3.8818,5.12923l.2772.62418.34651.55441.55441.34651.693.2772.76278.1386h.90139l1.03952-.0693.90091-.34651.83161-.55441,1.24789-1.386V66.52242l-.0693-.34651-.1386-.1386-.1386-.0693-.3465-.06931-.06931-.0693h-.76231Zm-8.318-12.26914h7.76314l1.3865.0693,1.17859.27721a6.7129,6.7129,0,0,1,4.78273,5.61481l.2079,1.66322.1386,1.94091v7.83339l.0693.83162.2079.6237.27721.4158.2772.27721.2772.0693.27721.06931h.06978l.2079.0693.2079.1386.1386.0693.1386.2772.0693.20839v2.91064l-.0693.20838-.1386.2772-.1386.1386-.2079.1386a8.34712,8.34712,0,0,1-4.9911-.90091l-.76231-.6237-.55441-.55441h-.2079l-.1386.20742h-.1386l-.1386.1386c-11.40359,7.23789-20.06621-8.48626-6.932-13.79375l1.6637-.41581,1.733-.1386,2.35671-.0693h.41581l.2079-.1386.1386-.20791v-.48558l-.06931-.1386-.2772-.83161-.34651-.55441-.48511-.41581-.4851-.2772-.48559-.13861-.4158-.06978-.2079-.0693H85.04648l-.2079-.0693-.2079-.1386-.1386-.0693-.1386-.2079-.06978-.2772v-3.1195l.0693-.27721.1386-.2079.1386-.0693.20838-.1386.20791-.0693Z"/><path class="cls-4" d="M128.85422,57.51138l-1.24741.1386-1.04.3465c-4.49023,2.21333-4.6164,12.48278-.20791,14.76445l.9014.27721,1.10881.13859,1.24742-.13859c2.05322-.17684,3.51571-2.12922,4.09019-3.95111l.2079-.97022.27721-1.9409c.043-2.67215-.1061-6.03731-2.426-7.83292l-.83161-.41581-.90139-.2772Zm5.75341-11.36822h4.57482l.41581.2772.06929.41581V71.02793l.06978.83162.2079.55441.34651.41628.34651.27721.2772.0693.2079.0693h.06929l.2079.06931.34651.2079.13861.48558v2.91064l-.13861.48559-.1386.1386-.20791.1386-.2079.0693h-1.24741l-.76279-.0693-.83161-.1386-1.04-.34651-.90091-.4158-.76231-.62371-.55441-.48558-.13861-.06931h-.20838l-.0693.06931-.6237.3465-.83162.41581-1.04.4158-1.17859.48559c-8.17895,2.047-13.57534-4.137-13.44725-11.99145l.0693-1.733.2772-1.733c1.36356-7.02855,7.9113-10.97392,14.62585-8.11012l.62371.3465.4158.27721h.347l.0693-.1386V54.184l.06931-.0693V46.698l.2079-.3465.1386-.13861.2079-.06978Z"/><path class="cls-3" d="M188.11992,53.35236h3.5353l.20791.0693.1386.13861.0693.3465v7.69432h.1386l.13861-.13861v-.0693a7.04918,7.04918,0,0,1,7.83292-1.733l1.03951.55441.76279.76231.693.83161.34651,1.1093.3465,1.10881.0693,1.2479V77.12784l-.0693.20791-.06929.13859-.2079.1386-.20791.06931h-3.18831l-.2079-.06931-.347-.3465V65.0666l-.2079-.693-.2772-.62371-.41581-.48558-.5544-.48511-.7628-.2079-.97021-.1386c-2.49674-.00812-3.55107,2.07616-3.88181,4.22832V77.12784l-.0693.1386V77.405l-.1386.06931-.20791.1386h-3.3274l-.2079-.06931-.2772-.2079-.06929-.2079V53.76815l.1386-.2079.2079-.2079ZM21.06736,73.17673h1.17811V75.672H21.06736V73.17673Zm9.28823-1.10881h1.10882V75.672H30.35559Zm-10.46683-.1386h1.17859v1.24741H19.88828V71.92932ZM18.71064,70.8205h1.17812v1.10882H18.71064Zm12.75425-1.04H32.643v2.28741H31.46489Zm-13.86354-1.3172h1.10882V70.82H17.60135Zm-1.17859-1.17859h1.17859v1.17859H16.42276ZM32.643,66.1759h1.1786v3.60461H32.643v-3.6046ZM15.24464,64.99684h1.17812v2.28741H15.24464Zm1.17812-1.17812h2.28789v1.17812H16.42276ZM33.8216,61.18481h1.17811v4.99062H33.8216Zm-3.466-3.1888h1.10882v2.01021H33.8216v1.17859H31.46489v3.812H30.35512V57.996Zm-10.46683,0h1.17859v9.28824H19.88828V66.17543H18.71017V64.99684h1.17811V57.996Zm6.93153-1.17859h3.5353V57.996H27.99888v5.82271H26.82029Zm-5.75293,0h3.46552v7.0013H23.35476V57.996h-2.2874Zm3.46552-1.10882h2.28741v1.10882H24.53288Z"/><path class="cls-4" d="M12.33352,57.30348h1.386V74.00883a2.87428,2.87428,0,0,0,2.9116,2.91064H33.5444v1.387H16.56184a4.21568,4.21568,0,0,1-4.22832-4.22831Zm4.29762-4.22832H33.61369l1.10882.13861.97021.4158.90139.693.693.83161.41581.97069.1386,1.1786V74.00883H36.52529V57.37278a2.88054,2.88054,0,0,0-2.98042-2.9809H16.63114Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/slamtec/slamtec_featured_logo.svg b/content/en/case-studies/slamtec/slamtec_featured_logo.svg
index 2a8fde7017..7b4f6d6af1 100644
--- a/content/en/case-studies/slamtec/slamtec_featured_logo.svg
+++ b/content/en/case-studies/slamtec/slamtec_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path d="M78.7837,40.58449a127.07152,127.07152,0,0,1,4.77722,12.6033q4.52443,12.92355,8.91651,25.89268c.49794,1.47446,1.30679,1.85809,2.79391,1.85618q49.71056-.06363,99.42114.001c1.00545.00144,2.8626-.85178,2.92019.98986.06657,2.1282-1.928,1.133-2.94019,1.13484q-51.41795.09252-102.83611.05649c-3.344.00027-3.35735.00667-4.45258-3.14555q-4.29761-12.3691-8.5725-24.746a1.4883,1.4883,0,0,0-.7015-1.05833c-.97869.9407-1.1834,2.29374-1.60928,3.48371-2.76218,7.7179-5.496,15.44667-8.13,23.20858a2.9402,2.9402,0,0,1-3.32545,2.31833c-15.33117-.07857-30.66291-.04863-45.99447-.0536q-.70251-.00022-1.40488-.037a.93513.93513,0,0,1-.975-1.02965.97833.97833,0,0,1,1.05512-1.15669c.60214-.01554,1.20474-.01811,1.80713-.01794,14.39438.00413,28.78888-.017,43.183.05144A2.56023,2.56023,0,0,0,65.60279,78.939q6.35242-17.898,12.32132-35.92519C78.12877,42.39161,78.3603,41.77819,78.7837,40.58449Z"/><path d="M98.94033,55.4277c0,2.47326-.00053,4.71366.00012,6.95407.00139,4.86546-.02821,9.73126.02542,14.59616.015,1.36419-.24586,2.04114-1.86305,2.03723-1.62585-.00394-1.64077-.78635-1.63647-1.99266.03116-8.73087.04326-17.46215-.02081-26.1927-.0109-1.4856.41926-1.99252,1.93436-1.929,5.7277.24,4.16023-1.01728,6.524,4.15966,1.71637,3.759,3.33954,7.56023,5.00472,11.34242a3.2354,3.2354,0,0,0,1.13022,1.7517c1.81273-2.78562,2.80706-5.8949,4.11551-8.85173.97119-2.19469,1.91711-4.4032,2.78008-6.64154a2.45122,2.45122,0,0,1,2.71325-1.759c4.46735.052,4.46774-.01725,4.46838,4.42154.00113,7.86458-.03317,15.72948.03514,23.59349.0134,1.5427-.39,2.12061-2.02183,2.07809-4.25689-.11093-3.483.25329-3.50988-3.53923-.04624-6.52274-.0128-13.046-.0128-19.60061-.983-.018-.91961.75536-1.11267,1.22829-2.54443,6.23272-5.053,12.48-7.60169,18.71093-.20631.50436-.17846,1.36495-.954,1.34213-.61636-.01814-.61078-.78681-.82376-1.2429-2.90688-6.22493-5.43924-12.60758-8.039-18.96189A2.10448,2.10448,0,0,0,98.94033,55.4277Z"/><path d="M28.59654,79.21479a28.77851,28.77851,0,0,1-7.73987-1.06823,5.00384,5.00384,0,0,1-1.30451-.4861,1.44773,1.44773,0,0,1-.67926-1.72367c.24539-.59917.95754-.21863,1.45134-.133,3.08986.536,6.152,1.3263,9.337.79208,2.7539-.46193,4.16626-1.77523,4.55333-4.29643.5323-3.46709-.43261-5.75482-2.9556-6.98016-2.32-1.12676-4.8929-1.34714-7.34337-2.00543-4.35309-1.16941-6.32209-3.28954-6.29375-6.86927A8.0813,8.0813,0,0,1,24.33367,48.983a29.76011,29.76011,0,0,1,12.74216.64,1.62577,1.62577,0,0,1,1.309,1.34213c.22863,1.03124.32742,1.75317-1.18843,1.26566a22.29251,22.29251,0,0,0-8.73545-.90014c-2.879.23927-4.6394,1.62887-4.90071,3.59879-.27728,2.09032.87237,3.24777,2.54856,4.06135a52.23688,52.23688,0,0,0,7.62635,2.48454c5.36042,1.65046,6.902,3.66039,6.56047,8.70645-.35245,5.20769-3.03158,8.16738-8.09416,8.85105C31.01342,79.1932,29.79889,79.15929,28.59654,79.21479Z"/><path d="M152.36443,63.81027c0-4.26376.0451-8.52827-.02486-12.7909-.024-1.46222.26024-2.15549,1.96879-2.12189,5.35241.10526,10.70825.03489,16.06275.04089.79455.00089,1.71008-.13111,1.69358,1.11039-.01591,1.19663-.87469,1.125-1.70114,1.12439-3.68123-.0025-7.363.03728-11.04344-.01359-1.27581-.01763-1.8098.38726-1.76667,1.72161.08174,2.52911.07448,5.06349.01567,7.59365-.02818,1.21287.41043,1.65,1.63454,1.62181,2.80952-.06462,5.62167-.03623,8.43248-.01267.80078.00671,1.9236-.371,1.95537,1.01364.03515,1.53064-1.18952,1.12844-2.04389,1.13873-2.60987.03145-5.222.06008-7.83-.01641-1.383-.04055-1.90487.43692-1.868,1.84166q.11532,4.39387-.01033,8.79261c-.044,1.4594.57534,1.81252,1.91224,1.78677,3.47918-.067,6.96053-.03954,10.44083-.01876.80583.00481,1.83808-.30689,1.881,1.10938.04168,1.37771-.91394,1.23161-1.775,1.23224-5.4212.004-10.84279-.03878-16.26331.02027-1.37511.015-1.70979-.54772-1.69776-1.78316.04351-4.46318.01712-8.927.01712-13.39065Z"/><path d="M195.3035,52.4764a15.51155,15.51155,0,0,0-7.58531-1.29683c-4.23717.46433-6.01637,1.97716-7.13067,6.11138a29.8199,29.8199,0,0,0-.89546,10.49581c.60446,6.6395,6.02576,10.26593,12.61437,8.583.51756-.13221,1.02421-.31126,1.546-.42113.55035-.11589,1.298-1.03,1.601.10122a1.46283,1.46283,0,0,1-1.04665,1.89772c-1.35817.34511-2.71832.71766-4.10085.925a20.21684,20.21684,0,0,1-7.968-.26283,9.43788,9.43788,0,0,1-7.01659-5.97562,21.83769,21.83769,0,0,1,.78814-18.37764c1.78206-3.47322,4.581-5.44438,8.664-5.38682,2.73906.03861,5.4842-.15326,8.18586.48379C194.98176,49.83035,195.08335,49.947,195.3035,52.4764Z"/><path d="M140.83,65.0703c0,4.06462-.0331,8.12966.01926,12.19361.01669,1.296-.44838,1.74978-1.75657,1.71819-4.77292-.11529-3.93086.54087-3.95208-3.87-.03525-7.33106-.04974-14.66276.01877-21.99334.014-1.49782-.46439-2.04614-1.94591-1.96693-1.60251.08568-3.213.02339-4.81993.02807-.806.00234-1.48436-.12611-1.46942-1.16887.01536-1.07206.73194-1.08413,1.52068-1.08368q9.74169.00554,19.48339-.015c.83354-.002,1.48038.1494,1.47008,1.16532-.01067,1.05207-.73686,1.10873-1.52641,1.10385-1.3391-.00826-2.67828-.00114-4.01744-.00054-2.79167.00126-2.79252.00125-2.79311,2.69244q-.00123,5.59837-.00021,11.19675Z"/><path d="M43.68214,63.93821c-.00276-4.26552.0648-8.53261-.03557-12.79579-.04092-1.73813.47679-2.52215,2.281-2.20788a3.27169,3.27169,0,0,0,1.00155-.01257c1.73453-.24523,2.30855.42241,2.28679,2.21168-.094,7.73012.017,15.46276-.08315,23.19273-.02446,1.88749.57552,2.39248,2.41056,2.32484,3.74462-.138,7.49788-.0419,11.24759-.04573.8555-.00087,1.6484.04586,1.63628,1.21764-.01256,1.21235-.861,1.13418-1.68568,1.13363-5.758-.00384-11.51638-.03736-17.27383.01973-1.40162.01389-1.84424-.42473-1.81544-1.84254C43.74156,72.73695,43.68491,68.337,43.68214,63.93821Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><path d="M78.7837,40.58449a127.07152,127.07152,0,0,1,4.77722,12.6033q4.52443,12.92355,8.91651,25.89268c.49794,1.47446,1.30679,1.85809,2.79391,1.85618q49.71056-.06363,99.42114.001c1.00545.00144,2.8626-.85178,2.92019.98986.06657,2.1282-1.928,1.133-2.94019,1.13484q-51.41795.09252-102.83611.05649c-3.344.00027-3.35735.00667-4.45258-3.14555q-4.29761-12.3691-8.5725-24.746a1.4883,1.4883,0,0,0-.7015-1.05833c-.97869.9407-1.1834,2.29374-1.60928,3.48371-2.76218,7.7179-5.496,15.44667-8.13,23.20858a2.9402,2.9402,0,0,1-3.32545,2.31833c-15.33117-.07857-30.66291-.04863-45.99447-.0536q-.70251-.00022-1.40488-.037a.93513.93513,0,0,1-.975-1.02965.97833.97833,0,0,1,1.05512-1.15669c.60214-.01554,1.20474-.01811,1.80713-.01794,14.39438.00413,28.78888-.017,43.183.05144A2.56023,2.56023,0,0,0,65.60279,78.939q6.35242-17.898,12.32132-35.92519C78.12877,42.39161,78.3603,41.77819,78.7837,40.58449Z"/><path d="M98.94033,55.4277c0,2.47326-.00053,4.71366.00012,6.95407.00139,4.86546-.02821,9.73126.02542,14.59616.015,1.36419-.24586,2.04114-1.86305,2.03723-1.62585-.00394-1.64077-.78635-1.63647-1.99266.03116-8.73087.04326-17.46215-.02081-26.1927-.0109-1.4856.41926-1.99252,1.93436-1.929,5.7277.24,4.16023-1.01728,6.524,4.15966,1.71637,3.759,3.33954,7.56023,5.00472,11.34242a3.2354,3.2354,0,0,0,1.13022,1.7517c1.81273-2.78562,2.80706-5.8949,4.11551-8.85173.97119-2.19469,1.91711-4.4032,2.78008-6.64154a2.45122,2.45122,0,0,1,2.71325-1.759c4.46735.052,4.46774-.01725,4.46838,4.42154.00113,7.86458-.03317,15.72948.03514,23.59349.0134,1.5427-.39,2.12061-2.02183,2.07809-4.25689-.11093-3.483.25329-3.50988-3.53923-.04624-6.52274-.0128-13.046-.0128-19.60061-.983-.018-.91961.75536-1.11267,1.22829-2.54443,6.23272-5.053,12.48-7.60169,18.71093-.20631.50436-.17846,1.36495-.954,1.34213-.61636-.01814-.61078-.78681-.82376-1.2429-2.90688-6.22493-5.43924-12.60758-8.039-18.96189A2.10448,2.10448,0,0,0,98.94033,55.4277Z"/><path d="M28.59654,79.21479a28.77851,28.77851,0,0,1-7.73987-1.06823,5.00384,5.00384,0,0,1-1.30451-.4861,1.44773,1.44773,0,0,1-.67926-1.72367c.24539-.59917.95754-.21863,1.45134-.133,3.08986.536,6.152,1.3263,9.337.79208,2.7539-.46193,4.16626-1.77523,4.55333-4.29643.5323-3.46709-.43261-5.75482-2.9556-6.98016-2.32-1.12676-4.8929-1.34714-7.34337-2.00543-4.35309-1.16941-6.32209-3.28954-6.29375-6.86927A8.0813,8.0813,0,0,1,24.33367,48.983a29.76011,29.76011,0,0,1,12.74216.64,1.62577,1.62577,0,0,1,1.309,1.34213c.22863,1.03124.32742,1.75317-1.18843,1.26566a22.29251,22.29251,0,0,0-8.73545-.90014c-2.879.23927-4.6394,1.62887-4.90071,3.59879-.27728,2.09032.87237,3.24777,2.54856,4.06135a52.23688,52.23688,0,0,0,7.62635,2.48454c5.36042,1.65046,6.902,3.66039,6.56047,8.70645-.35245,5.20769-3.03158,8.16738-8.09416,8.85105C31.01342,79.1932,29.79889,79.15929,28.59654,79.21479Z"/><path d="M152.36443,63.81027c0-4.26376.0451-8.52827-.02486-12.7909-.024-1.46222.26024-2.15549,1.96879-2.12189,5.35241.10526,10.70825.03489,16.06275.04089.79455.00089,1.71008-.13111,1.69358,1.11039-.01591,1.19663-.87469,1.125-1.70114,1.12439-3.68123-.0025-7.363.03728-11.04344-.01359-1.27581-.01763-1.8098.38726-1.76667,1.72161.08174,2.52911.07448,5.06349.01567,7.59365-.02818,1.21287.41043,1.65,1.63454,1.62181,2.80952-.06462,5.62167-.03623,8.43248-.01267.80078.00671,1.9236-.371,1.95537,1.01364.03515,1.53064-1.18952,1.12844-2.04389,1.13873-2.60987.03145-5.222.06008-7.83-.01641-1.383-.04055-1.90487.43692-1.868,1.84166q.11532,4.39387-.01033,8.79261c-.044,1.4594.57534,1.81252,1.91224,1.78677,3.47918-.067,6.96053-.03954,10.44083-.01876.80583.00481,1.83808-.30689,1.881,1.10938.04168,1.37771-.91394,1.23161-1.775,1.23224-5.4212.004-10.84279-.03878-16.26331.02027-1.37511.015-1.70979-.54772-1.69776-1.78316.04351-4.46318.01712-8.927.01712-13.39065Z"/><path d="M195.3035,52.4764a15.51155,15.51155,0,0,0-7.58531-1.29683c-4.23717.46433-6.01637,1.97716-7.13067,6.11138a29.8199,29.8199,0,0,0-.89546,10.49581c.60446,6.6395,6.02576,10.26593,12.61437,8.583.51756-.13221,1.02421-.31126,1.546-.42113.55035-.11589,1.298-1.03,1.601.10122a1.46283,1.46283,0,0,1-1.04665,1.89772c-1.35817.34511-2.71832.71766-4.10085.925a20.21684,20.21684,0,0,1-7.968-.26283,9.43788,9.43788,0,0,1-7.01659-5.97562,21.83769,21.83769,0,0,1,.78814-18.37764c1.78206-3.47322,4.581-5.44438,8.664-5.38682,2.73906.03861,5.4842-.15326,8.18586.48379C194.98176,49.83035,195.08335,49.947,195.3035,52.4764Z"/><path d="M140.83,65.0703c0,4.06462-.0331,8.12966.01926,12.19361.01669,1.296-.44838,1.74978-1.75657,1.71819-4.77292-.11529-3.93086.54087-3.95208-3.87-.03525-7.33106-.04974-14.66276.01877-21.99334.014-1.49782-.46439-2.04614-1.94591-1.96693-1.60251.08568-3.213.02339-4.81993.02807-.806.00234-1.48436-.12611-1.46942-1.16887.01536-1.07206.73194-1.08413,1.52068-1.08368q9.74169.00554,19.48339-.015c.83354-.002,1.48038.1494,1.47008,1.16532-.01067,1.05207-.73686,1.10873-1.52641,1.10385-1.3391-.00826-2.67828-.00114-4.01744-.00054-2.79167.00126-2.79252.00125-2.79311,2.69244q-.00123,5.59837-.00021,11.19675Z"/><path d="M43.68214,63.93821c-.00276-4.26552.0648-8.53261-.03557-12.79579-.04092-1.73813.47679-2.52215,2.281-2.20788a3.27169,3.27169,0,0,0,1.00155-.01257c1.73453-.24523,2.30855.42241,2.28679,2.21168-.094,7.73012.017,15.46276-.08315,23.19273-.02446,1.88749.57552,2.39248,2.41056,2.32484,3.74462-.138,7.49788-.0419,11.24759-.04573.8555-.00087,1.6484.04586,1.63628,1.21764-.01256,1.21235-.861,1.13418-1.68568,1.13363-5.758-.00384-11.51638-.03736-17.27383.01973-1.40162.01389-1.84424-.42473-1.81544-1.84254C43.74156,72.73695,43.68491,68.337,43.68214,63.93821Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/slingtv/slingtv_featured_logo.svg b/content/en/case-studies/slingtv/slingtv_featured_logo.svg
index 36077bc1ac..764f8ddd88 100644
--- a/content/en/case-studies/slingtv/slingtv_featured_logo.svg
+++ b/content/en/case-studies/slingtv/slingtv_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:#fbfbfb;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#31acdf;}.cls-5{fill:#f9a535;}</style><clipPath id="clip-path"><rect class="cls-1" x="14.02376" y="15.2778" width="190.82607" height="92.95815"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-2" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M14.02376,77.77641l7.036-4.89415c2.651,3.77172,6.62813,5.5057,11.52228,5.5057,5.19963,0,7.54517-1.734,7.54517-4.58808,0-3.46681-3.15959-3.97654-10.40043-6.01658C23.40532,66.05047,17.08268,63.09338,17.08268,54.63c0-8.56519,6.83294-12.64413,15.29631-12.64413a19.43628,19.43628,0,0,1,14.88726,6.42389L41.24909,54.324a11.556,11.556,0,0,0-8.8701-4.18076c-3.87528,0-6.01716,1.42791-6.01716,3.97711,0,3.26257,2.651,3.97653,9.38156,5.70993,6.72938,1.73341,14.07089,4.38443,14.07089,13.45934,0,7.34267-4.48567,13.35752-16.62066,13.35752C23.40532,86.64709,16.8796,82.36507,14.02376,77.77641Z"/></g><g class="cls-3"><path class="cls-4" d="M57.51278,19.61594h10.2986V85.73005H57.51278Z"/></g><g class="cls-3"><path class="cls-5" d="M75.51045,25.33167a6.83208,6.83208,0,1,1,6.83121,6.83121A6.74493,6.74493,0,0,1,75.51045,25.33167Z"/></g><g class="cls-3"><path class="cls-4" d="M96.87367,42.9035h10.298l-.20482,7.95364a15.49847,15.49847,0,0,1,14.4788-8.87125c9.484,0,16.01026,6.73,16.01026,18.35407V85.73005h-10.2986V61.15574c0-6.11783-2.85583-9.68646-8.87126-9.68646-6.73053,0-11.11438,4.07835-11.11438,11.012v23.2488h-10.298Z"/></g><g class="cls-3"><path class="cls-5" d="M92.64719,18.56063a11.23125,11.23125,0,0,1,2.16908,7.16273A12.15071,12.15071,0,0,1,93.05162,32.204a7.15587,7.15587,0,0,0-.40443-13.64332Z"/></g><g class="cls-3"><path class="cls-5" d="M99.10291,16.472a14.67058,14.67058,0,0,1,2.83269,9.3561,15.86537,15.86537,0,0,1-2.305,8.4651,9.34676,9.34676,0,0,0-.52766-17.8212Z"/></g><g class="cls-3"><path class="cls-5" d="M107.15318,15.2778c2.13666,2.73029,3.21224,6.22776,3.21224,10.60987a17.99014,17.99014,0,0,1-2.614,9.59911,10.59913,10.59913,0,0,0-.59824-20.209Z"/></g><g class="cls-3"><path class="cls-4" d="M166.47656,77.57275c-7.44391,0-12.13325-5.30262-12.13325-13.35809,0-7.74941,4.68934-13.052,12.13325-13.052,7.54576,0,12.44107,5.30262,12.44107,13.052C178.91763,72.27013,174.02232,77.57275,166.47656,77.57275Zm2.83849,30.66321c12.13673-.24416,19.59569-7.41268,19.59569-21.89436V42.9035H178.6104l.30723,7.95364c-2.75285-5.20021-7.75-8.87125-15.29457-8.87125-10.91132,0-19.885,9.27915-19.885,22.22877,0,12.95019,8.97366,22.43243,20.088,22.43243,7.13728,0,12.23567-3.46623,14.78428-8.25913V85.8313c0,8.711-3.09363,13.54092-9.06449,13.54092H149.73036V108.236Z"/></g><g class="cls-3"><path class="cls-4" d="M77.142,42.9035H87.54245V85.73005H77.142Z"/></g><g class="cls-3"><path class="cls-4" d="M22.17123,107.75227H20.84745v-6.96486H18.46489V99.65167h6.0889v1.13574H22.17123Z"/></g><g class="cls-3"><path class="cls-4" d="M36.97112,107.75227H32.3894v-8.1006h4.58172v1.119H33.71318v2.20552h3.05313v1.108H33.71318v2.5434h3.25794Z"/></g><g class="cls-3"><path class="cls-4" d="M45.21405,107.75227v-8.1006h1.32436v6.96486h3.42977v1.13574Z"/></g><g class="cls-3"><path class="cls-4" d="M62.46536,107.75227H57.88364v-8.1006h4.58172v1.119H59.20742v2.20552h3.05313v1.108H59.20742v2.5434h3.25794Z"/></g><g class="cls-3"><path class="cls-4" d="M75.71294,99.65167h1.37412l-2.83675,8.1006H72.85364l-2.82576-8.1006H71.391l1.69,5.03648q.13365.36017.28293.928.14926.56758.19324.84472.0729-.42091.22217-.9749.14928-.55456.24358-.82042Z"/></g><g class="cls-3"><path class="cls-4" d="M84.84167,107.75227v-8.1006H86.166v8.1006Z"/></g><g class="cls-3"><path class="cls-4" d="M99.586,105.55254a2.03869,2.03869,0,0,1-.78107,1.69522,3.40027,3.40027,0,0,1-2.15576.615,5.14871,5.14871,0,0,1-2.24949-.4264v-1.252a6.13765,6.13765,0,0,0,1.17738.41021,5.03667,5.03667,0,0,0,1.16063.14928,1.84658,1.84658,0,0,0,1.16119-.29912.976.976,0,0,0,.37376-.80364,1.00646,1.00646,0,0,0-.34309-.77008,5.17009,5.17009,0,0,0-1.41866-.74809,3.75928,3.75928,0,0,1-1.56273-1.02466,2.17311,2.17311,0,0,1-.45418-1.38568,1.93962,1.93962,0,0,1,.72032-1.59513,2.9857,2.9857,0,0,1,1.9336-.582,5.67507,5.67507,0,0,1,2.316.50972l-.42062,1.0802a5.0706,5.0706,0,0,0-1.929-.45418,1.478,1.478,0,0,0-.97432.27945.917.917,0,0,0-.33268.74,1.04219,1.04219,0,0,0,.13249.54039,1.35646,1.35646,0,0,0,.438.42351,7.34485,7.34485,0,0,0,1.097.52651,5.98782,5.98782,0,0,1,1.30758.69255,2.03509,2.03509,0,0,1,.60982.7261A2.17843,2.17843,0,0,1,99.586,105.55254Z"/></g><g class="cls-3"><path class="cls-4" d="M107.70572,107.75227v-8.1006h1.32434v8.1006Z"/></g><g class="cls-3"><path class="cls-4" d="M118.72348,103.69069a3.63363,3.63363,0,0,0,.604,2.26858,2.45682,2.45682,0,0,0,3.571.00868,4.59964,4.59964,0,0,0,.0052-4.53775,2.10307,2.10307,0,0,0-1.77505-.77007,2.14906,2.14906,0,0,0-1.79821.77007A3.59494,3.59494,0,0,0,118.72348,103.69069Zm6.18378,0a4.43181,4.43181,0,0,1-.98878,3.07511,4.15767,4.15767,0,0,1-5.6191.00811,4.46188,4.46188,0,0,1-.983-3.09421,4.39145,4.39145,0,0,1,.98878-3.0809,3.64656,3.64656,0,0,1,2.82344-1.07442,3.56648,3.56648,0,0,1,2.79219,1.09177A4.42233,4.42233,0,0,1,124.90726,103.69069Z"/></g><g class="cls-3"><path class="cls-4" d="M139.91487,107.75227h-1.62348l-3.984-6.45514h-.044l.02777.35987q.07724,1.031.07695,1.88442v4.21085h-1.20228v-8.1006h1.6067l3.97306,6.42158h.033q-.01128-.12844-.044-.928-.033-.801-.03356-1.24913V99.65167h1.21385Z"/></g><g class="cls-3"><path class="cls-4" d="M201.36856,48.63311l-1.57486-4.38153h-.06307l.04744,1.01077v3.37076h-.93266v-5.6515h1.46552l1.53611,4.38153,1.59166-4.38153h1.41114v5.6515h-.99571V45.341l.04686-1.07441h-.06249l-1.65356,4.36649Zm-4.70263,0h-.96448V43.81244h-1.63852v-.83083h4.25714v.83083h-1.65414Z"/></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:transparent;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#31acdf;}.cls-5{fill:#f9a535;}</style><clipPath id="clip-path"><rect class="cls-1" x="14.02376" y="15.2778" width="190.82607" height="92.95815"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-2" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M14.02376,77.77641l7.036-4.89415c2.651,3.77172,6.62813,5.5057,11.52228,5.5057,5.19963,0,7.54517-1.734,7.54517-4.58808,0-3.46681-3.15959-3.97654-10.40043-6.01658C23.40532,66.05047,17.08268,63.09338,17.08268,54.63c0-8.56519,6.83294-12.64413,15.29631-12.64413a19.43628,19.43628,0,0,1,14.88726,6.42389L41.24909,54.324a11.556,11.556,0,0,0-8.8701-4.18076c-3.87528,0-6.01716,1.42791-6.01716,3.97711,0,3.26257,2.651,3.97653,9.38156,5.70993,6.72938,1.73341,14.07089,4.38443,14.07089,13.45934,0,7.34267-4.48567,13.35752-16.62066,13.35752C23.40532,86.64709,16.8796,82.36507,14.02376,77.77641Z"/></g><g class="cls-3"><path class="cls-4" d="M57.51278,19.61594h10.2986V85.73005H57.51278Z"/></g><g class="cls-3"><path class="cls-5" d="M75.51045,25.33167a6.83208,6.83208,0,1,1,6.83121,6.83121A6.74493,6.74493,0,0,1,75.51045,25.33167Z"/></g><g class="cls-3"><path class="cls-4" d="M96.87367,42.9035h10.298l-.20482,7.95364a15.49847,15.49847,0,0,1,14.4788-8.87125c9.484,0,16.01026,6.73,16.01026,18.35407V85.73005h-10.2986V61.15574c0-6.11783-2.85583-9.68646-8.87126-9.68646-6.73053,0-11.11438,4.07835-11.11438,11.012v23.2488h-10.298Z"/></g><g class="cls-3"><path class="cls-5" d="M92.64719,18.56063a11.23125,11.23125,0,0,1,2.16908,7.16273A12.15071,12.15071,0,0,1,93.05162,32.204a7.15587,7.15587,0,0,0-.40443-13.64332Z"/></g><g class="cls-3"><path class="cls-5" d="M99.10291,16.472a14.67058,14.67058,0,0,1,2.83269,9.3561,15.86537,15.86537,0,0,1-2.305,8.4651,9.34676,9.34676,0,0,0-.52766-17.8212Z"/></g><g class="cls-3"><path class="cls-5" d="M107.15318,15.2778c2.13666,2.73029,3.21224,6.22776,3.21224,10.60987a17.99014,17.99014,0,0,1-2.614,9.59911,10.59913,10.59913,0,0,0-.59824-20.209Z"/></g><g class="cls-3"><path class="cls-4" d="M166.47656,77.57275c-7.44391,0-12.13325-5.30262-12.13325-13.35809,0-7.74941,4.68934-13.052,12.13325-13.052,7.54576,0,12.44107,5.30262,12.44107,13.052C178.91763,72.27013,174.02232,77.57275,166.47656,77.57275Zm2.83849,30.66321c12.13673-.24416,19.59569-7.41268,19.59569-21.89436V42.9035H178.6104l.30723,7.95364c-2.75285-5.20021-7.75-8.87125-15.29457-8.87125-10.91132,0-19.885,9.27915-19.885,22.22877,0,12.95019,8.97366,22.43243,20.088,22.43243,7.13728,0,12.23567-3.46623,14.78428-8.25913V85.8313c0,8.711-3.09363,13.54092-9.06449,13.54092H149.73036V108.236Z"/></g><g class="cls-3"><path class="cls-4" d="M77.142,42.9035H87.54245V85.73005H77.142Z"/></g><g class="cls-3"><path class="cls-4" d="M22.17123,107.75227H20.84745v-6.96486H18.46489V99.65167h6.0889v1.13574H22.17123Z"/></g><g class="cls-3"><path class="cls-4" d="M36.97112,107.75227H32.3894v-8.1006h4.58172v1.119H33.71318v2.20552h3.05313v1.108H33.71318v2.5434h3.25794Z"/></g><g class="cls-3"><path class="cls-4" d="M45.21405,107.75227v-8.1006h1.32436v6.96486h3.42977v1.13574Z"/></g><g class="cls-3"><path class="cls-4" d="M62.46536,107.75227H57.88364v-8.1006h4.58172v1.119H59.20742v2.20552h3.05313v1.108H59.20742v2.5434h3.25794Z"/></g><g class="cls-3"><path class="cls-4" d="M75.71294,99.65167h1.37412l-2.83675,8.1006H72.85364l-2.82576-8.1006H71.391l1.69,5.03648q.13365.36017.28293.928.14926.56758.19324.84472.0729-.42091.22217-.9749.14928-.55456.24358-.82042Z"/></g><g class="cls-3"><path class="cls-4" d="M84.84167,107.75227v-8.1006H86.166v8.1006Z"/></g><g class="cls-3"><path class="cls-4" d="M99.586,105.55254a2.03869,2.03869,0,0,1-.78107,1.69522,3.40027,3.40027,0,0,1-2.15576.615,5.14871,5.14871,0,0,1-2.24949-.4264v-1.252a6.13765,6.13765,0,0,0,1.17738.41021,5.03667,5.03667,0,0,0,1.16063.14928,1.84658,1.84658,0,0,0,1.16119-.29912.976.976,0,0,0,.37376-.80364,1.00646,1.00646,0,0,0-.34309-.77008,5.17009,5.17009,0,0,0-1.41866-.74809,3.75928,3.75928,0,0,1-1.56273-1.02466,2.17311,2.17311,0,0,1-.45418-1.38568,1.93962,1.93962,0,0,1,.72032-1.59513,2.9857,2.9857,0,0,1,1.9336-.582,5.67507,5.67507,0,0,1,2.316.50972l-.42062,1.0802a5.0706,5.0706,0,0,0-1.929-.45418,1.478,1.478,0,0,0-.97432.27945.917.917,0,0,0-.33268.74,1.04219,1.04219,0,0,0,.13249.54039,1.35646,1.35646,0,0,0,.438.42351,7.34485,7.34485,0,0,0,1.097.52651,5.98782,5.98782,0,0,1,1.30758.69255,2.03509,2.03509,0,0,1,.60982.7261A2.17843,2.17843,0,0,1,99.586,105.55254Z"/></g><g class="cls-3"><path class="cls-4" d="M107.70572,107.75227v-8.1006h1.32434v8.1006Z"/></g><g class="cls-3"><path class="cls-4" d="M118.72348,103.69069a3.63363,3.63363,0,0,0,.604,2.26858,2.45682,2.45682,0,0,0,3.571.00868,4.59964,4.59964,0,0,0,.0052-4.53775,2.10307,2.10307,0,0,0-1.77505-.77007,2.14906,2.14906,0,0,0-1.79821.77007A3.59494,3.59494,0,0,0,118.72348,103.69069Zm6.18378,0a4.43181,4.43181,0,0,1-.98878,3.07511,4.15767,4.15767,0,0,1-5.6191.00811,4.46188,4.46188,0,0,1-.983-3.09421,4.39145,4.39145,0,0,1,.98878-3.0809,3.64656,3.64656,0,0,1,2.82344-1.07442,3.56648,3.56648,0,0,1,2.79219,1.09177A4.42233,4.42233,0,0,1,124.90726,103.69069Z"/></g><g class="cls-3"><path class="cls-4" d="M139.91487,107.75227h-1.62348l-3.984-6.45514h-.044l.02777.35987q.07724,1.031.07695,1.88442v4.21085h-1.20228v-8.1006h1.6067l3.97306,6.42158h.033q-.01128-.12844-.044-.928-.033-.801-.03356-1.24913V99.65167h1.21385Z"/></g><g class="cls-3"><path class="cls-4" d="M201.36856,48.63311l-1.57486-4.38153h-.06307l.04744,1.01077v3.37076h-.93266v-5.6515h1.46552l1.53611,4.38153,1.59166-4.38153h1.41114v5.6515h-.99571V45.341l.04686-1.07441h-.06249l-1.65356,4.36649Zm-4.70263,0h-.96448V43.81244h-1.63852v-.83083h4.25714v.83083h-1.65414Z"/></g></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/spotify/spotify-featured.svg b/content/en/case-studies/spotify/spotify-featured.svg
index fb7d8e750d..d1cc3418de 100644
--- a/content/en/case-studies/spotify/spotify-featured.svg
+++ b/content/en/case-studies/spotify/spotify-featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#00b26b;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.51349" y="-3.42399" width="223.25536" height="134.51136"/><path class="cls-2" d="M37.16766,33.86511A29.96657,29.96657,0,1,0,67.13423,63.83168v-.00045A29.96655,29.96655,0,0,0,37.16766,33.86511Zm13.743,43.22242a1.86642,1.86642,0,0,1-2.56484.62342l-.00322-.002c-7.037-4.301-15.89419-5.27224-26.32516-2.88952a1.8672,1.8672,0,1,1-.83157-3.64064h0c11.41492-2.60958,21.20664-1.48662,29.10526,3.34007a1.868,1.868,0,0,1,.61994,2.56795Zm3.66686-8.16a2.33759,2.33759,0,0,1-3.21365.76938c-8.053-4.95016-20.33308-6.38416-29.86048-3.49215a2.336,2.336,0,1,1-1.36027-4.46953l.00243-.00074c10.88377-3.30265,24.4138-1.70306,33.66333,3.98111a2.33646,2.33646,0,0,1,.76864,3.212Zm.31631-8.4965c-9.65954-5.7365-25.59264-6.264-34.81387-3.46517a2.8027,2.8027,0,1,1-1.63219-5.36251l.005-.00152c10.58527-3.21322,28.18176-2.59251,39.302,4.00855a2.80285,2.80285,0,0,1-2.861,4.82065Z"/><path class="cls-2" d="M88.72968,61.52943c-5.17382-1.234-6.09525-2.1-6.09525-3.91927,0-1.71923,1.61864-2.87581,4.02548-2.87581A11.76249,11.76249,0,0,1,93.732,57.42143a.33862.33862,0,0,0,.25578.06234.33383.33383,0,0,0,.22365-.13818l2.52648-3.56125a.33943.33943,0,0,0-.06451-.46085A15.28468,15.28468,0,0,0,86.73653,49.881c-5.58664,0-9.48867,3.35244-9.48867,8.14938,0,5.14406,3.366,6.96526,9.18309,8.37128,4.951,1.14037,5.78674,2.09569,5.78674,3.80389,0,1.89268-1.68964,3.06931-4.40888,3.06931-3.02,0-5.48348-1.01751-8.23923-3.40373a.35559.35559,0,0,0-.24869-.081.33687.33687,0,0,0-.2325.1196l-2.83266,3.371a.33636.33636,0,0,0,.03359.47,16.88747,16.88747,0,0,0,11.40491,4.37438c6.02006,0,9.91-3.28941,9.91-8.38037C97.60423,65.44205,95.03354,63.06245,88.72968,61.52943Z"/><path class="cls-2" d="M111.22388,56.42664a8.11792,8.11792,0,0,0-6.51457,3.13352V57.18985a.33943.33943,0,0,0-.33859-.33945H99.73794a.33923.33923,0,0,0-.33856.33945V83.52756a.33916.33916,0,0,0,.33856.33946h4.63278a.33936.33936,0,0,0,.33859-.33946V75.214a8.32181,8.32181,0,0,0,6.51457,2.94878c4.84848,0,9.75648-3.73228,9.75648-10.86684C120.98037,60.15981,116.07237,56.42664,111.22388,56.42664Zm4.37,10.86931c0,3.633-2.238,6.16832-5.44228,6.16832-3.168,0-5.55775-2.65055-5.55775-6.16832,0-3.51746,2.38976-6.16829,5.55775-6.16829C113.30425,61.12766,115.59383,63.72118,115.59383,67.296Z"/><path class="cls-2" d="M133.56131,56.42664a10.92474,10.92474,0,0,0-11.13356,10.71185q-.00228.11748-.002.235a11.11786,11.11786,0,1,0,11.13557-10.94683Zm0,17.07566a5.89229,5.89229,0,0,1-5.825-6.20635c0-3.55282,2.41717-6.13117,5.74843-6.13117a5.91028,5.91028,0,0,1,5.86332,6.20869C139.348,70.92569,136.91435,73.5023,133.56131,73.5023Z"/><path class="cls-2" d="M157.99119,56.85038h-5.09808V51.63795a.33888.33888,0,0,0-.33828-.33931h-4.63221a.34.34,0,0,0-.33976.33931v5.21243h-2.22769a.33862.33862,0,0,0-.33741.33945v3.98158a.33864.33864,0,0,0,.33741.33946h2.22769V71.81353c0,4.16341,2.07212,6.27442,6.15916,6.27442a8.45041,8.45041,0,0,0,4.33989-1.08.33769.33769,0,0,0,.1712-.2938V72.92268a.33968.33968,0,0,0-.4909-.30411,5.83887,5.83887,0,0,1-2.71948.65624c-1.48632,0-2.14962-.67479-2.14962-2.1873V61.51087h5.09808a.33878.33878,0,0,0,.338-.33946V57.18983A.33874.33874,0,0,0,157.99119,56.85038Z"/><path class="cls-2" d="M175.75327,56.87056v-.64017c0-1.88338.72194-2.72319,2.34173-2.72319a7.8201,7.8201,0,0,1,2.61049.48176.33869.33869,0,0,0,.44554-.32266v-3.904a.3388.3388,0,0,0-.23958-.32517,12.715,12.715,0,0,0-3.85075-.5534c-4.27917,0-6.54079,2.4098-6.54079,6.966v.98051H168.2943a.34059.34059,0,0,0-.34.33931v4.00191a.3407.3407,0,0,0,.34.33946h2.22561V77.40226a.33861.33861,0,0,0,.33771.33946h4.63279a.33994.33994,0,0,0,.33946-.33946V61.51087h4.32546l6.62622,15.88724c-.75228,1.66933-1.4919,2.00139-2.50174,2.00139a5.34284,5.34284,0,0,1-2.55448-.72457.34763.34763,0,0,0-.2699-.02535.342.342,0,0,0-.20038.183l-1.5703,3.445a.33661.33661,0,0,0,.14589.43818,9.75551,9.75551,0,0,0,4.94781,1.26676c3.42083,0,5.31171-1.59356,6.97865-5.88042l8.03741-20.769a.33855.33855,0,0,0-.31441-.46248h-4.82287a.34029.34029,0,0,0-.3209.22748l-4.94074,14.11233L183.984,57.08875a.338.338,0,0,0-.31647-.21819Z"/><path class="cls-2" d="M160.82324,56.85038h4.6328a.33946.33946,0,0,1,.33946.33946V77.40225a.33945.33945,0,0,1-.33945.33945h-4.6328a.33946.33946,0,0,1-.33946-.33946V57.18983A.33946.33946,0,0,1,160.82324,56.85038Z"/><path class="cls-2" d="M163.16322,47.6471a3.32256,3.32256,0,1,0,3.32239,3.32272v-.00149A3.323,3.323,0,0,0,163.16322,47.6471Z"/><path class="cls-2" d="M203.74983,63.34886a3.24762,3.24762,0,1,1,.0618,0Q203.78073,63.34916,203.74983,63.34886Zm.01709-6.21385a2.944,2.944,0,1,0,2.91744,2.97025q.00017-.01782.00011-.03564a2.91546,2.91546,0,0,0-2.89621-2.93455Zm.72285,3.26994.9223,1.29124h-.77765l-.83006-1.18427h-.71371v1.18427h-.65093V58.2739h1.52609c.795,0,1.31806.40681,1.31806,1.0916A1.0208,1.0208,0,0,1,204.48977,60.405Zm-.55017-1.54407h-.849v1.08247h.849c.42372,0,.67652-.2073.67652-.5416C204.61617,59.04962,204.36334,58.86088,203.9396,58.86088Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#00b26b;}</style></defs><title>kubernetes.io-logos</title><rect class="cls-1" x="-4.51349" y="-3.42399" width="223.25536" height="134.51136"/><path class="cls-2" d="M37.16766,33.86511A29.96657,29.96657,0,1,0,67.13423,63.83168v-.00045A29.96655,29.96655,0,0,0,37.16766,33.86511Zm13.743,43.22242a1.86642,1.86642,0,0,1-2.56484.62342l-.00322-.002c-7.037-4.301-15.89419-5.27224-26.32516-2.88952a1.8672,1.8672,0,1,1-.83157-3.64064h0c11.41492-2.60958,21.20664-1.48662,29.10526,3.34007a1.868,1.868,0,0,1,.61994,2.56795Zm3.66686-8.16a2.33759,2.33759,0,0,1-3.21365.76938c-8.053-4.95016-20.33308-6.38416-29.86048-3.49215a2.336,2.336,0,1,1-1.36027-4.46953l.00243-.00074c10.88377-3.30265,24.4138-1.70306,33.66333,3.98111a2.33646,2.33646,0,0,1,.76864,3.212Zm.31631-8.4965c-9.65954-5.7365-25.59264-6.264-34.81387-3.46517a2.8027,2.8027,0,1,1-1.63219-5.36251l.005-.00152c10.58527-3.21322,28.18176-2.59251,39.302,4.00855a2.80285,2.80285,0,0,1-2.861,4.82065Z"/><path class="cls-2" d="M88.72968,61.52943c-5.17382-1.234-6.09525-2.1-6.09525-3.91927,0-1.71923,1.61864-2.87581,4.02548-2.87581A11.76249,11.76249,0,0,1,93.732,57.42143a.33862.33862,0,0,0,.25578.06234.33383.33383,0,0,0,.22365-.13818l2.52648-3.56125a.33943.33943,0,0,0-.06451-.46085A15.28468,15.28468,0,0,0,86.73653,49.881c-5.58664,0-9.48867,3.35244-9.48867,8.14938,0,5.14406,3.366,6.96526,9.18309,8.37128,4.951,1.14037,5.78674,2.09569,5.78674,3.80389,0,1.89268-1.68964,3.06931-4.40888,3.06931-3.02,0-5.48348-1.01751-8.23923-3.40373a.35559.35559,0,0,0-.24869-.081.33687.33687,0,0,0-.2325.1196l-2.83266,3.371a.33636.33636,0,0,0,.03359.47,16.88747,16.88747,0,0,0,11.40491,4.37438c6.02006,0,9.91-3.28941,9.91-8.38037C97.60423,65.44205,95.03354,63.06245,88.72968,61.52943Z"/><path class="cls-2" d="M111.22388,56.42664a8.11792,8.11792,0,0,0-6.51457,3.13352V57.18985a.33943.33943,0,0,0-.33859-.33945H99.73794a.33923.33923,0,0,0-.33856.33945V83.52756a.33916.33916,0,0,0,.33856.33946h4.63278a.33936.33936,0,0,0,.33859-.33946V75.214a8.32181,8.32181,0,0,0,6.51457,2.94878c4.84848,0,9.75648-3.73228,9.75648-10.86684C120.98037,60.15981,116.07237,56.42664,111.22388,56.42664Zm4.37,10.86931c0,3.633-2.238,6.16832-5.44228,6.16832-3.168,0-5.55775-2.65055-5.55775-6.16832,0-3.51746,2.38976-6.16829,5.55775-6.16829C113.30425,61.12766,115.59383,63.72118,115.59383,67.296Z"/><path class="cls-2" d="M133.56131,56.42664a10.92474,10.92474,0,0,0-11.13356,10.71185q-.00228.11748-.002.235a11.11786,11.11786,0,1,0,11.13557-10.94683Zm0,17.07566a5.89229,5.89229,0,0,1-5.825-6.20635c0-3.55282,2.41717-6.13117,5.74843-6.13117a5.91028,5.91028,0,0,1,5.86332,6.20869C139.348,70.92569,136.91435,73.5023,133.56131,73.5023Z"/><path class="cls-2" d="M157.99119,56.85038h-5.09808V51.63795a.33888.33888,0,0,0-.33828-.33931h-4.63221a.34.34,0,0,0-.33976.33931v5.21243h-2.22769a.33862.33862,0,0,0-.33741.33945v3.98158a.33864.33864,0,0,0,.33741.33946h2.22769V71.81353c0,4.16341,2.07212,6.27442,6.15916,6.27442a8.45041,8.45041,0,0,0,4.33989-1.08.33769.33769,0,0,0,.1712-.2938V72.92268a.33968.33968,0,0,0-.4909-.30411,5.83887,5.83887,0,0,1-2.71948.65624c-1.48632,0-2.14962-.67479-2.14962-2.1873V61.51087h5.09808a.33878.33878,0,0,0,.338-.33946V57.18983A.33874.33874,0,0,0,157.99119,56.85038Z"/><path class="cls-2" d="M175.75327,56.87056v-.64017c0-1.88338.72194-2.72319,2.34173-2.72319a7.8201,7.8201,0,0,1,2.61049.48176.33869.33869,0,0,0,.44554-.32266v-3.904a.3388.3388,0,0,0-.23958-.32517,12.715,12.715,0,0,0-3.85075-.5534c-4.27917,0-6.54079,2.4098-6.54079,6.966v.98051H168.2943a.34059.34059,0,0,0-.34.33931v4.00191a.3407.3407,0,0,0,.34.33946h2.22561V77.40226a.33861.33861,0,0,0,.33771.33946h4.63279a.33994.33994,0,0,0,.33946-.33946V61.51087h4.32546l6.62622,15.88724c-.75228,1.66933-1.4919,2.00139-2.50174,2.00139a5.34284,5.34284,0,0,1-2.55448-.72457.34763.34763,0,0,0-.2699-.02535.342.342,0,0,0-.20038.183l-1.5703,3.445a.33661.33661,0,0,0,.14589.43818,9.75551,9.75551,0,0,0,4.94781,1.26676c3.42083,0,5.31171-1.59356,6.97865-5.88042l8.03741-20.769a.33855.33855,0,0,0-.31441-.46248h-4.82287a.34029.34029,0,0,0-.3209.22748l-4.94074,14.11233L183.984,57.08875a.338.338,0,0,0-.31647-.21819Z"/><path class="cls-2" d="M160.82324,56.85038h4.6328a.33946.33946,0,0,1,.33946.33946V77.40225a.33945.33945,0,0,1-.33945.33945h-4.6328a.33946.33946,0,0,1-.33946-.33946V57.18983A.33946.33946,0,0,1,160.82324,56.85038Z"/><path class="cls-2" d="M163.16322,47.6471a3.32256,3.32256,0,1,0,3.32239,3.32272v-.00149A3.323,3.323,0,0,0,163.16322,47.6471Z"/><path class="cls-2" d="M203.74983,63.34886a3.24762,3.24762,0,1,1,.0618,0Q203.78073,63.34916,203.74983,63.34886Zm.01709-6.21385a2.944,2.944,0,1,0,2.91744,2.97025q.00017-.01782.00011-.03564a2.91546,2.91546,0,0,0-2.89621-2.93455Zm.72285,3.26994.9223,1.29124h-.77765l-.83006-1.18427h-.71371v1.18427h-.65093V58.2739h1.52609c.795,0,1.31806.40681,1.31806,1.0916A1.0208,1.0208,0,0,1,204.48977,60.405Zm-.55017-1.54407h-.849v1.08247h.849c.42372,0,.67652-.2073.67652-.5416C204.61617,59.04962,204.36334,58.86088,203.9396,58.86088Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/squarespace/squarespace_featured_logo.svg b/content/en/case-studies/squarespace/squarespace_featured_logo.svg
index 4ffcbf078e..a69d7ea5c8 100644
--- a/content/en/case-studies/squarespace/squarespace_featured_logo.svg
+++ b/content/en/case-studies/squarespace/squarespace_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:#fbfbfb;}.cls-3{clip-path:url(#clip-path);}.cls-4{opacity:0;}.cls-5{fill:#fff;}</style><clipPath id="clip-path"><rect class="cls-1" x="-22.24825" y="-20.68295" width="259.58299" height="168.36589"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-2" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><g class="cls-3"><g class="cls-3"><g class="cls-3"><g class="cls-4"><g class="cls-3"><rect class="cls-5" x="-22.24825" y="-20.68295" width="259.58299" height="168.36589"/></g></g><path d="M83.75577,45.77057,109.38051,20.1463a9.23932,9.23932,0,0,1,13.0504-.00228l1.99724,1.99725,3.99268-3.99359L126.424,16.15043a14.89159,14.89159,0,0,0-21.03666.00227L79.76264,41.77744Z"/><path d="M117.96109,28.6071,113.968,24.614,88.34321,50.23827A9.22787,9.22787,0,1,1,75.29327,37.18786L97.4032,15.07794l-3.99312-3.9936L71.29968,33.19428A14.87565,14.87565,0,0,0,92.3368,54.23185Z"/><path d="M143.46831,33.19446a14.89214,14.89214,0,0,0-21.03712.00227L96.8069,58.821,100.8,62.8146l25.62384-25.62474a9.22835,9.22835,0,0,1,13.05085,13.05086L117.36432,72.35065l3.99268,3.99313,22.11131-22.10993a14.89462,14.89462,0,0,0,0-21.03939"/><path d="M131.01227,41.65786,105.38752,67.28215a9.23971,9.23971,0,0,1-13.05085.00228l-1.99634-1.99771-3.99357,3.994,1.99679,1.99634a14.891,14.891,0,0,0,21.0371-.00136L135.0054,45.65145Z"/><path d="M21.34317,109.82072a3.04721,3.04721,0,0,0,1.16,1.90286,3.88127,3.88127,0,0,0,2.39887.68753,3.40793,3.40793,0,0,0,2.26364-.67573,2.21582,2.21582,0,0,0,.79962-1.77942,1.80379,1.80379,0,0,0-.21375-.91217,1.91386,1.91386,0,0,0-.59722-.63126,3.71742,3.71742,0,0,0-.94575-.43838q-.56364-.1804-1.26161-.383l-1.21623-.33765a10.90917,10.90917,0,0,1-1.93689-.71022,5.996,5.996,0,0,1-1.464-.97933,3.79909,3.79909,0,0,1-.92352-1.29519,4.26571,4.26571,0,0,1-.3154-1.70046,4.3187,4.3187,0,0,1,.40526-1.87017,4.196,4.196,0,0,1,1.14861-1.46356,5.57223,5.57223,0,0,1,1.8021-.95755,7.62622,7.62622,0,0,1,2.38753-.34853,6.13228,6.13228,0,0,1,3.96409,1.18173,4.64821,4.64821,0,0,1,1.71225,3.16537l-2.70293.2251a2.71177,2.71177,0,0,0-.99114-1.57656,3.36313,3.36313,0,0,0-2.07212-.56364,2.96359,2.96359,0,0,0-1.93735.575,1.82479,1.82479,0,0,0-.69842,1.47536,1.70253,1.70253,0,0,0,.20286.86679,1.86732,1.86732,0,0,0,.58587.60811,4.2783,4.2783,0,0,0,.93441.46108q.55207.20286,1.25027.42886l1.14906.36033a20.28489,20.28489,0,0,1,1.94778.70931,5.73449,5.73449,0,0,1,1.47536.88994,3.51279,3.51279,0,0,1,.93486,1.23892,4.30414,4.30414,0,0,1,.32674,1.77941,4.68,4.68,0,0,1-.45063,2.06078,4.54928,4.54928,0,0,1-1.26116,1.5879,5.93675,5.93675,0,0,1-1.926,1.01337,8.005,8.005,0,0,1-2.466.36079,7.07205,7.07205,0,0,1-4.16739-1.1713,5.09034,5.09034,0,0,1-2.04944-3.53659Z"/><path d="M42.40321,100.40567a5.05247,5.05247,0,0,0-2.17379.45018,4.65366,4.65366,0,0,0-1.62148,1.24755,5.574,5.574,0,0,0-1.01383,1.88787,7.74383,7.74383,0,0,0-.349,2.3721,7.63011,7.63011,0,0,0,.36033,2.38344,5.8321,5.8321,0,0,0,1.02517,1.911,4.72687,4.72687,0,0,0,1.62148,1.27024,4.95578,4.95578,0,0,0,2.17379.46016,5.16389,5.16389,0,0,0,2.17332-.43793,4.59764,4.59764,0,0,0,1.62194-1.22576,5.57217,5.57217,0,0,0,1.02472-1.89922,7.88793,7.88793,0,0,0,.36033-2.43926,7.70241,7.70241,0,0,0-.36033-2.40568,5.596,5.596,0,0,0-1.02472-1.88833,4.69422,4.69422,0,0,0-1.63328-1.2362,5.12533,5.12533,0,0,0-2.18467-.45018m.02269-2.43246a8.69773,8.69773,0,0,1,3.33327.61946,7.31689,7.31689,0,0,1,2.5677,1.73449,7.84359,7.84359,0,0,1,1.64418,2.66889,9.56586,9.56586,0,0,1,.58587,3.4009,9.20492,9.20492,0,0,1-.61946,3.45763,7.72193,7.72193,0,0,1-1.76807,2.66935l2.16244,2.545v.78828H47.584l-1.50939-1.84658a8.61237,8.61237,0,0,1-1.68911.56273,9.42215,9.42215,0,0,1-5.30465-.4166,7.22556,7.22556,0,0,1-2.545-1.73449,7.7965,7.7965,0,0,1-1.62148-2.658,10.22169,10.22169,0,0,1,0-6.75733,7.714,7.714,0,0,1,1.63283-2.65755,7.47307,7.47307,0,0,1,2.55634-1.74583,8.49175,8.49175,0,0,1,3.3224-.63035"/><path d="M61.30048,112.5011a3.4596,3.4596,0,0,0,2.70293-1.06964,4.76432,4.76432,0,0,0,.96844-3.27746V98.28893H67.81v9.93223a8.89779,8.89779,0,0,1-.45064,3.007,5.26044,5.26044,0,0,1-1.28385,2.05034,5.02832,5.02832,0,0,1-2.04943,1.1713,10.2438,10.2438,0,0,1-5.46214,0,5.03113,5.03113,0,0,1-2.03854-1.1713,5.26056,5.26056,0,0,1-1.28385-2.05034,8.89847,8.89847,0,0,1-.45018-3.007V98.28893H57.6291V108.154a4.762,4.762,0,0,0,.96845,3.27746,3.4596,3.4596,0,0,0,2.70293,1.06964"/><path d="M75.85075,107.41064h5.33778L80.3104,104.843q-.5187-1.50849-.83321-2.45469-.31585-.94621-.56364-1.66687h-.698c-.09032.25459-.18017.51054-.27.76513q-.13547.38394-.30405.85636-.16952.47241-.37214,1.08144-.20217.60722-.49511,1.41863ZM70.7376,113.6724l5.74395-15.38392h4.2568l5.67588,15.38392v.78828H83.62145l-1.62194-4.61758H74.99485l-1.62149,4.61758H70.7376Z"/><path d="M92.78822,105.67679h2.45514a4.75958,4.75958,0,0,0,2.55635-.59132,2.11188,2.11188,0,0,0,.93531-1.9319,1.9923,1.9923,0,0,0-.94666-1.897,5.16838,5.16838,0,0,0-2.545-.535H92.78822Zm9.4825,8.78362H99.54509l-4.93253-6.35162H92.78822v6.35162H89.99543V98.28866h5.24793a15.71776,15.71776,0,0,1,2.35349.16882,4.86465,4.86465,0,0,1,2.01631.77693,4.25165,4.25165,0,0,1,1.91465,3.80525,5.18729,5.18729,0,0,1-.32719,1.926,4.366,4.366,0,0,1-.8668,1.39594,4.49127,4.49127,0,0,1-1.24981.934,6.52871,6.52871,0,0,1-1.47581.54049l4.66252,5.83608Z"/><polygon points="105.829 98.289 116.303 98.289 116.303 100.766 108.6 100.766 108.6 105.001 115.763 105.001 115.763 107.433 108.6 107.433 108.6 111.983 116.461 111.983 116.461 114.461 105.829 114.461 105.829 98.289"/><path d="M122.76784,109.82072a3.04326,3.04326,0,0,0,1.15995,1.90286,3.88125,3.88125,0,0,0,2.39887.68753,3.41037,3.41037,0,0,0,2.26363-.67573,2.2158,2.2158,0,0,0,.79963-1.77942,1.7992,1.7992,0,0,0-.2142-.91217,1.9124,1.9124,0,0,0-.59677-.63126,3.7175,3.7175,0,0,0-.94576-.43838q-.56364-.1804-1.26251-.383l-1.21532-.33765a10.91445,10.91445,0,0,1-1.93735-.71022,5.97556,5.97556,0,0,1-1.46355-.97933,3.79568,3.79568,0,0,1-.92443-1.29519,4.62136,4.62136,0,0,1,.09077-3.57063,4.1803,4.1803,0,0,1,1.14861-1.46356,5.56736,5.56736,0,0,1,1.8021-.95755,7.61827,7.61827,0,0,1,2.38662-.34853,6.13663,6.13663,0,0,1,3.965,1.18173,4.64772,4.64772,0,0,1,1.7118,3.16537l-2.70293.2251a2.71337,2.71337,0,0,0-.99069-1.57656,3.36544,3.36544,0,0,0-2.07257-.56364,2.96306,2.96306,0,0,0-1.93689.575,1.82476,1.82476,0,0,0-.69842,1.47536,1.70263,1.70263,0,0,0,.20285.86679,1.86115,1.86115,0,0,0,.58542.60811,4.2783,4.2783,0,0,0,.93441.46108q.55275.20286,1.24982.42886l1.14951.36033a20.34075,20.34075,0,0,1,1.94824.70931,5.72039,5.72039,0,0,1,1.47444.88994,3.50988,3.50988,0,0,1,.93578,1.23892,4.31143,4.31143,0,0,1,.32675,1.77941,4.67976,4.67976,0,0,1-.45065,2.06078,4.55166,4.55166,0,0,1-1.26206,1.5879,5.92737,5.92737,0,0,1-1.9251,1.01337,8.01205,8.01205,0,0,1-2.46649.36079,7.07057,7.07057,0,0,1-4.16693-1.1713,5.09281,5.09281,0,0,1-2.05034-3.53659Z"/><path d="M139.25492,105.81167h2.70293a6.99954,6.99954,0,0,0,1.36282-.123,3.163,3.163,0,0,0,1.081-.413,2.01427,2.01427,0,0,0,.72111-.78147,2.56339,2.56339,0,0,0,.25868-1.20579,2.68333,2.68333,0,0,0-.25868-1.23847,2.03758,2.03758,0,0,0-.70977-.79282,3.04557,3.04557,0,0,0-1.06964-.413,6.91337,6.91337,0,0,0-1.34012-.123h-2.74832Zm-2.81546-7.52292h5.90142a8.57388,8.57388,0,0,1,2.7592.383,4.69283,4.69283,0,0,1,1.80211,1.05876,3.95026,3.95026,0,0,1,.99067,1.5879,6.19993,6.19993,0,0,1,.30407,1.97047,5.35076,5.35076,0,0,1-.41661,2.19557,3.945,3.945,0,0,1-1.20488,1.54343,5.41106,5.41106,0,0,1-1.91465.91217,9.772,9.772,0,0,1-2.545.304h-2.86087V114.461h-2.81546Z"/><path d="M154.05337,107.41064h5.3378L158.513,104.843q-.51937-1.50849-.83365-2.45469-.31587-.94621-.56275-1.66687h-.69842c-.0903.25459-.18061.51054-.27046.76513q-.13479.38394-.30452.85636-.16814.47241-.37077,1.08144-.20286.60722-.49557,1.41863Zm-5.11359,6.26176,5.74395-15.38392h4.2568l5.67587,15.38392v.78828h-2.79232l-1.62194-4.61758H153.197l-1.62148,4.61758h-2.63576Z"/><path d="M181.73469,110.18151a8.06646,8.06646,0,0,1-1.002,1.78123,6.67187,6.67187,0,0,1-1.498,1.46129,7.19083,7.19083,0,0,1-2.03855.988,8.60057,8.60057,0,0,1-2.5795.36441,8.2413,8.2413,0,0,1-3.27656-.63171,7.35915,7.35915,0,0,1-2.51821-1.74447,7.76712,7.76712,0,0,1-1.6106-2.658,10.14495,10.14495,0,0,1,0-6.68971,7.79273,7.79273,0,0,1,1.621-2.66935,7.554,7.554,0,0,1,2.53047-1.76762,8.16893,8.16893,0,0,1,3.2997-.64214,7.6378,7.6378,0,0,1,4.44831,1.23891,6.66469,6.66469,0,0,1,2.5341,3.28836l-2.86039.56228a4.75208,4.75208,0,0,0-1.63374-1.94824,4.41145,4.41145,0,0,0-2.53412-.70886,4.75669,4.75669,0,0,0-2.12794.46017,4.56027,4.56027,0,0,0-1.577,1.268,5.73869,5.73869,0,0,0-.97933,1.90738,7.98114,7.98114,0,0,0-.33763,2.35577,7.71393,7.71393,0,0,0,.349,2.36756,5.54472,5.54472,0,0,0,1.01338,1.88515,4.67815,4.67815,0,0,0,1.6106,1.24436,4.971,4.971,0,0,0,2.16152.44974,4.22859,4.22859,0,0,0,2.60219-.76605,5.33727,5.33727,0,0,0,1.5879-1.86972Z"/><polygon points="185.541 98.289 196.015 98.289 196.015 100.766 188.311 100.766 188.311 105.001 195.474 105.001 195.474 107.433 188.311 107.433 188.311 111.983 196.173 111.983 196.173 114.461 185.541 114.461 185.541 98.289"/></g></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:transparent;}.cls-3{clip-path:url(#clip-path);}.cls-4{opacity:0;}.cls-5{fill:#fff;}</style><clipPath id="clip-path"><rect class="cls-1" x="-22.24825" y="-20.68295" width="259.58299" height="168.36589"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-2" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><g class="cls-3"><g class="cls-3"><g class="cls-3"><g class="cls-4"><g class="cls-3"><rect class="cls-5" x="-22.24825" y="-20.68295" width="259.58299" height="168.36589"/></g></g><path d="M83.75577,45.77057,109.38051,20.1463a9.23932,9.23932,0,0,1,13.0504-.00228l1.99724,1.99725,3.99268-3.99359L126.424,16.15043a14.89159,14.89159,0,0,0-21.03666.00227L79.76264,41.77744Z"/><path d="M117.96109,28.6071,113.968,24.614,88.34321,50.23827A9.22787,9.22787,0,1,1,75.29327,37.18786L97.4032,15.07794l-3.99312-3.9936L71.29968,33.19428A14.87565,14.87565,0,0,0,92.3368,54.23185Z"/><path d="M143.46831,33.19446a14.89214,14.89214,0,0,0-21.03712.00227L96.8069,58.821,100.8,62.8146l25.62384-25.62474a9.22835,9.22835,0,0,1,13.05085,13.05086L117.36432,72.35065l3.99268,3.99313,22.11131-22.10993a14.89462,14.89462,0,0,0,0-21.03939"/><path d="M131.01227,41.65786,105.38752,67.28215a9.23971,9.23971,0,0,1-13.05085.00228l-1.99634-1.99771-3.99357,3.994,1.99679,1.99634a14.891,14.891,0,0,0,21.0371-.00136L135.0054,45.65145Z"/><path d="M21.34317,109.82072a3.04721,3.04721,0,0,0,1.16,1.90286,3.88127,3.88127,0,0,0,2.39887.68753,3.40793,3.40793,0,0,0,2.26364-.67573,2.21582,2.21582,0,0,0,.79962-1.77942,1.80379,1.80379,0,0,0-.21375-.91217,1.91386,1.91386,0,0,0-.59722-.63126,3.71742,3.71742,0,0,0-.94575-.43838q-.56364-.1804-1.26161-.383l-1.21623-.33765a10.90917,10.90917,0,0,1-1.93689-.71022,5.996,5.996,0,0,1-1.464-.97933,3.79909,3.79909,0,0,1-.92352-1.29519,4.26571,4.26571,0,0,1-.3154-1.70046,4.3187,4.3187,0,0,1,.40526-1.87017,4.196,4.196,0,0,1,1.14861-1.46356,5.57223,5.57223,0,0,1,1.8021-.95755,7.62622,7.62622,0,0,1,2.38753-.34853,6.13228,6.13228,0,0,1,3.96409,1.18173,4.64821,4.64821,0,0,1,1.71225,3.16537l-2.70293.2251a2.71177,2.71177,0,0,0-.99114-1.57656,3.36313,3.36313,0,0,0-2.07212-.56364,2.96359,2.96359,0,0,0-1.93735.575,1.82479,1.82479,0,0,0-.69842,1.47536,1.70253,1.70253,0,0,0,.20286.86679,1.86732,1.86732,0,0,0,.58587.60811,4.2783,4.2783,0,0,0,.93441.46108q.55207.20286,1.25027.42886l1.14906.36033a20.28489,20.28489,0,0,1,1.94778.70931,5.73449,5.73449,0,0,1,1.47536.88994,3.51279,3.51279,0,0,1,.93486,1.23892,4.30414,4.30414,0,0,1,.32674,1.77941,4.68,4.68,0,0,1-.45063,2.06078,4.54928,4.54928,0,0,1-1.26116,1.5879,5.93675,5.93675,0,0,1-1.926,1.01337,8.005,8.005,0,0,1-2.466.36079,7.07205,7.07205,0,0,1-4.16739-1.1713,5.09034,5.09034,0,0,1-2.04944-3.53659Z"/><path d="M42.40321,100.40567a5.05247,5.05247,0,0,0-2.17379.45018,4.65366,4.65366,0,0,0-1.62148,1.24755,5.574,5.574,0,0,0-1.01383,1.88787,7.74383,7.74383,0,0,0-.349,2.3721,7.63011,7.63011,0,0,0,.36033,2.38344,5.8321,5.8321,0,0,0,1.02517,1.911,4.72687,4.72687,0,0,0,1.62148,1.27024,4.95578,4.95578,0,0,0,2.17379.46016,5.16389,5.16389,0,0,0,2.17332-.43793,4.59764,4.59764,0,0,0,1.62194-1.22576,5.57217,5.57217,0,0,0,1.02472-1.89922,7.88793,7.88793,0,0,0,.36033-2.43926,7.70241,7.70241,0,0,0-.36033-2.40568,5.596,5.596,0,0,0-1.02472-1.88833,4.69422,4.69422,0,0,0-1.63328-1.2362,5.12533,5.12533,0,0,0-2.18467-.45018m.02269-2.43246a8.69773,8.69773,0,0,1,3.33327.61946,7.31689,7.31689,0,0,1,2.5677,1.73449,7.84359,7.84359,0,0,1,1.64418,2.66889,9.56586,9.56586,0,0,1,.58587,3.4009,9.20492,9.20492,0,0,1-.61946,3.45763,7.72193,7.72193,0,0,1-1.76807,2.66935l2.16244,2.545v.78828H47.584l-1.50939-1.84658a8.61237,8.61237,0,0,1-1.68911.56273,9.42215,9.42215,0,0,1-5.30465-.4166,7.22556,7.22556,0,0,1-2.545-1.73449,7.7965,7.7965,0,0,1-1.62148-2.658,10.22169,10.22169,0,0,1,0-6.75733,7.714,7.714,0,0,1,1.63283-2.65755,7.47307,7.47307,0,0,1,2.55634-1.74583,8.49175,8.49175,0,0,1,3.3224-.63035"/><path d="M61.30048,112.5011a3.4596,3.4596,0,0,0,2.70293-1.06964,4.76432,4.76432,0,0,0,.96844-3.27746V98.28893H67.81v9.93223a8.89779,8.89779,0,0,1-.45064,3.007,5.26044,5.26044,0,0,1-1.28385,2.05034,5.02832,5.02832,0,0,1-2.04943,1.1713,10.2438,10.2438,0,0,1-5.46214,0,5.03113,5.03113,0,0,1-2.03854-1.1713,5.26056,5.26056,0,0,1-1.28385-2.05034,8.89847,8.89847,0,0,1-.45018-3.007V98.28893H57.6291V108.154a4.762,4.762,0,0,0,.96845,3.27746,3.4596,3.4596,0,0,0,2.70293,1.06964"/><path d="M75.85075,107.41064h5.33778L80.3104,104.843q-.5187-1.50849-.83321-2.45469-.31585-.94621-.56364-1.66687h-.698c-.09032.25459-.18017.51054-.27.76513q-.13547.38394-.30405.85636-.16952.47241-.37214,1.08144-.20217.60722-.49511,1.41863ZM70.7376,113.6724l5.74395-15.38392h4.2568l5.67588,15.38392v.78828H83.62145l-1.62194-4.61758H74.99485l-1.62149,4.61758H70.7376Z"/><path d="M92.78822,105.67679h2.45514a4.75958,4.75958,0,0,0,2.55635-.59132,2.11188,2.11188,0,0,0,.93531-1.9319,1.9923,1.9923,0,0,0-.94666-1.897,5.16838,5.16838,0,0,0-2.545-.535H92.78822Zm9.4825,8.78362H99.54509l-4.93253-6.35162H92.78822v6.35162H89.99543V98.28866h5.24793a15.71776,15.71776,0,0,1,2.35349.16882,4.86465,4.86465,0,0,1,2.01631.77693,4.25165,4.25165,0,0,1,1.91465,3.80525,5.18729,5.18729,0,0,1-.32719,1.926,4.366,4.366,0,0,1-.8668,1.39594,4.49127,4.49127,0,0,1-1.24981.934,6.52871,6.52871,0,0,1-1.47581.54049l4.66252,5.83608Z"/><polygon points="105.829 98.289 116.303 98.289 116.303 100.766 108.6 100.766 108.6 105.001 115.763 105.001 115.763 107.433 108.6 107.433 108.6 111.983 116.461 111.983 116.461 114.461 105.829 114.461 105.829 98.289"/><path d="M122.76784,109.82072a3.04326,3.04326,0,0,0,1.15995,1.90286,3.88125,3.88125,0,0,0,2.39887.68753,3.41037,3.41037,0,0,0,2.26363-.67573,2.2158,2.2158,0,0,0,.79963-1.77942,1.7992,1.7992,0,0,0-.2142-.91217,1.9124,1.9124,0,0,0-.59677-.63126,3.7175,3.7175,0,0,0-.94576-.43838q-.56364-.1804-1.26251-.383l-1.21532-.33765a10.91445,10.91445,0,0,1-1.93735-.71022,5.97556,5.97556,0,0,1-1.46355-.97933,3.79568,3.79568,0,0,1-.92443-1.29519,4.62136,4.62136,0,0,1,.09077-3.57063,4.1803,4.1803,0,0,1,1.14861-1.46356,5.56736,5.56736,0,0,1,1.8021-.95755,7.61827,7.61827,0,0,1,2.38662-.34853,6.13663,6.13663,0,0,1,3.965,1.18173,4.64772,4.64772,0,0,1,1.7118,3.16537l-2.70293.2251a2.71337,2.71337,0,0,0-.99069-1.57656,3.36544,3.36544,0,0,0-2.07257-.56364,2.96306,2.96306,0,0,0-1.93689.575,1.82476,1.82476,0,0,0-.69842,1.47536,1.70263,1.70263,0,0,0,.20285.86679,1.86115,1.86115,0,0,0,.58542.60811,4.2783,4.2783,0,0,0,.93441.46108q.55275.20286,1.24982.42886l1.14951.36033a20.34075,20.34075,0,0,1,1.94824.70931,5.72039,5.72039,0,0,1,1.47444.88994,3.50988,3.50988,0,0,1,.93578,1.23892,4.31143,4.31143,0,0,1,.32675,1.77941,4.67976,4.67976,0,0,1-.45065,2.06078,4.55166,4.55166,0,0,1-1.26206,1.5879,5.92737,5.92737,0,0,1-1.9251,1.01337,8.01205,8.01205,0,0,1-2.46649.36079,7.07057,7.07057,0,0,1-4.16693-1.1713,5.09281,5.09281,0,0,1-2.05034-3.53659Z"/><path d="M139.25492,105.81167h2.70293a6.99954,6.99954,0,0,0,1.36282-.123,3.163,3.163,0,0,0,1.081-.413,2.01427,2.01427,0,0,0,.72111-.78147,2.56339,2.56339,0,0,0,.25868-1.20579,2.68333,2.68333,0,0,0-.25868-1.23847,2.03758,2.03758,0,0,0-.70977-.79282,3.04557,3.04557,0,0,0-1.06964-.413,6.91337,6.91337,0,0,0-1.34012-.123h-2.74832Zm-2.81546-7.52292h5.90142a8.57388,8.57388,0,0,1,2.7592.383,4.69283,4.69283,0,0,1,1.80211,1.05876,3.95026,3.95026,0,0,1,.99067,1.5879,6.19993,6.19993,0,0,1,.30407,1.97047,5.35076,5.35076,0,0,1-.41661,2.19557,3.945,3.945,0,0,1-1.20488,1.54343,5.41106,5.41106,0,0,1-1.91465.91217,9.772,9.772,0,0,1-2.545.304h-2.86087V114.461h-2.81546Z"/><path d="M154.05337,107.41064h5.3378L158.513,104.843q-.51937-1.50849-.83365-2.45469-.31587-.94621-.56275-1.66687h-.69842c-.0903.25459-.18061.51054-.27046.76513q-.13479.38394-.30452.85636-.16814.47241-.37077,1.08144-.20286.60722-.49557,1.41863Zm-5.11359,6.26176,5.74395-15.38392h4.2568l5.67587,15.38392v.78828h-2.79232l-1.62194-4.61758H153.197l-1.62148,4.61758h-2.63576Z"/><path d="M181.73469,110.18151a8.06646,8.06646,0,0,1-1.002,1.78123,6.67187,6.67187,0,0,1-1.498,1.46129,7.19083,7.19083,0,0,1-2.03855.988,8.60057,8.60057,0,0,1-2.5795.36441,8.2413,8.2413,0,0,1-3.27656-.63171,7.35915,7.35915,0,0,1-2.51821-1.74447,7.76712,7.76712,0,0,1-1.6106-2.658,10.14495,10.14495,0,0,1,0-6.68971,7.79273,7.79273,0,0,1,1.621-2.66935,7.554,7.554,0,0,1,2.53047-1.76762,8.16893,8.16893,0,0,1,3.2997-.64214,7.6378,7.6378,0,0,1,4.44831,1.23891,6.66469,6.66469,0,0,1,2.5341,3.28836l-2.86039.56228a4.75208,4.75208,0,0,0-1.63374-1.94824,4.41145,4.41145,0,0,0-2.53412-.70886,4.75669,4.75669,0,0,0-2.12794.46017,4.56027,4.56027,0,0,0-1.577,1.268,5.73869,5.73869,0,0,0-.97933,1.90738,7.98114,7.98114,0,0,0-.33763,2.35577,7.71393,7.71393,0,0,0,.349,2.36756,5.54472,5.54472,0,0,0,1.01338,1.88515,4.67815,4.67815,0,0,0,1.6106,1.24436,4.971,4.971,0,0,0,2.16152.44974,4.22859,4.22859,0,0,0,2.60219-.76605,5.33727,5.33727,0,0,0,1.5879-1.86972Z"/><polygon points="185.541 98.289 196.015 98.289 196.015 100.766 188.311 100.766 188.311 105.001 195.474 105.001 195.474 107.433 188.311 107.433 188.311 111.983 196.173 111.983 196.173 114.461 185.541 114.461 185.541 98.289"/></g></g></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/thredup/thredup_featured_logo.svg b/content/en/case-studies/thredup/thredup_featured_logo.svg
index 48841f9878..987e1a55c1 100644
--- a/content/en/case-studies/thredup/thredup_featured_logo.svg
+++ b/content/en/case-studies/thredup/thredup_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-2.92293" y="-4.57688" width="223.25536" height="134.51136"/><path d="M173.01724,36.02417H168.599a.72106.72106,0,0,0-.71471.71471V57.46553c0,2.20911-1.81927,3.70351-4.48319,3.70351s-4.41822-1.55938-4.41822-3.70351V36.73888a.72106.72106,0,0,0-.71472-.71471H153.785a.72105.72105,0,0,0-.71471.71471V57.46553c0,5.32785,4.48318,9.55115,10.20088,9.55115s10.33084-4.2233,10.33084-9.55115V36.73888a.58881.58881,0,0,0-.38985-.71471Z"/><path d="M192.76928,36.02417h-9.68109a.72106.72106,0,0,0-.71472.71471V65.84715a.72106.72106,0,0,0,.71472.71471h4.41821a.72105.72105,0,0,0,.71471-.71471V54.8016a.59027.59027,0,0,1,.51979-.64974h4.09336a9.09459,9.09459,0,0,0,1.49441-18.12769,6.26236,6.26236,0,0,0-1.55939,0Zm0,12.345h-3.9634a.59027.59027,0,0,1-.64974-.51979V42.45658a.59027.59027,0,0,1,.51978-.64974h4.09336a3.393,3.393,0,0,1,3.24869,3.24869,3.31415,3.31415,0,0,1-3.24869,3.31366Z"/><path d="M33.58342,48.36919H14.676a.72105.72105,0,0,0-.71471.71472v4.41822a.61385.61385,0,0,0,.64973.64973h6.04257a.59028.59028,0,0,1,.64974.51979V78.19218a.72106.72106,0,0,0,.71471.71471H26.4363a.72106.72106,0,0,0,.71471-.71471V54.8016a.69093.69093,0,0,1,.58477-.64974h6.04256a.72105.72105,0,0,0,.71471-.71471V49.01893a.97721.97721,0,0,0-.90963-.64974Z"/><path d="M61.71708,48.36919H57.29886a.72106.72106,0,0,0-.71471.71472V60.12946a.69091.69091,0,0,1-.58477.64973H49.24211a.59027.59027,0,0,1-.64974-.51979V49.08391a.72106.72106,0,0,0-.71471-.71472H43.52441a.72106.72106,0,0,0-.71471.71472V78.19218a.72106.72106,0,0,0,.71471.71471h4.2233c.38984,0,.90964-.32487.90964-.71471V67.14663a.59027.59027,0,0,1,.51979-.64974h6.82224a.69092.69092,0,0,1,.64974.58477V78.19218a.72106.72106,0,0,0,.71471.71471h4.41823a.72106.72106,0,0,0,.71471-.71471V49.08391A.83056.83056,0,0,0,61.71708,48.36919Z"/><path d="M91.08525,57.46553a9.12308,9.12308,0,0,0-9.09634-9.09634H72.37279a.72106.72106,0,0,0-.71471.71472V78.19218a.72106.72106,0,0,0,.71471.71471H76.791a.72106.72106,0,0,0,.71471-.71471V67.14663a.59028.59028,0,0,1,.51979-.64974H79.325a.976.976,0,0,1,.97461.71471l4.48319,10.9156a1.13272,1.13272,0,0,0,1.10456.77968h4.54816a.56948.56948,0,0,0,.64974-.32487.82839.82839,0,0,0,0-.77968L86.34216,66.75678c-.32487-.71471-.38984-1.16953.32487-1.68932C89.78577,62.9883,91.08525,60.64925,91.08525,57.46553Zm-9.09634,3.24869h-3.9634a.59027.59027,0,0,1-.64974-.51979V54.8016a.69093.69093,0,0,1,.58477-.64974h4.02837a3.3012,3.3012,0,0,1,3.24869,3.2487,3.19187,3.19187,0,0,1-3.05376,3.31366Z"/><path d="M115.97022,73.05924H105.57441a.59027.59027,0,0,1-.64974-.51979V67.14663a.59028.59028,0,0,1,.51979-.64974h7.73189a.72106.72106,0,0,0,.71472-.71471V61.364a.72106.72106,0,0,0-.71472-.71471h-7.60194a.59027.59027,0,0,1-.64974-.51979V54.73663a.69092.69092,0,0,1,.58476-.64974h10.46079a.72106.72106,0,0,0,.71472-.71471V48.954a.72106.72106,0,0,0-.71472-.71471H99.79174a.72106.72106,0,0,0-.71471.71471V78.06223a.72106.72106,0,0,0,.71471.71471h16.17848a.72106.72106,0,0,0,.71472-.71471V73.644A.7613.7613,0,0,0,115.97022,73.05924Z"/><path d="M135.26744,48.36919h-9.29126a.72106.72106,0,0,0-.71471.71472V78.19218a.72106.72106,0,0,0,.71471.71471h9.29126c5.003,0,8.96639-3.9634,9.61613-9.55115a47.00813,47.00813,0,0,0,0-11.30545C144.23383,52.3326,140.27042,48.36919,135.26744,48.36919Zm3.76849,20.98655a3.95536,3.95536,0,0,1-3.83346,3.76848h-3.50858a.59027.59027,0,0,1-.64974-.51979V54.8016a.69093.69093,0,0,1,.58476-.64974h3.57356a3.95536,3.95536,0,0,1,3.83346,3.76849A48.09012,48.09012,0,0,1,139.03593,69.35574Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-2.92293" y="-4.57688" width="223.25536" height="134.51136"/><path d="M173.01724,36.02417H168.599a.72106.72106,0,0,0-.71471.71471V57.46553c0,2.20911-1.81927,3.70351-4.48319,3.70351s-4.41822-1.55938-4.41822-3.70351V36.73888a.72106.72106,0,0,0-.71472-.71471H153.785a.72105.72105,0,0,0-.71471.71471V57.46553c0,5.32785,4.48318,9.55115,10.20088,9.55115s10.33084-4.2233,10.33084-9.55115V36.73888a.58881.58881,0,0,0-.38985-.71471Z"/><path d="M192.76928,36.02417h-9.68109a.72106.72106,0,0,0-.71472.71471V65.84715a.72106.72106,0,0,0,.71472.71471h4.41821a.72105.72105,0,0,0,.71471-.71471V54.8016a.59027.59027,0,0,1,.51979-.64974h4.09336a9.09459,9.09459,0,0,0,1.49441-18.12769,6.26236,6.26236,0,0,0-1.55939,0Zm0,12.345h-3.9634a.59027.59027,0,0,1-.64974-.51979V42.45658a.59027.59027,0,0,1,.51978-.64974h4.09336a3.393,3.393,0,0,1,3.24869,3.24869,3.31415,3.31415,0,0,1-3.24869,3.31366Z"/><path d="M33.58342,48.36919H14.676a.72105.72105,0,0,0-.71471.71472v4.41822a.61385.61385,0,0,0,.64973.64973h6.04257a.59028.59028,0,0,1,.64974.51979V78.19218a.72106.72106,0,0,0,.71471.71471H26.4363a.72106.72106,0,0,0,.71471-.71471V54.8016a.69093.69093,0,0,1,.58477-.64974h6.04256a.72105.72105,0,0,0,.71471-.71471V49.01893a.97721.97721,0,0,0-.90963-.64974Z"/><path d="M61.71708,48.36919H57.29886a.72106.72106,0,0,0-.71471.71472V60.12946a.69091.69091,0,0,1-.58477.64973H49.24211a.59027.59027,0,0,1-.64974-.51979V49.08391a.72106.72106,0,0,0-.71471-.71472H43.52441a.72106.72106,0,0,0-.71471.71472V78.19218a.72106.72106,0,0,0,.71471.71471h4.2233c.38984,0,.90964-.32487.90964-.71471V67.14663a.59027.59027,0,0,1,.51979-.64974h6.82224a.69092.69092,0,0,1,.64974.58477V78.19218a.72106.72106,0,0,0,.71471.71471h4.41823a.72106.72106,0,0,0,.71471-.71471V49.08391A.83056.83056,0,0,0,61.71708,48.36919Z"/><path d="M91.08525,57.46553a9.12308,9.12308,0,0,0-9.09634-9.09634H72.37279a.72106.72106,0,0,0-.71471.71472V78.19218a.72106.72106,0,0,0,.71471.71471H76.791a.72106.72106,0,0,0,.71471-.71471V67.14663a.59028.59028,0,0,1,.51979-.64974H79.325a.976.976,0,0,1,.97461.71471l4.48319,10.9156a1.13272,1.13272,0,0,0,1.10456.77968h4.54816a.56948.56948,0,0,0,.64974-.32487.82839.82839,0,0,0,0-.77968L86.34216,66.75678c-.32487-.71471-.38984-1.16953.32487-1.68932C89.78577,62.9883,91.08525,60.64925,91.08525,57.46553Zm-9.09634,3.24869h-3.9634a.59027.59027,0,0,1-.64974-.51979V54.8016a.69093.69093,0,0,1,.58477-.64974h4.02837a3.3012,3.3012,0,0,1,3.24869,3.2487,3.19187,3.19187,0,0,1-3.05376,3.31366Z"/><path d="M115.97022,73.05924H105.57441a.59027.59027,0,0,1-.64974-.51979V67.14663a.59028.59028,0,0,1,.51979-.64974h7.73189a.72106.72106,0,0,0,.71472-.71471V61.364a.72106.72106,0,0,0-.71472-.71471h-7.60194a.59027.59027,0,0,1-.64974-.51979V54.73663a.69092.69092,0,0,1,.58476-.64974h10.46079a.72106.72106,0,0,0,.71472-.71471V48.954a.72106.72106,0,0,0-.71472-.71471H99.79174a.72106.72106,0,0,0-.71471.71471V78.06223a.72106.72106,0,0,0,.71471.71471h16.17848a.72106.72106,0,0,0,.71472-.71471V73.644A.7613.7613,0,0,0,115.97022,73.05924Z"/><path d="M135.26744,48.36919h-9.29126a.72106.72106,0,0,0-.71471.71472V78.19218a.72106.72106,0,0,0,.71471.71471h9.29126c5.003,0,8.96639-3.9634,9.61613-9.55115a47.00813,47.00813,0,0,0,0-11.30545C144.23383,52.3326,140.27042,48.36919,135.26744,48.36919Zm3.76849,20.98655a3.95536,3.95536,0,0,1-3.83346,3.76848h-3.50858a.59027.59027,0,0,1-.64974-.51979V54.8016a.69093.69093,0,0,1,.58476-.64974h3.57356a3.95536,3.95536,0,0,1,3.83346,3.76849A48.09012,48.09012,0,0,1,139.03593,69.35574Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/vsco/vsco_featured_logo.svg b/content/en/case-studies/vsco/vsco_featured_logo.svg
index e1181f8a95..e65dad8c52 100644
--- a/content/en/case-studies/vsco/vsco_featured_logo.svg
+++ b/content/en/case-studies/vsco/vsco_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:#fbfbfb;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#201f1f;}</style><clipPath id="clip-path"><rect class="cls-1" x="47.10319" y="-14.44805" width="120.79362" height="154.67619"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-2" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M80.868,106.58157l1.88546,5.32249c.80525,2.29872,1.33635,3.86912,1.80771,5.30285.45091-1.39445,1.00084-2.96567,1.8069-5.28321l1.88464-5.34213H91.121l-5.18582,13.94535H83.0677l-5.16536-13.94535Z"/><path class="cls-4" d="M95.04747,116.34332a5.81875,5.81875,0,0,0,4.419,2.08185c1.55239,0,2.71116-.82488,2.71116-1.98365,0-1.17841-.94191-1.4141-2.53358-1.76762L98.17026,114.34c-3.00413-.66858-4.14408-1.74879-4.14408-3.83065,0-2.37647,2.239-4.16372,5.24475-4.16372a6.66312,6.66312,0,0,1,5.50007,2.3961l-1.92556,1.473a4.49767,4.49767,0,0,0-3.59415-1.53194c-1.39445,0-2.4362.766-2.4362,1.67023,0,.84371.55074,1.13831,2.04339,1.49184l1.66942.37316c3.16289.70705,4.43868,1.76762,4.43868,4.0066,0,2.78972-2.47466,4.5377-5.46,4.5377a7.9844,7.9844,0,0,1-6.28486-2.86747Z"/><path class="cls-4" d="M120.77807,110.82353l-2.80937.56956c-.491-1.64895-1.49265-2.67024-3.02459-2.67024-2.12195,0-3.39775,1.82571-3.39775,4.83148,0,3.02459,1.33554,4.83148,3.33883,4.83148,1.7488,0,2.88711-1.02129,3.39776-3.45667l2.49512.39281c-.59,3.61379-2.73081,5.44114-5.91252,5.44114-3.79055,0-6.34459-2.96648-6.34459-7.20876,0-4.2431,2.57368-7.20876,6.42315-7.20876a5.85377,5.85377,0,0,1,5.834,4.478"/><path class="cls-4" d="M137.09733,113.55425c0,4.22263-2.53276,7.20876-6.34377,7.20876-3.79056,0-6.38306-2.98613-6.38306-7.20876,0-4.22346,2.5925-7.20877,6.38306-7.20877,3.811,0,6.34377,2.98531,6.34377,7.20877m-9.70224,0c0,2.96566,1.257,4.83148,3.35847,4.83148,2.10231,0,3.30036-1.86582,3.30036-4.83148,0-2.94685-1.198-4.83149-3.30036-4.83149-2.1015,0-3.35847,1.88464-3.35847,4.83149"/><path class="cls-4" d="M107.50024,5.03238a40.917,40.917,0,1,0,40.917,40.917,40.96348,40.96348,0,0,0-40.917-40.917m39.31227,40.917a39.47023,39.47023,0,0,1-.2054,4.02788l-6.94854-.85845c.1023-1.04338.15713-2.09986.15713-3.16943,0-1.01065-.05238-2.0082-.144-2.99512l6.9518-.829c.12194,1.25942.189,2.53358.189,3.8241m-78.62535,0a39.5846,39.5846,0,0,1,.19968-3.95995l6.95017.8478c-.099,1.02457-.153,2.06222-.153,3.11215,0,1.0483.054,2.08268.15221,3.10561l-6.95016.8388c-.13012-1.29708-.19886-2.613-.19886-3.94441m69.84128-10.58033,6.54918-2.46647a38.94079,38.94079,0,0,1,1.85272,7.63021l-6.94607.82816a32.01254,32.01254,0,0,0-1.45583-5.9919m.18249,10.58033a30.68588,30.68588,0,0,1-.58839,5.978l-6.8847-1.59a23.49851,23.49851,0,0,0-.03027-8.94856l6.89124-1.55321a30.78019,30.78019,0,0,1,.61212,6.11382M107.50024,67.998A22.049,22.049,0,1,1,129.548,45.94941,22.07344,22.07344,0,0,1,107.50024,67.998m.748,8.64414.01227-7.059a23.49526,23.49526,0,0,0,8.78816-2.00084l3.04914,6.36423a30.5146,30.5146,0,0,1-11.84957,2.69562M94.80369,73.90229l3.072-6.35441a23.49229,23.49229,0,0,0,8.7808,2.03276l-.0131,7.05818a30.50258,30.50258,0,0,1-11.83975-2.73653M76.78792,45.94941a30.71827,30.71827,0,0,1,.63422-6.21857l6.88469,1.57694a23.5197,23.5197,0,0,0-.05973,8.94856L77.35749,51.821a30.78742,30.78742,0,0,1-.56957-5.8716m29.90953-30.69186v7.059a23.49154,23.49154,0,0,0-8.663,1.96239L94.9739,17.9188a30.51,30.51,0,0,1,11.72355-2.66125m13.4257,2.70544-3.08351,6.3495a23.472,23.472,0,0,0-8.73742-1.99594v-7.059A30.50154,30.50154,0,0,1,120.12315,17.963m17.34063,15.90362a32.313,32.313,0,0,0-2.85028-5.46814l5.76685-3.96077a39.24631,39.24631,0,0,1,3.63016,6.96325Zm-.22422,4.40513-6.89534,1.554a23.58723,23.58723,0,0,0-3.89857-8.02219l5.52789-4.3814a30.621,30.621,0,0,1,5.266,10.84956m-11.80293-7.71532a23.81538,23.81538,0,0,0-6.9518-5.54588l3.08269-6.34788a30.90213,30.90213,0,0,1,9.40192,7.50828Zm-2.05322-12.7342,3.26764-6.18746a39.46147,39.46147,0,0,1,6.44034,4.50987l-4.64981,5.22183a32.46159,32.46159,0,0,0-5.05817-3.54424m-1.4149-.75614a32.08248,32.08248,0,0,0-5.76767-2.23326l1.69314-6.7914a39.0394,39.0394,0,0,1,7.34052,2.84046ZM114.646,14.43921a32.24042,32.24042,0,0,0-6.23249-.78315v-6.996a39.19951,39.19951,0,0,1,7.92481.991Zm-7.83726-.78888a32.24565,32.24565,0,0,0-6.15637.71932L98.97886,7.57742a39.234,39.234,0,0,1,7.82988-.92308Zm-7.71613,1.09821a32.0502,32.0502,0,0,0-5.80612,2.1866l-3.24881-6.1932A38.98649,38.98649,0,0,1,97.41829,7.953ZM91.865,17.679a32.52732,32.52732,0,0,0-5.11381,3.51968L82.117,15.96377a39.45508,39.45508,0,0,1,6.4968-4.48123Zm1.66287.93455,3.06059,6.36014a23.796,23.796,0,0,0-6.97144,5.52053l-5.51644-4.40431a30.89616,30.89616,0,0,1,9.42729-7.47636M83.0916,27.33872l5.51316,4.40021a23.59366,23.59366,0,0,0-3.92722,8.00746l-6.888-1.57776a30.619,30.619,0,0,1,5.302-10.82991m-5.49352,6.37159-6.53936-2.48366a39.21948,39.21948,0,0,1,3.68826-6.987L80.50319,28.216a32.30037,32.30037,0,0,0-2.90511,5.49434m-.572,1.4992a32.03717,32.03717,0,0,0-1.49593,6.03526l-6.9428-.8478a38.98134,38.98134,0,0,1,1.89527-7.67276ZM75.52931,50.64832A32.00261,32.00261,0,0,0,77.0236,56.682l-6.54672,2.4763a39.031,39.031,0,0,1-1.892-7.67112Zm2.06549,7.53283a32.31329,32.31329,0,0,0,2.90184,5.49107l-5.76111,3.96895a39.21039,39.21039,0,0,1-3.68335-6.98536Zm.10966-4.793,6.88143-1.563a23.57417,23.57417,0,0,0,3.85275,8.10812l-5.52789,4.39694a30.61581,30.61581,0,0,1-5.20629-10.942m11.72846,7.8037A23.802,23.802,0,0,0,96.433,66.84492l-3.07123,6.35442a30.90651,30.90651,0,0,1-9.45348-7.613ZM91.84211,74.2059l-3.25944,6.19238a39.47811,39.47811,0,0,1-6.487-4.48205l4.64244-5.22838a32.44932,32.44932,0,0,0,5.104,3.51805m1.42064.74469a32.08322,32.08322,0,0,0,5.79631,2.18906l-1.68414,6.79386a39.01306,39.01306,0,0,1-7.37-2.79381Zm7.35525,2.56958a32.26679,32.26679,0,0,0,6.14574.72669l-.00983,6.996a39.25167,39.25167,0,0,1-7.81924-.93209Zm7.7505.72342a32.24043,32.24043,0,0,0,6.13592-.752l1.66369,6.7955a39.28048,39.28048,0,0,1-7.80943.95336Zm7.69322-1.13831a32.06937,32.06937,0,0,0,5.76931-2.203l3.24062,6.19811a39.038,39.038,0,0,1-7.34542,2.80446Zm7.18749-2.95258a32.418,32.418,0,0,0,5.07044-3.51477l4.6269,5.24147a39.42622,39.42622,0,0,1-6.45426,4.47551Zm-1.70706-.90426-3.05-6.36506a23.79821,23.79821,0,0,0,7.01973-5.62854l5.50907,4.41249a30.88628,30.88628,0,0,1-9.47884,7.58111m10.48049-8.834-5.50989-4.41331a23.576,23.576,0,0,0,3.87975-8.09667l6.87816,1.5884a30.60654,30.60654,0,0,1-5.248,10.92158M137.4,58.19179l6.53609,2.49348a39.29307,39.29307,0,0,1-3.66208,6.94117l-5.75129-3.98532A32.2271,32.2271,0,0,0,137.4,58.19179m.57284-1.4992a32.01282,32.01282,0,0,0,1.48938-5.98126l6.942.85763a38.95407,38.95407,0,0,1-1.89119,7.61875Zm1.49839-33.57652-5.76439,3.95832a32.66153,32.66153,0,0,0-4.07044-4.63673l4.65146-5.22427a39.5884,39.5884,0,0,1,5.18337,5.90268M80.91154,17.02271l4.63754,5.2382a32.56366,32.56366,0,0,0-4.13017,4.63753L75.666,22.92376a39.64439,39.64439,0,0,1,5.24557-5.90105M75.65288,68.95706l5.75867-3.9665a32.63142,32.63142,0,0,0,4.12362,4.63427l-4.64409,5.23083a39.62273,39.62273,0,0,1-5.2382-5.8986m58.49663,5.86013-4.63018-5.24474a32.59461,32.59461,0,0,0,4.08925-4.61135l5.748,3.98205a39.62078,39.62078,0,0,1-5.2071,5.874"/></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:transparent;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#201f1f;}</style><clipPath id="clip-path"><rect class="cls-1" x="47.10319" y="-14.44805" width="120.79362" height="154.67619"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-2" x="-3.35417" y="-4.36563" width="223.25536" height="134.51136"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M80.868,106.58157l1.88546,5.32249c.80525,2.29872,1.33635,3.86912,1.80771,5.30285.45091-1.39445,1.00084-2.96567,1.8069-5.28321l1.88464-5.34213H91.121l-5.18582,13.94535H83.0677l-5.16536-13.94535Z"/><path class="cls-4" d="M95.04747,116.34332a5.81875,5.81875,0,0,0,4.419,2.08185c1.55239,0,2.71116-.82488,2.71116-1.98365,0-1.17841-.94191-1.4141-2.53358-1.76762L98.17026,114.34c-3.00413-.66858-4.14408-1.74879-4.14408-3.83065,0-2.37647,2.239-4.16372,5.24475-4.16372a6.66312,6.66312,0,0,1,5.50007,2.3961l-1.92556,1.473a4.49767,4.49767,0,0,0-3.59415-1.53194c-1.39445,0-2.4362.766-2.4362,1.67023,0,.84371.55074,1.13831,2.04339,1.49184l1.66942.37316c3.16289.70705,4.43868,1.76762,4.43868,4.0066,0,2.78972-2.47466,4.5377-5.46,4.5377a7.9844,7.9844,0,0,1-6.28486-2.86747Z"/><path class="cls-4" d="M120.77807,110.82353l-2.80937.56956c-.491-1.64895-1.49265-2.67024-3.02459-2.67024-2.12195,0-3.39775,1.82571-3.39775,4.83148,0,3.02459,1.33554,4.83148,3.33883,4.83148,1.7488,0,2.88711-1.02129,3.39776-3.45667l2.49512.39281c-.59,3.61379-2.73081,5.44114-5.91252,5.44114-3.79055,0-6.34459-2.96648-6.34459-7.20876,0-4.2431,2.57368-7.20876,6.42315-7.20876a5.85377,5.85377,0,0,1,5.834,4.478"/><path class="cls-4" d="M137.09733,113.55425c0,4.22263-2.53276,7.20876-6.34377,7.20876-3.79056,0-6.38306-2.98613-6.38306-7.20876,0-4.22346,2.5925-7.20877,6.38306-7.20877,3.811,0,6.34377,2.98531,6.34377,7.20877m-9.70224,0c0,2.96566,1.257,4.83148,3.35847,4.83148,2.10231,0,3.30036-1.86582,3.30036-4.83148,0-2.94685-1.198-4.83149-3.30036-4.83149-2.1015,0-3.35847,1.88464-3.35847,4.83149"/><path class="cls-4" d="M107.50024,5.03238a40.917,40.917,0,1,0,40.917,40.917,40.96348,40.96348,0,0,0-40.917-40.917m39.31227,40.917a39.47023,39.47023,0,0,1-.2054,4.02788l-6.94854-.85845c.1023-1.04338.15713-2.09986.15713-3.16943,0-1.01065-.05238-2.0082-.144-2.99512l6.9518-.829c.12194,1.25942.189,2.53358.189,3.8241m-78.62535,0a39.5846,39.5846,0,0,1,.19968-3.95995l6.95017.8478c-.099,1.02457-.153,2.06222-.153,3.11215,0,1.0483.054,2.08268.15221,3.10561l-6.95016.8388c-.13012-1.29708-.19886-2.613-.19886-3.94441m69.84128-10.58033,6.54918-2.46647a38.94079,38.94079,0,0,1,1.85272,7.63021l-6.94607.82816a32.01254,32.01254,0,0,0-1.45583-5.9919m.18249,10.58033a30.68588,30.68588,0,0,1-.58839,5.978l-6.8847-1.59a23.49851,23.49851,0,0,0-.03027-8.94856l6.89124-1.55321a30.78019,30.78019,0,0,1,.61212,6.11382M107.50024,67.998A22.049,22.049,0,1,1,129.548,45.94941,22.07344,22.07344,0,0,1,107.50024,67.998m.748,8.64414.01227-7.059a23.49526,23.49526,0,0,0,8.78816-2.00084l3.04914,6.36423a30.5146,30.5146,0,0,1-11.84957,2.69562M94.80369,73.90229l3.072-6.35441a23.49229,23.49229,0,0,0,8.7808,2.03276l-.0131,7.05818a30.50258,30.50258,0,0,1-11.83975-2.73653M76.78792,45.94941a30.71827,30.71827,0,0,1,.63422-6.21857l6.88469,1.57694a23.5197,23.5197,0,0,0-.05973,8.94856L77.35749,51.821a30.78742,30.78742,0,0,1-.56957-5.8716m29.90953-30.69186v7.059a23.49154,23.49154,0,0,0-8.663,1.96239L94.9739,17.9188a30.51,30.51,0,0,1,11.72355-2.66125m13.4257,2.70544-3.08351,6.3495a23.472,23.472,0,0,0-8.73742-1.99594v-7.059A30.50154,30.50154,0,0,1,120.12315,17.963m17.34063,15.90362a32.313,32.313,0,0,0-2.85028-5.46814l5.76685-3.96077a39.24631,39.24631,0,0,1,3.63016,6.96325Zm-.22422,4.40513-6.89534,1.554a23.58723,23.58723,0,0,0-3.89857-8.02219l5.52789-4.3814a30.621,30.621,0,0,1,5.266,10.84956m-11.80293-7.71532a23.81538,23.81538,0,0,0-6.9518-5.54588l3.08269-6.34788a30.90213,30.90213,0,0,1,9.40192,7.50828Zm-2.05322-12.7342,3.26764-6.18746a39.46147,39.46147,0,0,1,6.44034,4.50987l-4.64981,5.22183a32.46159,32.46159,0,0,0-5.05817-3.54424m-1.4149-.75614a32.08248,32.08248,0,0,0-5.76767-2.23326l1.69314-6.7914a39.0394,39.0394,0,0,1,7.34052,2.84046ZM114.646,14.43921a32.24042,32.24042,0,0,0-6.23249-.78315v-6.996a39.19951,39.19951,0,0,1,7.92481.991Zm-7.83726-.78888a32.24565,32.24565,0,0,0-6.15637.71932L98.97886,7.57742a39.234,39.234,0,0,1,7.82988-.92308Zm-7.71613,1.09821a32.0502,32.0502,0,0,0-5.80612,2.1866l-3.24881-6.1932A38.98649,38.98649,0,0,1,97.41829,7.953ZM91.865,17.679a32.52732,32.52732,0,0,0-5.11381,3.51968L82.117,15.96377a39.45508,39.45508,0,0,1,6.4968-4.48123Zm1.66287.93455,3.06059,6.36014a23.796,23.796,0,0,0-6.97144,5.52053l-5.51644-4.40431a30.89616,30.89616,0,0,1,9.42729-7.47636M83.0916,27.33872l5.51316,4.40021a23.59366,23.59366,0,0,0-3.92722,8.00746l-6.888-1.57776a30.619,30.619,0,0,1,5.302-10.82991m-5.49352,6.37159-6.53936-2.48366a39.21948,39.21948,0,0,1,3.68826-6.987L80.50319,28.216a32.30037,32.30037,0,0,0-2.90511,5.49434m-.572,1.4992a32.03717,32.03717,0,0,0-1.49593,6.03526l-6.9428-.8478a38.98134,38.98134,0,0,1,1.89527-7.67276ZM75.52931,50.64832A32.00261,32.00261,0,0,0,77.0236,56.682l-6.54672,2.4763a39.031,39.031,0,0,1-1.892-7.67112Zm2.06549,7.53283a32.31329,32.31329,0,0,0,2.90184,5.49107l-5.76111,3.96895a39.21039,39.21039,0,0,1-3.68335-6.98536Zm.10966-4.793,6.88143-1.563a23.57417,23.57417,0,0,0,3.85275,8.10812l-5.52789,4.39694a30.61581,30.61581,0,0,1-5.20629-10.942m11.72846,7.8037A23.802,23.802,0,0,0,96.433,66.84492l-3.07123,6.35442a30.90651,30.90651,0,0,1-9.45348-7.613ZM91.84211,74.2059l-3.25944,6.19238a39.47811,39.47811,0,0,1-6.487-4.48205l4.64244-5.22838a32.44932,32.44932,0,0,0,5.104,3.51805m1.42064.74469a32.08322,32.08322,0,0,0,5.79631,2.18906l-1.68414,6.79386a39.01306,39.01306,0,0,1-7.37-2.79381Zm7.35525,2.56958a32.26679,32.26679,0,0,0,6.14574.72669l-.00983,6.996a39.25167,39.25167,0,0,1-7.81924-.93209Zm7.7505.72342a32.24043,32.24043,0,0,0,6.13592-.752l1.66369,6.7955a39.28048,39.28048,0,0,1-7.80943.95336Zm7.69322-1.13831a32.06937,32.06937,0,0,0,5.76931-2.203l3.24062,6.19811a39.038,39.038,0,0,1-7.34542,2.80446Zm7.18749-2.95258a32.418,32.418,0,0,0,5.07044-3.51477l4.6269,5.24147a39.42622,39.42622,0,0,1-6.45426,4.47551Zm-1.70706-.90426-3.05-6.36506a23.79821,23.79821,0,0,0,7.01973-5.62854l5.50907,4.41249a30.88628,30.88628,0,0,1-9.47884,7.58111m10.48049-8.834-5.50989-4.41331a23.576,23.576,0,0,0,3.87975-8.09667l6.87816,1.5884a30.60654,30.60654,0,0,1-5.248,10.92158M137.4,58.19179l6.53609,2.49348a39.29307,39.29307,0,0,1-3.66208,6.94117l-5.75129-3.98532A32.2271,32.2271,0,0,0,137.4,58.19179m.57284-1.4992a32.01282,32.01282,0,0,0,1.48938-5.98126l6.942.85763a38.95407,38.95407,0,0,1-1.89119,7.61875Zm1.49839-33.57652-5.76439,3.95832a32.66153,32.66153,0,0,0-4.07044-4.63673l4.65146-5.22427a39.5884,39.5884,0,0,1,5.18337,5.90268M80.91154,17.02271l4.63754,5.2382a32.56366,32.56366,0,0,0-4.13017,4.63753L75.666,22.92376a39.64439,39.64439,0,0,1,5.24557-5.90105M75.65288,68.95706l5.75867-3.9665a32.63142,32.63142,0,0,0,4.12362,4.63427l-4.64409,5.23083a39.62273,39.62273,0,0,1-5.2382-5.8986m58.49663,5.86013-4.63018-5.24474a32.59461,32.59461,0,0,0,4.08925-4.61135l5.748,3.98205a39.62078,39.62078,0,0,1-5.2071,5.874"/></g></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/wikimedia/wikimedia_featured.svg b/content/en/case-studies/wikimedia/wikimedia_featured.svg
index b3e654dd64..5fa786aaa5 100644
--- a/content/en/case-studies/wikimedia/wikimedia_featured.svg
+++ b/content/en/case-studies/wikimedia/wikimedia_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#900;}.cls-3{fill:#069;}.cls-4{fill:#396;}.cls-5{fill:#484848;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.75123" y="-4.36563" width="223.25536" height="134.51136"/><circle id="circle3" class="cls-2" cx="107.84735" cy="21.48597" r="15.77727"/><path id="path5" class="cls-3" d="M139.7013,18.0353l-8.93976,8.9394a34.71,34.71,0,1,1-45.8277,0l-8.93975-8.93975a47.33269,47.33269,0,1,0,63.70721.00035Z"/><path id="path7" class="cls-4" d="M104.69189,46.73345,89.41109,31.45229a28.38989,28.38989,0,0,0,15.2808,49.812Zm21.59242-15.28116L111.00315,46.7331V81.26427a28.39011,28.39011,0,0,0,15.28116-49.812Z"/><path id="path9" class="cls-5" d="M170.3688,119.11393h-4.10315l-1.08337-2.69545H159.411l-1.103,2.69545h-4.10314l5.87686-13.29007h4.42955Zm-6.10686-5.00735-1.94656-4.85378-1.9648,4.85378Zm-11.848,5.00735h-3.99937V105.82386h3.999v13.29007Zm-6.49357-6.40066a6.31385,6.31385,0,0,1-.74329,3.27677,7.01233,7.01233,0,0,1-1.74987,2.003,6.32532,6.32532,0,0,1-3.99445,1.12088h-7.16393V105.82387h5.51678a14.9088,14.9088,0,0,1,2.13134.13008,9.38954,9.38954,0,0,1,1.59455.365,6.28678,6.28678,0,0,1,1.20678.52942,6.20368,6.20368,0,0,1,.89089.63,6.10431,6.10431,0,0,1,1.19346,1.31337,6.40745,6.40745,0,0,1,.81516,1.75478A7.42171,7.42171,0,0,1,145.92035,112.71327Zm-4.0758-.1725a4.43822,4.43822,0,0,0-.61812-2.5247,3.02773,3.02773,0,0,0-1.48516-1.21205,5.25783,5.25783,0,0,0-1.76775-.30678h-1.7057v7.86689h1.7057a4.88661,4.88661,0,0,0,2.7214-.74714Q141.84454,114.86915,141.84455,112.54077Zm-12.2684,6.57316H119.566V105.82386h9.84712v2.67337H123.565v2.4325h5.57919v2.67337H123.565v2.83815h6.01113Zm-13.38193,0h-3.99936v-7.70246l-3.61614,4.45935h-.3166l-3.62632-4.45935v7.70246h-3.88962V105.82386h3.63052l4.08632,4.98562,4.10524-4.98562h3.62632l-.00036,13.29007Zm-18.80965,0H93.38591V105.82386h3.99866Zm-5.76291,0h-4.8892l-5.081-6.22326v6.22326H77.65282V105.82386h3.99866v5.94978l4.81312-5.94978H90.817l-4.9467,6.22325Zm-17.34132,0h-3.999V105.82386h3.999v13.29007Zm-5.859-13.29041-5.752,13.46537h-2.32L56.898,111.455l-3.53761,7.83394H51.02114l-5.637-13.46537h4.15118l2.761,7.36272,3.16351-7.36272h2.86656l3.10567,7.36272,2.88548-7.36272Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#900;}.cls-3{fill:#069;}.cls-4{fill:#396;}.cls-5{fill:#484848;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.75123" y="-4.36563" width="223.25536" height="134.51136"/><circle id="circle3" class="cls-2" cx="107.84735" cy="21.48597" r="15.77727"/><path id="path5" class="cls-3" d="M139.7013,18.0353l-8.93976,8.9394a34.71,34.71,0,1,1-45.8277,0l-8.93975-8.93975a47.33269,47.33269,0,1,0,63.70721.00035Z"/><path id="path7" class="cls-4" d="M104.69189,46.73345,89.41109,31.45229a28.38989,28.38989,0,0,0,15.2808,49.812Zm21.59242-15.28116L111.00315,46.7331V81.26427a28.39011,28.39011,0,0,0,15.28116-49.812Z"/><path id="path9" class="cls-5" d="M170.3688,119.11393h-4.10315l-1.08337-2.69545H159.411l-1.103,2.69545h-4.10314l5.87686-13.29007h4.42955Zm-6.10686-5.00735-1.94656-4.85378-1.9648,4.85378Zm-11.848,5.00735h-3.99937V105.82386h3.999v13.29007Zm-6.49357-6.40066a6.31385,6.31385,0,0,1-.74329,3.27677,7.01233,7.01233,0,0,1-1.74987,2.003,6.32532,6.32532,0,0,1-3.99445,1.12088h-7.16393V105.82387h5.51678a14.9088,14.9088,0,0,1,2.13134.13008,9.38954,9.38954,0,0,1,1.59455.365,6.28678,6.28678,0,0,1,1.20678.52942,6.20368,6.20368,0,0,1,.89089.63,6.10431,6.10431,0,0,1,1.19346,1.31337,6.40745,6.40745,0,0,1,.81516,1.75478A7.42171,7.42171,0,0,1,145.92035,112.71327Zm-4.0758-.1725a4.43822,4.43822,0,0,0-.61812-2.5247,3.02773,3.02773,0,0,0-1.48516-1.21205,5.25783,5.25783,0,0,0-1.76775-.30678h-1.7057v7.86689h1.7057a4.88661,4.88661,0,0,0,2.7214-.74714Q141.84454,114.86915,141.84455,112.54077Zm-12.2684,6.57316H119.566V105.82386h9.84712v2.67337H123.565v2.4325h5.57919v2.67337H123.565v2.83815h6.01113Zm-13.38193,0h-3.99936v-7.70246l-3.61614,4.45935h-.3166l-3.62632-4.45935v7.70246h-3.88962V105.82386h3.63052l4.08632,4.98562,4.10524-4.98562h3.62632l-.00036,13.29007Zm-18.80965,0H93.38591V105.82386h3.99866Zm-5.76291,0h-4.8892l-5.081-6.22326v6.22326H77.65282V105.82386h3.99866v5.94978l4.81312-5.94978H90.817l-4.9467,6.22325Zm-17.34132,0h-3.999V105.82386h3.999v13.29007Zm-5.859-13.29041-5.752,13.46537h-2.32L56.898,111.455l-3.53761,7.83394H51.02114l-5.637-13.46537h4.15118l2.761,7.36272,3.16351-7.36272h2.86656l3.10567,7.36272,2.88548-7.36272Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/wink/wink_featured.svg b/content/en/case-studies/wink/wink_featured.svg
index 3e27cac771..8168ac2b43 100644
--- a/content/en/case-studies/wink/wink_featured.svg
+++ b/content/en/case-studies/wink/wink_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#22b9ec;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-3.899" width="223.25536" height="134.51136"/><g id="Wink"><path id="W" class="cls-2" d="M12.91,48.96543H27.30572l7.69292,19.15615c.89117-3.32547,6.79187-13.48167,10.18742-20.2225h1.02826c3.54789,6.66467,9.92312,17.30071,10.64443,19.994L64.7421,48.96543H77.80484l-19.23232,42.273H57.37288c-3.97976-7.59162-11.02069-19.34657-11.93927-22.77411-.95819,3.57683-8.26419,15.18249-12.39628,22.77411H31.91386Z"/><path id="i" class="cls-2" d="M81.87981,31.82771,89.72507,26.953l7.84527,4.87472V41.958H81.87981Zm1.33293,17.13772H96.27549V90.1721H83.21274Z"/><path id="n" class="cls-2" d="M106.71045,48.96543h13.06274l-.2285,6.66466c5.0621-11.18293,28.06624-11.64069,28.52477,10.09221V90.1721H135.00672l-.03809-23.15495c.2445-10.39307-15.93045-8.63817-15.15735,1.06635l-.03809,22.0886H106.71045Z"/><path id="k" class="cls-2" d="M156.14323,49.00351H169.206l-.03808,15.005,12.87233-15.0431h14.50993l-14.548,16.833L198.13062,90.1721H182.91614L172.6716,74.63391,169.206,78.29V90.1721H156.14323Z"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#22b9ec;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-3.899" width="223.25536" height="134.51136"/><g id="Wink"><path id="W" class="cls-2" d="M12.91,48.96543H27.30572l7.69292,19.15615c.89117-3.32547,6.79187-13.48167,10.18742-20.2225h1.02826c3.54789,6.66467,9.92312,17.30071,10.64443,19.994L64.7421,48.96543H77.80484l-19.23232,42.273H57.37288c-3.97976-7.59162-11.02069-19.34657-11.93927-22.77411-.95819,3.57683-8.26419,15.18249-12.39628,22.77411H31.91386Z"/><path id="i" class="cls-2" d="M81.87981,31.82771,89.72507,26.953l7.84527,4.87472V41.958H81.87981Zm1.33293,17.13772H96.27549V90.1721H83.21274Z"/><path id="n" class="cls-2" d="M106.71045,48.96543h13.06274l-.2285,6.66466c5.0621-11.18293,28.06624-11.64069,28.52477,10.09221V90.1721H135.00672l-.03809-23.15495c.2445-10.39307-15.93045-8.63817-15.15735,1.06635l-.03809,22.0886H106.71045Z"/><path id="k" class="cls-2" d="M156.14323,49.00351H169.206l-.03808,15.005,12.87233-15.0431h14.50993l-14.548,16.833L198.13062,90.1721H182.91614L172.6716,74.63391,169.206,78.29V90.1721H156.14323Z"/></g></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/woorank/woorank_featured_logo.svg b/content/en/case-studies/woorank/woorank_featured_logo.svg
index a5e3736ee1..50b64e9a9c 100644
--- a/content/en/case-studies/woorank/woorank_featured_logo.svg
+++ b/content/en/case-studies/woorank/woorank_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#438bca;}.cls-3{fill:#030303;}.cls-4{fill:#fdfdfd;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.02201" y="-4.03454" width="223.25536" height="134.51136"/><path class="cls-2" d="M23.18835,77.94422c-.38889-.39147-.93393-.34593-1.40941-.47676-6.66613-1.83419-11.34437-8.36322-10.66135-14.90235A14.4776,14.4776,0,0,1,29.57753,50.22523,26.83033,26.83033,0,0,1,40.00647,56.3468a45.35944,45.35944,0,0,1,6.23086,6.78507c.31727.42431.45584.71686.0704,1.215-3.853,4.98017-8.23457,9.33011-14.06489,12.0347-1.5397.71424-3.20816.97833-4.77957,1.5626ZM33.46693,60.24855a1.55439,1.55439,0,0,0-1.03047-1.6058,1.83124,1.83124,0,0,0-2.06416.45662c-1.716,1.73478-3.46022,3.44211-5.16427,5.18826-.42244.43287-.70868.502-1.13286.01922-.49226-.56025-1.04179-1.07258-1.58476-1.58661a1.859,1.859,0,0,0-2.72555-.13911,1.828,1.828,0,0,0,.21415,2.6244c1.32563,1.34575,2.69335,2.65083,4.00733,4.00749.44618.46068.72905.53422,1.22306.034,2.51659-2.54811,5.06807-5.06224,7.61327-7.58234A1.79456,1.79456,0,0,0,33.46693,60.24855Z"/><path class="cls-3" d="M204.15991,75.11166c-1.50332-.01172-3.00792-.06374-4.50943-.01751a1.75419,1.75419,0,0,1-1.59029-.75989c-1.97343-2.50856-3.984-4.98827-5.98183-7.47788-.19694-.24542-.39275-.492-.59787-.73061-.31237-.36326-.74694-.25583-1.10819-.18681-.45323.0866-.22791.52184-.23006.78863-.02,2.47829-.0374,4.95722.00434,7.435.012.71124-.1589,1.002-.91576.9242-1.28177-.1318-2.93357.53451-3.7556-.265-.7126-.69308-.19033-2.31964-.19249-3.5324-.01374-7.75.00377-15.50015-.02377-23.25011a2.32521,2.32521,0,0,1,.77368-1.85181c1.30874-1.25585,2.55659-2.57435,3.84838-3.88714.40018.34436.23983.71413.24049,1.02393.01225,5.58631-.00087,11.17271.02786,16.7589.00225.43866-.38517,1.08841.29051,1.324.68939.24036,1.14216-.21465,1.58377-.72684,1.98266-2.29951,4.01777-4.55443,5.99514-6.85834a1.73076,1.73076,0,0,1,1.51044-.67342c1.54253.04157,3.087.01179,4.63068.01084v.70814q-4.16766,4.5867-8.3421,9.16729a.56589.56589,0,0,0-.0079.893q4.1873,5.1099,8.35,10.23971Z"/><path class="cls-3" d="M62.34977,66.0802l6.36906-14.80443,6.33343,14.81868c.92456-2.02792,1.81843-3.85944,2.60331-5.736,1.83605-4.38974,5.013-7.115,9.81407-7.64354,5.29562-.583,9.10767,1.319,12.14615,5.88124A11.76974,11.76974,0,0,1,110.461,52.62866a11.5739,11.5739,0,0,1,8.58366,3.63926,11.73741,11.73741,0,0,1-.634,16.35977c-4.127,3.83749-14.01077,4.97139-18.82285-2.91025-4.55062,7.9181-16.49214,7.77316-21.01439.07489l-3.56938,7.145c-2.11306-4.77184-4.16878-9.41418-6.29021-14.2049L62.38577,76.9508,50.60859,53.19035c1.89658,0,3.588.03008,5.27747-.01468.68409-.01812.7398.4893.92182.88185q2.55022,5.5,5.07276,11.01272C62.00317,65.33666,62.12765,65.6022,62.34977,66.0802Zm26.71858-8.95612a6.99263,6.99263,0,1,0,6.87974,6.98481A6.74266,6.74266,0,0,0,89.06835,57.12408Zm21.10219.00026a6.9926,6.9926,0,1,0,6.96664,6.91894A6.75361,6.75361,0,0,0,110.17054,57.12434Z"/><path class="cls-3" d="M154.15731,54.92551c.16411-1.7633.16416-1.77156,1.9411-1.75994.94081.00615,2.16914-.30145,2.74344.16719.60864.49667.1829,1.76508.18571,2.6936.01823,6.01388-.00827,12.028.02969,18.04165.00529.83456-.21716,1.09694-1.0482,1.02511a15.13169,15.13169,0,0,0-2.60729-.00037c-.905.079-1.33541-.18013-1.16227-1.135a3.71252,3.71252,0,0,0,.00456-.60213,11.354,11.354,0,0,1-15.50832-1.79272,12.35232,12.35232,0,0,1,.72462-15.7117A11.2029,11.2029,0,0,1,154.15731,54.92551Zm-6.31075,2.19929c-3.89035.00948-6.639,2.92944-6.62482,7.03768.01407,4.069,2.82346,6.97019,6.72632,6.94609,3.8018-.02347,6.56955-2.96551,6.5735-6.98738C154.52556,60.03665,151.73842,57.11532,147.84656,57.1248Z"/><path class="cls-3" d="M166.76542,55.61139A9.298,9.298,0,0,1,177.88268,53.607a7.57481,7.57481,0,0,1,4.41472,6.41325c.34818,4.788.07282,9.59361.14207,14.39111.0073.5066-.17814.73175-.69147.66627a2.24474,2.24474,0,0,0-.23729-.0014c-1.26006-.02474-2.90538.41958-3.67436-.20384-.8066-.65393-.228-2.35528-.24561-3.59656-.03843-2.71375-.017-5.42843-.00951-8.1427a8.31622,8.31622,0,0,0-.38232-2.78642c-.79349-2.283-2.73515-3.40225-5.45354-3.15638a5.23464,5.23464,0,0,0-4.86287,4.54273,30.30411,30.30411,0,0,0-.13526,3.76778c-.01715,2.87154-.03022,5.7436.01109,8.61465.01107.7694-.20413,1.0324-.99432.97813a26.46866,26.46866,0,0,0-3.08533-.004c-.64044.031-.79447-.19975-.79281-.80563q.02814-10.208-.00052-20.41609c-.00165-.582.18731-.75824.74381-.71427.51131.04039,1.02849.0018,1.54288.01007.787.01263,1.767-.2421,2.30832.12971C167.06059,53.692,166.53787,54.74455,166.76542,55.61139Z"/><path class="cls-3" d="M128.58017,54.65482c3.26807-2.6423,6.75571-2.29748,10.56364-1.37546a15.59573,15.59573,0,0,0-3.12964,3.77712c-.17236.311-.42018.2766-.71051.21834-3.92624-.78781-5.7973,2.00236-6.40667,4.99184-.52241,2.56291-.20937,5.16741-.27145,7.753-.033,1.37387-.03807,2.75023.00786,4.12336.02271.67908-.10539,1.004-.89142.94969-1.25357-.08662-2.89033.39869-3.66944-.22133-.82257-.65458-.24693-2.34894-.25355-3.58528-.02986-5.577.03461-11.155-.04967-16.73085-.01886-1.248.36624-1.5595,1.49617-1.4058a8.16986,8.16986,0,0,0,1.65746.00591C127.958,53.083,128.94424,53.028,128.58017,54.65482Z"/><path class="cls-4" d="M33.46693,60.24855a1.79456,1.79456,0,0,1-.64426,1.41615c-2.5452,2.5201-5.09668,5.03423-7.61327,7.58234-.494.5002-.77688.42666-1.22306-.034-1.314-1.35666-2.6817-2.66174-4.00733-4.00749a1.828,1.828,0,0,1-.21415-2.6244,1.859,1.859,0,0,1,2.72555.13911c.543.514,1.0925,1.02636,1.58476,1.58661.42418.48275.71042.41365,1.13286-.01922,1.704-1.74615,3.44829-3.45348,5.16427-5.18826a1.83124,1.83124,0,0,1,2.06416-.45662A1.55439,1.55439,0,0,1,33.46693,60.24855Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#438bca;}.cls-3{fill:#030303;}.cls-4{fill:#fdfdfd;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-4.02201" y="-4.03454" width="223.25536" height="134.51136"/><path class="cls-2" d="M23.18835,77.94422c-.38889-.39147-.93393-.34593-1.40941-.47676-6.66613-1.83419-11.34437-8.36322-10.66135-14.90235A14.4776,14.4776,0,0,1,29.57753,50.22523,26.83033,26.83033,0,0,1,40.00647,56.3468a45.35944,45.35944,0,0,1,6.23086,6.78507c.31727.42431.45584.71686.0704,1.215-3.853,4.98017-8.23457,9.33011-14.06489,12.0347-1.5397.71424-3.20816.97833-4.77957,1.5626ZM33.46693,60.24855a1.55439,1.55439,0,0,0-1.03047-1.6058,1.83124,1.83124,0,0,0-2.06416.45662c-1.716,1.73478-3.46022,3.44211-5.16427,5.18826-.42244.43287-.70868.502-1.13286.01922-.49226-.56025-1.04179-1.07258-1.58476-1.58661a1.859,1.859,0,0,0-2.72555-.13911,1.828,1.828,0,0,0,.21415,2.6244c1.32563,1.34575,2.69335,2.65083,4.00733,4.00749.44618.46068.72905.53422,1.22306.034,2.51659-2.54811,5.06807-5.06224,7.61327-7.58234A1.79456,1.79456,0,0,0,33.46693,60.24855Z"/><path class="cls-3" d="M204.15991,75.11166c-1.50332-.01172-3.00792-.06374-4.50943-.01751a1.75419,1.75419,0,0,1-1.59029-.75989c-1.97343-2.50856-3.984-4.98827-5.98183-7.47788-.19694-.24542-.39275-.492-.59787-.73061-.31237-.36326-.74694-.25583-1.10819-.18681-.45323.0866-.22791.52184-.23006.78863-.02,2.47829-.0374,4.95722.00434,7.435.012.71124-.1589,1.002-.91576.9242-1.28177-.1318-2.93357.53451-3.7556-.265-.7126-.69308-.19033-2.31964-.19249-3.5324-.01374-7.75.00377-15.50015-.02377-23.25011a2.32521,2.32521,0,0,1,.77368-1.85181c1.30874-1.25585,2.55659-2.57435,3.84838-3.88714.40018.34436.23983.71413.24049,1.02393.01225,5.58631-.00087,11.17271.02786,16.7589.00225.43866-.38517,1.08841.29051,1.324.68939.24036,1.14216-.21465,1.58377-.72684,1.98266-2.29951,4.01777-4.55443,5.99514-6.85834a1.73076,1.73076,0,0,1,1.51044-.67342c1.54253.04157,3.087.01179,4.63068.01084v.70814q-4.16766,4.5867-8.3421,9.16729a.56589.56589,0,0,0-.0079.893q4.1873,5.1099,8.35,10.23971Z"/><path class="cls-3" d="M62.34977,66.0802l6.36906-14.80443,6.33343,14.81868c.92456-2.02792,1.81843-3.85944,2.60331-5.736,1.83605-4.38974,5.013-7.115,9.81407-7.64354,5.29562-.583,9.10767,1.319,12.14615,5.88124A11.76974,11.76974,0,0,1,110.461,52.62866a11.5739,11.5739,0,0,1,8.58366,3.63926,11.73741,11.73741,0,0,1-.634,16.35977c-4.127,3.83749-14.01077,4.97139-18.82285-2.91025-4.55062,7.9181-16.49214,7.77316-21.01439.07489l-3.56938,7.145c-2.11306-4.77184-4.16878-9.41418-6.29021-14.2049L62.38577,76.9508,50.60859,53.19035c1.89658,0,3.588.03008,5.27747-.01468.68409-.01812.7398.4893.92182.88185q2.55022,5.5,5.07276,11.01272C62.00317,65.33666,62.12765,65.6022,62.34977,66.0802Zm26.71858-8.95612a6.99263,6.99263,0,1,0,6.87974,6.98481A6.74266,6.74266,0,0,0,89.06835,57.12408Zm21.10219.00026a6.9926,6.9926,0,1,0,6.96664,6.91894A6.75361,6.75361,0,0,0,110.17054,57.12434Z"/><path class="cls-3" d="M154.15731,54.92551c.16411-1.7633.16416-1.77156,1.9411-1.75994.94081.00615,2.16914-.30145,2.74344.16719.60864.49667.1829,1.76508.18571,2.6936.01823,6.01388-.00827,12.028.02969,18.04165.00529.83456-.21716,1.09694-1.0482,1.02511a15.13169,15.13169,0,0,0-2.60729-.00037c-.905.079-1.33541-.18013-1.16227-1.135a3.71252,3.71252,0,0,0,.00456-.60213,11.354,11.354,0,0,1-15.50832-1.79272,12.35232,12.35232,0,0,1,.72462-15.7117A11.2029,11.2029,0,0,1,154.15731,54.92551Zm-6.31075,2.19929c-3.89035.00948-6.639,2.92944-6.62482,7.03768.01407,4.069,2.82346,6.97019,6.72632,6.94609,3.8018-.02347,6.56955-2.96551,6.5735-6.98738C154.52556,60.03665,151.73842,57.11532,147.84656,57.1248Z"/><path class="cls-3" d="M166.76542,55.61139A9.298,9.298,0,0,1,177.88268,53.607a7.57481,7.57481,0,0,1,4.41472,6.41325c.34818,4.788.07282,9.59361.14207,14.39111.0073.5066-.17814.73175-.69147.66627a2.24474,2.24474,0,0,0-.23729-.0014c-1.26006-.02474-2.90538.41958-3.67436-.20384-.8066-.65393-.228-2.35528-.24561-3.59656-.03843-2.71375-.017-5.42843-.00951-8.1427a8.31622,8.31622,0,0,0-.38232-2.78642c-.79349-2.283-2.73515-3.40225-5.45354-3.15638a5.23464,5.23464,0,0,0-4.86287,4.54273,30.30411,30.30411,0,0,0-.13526,3.76778c-.01715,2.87154-.03022,5.7436.01109,8.61465.01107.7694-.20413,1.0324-.99432.97813a26.46866,26.46866,0,0,0-3.08533-.004c-.64044.031-.79447-.19975-.79281-.80563q.02814-10.208-.00052-20.41609c-.00165-.582.18731-.75824.74381-.71427.51131.04039,1.02849.0018,1.54288.01007.787.01263,1.767-.2421,2.30832.12971C167.06059,53.692,166.53787,54.74455,166.76542,55.61139Z"/><path class="cls-3" d="M128.58017,54.65482c3.26807-2.6423,6.75571-2.29748,10.56364-1.37546a15.59573,15.59573,0,0,0-3.12964,3.77712c-.17236.311-.42018.2766-.71051.21834-3.92624-.78781-5.7973,2.00236-6.40667,4.99184-.52241,2.56291-.20937,5.16741-.27145,7.753-.033,1.37387-.03807,2.75023.00786,4.12336.02271.67908-.10539,1.004-.89142.94969-1.25357-.08662-2.89033.39869-3.66944-.22133-.82257-.65458-.24693-2.34894-.25355-3.58528-.02986-5.577.03461-11.155-.04967-16.73085-.01886-1.248.36624-1.5595,1.49617-1.4058a8.16986,8.16986,0,0,0,1.65746.00591C127.958,53.083,128.94424,53.028,128.58017,54.65482Z"/><path class="cls-4" d="M33.46693,60.24855a1.79456,1.79456,0,0,1-.64426,1.41615c-2.5452,2.5201-5.09668,5.03423-7.61327,7.58234-.494.5002-.77688.42666-1.22306-.034-1.314-1.35666-2.6817-2.66174-4.00733-4.00749a1.828,1.828,0,0,1-.21415-2.6244,1.859,1.859,0,0,1,2.72555.13911c.543.514,1.0925,1.02636,1.58476,1.58661.42418.48275.71042.41365,1.13286-.01922,1.704-1.74615,3.44829-3.45348,5.16427-5.18826a1.83124,1.83124,0,0,1,2.06416-.45662A1.55439,1.55439,0,0,1,33.46693,60.24855Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/workiva/workiva_featured_logo.svg b/content/en/case-studies/workiva/workiva_featured_logo.svg
index 76de3f217c..0cde714f23 100644
--- a/content/en/case-studies/workiva/workiva_featured_logo.svg
+++ b/content/en/case-studies/workiva/workiva_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#6c0;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-2.26418" width="223.25536" height="134.51136"/><path class="cls-2" d="M55.43477,39.86952,43.85324,75.22367l-4.90852-16.3938h-7.86l9.015,25.9221H48.473L64.22519,39.86952ZM25.53453,75.22368,19.98437,58.82987H12.02809l9.015,26.01835h9.1754L33.84371,73.78,29.86557,62.23055Zm95.44338-4.74812,12.7044-11.70985h-10.587l-8.18086,7.66755V47.12h-7.47506V84.752h7.5713V74.38955L125.14854,84.752H135.2864Zm-16.13716-3.914a6.62431,6.62431,0,0,0-3.59316-.67372,5.4975,5.4975,0,0,0-4.17064,1.957,9.22462,9.22462,0,0,0-1.31536,5.42183V84.752h-7.86V58.82987H95.7616v3.68941h.09625a6.86333,6.86333,0,0,1,6.44844-4.17063,5.54685,5.54685,0,0,1,2.59863.51331ZM71.02653,85.48986c-8.245,0-14.4689-5.19726-14.4689-13.5706s6.25595-13.5706,14.4689-13.5706,14.4689,5.16517,14.4689,13.63476S79.30364,85.48986,71.02653,85.48986Zm0-20.4682c-3.68941,0-5.93514,2.91944-5.93514,6.76926s2.18157,6.76926,5.93514,6.76926,5.93513-2.91944,5.93513-6.76926-2.18156-6.80135-5.93513-6.80135ZM201.15034,84.752h-8.02045l-.16041-2.66279a9.90263,9.90263,0,0,1-7.41089,3.33651c-4.58769,0-9.46413-2.4703-9.46413-8.30919s5.32557-7.7638,10.13784-7.98837l6.5447-.25665V68.294c0-2.759-1.957-4.20272-5.35767-4.20272a16.74679,16.74679,0,0,0-7.98837,2.342l-2.21366-5.51808a26.05948,26.05948,0,0,1,11.06823-2.59863c4.87644,0,7.66756,1.12286,9.72078,3.04777,2.05324,1.957,3.04777,4.45937,3.04777,8.85458Zm-8.40543-11.357-4.17064.25665c-2.59862.09624-4.13856,1.25119-4.13856,3.1761s1.63616,3.20818,3.97815,3.20818a5.198,5.198,0,0,0,4.33105-2.374ZM175.902,58.79779,165.18663,84.7199h-7.73171L146.80375,58.7978h8.75833l5.903,16.3938,5.8389-16.42589ZM144.558,84.752h-8.43752V58.82987H144.558ZM136.1526,56.68039V47.08793h10.33034Zm65.79979,2.14948a1.81539,1.81539,0,1,0-.06417-.06416h-.06417Zm0-4.7481a2.19766,2.19766,0,1,0,2.18156,2.21364,2.14955,2.14955,0,0,0-2.11739-2.18156h0Zm1.2191,3.68941h-.7058l-.64164-1.21911h-.32081v1.21911h-.60957V54.72341h1.15494c.67371,0,1.0587.3529,1.0587.89828a.83236.83236,0,0,1-.60957.86621Zm-1.34744-2.47031h-.35289V56.135h.35289c.28875,0,.5454,0,.5454-.385s-.19248-.48123-.5133-.48123Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#6c0;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.35417" y="-2.26418" width="223.25536" height="134.51136"/><path class="cls-2" d="M55.43477,39.86952,43.85324,75.22367l-4.90852-16.3938h-7.86l9.015,25.9221H48.473L64.22519,39.86952ZM25.53453,75.22368,19.98437,58.82987H12.02809l9.015,26.01835h9.1754L33.84371,73.78,29.86557,62.23055Zm95.44338-4.74812,12.7044-11.70985h-10.587l-8.18086,7.66755V47.12h-7.47506V84.752h7.5713V74.38955L125.14854,84.752H135.2864Zm-16.13716-3.914a6.62431,6.62431,0,0,0-3.59316-.67372,5.4975,5.4975,0,0,0-4.17064,1.957,9.22462,9.22462,0,0,0-1.31536,5.42183V84.752h-7.86V58.82987H95.7616v3.68941h.09625a6.86333,6.86333,0,0,1,6.44844-4.17063,5.54685,5.54685,0,0,1,2.59863.51331ZM71.02653,85.48986c-8.245,0-14.4689-5.19726-14.4689-13.5706s6.25595-13.5706,14.4689-13.5706,14.4689,5.16517,14.4689,13.63476S79.30364,85.48986,71.02653,85.48986Zm0-20.4682c-3.68941,0-5.93514,2.91944-5.93514,6.76926s2.18157,6.76926,5.93514,6.76926,5.93513-2.91944,5.93513-6.76926-2.18156-6.80135-5.93513-6.80135ZM201.15034,84.752h-8.02045l-.16041-2.66279a9.90263,9.90263,0,0,1-7.41089,3.33651c-4.58769,0-9.46413-2.4703-9.46413-8.30919s5.32557-7.7638,10.13784-7.98837l6.5447-.25665V68.294c0-2.759-1.957-4.20272-5.35767-4.20272a16.74679,16.74679,0,0,0-7.98837,2.342l-2.21366-5.51808a26.05948,26.05948,0,0,1,11.06823-2.59863c4.87644,0,7.66756,1.12286,9.72078,3.04777,2.05324,1.957,3.04777,4.45937,3.04777,8.85458Zm-8.40543-11.357-4.17064.25665c-2.59862.09624-4.13856,1.25119-4.13856,3.1761s1.63616,3.20818,3.97815,3.20818a5.198,5.198,0,0,0,4.33105-2.374ZM175.902,58.79779,165.18663,84.7199h-7.73171L146.80375,58.7978h8.75833l5.903,16.3938,5.8389-16.42589ZM144.558,84.752h-8.43752V58.82987H144.558ZM136.1526,56.68039V47.08793h10.33034Zm65.79979,2.14948a1.81539,1.81539,0,1,0-.06417-.06416h-.06417Zm0-4.7481a2.19766,2.19766,0,1,0,2.18156,2.21364,2.14955,2.14955,0,0,0-2.11739-2.18156h0Zm1.2191,3.68941h-.7058l-.64164-1.21911h-.32081v1.21911h-.60957V54.72341h1.15494c.67371,0,1.0587.3529,1.0587.89828a.83236.83236,0,0,1-.60957.86621Zm-1.34744-2.47031h-.35289V56.135h.35289c.28875,0,.5454,0,.5454-.385s-.19248-.48123-.5133-.48123Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/yahoo-japan/yahoojapan_featured.svg b/content/en/case-studies/yahoo-japan/yahoojapan_featured.svg
index 3efabbfde4..b0baa4a49e 100644
--- a/content/en/case-studies/yahoo-japan/yahoojapan_featured.svg
+++ b/content/en/case-studies/yahoo-japan/yahoojapan_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#ff0132;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.86833" y="-3.6498" width="223.25536" height="134.51136"/><path class="cls-2" d="M133.96136,70.66026a21.708,21.708,0,0,0-2.6454.88181c0,1.51167-.25194,8.44008-.25194,8.44008-.126,3.14928-1.51165,5.29081-5.16483,6.80244l-1.3857-.37791c1.76358-1.00776,2.64541-2.01555,2.77136-2.77137.37792-1.00776.50387-3.40124.50387-7.68426,0,0,0-3.27527-.126-4.409-.50387-.126-2.77136-.62986-3.5272-.75584V69.77846c1.38571,0,4.66094.126,5.7947.126,1.25971,0,2.77136,0,4.03107-.126v.88181Zm58.82856,2.01555a9.85693,9.85693,0,0,1-1.76359.3779c0,1.13373.126,9.32186.126,11.21143,0,.25195-.252.3779-.62986.126-1.76361-1.76358-7.43231-8.18813-9.32188-10.4556,0,1.51167.126,7.30632.126,8.31412a18.78586,18.78586,0,0,0,2.6454.62986l.126,1.13372h-6.1726V82.87949a9.87439,9.87439,0,0,1,1.76361-.62986c.126-.62985.126-8.692.126-9.32185-.5039,0-1.38567-.126-2.01553-.126V71.4161h4.535c1.63763,1.88956,5.54275,6.17257,7.55828,8.44008,0-1.88957-.126-6.29856-.126-7.0544a15.8,15.8,0,0,1-1.88957-.252l-.126-1.13373c.37792,0,2.51943.126,2.89734.126s2.14151-.126,2.51943-.126ZM159.28159,76.077c0,1.51166-1.38569,2.14152-3.02332,2.39344v1.13373c3.27525-.37789,5.41676-1.6376,5.41676-3.65316v-.126c0-2.26747-1.51165-4.283-5.03885-4.283h-6.80245l.25194,1.25971a12.22013,12.22013,0,0,0,2.14152.126c0,1.51166.25194,7.93617.126,9.82574-.37792.126-1.63763.37791-2.14151.50388l-.126,1.13372h7.81021v-.88181a24.10678,24.10678,0,0,0-2.64539-.50387c0-.3779-.126-9.44784-.126-9.95171a15.27025,15.27025,0,0,1,2.51943.126,2.66465,2.66465,0,0,1,1.76359,2.77138M66.94467,46.97764c-.8818.126-4.66093.88181-5.92065,1.13373-1.38568.37792-14.23474,10.45561-15.11654,12.84909-.126.75584,0,9.57383,0,9.57383l7.30633.50387-.252,2.39344c-1.00777-.126-7.81021,0-12.09325,0-2.14151,0-8.692.252-10.95949.126l.25194-2.26747a15.1106,15.1106,0,0,0,4.7869-.50387c1.25972-.37789,2.26749-.88181,2.26749-2.14152V61.08645c-.50385-1.3857-11.2114-14.8646-13.98279-17.00612-.75583-.252-6.17258-.88182-7.43229-1.13374l.25194-2.26747H40.6167l-.37791,2.14152c-1.13373.252-6.29857.3779-7.68426.75584,3.52719,5.16483,9.06993,11.96727,10.83354,14.48669,1.00777-1.38569,10.45561-8.06214,10.70755-10.0777-1.3857-.252-5.79469-.88181-6.5505-.88181l-.37792-2.26747H68.33037l-1.3857,2.14153Zm52.40405,19.65153c-3.90513-.252-10.70755-.126-14.61268,0l.25194-2.01556c.62986,0,3.77914-.50387,4.535-.62985v-7.0544c-1.88957,0-12.7231.252-14.36071.62985v6.29856s4.66093.50388,5.6687.62986l-.25193,2.14154c-4.15706-.252-12.59713-.252-16.62821,0l.25195-2.26747c1.25971,0,4.66093-.3779,5.41676-.50387.126-1.51167.126-4.0311.126-6.55052V54.158c0-1.13373,0-4.157-.126-5.29081-.8818,0-4.78691-.3779-5.79469-.3779l.25194-2.01555c3.5272.252,14.23475.252,17.1321,0l-.25194,1.88957c-.88179,0-4.66093.62985-5.79468.62985v5.54273H109.523V46.34779c-1.00777-.126-3.65316-.62986-4.78691-.75584l.25194-1.88957c2.39344.126,11.96727.126,14.48669,0l-.126,2.01555c-.75584,0-3.5272.50387-4.535.62986V64.23571s4.03108.50388,4.91287.62986l-.37789,1.7636Zm72.43345,2.14152-2.64541.126.50388-4.535,2.6454.126,2.51943-.126-.50388,4.409Zm3.0233-8.06215h-3.90512V40.42716h8.818l-.75582,3.02331Z"/><path class="cls-2" d="M136.10286,64.48768H134.0873c-3.27526-.126-9.57382-1.88957-9.57382-7.55827V56.4255c0-5.54272,6.29856-7.43229,9.57382-7.55828h2.01556c3.27525.126,9.57381,1.88957,9.57381,7.55828v.50387c0,5.54272-6.29856,7.43229-9.57381,7.55827m15.11655-7.93617c0-6.42455-6.1726-10.32966-15.62042-10.58157h-1.00777c-9.95172.252-15.49447,4.157-15.49447,10.58157v.252c0,6.04661,6.04663,10.32966,15.49447,10.58157H135.599c9.44784-.252,15.49447-4.283,15.62043-10.58157v-.252m20.40736,5.79469h-2.77136c-3.5272-.252-9.95173-2.39344-10.0777-8.44009.126-6.0466,6.5505-8.06214,10.0777-8.31411h2.77136c3.52718.252,9.95172,2.26747,10.0777,8.31411,0,6.0466-6.55052,8.3141-10.0777,8.44009m16.25028-8.4401h0c-.25194-6.80243-6.67648-11.21143-17.13208-11.46338h-.75583c-10.45562.25195-17.00612,4.283-17.13209,11.33741v.252c.25194,7.05441,6.67648,11.21143,17.13209,11.4634h.75583c10.32964-.252,16.88014-4.409,17.13208-11.58938h0M66.94467,60.96046c.37792-.88181,3.40123-7.43229,3.40123-7.43229l2.89733,7.43229Zm15.62042,8.566c-1.13373-1.76358-5.16483-11.96726-7.0544-16.50224l3.40123-.50387.37791-1.76359H74.125c-1.88956,0-9.95171,0-10.70755-.126l-.126,1.76358,4.03108,1.00776s-5.92065,11.84128-7.18036,13.47893c-1.00777.252-3.65316.88182-4.66094,1.00776l-.25194,2.14152c.75584-.126,11.21142,0,12.21921,0l.25194-2.01555L64.0473,67.133s1.63762-3.40124,1.88957-3.77914c1.13372-.252,7.93618-.3779,7.93618-.3779l2.39344,6.55052a37.4619,37.4619,0,0,1-4.03108.50387l-.25194,2.14153H86.974l.252-1.88957c-.8818.126-3.65316-.62986-4.66094-.75584m92.337,13.227c-1.38567-2.89733-3.65318-8.44009-4.283-9.95172l1.63764-.25195.126-1.13374-6.67648.25195v.88182l1.7636.252c-1.13375,2.51943-4.15706,8.944-4.66094,9.6998-.50388.126-1.00777.3779-1.51165.50387l-.126,1.00776c1.51165-.126,4.91288,0,5.41677,0v-.88181l-1.63763-.50387s1.00777-2.51943,1.38568-3.27527h4.66094l1.25972,3.27527s-1.13376.25195-2.01556.3779l-.126.88181h6.80244l.126-1.00776a4.90059,4.90059,0,0,1-2.14149-.126Zm-8.18813-4.283c.25194-.62986,2.01554-4.7869,2.01554-4.7869l1.88957,4.7869Zm-19.90345,4.283c-.88179-1.76359-3.14928-7.30632-4.283-9.95172l1.7636-.3779V71.41613l-6.80245.252v.88181l1.7636.252c-1.13374,2.51942-4.15706,8.944-4.66093,9.69979a7.10071,7.10071,0,0,1-1.51165.50388l-.126,1.00776h5.41676v-.88181l-1.63763-.50388s1.00778-2.51942,1.38569-3.27526h4.66093l1.25971,3.27526s-1.13374.252-2.01554.37791l-.126.88181H148.7l.126-1.00776a4.49365,4.49365,0,0,1-2.01554-.126Zm-8.18813-4.283c.25194-.62986,2.01554-4.7869,2.01554-4.7869l1.88957,4.7869Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#ff0132;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.86833" y="-3.6498" width="223.25536" height="134.51136"/><path class="cls-2" d="M133.96136,70.66026a21.708,21.708,0,0,0-2.6454.88181c0,1.51167-.25194,8.44008-.25194,8.44008-.126,3.14928-1.51165,5.29081-5.16483,6.80244l-1.3857-.37791c1.76358-1.00776,2.64541-2.01555,2.77136-2.77137.37792-1.00776.50387-3.40124.50387-7.68426,0,0,0-3.27527-.126-4.409-.50387-.126-2.77136-.62986-3.5272-.75584V69.77846c1.38571,0,4.66094.126,5.7947.126,1.25971,0,2.77136,0,4.03107-.126v.88181Zm58.82856,2.01555a9.85693,9.85693,0,0,1-1.76359.3779c0,1.13373.126,9.32186.126,11.21143,0,.25195-.252.3779-.62986.126-1.76361-1.76358-7.43231-8.18813-9.32188-10.4556,0,1.51167.126,7.30632.126,8.31412a18.78586,18.78586,0,0,0,2.6454.62986l.126,1.13372h-6.1726V82.87949a9.87439,9.87439,0,0,1,1.76361-.62986c.126-.62985.126-8.692.126-9.32185-.5039,0-1.38567-.126-2.01553-.126V71.4161h4.535c1.63763,1.88956,5.54275,6.17257,7.55828,8.44008,0-1.88957-.126-6.29856-.126-7.0544a15.8,15.8,0,0,1-1.88957-.252l-.126-1.13373c.37792,0,2.51943.126,2.89734.126s2.14151-.126,2.51943-.126ZM159.28159,76.077c0,1.51166-1.38569,2.14152-3.02332,2.39344v1.13373c3.27525-.37789,5.41676-1.6376,5.41676-3.65316v-.126c0-2.26747-1.51165-4.283-5.03885-4.283h-6.80245l.25194,1.25971a12.22013,12.22013,0,0,0,2.14152.126c0,1.51166.25194,7.93617.126,9.82574-.37792.126-1.63763.37791-2.14151.50388l-.126,1.13372h7.81021v-.88181a24.10678,24.10678,0,0,0-2.64539-.50387c0-.3779-.126-9.44784-.126-9.95171a15.27025,15.27025,0,0,1,2.51943.126,2.66465,2.66465,0,0,1,1.76359,2.77138M66.94467,46.97764c-.8818.126-4.66093.88181-5.92065,1.13373-1.38568.37792-14.23474,10.45561-15.11654,12.84909-.126.75584,0,9.57383,0,9.57383l7.30633.50387-.252,2.39344c-1.00777-.126-7.81021,0-12.09325,0-2.14151,0-8.692.252-10.95949.126l.25194-2.26747a15.1106,15.1106,0,0,0,4.7869-.50387c1.25972-.37789,2.26749-.88181,2.26749-2.14152V61.08645c-.50385-1.3857-11.2114-14.8646-13.98279-17.00612-.75583-.252-6.17258-.88182-7.43229-1.13374l.25194-2.26747H40.6167l-.37791,2.14152c-1.13373.252-6.29857.3779-7.68426.75584,3.52719,5.16483,9.06993,11.96727,10.83354,14.48669,1.00777-1.38569,10.45561-8.06214,10.70755-10.0777-1.3857-.252-5.79469-.88181-6.5505-.88181l-.37792-2.26747H68.33037l-1.3857,2.14153Zm52.40405,19.65153c-3.90513-.252-10.70755-.126-14.61268,0l.25194-2.01556c.62986,0,3.77914-.50387,4.535-.62985v-7.0544c-1.88957,0-12.7231.252-14.36071.62985v6.29856s4.66093.50388,5.6687.62986l-.25193,2.14154c-4.15706-.252-12.59713-.252-16.62821,0l.25195-2.26747c1.25971,0,4.66093-.3779,5.41676-.50387.126-1.51167.126-4.0311.126-6.55052V54.158c0-1.13373,0-4.157-.126-5.29081-.8818,0-4.78691-.3779-5.79469-.3779l.25194-2.01555c3.5272.252,14.23475.252,17.1321,0l-.25194,1.88957c-.88179,0-4.66093.62985-5.79468.62985v5.54273H109.523V46.34779c-1.00777-.126-3.65316-.62986-4.78691-.75584l.25194-1.88957c2.39344.126,11.96727.126,14.48669,0l-.126,2.01555c-.75584,0-3.5272.50387-4.535.62986V64.23571s4.03108.50388,4.91287.62986l-.37789,1.7636Zm72.43345,2.14152-2.64541.126.50388-4.535,2.6454.126,2.51943-.126-.50388,4.409Zm3.0233-8.06215h-3.90512V40.42716h8.818l-.75582,3.02331Z"/><path class="cls-2" d="M136.10286,64.48768H134.0873c-3.27526-.126-9.57382-1.88957-9.57382-7.55827V56.4255c0-5.54272,6.29856-7.43229,9.57382-7.55828h2.01556c3.27525.126,9.57381,1.88957,9.57381,7.55828v.50387c0,5.54272-6.29856,7.43229-9.57381,7.55827m15.11655-7.93617c0-6.42455-6.1726-10.32966-15.62042-10.58157h-1.00777c-9.95172.252-15.49447,4.157-15.49447,10.58157v.252c0,6.04661,6.04663,10.32966,15.49447,10.58157H135.599c9.44784-.252,15.49447-4.283,15.62043-10.58157v-.252m20.40736,5.79469h-2.77136c-3.5272-.252-9.95173-2.39344-10.0777-8.44009.126-6.0466,6.5505-8.06214,10.0777-8.31411h2.77136c3.52718.252,9.95172,2.26747,10.0777,8.31411,0,6.0466-6.55052,8.3141-10.0777,8.44009m16.25028-8.4401h0c-.25194-6.80243-6.67648-11.21143-17.13208-11.46338h-.75583c-10.45562.25195-17.00612,4.283-17.13209,11.33741v.252c.25194,7.05441,6.67648,11.21143,17.13209,11.4634h.75583c10.32964-.252,16.88014-4.409,17.13208-11.58938h0M66.94467,60.96046c.37792-.88181,3.40123-7.43229,3.40123-7.43229l2.89733,7.43229Zm15.62042,8.566c-1.13373-1.76358-5.16483-11.96726-7.0544-16.50224l3.40123-.50387.37791-1.76359H74.125c-1.88956,0-9.95171,0-10.70755-.126l-.126,1.76358,4.03108,1.00776s-5.92065,11.84128-7.18036,13.47893c-1.00777.252-3.65316.88182-4.66094,1.00776l-.25194,2.14152c.75584-.126,11.21142,0,12.21921,0l.25194-2.01555L64.0473,67.133s1.63762-3.40124,1.88957-3.77914c1.13372-.252,7.93618-.3779,7.93618-.3779l2.39344,6.55052a37.4619,37.4619,0,0,1-4.03108.50387l-.25194,2.14153H86.974l.252-1.88957c-.8818.126-3.65316-.62986-4.66094-.75584m92.337,13.227c-1.38567-2.89733-3.65318-8.44009-4.283-9.95172l1.63764-.25195.126-1.13374-6.67648.25195v.88182l1.7636.252c-1.13375,2.51943-4.15706,8.944-4.66094,9.6998-.50388.126-1.00777.3779-1.51165.50387l-.126,1.00776c1.51165-.126,4.91288,0,5.41677,0v-.88181l-1.63763-.50387s1.00777-2.51943,1.38568-3.27527h4.66094l1.25972,3.27527s-1.13376.25195-2.01556.3779l-.126.88181h6.80244l.126-1.00776a4.90059,4.90059,0,0,1-2.14149-.126Zm-8.18813-4.283c.25194-.62986,2.01554-4.7869,2.01554-4.7869l1.88957,4.7869Zm-19.90345,4.283c-.88179-1.76359-3.14928-7.30632-4.283-9.95172l1.7636-.3779V71.41613l-6.80245.252v.88181l1.7636.252c-1.13374,2.51942-4.15706,8.944-4.66093,9.69979a7.10071,7.10071,0,0,1-1.51165.50388l-.126,1.00776h5.41676v-.88181l-1.63763-.50388s1.00778-2.51942,1.38569-3.27526h4.66093l1.25971,3.27526s-1.13374.252-2.01554.37791l-.126.88181H148.7l.126-1.00776a4.49365,4.49365,0,0,1-2.01554-.126Zm-8.18813-4.283c.25194-.62986,2.01554-4.7869,2.01554-4.7869l1.88957,4.7869Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/ygrene/ygrene_featured_logo.svg b/content/en/case-studies/ygrene/ygrene_featured_logo.svg
index f8806fa33d..0b0ab458fa 100644
--- a/content/en/case-studies/ygrene/ygrene_featured_logo.svg
+++ b/content/en/case-studies/ygrene/ygrene_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#57595b;}.cls-3{fill:#c1d730;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.39559" y="-3.75568" width="223.25536" height="134.51136"/><path class="cls-2" d="M199.735,69.682q-10.15685.0163-20.31369.0325c-1.24692.002-1.24692.0013-1.11144,1.2452.35569,3.26619,2.03284,5.246,4.96521,5.86133,3.61978.75955,6.945-.41475,8.43459-3.0384a.894.894,0,0,1,.93275-.51346c1.91588.01272,3.83263.03646,5.74747-.00973.76392-.01842.78734.20726.55849.83944-1.90929,5.27422-5.70609,8.16337-11.22851,8.80714a16.95094,16.95094,0,0,1-10.99709-1.97642c-4.24358-2.54366-6.22461-6.50691-6.6937-11.27768a15.49561,15.49561,0,0,1,2.769-11.15521c3.61009-4.8407,8.626-6.61639,14.46868-5.90957,6.73893.81524,11.02461,5.30986,12.26238,12.44029.03123.18-.0485.40911.20588.4987Zm-14.943-5.05975h5.84084a.88655.88655,0,0,0,.09893-.00072c.29587-.03344.67787.128.65139-.4503a6.31542,6.31542,0,0,0-4.77423-5.52137,10.15576,10.15576,0,0,0-2.76079-.06981,6.16728,6.16728,0,0,0-5.54484,5.2051c-.10362.66666.07851.86209.7471.84959C180.96368,64.59894,182.87808,64.62212,184.792,64.62222Z"/><path class="cls-3" d="M50.38452,25.9464c1.50449.30007,3.03481.50713,4.50943.91475,13.08148,3.616,20.87913,12.22487,23.90319,25.30763.07125.30828.388.711-.215.87342-.69376.18686-.6592-.37491-.73893-.75108a27.26711,27.26711,0,0,0-7.28982-13.5782A31.91385,31.91385,0,0,0,49.71952,28.891,30.25483,30.25483,0,0,0,26.6727,36.41392c-.71763.61678-1.48745.42084-2.24982.42966-.64431.00745-1.69773.24386-1.84753-.17916-.21787-.61524.70385-1.04833,1.1796-1.49913a33.52973,33.52973,0,0,1,18.89033-8.98994c.21155-.02959.48027.05571.599-.229Z"/><path class="cls-2" d="M79.04485,57.66751c.3057-.26895.249-.55457.30229-.80533A2.92718,2.92718,0,0,1,82.706,54.36624a8.4133,8.4133,0,0,0,3.14664-.17682c.73917-.21735.81029.0305.80779.66255-.01871,4.71627-.01017,9.43266-.01016,14.149,0,4.02374.04873,8.04825-.01553,12.071-.05083,3.18208-.58456,6.25372-2.92207,8.68166a12.996,12.996,0,0,1-6.851,3.72349,21.75785,21.75785,0,0,1-11.82719-.44264c-3.23055-1.12479-5.77928-3.031-6.79062-6.49179-.54028-1.84883-.5259-1.853,1.40606-1.853,1.9172,0,3.83441-.00345,5.75158.00327.34326.0012.7071-.1.86472.417.77892,2.5551,2.84357,3.29954,5.19723,3.52605,4.32532.41626,7.10891-2.02691,7.27983-6.37028.055-1.39751.00862-2.799.00862-4.50866a9.322,9.322,0,0,1-7.03952,4.34439c-7.06067.9384-12.79045-2.45809-14.28838-9.87472a19.00837,19.00837,0,0,1,.93018-11.53439c3.05825-7.13281,12.00648-9.82151,18.17744-5.47353A11.25913,11.25913,0,0,1,79.04485,57.66751ZM65.21679,67.85336a12.80921,12.80921,0,0,0,.25146,2.4994c.53738,3.21351,2.63643,5.4303,5.49435,5.80926a6.46417,6.46417,0,0,0,6.99722-4.04266,11.08058,11.08058,0,0,0-.52837-9.82357c-2.01161-3.68257-7.49946-4.13106-10.266-.9621C65.62075,63.10313,65.23779,65.24743,65.21679,67.85336Z"/><path class="cls-2" d="M127.11645,69.71457c-3.27108,0-6.54259.02792-9.813-.02007-.79289-.01164-.93124.2427-.86152.9571.32546,3.33493,2.00279,5.49681,4.82221,6.13787,3.75677.85418,7.00136-.27772,8.682-3.07853a.84146.84146,0,0,1,.873-.44023c1.91636.00866,3.83346.03358,5.74883-.01045.77208-.01775.79483.22136.5663.85735-1.90109,5.29052-5.72715,8.14835-11.23965,8.79162a17.08818,17.08818,0,0,1-10.74035-1.846c-4.05842-2.31519-6.12647-5.97616-6.80948-10.465a16.0818,16.0818,0,0,1,1.92-10.96913c2.7361-4.57988,6.916-6.836,12.1716-7.15238,4.5127-.27163,8.51994.96132,11.59151,4.42585,3.10563,3.50295,4.05856,7.73871,3.93944,12.29721-.01705.65247-.47077.51081-.83936.51145Q132.1222,69.71982,127.11645,69.71457Zm-4.11973-5.09239c1.91368,0,3.8279-.02656,5.74073.01367.71915.01513.9224-.182.75173-.89816-.907-3.8064-3.17839-5.477-7.09182-5.17407a6.12354,6.12354,0,0,0-5.90424,5.266c-.11585.61377.01873.81544.6638.80445C119.103,64.60094,121.05005,64.62213,122.99672,64.62218Z"/><path class="cls-2" d="M140.08359,54.04712a10.7346,10.7346,0,0,0,3.65118.29575c2.41857-.04451,2.98.42373,3.55017,2.78439.03832.15865.0676.31948.16094.7651.28432-.37048.45-.631.6584-.85131,3.91535-4.13973,10.19924-4.79045,14.82861-2.78763,3.20613,1.38707,4.40717,4.15916,4.86683,7.39008a41.51061,41.51061,0,0,1,.23158,5.82273c.00574,4.78058-.02555,9.56148.026,14.34152.00981.9094-.27076,1.0922-1.11176,1.06714q-3.02077-.09-6.04574-.0001c-.88045.02668-1.17676-.18242-1.16752-1.12571.05016-5.10981.02791-10.22037.02109-15.33065a11.65471,11.65471,0,0,0-.645-4.17176,3.93975,3.93975,0,0,0-3.40016-2.6422c-4.37921-.6-6.985,1.50483-7.34778,5.91757-.33548,4.08077-.09381,8.17-.15767,12.25486-.02268,1.45032-.02533,2.90176.00725,4.35169.01248.5552-.15555.74484-.72568.73789-2.24661-.02744-4.49387-.02352-6.7406-.00215-.53124.00506-.75474-.11685-.75362-.70844q.02626-13.84717.01662-27.69445A2.47577,2.47577,0,0,1,140.08359,54.04712Z"/><path class="cls-2" d="M68.58775,40.73828c-1.66,2.6841-3.19935,5.1725-4.73811,7.66126q-5.406,8.74362-10.82123,17.48156a3.63064,3.63064,0,0,0-.561,2.03943c.02588,4.64888-.003,9.2981.029,13.94691.00521.75828-.17058,1.0245-.98082,1.00775-2.57644-.05326-5.155-.04238-7.732-.00477-.7002.01021-.96376-.11932-.95725-.90471.04073-4.91246.02091-9.82544.01986-14.73824a2.01012,2.01012,0,0,1,.19517-1.04843c3.822-6.80227,7.15105-13.87751,11.34564-20.47208,1.05253-1.65474,2.04081-3.418,4.07262-4.156a10.56809,10.56809,0,0,1,4.5877-.47821A17.41649,17.41649,0,0,0,68.58775,40.73828Z"/><path class="cls-3" d="M15.82364,35.40613a3.2296,3.2296,0,0,1,1.31118.91691c2.44711,2.20923,5.4061,2.56116,8.51565,2.40862a36.112,36.112,0,0,1,8.68636.35325c5.20188,1.00876,8.13788,4.423,9.70039,9.24942a11.39227,11.39227,0,0,1,.53768,5.93c-.09814.4674-.15827,1.17451-.65665,1.23449-.52751.06348-.51837-.6629-.67717-1.05874A15.65358,15.65358,0,0,0,30.15557,44.163,40.32772,40.32772,0,0,1,22.9883,42.78a15.07065,15.07065,0,0,0,4.36124,1.76276,41.30243,41.30243,0,0,1,7.01619,2.3756c4.37162,2.14015,6.90788,5.78574,8.46678,10.2323A3.43337,3.43337,0,0,1,39.683,61.41409a17.478,17.478,0,0,1-12.04589-5.2152c-4.77784-4.525-7.76405-10.18723-10.20169-16.18583A40.64987,40.64987,0,0,1,15.82364,35.40613Z"/><path class="cls-2" d="M96.79526,59.44912c.7374-.95458,1.32784-1.82942,2.02824-2.60545a10.22154,10.22154,0,0,1,8.7999-3.59616c.705.05692,1.03675.27393,1.00842,1.07923-.066,1.87622-.04928,3.757-.00642,5.63452.016.70241-.07834.99145-.8998.84713a11.15782,11.15782,0,0,0-4.2299.03245c-3.17058.66313-5.18436,2.933-5.70516,6.40337a18.07278,18.07278,0,0,0-.20651,2.75554c.01462,3.9877-.00715,7.97559.01968,11.96316.00437.6496-.10962.92652-.84754.91017-2.21194-.049-4.42593-.03632-6.63853-.00577-.62948.00869-.84531-.1503-.84357-.825q.03537-13.644.01063-27.28809c-.0004-.50253-.01112-.81.68392-.58342a11.454,11.454,0,0,0,3.53793.15991c1.91054.0134,2.5158.48065,2.9067,2.3761C96.59149,57.57109,96.6609,58.45768,96.79526,59.44912Z"/><path class="cls-3" d="M17.167,44.30271c.46532.91153.88823,1.80346,1.37077,2.662.3016.53664-.00286.9614-.15946,1.40719-3.06967,8.73838-2.34425,17.15853,2.46948,25.06382,4.83642,7.94258,12.06212,12.53605,21.1905,14.20334.40251.07352.73175.148.80948-.48976A1.77482,1.77482,0,0,1,44.76028,85.526c2.30857-.10279,4.61907-.16291,6.92887-.23769.39846-.01289.81231-.06859.82895.54485.01057.38964.33147.44065.64871.44133.59489.00127,1.18985.007,1.78467.00083.57293-.00592,1.137.09588,1.15444.78028.0177.69458-.53784.81317-1.1169.80711-.56179-.00589-1.12494.02255-1.68519-.00721-.60639-.03221-.8469.23577-.80993.8203a5.76847,5.76847,0,0,1-.00171.88973c-.05829.63255.19013.9209.8469.873.46022-.03358.925-.00953,1.38761-.0052.59706.00557,1.34-.0647,1.34646.76859.00707.90445-.77632.80523-1.40075.81441-.39651.00583-.79318.00165-1.18978.001-.45461-.00078-.92726-.09775-1.06524.56744-.07918.38173-.47962.28326-.75986.27508-2.34321-.06837-4.68764-.11892-7.02817-.24173a1.83559,1.83559,0,0,1-1.80374-1.43953c-.12632-.50639-.40759-.65667-.896-.72414A32.9361,32.9361,0,0,1,14.1799,64.08587,30.82886,30.82886,0,0,1,16.68334,44.906C16.77679,44.70741,16.81018,44.4579,17.167,44.30271Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#57595b;}.cls-3{fill:#c1d730;}</style></defs><title>kubernetes.io-logos2</title><rect class="cls-1" x="-3.39559" y="-3.75568" width="223.25536" height="134.51136"/><path class="cls-2" d="M199.735,69.682q-10.15685.0163-20.31369.0325c-1.24692.002-1.24692.0013-1.11144,1.2452.35569,3.26619,2.03284,5.246,4.96521,5.86133,3.61978.75955,6.945-.41475,8.43459-3.0384a.894.894,0,0,1,.93275-.51346c1.91588.01272,3.83263.03646,5.74747-.00973.76392-.01842.78734.20726.55849.83944-1.90929,5.27422-5.70609,8.16337-11.22851,8.80714a16.95094,16.95094,0,0,1-10.99709-1.97642c-4.24358-2.54366-6.22461-6.50691-6.6937-11.27768a15.49561,15.49561,0,0,1,2.769-11.15521c3.61009-4.8407,8.626-6.61639,14.46868-5.90957,6.73893.81524,11.02461,5.30986,12.26238,12.44029.03123.18-.0485.40911.20588.4987Zm-14.943-5.05975h5.84084a.88655.88655,0,0,0,.09893-.00072c.29587-.03344.67787.128.65139-.4503a6.31542,6.31542,0,0,0-4.77423-5.52137,10.15576,10.15576,0,0,0-2.76079-.06981,6.16728,6.16728,0,0,0-5.54484,5.2051c-.10362.66666.07851.86209.7471.84959C180.96368,64.59894,182.87808,64.62212,184.792,64.62222Z"/><path class="cls-3" d="M50.38452,25.9464c1.50449.30007,3.03481.50713,4.50943.91475,13.08148,3.616,20.87913,12.22487,23.90319,25.30763.07125.30828.388.711-.215.87342-.69376.18686-.6592-.37491-.73893-.75108a27.26711,27.26711,0,0,0-7.28982-13.5782A31.91385,31.91385,0,0,0,49.71952,28.891,30.25483,30.25483,0,0,0,26.6727,36.41392c-.71763.61678-1.48745.42084-2.24982.42966-.64431.00745-1.69773.24386-1.84753-.17916-.21787-.61524.70385-1.04833,1.1796-1.49913a33.52973,33.52973,0,0,1,18.89033-8.98994c.21155-.02959.48027.05571.599-.229Z"/><path class="cls-2" d="M79.04485,57.66751c.3057-.26895.249-.55457.30229-.80533A2.92718,2.92718,0,0,1,82.706,54.36624a8.4133,8.4133,0,0,0,3.14664-.17682c.73917-.21735.81029.0305.80779.66255-.01871,4.71627-.01017,9.43266-.01016,14.149,0,4.02374.04873,8.04825-.01553,12.071-.05083,3.18208-.58456,6.25372-2.92207,8.68166a12.996,12.996,0,0,1-6.851,3.72349,21.75785,21.75785,0,0,1-11.82719-.44264c-3.23055-1.12479-5.77928-3.031-6.79062-6.49179-.54028-1.84883-.5259-1.853,1.40606-1.853,1.9172,0,3.83441-.00345,5.75158.00327.34326.0012.7071-.1.86472.417.77892,2.5551,2.84357,3.29954,5.19723,3.52605,4.32532.41626,7.10891-2.02691,7.27983-6.37028.055-1.39751.00862-2.799.00862-4.50866a9.322,9.322,0,0,1-7.03952,4.34439c-7.06067.9384-12.79045-2.45809-14.28838-9.87472a19.00837,19.00837,0,0,1,.93018-11.53439c3.05825-7.13281,12.00648-9.82151,18.17744-5.47353A11.25913,11.25913,0,0,1,79.04485,57.66751ZM65.21679,67.85336a12.80921,12.80921,0,0,0,.25146,2.4994c.53738,3.21351,2.63643,5.4303,5.49435,5.80926a6.46417,6.46417,0,0,0,6.99722-4.04266,11.08058,11.08058,0,0,0-.52837-9.82357c-2.01161-3.68257-7.49946-4.13106-10.266-.9621C65.62075,63.10313,65.23779,65.24743,65.21679,67.85336Z"/><path class="cls-2" d="M127.11645,69.71457c-3.27108,0-6.54259.02792-9.813-.02007-.79289-.01164-.93124.2427-.86152.9571.32546,3.33493,2.00279,5.49681,4.82221,6.13787,3.75677.85418,7.00136-.27772,8.682-3.07853a.84146.84146,0,0,1,.873-.44023c1.91636.00866,3.83346.03358,5.74883-.01045.77208-.01775.79483.22136.5663.85735-1.90109,5.29052-5.72715,8.14835-11.23965,8.79162a17.08818,17.08818,0,0,1-10.74035-1.846c-4.05842-2.31519-6.12647-5.97616-6.80948-10.465a16.0818,16.0818,0,0,1,1.92-10.96913c2.7361-4.57988,6.916-6.836,12.1716-7.15238,4.5127-.27163,8.51994.96132,11.59151,4.42585,3.10563,3.50295,4.05856,7.73871,3.93944,12.29721-.01705.65247-.47077.51081-.83936.51145Q132.1222,69.71982,127.11645,69.71457Zm-4.11973-5.09239c1.91368,0,3.8279-.02656,5.74073.01367.71915.01513.9224-.182.75173-.89816-.907-3.8064-3.17839-5.477-7.09182-5.17407a6.12354,6.12354,0,0,0-5.90424,5.266c-.11585.61377.01873.81544.6638.80445C119.103,64.60094,121.05005,64.62213,122.99672,64.62218Z"/><path class="cls-2" d="M140.08359,54.04712a10.7346,10.7346,0,0,0,3.65118.29575c2.41857-.04451,2.98.42373,3.55017,2.78439.03832.15865.0676.31948.16094.7651.28432-.37048.45-.631.6584-.85131,3.91535-4.13973,10.19924-4.79045,14.82861-2.78763,3.20613,1.38707,4.40717,4.15916,4.86683,7.39008a41.51061,41.51061,0,0,1,.23158,5.82273c.00574,4.78058-.02555,9.56148.026,14.34152.00981.9094-.27076,1.0922-1.11176,1.06714q-3.02077-.09-6.04574-.0001c-.88045.02668-1.17676-.18242-1.16752-1.12571.05016-5.10981.02791-10.22037.02109-15.33065a11.65471,11.65471,0,0,0-.645-4.17176,3.93975,3.93975,0,0,0-3.40016-2.6422c-4.37921-.6-6.985,1.50483-7.34778,5.91757-.33548,4.08077-.09381,8.17-.15767,12.25486-.02268,1.45032-.02533,2.90176.00725,4.35169.01248.5552-.15555.74484-.72568.73789-2.24661-.02744-4.49387-.02352-6.7406-.00215-.53124.00506-.75474-.11685-.75362-.70844q.02626-13.84717.01662-27.69445A2.47577,2.47577,0,0,1,140.08359,54.04712Z"/><path class="cls-2" d="M68.58775,40.73828c-1.66,2.6841-3.19935,5.1725-4.73811,7.66126q-5.406,8.74362-10.82123,17.48156a3.63064,3.63064,0,0,0-.561,2.03943c.02588,4.64888-.003,9.2981.029,13.94691.00521.75828-.17058,1.0245-.98082,1.00775-2.57644-.05326-5.155-.04238-7.732-.00477-.7002.01021-.96376-.11932-.95725-.90471.04073-4.91246.02091-9.82544.01986-14.73824a2.01012,2.01012,0,0,1,.19517-1.04843c3.822-6.80227,7.15105-13.87751,11.34564-20.47208,1.05253-1.65474,2.04081-3.418,4.07262-4.156a10.56809,10.56809,0,0,1,4.5877-.47821A17.41649,17.41649,0,0,0,68.58775,40.73828Z"/><path class="cls-3" d="M15.82364,35.40613a3.2296,3.2296,0,0,1,1.31118.91691c2.44711,2.20923,5.4061,2.56116,8.51565,2.40862a36.112,36.112,0,0,1,8.68636.35325c5.20188,1.00876,8.13788,4.423,9.70039,9.24942a11.39227,11.39227,0,0,1,.53768,5.93c-.09814.4674-.15827,1.17451-.65665,1.23449-.52751.06348-.51837-.6629-.67717-1.05874A15.65358,15.65358,0,0,0,30.15557,44.163,40.32772,40.32772,0,0,1,22.9883,42.78a15.07065,15.07065,0,0,0,4.36124,1.76276,41.30243,41.30243,0,0,1,7.01619,2.3756c4.37162,2.14015,6.90788,5.78574,8.46678,10.2323A3.43337,3.43337,0,0,1,39.683,61.41409a17.478,17.478,0,0,1-12.04589-5.2152c-4.77784-4.525-7.76405-10.18723-10.20169-16.18583A40.64987,40.64987,0,0,1,15.82364,35.40613Z"/><path class="cls-2" d="M96.79526,59.44912c.7374-.95458,1.32784-1.82942,2.02824-2.60545a10.22154,10.22154,0,0,1,8.7999-3.59616c.705.05692,1.03675.27393,1.00842,1.07923-.066,1.87622-.04928,3.757-.00642,5.63452.016.70241-.07834.99145-.8998.84713a11.15782,11.15782,0,0,0-4.2299.03245c-3.17058.66313-5.18436,2.933-5.70516,6.40337a18.07278,18.07278,0,0,0-.20651,2.75554c.01462,3.9877-.00715,7.97559.01968,11.96316.00437.6496-.10962.92652-.84754.91017-2.21194-.049-4.42593-.03632-6.63853-.00577-.62948.00869-.84531-.1503-.84357-.825q.03537-13.644.01063-27.28809c-.0004-.50253-.01112-.81.68392-.58342a11.454,11.454,0,0,0,3.53793.15991c1.91054.0134,2.5158.48065,2.9067,2.3761C96.59149,57.57109,96.6609,58.45768,96.79526,59.44912Z"/><path class="cls-3" d="M17.167,44.30271c.46532.91153.88823,1.80346,1.37077,2.662.3016.53664-.00286.9614-.15946,1.40719-3.06967,8.73838-2.34425,17.15853,2.46948,25.06382,4.83642,7.94258,12.06212,12.53605,21.1905,14.20334.40251.07352.73175.148.80948-.48976A1.77482,1.77482,0,0,1,44.76028,85.526c2.30857-.10279,4.61907-.16291,6.92887-.23769.39846-.01289.81231-.06859.82895.54485.01057.38964.33147.44065.64871.44133.59489.00127,1.18985.007,1.78467.00083.57293-.00592,1.137.09588,1.15444.78028.0177.69458-.53784.81317-1.1169.80711-.56179-.00589-1.12494.02255-1.68519-.00721-.60639-.03221-.8469.23577-.80993.8203a5.76847,5.76847,0,0,1-.00171.88973c-.05829.63255.19013.9209.8469.873.46022-.03358.925-.00953,1.38761-.0052.59706.00557,1.34-.0647,1.34646.76859.00707.90445-.77632.80523-1.40075.81441-.39651.00583-.79318.00165-1.18978.001-.45461-.00078-.92726-.09775-1.06524.56744-.07918.38173-.47962.28326-.75986.27508-2.34321-.06837-4.68764-.11892-7.02817-.24173a1.83559,1.83559,0,0,1-1.80374-1.43953c-.12632-.50639-.40759-.65667-.896-.72414A32.9361,32.9361,0,0,1,14.1799,64.08587,30.82886,30.82886,0,0,1,16.68334,44.906C16.77679,44.70741,16.81018,44.4579,17.167,44.30271Z"/></svg>
\ No newline at end of file
diff --git a/content/en/case-studies/zalando/zalando_feature_logo.svg b/content/en/case-studies/zalando/zalando_feature_logo.svg
index 7560bc54fe..875d10c030 100644
--- a/content/en/case-studies/zalando/zalando_feature_logo.svg
+++ b/content/en/case-studies/zalando/zalando_feature_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1,.cls-2,.cls-3{fill:none;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}.cls-4{fill:#fbfbfb;}.cls-5{clip-path:url(#clip-path-3);}.cls-6{fill:#231f20;}.cls-7{clip-path:url(#clip-path-5);}.cls-8{clip-path:url(#clip-path-7);}</style><clipPath id="clip-path"><path class="cls-1" d="M41.77787,60.75076l-.005.00284m0,0q-.12626-.14679-.25926-.29519C37.69346,56.19576,29.76333,51.036,20.7922,51.036c-2.83338,0-4.29027,7.73509-4.13854,14.99773,8.05761,1.89224,16.65977-.23786,24.99328-5.20477l.126-.07532Z"/></clipPath><clipPath id="clip-path-2"><path class="cls-1" d="M43.94289,64.78347c0,3.62507-12.21743,13.73582-22.9416,13.73582-2.79444,0-4.20479-6.11244-4.356-12.48726,8.10224,1.90553,16.7554-.2568,25.13257-5.28127a7.99942,7.99942,0,0,1,2.165,4.03271Z"/></clipPath><clipPath id="clip-path-3"><rect class="cls-1" x="16.64291" y="45.32389" width="181.30475" height="33.19508"/></clipPath><clipPath id="clip-path-5"><rect class="cls-1" x="16.64291" y="50.96487" width="25.17477" height="15.81099"/></clipPath><clipPath id="clip-path-7"><rect class="cls-1" x="16.64291" y="60.71242" width="27.32384" height="17.80656"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-4" x="-4.3324" y="-3.39729" width="223.25536" height="134.51136"/><g class="cls-5"><path class="cls-6" d="M91.74063,54.14536a13.29814,13.29814,0,0,0-6.24573-1.12449,29.45982,29.45982,0,0,0-8.82364,1.31122.87032.87032,0,0,0-.64089.81729l.00065.09993.3812,1.925.00927.0358a.77022.77022,0,0,0,.74322.56774H77.166a1.09381,1.09381,0,0,0,.23954-.04036l.64407-.15031A28.74148,28.74148,0,0,1,85.13,56.52737a9.89793,9.89793,0,0,1,3.6646.47913c1.26194.47777,1.26994,1.29381,1.28273,2.64437v2.02c-.14487-.00246-.38856-.00509-.76465-.00509a45.511,45.511,0,0,0-6.82936.49685c-4.113.63174-7.51629,1.61623-7.49487,7.28306.0016,7.19378,6.67394,7.20721,9.88059,7.21379h.00032a27.83865,27.83865,0,0,0,5.49675-.593c2.99334-.69506,3.75767-1.64545,3.71737-4.61995V59.48448c.00448-1.82444.0096-4.095-2.34286-5.33912Zm-1.64314,18.479a16.77763,16.77763,0,0,1-5.18271.77876v.168l-.00223-.168c-2.94985-.02265-5.83063-.36-5.83415-4.1228.01919-2.99257,1.61564-3.34863,3.63679-3.79985l.14007-.03118A54.99963,54.99963,0,0,1,90.0978,64.982l-.00031,7.64236Zm37.34066-13.13987V71.44656c.04,2.9745-.72434,3.92489-3.71769,4.61995a27.83277,27.83277,0,0,1-5.49675.593h-.00032c-3.20665-.00658-9.87866-.02-9.8806-7.21379-.0211-5.66683,3.38192-6.65132,7.49487-7.28306a45.51382,45.51382,0,0,1,6.82938-.49685c.37608,0,.62008.00263.76463.00509v-2.02c-.01278-1.35056-.02045-2.1666-1.28271-2.64437a9.89693,9.89693,0,0,0-3.66461-.47913,28.74415,28.74415,0,0,0-7.08041,1.05982l-.64408.15031a1.08679,1.08679,0,0,1-.23952.04036h-.00129a.7696.7696,0,0,1-.7429-.56774l-.00959-.0358-.38088-1.925-.001-.09993a.87021.87021,0,0,1,.6412-.81729,29.45545,29.45545,0,0,1,8.82332-1.31122,13.29721,13.29721,0,0,1,6.24572,1.12449c2.35278,1.24409,2.34736,3.51468,2.34319,5.33912Zm-3.986,5.49751a54.99546,54.99546,0,0,0-7.24224.46729l-.14038.03118c-2.02116.45122-3.61761.80728-3.63678,3.79985.00383,3.7628,2.88461,4.10015,5.83446,4.1228l.00223.168v-.168a16.777,16.777,0,0,0,5.18238-.77876l.00033-7.64236ZM187.8576,53.02087c-9.29214.01248-10.08013,6.11806-10.08909,11.84065.009,5.70161.797,11.78552,10.08909,11.798h.00066c9.28481-.01247,10.07629-6.08,10.08941-11.79866-.0099-5.98413-.79757-11.8275-10.09007-11.84Zm.00035,20.29886c-5.63619-.02492-5.91922-2.91806-5.95759-8.45721.03837-5.56967.32074-8.47728,5.957-8.50186,5.63714.02458,5.91984,2.93219,5.95819,8.49923-.03835,5.54178-.32169,8.43492-5.95755,8.45984Zm-16.67639,2.498-.24272.06138a22.54632,22.54632,0,0,1-6.20031.78037h-.00673c-8.6001-.01247-10.28768-4.35051-10.29729-11.83962.01056-8.58984,2.73368-11.7875,10.04689-11.799a23.03793,23.03793,0,0,1,5.63266.64174l-.00767-6.91878c-.01054-.30338.127-.70062.84491-.83749l2.284-.58266h.12471c.52481.01313.71028.48078.71155.877V72.1971c.0352,1.64148-.158,3.04967-2.89,3.62066ZM170.10863,56.9922a22.643,22.643,0,0,0-5.28888-.67322c-4.403.04037-6.24955,1.23655-6.29561,8.54319.05149,8.0234,2.44073,8.45689,6.335,8.49923l.00222.168v-.168a20.71938,20.71938,0,0,0,5.24507-.70983l.00224-15.65937ZM149.58122,76.1177h-2.0429a.94235.94235,0,0,1-.961-.96122V59.73424c-.03709-2.609-.81645-3.33454-3.62558-3.37358a30.78509,30.78509,0,0,0-7.4565,1.08655v17.709a.912.912,0,0,1-.91912.96154h-2.08445a.94184.94184,0,0,1-.96133-.96122V57.85873c-.03038-1.60127.11992-2.708,2.39724-3.445a34.22842,34.22842,0,0,1,9.10954-1.3929c5.25337.00659,7.49743,1.90208,7.50478,6.33793V75.15616a.94175.94175,0,0,1-.96067.96154Zm-46.27113.41677h.00191a3.55479,3.55479,0,0,0,2.38253-.63662.584.584,0,0,0,.16118-.446,15.72741,15.72741,0,0,0-.32972-1.63559l-.008-.03611a.62991.62991,0,0,0-.58331-.574c-.02174,0-.04285.00132-.03166.00295,0,0-.29455-.01446-.58587-.01446h-.00256c-.83692-.02657-1.53058-.14832-1.545-1.373V46.20089a.81127.81127,0,0,0-.75313-.87721l-.14582.00133-2.28788.58627a.811.811,0,0,0-.77807.83207v25.162c.00417,2.97975,1.60349,4.62387,4.50345,4.62912ZM70.99478,76.1177H54.60207a.94222.94222,0,0,1-.96132-.96122V73.15532a1.43541,1.43541,0,0,1,.44772-1.08329L67.13638,56.90282H54.352a.94272.94272,0,0,1-.96133-.96124V54.52423a.9425.9425,0,0,1,.961-.9612H70.91131a.94249.94249,0,0,1,.96133.96087v2.04283a1.39935,1.39935,0,0,1-.41447,1.01077L58.377,72.77761H70.99478a.94279.94279,0,0,1,.96132.96122v1.41733a.94229.94229,0,0,1-.96132.96154Z"/></g><g class="cls-5"><g class="cls-7"><image width="168" height="107" transform="matrix(0.1535, 0, 0, -0.1535, 16.43414, 67.22717)" xlink:href="data:image/png;base64,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"/></g></g><g class="cls-5"><g class="cls-8"><image width="184" height="119" transform="matrix(0.1535, 0, 0, -0.1535, 16.37888, 78.80142)" xlink:href="data:image/png;base64,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"/></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1,.cls-2,.cls-3{fill:none;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}.cls-4{fill:transparent;}.cls-5{clip-path:url(#clip-path-3);}.cls-6{fill:#231f20;}.cls-7{clip-path:url(#clip-path-5);}.cls-8{clip-path:url(#clip-path-7);}</style><clipPath id="clip-path"><path class="cls-1" d="M41.77787,60.75076l-.005.00284m0,0q-.12626-.14679-.25926-.29519C37.69346,56.19576,29.76333,51.036,20.7922,51.036c-2.83338,0-4.29027,7.73509-4.13854,14.99773,8.05761,1.89224,16.65977-.23786,24.99328-5.20477l.126-.07532Z"/></clipPath><clipPath id="clip-path-2"><path class="cls-1" d="M43.94289,64.78347c0,3.62507-12.21743,13.73582-22.9416,13.73582-2.79444,0-4.20479-6.11244-4.356-12.48726,8.10224,1.90553,16.7554-.2568,25.13257-5.28127a7.99942,7.99942,0,0,1,2.165,4.03271Z"/></clipPath><clipPath id="clip-path-3"><rect class="cls-1" x="16.64291" y="45.32389" width="181.30475" height="33.19508"/></clipPath><clipPath id="clip-path-5"><rect class="cls-1" x="16.64291" y="50.96487" width="25.17477" height="15.81099"/></clipPath><clipPath id="clip-path-7"><rect class="cls-1" x="16.64291" y="60.71242" width="27.32384" height="17.80656"/></clipPath></defs><title>kubernetes.io-logos2</title><rect class="cls-4" x="-4.3324" y="-3.39729" width="223.25536" height="134.51136"/><g class="cls-5"><path class="cls-6" d="M91.74063,54.14536a13.29814,13.29814,0,0,0-6.24573-1.12449,29.45982,29.45982,0,0,0-8.82364,1.31122.87032.87032,0,0,0-.64089.81729l.00065.09993.3812,1.925.00927.0358a.77022.77022,0,0,0,.74322.56774H77.166a1.09381,1.09381,0,0,0,.23954-.04036l.64407-.15031A28.74148,28.74148,0,0,1,85.13,56.52737a9.89793,9.89793,0,0,1,3.6646.47913c1.26194.47777,1.26994,1.29381,1.28273,2.64437v2.02c-.14487-.00246-.38856-.00509-.76465-.00509a45.511,45.511,0,0,0-6.82936.49685c-4.113.63174-7.51629,1.61623-7.49487,7.28306.0016,7.19378,6.67394,7.20721,9.88059,7.21379h.00032a27.83865,27.83865,0,0,0,5.49675-.593c2.99334-.69506,3.75767-1.64545,3.71737-4.61995V59.48448c.00448-1.82444.0096-4.095-2.34286-5.33912Zm-1.64314,18.479a16.77763,16.77763,0,0,1-5.18271.77876v.168l-.00223-.168c-2.94985-.02265-5.83063-.36-5.83415-4.1228.01919-2.99257,1.61564-3.34863,3.63679-3.79985l.14007-.03118A54.99963,54.99963,0,0,1,90.0978,64.982l-.00031,7.64236Zm37.34066-13.13987V71.44656c.04,2.9745-.72434,3.92489-3.71769,4.61995a27.83277,27.83277,0,0,1-5.49675.593h-.00032c-3.20665-.00658-9.87866-.02-9.8806-7.21379-.0211-5.66683,3.38192-6.65132,7.49487-7.28306a45.51382,45.51382,0,0,1,6.82938-.49685c.37608,0,.62008.00263.76463.00509v-2.02c-.01278-1.35056-.02045-2.1666-1.28271-2.64437a9.89693,9.89693,0,0,0-3.66461-.47913,28.74415,28.74415,0,0,0-7.08041,1.05982l-.64408.15031a1.08679,1.08679,0,0,1-.23952.04036h-.00129a.7696.7696,0,0,1-.7429-.56774l-.00959-.0358-.38088-1.925-.001-.09993a.87021.87021,0,0,1,.6412-.81729,29.45545,29.45545,0,0,1,8.82332-1.31122,13.29721,13.29721,0,0,1,6.24572,1.12449c2.35278,1.24409,2.34736,3.51468,2.34319,5.33912Zm-3.986,5.49751a54.99546,54.99546,0,0,0-7.24224.46729l-.14038.03118c-2.02116.45122-3.61761.80728-3.63678,3.79985.00383,3.7628,2.88461,4.10015,5.83446,4.1228l.00223.168v-.168a16.777,16.777,0,0,0,5.18238-.77876l.00033-7.64236ZM187.8576,53.02087c-9.29214.01248-10.08013,6.11806-10.08909,11.84065.009,5.70161.797,11.78552,10.08909,11.798h.00066c9.28481-.01247,10.07629-6.08,10.08941-11.79866-.0099-5.98413-.79757-11.8275-10.09007-11.84Zm.00035,20.29886c-5.63619-.02492-5.91922-2.91806-5.95759-8.45721.03837-5.56967.32074-8.47728,5.957-8.50186,5.63714.02458,5.91984,2.93219,5.95819,8.49923-.03835,5.54178-.32169,8.43492-5.95755,8.45984Zm-16.67639,2.498-.24272.06138a22.54632,22.54632,0,0,1-6.20031.78037h-.00673c-8.6001-.01247-10.28768-4.35051-10.29729-11.83962.01056-8.58984,2.73368-11.7875,10.04689-11.799a23.03793,23.03793,0,0,1,5.63266.64174l-.00767-6.91878c-.01054-.30338.127-.70062.84491-.83749l2.284-.58266h.12471c.52481.01313.71028.48078.71155.877V72.1971c.0352,1.64148-.158,3.04967-2.89,3.62066ZM170.10863,56.9922a22.643,22.643,0,0,0-5.28888-.67322c-4.403.04037-6.24955,1.23655-6.29561,8.54319.05149,8.0234,2.44073,8.45689,6.335,8.49923l.00222.168v-.168a20.71938,20.71938,0,0,0,5.24507-.70983l.00224-15.65937ZM149.58122,76.1177h-2.0429a.94235.94235,0,0,1-.961-.96122V59.73424c-.03709-2.609-.81645-3.33454-3.62558-3.37358a30.78509,30.78509,0,0,0-7.4565,1.08655v17.709a.912.912,0,0,1-.91912.96154h-2.08445a.94184.94184,0,0,1-.96133-.96122V57.85873c-.03038-1.60127.11992-2.708,2.39724-3.445a34.22842,34.22842,0,0,1,9.10954-1.3929c5.25337.00659,7.49743,1.90208,7.50478,6.33793V75.15616a.94175.94175,0,0,1-.96067.96154Zm-46.27113.41677h.00191a3.55479,3.55479,0,0,0,2.38253-.63662.584.584,0,0,0,.16118-.446,15.72741,15.72741,0,0,0-.32972-1.63559l-.008-.03611a.62991.62991,0,0,0-.58331-.574c-.02174,0-.04285.00132-.03166.00295,0,0-.29455-.01446-.58587-.01446h-.00256c-.83692-.02657-1.53058-.14832-1.545-1.373V46.20089a.81127.81127,0,0,0-.75313-.87721l-.14582.00133-2.28788.58627a.811.811,0,0,0-.77807.83207v25.162c.00417,2.97975,1.60349,4.62387,4.50345,4.62912ZM70.99478,76.1177H54.60207a.94222.94222,0,0,1-.96132-.96122V73.15532a1.43541,1.43541,0,0,1,.44772-1.08329L67.13638,56.90282H54.352a.94272.94272,0,0,1-.96133-.96124V54.52423a.9425.9425,0,0,1,.961-.9612H70.91131a.94249.94249,0,0,1,.96133.96087v2.04283a1.39935,1.39935,0,0,1-.41447,1.01077L58.377,72.77761H70.99478a.94279.94279,0,0,1,.96132.96122v1.41733a.94229.94229,0,0,1-.96132.96154Z"/></g><g class="cls-5"><g class="cls-7"><image width="168" height="107" transform="matrix(0.1535, 0, 0, -0.1535, 16.43414, 67.22717)" xlink:href="data:image/png;base64,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"/></g></g><g class="cls-5"><g class="cls-8"><image width="184" height="119" transform="matrix(0.1535, 0, 0, -0.1535, 16.37888, 78.80142)" xlink:href="data:image/png;base64,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"/></g></g></svg>
\ No newline at end of file
diff --git a/static/images/babylon_featured.svg b/static/images/babylon_featured.svg
index 8bea0b8fc3..e84da19268 100644
--- a/static/images/babylon_featured.svg
+++ b/static/images/babylon_featured.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#400198;}.cls-3{fill:#ed1cb0;}.cls-4{fill:#e422b2;}.cls-5{fill:#e91fb1;}.cls-6{fill:#df26b3;}.cls-7{fill:#1eb6cf;}.cls-8{fill:#1db4d6;}.cls-9{fill:#ca35b8;}.cls-10{fill:#d42eb6;}.cls-11{fill:#cf32b7;}.cls-12{fill:#26b0ce;}.cls-13{fill:#d72cb5;}.cls-14{fill:#c538b8;}.cls-15{fill:#bb40bb;}.cls-16{fill:#da29b4;}.cls-17{fill:#c13cb9;}.cls-18{fill:#b544bc;}.cls-19{fill:#2aaad5;}.cls-20{fill:#af49be;}.cls-21{fill:#8964c5;}.cls-22{fill:#a94dbe;}.cls-23{fill:#826ac7;}.cls-24{fill:#a54fbf;}.cls-25{fill:#e026b1;}.cls-26{fill:#905fc3;}.cls-27{fill:#7b6fc8;}.cls-28{fill:#965ac2;}.cls-29{fill:#2aadcd;}.cls-30{fill:#9b58c2;}.cls-31{fill:#d034af;}.cls-32{fill:#d331b0;}.cls-33{fill:#d72db0;}.cls-34{fill:#db2ab0;}.cls-35{fill:#7077cb;}.cls-36{fill:#7573c9;}.cls-37{fill:#24b0d1;}.cls-38{fill:#35a2d4;}.cls-39{fill:#af49bb;}.cls-40{fill:#4a92d2;}.cls-41{fill:#4f8fce;}.cls-42{fill:#6b7bcb;}.cls-43{fill:#cb36b4;}.cls-44{fill:#5d85ce;}.cls-45{fill:#6380cd;}.cls-46{fill:#b743bb;}.cls-47{fill:#2eaacd;}.cls-48{fill:#38a3c9;}.cls-49{fill:#c43ab5;}.cls-50{fill:#667fc9;}.cls-51{fill:#4595d2;}.cls-52{fill:#a84ebc;}.cls-53{fill:#528cd0;}.cls-54{fill:#5887cf;}.cls-55{fill:#2ea7d5;}.cls-56{fill:#3a9ed3;}.cls-57{fill:#bb41ba;}.cls-58{fill:#9a58c2;}.cls-59{fill:#7475c3;}.cls-60{fill:#8f60c4;}.cls-61{fill:#32a7cb;}.cls-62{fill:#687fc3;}.cls-63{fill:#4099d4;}.cls-64{fill:#a450bf;}.cls-65{fill:#4698c9;}.cls-66{fill:#588bc5;}.cls-67{fill:#fcfcfc;}.cls-68{fill:#409dc8;}.cls-69{fill:#9f54c1;}.cls-70{fill:#955cc3;}.cls-71{fill:#5091c6;}.cls-72{fill:#d031b4;}.cls-73{fill:#8866c6;}.cls-74{fill:#c03cba;}.cls-75{fill:#6185c5;}.cls-76{fill:#7b6ec9;}.cls-77{fill:#6f79c6;}.cls-78{fill:#fefefe;}.cls-79{fill:#24b3cc;}.cls-80{fill:#da2ab2;}.cls-81{fill:#20b5ca;}.cls-82{fill:#25b1cb;}.cls-83{fill:#cc34b4;}.cls-84{fill:#d131b3;}.cls-85{fill:#29aecc;}.cls-86{fill:#26b2c7;}.cls-87{fill:#cb37af;}.cls-88{fill:#c53bb4;}.cls-89{fill:#bb42b6;}.cls-90{fill:#bf3eb5;}.cls-91{fill:#b546b6;}.cls-92{fill:#b04ab8;}.cls-93{fill:#2ea9d1;}.cls-94{fill:#aa4db9;}.cls-95{fill:#8d64bc;}.cls-96{fill:#8966be;}.cls-97{fill:#8568c2;}.cls-98{fill:#7e6dc4;}.cls-99{fill:#a155ba;}.cls-100{fill:#945ebb;}.cls-101{fill:#7673c4;}.cls-102{fill:#9a5aba;}.cls-103{fill:#2eaec3;}.cls-104{fill:#28b2c4;}.cls-105{fill:#7078c5;}.cls-106{fill:#6a7cc7;}.cls-107{fill:#32a6d1;}.cls-108{fill:#37a1d0;}.cls-109{fill:#b249b4;}.cls-110{fill:#ab4db9;}.cls-111{fill:#4d92ca;}.cls-112{fill:#4498ce;}.cls-113{fill:#4796ca;}.cls-114{fill:#528fc9;}.cls-115{fill:#5b87c9;}.cls-116{fill:#6182c9;}.cls-117{fill:#b944b3;}.cls-118{fill:#33a8c6;}.cls-119{fill:#38a6c2;}.cls-120{fill:#3da1c4;}.cls-121{fill:#c33daf;}.cls-122{fill:#bf3fb5;}.cls-123{fill:#6383c4;}.cls-124{fill:#409bd0;}.cls-125{fill:#a254bb;}.cls-126{fill:#a652b6;}.cls-127{fill:#568acc;}.cls-128{fill:#3ba0cd;}.cls-129{fill:#9a5abb;}.cls-130{fill:#9e57b9;}.cls-131{fill:#7e6fc0;}.cls-132{fill:#6d7ebd;}.cls-133{fill:#7a74ba;}.cls-134{fill:#747aba;}.cls-135{fill:#9160bc;}.cls-136{fill:#8b65bf;}.cls-137{fill:#6684bb;}.cls-138{fill:#4a97c1;}.cls-139{fill:#449cc1;}.cls-140{fill:#6088bb;}.cls-141{fill:#5491bf;}.cls-142{fill:#5b8bbf;}.cls-143{fill:#8469c1;}.cls-144{fill:#21b7c5;}.cls-145{fill:#24b5c5;}.cls-146{fill:#2dadc5;}.cls-147{fill:#25b6c1;}.cls-148{fill:#2faebe;}.cls-149{fill:#c63bb0;}.cls-150{fill:#c13fb0;}.cls-151{fill:#bd41b3;}.cls-152{fill:#b945b3;}.cls-153{fill:#b549ae;}.cls-154{fill:#ad4eb3;}.cls-155{fill:#a651b7;}.cls-156{fill:#8f64b6;}.cls-157{fill:#816ebe;}.cls-158{fill:#8869ba;}.cls-159{fill:#7973bf;}.cls-160{fill:#a357b0;}.cls-161{fill:#9e5ab3;}.cls-162{fill:#965fb5;}.cls-163{fill:#32aeb8;}.cls-164{fill:#2bb2ba;}.cls-165{fill:#33abbe;}.cls-166{fill:#27b5be;}.cls-167{fill:#6e7bc1;}.cls-168{fill:#7477bd;}.cls-169{fill:#6a7ec0;}.cls-170{fill:#37a4c8;}.cls-171{fill:#31a9c9;}.cls-172{fill:#b14dad;}.cls-173{fill:#ac4eb3;}.cls-174{fill:#4e94c3;}.cls-175{fill:#4b95c6;}.cls-176{fill:#429bca;}.cls-177{fill:#4599c6;}.cls-178{fill:#548fc3;}.cls-179{fill:#578bc6;}.cls-180{fill:#5b8ac2;}.cls-181{fill:#bd43ae;}.cls-182{fill:#bf40b0;}.cls-183{fill:#3aa7bb;}.cls-184{fill:#40a1bd;}.cls-185{fill:#6385c0;}.cls-186{fill:#a257b2;}.cls-187{fill:#a853af;}.cls-188{fill:#3e9fc7;}.cls-189{fill:#945fb9;}.cls-190{fill:#9c5bb4;}.cls-191{fill:#846cb8;}.cls-192{fill:#806fb9;}.cls-193{fill:#6b83b3;}.cls-194{fill:#6f7eb7;}.cls-195{fill:#7b76b3;}.cls-196{fill:#7778b6;}.cls-197{fill:#737db1;}.cls-198{fill:#8a68b8;}.cls-199{fill:#8e65b5;}.cls-200{fill:#6487b5;}.cls-201{fill:#469dbb;}.cls-202{fill:#4d97bb;}.cls-203{fill:#5b8db7;}.cls-204{fill:#5492b9;}.cls-205{fill:#21bac0;}.cls-206{fill:#34a9c5;}.cls-207{fill:#20bbba;}.cls-208{fill:#25b8b9;}.cls-209{fill:#2bb2bb;}.cls-210{fill:#39abb2;}.cls-211{fill:#30b0b5;}.cls-212{fill:#39a7bb;}.cls-213{fill:#a754af;}.cls-214{fill:#9265af;}.cls-215{fill:#8a69b4;}.cls-216{fill:#7e73b8;}.cls-217{fill:#856cb7;}.cls-218{fill:#7778b8;}.cls-219{fill:#9e5cac;}.cls-220{fill:#a458ab;}.cls-221{fill:#9b5eb0;}.cls-222{fill:#39a9b3;}.cls-223{fill:#2eb3b2;}.cls-224{fill:#34b0ad;}.cls-225{fill:#27b8b6;}.cls-226{fill:#707db9;}.cls-227{fill:#6b82b8;}.cls-228{fill:#aa53ab;}.cls-229{fill:#4a99bd;}.cls-230{fill:#5194b9;}.cls-231{fill:#439ebf;}.cls-232{fill:#598eba;}.cls-233{fill:#6189ba;}.cls-234{fill:#43a1b8;}.cls-235{fill:#41a4b2;}.cls-236{fill:#995fb1;}.cls-237{fill:#8071b5;}.cls-238{fill:#896ab2;}.cls-239{fill:#6d82b0;}.cls-240{fill:#6687af;}.cls-241{fill:#6c85a7;}.cls-242{fill:#7979ad;}.cls-243{fill:#7280a8;}.cls-244{fill:#8e69ab;}.cls-245{fill:#9364ae;}.cls-246{fill:#618dad;}.cls-247{fill:#5e8db1;}.cls-248{fill:#4a9bb6;}.cls-249{fill:#4f99b4;}.cls-250{fill:#5895ab;}.cls-251{fill:#5495b1;}.cls-252{fill:#21bcb5;}.cls-253{fill:#26bab2;}.cls-254{fill:#2cb5b2;}.cls-255{fill:#3daca6;}.cls-256{fill:#32b3a9;}.cls-257{fill:#40a3b8;}.cls-258{fill:#32b1af;}.cls-259{fill:#40a7ae;}.cls-260{fill:#9a60aa;}.cls-261{fill:#9465a9;}.cls-262{fill:#866eaf;}.cls-263{fill:#7e74b2;}.cls-264{fill:#767bb2;}.cls-265{fill:#3fa8ac;}.cls-266{fill:#39adab;}.cls-267{fill:#28b9ad;}.cls-268{fill:#30b4aa;}.cls-269{fill:#35b2a6;}.cls-270{fill:#22beb0;}.cls-271{fill:#6d82b1;}.cls-272{fill:#6588b4;}.cls-273{fill:#4a9cb6;}.cls-274{fill:#5099b0;}.cls-275{fill:#5793b2;}.cls-276{fill:#5f8db1;}.cls-277{fill:#47a0b0;}.cls-278{fill:#45a5a8;}.cls-279{fill:#8373a9;}.cls-280{fill:#856fae;}.cls-281{fill:#6789a6;}.cls-282{fill:#6887ac;}.cls-283{fill:#7e77a9;}.cls-284{fill:#777ca8;}.cls-285{fill:#886fa9;}.cls-286{fill:#5d91ab;}.cls-287{fill:#618fa5;}.cls-288{fill:#4f9bad;}.cls-289{fill:#5598a5;}.cls-290{fill:#5299a8;}.cls-291{fill:#5b93a5;}.cls-292{fill:#26bcab;}.cls-293{fill:#2cb7ac;}.cls-294{fill:#39afa2;}.cls-295{fill:#41a9a3;}.cls-296{fill:#44a4a9;}.cls-297{fill:#33b4a1;}.cls-298{fill:#2db8a6;}.cls-299{fill:#23bfa9;}.cls-300{fill:#2abaa6;}.cls-301{fill:#509da5;}.cls-302{fill:#5b92ab;}.cls-303{fill:#638caa;}.cls-304{fill:#49a1a6;}.cls-305{fill:#45a5a3;}.cls-306{fill:#4e9da7;}.cls-307{fill:#24c0a3;}.cls-308{fill:#2eb9a1;}</style></defs><title>babylon_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g id="lZQzip.tif"><path class="cls-2" d="M105.41242,102.38161l-.00032,1.63174c-.0627.13341.00024.28369-.05621.41793a11.38311,11.38311,0,0,1-2.01033,5.06153,11.067,11.067,0,0,1-3.3906,3.02011,10.84647,10.84647,0,0,1-4.08857,1.32846c-.1868.06553-.38843-.017-.57433.05755l-1.089-.00025c-.20941-.07879-.43384.01163-.64415-.05713a10.19579,10.19579,0,0,1-3.70134-1.065c-.48065-.24244-.92492-.557-1.38588-.83845-.06063-.037-.09079-.14074-.18466-.10308-.11421.04582-.06434.15491-.06525.2351-.00276.24289.00733.48591.01241.72888-.04373.09358-.13.06517-.20175.06525q-2.00022.00226-4.00042.00105a.2189.2189,0,0,1-.17784-.05013q.00179-12.68058.00359-25.36114c.00007-.49836.00007-.49838.51672-.49839,1.14195,0,2.28413.01292,3.42569-.00811.33035-.00608.43083.06512.428.416-.01821,2.2576-.00931,4.51543-.00931,6.77318v.49616a11.05883,11.05883,0,0,1,5.10888-2.07265c.13193-.05882.28125.00852.4123-.0568l.5892-.02108a2.452,2.452,0,0,1,.76686.00027l.58451.02113c.13295.06326.28351-.00195.417.05717a11.59144,11.59144,0,0,1,3.62542,1.17991,10.5452,10.5452,0,0,1,5.46726,7.37007c.05888.28588.11169.573.16732.85955C105.4121,102.10265,105.3474,102.25077,105.41242,102.38161Z"/><path class="cls-2" d="M34.63653,86.95277l4.29235-.00054c.09161.12769.04478.27327.045.40941.00339,2.27909.00048,4.5582.00786,6.83726.00039.12039-.097.284.08547.36982A10.467,10.467,0,0,1,43.578,92.65287c.17488-.0308.34953-.0629.52429-.09438.12944-.05756.27686.01345.40456-.05657l.59672-.02a2.09239,2.09239,0,0,1,.68969-.00017l.59843.01974c.12693.0712.27387-.00048.4028.05643a11.00511,11.00511,0,0,1,4.67914,1.79236,10.4814,10.4814,0,0,1,4.49119,6.91367c.05776.31192.11043.6248.16546.93723.06769.21176-.0209.43721.05681.64808a2.5436,2.5436,0,0,0,.00035.69962c-.07312.18609.00488.38662-.0549.574a10.76306,10.76306,0,0,1-2.32311,5.73583,10.60091,10.60091,0,0,1-6.22918,3.81747,13.59407,13.59407,0,0,1-2.67368.22263c-.18573-.07349-.38628.00608-.57316-.05551a10.43588,10.43588,0,0,1-5.25691-2.01274c-.22287.18028-.09238.42551-.08856.63086.00576.31021-.07424.41724-.40251.41178-1.18-.01964-2.36055-.00755-3.54089-.00779-.45637-.00009-.45687-.00053-.45688-.45163q-.00017-11.04411-.00007-22.08823c0-1.0005-.00178-2.001.00227-3.00152C34.59038,87.2003,34.54594,87.06672,34.63653,86.95277Z"/><path class="cls-2" d="M70.59875,92.56a11.608,11.608,0,0,1,3.789,1.26288c.427.24032.83354.51681,1.28941.80181a3.2784,3.2784,0,0,0,.01372-1.00883c.02837-.10709.118-.07834.18769-.07842q2.02682-.00267,4.05362-.00136a.21665.21665,0,0,1,.14177.04475l-.00015,19.23937c-1.44837.09646-2.898.03169-4.347.03046-.0119,0-.02376-.04231-.03565-.06486.03551-.3164.15843-.77168-.03968-.91009-.21749-.15194-.50493.23574-.75607.39269a10.241,10.241,0,0,1-3.92419,1.482c-.176.02672-.35093.05994-.52637.09015-.18449.06812-.38468-.01774-.5684.05795l-1.17047,0c-.21022-.07641-.43394.0082-.64534-.05409a9.69788,9.69788,0,0,1-3.54018-.98888,10.61343,10.61343,0,0,1-3.67078-2.958,11.10393,11.10393,0,0,1-2.09314-4.33279c-.093-.37677-.13-.75531-.18841-1.13379-.05411-.13074.01294-.2778-.05476-.40671l.00085-1.71014c.06237-.13445-.00032-.28595.05741-.421a9.69545,9.69545,0,0,1,1.34064-4.07919,10.37686,10.37686,0,0,1,5.04614-4.46406,13.59363,13.59363,0,0,1,2.94821-.79295c.13132-.05309.27845.01255.40795-.05428l.59309-.02042a2.07215,2.07215,0,0,1,.68971,0l.58835.02142C70.31706,92.5682,70.46642,92.50184,70.59875,92.56Z"/><path class="cls-2" d="M136.22286,101.739a10.55646,10.55646,0,0,1,2.44338-5.48159,10.26677,10.26677,0,0,1,6.4419-3.61265c.12549-.01986.2484-.05608.37252-.08468.13471-.057.28572.00589.41964-.057l.659-.02133a1.60255,1.60255,0,0,1,.61285.001l.58664.02047c.13217.06357.28091.00119.41442.05453a11.17161,11.17161,0,0,1,4.92871,1.94918c.12262-.01494.18515.05812.23.157a11.48323,11.48323,0,0,1,2.37081,2.52474,10.21138,10.21138,0,0,1,1.71935,4.44978c.01946.13779.05893.27275.08909.409.05146.13548-.00713.28517.05419.41937l.00014,1.46681c-.06137.13448-.00271.28456-.05466.42026a11.2611,11.2611,0,0,1-1.86152,4.91853,11.06171,11.06171,0,0,1-4.001,3.49915,10.90974,10.90974,0,0,1-3.62934,1.0724c-.21173.06282-.43585-.02183-.64644.05434l-1.01887.00044c-.23463-.08194-.48355.01422-.719-.05762a10.64855,10.64855,0,0,1-9.41034-9.17862c-.06328-.12961.01014-.279-.05913-.40779l-.02026-.43963a6.29627,6.29627,0,0,1-.00059-1.2288l.01948-.44508C136.23691,102.015,136.161,101.8669,136.22286,101.739Z"/><path class="cls-3" d="M108.10551,24.18116A19.04342,19.04342,0,0,1,109.618,19.0384a20.56281,20.56281,0,0,1,3.31319-5.17462c.058-.0676.128-.12492.19239-.187a.58705.58705,0,0,1,.30652-.35745,18.23673,18.23673,0,0,1,1.928-1.783.609.609,0,0,1,.28754-.21982l.63689-.47672c.06835-.11283.201-.138.29477-.21626a19.95434,19.95434,0,0,1,5.77059-2.78765.43228.43228,0,0,0,.09747-.06037c.09611-.08387.20175-.03963.30525-.02284a5.07713,5.07713,0,0,1,.36456,1.6745c.151,1.37575.37846,2.73751.65136,4.09323.06239.30994.12178.61909.19791.96579.2284-.13609.22764-.356.33537-.50349.09127-.125.17341-.26722.36041-.23759.18012.02855.24682.16669.28139.32576a8.05405,8.05405,0,0,1,.20257,3.34968,2.66144,2.66144,0,0,0-.01076.91779,6.59283,6.59283,0,0,1-.13906,1.71245,21.01406,21.01406,0,0,1-.59418,3.3667c-.15548.54323-.2648.61154-.82409.68574a21.8299,21.8299,0,0,0-3.85755.58227,23.657,23.657,0,0,1-2.935.77053c-1.03225.19041-2.07612.31678-3.11833.41641-1.19354.11409-2.38765.20907-3.57118.40622a3.20552,3.20552,0,0,0-1.11469.40294c-.39873.23506-.60487.14073-.71986-.31493-.11921-.47236-.16719-.96034-.30723-1.42885A1.117,1.117,0,0,1,108.10551,24.18116Z"/><path class="cls-2" d="M170.976,92.48275l.58774.02046c.13173.064.28022.001.41332.05454a11.1725,11.1725,0,0,1,4.92872,1.94918c.12263-.01494.18515.05812.23.157a11.48038,11.48038,0,0,1,2.3709,2.52482,10.21276,10.21276,0,0,1,1.71959,4.44975,1.54145,1.54145,0,0,0,.08058.25287.22939.22939,0,0,1,.05237.16618.73794.73794,0,0,0,.00993.40828q.002,5.17333.00394,10.34666c-.11124.09873-.2459.05-.36866.05044-1.116.00426-2.23216-.009-3.34783.00986-.31466.00533-.408-.0757-.40676-.3992.01219-3.15484.00781-6.30975.00589-9.46463a1.19973,1.19973,0,0,0-.03-.45689,6.52161,6.52161,0,0,0-3.58673-5.22192,6.08072,6.08072,0,0,0-2.17483-.68356c-.15521-.07359-.32837.006-.48484-.0568l-.61966-.00051c-.155.06482-.32791-.01827-.48157.058a4.26881,4.26881,0,0,0-1.75677.42321,6.52565,6.52565,0,0,0-3.73969,3.95482,1.25874,1.25874,0,0,0-.03719.22353,1.01223,1.01223,0,0,0-.03018.41834q-.00264,5.38994-.00155,10.77989c0,.41716-.00091.418-.4118.41816-1.20657.00043-2.41328-.00941-3.61963.00708-.29077.004-.36373-.079-.36335-.36573q.01226-9.29764-.00054-18.59531c-.00044-.30609.08376-.38661.38565-.38242q1.82877.02544,3.658-.0003c.2999-.00433.38945.09348.35491.37275a2.0816,2.0816,0,0,0,.00108.42292c.00653.07974.03607.155.14608.11113a12.10607,12.10607,0,0,1,1.51035-.93027.21345.21345,0,0,1,.22648-.09535c.08646-.08622.24858.00183.31277-.13571a.20878.20878,0,0,1,.22666-.09361l1.54193-.45154a.20231.20231,0,0,1,.2437-.04837l.75951-.121c.13151-.05807.28029.0096.4107-.05644l.59077-.02112A2.04541,2.04541,0,0,1,170.976,92.48275Z"/><path class="cls-2" d="M110.80912,119.22141q1.101-2.6006,2.202-5.20118c.20717-.48933.41254-.97944.62317-1.46727a.44549.44549,0,0,0-.01-.40023c-.5558-1.17222-1.0978-2.351-1.65525-3.52245-.54807-1.15167-1.1181-2.293-1.66239-3.4464-.53858-1.14134-1.04855-2.29617-1.58682-3.43768-.5224-1.10784-1.10178-2.19026-1.58832-3.31322-.51253-1.183-1.112-2.3238-1.6277-3.50481-.2036-.46627-.45856-.91047-.63115-1.40686,1.52426,0,3.02608.00276,4.52787-.00345a.3571.3571,0,0,1,.38162.23425q2.01563,4.32179,4.04609,8.63667c.67916,1.44332,1.37116,2.88058,2.05344,4.32246a.34623.34623,0,0,0,.135.181c.398-.93367.79593-1.86114,1.18884-2.79074.46761-1.10636.9283-2.21566,1.39686-3.32163.38072-.89869.77272-1.79262,1.1523-2.69179.46721-1.10675.92695-2.21666,1.38944-3.3254.1476-.35384.30266-.705.43619-1.06407a.25849.25849,0,0,1,.29272-.17794c1.42488.00128,2.84979.00606,4.2746-.00277.388-.00241.18142.225.13284.34162-.58851,1.41215-1.18988,2.81893-1.78593,4.22794q-1.64718,3.89383-3.29287,7.78828c-.96233,2.27075-1.93428,4.53744-2.89327,6.80959-.93871,2.22409-1.86642,4.45281-2.799,6.67951-.07529.07089-.16938.04616-.25636.04625-1.38334.00146-2.76668.00417-4.15-.005C110.99384,119.40531,110.74847,119.52949,110.80912,119.22141Z"/><path class="cls-4" d="M104.40436,15.7113a9.72922,9.72922,0,0,1,1.07941,1.77089c.37952,2.434.8474,4.8511,1.38458,7.2551.23236,1.03988.52955,2.06343.77838,3.0983a1.06754,1.06754,0,0,0,1.00368.90079c1.0857.12054,2.14446.39755,3.22979.51729.867.09565,1.73753.13786,2.60645.19994,1.11068.07934,2.22544.00787,3.33963.05847a11.36973,11.36973,0,0,0,2.14325-.17673c1.22033-.179,2.45-.2313,3.67574-.3382.75336-.0657,1.5106-.09005,2.25855-.217a1.32551,1.32551,0,0,0,.65474-.30225,7.85559,7.85559,0,0,0,2.17918-2.99069,8.74582,8.74582,0,0,0,.2993-1.73971,8.56519,8.56519,0,0,0-.20349-3.05462c-.54855-3.39645-1.29737-6.75407-1.98865-10.12282a3.84919,3.84919,0,0,0-.618-1.75573,1.91816,1.91816,0,0,1-.24025-1.03876.7167.7167,0,0,0-.38049-.61708c.08346-.097.21035-.04319.30857-.0889.12731-.0632.27536.0134.40122-.05951l.29225-.01824c.31089-.07614.633.02978.94318-.05835l1.49352.00081c.31346.0851.63795-.01643.95214.05632l-.00682.02572a.62359.62359,0,0,1,.1485.34794c.54487,2.27087,1.001,4.5644,1.616,6.81618.31761,1.163.601,2.33124.86147,3.50572a5.991,5.991,0,0,1,.19829,2.43576.67474.67474,0,0,0,.0383.3791,2.07008,2.07008,0,0,1,.07913,1.1021,20.78858,20.78858,0,0,0-.13777,2.16187,9.80274,9.80274,0,0,1-2.78369,6.72779,10.86767,10.86767,0,0,1-1.92378,1.646,2.58061,2.58061,0,0,1-.94221.30048,10.54388,10.54388,0,0,0-1.78057.14844.16694.16694,0,0,1-.0762.0084c-1.00624-.136-2.008.21928-3.01777.02143a1.76573,1.76573,0,0,0-.83694.06885,3.38971,3.38971,0,0,1-1.29915.03958,1.25374,1.25374,0,0,0-.79279-.01767.47864.47864,0,0,1-.34034-.00558,2.832,2.832,0,0,0-1.29419-.07036,9.74052,9.74052,0,0,1-3.95844-.27935c-1.28946-.42113-2.648-.47565-3.92582-.91149a5.72982,5.72982,0,0,1-2.86508-1.91321,1.444,1.444,0,0,1-.24188-.43406,43.99708,43.99708,0,0,1-2.02107-8.83215c-.141-1.40228-.29239-2.80366-.4259-4.20676C104.25612,15.92726,104.20252,15.76342,104.40436,15.7113Z"/><path class="cls-5" d="M125.60614,7.15852c.334-.04964.44222.10351.46852.42956a2.73972,2.73972,0,0,0,.533,1.63842c.32663.39387.26146.948.36642,1.429.39118,1.79269.75765,3.591,1.11329,5.39114.36267,1.83589.67805,3.68076,1.009,5.52239a9.689,9.689,0,0,1-.15082,3.56582,5.94459,5.94459,0,0,1-1.47962,2.61c-.082.09806-.19606.1715-.26862.275a2.7822,2.7822,0,0,1-2.32588,1.01306c-1.67713.12281-3.35476.2187-5.02712.4294a10.09409,10.09409,0,0,1-2.58783.12679c-.726-.09453-1.4719.02294-2.21141-.013a28.35478,28.35478,0,0,1-4.97651-.51966c-.60516-.13825-1.23554-.137-1.8369-.32228a.8218.8218,0,0,1-.61118-.609c-.50159-1.75511-.92218-3.52925-1.27681-5.31937-.22026-1.1118-.44565-2.22266-.65441-3.33663-.10541-.56253-.18158-1.13065-.26442-1.6972a.30353.30353,0,0,1,.0589-.28981,27.37527,27.37527,0,0,1,1.3355,2.69419c.03969.10518.16076.17715.12746.31212a32.58288,32.58288,0,0,1,.948,3.76744c.15772.20248.05231.459.13885.67607a6.49762,6.49762,0,0,1,.31029,1.37543c.09965.445.20245.49741.59626.27425a5.34532,5.34532,0,0,1,1.75183-.50721,14.50255,14.50255,0,0,1,1.60607-.17717,5.27,5.27,0,0,1,1.29524-.13348,1.817,1.817,0,0,0,.97131-.13538,2.02351,2.02351,0,0,1,.7164-.08442,14.13442,14.13442,0,0,0,3.63991-.71728,19.1927,19.1927,0,0,1,2.241-.57,9.82731,9.82731,0,0,1,1.05-.11654,2.6934,2.6934,0,0,0,1.16143-.146c.01119-.00627.02429-.01878.034-.01669.91757.19757.891-.55369,1.02257-1.07177a11.68384,11.68384,0,0,0,.36774-2.10232,12.89731,12.89731,0,0,1,.17056-1.56984c.15435-.79639-.04244-1.5773.136-2.37582a7.18116,7.18116,0,0,0-.27341-2.862.23041.23041,0,0,0-.177-.18067c-.11082-.03782-.1466.05865-.21013.1212-.15509.15269-.11749.39058-.26066.54584-.06535.07086-.08659.22694-.20915.181a.33072.33072,0,0,1-.16927-.23691c-.07681-.84944-.3084-1.67088-.44584-2.50925-.09208-.56173-.13436-1.1322-.24168-1.686a9.44422,9.44422,0,0,0-.3478-2.02733,1.38587,1.38587,0,0,1-.02829-.45785l.01093-.04942c.7478-.16168,1.49455-.32854,2.24412-.48156A5.36662,5.36662,0,0,1,125.60614,7.15852Z"/><path class="cls-6" d="M120.1343,32.65112a6.38178,6.38178,0,0,0,1.51764-.12865c.52566-.15559,1.08742.09262,1.639.05314a1.22157,1.22157,0,0,0,.66694-.11847.56742.56742,0,0,1,.37383-.02619,2.20881,2.20881,0,0,0,1.38392-.07044.746.746,0,0,1,.41369.0198.74566.74566,0,0,0,.625-.058c.18866-.1304.38213.05149.59393.0033a4.068,4.068,0,0,0,1.74195-1.06385,12.58324,12.58324,0,0,0,2.67706-3.41047,7.4936,7.4936,0,0,0,.69578-2.33112,7.57262,7.57262,0,0,0,.19148-1.57514,6.34588,6.34588,0,0,0,.05565-1.83495c-.078-.24927.19046-.509.14126-.807a2.23962,2.23962,0,0,0-.13041-.81843c-.12336-.22556.01836-.49877.044-.75126a5.74362,5.74362,0,0,0-.16118-1.56459,19.44289,19.44289,0,0,0-.61712-2.83256c-.28438-.85129-.48483-1.71675-.69585-2.58192-.44076-1.80708-.85644-3.62029-1.27906-5.43176a1.881,1.881,0,0,1-.0215-.30615A15.98507,15.98507,0,0,1,132.845,7.479a.50148.50148,0,0,1,.13081.23158,49.688,49.688,0,0,1,2.01791,8.4048,18.21828,18.21828,0,0,1,.27926,2.63092.76591.76591,0,0,0,.10263.36755.50529.50529,0,0,1,.05306.40814,2.02686,2.02686,0,0,0-.08194.91352,9.35413,9.35413,0,0,0,.10765,2.02284.241.241,0,0,1,.00743.11458,33.91307,33.91307,0,0,1-1.62343,7.27583,9.70686,9.70686,0,0,1-1.38024,2.07526,9.48749,9.48749,0,0,1-2.71467,2.467,4.50315,4.50315,0,0,1-1.35042.53045,3.08355,3.08355,0,0,1-1.276.07831,1.11311,1.11311,0,0,0-.74571.13083.56453.56453,0,0,1-.41165.03573,3.51367,3.51367,0,0,0-1.73081.059,3.571,3.571,0,0,1-2.00817-.04747,4.346,4.346,0,0,0-1.90189-.05094.879.879,0,0,1-.59233-.04171.75263.75263,0,0,0-.40915-.09023c-1.2409.05239-2.46072-.201-3.69449-.25138a2.50064,2.50064,0,0,0-.30847-.05935,19.87577,19.87577,0,0,1-5.66911-1.2823,1.31418,1.31418,0,0,1-.3671-.20423.56291.56291,0,0,0-.3023-.17487,6.69961,6.69961,0,0,1-3.33281-4.03482c-.38037-1.32939-.76285-2.65991-1.0232-4.016-.18022-.93879-.2569-1.89952-.38408-2.84985-.09-.67233-.13218-1.349-.20538-2.02275a.45857.45857,0,0,1,.07613-.39964c.2335.01019.24471.19.25938.35439.10708,1.2.2803,2.39105.45046,3.58347a26.43026,26.43026,0,0,0,1.07152,4.44272,7.53319,7.53319,0,0,0,1.2159,2.51222,6.109,6.109,0,0,0,3.85119,2.11473.40553.40553,0,0,0,.19119-.00021,6.8954,6.8954,0,0,1,2.77067.03242,44.72289,44.72289,0,0,0,5.25789.1827.97314.97314,0,0,0,.54036-.17747C119.84031,32.65729,119.96677,32.5574,120.1343,32.65112Z"/><path class="cls-7" d="M103.34009,72.70127c-.83063-.32459-1.63712-.70182-2.44339-1.0828A33.43745,33.43745,0,0,1,97.641,69.97632a8.83717,8.83717,0,0,1-.46461-2.73078,8.47071,8.47071,0,0,0-.08149-1.56152,5.15678,5.15678,0,0,1,.06829-1.14823.67531.67531,0,0,0-.376-.65364,14.08384,14.08384,0,0,1-2.37946-1.68747,3.94162,3.94162,0,0,0-.9147-.56584,20.74024,20.74024,0,0,0-2.05258-.95975,3.20772,3.20772,0,0,1-.75-.3885c-.16453-.11534-.29447-.14228-.38073.0943-.07678.21052-.23739.20568-.40857.1135A4.54453,4.54453,0,0,1,89.438,60.213a33.71361,33.71361,0,0,0-4.58-2.52155c-.54052-.26638-1.07543-.54568-1.60021-.84342a.63617.63617,0,0,1-.36347-.46453.82455.82455,0,0,0-.39825-.54009,14.46986,14.46986,0,0,1-2.0368-1.44187.2658.2658,0,0,0-.37837-.01093c-.44554.28888-.62066.24055-.91818-.22906-.04451-.15711-.01573-.33414-.11628-.4753a.46367.46367,0,0,1,.10826-.67732,1.29208,1.29208,0,0,0,.50413-.96574.65162.65162,0,0,1,.0479-.14416c.14958-.2654.17024-.62573.53679-.73228a2.58723,2.58723,0,0,1,1.397.66306c.34593.28579.71493.54391,1.07586.81143a1.16594,1.16594,0,0,0,.70164.2767,1.23,1.23,0,0,1,.63253.26328A20.46455,20.46455,0,0,0,88.174,55.156c.59193.21194,1.1727.45456,1.76515.66583a.53615.53615,0,0,1,.29389.17513,2.24633,2.24633,0,0,0,1.54488.84813c.89211.21477,1.71631.60142,2.57578.89628,1.5427.52925,3.01121,1.23918,4.51994,1.85118a8.569,8.569,0,0,0,2.52622.45256,3.6449,3.6449,0,0,1,.82979.15793c.18193.06023.36873.12644.43906.33752-.13873.2345-.34989.10311-.5124.07185a2.45059,2.45059,0,0,0-1.10328.04482,1.205,1.205,0,0,0-.80807,1.33007.50453.50453,0,0,0,.2601.31769c.46964.28853.88546.65331,1.35906.93847.45356.27309.51725.56049.21856.99355a4.22715,4.22715,0,0,0-.72292,2.42157,7.94336,7.94336,0,0,1-.25423,1.66848,1.28623,1.28623,0,0,0,.42541,1.38309,4.81378,4.81378,0,0,1,.59991.69914,1.615,1.615,0,0,1,.388,1.09893.50924.50924,0,0,0,.05627.33414.84151.84151,0,0,0,.46643.2233,1.0586,1.0586,0,0,1,.58077.32266C103.696,72.71666,103.66373,72.75239,103.34009,72.70127Z"/><path class="cls-2" d="M128.7694,86.95128l4.294.002c.09292.11323.048.24722.048.37065q.00359,12.56722.002,25.13443c0,.40628-.00109.40683-.42258.40694-1.19347.0003-2.387-.00829-3.58031.00619-.288.0035-.39377-.05181-.39339-.37336q.01462-12.60569.00933-25.2114C128.72653,87.17467,128.69189,87.05481,128.7694,86.95128Z"/><path class="cls-8" d="M79.22829,54.13966c.35955.44678.4117.45726.86273.09658a.2307.2307,0,0,1,.365.01476,12.19076,12.19076,0,0,0,2.11086,1.5163c.17055.12085.37583.24107.38569.45216.02046.438.3492.5399.64969.70063a58.52889,58.52889,0,0,1,6.28747,3.4531c.20324.14307.34382.19342.35951-.14292.01249-.2677.17974-.25488.34171-.13515a15.89082,15.89082,0,0,0,1.89472.90954,10.26468,10.26468,0,0,1,2.37251,1.44961,9.00619,9.00619,0,0,0,1.726,1.19833c.69444.412.81447.59681.64272,1.38551a1.94865,1.94865,0,0,0,.00633.871,2.45465,2.45465,0,0,1,.03857,1.09691,2.17314,2.17314,0,0,0,.07959,1.10055c.16848.53806.03545,1.13771.33748,1.65174.02765.047-.02993.14416-.04794.218-.76852-.38787-1.53152-.78491-2.283-1.20629-1.67951-.94172-3.30679-1.9678-4.93093-2.99949-1.45911-.92685-2.865-1.93088-4.25461-2.95791-1.2152-.89816-2.41793-1.81541-3.55793-2.80577-1.2359-1.07366-2.44176-2.182-3.6354-3.30493a24.86359,24.86359,0,0,1-3.06066-3.57054c.05134-.20435.08335-.2423.23629-.15312a4.828,4.828,0,0,0,1.43812.511.52668.52668,0,0,1,.23813.12122,1.60359,1.60359,0,0,0,1.19108.43817A.29762.29762,0,0,1,79.22829,54.13966Z"/><path class="cls-9" d="M142.40007,12.61785a13.48494,13.48494,0,0,1,1.614,1.7162,3.12216,3.12216,0,0,1,.6203.826.83243.83243,0,0,1,.10336.40486,29.93735,29.93735,0,0,1-1.018,9.32673,35.60688,35.60688,0,0,1-2.89424,7.23567,28.89817,28.89817,0,0,1-3.46014,5.16935,15.18468,15.18468,0,0,1-4.90338,3.95859,7.14585,7.14585,0,0,1-2.633.66228c-1.485.11313-2.97374.0919-4.46119.07893-1.64028-.0143-3.27788-.10843-4.91429-.21955-.15389-.01045-.30791-.0098-.46183-.0077a1.39138,1.39138,0,0,1-.92223-.19241.46476.46476,0,0,0-.21986-.06594,5.42163,5.42163,0,0,1-1.53577-.45045,7.89493,7.89493,0,0,0-1.96512-.51987,23.65433,23.65433,0,0,1-5.86638-1.81751,11.52866,11.52866,0,0,1-1.30791-.73542c-.15028-.0924-.31543-.1872-.30243-.407.22846-.127.4242-.00546.61067.097a23.4676,23.4676,0,0,0,3.85491,1.62176,3.38848,3.38848,0,0,0,1.09277.18276,15.30779,15.30779,0,0,1,1.92664.33265,2.34707,2.34707,0,0,0,1.34955-.14457,2.16867,2.16867,0,0,1,.8951-.19275c.64091.01848,1.27227.13354,1.91353.16926,1.38226.077,2.76328.13827,4.14817.1429.89634.003,1.79334.13281,2.68912.06411,1.11215-.08529,2.23-.01911,3.33935-.15465A7.78215,7.78215,0,0,0,133.002,38.427a15.81364,15.81364,0,0,0,4.35407-4.18769,29.11489,29.11489,0,0,0,5.03734-12.19864,23.78845,23.78845,0,0,0,.35491-4.89843,38.02859,38.02859,0,0,0-.4891-3.92815C142.22722,12.99725,142.18344,12.77648,142.40007,12.61785Z"/><path class="cls-10" d="M136.69742,8.77316a14.21436,14.21436,0,0,1,2.6957,1.46552.45578.45578,0,0,1,.08343.17234c.32548,1.92136,1.0284,3.76048,1.21959,5.71318a27.30971,27.30971,0,0,1,.24759,3.79337A23.71647,23.71647,0,0,1,140.062,25.414a23.80923,23.80923,0,0,1-4.3702,8.75267,12.24255,12.24255,0,0,1-4.75074,3.64252,7.18317,7.18317,0,0,1-2.47409.50461c-1.58774.07127-3.17507.15184-4.76461.13975-.69139-.00525-1.38075-.0874-2.07394-.08812a1.84631,1.84631,0,0,1-.74621-.172,2.064,2.064,0,0,0-.97192-.18471,14.85159,14.85159,0,0,1-2.817-.35447c-.36107-.0828-.73942-.0556-1.107-.11906a35.14306,35.14306,0,0,1-5.67583-1.34769c-.67579-.23653-1.21766-.70464-1.86969-.97131-.51207-.44135-1.11846-.76242-1.59875-1.24557a7.96692,7.96692,0,0,1-1.15038-1.32454.44662.44662,0,0,1-.09218-.395c.0743-.14146.18785-.116.29474-.05686a5.07379,5.07379,0,0,1,1.2102.797,7.99059,7.99059,0,0,0,3.52791,2.01639,1.39959,1.39959,0,0,0,.45393.06736.25708.25708,0,0,1,.1095.05665,3.42377,3.42377,0,0,0,1.26833.41414,44.22112,44.22112,0,0,0,5.62021.89464c1.5407.14345,3.0661.40147,4.623.45061a47.21536,47.21536,0,0,0,6.10616-.183,6.87517,6.87517,0,0,0,3.20539-1.32462,14.68648,14.68648,0,0,0,5.08011-6.533,17.30226,17.30226,0,0,0,1.344-5.89343c.05562-.88241.16533-1.76392.14232-2.64783a35.49512,35.49512,0,0,0-.75113-6.64016c-.31414-1.44484-.75379-2.85254-1.1487-4.27388C136.62934,9.1933,136.52481,8.97667,136.69742,8.77316Z"/><path class="cls-11" d="M120.90466,38.11948a4.59279,4.59279,0,0,0,1.21038.15815c.86994-.01815,1.73663.13085,2.6078.07151,1.04812-.07139,2.09746-.06515,3.147-.08059a8.4591,8.4591,0,0,0,5.07176-1.69475,15.41812,15.41812,0,0,0,4.1368-4.52523,27.46938,27.46938,0,0,0,2.57869-5.64,23.77878,23.77878,0,0,0,.983-4.4755,16.45488,16.45488,0,0,0,.204-2.39583,34.55309,34.55309,0,0,0-.55742-5.23756c-.19506-1.046-.58713-2.0343-.77952-3.07542a3.55363,3.55363,0,0,1-.11395-.98561,16.19331,16.19331,0,0,1,3.00695,2.37917,3.2753,3.2753,0,0,0,.11807,1.54061,21.12739,21.12739,0,0,1,.33107,4.806,28.53027,28.53027,0,0,1-1.53383,7.8049,29.71264,29.71264,0,0,1-3.00979,6.24523,18.248,18.248,0,0,1-3.00861,3.76365,11.13691,11.13691,0,0,1-4.89267,2.90377,6.29249,6.29249,0,0,1-1.43458.19727c-1.37172-.01-2.74177.18135-4.1098.077-1.115-.085-2.23-.00474-3.34068-.07709-1.30966-.08531-2.62432-.11695-3.92712-.2964a.82473.82473,0,0,0-.59637-.30008,44.4847,44.4847,0,0,1-4.97073-1.103,2.00012,2.00012,0,0,1-.60752-.23107c-.15143-.09259-.27477-.2048-.13612-.40094a.72165.72165,0,0,1,.56059-.00062c.9515.21,1.90057.43047,2.85812.61341.36816.07033.74035.06535,1.1088.113a.29419.29419,0,0,0,.189-.02085c.61733-.38027,1.27194-.14593,1.91247-.11665a20.67854,20.67854,0,0,0,2.34471-.00586A3.37271,3.37271,0,0,1,120.90466,38.11948Z"/><path class="cls-12" d="M103.57168,72.393c-.32184-.24194-.76469-.20157-1.07856-.46212-.0928-.59992-.00825-.6786.56354-.52367.08664.02348.17391.04445.26081.06683.1864.048.2846-.00283.31137-.21294.111-.87076.53558-1.65205.72824-2.50077a.28672.28672,0,0,1,.29772-.25254c.19583.0164.2235.1819.24019.34056.00538.05105-.00194.103.00309.1536.014.1408-.10938.33042.09433.40678a.49906.49906,0,0,0,.57477-.09782,1.24,1.24,0,0,1,.88792-.389,1.00218,1.00218,0,0,0,.50867-.24574c.6278-.50684,1.28668-.97346,1.93005-1.45964.74578-.56358,1.49655-1.122,2.22744-1.7054a8.60687,8.60687,0,0,1,1.05635-.767c.38111-.21947.39572-.46259.03886-.74032-.40479-.315-.80951-.62924-1.19027-.97358a.5836.5836,0,0,1-.25881-.408c.03-.15775.155-.22481.27891-.29315a.74582.74582,0,0,1,.71764.16675,16.38552,16.38552,0,0,1,1.61072,1.23028.40822.40822,0,0,0,.15181.11346c.87366.28791,1.66947.75,2.50706,1.1184a6.22362,6.22362,0,0,0,1.81591.56985.46712.46712,0,0,1,.43017.62711c-.02656.11375-.10114.20642-.13451.31685a.61968.61968,0,0,1-.16442.25674,17.28919,17.28919,0,0,1-1.85563,1.54729c-1.22158.73238-2.33765,1.61933-3.50552,2.4303a14.362,14.362,0,0,1-3.41307,1.97371,3.62208,3.62208,0,0,0-1.65361,1.26619.5305.5305,0,0,1-.50961.275,15.80776,15.80776,0,0,1-2.1755-.81795,6.0907,6.0907,0,0,1-1.28914-.57558C103.59822,72.68233,103.7507,72.535,103.57168,72.393Z"/><path class="cls-13" d="M136.69742,8.77316a7.82984,7.82984,0,0,0,.50587,1.99784,34.88882,34.88882,0,0,1,1.08788,4.72767c.12928.879.21759,1.7678.28267,2.65907a20.88063,20.88063,0,0,1,.11719,2.71373,27.25263,27.25263,0,0,1-.69478,5.83083,18.77469,18.77469,0,0,1-1.66285,3.9533,13.56122,13.56122,0,0,1-1.4845,2.27488,14.27748,14.27748,0,0,1-2.69851,2.48827,7.72612,7.72612,0,0,1-4.23116,1.48914c-1.50756.0591-3.01363.16174-4.52264.12776a15.98027,15.98027,0,0,1-3.01449-.18016c-1.5243-.33169-3.08218-.30792-4.61-.61778-1.11509-.22615-2.25578-.38308-3.38242-.586-.33682-.06068-.65058-.21584-.99617-.25858a.2807.2807,0,0,1-.27235-.27737c.06083-.21.22161-.11914.34211-.10144q2.546.37405,5.10281.6636c.40593.04655.81782.03961,1.22667.07736a1.92914,1.92914,0,0,0,.93-.19767c.09868.02591.15051.14128.26822.1349.62743-.03405,1.25255.09338,1.8796.03347a3.83828,3.83828,0,0,1,.80679-.01844,24.918,24.918,0,0,0,3.38405.05673c.83054-.01609,1.66271-.09366,2.49366-.14318a6.80616,6.80616,0,0,0,1.55634-.20228,8.78292,8.78292,0,0,0,3.43676-2.05583c.42479-.3897.82317-.80927,1.21988-1.2293A6.70621,6.70621,0,0,0,135.2198,29.452a28.81233,28.81233,0,0,0,1.29992-6.51405,33.26675,33.26675,0,0,0-.05988-4.83817,38.233,38.233,0,0,0-1.93276-9.24093c-.10169-.3107-.32829-.62677-.14153-.98813A18.36523,18.36523,0,0,1,136.69742,8.77316Z"/><path class="cls-14" d="M107.88567,37.58044a4.88922,4.88922,0,0,0,1.70638,1.07067,21.11875,21.11875,0,0,0,4.04608,1.4196c.94379.21238,1.9021.36589,2.8363.61243a3.24543,3.24543,0,0,1,1.2041.43323c.37215.27847.87317.15874,1.28652.31677a10.83015,10.83015,0,0,0,3.06813.31228,59.5159,59.5159,0,0,0,6.25651.13492,11.93408,11.93408,0,0,0,3.07535-.31255,7.78777,7.78777,0,0,0,2.04512-.92869,16.12508,16.12508,0,0,0,2.97282-2.40721,25.57575,25.57575,0,0,0,2.14975-2.59223,27.33583,27.33583,0,0,0,1.81613-2.83937,36.16541,36.16541,0,0,0,1.68174-3.40353,29.99814,29.99814,0,0,0,1.40915-3.87671,30.41675,30.41675,0,0,0,1.04545-5.16361,24.07754,24.07754,0,0,0,.14838-2.48292c-.00775-.90442-.0001-1.809.00084-2.71345a11.5173,11.5173,0,0,1,.91542,1.25159.20678.20678,0,0,1,.07913.16825,17.0005,17.0005,0,0,1-.086,2.83832,31.19139,31.19139,0,0,1-.41736,3.27895,37.32673,37.32673,0,0,1-1.68239,6.03414A36.19168,36.19168,0,0,1,140.97,34.024a28.53852,28.53852,0,0,1-3.618,5.10692,14.29922,14.29922,0,0,1-4.445,3.49744,6.95075,6.95075,0,0,1-2.85246.6972c-1.03784.027-2.07672.09239-3.11343.05245-1.57375-.06064-3.14811-.10794-4.71817-.27085-1.22315-.12691-2.45235-.20024-3.66373-.42056-.65494-.11912-1.29957-.29214-1.94416-.46013a.577.577,0,0,1-.29162-.17829.497.497,0,0,0-.40532-.255,9.837,9.837,0,0,1-1.71025-.43629,21.07741,21.07741,0,0,1-6.67215-3.13787,20.58954,20.58954,0,0,1-2.763-2.76113.62885.62885,0,0,1-.23213-.544c.26974-.13867.39625.09383.5317.232a22.55314,22.55314,0,0,0,2.0488,1.8916,2.14474,2.14474,0,0,0,.38423.24814A1.00664,1.00664,0,0,1,107.88567,37.58044Z"/><path class="cls-15" d="M146.40217,18.02018l.35708.6233c.12143.0401.09686.13789.09035.22855l.403,1.06605a4.20541,4.20541,0,0,1-.07476,1.44719A35.69489,35.69489,0,0,1,143.34637,33.502c-.55665,1.06619-1.14052,2.1221-1.79854,3.13453a32.45482,32.45482,0,0,1-3.65764,4.69265,13.18608,13.18608,0,0,1-5.71823,3.88944,7.66226,7.66226,0,0,1-2.04954.3098c-1.32031.02436-2.63926.08715-3.96028.1023a46.41328,46.41328,0,0,1-6.96116-.56232,10.33953,10.33953,0,0,1-1.98439-.40584.94674.94674,0,0,1-.50427-.25532.77586.77586,0,0,0-.66629-.49471c-.27141-.05715-.60233-.09659-.60945-.49984a4.28146,4.28146,0,0,1,1.00356-.26032c.94346.1892,1.8853.39468,2.84218.50043q1.87179.20685,3.74752.38043a16.58352,16.58352,0,0,0,1.76319.10077,27.56619,27.56619,0,0,0,3.37586-.01085,9.19709,9.19709,0,0,1,1.57684-.02,7.95344,7.95344,0,0,0,5.14872-1.83418,24.26924,24.26924,0,0,0,5.56139-6.222,35.8574,35.8574,0,0,0,3.81839-7.74542,34.26946,34.26946,0,0,0,1.79874-7.74236,15.46379,15.46379,0,0,0,.15263-2.1076C146.2216,18.29007,146.2084,18.10825,146.40217,18.02018Z"/><path class="cls-16" d="M134.38555,7.87075a17.10437,17.10437,0,0,0,.6488,2.20209,42.39188,42.39188,0,0,1,1.2854,5.70263,37.27131,37.27131,0,0,1,.37471,6.14779,25.43922,25.43922,0,0,1-.56921,4.54341,26.38461,26.38461,0,0,1-1.27153,4.29165,4.907,4.907,0,0,1-1.00191,1.43776,11.65417,11.65417,0,0,1-3.52481,2.8643,7.23923,7.23923,0,0,1-2.89689.69248c-1.6493.07855-3.29791.18278-4.947.12089-1.14556-.043-2.29053-.03577-3.43549-.06307-.166-.004-.31936-.00084-.3-.23283a.3586.3586,0,0,1,.2412-.10419c-1.0197-.129-2.01157-.13571-2.99473-.24575-.22887-.02561-.456-.06269-.685-.08692-.12533-.01325-.26238-.02359-.299-.1864a.23531.23531,0,0,1,.17622-.21013c.12526-.06836.28414.01015.40282-.09084a19.76312,19.76312,0,0,1,2.51409.18613,9.71547,9.71547,0,0,0,1.21073.04455c.03828.00285.082-.01146.1147.0023.78444.32984,1.59014-.04531,2.38151.07132.13865.02043.294-.00905.405.08717a.83527.83527,0,0,0,.61654.14842c.23086-.00337.4619.00312.69271-.00169a2.843,2.843,0,0,0,.95113-.16487,2.28811,2.28811,0,0,1,1.43194.01338c.123.03807.24276.11954.36436.0379a1.51783,1.51783,0,0,1,1.39357-.09046.27369.27369,0,0,0,.14543.01189,7.68861,7.68861,0,0,0,2.64236-1.20681,12.47917,12.47917,0,0,0,3.14478-3.70567,10.02531,10.02531,0,0,0,.92631-2.83265c.26474-1.076.40945-2.17446.58978-3.26642.07284-.44115-.11924-.95669.2544-1.35152.06555-.06927.00218-.19824-.0514-.2889a.71217.71217,0,0,1-.08266-.44632,11.94481,11.94481,0,0,0-.00578-1.55951c-.01569-.524.01749-1.04063-.03434-1.57546A45.38392,45.38392,0,0,0,134.1761,12.307c-.37363-1.52253-.85675-3.01818-1.288-4.52668A2.16709,2.16709,0,0,1,132.845,7.479,9.28381,9.28381,0,0,1,134.38555,7.87075Z"/><path class="cls-17" d="M146.40217,18.02017a.83957.83957,0,0,0-.07545.48653,24.43214,24.43214,0,0,1-.36172,3.57166,30.34962,30.34962,0,0,1-.82279,3.84972,30.41932,30.41932,0,0,1-1.12158,3.33812c-.43008,1.07616-.86055,2.15237-1.37821,3.18829a38.30493,38.30493,0,0,1-2.73659,4.59542,25.51091,25.51091,0,0,1-3.87119,4.44641,12.94028,12.94028,0,0,1-2.62947,1.83244,7.40629,7.40629,0,0,1-3.86923.87207c-.924-.03728-1.84.11383-2.7634.0822-1.72872-.05921-3.45522-.09123-5.18022-.2883-1.55726-.1779-3.11788-.30817-4.65312-.63837a1.17762,1.17762,0,0,1-.5026-.15339c.04939-.23758-.13689-.23728-.27986-.26875a26.8308,26.8308,0,0,1-3.135-.9114,22.52186,22.52186,0,0,1-4.70418-2.246c-.13126-.08408-.31288-.14481-.27879-.36274.19881-.09.34881.03527.49432.12831a13.42536,13.42536,0,0,0,3.86889,1.75183c1.09646.28053,2.19254.60163,3.31449.79786.25125.04394.41494-.16671.6431-.12167a2.68655,2.68655,0,0,0,1.15236.36711,27.04228,27.04228,0,0,0,4.6463.64792c1.24785.10165,2.49529.1673,3.74419.238,1.026.05811,2.051.07791,3.07134.03737a10.64265,10.64265,0,0,0,2.326-.159,9.4743,9.4743,0,0,0,2.56019-1.10276,14.8314,14.8314,0,0,0,3.13769-2.62639,28.28851,28.28851,0,0,0,2.79982-3.63554,38.61212,38.61212,0,0,0,2.59542-4.72434,30.88875,30.88875,0,0,0,1.47885-3.85522,36.85593,36.85593,0,0,0,1.10168-4.21907,30.99759,30.99759,0,0,0,.444-3.33018c.08044-1.02067.15412-2.03811.14146-3.06155.09716-.02738.11878.04239.14189.11026Z"/><path class="cls-18" d="M116.74475,44.358a5.1833,5.1833,0,0,0,1.737.52215c.7304.04074,1.43451.22642,2.15995.28081.8883.06662,1.76484.26653,2.65892.27123a7.257,7.257,0,0,1,1.52068.14476c.22517.04927.423-.07709.64424-.06883.46142.0172.92409.01255,1.386.00372,1.13913-.02178,2.27979-.02076,3.4168-.08387a9.224,9.224,0,0,0,5.25782-2.08835c.54263-.42526,1.05222-.88882,1.59355-1.31634A12.65237,12.65237,0,0,0,138.658,40.3167c.7976-.91026,1.53132-1.87873,2.25554-2.84981a12.84585,12.84585,0,0,0,.70629-1.131c.7495-1.26163,1.49117-2.52986,2.131-3.85233a37.12655,37.12655,0,0,0,2.88092-8.43209,29.2205,29.2205,0,0,0,.54422-3.66192c.01281-.15157.05048-.301.07663-.45149a7.86825,7.86825,0,0,1,.61288,1.931,7.13353,7.13353,0,0,1-.18453,1.5628,37.2579,37.2579,0,0,1-2.05,6.92862,41.37794,41.37794,0,0,1-3.3565,6.568,29.046,29.046,0,0,1-4.64327,5.82247,15.8524,15.8524,0,0,1-3.25338,2.50978,9.61266,9.61266,0,0,1-4.40463,1.21746c-1.5741.05856-3.15.10062-4.723.20241a8.07208,8.07208,0,0,1-1.60468-.09262c-.60716-.082-1.23518-.08586-1.854-.12354a15.4016,15.4016,0,0,1-2.40393-.28528,14.04761,14.04761,0,0,1-2.06986-.31742,7.76694,7.76694,0,0,1-1.81892-.43235,23.17278,23.17278,0,0,1-3.13076-1.01841c-.15282-.06474-.3681-.08589-.34864-.33718.174-.1304.3437-.02395.50758.02054.6167.16743,1.21384.40207,1.838.5443a7.48162,7.48162,0,0,0,1.28562.16063c.01455-.11975-.09661-.17079-.08155-.26521A1.08042,1.08042,0,0,1,116.74475,44.358Z"/><path class="cls-19" d="M107.04324,74.221a1.16486,1.16486,0,0,0,.4876-.402,3.66645,3.66645,0,0,1,1.77182-1.286,12.2819,12.2819,0,0,0,3.03944-1.74819C113.745,69.81005,115.13,68.81,116.545,67.85164a6.59833,6.59833,0,0,0,1.50939-1.38909,8.54066,8.54066,0,0,1,.92914-.89265c.07356-.053.15321-.12853.11768-.22-.17008-.438.13347-.48922.43342-.55026.04939-.01005.09734-.02752.14753-.03819a2.1906,2.1906,0,0,1,1.12757.10089,3.22648,3.22648,0,0,0,2.04985.08594,1.3074,1.3074,0,0,1,.30165-.04055,2.908,2.908,0,0,1,.63671.13584,1.11393,1.11393,0,0,0,.78747-.01481.509.509,0,0,1,.33949-.02526c.15064.03876.21194.15176.07786.23942-.51247.335-.63118.95113-1.01508,1.37434-1.67021,1.05792-3.37093,2.06336-5.12186,2.98287-.5821.30569-1.16052.6184-1.74063.92789a9.56661,9.56661,0,0,1-1.38995.70674c-.58892.26689-1.18253.52395-1.76591.80245-1.91187.91272-3.86955,1.715-5.856,2.449a.6926.6926,0,0,1-.378.00127A2.12354,2.12354,0,0,1,107.04324,74.221Z"/><path class="cls-20" d="M117.36081,45.74476a2.37123,2.37123,0,0,0,1.52856.12722c.11486-.04632.11408.17394.277.19009.82263.08153,1.63983.2302,2.46356.28261.36381.02314.73909.22524,1.12089-.00208.0829-.04935.22982.21176.35914.15974.56872-.22878,1.08319.14806,1.64744.107,1.43945-.10479,2.88794-.08445,4.32769-.18648a20.4284,20.4284,0,0,0,2.47363-.21231,8.97054,8.97054,0,0,0,1.85458-.59473,13.92409,13.92409,0,0,0,3.59124-2.443,27.76573,27.76573,0,0,0,4.95592-5.91555,42.37251,42.37251,0,0,0,2.34388-4.171,39.69047,39.69047,0,0,0,2.89611-7.89769,23.01548,23.01548,0,0,0,.59278-3.15074.635.635,0,0,1,.07223-.16867,5.8063,5.8063,0,0,1,.37392,1.77335,28.64387,28.64387,0,0,1-.99262,3.83407,36.172,36.172,0,0,1-2.33752,5.89743,38.876,38.876,0,0,1-5.0879,7.82153,21.50176,21.50176,0,0,1-5.30465,4.64015,7.956,7.956,0,0,1-3.70236,1.19581c-1.98083.093-3.95484.32428-5.943.28413a30.06792,30.06792,0,0,1-3.52744-.22894c-1.25382-.17361-2.50744-.35015-3.76433-.50349a21.02157,21.02157,0,0,1-2.33428-.6002c-.14683-.0416-.34725-.037-.3778-.2607a.21673.21673,0,0,1,.24606-.13817,5.32863,5.32863,0,0,1,1.31919.07982A1.39052,1.39052,0,0,0,117.36081,45.74476Z"/><path class="cls-21" d="M148.2477,32.57313a10.80361,10.80361,0,0,1-.23985,1.77607,20.3438,20.3438,0,0,1-1.64358,3.03818,42.84148,42.84148,0,0,1-4.68447,6.32727,31.25654,31.25654,0,0,1-5.39619,4.90135,11.66564,11.66564,0,0,1-5.764,2.16729c-.98176.086-1.95133.29277-2.93218.40249q-1.183.13233-2.3719.19793a8.57713,8.57713,0,0,1-1.84045.05628c-.63793-.0492-1.27334-.12809-1.90935-.179-1.38047-.11058-2.75033-.31323-4.12947-.42973-.24419-.105-.50621-.15649-.75516-.24687-.15179-.0551-.32366-.09922-.33165-.31175.08531-.18554.25088-.15905.39788-.13056.29007.05622.58961.01455.87622.09741a.4298.4298,0,0,0,.32987-.06641,7.04169,7.04169,0,0,1,1.56353.12508,6.12282,6.12282,0,0,0,.87759.04789c.96026-.02789,1.91519.10886,2.8738.10632a11.07486,11.07486,0,0,1,1.8787.03485.54316.54316,0,0,0,.32966-.0901.97973.97973,0,0,1,.55666-.12562,8.27806,8.27806,0,0,0,2.16119-.14523,33.32937,33.32937,0,0,0,4.5927-.705,4.039,4.039,0,0,0,1.883-.79983,3.16155,3.16155,0,0,1,1.07142-.57884,3.33652,3.33652,0,0,0,1.21459-.90491,14.96337,14.96337,0,0,1,1.26465-.98311c.05712-.0501.15008-.0732.18353-.13673.41855-.79467,1.29254-1.10587,1.85225-1.75046a2.92808,2.92808,0,0,0,.43486-.58222c.181-.356.55619-.54186.77534-.88154.37791-.58576.99718-.9876,1.328-1.61118.32356-.60992.87237-1.03549,1.238-1.60858.32919-.516.7021-1.01789.993-1.542.33987-.61242.73875-1.19,1.07631-1.804.34093-.62009.68064-1.24637,1.04458-1.85678.27231-.45675.44132-.9802.69821-1.45287C147.84653,32.74112,147.93168,32.47908,148.2477,32.57313Z"/><path class="cls-22" d="M117.59213,46.51457c.88566.02016,1.74834.23406,2.62565.31462.94634.08689,1.87787.27184,2.83264.323a30.27866,30.27866,0,0,0,3.0705.03964,34.19161,34.19161,0,0,0,3.91921-.27145c.465-.07629.954.02631,1.43506-.06046a10.00722,10.00722,0,0,0,4.159-1.86976,21.742,21.742,0,0,0,3.38043-3.04795,36.68708,36.68708,0,0,0,3.11655-3.97461,40.08348,40.08348,0,0,0,2.624-4.50677,41.52752,41.52752,0,0,0,2.89124-7.70721c.17332-.64084.34025-1.28138.45722-1.9347a.25108.25108,0,0,1,.13579-.17645,7.34615,7.34615,0,0,1,.1654,1.08033,1.50077,1.50077,0,0,1-.02256.82923,44.22622,44.22622,0,0,1-2.58363,7.08036,39.25853,39.25853,0,0,1-4.01591,6.82338,33.01778,33.01778,0,0,1-3.999,4.61605,13.15388,13.15388,0,0,1-5.7015,3.37679,14.66635,14.66635,0,0,1-2.29183.24407c-1.54424.14569-3.09564.18811-4.64236.29974a14.40709,14.40709,0,0,1-2.2657-.092c-1.08522-.0925-2.16963-.19414-3.2552-.28309-.86953-.07124-1.72928-.22584-2.59562-.32578a.38667.38667,0,0,1-.236-.11966c-.2359-.50293-.21136-.55887.3132-.638A.96506.96506,0,0,1,117.59213,46.51457Z"/><path class="cls-23" d="M123.44683,51.36678a40.07889,40.07889,0,0,0,4.76459-.38072c1.22184-.17662,2.448-.32589,3.66633-.52352a10.25257,10.25257,0,0,0,3.73867-1.53287,24.63415,24.63415,0,0,0,3.123-2.40369c.69-.5981,1.32317-1.25064,1.9578-1.90132a39.69824,39.69824,0,0,0,3.96531-4.81784,41.99537,41.99537,0,0,0,3.10991-5.10987,3.33646,3.33646,0,0,1,.2354-.34776,13.2907,13.2907,0,0,1-.45,2.3048c-.97638,1.54833-1.93538,3.10774-3.03461,4.57516-.81455,1.08738-1.70826,2.106-2.61813,3.11314-.69567.77006-1.42163,1.50945-2.1686,2.22792a22.36163,22.36163,0,0,1-4.63882,3.51939,8.26011,8.26011,0,0,1-2.48339.99468c-.731.11648-1.45835.25031-2.19365.33841-.944.11311-1.88266.26781-2.82241.41269a3.21121,3.21121,0,0,1-.68818.04218,7.7503,7.7503,0,0,0-1.30939.15166.77886.77886,0,0,1-.26658-.01033,3.38045,3.38045,0,0,0-1.26009-.06851,6.24526,6.24526,0,0,1-1.74969-.10888c-.2287-.03238-.45711-.0528-.6878-.0629-.14621-.00641-.3199.01527-.37811-.18427.09257-.27058.33176-.262.54243-.25608C122.34951,51.35357,122.89926,51.304,123.44683,51.36678Z"/><path class="cls-24" d="M116.82178,47.13073a12.30022,12.30022,0,0,0,1.54371.22842c1.19127.22439,2.40548.24782,3.608.363a16.1517,16.1517,0,0,0,2.97965.17388c1.44678-.12956,2.90162-.11371,4.34711-.28721.71854-.08624,1.44936-.08366,2.17277-.16325a7.10224,7.10224,0,0,0,2.19331-.65366,14.144,14.144,0,0,0,3.50555-2.31625,30.82014,30.82014,0,0,0,3.16683-3.33153,37.89455,37.89455,0,0,0,3.49007-4.97607,41.20671,41.20671,0,0,0,2.52666-5.03909,42.33039,42.33039,0,0,0,2.00324-5.9126,2.17753,2.17753,0,0,0,.0461-.49359c.11531.10774.051.25964.09469.385.05368.12759-.01716.2724.055.39743l.02082.44944a.64976.64976,0,0,1,.01249.30106,21.18542,21.18542,0,0,1-.98329,3.11462,43.13881,43.13881,0,0,1-4.24813,8.48519,34.05981,34.05981,0,0,1-3.68938,4.82382,18.42115,18.42115,0,0,1-6.55781,4.93168,8.95581,8.95581,0,0,1-2.62535.554c-1.02142.08232-2.04225.17665-3.063.26933a13.602,13.602,0,0,1-1.41778.09459c-.80611-.0119-1.60671.0745-2.41723.03137-1.51283-.08051-3.01073-.2809-4.51354-.44225a2.4891,2.4891,0,0,1-.79681-.10286.65089.65089,0,0,0-.43622-.2197,5.25869,5.25869,0,0,1-1.254-.35945c-.14776-.04472-.37194-.084-.2704-.34748A.44962.44962,0,0,1,116.82178,47.13073Z"/><path class="cls-25" d="M120.1343,32.65112c-.051.00423-.12522-.01192-.14942.01572-.40368.46126-.94536.36587-1.46161.3687-.55147.003-1.10365.01851-1.65431-.0028-1.42546-.05518-2.84479-.17766-4.264-.33219a2.56123,2.56123,0,0,0-1.37314.09729c-.36572.16312-.80414-.046-1.17968-.16926a6.83821,6.83821,0,0,1-2.29375-1.20591,5.66318,5.66318,0,0,1-1.57275-2.26738,24.20071,24.20071,0,0,1-1.33-4.66094c-.193-.97127-.30294-1.95959-.43373-2.94244-.07043-.52935-.10808-1.06313-.15607-1.59532a.26887.26887,0,0,0-.15466-.2447.96612.96612,0,0,1-.18688-.60855c-.144-1.22913-.13816-2.46772-.2266-3.70051-.01242-.17313-.06563-.39147.18916-.46995a3.44666,3.44666,0,0,1,.51756.77842c-.14011.17313.0045.3409.00637.511.01029.9329.1731,1.852.25171,2.77853.09024,1.06348.27264,2.11907.41206,3.17848a36.37318,36.37318,0,0,0,1.21962,5.20748,13.61022,13.61022,0,0,0,.57091,1.78048,3.57339,3.57339,0,0,0,1.46766,1.47429,9.9056,9.9056,0,0,0,3.65679,1.17055,4.46966,4.46966,0,0,1,1.57571.40077,1.0574,1.0574,0,0,0,.82494.14939,1.38873,1.38873,0,0,1,.63866.10051,10.20224,10.20224,0,0,0,2.64251.05678,2.39956,2.39956,0,0,1,1.38566.10446.28873.28873,0,0,0,.25629-.00451C119.60252,32.40426,119.86483,32.55542,120.1343,32.65112Z"/><path class="cls-26" d="M148.2477,32.57313a.47992.47992,0,0,0-.372.302c-.201.39841-.394.80154-.56981,1.21155-.09115.21263-.23361.39807-.32607.59583a4.40163,4.40163,0,0,0-.52474,1.07639c-.03849.22206-.291.27392-.38484.49287a3.24934,3.24934,0,0,1-.69655,1.15472.58586.58586,0,0,0-.19562.36726.71736.71736,0,0,1-.2318.47409,11.60433,11.60433,0,0,0-1.088,1.62136,6.85465,6.85465,0,0,0-1.063,1.36284c-.21565.47456-.72048.71628-.94815,1.14048-.1715.31956-.56882.448-.6114.83655a.0507.0507,0,0,1-.017.03382c-.66924.43469-.93557,1.25468-1.59987,1.68506-.26329.17057-.59721.26444-.75364.54742a2.76389,2.76389,0,0,1-1.17849,1.09835c-.39231.203-.56629.62869-.98175.77312-.12945.045-.09981.23749-.23493.32956a7.38783,7.38783,0,0,1-1.6006.85995c-.32477.1192-.46926.44472-.81072.54954a17.27,17.27,0,0,1-2.05127.60827c-.57027.1-1.16129.14229-1.72189.25514-.30637.06168-.73092-.16848-.958.2342a.89924.89924,0,0,0-.76623-.05155c-.47283.1204-.97092.10718-1.43681.19231a11.61484,11.61484,0,0,1-1.26888.04137c-.05109.004-.11886-.01437-.151.01182-.44906.36561-.95762.10124-1.4357.14907a22.843,22.843,0,0,1-2.322.00638c-.47945-.00079-.98353-.10322-1.47643-.08376a18.75811,18.75811,0,0,1-2.57016-.23767.61116.61116,0,0,1-.46889.02662,7.66734,7.66734,0,0,1-1.033-.22274c-.14814-.04322-.37571-.0435-.344-.30752.20133-.20982.44914-.12552.68882-.11492.727.03212,1.45429.05667,2.18144.0167.74163.01489,1.47628.13829,2.21866.15379.10127.00211.20268.03835.30524.03406,1.03928-.0435,2.07373.1348,3.11194.07767,1.12433-.06186,2.24743-.13288,3.36834-.26025,1.10707-.1258,2.21541-.24583,3.3219-.37663a10.11311,10.11311,0,0,0,4.742-1.98046,32.51407,32.51407,0,0,0,7.86674-8.40788,49.94772,49.94772,0,0,0,3.10735-5.263c.40692-.79852.79173-1.61058,1.13407-2.44114a1.15619,1.15619,0,0,1,.33754-.58959.08513.08513,0,0,1,.08839.06922.2057.2057,0,0,1-.033.177A16.83549,16.83549,0,0,1,148.2477,32.57313Z"/><path class="cls-27" d="M132.69108,50.98169a2.85122,2.85122,0,0,0,.97-.323,16.38384,16.38384,0,0,0,3.281-1.86653,26.65153,26.65153,0,0,0,3.08651-2.62642c.5762-.54839,1.12758-1.14166,1.67348-1.73043.64976-.70076,1.24055-1.44918,1.88-2.1569a21.266,21.266,0,0,0,1.76044-2.35926c.59459-.87625,1.15305-1.77693,1.73357-2.66282.14079-.21485.18579-.51047.48185-.60238a10.9656,10.9656,0,0,1-.46328,1.92339,40.71771,40.71771,0,0,1-3.39635,4.65641c-.66335.8172-1.35737,1.6108-2.09229,2.3597a24.76406,24.76406,0,0,1-1.905,1.79123c-1.06881.88057-2.10177,1.80189-3.25372,2.58273a12.81455,12.81455,0,0,1-5.5705,2.186c-1.10576.147-2.2035.3755-3.31092.49669a14.68121,14.68121,0,0,1-2.29174.20934c-.49885.01525-.99533.00854-1.49458.06765a11.5058,11.5058,0,0,1-2.02516-.166.18578.18578,0,0,1-.17149-.13344c.10047-.15869.26669-.138.41512-.13724.6913.00359,1.38013-.09613,2.07248-.04651a1.2164,1.2164,0,0,0,.27891-.00575c-.23486.01216-.47854.009-.722.00226-.12274-.00337-.24689-.041-.252-.18162-.00539-.14762.11145-.22.24437-.25554a.22394.22394,0,0,1,.11464-.00351,5.84678,5.84678,0,0,0,2.20455-.0283c.99771-.10544,1.99822-.18284,2.99041-.35449.91457-.15823,1.83818-.27156,2.75842-.40013A7.25026,7.25026,0,0,0,132.69108,50.98169Z"/><path class="cls-28" d="M148.47678,30.57166c-.41239.90673-.79564,1.82816-1.24413,2.71668-.63971,1.26731-1.32165,2.51253-2.06372,3.72555a43.19359,43.19359,0,0,1-3.67137,5.18324,31.52858,31.52858,0,0,1-3.88275,3.92249,18.32131,18.32131,0,0,1-3.031,2.13776,10.8828,10.8828,0,0,1-4.3576,1.206,25.19828,25.19828,0,0,0-2.84085.3423c-.38677.0776-.78631.0337-1.18278.0836a30.95328,30.95328,0,0,1-4.90538-.005,14.04221,14.04221,0,0,1-2.31845-.21193,3.86454,3.86454,0,0,1-1.53393-.18732c-.38815-.125-.76993-.26942-1.16034-.3898-.163-.05029-.40747-.08143-.31024-.37091a.41067.41067,0,0,1,.32712-.05719,5.06347,5.06347,0,0,0,1.47081.053c.6191.00989,1.20711.225,1.82217.27291,1.27633.09948,2.54574.275,3.82485.34834a31.75671,31.75671,0,0,0,4.5568-.2123c1.11086-.09587,2.22035-.21081,3.32734-.333a9.34072,9.34072,0,0,0,4.15041-1.63673,24.7394,24.7394,0,0,0,3.6461-3.06539,36.80168,36.80168,0,0,0,5.32948-6.79224,48.10432,48.10432,0,0,0,3.84461-7.65833c.05846-.14682.05172-.37572.30292-.38221a.48555.48555,0,0,1-.00286.305l-.02021.60118C148.47245,30.29149,148.57675,30.451,148.47678,30.57166Z"/><path class="cls-29" d="M73.06682,48.74368a21.82411,21.82411,0,0,1-1.61407-3.16934c-.09946-.22694-.01608-.29037.20212-.21886a.59486.59486,0,0,1,.22424.14611c.45813.45041,1.01478.77568,1.502,1.19257a2.025,2.025,0,0,0,1.97928.54614,7.24792,7.24792,0,0,1,1.208-.20551c.609.16277,1.24073.20351,1.85364.345a.33249.33249,0,0,1,.16409.2043,2.02222,2.02222,0,0,0,.4481.83532.2748.2748,0,0,1,.063.25191c-.20706.2749-.55933.2829-.83062.44369-.20611.12215-.276.19607-.19328.4671a6.39866,6.39866,0,0,0,.30361,1.24294.40046.40046,0,0,1-.048.46318.22952.22952,0,0,1-.25448-.01671,1.00549,1.00549,0,0,0-.80554-.14336.52942.52942,0,0,1-.42577-.142,8.27,8.27,0,0,0-2.02095-.91354,2.90189,2.90189,0,0,1-.97338-.59672A6.12912,6.12912,0,0,0,73.06682,48.74368Z"/><path class="cls-30" d="M148.55512,29.26227c-.6266,1.455-1.21663,2.92621-1.93327,4.34115a44.71082,44.71082,0,0,1-4.09737,6.7004,33.07006,33.07006,0,0,1-2.49771,3.00024A26.83065,26.83065,0,0,1,135.5079,47.252a9.70184,9.70184,0,0,1-4.19817,1.65274c-1.07146.12951-2.15693.15623-3.22237.319-1.21548.18569-2.44275.13322-3.65964.276a8.02556,8.02556,0,0,1-1.64013-.0887c-.56985-.05231-1.13584-.17382-1.70581-.19146a18.25738,18.25738,0,0,1-2.84129-.34994,2.47733,2.47733,0,0,0-.41725-.04447.09128.09128,0,0,1-.00651-.11068.90216.90216,0,0,1,.80426-.082,7.06508,7.06508,0,0,0,2.16225.13151,8.15274,8.15274,0,0,1,1.6.11805,3.82927,3.82927,0,0,0,1.92864.02232.67962.67962,0,0,1,.26731-.024,38.62478,38.62478,0,0,0,3.96332-.28986c.803-.0757,1.60556-.15951,2.40905-.22713a9.45445,9.45445,0,0,0,3.86159-1.32088c.90169-.50659,1.647-1.22232,2.52438-1.75435a.29627.29627,0,0,0,.08713-.07529c.49464-.68493,1.26638-1.079,1.80393-1.71846.40211-.47838.79028-.97516,1.23086-1.41247a15.07293,15.07293,0,0,0,1.51132-1.83623c.87089-1.18925,1.65913-2.43258,2.43653-3.68474.3293-.5304.67268-1.05956.97626-1.59977a21.669,21.669,0,0,0,1.44614-2.96879,14.88158,14.88158,0,0,1,1.047-2.34539,1.18982,1.18982,0,0,0,.14755-.47311,2.24323,2.24323,0,0,1,.32929-1.01532,1.00283,1.00283,0,0,0,.10773-.5562,3.0553,3.0553,0,0,1,.07535-1.02752q.05463-.05295.09316.0125l.00284,2.43058C148.56877,29.0873,148.63377,29.19755,148.55512,29.26227Z"/><path class="cls-31" d="M94.79179,8.17326A16.61389,16.61389,0,0,1,98.688,10.01711a1.17548,1.17548,0,0,0,.16865.0733.33067.33067,0,0,1,.17534.163c.21456.3628.60557.54466.87072.86058A10.36609,10.36609,0,0,1,102.137,16.5091c.19769,1.41144.14359,2.8366.24177,4.25269.092,1.327.1554,2.6556.26636,3.982a22.36482,22.36482,0,0,0,.86228,4.36423,11.77584,11.77584,0,0,0,.78748,1.95854,2.51923,2.51923,0,0,1,.19023.46043,1.86679,1.86679,0,0,0,.22136.48492.46959.46959,0,0,1,.04915.47158c-.24862.08442-.30631-.13095-.39048-.269a16.51989,16.51989,0,0,1-.97687-1.95936,12.13351,12.13351,0,0,0-.8058-1.2379,8.35835,8.35835,0,0,1-.48822-2.40215c-.071-.97184-.2265-1.93354-.28609-2.90631-.03284-.536-.07721-1.07486-.09837-1.60952-.04454-1.12558-.06217-2.254-.10694-3.37917a12.29371,12.29371,0,0,0-1.364-5.51533,8.5525,8.5525,0,0,0-4.37375-3.7619c-.50818-.21651-1.034-.38246-1.55189-.57118a8.73952,8.73952,0,0,0-1.2541-.29784.653.653,0,0,1-.52421-.32729c.04946-.25011.24079-.22215.41985-.20973a12.0891,12.0891,0,0,1,1.212.2046A.71474.71474,0,0,0,94.79179,8.17326Z"/><path class="cls-32" d="M104.41907,31.57285a18.45677,18.45677,0,0,1-1.92132-7.29483c-.10884-1.51407-.20855-3.0285-.25683-4.547-.01573-.49506-.03322-.99409-.05587-1.491a13.05622,13.05622,0,0,0-1.13327-5.15422,7.06852,7.06852,0,0,0-1.91307-2.55321c-.07911-.06281-.28137-.11488-.15856-.30462a.55645.55645,0,0,1,.43176.30211l.92786.63147c.1175.06036.2624.08732.29957.24561a11.35333,11.35333,0,0,1,.85555.82481,9.3291,9.3291,0,0,1,1.09757,3.45809,27.00512,27.00512,0,0,1,.26116,3.17516c.0416.96792.11235,1.93928.18539,2.90783.09355,1.24048.20543,2.47532.411,3.70158a20.81678,20.81678,0,0,0,1.5252,5.186,3.91758,3.91758,0,0,0,.56906.95525.56119.56119,0,0,1,.10737.65015,1.26374,1.26374,0,0,0,.41879.75215,8.79961,8.79961,0,0,0,2.04707,1.82033.67.67,0,0,1,.30741.27723c-.23973.15437-.41407-.02774-.58864-.13172a7.56852,7.56852,0,0,1-2.13265-2.00544,1.43788,1.43788,0,0,0-.49414-.4686A1.7617,1.7617,0,0,1,104.41907,31.57285Z"/><path class="cls-33" d="M105.65164,32.266c.03953-.40179-.26736-.64113-.44557-.93887a12.11781,12.11781,0,0,1-.928-2.099,19.66518,19.66518,0,0,1-.88735-3.47992c-.15485-.91638-.29186-1.83351-.37111-2.7622-.06817-.79894-.13883-1.60177-.18559-2.3991-.0415-.70765-.11683-1.41746-.11506-2.13067a16.48652,16.48652,0,0,0-.78934-5.07975,11.87874,11.87874,0,0,1-.43473-1.14455,8.36766,8.36766,0,0,1,1.38656,1.464,4.83522,4.83522,0,0,1,.41037,2.05656c.19307,2.65747.30547,5.32159.6403,7.967a27.99021,27.99021,0,0,0,.82314,3.99165c.04817.173.102.34443.13331.521a9.23193,9.23193,0,0,0,1.52766,3.53072A7.24876,7.24876,0,0,0,108.68,33.91351a14.19971,14.19971,0,0,0,1.99675.89186c.15221.05622.37724.05173.3674.31019-.19074.162-.37057.00288-.53351-.04517a8.04279,8.04279,0,0,1-3.58276-2.11373,6.7875,6.7875,0,0,0-1.18589-.74183C105.72955,32.20627,105.68252,32.24783,105.65164,32.266Z"/><path class="cls-34" d="M104.80425,28.338a34.12914,34.12914,0,0,1-.986-4.50682c-.12585-.84095-.15167-1.69635-.25046-2.542-.14173-1.21332-.12683-2.43818-.29513-3.6498-.0735-.52918-.01121-1.06664-.06328-1.60467-.0761-.7863-.20336-1.56142-.32788-2.33879a6.87847,6.87847,0,0,1,1.00535,1.2369.507.507,0,0,0-.07332.50888,11.278,11.278,0,0,1,.06922,1.56888c.0667.90112.15131,1.80091.22841,2.70125.08427,1.08941.17845,2.17761.3536,3.25729.126.77658.16156,1.56453.331,2.33708.27284,1.24425.60919,2.471.962,3.69356a6.11756,6.11756,0,0,0,2.618,3.51192c.22358.1465.44376.29818.66551.44746.06865.06391.17145.07662.2311.154a15.99893,15.99893,0,0,0,4.27325,1.23154c.60272.08737,1.20829.15514,1.81255.23183.05757.10476-.01837.165-.077.23106l-.23111.0772a3.15389,3.15389,0,0,1-1.134.02051,19.52773,19.52773,0,0,1-4.25142-1.16469,14.49944,14.49944,0,0,1-2.326-1.14871,5.01068,5.01068,0,0,1-1.60015-2.02789C105.39212,29.83643,105.13971,29.06992,104.80425,28.338Z"/><path class="cls-35" d="M146.71142,39.89043a5.62425,5.62425,0,0,1-.39789,1.23567,17.12,17.12,0,0,1-1.91484,2.54432,39.62619,39.62619,0,0,1-3.11974,3.44832,17.31867,17.31867,0,0,1-1.86945,1.5957c-.75335.55355-1.45456,1.17413-2.21214,1.72654a15.55454,15.55454,0,0,1-7.331,2.87819c-1.11816.14288-2.23274.3243-3.34217.53385a22.11521,22.11521,0,0,1-2.31921.23237,1.41975,1.41975,0,0,1-.60679-.032c-.12589-.24912-.05988-.39248.23-.45628.16925-.03725.3517-.02792.47222-.185.83931-.17726,1.69609-.23553,2.54226-.36864,1.64625-.259,3.29263-.512,4.92977-.82969a13.60078,13.60078,0,0,0,5.50948-2.60931,36.83694,36.83694,0,0,0,5.06454-4.53631,44.52769,44.52769,0,0,0,3.94646-4.91287c.10151-.146.1616-.36451.41324-.33072.00522.0007.011.01817.01146.02807A.17125.17125,0,0,1,146.71142,39.89043Z"/><path class="cls-36" d="M146.71142,39.89043c-.18891-.06421-.193.11189-.25548.20266-.72443,1.05256-1.48348,2.08223-2.29812,3.06373a44.01132,44.01132,0,0,1-3.2085,3.46409,37.719,37.719,0,0,1-4.27118,3.54794,13.89874,13.89874,0,0,1-3.36086,1.75054,16.50294,16.50294,0,0,1-3.04993.67883c-1.59613.25752-3.19195.51717-4.79022.76075-.38968.05939-.78837.0598-1.18291.08733a1.78043,1.78043,0,0,1-1.07323.16621c-.9369-.12685-1.8812-.13657-2.82156-.20658-.30724-.02288-.64415.0014-.80879-.3552a1.052,1.052,0,0,1,.78139-.08607,6.04642,6.04642,0,0,0,1.607-.00331,6.6506,6.6506,0,0,1,.99777-.01689,12.97032,12.97032,0,0,0,2.39592-.19133,30.24977,30.24977,0,0,0,3.05332-.32095c1.32039-.20644,2.64177-.40646,3.95347-.66983a9.86574,9.86574,0,0,0,2.52968-.98306,17.435,17.435,0,0,0,3.46411-2.38915c.859-.7442,1.73367-1.47169,2.54793-2.27147a46.53757,46.53757,0,0,0,5.26562-6.31247,5.98462,5.98462,0,0,1,.90778-1.22881A5.6038,5.6038,0,0,1,146.71142,39.89043Z"/><path class="cls-37" d="M73.06682,48.74368c.12777-.05487.129-.05615.24925.06265A3.766,3.766,0,0,0,74.70423,49.932c.56419.17616,1.08088.45455,1.63674.63843a1.34977,1.34977,0,0,1,.46082.266A.60482.60482,0,0,0,77.46216,51c.33852-.11991.5586.19626.84189.28974a1.02782,1.02782,0,0,1,.39369.22921.91308.91308,0,0,0,.73878.24089.3063.3063,0,0,1,.33132.14624c-.03541.20028-.086.39938-.10179.60119a.44518.44518,0,0,1-.24954.3909.49976.49976,0,0,0-.23236.78826,1.10956,1.10956,0,0,1,.04414.4532,1.7619,1.7619,0,0,1-1.4494-.44078c-.29142-.279-.76047-.1647-1.115-.364a2.52819,2.52819,0,0,1-.46767-.23529c-.066-.05618-.21608-.22265-.27788.03177-.91231-1.17223-1.68885-2.43627-2.4861-3.686C73.291,49.22393,73.18767,48.97821,73.06682,48.74368Z"/><path class="cls-38" d="M133.0008,60.07318a22.18137,22.18137,0,0,1-1.84216,1.54044c-.80875.634-1.64837,1.22859-2.47468,1.84017a2.47794,2.47794,0,0,0-1.65044.05836,1.47462,1.47462,0,0,1-.90652.01113c-.21637-.145-.02982-.44891-.23933-.60956-.04163-.03192.04051-.14807.11689-.16817.31782-.08363.43965-.37944.6381-.58749.21533-.22575.15478-.37542-.162-.44146-.1873-.03906-.37688-.0718-.56806-.0931-.09621-.01072-.21273-.00164-.24678-.13464a3.02321,3.02321,0,0,1,1.40876-.42224c.356-.047.70578-.122,1.05815-.18582a1.1234,1.1234,0,0,0,.61687-.28547c.21412-.21081.52-.1992.77194-.319a6.65855,6.65855,0,0,1,2.84139-.5332C132.60138,59.75169,132.92676,59.69987,133.0008,60.07318Z"/><path class="cls-39" d="M76.84062,9.95466A7.32113,7.32113,0,0,1,78.45584,9.076c.32112.55329.88748.45965,1.38938.51a2.798,2.798,0,0,1,.86.16609c.16724.07281.33106.16238.35718.36606.02442.19044.12661.22815.29272.19315a.64622.64622,0,0,1,.45065.02154,2.98093,2.98093,0,0,0,1.37788.26788,24.24153,24.24153,0,0,1,2.64759.41875.16754.16754,0,0,1,.11465.09417.46414.46414,0,0,1-.5294.43478.63386.63386,0,0,0-.36349.10758.62224.62224,0,0,1-.3357.05594,17.78213,17.78213,0,0,0-3.66207.09591,8.46876,8.46876,0,0,1-2.86041-.18685.7767.7767,0,0,1-.47135-.24455c-.28869-.30936-.56779-.62768-.84413-.948C76.75989,10.29,76.66251,10.12778,76.84062,9.95466Z"/><path class="cls-40" d="M141.07493,51.675a14.6887,14.6887,0,0,1-1.21722,1.69933,17.97155,17.97155,0,0,1-4.84748,2.76691,19.321,19.321,0,0,1-3.50809.97452,23.71784,23.71784,0,0,0-3.33849.87583c-.9746.14521-1.94854.29333-2.934.34425a3.75043,3.75043,0,0,0-.79123.04561,1.98722,1.98722,0,0,1-1.37565-.2951c.00829-.234.20512-.18908.33677-.21053.84584-.1379,1.67719-.358,2.53124-.44674a27.5192,27.5192,0,0,0,3.62773-.67071q1.06575-.26166,2.14782-.44093a15.01447,15.01447,0,0,0,4.78224-1.84444c1.441-.79541,2.76937-1.7586,4.14877-2.64567C140.76722,51.74378,140.87633,51.5722,141.07493,51.675Z"/><path class="cls-41" d="M141.07493,51.675c-.63763.421-1.28635.82631-1.91033,1.26665-.97214.686-2.01444,1.25129-3.04466,1.83991a13.37105,13.37105,0,0,1-3.60738,1.47512c-1.05434.24432-2.13166.38881-3.18154.65844-.96429.24764-1.944.40839-2.92465.56923a2.90923,2.90923,0,0,1-.41738.044,2.90134,2.90134,0,0,0-.90241-.01459c-.5548.10944-1.09671-.07036-1.64414-.00456a.36131.36131,0,0,1-.31066-.12389c-.01023-.146.10439-.16312.20129-.17874,1.31285-.21159,2.62942-.398,3.9468-.57554,1.71825-.41676,3.47156-.66414,5.19532-1.0502a14.52909,14.52909,0,0,0,4.44409-1.97872,21.16168,21.16168,0,0,0,2.86284-2.07226c.64067-.56436,1.436-.93638,2.06969-1.52368.13652-.12652.15555-.106.31751-.02C141.83541,50.56908,141.465,51.12841,141.07493,51.675Z"/><path class="cls-42" d="M126.60528,53.7546c.757-.17373,1.52644-.27337,2.29379-.38534a17.11263,17.11263,0,0,0,6.50111-1.901,31.98047,31.98047,0,0,0,3.53466-2.49569,30.93388,30.93388,0,0,0,3.17644-2.83051c.95035-1.00054,1.83791-2.05649,2.698-3.13542q.75056-.94151,1.50423-1.88053a10.71143,10.71143,0,0,1-.60427,1.68955,40.27266,40.27266,0,0,1-4.31059,4.79408,25.00917,25.00917,0,0,1-2.29128,1.92462,31.55283,31.55283,0,0,1-3.58429,2.52044,11.79782,11.79782,0,0,1-3.62138,1.363c-1.62684.29967-3.2553.59215-4.90392.75109a.58594.58594,0,0,1-.22937-.00574A.43289.43289,0,0,1,126.60528,53.7546Z"/><path class="cls-43" d="M92.55579,8.23593c.3514.30749.81362.26251,1.22516.37434a4.14415,4.14415,0,0,1,.54648.16493,1.13547,1.13547,0,0,0,.67417.467,4.10576,4.10576,0,0,1,.8014.35541c.14833.0787.30155.16292.28168.36625a.37414.37414,0,0,1-.32439.3288.70788.70788,0,0,1-.36647-.09755,9.82322,9.82322,0,0,0-3.44416-.871,12.22285,12.22285,0,0,1-4.23395-.85951A5.34745,5.34745,0,0,1,85.86011,7.405c-.17144-.17764-.25932-.3247.04027-.44982a6.13431,6.13431,0,0,0,1.13208-.0215,4.40877,4.40877,0,0,1,1.136.0828,2.05081,2.05081,0,0,1,.80356.17186,18.73535,18.73535,0,0,0,2.87532.79517A1.2075,1.2075,0,0,1,92.55579,8.23593Z"/><path class="cls-44" d="M144.7068,45.20157a12.03765,12.03765,0,0,1-.69357,1.46238,22.80941,22.80941,0,0,1-3.54025,3.39856,29.149,29.149,0,0,1-5.34378,3.61825,11.91127,11.91127,0,0,1-3.23372,1.09683c-.68341.11486-1.35514.29058-2.03882.40549a.97418.97418,0,0,1-.3824.01524,8.955,8.955,0,0,0-2.12634.13872c-.25086.02749-.50246.08453-.75478.11734-.1449.01884-.314.0502-.39-.14285a.29268.29268,0,0,1,.2415-.1675c.97748-.11679,1.89892-.50074,2.8789-.60213,1.11659-.28738,2.27178-.38867,3.3824-.71362a13.98577,13.98577,0,0,0,3.05319-1.33767c1.19112-.6858,2.25446-1.5579,3.38862-2.32155a32.03228,32.03228,0,0,0,3.33022-2.8215,19.66387,19.66387,0,0,0,1.746-1.88388c.12724-.14783.229-.34748.47563-.3271.00528.00044.0122.01746.013.02716A.16015.16015,0,0,1,144.7068,45.20157Z"/><path class="cls-45" d="M144.7068,45.20157c-.20664-.03007-.27951.15451-.364.267a21.02991,21.02991,0,0,1-1.70328,1.86308,19.08609,19.08609,0,0,1-2.07168,1.86875c-.00993.00769-.02463.00952-.034.01769a39.94234,39.94234,0,0,1-3.20127,2.389,18.34558,18.34558,0,0,1-3.29555,1.85242,16.49658,16.49658,0,0,1-3.83693.98333,2.3663,2.3663,0,0,1-.82156.15878c-1.05723.08336-2.09572.31145-3.15129.40764a.905.905,0,0,1-.37966-.02643c-.0963-.19153-.05769-.28658.19754-.30146a8.4733,8.4733,0,0,0,1.3596-.25841c1.3897-.31148,2.78973-.57042,4.19151-.81833a12.17778,12.17778,0,0,0,3.18-1.13142,20.47787,20.47787,0,0,0,3.62179-2.32363,37.13751,37.13751,0,0,0,4.1256-3.56256q1.34126-1.40472,2.5856-2.89973c.09388-.11328.16049-.275.35462-.25048A16.013,16.013,0,0,1,144.7068,45.20157Z"/><path class="cls-46" d="M85.93075,11.16261a18.72282,18.72282,0,0,0-2.88592-.45961,2.36436,2.36436,0,0,1-1.28918-.289c-.17518-.11107-.34005.01148-.51042.03645-.15641.02292-.38161.08615-.27681-.222.06227-.18306-.041-.25548-.177-.32573a1.95167,1.95167,0,0,0-.81022-.20524c-.35648-.01855-.71294-.04413-1.0681-.07981-.31912-.032-.39168-.28752-.45725-.54169a8.19984,8.19984,0,0,1,1.85644-.81651,8.04727,8.04727,0,0,1,2.60071.90068,2.91058,2.91058,0,0,0,.94894.29773,1.76954,1.76954,0,0,1,.88622.34571.97662.97662,0,0,0,.41472.19432,15.54676,15.54676,0,0,1,1.58863.569,2.038,2.038,0,0,0,.73813.44825c.1.04153.34255.08015.128.28823-.47049-.00175-.9399-.03307-1.41013-.03428A.34772.34772,0,0,1,85.93075,11.16261Z"/><path class="cls-47" d="M76.53205,47.13073c-.49932.09393-.99609.20579-1.49858.2775a2.34143,2.34143,0,0,1-1.79976-.689c-.527-.41573-1.04917-.83761-1.57027-1.26073-.17933-.14561-.21545-.059-.21069.11581a15.47856,15.47856,0,0,1-1.08064-2.534.14208.14208,0,0,1-.00594-.20483c.07372-.06332.15028-.00037.19439.059a10.83823,10.83823,0,0,0,2.741,2.16462,1.584,1.584,0,0,0,1.59372.22146c.47136-.07154.92776.1396,1.40014.07278a.2044.2044,0,0,1,.18891.11168,2.9577,2.9577,0,0,0,.22439,1.07129A.43626.43626,0,0,1,76.53205,47.13073Z"/><path class="cls-48" d="M69.62251,41.11829c-.29757-.90836-.58652-1.81909-.82277-2.74612-.02885-.11323-.02216-.22421-.04657-.33392-.077-.11688-.01922-.16609.09447-.169a.498.498,0,0,1,.35673.11974c.55676.53132,1.27206.85366,1.82331,1.39091a5.30539,5.30539,0,0,0,1.66264,1.83154.703.703,0,0,1,.20188.2252c.27327.52009.50674,1.06.79606,1.57232.07654.13552.19529.2856.06.458-.2391.10473-.46677-.01817-.69978-.03419a12.79536,12.79536,0,0,1-3.2716-2.20422A.59511.59511,0,0,0,69.62251,41.11829Z"/><path class="cls-49" d="M85.8535,7.01828c-.194.11714-.05906.20144.03173.28353a5.88283,5.88283,0,0,0,2.20553,1.16977,11.61449,11.61449,0,0,0,1.90991.54607c.66723.096,1.34218.16524,2.01.20055a9.8531,9.8531,0,0,1,3.3912.86379c.12843.0551.25931.1045.389.15654a7.77668,7.77668,0,0,1,.8994.49167c.12322.07693.27772.14516.27082.33482a.23229.23229,0,0,1-.31054.06715,12.43885,12.43885,0,0,0-2.61211-.729,16.22877,16.22877,0,0,1-1.696-.27034,8.3362,8.3362,0,0,1-.98108-.16494A23.497,23.497,0,0,1,87.54108,9.214a8.72176,8.72176,0,0,1-.97631-.33323c-.29665-.14827-.59382-.29628-.90345-.41739a.73018.73018,0,0,1-.30641-.15247,2.61655,2.61655,0,0,0-1.405-.70734c-.13539-.04069-.30738-.07784-.32587-.275l.30364-.09581a.17959.17959,0,0,1,.23094-.01089l1.61811-.228A.05009.05009,0,0,1,85.8535,7.01828Z"/><path class="cls-50" d="M145.46387,43.43678q-.82291.932-1.64623,1.8636a23.66334,23.66334,0,0,1-2.122,2.21027c-.57785.50217-1.0939,1.08007-1.71642,1.53063-1.2882.93235-2.47142,2.00467-3.85412,2.81291a22.02235,22.02235,0,0,1-3.25867,1.53236,12.9026,12.9026,0,0,1-2.3098.51434c-1.31516.24191-2.63163.4782-3.926.81525-.28992.07549-.63167-.08607-.87275.19315a.32521.32521,0,0,1-.23948.1062,24.0001,24.0001,0,0,1-3.25875.0623c-.57227-.10007-1.1603-.06523-1.729-.19968-.1572-.03717-.336-.02541-.41435-.21314.058-.17506.21458-.16832.34981-.173a6.34718,6.34718,0,0,0,1.71708-.14978,1.14859,1.14859,0,0,1,.46-.00718,14.79479,14.79479,0,0,0,3.67221-.23417c.15125-.02046.30433-.0705.444.03862.5277-.077,1.05622-.14891,1.583-.232a21.09637,21.09637,0,0,0,6.47675-1.57662,20.47848,20.47848,0,0,0,3.06779-1.95888,37.5806,37.5806,0,0,0,5.08925-4.4764q1.33371-1.45449,2.574-2.99022c.04005-.04961.045-.16884.15916-.0897Z"/><path class="cls-51" d="M128.223,57.91323a.27923.27923,0,0,1,.20482-.15375c.97626-.24707,1.94-.567,2.92982-.73064a21.82817,21.82817,0,0,0,2.998-.76231,17.84664,17.84664,0,0,0,3.69676-1.7509,16.03384,16.03384,0,0,0,1.52132-1.03026c.06929-.05254.14191-.20344.284-.11107a14.006,14.006,0,0,1-2.23464,2.46314,18.92335,18.92335,0,0,1-2.61966,1.27625,12.91124,12.91124,0,0,1-2.58585.72908,8.66635,8.66635,0,0,0-2.82568.3551,2.33616,2.33616,0,0,1-.78408.13664C128.64611,58.14863,128.31793,58.19258,128.223,57.91323Z"/><path class="cls-52" d="M76.84062,9.95466c-.00578.07387-.04623.18209-.01215.21645.52192.52629.80344,1.33772,1.70438,1.41809.46843.04179.93167.14189,1.4001.18379a3.11634,3.11634,0,0,0,1.06734-.07093,1.26809,1.26809,0,0,0,.69464.18669,11.968,11.968,0,0,1,2.74294.25893,2.1025,2.1025,0,0,1,1.21477.47241c-.046.19111-.20029.15736-.33763.16573-.59515.03624-1.193.026-1.78583.10327a23.1,23.1,0,0,0-2.46856.20258,1.44,1.44,0,0,0-.53292-.05205,4.7112,4.7112,0,0,1-2.10174-.34625,1.3957,1.3957,0,0,0-.56188-.11292.79459.79459,0,0,1-.80516-.40913,1.49917,1.49917,0,0,0-.50093-.469,2.04639,2.04639,0,0,1-.6763-.91559.19036.19036,0,0,1,.03477-.21495Z"/><path class="cls-53" d="M142.16932,49.98612c-.27818-.0201-.4137.20765-.57193.3618-.45439.44267-1.05407.67657-1.52588,1.08192a24.3938,24.3938,0,0,1-2.89542,2.12738,15.74783,15.74783,0,0,1-6.34216,2.45218,23.74453,23.74453,0,0,0-3.24567.66308c-.06611.01856-.1393.08235-.21263.00863-.14929-.07423-.383-.0353-.39471-.29425a.27274.27274,0,0,1,.19279-.11276c1.14616-.18777,2.22435-.64955,3.37073-.83467a3.19761,3.19761,0,0,0,.48037-.12268,16.32107,16.32107,0,0,0,2.78836-.70458,20.02321,20.02321,0,0,0,4.32856-2.39047,45.74269,45.74269,0,0,0,4.24651-3.48188,3.421,3.421,0,0,1,.45585-.35232c.077-.0494.20494-.16739.24491.04895A12.65224,12.65224,0,0,1,142.16932,49.98612Z"/><path class="cls-54" d="M143.089,48.43645c-.06662-.08769-.128-.04877-.19134.006-.56908.492-1.14169.97988-1.70742,1.47565a30.68639,30.68639,0,0,1-5.12458,3.73353,14.64976,14.64976,0,0,1-3.41784,1.43478,9.08739,9.08739,0,0,1-1.57449.2854c-.89241.19554-1.81121.17949-2.70869.33628a.51225.51225,0,0,1-.33264-.05711c-.13981-.24544.0862-.2754.21489-.32715a2.85272,2.85272,0,0,1,1.28574-.18308,28.75483,28.75483,0,0,0,4.34561-1.01719,19.65521,19.65521,0,0,0,4.51447-2.57777,38.35238,38.35238,0,0,0,5.21469-4.49528c.12662-.13228.17188-.36431.40583-.38653A15.04484,15.04484,0,0,1,143.089,48.43645Z"/><path class="cls-55" d="M126.066,63.45861a4.14282,4.14282,0,0,0,1.3084-.16339,1.23058,1.23058,0,0,1,1.30953.15857c-1.51566,1.12835-3.08655,2.17476-4.69633,3.16344a2.77072,2.77072,0,0,1,.88825-1.371.18958.18958,0,0,0,.12559-.20533,2.41863,2.41863,0,0,1-1.78575-.0417,4.06841,4.06841,0,0,1,1.23648-1.70644c.08371-.06255.18856-.14282.27775-.11135C125.164,63.33458,125.63673,63.29205,126.066,63.45861Z"/><path class="cls-56" d="M133.0008,60.07318a1.537,1.537,0,0,0-1.33909-.21262,6.84642,6.84642,0,0,0-2.12908.51747,11.46608,11.46608,0,0,1-1.646.25037,2.07649,2.07649,0,0,1-1.08631-.11323c-.08906-.28041-.03135-.392.33705-.456a.779.779,0,0,0,.6687-.49072.9781.9781,0,0,1,.60051-.21184,6.6471,6.6471,0,0,0,1.55531-.36873,13.06129,13.06129,0,0,1,1.41676-.30239,9.73651,9.73651,0,0,0,3.55343-.71005c.12366-.05024.29549-.13849.37479.08534A19.3589,19.3589,0,0,1,133.0008,60.07318Z"/><path class="cls-57" d="M86.70108,10.62358a11.43744,11.43744,0,0,1-2.21427-.87118.78.78,0,0,0-.31818-.12567,7.48264,7.48264,0,0,1-2.34912-.88094,6.228,6.228,0,0,0-1.24873-.34763c-.10307-.02558-.2002-.03959-.2585-.13866a6.48677,6.48677,0,0,1,1.83979-.57109.21574.21574,0,0,1,.07384.018,14.4358,14.4358,0,0,0,3.01022,1.05571.81445.81445,0,0,1,.20439.10211,1.72093,1.72093,0,0,0,1.14668.63246c.83474.20353,1.61643.57557,2.45914.75119.12734.02654.29195.04781.289.24568a.40237.40237,0,0,1-.411.22512C88.18318,10.68994,87.44165,10.66765,86.70108,10.62358Z"/><path class="cls-58" d="M73.29507,12.77577a4.25045,4.25045,0,0,1,.92627-.84184.45963.45963,0,0,1,.22237.29691,2.27059,2.27059,0,0,0,1.67275,1.66008,1.311,1.311,0,0,1,.40961.20267.65248.65248,0,0,0,.47165.12134c.415-.07469.84089-.0079,1.25269-.10888a4.8266,4.8266,0,0,1,.71719.07554.876.876,0,0,1,.324.27249c.15742.26849.03855.42976-.227.46751-.79619.11317-1.57823.30664-2.37605.40672a1.179,1.179,0,0,0-.54371.16146c-.28257.18981-.59455.06921-.89577.055a.72822.72822,0,0,1-.52224-.408.82848.82848,0,0,0-.18378-.243A10.59352,10.59352,0,0,1,73.32124,13.057C73.26367,12.97324,73.21605,12.8775,73.29507,12.77577Z"/><path class="cls-59" d="M67.76878,23.25483A8.85088,8.85088,0,0,1,68.28347,21.25c.32532-.145.62136-.41194,1.02179-.246a1.38354,1.38354,0,0,1,.64159.7806c.06509.24787.28463.38721.473.54044.16011.13027.33016.25107.33474.48731a5.069,5.069,0,0,0-.24709.95839,3.319,3.319,0,0,1-.43115.68805c-.3033.22616-.66432.15239-1.00364.19324a.99763.99763,0,0,1-.659-.51533C68.226,23.82726,67.97967,23.55223,67.76878,23.25483Z"/><path class="cls-60" d="M71.061,15.47131A11.35678,11.35678,0,0,1,72.446,13.697c.03789.00713.08457.01418.1027.04459a9.719,9.719,0,0,1,1.29892,2.26854,1.44679,1.44679,0,0,0,.17974.648c.08595.17275.10738.33913-.09271.45715a1.33143,1.33143,0,0,0-1.43423.41976c-.10335.09006-.219.18851-.38.12223a15.495,15.495,0,0,1-1.05793-1.82778A.30317.30317,0,0,1,71.061,15.47131Z"/><path class="cls-61" d="M69.62251,41.11829c.077-.0509.13289-.02427.20035.03252.44525.37487.89567.74361,1.34319,1.11579a10.934,10.934,0,0,0,1.25.72159,2.88841,2.88841,0,0,1,.57257.3686c.22945.0996.30522.33344.44077.513.1994.26415.38734.537.5837.80374a1.06271,1.06271,0,0,0,.60731.49112.27369.27369,0,0,1,.21726.195,1.29847,1.29847,0,0,1-1.43721-.12357,20.03056,20.03056,0,0,1-2.45186-1.73,1.35316,1.35316,0,0,1-.42726-.53187c-.01852-.04646-.044-.14255-.12735-.07774-.02779.0216-.01572.09445-.02186.14387a3.54168,3.54168,0,0,1-.37091-.88245A10.46189,10.46189,0,0,1,69.62251,41.11829Z"/><path class="cls-62" d="M67.3514,26.87892l.0205-.908c.07905-.17914-.00849-.37519.05645-.55576l.02644-.46538a.66219.66219,0,0,1,.65677.20617,1.1139,1.1139,0,0,0,.58305.26477c.87917.37166,1.05494,1.159,1.17134,1.98183a1.25693,1.25693,0,0,1-.84445.60742,6.78435,6.78435,0,0,1-1.43737.07753c-.09564-.0135-.2098.02255-.255-.1083A9.68465,9.68465,0,0,1,67.3514,26.87892Z"/><path class="cls-63" d="M135.30686,58.06082c-.13563-.15016-.27191-.02087-.383.02375a9.72665,9.72665,0,0,1-2.19435.61408,12.58469,12.58469,0,0,1-1.348.062.96005.96005,0,0,1-.08319-.4087c-.0278-.25815.09827-.39038.34334-.47158.26963-.08934.56011.01021.81834-.121a16.94853,16.94853,0,0,0,2.48847-.73624,14.72051,14.72051,0,0,0,2.40988-1.1681c.071-.04892.16845-.1487.26475-.0176A20.80478,20.80478,0,0,1,135.30686,58.06082Z"/><path class="cls-64" d="M75.91646,10.57176A1.81222,1.81222,0,0,0,76.72,11.67819c.27183.13271.37913.40572.56323.61243.06842.07683.11461.18861.23038.17419a4.05174,4.05174,0,0,1,1.44429.29761,3.96385,3.96385,0,0,0,1.68417.177.3414.3414,0,0,1,.35821.07175.35091.35091,0,0,1-.28537.16744,27.69242,27.69242,0,0,1-3.368.33022,3.31468,3.31468,0,0,1-.34244-.01575.56436.56436,0,0,1-.3163-.124,8.44389,8.44389,0,0,1-1.59781-1.62379c-.09079-.14424-.23532-.28819-.09841-.48338A5.11209,5.11209,0,0,1,75.91646,10.57176Z"/><path class="cls-65" d="M68.3117,36.34338l-.4514-2.46718c.033-.11586.13494-.15017.20744-.0886.4184.35533.99491.41207,1.41453.76069a2.60322,2.60322,0,0,1,.34975.84c.1653.53468.60371.90469.7818,1.42247a1.01492,1.01492,0,0,1-.041.73373.86537.86537,0,0,1-.90823-.20032C69.23692,36.97468,68.77048,36.66609,68.3117,36.34338Z"/><path class="cls-66" d="M67.52542,31.324l-.01965-.37093a1.71537,1.71537,0,0,1-.024-.43734A2.05062,2.05062,0,0,1,67.573,29.654c.08827-.17765.17809-.28411.40656-.24315a3.17643,3.17643,0,0,1,.93314.152,1.26254,1.26254,0,0,1,.4527.64721,2.46593,2.46593,0,0,0,.10606,1.32028c.10474.34436-.0014.71007.10707,1.05556a.15053.15053,0,0,1-.08157.15988,2.61511,2.61511,0,0,1-1.91017-1.14914C67.53573,31.51267,67.58246,31.40669,67.52542,31.324Z"/><path class="cls-67" d="M128.7694,86.95128c-.00928.14011-.02668.28023-.0267.42034q-.002,12.51152-.011,25.023c-.0006.38327.10488.45875.46557.4513,1.18032-.0244,2.36154-.01658,3.54221-.00335.25644.00288.34767-.04581.3474-.32848q-.01219-12.66547-.00735-25.331c0-.0766-.01056-.15319-.01619-.22979.14675.10314.0877.25794.08775.39032q.00417,12.57035.00993,25.14067c.00038.34179-.09261.43486-.43145.42909q-1.79012-.03052-3.581.00061c-.36751.007-.47339-.09245-.47242-.46659q.01876-7.238.00828-14.47609,0-5.29378.003-10.58757C128.68762,87.23863,128.6228,87.07222,128.7694,86.95128Z"/><path class="cls-68" d="M68.3117,36.34338c.27408-.0402.43228.17691.6096.30975a8.71552,8.71552,0,0,1,.83673.65369c.17865.171.505.18774.76526.27343a.15064.15064,0,0,1,.17552.03153c.38727.348.749.72351,1.14673,1.0605a.19812.19812,0,0,1,.07043.239,1.74465,1.74465,0,0,0-.1118.15408c-.23018.42963-.33583.47654-.81851.3636-.55913-.48185-1.24075-.79879-1.77165-1.32345-.0954-.09428-.27337-.29549-.46084-.0673A12.50431,12.50431,0,0,1,68.3117,36.34338Z"/><path class="cls-69" d="M74.992,11.26191A2.80759,2.80759,0,0,0,76.13715,12.745c.2767.20389.42261.558.78027.65137.08316.05784.185.09918.21772.20649.06041.19813.21056.232.39034.2341a.85577.85577,0,0,1,.70154.33009c-.6531.08321-1.31764.36843-1.93911-.1126a.29249.29249,0,0,0-.14235-.05085,2.35345,2.35345,0,0,1-1.55337-1.12737c-.21966-.27658-.20642-.64429-.37085-.94231A3.28557,3.28557,0,0,1,74.992,11.26191Z"/><path class="cls-70" d="M73.759,16.015c-.14564-.70105-.70022-1.17622-.99459-1.7959A5.62028,5.62028,0,0,0,72.446,13.697a5.926,5.926,0,0,1,.84905-.92122,9.51589,9.51589,0,0,0,1.32929,2.05847c.20734.20741.26382.555.59864.64164a.435.435,0,0,1,.09767.45765,5.22844,5.22844,0,0,0-.67944.19388C74.357,16.24844,74.06007,16.02343,73.759,16.015Z"/><path class="cls-71" d="M67.60117,31.57294c.01265.00147.032-.00185.037.00511a3.84853,3.84853,0,0,0,1.807,1.14984c.21464.10589.22583.33.28685.5176a4.18853,4.18853,0,0,1,.241.92345c-.08858.24893-.22019.44283-.52821.40812-.45836-.26716-1.0229-.32993-1.41082-.73592-.04873-.051-.119.00366-.17372.03507-.118-.71422-.22132-1.43033-.27658-2.15261A.1116.1116,0,0,1,67.60117,31.57294Z"/><path class="cls-72" d="M92.55579,8.23593a18.867,18.867,0,0,1-3.95548-1.097c-.14323-.0621-.31167-.00312-.43185-.12247l.16082-.04246a3.78373,3.78373,0,0,1,.75609.01592l.3746.01852c.12347.07653.26983-.00106.39578.05874.97491.155,1.95709.26575,2.92221.4803.09573.0552.24293-.05721.30893.09482a15.14264,15.14264,0,0,1,1.70489.531c-.07123.388-.374.21746-.55717.18827-.4485-.07147-.89177-.17635-1.34375-.23743A.33717.33717,0,0,0,92.55579,8.23593Z"/><path class="cls-73" d="M71.061,15.47131a1.20379,1.20379,0,0,0,.2398.5949c.28591.51889.561,1.04374.8404,1.56623.1925.262.35529.5277.10808.84574-.45551-.06694-.88708-.25231-1.35192-.27683a3.08271,3.08271,0,0,1-.71293-.941.50568.50568,0,0,1,.03-.47772A8.37128,8.37128,0,0,1,71.061,15.47131Z"/><path class="cls-67" d="M164.46326,94.43542c-.04432.05941-.11112.092-.147.01611a.59628.59628,0,0,1-.01482-.22767c-.01434-.66011-.0142-.66012-.6613-.66012-1.12887,0-2.25781.00685-3.38656-.00554-.23583-.00258-.29944.0585-.29917.29765q.01035,9.34962-.00065,18.69925c-.00032.25522.09144.28774.31.28613,1.23143-.009,2.46315-.01608,3.69433.004.307.005.34953-.10016.34888-.37093q-.01282-5.38663-.0036-10.77331a.84848.84848,0,0,1,.04124-.452q.00438,5.677.01279,11.35421c.00054.23991-.08691.30733-.31545.306-1.28322-.00773-2.56664-.01357-3.8497.0026-.35885.00453-.30783-.21143-.30782-.42784q.00027-4.73425-.00013-9.46851c0-3.02788.00675-6.05578-.00823-9.08358-.00181-.36487.111-.449.45594-.44346q1.80894.0292,3.61858.00051c.321-.00468.43339.08949.411.41093C164.3493,94.076,164.26863,94.28905,164.46326,94.43542Z"/><path class="cls-74" d="M85.39131,8.92912a9.46466,9.46466,0,0,0-1.60971-.46668,4.19062,4.19062,0,0,1-1.62953-.774A5.82331,5.82331,0,0,1,83.624,7.32859a.88789.88789,0,0,0,.2637.149c1.02037.16108,1.71262.98981,2.65915,1.29751-.03457.3169-.26716.2455-.45287.21125A1.40021,1.40021,0,0,0,85.39131,8.92912Z"/><path class="cls-75" d="M68.90592,29.64728c-.32724-.166-.70285-.02548-1.03538-.16412-.13285-.05539-.14441.06965-.17891.14219a1.81476,1.81476,0,0,0-.18362.89067.04856.04856,0,0,1-.05992-.03733l-.01951-.45c-.0652-.18083.02207-.37712-.05645-.55659l-.0205-.90669a.93226.93226,0,0,1,.01871-.53561c.56286-.03042,1.1239-.10075,1.68923-.0769a.46509.46509,0,0,1,.16022.47274A3.49691,3.49691,0,0,1,68.90592,29.64728Z"/><path class="cls-76" d="M69.29082,21.09765a.4402.4402,0,0,0-.5016.01883.75968.75968,0,0,1-.50575.13351,14.60789,14.60789,0,0,1,.79053-2.21337c.0772-.186.15648-.37106.23481-.55656.1732-.10042.26454.038.34924.13741a5.26256,5.26256,0,0,1,.76116,1.27061c-.05633.36962-.37928.44735-.64875.51637-.28767.07369-.42.19184-.39068.48766A.24574.24574,0,0,1,69.29082,21.09765Z"/><path class="cls-23" d="M70.36945,19.86586c-.23146-.3602-.46141-.72138-.69514-1.0801a.54869.54869,0,0,0-.36552-.3057,17.32791,17.32791,0,0,1,.90564-1.6974c-.0787.43334.24147.69649.435,1.01265.0794.12969.17251.251.25938.37613.00916.48039.14334.95.12435,1.433A.80118.80118,0,0,1,70.36945,19.86586Z"/><path class="cls-67" d="M34.63653,86.95277c-.00687.14054-.01973.28109-.01975.42164q-.00144,12.50859-.01034,25.01718c-.00055.37548.0918.46315.4598.45488,1.16713-.02627,2.3355-.02395,3.50275-.00071.3342.00665.41439-.09655.39121-.407a1.2725,1.2725,0,0,1,.04269-.672.04674.04674,0,0,1,.03562.00652.37674.37674,0,0,1,.038.05725,1.63217,1.63217,0,0,0-.05443.75391c-.00359.21661-.04738.32712-.29792.32531-1.29548-.00938-2.59107-.00758-3.88657-.00117-.21348.00106-.31232-.06961-.2911-.2882.00739-.07622.001-.15378.001-.23073q0-12.48455.00352-24.96912C34.55111,87.26433,34.47637,87.08386,34.63653,86.95277Z"/><path class="cls-77" d="M68.67462,25.48821a.5946.5946,0,0,1-.57647-.22418,1.4173,1.4173,0,0,0-.64337-.31429c.17693-.55158.17005-1.13721.314-1.69491.39349.13231.5242.52965.71969.81871a1.22841,1.22841,0,0,0,.57152.49075l.02128.02922C68.89316,24.868,68.85718,25.21151,68.67462,25.48821Z"/><path class="cls-67" d="M177.22583,102.5521a1.79587,1.79587,0,0,1,.06058.72045c.00315,3.04846.00956,6.09694-.00762,9.1453-.00207.36752.11249.43365.44558.42644,1.21592-.02631,2.43248-.02357,3.64879-.03177-.07453.12847-.20111.09144-.311.09163-1.16753.00215-2.33509-.003-3.50257.005-.23243.00159-.348-.04219-.34715-.31354Q177.228,107.57389,177.22583,102.5521Z"/><path class="cls-67" d="M39.0672,94.56872c-.10942.11769-.11257.01719-.11348-.05939-.00323-.26857-.00145-.53718-.00145-.80579q0-3.14653-.001-6.29306c-.00011-.15276-.01458-.3055-.02237-.45825.15108.11868.08429.28588.08457.43047q.00663,3.38709.00493,6.7742A.66221.66221,0,0,0,39.0672,94.56872Z"/><path class="cls-67" d="M110.80912,119.22141c-.02047.14383.06162.16559.18093.16491q2.25971-.0131,4.51942-.0215c-.07912.1212-.204.08593-.31417.08607-1.38145.00189-2.76291.00348-4.14433-.00248C110.92411,119.44786,110.66086,119.53811,110.80912,119.22141Z"/><path class="cls-67" d="M83.85417,112.81517c1.46011.02565,2.92025.05633,4.38-.01616-.062.14254-.19115.10494-.30007.10512q-1.9029.00318-3.80578.00071C84.0286,112.90477,83.91883,112.92636,83.85417,112.81517Z"/><path class="cls-67" d="M75.69107,112.78575a.73742.73742,0,0,0,.18212.0474q2.10029-.00345,4.20058-.013c-.08116.11919-.20614.08393-.31684.0841q-1.868.003-3.736-.00073C75.90187,112.90322,75.75452,112.95374,75.69107,112.78575Z"/><path class="cls-67" d="M80.07392,93.58078q-2.10051-.00788-4.201-.01359a.72057.72057,0,0,0-.18194.04848c.04132-.13017.15081-.11919.25267-.11922q1.96436-.00063,3.92869-.00005A.21032.21032,0,0,1,80.07392,93.58078Z"/><path class="cls-67" d="M115.73519,71.23472l1.38995-.70672A3.1534,3.1534,0,0,1,115.73519,71.23472Z"/><path class="cls-67" d="M67.37034,28.02985l-.0187.53562a4.58512,4.58512,0,0,1-.00024-1.68656Z"/><path class="cls-78" d="M85.8535,7.01828l-.07681-.02435c.01324-.08648.05893-.15975.15008-.12893a4.99557,4.99557,0,0,0,1.10552.06864A9.78464,9.78464,0,0,1,85.8535,7.01828Z"/><path class="cls-78" d="M99.41191,10.53007l-.43182-.3021-.12341-.13757A.44587.44587,0,0,1,99.41191,10.53007Z"/><path class="cls-78" d="M108.03358,24.932a1.5484,1.5484,0,0,1-.13885-.67607l.21078-.07478Z"/><path class="cls-67" d="M136.14438,102.58635l.00059,1.2288A2.48882,2.48882,0,0,1,136.14438,102.58635Z"/><path class="cls-67" d="M127.55136,6.93352a3.19851,3.19851,0,0,1-.94319.05835A2.61183,2.61183,0,0,1,127.55136,6.93352Z"/><path class="cls-67" d="M129.997,6.99065a3.18526,3.18526,0,0,1-.952-.05633A2.63447,2.63447,0,0,1,129.997,6.99065Z"/><path class="cls-79" d="M103.57168,72.393c.26022.14072.12576.28773.00692.43446l-.23851-.12623C103.58485,72.72437,103.64182,72.60644,103.57168,72.393Z"/><path class="cls-78" d="M89.08537,6.98991q-.37809-.00792-.75614-.01587A1.10273,1.10273,0,0,1,89.08537,6.98991Z"/><path class="cls-78" d="M113.43006,13.3193a.80042.80042,0,0,1-.30652.35746C113.10711,13.45594,113.16417,13.29812,113.43006,13.3193Z"/><path class="cls-67" d="M95.0961,92.48258l-.76687-.00027A.98154.98154,0,0,1,95.0961,92.48258Z"/><path class="cls-67" d="M69.59728,92.48205l-.68972,0A.826.826,0,0,1,69.59728,92.48205Z"/><path class="cls-67" d="M145.6347,113.84119a2.29485,2.29485,0,0,1,.71885.05762C146.11363,113.88453,145.86559,113.96979,145.6347,113.84119Z"/><path class="cls-67" d="M45.79328,92.48174l-.6897.00016A.82888.82888,0,0,1,45.79328,92.48174Z"/><path class="cls-67" d="M170.976,92.48275l-.68992-.0007A.82278.82278,0,0,1,170.976,92.48275Z"/><path class="cls-67" d="M147.37256,113.89837a1.81826,1.81826,0,0,1,.64644-.05434C147.81257,113.96978,147.5885,113.88582,147.37256,113.89837Z"/><path class="cls-67" d="M148.62978,26.58731a.4945.4945,0,0,0-.06057-.03968.25033.25033,0,0,1-.01159-.28822l.01768-.30478C148.69974,26.15638,148.616,26.376,148.62978,26.58731Z"/><path class="cls-67" d="M93.5589,113.84155a2.07483,2.07483,0,0,1,.644.05712C93.98787,113.88489,93.76374,113.97187,93.5589,113.84155Z"/><path class="cls-67" d="M68.06055,113.84437a1.81789,1.81789,0,0,1,.64516.05407C68.49031,113.88594,68.26669,113.96943,68.06055,113.84437Z"/><path class="cls-78" d="M106.94673,20.4885a.60286.60286,0,0,1-.12747-.31212C106.91882,20.25713,107.15882,20.28054,106.94673,20.4885Z"/><path class="cls-67" d="M56.18711,102.84925a1.90021,1.90021,0,0,1-.05681-.64808C56.26027,102.40747,56.17332,102.63277,56.18711,102.84925Z"/><path class="cls-67" d="M147.17211,92.48275l-.61285-.001A.65221.65221,0,0,1,147.17211,92.48275Z"/><path class="cls-67" d="M148.55511,29.26227l.07753-.2443c-.01694.183.06457.37651-.05864.54817Z"/><path class="cls-67" d="M67.37213,29.47215a1.142,1.142,0,0,1,.05646.55659C67.30524,29.8538,67.38535,29.65824,67.37213,29.47215Z"/><path class="cls-67" d="M67.42835,25.41513a1.13391,1.13391,0,0,1-.05647.55562C67.38536,25.78509,67.30543,25.58981,67.42835,25.41513Z"/><path class="cls-67" d="M95.29206,113.89893a1.531,1.531,0,0,1,.57433-.05755C95.68576,113.96848,95.484,113.885,95.29206,113.89893Z"/><path class="cls-78" d="M116.5773,10.62354a.41966.41966,0,0,1-.29477.21626C116.29923,10.6566,116.42141,10.61711,116.5773,10.62354Z"/><path class="cls-67" d="M69.87636,113.89849a1.5555,1.5555,0,0,1,.5684-.05795C70.26635,113.96824,70.06653,113.8861,69.87636,113.89849Z"/><path class="cls-67" d="M44.33343,113.84327a1.5841,1.5841,0,0,1,.57293.05545C44.715,113.88594,44.5143,113.9669,44.33343,113.84327Z"/><path class="cls-78" d="M100.63934,11.40715l-.29957-.24561C100.51254,11.15453,100.67566,11.15926,100.63934,11.40715Z"/><path class="cls-67" d="M56.13256,104.12285a1.47371,1.47371,0,0,1,.05483-.57375C56.17435,103.74069,56.25487,103.94147,56.13256,104.12285Z"/><path class="cls-78" d="M145.70077,16.657l-.14189-.11026-.009-.13512C145.86351,16.33153,145.65194,16.57433,145.70077,16.657Z"/><path class="cls-78" d="M177.13585,94.664l-.23-.157C177.15084,94.31281,177.12909,94.50926,177.13585,94.664Z"/><path class="cls-78" d="M153.3319,94.664l-.23-.157C153.34688,94.31281,153.32513,94.50926,153.3319,94.664Z"/><path class="cls-78" d="M93.08689,7.64229c-.10336-.03035-.22221-.01023-.30892-.09483C92.90517,7.50015,93.06036,7.36172,93.08689,7.64229Z"/><path class="cls-78" d="M168.52515,92.68056c-.07028.07127-.15917.0488-.2437.04838C168.3283,92.53969,168.41,92.52569,168.52515,92.68056Z"/><path class="cls-67" d="M148.47678,30.57166c.0488-.13029-.0137-.2818.07705-.40422l.00841.40518c.035.07238-.003.08233-.0629.07349Z"/><path class="cls-78" d="M84.15858,7.22189l-.23094.01089c.01033-.0765.02934-.147.12844-.13953C84.13368,7.09912,84.147,7.161,84.15858,7.22189Z"/><path class="cls-78" d="M146.8496,18.872c-.08761-.05349-.05432-.15468-.09029-.22856C146.951,18.65581,146.99407,18.72686,146.8496,18.872Z"/><path class="cls-78" d="M122.75194,7.69635a.17449.17449,0,0,0-.01092.04944l-.29566.02973C122.485,7.50715,122.65249,7.73336,122.75194,7.69635Z"/><path class="cls-67" d="M67.44809,30.47869l.06.03725-.00228.43713C67.38812,30.8069,67.45957,30.63776,67.44809,30.47869Z"/><path class="cls-67" d="M170.97943,96.58982a.97509.97509,0,0,1,.48476.05681C171.30151,96.63748,171.12939,96.70816,170.97943,96.58982Z"/><path class="cls-78" d="M115.64564,11.31652a.44344.44344,0,0,1-.28754.21983C115.37228,11.3563,115.4891,11.31043,115.64564,11.31652Z"/><path class="cls-67" d="M169.8782,96.64735a.95321.95321,0,0,1,.48157-.058C170.21127,96.70841,170.03982,96.63716,169.8782,96.64735Z"/><path class="cls-67" d="M67.60117,31.57294l-.01749.15066c-.11141-.11971-.05081-.26452-.05828-.3995Z"/><path class="cls-67" d="M107.73534,74.48749l.378-.00127A.2889.2889,0,0,1,107.73534,74.48749Z"/><path class="cls-78" d="M89.85575,7.06717a.6531.6531,0,0,1-.3957-.05876C89.59326,7.01881,89.73715,6.95783,89.85575,7.06717Z"/><path class="cls-78" d="M166.73952,93.18048c-.07411.03471-.1316.10962-.22666.09361C166.53274,93.10816,166.60268,93.06335,166.73952,93.18048Z"/><path class="cls-67" d="M136.22286,101.739a.73958.73958,0,0,1-.059.40222C136.17074,102.00531,136.11111,101.85959,136.22286,101.739Z"/><path class="cls-67" d="M58.57154,101.893a.7577.7577,0,0,1-.05736.42086C58.52094,102.172,58.457,102.02032,58.57154,101.893Z"/><path class="cls-78" d="M181.3152,102.04668l-.00828-.15528c.162.03346.19188.10877.07318.23109A.11621.11621,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M105.41242,102.38161a.78319.78319,0,0,1-.05479-.4112C105.46656,102.0954,105.40791,102.24271,105.41242,102.38161Z"/><path class="cls-67" d="M157.56534,102.46688a.79407.79407,0,0,1-.05419-.41937C157.62058,102.1755,157.5595,102.32551,157.56534,102.46688Z"/><path class="cls-67" d="M181.3152,102.04668l.06488.07581-.01089.34318A.79228.79228,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M169.69536,92.50317a.73628.73628,0,0,1-.4107.05643C169.40886,92.44834,169.55655,92.508,169.69536,92.50317Z"/><path class="cls-78" d="M148.49933,30.64611l.06288-.07351c.11869.11874.09154.194-.06841.22982Z"/><path class="cls-67" d="M148.17317,92.55775a.86279.86279,0,0,1-.41425-.05452C147.89865,92.508,148.047,92.44853,148.17317,92.55775Z"/><path class="cls-67" d="M157.51082,104.354a.78474.78474,0,0,1,.0546-.42006C157.55914,104.07532,157.62092,104.22581,157.51082,104.354Z"/><path class="cls-67" d="M58.51328,104.02416a.78392.78392,0,0,1,.05476.40671C58.46078,104.30727,58.51821,104.16152,58.51328,104.02416Z"/><path class="cls-67" d="M105.35589,104.43128a.77055.77055,0,0,1,.05618-.41775C105.40653,104.15444,105.4684,104.30457,105.35589,104.43128Z"/><path class="cls-67" d="M136.16523,104.25478a.74668.74668,0,0,1,.05913.40779C136.11021,104.54033,136.17078,104.39276,136.16523,104.25478Z"/><path class="cls-67" d="M126.31593,7.01011a.67723.67723,0,0,1-.40122.05951C126.03457,6.95625,126.1804,7.01787,126.31593,7.01011Z"/><path class="cls-67" d="M171.97711,92.55775a.856.856,0,0,1-.41317-.05454C171.70334,92.50788,171.85133,92.4487,171.97711,92.55775Z"/><path class="cls-67" d="M46.79451,92.55791a.72668.72668,0,0,1-.40275-.05644C46.52775,92.50765,46.67279,92.44962,46.79451,92.55791Z"/><path class="cls-67" d="M145.9003,92.5031a.82161.82161,0,0,1-.41964.057C145.6077,92.44659,145.75871,92.50953,145.9003,92.5031Z"/><path class="cls-67" d="M44.50687,92.50191a.7261.7261,0,0,1-.40456.05658C44.22449,92.44908,44.37021,92.50785,44.50687,92.50191Z"/><path class="cls-67" d="M96.09763,92.56088a.73186.73186,0,0,1-.41686-.05716C95.8215,92.50906,95.97166,92.44679,96.09763,92.56088Z"/><path class="cls-67" d="M148.55448,25.5052a.65338.65338,0,0,1-.055-.39744C148.60536,25.22813,148.54706,25.37121,148.55448,25.5052Z"/><path class="cls-67" d="M93.74,92.50339a.734.734,0,0,1-.41231.0568C93.45229,92.44781,93.60066,92.50825,93.74,92.50339Z"/><path class="cls-67" d="M70.59875,92.56a.73207.73207,0,0,1-.413-.05648C70.32525,92.50828,70.47381,92.4478,70.59875,92.56Z"/><path class="cls-78" d="M166.20009,93.4098c-.07332.03694-.13047.11228-.22648.09535C165.99277,93.33963,166.063,93.29538,166.20009,93.4098Z"/><path class="cls-67" d="M68.31448,92.5025a.87433.87433,0,0,1-.40795.05428C68.03067,92.44974,68.17673,92.5073,68.31448,92.5025Z"/><path class="cls-78" d="M88.19546,102.93568c-.30886-3.22483,2.68818-5.7422,5.19528-6.2551a6.69059,6.69059,0,0,1,7.87565,5.582A6.62838,6.62838,0,0,1,88.262,104.754,15.06279,15.06279,0,0,1,88.19546,102.93568Z"/><path class="cls-78" d="M45.44046,96.56916A6.62622,6.62622,0,0,1,46.56915,109.729a6.54828,6.54828,0,0,1-7.53825-5.02078c-.70494-3.98962,1.20424-7.08688,5.18448-8.02618A4.79038,4.79038,0,0,1,45.44046,96.56916Z"/><path class="cls-78" d="M75.724,103.1979c.32487,3.37788-2.5467,6.07615-5.37,6.52935a6.62965,6.62965,0,1,1,5.27949-8.25142A9.738,9.738,0,0,1,75.724,103.1979Z"/><path class="cls-78" d="M140.22787,103.2052a6.62809,6.62809,0,1,1,6.60744,6.61506A6.605,6.605,0,0,1,140.22787,103.2052Z"/><path class="cls-4" d="M127.64944,20.49762a.36642.36642,0,0,1-.0085-.339A.36642.36642,0,0,1,127.64944,20.49762Z"/><path class="cls-80" d="M115.28107,34.80766l.077-.23106.23111.077C115.608,34.94785,115.34875,34.68625,115.28107,34.80766Z"/><path class="cls-80" d="M109.2723,33.11323a.2326.2326,0,0,1-.2311-.154C109.15331,32.95794,109.26523,32.957,109.2723,33.11323Z"/><path class="cls-79" d="M110.81264,62.61159a5.14418,5.14418,0,0,0,1.13217,1.06258c.14042.12791.31519.21754.45971.34162a.43277.43277,0,0,1-.06156.75676c-1.02975.6414-1.94556,1.43484-2.90376,2.17218-.70619.54343-1.4564,1.03175-2.14217,1.59882a1.98579,1.98579,0,0,1-1.28743.54442.32064.32064,0,0,0-.265.19868.4644.4644,0,0,1-.22055.2032.95766.95766,0,0,1-.60409.03844c-.34866-.07437-.08543-.33042-.11459-.50192a1.49819,1.49819,0,0,1-.002-.19184c-.00437-.11608-.00177-.25751-.15759-.258a.22724.22724,0,0,0-.21645.23111,8.37813,8.37813,0,0,1-.28926.98762c-.09036.56337-.49176,1.04671-.42108,1.6545.0187.16079-.11527.18646-.23722.16639a3.81142,3.81142,0,0,1-.44537-.10861c-.54111-.15779-.54072-.15914-.54337.4234-.02416-.0432-.07393-.08977-.06874-.1291a2.40675,2.40675,0,0,0-1.02794-2.07307,1.336,1.336,0,0,1-.39207-1.38891,17.65093,17.65093,0,0,0,.33857-2.6837,2.96015,2.96015,0,0,1,.56487-1.32078c.378-.59108.3537-.759-.24547-1.10936-.48175-.28168-.92758-.62533-1.3851-.94753a.3725.3725,0,0,1-.17012-.36338c.13152-1.19084.69191-1.535,1.92084-1.423.206.01877.40656.12556.61929.04.60574.16018,1.1457.48479,1.73227.69546a.75036.75036,0,0,0,.61525-.01923,9.27991,9.27991,0,0,0,1.23314-.61986c.44822-.2792.47176-.4158.1147-.79984-.27163-.29214-.49246-.62271-.74658-.92766-.097-.11641-.19681-.24466-.11485-.41643a.87423.87423,0,0,1,.80245.24627,3.76621,3.76621,0,0,1,.49574.53338c.26786.318.48725.69989.95868.77316a.42918.42918,0,0,1,.24465.17789c.42841.52907.94151.97631,1.41511,1.46164A2.52952,2.52952,0,0,0,110.81264,62.61159Z"/><path class="cls-81" d="M105.49757,58.45255a3.71917,3.71917,0,0,0,.83212,1.16791c.5622.6528.53769.67223-.19689,1.13939-.40042.25465-.85555.388-1.26285.62275-.07739.04461-.16235.09566-.25267.05043a14.58081,14.58081,0,0,1-1.97-.901,2.28094,2.28094,0,0,0-1.26123-.38546,8.20584,8.20584,0,0,1-2.511-.44969c-.56383-.24151-1.14414-.44743-1.69621-.7127a18.11658,18.11658,0,0,0-1.73617-.71807c-.98341-.35287-1.94235-.77371-2.92448-1.1305a14.75411,14.75411,0,0,1-1.50083-.43854,1.66367,1.66367,0,0,1-.81427-.58461c-.19293-.30721-.62839-.30513-.95632-.4358a34.161,34.161,0,0,1-4.02688-1.70007c-.38-.211-.754-.43288-1.13153-.64834a1.344,1.344,0,0,0-.87054-.3095c-.2355.0269-.453-.21023-.65754-.36394-.35708-.26832-.73194-.51753-1.062-.816a3.97283,3.97283,0,0,0-1.26831-.62612.24035.24035,0,0,1-.07084-.2472c.11286-.344.07985-.71074.17515-1.0567a1.03684,1.03684,0,0,1,1.3013-.08118,2.05142,2.05142,0,0,1,.69881.79915.4927.4927,0,0,0,.20972.221,1.79638,1.79638,0,0,1,.87019.98312.46894.46894,0,0,0,.242.23944c.95208.55871,1.92946,1.06958,2.92568,1.54473a.36088.36088,0,0,0,.1439.05242,10.18569,10.18569,0,0,1,2.90529.81684,1.00022,1.00022,0,0,0,.815.00412.76847.76847,0,0,1,.52756.01337c.71544.14462,1.398.40886,2.12956.51113.7473.10445,1.48294-.03164,2.22283.016a.30515.30515,0,0,0,.31278-.23769.52524.52524,0,0,1,.64175-.35914,16.24625,16.24625,0,0,0,2.26689.06291,4.34521,4.34521,0,0,1,1.10607.11165,1.23046,1.23046,0,0,0,.75864-.02782,1.00574,1.00574,0,0,1,1.05844.1435c-.041-.44062-.00643-.48163.49742-.61932a.625.625,0,0,1,.41642.31474c.83356,1.16852,1.86025,2.1824,2.68319,3.35876A3.00284,3.00284,0,0,1,105.49757,58.45255Z"/><path class="cls-82" d="M80.38439,49.90345a4.82756,4.82756,0,0,1-.15445,1.3093c-.27457.15081-.261.49361-.4621.69336-.42907-.06363-.89022-.01217-1.23178-.37832-.07463-.08-.18133-.1317-.232-.238.16243-.34512-.10392-.63272-.19693-.90733-.11009-.325.048-.69953-.231-.98714-.1061-.10937.03839-.227.16345-.28118.34436-.14905.68982-.29552,1.03485-.443.28842-.15866.47413.08748.69989.17664A4.532,4.532,0,0,1,80.38439,49.90345Z"/><path class="cls-83" d="M102.64725,29.03122c.03722.00786.10175.00683.10764.02489.13027.40006.5055.63973.664,1.01992a19.336,19.336,0,0,0,1.07193,2.18063.55212.55212,0,0,0,.23636.24042c.14024.04022.18516.16885.24995.27584a10.23179,10.23179,0,0,0,5.0529,4.17554c.31912.1315.6399.25907.96373.37928.11938.04432.29074.055.28143.25266-.01854.29048.22811.31711.407.37583.88481.29043,1.80826.437,2.70135.68906a16.53567,16.53567,0,0,0,2.87668.55315.3312.3312,0,0,1,.3319.38441,1.16781,1.16781,0,0,0-.75216.14618,2.41072,2.41072,0,0,1-1.67474.15976c-.78777-.14729-1.59648-.21315-2.36976-.383a16.7331,16.7331,0,0,1-4.33757-1.7281,3.29828,3.29828,0,0,0-.57223-.19724.70765.70765,0,0,1-.38518-.23124,9.24839,9.24839,0,0,1-2.0468-1.94635,17.92431,17.92431,0,0,1-2.59848-5.13885A3.10335,3.10335,0,0,1,102.64725,29.03122Z"/><path class="cls-84" d="M111.27522,37.5804c-.59464-.25852-1.19543-.50393-1.78255-.77855a11.14581,11.14581,0,0,1-2.64452-1.66567,9.95154,9.95154,0,0,1-2.12094-2.6391c.07061-.36584-.303-.58364-.30814-.92423a2.90965,2.90965,0,0,0,1.05926.99121c.27487.16053.42237.53062.64414.79216a7.022,7.022,0,0,0,1.93982,1.65524.61045.61045,0,0,0,.36262.10427c.7619.26014,1.37875.80079,2.15422,1.05737,1.12912.37359,2.28715.60328,3.438.87844a16.09879,16.09879,0,0,0,2.23833.39849,33.76317,33.76317,0,0,0,3.66874.453,1.37861,1.37861,0,0,1,.98047.21643,2.3304,2.3304,0,0,1-.88782.14906,19.2957,19.2957,0,0,1-3.3243-.14295.25082.25082,0,0,0-.15147.00416c-.9598.574-1.89437.05546-2.83708-.063C112.88286,37.96362,112.10541,37.64,111.27522,37.5804Z"/><path class="cls-80" d="M104.80425,28.338a3.80185,3.80185,0,0,1,.68549,1.435,6.74169,6.74169,0,0,0,1.51765,2.4138,4.03126,4.03126,0,0,0,1.51724.88893c.45414.143.85466.45045,1.30848.63223a24.48073,24.48073,0,0,0,3.494.97422c.58014.13787,1.16266.03673,1.72281.20267.212.299.55662.18314.82451.21291,1.07127.11907,2.14994.1713,3.22572.25038.081.006.21145-.03819.2179.08621.007.134-.123.13848-.22555.1418-.11486.00371-.22991.00139-.34488.00169-.30426.391-.74817.3223-1.13971.28462-.683-.06571-1.36922-.12964-2.05117-.18509-.71453-.05809-1.40653-.2278-2.11633-.29353-.77473-.07175-1.54633-.1773-2.3193-.26812l-.077-.00017c-.08243-.18221-.27161-.17635-.42155-.22735a9.16877,9.16877,0,0,1-3.22461-1.78475,8.919,8.919,0,0,1-1.04677-1.26113A9.28838,9.28838,0,0,1,104.80425,28.338Z"/><path class="cls-85" d="M119.59505,64.84514c-.08038.11624-.21628.04618-.31413.09314-.12943.06211-.2703.13624-.09909.30272.08286.08056.13436.18544.02169.25621-.42869.26921-.67841.74889-1.14918.96534-.00427-.11289.09008-.18045.12594-.27345.11927-.30935-.02548-.567-.3424-.569a3.68853,3.68853,0,0,1-1.58407-.46539c-.80188-.39162-1.62429-.74157-2.42386-1.13956a17.01924,17.01924,0,0,1-1.75963-1.19271c-.31921-.21067-.60129-.48537-1.0262-.44192a30.20019,30.20019,0,0,1-2.73937-2.57077c-.31534-.31636-.52035-.71637-.80432-1.06193-1.0406-1.26636-2.2616-2.36824-3.278-3.65248-.28551-.36074-.5694-.723-.85618-1.083-.079-.0991-.16343-.20238-.11046-.34633.21257-.09237.29814.07812.39816.20075a18.13988,18.13988,0,0,0,1.75515,1.74335,4.75563,4.75563,0,0,1,.6604.69454,25.68717,25.68717,0,0,0,7.9502,5.5791,2.87581,2.87581,0,0,1,1.03351.65364.2609.2609,0,0,0,.09068.07063c.86191.33951,1.63136.86158,2.46919,1.2484a.36006.36006,0,0,0,.18369.05208,2.32657,2.32657,0,0,1,1.38018.39486C119.42825,64.3976,119.67784,64.49365,119.59505,64.84514Z"/><path class="cls-86" d="M103.26354,53.67736a10.00561,10.00561,0,0,0,1.12035,1.4513c1.16684,1.33877,2.44269,2.589,3.5335,3.985.6044.77354,1.31178,1.42329,1.96628,2.13395a9.87627,9.87627,0,0,0,.89817.77376c.11591.0987.2539.18174.26228.35913l-.23148.23106a1.0539,1.0539,0,0,1-.98021-.40014c-.63536-.68445-1.363-1.28007-1.94507-2.01646a.2722.2722,0,0,0-.15184-.10975c-.57727-.05411-.80156-.535-1.10722-.91172a1.7525,1.7525,0,0,0-1.13073-.721,11.43557,11.43557,0,0,1-.934-1.20161q-.89905-1.09157-1.79692-2.1841c-.24978-.30546-.49087-.618-.73591-.92736-.21436-.07335-.29066-.27691-.40733-.4394q-.71349-.99367-1.38989-2.01316c-.09689-.14647-.22054-.28832-.16511-.4884a1.71656,1.71656,0,0,0-.28914-1.56466c-.10061-.18191-.31567-.31519-.2376-.57128.21207-.12427.29583.052.38347.17788a4.60249,4.60249,0,0,0,.60678.76821c.78269,1.15729,1.69081,2.21826,2.55157,3.3157C103.16549,53.42886,103.31348,53.504,103.26354,53.67736Z"/><path class="cls-87" d="M102.64725,29.03122a19.29163,19.29163,0,0,0,.65037,2.23841,26.312,26.312,0,0,0,1.2426,2.50022c.42964.71876.8928,1.40344,1.38909,2.07365a8.77941,8.77941,0,0,0,1.19952,1.12284,1.87046,1.87046,0,0,1,.37166.38286.77273.77273,0,0,1-.40136-.20553,21.74617,21.74617,0,0,1-2.1227-1.973,1.16161,1.16161,0,0,0-.4031-.28579c-.129.03945-.19-.05347-.24212-.13776-.4757-.76965-.93758-1.54732-1.339-2.35972a23.77022,23.77022,0,0,1-1.2735-3.86448,34.23876,34.23876,0,0,1-.68445-3.97577,14.153,14.153,0,0,1-.19288-2.60013,2.89712,2.89712,0,0,0-.06579-.80076,13.33422,13.33422,0,0,0-.22315-3.66223,9.92653,9.92653,0,0,0-2.409-5.02522,9.1848,9.1848,0,0,0-1.01185-1.04934.53028.53028,0,0,1-.18517-.40059c-.34179-.32184-.85562-.38573-1.15554-.77036.3373-.3008.32492-.3663-.07693-.57989a5.74349,5.74349,0,0,0-.98236-.40543c-.23827-.07469-.40736-.202-.40419-.478a13.009,13.009,0,0,1,3.5316,1.63325,8.66,8.66,0,0,1,3.47038,5.4176,15.05439,15.05439,0,0,1,.39683,3.25761c.00994,1.03163.00618,2.0662.0848,3.09363q.14706,1.9218.34417,3.8415A26.60036,26.60036,0,0,0,102.64725,29.03122Z"/><path class="cls-88" d="M103.10947,32.42006a19.21964,19.21964,0,0,0,1.46386,2.46483,2.60093,2.60093,0,0,0,.81354,1.13934,14.56487,14.56487,0,0,0,3.14495,2.78041,17.06018,17.06018,0,0,0,3.54767,1.72112,35.233,35.233,0,0,0,3.39469,1.08257c.211.04646.42237.09337.63576.12562.14642.02213.24106.07863.24962.23649a.69347.69347,0,0,1-.78726.192c-.82189-.17633-1.61678-.49362-2.43876-.61346a11.72724,11.72724,0,0,1-2.47332-.80044,14.00665,14.00665,0,0,1-2.07416-1.0568,1.69571,1.69571,0,0,0-.54632-.2629c-.3471.04715-.45511-.28164-.67815-.4301a4.64282,4.64282,0,0,0-.9657-.86872,12.09344,12.09344,0,0,1-2.37324-2.66244,18.86892,18.86892,0,0,1-2.23343-4.70817c-.03953-.12224-.09458-.24338.00656-.36262.31608-.063.38853.18654.46687.39059a12.6471,12.6471,0,0,0,.53571,1.25862A.96543.96543,0,0,0,103.10947,32.42006Z"/><path class="cls-89" d="M116.74475,44.358a3.528,3.528,0,0,0-1.15554.15423,2.65074,2.65074,0,0,1-1.15609-.19358,22.35364,22.35364,0,0,1-4.0636-1.61624,17.73923,17.73923,0,0,1-3.2828-2.12182,14.31458,14.31458,0,0,0-1.16832-1.10492,16.75888,16.75888,0,0,1-1.80177-2.03472c-.08-.09762-.1786-.19423-.09064-.33866a.24447.24447,0,0,1,.32775.1188,5.18528,5.18528,0,0,0,1.49114,1.35049c.54589.36431,1.01642.85688,1.54657,1.257a11.24313,11.24313,0,0,0,2.46794,1.46475,21.35126,21.35126,0,0,0,5.00981,1.92128,1.1779,1.1779,0,0,1,.56594.21929.89678.89678,0,0,0,.80944.42509A.49158.49158,0,0,1,116.74475,44.358Z"/><path class="cls-90" d="M115.43514,43.4339a14.41738,14.41738,0,0,1-2.38941-.63624,20.67328,20.67328,0,0,1-2.73736-1.157c-.16893-.08916-.33138-.1906-.49682-.28638a14.80842,14.80842,0,0,1-3.66336-2.56961,12.65126,12.65126,0,0,1-1.84819-2.056c-.0726-.11428-.20266-.21045-.13055-.37574.13773-.06822.21442.03916.29757.11023.98158.83892,1.9185,1.73048,2.95606,2.50334.23581.11373.35405.38425.61666.46226a8.85834,8.85834,0,0,0,1.87955,1.15889A26.12916,26.12916,0,0,0,116.2061,42.835c.139.02991.32807.03265.39619.18592.03552.07988-.08813.13822-.16569.1821A2.53,2.53,0,0,1,115.43514,43.4339Z"/><path class="cls-91" d="M107.11531,40.50708a21.8878,21.8878,0,0,0,6.78573,3.54577c.558.18071,1.14546.235,1.68817.45941.04746.16844.29968.15041.32505.377a11.74626,11.74626,0,0,1-3.86868-.83908.81387.81387,0,0,1-.7713-.0949,28.55056,28.55056,0,0,1-2.71993-1.51c-.36966-.26174-.84134-.30614-1.18546-.62193-.35838-.32888-.76067-.61117-1.116-.94273-.51548-.48095-1.094-.88637-1.60205-1.37421a17.44945,17.44945,0,0,1-1.8655-2.24491c-.17565-.23659-.31411-.4998-.51047-.72217-.22928-.33816-.433-.69234-.64958-1.03847a.49213.49213,0,0,1-.09282-.46953c.32989-.33664.4598.0606.66571.18055.44508.58866.80928,1.23148,1.29425,1.79826a14.19458,14.19458,0,0,0,1.63486,1.70757c.62175.52179,1.19127,1.11283,1.80639,1.64917A2.0178,2.0178,0,0,0,107.11531,40.50708Z"/><path class="cls-92" d="M102.3393,36.502c.42779.45665.72563,1.0095,1.116,1.49691a13.80188,13.80188,0,0,0,2.33989,2.34166c.60177.46443,1.15863.99645,1.74509,1.488.36962.30979.85863.34985,1.24184.64889a25.53168,25.53168,0,0,0,2.26589,1.26673,2.15424,2.15424,0,0,0,.99757.306c.003.12766.0997.17049.19563.208a26.56889,26.56889,0,0,0,3.49243,1.114,5.53236,5.53236,0,0,0,1.62718.37259c-.38769.2047-.76464.001-1.14291-.03978a7.1041,7.1041,0,0,0-1.322.03941.31643.31643,0,0,1-.36267.02483c-.82464-.32873-1.722-.43357-2.53448-.77986a18.85522,18.85522,0,0,1-5.43253-3.07053,16.91478,16.91478,0,0,1-1.53388-1.14942c-.29883-.33429-.60292-.66357-.88748-1.01051a4.68307,4.68307,0,0,0-.7147-.989c-.42719-.61827-.74025-1.30691-1.18222-1.91742C102.17167,36.74713,102.1,36.56351,102.3393,36.502Z"/><path class="cls-93" d="M119.59505,64.84514a.56326.56326,0,0,0-.46221-.46211c-.25421-.18462-.08279-.385.04848-.47478a8.31656,8.31656,0,0,0,1.285-1.3115,2.88351,2.88351,0,0,1,1.3623.11106c.735.18387,1.483.30259,2.21794.48293.14842.03642.30947.03966.40173.19123-.25594.35785-.66448.59309-.84273,1.00787-.09841.229-.1472.47731-.38984.60934-.35129.105-.72183.07027-1.07942.2018a1.61772,1.61772,0,0,1-1.03923-.15216A3.80322,3.80322,0,0,0,119.59505,64.84514Z"/><path class="cls-94" d="M104.188,39.73679a8.10424,8.10424,0,0,1,.97124,1.02746c.49432.514,1.15492.78011,1.68251,1.2463a17.59011,17.59011,0,0,0,4.426,2.56268,24.49831,24.49831,0,0,0,2.60583.86606,3.826,3.826,0,0,0,1.02239.30509,17.04312,17.04312,0,0,0,2.52954.693.69112.69112,0,0,1,.1667.07715,2.946,2.946,0,0,1-.85426.15383l.08391.46233-.53925.00019c-.19649.16947-.41238.06665-.62163.04236a5.90669,5.90669,0,0,1-.85834-.18693A19.38764,19.38764,0,0,1,110.81,45.38972a24.83688,24.83688,0,0,1-5.12777-3.58044c-.67549-.63439-1.26825-1.33793-1.8993-2.00922a.64972.64972,0,0,1-.23991-.57956C103.93475,39.17168,103.9978,39.53361,104.188,39.73679Z"/><path class="cls-95" d="M116.05142,49.74938a5.22327,5.22327,0,0,0,1.84885.46212c-.09923.19457-.26346.15476-.43291.1301-.33838-.04924-.67838-.0876-1.01806-.12758a.17656.17656,0,0,0-.16677.0745c-.184.15507-.38893.08471-.58825.051a15.86658,15.86658,0,0,1-5.207-1.9169,33.46586,33.46586,0,0,1-3.7352-2.43035,18.7315,18.7315,0,0,1-3.08239-2.769,3.17933,3.17933,0,0,1-.65667-.92658c.22406-.14659.35844.04549.49248.1533.28916.23255.53338.51554.79809.77575a1.15183,1.15183,0,0,0,.3953.29763c.59694.46295,1.13616.99413,1.73815,1.45251a30.24018,30.24018,0,0,0,5.10324,3.19792,25.92753,25.92753,0,0,0,2.9957,1.19736c.33319.11334.6794.12452,1.012.21608C115.71791,49.634,115.9093,49.61609,116.05142,49.74938Z"/><path class="cls-96" d="M103.03262,42.27852a12.98047,12.98047,0,0,0,2.21187,2.37448,34.7846,34.7846,0,0,0,3.07266,2.32413c1.04806.68327,2.12709,1.3072,3.2264,1.89794a13.03931,13.03931,0,0,0,3.64439,1.25789,3.92274,3.92274,0,0,0,1.09459.15556c.14818.23128.41725.21088.634.29305.12793.04849.27309.0492.36749.16906a.57712.57712,0,0,1-.46376.11266,14.57069,14.57069,0,0,1-1.69214-.1572,10.88228,10.88228,0,0,1-2.70693-.82659,27.16411,27.16411,0,0,1-3.47006-1.80118,1.60635,1.60635,0,0,1-.24646-.18175q-.97491-.772-1.94877-1.5459A14.43452,14.43452,0,0,1,104.336,44.184c-.4256-.532-.974-.93844-1.3664-1.49475a2.36218,2.36218,0,0,0-.42047-.58709c-.08232-.06413-.06332-.18794.00167-.283A.45517.45517,0,0,1,103.03262,42.27852Z"/><path class="cls-97" d="M115.05,50.597a15.72194,15.72194,0,0,0,2.234.15362c1.15087.06313,2.29136.23065,3.43653.33972a18.49094,18.49094,0,0,0,2.24129.2.82085.82085,0,0,1,.485.07642.1763.1763,0,0,1-.20259.07231c-.52913-.188-1.05426.07457-1.582.00753a.40547.40547,0,0,0-.37237.15122c-.32895.20782-.67925.047-1.00785.02466-1.15935-.07878-2.32149-.14473-3.47205-.322a9.44389,9.44389,0,0,0-1.39316-.39869C115.25571,50.86731,115.04524,50.84977,115.05,50.597Z"/><path class="cls-98" d="M116.74474,51.21275c1.08465.0992,2.16905.2012,3.25406.29621.42964.03762.86065.05972,1.291.08888.3703.16441.77448.04089,1.15784.147a8.51531,8.51531,0,0,0,2.23215.08291,3.00438,3.00438,0,0,1,.56712.06449,1.90942,1.90942,0,0,0,1.02547-.10673c.28556-.10238.57124.02376.8652-.02188.595-.09239,1.19577-.20143,1.78766-.247.51177-.03935.99475-.19805,1.5072-.22232a7.54978,7.54978,0,0,0,1.9147-.30227,1.26286,1.26286,0,0,1,.34391-.01042,2.99632,2.99632,0,0,1-1.42073.37549c-1.3267.23436-2.66374.41519-3.99819.59131-.66255.08744-1.34106.14366-2.01439.19077a3.06629,3.06629,0,0,1-1.54788-.05334c-.153-.0683-.21365.08687-.32673.24114a5.6982,5.6982,0,0,0,1.30707.03694,15.89358,15.89358,0,0,1-3.09226.23509.582.582,0,0,1-.50525.1107c-1.08957-.1072-2.188-.08193-3.27518-.22222a1.83966,1.83966,0,0,1-.48356-.10372,11.45869,11.45869,0,0,0-1.34332-.4094c-.18053-.06607-.41515-.05189-.49331-.29331.23384-.19142.48379.0138.7195-.03054-.33635-.21222-.76694-.21868-1.09939-.4912A3.87768,3.87768,0,0,1,116.74474,51.21275Z"/><path class="cls-69" d="M148.55762,26.25941l.01154.2883c-.00289.15373-.0041.3076-.00909.46135a2.42513,2.42513,0,0,1-.24347,1.46081,1.35422,1.35422,0,0,0-.19633.803.74459.74459,0,0,1-.16415.45773,5.2388,5.2388,0,0,0-.68073,1.38676,18.69578,18.69578,0,0,1-1.1476,2.57084c-.25431.41-.35947.89708-.62191,1.31335-.55516.88057-1.10875,1.76193-1.63924,2.65882-.52836.8933-1.19611,1.703-1.76059,2.57662a14.70086,14.70086,0,0,1-1.04835,1.362,10.91082,10.91082,0,0,1-1.05055,1.13016c-.33576.30583-.55431.72652-.90174,1.03574-.93764.83454-1.84141,1.70395-2.86025,2.44852a16.13436,16.13436,0,0,1-2.96824,1.719,7.46953,7.46953,0,0,1-2.06983.51169c-.9908.13125-1.98946.18265-2.98181.30362a10.35671,10.35671,0,0,1-1.11416.10427,5.09152,5.09152,0,0,0-1.64285.16519c-.19512.06863-.35253-.01921-.52413-.04131a5.497,5.497,0,0,0-1.16623.15058c-.63618.04975-1.25455-.21108-1.8845-.17671-.46684.02547-.91382-.28924-1.40859-.00328-.18487.10684-.51955-.08169-.78079-.06316-.55911.03965-1.07553-.20626-1.62634-.202a.632.632,0,0,0-.25445.06685,4.44389,4.44389,0,0,1-1.64123-.3324c-.09872-.02955-.23785-.05415-.20792-.22012a.5426.5426,0,0,1,.47373-.0549c.4032.07211.81157.00983,1.21539.05336.07279.00785.09415-.00563.1191-.08689.09224-.30044.293-.2484.50314-.12924,1.2072.07749,2.40939.20261,3.60793.36673a5.90721,5.90721,0,0,0,1.0275.08762c.68723-.02753,1.36845.05735,2.05971.02881,1.49251-.06161,2.97764-.18038,4.46341-.32054a17.93,17.93,0,0,0,2.61447-.31371,10.96573,10.96573,0,0,0,3.67612-1.76863,22.15609,22.15609,0,0,0,3.05627-2.60906,34.50924,34.50924,0,0,0,3.98745-4.92792,43.26384,43.26384,0,0,0,3.24224-5.653,42.36023,42.36023,0,0,0,2.47212-6.51691A.34868.34868,0,0,1,148.55762,26.25941Z"/><path class="cls-99" d="M118.28545,47.97794a1.35672,1.35672,0,0,0-.15364.00107c-.09614.011-.21832-.04328-.27764.07232-.07994.15577.15985.13233.17017.28293l-2.04995-.12513c-.158.14325-.33745.08335-.51119.04962a17.47507,17.47507,0,0,1-4.931-1.78356,24.47971,24.47971,0,0,1-5.74458-4.20255c-.43442-.43068-.86348-.87223-1.25621-1.34469-.27719-.4316-.588-.84054-.89763-1.24776a19.84407,19.84407,0,0,1-1.54917-2.42788c-.06138-.111-.14187-.21936-.07534-.35789.2627-.064.30707.1731.41581.31078.16331.20679.22576.494.49628.61474a3.30225,3.30225,0,0,1,.81288.96226,21.82918,21.82918,0,0,0,5.30249,5.24571,19.27,19.27,0,0,0,2.57919,1.36231,22.746,22.746,0,0,0,4.12592,1.50945,12.394,12.394,0,0,0,1.54071.23125,3.42084,3.42084,0,0,0,1.42628.53689C117.9336,47.717,118.20843,47.65926,118.28545,47.97794Z"/><path class="cls-34" d="M103.9912,15.76834a.36618.36618,0,0,1,.00851.339A.36618.36618,0,0,1,103.9912,15.76834Z"/><path class="cls-100" d="M116.05142,49.74938a9.04608,9.04608,0,0,1-1.60607-.30927,24.82036,24.82036,0,0,1-6.2407-3.08084,32.69528,32.69528,0,0,1-3.55447-2.77152c-.59419-.54027-1.11406-1.15082-1.65888-1.73833-.3913-.422-.64613-.94271-1.0407-1.36135a.49466.49466,0,0,1-.169-.51663c.19936-.06005.26687.10536.35429.21839a22.45843,22.45843,0,0,0,2.6744,2.77081.50126.50126,0,0,0,.22488.13966.69671.69671,0,0,1,.32959.19,15.20824,15.20824,0,0,0,3.31756,2.48578,20.89584,20.89584,0,0,0,7.08818,2.878.2989.2989,0,0,1,.20385.0946c.06436.26076.31134.23641.49073.29647a10.08826,10.08826,0,0,0,2.51365.62719c-.0432.02416-.08833.07226-.1293.06894-.73193-.05937-1.468.06634-2.19912-.05507A.86267.86267,0,0,0,116.05142,49.74938Z"/><path class="cls-101" d="M117.284,52.291c1.4294.223,2.87469.22357,4.314.30808a7.45441,7.45441,0,0,0,1.15328.15137,19.94371,19.94371,0,0,0,2.62146.00267c-.20049.23675-.50134.16619-.75056.21239a8.67985,8.67985,0,0,1-1.29058.09316,17.32487,17.32487,0,0,0-1.79255.07164c-.64666.0885-1.29274-.11316-1.94378-.0687a.6576.6576,0,0,1-.54789.10765,19.09292,19.09292,0,0,1-2.13054-.27882,1.33547,1.33547,0,0,0-.72659-.31323,1.44753,1.44753,0,0,1-.33605-.07979c-.12009-.04575-.28218-.09806-.25692-.24226.028-.16.20195-.12624.32183-.107A6.08538,6.08538,0,0,1,117.284,52.291Z"/><path class="cls-102" d="M115.97439,48.7487a6.61089,6.61089,0,0,1-1.79314-.36266,24.25482,24.25482,0,0,1-3.03227-1.18546,26.04683,26.04683,0,0,1-5.05172-3.08789,7.00689,7.00689,0,0,1-.72254-.68117c-.11916-.1184-.22086-.25513-.4164-.22905A8.45292,8.45292,0,0,0,103.786,41.992a27.85578,27.85578,0,0,1-2.23175-2.93572c-.1703-.23986-.30342-.50512-.47248-.74788-.09891-.142-.22463-.29021-.14863-.49139.15841-.07041.24866.04634.31406.14421a24.5847,24.5847,0,0,0,2.32465,2.93091c.41991.3695.777.80039,1.16857,1.1966A23.22635,23.22635,0,0,0,108.763,45.311a20.1061,20.1061,0,0,0,4.9384,2.40532,8.89788,8.89788,0,0,0,2.273.49284,6.18975,6.18975,0,0,0,1.64316.46074c.07691.01008.15442.00617.20569.07826v.077A6.7637,6.7637,0,0,1,115.97439,48.7487Z"/><path class="cls-103" d="M76.53205,47.13073a.67985.67985,0,0,0,.05348-.67741c-.09813-.3008-.32672-.59488-.13028-.94.03777-.388-.04941-.77367-.022-1.16168a.34373.34373,0,0,1,.23632-.10811,2.9581,2.9581,0,0,0,1.57493-.66083.25416.25416,0,0,1,.18106-.03869c.199.103.30742.304.47681.43969a.53043.53043,0,0,1,.10908.31866,2.96067,2.96067,0,0,0,.26058,1.21143c-.02812.16872-.15877.20981-.29866.25078-.4654.13636-.56629.33077-.43005.82576.08126.2952.19306.59074-.08521.84867A10.04146,10.04146,0,0,1,76.53205,47.13073Z"/><path class="cls-104" d="M78.45812,47.439a1.18761,1.18761,0,0,0-.02451-.84554c-.21443-.51363-.00367-.83849.55466-.9245a.28034.28034,0,0,0,.24059-.15544c.2125-.05962.348.089.50326.18492a.92893.92893,0,0,1,.33322.62053c.03255.32656.34787.52716.4421.83579-.30052.483-.079,1.14647-.54487,1.57484-.064.05882-.09862.14955-.19484.17259-.24948-.02191-.42843-.25538-.69332-.23107A2.7363,2.7363,0,0,1,78.45812,47.439Z"/><path class="cls-105" d="M116.89881,52.83a17.37,17.37,0,0,1,1.85531.20526c.28053.014.56114.009.84112.02639a2.09262,2.09262,0,0,0,1.012.24076,20.6139,20.6139,0,0,1,2.62214.21012c.36133.074.70655-.09858,1.06486-.06619.06853.27093-.1584.22881-.27743.22243a.42488.42488,0,0,0-.49293.31671.53364.53364,0,0,1-.43024.11793c-1.59569-.02474-3.18952-.10007-4.78259-.18025a9.56748,9.56748,0,0,0-2.03386-.52353,19.99246,19.99246,0,0,1-3.98214-1.25751,24.58873,24.58873,0,0,1-3.12776-1.63554c-.11564-.07268-.26578-.11058-.29762-.27483.16433-.17569.32438-.0701.47627.01579.37461.21184.75763.4078,1.13648.61158a1.3061,1.3061,0,0,0,.75365.21593,9.62624,9.62624,0,0,1,1.56257.63739,14.05587,14.05587,0,0,0,3.55494.94772A1.2,1.2,0,0,1,116.89881,52.83Z"/><path class="cls-106" d="M118.20841,53.83123c1.09849-.03665,2.19357.07338,3.2905.10011.6735.01641,1.35.03131,2.025.0541a16.4266,16.4266,0,0,0,2.66007-.22057,1.99491,1.99491,0,0,1,.42135-.01027c.06969.12095.1861.22322.15407.38488a27.88555,27.88555,0,0,1-3.09228.37723,4.18622,4.18622,0,0,1-.72118-.03266,24.06236,24.06236,0,0,0-2.81159.19437.38655.38655,0,0,1-.35366.10644c-1.136-.1592-2.29656-.06617-3.42161-.3341a.91655.91655,0,0,1-.35755-.126c-.06832-.2096.08713-.34.17629-.49453A9.42514,9.42514,0,0,1,118.20841,53.83123Z"/><path class="cls-107" d="M124.44829,63.382c-1.255-.23049-2.48523-.584-3.75249-.75459a.46839.46839,0,0,0-.25336.06141,9.4734,9.4734,0,0,1-3.63219-.37224,1.56741,1.56741,0,0,1-.87083-.35078.86807.86807,0,0,1,.26982-.72782.62067.62067,0,0,1,.47882-.06317,22.06993,22.06993,0,0,0,2.95958.34985.75646.75646,0,0,0,.34058-.02551,3.3359,3.3359,0,0,1,1.3951-.15547,11.75309,11.75309,0,0,1,2.44621.04691c.46019.02469.92.04317,1.3807.039.1646-.00151.33586-.03086.47062.1038a4.31449,4.31449,0,0,1,.86625.08318.36735.36735,0,0,1,.34156.26129c.05646.15392-.045.25089-.14533.32011-.28819.19888-.33468.68454-.84993.66391.40028.14069.21063.38431.17263.5968a2.236,2.236,0,0,1-1.19508-.17232C124.69978,63.18535,124.58646,63.33815,124.44829,63.382Z"/><path class="cls-108" d="M125.68085,61.53332a25.09434,25.09434,0,0,1-3.072-.09823,10.52167,10.52167,0,0,0-1.242.02121.72321.72321,0,0,1,.18915-.66947.83759.83759,0,0,1,.41418-.06027,21.09871,21.09871,0,0,0,4.20118-.3429.67408.67408,0,0,1,.588.0712,12.83539,12.83539,0,0,0,2.77328-.07683,7.58847,7.58847,0,0,1-2.09293.76072A5.09844,5.09844,0,0,0,125.68085,61.53332Z"/><path class="cls-109" d="M85.93075,11.16261a9.97044,9.97044,0,0,1,1.77163.07693c.1403-.13439.30772-.08818.47259-.07493.85644.06885,1.69843.23359,2.54327.3779a25.74877,25.74877,0,0,1,2.69026,1.34888c.33979.22284.37115.31509.226.68368a.80144.80144,0,0,1-.58826-.10173,5.86873,5.86873,0,0,0-1.5115-.40262,1.837,1.837,0,0,0-.8882-.19466,7.67235,7.67235,0,0,1-1.39322-.25808,10.31743,10.31743,0,0,0-1.60515-.117,20.79374,20.79374,0,0,1-2.37481-.713c-.10953-.0273-.21893-.08747-.19023-.24007.04938-.03633.10983-.11278.14641-.10268A.65046.65046,0,0,0,85.93075,11.16261Z"/><path class="cls-110" d="M85.08317,11.54785c.139.23507.405.19969.61166.25649a12.29917,12.29917,0,0,0,1.93046.59085,2.26167,2.26167,0,0,1-.20947.53136.38131.38131,0,0,1-.36106.05766,5.60577,5.60577,0,0,1-1.43234-.35811,8.31711,8.31711,0,0,0-2.43045-.54691,9.94053,9.94053,0,0,0-1.62336-.08263.57762.57762,0,0,1-.56832-.2945,23.83645,23.83645,0,0,1,3.265-.16128C84.538,11.54024,84.81055,11.73672,85.08317,11.54785Z"/><path class="cls-111" d="M123.13868,57.37428a13.4008,13.4008,0,0,0,1.92694.01431,1.756,1.756,0,0,1,.92337.13973c-.95636.09149-1.87688.39746-2.83574.47553-.032.00261-.06113.04145-.0916.06342-.07232.15784-.21271.16751-.356.15489-.8383-.07389-1.67818-.02247-2.51723-.03278a6.78787,6.78787,0,0,1-.9495-.07573,8.801,8.801,0,0,1-1.42089-.2495.53946.53946,0,0,1-.06668-.59553.86121.86121,0,0,1,.55867-.05,14.53737,14.53737,0,0,0,1.75593.01932c.954-.06319,1.91344.0267,2.87082.03952A.26356.26356,0,0,1,123.13868,57.37428Z"/><path class="cls-112" d="M128.223,57.91323c.11755.06392.21259.1704.368.15845.15987-.0123.17278.10624.17126.22646a.5714.5714,0,0,1-.41674.24573,24.57588,24.57588,0,0,1-5.27359.6326c-.46834-.06446-.94087-.03706-1.4098-.06345a2.79261,2.79261,0,0,1-1.39209-.29857c.05405-.23313.24882-.24709.42334-.23892a25.58976,25.58976,0,0,0,3.624-.24083c.30081-.02861.60256-.06181.90124-.11321.82161-.00985,1.62606-.18052,2.4392-.26913C127.84694,57.93175,128.03452,57.92424,128.223,57.91323Z"/><path class="cls-113" d="M125.21864,58.22149c-.54453.1026-1.08624.225-1.63422.30346a16.179,16.179,0,0,1-2.97463.15855.29046.29046,0,0,0-.32142.15377,1.47233,1.47233,0,0,1-.95828.08683c-.64261-.14626-1.30043-.21163-1.94338-.35932-.19967-.04587-.40558-.06076-.5213-.26437-.0007-.34688.241-.32707.47476-.30787a14.41435,14.41435,0,0,1,1.65823.0675.2813.2813,0,0,0,.21148-.0696,21.68134,21.68134,0,0,0,3.06845.06666c.26073.0014.52223.19012.78332.01017.42782.02309.80783.32341,1.2532.22772A3.6659,3.6659,0,0,1,125.21864,58.22149Z"/><path class="cls-114" d="M123.13868,57.37428c-1.79693-.065-3.59693.08479-5.39248-.07684a.33118.33118,0,0,1-.28661.06949,16.13033,16.13033,0,0,1-2.36894-.59294.58078.58078,0,0,1-.22527-.14144.33353.33353,0,0,1-.06013-.42117c.11131-.16057.27291-.09486.42-.05552a2.01514,2.01514,0,0,0,.79164.10344c.80524.04874,1.59946.19465,2.40217.2704a6.9666,6.9666,0,0,0,1.41635.00226,9.47631,9.47631,0,0,1,1.76335-.01364,15.0547,15.0547,0,0,0,2.4538.00731c.9316-.06493,1.86755-.03705,2.79793-.13023a.20215.20215,0,0,1,.14.05465c.12183.08794.31765.0526.38517.23106a12.76153,12.76153,0,0,1-1.80316.30323C124.75521,57.08087,123.9471,57.22674,123.13868,57.37428Z"/><path class="cls-115" d="M129.53263,55.14072a10.0376,10.0376,0,0,0-1.26468.28162c-.106.04361-.227.05386-.276.1805-.11288.17617-.30173.174-.477.202a29.12646,29.12646,0,0,1-5.16482.45448,7.14344,7.14344,0,0,1-.88091.05769c-.82509-.00028-1.64062-.13735-2.47455-.09654a6.02955,6.02955,0,0,1-1.92391-.22507,1.84636,1.84636,0,0,0-.84033-.301c-.32384-.06157-.40747-.17721-.36643-.4502a.844.844,0,0,1,.49043-.01817,20.537,20.537,0,0,0,2.3702.17255,3.67919,3.67919,0,0,1,1.41244.043,7.03336,7.03336,0,0,0,1.38066-.00388,9.47431,9.47431,0,0,1,1.65351-.0199,19.77184,19.77184,0,0,0,2.377-.14058c.22327-.01474.45212-.1312.67191.01776.38074.1665.73614-.04593,1.10409-.07156A6.62416,6.62416,0,0,1,129.53263,55.14072Z"/><path class="cls-116" d="M126.2201,55.295c-.83557.17525-1.69283.15786-2.53485.28255a5.78792,5.78792,0,0,1-.68052-.04761,14.8899,14.8899,0,0,0-1.7585.05914,6.69873,6.69873,0,0,1-1.825-.11145,1.07719,1.07719,0,0,0-.67359.04786c-.09518-.12555-.37526-.11636-.3201-.32806.0561-.2153.29428-.14808.46422-.17283,1.01757-.14824,2.04392.067,3.06213-.07273a.34275.34275,0,0,1,.26035.03487c1.18292.05267,2.36188-.07612,3.54363-.07739a14.21488,14.21488,0,0,0,2.255-.258c.45813-.07276.91133-.02082,1.36568-.04976q-1.35383.30794-2.7079.6148C126.5221,55.2498,126.37036,55.26912,126.2201,55.295Z"/><path class="cls-117" d="M90.7838,11.625c-.65286.02107-1.26571-.23923-1.91288-.26913-.39047-.018-.77909-.0762-1.16854-.11633-.17687-.20337-.47009-.16095-.67058-.31864-.11724-.09221-.26724-.14581-.33072-.29733.29036-.191.59424-.064.899-.06877.57162-.009,1.163.21317,1.72005-.08529.12774-.12347.28053-.083.431-.0685.55444.05351,1.0997.17716,1.65582.21484.707.31757,1.4139.63716,2.14791.89223.18534.21342.42657.39713.39224.72907a.52421.52421,0,0,1-.6131.02593,9.40185,9.40185,0,0,0-1.74439-.42521A5.12161,5.12161,0,0,1,90.7838,11.625Z"/><path class="cls-118" d="M76.4552,44.35823a1.48392,1.48392,0,0,1,.00005,1.15509c-.04277-.02413-.0907-.07533-.12752-.0683a10.96527,10.96527,0,0,1-1.49008-.08536c-.89144-.22478-1.14588-1.07462-1.64689-1.68178a2.85976,2.85976,0,0,1-.20215-.32109c.264-.04644.50984.0886.77035.07683.15983-.10717.26472.02346.37055.09817a.90816.90816,0,0,0,.96278.13093,1.5418,1.5418,0,0,1,.708-.12407A2.42132,2.42132,0,0,1,76.4552,44.35823Z"/><path class="cls-119" d="M75.83892,43.58794c-.35248.09954-.71494.14907-1.064.27912-.27015.10064-.49564-.144-.72548-.26925-.09712-.05291-.15973-.16765-.29045-.16419-.19462-.59916-.58736-1.10247-.81829-1.68528a.67941.67941,0,0,1-.10613-.317c.27824-.14481.46508-.32138.39124-.68808-.05339-.26511.17245-.36948.386-.44764a.469.469,0,0,1,.2995.02266,1.88035,1.88035,0,0,0,.8815.18955.34259.34259,0,0,1,.23836.10766,1.92018,1.92018,0,0,1,.56963,1.20987c.00814.343.24937.606.33757.92306C75.98042,43.03715,76.12693,43.3385,75.83892,43.58794Z"/><path class="cls-120" d="M73.60489,40.35313c-.22284.14185-.38183.28051-.25894.60371.10078.265-.12214.4448-.51141.47447a9.51753,9.51753,0,0,1-1.15215-.92568,4.53532,4.53532,0,0,1-.69673-1.07664.52651.52651,0,0,1,.24968-.04152c.21441.00722.4448-.01274.44462-.32133-.0001-.16164.10667-.17871.23015-.17656a.60374.60374,0,0,1,.54745-.07432.58279.58279,0,0,1,.278.24906,7.37975,7.37975,0,0,0,.7371.92009A.32669.32669,0,0,1,73.60489,40.35313Z"/><path class="cls-121" d="M96.94645,11.00889c.07634.19751.25213.30205.3963.44041a10.77855,10.77855,0,0,1,3.28481,5.7857,21.89474,21.89474,0,0,1,.31663,2.76075,8.23181,8.23181,0,0,1-.06875,1.10253,3.19065,3.19065,0,0,0-.02993,1.09527c.04882,1.23581.09342,2.47278.22712,3.70342.08268.76106.23517,1.51353.29044,2.27816.01332.18431.11427.37585-.03419.55042-.22122.00845-.21957-.17486-.2587-.31236a21.32067,21.32067,0,0,1-.6968-4.62259c-.02978-.50977-.04636-1.0228-.1183-1.53084a14.50825,14.50825,0,0,1,.05745-1.64784,11.27551,11.27551,0,0,0-1.82182-6.37145,6.98664,6.98664,0,0,0-2.05228-1.94234,5.75763,5.75763,0,0,0-.55767-.33859,12.17131,12.17131,0,0,0-2.6499-1.34316,3.08933,3.08933,0,0,1-.60928-.27114c-.09224-.06838-.24185-.09416-.22-.26074a.283.283,0,0,1,.10249-.02473c.98157.16281,1.96725.306,2.94171.50417a5.85108,5.85108,0,0,1,1.12846.43163C96.70745,11.05356,96.816,11.14553,96.94645,11.00889Z"/><path class="cls-122" d="M92.40154,10.0845a3.91252,3.91252,0,0,0,.84739.46209c-.02917.21065-.20336.18066-.32376.159a1.58036,1.58036,0,0,0-1.11842.03992.38748.38748,0,0,1-.32963-.04474c-.73053.03045-1.43226-.20769-2.157-.23124-.89261-.2817-1.78842-.55382-2.67653-.849-.45645-.15173-.996-.17058-1.25228-.69135.16061-.266.37457-.1312.57782-.07692s.41723.189.57772-.07707a16.072,16.072,0,0,0,4.11061.94118A11.04484,11.04484,0,0,1,92.40154,10.0845Z"/><path class="cls-123" d="M122.21426,54.98669a3.71864,3.71864,0,0,0-1.13346.125,1.66174,1.66174,0,0,1-.8351-.00155,12.336,12.336,0,0,0-1.82836.03217c.13519.18532.35252.187.33032.38318-.98146-.00488-1.95223-.14532-2.92734-.23069a2.93279,2.93279,0,0,1-1.29309-.24859,24.0785,24.0785,0,0,1-6.52229-3.313,22.52266,22.52266,0,0,1-3.18279-2.7161c-.11391-.11828-.25693-.21793-.28662-.39771.08568-.22456.20132-.074.28944-.01215a9.694,9.694,0,0,1,.9427.78917,17.80193,17.80193,0,0,0,2.48592,1.86735c.84068.53217,1.67774,1.06678,2.56633,1.51559.05352.00859.02721-.07915.02267-.028-.00184.02061-.014.02817-.03386.01782a12.55141,12.55141,0,0,1-3.03619-1.99325c-.07666-.0741-.196-.14526-.095-.284.17513-.0507.28654.07628.41586.15044.69875.40069,1.35552.87247,2.06567,1.252a21.86418,21.86418,0,0,0,5.46435,2.189c.122.02753.25784.02643.351.1332a3.76769,3.76769,0,0,0,1.40728.28656c.923.01034,1.83225.17228,2.75263.17537a8.92557,8.92557,0,0,0,1.6075.23427C121.90006,54.91712,122.07517,54.84841,122.21426,54.98669Z"/><path class="cls-124" d="M123.06165,59.0687a20.52446,20.52446,0,0,0,3.19693-.27309c.67143-.08712,1.32992-.2265,1.99532-.33548.18289-.03.32545-.15329.50837-.162a15.727,15.727,0,0,1,2.71806-.55179,3.01193,3.01193,0,0,1,.97964.013c-.01365.135-.10717.16341-.218.1523a3.39913,3.39913,0,0,0-.56287.07173c-.2968.01815-.3409.1897-.27218.41574a.41.41,0,0,1-.02544.36148,1.94561,1.94561,0,0,1-.61779.155c-.97528.23079-1.93789.51508-2.92584.69241a.49635.49635,0,0,1-.38358.15048,8.7551,8.7551,0,0,0-1.98592.13729c-.855.09549-1.71548-.00467-2.56648.13048a4.2281,4.2281,0,0,1-.99336-.07042c-.54843-.043-1.096-.08624-1.64709-.08528a1.587,1.587,0,0,1-.70942-.14224c-.08478-.28551.13454-.27346.2964-.28043.99384-.0428,1.96674-.30308,2.96651-.28258A.42788.42788,0,0,0,123.06165,59.0687Z"/><path class="cls-125" d="M78.227,14.16705a1.8593,1.8593,0,0,0-.97814-.23746c-.12913.02254-.183-.07447-.17482-.193.01-.14491-.10247-.228-.15664-.34019.62471-.00873,1.24681-.06873,1.86755-.10927.74871-.04889,1.47027-.24823,2.21532-.27595a14.70159,14.70159,0,0,1,2.54217-.23095c.59285.069,1.11293.40551,1.71295.46024.17083.01559.41944.04543.32235.349a15.5069,15.5069,0,0,1-2.41548.06968,6.04938,6.04938,0,0,0-1.63247.20286,22.30777,22.30777,0,0,1-2.26751.40507.53733.53733,0,0,1-.26494-.02344A2.13132,2.13132,0,0,1,78.227,14.16705Z"/><path class="cls-126" d="M85.62261,13.55a.362.362,0,0,0-.33807-.21712c-.58856.042-1.049-.38044-1.61123-.42479-.04669-.00368-.08737-.08344-.13085-.12785a11.6074,11.6074,0,0,1,1.87426-.07909.20518.20518,0,0,0,.2057-.075,15.21682,15.21682,0,0,1,1.53273.27239c.09.00665.17206.05056.23965-.04118a5.30563,5.30563,0,0,1,1.8887.35177,2.10033,2.10033,0,0,1,.66187.27046c.03908.16491.05467.33675.22024.446.08217.0542.15563.14229.01255.22591a6.38465,6.38465,0,0,1-1.71311-.17235,4.64876,4.64876,0,0,0-1.33938-.06467,2.08746,2.08746,0,0,1-.94524-.08354C85.98685,13.75286,85.76066,13.73856,85.62261,13.55Z"/><path class="cls-127" d="M121.4439,56.21938a40.81437,40.81437,0,0,0,5.42083-.45068c.37126-.07688.75122-.11167,1.12719-.16586.74569-.0727,1.49087-.15152,2.23734-.215.2798-.02378.56263-.01178.84407-.0161a3.99352,3.99352,0,0,1-1.34923.34551c-.65045.12888-1.247.41855-1.89359.5456a2.55292,2.55292,0,0,0-.84005.18716,3.38119,3.38119,0,0,1-1.234.13583c-1.31786.01657-2.63282.15239-3.95188.09534a.24214.24214,0,0,1-.20661-.07713C121.46252,56.50952,121.33469,56.41189,121.4439,56.21938Z"/><path class="cls-128" d="M119.51877,59.68505c.95944.11689,1.93072.05908,2.88936.21626a14.28581,14.28581,0,0,0,1.75486-.06939,14.52464,14.52464,0,0,0,2.61953-.21353,7.99256,7.99256,0,0,0,1.05533-.01036c-.004.41265-.28963.49954-.61956.5369-.20627.02336-.41673.04275-.45894.30993a12.3114,12.3114,0,0,0-2.0816.25287,20.84851,20.84851,0,0,1-2.84916.13207c-.10248.00287-.20509.00085-.30765.0011a.37166.37166,0,0,1-.32711.06824,1.55144,1.55144,0,0,0-.8325.07023.76175.76175,0,0,1-.41829.02823c-.84072-.17638-1.70561-.20619-2.53989-.42113a.8116.8116,0,0,1-.452-.19091c-.10513-.58545.16787-.90354.73133-.84752a16.22878,16.22878,0,0,1,1.64339.10842A.78524.78524,0,0,1,119.51877,59.68505Z"/><path class="cls-129" d="M75.29962,15.93791a1.37171,1.37171,0,0,1-.07661-.462c.51642.14195.95246-.20867,1.44-.23491.3805-.02047.73169-.18122,1.09578-.23117.41541-.057.83219-.13,1.2526-.16186.23984-.01818.36424-.12127.217-.37317a.809.809,0,0,1,.69893-.08465,2.22517,2.22517,0,0,0,.91149-.049,7.08118,7.08118,0,0,1,2.4303-.27232c.55868.05647,1.11338.15159,1.677.15455a4.18994,4.18994,0,0,1,1.40915.63054c.07151.06953.19628.05132.28754.09326.10277.04724.27232.05761.19431.25073a.60389.60389,0,0,1-.48361.034,10.35961,10.35961,0,0,0-5.80369.56027,16.86327,16.86327,0,0,1-3.91728,1.06251C75.85166,16.95213,75.42019,16.65506,75.29962,15.93791Z"/><path class="cls-130" d="M85.006,14.32051a11.5939,11.5939,0,0,1-1.66771-.13127,4.7051,4.7051,0,0,0-2.10992.20177,6.41311,6.41311,0,0,1-1.99984.08376.48417.48417,0,0,1-.23112-.23112c.6507-.23468,1.35874-.178,2.01223-.38646a11.63945,11.63945,0,0,1,3.71422-.30108c.29994.00265.59915-.15884.8988-.00615l.53906.15462a2.94958,2.94958,0,0,0,1.01242.43073c.10953.04168.26143-.006.31.15624-.026.04622-.06286.09262-.113.09473a4.70771,4.70771,0,0,1-1.95877.00618A.69194.69194,0,0,0,85.006,14.32051Z"/><path class="cls-131" d="M70.36945,19.86586a1.414,1.414,0,0,1,.61618-.23094.51892.51892,0,0,1,.41518.142,2.05349,2.05349,0,0,0,.81834.43734,2.13243,2.13243,0,0,1,.58435.82824c-.03776.17558-.14744.322-.19981.4923a.22788.22788,0,0,1-.22359.1786c-.53447-.03143-.7842.34-1.036.71283-.24.08907-.37944.362-.6662.36643-.01406-.18825-.16177-.27269-.28821-.37572a1.249,1.249,0,0,1-.59139-.78188c-.03654-.23094-.30154-.38934-.5075-.53736,0-.11467-.00277-.22942.0007-.344.00642-.21251-.08533-.42476.32854-.40342A.74106.74106,0,0,0,70.36945,19.86586Z"/><path class="cls-132" d="M68.67462,25.48821c.005-.01159.01588-.024.01432-.03465a1.02571,1.02571,0,0,1,.371-.88927,3.63165,3.63165,0,0,0,1.00127-.15422,1.70323,1.70323,0,0,1,1.064,1.08381c-.10466.59643.042.86277.62681,1.10948.1427.06019.3014.08762.31578.2847a1.21213,1.21213,0,0,1-.50739.81725,3.03818,3.03818,0,0,1-1.73034-.29168,12.45671,12.45671,0,0,0-.41229-1.30134C69.3238,25.78783,68.90458,25.72309,68.67462,25.48821Z"/><path class="cls-133" d="M70.67792,22.79262c.20927-.1222.33855-.37224.61609-.38532.11895-.08783.21754-.00852.32023.03875a6.24089,6.24089,0,0,0,1.77016.48329.76874.76874,0,0,0,.688-.1318.19643.19643,0,0,1,.218-.02684c.089.09736.04381.189-.011.28056a1.92469,1.92469,0,0,1-1.09005.7075c-.38026.09048-.69568.36374-1.09007.43243a3.6154,3.6154,0,0,1-1.65278-.39739A1.94226,1.94226,0,0,1,70.67792,22.79262Z"/><path class="cls-134" d="M70.44644,23.7938a12.25887,12.25887,0,0,0,1.69478.30828,4.64569,4.64569,0,0,1,1.01823.4373c.14867.10327.29793.21213.26788.43a.46216.46216,0,0,1-.325.28368,14.99121,14.99121,0,0,0-1.681.28775.35364.35364,0,0,1-.35867-.0524,2.856,2.856,0,0,0-1.00146-1.07836C70.19493,24.20794,70.22075,23.93844,70.44644,23.7938Z"/><path class="cls-135" d="M75.29962,15.93791c.12116.26612.38376.43386.48741.716.06139.16709.22888.12783.365.13052.15236.003.30482.00065.45724.00062a1.43989,1.43989,0,0,1,1.03941.12339,1.12717,1.12717,0,0,0,.81812.01084c.88143-.27044,1.75143-.57255,2.62151-.87656a9.73823,9.73823,0,0,1,2.83516-.44126.71685.71685,0,0,1,.44723.07409c.01053.313-.26029.303-.43856.33543-.80331.14617-1.56859.43-2.35851.62254a4.006,4.006,0,0,0-.91164.37925A14.216,14.216,0,0,1,76.99864,18.468a8.39357,8.39357,0,0,0-1.22334.32913,1.00475,1.00475,0,0,1-.74961.03751c-.1281-.10081-.04571-.26407-.11585-.38575a1.746,1.746,0,0,0-.5718-.72886c-.209-.1269-.504-.27152-.42519-.62682a.29768.29768,0,0,0,.03291-.40308.98148.98148,0,0,1-.1868-.67515Z"/><path class="cls-136" d="M73.91285,17.09325a.72834.72834,0,0,0,.44519.53009c.38091.15209.44809.51128.65572.77485.10325.13107.04184.26261-.02223.38932a.6866.6866,0,0,0-.22372.73057.30624.30624,0,0,1-.09269.30879,7.73889,7.73889,0,0,1-1.68485.0677,1.45467,1.45467,0,0,1-.7722-1.41518c.188-.30169-.06786-.56313-.07684-.84695a1.34323,1.34323,0,0,0,.6573-.429C73.16245,16.7754,73.5226,16.92236,73.91285,17.09325Z"/><path class="cls-137" d="M69.83015,27.41363a10.3291,10.3291,0,0,0,1.77182.231c.09534-.0641.15126-.02555.18529.07082a9.66333,9.66333,0,0,1-.38909,1.39885,1.69681,1.69681,0,0,1-2.261-.69921,1.389,1.389,0,0,0-.07764-.46219C69.38744,27.87459,69.54109,27.54741,69.83015,27.41363Z"/><path class="cls-138" d="M69.44479,34.57706a.89927.89927,0,0,0,.4624-.38565c.01953-.01637.04418-.04384.06229-.039.50975.13677,1.07878.13871,1.43773.62331a2.78493,2.78493,0,0,0,1.05418,1.881.328.328,0,0,1,.10074.16154c-.03917.22157.15442.48082-.1068.66718a.31824.31824,0,0,1-.22291.01483,11.90535,11.90535,0,0,1-1.70876-.6902,3.97793,3.97793,0,0,0-.54053-.82454c-.1845-.221-.17829-.54563-.336-.8005A2.67873,2.67873,0,0,1,69.44479,34.57706Z"/><path class="cls-139" d="M70.52366,36.81006a8.1717,8.1717,0,0,1,1.52424.536.90461.90461,0,0,0,.40146.08046c.16816.29523.38618.55857.54867.85745.07316.13457.15918.26849.00611.40645a2.631,2.631,0,0,1-.47793.19927l-.6161-.00009-1.38682-1.30933C70.492,37.32351,70.65,37.06685,70.52366,36.81006Z"/><path class="cls-140" d="M69.13721,28.41514c.2062.16753.41854.32812.6172.50415a1.0914,1.0914,0,0,0,1.08934.24518,1.9777,1.9777,0,0,1,.52711-.05633c.23669-.10734.32333.08034.40326.22737a1.73813,1.73813,0,0,1,.241,1.05508,1.05531,1.05531,0,0,0-.729.45984.37083.37083,0,0,1-.37417.15443,6.90629,6.90629,0,0,0-1.365-.59885.42318.42318,0,0,1-.25581-.21941c-.17707-.145-.18946-.40761-.38517-.53932A9.638,9.638,0,0,1,69.13721,28.41514Z"/><path class="cls-141" d="M71.37086,34.80766a3.89661,3.89661,0,0,0-1.46367-.61625l-.462-1.46352a6.961,6.961,0,0,0-.07723-1.155c.11189-.09062.22345-.0362.3221.01624.28527.15167.61438.17636.9013.32058.199.29856.617.40518.70583.80118a1.80527,1.80527,0,0,0,.44777,1.79709.17341.17341,0,0,1,.028.14581A.54634.54634,0,0,1,71.37086,34.80766Z"/><path class="cls-142" d="M70.60051,31.958a4.82858,4.82858,0,0,1-1.23257-.38519,2.1396,2.1396,0,0,1-.07685-1.38625,5.79434,5.79434,0,0,1,1.61794.77019C70.87408,31.31145,70.9232,31.692,70.60051,31.958Z"/><path class="cls-143" d="M72.21807,18.47939c.16053.49322.24221,1.03281.77054,1.30975.03492.183-.09473.25465-.22715.297a2.66194,2.66194,0,0,1-.54339.16507,1.00245,1.00245,0,0,1-.81772-.37536c-.09727-.13478-.31726-.08825-.41472-.24094-.0336-.4874-.28587-.96334-.07679-1.46348A1.85149,1.85149,0,0,1,72.21807,18.47939Z"/><path class="cls-144" d="M100.10509,51.21275a4.98266,4.98266,0,0,0,.72812,1.20217c.37854.58814.79643,1.151,1.19757,1.72456-.50371.249-.50371.249-.34674.7912-.04735.053-.098.02748-.13193-.00836a.94587.94587,0,0,0-1.18206-.21984.81882.81882,0,0,1-.56668.042,9.15052,9.15052,0,0,0-2.32974-.14268,5.92572,5.92572,0,0,1-1.14665-.06675c-.29734-.06987-.57225-.01442-.61449.37728-.02863.26556-.23411.21392-.409.22976a11.26842,11.26842,0,0,1-4.47769-.5614c-.08328-.02656-.20151-.07492-.2562-.03972-.65758.42334-1.18559-.09726-1.75671-.24284a10.13328,10.13328,0,0,0-1.49222-.48264c-1.47344-.12828-2.53353-1.1225-3.79438-1.68909a.48716.48716,0,0,1-.272-.35672,1.03539,1.03539,0,0,0-.52759-.6637,1.13787,1.13787,0,0,1-.6104-.69487c-.05191-.23085-.40007-.26674-.49973-.5077a.35379.35379,0,0,1-.00307-.26082,1.01653,1.01653,0,0,0-.09507-1.06331A.65742.65742,0,0,1,81.921,47.663a.80954.80954,0,0,1,.83549.36132,4.57442,4.57442,0,0,0,1.4204.89808A23.07867,23.07867,0,0,0,88.442,50.66466a2.60935,2.60935,0,0,0,2.10325-.17611.83141.83141,0,0,1,.41216-.07145,12.00146,12.00146,0,0,0,1.68886-.06774,1.03888,1.03888,0,0,1,.778.13946.22891.22891,0,0,0,.14283.05232A4.946,4.946,0,0,0,95.84,50.11726a12.36668,12.36668,0,0,0,1.89609-1.23368.50978.50978,0,0,1,.3907-.13406.24987.24987,0,0,1,.17169.07361A16.27471,16.27471,0,0,1,100.10509,51.21275Z"/><path class="cls-145" d="M81.92453,47.74688c-.26091.0619-.528.66281-.32626.8288.42511.34981.24093.70347.11046,1.07762-.02926.08388-.06136.16677-.09215.25012a1.28872,1.28872,0,0,0-1.2322,0,3.17914,3.17914,0,0,1-.61665-1.00127,2.35618,2.35618,0,0,1,.31661-.52354c.07263-.08.16165-.22983.13212-.30373-.15419-.386.10372-.64655.24459-.94418a.35738.35738,0,0,1,.55621-.14148,4.28957,4.28957,0,0,0,.696.52916C81.8,47.57334,81.94637,47.58671,81.92453,47.74688Z"/><path class="cls-47" d="M115.97439,61.91841a11.06617,11.06617,0,0,0,2.3839.61783,8.48555,8.48555,0,0,0,1.63858.07419.82912.82912,0,0,1,.44557.07836,3.5031,3.5031,0,0,1-1.08,1.16659c-.17192.10065-.36243.26187-.22956.52765a2.89727,2.89727,0,0,0-1.36558-.39452,2.05221,2.05221,0,0,1-1.03642-.47209,13.55661,13.55661,0,0,0-1.53858-.76812c-.28516-.13652-.46114-.432-.76-.56375-.39778-.17532-.78555-.37331-1.183-.54944a21.96656,21.96656,0,0,1-4.65882-2.93614,17.10949,17.10949,0,0,1-2.90691-2.71212,2.69424,2.69424,0,0,0-.34-.307,3.1238,3.1238,0,0,0-.52624-.8379.39546.39546,0,0,1-.12062-.4523c.1894-.0974.27241.06948.37645.16166a3.55281,3.55281,0,0,1,.39885.41105,31.07431,31.07431,0,0,0,5.35635,4.51423,21.91871,21.91871,0,0,0,2.99908,1.62931,14.47057,14.47057,0,0,0,1.90513.706A.48452.48452,0,0,1,115.97439,61.91841Z"/><path class="cls-146" d="M104.7274,54.37053a.732.732,0,0,0,.28856.56028.96309.96309,0,0,1,.32754.749,15.10068,15.10068,0,0,1-1.80342-1.82613.34356.34356,0,0,0-.27654-.17637c-.854-1.022-1.67-2.07408-2.48286-3.12881a3.69371,3.69371,0,0,1-.29061-.4909,1.358,1.358,0,0,0-.34955-.67117c-.16578-.22956-.33882-.47429-.07451-.75345.26223-.06715.36792.13543.48123.29718.63841.91129,1.31151,1.79682,2.007,2.66433.61528.76746,1.24286,1.5257,1.89928,2.25934C104.585,54.00079,104.76182,54.13211,104.7274,54.37053Z"/><path class="cls-147" d="M100.10509,51.21275a5.68051,5.68051,0,0,1-.90864-1.16963A10.79138,10.79138,0,0,1,98.17892,48.825a1.05136,1.05136,0,0,1-.45972-.59193,1.28384,1.28384,0,0,0-.27659-.49995,15.0151,15.0151,0,0,1-1.31507-1.54588c-.06787-.23957-.10312-.48568-.147-.7301a2.51917,2.51917,0,0,0,.33105-1.02076c.25885-.05276.32856.16887.41535.3188.45568.78723,1.00525,1.51126,1.50415,2.269.38831.51016.79652,1.00515,1.17556,1.522.105.14319.28081.28676.15944.5102a.50037.50037,0,0,0,.156.341c.43729.38889.41907.9636.60072,1.45518C100.38534,51.02188,100.24705,51.13358,100.10509,51.21275Z"/><path class="cls-148" d="M99.56612,49.0564a5.28542,5.28542,0,0,0-.94163-1.36251c-.14494-.21576-.29677-.4269-.44548-.64014a19.50347,19.50347,0,0,0-1.44784-3.11088.952.952,0,0,1-.113-.28312,7.77129,7.77129,0,0,0-.24572-.87524.58052.58052,0,0,1-.00645-.47779c.252-.11649.29407.11617.4018.2404.53991.71528.92071,1.53028,1.4204,2.271a2.0609,2.0609,0,0,1,.28539.5401,2.68963,2.68963,0,0,0,.29075.62424.7056.7056,0,0,1,.13052.233c.10729.806.74629,1.31179,1.10508,1.97487.08046.14871.25011.28128.10513.48059-.22049.34759.04261.56244.22171.79812.13356.17575.35169.32483.16327.58861a2.3225,2.3225,0,0,1-.627-.74489C99.78391,49.20517,99.744,49.0503,99.56612,49.0564Z"/><path class="cls-149" d="M101.26062,28.72314c.15986-.12858.01118-.26117-.00215-.38731a43.448,43.448,0,0,1-.4752-5.73687c.01-.37322-.061-.759-.0624-1.14135-.00052-.14341-.00688-.28673.15457-.35933.00179.20456.09.394.081.60472a21.265,21.265,0,0,0,.31808,3.76392,27.71887,27.71887,0,0,0,.75415,3.81531,25.51912,25.51912,0,0,0,1.08076,3.13783c-.20517.02849-.28611-.10579-.36529-.2619a9.393,9.393,0,0,1-.56178-1.32248c-.06345-.19362-.13411-.38925-.38216-.41821a.25658.25658,0,0,1-.21793-.134A3.12,3.12,0,0,1,101.26062,28.72314Z"/><path class="cls-150" d="M101.26062,28.72314q.12164.54068.2434,1.08133a1.06425,1.06425,0,0,0,.29622.613,17.661,17.661,0,0,0,.85642,2.33428,14.88147,14.88147,0,0,0,1.02441,1.97389,12.918,12.918,0,0,0,3.11417,3.60388c.22673.17545.55038.298.62784.637-.50916-.10373-.79692-.52666-1.16347-.82752-.70538-.579-1.3827-1.19209-2.07165-1.791a.35728.35728,0,0,1-.20209-.16663,23.6376,23.6376,0,0,1-1.8428-3.00233c-.41545-.80942-.70368-1.66765-1.09124-2.48657a9.877,9.877,0,0,1-.57418-2.25864c-.02052-.1002-.04231-.19986-.068-.29916a45.591,45.591,0,0,1-.52229-4.92912c-.03771-.75925.102-1.5.0374-2.25348A13.97517,13.97517,0,0,0,98.86848,16.133,7.65612,7.65612,0,0,0,97.664,14.3102a1.48206,1.48206,0,0,1-.30113-.44205c-.02642-.05718-.03081-.13418-.07381-.17333-.47456-.43208-.71443-1.05353-1.19808-1.47779-.10946-.096-.26583-.16867-.22286-.36107A7.32692,7.32692,0,0,1,98.0605,13.5547a8.86827,8.86827,0,0,1,2.085,4.478,11.14262,11.14262,0,0,1,.20032,3.68444,6.748,6.748,0,0,0,.08673,1.48676c.062.73339.11446,1.47.19032,2.20332a13.58749,13.58749,0,0,0,.4401,2.46364C101.14526,28.1501,101.19565,28.43876,101.26062,28.72314Z"/><path class="cls-151" d="M100.49026,28.18391c.10771.44123.24089.87806.31783,1.32459a12.983,12.983,0,0,0,.9628,2.60282,17.62735,17.62735,0,0,0,2.21771,3.9106c.07553.102.13333.21707.19936.32607a4.31788,4.31788,0,0,0,.83719,1.17079,16.68366,16.68366,0,0,0,3.65157,3.13243,6.78227,6.78227,0,0,1,1.13483.70308,4.13863,4.13863,0,0,1-1.28306-.65351,14.23841,14.23841,0,0,1-2.66756-2.03461,2.79517,2.79517,0,0,0-.49951-.27079,3.61411,3.61411,0,0,1-1.00977-1.0326c-.08336-.11793-.15441-.23708-.31776-.24455a1.96222,1.96222,0,0,1-.69341-.72895,21.65015,21.65015,0,0,1-1.78423-3.255,1.13623,1.13623,0,0,1-.0955-.36982c-.06667-.31476-.26118-.58765-.31978-.89921-.21437-1.13974-.59449-2.241-.77525-3.38757C100.34823,28.36669,100.28336,28.21076,100.49026,28.18391Z"/><path class="cls-152" d="M101.56876,32.80506a.81993.81993,0,0,0,.03922.22274,19.489,19.489,0,0,0,2.1083,3.70083c.10421.13114.31594.17708.31761.3896a7.6069,7.6069,0,0,0,.844,1.10886,17.30827,17.30827,0,0,0,1.96089,1.96693c.09861.09786.18464.20839.27649.31306a3.29766,3.29766,0,0,1-.94965-.692c-.50943-.43975-.96233-.9396-1.50316-1.35082a12.59356,12.59356,0,0,1-1.512-1.72851,9.34923,9.34923,0,0,1-.96548-1.46609,4.68342,4.68342,0,0,1-.86152-1.52969,19.512,19.512,0,0,1-1.2481-3.792c-.02741-.14933-.09182-.29863.00681-.44577.20467-.03.20571.14581.24482.26108.07761.22874.12344.46741.183.70183a.72925.72925,0,0,0,.09234.28925A12.84074,12.84074,0,0,1,101.56876,32.80506Z"/><path class="cls-153" d="M100.10652,29.49368a14.97194,14.97194,0,0,0,.84808,3.05317,23.0404,23.0404,0,0,0,1.23044,2.72283.2548.2548,0,0,1-.23539-.16061c-.09509-.189-.23416-.15286-.3807-.07036-.29742-.05915-.36626-.329-.46649-.54568-.16515-.357-.29836-.72909-.47866-1.08047a32.534,32.534,0,0,1-1.11739-3.55191,41.22811,41.22811,0,0,1-.71808-5.01551c-.04535-.54345-.04311-1.0956-.0377-1.64631a10.6171,10.6171,0,0,0-2.27969-7.20427,11.752,11.752,0,0,0-2.502-2.14428c-.12459-.08452-.28213-.13445-.3348-.3a.52662.52662,0,0,0-.32035-.607,12.774,12.774,0,0,0-1.80592-.90866,3.02878,3.02878,0,0,1-.724-.40957,12.5179,12.5179,0,0,1,2.48618.49225c.23494.07836.43439.201.67227.04718a.208.208,0,0,1,.1838.02318c2.10925,1.2313,3.95136,2.71364,4.80969,5.11986a8.8222,8.8222,0,0,1,.60349,2.7228,14.08481,14.08481,0,0,0,.118,1.91415,6.71133,6.71133,0,0,1-.06535,1.10949,30.54062,30.54062,0,0,0,.50652,5.84273C100.1364,29.0906,100.22423,29.29354,100.10652,29.49368Z"/><path class="cls-154" d="M100.72137,33.42118c.3386.50981.39472,1.16757.84758,1.61753a1.07836,1.07836,0,0,0,.23959.58961c.17916.28984.35406.58231.53076.87367-.13727.13092-.0735.25152.01922.37044a20.01592,20.01592,0,0,0,1.634,2.42364.50389.50389,0,0,1,.19541.44072l-.61583-.53894a2.054,2.054,0,0,1-.70358-.73765,20.12785,20.12785,0,0,1-2.76914-4.89433,18.05126,18.05126,0,0,1-.89768-2.65252.5774.5774,0,0,1-.02106-.41274c.21-.0957.27073.05775.32051.20349.074.21651.14395.43459.213.65281a1.659,1.659,0,0,0,.38207.69074,2.62906,2.62906,0,0,1,.38517.902A1.85154,1.85154,0,0,0,100.72137,33.42118Z"/><path class="cls-155" d="M100.18212,33.57544a22.53537,22.53537,0,0,0,2.2789,4.17267c.35207.49623.73969.96723,1.11111,1.44974.11575.55441.58173.86189.91744,1.24947a20.67708,20.67708,0,0,0,5.42126,4.33327,16.94068,16.94068,0,0,0,4.34035,1.921,1.03137,1.03137,0,0,1,.49064.19809,10.14386,10.14386,0,0,1-1.65693-.44128,16.416,16.416,0,0,1-3.18314-1.29667,13.39793,13.39793,0,0,1-3.71765-2.46464c-.24154-.22765-.49577-.44177-.74064-.666a23.40167,23.40167,0,0,1-3.24736-3.81852,1.01093,1.01093,0,0,0-.319-.32419,17.20707,17.20707,0,0,1-1.75331-3.34878,1.04946,1.04946,0,0,1-.10729-.51927A.77949.77949,0,0,1,100.18212,33.57544Z"/><path class="cls-156" d="M101.80005,39.968a1.17328,1.17328,0,0,0,.27255.54195c.48714.57207.8881,1.2119,1.41106,1.75744.40606.4236.77891.879,1.16652,1.32032-.415-.1679-.63068-.5624-.95008-.83916a1.67411,1.67411,0,0,0-.66748-.47007,1.67155,1.67155,0,0,0-.4624-.46212,3.61646,3.61646,0,0,1-.77946-.81978,26.08007,26.08007,0,0,1-1.78526-2.82529,3.16931,3.16931,0,0,1-.48909-1.11533.61119.61119,0,0,1,.20112-.33883c.12937-.006.17013.09474.21372.18484a22.90586,22.90586,0,0,0,1.74708,2.76671C101.73971,39.75978,101.84793,39.83235,101.80005,39.968Z"/><path class="cls-157" d="M116.74474,51.21275a9.63628,9.63628,0,0,1-1.53348-.04933,10.50278,10.50278,0,0,1,1.17739.43076c.06743.0304.16981.0362.14413.13715-.02432.09554-.10946.06884-.19.056-.27586-.04384-.55359-.07593-.83061-.11251-.14822.13651-.31108.07454-.47163.03374a21.87417,21.87417,0,0,1-5.10378-2.09381,20.27968,20.27968,0,0,1-3.75281-2.453,12.22682,12.22682,0,0,1-1.66-1.52868,7.24028,7.24028,0,0,0-.82364-.90293c-.68966-.83256-1.37484-1.669-2.03206-2.52764-.08128-.1062-.18853-.2199-.11878-.38038.16162-.07268.27513.06429.41355.09393a6.80131,6.80131,0,0,1,1.20546,1.28187,21.82971,21.82971,0,0,0,2.456,2.37912c.98848.81129,2.0494,1.52944,3.10853,2.24679a21.04338,21.04338,0,0,0,6.164,2.75979,1.04783,1.04783,0,0,0,.15288.01331c.10908.192.31071.18895.49.22969A3.625,3.625,0,0,1,116.74474,51.21275Z"/><path class="cls-158" d="M108.73305,47.8239a9.77984,9.77984,0,0,1-1.76558-1.12318,20.17726,20.17726,0,0,1-3.54554-3.07676c-.50837-.533-.97981-1.10118-1.468-1.65342a21.70644,21.70644,0,0,1-1.60361-2.426c-.05946-.1107-.14964-.21218-.1027-.35367.24917-.10151.30685.109.38813.25245a9.01009,9.01009,0,0,0,1.24095,1.52585l.69351.84721c-.01454.3458.315.4952.448.76425.18871.38164.60516.60642.872.93a10.93529,10.93529,0,0,0,1.32005,1.43018c.54175.45877,1.08962.91418,1.63653,1.36681a5.73277,5.73277,0,0,1,1.14776.92735C108.18288,47.49425,108.55624,47.53915,108.73305,47.8239Z"/><path class="cls-159" d="M104.57314,45.59034c.57724.59647,1.22586,1.113,1.85486,1.65122a24.51107,24.51107,0,0,0,4.83039,2.95352A18.61123,18.61123,0,0,0,115.169,51.649a1.89494,1.89494,0,0,0,.34313.02589,6.35246,6.35246,0,0,0,1.49041.45642c.11737.028.22662.03625.28141.15973a8.78622,8.78622,0,0,1-1.6261-.05771c.219.25549.53522.22074.81059.27931a.50818.50818,0,0,1,.43033.31735,13.76889,13.76889,0,0,1-4.052-.98877c-.55248-.22808-1.09925-.47-1.64861-.70565a14.87842,14.87842,0,0,1-2.695-1.53995,34.34456,34.34456,0,0,1-5.002-4.2883c-.42339-.44582-.80175-.92978-1.20866-1.38954a9.34161,9.34161,0,0,0-.75608-1.06162c-.07786-.12537-.21029-.23693-.14275-.41437.25622-.06246.36061.154.48178.2926C102.73828,43.72114,103.68575,44.62734,104.57314,45.59034Z"/><path class="cls-160" d="M100.10509,34.03756a3.815,3.815,0,0,0,.51142,1.384,11.06448,11.06448,0,0,0,1.17137,2.141.4543.4543,0,0,1,.08921.32583c-.25225-.022-.28238-.26131-.39379-.41483-.14545-.20042-.22328-.45156-.45379-.58641-.20083-.04455-.286-.20958-.36468-.36923a28.97375,28.97375,0,0,1-1.42472-3.02837,6.043,6.043,0,0,0-.37657-.625A19.90608,19.90608,0,0,1,98.009,30.049a12.99634,12.99634,0,0,1-.39572-1.90942,18.93417,18.93417,0,0,1-.24229-2.519.92191.92191,0,0,1,.07543-.48725c.31537-.08193.25678.17834.29892.33532.12755.47524.13364.97368.27193,1.44692a16.69761,16.69761,0,0,1,.4072,2.18756,21.95423,21.95423,0,0,0,1.49452,4.47379C99.98719,33.7287,100.02264,33.89244,100.10509,34.03756Z"/><path class="cls-161" d="M98.94988,32.88208a3.07944,3.07944,0,0,1,.65927,1.26919c.36456.81367.78908,1.59632,1.17886,2.39662a2.45075,2.45075,0,0,0,.2415.33929,13.23978,13.23978,0,0,0,1.24742,2.13365c.41276.54791.8159,1.10314,1.21838,1.65868a.81245.81245,0,0,1,.07656.21266,12.161,12.161,0,0,1-2.00871-2.30606c-.19966-.26009-.29618-.60469-.61009-.77463-.23767-.07149-.27059-.30915-.38933-.47764a12.38022,12.38022,0,0,1-1.236-2.67087c-.15643-.42749-.286-.87139-.41908-1.31044A.43387.43387,0,0,1,98.94988,32.88208Z"/><path class="cls-162" d="M100.64448,37.3492l.30859.46228a7.74791,7.74791,0,0,0,1.06342,1.76085,18.89517,18.89517,0,0,0,1.30266,1.74622,12.19219,12.19219,0,0,0,1.34522,1.40653.6848.6848,0,0,1,.29395.47739c-.54209-.517-1.09831-1.01829-1.63193-1.54551-.54418-.53765-.98315-1.15848-1.52635-1.68892a22.84119,22.84119,0,0,1-2.08013-3.2349,1.71972,1.71972,0,0,1-.48942-1.14132c.21373-.081.32643.08277.38.218A9.64945,9.64945,0,0,0,100.64448,37.3492Z"/><path class="cls-163" d="M78.84311,43.97313c-.23786-.01886-.29524-.21859-.38593-.38494-.37479-.429-.751-.8568-1.13462-1.27805a.63415.63415,0,0,1-.17468-.28963c-.09282-.47795.333-.7158.4972-1.07518a1.63653,1.63653,0,0,0,.93469-.7178.48984.48984,0,0,1,.4959-.294.27227.27227,0,0,1,.12645.12261,1.28639,1.28639,0,0,0,.55643,1.03713c.42624.3293.40406.82752.44636,1.297a3.00209,3.00209,0,0,1-.82528.994C79.14729,43.53286,79.08678,43.836,78.84311,43.97313Z"/><path class="cls-164" d="M78.84311,43.97313a1.61123,1.61123,0,0,1,.67121-.803c.29432-.17378.31364-.58822.6384-.73743a1.20631,1.20631,0,0,1,.62422.661c.01208.3155.26214.60257.11367.93747a1.0692,1.0692,0,0,0-.53278.735,1.373,1.373,0,0,1-.66714.978l-.46184-.23076a1.29486,1.29486,0,0,1-.304-.94267A2.26283,2.26283,0,0,0,78.84311,43.97313Z"/><path class="cls-165" d="M77.22556,42.04746c.31427.35271.625.70865.94452,1.05657a.83637.83637,0,0,1,.28711.48415,1.78306,1.78306,0,0,0-.67081.40255,2.65305,2.65305,0,0,1-1.33118.3675,2.17132,2.17132,0,0,1-.61628-.77029,1.361,1.361,0,0,0,.00019-.84749,2.41172,2.41172,0,0,0,1.185-.67624A.137.137,0,0,1,77.22556,42.04746Z"/><path class="cls-166" d="M79.69069,45.74427a2.66277,2.66277,0,0,0,.64856-1.28033.44391.44391,0,0,1,.507-.414,1.49509,1.49509,0,0,1,.83516.61191.404.404,0,0,1-.01066.22336.56356.56356,0,0,0-.06044.638.86554.86554,0,0,1-.27963.949c-.14426.09087-.15331.16051-.09459.306.08584.21274.00473.322-.23577.27543-.20491-.15041-.36687-.00027-.53924.077-.19234-.30046-.54252-.50817-.49343-.95009C79.98708,46.00551,79.77458,45.89777,79.69069,45.74427Z"/><path class="cls-167" d="M118.20841,53.83123l-2.07958.07719a21.43971,21.43971,0,0,1-9.80543-5.08971,3.50989,3.50989,0,0,1-.75037-.652c-.06886-.10466-.18308-.18481-.17038-.331.13484-.12091.24309-.019.33575.05661a23.15163,23.15163,0,0,0,2.99227,2.11311.29012.29012,0,0,1,.15646.20611,23.26752,23.26752,0,0,0,5.74114,2.6786c.58768.17538,1.19024.27325,1.78247.41695.51773.12563,1.036.24734,1.55728.35681A.29536.29536,0,0,1,118.20841,53.83123Z"/><path class="cls-168" d="M108.88713,50.2115A25.38448,25.38448,0,0,1,106.27,48.44541a2.78975,2.78975,0,0,0-.84949-.62151.22451.22451,0,0,1-.1964-.084,1.52978,1.52978,0,0,0-.49571-.57882,15.62826,15.62826,0,0,1-2.0097-2.16295c-.50108-.54515-.88632-1.19221-1.39978-1.73354-.11189-.118-.23049-.25109-.1538-.44275.17505-.06949.25437.07706.352.165a7.06194,7.06194,0,0,1,.822.909,10.06659,10.06659,0,0,1,1.02018,1.13332,38.47546,38.47546,0,0,0,3.56418,3.25439,23.058,23.058,0,0,0,4.0794,2.678.35775.35775,0,0,1,.19532.17393c-.20048.12162-.3738.00157-.53672-.08041-.46585-.23443-.92812-.47732-1.37981-.73769A.68561.68561,0,0,0,108.88713,50.2115Z"/><path class="cls-169" d="M105.26665,47.74617a.16041.16041,0,0,1,.15388.07773,12.26179,12.26179,0,0,0,2.07966,1.83588c.452.36928.94206.69524,1.40875,1.05038a15.58254,15.58254,0,0,0,2.92818,1.62164,24.746,24.746,0,0,0,3.77081,1.37526c.169.04742.44022-.09073.5209.20136.10066.17893.05889.28649-.15444.30807a9.81511,9.81511,0,0,1-2.53338-.69278,28.29827,28.29827,0,0,1-5.581-2.91463,1.29086,1.29086,0,0,0-.20547-.08951,3.9207,3.9207,0,0,1-1.03254-.71588,23.28415,23.28415,0,0,1-2.34989-2.14094,13.99846,13.99846,0,0,1-1.99022-2.22493,1.87552,1.87552,0,0,0-.463-.69309c-.22712-.293-.432-.60144-.63254-.91271-.07463-.11587-.168-.2322-.10206-.3875.21039-.07462.29731.09834.39641.21461.75218.88245,1.537,1.73605,2.3081,2.60152.35493.39835.78286.72875,1.168,1.10041A1.629,1.629,0,0,1,105.26665,47.74617Z"/><path class="cls-170" d="M116.97585,60.37765c.99806.273,2.03558.32283,3.0443.53628a.36372.36372,0,0,0,.2278-.0076,1.91248,1.91248,0,0,1,1.273-.06544,1.30328,1.30328,0,0,1-.15407.61541,6.60568,6.60568,0,0,0-1.38317.14062,4.88645,4.88645,0,0,1-1.83716-.09435,12.83936,12.83936,0,0,1-1.64775-.25937c-.08393-.02559-.19486.03728-.2933.05925a32.85015,32.85015,0,0,1-5.2825-2.41462c-.67548-.43881-1.34992-.8781-1.99039-1.36735a28.1494,28.1494,0,0,1-2.55173-2.25018.918.918,0,0,1-.32462-.54359c-.02105-.19786-.182-.32967-.30441-.47648-.10486-.12576-.238-.25024-.1006-.43448.35257.06572.55285.35654.79081.57141a27.67191,27.67191,0,0,0,5.86707,4.12129,25.09582,25.09582,0,0,0,3.64033,1.44947A8.54368,8.54368,0,0,1,116.97585,60.37765Z"/><path class="cls-171" d="M108.96416,57.4513a25.49534,25.49534,0,0,0,4.1366,2.49352,24.55979,24.55979,0,0,0,2.4332.93933,1.38248,1.38248,0,0,1,.67153.4183l-.2311.616a4.00675,4.00675,0,0,1-1.62364-.51864,22.596,22.596,0,0,1-6.25225-3.83142c-.91665-.75691-1.69676-1.65182-2.60566-2.4116-.04209-.03519-.049-.11242-.07231-.17006a1.35261,1.35261,0,0,1,1.07324.38967c.67616.61607,1.33385,1.25181,2.05081,1.82282A2.85631,2.85631,0,0,0,108.96416,57.4513Z"/><path class="cls-172" d="M100.72137,33.42118c-.06633-.05807-.17514-.1056-.19255-.17578-.22067-.88993-.95846-1.54672-1.10734-2.46552-.02455-.15155-.05671-.277-.24044-.2853l-.045-.04312a26.83823,26.83823,0,0,1-.68032-3.6567c-.06464-.63725-.12707-1.27443-.15718-1.91447-.03305-.70224.00474-1.40441-.06228-2.10831a10.98467,10.98467,0,0,0-2.20422-5.89068,9.81962,9.81962,0,0,0-2.63124-2.14272,3.55114,3.55114,0,0,1-.6578-.463,12.09515,12.09515,0,0,1-1.04552-.90667c-.10179-.10058-.26388-.16639-.20781-.35794.00174-.006.01863-.01069.02825-.01032a.14836.14836,0,0,1,.0362.01048,4.24349,4.24349,0,0,1,1.64556.40372c.14531.04341.28963.09016.4344.13538A10.17462,10.17462,0,0,1,97.19088,16.801a10.76909,10.76909,0,0,1,1.62046,5.04694c.08259.94335-.02994,1.88272.063,2.82.06779.68374.16324,1.3648.22687,2.04887a24.38862,24.38862,0,0,0,.705,3.90467C100.05388,31.56966,100.41228,32.489,100.72137,33.42118Z"/><path class="cls-173" d="M91.55415,13.01117c-.08427.0975.01874.15054.06631.17493.40539.20791.56657.713,1.03588.84314a.20632.20632,0,0,1,.13057.21409.39422.39422,0,0,1-.46949.01151,10.92987,10.92987,0,0,0-2.21565-.61463.293.293,0,0,1-.16536-.09007,10.13376,10.13376,0,0,0-2.326-.61869,1.18131,1.18131,0,0,1-.21563-.07414.43534.43534,0,0,1,.23051-.46212,8.3843,8.3843,0,0,1,2.70743.34609.96785.96785,0,0,0,.4146.03265A.93451.93451,0,0,1,91.55415,13.01117Z"/><path class="cls-174" d="M114.89589,56.6039a16.31456,16.31456,0,0,0,2.85031.69354,1.44011,1.44011,0,0,1,.077.53877,4.45242,4.45242,0,0,1-1.51142-.197c-1.17892-.3974-2.39686-.67442-3.54315-1.17418a21.35082,21.35082,0,0,1-3.06146-1.61415c-1.1427-.73754-2.26377-1.50786-3.34754-2.33079a7.14411,7.14411,0,0,0-.86524-.70149c-.31277-.26535-.58858-.56912-.87921-.85755a13.99873,13.99873,0,0,1-1.65877-1.73361,1.59434,1.59434,0,0,1-.15223-.22071c-.27233-.38486-.53633-.77863-.8441-1.13364a20.1804,20.1804,0,0,1-1.373-1.93749c-.08371-.12315-.19264-.24836-.11525-.41981.22161-.07617.31237.095.4348.221.21946.22592.30354.56913.619.71031.55.68982,1.08094,1.39612,1.66023,2.06183a29.49384,29.49384,0,0,0,2.825,2.87657,28.98836,28.98836,0,0,0,3.44731,2.57455,23.204,23.204,0,0,0,4.46836,2.216A2.34933,2.34933,0,0,1,114.89589,56.6039Z"/><path class="cls-175" d="M105.49757,51.75188c.46033.122.69623.54259,1.057.79985a46.70514,46.70514,0,0,0,4.5637,3.01389,25.71434,25.71434,0,0,0,4.738,1.835c.65157.20555,1.33528.1901,1.967.43557l1.38664.15423c-.07258.16216-.21716.16505-.35991.1526a4.15369,4.15369,0,0,0-1.21213-.00574,1.25181,1.25181,0,0,1-.37348-.05965c-.17787-.02375-.34258-.01632-.36555.22067a.24906.24906,0,0,1-.25412.02441,23.26357,23.26357,0,0,1-9.06767-4.4433c-.60591-.49353-1.1309-1.07575-1.77145-1.52977C105.63047,52.22555,105.40571,52.04962,105.49757,51.75188Z"/><path class="cls-176" d="M119.51877,59.68505l-.07779.07664a.69747.69747,0,0,0-.44109-.09522,30.553,30.553,0,0,1-3.15647-.84044c-.14753-.02556-.38266-.05158-.316-.325a.92555.92555,0,0,1,.74109.01719,24.40638,24.40638,0,0,0,3.01845.31944l1.00146-.00038c.33785.04908.679.08207,1.01264.1515a8.45886,8.45886,0,0,0,1.12731.02152,6.17767,6.17767,0,0,0,.63333.05841.40177.40177,0,0,1-.40272.23335,9.3667,9.3667,0,0,0-2.44765.293.61962.61962,0,0,1-.29764-.04682C119.75923,59.51426,119.60331,59.50459,119.51877,59.68505Z"/><path class="cls-177" d="M119.28691,58.83765a1.13843,1.13843,0,0,1-.711.0576,13.45358,13.45358,0,0,0-1.46383-.08177,4.355,4.355,0,0,1-1.072-.228,2.0237,2.0237,0,0,0-.52793-.05531c-.23836.1199-.44948-.01684-.65989-.08442a22.9398,22.9398,0,0,1-7.50126-4.11556c-.80482-.65407-1.526-1.40411-2.37143-2.00836a.97883.97883,0,0,1-.23007-.25645c-.06872-.1087-.15608-.2034-.23421-.30513a17.13829,17.13829,0,0,0-1.15412-1.32978,22.42306,22.42306,0,0,1-1.96393-2.6372.31416.31416,0,0,1-.07656-.353c.24373-.05148.31658.16244.44609.28784.4019.3892.71251.85953,1.11158,1.25129a7.07817,7.07817,0,0,0,1.05072,1.245,16.92634,16.92634,0,0,1,1.56849,1.52755.96228.96228,0,0,0,.35482.53052c1.05238.84906,2.02392,1.79864,3.15316,2.55212a21.9599,21.9599,0,0,0,7.20383,3.2359c.23473.05492.45985.151.68943.2279a8.70273,8.70273,0,0,0,1.6971.37955A2.6949,2.6949,0,0,1,119.28691,58.83765Z"/><path class="cls-178" d="M114.89589,56.6039A26.65089,26.65089,0,0,1,101.4921,46.51457c-.34954-.35084-.57133-.79849-.88862-1.17422a.247.247,0,0,1-.05645-.28076.15762.15762,0,0,1,.22858.062,6.14327,6.14327,0,0,0,.84142.814,44.95065,44.95065,0,0,0,3.74737,4.00281,29.7785,29.7785,0,0,0,4.30436,3.26823c.40111.25.81617.47864,1.20948.7428a5.10977,5.10977,0,0,0,1.283.7577c.76583.28439,1.4138.81409,2.21511,1.04012.43.1213.86332.23532,1.2915.365.13931.04219.31995.03812.30654.26073a2.18,2.18,0,0,1-.73963-.10392c-.117-.02662-.23816-.13848-.35153-.04849C114.73611,56.33743,114.90746,56.474,114.89589,56.6039Z"/><path class="cls-179" d="M115.97439,56.373c-.21065-.24517-.53154-.20472-.799-.29126a7.69652,7.69652,0,0,1-2.25-.90729,4.86,4.86,0,0,0-1.07639-.49272,3.58089,3.58089,0,0,1-1.036-.69632c.14453-.10092.27135-.01313.39324.04638a20.12171,20.12171,0,0,0,5.59609,1.79135.53625.53625,0,0,1,.25054.08775,11.758,11.758,0,0,0,2.33187.17159,5.66067,5.66067,0,0,1,1.475.09827c.199.03231.40394-.1276.58418.03859l.15407.38472c-1.02-.07355-2.035.15589-3.05318.06431C117.68607,56.59116,116.83105,56.47305,115.97439,56.373Z"/><path class="cls-180" d="M117.05288,55.91092a11.43331,11.43331,0,0,1-3.15415-.692,23.39552,23.39552,0,0,1-3.08572-1.23347,31.6403,31.6403,0,0,1-2.8109-1.7696,29.44615,29.44615,0,0,1-4.47017-3.95035,21.72806,21.72806,0,0,1-1.96318-2.28986,8.01355,8.01355,0,0,1-.97895-1.41438c-.07069-.13217-.19-.24929-.12293-.42126.14872-.084.20271.04979.27608.12549a8.75172,8.75172,0,0,1,.95968,1.1439,2.16687,2.16687,0,0,0,.59387.59095c.71311.80519,1.372,1.65947,2.16225,2.39537a.55415.55415,0,0,1,.11438.19831,16.892,16.892,0,0,0,2.30881,2.17622,24.65,24.65,0,0,0,4.8101,3.03613,19.45863,19.45863,0,0,0,4.12827,1.4884.62044.62044,0,0,0,.52139.322C116.593,55.643,116.88769,55.64334,117.05288,55.91092Z"/><path class="cls-181" d="M100.10652,29.49368a30.14923,30.14923,0,0,1-.48572-3.4016A28.004,28.004,0,0,1,99.50005,23.07c.047-.69045-.01217-1.37369-.01015-2.06013A9.37748,9.37748,0,0,0,98.02314,15.733a7.84317,7.84317,0,0,0-1.6996-1.90317c-.76458-.60432-1.60782-1.08239-2.38129-1.66536a2.78723,2.78723,0,0,1-.38518-.61643.99413.99413,0,0,1,.72446.187c.58142.32488,1.19475.58571,1.76736.931a5.48079,5.48079,0,0,1,1.35995,1.11485c.227.41691.60144.71786.86515,1.10763a9.68184,9.68184,0,0,1,1.60365,4.68545c.05263.60753.13942,1.2121.2109,1.818.03539.3-.16719.554-.14311.86122a43.16917,43.16917,0,0,0,.376,4.49083c.08743.47426.11424.95968.16878,1.44-.12906.33331.06346.63814.11336.94786.08841.54876.33347,1.07363.40893,1.6228a13.19244,13.19244,0,0,0,.55621,2.05049,2.46338,2.46338,0,0,1-.52194-1.07723,1.72555,1.72555,0,0,0-.3525-.6156c-.31291-.31632-.286-.773-.42025-1.16388A1.2,1.2,0,0,0,100.10652,29.49368Z"/><path class="cls-182" d="M97.40884,13.7808c-.05838-.02138-.13324-.02652-.17275-.06653a10.97811,10.97811,0,0,0-3.679-2.16627,7.51828,7.51828,0,0,1-1.7354-.62687,1.9514,1.9514,0,0,1-.34455-.22037.66976.66976,0,0,0,.50184-.12867c.23352-.19571.48779-.06125.73018-.01018.1842.0388.36339.13374.53979-.01532A9.44763,9.44763,0,0,1,95.86814,11.856a1.11258,1.11258,0,0,0,.31989.31912c.21614.1684.46452.317.46256.65314-.00081.13808.13922.1957.23993.275A1.10108,1.10108,0,0,1,97.40884,13.7808Z"/><path class="cls-183" d="M77.22556,42.04746c-.2133.06608-.32267.2664-.48843.39413a1.14265,1.14265,0,0,1-.898.29886,3.72707,3.72707,0,0,1-.4112-1.33209c-.03243-.263-.28378-.49892-.43642-.74705-.26268-.26252-.12022-.53924-.02709-.81318a1.29848,1.29848,0,0,1,.183-.37424c.28159-.19551.67737-.16911.90782-.46592a.35259.35259,0,0,1,.3681.12171c.3321.6742.90632,1.18279,1.26449,1.8397a1.03083,1.03083,0,0,1-.30034.51042A.6031.6031,0,0,0,77.22556,42.04746Z"/><path class="cls-184" d="M75.22264,39.50592c-.15.37053-.40109.72087-.23115,1.15539a8.09283,8.09283,0,0,1-1.3866-.30818c-.2221-.43445-.65274-.70888-.87655-1.143-.05766-.11183-.13424-.21391-.20213-.32048a.49012.49012,0,0,1,.46252-.23127.2682.2682,0,0,1,.21308-.06824c.39214.11942.81191.07131,1.201.203A2.86255,2.86255,0,0,1,75.22264,39.50592Z"/><path class="cls-185" d="M104.57314,48.594a12.51863,12.51863,0,0,1-1.61251-1.68362q-.34878-.42936-.69855-.85793c-.567-.70518-1.05756-1.46423-1.56046-2.21451-.06278-.09366-.13585-.19027-.07888-.31634.12144-.07607.19768.01249.25829.08787a22.80785,22.80785,0,0,1,1.45808,1.82664c.70726.82049,1.46057,1.59574,2.22276,2.36626.96962.98023,2.03735,1.83954,3.09269,2.71719a9.34413,9.34413,0,0,0,2.0878,1.59516,3.89926,3.89926,0,0,1,1.168.74763,12.77687,12.77687,0,0,1-1.90066-1.027,24.22035,24.22035,0,0,1-4.25687-3.17446C104.70559,48.61929,104.67229,48.50853,104.57314,48.594Z"/><path class="cls-186" d="M87.47109,14.24382c-.47429.11054-.81575-.27071-1.243-.33984-.07817-.01265-.06174-.12556-.06638-.1994a1.66313,1.66313,0,0,0,.99595.08579,7.84682,7.84682,0,0,1,1.99611.17924q.54546.05951,1.09082.11986c.10216-.08891.19726-.0275.28092.02543.575.3638,1.19209.65462,1.7654,1.02065.12629.08063.27624.15046.29275.33257a.63529.63529,0,0,1-.4347.45808,4.0129,4.0129,0,0,1-1.20416-.3473,4.78288,4.78288,0,0,0-.72471-.23362c-.78838-.30375-1.61369-.502-2.39194-.83476C87.68769,14.45047,87.534,14.40775,87.47109,14.24382Z"/><path class="cls-187" d="M92.55561,15.4756a7.04062,7.04062,0,0,0-1.51576-.94271,3.37191,3.37191,0,0,0-.7953-.44342c-.10549-.17819-.56589-.15369-.30814-.53933a7.27367,7.27367,0,0,1,2.16147.50558,1.5615,1.5615,0,0,0,.689.18761l.61609.38539a7.238,7.238,0,0,0,.90074,1.13511c.26921.2326.2313.60129.28108.92391a.11421.11421,0,0,1-.17058.00653C93.85329,16.19821,93.13638,15.94062,92.55561,15.4756Z"/><path class="cls-188" d="M104.80331,51.9834A8.55327,8.55327,0,0,0,106.06,53.09977a26.2133,26.2133,0,0,0,3.69346,2.853,20.90189,20.90189,0,0,0,5.75871,2.57736c.18433.26572.49622.225.754.29842a15.83339,15.83339,0,0,1,1.96256.64751,3.05066,3.05066,0,0,0,.89373.12812c.13211.013.2558.01611.31849.15751-.63556-.04537-1.272-.0813-1.90625-.14072a.42084.42084,0,0,0-.46667.30882,2.45053,2.45053,0,0,0-.09221.44787,4.73093,4.73093,0,0,1-1.36694-.43482,19.84418,19.84418,0,0,1-2.88621-1.12722,24.72176,24.72176,0,0,1-4.10712-2.514c-1.01771-.789-1.99017-1.62981-2.96394-2.47019-.07365-.03722-.12074-.08551-.0726-.1736.17167-.09947.28524.02419.414.10365.28112.17349.47.46736.78616.5968-.6003-.64262-1.19515-1.28846-1.8234-1.90241a.91.91,0,0,1-.24176-.29458C104.68309,52.083,104.643,51.97642,104.80331,51.9834Z"/><path class="cls-189" d="M84.38985,15.70694a10.7322,10.7322,0,0,0-4.4584.86678c-.56946.24456-1.189.37135-1.78247.56212a.46825.46825,0,0,1-.327-.04945,2.92226,2.92226,0,0,0-1.21272-.30135c.55715-.23435,1.17493-.18954,1.74228-.38043.77495-.26072,1.55878-.49629,2.32775-.77331a9.69286,9.69286,0,0,1,4.77167-.62419c.46563.0691.93576.10784,1.40383.16051.088-.05958.14424-.03622.17074.06522-.2603.23164-.45289.52445-.6964.77237A5.6494,5.6494,0,0,1,84.38985,15.70694Z"/><path class="cls-190" d="M87.00906,15.2445a.15972.15972,0,0,0-.15426-.07687.87346.87346,0,0,0-.15066-.1084c-.56512-.24839-1.13188-.493-1.69819-.73872.16476-.15869.33053-.04561.49533-.00092a5.22784,5.22784,0,0,0,1.96981-.07578c.88913.43161,1.85361.65454,2.77346,1.001a.30687.30687,0,0,1-.22166.362,19.15317,19.15317,0,0,1-2.55122-.21023A.70717.70717,0,0,1,87.00906,15.2445Z"/><path class="cls-191" d="M72.21807,20.25122c.08116-.1797.2654-.1873.41576-.21789a.45838.45838,0,0,0,.35478-.2442.40992.40992,0,0,0,.36239.06915c.4387-.2175.89037-.02515,1.33239-.06955a.42881.42881,0,0,1,.35951-.1,6.69346,6.69346,0,0,0,3.57078-.85622c.59915-.26807,1.11017-.68259,1.71142-.94495a10.26509,10.26509,0,0,1,2.01683-.73263,4.5834,4.5834,0,0,1,1.96213.07455c.141.05147.3047.05019.40327.18988-.06427.22862-.27113.21041-.43468.22477a10.22176,10.22176,0,0,0-4.29543,1.44333,16.25284,16.25284,0,0,1-2.97535,1.57887,3.65374,3.65374,0,0,1-.81025.23368,6.48027,6.48027,0,0,1-2.237.15483,3.04119,3.04119,0,0,0-.76364.05427.462.462,0,0,1-.43312-.08787C72.60379,20.74644,72.32108,20.56179,72.21807,20.25122Z"/><path class="cls-192" d="M72.75788,21.02123c1.1476-.1941,2.32849.1111,3.46622-.231.00787.30861-.263.33656-.45247.43384-.22317.11457-.481.16973-.64581.42614a.70923.70923,0,0,0,.43454.02093c.1978-.01117.29347.06069.24328.26954a4.34229,4.34229,0,0,1-1.50543.852c-.51093.46208-1.09239.25008-1.632.1198a4.22256,4.22256,0,0,1-1.37219-.50515c.203-.45161.45828-.831,1.0414-.773a.14936.14936,0,0,0,.1864-.14247A1.115,1.115,0,0,1,72.75788,21.02123Z"/><path class="cls-193" d="M71.756,27.72189a.15918.15918,0,0,0-.15407-.0772c.0501-.29589.41064-.43648.38537-.77007.04938-.07462.10033-.18857.18688-.17749.48028.06148.8249-.309,1.2611-.37928a1.05451,1.05451,0,0,0,.69115-.18085.70747.70747,0,0,1,.51293-.12307,1.787,1.787,0,0,0,1.574-.60915c.56751-.57426,1.28483-.959,1.90346-1.47294.75478-.62708,1.54884-1.20778,2.32546-1.809a7.83582,7.83582,0,0,1,1.52376-.87871,2.81978,2.81978,0,0,1,1.09324-.42046,1.65131,1.65131,0,0,1,1.10464.19616c.23355.09778.3834.23932.27035.51755a.25416.25416,0,0,1-.31254.07655,2.7585,2.7585,0,0,0-2.45919.46508c-1.00711.5994-1.85223,1.405-2.79832,2.07716-.67606.48031-1.257,1.0704-1.90178,1.58373a16.12428,16.12428,0,0,0-1.77306,1.50748,1.56489,1.56489,0,0,1-1.12786.58961.35808.35808,0,0,0-.38831.07546.92774.92774,0,0,1-.98936.19593A1.67471,1.67471,0,0,1,71.756,27.72189Z"/><path class="cls-194" d="M73.45078,26.41256a.48076.48076,0,0,0-.29109.07028c-.26365.16481-.50625.37247-.865.26045-.08089-.02526-.20382.084-.30739.13133-.1033-.2576-.39761-.1837-.58293-.34452-.48073-.41715-.53084-.46209-.34169-1.04167.51025-.06149.99786-.24121,1.51684-.27205.18631-.01107.37522-.02545.56312-.03612.2691.26232.57434.06174.86064.05589.16523-.00338.3255-.06367.45869.08279A1.75161,1.75161,0,0,1,73.45078,26.41256Z"/><path class="cls-195" d="M74.29821,22.79266c.45388-.3412.98587-.54756,1.46367-.84749a.708.708,0,0,1,.42371-.1611,2.84811,2.84811,0,0,0,.72133-.24289c1.47531-.58615,2.64848-1.687,4.06537-2.36827a4.47383,4.47383,0,0,1,4.05777-.25842.30319.30319,0,0,1,.147.1174,1.28441,1.28441,0,0,1-1.3687.44948,2.96782,2.96782,0,0,0-2.29731.32151A12.2813,12.2813,0,0,0,78.60072,21.653a2.77913,2.77913,0,0,1-.79053.46487,11.37483,11.37483,0,0,1-2.46935.93762,1.78023,1.78023,0,0,1-1.11966-.03184Z"/><path class="cls-196" d="M74.22118,23.02368a6.77263,6.77263,0,0,0,2.76778-.62659,22.82958,22.82958,0,0,0,3.19947-1.9989,7.883,7.883,0,0,1,2.70135-1.125,1.3,1.3,0,0,1,.88379.13054.30669.30669,0,0,1-.18041.13861,7.46432,7.46432,0,0,0-3.64009,1.5272c-.98161.62707-1.95615,1.272-2.91856,1.92042-.9482.63882-2.02283.98534-2.96893,1.59407-.21651.1393-.38447.39124-.69161.36517-.086-.33152-.37776-.43828-.64515-.52131a1.55271,1.55271,0,0,1-.5876-.32585,12.23849,12.23849,0,0,1,1.42032-.56646C73.85205,23.4755,73.97507,23.16229,74.22118,23.02368Z"/><path class="cls-197" d="M73.374,24.94924a22.80236,22.80236,0,0,1,2.33315-1.28349,40.63625,40.63625,0,0,0,3.52608-2.2059,10.28515,10.28515,0,0,1,3.62591-1.92293,4.626,4.626,0,0,1,.76039-.05614.95883.95883,0,0,1,.68588.1784,7.12591,7.12591,0,0,0,.9259.3609c.13942.07029.33807.0875.32454.31726a.92433.92433,0,0,1-.44871.15608c-.46266-.00094-.91252-.1247-1.37075-.15452a4.02208,4.02208,0,0,0-2.13684.65814,28.35288,28.35288,0,0,0-3.47823,2.39641,22.41405,22.41405,0,0,1-3.37723,1.89982.3077.3077,0,0,1-.29178.04112,2.10652,2.10652,0,0,0-.98752.08631c-.27588.07075-.32128-.01681-.32208-.24044Z"/><path class="cls-198" d="M82.3099,17.24728a9.70826,9.70826,0,0,0-2.5767,1.07549c-.635.39389-1.31968.66027-1.98169.98558a4.68719,4.68719,0,0,1-2.37548.48247c-.23023-.01257-.46173-.002-.69264-.00209a1.16025,1.16025,0,0,0-.01711-.37243c-.13724-.34787-.04242-.55306.32525-.62879.5622.09533,1.0319-.25093,1.55933-.32626a15.62168,15.62168,0,0,0,3.59925-1.25675,3.86144,3.86144,0,0,0,.465-.26534,7.68886,7.68886,0,0,1,3.39067-.49746c.25184.01374.51881-.00835.70584.2191-.05.18663-.21256.195-.35939.22076C83.67107,17.0013,82.99879,17.17078,82.3099,17.24728Z"/><path class="cls-199" d="M84.698,16.7081a1.17732,1.17732,0,0,0-.57619-.154,9.38544,9.38544,0,0,0-3.17023.33321,2.202,2.202,0,0,1-.33646.0518,2.6117,2.6117,0,0,1,.8628-.38322c.8385-.20681,1.64717-.52631,2.50688-.655a.57317.57317,0,0,0,.405-.194c.67437.01774,1.32553.23659,2.00259.231a2.02394,2.02394,0,0,1,.88964.258c.15768.152.3548.25289.51861.39528.14725.128.29907.26972.098.47648a1.16577,1.16577,0,0,1-.58013.03876c-.76946-.1652-1.55489-.21715-2.33225-.32646C84.88742,16.76611,84.78131,16.78352,84.698,16.7081Z"/><path class="cls-200" d="M71.756,27.72189a10.055,10.055,0,0,0,1.12146.32719.73394.73394,0,0,0,.74435-.227c.138-.14379.28245-.29685.44525-.02314.11595.16871-.01467.28579-.0929.40669-.3627.56046-.32641.66734.30823.86878.10507.3284-.19189.51807-.27027.78364a3.70953,3.70953,0,0,0-.73868.581,1.51953,1.51953,0,0,1-1.28633-.02169,6.27573,6.27573,0,0,0-.24029-.93418c-.08972-.16508-.14533-.355-.376-.37505A4.40724,4.40724,0,0,1,71.756,27.72189Z"/><path class="cls-201" d="M74.45209,38.88967l-1.46337-.23127c.06864-.346-.2329-.52289-.35785-.78033-.07114-.14657-.27583-.23854-.18151-.45158.17342-.18688-.12449-.4328.07721-.61615a.47769.47769,0,0,1,.41434-.09033,3.42118,3.42118,0,0,1,1.23457.55443,1.7053,1.7053,0,0,0,.59361.21792.16673.16673,0,0,1-.00381.21356A1.62135,1.62135,0,0,0,74.45209,38.88967Z"/><path class="cls-202" d="M72.98861,36.81016l-.462.00018a5.82618,5.82618,0,0,1-.88808-.88077,2.58542,2.58542,0,0,1-.26762-1.12191.44494.44494,0,0,1,.385-.15418,1.37678,1.37678,0,0,1,.78659.16323c.36546.31564.85176.52678.94245,1.08212C73.27917,36.18044,73.28909,36.57987,72.98861,36.81016Z"/><path class="cls-203" d="M71.98715,30.41737c.43427-.06418.88705.18747,1.3096-.07673.112.122.05456.26379.04444.39891-.03585.47921-.005.51341.4547.60417a1.59,1.59,0,0,1,.58924.12866.36109.36109,0,0,1,.04923.35934,14.58816,14.58816,0,0,1-1.87614,1.272,11.69984,11.69984,0,0,0-1.34124-.37556c-.0217-.20286-.1778-.29292-.32447-.3948-.13484-.09366-.27767-.18585-.292-.3753.189-.30719.09709-.70094.30851-1.00125a.535.535,0,0,0,.42527-.27828C71.45856,30.29876,71.69381,30.31308,71.98715,30.41737Z"/><path class="cls-204" d="M71.217,32.72814a2.41031,2.41031,0,0,1,1.38664.3085,1.69185,1.69185,0,0,1,.553.9365c.10426.52106-.3228.675-.63045.91154-.24581-.11361-.53353-.08763-.77035-.2312q-.17065-.22626-.34133-.45248A1.58,1.58,0,0,1,71.217,32.72814Z"/><path class="cls-205" d="M81.00029,47.05371c.11838-.06268.34414-.08257.13168-.28856-.18549-.17986-.10715-.27615.0897-.3559a.746.746,0,0,0,.28272-.89481.3962.3962,0,0,1,.11238-.61727c.2785.12933.34171.41616.47646.65073a2.84073,2.84073,0,0,0,1.434,1.365,13.71014,13.71014,0,0,1,1.32088.62331,8.59006,8.59006,0,0,0,3.049.86331c.75122.07686,1.49846.20076,2.24749.30356a5.9934,5.9934,0,0,0,1.148-.07043c.62528-.03321,1.25307-.06774,1.87458-.1592a.65692.65692,0,0,0,.223-.05642,20.07214,20.07214,0,0,0,2.282-1.26534.86012.86012,0,0,0,.407-.70315.29958.29958,0,0,1,.09727-.242c.25426.01481.27417.27753.42181.40709.10089.08854.13085.26062.23422.34311A6.28939,6.28939,0,0,1,98.17892,48.825c-.3971-.0072-.5785.345-.8646.52216a5.37644,5.37644,0,0,1-3.16992,1.26354c-.34558-.02081-.69884.13469-1.00472-.15521-.04177-.03959-.15-.02011-.22555-.01135a17.53143,17.53143,0,0,1-2.14556.07764.34369.34369,0,0,0-.18482.03623,2.438,2.438,0,0,1-2.16164.20331A22.4232,22.4232,0,0,1,82.94054,48.332c-.07591-.04692-.18725-.07829-.21978-.14657a.66473.66473,0,0,0-.79623-.43859A2.78,2.78,0,0,1,81.00029,47.05371Z"/><path class="cls-206" d="M105.57416,53.67775l.07748.15365a.41164.41164,0,0,0,.14217.33872c.18537.19918.42623.37037.37168.70546-.00829.05091.07971.12316.1317.17735a23.2704,23.2704,0,0,0,2.54008,2.26,1.08717,1.08717,0,0,1,.12689.13837.55431.55431,0,0,1-.39055-.11439c-.7262-.56786-1.37611-1.22052-2.05456-1.8406a3.2672,3.2672,0,0,0-1.09852-.50962l-.69313-.61616c-.4524-.68236-1.04365-1.25092-1.55743-1.8834-.87542-1.07767-1.73906-2.16155-2.5445-3.293-.138-.19388-.21451-.48312-.52038-.52323a5.44,5.44,0,0,0-.93606-1.50385c-.13-.18534-.29378-.31528-.25745-.59323.02442-.18687-.12484-.37389-.23338-.5506a1.22518,1.22518,0,0,1-.26789-.66377c.20331-.03316.24225.14931.33075.2592a7.20822,7.20822,0,0,0,1.03768,1.24754,1.90635,1.90635,0,0,1,.48605.53529,52.52339,52.52339,0,0,0,4.11868,4.93979A8.51142,8.51142,0,0,1,105.57416,53.67775Z"/><path class="cls-207" d="M96.17647,46.2065a1.12327,1.12327,0,0,1-.70348,1.23026c-.61747.35815-1.25553.68067-1.88178,1.02392a2.53328,2.53328,0,0,1-1.04557.1931c-.69713.0608-1.39745.14482-2.09413.153a13.893,13.893,0,0,1-1.93062-.21479c-.63014-.082-1.26175-.15867-1.88727-.26865a11.04069,11.04069,0,0,1-2.23613-.88438c-.40038-.1648-.80038-.34431-1.18305-.53519a2.81852,2.81852,0,0,1-1.14095-1.14487,7.46813,7.46813,0,0,1-.45672-.86177l.00018-.23068c.30318-.08439.47877-.40278.80791-.44078,1.59576.383,3.15737.89221,4.75256,1.2772a15.07276,15.07276,0,0,0,2.401.286c.22962.01766.4596.01874.68914.05265a2.22741,2.22741,0,0,0,1.24289-.14427c.47026-.20407.94843-.39132,1.42827-.57246a2.28514,2.28514,0,0,0,1.10736-.72862.48077.48077,0,0,1,.39811-.20141,6.17752,6.17752,0,0,0,1.342.8581.60152.60152,0,0,1,.23606.38342A1.34234,1.34234,0,0,1,96.17647,46.2065Z"/><path class="cls-208" d="M96.02221,45.43631c-.13661-.06043-.19568-.18928-.27751-.30156-.09738-.13363-.21341-.2674-.40417-.23517a.51973.51973,0,0,1-.6216-.4151c-.043-.12293-.10422-.19838-.23743-.20346a1.52508,1.52508,0,0,0-.05365-.95388,1.46388,1.46388,0,0,1-.0282-.71053.95388.95388,0,0,1,.37479-.52433c.37193-.02162.42686.3427.63521.52095a17.30994,17.30994,0,0,0,.88931,1.50961.22871.22871,0,0,1,.03172.31258A.95467.95467,0,0,1,96.02221,45.43631Z"/><path class="cls-209" d="M96.33068,44.43542l-1.0016-1.77171c.03823-.13644-.03832-.31176.13607-.40219a.26035.26035,0,0,1,.28815.1395c.27208.45933.6639.82595.96223,1.264.33342.65409.67753,1.303.99657,1.96406a3.49474,3.49474,0,0,1,.46691,1.42462,18.34748,18.34748,0,0,1-1.312-1.89613A2.067,2.067,0,0,0,96.33068,44.43542Z"/><path class="cls-210" d="M96.71553,42.587c-.11268-.0928-.156-.2549-.30815-.30826a16.20978,16.20978,0,0,1-1.21585-1.99552,7.16513,7.16513,0,0,0-.38764-.66321c-.58166-1.06339-1.1218-2.15-1.77-3.17633a2.27432,2.27432,0,0,0-.50463-.6672,2.23136,2.23136,0,0,1-.58921-.98545c.44834-.03045.75589.28822,1.12359.45669a1.25676,1.25676,0,0,1,.23814.18422,2.85865,2.85865,0,0,1,.54015.83214,16.40306,16.40306,0,0,1,.95216,1.92014,1.39413,1.39413,0,0,0,.52405.64831,11.64726,11.64726,0,0,1,1.00964,1.93,2.39038,2.39038,0,0,1,.41241,1.02205C96.7042,42.05129,96.863,42.324,96.71553,42.587Z"/><path class="cls-211" d="M94.86649,39.58275c.54066.88321,1.07138,1.7721,1.54089,2.696-.02359.49019.26992.90992.30815,1.38637a3.34382,3.34382,0,0,1-.89791-1.02887.90324.90324,0,0,0-.335-.3574c-.10283.02209-.12525-.0594-.16156-.12434-.39273-.70251-.65011-1.4683-1.01963-2.18187-.05643-.109-.12911-.22782-.03659-.3578A.47922.47922,0,0,1,94.86649,39.58275Z"/><path class="cls-212" d="M96.71553,42.587a2.97943,2.97943,0,0,1-.07685-.84749c.2095-.097.27289.0871.34515.20126q.92334,1.45884,1.80653,2.94279a9.9561,9.9561,0,0,0,.789,1.5352c.07459.14811.25806.27387.1407.48125-.29894-.04725-.35716-.34412-.52111-.52448-.2875-.31631-.52831-.67506-.78868-1.016-.56171-.77981-.92672-1.68225-1.52326-2.44143A.51231.51231,0,0,1,96.71553,42.587Z"/><path class="cls-213" d="M100.10509,34.03756c-.14671-.06262-.18342-.20823-.24069-.33285a19.98871,19.98871,0,0,1-1.69-5.4434c-.06448-.43815-.15034-.87316-.22636-1.30961a11.85229,11.85229,0,0,1-.14341-1.89478,10.85156,10.85156,0,0,0-.16745-1.9457.89762.89762,0,0,1,.04409-.599c.2142-.09079.19649.1047.22313.20171a3.11409,3.11409,0,0,1,.15.86856,17.65964,17.65964,0,0,0,.2142,2.21326,35.33137,35.33137,0,0,0,.912,4.69856l.00037.00027c.29572,1.03929.60647,2.0737,1.00109,3.08086A1.38044,1.38044,0,0,1,100.10509,34.03756Z"/><path class="cls-214" d="M99.25805,35.57793c.03048.43441.38035.74119.46186,1.15521a.42218.42218,0,0,1-.15407.30807c-.272.01772-.33117-.20844-.40626-.384-.3518-.82239-.8-1.59907-1.14246-2.42588a29.20645,29.20645,0,0,1-1.42375-5.45413,5.50592,5.50592,0,0,1-.11327-1.71568c.05794-.1502-.00764-.29926-.00464-.44878.00667-.33139.16257-.53456.42912-.562a3.814,3.814,0,0,1,.13229.9793c.08459.55469.17037,1.108.29871,1.65422a25.70611,25.70611,0,0,0,1.11668,4.72384,18.39214,18.39214,0,0,0,.73675,1.80739C99.2423,35.32886,99.31611,35.44183,99.25805,35.57793Z"/><path class="cls-215" d="M98.10216,34.26825q.54233,1.11019,1.08387,2.22077c.099.204.15336.43664.37981.55219a13.09018,13.09018,0,0,0,1.17984,2.215c.351.58657.75213,1.14315,1.131,1.713a4.41014,4.41014,0,0,1-1.29713-1.43883c-.08683-.13187-.10437-.32633-.32024-.33261a3.06253,3.06253,0,0,1-.68777-1.0367c-.34163-.62476-.714-1.23517-1.00471-1.88777-.19626-.527-.39073-1.05468-.62135-1.56807a.42379.42379,0,0,1-.042-.333A.19474.19474,0,0,1,98.10216,34.26825Z"/><path class="cls-216" d="M104.57314,45.59034c-.25216-.01556-.29027-.26759-.43124-.4031-.62857-.60425-1.2396-1.22679-1.8548-1.84487a5.97848,5.97848,0,0,0-.87241-.90981c-.11.04-.17015-.03422-.21874-.10753-.71937-1.08526-1.446-2.16588-2.11349-3.28451a.622.622,0,0,1-.05529-.14274c-.01742-.1808-.19062-.43446.01341-.52289.217-.09408.27219.20872.37439.353.31626.44652.64012.88748.95986,1.33111.41245.44053.67839.99121,1.08141,1.43989a.40731.40731,0,0,1,.11252.3176,12.9363,12.9363,0,0,0,1.25889,1.6991,15.51757,15.51757,0,0,0,1.70205,1.93182C104.56007,45.48046,104.55937,45.54205,104.57314,45.59034Z"/><path class="cls-217" d="M101.56876,41.8165,100.336,40.12189a19.35055,19.35055,0,0,1-1.96175-3.55716c-.05244-.1267-.14488-.251-.04152-.39519.13868-.0745.23389-.01726.30883.10148l1.61774,2.92673a18.49294,18.49294,0,0,0,1.45549,2.27161c.11367.14492.26206.28569.23911.50118C101.79219,42.00256,101.68992,41.88592,101.56876,41.8165Z"/><path class="cls-218" d="M99.10362,38.88958c.62623.9901,1.19241,2.01966,1.91338,2.94735.1481.19056.16641.46408.39769.59563a2.43642,2.43642,0,0,0,.5167.78769,1.44433,1.44433,0,0,1,.40772.67567c-.35834-.14964-.49265-.53379-.78712-.752-.13129-.0973-.24611-.21684-.36841-.32628-.07483.02609-.1188-.02-.15959-.07a17.8073,17.8073,0,0,1-2.087-3.23638c-.134-.31578-.27033-.63045-.40408-.94612-.07772-.18345-.18369-.37074-.07629-.58175.3177-.018.34577.27438.46114.45513A3.802,3.802,0,0,1,99.10362,38.88958Z"/><path class="cls-219" d="M90.09048,15.55281c-.01118-.13393.1107-.20131.15407-.30795.65871.15309,1.25442.503,1.92588.61622A6.70168,6.70168,0,0,1,93.624,16.92577,10.99332,10.99332,0,0,1,97.45175,23.714c.05884.38172.02609.767.11268,1.143a.25278.25278,0,0,1-.07855.24625,20.01716,20.01716,0,0,0,.23092,3.08086c-.30675-.02235-.29762-.27995-.31734-.47519a4.273,4.273,0,0,0-.20455-.96c-.17249-1.08428-.231-2.18668-.49822-3.2563a10.2795,10.2795,0,0,0-1.7901-3.832,10.84018,10.84018,0,0,0-2.52112-2.3393,7.3441,7.3441,0,0,0-2.17255-1.63171A.2082.2082,0,0,1,90.09048,15.55281Z"/><path class="cls-220" d="M97.48588,25.10324a10.94175,10.94175,0,0,0-1.94169-5.93882,12.98393,12.98393,0,0,0-3.13278-3.06457.6517.6517,0,0,1-.241-.23878c.19433-.06263.20858-.30512.38518-.38546a8.167,8.167,0,0,1,1.76793,1.03689c.08076.062.15678.13008.235.19535.18791-.04449.27516.1063.38017.20669a9.85994,9.85994,0,0,1,2.77106,5.15256.84013.84013,0,0,1,.00723.41745c.0268.74758.13372,1.48736.2163,2.22953a.78642.78642,0,0,1,.0113.26611,10.07378,10.07378,0,0,0,.0035,1.97151,9.4651,9.4651,0,0,1-.30244-1.495C97.612,25.32388,97.64591,25.17436,97.48588,25.10324Z"/><path class="cls-221" d="M97.25477,26.72064a1.76866,1.76866,0,0,1,.2314.85855c.01409.22514.01343.45679.23063.60491a32.69788,32.69788,0,0,0,1.00354,4.01425c.06951.23.15268.45593.22954.68373a.97735.97735,0,0,0,.0955.59849,13.29179,13.29179,0,0,1,.575,1.65518,14.754,14.754,0,0,0,.98555,2.06643.57756.57756,0,0,1,.03856.147,3.75139,3.75139,0,0,1-1.04172-1.3826.70453.70453,0,0,0-.34472-.38867,18.93087,18.93087,0,0,1-1.41011-3.83213c-.2106-.81285-.32132-1.64624-.56293-2.45112a2.3749,2.3749,0,0,1-.03009-.57173c.10552-.3212-.05408-.62134-.07341-.93251A1.74334,1.74334,0,0,1,97.25477,26.72064Z"/><path class="cls-222" d="M77.68777,40.96938a.21036.21036,0,0,1-.19556-.09868c-.29769-.60691-.87-1.03072-1.11385-1.67292a2.0976,2.0976,0,0,1,.67582-1.065,6.51326,6.51326,0,0,0,.61227-.56258c.22446-.03543.3362.12951.39534.28447.11575.30322.286.38713.575.24126a.17792.17792,0,0,1,.14761.0116,5.66514,5.66514,0,0,1,.43458.59953,3.78506,3.78506,0,0,1-.14507,1.2612.75494.75494,0,0,0-.53188.44435A.95627.95627,0,0,1,77.68777,40.96938Z"/><path class="cls-223" d="M80.69234,43.04853l-.53962-.61583a2.5832,2.5832,0,0,1-.074-.36919,1.19664,1.19664,0,0,0-.49783-1.00628.95276.95276,0,0,1-.42909-1.01173,5.67521,5.67521,0,0,0,.96837-1.04535.341.341,0,0,1,.25743-.14327c.29875.08822.47709.34946.72834.50669.165.63764.30989,1.28.45367,1.92284-.48316.36429-.434.97166-.6635,1.45177C80.84252,42.85034,80.89618,43.0346,80.69234,43.04853Z"/><path class="cls-224" d="M80.384,38.88977a2.11264,2.11264,0,0,0-.58065.65466,1.30851,1.30851,0,0,1-.65154.50106l-.07788-.07719c-.10822-.44444.10972-.86964.07732-1.30961-.01706-.01991-.04195-.04863-.03355-.06485A8.94679,8.94679,0,0,1,80.24562,36.506a.15858.15858,0,0,1,.06915-.03125.44625.44625,0,0,1,.38067.37184.48506.48506,0,0,1-.00691.228,3.27406,3.27406,0,0,0-.206,1.53681A.29874.29874,0,0,1,80.384,38.88977Z"/><path class="cls-225" d="M80.69234,43.04853c.127-.40314.284-.79993.371-1.21152a.66033.66033,0,0,1,.47619-.55985,5.385,5.385,0,0,1,.95772.438.19.19,0,0,1,.04878.21864.57948.57948,0,0,0-.12049.39061,16.817,16.817,0,0,1-.03846,1.95658c-.255.132-.39556.49243-.77017.38554l-.77073-.61657C80.92923,43.69549,80.63677,43.39874,80.69234,43.04853Z"/><path class="cls-226" d="M99.02659,39.50583a16.91547,16.91547,0,0,0,1.92307,2.9682,3.3199,3.3199,0,0,1,.23392.34359.51039.51039,0,0,0,.13163.31361c1.04045,1.1723,1.93044,2.47233,3.04,3.58529.24277.24351.50912.46364.7665.69242a.376.376,0,0,1,.14491.33724,29.76731,29.76731,0,0,1-3.11459-3.20178c-.31709-.39543-.69538-.7418-1.0457-1.11059-.07785.02432-.11725-.02754-.15415-.08007q-1.46991-2.09267-2.74208-4.31107a.65912.65912,0,0,1-.05334-.144c-.18159-.459-.39685-.904-.56424-1.36853-.05475-.15193-.14373-.30257-.057-.47274.189-.081.20754.09694.26924.18838a14.46363,14.46363,0,0,1,1.00639,1.897A2.03893,2.03893,0,0,0,99.02659,39.50583Z"/><path class="cls-227" d="M98.25623,38.88967a22.7982,22.7982,0,0,0,1.27951,2.1619c.51508.79953,1.04638,1.58861,1.57062,2.38224a5.39228,5.39228,0,0,0,.97783,1.47236.76284.76284,0,0,1,.25492.52995,13.31381,13.31381,0,0,1-1.07116-1.22056,5.862,5.862,0,0,0-.62362-.70491.3493.3493,0,0,1-.23167-.18391,26.29251,26.29251,0,0,1-1.60484-2.50194c-.34341-.68688-.66718-1.38371-1.04839-2.05128a.36156.36156,0,0,1-.07038-.32458C98.053,38.37073,98.07271,38.73556,98.25623,38.88967Z"/><path class="cls-228" d="M97.717,22.48455a21.40869,21.40869,0,0,0-.60072-2.07473,9.0579,9.0579,0,0,0-2.55774-3.702c-.05709-.20157-.19544-.37537-.16139-.60953.02486-.171-.119-.28458-.2485-.35474-.36735-.199-.44329-.61871-.705-.89612-.04278-.04534-.02852-.14448-.04062-.21875a8.57844,8.57844,0,0,1,2.1783,1.54849A9.87326,9.87326,0,0,1,97.56749,19.318a13.61158,13.61158,0,0,1,.79117,3.72516c.04669.63593-.00443,1.26564.04182,1.89876a29.92182,29.92182,0,0,0,.5015,4.01383,7.86653,7.86653,0,0,1,.27868,1.53857,14.88475,14.88475,0,0,1-.61312-2.27159,32.39087,32.39087,0,0,1-.60057-3.94529,12.47715,12.47715,0,0,0-.17492-1.62595A1.01407,1.01407,0,0,0,97.717,22.48455Z"/><path class="cls-229" d="M102.87836,48.97938c-.19052-.01511-.28076-.16023-.3778-.29426a10.77921,10.77921,0,0,0-1.16291-1.24631.29473.29473,0,0,1-.25282-.14893A46.16,46.16,0,0,1,98.3954,43.4164a.78967.78967,0,0,1-.08534-.21315,3.97494,3.97494,0,0,0-.278-.8525.381.381,0,0,1-.03976-.35759c.20822-.09679.27655.08518.338.20067.51758.97289,1.22974,1.8181,1.79435,2.75879.11546.19238.33915.313.36563.56071a9.30619,9.30619,0,0,0,1.12073,1.76459c.37434.52745.80078,1.01783,1.20044,1.52755A.6386.6386,0,0,1,102.87836,48.97938Z"/><path class="cls-230" d="M100.49026,45.51333a4.781,4.781,0,0,1-.91956-1.24987,13.3173,13.3173,0,0,1-1.26425-1.94178.64411.64411,0,0,0-.28132-.35124,3.01027,3.01027,0,0,1-.62341-1.09633c-.01275-.214-.141-.42152-.03752-.64215.24113-.13184.27609.0953.34485.21691a13.80487,13.80487,0,0,0,.82746,1.31995c.60972,1.07777,1.311,2.09819,1.97654,3.14109a.32217.32217,0,0,1,.05387.1413,9.28026,9.28026,0,0,0,.81174,1.23016c.04646.07555.11366.13647.11343.2332-.373-.08248-.41276-.47464-.63635-.69837A1.1299,1.1299,0,0,0,100.49026,45.51333Z"/><path class="cls-120" d="M99.7201,46.9q-.34682-.63571-.6939-1.27129a1.62749,1.62749,0,0,1-.30775-.73171c.20689-.04063.2869.12973.39179.24582.19627.21721.32639.48376.51114.7103a7.16273,7.16273,0,0,1,.65821.84967c.59362.86832,1.33325,1.61541,1.98887,2.4314.72953.908,1.51871,1.76082,2.30468,2.61771a.47559.47559,0,0,1,.23018.23151c-.15193.16832.03927.229.11257.296.58366.53342,1.06617,1.166,1.66676,1.68353a4.24121,4.24121,0,0,1,.452.56162.95926.95926,0,0,1-.68179-.33892c-.23912-.2008-.43209-.472-.77875-.50788a13.53247,13.53247,0,0,1-1.67192-1.73211c-.50853-.56807-1.03126-1.1247-1.52371-1.7097-.76278-.90612-1.48829-1.83783-2.194-2.78722C100.04189,47.25679,99.87554,47.08244,99.7201,46.9Z"/><path class="cls-231" d="M104.57314,51.75188a18.41091,18.41091,0,0,1-2.14435-2.28427c-.51687-.59384-1.02349-1.19627-1.54835-1.7837-.3974-.44478-.71447-.96133-1.06731-1.44592l-.24729-.33938c-.48925-.86487-1.03385-1.69829-1.47475-2.59051-.07176-.1452-.17858-.28772-.09895-.4671.30241-.06806.26194.26048.41817.36166a19.0241,19.0241,0,0,0,1.6451,2.52566c.416.57839.854,1.14089,1.28224,1.71049.29974.55985.67331,1.07235,1.02223,1.6009a24.53793,24.53793,0,0,0,2.06973,2.45158C104.49715,51.56927,104.57558,51.63716,104.57314,51.75188Z"/><path class="cls-232" d="M100.56692,45.05121c-.29073-.17671-.38437-.50036-.55788-.762a23.18628,23.18628,0,0,1-1.52189-2.47288c-.17583-.39056-.47726-.73777-.418-1.20971.06758-.07976.14131-.042.21478-.01173a1.47224,1.47224,0,0,1,.35682.48825,26.24915,26.24915,0,0,0,1.63183,2.53214.76765.76765,0,0,1,.21767.51168,6.70529,6.70529,0,0,0,.75809,1.298,1.36223,1.36223,0,0,1,.32041.55064A4.936,4.936,0,0,1,100.56692,45.05121Z"/><path class="cls-233" d="M100.49026,44.127c-.67733-.94156-1.29736-1.92-1.88486-2.91961-.10945-.18622-.23243-.3645-.34917-.54644-.13377-.32845-.48591-.5635-.41868-.978.14319-.10342.21614.01679.26438.10666.20512.38208.5347.66843.77078,1.02558l1.77162,2.6955a16.59666,16.59666,0,0,0,1.267,1.92235,1.434,1.434,0,0,1,.35074.61946c-.46413-.18381-.65323-.63466-.93241-.98952C101.06868,44.73121,100.74791,44.45829,100.49026,44.127Z"/><path class="cls-234" d="M74.45209,38.88967a1.03542,1.03542,0,0,1,.11274-1.06942c.0659-.105.19717-.16887.19578-.31642.02863-.2791.22943-.35091.46245-.38468a1.80274,1.80274,0,0,1,.82683.65751,2.54442,2.54442,0,0,0,.08508,1.019.24028.24028,0,0,1-.06476.24822c-.15333.39091-.544.34659-.84757.462C74.88172,39.40558,74.73665,39.06046,74.45209,38.88967Z"/><path class="cls-235" d="M76.07021,39.0439a2.35527,2.35527,0,0,1-.07722-1.30959c-.00186-.30525.25935-.41779.44163-.57818a1.449,1.449,0,0,0,.46529-.54578.53206.53206,0,0,1,.44084-.325.30458.30458,0,0,1,.31892.14824c.06656.38072.27327.75835.02829,1.1469a.56149.56149,0,0,1-.27651.4308c-.55539.22368-.67826.80237-1.03309,1.18647A.42133.42133,0,0,0,76.07021,39.0439Z"/><path class="cls-236" d="M90.09048,15.55281a5.89116,5.89116,0,0,1,2.31106,1.69442.60411.60411,0,0,1-.639.02231,1.4824,1.4824,0,0,0-.69346-.12626c-.6249-.18518-1.2614-.32693-1.88994-.49824a5.023,5.023,0,0,0-1.31833-.22346,1.20543,1.20543,0,0,1-.62041-.17555,4.301,4.301,0,0,1-.8479-.308.862.862,0,0,1,.61661-.69349Z"/><path class="cls-237" d="M85.1601,19.01886c-.40777.00775-.72966-.26806-1.12689-.32513a4.83843,4.83843,0,0,0-3.01663.58147,10.62779,10.62779,0,0,0-1.90165,1.13638,15.31055,15.31055,0,0,1-2.3871,1.34156,2.46537,2.46537,0,0,1-.96595.192c-.00668-.11691.01056-.2419-.18673-.1832a1.50581,1.50581,0,0,1-.62035.00957c.10233-.37089.39284-.47825.67576-.59165a.99224.99224,0,0,0,.59354-.38968,9.95124,9.95124,0,0,0,2.96679-1.35868,9.34374,9.34374,0,0,1,2.22561-1.17565c.46659-.16265.94039-.30469,1.40654-.46852a11.29013,11.29013,0,0,1,1.875-.309,2.5895,2.5895,0,0,1,1.51727.21245.55728.55728,0,0,1,.20675.78649c-.14019.15781-.22174.30869-.018.49026.07466.06654.17636.19244-.02734.25745A6.11324,6.11324,0,0,1,85.1601,19.01886Z"/><path class="cls-238" d="M86.2387,17.78653a7.50048,7.50048,0,0,0-1.5407-.30819,3.23773,3.23773,0,0,0-1.81463-.2449,2.32144,2.32144,0,0,1-.57347.01384c.64691-.154,1.29343-.30976,1.941-.46085.14711-.03433.298-.05264.44707-.07833a6.32732,6.32732,0,0,1,1.54127.104,5.58539,5.58539,0,0,1,1.07793.20417c.53586.36424,1.16279.57583,1.667.9925.11407.09426.33709.1558.13861.371a1.07791,1.07791,0,0,1-.71064-.05882,8.89424,8.89424,0,0,0-1.76051-.35154A.84335.84335,0,0,1,86.2387,17.78653Z"/><path class="cls-239" d="M74.45228,25.33439c.16053-.08.318-.16688.48205-.23887a24.386,24.386,0,0,0,4.91288-3.09943,12.25283,12.25283,0,0,1,2.75109-1.58033,3.833,3.833,0,0,1,2.068-.05356,3.5921,3.5921,0,0,0,.41686.04291c.36265.23561.6782.53714,1.05787.75021.07944.04458.19094.125.041.23067a1.61682,1.61682,0,0,1-.78694-.08318,7.98913,7.98913,0,0,0-1.31343-.20462,1.1993,1.1993,0,0,0-1.06216-.14107,6.41313,6.41313,0,0,0-2.29614,1.08213,5.85365,5.85365,0,0,0-1.0298.80994c-.30412.29776-.72314.50436-1.05585.79657-.36914.32421-.76605.61786-1.15736.90656-.58033.42816-1.12563.8923-1.68774,1.33706a1.13719,1.13719,0,0,1-.99731.23023.66128.66128,0,0,0-.62555.09657.93548.93548,0,0,1-.719.19638A4.93429,4.93429,0,0,0,74.45228,25.33439Z"/><path class="cls-240" d="M74.29821,29.10824c-.13649-.012-.29243.04821-.40635-.03947-.21688-.16694-.38295-.34808-.17836-.659.12793-.19441.34315-.34663.3536-.61087a2.55581,2.55581,0,0,0,1.24633-.86456c.1694-.255.52439-.38544.79176-.57748a1.33778,1.33778,0,0,0,.321-.26921c.36686-.51076.97419-.7172,1.41152-1.13632.03636-.03485.10074-.04928.12246-.08928.30609-.56361.89646-.80673,1.36374-1.18009a14.07221,14.07221,0,0,1,1.64236-1.27865,10.77887,10.77887,0,0,1,1.82831-.99494,1.88541,1.88541,0,0,1,1.22909.07123.92893.92893,0,0,0,.366.08074.114.114,0,0,1,.09292.12569c-.14206.17563-.35787.14647-.54559.19028-.13228.03087-.27342.02965-.3608.15854a.27745.27745,0,0,1-.17672.06756c-1.0495-.05085-1.71483.69946-2.49929,1.1991-.0955.06082-.16337.16492-.26346.22286A13.95392,13.95392,0,0,0,77.91057,25.82a18.89028,18.89028,0,0,1-1.582,1.51457,1.37589,1.37589,0,0,0-.323.37944c-.34882.57984-.96847.8678-1.42594,1.33028A.23712.23712,0,0,1,74.29821,29.10824Z"/><path class="cls-241" d="M84.467,21.63756l-.0773-.07721a.34985.34985,0,0,0-.308-.46216c.3792-.19881.74138.0071,1.10769.05475a6.7961,6.7961,0,0,0,1.04949.1764,1.19164,1.19164,0,0,1,.74085.11615,10.34661,10.34661,0,0,1,3.15461,1.79333A14.08641,14.08641,0,0,1,94.33683,28.303q.291.60627.52427,1.23772c.05326.1431.16122.31343-.04995.43531-.15023-.04134-.15512-.18357-.21112-.29449a13.553,13.553,0,0,0-1.40573-2.22242,1.759,1.759,0,0,0-.39393-.36079,11.65669,11.65669,0,0,0-1.80471-1.98251,12.7678,12.7678,0,0,0-2.6969-2.08324,8.67484,8.67484,0,0,0-1.41355-.57189c-.74445-.2306-1.502-.42426-2.23723-.68632A.36474.36474,0,0,1,84.467,21.63756Z"/><path class="cls-242" d="M85.1601,19.01886a3.50652,3.50652,0,0,1,1.30957.15356c.15946-.13067.32026-.0393.46906.01274a8.69883,8.69883,0,0,1,1.85062.78522c-.01321.42146.34356.62612.54316.92309.06549.09744.24842.16256.08745.322-.54612-.08877-1.0962-.14364-1.64529-.20663-.68558-.129-1.34468-.35953-2.01977-.52907a.31364.31364,0,0,1-.20951-.15182.28414.28414,0,0,0-.16446-.14915q-.8816-.34674-1.76143-.698a.1591.1591,0,0,1,.15407-.077A1.74365,1.74365,0,0,0,85.1601,19.01886Z"/><path class="cls-243" d="M85.54539,20.328l2.234.61622a2.48873,2.48873,0,0,1,.9082.3985,18.48189,18.48189,0,0,1,3.60485,2.866,11.10923,11.10923,0,0,1,2.79221,4.76167c.3694,1.359.56084,2.764,1.05641,4.0907a.348.348,0,0,1,.00834.2272.11788.11788,0,0,1-.08277.07559c-.17377-.03259-.19274-.18425-.24155-.31347a7.57646,7.57646,0,0,0-.55566-1.26153,13.35947,13.35947,0,0,0-.44534-1.54c-.031-.096-.08482-.18826-.03408-.29329.12977-.34229-.10948-.60382-.22007-.87915a12.88253,12.88253,0,0,0-3.32365-4.771,14.40106,14.40106,0,0,0-3.14156-2.30063,8.26638,8.26638,0,0,0-1.86585-.67545c-.39477-.29617-.8844-.47375-1.15572-.92423A1.38678,1.38678,0,0,1,85.54539,20.328Z"/><path class="cls-244" d="M89.16624,18.32512a3.65813,3.65813,0,0,0-1.33779-.88592.91878.91878,0,0,1-.51125-.42288l.61647-.00052c.28134-.18775.54934-.02932.80509.05427a10.79829,10.79829,0,0,1,2.51772,1.11725,20.9102,20.9102,0,0,1,3.1929,3.08889,11.14,11.14,0,0,1,2.03689,4.75926c.05619.32868.01867.66454.07518.99325a13.64594,13.64594,0,0,0,.56419,3.798,18.01848,18.01848,0,0,0,.96293,3.2897.47381.47381,0,0,1,.01359.15184.159.159,0,0,1-.15407.07749c-.20554-.01573-.20567-.2-.25721-.3299a37.5739,37.5739,0,0,1-1.22414-3.94245c-.03714-.13525-.07884-.26881-.12044-.40242a12.69628,12.69628,0,0,1-.27486-2.05276,9.64193,9.64193,0,0,0-.37022-1.76526,9.0422,9.0422,0,0,0-1.89884-3.8619,11.54532,11.54532,0,0,0-4.4609-3.43734A.34337.34337,0,0,1,89.16624,18.32512Z"/><path class="cls-245" d="M91.246,18.24862a16.17309,16.17309,0,0,0-2.13324-.938,4.207,4.207,0,0,0-1.1791-.29478.406.406,0,0,0-.23651-.392c-.16323-.10991-.36448-.18029-.45681-.37781a13.30705,13.30705,0,0,1,3.85155.84718,5.54842,5.54842,0,0,1,1.05214.7474.23645.23645,0,0,1,.10634.29811A.77066.77066,0,0,1,91.246,18.24862Z"/><path class="cls-246" d="M74.29821,29.10824a7.39706,7.39706,0,0,0,1.49536-1.29289,7.08112,7.08112,0,0,1,.90715-.92707c.90526-.87,1.76349-1.78865,2.708-2.6182a3.94157,3.94157,0,0,1,.33269-.25767c.90716-.639,1.78916-1.31466,2.74541-1.882.33534-.199.70377-.07174,1.0556-.108.10926-.088.21887-.031.326.00259,1.02189.32016,2.05715.59818,3.06309.96847.13738.05057.31078.066.3259.26868a.358.358,0,0,1-.35578.16482,5.21788,5.21788,0,0,1-1.30563.00334,1.91169,1.91169,0,0,1-.6188-.20021,4.00291,4.00291,0,0,0-2.12963-.34163.92174.92174,0,0,0-.42881.15278,17.54069,17.54069,0,0,0-2.81478,2.135,11.95043,11.95043,0,0,0-1.66845,1.74468,7.02224,7.02224,0,0,1-1.43771,1.48942,6.0644,6.0644,0,0,0-.76075,1.0091c-.05658.06817-.09187.15636-.18892.182-.25165.04276-.469.18932-.71727.24006a1.057,1.057,0,0,1-.841-.03989C74.01616,29.53647,74.215,29.34806,74.29821,29.10824Z"/><path class="cls-247" d="M73.98993,29.8016a2.28242,2.28242,0,0,0,1.42907-.30933c.08943-.05758.1033.01053.11178.078.12138.18664-.00921.34347-.06807.50348-.06635.18041-.1198.36421-.17621.54739-.24249.355-.44837.74884-.91078.87556a4.14885,4.14885,0,0,1-.8656-.08455.28738.28738,0,0,1-.29571-.32021,4.71856,4.71856,0,0,1,.08234-.75131A1.26637,1.26637,0,0,1,73.98993,29.8016Z"/><path class="cls-248" d="M75.22264,37.19488a.64963.64963,0,0,0-.462.309.36522.36522,0,0,1-.42642-.00112,4.46865,4.46865,0,0,0-1.34558-.69255c.172-.29907.16076-.68978.46221-.92414.54127-.51375,1.09373-.21645,1.64529-.02314A1.238,1.238,0,0,1,75.22264,37.19488Z"/><path class="cls-249" d="M75.06838,35.886c-.122-.02475-.24677-.04014-.3654-.07593a1.62694,1.62694,0,0,0-1.25216.07593c-.16942-.46188-.61119-.67238-.92461-1.00134a.30259.30259,0,0,1,.21062-.29084c.33352-.10451.35543-.352.329-.6333.38012-.19472.58464-.15877.95132.16721.43266.38464.43342.38583.93366.0696a.52841.52841,0,0,1,.384-.13464c.42142.05682.509.35854.52479.71344A1.3239,1.3239,0,0,1,75.06838,35.886Z"/><path class="cls-250" d="M74.37573,31.49671a6.69368,6.69368,0,0,0,.84691-.84817c.41789-.48353.87721-.92788,1.2961-1.41231a44.24661,44.24661,0,0,1,3.46244-3.90795c.69213-.63214,1.44707-1.184,2.18345-1.76021a1.90023,1.90023,0,0,1,1.05737-.30271,3.45,3.45,0,0,1,1.74727.32681,2.26686,2.26686,0,0,0,1.0631.70793,2.26118,2.26118,0,0,1,.60374.32067c.0857.07175.24295.13878.1045.2981a1.21652,1.21652,0,0,1-.87789-.14936,4.46178,4.46178,0,0,0-1.87853-.41506,5.56485,5.56485,0,0,0-.71727-.11882,1.874,1.874,0,0,0-1.26153.55454c-.65554.62723-1.40662,1.14878-2.03426,1.814A8.30531,8.30531,0,0,0,78.69182,28.278c-.02477.045.01679-.00106-.01934.03259a13.09967,13.09967,0,0,0-1.47081,2.36735c-.07426.1054-.13568.21865-.26645.26527a2.63516,2.63516,0,0,0-1.51735.94035,2.42675,2.42675,0,0,1-.36.39546.36369.36369,0,0,1-.46207.01674c-.13969-.09348-.331-.17984-.22071-.41474Z"/><path class="cls-251" d="M74.37506,31.881c.22.48486.478.54478.79636.15724a2.32272,2.32272,0,0,1,.5923-.63839c.36978-.19654.6683-.57694,1.1537-.52019.11239.1642-.00533.28926-.08455.40728a5.21654,5.21654,0,0,0-.35878.61576,3.44891,3.44891,0,0,0-1.07117,1.85849c-.02192.1221.00536.2571-.10344.35327-.11394-.00256-.17951.07955-.26071.14078-.5494.41437-.59469.41888-1.0733-.05589a.89068.89068,0,0,0-.89964-.23883c-.06535-.35233-.342-.599-.46221-.92391q.67413-.50091,1.34816-1.002A.62294.62294,0,0,1,74.37506,31.881Z"/><path class="cls-252" d="M82.38712,44.281c-.2776-.3469-.039-.73011-.05421-1.0928a6.16031,6.16031,0,0,0-.00671-.74375c-.03017-.19143-.1415-.482.2148-.551a2.36253,2.36253,0,0,1,.94333.28141,15.40568,15.40568,0,0,0,3.63485.92654,2.61986,2.61986,0,0,1,.37683.07135c1.40908.46109,2.69637-.05117,3.98358-.511.40363-.14419.63614-.54583.98116-.789a4.00672,4.00672,0,0,1,.43092-.31821c.24745-.10828.40487.0742.58066.18589a7.10112,7.10112,0,0,1,1.009.84622,3.43427,3.43427,0,0,0,.17222,1.25773.38546.38546,0,0,1-.172.43669.30632.30632,0,0,0-.30764.11938c-.3928.63593-1.0953.755-1.70493,1.02593-.32651.14511-.66677.259-.99551.39946a1.71144,1.71144,0,0,1-.74357.15173,21.47431,21.47431,0,0,1-5.64168-.90463,14.08386,14.08386,0,0,0-2.43535-.64822A.85145.85145,0,0,1,82.38712,44.281Z"/><path class="cls-253" d="M94.48131,42.5866c-.48907-.16295-.74491-.64925-1.19991-.86581-.11244-.05352-.20136-.15126-.34061-.13535a.5785.5785,0,0,1-.1852-.33,5.1235,5.1235,0,0,0-.63976-1.43534.44171.44171,0,0,1-.082-.29112c.1184-.2663.39982-.34922.59566-.52909.39535-.06432.52424.28015.74484.48473.3157.76758.93172,1.34709,1.30414,2.07873.08828.17342.26205.33725.11135.56106Z"/><path class="cls-254" d="M94.78983,42.12439a4.24758,4.24758,0,0,0-.79595-1.447,3.13724,3.13724,0,0,1-.66791-1.17149c-.20487-.33274-.02549-.68242-.04559-1.02318.17176-.16211.2417.01723.31158.10953a10.9313,10.9313,0,0,1,.65811,1.06813l1.23255,2.6184c-.09665.11018-.03121.285-.15354.38491C95.13891,42.49435,95.07526,42.19854,94.78983,42.12439Z"/><path class="cls-255" d="M93.24912,35.50075a4.67475,4.67475,0,0,0-1.30923-.69319,3.809,3.809,0,0,1-.82528-1.07669,4.08033,4.08033,0,0,0-1.10027-1.64537c-.46567-.52684-.94815-1.04281-1.43663-1.55156a8.94938,8.94938,0,0,0-2.61722-1.65011c-.39957-.19989-.83338-.33142-1.25089-.495a2.97658,2.97658,0,0,0-1.32254-.16727.64836.64836,0,0,0-.386.15873,4.23272,4.23272,0,0,0-.98618,1.17085A16.66987,16.66987,0,0,0,80.71949,33.158c-.15845.62046-.32595,1.24-.43709,1.87248a3.25618,3.25618,0,0,1-.57128.61386.29679.29679,0,0,1-.34245.10426.4655.4655,0,0,1-.17162-.44142,6.05163,6.05163,0,0,1,.02294-.953c.21231-.50778.40394-1.02644.65906-1.515a19.30453,19.30453,0,0,0,.84646-2.101,5.64371,5.64371,0,0,1,1.08525-2.01494,2.482,2.482,0,0,0,.37084-.4906,1.52636,1.52636,0,0,1,1.72259-.69281,4.90583,4.90583,0,0,1,1.70627.6743c.72683.38435,1.48181.7055,2.21378,1.07635a10.165,10.165,0,0,1,2.15765,1.78164,26.6289,26.6289,0,0,1,2.14468,2.20553,3.27367,3.27367,0,0,1,.41912.60535,7.69792,7.69792,0,0,0,.62291,1.1736C93.24934,35.19134,93.38783,35.3231,93.24912,35.50075Z"/><path class="cls-256" d="M91.16916,33.72938l.77072,1.07819.61734.92479a.76212.76212,0,0,1,.33312.65716c-.0022.39952.1962.79163.043,1.19573-.16578.02544-.216-.12177-.28725-.213a9.79,9.79,0,0,0-1.28949-1.31521A11.85372,11.85372,0,0,0,89.44445,33.407a1.08441,1.08441,0,0,1-.29817-.39435,1.14653,1.14653,0,0,1,.04018-.94817.24547.24547,0,0,1,.37655.01126A15.526,15.526,0,0,1,91.176,33.65709C91.18984,33.67483,91.18059,33.70439,91.16916,33.72938Z"/><path class="cls-257" d="M98.02515,42.81737a5.76906,5.76906,0,0,0,.76126,1.56255,9.96136,9.96136,0,0,1,.77943,1.51869c-.31572-.30576-.45113-.764-.84739-1.00163-.59018-.94908-1.17824-1.89949-1.77312-2.84563-.077-.12246-.12418-.28757-.30665-.31187a.52078.52078,0,0,0-.07091-.2947c-.47284-.83413-.77186-1.75777-1.31611-2.55518a1.74005,1.74005,0,0,1-.35109-1.19762c.24335-.12333.27094.11937.35084.228.47886.65078.80383,1.3932,1.21934,2.08218a19.7116,19.7116,0,0,0,1.45737,2.46624C98.00017,42.56787,98.08689,42.67521,98.02515,42.81737Z"/><path class="cls-258" d="M92.86394,37.58025c.2138-.23911-.02635-.4748-.0321-.70974a1.54794,1.54794,0,0,0-.27464-1.13816c.15873-.00338.206.1239.276.22956a35.02421,35.02421,0,0,1,2.0333,3.62084,1.59811,1.59811,0,0,0-.61642.07764c-.32713-.16333-.37088-.53542-.57878-.78714-.1195-.14468-.17264-.34118-.34514-.4455A1.61619,1.61619,0,0,1,92.86394,37.58025Z"/><path class="cls-259" d="M94.94368,37.65812a6.55177,6.55177,0,0,0,.308,1.23148,2.24606,2.24606,0,0,1-.6562-.95,14.18463,14.18463,0,0,0-1.34634-2.43885c-.04225-.38227-.344-.63289-.49728-.96087a3.21485,3.21485,0,0,1-.2736-.656c.33459.02836.49981.31489.72977.495a3.91465,3.91465,0,0,1,.81671.94528A6.50455,6.50455,0,0,1,94.94368,37.65812Z"/><path class="cls-260" d="M92.24747,18.09444a4.39361,4.39361,0,0,0-.92094-.76363.76515.76515,0,0,1-.23463-.2376c.18133-.17209.37248-.05725.53166.01651a1.5564,1.5564,0,0,0,.778.13751,10.94346,10.94346,0,0,1,2.167,1.867,9.53934,9.53934,0,0,1,1.81665,3.04321,10.26737,10.26737,0,0,1,.71678,3.27457,7.38061,7.38061,0,0,1,.15278,1.28859,5.64532,5.64532,0,0,0,.13735,1.61236.29319.29319,0,0,1-.13721.39,9.76466,9.76466,0,0,1-.3855-2.69532c-.22246-.11781-.197-.35069-.22549-.5408a11.89249,11.89249,0,0,0-.86846-3.01494,9.16129,9.16129,0,0,0-1.77364-2.67233,15.04972,15.04972,0,0,0-1.50191-1.42613C92.40218,18.29569,92.28332,18.2308,92.24747,18.09444Z"/><path class="cls-261" d="M92.24747,18.09444a2.387,2.387,0,0,1,.72882.55284,10.62212,10.62212,0,0,1,3.744,6.75094,6.45721,6.45721,0,0,0,.1491.6294.68728.68728,0,0,0-.25607.80025.15237.15237,0,0,1-.05189.20085c-.103-.55754-.17918-1.12166-.314-1.6714a11.01735,11.01735,0,0,0-2.26632-4.50324,28.17214,28.17214,0,0,0-2.565-2.40026,2.02851,2.02851,0,0,1-.17007-.2052A1.333,1.333,0,0,0,92.24747,18.09444Z"/><path class="cls-262" d="M96.40738,29.64728c.32129.73663.44142,1.53369.68871,2.29293a21.13659,21.13659,0,0,0,.852,2.40553c.14212.60753.48446,1.14121.64314,1.74264.01611.06106.03355.12177.05037.18264a.51879.51879,0,0,0-.30814-.077,9.5899,9.5899,0,0,1-.82268-1.6314c-.36449-.84566-.61579-1.73276-.97874-2.57817a3.45834,3.45834,0,0,1-.23786-1.11308C96.24477,30.45519,96.1167,30.03175,96.40738,29.64728Z"/><path class="cls-263" d="M96.6383,31.958a.91537.91537,0,0,1,.08783.16271,28.432,28.432,0,0,0,1.55246,3.89192,1.23521,1.23521,0,0,1,.05487.18133,20.32555,20.32555,0,0,0,1.6099,3.19421,2.14674,2.14674,0,0,1,.39268.73368,13.67272,13.67272,0,0,1-1.11053-1.528c-.04444-.07071-.05642-.1719-.16679-.18959-.08966.17652.08072.32115.0449.48526a8.52112,8.52112,0,0,0-.61628-.92414c-.145-.03051-.19722-.14782-.253-.26505q-1.07305-2.25423-1.91953-4.60313c-.19442-.64609-.33411-1.30655-.52309-1.95411a.87978.87978,0,0,1-.0345-.704c.19809-.07187.26058.09869.28217.21007.11443.59043.422,1.11493.552,1.61429A.28583.28583,0,0,1,96.6383,31.958Z"/><path class="cls-264" d="M96.4072,33.11318c.36026.9142.70225,1.83618,1.0866,2.74015.30421.71549.66042,1.4089.99354,2.11211a3.65183,3.65183,0,0,0,.40115,1.18611c.038.12062.09163.23632.1381.35428a6.40689,6.40689,0,0,1-.88107-1.49484c-.183-.33178-.40209-.63853-.5826-.96952-.16061.01414-.17764-.12534-.22166-.22094A19.28365,19.28365,0,0,1,96.156,33.86477c-.04634-.16966-.13686-.33614-.05677-.52026l.00019-.00031C96.20764,33.27468,96.22344,33.0821,96.4072,33.11318Z"/><path class="cls-265" d="M79.30551,34.26853c0,.36886.00113.73773-.00054,1.10658-.00064.1429-.00538.28479.15462.35687a.46285.46285,0,0,1-.02717.40666,7.27628,7.27628,0,0,0-.54479,1.74859.34653.34653,0,0,1-.12136.23235,1.36918,1.36918,0,0,0-.31168.133c-.21069.15938-.3113.02355-.36726-.14a.90822.90822,0,0,0-.39937-.53206c.05521-.39053-.09974-.767-.07723-1.15536a.71069.71069,0,0,1,.157-.81488,11.92236,11.92236,0,0,0,1.04913-1.9035c.17221-.28278.29066-.59721.45634-.88491.07919-.13752.15563-.306.37353-.243a.54129.54129,0,0,1,.08247.60128C79.59172,33.54437,79.43738,33.90208,79.30551,34.26853Z"/><path class="cls-266" d="M78.76627,38.11958a5.62311,5.62311,0,0,1,.50226-1.85458c.07859-.17082.12817-.355.19106-.533l.77054-.69336c.11234-.02651.17446.03448.21976.12551a1.77072,1.77072,0,0,1-.14273,1.3379c-.49092.6623-.725,1.46221-1.1559,2.15666A.74551.74551,0,0,1,78.76627,38.11958Z"/><path class="cls-267" d="M82.46379,41.73929a1.96825,1.96825,0,0,1-.92422-.46213,11.25081,11.25081,0,0,1-.51386-1.78475c-.01378-.03459.03279-.09319.05128-.14062a1.5716,1.5716,0,0,1,.22363-1.11065c.64051-.463.8616-.37131,1.5258.443-.06509.34337.13984.66364.08813,1.00649a8.72339,8.72339,0,0,0-.2754,1.60509A.54.54,0,0,1,82.46379,41.73929Z"/><path class="cls-268" d="M81.38547,38.27343c-.24.32022-.16819.72962-.30848,1.07836-.33967.00892-.44744-.32983-.693-.462a5.4246,5.4246,0,0,1,.23111-2.07968,12.10138,12.10138,0,0,1,.723-1.72086c.04351-.1194.14826-.23686.27217-.04286a20.03326,20.03326,0,0,1-.075,2.21542A2.024,2.024,0,0,1,81.38547,38.27343Z"/><path class="cls-269" d="M81.54,34.96257q-.30256.61191-.60479,1.224c-.103.20979-.10561.47091-.32011.62351a.79177.79177,0,0,0-.308-.30806,6.07493,6.07493,0,0,0,.07685-1.3863,4.5744,4.5744,0,0,1,.394-1.14781,6.04688,6.04688,0,0,0,.48808-1.27521c.0283-.14176.036-.37572.30323-.33236a.42552.42552,0,0,1,.03525.36891,4.94864,4.94864,0,0,0,.06493,2.00158C81.67438,34.83481,81.70037,34.95109,81.54,34.96257Z"/><path class="cls-270" d="M82.46379,41.73929a8.64365,8.64365,0,0,1,.38554-2.07952c.14475-.10235.27225-.01418.394.04626a1.62408,1.62408,0,0,0,.62148.19018,9.15906,9.15906,0,0,1,1.76946.34781,4.27679,4.27679,0,0,0,1.56043-.08681c.40735-.041.811-.1185,1.219-.16108a2.6639,2.6639,0,0,0,1.61279-.63735,3.30839,3.30839,0,0,1,.80474-.52082,1.11648,1.11648,0,0,1,1.26193.668c.102.3968.42441.68257.53886,1.074.09838.33648.20547.67042.30872,1.00548a5.89129,5.89129,0,0,1-3.40016,1.78827,4.97139,4.97139,0,0,1-2.02487-.09088,19.52056,19.52056,0,0,1-3.41707-.76923,9.46729,9.46729,0,0,1-1.55769-.62018Z"/><path class="cls-271" d="M96.09924,33.34451a20.87443,20.87443,0,0,0,1.46368,3.697,6.84558,6.84558,0,0,0,.52225,1.42606c.05564.14126.114.28146.17106.42215l-.53906-.4622a.28245.28245,0,0,1-.17436-.18761c-.25444-.59413-.58705-1.151-.83428-1.74884a15.76069,15.76069,0,0,1-.90774-2.36891c-.18044-.62769-.33828-1.26183-.53744-1.88463a.40064.40064,0,0,1,.06573-.43357,3.58279,3.58279,0,0,1,.60878,1.29956C95.97844,33.20029,95.99413,33.29742,96.09924,33.34451Z"/><path class="cls-272" d="M96.79275,36.5018c.32125.63559.66454,1.26062.92442,1.92567.3224.64465.64664,1.2884.96578,1.93466.07235.14651.127.30179.18976.453a4.8547,4.8547,0,0,1-1.00165-1.15538.32007.32007,0,0,1-.20253-.21218c-.37-.83541-.79379-1.64669-1.12473-2.49955a.73226.73226,0,0,1-.10027-.40009C96.54182,36.39751,96.67346,36.49625,96.79275,36.5018Z"/><path class="cls-273" d="M98.02515,42.81737a21.72746,21.72746,0,0,1-1.61777-2.77222c-.279-.5682-.45512-1.1784-.71712-1.75371a.88361.88361,0,0,1-.15951-.60975c.26959-.08456.33254.157.397.30068.45149,1.007,1.14768,1.88208,1.558,2.90978l.53944,1.07829c.0738.4278.34161.795.38518,1.23222C98.23335,43.12277,98.15505,42.94428,98.02515,42.81737Z"/><path class="cls-274" d="M97.48569,40.89215a8.718,8.718,0,0,1-.68647-1.141c-.44173-.59884-.67888-1.31233-1.0828-1.93216a1.15614,1.15614,0,0,0-.15624-.1617c-.12776-.04-.157-.15832-.20875-.25984a12.70141,12.70141,0,0,1-.96388-2.1751c-.12343-.42226-.41787-.76451-.54976-1.18275a4.11333,4.11333,0,0,0-.30017-1.10421.4485.4485,0,0,1-.02138-.40793c.253-.12826.315.10148.386.23631.233.44217.51272.85706.74193,1.30078a3.55187,3.55187,0,0,1,.33535.85634,19.03479,19.03479,0,0,0,1.46866,3.12118c.293.59788.598,1.19.87569,1.79523.05129.1118.13637.22271.08476.36158Z"/><path class="cls-275" d="M97.40866,40.19886c-.37668-.75286-.747-1.509-1.132-2.2576-.33908-.65941-.72168-1.29781-1.03345-1.96944-.21881-.47135-.34966-.98336-.52261-1.47623a.86893.86893,0,0,0-.16192-.38113,5.40146,5.40146,0,0,0-.35382-1.03176.80805.80805,0,0,1-.08845-.40245c.185-.27592.2507-.01677.30372.08653a11.99616,11.99616,0,0,1,.53712,1.18835,3.06779,3.06779,0,0,0,.42725.81191,3.81038,3.81038,0,0,1,.25706.68138c.495,1.16944,1.10227,2.28343,1.69043,3.406.24981.47682.46738.96961.73155,1.439a.285.285,0,0,1,.03871.29079c.04242.43752.31144.8043.38486,1.23214a6.62615,6.62615,0,0,1-.80372-1.22259C97.59726,40.4584,97.57723,40.27693,97.40866,40.19886Z"/><path class="cls-276" d="M98.10229,40.58422c-.60375-1.18148-1.20394-2.36479-1.81258-3.54375a10.45394,10.45394,0,0,1-.96082-2.23272,2.17,2.17,0,0,1-.35435-1.42705c.0943-.10773.1503-.02248.19537.04738a2.37221,2.37221,0,0,0,.21846.3384,13.797,13.797,0,0,1,.85456,1.95694c.11321.24528.32472.46923.24168.77865a20.87839,20.87839,0,0,0,.88634,2.0784c.16151.36208.33308.71968.50011,1.0793-.02542.23883.15358.38968.24838.57675a.76351.76351,0,0,1,.13679.42441Z"/><path class="cls-277" d="M75.06838,35.886a.245.245,0,0,1,.16041-.2331,1.00068,1.00068,0,0,0,.53328-.84517c.34925-.25417.6984-.50734,1.03177-.78373a.69943.69943,0,0,1,.67734-.15545.26644.26644,0,0,1,.05751.10312.45845.45845,0,0,1-.069.40015.85782.85782,0,0,0-.11453.86484,1.9254,1.9254,0,0,1-.04257,1.11131.63939.63939,0,0,0-.36515.4c-.08042.27224-.35548.3881-.555.56474a5.38946,5.38946,0,0,0-.38948.42163c-.32669-.08-.43856-.46671-.77035-.53944A2.4042,2.4042,0,0,0,75.06838,35.886Z"/><path class="cls-278" d="M77.30259,36.348c-.05633-.04146-.09805-.10816-.07233-.16527.21473-.47678-.02385-.92735-.07364-1.388A.35777.35777,0,0,1,77.275,34.487a.64067.64067,0,0,0,.18189-.52648,5.14681,5.14681,0,0,0,1.267-1.75519,22.45872,22.45872,0,0,0,1.16475-2.58559,2.94636,2.94636,0,0,1,.3108-.57123c.066-.09338.12208-.25091.29271-.13344a3.69719,3.69719,0,0,1-.19454,1.18919,2.7785,2.7785,0,0,0-.16258,1.00481,10.11912,10.11912,0,0,1-.52172,1.46529.49052.49052,0,0,0-.236.24342c-.34934.754-.79455,1.46155-1.089,2.24222a.8309.8309,0,0,1-.236.34573,1.45449,1.45449,0,0,0-.44148,1.0194A.516.516,0,0,0,77.30259,36.348Z"/><path class="cls-279" d="M88.78087,20.02016a12.543,12.543,0,0,0-2.3112-.84774,1.01573,1.01573,0,0,0-.16781-.20052c-.33268-.23589-.14937-.36736.09092-.49227A3.5919,3.5919,0,0,1,88.043,18.883c.693.2965,1.40815.51219,2.11512.75889a12.55162,12.55162,0,0,1,3.2662,2.81,16.85853,16.85853,0,0,1,1.3965,2.1083,11.0896,11.0896,0,0,1,1.22163,4.01249,2.68882,2.68882,0,0,1,.00769,1.06037c-.27179.02914-.2664-.20375-.28466-.35059a12.67686,12.67686,0,0,0-.78807-2.93722,6.61515,6.61515,0,0,0-.55024-1.09131A14.75251,14.75251,0,0,0,92.828,23.05574a10.7847,10.7847,0,0,0-3.64851-2.75823C89.02721,20.2303,88.86244,20.18652,88.78087,20.02016Z"/><path class="cls-280" d="M90.167,19.71185a8.26141,8.26141,0,0,1-1.16641-.3306,18.45416,18.45416,0,0,0-2.60785-.90162c-.01826-.05726-.06965-.1459-.04968-.167.21867-.23093-.00255-.36544-.1044-.52612.99737.06262,1.93758.43576,2.92754.53859a.26866.26866,0,0,1,.15407.15437,7.36,7.36,0,0,0,.80616.89915A.21316.21316,0,0,1,90.167,19.71185Z"/><path class="cls-281" d="M87.24017,23.25474a6.40624,6.40624,0,0,0-1.30464-.49439c-.79419-.25682-1.595-.49313-2.39307-.738-.01578-.18343.07985-.23306.24892-.234a1.54384,1.54384,0,0,0,.67559-.15082c.76971.26531,1.56322.453,2.33829.70463a15.76928,15.76928,0,0,1,1.58272.628,8.70981,8.70981,0,0,1,1.8531,1.34317,16.79761,16.79761,0,0,1,2.28862,2.2594c.12235.14614.1387.36678.334.456a10.03991,10.03991,0,0,1,1.46632,2.65348.27925.27925,0,0,1,.02281.25637c-.28632.06075-.34141-.1919-.41163-.35116a13.41754,13.41754,0,0,0-2.0375-2.72846,1.13789,1.13789,0,0,0-.29666-.24276,26.01539,26.01539,0,0,0-2.24377-2.0182,8.81254,8.81254,0,0,0-1.93525-1.218A.3866.3866,0,0,1,87.24017,23.25474Z"/><path class="cls-282" d="M94.32724,29.95556A13.457,13.457,0,0,0,92.93093,27.203a.66729.66729,0,0,1-.06718-.17429,5.588,5.588,0,0,1,1.31158,1.71142,3.50483,3.50483,0,0,1,.61468,1.2154,5.41156,5.41156,0,0,1,.53907,1.84837,5.52537,5.52537,0,0,0,.39776,1.59032,11.61256,11.61256,0,0,0,.92031,2.67286,3.27231,3.27231,0,0,1,.1456.43471c-.10259.14076-.2054.039-.30814.00027L95.32889,33.8063c-.44037-1.1717-.66347-2.40587-1.03393-3.59772A.243.243,0,0,1,94.32724,29.95556Z"/><path class="cls-283" d="M88.78087,20.02016a10.64342,10.64342,0,0,1,3.84306,2.65638,13.26417,13.26417,0,0,1,1.56557,1.96295,11.56445,11.56445,0,0,1,1.42989,3.31956c.10735.39071.12682.80479.20928,1.20346.03468.16766.02626.36511.19354.48486.22732.11421.18185.34691.22129.53585a1.86158,1.86158,0,0,0,.1637.69657c.08916.35682.00421.75094.2311,1.07825v.53147a7.74276,7.74276,0,0,1-.64515-1.71509.52763.52763,0,0,0-.20243-.357c-.13244.02189-.1438-.08587-.163-.16625-.04764-.19956-.12143-.392-.158-.5943a11.66832,11.66832,0,0,0-2.59793-5.4544,17.22283,17.22283,0,0,0-3.03778-2.69713c-.1306-.09775-.30067-.15422-.35986-.33033-.27955-.21262-.40031-.57208-.71177-.75841C88.54087,20.2841,88.81527,20.15508,88.78087,20.02016Z"/><path class="cls-284" d="M89.47419,21.17505A11.98563,11.98563,0,0,1,91.29492,22.507a12.01112,12.01112,0,0,1,2.52875,2.80891A11.38946,11.38946,0,0,1,95.567,29.65749a6.72715,6.72715,0,0,0,.22374.76,10.69914,10.69914,0,0,0,.41686,1.886c.0442.27121.17.53008.19961.80974-.10373.0755-.13544.24689-.30777.231-.13-.72037-.4642-1.38342-.61-2.09543-.17133-.83672-.33823-1.67174-.56489-2.497a10.4245,10.4245,0,0,0-1.77119-3.38219,15.99624,15.99624,0,0,0-4.18675-3.73026c-.385-.25664-.82136-.41368-1.18718-.6952.09257-.04253.18253-.1.29074-.04671a1.62777,1.62777,0,0,0,.90257.11768C89.17482,20.99485,89.29589,21.16074,89.47419,21.17505Z"/><path class="cls-285" d="M96.4072,30.87979c-.2667-.26065-.18341-.635-.30516-.94309a2.6823,2.6823,0,0,1-.07983-.28933,11.35494,11.35494,0,0,0-1.2935-5.05066,18.76832,18.76832,0,0,0-1.32029-2.00987,14.55844,14.55844,0,0,0-3.24138-2.875.34343.34343,0,0,0-.175-.35161,1.69931,1.69931,0,0,1-.67168-.88075,7.40494,7.40494,0,0,1,2.59881,1.5056,10.56505,10.56505,0,0,1,3.19285,3.8747,11.54786,11.54786,0,0,1,1.072,4.12431c.03091.55681.14645,1.10892.22343,1.66318A2.69957,2.69957,0,0,0,96.4072,30.87979Z"/><path class="cls-286" d="M84.9291,23.63987a3.99873,3.99873,0,0,0-2.24662-.21162,3.43647,3.43647,0,0,0-1.18359.75993A18.39541,18.39541,0,0,0,78.97275,26.481c-.62764.68788-1.17905,1.44356-1.79542,2.13848a9.80387,9.80387,0,0,1-1.95469,2.02905c-.02486-.39586.25287-.70528.30814-1.07826a6.43989,6.43989,0,0,1,1.1497-1.44405,5.919,5.919,0,0,0,1.28944-1.4094,11.42389,11.42389,0,0,1,.92538-.95813A15.62982,15.62982,0,0,1,81.325,23.67087a9.04037,9.04037,0,0,1,1.17748-.787,1.52829,1.52829,0,0,1,.95846-.12461,4.742,4.742,0,0,1,1.8292.49574,1.07857,1.07857,0,0,0,.25524.07679c.13311.0948.30606.09955.43915.19582.10971.07935.24361.14124.19355.31724A4.22538,4.22538,0,0,1,84.9291,23.63987Z"/><path class="cls-287" d="M86.16167,23.794c-.13037-.2541-.48588-.20809-.61628-.46215a6.09749,6.09749,0,0,0,1.69478-.07706,3.35457,3.35457,0,0,1,1.361.6602,19.18626,19.18626,0,0,1,2.9156,2.50029,1.67187,1.67187,0,0,1,.11443.15128,6.32744,6.32744,0,0,1,1.54091,2.16c.16022.37559.43322.69309.59905,1.06725.09595.21647.24225.43055.12259.68816-.19414.081-.26293-.07971-.34767-.19031a3.45849,3.45849,0,0,0-.41133-.53012,18.04779,18.04779,0,0,0-3.96055-4.3117A8.07486,8.07486,0,0,0,86.6729,24.05,1.272,1.272,0,0,1,86.16167,23.794Z"/><path class="cls-288" d="M77.45648,33.88361a1.90491,1.90491,0,0,0-1.12879.64131,1.20957,1.20957,0,0,1-.56562.28283.59633.59633,0,0,0-.46259-.69327,1.93105,1.93105,0,0,1,.48567-1.46732A.79211.79211,0,0,0,76,32.25255a.4205.4205,0,0,1,.45519-.37162c.17325-.19393.34927-.31828.51935-.00009.075.1403.14317.08674.23259.016.08119-.06417.16136-.1769.2884-.06928a1.18093,1.18093,0,0,0,.40947.75557A2.05872,2.05872,0,0,1,77.45648,33.88361Z"/><path class="cls-289" d="M94.17335,32.651c.09285.49718.46962.91963.38537,1.46343-.25049-.44843-.50327-.89561-.74989-1.34616a.58866.58866,0,0,0-.25192-.2716c-.21723-.05983-.2725-.259-.35359-.42732a12.73846,12.73846,0,0,0-2.23515-3.14423,27.14363,27.14363,0,0,0-2.64506-2.39709,4.66825,4.66825,0,0,0-1.0499-.55521c-.7913-.36618-1.62806-.61875-2.42423-.97279a5.1958,5.1958,0,0,0-.7525-.52488c-.0833-.043-.19849-.08069-.16884-.21915a4.21907,4.21907,0,0,1,2.03509.44194,1.85955,1.85955,0,0,0,.81522.17421,3.63465,3.63465,0,0,1,1.66059.73249A20.07434,20.07434,0,0,1,92.43529,29.466c.17873.21941.39263.40532.561.63262a20.53878,20.53878,0,0,1,1.05868,2.07815A1.5619,1.5619,0,0,1,94.17335,32.651Z"/><path class="cls-290" d="M83.92764,24.256c.29635.24673.71535.32992.92443.693-.21873.1044-.47593-.03066-.68873.11126a2.02813,2.02813,0,0,0-2.35257.65867c-.6455.63473-1.34008,1.22984-1.921,1.92393a13.561,13.561,0,0,0-1.26612,1.963c-.41527.719-.77606,1.46666-1.16774,2.198l-.42425.3556c-.11891-.25654-.23792-.52355-.57646-.27858-.05972-.25035.13867-.38992.24722-.5662a.98007.98007,0,0,0,.215-.43505,6.03249,6.03249,0,0,0,.92026-1.57676,1.63354,1.63354,0,0,1,.40871-.63921c.47513-.42182.66972-1.04547,1.09757-1.5096a15.51924,15.51924,0,0,1,1.86965-1.8123,4.43293,4.43293,0,0,0,.67546-.56095A1.78223,1.78223,0,0,1,83.92764,24.256Z"/><path class="cls-291" d="M92.9406,30.10958a8.85134,8.85134,0,0,1-1.30087-1.44374q-.82153-.91447-1.71722-1.7482a9.13407,9.13407,0,0,0-1.93158-1.48549c-.3937-.20687-.808-.37459-1.213-.56-.32262-.39449-.82535-.46942-1.24459-.69046a1.23859,1.23859,0,0,1-.60426-.54185,3.67852,3.67852,0,0,1,1.23257.15408,8.11872,8.11872,0,0,1,2.803,1.36856,21.42287,21.42287,0,0,1,2.65,2.44373,8.4772,8.4772,0,0,1,1.55724,2.11793A.64361.64361,0,0,1,92.9406,30.10958Z"/><path class="cls-292" d="M92.09321,39.50593a1.56537,1.56537,0,0,0-1.23258-.616c-.21089-.015-.19451-.19706-.23239-.32989-.038-.13321-.02818-.30061-.15735-.37454a1.34022,1.34022,0,0,1-.56157-.91171,5.31673,5.31673,0,0,0-.38389-.90751.17716.17716,0,0,1,.0878-.1922.64011.64011,0,0,0,.336-.58254c.148-.22089.26558-.044.36039.04521a5.39524,5.39524,0,0,1,.77565.82835,11.70052,11.70052,0,0,1,1.48613,2.0496c.095.16483.216.33262.06122.529C92.52771,39.28513,92.266,39.34369,92.09321,39.50593Z"/><path class="cls-293" d="M92.63265,39.04371a.84994.84994,0,0,0-.14876-.5016,14.43747,14.43747,0,0,0-1.46918-2.03992,1.17093,1.17093,0,0,1,.38556-.462,4.68237,4.68237,0,0,1,1.46367,1.5401,2.92611,2.92611,0,0,1,.46221.84749c.15407.35942-.06928.71878-.00018,1.07818C93.06789,39.39229,92.98138,39.02141,92.63265,39.04371Z"/><path class="cls-294" d="M81.53954,32.343a.37329.37329,0,0,0-.14949.25793c-.12671.85569-.69718,1.548-.877,2.38426-.01084.05042-.08458.08732-.12906.1305l-.15388-.07711a10.15539,10.15539,0,0,1,.44054-2.08775,12.6096,12.6096,0,0,1,.6331-2.04111,6.06861,6.06861,0,0,1,1.526-2.524,1.098,1.098,0,0,1,.68784-.28033,5.74941,5.74941,0,0,1,2.09091.5234,14.92549,14.92549,0,0,1,2.18035,1.11485,6.07489,6.07489,0,0,1,1.51252,1.40486,18.23646,18.23646,0,0,1,1.63525,1.92028.90861.90861,0,0,1,.23248.66061c-.53735-.52184-1.07268-1.0458-1.61423-1.56325a.48423.48423,0,0,0-.31177-.13107.18551.18551,0,0,1-.101-.05164c-1.1898-1.44969-2.90957-2.05121-4.53237-2.79013a1.72639,1.72639,0,0,0-2.2123,1.00987,11.80449,11.80449,0,0,1-.50991,1.20061,1.61671,1.61671,0,0,0-.17441.58535C81.69945,32.12633,81.70635,32.27874,81.53954,32.343Z"/><path class="cls-295" d="M79.61328,32.57438a4.65459,4.65459,0,0,1,.46259-1.46364,4.747,4.747,0,0,1,.48815-1.47426,11.82112,11.82112,0,0,1,1.63709-2.25659,1.6612,1.6612,0,0,1,1.63323-.55055A13.26141,13.26141,0,0,1,86.525,27.83126a8.08238,8.08238,0,0,1,3.11459,2.18434c.43615.48522.93971.90731,1.36258,1.40673a7.75852,7.75852,0,0,1,1.0026,1.46844c.07054.13724.20158.27527.08839.45352Q90.99,32.222,89.88623,31.10013a9.46881,9.46881,0,0,0-3.52576-2.38706,10.448,10.448,0,0,1-1.43259-.72547,2.81374,2.81374,0,0,0-1.79314-.34752,1.05158,1.05158,0,0,0-.73266.43317A11.36656,11.36656,0,0,0,80.939,30.39339a4.01851,4.01851,0,0,0-.17081.50691,22.12465,22.12465,0,0,1-1.46264,3.36823,2.10173,2.10173,0,0,1,.22129-.75239A1.05685,1.05685,0,0,0,79.61328,32.57438Z"/><path class="cls-296" d="M92.09321,33.34429a6.2045,6.2045,0,0,0-1.15534-1.84855.31655.31655,0,0,1,.13286-.41036c.1991-.07134.30791.074.42605.18466a7.56645,7.56645,0,0,1,1.30536,1.54549c.22061.35891.4982.67944.701,1.05024a7.621,7.621,0,0,1,.386.79243c.079.21872.21965.44572.05309.68859a6.61418,6.61418,0,0,0-1.464-1.463Z"/><path class="cls-297" d="M81.53954,32.343a8.08981,8.08981,0,0,1,.77952-2.18,2.08177,2.08177,0,0,1,1.50745-1.24222,1.72028,1.72028,0,0,1,1.12513.28885,19.70692,19.70692,0,0,1,3.3603,1.82485,3.18164,3.18164,0,0,1,.93122,1.00052,1.70129,1.70129,0,0,0-.00007,1.00116c-.235-.00447-.39259-.18435-.59585-.262a2.43549,2.43549,0,0,0-.86892-.79836c-.88021-.57681-1.83727-1.01524-2.76456-1.507a2.0667,2.0667,0,0,0-1.08125-.22483,1.19844,1.19844,0,0,0-.93279.70817A8.68858,8.68858,0,0,0,82.04227,33.89c-.17509.26323-.13926.63364-.42569.8405-.19434-.20265-.10186-.46821-.15409-.702A4.61423,4.61423,0,0,1,81.53954,32.343Z"/><path class="cls-298" d="M88.70384,32.80506c.26592-.12389.35793.15775.53925.23116.34936.3878.69646.77768,1.049,1.16258a13.23818,13.23818,0,0,1,1.10818,1.84135c-.03684.23049-.22128.33785-.38556.462-.322-.32084-.56109-.73157-1.00141-.92433-.14273.01711-.13594-.10154-.169-.1844A1.28075,1.28075,0,0,0,89.543,34.822c-.36078-.51219-.77651-.98038-1.17321-1.46409A1.41819,1.41819,0,0,1,88.70384,32.80506Z"/><path class="cls-277" d="M93.94225,35.34679a3.54723,3.54723,0,0,0-.539-1.46329.27461.27461,0,0,1,.21774-.0823c.1642.001.24026.12209.32127.23645.50762.84407.69531,1.82866,1.1821,2.68342.16978.29812.29193.62335.43583.9362.24222.63872.47922,1.2795.73041,1.91467a.97557.97557,0,0,1,.11679.47321c-.457-.66884-.75372-1.43257-1.23586-2.08647-.0746-.10118-.15183-.20043-.22784-.30057-.24487-.61814-.48474-1.23834-.738-1.853A3.88446,3.88446,0,0,0,93.94225,35.34679Z"/><path class="cls-299" d="M89.55123,36.348a2.27705,2.27705,0,0,1,.52538,1.11651c.08922.2471.15219.4781.42015.59364a.36117.36117,0,0,1,.21285.37363.6644.6644,0,0,0,.151.4581c-.62161.3614-1.08023.997-1.84632,1.11367-.96839.14755-1.93736.2927-2.90878.41788a1.382,1.382,0,0,1-.5639-.08586,9.25625,9.25625,0,0,0-1.83519-.35723c-.322-.03295-.5491-.27544-.85712-.31861.00181-.33587-.25133-.65209-.07722-1.00125a.23607.23607,0,0,1-.03263-.21654,12.48112,12.48112,0,0,0,.29392-1.60278c.02046-.13361.02036-.2835.16453-.36441.69282.01569,1.361.21927,2.05024.27025.34367.02542.68747.06125,1.03052.10226a1.73106,1.73106,0,0,0,1.22174-.37783,1.86915,1.86915,0,0,1,1.49639-.40092A.75989.75989,0,0,1,89.55123,36.348Z"/><path class="cls-300" d="M83.23413,36.50208a14.88446,14.88446,0,0,0-.29385,1.619,2.96607,2.96607,0,0,0-.16817.53747c-.14167-.12792-.29191-.24767-.42331-.38538-.32522-.34085-.64257-.158-.96333.00029L81.54,34.96256c.08954-.05622.0744-.147.07656-.232.1583-.26883.12435-.625.38524-.84725.25561-.06757.422.14379.6664.21209.018-.16237.05384-.32419.0552-.48028a5.89861,5.89861,0,0,1,.87785-2.34743.40246.40246,0,0,1,.442-.24094,3.01711,3.01711,0,0,1,1.188.27933c.922.52892,1.867,1.0185,2.75811,1.60017.16911.11038.35414.21523.40634.43816a6.7559,6.7559,0,0,1,1.54052,2.0025,1.642,1.642,0,0,1-.87384-.57435,17.54537,17.54537,0,0,0-2.86125-1.98234c-.31814-.21219-.65848-.396-.99411-.58359a.66374.66374,0,0,0-.61328-.00033c-1.00077.36922-1.06769,1.22767-1.191,2.09332-.09586.673-.04028,1.34909-.11905,2.01954A.38367.38367,0,0,1,83.23413,36.50208Z"/><path class="cls-301" d="M93.94225,34.03765c-.10665-.04364-.174-.16536-.308-.15479-.30216-.51843-.638-1.02047-.91859-1.547a7.22577,7.22577,0,0,0-1.3833-1.87737c-.87326-.8287-1.75522-1.65032-2.68147-2.42036A9.20463,9.20463,0,0,0,86.377,26.7631a15.85339,15.85339,0,0,0-2.36362-1.0138c-.09805-.02493-.19639-.07409-.19407-.20576.25557-.28036.56438-.14907.85162-.0929a4.51232,4.51232,0,0,1,.60625.23231,8.54289,8.54289,0,0,1-.83271-.36913c-.1221-.06786-.25308-.12971-.28576-.28762.20032-.30222.45639-.10368.69332-.07716.73281.225,1.43209.54076,2.152.79855a9.44807,9.44807,0,0,1,3.15895,2.252,14.07379,14.07379,0,0,1,1.71545,1.81118,9.628,9.628,0,0,1,1.3445,2.08238,5.51644,5.51644,0,0,0,.33392.60359,1.23121,1.23121,0,0,0,.05557.33536A4.37234,4.37234,0,0,1,93.94225,34.03765Z"/><path class="cls-302" d="M92.9406,30.10958a.47869.47869,0,0,1,.23129-.38541c.23868.06571.28231.30762.41451.468.088.10672.14172.24148.27881.3025.23146.1353.26514.39431.37285.60505.30771.602.47584,1.2606.74784,1.87772a.40762.40762,0,0,1,.03485.36675,5.64419,5.64419,0,0,0,.30814,1.46355,3.37165,3.37165,0,0,1-.60666-1.164c-.1514-.31987-.28524-.648-.43067-.97078-.02228-.04944-.06757-.07533-.11821-.0219Z"/><path class="cls-303" d="M95.02075,33.3442c-.37346-.9546-.71444-1.92235-1.15554-2.84952a1.71875,1.71875,0,0,0-.38143-1.0229,9.99693,9.99693,0,0,1-.70835-1.302,5.57814,5.57814,0,0,0-.9635-1.313,1.65511,1.65511,0,0,1-.18074-.29033c.4268.13283.58611.5472.86233.83518.29841.31111.55126.66572.82608.99964a3.68756,3.68756,0,0,1,.693,1.13412.7553.7553,0,0,0,.31459.42011c.32624,1.16984.65423,2.33921.9758,3.51033a1.74364,1.74364,0,0,1,.02585.34041C95.12052,33.72269,95.1571,33.47581,95.02075,33.3442Z"/><path class="cls-304" d="M83.85061,25.56526c1.16963.41118,2.26753.984,3.39089,1.49987a10.6697,10.6697,0,0,1,2.4004,1.69337c.5472.46472,1.0366.98705,1.57523,1.46a6.0493,6.0493,0,0,1,1.5766,2.0875,4.07494,4.07494,0,0,0,.41612.63893,2.65575,2.65575,0,0,1,.42445.93791l-.23106.00063a12.29769,12.29769,0,0,0-2.05206-2.63056c-.0771-.06772-.14523-.14456-.25905-.1422a16.69429,16.69429,0,0,0-3.06657-3.15593,5.63716,5.63716,0,0,0-1.72744-.82337,7.99974,7.99974,0,0,1-1.034-.41161,4.25133,4.25133,0,0,0-1.65342-.46777,1.7396,1.7396,0,0,0-1.27241.53673c-.42631.39-.78712.84093-1.18252,1.25936a2.73376,2.73376,0,0,0-.64953.80224l-.04523.02679a4.21843,4.21843,0,0,0-.802,1.54763,18.33611,18.33611,0,0,1-1.60189,3.09559.84709.84709,0,0,1-.60036.44014l-.00037-.07693a.47723.47723,0,0,1,.07307-.3644,1.6355,1.6355,0,0,0,.31249-.94508,1.73761,1.73761,0,0,1,.11177-.36241,38.13723,38.13723,0,0,1,2.08915-4.058,10.55437,10.55437,0,0,1,1.76345-1.91154,2.94456,2.94456,0,0,1,1.37118-.87409C83.44107,25.31749,83.68915,25.284,83.85061,25.56526Z"/><path class="cls-305" d="M81.07733,28.03a9.26763,9.26763,0,0,1,1.30243-1.406,1.9932,1.9932,0,0,1,1.99545-.34067c.4438.13573.85184.34568,1.28041.51054.61973.23841,1.2432.46373,1.84733.74413a4.54722,4.54722,0,0,1,1.32321.9672c.6921.70279,1.4357,1.356,2.05908,2.1259a.699.699,0,0,1,.20689.47967l-.15426.385c-1.18126-1.161-2.17133-2.55431-3.74551-3.24708a15.94074,15.94074,0,0,0-3.41342-1.33778,1.76132,1.76132,0,0,0-1.5963.62507c-.22469.39828-.59574.6658-.8411,1.03933a6.72152,6.72152,0,0,0-1.09838,2.11885,1.20927,1.20927,0,0,1-.16729.41661c-.12483-.11872-.07034-.25232-.03846-.38875.14357-.61439.28282-1.22978.42364-1.84481A8.58716,8.58716,0,0,1,81.07733,28.03Z"/><path class="cls-306" d="M83.85061,25.56526a1.49417,1.49417,0,0,0-1.5087.3067,20.24352,20.24352,0,0,0-2.01469,2.04585,6.00647,6.00647,0,0,0-.79845,1.29986c-.50588.99174-.98,1.99965-1.47059,2.99923-.06109.12445-.14358.23841-.21614.35723-.38983-.1259-.41808-.433-.38612-.77022a6.64912,6.64912,0,0,1,.89293-1.89733,13.095,13.095,0,0,1,1.27551-2.08516,9.92942,9.92942,0,0,1,1.97681-2.02117,4.2134,4.2134,0,0,0,.48347-.43534,1.56021,1.56021,0,0,1,2.07411-.33871L85.391,25.705a1.494,1.494,0,0,1-.6609-.14337A1.201,1.201,0,0,0,83.85061,25.56526Z"/><path class="cls-307" d="M83.23413,36.50208a.51187.51187,0,0,1-.06357-.17836,20.28912,20.28912,0,0,1,.29038-2.9961,1.32493,1.32493,0,0,1,.70381-.98809,3.97033,3.97033,0,0,0,.46429-.268.43847.43847,0,0,1,.53222.00058c.83715.51175,1.66614,1.0454,2.5104,1.53413.84587.48965,1.462,1.22657,2.26456,1.74064.00293.08458-.01341.17559.07708.231.11932.42065-.19881.579-.46207.77018-.33192-.25006-.74518-.09233-1.10377-.2191-.141-.04983-.25679.03426-.38217.11572a2.79811,2.79811,0,0,1-1.45873.7006A13.56359,13.56359,0,0,1,83.23413,36.50208Z"/><path class="cls-308" d="M88.3957,33.34439a25.267,25.267,0,0,0-3.33725-2.01065,3.32323,3.32323,0,0,0-1.0774-.21974.21212.21212,0,0,0-.26.11874c-.171.60552-.69374,1.05162-.78132,1.68554a7.42694,7.42694,0,0,0-.17355,1.35626l-.76439-.39125a5.85552,5.85552,0,0,1,.60666-2.33715,2.41861,2.41861,0,0,0,.21674-.40467A1.30362,1.30362,0,0,1,84.683,30.256a17.316,17.316,0,0,1,2.36618,1.17411,6.92509,6.92509,0,0,1,1.22556.7802c.18488.16375.44089.28551.4291.59473A.83488.83488,0,0,1,88.3957,33.34439Z"/><path class="cls-278" d="M81.07733,28.03a2.13447,2.13447,0,0,1-.61628.84721A1.37911,1.37911,0,0,1,81.07733,28.03Z"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#400198;}.cls-3{fill:#ed1cb0;}.cls-4{fill:#e422b2;}.cls-5{fill:#e91fb1;}.cls-6{fill:#df26b3;}.cls-7{fill:#1eb6cf;}.cls-8{fill:#1db4d6;}.cls-9{fill:#ca35b8;}.cls-10{fill:#d42eb6;}.cls-11{fill:#cf32b7;}.cls-12{fill:#26b0ce;}.cls-13{fill:#d72cb5;}.cls-14{fill:#c538b8;}.cls-15{fill:#bb40bb;}.cls-16{fill:#da29b4;}.cls-17{fill:#c13cb9;}.cls-18{fill:#b544bc;}.cls-19{fill:#2aaad5;}.cls-20{fill:#af49be;}.cls-21{fill:#8964c5;}.cls-22{fill:#a94dbe;}.cls-23{fill:#826ac7;}.cls-24{fill:#a54fbf;}.cls-25{fill:#e026b1;}.cls-26{fill:#905fc3;}.cls-27{fill:#7b6fc8;}.cls-28{fill:#965ac2;}.cls-29{fill:#2aadcd;}.cls-30{fill:#9b58c2;}.cls-31{fill:#d034af;}.cls-32{fill:#d331b0;}.cls-33{fill:#d72db0;}.cls-34{fill:#db2ab0;}.cls-35{fill:#7077cb;}.cls-36{fill:#7573c9;}.cls-37{fill:#24b0d1;}.cls-38{fill:#35a2d4;}.cls-39{fill:#af49bb;}.cls-40{fill:#4a92d2;}.cls-41{fill:#4f8fce;}.cls-42{fill:#6b7bcb;}.cls-43{fill:#cb36b4;}.cls-44{fill:#5d85ce;}.cls-45{fill:#6380cd;}.cls-46{fill:#b743bb;}.cls-47{fill:#2eaacd;}.cls-48{fill:#38a3c9;}.cls-49{fill:#c43ab5;}.cls-50{fill:#667fc9;}.cls-51{fill:#4595d2;}.cls-52{fill:#a84ebc;}.cls-53{fill:#528cd0;}.cls-54{fill:#5887cf;}.cls-55{fill:#2ea7d5;}.cls-56{fill:#3a9ed3;}.cls-57{fill:#bb41ba;}.cls-58{fill:#9a58c2;}.cls-59{fill:#7475c3;}.cls-60{fill:#8f60c4;}.cls-61{fill:#32a7cb;}.cls-62{fill:#687fc3;}.cls-63{fill:#4099d4;}.cls-64{fill:#a450bf;}.cls-65{fill:#4698c9;}.cls-66{fill:#588bc5;}.cls-67{fill:#fcfcfc;}.cls-68{fill:#409dc8;}.cls-69{fill:#9f54c1;}.cls-70{fill:#955cc3;}.cls-71{fill:#5091c6;}.cls-72{fill:#d031b4;}.cls-73{fill:#8866c6;}.cls-74{fill:#c03cba;}.cls-75{fill:#6185c5;}.cls-76{fill:#7b6ec9;}.cls-77{fill:#6f79c6;}.cls-78{fill:#fefefe;}.cls-79{fill:#24b3cc;}.cls-80{fill:#da2ab2;}.cls-81{fill:#20b5ca;}.cls-82{fill:#25b1cb;}.cls-83{fill:#cc34b4;}.cls-84{fill:#d131b3;}.cls-85{fill:#29aecc;}.cls-86{fill:#26b2c7;}.cls-87{fill:#cb37af;}.cls-88{fill:#c53bb4;}.cls-89{fill:#bb42b6;}.cls-90{fill:#bf3eb5;}.cls-91{fill:#b546b6;}.cls-92{fill:#b04ab8;}.cls-93{fill:#2ea9d1;}.cls-94{fill:#aa4db9;}.cls-95{fill:#8d64bc;}.cls-96{fill:#8966be;}.cls-97{fill:#8568c2;}.cls-98{fill:#7e6dc4;}.cls-99{fill:#a155ba;}.cls-100{fill:#945ebb;}.cls-101{fill:#7673c4;}.cls-102{fill:#9a5aba;}.cls-103{fill:#2eaec3;}.cls-104{fill:#28b2c4;}.cls-105{fill:#7078c5;}.cls-106{fill:#6a7cc7;}.cls-107{fill:#32a6d1;}.cls-108{fill:#37a1d0;}.cls-109{fill:#b249b4;}.cls-110{fill:#ab4db9;}.cls-111{fill:#4d92ca;}.cls-112{fill:#4498ce;}.cls-113{fill:#4796ca;}.cls-114{fill:#528fc9;}.cls-115{fill:#5b87c9;}.cls-116{fill:#6182c9;}.cls-117{fill:#b944b3;}.cls-118{fill:#33a8c6;}.cls-119{fill:#38a6c2;}.cls-120{fill:#3da1c4;}.cls-121{fill:#c33daf;}.cls-122{fill:#bf3fb5;}.cls-123{fill:#6383c4;}.cls-124{fill:#409bd0;}.cls-125{fill:#a254bb;}.cls-126{fill:#a652b6;}.cls-127{fill:#568acc;}.cls-128{fill:#3ba0cd;}.cls-129{fill:#9a5abb;}.cls-130{fill:#9e57b9;}.cls-131{fill:#7e6fc0;}.cls-132{fill:#6d7ebd;}.cls-133{fill:#7a74ba;}.cls-134{fill:#747aba;}.cls-135{fill:#9160bc;}.cls-136{fill:#8b65bf;}.cls-137{fill:#6684bb;}.cls-138{fill:#4a97c1;}.cls-139{fill:#449cc1;}.cls-140{fill:#6088bb;}.cls-141{fill:#5491bf;}.cls-142{fill:#5b8bbf;}.cls-143{fill:#8469c1;}.cls-144{fill:#21b7c5;}.cls-145{fill:#24b5c5;}.cls-146{fill:#2dadc5;}.cls-147{fill:#25b6c1;}.cls-148{fill:#2faebe;}.cls-149{fill:#c63bb0;}.cls-150{fill:#c13fb0;}.cls-151{fill:#bd41b3;}.cls-152{fill:#b945b3;}.cls-153{fill:#b549ae;}.cls-154{fill:#ad4eb3;}.cls-155{fill:#a651b7;}.cls-156{fill:#8f64b6;}.cls-157{fill:#816ebe;}.cls-158{fill:#8869ba;}.cls-159{fill:#7973bf;}.cls-160{fill:#a357b0;}.cls-161{fill:#9e5ab3;}.cls-162{fill:#965fb5;}.cls-163{fill:#32aeb8;}.cls-164{fill:#2bb2ba;}.cls-165{fill:#33abbe;}.cls-166{fill:#27b5be;}.cls-167{fill:#6e7bc1;}.cls-168{fill:#7477bd;}.cls-169{fill:#6a7ec0;}.cls-170{fill:#37a4c8;}.cls-171{fill:#31a9c9;}.cls-172{fill:#b14dad;}.cls-173{fill:#ac4eb3;}.cls-174{fill:#4e94c3;}.cls-175{fill:#4b95c6;}.cls-176{fill:#429bca;}.cls-177{fill:#4599c6;}.cls-178{fill:#548fc3;}.cls-179{fill:#578bc6;}.cls-180{fill:#5b8ac2;}.cls-181{fill:#bd43ae;}.cls-182{fill:#bf40b0;}.cls-183{fill:#3aa7bb;}.cls-184{fill:#40a1bd;}.cls-185{fill:#6385c0;}.cls-186{fill:#a257b2;}.cls-187{fill:#a853af;}.cls-188{fill:#3e9fc7;}.cls-189{fill:#945fb9;}.cls-190{fill:#9c5bb4;}.cls-191{fill:#846cb8;}.cls-192{fill:#806fb9;}.cls-193{fill:#6b83b3;}.cls-194{fill:#6f7eb7;}.cls-195{fill:#7b76b3;}.cls-196{fill:#7778b6;}.cls-197{fill:#737db1;}.cls-198{fill:#8a68b8;}.cls-199{fill:#8e65b5;}.cls-200{fill:#6487b5;}.cls-201{fill:#469dbb;}.cls-202{fill:#4d97bb;}.cls-203{fill:#5b8db7;}.cls-204{fill:#5492b9;}.cls-205{fill:#21bac0;}.cls-206{fill:#34a9c5;}.cls-207{fill:#20bbba;}.cls-208{fill:#25b8b9;}.cls-209{fill:#2bb2bb;}.cls-210{fill:#39abb2;}.cls-211{fill:#30b0b5;}.cls-212{fill:#39a7bb;}.cls-213{fill:#a754af;}.cls-214{fill:#9265af;}.cls-215{fill:#8a69b4;}.cls-216{fill:#7e73b8;}.cls-217{fill:#856cb7;}.cls-218{fill:#7778b8;}.cls-219{fill:#9e5cac;}.cls-220{fill:#a458ab;}.cls-221{fill:#9b5eb0;}.cls-222{fill:#39a9b3;}.cls-223{fill:#2eb3b2;}.cls-224{fill:#34b0ad;}.cls-225{fill:#27b8b6;}.cls-226{fill:#707db9;}.cls-227{fill:#6b82b8;}.cls-228{fill:#aa53ab;}.cls-229{fill:#4a99bd;}.cls-230{fill:#5194b9;}.cls-231{fill:#439ebf;}.cls-232{fill:#598eba;}.cls-233{fill:#6189ba;}.cls-234{fill:#43a1b8;}.cls-235{fill:#41a4b2;}.cls-236{fill:#995fb1;}.cls-237{fill:#8071b5;}.cls-238{fill:#896ab2;}.cls-239{fill:#6d82b0;}.cls-240{fill:#6687af;}.cls-241{fill:#6c85a7;}.cls-242{fill:#7979ad;}.cls-243{fill:#7280a8;}.cls-244{fill:#8e69ab;}.cls-245{fill:#9364ae;}.cls-246{fill:#618dad;}.cls-247{fill:#5e8db1;}.cls-248{fill:#4a9bb6;}.cls-249{fill:#4f99b4;}.cls-250{fill:#5895ab;}.cls-251{fill:#5495b1;}.cls-252{fill:#21bcb5;}.cls-253{fill:#26bab2;}.cls-254{fill:#2cb5b2;}.cls-255{fill:#3daca6;}.cls-256{fill:#32b3a9;}.cls-257{fill:#40a3b8;}.cls-258{fill:#32b1af;}.cls-259{fill:#40a7ae;}.cls-260{fill:#9a60aa;}.cls-261{fill:#9465a9;}.cls-262{fill:#866eaf;}.cls-263{fill:#7e74b2;}.cls-264{fill:#767bb2;}.cls-265{fill:#3fa8ac;}.cls-266{fill:#39adab;}.cls-267{fill:#28b9ad;}.cls-268{fill:#30b4aa;}.cls-269{fill:#35b2a6;}.cls-270{fill:#22beb0;}.cls-271{fill:#6d82b1;}.cls-272{fill:#6588b4;}.cls-273{fill:#4a9cb6;}.cls-274{fill:#5099b0;}.cls-275{fill:#5793b2;}.cls-276{fill:#5f8db1;}.cls-277{fill:#47a0b0;}.cls-278{fill:#45a5a8;}.cls-279{fill:#8373a9;}.cls-280{fill:#856fae;}.cls-281{fill:#6789a6;}.cls-282{fill:#6887ac;}.cls-283{fill:#7e77a9;}.cls-284{fill:#777ca8;}.cls-285{fill:#886fa9;}.cls-286{fill:#5d91ab;}.cls-287{fill:#618fa5;}.cls-288{fill:#4f9bad;}.cls-289{fill:#5598a5;}.cls-290{fill:#5299a8;}.cls-291{fill:#5b93a5;}.cls-292{fill:#26bcab;}.cls-293{fill:#2cb7ac;}.cls-294{fill:#39afa2;}.cls-295{fill:#41a9a3;}.cls-296{fill:#44a4a9;}.cls-297{fill:#33b4a1;}.cls-298{fill:#2db8a6;}.cls-299{fill:#23bfa9;}.cls-300{fill:#2abaa6;}.cls-301{fill:#509da5;}.cls-302{fill:#5b92ab;}.cls-303{fill:#638caa;}.cls-304{fill:#49a1a6;}.cls-305{fill:#45a5a3;}.cls-306{fill:#4e9da7;}.cls-307{fill:#24c0a3;}.cls-308{fill:#2eb9a1;}</style></defs><title>babylon_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g id="lZQzip.tif"><path class="cls-2" d="M105.41242,102.38161l-.00032,1.63174c-.0627.13341.00024.28369-.05621.41793a11.38311,11.38311,0,0,1-2.01033,5.06153,11.067,11.067,0,0,1-3.3906,3.02011,10.84647,10.84647,0,0,1-4.08857,1.32846c-.1868.06553-.38843-.017-.57433.05755l-1.089-.00025c-.20941-.07879-.43384.01163-.64415-.05713a10.19579,10.19579,0,0,1-3.70134-1.065c-.48065-.24244-.92492-.557-1.38588-.83845-.06063-.037-.09079-.14074-.18466-.10308-.11421.04582-.06434.15491-.06525.2351-.00276.24289.00733.48591.01241.72888-.04373.09358-.13.06517-.20175.06525q-2.00022.00226-4.00042.00105a.2189.2189,0,0,1-.17784-.05013q.00179-12.68058.00359-25.36114c.00007-.49836.00007-.49838.51672-.49839,1.14195,0,2.28413.01292,3.42569-.00811.33035-.00608.43083.06512.428.416-.01821,2.2576-.00931,4.51543-.00931,6.77318v.49616a11.05883,11.05883,0,0,1,5.10888-2.07265c.13193-.05882.28125.00852.4123-.0568l.5892-.02108a2.452,2.452,0,0,1,.76686.00027l.58451.02113c.13295.06326.28351-.00195.417.05717a11.59144,11.59144,0,0,1,3.62542,1.17991,10.5452,10.5452,0,0,1,5.46726,7.37007c.05888.28588.11169.573.16732.85955C105.4121,102.10265,105.3474,102.25077,105.41242,102.38161Z"/><path class="cls-2" d="M34.63653,86.95277l4.29235-.00054c.09161.12769.04478.27327.045.40941.00339,2.27909.00048,4.5582.00786,6.83726.00039.12039-.097.284.08547.36982A10.467,10.467,0,0,1,43.578,92.65287c.17488-.0308.34953-.0629.52429-.09438.12944-.05756.27686.01345.40456-.05657l.59672-.02a2.09239,2.09239,0,0,1,.68969-.00017l.59843.01974c.12693.0712.27387-.00048.4028.05643a11.00511,11.00511,0,0,1,4.67914,1.79236,10.4814,10.4814,0,0,1,4.49119,6.91367c.05776.31192.11043.6248.16546.93723.06769.21176-.0209.43721.05681.64808a2.5436,2.5436,0,0,0,.00035.69962c-.07312.18609.00488.38662-.0549.574a10.76306,10.76306,0,0,1-2.32311,5.73583,10.60091,10.60091,0,0,1-6.22918,3.81747,13.59407,13.59407,0,0,1-2.67368.22263c-.18573-.07349-.38628.00608-.57316-.05551a10.43588,10.43588,0,0,1-5.25691-2.01274c-.22287.18028-.09238.42551-.08856.63086.00576.31021-.07424.41724-.40251.41178-1.18-.01964-2.36055-.00755-3.54089-.00779-.45637-.00009-.45687-.00053-.45688-.45163q-.00017-11.04411-.00007-22.08823c0-1.0005-.00178-2.001.00227-3.00152C34.59038,87.2003,34.54594,87.06672,34.63653,86.95277Z"/><path class="cls-2" d="M70.59875,92.56a11.608,11.608,0,0,1,3.789,1.26288c.427.24032.83354.51681,1.28941.80181a3.2784,3.2784,0,0,0,.01372-1.00883c.02837-.10709.118-.07834.18769-.07842q2.02682-.00267,4.05362-.00136a.21665.21665,0,0,1,.14177.04475l-.00015,19.23937c-1.44837.09646-2.898.03169-4.347.03046-.0119,0-.02376-.04231-.03565-.06486.03551-.3164.15843-.77168-.03968-.91009-.21749-.15194-.50493.23574-.75607.39269a10.241,10.241,0,0,1-3.92419,1.482c-.176.02672-.35093.05994-.52637.09015-.18449.06812-.38468-.01774-.5684.05795l-1.17047,0c-.21022-.07641-.43394.0082-.64534-.05409a9.69788,9.69788,0,0,1-3.54018-.98888,10.61343,10.61343,0,0,1-3.67078-2.958,11.10393,11.10393,0,0,1-2.09314-4.33279c-.093-.37677-.13-.75531-.18841-1.13379-.05411-.13074.01294-.2778-.05476-.40671l.00085-1.71014c.06237-.13445-.00032-.28595.05741-.421a9.69545,9.69545,0,0,1,1.34064-4.07919,10.37686,10.37686,0,0,1,5.04614-4.46406,13.59363,13.59363,0,0,1,2.94821-.79295c.13132-.05309.27845.01255.40795-.05428l.59309-.02042a2.07215,2.07215,0,0,1,.68971,0l.58835.02142C70.31706,92.5682,70.46642,92.50184,70.59875,92.56Z"/><path class="cls-2" d="M136.22286,101.739a10.55646,10.55646,0,0,1,2.44338-5.48159,10.26677,10.26677,0,0,1,6.4419-3.61265c.12549-.01986.2484-.05608.37252-.08468.13471-.057.28572.00589.41964-.057l.659-.02133a1.60255,1.60255,0,0,1,.61285.001l.58664.02047c.13217.06357.28091.00119.41442.05453a11.17161,11.17161,0,0,1,4.92871,1.94918c.12262-.01494.18515.05812.23.157a11.48323,11.48323,0,0,1,2.37081,2.52474,10.21138,10.21138,0,0,1,1.71935,4.44978c.01946.13779.05893.27275.08909.409.05146.13548-.00713.28517.05419.41937l.00014,1.46681c-.06137.13448-.00271.28456-.05466.42026a11.2611,11.2611,0,0,1-1.86152,4.91853,11.06171,11.06171,0,0,1-4.001,3.49915,10.90974,10.90974,0,0,1-3.62934,1.0724c-.21173.06282-.43585-.02183-.64644.05434l-1.01887.00044c-.23463-.08194-.48355.01422-.719-.05762a10.64855,10.64855,0,0,1-9.41034-9.17862c-.06328-.12961.01014-.279-.05913-.40779l-.02026-.43963a6.29627,6.29627,0,0,1-.00059-1.2288l.01948-.44508C136.23691,102.015,136.161,101.8669,136.22286,101.739Z"/><path class="cls-3" d="M108.10551,24.18116A19.04342,19.04342,0,0,1,109.618,19.0384a20.56281,20.56281,0,0,1,3.31319-5.17462c.058-.0676.128-.12492.19239-.187a.58705.58705,0,0,1,.30652-.35745,18.23673,18.23673,0,0,1,1.928-1.783.609.609,0,0,1,.28754-.21982l.63689-.47672c.06835-.11283.201-.138.29477-.21626a19.95434,19.95434,0,0,1,5.77059-2.78765.43228.43228,0,0,0,.09747-.06037c.09611-.08387.20175-.03963.30525-.02284a5.07713,5.07713,0,0,1,.36456,1.6745c.151,1.37575.37846,2.73751.65136,4.09323.06239.30994.12178.61909.19791.96579.2284-.13609.22764-.356.33537-.50349.09127-.125.17341-.26722.36041-.23759.18012.02855.24682.16669.28139.32576a8.05405,8.05405,0,0,1,.20257,3.34968,2.66144,2.66144,0,0,0-.01076.91779,6.59283,6.59283,0,0,1-.13906,1.71245,21.01406,21.01406,0,0,1-.59418,3.3667c-.15548.54323-.2648.61154-.82409.68574a21.8299,21.8299,0,0,0-3.85755.58227,23.657,23.657,0,0,1-2.935.77053c-1.03225.19041-2.07612.31678-3.11833.41641-1.19354.11409-2.38765.20907-3.57118.40622a3.20552,3.20552,0,0,0-1.11469.40294c-.39873.23506-.60487.14073-.71986-.31493-.11921-.47236-.16719-.96034-.30723-1.42885A1.117,1.117,0,0,1,108.10551,24.18116Z"/><path class="cls-2" d="M170.976,92.48275l.58774.02046c.13173.064.28022.001.41332.05454a11.1725,11.1725,0,0,1,4.92872,1.94918c.12263-.01494.18515.05812.23.157a11.48038,11.48038,0,0,1,2.3709,2.52482,10.21276,10.21276,0,0,1,1.71959,4.44975,1.54145,1.54145,0,0,0,.08058.25287.22939.22939,0,0,1,.05237.16618.73794.73794,0,0,0,.00993.40828q.002,5.17333.00394,10.34666c-.11124.09873-.2459.05-.36866.05044-1.116.00426-2.23216-.009-3.34783.00986-.31466.00533-.408-.0757-.40676-.3992.01219-3.15484.00781-6.30975.00589-9.46463a1.19973,1.19973,0,0,0-.03-.45689,6.52161,6.52161,0,0,0-3.58673-5.22192,6.08072,6.08072,0,0,0-2.17483-.68356c-.15521-.07359-.32837.006-.48484-.0568l-.61966-.00051c-.155.06482-.32791-.01827-.48157.058a4.26881,4.26881,0,0,0-1.75677.42321,6.52565,6.52565,0,0,0-3.73969,3.95482,1.25874,1.25874,0,0,0-.03719.22353,1.01223,1.01223,0,0,0-.03018.41834q-.00264,5.38994-.00155,10.77989c0,.41716-.00091.418-.4118.41816-1.20657.00043-2.41328-.00941-3.61963.00708-.29077.004-.36373-.079-.36335-.36573q.01226-9.29764-.00054-18.59531c-.00044-.30609.08376-.38661.38565-.38242q1.82877.02544,3.658-.0003c.2999-.00433.38945.09348.35491.37275a2.0816,2.0816,0,0,0,.00108.42292c.00653.07974.03607.155.14608.11113a12.10607,12.10607,0,0,1,1.51035-.93027.21345.21345,0,0,1,.22648-.09535c.08646-.08622.24858.00183.31277-.13571a.20878.20878,0,0,1,.22666-.09361l1.54193-.45154a.20231.20231,0,0,1,.2437-.04837l.75951-.121c.13151-.05807.28029.0096.4107-.05644l.59077-.02112A2.04541,2.04541,0,0,1,170.976,92.48275Z"/><path class="cls-2" d="M110.80912,119.22141q1.101-2.6006,2.202-5.20118c.20717-.48933.41254-.97944.62317-1.46727a.44549.44549,0,0,0-.01-.40023c-.5558-1.17222-1.0978-2.351-1.65525-3.52245-.54807-1.15167-1.1181-2.293-1.66239-3.4464-.53858-1.14134-1.04855-2.29617-1.58682-3.43768-.5224-1.10784-1.10178-2.19026-1.58832-3.31322-.51253-1.183-1.112-2.3238-1.6277-3.50481-.2036-.46627-.45856-.91047-.63115-1.40686,1.52426,0,3.02608.00276,4.52787-.00345a.3571.3571,0,0,1,.38162.23425q2.01563,4.32179,4.04609,8.63667c.67916,1.44332,1.37116,2.88058,2.05344,4.32246a.34623.34623,0,0,0,.135.181c.398-.93367.79593-1.86114,1.18884-2.79074.46761-1.10636.9283-2.21566,1.39686-3.32163.38072-.89869.77272-1.79262,1.1523-2.69179.46721-1.10675.92695-2.21666,1.38944-3.3254.1476-.35384.30266-.705.43619-1.06407a.25849.25849,0,0,1,.29272-.17794c1.42488.00128,2.84979.00606,4.2746-.00277.388-.00241.18142.225.13284.34162-.58851,1.41215-1.18988,2.81893-1.78593,4.22794q-1.64718,3.89383-3.29287,7.78828c-.96233,2.27075-1.93428,4.53744-2.89327,6.80959-.93871,2.22409-1.86642,4.45281-2.799,6.67951-.07529.07089-.16938.04616-.25636.04625-1.38334.00146-2.76668.00417-4.15-.005C110.99384,119.40531,110.74847,119.52949,110.80912,119.22141Z"/><path class="cls-4" d="M104.40436,15.7113a9.72922,9.72922,0,0,1,1.07941,1.77089c.37952,2.434.8474,4.8511,1.38458,7.2551.23236,1.03988.52955,2.06343.77838,3.0983a1.06754,1.06754,0,0,0,1.00368.90079c1.0857.12054,2.14446.39755,3.22979.51729.867.09565,1.73753.13786,2.60645.19994,1.11068.07934,2.22544.00787,3.33963.05847a11.36973,11.36973,0,0,0,2.14325-.17673c1.22033-.179,2.45-.2313,3.67574-.3382.75336-.0657,1.5106-.09005,2.25855-.217a1.32551,1.32551,0,0,0,.65474-.30225,7.85559,7.85559,0,0,0,2.17918-2.99069,8.74582,8.74582,0,0,0,.2993-1.73971,8.56519,8.56519,0,0,0-.20349-3.05462c-.54855-3.39645-1.29737-6.75407-1.98865-10.12282a3.84919,3.84919,0,0,0-.618-1.75573,1.91816,1.91816,0,0,1-.24025-1.03876.7167.7167,0,0,0-.38049-.61708c.08346-.097.21035-.04319.30857-.0889.12731-.0632.27536.0134.40122-.05951l.29225-.01824c.31089-.07614.633.02978.94318-.05835l1.49352.00081c.31346.0851.63795-.01643.95214.05632l-.00682.02572a.62359.62359,0,0,1,.1485.34794c.54487,2.27087,1.001,4.5644,1.616,6.81618.31761,1.163.601,2.33124.86147,3.50572a5.991,5.991,0,0,1,.19829,2.43576.67474.67474,0,0,0,.0383.3791,2.07008,2.07008,0,0,1,.07913,1.1021,20.78858,20.78858,0,0,0-.13777,2.16187,9.80274,9.80274,0,0,1-2.78369,6.72779,10.86767,10.86767,0,0,1-1.92378,1.646,2.58061,2.58061,0,0,1-.94221.30048,10.54388,10.54388,0,0,0-1.78057.14844.16694.16694,0,0,1-.0762.0084c-1.00624-.136-2.008.21928-3.01777.02143a1.76573,1.76573,0,0,0-.83694.06885,3.38971,3.38971,0,0,1-1.29915.03958,1.25374,1.25374,0,0,0-.79279-.01767.47864.47864,0,0,1-.34034-.00558,2.832,2.832,0,0,0-1.29419-.07036,9.74052,9.74052,0,0,1-3.95844-.27935c-1.28946-.42113-2.648-.47565-3.92582-.91149a5.72982,5.72982,0,0,1-2.86508-1.91321,1.444,1.444,0,0,1-.24188-.43406,43.99708,43.99708,0,0,1-2.02107-8.83215c-.141-1.40228-.29239-2.80366-.4259-4.20676C104.25612,15.92726,104.20252,15.76342,104.40436,15.7113Z"/><path class="cls-5" d="M125.60614,7.15852c.334-.04964.44222.10351.46852.42956a2.73972,2.73972,0,0,0,.533,1.63842c.32663.39387.26146.948.36642,1.429.39118,1.79269.75765,3.591,1.11329,5.39114.36267,1.83589.67805,3.68076,1.009,5.52239a9.689,9.689,0,0,1-.15082,3.56582,5.94459,5.94459,0,0,1-1.47962,2.61c-.082.09806-.19606.1715-.26862.275a2.7822,2.7822,0,0,1-2.32588,1.01306c-1.67713.12281-3.35476.2187-5.02712.4294a10.09409,10.09409,0,0,1-2.58783.12679c-.726-.09453-1.4719.02294-2.21141-.013a28.35478,28.35478,0,0,1-4.97651-.51966c-.60516-.13825-1.23554-.137-1.8369-.32228a.8218.8218,0,0,1-.61118-.609c-.50159-1.75511-.92218-3.52925-1.27681-5.31937-.22026-1.1118-.44565-2.22266-.65441-3.33663-.10541-.56253-.18158-1.13065-.26442-1.6972a.30353.30353,0,0,1,.0589-.28981,27.37527,27.37527,0,0,1,1.3355,2.69419c.03969.10518.16076.17715.12746.31212a32.58288,32.58288,0,0,1,.948,3.76744c.15772.20248.05231.459.13885.67607a6.49762,6.49762,0,0,1,.31029,1.37543c.09965.445.20245.49741.59626.27425a5.34532,5.34532,0,0,1,1.75183-.50721,14.50255,14.50255,0,0,1,1.60607-.17717,5.27,5.27,0,0,1,1.29524-.13348,1.817,1.817,0,0,0,.97131-.13538,2.02351,2.02351,0,0,1,.7164-.08442,14.13442,14.13442,0,0,0,3.63991-.71728,19.1927,19.1927,0,0,1,2.241-.57,9.82731,9.82731,0,0,1,1.05-.11654,2.6934,2.6934,0,0,0,1.16143-.146c.01119-.00627.02429-.01878.034-.01669.91757.19757.891-.55369,1.02257-1.07177a11.68384,11.68384,0,0,0,.36774-2.10232,12.89731,12.89731,0,0,1,.17056-1.56984c.15435-.79639-.04244-1.5773.136-2.37582a7.18116,7.18116,0,0,0-.27341-2.862.23041.23041,0,0,0-.177-.18067c-.11082-.03782-.1466.05865-.21013.1212-.15509.15269-.11749.39058-.26066.54584-.06535.07086-.08659.22694-.20915.181a.33072.33072,0,0,1-.16927-.23691c-.07681-.84944-.3084-1.67088-.44584-2.50925-.09208-.56173-.13436-1.1322-.24168-1.686a9.44422,9.44422,0,0,0-.3478-2.02733,1.38587,1.38587,0,0,1-.02829-.45785l.01093-.04942c.7478-.16168,1.49455-.32854,2.24412-.48156A5.36662,5.36662,0,0,1,125.60614,7.15852Z"/><path class="cls-6" d="M120.1343,32.65112a6.38178,6.38178,0,0,0,1.51764-.12865c.52566-.15559,1.08742.09262,1.639.05314a1.22157,1.22157,0,0,0,.66694-.11847.56742.56742,0,0,1,.37383-.02619,2.20881,2.20881,0,0,0,1.38392-.07044.746.746,0,0,1,.41369.0198.74566.74566,0,0,0,.625-.058c.18866-.1304.38213.05149.59393.0033a4.068,4.068,0,0,0,1.74195-1.06385,12.58324,12.58324,0,0,0,2.67706-3.41047,7.4936,7.4936,0,0,0,.69578-2.33112,7.57262,7.57262,0,0,0,.19148-1.57514,6.34588,6.34588,0,0,0,.05565-1.83495c-.078-.24927.19046-.509.14126-.807a2.23962,2.23962,0,0,0-.13041-.81843c-.12336-.22556.01836-.49877.044-.75126a5.74362,5.74362,0,0,0-.16118-1.56459,19.44289,19.44289,0,0,0-.61712-2.83256c-.28438-.85129-.48483-1.71675-.69585-2.58192-.44076-1.80708-.85644-3.62029-1.27906-5.43176a1.881,1.881,0,0,1-.0215-.30615A15.98507,15.98507,0,0,1,132.845,7.479a.50148.50148,0,0,1,.13081.23158,49.688,49.688,0,0,1,2.01791,8.4048,18.21828,18.21828,0,0,1,.27926,2.63092.76591.76591,0,0,0,.10263.36755.50529.50529,0,0,1,.05306.40814,2.02686,2.02686,0,0,0-.08194.91352,9.35413,9.35413,0,0,0,.10765,2.02284.241.241,0,0,1,.00743.11458,33.91307,33.91307,0,0,1-1.62343,7.27583,9.70686,9.70686,0,0,1-1.38024,2.07526,9.48749,9.48749,0,0,1-2.71467,2.467,4.50315,4.50315,0,0,1-1.35042.53045,3.08355,3.08355,0,0,1-1.276.07831,1.11311,1.11311,0,0,0-.74571.13083.56453.56453,0,0,1-.41165.03573,3.51367,3.51367,0,0,0-1.73081.059,3.571,3.571,0,0,1-2.00817-.04747,4.346,4.346,0,0,0-1.90189-.05094.879.879,0,0,1-.59233-.04171.75263.75263,0,0,0-.40915-.09023c-1.2409.05239-2.46072-.201-3.69449-.25138a2.50064,2.50064,0,0,0-.30847-.05935,19.87577,19.87577,0,0,1-5.66911-1.2823,1.31418,1.31418,0,0,1-.3671-.20423.56291.56291,0,0,0-.3023-.17487,6.69961,6.69961,0,0,1-3.33281-4.03482c-.38037-1.32939-.76285-2.65991-1.0232-4.016-.18022-.93879-.2569-1.89952-.38408-2.84985-.09-.67233-.13218-1.349-.20538-2.02275a.45857.45857,0,0,1,.07613-.39964c.2335.01019.24471.19.25938.35439.10708,1.2.2803,2.39105.45046,3.58347a26.43026,26.43026,0,0,0,1.07152,4.44272,7.53319,7.53319,0,0,0,1.2159,2.51222,6.109,6.109,0,0,0,3.85119,2.11473.40553.40553,0,0,0,.19119-.00021,6.8954,6.8954,0,0,1,2.77067.03242,44.72289,44.72289,0,0,0,5.25789.1827.97314.97314,0,0,0,.54036-.17747C119.84031,32.65729,119.96677,32.5574,120.1343,32.65112Z"/><path class="cls-7" d="M103.34009,72.70127c-.83063-.32459-1.63712-.70182-2.44339-1.0828A33.43745,33.43745,0,0,1,97.641,69.97632a8.83717,8.83717,0,0,1-.46461-2.73078,8.47071,8.47071,0,0,0-.08149-1.56152,5.15678,5.15678,0,0,1,.06829-1.14823.67531.67531,0,0,0-.376-.65364,14.08384,14.08384,0,0,1-2.37946-1.68747,3.94162,3.94162,0,0,0-.9147-.56584,20.74024,20.74024,0,0,0-2.05258-.95975,3.20772,3.20772,0,0,1-.75-.3885c-.16453-.11534-.29447-.14228-.38073.0943-.07678.21052-.23739.20568-.40857.1135A4.54453,4.54453,0,0,1,89.438,60.213a33.71361,33.71361,0,0,0-4.58-2.52155c-.54052-.26638-1.07543-.54568-1.60021-.84342a.63617.63617,0,0,1-.36347-.46453.82455.82455,0,0,0-.39825-.54009,14.46986,14.46986,0,0,1-2.0368-1.44187.2658.2658,0,0,0-.37837-.01093c-.44554.28888-.62066.24055-.91818-.22906-.04451-.15711-.01573-.33414-.11628-.4753a.46367.46367,0,0,1,.10826-.67732,1.29208,1.29208,0,0,0,.50413-.96574.65162.65162,0,0,1,.0479-.14416c.14958-.2654.17024-.62573.53679-.73228a2.58723,2.58723,0,0,1,1.397.66306c.34593.28579.71493.54391,1.07586.81143a1.16594,1.16594,0,0,0,.70164.2767,1.23,1.23,0,0,1,.63253.26328A20.46455,20.46455,0,0,0,88.174,55.156c.59193.21194,1.1727.45456,1.76515.66583a.53615.53615,0,0,1,.29389.17513,2.24633,2.24633,0,0,0,1.54488.84813c.89211.21477,1.71631.60142,2.57578.89628,1.5427.52925,3.01121,1.23918,4.51994,1.85118a8.569,8.569,0,0,0,2.52622.45256,3.6449,3.6449,0,0,1,.82979.15793c.18193.06023.36873.12644.43906.33752-.13873.2345-.34989.10311-.5124.07185a2.45059,2.45059,0,0,0-1.10328.04482,1.205,1.205,0,0,0-.80807,1.33007.50453.50453,0,0,0,.2601.31769c.46964.28853.88546.65331,1.35906.93847.45356.27309.51725.56049.21856.99355a4.22715,4.22715,0,0,0-.72292,2.42157,7.94336,7.94336,0,0,1-.25423,1.66848,1.28623,1.28623,0,0,0,.42541,1.38309,4.81378,4.81378,0,0,1,.59991.69914,1.615,1.615,0,0,1,.388,1.09893.50924.50924,0,0,0,.05627.33414.84151.84151,0,0,0,.46643.2233,1.0586,1.0586,0,0,1,.58077.32266C103.696,72.71666,103.66373,72.75239,103.34009,72.70127Z"/><path class="cls-2" d="M128.7694,86.95128l4.294.002c.09292.11323.048.24722.048.37065q.00359,12.56722.002,25.13443c0,.40628-.00109.40683-.42258.40694-1.19347.0003-2.387-.00829-3.58031.00619-.288.0035-.39377-.05181-.39339-.37336q.01462-12.60569.00933-25.2114C128.72653,87.17467,128.69189,87.05481,128.7694,86.95128Z"/><path class="cls-8" d="M79.22829,54.13966c.35955.44678.4117.45726.86273.09658a.2307.2307,0,0,1,.365.01476,12.19076,12.19076,0,0,0,2.11086,1.5163c.17055.12085.37583.24107.38569.45216.02046.438.3492.5399.64969.70063a58.52889,58.52889,0,0,1,6.28747,3.4531c.20324.14307.34382.19342.35951-.14292.01249-.2677.17974-.25488.34171-.13515a15.89082,15.89082,0,0,0,1.89472.90954,10.26468,10.26468,0,0,1,2.37251,1.44961,9.00619,9.00619,0,0,0,1.726,1.19833c.69444.412.81447.59681.64272,1.38551a1.94865,1.94865,0,0,0,.00633.871,2.45465,2.45465,0,0,1,.03857,1.09691,2.17314,2.17314,0,0,0,.07959,1.10055c.16848.53806.03545,1.13771.33748,1.65174.02765.047-.02993.14416-.04794.218-.76852-.38787-1.53152-.78491-2.283-1.20629-1.67951-.94172-3.30679-1.9678-4.93093-2.99949-1.45911-.92685-2.865-1.93088-4.25461-2.95791-1.2152-.89816-2.41793-1.81541-3.55793-2.80577-1.2359-1.07366-2.44176-2.182-3.6354-3.30493a24.86359,24.86359,0,0,1-3.06066-3.57054c.05134-.20435.08335-.2423.23629-.15312a4.828,4.828,0,0,0,1.43812.511.52668.52668,0,0,1,.23813.12122,1.60359,1.60359,0,0,0,1.19108.43817A.29762.29762,0,0,1,79.22829,54.13966Z"/><path class="cls-9" d="M142.40007,12.61785a13.48494,13.48494,0,0,1,1.614,1.7162,3.12216,3.12216,0,0,1,.6203.826.83243.83243,0,0,1,.10336.40486,29.93735,29.93735,0,0,1-1.018,9.32673,35.60688,35.60688,0,0,1-2.89424,7.23567,28.89817,28.89817,0,0,1-3.46014,5.16935,15.18468,15.18468,0,0,1-4.90338,3.95859,7.14585,7.14585,0,0,1-2.633.66228c-1.485.11313-2.97374.0919-4.46119.07893-1.64028-.0143-3.27788-.10843-4.91429-.21955-.15389-.01045-.30791-.0098-.46183-.0077a1.39138,1.39138,0,0,1-.92223-.19241.46476.46476,0,0,0-.21986-.06594,5.42163,5.42163,0,0,1-1.53577-.45045,7.89493,7.89493,0,0,0-1.96512-.51987,23.65433,23.65433,0,0,1-5.86638-1.81751,11.52866,11.52866,0,0,1-1.30791-.73542c-.15028-.0924-.31543-.1872-.30243-.407.22846-.127.4242-.00546.61067.097a23.4676,23.4676,0,0,0,3.85491,1.62176,3.38848,3.38848,0,0,0,1.09277.18276,15.30779,15.30779,0,0,1,1.92664.33265,2.34707,2.34707,0,0,0,1.34955-.14457,2.16867,2.16867,0,0,1,.8951-.19275c.64091.01848,1.27227.13354,1.91353.16926,1.38226.077,2.76328.13827,4.14817.1429.89634.003,1.79334.13281,2.68912.06411,1.11215-.08529,2.23-.01911,3.33935-.15465A7.78215,7.78215,0,0,0,133.002,38.427a15.81364,15.81364,0,0,0,4.35407-4.18769,29.11489,29.11489,0,0,0,5.03734-12.19864,23.78845,23.78845,0,0,0,.35491-4.89843,38.02859,38.02859,0,0,0-.4891-3.92815C142.22722,12.99725,142.18344,12.77648,142.40007,12.61785Z"/><path class="cls-10" d="M136.69742,8.77316a14.21436,14.21436,0,0,1,2.6957,1.46552.45578.45578,0,0,1,.08343.17234c.32548,1.92136,1.0284,3.76048,1.21959,5.71318a27.30971,27.30971,0,0,1,.24759,3.79337A23.71647,23.71647,0,0,1,140.062,25.414a23.80923,23.80923,0,0,1-4.3702,8.75267,12.24255,12.24255,0,0,1-4.75074,3.64252,7.18317,7.18317,0,0,1-2.47409.50461c-1.58774.07127-3.17507.15184-4.76461.13975-.69139-.00525-1.38075-.0874-2.07394-.08812a1.84631,1.84631,0,0,1-.74621-.172,2.064,2.064,0,0,0-.97192-.18471,14.85159,14.85159,0,0,1-2.817-.35447c-.36107-.0828-.73942-.0556-1.107-.11906a35.14306,35.14306,0,0,1-5.67583-1.34769c-.67579-.23653-1.21766-.70464-1.86969-.97131-.51207-.44135-1.11846-.76242-1.59875-1.24557a7.96692,7.96692,0,0,1-1.15038-1.32454.44662.44662,0,0,1-.09218-.395c.0743-.14146.18785-.116.29474-.05686a5.07379,5.07379,0,0,1,1.2102.797,7.99059,7.99059,0,0,0,3.52791,2.01639,1.39959,1.39959,0,0,0,.45393.06736.25708.25708,0,0,1,.1095.05665,3.42377,3.42377,0,0,0,1.26833.41414,44.22112,44.22112,0,0,0,5.62021.89464c1.5407.14345,3.0661.40147,4.623.45061a47.21536,47.21536,0,0,0,6.10616-.183,6.87517,6.87517,0,0,0,3.20539-1.32462,14.68648,14.68648,0,0,0,5.08011-6.533,17.30226,17.30226,0,0,0,1.344-5.89343c.05562-.88241.16533-1.76392.14232-2.64783a35.49512,35.49512,0,0,0-.75113-6.64016c-.31414-1.44484-.75379-2.85254-1.1487-4.27388C136.62934,9.1933,136.52481,8.97667,136.69742,8.77316Z"/><path class="cls-11" d="M120.90466,38.11948a4.59279,4.59279,0,0,0,1.21038.15815c.86994-.01815,1.73663.13085,2.6078.07151,1.04812-.07139,2.09746-.06515,3.147-.08059a8.4591,8.4591,0,0,0,5.07176-1.69475,15.41812,15.41812,0,0,0,4.1368-4.52523,27.46938,27.46938,0,0,0,2.57869-5.64,23.77878,23.77878,0,0,0,.983-4.4755,16.45488,16.45488,0,0,0,.204-2.39583,34.55309,34.55309,0,0,0-.55742-5.23756c-.19506-1.046-.58713-2.0343-.77952-3.07542a3.55363,3.55363,0,0,1-.11395-.98561,16.19331,16.19331,0,0,1,3.00695,2.37917,3.2753,3.2753,0,0,0,.11807,1.54061,21.12739,21.12739,0,0,1,.33107,4.806,28.53027,28.53027,0,0,1-1.53383,7.8049,29.71264,29.71264,0,0,1-3.00979,6.24523,18.248,18.248,0,0,1-3.00861,3.76365,11.13691,11.13691,0,0,1-4.89267,2.90377,6.29249,6.29249,0,0,1-1.43458.19727c-1.37172-.01-2.74177.18135-4.1098.077-1.115-.085-2.23-.00474-3.34068-.07709-1.30966-.08531-2.62432-.11695-3.92712-.2964a.82473.82473,0,0,0-.59637-.30008,44.4847,44.4847,0,0,1-4.97073-1.103,2.00012,2.00012,0,0,1-.60752-.23107c-.15143-.09259-.27477-.2048-.13612-.40094a.72165.72165,0,0,1,.56059-.00062c.9515.21,1.90057.43047,2.85812.61341.36816.07033.74035.06535,1.1088.113a.29419.29419,0,0,0,.189-.02085c.61733-.38027,1.27194-.14593,1.91247-.11665a20.67854,20.67854,0,0,0,2.34471-.00586A3.37271,3.37271,0,0,1,120.90466,38.11948Z"/><path class="cls-12" d="M103.57168,72.393c-.32184-.24194-.76469-.20157-1.07856-.46212-.0928-.59992-.00825-.6786.56354-.52367.08664.02348.17391.04445.26081.06683.1864.048.2846-.00283.31137-.21294.111-.87076.53558-1.65205.72824-2.50077a.28672.28672,0,0,1,.29772-.25254c.19583.0164.2235.1819.24019.34056.00538.05105-.00194.103.00309.1536.014.1408-.10938.33042.09433.40678a.49906.49906,0,0,0,.57477-.09782,1.24,1.24,0,0,1,.88792-.389,1.00218,1.00218,0,0,0,.50867-.24574c.6278-.50684,1.28668-.97346,1.93005-1.45964.74578-.56358,1.49655-1.122,2.22744-1.7054a8.60687,8.60687,0,0,1,1.05635-.767c.38111-.21947.39572-.46259.03886-.74032-.40479-.315-.80951-.62924-1.19027-.97358a.5836.5836,0,0,1-.25881-.408c.03-.15775.155-.22481.27891-.29315a.74582.74582,0,0,1,.71764.16675,16.38552,16.38552,0,0,1,1.61072,1.23028.40822.40822,0,0,0,.15181.11346c.87366.28791,1.66947.75,2.50706,1.1184a6.22362,6.22362,0,0,0,1.81591.56985.46712.46712,0,0,1,.43017.62711c-.02656.11375-.10114.20642-.13451.31685a.61968.61968,0,0,1-.16442.25674,17.28919,17.28919,0,0,1-1.85563,1.54729c-1.22158.73238-2.33765,1.61933-3.50552,2.4303a14.362,14.362,0,0,1-3.41307,1.97371,3.62208,3.62208,0,0,0-1.65361,1.26619.5305.5305,0,0,1-.50961.275,15.80776,15.80776,0,0,1-2.1755-.81795,6.0907,6.0907,0,0,1-1.28914-.57558C103.59822,72.68233,103.7507,72.535,103.57168,72.393Z"/><path class="cls-13" d="M136.69742,8.77316a7.82984,7.82984,0,0,0,.50587,1.99784,34.88882,34.88882,0,0,1,1.08788,4.72767c.12928.879.21759,1.7678.28267,2.65907a20.88063,20.88063,0,0,1,.11719,2.71373,27.25263,27.25263,0,0,1-.69478,5.83083,18.77469,18.77469,0,0,1-1.66285,3.9533,13.56122,13.56122,0,0,1-1.4845,2.27488,14.27748,14.27748,0,0,1-2.69851,2.48827,7.72612,7.72612,0,0,1-4.23116,1.48914c-1.50756.0591-3.01363.16174-4.52264.12776a15.98027,15.98027,0,0,1-3.01449-.18016c-1.5243-.33169-3.08218-.30792-4.61-.61778-1.11509-.22615-2.25578-.38308-3.38242-.586-.33682-.06068-.65058-.21584-.99617-.25858a.2807.2807,0,0,1-.27235-.27737c.06083-.21.22161-.11914.34211-.10144q2.546.37405,5.10281.6636c.40593.04655.81782.03961,1.22667.07736a1.92914,1.92914,0,0,0,.93-.19767c.09868.02591.15051.14128.26822.1349.62743-.03405,1.25255.09338,1.8796.03347a3.83828,3.83828,0,0,1,.80679-.01844,24.918,24.918,0,0,0,3.38405.05673c.83054-.01609,1.66271-.09366,2.49366-.14318a6.80616,6.80616,0,0,0,1.55634-.20228,8.78292,8.78292,0,0,0,3.43676-2.05583c.42479-.3897.82317-.80927,1.21988-1.2293A6.70621,6.70621,0,0,0,135.2198,29.452a28.81233,28.81233,0,0,0,1.29992-6.51405,33.26675,33.26675,0,0,0-.05988-4.83817,38.233,38.233,0,0,0-1.93276-9.24093c-.10169-.3107-.32829-.62677-.14153-.98813A18.36523,18.36523,0,0,1,136.69742,8.77316Z"/><path class="cls-14" d="M107.88567,37.58044a4.88922,4.88922,0,0,0,1.70638,1.07067,21.11875,21.11875,0,0,0,4.04608,1.4196c.94379.21238,1.9021.36589,2.8363.61243a3.24543,3.24543,0,0,1,1.2041.43323c.37215.27847.87317.15874,1.28652.31677a10.83015,10.83015,0,0,0,3.06813.31228,59.5159,59.5159,0,0,0,6.25651.13492,11.93408,11.93408,0,0,0,3.07535-.31255,7.78777,7.78777,0,0,0,2.04512-.92869,16.12508,16.12508,0,0,0,2.97282-2.40721,25.57575,25.57575,0,0,0,2.14975-2.59223,27.33583,27.33583,0,0,0,1.81613-2.83937,36.16541,36.16541,0,0,0,1.68174-3.40353,29.99814,29.99814,0,0,0,1.40915-3.87671,30.41675,30.41675,0,0,0,1.04545-5.16361,24.07754,24.07754,0,0,0,.14838-2.48292c-.00775-.90442-.0001-1.809.00084-2.71345a11.5173,11.5173,0,0,1,.91542,1.25159.20678.20678,0,0,1,.07913.16825,17.0005,17.0005,0,0,1-.086,2.83832,31.19139,31.19139,0,0,1-.41736,3.27895,37.32673,37.32673,0,0,1-1.68239,6.03414A36.19168,36.19168,0,0,1,140.97,34.024a28.53852,28.53852,0,0,1-3.618,5.10692,14.29922,14.29922,0,0,1-4.445,3.49744,6.95075,6.95075,0,0,1-2.85246.6972c-1.03784.027-2.07672.09239-3.11343.05245-1.57375-.06064-3.14811-.10794-4.71817-.27085-1.22315-.12691-2.45235-.20024-3.66373-.42056-.65494-.11912-1.29957-.29214-1.94416-.46013a.577.577,0,0,1-.29162-.17829.497.497,0,0,0-.40532-.255,9.837,9.837,0,0,1-1.71025-.43629,21.07741,21.07741,0,0,1-6.67215-3.13787,20.58954,20.58954,0,0,1-2.763-2.76113.62885.62885,0,0,1-.23213-.544c.26974-.13867.39625.09383.5317.232a22.55314,22.55314,0,0,0,2.0488,1.8916,2.14474,2.14474,0,0,0,.38423.24814A1.00664,1.00664,0,0,1,107.88567,37.58044Z"/><path class="cls-15" d="M146.40217,18.02018l.35708.6233c.12143.0401.09686.13789.09035.22855l.403,1.06605a4.20541,4.20541,0,0,1-.07476,1.44719A35.69489,35.69489,0,0,1,143.34637,33.502c-.55665,1.06619-1.14052,2.1221-1.79854,3.13453a32.45482,32.45482,0,0,1-3.65764,4.69265,13.18608,13.18608,0,0,1-5.71823,3.88944,7.66226,7.66226,0,0,1-2.04954.3098c-1.32031.02436-2.63926.08715-3.96028.1023a46.41328,46.41328,0,0,1-6.96116-.56232,10.33953,10.33953,0,0,1-1.98439-.40584.94674.94674,0,0,1-.50427-.25532.77586.77586,0,0,0-.66629-.49471c-.27141-.05715-.60233-.09659-.60945-.49984a4.28146,4.28146,0,0,1,1.00356-.26032c.94346.1892,1.8853.39468,2.84218.50043q1.87179.20685,3.74752.38043a16.58352,16.58352,0,0,0,1.76319.10077,27.56619,27.56619,0,0,0,3.37586-.01085,9.19709,9.19709,0,0,1,1.57684-.02,7.95344,7.95344,0,0,0,5.14872-1.83418,24.26924,24.26924,0,0,0,5.56139-6.222,35.8574,35.8574,0,0,0,3.81839-7.74542,34.26946,34.26946,0,0,0,1.79874-7.74236,15.46379,15.46379,0,0,0,.15263-2.1076C146.2216,18.29007,146.2084,18.10825,146.40217,18.02018Z"/><path class="cls-16" d="M134.38555,7.87075a17.10437,17.10437,0,0,0,.6488,2.20209,42.39188,42.39188,0,0,1,1.2854,5.70263,37.27131,37.27131,0,0,1,.37471,6.14779,25.43922,25.43922,0,0,1-.56921,4.54341,26.38461,26.38461,0,0,1-1.27153,4.29165,4.907,4.907,0,0,1-1.00191,1.43776,11.65417,11.65417,0,0,1-3.52481,2.8643,7.23923,7.23923,0,0,1-2.89689.69248c-1.6493.07855-3.29791.18278-4.947.12089-1.14556-.043-2.29053-.03577-3.43549-.06307-.166-.004-.31936-.00084-.3-.23283a.3586.3586,0,0,1,.2412-.10419c-1.0197-.129-2.01157-.13571-2.99473-.24575-.22887-.02561-.456-.06269-.685-.08692-.12533-.01325-.26238-.02359-.299-.1864a.23531.23531,0,0,1,.17622-.21013c.12526-.06836.28414.01015.40282-.09084a19.76312,19.76312,0,0,1,2.51409.18613,9.71547,9.71547,0,0,0,1.21073.04455c.03828.00285.082-.01146.1147.0023.78444.32984,1.59014-.04531,2.38151.07132.13865.02043.294-.00905.405.08717a.83527.83527,0,0,0,.61654.14842c.23086-.00337.4619.00312.69271-.00169a2.843,2.843,0,0,0,.95113-.16487,2.28811,2.28811,0,0,1,1.43194.01338c.123.03807.24276.11954.36436.0379a1.51783,1.51783,0,0,1,1.39357-.09046.27369.27369,0,0,0,.14543.01189,7.68861,7.68861,0,0,0,2.64236-1.20681,12.47917,12.47917,0,0,0,3.14478-3.70567,10.02531,10.02531,0,0,0,.92631-2.83265c.26474-1.076.40945-2.17446.58978-3.26642.07284-.44115-.11924-.95669.2544-1.35152.06555-.06927.00218-.19824-.0514-.2889a.71217.71217,0,0,1-.08266-.44632,11.94481,11.94481,0,0,0-.00578-1.55951c-.01569-.524.01749-1.04063-.03434-1.57546A45.38392,45.38392,0,0,0,134.1761,12.307c-.37363-1.52253-.85675-3.01818-1.288-4.52668A2.16709,2.16709,0,0,1,132.845,7.479,9.28381,9.28381,0,0,1,134.38555,7.87075Z"/><path class="cls-17" d="M146.40217,18.02017a.83957.83957,0,0,0-.07545.48653,24.43214,24.43214,0,0,1-.36172,3.57166,30.34962,30.34962,0,0,1-.82279,3.84972,30.41932,30.41932,0,0,1-1.12158,3.33812c-.43008,1.07616-.86055,2.15237-1.37821,3.18829a38.30493,38.30493,0,0,1-2.73659,4.59542,25.51091,25.51091,0,0,1-3.87119,4.44641,12.94028,12.94028,0,0,1-2.62947,1.83244,7.40629,7.40629,0,0,1-3.86923.87207c-.924-.03728-1.84.11383-2.7634.0822-1.72872-.05921-3.45522-.09123-5.18022-.2883-1.55726-.1779-3.11788-.30817-4.65312-.63837a1.17762,1.17762,0,0,1-.5026-.15339c.04939-.23758-.13689-.23728-.27986-.26875a26.8308,26.8308,0,0,1-3.135-.9114,22.52186,22.52186,0,0,1-4.70418-2.246c-.13126-.08408-.31288-.14481-.27879-.36274.19881-.09.34881.03527.49432.12831a13.42536,13.42536,0,0,0,3.86889,1.75183c1.09646.28053,2.19254.60163,3.31449.79786.25125.04394.41494-.16671.6431-.12167a2.68655,2.68655,0,0,0,1.15236.36711,27.04228,27.04228,0,0,0,4.6463.64792c1.24785.10165,2.49529.1673,3.74419.238,1.026.05811,2.051.07791,3.07134.03737a10.64265,10.64265,0,0,0,2.326-.159,9.4743,9.4743,0,0,0,2.56019-1.10276,14.8314,14.8314,0,0,0,3.13769-2.62639,28.28851,28.28851,0,0,0,2.79982-3.63554,38.61212,38.61212,0,0,0,2.59542-4.72434,30.88875,30.88875,0,0,0,1.47885-3.85522,36.85593,36.85593,0,0,0,1.10168-4.21907,30.99759,30.99759,0,0,0,.444-3.33018c.08044-1.02067.15412-2.03811.14146-3.06155.09716-.02738.11878.04239.14189.11026Z"/><path class="cls-18" d="M116.74475,44.358a5.1833,5.1833,0,0,0,1.737.52215c.7304.04074,1.43451.22642,2.15995.28081.8883.06662,1.76484.26653,2.65892.27123a7.257,7.257,0,0,1,1.52068.14476c.22517.04927.423-.07709.64424-.06883.46142.0172.92409.01255,1.386.00372,1.13913-.02178,2.27979-.02076,3.4168-.08387a9.224,9.224,0,0,0,5.25782-2.08835c.54263-.42526,1.05222-.88882,1.59355-1.31634A12.65237,12.65237,0,0,0,138.658,40.3167c.7976-.91026,1.53132-1.87873,2.25554-2.84981a12.84585,12.84585,0,0,0,.70629-1.131c.7495-1.26163,1.49117-2.52986,2.131-3.85233a37.12655,37.12655,0,0,0,2.88092-8.43209,29.2205,29.2205,0,0,0,.54422-3.66192c.01281-.15157.05048-.301.07663-.45149a7.86825,7.86825,0,0,1,.61288,1.931,7.13353,7.13353,0,0,1-.18453,1.5628,37.2579,37.2579,0,0,1-2.05,6.92862,41.37794,41.37794,0,0,1-3.3565,6.568,29.046,29.046,0,0,1-4.64327,5.82247,15.8524,15.8524,0,0,1-3.25338,2.50978,9.61266,9.61266,0,0,1-4.40463,1.21746c-1.5741.05856-3.15.10062-4.723.20241a8.07208,8.07208,0,0,1-1.60468-.09262c-.60716-.082-1.23518-.08586-1.854-.12354a15.4016,15.4016,0,0,1-2.40393-.28528,14.04761,14.04761,0,0,1-2.06986-.31742,7.76694,7.76694,0,0,1-1.81892-.43235,23.17278,23.17278,0,0,1-3.13076-1.01841c-.15282-.06474-.3681-.08589-.34864-.33718.174-.1304.3437-.02395.50758.02054.6167.16743,1.21384.40207,1.838.5443a7.48162,7.48162,0,0,0,1.28562.16063c.01455-.11975-.09661-.17079-.08155-.26521A1.08042,1.08042,0,0,1,116.74475,44.358Z"/><path class="cls-19" d="M107.04324,74.221a1.16486,1.16486,0,0,0,.4876-.402,3.66645,3.66645,0,0,1,1.77182-1.286,12.2819,12.2819,0,0,0,3.03944-1.74819C113.745,69.81005,115.13,68.81,116.545,67.85164a6.59833,6.59833,0,0,0,1.50939-1.38909,8.54066,8.54066,0,0,1,.92914-.89265c.07356-.053.15321-.12853.11768-.22-.17008-.438.13347-.48922.43342-.55026.04939-.01005.09734-.02752.14753-.03819a2.1906,2.1906,0,0,1,1.12757.10089,3.22648,3.22648,0,0,0,2.04985.08594,1.3074,1.3074,0,0,1,.30165-.04055,2.908,2.908,0,0,1,.63671.13584,1.11393,1.11393,0,0,0,.78747-.01481.509.509,0,0,1,.33949-.02526c.15064.03876.21194.15176.07786.23942-.51247.335-.63118.95113-1.01508,1.37434-1.67021,1.05792-3.37093,2.06336-5.12186,2.98287-.5821.30569-1.16052.6184-1.74063.92789a9.56661,9.56661,0,0,1-1.38995.70674c-.58892.26689-1.18253.52395-1.76591.80245-1.91187.91272-3.86955,1.715-5.856,2.449a.6926.6926,0,0,1-.378.00127A2.12354,2.12354,0,0,1,107.04324,74.221Z"/><path class="cls-20" d="M117.36081,45.74476a2.37123,2.37123,0,0,0,1.52856.12722c.11486-.04632.11408.17394.277.19009.82263.08153,1.63983.2302,2.46356.28261.36381.02314.73909.22524,1.12089-.00208.0829-.04935.22982.21176.35914.15974.56872-.22878,1.08319.14806,1.64744.107,1.43945-.10479,2.88794-.08445,4.32769-.18648a20.4284,20.4284,0,0,0,2.47363-.21231,8.97054,8.97054,0,0,0,1.85458-.59473,13.92409,13.92409,0,0,0,3.59124-2.443,27.76573,27.76573,0,0,0,4.95592-5.91555,42.37251,42.37251,0,0,0,2.34388-4.171,39.69047,39.69047,0,0,0,2.89611-7.89769,23.01548,23.01548,0,0,0,.59278-3.15074.635.635,0,0,1,.07223-.16867,5.8063,5.8063,0,0,1,.37392,1.77335,28.64387,28.64387,0,0,1-.99262,3.83407,36.172,36.172,0,0,1-2.33752,5.89743,38.876,38.876,0,0,1-5.0879,7.82153,21.50176,21.50176,0,0,1-5.30465,4.64015,7.956,7.956,0,0,1-3.70236,1.19581c-1.98083.093-3.95484.32428-5.943.28413a30.06792,30.06792,0,0,1-3.52744-.22894c-1.25382-.17361-2.50744-.35015-3.76433-.50349a21.02157,21.02157,0,0,1-2.33428-.6002c-.14683-.0416-.34725-.037-.3778-.2607a.21673.21673,0,0,1,.24606-.13817,5.32863,5.32863,0,0,1,1.31919.07982A1.39052,1.39052,0,0,0,117.36081,45.74476Z"/><path class="cls-21" d="M148.2477,32.57313a10.80361,10.80361,0,0,1-.23985,1.77607,20.3438,20.3438,0,0,1-1.64358,3.03818,42.84148,42.84148,0,0,1-4.68447,6.32727,31.25654,31.25654,0,0,1-5.39619,4.90135,11.66564,11.66564,0,0,1-5.764,2.16729c-.98176.086-1.95133.29277-2.93218.40249q-1.183.13233-2.3719.19793a8.57713,8.57713,0,0,1-1.84045.05628c-.63793-.0492-1.27334-.12809-1.90935-.179-1.38047-.11058-2.75033-.31323-4.12947-.42973-.24419-.105-.50621-.15649-.75516-.24687-.15179-.0551-.32366-.09922-.33165-.31175.08531-.18554.25088-.15905.39788-.13056.29007.05622.58961.01455.87622.09741a.4298.4298,0,0,0,.32987-.06641,7.04169,7.04169,0,0,1,1.56353.12508,6.12282,6.12282,0,0,0,.87759.04789c.96026-.02789,1.91519.10886,2.8738.10632a11.07486,11.07486,0,0,1,1.8787.03485.54316.54316,0,0,0,.32966-.0901.97973.97973,0,0,1,.55666-.12562,8.27806,8.27806,0,0,0,2.16119-.14523,33.32937,33.32937,0,0,0,4.5927-.705,4.039,4.039,0,0,0,1.883-.79983,3.16155,3.16155,0,0,1,1.07142-.57884,3.33652,3.33652,0,0,0,1.21459-.90491,14.96337,14.96337,0,0,1,1.26465-.98311c.05712-.0501.15008-.0732.18353-.13673.41855-.79467,1.29254-1.10587,1.85225-1.75046a2.92808,2.92808,0,0,0,.43486-.58222c.181-.356.55619-.54186.77534-.88154.37791-.58576.99718-.9876,1.328-1.61118.32356-.60992.87237-1.03549,1.238-1.60858.32919-.516.7021-1.01789.993-1.542.33987-.61242.73875-1.19,1.07631-1.804.34093-.62009.68064-1.24637,1.04458-1.85678.27231-.45675.44132-.9802.69821-1.45287C147.84653,32.74112,147.93168,32.47908,148.2477,32.57313Z"/><path class="cls-22" d="M117.59213,46.51457c.88566.02016,1.74834.23406,2.62565.31462.94634.08689,1.87787.27184,2.83264.323a30.27866,30.27866,0,0,0,3.0705.03964,34.19161,34.19161,0,0,0,3.91921-.27145c.465-.07629.954.02631,1.43506-.06046a10.00722,10.00722,0,0,0,4.159-1.86976,21.742,21.742,0,0,0,3.38043-3.04795,36.68708,36.68708,0,0,0,3.11655-3.97461,40.08348,40.08348,0,0,0,2.624-4.50677,41.52752,41.52752,0,0,0,2.89124-7.70721c.17332-.64084.34025-1.28138.45722-1.9347a.25108.25108,0,0,1,.13579-.17645,7.34615,7.34615,0,0,1,.1654,1.08033,1.50077,1.50077,0,0,1-.02256.82923,44.22622,44.22622,0,0,1-2.58363,7.08036,39.25853,39.25853,0,0,1-4.01591,6.82338,33.01778,33.01778,0,0,1-3.999,4.61605,13.15388,13.15388,0,0,1-5.7015,3.37679,14.66635,14.66635,0,0,1-2.29183.24407c-1.54424.14569-3.09564.18811-4.64236.29974a14.40709,14.40709,0,0,1-2.2657-.092c-1.08522-.0925-2.16963-.19414-3.2552-.28309-.86953-.07124-1.72928-.22584-2.59562-.32578a.38667.38667,0,0,1-.236-.11966c-.2359-.50293-.21136-.55887.3132-.638A.96506.96506,0,0,1,117.59213,46.51457Z"/><path class="cls-23" d="M123.44683,51.36678a40.07889,40.07889,0,0,0,4.76459-.38072c1.22184-.17662,2.448-.32589,3.66633-.52352a10.25257,10.25257,0,0,0,3.73867-1.53287,24.63415,24.63415,0,0,0,3.123-2.40369c.69-.5981,1.32317-1.25064,1.9578-1.90132a39.69824,39.69824,0,0,0,3.96531-4.81784,41.99537,41.99537,0,0,0,3.10991-5.10987,3.33646,3.33646,0,0,1,.2354-.34776,13.2907,13.2907,0,0,1-.45,2.3048c-.97638,1.54833-1.93538,3.10774-3.03461,4.57516-.81455,1.08738-1.70826,2.106-2.61813,3.11314-.69567.77006-1.42163,1.50945-2.1686,2.22792a22.36163,22.36163,0,0,1-4.63882,3.51939,8.26011,8.26011,0,0,1-2.48339.99468c-.731.11648-1.45835.25031-2.19365.33841-.944.11311-1.88266.26781-2.82241.41269a3.21121,3.21121,0,0,1-.68818.04218,7.7503,7.7503,0,0,0-1.30939.15166.77886.77886,0,0,1-.26658-.01033,3.38045,3.38045,0,0,0-1.26009-.06851,6.24526,6.24526,0,0,1-1.74969-.10888c-.2287-.03238-.45711-.0528-.6878-.0629-.14621-.00641-.3199.01527-.37811-.18427.09257-.27058.33176-.262.54243-.25608C122.34951,51.35357,122.89926,51.304,123.44683,51.36678Z"/><path class="cls-24" d="M116.82178,47.13073a12.30022,12.30022,0,0,0,1.54371.22842c1.19127.22439,2.40548.24782,3.608.363a16.1517,16.1517,0,0,0,2.97965.17388c1.44678-.12956,2.90162-.11371,4.34711-.28721.71854-.08624,1.44936-.08366,2.17277-.16325a7.10224,7.10224,0,0,0,2.19331-.65366,14.144,14.144,0,0,0,3.50555-2.31625,30.82014,30.82014,0,0,0,3.16683-3.33153,37.89455,37.89455,0,0,0,3.49007-4.97607,41.20671,41.20671,0,0,0,2.52666-5.03909,42.33039,42.33039,0,0,0,2.00324-5.9126,2.17753,2.17753,0,0,0,.0461-.49359c.11531.10774.051.25964.09469.385.05368.12759-.01716.2724.055.39743l.02082.44944a.64976.64976,0,0,1,.01249.30106,21.18542,21.18542,0,0,1-.98329,3.11462,43.13881,43.13881,0,0,1-4.24813,8.48519,34.05981,34.05981,0,0,1-3.68938,4.82382,18.42115,18.42115,0,0,1-6.55781,4.93168,8.95581,8.95581,0,0,1-2.62535.554c-1.02142.08232-2.04225.17665-3.063.26933a13.602,13.602,0,0,1-1.41778.09459c-.80611-.0119-1.60671.0745-2.41723.03137-1.51283-.08051-3.01073-.2809-4.51354-.44225a2.4891,2.4891,0,0,1-.79681-.10286.65089.65089,0,0,0-.43622-.2197,5.25869,5.25869,0,0,1-1.254-.35945c-.14776-.04472-.37194-.084-.2704-.34748A.44962.44962,0,0,1,116.82178,47.13073Z"/><path class="cls-25" d="M120.1343,32.65112c-.051.00423-.12522-.01192-.14942.01572-.40368.46126-.94536.36587-1.46161.3687-.55147.003-1.10365.01851-1.65431-.0028-1.42546-.05518-2.84479-.17766-4.264-.33219a2.56123,2.56123,0,0,0-1.37314.09729c-.36572.16312-.80414-.046-1.17968-.16926a6.83821,6.83821,0,0,1-2.29375-1.20591,5.66318,5.66318,0,0,1-1.57275-2.26738,24.20071,24.20071,0,0,1-1.33-4.66094c-.193-.97127-.30294-1.95959-.43373-2.94244-.07043-.52935-.10808-1.06313-.15607-1.59532a.26887.26887,0,0,0-.15466-.2447.96612.96612,0,0,1-.18688-.60855c-.144-1.22913-.13816-2.46772-.2266-3.70051-.01242-.17313-.06563-.39147.18916-.46995a3.44666,3.44666,0,0,1,.51756.77842c-.14011.17313.0045.3409.00637.511.01029.9329.1731,1.852.25171,2.77853.09024,1.06348.27264,2.11907.41206,3.17848a36.37318,36.37318,0,0,0,1.21962,5.20748,13.61022,13.61022,0,0,0,.57091,1.78048,3.57339,3.57339,0,0,0,1.46766,1.47429,9.9056,9.9056,0,0,0,3.65679,1.17055,4.46966,4.46966,0,0,1,1.57571.40077,1.0574,1.0574,0,0,0,.82494.14939,1.38873,1.38873,0,0,1,.63866.10051,10.20224,10.20224,0,0,0,2.64251.05678,2.39956,2.39956,0,0,1,1.38566.10446.28873.28873,0,0,0,.25629-.00451C119.60252,32.40426,119.86483,32.55542,120.1343,32.65112Z"/><path class="cls-26" d="M148.2477,32.57313a.47992.47992,0,0,0-.372.302c-.201.39841-.394.80154-.56981,1.21155-.09115.21263-.23361.39807-.32607.59583a4.40163,4.40163,0,0,0-.52474,1.07639c-.03849.22206-.291.27392-.38484.49287a3.24934,3.24934,0,0,1-.69655,1.15472.58586.58586,0,0,0-.19562.36726.71736.71736,0,0,1-.2318.47409,11.60433,11.60433,0,0,0-1.088,1.62136,6.85465,6.85465,0,0,0-1.063,1.36284c-.21565.47456-.72048.71628-.94815,1.14048-.1715.31956-.56882.448-.6114.83655a.0507.0507,0,0,1-.017.03382c-.66924.43469-.93557,1.25468-1.59987,1.68506-.26329.17057-.59721.26444-.75364.54742a2.76389,2.76389,0,0,1-1.17849,1.09835c-.39231.203-.56629.62869-.98175.77312-.12945.045-.09981.23749-.23493.32956a7.38783,7.38783,0,0,1-1.6006.85995c-.32477.1192-.46926.44472-.81072.54954a17.27,17.27,0,0,1-2.05127.60827c-.57027.1-1.16129.14229-1.72189.25514-.30637.06168-.73092-.16848-.958.2342a.89924.89924,0,0,0-.76623-.05155c-.47283.1204-.97092.10718-1.43681.19231a11.61484,11.61484,0,0,1-1.26888.04137c-.05109.004-.11886-.01437-.151.01182-.44906.36561-.95762.10124-1.4357.14907a22.843,22.843,0,0,1-2.322.00638c-.47945-.00079-.98353-.10322-1.47643-.08376a18.75811,18.75811,0,0,1-2.57016-.23767.61116.61116,0,0,1-.46889.02662,7.66734,7.66734,0,0,1-1.033-.22274c-.14814-.04322-.37571-.0435-.344-.30752.20133-.20982.44914-.12552.68882-.11492.727.03212,1.45429.05667,2.18144.0167.74163.01489,1.47628.13829,2.21866.15379.10127.00211.20268.03835.30524.03406,1.03928-.0435,2.07373.1348,3.11194.07767,1.12433-.06186,2.24743-.13288,3.36834-.26025,1.10707-.1258,2.21541-.24583,3.3219-.37663a10.11311,10.11311,0,0,0,4.742-1.98046,32.51407,32.51407,0,0,0,7.86674-8.40788,49.94772,49.94772,0,0,0,3.10735-5.263c.40692-.79852.79173-1.61058,1.13407-2.44114a1.15619,1.15619,0,0,1,.33754-.58959.08513.08513,0,0,1,.08839.06922.2057.2057,0,0,1-.033.177A16.83549,16.83549,0,0,1,148.2477,32.57313Z"/><path class="cls-27" d="M132.69108,50.98169a2.85122,2.85122,0,0,0,.97-.323,16.38384,16.38384,0,0,0,3.281-1.86653,26.65153,26.65153,0,0,0,3.08651-2.62642c.5762-.54839,1.12758-1.14166,1.67348-1.73043.64976-.70076,1.24055-1.44918,1.88-2.1569a21.266,21.266,0,0,0,1.76044-2.35926c.59459-.87625,1.15305-1.77693,1.73357-2.66282.14079-.21485.18579-.51047.48185-.60238a10.9656,10.9656,0,0,1-.46328,1.92339,40.71771,40.71771,0,0,1-3.39635,4.65641c-.66335.8172-1.35737,1.6108-2.09229,2.3597a24.76406,24.76406,0,0,1-1.905,1.79123c-1.06881.88057-2.10177,1.80189-3.25372,2.58273a12.81455,12.81455,0,0,1-5.5705,2.186c-1.10576.147-2.2035.3755-3.31092.49669a14.68121,14.68121,0,0,1-2.29174.20934c-.49885.01525-.99533.00854-1.49458.06765a11.5058,11.5058,0,0,1-2.02516-.166.18578.18578,0,0,1-.17149-.13344c.10047-.15869.26669-.138.41512-.13724.6913.00359,1.38013-.09613,2.07248-.04651a1.2164,1.2164,0,0,0,.27891-.00575c-.23486.01216-.47854.009-.722.00226-.12274-.00337-.24689-.041-.252-.18162-.00539-.14762.11145-.22.24437-.25554a.22394.22394,0,0,1,.11464-.00351,5.84678,5.84678,0,0,0,2.20455-.0283c.99771-.10544,1.99822-.18284,2.99041-.35449.91457-.15823,1.83818-.27156,2.75842-.40013A7.25026,7.25026,0,0,0,132.69108,50.98169Z"/><path class="cls-28" d="M148.47678,30.57166c-.41239.90673-.79564,1.82816-1.24413,2.71668-.63971,1.26731-1.32165,2.51253-2.06372,3.72555a43.19359,43.19359,0,0,1-3.67137,5.18324,31.52858,31.52858,0,0,1-3.88275,3.92249,18.32131,18.32131,0,0,1-3.031,2.13776,10.8828,10.8828,0,0,1-4.3576,1.206,25.19828,25.19828,0,0,0-2.84085.3423c-.38677.0776-.78631.0337-1.18278.0836a30.95328,30.95328,0,0,1-4.90538-.005,14.04221,14.04221,0,0,1-2.31845-.21193,3.86454,3.86454,0,0,1-1.53393-.18732c-.38815-.125-.76993-.26942-1.16034-.3898-.163-.05029-.40747-.08143-.31024-.37091a.41067.41067,0,0,1,.32712-.05719,5.06347,5.06347,0,0,0,1.47081.053c.6191.00989,1.20711.225,1.82217.27291,1.27633.09948,2.54574.275,3.82485.34834a31.75671,31.75671,0,0,0,4.5568-.2123c1.11086-.09587,2.22035-.21081,3.32734-.333a9.34072,9.34072,0,0,0,4.15041-1.63673,24.7394,24.7394,0,0,0,3.6461-3.06539,36.80168,36.80168,0,0,0,5.32948-6.79224,48.10432,48.10432,0,0,0,3.84461-7.65833c.05846-.14682.05172-.37572.30292-.38221a.48555.48555,0,0,1-.00286.305l-.02021.60118C148.47245,30.29149,148.57675,30.451,148.47678,30.57166Z"/><path class="cls-29" d="M73.06682,48.74368a21.82411,21.82411,0,0,1-1.61407-3.16934c-.09946-.22694-.01608-.29037.20212-.21886a.59486.59486,0,0,1,.22424.14611c.45813.45041,1.01478.77568,1.502,1.19257a2.025,2.025,0,0,0,1.97928.54614,7.24792,7.24792,0,0,1,1.208-.20551c.609.16277,1.24073.20351,1.85364.345a.33249.33249,0,0,1,.16409.2043,2.02222,2.02222,0,0,0,.4481.83532.2748.2748,0,0,1,.063.25191c-.20706.2749-.55933.2829-.83062.44369-.20611.12215-.276.19607-.19328.4671a6.39866,6.39866,0,0,0,.30361,1.24294.40046.40046,0,0,1-.048.46318.22952.22952,0,0,1-.25448-.01671,1.00549,1.00549,0,0,0-.80554-.14336.52942.52942,0,0,1-.42577-.142,8.27,8.27,0,0,0-2.02095-.91354,2.90189,2.90189,0,0,1-.97338-.59672A6.12912,6.12912,0,0,0,73.06682,48.74368Z"/><path class="cls-30" d="M148.55512,29.26227c-.6266,1.455-1.21663,2.92621-1.93327,4.34115a44.71082,44.71082,0,0,1-4.09737,6.7004,33.07006,33.07006,0,0,1-2.49771,3.00024A26.83065,26.83065,0,0,1,135.5079,47.252a9.70184,9.70184,0,0,1-4.19817,1.65274c-1.07146.12951-2.15693.15623-3.22237.319-1.21548.18569-2.44275.13322-3.65964.276a8.02556,8.02556,0,0,1-1.64013-.0887c-.56985-.05231-1.13584-.17382-1.70581-.19146a18.25738,18.25738,0,0,1-2.84129-.34994,2.47733,2.47733,0,0,0-.41725-.04447.09128.09128,0,0,1-.00651-.11068.90216.90216,0,0,1,.80426-.082,7.06508,7.06508,0,0,0,2.16225.13151,8.15274,8.15274,0,0,1,1.6.11805,3.82927,3.82927,0,0,0,1.92864.02232.67962.67962,0,0,1,.26731-.024,38.62478,38.62478,0,0,0,3.96332-.28986c.803-.0757,1.60556-.15951,2.40905-.22713a9.45445,9.45445,0,0,0,3.86159-1.32088c.90169-.50659,1.647-1.22232,2.52438-1.75435a.29627.29627,0,0,0,.08713-.07529c.49464-.68493,1.26638-1.079,1.80393-1.71846.40211-.47838.79028-.97516,1.23086-1.41247a15.07293,15.07293,0,0,0,1.51132-1.83623c.87089-1.18925,1.65913-2.43258,2.43653-3.68474.3293-.5304.67268-1.05956.97626-1.59977a21.669,21.669,0,0,0,1.44614-2.96879,14.88158,14.88158,0,0,1,1.047-2.34539,1.18982,1.18982,0,0,0,.14755-.47311,2.24323,2.24323,0,0,1,.32929-1.01532,1.00283,1.00283,0,0,0,.10773-.5562,3.0553,3.0553,0,0,1,.07535-1.02752q.05463-.05295.09316.0125l.00284,2.43058C148.56877,29.0873,148.63377,29.19755,148.55512,29.26227Z"/><path class="cls-31" d="M94.79179,8.17326A16.61389,16.61389,0,0,1,98.688,10.01711a1.17548,1.17548,0,0,0,.16865.0733.33067.33067,0,0,1,.17534.163c.21456.3628.60557.54466.87072.86058A10.36609,10.36609,0,0,1,102.137,16.5091c.19769,1.41144.14359,2.8366.24177,4.25269.092,1.327.1554,2.6556.26636,3.982a22.36482,22.36482,0,0,0,.86228,4.36423,11.77584,11.77584,0,0,0,.78748,1.95854,2.51923,2.51923,0,0,1,.19023.46043,1.86679,1.86679,0,0,0,.22136.48492.46959.46959,0,0,1,.04915.47158c-.24862.08442-.30631-.13095-.39048-.269a16.51989,16.51989,0,0,1-.97687-1.95936,12.13351,12.13351,0,0,0-.8058-1.2379,8.35835,8.35835,0,0,1-.48822-2.40215c-.071-.97184-.2265-1.93354-.28609-2.90631-.03284-.536-.07721-1.07486-.09837-1.60952-.04454-1.12558-.06217-2.254-.10694-3.37917a12.29371,12.29371,0,0,0-1.364-5.51533,8.5525,8.5525,0,0,0-4.37375-3.7619c-.50818-.21651-1.034-.38246-1.55189-.57118a8.73952,8.73952,0,0,0-1.2541-.29784.653.653,0,0,1-.52421-.32729c.04946-.25011.24079-.22215.41985-.20973a12.0891,12.0891,0,0,1,1.212.2046A.71474.71474,0,0,0,94.79179,8.17326Z"/><path class="cls-32" d="M104.41907,31.57285a18.45677,18.45677,0,0,1-1.92132-7.29483c-.10884-1.51407-.20855-3.0285-.25683-4.547-.01573-.49506-.03322-.99409-.05587-1.491a13.05622,13.05622,0,0,0-1.13327-5.15422,7.06852,7.06852,0,0,0-1.91307-2.55321c-.07911-.06281-.28137-.11488-.15856-.30462a.55645.55645,0,0,1,.43176.30211l.92786.63147c.1175.06036.2624.08732.29957.24561a11.35333,11.35333,0,0,1,.85555.82481,9.3291,9.3291,0,0,1,1.09757,3.45809,27.00512,27.00512,0,0,1,.26116,3.17516c.0416.96792.11235,1.93928.18539,2.90783.09355,1.24048.20543,2.47532.411,3.70158a20.81678,20.81678,0,0,0,1.5252,5.186,3.91758,3.91758,0,0,0,.56906.95525.56119.56119,0,0,1,.10737.65015,1.26374,1.26374,0,0,0,.41879.75215,8.79961,8.79961,0,0,0,2.04707,1.82033.67.67,0,0,1,.30741.27723c-.23973.15437-.41407-.02774-.58864-.13172a7.56852,7.56852,0,0,1-2.13265-2.00544,1.43788,1.43788,0,0,0-.49414-.4686A1.7617,1.7617,0,0,1,104.41907,31.57285Z"/><path class="cls-33" d="M105.65164,32.266c.03953-.40179-.26736-.64113-.44557-.93887a12.11781,12.11781,0,0,1-.928-2.099,19.66518,19.66518,0,0,1-.88735-3.47992c-.15485-.91638-.29186-1.83351-.37111-2.7622-.06817-.79894-.13883-1.60177-.18559-2.3991-.0415-.70765-.11683-1.41746-.11506-2.13067a16.48652,16.48652,0,0,0-.78934-5.07975,11.87874,11.87874,0,0,1-.43473-1.14455,8.36766,8.36766,0,0,1,1.38656,1.464,4.83522,4.83522,0,0,1,.41037,2.05656c.19307,2.65747.30547,5.32159.6403,7.967a27.99021,27.99021,0,0,0,.82314,3.99165c.04817.173.102.34443.13331.521a9.23193,9.23193,0,0,0,1.52766,3.53072A7.24876,7.24876,0,0,0,108.68,33.91351a14.19971,14.19971,0,0,0,1.99675.89186c.15221.05622.37724.05173.3674.31019-.19074.162-.37057.00288-.53351-.04517a8.04279,8.04279,0,0,1-3.58276-2.11373,6.7875,6.7875,0,0,0-1.18589-.74183C105.72955,32.20627,105.68252,32.24783,105.65164,32.266Z"/><path class="cls-34" d="M104.80425,28.338a34.12914,34.12914,0,0,1-.986-4.50682c-.12585-.84095-.15167-1.69635-.25046-2.542-.14173-1.21332-.12683-2.43818-.29513-3.6498-.0735-.52918-.01121-1.06664-.06328-1.60467-.0761-.7863-.20336-1.56142-.32788-2.33879a6.87847,6.87847,0,0,1,1.00535,1.2369.507.507,0,0,0-.07332.50888,11.278,11.278,0,0,1,.06922,1.56888c.0667.90112.15131,1.80091.22841,2.70125.08427,1.08941.17845,2.17761.3536,3.25729.126.77658.16156,1.56453.331,2.33708.27284,1.24425.60919,2.471.962,3.69356a6.11756,6.11756,0,0,0,2.618,3.51192c.22358.1465.44376.29818.66551.44746.06865.06391.17145.07662.2311.154a15.99893,15.99893,0,0,0,4.27325,1.23154c.60272.08737,1.20829.15514,1.81255.23183.05757.10476-.01837.165-.077.23106l-.23111.0772a3.15389,3.15389,0,0,1-1.134.02051,19.52773,19.52773,0,0,1-4.25142-1.16469,14.49944,14.49944,0,0,1-2.326-1.14871,5.01068,5.01068,0,0,1-1.60015-2.02789C105.39212,29.83643,105.13971,29.06992,104.80425,28.338Z"/><path class="cls-35" d="M146.71142,39.89043a5.62425,5.62425,0,0,1-.39789,1.23567,17.12,17.12,0,0,1-1.91484,2.54432,39.62619,39.62619,0,0,1-3.11974,3.44832,17.31867,17.31867,0,0,1-1.86945,1.5957c-.75335.55355-1.45456,1.17413-2.21214,1.72654a15.55454,15.55454,0,0,1-7.331,2.87819c-1.11816.14288-2.23274.3243-3.34217.53385a22.11521,22.11521,0,0,1-2.31921.23237,1.41975,1.41975,0,0,1-.60679-.032c-.12589-.24912-.05988-.39248.23-.45628.16925-.03725.3517-.02792.47222-.185.83931-.17726,1.69609-.23553,2.54226-.36864,1.64625-.259,3.29263-.512,4.92977-.82969a13.60078,13.60078,0,0,0,5.50948-2.60931,36.83694,36.83694,0,0,0,5.06454-4.53631,44.52769,44.52769,0,0,0,3.94646-4.91287c.10151-.146.1616-.36451.41324-.33072.00522.0007.011.01817.01146.02807A.17125.17125,0,0,1,146.71142,39.89043Z"/><path class="cls-36" d="M146.71142,39.89043c-.18891-.06421-.193.11189-.25548.20266-.72443,1.05256-1.48348,2.08223-2.29812,3.06373a44.01132,44.01132,0,0,1-3.2085,3.46409,37.719,37.719,0,0,1-4.27118,3.54794,13.89874,13.89874,0,0,1-3.36086,1.75054,16.50294,16.50294,0,0,1-3.04993.67883c-1.59613.25752-3.19195.51717-4.79022.76075-.38968.05939-.78837.0598-1.18291.08733a1.78043,1.78043,0,0,1-1.07323.16621c-.9369-.12685-1.8812-.13657-2.82156-.20658-.30724-.02288-.64415.0014-.80879-.3552a1.052,1.052,0,0,1,.78139-.08607,6.04642,6.04642,0,0,0,1.607-.00331,6.6506,6.6506,0,0,1,.99777-.01689,12.97032,12.97032,0,0,0,2.39592-.19133,30.24977,30.24977,0,0,0,3.05332-.32095c1.32039-.20644,2.64177-.40646,3.95347-.66983a9.86574,9.86574,0,0,0,2.52968-.98306,17.435,17.435,0,0,0,3.46411-2.38915c.859-.7442,1.73367-1.47169,2.54793-2.27147a46.53757,46.53757,0,0,0,5.26562-6.31247,5.98462,5.98462,0,0,1,.90778-1.22881A5.6038,5.6038,0,0,1,146.71142,39.89043Z"/><path class="cls-37" d="M73.06682,48.74368c.12777-.05487.129-.05615.24925.06265A3.766,3.766,0,0,0,74.70423,49.932c.56419.17616,1.08088.45455,1.63674.63843a1.34977,1.34977,0,0,1,.46082.266A.60482.60482,0,0,0,77.46216,51c.33852-.11991.5586.19626.84189.28974a1.02782,1.02782,0,0,1,.39369.22921.91308.91308,0,0,0,.73878.24089.3063.3063,0,0,1,.33132.14624c-.03541.20028-.086.39938-.10179.60119a.44518.44518,0,0,1-.24954.3909.49976.49976,0,0,0-.23236.78826,1.10956,1.10956,0,0,1,.04414.4532,1.7619,1.7619,0,0,1-1.4494-.44078c-.29142-.279-.76047-.1647-1.115-.364a2.52819,2.52819,0,0,1-.46767-.23529c-.066-.05618-.21608-.22265-.27788.03177-.91231-1.17223-1.68885-2.43627-2.4861-3.686C73.291,49.22393,73.18767,48.97821,73.06682,48.74368Z"/><path class="cls-38" d="M133.0008,60.07318a22.18137,22.18137,0,0,1-1.84216,1.54044c-.80875.634-1.64837,1.22859-2.47468,1.84017a2.47794,2.47794,0,0,0-1.65044.05836,1.47462,1.47462,0,0,1-.90652.01113c-.21637-.145-.02982-.44891-.23933-.60956-.04163-.03192.04051-.14807.11689-.16817.31782-.08363.43965-.37944.6381-.58749.21533-.22575.15478-.37542-.162-.44146-.1873-.03906-.37688-.0718-.56806-.0931-.09621-.01072-.21273-.00164-.24678-.13464a3.02321,3.02321,0,0,1,1.40876-.42224c.356-.047.70578-.122,1.05815-.18582a1.1234,1.1234,0,0,0,.61687-.28547c.21412-.21081.52-.1992.77194-.319a6.65855,6.65855,0,0,1,2.84139-.5332C132.60138,59.75169,132.92676,59.69987,133.0008,60.07318Z"/><path class="cls-39" d="M76.84062,9.95466A7.32113,7.32113,0,0,1,78.45584,9.076c.32112.55329.88748.45965,1.38938.51a2.798,2.798,0,0,1,.86.16609c.16724.07281.33106.16238.35718.36606.02442.19044.12661.22815.29272.19315a.64622.64622,0,0,1,.45065.02154,2.98093,2.98093,0,0,0,1.37788.26788,24.24153,24.24153,0,0,1,2.64759.41875.16754.16754,0,0,1,.11465.09417.46414.46414,0,0,1-.5294.43478.63386.63386,0,0,0-.36349.10758.62224.62224,0,0,1-.3357.05594,17.78213,17.78213,0,0,0-3.66207.09591,8.46876,8.46876,0,0,1-2.86041-.18685.7767.7767,0,0,1-.47135-.24455c-.28869-.30936-.56779-.62768-.84413-.948C76.75989,10.29,76.66251,10.12778,76.84062,9.95466Z"/><path class="cls-40" d="M141.07493,51.675a14.6887,14.6887,0,0,1-1.21722,1.69933,17.97155,17.97155,0,0,1-4.84748,2.76691,19.321,19.321,0,0,1-3.50809.97452,23.71784,23.71784,0,0,0-3.33849.87583c-.9746.14521-1.94854.29333-2.934.34425a3.75043,3.75043,0,0,0-.79123.04561,1.98722,1.98722,0,0,1-1.37565-.2951c.00829-.234.20512-.18908.33677-.21053.84584-.1379,1.67719-.358,2.53124-.44674a27.5192,27.5192,0,0,0,3.62773-.67071q1.06575-.26166,2.14782-.44093a15.01447,15.01447,0,0,0,4.78224-1.84444c1.441-.79541,2.76937-1.7586,4.14877-2.64567C140.76722,51.74378,140.87633,51.5722,141.07493,51.675Z"/><path class="cls-41" d="M141.07493,51.675c-.63763.421-1.28635.82631-1.91033,1.26665-.97214.686-2.01444,1.25129-3.04466,1.83991a13.37105,13.37105,0,0,1-3.60738,1.47512c-1.05434.24432-2.13166.38881-3.18154.65844-.96429.24764-1.944.40839-2.92465.56923a2.90923,2.90923,0,0,1-.41738.044,2.90134,2.90134,0,0,0-.90241-.01459c-.5548.10944-1.09671-.07036-1.64414-.00456a.36131.36131,0,0,1-.31066-.12389c-.01023-.146.10439-.16312.20129-.17874,1.31285-.21159,2.62942-.398,3.9468-.57554,1.71825-.41676,3.47156-.66414,5.19532-1.0502a14.52909,14.52909,0,0,0,4.44409-1.97872,21.16168,21.16168,0,0,0,2.86284-2.07226c.64067-.56436,1.436-.93638,2.06969-1.52368.13652-.12652.15555-.106.31751-.02C141.83541,50.56908,141.465,51.12841,141.07493,51.675Z"/><path class="cls-42" d="M126.60528,53.7546c.757-.17373,1.52644-.27337,2.29379-.38534a17.11263,17.11263,0,0,0,6.50111-1.901,31.98047,31.98047,0,0,0,3.53466-2.49569,30.93388,30.93388,0,0,0,3.17644-2.83051c.95035-1.00054,1.83791-2.05649,2.698-3.13542q.75056-.94151,1.50423-1.88053a10.71143,10.71143,0,0,1-.60427,1.68955,40.27266,40.27266,0,0,1-4.31059,4.79408,25.00917,25.00917,0,0,1-2.29128,1.92462,31.55283,31.55283,0,0,1-3.58429,2.52044,11.79782,11.79782,0,0,1-3.62138,1.363c-1.62684.29967-3.2553.59215-4.90392.75109a.58594.58594,0,0,1-.22937-.00574A.43289.43289,0,0,1,126.60528,53.7546Z"/><path class="cls-43" d="M92.55579,8.23593c.3514.30749.81362.26251,1.22516.37434a4.14415,4.14415,0,0,1,.54648.16493,1.13547,1.13547,0,0,0,.67417.467,4.10576,4.10576,0,0,1,.8014.35541c.14833.0787.30155.16292.28168.36625a.37414.37414,0,0,1-.32439.3288.70788.70788,0,0,1-.36647-.09755,9.82322,9.82322,0,0,0-3.44416-.871,12.22285,12.22285,0,0,1-4.23395-.85951A5.34745,5.34745,0,0,1,85.86011,7.405c-.17144-.17764-.25932-.3247.04027-.44982a6.13431,6.13431,0,0,0,1.13208-.0215,4.40877,4.40877,0,0,1,1.136.0828,2.05081,2.05081,0,0,1,.80356.17186,18.73535,18.73535,0,0,0,2.87532.79517A1.2075,1.2075,0,0,1,92.55579,8.23593Z"/><path class="cls-44" d="M144.7068,45.20157a12.03765,12.03765,0,0,1-.69357,1.46238,22.80941,22.80941,0,0,1-3.54025,3.39856,29.149,29.149,0,0,1-5.34378,3.61825,11.91127,11.91127,0,0,1-3.23372,1.09683c-.68341.11486-1.35514.29058-2.03882.40549a.97418.97418,0,0,1-.3824.01524,8.955,8.955,0,0,0-2.12634.13872c-.25086.02749-.50246.08453-.75478.11734-.1449.01884-.314.0502-.39-.14285a.29268.29268,0,0,1,.2415-.1675c.97748-.11679,1.89892-.50074,2.8789-.60213,1.11659-.28738,2.27178-.38867,3.3824-.71362a13.98577,13.98577,0,0,0,3.05319-1.33767c1.19112-.6858,2.25446-1.5579,3.38862-2.32155a32.03228,32.03228,0,0,0,3.33022-2.8215,19.66387,19.66387,0,0,0,1.746-1.88388c.12724-.14783.229-.34748.47563-.3271.00528.00044.0122.01746.013.02716A.16015.16015,0,0,1,144.7068,45.20157Z"/><path class="cls-45" d="M144.7068,45.20157c-.20664-.03007-.27951.15451-.364.267a21.02991,21.02991,0,0,1-1.70328,1.86308,19.08609,19.08609,0,0,1-2.07168,1.86875c-.00993.00769-.02463.00952-.034.01769a39.94234,39.94234,0,0,1-3.20127,2.389,18.34558,18.34558,0,0,1-3.29555,1.85242,16.49658,16.49658,0,0,1-3.83693.98333,2.3663,2.3663,0,0,1-.82156.15878c-1.05723.08336-2.09572.31145-3.15129.40764a.905.905,0,0,1-.37966-.02643c-.0963-.19153-.05769-.28658.19754-.30146a8.4733,8.4733,0,0,0,1.3596-.25841c1.3897-.31148,2.78973-.57042,4.19151-.81833a12.17778,12.17778,0,0,0,3.18-1.13142,20.47787,20.47787,0,0,0,3.62179-2.32363,37.13751,37.13751,0,0,0,4.1256-3.56256q1.34126-1.40472,2.5856-2.89973c.09388-.11328.16049-.275.35462-.25048A16.013,16.013,0,0,1,144.7068,45.20157Z"/><path class="cls-46" d="M85.93075,11.16261a18.72282,18.72282,0,0,0-2.88592-.45961,2.36436,2.36436,0,0,1-1.28918-.289c-.17518-.11107-.34005.01148-.51042.03645-.15641.02292-.38161.08615-.27681-.222.06227-.18306-.041-.25548-.177-.32573a1.95167,1.95167,0,0,0-.81022-.20524c-.35648-.01855-.71294-.04413-1.0681-.07981-.31912-.032-.39168-.28752-.45725-.54169a8.19984,8.19984,0,0,1,1.85644-.81651,8.04727,8.04727,0,0,1,2.60071.90068,2.91058,2.91058,0,0,0,.94894.29773,1.76954,1.76954,0,0,1,.88622.34571.97662.97662,0,0,0,.41472.19432,15.54676,15.54676,0,0,1,1.58863.569,2.038,2.038,0,0,0,.73813.44825c.1.04153.34255.08015.128.28823-.47049-.00175-.9399-.03307-1.41013-.03428A.34772.34772,0,0,1,85.93075,11.16261Z"/><path class="cls-47" d="M76.53205,47.13073c-.49932.09393-.99609.20579-1.49858.2775a2.34143,2.34143,0,0,1-1.79976-.689c-.527-.41573-1.04917-.83761-1.57027-1.26073-.17933-.14561-.21545-.059-.21069.11581a15.47856,15.47856,0,0,1-1.08064-2.534.14208.14208,0,0,1-.00594-.20483c.07372-.06332.15028-.00037.19439.059a10.83823,10.83823,0,0,0,2.741,2.16462,1.584,1.584,0,0,0,1.59372.22146c.47136-.07154.92776.1396,1.40014.07278a.2044.2044,0,0,1,.18891.11168,2.9577,2.9577,0,0,0,.22439,1.07129A.43626.43626,0,0,1,76.53205,47.13073Z"/><path class="cls-48" d="M69.62251,41.11829c-.29757-.90836-.58652-1.81909-.82277-2.74612-.02885-.11323-.02216-.22421-.04657-.33392-.077-.11688-.01922-.16609.09447-.169a.498.498,0,0,1,.35673.11974c.55676.53132,1.27206.85366,1.82331,1.39091a5.30539,5.30539,0,0,0,1.66264,1.83154.703.703,0,0,1,.20188.2252c.27327.52009.50674,1.06.79606,1.57232.07654.13552.19529.2856.06.458-.2391.10473-.46677-.01817-.69978-.03419a12.79536,12.79536,0,0,1-3.2716-2.20422A.59511.59511,0,0,0,69.62251,41.11829Z"/><path class="cls-49" d="M85.8535,7.01828c-.194.11714-.05906.20144.03173.28353a5.88283,5.88283,0,0,0,2.20553,1.16977,11.61449,11.61449,0,0,0,1.90991.54607c.66723.096,1.34218.16524,2.01.20055a9.8531,9.8531,0,0,1,3.3912.86379c.12843.0551.25931.1045.389.15654a7.77668,7.77668,0,0,1,.8994.49167c.12322.07693.27772.14516.27082.33482a.23229.23229,0,0,1-.31054.06715,12.43885,12.43885,0,0,0-2.61211-.729,16.22877,16.22877,0,0,1-1.696-.27034,8.3362,8.3362,0,0,1-.98108-.16494A23.497,23.497,0,0,1,87.54108,9.214a8.72176,8.72176,0,0,1-.97631-.33323c-.29665-.14827-.59382-.29628-.90345-.41739a.73018.73018,0,0,1-.30641-.15247,2.61655,2.61655,0,0,0-1.405-.70734c-.13539-.04069-.30738-.07784-.32587-.275l.30364-.09581a.17959.17959,0,0,1,.23094-.01089l1.61811-.228A.05009.05009,0,0,1,85.8535,7.01828Z"/><path class="cls-50" d="M145.46387,43.43678q-.82291.932-1.64623,1.8636a23.66334,23.66334,0,0,1-2.122,2.21027c-.57785.50217-1.0939,1.08007-1.71642,1.53063-1.2882.93235-2.47142,2.00467-3.85412,2.81291a22.02235,22.02235,0,0,1-3.25867,1.53236,12.9026,12.9026,0,0,1-2.3098.51434c-1.31516.24191-2.63163.4782-3.926.81525-.28992.07549-.63167-.08607-.87275.19315a.32521.32521,0,0,1-.23948.1062,24.0001,24.0001,0,0,1-3.25875.0623c-.57227-.10007-1.1603-.06523-1.729-.19968-.1572-.03717-.336-.02541-.41435-.21314.058-.17506.21458-.16832.34981-.173a6.34718,6.34718,0,0,0,1.71708-.14978,1.14859,1.14859,0,0,1,.46-.00718,14.79479,14.79479,0,0,0,3.67221-.23417c.15125-.02046.30433-.0705.444.03862.5277-.077,1.05622-.14891,1.583-.232a21.09637,21.09637,0,0,0,6.47675-1.57662,20.47848,20.47848,0,0,0,3.06779-1.95888,37.5806,37.5806,0,0,0,5.08925-4.4764q1.33371-1.45449,2.574-2.99022c.04005-.04961.045-.16884.15916-.0897Z"/><path class="cls-51" d="M128.223,57.91323a.27923.27923,0,0,1,.20482-.15375c.97626-.24707,1.94-.567,2.92982-.73064a21.82817,21.82817,0,0,0,2.998-.76231,17.84664,17.84664,0,0,0,3.69676-1.7509,16.03384,16.03384,0,0,0,1.52132-1.03026c.06929-.05254.14191-.20344.284-.11107a14.006,14.006,0,0,1-2.23464,2.46314,18.92335,18.92335,0,0,1-2.61966,1.27625,12.91124,12.91124,0,0,1-2.58585.72908,8.66635,8.66635,0,0,0-2.82568.3551,2.33616,2.33616,0,0,1-.78408.13664C128.64611,58.14863,128.31793,58.19258,128.223,57.91323Z"/><path class="cls-52" d="M76.84062,9.95466c-.00578.07387-.04623.18209-.01215.21645.52192.52629.80344,1.33772,1.70438,1.41809.46843.04179.93167.14189,1.4001.18379a3.11634,3.11634,0,0,0,1.06734-.07093,1.26809,1.26809,0,0,0,.69464.18669,11.968,11.968,0,0,1,2.74294.25893,2.1025,2.1025,0,0,1,1.21477.47241c-.046.19111-.20029.15736-.33763.16573-.59515.03624-1.193.026-1.78583.10327a23.1,23.1,0,0,0-2.46856.20258,1.44,1.44,0,0,0-.53292-.05205,4.7112,4.7112,0,0,1-2.10174-.34625,1.3957,1.3957,0,0,0-.56188-.11292.79459.79459,0,0,1-.80516-.40913,1.49917,1.49917,0,0,0-.50093-.469,2.04639,2.04639,0,0,1-.6763-.91559.19036.19036,0,0,1,.03477-.21495Z"/><path class="cls-53" d="M142.16932,49.98612c-.27818-.0201-.4137.20765-.57193.3618-.45439.44267-1.05407.67657-1.52588,1.08192a24.3938,24.3938,0,0,1-2.89542,2.12738,15.74783,15.74783,0,0,1-6.34216,2.45218,23.74453,23.74453,0,0,0-3.24567.66308c-.06611.01856-.1393.08235-.21263.00863-.14929-.07423-.383-.0353-.39471-.29425a.27274.27274,0,0,1,.19279-.11276c1.14616-.18777,2.22435-.64955,3.37073-.83467a3.19761,3.19761,0,0,0,.48037-.12268,16.32107,16.32107,0,0,0,2.78836-.70458,20.02321,20.02321,0,0,0,4.32856-2.39047,45.74269,45.74269,0,0,0,4.24651-3.48188,3.421,3.421,0,0,1,.45585-.35232c.077-.0494.20494-.16739.24491.04895A12.65224,12.65224,0,0,1,142.16932,49.98612Z"/><path class="cls-54" d="M143.089,48.43645c-.06662-.08769-.128-.04877-.19134.006-.56908.492-1.14169.97988-1.70742,1.47565a30.68639,30.68639,0,0,1-5.12458,3.73353,14.64976,14.64976,0,0,1-3.41784,1.43478,9.08739,9.08739,0,0,1-1.57449.2854c-.89241.19554-1.81121.17949-2.70869.33628a.51225.51225,0,0,1-.33264-.05711c-.13981-.24544.0862-.2754.21489-.32715a2.85272,2.85272,0,0,1,1.28574-.18308,28.75483,28.75483,0,0,0,4.34561-1.01719,19.65521,19.65521,0,0,0,4.51447-2.57777,38.35238,38.35238,0,0,0,5.21469-4.49528c.12662-.13228.17188-.36431.40583-.38653A15.04484,15.04484,0,0,1,143.089,48.43645Z"/><path class="cls-55" d="M126.066,63.45861a4.14282,4.14282,0,0,0,1.3084-.16339,1.23058,1.23058,0,0,1,1.30953.15857c-1.51566,1.12835-3.08655,2.17476-4.69633,3.16344a2.77072,2.77072,0,0,1,.88825-1.371.18958.18958,0,0,0,.12559-.20533,2.41863,2.41863,0,0,1-1.78575-.0417,4.06841,4.06841,0,0,1,1.23648-1.70644c.08371-.06255.18856-.14282.27775-.11135C125.164,63.33458,125.63673,63.29205,126.066,63.45861Z"/><path class="cls-56" d="M133.0008,60.07318a1.537,1.537,0,0,0-1.33909-.21262,6.84642,6.84642,0,0,0-2.12908.51747,11.46608,11.46608,0,0,1-1.646.25037,2.07649,2.07649,0,0,1-1.08631-.11323c-.08906-.28041-.03135-.392.33705-.456a.779.779,0,0,0,.6687-.49072.9781.9781,0,0,1,.60051-.21184,6.6471,6.6471,0,0,0,1.55531-.36873,13.06129,13.06129,0,0,1,1.41676-.30239,9.73651,9.73651,0,0,0,3.55343-.71005c.12366-.05024.29549-.13849.37479.08534A19.3589,19.3589,0,0,1,133.0008,60.07318Z"/><path class="cls-57" d="M86.70108,10.62358a11.43744,11.43744,0,0,1-2.21427-.87118.78.78,0,0,0-.31818-.12567,7.48264,7.48264,0,0,1-2.34912-.88094,6.228,6.228,0,0,0-1.24873-.34763c-.10307-.02558-.2002-.03959-.2585-.13866a6.48677,6.48677,0,0,1,1.83979-.57109.21574.21574,0,0,1,.07384.018,14.4358,14.4358,0,0,0,3.01022,1.05571.81445.81445,0,0,1,.20439.10211,1.72093,1.72093,0,0,0,1.14668.63246c.83474.20353,1.61643.57557,2.45914.75119.12734.02654.29195.04781.289.24568a.40237.40237,0,0,1-.411.22512C88.18318,10.68994,87.44165,10.66765,86.70108,10.62358Z"/><path class="cls-58" d="M73.29507,12.77577a4.25045,4.25045,0,0,1,.92627-.84184.45963.45963,0,0,1,.22237.29691,2.27059,2.27059,0,0,0,1.67275,1.66008,1.311,1.311,0,0,1,.40961.20267.65248.65248,0,0,0,.47165.12134c.415-.07469.84089-.0079,1.25269-.10888a4.8266,4.8266,0,0,1,.71719.07554.876.876,0,0,1,.324.27249c.15742.26849.03855.42976-.227.46751-.79619.11317-1.57823.30664-2.37605.40672a1.179,1.179,0,0,0-.54371.16146c-.28257.18981-.59455.06921-.89577.055a.72822.72822,0,0,1-.52224-.408.82848.82848,0,0,0-.18378-.243A10.59352,10.59352,0,0,1,73.32124,13.057C73.26367,12.97324,73.21605,12.8775,73.29507,12.77577Z"/><path class="cls-59" d="M67.76878,23.25483A8.85088,8.85088,0,0,1,68.28347,21.25c.32532-.145.62136-.41194,1.02179-.246a1.38354,1.38354,0,0,1,.64159.7806c.06509.24787.28463.38721.473.54044.16011.13027.33016.25107.33474.48731a5.069,5.069,0,0,0-.24709.95839,3.319,3.319,0,0,1-.43115.68805c-.3033.22616-.66432.15239-1.00364.19324a.99763.99763,0,0,1-.659-.51533C68.226,23.82726,67.97967,23.55223,67.76878,23.25483Z"/><path class="cls-60" d="M71.061,15.47131A11.35678,11.35678,0,0,1,72.446,13.697c.03789.00713.08457.01418.1027.04459a9.719,9.719,0,0,1,1.29892,2.26854,1.44679,1.44679,0,0,0,.17974.648c.08595.17275.10738.33913-.09271.45715a1.33143,1.33143,0,0,0-1.43423.41976c-.10335.09006-.219.18851-.38.12223a15.495,15.495,0,0,1-1.05793-1.82778A.30317.30317,0,0,1,71.061,15.47131Z"/><path class="cls-61" d="M69.62251,41.11829c.077-.0509.13289-.02427.20035.03252.44525.37487.89567.74361,1.34319,1.11579a10.934,10.934,0,0,0,1.25.72159,2.88841,2.88841,0,0,1,.57257.3686c.22945.0996.30522.33344.44077.513.1994.26415.38734.537.5837.80374a1.06271,1.06271,0,0,0,.60731.49112.27369.27369,0,0,1,.21726.195,1.29847,1.29847,0,0,1-1.43721-.12357,20.03056,20.03056,0,0,1-2.45186-1.73,1.35316,1.35316,0,0,1-.42726-.53187c-.01852-.04646-.044-.14255-.12735-.07774-.02779.0216-.01572.09445-.02186.14387a3.54168,3.54168,0,0,1-.37091-.88245A10.46189,10.46189,0,0,1,69.62251,41.11829Z"/><path class="cls-62" d="M67.3514,26.87892l.0205-.908c.07905-.17914-.00849-.37519.05645-.55576l.02644-.46538a.66219.66219,0,0,1,.65677.20617,1.1139,1.1139,0,0,0,.58305.26477c.87917.37166,1.05494,1.159,1.17134,1.98183a1.25693,1.25693,0,0,1-.84445.60742,6.78435,6.78435,0,0,1-1.43737.07753c-.09564-.0135-.2098.02255-.255-.1083A9.68465,9.68465,0,0,1,67.3514,26.87892Z"/><path class="cls-63" d="M135.30686,58.06082c-.13563-.15016-.27191-.02087-.383.02375a9.72665,9.72665,0,0,1-2.19435.61408,12.58469,12.58469,0,0,1-1.348.062.96005.96005,0,0,1-.08319-.4087c-.0278-.25815.09827-.39038.34334-.47158.26963-.08934.56011.01021.81834-.121a16.94853,16.94853,0,0,0,2.48847-.73624,14.72051,14.72051,0,0,0,2.40988-1.1681c.071-.04892.16845-.1487.26475-.0176A20.80478,20.80478,0,0,1,135.30686,58.06082Z"/><path class="cls-64" d="M75.91646,10.57176A1.81222,1.81222,0,0,0,76.72,11.67819c.27183.13271.37913.40572.56323.61243.06842.07683.11461.18861.23038.17419a4.05174,4.05174,0,0,1,1.44429.29761,3.96385,3.96385,0,0,0,1.68417.177.3414.3414,0,0,1,.35821.07175.35091.35091,0,0,1-.28537.16744,27.69242,27.69242,0,0,1-3.368.33022,3.31468,3.31468,0,0,1-.34244-.01575.56436.56436,0,0,1-.3163-.124,8.44389,8.44389,0,0,1-1.59781-1.62379c-.09079-.14424-.23532-.28819-.09841-.48338A5.11209,5.11209,0,0,1,75.91646,10.57176Z"/><path class="cls-65" d="M68.3117,36.34338l-.4514-2.46718c.033-.11586.13494-.15017.20744-.0886.4184.35533.99491.41207,1.41453.76069a2.60322,2.60322,0,0,1,.34975.84c.1653.53468.60371.90469.7818,1.42247a1.01492,1.01492,0,0,1-.041.73373.86537.86537,0,0,1-.90823-.20032C69.23692,36.97468,68.77048,36.66609,68.3117,36.34338Z"/><path class="cls-66" d="M67.52542,31.324l-.01965-.37093a1.71537,1.71537,0,0,1-.024-.43734A2.05062,2.05062,0,0,1,67.573,29.654c.08827-.17765.17809-.28411.40656-.24315a3.17643,3.17643,0,0,1,.93314.152,1.26254,1.26254,0,0,1,.4527.64721,2.46593,2.46593,0,0,0,.10606,1.32028c.10474.34436-.0014.71007.10707,1.05556a.15053.15053,0,0,1-.08157.15988,2.61511,2.61511,0,0,1-1.91017-1.14914C67.53573,31.51267,67.58246,31.40669,67.52542,31.324Z"/><path class="cls-67" d="M128.7694,86.95128c-.00928.14011-.02668.28023-.0267.42034q-.002,12.51152-.011,25.023c-.0006.38327.10488.45875.46557.4513,1.18032-.0244,2.36154-.01658,3.54221-.00335.25644.00288.34767-.04581.3474-.32848q-.01219-12.66547-.00735-25.331c0-.0766-.01056-.15319-.01619-.22979.14675.10314.0877.25794.08775.39032q.00417,12.57035.00993,25.14067c.00038.34179-.09261.43486-.43145.42909q-1.79012-.03052-3.581.00061c-.36751.007-.47339-.09245-.47242-.46659q.01876-7.238.00828-14.47609,0-5.29378.003-10.58757C128.68762,87.23863,128.6228,87.07222,128.7694,86.95128Z"/><path class="cls-68" d="M68.3117,36.34338c.27408-.0402.43228.17691.6096.30975a8.71552,8.71552,0,0,1,.83673.65369c.17865.171.505.18774.76526.27343a.15064.15064,0,0,1,.17552.03153c.38727.348.749.72351,1.14673,1.0605a.19812.19812,0,0,1,.07043.239,1.74465,1.74465,0,0,0-.1118.15408c-.23018.42963-.33583.47654-.81851.3636-.55913-.48185-1.24075-.79879-1.77165-1.32345-.0954-.09428-.27337-.29549-.46084-.0673A12.50431,12.50431,0,0,1,68.3117,36.34338Z"/><path class="cls-69" d="M74.992,11.26191A2.80759,2.80759,0,0,0,76.13715,12.745c.2767.20389.42261.558.78027.65137.08316.05784.185.09918.21772.20649.06041.19813.21056.232.39034.2341a.85577.85577,0,0,1,.70154.33009c-.6531.08321-1.31764.36843-1.93911-.1126a.29249.29249,0,0,0-.14235-.05085,2.35345,2.35345,0,0,1-1.55337-1.12737c-.21966-.27658-.20642-.64429-.37085-.94231A3.28557,3.28557,0,0,1,74.992,11.26191Z"/><path class="cls-70" d="M73.759,16.015c-.14564-.70105-.70022-1.17622-.99459-1.7959A5.62028,5.62028,0,0,0,72.446,13.697a5.926,5.926,0,0,1,.84905-.92122,9.51589,9.51589,0,0,0,1.32929,2.05847c.20734.20741.26382.555.59864.64164a.435.435,0,0,1,.09767.45765,5.22844,5.22844,0,0,0-.67944.19388C74.357,16.24844,74.06007,16.02343,73.759,16.015Z"/><path class="cls-71" d="M67.60117,31.57294c.01265.00147.032-.00185.037.00511a3.84853,3.84853,0,0,0,1.807,1.14984c.21464.10589.22583.33.28685.5176a4.18853,4.18853,0,0,1,.241.92345c-.08858.24893-.22019.44283-.52821.40812-.45836-.26716-1.0229-.32993-1.41082-.73592-.04873-.051-.119.00366-.17372.03507-.118-.71422-.22132-1.43033-.27658-2.15261A.1116.1116,0,0,1,67.60117,31.57294Z"/><path class="cls-72" d="M92.55579,8.23593a18.867,18.867,0,0,1-3.95548-1.097c-.14323-.0621-.31167-.00312-.43185-.12247l.16082-.04246a3.78373,3.78373,0,0,1,.75609.01592l.3746.01852c.12347.07653.26983-.00106.39578.05874.97491.155,1.95709.26575,2.92221.4803.09573.0552.24293-.05721.30893.09482a15.14264,15.14264,0,0,1,1.70489.531c-.07123.388-.374.21746-.55717.18827-.4485-.07147-.89177-.17635-1.34375-.23743A.33717.33717,0,0,0,92.55579,8.23593Z"/><path class="cls-73" d="M71.061,15.47131a1.20379,1.20379,0,0,0,.2398.5949c.28591.51889.561,1.04374.8404,1.56623.1925.262.35529.5277.10808.84574-.45551-.06694-.88708-.25231-1.35192-.27683a3.08271,3.08271,0,0,1-.71293-.941.50568.50568,0,0,1,.03-.47772A8.37128,8.37128,0,0,1,71.061,15.47131Z"/><path class="cls-67" d="M164.46326,94.43542c-.04432.05941-.11112.092-.147.01611a.59628.59628,0,0,1-.01482-.22767c-.01434-.66011-.0142-.66012-.6613-.66012-1.12887,0-2.25781.00685-3.38656-.00554-.23583-.00258-.29944.0585-.29917.29765q.01035,9.34962-.00065,18.69925c-.00032.25522.09144.28774.31.28613,1.23143-.009,2.46315-.01608,3.69433.004.307.005.34953-.10016.34888-.37093q-.01282-5.38663-.0036-10.77331a.84848.84848,0,0,1,.04124-.452q.00438,5.677.01279,11.35421c.00054.23991-.08691.30733-.31545.306-1.28322-.00773-2.56664-.01357-3.8497.0026-.35885.00453-.30783-.21143-.30782-.42784q.00027-4.73425-.00013-9.46851c0-3.02788.00675-6.05578-.00823-9.08358-.00181-.36487.111-.449.45594-.44346q1.80894.0292,3.61858.00051c.321-.00468.43339.08949.411.41093C164.3493,94.076,164.26863,94.28905,164.46326,94.43542Z"/><path class="cls-74" d="M85.39131,8.92912a9.46466,9.46466,0,0,0-1.60971-.46668,4.19062,4.19062,0,0,1-1.62953-.774A5.82331,5.82331,0,0,1,83.624,7.32859a.88789.88789,0,0,0,.2637.149c1.02037.16108,1.71262.98981,2.65915,1.29751-.03457.3169-.26716.2455-.45287.21125A1.40021,1.40021,0,0,0,85.39131,8.92912Z"/><path class="cls-75" d="M68.90592,29.64728c-.32724-.166-.70285-.02548-1.03538-.16412-.13285-.05539-.14441.06965-.17891.14219a1.81476,1.81476,0,0,0-.18362.89067.04856.04856,0,0,1-.05992-.03733l-.01951-.45c-.0652-.18083.02207-.37712-.05645-.55659l-.0205-.90669a.93226.93226,0,0,1,.01871-.53561c.56286-.03042,1.1239-.10075,1.68923-.0769a.46509.46509,0,0,1,.16022.47274A3.49691,3.49691,0,0,1,68.90592,29.64728Z"/><path class="cls-76" d="M69.29082,21.09765a.4402.4402,0,0,0-.5016.01883.75968.75968,0,0,1-.50575.13351,14.60789,14.60789,0,0,1,.79053-2.21337c.0772-.186.15648-.37106.23481-.55656.1732-.10042.26454.038.34924.13741a5.26256,5.26256,0,0,1,.76116,1.27061c-.05633.36962-.37928.44735-.64875.51637-.28767.07369-.42.19184-.39068.48766A.24574.24574,0,0,1,69.29082,21.09765Z"/><path class="cls-23" d="M70.36945,19.86586c-.23146-.3602-.46141-.72138-.69514-1.0801a.54869.54869,0,0,0-.36552-.3057,17.32791,17.32791,0,0,1,.90564-1.6974c-.0787.43334.24147.69649.435,1.01265.0794.12969.17251.251.25938.37613.00916.48039.14334.95.12435,1.433A.80118.80118,0,0,1,70.36945,19.86586Z"/><path class="cls-67" d="M34.63653,86.95277c-.00687.14054-.01973.28109-.01975.42164q-.00144,12.50859-.01034,25.01718c-.00055.37548.0918.46315.4598.45488,1.16713-.02627,2.3355-.02395,3.50275-.00071.3342.00665.41439-.09655.39121-.407a1.2725,1.2725,0,0,1,.04269-.672.04674.04674,0,0,1,.03562.00652.37674.37674,0,0,1,.038.05725,1.63217,1.63217,0,0,0-.05443.75391c-.00359.21661-.04738.32712-.29792.32531-1.29548-.00938-2.59107-.00758-3.88657-.00117-.21348.00106-.31232-.06961-.2911-.2882.00739-.07622.001-.15378.001-.23073q0-12.48455.00352-24.96912C34.55111,87.26433,34.47637,87.08386,34.63653,86.95277Z"/><path class="cls-77" d="M68.67462,25.48821a.5946.5946,0,0,1-.57647-.22418,1.4173,1.4173,0,0,0-.64337-.31429c.17693-.55158.17005-1.13721.314-1.69491.39349.13231.5242.52965.71969.81871a1.22841,1.22841,0,0,0,.57152.49075l.02128.02922C68.89316,24.868,68.85718,25.21151,68.67462,25.48821Z"/><path class="cls-67" d="M177.22583,102.5521a1.79587,1.79587,0,0,1,.06058.72045c.00315,3.04846.00956,6.09694-.00762,9.1453-.00207.36752.11249.43365.44558.42644,1.21592-.02631,2.43248-.02357,3.64879-.03177-.07453.12847-.20111.09144-.311.09163-1.16753.00215-2.33509-.003-3.50257.005-.23243.00159-.348-.04219-.34715-.31354Q177.228,107.57389,177.22583,102.5521Z"/><path class="cls-67" d="M39.0672,94.56872c-.10942.11769-.11257.01719-.11348-.05939-.00323-.26857-.00145-.53718-.00145-.80579q0-3.14653-.001-6.29306c-.00011-.15276-.01458-.3055-.02237-.45825.15108.11868.08429.28588.08457.43047q.00663,3.38709.00493,6.7742A.66221.66221,0,0,0,39.0672,94.56872Z"/><path class="cls-67" d="M110.80912,119.22141c-.02047.14383.06162.16559.18093.16491q2.25971-.0131,4.51942-.0215c-.07912.1212-.204.08593-.31417.08607-1.38145.00189-2.76291.00348-4.14433-.00248C110.92411,119.44786,110.66086,119.53811,110.80912,119.22141Z"/><path class="cls-67" d="M83.85417,112.81517c1.46011.02565,2.92025.05633,4.38-.01616-.062.14254-.19115.10494-.30007.10512q-1.9029.00318-3.80578.00071C84.0286,112.90477,83.91883,112.92636,83.85417,112.81517Z"/><path class="cls-67" d="M75.69107,112.78575a.73742.73742,0,0,0,.18212.0474q2.10029-.00345,4.20058-.013c-.08116.11919-.20614.08393-.31684.0841q-1.868.003-3.736-.00073C75.90187,112.90322,75.75452,112.95374,75.69107,112.78575Z"/><path class="cls-67" d="M80.07392,93.58078q-2.10051-.00788-4.201-.01359a.72057.72057,0,0,0-.18194.04848c.04132-.13017.15081-.11919.25267-.11922q1.96436-.00063,3.92869-.00005A.21032.21032,0,0,1,80.07392,93.58078Z"/><path class="cls-67" d="M115.73519,71.23472l1.38995-.70672A3.1534,3.1534,0,0,1,115.73519,71.23472Z"/><path class="cls-67" d="M67.37034,28.02985l-.0187.53562a4.58512,4.58512,0,0,1-.00024-1.68656Z"/><path class="cls-78" d="M85.8535,7.01828l-.07681-.02435c.01324-.08648.05893-.15975.15008-.12893a4.99557,4.99557,0,0,0,1.10552.06864A9.78464,9.78464,0,0,1,85.8535,7.01828Z"/><path class="cls-78" d="M99.41191,10.53007l-.43182-.3021-.12341-.13757A.44587.44587,0,0,1,99.41191,10.53007Z"/><path class="cls-78" d="M108.03358,24.932a1.5484,1.5484,0,0,1-.13885-.67607l.21078-.07478Z"/><path class="cls-67" d="M136.14438,102.58635l.00059,1.2288A2.48882,2.48882,0,0,1,136.14438,102.58635Z"/><path class="cls-67" d="M127.55136,6.93352a3.19851,3.19851,0,0,1-.94319.05835A2.61183,2.61183,0,0,1,127.55136,6.93352Z"/><path class="cls-67" d="M129.997,6.99065a3.18526,3.18526,0,0,1-.952-.05633A2.63447,2.63447,0,0,1,129.997,6.99065Z"/><path class="cls-79" d="M103.57168,72.393c.26022.14072.12576.28773.00692.43446l-.23851-.12623C103.58485,72.72437,103.64182,72.60644,103.57168,72.393Z"/><path class="cls-78" d="M89.08537,6.98991q-.37809-.00792-.75614-.01587A1.10273,1.10273,0,0,1,89.08537,6.98991Z"/><path class="cls-78" d="M113.43006,13.3193a.80042.80042,0,0,1-.30652.35746C113.10711,13.45594,113.16417,13.29812,113.43006,13.3193Z"/><path class="cls-67" d="M95.0961,92.48258l-.76687-.00027A.98154.98154,0,0,1,95.0961,92.48258Z"/><path class="cls-67" d="M69.59728,92.48205l-.68972,0A.826.826,0,0,1,69.59728,92.48205Z"/><path class="cls-67" d="M145.6347,113.84119a2.29485,2.29485,0,0,1,.71885.05762C146.11363,113.88453,145.86559,113.96979,145.6347,113.84119Z"/><path class="cls-67" d="M45.79328,92.48174l-.6897.00016A.82888.82888,0,0,1,45.79328,92.48174Z"/><path class="cls-67" d="M170.976,92.48275l-.68992-.0007A.82278.82278,0,0,1,170.976,92.48275Z"/><path class="cls-67" d="M147.37256,113.89837a1.81826,1.81826,0,0,1,.64644-.05434C147.81257,113.96978,147.5885,113.88582,147.37256,113.89837Z"/><path class="cls-67" d="M148.62978,26.58731a.4945.4945,0,0,0-.06057-.03968.25033.25033,0,0,1-.01159-.28822l.01768-.30478C148.69974,26.15638,148.616,26.376,148.62978,26.58731Z"/><path class="cls-67" d="M93.5589,113.84155a2.07483,2.07483,0,0,1,.644.05712C93.98787,113.88489,93.76374,113.97187,93.5589,113.84155Z"/><path class="cls-67" d="M68.06055,113.84437a1.81789,1.81789,0,0,1,.64516.05407C68.49031,113.88594,68.26669,113.96943,68.06055,113.84437Z"/><path class="cls-78" d="M106.94673,20.4885a.60286.60286,0,0,1-.12747-.31212C106.91882,20.25713,107.15882,20.28054,106.94673,20.4885Z"/><path class="cls-67" d="M56.18711,102.84925a1.90021,1.90021,0,0,1-.05681-.64808C56.26027,102.40747,56.17332,102.63277,56.18711,102.84925Z"/><path class="cls-67" d="M147.17211,92.48275l-.61285-.001A.65221.65221,0,0,1,147.17211,92.48275Z"/><path class="cls-67" d="M148.55511,29.26227l.07753-.2443c-.01694.183.06457.37651-.05864.54817Z"/><path class="cls-67" d="M67.37213,29.47215a1.142,1.142,0,0,1,.05646.55659C67.30524,29.8538,67.38535,29.65824,67.37213,29.47215Z"/><path class="cls-67" d="M67.42835,25.41513a1.13391,1.13391,0,0,1-.05647.55562C67.38536,25.78509,67.30543,25.58981,67.42835,25.41513Z"/><path class="cls-67" d="M95.29206,113.89893a1.531,1.531,0,0,1,.57433-.05755C95.68576,113.96848,95.484,113.885,95.29206,113.89893Z"/><path class="cls-78" d="M116.5773,10.62354a.41966.41966,0,0,1-.29477.21626C116.29923,10.6566,116.42141,10.61711,116.5773,10.62354Z"/><path class="cls-67" d="M69.87636,113.89849a1.5555,1.5555,0,0,1,.5684-.05795C70.26635,113.96824,70.06653,113.8861,69.87636,113.89849Z"/><path class="cls-67" d="M44.33343,113.84327a1.5841,1.5841,0,0,1,.57293.05545C44.715,113.88594,44.5143,113.9669,44.33343,113.84327Z"/><path class="cls-78" d="M100.63934,11.40715l-.29957-.24561C100.51254,11.15453,100.67566,11.15926,100.63934,11.40715Z"/><path class="cls-67" d="M56.13256,104.12285a1.47371,1.47371,0,0,1,.05483-.57375C56.17435,103.74069,56.25487,103.94147,56.13256,104.12285Z"/><path class="cls-78" d="M145.70077,16.657l-.14189-.11026-.009-.13512C145.86351,16.33153,145.65194,16.57433,145.70077,16.657Z"/><path class="cls-78" d="M177.13585,94.664l-.23-.157C177.15084,94.31281,177.12909,94.50926,177.13585,94.664Z"/><path class="cls-78" d="M153.3319,94.664l-.23-.157C153.34688,94.31281,153.32513,94.50926,153.3319,94.664Z"/><path class="cls-78" d="M93.08689,7.64229c-.10336-.03035-.22221-.01023-.30892-.09483C92.90517,7.50015,93.06036,7.36172,93.08689,7.64229Z"/><path class="cls-78" d="M168.52515,92.68056c-.07028.07127-.15917.0488-.2437.04838C168.3283,92.53969,168.41,92.52569,168.52515,92.68056Z"/><path class="cls-67" d="M148.47678,30.57166c.0488-.13029-.0137-.2818.07705-.40422l.00841.40518c.035.07238-.003.08233-.0629.07349Z"/><path class="cls-78" d="M84.15858,7.22189l-.23094.01089c.01033-.0765.02934-.147.12844-.13953C84.13368,7.09912,84.147,7.161,84.15858,7.22189Z"/><path class="cls-78" d="M146.8496,18.872c-.08761-.05349-.05432-.15468-.09029-.22856C146.951,18.65581,146.99407,18.72686,146.8496,18.872Z"/><path class="cls-78" d="M122.75194,7.69635a.17449.17449,0,0,0-.01092.04944l-.29566.02973C122.485,7.50715,122.65249,7.73336,122.75194,7.69635Z"/><path class="cls-67" d="M67.44809,30.47869l.06.03725-.00228.43713C67.38812,30.8069,67.45957,30.63776,67.44809,30.47869Z"/><path class="cls-67" d="M170.97943,96.58982a.97509.97509,0,0,1,.48476.05681C171.30151,96.63748,171.12939,96.70816,170.97943,96.58982Z"/><path class="cls-78" d="M115.64564,11.31652a.44344.44344,0,0,1-.28754.21983C115.37228,11.3563,115.4891,11.31043,115.64564,11.31652Z"/><path class="cls-67" d="M169.8782,96.64735a.95321.95321,0,0,1,.48157-.058C170.21127,96.70841,170.03982,96.63716,169.8782,96.64735Z"/><path class="cls-67" d="M67.60117,31.57294l-.01749.15066c-.11141-.11971-.05081-.26452-.05828-.3995Z"/><path class="cls-67" d="M107.73534,74.48749l.378-.00127A.2889.2889,0,0,1,107.73534,74.48749Z"/><path class="cls-78" d="M89.85575,7.06717a.6531.6531,0,0,1-.3957-.05876C89.59326,7.01881,89.73715,6.95783,89.85575,7.06717Z"/><path class="cls-78" d="M166.73952,93.18048c-.07411.03471-.1316.10962-.22666.09361C166.53274,93.10816,166.60268,93.06335,166.73952,93.18048Z"/><path class="cls-67" d="M136.22286,101.739a.73958.73958,0,0,1-.059.40222C136.17074,102.00531,136.11111,101.85959,136.22286,101.739Z"/><path class="cls-67" d="M58.57154,101.893a.7577.7577,0,0,1-.05736.42086C58.52094,102.172,58.457,102.02032,58.57154,101.893Z"/><path class="cls-78" d="M181.3152,102.04668l-.00828-.15528c.162.03346.19188.10877.07318.23109A.11621.11621,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M105.41242,102.38161a.78319.78319,0,0,1-.05479-.4112C105.46656,102.0954,105.40791,102.24271,105.41242,102.38161Z"/><path class="cls-67" d="M157.56534,102.46688a.79407.79407,0,0,1-.05419-.41937C157.62058,102.1755,157.5595,102.32551,157.56534,102.46688Z"/><path class="cls-67" d="M181.3152,102.04668l.06488.07581-.01089.34318A.79228.79228,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M169.69536,92.50317a.73628.73628,0,0,1-.4107.05643C169.40886,92.44834,169.55655,92.508,169.69536,92.50317Z"/><path class="cls-78" d="M148.49933,30.64611l.06288-.07351c.11869.11874.09154.194-.06841.22982Z"/><path class="cls-67" d="M148.17317,92.55775a.86279.86279,0,0,1-.41425-.05452C147.89865,92.508,148.047,92.44853,148.17317,92.55775Z"/><path class="cls-67" d="M157.51082,104.354a.78474.78474,0,0,1,.0546-.42006C157.55914,104.07532,157.62092,104.22581,157.51082,104.354Z"/><path class="cls-67" d="M58.51328,104.02416a.78392.78392,0,0,1,.05476.40671C58.46078,104.30727,58.51821,104.16152,58.51328,104.02416Z"/><path class="cls-67" d="M105.35589,104.43128a.77055.77055,0,0,1,.05618-.41775C105.40653,104.15444,105.4684,104.30457,105.35589,104.43128Z"/><path class="cls-67" d="M136.16523,104.25478a.74668.74668,0,0,1,.05913.40779C136.11021,104.54033,136.17078,104.39276,136.16523,104.25478Z"/><path class="cls-67" d="M126.31593,7.01011a.67723.67723,0,0,1-.40122.05951C126.03457,6.95625,126.1804,7.01787,126.31593,7.01011Z"/><path class="cls-67" d="M171.97711,92.55775a.856.856,0,0,1-.41317-.05454C171.70334,92.50788,171.85133,92.4487,171.97711,92.55775Z"/><path class="cls-67" d="M46.79451,92.55791a.72668.72668,0,0,1-.40275-.05644C46.52775,92.50765,46.67279,92.44962,46.79451,92.55791Z"/><path class="cls-67" d="M145.9003,92.5031a.82161.82161,0,0,1-.41964.057C145.6077,92.44659,145.75871,92.50953,145.9003,92.5031Z"/><path class="cls-67" d="M44.50687,92.50191a.7261.7261,0,0,1-.40456.05658C44.22449,92.44908,44.37021,92.50785,44.50687,92.50191Z"/><path class="cls-67" d="M96.09763,92.56088a.73186.73186,0,0,1-.41686-.05716C95.8215,92.50906,95.97166,92.44679,96.09763,92.56088Z"/><path class="cls-67" d="M148.55448,25.5052a.65338.65338,0,0,1-.055-.39744C148.60536,25.22813,148.54706,25.37121,148.55448,25.5052Z"/><path class="cls-67" d="M93.74,92.50339a.734.734,0,0,1-.41231.0568C93.45229,92.44781,93.60066,92.50825,93.74,92.50339Z"/><path class="cls-67" d="M70.59875,92.56a.73207.73207,0,0,1-.413-.05648C70.32525,92.50828,70.47381,92.4478,70.59875,92.56Z"/><path class="cls-78" d="M166.20009,93.4098c-.07332.03694-.13047.11228-.22648.09535C165.99277,93.33963,166.063,93.29538,166.20009,93.4098Z"/><path class="cls-67" d="M68.31448,92.5025a.87433.87433,0,0,1-.40795.05428C68.03067,92.44974,68.17673,92.5073,68.31448,92.5025Z"/><path class="cls-78" d="M88.19546,102.93568c-.30886-3.22483,2.68818-5.7422,5.19528-6.2551a6.69059,6.69059,0,0,1,7.87565,5.582A6.62838,6.62838,0,0,1,88.262,104.754,15.06279,15.06279,0,0,1,88.19546,102.93568Z"/><path class="cls-78" d="M45.44046,96.56916A6.62622,6.62622,0,0,1,46.56915,109.729a6.54828,6.54828,0,0,1-7.53825-5.02078c-.70494-3.98962,1.20424-7.08688,5.18448-8.02618A4.79038,4.79038,0,0,1,45.44046,96.56916Z"/><path class="cls-78" d="M75.724,103.1979c.32487,3.37788-2.5467,6.07615-5.37,6.52935a6.62965,6.62965,0,1,1,5.27949-8.25142A9.738,9.738,0,0,1,75.724,103.1979Z"/><path class="cls-78" d="M140.22787,103.2052a6.62809,6.62809,0,1,1,6.60744,6.61506A6.605,6.605,0,0,1,140.22787,103.2052Z"/><path class="cls-4" d="M127.64944,20.49762a.36642.36642,0,0,1-.0085-.339A.36642.36642,0,0,1,127.64944,20.49762Z"/><path class="cls-80" d="M115.28107,34.80766l.077-.23106.23111.077C115.608,34.94785,115.34875,34.68625,115.28107,34.80766Z"/><path class="cls-80" d="M109.2723,33.11323a.2326.2326,0,0,1-.2311-.154C109.15331,32.95794,109.26523,32.957,109.2723,33.11323Z"/><path class="cls-79" d="M110.81264,62.61159a5.14418,5.14418,0,0,0,1.13217,1.06258c.14042.12791.31519.21754.45971.34162a.43277.43277,0,0,1-.06156.75676c-1.02975.6414-1.94556,1.43484-2.90376,2.17218-.70619.54343-1.4564,1.03175-2.14217,1.59882a1.98579,1.98579,0,0,1-1.28743.54442.32064.32064,0,0,0-.265.19868.4644.4644,0,0,1-.22055.2032.95766.95766,0,0,1-.60409.03844c-.34866-.07437-.08543-.33042-.11459-.50192a1.49819,1.49819,0,0,1-.002-.19184c-.00437-.11608-.00177-.25751-.15759-.258a.22724.22724,0,0,0-.21645.23111,8.37813,8.37813,0,0,1-.28926.98762c-.09036.56337-.49176,1.04671-.42108,1.6545.0187.16079-.11527.18646-.23722.16639a3.81142,3.81142,0,0,1-.44537-.10861c-.54111-.15779-.54072-.15914-.54337.4234-.02416-.0432-.07393-.08977-.06874-.1291a2.40675,2.40675,0,0,0-1.02794-2.07307,1.336,1.336,0,0,1-.39207-1.38891,17.65093,17.65093,0,0,0,.33857-2.6837,2.96015,2.96015,0,0,1,.56487-1.32078c.378-.59108.3537-.759-.24547-1.10936-.48175-.28168-.92758-.62533-1.3851-.94753a.3725.3725,0,0,1-.17012-.36338c.13152-1.19084.69191-1.535,1.92084-1.423.206.01877.40656.12556.61929.04.60574.16018,1.1457.48479,1.73227.69546a.75036.75036,0,0,0,.61525-.01923,9.27991,9.27991,0,0,0,1.23314-.61986c.44822-.2792.47176-.4158.1147-.79984-.27163-.29214-.49246-.62271-.74658-.92766-.097-.11641-.19681-.24466-.11485-.41643a.87423.87423,0,0,1,.80245.24627,3.76621,3.76621,0,0,1,.49574.53338c.26786.318.48725.69989.95868.77316a.42918.42918,0,0,1,.24465.17789c.42841.52907.94151.97631,1.41511,1.46164A2.52952,2.52952,0,0,0,110.81264,62.61159Z"/><path class="cls-81" d="M105.49757,58.45255a3.71917,3.71917,0,0,0,.83212,1.16791c.5622.6528.53769.67223-.19689,1.13939-.40042.25465-.85555.388-1.26285.62275-.07739.04461-.16235.09566-.25267.05043a14.58081,14.58081,0,0,1-1.97-.901,2.28094,2.28094,0,0,0-1.26123-.38546,8.20584,8.20584,0,0,1-2.511-.44969c-.56383-.24151-1.14414-.44743-1.69621-.7127a18.11658,18.11658,0,0,0-1.73617-.71807c-.98341-.35287-1.94235-.77371-2.92448-1.1305a14.75411,14.75411,0,0,1-1.50083-.43854,1.66367,1.66367,0,0,1-.81427-.58461c-.19293-.30721-.62839-.30513-.95632-.4358a34.161,34.161,0,0,1-4.02688-1.70007c-.38-.211-.754-.43288-1.13153-.64834a1.344,1.344,0,0,0-.87054-.3095c-.2355.0269-.453-.21023-.65754-.36394-.35708-.26832-.73194-.51753-1.062-.816a3.97283,3.97283,0,0,0-1.26831-.62612.24035.24035,0,0,1-.07084-.2472c.11286-.344.07985-.71074.17515-1.0567a1.03684,1.03684,0,0,1,1.3013-.08118,2.05142,2.05142,0,0,1,.69881.79915.4927.4927,0,0,0,.20972.221,1.79638,1.79638,0,0,1,.87019.98312.46894.46894,0,0,0,.242.23944c.95208.55871,1.92946,1.06958,2.92568,1.54473a.36088.36088,0,0,0,.1439.05242,10.18569,10.18569,0,0,1,2.90529.81684,1.00022,1.00022,0,0,0,.815.00412.76847.76847,0,0,1,.52756.01337c.71544.14462,1.398.40886,2.12956.51113.7473.10445,1.48294-.03164,2.22283.016a.30515.30515,0,0,0,.31278-.23769.52524.52524,0,0,1,.64175-.35914,16.24625,16.24625,0,0,0,2.26689.06291,4.34521,4.34521,0,0,1,1.10607.11165,1.23046,1.23046,0,0,0,.75864-.02782,1.00574,1.00574,0,0,1,1.05844.1435c-.041-.44062-.00643-.48163.49742-.61932a.625.625,0,0,1,.41642.31474c.83356,1.16852,1.86025,2.1824,2.68319,3.35876A3.00284,3.00284,0,0,1,105.49757,58.45255Z"/><path class="cls-82" d="M80.38439,49.90345a4.82756,4.82756,0,0,1-.15445,1.3093c-.27457.15081-.261.49361-.4621.69336-.42907-.06363-.89022-.01217-1.23178-.37832-.07463-.08-.18133-.1317-.232-.238.16243-.34512-.10392-.63272-.19693-.90733-.11009-.325.048-.69953-.231-.98714-.1061-.10937.03839-.227.16345-.28118.34436-.14905.68982-.29552,1.03485-.443.28842-.15866.47413.08748.69989.17664A4.532,4.532,0,0,1,80.38439,49.90345Z"/><path class="cls-83" d="M102.64725,29.03122c.03722.00786.10175.00683.10764.02489.13027.40006.5055.63973.664,1.01992a19.336,19.336,0,0,0,1.07193,2.18063.55212.55212,0,0,0,.23636.24042c.14024.04022.18516.16885.24995.27584a10.23179,10.23179,0,0,0,5.0529,4.17554c.31912.1315.6399.25907.96373.37928.11938.04432.29074.055.28143.25266-.01854.29048.22811.31711.407.37583.88481.29043,1.80826.437,2.70135.68906a16.53567,16.53567,0,0,0,2.87668.55315.3312.3312,0,0,1,.3319.38441,1.16781,1.16781,0,0,0-.75216.14618,2.41072,2.41072,0,0,1-1.67474.15976c-.78777-.14729-1.59648-.21315-2.36976-.383a16.7331,16.7331,0,0,1-4.33757-1.7281,3.29828,3.29828,0,0,0-.57223-.19724.70765.70765,0,0,1-.38518-.23124,9.24839,9.24839,0,0,1-2.0468-1.94635,17.92431,17.92431,0,0,1-2.59848-5.13885A3.10335,3.10335,0,0,1,102.64725,29.03122Z"/><path class="cls-84" d="M111.27522,37.5804c-.59464-.25852-1.19543-.50393-1.78255-.77855a11.14581,11.14581,0,0,1-2.64452-1.66567,9.95154,9.95154,0,0,1-2.12094-2.6391c.07061-.36584-.303-.58364-.30814-.92423a2.90965,2.90965,0,0,0,1.05926.99121c.27487.16053.42237.53062.64414.79216a7.022,7.022,0,0,0,1.93982,1.65524.61045.61045,0,0,0,.36262.10427c.7619.26014,1.37875.80079,2.15422,1.05737,1.12912.37359,2.28715.60328,3.438.87844a16.09879,16.09879,0,0,0,2.23833.39849,33.76317,33.76317,0,0,0,3.66874.453,1.37861,1.37861,0,0,1,.98047.21643,2.3304,2.3304,0,0,1-.88782.14906,19.2957,19.2957,0,0,1-3.3243-.14295.25082.25082,0,0,0-.15147.00416c-.9598.574-1.89437.05546-2.83708-.063C112.88286,37.96362,112.10541,37.64,111.27522,37.5804Z"/><path class="cls-80" d="M104.80425,28.338a3.80185,3.80185,0,0,1,.68549,1.435,6.74169,6.74169,0,0,0,1.51765,2.4138,4.03126,4.03126,0,0,0,1.51724.88893c.45414.143.85466.45045,1.30848.63223a24.48073,24.48073,0,0,0,3.494.97422c.58014.13787,1.16266.03673,1.72281.20267.212.299.55662.18314.82451.21291,1.07127.11907,2.14994.1713,3.22572.25038.081.006.21145-.03819.2179.08621.007.134-.123.13848-.22555.1418-.11486.00371-.22991.00139-.34488.00169-.30426.391-.74817.3223-1.13971.28462-.683-.06571-1.36922-.12964-2.05117-.18509-.71453-.05809-1.40653-.2278-2.11633-.29353-.77473-.07175-1.54633-.1773-2.3193-.26812l-.077-.00017c-.08243-.18221-.27161-.17635-.42155-.22735a9.16877,9.16877,0,0,1-3.22461-1.78475,8.919,8.919,0,0,1-1.04677-1.26113A9.28838,9.28838,0,0,1,104.80425,28.338Z"/><path class="cls-85" d="M119.59505,64.84514c-.08038.11624-.21628.04618-.31413.09314-.12943.06211-.2703.13624-.09909.30272.08286.08056.13436.18544.02169.25621-.42869.26921-.67841.74889-1.14918.96534-.00427-.11289.09008-.18045.12594-.27345.11927-.30935-.02548-.567-.3424-.569a3.68853,3.68853,0,0,1-1.58407-.46539c-.80188-.39162-1.62429-.74157-2.42386-1.13956a17.01924,17.01924,0,0,1-1.75963-1.19271c-.31921-.21067-.60129-.48537-1.0262-.44192a30.20019,30.20019,0,0,1-2.73937-2.57077c-.31534-.31636-.52035-.71637-.80432-1.06193-1.0406-1.26636-2.2616-2.36824-3.278-3.65248-.28551-.36074-.5694-.723-.85618-1.083-.079-.0991-.16343-.20238-.11046-.34633.21257-.09237.29814.07812.39816.20075a18.13988,18.13988,0,0,0,1.75515,1.74335,4.75563,4.75563,0,0,1,.6604.69454,25.68717,25.68717,0,0,0,7.9502,5.5791,2.87581,2.87581,0,0,1,1.03351.65364.2609.2609,0,0,0,.09068.07063c.86191.33951,1.63136.86158,2.46919,1.2484a.36006.36006,0,0,0,.18369.05208,2.32657,2.32657,0,0,1,1.38018.39486C119.42825,64.3976,119.67784,64.49365,119.59505,64.84514Z"/><path class="cls-86" d="M103.26354,53.67736a10.00561,10.00561,0,0,0,1.12035,1.4513c1.16684,1.33877,2.44269,2.589,3.5335,3.985.6044.77354,1.31178,1.42329,1.96628,2.13395a9.87627,9.87627,0,0,0,.89817.77376c.11591.0987.2539.18174.26228.35913l-.23148.23106a1.0539,1.0539,0,0,1-.98021-.40014c-.63536-.68445-1.363-1.28007-1.94507-2.01646a.2722.2722,0,0,0-.15184-.10975c-.57727-.05411-.80156-.535-1.10722-.91172a1.7525,1.7525,0,0,0-1.13073-.721,11.43557,11.43557,0,0,1-.934-1.20161q-.89905-1.09157-1.79692-2.1841c-.24978-.30546-.49087-.618-.73591-.92736-.21436-.07335-.29066-.27691-.40733-.4394q-.71349-.99367-1.38989-2.01316c-.09689-.14647-.22054-.28832-.16511-.4884a1.71656,1.71656,0,0,0-.28914-1.56466c-.10061-.18191-.31567-.31519-.2376-.57128.21207-.12427.29583.052.38347.17788a4.60249,4.60249,0,0,0,.60678.76821c.78269,1.15729,1.69081,2.21826,2.55157,3.3157C103.16549,53.42886,103.31348,53.504,103.26354,53.67736Z"/><path class="cls-87" d="M102.64725,29.03122a19.29163,19.29163,0,0,0,.65037,2.23841,26.312,26.312,0,0,0,1.2426,2.50022c.42964.71876.8928,1.40344,1.38909,2.07365a8.77941,8.77941,0,0,0,1.19952,1.12284,1.87046,1.87046,0,0,1,.37166.38286.77273.77273,0,0,1-.40136-.20553,21.74617,21.74617,0,0,1-2.1227-1.973,1.16161,1.16161,0,0,0-.4031-.28579c-.129.03945-.19-.05347-.24212-.13776-.4757-.76965-.93758-1.54732-1.339-2.35972a23.77022,23.77022,0,0,1-1.2735-3.86448,34.23876,34.23876,0,0,1-.68445-3.97577,14.153,14.153,0,0,1-.19288-2.60013,2.89712,2.89712,0,0,0-.06579-.80076,13.33422,13.33422,0,0,0-.22315-3.66223,9.92653,9.92653,0,0,0-2.409-5.02522,9.1848,9.1848,0,0,0-1.01185-1.04934.53028.53028,0,0,1-.18517-.40059c-.34179-.32184-.85562-.38573-1.15554-.77036.3373-.3008.32492-.3663-.07693-.57989a5.74349,5.74349,0,0,0-.98236-.40543c-.23827-.07469-.40736-.202-.40419-.478a13.009,13.009,0,0,1,3.5316,1.63325,8.66,8.66,0,0,1,3.47038,5.4176,15.05439,15.05439,0,0,1,.39683,3.25761c.00994,1.03163.00618,2.0662.0848,3.09363q.14706,1.9218.34417,3.8415A26.60036,26.60036,0,0,0,102.64725,29.03122Z"/><path class="cls-88" d="M103.10947,32.42006a19.21964,19.21964,0,0,0,1.46386,2.46483,2.60093,2.60093,0,0,0,.81354,1.13934,14.56487,14.56487,0,0,0,3.14495,2.78041,17.06018,17.06018,0,0,0,3.54767,1.72112,35.233,35.233,0,0,0,3.39469,1.08257c.211.04646.42237.09337.63576.12562.14642.02213.24106.07863.24962.23649a.69347.69347,0,0,1-.78726.192c-.82189-.17633-1.61678-.49362-2.43876-.61346a11.72724,11.72724,0,0,1-2.47332-.80044,14.00665,14.00665,0,0,1-2.07416-1.0568,1.69571,1.69571,0,0,0-.54632-.2629c-.3471.04715-.45511-.28164-.67815-.4301a4.64282,4.64282,0,0,0-.9657-.86872,12.09344,12.09344,0,0,1-2.37324-2.66244,18.86892,18.86892,0,0,1-2.23343-4.70817c-.03953-.12224-.09458-.24338.00656-.36262.31608-.063.38853.18654.46687.39059a12.6471,12.6471,0,0,0,.53571,1.25862A.96543.96543,0,0,0,103.10947,32.42006Z"/><path class="cls-89" d="M116.74475,44.358a3.528,3.528,0,0,0-1.15554.15423,2.65074,2.65074,0,0,1-1.15609-.19358,22.35364,22.35364,0,0,1-4.0636-1.61624,17.73923,17.73923,0,0,1-3.2828-2.12182,14.31458,14.31458,0,0,0-1.16832-1.10492,16.75888,16.75888,0,0,1-1.80177-2.03472c-.08-.09762-.1786-.19423-.09064-.33866a.24447.24447,0,0,1,.32775.1188,5.18528,5.18528,0,0,0,1.49114,1.35049c.54589.36431,1.01642.85688,1.54657,1.257a11.24313,11.24313,0,0,0,2.46794,1.46475,21.35126,21.35126,0,0,0,5.00981,1.92128,1.1779,1.1779,0,0,1,.56594.21929.89678.89678,0,0,0,.80944.42509A.49158.49158,0,0,1,116.74475,44.358Z"/><path class="cls-90" d="M115.43514,43.4339a14.41738,14.41738,0,0,1-2.38941-.63624,20.67328,20.67328,0,0,1-2.73736-1.157c-.16893-.08916-.33138-.1906-.49682-.28638a14.80842,14.80842,0,0,1-3.66336-2.56961,12.65126,12.65126,0,0,1-1.84819-2.056c-.0726-.11428-.20266-.21045-.13055-.37574.13773-.06822.21442.03916.29757.11023.98158.83892,1.9185,1.73048,2.95606,2.50334.23581.11373.35405.38425.61666.46226a8.85834,8.85834,0,0,0,1.87955,1.15889A26.12916,26.12916,0,0,0,116.2061,42.835c.139.02991.32807.03265.39619.18592.03552.07988-.08813.13822-.16569.1821A2.53,2.53,0,0,1,115.43514,43.4339Z"/><path class="cls-91" d="M107.11531,40.50708a21.8878,21.8878,0,0,0,6.78573,3.54577c.558.18071,1.14546.235,1.68817.45941.04746.16844.29968.15041.32505.377a11.74626,11.74626,0,0,1-3.86868-.83908.81387.81387,0,0,1-.7713-.0949,28.55056,28.55056,0,0,1-2.71993-1.51c-.36966-.26174-.84134-.30614-1.18546-.62193-.35838-.32888-.76067-.61117-1.116-.94273-.51548-.48095-1.094-.88637-1.60205-1.37421a17.44945,17.44945,0,0,1-1.8655-2.24491c-.17565-.23659-.31411-.4998-.51047-.72217-.22928-.33816-.433-.69234-.64958-1.03847a.49213.49213,0,0,1-.09282-.46953c.32989-.33664.4598.0606.66571.18055.44508.58866.80928,1.23148,1.29425,1.79826a14.19458,14.19458,0,0,0,1.63486,1.70757c.62175.52179,1.19127,1.11283,1.80639,1.64917A2.0178,2.0178,0,0,0,107.11531,40.50708Z"/><path class="cls-92" d="M102.3393,36.502c.42779.45665.72563,1.0095,1.116,1.49691a13.80188,13.80188,0,0,0,2.33989,2.34166c.60177.46443,1.15863.99645,1.74509,1.488.36962.30979.85863.34985,1.24184.64889a25.53168,25.53168,0,0,0,2.26589,1.26673,2.15424,2.15424,0,0,0,.99757.306c.003.12766.0997.17049.19563.208a26.56889,26.56889,0,0,0,3.49243,1.114,5.53236,5.53236,0,0,0,1.62718.37259c-.38769.2047-.76464.001-1.14291-.03978a7.1041,7.1041,0,0,0-1.322.03941.31643.31643,0,0,1-.36267.02483c-.82464-.32873-1.722-.43357-2.53448-.77986a18.85522,18.85522,0,0,1-5.43253-3.07053,16.91478,16.91478,0,0,1-1.53388-1.14942c-.29883-.33429-.60292-.66357-.88748-1.01051a4.68307,4.68307,0,0,0-.7147-.989c-.42719-.61827-.74025-1.30691-1.18222-1.91742C102.17167,36.74713,102.1,36.56351,102.3393,36.502Z"/><path class="cls-93" d="M119.59505,64.84514a.56326.56326,0,0,0-.46221-.46211c-.25421-.18462-.08279-.385.04848-.47478a8.31656,8.31656,0,0,0,1.285-1.3115,2.88351,2.88351,0,0,1,1.3623.11106c.735.18387,1.483.30259,2.21794.48293.14842.03642.30947.03966.40173.19123-.25594.35785-.66448.59309-.84273,1.00787-.09841.229-.1472.47731-.38984.60934-.35129.105-.72183.07027-1.07942.2018a1.61772,1.61772,0,0,1-1.03923-.15216A3.80322,3.80322,0,0,0,119.59505,64.84514Z"/><path class="cls-94" d="M104.188,39.73679a8.10424,8.10424,0,0,1,.97124,1.02746c.49432.514,1.15492.78011,1.68251,1.2463a17.59011,17.59011,0,0,0,4.426,2.56268,24.49831,24.49831,0,0,0,2.60583.86606,3.826,3.826,0,0,0,1.02239.30509,17.04312,17.04312,0,0,0,2.52954.693.69112.69112,0,0,1,.1667.07715,2.946,2.946,0,0,1-.85426.15383l.08391.46233-.53925.00019c-.19649.16947-.41238.06665-.62163.04236a5.90669,5.90669,0,0,1-.85834-.18693A19.38764,19.38764,0,0,1,110.81,45.38972a24.83688,24.83688,0,0,1-5.12777-3.58044c-.67549-.63439-1.26825-1.33793-1.8993-2.00922a.64972.64972,0,0,1-.23991-.57956C103.93475,39.17168,103.9978,39.53361,104.188,39.73679Z"/><path class="cls-95" d="M116.05142,49.74938a5.22327,5.22327,0,0,0,1.84885.46212c-.09923.19457-.26346.15476-.43291.1301-.33838-.04924-.67838-.0876-1.01806-.12758a.17656.17656,0,0,0-.16677.0745c-.184.15507-.38893.08471-.58825.051a15.86658,15.86658,0,0,1-5.207-1.9169,33.46586,33.46586,0,0,1-3.7352-2.43035,18.7315,18.7315,0,0,1-3.08239-2.769,3.17933,3.17933,0,0,1-.65667-.92658c.22406-.14659.35844.04549.49248.1533.28916.23255.53338.51554.79809.77575a1.15183,1.15183,0,0,0,.3953.29763c.59694.46295,1.13616.99413,1.73815,1.45251a30.24018,30.24018,0,0,0,5.10324,3.19792,25.92753,25.92753,0,0,0,2.9957,1.19736c.33319.11334.6794.12452,1.012.21608C115.71791,49.634,115.9093,49.61609,116.05142,49.74938Z"/><path class="cls-96" d="M103.03262,42.27852a12.98047,12.98047,0,0,0,2.21187,2.37448,34.7846,34.7846,0,0,0,3.07266,2.32413c1.04806.68327,2.12709,1.3072,3.2264,1.89794a13.03931,13.03931,0,0,0,3.64439,1.25789,3.92274,3.92274,0,0,0,1.09459.15556c.14818.23128.41725.21088.634.29305.12793.04849.27309.0492.36749.16906a.57712.57712,0,0,1-.46376.11266,14.57069,14.57069,0,0,1-1.69214-.1572,10.88228,10.88228,0,0,1-2.70693-.82659,27.16411,27.16411,0,0,1-3.47006-1.80118,1.60635,1.60635,0,0,1-.24646-.18175q-.97491-.772-1.94877-1.5459A14.43452,14.43452,0,0,1,104.336,44.184c-.4256-.532-.974-.93844-1.3664-1.49475a2.36218,2.36218,0,0,0-.42047-.58709c-.08232-.06413-.06332-.18794.00167-.283A.45517.45517,0,0,1,103.03262,42.27852Z"/><path class="cls-97" d="M115.05,50.597a15.72194,15.72194,0,0,0,2.234.15362c1.15087.06313,2.29136.23065,3.43653.33972a18.49094,18.49094,0,0,0,2.24129.2.82085.82085,0,0,1,.485.07642.1763.1763,0,0,1-.20259.07231c-.52913-.188-1.05426.07457-1.582.00753a.40547.40547,0,0,0-.37237.15122c-.32895.20782-.67925.047-1.00785.02466-1.15935-.07878-2.32149-.14473-3.47205-.322a9.44389,9.44389,0,0,0-1.39316-.39869C115.25571,50.86731,115.04524,50.84977,115.05,50.597Z"/><path class="cls-98" d="M116.74474,51.21275c1.08465.0992,2.16905.2012,3.25406.29621.42964.03762.86065.05972,1.291.08888.3703.16441.77448.04089,1.15784.147a8.51531,8.51531,0,0,0,2.23215.08291,3.00438,3.00438,0,0,1,.56712.06449,1.90942,1.90942,0,0,0,1.02547-.10673c.28556-.10238.57124.02376.8652-.02188.595-.09239,1.19577-.20143,1.78766-.247.51177-.03935.99475-.19805,1.5072-.22232a7.54978,7.54978,0,0,0,1.9147-.30227,1.26286,1.26286,0,0,1,.34391-.01042,2.99632,2.99632,0,0,1-1.42073.37549c-1.3267.23436-2.66374.41519-3.99819.59131-.66255.08744-1.34106.14366-2.01439.19077a3.06629,3.06629,0,0,1-1.54788-.05334c-.153-.0683-.21365.08687-.32673.24114a5.6982,5.6982,0,0,0,1.30707.03694,15.89358,15.89358,0,0,1-3.09226.23509.582.582,0,0,1-.50525.1107c-1.08957-.1072-2.188-.08193-3.27518-.22222a1.83966,1.83966,0,0,1-.48356-.10372,11.45869,11.45869,0,0,0-1.34332-.4094c-.18053-.06607-.41515-.05189-.49331-.29331.23384-.19142.48379.0138.7195-.03054-.33635-.21222-.76694-.21868-1.09939-.4912A3.87768,3.87768,0,0,1,116.74474,51.21275Z"/><path class="cls-69" d="M148.55762,26.25941l.01154.2883c-.00289.15373-.0041.3076-.00909.46135a2.42513,2.42513,0,0,1-.24347,1.46081,1.35422,1.35422,0,0,0-.19633.803.74459.74459,0,0,1-.16415.45773,5.2388,5.2388,0,0,0-.68073,1.38676,18.69578,18.69578,0,0,1-1.1476,2.57084c-.25431.41-.35947.89708-.62191,1.31335-.55516.88057-1.10875,1.76193-1.63924,2.65882-.52836.8933-1.19611,1.703-1.76059,2.57662a14.70086,14.70086,0,0,1-1.04835,1.362,10.91082,10.91082,0,0,1-1.05055,1.13016c-.33576.30583-.55431.72652-.90174,1.03574-.93764.83454-1.84141,1.70395-2.86025,2.44852a16.13436,16.13436,0,0,1-2.96824,1.719,7.46953,7.46953,0,0,1-2.06983.51169c-.9908.13125-1.98946.18265-2.98181.30362a10.35671,10.35671,0,0,1-1.11416.10427,5.09152,5.09152,0,0,0-1.64285.16519c-.19512.06863-.35253-.01921-.52413-.04131a5.497,5.497,0,0,0-1.16623.15058c-.63618.04975-1.25455-.21108-1.8845-.17671-.46684.02547-.91382-.28924-1.40859-.00328-.18487.10684-.51955-.08169-.78079-.06316-.55911.03965-1.07553-.20626-1.62634-.202a.632.632,0,0,0-.25445.06685,4.44389,4.44389,0,0,1-1.64123-.3324c-.09872-.02955-.23785-.05415-.20792-.22012a.5426.5426,0,0,1,.47373-.0549c.4032.07211.81157.00983,1.21539.05336.07279.00785.09415-.00563.1191-.08689.09224-.30044.293-.2484.50314-.12924,1.2072.07749,2.40939.20261,3.60793.36673a5.90721,5.90721,0,0,0,1.0275.08762c.68723-.02753,1.36845.05735,2.05971.02881,1.49251-.06161,2.97764-.18038,4.46341-.32054a17.93,17.93,0,0,0,2.61447-.31371,10.96573,10.96573,0,0,0,3.67612-1.76863,22.15609,22.15609,0,0,0,3.05627-2.60906,34.50924,34.50924,0,0,0,3.98745-4.92792,43.26384,43.26384,0,0,0,3.24224-5.653,42.36023,42.36023,0,0,0,2.47212-6.51691A.34868.34868,0,0,1,148.55762,26.25941Z"/><path class="cls-99" d="M118.28545,47.97794a1.35672,1.35672,0,0,0-.15364.00107c-.09614.011-.21832-.04328-.27764.07232-.07994.15577.15985.13233.17017.28293l-2.04995-.12513c-.158.14325-.33745.08335-.51119.04962a17.47507,17.47507,0,0,1-4.931-1.78356,24.47971,24.47971,0,0,1-5.74458-4.20255c-.43442-.43068-.86348-.87223-1.25621-1.34469-.27719-.4316-.588-.84054-.89763-1.24776a19.84407,19.84407,0,0,1-1.54917-2.42788c-.06138-.111-.14187-.21936-.07534-.35789.2627-.064.30707.1731.41581.31078.16331.20679.22576.494.49628.61474a3.30225,3.30225,0,0,1,.81288.96226,21.82918,21.82918,0,0,0,5.30249,5.24571,19.27,19.27,0,0,0,2.57919,1.36231,22.746,22.746,0,0,0,4.12592,1.50945,12.394,12.394,0,0,0,1.54071.23125,3.42084,3.42084,0,0,0,1.42628.53689C117.9336,47.717,118.20843,47.65926,118.28545,47.97794Z"/><path class="cls-34" d="M103.9912,15.76834a.36618.36618,0,0,1,.00851.339A.36618.36618,0,0,1,103.9912,15.76834Z"/><path class="cls-100" d="M116.05142,49.74938a9.04608,9.04608,0,0,1-1.60607-.30927,24.82036,24.82036,0,0,1-6.2407-3.08084,32.69528,32.69528,0,0,1-3.55447-2.77152c-.59419-.54027-1.11406-1.15082-1.65888-1.73833-.3913-.422-.64613-.94271-1.0407-1.36135a.49466.49466,0,0,1-.169-.51663c.19936-.06005.26687.10536.35429.21839a22.45843,22.45843,0,0,0,2.6744,2.77081.50126.50126,0,0,0,.22488.13966.69671.69671,0,0,1,.32959.19,15.20824,15.20824,0,0,0,3.31756,2.48578,20.89584,20.89584,0,0,0,7.08818,2.878.2989.2989,0,0,1,.20385.0946c.06436.26076.31134.23641.49073.29647a10.08826,10.08826,0,0,0,2.51365.62719c-.0432.02416-.08833.07226-.1293.06894-.73193-.05937-1.468.06634-2.19912-.05507A.86267.86267,0,0,0,116.05142,49.74938Z"/><path class="cls-101" d="M117.284,52.291c1.4294.223,2.87469.22357,4.314.30808a7.45441,7.45441,0,0,0,1.15328.15137,19.94371,19.94371,0,0,0,2.62146.00267c-.20049.23675-.50134.16619-.75056.21239a8.67985,8.67985,0,0,1-1.29058.09316,17.32487,17.32487,0,0,0-1.79255.07164c-.64666.0885-1.29274-.11316-1.94378-.0687a.6576.6576,0,0,1-.54789.10765,19.09292,19.09292,0,0,1-2.13054-.27882,1.33547,1.33547,0,0,0-.72659-.31323,1.44753,1.44753,0,0,1-.33605-.07979c-.12009-.04575-.28218-.09806-.25692-.24226.028-.16.20195-.12624.32183-.107A6.08538,6.08538,0,0,1,117.284,52.291Z"/><path class="cls-102" d="M115.97439,48.7487a6.61089,6.61089,0,0,1-1.79314-.36266,24.25482,24.25482,0,0,1-3.03227-1.18546,26.04683,26.04683,0,0,1-5.05172-3.08789,7.00689,7.00689,0,0,1-.72254-.68117c-.11916-.1184-.22086-.25513-.4164-.22905A8.45292,8.45292,0,0,0,103.786,41.992a27.85578,27.85578,0,0,1-2.23175-2.93572c-.1703-.23986-.30342-.50512-.47248-.74788-.09891-.142-.22463-.29021-.14863-.49139.15841-.07041.24866.04634.31406.14421a24.5847,24.5847,0,0,0,2.32465,2.93091c.41991.3695.777.80039,1.16857,1.1966A23.22635,23.22635,0,0,0,108.763,45.311a20.1061,20.1061,0,0,0,4.9384,2.40532,8.89788,8.89788,0,0,0,2.273.49284,6.18975,6.18975,0,0,0,1.64316.46074c.07691.01008.15442.00617.20569.07826v.077A6.7637,6.7637,0,0,1,115.97439,48.7487Z"/><path class="cls-103" d="M76.53205,47.13073a.67985.67985,0,0,0,.05348-.67741c-.09813-.3008-.32672-.59488-.13028-.94.03777-.388-.04941-.77367-.022-1.16168a.34373.34373,0,0,1,.23632-.10811,2.9581,2.9581,0,0,0,1.57493-.66083.25416.25416,0,0,1,.18106-.03869c.199.103.30742.304.47681.43969a.53043.53043,0,0,1,.10908.31866,2.96067,2.96067,0,0,0,.26058,1.21143c-.02812.16872-.15877.20981-.29866.25078-.4654.13636-.56629.33077-.43005.82576.08126.2952.19306.59074-.08521.84867A10.04146,10.04146,0,0,1,76.53205,47.13073Z"/><path class="cls-104" d="M78.45812,47.439a1.18761,1.18761,0,0,0-.02451-.84554c-.21443-.51363-.00367-.83849.55466-.9245a.28034.28034,0,0,0,.24059-.15544c.2125-.05962.348.089.50326.18492a.92893.92893,0,0,1,.33322.62053c.03255.32656.34787.52716.4421.83579-.30052.483-.079,1.14647-.54487,1.57484-.064.05882-.09862.14955-.19484.17259-.24948-.02191-.42843-.25538-.69332-.23107A2.7363,2.7363,0,0,1,78.45812,47.439Z"/><path class="cls-105" d="M116.89881,52.83a17.37,17.37,0,0,1,1.85531.20526c.28053.014.56114.009.84112.02639a2.09262,2.09262,0,0,0,1.012.24076,20.6139,20.6139,0,0,1,2.62214.21012c.36133.074.70655-.09858,1.06486-.06619.06853.27093-.1584.22881-.27743.22243a.42488.42488,0,0,0-.49293.31671.53364.53364,0,0,1-.43024.11793c-1.59569-.02474-3.18952-.10007-4.78259-.18025a9.56748,9.56748,0,0,0-2.03386-.52353,19.99246,19.99246,0,0,1-3.98214-1.25751,24.58873,24.58873,0,0,1-3.12776-1.63554c-.11564-.07268-.26578-.11058-.29762-.27483.16433-.17569.32438-.0701.47627.01579.37461.21184.75763.4078,1.13648.61158a1.3061,1.3061,0,0,0,.75365.21593,9.62624,9.62624,0,0,1,1.56257.63739,14.05587,14.05587,0,0,0,3.55494.94772A1.2,1.2,0,0,1,116.89881,52.83Z"/><path class="cls-106" d="M118.20841,53.83123c1.09849-.03665,2.19357.07338,3.2905.10011.6735.01641,1.35.03131,2.025.0541a16.4266,16.4266,0,0,0,2.66007-.22057,1.99491,1.99491,0,0,1,.42135-.01027c.06969.12095.1861.22322.15407.38488a27.88555,27.88555,0,0,1-3.09228.37723,4.18622,4.18622,0,0,1-.72118-.03266,24.06236,24.06236,0,0,0-2.81159.19437.38655.38655,0,0,1-.35366.10644c-1.136-.1592-2.29656-.06617-3.42161-.3341a.91655.91655,0,0,1-.35755-.126c-.06832-.2096.08713-.34.17629-.49453A9.42514,9.42514,0,0,1,118.20841,53.83123Z"/><path class="cls-107" d="M124.44829,63.382c-1.255-.23049-2.48523-.584-3.75249-.75459a.46839.46839,0,0,0-.25336.06141,9.4734,9.4734,0,0,1-3.63219-.37224,1.56741,1.56741,0,0,1-.87083-.35078.86807.86807,0,0,1,.26982-.72782.62067.62067,0,0,1,.47882-.06317,22.06993,22.06993,0,0,0,2.95958.34985.75646.75646,0,0,0,.34058-.02551,3.3359,3.3359,0,0,1,1.3951-.15547,11.75309,11.75309,0,0,1,2.44621.04691c.46019.02469.92.04317,1.3807.039.1646-.00151.33586-.03086.47062.1038a4.31449,4.31449,0,0,1,.86625.08318.36735.36735,0,0,1,.34156.26129c.05646.15392-.045.25089-.14533.32011-.28819.19888-.33468.68454-.84993.66391.40028.14069.21063.38431.17263.5968a2.236,2.236,0,0,1-1.19508-.17232C124.69978,63.18535,124.58646,63.33815,124.44829,63.382Z"/><path class="cls-108" d="M125.68085,61.53332a25.09434,25.09434,0,0,1-3.072-.09823,10.52167,10.52167,0,0,0-1.242.02121.72321.72321,0,0,1,.18915-.66947.83759.83759,0,0,1,.41418-.06027,21.09871,21.09871,0,0,0,4.20118-.3429.67408.67408,0,0,1,.588.0712,12.83539,12.83539,0,0,0,2.77328-.07683,7.58847,7.58847,0,0,1-2.09293.76072A5.09844,5.09844,0,0,0,125.68085,61.53332Z"/><path class="cls-109" d="M85.93075,11.16261a9.97044,9.97044,0,0,1,1.77163.07693c.1403-.13439.30772-.08818.47259-.07493.85644.06885,1.69843.23359,2.54327.3779a25.74877,25.74877,0,0,1,2.69026,1.34888c.33979.22284.37115.31509.226.68368a.80144.80144,0,0,1-.58826-.10173,5.86873,5.86873,0,0,0-1.5115-.40262,1.837,1.837,0,0,0-.8882-.19466,7.67235,7.67235,0,0,1-1.39322-.25808,10.31743,10.31743,0,0,0-1.60515-.117,20.79374,20.79374,0,0,1-2.37481-.713c-.10953-.0273-.21893-.08747-.19023-.24007.04938-.03633.10983-.11278.14641-.10268A.65046.65046,0,0,0,85.93075,11.16261Z"/><path class="cls-110" d="M85.08317,11.54785c.139.23507.405.19969.61166.25649a12.29917,12.29917,0,0,0,1.93046.59085,2.26167,2.26167,0,0,1-.20947.53136.38131.38131,0,0,1-.36106.05766,5.60577,5.60577,0,0,1-1.43234-.35811,8.31711,8.31711,0,0,0-2.43045-.54691,9.94053,9.94053,0,0,0-1.62336-.08263.57762.57762,0,0,1-.56832-.2945,23.83645,23.83645,0,0,1,3.265-.16128C84.538,11.54024,84.81055,11.73672,85.08317,11.54785Z"/><path class="cls-111" d="M123.13868,57.37428a13.4008,13.4008,0,0,0,1.92694.01431,1.756,1.756,0,0,1,.92337.13973c-.95636.09149-1.87688.39746-2.83574.47553-.032.00261-.06113.04145-.0916.06342-.07232.15784-.21271.16751-.356.15489-.8383-.07389-1.67818-.02247-2.51723-.03278a6.78787,6.78787,0,0,1-.9495-.07573,8.801,8.801,0,0,1-1.42089-.2495.53946.53946,0,0,1-.06668-.59553.86121.86121,0,0,1,.55867-.05,14.53737,14.53737,0,0,0,1.75593.01932c.954-.06319,1.91344.0267,2.87082.03952A.26356.26356,0,0,1,123.13868,57.37428Z"/><path class="cls-112" d="M128.223,57.91323c.11755.06392.21259.1704.368.15845.15987-.0123.17278.10624.17126.22646a.5714.5714,0,0,1-.41674.24573,24.57588,24.57588,0,0,1-5.27359.6326c-.46834-.06446-.94087-.03706-1.4098-.06345a2.79261,2.79261,0,0,1-1.39209-.29857c.05405-.23313.24882-.24709.42334-.23892a25.58976,25.58976,0,0,0,3.624-.24083c.30081-.02861.60256-.06181.90124-.11321.82161-.00985,1.62606-.18052,2.4392-.26913C127.84694,57.93175,128.03452,57.92424,128.223,57.91323Z"/><path class="cls-113" d="M125.21864,58.22149c-.54453.1026-1.08624.225-1.63422.30346a16.179,16.179,0,0,1-2.97463.15855.29046.29046,0,0,0-.32142.15377,1.47233,1.47233,0,0,1-.95828.08683c-.64261-.14626-1.30043-.21163-1.94338-.35932-.19967-.04587-.40558-.06076-.5213-.26437-.0007-.34688.241-.32707.47476-.30787a14.41435,14.41435,0,0,1,1.65823.0675.2813.2813,0,0,0,.21148-.0696,21.68134,21.68134,0,0,0,3.06845.06666c.26073.0014.52223.19012.78332.01017.42782.02309.80783.32341,1.2532.22772A3.6659,3.6659,0,0,1,125.21864,58.22149Z"/><path class="cls-114" d="M123.13868,57.37428c-1.79693-.065-3.59693.08479-5.39248-.07684a.33118.33118,0,0,1-.28661.06949,16.13033,16.13033,0,0,1-2.36894-.59294.58078.58078,0,0,1-.22527-.14144.33353.33353,0,0,1-.06013-.42117c.11131-.16057.27291-.09486.42-.05552a2.01514,2.01514,0,0,0,.79164.10344c.80524.04874,1.59946.19465,2.40217.2704a6.9666,6.9666,0,0,0,1.41635.00226,9.47631,9.47631,0,0,1,1.76335-.01364,15.0547,15.0547,0,0,0,2.4538.00731c.9316-.06493,1.86755-.03705,2.79793-.13023a.20215.20215,0,0,1,.14.05465c.12183.08794.31765.0526.38517.23106a12.76153,12.76153,0,0,1-1.80316.30323C124.75521,57.08087,123.9471,57.22674,123.13868,57.37428Z"/><path class="cls-115" d="M129.53263,55.14072a10.0376,10.0376,0,0,0-1.26468.28162c-.106.04361-.227.05386-.276.1805-.11288.17617-.30173.174-.477.202a29.12646,29.12646,0,0,1-5.16482.45448,7.14344,7.14344,0,0,1-.88091.05769c-.82509-.00028-1.64062-.13735-2.47455-.09654a6.02955,6.02955,0,0,1-1.92391-.22507,1.84636,1.84636,0,0,0-.84033-.301c-.32384-.06157-.40747-.17721-.36643-.4502a.844.844,0,0,1,.49043-.01817,20.537,20.537,0,0,0,2.3702.17255,3.67919,3.67919,0,0,1,1.41244.043,7.03336,7.03336,0,0,0,1.38066-.00388,9.47431,9.47431,0,0,1,1.65351-.0199,19.77184,19.77184,0,0,0,2.377-.14058c.22327-.01474.45212-.1312.67191.01776.38074.1665.73614-.04593,1.10409-.07156A6.62416,6.62416,0,0,1,129.53263,55.14072Z"/><path class="cls-116" d="M126.2201,55.295c-.83557.17525-1.69283.15786-2.53485.28255a5.78792,5.78792,0,0,1-.68052-.04761,14.8899,14.8899,0,0,0-1.7585.05914,6.69873,6.69873,0,0,1-1.825-.11145,1.07719,1.07719,0,0,0-.67359.04786c-.09518-.12555-.37526-.11636-.3201-.32806.0561-.2153.29428-.14808.46422-.17283,1.01757-.14824,2.04392.067,3.06213-.07273a.34275.34275,0,0,1,.26035.03487c1.18292.05267,2.36188-.07612,3.54363-.07739a14.21488,14.21488,0,0,0,2.255-.258c.45813-.07276.91133-.02082,1.36568-.04976q-1.35383.30794-2.7079.6148C126.5221,55.2498,126.37036,55.26912,126.2201,55.295Z"/><path class="cls-117" d="M90.7838,11.625c-.65286.02107-1.26571-.23923-1.91288-.26913-.39047-.018-.77909-.0762-1.16854-.11633-.17687-.20337-.47009-.16095-.67058-.31864-.11724-.09221-.26724-.14581-.33072-.29733.29036-.191.59424-.064.899-.06877.57162-.009,1.163.21317,1.72005-.08529.12774-.12347.28053-.083.431-.0685.55444.05351,1.0997.17716,1.65582.21484.707.31757,1.4139.63716,2.14791.89223.18534.21342.42657.39713.39224.72907a.52421.52421,0,0,1-.6131.02593,9.40185,9.40185,0,0,0-1.74439-.42521A5.12161,5.12161,0,0,1,90.7838,11.625Z"/><path class="cls-118" d="M76.4552,44.35823a1.48392,1.48392,0,0,1,.00005,1.15509c-.04277-.02413-.0907-.07533-.12752-.0683a10.96527,10.96527,0,0,1-1.49008-.08536c-.89144-.22478-1.14588-1.07462-1.64689-1.68178a2.85976,2.85976,0,0,1-.20215-.32109c.264-.04644.50984.0886.77035.07683.15983-.10717.26472.02346.37055.09817a.90816.90816,0,0,0,.96278.13093,1.5418,1.5418,0,0,1,.708-.12407A2.42132,2.42132,0,0,1,76.4552,44.35823Z"/><path class="cls-119" d="M75.83892,43.58794c-.35248.09954-.71494.14907-1.064.27912-.27015.10064-.49564-.144-.72548-.26925-.09712-.05291-.15973-.16765-.29045-.16419-.19462-.59916-.58736-1.10247-.81829-1.68528a.67941.67941,0,0,1-.10613-.317c.27824-.14481.46508-.32138.39124-.68808-.05339-.26511.17245-.36948.386-.44764a.469.469,0,0,1,.2995.02266,1.88035,1.88035,0,0,0,.8815.18955.34259.34259,0,0,1,.23836.10766,1.92018,1.92018,0,0,1,.56963,1.20987c.00814.343.24937.606.33757.92306C75.98042,43.03715,76.12693,43.3385,75.83892,43.58794Z"/><path class="cls-120" d="M73.60489,40.35313c-.22284.14185-.38183.28051-.25894.60371.10078.265-.12214.4448-.51141.47447a9.51753,9.51753,0,0,1-1.15215-.92568,4.53532,4.53532,0,0,1-.69673-1.07664.52651.52651,0,0,1,.24968-.04152c.21441.00722.4448-.01274.44462-.32133-.0001-.16164.10667-.17871.23015-.17656a.60374.60374,0,0,1,.54745-.07432.58279.58279,0,0,1,.278.24906,7.37975,7.37975,0,0,0,.7371.92009A.32669.32669,0,0,1,73.60489,40.35313Z"/><path class="cls-121" d="M96.94645,11.00889c.07634.19751.25213.30205.3963.44041a10.77855,10.77855,0,0,1,3.28481,5.7857,21.89474,21.89474,0,0,1,.31663,2.76075,8.23181,8.23181,0,0,1-.06875,1.10253,3.19065,3.19065,0,0,0-.02993,1.09527c.04882,1.23581.09342,2.47278.22712,3.70342.08268.76106.23517,1.51353.29044,2.27816.01332.18431.11427.37585-.03419.55042-.22122.00845-.21957-.17486-.2587-.31236a21.32067,21.32067,0,0,1-.6968-4.62259c-.02978-.50977-.04636-1.0228-.1183-1.53084a14.50825,14.50825,0,0,1,.05745-1.64784,11.27551,11.27551,0,0,0-1.82182-6.37145,6.98664,6.98664,0,0,0-2.05228-1.94234,5.75763,5.75763,0,0,0-.55767-.33859,12.17131,12.17131,0,0,0-2.6499-1.34316,3.08933,3.08933,0,0,1-.60928-.27114c-.09224-.06838-.24185-.09416-.22-.26074a.283.283,0,0,1,.10249-.02473c.98157.16281,1.96725.306,2.94171.50417a5.85108,5.85108,0,0,1,1.12846.43163C96.70745,11.05356,96.816,11.14553,96.94645,11.00889Z"/><path class="cls-122" d="M92.40154,10.0845a3.91252,3.91252,0,0,0,.84739.46209c-.02917.21065-.20336.18066-.32376.159a1.58036,1.58036,0,0,0-1.11842.03992.38748.38748,0,0,1-.32963-.04474c-.73053.03045-1.43226-.20769-2.157-.23124-.89261-.2817-1.78842-.55382-2.67653-.849-.45645-.15173-.996-.17058-1.25228-.69135.16061-.266.37457-.1312.57782-.07692s.41723.189.57772-.07707a16.072,16.072,0,0,0,4.11061.94118A11.04484,11.04484,0,0,1,92.40154,10.0845Z"/><path class="cls-123" d="M122.21426,54.98669a3.71864,3.71864,0,0,0-1.13346.125,1.66174,1.66174,0,0,1-.8351-.00155,12.336,12.336,0,0,0-1.82836.03217c.13519.18532.35252.187.33032.38318-.98146-.00488-1.95223-.14532-2.92734-.23069a2.93279,2.93279,0,0,1-1.29309-.24859,24.0785,24.0785,0,0,1-6.52229-3.313,22.52266,22.52266,0,0,1-3.18279-2.7161c-.11391-.11828-.25693-.21793-.28662-.39771.08568-.22456.20132-.074.28944-.01215a9.694,9.694,0,0,1,.9427.78917,17.80193,17.80193,0,0,0,2.48592,1.86735c.84068.53217,1.67774,1.06678,2.56633,1.51559.05352.00859.02721-.07915.02267-.028-.00184.02061-.014.02817-.03386.01782a12.55141,12.55141,0,0,1-3.03619-1.99325c-.07666-.0741-.196-.14526-.095-.284.17513-.0507.28654.07628.41586.15044.69875.40069,1.35552.87247,2.06567,1.252a21.86418,21.86418,0,0,0,5.46435,2.189c.122.02753.25784.02643.351.1332a3.76769,3.76769,0,0,0,1.40728.28656c.923.01034,1.83225.17228,2.75263.17537a8.92557,8.92557,0,0,0,1.6075.23427C121.90006,54.91712,122.07517,54.84841,122.21426,54.98669Z"/><path class="cls-124" d="M123.06165,59.0687a20.52446,20.52446,0,0,0,3.19693-.27309c.67143-.08712,1.32992-.2265,1.99532-.33548.18289-.03.32545-.15329.50837-.162a15.727,15.727,0,0,1,2.71806-.55179,3.01193,3.01193,0,0,1,.97964.013c-.01365.135-.10717.16341-.218.1523a3.39913,3.39913,0,0,0-.56287.07173c-.2968.01815-.3409.1897-.27218.41574a.41.41,0,0,1-.02544.36148,1.94561,1.94561,0,0,1-.61779.155c-.97528.23079-1.93789.51508-2.92584.69241a.49635.49635,0,0,1-.38358.15048,8.7551,8.7551,0,0,0-1.98592.13729c-.855.09549-1.71548-.00467-2.56648.13048a4.2281,4.2281,0,0,1-.99336-.07042c-.54843-.043-1.096-.08624-1.64709-.08528a1.587,1.587,0,0,1-.70942-.14224c-.08478-.28551.13454-.27346.2964-.28043.99384-.0428,1.96674-.30308,2.96651-.28258A.42788.42788,0,0,0,123.06165,59.0687Z"/><path class="cls-125" d="M78.227,14.16705a1.8593,1.8593,0,0,0-.97814-.23746c-.12913.02254-.183-.07447-.17482-.193.01-.14491-.10247-.228-.15664-.34019.62471-.00873,1.24681-.06873,1.86755-.10927.74871-.04889,1.47027-.24823,2.21532-.27595a14.70159,14.70159,0,0,1,2.54217-.23095c.59285.069,1.11293.40551,1.71295.46024.17083.01559.41944.04543.32235.349a15.5069,15.5069,0,0,1-2.41548.06968,6.04938,6.04938,0,0,0-1.63247.20286,22.30777,22.30777,0,0,1-2.26751.40507.53733.53733,0,0,1-.26494-.02344A2.13132,2.13132,0,0,1,78.227,14.16705Z"/><path class="cls-126" d="M85.62261,13.55a.362.362,0,0,0-.33807-.21712c-.58856.042-1.049-.38044-1.61123-.42479-.04669-.00368-.08737-.08344-.13085-.12785a11.6074,11.6074,0,0,1,1.87426-.07909.20518.20518,0,0,0,.2057-.075,15.21682,15.21682,0,0,1,1.53273.27239c.09.00665.17206.05056.23965-.04118a5.30563,5.30563,0,0,1,1.8887.35177,2.10033,2.10033,0,0,1,.66187.27046c.03908.16491.05467.33675.22024.446.08217.0542.15563.14229.01255.22591a6.38465,6.38465,0,0,1-1.71311-.17235,4.64876,4.64876,0,0,0-1.33938-.06467,2.08746,2.08746,0,0,1-.94524-.08354C85.98685,13.75286,85.76066,13.73856,85.62261,13.55Z"/><path class="cls-127" d="M121.4439,56.21938a40.81437,40.81437,0,0,0,5.42083-.45068c.37126-.07688.75122-.11167,1.12719-.16586.74569-.0727,1.49087-.15152,2.23734-.215.2798-.02378.56263-.01178.84407-.0161a3.99352,3.99352,0,0,1-1.34923.34551c-.65045.12888-1.247.41855-1.89359.5456a2.55292,2.55292,0,0,0-.84005.18716,3.38119,3.38119,0,0,1-1.234.13583c-1.31786.01657-2.63282.15239-3.95188.09534a.24214.24214,0,0,1-.20661-.07713C121.46252,56.50952,121.33469,56.41189,121.4439,56.21938Z"/><path class="cls-128" d="M119.51877,59.68505c.95944.11689,1.93072.05908,2.88936.21626a14.28581,14.28581,0,0,0,1.75486-.06939,14.52464,14.52464,0,0,0,2.61953-.21353,7.99256,7.99256,0,0,0,1.05533-.01036c-.004.41265-.28963.49954-.61956.5369-.20627.02336-.41673.04275-.45894.30993a12.3114,12.3114,0,0,0-2.0816.25287,20.84851,20.84851,0,0,1-2.84916.13207c-.10248.00287-.20509.00085-.30765.0011a.37166.37166,0,0,1-.32711.06824,1.55144,1.55144,0,0,0-.8325.07023.76175.76175,0,0,1-.41829.02823c-.84072-.17638-1.70561-.20619-2.53989-.42113a.8116.8116,0,0,1-.452-.19091c-.10513-.58545.16787-.90354.73133-.84752a16.22878,16.22878,0,0,1,1.64339.10842A.78524.78524,0,0,1,119.51877,59.68505Z"/><path class="cls-129" d="M75.29962,15.93791a1.37171,1.37171,0,0,1-.07661-.462c.51642.14195.95246-.20867,1.44-.23491.3805-.02047.73169-.18122,1.09578-.23117.41541-.057.83219-.13,1.2526-.16186.23984-.01818.36424-.12127.217-.37317a.809.809,0,0,1,.69893-.08465,2.22517,2.22517,0,0,0,.91149-.049,7.08118,7.08118,0,0,1,2.4303-.27232c.55868.05647,1.11338.15159,1.677.15455a4.18994,4.18994,0,0,1,1.40915.63054c.07151.06953.19628.05132.28754.09326.10277.04724.27232.05761.19431.25073a.60389.60389,0,0,1-.48361.034,10.35961,10.35961,0,0,0-5.80369.56027,16.86327,16.86327,0,0,1-3.91728,1.06251C75.85166,16.95213,75.42019,16.65506,75.29962,15.93791Z"/><path class="cls-130" d="M85.006,14.32051a11.5939,11.5939,0,0,1-1.66771-.13127,4.7051,4.7051,0,0,0-2.10992.20177,6.41311,6.41311,0,0,1-1.99984.08376.48417.48417,0,0,1-.23112-.23112c.6507-.23468,1.35874-.178,2.01223-.38646a11.63945,11.63945,0,0,1,3.71422-.30108c.29994.00265.59915-.15884.8988-.00615l.53906.15462a2.94958,2.94958,0,0,0,1.01242.43073c.10953.04168.26143-.006.31.15624-.026.04622-.06286.09262-.113.09473a4.70771,4.70771,0,0,1-1.95877.00618A.69194.69194,0,0,0,85.006,14.32051Z"/><path class="cls-131" d="M70.36945,19.86586a1.414,1.414,0,0,1,.61618-.23094.51892.51892,0,0,1,.41518.142,2.05349,2.05349,0,0,0,.81834.43734,2.13243,2.13243,0,0,1,.58435.82824c-.03776.17558-.14744.322-.19981.4923a.22788.22788,0,0,1-.22359.1786c-.53447-.03143-.7842.34-1.036.71283-.24.08907-.37944.362-.6662.36643-.01406-.18825-.16177-.27269-.28821-.37572a1.249,1.249,0,0,1-.59139-.78188c-.03654-.23094-.30154-.38934-.5075-.53736,0-.11467-.00277-.22942.0007-.344.00642-.21251-.08533-.42476.32854-.40342A.74106.74106,0,0,0,70.36945,19.86586Z"/><path class="cls-132" d="M68.67462,25.48821c.005-.01159.01588-.024.01432-.03465a1.02571,1.02571,0,0,1,.371-.88927,3.63165,3.63165,0,0,0,1.00127-.15422,1.70323,1.70323,0,0,1,1.064,1.08381c-.10466.59643.042.86277.62681,1.10948.1427.06019.3014.08762.31578.2847a1.21213,1.21213,0,0,1-.50739.81725,3.03818,3.03818,0,0,1-1.73034-.29168,12.45671,12.45671,0,0,0-.41229-1.30134C69.3238,25.78783,68.90458,25.72309,68.67462,25.48821Z"/><path class="cls-133" d="M70.67792,22.79262c.20927-.1222.33855-.37224.61609-.38532.11895-.08783.21754-.00852.32023.03875a6.24089,6.24089,0,0,0,1.77016.48329.76874.76874,0,0,0,.688-.1318.19643.19643,0,0,1,.218-.02684c.089.09736.04381.189-.011.28056a1.92469,1.92469,0,0,1-1.09005.7075c-.38026.09048-.69568.36374-1.09007.43243a3.6154,3.6154,0,0,1-1.65278-.39739A1.94226,1.94226,0,0,1,70.67792,22.79262Z"/><path class="cls-134" d="M70.44644,23.7938a12.25887,12.25887,0,0,0,1.69478.30828,4.64569,4.64569,0,0,1,1.01823.4373c.14867.10327.29793.21213.26788.43a.46216.46216,0,0,1-.325.28368,14.99121,14.99121,0,0,0-1.681.28775.35364.35364,0,0,1-.35867-.0524,2.856,2.856,0,0,0-1.00146-1.07836C70.19493,24.20794,70.22075,23.93844,70.44644,23.7938Z"/><path class="cls-135" d="M75.29962,15.93791c.12116.26612.38376.43386.48741.716.06139.16709.22888.12783.365.13052.15236.003.30482.00065.45724.00062a1.43989,1.43989,0,0,1,1.03941.12339,1.12717,1.12717,0,0,0,.81812.01084c.88143-.27044,1.75143-.57255,2.62151-.87656a9.73823,9.73823,0,0,1,2.83516-.44126.71685.71685,0,0,1,.44723.07409c.01053.313-.26029.303-.43856.33543-.80331.14617-1.56859.43-2.35851.62254a4.006,4.006,0,0,0-.91164.37925A14.216,14.216,0,0,1,76.99864,18.468a8.39357,8.39357,0,0,0-1.22334.32913,1.00475,1.00475,0,0,1-.74961.03751c-.1281-.10081-.04571-.26407-.11585-.38575a1.746,1.746,0,0,0-.5718-.72886c-.209-.1269-.504-.27152-.42519-.62682a.29768.29768,0,0,0,.03291-.40308.98148.98148,0,0,1-.1868-.67515Z"/><path class="cls-136" d="M73.91285,17.09325a.72834.72834,0,0,0,.44519.53009c.38091.15209.44809.51128.65572.77485.10325.13107.04184.26261-.02223.38932a.6866.6866,0,0,0-.22372.73057.30624.30624,0,0,1-.09269.30879,7.73889,7.73889,0,0,1-1.68485.0677,1.45467,1.45467,0,0,1-.7722-1.41518c.188-.30169-.06786-.56313-.07684-.84695a1.34323,1.34323,0,0,0,.6573-.429C73.16245,16.7754,73.5226,16.92236,73.91285,17.09325Z"/><path class="cls-137" d="M69.83015,27.41363a10.3291,10.3291,0,0,0,1.77182.231c.09534-.0641.15126-.02555.18529.07082a9.66333,9.66333,0,0,1-.38909,1.39885,1.69681,1.69681,0,0,1-2.261-.69921,1.389,1.389,0,0,0-.07764-.46219C69.38744,27.87459,69.54109,27.54741,69.83015,27.41363Z"/><path class="cls-138" d="M69.44479,34.57706a.89927.89927,0,0,0,.4624-.38565c.01953-.01637.04418-.04384.06229-.039.50975.13677,1.07878.13871,1.43773.62331a2.78493,2.78493,0,0,0,1.05418,1.881.328.328,0,0,1,.10074.16154c-.03917.22157.15442.48082-.1068.66718a.31824.31824,0,0,1-.22291.01483,11.90535,11.90535,0,0,1-1.70876-.6902,3.97793,3.97793,0,0,0-.54053-.82454c-.1845-.221-.17829-.54563-.336-.8005A2.67873,2.67873,0,0,1,69.44479,34.57706Z"/><path class="cls-139" d="M70.52366,36.81006a8.1717,8.1717,0,0,1,1.52424.536.90461.90461,0,0,0,.40146.08046c.16816.29523.38618.55857.54867.85745.07316.13457.15918.26849.00611.40645a2.631,2.631,0,0,1-.47793.19927l-.6161-.00009-1.38682-1.30933C70.492,37.32351,70.65,37.06685,70.52366,36.81006Z"/><path class="cls-140" d="M69.13721,28.41514c.2062.16753.41854.32812.6172.50415a1.0914,1.0914,0,0,0,1.08934.24518,1.9777,1.9777,0,0,1,.52711-.05633c.23669-.10734.32333.08034.40326.22737a1.73813,1.73813,0,0,1,.241,1.05508,1.05531,1.05531,0,0,0-.729.45984.37083.37083,0,0,1-.37417.15443,6.90629,6.90629,0,0,0-1.365-.59885.42318.42318,0,0,1-.25581-.21941c-.17707-.145-.18946-.40761-.38517-.53932A9.638,9.638,0,0,1,69.13721,28.41514Z"/><path class="cls-141" d="M71.37086,34.80766a3.89661,3.89661,0,0,0-1.46367-.61625l-.462-1.46352a6.961,6.961,0,0,0-.07723-1.155c.11189-.09062.22345-.0362.3221.01624.28527.15167.61438.17636.9013.32058.199.29856.617.40518.70583.80118a1.80527,1.80527,0,0,0,.44777,1.79709.17341.17341,0,0,1,.028.14581A.54634.54634,0,0,1,71.37086,34.80766Z"/><path class="cls-142" d="M70.60051,31.958a4.82858,4.82858,0,0,1-1.23257-.38519,2.1396,2.1396,0,0,1-.07685-1.38625,5.79434,5.79434,0,0,1,1.61794.77019C70.87408,31.31145,70.9232,31.692,70.60051,31.958Z"/><path class="cls-143" d="M72.21807,18.47939c.16053.49322.24221,1.03281.77054,1.30975.03492.183-.09473.25465-.22715.297a2.66194,2.66194,0,0,1-.54339.16507,1.00245,1.00245,0,0,1-.81772-.37536c-.09727-.13478-.31726-.08825-.41472-.24094-.0336-.4874-.28587-.96334-.07679-1.46348A1.85149,1.85149,0,0,1,72.21807,18.47939Z"/><path class="cls-144" d="M100.10509,51.21275a4.98266,4.98266,0,0,0,.72812,1.20217c.37854.58814.79643,1.151,1.19757,1.72456-.50371.249-.50371.249-.34674.7912-.04735.053-.098.02748-.13193-.00836a.94587.94587,0,0,0-1.18206-.21984.81882.81882,0,0,1-.56668.042,9.15052,9.15052,0,0,0-2.32974-.14268,5.92572,5.92572,0,0,1-1.14665-.06675c-.29734-.06987-.57225-.01442-.61449.37728-.02863.26556-.23411.21392-.409.22976a11.26842,11.26842,0,0,1-4.47769-.5614c-.08328-.02656-.20151-.07492-.2562-.03972-.65758.42334-1.18559-.09726-1.75671-.24284a10.13328,10.13328,0,0,0-1.49222-.48264c-1.47344-.12828-2.53353-1.1225-3.79438-1.68909a.48716.48716,0,0,1-.272-.35672,1.03539,1.03539,0,0,0-.52759-.6637,1.13787,1.13787,0,0,1-.6104-.69487c-.05191-.23085-.40007-.26674-.49973-.5077a.35379.35379,0,0,1-.00307-.26082,1.01653,1.01653,0,0,0-.09507-1.06331A.65742.65742,0,0,1,81.921,47.663a.80954.80954,0,0,1,.83549.36132,4.57442,4.57442,0,0,0,1.4204.89808A23.07867,23.07867,0,0,0,88.442,50.66466a2.60935,2.60935,0,0,0,2.10325-.17611.83141.83141,0,0,1,.41216-.07145,12.00146,12.00146,0,0,0,1.68886-.06774,1.03888,1.03888,0,0,1,.778.13946.22891.22891,0,0,0,.14283.05232A4.946,4.946,0,0,0,95.84,50.11726a12.36668,12.36668,0,0,0,1.89609-1.23368.50978.50978,0,0,1,.3907-.13406.24987.24987,0,0,1,.17169.07361A16.27471,16.27471,0,0,1,100.10509,51.21275Z"/><path class="cls-145" d="M81.92453,47.74688c-.26091.0619-.528.66281-.32626.8288.42511.34981.24093.70347.11046,1.07762-.02926.08388-.06136.16677-.09215.25012a1.28872,1.28872,0,0,0-1.2322,0,3.17914,3.17914,0,0,1-.61665-1.00127,2.35618,2.35618,0,0,1,.31661-.52354c.07263-.08.16165-.22983.13212-.30373-.15419-.386.10372-.64655.24459-.94418a.35738.35738,0,0,1,.55621-.14148,4.28957,4.28957,0,0,0,.696.52916C81.8,47.57334,81.94637,47.58671,81.92453,47.74688Z"/><path class="cls-47" d="M115.97439,61.91841a11.06617,11.06617,0,0,0,2.3839.61783,8.48555,8.48555,0,0,0,1.63858.07419.82912.82912,0,0,1,.44557.07836,3.5031,3.5031,0,0,1-1.08,1.16659c-.17192.10065-.36243.26187-.22956.52765a2.89727,2.89727,0,0,0-1.36558-.39452,2.05221,2.05221,0,0,1-1.03642-.47209,13.55661,13.55661,0,0,0-1.53858-.76812c-.28516-.13652-.46114-.432-.76-.56375-.39778-.17532-.78555-.37331-1.183-.54944a21.96656,21.96656,0,0,1-4.65882-2.93614,17.10949,17.10949,0,0,1-2.90691-2.71212,2.69424,2.69424,0,0,0-.34-.307,3.1238,3.1238,0,0,0-.52624-.8379.39546.39546,0,0,1-.12062-.4523c.1894-.0974.27241.06948.37645.16166a3.55281,3.55281,0,0,1,.39885.41105,31.07431,31.07431,0,0,0,5.35635,4.51423,21.91871,21.91871,0,0,0,2.99908,1.62931,14.47057,14.47057,0,0,0,1.90513.706A.48452.48452,0,0,1,115.97439,61.91841Z"/><path class="cls-146" d="M104.7274,54.37053a.732.732,0,0,0,.28856.56028.96309.96309,0,0,1,.32754.749,15.10068,15.10068,0,0,1-1.80342-1.82613.34356.34356,0,0,0-.27654-.17637c-.854-1.022-1.67-2.07408-2.48286-3.12881a3.69371,3.69371,0,0,1-.29061-.4909,1.358,1.358,0,0,0-.34955-.67117c-.16578-.22956-.33882-.47429-.07451-.75345.26223-.06715.36792.13543.48123.29718.63841.91129,1.31151,1.79682,2.007,2.66433.61528.76746,1.24286,1.5257,1.89928,2.25934C104.585,54.00079,104.76182,54.13211,104.7274,54.37053Z"/><path class="cls-147" d="M100.10509,51.21275a5.68051,5.68051,0,0,1-.90864-1.16963A10.79138,10.79138,0,0,1,98.17892,48.825a1.05136,1.05136,0,0,1-.45972-.59193,1.28384,1.28384,0,0,0-.27659-.49995,15.0151,15.0151,0,0,1-1.31507-1.54588c-.06787-.23957-.10312-.48568-.147-.7301a2.51917,2.51917,0,0,0,.33105-1.02076c.25885-.05276.32856.16887.41535.3188.45568.78723,1.00525,1.51126,1.50415,2.269.38831.51016.79652,1.00515,1.17556,1.522.105.14319.28081.28676.15944.5102a.50037.50037,0,0,0,.156.341c.43729.38889.41907.9636.60072,1.45518C100.38534,51.02188,100.24705,51.13358,100.10509,51.21275Z"/><path class="cls-148" d="M99.56612,49.0564a5.28542,5.28542,0,0,0-.94163-1.36251c-.14494-.21576-.29677-.4269-.44548-.64014a19.50347,19.50347,0,0,0-1.44784-3.11088.952.952,0,0,1-.113-.28312,7.77129,7.77129,0,0,0-.24572-.87524.58052.58052,0,0,1-.00645-.47779c.252-.11649.29407.11617.4018.2404.53991.71528.92071,1.53028,1.4204,2.271a2.0609,2.0609,0,0,1,.28539.5401,2.68963,2.68963,0,0,0,.29075.62424.7056.7056,0,0,1,.13052.233c.10729.806.74629,1.31179,1.10508,1.97487.08046.14871.25011.28128.10513.48059-.22049.34759.04261.56244.22171.79812.13356.17575.35169.32483.16327.58861a2.3225,2.3225,0,0,1-.627-.74489C99.78391,49.20517,99.744,49.0503,99.56612,49.0564Z"/><path class="cls-149" d="M101.26062,28.72314c.15986-.12858.01118-.26117-.00215-.38731a43.448,43.448,0,0,1-.4752-5.73687c.01-.37322-.061-.759-.0624-1.14135-.00052-.14341-.00688-.28673.15457-.35933.00179.20456.09.394.081.60472a21.265,21.265,0,0,0,.31808,3.76392,27.71887,27.71887,0,0,0,.75415,3.81531,25.51912,25.51912,0,0,0,1.08076,3.13783c-.20517.02849-.28611-.10579-.36529-.2619a9.393,9.393,0,0,1-.56178-1.32248c-.06345-.19362-.13411-.38925-.38216-.41821a.25658.25658,0,0,1-.21793-.134A3.12,3.12,0,0,1,101.26062,28.72314Z"/><path class="cls-150" d="M101.26062,28.72314q.12164.54068.2434,1.08133a1.06425,1.06425,0,0,0,.29622.613,17.661,17.661,0,0,0,.85642,2.33428,14.88147,14.88147,0,0,0,1.02441,1.97389,12.918,12.918,0,0,0,3.11417,3.60388c.22673.17545.55038.298.62784.637-.50916-.10373-.79692-.52666-1.16347-.82752-.70538-.579-1.3827-1.19209-2.07165-1.791a.35728.35728,0,0,1-.20209-.16663,23.6376,23.6376,0,0,1-1.8428-3.00233c-.41545-.80942-.70368-1.66765-1.09124-2.48657a9.877,9.877,0,0,1-.57418-2.25864c-.02052-.1002-.04231-.19986-.068-.29916a45.591,45.591,0,0,1-.52229-4.92912c-.03771-.75925.102-1.5.0374-2.25348A13.97517,13.97517,0,0,0,98.86848,16.133,7.65612,7.65612,0,0,0,97.664,14.3102a1.48206,1.48206,0,0,1-.30113-.44205c-.02642-.05718-.03081-.13418-.07381-.17333-.47456-.43208-.71443-1.05353-1.19808-1.47779-.10946-.096-.26583-.16867-.22286-.36107A7.32692,7.32692,0,0,1,98.0605,13.5547a8.86827,8.86827,0,0,1,2.085,4.478,11.14262,11.14262,0,0,1,.20032,3.68444,6.748,6.748,0,0,0,.08673,1.48676c.062.73339.11446,1.47.19032,2.20332a13.58749,13.58749,0,0,0,.4401,2.46364C101.14526,28.1501,101.19565,28.43876,101.26062,28.72314Z"/><path class="cls-151" d="M100.49026,28.18391c.10771.44123.24089.87806.31783,1.32459a12.983,12.983,0,0,0,.9628,2.60282,17.62735,17.62735,0,0,0,2.21771,3.9106c.07553.102.13333.21707.19936.32607a4.31788,4.31788,0,0,0,.83719,1.17079,16.68366,16.68366,0,0,0,3.65157,3.13243,6.78227,6.78227,0,0,1,1.13483.70308,4.13863,4.13863,0,0,1-1.28306-.65351,14.23841,14.23841,0,0,1-2.66756-2.03461,2.79517,2.79517,0,0,0-.49951-.27079,3.61411,3.61411,0,0,1-1.00977-1.0326c-.08336-.11793-.15441-.23708-.31776-.24455a1.96222,1.96222,0,0,1-.69341-.72895,21.65015,21.65015,0,0,1-1.78423-3.255,1.13623,1.13623,0,0,1-.0955-.36982c-.06667-.31476-.26118-.58765-.31978-.89921-.21437-1.13974-.59449-2.241-.77525-3.38757C100.34823,28.36669,100.28336,28.21076,100.49026,28.18391Z"/><path class="cls-152" d="M101.56876,32.80506a.81993.81993,0,0,0,.03922.22274,19.489,19.489,0,0,0,2.1083,3.70083c.10421.13114.31594.17708.31761.3896a7.6069,7.6069,0,0,0,.844,1.10886,17.30827,17.30827,0,0,0,1.96089,1.96693c.09861.09786.18464.20839.27649.31306a3.29766,3.29766,0,0,1-.94965-.692c-.50943-.43975-.96233-.9396-1.50316-1.35082a12.59356,12.59356,0,0,1-1.512-1.72851,9.34923,9.34923,0,0,1-.96548-1.46609,4.68342,4.68342,0,0,1-.86152-1.52969,19.512,19.512,0,0,1-1.2481-3.792c-.02741-.14933-.09182-.29863.00681-.44577.20467-.03.20571.14581.24482.26108.07761.22874.12344.46741.183.70183a.72925.72925,0,0,0,.09234.28925A12.84074,12.84074,0,0,1,101.56876,32.80506Z"/><path class="cls-153" d="M100.10652,29.49368a14.97194,14.97194,0,0,0,.84808,3.05317,23.0404,23.0404,0,0,0,1.23044,2.72283.2548.2548,0,0,1-.23539-.16061c-.09509-.189-.23416-.15286-.3807-.07036-.29742-.05915-.36626-.329-.46649-.54568-.16515-.357-.29836-.72909-.47866-1.08047a32.534,32.534,0,0,1-1.11739-3.55191,41.22811,41.22811,0,0,1-.71808-5.01551c-.04535-.54345-.04311-1.0956-.0377-1.64631a10.6171,10.6171,0,0,0-2.27969-7.20427,11.752,11.752,0,0,0-2.502-2.14428c-.12459-.08452-.28213-.13445-.3348-.3a.52662.52662,0,0,0-.32035-.607,12.774,12.774,0,0,0-1.80592-.90866,3.02878,3.02878,0,0,1-.724-.40957,12.5179,12.5179,0,0,1,2.48618.49225c.23494.07836.43439.201.67227.04718a.208.208,0,0,1,.1838.02318c2.10925,1.2313,3.95136,2.71364,4.80969,5.11986a8.8222,8.8222,0,0,1,.60349,2.7228,14.08481,14.08481,0,0,0,.118,1.91415,6.71133,6.71133,0,0,1-.06535,1.10949,30.54062,30.54062,0,0,0,.50652,5.84273C100.1364,29.0906,100.22423,29.29354,100.10652,29.49368Z"/><path class="cls-154" d="M100.72137,33.42118c.3386.50981.39472,1.16757.84758,1.61753a1.07836,1.07836,0,0,0,.23959.58961c.17916.28984.35406.58231.53076.87367-.13727.13092-.0735.25152.01922.37044a20.01592,20.01592,0,0,0,1.634,2.42364.50389.50389,0,0,1,.19541.44072l-.61583-.53894a2.054,2.054,0,0,1-.70358-.73765,20.12785,20.12785,0,0,1-2.76914-4.89433,18.05126,18.05126,0,0,1-.89768-2.65252.5774.5774,0,0,1-.02106-.41274c.21-.0957.27073.05775.32051.20349.074.21651.14395.43459.213.65281a1.659,1.659,0,0,0,.38207.69074,2.62906,2.62906,0,0,1,.38517.902A1.85154,1.85154,0,0,0,100.72137,33.42118Z"/><path class="cls-155" d="M100.18212,33.57544a22.53537,22.53537,0,0,0,2.2789,4.17267c.35207.49623.73969.96723,1.11111,1.44974.11575.55441.58173.86189.91744,1.24947a20.67708,20.67708,0,0,0,5.42126,4.33327,16.94068,16.94068,0,0,0,4.34035,1.921,1.03137,1.03137,0,0,1,.49064.19809,10.14386,10.14386,0,0,1-1.65693-.44128,16.416,16.416,0,0,1-3.18314-1.29667,13.39793,13.39793,0,0,1-3.71765-2.46464c-.24154-.22765-.49577-.44177-.74064-.666a23.40167,23.40167,0,0,1-3.24736-3.81852,1.01093,1.01093,0,0,0-.319-.32419,17.20707,17.20707,0,0,1-1.75331-3.34878,1.04946,1.04946,0,0,1-.10729-.51927A.77949.77949,0,0,1,100.18212,33.57544Z"/><path class="cls-156" d="M101.80005,39.968a1.17328,1.17328,0,0,0,.27255.54195c.48714.57207.8881,1.2119,1.41106,1.75744.40606.4236.77891.879,1.16652,1.32032-.415-.1679-.63068-.5624-.95008-.83916a1.67411,1.67411,0,0,0-.66748-.47007,1.67155,1.67155,0,0,0-.4624-.46212,3.61646,3.61646,0,0,1-.77946-.81978,26.08007,26.08007,0,0,1-1.78526-2.82529,3.16931,3.16931,0,0,1-.48909-1.11533.61119.61119,0,0,1,.20112-.33883c.12937-.006.17013.09474.21372.18484a22.90586,22.90586,0,0,0,1.74708,2.76671C101.73971,39.75978,101.84793,39.83235,101.80005,39.968Z"/><path class="cls-157" d="M116.74474,51.21275a9.63628,9.63628,0,0,1-1.53348-.04933,10.50278,10.50278,0,0,1,1.17739.43076c.06743.0304.16981.0362.14413.13715-.02432.09554-.10946.06884-.19.056-.27586-.04384-.55359-.07593-.83061-.11251-.14822.13651-.31108.07454-.47163.03374a21.87417,21.87417,0,0,1-5.10378-2.09381,20.27968,20.27968,0,0,1-3.75281-2.453,12.22682,12.22682,0,0,1-1.66-1.52868,7.24028,7.24028,0,0,0-.82364-.90293c-.68966-.83256-1.37484-1.669-2.03206-2.52764-.08128-.1062-.18853-.2199-.11878-.38038.16162-.07268.27513.06429.41355.09393a6.80131,6.80131,0,0,1,1.20546,1.28187,21.82971,21.82971,0,0,0,2.456,2.37912c.98848.81129,2.0494,1.52944,3.10853,2.24679a21.04338,21.04338,0,0,0,6.164,2.75979,1.04783,1.04783,0,0,0,.15288.01331c.10908.192.31071.18895.49.22969A3.625,3.625,0,0,1,116.74474,51.21275Z"/><path class="cls-158" d="M108.73305,47.8239a9.77984,9.77984,0,0,1-1.76558-1.12318,20.17726,20.17726,0,0,1-3.54554-3.07676c-.50837-.533-.97981-1.10118-1.468-1.65342a21.70644,21.70644,0,0,1-1.60361-2.426c-.05946-.1107-.14964-.21218-.1027-.35367.24917-.10151.30685.109.38813.25245a9.01009,9.01009,0,0,0,1.24095,1.52585l.69351.84721c-.01454.3458.315.4952.448.76425.18871.38164.60516.60642.872.93a10.93529,10.93529,0,0,0,1.32005,1.43018c.54175.45877,1.08962.91418,1.63653,1.36681a5.73277,5.73277,0,0,1,1.14776.92735C108.18288,47.49425,108.55624,47.53915,108.73305,47.8239Z"/><path class="cls-159" d="M104.57314,45.59034c.57724.59647,1.22586,1.113,1.85486,1.65122a24.51107,24.51107,0,0,0,4.83039,2.95352A18.61123,18.61123,0,0,0,115.169,51.649a1.89494,1.89494,0,0,0,.34313.02589,6.35246,6.35246,0,0,0,1.49041.45642c.11737.028.22662.03625.28141.15973a8.78622,8.78622,0,0,1-1.6261-.05771c.219.25549.53522.22074.81059.27931a.50818.50818,0,0,1,.43033.31735,13.76889,13.76889,0,0,1-4.052-.98877c-.55248-.22808-1.09925-.47-1.64861-.70565a14.87842,14.87842,0,0,1-2.695-1.53995,34.34456,34.34456,0,0,1-5.002-4.2883c-.42339-.44582-.80175-.92978-1.20866-1.38954a9.34161,9.34161,0,0,0-.75608-1.06162c-.07786-.12537-.21029-.23693-.14275-.41437.25622-.06246.36061.154.48178.2926C102.73828,43.72114,103.68575,44.62734,104.57314,45.59034Z"/><path class="cls-160" d="M100.10509,34.03756a3.815,3.815,0,0,0,.51142,1.384,11.06448,11.06448,0,0,0,1.17137,2.141.4543.4543,0,0,1,.08921.32583c-.25225-.022-.28238-.26131-.39379-.41483-.14545-.20042-.22328-.45156-.45379-.58641-.20083-.04455-.286-.20958-.36468-.36923a28.97375,28.97375,0,0,1-1.42472-3.02837,6.043,6.043,0,0,0-.37657-.625A19.90608,19.90608,0,0,1,98.009,30.049a12.99634,12.99634,0,0,1-.39572-1.90942,18.93417,18.93417,0,0,1-.24229-2.519.92191.92191,0,0,1,.07543-.48725c.31537-.08193.25678.17834.29892.33532.12755.47524.13364.97368.27193,1.44692a16.69761,16.69761,0,0,1,.4072,2.18756,21.95423,21.95423,0,0,0,1.49452,4.47379C99.98719,33.7287,100.02264,33.89244,100.10509,34.03756Z"/><path class="cls-161" d="M98.94988,32.88208a3.07944,3.07944,0,0,1,.65927,1.26919c.36456.81367.78908,1.59632,1.17886,2.39662a2.45075,2.45075,0,0,0,.2415.33929,13.23978,13.23978,0,0,0,1.24742,2.13365c.41276.54791.8159,1.10314,1.21838,1.65868a.81245.81245,0,0,1,.07656.21266,12.161,12.161,0,0,1-2.00871-2.30606c-.19966-.26009-.29618-.60469-.61009-.77463-.23767-.07149-.27059-.30915-.38933-.47764a12.38022,12.38022,0,0,1-1.236-2.67087c-.15643-.42749-.286-.87139-.41908-1.31044A.43387.43387,0,0,1,98.94988,32.88208Z"/><path class="cls-162" d="M100.64448,37.3492l.30859.46228a7.74791,7.74791,0,0,0,1.06342,1.76085,18.89517,18.89517,0,0,0,1.30266,1.74622,12.19219,12.19219,0,0,0,1.34522,1.40653.6848.6848,0,0,1,.29395.47739c-.54209-.517-1.09831-1.01829-1.63193-1.54551-.54418-.53765-.98315-1.15848-1.52635-1.68892a22.84119,22.84119,0,0,1-2.08013-3.2349,1.71972,1.71972,0,0,1-.48942-1.14132c.21373-.081.32643.08277.38.218A9.64945,9.64945,0,0,0,100.64448,37.3492Z"/><path class="cls-163" d="M78.84311,43.97313c-.23786-.01886-.29524-.21859-.38593-.38494-.37479-.429-.751-.8568-1.13462-1.27805a.63415.63415,0,0,1-.17468-.28963c-.09282-.47795.333-.7158.4972-1.07518a1.63653,1.63653,0,0,0,.93469-.7178.48984.48984,0,0,1,.4959-.294.27227.27227,0,0,1,.12645.12261,1.28639,1.28639,0,0,0,.55643,1.03713c.42624.3293.40406.82752.44636,1.297a3.00209,3.00209,0,0,1-.82528.994C79.14729,43.53286,79.08678,43.836,78.84311,43.97313Z"/><path class="cls-164" d="M78.84311,43.97313a1.61123,1.61123,0,0,1,.67121-.803c.29432-.17378.31364-.58822.6384-.73743a1.20631,1.20631,0,0,1,.62422.661c.01208.3155.26214.60257.11367.93747a1.0692,1.0692,0,0,0-.53278.735,1.373,1.373,0,0,1-.66714.978l-.46184-.23076a1.29486,1.29486,0,0,1-.304-.94267A2.26283,2.26283,0,0,0,78.84311,43.97313Z"/><path class="cls-165" d="M77.22556,42.04746c.31427.35271.625.70865.94452,1.05657a.83637.83637,0,0,1,.28711.48415,1.78306,1.78306,0,0,0-.67081.40255,2.65305,2.65305,0,0,1-1.33118.3675,2.17132,2.17132,0,0,1-.61628-.77029,1.361,1.361,0,0,0,.00019-.84749,2.41172,2.41172,0,0,0,1.185-.67624A.137.137,0,0,1,77.22556,42.04746Z"/><path class="cls-166" d="M79.69069,45.74427a2.66277,2.66277,0,0,0,.64856-1.28033.44391.44391,0,0,1,.507-.414,1.49509,1.49509,0,0,1,.83516.61191.404.404,0,0,1-.01066.22336.56356.56356,0,0,0-.06044.638.86554.86554,0,0,1-.27963.949c-.14426.09087-.15331.16051-.09459.306.08584.21274.00473.322-.23577.27543-.20491-.15041-.36687-.00027-.53924.077-.19234-.30046-.54252-.50817-.49343-.95009C79.98708,46.00551,79.77458,45.89777,79.69069,45.74427Z"/><path class="cls-167" d="M118.20841,53.83123l-2.07958.07719a21.43971,21.43971,0,0,1-9.80543-5.08971,3.50989,3.50989,0,0,1-.75037-.652c-.06886-.10466-.18308-.18481-.17038-.331.13484-.12091.24309-.019.33575.05661a23.15163,23.15163,0,0,0,2.99227,2.11311.29012.29012,0,0,1,.15646.20611,23.26752,23.26752,0,0,0,5.74114,2.6786c.58768.17538,1.19024.27325,1.78247.41695.51773.12563,1.036.24734,1.55728.35681A.29536.29536,0,0,1,118.20841,53.83123Z"/><path class="cls-168" d="M108.88713,50.2115A25.38448,25.38448,0,0,1,106.27,48.44541a2.78975,2.78975,0,0,0-.84949-.62151.22451.22451,0,0,1-.1964-.084,1.52978,1.52978,0,0,0-.49571-.57882,15.62826,15.62826,0,0,1-2.0097-2.16295c-.50108-.54515-.88632-1.19221-1.39978-1.73354-.11189-.118-.23049-.25109-.1538-.44275.17505-.06949.25437.07706.352.165a7.06194,7.06194,0,0,1,.822.909,10.06659,10.06659,0,0,1,1.02018,1.13332,38.47546,38.47546,0,0,0,3.56418,3.25439,23.058,23.058,0,0,0,4.0794,2.678.35775.35775,0,0,1,.19532.17393c-.20048.12162-.3738.00157-.53672-.08041-.46585-.23443-.92812-.47732-1.37981-.73769A.68561.68561,0,0,0,108.88713,50.2115Z"/><path class="cls-169" d="M105.26665,47.74617a.16041.16041,0,0,1,.15388.07773,12.26179,12.26179,0,0,0,2.07966,1.83588c.452.36928.94206.69524,1.40875,1.05038a15.58254,15.58254,0,0,0,2.92818,1.62164,24.746,24.746,0,0,0,3.77081,1.37526c.169.04742.44022-.09073.5209.20136.10066.17893.05889.28649-.15444.30807a9.81511,9.81511,0,0,1-2.53338-.69278,28.29827,28.29827,0,0,1-5.581-2.91463,1.29086,1.29086,0,0,0-.20547-.08951,3.9207,3.9207,0,0,1-1.03254-.71588,23.28415,23.28415,0,0,1-2.34989-2.14094,13.99846,13.99846,0,0,1-1.99022-2.22493,1.87552,1.87552,0,0,0-.463-.69309c-.22712-.293-.432-.60144-.63254-.91271-.07463-.11587-.168-.2322-.10206-.3875.21039-.07462.29731.09834.39641.21461.75218.88245,1.537,1.73605,2.3081,2.60152.35493.39835.78286.72875,1.168,1.10041A1.629,1.629,0,0,1,105.26665,47.74617Z"/><path class="cls-170" d="M116.97585,60.37765c.99806.273,2.03558.32283,3.0443.53628a.36372.36372,0,0,0,.2278-.0076,1.91248,1.91248,0,0,1,1.273-.06544,1.30328,1.30328,0,0,1-.15407.61541,6.60568,6.60568,0,0,0-1.38317.14062,4.88645,4.88645,0,0,1-1.83716-.09435,12.83936,12.83936,0,0,1-1.64775-.25937c-.08393-.02559-.19486.03728-.2933.05925a32.85015,32.85015,0,0,1-5.2825-2.41462c-.67548-.43881-1.34992-.8781-1.99039-1.36735a28.1494,28.1494,0,0,1-2.55173-2.25018.918.918,0,0,1-.32462-.54359c-.02105-.19786-.182-.32967-.30441-.47648-.10486-.12576-.238-.25024-.1006-.43448.35257.06572.55285.35654.79081.57141a27.67191,27.67191,0,0,0,5.86707,4.12129,25.09582,25.09582,0,0,0,3.64033,1.44947A8.54368,8.54368,0,0,1,116.97585,60.37765Z"/><path class="cls-171" d="M108.96416,57.4513a25.49534,25.49534,0,0,0,4.1366,2.49352,24.55979,24.55979,0,0,0,2.4332.93933,1.38248,1.38248,0,0,1,.67153.4183l-.2311.616a4.00675,4.00675,0,0,1-1.62364-.51864,22.596,22.596,0,0,1-6.25225-3.83142c-.91665-.75691-1.69676-1.65182-2.60566-2.4116-.04209-.03519-.049-.11242-.07231-.17006a1.35261,1.35261,0,0,1,1.07324.38967c.67616.61607,1.33385,1.25181,2.05081,1.82282A2.85631,2.85631,0,0,0,108.96416,57.4513Z"/><path class="cls-172" d="M100.72137,33.42118c-.06633-.05807-.17514-.1056-.19255-.17578-.22067-.88993-.95846-1.54672-1.10734-2.46552-.02455-.15155-.05671-.277-.24044-.2853l-.045-.04312a26.83823,26.83823,0,0,1-.68032-3.6567c-.06464-.63725-.12707-1.27443-.15718-1.91447-.03305-.70224.00474-1.40441-.06228-2.10831a10.98467,10.98467,0,0,0-2.20422-5.89068,9.81962,9.81962,0,0,0-2.63124-2.14272,3.55114,3.55114,0,0,1-.6578-.463,12.09515,12.09515,0,0,1-1.04552-.90667c-.10179-.10058-.26388-.16639-.20781-.35794.00174-.006.01863-.01069.02825-.01032a.14836.14836,0,0,1,.0362.01048,4.24349,4.24349,0,0,1,1.64556.40372c.14531.04341.28963.09016.4344.13538A10.17462,10.17462,0,0,1,97.19088,16.801a10.76909,10.76909,0,0,1,1.62046,5.04694c.08259.94335-.02994,1.88272.063,2.82.06779.68374.16324,1.3648.22687,2.04887a24.38862,24.38862,0,0,0,.705,3.90467C100.05388,31.56966,100.41228,32.489,100.72137,33.42118Z"/><path class="cls-173" d="M91.55415,13.01117c-.08427.0975.01874.15054.06631.17493.40539.20791.56657.713,1.03588.84314a.20632.20632,0,0,1,.13057.21409.39422.39422,0,0,1-.46949.01151,10.92987,10.92987,0,0,0-2.21565-.61463.293.293,0,0,1-.16536-.09007,10.13376,10.13376,0,0,0-2.326-.61869,1.18131,1.18131,0,0,1-.21563-.07414.43534.43534,0,0,1,.23051-.46212,8.3843,8.3843,0,0,1,2.70743.34609.96785.96785,0,0,0,.4146.03265A.93451.93451,0,0,1,91.55415,13.01117Z"/><path class="cls-174" d="M114.89589,56.6039a16.31456,16.31456,0,0,0,2.85031.69354,1.44011,1.44011,0,0,1,.077.53877,4.45242,4.45242,0,0,1-1.51142-.197c-1.17892-.3974-2.39686-.67442-3.54315-1.17418a21.35082,21.35082,0,0,1-3.06146-1.61415c-1.1427-.73754-2.26377-1.50786-3.34754-2.33079a7.14411,7.14411,0,0,0-.86524-.70149c-.31277-.26535-.58858-.56912-.87921-.85755a13.99873,13.99873,0,0,1-1.65877-1.73361,1.59434,1.59434,0,0,1-.15223-.22071c-.27233-.38486-.53633-.77863-.8441-1.13364a20.1804,20.1804,0,0,1-1.373-1.93749c-.08371-.12315-.19264-.24836-.11525-.41981.22161-.07617.31237.095.4348.221.21946.22592.30354.56913.619.71031.55.68982,1.08094,1.39612,1.66023,2.06183a29.49384,29.49384,0,0,0,2.825,2.87657,28.98836,28.98836,0,0,0,3.44731,2.57455,23.204,23.204,0,0,0,4.46836,2.216A2.34933,2.34933,0,0,1,114.89589,56.6039Z"/><path class="cls-175" d="M105.49757,51.75188c.46033.122.69623.54259,1.057.79985a46.70514,46.70514,0,0,0,4.5637,3.01389,25.71434,25.71434,0,0,0,4.738,1.835c.65157.20555,1.33528.1901,1.967.43557l1.38664.15423c-.07258.16216-.21716.16505-.35991.1526a4.15369,4.15369,0,0,0-1.21213-.00574,1.25181,1.25181,0,0,1-.37348-.05965c-.17787-.02375-.34258-.01632-.36555.22067a.24906.24906,0,0,1-.25412.02441,23.26357,23.26357,0,0,1-9.06767-4.4433c-.60591-.49353-1.1309-1.07575-1.77145-1.52977C105.63047,52.22555,105.40571,52.04962,105.49757,51.75188Z"/><path class="cls-176" d="M119.51877,59.68505l-.07779.07664a.69747.69747,0,0,0-.44109-.09522,30.553,30.553,0,0,1-3.15647-.84044c-.14753-.02556-.38266-.05158-.316-.325a.92555.92555,0,0,1,.74109.01719,24.40638,24.40638,0,0,0,3.01845.31944l1.00146-.00038c.33785.04908.679.08207,1.01264.1515a8.45886,8.45886,0,0,0,1.12731.02152,6.17767,6.17767,0,0,0,.63333.05841.40177.40177,0,0,1-.40272.23335,9.3667,9.3667,0,0,0-2.44765.293.61962.61962,0,0,1-.29764-.04682C119.75923,59.51426,119.60331,59.50459,119.51877,59.68505Z"/><path class="cls-177" d="M119.28691,58.83765a1.13843,1.13843,0,0,1-.711.0576,13.45358,13.45358,0,0,0-1.46383-.08177,4.355,4.355,0,0,1-1.072-.228,2.0237,2.0237,0,0,0-.52793-.05531c-.23836.1199-.44948-.01684-.65989-.08442a22.9398,22.9398,0,0,1-7.50126-4.11556c-.80482-.65407-1.526-1.40411-2.37143-2.00836a.97883.97883,0,0,1-.23007-.25645c-.06872-.1087-.15608-.2034-.23421-.30513a17.13829,17.13829,0,0,0-1.15412-1.32978,22.42306,22.42306,0,0,1-1.96393-2.6372.31416.31416,0,0,1-.07656-.353c.24373-.05148.31658.16244.44609.28784.4019.3892.71251.85953,1.11158,1.25129a7.07817,7.07817,0,0,0,1.05072,1.245,16.92634,16.92634,0,0,1,1.56849,1.52755.96228.96228,0,0,0,.35482.53052c1.05238.84906,2.02392,1.79864,3.15316,2.55212a21.9599,21.9599,0,0,0,7.20383,3.2359c.23473.05492.45985.151.68943.2279a8.70273,8.70273,0,0,0,1.6971.37955A2.6949,2.6949,0,0,1,119.28691,58.83765Z"/><path class="cls-178" d="M114.89589,56.6039A26.65089,26.65089,0,0,1,101.4921,46.51457c-.34954-.35084-.57133-.79849-.88862-1.17422a.247.247,0,0,1-.05645-.28076.15762.15762,0,0,1,.22858.062,6.14327,6.14327,0,0,0,.84142.814,44.95065,44.95065,0,0,0,3.74737,4.00281,29.7785,29.7785,0,0,0,4.30436,3.26823c.40111.25.81617.47864,1.20948.7428a5.10977,5.10977,0,0,0,1.283.7577c.76583.28439,1.4138.81409,2.21511,1.04012.43.1213.86332.23532,1.2915.365.13931.04219.31995.03812.30654.26073a2.18,2.18,0,0,1-.73963-.10392c-.117-.02662-.23816-.13848-.35153-.04849C114.73611,56.33743,114.90746,56.474,114.89589,56.6039Z"/><path class="cls-179" d="M115.97439,56.373c-.21065-.24517-.53154-.20472-.799-.29126a7.69652,7.69652,0,0,1-2.25-.90729,4.86,4.86,0,0,0-1.07639-.49272,3.58089,3.58089,0,0,1-1.036-.69632c.14453-.10092.27135-.01313.39324.04638a20.12171,20.12171,0,0,0,5.59609,1.79135.53625.53625,0,0,1,.25054.08775,11.758,11.758,0,0,0,2.33187.17159,5.66067,5.66067,0,0,1,1.475.09827c.199.03231.40394-.1276.58418.03859l.15407.38472c-1.02-.07355-2.035.15589-3.05318.06431C117.68607,56.59116,116.83105,56.47305,115.97439,56.373Z"/><path class="cls-180" d="M117.05288,55.91092a11.43331,11.43331,0,0,1-3.15415-.692,23.39552,23.39552,0,0,1-3.08572-1.23347,31.6403,31.6403,0,0,1-2.8109-1.7696,29.44615,29.44615,0,0,1-4.47017-3.95035,21.72806,21.72806,0,0,1-1.96318-2.28986,8.01355,8.01355,0,0,1-.97895-1.41438c-.07069-.13217-.19-.24929-.12293-.42126.14872-.084.20271.04979.27608.12549a8.75172,8.75172,0,0,1,.95968,1.1439,2.16687,2.16687,0,0,0,.59387.59095c.71311.80519,1.372,1.65947,2.16225,2.39537a.55415.55415,0,0,1,.11438.19831,16.892,16.892,0,0,0,2.30881,2.17622,24.65,24.65,0,0,0,4.8101,3.03613,19.45863,19.45863,0,0,0,4.12827,1.4884.62044.62044,0,0,0,.52139.322C116.593,55.643,116.88769,55.64334,117.05288,55.91092Z"/><path class="cls-181" d="M100.10652,29.49368a30.14923,30.14923,0,0,1-.48572-3.4016A28.004,28.004,0,0,1,99.50005,23.07c.047-.69045-.01217-1.37369-.01015-2.06013A9.37748,9.37748,0,0,0,98.02314,15.733a7.84317,7.84317,0,0,0-1.6996-1.90317c-.76458-.60432-1.60782-1.08239-2.38129-1.66536a2.78723,2.78723,0,0,1-.38518-.61643.99413.99413,0,0,1,.72446.187c.58142.32488,1.19475.58571,1.76736.931a5.48079,5.48079,0,0,1,1.35995,1.11485c.227.41691.60144.71786.86515,1.10763a9.68184,9.68184,0,0,1,1.60365,4.68545c.05263.60753.13942,1.2121.2109,1.818.03539.3-.16719.554-.14311.86122a43.16917,43.16917,0,0,0,.376,4.49083c.08743.47426.11424.95968.16878,1.44-.12906.33331.06346.63814.11336.94786.08841.54876.33347,1.07363.40893,1.6228a13.19244,13.19244,0,0,0,.55621,2.05049,2.46338,2.46338,0,0,1-.52194-1.07723,1.72555,1.72555,0,0,0-.3525-.6156c-.31291-.31632-.286-.773-.42025-1.16388A1.2,1.2,0,0,0,100.10652,29.49368Z"/><path class="cls-182" d="M97.40884,13.7808c-.05838-.02138-.13324-.02652-.17275-.06653a10.97811,10.97811,0,0,0-3.679-2.16627,7.51828,7.51828,0,0,1-1.7354-.62687,1.9514,1.9514,0,0,1-.34455-.22037.66976.66976,0,0,0,.50184-.12867c.23352-.19571.48779-.06125.73018-.01018.1842.0388.36339.13374.53979-.01532A9.44763,9.44763,0,0,1,95.86814,11.856a1.11258,1.11258,0,0,0,.31989.31912c.21614.1684.46452.317.46256.65314-.00081.13808.13922.1957.23993.275A1.10108,1.10108,0,0,1,97.40884,13.7808Z"/><path class="cls-183" d="M77.22556,42.04746c-.2133.06608-.32267.2664-.48843.39413a1.14265,1.14265,0,0,1-.898.29886,3.72707,3.72707,0,0,1-.4112-1.33209c-.03243-.263-.28378-.49892-.43642-.74705-.26268-.26252-.12022-.53924-.02709-.81318a1.29848,1.29848,0,0,1,.183-.37424c.28159-.19551.67737-.16911.90782-.46592a.35259.35259,0,0,1,.3681.12171c.3321.6742.90632,1.18279,1.26449,1.8397a1.03083,1.03083,0,0,1-.30034.51042A.6031.6031,0,0,0,77.22556,42.04746Z"/><path class="cls-184" d="M75.22264,39.50592c-.15.37053-.40109.72087-.23115,1.15539a8.09283,8.09283,0,0,1-1.3866-.30818c-.2221-.43445-.65274-.70888-.87655-1.143-.05766-.11183-.13424-.21391-.20213-.32048a.49012.49012,0,0,1,.46252-.23127.2682.2682,0,0,1,.21308-.06824c.39214.11942.81191.07131,1.201.203A2.86255,2.86255,0,0,1,75.22264,39.50592Z"/><path class="cls-185" d="M104.57314,48.594a12.51863,12.51863,0,0,1-1.61251-1.68362q-.34878-.42936-.69855-.85793c-.567-.70518-1.05756-1.46423-1.56046-2.21451-.06278-.09366-.13585-.19027-.07888-.31634.12144-.07607.19768.01249.25829.08787a22.80785,22.80785,0,0,1,1.45808,1.82664c.70726.82049,1.46057,1.59574,2.22276,2.36626.96962.98023,2.03735,1.83954,3.09269,2.71719a9.34413,9.34413,0,0,0,2.0878,1.59516,3.89926,3.89926,0,0,1,1.168.74763,12.77687,12.77687,0,0,1-1.90066-1.027,24.22035,24.22035,0,0,1-4.25687-3.17446C104.70559,48.61929,104.67229,48.50853,104.57314,48.594Z"/><path class="cls-186" d="M87.47109,14.24382c-.47429.11054-.81575-.27071-1.243-.33984-.07817-.01265-.06174-.12556-.06638-.1994a1.66313,1.66313,0,0,0,.99595.08579,7.84682,7.84682,0,0,1,1.99611.17924q.54546.05951,1.09082.11986c.10216-.08891.19726-.0275.28092.02543.575.3638,1.19209.65462,1.7654,1.02065.12629.08063.27624.15046.29275.33257a.63529.63529,0,0,1-.4347.45808,4.0129,4.0129,0,0,1-1.20416-.3473,4.78288,4.78288,0,0,0-.72471-.23362c-.78838-.30375-1.61369-.502-2.39194-.83476C87.68769,14.45047,87.534,14.40775,87.47109,14.24382Z"/><path class="cls-187" d="M92.55561,15.4756a7.04062,7.04062,0,0,0-1.51576-.94271,3.37191,3.37191,0,0,0-.7953-.44342c-.10549-.17819-.56589-.15369-.30814-.53933a7.27367,7.27367,0,0,1,2.16147.50558,1.5615,1.5615,0,0,0,.689.18761l.61609.38539a7.238,7.238,0,0,0,.90074,1.13511c.26921.2326.2313.60129.28108.92391a.11421.11421,0,0,1-.17058.00653C93.85329,16.19821,93.13638,15.94062,92.55561,15.4756Z"/><path class="cls-188" d="M104.80331,51.9834A8.55327,8.55327,0,0,0,106.06,53.09977a26.2133,26.2133,0,0,0,3.69346,2.853,20.90189,20.90189,0,0,0,5.75871,2.57736c.18433.26572.49622.225.754.29842a15.83339,15.83339,0,0,1,1.96256.64751,3.05066,3.05066,0,0,0,.89373.12812c.13211.013.2558.01611.31849.15751-.63556-.04537-1.272-.0813-1.90625-.14072a.42084.42084,0,0,0-.46667.30882,2.45053,2.45053,0,0,0-.09221.44787,4.73093,4.73093,0,0,1-1.36694-.43482,19.84418,19.84418,0,0,1-2.88621-1.12722,24.72176,24.72176,0,0,1-4.10712-2.514c-1.01771-.789-1.99017-1.62981-2.96394-2.47019-.07365-.03722-.12074-.08551-.0726-.1736.17167-.09947.28524.02419.414.10365.28112.17349.47.46736.78616.5968-.6003-.64262-1.19515-1.28846-1.8234-1.90241a.91.91,0,0,1-.24176-.29458C104.68309,52.083,104.643,51.97642,104.80331,51.9834Z"/><path class="cls-189" d="M84.38985,15.70694a10.7322,10.7322,0,0,0-4.4584.86678c-.56946.24456-1.189.37135-1.78247.56212a.46825.46825,0,0,1-.327-.04945,2.92226,2.92226,0,0,0-1.21272-.30135c.55715-.23435,1.17493-.18954,1.74228-.38043.77495-.26072,1.55878-.49629,2.32775-.77331a9.69286,9.69286,0,0,1,4.77167-.62419c.46563.0691.93576.10784,1.40383.16051.088-.05958.14424-.03622.17074.06522-.2603.23164-.45289.52445-.6964.77237A5.6494,5.6494,0,0,1,84.38985,15.70694Z"/><path class="cls-190" d="M87.00906,15.2445a.15972.15972,0,0,0-.15426-.07687.87346.87346,0,0,0-.15066-.1084c-.56512-.24839-1.13188-.493-1.69819-.73872.16476-.15869.33053-.04561.49533-.00092a5.22784,5.22784,0,0,0,1.96981-.07578c.88913.43161,1.85361.65454,2.77346,1.001a.30687.30687,0,0,1-.22166.362,19.15317,19.15317,0,0,1-2.55122-.21023A.70717.70717,0,0,1,87.00906,15.2445Z"/><path class="cls-191" d="M72.21807,20.25122c.08116-.1797.2654-.1873.41576-.21789a.45838.45838,0,0,0,.35478-.2442.40992.40992,0,0,0,.36239.06915c.4387-.2175.89037-.02515,1.33239-.06955a.42881.42881,0,0,1,.35951-.1,6.69346,6.69346,0,0,0,3.57078-.85622c.59915-.26807,1.11017-.68259,1.71142-.94495a10.26509,10.26509,0,0,1,2.01683-.73263,4.5834,4.5834,0,0,1,1.96213.07455c.141.05147.3047.05019.40327.18988-.06427.22862-.27113.21041-.43468.22477a10.22176,10.22176,0,0,0-4.29543,1.44333,16.25284,16.25284,0,0,1-2.97535,1.57887,3.65374,3.65374,0,0,1-.81025.23368,6.48027,6.48027,0,0,1-2.237.15483,3.04119,3.04119,0,0,0-.76364.05427.462.462,0,0,1-.43312-.08787C72.60379,20.74644,72.32108,20.56179,72.21807,20.25122Z"/><path class="cls-192" d="M72.75788,21.02123c1.1476-.1941,2.32849.1111,3.46622-.231.00787.30861-.263.33656-.45247.43384-.22317.11457-.481.16973-.64581.42614a.70923.70923,0,0,0,.43454.02093c.1978-.01117.29347.06069.24328.26954a4.34229,4.34229,0,0,1-1.50543.852c-.51093.46208-1.09239.25008-1.632.1198a4.22256,4.22256,0,0,1-1.37219-.50515c.203-.45161.45828-.831,1.0414-.773a.14936.14936,0,0,0,.1864-.14247A1.115,1.115,0,0,1,72.75788,21.02123Z"/><path class="cls-193" d="M71.756,27.72189a.15918.15918,0,0,0-.15407-.0772c.0501-.29589.41064-.43648.38537-.77007.04938-.07462.10033-.18857.18688-.17749.48028.06148.8249-.309,1.2611-.37928a1.05451,1.05451,0,0,0,.69115-.18085.70747.70747,0,0,1,.51293-.12307,1.787,1.787,0,0,0,1.574-.60915c.56751-.57426,1.28483-.959,1.90346-1.47294.75478-.62708,1.54884-1.20778,2.32546-1.809a7.83582,7.83582,0,0,1,1.52376-.87871,2.81978,2.81978,0,0,1,1.09324-.42046,1.65131,1.65131,0,0,1,1.10464.19616c.23355.09778.3834.23932.27035.51755a.25416.25416,0,0,1-.31254.07655,2.7585,2.7585,0,0,0-2.45919.46508c-1.00711.5994-1.85223,1.405-2.79832,2.07716-.67606.48031-1.257,1.0704-1.90178,1.58373a16.12428,16.12428,0,0,0-1.77306,1.50748,1.56489,1.56489,0,0,1-1.12786.58961.35808.35808,0,0,0-.38831.07546.92774.92774,0,0,1-.98936.19593A1.67471,1.67471,0,0,1,71.756,27.72189Z"/><path class="cls-194" d="M73.45078,26.41256a.48076.48076,0,0,0-.29109.07028c-.26365.16481-.50625.37247-.865.26045-.08089-.02526-.20382.084-.30739.13133-.1033-.2576-.39761-.1837-.58293-.34452-.48073-.41715-.53084-.46209-.34169-1.04167.51025-.06149.99786-.24121,1.51684-.27205.18631-.01107.37522-.02545.56312-.03612.2691.26232.57434.06174.86064.05589.16523-.00338.3255-.06367.45869.08279A1.75161,1.75161,0,0,1,73.45078,26.41256Z"/><path class="cls-195" d="M74.29821,22.79266c.45388-.3412.98587-.54756,1.46367-.84749a.708.708,0,0,1,.42371-.1611,2.84811,2.84811,0,0,0,.72133-.24289c1.47531-.58615,2.64848-1.687,4.06537-2.36827a4.47383,4.47383,0,0,1,4.05777-.25842.30319.30319,0,0,1,.147.1174,1.28441,1.28441,0,0,1-1.3687.44948,2.96782,2.96782,0,0,0-2.29731.32151A12.2813,12.2813,0,0,0,78.60072,21.653a2.77913,2.77913,0,0,1-.79053.46487,11.37483,11.37483,0,0,1-2.46935.93762,1.78023,1.78023,0,0,1-1.11966-.03184Z"/><path class="cls-196" d="M74.22118,23.02368a6.77263,6.77263,0,0,0,2.76778-.62659,22.82958,22.82958,0,0,0,3.19947-1.9989,7.883,7.883,0,0,1,2.70135-1.125,1.3,1.3,0,0,1,.88379.13054.30669.30669,0,0,1-.18041.13861,7.46432,7.46432,0,0,0-3.64009,1.5272c-.98161.62707-1.95615,1.272-2.91856,1.92042-.9482.63882-2.02283.98534-2.96893,1.59407-.21651.1393-.38447.39124-.69161.36517-.086-.33152-.37776-.43828-.64515-.52131a1.55271,1.55271,0,0,1-.5876-.32585,12.23849,12.23849,0,0,1,1.42032-.56646C73.85205,23.4755,73.97507,23.16229,74.22118,23.02368Z"/><path class="cls-197" d="M73.374,24.94924a22.80236,22.80236,0,0,1,2.33315-1.28349,40.63625,40.63625,0,0,0,3.52608-2.2059,10.28515,10.28515,0,0,1,3.62591-1.92293,4.626,4.626,0,0,1,.76039-.05614.95883.95883,0,0,1,.68588.1784,7.12591,7.12591,0,0,0,.9259.3609c.13942.07029.33807.0875.32454.31726a.92433.92433,0,0,1-.44871.15608c-.46266-.00094-.91252-.1247-1.37075-.15452a4.02208,4.02208,0,0,0-2.13684.65814,28.35288,28.35288,0,0,0-3.47823,2.39641,22.41405,22.41405,0,0,1-3.37723,1.89982.3077.3077,0,0,1-.29178.04112,2.10652,2.10652,0,0,0-.98752.08631c-.27588.07075-.32128-.01681-.32208-.24044Z"/><path class="cls-198" d="M82.3099,17.24728a9.70826,9.70826,0,0,0-2.5767,1.07549c-.635.39389-1.31968.66027-1.98169.98558a4.68719,4.68719,0,0,1-2.37548.48247c-.23023-.01257-.46173-.002-.69264-.00209a1.16025,1.16025,0,0,0-.01711-.37243c-.13724-.34787-.04242-.55306.32525-.62879.5622.09533,1.0319-.25093,1.55933-.32626a15.62168,15.62168,0,0,0,3.59925-1.25675,3.86144,3.86144,0,0,0,.465-.26534,7.68886,7.68886,0,0,1,3.39067-.49746c.25184.01374.51881-.00835.70584.2191-.05.18663-.21256.195-.35939.22076C83.67107,17.0013,82.99879,17.17078,82.3099,17.24728Z"/><path class="cls-199" d="M84.698,16.7081a1.17732,1.17732,0,0,0-.57619-.154,9.38544,9.38544,0,0,0-3.17023.33321,2.202,2.202,0,0,1-.33646.0518,2.6117,2.6117,0,0,1,.8628-.38322c.8385-.20681,1.64717-.52631,2.50688-.655a.57317.57317,0,0,0,.405-.194c.67437.01774,1.32553.23659,2.00259.231a2.02394,2.02394,0,0,1,.88964.258c.15768.152.3548.25289.51861.39528.14725.128.29907.26972.098.47648a1.16577,1.16577,0,0,1-.58013.03876c-.76946-.1652-1.55489-.21715-2.33225-.32646C84.88742,16.76611,84.78131,16.78352,84.698,16.7081Z"/><path class="cls-200" d="M71.756,27.72189a10.055,10.055,0,0,0,1.12146.32719.73394.73394,0,0,0,.74435-.227c.138-.14379.28245-.29685.44525-.02314.11595.16871-.01467.28579-.0929.40669-.3627.56046-.32641.66734.30823.86878.10507.3284-.19189.51807-.27027.78364a3.70953,3.70953,0,0,0-.73868.581,1.51953,1.51953,0,0,1-1.28633-.02169,6.27573,6.27573,0,0,0-.24029-.93418c-.08972-.16508-.14533-.355-.376-.37505A4.40724,4.40724,0,0,1,71.756,27.72189Z"/><path class="cls-201" d="M74.45209,38.88967l-1.46337-.23127c.06864-.346-.2329-.52289-.35785-.78033-.07114-.14657-.27583-.23854-.18151-.45158.17342-.18688-.12449-.4328.07721-.61615a.47769.47769,0,0,1,.41434-.09033,3.42118,3.42118,0,0,1,1.23457.55443,1.7053,1.7053,0,0,0,.59361.21792.16673.16673,0,0,1-.00381.21356A1.62135,1.62135,0,0,0,74.45209,38.88967Z"/><path class="cls-202" d="M72.98861,36.81016l-.462.00018a5.82618,5.82618,0,0,1-.88808-.88077,2.58542,2.58542,0,0,1-.26762-1.12191.44494.44494,0,0,1,.385-.15418,1.37678,1.37678,0,0,1,.78659.16323c.36546.31564.85176.52678.94245,1.08212C73.27917,36.18044,73.28909,36.57987,72.98861,36.81016Z"/><path class="cls-203" d="M71.98715,30.41737c.43427-.06418.88705.18747,1.3096-.07673.112.122.05456.26379.04444.39891-.03585.47921-.005.51341.4547.60417a1.59,1.59,0,0,1,.58924.12866.36109.36109,0,0,1,.04923.35934,14.58816,14.58816,0,0,1-1.87614,1.272,11.69984,11.69984,0,0,0-1.34124-.37556c-.0217-.20286-.1778-.29292-.32447-.3948-.13484-.09366-.27767-.18585-.292-.3753.189-.30719.09709-.70094.30851-1.00125a.535.535,0,0,0,.42527-.27828C71.45856,30.29876,71.69381,30.31308,71.98715,30.41737Z"/><path class="cls-204" d="M71.217,32.72814a2.41031,2.41031,0,0,1,1.38664.3085,1.69185,1.69185,0,0,1,.553.9365c.10426.52106-.3228.675-.63045.91154-.24581-.11361-.53353-.08763-.77035-.2312q-.17065-.22626-.34133-.45248A1.58,1.58,0,0,1,71.217,32.72814Z"/><path class="cls-205" d="M81.00029,47.05371c.11838-.06268.34414-.08257.13168-.28856-.18549-.17986-.10715-.27615.0897-.3559a.746.746,0,0,0,.28272-.89481.3962.3962,0,0,1,.11238-.61727c.2785.12933.34171.41616.47646.65073a2.84073,2.84073,0,0,0,1.434,1.365,13.71014,13.71014,0,0,1,1.32088.62331,8.59006,8.59006,0,0,0,3.049.86331c.75122.07686,1.49846.20076,2.24749.30356a5.9934,5.9934,0,0,0,1.148-.07043c.62528-.03321,1.25307-.06774,1.87458-.1592a.65692.65692,0,0,0,.223-.05642,20.07214,20.07214,0,0,0,2.282-1.26534.86012.86012,0,0,0,.407-.70315.29958.29958,0,0,1,.09727-.242c.25426.01481.27417.27753.42181.40709.10089.08854.13085.26062.23422.34311A6.28939,6.28939,0,0,1,98.17892,48.825c-.3971-.0072-.5785.345-.8646.52216a5.37644,5.37644,0,0,1-3.16992,1.26354c-.34558-.02081-.69884.13469-1.00472-.15521-.04177-.03959-.15-.02011-.22555-.01135a17.53143,17.53143,0,0,1-2.14556.07764.34369.34369,0,0,0-.18482.03623,2.438,2.438,0,0,1-2.16164.20331A22.4232,22.4232,0,0,1,82.94054,48.332c-.07591-.04692-.18725-.07829-.21978-.14657a.66473.66473,0,0,0-.79623-.43859A2.78,2.78,0,0,1,81.00029,47.05371Z"/><path class="cls-206" d="M105.57416,53.67775l.07748.15365a.41164.41164,0,0,0,.14217.33872c.18537.19918.42623.37037.37168.70546-.00829.05091.07971.12316.1317.17735a23.2704,23.2704,0,0,0,2.54008,2.26,1.08717,1.08717,0,0,1,.12689.13837.55431.55431,0,0,1-.39055-.11439c-.7262-.56786-1.37611-1.22052-2.05456-1.8406a3.2672,3.2672,0,0,0-1.09852-.50962l-.69313-.61616c-.4524-.68236-1.04365-1.25092-1.55743-1.8834-.87542-1.07767-1.73906-2.16155-2.5445-3.293-.138-.19388-.21451-.48312-.52038-.52323a5.44,5.44,0,0,0-.93606-1.50385c-.13-.18534-.29378-.31528-.25745-.59323.02442-.18687-.12484-.37389-.23338-.5506a1.22518,1.22518,0,0,1-.26789-.66377c.20331-.03316.24225.14931.33075.2592a7.20822,7.20822,0,0,0,1.03768,1.24754,1.90635,1.90635,0,0,1,.48605.53529,52.52339,52.52339,0,0,0,4.11868,4.93979A8.51142,8.51142,0,0,1,105.57416,53.67775Z"/><path class="cls-207" d="M96.17647,46.2065a1.12327,1.12327,0,0,1-.70348,1.23026c-.61747.35815-1.25553.68067-1.88178,1.02392a2.53328,2.53328,0,0,1-1.04557.1931c-.69713.0608-1.39745.14482-2.09413.153a13.893,13.893,0,0,1-1.93062-.21479c-.63014-.082-1.26175-.15867-1.88727-.26865a11.04069,11.04069,0,0,1-2.23613-.88438c-.40038-.1648-.80038-.34431-1.18305-.53519a2.81852,2.81852,0,0,1-1.14095-1.14487,7.46813,7.46813,0,0,1-.45672-.86177l.00018-.23068c.30318-.08439.47877-.40278.80791-.44078,1.59576.383,3.15737.89221,4.75256,1.2772a15.07276,15.07276,0,0,0,2.401.286c.22962.01766.4596.01874.68914.05265a2.22741,2.22741,0,0,0,1.24289-.14427c.47026-.20407.94843-.39132,1.42827-.57246a2.28514,2.28514,0,0,0,1.10736-.72862.48077.48077,0,0,1,.39811-.20141,6.17752,6.17752,0,0,0,1.342.8581.60152.60152,0,0,1,.23606.38342A1.34234,1.34234,0,0,1,96.17647,46.2065Z"/><path class="cls-208" d="M96.02221,45.43631c-.13661-.06043-.19568-.18928-.27751-.30156-.09738-.13363-.21341-.2674-.40417-.23517a.51973.51973,0,0,1-.6216-.4151c-.043-.12293-.10422-.19838-.23743-.20346a1.52508,1.52508,0,0,0-.05365-.95388,1.46388,1.46388,0,0,1-.0282-.71053.95388.95388,0,0,1,.37479-.52433c.37193-.02162.42686.3427.63521.52095a17.30994,17.30994,0,0,0,.88931,1.50961.22871.22871,0,0,1,.03172.31258A.95467.95467,0,0,1,96.02221,45.43631Z"/><path class="cls-209" d="M96.33068,44.43542l-1.0016-1.77171c.03823-.13644-.03832-.31176.13607-.40219a.26035.26035,0,0,1,.28815.1395c.27208.45933.6639.82595.96223,1.264.33342.65409.67753,1.303.99657,1.96406a3.49474,3.49474,0,0,1,.46691,1.42462,18.34748,18.34748,0,0,1-1.312-1.89613A2.067,2.067,0,0,0,96.33068,44.43542Z"/><path class="cls-210" d="M96.71553,42.587c-.11268-.0928-.156-.2549-.30815-.30826a16.20978,16.20978,0,0,1-1.21585-1.99552,7.16513,7.16513,0,0,0-.38764-.66321c-.58166-1.06339-1.1218-2.15-1.77-3.17633a2.27432,2.27432,0,0,0-.50463-.6672,2.23136,2.23136,0,0,1-.58921-.98545c.44834-.03045.75589.28822,1.12359.45669a1.25676,1.25676,0,0,1,.23814.18422,2.85865,2.85865,0,0,1,.54015.83214,16.40306,16.40306,0,0,1,.95216,1.92014,1.39413,1.39413,0,0,0,.52405.64831,11.64726,11.64726,0,0,1,1.00964,1.93,2.39038,2.39038,0,0,1,.41241,1.02205C96.7042,42.05129,96.863,42.324,96.71553,42.587Z"/><path class="cls-211" d="M94.86649,39.58275c.54066.88321,1.07138,1.7721,1.54089,2.696-.02359.49019.26992.90992.30815,1.38637a3.34382,3.34382,0,0,1-.89791-1.02887.90324.90324,0,0,0-.335-.3574c-.10283.02209-.12525-.0594-.16156-.12434-.39273-.70251-.65011-1.4683-1.01963-2.18187-.05643-.109-.12911-.22782-.03659-.3578A.47922.47922,0,0,1,94.86649,39.58275Z"/><path class="cls-212" d="M96.71553,42.587a2.97943,2.97943,0,0,1-.07685-.84749c.2095-.097.27289.0871.34515.20126q.92334,1.45884,1.80653,2.94279a9.9561,9.9561,0,0,0,.789,1.5352c.07459.14811.25806.27387.1407.48125-.29894-.04725-.35716-.34412-.52111-.52448-.2875-.31631-.52831-.67506-.78868-1.016-.56171-.77981-.92672-1.68225-1.52326-2.44143A.51231.51231,0,0,1,96.71553,42.587Z"/><path class="cls-213" d="M100.10509,34.03756c-.14671-.06262-.18342-.20823-.24069-.33285a19.98871,19.98871,0,0,1-1.69-5.4434c-.06448-.43815-.15034-.87316-.22636-1.30961a11.85229,11.85229,0,0,1-.14341-1.89478,10.85156,10.85156,0,0,0-.16745-1.9457.89762.89762,0,0,1,.04409-.599c.2142-.09079.19649.1047.22313.20171a3.11409,3.11409,0,0,1,.15.86856,17.65964,17.65964,0,0,0,.2142,2.21326,35.33137,35.33137,0,0,0,.912,4.69856l.00037.00027c.29572,1.03929.60647,2.0737,1.00109,3.08086A1.38044,1.38044,0,0,1,100.10509,34.03756Z"/><path class="cls-214" d="M99.25805,35.57793c.03048.43441.38035.74119.46186,1.15521a.42218.42218,0,0,1-.15407.30807c-.272.01772-.33117-.20844-.40626-.384-.3518-.82239-.8-1.59907-1.14246-2.42588a29.20645,29.20645,0,0,1-1.42375-5.45413,5.50592,5.50592,0,0,1-.11327-1.71568c.05794-.1502-.00764-.29926-.00464-.44878.00667-.33139.16257-.53456.42912-.562a3.814,3.814,0,0,1,.13229.9793c.08459.55469.17037,1.108.29871,1.65422a25.70611,25.70611,0,0,0,1.11668,4.72384,18.39214,18.39214,0,0,0,.73675,1.80739C99.2423,35.32886,99.31611,35.44183,99.25805,35.57793Z"/><path class="cls-215" d="M98.10216,34.26825q.54233,1.11019,1.08387,2.22077c.099.204.15336.43664.37981.55219a13.09018,13.09018,0,0,0,1.17984,2.215c.351.58657.75213,1.14315,1.131,1.713a4.41014,4.41014,0,0,1-1.29713-1.43883c-.08683-.13187-.10437-.32633-.32024-.33261a3.06253,3.06253,0,0,1-.68777-1.0367c-.34163-.62476-.714-1.23517-1.00471-1.88777-.19626-.527-.39073-1.05468-.62135-1.56807a.42379.42379,0,0,1-.042-.333A.19474.19474,0,0,1,98.10216,34.26825Z"/><path class="cls-216" d="M104.57314,45.59034c-.25216-.01556-.29027-.26759-.43124-.4031-.62857-.60425-1.2396-1.22679-1.8548-1.84487a5.97848,5.97848,0,0,0-.87241-.90981c-.11.04-.17015-.03422-.21874-.10753-.71937-1.08526-1.446-2.16588-2.11349-3.28451a.622.622,0,0,1-.05529-.14274c-.01742-.1808-.19062-.43446.01341-.52289.217-.09408.27219.20872.37439.353.31626.44652.64012.88748.95986,1.33111.41245.44053.67839.99121,1.08141,1.43989a.40731.40731,0,0,1,.11252.3176,12.9363,12.9363,0,0,0,1.25889,1.6991,15.51757,15.51757,0,0,0,1.70205,1.93182C104.56007,45.48046,104.55937,45.54205,104.57314,45.59034Z"/><path class="cls-217" d="M101.56876,41.8165,100.336,40.12189a19.35055,19.35055,0,0,1-1.96175-3.55716c-.05244-.1267-.14488-.251-.04152-.39519.13868-.0745.23389-.01726.30883.10148l1.61774,2.92673a18.49294,18.49294,0,0,0,1.45549,2.27161c.11367.14492.26206.28569.23911.50118C101.79219,42.00256,101.68992,41.88592,101.56876,41.8165Z"/><path class="cls-218" d="M99.10362,38.88958c.62623.9901,1.19241,2.01966,1.91338,2.94735.1481.19056.16641.46408.39769.59563a2.43642,2.43642,0,0,0,.5167.78769,1.44433,1.44433,0,0,1,.40772.67567c-.35834-.14964-.49265-.53379-.78712-.752-.13129-.0973-.24611-.21684-.36841-.32628-.07483.02609-.1188-.02-.15959-.07a17.8073,17.8073,0,0,1-2.087-3.23638c-.134-.31578-.27033-.63045-.40408-.94612-.07772-.18345-.18369-.37074-.07629-.58175.3177-.018.34577.27438.46114.45513A3.802,3.802,0,0,1,99.10362,38.88958Z"/><path class="cls-219" d="M90.09048,15.55281c-.01118-.13393.1107-.20131.15407-.30795.65871.15309,1.25442.503,1.92588.61622A6.70168,6.70168,0,0,1,93.624,16.92577,10.99332,10.99332,0,0,1,97.45175,23.714c.05884.38172.02609.767.11268,1.143a.25278.25278,0,0,1-.07855.24625,20.01716,20.01716,0,0,0,.23092,3.08086c-.30675-.02235-.29762-.27995-.31734-.47519a4.273,4.273,0,0,0-.20455-.96c-.17249-1.08428-.231-2.18668-.49822-3.2563a10.2795,10.2795,0,0,0-1.7901-3.832,10.84018,10.84018,0,0,0-2.52112-2.3393,7.3441,7.3441,0,0,0-2.17255-1.63171A.2082.2082,0,0,1,90.09048,15.55281Z"/><path class="cls-220" d="M97.48588,25.10324a10.94175,10.94175,0,0,0-1.94169-5.93882,12.98393,12.98393,0,0,0-3.13278-3.06457.6517.6517,0,0,1-.241-.23878c.19433-.06263.20858-.30512.38518-.38546a8.167,8.167,0,0,1,1.76793,1.03689c.08076.062.15678.13008.235.19535.18791-.04449.27516.1063.38017.20669a9.85994,9.85994,0,0,1,2.77106,5.15256.84013.84013,0,0,1,.00723.41745c.0268.74758.13372,1.48736.2163,2.22953a.78642.78642,0,0,1,.0113.26611,10.07378,10.07378,0,0,0,.0035,1.97151,9.4651,9.4651,0,0,1-.30244-1.495C97.612,25.32388,97.64591,25.17436,97.48588,25.10324Z"/><path class="cls-221" d="M97.25477,26.72064a1.76866,1.76866,0,0,1,.2314.85855c.01409.22514.01343.45679.23063.60491a32.69788,32.69788,0,0,0,1.00354,4.01425c.06951.23.15268.45593.22954.68373a.97735.97735,0,0,0,.0955.59849,13.29179,13.29179,0,0,1,.575,1.65518,14.754,14.754,0,0,0,.98555,2.06643.57756.57756,0,0,1,.03856.147,3.75139,3.75139,0,0,1-1.04172-1.3826.70453.70453,0,0,0-.34472-.38867,18.93087,18.93087,0,0,1-1.41011-3.83213c-.2106-.81285-.32132-1.64624-.56293-2.45112a2.3749,2.3749,0,0,1-.03009-.57173c.10552-.3212-.05408-.62134-.07341-.93251A1.74334,1.74334,0,0,1,97.25477,26.72064Z"/><path class="cls-222" d="M77.68777,40.96938a.21036.21036,0,0,1-.19556-.09868c-.29769-.60691-.87-1.03072-1.11385-1.67292a2.0976,2.0976,0,0,1,.67582-1.065,6.51326,6.51326,0,0,0,.61227-.56258c.22446-.03543.3362.12951.39534.28447.11575.30322.286.38713.575.24126a.17792.17792,0,0,1,.14761.0116,5.66514,5.66514,0,0,1,.43458.59953,3.78506,3.78506,0,0,1-.14507,1.2612.75494.75494,0,0,0-.53188.44435A.95627.95627,0,0,1,77.68777,40.96938Z"/><path class="cls-223" d="M80.69234,43.04853l-.53962-.61583a2.5832,2.5832,0,0,1-.074-.36919,1.19664,1.19664,0,0,0-.49783-1.00628.95276.95276,0,0,1-.42909-1.01173,5.67521,5.67521,0,0,0,.96837-1.04535.341.341,0,0,1,.25743-.14327c.29875.08822.47709.34946.72834.50669.165.63764.30989,1.28.45367,1.92284-.48316.36429-.434.97166-.6635,1.45177C80.84252,42.85034,80.89618,43.0346,80.69234,43.04853Z"/><path class="cls-224" d="M80.384,38.88977a2.11264,2.11264,0,0,0-.58065.65466,1.30851,1.30851,0,0,1-.65154.50106l-.07788-.07719c-.10822-.44444.10972-.86964.07732-1.30961-.01706-.01991-.04195-.04863-.03355-.06485A8.94679,8.94679,0,0,1,80.24562,36.506a.15858.15858,0,0,1,.06915-.03125.44625.44625,0,0,1,.38067.37184.48506.48506,0,0,1-.00691.228,3.27406,3.27406,0,0,0-.206,1.53681A.29874.29874,0,0,1,80.384,38.88977Z"/><path class="cls-225" d="M80.69234,43.04853c.127-.40314.284-.79993.371-1.21152a.66033.66033,0,0,1,.47619-.55985,5.385,5.385,0,0,1,.95772.438.19.19,0,0,1,.04878.21864.57948.57948,0,0,0-.12049.39061,16.817,16.817,0,0,1-.03846,1.95658c-.255.132-.39556.49243-.77017.38554l-.77073-.61657C80.92923,43.69549,80.63677,43.39874,80.69234,43.04853Z"/><path class="cls-226" d="M99.02659,39.50583a16.91547,16.91547,0,0,0,1.92307,2.9682,3.3199,3.3199,0,0,1,.23392.34359.51039.51039,0,0,0,.13163.31361c1.04045,1.1723,1.93044,2.47233,3.04,3.58529.24277.24351.50912.46364.7665.69242a.376.376,0,0,1,.14491.33724,29.76731,29.76731,0,0,1-3.11459-3.20178c-.31709-.39543-.69538-.7418-1.0457-1.11059-.07785.02432-.11725-.02754-.15415-.08007q-1.46991-2.09267-2.74208-4.31107a.65912.65912,0,0,1-.05334-.144c-.18159-.459-.39685-.904-.56424-1.36853-.05475-.15193-.14373-.30257-.057-.47274.189-.081.20754.09694.26924.18838a14.46363,14.46363,0,0,1,1.00639,1.897A2.03893,2.03893,0,0,0,99.02659,39.50583Z"/><path class="cls-227" d="M98.25623,38.88967a22.7982,22.7982,0,0,0,1.27951,2.1619c.51508.79953,1.04638,1.58861,1.57062,2.38224a5.39228,5.39228,0,0,0,.97783,1.47236.76284.76284,0,0,1,.25492.52995,13.31381,13.31381,0,0,1-1.07116-1.22056,5.862,5.862,0,0,0-.62362-.70491.3493.3493,0,0,1-.23167-.18391,26.29251,26.29251,0,0,1-1.60484-2.50194c-.34341-.68688-.66718-1.38371-1.04839-2.05128a.36156.36156,0,0,1-.07038-.32458C98.053,38.37073,98.07271,38.73556,98.25623,38.88967Z"/><path class="cls-228" d="M97.717,22.48455a21.40869,21.40869,0,0,0-.60072-2.07473,9.0579,9.0579,0,0,0-2.55774-3.702c-.05709-.20157-.19544-.37537-.16139-.60953.02486-.171-.119-.28458-.2485-.35474-.36735-.199-.44329-.61871-.705-.89612-.04278-.04534-.02852-.14448-.04062-.21875a8.57844,8.57844,0,0,1,2.1783,1.54849A9.87326,9.87326,0,0,1,97.56749,19.318a13.61158,13.61158,0,0,1,.79117,3.72516c.04669.63593-.00443,1.26564.04182,1.89876a29.92182,29.92182,0,0,0,.5015,4.01383,7.86653,7.86653,0,0,1,.27868,1.53857,14.88475,14.88475,0,0,1-.61312-2.27159,32.39087,32.39087,0,0,1-.60057-3.94529,12.47715,12.47715,0,0,0-.17492-1.62595A1.01407,1.01407,0,0,0,97.717,22.48455Z"/><path class="cls-229" d="M102.87836,48.97938c-.19052-.01511-.28076-.16023-.3778-.29426a10.77921,10.77921,0,0,0-1.16291-1.24631.29473.29473,0,0,1-.25282-.14893A46.16,46.16,0,0,1,98.3954,43.4164a.78967.78967,0,0,1-.08534-.21315,3.97494,3.97494,0,0,0-.278-.8525.381.381,0,0,1-.03976-.35759c.20822-.09679.27655.08518.338.20067.51758.97289,1.22974,1.8181,1.79435,2.75879.11546.19238.33915.313.36563.56071a9.30619,9.30619,0,0,0,1.12073,1.76459c.37434.52745.80078,1.01783,1.20044,1.52755A.6386.6386,0,0,1,102.87836,48.97938Z"/><path class="cls-230" d="M100.49026,45.51333a4.781,4.781,0,0,1-.91956-1.24987,13.3173,13.3173,0,0,1-1.26425-1.94178.64411.64411,0,0,0-.28132-.35124,3.01027,3.01027,0,0,1-.62341-1.09633c-.01275-.214-.141-.42152-.03752-.64215.24113-.13184.27609.0953.34485.21691a13.80487,13.80487,0,0,0,.82746,1.31995c.60972,1.07777,1.311,2.09819,1.97654,3.14109a.32217.32217,0,0,1,.05387.1413,9.28026,9.28026,0,0,0,.81174,1.23016c.04646.07555.11366.13647.11343.2332-.373-.08248-.41276-.47464-.63635-.69837A1.1299,1.1299,0,0,0,100.49026,45.51333Z"/><path class="cls-120" d="M99.7201,46.9q-.34682-.63571-.6939-1.27129a1.62749,1.62749,0,0,1-.30775-.73171c.20689-.04063.2869.12973.39179.24582.19627.21721.32639.48376.51114.7103a7.16273,7.16273,0,0,1,.65821.84967c.59362.86832,1.33325,1.61541,1.98887,2.4314.72953.908,1.51871,1.76082,2.30468,2.61771a.47559.47559,0,0,1,.23018.23151c-.15193.16832.03927.229.11257.296.58366.53342,1.06617,1.166,1.66676,1.68353a4.24121,4.24121,0,0,1,.452.56162.95926.95926,0,0,1-.68179-.33892c-.23912-.2008-.43209-.472-.77875-.50788a13.53247,13.53247,0,0,1-1.67192-1.73211c-.50853-.56807-1.03126-1.1247-1.52371-1.7097-.76278-.90612-1.48829-1.83783-2.194-2.78722C100.04189,47.25679,99.87554,47.08244,99.7201,46.9Z"/><path class="cls-231" d="M104.57314,51.75188a18.41091,18.41091,0,0,1-2.14435-2.28427c-.51687-.59384-1.02349-1.19627-1.54835-1.7837-.3974-.44478-.71447-.96133-1.06731-1.44592l-.24729-.33938c-.48925-.86487-1.03385-1.69829-1.47475-2.59051-.07176-.1452-.17858-.28772-.09895-.4671.30241-.06806.26194.26048.41817.36166a19.0241,19.0241,0,0,0,1.6451,2.52566c.416.57839.854,1.14089,1.28224,1.71049.29974.55985.67331,1.07235,1.02223,1.6009a24.53793,24.53793,0,0,0,2.06973,2.45158C104.49715,51.56927,104.57558,51.63716,104.57314,51.75188Z"/><path class="cls-232" d="M100.56692,45.05121c-.29073-.17671-.38437-.50036-.55788-.762a23.18628,23.18628,0,0,1-1.52189-2.47288c-.17583-.39056-.47726-.73777-.418-1.20971.06758-.07976.14131-.042.21478-.01173a1.47224,1.47224,0,0,1,.35682.48825,26.24915,26.24915,0,0,0,1.63183,2.53214.76765.76765,0,0,1,.21767.51168,6.70529,6.70529,0,0,0,.75809,1.298,1.36223,1.36223,0,0,1,.32041.55064A4.936,4.936,0,0,1,100.56692,45.05121Z"/><path class="cls-233" d="M100.49026,44.127c-.67733-.94156-1.29736-1.92-1.88486-2.91961-.10945-.18622-.23243-.3645-.34917-.54644-.13377-.32845-.48591-.5635-.41868-.978.14319-.10342.21614.01679.26438.10666.20512.38208.5347.66843.77078,1.02558l1.77162,2.6955a16.59666,16.59666,0,0,0,1.267,1.92235,1.434,1.434,0,0,1,.35074.61946c-.46413-.18381-.65323-.63466-.93241-.98952C101.06868,44.73121,100.74791,44.45829,100.49026,44.127Z"/><path class="cls-234" d="M74.45209,38.88967a1.03542,1.03542,0,0,1,.11274-1.06942c.0659-.105.19717-.16887.19578-.31642.02863-.2791.22943-.35091.46245-.38468a1.80274,1.80274,0,0,1,.82683.65751,2.54442,2.54442,0,0,0,.08508,1.019.24028.24028,0,0,1-.06476.24822c-.15333.39091-.544.34659-.84757.462C74.88172,39.40558,74.73665,39.06046,74.45209,38.88967Z"/><path class="cls-235" d="M76.07021,39.0439a2.35527,2.35527,0,0,1-.07722-1.30959c-.00186-.30525.25935-.41779.44163-.57818a1.449,1.449,0,0,0,.46529-.54578.53206.53206,0,0,1,.44084-.325.30458.30458,0,0,1,.31892.14824c.06656.38072.27327.75835.02829,1.1469a.56149.56149,0,0,1-.27651.4308c-.55539.22368-.67826.80237-1.03309,1.18647A.42133.42133,0,0,0,76.07021,39.0439Z"/><path class="cls-236" d="M90.09048,15.55281a5.89116,5.89116,0,0,1,2.31106,1.69442.60411.60411,0,0,1-.639.02231,1.4824,1.4824,0,0,0-.69346-.12626c-.6249-.18518-1.2614-.32693-1.88994-.49824a5.023,5.023,0,0,0-1.31833-.22346,1.20543,1.20543,0,0,1-.62041-.17555,4.301,4.301,0,0,1-.8479-.308.862.862,0,0,1,.61661-.69349Z"/><path class="cls-237" d="M85.1601,19.01886c-.40777.00775-.72966-.26806-1.12689-.32513a4.83843,4.83843,0,0,0-3.01663.58147,10.62779,10.62779,0,0,0-1.90165,1.13638,15.31055,15.31055,0,0,1-2.3871,1.34156,2.46537,2.46537,0,0,1-.96595.192c-.00668-.11691.01056-.2419-.18673-.1832a1.50581,1.50581,0,0,1-.62035.00957c.10233-.37089.39284-.47825.67576-.59165a.99224.99224,0,0,0,.59354-.38968,9.95124,9.95124,0,0,0,2.96679-1.35868,9.34374,9.34374,0,0,1,2.22561-1.17565c.46659-.16265.94039-.30469,1.40654-.46852a11.29013,11.29013,0,0,1,1.875-.309,2.5895,2.5895,0,0,1,1.51727.21245.55728.55728,0,0,1,.20675.78649c-.14019.15781-.22174.30869-.018.49026.07466.06654.17636.19244-.02734.25745A6.11324,6.11324,0,0,1,85.1601,19.01886Z"/><path class="cls-238" d="M86.2387,17.78653a7.50048,7.50048,0,0,0-1.5407-.30819,3.23773,3.23773,0,0,0-1.81463-.2449,2.32144,2.32144,0,0,1-.57347.01384c.64691-.154,1.29343-.30976,1.941-.46085.14711-.03433.298-.05264.44707-.07833a6.32732,6.32732,0,0,1,1.54127.104,5.58539,5.58539,0,0,1,1.07793.20417c.53586.36424,1.16279.57583,1.667.9925.11407.09426.33709.1558.13861.371a1.07791,1.07791,0,0,1-.71064-.05882,8.89424,8.89424,0,0,0-1.76051-.35154A.84335.84335,0,0,1,86.2387,17.78653Z"/><path class="cls-239" d="M74.45228,25.33439c.16053-.08.318-.16688.48205-.23887a24.386,24.386,0,0,0,4.91288-3.09943,12.25283,12.25283,0,0,1,2.75109-1.58033,3.833,3.833,0,0,1,2.068-.05356,3.5921,3.5921,0,0,0,.41686.04291c.36265.23561.6782.53714,1.05787.75021.07944.04458.19094.125.041.23067a1.61682,1.61682,0,0,1-.78694-.08318,7.98913,7.98913,0,0,0-1.31343-.20462,1.1993,1.1993,0,0,0-1.06216-.14107,6.41313,6.41313,0,0,0-2.29614,1.08213,5.85365,5.85365,0,0,0-1.0298.80994c-.30412.29776-.72314.50436-1.05585.79657-.36914.32421-.76605.61786-1.15736.90656-.58033.42816-1.12563.8923-1.68774,1.33706a1.13719,1.13719,0,0,1-.99731.23023.66128.66128,0,0,0-.62555.09657.93548.93548,0,0,1-.719.19638A4.93429,4.93429,0,0,0,74.45228,25.33439Z"/><path class="cls-240" d="M74.29821,29.10824c-.13649-.012-.29243.04821-.40635-.03947-.21688-.16694-.38295-.34808-.17836-.659.12793-.19441.34315-.34663.3536-.61087a2.55581,2.55581,0,0,0,1.24633-.86456c.1694-.255.52439-.38544.79176-.57748a1.33778,1.33778,0,0,0,.321-.26921c.36686-.51076.97419-.7172,1.41152-1.13632.03636-.03485.10074-.04928.12246-.08928.30609-.56361.89646-.80673,1.36374-1.18009a14.07221,14.07221,0,0,1,1.64236-1.27865,10.77887,10.77887,0,0,1,1.82831-.99494,1.88541,1.88541,0,0,1,1.22909.07123.92893.92893,0,0,0,.366.08074.114.114,0,0,1,.09292.12569c-.14206.17563-.35787.14647-.54559.19028-.13228.03087-.27342.02965-.3608.15854a.27745.27745,0,0,1-.17672.06756c-1.0495-.05085-1.71483.69946-2.49929,1.1991-.0955.06082-.16337.16492-.26346.22286A13.95392,13.95392,0,0,0,77.91057,25.82a18.89028,18.89028,0,0,1-1.582,1.51457,1.37589,1.37589,0,0,0-.323.37944c-.34882.57984-.96847.8678-1.42594,1.33028A.23712.23712,0,0,1,74.29821,29.10824Z"/><path class="cls-241" d="M84.467,21.63756l-.0773-.07721a.34985.34985,0,0,0-.308-.46216c.3792-.19881.74138.0071,1.10769.05475a6.7961,6.7961,0,0,0,1.04949.1764,1.19164,1.19164,0,0,1,.74085.11615,10.34661,10.34661,0,0,1,3.15461,1.79333A14.08641,14.08641,0,0,1,94.33683,28.303q.291.60627.52427,1.23772c.05326.1431.16122.31343-.04995.43531-.15023-.04134-.15512-.18357-.21112-.29449a13.553,13.553,0,0,0-1.40573-2.22242,1.759,1.759,0,0,0-.39393-.36079,11.65669,11.65669,0,0,0-1.80471-1.98251,12.7678,12.7678,0,0,0-2.6969-2.08324,8.67484,8.67484,0,0,0-1.41355-.57189c-.74445-.2306-1.502-.42426-2.23723-.68632A.36474.36474,0,0,1,84.467,21.63756Z"/><path class="cls-242" d="M85.1601,19.01886a3.50652,3.50652,0,0,1,1.30957.15356c.15946-.13067.32026-.0393.46906.01274a8.69883,8.69883,0,0,1,1.85062.78522c-.01321.42146.34356.62612.54316.92309.06549.09744.24842.16256.08745.322-.54612-.08877-1.0962-.14364-1.64529-.20663-.68558-.129-1.34468-.35953-2.01977-.52907a.31364.31364,0,0,1-.20951-.15182.28414.28414,0,0,0-.16446-.14915q-.8816-.34674-1.76143-.698a.1591.1591,0,0,1,.15407-.077A1.74365,1.74365,0,0,0,85.1601,19.01886Z"/><path class="cls-243" d="M85.54539,20.328l2.234.61622a2.48873,2.48873,0,0,1,.9082.3985,18.48189,18.48189,0,0,1,3.60485,2.866,11.10923,11.10923,0,0,1,2.79221,4.76167c.3694,1.359.56084,2.764,1.05641,4.0907a.348.348,0,0,1,.00834.2272.11788.11788,0,0,1-.08277.07559c-.17377-.03259-.19274-.18425-.24155-.31347a7.57646,7.57646,0,0,0-.55566-1.26153,13.35947,13.35947,0,0,0-.44534-1.54c-.031-.096-.08482-.18826-.03408-.29329.12977-.34229-.10948-.60382-.22007-.87915a12.88253,12.88253,0,0,0-3.32365-4.771,14.40106,14.40106,0,0,0-3.14156-2.30063,8.26638,8.26638,0,0,0-1.86585-.67545c-.39477-.29617-.8844-.47375-1.15572-.92423A1.38678,1.38678,0,0,1,85.54539,20.328Z"/><path class="cls-244" d="M89.16624,18.32512a3.65813,3.65813,0,0,0-1.33779-.88592.91878.91878,0,0,1-.51125-.42288l.61647-.00052c.28134-.18775.54934-.02932.80509.05427a10.79829,10.79829,0,0,1,2.51772,1.11725,20.9102,20.9102,0,0,1,3.1929,3.08889,11.14,11.14,0,0,1,2.03689,4.75926c.05619.32868.01867.66454.07518.99325a13.64594,13.64594,0,0,0,.56419,3.798,18.01848,18.01848,0,0,0,.96293,3.2897.47381.47381,0,0,1,.01359.15184.159.159,0,0,1-.15407.07749c-.20554-.01573-.20567-.2-.25721-.3299a37.5739,37.5739,0,0,1-1.22414-3.94245c-.03714-.13525-.07884-.26881-.12044-.40242a12.69628,12.69628,0,0,1-.27486-2.05276,9.64193,9.64193,0,0,0-.37022-1.76526,9.0422,9.0422,0,0,0-1.89884-3.8619,11.54532,11.54532,0,0,0-4.4609-3.43734A.34337.34337,0,0,1,89.16624,18.32512Z"/><path class="cls-245" d="M91.246,18.24862a16.17309,16.17309,0,0,0-2.13324-.938,4.207,4.207,0,0,0-1.1791-.29478.406.406,0,0,0-.23651-.392c-.16323-.10991-.36448-.18029-.45681-.37781a13.30705,13.30705,0,0,1,3.85155.84718,5.54842,5.54842,0,0,1,1.05214.7474.23645.23645,0,0,1,.10634.29811A.77066.77066,0,0,1,91.246,18.24862Z"/><path class="cls-246" d="M74.29821,29.10824a7.39706,7.39706,0,0,0,1.49536-1.29289,7.08112,7.08112,0,0,1,.90715-.92707c.90526-.87,1.76349-1.78865,2.708-2.6182a3.94157,3.94157,0,0,1,.33269-.25767c.90716-.639,1.78916-1.31466,2.74541-1.882.33534-.199.70377-.07174,1.0556-.108.10926-.088.21887-.031.326.00259,1.02189.32016,2.05715.59818,3.06309.96847.13738.05057.31078.066.3259.26868a.358.358,0,0,1-.35578.16482,5.21788,5.21788,0,0,1-1.30563.00334,1.91169,1.91169,0,0,1-.6188-.20021,4.00291,4.00291,0,0,0-2.12963-.34163.92174.92174,0,0,0-.42881.15278,17.54069,17.54069,0,0,0-2.81478,2.135,11.95043,11.95043,0,0,0-1.66845,1.74468,7.02224,7.02224,0,0,1-1.43771,1.48942,6.0644,6.0644,0,0,0-.76075,1.0091c-.05658.06817-.09187.15636-.18892.182-.25165.04276-.469.18932-.71727.24006a1.057,1.057,0,0,1-.841-.03989C74.01616,29.53647,74.215,29.34806,74.29821,29.10824Z"/><path class="cls-247" d="M73.98993,29.8016a2.28242,2.28242,0,0,0,1.42907-.30933c.08943-.05758.1033.01053.11178.078.12138.18664-.00921.34347-.06807.50348-.06635.18041-.1198.36421-.17621.54739-.24249.355-.44837.74884-.91078.87556a4.14885,4.14885,0,0,1-.8656-.08455.28738.28738,0,0,1-.29571-.32021,4.71856,4.71856,0,0,1,.08234-.75131A1.26637,1.26637,0,0,1,73.98993,29.8016Z"/><path class="cls-248" d="M75.22264,37.19488a.64963.64963,0,0,0-.462.309.36522.36522,0,0,1-.42642-.00112,4.46865,4.46865,0,0,0-1.34558-.69255c.172-.29907.16076-.68978.46221-.92414.54127-.51375,1.09373-.21645,1.64529-.02314A1.238,1.238,0,0,1,75.22264,37.19488Z"/><path class="cls-249" d="M75.06838,35.886c-.122-.02475-.24677-.04014-.3654-.07593a1.62694,1.62694,0,0,0-1.25216.07593c-.16942-.46188-.61119-.67238-.92461-1.00134a.30259.30259,0,0,1,.21062-.29084c.33352-.10451.35543-.352.329-.6333.38012-.19472.58464-.15877.95132.16721.43266.38464.43342.38583.93366.0696a.52841.52841,0,0,1,.384-.13464c.42142.05682.509.35854.52479.71344A1.3239,1.3239,0,0,1,75.06838,35.886Z"/><path class="cls-250" d="M74.37573,31.49671a6.69368,6.69368,0,0,0,.84691-.84817c.41789-.48353.87721-.92788,1.2961-1.41231a44.24661,44.24661,0,0,1,3.46244-3.90795c.69213-.63214,1.44707-1.184,2.18345-1.76021a1.90023,1.90023,0,0,1,1.05737-.30271,3.45,3.45,0,0,1,1.74727.32681,2.26686,2.26686,0,0,0,1.0631.70793,2.26118,2.26118,0,0,1,.60374.32067c.0857.07175.24295.13878.1045.2981a1.21652,1.21652,0,0,1-.87789-.14936,4.46178,4.46178,0,0,0-1.87853-.41506,5.56485,5.56485,0,0,0-.71727-.11882,1.874,1.874,0,0,0-1.26153.55454c-.65554.62723-1.40662,1.14878-2.03426,1.814A8.30531,8.30531,0,0,0,78.69182,28.278c-.02477.045.01679-.00106-.01934.03259a13.09967,13.09967,0,0,0-1.47081,2.36735c-.07426.1054-.13568.21865-.26645.26527a2.63516,2.63516,0,0,0-1.51735.94035,2.42675,2.42675,0,0,1-.36.39546.36369.36369,0,0,1-.46207.01674c-.13969-.09348-.331-.17984-.22071-.41474Z"/><path class="cls-251" d="M74.37506,31.881c.22.48486.478.54478.79636.15724a2.32272,2.32272,0,0,1,.5923-.63839c.36978-.19654.6683-.57694,1.1537-.52019.11239.1642-.00533.28926-.08455.40728a5.21654,5.21654,0,0,0-.35878.61576,3.44891,3.44891,0,0,0-1.07117,1.85849c-.02192.1221.00536.2571-.10344.35327-.11394-.00256-.17951.07955-.26071.14078-.5494.41437-.59469.41888-1.0733-.05589a.89068.89068,0,0,0-.89964-.23883c-.06535-.35233-.342-.599-.46221-.92391q.67413-.50091,1.34816-1.002A.62294.62294,0,0,1,74.37506,31.881Z"/><path class="cls-252" d="M82.38712,44.281c-.2776-.3469-.039-.73011-.05421-1.0928a6.16031,6.16031,0,0,0-.00671-.74375c-.03017-.19143-.1415-.482.2148-.551a2.36253,2.36253,0,0,1,.94333.28141,15.40568,15.40568,0,0,0,3.63485.92654,2.61986,2.61986,0,0,1,.37683.07135c1.40908.46109,2.69637-.05117,3.98358-.511.40363-.14419.63614-.54583.98116-.789a4.00672,4.00672,0,0,1,.43092-.31821c.24745-.10828.40487.0742.58066.18589a7.10112,7.10112,0,0,1,1.009.84622,3.43427,3.43427,0,0,0,.17222,1.25773.38546.38546,0,0,1-.172.43669.30632.30632,0,0,0-.30764.11938c-.3928.63593-1.0953.755-1.70493,1.02593-.32651.14511-.66677.259-.99551.39946a1.71144,1.71144,0,0,1-.74357.15173,21.47431,21.47431,0,0,1-5.64168-.90463,14.08386,14.08386,0,0,0-2.43535-.64822A.85145.85145,0,0,1,82.38712,44.281Z"/><path class="cls-253" d="M94.48131,42.5866c-.48907-.16295-.74491-.64925-1.19991-.86581-.11244-.05352-.20136-.15126-.34061-.13535a.5785.5785,0,0,1-.1852-.33,5.1235,5.1235,0,0,0-.63976-1.43534.44171.44171,0,0,1-.082-.29112c.1184-.2663.39982-.34922.59566-.52909.39535-.06432.52424.28015.74484.48473.3157.76758.93172,1.34709,1.30414,2.07873.08828.17342.26205.33725.11135.56106Z"/><path class="cls-254" d="M94.78983,42.12439a4.24758,4.24758,0,0,0-.79595-1.447,3.13724,3.13724,0,0,1-.66791-1.17149c-.20487-.33274-.02549-.68242-.04559-1.02318.17176-.16211.2417.01723.31158.10953a10.9313,10.9313,0,0,1,.65811,1.06813l1.23255,2.6184c-.09665.11018-.03121.285-.15354.38491C95.13891,42.49435,95.07526,42.19854,94.78983,42.12439Z"/><path class="cls-255" d="M93.24912,35.50075a4.67475,4.67475,0,0,0-1.30923-.69319,3.809,3.809,0,0,1-.82528-1.07669,4.08033,4.08033,0,0,0-1.10027-1.64537c-.46567-.52684-.94815-1.04281-1.43663-1.55156a8.94938,8.94938,0,0,0-2.61722-1.65011c-.39957-.19989-.83338-.33142-1.25089-.495a2.97658,2.97658,0,0,0-1.32254-.16727.64836.64836,0,0,0-.386.15873,4.23272,4.23272,0,0,0-.98618,1.17085A16.66987,16.66987,0,0,0,80.71949,33.158c-.15845.62046-.32595,1.24-.43709,1.87248a3.25618,3.25618,0,0,1-.57128.61386.29679.29679,0,0,1-.34245.10426.4655.4655,0,0,1-.17162-.44142,6.05163,6.05163,0,0,1,.02294-.953c.21231-.50778.40394-1.02644.65906-1.515a19.30453,19.30453,0,0,0,.84646-2.101,5.64371,5.64371,0,0,1,1.08525-2.01494,2.482,2.482,0,0,0,.37084-.4906,1.52636,1.52636,0,0,1,1.72259-.69281,4.90583,4.90583,0,0,1,1.70627.6743c.72683.38435,1.48181.7055,2.21378,1.07635a10.165,10.165,0,0,1,2.15765,1.78164,26.6289,26.6289,0,0,1,2.14468,2.20553,3.27367,3.27367,0,0,1,.41912.60535,7.69792,7.69792,0,0,0,.62291,1.1736C93.24934,35.19134,93.38783,35.3231,93.24912,35.50075Z"/><path class="cls-256" d="M91.16916,33.72938l.77072,1.07819.61734.92479a.76212.76212,0,0,1,.33312.65716c-.0022.39952.1962.79163.043,1.19573-.16578.02544-.216-.12177-.28725-.213a9.79,9.79,0,0,0-1.28949-1.31521A11.85372,11.85372,0,0,0,89.44445,33.407a1.08441,1.08441,0,0,1-.29817-.39435,1.14653,1.14653,0,0,1,.04018-.94817.24547.24547,0,0,1,.37655.01126A15.526,15.526,0,0,1,91.176,33.65709C91.18984,33.67483,91.18059,33.70439,91.16916,33.72938Z"/><path class="cls-257" d="M98.02515,42.81737a5.76906,5.76906,0,0,0,.76126,1.56255,9.96136,9.96136,0,0,1,.77943,1.51869c-.31572-.30576-.45113-.764-.84739-1.00163-.59018-.94908-1.17824-1.89949-1.77312-2.84563-.077-.12246-.12418-.28757-.30665-.31187a.52078.52078,0,0,0-.07091-.2947c-.47284-.83413-.77186-1.75777-1.31611-2.55518a1.74005,1.74005,0,0,1-.35109-1.19762c.24335-.12333.27094.11937.35084.228.47886.65078.80383,1.3932,1.21934,2.08218a19.7116,19.7116,0,0,0,1.45737,2.46624C98.00017,42.56787,98.08689,42.67521,98.02515,42.81737Z"/><path class="cls-258" d="M92.86394,37.58025c.2138-.23911-.02635-.4748-.0321-.70974a1.54794,1.54794,0,0,0-.27464-1.13816c.15873-.00338.206.1239.276.22956a35.02421,35.02421,0,0,1,2.0333,3.62084,1.59811,1.59811,0,0,0-.61642.07764c-.32713-.16333-.37088-.53542-.57878-.78714-.1195-.14468-.17264-.34118-.34514-.4455A1.61619,1.61619,0,0,1,92.86394,37.58025Z"/><path class="cls-259" d="M94.94368,37.65812a6.55177,6.55177,0,0,0,.308,1.23148,2.24606,2.24606,0,0,1-.6562-.95,14.18463,14.18463,0,0,0-1.34634-2.43885c-.04225-.38227-.344-.63289-.49728-.96087a3.21485,3.21485,0,0,1-.2736-.656c.33459.02836.49981.31489.72977.495a3.91465,3.91465,0,0,1,.81671.94528A6.50455,6.50455,0,0,1,94.94368,37.65812Z"/><path class="cls-260" d="M92.24747,18.09444a4.39361,4.39361,0,0,0-.92094-.76363.76515.76515,0,0,1-.23463-.2376c.18133-.17209.37248-.05725.53166.01651a1.5564,1.5564,0,0,0,.778.13751,10.94346,10.94346,0,0,1,2.167,1.867,9.53934,9.53934,0,0,1,1.81665,3.04321,10.26737,10.26737,0,0,1,.71678,3.27457,7.38061,7.38061,0,0,1,.15278,1.28859,5.64532,5.64532,0,0,0,.13735,1.61236.29319.29319,0,0,1-.13721.39,9.76466,9.76466,0,0,1-.3855-2.69532c-.22246-.11781-.197-.35069-.22549-.5408a11.89249,11.89249,0,0,0-.86846-3.01494,9.16129,9.16129,0,0,0-1.77364-2.67233,15.04972,15.04972,0,0,0-1.50191-1.42613C92.40218,18.29569,92.28332,18.2308,92.24747,18.09444Z"/><path class="cls-261" d="M92.24747,18.09444a2.387,2.387,0,0,1,.72882.55284,10.62212,10.62212,0,0,1,3.744,6.75094,6.45721,6.45721,0,0,0,.1491.6294.68728.68728,0,0,0-.25607.80025.15237.15237,0,0,1-.05189.20085c-.103-.55754-.17918-1.12166-.314-1.6714a11.01735,11.01735,0,0,0-2.26632-4.50324,28.17214,28.17214,0,0,0-2.565-2.40026,2.02851,2.02851,0,0,1-.17007-.2052A1.333,1.333,0,0,0,92.24747,18.09444Z"/><path class="cls-262" d="M96.40738,29.64728c.32129.73663.44142,1.53369.68871,2.29293a21.13659,21.13659,0,0,0,.852,2.40553c.14212.60753.48446,1.14121.64314,1.74264.01611.06106.03355.12177.05037.18264a.51879.51879,0,0,0-.30814-.077,9.5899,9.5899,0,0,1-.82268-1.6314c-.36449-.84566-.61579-1.73276-.97874-2.57817a3.45834,3.45834,0,0,1-.23786-1.11308C96.24477,30.45519,96.1167,30.03175,96.40738,29.64728Z"/><path class="cls-263" d="M96.6383,31.958a.91537.91537,0,0,1,.08783.16271,28.432,28.432,0,0,0,1.55246,3.89192,1.23521,1.23521,0,0,1,.05487.18133,20.32555,20.32555,0,0,0,1.6099,3.19421,2.14674,2.14674,0,0,1,.39268.73368,13.67272,13.67272,0,0,1-1.11053-1.528c-.04444-.07071-.05642-.1719-.16679-.18959-.08966.17652.08072.32115.0449.48526a8.52112,8.52112,0,0,0-.61628-.92414c-.145-.03051-.19722-.14782-.253-.26505q-1.07305-2.25423-1.91953-4.60313c-.19442-.64609-.33411-1.30655-.52309-1.95411a.87978.87978,0,0,1-.0345-.704c.19809-.07187.26058.09869.28217.21007.11443.59043.422,1.11493.552,1.61429A.28583.28583,0,0,1,96.6383,31.958Z"/><path class="cls-264" d="M96.4072,33.11318c.36026.9142.70225,1.83618,1.0866,2.74015.30421.71549.66042,1.4089.99354,2.11211a3.65183,3.65183,0,0,0,.40115,1.18611c.038.12062.09163.23632.1381.35428a6.40689,6.40689,0,0,1-.88107-1.49484c-.183-.33178-.40209-.63853-.5826-.96952-.16061.01414-.17764-.12534-.22166-.22094A19.28365,19.28365,0,0,1,96.156,33.86477c-.04634-.16966-.13686-.33614-.05677-.52026l.00019-.00031C96.20764,33.27468,96.22344,33.0821,96.4072,33.11318Z"/><path class="cls-265" d="M79.30551,34.26853c0,.36886.00113.73773-.00054,1.10658-.00064.1429-.00538.28479.15462.35687a.46285.46285,0,0,1-.02717.40666,7.27628,7.27628,0,0,0-.54479,1.74859.34653.34653,0,0,1-.12136.23235,1.36918,1.36918,0,0,0-.31168.133c-.21069.15938-.3113.02355-.36726-.14a.90822.90822,0,0,0-.39937-.53206c.05521-.39053-.09974-.767-.07723-1.15536a.71069.71069,0,0,1,.157-.81488,11.92236,11.92236,0,0,0,1.04913-1.9035c.17221-.28278.29066-.59721.45634-.88491.07919-.13752.15563-.306.37353-.243a.54129.54129,0,0,1,.08247.60128C79.59172,33.54437,79.43738,33.90208,79.30551,34.26853Z"/><path class="cls-266" d="M78.76627,38.11958a5.62311,5.62311,0,0,1,.50226-1.85458c.07859-.17082.12817-.355.19106-.533l.77054-.69336c.11234-.02651.17446.03448.21976.12551a1.77072,1.77072,0,0,1-.14273,1.3379c-.49092.6623-.725,1.46221-1.1559,2.15666A.74551.74551,0,0,1,78.76627,38.11958Z"/><path class="cls-267" d="M82.46379,41.73929a1.96825,1.96825,0,0,1-.92422-.46213,11.25081,11.25081,0,0,1-.51386-1.78475c-.01378-.03459.03279-.09319.05128-.14062a1.5716,1.5716,0,0,1,.22363-1.11065c.64051-.463.8616-.37131,1.5258.443-.06509.34337.13984.66364.08813,1.00649a8.72339,8.72339,0,0,0-.2754,1.60509A.54.54,0,0,1,82.46379,41.73929Z"/><path class="cls-268" d="M81.38547,38.27343c-.24.32022-.16819.72962-.30848,1.07836-.33967.00892-.44744-.32983-.693-.462a5.4246,5.4246,0,0,1,.23111-2.07968,12.10138,12.10138,0,0,1,.723-1.72086c.04351-.1194.14826-.23686.27217-.04286a20.03326,20.03326,0,0,1-.075,2.21542A2.024,2.024,0,0,1,81.38547,38.27343Z"/><path class="cls-269" d="M81.54,34.96257q-.30256.61191-.60479,1.224c-.103.20979-.10561.47091-.32011.62351a.79177.79177,0,0,0-.308-.30806,6.07493,6.07493,0,0,0,.07685-1.3863,4.5744,4.5744,0,0,1,.394-1.14781,6.04688,6.04688,0,0,0,.48808-1.27521c.0283-.14176.036-.37572.30323-.33236a.42552.42552,0,0,1,.03525.36891,4.94864,4.94864,0,0,0,.06493,2.00158C81.67438,34.83481,81.70037,34.95109,81.54,34.96257Z"/><path class="cls-270" d="M82.46379,41.73929a8.64365,8.64365,0,0,1,.38554-2.07952c.14475-.10235.27225-.01418.394.04626a1.62408,1.62408,0,0,0,.62148.19018,9.15906,9.15906,0,0,1,1.76946.34781,4.27679,4.27679,0,0,0,1.56043-.08681c.40735-.041.811-.1185,1.219-.16108a2.6639,2.6639,0,0,0,1.61279-.63735,3.30839,3.30839,0,0,1,.80474-.52082,1.11648,1.11648,0,0,1,1.26193.668c.102.3968.42441.68257.53886,1.074.09838.33648.20547.67042.30872,1.00548a5.89129,5.89129,0,0,1-3.40016,1.78827,4.97139,4.97139,0,0,1-2.02487-.09088,19.52056,19.52056,0,0,1-3.41707-.76923,9.46729,9.46729,0,0,1-1.55769-.62018Z"/><path class="cls-271" d="M96.09924,33.34451a20.87443,20.87443,0,0,0,1.46368,3.697,6.84558,6.84558,0,0,0,.52225,1.42606c.05564.14126.114.28146.17106.42215l-.53906-.4622a.28245.28245,0,0,1-.17436-.18761c-.25444-.59413-.58705-1.151-.83428-1.74884a15.76069,15.76069,0,0,1-.90774-2.36891c-.18044-.62769-.33828-1.26183-.53744-1.88463a.40064.40064,0,0,1,.06573-.43357,3.58279,3.58279,0,0,1,.60878,1.29956C95.97844,33.20029,95.99413,33.29742,96.09924,33.34451Z"/><path class="cls-272" d="M96.79275,36.5018c.32125.63559.66454,1.26062.92442,1.92567.3224.64465.64664,1.2884.96578,1.93466.07235.14651.127.30179.18976.453a4.8547,4.8547,0,0,1-1.00165-1.15538.32007.32007,0,0,1-.20253-.21218c-.37-.83541-.79379-1.64669-1.12473-2.49955a.73226.73226,0,0,1-.10027-.40009C96.54182,36.39751,96.67346,36.49625,96.79275,36.5018Z"/><path class="cls-273" d="M98.02515,42.81737a21.72746,21.72746,0,0,1-1.61777-2.77222c-.279-.5682-.45512-1.1784-.71712-1.75371a.88361.88361,0,0,1-.15951-.60975c.26959-.08456.33254.157.397.30068.45149,1.007,1.14768,1.88208,1.558,2.90978l.53944,1.07829c.0738.4278.34161.795.38518,1.23222C98.23335,43.12277,98.15505,42.94428,98.02515,42.81737Z"/><path class="cls-274" d="M97.48569,40.89215a8.718,8.718,0,0,1-.68647-1.141c-.44173-.59884-.67888-1.31233-1.0828-1.93216a1.15614,1.15614,0,0,0-.15624-.1617c-.12776-.04-.157-.15832-.20875-.25984a12.70141,12.70141,0,0,1-.96388-2.1751c-.12343-.42226-.41787-.76451-.54976-1.18275a4.11333,4.11333,0,0,0-.30017-1.10421.4485.4485,0,0,1-.02138-.40793c.253-.12826.315.10148.386.23631.233.44217.51272.85706.74193,1.30078a3.55187,3.55187,0,0,1,.33535.85634,19.03479,19.03479,0,0,0,1.46866,3.12118c.293.59788.598,1.19.87569,1.79523.05129.1118.13637.22271.08476.36158Z"/><path class="cls-275" d="M97.40866,40.19886c-.37668-.75286-.747-1.509-1.132-2.2576-.33908-.65941-.72168-1.29781-1.03345-1.96944-.21881-.47135-.34966-.98336-.52261-1.47623a.86893.86893,0,0,0-.16192-.38113,5.40146,5.40146,0,0,0-.35382-1.03176.80805.80805,0,0,1-.08845-.40245c.185-.27592.2507-.01677.30372.08653a11.99616,11.99616,0,0,1,.53712,1.18835,3.06779,3.06779,0,0,0,.42725.81191,3.81038,3.81038,0,0,1,.25706.68138c.495,1.16944,1.10227,2.28343,1.69043,3.406.24981.47682.46738.96961.73155,1.439a.285.285,0,0,1,.03871.29079c.04242.43752.31144.8043.38486,1.23214a6.62615,6.62615,0,0,1-.80372-1.22259C97.59726,40.4584,97.57723,40.27693,97.40866,40.19886Z"/><path class="cls-276" d="M98.10229,40.58422c-.60375-1.18148-1.20394-2.36479-1.81258-3.54375a10.45394,10.45394,0,0,1-.96082-2.23272,2.17,2.17,0,0,1-.35435-1.42705c.0943-.10773.1503-.02248.19537.04738a2.37221,2.37221,0,0,0,.21846.3384,13.797,13.797,0,0,1,.85456,1.95694c.11321.24528.32472.46923.24168.77865a20.87839,20.87839,0,0,0,.88634,2.0784c.16151.36208.33308.71968.50011,1.0793-.02542.23883.15358.38968.24838.57675a.76351.76351,0,0,1,.13679.42441Z"/><path class="cls-277" d="M75.06838,35.886a.245.245,0,0,1,.16041-.2331,1.00068,1.00068,0,0,0,.53328-.84517c.34925-.25417.6984-.50734,1.03177-.78373a.69943.69943,0,0,1,.67734-.15545.26644.26644,0,0,1,.05751.10312.45845.45845,0,0,1-.069.40015.85782.85782,0,0,0-.11453.86484,1.9254,1.9254,0,0,1-.04257,1.11131.63939.63939,0,0,0-.36515.4c-.08042.27224-.35548.3881-.555.56474a5.38946,5.38946,0,0,0-.38948.42163c-.32669-.08-.43856-.46671-.77035-.53944A2.4042,2.4042,0,0,0,75.06838,35.886Z"/><path class="cls-278" d="M77.30259,36.348c-.05633-.04146-.09805-.10816-.07233-.16527.21473-.47678-.02385-.92735-.07364-1.388A.35777.35777,0,0,1,77.275,34.487a.64067.64067,0,0,0,.18189-.52648,5.14681,5.14681,0,0,0,1.267-1.75519,22.45872,22.45872,0,0,0,1.16475-2.58559,2.94636,2.94636,0,0,1,.3108-.57123c.066-.09338.12208-.25091.29271-.13344a3.69719,3.69719,0,0,1-.19454,1.18919,2.7785,2.7785,0,0,0-.16258,1.00481,10.11912,10.11912,0,0,1-.52172,1.46529.49052.49052,0,0,0-.236.24342c-.34934.754-.79455,1.46155-1.089,2.24222a.8309.8309,0,0,1-.236.34573,1.45449,1.45449,0,0,0-.44148,1.0194A.516.516,0,0,0,77.30259,36.348Z"/><path class="cls-279" d="M88.78087,20.02016a12.543,12.543,0,0,0-2.3112-.84774,1.01573,1.01573,0,0,0-.16781-.20052c-.33268-.23589-.14937-.36736.09092-.49227A3.5919,3.5919,0,0,1,88.043,18.883c.693.2965,1.40815.51219,2.11512.75889a12.55162,12.55162,0,0,1,3.2662,2.81,16.85853,16.85853,0,0,1,1.3965,2.1083,11.0896,11.0896,0,0,1,1.22163,4.01249,2.68882,2.68882,0,0,1,.00769,1.06037c-.27179.02914-.2664-.20375-.28466-.35059a12.67686,12.67686,0,0,0-.78807-2.93722,6.61515,6.61515,0,0,0-.55024-1.09131A14.75251,14.75251,0,0,0,92.828,23.05574a10.7847,10.7847,0,0,0-3.64851-2.75823C89.02721,20.2303,88.86244,20.18652,88.78087,20.02016Z"/><path class="cls-280" d="M90.167,19.71185a8.26141,8.26141,0,0,1-1.16641-.3306,18.45416,18.45416,0,0,0-2.60785-.90162c-.01826-.05726-.06965-.1459-.04968-.167.21867-.23093-.00255-.36544-.1044-.52612.99737.06262,1.93758.43576,2.92754.53859a.26866.26866,0,0,1,.15407.15437,7.36,7.36,0,0,0,.80616.89915A.21316.21316,0,0,1,90.167,19.71185Z"/><path class="cls-281" d="M87.24017,23.25474a6.40624,6.40624,0,0,0-1.30464-.49439c-.79419-.25682-1.595-.49313-2.39307-.738-.01578-.18343.07985-.23306.24892-.234a1.54384,1.54384,0,0,0,.67559-.15082c.76971.26531,1.56322.453,2.33829.70463a15.76928,15.76928,0,0,1,1.58272.628,8.70981,8.70981,0,0,1,1.8531,1.34317,16.79761,16.79761,0,0,1,2.28862,2.2594c.12235.14614.1387.36678.334.456a10.03991,10.03991,0,0,1,1.46632,2.65348.27925.27925,0,0,1,.02281.25637c-.28632.06075-.34141-.1919-.41163-.35116a13.41754,13.41754,0,0,0-2.0375-2.72846,1.13789,1.13789,0,0,0-.29666-.24276,26.01539,26.01539,0,0,0-2.24377-2.0182,8.81254,8.81254,0,0,0-1.93525-1.218A.3866.3866,0,0,1,87.24017,23.25474Z"/><path class="cls-282" d="M94.32724,29.95556A13.457,13.457,0,0,0,92.93093,27.203a.66729.66729,0,0,1-.06718-.17429,5.588,5.588,0,0,1,1.31158,1.71142,3.50483,3.50483,0,0,1,.61468,1.2154,5.41156,5.41156,0,0,1,.53907,1.84837,5.52537,5.52537,0,0,0,.39776,1.59032,11.61256,11.61256,0,0,0,.92031,2.67286,3.27231,3.27231,0,0,1,.1456.43471c-.10259.14076-.2054.039-.30814.00027L95.32889,33.8063c-.44037-1.1717-.66347-2.40587-1.03393-3.59772A.243.243,0,0,1,94.32724,29.95556Z"/><path class="cls-283" d="M88.78087,20.02016a10.64342,10.64342,0,0,1,3.84306,2.65638,13.26417,13.26417,0,0,1,1.56557,1.96295,11.56445,11.56445,0,0,1,1.42989,3.31956c.10735.39071.12682.80479.20928,1.20346.03468.16766.02626.36511.19354.48486.22732.11421.18185.34691.22129.53585a1.86158,1.86158,0,0,0,.1637.69657c.08916.35682.00421.75094.2311,1.07825v.53147a7.74276,7.74276,0,0,1-.64515-1.71509.52763.52763,0,0,0-.20243-.357c-.13244.02189-.1438-.08587-.163-.16625-.04764-.19956-.12143-.392-.158-.5943a11.66832,11.66832,0,0,0-2.59793-5.4544,17.22283,17.22283,0,0,0-3.03778-2.69713c-.1306-.09775-.30067-.15422-.35986-.33033-.27955-.21262-.40031-.57208-.71177-.75841C88.54087,20.2841,88.81527,20.15508,88.78087,20.02016Z"/><path class="cls-284" d="M89.47419,21.17505A11.98563,11.98563,0,0,1,91.29492,22.507a12.01112,12.01112,0,0,1,2.52875,2.80891A11.38946,11.38946,0,0,1,95.567,29.65749a6.72715,6.72715,0,0,0,.22374.76,10.69914,10.69914,0,0,0,.41686,1.886c.0442.27121.17.53008.19961.80974-.10373.0755-.13544.24689-.30777.231-.13-.72037-.4642-1.38342-.61-2.09543-.17133-.83672-.33823-1.67174-.56489-2.497a10.4245,10.4245,0,0,0-1.77119-3.38219,15.99624,15.99624,0,0,0-4.18675-3.73026c-.385-.25664-.82136-.41368-1.18718-.6952.09257-.04253.18253-.1.29074-.04671a1.62777,1.62777,0,0,0,.90257.11768C89.17482,20.99485,89.29589,21.16074,89.47419,21.17505Z"/><path class="cls-285" d="M96.4072,30.87979c-.2667-.26065-.18341-.635-.30516-.94309a2.6823,2.6823,0,0,1-.07983-.28933,11.35494,11.35494,0,0,0-1.2935-5.05066,18.76832,18.76832,0,0,0-1.32029-2.00987,14.55844,14.55844,0,0,0-3.24138-2.875.34343.34343,0,0,0-.175-.35161,1.69931,1.69931,0,0,1-.67168-.88075,7.40494,7.40494,0,0,1,2.59881,1.5056,10.56505,10.56505,0,0,1,3.19285,3.8747,11.54786,11.54786,0,0,1,1.072,4.12431c.03091.55681.14645,1.10892.22343,1.66318A2.69957,2.69957,0,0,0,96.4072,30.87979Z"/><path class="cls-286" d="M84.9291,23.63987a3.99873,3.99873,0,0,0-2.24662-.21162,3.43647,3.43647,0,0,0-1.18359.75993A18.39541,18.39541,0,0,0,78.97275,26.481c-.62764.68788-1.17905,1.44356-1.79542,2.13848a9.80387,9.80387,0,0,1-1.95469,2.02905c-.02486-.39586.25287-.70528.30814-1.07826a6.43989,6.43989,0,0,1,1.1497-1.44405,5.919,5.919,0,0,0,1.28944-1.4094,11.42389,11.42389,0,0,1,.92538-.95813A15.62982,15.62982,0,0,1,81.325,23.67087a9.04037,9.04037,0,0,1,1.17748-.787,1.52829,1.52829,0,0,1,.95846-.12461,4.742,4.742,0,0,1,1.8292.49574,1.07857,1.07857,0,0,0,.25524.07679c.13311.0948.30606.09955.43915.19582.10971.07935.24361.14124.19355.31724A4.22538,4.22538,0,0,1,84.9291,23.63987Z"/><path class="cls-287" d="M86.16167,23.794c-.13037-.2541-.48588-.20809-.61628-.46215a6.09749,6.09749,0,0,0,1.69478-.07706,3.35457,3.35457,0,0,1,1.361.6602,19.18626,19.18626,0,0,1,2.9156,2.50029,1.67187,1.67187,0,0,1,.11443.15128,6.32744,6.32744,0,0,1,1.54091,2.16c.16022.37559.43322.69309.59905,1.06725.09595.21647.24225.43055.12259.68816-.19414.081-.26293-.07971-.34767-.19031a3.45849,3.45849,0,0,0-.41133-.53012,18.04779,18.04779,0,0,0-3.96055-4.3117A8.07486,8.07486,0,0,0,86.6729,24.05,1.272,1.272,0,0,1,86.16167,23.794Z"/><path class="cls-288" d="M77.45648,33.88361a1.90491,1.90491,0,0,0-1.12879.64131,1.20957,1.20957,0,0,1-.56562.28283.59633.59633,0,0,0-.46259-.69327,1.93105,1.93105,0,0,1,.48567-1.46732A.79211.79211,0,0,0,76,32.25255a.4205.4205,0,0,1,.45519-.37162c.17325-.19393.34927-.31828.51935-.00009.075.1403.14317.08674.23259.016.08119-.06417.16136-.1769.2884-.06928a1.18093,1.18093,0,0,0,.40947.75557A2.05872,2.05872,0,0,1,77.45648,33.88361Z"/><path class="cls-289" d="M94.17335,32.651c.09285.49718.46962.91963.38537,1.46343-.25049-.44843-.50327-.89561-.74989-1.34616a.58866.58866,0,0,0-.25192-.2716c-.21723-.05983-.2725-.259-.35359-.42732a12.73846,12.73846,0,0,0-2.23515-3.14423,27.14363,27.14363,0,0,0-2.64506-2.39709,4.66825,4.66825,0,0,0-1.0499-.55521c-.7913-.36618-1.62806-.61875-2.42423-.97279a5.1958,5.1958,0,0,0-.7525-.52488c-.0833-.043-.19849-.08069-.16884-.21915a4.21907,4.21907,0,0,1,2.03509.44194,1.85955,1.85955,0,0,0,.81522.17421,3.63465,3.63465,0,0,1,1.66059.73249A20.07434,20.07434,0,0,1,92.43529,29.466c.17873.21941.39263.40532.561.63262a20.53878,20.53878,0,0,1,1.05868,2.07815A1.5619,1.5619,0,0,1,94.17335,32.651Z"/><path class="cls-290" d="M83.92764,24.256c.29635.24673.71535.32992.92443.693-.21873.1044-.47593-.03066-.68873.11126a2.02813,2.02813,0,0,0-2.35257.65867c-.6455.63473-1.34008,1.22984-1.921,1.92393a13.561,13.561,0,0,0-1.26612,1.963c-.41527.719-.77606,1.46666-1.16774,2.198l-.42425.3556c-.11891-.25654-.23792-.52355-.57646-.27858-.05972-.25035.13867-.38992.24722-.5662a.98007.98007,0,0,0,.215-.43505,6.03249,6.03249,0,0,0,.92026-1.57676,1.63354,1.63354,0,0,1,.40871-.63921c.47513-.42182.66972-1.04547,1.09757-1.5096a15.51924,15.51924,0,0,1,1.86965-1.8123,4.43293,4.43293,0,0,0,.67546-.56095A1.78223,1.78223,0,0,1,83.92764,24.256Z"/><path class="cls-291" d="M92.9406,30.10958a8.85134,8.85134,0,0,1-1.30087-1.44374q-.82153-.91447-1.71722-1.7482a9.13407,9.13407,0,0,0-1.93158-1.48549c-.3937-.20687-.808-.37459-1.213-.56-.32262-.39449-.82535-.46942-1.24459-.69046a1.23859,1.23859,0,0,1-.60426-.54185,3.67852,3.67852,0,0,1,1.23257.15408,8.11872,8.11872,0,0,1,2.803,1.36856,21.42287,21.42287,0,0,1,2.65,2.44373,8.4772,8.4772,0,0,1,1.55724,2.11793A.64361.64361,0,0,1,92.9406,30.10958Z"/><path class="cls-292" d="M92.09321,39.50593a1.56537,1.56537,0,0,0-1.23258-.616c-.21089-.015-.19451-.19706-.23239-.32989-.038-.13321-.02818-.30061-.15735-.37454a1.34022,1.34022,0,0,1-.56157-.91171,5.31673,5.31673,0,0,0-.38389-.90751.17716.17716,0,0,1,.0878-.1922.64011.64011,0,0,0,.336-.58254c.148-.22089.26558-.044.36039.04521a5.39524,5.39524,0,0,1,.77565.82835,11.70052,11.70052,0,0,1,1.48613,2.0496c.095.16483.216.33262.06122.529C92.52771,39.28513,92.266,39.34369,92.09321,39.50593Z"/><path class="cls-293" d="M92.63265,39.04371a.84994.84994,0,0,0-.14876-.5016,14.43747,14.43747,0,0,0-1.46918-2.03992,1.17093,1.17093,0,0,1,.38556-.462,4.68237,4.68237,0,0,1,1.46367,1.5401,2.92611,2.92611,0,0,1,.46221.84749c.15407.35942-.06928.71878-.00018,1.07818C93.06789,39.39229,92.98138,39.02141,92.63265,39.04371Z"/><path class="cls-294" d="M81.53954,32.343a.37329.37329,0,0,0-.14949.25793c-.12671.85569-.69718,1.548-.877,2.38426-.01084.05042-.08458.08732-.12906.1305l-.15388-.07711a10.15539,10.15539,0,0,1,.44054-2.08775,12.6096,12.6096,0,0,1,.6331-2.04111,6.06861,6.06861,0,0,1,1.526-2.524,1.098,1.098,0,0,1,.68784-.28033,5.74941,5.74941,0,0,1,2.09091.5234,14.92549,14.92549,0,0,1,2.18035,1.11485,6.07489,6.07489,0,0,1,1.51252,1.40486,18.23646,18.23646,0,0,1,1.63525,1.92028.90861.90861,0,0,1,.23248.66061c-.53735-.52184-1.07268-1.0458-1.61423-1.56325a.48423.48423,0,0,0-.31177-.13107.18551.18551,0,0,1-.101-.05164c-1.1898-1.44969-2.90957-2.05121-4.53237-2.79013a1.72639,1.72639,0,0,0-2.2123,1.00987,11.80449,11.80449,0,0,1-.50991,1.20061,1.61671,1.61671,0,0,0-.17441.58535C81.69945,32.12633,81.70635,32.27874,81.53954,32.343Z"/><path class="cls-295" d="M79.61328,32.57438a4.65459,4.65459,0,0,1,.46259-1.46364,4.747,4.747,0,0,1,.48815-1.47426,11.82112,11.82112,0,0,1,1.63709-2.25659,1.6612,1.6612,0,0,1,1.63323-.55055A13.26141,13.26141,0,0,1,86.525,27.83126a8.08238,8.08238,0,0,1,3.11459,2.18434c.43615.48522.93971.90731,1.36258,1.40673a7.75852,7.75852,0,0,1,1.0026,1.46844c.07054.13724.20158.27527.08839.45352Q90.99,32.222,89.88623,31.10013a9.46881,9.46881,0,0,0-3.52576-2.38706,10.448,10.448,0,0,1-1.43259-.72547,2.81374,2.81374,0,0,0-1.79314-.34752,1.05158,1.05158,0,0,0-.73266.43317A11.36656,11.36656,0,0,0,80.939,30.39339a4.01851,4.01851,0,0,0-.17081.50691,22.12465,22.12465,0,0,1-1.46264,3.36823,2.10173,2.10173,0,0,1,.22129-.75239A1.05685,1.05685,0,0,0,79.61328,32.57438Z"/><path class="cls-296" d="M92.09321,33.34429a6.2045,6.2045,0,0,0-1.15534-1.84855.31655.31655,0,0,1,.13286-.41036c.1991-.07134.30791.074.42605.18466a7.56645,7.56645,0,0,1,1.30536,1.54549c.22061.35891.4982.67944.701,1.05024a7.621,7.621,0,0,1,.386.79243c.079.21872.21965.44572.05309.68859a6.61418,6.61418,0,0,0-1.464-1.463Z"/><path class="cls-297" d="M81.53954,32.343a8.08981,8.08981,0,0,1,.77952-2.18,2.08177,2.08177,0,0,1,1.50745-1.24222,1.72028,1.72028,0,0,1,1.12513.28885,19.70692,19.70692,0,0,1,3.3603,1.82485,3.18164,3.18164,0,0,1,.93122,1.00052,1.70129,1.70129,0,0,0-.00007,1.00116c-.235-.00447-.39259-.18435-.59585-.262a2.43549,2.43549,0,0,0-.86892-.79836c-.88021-.57681-1.83727-1.01524-2.76456-1.507a2.0667,2.0667,0,0,0-1.08125-.22483,1.19844,1.19844,0,0,0-.93279.70817A8.68858,8.68858,0,0,0,82.04227,33.89c-.17509.26323-.13926.63364-.42569.8405-.19434-.20265-.10186-.46821-.15409-.702A4.61423,4.61423,0,0,1,81.53954,32.343Z"/><path class="cls-298" d="M88.70384,32.80506c.26592-.12389.35793.15775.53925.23116.34936.3878.69646.77768,1.049,1.16258a13.23818,13.23818,0,0,1,1.10818,1.84135c-.03684.23049-.22128.33785-.38556.462-.322-.32084-.56109-.73157-1.00141-.92433-.14273.01711-.13594-.10154-.169-.1844A1.28075,1.28075,0,0,0,89.543,34.822c-.36078-.51219-.77651-.98038-1.17321-1.46409A1.41819,1.41819,0,0,1,88.70384,32.80506Z"/><path class="cls-277" d="M93.94225,35.34679a3.54723,3.54723,0,0,0-.539-1.46329.27461.27461,0,0,1,.21774-.0823c.1642.001.24026.12209.32127.23645.50762.84407.69531,1.82866,1.1821,2.68342.16978.29812.29193.62335.43583.9362.24222.63872.47922,1.2795.73041,1.91467a.97557.97557,0,0,1,.11679.47321c-.457-.66884-.75372-1.43257-1.23586-2.08647-.0746-.10118-.15183-.20043-.22784-.30057-.24487-.61814-.48474-1.23834-.738-1.853A3.88446,3.88446,0,0,0,93.94225,35.34679Z"/><path class="cls-299" d="M89.55123,36.348a2.27705,2.27705,0,0,1,.52538,1.11651c.08922.2471.15219.4781.42015.59364a.36117.36117,0,0,1,.21285.37363.6644.6644,0,0,0,.151.4581c-.62161.3614-1.08023.997-1.84632,1.11367-.96839.14755-1.93736.2927-2.90878.41788a1.382,1.382,0,0,1-.5639-.08586,9.25625,9.25625,0,0,0-1.83519-.35723c-.322-.03295-.5491-.27544-.85712-.31861.00181-.33587-.25133-.65209-.07722-1.00125a.23607.23607,0,0,1-.03263-.21654,12.48112,12.48112,0,0,0,.29392-1.60278c.02046-.13361.02036-.2835.16453-.36441.69282.01569,1.361.21927,2.05024.27025.34367.02542.68747.06125,1.03052.10226a1.73106,1.73106,0,0,0,1.22174-.37783,1.86915,1.86915,0,0,1,1.49639-.40092A.75989.75989,0,0,1,89.55123,36.348Z"/><path class="cls-300" d="M83.23413,36.50208a14.88446,14.88446,0,0,0-.29385,1.619,2.96607,2.96607,0,0,0-.16817.53747c-.14167-.12792-.29191-.24767-.42331-.38538-.32522-.34085-.64257-.158-.96333.00029L81.54,34.96256c.08954-.05622.0744-.147.07656-.232.1583-.26883.12435-.625.38524-.84725.25561-.06757.422.14379.6664.21209.018-.16237.05384-.32419.0552-.48028a5.89861,5.89861,0,0,1,.87785-2.34743.40246.40246,0,0,1,.442-.24094,3.01711,3.01711,0,0,1,1.188.27933c.922.52892,1.867,1.0185,2.75811,1.60017.16911.11038.35414.21523.40634.43816a6.7559,6.7559,0,0,1,1.54052,2.0025,1.642,1.642,0,0,1-.87384-.57435,17.54537,17.54537,0,0,0-2.86125-1.98234c-.31814-.21219-.65848-.396-.99411-.58359a.66374.66374,0,0,0-.61328-.00033c-1.00077.36922-1.06769,1.22767-1.191,2.09332-.09586.673-.04028,1.34909-.11905,2.01954A.38367.38367,0,0,1,83.23413,36.50208Z"/><path class="cls-301" d="M93.94225,34.03765c-.10665-.04364-.174-.16536-.308-.15479-.30216-.51843-.638-1.02047-.91859-1.547a7.22577,7.22577,0,0,0-1.3833-1.87737c-.87326-.8287-1.75522-1.65032-2.68147-2.42036A9.20463,9.20463,0,0,0,86.377,26.7631a15.85339,15.85339,0,0,0-2.36362-1.0138c-.09805-.02493-.19639-.07409-.19407-.20576.25557-.28036.56438-.14907.85162-.0929a4.51232,4.51232,0,0,1,.60625.23231,8.54289,8.54289,0,0,1-.83271-.36913c-.1221-.06786-.25308-.12971-.28576-.28762.20032-.30222.45639-.10368.69332-.07716.73281.225,1.43209.54076,2.152.79855a9.44807,9.44807,0,0,1,3.15895,2.252,14.07379,14.07379,0,0,1,1.71545,1.81118,9.628,9.628,0,0,1,1.3445,2.08238,5.51644,5.51644,0,0,0,.33392.60359,1.23121,1.23121,0,0,0,.05557.33536A4.37234,4.37234,0,0,1,93.94225,34.03765Z"/><path class="cls-302" d="M92.9406,30.10958a.47869.47869,0,0,1,.23129-.38541c.23868.06571.28231.30762.41451.468.088.10672.14172.24148.27881.3025.23146.1353.26514.39431.37285.60505.30771.602.47584,1.2606.74784,1.87772a.40762.40762,0,0,1,.03485.36675,5.64419,5.64419,0,0,0,.30814,1.46355,3.37165,3.37165,0,0,1-.60666-1.164c-.1514-.31987-.28524-.648-.43067-.97078-.02228-.04944-.06757-.07533-.11821-.0219Z"/><path class="cls-303" d="M95.02075,33.3442c-.37346-.9546-.71444-1.92235-1.15554-2.84952a1.71875,1.71875,0,0,0-.38143-1.0229,9.99693,9.99693,0,0,1-.70835-1.302,5.57814,5.57814,0,0,0-.9635-1.313,1.65511,1.65511,0,0,1-.18074-.29033c.4268.13283.58611.5472.86233.83518.29841.31111.55126.66572.82608.99964a3.68756,3.68756,0,0,1,.693,1.13412.7553.7553,0,0,0,.31459.42011c.32624,1.16984.65423,2.33921.9758,3.51033a1.74364,1.74364,0,0,1,.02585.34041C95.12052,33.72269,95.1571,33.47581,95.02075,33.3442Z"/><path class="cls-304" d="M83.85061,25.56526c1.16963.41118,2.26753.984,3.39089,1.49987a10.6697,10.6697,0,0,1,2.4004,1.69337c.5472.46472,1.0366.98705,1.57523,1.46a6.0493,6.0493,0,0,1,1.5766,2.0875,4.07494,4.07494,0,0,0,.41612.63893,2.65575,2.65575,0,0,1,.42445.93791l-.23106.00063a12.29769,12.29769,0,0,0-2.05206-2.63056c-.0771-.06772-.14523-.14456-.25905-.1422a16.69429,16.69429,0,0,0-3.06657-3.15593,5.63716,5.63716,0,0,0-1.72744-.82337,7.99974,7.99974,0,0,1-1.034-.41161,4.25133,4.25133,0,0,0-1.65342-.46777,1.7396,1.7396,0,0,0-1.27241.53673c-.42631.39-.78712.84093-1.18252,1.25936a2.73376,2.73376,0,0,0-.64953.80224l-.04523.02679a4.21843,4.21843,0,0,0-.802,1.54763,18.33611,18.33611,0,0,1-1.60189,3.09559.84709.84709,0,0,1-.60036.44014l-.00037-.07693a.47723.47723,0,0,1,.07307-.3644,1.6355,1.6355,0,0,0,.31249-.94508,1.73761,1.73761,0,0,1,.11177-.36241,38.13723,38.13723,0,0,1,2.08915-4.058,10.55437,10.55437,0,0,1,1.76345-1.91154,2.94456,2.94456,0,0,1,1.37118-.87409C83.44107,25.31749,83.68915,25.284,83.85061,25.56526Z"/><path class="cls-305" d="M81.07733,28.03a9.26763,9.26763,0,0,1,1.30243-1.406,1.9932,1.9932,0,0,1,1.99545-.34067c.4438.13573.85184.34568,1.28041.51054.61973.23841,1.2432.46373,1.84733.74413a4.54722,4.54722,0,0,1,1.32321.9672c.6921.70279,1.4357,1.356,2.05908,2.1259a.699.699,0,0,1,.20689.47967l-.15426.385c-1.18126-1.161-2.17133-2.55431-3.74551-3.24708a15.94074,15.94074,0,0,0-3.41342-1.33778,1.76132,1.76132,0,0,0-1.5963.62507c-.22469.39828-.59574.6658-.8411,1.03933a6.72152,6.72152,0,0,0-1.09838,2.11885,1.20927,1.20927,0,0,1-.16729.41661c-.12483-.11872-.07034-.25232-.03846-.38875.14357-.61439.28282-1.22978.42364-1.84481A8.58716,8.58716,0,0,1,81.07733,28.03Z"/><path class="cls-306" d="M83.85061,25.56526a1.49417,1.49417,0,0,0-1.5087.3067,20.24352,20.24352,0,0,0-2.01469,2.04585,6.00647,6.00647,0,0,0-.79845,1.29986c-.50588.99174-.98,1.99965-1.47059,2.99923-.06109.12445-.14358.23841-.21614.35723-.38983-.1259-.41808-.433-.38612-.77022a6.64912,6.64912,0,0,1,.89293-1.89733,13.095,13.095,0,0,1,1.27551-2.08516,9.92942,9.92942,0,0,1,1.97681-2.02117,4.2134,4.2134,0,0,0,.48347-.43534,1.56021,1.56021,0,0,1,2.07411-.33871L85.391,25.705a1.494,1.494,0,0,1-.6609-.14337A1.201,1.201,0,0,0,83.85061,25.56526Z"/><path class="cls-307" d="M83.23413,36.50208a.51187.51187,0,0,1-.06357-.17836,20.28912,20.28912,0,0,1,.29038-2.9961,1.32493,1.32493,0,0,1,.70381-.98809,3.97033,3.97033,0,0,0,.46429-.268.43847.43847,0,0,1,.53222.00058c.83715.51175,1.66614,1.0454,2.5104,1.53413.84587.48965,1.462,1.22657,2.26456,1.74064.00293.08458-.01341.17559.07708.231.11932.42065-.19881.579-.46207.77018-.33192-.25006-.74518-.09233-1.10377-.2191-.141-.04983-.25679.03426-.38217.11572a2.79811,2.79811,0,0,1-1.45873.7006A13.56359,13.56359,0,0,1,83.23413,36.50208Z"/><path class="cls-308" d="M88.3957,33.34439a25.267,25.267,0,0,0-3.33725-2.01065,3.32323,3.32323,0,0,0-1.0774-.21974.21212.21212,0,0,0-.26.11874c-.171.60552-.69374,1.05162-.78132,1.68554a7.42694,7.42694,0,0,0-.17355,1.35626l-.76439-.39125a5.85552,5.85552,0,0,1,.60666-2.33715,2.41861,2.41861,0,0,0,.21674-.40467A1.30362,1.30362,0,0,1,84.683,30.256a17.316,17.316,0,0,1,2.36618,1.17411,6.92509,6.92509,0,0,1,1.22556.7802c.18488.16375.44089.28551.4291.59473A.83488.83488,0,0,1,88.3957,33.34439Z"/><path class="cls-278" d="M81.07733,28.03a2.13447,2.13447,0,0,1-.61628.84721A1.37911,1.37911,0,0,1,81.07733,28.03Z"/></g></svg>
\ No newline at end of file
diff --git a/static/images/babylon_featured_logo.svg b/static/images/babylon_featured_logo.svg
index 8bea0b8fc3..e84da19268 100644
--- a/static/images/babylon_featured_logo.svg
+++ b/static/images/babylon_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:#fbfbfb;}.cls-2{fill:#400198;}.cls-3{fill:#ed1cb0;}.cls-4{fill:#e422b2;}.cls-5{fill:#e91fb1;}.cls-6{fill:#df26b3;}.cls-7{fill:#1eb6cf;}.cls-8{fill:#1db4d6;}.cls-9{fill:#ca35b8;}.cls-10{fill:#d42eb6;}.cls-11{fill:#cf32b7;}.cls-12{fill:#26b0ce;}.cls-13{fill:#d72cb5;}.cls-14{fill:#c538b8;}.cls-15{fill:#bb40bb;}.cls-16{fill:#da29b4;}.cls-17{fill:#c13cb9;}.cls-18{fill:#b544bc;}.cls-19{fill:#2aaad5;}.cls-20{fill:#af49be;}.cls-21{fill:#8964c5;}.cls-22{fill:#a94dbe;}.cls-23{fill:#826ac7;}.cls-24{fill:#a54fbf;}.cls-25{fill:#e026b1;}.cls-26{fill:#905fc3;}.cls-27{fill:#7b6fc8;}.cls-28{fill:#965ac2;}.cls-29{fill:#2aadcd;}.cls-30{fill:#9b58c2;}.cls-31{fill:#d034af;}.cls-32{fill:#d331b0;}.cls-33{fill:#d72db0;}.cls-34{fill:#db2ab0;}.cls-35{fill:#7077cb;}.cls-36{fill:#7573c9;}.cls-37{fill:#24b0d1;}.cls-38{fill:#35a2d4;}.cls-39{fill:#af49bb;}.cls-40{fill:#4a92d2;}.cls-41{fill:#4f8fce;}.cls-42{fill:#6b7bcb;}.cls-43{fill:#cb36b4;}.cls-44{fill:#5d85ce;}.cls-45{fill:#6380cd;}.cls-46{fill:#b743bb;}.cls-47{fill:#2eaacd;}.cls-48{fill:#38a3c9;}.cls-49{fill:#c43ab5;}.cls-50{fill:#667fc9;}.cls-51{fill:#4595d2;}.cls-52{fill:#a84ebc;}.cls-53{fill:#528cd0;}.cls-54{fill:#5887cf;}.cls-55{fill:#2ea7d5;}.cls-56{fill:#3a9ed3;}.cls-57{fill:#bb41ba;}.cls-58{fill:#9a58c2;}.cls-59{fill:#7475c3;}.cls-60{fill:#8f60c4;}.cls-61{fill:#32a7cb;}.cls-62{fill:#687fc3;}.cls-63{fill:#4099d4;}.cls-64{fill:#a450bf;}.cls-65{fill:#4698c9;}.cls-66{fill:#588bc5;}.cls-67{fill:#fcfcfc;}.cls-68{fill:#409dc8;}.cls-69{fill:#9f54c1;}.cls-70{fill:#955cc3;}.cls-71{fill:#5091c6;}.cls-72{fill:#d031b4;}.cls-73{fill:#8866c6;}.cls-74{fill:#c03cba;}.cls-75{fill:#6185c5;}.cls-76{fill:#7b6ec9;}.cls-77{fill:#6f79c6;}.cls-78{fill:#fefefe;}.cls-79{fill:#24b3cc;}.cls-80{fill:#da2ab2;}.cls-81{fill:#20b5ca;}.cls-82{fill:#25b1cb;}.cls-83{fill:#cc34b4;}.cls-84{fill:#d131b3;}.cls-85{fill:#29aecc;}.cls-86{fill:#26b2c7;}.cls-87{fill:#cb37af;}.cls-88{fill:#c53bb4;}.cls-89{fill:#bb42b6;}.cls-90{fill:#bf3eb5;}.cls-91{fill:#b546b6;}.cls-92{fill:#b04ab8;}.cls-93{fill:#2ea9d1;}.cls-94{fill:#aa4db9;}.cls-95{fill:#8d64bc;}.cls-96{fill:#8966be;}.cls-97{fill:#8568c2;}.cls-98{fill:#7e6dc4;}.cls-99{fill:#a155ba;}.cls-100{fill:#945ebb;}.cls-101{fill:#7673c4;}.cls-102{fill:#9a5aba;}.cls-103{fill:#2eaec3;}.cls-104{fill:#28b2c4;}.cls-105{fill:#7078c5;}.cls-106{fill:#6a7cc7;}.cls-107{fill:#32a6d1;}.cls-108{fill:#37a1d0;}.cls-109{fill:#b249b4;}.cls-110{fill:#ab4db9;}.cls-111{fill:#4d92ca;}.cls-112{fill:#4498ce;}.cls-113{fill:#4796ca;}.cls-114{fill:#528fc9;}.cls-115{fill:#5b87c9;}.cls-116{fill:#6182c9;}.cls-117{fill:#b944b3;}.cls-118{fill:#33a8c6;}.cls-119{fill:#38a6c2;}.cls-120{fill:#3da1c4;}.cls-121{fill:#c33daf;}.cls-122{fill:#bf3fb5;}.cls-123{fill:#6383c4;}.cls-124{fill:#409bd0;}.cls-125{fill:#a254bb;}.cls-126{fill:#a652b6;}.cls-127{fill:#568acc;}.cls-128{fill:#3ba0cd;}.cls-129{fill:#9a5abb;}.cls-130{fill:#9e57b9;}.cls-131{fill:#7e6fc0;}.cls-132{fill:#6d7ebd;}.cls-133{fill:#7a74ba;}.cls-134{fill:#747aba;}.cls-135{fill:#9160bc;}.cls-136{fill:#8b65bf;}.cls-137{fill:#6684bb;}.cls-138{fill:#4a97c1;}.cls-139{fill:#449cc1;}.cls-140{fill:#6088bb;}.cls-141{fill:#5491bf;}.cls-142{fill:#5b8bbf;}.cls-143{fill:#8469c1;}.cls-144{fill:#21b7c5;}.cls-145{fill:#24b5c5;}.cls-146{fill:#2dadc5;}.cls-147{fill:#25b6c1;}.cls-148{fill:#2faebe;}.cls-149{fill:#c63bb0;}.cls-150{fill:#c13fb0;}.cls-151{fill:#bd41b3;}.cls-152{fill:#b945b3;}.cls-153{fill:#b549ae;}.cls-154{fill:#ad4eb3;}.cls-155{fill:#a651b7;}.cls-156{fill:#8f64b6;}.cls-157{fill:#816ebe;}.cls-158{fill:#8869ba;}.cls-159{fill:#7973bf;}.cls-160{fill:#a357b0;}.cls-161{fill:#9e5ab3;}.cls-162{fill:#965fb5;}.cls-163{fill:#32aeb8;}.cls-164{fill:#2bb2ba;}.cls-165{fill:#33abbe;}.cls-166{fill:#27b5be;}.cls-167{fill:#6e7bc1;}.cls-168{fill:#7477bd;}.cls-169{fill:#6a7ec0;}.cls-170{fill:#37a4c8;}.cls-171{fill:#31a9c9;}.cls-172{fill:#b14dad;}.cls-173{fill:#ac4eb3;}.cls-174{fill:#4e94c3;}.cls-175{fill:#4b95c6;}.cls-176{fill:#429bca;}.cls-177{fill:#4599c6;}.cls-178{fill:#548fc3;}.cls-179{fill:#578bc6;}.cls-180{fill:#5b8ac2;}.cls-181{fill:#bd43ae;}.cls-182{fill:#bf40b0;}.cls-183{fill:#3aa7bb;}.cls-184{fill:#40a1bd;}.cls-185{fill:#6385c0;}.cls-186{fill:#a257b2;}.cls-187{fill:#a853af;}.cls-188{fill:#3e9fc7;}.cls-189{fill:#945fb9;}.cls-190{fill:#9c5bb4;}.cls-191{fill:#846cb8;}.cls-192{fill:#806fb9;}.cls-193{fill:#6b83b3;}.cls-194{fill:#6f7eb7;}.cls-195{fill:#7b76b3;}.cls-196{fill:#7778b6;}.cls-197{fill:#737db1;}.cls-198{fill:#8a68b8;}.cls-199{fill:#8e65b5;}.cls-200{fill:#6487b5;}.cls-201{fill:#469dbb;}.cls-202{fill:#4d97bb;}.cls-203{fill:#5b8db7;}.cls-204{fill:#5492b9;}.cls-205{fill:#21bac0;}.cls-206{fill:#34a9c5;}.cls-207{fill:#20bbba;}.cls-208{fill:#25b8b9;}.cls-209{fill:#2bb2bb;}.cls-210{fill:#39abb2;}.cls-211{fill:#30b0b5;}.cls-212{fill:#39a7bb;}.cls-213{fill:#a754af;}.cls-214{fill:#9265af;}.cls-215{fill:#8a69b4;}.cls-216{fill:#7e73b8;}.cls-217{fill:#856cb7;}.cls-218{fill:#7778b8;}.cls-219{fill:#9e5cac;}.cls-220{fill:#a458ab;}.cls-221{fill:#9b5eb0;}.cls-222{fill:#39a9b3;}.cls-223{fill:#2eb3b2;}.cls-224{fill:#34b0ad;}.cls-225{fill:#27b8b6;}.cls-226{fill:#707db9;}.cls-227{fill:#6b82b8;}.cls-228{fill:#aa53ab;}.cls-229{fill:#4a99bd;}.cls-230{fill:#5194b9;}.cls-231{fill:#439ebf;}.cls-232{fill:#598eba;}.cls-233{fill:#6189ba;}.cls-234{fill:#43a1b8;}.cls-235{fill:#41a4b2;}.cls-236{fill:#995fb1;}.cls-237{fill:#8071b5;}.cls-238{fill:#896ab2;}.cls-239{fill:#6d82b0;}.cls-240{fill:#6687af;}.cls-241{fill:#6c85a7;}.cls-242{fill:#7979ad;}.cls-243{fill:#7280a8;}.cls-244{fill:#8e69ab;}.cls-245{fill:#9364ae;}.cls-246{fill:#618dad;}.cls-247{fill:#5e8db1;}.cls-248{fill:#4a9bb6;}.cls-249{fill:#4f99b4;}.cls-250{fill:#5895ab;}.cls-251{fill:#5495b1;}.cls-252{fill:#21bcb5;}.cls-253{fill:#26bab2;}.cls-254{fill:#2cb5b2;}.cls-255{fill:#3daca6;}.cls-256{fill:#32b3a9;}.cls-257{fill:#40a3b8;}.cls-258{fill:#32b1af;}.cls-259{fill:#40a7ae;}.cls-260{fill:#9a60aa;}.cls-261{fill:#9465a9;}.cls-262{fill:#866eaf;}.cls-263{fill:#7e74b2;}.cls-264{fill:#767bb2;}.cls-265{fill:#3fa8ac;}.cls-266{fill:#39adab;}.cls-267{fill:#28b9ad;}.cls-268{fill:#30b4aa;}.cls-269{fill:#35b2a6;}.cls-270{fill:#22beb0;}.cls-271{fill:#6d82b1;}.cls-272{fill:#6588b4;}.cls-273{fill:#4a9cb6;}.cls-274{fill:#5099b0;}.cls-275{fill:#5793b2;}.cls-276{fill:#5f8db1;}.cls-277{fill:#47a0b0;}.cls-278{fill:#45a5a8;}.cls-279{fill:#8373a9;}.cls-280{fill:#856fae;}.cls-281{fill:#6789a6;}.cls-282{fill:#6887ac;}.cls-283{fill:#7e77a9;}.cls-284{fill:#777ca8;}.cls-285{fill:#886fa9;}.cls-286{fill:#5d91ab;}.cls-287{fill:#618fa5;}.cls-288{fill:#4f9bad;}.cls-289{fill:#5598a5;}.cls-290{fill:#5299a8;}.cls-291{fill:#5b93a5;}.cls-292{fill:#26bcab;}.cls-293{fill:#2cb7ac;}.cls-294{fill:#39afa2;}.cls-295{fill:#41a9a3;}.cls-296{fill:#44a4a9;}.cls-297{fill:#33b4a1;}.cls-298{fill:#2db8a6;}.cls-299{fill:#23bfa9;}.cls-300{fill:#2abaa6;}.cls-301{fill:#509da5;}.cls-302{fill:#5b92ab;}.cls-303{fill:#638caa;}.cls-304{fill:#49a1a6;}.cls-305{fill:#45a5a3;}.cls-306{fill:#4e9da7;}.cls-307{fill:#24c0a3;}.cls-308{fill:#2eb9a1;}</style></defs><title>babylon_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g id="lZQzip.tif"><path class="cls-2" d="M105.41242,102.38161l-.00032,1.63174c-.0627.13341.00024.28369-.05621.41793a11.38311,11.38311,0,0,1-2.01033,5.06153,11.067,11.067,0,0,1-3.3906,3.02011,10.84647,10.84647,0,0,1-4.08857,1.32846c-.1868.06553-.38843-.017-.57433.05755l-1.089-.00025c-.20941-.07879-.43384.01163-.64415-.05713a10.19579,10.19579,0,0,1-3.70134-1.065c-.48065-.24244-.92492-.557-1.38588-.83845-.06063-.037-.09079-.14074-.18466-.10308-.11421.04582-.06434.15491-.06525.2351-.00276.24289.00733.48591.01241.72888-.04373.09358-.13.06517-.20175.06525q-2.00022.00226-4.00042.00105a.2189.2189,0,0,1-.17784-.05013q.00179-12.68058.00359-25.36114c.00007-.49836.00007-.49838.51672-.49839,1.14195,0,2.28413.01292,3.42569-.00811.33035-.00608.43083.06512.428.416-.01821,2.2576-.00931,4.51543-.00931,6.77318v.49616a11.05883,11.05883,0,0,1,5.10888-2.07265c.13193-.05882.28125.00852.4123-.0568l.5892-.02108a2.452,2.452,0,0,1,.76686.00027l.58451.02113c.13295.06326.28351-.00195.417.05717a11.59144,11.59144,0,0,1,3.62542,1.17991,10.5452,10.5452,0,0,1,5.46726,7.37007c.05888.28588.11169.573.16732.85955C105.4121,102.10265,105.3474,102.25077,105.41242,102.38161Z"/><path class="cls-2" d="M34.63653,86.95277l4.29235-.00054c.09161.12769.04478.27327.045.40941.00339,2.27909.00048,4.5582.00786,6.83726.00039.12039-.097.284.08547.36982A10.467,10.467,0,0,1,43.578,92.65287c.17488-.0308.34953-.0629.52429-.09438.12944-.05756.27686.01345.40456-.05657l.59672-.02a2.09239,2.09239,0,0,1,.68969-.00017l.59843.01974c.12693.0712.27387-.00048.4028.05643a11.00511,11.00511,0,0,1,4.67914,1.79236,10.4814,10.4814,0,0,1,4.49119,6.91367c.05776.31192.11043.6248.16546.93723.06769.21176-.0209.43721.05681.64808a2.5436,2.5436,0,0,0,.00035.69962c-.07312.18609.00488.38662-.0549.574a10.76306,10.76306,0,0,1-2.32311,5.73583,10.60091,10.60091,0,0,1-6.22918,3.81747,13.59407,13.59407,0,0,1-2.67368.22263c-.18573-.07349-.38628.00608-.57316-.05551a10.43588,10.43588,0,0,1-5.25691-2.01274c-.22287.18028-.09238.42551-.08856.63086.00576.31021-.07424.41724-.40251.41178-1.18-.01964-2.36055-.00755-3.54089-.00779-.45637-.00009-.45687-.00053-.45688-.45163q-.00017-11.04411-.00007-22.08823c0-1.0005-.00178-2.001.00227-3.00152C34.59038,87.2003,34.54594,87.06672,34.63653,86.95277Z"/><path class="cls-2" d="M70.59875,92.56a11.608,11.608,0,0,1,3.789,1.26288c.427.24032.83354.51681,1.28941.80181a3.2784,3.2784,0,0,0,.01372-1.00883c.02837-.10709.118-.07834.18769-.07842q2.02682-.00267,4.05362-.00136a.21665.21665,0,0,1,.14177.04475l-.00015,19.23937c-1.44837.09646-2.898.03169-4.347.03046-.0119,0-.02376-.04231-.03565-.06486.03551-.3164.15843-.77168-.03968-.91009-.21749-.15194-.50493.23574-.75607.39269a10.241,10.241,0,0,1-3.92419,1.482c-.176.02672-.35093.05994-.52637.09015-.18449.06812-.38468-.01774-.5684.05795l-1.17047,0c-.21022-.07641-.43394.0082-.64534-.05409a9.69788,9.69788,0,0,1-3.54018-.98888,10.61343,10.61343,0,0,1-3.67078-2.958,11.10393,11.10393,0,0,1-2.09314-4.33279c-.093-.37677-.13-.75531-.18841-1.13379-.05411-.13074.01294-.2778-.05476-.40671l.00085-1.71014c.06237-.13445-.00032-.28595.05741-.421a9.69545,9.69545,0,0,1,1.34064-4.07919,10.37686,10.37686,0,0,1,5.04614-4.46406,13.59363,13.59363,0,0,1,2.94821-.79295c.13132-.05309.27845.01255.40795-.05428l.59309-.02042a2.07215,2.07215,0,0,1,.68971,0l.58835.02142C70.31706,92.5682,70.46642,92.50184,70.59875,92.56Z"/><path class="cls-2" d="M136.22286,101.739a10.55646,10.55646,0,0,1,2.44338-5.48159,10.26677,10.26677,0,0,1,6.4419-3.61265c.12549-.01986.2484-.05608.37252-.08468.13471-.057.28572.00589.41964-.057l.659-.02133a1.60255,1.60255,0,0,1,.61285.001l.58664.02047c.13217.06357.28091.00119.41442.05453a11.17161,11.17161,0,0,1,4.92871,1.94918c.12262-.01494.18515.05812.23.157a11.48323,11.48323,0,0,1,2.37081,2.52474,10.21138,10.21138,0,0,1,1.71935,4.44978c.01946.13779.05893.27275.08909.409.05146.13548-.00713.28517.05419.41937l.00014,1.46681c-.06137.13448-.00271.28456-.05466.42026a11.2611,11.2611,0,0,1-1.86152,4.91853,11.06171,11.06171,0,0,1-4.001,3.49915,10.90974,10.90974,0,0,1-3.62934,1.0724c-.21173.06282-.43585-.02183-.64644.05434l-1.01887.00044c-.23463-.08194-.48355.01422-.719-.05762a10.64855,10.64855,0,0,1-9.41034-9.17862c-.06328-.12961.01014-.279-.05913-.40779l-.02026-.43963a6.29627,6.29627,0,0,1-.00059-1.2288l.01948-.44508C136.23691,102.015,136.161,101.8669,136.22286,101.739Z"/><path class="cls-3" d="M108.10551,24.18116A19.04342,19.04342,0,0,1,109.618,19.0384a20.56281,20.56281,0,0,1,3.31319-5.17462c.058-.0676.128-.12492.19239-.187a.58705.58705,0,0,1,.30652-.35745,18.23673,18.23673,0,0,1,1.928-1.783.609.609,0,0,1,.28754-.21982l.63689-.47672c.06835-.11283.201-.138.29477-.21626a19.95434,19.95434,0,0,1,5.77059-2.78765.43228.43228,0,0,0,.09747-.06037c.09611-.08387.20175-.03963.30525-.02284a5.07713,5.07713,0,0,1,.36456,1.6745c.151,1.37575.37846,2.73751.65136,4.09323.06239.30994.12178.61909.19791.96579.2284-.13609.22764-.356.33537-.50349.09127-.125.17341-.26722.36041-.23759.18012.02855.24682.16669.28139.32576a8.05405,8.05405,0,0,1,.20257,3.34968,2.66144,2.66144,0,0,0-.01076.91779,6.59283,6.59283,0,0,1-.13906,1.71245,21.01406,21.01406,0,0,1-.59418,3.3667c-.15548.54323-.2648.61154-.82409.68574a21.8299,21.8299,0,0,0-3.85755.58227,23.657,23.657,0,0,1-2.935.77053c-1.03225.19041-2.07612.31678-3.11833.41641-1.19354.11409-2.38765.20907-3.57118.40622a3.20552,3.20552,0,0,0-1.11469.40294c-.39873.23506-.60487.14073-.71986-.31493-.11921-.47236-.16719-.96034-.30723-1.42885A1.117,1.117,0,0,1,108.10551,24.18116Z"/><path class="cls-2" d="M170.976,92.48275l.58774.02046c.13173.064.28022.001.41332.05454a11.1725,11.1725,0,0,1,4.92872,1.94918c.12263-.01494.18515.05812.23.157a11.48038,11.48038,0,0,1,2.3709,2.52482,10.21276,10.21276,0,0,1,1.71959,4.44975,1.54145,1.54145,0,0,0,.08058.25287.22939.22939,0,0,1,.05237.16618.73794.73794,0,0,0,.00993.40828q.002,5.17333.00394,10.34666c-.11124.09873-.2459.05-.36866.05044-1.116.00426-2.23216-.009-3.34783.00986-.31466.00533-.408-.0757-.40676-.3992.01219-3.15484.00781-6.30975.00589-9.46463a1.19973,1.19973,0,0,0-.03-.45689,6.52161,6.52161,0,0,0-3.58673-5.22192,6.08072,6.08072,0,0,0-2.17483-.68356c-.15521-.07359-.32837.006-.48484-.0568l-.61966-.00051c-.155.06482-.32791-.01827-.48157.058a4.26881,4.26881,0,0,0-1.75677.42321,6.52565,6.52565,0,0,0-3.73969,3.95482,1.25874,1.25874,0,0,0-.03719.22353,1.01223,1.01223,0,0,0-.03018.41834q-.00264,5.38994-.00155,10.77989c0,.41716-.00091.418-.4118.41816-1.20657.00043-2.41328-.00941-3.61963.00708-.29077.004-.36373-.079-.36335-.36573q.01226-9.29764-.00054-18.59531c-.00044-.30609.08376-.38661.38565-.38242q1.82877.02544,3.658-.0003c.2999-.00433.38945.09348.35491.37275a2.0816,2.0816,0,0,0,.00108.42292c.00653.07974.03607.155.14608.11113a12.10607,12.10607,0,0,1,1.51035-.93027.21345.21345,0,0,1,.22648-.09535c.08646-.08622.24858.00183.31277-.13571a.20878.20878,0,0,1,.22666-.09361l1.54193-.45154a.20231.20231,0,0,1,.2437-.04837l.75951-.121c.13151-.05807.28029.0096.4107-.05644l.59077-.02112A2.04541,2.04541,0,0,1,170.976,92.48275Z"/><path class="cls-2" d="M110.80912,119.22141q1.101-2.6006,2.202-5.20118c.20717-.48933.41254-.97944.62317-1.46727a.44549.44549,0,0,0-.01-.40023c-.5558-1.17222-1.0978-2.351-1.65525-3.52245-.54807-1.15167-1.1181-2.293-1.66239-3.4464-.53858-1.14134-1.04855-2.29617-1.58682-3.43768-.5224-1.10784-1.10178-2.19026-1.58832-3.31322-.51253-1.183-1.112-2.3238-1.6277-3.50481-.2036-.46627-.45856-.91047-.63115-1.40686,1.52426,0,3.02608.00276,4.52787-.00345a.3571.3571,0,0,1,.38162.23425q2.01563,4.32179,4.04609,8.63667c.67916,1.44332,1.37116,2.88058,2.05344,4.32246a.34623.34623,0,0,0,.135.181c.398-.93367.79593-1.86114,1.18884-2.79074.46761-1.10636.9283-2.21566,1.39686-3.32163.38072-.89869.77272-1.79262,1.1523-2.69179.46721-1.10675.92695-2.21666,1.38944-3.3254.1476-.35384.30266-.705.43619-1.06407a.25849.25849,0,0,1,.29272-.17794c1.42488.00128,2.84979.00606,4.2746-.00277.388-.00241.18142.225.13284.34162-.58851,1.41215-1.18988,2.81893-1.78593,4.22794q-1.64718,3.89383-3.29287,7.78828c-.96233,2.27075-1.93428,4.53744-2.89327,6.80959-.93871,2.22409-1.86642,4.45281-2.799,6.67951-.07529.07089-.16938.04616-.25636.04625-1.38334.00146-2.76668.00417-4.15-.005C110.99384,119.40531,110.74847,119.52949,110.80912,119.22141Z"/><path class="cls-4" d="M104.40436,15.7113a9.72922,9.72922,0,0,1,1.07941,1.77089c.37952,2.434.8474,4.8511,1.38458,7.2551.23236,1.03988.52955,2.06343.77838,3.0983a1.06754,1.06754,0,0,0,1.00368.90079c1.0857.12054,2.14446.39755,3.22979.51729.867.09565,1.73753.13786,2.60645.19994,1.11068.07934,2.22544.00787,3.33963.05847a11.36973,11.36973,0,0,0,2.14325-.17673c1.22033-.179,2.45-.2313,3.67574-.3382.75336-.0657,1.5106-.09005,2.25855-.217a1.32551,1.32551,0,0,0,.65474-.30225,7.85559,7.85559,0,0,0,2.17918-2.99069,8.74582,8.74582,0,0,0,.2993-1.73971,8.56519,8.56519,0,0,0-.20349-3.05462c-.54855-3.39645-1.29737-6.75407-1.98865-10.12282a3.84919,3.84919,0,0,0-.618-1.75573,1.91816,1.91816,0,0,1-.24025-1.03876.7167.7167,0,0,0-.38049-.61708c.08346-.097.21035-.04319.30857-.0889.12731-.0632.27536.0134.40122-.05951l.29225-.01824c.31089-.07614.633.02978.94318-.05835l1.49352.00081c.31346.0851.63795-.01643.95214.05632l-.00682.02572a.62359.62359,0,0,1,.1485.34794c.54487,2.27087,1.001,4.5644,1.616,6.81618.31761,1.163.601,2.33124.86147,3.50572a5.991,5.991,0,0,1,.19829,2.43576.67474.67474,0,0,0,.0383.3791,2.07008,2.07008,0,0,1,.07913,1.1021,20.78858,20.78858,0,0,0-.13777,2.16187,9.80274,9.80274,0,0,1-2.78369,6.72779,10.86767,10.86767,0,0,1-1.92378,1.646,2.58061,2.58061,0,0,1-.94221.30048,10.54388,10.54388,0,0,0-1.78057.14844.16694.16694,0,0,1-.0762.0084c-1.00624-.136-2.008.21928-3.01777.02143a1.76573,1.76573,0,0,0-.83694.06885,3.38971,3.38971,0,0,1-1.29915.03958,1.25374,1.25374,0,0,0-.79279-.01767.47864.47864,0,0,1-.34034-.00558,2.832,2.832,0,0,0-1.29419-.07036,9.74052,9.74052,0,0,1-3.95844-.27935c-1.28946-.42113-2.648-.47565-3.92582-.91149a5.72982,5.72982,0,0,1-2.86508-1.91321,1.444,1.444,0,0,1-.24188-.43406,43.99708,43.99708,0,0,1-2.02107-8.83215c-.141-1.40228-.29239-2.80366-.4259-4.20676C104.25612,15.92726,104.20252,15.76342,104.40436,15.7113Z"/><path class="cls-5" d="M125.60614,7.15852c.334-.04964.44222.10351.46852.42956a2.73972,2.73972,0,0,0,.533,1.63842c.32663.39387.26146.948.36642,1.429.39118,1.79269.75765,3.591,1.11329,5.39114.36267,1.83589.67805,3.68076,1.009,5.52239a9.689,9.689,0,0,1-.15082,3.56582,5.94459,5.94459,0,0,1-1.47962,2.61c-.082.09806-.19606.1715-.26862.275a2.7822,2.7822,0,0,1-2.32588,1.01306c-1.67713.12281-3.35476.2187-5.02712.4294a10.09409,10.09409,0,0,1-2.58783.12679c-.726-.09453-1.4719.02294-2.21141-.013a28.35478,28.35478,0,0,1-4.97651-.51966c-.60516-.13825-1.23554-.137-1.8369-.32228a.8218.8218,0,0,1-.61118-.609c-.50159-1.75511-.92218-3.52925-1.27681-5.31937-.22026-1.1118-.44565-2.22266-.65441-3.33663-.10541-.56253-.18158-1.13065-.26442-1.6972a.30353.30353,0,0,1,.0589-.28981,27.37527,27.37527,0,0,1,1.3355,2.69419c.03969.10518.16076.17715.12746.31212a32.58288,32.58288,0,0,1,.948,3.76744c.15772.20248.05231.459.13885.67607a6.49762,6.49762,0,0,1,.31029,1.37543c.09965.445.20245.49741.59626.27425a5.34532,5.34532,0,0,1,1.75183-.50721,14.50255,14.50255,0,0,1,1.60607-.17717,5.27,5.27,0,0,1,1.29524-.13348,1.817,1.817,0,0,0,.97131-.13538,2.02351,2.02351,0,0,1,.7164-.08442,14.13442,14.13442,0,0,0,3.63991-.71728,19.1927,19.1927,0,0,1,2.241-.57,9.82731,9.82731,0,0,1,1.05-.11654,2.6934,2.6934,0,0,0,1.16143-.146c.01119-.00627.02429-.01878.034-.01669.91757.19757.891-.55369,1.02257-1.07177a11.68384,11.68384,0,0,0,.36774-2.10232,12.89731,12.89731,0,0,1,.17056-1.56984c.15435-.79639-.04244-1.5773.136-2.37582a7.18116,7.18116,0,0,0-.27341-2.862.23041.23041,0,0,0-.177-.18067c-.11082-.03782-.1466.05865-.21013.1212-.15509.15269-.11749.39058-.26066.54584-.06535.07086-.08659.22694-.20915.181a.33072.33072,0,0,1-.16927-.23691c-.07681-.84944-.3084-1.67088-.44584-2.50925-.09208-.56173-.13436-1.1322-.24168-1.686a9.44422,9.44422,0,0,0-.3478-2.02733,1.38587,1.38587,0,0,1-.02829-.45785l.01093-.04942c.7478-.16168,1.49455-.32854,2.24412-.48156A5.36662,5.36662,0,0,1,125.60614,7.15852Z"/><path class="cls-6" d="M120.1343,32.65112a6.38178,6.38178,0,0,0,1.51764-.12865c.52566-.15559,1.08742.09262,1.639.05314a1.22157,1.22157,0,0,0,.66694-.11847.56742.56742,0,0,1,.37383-.02619,2.20881,2.20881,0,0,0,1.38392-.07044.746.746,0,0,1,.41369.0198.74566.74566,0,0,0,.625-.058c.18866-.1304.38213.05149.59393.0033a4.068,4.068,0,0,0,1.74195-1.06385,12.58324,12.58324,0,0,0,2.67706-3.41047,7.4936,7.4936,0,0,0,.69578-2.33112,7.57262,7.57262,0,0,0,.19148-1.57514,6.34588,6.34588,0,0,0,.05565-1.83495c-.078-.24927.19046-.509.14126-.807a2.23962,2.23962,0,0,0-.13041-.81843c-.12336-.22556.01836-.49877.044-.75126a5.74362,5.74362,0,0,0-.16118-1.56459,19.44289,19.44289,0,0,0-.61712-2.83256c-.28438-.85129-.48483-1.71675-.69585-2.58192-.44076-1.80708-.85644-3.62029-1.27906-5.43176a1.881,1.881,0,0,1-.0215-.30615A15.98507,15.98507,0,0,1,132.845,7.479a.50148.50148,0,0,1,.13081.23158,49.688,49.688,0,0,1,2.01791,8.4048,18.21828,18.21828,0,0,1,.27926,2.63092.76591.76591,0,0,0,.10263.36755.50529.50529,0,0,1,.05306.40814,2.02686,2.02686,0,0,0-.08194.91352,9.35413,9.35413,0,0,0,.10765,2.02284.241.241,0,0,1,.00743.11458,33.91307,33.91307,0,0,1-1.62343,7.27583,9.70686,9.70686,0,0,1-1.38024,2.07526,9.48749,9.48749,0,0,1-2.71467,2.467,4.50315,4.50315,0,0,1-1.35042.53045,3.08355,3.08355,0,0,1-1.276.07831,1.11311,1.11311,0,0,0-.74571.13083.56453.56453,0,0,1-.41165.03573,3.51367,3.51367,0,0,0-1.73081.059,3.571,3.571,0,0,1-2.00817-.04747,4.346,4.346,0,0,0-1.90189-.05094.879.879,0,0,1-.59233-.04171.75263.75263,0,0,0-.40915-.09023c-1.2409.05239-2.46072-.201-3.69449-.25138a2.50064,2.50064,0,0,0-.30847-.05935,19.87577,19.87577,0,0,1-5.66911-1.2823,1.31418,1.31418,0,0,1-.3671-.20423.56291.56291,0,0,0-.3023-.17487,6.69961,6.69961,0,0,1-3.33281-4.03482c-.38037-1.32939-.76285-2.65991-1.0232-4.016-.18022-.93879-.2569-1.89952-.38408-2.84985-.09-.67233-.13218-1.349-.20538-2.02275a.45857.45857,0,0,1,.07613-.39964c.2335.01019.24471.19.25938.35439.10708,1.2.2803,2.39105.45046,3.58347a26.43026,26.43026,0,0,0,1.07152,4.44272,7.53319,7.53319,0,0,0,1.2159,2.51222,6.109,6.109,0,0,0,3.85119,2.11473.40553.40553,0,0,0,.19119-.00021,6.8954,6.8954,0,0,1,2.77067.03242,44.72289,44.72289,0,0,0,5.25789.1827.97314.97314,0,0,0,.54036-.17747C119.84031,32.65729,119.96677,32.5574,120.1343,32.65112Z"/><path class="cls-7" d="M103.34009,72.70127c-.83063-.32459-1.63712-.70182-2.44339-1.0828A33.43745,33.43745,0,0,1,97.641,69.97632a8.83717,8.83717,0,0,1-.46461-2.73078,8.47071,8.47071,0,0,0-.08149-1.56152,5.15678,5.15678,0,0,1,.06829-1.14823.67531.67531,0,0,0-.376-.65364,14.08384,14.08384,0,0,1-2.37946-1.68747,3.94162,3.94162,0,0,0-.9147-.56584,20.74024,20.74024,0,0,0-2.05258-.95975,3.20772,3.20772,0,0,1-.75-.3885c-.16453-.11534-.29447-.14228-.38073.0943-.07678.21052-.23739.20568-.40857.1135A4.54453,4.54453,0,0,1,89.438,60.213a33.71361,33.71361,0,0,0-4.58-2.52155c-.54052-.26638-1.07543-.54568-1.60021-.84342a.63617.63617,0,0,1-.36347-.46453.82455.82455,0,0,0-.39825-.54009,14.46986,14.46986,0,0,1-2.0368-1.44187.2658.2658,0,0,0-.37837-.01093c-.44554.28888-.62066.24055-.91818-.22906-.04451-.15711-.01573-.33414-.11628-.4753a.46367.46367,0,0,1,.10826-.67732,1.29208,1.29208,0,0,0,.50413-.96574.65162.65162,0,0,1,.0479-.14416c.14958-.2654.17024-.62573.53679-.73228a2.58723,2.58723,0,0,1,1.397.66306c.34593.28579.71493.54391,1.07586.81143a1.16594,1.16594,0,0,0,.70164.2767,1.23,1.23,0,0,1,.63253.26328A20.46455,20.46455,0,0,0,88.174,55.156c.59193.21194,1.1727.45456,1.76515.66583a.53615.53615,0,0,1,.29389.17513,2.24633,2.24633,0,0,0,1.54488.84813c.89211.21477,1.71631.60142,2.57578.89628,1.5427.52925,3.01121,1.23918,4.51994,1.85118a8.569,8.569,0,0,0,2.52622.45256,3.6449,3.6449,0,0,1,.82979.15793c.18193.06023.36873.12644.43906.33752-.13873.2345-.34989.10311-.5124.07185a2.45059,2.45059,0,0,0-1.10328.04482,1.205,1.205,0,0,0-.80807,1.33007.50453.50453,0,0,0,.2601.31769c.46964.28853.88546.65331,1.35906.93847.45356.27309.51725.56049.21856.99355a4.22715,4.22715,0,0,0-.72292,2.42157,7.94336,7.94336,0,0,1-.25423,1.66848,1.28623,1.28623,0,0,0,.42541,1.38309,4.81378,4.81378,0,0,1,.59991.69914,1.615,1.615,0,0,1,.388,1.09893.50924.50924,0,0,0,.05627.33414.84151.84151,0,0,0,.46643.2233,1.0586,1.0586,0,0,1,.58077.32266C103.696,72.71666,103.66373,72.75239,103.34009,72.70127Z"/><path class="cls-2" d="M128.7694,86.95128l4.294.002c.09292.11323.048.24722.048.37065q.00359,12.56722.002,25.13443c0,.40628-.00109.40683-.42258.40694-1.19347.0003-2.387-.00829-3.58031.00619-.288.0035-.39377-.05181-.39339-.37336q.01462-12.60569.00933-25.2114C128.72653,87.17467,128.69189,87.05481,128.7694,86.95128Z"/><path class="cls-8" d="M79.22829,54.13966c.35955.44678.4117.45726.86273.09658a.2307.2307,0,0,1,.365.01476,12.19076,12.19076,0,0,0,2.11086,1.5163c.17055.12085.37583.24107.38569.45216.02046.438.3492.5399.64969.70063a58.52889,58.52889,0,0,1,6.28747,3.4531c.20324.14307.34382.19342.35951-.14292.01249-.2677.17974-.25488.34171-.13515a15.89082,15.89082,0,0,0,1.89472.90954,10.26468,10.26468,0,0,1,2.37251,1.44961,9.00619,9.00619,0,0,0,1.726,1.19833c.69444.412.81447.59681.64272,1.38551a1.94865,1.94865,0,0,0,.00633.871,2.45465,2.45465,0,0,1,.03857,1.09691,2.17314,2.17314,0,0,0,.07959,1.10055c.16848.53806.03545,1.13771.33748,1.65174.02765.047-.02993.14416-.04794.218-.76852-.38787-1.53152-.78491-2.283-1.20629-1.67951-.94172-3.30679-1.9678-4.93093-2.99949-1.45911-.92685-2.865-1.93088-4.25461-2.95791-1.2152-.89816-2.41793-1.81541-3.55793-2.80577-1.2359-1.07366-2.44176-2.182-3.6354-3.30493a24.86359,24.86359,0,0,1-3.06066-3.57054c.05134-.20435.08335-.2423.23629-.15312a4.828,4.828,0,0,0,1.43812.511.52668.52668,0,0,1,.23813.12122,1.60359,1.60359,0,0,0,1.19108.43817A.29762.29762,0,0,1,79.22829,54.13966Z"/><path class="cls-9" d="M142.40007,12.61785a13.48494,13.48494,0,0,1,1.614,1.7162,3.12216,3.12216,0,0,1,.6203.826.83243.83243,0,0,1,.10336.40486,29.93735,29.93735,0,0,1-1.018,9.32673,35.60688,35.60688,0,0,1-2.89424,7.23567,28.89817,28.89817,0,0,1-3.46014,5.16935,15.18468,15.18468,0,0,1-4.90338,3.95859,7.14585,7.14585,0,0,1-2.633.66228c-1.485.11313-2.97374.0919-4.46119.07893-1.64028-.0143-3.27788-.10843-4.91429-.21955-.15389-.01045-.30791-.0098-.46183-.0077a1.39138,1.39138,0,0,1-.92223-.19241.46476.46476,0,0,0-.21986-.06594,5.42163,5.42163,0,0,1-1.53577-.45045,7.89493,7.89493,0,0,0-1.96512-.51987,23.65433,23.65433,0,0,1-5.86638-1.81751,11.52866,11.52866,0,0,1-1.30791-.73542c-.15028-.0924-.31543-.1872-.30243-.407.22846-.127.4242-.00546.61067.097a23.4676,23.4676,0,0,0,3.85491,1.62176,3.38848,3.38848,0,0,0,1.09277.18276,15.30779,15.30779,0,0,1,1.92664.33265,2.34707,2.34707,0,0,0,1.34955-.14457,2.16867,2.16867,0,0,1,.8951-.19275c.64091.01848,1.27227.13354,1.91353.16926,1.38226.077,2.76328.13827,4.14817.1429.89634.003,1.79334.13281,2.68912.06411,1.11215-.08529,2.23-.01911,3.33935-.15465A7.78215,7.78215,0,0,0,133.002,38.427a15.81364,15.81364,0,0,0,4.35407-4.18769,29.11489,29.11489,0,0,0,5.03734-12.19864,23.78845,23.78845,0,0,0,.35491-4.89843,38.02859,38.02859,0,0,0-.4891-3.92815C142.22722,12.99725,142.18344,12.77648,142.40007,12.61785Z"/><path class="cls-10" d="M136.69742,8.77316a14.21436,14.21436,0,0,1,2.6957,1.46552.45578.45578,0,0,1,.08343.17234c.32548,1.92136,1.0284,3.76048,1.21959,5.71318a27.30971,27.30971,0,0,1,.24759,3.79337A23.71647,23.71647,0,0,1,140.062,25.414a23.80923,23.80923,0,0,1-4.3702,8.75267,12.24255,12.24255,0,0,1-4.75074,3.64252,7.18317,7.18317,0,0,1-2.47409.50461c-1.58774.07127-3.17507.15184-4.76461.13975-.69139-.00525-1.38075-.0874-2.07394-.08812a1.84631,1.84631,0,0,1-.74621-.172,2.064,2.064,0,0,0-.97192-.18471,14.85159,14.85159,0,0,1-2.817-.35447c-.36107-.0828-.73942-.0556-1.107-.11906a35.14306,35.14306,0,0,1-5.67583-1.34769c-.67579-.23653-1.21766-.70464-1.86969-.97131-.51207-.44135-1.11846-.76242-1.59875-1.24557a7.96692,7.96692,0,0,1-1.15038-1.32454.44662.44662,0,0,1-.09218-.395c.0743-.14146.18785-.116.29474-.05686a5.07379,5.07379,0,0,1,1.2102.797,7.99059,7.99059,0,0,0,3.52791,2.01639,1.39959,1.39959,0,0,0,.45393.06736.25708.25708,0,0,1,.1095.05665,3.42377,3.42377,0,0,0,1.26833.41414,44.22112,44.22112,0,0,0,5.62021.89464c1.5407.14345,3.0661.40147,4.623.45061a47.21536,47.21536,0,0,0,6.10616-.183,6.87517,6.87517,0,0,0,3.20539-1.32462,14.68648,14.68648,0,0,0,5.08011-6.533,17.30226,17.30226,0,0,0,1.344-5.89343c.05562-.88241.16533-1.76392.14232-2.64783a35.49512,35.49512,0,0,0-.75113-6.64016c-.31414-1.44484-.75379-2.85254-1.1487-4.27388C136.62934,9.1933,136.52481,8.97667,136.69742,8.77316Z"/><path class="cls-11" d="M120.90466,38.11948a4.59279,4.59279,0,0,0,1.21038.15815c.86994-.01815,1.73663.13085,2.6078.07151,1.04812-.07139,2.09746-.06515,3.147-.08059a8.4591,8.4591,0,0,0,5.07176-1.69475,15.41812,15.41812,0,0,0,4.1368-4.52523,27.46938,27.46938,0,0,0,2.57869-5.64,23.77878,23.77878,0,0,0,.983-4.4755,16.45488,16.45488,0,0,0,.204-2.39583,34.55309,34.55309,0,0,0-.55742-5.23756c-.19506-1.046-.58713-2.0343-.77952-3.07542a3.55363,3.55363,0,0,1-.11395-.98561,16.19331,16.19331,0,0,1,3.00695,2.37917,3.2753,3.2753,0,0,0,.11807,1.54061,21.12739,21.12739,0,0,1,.33107,4.806,28.53027,28.53027,0,0,1-1.53383,7.8049,29.71264,29.71264,0,0,1-3.00979,6.24523,18.248,18.248,0,0,1-3.00861,3.76365,11.13691,11.13691,0,0,1-4.89267,2.90377,6.29249,6.29249,0,0,1-1.43458.19727c-1.37172-.01-2.74177.18135-4.1098.077-1.115-.085-2.23-.00474-3.34068-.07709-1.30966-.08531-2.62432-.11695-3.92712-.2964a.82473.82473,0,0,0-.59637-.30008,44.4847,44.4847,0,0,1-4.97073-1.103,2.00012,2.00012,0,0,1-.60752-.23107c-.15143-.09259-.27477-.2048-.13612-.40094a.72165.72165,0,0,1,.56059-.00062c.9515.21,1.90057.43047,2.85812.61341.36816.07033.74035.06535,1.1088.113a.29419.29419,0,0,0,.189-.02085c.61733-.38027,1.27194-.14593,1.91247-.11665a20.67854,20.67854,0,0,0,2.34471-.00586A3.37271,3.37271,0,0,1,120.90466,38.11948Z"/><path class="cls-12" d="M103.57168,72.393c-.32184-.24194-.76469-.20157-1.07856-.46212-.0928-.59992-.00825-.6786.56354-.52367.08664.02348.17391.04445.26081.06683.1864.048.2846-.00283.31137-.21294.111-.87076.53558-1.65205.72824-2.50077a.28672.28672,0,0,1,.29772-.25254c.19583.0164.2235.1819.24019.34056.00538.05105-.00194.103.00309.1536.014.1408-.10938.33042.09433.40678a.49906.49906,0,0,0,.57477-.09782,1.24,1.24,0,0,1,.88792-.389,1.00218,1.00218,0,0,0,.50867-.24574c.6278-.50684,1.28668-.97346,1.93005-1.45964.74578-.56358,1.49655-1.122,2.22744-1.7054a8.60687,8.60687,0,0,1,1.05635-.767c.38111-.21947.39572-.46259.03886-.74032-.40479-.315-.80951-.62924-1.19027-.97358a.5836.5836,0,0,1-.25881-.408c.03-.15775.155-.22481.27891-.29315a.74582.74582,0,0,1,.71764.16675,16.38552,16.38552,0,0,1,1.61072,1.23028.40822.40822,0,0,0,.15181.11346c.87366.28791,1.66947.75,2.50706,1.1184a6.22362,6.22362,0,0,0,1.81591.56985.46712.46712,0,0,1,.43017.62711c-.02656.11375-.10114.20642-.13451.31685a.61968.61968,0,0,1-.16442.25674,17.28919,17.28919,0,0,1-1.85563,1.54729c-1.22158.73238-2.33765,1.61933-3.50552,2.4303a14.362,14.362,0,0,1-3.41307,1.97371,3.62208,3.62208,0,0,0-1.65361,1.26619.5305.5305,0,0,1-.50961.275,15.80776,15.80776,0,0,1-2.1755-.81795,6.0907,6.0907,0,0,1-1.28914-.57558C103.59822,72.68233,103.7507,72.535,103.57168,72.393Z"/><path class="cls-13" d="M136.69742,8.77316a7.82984,7.82984,0,0,0,.50587,1.99784,34.88882,34.88882,0,0,1,1.08788,4.72767c.12928.879.21759,1.7678.28267,2.65907a20.88063,20.88063,0,0,1,.11719,2.71373,27.25263,27.25263,0,0,1-.69478,5.83083,18.77469,18.77469,0,0,1-1.66285,3.9533,13.56122,13.56122,0,0,1-1.4845,2.27488,14.27748,14.27748,0,0,1-2.69851,2.48827,7.72612,7.72612,0,0,1-4.23116,1.48914c-1.50756.0591-3.01363.16174-4.52264.12776a15.98027,15.98027,0,0,1-3.01449-.18016c-1.5243-.33169-3.08218-.30792-4.61-.61778-1.11509-.22615-2.25578-.38308-3.38242-.586-.33682-.06068-.65058-.21584-.99617-.25858a.2807.2807,0,0,1-.27235-.27737c.06083-.21.22161-.11914.34211-.10144q2.546.37405,5.10281.6636c.40593.04655.81782.03961,1.22667.07736a1.92914,1.92914,0,0,0,.93-.19767c.09868.02591.15051.14128.26822.1349.62743-.03405,1.25255.09338,1.8796.03347a3.83828,3.83828,0,0,1,.80679-.01844,24.918,24.918,0,0,0,3.38405.05673c.83054-.01609,1.66271-.09366,2.49366-.14318a6.80616,6.80616,0,0,0,1.55634-.20228,8.78292,8.78292,0,0,0,3.43676-2.05583c.42479-.3897.82317-.80927,1.21988-1.2293A6.70621,6.70621,0,0,0,135.2198,29.452a28.81233,28.81233,0,0,0,1.29992-6.51405,33.26675,33.26675,0,0,0-.05988-4.83817,38.233,38.233,0,0,0-1.93276-9.24093c-.10169-.3107-.32829-.62677-.14153-.98813A18.36523,18.36523,0,0,1,136.69742,8.77316Z"/><path class="cls-14" d="M107.88567,37.58044a4.88922,4.88922,0,0,0,1.70638,1.07067,21.11875,21.11875,0,0,0,4.04608,1.4196c.94379.21238,1.9021.36589,2.8363.61243a3.24543,3.24543,0,0,1,1.2041.43323c.37215.27847.87317.15874,1.28652.31677a10.83015,10.83015,0,0,0,3.06813.31228,59.5159,59.5159,0,0,0,6.25651.13492,11.93408,11.93408,0,0,0,3.07535-.31255,7.78777,7.78777,0,0,0,2.04512-.92869,16.12508,16.12508,0,0,0,2.97282-2.40721,25.57575,25.57575,0,0,0,2.14975-2.59223,27.33583,27.33583,0,0,0,1.81613-2.83937,36.16541,36.16541,0,0,0,1.68174-3.40353,29.99814,29.99814,0,0,0,1.40915-3.87671,30.41675,30.41675,0,0,0,1.04545-5.16361,24.07754,24.07754,0,0,0,.14838-2.48292c-.00775-.90442-.0001-1.809.00084-2.71345a11.5173,11.5173,0,0,1,.91542,1.25159.20678.20678,0,0,1,.07913.16825,17.0005,17.0005,0,0,1-.086,2.83832,31.19139,31.19139,0,0,1-.41736,3.27895,37.32673,37.32673,0,0,1-1.68239,6.03414A36.19168,36.19168,0,0,1,140.97,34.024a28.53852,28.53852,0,0,1-3.618,5.10692,14.29922,14.29922,0,0,1-4.445,3.49744,6.95075,6.95075,0,0,1-2.85246.6972c-1.03784.027-2.07672.09239-3.11343.05245-1.57375-.06064-3.14811-.10794-4.71817-.27085-1.22315-.12691-2.45235-.20024-3.66373-.42056-.65494-.11912-1.29957-.29214-1.94416-.46013a.577.577,0,0,1-.29162-.17829.497.497,0,0,0-.40532-.255,9.837,9.837,0,0,1-1.71025-.43629,21.07741,21.07741,0,0,1-6.67215-3.13787,20.58954,20.58954,0,0,1-2.763-2.76113.62885.62885,0,0,1-.23213-.544c.26974-.13867.39625.09383.5317.232a22.55314,22.55314,0,0,0,2.0488,1.8916,2.14474,2.14474,0,0,0,.38423.24814A1.00664,1.00664,0,0,1,107.88567,37.58044Z"/><path class="cls-15" d="M146.40217,18.02018l.35708.6233c.12143.0401.09686.13789.09035.22855l.403,1.06605a4.20541,4.20541,0,0,1-.07476,1.44719A35.69489,35.69489,0,0,1,143.34637,33.502c-.55665,1.06619-1.14052,2.1221-1.79854,3.13453a32.45482,32.45482,0,0,1-3.65764,4.69265,13.18608,13.18608,0,0,1-5.71823,3.88944,7.66226,7.66226,0,0,1-2.04954.3098c-1.32031.02436-2.63926.08715-3.96028.1023a46.41328,46.41328,0,0,1-6.96116-.56232,10.33953,10.33953,0,0,1-1.98439-.40584.94674.94674,0,0,1-.50427-.25532.77586.77586,0,0,0-.66629-.49471c-.27141-.05715-.60233-.09659-.60945-.49984a4.28146,4.28146,0,0,1,1.00356-.26032c.94346.1892,1.8853.39468,2.84218.50043q1.87179.20685,3.74752.38043a16.58352,16.58352,0,0,0,1.76319.10077,27.56619,27.56619,0,0,0,3.37586-.01085,9.19709,9.19709,0,0,1,1.57684-.02,7.95344,7.95344,0,0,0,5.14872-1.83418,24.26924,24.26924,0,0,0,5.56139-6.222,35.8574,35.8574,0,0,0,3.81839-7.74542,34.26946,34.26946,0,0,0,1.79874-7.74236,15.46379,15.46379,0,0,0,.15263-2.1076C146.2216,18.29007,146.2084,18.10825,146.40217,18.02018Z"/><path class="cls-16" d="M134.38555,7.87075a17.10437,17.10437,0,0,0,.6488,2.20209,42.39188,42.39188,0,0,1,1.2854,5.70263,37.27131,37.27131,0,0,1,.37471,6.14779,25.43922,25.43922,0,0,1-.56921,4.54341,26.38461,26.38461,0,0,1-1.27153,4.29165,4.907,4.907,0,0,1-1.00191,1.43776,11.65417,11.65417,0,0,1-3.52481,2.8643,7.23923,7.23923,0,0,1-2.89689.69248c-1.6493.07855-3.29791.18278-4.947.12089-1.14556-.043-2.29053-.03577-3.43549-.06307-.166-.004-.31936-.00084-.3-.23283a.3586.3586,0,0,1,.2412-.10419c-1.0197-.129-2.01157-.13571-2.99473-.24575-.22887-.02561-.456-.06269-.685-.08692-.12533-.01325-.26238-.02359-.299-.1864a.23531.23531,0,0,1,.17622-.21013c.12526-.06836.28414.01015.40282-.09084a19.76312,19.76312,0,0,1,2.51409.18613,9.71547,9.71547,0,0,0,1.21073.04455c.03828.00285.082-.01146.1147.0023.78444.32984,1.59014-.04531,2.38151.07132.13865.02043.294-.00905.405.08717a.83527.83527,0,0,0,.61654.14842c.23086-.00337.4619.00312.69271-.00169a2.843,2.843,0,0,0,.95113-.16487,2.28811,2.28811,0,0,1,1.43194.01338c.123.03807.24276.11954.36436.0379a1.51783,1.51783,0,0,1,1.39357-.09046.27369.27369,0,0,0,.14543.01189,7.68861,7.68861,0,0,0,2.64236-1.20681,12.47917,12.47917,0,0,0,3.14478-3.70567,10.02531,10.02531,0,0,0,.92631-2.83265c.26474-1.076.40945-2.17446.58978-3.26642.07284-.44115-.11924-.95669.2544-1.35152.06555-.06927.00218-.19824-.0514-.2889a.71217.71217,0,0,1-.08266-.44632,11.94481,11.94481,0,0,0-.00578-1.55951c-.01569-.524.01749-1.04063-.03434-1.57546A45.38392,45.38392,0,0,0,134.1761,12.307c-.37363-1.52253-.85675-3.01818-1.288-4.52668A2.16709,2.16709,0,0,1,132.845,7.479,9.28381,9.28381,0,0,1,134.38555,7.87075Z"/><path class="cls-17" d="M146.40217,18.02017a.83957.83957,0,0,0-.07545.48653,24.43214,24.43214,0,0,1-.36172,3.57166,30.34962,30.34962,0,0,1-.82279,3.84972,30.41932,30.41932,0,0,1-1.12158,3.33812c-.43008,1.07616-.86055,2.15237-1.37821,3.18829a38.30493,38.30493,0,0,1-2.73659,4.59542,25.51091,25.51091,0,0,1-3.87119,4.44641,12.94028,12.94028,0,0,1-2.62947,1.83244,7.40629,7.40629,0,0,1-3.86923.87207c-.924-.03728-1.84.11383-2.7634.0822-1.72872-.05921-3.45522-.09123-5.18022-.2883-1.55726-.1779-3.11788-.30817-4.65312-.63837a1.17762,1.17762,0,0,1-.5026-.15339c.04939-.23758-.13689-.23728-.27986-.26875a26.8308,26.8308,0,0,1-3.135-.9114,22.52186,22.52186,0,0,1-4.70418-2.246c-.13126-.08408-.31288-.14481-.27879-.36274.19881-.09.34881.03527.49432.12831a13.42536,13.42536,0,0,0,3.86889,1.75183c1.09646.28053,2.19254.60163,3.31449.79786.25125.04394.41494-.16671.6431-.12167a2.68655,2.68655,0,0,0,1.15236.36711,27.04228,27.04228,0,0,0,4.6463.64792c1.24785.10165,2.49529.1673,3.74419.238,1.026.05811,2.051.07791,3.07134.03737a10.64265,10.64265,0,0,0,2.326-.159,9.4743,9.4743,0,0,0,2.56019-1.10276,14.8314,14.8314,0,0,0,3.13769-2.62639,28.28851,28.28851,0,0,0,2.79982-3.63554,38.61212,38.61212,0,0,0,2.59542-4.72434,30.88875,30.88875,0,0,0,1.47885-3.85522,36.85593,36.85593,0,0,0,1.10168-4.21907,30.99759,30.99759,0,0,0,.444-3.33018c.08044-1.02067.15412-2.03811.14146-3.06155.09716-.02738.11878.04239.14189.11026Z"/><path class="cls-18" d="M116.74475,44.358a5.1833,5.1833,0,0,0,1.737.52215c.7304.04074,1.43451.22642,2.15995.28081.8883.06662,1.76484.26653,2.65892.27123a7.257,7.257,0,0,1,1.52068.14476c.22517.04927.423-.07709.64424-.06883.46142.0172.92409.01255,1.386.00372,1.13913-.02178,2.27979-.02076,3.4168-.08387a9.224,9.224,0,0,0,5.25782-2.08835c.54263-.42526,1.05222-.88882,1.59355-1.31634A12.65237,12.65237,0,0,0,138.658,40.3167c.7976-.91026,1.53132-1.87873,2.25554-2.84981a12.84585,12.84585,0,0,0,.70629-1.131c.7495-1.26163,1.49117-2.52986,2.131-3.85233a37.12655,37.12655,0,0,0,2.88092-8.43209,29.2205,29.2205,0,0,0,.54422-3.66192c.01281-.15157.05048-.301.07663-.45149a7.86825,7.86825,0,0,1,.61288,1.931,7.13353,7.13353,0,0,1-.18453,1.5628,37.2579,37.2579,0,0,1-2.05,6.92862,41.37794,41.37794,0,0,1-3.3565,6.568,29.046,29.046,0,0,1-4.64327,5.82247,15.8524,15.8524,0,0,1-3.25338,2.50978,9.61266,9.61266,0,0,1-4.40463,1.21746c-1.5741.05856-3.15.10062-4.723.20241a8.07208,8.07208,0,0,1-1.60468-.09262c-.60716-.082-1.23518-.08586-1.854-.12354a15.4016,15.4016,0,0,1-2.40393-.28528,14.04761,14.04761,0,0,1-2.06986-.31742,7.76694,7.76694,0,0,1-1.81892-.43235,23.17278,23.17278,0,0,1-3.13076-1.01841c-.15282-.06474-.3681-.08589-.34864-.33718.174-.1304.3437-.02395.50758.02054.6167.16743,1.21384.40207,1.838.5443a7.48162,7.48162,0,0,0,1.28562.16063c.01455-.11975-.09661-.17079-.08155-.26521A1.08042,1.08042,0,0,1,116.74475,44.358Z"/><path class="cls-19" d="M107.04324,74.221a1.16486,1.16486,0,0,0,.4876-.402,3.66645,3.66645,0,0,1,1.77182-1.286,12.2819,12.2819,0,0,0,3.03944-1.74819C113.745,69.81005,115.13,68.81,116.545,67.85164a6.59833,6.59833,0,0,0,1.50939-1.38909,8.54066,8.54066,0,0,1,.92914-.89265c.07356-.053.15321-.12853.11768-.22-.17008-.438.13347-.48922.43342-.55026.04939-.01005.09734-.02752.14753-.03819a2.1906,2.1906,0,0,1,1.12757.10089,3.22648,3.22648,0,0,0,2.04985.08594,1.3074,1.3074,0,0,1,.30165-.04055,2.908,2.908,0,0,1,.63671.13584,1.11393,1.11393,0,0,0,.78747-.01481.509.509,0,0,1,.33949-.02526c.15064.03876.21194.15176.07786.23942-.51247.335-.63118.95113-1.01508,1.37434-1.67021,1.05792-3.37093,2.06336-5.12186,2.98287-.5821.30569-1.16052.6184-1.74063.92789a9.56661,9.56661,0,0,1-1.38995.70674c-.58892.26689-1.18253.52395-1.76591.80245-1.91187.91272-3.86955,1.715-5.856,2.449a.6926.6926,0,0,1-.378.00127A2.12354,2.12354,0,0,1,107.04324,74.221Z"/><path class="cls-20" d="M117.36081,45.74476a2.37123,2.37123,0,0,0,1.52856.12722c.11486-.04632.11408.17394.277.19009.82263.08153,1.63983.2302,2.46356.28261.36381.02314.73909.22524,1.12089-.00208.0829-.04935.22982.21176.35914.15974.56872-.22878,1.08319.14806,1.64744.107,1.43945-.10479,2.88794-.08445,4.32769-.18648a20.4284,20.4284,0,0,0,2.47363-.21231,8.97054,8.97054,0,0,0,1.85458-.59473,13.92409,13.92409,0,0,0,3.59124-2.443,27.76573,27.76573,0,0,0,4.95592-5.91555,42.37251,42.37251,0,0,0,2.34388-4.171,39.69047,39.69047,0,0,0,2.89611-7.89769,23.01548,23.01548,0,0,0,.59278-3.15074.635.635,0,0,1,.07223-.16867,5.8063,5.8063,0,0,1,.37392,1.77335,28.64387,28.64387,0,0,1-.99262,3.83407,36.172,36.172,0,0,1-2.33752,5.89743,38.876,38.876,0,0,1-5.0879,7.82153,21.50176,21.50176,0,0,1-5.30465,4.64015,7.956,7.956,0,0,1-3.70236,1.19581c-1.98083.093-3.95484.32428-5.943.28413a30.06792,30.06792,0,0,1-3.52744-.22894c-1.25382-.17361-2.50744-.35015-3.76433-.50349a21.02157,21.02157,0,0,1-2.33428-.6002c-.14683-.0416-.34725-.037-.3778-.2607a.21673.21673,0,0,1,.24606-.13817,5.32863,5.32863,0,0,1,1.31919.07982A1.39052,1.39052,0,0,0,117.36081,45.74476Z"/><path class="cls-21" d="M148.2477,32.57313a10.80361,10.80361,0,0,1-.23985,1.77607,20.3438,20.3438,0,0,1-1.64358,3.03818,42.84148,42.84148,0,0,1-4.68447,6.32727,31.25654,31.25654,0,0,1-5.39619,4.90135,11.66564,11.66564,0,0,1-5.764,2.16729c-.98176.086-1.95133.29277-2.93218.40249q-1.183.13233-2.3719.19793a8.57713,8.57713,0,0,1-1.84045.05628c-.63793-.0492-1.27334-.12809-1.90935-.179-1.38047-.11058-2.75033-.31323-4.12947-.42973-.24419-.105-.50621-.15649-.75516-.24687-.15179-.0551-.32366-.09922-.33165-.31175.08531-.18554.25088-.15905.39788-.13056.29007.05622.58961.01455.87622.09741a.4298.4298,0,0,0,.32987-.06641,7.04169,7.04169,0,0,1,1.56353.12508,6.12282,6.12282,0,0,0,.87759.04789c.96026-.02789,1.91519.10886,2.8738.10632a11.07486,11.07486,0,0,1,1.8787.03485.54316.54316,0,0,0,.32966-.0901.97973.97973,0,0,1,.55666-.12562,8.27806,8.27806,0,0,0,2.16119-.14523,33.32937,33.32937,0,0,0,4.5927-.705,4.039,4.039,0,0,0,1.883-.79983,3.16155,3.16155,0,0,1,1.07142-.57884,3.33652,3.33652,0,0,0,1.21459-.90491,14.96337,14.96337,0,0,1,1.26465-.98311c.05712-.0501.15008-.0732.18353-.13673.41855-.79467,1.29254-1.10587,1.85225-1.75046a2.92808,2.92808,0,0,0,.43486-.58222c.181-.356.55619-.54186.77534-.88154.37791-.58576.99718-.9876,1.328-1.61118.32356-.60992.87237-1.03549,1.238-1.60858.32919-.516.7021-1.01789.993-1.542.33987-.61242.73875-1.19,1.07631-1.804.34093-.62009.68064-1.24637,1.04458-1.85678.27231-.45675.44132-.9802.69821-1.45287C147.84653,32.74112,147.93168,32.47908,148.2477,32.57313Z"/><path class="cls-22" d="M117.59213,46.51457c.88566.02016,1.74834.23406,2.62565.31462.94634.08689,1.87787.27184,2.83264.323a30.27866,30.27866,0,0,0,3.0705.03964,34.19161,34.19161,0,0,0,3.91921-.27145c.465-.07629.954.02631,1.43506-.06046a10.00722,10.00722,0,0,0,4.159-1.86976,21.742,21.742,0,0,0,3.38043-3.04795,36.68708,36.68708,0,0,0,3.11655-3.97461,40.08348,40.08348,0,0,0,2.624-4.50677,41.52752,41.52752,0,0,0,2.89124-7.70721c.17332-.64084.34025-1.28138.45722-1.9347a.25108.25108,0,0,1,.13579-.17645,7.34615,7.34615,0,0,1,.1654,1.08033,1.50077,1.50077,0,0,1-.02256.82923,44.22622,44.22622,0,0,1-2.58363,7.08036,39.25853,39.25853,0,0,1-4.01591,6.82338,33.01778,33.01778,0,0,1-3.999,4.61605,13.15388,13.15388,0,0,1-5.7015,3.37679,14.66635,14.66635,0,0,1-2.29183.24407c-1.54424.14569-3.09564.18811-4.64236.29974a14.40709,14.40709,0,0,1-2.2657-.092c-1.08522-.0925-2.16963-.19414-3.2552-.28309-.86953-.07124-1.72928-.22584-2.59562-.32578a.38667.38667,0,0,1-.236-.11966c-.2359-.50293-.21136-.55887.3132-.638A.96506.96506,0,0,1,117.59213,46.51457Z"/><path class="cls-23" d="M123.44683,51.36678a40.07889,40.07889,0,0,0,4.76459-.38072c1.22184-.17662,2.448-.32589,3.66633-.52352a10.25257,10.25257,0,0,0,3.73867-1.53287,24.63415,24.63415,0,0,0,3.123-2.40369c.69-.5981,1.32317-1.25064,1.9578-1.90132a39.69824,39.69824,0,0,0,3.96531-4.81784,41.99537,41.99537,0,0,0,3.10991-5.10987,3.33646,3.33646,0,0,1,.2354-.34776,13.2907,13.2907,0,0,1-.45,2.3048c-.97638,1.54833-1.93538,3.10774-3.03461,4.57516-.81455,1.08738-1.70826,2.106-2.61813,3.11314-.69567.77006-1.42163,1.50945-2.1686,2.22792a22.36163,22.36163,0,0,1-4.63882,3.51939,8.26011,8.26011,0,0,1-2.48339.99468c-.731.11648-1.45835.25031-2.19365.33841-.944.11311-1.88266.26781-2.82241.41269a3.21121,3.21121,0,0,1-.68818.04218,7.7503,7.7503,0,0,0-1.30939.15166.77886.77886,0,0,1-.26658-.01033,3.38045,3.38045,0,0,0-1.26009-.06851,6.24526,6.24526,0,0,1-1.74969-.10888c-.2287-.03238-.45711-.0528-.6878-.0629-.14621-.00641-.3199.01527-.37811-.18427.09257-.27058.33176-.262.54243-.25608C122.34951,51.35357,122.89926,51.304,123.44683,51.36678Z"/><path class="cls-24" d="M116.82178,47.13073a12.30022,12.30022,0,0,0,1.54371.22842c1.19127.22439,2.40548.24782,3.608.363a16.1517,16.1517,0,0,0,2.97965.17388c1.44678-.12956,2.90162-.11371,4.34711-.28721.71854-.08624,1.44936-.08366,2.17277-.16325a7.10224,7.10224,0,0,0,2.19331-.65366,14.144,14.144,0,0,0,3.50555-2.31625,30.82014,30.82014,0,0,0,3.16683-3.33153,37.89455,37.89455,0,0,0,3.49007-4.97607,41.20671,41.20671,0,0,0,2.52666-5.03909,42.33039,42.33039,0,0,0,2.00324-5.9126,2.17753,2.17753,0,0,0,.0461-.49359c.11531.10774.051.25964.09469.385.05368.12759-.01716.2724.055.39743l.02082.44944a.64976.64976,0,0,1,.01249.30106,21.18542,21.18542,0,0,1-.98329,3.11462,43.13881,43.13881,0,0,1-4.24813,8.48519,34.05981,34.05981,0,0,1-3.68938,4.82382,18.42115,18.42115,0,0,1-6.55781,4.93168,8.95581,8.95581,0,0,1-2.62535.554c-1.02142.08232-2.04225.17665-3.063.26933a13.602,13.602,0,0,1-1.41778.09459c-.80611-.0119-1.60671.0745-2.41723.03137-1.51283-.08051-3.01073-.2809-4.51354-.44225a2.4891,2.4891,0,0,1-.79681-.10286.65089.65089,0,0,0-.43622-.2197,5.25869,5.25869,0,0,1-1.254-.35945c-.14776-.04472-.37194-.084-.2704-.34748A.44962.44962,0,0,1,116.82178,47.13073Z"/><path class="cls-25" d="M120.1343,32.65112c-.051.00423-.12522-.01192-.14942.01572-.40368.46126-.94536.36587-1.46161.3687-.55147.003-1.10365.01851-1.65431-.0028-1.42546-.05518-2.84479-.17766-4.264-.33219a2.56123,2.56123,0,0,0-1.37314.09729c-.36572.16312-.80414-.046-1.17968-.16926a6.83821,6.83821,0,0,1-2.29375-1.20591,5.66318,5.66318,0,0,1-1.57275-2.26738,24.20071,24.20071,0,0,1-1.33-4.66094c-.193-.97127-.30294-1.95959-.43373-2.94244-.07043-.52935-.10808-1.06313-.15607-1.59532a.26887.26887,0,0,0-.15466-.2447.96612.96612,0,0,1-.18688-.60855c-.144-1.22913-.13816-2.46772-.2266-3.70051-.01242-.17313-.06563-.39147.18916-.46995a3.44666,3.44666,0,0,1,.51756.77842c-.14011.17313.0045.3409.00637.511.01029.9329.1731,1.852.25171,2.77853.09024,1.06348.27264,2.11907.41206,3.17848a36.37318,36.37318,0,0,0,1.21962,5.20748,13.61022,13.61022,0,0,0,.57091,1.78048,3.57339,3.57339,0,0,0,1.46766,1.47429,9.9056,9.9056,0,0,0,3.65679,1.17055,4.46966,4.46966,0,0,1,1.57571.40077,1.0574,1.0574,0,0,0,.82494.14939,1.38873,1.38873,0,0,1,.63866.10051,10.20224,10.20224,0,0,0,2.64251.05678,2.39956,2.39956,0,0,1,1.38566.10446.28873.28873,0,0,0,.25629-.00451C119.60252,32.40426,119.86483,32.55542,120.1343,32.65112Z"/><path class="cls-26" d="M148.2477,32.57313a.47992.47992,0,0,0-.372.302c-.201.39841-.394.80154-.56981,1.21155-.09115.21263-.23361.39807-.32607.59583a4.40163,4.40163,0,0,0-.52474,1.07639c-.03849.22206-.291.27392-.38484.49287a3.24934,3.24934,0,0,1-.69655,1.15472.58586.58586,0,0,0-.19562.36726.71736.71736,0,0,1-.2318.47409,11.60433,11.60433,0,0,0-1.088,1.62136,6.85465,6.85465,0,0,0-1.063,1.36284c-.21565.47456-.72048.71628-.94815,1.14048-.1715.31956-.56882.448-.6114.83655a.0507.0507,0,0,1-.017.03382c-.66924.43469-.93557,1.25468-1.59987,1.68506-.26329.17057-.59721.26444-.75364.54742a2.76389,2.76389,0,0,1-1.17849,1.09835c-.39231.203-.56629.62869-.98175.77312-.12945.045-.09981.23749-.23493.32956a7.38783,7.38783,0,0,1-1.6006.85995c-.32477.1192-.46926.44472-.81072.54954a17.27,17.27,0,0,1-2.05127.60827c-.57027.1-1.16129.14229-1.72189.25514-.30637.06168-.73092-.16848-.958.2342a.89924.89924,0,0,0-.76623-.05155c-.47283.1204-.97092.10718-1.43681.19231a11.61484,11.61484,0,0,1-1.26888.04137c-.05109.004-.11886-.01437-.151.01182-.44906.36561-.95762.10124-1.4357.14907a22.843,22.843,0,0,1-2.322.00638c-.47945-.00079-.98353-.10322-1.47643-.08376a18.75811,18.75811,0,0,1-2.57016-.23767.61116.61116,0,0,1-.46889.02662,7.66734,7.66734,0,0,1-1.033-.22274c-.14814-.04322-.37571-.0435-.344-.30752.20133-.20982.44914-.12552.68882-.11492.727.03212,1.45429.05667,2.18144.0167.74163.01489,1.47628.13829,2.21866.15379.10127.00211.20268.03835.30524.03406,1.03928-.0435,2.07373.1348,3.11194.07767,1.12433-.06186,2.24743-.13288,3.36834-.26025,1.10707-.1258,2.21541-.24583,3.3219-.37663a10.11311,10.11311,0,0,0,4.742-1.98046,32.51407,32.51407,0,0,0,7.86674-8.40788,49.94772,49.94772,0,0,0,3.10735-5.263c.40692-.79852.79173-1.61058,1.13407-2.44114a1.15619,1.15619,0,0,1,.33754-.58959.08513.08513,0,0,1,.08839.06922.2057.2057,0,0,1-.033.177A16.83549,16.83549,0,0,1,148.2477,32.57313Z"/><path class="cls-27" d="M132.69108,50.98169a2.85122,2.85122,0,0,0,.97-.323,16.38384,16.38384,0,0,0,3.281-1.86653,26.65153,26.65153,0,0,0,3.08651-2.62642c.5762-.54839,1.12758-1.14166,1.67348-1.73043.64976-.70076,1.24055-1.44918,1.88-2.1569a21.266,21.266,0,0,0,1.76044-2.35926c.59459-.87625,1.15305-1.77693,1.73357-2.66282.14079-.21485.18579-.51047.48185-.60238a10.9656,10.9656,0,0,1-.46328,1.92339,40.71771,40.71771,0,0,1-3.39635,4.65641c-.66335.8172-1.35737,1.6108-2.09229,2.3597a24.76406,24.76406,0,0,1-1.905,1.79123c-1.06881.88057-2.10177,1.80189-3.25372,2.58273a12.81455,12.81455,0,0,1-5.5705,2.186c-1.10576.147-2.2035.3755-3.31092.49669a14.68121,14.68121,0,0,1-2.29174.20934c-.49885.01525-.99533.00854-1.49458.06765a11.5058,11.5058,0,0,1-2.02516-.166.18578.18578,0,0,1-.17149-.13344c.10047-.15869.26669-.138.41512-.13724.6913.00359,1.38013-.09613,2.07248-.04651a1.2164,1.2164,0,0,0,.27891-.00575c-.23486.01216-.47854.009-.722.00226-.12274-.00337-.24689-.041-.252-.18162-.00539-.14762.11145-.22.24437-.25554a.22394.22394,0,0,1,.11464-.00351,5.84678,5.84678,0,0,0,2.20455-.0283c.99771-.10544,1.99822-.18284,2.99041-.35449.91457-.15823,1.83818-.27156,2.75842-.40013A7.25026,7.25026,0,0,0,132.69108,50.98169Z"/><path class="cls-28" d="M148.47678,30.57166c-.41239.90673-.79564,1.82816-1.24413,2.71668-.63971,1.26731-1.32165,2.51253-2.06372,3.72555a43.19359,43.19359,0,0,1-3.67137,5.18324,31.52858,31.52858,0,0,1-3.88275,3.92249,18.32131,18.32131,0,0,1-3.031,2.13776,10.8828,10.8828,0,0,1-4.3576,1.206,25.19828,25.19828,0,0,0-2.84085.3423c-.38677.0776-.78631.0337-1.18278.0836a30.95328,30.95328,0,0,1-4.90538-.005,14.04221,14.04221,0,0,1-2.31845-.21193,3.86454,3.86454,0,0,1-1.53393-.18732c-.38815-.125-.76993-.26942-1.16034-.3898-.163-.05029-.40747-.08143-.31024-.37091a.41067.41067,0,0,1,.32712-.05719,5.06347,5.06347,0,0,0,1.47081.053c.6191.00989,1.20711.225,1.82217.27291,1.27633.09948,2.54574.275,3.82485.34834a31.75671,31.75671,0,0,0,4.5568-.2123c1.11086-.09587,2.22035-.21081,3.32734-.333a9.34072,9.34072,0,0,0,4.15041-1.63673,24.7394,24.7394,0,0,0,3.6461-3.06539,36.80168,36.80168,0,0,0,5.32948-6.79224,48.10432,48.10432,0,0,0,3.84461-7.65833c.05846-.14682.05172-.37572.30292-.38221a.48555.48555,0,0,1-.00286.305l-.02021.60118C148.47245,30.29149,148.57675,30.451,148.47678,30.57166Z"/><path class="cls-29" d="M73.06682,48.74368a21.82411,21.82411,0,0,1-1.61407-3.16934c-.09946-.22694-.01608-.29037.20212-.21886a.59486.59486,0,0,1,.22424.14611c.45813.45041,1.01478.77568,1.502,1.19257a2.025,2.025,0,0,0,1.97928.54614,7.24792,7.24792,0,0,1,1.208-.20551c.609.16277,1.24073.20351,1.85364.345a.33249.33249,0,0,1,.16409.2043,2.02222,2.02222,0,0,0,.4481.83532.2748.2748,0,0,1,.063.25191c-.20706.2749-.55933.2829-.83062.44369-.20611.12215-.276.19607-.19328.4671a6.39866,6.39866,0,0,0,.30361,1.24294.40046.40046,0,0,1-.048.46318.22952.22952,0,0,1-.25448-.01671,1.00549,1.00549,0,0,0-.80554-.14336.52942.52942,0,0,1-.42577-.142,8.27,8.27,0,0,0-2.02095-.91354,2.90189,2.90189,0,0,1-.97338-.59672A6.12912,6.12912,0,0,0,73.06682,48.74368Z"/><path class="cls-30" d="M148.55512,29.26227c-.6266,1.455-1.21663,2.92621-1.93327,4.34115a44.71082,44.71082,0,0,1-4.09737,6.7004,33.07006,33.07006,0,0,1-2.49771,3.00024A26.83065,26.83065,0,0,1,135.5079,47.252a9.70184,9.70184,0,0,1-4.19817,1.65274c-1.07146.12951-2.15693.15623-3.22237.319-1.21548.18569-2.44275.13322-3.65964.276a8.02556,8.02556,0,0,1-1.64013-.0887c-.56985-.05231-1.13584-.17382-1.70581-.19146a18.25738,18.25738,0,0,1-2.84129-.34994,2.47733,2.47733,0,0,0-.41725-.04447.09128.09128,0,0,1-.00651-.11068.90216.90216,0,0,1,.80426-.082,7.06508,7.06508,0,0,0,2.16225.13151,8.15274,8.15274,0,0,1,1.6.11805,3.82927,3.82927,0,0,0,1.92864.02232.67962.67962,0,0,1,.26731-.024,38.62478,38.62478,0,0,0,3.96332-.28986c.803-.0757,1.60556-.15951,2.40905-.22713a9.45445,9.45445,0,0,0,3.86159-1.32088c.90169-.50659,1.647-1.22232,2.52438-1.75435a.29627.29627,0,0,0,.08713-.07529c.49464-.68493,1.26638-1.079,1.80393-1.71846.40211-.47838.79028-.97516,1.23086-1.41247a15.07293,15.07293,0,0,0,1.51132-1.83623c.87089-1.18925,1.65913-2.43258,2.43653-3.68474.3293-.5304.67268-1.05956.97626-1.59977a21.669,21.669,0,0,0,1.44614-2.96879,14.88158,14.88158,0,0,1,1.047-2.34539,1.18982,1.18982,0,0,0,.14755-.47311,2.24323,2.24323,0,0,1,.32929-1.01532,1.00283,1.00283,0,0,0,.10773-.5562,3.0553,3.0553,0,0,1,.07535-1.02752q.05463-.05295.09316.0125l.00284,2.43058C148.56877,29.0873,148.63377,29.19755,148.55512,29.26227Z"/><path class="cls-31" d="M94.79179,8.17326A16.61389,16.61389,0,0,1,98.688,10.01711a1.17548,1.17548,0,0,0,.16865.0733.33067.33067,0,0,1,.17534.163c.21456.3628.60557.54466.87072.86058A10.36609,10.36609,0,0,1,102.137,16.5091c.19769,1.41144.14359,2.8366.24177,4.25269.092,1.327.1554,2.6556.26636,3.982a22.36482,22.36482,0,0,0,.86228,4.36423,11.77584,11.77584,0,0,0,.78748,1.95854,2.51923,2.51923,0,0,1,.19023.46043,1.86679,1.86679,0,0,0,.22136.48492.46959.46959,0,0,1,.04915.47158c-.24862.08442-.30631-.13095-.39048-.269a16.51989,16.51989,0,0,1-.97687-1.95936,12.13351,12.13351,0,0,0-.8058-1.2379,8.35835,8.35835,0,0,1-.48822-2.40215c-.071-.97184-.2265-1.93354-.28609-2.90631-.03284-.536-.07721-1.07486-.09837-1.60952-.04454-1.12558-.06217-2.254-.10694-3.37917a12.29371,12.29371,0,0,0-1.364-5.51533,8.5525,8.5525,0,0,0-4.37375-3.7619c-.50818-.21651-1.034-.38246-1.55189-.57118a8.73952,8.73952,0,0,0-1.2541-.29784.653.653,0,0,1-.52421-.32729c.04946-.25011.24079-.22215.41985-.20973a12.0891,12.0891,0,0,1,1.212.2046A.71474.71474,0,0,0,94.79179,8.17326Z"/><path class="cls-32" d="M104.41907,31.57285a18.45677,18.45677,0,0,1-1.92132-7.29483c-.10884-1.51407-.20855-3.0285-.25683-4.547-.01573-.49506-.03322-.99409-.05587-1.491a13.05622,13.05622,0,0,0-1.13327-5.15422,7.06852,7.06852,0,0,0-1.91307-2.55321c-.07911-.06281-.28137-.11488-.15856-.30462a.55645.55645,0,0,1,.43176.30211l.92786.63147c.1175.06036.2624.08732.29957.24561a11.35333,11.35333,0,0,1,.85555.82481,9.3291,9.3291,0,0,1,1.09757,3.45809,27.00512,27.00512,0,0,1,.26116,3.17516c.0416.96792.11235,1.93928.18539,2.90783.09355,1.24048.20543,2.47532.411,3.70158a20.81678,20.81678,0,0,0,1.5252,5.186,3.91758,3.91758,0,0,0,.56906.95525.56119.56119,0,0,1,.10737.65015,1.26374,1.26374,0,0,0,.41879.75215,8.79961,8.79961,0,0,0,2.04707,1.82033.67.67,0,0,1,.30741.27723c-.23973.15437-.41407-.02774-.58864-.13172a7.56852,7.56852,0,0,1-2.13265-2.00544,1.43788,1.43788,0,0,0-.49414-.4686A1.7617,1.7617,0,0,1,104.41907,31.57285Z"/><path class="cls-33" d="M105.65164,32.266c.03953-.40179-.26736-.64113-.44557-.93887a12.11781,12.11781,0,0,1-.928-2.099,19.66518,19.66518,0,0,1-.88735-3.47992c-.15485-.91638-.29186-1.83351-.37111-2.7622-.06817-.79894-.13883-1.60177-.18559-2.3991-.0415-.70765-.11683-1.41746-.11506-2.13067a16.48652,16.48652,0,0,0-.78934-5.07975,11.87874,11.87874,0,0,1-.43473-1.14455,8.36766,8.36766,0,0,1,1.38656,1.464,4.83522,4.83522,0,0,1,.41037,2.05656c.19307,2.65747.30547,5.32159.6403,7.967a27.99021,27.99021,0,0,0,.82314,3.99165c.04817.173.102.34443.13331.521a9.23193,9.23193,0,0,0,1.52766,3.53072A7.24876,7.24876,0,0,0,108.68,33.91351a14.19971,14.19971,0,0,0,1.99675.89186c.15221.05622.37724.05173.3674.31019-.19074.162-.37057.00288-.53351-.04517a8.04279,8.04279,0,0,1-3.58276-2.11373,6.7875,6.7875,0,0,0-1.18589-.74183C105.72955,32.20627,105.68252,32.24783,105.65164,32.266Z"/><path class="cls-34" d="M104.80425,28.338a34.12914,34.12914,0,0,1-.986-4.50682c-.12585-.84095-.15167-1.69635-.25046-2.542-.14173-1.21332-.12683-2.43818-.29513-3.6498-.0735-.52918-.01121-1.06664-.06328-1.60467-.0761-.7863-.20336-1.56142-.32788-2.33879a6.87847,6.87847,0,0,1,1.00535,1.2369.507.507,0,0,0-.07332.50888,11.278,11.278,0,0,1,.06922,1.56888c.0667.90112.15131,1.80091.22841,2.70125.08427,1.08941.17845,2.17761.3536,3.25729.126.77658.16156,1.56453.331,2.33708.27284,1.24425.60919,2.471.962,3.69356a6.11756,6.11756,0,0,0,2.618,3.51192c.22358.1465.44376.29818.66551.44746.06865.06391.17145.07662.2311.154a15.99893,15.99893,0,0,0,4.27325,1.23154c.60272.08737,1.20829.15514,1.81255.23183.05757.10476-.01837.165-.077.23106l-.23111.0772a3.15389,3.15389,0,0,1-1.134.02051,19.52773,19.52773,0,0,1-4.25142-1.16469,14.49944,14.49944,0,0,1-2.326-1.14871,5.01068,5.01068,0,0,1-1.60015-2.02789C105.39212,29.83643,105.13971,29.06992,104.80425,28.338Z"/><path class="cls-35" d="M146.71142,39.89043a5.62425,5.62425,0,0,1-.39789,1.23567,17.12,17.12,0,0,1-1.91484,2.54432,39.62619,39.62619,0,0,1-3.11974,3.44832,17.31867,17.31867,0,0,1-1.86945,1.5957c-.75335.55355-1.45456,1.17413-2.21214,1.72654a15.55454,15.55454,0,0,1-7.331,2.87819c-1.11816.14288-2.23274.3243-3.34217.53385a22.11521,22.11521,0,0,1-2.31921.23237,1.41975,1.41975,0,0,1-.60679-.032c-.12589-.24912-.05988-.39248.23-.45628.16925-.03725.3517-.02792.47222-.185.83931-.17726,1.69609-.23553,2.54226-.36864,1.64625-.259,3.29263-.512,4.92977-.82969a13.60078,13.60078,0,0,0,5.50948-2.60931,36.83694,36.83694,0,0,0,5.06454-4.53631,44.52769,44.52769,0,0,0,3.94646-4.91287c.10151-.146.1616-.36451.41324-.33072.00522.0007.011.01817.01146.02807A.17125.17125,0,0,1,146.71142,39.89043Z"/><path class="cls-36" d="M146.71142,39.89043c-.18891-.06421-.193.11189-.25548.20266-.72443,1.05256-1.48348,2.08223-2.29812,3.06373a44.01132,44.01132,0,0,1-3.2085,3.46409,37.719,37.719,0,0,1-4.27118,3.54794,13.89874,13.89874,0,0,1-3.36086,1.75054,16.50294,16.50294,0,0,1-3.04993.67883c-1.59613.25752-3.19195.51717-4.79022.76075-.38968.05939-.78837.0598-1.18291.08733a1.78043,1.78043,0,0,1-1.07323.16621c-.9369-.12685-1.8812-.13657-2.82156-.20658-.30724-.02288-.64415.0014-.80879-.3552a1.052,1.052,0,0,1,.78139-.08607,6.04642,6.04642,0,0,0,1.607-.00331,6.6506,6.6506,0,0,1,.99777-.01689,12.97032,12.97032,0,0,0,2.39592-.19133,30.24977,30.24977,0,0,0,3.05332-.32095c1.32039-.20644,2.64177-.40646,3.95347-.66983a9.86574,9.86574,0,0,0,2.52968-.98306,17.435,17.435,0,0,0,3.46411-2.38915c.859-.7442,1.73367-1.47169,2.54793-2.27147a46.53757,46.53757,0,0,0,5.26562-6.31247,5.98462,5.98462,0,0,1,.90778-1.22881A5.6038,5.6038,0,0,1,146.71142,39.89043Z"/><path class="cls-37" d="M73.06682,48.74368c.12777-.05487.129-.05615.24925.06265A3.766,3.766,0,0,0,74.70423,49.932c.56419.17616,1.08088.45455,1.63674.63843a1.34977,1.34977,0,0,1,.46082.266A.60482.60482,0,0,0,77.46216,51c.33852-.11991.5586.19626.84189.28974a1.02782,1.02782,0,0,1,.39369.22921.91308.91308,0,0,0,.73878.24089.3063.3063,0,0,1,.33132.14624c-.03541.20028-.086.39938-.10179.60119a.44518.44518,0,0,1-.24954.3909.49976.49976,0,0,0-.23236.78826,1.10956,1.10956,0,0,1,.04414.4532,1.7619,1.7619,0,0,1-1.4494-.44078c-.29142-.279-.76047-.1647-1.115-.364a2.52819,2.52819,0,0,1-.46767-.23529c-.066-.05618-.21608-.22265-.27788.03177-.91231-1.17223-1.68885-2.43627-2.4861-3.686C73.291,49.22393,73.18767,48.97821,73.06682,48.74368Z"/><path class="cls-38" d="M133.0008,60.07318a22.18137,22.18137,0,0,1-1.84216,1.54044c-.80875.634-1.64837,1.22859-2.47468,1.84017a2.47794,2.47794,0,0,0-1.65044.05836,1.47462,1.47462,0,0,1-.90652.01113c-.21637-.145-.02982-.44891-.23933-.60956-.04163-.03192.04051-.14807.11689-.16817.31782-.08363.43965-.37944.6381-.58749.21533-.22575.15478-.37542-.162-.44146-.1873-.03906-.37688-.0718-.56806-.0931-.09621-.01072-.21273-.00164-.24678-.13464a3.02321,3.02321,0,0,1,1.40876-.42224c.356-.047.70578-.122,1.05815-.18582a1.1234,1.1234,0,0,0,.61687-.28547c.21412-.21081.52-.1992.77194-.319a6.65855,6.65855,0,0,1,2.84139-.5332C132.60138,59.75169,132.92676,59.69987,133.0008,60.07318Z"/><path class="cls-39" d="M76.84062,9.95466A7.32113,7.32113,0,0,1,78.45584,9.076c.32112.55329.88748.45965,1.38938.51a2.798,2.798,0,0,1,.86.16609c.16724.07281.33106.16238.35718.36606.02442.19044.12661.22815.29272.19315a.64622.64622,0,0,1,.45065.02154,2.98093,2.98093,0,0,0,1.37788.26788,24.24153,24.24153,0,0,1,2.64759.41875.16754.16754,0,0,1,.11465.09417.46414.46414,0,0,1-.5294.43478.63386.63386,0,0,0-.36349.10758.62224.62224,0,0,1-.3357.05594,17.78213,17.78213,0,0,0-3.66207.09591,8.46876,8.46876,0,0,1-2.86041-.18685.7767.7767,0,0,1-.47135-.24455c-.28869-.30936-.56779-.62768-.84413-.948C76.75989,10.29,76.66251,10.12778,76.84062,9.95466Z"/><path class="cls-40" d="M141.07493,51.675a14.6887,14.6887,0,0,1-1.21722,1.69933,17.97155,17.97155,0,0,1-4.84748,2.76691,19.321,19.321,0,0,1-3.50809.97452,23.71784,23.71784,0,0,0-3.33849.87583c-.9746.14521-1.94854.29333-2.934.34425a3.75043,3.75043,0,0,0-.79123.04561,1.98722,1.98722,0,0,1-1.37565-.2951c.00829-.234.20512-.18908.33677-.21053.84584-.1379,1.67719-.358,2.53124-.44674a27.5192,27.5192,0,0,0,3.62773-.67071q1.06575-.26166,2.14782-.44093a15.01447,15.01447,0,0,0,4.78224-1.84444c1.441-.79541,2.76937-1.7586,4.14877-2.64567C140.76722,51.74378,140.87633,51.5722,141.07493,51.675Z"/><path class="cls-41" d="M141.07493,51.675c-.63763.421-1.28635.82631-1.91033,1.26665-.97214.686-2.01444,1.25129-3.04466,1.83991a13.37105,13.37105,0,0,1-3.60738,1.47512c-1.05434.24432-2.13166.38881-3.18154.65844-.96429.24764-1.944.40839-2.92465.56923a2.90923,2.90923,0,0,1-.41738.044,2.90134,2.90134,0,0,0-.90241-.01459c-.5548.10944-1.09671-.07036-1.64414-.00456a.36131.36131,0,0,1-.31066-.12389c-.01023-.146.10439-.16312.20129-.17874,1.31285-.21159,2.62942-.398,3.9468-.57554,1.71825-.41676,3.47156-.66414,5.19532-1.0502a14.52909,14.52909,0,0,0,4.44409-1.97872,21.16168,21.16168,0,0,0,2.86284-2.07226c.64067-.56436,1.436-.93638,2.06969-1.52368.13652-.12652.15555-.106.31751-.02C141.83541,50.56908,141.465,51.12841,141.07493,51.675Z"/><path class="cls-42" d="M126.60528,53.7546c.757-.17373,1.52644-.27337,2.29379-.38534a17.11263,17.11263,0,0,0,6.50111-1.901,31.98047,31.98047,0,0,0,3.53466-2.49569,30.93388,30.93388,0,0,0,3.17644-2.83051c.95035-1.00054,1.83791-2.05649,2.698-3.13542q.75056-.94151,1.50423-1.88053a10.71143,10.71143,0,0,1-.60427,1.68955,40.27266,40.27266,0,0,1-4.31059,4.79408,25.00917,25.00917,0,0,1-2.29128,1.92462,31.55283,31.55283,0,0,1-3.58429,2.52044,11.79782,11.79782,0,0,1-3.62138,1.363c-1.62684.29967-3.2553.59215-4.90392.75109a.58594.58594,0,0,1-.22937-.00574A.43289.43289,0,0,1,126.60528,53.7546Z"/><path class="cls-43" d="M92.55579,8.23593c.3514.30749.81362.26251,1.22516.37434a4.14415,4.14415,0,0,1,.54648.16493,1.13547,1.13547,0,0,0,.67417.467,4.10576,4.10576,0,0,1,.8014.35541c.14833.0787.30155.16292.28168.36625a.37414.37414,0,0,1-.32439.3288.70788.70788,0,0,1-.36647-.09755,9.82322,9.82322,0,0,0-3.44416-.871,12.22285,12.22285,0,0,1-4.23395-.85951A5.34745,5.34745,0,0,1,85.86011,7.405c-.17144-.17764-.25932-.3247.04027-.44982a6.13431,6.13431,0,0,0,1.13208-.0215,4.40877,4.40877,0,0,1,1.136.0828,2.05081,2.05081,0,0,1,.80356.17186,18.73535,18.73535,0,0,0,2.87532.79517A1.2075,1.2075,0,0,1,92.55579,8.23593Z"/><path class="cls-44" d="M144.7068,45.20157a12.03765,12.03765,0,0,1-.69357,1.46238,22.80941,22.80941,0,0,1-3.54025,3.39856,29.149,29.149,0,0,1-5.34378,3.61825,11.91127,11.91127,0,0,1-3.23372,1.09683c-.68341.11486-1.35514.29058-2.03882.40549a.97418.97418,0,0,1-.3824.01524,8.955,8.955,0,0,0-2.12634.13872c-.25086.02749-.50246.08453-.75478.11734-.1449.01884-.314.0502-.39-.14285a.29268.29268,0,0,1,.2415-.1675c.97748-.11679,1.89892-.50074,2.8789-.60213,1.11659-.28738,2.27178-.38867,3.3824-.71362a13.98577,13.98577,0,0,0,3.05319-1.33767c1.19112-.6858,2.25446-1.5579,3.38862-2.32155a32.03228,32.03228,0,0,0,3.33022-2.8215,19.66387,19.66387,0,0,0,1.746-1.88388c.12724-.14783.229-.34748.47563-.3271.00528.00044.0122.01746.013.02716A.16015.16015,0,0,1,144.7068,45.20157Z"/><path class="cls-45" d="M144.7068,45.20157c-.20664-.03007-.27951.15451-.364.267a21.02991,21.02991,0,0,1-1.70328,1.86308,19.08609,19.08609,0,0,1-2.07168,1.86875c-.00993.00769-.02463.00952-.034.01769a39.94234,39.94234,0,0,1-3.20127,2.389,18.34558,18.34558,0,0,1-3.29555,1.85242,16.49658,16.49658,0,0,1-3.83693.98333,2.3663,2.3663,0,0,1-.82156.15878c-1.05723.08336-2.09572.31145-3.15129.40764a.905.905,0,0,1-.37966-.02643c-.0963-.19153-.05769-.28658.19754-.30146a8.4733,8.4733,0,0,0,1.3596-.25841c1.3897-.31148,2.78973-.57042,4.19151-.81833a12.17778,12.17778,0,0,0,3.18-1.13142,20.47787,20.47787,0,0,0,3.62179-2.32363,37.13751,37.13751,0,0,0,4.1256-3.56256q1.34126-1.40472,2.5856-2.89973c.09388-.11328.16049-.275.35462-.25048A16.013,16.013,0,0,1,144.7068,45.20157Z"/><path class="cls-46" d="M85.93075,11.16261a18.72282,18.72282,0,0,0-2.88592-.45961,2.36436,2.36436,0,0,1-1.28918-.289c-.17518-.11107-.34005.01148-.51042.03645-.15641.02292-.38161.08615-.27681-.222.06227-.18306-.041-.25548-.177-.32573a1.95167,1.95167,0,0,0-.81022-.20524c-.35648-.01855-.71294-.04413-1.0681-.07981-.31912-.032-.39168-.28752-.45725-.54169a8.19984,8.19984,0,0,1,1.85644-.81651,8.04727,8.04727,0,0,1,2.60071.90068,2.91058,2.91058,0,0,0,.94894.29773,1.76954,1.76954,0,0,1,.88622.34571.97662.97662,0,0,0,.41472.19432,15.54676,15.54676,0,0,1,1.58863.569,2.038,2.038,0,0,0,.73813.44825c.1.04153.34255.08015.128.28823-.47049-.00175-.9399-.03307-1.41013-.03428A.34772.34772,0,0,1,85.93075,11.16261Z"/><path class="cls-47" d="M76.53205,47.13073c-.49932.09393-.99609.20579-1.49858.2775a2.34143,2.34143,0,0,1-1.79976-.689c-.527-.41573-1.04917-.83761-1.57027-1.26073-.17933-.14561-.21545-.059-.21069.11581a15.47856,15.47856,0,0,1-1.08064-2.534.14208.14208,0,0,1-.00594-.20483c.07372-.06332.15028-.00037.19439.059a10.83823,10.83823,0,0,0,2.741,2.16462,1.584,1.584,0,0,0,1.59372.22146c.47136-.07154.92776.1396,1.40014.07278a.2044.2044,0,0,1,.18891.11168,2.9577,2.9577,0,0,0,.22439,1.07129A.43626.43626,0,0,1,76.53205,47.13073Z"/><path class="cls-48" d="M69.62251,41.11829c-.29757-.90836-.58652-1.81909-.82277-2.74612-.02885-.11323-.02216-.22421-.04657-.33392-.077-.11688-.01922-.16609.09447-.169a.498.498,0,0,1,.35673.11974c.55676.53132,1.27206.85366,1.82331,1.39091a5.30539,5.30539,0,0,0,1.66264,1.83154.703.703,0,0,1,.20188.2252c.27327.52009.50674,1.06.79606,1.57232.07654.13552.19529.2856.06.458-.2391.10473-.46677-.01817-.69978-.03419a12.79536,12.79536,0,0,1-3.2716-2.20422A.59511.59511,0,0,0,69.62251,41.11829Z"/><path class="cls-49" d="M85.8535,7.01828c-.194.11714-.05906.20144.03173.28353a5.88283,5.88283,0,0,0,2.20553,1.16977,11.61449,11.61449,0,0,0,1.90991.54607c.66723.096,1.34218.16524,2.01.20055a9.8531,9.8531,0,0,1,3.3912.86379c.12843.0551.25931.1045.389.15654a7.77668,7.77668,0,0,1,.8994.49167c.12322.07693.27772.14516.27082.33482a.23229.23229,0,0,1-.31054.06715,12.43885,12.43885,0,0,0-2.61211-.729,16.22877,16.22877,0,0,1-1.696-.27034,8.3362,8.3362,0,0,1-.98108-.16494A23.497,23.497,0,0,1,87.54108,9.214a8.72176,8.72176,0,0,1-.97631-.33323c-.29665-.14827-.59382-.29628-.90345-.41739a.73018.73018,0,0,1-.30641-.15247,2.61655,2.61655,0,0,0-1.405-.70734c-.13539-.04069-.30738-.07784-.32587-.275l.30364-.09581a.17959.17959,0,0,1,.23094-.01089l1.61811-.228A.05009.05009,0,0,1,85.8535,7.01828Z"/><path class="cls-50" d="M145.46387,43.43678q-.82291.932-1.64623,1.8636a23.66334,23.66334,0,0,1-2.122,2.21027c-.57785.50217-1.0939,1.08007-1.71642,1.53063-1.2882.93235-2.47142,2.00467-3.85412,2.81291a22.02235,22.02235,0,0,1-3.25867,1.53236,12.9026,12.9026,0,0,1-2.3098.51434c-1.31516.24191-2.63163.4782-3.926.81525-.28992.07549-.63167-.08607-.87275.19315a.32521.32521,0,0,1-.23948.1062,24.0001,24.0001,0,0,1-3.25875.0623c-.57227-.10007-1.1603-.06523-1.729-.19968-.1572-.03717-.336-.02541-.41435-.21314.058-.17506.21458-.16832.34981-.173a6.34718,6.34718,0,0,0,1.71708-.14978,1.14859,1.14859,0,0,1,.46-.00718,14.79479,14.79479,0,0,0,3.67221-.23417c.15125-.02046.30433-.0705.444.03862.5277-.077,1.05622-.14891,1.583-.232a21.09637,21.09637,0,0,0,6.47675-1.57662,20.47848,20.47848,0,0,0,3.06779-1.95888,37.5806,37.5806,0,0,0,5.08925-4.4764q1.33371-1.45449,2.574-2.99022c.04005-.04961.045-.16884.15916-.0897Z"/><path class="cls-51" d="M128.223,57.91323a.27923.27923,0,0,1,.20482-.15375c.97626-.24707,1.94-.567,2.92982-.73064a21.82817,21.82817,0,0,0,2.998-.76231,17.84664,17.84664,0,0,0,3.69676-1.7509,16.03384,16.03384,0,0,0,1.52132-1.03026c.06929-.05254.14191-.20344.284-.11107a14.006,14.006,0,0,1-2.23464,2.46314,18.92335,18.92335,0,0,1-2.61966,1.27625,12.91124,12.91124,0,0,1-2.58585.72908,8.66635,8.66635,0,0,0-2.82568.3551,2.33616,2.33616,0,0,1-.78408.13664C128.64611,58.14863,128.31793,58.19258,128.223,57.91323Z"/><path class="cls-52" d="M76.84062,9.95466c-.00578.07387-.04623.18209-.01215.21645.52192.52629.80344,1.33772,1.70438,1.41809.46843.04179.93167.14189,1.4001.18379a3.11634,3.11634,0,0,0,1.06734-.07093,1.26809,1.26809,0,0,0,.69464.18669,11.968,11.968,0,0,1,2.74294.25893,2.1025,2.1025,0,0,1,1.21477.47241c-.046.19111-.20029.15736-.33763.16573-.59515.03624-1.193.026-1.78583.10327a23.1,23.1,0,0,0-2.46856.20258,1.44,1.44,0,0,0-.53292-.05205,4.7112,4.7112,0,0,1-2.10174-.34625,1.3957,1.3957,0,0,0-.56188-.11292.79459.79459,0,0,1-.80516-.40913,1.49917,1.49917,0,0,0-.50093-.469,2.04639,2.04639,0,0,1-.6763-.91559.19036.19036,0,0,1,.03477-.21495Z"/><path class="cls-53" d="M142.16932,49.98612c-.27818-.0201-.4137.20765-.57193.3618-.45439.44267-1.05407.67657-1.52588,1.08192a24.3938,24.3938,0,0,1-2.89542,2.12738,15.74783,15.74783,0,0,1-6.34216,2.45218,23.74453,23.74453,0,0,0-3.24567.66308c-.06611.01856-.1393.08235-.21263.00863-.14929-.07423-.383-.0353-.39471-.29425a.27274.27274,0,0,1,.19279-.11276c1.14616-.18777,2.22435-.64955,3.37073-.83467a3.19761,3.19761,0,0,0,.48037-.12268,16.32107,16.32107,0,0,0,2.78836-.70458,20.02321,20.02321,0,0,0,4.32856-2.39047,45.74269,45.74269,0,0,0,4.24651-3.48188,3.421,3.421,0,0,1,.45585-.35232c.077-.0494.20494-.16739.24491.04895A12.65224,12.65224,0,0,1,142.16932,49.98612Z"/><path class="cls-54" d="M143.089,48.43645c-.06662-.08769-.128-.04877-.19134.006-.56908.492-1.14169.97988-1.70742,1.47565a30.68639,30.68639,0,0,1-5.12458,3.73353,14.64976,14.64976,0,0,1-3.41784,1.43478,9.08739,9.08739,0,0,1-1.57449.2854c-.89241.19554-1.81121.17949-2.70869.33628a.51225.51225,0,0,1-.33264-.05711c-.13981-.24544.0862-.2754.21489-.32715a2.85272,2.85272,0,0,1,1.28574-.18308,28.75483,28.75483,0,0,0,4.34561-1.01719,19.65521,19.65521,0,0,0,4.51447-2.57777,38.35238,38.35238,0,0,0,5.21469-4.49528c.12662-.13228.17188-.36431.40583-.38653A15.04484,15.04484,0,0,1,143.089,48.43645Z"/><path class="cls-55" d="M126.066,63.45861a4.14282,4.14282,0,0,0,1.3084-.16339,1.23058,1.23058,0,0,1,1.30953.15857c-1.51566,1.12835-3.08655,2.17476-4.69633,3.16344a2.77072,2.77072,0,0,1,.88825-1.371.18958.18958,0,0,0,.12559-.20533,2.41863,2.41863,0,0,1-1.78575-.0417,4.06841,4.06841,0,0,1,1.23648-1.70644c.08371-.06255.18856-.14282.27775-.11135C125.164,63.33458,125.63673,63.29205,126.066,63.45861Z"/><path class="cls-56" d="M133.0008,60.07318a1.537,1.537,0,0,0-1.33909-.21262,6.84642,6.84642,0,0,0-2.12908.51747,11.46608,11.46608,0,0,1-1.646.25037,2.07649,2.07649,0,0,1-1.08631-.11323c-.08906-.28041-.03135-.392.33705-.456a.779.779,0,0,0,.6687-.49072.9781.9781,0,0,1,.60051-.21184,6.6471,6.6471,0,0,0,1.55531-.36873,13.06129,13.06129,0,0,1,1.41676-.30239,9.73651,9.73651,0,0,0,3.55343-.71005c.12366-.05024.29549-.13849.37479.08534A19.3589,19.3589,0,0,1,133.0008,60.07318Z"/><path class="cls-57" d="M86.70108,10.62358a11.43744,11.43744,0,0,1-2.21427-.87118.78.78,0,0,0-.31818-.12567,7.48264,7.48264,0,0,1-2.34912-.88094,6.228,6.228,0,0,0-1.24873-.34763c-.10307-.02558-.2002-.03959-.2585-.13866a6.48677,6.48677,0,0,1,1.83979-.57109.21574.21574,0,0,1,.07384.018,14.4358,14.4358,0,0,0,3.01022,1.05571.81445.81445,0,0,1,.20439.10211,1.72093,1.72093,0,0,0,1.14668.63246c.83474.20353,1.61643.57557,2.45914.75119.12734.02654.29195.04781.289.24568a.40237.40237,0,0,1-.411.22512C88.18318,10.68994,87.44165,10.66765,86.70108,10.62358Z"/><path class="cls-58" d="M73.29507,12.77577a4.25045,4.25045,0,0,1,.92627-.84184.45963.45963,0,0,1,.22237.29691,2.27059,2.27059,0,0,0,1.67275,1.66008,1.311,1.311,0,0,1,.40961.20267.65248.65248,0,0,0,.47165.12134c.415-.07469.84089-.0079,1.25269-.10888a4.8266,4.8266,0,0,1,.71719.07554.876.876,0,0,1,.324.27249c.15742.26849.03855.42976-.227.46751-.79619.11317-1.57823.30664-2.37605.40672a1.179,1.179,0,0,0-.54371.16146c-.28257.18981-.59455.06921-.89577.055a.72822.72822,0,0,1-.52224-.408.82848.82848,0,0,0-.18378-.243A10.59352,10.59352,0,0,1,73.32124,13.057C73.26367,12.97324,73.21605,12.8775,73.29507,12.77577Z"/><path class="cls-59" d="M67.76878,23.25483A8.85088,8.85088,0,0,1,68.28347,21.25c.32532-.145.62136-.41194,1.02179-.246a1.38354,1.38354,0,0,1,.64159.7806c.06509.24787.28463.38721.473.54044.16011.13027.33016.25107.33474.48731a5.069,5.069,0,0,0-.24709.95839,3.319,3.319,0,0,1-.43115.68805c-.3033.22616-.66432.15239-1.00364.19324a.99763.99763,0,0,1-.659-.51533C68.226,23.82726,67.97967,23.55223,67.76878,23.25483Z"/><path class="cls-60" d="M71.061,15.47131A11.35678,11.35678,0,0,1,72.446,13.697c.03789.00713.08457.01418.1027.04459a9.719,9.719,0,0,1,1.29892,2.26854,1.44679,1.44679,0,0,0,.17974.648c.08595.17275.10738.33913-.09271.45715a1.33143,1.33143,0,0,0-1.43423.41976c-.10335.09006-.219.18851-.38.12223a15.495,15.495,0,0,1-1.05793-1.82778A.30317.30317,0,0,1,71.061,15.47131Z"/><path class="cls-61" d="M69.62251,41.11829c.077-.0509.13289-.02427.20035.03252.44525.37487.89567.74361,1.34319,1.11579a10.934,10.934,0,0,0,1.25.72159,2.88841,2.88841,0,0,1,.57257.3686c.22945.0996.30522.33344.44077.513.1994.26415.38734.537.5837.80374a1.06271,1.06271,0,0,0,.60731.49112.27369.27369,0,0,1,.21726.195,1.29847,1.29847,0,0,1-1.43721-.12357,20.03056,20.03056,0,0,1-2.45186-1.73,1.35316,1.35316,0,0,1-.42726-.53187c-.01852-.04646-.044-.14255-.12735-.07774-.02779.0216-.01572.09445-.02186.14387a3.54168,3.54168,0,0,1-.37091-.88245A10.46189,10.46189,0,0,1,69.62251,41.11829Z"/><path class="cls-62" d="M67.3514,26.87892l.0205-.908c.07905-.17914-.00849-.37519.05645-.55576l.02644-.46538a.66219.66219,0,0,1,.65677.20617,1.1139,1.1139,0,0,0,.58305.26477c.87917.37166,1.05494,1.159,1.17134,1.98183a1.25693,1.25693,0,0,1-.84445.60742,6.78435,6.78435,0,0,1-1.43737.07753c-.09564-.0135-.2098.02255-.255-.1083A9.68465,9.68465,0,0,1,67.3514,26.87892Z"/><path class="cls-63" d="M135.30686,58.06082c-.13563-.15016-.27191-.02087-.383.02375a9.72665,9.72665,0,0,1-2.19435.61408,12.58469,12.58469,0,0,1-1.348.062.96005.96005,0,0,1-.08319-.4087c-.0278-.25815.09827-.39038.34334-.47158.26963-.08934.56011.01021.81834-.121a16.94853,16.94853,0,0,0,2.48847-.73624,14.72051,14.72051,0,0,0,2.40988-1.1681c.071-.04892.16845-.1487.26475-.0176A20.80478,20.80478,0,0,1,135.30686,58.06082Z"/><path class="cls-64" d="M75.91646,10.57176A1.81222,1.81222,0,0,0,76.72,11.67819c.27183.13271.37913.40572.56323.61243.06842.07683.11461.18861.23038.17419a4.05174,4.05174,0,0,1,1.44429.29761,3.96385,3.96385,0,0,0,1.68417.177.3414.3414,0,0,1,.35821.07175.35091.35091,0,0,1-.28537.16744,27.69242,27.69242,0,0,1-3.368.33022,3.31468,3.31468,0,0,1-.34244-.01575.56436.56436,0,0,1-.3163-.124,8.44389,8.44389,0,0,1-1.59781-1.62379c-.09079-.14424-.23532-.28819-.09841-.48338A5.11209,5.11209,0,0,1,75.91646,10.57176Z"/><path class="cls-65" d="M68.3117,36.34338l-.4514-2.46718c.033-.11586.13494-.15017.20744-.0886.4184.35533.99491.41207,1.41453.76069a2.60322,2.60322,0,0,1,.34975.84c.1653.53468.60371.90469.7818,1.42247a1.01492,1.01492,0,0,1-.041.73373.86537.86537,0,0,1-.90823-.20032C69.23692,36.97468,68.77048,36.66609,68.3117,36.34338Z"/><path class="cls-66" d="M67.52542,31.324l-.01965-.37093a1.71537,1.71537,0,0,1-.024-.43734A2.05062,2.05062,0,0,1,67.573,29.654c.08827-.17765.17809-.28411.40656-.24315a3.17643,3.17643,0,0,1,.93314.152,1.26254,1.26254,0,0,1,.4527.64721,2.46593,2.46593,0,0,0,.10606,1.32028c.10474.34436-.0014.71007.10707,1.05556a.15053.15053,0,0,1-.08157.15988,2.61511,2.61511,0,0,1-1.91017-1.14914C67.53573,31.51267,67.58246,31.40669,67.52542,31.324Z"/><path class="cls-67" d="M128.7694,86.95128c-.00928.14011-.02668.28023-.0267.42034q-.002,12.51152-.011,25.023c-.0006.38327.10488.45875.46557.4513,1.18032-.0244,2.36154-.01658,3.54221-.00335.25644.00288.34767-.04581.3474-.32848q-.01219-12.66547-.00735-25.331c0-.0766-.01056-.15319-.01619-.22979.14675.10314.0877.25794.08775.39032q.00417,12.57035.00993,25.14067c.00038.34179-.09261.43486-.43145.42909q-1.79012-.03052-3.581.00061c-.36751.007-.47339-.09245-.47242-.46659q.01876-7.238.00828-14.47609,0-5.29378.003-10.58757C128.68762,87.23863,128.6228,87.07222,128.7694,86.95128Z"/><path class="cls-68" d="M68.3117,36.34338c.27408-.0402.43228.17691.6096.30975a8.71552,8.71552,0,0,1,.83673.65369c.17865.171.505.18774.76526.27343a.15064.15064,0,0,1,.17552.03153c.38727.348.749.72351,1.14673,1.0605a.19812.19812,0,0,1,.07043.239,1.74465,1.74465,0,0,0-.1118.15408c-.23018.42963-.33583.47654-.81851.3636-.55913-.48185-1.24075-.79879-1.77165-1.32345-.0954-.09428-.27337-.29549-.46084-.0673A12.50431,12.50431,0,0,1,68.3117,36.34338Z"/><path class="cls-69" d="M74.992,11.26191A2.80759,2.80759,0,0,0,76.13715,12.745c.2767.20389.42261.558.78027.65137.08316.05784.185.09918.21772.20649.06041.19813.21056.232.39034.2341a.85577.85577,0,0,1,.70154.33009c-.6531.08321-1.31764.36843-1.93911-.1126a.29249.29249,0,0,0-.14235-.05085,2.35345,2.35345,0,0,1-1.55337-1.12737c-.21966-.27658-.20642-.64429-.37085-.94231A3.28557,3.28557,0,0,1,74.992,11.26191Z"/><path class="cls-70" d="M73.759,16.015c-.14564-.70105-.70022-1.17622-.99459-1.7959A5.62028,5.62028,0,0,0,72.446,13.697a5.926,5.926,0,0,1,.84905-.92122,9.51589,9.51589,0,0,0,1.32929,2.05847c.20734.20741.26382.555.59864.64164a.435.435,0,0,1,.09767.45765,5.22844,5.22844,0,0,0-.67944.19388C74.357,16.24844,74.06007,16.02343,73.759,16.015Z"/><path class="cls-71" d="M67.60117,31.57294c.01265.00147.032-.00185.037.00511a3.84853,3.84853,0,0,0,1.807,1.14984c.21464.10589.22583.33.28685.5176a4.18853,4.18853,0,0,1,.241.92345c-.08858.24893-.22019.44283-.52821.40812-.45836-.26716-1.0229-.32993-1.41082-.73592-.04873-.051-.119.00366-.17372.03507-.118-.71422-.22132-1.43033-.27658-2.15261A.1116.1116,0,0,1,67.60117,31.57294Z"/><path class="cls-72" d="M92.55579,8.23593a18.867,18.867,0,0,1-3.95548-1.097c-.14323-.0621-.31167-.00312-.43185-.12247l.16082-.04246a3.78373,3.78373,0,0,1,.75609.01592l.3746.01852c.12347.07653.26983-.00106.39578.05874.97491.155,1.95709.26575,2.92221.4803.09573.0552.24293-.05721.30893.09482a15.14264,15.14264,0,0,1,1.70489.531c-.07123.388-.374.21746-.55717.18827-.4485-.07147-.89177-.17635-1.34375-.23743A.33717.33717,0,0,0,92.55579,8.23593Z"/><path class="cls-73" d="M71.061,15.47131a1.20379,1.20379,0,0,0,.2398.5949c.28591.51889.561,1.04374.8404,1.56623.1925.262.35529.5277.10808.84574-.45551-.06694-.88708-.25231-1.35192-.27683a3.08271,3.08271,0,0,1-.71293-.941.50568.50568,0,0,1,.03-.47772A8.37128,8.37128,0,0,1,71.061,15.47131Z"/><path class="cls-67" d="M164.46326,94.43542c-.04432.05941-.11112.092-.147.01611a.59628.59628,0,0,1-.01482-.22767c-.01434-.66011-.0142-.66012-.6613-.66012-1.12887,0-2.25781.00685-3.38656-.00554-.23583-.00258-.29944.0585-.29917.29765q.01035,9.34962-.00065,18.69925c-.00032.25522.09144.28774.31.28613,1.23143-.009,2.46315-.01608,3.69433.004.307.005.34953-.10016.34888-.37093q-.01282-5.38663-.0036-10.77331a.84848.84848,0,0,1,.04124-.452q.00438,5.677.01279,11.35421c.00054.23991-.08691.30733-.31545.306-1.28322-.00773-2.56664-.01357-3.8497.0026-.35885.00453-.30783-.21143-.30782-.42784q.00027-4.73425-.00013-9.46851c0-3.02788.00675-6.05578-.00823-9.08358-.00181-.36487.111-.449.45594-.44346q1.80894.0292,3.61858.00051c.321-.00468.43339.08949.411.41093C164.3493,94.076,164.26863,94.28905,164.46326,94.43542Z"/><path class="cls-74" d="M85.39131,8.92912a9.46466,9.46466,0,0,0-1.60971-.46668,4.19062,4.19062,0,0,1-1.62953-.774A5.82331,5.82331,0,0,1,83.624,7.32859a.88789.88789,0,0,0,.2637.149c1.02037.16108,1.71262.98981,2.65915,1.29751-.03457.3169-.26716.2455-.45287.21125A1.40021,1.40021,0,0,0,85.39131,8.92912Z"/><path class="cls-75" d="M68.90592,29.64728c-.32724-.166-.70285-.02548-1.03538-.16412-.13285-.05539-.14441.06965-.17891.14219a1.81476,1.81476,0,0,0-.18362.89067.04856.04856,0,0,1-.05992-.03733l-.01951-.45c-.0652-.18083.02207-.37712-.05645-.55659l-.0205-.90669a.93226.93226,0,0,1,.01871-.53561c.56286-.03042,1.1239-.10075,1.68923-.0769a.46509.46509,0,0,1,.16022.47274A3.49691,3.49691,0,0,1,68.90592,29.64728Z"/><path class="cls-76" d="M69.29082,21.09765a.4402.4402,0,0,0-.5016.01883.75968.75968,0,0,1-.50575.13351,14.60789,14.60789,0,0,1,.79053-2.21337c.0772-.186.15648-.37106.23481-.55656.1732-.10042.26454.038.34924.13741a5.26256,5.26256,0,0,1,.76116,1.27061c-.05633.36962-.37928.44735-.64875.51637-.28767.07369-.42.19184-.39068.48766A.24574.24574,0,0,1,69.29082,21.09765Z"/><path class="cls-23" d="M70.36945,19.86586c-.23146-.3602-.46141-.72138-.69514-1.0801a.54869.54869,0,0,0-.36552-.3057,17.32791,17.32791,0,0,1,.90564-1.6974c-.0787.43334.24147.69649.435,1.01265.0794.12969.17251.251.25938.37613.00916.48039.14334.95.12435,1.433A.80118.80118,0,0,1,70.36945,19.86586Z"/><path class="cls-67" d="M34.63653,86.95277c-.00687.14054-.01973.28109-.01975.42164q-.00144,12.50859-.01034,25.01718c-.00055.37548.0918.46315.4598.45488,1.16713-.02627,2.3355-.02395,3.50275-.00071.3342.00665.41439-.09655.39121-.407a1.2725,1.2725,0,0,1,.04269-.672.04674.04674,0,0,1,.03562.00652.37674.37674,0,0,1,.038.05725,1.63217,1.63217,0,0,0-.05443.75391c-.00359.21661-.04738.32712-.29792.32531-1.29548-.00938-2.59107-.00758-3.88657-.00117-.21348.00106-.31232-.06961-.2911-.2882.00739-.07622.001-.15378.001-.23073q0-12.48455.00352-24.96912C34.55111,87.26433,34.47637,87.08386,34.63653,86.95277Z"/><path class="cls-77" d="M68.67462,25.48821a.5946.5946,0,0,1-.57647-.22418,1.4173,1.4173,0,0,0-.64337-.31429c.17693-.55158.17005-1.13721.314-1.69491.39349.13231.5242.52965.71969.81871a1.22841,1.22841,0,0,0,.57152.49075l.02128.02922C68.89316,24.868,68.85718,25.21151,68.67462,25.48821Z"/><path class="cls-67" d="M177.22583,102.5521a1.79587,1.79587,0,0,1,.06058.72045c.00315,3.04846.00956,6.09694-.00762,9.1453-.00207.36752.11249.43365.44558.42644,1.21592-.02631,2.43248-.02357,3.64879-.03177-.07453.12847-.20111.09144-.311.09163-1.16753.00215-2.33509-.003-3.50257.005-.23243.00159-.348-.04219-.34715-.31354Q177.228,107.57389,177.22583,102.5521Z"/><path class="cls-67" d="M39.0672,94.56872c-.10942.11769-.11257.01719-.11348-.05939-.00323-.26857-.00145-.53718-.00145-.80579q0-3.14653-.001-6.29306c-.00011-.15276-.01458-.3055-.02237-.45825.15108.11868.08429.28588.08457.43047q.00663,3.38709.00493,6.7742A.66221.66221,0,0,0,39.0672,94.56872Z"/><path class="cls-67" d="M110.80912,119.22141c-.02047.14383.06162.16559.18093.16491q2.25971-.0131,4.51942-.0215c-.07912.1212-.204.08593-.31417.08607-1.38145.00189-2.76291.00348-4.14433-.00248C110.92411,119.44786,110.66086,119.53811,110.80912,119.22141Z"/><path class="cls-67" d="M83.85417,112.81517c1.46011.02565,2.92025.05633,4.38-.01616-.062.14254-.19115.10494-.30007.10512q-1.9029.00318-3.80578.00071C84.0286,112.90477,83.91883,112.92636,83.85417,112.81517Z"/><path class="cls-67" d="M75.69107,112.78575a.73742.73742,0,0,0,.18212.0474q2.10029-.00345,4.20058-.013c-.08116.11919-.20614.08393-.31684.0841q-1.868.003-3.736-.00073C75.90187,112.90322,75.75452,112.95374,75.69107,112.78575Z"/><path class="cls-67" d="M80.07392,93.58078q-2.10051-.00788-4.201-.01359a.72057.72057,0,0,0-.18194.04848c.04132-.13017.15081-.11919.25267-.11922q1.96436-.00063,3.92869-.00005A.21032.21032,0,0,1,80.07392,93.58078Z"/><path class="cls-67" d="M115.73519,71.23472l1.38995-.70672A3.1534,3.1534,0,0,1,115.73519,71.23472Z"/><path class="cls-67" d="M67.37034,28.02985l-.0187.53562a4.58512,4.58512,0,0,1-.00024-1.68656Z"/><path class="cls-78" d="M85.8535,7.01828l-.07681-.02435c.01324-.08648.05893-.15975.15008-.12893a4.99557,4.99557,0,0,0,1.10552.06864A9.78464,9.78464,0,0,1,85.8535,7.01828Z"/><path class="cls-78" d="M99.41191,10.53007l-.43182-.3021-.12341-.13757A.44587.44587,0,0,1,99.41191,10.53007Z"/><path class="cls-78" d="M108.03358,24.932a1.5484,1.5484,0,0,1-.13885-.67607l.21078-.07478Z"/><path class="cls-67" d="M136.14438,102.58635l.00059,1.2288A2.48882,2.48882,0,0,1,136.14438,102.58635Z"/><path class="cls-67" d="M127.55136,6.93352a3.19851,3.19851,0,0,1-.94319.05835A2.61183,2.61183,0,0,1,127.55136,6.93352Z"/><path class="cls-67" d="M129.997,6.99065a3.18526,3.18526,0,0,1-.952-.05633A2.63447,2.63447,0,0,1,129.997,6.99065Z"/><path class="cls-79" d="M103.57168,72.393c.26022.14072.12576.28773.00692.43446l-.23851-.12623C103.58485,72.72437,103.64182,72.60644,103.57168,72.393Z"/><path class="cls-78" d="M89.08537,6.98991q-.37809-.00792-.75614-.01587A1.10273,1.10273,0,0,1,89.08537,6.98991Z"/><path class="cls-78" d="M113.43006,13.3193a.80042.80042,0,0,1-.30652.35746C113.10711,13.45594,113.16417,13.29812,113.43006,13.3193Z"/><path class="cls-67" d="M95.0961,92.48258l-.76687-.00027A.98154.98154,0,0,1,95.0961,92.48258Z"/><path class="cls-67" d="M69.59728,92.48205l-.68972,0A.826.826,0,0,1,69.59728,92.48205Z"/><path class="cls-67" d="M145.6347,113.84119a2.29485,2.29485,0,0,1,.71885.05762C146.11363,113.88453,145.86559,113.96979,145.6347,113.84119Z"/><path class="cls-67" d="M45.79328,92.48174l-.6897.00016A.82888.82888,0,0,1,45.79328,92.48174Z"/><path class="cls-67" d="M170.976,92.48275l-.68992-.0007A.82278.82278,0,0,1,170.976,92.48275Z"/><path class="cls-67" d="M147.37256,113.89837a1.81826,1.81826,0,0,1,.64644-.05434C147.81257,113.96978,147.5885,113.88582,147.37256,113.89837Z"/><path class="cls-67" d="M148.62978,26.58731a.4945.4945,0,0,0-.06057-.03968.25033.25033,0,0,1-.01159-.28822l.01768-.30478C148.69974,26.15638,148.616,26.376,148.62978,26.58731Z"/><path class="cls-67" d="M93.5589,113.84155a2.07483,2.07483,0,0,1,.644.05712C93.98787,113.88489,93.76374,113.97187,93.5589,113.84155Z"/><path class="cls-67" d="M68.06055,113.84437a1.81789,1.81789,0,0,1,.64516.05407C68.49031,113.88594,68.26669,113.96943,68.06055,113.84437Z"/><path class="cls-78" d="M106.94673,20.4885a.60286.60286,0,0,1-.12747-.31212C106.91882,20.25713,107.15882,20.28054,106.94673,20.4885Z"/><path class="cls-67" d="M56.18711,102.84925a1.90021,1.90021,0,0,1-.05681-.64808C56.26027,102.40747,56.17332,102.63277,56.18711,102.84925Z"/><path class="cls-67" d="M147.17211,92.48275l-.61285-.001A.65221.65221,0,0,1,147.17211,92.48275Z"/><path class="cls-67" d="M148.55511,29.26227l.07753-.2443c-.01694.183.06457.37651-.05864.54817Z"/><path class="cls-67" d="M67.37213,29.47215a1.142,1.142,0,0,1,.05646.55659C67.30524,29.8538,67.38535,29.65824,67.37213,29.47215Z"/><path class="cls-67" d="M67.42835,25.41513a1.13391,1.13391,0,0,1-.05647.55562C67.38536,25.78509,67.30543,25.58981,67.42835,25.41513Z"/><path class="cls-67" d="M95.29206,113.89893a1.531,1.531,0,0,1,.57433-.05755C95.68576,113.96848,95.484,113.885,95.29206,113.89893Z"/><path class="cls-78" d="M116.5773,10.62354a.41966.41966,0,0,1-.29477.21626C116.29923,10.6566,116.42141,10.61711,116.5773,10.62354Z"/><path class="cls-67" d="M69.87636,113.89849a1.5555,1.5555,0,0,1,.5684-.05795C70.26635,113.96824,70.06653,113.8861,69.87636,113.89849Z"/><path class="cls-67" d="M44.33343,113.84327a1.5841,1.5841,0,0,1,.57293.05545C44.715,113.88594,44.5143,113.9669,44.33343,113.84327Z"/><path class="cls-78" d="M100.63934,11.40715l-.29957-.24561C100.51254,11.15453,100.67566,11.15926,100.63934,11.40715Z"/><path class="cls-67" d="M56.13256,104.12285a1.47371,1.47371,0,0,1,.05483-.57375C56.17435,103.74069,56.25487,103.94147,56.13256,104.12285Z"/><path class="cls-78" d="M145.70077,16.657l-.14189-.11026-.009-.13512C145.86351,16.33153,145.65194,16.57433,145.70077,16.657Z"/><path class="cls-78" d="M177.13585,94.664l-.23-.157C177.15084,94.31281,177.12909,94.50926,177.13585,94.664Z"/><path class="cls-78" d="M153.3319,94.664l-.23-.157C153.34688,94.31281,153.32513,94.50926,153.3319,94.664Z"/><path class="cls-78" d="M93.08689,7.64229c-.10336-.03035-.22221-.01023-.30892-.09483C92.90517,7.50015,93.06036,7.36172,93.08689,7.64229Z"/><path class="cls-78" d="M168.52515,92.68056c-.07028.07127-.15917.0488-.2437.04838C168.3283,92.53969,168.41,92.52569,168.52515,92.68056Z"/><path class="cls-67" d="M148.47678,30.57166c.0488-.13029-.0137-.2818.07705-.40422l.00841.40518c.035.07238-.003.08233-.0629.07349Z"/><path class="cls-78" d="M84.15858,7.22189l-.23094.01089c.01033-.0765.02934-.147.12844-.13953C84.13368,7.09912,84.147,7.161,84.15858,7.22189Z"/><path class="cls-78" d="M146.8496,18.872c-.08761-.05349-.05432-.15468-.09029-.22856C146.951,18.65581,146.99407,18.72686,146.8496,18.872Z"/><path class="cls-78" d="M122.75194,7.69635a.17449.17449,0,0,0-.01092.04944l-.29566.02973C122.485,7.50715,122.65249,7.73336,122.75194,7.69635Z"/><path class="cls-67" d="M67.44809,30.47869l.06.03725-.00228.43713C67.38812,30.8069,67.45957,30.63776,67.44809,30.47869Z"/><path class="cls-67" d="M170.97943,96.58982a.97509.97509,0,0,1,.48476.05681C171.30151,96.63748,171.12939,96.70816,170.97943,96.58982Z"/><path class="cls-78" d="M115.64564,11.31652a.44344.44344,0,0,1-.28754.21983C115.37228,11.3563,115.4891,11.31043,115.64564,11.31652Z"/><path class="cls-67" d="M169.8782,96.64735a.95321.95321,0,0,1,.48157-.058C170.21127,96.70841,170.03982,96.63716,169.8782,96.64735Z"/><path class="cls-67" d="M67.60117,31.57294l-.01749.15066c-.11141-.11971-.05081-.26452-.05828-.3995Z"/><path class="cls-67" d="M107.73534,74.48749l.378-.00127A.2889.2889,0,0,1,107.73534,74.48749Z"/><path class="cls-78" d="M89.85575,7.06717a.6531.6531,0,0,1-.3957-.05876C89.59326,7.01881,89.73715,6.95783,89.85575,7.06717Z"/><path class="cls-78" d="M166.73952,93.18048c-.07411.03471-.1316.10962-.22666.09361C166.53274,93.10816,166.60268,93.06335,166.73952,93.18048Z"/><path class="cls-67" d="M136.22286,101.739a.73958.73958,0,0,1-.059.40222C136.17074,102.00531,136.11111,101.85959,136.22286,101.739Z"/><path class="cls-67" d="M58.57154,101.893a.7577.7577,0,0,1-.05736.42086C58.52094,102.172,58.457,102.02032,58.57154,101.893Z"/><path class="cls-78" d="M181.3152,102.04668l-.00828-.15528c.162.03346.19188.10877.07318.23109A.11621.11621,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M105.41242,102.38161a.78319.78319,0,0,1-.05479-.4112C105.46656,102.0954,105.40791,102.24271,105.41242,102.38161Z"/><path class="cls-67" d="M157.56534,102.46688a.79407.79407,0,0,1-.05419-.41937C157.62058,102.1755,157.5595,102.32551,157.56534,102.46688Z"/><path class="cls-67" d="M181.3152,102.04668l.06488.07581-.01089.34318A.79228.79228,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M169.69536,92.50317a.73628.73628,0,0,1-.4107.05643C169.40886,92.44834,169.55655,92.508,169.69536,92.50317Z"/><path class="cls-78" d="M148.49933,30.64611l.06288-.07351c.11869.11874.09154.194-.06841.22982Z"/><path class="cls-67" d="M148.17317,92.55775a.86279.86279,0,0,1-.41425-.05452C147.89865,92.508,148.047,92.44853,148.17317,92.55775Z"/><path class="cls-67" d="M157.51082,104.354a.78474.78474,0,0,1,.0546-.42006C157.55914,104.07532,157.62092,104.22581,157.51082,104.354Z"/><path class="cls-67" d="M58.51328,104.02416a.78392.78392,0,0,1,.05476.40671C58.46078,104.30727,58.51821,104.16152,58.51328,104.02416Z"/><path class="cls-67" d="M105.35589,104.43128a.77055.77055,0,0,1,.05618-.41775C105.40653,104.15444,105.4684,104.30457,105.35589,104.43128Z"/><path class="cls-67" d="M136.16523,104.25478a.74668.74668,0,0,1,.05913.40779C136.11021,104.54033,136.17078,104.39276,136.16523,104.25478Z"/><path class="cls-67" d="M126.31593,7.01011a.67723.67723,0,0,1-.40122.05951C126.03457,6.95625,126.1804,7.01787,126.31593,7.01011Z"/><path class="cls-67" d="M171.97711,92.55775a.856.856,0,0,1-.41317-.05454C171.70334,92.50788,171.85133,92.4487,171.97711,92.55775Z"/><path class="cls-67" d="M46.79451,92.55791a.72668.72668,0,0,1-.40275-.05644C46.52775,92.50765,46.67279,92.44962,46.79451,92.55791Z"/><path class="cls-67" d="M145.9003,92.5031a.82161.82161,0,0,1-.41964.057C145.6077,92.44659,145.75871,92.50953,145.9003,92.5031Z"/><path class="cls-67" d="M44.50687,92.50191a.7261.7261,0,0,1-.40456.05658C44.22449,92.44908,44.37021,92.50785,44.50687,92.50191Z"/><path class="cls-67" d="M96.09763,92.56088a.73186.73186,0,0,1-.41686-.05716C95.8215,92.50906,95.97166,92.44679,96.09763,92.56088Z"/><path class="cls-67" d="M148.55448,25.5052a.65338.65338,0,0,1-.055-.39744C148.60536,25.22813,148.54706,25.37121,148.55448,25.5052Z"/><path class="cls-67" d="M93.74,92.50339a.734.734,0,0,1-.41231.0568C93.45229,92.44781,93.60066,92.50825,93.74,92.50339Z"/><path class="cls-67" d="M70.59875,92.56a.73207.73207,0,0,1-.413-.05648C70.32525,92.50828,70.47381,92.4478,70.59875,92.56Z"/><path class="cls-78" d="M166.20009,93.4098c-.07332.03694-.13047.11228-.22648.09535C165.99277,93.33963,166.063,93.29538,166.20009,93.4098Z"/><path class="cls-67" d="M68.31448,92.5025a.87433.87433,0,0,1-.40795.05428C68.03067,92.44974,68.17673,92.5073,68.31448,92.5025Z"/><path class="cls-78" d="M88.19546,102.93568c-.30886-3.22483,2.68818-5.7422,5.19528-6.2551a6.69059,6.69059,0,0,1,7.87565,5.582A6.62838,6.62838,0,0,1,88.262,104.754,15.06279,15.06279,0,0,1,88.19546,102.93568Z"/><path class="cls-78" d="M45.44046,96.56916A6.62622,6.62622,0,0,1,46.56915,109.729a6.54828,6.54828,0,0,1-7.53825-5.02078c-.70494-3.98962,1.20424-7.08688,5.18448-8.02618A4.79038,4.79038,0,0,1,45.44046,96.56916Z"/><path class="cls-78" d="M75.724,103.1979c.32487,3.37788-2.5467,6.07615-5.37,6.52935a6.62965,6.62965,0,1,1,5.27949-8.25142A9.738,9.738,0,0,1,75.724,103.1979Z"/><path class="cls-78" d="M140.22787,103.2052a6.62809,6.62809,0,1,1,6.60744,6.61506A6.605,6.605,0,0,1,140.22787,103.2052Z"/><path class="cls-4" d="M127.64944,20.49762a.36642.36642,0,0,1-.0085-.339A.36642.36642,0,0,1,127.64944,20.49762Z"/><path class="cls-80" d="M115.28107,34.80766l.077-.23106.23111.077C115.608,34.94785,115.34875,34.68625,115.28107,34.80766Z"/><path class="cls-80" d="M109.2723,33.11323a.2326.2326,0,0,1-.2311-.154C109.15331,32.95794,109.26523,32.957,109.2723,33.11323Z"/><path class="cls-79" d="M110.81264,62.61159a5.14418,5.14418,0,0,0,1.13217,1.06258c.14042.12791.31519.21754.45971.34162a.43277.43277,0,0,1-.06156.75676c-1.02975.6414-1.94556,1.43484-2.90376,2.17218-.70619.54343-1.4564,1.03175-2.14217,1.59882a1.98579,1.98579,0,0,1-1.28743.54442.32064.32064,0,0,0-.265.19868.4644.4644,0,0,1-.22055.2032.95766.95766,0,0,1-.60409.03844c-.34866-.07437-.08543-.33042-.11459-.50192a1.49819,1.49819,0,0,1-.002-.19184c-.00437-.11608-.00177-.25751-.15759-.258a.22724.22724,0,0,0-.21645.23111,8.37813,8.37813,0,0,1-.28926.98762c-.09036.56337-.49176,1.04671-.42108,1.6545.0187.16079-.11527.18646-.23722.16639a3.81142,3.81142,0,0,1-.44537-.10861c-.54111-.15779-.54072-.15914-.54337.4234-.02416-.0432-.07393-.08977-.06874-.1291a2.40675,2.40675,0,0,0-1.02794-2.07307,1.336,1.336,0,0,1-.39207-1.38891,17.65093,17.65093,0,0,0,.33857-2.6837,2.96015,2.96015,0,0,1,.56487-1.32078c.378-.59108.3537-.759-.24547-1.10936-.48175-.28168-.92758-.62533-1.3851-.94753a.3725.3725,0,0,1-.17012-.36338c.13152-1.19084.69191-1.535,1.92084-1.423.206.01877.40656.12556.61929.04.60574.16018,1.1457.48479,1.73227.69546a.75036.75036,0,0,0,.61525-.01923,9.27991,9.27991,0,0,0,1.23314-.61986c.44822-.2792.47176-.4158.1147-.79984-.27163-.29214-.49246-.62271-.74658-.92766-.097-.11641-.19681-.24466-.11485-.41643a.87423.87423,0,0,1,.80245.24627,3.76621,3.76621,0,0,1,.49574.53338c.26786.318.48725.69989.95868.77316a.42918.42918,0,0,1,.24465.17789c.42841.52907.94151.97631,1.41511,1.46164A2.52952,2.52952,0,0,0,110.81264,62.61159Z"/><path class="cls-81" d="M105.49757,58.45255a3.71917,3.71917,0,0,0,.83212,1.16791c.5622.6528.53769.67223-.19689,1.13939-.40042.25465-.85555.388-1.26285.62275-.07739.04461-.16235.09566-.25267.05043a14.58081,14.58081,0,0,1-1.97-.901,2.28094,2.28094,0,0,0-1.26123-.38546,8.20584,8.20584,0,0,1-2.511-.44969c-.56383-.24151-1.14414-.44743-1.69621-.7127a18.11658,18.11658,0,0,0-1.73617-.71807c-.98341-.35287-1.94235-.77371-2.92448-1.1305a14.75411,14.75411,0,0,1-1.50083-.43854,1.66367,1.66367,0,0,1-.81427-.58461c-.19293-.30721-.62839-.30513-.95632-.4358a34.161,34.161,0,0,1-4.02688-1.70007c-.38-.211-.754-.43288-1.13153-.64834a1.344,1.344,0,0,0-.87054-.3095c-.2355.0269-.453-.21023-.65754-.36394-.35708-.26832-.73194-.51753-1.062-.816a3.97283,3.97283,0,0,0-1.26831-.62612.24035.24035,0,0,1-.07084-.2472c.11286-.344.07985-.71074.17515-1.0567a1.03684,1.03684,0,0,1,1.3013-.08118,2.05142,2.05142,0,0,1,.69881.79915.4927.4927,0,0,0,.20972.221,1.79638,1.79638,0,0,1,.87019.98312.46894.46894,0,0,0,.242.23944c.95208.55871,1.92946,1.06958,2.92568,1.54473a.36088.36088,0,0,0,.1439.05242,10.18569,10.18569,0,0,1,2.90529.81684,1.00022,1.00022,0,0,0,.815.00412.76847.76847,0,0,1,.52756.01337c.71544.14462,1.398.40886,2.12956.51113.7473.10445,1.48294-.03164,2.22283.016a.30515.30515,0,0,0,.31278-.23769.52524.52524,0,0,1,.64175-.35914,16.24625,16.24625,0,0,0,2.26689.06291,4.34521,4.34521,0,0,1,1.10607.11165,1.23046,1.23046,0,0,0,.75864-.02782,1.00574,1.00574,0,0,1,1.05844.1435c-.041-.44062-.00643-.48163.49742-.61932a.625.625,0,0,1,.41642.31474c.83356,1.16852,1.86025,2.1824,2.68319,3.35876A3.00284,3.00284,0,0,1,105.49757,58.45255Z"/><path class="cls-82" d="M80.38439,49.90345a4.82756,4.82756,0,0,1-.15445,1.3093c-.27457.15081-.261.49361-.4621.69336-.42907-.06363-.89022-.01217-1.23178-.37832-.07463-.08-.18133-.1317-.232-.238.16243-.34512-.10392-.63272-.19693-.90733-.11009-.325.048-.69953-.231-.98714-.1061-.10937.03839-.227.16345-.28118.34436-.14905.68982-.29552,1.03485-.443.28842-.15866.47413.08748.69989.17664A4.532,4.532,0,0,1,80.38439,49.90345Z"/><path class="cls-83" d="M102.64725,29.03122c.03722.00786.10175.00683.10764.02489.13027.40006.5055.63973.664,1.01992a19.336,19.336,0,0,0,1.07193,2.18063.55212.55212,0,0,0,.23636.24042c.14024.04022.18516.16885.24995.27584a10.23179,10.23179,0,0,0,5.0529,4.17554c.31912.1315.6399.25907.96373.37928.11938.04432.29074.055.28143.25266-.01854.29048.22811.31711.407.37583.88481.29043,1.80826.437,2.70135.68906a16.53567,16.53567,0,0,0,2.87668.55315.3312.3312,0,0,1,.3319.38441,1.16781,1.16781,0,0,0-.75216.14618,2.41072,2.41072,0,0,1-1.67474.15976c-.78777-.14729-1.59648-.21315-2.36976-.383a16.7331,16.7331,0,0,1-4.33757-1.7281,3.29828,3.29828,0,0,0-.57223-.19724.70765.70765,0,0,1-.38518-.23124,9.24839,9.24839,0,0,1-2.0468-1.94635,17.92431,17.92431,0,0,1-2.59848-5.13885A3.10335,3.10335,0,0,1,102.64725,29.03122Z"/><path class="cls-84" d="M111.27522,37.5804c-.59464-.25852-1.19543-.50393-1.78255-.77855a11.14581,11.14581,0,0,1-2.64452-1.66567,9.95154,9.95154,0,0,1-2.12094-2.6391c.07061-.36584-.303-.58364-.30814-.92423a2.90965,2.90965,0,0,0,1.05926.99121c.27487.16053.42237.53062.64414.79216a7.022,7.022,0,0,0,1.93982,1.65524.61045.61045,0,0,0,.36262.10427c.7619.26014,1.37875.80079,2.15422,1.05737,1.12912.37359,2.28715.60328,3.438.87844a16.09879,16.09879,0,0,0,2.23833.39849,33.76317,33.76317,0,0,0,3.66874.453,1.37861,1.37861,0,0,1,.98047.21643,2.3304,2.3304,0,0,1-.88782.14906,19.2957,19.2957,0,0,1-3.3243-.14295.25082.25082,0,0,0-.15147.00416c-.9598.574-1.89437.05546-2.83708-.063C112.88286,37.96362,112.10541,37.64,111.27522,37.5804Z"/><path class="cls-80" d="M104.80425,28.338a3.80185,3.80185,0,0,1,.68549,1.435,6.74169,6.74169,0,0,0,1.51765,2.4138,4.03126,4.03126,0,0,0,1.51724.88893c.45414.143.85466.45045,1.30848.63223a24.48073,24.48073,0,0,0,3.494.97422c.58014.13787,1.16266.03673,1.72281.20267.212.299.55662.18314.82451.21291,1.07127.11907,2.14994.1713,3.22572.25038.081.006.21145-.03819.2179.08621.007.134-.123.13848-.22555.1418-.11486.00371-.22991.00139-.34488.00169-.30426.391-.74817.3223-1.13971.28462-.683-.06571-1.36922-.12964-2.05117-.18509-.71453-.05809-1.40653-.2278-2.11633-.29353-.77473-.07175-1.54633-.1773-2.3193-.26812l-.077-.00017c-.08243-.18221-.27161-.17635-.42155-.22735a9.16877,9.16877,0,0,1-3.22461-1.78475,8.919,8.919,0,0,1-1.04677-1.26113A9.28838,9.28838,0,0,1,104.80425,28.338Z"/><path class="cls-85" d="M119.59505,64.84514c-.08038.11624-.21628.04618-.31413.09314-.12943.06211-.2703.13624-.09909.30272.08286.08056.13436.18544.02169.25621-.42869.26921-.67841.74889-1.14918.96534-.00427-.11289.09008-.18045.12594-.27345.11927-.30935-.02548-.567-.3424-.569a3.68853,3.68853,0,0,1-1.58407-.46539c-.80188-.39162-1.62429-.74157-2.42386-1.13956a17.01924,17.01924,0,0,1-1.75963-1.19271c-.31921-.21067-.60129-.48537-1.0262-.44192a30.20019,30.20019,0,0,1-2.73937-2.57077c-.31534-.31636-.52035-.71637-.80432-1.06193-1.0406-1.26636-2.2616-2.36824-3.278-3.65248-.28551-.36074-.5694-.723-.85618-1.083-.079-.0991-.16343-.20238-.11046-.34633.21257-.09237.29814.07812.39816.20075a18.13988,18.13988,0,0,0,1.75515,1.74335,4.75563,4.75563,0,0,1,.6604.69454,25.68717,25.68717,0,0,0,7.9502,5.5791,2.87581,2.87581,0,0,1,1.03351.65364.2609.2609,0,0,0,.09068.07063c.86191.33951,1.63136.86158,2.46919,1.2484a.36006.36006,0,0,0,.18369.05208,2.32657,2.32657,0,0,1,1.38018.39486C119.42825,64.3976,119.67784,64.49365,119.59505,64.84514Z"/><path class="cls-86" d="M103.26354,53.67736a10.00561,10.00561,0,0,0,1.12035,1.4513c1.16684,1.33877,2.44269,2.589,3.5335,3.985.6044.77354,1.31178,1.42329,1.96628,2.13395a9.87627,9.87627,0,0,0,.89817.77376c.11591.0987.2539.18174.26228.35913l-.23148.23106a1.0539,1.0539,0,0,1-.98021-.40014c-.63536-.68445-1.363-1.28007-1.94507-2.01646a.2722.2722,0,0,0-.15184-.10975c-.57727-.05411-.80156-.535-1.10722-.91172a1.7525,1.7525,0,0,0-1.13073-.721,11.43557,11.43557,0,0,1-.934-1.20161q-.89905-1.09157-1.79692-2.1841c-.24978-.30546-.49087-.618-.73591-.92736-.21436-.07335-.29066-.27691-.40733-.4394q-.71349-.99367-1.38989-2.01316c-.09689-.14647-.22054-.28832-.16511-.4884a1.71656,1.71656,0,0,0-.28914-1.56466c-.10061-.18191-.31567-.31519-.2376-.57128.21207-.12427.29583.052.38347.17788a4.60249,4.60249,0,0,0,.60678.76821c.78269,1.15729,1.69081,2.21826,2.55157,3.3157C103.16549,53.42886,103.31348,53.504,103.26354,53.67736Z"/><path class="cls-87" d="M102.64725,29.03122a19.29163,19.29163,0,0,0,.65037,2.23841,26.312,26.312,0,0,0,1.2426,2.50022c.42964.71876.8928,1.40344,1.38909,2.07365a8.77941,8.77941,0,0,0,1.19952,1.12284,1.87046,1.87046,0,0,1,.37166.38286.77273.77273,0,0,1-.40136-.20553,21.74617,21.74617,0,0,1-2.1227-1.973,1.16161,1.16161,0,0,0-.4031-.28579c-.129.03945-.19-.05347-.24212-.13776-.4757-.76965-.93758-1.54732-1.339-2.35972a23.77022,23.77022,0,0,1-1.2735-3.86448,34.23876,34.23876,0,0,1-.68445-3.97577,14.153,14.153,0,0,1-.19288-2.60013,2.89712,2.89712,0,0,0-.06579-.80076,13.33422,13.33422,0,0,0-.22315-3.66223,9.92653,9.92653,0,0,0-2.409-5.02522,9.1848,9.1848,0,0,0-1.01185-1.04934.53028.53028,0,0,1-.18517-.40059c-.34179-.32184-.85562-.38573-1.15554-.77036.3373-.3008.32492-.3663-.07693-.57989a5.74349,5.74349,0,0,0-.98236-.40543c-.23827-.07469-.40736-.202-.40419-.478a13.009,13.009,0,0,1,3.5316,1.63325,8.66,8.66,0,0,1,3.47038,5.4176,15.05439,15.05439,0,0,1,.39683,3.25761c.00994,1.03163.00618,2.0662.0848,3.09363q.14706,1.9218.34417,3.8415A26.60036,26.60036,0,0,0,102.64725,29.03122Z"/><path class="cls-88" d="M103.10947,32.42006a19.21964,19.21964,0,0,0,1.46386,2.46483,2.60093,2.60093,0,0,0,.81354,1.13934,14.56487,14.56487,0,0,0,3.14495,2.78041,17.06018,17.06018,0,0,0,3.54767,1.72112,35.233,35.233,0,0,0,3.39469,1.08257c.211.04646.42237.09337.63576.12562.14642.02213.24106.07863.24962.23649a.69347.69347,0,0,1-.78726.192c-.82189-.17633-1.61678-.49362-2.43876-.61346a11.72724,11.72724,0,0,1-2.47332-.80044,14.00665,14.00665,0,0,1-2.07416-1.0568,1.69571,1.69571,0,0,0-.54632-.2629c-.3471.04715-.45511-.28164-.67815-.4301a4.64282,4.64282,0,0,0-.9657-.86872,12.09344,12.09344,0,0,1-2.37324-2.66244,18.86892,18.86892,0,0,1-2.23343-4.70817c-.03953-.12224-.09458-.24338.00656-.36262.31608-.063.38853.18654.46687.39059a12.6471,12.6471,0,0,0,.53571,1.25862A.96543.96543,0,0,0,103.10947,32.42006Z"/><path class="cls-89" d="M116.74475,44.358a3.528,3.528,0,0,0-1.15554.15423,2.65074,2.65074,0,0,1-1.15609-.19358,22.35364,22.35364,0,0,1-4.0636-1.61624,17.73923,17.73923,0,0,1-3.2828-2.12182,14.31458,14.31458,0,0,0-1.16832-1.10492,16.75888,16.75888,0,0,1-1.80177-2.03472c-.08-.09762-.1786-.19423-.09064-.33866a.24447.24447,0,0,1,.32775.1188,5.18528,5.18528,0,0,0,1.49114,1.35049c.54589.36431,1.01642.85688,1.54657,1.257a11.24313,11.24313,0,0,0,2.46794,1.46475,21.35126,21.35126,0,0,0,5.00981,1.92128,1.1779,1.1779,0,0,1,.56594.21929.89678.89678,0,0,0,.80944.42509A.49158.49158,0,0,1,116.74475,44.358Z"/><path class="cls-90" d="M115.43514,43.4339a14.41738,14.41738,0,0,1-2.38941-.63624,20.67328,20.67328,0,0,1-2.73736-1.157c-.16893-.08916-.33138-.1906-.49682-.28638a14.80842,14.80842,0,0,1-3.66336-2.56961,12.65126,12.65126,0,0,1-1.84819-2.056c-.0726-.11428-.20266-.21045-.13055-.37574.13773-.06822.21442.03916.29757.11023.98158.83892,1.9185,1.73048,2.95606,2.50334.23581.11373.35405.38425.61666.46226a8.85834,8.85834,0,0,0,1.87955,1.15889A26.12916,26.12916,0,0,0,116.2061,42.835c.139.02991.32807.03265.39619.18592.03552.07988-.08813.13822-.16569.1821A2.53,2.53,0,0,1,115.43514,43.4339Z"/><path class="cls-91" d="M107.11531,40.50708a21.8878,21.8878,0,0,0,6.78573,3.54577c.558.18071,1.14546.235,1.68817.45941.04746.16844.29968.15041.32505.377a11.74626,11.74626,0,0,1-3.86868-.83908.81387.81387,0,0,1-.7713-.0949,28.55056,28.55056,0,0,1-2.71993-1.51c-.36966-.26174-.84134-.30614-1.18546-.62193-.35838-.32888-.76067-.61117-1.116-.94273-.51548-.48095-1.094-.88637-1.60205-1.37421a17.44945,17.44945,0,0,1-1.8655-2.24491c-.17565-.23659-.31411-.4998-.51047-.72217-.22928-.33816-.433-.69234-.64958-1.03847a.49213.49213,0,0,1-.09282-.46953c.32989-.33664.4598.0606.66571.18055.44508.58866.80928,1.23148,1.29425,1.79826a14.19458,14.19458,0,0,0,1.63486,1.70757c.62175.52179,1.19127,1.11283,1.80639,1.64917A2.0178,2.0178,0,0,0,107.11531,40.50708Z"/><path class="cls-92" d="M102.3393,36.502c.42779.45665.72563,1.0095,1.116,1.49691a13.80188,13.80188,0,0,0,2.33989,2.34166c.60177.46443,1.15863.99645,1.74509,1.488.36962.30979.85863.34985,1.24184.64889a25.53168,25.53168,0,0,0,2.26589,1.26673,2.15424,2.15424,0,0,0,.99757.306c.003.12766.0997.17049.19563.208a26.56889,26.56889,0,0,0,3.49243,1.114,5.53236,5.53236,0,0,0,1.62718.37259c-.38769.2047-.76464.001-1.14291-.03978a7.1041,7.1041,0,0,0-1.322.03941.31643.31643,0,0,1-.36267.02483c-.82464-.32873-1.722-.43357-2.53448-.77986a18.85522,18.85522,0,0,1-5.43253-3.07053,16.91478,16.91478,0,0,1-1.53388-1.14942c-.29883-.33429-.60292-.66357-.88748-1.01051a4.68307,4.68307,0,0,0-.7147-.989c-.42719-.61827-.74025-1.30691-1.18222-1.91742C102.17167,36.74713,102.1,36.56351,102.3393,36.502Z"/><path class="cls-93" d="M119.59505,64.84514a.56326.56326,0,0,0-.46221-.46211c-.25421-.18462-.08279-.385.04848-.47478a8.31656,8.31656,0,0,0,1.285-1.3115,2.88351,2.88351,0,0,1,1.3623.11106c.735.18387,1.483.30259,2.21794.48293.14842.03642.30947.03966.40173.19123-.25594.35785-.66448.59309-.84273,1.00787-.09841.229-.1472.47731-.38984.60934-.35129.105-.72183.07027-1.07942.2018a1.61772,1.61772,0,0,1-1.03923-.15216A3.80322,3.80322,0,0,0,119.59505,64.84514Z"/><path class="cls-94" d="M104.188,39.73679a8.10424,8.10424,0,0,1,.97124,1.02746c.49432.514,1.15492.78011,1.68251,1.2463a17.59011,17.59011,0,0,0,4.426,2.56268,24.49831,24.49831,0,0,0,2.60583.86606,3.826,3.826,0,0,0,1.02239.30509,17.04312,17.04312,0,0,0,2.52954.693.69112.69112,0,0,1,.1667.07715,2.946,2.946,0,0,1-.85426.15383l.08391.46233-.53925.00019c-.19649.16947-.41238.06665-.62163.04236a5.90669,5.90669,0,0,1-.85834-.18693A19.38764,19.38764,0,0,1,110.81,45.38972a24.83688,24.83688,0,0,1-5.12777-3.58044c-.67549-.63439-1.26825-1.33793-1.8993-2.00922a.64972.64972,0,0,1-.23991-.57956C103.93475,39.17168,103.9978,39.53361,104.188,39.73679Z"/><path class="cls-95" d="M116.05142,49.74938a5.22327,5.22327,0,0,0,1.84885.46212c-.09923.19457-.26346.15476-.43291.1301-.33838-.04924-.67838-.0876-1.01806-.12758a.17656.17656,0,0,0-.16677.0745c-.184.15507-.38893.08471-.58825.051a15.86658,15.86658,0,0,1-5.207-1.9169,33.46586,33.46586,0,0,1-3.7352-2.43035,18.7315,18.7315,0,0,1-3.08239-2.769,3.17933,3.17933,0,0,1-.65667-.92658c.22406-.14659.35844.04549.49248.1533.28916.23255.53338.51554.79809.77575a1.15183,1.15183,0,0,0,.3953.29763c.59694.46295,1.13616.99413,1.73815,1.45251a30.24018,30.24018,0,0,0,5.10324,3.19792,25.92753,25.92753,0,0,0,2.9957,1.19736c.33319.11334.6794.12452,1.012.21608C115.71791,49.634,115.9093,49.61609,116.05142,49.74938Z"/><path class="cls-96" d="M103.03262,42.27852a12.98047,12.98047,0,0,0,2.21187,2.37448,34.7846,34.7846,0,0,0,3.07266,2.32413c1.04806.68327,2.12709,1.3072,3.2264,1.89794a13.03931,13.03931,0,0,0,3.64439,1.25789,3.92274,3.92274,0,0,0,1.09459.15556c.14818.23128.41725.21088.634.29305.12793.04849.27309.0492.36749.16906a.57712.57712,0,0,1-.46376.11266,14.57069,14.57069,0,0,1-1.69214-.1572,10.88228,10.88228,0,0,1-2.70693-.82659,27.16411,27.16411,0,0,1-3.47006-1.80118,1.60635,1.60635,0,0,1-.24646-.18175q-.97491-.772-1.94877-1.5459A14.43452,14.43452,0,0,1,104.336,44.184c-.4256-.532-.974-.93844-1.3664-1.49475a2.36218,2.36218,0,0,0-.42047-.58709c-.08232-.06413-.06332-.18794.00167-.283A.45517.45517,0,0,1,103.03262,42.27852Z"/><path class="cls-97" d="M115.05,50.597a15.72194,15.72194,0,0,0,2.234.15362c1.15087.06313,2.29136.23065,3.43653.33972a18.49094,18.49094,0,0,0,2.24129.2.82085.82085,0,0,1,.485.07642.1763.1763,0,0,1-.20259.07231c-.52913-.188-1.05426.07457-1.582.00753a.40547.40547,0,0,0-.37237.15122c-.32895.20782-.67925.047-1.00785.02466-1.15935-.07878-2.32149-.14473-3.47205-.322a9.44389,9.44389,0,0,0-1.39316-.39869C115.25571,50.86731,115.04524,50.84977,115.05,50.597Z"/><path class="cls-98" d="M116.74474,51.21275c1.08465.0992,2.16905.2012,3.25406.29621.42964.03762.86065.05972,1.291.08888.3703.16441.77448.04089,1.15784.147a8.51531,8.51531,0,0,0,2.23215.08291,3.00438,3.00438,0,0,1,.56712.06449,1.90942,1.90942,0,0,0,1.02547-.10673c.28556-.10238.57124.02376.8652-.02188.595-.09239,1.19577-.20143,1.78766-.247.51177-.03935.99475-.19805,1.5072-.22232a7.54978,7.54978,0,0,0,1.9147-.30227,1.26286,1.26286,0,0,1,.34391-.01042,2.99632,2.99632,0,0,1-1.42073.37549c-1.3267.23436-2.66374.41519-3.99819.59131-.66255.08744-1.34106.14366-2.01439.19077a3.06629,3.06629,0,0,1-1.54788-.05334c-.153-.0683-.21365.08687-.32673.24114a5.6982,5.6982,0,0,0,1.30707.03694,15.89358,15.89358,0,0,1-3.09226.23509.582.582,0,0,1-.50525.1107c-1.08957-.1072-2.188-.08193-3.27518-.22222a1.83966,1.83966,0,0,1-.48356-.10372,11.45869,11.45869,0,0,0-1.34332-.4094c-.18053-.06607-.41515-.05189-.49331-.29331.23384-.19142.48379.0138.7195-.03054-.33635-.21222-.76694-.21868-1.09939-.4912A3.87768,3.87768,0,0,1,116.74474,51.21275Z"/><path class="cls-69" d="M148.55762,26.25941l.01154.2883c-.00289.15373-.0041.3076-.00909.46135a2.42513,2.42513,0,0,1-.24347,1.46081,1.35422,1.35422,0,0,0-.19633.803.74459.74459,0,0,1-.16415.45773,5.2388,5.2388,0,0,0-.68073,1.38676,18.69578,18.69578,0,0,1-1.1476,2.57084c-.25431.41-.35947.89708-.62191,1.31335-.55516.88057-1.10875,1.76193-1.63924,2.65882-.52836.8933-1.19611,1.703-1.76059,2.57662a14.70086,14.70086,0,0,1-1.04835,1.362,10.91082,10.91082,0,0,1-1.05055,1.13016c-.33576.30583-.55431.72652-.90174,1.03574-.93764.83454-1.84141,1.70395-2.86025,2.44852a16.13436,16.13436,0,0,1-2.96824,1.719,7.46953,7.46953,0,0,1-2.06983.51169c-.9908.13125-1.98946.18265-2.98181.30362a10.35671,10.35671,0,0,1-1.11416.10427,5.09152,5.09152,0,0,0-1.64285.16519c-.19512.06863-.35253-.01921-.52413-.04131a5.497,5.497,0,0,0-1.16623.15058c-.63618.04975-1.25455-.21108-1.8845-.17671-.46684.02547-.91382-.28924-1.40859-.00328-.18487.10684-.51955-.08169-.78079-.06316-.55911.03965-1.07553-.20626-1.62634-.202a.632.632,0,0,0-.25445.06685,4.44389,4.44389,0,0,1-1.64123-.3324c-.09872-.02955-.23785-.05415-.20792-.22012a.5426.5426,0,0,1,.47373-.0549c.4032.07211.81157.00983,1.21539.05336.07279.00785.09415-.00563.1191-.08689.09224-.30044.293-.2484.50314-.12924,1.2072.07749,2.40939.20261,3.60793.36673a5.90721,5.90721,0,0,0,1.0275.08762c.68723-.02753,1.36845.05735,2.05971.02881,1.49251-.06161,2.97764-.18038,4.46341-.32054a17.93,17.93,0,0,0,2.61447-.31371,10.96573,10.96573,0,0,0,3.67612-1.76863,22.15609,22.15609,0,0,0,3.05627-2.60906,34.50924,34.50924,0,0,0,3.98745-4.92792,43.26384,43.26384,0,0,0,3.24224-5.653,42.36023,42.36023,0,0,0,2.47212-6.51691A.34868.34868,0,0,1,148.55762,26.25941Z"/><path class="cls-99" d="M118.28545,47.97794a1.35672,1.35672,0,0,0-.15364.00107c-.09614.011-.21832-.04328-.27764.07232-.07994.15577.15985.13233.17017.28293l-2.04995-.12513c-.158.14325-.33745.08335-.51119.04962a17.47507,17.47507,0,0,1-4.931-1.78356,24.47971,24.47971,0,0,1-5.74458-4.20255c-.43442-.43068-.86348-.87223-1.25621-1.34469-.27719-.4316-.588-.84054-.89763-1.24776a19.84407,19.84407,0,0,1-1.54917-2.42788c-.06138-.111-.14187-.21936-.07534-.35789.2627-.064.30707.1731.41581.31078.16331.20679.22576.494.49628.61474a3.30225,3.30225,0,0,1,.81288.96226,21.82918,21.82918,0,0,0,5.30249,5.24571,19.27,19.27,0,0,0,2.57919,1.36231,22.746,22.746,0,0,0,4.12592,1.50945,12.394,12.394,0,0,0,1.54071.23125,3.42084,3.42084,0,0,0,1.42628.53689C117.9336,47.717,118.20843,47.65926,118.28545,47.97794Z"/><path class="cls-34" d="M103.9912,15.76834a.36618.36618,0,0,1,.00851.339A.36618.36618,0,0,1,103.9912,15.76834Z"/><path class="cls-100" d="M116.05142,49.74938a9.04608,9.04608,0,0,1-1.60607-.30927,24.82036,24.82036,0,0,1-6.2407-3.08084,32.69528,32.69528,0,0,1-3.55447-2.77152c-.59419-.54027-1.11406-1.15082-1.65888-1.73833-.3913-.422-.64613-.94271-1.0407-1.36135a.49466.49466,0,0,1-.169-.51663c.19936-.06005.26687.10536.35429.21839a22.45843,22.45843,0,0,0,2.6744,2.77081.50126.50126,0,0,0,.22488.13966.69671.69671,0,0,1,.32959.19,15.20824,15.20824,0,0,0,3.31756,2.48578,20.89584,20.89584,0,0,0,7.08818,2.878.2989.2989,0,0,1,.20385.0946c.06436.26076.31134.23641.49073.29647a10.08826,10.08826,0,0,0,2.51365.62719c-.0432.02416-.08833.07226-.1293.06894-.73193-.05937-1.468.06634-2.19912-.05507A.86267.86267,0,0,0,116.05142,49.74938Z"/><path class="cls-101" d="M117.284,52.291c1.4294.223,2.87469.22357,4.314.30808a7.45441,7.45441,0,0,0,1.15328.15137,19.94371,19.94371,0,0,0,2.62146.00267c-.20049.23675-.50134.16619-.75056.21239a8.67985,8.67985,0,0,1-1.29058.09316,17.32487,17.32487,0,0,0-1.79255.07164c-.64666.0885-1.29274-.11316-1.94378-.0687a.6576.6576,0,0,1-.54789.10765,19.09292,19.09292,0,0,1-2.13054-.27882,1.33547,1.33547,0,0,0-.72659-.31323,1.44753,1.44753,0,0,1-.33605-.07979c-.12009-.04575-.28218-.09806-.25692-.24226.028-.16.20195-.12624.32183-.107A6.08538,6.08538,0,0,1,117.284,52.291Z"/><path class="cls-102" d="M115.97439,48.7487a6.61089,6.61089,0,0,1-1.79314-.36266,24.25482,24.25482,0,0,1-3.03227-1.18546,26.04683,26.04683,0,0,1-5.05172-3.08789,7.00689,7.00689,0,0,1-.72254-.68117c-.11916-.1184-.22086-.25513-.4164-.22905A8.45292,8.45292,0,0,0,103.786,41.992a27.85578,27.85578,0,0,1-2.23175-2.93572c-.1703-.23986-.30342-.50512-.47248-.74788-.09891-.142-.22463-.29021-.14863-.49139.15841-.07041.24866.04634.31406.14421a24.5847,24.5847,0,0,0,2.32465,2.93091c.41991.3695.777.80039,1.16857,1.1966A23.22635,23.22635,0,0,0,108.763,45.311a20.1061,20.1061,0,0,0,4.9384,2.40532,8.89788,8.89788,0,0,0,2.273.49284,6.18975,6.18975,0,0,0,1.64316.46074c.07691.01008.15442.00617.20569.07826v.077A6.7637,6.7637,0,0,1,115.97439,48.7487Z"/><path class="cls-103" d="M76.53205,47.13073a.67985.67985,0,0,0,.05348-.67741c-.09813-.3008-.32672-.59488-.13028-.94.03777-.388-.04941-.77367-.022-1.16168a.34373.34373,0,0,1,.23632-.10811,2.9581,2.9581,0,0,0,1.57493-.66083.25416.25416,0,0,1,.18106-.03869c.199.103.30742.304.47681.43969a.53043.53043,0,0,1,.10908.31866,2.96067,2.96067,0,0,0,.26058,1.21143c-.02812.16872-.15877.20981-.29866.25078-.4654.13636-.56629.33077-.43005.82576.08126.2952.19306.59074-.08521.84867A10.04146,10.04146,0,0,1,76.53205,47.13073Z"/><path class="cls-104" d="M78.45812,47.439a1.18761,1.18761,0,0,0-.02451-.84554c-.21443-.51363-.00367-.83849.55466-.9245a.28034.28034,0,0,0,.24059-.15544c.2125-.05962.348.089.50326.18492a.92893.92893,0,0,1,.33322.62053c.03255.32656.34787.52716.4421.83579-.30052.483-.079,1.14647-.54487,1.57484-.064.05882-.09862.14955-.19484.17259-.24948-.02191-.42843-.25538-.69332-.23107A2.7363,2.7363,0,0,1,78.45812,47.439Z"/><path class="cls-105" d="M116.89881,52.83a17.37,17.37,0,0,1,1.85531.20526c.28053.014.56114.009.84112.02639a2.09262,2.09262,0,0,0,1.012.24076,20.6139,20.6139,0,0,1,2.62214.21012c.36133.074.70655-.09858,1.06486-.06619.06853.27093-.1584.22881-.27743.22243a.42488.42488,0,0,0-.49293.31671.53364.53364,0,0,1-.43024.11793c-1.59569-.02474-3.18952-.10007-4.78259-.18025a9.56748,9.56748,0,0,0-2.03386-.52353,19.99246,19.99246,0,0,1-3.98214-1.25751,24.58873,24.58873,0,0,1-3.12776-1.63554c-.11564-.07268-.26578-.11058-.29762-.27483.16433-.17569.32438-.0701.47627.01579.37461.21184.75763.4078,1.13648.61158a1.3061,1.3061,0,0,0,.75365.21593,9.62624,9.62624,0,0,1,1.56257.63739,14.05587,14.05587,0,0,0,3.55494.94772A1.2,1.2,0,0,1,116.89881,52.83Z"/><path class="cls-106" d="M118.20841,53.83123c1.09849-.03665,2.19357.07338,3.2905.10011.6735.01641,1.35.03131,2.025.0541a16.4266,16.4266,0,0,0,2.66007-.22057,1.99491,1.99491,0,0,1,.42135-.01027c.06969.12095.1861.22322.15407.38488a27.88555,27.88555,0,0,1-3.09228.37723,4.18622,4.18622,0,0,1-.72118-.03266,24.06236,24.06236,0,0,0-2.81159.19437.38655.38655,0,0,1-.35366.10644c-1.136-.1592-2.29656-.06617-3.42161-.3341a.91655.91655,0,0,1-.35755-.126c-.06832-.2096.08713-.34.17629-.49453A9.42514,9.42514,0,0,1,118.20841,53.83123Z"/><path class="cls-107" d="M124.44829,63.382c-1.255-.23049-2.48523-.584-3.75249-.75459a.46839.46839,0,0,0-.25336.06141,9.4734,9.4734,0,0,1-3.63219-.37224,1.56741,1.56741,0,0,1-.87083-.35078.86807.86807,0,0,1,.26982-.72782.62067.62067,0,0,1,.47882-.06317,22.06993,22.06993,0,0,0,2.95958.34985.75646.75646,0,0,0,.34058-.02551,3.3359,3.3359,0,0,1,1.3951-.15547,11.75309,11.75309,0,0,1,2.44621.04691c.46019.02469.92.04317,1.3807.039.1646-.00151.33586-.03086.47062.1038a4.31449,4.31449,0,0,1,.86625.08318.36735.36735,0,0,1,.34156.26129c.05646.15392-.045.25089-.14533.32011-.28819.19888-.33468.68454-.84993.66391.40028.14069.21063.38431.17263.5968a2.236,2.236,0,0,1-1.19508-.17232C124.69978,63.18535,124.58646,63.33815,124.44829,63.382Z"/><path class="cls-108" d="M125.68085,61.53332a25.09434,25.09434,0,0,1-3.072-.09823,10.52167,10.52167,0,0,0-1.242.02121.72321.72321,0,0,1,.18915-.66947.83759.83759,0,0,1,.41418-.06027,21.09871,21.09871,0,0,0,4.20118-.3429.67408.67408,0,0,1,.588.0712,12.83539,12.83539,0,0,0,2.77328-.07683,7.58847,7.58847,0,0,1-2.09293.76072A5.09844,5.09844,0,0,0,125.68085,61.53332Z"/><path class="cls-109" d="M85.93075,11.16261a9.97044,9.97044,0,0,1,1.77163.07693c.1403-.13439.30772-.08818.47259-.07493.85644.06885,1.69843.23359,2.54327.3779a25.74877,25.74877,0,0,1,2.69026,1.34888c.33979.22284.37115.31509.226.68368a.80144.80144,0,0,1-.58826-.10173,5.86873,5.86873,0,0,0-1.5115-.40262,1.837,1.837,0,0,0-.8882-.19466,7.67235,7.67235,0,0,1-1.39322-.25808,10.31743,10.31743,0,0,0-1.60515-.117,20.79374,20.79374,0,0,1-2.37481-.713c-.10953-.0273-.21893-.08747-.19023-.24007.04938-.03633.10983-.11278.14641-.10268A.65046.65046,0,0,0,85.93075,11.16261Z"/><path class="cls-110" d="M85.08317,11.54785c.139.23507.405.19969.61166.25649a12.29917,12.29917,0,0,0,1.93046.59085,2.26167,2.26167,0,0,1-.20947.53136.38131.38131,0,0,1-.36106.05766,5.60577,5.60577,0,0,1-1.43234-.35811,8.31711,8.31711,0,0,0-2.43045-.54691,9.94053,9.94053,0,0,0-1.62336-.08263.57762.57762,0,0,1-.56832-.2945,23.83645,23.83645,0,0,1,3.265-.16128C84.538,11.54024,84.81055,11.73672,85.08317,11.54785Z"/><path class="cls-111" d="M123.13868,57.37428a13.4008,13.4008,0,0,0,1.92694.01431,1.756,1.756,0,0,1,.92337.13973c-.95636.09149-1.87688.39746-2.83574.47553-.032.00261-.06113.04145-.0916.06342-.07232.15784-.21271.16751-.356.15489-.8383-.07389-1.67818-.02247-2.51723-.03278a6.78787,6.78787,0,0,1-.9495-.07573,8.801,8.801,0,0,1-1.42089-.2495.53946.53946,0,0,1-.06668-.59553.86121.86121,0,0,1,.55867-.05,14.53737,14.53737,0,0,0,1.75593.01932c.954-.06319,1.91344.0267,2.87082.03952A.26356.26356,0,0,1,123.13868,57.37428Z"/><path class="cls-112" d="M128.223,57.91323c.11755.06392.21259.1704.368.15845.15987-.0123.17278.10624.17126.22646a.5714.5714,0,0,1-.41674.24573,24.57588,24.57588,0,0,1-5.27359.6326c-.46834-.06446-.94087-.03706-1.4098-.06345a2.79261,2.79261,0,0,1-1.39209-.29857c.05405-.23313.24882-.24709.42334-.23892a25.58976,25.58976,0,0,0,3.624-.24083c.30081-.02861.60256-.06181.90124-.11321.82161-.00985,1.62606-.18052,2.4392-.26913C127.84694,57.93175,128.03452,57.92424,128.223,57.91323Z"/><path class="cls-113" d="M125.21864,58.22149c-.54453.1026-1.08624.225-1.63422.30346a16.179,16.179,0,0,1-2.97463.15855.29046.29046,0,0,0-.32142.15377,1.47233,1.47233,0,0,1-.95828.08683c-.64261-.14626-1.30043-.21163-1.94338-.35932-.19967-.04587-.40558-.06076-.5213-.26437-.0007-.34688.241-.32707.47476-.30787a14.41435,14.41435,0,0,1,1.65823.0675.2813.2813,0,0,0,.21148-.0696,21.68134,21.68134,0,0,0,3.06845.06666c.26073.0014.52223.19012.78332.01017.42782.02309.80783.32341,1.2532.22772A3.6659,3.6659,0,0,1,125.21864,58.22149Z"/><path class="cls-114" d="M123.13868,57.37428c-1.79693-.065-3.59693.08479-5.39248-.07684a.33118.33118,0,0,1-.28661.06949,16.13033,16.13033,0,0,1-2.36894-.59294.58078.58078,0,0,1-.22527-.14144.33353.33353,0,0,1-.06013-.42117c.11131-.16057.27291-.09486.42-.05552a2.01514,2.01514,0,0,0,.79164.10344c.80524.04874,1.59946.19465,2.40217.2704a6.9666,6.9666,0,0,0,1.41635.00226,9.47631,9.47631,0,0,1,1.76335-.01364,15.0547,15.0547,0,0,0,2.4538.00731c.9316-.06493,1.86755-.03705,2.79793-.13023a.20215.20215,0,0,1,.14.05465c.12183.08794.31765.0526.38517.23106a12.76153,12.76153,0,0,1-1.80316.30323C124.75521,57.08087,123.9471,57.22674,123.13868,57.37428Z"/><path class="cls-115" d="M129.53263,55.14072a10.0376,10.0376,0,0,0-1.26468.28162c-.106.04361-.227.05386-.276.1805-.11288.17617-.30173.174-.477.202a29.12646,29.12646,0,0,1-5.16482.45448,7.14344,7.14344,0,0,1-.88091.05769c-.82509-.00028-1.64062-.13735-2.47455-.09654a6.02955,6.02955,0,0,1-1.92391-.22507,1.84636,1.84636,0,0,0-.84033-.301c-.32384-.06157-.40747-.17721-.36643-.4502a.844.844,0,0,1,.49043-.01817,20.537,20.537,0,0,0,2.3702.17255,3.67919,3.67919,0,0,1,1.41244.043,7.03336,7.03336,0,0,0,1.38066-.00388,9.47431,9.47431,0,0,1,1.65351-.0199,19.77184,19.77184,0,0,0,2.377-.14058c.22327-.01474.45212-.1312.67191.01776.38074.1665.73614-.04593,1.10409-.07156A6.62416,6.62416,0,0,1,129.53263,55.14072Z"/><path class="cls-116" d="M126.2201,55.295c-.83557.17525-1.69283.15786-2.53485.28255a5.78792,5.78792,0,0,1-.68052-.04761,14.8899,14.8899,0,0,0-1.7585.05914,6.69873,6.69873,0,0,1-1.825-.11145,1.07719,1.07719,0,0,0-.67359.04786c-.09518-.12555-.37526-.11636-.3201-.32806.0561-.2153.29428-.14808.46422-.17283,1.01757-.14824,2.04392.067,3.06213-.07273a.34275.34275,0,0,1,.26035.03487c1.18292.05267,2.36188-.07612,3.54363-.07739a14.21488,14.21488,0,0,0,2.255-.258c.45813-.07276.91133-.02082,1.36568-.04976q-1.35383.30794-2.7079.6148C126.5221,55.2498,126.37036,55.26912,126.2201,55.295Z"/><path class="cls-117" d="M90.7838,11.625c-.65286.02107-1.26571-.23923-1.91288-.26913-.39047-.018-.77909-.0762-1.16854-.11633-.17687-.20337-.47009-.16095-.67058-.31864-.11724-.09221-.26724-.14581-.33072-.29733.29036-.191.59424-.064.899-.06877.57162-.009,1.163.21317,1.72005-.08529.12774-.12347.28053-.083.431-.0685.55444.05351,1.0997.17716,1.65582.21484.707.31757,1.4139.63716,2.14791.89223.18534.21342.42657.39713.39224.72907a.52421.52421,0,0,1-.6131.02593,9.40185,9.40185,0,0,0-1.74439-.42521A5.12161,5.12161,0,0,1,90.7838,11.625Z"/><path class="cls-118" d="M76.4552,44.35823a1.48392,1.48392,0,0,1,.00005,1.15509c-.04277-.02413-.0907-.07533-.12752-.0683a10.96527,10.96527,0,0,1-1.49008-.08536c-.89144-.22478-1.14588-1.07462-1.64689-1.68178a2.85976,2.85976,0,0,1-.20215-.32109c.264-.04644.50984.0886.77035.07683.15983-.10717.26472.02346.37055.09817a.90816.90816,0,0,0,.96278.13093,1.5418,1.5418,0,0,1,.708-.12407A2.42132,2.42132,0,0,1,76.4552,44.35823Z"/><path class="cls-119" d="M75.83892,43.58794c-.35248.09954-.71494.14907-1.064.27912-.27015.10064-.49564-.144-.72548-.26925-.09712-.05291-.15973-.16765-.29045-.16419-.19462-.59916-.58736-1.10247-.81829-1.68528a.67941.67941,0,0,1-.10613-.317c.27824-.14481.46508-.32138.39124-.68808-.05339-.26511.17245-.36948.386-.44764a.469.469,0,0,1,.2995.02266,1.88035,1.88035,0,0,0,.8815.18955.34259.34259,0,0,1,.23836.10766,1.92018,1.92018,0,0,1,.56963,1.20987c.00814.343.24937.606.33757.92306C75.98042,43.03715,76.12693,43.3385,75.83892,43.58794Z"/><path class="cls-120" d="M73.60489,40.35313c-.22284.14185-.38183.28051-.25894.60371.10078.265-.12214.4448-.51141.47447a9.51753,9.51753,0,0,1-1.15215-.92568,4.53532,4.53532,0,0,1-.69673-1.07664.52651.52651,0,0,1,.24968-.04152c.21441.00722.4448-.01274.44462-.32133-.0001-.16164.10667-.17871.23015-.17656a.60374.60374,0,0,1,.54745-.07432.58279.58279,0,0,1,.278.24906,7.37975,7.37975,0,0,0,.7371.92009A.32669.32669,0,0,1,73.60489,40.35313Z"/><path class="cls-121" d="M96.94645,11.00889c.07634.19751.25213.30205.3963.44041a10.77855,10.77855,0,0,1,3.28481,5.7857,21.89474,21.89474,0,0,1,.31663,2.76075,8.23181,8.23181,0,0,1-.06875,1.10253,3.19065,3.19065,0,0,0-.02993,1.09527c.04882,1.23581.09342,2.47278.22712,3.70342.08268.76106.23517,1.51353.29044,2.27816.01332.18431.11427.37585-.03419.55042-.22122.00845-.21957-.17486-.2587-.31236a21.32067,21.32067,0,0,1-.6968-4.62259c-.02978-.50977-.04636-1.0228-.1183-1.53084a14.50825,14.50825,0,0,1,.05745-1.64784,11.27551,11.27551,0,0,0-1.82182-6.37145,6.98664,6.98664,0,0,0-2.05228-1.94234,5.75763,5.75763,0,0,0-.55767-.33859,12.17131,12.17131,0,0,0-2.6499-1.34316,3.08933,3.08933,0,0,1-.60928-.27114c-.09224-.06838-.24185-.09416-.22-.26074a.283.283,0,0,1,.10249-.02473c.98157.16281,1.96725.306,2.94171.50417a5.85108,5.85108,0,0,1,1.12846.43163C96.70745,11.05356,96.816,11.14553,96.94645,11.00889Z"/><path class="cls-122" d="M92.40154,10.0845a3.91252,3.91252,0,0,0,.84739.46209c-.02917.21065-.20336.18066-.32376.159a1.58036,1.58036,0,0,0-1.11842.03992.38748.38748,0,0,1-.32963-.04474c-.73053.03045-1.43226-.20769-2.157-.23124-.89261-.2817-1.78842-.55382-2.67653-.849-.45645-.15173-.996-.17058-1.25228-.69135.16061-.266.37457-.1312.57782-.07692s.41723.189.57772-.07707a16.072,16.072,0,0,0,4.11061.94118A11.04484,11.04484,0,0,1,92.40154,10.0845Z"/><path class="cls-123" d="M122.21426,54.98669a3.71864,3.71864,0,0,0-1.13346.125,1.66174,1.66174,0,0,1-.8351-.00155,12.336,12.336,0,0,0-1.82836.03217c.13519.18532.35252.187.33032.38318-.98146-.00488-1.95223-.14532-2.92734-.23069a2.93279,2.93279,0,0,1-1.29309-.24859,24.0785,24.0785,0,0,1-6.52229-3.313,22.52266,22.52266,0,0,1-3.18279-2.7161c-.11391-.11828-.25693-.21793-.28662-.39771.08568-.22456.20132-.074.28944-.01215a9.694,9.694,0,0,1,.9427.78917,17.80193,17.80193,0,0,0,2.48592,1.86735c.84068.53217,1.67774,1.06678,2.56633,1.51559.05352.00859.02721-.07915.02267-.028-.00184.02061-.014.02817-.03386.01782a12.55141,12.55141,0,0,1-3.03619-1.99325c-.07666-.0741-.196-.14526-.095-.284.17513-.0507.28654.07628.41586.15044.69875.40069,1.35552.87247,2.06567,1.252a21.86418,21.86418,0,0,0,5.46435,2.189c.122.02753.25784.02643.351.1332a3.76769,3.76769,0,0,0,1.40728.28656c.923.01034,1.83225.17228,2.75263.17537a8.92557,8.92557,0,0,0,1.6075.23427C121.90006,54.91712,122.07517,54.84841,122.21426,54.98669Z"/><path class="cls-124" d="M123.06165,59.0687a20.52446,20.52446,0,0,0,3.19693-.27309c.67143-.08712,1.32992-.2265,1.99532-.33548.18289-.03.32545-.15329.50837-.162a15.727,15.727,0,0,1,2.71806-.55179,3.01193,3.01193,0,0,1,.97964.013c-.01365.135-.10717.16341-.218.1523a3.39913,3.39913,0,0,0-.56287.07173c-.2968.01815-.3409.1897-.27218.41574a.41.41,0,0,1-.02544.36148,1.94561,1.94561,0,0,1-.61779.155c-.97528.23079-1.93789.51508-2.92584.69241a.49635.49635,0,0,1-.38358.15048,8.7551,8.7551,0,0,0-1.98592.13729c-.855.09549-1.71548-.00467-2.56648.13048a4.2281,4.2281,0,0,1-.99336-.07042c-.54843-.043-1.096-.08624-1.64709-.08528a1.587,1.587,0,0,1-.70942-.14224c-.08478-.28551.13454-.27346.2964-.28043.99384-.0428,1.96674-.30308,2.96651-.28258A.42788.42788,0,0,0,123.06165,59.0687Z"/><path class="cls-125" d="M78.227,14.16705a1.8593,1.8593,0,0,0-.97814-.23746c-.12913.02254-.183-.07447-.17482-.193.01-.14491-.10247-.228-.15664-.34019.62471-.00873,1.24681-.06873,1.86755-.10927.74871-.04889,1.47027-.24823,2.21532-.27595a14.70159,14.70159,0,0,1,2.54217-.23095c.59285.069,1.11293.40551,1.71295.46024.17083.01559.41944.04543.32235.349a15.5069,15.5069,0,0,1-2.41548.06968,6.04938,6.04938,0,0,0-1.63247.20286,22.30777,22.30777,0,0,1-2.26751.40507.53733.53733,0,0,1-.26494-.02344A2.13132,2.13132,0,0,1,78.227,14.16705Z"/><path class="cls-126" d="M85.62261,13.55a.362.362,0,0,0-.33807-.21712c-.58856.042-1.049-.38044-1.61123-.42479-.04669-.00368-.08737-.08344-.13085-.12785a11.6074,11.6074,0,0,1,1.87426-.07909.20518.20518,0,0,0,.2057-.075,15.21682,15.21682,0,0,1,1.53273.27239c.09.00665.17206.05056.23965-.04118a5.30563,5.30563,0,0,1,1.8887.35177,2.10033,2.10033,0,0,1,.66187.27046c.03908.16491.05467.33675.22024.446.08217.0542.15563.14229.01255.22591a6.38465,6.38465,0,0,1-1.71311-.17235,4.64876,4.64876,0,0,0-1.33938-.06467,2.08746,2.08746,0,0,1-.94524-.08354C85.98685,13.75286,85.76066,13.73856,85.62261,13.55Z"/><path class="cls-127" d="M121.4439,56.21938a40.81437,40.81437,0,0,0,5.42083-.45068c.37126-.07688.75122-.11167,1.12719-.16586.74569-.0727,1.49087-.15152,2.23734-.215.2798-.02378.56263-.01178.84407-.0161a3.99352,3.99352,0,0,1-1.34923.34551c-.65045.12888-1.247.41855-1.89359.5456a2.55292,2.55292,0,0,0-.84005.18716,3.38119,3.38119,0,0,1-1.234.13583c-1.31786.01657-2.63282.15239-3.95188.09534a.24214.24214,0,0,1-.20661-.07713C121.46252,56.50952,121.33469,56.41189,121.4439,56.21938Z"/><path class="cls-128" d="M119.51877,59.68505c.95944.11689,1.93072.05908,2.88936.21626a14.28581,14.28581,0,0,0,1.75486-.06939,14.52464,14.52464,0,0,0,2.61953-.21353,7.99256,7.99256,0,0,0,1.05533-.01036c-.004.41265-.28963.49954-.61956.5369-.20627.02336-.41673.04275-.45894.30993a12.3114,12.3114,0,0,0-2.0816.25287,20.84851,20.84851,0,0,1-2.84916.13207c-.10248.00287-.20509.00085-.30765.0011a.37166.37166,0,0,1-.32711.06824,1.55144,1.55144,0,0,0-.8325.07023.76175.76175,0,0,1-.41829.02823c-.84072-.17638-1.70561-.20619-2.53989-.42113a.8116.8116,0,0,1-.452-.19091c-.10513-.58545.16787-.90354.73133-.84752a16.22878,16.22878,0,0,1,1.64339.10842A.78524.78524,0,0,1,119.51877,59.68505Z"/><path class="cls-129" d="M75.29962,15.93791a1.37171,1.37171,0,0,1-.07661-.462c.51642.14195.95246-.20867,1.44-.23491.3805-.02047.73169-.18122,1.09578-.23117.41541-.057.83219-.13,1.2526-.16186.23984-.01818.36424-.12127.217-.37317a.809.809,0,0,1,.69893-.08465,2.22517,2.22517,0,0,0,.91149-.049,7.08118,7.08118,0,0,1,2.4303-.27232c.55868.05647,1.11338.15159,1.677.15455a4.18994,4.18994,0,0,1,1.40915.63054c.07151.06953.19628.05132.28754.09326.10277.04724.27232.05761.19431.25073a.60389.60389,0,0,1-.48361.034,10.35961,10.35961,0,0,0-5.80369.56027,16.86327,16.86327,0,0,1-3.91728,1.06251C75.85166,16.95213,75.42019,16.65506,75.29962,15.93791Z"/><path class="cls-130" d="M85.006,14.32051a11.5939,11.5939,0,0,1-1.66771-.13127,4.7051,4.7051,0,0,0-2.10992.20177,6.41311,6.41311,0,0,1-1.99984.08376.48417.48417,0,0,1-.23112-.23112c.6507-.23468,1.35874-.178,2.01223-.38646a11.63945,11.63945,0,0,1,3.71422-.30108c.29994.00265.59915-.15884.8988-.00615l.53906.15462a2.94958,2.94958,0,0,0,1.01242.43073c.10953.04168.26143-.006.31.15624-.026.04622-.06286.09262-.113.09473a4.70771,4.70771,0,0,1-1.95877.00618A.69194.69194,0,0,0,85.006,14.32051Z"/><path class="cls-131" d="M70.36945,19.86586a1.414,1.414,0,0,1,.61618-.23094.51892.51892,0,0,1,.41518.142,2.05349,2.05349,0,0,0,.81834.43734,2.13243,2.13243,0,0,1,.58435.82824c-.03776.17558-.14744.322-.19981.4923a.22788.22788,0,0,1-.22359.1786c-.53447-.03143-.7842.34-1.036.71283-.24.08907-.37944.362-.6662.36643-.01406-.18825-.16177-.27269-.28821-.37572a1.249,1.249,0,0,1-.59139-.78188c-.03654-.23094-.30154-.38934-.5075-.53736,0-.11467-.00277-.22942.0007-.344.00642-.21251-.08533-.42476.32854-.40342A.74106.74106,0,0,0,70.36945,19.86586Z"/><path class="cls-132" d="M68.67462,25.48821c.005-.01159.01588-.024.01432-.03465a1.02571,1.02571,0,0,1,.371-.88927,3.63165,3.63165,0,0,0,1.00127-.15422,1.70323,1.70323,0,0,1,1.064,1.08381c-.10466.59643.042.86277.62681,1.10948.1427.06019.3014.08762.31578.2847a1.21213,1.21213,0,0,1-.50739.81725,3.03818,3.03818,0,0,1-1.73034-.29168,12.45671,12.45671,0,0,0-.41229-1.30134C69.3238,25.78783,68.90458,25.72309,68.67462,25.48821Z"/><path class="cls-133" d="M70.67792,22.79262c.20927-.1222.33855-.37224.61609-.38532.11895-.08783.21754-.00852.32023.03875a6.24089,6.24089,0,0,0,1.77016.48329.76874.76874,0,0,0,.688-.1318.19643.19643,0,0,1,.218-.02684c.089.09736.04381.189-.011.28056a1.92469,1.92469,0,0,1-1.09005.7075c-.38026.09048-.69568.36374-1.09007.43243a3.6154,3.6154,0,0,1-1.65278-.39739A1.94226,1.94226,0,0,1,70.67792,22.79262Z"/><path class="cls-134" d="M70.44644,23.7938a12.25887,12.25887,0,0,0,1.69478.30828,4.64569,4.64569,0,0,1,1.01823.4373c.14867.10327.29793.21213.26788.43a.46216.46216,0,0,1-.325.28368,14.99121,14.99121,0,0,0-1.681.28775.35364.35364,0,0,1-.35867-.0524,2.856,2.856,0,0,0-1.00146-1.07836C70.19493,24.20794,70.22075,23.93844,70.44644,23.7938Z"/><path class="cls-135" d="M75.29962,15.93791c.12116.26612.38376.43386.48741.716.06139.16709.22888.12783.365.13052.15236.003.30482.00065.45724.00062a1.43989,1.43989,0,0,1,1.03941.12339,1.12717,1.12717,0,0,0,.81812.01084c.88143-.27044,1.75143-.57255,2.62151-.87656a9.73823,9.73823,0,0,1,2.83516-.44126.71685.71685,0,0,1,.44723.07409c.01053.313-.26029.303-.43856.33543-.80331.14617-1.56859.43-2.35851.62254a4.006,4.006,0,0,0-.91164.37925A14.216,14.216,0,0,1,76.99864,18.468a8.39357,8.39357,0,0,0-1.22334.32913,1.00475,1.00475,0,0,1-.74961.03751c-.1281-.10081-.04571-.26407-.11585-.38575a1.746,1.746,0,0,0-.5718-.72886c-.209-.1269-.504-.27152-.42519-.62682a.29768.29768,0,0,0,.03291-.40308.98148.98148,0,0,1-.1868-.67515Z"/><path class="cls-136" d="M73.91285,17.09325a.72834.72834,0,0,0,.44519.53009c.38091.15209.44809.51128.65572.77485.10325.13107.04184.26261-.02223.38932a.6866.6866,0,0,0-.22372.73057.30624.30624,0,0,1-.09269.30879,7.73889,7.73889,0,0,1-1.68485.0677,1.45467,1.45467,0,0,1-.7722-1.41518c.188-.30169-.06786-.56313-.07684-.84695a1.34323,1.34323,0,0,0,.6573-.429C73.16245,16.7754,73.5226,16.92236,73.91285,17.09325Z"/><path class="cls-137" d="M69.83015,27.41363a10.3291,10.3291,0,0,0,1.77182.231c.09534-.0641.15126-.02555.18529.07082a9.66333,9.66333,0,0,1-.38909,1.39885,1.69681,1.69681,0,0,1-2.261-.69921,1.389,1.389,0,0,0-.07764-.46219C69.38744,27.87459,69.54109,27.54741,69.83015,27.41363Z"/><path class="cls-138" d="M69.44479,34.57706a.89927.89927,0,0,0,.4624-.38565c.01953-.01637.04418-.04384.06229-.039.50975.13677,1.07878.13871,1.43773.62331a2.78493,2.78493,0,0,0,1.05418,1.881.328.328,0,0,1,.10074.16154c-.03917.22157.15442.48082-.1068.66718a.31824.31824,0,0,1-.22291.01483,11.90535,11.90535,0,0,1-1.70876-.6902,3.97793,3.97793,0,0,0-.54053-.82454c-.1845-.221-.17829-.54563-.336-.8005A2.67873,2.67873,0,0,1,69.44479,34.57706Z"/><path class="cls-139" d="M70.52366,36.81006a8.1717,8.1717,0,0,1,1.52424.536.90461.90461,0,0,0,.40146.08046c.16816.29523.38618.55857.54867.85745.07316.13457.15918.26849.00611.40645a2.631,2.631,0,0,1-.47793.19927l-.6161-.00009-1.38682-1.30933C70.492,37.32351,70.65,37.06685,70.52366,36.81006Z"/><path class="cls-140" d="M69.13721,28.41514c.2062.16753.41854.32812.6172.50415a1.0914,1.0914,0,0,0,1.08934.24518,1.9777,1.9777,0,0,1,.52711-.05633c.23669-.10734.32333.08034.40326.22737a1.73813,1.73813,0,0,1,.241,1.05508,1.05531,1.05531,0,0,0-.729.45984.37083.37083,0,0,1-.37417.15443,6.90629,6.90629,0,0,0-1.365-.59885.42318.42318,0,0,1-.25581-.21941c-.17707-.145-.18946-.40761-.38517-.53932A9.638,9.638,0,0,1,69.13721,28.41514Z"/><path class="cls-141" d="M71.37086,34.80766a3.89661,3.89661,0,0,0-1.46367-.61625l-.462-1.46352a6.961,6.961,0,0,0-.07723-1.155c.11189-.09062.22345-.0362.3221.01624.28527.15167.61438.17636.9013.32058.199.29856.617.40518.70583.80118a1.80527,1.80527,0,0,0,.44777,1.79709.17341.17341,0,0,1,.028.14581A.54634.54634,0,0,1,71.37086,34.80766Z"/><path class="cls-142" d="M70.60051,31.958a4.82858,4.82858,0,0,1-1.23257-.38519,2.1396,2.1396,0,0,1-.07685-1.38625,5.79434,5.79434,0,0,1,1.61794.77019C70.87408,31.31145,70.9232,31.692,70.60051,31.958Z"/><path class="cls-143" d="M72.21807,18.47939c.16053.49322.24221,1.03281.77054,1.30975.03492.183-.09473.25465-.22715.297a2.66194,2.66194,0,0,1-.54339.16507,1.00245,1.00245,0,0,1-.81772-.37536c-.09727-.13478-.31726-.08825-.41472-.24094-.0336-.4874-.28587-.96334-.07679-1.46348A1.85149,1.85149,0,0,1,72.21807,18.47939Z"/><path class="cls-144" d="M100.10509,51.21275a4.98266,4.98266,0,0,0,.72812,1.20217c.37854.58814.79643,1.151,1.19757,1.72456-.50371.249-.50371.249-.34674.7912-.04735.053-.098.02748-.13193-.00836a.94587.94587,0,0,0-1.18206-.21984.81882.81882,0,0,1-.56668.042,9.15052,9.15052,0,0,0-2.32974-.14268,5.92572,5.92572,0,0,1-1.14665-.06675c-.29734-.06987-.57225-.01442-.61449.37728-.02863.26556-.23411.21392-.409.22976a11.26842,11.26842,0,0,1-4.47769-.5614c-.08328-.02656-.20151-.07492-.2562-.03972-.65758.42334-1.18559-.09726-1.75671-.24284a10.13328,10.13328,0,0,0-1.49222-.48264c-1.47344-.12828-2.53353-1.1225-3.79438-1.68909a.48716.48716,0,0,1-.272-.35672,1.03539,1.03539,0,0,0-.52759-.6637,1.13787,1.13787,0,0,1-.6104-.69487c-.05191-.23085-.40007-.26674-.49973-.5077a.35379.35379,0,0,1-.00307-.26082,1.01653,1.01653,0,0,0-.09507-1.06331A.65742.65742,0,0,1,81.921,47.663a.80954.80954,0,0,1,.83549.36132,4.57442,4.57442,0,0,0,1.4204.89808A23.07867,23.07867,0,0,0,88.442,50.66466a2.60935,2.60935,0,0,0,2.10325-.17611.83141.83141,0,0,1,.41216-.07145,12.00146,12.00146,0,0,0,1.68886-.06774,1.03888,1.03888,0,0,1,.778.13946.22891.22891,0,0,0,.14283.05232A4.946,4.946,0,0,0,95.84,50.11726a12.36668,12.36668,0,0,0,1.89609-1.23368.50978.50978,0,0,1,.3907-.13406.24987.24987,0,0,1,.17169.07361A16.27471,16.27471,0,0,1,100.10509,51.21275Z"/><path class="cls-145" d="M81.92453,47.74688c-.26091.0619-.528.66281-.32626.8288.42511.34981.24093.70347.11046,1.07762-.02926.08388-.06136.16677-.09215.25012a1.28872,1.28872,0,0,0-1.2322,0,3.17914,3.17914,0,0,1-.61665-1.00127,2.35618,2.35618,0,0,1,.31661-.52354c.07263-.08.16165-.22983.13212-.30373-.15419-.386.10372-.64655.24459-.94418a.35738.35738,0,0,1,.55621-.14148,4.28957,4.28957,0,0,0,.696.52916C81.8,47.57334,81.94637,47.58671,81.92453,47.74688Z"/><path class="cls-47" d="M115.97439,61.91841a11.06617,11.06617,0,0,0,2.3839.61783,8.48555,8.48555,0,0,0,1.63858.07419.82912.82912,0,0,1,.44557.07836,3.5031,3.5031,0,0,1-1.08,1.16659c-.17192.10065-.36243.26187-.22956.52765a2.89727,2.89727,0,0,0-1.36558-.39452,2.05221,2.05221,0,0,1-1.03642-.47209,13.55661,13.55661,0,0,0-1.53858-.76812c-.28516-.13652-.46114-.432-.76-.56375-.39778-.17532-.78555-.37331-1.183-.54944a21.96656,21.96656,0,0,1-4.65882-2.93614,17.10949,17.10949,0,0,1-2.90691-2.71212,2.69424,2.69424,0,0,0-.34-.307,3.1238,3.1238,0,0,0-.52624-.8379.39546.39546,0,0,1-.12062-.4523c.1894-.0974.27241.06948.37645.16166a3.55281,3.55281,0,0,1,.39885.41105,31.07431,31.07431,0,0,0,5.35635,4.51423,21.91871,21.91871,0,0,0,2.99908,1.62931,14.47057,14.47057,0,0,0,1.90513.706A.48452.48452,0,0,1,115.97439,61.91841Z"/><path class="cls-146" d="M104.7274,54.37053a.732.732,0,0,0,.28856.56028.96309.96309,0,0,1,.32754.749,15.10068,15.10068,0,0,1-1.80342-1.82613.34356.34356,0,0,0-.27654-.17637c-.854-1.022-1.67-2.07408-2.48286-3.12881a3.69371,3.69371,0,0,1-.29061-.4909,1.358,1.358,0,0,0-.34955-.67117c-.16578-.22956-.33882-.47429-.07451-.75345.26223-.06715.36792.13543.48123.29718.63841.91129,1.31151,1.79682,2.007,2.66433.61528.76746,1.24286,1.5257,1.89928,2.25934C104.585,54.00079,104.76182,54.13211,104.7274,54.37053Z"/><path class="cls-147" d="M100.10509,51.21275a5.68051,5.68051,0,0,1-.90864-1.16963A10.79138,10.79138,0,0,1,98.17892,48.825a1.05136,1.05136,0,0,1-.45972-.59193,1.28384,1.28384,0,0,0-.27659-.49995,15.0151,15.0151,0,0,1-1.31507-1.54588c-.06787-.23957-.10312-.48568-.147-.7301a2.51917,2.51917,0,0,0,.33105-1.02076c.25885-.05276.32856.16887.41535.3188.45568.78723,1.00525,1.51126,1.50415,2.269.38831.51016.79652,1.00515,1.17556,1.522.105.14319.28081.28676.15944.5102a.50037.50037,0,0,0,.156.341c.43729.38889.41907.9636.60072,1.45518C100.38534,51.02188,100.24705,51.13358,100.10509,51.21275Z"/><path class="cls-148" d="M99.56612,49.0564a5.28542,5.28542,0,0,0-.94163-1.36251c-.14494-.21576-.29677-.4269-.44548-.64014a19.50347,19.50347,0,0,0-1.44784-3.11088.952.952,0,0,1-.113-.28312,7.77129,7.77129,0,0,0-.24572-.87524.58052.58052,0,0,1-.00645-.47779c.252-.11649.29407.11617.4018.2404.53991.71528.92071,1.53028,1.4204,2.271a2.0609,2.0609,0,0,1,.28539.5401,2.68963,2.68963,0,0,0,.29075.62424.7056.7056,0,0,1,.13052.233c.10729.806.74629,1.31179,1.10508,1.97487.08046.14871.25011.28128.10513.48059-.22049.34759.04261.56244.22171.79812.13356.17575.35169.32483.16327.58861a2.3225,2.3225,0,0,1-.627-.74489C99.78391,49.20517,99.744,49.0503,99.56612,49.0564Z"/><path class="cls-149" d="M101.26062,28.72314c.15986-.12858.01118-.26117-.00215-.38731a43.448,43.448,0,0,1-.4752-5.73687c.01-.37322-.061-.759-.0624-1.14135-.00052-.14341-.00688-.28673.15457-.35933.00179.20456.09.394.081.60472a21.265,21.265,0,0,0,.31808,3.76392,27.71887,27.71887,0,0,0,.75415,3.81531,25.51912,25.51912,0,0,0,1.08076,3.13783c-.20517.02849-.28611-.10579-.36529-.2619a9.393,9.393,0,0,1-.56178-1.32248c-.06345-.19362-.13411-.38925-.38216-.41821a.25658.25658,0,0,1-.21793-.134A3.12,3.12,0,0,1,101.26062,28.72314Z"/><path class="cls-150" d="M101.26062,28.72314q.12164.54068.2434,1.08133a1.06425,1.06425,0,0,0,.29622.613,17.661,17.661,0,0,0,.85642,2.33428,14.88147,14.88147,0,0,0,1.02441,1.97389,12.918,12.918,0,0,0,3.11417,3.60388c.22673.17545.55038.298.62784.637-.50916-.10373-.79692-.52666-1.16347-.82752-.70538-.579-1.3827-1.19209-2.07165-1.791a.35728.35728,0,0,1-.20209-.16663,23.6376,23.6376,0,0,1-1.8428-3.00233c-.41545-.80942-.70368-1.66765-1.09124-2.48657a9.877,9.877,0,0,1-.57418-2.25864c-.02052-.1002-.04231-.19986-.068-.29916a45.591,45.591,0,0,1-.52229-4.92912c-.03771-.75925.102-1.5.0374-2.25348A13.97517,13.97517,0,0,0,98.86848,16.133,7.65612,7.65612,0,0,0,97.664,14.3102a1.48206,1.48206,0,0,1-.30113-.44205c-.02642-.05718-.03081-.13418-.07381-.17333-.47456-.43208-.71443-1.05353-1.19808-1.47779-.10946-.096-.26583-.16867-.22286-.36107A7.32692,7.32692,0,0,1,98.0605,13.5547a8.86827,8.86827,0,0,1,2.085,4.478,11.14262,11.14262,0,0,1,.20032,3.68444,6.748,6.748,0,0,0,.08673,1.48676c.062.73339.11446,1.47.19032,2.20332a13.58749,13.58749,0,0,0,.4401,2.46364C101.14526,28.1501,101.19565,28.43876,101.26062,28.72314Z"/><path class="cls-151" d="M100.49026,28.18391c.10771.44123.24089.87806.31783,1.32459a12.983,12.983,0,0,0,.9628,2.60282,17.62735,17.62735,0,0,0,2.21771,3.9106c.07553.102.13333.21707.19936.32607a4.31788,4.31788,0,0,0,.83719,1.17079,16.68366,16.68366,0,0,0,3.65157,3.13243,6.78227,6.78227,0,0,1,1.13483.70308,4.13863,4.13863,0,0,1-1.28306-.65351,14.23841,14.23841,0,0,1-2.66756-2.03461,2.79517,2.79517,0,0,0-.49951-.27079,3.61411,3.61411,0,0,1-1.00977-1.0326c-.08336-.11793-.15441-.23708-.31776-.24455a1.96222,1.96222,0,0,1-.69341-.72895,21.65015,21.65015,0,0,1-1.78423-3.255,1.13623,1.13623,0,0,1-.0955-.36982c-.06667-.31476-.26118-.58765-.31978-.89921-.21437-1.13974-.59449-2.241-.77525-3.38757C100.34823,28.36669,100.28336,28.21076,100.49026,28.18391Z"/><path class="cls-152" d="M101.56876,32.80506a.81993.81993,0,0,0,.03922.22274,19.489,19.489,0,0,0,2.1083,3.70083c.10421.13114.31594.17708.31761.3896a7.6069,7.6069,0,0,0,.844,1.10886,17.30827,17.30827,0,0,0,1.96089,1.96693c.09861.09786.18464.20839.27649.31306a3.29766,3.29766,0,0,1-.94965-.692c-.50943-.43975-.96233-.9396-1.50316-1.35082a12.59356,12.59356,0,0,1-1.512-1.72851,9.34923,9.34923,0,0,1-.96548-1.46609,4.68342,4.68342,0,0,1-.86152-1.52969,19.512,19.512,0,0,1-1.2481-3.792c-.02741-.14933-.09182-.29863.00681-.44577.20467-.03.20571.14581.24482.26108.07761.22874.12344.46741.183.70183a.72925.72925,0,0,0,.09234.28925A12.84074,12.84074,0,0,1,101.56876,32.80506Z"/><path class="cls-153" d="M100.10652,29.49368a14.97194,14.97194,0,0,0,.84808,3.05317,23.0404,23.0404,0,0,0,1.23044,2.72283.2548.2548,0,0,1-.23539-.16061c-.09509-.189-.23416-.15286-.3807-.07036-.29742-.05915-.36626-.329-.46649-.54568-.16515-.357-.29836-.72909-.47866-1.08047a32.534,32.534,0,0,1-1.11739-3.55191,41.22811,41.22811,0,0,1-.71808-5.01551c-.04535-.54345-.04311-1.0956-.0377-1.64631a10.6171,10.6171,0,0,0-2.27969-7.20427,11.752,11.752,0,0,0-2.502-2.14428c-.12459-.08452-.28213-.13445-.3348-.3a.52662.52662,0,0,0-.32035-.607,12.774,12.774,0,0,0-1.80592-.90866,3.02878,3.02878,0,0,1-.724-.40957,12.5179,12.5179,0,0,1,2.48618.49225c.23494.07836.43439.201.67227.04718a.208.208,0,0,1,.1838.02318c2.10925,1.2313,3.95136,2.71364,4.80969,5.11986a8.8222,8.8222,0,0,1,.60349,2.7228,14.08481,14.08481,0,0,0,.118,1.91415,6.71133,6.71133,0,0,1-.06535,1.10949,30.54062,30.54062,0,0,0,.50652,5.84273C100.1364,29.0906,100.22423,29.29354,100.10652,29.49368Z"/><path class="cls-154" d="M100.72137,33.42118c.3386.50981.39472,1.16757.84758,1.61753a1.07836,1.07836,0,0,0,.23959.58961c.17916.28984.35406.58231.53076.87367-.13727.13092-.0735.25152.01922.37044a20.01592,20.01592,0,0,0,1.634,2.42364.50389.50389,0,0,1,.19541.44072l-.61583-.53894a2.054,2.054,0,0,1-.70358-.73765,20.12785,20.12785,0,0,1-2.76914-4.89433,18.05126,18.05126,0,0,1-.89768-2.65252.5774.5774,0,0,1-.02106-.41274c.21-.0957.27073.05775.32051.20349.074.21651.14395.43459.213.65281a1.659,1.659,0,0,0,.38207.69074,2.62906,2.62906,0,0,1,.38517.902A1.85154,1.85154,0,0,0,100.72137,33.42118Z"/><path class="cls-155" d="M100.18212,33.57544a22.53537,22.53537,0,0,0,2.2789,4.17267c.35207.49623.73969.96723,1.11111,1.44974.11575.55441.58173.86189.91744,1.24947a20.67708,20.67708,0,0,0,5.42126,4.33327,16.94068,16.94068,0,0,0,4.34035,1.921,1.03137,1.03137,0,0,1,.49064.19809,10.14386,10.14386,0,0,1-1.65693-.44128,16.416,16.416,0,0,1-3.18314-1.29667,13.39793,13.39793,0,0,1-3.71765-2.46464c-.24154-.22765-.49577-.44177-.74064-.666a23.40167,23.40167,0,0,1-3.24736-3.81852,1.01093,1.01093,0,0,0-.319-.32419,17.20707,17.20707,0,0,1-1.75331-3.34878,1.04946,1.04946,0,0,1-.10729-.51927A.77949.77949,0,0,1,100.18212,33.57544Z"/><path class="cls-156" d="M101.80005,39.968a1.17328,1.17328,0,0,0,.27255.54195c.48714.57207.8881,1.2119,1.41106,1.75744.40606.4236.77891.879,1.16652,1.32032-.415-.1679-.63068-.5624-.95008-.83916a1.67411,1.67411,0,0,0-.66748-.47007,1.67155,1.67155,0,0,0-.4624-.46212,3.61646,3.61646,0,0,1-.77946-.81978,26.08007,26.08007,0,0,1-1.78526-2.82529,3.16931,3.16931,0,0,1-.48909-1.11533.61119.61119,0,0,1,.20112-.33883c.12937-.006.17013.09474.21372.18484a22.90586,22.90586,0,0,0,1.74708,2.76671C101.73971,39.75978,101.84793,39.83235,101.80005,39.968Z"/><path class="cls-157" d="M116.74474,51.21275a9.63628,9.63628,0,0,1-1.53348-.04933,10.50278,10.50278,0,0,1,1.17739.43076c.06743.0304.16981.0362.14413.13715-.02432.09554-.10946.06884-.19.056-.27586-.04384-.55359-.07593-.83061-.11251-.14822.13651-.31108.07454-.47163.03374a21.87417,21.87417,0,0,1-5.10378-2.09381,20.27968,20.27968,0,0,1-3.75281-2.453,12.22682,12.22682,0,0,1-1.66-1.52868,7.24028,7.24028,0,0,0-.82364-.90293c-.68966-.83256-1.37484-1.669-2.03206-2.52764-.08128-.1062-.18853-.2199-.11878-.38038.16162-.07268.27513.06429.41355.09393a6.80131,6.80131,0,0,1,1.20546,1.28187,21.82971,21.82971,0,0,0,2.456,2.37912c.98848.81129,2.0494,1.52944,3.10853,2.24679a21.04338,21.04338,0,0,0,6.164,2.75979,1.04783,1.04783,0,0,0,.15288.01331c.10908.192.31071.18895.49.22969A3.625,3.625,0,0,1,116.74474,51.21275Z"/><path class="cls-158" d="M108.73305,47.8239a9.77984,9.77984,0,0,1-1.76558-1.12318,20.17726,20.17726,0,0,1-3.54554-3.07676c-.50837-.533-.97981-1.10118-1.468-1.65342a21.70644,21.70644,0,0,1-1.60361-2.426c-.05946-.1107-.14964-.21218-.1027-.35367.24917-.10151.30685.109.38813.25245a9.01009,9.01009,0,0,0,1.24095,1.52585l.69351.84721c-.01454.3458.315.4952.448.76425.18871.38164.60516.60642.872.93a10.93529,10.93529,0,0,0,1.32005,1.43018c.54175.45877,1.08962.91418,1.63653,1.36681a5.73277,5.73277,0,0,1,1.14776.92735C108.18288,47.49425,108.55624,47.53915,108.73305,47.8239Z"/><path class="cls-159" d="M104.57314,45.59034c.57724.59647,1.22586,1.113,1.85486,1.65122a24.51107,24.51107,0,0,0,4.83039,2.95352A18.61123,18.61123,0,0,0,115.169,51.649a1.89494,1.89494,0,0,0,.34313.02589,6.35246,6.35246,0,0,0,1.49041.45642c.11737.028.22662.03625.28141.15973a8.78622,8.78622,0,0,1-1.6261-.05771c.219.25549.53522.22074.81059.27931a.50818.50818,0,0,1,.43033.31735,13.76889,13.76889,0,0,1-4.052-.98877c-.55248-.22808-1.09925-.47-1.64861-.70565a14.87842,14.87842,0,0,1-2.695-1.53995,34.34456,34.34456,0,0,1-5.002-4.2883c-.42339-.44582-.80175-.92978-1.20866-1.38954a9.34161,9.34161,0,0,0-.75608-1.06162c-.07786-.12537-.21029-.23693-.14275-.41437.25622-.06246.36061.154.48178.2926C102.73828,43.72114,103.68575,44.62734,104.57314,45.59034Z"/><path class="cls-160" d="M100.10509,34.03756a3.815,3.815,0,0,0,.51142,1.384,11.06448,11.06448,0,0,0,1.17137,2.141.4543.4543,0,0,1,.08921.32583c-.25225-.022-.28238-.26131-.39379-.41483-.14545-.20042-.22328-.45156-.45379-.58641-.20083-.04455-.286-.20958-.36468-.36923a28.97375,28.97375,0,0,1-1.42472-3.02837,6.043,6.043,0,0,0-.37657-.625A19.90608,19.90608,0,0,1,98.009,30.049a12.99634,12.99634,0,0,1-.39572-1.90942,18.93417,18.93417,0,0,1-.24229-2.519.92191.92191,0,0,1,.07543-.48725c.31537-.08193.25678.17834.29892.33532.12755.47524.13364.97368.27193,1.44692a16.69761,16.69761,0,0,1,.4072,2.18756,21.95423,21.95423,0,0,0,1.49452,4.47379C99.98719,33.7287,100.02264,33.89244,100.10509,34.03756Z"/><path class="cls-161" d="M98.94988,32.88208a3.07944,3.07944,0,0,1,.65927,1.26919c.36456.81367.78908,1.59632,1.17886,2.39662a2.45075,2.45075,0,0,0,.2415.33929,13.23978,13.23978,0,0,0,1.24742,2.13365c.41276.54791.8159,1.10314,1.21838,1.65868a.81245.81245,0,0,1,.07656.21266,12.161,12.161,0,0,1-2.00871-2.30606c-.19966-.26009-.29618-.60469-.61009-.77463-.23767-.07149-.27059-.30915-.38933-.47764a12.38022,12.38022,0,0,1-1.236-2.67087c-.15643-.42749-.286-.87139-.41908-1.31044A.43387.43387,0,0,1,98.94988,32.88208Z"/><path class="cls-162" d="M100.64448,37.3492l.30859.46228a7.74791,7.74791,0,0,0,1.06342,1.76085,18.89517,18.89517,0,0,0,1.30266,1.74622,12.19219,12.19219,0,0,0,1.34522,1.40653.6848.6848,0,0,1,.29395.47739c-.54209-.517-1.09831-1.01829-1.63193-1.54551-.54418-.53765-.98315-1.15848-1.52635-1.68892a22.84119,22.84119,0,0,1-2.08013-3.2349,1.71972,1.71972,0,0,1-.48942-1.14132c.21373-.081.32643.08277.38.218A9.64945,9.64945,0,0,0,100.64448,37.3492Z"/><path class="cls-163" d="M78.84311,43.97313c-.23786-.01886-.29524-.21859-.38593-.38494-.37479-.429-.751-.8568-1.13462-1.27805a.63415.63415,0,0,1-.17468-.28963c-.09282-.47795.333-.7158.4972-1.07518a1.63653,1.63653,0,0,0,.93469-.7178.48984.48984,0,0,1,.4959-.294.27227.27227,0,0,1,.12645.12261,1.28639,1.28639,0,0,0,.55643,1.03713c.42624.3293.40406.82752.44636,1.297a3.00209,3.00209,0,0,1-.82528.994C79.14729,43.53286,79.08678,43.836,78.84311,43.97313Z"/><path class="cls-164" d="M78.84311,43.97313a1.61123,1.61123,0,0,1,.67121-.803c.29432-.17378.31364-.58822.6384-.73743a1.20631,1.20631,0,0,1,.62422.661c.01208.3155.26214.60257.11367.93747a1.0692,1.0692,0,0,0-.53278.735,1.373,1.373,0,0,1-.66714.978l-.46184-.23076a1.29486,1.29486,0,0,1-.304-.94267A2.26283,2.26283,0,0,0,78.84311,43.97313Z"/><path class="cls-165" d="M77.22556,42.04746c.31427.35271.625.70865.94452,1.05657a.83637.83637,0,0,1,.28711.48415,1.78306,1.78306,0,0,0-.67081.40255,2.65305,2.65305,0,0,1-1.33118.3675,2.17132,2.17132,0,0,1-.61628-.77029,1.361,1.361,0,0,0,.00019-.84749,2.41172,2.41172,0,0,0,1.185-.67624A.137.137,0,0,1,77.22556,42.04746Z"/><path class="cls-166" d="M79.69069,45.74427a2.66277,2.66277,0,0,0,.64856-1.28033.44391.44391,0,0,1,.507-.414,1.49509,1.49509,0,0,1,.83516.61191.404.404,0,0,1-.01066.22336.56356.56356,0,0,0-.06044.638.86554.86554,0,0,1-.27963.949c-.14426.09087-.15331.16051-.09459.306.08584.21274.00473.322-.23577.27543-.20491-.15041-.36687-.00027-.53924.077-.19234-.30046-.54252-.50817-.49343-.95009C79.98708,46.00551,79.77458,45.89777,79.69069,45.74427Z"/><path class="cls-167" d="M118.20841,53.83123l-2.07958.07719a21.43971,21.43971,0,0,1-9.80543-5.08971,3.50989,3.50989,0,0,1-.75037-.652c-.06886-.10466-.18308-.18481-.17038-.331.13484-.12091.24309-.019.33575.05661a23.15163,23.15163,0,0,0,2.99227,2.11311.29012.29012,0,0,1,.15646.20611,23.26752,23.26752,0,0,0,5.74114,2.6786c.58768.17538,1.19024.27325,1.78247.41695.51773.12563,1.036.24734,1.55728.35681A.29536.29536,0,0,1,118.20841,53.83123Z"/><path class="cls-168" d="M108.88713,50.2115A25.38448,25.38448,0,0,1,106.27,48.44541a2.78975,2.78975,0,0,0-.84949-.62151.22451.22451,0,0,1-.1964-.084,1.52978,1.52978,0,0,0-.49571-.57882,15.62826,15.62826,0,0,1-2.0097-2.16295c-.50108-.54515-.88632-1.19221-1.39978-1.73354-.11189-.118-.23049-.25109-.1538-.44275.17505-.06949.25437.07706.352.165a7.06194,7.06194,0,0,1,.822.909,10.06659,10.06659,0,0,1,1.02018,1.13332,38.47546,38.47546,0,0,0,3.56418,3.25439,23.058,23.058,0,0,0,4.0794,2.678.35775.35775,0,0,1,.19532.17393c-.20048.12162-.3738.00157-.53672-.08041-.46585-.23443-.92812-.47732-1.37981-.73769A.68561.68561,0,0,0,108.88713,50.2115Z"/><path class="cls-169" d="M105.26665,47.74617a.16041.16041,0,0,1,.15388.07773,12.26179,12.26179,0,0,0,2.07966,1.83588c.452.36928.94206.69524,1.40875,1.05038a15.58254,15.58254,0,0,0,2.92818,1.62164,24.746,24.746,0,0,0,3.77081,1.37526c.169.04742.44022-.09073.5209.20136.10066.17893.05889.28649-.15444.30807a9.81511,9.81511,0,0,1-2.53338-.69278,28.29827,28.29827,0,0,1-5.581-2.91463,1.29086,1.29086,0,0,0-.20547-.08951,3.9207,3.9207,0,0,1-1.03254-.71588,23.28415,23.28415,0,0,1-2.34989-2.14094,13.99846,13.99846,0,0,1-1.99022-2.22493,1.87552,1.87552,0,0,0-.463-.69309c-.22712-.293-.432-.60144-.63254-.91271-.07463-.11587-.168-.2322-.10206-.3875.21039-.07462.29731.09834.39641.21461.75218.88245,1.537,1.73605,2.3081,2.60152.35493.39835.78286.72875,1.168,1.10041A1.629,1.629,0,0,1,105.26665,47.74617Z"/><path class="cls-170" d="M116.97585,60.37765c.99806.273,2.03558.32283,3.0443.53628a.36372.36372,0,0,0,.2278-.0076,1.91248,1.91248,0,0,1,1.273-.06544,1.30328,1.30328,0,0,1-.15407.61541,6.60568,6.60568,0,0,0-1.38317.14062,4.88645,4.88645,0,0,1-1.83716-.09435,12.83936,12.83936,0,0,1-1.64775-.25937c-.08393-.02559-.19486.03728-.2933.05925a32.85015,32.85015,0,0,1-5.2825-2.41462c-.67548-.43881-1.34992-.8781-1.99039-1.36735a28.1494,28.1494,0,0,1-2.55173-2.25018.918.918,0,0,1-.32462-.54359c-.02105-.19786-.182-.32967-.30441-.47648-.10486-.12576-.238-.25024-.1006-.43448.35257.06572.55285.35654.79081.57141a27.67191,27.67191,0,0,0,5.86707,4.12129,25.09582,25.09582,0,0,0,3.64033,1.44947A8.54368,8.54368,0,0,1,116.97585,60.37765Z"/><path class="cls-171" d="M108.96416,57.4513a25.49534,25.49534,0,0,0,4.1366,2.49352,24.55979,24.55979,0,0,0,2.4332.93933,1.38248,1.38248,0,0,1,.67153.4183l-.2311.616a4.00675,4.00675,0,0,1-1.62364-.51864,22.596,22.596,0,0,1-6.25225-3.83142c-.91665-.75691-1.69676-1.65182-2.60566-2.4116-.04209-.03519-.049-.11242-.07231-.17006a1.35261,1.35261,0,0,1,1.07324.38967c.67616.61607,1.33385,1.25181,2.05081,1.82282A2.85631,2.85631,0,0,0,108.96416,57.4513Z"/><path class="cls-172" d="M100.72137,33.42118c-.06633-.05807-.17514-.1056-.19255-.17578-.22067-.88993-.95846-1.54672-1.10734-2.46552-.02455-.15155-.05671-.277-.24044-.2853l-.045-.04312a26.83823,26.83823,0,0,1-.68032-3.6567c-.06464-.63725-.12707-1.27443-.15718-1.91447-.03305-.70224.00474-1.40441-.06228-2.10831a10.98467,10.98467,0,0,0-2.20422-5.89068,9.81962,9.81962,0,0,0-2.63124-2.14272,3.55114,3.55114,0,0,1-.6578-.463,12.09515,12.09515,0,0,1-1.04552-.90667c-.10179-.10058-.26388-.16639-.20781-.35794.00174-.006.01863-.01069.02825-.01032a.14836.14836,0,0,1,.0362.01048,4.24349,4.24349,0,0,1,1.64556.40372c.14531.04341.28963.09016.4344.13538A10.17462,10.17462,0,0,1,97.19088,16.801a10.76909,10.76909,0,0,1,1.62046,5.04694c.08259.94335-.02994,1.88272.063,2.82.06779.68374.16324,1.3648.22687,2.04887a24.38862,24.38862,0,0,0,.705,3.90467C100.05388,31.56966,100.41228,32.489,100.72137,33.42118Z"/><path class="cls-173" d="M91.55415,13.01117c-.08427.0975.01874.15054.06631.17493.40539.20791.56657.713,1.03588.84314a.20632.20632,0,0,1,.13057.21409.39422.39422,0,0,1-.46949.01151,10.92987,10.92987,0,0,0-2.21565-.61463.293.293,0,0,1-.16536-.09007,10.13376,10.13376,0,0,0-2.326-.61869,1.18131,1.18131,0,0,1-.21563-.07414.43534.43534,0,0,1,.23051-.46212,8.3843,8.3843,0,0,1,2.70743.34609.96785.96785,0,0,0,.4146.03265A.93451.93451,0,0,1,91.55415,13.01117Z"/><path class="cls-174" d="M114.89589,56.6039a16.31456,16.31456,0,0,0,2.85031.69354,1.44011,1.44011,0,0,1,.077.53877,4.45242,4.45242,0,0,1-1.51142-.197c-1.17892-.3974-2.39686-.67442-3.54315-1.17418a21.35082,21.35082,0,0,1-3.06146-1.61415c-1.1427-.73754-2.26377-1.50786-3.34754-2.33079a7.14411,7.14411,0,0,0-.86524-.70149c-.31277-.26535-.58858-.56912-.87921-.85755a13.99873,13.99873,0,0,1-1.65877-1.73361,1.59434,1.59434,0,0,1-.15223-.22071c-.27233-.38486-.53633-.77863-.8441-1.13364a20.1804,20.1804,0,0,1-1.373-1.93749c-.08371-.12315-.19264-.24836-.11525-.41981.22161-.07617.31237.095.4348.221.21946.22592.30354.56913.619.71031.55.68982,1.08094,1.39612,1.66023,2.06183a29.49384,29.49384,0,0,0,2.825,2.87657,28.98836,28.98836,0,0,0,3.44731,2.57455,23.204,23.204,0,0,0,4.46836,2.216A2.34933,2.34933,0,0,1,114.89589,56.6039Z"/><path class="cls-175" d="M105.49757,51.75188c.46033.122.69623.54259,1.057.79985a46.70514,46.70514,0,0,0,4.5637,3.01389,25.71434,25.71434,0,0,0,4.738,1.835c.65157.20555,1.33528.1901,1.967.43557l1.38664.15423c-.07258.16216-.21716.16505-.35991.1526a4.15369,4.15369,0,0,0-1.21213-.00574,1.25181,1.25181,0,0,1-.37348-.05965c-.17787-.02375-.34258-.01632-.36555.22067a.24906.24906,0,0,1-.25412.02441,23.26357,23.26357,0,0,1-9.06767-4.4433c-.60591-.49353-1.1309-1.07575-1.77145-1.52977C105.63047,52.22555,105.40571,52.04962,105.49757,51.75188Z"/><path class="cls-176" d="M119.51877,59.68505l-.07779.07664a.69747.69747,0,0,0-.44109-.09522,30.553,30.553,0,0,1-3.15647-.84044c-.14753-.02556-.38266-.05158-.316-.325a.92555.92555,0,0,1,.74109.01719,24.40638,24.40638,0,0,0,3.01845.31944l1.00146-.00038c.33785.04908.679.08207,1.01264.1515a8.45886,8.45886,0,0,0,1.12731.02152,6.17767,6.17767,0,0,0,.63333.05841.40177.40177,0,0,1-.40272.23335,9.3667,9.3667,0,0,0-2.44765.293.61962.61962,0,0,1-.29764-.04682C119.75923,59.51426,119.60331,59.50459,119.51877,59.68505Z"/><path class="cls-177" d="M119.28691,58.83765a1.13843,1.13843,0,0,1-.711.0576,13.45358,13.45358,0,0,0-1.46383-.08177,4.355,4.355,0,0,1-1.072-.228,2.0237,2.0237,0,0,0-.52793-.05531c-.23836.1199-.44948-.01684-.65989-.08442a22.9398,22.9398,0,0,1-7.50126-4.11556c-.80482-.65407-1.526-1.40411-2.37143-2.00836a.97883.97883,0,0,1-.23007-.25645c-.06872-.1087-.15608-.2034-.23421-.30513a17.13829,17.13829,0,0,0-1.15412-1.32978,22.42306,22.42306,0,0,1-1.96393-2.6372.31416.31416,0,0,1-.07656-.353c.24373-.05148.31658.16244.44609.28784.4019.3892.71251.85953,1.11158,1.25129a7.07817,7.07817,0,0,0,1.05072,1.245,16.92634,16.92634,0,0,1,1.56849,1.52755.96228.96228,0,0,0,.35482.53052c1.05238.84906,2.02392,1.79864,3.15316,2.55212a21.9599,21.9599,0,0,0,7.20383,3.2359c.23473.05492.45985.151.68943.2279a8.70273,8.70273,0,0,0,1.6971.37955A2.6949,2.6949,0,0,1,119.28691,58.83765Z"/><path class="cls-178" d="M114.89589,56.6039A26.65089,26.65089,0,0,1,101.4921,46.51457c-.34954-.35084-.57133-.79849-.88862-1.17422a.247.247,0,0,1-.05645-.28076.15762.15762,0,0,1,.22858.062,6.14327,6.14327,0,0,0,.84142.814,44.95065,44.95065,0,0,0,3.74737,4.00281,29.7785,29.7785,0,0,0,4.30436,3.26823c.40111.25.81617.47864,1.20948.7428a5.10977,5.10977,0,0,0,1.283.7577c.76583.28439,1.4138.81409,2.21511,1.04012.43.1213.86332.23532,1.2915.365.13931.04219.31995.03812.30654.26073a2.18,2.18,0,0,1-.73963-.10392c-.117-.02662-.23816-.13848-.35153-.04849C114.73611,56.33743,114.90746,56.474,114.89589,56.6039Z"/><path class="cls-179" d="M115.97439,56.373c-.21065-.24517-.53154-.20472-.799-.29126a7.69652,7.69652,0,0,1-2.25-.90729,4.86,4.86,0,0,0-1.07639-.49272,3.58089,3.58089,0,0,1-1.036-.69632c.14453-.10092.27135-.01313.39324.04638a20.12171,20.12171,0,0,0,5.59609,1.79135.53625.53625,0,0,1,.25054.08775,11.758,11.758,0,0,0,2.33187.17159,5.66067,5.66067,0,0,1,1.475.09827c.199.03231.40394-.1276.58418.03859l.15407.38472c-1.02-.07355-2.035.15589-3.05318.06431C117.68607,56.59116,116.83105,56.47305,115.97439,56.373Z"/><path class="cls-180" d="M117.05288,55.91092a11.43331,11.43331,0,0,1-3.15415-.692,23.39552,23.39552,0,0,1-3.08572-1.23347,31.6403,31.6403,0,0,1-2.8109-1.7696,29.44615,29.44615,0,0,1-4.47017-3.95035,21.72806,21.72806,0,0,1-1.96318-2.28986,8.01355,8.01355,0,0,1-.97895-1.41438c-.07069-.13217-.19-.24929-.12293-.42126.14872-.084.20271.04979.27608.12549a8.75172,8.75172,0,0,1,.95968,1.1439,2.16687,2.16687,0,0,0,.59387.59095c.71311.80519,1.372,1.65947,2.16225,2.39537a.55415.55415,0,0,1,.11438.19831,16.892,16.892,0,0,0,2.30881,2.17622,24.65,24.65,0,0,0,4.8101,3.03613,19.45863,19.45863,0,0,0,4.12827,1.4884.62044.62044,0,0,0,.52139.322C116.593,55.643,116.88769,55.64334,117.05288,55.91092Z"/><path class="cls-181" d="M100.10652,29.49368a30.14923,30.14923,0,0,1-.48572-3.4016A28.004,28.004,0,0,1,99.50005,23.07c.047-.69045-.01217-1.37369-.01015-2.06013A9.37748,9.37748,0,0,0,98.02314,15.733a7.84317,7.84317,0,0,0-1.6996-1.90317c-.76458-.60432-1.60782-1.08239-2.38129-1.66536a2.78723,2.78723,0,0,1-.38518-.61643.99413.99413,0,0,1,.72446.187c.58142.32488,1.19475.58571,1.76736.931a5.48079,5.48079,0,0,1,1.35995,1.11485c.227.41691.60144.71786.86515,1.10763a9.68184,9.68184,0,0,1,1.60365,4.68545c.05263.60753.13942,1.2121.2109,1.818.03539.3-.16719.554-.14311.86122a43.16917,43.16917,0,0,0,.376,4.49083c.08743.47426.11424.95968.16878,1.44-.12906.33331.06346.63814.11336.94786.08841.54876.33347,1.07363.40893,1.6228a13.19244,13.19244,0,0,0,.55621,2.05049,2.46338,2.46338,0,0,1-.52194-1.07723,1.72555,1.72555,0,0,0-.3525-.6156c-.31291-.31632-.286-.773-.42025-1.16388A1.2,1.2,0,0,0,100.10652,29.49368Z"/><path class="cls-182" d="M97.40884,13.7808c-.05838-.02138-.13324-.02652-.17275-.06653a10.97811,10.97811,0,0,0-3.679-2.16627,7.51828,7.51828,0,0,1-1.7354-.62687,1.9514,1.9514,0,0,1-.34455-.22037.66976.66976,0,0,0,.50184-.12867c.23352-.19571.48779-.06125.73018-.01018.1842.0388.36339.13374.53979-.01532A9.44763,9.44763,0,0,1,95.86814,11.856a1.11258,1.11258,0,0,0,.31989.31912c.21614.1684.46452.317.46256.65314-.00081.13808.13922.1957.23993.275A1.10108,1.10108,0,0,1,97.40884,13.7808Z"/><path class="cls-183" d="M77.22556,42.04746c-.2133.06608-.32267.2664-.48843.39413a1.14265,1.14265,0,0,1-.898.29886,3.72707,3.72707,0,0,1-.4112-1.33209c-.03243-.263-.28378-.49892-.43642-.74705-.26268-.26252-.12022-.53924-.02709-.81318a1.29848,1.29848,0,0,1,.183-.37424c.28159-.19551.67737-.16911.90782-.46592a.35259.35259,0,0,1,.3681.12171c.3321.6742.90632,1.18279,1.26449,1.8397a1.03083,1.03083,0,0,1-.30034.51042A.6031.6031,0,0,0,77.22556,42.04746Z"/><path class="cls-184" d="M75.22264,39.50592c-.15.37053-.40109.72087-.23115,1.15539a8.09283,8.09283,0,0,1-1.3866-.30818c-.2221-.43445-.65274-.70888-.87655-1.143-.05766-.11183-.13424-.21391-.20213-.32048a.49012.49012,0,0,1,.46252-.23127.2682.2682,0,0,1,.21308-.06824c.39214.11942.81191.07131,1.201.203A2.86255,2.86255,0,0,1,75.22264,39.50592Z"/><path class="cls-185" d="M104.57314,48.594a12.51863,12.51863,0,0,1-1.61251-1.68362q-.34878-.42936-.69855-.85793c-.567-.70518-1.05756-1.46423-1.56046-2.21451-.06278-.09366-.13585-.19027-.07888-.31634.12144-.07607.19768.01249.25829.08787a22.80785,22.80785,0,0,1,1.45808,1.82664c.70726.82049,1.46057,1.59574,2.22276,2.36626.96962.98023,2.03735,1.83954,3.09269,2.71719a9.34413,9.34413,0,0,0,2.0878,1.59516,3.89926,3.89926,0,0,1,1.168.74763,12.77687,12.77687,0,0,1-1.90066-1.027,24.22035,24.22035,0,0,1-4.25687-3.17446C104.70559,48.61929,104.67229,48.50853,104.57314,48.594Z"/><path class="cls-186" d="M87.47109,14.24382c-.47429.11054-.81575-.27071-1.243-.33984-.07817-.01265-.06174-.12556-.06638-.1994a1.66313,1.66313,0,0,0,.99595.08579,7.84682,7.84682,0,0,1,1.99611.17924q.54546.05951,1.09082.11986c.10216-.08891.19726-.0275.28092.02543.575.3638,1.19209.65462,1.7654,1.02065.12629.08063.27624.15046.29275.33257a.63529.63529,0,0,1-.4347.45808,4.0129,4.0129,0,0,1-1.20416-.3473,4.78288,4.78288,0,0,0-.72471-.23362c-.78838-.30375-1.61369-.502-2.39194-.83476C87.68769,14.45047,87.534,14.40775,87.47109,14.24382Z"/><path class="cls-187" d="M92.55561,15.4756a7.04062,7.04062,0,0,0-1.51576-.94271,3.37191,3.37191,0,0,0-.7953-.44342c-.10549-.17819-.56589-.15369-.30814-.53933a7.27367,7.27367,0,0,1,2.16147.50558,1.5615,1.5615,0,0,0,.689.18761l.61609.38539a7.238,7.238,0,0,0,.90074,1.13511c.26921.2326.2313.60129.28108.92391a.11421.11421,0,0,1-.17058.00653C93.85329,16.19821,93.13638,15.94062,92.55561,15.4756Z"/><path class="cls-188" d="M104.80331,51.9834A8.55327,8.55327,0,0,0,106.06,53.09977a26.2133,26.2133,0,0,0,3.69346,2.853,20.90189,20.90189,0,0,0,5.75871,2.57736c.18433.26572.49622.225.754.29842a15.83339,15.83339,0,0,1,1.96256.64751,3.05066,3.05066,0,0,0,.89373.12812c.13211.013.2558.01611.31849.15751-.63556-.04537-1.272-.0813-1.90625-.14072a.42084.42084,0,0,0-.46667.30882,2.45053,2.45053,0,0,0-.09221.44787,4.73093,4.73093,0,0,1-1.36694-.43482,19.84418,19.84418,0,0,1-2.88621-1.12722,24.72176,24.72176,0,0,1-4.10712-2.514c-1.01771-.789-1.99017-1.62981-2.96394-2.47019-.07365-.03722-.12074-.08551-.0726-.1736.17167-.09947.28524.02419.414.10365.28112.17349.47.46736.78616.5968-.6003-.64262-1.19515-1.28846-1.8234-1.90241a.91.91,0,0,1-.24176-.29458C104.68309,52.083,104.643,51.97642,104.80331,51.9834Z"/><path class="cls-189" d="M84.38985,15.70694a10.7322,10.7322,0,0,0-4.4584.86678c-.56946.24456-1.189.37135-1.78247.56212a.46825.46825,0,0,1-.327-.04945,2.92226,2.92226,0,0,0-1.21272-.30135c.55715-.23435,1.17493-.18954,1.74228-.38043.77495-.26072,1.55878-.49629,2.32775-.77331a9.69286,9.69286,0,0,1,4.77167-.62419c.46563.0691.93576.10784,1.40383.16051.088-.05958.14424-.03622.17074.06522-.2603.23164-.45289.52445-.6964.77237A5.6494,5.6494,0,0,1,84.38985,15.70694Z"/><path class="cls-190" d="M87.00906,15.2445a.15972.15972,0,0,0-.15426-.07687.87346.87346,0,0,0-.15066-.1084c-.56512-.24839-1.13188-.493-1.69819-.73872.16476-.15869.33053-.04561.49533-.00092a5.22784,5.22784,0,0,0,1.96981-.07578c.88913.43161,1.85361.65454,2.77346,1.001a.30687.30687,0,0,1-.22166.362,19.15317,19.15317,0,0,1-2.55122-.21023A.70717.70717,0,0,1,87.00906,15.2445Z"/><path class="cls-191" d="M72.21807,20.25122c.08116-.1797.2654-.1873.41576-.21789a.45838.45838,0,0,0,.35478-.2442.40992.40992,0,0,0,.36239.06915c.4387-.2175.89037-.02515,1.33239-.06955a.42881.42881,0,0,1,.35951-.1,6.69346,6.69346,0,0,0,3.57078-.85622c.59915-.26807,1.11017-.68259,1.71142-.94495a10.26509,10.26509,0,0,1,2.01683-.73263,4.5834,4.5834,0,0,1,1.96213.07455c.141.05147.3047.05019.40327.18988-.06427.22862-.27113.21041-.43468.22477a10.22176,10.22176,0,0,0-4.29543,1.44333,16.25284,16.25284,0,0,1-2.97535,1.57887,3.65374,3.65374,0,0,1-.81025.23368,6.48027,6.48027,0,0,1-2.237.15483,3.04119,3.04119,0,0,0-.76364.05427.462.462,0,0,1-.43312-.08787C72.60379,20.74644,72.32108,20.56179,72.21807,20.25122Z"/><path class="cls-192" d="M72.75788,21.02123c1.1476-.1941,2.32849.1111,3.46622-.231.00787.30861-.263.33656-.45247.43384-.22317.11457-.481.16973-.64581.42614a.70923.70923,0,0,0,.43454.02093c.1978-.01117.29347.06069.24328.26954a4.34229,4.34229,0,0,1-1.50543.852c-.51093.46208-1.09239.25008-1.632.1198a4.22256,4.22256,0,0,1-1.37219-.50515c.203-.45161.45828-.831,1.0414-.773a.14936.14936,0,0,0,.1864-.14247A1.115,1.115,0,0,1,72.75788,21.02123Z"/><path class="cls-193" d="M71.756,27.72189a.15918.15918,0,0,0-.15407-.0772c.0501-.29589.41064-.43648.38537-.77007.04938-.07462.10033-.18857.18688-.17749.48028.06148.8249-.309,1.2611-.37928a1.05451,1.05451,0,0,0,.69115-.18085.70747.70747,0,0,1,.51293-.12307,1.787,1.787,0,0,0,1.574-.60915c.56751-.57426,1.28483-.959,1.90346-1.47294.75478-.62708,1.54884-1.20778,2.32546-1.809a7.83582,7.83582,0,0,1,1.52376-.87871,2.81978,2.81978,0,0,1,1.09324-.42046,1.65131,1.65131,0,0,1,1.10464.19616c.23355.09778.3834.23932.27035.51755a.25416.25416,0,0,1-.31254.07655,2.7585,2.7585,0,0,0-2.45919.46508c-1.00711.5994-1.85223,1.405-2.79832,2.07716-.67606.48031-1.257,1.0704-1.90178,1.58373a16.12428,16.12428,0,0,0-1.77306,1.50748,1.56489,1.56489,0,0,1-1.12786.58961.35808.35808,0,0,0-.38831.07546.92774.92774,0,0,1-.98936.19593A1.67471,1.67471,0,0,1,71.756,27.72189Z"/><path class="cls-194" d="M73.45078,26.41256a.48076.48076,0,0,0-.29109.07028c-.26365.16481-.50625.37247-.865.26045-.08089-.02526-.20382.084-.30739.13133-.1033-.2576-.39761-.1837-.58293-.34452-.48073-.41715-.53084-.46209-.34169-1.04167.51025-.06149.99786-.24121,1.51684-.27205.18631-.01107.37522-.02545.56312-.03612.2691.26232.57434.06174.86064.05589.16523-.00338.3255-.06367.45869.08279A1.75161,1.75161,0,0,1,73.45078,26.41256Z"/><path class="cls-195" d="M74.29821,22.79266c.45388-.3412.98587-.54756,1.46367-.84749a.708.708,0,0,1,.42371-.1611,2.84811,2.84811,0,0,0,.72133-.24289c1.47531-.58615,2.64848-1.687,4.06537-2.36827a4.47383,4.47383,0,0,1,4.05777-.25842.30319.30319,0,0,1,.147.1174,1.28441,1.28441,0,0,1-1.3687.44948,2.96782,2.96782,0,0,0-2.29731.32151A12.2813,12.2813,0,0,0,78.60072,21.653a2.77913,2.77913,0,0,1-.79053.46487,11.37483,11.37483,0,0,1-2.46935.93762,1.78023,1.78023,0,0,1-1.11966-.03184Z"/><path class="cls-196" d="M74.22118,23.02368a6.77263,6.77263,0,0,0,2.76778-.62659,22.82958,22.82958,0,0,0,3.19947-1.9989,7.883,7.883,0,0,1,2.70135-1.125,1.3,1.3,0,0,1,.88379.13054.30669.30669,0,0,1-.18041.13861,7.46432,7.46432,0,0,0-3.64009,1.5272c-.98161.62707-1.95615,1.272-2.91856,1.92042-.9482.63882-2.02283.98534-2.96893,1.59407-.21651.1393-.38447.39124-.69161.36517-.086-.33152-.37776-.43828-.64515-.52131a1.55271,1.55271,0,0,1-.5876-.32585,12.23849,12.23849,0,0,1,1.42032-.56646C73.85205,23.4755,73.97507,23.16229,74.22118,23.02368Z"/><path class="cls-197" d="M73.374,24.94924a22.80236,22.80236,0,0,1,2.33315-1.28349,40.63625,40.63625,0,0,0,3.52608-2.2059,10.28515,10.28515,0,0,1,3.62591-1.92293,4.626,4.626,0,0,1,.76039-.05614.95883.95883,0,0,1,.68588.1784,7.12591,7.12591,0,0,0,.9259.3609c.13942.07029.33807.0875.32454.31726a.92433.92433,0,0,1-.44871.15608c-.46266-.00094-.91252-.1247-1.37075-.15452a4.02208,4.02208,0,0,0-2.13684.65814,28.35288,28.35288,0,0,0-3.47823,2.39641,22.41405,22.41405,0,0,1-3.37723,1.89982.3077.3077,0,0,1-.29178.04112,2.10652,2.10652,0,0,0-.98752.08631c-.27588.07075-.32128-.01681-.32208-.24044Z"/><path class="cls-198" d="M82.3099,17.24728a9.70826,9.70826,0,0,0-2.5767,1.07549c-.635.39389-1.31968.66027-1.98169.98558a4.68719,4.68719,0,0,1-2.37548.48247c-.23023-.01257-.46173-.002-.69264-.00209a1.16025,1.16025,0,0,0-.01711-.37243c-.13724-.34787-.04242-.55306.32525-.62879.5622.09533,1.0319-.25093,1.55933-.32626a15.62168,15.62168,0,0,0,3.59925-1.25675,3.86144,3.86144,0,0,0,.465-.26534,7.68886,7.68886,0,0,1,3.39067-.49746c.25184.01374.51881-.00835.70584.2191-.05.18663-.21256.195-.35939.22076C83.67107,17.0013,82.99879,17.17078,82.3099,17.24728Z"/><path class="cls-199" d="M84.698,16.7081a1.17732,1.17732,0,0,0-.57619-.154,9.38544,9.38544,0,0,0-3.17023.33321,2.202,2.202,0,0,1-.33646.0518,2.6117,2.6117,0,0,1,.8628-.38322c.8385-.20681,1.64717-.52631,2.50688-.655a.57317.57317,0,0,0,.405-.194c.67437.01774,1.32553.23659,2.00259.231a2.02394,2.02394,0,0,1,.88964.258c.15768.152.3548.25289.51861.39528.14725.128.29907.26972.098.47648a1.16577,1.16577,0,0,1-.58013.03876c-.76946-.1652-1.55489-.21715-2.33225-.32646C84.88742,16.76611,84.78131,16.78352,84.698,16.7081Z"/><path class="cls-200" d="M71.756,27.72189a10.055,10.055,0,0,0,1.12146.32719.73394.73394,0,0,0,.74435-.227c.138-.14379.28245-.29685.44525-.02314.11595.16871-.01467.28579-.0929.40669-.3627.56046-.32641.66734.30823.86878.10507.3284-.19189.51807-.27027.78364a3.70953,3.70953,0,0,0-.73868.581,1.51953,1.51953,0,0,1-1.28633-.02169,6.27573,6.27573,0,0,0-.24029-.93418c-.08972-.16508-.14533-.355-.376-.37505A4.40724,4.40724,0,0,1,71.756,27.72189Z"/><path class="cls-201" d="M74.45209,38.88967l-1.46337-.23127c.06864-.346-.2329-.52289-.35785-.78033-.07114-.14657-.27583-.23854-.18151-.45158.17342-.18688-.12449-.4328.07721-.61615a.47769.47769,0,0,1,.41434-.09033,3.42118,3.42118,0,0,1,1.23457.55443,1.7053,1.7053,0,0,0,.59361.21792.16673.16673,0,0,1-.00381.21356A1.62135,1.62135,0,0,0,74.45209,38.88967Z"/><path class="cls-202" d="M72.98861,36.81016l-.462.00018a5.82618,5.82618,0,0,1-.88808-.88077,2.58542,2.58542,0,0,1-.26762-1.12191.44494.44494,0,0,1,.385-.15418,1.37678,1.37678,0,0,1,.78659.16323c.36546.31564.85176.52678.94245,1.08212C73.27917,36.18044,73.28909,36.57987,72.98861,36.81016Z"/><path class="cls-203" d="M71.98715,30.41737c.43427-.06418.88705.18747,1.3096-.07673.112.122.05456.26379.04444.39891-.03585.47921-.005.51341.4547.60417a1.59,1.59,0,0,1,.58924.12866.36109.36109,0,0,1,.04923.35934,14.58816,14.58816,0,0,1-1.87614,1.272,11.69984,11.69984,0,0,0-1.34124-.37556c-.0217-.20286-.1778-.29292-.32447-.3948-.13484-.09366-.27767-.18585-.292-.3753.189-.30719.09709-.70094.30851-1.00125a.535.535,0,0,0,.42527-.27828C71.45856,30.29876,71.69381,30.31308,71.98715,30.41737Z"/><path class="cls-204" d="M71.217,32.72814a2.41031,2.41031,0,0,1,1.38664.3085,1.69185,1.69185,0,0,1,.553.9365c.10426.52106-.3228.675-.63045.91154-.24581-.11361-.53353-.08763-.77035-.2312q-.17065-.22626-.34133-.45248A1.58,1.58,0,0,1,71.217,32.72814Z"/><path class="cls-205" d="M81.00029,47.05371c.11838-.06268.34414-.08257.13168-.28856-.18549-.17986-.10715-.27615.0897-.3559a.746.746,0,0,0,.28272-.89481.3962.3962,0,0,1,.11238-.61727c.2785.12933.34171.41616.47646.65073a2.84073,2.84073,0,0,0,1.434,1.365,13.71014,13.71014,0,0,1,1.32088.62331,8.59006,8.59006,0,0,0,3.049.86331c.75122.07686,1.49846.20076,2.24749.30356a5.9934,5.9934,0,0,0,1.148-.07043c.62528-.03321,1.25307-.06774,1.87458-.1592a.65692.65692,0,0,0,.223-.05642,20.07214,20.07214,0,0,0,2.282-1.26534.86012.86012,0,0,0,.407-.70315.29958.29958,0,0,1,.09727-.242c.25426.01481.27417.27753.42181.40709.10089.08854.13085.26062.23422.34311A6.28939,6.28939,0,0,1,98.17892,48.825c-.3971-.0072-.5785.345-.8646.52216a5.37644,5.37644,0,0,1-3.16992,1.26354c-.34558-.02081-.69884.13469-1.00472-.15521-.04177-.03959-.15-.02011-.22555-.01135a17.53143,17.53143,0,0,1-2.14556.07764.34369.34369,0,0,0-.18482.03623,2.438,2.438,0,0,1-2.16164.20331A22.4232,22.4232,0,0,1,82.94054,48.332c-.07591-.04692-.18725-.07829-.21978-.14657a.66473.66473,0,0,0-.79623-.43859A2.78,2.78,0,0,1,81.00029,47.05371Z"/><path class="cls-206" d="M105.57416,53.67775l.07748.15365a.41164.41164,0,0,0,.14217.33872c.18537.19918.42623.37037.37168.70546-.00829.05091.07971.12316.1317.17735a23.2704,23.2704,0,0,0,2.54008,2.26,1.08717,1.08717,0,0,1,.12689.13837.55431.55431,0,0,1-.39055-.11439c-.7262-.56786-1.37611-1.22052-2.05456-1.8406a3.2672,3.2672,0,0,0-1.09852-.50962l-.69313-.61616c-.4524-.68236-1.04365-1.25092-1.55743-1.8834-.87542-1.07767-1.73906-2.16155-2.5445-3.293-.138-.19388-.21451-.48312-.52038-.52323a5.44,5.44,0,0,0-.93606-1.50385c-.13-.18534-.29378-.31528-.25745-.59323.02442-.18687-.12484-.37389-.23338-.5506a1.22518,1.22518,0,0,1-.26789-.66377c.20331-.03316.24225.14931.33075.2592a7.20822,7.20822,0,0,0,1.03768,1.24754,1.90635,1.90635,0,0,1,.48605.53529,52.52339,52.52339,0,0,0,4.11868,4.93979A8.51142,8.51142,0,0,1,105.57416,53.67775Z"/><path class="cls-207" d="M96.17647,46.2065a1.12327,1.12327,0,0,1-.70348,1.23026c-.61747.35815-1.25553.68067-1.88178,1.02392a2.53328,2.53328,0,0,1-1.04557.1931c-.69713.0608-1.39745.14482-2.09413.153a13.893,13.893,0,0,1-1.93062-.21479c-.63014-.082-1.26175-.15867-1.88727-.26865a11.04069,11.04069,0,0,1-2.23613-.88438c-.40038-.1648-.80038-.34431-1.18305-.53519a2.81852,2.81852,0,0,1-1.14095-1.14487,7.46813,7.46813,0,0,1-.45672-.86177l.00018-.23068c.30318-.08439.47877-.40278.80791-.44078,1.59576.383,3.15737.89221,4.75256,1.2772a15.07276,15.07276,0,0,0,2.401.286c.22962.01766.4596.01874.68914.05265a2.22741,2.22741,0,0,0,1.24289-.14427c.47026-.20407.94843-.39132,1.42827-.57246a2.28514,2.28514,0,0,0,1.10736-.72862.48077.48077,0,0,1,.39811-.20141,6.17752,6.17752,0,0,0,1.342.8581.60152.60152,0,0,1,.23606.38342A1.34234,1.34234,0,0,1,96.17647,46.2065Z"/><path class="cls-208" d="M96.02221,45.43631c-.13661-.06043-.19568-.18928-.27751-.30156-.09738-.13363-.21341-.2674-.40417-.23517a.51973.51973,0,0,1-.6216-.4151c-.043-.12293-.10422-.19838-.23743-.20346a1.52508,1.52508,0,0,0-.05365-.95388,1.46388,1.46388,0,0,1-.0282-.71053.95388.95388,0,0,1,.37479-.52433c.37193-.02162.42686.3427.63521.52095a17.30994,17.30994,0,0,0,.88931,1.50961.22871.22871,0,0,1,.03172.31258A.95467.95467,0,0,1,96.02221,45.43631Z"/><path class="cls-209" d="M96.33068,44.43542l-1.0016-1.77171c.03823-.13644-.03832-.31176.13607-.40219a.26035.26035,0,0,1,.28815.1395c.27208.45933.6639.82595.96223,1.264.33342.65409.67753,1.303.99657,1.96406a3.49474,3.49474,0,0,1,.46691,1.42462,18.34748,18.34748,0,0,1-1.312-1.89613A2.067,2.067,0,0,0,96.33068,44.43542Z"/><path class="cls-210" d="M96.71553,42.587c-.11268-.0928-.156-.2549-.30815-.30826a16.20978,16.20978,0,0,1-1.21585-1.99552,7.16513,7.16513,0,0,0-.38764-.66321c-.58166-1.06339-1.1218-2.15-1.77-3.17633a2.27432,2.27432,0,0,0-.50463-.6672,2.23136,2.23136,0,0,1-.58921-.98545c.44834-.03045.75589.28822,1.12359.45669a1.25676,1.25676,0,0,1,.23814.18422,2.85865,2.85865,0,0,1,.54015.83214,16.40306,16.40306,0,0,1,.95216,1.92014,1.39413,1.39413,0,0,0,.52405.64831,11.64726,11.64726,0,0,1,1.00964,1.93,2.39038,2.39038,0,0,1,.41241,1.02205C96.7042,42.05129,96.863,42.324,96.71553,42.587Z"/><path class="cls-211" d="M94.86649,39.58275c.54066.88321,1.07138,1.7721,1.54089,2.696-.02359.49019.26992.90992.30815,1.38637a3.34382,3.34382,0,0,1-.89791-1.02887.90324.90324,0,0,0-.335-.3574c-.10283.02209-.12525-.0594-.16156-.12434-.39273-.70251-.65011-1.4683-1.01963-2.18187-.05643-.109-.12911-.22782-.03659-.3578A.47922.47922,0,0,1,94.86649,39.58275Z"/><path class="cls-212" d="M96.71553,42.587a2.97943,2.97943,0,0,1-.07685-.84749c.2095-.097.27289.0871.34515.20126q.92334,1.45884,1.80653,2.94279a9.9561,9.9561,0,0,0,.789,1.5352c.07459.14811.25806.27387.1407.48125-.29894-.04725-.35716-.34412-.52111-.52448-.2875-.31631-.52831-.67506-.78868-1.016-.56171-.77981-.92672-1.68225-1.52326-2.44143A.51231.51231,0,0,1,96.71553,42.587Z"/><path class="cls-213" d="M100.10509,34.03756c-.14671-.06262-.18342-.20823-.24069-.33285a19.98871,19.98871,0,0,1-1.69-5.4434c-.06448-.43815-.15034-.87316-.22636-1.30961a11.85229,11.85229,0,0,1-.14341-1.89478,10.85156,10.85156,0,0,0-.16745-1.9457.89762.89762,0,0,1,.04409-.599c.2142-.09079.19649.1047.22313.20171a3.11409,3.11409,0,0,1,.15.86856,17.65964,17.65964,0,0,0,.2142,2.21326,35.33137,35.33137,0,0,0,.912,4.69856l.00037.00027c.29572,1.03929.60647,2.0737,1.00109,3.08086A1.38044,1.38044,0,0,1,100.10509,34.03756Z"/><path class="cls-214" d="M99.25805,35.57793c.03048.43441.38035.74119.46186,1.15521a.42218.42218,0,0,1-.15407.30807c-.272.01772-.33117-.20844-.40626-.384-.3518-.82239-.8-1.59907-1.14246-2.42588a29.20645,29.20645,0,0,1-1.42375-5.45413,5.50592,5.50592,0,0,1-.11327-1.71568c.05794-.1502-.00764-.29926-.00464-.44878.00667-.33139.16257-.53456.42912-.562a3.814,3.814,0,0,1,.13229.9793c.08459.55469.17037,1.108.29871,1.65422a25.70611,25.70611,0,0,0,1.11668,4.72384,18.39214,18.39214,0,0,0,.73675,1.80739C99.2423,35.32886,99.31611,35.44183,99.25805,35.57793Z"/><path class="cls-215" d="M98.10216,34.26825q.54233,1.11019,1.08387,2.22077c.099.204.15336.43664.37981.55219a13.09018,13.09018,0,0,0,1.17984,2.215c.351.58657.75213,1.14315,1.131,1.713a4.41014,4.41014,0,0,1-1.29713-1.43883c-.08683-.13187-.10437-.32633-.32024-.33261a3.06253,3.06253,0,0,1-.68777-1.0367c-.34163-.62476-.714-1.23517-1.00471-1.88777-.19626-.527-.39073-1.05468-.62135-1.56807a.42379.42379,0,0,1-.042-.333A.19474.19474,0,0,1,98.10216,34.26825Z"/><path class="cls-216" d="M104.57314,45.59034c-.25216-.01556-.29027-.26759-.43124-.4031-.62857-.60425-1.2396-1.22679-1.8548-1.84487a5.97848,5.97848,0,0,0-.87241-.90981c-.11.04-.17015-.03422-.21874-.10753-.71937-1.08526-1.446-2.16588-2.11349-3.28451a.622.622,0,0,1-.05529-.14274c-.01742-.1808-.19062-.43446.01341-.52289.217-.09408.27219.20872.37439.353.31626.44652.64012.88748.95986,1.33111.41245.44053.67839.99121,1.08141,1.43989a.40731.40731,0,0,1,.11252.3176,12.9363,12.9363,0,0,0,1.25889,1.6991,15.51757,15.51757,0,0,0,1.70205,1.93182C104.56007,45.48046,104.55937,45.54205,104.57314,45.59034Z"/><path class="cls-217" d="M101.56876,41.8165,100.336,40.12189a19.35055,19.35055,0,0,1-1.96175-3.55716c-.05244-.1267-.14488-.251-.04152-.39519.13868-.0745.23389-.01726.30883.10148l1.61774,2.92673a18.49294,18.49294,0,0,0,1.45549,2.27161c.11367.14492.26206.28569.23911.50118C101.79219,42.00256,101.68992,41.88592,101.56876,41.8165Z"/><path class="cls-218" d="M99.10362,38.88958c.62623.9901,1.19241,2.01966,1.91338,2.94735.1481.19056.16641.46408.39769.59563a2.43642,2.43642,0,0,0,.5167.78769,1.44433,1.44433,0,0,1,.40772.67567c-.35834-.14964-.49265-.53379-.78712-.752-.13129-.0973-.24611-.21684-.36841-.32628-.07483.02609-.1188-.02-.15959-.07a17.8073,17.8073,0,0,1-2.087-3.23638c-.134-.31578-.27033-.63045-.40408-.94612-.07772-.18345-.18369-.37074-.07629-.58175.3177-.018.34577.27438.46114.45513A3.802,3.802,0,0,1,99.10362,38.88958Z"/><path class="cls-219" d="M90.09048,15.55281c-.01118-.13393.1107-.20131.15407-.30795.65871.15309,1.25442.503,1.92588.61622A6.70168,6.70168,0,0,1,93.624,16.92577,10.99332,10.99332,0,0,1,97.45175,23.714c.05884.38172.02609.767.11268,1.143a.25278.25278,0,0,1-.07855.24625,20.01716,20.01716,0,0,0,.23092,3.08086c-.30675-.02235-.29762-.27995-.31734-.47519a4.273,4.273,0,0,0-.20455-.96c-.17249-1.08428-.231-2.18668-.49822-3.2563a10.2795,10.2795,0,0,0-1.7901-3.832,10.84018,10.84018,0,0,0-2.52112-2.3393,7.3441,7.3441,0,0,0-2.17255-1.63171A.2082.2082,0,0,1,90.09048,15.55281Z"/><path class="cls-220" d="M97.48588,25.10324a10.94175,10.94175,0,0,0-1.94169-5.93882,12.98393,12.98393,0,0,0-3.13278-3.06457.6517.6517,0,0,1-.241-.23878c.19433-.06263.20858-.30512.38518-.38546a8.167,8.167,0,0,1,1.76793,1.03689c.08076.062.15678.13008.235.19535.18791-.04449.27516.1063.38017.20669a9.85994,9.85994,0,0,1,2.77106,5.15256.84013.84013,0,0,1,.00723.41745c.0268.74758.13372,1.48736.2163,2.22953a.78642.78642,0,0,1,.0113.26611,10.07378,10.07378,0,0,0,.0035,1.97151,9.4651,9.4651,0,0,1-.30244-1.495C97.612,25.32388,97.64591,25.17436,97.48588,25.10324Z"/><path class="cls-221" d="M97.25477,26.72064a1.76866,1.76866,0,0,1,.2314.85855c.01409.22514.01343.45679.23063.60491a32.69788,32.69788,0,0,0,1.00354,4.01425c.06951.23.15268.45593.22954.68373a.97735.97735,0,0,0,.0955.59849,13.29179,13.29179,0,0,1,.575,1.65518,14.754,14.754,0,0,0,.98555,2.06643.57756.57756,0,0,1,.03856.147,3.75139,3.75139,0,0,1-1.04172-1.3826.70453.70453,0,0,0-.34472-.38867,18.93087,18.93087,0,0,1-1.41011-3.83213c-.2106-.81285-.32132-1.64624-.56293-2.45112a2.3749,2.3749,0,0,1-.03009-.57173c.10552-.3212-.05408-.62134-.07341-.93251A1.74334,1.74334,0,0,1,97.25477,26.72064Z"/><path class="cls-222" d="M77.68777,40.96938a.21036.21036,0,0,1-.19556-.09868c-.29769-.60691-.87-1.03072-1.11385-1.67292a2.0976,2.0976,0,0,1,.67582-1.065,6.51326,6.51326,0,0,0,.61227-.56258c.22446-.03543.3362.12951.39534.28447.11575.30322.286.38713.575.24126a.17792.17792,0,0,1,.14761.0116,5.66514,5.66514,0,0,1,.43458.59953,3.78506,3.78506,0,0,1-.14507,1.2612.75494.75494,0,0,0-.53188.44435A.95627.95627,0,0,1,77.68777,40.96938Z"/><path class="cls-223" d="M80.69234,43.04853l-.53962-.61583a2.5832,2.5832,0,0,1-.074-.36919,1.19664,1.19664,0,0,0-.49783-1.00628.95276.95276,0,0,1-.42909-1.01173,5.67521,5.67521,0,0,0,.96837-1.04535.341.341,0,0,1,.25743-.14327c.29875.08822.47709.34946.72834.50669.165.63764.30989,1.28.45367,1.92284-.48316.36429-.434.97166-.6635,1.45177C80.84252,42.85034,80.89618,43.0346,80.69234,43.04853Z"/><path class="cls-224" d="M80.384,38.88977a2.11264,2.11264,0,0,0-.58065.65466,1.30851,1.30851,0,0,1-.65154.50106l-.07788-.07719c-.10822-.44444.10972-.86964.07732-1.30961-.01706-.01991-.04195-.04863-.03355-.06485A8.94679,8.94679,0,0,1,80.24562,36.506a.15858.15858,0,0,1,.06915-.03125.44625.44625,0,0,1,.38067.37184.48506.48506,0,0,1-.00691.228,3.27406,3.27406,0,0,0-.206,1.53681A.29874.29874,0,0,1,80.384,38.88977Z"/><path class="cls-225" d="M80.69234,43.04853c.127-.40314.284-.79993.371-1.21152a.66033.66033,0,0,1,.47619-.55985,5.385,5.385,0,0,1,.95772.438.19.19,0,0,1,.04878.21864.57948.57948,0,0,0-.12049.39061,16.817,16.817,0,0,1-.03846,1.95658c-.255.132-.39556.49243-.77017.38554l-.77073-.61657C80.92923,43.69549,80.63677,43.39874,80.69234,43.04853Z"/><path class="cls-226" d="M99.02659,39.50583a16.91547,16.91547,0,0,0,1.92307,2.9682,3.3199,3.3199,0,0,1,.23392.34359.51039.51039,0,0,0,.13163.31361c1.04045,1.1723,1.93044,2.47233,3.04,3.58529.24277.24351.50912.46364.7665.69242a.376.376,0,0,1,.14491.33724,29.76731,29.76731,0,0,1-3.11459-3.20178c-.31709-.39543-.69538-.7418-1.0457-1.11059-.07785.02432-.11725-.02754-.15415-.08007q-1.46991-2.09267-2.74208-4.31107a.65912.65912,0,0,1-.05334-.144c-.18159-.459-.39685-.904-.56424-1.36853-.05475-.15193-.14373-.30257-.057-.47274.189-.081.20754.09694.26924.18838a14.46363,14.46363,0,0,1,1.00639,1.897A2.03893,2.03893,0,0,0,99.02659,39.50583Z"/><path class="cls-227" d="M98.25623,38.88967a22.7982,22.7982,0,0,0,1.27951,2.1619c.51508.79953,1.04638,1.58861,1.57062,2.38224a5.39228,5.39228,0,0,0,.97783,1.47236.76284.76284,0,0,1,.25492.52995,13.31381,13.31381,0,0,1-1.07116-1.22056,5.862,5.862,0,0,0-.62362-.70491.3493.3493,0,0,1-.23167-.18391,26.29251,26.29251,0,0,1-1.60484-2.50194c-.34341-.68688-.66718-1.38371-1.04839-2.05128a.36156.36156,0,0,1-.07038-.32458C98.053,38.37073,98.07271,38.73556,98.25623,38.88967Z"/><path class="cls-228" d="M97.717,22.48455a21.40869,21.40869,0,0,0-.60072-2.07473,9.0579,9.0579,0,0,0-2.55774-3.702c-.05709-.20157-.19544-.37537-.16139-.60953.02486-.171-.119-.28458-.2485-.35474-.36735-.199-.44329-.61871-.705-.89612-.04278-.04534-.02852-.14448-.04062-.21875a8.57844,8.57844,0,0,1,2.1783,1.54849A9.87326,9.87326,0,0,1,97.56749,19.318a13.61158,13.61158,0,0,1,.79117,3.72516c.04669.63593-.00443,1.26564.04182,1.89876a29.92182,29.92182,0,0,0,.5015,4.01383,7.86653,7.86653,0,0,1,.27868,1.53857,14.88475,14.88475,0,0,1-.61312-2.27159,32.39087,32.39087,0,0,1-.60057-3.94529,12.47715,12.47715,0,0,0-.17492-1.62595A1.01407,1.01407,0,0,0,97.717,22.48455Z"/><path class="cls-229" d="M102.87836,48.97938c-.19052-.01511-.28076-.16023-.3778-.29426a10.77921,10.77921,0,0,0-1.16291-1.24631.29473.29473,0,0,1-.25282-.14893A46.16,46.16,0,0,1,98.3954,43.4164a.78967.78967,0,0,1-.08534-.21315,3.97494,3.97494,0,0,0-.278-.8525.381.381,0,0,1-.03976-.35759c.20822-.09679.27655.08518.338.20067.51758.97289,1.22974,1.8181,1.79435,2.75879.11546.19238.33915.313.36563.56071a9.30619,9.30619,0,0,0,1.12073,1.76459c.37434.52745.80078,1.01783,1.20044,1.52755A.6386.6386,0,0,1,102.87836,48.97938Z"/><path class="cls-230" d="M100.49026,45.51333a4.781,4.781,0,0,1-.91956-1.24987,13.3173,13.3173,0,0,1-1.26425-1.94178.64411.64411,0,0,0-.28132-.35124,3.01027,3.01027,0,0,1-.62341-1.09633c-.01275-.214-.141-.42152-.03752-.64215.24113-.13184.27609.0953.34485.21691a13.80487,13.80487,0,0,0,.82746,1.31995c.60972,1.07777,1.311,2.09819,1.97654,3.14109a.32217.32217,0,0,1,.05387.1413,9.28026,9.28026,0,0,0,.81174,1.23016c.04646.07555.11366.13647.11343.2332-.373-.08248-.41276-.47464-.63635-.69837A1.1299,1.1299,0,0,0,100.49026,45.51333Z"/><path class="cls-120" d="M99.7201,46.9q-.34682-.63571-.6939-1.27129a1.62749,1.62749,0,0,1-.30775-.73171c.20689-.04063.2869.12973.39179.24582.19627.21721.32639.48376.51114.7103a7.16273,7.16273,0,0,1,.65821.84967c.59362.86832,1.33325,1.61541,1.98887,2.4314.72953.908,1.51871,1.76082,2.30468,2.61771a.47559.47559,0,0,1,.23018.23151c-.15193.16832.03927.229.11257.296.58366.53342,1.06617,1.166,1.66676,1.68353a4.24121,4.24121,0,0,1,.452.56162.95926.95926,0,0,1-.68179-.33892c-.23912-.2008-.43209-.472-.77875-.50788a13.53247,13.53247,0,0,1-1.67192-1.73211c-.50853-.56807-1.03126-1.1247-1.52371-1.7097-.76278-.90612-1.48829-1.83783-2.194-2.78722C100.04189,47.25679,99.87554,47.08244,99.7201,46.9Z"/><path class="cls-231" d="M104.57314,51.75188a18.41091,18.41091,0,0,1-2.14435-2.28427c-.51687-.59384-1.02349-1.19627-1.54835-1.7837-.3974-.44478-.71447-.96133-1.06731-1.44592l-.24729-.33938c-.48925-.86487-1.03385-1.69829-1.47475-2.59051-.07176-.1452-.17858-.28772-.09895-.4671.30241-.06806.26194.26048.41817.36166a19.0241,19.0241,0,0,0,1.6451,2.52566c.416.57839.854,1.14089,1.28224,1.71049.29974.55985.67331,1.07235,1.02223,1.6009a24.53793,24.53793,0,0,0,2.06973,2.45158C104.49715,51.56927,104.57558,51.63716,104.57314,51.75188Z"/><path class="cls-232" d="M100.56692,45.05121c-.29073-.17671-.38437-.50036-.55788-.762a23.18628,23.18628,0,0,1-1.52189-2.47288c-.17583-.39056-.47726-.73777-.418-1.20971.06758-.07976.14131-.042.21478-.01173a1.47224,1.47224,0,0,1,.35682.48825,26.24915,26.24915,0,0,0,1.63183,2.53214.76765.76765,0,0,1,.21767.51168,6.70529,6.70529,0,0,0,.75809,1.298,1.36223,1.36223,0,0,1,.32041.55064A4.936,4.936,0,0,1,100.56692,45.05121Z"/><path class="cls-233" d="M100.49026,44.127c-.67733-.94156-1.29736-1.92-1.88486-2.91961-.10945-.18622-.23243-.3645-.34917-.54644-.13377-.32845-.48591-.5635-.41868-.978.14319-.10342.21614.01679.26438.10666.20512.38208.5347.66843.77078,1.02558l1.77162,2.6955a16.59666,16.59666,0,0,0,1.267,1.92235,1.434,1.434,0,0,1,.35074.61946c-.46413-.18381-.65323-.63466-.93241-.98952C101.06868,44.73121,100.74791,44.45829,100.49026,44.127Z"/><path class="cls-234" d="M74.45209,38.88967a1.03542,1.03542,0,0,1,.11274-1.06942c.0659-.105.19717-.16887.19578-.31642.02863-.2791.22943-.35091.46245-.38468a1.80274,1.80274,0,0,1,.82683.65751,2.54442,2.54442,0,0,0,.08508,1.019.24028.24028,0,0,1-.06476.24822c-.15333.39091-.544.34659-.84757.462C74.88172,39.40558,74.73665,39.06046,74.45209,38.88967Z"/><path class="cls-235" d="M76.07021,39.0439a2.35527,2.35527,0,0,1-.07722-1.30959c-.00186-.30525.25935-.41779.44163-.57818a1.449,1.449,0,0,0,.46529-.54578.53206.53206,0,0,1,.44084-.325.30458.30458,0,0,1,.31892.14824c.06656.38072.27327.75835.02829,1.1469a.56149.56149,0,0,1-.27651.4308c-.55539.22368-.67826.80237-1.03309,1.18647A.42133.42133,0,0,0,76.07021,39.0439Z"/><path class="cls-236" d="M90.09048,15.55281a5.89116,5.89116,0,0,1,2.31106,1.69442.60411.60411,0,0,1-.639.02231,1.4824,1.4824,0,0,0-.69346-.12626c-.6249-.18518-1.2614-.32693-1.88994-.49824a5.023,5.023,0,0,0-1.31833-.22346,1.20543,1.20543,0,0,1-.62041-.17555,4.301,4.301,0,0,1-.8479-.308.862.862,0,0,1,.61661-.69349Z"/><path class="cls-237" d="M85.1601,19.01886c-.40777.00775-.72966-.26806-1.12689-.32513a4.83843,4.83843,0,0,0-3.01663.58147,10.62779,10.62779,0,0,0-1.90165,1.13638,15.31055,15.31055,0,0,1-2.3871,1.34156,2.46537,2.46537,0,0,1-.96595.192c-.00668-.11691.01056-.2419-.18673-.1832a1.50581,1.50581,0,0,1-.62035.00957c.10233-.37089.39284-.47825.67576-.59165a.99224.99224,0,0,0,.59354-.38968,9.95124,9.95124,0,0,0,2.96679-1.35868,9.34374,9.34374,0,0,1,2.22561-1.17565c.46659-.16265.94039-.30469,1.40654-.46852a11.29013,11.29013,0,0,1,1.875-.309,2.5895,2.5895,0,0,1,1.51727.21245.55728.55728,0,0,1,.20675.78649c-.14019.15781-.22174.30869-.018.49026.07466.06654.17636.19244-.02734.25745A6.11324,6.11324,0,0,1,85.1601,19.01886Z"/><path class="cls-238" d="M86.2387,17.78653a7.50048,7.50048,0,0,0-1.5407-.30819,3.23773,3.23773,0,0,0-1.81463-.2449,2.32144,2.32144,0,0,1-.57347.01384c.64691-.154,1.29343-.30976,1.941-.46085.14711-.03433.298-.05264.44707-.07833a6.32732,6.32732,0,0,1,1.54127.104,5.58539,5.58539,0,0,1,1.07793.20417c.53586.36424,1.16279.57583,1.667.9925.11407.09426.33709.1558.13861.371a1.07791,1.07791,0,0,1-.71064-.05882,8.89424,8.89424,0,0,0-1.76051-.35154A.84335.84335,0,0,1,86.2387,17.78653Z"/><path class="cls-239" d="M74.45228,25.33439c.16053-.08.318-.16688.48205-.23887a24.386,24.386,0,0,0,4.91288-3.09943,12.25283,12.25283,0,0,1,2.75109-1.58033,3.833,3.833,0,0,1,2.068-.05356,3.5921,3.5921,0,0,0,.41686.04291c.36265.23561.6782.53714,1.05787.75021.07944.04458.19094.125.041.23067a1.61682,1.61682,0,0,1-.78694-.08318,7.98913,7.98913,0,0,0-1.31343-.20462,1.1993,1.1993,0,0,0-1.06216-.14107,6.41313,6.41313,0,0,0-2.29614,1.08213,5.85365,5.85365,0,0,0-1.0298.80994c-.30412.29776-.72314.50436-1.05585.79657-.36914.32421-.76605.61786-1.15736.90656-.58033.42816-1.12563.8923-1.68774,1.33706a1.13719,1.13719,0,0,1-.99731.23023.66128.66128,0,0,0-.62555.09657.93548.93548,0,0,1-.719.19638A4.93429,4.93429,0,0,0,74.45228,25.33439Z"/><path class="cls-240" d="M74.29821,29.10824c-.13649-.012-.29243.04821-.40635-.03947-.21688-.16694-.38295-.34808-.17836-.659.12793-.19441.34315-.34663.3536-.61087a2.55581,2.55581,0,0,0,1.24633-.86456c.1694-.255.52439-.38544.79176-.57748a1.33778,1.33778,0,0,0,.321-.26921c.36686-.51076.97419-.7172,1.41152-1.13632.03636-.03485.10074-.04928.12246-.08928.30609-.56361.89646-.80673,1.36374-1.18009a14.07221,14.07221,0,0,1,1.64236-1.27865,10.77887,10.77887,0,0,1,1.82831-.99494,1.88541,1.88541,0,0,1,1.22909.07123.92893.92893,0,0,0,.366.08074.114.114,0,0,1,.09292.12569c-.14206.17563-.35787.14647-.54559.19028-.13228.03087-.27342.02965-.3608.15854a.27745.27745,0,0,1-.17672.06756c-1.0495-.05085-1.71483.69946-2.49929,1.1991-.0955.06082-.16337.16492-.26346.22286A13.95392,13.95392,0,0,0,77.91057,25.82a18.89028,18.89028,0,0,1-1.582,1.51457,1.37589,1.37589,0,0,0-.323.37944c-.34882.57984-.96847.8678-1.42594,1.33028A.23712.23712,0,0,1,74.29821,29.10824Z"/><path class="cls-241" d="M84.467,21.63756l-.0773-.07721a.34985.34985,0,0,0-.308-.46216c.3792-.19881.74138.0071,1.10769.05475a6.7961,6.7961,0,0,0,1.04949.1764,1.19164,1.19164,0,0,1,.74085.11615,10.34661,10.34661,0,0,1,3.15461,1.79333A14.08641,14.08641,0,0,1,94.33683,28.303q.291.60627.52427,1.23772c.05326.1431.16122.31343-.04995.43531-.15023-.04134-.15512-.18357-.21112-.29449a13.553,13.553,0,0,0-1.40573-2.22242,1.759,1.759,0,0,0-.39393-.36079,11.65669,11.65669,0,0,0-1.80471-1.98251,12.7678,12.7678,0,0,0-2.6969-2.08324,8.67484,8.67484,0,0,0-1.41355-.57189c-.74445-.2306-1.502-.42426-2.23723-.68632A.36474.36474,0,0,1,84.467,21.63756Z"/><path class="cls-242" d="M85.1601,19.01886a3.50652,3.50652,0,0,1,1.30957.15356c.15946-.13067.32026-.0393.46906.01274a8.69883,8.69883,0,0,1,1.85062.78522c-.01321.42146.34356.62612.54316.92309.06549.09744.24842.16256.08745.322-.54612-.08877-1.0962-.14364-1.64529-.20663-.68558-.129-1.34468-.35953-2.01977-.52907a.31364.31364,0,0,1-.20951-.15182.28414.28414,0,0,0-.16446-.14915q-.8816-.34674-1.76143-.698a.1591.1591,0,0,1,.15407-.077A1.74365,1.74365,0,0,0,85.1601,19.01886Z"/><path class="cls-243" d="M85.54539,20.328l2.234.61622a2.48873,2.48873,0,0,1,.9082.3985,18.48189,18.48189,0,0,1,3.60485,2.866,11.10923,11.10923,0,0,1,2.79221,4.76167c.3694,1.359.56084,2.764,1.05641,4.0907a.348.348,0,0,1,.00834.2272.11788.11788,0,0,1-.08277.07559c-.17377-.03259-.19274-.18425-.24155-.31347a7.57646,7.57646,0,0,0-.55566-1.26153,13.35947,13.35947,0,0,0-.44534-1.54c-.031-.096-.08482-.18826-.03408-.29329.12977-.34229-.10948-.60382-.22007-.87915a12.88253,12.88253,0,0,0-3.32365-4.771,14.40106,14.40106,0,0,0-3.14156-2.30063,8.26638,8.26638,0,0,0-1.86585-.67545c-.39477-.29617-.8844-.47375-1.15572-.92423A1.38678,1.38678,0,0,1,85.54539,20.328Z"/><path class="cls-244" d="M89.16624,18.32512a3.65813,3.65813,0,0,0-1.33779-.88592.91878.91878,0,0,1-.51125-.42288l.61647-.00052c.28134-.18775.54934-.02932.80509.05427a10.79829,10.79829,0,0,1,2.51772,1.11725,20.9102,20.9102,0,0,1,3.1929,3.08889,11.14,11.14,0,0,1,2.03689,4.75926c.05619.32868.01867.66454.07518.99325a13.64594,13.64594,0,0,0,.56419,3.798,18.01848,18.01848,0,0,0,.96293,3.2897.47381.47381,0,0,1,.01359.15184.159.159,0,0,1-.15407.07749c-.20554-.01573-.20567-.2-.25721-.3299a37.5739,37.5739,0,0,1-1.22414-3.94245c-.03714-.13525-.07884-.26881-.12044-.40242a12.69628,12.69628,0,0,1-.27486-2.05276,9.64193,9.64193,0,0,0-.37022-1.76526,9.0422,9.0422,0,0,0-1.89884-3.8619,11.54532,11.54532,0,0,0-4.4609-3.43734A.34337.34337,0,0,1,89.16624,18.32512Z"/><path class="cls-245" d="M91.246,18.24862a16.17309,16.17309,0,0,0-2.13324-.938,4.207,4.207,0,0,0-1.1791-.29478.406.406,0,0,0-.23651-.392c-.16323-.10991-.36448-.18029-.45681-.37781a13.30705,13.30705,0,0,1,3.85155.84718,5.54842,5.54842,0,0,1,1.05214.7474.23645.23645,0,0,1,.10634.29811A.77066.77066,0,0,1,91.246,18.24862Z"/><path class="cls-246" d="M74.29821,29.10824a7.39706,7.39706,0,0,0,1.49536-1.29289,7.08112,7.08112,0,0,1,.90715-.92707c.90526-.87,1.76349-1.78865,2.708-2.6182a3.94157,3.94157,0,0,1,.33269-.25767c.90716-.639,1.78916-1.31466,2.74541-1.882.33534-.199.70377-.07174,1.0556-.108.10926-.088.21887-.031.326.00259,1.02189.32016,2.05715.59818,3.06309.96847.13738.05057.31078.066.3259.26868a.358.358,0,0,1-.35578.16482,5.21788,5.21788,0,0,1-1.30563.00334,1.91169,1.91169,0,0,1-.6188-.20021,4.00291,4.00291,0,0,0-2.12963-.34163.92174.92174,0,0,0-.42881.15278,17.54069,17.54069,0,0,0-2.81478,2.135,11.95043,11.95043,0,0,0-1.66845,1.74468,7.02224,7.02224,0,0,1-1.43771,1.48942,6.0644,6.0644,0,0,0-.76075,1.0091c-.05658.06817-.09187.15636-.18892.182-.25165.04276-.469.18932-.71727.24006a1.057,1.057,0,0,1-.841-.03989C74.01616,29.53647,74.215,29.34806,74.29821,29.10824Z"/><path class="cls-247" d="M73.98993,29.8016a2.28242,2.28242,0,0,0,1.42907-.30933c.08943-.05758.1033.01053.11178.078.12138.18664-.00921.34347-.06807.50348-.06635.18041-.1198.36421-.17621.54739-.24249.355-.44837.74884-.91078.87556a4.14885,4.14885,0,0,1-.8656-.08455.28738.28738,0,0,1-.29571-.32021,4.71856,4.71856,0,0,1,.08234-.75131A1.26637,1.26637,0,0,1,73.98993,29.8016Z"/><path class="cls-248" d="M75.22264,37.19488a.64963.64963,0,0,0-.462.309.36522.36522,0,0,1-.42642-.00112,4.46865,4.46865,0,0,0-1.34558-.69255c.172-.29907.16076-.68978.46221-.92414.54127-.51375,1.09373-.21645,1.64529-.02314A1.238,1.238,0,0,1,75.22264,37.19488Z"/><path class="cls-249" d="M75.06838,35.886c-.122-.02475-.24677-.04014-.3654-.07593a1.62694,1.62694,0,0,0-1.25216.07593c-.16942-.46188-.61119-.67238-.92461-1.00134a.30259.30259,0,0,1,.21062-.29084c.33352-.10451.35543-.352.329-.6333.38012-.19472.58464-.15877.95132.16721.43266.38464.43342.38583.93366.0696a.52841.52841,0,0,1,.384-.13464c.42142.05682.509.35854.52479.71344A1.3239,1.3239,0,0,1,75.06838,35.886Z"/><path class="cls-250" d="M74.37573,31.49671a6.69368,6.69368,0,0,0,.84691-.84817c.41789-.48353.87721-.92788,1.2961-1.41231a44.24661,44.24661,0,0,1,3.46244-3.90795c.69213-.63214,1.44707-1.184,2.18345-1.76021a1.90023,1.90023,0,0,1,1.05737-.30271,3.45,3.45,0,0,1,1.74727.32681,2.26686,2.26686,0,0,0,1.0631.70793,2.26118,2.26118,0,0,1,.60374.32067c.0857.07175.24295.13878.1045.2981a1.21652,1.21652,0,0,1-.87789-.14936,4.46178,4.46178,0,0,0-1.87853-.41506,5.56485,5.56485,0,0,0-.71727-.11882,1.874,1.874,0,0,0-1.26153.55454c-.65554.62723-1.40662,1.14878-2.03426,1.814A8.30531,8.30531,0,0,0,78.69182,28.278c-.02477.045.01679-.00106-.01934.03259a13.09967,13.09967,0,0,0-1.47081,2.36735c-.07426.1054-.13568.21865-.26645.26527a2.63516,2.63516,0,0,0-1.51735.94035,2.42675,2.42675,0,0,1-.36.39546.36369.36369,0,0,1-.46207.01674c-.13969-.09348-.331-.17984-.22071-.41474Z"/><path class="cls-251" d="M74.37506,31.881c.22.48486.478.54478.79636.15724a2.32272,2.32272,0,0,1,.5923-.63839c.36978-.19654.6683-.57694,1.1537-.52019.11239.1642-.00533.28926-.08455.40728a5.21654,5.21654,0,0,0-.35878.61576,3.44891,3.44891,0,0,0-1.07117,1.85849c-.02192.1221.00536.2571-.10344.35327-.11394-.00256-.17951.07955-.26071.14078-.5494.41437-.59469.41888-1.0733-.05589a.89068.89068,0,0,0-.89964-.23883c-.06535-.35233-.342-.599-.46221-.92391q.67413-.50091,1.34816-1.002A.62294.62294,0,0,1,74.37506,31.881Z"/><path class="cls-252" d="M82.38712,44.281c-.2776-.3469-.039-.73011-.05421-1.0928a6.16031,6.16031,0,0,0-.00671-.74375c-.03017-.19143-.1415-.482.2148-.551a2.36253,2.36253,0,0,1,.94333.28141,15.40568,15.40568,0,0,0,3.63485.92654,2.61986,2.61986,0,0,1,.37683.07135c1.40908.46109,2.69637-.05117,3.98358-.511.40363-.14419.63614-.54583.98116-.789a4.00672,4.00672,0,0,1,.43092-.31821c.24745-.10828.40487.0742.58066.18589a7.10112,7.10112,0,0,1,1.009.84622,3.43427,3.43427,0,0,0,.17222,1.25773.38546.38546,0,0,1-.172.43669.30632.30632,0,0,0-.30764.11938c-.3928.63593-1.0953.755-1.70493,1.02593-.32651.14511-.66677.259-.99551.39946a1.71144,1.71144,0,0,1-.74357.15173,21.47431,21.47431,0,0,1-5.64168-.90463,14.08386,14.08386,0,0,0-2.43535-.64822A.85145.85145,0,0,1,82.38712,44.281Z"/><path class="cls-253" d="M94.48131,42.5866c-.48907-.16295-.74491-.64925-1.19991-.86581-.11244-.05352-.20136-.15126-.34061-.13535a.5785.5785,0,0,1-.1852-.33,5.1235,5.1235,0,0,0-.63976-1.43534.44171.44171,0,0,1-.082-.29112c.1184-.2663.39982-.34922.59566-.52909.39535-.06432.52424.28015.74484.48473.3157.76758.93172,1.34709,1.30414,2.07873.08828.17342.26205.33725.11135.56106Z"/><path class="cls-254" d="M94.78983,42.12439a4.24758,4.24758,0,0,0-.79595-1.447,3.13724,3.13724,0,0,1-.66791-1.17149c-.20487-.33274-.02549-.68242-.04559-1.02318.17176-.16211.2417.01723.31158.10953a10.9313,10.9313,0,0,1,.65811,1.06813l1.23255,2.6184c-.09665.11018-.03121.285-.15354.38491C95.13891,42.49435,95.07526,42.19854,94.78983,42.12439Z"/><path class="cls-255" d="M93.24912,35.50075a4.67475,4.67475,0,0,0-1.30923-.69319,3.809,3.809,0,0,1-.82528-1.07669,4.08033,4.08033,0,0,0-1.10027-1.64537c-.46567-.52684-.94815-1.04281-1.43663-1.55156a8.94938,8.94938,0,0,0-2.61722-1.65011c-.39957-.19989-.83338-.33142-1.25089-.495a2.97658,2.97658,0,0,0-1.32254-.16727.64836.64836,0,0,0-.386.15873,4.23272,4.23272,0,0,0-.98618,1.17085A16.66987,16.66987,0,0,0,80.71949,33.158c-.15845.62046-.32595,1.24-.43709,1.87248a3.25618,3.25618,0,0,1-.57128.61386.29679.29679,0,0,1-.34245.10426.4655.4655,0,0,1-.17162-.44142,6.05163,6.05163,0,0,1,.02294-.953c.21231-.50778.40394-1.02644.65906-1.515a19.30453,19.30453,0,0,0,.84646-2.101,5.64371,5.64371,0,0,1,1.08525-2.01494,2.482,2.482,0,0,0,.37084-.4906,1.52636,1.52636,0,0,1,1.72259-.69281,4.90583,4.90583,0,0,1,1.70627.6743c.72683.38435,1.48181.7055,2.21378,1.07635a10.165,10.165,0,0,1,2.15765,1.78164,26.6289,26.6289,0,0,1,2.14468,2.20553,3.27367,3.27367,0,0,1,.41912.60535,7.69792,7.69792,0,0,0,.62291,1.1736C93.24934,35.19134,93.38783,35.3231,93.24912,35.50075Z"/><path class="cls-256" d="M91.16916,33.72938l.77072,1.07819.61734.92479a.76212.76212,0,0,1,.33312.65716c-.0022.39952.1962.79163.043,1.19573-.16578.02544-.216-.12177-.28725-.213a9.79,9.79,0,0,0-1.28949-1.31521A11.85372,11.85372,0,0,0,89.44445,33.407a1.08441,1.08441,0,0,1-.29817-.39435,1.14653,1.14653,0,0,1,.04018-.94817.24547.24547,0,0,1,.37655.01126A15.526,15.526,0,0,1,91.176,33.65709C91.18984,33.67483,91.18059,33.70439,91.16916,33.72938Z"/><path class="cls-257" d="M98.02515,42.81737a5.76906,5.76906,0,0,0,.76126,1.56255,9.96136,9.96136,0,0,1,.77943,1.51869c-.31572-.30576-.45113-.764-.84739-1.00163-.59018-.94908-1.17824-1.89949-1.77312-2.84563-.077-.12246-.12418-.28757-.30665-.31187a.52078.52078,0,0,0-.07091-.2947c-.47284-.83413-.77186-1.75777-1.31611-2.55518a1.74005,1.74005,0,0,1-.35109-1.19762c.24335-.12333.27094.11937.35084.228.47886.65078.80383,1.3932,1.21934,2.08218a19.7116,19.7116,0,0,0,1.45737,2.46624C98.00017,42.56787,98.08689,42.67521,98.02515,42.81737Z"/><path class="cls-258" d="M92.86394,37.58025c.2138-.23911-.02635-.4748-.0321-.70974a1.54794,1.54794,0,0,0-.27464-1.13816c.15873-.00338.206.1239.276.22956a35.02421,35.02421,0,0,1,2.0333,3.62084,1.59811,1.59811,0,0,0-.61642.07764c-.32713-.16333-.37088-.53542-.57878-.78714-.1195-.14468-.17264-.34118-.34514-.4455A1.61619,1.61619,0,0,1,92.86394,37.58025Z"/><path class="cls-259" d="M94.94368,37.65812a6.55177,6.55177,0,0,0,.308,1.23148,2.24606,2.24606,0,0,1-.6562-.95,14.18463,14.18463,0,0,0-1.34634-2.43885c-.04225-.38227-.344-.63289-.49728-.96087a3.21485,3.21485,0,0,1-.2736-.656c.33459.02836.49981.31489.72977.495a3.91465,3.91465,0,0,1,.81671.94528A6.50455,6.50455,0,0,1,94.94368,37.65812Z"/><path class="cls-260" d="M92.24747,18.09444a4.39361,4.39361,0,0,0-.92094-.76363.76515.76515,0,0,1-.23463-.2376c.18133-.17209.37248-.05725.53166.01651a1.5564,1.5564,0,0,0,.778.13751,10.94346,10.94346,0,0,1,2.167,1.867,9.53934,9.53934,0,0,1,1.81665,3.04321,10.26737,10.26737,0,0,1,.71678,3.27457,7.38061,7.38061,0,0,1,.15278,1.28859,5.64532,5.64532,0,0,0,.13735,1.61236.29319.29319,0,0,1-.13721.39,9.76466,9.76466,0,0,1-.3855-2.69532c-.22246-.11781-.197-.35069-.22549-.5408a11.89249,11.89249,0,0,0-.86846-3.01494,9.16129,9.16129,0,0,0-1.77364-2.67233,15.04972,15.04972,0,0,0-1.50191-1.42613C92.40218,18.29569,92.28332,18.2308,92.24747,18.09444Z"/><path class="cls-261" d="M92.24747,18.09444a2.387,2.387,0,0,1,.72882.55284,10.62212,10.62212,0,0,1,3.744,6.75094,6.45721,6.45721,0,0,0,.1491.6294.68728.68728,0,0,0-.25607.80025.15237.15237,0,0,1-.05189.20085c-.103-.55754-.17918-1.12166-.314-1.6714a11.01735,11.01735,0,0,0-2.26632-4.50324,28.17214,28.17214,0,0,0-2.565-2.40026,2.02851,2.02851,0,0,1-.17007-.2052A1.333,1.333,0,0,0,92.24747,18.09444Z"/><path class="cls-262" d="M96.40738,29.64728c.32129.73663.44142,1.53369.68871,2.29293a21.13659,21.13659,0,0,0,.852,2.40553c.14212.60753.48446,1.14121.64314,1.74264.01611.06106.03355.12177.05037.18264a.51879.51879,0,0,0-.30814-.077,9.5899,9.5899,0,0,1-.82268-1.6314c-.36449-.84566-.61579-1.73276-.97874-2.57817a3.45834,3.45834,0,0,1-.23786-1.11308C96.24477,30.45519,96.1167,30.03175,96.40738,29.64728Z"/><path class="cls-263" d="M96.6383,31.958a.91537.91537,0,0,1,.08783.16271,28.432,28.432,0,0,0,1.55246,3.89192,1.23521,1.23521,0,0,1,.05487.18133,20.32555,20.32555,0,0,0,1.6099,3.19421,2.14674,2.14674,0,0,1,.39268.73368,13.67272,13.67272,0,0,1-1.11053-1.528c-.04444-.07071-.05642-.1719-.16679-.18959-.08966.17652.08072.32115.0449.48526a8.52112,8.52112,0,0,0-.61628-.92414c-.145-.03051-.19722-.14782-.253-.26505q-1.07305-2.25423-1.91953-4.60313c-.19442-.64609-.33411-1.30655-.52309-1.95411a.87978.87978,0,0,1-.0345-.704c.19809-.07187.26058.09869.28217.21007.11443.59043.422,1.11493.552,1.61429A.28583.28583,0,0,1,96.6383,31.958Z"/><path class="cls-264" d="M96.4072,33.11318c.36026.9142.70225,1.83618,1.0866,2.74015.30421.71549.66042,1.4089.99354,2.11211a3.65183,3.65183,0,0,0,.40115,1.18611c.038.12062.09163.23632.1381.35428a6.40689,6.40689,0,0,1-.88107-1.49484c-.183-.33178-.40209-.63853-.5826-.96952-.16061.01414-.17764-.12534-.22166-.22094A19.28365,19.28365,0,0,1,96.156,33.86477c-.04634-.16966-.13686-.33614-.05677-.52026l.00019-.00031C96.20764,33.27468,96.22344,33.0821,96.4072,33.11318Z"/><path class="cls-265" d="M79.30551,34.26853c0,.36886.00113.73773-.00054,1.10658-.00064.1429-.00538.28479.15462.35687a.46285.46285,0,0,1-.02717.40666,7.27628,7.27628,0,0,0-.54479,1.74859.34653.34653,0,0,1-.12136.23235,1.36918,1.36918,0,0,0-.31168.133c-.21069.15938-.3113.02355-.36726-.14a.90822.90822,0,0,0-.39937-.53206c.05521-.39053-.09974-.767-.07723-1.15536a.71069.71069,0,0,1,.157-.81488,11.92236,11.92236,0,0,0,1.04913-1.9035c.17221-.28278.29066-.59721.45634-.88491.07919-.13752.15563-.306.37353-.243a.54129.54129,0,0,1,.08247.60128C79.59172,33.54437,79.43738,33.90208,79.30551,34.26853Z"/><path class="cls-266" d="M78.76627,38.11958a5.62311,5.62311,0,0,1,.50226-1.85458c.07859-.17082.12817-.355.19106-.533l.77054-.69336c.11234-.02651.17446.03448.21976.12551a1.77072,1.77072,0,0,1-.14273,1.3379c-.49092.6623-.725,1.46221-1.1559,2.15666A.74551.74551,0,0,1,78.76627,38.11958Z"/><path class="cls-267" d="M82.46379,41.73929a1.96825,1.96825,0,0,1-.92422-.46213,11.25081,11.25081,0,0,1-.51386-1.78475c-.01378-.03459.03279-.09319.05128-.14062a1.5716,1.5716,0,0,1,.22363-1.11065c.64051-.463.8616-.37131,1.5258.443-.06509.34337.13984.66364.08813,1.00649a8.72339,8.72339,0,0,0-.2754,1.60509A.54.54,0,0,1,82.46379,41.73929Z"/><path class="cls-268" d="M81.38547,38.27343c-.24.32022-.16819.72962-.30848,1.07836-.33967.00892-.44744-.32983-.693-.462a5.4246,5.4246,0,0,1,.23111-2.07968,12.10138,12.10138,0,0,1,.723-1.72086c.04351-.1194.14826-.23686.27217-.04286a20.03326,20.03326,0,0,1-.075,2.21542A2.024,2.024,0,0,1,81.38547,38.27343Z"/><path class="cls-269" d="M81.54,34.96257q-.30256.61191-.60479,1.224c-.103.20979-.10561.47091-.32011.62351a.79177.79177,0,0,0-.308-.30806,6.07493,6.07493,0,0,0,.07685-1.3863,4.5744,4.5744,0,0,1,.394-1.14781,6.04688,6.04688,0,0,0,.48808-1.27521c.0283-.14176.036-.37572.30323-.33236a.42552.42552,0,0,1,.03525.36891,4.94864,4.94864,0,0,0,.06493,2.00158C81.67438,34.83481,81.70037,34.95109,81.54,34.96257Z"/><path class="cls-270" d="M82.46379,41.73929a8.64365,8.64365,0,0,1,.38554-2.07952c.14475-.10235.27225-.01418.394.04626a1.62408,1.62408,0,0,0,.62148.19018,9.15906,9.15906,0,0,1,1.76946.34781,4.27679,4.27679,0,0,0,1.56043-.08681c.40735-.041.811-.1185,1.219-.16108a2.6639,2.6639,0,0,0,1.61279-.63735,3.30839,3.30839,0,0,1,.80474-.52082,1.11648,1.11648,0,0,1,1.26193.668c.102.3968.42441.68257.53886,1.074.09838.33648.20547.67042.30872,1.00548a5.89129,5.89129,0,0,1-3.40016,1.78827,4.97139,4.97139,0,0,1-2.02487-.09088,19.52056,19.52056,0,0,1-3.41707-.76923,9.46729,9.46729,0,0,1-1.55769-.62018Z"/><path class="cls-271" d="M96.09924,33.34451a20.87443,20.87443,0,0,0,1.46368,3.697,6.84558,6.84558,0,0,0,.52225,1.42606c.05564.14126.114.28146.17106.42215l-.53906-.4622a.28245.28245,0,0,1-.17436-.18761c-.25444-.59413-.58705-1.151-.83428-1.74884a15.76069,15.76069,0,0,1-.90774-2.36891c-.18044-.62769-.33828-1.26183-.53744-1.88463a.40064.40064,0,0,1,.06573-.43357,3.58279,3.58279,0,0,1,.60878,1.29956C95.97844,33.20029,95.99413,33.29742,96.09924,33.34451Z"/><path class="cls-272" d="M96.79275,36.5018c.32125.63559.66454,1.26062.92442,1.92567.3224.64465.64664,1.2884.96578,1.93466.07235.14651.127.30179.18976.453a4.8547,4.8547,0,0,1-1.00165-1.15538.32007.32007,0,0,1-.20253-.21218c-.37-.83541-.79379-1.64669-1.12473-2.49955a.73226.73226,0,0,1-.10027-.40009C96.54182,36.39751,96.67346,36.49625,96.79275,36.5018Z"/><path class="cls-273" d="M98.02515,42.81737a21.72746,21.72746,0,0,1-1.61777-2.77222c-.279-.5682-.45512-1.1784-.71712-1.75371a.88361.88361,0,0,1-.15951-.60975c.26959-.08456.33254.157.397.30068.45149,1.007,1.14768,1.88208,1.558,2.90978l.53944,1.07829c.0738.4278.34161.795.38518,1.23222C98.23335,43.12277,98.15505,42.94428,98.02515,42.81737Z"/><path class="cls-274" d="M97.48569,40.89215a8.718,8.718,0,0,1-.68647-1.141c-.44173-.59884-.67888-1.31233-1.0828-1.93216a1.15614,1.15614,0,0,0-.15624-.1617c-.12776-.04-.157-.15832-.20875-.25984a12.70141,12.70141,0,0,1-.96388-2.1751c-.12343-.42226-.41787-.76451-.54976-1.18275a4.11333,4.11333,0,0,0-.30017-1.10421.4485.4485,0,0,1-.02138-.40793c.253-.12826.315.10148.386.23631.233.44217.51272.85706.74193,1.30078a3.55187,3.55187,0,0,1,.33535.85634,19.03479,19.03479,0,0,0,1.46866,3.12118c.293.59788.598,1.19.87569,1.79523.05129.1118.13637.22271.08476.36158Z"/><path class="cls-275" d="M97.40866,40.19886c-.37668-.75286-.747-1.509-1.132-2.2576-.33908-.65941-.72168-1.29781-1.03345-1.96944-.21881-.47135-.34966-.98336-.52261-1.47623a.86893.86893,0,0,0-.16192-.38113,5.40146,5.40146,0,0,0-.35382-1.03176.80805.80805,0,0,1-.08845-.40245c.185-.27592.2507-.01677.30372.08653a11.99616,11.99616,0,0,1,.53712,1.18835,3.06779,3.06779,0,0,0,.42725.81191,3.81038,3.81038,0,0,1,.25706.68138c.495,1.16944,1.10227,2.28343,1.69043,3.406.24981.47682.46738.96961.73155,1.439a.285.285,0,0,1,.03871.29079c.04242.43752.31144.8043.38486,1.23214a6.62615,6.62615,0,0,1-.80372-1.22259C97.59726,40.4584,97.57723,40.27693,97.40866,40.19886Z"/><path class="cls-276" d="M98.10229,40.58422c-.60375-1.18148-1.20394-2.36479-1.81258-3.54375a10.45394,10.45394,0,0,1-.96082-2.23272,2.17,2.17,0,0,1-.35435-1.42705c.0943-.10773.1503-.02248.19537.04738a2.37221,2.37221,0,0,0,.21846.3384,13.797,13.797,0,0,1,.85456,1.95694c.11321.24528.32472.46923.24168.77865a20.87839,20.87839,0,0,0,.88634,2.0784c.16151.36208.33308.71968.50011,1.0793-.02542.23883.15358.38968.24838.57675a.76351.76351,0,0,1,.13679.42441Z"/><path class="cls-277" d="M75.06838,35.886a.245.245,0,0,1,.16041-.2331,1.00068,1.00068,0,0,0,.53328-.84517c.34925-.25417.6984-.50734,1.03177-.78373a.69943.69943,0,0,1,.67734-.15545.26644.26644,0,0,1,.05751.10312.45845.45845,0,0,1-.069.40015.85782.85782,0,0,0-.11453.86484,1.9254,1.9254,0,0,1-.04257,1.11131.63939.63939,0,0,0-.36515.4c-.08042.27224-.35548.3881-.555.56474a5.38946,5.38946,0,0,0-.38948.42163c-.32669-.08-.43856-.46671-.77035-.53944A2.4042,2.4042,0,0,0,75.06838,35.886Z"/><path class="cls-278" d="M77.30259,36.348c-.05633-.04146-.09805-.10816-.07233-.16527.21473-.47678-.02385-.92735-.07364-1.388A.35777.35777,0,0,1,77.275,34.487a.64067.64067,0,0,0,.18189-.52648,5.14681,5.14681,0,0,0,1.267-1.75519,22.45872,22.45872,0,0,0,1.16475-2.58559,2.94636,2.94636,0,0,1,.3108-.57123c.066-.09338.12208-.25091.29271-.13344a3.69719,3.69719,0,0,1-.19454,1.18919,2.7785,2.7785,0,0,0-.16258,1.00481,10.11912,10.11912,0,0,1-.52172,1.46529.49052.49052,0,0,0-.236.24342c-.34934.754-.79455,1.46155-1.089,2.24222a.8309.8309,0,0,1-.236.34573,1.45449,1.45449,0,0,0-.44148,1.0194A.516.516,0,0,0,77.30259,36.348Z"/><path class="cls-279" d="M88.78087,20.02016a12.543,12.543,0,0,0-2.3112-.84774,1.01573,1.01573,0,0,0-.16781-.20052c-.33268-.23589-.14937-.36736.09092-.49227A3.5919,3.5919,0,0,1,88.043,18.883c.693.2965,1.40815.51219,2.11512.75889a12.55162,12.55162,0,0,1,3.2662,2.81,16.85853,16.85853,0,0,1,1.3965,2.1083,11.0896,11.0896,0,0,1,1.22163,4.01249,2.68882,2.68882,0,0,1,.00769,1.06037c-.27179.02914-.2664-.20375-.28466-.35059a12.67686,12.67686,0,0,0-.78807-2.93722,6.61515,6.61515,0,0,0-.55024-1.09131A14.75251,14.75251,0,0,0,92.828,23.05574a10.7847,10.7847,0,0,0-3.64851-2.75823C89.02721,20.2303,88.86244,20.18652,88.78087,20.02016Z"/><path class="cls-280" d="M90.167,19.71185a8.26141,8.26141,0,0,1-1.16641-.3306,18.45416,18.45416,0,0,0-2.60785-.90162c-.01826-.05726-.06965-.1459-.04968-.167.21867-.23093-.00255-.36544-.1044-.52612.99737.06262,1.93758.43576,2.92754.53859a.26866.26866,0,0,1,.15407.15437,7.36,7.36,0,0,0,.80616.89915A.21316.21316,0,0,1,90.167,19.71185Z"/><path class="cls-281" d="M87.24017,23.25474a6.40624,6.40624,0,0,0-1.30464-.49439c-.79419-.25682-1.595-.49313-2.39307-.738-.01578-.18343.07985-.23306.24892-.234a1.54384,1.54384,0,0,0,.67559-.15082c.76971.26531,1.56322.453,2.33829.70463a15.76928,15.76928,0,0,1,1.58272.628,8.70981,8.70981,0,0,1,1.8531,1.34317,16.79761,16.79761,0,0,1,2.28862,2.2594c.12235.14614.1387.36678.334.456a10.03991,10.03991,0,0,1,1.46632,2.65348.27925.27925,0,0,1,.02281.25637c-.28632.06075-.34141-.1919-.41163-.35116a13.41754,13.41754,0,0,0-2.0375-2.72846,1.13789,1.13789,0,0,0-.29666-.24276,26.01539,26.01539,0,0,0-2.24377-2.0182,8.81254,8.81254,0,0,0-1.93525-1.218A.3866.3866,0,0,1,87.24017,23.25474Z"/><path class="cls-282" d="M94.32724,29.95556A13.457,13.457,0,0,0,92.93093,27.203a.66729.66729,0,0,1-.06718-.17429,5.588,5.588,0,0,1,1.31158,1.71142,3.50483,3.50483,0,0,1,.61468,1.2154,5.41156,5.41156,0,0,1,.53907,1.84837,5.52537,5.52537,0,0,0,.39776,1.59032,11.61256,11.61256,0,0,0,.92031,2.67286,3.27231,3.27231,0,0,1,.1456.43471c-.10259.14076-.2054.039-.30814.00027L95.32889,33.8063c-.44037-1.1717-.66347-2.40587-1.03393-3.59772A.243.243,0,0,1,94.32724,29.95556Z"/><path class="cls-283" d="M88.78087,20.02016a10.64342,10.64342,0,0,1,3.84306,2.65638,13.26417,13.26417,0,0,1,1.56557,1.96295,11.56445,11.56445,0,0,1,1.42989,3.31956c.10735.39071.12682.80479.20928,1.20346.03468.16766.02626.36511.19354.48486.22732.11421.18185.34691.22129.53585a1.86158,1.86158,0,0,0,.1637.69657c.08916.35682.00421.75094.2311,1.07825v.53147a7.74276,7.74276,0,0,1-.64515-1.71509.52763.52763,0,0,0-.20243-.357c-.13244.02189-.1438-.08587-.163-.16625-.04764-.19956-.12143-.392-.158-.5943a11.66832,11.66832,0,0,0-2.59793-5.4544,17.22283,17.22283,0,0,0-3.03778-2.69713c-.1306-.09775-.30067-.15422-.35986-.33033-.27955-.21262-.40031-.57208-.71177-.75841C88.54087,20.2841,88.81527,20.15508,88.78087,20.02016Z"/><path class="cls-284" d="M89.47419,21.17505A11.98563,11.98563,0,0,1,91.29492,22.507a12.01112,12.01112,0,0,1,2.52875,2.80891A11.38946,11.38946,0,0,1,95.567,29.65749a6.72715,6.72715,0,0,0,.22374.76,10.69914,10.69914,0,0,0,.41686,1.886c.0442.27121.17.53008.19961.80974-.10373.0755-.13544.24689-.30777.231-.13-.72037-.4642-1.38342-.61-2.09543-.17133-.83672-.33823-1.67174-.56489-2.497a10.4245,10.4245,0,0,0-1.77119-3.38219,15.99624,15.99624,0,0,0-4.18675-3.73026c-.385-.25664-.82136-.41368-1.18718-.6952.09257-.04253.18253-.1.29074-.04671a1.62777,1.62777,0,0,0,.90257.11768C89.17482,20.99485,89.29589,21.16074,89.47419,21.17505Z"/><path class="cls-285" d="M96.4072,30.87979c-.2667-.26065-.18341-.635-.30516-.94309a2.6823,2.6823,0,0,1-.07983-.28933,11.35494,11.35494,0,0,0-1.2935-5.05066,18.76832,18.76832,0,0,0-1.32029-2.00987,14.55844,14.55844,0,0,0-3.24138-2.875.34343.34343,0,0,0-.175-.35161,1.69931,1.69931,0,0,1-.67168-.88075,7.40494,7.40494,0,0,1,2.59881,1.5056,10.56505,10.56505,0,0,1,3.19285,3.8747,11.54786,11.54786,0,0,1,1.072,4.12431c.03091.55681.14645,1.10892.22343,1.66318A2.69957,2.69957,0,0,0,96.4072,30.87979Z"/><path class="cls-286" d="M84.9291,23.63987a3.99873,3.99873,0,0,0-2.24662-.21162,3.43647,3.43647,0,0,0-1.18359.75993A18.39541,18.39541,0,0,0,78.97275,26.481c-.62764.68788-1.17905,1.44356-1.79542,2.13848a9.80387,9.80387,0,0,1-1.95469,2.02905c-.02486-.39586.25287-.70528.30814-1.07826a6.43989,6.43989,0,0,1,1.1497-1.44405,5.919,5.919,0,0,0,1.28944-1.4094,11.42389,11.42389,0,0,1,.92538-.95813A15.62982,15.62982,0,0,1,81.325,23.67087a9.04037,9.04037,0,0,1,1.17748-.787,1.52829,1.52829,0,0,1,.95846-.12461,4.742,4.742,0,0,1,1.8292.49574,1.07857,1.07857,0,0,0,.25524.07679c.13311.0948.30606.09955.43915.19582.10971.07935.24361.14124.19355.31724A4.22538,4.22538,0,0,1,84.9291,23.63987Z"/><path class="cls-287" d="M86.16167,23.794c-.13037-.2541-.48588-.20809-.61628-.46215a6.09749,6.09749,0,0,0,1.69478-.07706,3.35457,3.35457,0,0,1,1.361.6602,19.18626,19.18626,0,0,1,2.9156,2.50029,1.67187,1.67187,0,0,1,.11443.15128,6.32744,6.32744,0,0,1,1.54091,2.16c.16022.37559.43322.69309.59905,1.06725.09595.21647.24225.43055.12259.68816-.19414.081-.26293-.07971-.34767-.19031a3.45849,3.45849,0,0,0-.41133-.53012,18.04779,18.04779,0,0,0-3.96055-4.3117A8.07486,8.07486,0,0,0,86.6729,24.05,1.272,1.272,0,0,1,86.16167,23.794Z"/><path class="cls-288" d="M77.45648,33.88361a1.90491,1.90491,0,0,0-1.12879.64131,1.20957,1.20957,0,0,1-.56562.28283.59633.59633,0,0,0-.46259-.69327,1.93105,1.93105,0,0,1,.48567-1.46732A.79211.79211,0,0,0,76,32.25255a.4205.4205,0,0,1,.45519-.37162c.17325-.19393.34927-.31828.51935-.00009.075.1403.14317.08674.23259.016.08119-.06417.16136-.1769.2884-.06928a1.18093,1.18093,0,0,0,.40947.75557A2.05872,2.05872,0,0,1,77.45648,33.88361Z"/><path class="cls-289" d="M94.17335,32.651c.09285.49718.46962.91963.38537,1.46343-.25049-.44843-.50327-.89561-.74989-1.34616a.58866.58866,0,0,0-.25192-.2716c-.21723-.05983-.2725-.259-.35359-.42732a12.73846,12.73846,0,0,0-2.23515-3.14423,27.14363,27.14363,0,0,0-2.64506-2.39709,4.66825,4.66825,0,0,0-1.0499-.55521c-.7913-.36618-1.62806-.61875-2.42423-.97279a5.1958,5.1958,0,0,0-.7525-.52488c-.0833-.043-.19849-.08069-.16884-.21915a4.21907,4.21907,0,0,1,2.03509.44194,1.85955,1.85955,0,0,0,.81522.17421,3.63465,3.63465,0,0,1,1.66059.73249A20.07434,20.07434,0,0,1,92.43529,29.466c.17873.21941.39263.40532.561.63262a20.53878,20.53878,0,0,1,1.05868,2.07815A1.5619,1.5619,0,0,1,94.17335,32.651Z"/><path class="cls-290" d="M83.92764,24.256c.29635.24673.71535.32992.92443.693-.21873.1044-.47593-.03066-.68873.11126a2.02813,2.02813,0,0,0-2.35257.65867c-.6455.63473-1.34008,1.22984-1.921,1.92393a13.561,13.561,0,0,0-1.26612,1.963c-.41527.719-.77606,1.46666-1.16774,2.198l-.42425.3556c-.11891-.25654-.23792-.52355-.57646-.27858-.05972-.25035.13867-.38992.24722-.5662a.98007.98007,0,0,0,.215-.43505,6.03249,6.03249,0,0,0,.92026-1.57676,1.63354,1.63354,0,0,1,.40871-.63921c.47513-.42182.66972-1.04547,1.09757-1.5096a15.51924,15.51924,0,0,1,1.86965-1.8123,4.43293,4.43293,0,0,0,.67546-.56095A1.78223,1.78223,0,0,1,83.92764,24.256Z"/><path class="cls-291" d="M92.9406,30.10958a8.85134,8.85134,0,0,1-1.30087-1.44374q-.82153-.91447-1.71722-1.7482a9.13407,9.13407,0,0,0-1.93158-1.48549c-.3937-.20687-.808-.37459-1.213-.56-.32262-.39449-.82535-.46942-1.24459-.69046a1.23859,1.23859,0,0,1-.60426-.54185,3.67852,3.67852,0,0,1,1.23257.15408,8.11872,8.11872,0,0,1,2.803,1.36856,21.42287,21.42287,0,0,1,2.65,2.44373,8.4772,8.4772,0,0,1,1.55724,2.11793A.64361.64361,0,0,1,92.9406,30.10958Z"/><path class="cls-292" d="M92.09321,39.50593a1.56537,1.56537,0,0,0-1.23258-.616c-.21089-.015-.19451-.19706-.23239-.32989-.038-.13321-.02818-.30061-.15735-.37454a1.34022,1.34022,0,0,1-.56157-.91171,5.31673,5.31673,0,0,0-.38389-.90751.17716.17716,0,0,1,.0878-.1922.64011.64011,0,0,0,.336-.58254c.148-.22089.26558-.044.36039.04521a5.39524,5.39524,0,0,1,.77565.82835,11.70052,11.70052,0,0,1,1.48613,2.0496c.095.16483.216.33262.06122.529C92.52771,39.28513,92.266,39.34369,92.09321,39.50593Z"/><path class="cls-293" d="M92.63265,39.04371a.84994.84994,0,0,0-.14876-.5016,14.43747,14.43747,0,0,0-1.46918-2.03992,1.17093,1.17093,0,0,1,.38556-.462,4.68237,4.68237,0,0,1,1.46367,1.5401,2.92611,2.92611,0,0,1,.46221.84749c.15407.35942-.06928.71878-.00018,1.07818C93.06789,39.39229,92.98138,39.02141,92.63265,39.04371Z"/><path class="cls-294" d="M81.53954,32.343a.37329.37329,0,0,0-.14949.25793c-.12671.85569-.69718,1.548-.877,2.38426-.01084.05042-.08458.08732-.12906.1305l-.15388-.07711a10.15539,10.15539,0,0,1,.44054-2.08775,12.6096,12.6096,0,0,1,.6331-2.04111,6.06861,6.06861,0,0,1,1.526-2.524,1.098,1.098,0,0,1,.68784-.28033,5.74941,5.74941,0,0,1,2.09091.5234,14.92549,14.92549,0,0,1,2.18035,1.11485,6.07489,6.07489,0,0,1,1.51252,1.40486,18.23646,18.23646,0,0,1,1.63525,1.92028.90861.90861,0,0,1,.23248.66061c-.53735-.52184-1.07268-1.0458-1.61423-1.56325a.48423.48423,0,0,0-.31177-.13107.18551.18551,0,0,1-.101-.05164c-1.1898-1.44969-2.90957-2.05121-4.53237-2.79013a1.72639,1.72639,0,0,0-2.2123,1.00987,11.80449,11.80449,0,0,1-.50991,1.20061,1.61671,1.61671,0,0,0-.17441.58535C81.69945,32.12633,81.70635,32.27874,81.53954,32.343Z"/><path class="cls-295" d="M79.61328,32.57438a4.65459,4.65459,0,0,1,.46259-1.46364,4.747,4.747,0,0,1,.48815-1.47426,11.82112,11.82112,0,0,1,1.63709-2.25659,1.6612,1.6612,0,0,1,1.63323-.55055A13.26141,13.26141,0,0,1,86.525,27.83126a8.08238,8.08238,0,0,1,3.11459,2.18434c.43615.48522.93971.90731,1.36258,1.40673a7.75852,7.75852,0,0,1,1.0026,1.46844c.07054.13724.20158.27527.08839.45352Q90.99,32.222,89.88623,31.10013a9.46881,9.46881,0,0,0-3.52576-2.38706,10.448,10.448,0,0,1-1.43259-.72547,2.81374,2.81374,0,0,0-1.79314-.34752,1.05158,1.05158,0,0,0-.73266.43317A11.36656,11.36656,0,0,0,80.939,30.39339a4.01851,4.01851,0,0,0-.17081.50691,22.12465,22.12465,0,0,1-1.46264,3.36823,2.10173,2.10173,0,0,1,.22129-.75239A1.05685,1.05685,0,0,0,79.61328,32.57438Z"/><path class="cls-296" d="M92.09321,33.34429a6.2045,6.2045,0,0,0-1.15534-1.84855.31655.31655,0,0,1,.13286-.41036c.1991-.07134.30791.074.42605.18466a7.56645,7.56645,0,0,1,1.30536,1.54549c.22061.35891.4982.67944.701,1.05024a7.621,7.621,0,0,1,.386.79243c.079.21872.21965.44572.05309.68859a6.61418,6.61418,0,0,0-1.464-1.463Z"/><path class="cls-297" d="M81.53954,32.343a8.08981,8.08981,0,0,1,.77952-2.18,2.08177,2.08177,0,0,1,1.50745-1.24222,1.72028,1.72028,0,0,1,1.12513.28885,19.70692,19.70692,0,0,1,3.3603,1.82485,3.18164,3.18164,0,0,1,.93122,1.00052,1.70129,1.70129,0,0,0-.00007,1.00116c-.235-.00447-.39259-.18435-.59585-.262a2.43549,2.43549,0,0,0-.86892-.79836c-.88021-.57681-1.83727-1.01524-2.76456-1.507a2.0667,2.0667,0,0,0-1.08125-.22483,1.19844,1.19844,0,0,0-.93279.70817A8.68858,8.68858,0,0,0,82.04227,33.89c-.17509.26323-.13926.63364-.42569.8405-.19434-.20265-.10186-.46821-.15409-.702A4.61423,4.61423,0,0,1,81.53954,32.343Z"/><path class="cls-298" d="M88.70384,32.80506c.26592-.12389.35793.15775.53925.23116.34936.3878.69646.77768,1.049,1.16258a13.23818,13.23818,0,0,1,1.10818,1.84135c-.03684.23049-.22128.33785-.38556.462-.322-.32084-.56109-.73157-1.00141-.92433-.14273.01711-.13594-.10154-.169-.1844A1.28075,1.28075,0,0,0,89.543,34.822c-.36078-.51219-.77651-.98038-1.17321-1.46409A1.41819,1.41819,0,0,1,88.70384,32.80506Z"/><path class="cls-277" d="M93.94225,35.34679a3.54723,3.54723,0,0,0-.539-1.46329.27461.27461,0,0,1,.21774-.0823c.1642.001.24026.12209.32127.23645.50762.84407.69531,1.82866,1.1821,2.68342.16978.29812.29193.62335.43583.9362.24222.63872.47922,1.2795.73041,1.91467a.97557.97557,0,0,1,.11679.47321c-.457-.66884-.75372-1.43257-1.23586-2.08647-.0746-.10118-.15183-.20043-.22784-.30057-.24487-.61814-.48474-1.23834-.738-1.853A3.88446,3.88446,0,0,0,93.94225,35.34679Z"/><path class="cls-299" d="M89.55123,36.348a2.27705,2.27705,0,0,1,.52538,1.11651c.08922.2471.15219.4781.42015.59364a.36117.36117,0,0,1,.21285.37363.6644.6644,0,0,0,.151.4581c-.62161.3614-1.08023.997-1.84632,1.11367-.96839.14755-1.93736.2927-2.90878.41788a1.382,1.382,0,0,1-.5639-.08586,9.25625,9.25625,0,0,0-1.83519-.35723c-.322-.03295-.5491-.27544-.85712-.31861.00181-.33587-.25133-.65209-.07722-1.00125a.23607.23607,0,0,1-.03263-.21654,12.48112,12.48112,0,0,0,.29392-1.60278c.02046-.13361.02036-.2835.16453-.36441.69282.01569,1.361.21927,2.05024.27025.34367.02542.68747.06125,1.03052.10226a1.73106,1.73106,0,0,0,1.22174-.37783,1.86915,1.86915,0,0,1,1.49639-.40092A.75989.75989,0,0,1,89.55123,36.348Z"/><path class="cls-300" d="M83.23413,36.50208a14.88446,14.88446,0,0,0-.29385,1.619,2.96607,2.96607,0,0,0-.16817.53747c-.14167-.12792-.29191-.24767-.42331-.38538-.32522-.34085-.64257-.158-.96333.00029L81.54,34.96256c.08954-.05622.0744-.147.07656-.232.1583-.26883.12435-.625.38524-.84725.25561-.06757.422.14379.6664.21209.018-.16237.05384-.32419.0552-.48028a5.89861,5.89861,0,0,1,.87785-2.34743.40246.40246,0,0,1,.442-.24094,3.01711,3.01711,0,0,1,1.188.27933c.922.52892,1.867,1.0185,2.75811,1.60017.16911.11038.35414.21523.40634.43816a6.7559,6.7559,0,0,1,1.54052,2.0025,1.642,1.642,0,0,1-.87384-.57435,17.54537,17.54537,0,0,0-2.86125-1.98234c-.31814-.21219-.65848-.396-.99411-.58359a.66374.66374,0,0,0-.61328-.00033c-1.00077.36922-1.06769,1.22767-1.191,2.09332-.09586.673-.04028,1.34909-.11905,2.01954A.38367.38367,0,0,1,83.23413,36.50208Z"/><path class="cls-301" d="M93.94225,34.03765c-.10665-.04364-.174-.16536-.308-.15479-.30216-.51843-.638-1.02047-.91859-1.547a7.22577,7.22577,0,0,0-1.3833-1.87737c-.87326-.8287-1.75522-1.65032-2.68147-2.42036A9.20463,9.20463,0,0,0,86.377,26.7631a15.85339,15.85339,0,0,0-2.36362-1.0138c-.09805-.02493-.19639-.07409-.19407-.20576.25557-.28036.56438-.14907.85162-.0929a4.51232,4.51232,0,0,1,.60625.23231,8.54289,8.54289,0,0,1-.83271-.36913c-.1221-.06786-.25308-.12971-.28576-.28762.20032-.30222.45639-.10368.69332-.07716.73281.225,1.43209.54076,2.152.79855a9.44807,9.44807,0,0,1,3.15895,2.252,14.07379,14.07379,0,0,1,1.71545,1.81118,9.628,9.628,0,0,1,1.3445,2.08238,5.51644,5.51644,0,0,0,.33392.60359,1.23121,1.23121,0,0,0,.05557.33536A4.37234,4.37234,0,0,1,93.94225,34.03765Z"/><path class="cls-302" d="M92.9406,30.10958a.47869.47869,0,0,1,.23129-.38541c.23868.06571.28231.30762.41451.468.088.10672.14172.24148.27881.3025.23146.1353.26514.39431.37285.60505.30771.602.47584,1.2606.74784,1.87772a.40762.40762,0,0,1,.03485.36675,5.64419,5.64419,0,0,0,.30814,1.46355,3.37165,3.37165,0,0,1-.60666-1.164c-.1514-.31987-.28524-.648-.43067-.97078-.02228-.04944-.06757-.07533-.11821-.0219Z"/><path class="cls-303" d="M95.02075,33.3442c-.37346-.9546-.71444-1.92235-1.15554-2.84952a1.71875,1.71875,0,0,0-.38143-1.0229,9.99693,9.99693,0,0,1-.70835-1.302,5.57814,5.57814,0,0,0-.9635-1.313,1.65511,1.65511,0,0,1-.18074-.29033c.4268.13283.58611.5472.86233.83518.29841.31111.55126.66572.82608.99964a3.68756,3.68756,0,0,1,.693,1.13412.7553.7553,0,0,0,.31459.42011c.32624,1.16984.65423,2.33921.9758,3.51033a1.74364,1.74364,0,0,1,.02585.34041C95.12052,33.72269,95.1571,33.47581,95.02075,33.3442Z"/><path class="cls-304" d="M83.85061,25.56526c1.16963.41118,2.26753.984,3.39089,1.49987a10.6697,10.6697,0,0,1,2.4004,1.69337c.5472.46472,1.0366.98705,1.57523,1.46a6.0493,6.0493,0,0,1,1.5766,2.0875,4.07494,4.07494,0,0,0,.41612.63893,2.65575,2.65575,0,0,1,.42445.93791l-.23106.00063a12.29769,12.29769,0,0,0-2.05206-2.63056c-.0771-.06772-.14523-.14456-.25905-.1422a16.69429,16.69429,0,0,0-3.06657-3.15593,5.63716,5.63716,0,0,0-1.72744-.82337,7.99974,7.99974,0,0,1-1.034-.41161,4.25133,4.25133,0,0,0-1.65342-.46777,1.7396,1.7396,0,0,0-1.27241.53673c-.42631.39-.78712.84093-1.18252,1.25936a2.73376,2.73376,0,0,0-.64953.80224l-.04523.02679a4.21843,4.21843,0,0,0-.802,1.54763,18.33611,18.33611,0,0,1-1.60189,3.09559.84709.84709,0,0,1-.60036.44014l-.00037-.07693a.47723.47723,0,0,1,.07307-.3644,1.6355,1.6355,0,0,0,.31249-.94508,1.73761,1.73761,0,0,1,.11177-.36241,38.13723,38.13723,0,0,1,2.08915-4.058,10.55437,10.55437,0,0,1,1.76345-1.91154,2.94456,2.94456,0,0,1,1.37118-.87409C83.44107,25.31749,83.68915,25.284,83.85061,25.56526Z"/><path class="cls-305" d="M81.07733,28.03a9.26763,9.26763,0,0,1,1.30243-1.406,1.9932,1.9932,0,0,1,1.99545-.34067c.4438.13573.85184.34568,1.28041.51054.61973.23841,1.2432.46373,1.84733.74413a4.54722,4.54722,0,0,1,1.32321.9672c.6921.70279,1.4357,1.356,2.05908,2.1259a.699.699,0,0,1,.20689.47967l-.15426.385c-1.18126-1.161-2.17133-2.55431-3.74551-3.24708a15.94074,15.94074,0,0,0-3.41342-1.33778,1.76132,1.76132,0,0,0-1.5963.62507c-.22469.39828-.59574.6658-.8411,1.03933a6.72152,6.72152,0,0,0-1.09838,2.11885,1.20927,1.20927,0,0,1-.16729.41661c-.12483-.11872-.07034-.25232-.03846-.38875.14357-.61439.28282-1.22978.42364-1.84481A8.58716,8.58716,0,0,1,81.07733,28.03Z"/><path class="cls-306" d="M83.85061,25.56526a1.49417,1.49417,0,0,0-1.5087.3067,20.24352,20.24352,0,0,0-2.01469,2.04585,6.00647,6.00647,0,0,0-.79845,1.29986c-.50588.99174-.98,1.99965-1.47059,2.99923-.06109.12445-.14358.23841-.21614.35723-.38983-.1259-.41808-.433-.38612-.77022a6.64912,6.64912,0,0,1,.89293-1.89733,13.095,13.095,0,0,1,1.27551-2.08516,9.92942,9.92942,0,0,1,1.97681-2.02117,4.2134,4.2134,0,0,0,.48347-.43534,1.56021,1.56021,0,0,1,2.07411-.33871L85.391,25.705a1.494,1.494,0,0,1-.6609-.14337A1.201,1.201,0,0,0,83.85061,25.56526Z"/><path class="cls-307" d="M83.23413,36.50208a.51187.51187,0,0,1-.06357-.17836,20.28912,20.28912,0,0,1,.29038-2.9961,1.32493,1.32493,0,0,1,.70381-.98809,3.97033,3.97033,0,0,0,.46429-.268.43847.43847,0,0,1,.53222.00058c.83715.51175,1.66614,1.0454,2.5104,1.53413.84587.48965,1.462,1.22657,2.26456,1.74064.00293.08458-.01341.17559.07708.231.11932.42065-.19881.579-.46207.77018-.33192-.25006-.74518-.09233-1.10377-.2191-.141-.04983-.25679.03426-.38217.11572a2.79811,2.79811,0,0,1-1.45873.7006A13.56359,13.56359,0,0,1,83.23413,36.50208Z"/><path class="cls-308" d="M88.3957,33.34439a25.267,25.267,0,0,0-3.33725-2.01065,3.32323,3.32323,0,0,0-1.0774-.21974.21212.21212,0,0,0-.26.11874c-.171.60552-.69374,1.05162-.78132,1.68554a7.42694,7.42694,0,0,0-.17355,1.35626l-.76439-.39125a5.85552,5.85552,0,0,1,.60666-2.33715,2.41861,2.41861,0,0,0,.21674-.40467A1.30362,1.30362,0,0,1,84.683,30.256a17.316,17.316,0,0,1,2.36618,1.17411,6.92509,6.92509,0,0,1,1.22556.7802c.18488.16375.44089.28551.4291.59473A.83488.83488,0,0,1,88.3957,33.34439Z"/><path class="cls-278" d="M81.07733,28.03a2.13447,2.13447,0,0,1-.61628.84721A1.37911,1.37911,0,0,1,81.07733,28.03Z"/></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215 127"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#400198;}.cls-3{fill:#ed1cb0;}.cls-4{fill:#e422b2;}.cls-5{fill:#e91fb1;}.cls-6{fill:#df26b3;}.cls-7{fill:#1eb6cf;}.cls-8{fill:#1db4d6;}.cls-9{fill:#ca35b8;}.cls-10{fill:#d42eb6;}.cls-11{fill:#cf32b7;}.cls-12{fill:#26b0ce;}.cls-13{fill:#d72cb5;}.cls-14{fill:#c538b8;}.cls-15{fill:#bb40bb;}.cls-16{fill:#da29b4;}.cls-17{fill:#c13cb9;}.cls-18{fill:#b544bc;}.cls-19{fill:#2aaad5;}.cls-20{fill:#af49be;}.cls-21{fill:#8964c5;}.cls-22{fill:#a94dbe;}.cls-23{fill:#826ac7;}.cls-24{fill:#a54fbf;}.cls-25{fill:#e026b1;}.cls-26{fill:#905fc3;}.cls-27{fill:#7b6fc8;}.cls-28{fill:#965ac2;}.cls-29{fill:#2aadcd;}.cls-30{fill:#9b58c2;}.cls-31{fill:#d034af;}.cls-32{fill:#d331b0;}.cls-33{fill:#d72db0;}.cls-34{fill:#db2ab0;}.cls-35{fill:#7077cb;}.cls-36{fill:#7573c9;}.cls-37{fill:#24b0d1;}.cls-38{fill:#35a2d4;}.cls-39{fill:#af49bb;}.cls-40{fill:#4a92d2;}.cls-41{fill:#4f8fce;}.cls-42{fill:#6b7bcb;}.cls-43{fill:#cb36b4;}.cls-44{fill:#5d85ce;}.cls-45{fill:#6380cd;}.cls-46{fill:#b743bb;}.cls-47{fill:#2eaacd;}.cls-48{fill:#38a3c9;}.cls-49{fill:#c43ab5;}.cls-50{fill:#667fc9;}.cls-51{fill:#4595d2;}.cls-52{fill:#a84ebc;}.cls-53{fill:#528cd0;}.cls-54{fill:#5887cf;}.cls-55{fill:#2ea7d5;}.cls-56{fill:#3a9ed3;}.cls-57{fill:#bb41ba;}.cls-58{fill:#9a58c2;}.cls-59{fill:#7475c3;}.cls-60{fill:#8f60c4;}.cls-61{fill:#32a7cb;}.cls-62{fill:#687fc3;}.cls-63{fill:#4099d4;}.cls-64{fill:#a450bf;}.cls-65{fill:#4698c9;}.cls-66{fill:#588bc5;}.cls-67{fill:#fcfcfc;}.cls-68{fill:#409dc8;}.cls-69{fill:#9f54c1;}.cls-70{fill:#955cc3;}.cls-71{fill:#5091c6;}.cls-72{fill:#d031b4;}.cls-73{fill:#8866c6;}.cls-74{fill:#c03cba;}.cls-75{fill:#6185c5;}.cls-76{fill:#7b6ec9;}.cls-77{fill:#6f79c6;}.cls-78{fill:#fefefe;}.cls-79{fill:#24b3cc;}.cls-80{fill:#da2ab2;}.cls-81{fill:#20b5ca;}.cls-82{fill:#25b1cb;}.cls-83{fill:#cc34b4;}.cls-84{fill:#d131b3;}.cls-85{fill:#29aecc;}.cls-86{fill:#26b2c7;}.cls-87{fill:#cb37af;}.cls-88{fill:#c53bb4;}.cls-89{fill:#bb42b6;}.cls-90{fill:#bf3eb5;}.cls-91{fill:#b546b6;}.cls-92{fill:#b04ab8;}.cls-93{fill:#2ea9d1;}.cls-94{fill:#aa4db9;}.cls-95{fill:#8d64bc;}.cls-96{fill:#8966be;}.cls-97{fill:#8568c2;}.cls-98{fill:#7e6dc4;}.cls-99{fill:#a155ba;}.cls-100{fill:#945ebb;}.cls-101{fill:#7673c4;}.cls-102{fill:#9a5aba;}.cls-103{fill:#2eaec3;}.cls-104{fill:#28b2c4;}.cls-105{fill:#7078c5;}.cls-106{fill:#6a7cc7;}.cls-107{fill:#32a6d1;}.cls-108{fill:#37a1d0;}.cls-109{fill:#b249b4;}.cls-110{fill:#ab4db9;}.cls-111{fill:#4d92ca;}.cls-112{fill:#4498ce;}.cls-113{fill:#4796ca;}.cls-114{fill:#528fc9;}.cls-115{fill:#5b87c9;}.cls-116{fill:#6182c9;}.cls-117{fill:#b944b3;}.cls-118{fill:#33a8c6;}.cls-119{fill:#38a6c2;}.cls-120{fill:#3da1c4;}.cls-121{fill:#c33daf;}.cls-122{fill:#bf3fb5;}.cls-123{fill:#6383c4;}.cls-124{fill:#409bd0;}.cls-125{fill:#a254bb;}.cls-126{fill:#a652b6;}.cls-127{fill:#568acc;}.cls-128{fill:#3ba0cd;}.cls-129{fill:#9a5abb;}.cls-130{fill:#9e57b9;}.cls-131{fill:#7e6fc0;}.cls-132{fill:#6d7ebd;}.cls-133{fill:#7a74ba;}.cls-134{fill:#747aba;}.cls-135{fill:#9160bc;}.cls-136{fill:#8b65bf;}.cls-137{fill:#6684bb;}.cls-138{fill:#4a97c1;}.cls-139{fill:#449cc1;}.cls-140{fill:#6088bb;}.cls-141{fill:#5491bf;}.cls-142{fill:#5b8bbf;}.cls-143{fill:#8469c1;}.cls-144{fill:#21b7c5;}.cls-145{fill:#24b5c5;}.cls-146{fill:#2dadc5;}.cls-147{fill:#25b6c1;}.cls-148{fill:#2faebe;}.cls-149{fill:#c63bb0;}.cls-150{fill:#c13fb0;}.cls-151{fill:#bd41b3;}.cls-152{fill:#b945b3;}.cls-153{fill:#b549ae;}.cls-154{fill:#ad4eb3;}.cls-155{fill:#a651b7;}.cls-156{fill:#8f64b6;}.cls-157{fill:#816ebe;}.cls-158{fill:#8869ba;}.cls-159{fill:#7973bf;}.cls-160{fill:#a357b0;}.cls-161{fill:#9e5ab3;}.cls-162{fill:#965fb5;}.cls-163{fill:#32aeb8;}.cls-164{fill:#2bb2ba;}.cls-165{fill:#33abbe;}.cls-166{fill:#27b5be;}.cls-167{fill:#6e7bc1;}.cls-168{fill:#7477bd;}.cls-169{fill:#6a7ec0;}.cls-170{fill:#37a4c8;}.cls-171{fill:#31a9c9;}.cls-172{fill:#b14dad;}.cls-173{fill:#ac4eb3;}.cls-174{fill:#4e94c3;}.cls-175{fill:#4b95c6;}.cls-176{fill:#429bca;}.cls-177{fill:#4599c6;}.cls-178{fill:#548fc3;}.cls-179{fill:#578bc6;}.cls-180{fill:#5b8ac2;}.cls-181{fill:#bd43ae;}.cls-182{fill:#bf40b0;}.cls-183{fill:#3aa7bb;}.cls-184{fill:#40a1bd;}.cls-185{fill:#6385c0;}.cls-186{fill:#a257b2;}.cls-187{fill:#a853af;}.cls-188{fill:#3e9fc7;}.cls-189{fill:#945fb9;}.cls-190{fill:#9c5bb4;}.cls-191{fill:#846cb8;}.cls-192{fill:#806fb9;}.cls-193{fill:#6b83b3;}.cls-194{fill:#6f7eb7;}.cls-195{fill:#7b76b3;}.cls-196{fill:#7778b6;}.cls-197{fill:#737db1;}.cls-198{fill:#8a68b8;}.cls-199{fill:#8e65b5;}.cls-200{fill:#6487b5;}.cls-201{fill:#469dbb;}.cls-202{fill:#4d97bb;}.cls-203{fill:#5b8db7;}.cls-204{fill:#5492b9;}.cls-205{fill:#21bac0;}.cls-206{fill:#34a9c5;}.cls-207{fill:#20bbba;}.cls-208{fill:#25b8b9;}.cls-209{fill:#2bb2bb;}.cls-210{fill:#39abb2;}.cls-211{fill:#30b0b5;}.cls-212{fill:#39a7bb;}.cls-213{fill:#a754af;}.cls-214{fill:#9265af;}.cls-215{fill:#8a69b4;}.cls-216{fill:#7e73b8;}.cls-217{fill:#856cb7;}.cls-218{fill:#7778b8;}.cls-219{fill:#9e5cac;}.cls-220{fill:#a458ab;}.cls-221{fill:#9b5eb0;}.cls-222{fill:#39a9b3;}.cls-223{fill:#2eb3b2;}.cls-224{fill:#34b0ad;}.cls-225{fill:#27b8b6;}.cls-226{fill:#707db9;}.cls-227{fill:#6b82b8;}.cls-228{fill:#aa53ab;}.cls-229{fill:#4a99bd;}.cls-230{fill:#5194b9;}.cls-231{fill:#439ebf;}.cls-232{fill:#598eba;}.cls-233{fill:#6189ba;}.cls-234{fill:#43a1b8;}.cls-235{fill:#41a4b2;}.cls-236{fill:#995fb1;}.cls-237{fill:#8071b5;}.cls-238{fill:#896ab2;}.cls-239{fill:#6d82b0;}.cls-240{fill:#6687af;}.cls-241{fill:#6c85a7;}.cls-242{fill:#7979ad;}.cls-243{fill:#7280a8;}.cls-244{fill:#8e69ab;}.cls-245{fill:#9364ae;}.cls-246{fill:#618dad;}.cls-247{fill:#5e8db1;}.cls-248{fill:#4a9bb6;}.cls-249{fill:#4f99b4;}.cls-250{fill:#5895ab;}.cls-251{fill:#5495b1;}.cls-252{fill:#21bcb5;}.cls-253{fill:#26bab2;}.cls-254{fill:#2cb5b2;}.cls-255{fill:#3daca6;}.cls-256{fill:#32b3a9;}.cls-257{fill:#40a3b8;}.cls-258{fill:#32b1af;}.cls-259{fill:#40a7ae;}.cls-260{fill:#9a60aa;}.cls-261{fill:#9465a9;}.cls-262{fill:#866eaf;}.cls-263{fill:#7e74b2;}.cls-264{fill:#767bb2;}.cls-265{fill:#3fa8ac;}.cls-266{fill:#39adab;}.cls-267{fill:#28b9ad;}.cls-268{fill:#30b4aa;}.cls-269{fill:#35b2a6;}.cls-270{fill:#22beb0;}.cls-271{fill:#6d82b1;}.cls-272{fill:#6588b4;}.cls-273{fill:#4a9cb6;}.cls-274{fill:#5099b0;}.cls-275{fill:#5793b2;}.cls-276{fill:#5f8db1;}.cls-277{fill:#47a0b0;}.cls-278{fill:#45a5a8;}.cls-279{fill:#8373a9;}.cls-280{fill:#856fae;}.cls-281{fill:#6789a6;}.cls-282{fill:#6887ac;}.cls-283{fill:#7e77a9;}.cls-284{fill:#777ca8;}.cls-285{fill:#886fa9;}.cls-286{fill:#5d91ab;}.cls-287{fill:#618fa5;}.cls-288{fill:#4f9bad;}.cls-289{fill:#5598a5;}.cls-290{fill:#5299a8;}.cls-291{fill:#5b93a5;}.cls-292{fill:#26bcab;}.cls-293{fill:#2cb7ac;}.cls-294{fill:#39afa2;}.cls-295{fill:#41a9a3;}.cls-296{fill:#44a4a9;}.cls-297{fill:#33b4a1;}.cls-298{fill:#2db8a6;}.cls-299{fill:#23bfa9;}.cls-300{fill:#2abaa6;}.cls-301{fill:#509da5;}.cls-302{fill:#5b92ab;}.cls-303{fill:#638caa;}.cls-304{fill:#49a1a6;}.cls-305{fill:#45a5a3;}.cls-306{fill:#4e9da7;}.cls-307{fill:#24c0a3;}.cls-308{fill:#2eb9a1;}</style></defs><title>babylon_featured_logo</title><rect class="cls-1" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g id="lZQzip.tif"><path class="cls-2" d="M105.41242,102.38161l-.00032,1.63174c-.0627.13341.00024.28369-.05621.41793a11.38311,11.38311,0,0,1-2.01033,5.06153,11.067,11.067,0,0,1-3.3906,3.02011,10.84647,10.84647,0,0,1-4.08857,1.32846c-.1868.06553-.38843-.017-.57433.05755l-1.089-.00025c-.20941-.07879-.43384.01163-.64415-.05713a10.19579,10.19579,0,0,1-3.70134-1.065c-.48065-.24244-.92492-.557-1.38588-.83845-.06063-.037-.09079-.14074-.18466-.10308-.11421.04582-.06434.15491-.06525.2351-.00276.24289.00733.48591.01241.72888-.04373.09358-.13.06517-.20175.06525q-2.00022.00226-4.00042.00105a.2189.2189,0,0,1-.17784-.05013q.00179-12.68058.00359-25.36114c.00007-.49836.00007-.49838.51672-.49839,1.14195,0,2.28413.01292,3.42569-.00811.33035-.00608.43083.06512.428.416-.01821,2.2576-.00931,4.51543-.00931,6.77318v.49616a11.05883,11.05883,0,0,1,5.10888-2.07265c.13193-.05882.28125.00852.4123-.0568l.5892-.02108a2.452,2.452,0,0,1,.76686.00027l.58451.02113c.13295.06326.28351-.00195.417.05717a11.59144,11.59144,0,0,1,3.62542,1.17991,10.5452,10.5452,0,0,1,5.46726,7.37007c.05888.28588.11169.573.16732.85955C105.4121,102.10265,105.3474,102.25077,105.41242,102.38161Z"/><path class="cls-2" d="M34.63653,86.95277l4.29235-.00054c.09161.12769.04478.27327.045.40941.00339,2.27909.00048,4.5582.00786,6.83726.00039.12039-.097.284.08547.36982A10.467,10.467,0,0,1,43.578,92.65287c.17488-.0308.34953-.0629.52429-.09438.12944-.05756.27686.01345.40456-.05657l.59672-.02a2.09239,2.09239,0,0,1,.68969-.00017l.59843.01974c.12693.0712.27387-.00048.4028.05643a11.00511,11.00511,0,0,1,4.67914,1.79236,10.4814,10.4814,0,0,1,4.49119,6.91367c.05776.31192.11043.6248.16546.93723.06769.21176-.0209.43721.05681.64808a2.5436,2.5436,0,0,0,.00035.69962c-.07312.18609.00488.38662-.0549.574a10.76306,10.76306,0,0,1-2.32311,5.73583,10.60091,10.60091,0,0,1-6.22918,3.81747,13.59407,13.59407,0,0,1-2.67368.22263c-.18573-.07349-.38628.00608-.57316-.05551a10.43588,10.43588,0,0,1-5.25691-2.01274c-.22287.18028-.09238.42551-.08856.63086.00576.31021-.07424.41724-.40251.41178-1.18-.01964-2.36055-.00755-3.54089-.00779-.45637-.00009-.45687-.00053-.45688-.45163q-.00017-11.04411-.00007-22.08823c0-1.0005-.00178-2.001.00227-3.00152C34.59038,87.2003,34.54594,87.06672,34.63653,86.95277Z"/><path class="cls-2" d="M70.59875,92.56a11.608,11.608,0,0,1,3.789,1.26288c.427.24032.83354.51681,1.28941.80181a3.2784,3.2784,0,0,0,.01372-1.00883c.02837-.10709.118-.07834.18769-.07842q2.02682-.00267,4.05362-.00136a.21665.21665,0,0,1,.14177.04475l-.00015,19.23937c-1.44837.09646-2.898.03169-4.347.03046-.0119,0-.02376-.04231-.03565-.06486.03551-.3164.15843-.77168-.03968-.91009-.21749-.15194-.50493.23574-.75607.39269a10.241,10.241,0,0,1-3.92419,1.482c-.176.02672-.35093.05994-.52637.09015-.18449.06812-.38468-.01774-.5684.05795l-1.17047,0c-.21022-.07641-.43394.0082-.64534-.05409a9.69788,9.69788,0,0,1-3.54018-.98888,10.61343,10.61343,0,0,1-3.67078-2.958,11.10393,11.10393,0,0,1-2.09314-4.33279c-.093-.37677-.13-.75531-.18841-1.13379-.05411-.13074.01294-.2778-.05476-.40671l.00085-1.71014c.06237-.13445-.00032-.28595.05741-.421a9.69545,9.69545,0,0,1,1.34064-4.07919,10.37686,10.37686,0,0,1,5.04614-4.46406,13.59363,13.59363,0,0,1,2.94821-.79295c.13132-.05309.27845.01255.40795-.05428l.59309-.02042a2.07215,2.07215,0,0,1,.68971,0l.58835.02142C70.31706,92.5682,70.46642,92.50184,70.59875,92.56Z"/><path class="cls-2" d="M136.22286,101.739a10.55646,10.55646,0,0,1,2.44338-5.48159,10.26677,10.26677,0,0,1,6.4419-3.61265c.12549-.01986.2484-.05608.37252-.08468.13471-.057.28572.00589.41964-.057l.659-.02133a1.60255,1.60255,0,0,1,.61285.001l.58664.02047c.13217.06357.28091.00119.41442.05453a11.17161,11.17161,0,0,1,4.92871,1.94918c.12262-.01494.18515.05812.23.157a11.48323,11.48323,0,0,1,2.37081,2.52474,10.21138,10.21138,0,0,1,1.71935,4.44978c.01946.13779.05893.27275.08909.409.05146.13548-.00713.28517.05419.41937l.00014,1.46681c-.06137.13448-.00271.28456-.05466.42026a11.2611,11.2611,0,0,1-1.86152,4.91853,11.06171,11.06171,0,0,1-4.001,3.49915,10.90974,10.90974,0,0,1-3.62934,1.0724c-.21173.06282-.43585-.02183-.64644.05434l-1.01887.00044c-.23463-.08194-.48355.01422-.719-.05762a10.64855,10.64855,0,0,1-9.41034-9.17862c-.06328-.12961.01014-.279-.05913-.40779l-.02026-.43963a6.29627,6.29627,0,0,1-.00059-1.2288l.01948-.44508C136.23691,102.015,136.161,101.8669,136.22286,101.739Z"/><path class="cls-3" d="M108.10551,24.18116A19.04342,19.04342,0,0,1,109.618,19.0384a20.56281,20.56281,0,0,1,3.31319-5.17462c.058-.0676.128-.12492.19239-.187a.58705.58705,0,0,1,.30652-.35745,18.23673,18.23673,0,0,1,1.928-1.783.609.609,0,0,1,.28754-.21982l.63689-.47672c.06835-.11283.201-.138.29477-.21626a19.95434,19.95434,0,0,1,5.77059-2.78765.43228.43228,0,0,0,.09747-.06037c.09611-.08387.20175-.03963.30525-.02284a5.07713,5.07713,0,0,1,.36456,1.6745c.151,1.37575.37846,2.73751.65136,4.09323.06239.30994.12178.61909.19791.96579.2284-.13609.22764-.356.33537-.50349.09127-.125.17341-.26722.36041-.23759.18012.02855.24682.16669.28139.32576a8.05405,8.05405,0,0,1,.20257,3.34968,2.66144,2.66144,0,0,0-.01076.91779,6.59283,6.59283,0,0,1-.13906,1.71245,21.01406,21.01406,0,0,1-.59418,3.3667c-.15548.54323-.2648.61154-.82409.68574a21.8299,21.8299,0,0,0-3.85755.58227,23.657,23.657,0,0,1-2.935.77053c-1.03225.19041-2.07612.31678-3.11833.41641-1.19354.11409-2.38765.20907-3.57118.40622a3.20552,3.20552,0,0,0-1.11469.40294c-.39873.23506-.60487.14073-.71986-.31493-.11921-.47236-.16719-.96034-.30723-1.42885A1.117,1.117,0,0,1,108.10551,24.18116Z"/><path class="cls-2" d="M170.976,92.48275l.58774.02046c.13173.064.28022.001.41332.05454a11.1725,11.1725,0,0,1,4.92872,1.94918c.12263-.01494.18515.05812.23.157a11.48038,11.48038,0,0,1,2.3709,2.52482,10.21276,10.21276,0,0,1,1.71959,4.44975,1.54145,1.54145,0,0,0,.08058.25287.22939.22939,0,0,1,.05237.16618.73794.73794,0,0,0,.00993.40828q.002,5.17333.00394,10.34666c-.11124.09873-.2459.05-.36866.05044-1.116.00426-2.23216-.009-3.34783.00986-.31466.00533-.408-.0757-.40676-.3992.01219-3.15484.00781-6.30975.00589-9.46463a1.19973,1.19973,0,0,0-.03-.45689,6.52161,6.52161,0,0,0-3.58673-5.22192,6.08072,6.08072,0,0,0-2.17483-.68356c-.15521-.07359-.32837.006-.48484-.0568l-.61966-.00051c-.155.06482-.32791-.01827-.48157.058a4.26881,4.26881,0,0,0-1.75677.42321,6.52565,6.52565,0,0,0-3.73969,3.95482,1.25874,1.25874,0,0,0-.03719.22353,1.01223,1.01223,0,0,0-.03018.41834q-.00264,5.38994-.00155,10.77989c0,.41716-.00091.418-.4118.41816-1.20657.00043-2.41328-.00941-3.61963.00708-.29077.004-.36373-.079-.36335-.36573q.01226-9.29764-.00054-18.59531c-.00044-.30609.08376-.38661.38565-.38242q1.82877.02544,3.658-.0003c.2999-.00433.38945.09348.35491.37275a2.0816,2.0816,0,0,0,.00108.42292c.00653.07974.03607.155.14608.11113a12.10607,12.10607,0,0,1,1.51035-.93027.21345.21345,0,0,1,.22648-.09535c.08646-.08622.24858.00183.31277-.13571a.20878.20878,0,0,1,.22666-.09361l1.54193-.45154a.20231.20231,0,0,1,.2437-.04837l.75951-.121c.13151-.05807.28029.0096.4107-.05644l.59077-.02112A2.04541,2.04541,0,0,1,170.976,92.48275Z"/><path class="cls-2" d="M110.80912,119.22141q1.101-2.6006,2.202-5.20118c.20717-.48933.41254-.97944.62317-1.46727a.44549.44549,0,0,0-.01-.40023c-.5558-1.17222-1.0978-2.351-1.65525-3.52245-.54807-1.15167-1.1181-2.293-1.66239-3.4464-.53858-1.14134-1.04855-2.29617-1.58682-3.43768-.5224-1.10784-1.10178-2.19026-1.58832-3.31322-.51253-1.183-1.112-2.3238-1.6277-3.50481-.2036-.46627-.45856-.91047-.63115-1.40686,1.52426,0,3.02608.00276,4.52787-.00345a.3571.3571,0,0,1,.38162.23425q2.01563,4.32179,4.04609,8.63667c.67916,1.44332,1.37116,2.88058,2.05344,4.32246a.34623.34623,0,0,0,.135.181c.398-.93367.79593-1.86114,1.18884-2.79074.46761-1.10636.9283-2.21566,1.39686-3.32163.38072-.89869.77272-1.79262,1.1523-2.69179.46721-1.10675.92695-2.21666,1.38944-3.3254.1476-.35384.30266-.705.43619-1.06407a.25849.25849,0,0,1,.29272-.17794c1.42488.00128,2.84979.00606,4.2746-.00277.388-.00241.18142.225.13284.34162-.58851,1.41215-1.18988,2.81893-1.78593,4.22794q-1.64718,3.89383-3.29287,7.78828c-.96233,2.27075-1.93428,4.53744-2.89327,6.80959-.93871,2.22409-1.86642,4.45281-2.799,6.67951-.07529.07089-.16938.04616-.25636.04625-1.38334.00146-2.76668.00417-4.15-.005C110.99384,119.40531,110.74847,119.52949,110.80912,119.22141Z"/><path class="cls-4" d="M104.40436,15.7113a9.72922,9.72922,0,0,1,1.07941,1.77089c.37952,2.434.8474,4.8511,1.38458,7.2551.23236,1.03988.52955,2.06343.77838,3.0983a1.06754,1.06754,0,0,0,1.00368.90079c1.0857.12054,2.14446.39755,3.22979.51729.867.09565,1.73753.13786,2.60645.19994,1.11068.07934,2.22544.00787,3.33963.05847a11.36973,11.36973,0,0,0,2.14325-.17673c1.22033-.179,2.45-.2313,3.67574-.3382.75336-.0657,1.5106-.09005,2.25855-.217a1.32551,1.32551,0,0,0,.65474-.30225,7.85559,7.85559,0,0,0,2.17918-2.99069,8.74582,8.74582,0,0,0,.2993-1.73971,8.56519,8.56519,0,0,0-.20349-3.05462c-.54855-3.39645-1.29737-6.75407-1.98865-10.12282a3.84919,3.84919,0,0,0-.618-1.75573,1.91816,1.91816,0,0,1-.24025-1.03876.7167.7167,0,0,0-.38049-.61708c.08346-.097.21035-.04319.30857-.0889.12731-.0632.27536.0134.40122-.05951l.29225-.01824c.31089-.07614.633.02978.94318-.05835l1.49352.00081c.31346.0851.63795-.01643.95214.05632l-.00682.02572a.62359.62359,0,0,1,.1485.34794c.54487,2.27087,1.001,4.5644,1.616,6.81618.31761,1.163.601,2.33124.86147,3.50572a5.991,5.991,0,0,1,.19829,2.43576.67474.67474,0,0,0,.0383.3791,2.07008,2.07008,0,0,1,.07913,1.1021,20.78858,20.78858,0,0,0-.13777,2.16187,9.80274,9.80274,0,0,1-2.78369,6.72779,10.86767,10.86767,0,0,1-1.92378,1.646,2.58061,2.58061,0,0,1-.94221.30048,10.54388,10.54388,0,0,0-1.78057.14844.16694.16694,0,0,1-.0762.0084c-1.00624-.136-2.008.21928-3.01777.02143a1.76573,1.76573,0,0,0-.83694.06885,3.38971,3.38971,0,0,1-1.29915.03958,1.25374,1.25374,0,0,0-.79279-.01767.47864.47864,0,0,1-.34034-.00558,2.832,2.832,0,0,0-1.29419-.07036,9.74052,9.74052,0,0,1-3.95844-.27935c-1.28946-.42113-2.648-.47565-3.92582-.91149a5.72982,5.72982,0,0,1-2.86508-1.91321,1.444,1.444,0,0,1-.24188-.43406,43.99708,43.99708,0,0,1-2.02107-8.83215c-.141-1.40228-.29239-2.80366-.4259-4.20676C104.25612,15.92726,104.20252,15.76342,104.40436,15.7113Z"/><path class="cls-5" d="M125.60614,7.15852c.334-.04964.44222.10351.46852.42956a2.73972,2.73972,0,0,0,.533,1.63842c.32663.39387.26146.948.36642,1.429.39118,1.79269.75765,3.591,1.11329,5.39114.36267,1.83589.67805,3.68076,1.009,5.52239a9.689,9.689,0,0,1-.15082,3.56582,5.94459,5.94459,0,0,1-1.47962,2.61c-.082.09806-.19606.1715-.26862.275a2.7822,2.7822,0,0,1-2.32588,1.01306c-1.67713.12281-3.35476.2187-5.02712.4294a10.09409,10.09409,0,0,1-2.58783.12679c-.726-.09453-1.4719.02294-2.21141-.013a28.35478,28.35478,0,0,1-4.97651-.51966c-.60516-.13825-1.23554-.137-1.8369-.32228a.8218.8218,0,0,1-.61118-.609c-.50159-1.75511-.92218-3.52925-1.27681-5.31937-.22026-1.1118-.44565-2.22266-.65441-3.33663-.10541-.56253-.18158-1.13065-.26442-1.6972a.30353.30353,0,0,1,.0589-.28981,27.37527,27.37527,0,0,1,1.3355,2.69419c.03969.10518.16076.17715.12746.31212a32.58288,32.58288,0,0,1,.948,3.76744c.15772.20248.05231.459.13885.67607a6.49762,6.49762,0,0,1,.31029,1.37543c.09965.445.20245.49741.59626.27425a5.34532,5.34532,0,0,1,1.75183-.50721,14.50255,14.50255,0,0,1,1.60607-.17717,5.27,5.27,0,0,1,1.29524-.13348,1.817,1.817,0,0,0,.97131-.13538,2.02351,2.02351,0,0,1,.7164-.08442,14.13442,14.13442,0,0,0,3.63991-.71728,19.1927,19.1927,0,0,1,2.241-.57,9.82731,9.82731,0,0,1,1.05-.11654,2.6934,2.6934,0,0,0,1.16143-.146c.01119-.00627.02429-.01878.034-.01669.91757.19757.891-.55369,1.02257-1.07177a11.68384,11.68384,0,0,0,.36774-2.10232,12.89731,12.89731,0,0,1,.17056-1.56984c.15435-.79639-.04244-1.5773.136-2.37582a7.18116,7.18116,0,0,0-.27341-2.862.23041.23041,0,0,0-.177-.18067c-.11082-.03782-.1466.05865-.21013.1212-.15509.15269-.11749.39058-.26066.54584-.06535.07086-.08659.22694-.20915.181a.33072.33072,0,0,1-.16927-.23691c-.07681-.84944-.3084-1.67088-.44584-2.50925-.09208-.56173-.13436-1.1322-.24168-1.686a9.44422,9.44422,0,0,0-.3478-2.02733,1.38587,1.38587,0,0,1-.02829-.45785l.01093-.04942c.7478-.16168,1.49455-.32854,2.24412-.48156A5.36662,5.36662,0,0,1,125.60614,7.15852Z"/><path class="cls-6" d="M120.1343,32.65112a6.38178,6.38178,0,0,0,1.51764-.12865c.52566-.15559,1.08742.09262,1.639.05314a1.22157,1.22157,0,0,0,.66694-.11847.56742.56742,0,0,1,.37383-.02619,2.20881,2.20881,0,0,0,1.38392-.07044.746.746,0,0,1,.41369.0198.74566.74566,0,0,0,.625-.058c.18866-.1304.38213.05149.59393.0033a4.068,4.068,0,0,0,1.74195-1.06385,12.58324,12.58324,0,0,0,2.67706-3.41047,7.4936,7.4936,0,0,0,.69578-2.33112,7.57262,7.57262,0,0,0,.19148-1.57514,6.34588,6.34588,0,0,0,.05565-1.83495c-.078-.24927.19046-.509.14126-.807a2.23962,2.23962,0,0,0-.13041-.81843c-.12336-.22556.01836-.49877.044-.75126a5.74362,5.74362,0,0,0-.16118-1.56459,19.44289,19.44289,0,0,0-.61712-2.83256c-.28438-.85129-.48483-1.71675-.69585-2.58192-.44076-1.80708-.85644-3.62029-1.27906-5.43176a1.881,1.881,0,0,1-.0215-.30615A15.98507,15.98507,0,0,1,132.845,7.479a.50148.50148,0,0,1,.13081.23158,49.688,49.688,0,0,1,2.01791,8.4048,18.21828,18.21828,0,0,1,.27926,2.63092.76591.76591,0,0,0,.10263.36755.50529.50529,0,0,1,.05306.40814,2.02686,2.02686,0,0,0-.08194.91352,9.35413,9.35413,0,0,0,.10765,2.02284.241.241,0,0,1,.00743.11458,33.91307,33.91307,0,0,1-1.62343,7.27583,9.70686,9.70686,0,0,1-1.38024,2.07526,9.48749,9.48749,0,0,1-2.71467,2.467,4.50315,4.50315,0,0,1-1.35042.53045,3.08355,3.08355,0,0,1-1.276.07831,1.11311,1.11311,0,0,0-.74571.13083.56453.56453,0,0,1-.41165.03573,3.51367,3.51367,0,0,0-1.73081.059,3.571,3.571,0,0,1-2.00817-.04747,4.346,4.346,0,0,0-1.90189-.05094.879.879,0,0,1-.59233-.04171.75263.75263,0,0,0-.40915-.09023c-1.2409.05239-2.46072-.201-3.69449-.25138a2.50064,2.50064,0,0,0-.30847-.05935,19.87577,19.87577,0,0,1-5.66911-1.2823,1.31418,1.31418,0,0,1-.3671-.20423.56291.56291,0,0,0-.3023-.17487,6.69961,6.69961,0,0,1-3.33281-4.03482c-.38037-1.32939-.76285-2.65991-1.0232-4.016-.18022-.93879-.2569-1.89952-.38408-2.84985-.09-.67233-.13218-1.349-.20538-2.02275a.45857.45857,0,0,1,.07613-.39964c.2335.01019.24471.19.25938.35439.10708,1.2.2803,2.39105.45046,3.58347a26.43026,26.43026,0,0,0,1.07152,4.44272,7.53319,7.53319,0,0,0,1.2159,2.51222,6.109,6.109,0,0,0,3.85119,2.11473.40553.40553,0,0,0,.19119-.00021,6.8954,6.8954,0,0,1,2.77067.03242,44.72289,44.72289,0,0,0,5.25789.1827.97314.97314,0,0,0,.54036-.17747C119.84031,32.65729,119.96677,32.5574,120.1343,32.65112Z"/><path class="cls-7" d="M103.34009,72.70127c-.83063-.32459-1.63712-.70182-2.44339-1.0828A33.43745,33.43745,0,0,1,97.641,69.97632a8.83717,8.83717,0,0,1-.46461-2.73078,8.47071,8.47071,0,0,0-.08149-1.56152,5.15678,5.15678,0,0,1,.06829-1.14823.67531.67531,0,0,0-.376-.65364,14.08384,14.08384,0,0,1-2.37946-1.68747,3.94162,3.94162,0,0,0-.9147-.56584,20.74024,20.74024,0,0,0-2.05258-.95975,3.20772,3.20772,0,0,1-.75-.3885c-.16453-.11534-.29447-.14228-.38073.0943-.07678.21052-.23739.20568-.40857.1135A4.54453,4.54453,0,0,1,89.438,60.213a33.71361,33.71361,0,0,0-4.58-2.52155c-.54052-.26638-1.07543-.54568-1.60021-.84342a.63617.63617,0,0,1-.36347-.46453.82455.82455,0,0,0-.39825-.54009,14.46986,14.46986,0,0,1-2.0368-1.44187.2658.2658,0,0,0-.37837-.01093c-.44554.28888-.62066.24055-.91818-.22906-.04451-.15711-.01573-.33414-.11628-.4753a.46367.46367,0,0,1,.10826-.67732,1.29208,1.29208,0,0,0,.50413-.96574.65162.65162,0,0,1,.0479-.14416c.14958-.2654.17024-.62573.53679-.73228a2.58723,2.58723,0,0,1,1.397.66306c.34593.28579.71493.54391,1.07586.81143a1.16594,1.16594,0,0,0,.70164.2767,1.23,1.23,0,0,1,.63253.26328A20.46455,20.46455,0,0,0,88.174,55.156c.59193.21194,1.1727.45456,1.76515.66583a.53615.53615,0,0,1,.29389.17513,2.24633,2.24633,0,0,0,1.54488.84813c.89211.21477,1.71631.60142,2.57578.89628,1.5427.52925,3.01121,1.23918,4.51994,1.85118a8.569,8.569,0,0,0,2.52622.45256,3.6449,3.6449,0,0,1,.82979.15793c.18193.06023.36873.12644.43906.33752-.13873.2345-.34989.10311-.5124.07185a2.45059,2.45059,0,0,0-1.10328.04482,1.205,1.205,0,0,0-.80807,1.33007.50453.50453,0,0,0,.2601.31769c.46964.28853.88546.65331,1.35906.93847.45356.27309.51725.56049.21856.99355a4.22715,4.22715,0,0,0-.72292,2.42157,7.94336,7.94336,0,0,1-.25423,1.66848,1.28623,1.28623,0,0,0,.42541,1.38309,4.81378,4.81378,0,0,1,.59991.69914,1.615,1.615,0,0,1,.388,1.09893.50924.50924,0,0,0,.05627.33414.84151.84151,0,0,0,.46643.2233,1.0586,1.0586,0,0,1,.58077.32266C103.696,72.71666,103.66373,72.75239,103.34009,72.70127Z"/><path class="cls-2" d="M128.7694,86.95128l4.294.002c.09292.11323.048.24722.048.37065q.00359,12.56722.002,25.13443c0,.40628-.00109.40683-.42258.40694-1.19347.0003-2.387-.00829-3.58031.00619-.288.0035-.39377-.05181-.39339-.37336q.01462-12.60569.00933-25.2114C128.72653,87.17467,128.69189,87.05481,128.7694,86.95128Z"/><path class="cls-8" d="M79.22829,54.13966c.35955.44678.4117.45726.86273.09658a.2307.2307,0,0,1,.365.01476,12.19076,12.19076,0,0,0,2.11086,1.5163c.17055.12085.37583.24107.38569.45216.02046.438.3492.5399.64969.70063a58.52889,58.52889,0,0,1,6.28747,3.4531c.20324.14307.34382.19342.35951-.14292.01249-.2677.17974-.25488.34171-.13515a15.89082,15.89082,0,0,0,1.89472.90954,10.26468,10.26468,0,0,1,2.37251,1.44961,9.00619,9.00619,0,0,0,1.726,1.19833c.69444.412.81447.59681.64272,1.38551a1.94865,1.94865,0,0,0,.00633.871,2.45465,2.45465,0,0,1,.03857,1.09691,2.17314,2.17314,0,0,0,.07959,1.10055c.16848.53806.03545,1.13771.33748,1.65174.02765.047-.02993.14416-.04794.218-.76852-.38787-1.53152-.78491-2.283-1.20629-1.67951-.94172-3.30679-1.9678-4.93093-2.99949-1.45911-.92685-2.865-1.93088-4.25461-2.95791-1.2152-.89816-2.41793-1.81541-3.55793-2.80577-1.2359-1.07366-2.44176-2.182-3.6354-3.30493a24.86359,24.86359,0,0,1-3.06066-3.57054c.05134-.20435.08335-.2423.23629-.15312a4.828,4.828,0,0,0,1.43812.511.52668.52668,0,0,1,.23813.12122,1.60359,1.60359,0,0,0,1.19108.43817A.29762.29762,0,0,1,79.22829,54.13966Z"/><path class="cls-9" d="M142.40007,12.61785a13.48494,13.48494,0,0,1,1.614,1.7162,3.12216,3.12216,0,0,1,.6203.826.83243.83243,0,0,1,.10336.40486,29.93735,29.93735,0,0,1-1.018,9.32673,35.60688,35.60688,0,0,1-2.89424,7.23567,28.89817,28.89817,0,0,1-3.46014,5.16935,15.18468,15.18468,0,0,1-4.90338,3.95859,7.14585,7.14585,0,0,1-2.633.66228c-1.485.11313-2.97374.0919-4.46119.07893-1.64028-.0143-3.27788-.10843-4.91429-.21955-.15389-.01045-.30791-.0098-.46183-.0077a1.39138,1.39138,0,0,1-.92223-.19241.46476.46476,0,0,0-.21986-.06594,5.42163,5.42163,0,0,1-1.53577-.45045,7.89493,7.89493,0,0,0-1.96512-.51987,23.65433,23.65433,0,0,1-5.86638-1.81751,11.52866,11.52866,0,0,1-1.30791-.73542c-.15028-.0924-.31543-.1872-.30243-.407.22846-.127.4242-.00546.61067.097a23.4676,23.4676,0,0,0,3.85491,1.62176,3.38848,3.38848,0,0,0,1.09277.18276,15.30779,15.30779,0,0,1,1.92664.33265,2.34707,2.34707,0,0,0,1.34955-.14457,2.16867,2.16867,0,0,1,.8951-.19275c.64091.01848,1.27227.13354,1.91353.16926,1.38226.077,2.76328.13827,4.14817.1429.89634.003,1.79334.13281,2.68912.06411,1.11215-.08529,2.23-.01911,3.33935-.15465A7.78215,7.78215,0,0,0,133.002,38.427a15.81364,15.81364,0,0,0,4.35407-4.18769,29.11489,29.11489,0,0,0,5.03734-12.19864,23.78845,23.78845,0,0,0,.35491-4.89843,38.02859,38.02859,0,0,0-.4891-3.92815C142.22722,12.99725,142.18344,12.77648,142.40007,12.61785Z"/><path class="cls-10" d="M136.69742,8.77316a14.21436,14.21436,0,0,1,2.6957,1.46552.45578.45578,0,0,1,.08343.17234c.32548,1.92136,1.0284,3.76048,1.21959,5.71318a27.30971,27.30971,0,0,1,.24759,3.79337A23.71647,23.71647,0,0,1,140.062,25.414a23.80923,23.80923,0,0,1-4.3702,8.75267,12.24255,12.24255,0,0,1-4.75074,3.64252,7.18317,7.18317,0,0,1-2.47409.50461c-1.58774.07127-3.17507.15184-4.76461.13975-.69139-.00525-1.38075-.0874-2.07394-.08812a1.84631,1.84631,0,0,1-.74621-.172,2.064,2.064,0,0,0-.97192-.18471,14.85159,14.85159,0,0,1-2.817-.35447c-.36107-.0828-.73942-.0556-1.107-.11906a35.14306,35.14306,0,0,1-5.67583-1.34769c-.67579-.23653-1.21766-.70464-1.86969-.97131-.51207-.44135-1.11846-.76242-1.59875-1.24557a7.96692,7.96692,0,0,1-1.15038-1.32454.44662.44662,0,0,1-.09218-.395c.0743-.14146.18785-.116.29474-.05686a5.07379,5.07379,0,0,1,1.2102.797,7.99059,7.99059,0,0,0,3.52791,2.01639,1.39959,1.39959,0,0,0,.45393.06736.25708.25708,0,0,1,.1095.05665,3.42377,3.42377,0,0,0,1.26833.41414,44.22112,44.22112,0,0,0,5.62021.89464c1.5407.14345,3.0661.40147,4.623.45061a47.21536,47.21536,0,0,0,6.10616-.183,6.87517,6.87517,0,0,0,3.20539-1.32462,14.68648,14.68648,0,0,0,5.08011-6.533,17.30226,17.30226,0,0,0,1.344-5.89343c.05562-.88241.16533-1.76392.14232-2.64783a35.49512,35.49512,0,0,0-.75113-6.64016c-.31414-1.44484-.75379-2.85254-1.1487-4.27388C136.62934,9.1933,136.52481,8.97667,136.69742,8.77316Z"/><path class="cls-11" d="M120.90466,38.11948a4.59279,4.59279,0,0,0,1.21038.15815c.86994-.01815,1.73663.13085,2.6078.07151,1.04812-.07139,2.09746-.06515,3.147-.08059a8.4591,8.4591,0,0,0,5.07176-1.69475,15.41812,15.41812,0,0,0,4.1368-4.52523,27.46938,27.46938,0,0,0,2.57869-5.64,23.77878,23.77878,0,0,0,.983-4.4755,16.45488,16.45488,0,0,0,.204-2.39583,34.55309,34.55309,0,0,0-.55742-5.23756c-.19506-1.046-.58713-2.0343-.77952-3.07542a3.55363,3.55363,0,0,1-.11395-.98561,16.19331,16.19331,0,0,1,3.00695,2.37917,3.2753,3.2753,0,0,0,.11807,1.54061,21.12739,21.12739,0,0,1,.33107,4.806,28.53027,28.53027,0,0,1-1.53383,7.8049,29.71264,29.71264,0,0,1-3.00979,6.24523,18.248,18.248,0,0,1-3.00861,3.76365,11.13691,11.13691,0,0,1-4.89267,2.90377,6.29249,6.29249,0,0,1-1.43458.19727c-1.37172-.01-2.74177.18135-4.1098.077-1.115-.085-2.23-.00474-3.34068-.07709-1.30966-.08531-2.62432-.11695-3.92712-.2964a.82473.82473,0,0,0-.59637-.30008,44.4847,44.4847,0,0,1-4.97073-1.103,2.00012,2.00012,0,0,1-.60752-.23107c-.15143-.09259-.27477-.2048-.13612-.40094a.72165.72165,0,0,1,.56059-.00062c.9515.21,1.90057.43047,2.85812.61341.36816.07033.74035.06535,1.1088.113a.29419.29419,0,0,0,.189-.02085c.61733-.38027,1.27194-.14593,1.91247-.11665a20.67854,20.67854,0,0,0,2.34471-.00586A3.37271,3.37271,0,0,1,120.90466,38.11948Z"/><path class="cls-12" d="M103.57168,72.393c-.32184-.24194-.76469-.20157-1.07856-.46212-.0928-.59992-.00825-.6786.56354-.52367.08664.02348.17391.04445.26081.06683.1864.048.2846-.00283.31137-.21294.111-.87076.53558-1.65205.72824-2.50077a.28672.28672,0,0,1,.29772-.25254c.19583.0164.2235.1819.24019.34056.00538.05105-.00194.103.00309.1536.014.1408-.10938.33042.09433.40678a.49906.49906,0,0,0,.57477-.09782,1.24,1.24,0,0,1,.88792-.389,1.00218,1.00218,0,0,0,.50867-.24574c.6278-.50684,1.28668-.97346,1.93005-1.45964.74578-.56358,1.49655-1.122,2.22744-1.7054a8.60687,8.60687,0,0,1,1.05635-.767c.38111-.21947.39572-.46259.03886-.74032-.40479-.315-.80951-.62924-1.19027-.97358a.5836.5836,0,0,1-.25881-.408c.03-.15775.155-.22481.27891-.29315a.74582.74582,0,0,1,.71764.16675,16.38552,16.38552,0,0,1,1.61072,1.23028.40822.40822,0,0,0,.15181.11346c.87366.28791,1.66947.75,2.50706,1.1184a6.22362,6.22362,0,0,0,1.81591.56985.46712.46712,0,0,1,.43017.62711c-.02656.11375-.10114.20642-.13451.31685a.61968.61968,0,0,1-.16442.25674,17.28919,17.28919,0,0,1-1.85563,1.54729c-1.22158.73238-2.33765,1.61933-3.50552,2.4303a14.362,14.362,0,0,1-3.41307,1.97371,3.62208,3.62208,0,0,0-1.65361,1.26619.5305.5305,0,0,1-.50961.275,15.80776,15.80776,0,0,1-2.1755-.81795,6.0907,6.0907,0,0,1-1.28914-.57558C103.59822,72.68233,103.7507,72.535,103.57168,72.393Z"/><path class="cls-13" d="M136.69742,8.77316a7.82984,7.82984,0,0,0,.50587,1.99784,34.88882,34.88882,0,0,1,1.08788,4.72767c.12928.879.21759,1.7678.28267,2.65907a20.88063,20.88063,0,0,1,.11719,2.71373,27.25263,27.25263,0,0,1-.69478,5.83083,18.77469,18.77469,0,0,1-1.66285,3.9533,13.56122,13.56122,0,0,1-1.4845,2.27488,14.27748,14.27748,0,0,1-2.69851,2.48827,7.72612,7.72612,0,0,1-4.23116,1.48914c-1.50756.0591-3.01363.16174-4.52264.12776a15.98027,15.98027,0,0,1-3.01449-.18016c-1.5243-.33169-3.08218-.30792-4.61-.61778-1.11509-.22615-2.25578-.38308-3.38242-.586-.33682-.06068-.65058-.21584-.99617-.25858a.2807.2807,0,0,1-.27235-.27737c.06083-.21.22161-.11914.34211-.10144q2.546.37405,5.10281.6636c.40593.04655.81782.03961,1.22667.07736a1.92914,1.92914,0,0,0,.93-.19767c.09868.02591.15051.14128.26822.1349.62743-.03405,1.25255.09338,1.8796.03347a3.83828,3.83828,0,0,1,.80679-.01844,24.918,24.918,0,0,0,3.38405.05673c.83054-.01609,1.66271-.09366,2.49366-.14318a6.80616,6.80616,0,0,0,1.55634-.20228,8.78292,8.78292,0,0,0,3.43676-2.05583c.42479-.3897.82317-.80927,1.21988-1.2293A6.70621,6.70621,0,0,0,135.2198,29.452a28.81233,28.81233,0,0,0,1.29992-6.51405,33.26675,33.26675,0,0,0-.05988-4.83817,38.233,38.233,0,0,0-1.93276-9.24093c-.10169-.3107-.32829-.62677-.14153-.98813A18.36523,18.36523,0,0,1,136.69742,8.77316Z"/><path class="cls-14" d="M107.88567,37.58044a4.88922,4.88922,0,0,0,1.70638,1.07067,21.11875,21.11875,0,0,0,4.04608,1.4196c.94379.21238,1.9021.36589,2.8363.61243a3.24543,3.24543,0,0,1,1.2041.43323c.37215.27847.87317.15874,1.28652.31677a10.83015,10.83015,0,0,0,3.06813.31228,59.5159,59.5159,0,0,0,6.25651.13492,11.93408,11.93408,0,0,0,3.07535-.31255,7.78777,7.78777,0,0,0,2.04512-.92869,16.12508,16.12508,0,0,0,2.97282-2.40721,25.57575,25.57575,0,0,0,2.14975-2.59223,27.33583,27.33583,0,0,0,1.81613-2.83937,36.16541,36.16541,0,0,0,1.68174-3.40353,29.99814,29.99814,0,0,0,1.40915-3.87671,30.41675,30.41675,0,0,0,1.04545-5.16361,24.07754,24.07754,0,0,0,.14838-2.48292c-.00775-.90442-.0001-1.809.00084-2.71345a11.5173,11.5173,0,0,1,.91542,1.25159.20678.20678,0,0,1,.07913.16825,17.0005,17.0005,0,0,1-.086,2.83832,31.19139,31.19139,0,0,1-.41736,3.27895,37.32673,37.32673,0,0,1-1.68239,6.03414A36.19168,36.19168,0,0,1,140.97,34.024a28.53852,28.53852,0,0,1-3.618,5.10692,14.29922,14.29922,0,0,1-4.445,3.49744,6.95075,6.95075,0,0,1-2.85246.6972c-1.03784.027-2.07672.09239-3.11343.05245-1.57375-.06064-3.14811-.10794-4.71817-.27085-1.22315-.12691-2.45235-.20024-3.66373-.42056-.65494-.11912-1.29957-.29214-1.94416-.46013a.577.577,0,0,1-.29162-.17829.497.497,0,0,0-.40532-.255,9.837,9.837,0,0,1-1.71025-.43629,21.07741,21.07741,0,0,1-6.67215-3.13787,20.58954,20.58954,0,0,1-2.763-2.76113.62885.62885,0,0,1-.23213-.544c.26974-.13867.39625.09383.5317.232a22.55314,22.55314,0,0,0,2.0488,1.8916,2.14474,2.14474,0,0,0,.38423.24814A1.00664,1.00664,0,0,1,107.88567,37.58044Z"/><path class="cls-15" d="M146.40217,18.02018l.35708.6233c.12143.0401.09686.13789.09035.22855l.403,1.06605a4.20541,4.20541,0,0,1-.07476,1.44719A35.69489,35.69489,0,0,1,143.34637,33.502c-.55665,1.06619-1.14052,2.1221-1.79854,3.13453a32.45482,32.45482,0,0,1-3.65764,4.69265,13.18608,13.18608,0,0,1-5.71823,3.88944,7.66226,7.66226,0,0,1-2.04954.3098c-1.32031.02436-2.63926.08715-3.96028.1023a46.41328,46.41328,0,0,1-6.96116-.56232,10.33953,10.33953,0,0,1-1.98439-.40584.94674.94674,0,0,1-.50427-.25532.77586.77586,0,0,0-.66629-.49471c-.27141-.05715-.60233-.09659-.60945-.49984a4.28146,4.28146,0,0,1,1.00356-.26032c.94346.1892,1.8853.39468,2.84218.50043q1.87179.20685,3.74752.38043a16.58352,16.58352,0,0,0,1.76319.10077,27.56619,27.56619,0,0,0,3.37586-.01085,9.19709,9.19709,0,0,1,1.57684-.02,7.95344,7.95344,0,0,0,5.14872-1.83418,24.26924,24.26924,0,0,0,5.56139-6.222,35.8574,35.8574,0,0,0,3.81839-7.74542,34.26946,34.26946,0,0,0,1.79874-7.74236,15.46379,15.46379,0,0,0,.15263-2.1076C146.2216,18.29007,146.2084,18.10825,146.40217,18.02018Z"/><path class="cls-16" d="M134.38555,7.87075a17.10437,17.10437,0,0,0,.6488,2.20209,42.39188,42.39188,0,0,1,1.2854,5.70263,37.27131,37.27131,0,0,1,.37471,6.14779,25.43922,25.43922,0,0,1-.56921,4.54341,26.38461,26.38461,0,0,1-1.27153,4.29165,4.907,4.907,0,0,1-1.00191,1.43776,11.65417,11.65417,0,0,1-3.52481,2.8643,7.23923,7.23923,0,0,1-2.89689.69248c-1.6493.07855-3.29791.18278-4.947.12089-1.14556-.043-2.29053-.03577-3.43549-.06307-.166-.004-.31936-.00084-.3-.23283a.3586.3586,0,0,1,.2412-.10419c-1.0197-.129-2.01157-.13571-2.99473-.24575-.22887-.02561-.456-.06269-.685-.08692-.12533-.01325-.26238-.02359-.299-.1864a.23531.23531,0,0,1,.17622-.21013c.12526-.06836.28414.01015.40282-.09084a19.76312,19.76312,0,0,1,2.51409.18613,9.71547,9.71547,0,0,0,1.21073.04455c.03828.00285.082-.01146.1147.0023.78444.32984,1.59014-.04531,2.38151.07132.13865.02043.294-.00905.405.08717a.83527.83527,0,0,0,.61654.14842c.23086-.00337.4619.00312.69271-.00169a2.843,2.843,0,0,0,.95113-.16487,2.28811,2.28811,0,0,1,1.43194.01338c.123.03807.24276.11954.36436.0379a1.51783,1.51783,0,0,1,1.39357-.09046.27369.27369,0,0,0,.14543.01189,7.68861,7.68861,0,0,0,2.64236-1.20681,12.47917,12.47917,0,0,0,3.14478-3.70567,10.02531,10.02531,0,0,0,.92631-2.83265c.26474-1.076.40945-2.17446.58978-3.26642.07284-.44115-.11924-.95669.2544-1.35152.06555-.06927.00218-.19824-.0514-.2889a.71217.71217,0,0,1-.08266-.44632,11.94481,11.94481,0,0,0-.00578-1.55951c-.01569-.524.01749-1.04063-.03434-1.57546A45.38392,45.38392,0,0,0,134.1761,12.307c-.37363-1.52253-.85675-3.01818-1.288-4.52668A2.16709,2.16709,0,0,1,132.845,7.479,9.28381,9.28381,0,0,1,134.38555,7.87075Z"/><path class="cls-17" d="M146.40217,18.02017a.83957.83957,0,0,0-.07545.48653,24.43214,24.43214,0,0,1-.36172,3.57166,30.34962,30.34962,0,0,1-.82279,3.84972,30.41932,30.41932,0,0,1-1.12158,3.33812c-.43008,1.07616-.86055,2.15237-1.37821,3.18829a38.30493,38.30493,0,0,1-2.73659,4.59542,25.51091,25.51091,0,0,1-3.87119,4.44641,12.94028,12.94028,0,0,1-2.62947,1.83244,7.40629,7.40629,0,0,1-3.86923.87207c-.924-.03728-1.84.11383-2.7634.0822-1.72872-.05921-3.45522-.09123-5.18022-.2883-1.55726-.1779-3.11788-.30817-4.65312-.63837a1.17762,1.17762,0,0,1-.5026-.15339c.04939-.23758-.13689-.23728-.27986-.26875a26.8308,26.8308,0,0,1-3.135-.9114,22.52186,22.52186,0,0,1-4.70418-2.246c-.13126-.08408-.31288-.14481-.27879-.36274.19881-.09.34881.03527.49432.12831a13.42536,13.42536,0,0,0,3.86889,1.75183c1.09646.28053,2.19254.60163,3.31449.79786.25125.04394.41494-.16671.6431-.12167a2.68655,2.68655,0,0,0,1.15236.36711,27.04228,27.04228,0,0,0,4.6463.64792c1.24785.10165,2.49529.1673,3.74419.238,1.026.05811,2.051.07791,3.07134.03737a10.64265,10.64265,0,0,0,2.326-.159,9.4743,9.4743,0,0,0,2.56019-1.10276,14.8314,14.8314,0,0,0,3.13769-2.62639,28.28851,28.28851,0,0,0,2.79982-3.63554,38.61212,38.61212,0,0,0,2.59542-4.72434,30.88875,30.88875,0,0,0,1.47885-3.85522,36.85593,36.85593,0,0,0,1.10168-4.21907,30.99759,30.99759,0,0,0,.444-3.33018c.08044-1.02067.15412-2.03811.14146-3.06155.09716-.02738.11878.04239.14189.11026Z"/><path class="cls-18" d="M116.74475,44.358a5.1833,5.1833,0,0,0,1.737.52215c.7304.04074,1.43451.22642,2.15995.28081.8883.06662,1.76484.26653,2.65892.27123a7.257,7.257,0,0,1,1.52068.14476c.22517.04927.423-.07709.64424-.06883.46142.0172.92409.01255,1.386.00372,1.13913-.02178,2.27979-.02076,3.4168-.08387a9.224,9.224,0,0,0,5.25782-2.08835c.54263-.42526,1.05222-.88882,1.59355-1.31634A12.65237,12.65237,0,0,0,138.658,40.3167c.7976-.91026,1.53132-1.87873,2.25554-2.84981a12.84585,12.84585,0,0,0,.70629-1.131c.7495-1.26163,1.49117-2.52986,2.131-3.85233a37.12655,37.12655,0,0,0,2.88092-8.43209,29.2205,29.2205,0,0,0,.54422-3.66192c.01281-.15157.05048-.301.07663-.45149a7.86825,7.86825,0,0,1,.61288,1.931,7.13353,7.13353,0,0,1-.18453,1.5628,37.2579,37.2579,0,0,1-2.05,6.92862,41.37794,41.37794,0,0,1-3.3565,6.568,29.046,29.046,0,0,1-4.64327,5.82247,15.8524,15.8524,0,0,1-3.25338,2.50978,9.61266,9.61266,0,0,1-4.40463,1.21746c-1.5741.05856-3.15.10062-4.723.20241a8.07208,8.07208,0,0,1-1.60468-.09262c-.60716-.082-1.23518-.08586-1.854-.12354a15.4016,15.4016,0,0,1-2.40393-.28528,14.04761,14.04761,0,0,1-2.06986-.31742,7.76694,7.76694,0,0,1-1.81892-.43235,23.17278,23.17278,0,0,1-3.13076-1.01841c-.15282-.06474-.3681-.08589-.34864-.33718.174-.1304.3437-.02395.50758.02054.6167.16743,1.21384.40207,1.838.5443a7.48162,7.48162,0,0,0,1.28562.16063c.01455-.11975-.09661-.17079-.08155-.26521A1.08042,1.08042,0,0,1,116.74475,44.358Z"/><path class="cls-19" d="M107.04324,74.221a1.16486,1.16486,0,0,0,.4876-.402,3.66645,3.66645,0,0,1,1.77182-1.286,12.2819,12.2819,0,0,0,3.03944-1.74819C113.745,69.81005,115.13,68.81,116.545,67.85164a6.59833,6.59833,0,0,0,1.50939-1.38909,8.54066,8.54066,0,0,1,.92914-.89265c.07356-.053.15321-.12853.11768-.22-.17008-.438.13347-.48922.43342-.55026.04939-.01005.09734-.02752.14753-.03819a2.1906,2.1906,0,0,1,1.12757.10089,3.22648,3.22648,0,0,0,2.04985.08594,1.3074,1.3074,0,0,1,.30165-.04055,2.908,2.908,0,0,1,.63671.13584,1.11393,1.11393,0,0,0,.78747-.01481.509.509,0,0,1,.33949-.02526c.15064.03876.21194.15176.07786.23942-.51247.335-.63118.95113-1.01508,1.37434-1.67021,1.05792-3.37093,2.06336-5.12186,2.98287-.5821.30569-1.16052.6184-1.74063.92789a9.56661,9.56661,0,0,1-1.38995.70674c-.58892.26689-1.18253.52395-1.76591.80245-1.91187.91272-3.86955,1.715-5.856,2.449a.6926.6926,0,0,1-.378.00127A2.12354,2.12354,0,0,1,107.04324,74.221Z"/><path class="cls-20" d="M117.36081,45.74476a2.37123,2.37123,0,0,0,1.52856.12722c.11486-.04632.11408.17394.277.19009.82263.08153,1.63983.2302,2.46356.28261.36381.02314.73909.22524,1.12089-.00208.0829-.04935.22982.21176.35914.15974.56872-.22878,1.08319.14806,1.64744.107,1.43945-.10479,2.88794-.08445,4.32769-.18648a20.4284,20.4284,0,0,0,2.47363-.21231,8.97054,8.97054,0,0,0,1.85458-.59473,13.92409,13.92409,0,0,0,3.59124-2.443,27.76573,27.76573,0,0,0,4.95592-5.91555,42.37251,42.37251,0,0,0,2.34388-4.171,39.69047,39.69047,0,0,0,2.89611-7.89769,23.01548,23.01548,0,0,0,.59278-3.15074.635.635,0,0,1,.07223-.16867,5.8063,5.8063,0,0,1,.37392,1.77335,28.64387,28.64387,0,0,1-.99262,3.83407,36.172,36.172,0,0,1-2.33752,5.89743,38.876,38.876,0,0,1-5.0879,7.82153,21.50176,21.50176,0,0,1-5.30465,4.64015,7.956,7.956,0,0,1-3.70236,1.19581c-1.98083.093-3.95484.32428-5.943.28413a30.06792,30.06792,0,0,1-3.52744-.22894c-1.25382-.17361-2.50744-.35015-3.76433-.50349a21.02157,21.02157,0,0,1-2.33428-.6002c-.14683-.0416-.34725-.037-.3778-.2607a.21673.21673,0,0,1,.24606-.13817,5.32863,5.32863,0,0,1,1.31919.07982A1.39052,1.39052,0,0,0,117.36081,45.74476Z"/><path class="cls-21" d="M148.2477,32.57313a10.80361,10.80361,0,0,1-.23985,1.77607,20.3438,20.3438,0,0,1-1.64358,3.03818,42.84148,42.84148,0,0,1-4.68447,6.32727,31.25654,31.25654,0,0,1-5.39619,4.90135,11.66564,11.66564,0,0,1-5.764,2.16729c-.98176.086-1.95133.29277-2.93218.40249q-1.183.13233-2.3719.19793a8.57713,8.57713,0,0,1-1.84045.05628c-.63793-.0492-1.27334-.12809-1.90935-.179-1.38047-.11058-2.75033-.31323-4.12947-.42973-.24419-.105-.50621-.15649-.75516-.24687-.15179-.0551-.32366-.09922-.33165-.31175.08531-.18554.25088-.15905.39788-.13056.29007.05622.58961.01455.87622.09741a.4298.4298,0,0,0,.32987-.06641,7.04169,7.04169,0,0,1,1.56353.12508,6.12282,6.12282,0,0,0,.87759.04789c.96026-.02789,1.91519.10886,2.8738.10632a11.07486,11.07486,0,0,1,1.8787.03485.54316.54316,0,0,0,.32966-.0901.97973.97973,0,0,1,.55666-.12562,8.27806,8.27806,0,0,0,2.16119-.14523,33.32937,33.32937,0,0,0,4.5927-.705,4.039,4.039,0,0,0,1.883-.79983,3.16155,3.16155,0,0,1,1.07142-.57884,3.33652,3.33652,0,0,0,1.21459-.90491,14.96337,14.96337,0,0,1,1.26465-.98311c.05712-.0501.15008-.0732.18353-.13673.41855-.79467,1.29254-1.10587,1.85225-1.75046a2.92808,2.92808,0,0,0,.43486-.58222c.181-.356.55619-.54186.77534-.88154.37791-.58576.99718-.9876,1.328-1.61118.32356-.60992.87237-1.03549,1.238-1.60858.32919-.516.7021-1.01789.993-1.542.33987-.61242.73875-1.19,1.07631-1.804.34093-.62009.68064-1.24637,1.04458-1.85678.27231-.45675.44132-.9802.69821-1.45287C147.84653,32.74112,147.93168,32.47908,148.2477,32.57313Z"/><path class="cls-22" d="M117.59213,46.51457c.88566.02016,1.74834.23406,2.62565.31462.94634.08689,1.87787.27184,2.83264.323a30.27866,30.27866,0,0,0,3.0705.03964,34.19161,34.19161,0,0,0,3.91921-.27145c.465-.07629.954.02631,1.43506-.06046a10.00722,10.00722,0,0,0,4.159-1.86976,21.742,21.742,0,0,0,3.38043-3.04795,36.68708,36.68708,0,0,0,3.11655-3.97461,40.08348,40.08348,0,0,0,2.624-4.50677,41.52752,41.52752,0,0,0,2.89124-7.70721c.17332-.64084.34025-1.28138.45722-1.9347a.25108.25108,0,0,1,.13579-.17645,7.34615,7.34615,0,0,1,.1654,1.08033,1.50077,1.50077,0,0,1-.02256.82923,44.22622,44.22622,0,0,1-2.58363,7.08036,39.25853,39.25853,0,0,1-4.01591,6.82338,33.01778,33.01778,0,0,1-3.999,4.61605,13.15388,13.15388,0,0,1-5.7015,3.37679,14.66635,14.66635,0,0,1-2.29183.24407c-1.54424.14569-3.09564.18811-4.64236.29974a14.40709,14.40709,0,0,1-2.2657-.092c-1.08522-.0925-2.16963-.19414-3.2552-.28309-.86953-.07124-1.72928-.22584-2.59562-.32578a.38667.38667,0,0,1-.236-.11966c-.2359-.50293-.21136-.55887.3132-.638A.96506.96506,0,0,1,117.59213,46.51457Z"/><path class="cls-23" d="M123.44683,51.36678a40.07889,40.07889,0,0,0,4.76459-.38072c1.22184-.17662,2.448-.32589,3.66633-.52352a10.25257,10.25257,0,0,0,3.73867-1.53287,24.63415,24.63415,0,0,0,3.123-2.40369c.69-.5981,1.32317-1.25064,1.9578-1.90132a39.69824,39.69824,0,0,0,3.96531-4.81784,41.99537,41.99537,0,0,0,3.10991-5.10987,3.33646,3.33646,0,0,1,.2354-.34776,13.2907,13.2907,0,0,1-.45,2.3048c-.97638,1.54833-1.93538,3.10774-3.03461,4.57516-.81455,1.08738-1.70826,2.106-2.61813,3.11314-.69567.77006-1.42163,1.50945-2.1686,2.22792a22.36163,22.36163,0,0,1-4.63882,3.51939,8.26011,8.26011,0,0,1-2.48339.99468c-.731.11648-1.45835.25031-2.19365.33841-.944.11311-1.88266.26781-2.82241.41269a3.21121,3.21121,0,0,1-.68818.04218,7.7503,7.7503,0,0,0-1.30939.15166.77886.77886,0,0,1-.26658-.01033,3.38045,3.38045,0,0,0-1.26009-.06851,6.24526,6.24526,0,0,1-1.74969-.10888c-.2287-.03238-.45711-.0528-.6878-.0629-.14621-.00641-.3199.01527-.37811-.18427.09257-.27058.33176-.262.54243-.25608C122.34951,51.35357,122.89926,51.304,123.44683,51.36678Z"/><path class="cls-24" d="M116.82178,47.13073a12.30022,12.30022,0,0,0,1.54371.22842c1.19127.22439,2.40548.24782,3.608.363a16.1517,16.1517,0,0,0,2.97965.17388c1.44678-.12956,2.90162-.11371,4.34711-.28721.71854-.08624,1.44936-.08366,2.17277-.16325a7.10224,7.10224,0,0,0,2.19331-.65366,14.144,14.144,0,0,0,3.50555-2.31625,30.82014,30.82014,0,0,0,3.16683-3.33153,37.89455,37.89455,0,0,0,3.49007-4.97607,41.20671,41.20671,0,0,0,2.52666-5.03909,42.33039,42.33039,0,0,0,2.00324-5.9126,2.17753,2.17753,0,0,0,.0461-.49359c.11531.10774.051.25964.09469.385.05368.12759-.01716.2724.055.39743l.02082.44944a.64976.64976,0,0,1,.01249.30106,21.18542,21.18542,0,0,1-.98329,3.11462,43.13881,43.13881,0,0,1-4.24813,8.48519,34.05981,34.05981,0,0,1-3.68938,4.82382,18.42115,18.42115,0,0,1-6.55781,4.93168,8.95581,8.95581,0,0,1-2.62535.554c-1.02142.08232-2.04225.17665-3.063.26933a13.602,13.602,0,0,1-1.41778.09459c-.80611-.0119-1.60671.0745-2.41723.03137-1.51283-.08051-3.01073-.2809-4.51354-.44225a2.4891,2.4891,0,0,1-.79681-.10286.65089.65089,0,0,0-.43622-.2197,5.25869,5.25869,0,0,1-1.254-.35945c-.14776-.04472-.37194-.084-.2704-.34748A.44962.44962,0,0,1,116.82178,47.13073Z"/><path class="cls-25" d="M120.1343,32.65112c-.051.00423-.12522-.01192-.14942.01572-.40368.46126-.94536.36587-1.46161.3687-.55147.003-1.10365.01851-1.65431-.0028-1.42546-.05518-2.84479-.17766-4.264-.33219a2.56123,2.56123,0,0,0-1.37314.09729c-.36572.16312-.80414-.046-1.17968-.16926a6.83821,6.83821,0,0,1-2.29375-1.20591,5.66318,5.66318,0,0,1-1.57275-2.26738,24.20071,24.20071,0,0,1-1.33-4.66094c-.193-.97127-.30294-1.95959-.43373-2.94244-.07043-.52935-.10808-1.06313-.15607-1.59532a.26887.26887,0,0,0-.15466-.2447.96612.96612,0,0,1-.18688-.60855c-.144-1.22913-.13816-2.46772-.2266-3.70051-.01242-.17313-.06563-.39147.18916-.46995a3.44666,3.44666,0,0,1,.51756.77842c-.14011.17313.0045.3409.00637.511.01029.9329.1731,1.852.25171,2.77853.09024,1.06348.27264,2.11907.41206,3.17848a36.37318,36.37318,0,0,0,1.21962,5.20748,13.61022,13.61022,0,0,0,.57091,1.78048,3.57339,3.57339,0,0,0,1.46766,1.47429,9.9056,9.9056,0,0,0,3.65679,1.17055,4.46966,4.46966,0,0,1,1.57571.40077,1.0574,1.0574,0,0,0,.82494.14939,1.38873,1.38873,0,0,1,.63866.10051,10.20224,10.20224,0,0,0,2.64251.05678,2.39956,2.39956,0,0,1,1.38566.10446.28873.28873,0,0,0,.25629-.00451C119.60252,32.40426,119.86483,32.55542,120.1343,32.65112Z"/><path class="cls-26" d="M148.2477,32.57313a.47992.47992,0,0,0-.372.302c-.201.39841-.394.80154-.56981,1.21155-.09115.21263-.23361.39807-.32607.59583a4.40163,4.40163,0,0,0-.52474,1.07639c-.03849.22206-.291.27392-.38484.49287a3.24934,3.24934,0,0,1-.69655,1.15472.58586.58586,0,0,0-.19562.36726.71736.71736,0,0,1-.2318.47409,11.60433,11.60433,0,0,0-1.088,1.62136,6.85465,6.85465,0,0,0-1.063,1.36284c-.21565.47456-.72048.71628-.94815,1.14048-.1715.31956-.56882.448-.6114.83655a.0507.0507,0,0,1-.017.03382c-.66924.43469-.93557,1.25468-1.59987,1.68506-.26329.17057-.59721.26444-.75364.54742a2.76389,2.76389,0,0,1-1.17849,1.09835c-.39231.203-.56629.62869-.98175.77312-.12945.045-.09981.23749-.23493.32956a7.38783,7.38783,0,0,1-1.6006.85995c-.32477.1192-.46926.44472-.81072.54954a17.27,17.27,0,0,1-2.05127.60827c-.57027.1-1.16129.14229-1.72189.25514-.30637.06168-.73092-.16848-.958.2342a.89924.89924,0,0,0-.76623-.05155c-.47283.1204-.97092.10718-1.43681.19231a11.61484,11.61484,0,0,1-1.26888.04137c-.05109.004-.11886-.01437-.151.01182-.44906.36561-.95762.10124-1.4357.14907a22.843,22.843,0,0,1-2.322.00638c-.47945-.00079-.98353-.10322-1.47643-.08376a18.75811,18.75811,0,0,1-2.57016-.23767.61116.61116,0,0,1-.46889.02662,7.66734,7.66734,0,0,1-1.033-.22274c-.14814-.04322-.37571-.0435-.344-.30752.20133-.20982.44914-.12552.68882-.11492.727.03212,1.45429.05667,2.18144.0167.74163.01489,1.47628.13829,2.21866.15379.10127.00211.20268.03835.30524.03406,1.03928-.0435,2.07373.1348,3.11194.07767,1.12433-.06186,2.24743-.13288,3.36834-.26025,1.10707-.1258,2.21541-.24583,3.3219-.37663a10.11311,10.11311,0,0,0,4.742-1.98046,32.51407,32.51407,0,0,0,7.86674-8.40788,49.94772,49.94772,0,0,0,3.10735-5.263c.40692-.79852.79173-1.61058,1.13407-2.44114a1.15619,1.15619,0,0,1,.33754-.58959.08513.08513,0,0,1,.08839.06922.2057.2057,0,0,1-.033.177A16.83549,16.83549,0,0,1,148.2477,32.57313Z"/><path class="cls-27" d="M132.69108,50.98169a2.85122,2.85122,0,0,0,.97-.323,16.38384,16.38384,0,0,0,3.281-1.86653,26.65153,26.65153,0,0,0,3.08651-2.62642c.5762-.54839,1.12758-1.14166,1.67348-1.73043.64976-.70076,1.24055-1.44918,1.88-2.1569a21.266,21.266,0,0,0,1.76044-2.35926c.59459-.87625,1.15305-1.77693,1.73357-2.66282.14079-.21485.18579-.51047.48185-.60238a10.9656,10.9656,0,0,1-.46328,1.92339,40.71771,40.71771,0,0,1-3.39635,4.65641c-.66335.8172-1.35737,1.6108-2.09229,2.3597a24.76406,24.76406,0,0,1-1.905,1.79123c-1.06881.88057-2.10177,1.80189-3.25372,2.58273a12.81455,12.81455,0,0,1-5.5705,2.186c-1.10576.147-2.2035.3755-3.31092.49669a14.68121,14.68121,0,0,1-2.29174.20934c-.49885.01525-.99533.00854-1.49458.06765a11.5058,11.5058,0,0,1-2.02516-.166.18578.18578,0,0,1-.17149-.13344c.10047-.15869.26669-.138.41512-.13724.6913.00359,1.38013-.09613,2.07248-.04651a1.2164,1.2164,0,0,0,.27891-.00575c-.23486.01216-.47854.009-.722.00226-.12274-.00337-.24689-.041-.252-.18162-.00539-.14762.11145-.22.24437-.25554a.22394.22394,0,0,1,.11464-.00351,5.84678,5.84678,0,0,0,2.20455-.0283c.99771-.10544,1.99822-.18284,2.99041-.35449.91457-.15823,1.83818-.27156,2.75842-.40013A7.25026,7.25026,0,0,0,132.69108,50.98169Z"/><path class="cls-28" d="M148.47678,30.57166c-.41239.90673-.79564,1.82816-1.24413,2.71668-.63971,1.26731-1.32165,2.51253-2.06372,3.72555a43.19359,43.19359,0,0,1-3.67137,5.18324,31.52858,31.52858,0,0,1-3.88275,3.92249,18.32131,18.32131,0,0,1-3.031,2.13776,10.8828,10.8828,0,0,1-4.3576,1.206,25.19828,25.19828,0,0,0-2.84085.3423c-.38677.0776-.78631.0337-1.18278.0836a30.95328,30.95328,0,0,1-4.90538-.005,14.04221,14.04221,0,0,1-2.31845-.21193,3.86454,3.86454,0,0,1-1.53393-.18732c-.38815-.125-.76993-.26942-1.16034-.3898-.163-.05029-.40747-.08143-.31024-.37091a.41067.41067,0,0,1,.32712-.05719,5.06347,5.06347,0,0,0,1.47081.053c.6191.00989,1.20711.225,1.82217.27291,1.27633.09948,2.54574.275,3.82485.34834a31.75671,31.75671,0,0,0,4.5568-.2123c1.11086-.09587,2.22035-.21081,3.32734-.333a9.34072,9.34072,0,0,0,4.15041-1.63673,24.7394,24.7394,0,0,0,3.6461-3.06539,36.80168,36.80168,0,0,0,5.32948-6.79224,48.10432,48.10432,0,0,0,3.84461-7.65833c.05846-.14682.05172-.37572.30292-.38221a.48555.48555,0,0,1-.00286.305l-.02021.60118C148.47245,30.29149,148.57675,30.451,148.47678,30.57166Z"/><path class="cls-29" d="M73.06682,48.74368a21.82411,21.82411,0,0,1-1.61407-3.16934c-.09946-.22694-.01608-.29037.20212-.21886a.59486.59486,0,0,1,.22424.14611c.45813.45041,1.01478.77568,1.502,1.19257a2.025,2.025,0,0,0,1.97928.54614,7.24792,7.24792,0,0,1,1.208-.20551c.609.16277,1.24073.20351,1.85364.345a.33249.33249,0,0,1,.16409.2043,2.02222,2.02222,0,0,0,.4481.83532.2748.2748,0,0,1,.063.25191c-.20706.2749-.55933.2829-.83062.44369-.20611.12215-.276.19607-.19328.4671a6.39866,6.39866,0,0,0,.30361,1.24294.40046.40046,0,0,1-.048.46318.22952.22952,0,0,1-.25448-.01671,1.00549,1.00549,0,0,0-.80554-.14336.52942.52942,0,0,1-.42577-.142,8.27,8.27,0,0,0-2.02095-.91354,2.90189,2.90189,0,0,1-.97338-.59672A6.12912,6.12912,0,0,0,73.06682,48.74368Z"/><path class="cls-30" d="M148.55512,29.26227c-.6266,1.455-1.21663,2.92621-1.93327,4.34115a44.71082,44.71082,0,0,1-4.09737,6.7004,33.07006,33.07006,0,0,1-2.49771,3.00024A26.83065,26.83065,0,0,1,135.5079,47.252a9.70184,9.70184,0,0,1-4.19817,1.65274c-1.07146.12951-2.15693.15623-3.22237.319-1.21548.18569-2.44275.13322-3.65964.276a8.02556,8.02556,0,0,1-1.64013-.0887c-.56985-.05231-1.13584-.17382-1.70581-.19146a18.25738,18.25738,0,0,1-2.84129-.34994,2.47733,2.47733,0,0,0-.41725-.04447.09128.09128,0,0,1-.00651-.11068.90216.90216,0,0,1,.80426-.082,7.06508,7.06508,0,0,0,2.16225.13151,8.15274,8.15274,0,0,1,1.6.11805,3.82927,3.82927,0,0,0,1.92864.02232.67962.67962,0,0,1,.26731-.024,38.62478,38.62478,0,0,0,3.96332-.28986c.803-.0757,1.60556-.15951,2.40905-.22713a9.45445,9.45445,0,0,0,3.86159-1.32088c.90169-.50659,1.647-1.22232,2.52438-1.75435a.29627.29627,0,0,0,.08713-.07529c.49464-.68493,1.26638-1.079,1.80393-1.71846.40211-.47838.79028-.97516,1.23086-1.41247a15.07293,15.07293,0,0,0,1.51132-1.83623c.87089-1.18925,1.65913-2.43258,2.43653-3.68474.3293-.5304.67268-1.05956.97626-1.59977a21.669,21.669,0,0,0,1.44614-2.96879,14.88158,14.88158,0,0,1,1.047-2.34539,1.18982,1.18982,0,0,0,.14755-.47311,2.24323,2.24323,0,0,1,.32929-1.01532,1.00283,1.00283,0,0,0,.10773-.5562,3.0553,3.0553,0,0,1,.07535-1.02752q.05463-.05295.09316.0125l.00284,2.43058C148.56877,29.0873,148.63377,29.19755,148.55512,29.26227Z"/><path class="cls-31" d="M94.79179,8.17326A16.61389,16.61389,0,0,1,98.688,10.01711a1.17548,1.17548,0,0,0,.16865.0733.33067.33067,0,0,1,.17534.163c.21456.3628.60557.54466.87072.86058A10.36609,10.36609,0,0,1,102.137,16.5091c.19769,1.41144.14359,2.8366.24177,4.25269.092,1.327.1554,2.6556.26636,3.982a22.36482,22.36482,0,0,0,.86228,4.36423,11.77584,11.77584,0,0,0,.78748,1.95854,2.51923,2.51923,0,0,1,.19023.46043,1.86679,1.86679,0,0,0,.22136.48492.46959.46959,0,0,1,.04915.47158c-.24862.08442-.30631-.13095-.39048-.269a16.51989,16.51989,0,0,1-.97687-1.95936,12.13351,12.13351,0,0,0-.8058-1.2379,8.35835,8.35835,0,0,1-.48822-2.40215c-.071-.97184-.2265-1.93354-.28609-2.90631-.03284-.536-.07721-1.07486-.09837-1.60952-.04454-1.12558-.06217-2.254-.10694-3.37917a12.29371,12.29371,0,0,0-1.364-5.51533,8.5525,8.5525,0,0,0-4.37375-3.7619c-.50818-.21651-1.034-.38246-1.55189-.57118a8.73952,8.73952,0,0,0-1.2541-.29784.653.653,0,0,1-.52421-.32729c.04946-.25011.24079-.22215.41985-.20973a12.0891,12.0891,0,0,1,1.212.2046A.71474.71474,0,0,0,94.79179,8.17326Z"/><path class="cls-32" d="M104.41907,31.57285a18.45677,18.45677,0,0,1-1.92132-7.29483c-.10884-1.51407-.20855-3.0285-.25683-4.547-.01573-.49506-.03322-.99409-.05587-1.491a13.05622,13.05622,0,0,0-1.13327-5.15422,7.06852,7.06852,0,0,0-1.91307-2.55321c-.07911-.06281-.28137-.11488-.15856-.30462a.55645.55645,0,0,1,.43176.30211l.92786.63147c.1175.06036.2624.08732.29957.24561a11.35333,11.35333,0,0,1,.85555.82481,9.3291,9.3291,0,0,1,1.09757,3.45809,27.00512,27.00512,0,0,1,.26116,3.17516c.0416.96792.11235,1.93928.18539,2.90783.09355,1.24048.20543,2.47532.411,3.70158a20.81678,20.81678,0,0,0,1.5252,5.186,3.91758,3.91758,0,0,0,.56906.95525.56119.56119,0,0,1,.10737.65015,1.26374,1.26374,0,0,0,.41879.75215,8.79961,8.79961,0,0,0,2.04707,1.82033.67.67,0,0,1,.30741.27723c-.23973.15437-.41407-.02774-.58864-.13172a7.56852,7.56852,0,0,1-2.13265-2.00544,1.43788,1.43788,0,0,0-.49414-.4686A1.7617,1.7617,0,0,1,104.41907,31.57285Z"/><path class="cls-33" d="M105.65164,32.266c.03953-.40179-.26736-.64113-.44557-.93887a12.11781,12.11781,0,0,1-.928-2.099,19.66518,19.66518,0,0,1-.88735-3.47992c-.15485-.91638-.29186-1.83351-.37111-2.7622-.06817-.79894-.13883-1.60177-.18559-2.3991-.0415-.70765-.11683-1.41746-.11506-2.13067a16.48652,16.48652,0,0,0-.78934-5.07975,11.87874,11.87874,0,0,1-.43473-1.14455,8.36766,8.36766,0,0,1,1.38656,1.464,4.83522,4.83522,0,0,1,.41037,2.05656c.19307,2.65747.30547,5.32159.6403,7.967a27.99021,27.99021,0,0,0,.82314,3.99165c.04817.173.102.34443.13331.521a9.23193,9.23193,0,0,0,1.52766,3.53072A7.24876,7.24876,0,0,0,108.68,33.91351a14.19971,14.19971,0,0,0,1.99675.89186c.15221.05622.37724.05173.3674.31019-.19074.162-.37057.00288-.53351-.04517a8.04279,8.04279,0,0,1-3.58276-2.11373,6.7875,6.7875,0,0,0-1.18589-.74183C105.72955,32.20627,105.68252,32.24783,105.65164,32.266Z"/><path class="cls-34" d="M104.80425,28.338a34.12914,34.12914,0,0,1-.986-4.50682c-.12585-.84095-.15167-1.69635-.25046-2.542-.14173-1.21332-.12683-2.43818-.29513-3.6498-.0735-.52918-.01121-1.06664-.06328-1.60467-.0761-.7863-.20336-1.56142-.32788-2.33879a6.87847,6.87847,0,0,1,1.00535,1.2369.507.507,0,0,0-.07332.50888,11.278,11.278,0,0,1,.06922,1.56888c.0667.90112.15131,1.80091.22841,2.70125.08427,1.08941.17845,2.17761.3536,3.25729.126.77658.16156,1.56453.331,2.33708.27284,1.24425.60919,2.471.962,3.69356a6.11756,6.11756,0,0,0,2.618,3.51192c.22358.1465.44376.29818.66551.44746.06865.06391.17145.07662.2311.154a15.99893,15.99893,0,0,0,4.27325,1.23154c.60272.08737,1.20829.15514,1.81255.23183.05757.10476-.01837.165-.077.23106l-.23111.0772a3.15389,3.15389,0,0,1-1.134.02051,19.52773,19.52773,0,0,1-4.25142-1.16469,14.49944,14.49944,0,0,1-2.326-1.14871,5.01068,5.01068,0,0,1-1.60015-2.02789C105.39212,29.83643,105.13971,29.06992,104.80425,28.338Z"/><path class="cls-35" d="M146.71142,39.89043a5.62425,5.62425,0,0,1-.39789,1.23567,17.12,17.12,0,0,1-1.91484,2.54432,39.62619,39.62619,0,0,1-3.11974,3.44832,17.31867,17.31867,0,0,1-1.86945,1.5957c-.75335.55355-1.45456,1.17413-2.21214,1.72654a15.55454,15.55454,0,0,1-7.331,2.87819c-1.11816.14288-2.23274.3243-3.34217.53385a22.11521,22.11521,0,0,1-2.31921.23237,1.41975,1.41975,0,0,1-.60679-.032c-.12589-.24912-.05988-.39248.23-.45628.16925-.03725.3517-.02792.47222-.185.83931-.17726,1.69609-.23553,2.54226-.36864,1.64625-.259,3.29263-.512,4.92977-.82969a13.60078,13.60078,0,0,0,5.50948-2.60931,36.83694,36.83694,0,0,0,5.06454-4.53631,44.52769,44.52769,0,0,0,3.94646-4.91287c.10151-.146.1616-.36451.41324-.33072.00522.0007.011.01817.01146.02807A.17125.17125,0,0,1,146.71142,39.89043Z"/><path class="cls-36" d="M146.71142,39.89043c-.18891-.06421-.193.11189-.25548.20266-.72443,1.05256-1.48348,2.08223-2.29812,3.06373a44.01132,44.01132,0,0,1-3.2085,3.46409,37.719,37.719,0,0,1-4.27118,3.54794,13.89874,13.89874,0,0,1-3.36086,1.75054,16.50294,16.50294,0,0,1-3.04993.67883c-1.59613.25752-3.19195.51717-4.79022.76075-.38968.05939-.78837.0598-1.18291.08733a1.78043,1.78043,0,0,1-1.07323.16621c-.9369-.12685-1.8812-.13657-2.82156-.20658-.30724-.02288-.64415.0014-.80879-.3552a1.052,1.052,0,0,1,.78139-.08607,6.04642,6.04642,0,0,0,1.607-.00331,6.6506,6.6506,0,0,1,.99777-.01689,12.97032,12.97032,0,0,0,2.39592-.19133,30.24977,30.24977,0,0,0,3.05332-.32095c1.32039-.20644,2.64177-.40646,3.95347-.66983a9.86574,9.86574,0,0,0,2.52968-.98306,17.435,17.435,0,0,0,3.46411-2.38915c.859-.7442,1.73367-1.47169,2.54793-2.27147a46.53757,46.53757,0,0,0,5.26562-6.31247,5.98462,5.98462,0,0,1,.90778-1.22881A5.6038,5.6038,0,0,1,146.71142,39.89043Z"/><path class="cls-37" d="M73.06682,48.74368c.12777-.05487.129-.05615.24925.06265A3.766,3.766,0,0,0,74.70423,49.932c.56419.17616,1.08088.45455,1.63674.63843a1.34977,1.34977,0,0,1,.46082.266A.60482.60482,0,0,0,77.46216,51c.33852-.11991.5586.19626.84189.28974a1.02782,1.02782,0,0,1,.39369.22921.91308.91308,0,0,0,.73878.24089.3063.3063,0,0,1,.33132.14624c-.03541.20028-.086.39938-.10179.60119a.44518.44518,0,0,1-.24954.3909.49976.49976,0,0,0-.23236.78826,1.10956,1.10956,0,0,1,.04414.4532,1.7619,1.7619,0,0,1-1.4494-.44078c-.29142-.279-.76047-.1647-1.115-.364a2.52819,2.52819,0,0,1-.46767-.23529c-.066-.05618-.21608-.22265-.27788.03177-.91231-1.17223-1.68885-2.43627-2.4861-3.686C73.291,49.22393,73.18767,48.97821,73.06682,48.74368Z"/><path class="cls-38" d="M133.0008,60.07318a22.18137,22.18137,0,0,1-1.84216,1.54044c-.80875.634-1.64837,1.22859-2.47468,1.84017a2.47794,2.47794,0,0,0-1.65044.05836,1.47462,1.47462,0,0,1-.90652.01113c-.21637-.145-.02982-.44891-.23933-.60956-.04163-.03192.04051-.14807.11689-.16817.31782-.08363.43965-.37944.6381-.58749.21533-.22575.15478-.37542-.162-.44146-.1873-.03906-.37688-.0718-.56806-.0931-.09621-.01072-.21273-.00164-.24678-.13464a3.02321,3.02321,0,0,1,1.40876-.42224c.356-.047.70578-.122,1.05815-.18582a1.1234,1.1234,0,0,0,.61687-.28547c.21412-.21081.52-.1992.77194-.319a6.65855,6.65855,0,0,1,2.84139-.5332C132.60138,59.75169,132.92676,59.69987,133.0008,60.07318Z"/><path class="cls-39" d="M76.84062,9.95466A7.32113,7.32113,0,0,1,78.45584,9.076c.32112.55329.88748.45965,1.38938.51a2.798,2.798,0,0,1,.86.16609c.16724.07281.33106.16238.35718.36606.02442.19044.12661.22815.29272.19315a.64622.64622,0,0,1,.45065.02154,2.98093,2.98093,0,0,0,1.37788.26788,24.24153,24.24153,0,0,1,2.64759.41875.16754.16754,0,0,1,.11465.09417.46414.46414,0,0,1-.5294.43478.63386.63386,0,0,0-.36349.10758.62224.62224,0,0,1-.3357.05594,17.78213,17.78213,0,0,0-3.66207.09591,8.46876,8.46876,0,0,1-2.86041-.18685.7767.7767,0,0,1-.47135-.24455c-.28869-.30936-.56779-.62768-.84413-.948C76.75989,10.29,76.66251,10.12778,76.84062,9.95466Z"/><path class="cls-40" d="M141.07493,51.675a14.6887,14.6887,0,0,1-1.21722,1.69933,17.97155,17.97155,0,0,1-4.84748,2.76691,19.321,19.321,0,0,1-3.50809.97452,23.71784,23.71784,0,0,0-3.33849.87583c-.9746.14521-1.94854.29333-2.934.34425a3.75043,3.75043,0,0,0-.79123.04561,1.98722,1.98722,0,0,1-1.37565-.2951c.00829-.234.20512-.18908.33677-.21053.84584-.1379,1.67719-.358,2.53124-.44674a27.5192,27.5192,0,0,0,3.62773-.67071q1.06575-.26166,2.14782-.44093a15.01447,15.01447,0,0,0,4.78224-1.84444c1.441-.79541,2.76937-1.7586,4.14877-2.64567C140.76722,51.74378,140.87633,51.5722,141.07493,51.675Z"/><path class="cls-41" d="M141.07493,51.675c-.63763.421-1.28635.82631-1.91033,1.26665-.97214.686-2.01444,1.25129-3.04466,1.83991a13.37105,13.37105,0,0,1-3.60738,1.47512c-1.05434.24432-2.13166.38881-3.18154.65844-.96429.24764-1.944.40839-2.92465.56923a2.90923,2.90923,0,0,1-.41738.044,2.90134,2.90134,0,0,0-.90241-.01459c-.5548.10944-1.09671-.07036-1.64414-.00456a.36131.36131,0,0,1-.31066-.12389c-.01023-.146.10439-.16312.20129-.17874,1.31285-.21159,2.62942-.398,3.9468-.57554,1.71825-.41676,3.47156-.66414,5.19532-1.0502a14.52909,14.52909,0,0,0,4.44409-1.97872,21.16168,21.16168,0,0,0,2.86284-2.07226c.64067-.56436,1.436-.93638,2.06969-1.52368.13652-.12652.15555-.106.31751-.02C141.83541,50.56908,141.465,51.12841,141.07493,51.675Z"/><path class="cls-42" d="M126.60528,53.7546c.757-.17373,1.52644-.27337,2.29379-.38534a17.11263,17.11263,0,0,0,6.50111-1.901,31.98047,31.98047,0,0,0,3.53466-2.49569,30.93388,30.93388,0,0,0,3.17644-2.83051c.95035-1.00054,1.83791-2.05649,2.698-3.13542q.75056-.94151,1.50423-1.88053a10.71143,10.71143,0,0,1-.60427,1.68955,40.27266,40.27266,0,0,1-4.31059,4.79408,25.00917,25.00917,0,0,1-2.29128,1.92462,31.55283,31.55283,0,0,1-3.58429,2.52044,11.79782,11.79782,0,0,1-3.62138,1.363c-1.62684.29967-3.2553.59215-4.90392.75109a.58594.58594,0,0,1-.22937-.00574A.43289.43289,0,0,1,126.60528,53.7546Z"/><path class="cls-43" d="M92.55579,8.23593c.3514.30749.81362.26251,1.22516.37434a4.14415,4.14415,0,0,1,.54648.16493,1.13547,1.13547,0,0,0,.67417.467,4.10576,4.10576,0,0,1,.8014.35541c.14833.0787.30155.16292.28168.36625a.37414.37414,0,0,1-.32439.3288.70788.70788,0,0,1-.36647-.09755,9.82322,9.82322,0,0,0-3.44416-.871,12.22285,12.22285,0,0,1-4.23395-.85951A5.34745,5.34745,0,0,1,85.86011,7.405c-.17144-.17764-.25932-.3247.04027-.44982a6.13431,6.13431,0,0,0,1.13208-.0215,4.40877,4.40877,0,0,1,1.136.0828,2.05081,2.05081,0,0,1,.80356.17186,18.73535,18.73535,0,0,0,2.87532.79517A1.2075,1.2075,0,0,1,92.55579,8.23593Z"/><path class="cls-44" d="M144.7068,45.20157a12.03765,12.03765,0,0,1-.69357,1.46238,22.80941,22.80941,0,0,1-3.54025,3.39856,29.149,29.149,0,0,1-5.34378,3.61825,11.91127,11.91127,0,0,1-3.23372,1.09683c-.68341.11486-1.35514.29058-2.03882.40549a.97418.97418,0,0,1-.3824.01524,8.955,8.955,0,0,0-2.12634.13872c-.25086.02749-.50246.08453-.75478.11734-.1449.01884-.314.0502-.39-.14285a.29268.29268,0,0,1,.2415-.1675c.97748-.11679,1.89892-.50074,2.8789-.60213,1.11659-.28738,2.27178-.38867,3.3824-.71362a13.98577,13.98577,0,0,0,3.05319-1.33767c1.19112-.6858,2.25446-1.5579,3.38862-2.32155a32.03228,32.03228,0,0,0,3.33022-2.8215,19.66387,19.66387,0,0,0,1.746-1.88388c.12724-.14783.229-.34748.47563-.3271.00528.00044.0122.01746.013.02716A.16015.16015,0,0,1,144.7068,45.20157Z"/><path class="cls-45" d="M144.7068,45.20157c-.20664-.03007-.27951.15451-.364.267a21.02991,21.02991,0,0,1-1.70328,1.86308,19.08609,19.08609,0,0,1-2.07168,1.86875c-.00993.00769-.02463.00952-.034.01769a39.94234,39.94234,0,0,1-3.20127,2.389,18.34558,18.34558,0,0,1-3.29555,1.85242,16.49658,16.49658,0,0,1-3.83693.98333,2.3663,2.3663,0,0,1-.82156.15878c-1.05723.08336-2.09572.31145-3.15129.40764a.905.905,0,0,1-.37966-.02643c-.0963-.19153-.05769-.28658.19754-.30146a8.4733,8.4733,0,0,0,1.3596-.25841c1.3897-.31148,2.78973-.57042,4.19151-.81833a12.17778,12.17778,0,0,0,3.18-1.13142,20.47787,20.47787,0,0,0,3.62179-2.32363,37.13751,37.13751,0,0,0,4.1256-3.56256q1.34126-1.40472,2.5856-2.89973c.09388-.11328.16049-.275.35462-.25048A16.013,16.013,0,0,1,144.7068,45.20157Z"/><path class="cls-46" d="M85.93075,11.16261a18.72282,18.72282,0,0,0-2.88592-.45961,2.36436,2.36436,0,0,1-1.28918-.289c-.17518-.11107-.34005.01148-.51042.03645-.15641.02292-.38161.08615-.27681-.222.06227-.18306-.041-.25548-.177-.32573a1.95167,1.95167,0,0,0-.81022-.20524c-.35648-.01855-.71294-.04413-1.0681-.07981-.31912-.032-.39168-.28752-.45725-.54169a8.19984,8.19984,0,0,1,1.85644-.81651,8.04727,8.04727,0,0,1,2.60071.90068,2.91058,2.91058,0,0,0,.94894.29773,1.76954,1.76954,0,0,1,.88622.34571.97662.97662,0,0,0,.41472.19432,15.54676,15.54676,0,0,1,1.58863.569,2.038,2.038,0,0,0,.73813.44825c.1.04153.34255.08015.128.28823-.47049-.00175-.9399-.03307-1.41013-.03428A.34772.34772,0,0,1,85.93075,11.16261Z"/><path class="cls-47" d="M76.53205,47.13073c-.49932.09393-.99609.20579-1.49858.2775a2.34143,2.34143,0,0,1-1.79976-.689c-.527-.41573-1.04917-.83761-1.57027-1.26073-.17933-.14561-.21545-.059-.21069.11581a15.47856,15.47856,0,0,1-1.08064-2.534.14208.14208,0,0,1-.00594-.20483c.07372-.06332.15028-.00037.19439.059a10.83823,10.83823,0,0,0,2.741,2.16462,1.584,1.584,0,0,0,1.59372.22146c.47136-.07154.92776.1396,1.40014.07278a.2044.2044,0,0,1,.18891.11168,2.9577,2.9577,0,0,0,.22439,1.07129A.43626.43626,0,0,1,76.53205,47.13073Z"/><path class="cls-48" d="M69.62251,41.11829c-.29757-.90836-.58652-1.81909-.82277-2.74612-.02885-.11323-.02216-.22421-.04657-.33392-.077-.11688-.01922-.16609.09447-.169a.498.498,0,0,1,.35673.11974c.55676.53132,1.27206.85366,1.82331,1.39091a5.30539,5.30539,0,0,0,1.66264,1.83154.703.703,0,0,1,.20188.2252c.27327.52009.50674,1.06.79606,1.57232.07654.13552.19529.2856.06.458-.2391.10473-.46677-.01817-.69978-.03419a12.79536,12.79536,0,0,1-3.2716-2.20422A.59511.59511,0,0,0,69.62251,41.11829Z"/><path class="cls-49" d="M85.8535,7.01828c-.194.11714-.05906.20144.03173.28353a5.88283,5.88283,0,0,0,2.20553,1.16977,11.61449,11.61449,0,0,0,1.90991.54607c.66723.096,1.34218.16524,2.01.20055a9.8531,9.8531,0,0,1,3.3912.86379c.12843.0551.25931.1045.389.15654a7.77668,7.77668,0,0,1,.8994.49167c.12322.07693.27772.14516.27082.33482a.23229.23229,0,0,1-.31054.06715,12.43885,12.43885,0,0,0-2.61211-.729,16.22877,16.22877,0,0,1-1.696-.27034,8.3362,8.3362,0,0,1-.98108-.16494A23.497,23.497,0,0,1,87.54108,9.214a8.72176,8.72176,0,0,1-.97631-.33323c-.29665-.14827-.59382-.29628-.90345-.41739a.73018.73018,0,0,1-.30641-.15247,2.61655,2.61655,0,0,0-1.405-.70734c-.13539-.04069-.30738-.07784-.32587-.275l.30364-.09581a.17959.17959,0,0,1,.23094-.01089l1.61811-.228A.05009.05009,0,0,1,85.8535,7.01828Z"/><path class="cls-50" d="M145.46387,43.43678q-.82291.932-1.64623,1.8636a23.66334,23.66334,0,0,1-2.122,2.21027c-.57785.50217-1.0939,1.08007-1.71642,1.53063-1.2882.93235-2.47142,2.00467-3.85412,2.81291a22.02235,22.02235,0,0,1-3.25867,1.53236,12.9026,12.9026,0,0,1-2.3098.51434c-1.31516.24191-2.63163.4782-3.926.81525-.28992.07549-.63167-.08607-.87275.19315a.32521.32521,0,0,1-.23948.1062,24.0001,24.0001,0,0,1-3.25875.0623c-.57227-.10007-1.1603-.06523-1.729-.19968-.1572-.03717-.336-.02541-.41435-.21314.058-.17506.21458-.16832.34981-.173a6.34718,6.34718,0,0,0,1.71708-.14978,1.14859,1.14859,0,0,1,.46-.00718,14.79479,14.79479,0,0,0,3.67221-.23417c.15125-.02046.30433-.0705.444.03862.5277-.077,1.05622-.14891,1.583-.232a21.09637,21.09637,0,0,0,6.47675-1.57662,20.47848,20.47848,0,0,0,3.06779-1.95888,37.5806,37.5806,0,0,0,5.08925-4.4764q1.33371-1.45449,2.574-2.99022c.04005-.04961.045-.16884.15916-.0897Z"/><path class="cls-51" d="M128.223,57.91323a.27923.27923,0,0,1,.20482-.15375c.97626-.24707,1.94-.567,2.92982-.73064a21.82817,21.82817,0,0,0,2.998-.76231,17.84664,17.84664,0,0,0,3.69676-1.7509,16.03384,16.03384,0,0,0,1.52132-1.03026c.06929-.05254.14191-.20344.284-.11107a14.006,14.006,0,0,1-2.23464,2.46314,18.92335,18.92335,0,0,1-2.61966,1.27625,12.91124,12.91124,0,0,1-2.58585.72908,8.66635,8.66635,0,0,0-2.82568.3551,2.33616,2.33616,0,0,1-.78408.13664C128.64611,58.14863,128.31793,58.19258,128.223,57.91323Z"/><path class="cls-52" d="M76.84062,9.95466c-.00578.07387-.04623.18209-.01215.21645.52192.52629.80344,1.33772,1.70438,1.41809.46843.04179.93167.14189,1.4001.18379a3.11634,3.11634,0,0,0,1.06734-.07093,1.26809,1.26809,0,0,0,.69464.18669,11.968,11.968,0,0,1,2.74294.25893,2.1025,2.1025,0,0,1,1.21477.47241c-.046.19111-.20029.15736-.33763.16573-.59515.03624-1.193.026-1.78583.10327a23.1,23.1,0,0,0-2.46856.20258,1.44,1.44,0,0,0-.53292-.05205,4.7112,4.7112,0,0,1-2.10174-.34625,1.3957,1.3957,0,0,0-.56188-.11292.79459.79459,0,0,1-.80516-.40913,1.49917,1.49917,0,0,0-.50093-.469,2.04639,2.04639,0,0,1-.6763-.91559.19036.19036,0,0,1,.03477-.21495Z"/><path class="cls-53" d="M142.16932,49.98612c-.27818-.0201-.4137.20765-.57193.3618-.45439.44267-1.05407.67657-1.52588,1.08192a24.3938,24.3938,0,0,1-2.89542,2.12738,15.74783,15.74783,0,0,1-6.34216,2.45218,23.74453,23.74453,0,0,0-3.24567.66308c-.06611.01856-.1393.08235-.21263.00863-.14929-.07423-.383-.0353-.39471-.29425a.27274.27274,0,0,1,.19279-.11276c1.14616-.18777,2.22435-.64955,3.37073-.83467a3.19761,3.19761,0,0,0,.48037-.12268,16.32107,16.32107,0,0,0,2.78836-.70458,20.02321,20.02321,0,0,0,4.32856-2.39047,45.74269,45.74269,0,0,0,4.24651-3.48188,3.421,3.421,0,0,1,.45585-.35232c.077-.0494.20494-.16739.24491.04895A12.65224,12.65224,0,0,1,142.16932,49.98612Z"/><path class="cls-54" d="M143.089,48.43645c-.06662-.08769-.128-.04877-.19134.006-.56908.492-1.14169.97988-1.70742,1.47565a30.68639,30.68639,0,0,1-5.12458,3.73353,14.64976,14.64976,0,0,1-3.41784,1.43478,9.08739,9.08739,0,0,1-1.57449.2854c-.89241.19554-1.81121.17949-2.70869.33628a.51225.51225,0,0,1-.33264-.05711c-.13981-.24544.0862-.2754.21489-.32715a2.85272,2.85272,0,0,1,1.28574-.18308,28.75483,28.75483,0,0,0,4.34561-1.01719,19.65521,19.65521,0,0,0,4.51447-2.57777,38.35238,38.35238,0,0,0,5.21469-4.49528c.12662-.13228.17188-.36431.40583-.38653A15.04484,15.04484,0,0,1,143.089,48.43645Z"/><path class="cls-55" d="M126.066,63.45861a4.14282,4.14282,0,0,0,1.3084-.16339,1.23058,1.23058,0,0,1,1.30953.15857c-1.51566,1.12835-3.08655,2.17476-4.69633,3.16344a2.77072,2.77072,0,0,1,.88825-1.371.18958.18958,0,0,0,.12559-.20533,2.41863,2.41863,0,0,1-1.78575-.0417,4.06841,4.06841,0,0,1,1.23648-1.70644c.08371-.06255.18856-.14282.27775-.11135C125.164,63.33458,125.63673,63.29205,126.066,63.45861Z"/><path class="cls-56" d="M133.0008,60.07318a1.537,1.537,0,0,0-1.33909-.21262,6.84642,6.84642,0,0,0-2.12908.51747,11.46608,11.46608,0,0,1-1.646.25037,2.07649,2.07649,0,0,1-1.08631-.11323c-.08906-.28041-.03135-.392.33705-.456a.779.779,0,0,0,.6687-.49072.9781.9781,0,0,1,.60051-.21184,6.6471,6.6471,0,0,0,1.55531-.36873,13.06129,13.06129,0,0,1,1.41676-.30239,9.73651,9.73651,0,0,0,3.55343-.71005c.12366-.05024.29549-.13849.37479.08534A19.3589,19.3589,0,0,1,133.0008,60.07318Z"/><path class="cls-57" d="M86.70108,10.62358a11.43744,11.43744,0,0,1-2.21427-.87118.78.78,0,0,0-.31818-.12567,7.48264,7.48264,0,0,1-2.34912-.88094,6.228,6.228,0,0,0-1.24873-.34763c-.10307-.02558-.2002-.03959-.2585-.13866a6.48677,6.48677,0,0,1,1.83979-.57109.21574.21574,0,0,1,.07384.018,14.4358,14.4358,0,0,0,3.01022,1.05571.81445.81445,0,0,1,.20439.10211,1.72093,1.72093,0,0,0,1.14668.63246c.83474.20353,1.61643.57557,2.45914.75119.12734.02654.29195.04781.289.24568a.40237.40237,0,0,1-.411.22512C88.18318,10.68994,87.44165,10.66765,86.70108,10.62358Z"/><path class="cls-58" d="M73.29507,12.77577a4.25045,4.25045,0,0,1,.92627-.84184.45963.45963,0,0,1,.22237.29691,2.27059,2.27059,0,0,0,1.67275,1.66008,1.311,1.311,0,0,1,.40961.20267.65248.65248,0,0,0,.47165.12134c.415-.07469.84089-.0079,1.25269-.10888a4.8266,4.8266,0,0,1,.71719.07554.876.876,0,0,1,.324.27249c.15742.26849.03855.42976-.227.46751-.79619.11317-1.57823.30664-2.37605.40672a1.179,1.179,0,0,0-.54371.16146c-.28257.18981-.59455.06921-.89577.055a.72822.72822,0,0,1-.52224-.408.82848.82848,0,0,0-.18378-.243A10.59352,10.59352,0,0,1,73.32124,13.057C73.26367,12.97324,73.21605,12.8775,73.29507,12.77577Z"/><path class="cls-59" d="M67.76878,23.25483A8.85088,8.85088,0,0,1,68.28347,21.25c.32532-.145.62136-.41194,1.02179-.246a1.38354,1.38354,0,0,1,.64159.7806c.06509.24787.28463.38721.473.54044.16011.13027.33016.25107.33474.48731a5.069,5.069,0,0,0-.24709.95839,3.319,3.319,0,0,1-.43115.68805c-.3033.22616-.66432.15239-1.00364.19324a.99763.99763,0,0,1-.659-.51533C68.226,23.82726,67.97967,23.55223,67.76878,23.25483Z"/><path class="cls-60" d="M71.061,15.47131A11.35678,11.35678,0,0,1,72.446,13.697c.03789.00713.08457.01418.1027.04459a9.719,9.719,0,0,1,1.29892,2.26854,1.44679,1.44679,0,0,0,.17974.648c.08595.17275.10738.33913-.09271.45715a1.33143,1.33143,0,0,0-1.43423.41976c-.10335.09006-.219.18851-.38.12223a15.495,15.495,0,0,1-1.05793-1.82778A.30317.30317,0,0,1,71.061,15.47131Z"/><path class="cls-61" d="M69.62251,41.11829c.077-.0509.13289-.02427.20035.03252.44525.37487.89567.74361,1.34319,1.11579a10.934,10.934,0,0,0,1.25.72159,2.88841,2.88841,0,0,1,.57257.3686c.22945.0996.30522.33344.44077.513.1994.26415.38734.537.5837.80374a1.06271,1.06271,0,0,0,.60731.49112.27369.27369,0,0,1,.21726.195,1.29847,1.29847,0,0,1-1.43721-.12357,20.03056,20.03056,0,0,1-2.45186-1.73,1.35316,1.35316,0,0,1-.42726-.53187c-.01852-.04646-.044-.14255-.12735-.07774-.02779.0216-.01572.09445-.02186.14387a3.54168,3.54168,0,0,1-.37091-.88245A10.46189,10.46189,0,0,1,69.62251,41.11829Z"/><path class="cls-62" d="M67.3514,26.87892l.0205-.908c.07905-.17914-.00849-.37519.05645-.55576l.02644-.46538a.66219.66219,0,0,1,.65677.20617,1.1139,1.1139,0,0,0,.58305.26477c.87917.37166,1.05494,1.159,1.17134,1.98183a1.25693,1.25693,0,0,1-.84445.60742,6.78435,6.78435,0,0,1-1.43737.07753c-.09564-.0135-.2098.02255-.255-.1083A9.68465,9.68465,0,0,1,67.3514,26.87892Z"/><path class="cls-63" d="M135.30686,58.06082c-.13563-.15016-.27191-.02087-.383.02375a9.72665,9.72665,0,0,1-2.19435.61408,12.58469,12.58469,0,0,1-1.348.062.96005.96005,0,0,1-.08319-.4087c-.0278-.25815.09827-.39038.34334-.47158.26963-.08934.56011.01021.81834-.121a16.94853,16.94853,0,0,0,2.48847-.73624,14.72051,14.72051,0,0,0,2.40988-1.1681c.071-.04892.16845-.1487.26475-.0176A20.80478,20.80478,0,0,1,135.30686,58.06082Z"/><path class="cls-64" d="M75.91646,10.57176A1.81222,1.81222,0,0,0,76.72,11.67819c.27183.13271.37913.40572.56323.61243.06842.07683.11461.18861.23038.17419a4.05174,4.05174,0,0,1,1.44429.29761,3.96385,3.96385,0,0,0,1.68417.177.3414.3414,0,0,1,.35821.07175.35091.35091,0,0,1-.28537.16744,27.69242,27.69242,0,0,1-3.368.33022,3.31468,3.31468,0,0,1-.34244-.01575.56436.56436,0,0,1-.3163-.124,8.44389,8.44389,0,0,1-1.59781-1.62379c-.09079-.14424-.23532-.28819-.09841-.48338A5.11209,5.11209,0,0,1,75.91646,10.57176Z"/><path class="cls-65" d="M68.3117,36.34338l-.4514-2.46718c.033-.11586.13494-.15017.20744-.0886.4184.35533.99491.41207,1.41453.76069a2.60322,2.60322,0,0,1,.34975.84c.1653.53468.60371.90469.7818,1.42247a1.01492,1.01492,0,0,1-.041.73373.86537.86537,0,0,1-.90823-.20032C69.23692,36.97468,68.77048,36.66609,68.3117,36.34338Z"/><path class="cls-66" d="M67.52542,31.324l-.01965-.37093a1.71537,1.71537,0,0,1-.024-.43734A2.05062,2.05062,0,0,1,67.573,29.654c.08827-.17765.17809-.28411.40656-.24315a3.17643,3.17643,0,0,1,.93314.152,1.26254,1.26254,0,0,1,.4527.64721,2.46593,2.46593,0,0,0,.10606,1.32028c.10474.34436-.0014.71007.10707,1.05556a.15053.15053,0,0,1-.08157.15988,2.61511,2.61511,0,0,1-1.91017-1.14914C67.53573,31.51267,67.58246,31.40669,67.52542,31.324Z"/><path class="cls-67" d="M128.7694,86.95128c-.00928.14011-.02668.28023-.0267.42034q-.002,12.51152-.011,25.023c-.0006.38327.10488.45875.46557.4513,1.18032-.0244,2.36154-.01658,3.54221-.00335.25644.00288.34767-.04581.3474-.32848q-.01219-12.66547-.00735-25.331c0-.0766-.01056-.15319-.01619-.22979.14675.10314.0877.25794.08775.39032q.00417,12.57035.00993,25.14067c.00038.34179-.09261.43486-.43145.42909q-1.79012-.03052-3.581.00061c-.36751.007-.47339-.09245-.47242-.46659q.01876-7.238.00828-14.47609,0-5.29378.003-10.58757C128.68762,87.23863,128.6228,87.07222,128.7694,86.95128Z"/><path class="cls-68" d="M68.3117,36.34338c.27408-.0402.43228.17691.6096.30975a8.71552,8.71552,0,0,1,.83673.65369c.17865.171.505.18774.76526.27343a.15064.15064,0,0,1,.17552.03153c.38727.348.749.72351,1.14673,1.0605a.19812.19812,0,0,1,.07043.239,1.74465,1.74465,0,0,0-.1118.15408c-.23018.42963-.33583.47654-.81851.3636-.55913-.48185-1.24075-.79879-1.77165-1.32345-.0954-.09428-.27337-.29549-.46084-.0673A12.50431,12.50431,0,0,1,68.3117,36.34338Z"/><path class="cls-69" d="M74.992,11.26191A2.80759,2.80759,0,0,0,76.13715,12.745c.2767.20389.42261.558.78027.65137.08316.05784.185.09918.21772.20649.06041.19813.21056.232.39034.2341a.85577.85577,0,0,1,.70154.33009c-.6531.08321-1.31764.36843-1.93911-.1126a.29249.29249,0,0,0-.14235-.05085,2.35345,2.35345,0,0,1-1.55337-1.12737c-.21966-.27658-.20642-.64429-.37085-.94231A3.28557,3.28557,0,0,1,74.992,11.26191Z"/><path class="cls-70" d="M73.759,16.015c-.14564-.70105-.70022-1.17622-.99459-1.7959A5.62028,5.62028,0,0,0,72.446,13.697a5.926,5.926,0,0,1,.84905-.92122,9.51589,9.51589,0,0,0,1.32929,2.05847c.20734.20741.26382.555.59864.64164a.435.435,0,0,1,.09767.45765,5.22844,5.22844,0,0,0-.67944.19388C74.357,16.24844,74.06007,16.02343,73.759,16.015Z"/><path class="cls-71" d="M67.60117,31.57294c.01265.00147.032-.00185.037.00511a3.84853,3.84853,0,0,0,1.807,1.14984c.21464.10589.22583.33.28685.5176a4.18853,4.18853,0,0,1,.241.92345c-.08858.24893-.22019.44283-.52821.40812-.45836-.26716-1.0229-.32993-1.41082-.73592-.04873-.051-.119.00366-.17372.03507-.118-.71422-.22132-1.43033-.27658-2.15261A.1116.1116,0,0,1,67.60117,31.57294Z"/><path class="cls-72" d="M92.55579,8.23593a18.867,18.867,0,0,1-3.95548-1.097c-.14323-.0621-.31167-.00312-.43185-.12247l.16082-.04246a3.78373,3.78373,0,0,1,.75609.01592l.3746.01852c.12347.07653.26983-.00106.39578.05874.97491.155,1.95709.26575,2.92221.4803.09573.0552.24293-.05721.30893.09482a15.14264,15.14264,0,0,1,1.70489.531c-.07123.388-.374.21746-.55717.18827-.4485-.07147-.89177-.17635-1.34375-.23743A.33717.33717,0,0,0,92.55579,8.23593Z"/><path class="cls-73" d="M71.061,15.47131a1.20379,1.20379,0,0,0,.2398.5949c.28591.51889.561,1.04374.8404,1.56623.1925.262.35529.5277.10808.84574-.45551-.06694-.88708-.25231-1.35192-.27683a3.08271,3.08271,0,0,1-.71293-.941.50568.50568,0,0,1,.03-.47772A8.37128,8.37128,0,0,1,71.061,15.47131Z"/><path class="cls-67" d="M164.46326,94.43542c-.04432.05941-.11112.092-.147.01611a.59628.59628,0,0,1-.01482-.22767c-.01434-.66011-.0142-.66012-.6613-.66012-1.12887,0-2.25781.00685-3.38656-.00554-.23583-.00258-.29944.0585-.29917.29765q.01035,9.34962-.00065,18.69925c-.00032.25522.09144.28774.31.28613,1.23143-.009,2.46315-.01608,3.69433.004.307.005.34953-.10016.34888-.37093q-.01282-5.38663-.0036-10.77331a.84848.84848,0,0,1,.04124-.452q.00438,5.677.01279,11.35421c.00054.23991-.08691.30733-.31545.306-1.28322-.00773-2.56664-.01357-3.8497.0026-.35885.00453-.30783-.21143-.30782-.42784q.00027-4.73425-.00013-9.46851c0-3.02788.00675-6.05578-.00823-9.08358-.00181-.36487.111-.449.45594-.44346q1.80894.0292,3.61858.00051c.321-.00468.43339.08949.411.41093C164.3493,94.076,164.26863,94.28905,164.46326,94.43542Z"/><path class="cls-74" d="M85.39131,8.92912a9.46466,9.46466,0,0,0-1.60971-.46668,4.19062,4.19062,0,0,1-1.62953-.774A5.82331,5.82331,0,0,1,83.624,7.32859a.88789.88789,0,0,0,.2637.149c1.02037.16108,1.71262.98981,2.65915,1.29751-.03457.3169-.26716.2455-.45287.21125A1.40021,1.40021,0,0,0,85.39131,8.92912Z"/><path class="cls-75" d="M68.90592,29.64728c-.32724-.166-.70285-.02548-1.03538-.16412-.13285-.05539-.14441.06965-.17891.14219a1.81476,1.81476,0,0,0-.18362.89067.04856.04856,0,0,1-.05992-.03733l-.01951-.45c-.0652-.18083.02207-.37712-.05645-.55659l-.0205-.90669a.93226.93226,0,0,1,.01871-.53561c.56286-.03042,1.1239-.10075,1.68923-.0769a.46509.46509,0,0,1,.16022.47274A3.49691,3.49691,0,0,1,68.90592,29.64728Z"/><path class="cls-76" d="M69.29082,21.09765a.4402.4402,0,0,0-.5016.01883.75968.75968,0,0,1-.50575.13351,14.60789,14.60789,0,0,1,.79053-2.21337c.0772-.186.15648-.37106.23481-.55656.1732-.10042.26454.038.34924.13741a5.26256,5.26256,0,0,1,.76116,1.27061c-.05633.36962-.37928.44735-.64875.51637-.28767.07369-.42.19184-.39068.48766A.24574.24574,0,0,1,69.29082,21.09765Z"/><path class="cls-23" d="M70.36945,19.86586c-.23146-.3602-.46141-.72138-.69514-1.0801a.54869.54869,0,0,0-.36552-.3057,17.32791,17.32791,0,0,1,.90564-1.6974c-.0787.43334.24147.69649.435,1.01265.0794.12969.17251.251.25938.37613.00916.48039.14334.95.12435,1.433A.80118.80118,0,0,1,70.36945,19.86586Z"/><path class="cls-67" d="M34.63653,86.95277c-.00687.14054-.01973.28109-.01975.42164q-.00144,12.50859-.01034,25.01718c-.00055.37548.0918.46315.4598.45488,1.16713-.02627,2.3355-.02395,3.50275-.00071.3342.00665.41439-.09655.39121-.407a1.2725,1.2725,0,0,1,.04269-.672.04674.04674,0,0,1,.03562.00652.37674.37674,0,0,1,.038.05725,1.63217,1.63217,0,0,0-.05443.75391c-.00359.21661-.04738.32712-.29792.32531-1.29548-.00938-2.59107-.00758-3.88657-.00117-.21348.00106-.31232-.06961-.2911-.2882.00739-.07622.001-.15378.001-.23073q0-12.48455.00352-24.96912C34.55111,87.26433,34.47637,87.08386,34.63653,86.95277Z"/><path class="cls-77" d="M68.67462,25.48821a.5946.5946,0,0,1-.57647-.22418,1.4173,1.4173,0,0,0-.64337-.31429c.17693-.55158.17005-1.13721.314-1.69491.39349.13231.5242.52965.71969.81871a1.22841,1.22841,0,0,0,.57152.49075l.02128.02922C68.89316,24.868,68.85718,25.21151,68.67462,25.48821Z"/><path class="cls-67" d="M177.22583,102.5521a1.79587,1.79587,0,0,1,.06058.72045c.00315,3.04846.00956,6.09694-.00762,9.1453-.00207.36752.11249.43365.44558.42644,1.21592-.02631,2.43248-.02357,3.64879-.03177-.07453.12847-.20111.09144-.311.09163-1.16753.00215-2.33509-.003-3.50257.005-.23243.00159-.348-.04219-.34715-.31354Q177.228,107.57389,177.22583,102.5521Z"/><path class="cls-67" d="M39.0672,94.56872c-.10942.11769-.11257.01719-.11348-.05939-.00323-.26857-.00145-.53718-.00145-.80579q0-3.14653-.001-6.29306c-.00011-.15276-.01458-.3055-.02237-.45825.15108.11868.08429.28588.08457.43047q.00663,3.38709.00493,6.7742A.66221.66221,0,0,0,39.0672,94.56872Z"/><path class="cls-67" d="M110.80912,119.22141c-.02047.14383.06162.16559.18093.16491q2.25971-.0131,4.51942-.0215c-.07912.1212-.204.08593-.31417.08607-1.38145.00189-2.76291.00348-4.14433-.00248C110.92411,119.44786,110.66086,119.53811,110.80912,119.22141Z"/><path class="cls-67" d="M83.85417,112.81517c1.46011.02565,2.92025.05633,4.38-.01616-.062.14254-.19115.10494-.30007.10512q-1.9029.00318-3.80578.00071C84.0286,112.90477,83.91883,112.92636,83.85417,112.81517Z"/><path class="cls-67" d="M75.69107,112.78575a.73742.73742,0,0,0,.18212.0474q2.10029-.00345,4.20058-.013c-.08116.11919-.20614.08393-.31684.0841q-1.868.003-3.736-.00073C75.90187,112.90322,75.75452,112.95374,75.69107,112.78575Z"/><path class="cls-67" d="M80.07392,93.58078q-2.10051-.00788-4.201-.01359a.72057.72057,0,0,0-.18194.04848c.04132-.13017.15081-.11919.25267-.11922q1.96436-.00063,3.92869-.00005A.21032.21032,0,0,1,80.07392,93.58078Z"/><path class="cls-67" d="M115.73519,71.23472l1.38995-.70672A3.1534,3.1534,0,0,1,115.73519,71.23472Z"/><path class="cls-67" d="M67.37034,28.02985l-.0187.53562a4.58512,4.58512,0,0,1-.00024-1.68656Z"/><path class="cls-78" d="M85.8535,7.01828l-.07681-.02435c.01324-.08648.05893-.15975.15008-.12893a4.99557,4.99557,0,0,0,1.10552.06864A9.78464,9.78464,0,0,1,85.8535,7.01828Z"/><path class="cls-78" d="M99.41191,10.53007l-.43182-.3021-.12341-.13757A.44587.44587,0,0,1,99.41191,10.53007Z"/><path class="cls-78" d="M108.03358,24.932a1.5484,1.5484,0,0,1-.13885-.67607l.21078-.07478Z"/><path class="cls-67" d="M136.14438,102.58635l.00059,1.2288A2.48882,2.48882,0,0,1,136.14438,102.58635Z"/><path class="cls-67" d="M127.55136,6.93352a3.19851,3.19851,0,0,1-.94319.05835A2.61183,2.61183,0,0,1,127.55136,6.93352Z"/><path class="cls-67" d="M129.997,6.99065a3.18526,3.18526,0,0,1-.952-.05633A2.63447,2.63447,0,0,1,129.997,6.99065Z"/><path class="cls-79" d="M103.57168,72.393c.26022.14072.12576.28773.00692.43446l-.23851-.12623C103.58485,72.72437,103.64182,72.60644,103.57168,72.393Z"/><path class="cls-78" d="M89.08537,6.98991q-.37809-.00792-.75614-.01587A1.10273,1.10273,0,0,1,89.08537,6.98991Z"/><path class="cls-78" d="M113.43006,13.3193a.80042.80042,0,0,1-.30652.35746C113.10711,13.45594,113.16417,13.29812,113.43006,13.3193Z"/><path class="cls-67" d="M95.0961,92.48258l-.76687-.00027A.98154.98154,0,0,1,95.0961,92.48258Z"/><path class="cls-67" d="M69.59728,92.48205l-.68972,0A.826.826,0,0,1,69.59728,92.48205Z"/><path class="cls-67" d="M145.6347,113.84119a2.29485,2.29485,0,0,1,.71885.05762C146.11363,113.88453,145.86559,113.96979,145.6347,113.84119Z"/><path class="cls-67" d="M45.79328,92.48174l-.6897.00016A.82888.82888,0,0,1,45.79328,92.48174Z"/><path class="cls-67" d="M170.976,92.48275l-.68992-.0007A.82278.82278,0,0,1,170.976,92.48275Z"/><path class="cls-67" d="M147.37256,113.89837a1.81826,1.81826,0,0,1,.64644-.05434C147.81257,113.96978,147.5885,113.88582,147.37256,113.89837Z"/><path class="cls-67" d="M148.62978,26.58731a.4945.4945,0,0,0-.06057-.03968.25033.25033,0,0,1-.01159-.28822l.01768-.30478C148.69974,26.15638,148.616,26.376,148.62978,26.58731Z"/><path class="cls-67" d="M93.5589,113.84155a2.07483,2.07483,0,0,1,.644.05712C93.98787,113.88489,93.76374,113.97187,93.5589,113.84155Z"/><path class="cls-67" d="M68.06055,113.84437a1.81789,1.81789,0,0,1,.64516.05407C68.49031,113.88594,68.26669,113.96943,68.06055,113.84437Z"/><path class="cls-78" d="M106.94673,20.4885a.60286.60286,0,0,1-.12747-.31212C106.91882,20.25713,107.15882,20.28054,106.94673,20.4885Z"/><path class="cls-67" d="M56.18711,102.84925a1.90021,1.90021,0,0,1-.05681-.64808C56.26027,102.40747,56.17332,102.63277,56.18711,102.84925Z"/><path class="cls-67" d="M147.17211,92.48275l-.61285-.001A.65221.65221,0,0,1,147.17211,92.48275Z"/><path class="cls-67" d="M148.55511,29.26227l.07753-.2443c-.01694.183.06457.37651-.05864.54817Z"/><path class="cls-67" d="M67.37213,29.47215a1.142,1.142,0,0,1,.05646.55659C67.30524,29.8538,67.38535,29.65824,67.37213,29.47215Z"/><path class="cls-67" d="M67.42835,25.41513a1.13391,1.13391,0,0,1-.05647.55562C67.38536,25.78509,67.30543,25.58981,67.42835,25.41513Z"/><path class="cls-67" d="M95.29206,113.89893a1.531,1.531,0,0,1,.57433-.05755C95.68576,113.96848,95.484,113.885,95.29206,113.89893Z"/><path class="cls-78" d="M116.5773,10.62354a.41966.41966,0,0,1-.29477.21626C116.29923,10.6566,116.42141,10.61711,116.5773,10.62354Z"/><path class="cls-67" d="M69.87636,113.89849a1.5555,1.5555,0,0,1,.5684-.05795C70.26635,113.96824,70.06653,113.8861,69.87636,113.89849Z"/><path class="cls-67" d="M44.33343,113.84327a1.5841,1.5841,0,0,1,.57293.05545C44.715,113.88594,44.5143,113.9669,44.33343,113.84327Z"/><path class="cls-78" d="M100.63934,11.40715l-.29957-.24561C100.51254,11.15453,100.67566,11.15926,100.63934,11.40715Z"/><path class="cls-67" d="M56.13256,104.12285a1.47371,1.47371,0,0,1,.05483-.57375C56.17435,103.74069,56.25487,103.94147,56.13256,104.12285Z"/><path class="cls-78" d="M145.70077,16.657l-.14189-.11026-.009-.13512C145.86351,16.33153,145.65194,16.57433,145.70077,16.657Z"/><path class="cls-78" d="M177.13585,94.664l-.23-.157C177.15084,94.31281,177.12909,94.50926,177.13585,94.664Z"/><path class="cls-78" d="M153.3319,94.664l-.23-.157C153.34688,94.31281,153.32513,94.50926,153.3319,94.664Z"/><path class="cls-78" d="M93.08689,7.64229c-.10336-.03035-.22221-.01023-.30892-.09483C92.90517,7.50015,93.06036,7.36172,93.08689,7.64229Z"/><path class="cls-78" d="M168.52515,92.68056c-.07028.07127-.15917.0488-.2437.04838C168.3283,92.53969,168.41,92.52569,168.52515,92.68056Z"/><path class="cls-67" d="M148.47678,30.57166c.0488-.13029-.0137-.2818.07705-.40422l.00841.40518c.035.07238-.003.08233-.0629.07349Z"/><path class="cls-78" d="M84.15858,7.22189l-.23094.01089c.01033-.0765.02934-.147.12844-.13953C84.13368,7.09912,84.147,7.161,84.15858,7.22189Z"/><path class="cls-78" d="M146.8496,18.872c-.08761-.05349-.05432-.15468-.09029-.22856C146.951,18.65581,146.99407,18.72686,146.8496,18.872Z"/><path class="cls-78" d="M122.75194,7.69635a.17449.17449,0,0,0-.01092.04944l-.29566.02973C122.485,7.50715,122.65249,7.73336,122.75194,7.69635Z"/><path class="cls-67" d="M67.44809,30.47869l.06.03725-.00228.43713C67.38812,30.8069,67.45957,30.63776,67.44809,30.47869Z"/><path class="cls-67" d="M170.97943,96.58982a.97509.97509,0,0,1,.48476.05681C171.30151,96.63748,171.12939,96.70816,170.97943,96.58982Z"/><path class="cls-78" d="M115.64564,11.31652a.44344.44344,0,0,1-.28754.21983C115.37228,11.3563,115.4891,11.31043,115.64564,11.31652Z"/><path class="cls-67" d="M169.8782,96.64735a.95321.95321,0,0,1,.48157-.058C170.21127,96.70841,170.03982,96.63716,169.8782,96.64735Z"/><path class="cls-67" d="M67.60117,31.57294l-.01749.15066c-.11141-.11971-.05081-.26452-.05828-.3995Z"/><path class="cls-67" d="M107.73534,74.48749l.378-.00127A.2889.2889,0,0,1,107.73534,74.48749Z"/><path class="cls-78" d="M89.85575,7.06717a.6531.6531,0,0,1-.3957-.05876C89.59326,7.01881,89.73715,6.95783,89.85575,7.06717Z"/><path class="cls-78" d="M166.73952,93.18048c-.07411.03471-.1316.10962-.22666.09361C166.53274,93.10816,166.60268,93.06335,166.73952,93.18048Z"/><path class="cls-67" d="M136.22286,101.739a.73958.73958,0,0,1-.059.40222C136.17074,102.00531,136.11111,101.85959,136.22286,101.739Z"/><path class="cls-67" d="M58.57154,101.893a.7577.7577,0,0,1-.05736.42086C58.52094,102.172,58.457,102.02032,58.57154,101.893Z"/><path class="cls-78" d="M181.3152,102.04668l-.00828-.15528c.162.03346.19188.10877.07318.23109A.11621.11621,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M105.41242,102.38161a.78319.78319,0,0,1-.05479-.4112C105.46656,102.0954,105.40791,102.24271,105.41242,102.38161Z"/><path class="cls-67" d="M157.56534,102.46688a.79407.79407,0,0,1-.05419-.41937C157.62058,102.1755,157.5595,102.32551,157.56534,102.46688Z"/><path class="cls-67" d="M181.3152,102.04668l.06488.07581-.01089.34318A.79228.79228,0,0,1,181.3152,102.04668Z"/><path class="cls-67" d="M169.69536,92.50317a.73628.73628,0,0,1-.4107.05643C169.40886,92.44834,169.55655,92.508,169.69536,92.50317Z"/><path class="cls-78" d="M148.49933,30.64611l.06288-.07351c.11869.11874.09154.194-.06841.22982Z"/><path class="cls-67" d="M148.17317,92.55775a.86279.86279,0,0,1-.41425-.05452C147.89865,92.508,148.047,92.44853,148.17317,92.55775Z"/><path class="cls-67" d="M157.51082,104.354a.78474.78474,0,0,1,.0546-.42006C157.55914,104.07532,157.62092,104.22581,157.51082,104.354Z"/><path class="cls-67" d="M58.51328,104.02416a.78392.78392,0,0,1,.05476.40671C58.46078,104.30727,58.51821,104.16152,58.51328,104.02416Z"/><path class="cls-67" d="M105.35589,104.43128a.77055.77055,0,0,1,.05618-.41775C105.40653,104.15444,105.4684,104.30457,105.35589,104.43128Z"/><path class="cls-67" d="M136.16523,104.25478a.74668.74668,0,0,1,.05913.40779C136.11021,104.54033,136.17078,104.39276,136.16523,104.25478Z"/><path class="cls-67" d="M126.31593,7.01011a.67723.67723,0,0,1-.40122.05951C126.03457,6.95625,126.1804,7.01787,126.31593,7.01011Z"/><path class="cls-67" d="M171.97711,92.55775a.856.856,0,0,1-.41317-.05454C171.70334,92.50788,171.85133,92.4487,171.97711,92.55775Z"/><path class="cls-67" d="M46.79451,92.55791a.72668.72668,0,0,1-.40275-.05644C46.52775,92.50765,46.67279,92.44962,46.79451,92.55791Z"/><path class="cls-67" d="M145.9003,92.5031a.82161.82161,0,0,1-.41964.057C145.6077,92.44659,145.75871,92.50953,145.9003,92.5031Z"/><path class="cls-67" d="M44.50687,92.50191a.7261.7261,0,0,1-.40456.05658C44.22449,92.44908,44.37021,92.50785,44.50687,92.50191Z"/><path class="cls-67" d="M96.09763,92.56088a.73186.73186,0,0,1-.41686-.05716C95.8215,92.50906,95.97166,92.44679,96.09763,92.56088Z"/><path class="cls-67" d="M148.55448,25.5052a.65338.65338,0,0,1-.055-.39744C148.60536,25.22813,148.54706,25.37121,148.55448,25.5052Z"/><path class="cls-67" d="M93.74,92.50339a.734.734,0,0,1-.41231.0568C93.45229,92.44781,93.60066,92.50825,93.74,92.50339Z"/><path class="cls-67" d="M70.59875,92.56a.73207.73207,0,0,1-.413-.05648C70.32525,92.50828,70.47381,92.4478,70.59875,92.56Z"/><path class="cls-78" d="M166.20009,93.4098c-.07332.03694-.13047.11228-.22648.09535C165.99277,93.33963,166.063,93.29538,166.20009,93.4098Z"/><path class="cls-67" d="M68.31448,92.5025a.87433.87433,0,0,1-.40795.05428C68.03067,92.44974,68.17673,92.5073,68.31448,92.5025Z"/><path class="cls-78" d="M88.19546,102.93568c-.30886-3.22483,2.68818-5.7422,5.19528-6.2551a6.69059,6.69059,0,0,1,7.87565,5.582A6.62838,6.62838,0,0,1,88.262,104.754,15.06279,15.06279,0,0,1,88.19546,102.93568Z"/><path class="cls-78" d="M45.44046,96.56916A6.62622,6.62622,0,0,1,46.56915,109.729a6.54828,6.54828,0,0,1-7.53825-5.02078c-.70494-3.98962,1.20424-7.08688,5.18448-8.02618A4.79038,4.79038,0,0,1,45.44046,96.56916Z"/><path class="cls-78" d="M75.724,103.1979c.32487,3.37788-2.5467,6.07615-5.37,6.52935a6.62965,6.62965,0,1,1,5.27949-8.25142A9.738,9.738,0,0,1,75.724,103.1979Z"/><path class="cls-78" d="M140.22787,103.2052a6.62809,6.62809,0,1,1,6.60744,6.61506A6.605,6.605,0,0,1,140.22787,103.2052Z"/><path class="cls-4" d="M127.64944,20.49762a.36642.36642,0,0,1-.0085-.339A.36642.36642,0,0,1,127.64944,20.49762Z"/><path class="cls-80" d="M115.28107,34.80766l.077-.23106.23111.077C115.608,34.94785,115.34875,34.68625,115.28107,34.80766Z"/><path class="cls-80" d="M109.2723,33.11323a.2326.2326,0,0,1-.2311-.154C109.15331,32.95794,109.26523,32.957,109.2723,33.11323Z"/><path class="cls-79" d="M110.81264,62.61159a5.14418,5.14418,0,0,0,1.13217,1.06258c.14042.12791.31519.21754.45971.34162a.43277.43277,0,0,1-.06156.75676c-1.02975.6414-1.94556,1.43484-2.90376,2.17218-.70619.54343-1.4564,1.03175-2.14217,1.59882a1.98579,1.98579,0,0,1-1.28743.54442.32064.32064,0,0,0-.265.19868.4644.4644,0,0,1-.22055.2032.95766.95766,0,0,1-.60409.03844c-.34866-.07437-.08543-.33042-.11459-.50192a1.49819,1.49819,0,0,1-.002-.19184c-.00437-.11608-.00177-.25751-.15759-.258a.22724.22724,0,0,0-.21645.23111,8.37813,8.37813,0,0,1-.28926.98762c-.09036.56337-.49176,1.04671-.42108,1.6545.0187.16079-.11527.18646-.23722.16639a3.81142,3.81142,0,0,1-.44537-.10861c-.54111-.15779-.54072-.15914-.54337.4234-.02416-.0432-.07393-.08977-.06874-.1291a2.40675,2.40675,0,0,0-1.02794-2.07307,1.336,1.336,0,0,1-.39207-1.38891,17.65093,17.65093,0,0,0,.33857-2.6837,2.96015,2.96015,0,0,1,.56487-1.32078c.378-.59108.3537-.759-.24547-1.10936-.48175-.28168-.92758-.62533-1.3851-.94753a.3725.3725,0,0,1-.17012-.36338c.13152-1.19084.69191-1.535,1.92084-1.423.206.01877.40656.12556.61929.04.60574.16018,1.1457.48479,1.73227.69546a.75036.75036,0,0,0,.61525-.01923,9.27991,9.27991,0,0,0,1.23314-.61986c.44822-.2792.47176-.4158.1147-.79984-.27163-.29214-.49246-.62271-.74658-.92766-.097-.11641-.19681-.24466-.11485-.41643a.87423.87423,0,0,1,.80245.24627,3.76621,3.76621,0,0,1,.49574.53338c.26786.318.48725.69989.95868.77316a.42918.42918,0,0,1,.24465.17789c.42841.52907.94151.97631,1.41511,1.46164A2.52952,2.52952,0,0,0,110.81264,62.61159Z"/><path class="cls-81" d="M105.49757,58.45255a3.71917,3.71917,0,0,0,.83212,1.16791c.5622.6528.53769.67223-.19689,1.13939-.40042.25465-.85555.388-1.26285.62275-.07739.04461-.16235.09566-.25267.05043a14.58081,14.58081,0,0,1-1.97-.901,2.28094,2.28094,0,0,0-1.26123-.38546,8.20584,8.20584,0,0,1-2.511-.44969c-.56383-.24151-1.14414-.44743-1.69621-.7127a18.11658,18.11658,0,0,0-1.73617-.71807c-.98341-.35287-1.94235-.77371-2.92448-1.1305a14.75411,14.75411,0,0,1-1.50083-.43854,1.66367,1.66367,0,0,1-.81427-.58461c-.19293-.30721-.62839-.30513-.95632-.4358a34.161,34.161,0,0,1-4.02688-1.70007c-.38-.211-.754-.43288-1.13153-.64834a1.344,1.344,0,0,0-.87054-.3095c-.2355.0269-.453-.21023-.65754-.36394-.35708-.26832-.73194-.51753-1.062-.816a3.97283,3.97283,0,0,0-1.26831-.62612.24035.24035,0,0,1-.07084-.2472c.11286-.344.07985-.71074.17515-1.0567a1.03684,1.03684,0,0,1,1.3013-.08118,2.05142,2.05142,0,0,1,.69881.79915.4927.4927,0,0,0,.20972.221,1.79638,1.79638,0,0,1,.87019.98312.46894.46894,0,0,0,.242.23944c.95208.55871,1.92946,1.06958,2.92568,1.54473a.36088.36088,0,0,0,.1439.05242,10.18569,10.18569,0,0,1,2.90529.81684,1.00022,1.00022,0,0,0,.815.00412.76847.76847,0,0,1,.52756.01337c.71544.14462,1.398.40886,2.12956.51113.7473.10445,1.48294-.03164,2.22283.016a.30515.30515,0,0,0,.31278-.23769.52524.52524,0,0,1,.64175-.35914,16.24625,16.24625,0,0,0,2.26689.06291,4.34521,4.34521,0,0,1,1.10607.11165,1.23046,1.23046,0,0,0,.75864-.02782,1.00574,1.00574,0,0,1,1.05844.1435c-.041-.44062-.00643-.48163.49742-.61932a.625.625,0,0,1,.41642.31474c.83356,1.16852,1.86025,2.1824,2.68319,3.35876A3.00284,3.00284,0,0,1,105.49757,58.45255Z"/><path class="cls-82" d="M80.38439,49.90345a4.82756,4.82756,0,0,1-.15445,1.3093c-.27457.15081-.261.49361-.4621.69336-.42907-.06363-.89022-.01217-1.23178-.37832-.07463-.08-.18133-.1317-.232-.238.16243-.34512-.10392-.63272-.19693-.90733-.11009-.325.048-.69953-.231-.98714-.1061-.10937.03839-.227.16345-.28118.34436-.14905.68982-.29552,1.03485-.443.28842-.15866.47413.08748.69989.17664A4.532,4.532,0,0,1,80.38439,49.90345Z"/><path class="cls-83" d="M102.64725,29.03122c.03722.00786.10175.00683.10764.02489.13027.40006.5055.63973.664,1.01992a19.336,19.336,0,0,0,1.07193,2.18063.55212.55212,0,0,0,.23636.24042c.14024.04022.18516.16885.24995.27584a10.23179,10.23179,0,0,0,5.0529,4.17554c.31912.1315.6399.25907.96373.37928.11938.04432.29074.055.28143.25266-.01854.29048.22811.31711.407.37583.88481.29043,1.80826.437,2.70135.68906a16.53567,16.53567,0,0,0,2.87668.55315.3312.3312,0,0,1,.3319.38441,1.16781,1.16781,0,0,0-.75216.14618,2.41072,2.41072,0,0,1-1.67474.15976c-.78777-.14729-1.59648-.21315-2.36976-.383a16.7331,16.7331,0,0,1-4.33757-1.7281,3.29828,3.29828,0,0,0-.57223-.19724.70765.70765,0,0,1-.38518-.23124,9.24839,9.24839,0,0,1-2.0468-1.94635,17.92431,17.92431,0,0,1-2.59848-5.13885A3.10335,3.10335,0,0,1,102.64725,29.03122Z"/><path class="cls-84" d="M111.27522,37.5804c-.59464-.25852-1.19543-.50393-1.78255-.77855a11.14581,11.14581,0,0,1-2.64452-1.66567,9.95154,9.95154,0,0,1-2.12094-2.6391c.07061-.36584-.303-.58364-.30814-.92423a2.90965,2.90965,0,0,0,1.05926.99121c.27487.16053.42237.53062.64414.79216a7.022,7.022,0,0,0,1.93982,1.65524.61045.61045,0,0,0,.36262.10427c.7619.26014,1.37875.80079,2.15422,1.05737,1.12912.37359,2.28715.60328,3.438.87844a16.09879,16.09879,0,0,0,2.23833.39849,33.76317,33.76317,0,0,0,3.66874.453,1.37861,1.37861,0,0,1,.98047.21643,2.3304,2.3304,0,0,1-.88782.14906,19.2957,19.2957,0,0,1-3.3243-.14295.25082.25082,0,0,0-.15147.00416c-.9598.574-1.89437.05546-2.83708-.063C112.88286,37.96362,112.10541,37.64,111.27522,37.5804Z"/><path class="cls-80" d="M104.80425,28.338a3.80185,3.80185,0,0,1,.68549,1.435,6.74169,6.74169,0,0,0,1.51765,2.4138,4.03126,4.03126,0,0,0,1.51724.88893c.45414.143.85466.45045,1.30848.63223a24.48073,24.48073,0,0,0,3.494.97422c.58014.13787,1.16266.03673,1.72281.20267.212.299.55662.18314.82451.21291,1.07127.11907,2.14994.1713,3.22572.25038.081.006.21145-.03819.2179.08621.007.134-.123.13848-.22555.1418-.11486.00371-.22991.00139-.34488.00169-.30426.391-.74817.3223-1.13971.28462-.683-.06571-1.36922-.12964-2.05117-.18509-.71453-.05809-1.40653-.2278-2.11633-.29353-.77473-.07175-1.54633-.1773-2.3193-.26812l-.077-.00017c-.08243-.18221-.27161-.17635-.42155-.22735a9.16877,9.16877,0,0,1-3.22461-1.78475,8.919,8.919,0,0,1-1.04677-1.26113A9.28838,9.28838,0,0,1,104.80425,28.338Z"/><path class="cls-85" d="M119.59505,64.84514c-.08038.11624-.21628.04618-.31413.09314-.12943.06211-.2703.13624-.09909.30272.08286.08056.13436.18544.02169.25621-.42869.26921-.67841.74889-1.14918.96534-.00427-.11289.09008-.18045.12594-.27345.11927-.30935-.02548-.567-.3424-.569a3.68853,3.68853,0,0,1-1.58407-.46539c-.80188-.39162-1.62429-.74157-2.42386-1.13956a17.01924,17.01924,0,0,1-1.75963-1.19271c-.31921-.21067-.60129-.48537-1.0262-.44192a30.20019,30.20019,0,0,1-2.73937-2.57077c-.31534-.31636-.52035-.71637-.80432-1.06193-1.0406-1.26636-2.2616-2.36824-3.278-3.65248-.28551-.36074-.5694-.723-.85618-1.083-.079-.0991-.16343-.20238-.11046-.34633.21257-.09237.29814.07812.39816.20075a18.13988,18.13988,0,0,0,1.75515,1.74335,4.75563,4.75563,0,0,1,.6604.69454,25.68717,25.68717,0,0,0,7.9502,5.5791,2.87581,2.87581,0,0,1,1.03351.65364.2609.2609,0,0,0,.09068.07063c.86191.33951,1.63136.86158,2.46919,1.2484a.36006.36006,0,0,0,.18369.05208,2.32657,2.32657,0,0,1,1.38018.39486C119.42825,64.3976,119.67784,64.49365,119.59505,64.84514Z"/><path class="cls-86" d="M103.26354,53.67736a10.00561,10.00561,0,0,0,1.12035,1.4513c1.16684,1.33877,2.44269,2.589,3.5335,3.985.6044.77354,1.31178,1.42329,1.96628,2.13395a9.87627,9.87627,0,0,0,.89817.77376c.11591.0987.2539.18174.26228.35913l-.23148.23106a1.0539,1.0539,0,0,1-.98021-.40014c-.63536-.68445-1.363-1.28007-1.94507-2.01646a.2722.2722,0,0,0-.15184-.10975c-.57727-.05411-.80156-.535-1.10722-.91172a1.7525,1.7525,0,0,0-1.13073-.721,11.43557,11.43557,0,0,1-.934-1.20161q-.89905-1.09157-1.79692-2.1841c-.24978-.30546-.49087-.618-.73591-.92736-.21436-.07335-.29066-.27691-.40733-.4394q-.71349-.99367-1.38989-2.01316c-.09689-.14647-.22054-.28832-.16511-.4884a1.71656,1.71656,0,0,0-.28914-1.56466c-.10061-.18191-.31567-.31519-.2376-.57128.21207-.12427.29583.052.38347.17788a4.60249,4.60249,0,0,0,.60678.76821c.78269,1.15729,1.69081,2.21826,2.55157,3.3157C103.16549,53.42886,103.31348,53.504,103.26354,53.67736Z"/><path class="cls-87" d="M102.64725,29.03122a19.29163,19.29163,0,0,0,.65037,2.23841,26.312,26.312,0,0,0,1.2426,2.50022c.42964.71876.8928,1.40344,1.38909,2.07365a8.77941,8.77941,0,0,0,1.19952,1.12284,1.87046,1.87046,0,0,1,.37166.38286.77273.77273,0,0,1-.40136-.20553,21.74617,21.74617,0,0,1-2.1227-1.973,1.16161,1.16161,0,0,0-.4031-.28579c-.129.03945-.19-.05347-.24212-.13776-.4757-.76965-.93758-1.54732-1.339-2.35972a23.77022,23.77022,0,0,1-1.2735-3.86448,34.23876,34.23876,0,0,1-.68445-3.97577,14.153,14.153,0,0,1-.19288-2.60013,2.89712,2.89712,0,0,0-.06579-.80076,13.33422,13.33422,0,0,0-.22315-3.66223,9.92653,9.92653,0,0,0-2.409-5.02522,9.1848,9.1848,0,0,0-1.01185-1.04934.53028.53028,0,0,1-.18517-.40059c-.34179-.32184-.85562-.38573-1.15554-.77036.3373-.3008.32492-.3663-.07693-.57989a5.74349,5.74349,0,0,0-.98236-.40543c-.23827-.07469-.40736-.202-.40419-.478a13.009,13.009,0,0,1,3.5316,1.63325,8.66,8.66,0,0,1,3.47038,5.4176,15.05439,15.05439,0,0,1,.39683,3.25761c.00994,1.03163.00618,2.0662.0848,3.09363q.14706,1.9218.34417,3.8415A26.60036,26.60036,0,0,0,102.64725,29.03122Z"/><path class="cls-88" d="M103.10947,32.42006a19.21964,19.21964,0,0,0,1.46386,2.46483,2.60093,2.60093,0,0,0,.81354,1.13934,14.56487,14.56487,0,0,0,3.14495,2.78041,17.06018,17.06018,0,0,0,3.54767,1.72112,35.233,35.233,0,0,0,3.39469,1.08257c.211.04646.42237.09337.63576.12562.14642.02213.24106.07863.24962.23649a.69347.69347,0,0,1-.78726.192c-.82189-.17633-1.61678-.49362-2.43876-.61346a11.72724,11.72724,0,0,1-2.47332-.80044,14.00665,14.00665,0,0,1-2.07416-1.0568,1.69571,1.69571,0,0,0-.54632-.2629c-.3471.04715-.45511-.28164-.67815-.4301a4.64282,4.64282,0,0,0-.9657-.86872,12.09344,12.09344,0,0,1-2.37324-2.66244,18.86892,18.86892,0,0,1-2.23343-4.70817c-.03953-.12224-.09458-.24338.00656-.36262.31608-.063.38853.18654.46687.39059a12.6471,12.6471,0,0,0,.53571,1.25862A.96543.96543,0,0,0,103.10947,32.42006Z"/><path class="cls-89" d="M116.74475,44.358a3.528,3.528,0,0,0-1.15554.15423,2.65074,2.65074,0,0,1-1.15609-.19358,22.35364,22.35364,0,0,1-4.0636-1.61624,17.73923,17.73923,0,0,1-3.2828-2.12182,14.31458,14.31458,0,0,0-1.16832-1.10492,16.75888,16.75888,0,0,1-1.80177-2.03472c-.08-.09762-.1786-.19423-.09064-.33866a.24447.24447,0,0,1,.32775.1188,5.18528,5.18528,0,0,0,1.49114,1.35049c.54589.36431,1.01642.85688,1.54657,1.257a11.24313,11.24313,0,0,0,2.46794,1.46475,21.35126,21.35126,0,0,0,5.00981,1.92128,1.1779,1.1779,0,0,1,.56594.21929.89678.89678,0,0,0,.80944.42509A.49158.49158,0,0,1,116.74475,44.358Z"/><path class="cls-90" d="M115.43514,43.4339a14.41738,14.41738,0,0,1-2.38941-.63624,20.67328,20.67328,0,0,1-2.73736-1.157c-.16893-.08916-.33138-.1906-.49682-.28638a14.80842,14.80842,0,0,1-3.66336-2.56961,12.65126,12.65126,0,0,1-1.84819-2.056c-.0726-.11428-.20266-.21045-.13055-.37574.13773-.06822.21442.03916.29757.11023.98158.83892,1.9185,1.73048,2.95606,2.50334.23581.11373.35405.38425.61666.46226a8.85834,8.85834,0,0,0,1.87955,1.15889A26.12916,26.12916,0,0,0,116.2061,42.835c.139.02991.32807.03265.39619.18592.03552.07988-.08813.13822-.16569.1821A2.53,2.53,0,0,1,115.43514,43.4339Z"/><path class="cls-91" d="M107.11531,40.50708a21.8878,21.8878,0,0,0,6.78573,3.54577c.558.18071,1.14546.235,1.68817.45941.04746.16844.29968.15041.32505.377a11.74626,11.74626,0,0,1-3.86868-.83908.81387.81387,0,0,1-.7713-.0949,28.55056,28.55056,0,0,1-2.71993-1.51c-.36966-.26174-.84134-.30614-1.18546-.62193-.35838-.32888-.76067-.61117-1.116-.94273-.51548-.48095-1.094-.88637-1.60205-1.37421a17.44945,17.44945,0,0,1-1.8655-2.24491c-.17565-.23659-.31411-.4998-.51047-.72217-.22928-.33816-.433-.69234-.64958-1.03847a.49213.49213,0,0,1-.09282-.46953c.32989-.33664.4598.0606.66571.18055.44508.58866.80928,1.23148,1.29425,1.79826a14.19458,14.19458,0,0,0,1.63486,1.70757c.62175.52179,1.19127,1.11283,1.80639,1.64917A2.0178,2.0178,0,0,0,107.11531,40.50708Z"/><path class="cls-92" d="M102.3393,36.502c.42779.45665.72563,1.0095,1.116,1.49691a13.80188,13.80188,0,0,0,2.33989,2.34166c.60177.46443,1.15863.99645,1.74509,1.488.36962.30979.85863.34985,1.24184.64889a25.53168,25.53168,0,0,0,2.26589,1.26673,2.15424,2.15424,0,0,0,.99757.306c.003.12766.0997.17049.19563.208a26.56889,26.56889,0,0,0,3.49243,1.114,5.53236,5.53236,0,0,0,1.62718.37259c-.38769.2047-.76464.001-1.14291-.03978a7.1041,7.1041,0,0,0-1.322.03941.31643.31643,0,0,1-.36267.02483c-.82464-.32873-1.722-.43357-2.53448-.77986a18.85522,18.85522,0,0,1-5.43253-3.07053,16.91478,16.91478,0,0,1-1.53388-1.14942c-.29883-.33429-.60292-.66357-.88748-1.01051a4.68307,4.68307,0,0,0-.7147-.989c-.42719-.61827-.74025-1.30691-1.18222-1.91742C102.17167,36.74713,102.1,36.56351,102.3393,36.502Z"/><path class="cls-93" d="M119.59505,64.84514a.56326.56326,0,0,0-.46221-.46211c-.25421-.18462-.08279-.385.04848-.47478a8.31656,8.31656,0,0,0,1.285-1.3115,2.88351,2.88351,0,0,1,1.3623.11106c.735.18387,1.483.30259,2.21794.48293.14842.03642.30947.03966.40173.19123-.25594.35785-.66448.59309-.84273,1.00787-.09841.229-.1472.47731-.38984.60934-.35129.105-.72183.07027-1.07942.2018a1.61772,1.61772,0,0,1-1.03923-.15216A3.80322,3.80322,0,0,0,119.59505,64.84514Z"/><path class="cls-94" d="M104.188,39.73679a8.10424,8.10424,0,0,1,.97124,1.02746c.49432.514,1.15492.78011,1.68251,1.2463a17.59011,17.59011,0,0,0,4.426,2.56268,24.49831,24.49831,0,0,0,2.60583.86606,3.826,3.826,0,0,0,1.02239.30509,17.04312,17.04312,0,0,0,2.52954.693.69112.69112,0,0,1,.1667.07715,2.946,2.946,0,0,1-.85426.15383l.08391.46233-.53925.00019c-.19649.16947-.41238.06665-.62163.04236a5.90669,5.90669,0,0,1-.85834-.18693A19.38764,19.38764,0,0,1,110.81,45.38972a24.83688,24.83688,0,0,1-5.12777-3.58044c-.67549-.63439-1.26825-1.33793-1.8993-2.00922a.64972.64972,0,0,1-.23991-.57956C103.93475,39.17168,103.9978,39.53361,104.188,39.73679Z"/><path class="cls-95" d="M116.05142,49.74938a5.22327,5.22327,0,0,0,1.84885.46212c-.09923.19457-.26346.15476-.43291.1301-.33838-.04924-.67838-.0876-1.01806-.12758a.17656.17656,0,0,0-.16677.0745c-.184.15507-.38893.08471-.58825.051a15.86658,15.86658,0,0,1-5.207-1.9169,33.46586,33.46586,0,0,1-3.7352-2.43035,18.7315,18.7315,0,0,1-3.08239-2.769,3.17933,3.17933,0,0,1-.65667-.92658c.22406-.14659.35844.04549.49248.1533.28916.23255.53338.51554.79809.77575a1.15183,1.15183,0,0,0,.3953.29763c.59694.46295,1.13616.99413,1.73815,1.45251a30.24018,30.24018,0,0,0,5.10324,3.19792,25.92753,25.92753,0,0,0,2.9957,1.19736c.33319.11334.6794.12452,1.012.21608C115.71791,49.634,115.9093,49.61609,116.05142,49.74938Z"/><path class="cls-96" d="M103.03262,42.27852a12.98047,12.98047,0,0,0,2.21187,2.37448,34.7846,34.7846,0,0,0,3.07266,2.32413c1.04806.68327,2.12709,1.3072,3.2264,1.89794a13.03931,13.03931,0,0,0,3.64439,1.25789,3.92274,3.92274,0,0,0,1.09459.15556c.14818.23128.41725.21088.634.29305.12793.04849.27309.0492.36749.16906a.57712.57712,0,0,1-.46376.11266,14.57069,14.57069,0,0,1-1.69214-.1572,10.88228,10.88228,0,0,1-2.70693-.82659,27.16411,27.16411,0,0,1-3.47006-1.80118,1.60635,1.60635,0,0,1-.24646-.18175q-.97491-.772-1.94877-1.5459A14.43452,14.43452,0,0,1,104.336,44.184c-.4256-.532-.974-.93844-1.3664-1.49475a2.36218,2.36218,0,0,0-.42047-.58709c-.08232-.06413-.06332-.18794.00167-.283A.45517.45517,0,0,1,103.03262,42.27852Z"/><path class="cls-97" d="M115.05,50.597a15.72194,15.72194,0,0,0,2.234.15362c1.15087.06313,2.29136.23065,3.43653.33972a18.49094,18.49094,0,0,0,2.24129.2.82085.82085,0,0,1,.485.07642.1763.1763,0,0,1-.20259.07231c-.52913-.188-1.05426.07457-1.582.00753a.40547.40547,0,0,0-.37237.15122c-.32895.20782-.67925.047-1.00785.02466-1.15935-.07878-2.32149-.14473-3.47205-.322a9.44389,9.44389,0,0,0-1.39316-.39869C115.25571,50.86731,115.04524,50.84977,115.05,50.597Z"/><path class="cls-98" d="M116.74474,51.21275c1.08465.0992,2.16905.2012,3.25406.29621.42964.03762.86065.05972,1.291.08888.3703.16441.77448.04089,1.15784.147a8.51531,8.51531,0,0,0,2.23215.08291,3.00438,3.00438,0,0,1,.56712.06449,1.90942,1.90942,0,0,0,1.02547-.10673c.28556-.10238.57124.02376.8652-.02188.595-.09239,1.19577-.20143,1.78766-.247.51177-.03935.99475-.19805,1.5072-.22232a7.54978,7.54978,0,0,0,1.9147-.30227,1.26286,1.26286,0,0,1,.34391-.01042,2.99632,2.99632,0,0,1-1.42073.37549c-1.3267.23436-2.66374.41519-3.99819.59131-.66255.08744-1.34106.14366-2.01439.19077a3.06629,3.06629,0,0,1-1.54788-.05334c-.153-.0683-.21365.08687-.32673.24114a5.6982,5.6982,0,0,0,1.30707.03694,15.89358,15.89358,0,0,1-3.09226.23509.582.582,0,0,1-.50525.1107c-1.08957-.1072-2.188-.08193-3.27518-.22222a1.83966,1.83966,0,0,1-.48356-.10372,11.45869,11.45869,0,0,0-1.34332-.4094c-.18053-.06607-.41515-.05189-.49331-.29331.23384-.19142.48379.0138.7195-.03054-.33635-.21222-.76694-.21868-1.09939-.4912A3.87768,3.87768,0,0,1,116.74474,51.21275Z"/><path class="cls-69" d="M148.55762,26.25941l.01154.2883c-.00289.15373-.0041.3076-.00909.46135a2.42513,2.42513,0,0,1-.24347,1.46081,1.35422,1.35422,0,0,0-.19633.803.74459.74459,0,0,1-.16415.45773,5.2388,5.2388,0,0,0-.68073,1.38676,18.69578,18.69578,0,0,1-1.1476,2.57084c-.25431.41-.35947.89708-.62191,1.31335-.55516.88057-1.10875,1.76193-1.63924,2.65882-.52836.8933-1.19611,1.703-1.76059,2.57662a14.70086,14.70086,0,0,1-1.04835,1.362,10.91082,10.91082,0,0,1-1.05055,1.13016c-.33576.30583-.55431.72652-.90174,1.03574-.93764.83454-1.84141,1.70395-2.86025,2.44852a16.13436,16.13436,0,0,1-2.96824,1.719,7.46953,7.46953,0,0,1-2.06983.51169c-.9908.13125-1.98946.18265-2.98181.30362a10.35671,10.35671,0,0,1-1.11416.10427,5.09152,5.09152,0,0,0-1.64285.16519c-.19512.06863-.35253-.01921-.52413-.04131a5.497,5.497,0,0,0-1.16623.15058c-.63618.04975-1.25455-.21108-1.8845-.17671-.46684.02547-.91382-.28924-1.40859-.00328-.18487.10684-.51955-.08169-.78079-.06316-.55911.03965-1.07553-.20626-1.62634-.202a.632.632,0,0,0-.25445.06685,4.44389,4.44389,0,0,1-1.64123-.3324c-.09872-.02955-.23785-.05415-.20792-.22012a.5426.5426,0,0,1,.47373-.0549c.4032.07211.81157.00983,1.21539.05336.07279.00785.09415-.00563.1191-.08689.09224-.30044.293-.2484.50314-.12924,1.2072.07749,2.40939.20261,3.60793.36673a5.90721,5.90721,0,0,0,1.0275.08762c.68723-.02753,1.36845.05735,2.05971.02881,1.49251-.06161,2.97764-.18038,4.46341-.32054a17.93,17.93,0,0,0,2.61447-.31371,10.96573,10.96573,0,0,0,3.67612-1.76863,22.15609,22.15609,0,0,0,3.05627-2.60906,34.50924,34.50924,0,0,0,3.98745-4.92792,43.26384,43.26384,0,0,0,3.24224-5.653,42.36023,42.36023,0,0,0,2.47212-6.51691A.34868.34868,0,0,1,148.55762,26.25941Z"/><path class="cls-99" d="M118.28545,47.97794a1.35672,1.35672,0,0,0-.15364.00107c-.09614.011-.21832-.04328-.27764.07232-.07994.15577.15985.13233.17017.28293l-2.04995-.12513c-.158.14325-.33745.08335-.51119.04962a17.47507,17.47507,0,0,1-4.931-1.78356,24.47971,24.47971,0,0,1-5.74458-4.20255c-.43442-.43068-.86348-.87223-1.25621-1.34469-.27719-.4316-.588-.84054-.89763-1.24776a19.84407,19.84407,0,0,1-1.54917-2.42788c-.06138-.111-.14187-.21936-.07534-.35789.2627-.064.30707.1731.41581.31078.16331.20679.22576.494.49628.61474a3.30225,3.30225,0,0,1,.81288.96226,21.82918,21.82918,0,0,0,5.30249,5.24571,19.27,19.27,0,0,0,2.57919,1.36231,22.746,22.746,0,0,0,4.12592,1.50945,12.394,12.394,0,0,0,1.54071.23125,3.42084,3.42084,0,0,0,1.42628.53689C117.9336,47.717,118.20843,47.65926,118.28545,47.97794Z"/><path class="cls-34" d="M103.9912,15.76834a.36618.36618,0,0,1,.00851.339A.36618.36618,0,0,1,103.9912,15.76834Z"/><path class="cls-100" d="M116.05142,49.74938a9.04608,9.04608,0,0,1-1.60607-.30927,24.82036,24.82036,0,0,1-6.2407-3.08084,32.69528,32.69528,0,0,1-3.55447-2.77152c-.59419-.54027-1.11406-1.15082-1.65888-1.73833-.3913-.422-.64613-.94271-1.0407-1.36135a.49466.49466,0,0,1-.169-.51663c.19936-.06005.26687.10536.35429.21839a22.45843,22.45843,0,0,0,2.6744,2.77081.50126.50126,0,0,0,.22488.13966.69671.69671,0,0,1,.32959.19,15.20824,15.20824,0,0,0,3.31756,2.48578,20.89584,20.89584,0,0,0,7.08818,2.878.2989.2989,0,0,1,.20385.0946c.06436.26076.31134.23641.49073.29647a10.08826,10.08826,0,0,0,2.51365.62719c-.0432.02416-.08833.07226-.1293.06894-.73193-.05937-1.468.06634-2.19912-.05507A.86267.86267,0,0,0,116.05142,49.74938Z"/><path class="cls-101" d="M117.284,52.291c1.4294.223,2.87469.22357,4.314.30808a7.45441,7.45441,0,0,0,1.15328.15137,19.94371,19.94371,0,0,0,2.62146.00267c-.20049.23675-.50134.16619-.75056.21239a8.67985,8.67985,0,0,1-1.29058.09316,17.32487,17.32487,0,0,0-1.79255.07164c-.64666.0885-1.29274-.11316-1.94378-.0687a.6576.6576,0,0,1-.54789.10765,19.09292,19.09292,0,0,1-2.13054-.27882,1.33547,1.33547,0,0,0-.72659-.31323,1.44753,1.44753,0,0,1-.33605-.07979c-.12009-.04575-.28218-.09806-.25692-.24226.028-.16.20195-.12624.32183-.107A6.08538,6.08538,0,0,1,117.284,52.291Z"/><path class="cls-102" d="M115.97439,48.7487a6.61089,6.61089,0,0,1-1.79314-.36266,24.25482,24.25482,0,0,1-3.03227-1.18546,26.04683,26.04683,0,0,1-5.05172-3.08789,7.00689,7.00689,0,0,1-.72254-.68117c-.11916-.1184-.22086-.25513-.4164-.22905A8.45292,8.45292,0,0,0,103.786,41.992a27.85578,27.85578,0,0,1-2.23175-2.93572c-.1703-.23986-.30342-.50512-.47248-.74788-.09891-.142-.22463-.29021-.14863-.49139.15841-.07041.24866.04634.31406.14421a24.5847,24.5847,0,0,0,2.32465,2.93091c.41991.3695.777.80039,1.16857,1.1966A23.22635,23.22635,0,0,0,108.763,45.311a20.1061,20.1061,0,0,0,4.9384,2.40532,8.89788,8.89788,0,0,0,2.273.49284,6.18975,6.18975,0,0,0,1.64316.46074c.07691.01008.15442.00617.20569.07826v.077A6.7637,6.7637,0,0,1,115.97439,48.7487Z"/><path class="cls-103" d="M76.53205,47.13073a.67985.67985,0,0,0,.05348-.67741c-.09813-.3008-.32672-.59488-.13028-.94.03777-.388-.04941-.77367-.022-1.16168a.34373.34373,0,0,1,.23632-.10811,2.9581,2.9581,0,0,0,1.57493-.66083.25416.25416,0,0,1,.18106-.03869c.199.103.30742.304.47681.43969a.53043.53043,0,0,1,.10908.31866,2.96067,2.96067,0,0,0,.26058,1.21143c-.02812.16872-.15877.20981-.29866.25078-.4654.13636-.56629.33077-.43005.82576.08126.2952.19306.59074-.08521.84867A10.04146,10.04146,0,0,1,76.53205,47.13073Z"/><path class="cls-104" d="M78.45812,47.439a1.18761,1.18761,0,0,0-.02451-.84554c-.21443-.51363-.00367-.83849.55466-.9245a.28034.28034,0,0,0,.24059-.15544c.2125-.05962.348.089.50326.18492a.92893.92893,0,0,1,.33322.62053c.03255.32656.34787.52716.4421.83579-.30052.483-.079,1.14647-.54487,1.57484-.064.05882-.09862.14955-.19484.17259-.24948-.02191-.42843-.25538-.69332-.23107A2.7363,2.7363,0,0,1,78.45812,47.439Z"/><path class="cls-105" d="M116.89881,52.83a17.37,17.37,0,0,1,1.85531.20526c.28053.014.56114.009.84112.02639a2.09262,2.09262,0,0,0,1.012.24076,20.6139,20.6139,0,0,1,2.62214.21012c.36133.074.70655-.09858,1.06486-.06619.06853.27093-.1584.22881-.27743.22243a.42488.42488,0,0,0-.49293.31671.53364.53364,0,0,1-.43024.11793c-1.59569-.02474-3.18952-.10007-4.78259-.18025a9.56748,9.56748,0,0,0-2.03386-.52353,19.99246,19.99246,0,0,1-3.98214-1.25751,24.58873,24.58873,0,0,1-3.12776-1.63554c-.11564-.07268-.26578-.11058-.29762-.27483.16433-.17569.32438-.0701.47627.01579.37461.21184.75763.4078,1.13648.61158a1.3061,1.3061,0,0,0,.75365.21593,9.62624,9.62624,0,0,1,1.56257.63739,14.05587,14.05587,0,0,0,3.55494.94772A1.2,1.2,0,0,1,116.89881,52.83Z"/><path class="cls-106" d="M118.20841,53.83123c1.09849-.03665,2.19357.07338,3.2905.10011.6735.01641,1.35.03131,2.025.0541a16.4266,16.4266,0,0,0,2.66007-.22057,1.99491,1.99491,0,0,1,.42135-.01027c.06969.12095.1861.22322.15407.38488a27.88555,27.88555,0,0,1-3.09228.37723,4.18622,4.18622,0,0,1-.72118-.03266,24.06236,24.06236,0,0,0-2.81159.19437.38655.38655,0,0,1-.35366.10644c-1.136-.1592-2.29656-.06617-3.42161-.3341a.91655.91655,0,0,1-.35755-.126c-.06832-.2096.08713-.34.17629-.49453A9.42514,9.42514,0,0,1,118.20841,53.83123Z"/><path class="cls-107" d="M124.44829,63.382c-1.255-.23049-2.48523-.584-3.75249-.75459a.46839.46839,0,0,0-.25336.06141,9.4734,9.4734,0,0,1-3.63219-.37224,1.56741,1.56741,0,0,1-.87083-.35078.86807.86807,0,0,1,.26982-.72782.62067.62067,0,0,1,.47882-.06317,22.06993,22.06993,0,0,0,2.95958.34985.75646.75646,0,0,0,.34058-.02551,3.3359,3.3359,0,0,1,1.3951-.15547,11.75309,11.75309,0,0,1,2.44621.04691c.46019.02469.92.04317,1.3807.039.1646-.00151.33586-.03086.47062.1038a4.31449,4.31449,0,0,1,.86625.08318.36735.36735,0,0,1,.34156.26129c.05646.15392-.045.25089-.14533.32011-.28819.19888-.33468.68454-.84993.66391.40028.14069.21063.38431.17263.5968a2.236,2.236,0,0,1-1.19508-.17232C124.69978,63.18535,124.58646,63.33815,124.44829,63.382Z"/><path class="cls-108" d="M125.68085,61.53332a25.09434,25.09434,0,0,1-3.072-.09823,10.52167,10.52167,0,0,0-1.242.02121.72321.72321,0,0,1,.18915-.66947.83759.83759,0,0,1,.41418-.06027,21.09871,21.09871,0,0,0,4.20118-.3429.67408.67408,0,0,1,.588.0712,12.83539,12.83539,0,0,0,2.77328-.07683,7.58847,7.58847,0,0,1-2.09293.76072A5.09844,5.09844,0,0,0,125.68085,61.53332Z"/><path class="cls-109" d="M85.93075,11.16261a9.97044,9.97044,0,0,1,1.77163.07693c.1403-.13439.30772-.08818.47259-.07493.85644.06885,1.69843.23359,2.54327.3779a25.74877,25.74877,0,0,1,2.69026,1.34888c.33979.22284.37115.31509.226.68368a.80144.80144,0,0,1-.58826-.10173,5.86873,5.86873,0,0,0-1.5115-.40262,1.837,1.837,0,0,0-.8882-.19466,7.67235,7.67235,0,0,1-1.39322-.25808,10.31743,10.31743,0,0,0-1.60515-.117,20.79374,20.79374,0,0,1-2.37481-.713c-.10953-.0273-.21893-.08747-.19023-.24007.04938-.03633.10983-.11278.14641-.10268A.65046.65046,0,0,0,85.93075,11.16261Z"/><path class="cls-110" d="M85.08317,11.54785c.139.23507.405.19969.61166.25649a12.29917,12.29917,0,0,0,1.93046.59085,2.26167,2.26167,0,0,1-.20947.53136.38131.38131,0,0,1-.36106.05766,5.60577,5.60577,0,0,1-1.43234-.35811,8.31711,8.31711,0,0,0-2.43045-.54691,9.94053,9.94053,0,0,0-1.62336-.08263.57762.57762,0,0,1-.56832-.2945,23.83645,23.83645,0,0,1,3.265-.16128C84.538,11.54024,84.81055,11.73672,85.08317,11.54785Z"/><path class="cls-111" d="M123.13868,57.37428a13.4008,13.4008,0,0,0,1.92694.01431,1.756,1.756,0,0,1,.92337.13973c-.95636.09149-1.87688.39746-2.83574.47553-.032.00261-.06113.04145-.0916.06342-.07232.15784-.21271.16751-.356.15489-.8383-.07389-1.67818-.02247-2.51723-.03278a6.78787,6.78787,0,0,1-.9495-.07573,8.801,8.801,0,0,1-1.42089-.2495.53946.53946,0,0,1-.06668-.59553.86121.86121,0,0,1,.55867-.05,14.53737,14.53737,0,0,0,1.75593.01932c.954-.06319,1.91344.0267,2.87082.03952A.26356.26356,0,0,1,123.13868,57.37428Z"/><path class="cls-112" d="M128.223,57.91323c.11755.06392.21259.1704.368.15845.15987-.0123.17278.10624.17126.22646a.5714.5714,0,0,1-.41674.24573,24.57588,24.57588,0,0,1-5.27359.6326c-.46834-.06446-.94087-.03706-1.4098-.06345a2.79261,2.79261,0,0,1-1.39209-.29857c.05405-.23313.24882-.24709.42334-.23892a25.58976,25.58976,0,0,0,3.624-.24083c.30081-.02861.60256-.06181.90124-.11321.82161-.00985,1.62606-.18052,2.4392-.26913C127.84694,57.93175,128.03452,57.92424,128.223,57.91323Z"/><path class="cls-113" d="M125.21864,58.22149c-.54453.1026-1.08624.225-1.63422.30346a16.179,16.179,0,0,1-2.97463.15855.29046.29046,0,0,0-.32142.15377,1.47233,1.47233,0,0,1-.95828.08683c-.64261-.14626-1.30043-.21163-1.94338-.35932-.19967-.04587-.40558-.06076-.5213-.26437-.0007-.34688.241-.32707.47476-.30787a14.41435,14.41435,0,0,1,1.65823.0675.2813.2813,0,0,0,.21148-.0696,21.68134,21.68134,0,0,0,3.06845.06666c.26073.0014.52223.19012.78332.01017.42782.02309.80783.32341,1.2532.22772A3.6659,3.6659,0,0,1,125.21864,58.22149Z"/><path class="cls-114" d="M123.13868,57.37428c-1.79693-.065-3.59693.08479-5.39248-.07684a.33118.33118,0,0,1-.28661.06949,16.13033,16.13033,0,0,1-2.36894-.59294.58078.58078,0,0,1-.22527-.14144.33353.33353,0,0,1-.06013-.42117c.11131-.16057.27291-.09486.42-.05552a2.01514,2.01514,0,0,0,.79164.10344c.80524.04874,1.59946.19465,2.40217.2704a6.9666,6.9666,0,0,0,1.41635.00226,9.47631,9.47631,0,0,1,1.76335-.01364,15.0547,15.0547,0,0,0,2.4538.00731c.9316-.06493,1.86755-.03705,2.79793-.13023a.20215.20215,0,0,1,.14.05465c.12183.08794.31765.0526.38517.23106a12.76153,12.76153,0,0,1-1.80316.30323C124.75521,57.08087,123.9471,57.22674,123.13868,57.37428Z"/><path class="cls-115" d="M129.53263,55.14072a10.0376,10.0376,0,0,0-1.26468.28162c-.106.04361-.227.05386-.276.1805-.11288.17617-.30173.174-.477.202a29.12646,29.12646,0,0,1-5.16482.45448,7.14344,7.14344,0,0,1-.88091.05769c-.82509-.00028-1.64062-.13735-2.47455-.09654a6.02955,6.02955,0,0,1-1.92391-.22507,1.84636,1.84636,0,0,0-.84033-.301c-.32384-.06157-.40747-.17721-.36643-.4502a.844.844,0,0,1,.49043-.01817,20.537,20.537,0,0,0,2.3702.17255,3.67919,3.67919,0,0,1,1.41244.043,7.03336,7.03336,0,0,0,1.38066-.00388,9.47431,9.47431,0,0,1,1.65351-.0199,19.77184,19.77184,0,0,0,2.377-.14058c.22327-.01474.45212-.1312.67191.01776.38074.1665.73614-.04593,1.10409-.07156A6.62416,6.62416,0,0,1,129.53263,55.14072Z"/><path class="cls-116" d="M126.2201,55.295c-.83557.17525-1.69283.15786-2.53485.28255a5.78792,5.78792,0,0,1-.68052-.04761,14.8899,14.8899,0,0,0-1.7585.05914,6.69873,6.69873,0,0,1-1.825-.11145,1.07719,1.07719,0,0,0-.67359.04786c-.09518-.12555-.37526-.11636-.3201-.32806.0561-.2153.29428-.14808.46422-.17283,1.01757-.14824,2.04392.067,3.06213-.07273a.34275.34275,0,0,1,.26035.03487c1.18292.05267,2.36188-.07612,3.54363-.07739a14.21488,14.21488,0,0,0,2.255-.258c.45813-.07276.91133-.02082,1.36568-.04976q-1.35383.30794-2.7079.6148C126.5221,55.2498,126.37036,55.26912,126.2201,55.295Z"/><path class="cls-117" d="M90.7838,11.625c-.65286.02107-1.26571-.23923-1.91288-.26913-.39047-.018-.77909-.0762-1.16854-.11633-.17687-.20337-.47009-.16095-.67058-.31864-.11724-.09221-.26724-.14581-.33072-.29733.29036-.191.59424-.064.899-.06877.57162-.009,1.163.21317,1.72005-.08529.12774-.12347.28053-.083.431-.0685.55444.05351,1.0997.17716,1.65582.21484.707.31757,1.4139.63716,2.14791.89223.18534.21342.42657.39713.39224.72907a.52421.52421,0,0,1-.6131.02593,9.40185,9.40185,0,0,0-1.74439-.42521A5.12161,5.12161,0,0,1,90.7838,11.625Z"/><path class="cls-118" d="M76.4552,44.35823a1.48392,1.48392,0,0,1,.00005,1.15509c-.04277-.02413-.0907-.07533-.12752-.0683a10.96527,10.96527,0,0,1-1.49008-.08536c-.89144-.22478-1.14588-1.07462-1.64689-1.68178a2.85976,2.85976,0,0,1-.20215-.32109c.264-.04644.50984.0886.77035.07683.15983-.10717.26472.02346.37055.09817a.90816.90816,0,0,0,.96278.13093,1.5418,1.5418,0,0,1,.708-.12407A2.42132,2.42132,0,0,1,76.4552,44.35823Z"/><path class="cls-119" d="M75.83892,43.58794c-.35248.09954-.71494.14907-1.064.27912-.27015.10064-.49564-.144-.72548-.26925-.09712-.05291-.15973-.16765-.29045-.16419-.19462-.59916-.58736-1.10247-.81829-1.68528a.67941.67941,0,0,1-.10613-.317c.27824-.14481.46508-.32138.39124-.68808-.05339-.26511.17245-.36948.386-.44764a.469.469,0,0,1,.2995.02266,1.88035,1.88035,0,0,0,.8815.18955.34259.34259,0,0,1,.23836.10766,1.92018,1.92018,0,0,1,.56963,1.20987c.00814.343.24937.606.33757.92306C75.98042,43.03715,76.12693,43.3385,75.83892,43.58794Z"/><path class="cls-120" d="M73.60489,40.35313c-.22284.14185-.38183.28051-.25894.60371.10078.265-.12214.4448-.51141.47447a9.51753,9.51753,0,0,1-1.15215-.92568,4.53532,4.53532,0,0,1-.69673-1.07664.52651.52651,0,0,1,.24968-.04152c.21441.00722.4448-.01274.44462-.32133-.0001-.16164.10667-.17871.23015-.17656a.60374.60374,0,0,1,.54745-.07432.58279.58279,0,0,1,.278.24906,7.37975,7.37975,0,0,0,.7371.92009A.32669.32669,0,0,1,73.60489,40.35313Z"/><path class="cls-121" d="M96.94645,11.00889c.07634.19751.25213.30205.3963.44041a10.77855,10.77855,0,0,1,3.28481,5.7857,21.89474,21.89474,0,0,1,.31663,2.76075,8.23181,8.23181,0,0,1-.06875,1.10253,3.19065,3.19065,0,0,0-.02993,1.09527c.04882,1.23581.09342,2.47278.22712,3.70342.08268.76106.23517,1.51353.29044,2.27816.01332.18431.11427.37585-.03419.55042-.22122.00845-.21957-.17486-.2587-.31236a21.32067,21.32067,0,0,1-.6968-4.62259c-.02978-.50977-.04636-1.0228-.1183-1.53084a14.50825,14.50825,0,0,1,.05745-1.64784,11.27551,11.27551,0,0,0-1.82182-6.37145,6.98664,6.98664,0,0,0-2.05228-1.94234,5.75763,5.75763,0,0,0-.55767-.33859,12.17131,12.17131,0,0,0-2.6499-1.34316,3.08933,3.08933,0,0,1-.60928-.27114c-.09224-.06838-.24185-.09416-.22-.26074a.283.283,0,0,1,.10249-.02473c.98157.16281,1.96725.306,2.94171.50417a5.85108,5.85108,0,0,1,1.12846.43163C96.70745,11.05356,96.816,11.14553,96.94645,11.00889Z"/><path class="cls-122" d="M92.40154,10.0845a3.91252,3.91252,0,0,0,.84739.46209c-.02917.21065-.20336.18066-.32376.159a1.58036,1.58036,0,0,0-1.11842.03992.38748.38748,0,0,1-.32963-.04474c-.73053.03045-1.43226-.20769-2.157-.23124-.89261-.2817-1.78842-.55382-2.67653-.849-.45645-.15173-.996-.17058-1.25228-.69135.16061-.266.37457-.1312.57782-.07692s.41723.189.57772-.07707a16.072,16.072,0,0,0,4.11061.94118A11.04484,11.04484,0,0,1,92.40154,10.0845Z"/><path class="cls-123" d="M122.21426,54.98669a3.71864,3.71864,0,0,0-1.13346.125,1.66174,1.66174,0,0,1-.8351-.00155,12.336,12.336,0,0,0-1.82836.03217c.13519.18532.35252.187.33032.38318-.98146-.00488-1.95223-.14532-2.92734-.23069a2.93279,2.93279,0,0,1-1.29309-.24859,24.0785,24.0785,0,0,1-6.52229-3.313,22.52266,22.52266,0,0,1-3.18279-2.7161c-.11391-.11828-.25693-.21793-.28662-.39771.08568-.22456.20132-.074.28944-.01215a9.694,9.694,0,0,1,.9427.78917,17.80193,17.80193,0,0,0,2.48592,1.86735c.84068.53217,1.67774,1.06678,2.56633,1.51559.05352.00859.02721-.07915.02267-.028-.00184.02061-.014.02817-.03386.01782a12.55141,12.55141,0,0,1-3.03619-1.99325c-.07666-.0741-.196-.14526-.095-.284.17513-.0507.28654.07628.41586.15044.69875.40069,1.35552.87247,2.06567,1.252a21.86418,21.86418,0,0,0,5.46435,2.189c.122.02753.25784.02643.351.1332a3.76769,3.76769,0,0,0,1.40728.28656c.923.01034,1.83225.17228,2.75263.17537a8.92557,8.92557,0,0,0,1.6075.23427C121.90006,54.91712,122.07517,54.84841,122.21426,54.98669Z"/><path class="cls-124" d="M123.06165,59.0687a20.52446,20.52446,0,0,0,3.19693-.27309c.67143-.08712,1.32992-.2265,1.99532-.33548.18289-.03.32545-.15329.50837-.162a15.727,15.727,0,0,1,2.71806-.55179,3.01193,3.01193,0,0,1,.97964.013c-.01365.135-.10717.16341-.218.1523a3.39913,3.39913,0,0,0-.56287.07173c-.2968.01815-.3409.1897-.27218.41574a.41.41,0,0,1-.02544.36148,1.94561,1.94561,0,0,1-.61779.155c-.97528.23079-1.93789.51508-2.92584.69241a.49635.49635,0,0,1-.38358.15048,8.7551,8.7551,0,0,0-1.98592.13729c-.855.09549-1.71548-.00467-2.56648.13048a4.2281,4.2281,0,0,1-.99336-.07042c-.54843-.043-1.096-.08624-1.64709-.08528a1.587,1.587,0,0,1-.70942-.14224c-.08478-.28551.13454-.27346.2964-.28043.99384-.0428,1.96674-.30308,2.96651-.28258A.42788.42788,0,0,0,123.06165,59.0687Z"/><path class="cls-125" d="M78.227,14.16705a1.8593,1.8593,0,0,0-.97814-.23746c-.12913.02254-.183-.07447-.17482-.193.01-.14491-.10247-.228-.15664-.34019.62471-.00873,1.24681-.06873,1.86755-.10927.74871-.04889,1.47027-.24823,2.21532-.27595a14.70159,14.70159,0,0,1,2.54217-.23095c.59285.069,1.11293.40551,1.71295.46024.17083.01559.41944.04543.32235.349a15.5069,15.5069,0,0,1-2.41548.06968,6.04938,6.04938,0,0,0-1.63247.20286,22.30777,22.30777,0,0,1-2.26751.40507.53733.53733,0,0,1-.26494-.02344A2.13132,2.13132,0,0,1,78.227,14.16705Z"/><path class="cls-126" d="M85.62261,13.55a.362.362,0,0,0-.33807-.21712c-.58856.042-1.049-.38044-1.61123-.42479-.04669-.00368-.08737-.08344-.13085-.12785a11.6074,11.6074,0,0,1,1.87426-.07909.20518.20518,0,0,0,.2057-.075,15.21682,15.21682,0,0,1,1.53273.27239c.09.00665.17206.05056.23965-.04118a5.30563,5.30563,0,0,1,1.8887.35177,2.10033,2.10033,0,0,1,.66187.27046c.03908.16491.05467.33675.22024.446.08217.0542.15563.14229.01255.22591a6.38465,6.38465,0,0,1-1.71311-.17235,4.64876,4.64876,0,0,0-1.33938-.06467,2.08746,2.08746,0,0,1-.94524-.08354C85.98685,13.75286,85.76066,13.73856,85.62261,13.55Z"/><path class="cls-127" d="M121.4439,56.21938a40.81437,40.81437,0,0,0,5.42083-.45068c.37126-.07688.75122-.11167,1.12719-.16586.74569-.0727,1.49087-.15152,2.23734-.215.2798-.02378.56263-.01178.84407-.0161a3.99352,3.99352,0,0,1-1.34923.34551c-.65045.12888-1.247.41855-1.89359.5456a2.55292,2.55292,0,0,0-.84005.18716,3.38119,3.38119,0,0,1-1.234.13583c-1.31786.01657-2.63282.15239-3.95188.09534a.24214.24214,0,0,1-.20661-.07713C121.46252,56.50952,121.33469,56.41189,121.4439,56.21938Z"/><path class="cls-128" d="M119.51877,59.68505c.95944.11689,1.93072.05908,2.88936.21626a14.28581,14.28581,0,0,0,1.75486-.06939,14.52464,14.52464,0,0,0,2.61953-.21353,7.99256,7.99256,0,0,0,1.05533-.01036c-.004.41265-.28963.49954-.61956.5369-.20627.02336-.41673.04275-.45894.30993a12.3114,12.3114,0,0,0-2.0816.25287,20.84851,20.84851,0,0,1-2.84916.13207c-.10248.00287-.20509.00085-.30765.0011a.37166.37166,0,0,1-.32711.06824,1.55144,1.55144,0,0,0-.8325.07023.76175.76175,0,0,1-.41829.02823c-.84072-.17638-1.70561-.20619-2.53989-.42113a.8116.8116,0,0,1-.452-.19091c-.10513-.58545.16787-.90354.73133-.84752a16.22878,16.22878,0,0,1,1.64339.10842A.78524.78524,0,0,1,119.51877,59.68505Z"/><path class="cls-129" d="M75.29962,15.93791a1.37171,1.37171,0,0,1-.07661-.462c.51642.14195.95246-.20867,1.44-.23491.3805-.02047.73169-.18122,1.09578-.23117.41541-.057.83219-.13,1.2526-.16186.23984-.01818.36424-.12127.217-.37317a.809.809,0,0,1,.69893-.08465,2.22517,2.22517,0,0,0,.91149-.049,7.08118,7.08118,0,0,1,2.4303-.27232c.55868.05647,1.11338.15159,1.677.15455a4.18994,4.18994,0,0,1,1.40915.63054c.07151.06953.19628.05132.28754.09326.10277.04724.27232.05761.19431.25073a.60389.60389,0,0,1-.48361.034,10.35961,10.35961,0,0,0-5.80369.56027,16.86327,16.86327,0,0,1-3.91728,1.06251C75.85166,16.95213,75.42019,16.65506,75.29962,15.93791Z"/><path class="cls-130" d="M85.006,14.32051a11.5939,11.5939,0,0,1-1.66771-.13127,4.7051,4.7051,0,0,0-2.10992.20177,6.41311,6.41311,0,0,1-1.99984.08376.48417.48417,0,0,1-.23112-.23112c.6507-.23468,1.35874-.178,2.01223-.38646a11.63945,11.63945,0,0,1,3.71422-.30108c.29994.00265.59915-.15884.8988-.00615l.53906.15462a2.94958,2.94958,0,0,0,1.01242.43073c.10953.04168.26143-.006.31.15624-.026.04622-.06286.09262-.113.09473a4.70771,4.70771,0,0,1-1.95877.00618A.69194.69194,0,0,0,85.006,14.32051Z"/><path class="cls-131" d="M70.36945,19.86586a1.414,1.414,0,0,1,.61618-.23094.51892.51892,0,0,1,.41518.142,2.05349,2.05349,0,0,0,.81834.43734,2.13243,2.13243,0,0,1,.58435.82824c-.03776.17558-.14744.322-.19981.4923a.22788.22788,0,0,1-.22359.1786c-.53447-.03143-.7842.34-1.036.71283-.24.08907-.37944.362-.6662.36643-.01406-.18825-.16177-.27269-.28821-.37572a1.249,1.249,0,0,1-.59139-.78188c-.03654-.23094-.30154-.38934-.5075-.53736,0-.11467-.00277-.22942.0007-.344.00642-.21251-.08533-.42476.32854-.40342A.74106.74106,0,0,0,70.36945,19.86586Z"/><path class="cls-132" d="M68.67462,25.48821c.005-.01159.01588-.024.01432-.03465a1.02571,1.02571,0,0,1,.371-.88927,3.63165,3.63165,0,0,0,1.00127-.15422,1.70323,1.70323,0,0,1,1.064,1.08381c-.10466.59643.042.86277.62681,1.10948.1427.06019.3014.08762.31578.2847a1.21213,1.21213,0,0,1-.50739.81725,3.03818,3.03818,0,0,1-1.73034-.29168,12.45671,12.45671,0,0,0-.41229-1.30134C69.3238,25.78783,68.90458,25.72309,68.67462,25.48821Z"/><path class="cls-133" d="M70.67792,22.79262c.20927-.1222.33855-.37224.61609-.38532.11895-.08783.21754-.00852.32023.03875a6.24089,6.24089,0,0,0,1.77016.48329.76874.76874,0,0,0,.688-.1318.19643.19643,0,0,1,.218-.02684c.089.09736.04381.189-.011.28056a1.92469,1.92469,0,0,1-1.09005.7075c-.38026.09048-.69568.36374-1.09007.43243a3.6154,3.6154,0,0,1-1.65278-.39739A1.94226,1.94226,0,0,1,70.67792,22.79262Z"/><path class="cls-134" d="M70.44644,23.7938a12.25887,12.25887,0,0,0,1.69478.30828,4.64569,4.64569,0,0,1,1.01823.4373c.14867.10327.29793.21213.26788.43a.46216.46216,0,0,1-.325.28368,14.99121,14.99121,0,0,0-1.681.28775.35364.35364,0,0,1-.35867-.0524,2.856,2.856,0,0,0-1.00146-1.07836C70.19493,24.20794,70.22075,23.93844,70.44644,23.7938Z"/><path class="cls-135" d="M75.29962,15.93791c.12116.26612.38376.43386.48741.716.06139.16709.22888.12783.365.13052.15236.003.30482.00065.45724.00062a1.43989,1.43989,0,0,1,1.03941.12339,1.12717,1.12717,0,0,0,.81812.01084c.88143-.27044,1.75143-.57255,2.62151-.87656a9.73823,9.73823,0,0,1,2.83516-.44126.71685.71685,0,0,1,.44723.07409c.01053.313-.26029.303-.43856.33543-.80331.14617-1.56859.43-2.35851.62254a4.006,4.006,0,0,0-.91164.37925A14.216,14.216,0,0,1,76.99864,18.468a8.39357,8.39357,0,0,0-1.22334.32913,1.00475,1.00475,0,0,1-.74961.03751c-.1281-.10081-.04571-.26407-.11585-.38575a1.746,1.746,0,0,0-.5718-.72886c-.209-.1269-.504-.27152-.42519-.62682a.29768.29768,0,0,0,.03291-.40308.98148.98148,0,0,1-.1868-.67515Z"/><path class="cls-136" d="M73.91285,17.09325a.72834.72834,0,0,0,.44519.53009c.38091.15209.44809.51128.65572.77485.10325.13107.04184.26261-.02223.38932a.6866.6866,0,0,0-.22372.73057.30624.30624,0,0,1-.09269.30879,7.73889,7.73889,0,0,1-1.68485.0677,1.45467,1.45467,0,0,1-.7722-1.41518c.188-.30169-.06786-.56313-.07684-.84695a1.34323,1.34323,0,0,0,.6573-.429C73.16245,16.7754,73.5226,16.92236,73.91285,17.09325Z"/><path class="cls-137" d="M69.83015,27.41363a10.3291,10.3291,0,0,0,1.77182.231c.09534-.0641.15126-.02555.18529.07082a9.66333,9.66333,0,0,1-.38909,1.39885,1.69681,1.69681,0,0,1-2.261-.69921,1.389,1.389,0,0,0-.07764-.46219C69.38744,27.87459,69.54109,27.54741,69.83015,27.41363Z"/><path class="cls-138" d="M69.44479,34.57706a.89927.89927,0,0,0,.4624-.38565c.01953-.01637.04418-.04384.06229-.039.50975.13677,1.07878.13871,1.43773.62331a2.78493,2.78493,0,0,0,1.05418,1.881.328.328,0,0,1,.10074.16154c-.03917.22157.15442.48082-.1068.66718a.31824.31824,0,0,1-.22291.01483,11.90535,11.90535,0,0,1-1.70876-.6902,3.97793,3.97793,0,0,0-.54053-.82454c-.1845-.221-.17829-.54563-.336-.8005A2.67873,2.67873,0,0,1,69.44479,34.57706Z"/><path class="cls-139" d="M70.52366,36.81006a8.1717,8.1717,0,0,1,1.52424.536.90461.90461,0,0,0,.40146.08046c.16816.29523.38618.55857.54867.85745.07316.13457.15918.26849.00611.40645a2.631,2.631,0,0,1-.47793.19927l-.6161-.00009-1.38682-1.30933C70.492,37.32351,70.65,37.06685,70.52366,36.81006Z"/><path class="cls-140" d="M69.13721,28.41514c.2062.16753.41854.32812.6172.50415a1.0914,1.0914,0,0,0,1.08934.24518,1.9777,1.9777,0,0,1,.52711-.05633c.23669-.10734.32333.08034.40326.22737a1.73813,1.73813,0,0,1,.241,1.05508,1.05531,1.05531,0,0,0-.729.45984.37083.37083,0,0,1-.37417.15443,6.90629,6.90629,0,0,0-1.365-.59885.42318.42318,0,0,1-.25581-.21941c-.17707-.145-.18946-.40761-.38517-.53932A9.638,9.638,0,0,1,69.13721,28.41514Z"/><path class="cls-141" d="M71.37086,34.80766a3.89661,3.89661,0,0,0-1.46367-.61625l-.462-1.46352a6.961,6.961,0,0,0-.07723-1.155c.11189-.09062.22345-.0362.3221.01624.28527.15167.61438.17636.9013.32058.199.29856.617.40518.70583.80118a1.80527,1.80527,0,0,0,.44777,1.79709.17341.17341,0,0,1,.028.14581A.54634.54634,0,0,1,71.37086,34.80766Z"/><path class="cls-142" d="M70.60051,31.958a4.82858,4.82858,0,0,1-1.23257-.38519,2.1396,2.1396,0,0,1-.07685-1.38625,5.79434,5.79434,0,0,1,1.61794.77019C70.87408,31.31145,70.9232,31.692,70.60051,31.958Z"/><path class="cls-143" d="M72.21807,18.47939c.16053.49322.24221,1.03281.77054,1.30975.03492.183-.09473.25465-.22715.297a2.66194,2.66194,0,0,1-.54339.16507,1.00245,1.00245,0,0,1-.81772-.37536c-.09727-.13478-.31726-.08825-.41472-.24094-.0336-.4874-.28587-.96334-.07679-1.46348A1.85149,1.85149,0,0,1,72.21807,18.47939Z"/><path class="cls-144" d="M100.10509,51.21275a4.98266,4.98266,0,0,0,.72812,1.20217c.37854.58814.79643,1.151,1.19757,1.72456-.50371.249-.50371.249-.34674.7912-.04735.053-.098.02748-.13193-.00836a.94587.94587,0,0,0-1.18206-.21984.81882.81882,0,0,1-.56668.042,9.15052,9.15052,0,0,0-2.32974-.14268,5.92572,5.92572,0,0,1-1.14665-.06675c-.29734-.06987-.57225-.01442-.61449.37728-.02863.26556-.23411.21392-.409.22976a11.26842,11.26842,0,0,1-4.47769-.5614c-.08328-.02656-.20151-.07492-.2562-.03972-.65758.42334-1.18559-.09726-1.75671-.24284a10.13328,10.13328,0,0,0-1.49222-.48264c-1.47344-.12828-2.53353-1.1225-3.79438-1.68909a.48716.48716,0,0,1-.272-.35672,1.03539,1.03539,0,0,0-.52759-.6637,1.13787,1.13787,0,0,1-.6104-.69487c-.05191-.23085-.40007-.26674-.49973-.5077a.35379.35379,0,0,1-.00307-.26082,1.01653,1.01653,0,0,0-.09507-1.06331A.65742.65742,0,0,1,81.921,47.663a.80954.80954,0,0,1,.83549.36132,4.57442,4.57442,0,0,0,1.4204.89808A23.07867,23.07867,0,0,0,88.442,50.66466a2.60935,2.60935,0,0,0,2.10325-.17611.83141.83141,0,0,1,.41216-.07145,12.00146,12.00146,0,0,0,1.68886-.06774,1.03888,1.03888,0,0,1,.778.13946.22891.22891,0,0,0,.14283.05232A4.946,4.946,0,0,0,95.84,50.11726a12.36668,12.36668,0,0,0,1.89609-1.23368.50978.50978,0,0,1,.3907-.13406.24987.24987,0,0,1,.17169.07361A16.27471,16.27471,0,0,1,100.10509,51.21275Z"/><path class="cls-145" d="M81.92453,47.74688c-.26091.0619-.528.66281-.32626.8288.42511.34981.24093.70347.11046,1.07762-.02926.08388-.06136.16677-.09215.25012a1.28872,1.28872,0,0,0-1.2322,0,3.17914,3.17914,0,0,1-.61665-1.00127,2.35618,2.35618,0,0,1,.31661-.52354c.07263-.08.16165-.22983.13212-.30373-.15419-.386.10372-.64655.24459-.94418a.35738.35738,0,0,1,.55621-.14148,4.28957,4.28957,0,0,0,.696.52916C81.8,47.57334,81.94637,47.58671,81.92453,47.74688Z"/><path class="cls-47" d="M115.97439,61.91841a11.06617,11.06617,0,0,0,2.3839.61783,8.48555,8.48555,0,0,0,1.63858.07419.82912.82912,0,0,1,.44557.07836,3.5031,3.5031,0,0,1-1.08,1.16659c-.17192.10065-.36243.26187-.22956.52765a2.89727,2.89727,0,0,0-1.36558-.39452,2.05221,2.05221,0,0,1-1.03642-.47209,13.55661,13.55661,0,0,0-1.53858-.76812c-.28516-.13652-.46114-.432-.76-.56375-.39778-.17532-.78555-.37331-1.183-.54944a21.96656,21.96656,0,0,1-4.65882-2.93614,17.10949,17.10949,0,0,1-2.90691-2.71212,2.69424,2.69424,0,0,0-.34-.307,3.1238,3.1238,0,0,0-.52624-.8379.39546.39546,0,0,1-.12062-.4523c.1894-.0974.27241.06948.37645.16166a3.55281,3.55281,0,0,1,.39885.41105,31.07431,31.07431,0,0,0,5.35635,4.51423,21.91871,21.91871,0,0,0,2.99908,1.62931,14.47057,14.47057,0,0,0,1.90513.706A.48452.48452,0,0,1,115.97439,61.91841Z"/><path class="cls-146" d="M104.7274,54.37053a.732.732,0,0,0,.28856.56028.96309.96309,0,0,1,.32754.749,15.10068,15.10068,0,0,1-1.80342-1.82613.34356.34356,0,0,0-.27654-.17637c-.854-1.022-1.67-2.07408-2.48286-3.12881a3.69371,3.69371,0,0,1-.29061-.4909,1.358,1.358,0,0,0-.34955-.67117c-.16578-.22956-.33882-.47429-.07451-.75345.26223-.06715.36792.13543.48123.29718.63841.91129,1.31151,1.79682,2.007,2.66433.61528.76746,1.24286,1.5257,1.89928,2.25934C104.585,54.00079,104.76182,54.13211,104.7274,54.37053Z"/><path class="cls-147" d="M100.10509,51.21275a5.68051,5.68051,0,0,1-.90864-1.16963A10.79138,10.79138,0,0,1,98.17892,48.825a1.05136,1.05136,0,0,1-.45972-.59193,1.28384,1.28384,0,0,0-.27659-.49995,15.0151,15.0151,0,0,1-1.31507-1.54588c-.06787-.23957-.10312-.48568-.147-.7301a2.51917,2.51917,0,0,0,.33105-1.02076c.25885-.05276.32856.16887.41535.3188.45568.78723,1.00525,1.51126,1.50415,2.269.38831.51016.79652,1.00515,1.17556,1.522.105.14319.28081.28676.15944.5102a.50037.50037,0,0,0,.156.341c.43729.38889.41907.9636.60072,1.45518C100.38534,51.02188,100.24705,51.13358,100.10509,51.21275Z"/><path class="cls-148" d="M99.56612,49.0564a5.28542,5.28542,0,0,0-.94163-1.36251c-.14494-.21576-.29677-.4269-.44548-.64014a19.50347,19.50347,0,0,0-1.44784-3.11088.952.952,0,0,1-.113-.28312,7.77129,7.77129,0,0,0-.24572-.87524.58052.58052,0,0,1-.00645-.47779c.252-.11649.29407.11617.4018.2404.53991.71528.92071,1.53028,1.4204,2.271a2.0609,2.0609,0,0,1,.28539.5401,2.68963,2.68963,0,0,0,.29075.62424.7056.7056,0,0,1,.13052.233c.10729.806.74629,1.31179,1.10508,1.97487.08046.14871.25011.28128.10513.48059-.22049.34759.04261.56244.22171.79812.13356.17575.35169.32483.16327.58861a2.3225,2.3225,0,0,1-.627-.74489C99.78391,49.20517,99.744,49.0503,99.56612,49.0564Z"/><path class="cls-149" d="M101.26062,28.72314c.15986-.12858.01118-.26117-.00215-.38731a43.448,43.448,0,0,1-.4752-5.73687c.01-.37322-.061-.759-.0624-1.14135-.00052-.14341-.00688-.28673.15457-.35933.00179.20456.09.394.081.60472a21.265,21.265,0,0,0,.31808,3.76392,27.71887,27.71887,0,0,0,.75415,3.81531,25.51912,25.51912,0,0,0,1.08076,3.13783c-.20517.02849-.28611-.10579-.36529-.2619a9.393,9.393,0,0,1-.56178-1.32248c-.06345-.19362-.13411-.38925-.38216-.41821a.25658.25658,0,0,1-.21793-.134A3.12,3.12,0,0,1,101.26062,28.72314Z"/><path class="cls-150" d="M101.26062,28.72314q.12164.54068.2434,1.08133a1.06425,1.06425,0,0,0,.29622.613,17.661,17.661,0,0,0,.85642,2.33428,14.88147,14.88147,0,0,0,1.02441,1.97389,12.918,12.918,0,0,0,3.11417,3.60388c.22673.17545.55038.298.62784.637-.50916-.10373-.79692-.52666-1.16347-.82752-.70538-.579-1.3827-1.19209-2.07165-1.791a.35728.35728,0,0,1-.20209-.16663,23.6376,23.6376,0,0,1-1.8428-3.00233c-.41545-.80942-.70368-1.66765-1.09124-2.48657a9.877,9.877,0,0,1-.57418-2.25864c-.02052-.1002-.04231-.19986-.068-.29916a45.591,45.591,0,0,1-.52229-4.92912c-.03771-.75925.102-1.5.0374-2.25348A13.97517,13.97517,0,0,0,98.86848,16.133,7.65612,7.65612,0,0,0,97.664,14.3102a1.48206,1.48206,0,0,1-.30113-.44205c-.02642-.05718-.03081-.13418-.07381-.17333-.47456-.43208-.71443-1.05353-1.19808-1.47779-.10946-.096-.26583-.16867-.22286-.36107A7.32692,7.32692,0,0,1,98.0605,13.5547a8.86827,8.86827,0,0,1,2.085,4.478,11.14262,11.14262,0,0,1,.20032,3.68444,6.748,6.748,0,0,0,.08673,1.48676c.062.73339.11446,1.47.19032,2.20332a13.58749,13.58749,0,0,0,.4401,2.46364C101.14526,28.1501,101.19565,28.43876,101.26062,28.72314Z"/><path class="cls-151" d="M100.49026,28.18391c.10771.44123.24089.87806.31783,1.32459a12.983,12.983,0,0,0,.9628,2.60282,17.62735,17.62735,0,0,0,2.21771,3.9106c.07553.102.13333.21707.19936.32607a4.31788,4.31788,0,0,0,.83719,1.17079,16.68366,16.68366,0,0,0,3.65157,3.13243,6.78227,6.78227,0,0,1,1.13483.70308,4.13863,4.13863,0,0,1-1.28306-.65351,14.23841,14.23841,0,0,1-2.66756-2.03461,2.79517,2.79517,0,0,0-.49951-.27079,3.61411,3.61411,0,0,1-1.00977-1.0326c-.08336-.11793-.15441-.23708-.31776-.24455a1.96222,1.96222,0,0,1-.69341-.72895,21.65015,21.65015,0,0,1-1.78423-3.255,1.13623,1.13623,0,0,1-.0955-.36982c-.06667-.31476-.26118-.58765-.31978-.89921-.21437-1.13974-.59449-2.241-.77525-3.38757C100.34823,28.36669,100.28336,28.21076,100.49026,28.18391Z"/><path class="cls-152" d="M101.56876,32.80506a.81993.81993,0,0,0,.03922.22274,19.489,19.489,0,0,0,2.1083,3.70083c.10421.13114.31594.17708.31761.3896a7.6069,7.6069,0,0,0,.844,1.10886,17.30827,17.30827,0,0,0,1.96089,1.96693c.09861.09786.18464.20839.27649.31306a3.29766,3.29766,0,0,1-.94965-.692c-.50943-.43975-.96233-.9396-1.50316-1.35082a12.59356,12.59356,0,0,1-1.512-1.72851,9.34923,9.34923,0,0,1-.96548-1.46609,4.68342,4.68342,0,0,1-.86152-1.52969,19.512,19.512,0,0,1-1.2481-3.792c-.02741-.14933-.09182-.29863.00681-.44577.20467-.03.20571.14581.24482.26108.07761.22874.12344.46741.183.70183a.72925.72925,0,0,0,.09234.28925A12.84074,12.84074,0,0,1,101.56876,32.80506Z"/><path class="cls-153" d="M100.10652,29.49368a14.97194,14.97194,0,0,0,.84808,3.05317,23.0404,23.0404,0,0,0,1.23044,2.72283.2548.2548,0,0,1-.23539-.16061c-.09509-.189-.23416-.15286-.3807-.07036-.29742-.05915-.36626-.329-.46649-.54568-.16515-.357-.29836-.72909-.47866-1.08047a32.534,32.534,0,0,1-1.11739-3.55191,41.22811,41.22811,0,0,1-.71808-5.01551c-.04535-.54345-.04311-1.0956-.0377-1.64631a10.6171,10.6171,0,0,0-2.27969-7.20427,11.752,11.752,0,0,0-2.502-2.14428c-.12459-.08452-.28213-.13445-.3348-.3a.52662.52662,0,0,0-.32035-.607,12.774,12.774,0,0,0-1.80592-.90866,3.02878,3.02878,0,0,1-.724-.40957,12.5179,12.5179,0,0,1,2.48618.49225c.23494.07836.43439.201.67227.04718a.208.208,0,0,1,.1838.02318c2.10925,1.2313,3.95136,2.71364,4.80969,5.11986a8.8222,8.8222,0,0,1,.60349,2.7228,14.08481,14.08481,0,0,0,.118,1.91415,6.71133,6.71133,0,0,1-.06535,1.10949,30.54062,30.54062,0,0,0,.50652,5.84273C100.1364,29.0906,100.22423,29.29354,100.10652,29.49368Z"/><path class="cls-154" d="M100.72137,33.42118c.3386.50981.39472,1.16757.84758,1.61753a1.07836,1.07836,0,0,0,.23959.58961c.17916.28984.35406.58231.53076.87367-.13727.13092-.0735.25152.01922.37044a20.01592,20.01592,0,0,0,1.634,2.42364.50389.50389,0,0,1,.19541.44072l-.61583-.53894a2.054,2.054,0,0,1-.70358-.73765,20.12785,20.12785,0,0,1-2.76914-4.89433,18.05126,18.05126,0,0,1-.89768-2.65252.5774.5774,0,0,1-.02106-.41274c.21-.0957.27073.05775.32051.20349.074.21651.14395.43459.213.65281a1.659,1.659,0,0,0,.38207.69074,2.62906,2.62906,0,0,1,.38517.902A1.85154,1.85154,0,0,0,100.72137,33.42118Z"/><path class="cls-155" d="M100.18212,33.57544a22.53537,22.53537,0,0,0,2.2789,4.17267c.35207.49623.73969.96723,1.11111,1.44974.11575.55441.58173.86189.91744,1.24947a20.67708,20.67708,0,0,0,5.42126,4.33327,16.94068,16.94068,0,0,0,4.34035,1.921,1.03137,1.03137,0,0,1,.49064.19809,10.14386,10.14386,0,0,1-1.65693-.44128,16.416,16.416,0,0,1-3.18314-1.29667,13.39793,13.39793,0,0,1-3.71765-2.46464c-.24154-.22765-.49577-.44177-.74064-.666a23.40167,23.40167,0,0,1-3.24736-3.81852,1.01093,1.01093,0,0,0-.319-.32419,17.20707,17.20707,0,0,1-1.75331-3.34878,1.04946,1.04946,0,0,1-.10729-.51927A.77949.77949,0,0,1,100.18212,33.57544Z"/><path class="cls-156" d="M101.80005,39.968a1.17328,1.17328,0,0,0,.27255.54195c.48714.57207.8881,1.2119,1.41106,1.75744.40606.4236.77891.879,1.16652,1.32032-.415-.1679-.63068-.5624-.95008-.83916a1.67411,1.67411,0,0,0-.66748-.47007,1.67155,1.67155,0,0,0-.4624-.46212,3.61646,3.61646,0,0,1-.77946-.81978,26.08007,26.08007,0,0,1-1.78526-2.82529,3.16931,3.16931,0,0,1-.48909-1.11533.61119.61119,0,0,1,.20112-.33883c.12937-.006.17013.09474.21372.18484a22.90586,22.90586,0,0,0,1.74708,2.76671C101.73971,39.75978,101.84793,39.83235,101.80005,39.968Z"/><path class="cls-157" d="M116.74474,51.21275a9.63628,9.63628,0,0,1-1.53348-.04933,10.50278,10.50278,0,0,1,1.17739.43076c.06743.0304.16981.0362.14413.13715-.02432.09554-.10946.06884-.19.056-.27586-.04384-.55359-.07593-.83061-.11251-.14822.13651-.31108.07454-.47163.03374a21.87417,21.87417,0,0,1-5.10378-2.09381,20.27968,20.27968,0,0,1-3.75281-2.453,12.22682,12.22682,0,0,1-1.66-1.52868,7.24028,7.24028,0,0,0-.82364-.90293c-.68966-.83256-1.37484-1.669-2.03206-2.52764-.08128-.1062-.18853-.2199-.11878-.38038.16162-.07268.27513.06429.41355.09393a6.80131,6.80131,0,0,1,1.20546,1.28187,21.82971,21.82971,0,0,0,2.456,2.37912c.98848.81129,2.0494,1.52944,3.10853,2.24679a21.04338,21.04338,0,0,0,6.164,2.75979,1.04783,1.04783,0,0,0,.15288.01331c.10908.192.31071.18895.49.22969A3.625,3.625,0,0,1,116.74474,51.21275Z"/><path class="cls-158" d="M108.73305,47.8239a9.77984,9.77984,0,0,1-1.76558-1.12318,20.17726,20.17726,0,0,1-3.54554-3.07676c-.50837-.533-.97981-1.10118-1.468-1.65342a21.70644,21.70644,0,0,1-1.60361-2.426c-.05946-.1107-.14964-.21218-.1027-.35367.24917-.10151.30685.109.38813.25245a9.01009,9.01009,0,0,0,1.24095,1.52585l.69351.84721c-.01454.3458.315.4952.448.76425.18871.38164.60516.60642.872.93a10.93529,10.93529,0,0,0,1.32005,1.43018c.54175.45877,1.08962.91418,1.63653,1.36681a5.73277,5.73277,0,0,1,1.14776.92735C108.18288,47.49425,108.55624,47.53915,108.73305,47.8239Z"/><path class="cls-159" d="M104.57314,45.59034c.57724.59647,1.22586,1.113,1.85486,1.65122a24.51107,24.51107,0,0,0,4.83039,2.95352A18.61123,18.61123,0,0,0,115.169,51.649a1.89494,1.89494,0,0,0,.34313.02589,6.35246,6.35246,0,0,0,1.49041.45642c.11737.028.22662.03625.28141.15973a8.78622,8.78622,0,0,1-1.6261-.05771c.219.25549.53522.22074.81059.27931a.50818.50818,0,0,1,.43033.31735,13.76889,13.76889,0,0,1-4.052-.98877c-.55248-.22808-1.09925-.47-1.64861-.70565a14.87842,14.87842,0,0,1-2.695-1.53995,34.34456,34.34456,0,0,1-5.002-4.2883c-.42339-.44582-.80175-.92978-1.20866-1.38954a9.34161,9.34161,0,0,0-.75608-1.06162c-.07786-.12537-.21029-.23693-.14275-.41437.25622-.06246.36061.154.48178.2926C102.73828,43.72114,103.68575,44.62734,104.57314,45.59034Z"/><path class="cls-160" d="M100.10509,34.03756a3.815,3.815,0,0,0,.51142,1.384,11.06448,11.06448,0,0,0,1.17137,2.141.4543.4543,0,0,1,.08921.32583c-.25225-.022-.28238-.26131-.39379-.41483-.14545-.20042-.22328-.45156-.45379-.58641-.20083-.04455-.286-.20958-.36468-.36923a28.97375,28.97375,0,0,1-1.42472-3.02837,6.043,6.043,0,0,0-.37657-.625A19.90608,19.90608,0,0,1,98.009,30.049a12.99634,12.99634,0,0,1-.39572-1.90942,18.93417,18.93417,0,0,1-.24229-2.519.92191.92191,0,0,1,.07543-.48725c.31537-.08193.25678.17834.29892.33532.12755.47524.13364.97368.27193,1.44692a16.69761,16.69761,0,0,1,.4072,2.18756,21.95423,21.95423,0,0,0,1.49452,4.47379C99.98719,33.7287,100.02264,33.89244,100.10509,34.03756Z"/><path class="cls-161" d="M98.94988,32.88208a3.07944,3.07944,0,0,1,.65927,1.26919c.36456.81367.78908,1.59632,1.17886,2.39662a2.45075,2.45075,0,0,0,.2415.33929,13.23978,13.23978,0,0,0,1.24742,2.13365c.41276.54791.8159,1.10314,1.21838,1.65868a.81245.81245,0,0,1,.07656.21266,12.161,12.161,0,0,1-2.00871-2.30606c-.19966-.26009-.29618-.60469-.61009-.77463-.23767-.07149-.27059-.30915-.38933-.47764a12.38022,12.38022,0,0,1-1.236-2.67087c-.15643-.42749-.286-.87139-.41908-1.31044A.43387.43387,0,0,1,98.94988,32.88208Z"/><path class="cls-162" d="M100.64448,37.3492l.30859.46228a7.74791,7.74791,0,0,0,1.06342,1.76085,18.89517,18.89517,0,0,0,1.30266,1.74622,12.19219,12.19219,0,0,0,1.34522,1.40653.6848.6848,0,0,1,.29395.47739c-.54209-.517-1.09831-1.01829-1.63193-1.54551-.54418-.53765-.98315-1.15848-1.52635-1.68892a22.84119,22.84119,0,0,1-2.08013-3.2349,1.71972,1.71972,0,0,1-.48942-1.14132c.21373-.081.32643.08277.38.218A9.64945,9.64945,0,0,0,100.64448,37.3492Z"/><path class="cls-163" d="M78.84311,43.97313c-.23786-.01886-.29524-.21859-.38593-.38494-.37479-.429-.751-.8568-1.13462-1.27805a.63415.63415,0,0,1-.17468-.28963c-.09282-.47795.333-.7158.4972-1.07518a1.63653,1.63653,0,0,0,.93469-.7178.48984.48984,0,0,1,.4959-.294.27227.27227,0,0,1,.12645.12261,1.28639,1.28639,0,0,0,.55643,1.03713c.42624.3293.40406.82752.44636,1.297a3.00209,3.00209,0,0,1-.82528.994C79.14729,43.53286,79.08678,43.836,78.84311,43.97313Z"/><path class="cls-164" d="M78.84311,43.97313a1.61123,1.61123,0,0,1,.67121-.803c.29432-.17378.31364-.58822.6384-.73743a1.20631,1.20631,0,0,1,.62422.661c.01208.3155.26214.60257.11367.93747a1.0692,1.0692,0,0,0-.53278.735,1.373,1.373,0,0,1-.66714.978l-.46184-.23076a1.29486,1.29486,0,0,1-.304-.94267A2.26283,2.26283,0,0,0,78.84311,43.97313Z"/><path class="cls-165" d="M77.22556,42.04746c.31427.35271.625.70865.94452,1.05657a.83637.83637,0,0,1,.28711.48415,1.78306,1.78306,0,0,0-.67081.40255,2.65305,2.65305,0,0,1-1.33118.3675,2.17132,2.17132,0,0,1-.61628-.77029,1.361,1.361,0,0,0,.00019-.84749,2.41172,2.41172,0,0,0,1.185-.67624A.137.137,0,0,1,77.22556,42.04746Z"/><path class="cls-166" d="M79.69069,45.74427a2.66277,2.66277,0,0,0,.64856-1.28033.44391.44391,0,0,1,.507-.414,1.49509,1.49509,0,0,1,.83516.61191.404.404,0,0,1-.01066.22336.56356.56356,0,0,0-.06044.638.86554.86554,0,0,1-.27963.949c-.14426.09087-.15331.16051-.09459.306.08584.21274.00473.322-.23577.27543-.20491-.15041-.36687-.00027-.53924.077-.19234-.30046-.54252-.50817-.49343-.95009C79.98708,46.00551,79.77458,45.89777,79.69069,45.74427Z"/><path class="cls-167" d="M118.20841,53.83123l-2.07958.07719a21.43971,21.43971,0,0,1-9.80543-5.08971,3.50989,3.50989,0,0,1-.75037-.652c-.06886-.10466-.18308-.18481-.17038-.331.13484-.12091.24309-.019.33575.05661a23.15163,23.15163,0,0,0,2.99227,2.11311.29012.29012,0,0,1,.15646.20611,23.26752,23.26752,0,0,0,5.74114,2.6786c.58768.17538,1.19024.27325,1.78247.41695.51773.12563,1.036.24734,1.55728.35681A.29536.29536,0,0,1,118.20841,53.83123Z"/><path class="cls-168" d="M108.88713,50.2115A25.38448,25.38448,0,0,1,106.27,48.44541a2.78975,2.78975,0,0,0-.84949-.62151.22451.22451,0,0,1-.1964-.084,1.52978,1.52978,0,0,0-.49571-.57882,15.62826,15.62826,0,0,1-2.0097-2.16295c-.50108-.54515-.88632-1.19221-1.39978-1.73354-.11189-.118-.23049-.25109-.1538-.44275.17505-.06949.25437.07706.352.165a7.06194,7.06194,0,0,1,.822.909,10.06659,10.06659,0,0,1,1.02018,1.13332,38.47546,38.47546,0,0,0,3.56418,3.25439,23.058,23.058,0,0,0,4.0794,2.678.35775.35775,0,0,1,.19532.17393c-.20048.12162-.3738.00157-.53672-.08041-.46585-.23443-.92812-.47732-1.37981-.73769A.68561.68561,0,0,0,108.88713,50.2115Z"/><path class="cls-169" d="M105.26665,47.74617a.16041.16041,0,0,1,.15388.07773,12.26179,12.26179,0,0,0,2.07966,1.83588c.452.36928.94206.69524,1.40875,1.05038a15.58254,15.58254,0,0,0,2.92818,1.62164,24.746,24.746,0,0,0,3.77081,1.37526c.169.04742.44022-.09073.5209.20136.10066.17893.05889.28649-.15444.30807a9.81511,9.81511,0,0,1-2.53338-.69278,28.29827,28.29827,0,0,1-5.581-2.91463,1.29086,1.29086,0,0,0-.20547-.08951,3.9207,3.9207,0,0,1-1.03254-.71588,23.28415,23.28415,0,0,1-2.34989-2.14094,13.99846,13.99846,0,0,1-1.99022-2.22493,1.87552,1.87552,0,0,0-.463-.69309c-.22712-.293-.432-.60144-.63254-.91271-.07463-.11587-.168-.2322-.10206-.3875.21039-.07462.29731.09834.39641.21461.75218.88245,1.537,1.73605,2.3081,2.60152.35493.39835.78286.72875,1.168,1.10041A1.629,1.629,0,0,1,105.26665,47.74617Z"/><path class="cls-170" d="M116.97585,60.37765c.99806.273,2.03558.32283,3.0443.53628a.36372.36372,0,0,0,.2278-.0076,1.91248,1.91248,0,0,1,1.273-.06544,1.30328,1.30328,0,0,1-.15407.61541,6.60568,6.60568,0,0,0-1.38317.14062,4.88645,4.88645,0,0,1-1.83716-.09435,12.83936,12.83936,0,0,1-1.64775-.25937c-.08393-.02559-.19486.03728-.2933.05925a32.85015,32.85015,0,0,1-5.2825-2.41462c-.67548-.43881-1.34992-.8781-1.99039-1.36735a28.1494,28.1494,0,0,1-2.55173-2.25018.918.918,0,0,1-.32462-.54359c-.02105-.19786-.182-.32967-.30441-.47648-.10486-.12576-.238-.25024-.1006-.43448.35257.06572.55285.35654.79081.57141a27.67191,27.67191,0,0,0,5.86707,4.12129,25.09582,25.09582,0,0,0,3.64033,1.44947A8.54368,8.54368,0,0,1,116.97585,60.37765Z"/><path class="cls-171" d="M108.96416,57.4513a25.49534,25.49534,0,0,0,4.1366,2.49352,24.55979,24.55979,0,0,0,2.4332.93933,1.38248,1.38248,0,0,1,.67153.4183l-.2311.616a4.00675,4.00675,0,0,1-1.62364-.51864,22.596,22.596,0,0,1-6.25225-3.83142c-.91665-.75691-1.69676-1.65182-2.60566-2.4116-.04209-.03519-.049-.11242-.07231-.17006a1.35261,1.35261,0,0,1,1.07324.38967c.67616.61607,1.33385,1.25181,2.05081,1.82282A2.85631,2.85631,0,0,0,108.96416,57.4513Z"/><path class="cls-172" d="M100.72137,33.42118c-.06633-.05807-.17514-.1056-.19255-.17578-.22067-.88993-.95846-1.54672-1.10734-2.46552-.02455-.15155-.05671-.277-.24044-.2853l-.045-.04312a26.83823,26.83823,0,0,1-.68032-3.6567c-.06464-.63725-.12707-1.27443-.15718-1.91447-.03305-.70224.00474-1.40441-.06228-2.10831a10.98467,10.98467,0,0,0-2.20422-5.89068,9.81962,9.81962,0,0,0-2.63124-2.14272,3.55114,3.55114,0,0,1-.6578-.463,12.09515,12.09515,0,0,1-1.04552-.90667c-.10179-.10058-.26388-.16639-.20781-.35794.00174-.006.01863-.01069.02825-.01032a.14836.14836,0,0,1,.0362.01048,4.24349,4.24349,0,0,1,1.64556.40372c.14531.04341.28963.09016.4344.13538A10.17462,10.17462,0,0,1,97.19088,16.801a10.76909,10.76909,0,0,1,1.62046,5.04694c.08259.94335-.02994,1.88272.063,2.82.06779.68374.16324,1.3648.22687,2.04887a24.38862,24.38862,0,0,0,.705,3.90467C100.05388,31.56966,100.41228,32.489,100.72137,33.42118Z"/><path class="cls-173" d="M91.55415,13.01117c-.08427.0975.01874.15054.06631.17493.40539.20791.56657.713,1.03588.84314a.20632.20632,0,0,1,.13057.21409.39422.39422,0,0,1-.46949.01151,10.92987,10.92987,0,0,0-2.21565-.61463.293.293,0,0,1-.16536-.09007,10.13376,10.13376,0,0,0-2.326-.61869,1.18131,1.18131,0,0,1-.21563-.07414.43534.43534,0,0,1,.23051-.46212,8.3843,8.3843,0,0,1,2.70743.34609.96785.96785,0,0,0,.4146.03265A.93451.93451,0,0,1,91.55415,13.01117Z"/><path class="cls-174" d="M114.89589,56.6039a16.31456,16.31456,0,0,0,2.85031.69354,1.44011,1.44011,0,0,1,.077.53877,4.45242,4.45242,0,0,1-1.51142-.197c-1.17892-.3974-2.39686-.67442-3.54315-1.17418a21.35082,21.35082,0,0,1-3.06146-1.61415c-1.1427-.73754-2.26377-1.50786-3.34754-2.33079a7.14411,7.14411,0,0,0-.86524-.70149c-.31277-.26535-.58858-.56912-.87921-.85755a13.99873,13.99873,0,0,1-1.65877-1.73361,1.59434,1.59434,0,0,1-.15223-.22071c-.27233-.38486-.53633-.77863-.8441-1.13364a20.1804,20.1804,0,0,1-1.373-1.93749c-.08371-.12315-.19264-.24836-.11525-.41981.22161-.07617.31237.095.4348.221.21946.22592.30354.56913.619.71031.55.68982,1.08094,1.39612,1.66023,2.06183a29.49384,29.49384,0,0,0,2.825,2.87657,28.98836,28.98836,0,0,0,3.44731,2.57455,23.204,23.204,0,0,0,4.46836,2.216A2.34933,2.34933,0,0,1,114.89589,56.6039Z"/><path class="cls-175" d="M105.49757,51.75188c.46033.122.69623.54259,1.057.79985a46.70514,46.70514,0,0,0,4.5637,3.01389,25.71434,25.71434,0,0,0,4.738,1.835c.65157.20555,1.33528.1901,1.967.43557l1.38664.15423c-.07258.16216-.21716.16505-.35991.1526a4.15369,4.15369,0,0,0-1.21213-.00574,1.25181,1.25181,0,0,1-.37348-.05965c-.17787-.02375-.34258-.01632-.36555.22067a.24906.24906,0,0,1-.25412.02441,23.26357,23.26357,0,0,1-9.06767-4.4433c-.60591-.49353-1.1309-1.07575-1.77145-1.52977C105.63047,52.22555,105.40571,52.04962,105.49757,51.75188Z"/><path class="cls-176" d="M119.51877,59.68505l-.07779.07664a.69747.69747,0,0,0-.44109-.09522,30.553,30.553,0,0,1-3.15647-.84044c-.14753-.02556-.38266-.05158-.316-.325a.92555.92555,0,0,1,.74109.01719,24.40638,24.40638,0,0,0,3.01845.31944l1.00146-.00038c.33785.04908.679.08207,1.01264.1515a8.45886,8.45886,0,0,0,1.12731.02152,6.17767,6.17767,0,0,0,.63333.05841.40177.40177,0,0,1-.40272.23335,9.3667,9.3667,0,0,0-2.44765.293.61962.61962,0,0,1-.29764-.04682C119.75923,59.51426,119.60331,59.50459,119.51877,59.68505Z"/><path class="cls-177" d="M119.28691,58.83765a1.13843,1.13843,0,0,1-.711.0576,13.45358,13.45358,0,0,0-1.46383-.08177,4.355,4.355,0,0,1-1.072-.228,2.0237,2.0237,0,0,0-.52793-.05531c-.23836.1199-.44948-.01684-.65989-.08442a22.9398,22.9398,0,0,1-7.50126-4.11556c-.80482-.65407-1.526-1.40411-2.37143-2.00836a.97883.97883,0,0,1-.23007-.25645c-.06872-.1087-.15608-.2034-.23421-.30513a17.13829,17.13829,0,0,0-1.15412-1.32978,22.42306,22.42306,0,0,1-1.96393-2.6372.31416.31416,0,0,1-.07656-.353c.24373-.05148.31658.16244.44609.28784.4019.3892.71251.85953,1.11158,1.25129a7.07817,7.07817,0,0,0,1.05072,1.245,16.92634,16.92634,0,0,1,1.56849,1.52755.96228.96228,0,0,0,.35482.53052c1.05238.84906,2.02392,1.79864,3.15316,2.55212a21.9599,21.9599,0,0,0,7.20383,3.2359c.23473.05492.45985.151.68943.2279a8.70273,8.70273,0,0,0,1.6971.37955A2.6949,2.6949,0,0,1,119.28691,58.83765Z"/><path class="cls-178" d="M114.89589,56.6039A26.65089,26.65089,0,0,1,101.4921,46.51457c-.34954-.35084-.57133-.79849-.88862-1.17422a.247.247,0,0,1-.05645-.28076.15762.15762,0,0,1,.22858.062,6.14327,6.14327,0,0,0,.84142.814,44.95065,44.95065,0,0,0,3.74737,4.00281,29.7785,29.7785,0,0,0,4.30436,3.26823c.40111.25.81617.47864,1.20948.7428a5.10977,5.10977,0,0,0,1.283.7577c.76583.28439,1.4138.81409,2.21511,1.04012.43.1213.86332.23532,1.2915.365.13931.04219.31995.03812.30654.26073a2.18,2.18,0,0,1-.73963-.10392c-.117-.02662-.23816-.13848-.35153-.04849C114.73611,56.33743,114.90746,56.474,114.89589,56.6039Z"/><path class="cls-179" d="M115.97439,56.373c-.21065-.24517-.53154-.20472-.799-.29126a7.69652,7.69652,0,0,1-2.25-.90729,4.86,4.86,0,0,0-1.07639-.49272,3.58089,3.58089,0,0,1-1.036-.69632c.14453-.10092.27135-.01313.39324.04638a20.12171,20.12171,0,0,0,5.59609,1.79135.53625.53625,0,0,1,.25054.08775,11.758,11.758,0,0,0,2.33187.17159,5.66067,5.66067,0,0,1,1.475.09827c.199.03231.40394-.1276.58418.03859l.15407.38472c-1.02-.07355-2.035.15589-3.05318.06431C117.68607,56.59116,116.83105,56.47305,115.97439,56.373Z"/><path class="cls-180" d="M117.05288,55.91092a11.43331,11.43331,0,0,1-3.15415-.692,23.39552,23.39552,0,0,1-3.08572-1.23347,31.6403,31.6403,0,0,1-2.8109-1.7696,29.44615,29.44615,0,0,1-4.47017-3.95035,21.72806,21.72806,0,0,1-1.96318-2.28986,8.01355,8.01355,0,0,1-.97895-1.41438c-.07069-.13217-.19-.24929-.12293-.42126.14872-.084.20271.04979.27608.12549a8.75172,8.75172,0,0,1,.95968,1.1439,2.16687,2.16687,0,0,0,.59387.59095c.71311.80519,1.372,1.65947,2.16225,2.39537a.55415.55415,0,0,1,.11438.19831,16.892,16.892,0,0,0,2.30881,2.17622,24.65,24.65,0,0,0,4.8101,3.03613,19.45863,19.45863,0,0,0,4.12827,1.4884.62044.62044,0,0,0,.52139.322C116.593,55.643,116.88769,55.64334,117.05288,55.91092Z"/><path class="cls-181" d="M100.10652,29.49368a30.14923,30.14923,0,0,1-.48572-3.4016A28.004,28.004,0,0,1,99.50005,23.07c.047-.69045-.01217-1.37369-.01015-2.06013A9.37748,9.37748,0,0,0,98.02314,15.733a7.84317,7.84317,0,0,0-1.6996-1.90317c-.76458-.60432-1.60782-1.08239-2.38129-1.66536a2.78723,2.78723,0,0,1-.38518-.61643.99413.99413,0,0,1,.72446.187c.58142.32488,1.19475.58571,1.76736.931a5.48079,5.48079,0,0,1,1.35995,1.11485c.227.41691.60144.71786.86515,1.10763a9.68184,9.68184,0,0,1,1.60365,4.68545c.05263.60753.13942,1.2121.2109,1.818.03539.3-.16719.554-.14311.86122a43.16917,43.16917,0,0,0,.376,4.49083c.08743.47426.11424.95968.16878,1.44-.12906.33331.06346.63814.11336.94786.08841.54876.33347,1.07363.40893,1.6228a13.19244,13.19244,0,0,0,.55621,2.05049,2.46338,2.46338,0,0,1-.52194-1.07723,1.72555,1.72555,0,0,0-.3525-.6156c-.31291-.31632-.286-.773-.42025-1.16388A1.2,1.2,0,0,0,100.10652,29.49368Z"/><path class="cls-182" d="M97.40884,13.7808c-.05838-.02138-.13324-.02652-.17275-.06653a10.97811,10.97811,0,0,0-3.679-2.16627,7.51828,7.51828,0,0,1-1.7354-.62687,1.9514,1.9514,0,0,1-.34455-.22037.66976.66976,0,0,0,.50184-.12867c.23352-.19571.48779-.06125.73018-.01018.1842.0388.36339.13374.53979-.01532A9.44763,9.44763,0,0,1,95.86814,11.856a1.11258,1.11258,0,0,0,.31989.31912c.21614.1684.46452.317.46256.65314-.00081.13808.13922.1957.23993.275A1.10108,1.10108,0,0,1,97.40884,13.7808Z"/><path class="cls-183" d="M77.22556,42.04746c-.2133.06608-.32267.2664-.48843.39413a1.14265,1.14265,0,0,1-.898.29886,3.72707,3.72707,0,0,1-.4112-1.33209c-.03243-.263-.28378-.49892-.43642-.74705-.26268-.26252-.12022-.53924-.02709-.81318a1.29848,1.29848,0,0,1,.183-.37424c.28159-.19551.67737-.16911.90782-.46592a.35259.35259,0,0,1,.3681.12171c.3321.6742.90632,1.18279,1.26449,1.8397a1.03083,1.03083,0,0,1-.30034.51042A.6031.6031,0,0,0,77.22556,42.04746Z"/><path class="cls-184" d="M75.22264,39.50592c-.15.37053-.40109.72087-.23115,1.15539a8.09283,8.09283,0,0,1-1.3866-.30818c-.2221-.43445-.65274-.70888-.87655-1.143-.05766-.11183-.13424-.21391-.20213-.32048a.49012.49012,0,0,1,.46252-.23127.2682.2682,0,0,1,.21308-.06824c.39214.11942.81191.07131,1.201.203A2.86255,2.86255,0,0,1,75.22264,39.50592Z"/><path class="cls-185" d="M104.57314,48.594a12.51863,12.51863,0,0,1-1.61251-1.68362q-.34878-.42936-.69855-.85793c-.567-.70518-1.05756-1.46423-1.56046-2.21451-.06278-.09366-.13585-.19027-.07888-.31634.12144-.07607.19768.01249.25829.08787a22.80785,22.80785,0,0,1,1.45808,1.82664c.70726.82049,1.46057,1.59574,2.22276,2.36626.96962.98023,2.03735,1.83954,3.09269,2.71719a9.34413,9.34413,0,0,0,2.0878,1.59516,3.89926,3.89926,0,0,1,1.168.74763,12.77687,12.77687,0,0,1-1.90066-1.027,24.22035,24.22035,0,0,1-4.25687-3.17446C104.70559,48.61929,104.67229,48.50853,104.57314,48.594Z"/><path class="cls-186" d="M87.47109,14.24382c-.47429.11054-.81575-.27071-1.243-.33984-.07817-.01265-.06174-.12556-.06638-.1994a1.66313,1.66313,0,0,0,.99595.08579,7.84682,7.84682,0,0,1,1.99611.17924q.54546.05951,1.09082.11986c.10216-.08891.19726-.0275.28092.02543.575.3638,1.19209.65462,1.7654,1.02065.12629.08063.27624.15046.29275.33257a.63529.63529,0,0,1-.4347.45808,4.0129,4.0129,0,0,1-1.20416-.3473,4.78288,4.78288,0,0,0-.72471-.23362c-.78838-.30375-1.61369-.502-2.39194-.83476C87.68769,14.45047,87.534,14.40775,87.47109,14.24382Z"/><path class="cls-187" d="M92.55561,15.4756a7.04062,7.04062,0,0,0-1.51576-.94271,3.37191,3.37191,0,0,0-.7953-.44342c-.10549-.17819-.56589-.15369-.30814-.53933a7.27367,7.27367,0,0,1,2.16147.50558,1.5615,1.5615,0,0,0,.689.18761l.61609.38539a7.238,7.238,0,0,0,.90074,1.13511c.26921.2326.2313.60129.28108.92391a.11421.11421,0,0,1-.17058.00653C93.85329,16.19821,93.13638,15.94062,92.55561,15.4756Z"/><path class="cls-188" d="M104.80331,51.9834A8.55327,8.55327,0,0,0,106.06,53.09977a26.2133,26.2133,0,0,0,3.69346,2.853,20.90189,20.90189,0,0,0,5.75871,2.57736c.18433.26572.49622.225.754.29842a15.83339,15.83339,0,0,1,1.96256.64751,3.05066,3.05066,0,0,0,.89373.12812c.13211.013.2558.01611.31849.15751-.63556-.04537-1.272-.0813-1.90625-.14072a.42084.42084,0,0,0-.46667.30882,2.45053,2.45053,0,0,0-.09221.44787,4.73093,4.73093,0,0,1-1.36694-.43482,19.84418,19.84418,0,0,1-2.88621-1.12722,24.72176,24.72176,0,0,1-4.10712-2.514c-1.01771-.789-1.99017-1.62981-2.96394-2.47019-.07365-.03722-.12074-.08551-.0726-.1736.17167-.09947.28524.02419.414.10365.28112.17349.47.46736.78616.5968-.6003-.64262-1.19515-1.28846-1.8234-1.90241a.91.91,0,0,1-.24176-.29458C104.68309,52.083,104.643,51.97642,104.80331,51.9834Z"/><path class="cls-189" d="M84.38985,15.70694a10.7322,10.7322,0,0,0-4.4584.86678c-.56946.24456-1.189.37135-1.78247.56212a.46825.46825,0,0,1-.327-.04945,2.92226,2.92226,0,0,0-1.21272-.30135c.55715-.23435,1.17493-.18954,1.74228-.38043.77495-.26072,1.55878-.49629,2.32775-.77331a9.69286,9.69286,0,0,1,4.77167-.62419c.46563.0691.93576.10784,1.40383.16051.088-.05958.14424-.03622.17074.06522-.2603.23164-.45289.52445-.6964.77237A5.6494,5.6494,0,0,1,84.38985,15.70694Z"/><path class="cls-190" d="M87.00906,15.2445a.15972.15972,0,0,0-.15426-.07687.87346.87346,0,0,0-.15066-.1084c-.56512-.24839-1.13188-.493-1.69819-.73872.16476-.15869.33053-.04561.49533-.00092a5.22784,5.22784,0,0,0,1.96981-.07578c.88913.43161,1.85361.65454,2.77346,1.001a.30687.30687,0,0,1-.22166.362,19.15317,19.15317,0,0,1-2.55122-.21023A.70717.70717,0,0,1,87.00906,15.2445Z"/><path class="cls-191" d="M72.21807,20.25122c.08116-.1797.2654-.1873.41576-.21789a.45838.45838,0,0,0,.35478-.2442.40992.40992,0,0,0,.36239.06915c.4387-.2175.89037-.02515,1.33239-.06955a.42881.42881,0,0,1,.35951-.1,6.69346,6.69346,0,0,0,3.57078-.85622c.59915-.26807,1.11017-.68259,1.71142-.94495a10.26509,10.26509,0,0,1,2.01683-.73263,4.5834,4.5834,0,0,1,1.96213.07455c.141.05147.3047.05019.40327.18988-.06427.22862-.27113.21041-.43468.22477a10.22176,10.22176,0,0,0-4.29543,1.44333,16.25284,16.25284,0,0,1-2.97535,1.57887,3.65374,3.65374,0,0,1-.81025.23368,6.48027,6.48027,0,0,1-2.237.15483,3.04119,3.04119,0,0,0-.76364.05427.462.462,0,0,1-.43312-.08787C72.60379,20.74644,72.32108,20.56179,72.21807,20.25122Z"/><path class="cls-192" d="M72.75788,21.02123c1.1476-.1941,2.32849.1111,3.46622-.231.00787.30861-.263.33656-.45247.43384-.22317.11457-.481.16973-.64581.42614a.70923.70923,0,0,0,.43454.02093c.1978-.01117.29347.06069.24328.26954a4.34229,4.34229,0,0,1-1.50543.852c-.51093.46208-1.09239.25008-1.632.1198a4.22256,4.22256,0,0,1-1.37219-.50515c.203-.45161.45828-.831,1.0414-.773a.14936.14936,0,0,0,.1864-.14247A1.115,1.115,0,0,1,72.75788,21.02123Z"/><path class="cls-193" d="M71.756,27.72189a.15918.15918,0,0,0-.15407-.0772c.0501-.29589.41064-.43648.38537-.77007.04938-.07462.10033-.18857.18688-.17749.48028.06148.8249-.309,1.2611-.37928a1.05451,1.05451,0,0,0,.69115-.18085.70747.70747,0,0,1,.51293-.12307,1.787,1.787,0,0,0,1.574-.60915c.56751-.57426,1.28483-.959,1.90346-1.47294.75478-.62708,1.54884-1.20778,2.32546-1.809a7.83582,7.83582,0,0,1,1.52376-.87871,2.81978,2.81978,0,0,1,1.09324-.42046,1.65131,1.65131,0,0,1,1.10464.19616c.23355.09778.3834.23932.27035.51755a.25416.25416,0,0,1-.31254.07655,2.7585,2.7585,0,0,0-2.45919.46508c-1.00711.5994-1.85223,1.405-2.79832,2.07716-.67606.48031-1.257,1.0704-1.90178,1.58373a16.12428,16.12428,0,0,0-1.77306,1.50748,1.56489,1.56489,0,0,1-1.12786.58961.35808.35808,0,0,0-.38831.07546.92774.92774,0,0,1-.98936.19593A1.67471,1.67471,0,0,1,71.756,27.72189Z"/><path class="cls-194" d="M73.45078,26.41256a.48076.48076,0,0,0-.29109.07028c-.26365.16481-.50625.37247-.865.26045-.08089-.02526-.20382.084-.30739.13133-.1033-.2576-.39761-.1837-.58293-.34452-.48073-.41715-.53084-.46209-.34169-1.04167.51025-.06149.99786-.24121,1.51684-.27205.18631-.01107.37522-.02545.56312-.03612.2691.26232.57434.06174.86064.05589.16523-.00338.3255-.06367.45869.08279A1.75161,1.75161,0,0,1,73.45078,26.41256Z"/><path class="cls-195" d="M74.29821,22.79266c.45388-.3412.98587-.54756,1.46367-.84749a.708.708,0,0,1,.42371-.1611,2.84811,2.84811,0,0,0,.72133-.24289c1.47531-.58615,2.64848-1.687,4.06537-2.36827a4.47383,4.47383,0,0,1,4.05777-.25842.30319.30319,0,0,1,.147.1174,1.28441,1.28441,0,0,1-1.3687.44948,2.96782,2.96782,0,0,0-2.29731.32151A12.2813,12.2813,0,0,0,78.60072,21.653a2.77913,2.77913,0,0,1-.79053.46487,11.37483,11.37483,0,0,1-2.46935.93762,1.78023,1.78023,0,0,1-1.11966-.03184Z"/><path class="cls-196" d="M74.22118,23.02368a6.77263,6.77263,0,0,0,2.76778-.62659,22.82958,22.82958,0,0,0,3.19947-1.9989,7.883,7.883,0,0,1,2.70135-1.125,1.3,1.3,0,0,1,.88379.13054.30669.30669,0,0,1-.18041.13861,7.46432,7.46432,0,0,0-3.64009,1.5272c-.98161.62707-1.95615,1.272-2.91856,1.92042-.9482.63882-2.02283.98534-2.96893,1.59407-.21651.1393-.38447.39124-.69161.36517-.086-.33152-.37776-.43828-.64515-.52131a1.55271,1.55271,0,0,1-.5876-.32585,12.23849,12.23849,0,0,1,1.42032-.56646C73.85205,23.4755,73.97507,23.16229,74.22118,23.02368Z"/><path class="cls-197" d="M73.374,24.94924a22.80236,22.80236,0,0,1,2.33315-1.28349,40.63625,40.63625,0,0,0,3.52608-2.2059,10.28515,10.28515,0,0,1,3.62591-1.92293,4.626,4.626,0,0,1,.76039-.05614.95883.95883,0,0,1,.68588.1784,7.12591,7.12591,0,0,0,.9259.3609c.13942.07029.33807.0875.32454.31726a.92433.92433,0,0,1-.44871.15608c-.46266-.00094-.91252-.1247-1.37075-.15452a4.02208,4.02208,0,0,0-2.13684.65814,28.35288,28.35288,0,0,0-3.47823,2.39641,22.41405,22.41405,0,0,1-3.37723,1.89982.3077.3077,0,0,1-.29178.04112,2.10652,2.10652,0,0,0-.98752.08631c-.27588.07075-.32128-.01681-.32208-.24044Z"/><path class="cls-198" d="M82.3099,17.24728a9.70826,9.70826,0,0,0-2.5767,1.07549c-.635.39389-1.31968.66027-1.98169.98558a4.68719,4.68719,0,0,1-2.37548.48247c-.23023-.01257-.46173-.002-.69264-.00209a1.16025,1.16025,0,0,0-.01711-.37243c-.13724-.34787-.04242-.55306.32525-.62879.5622.09533,1.0319-.25093,1.55933-.32626a15.62168,15.62168,0,0,0,3.59925-1.25675,3.86144,3.86144,0,0,0,.465-.26534,7.68886,7.68886,0,0,1,3.39067-.49746c.25184.01374.51881-.00835.70584.2191-.05.18663-.21256.195-.35939.22076C83.67107,17.0013,82.99879,17.17078,82.3099,17.24728Z"/><path class="cls-199" d="M84.698,16.7081a1.17732,1.17732,0,0,0-.57619-.154,9.38544,9.38544,0,0,0-3.17023.33321,2.202,2.202,0,0,1-.33646.0518,2.6117,2.6117,0,0,1,.8628-.38322c.8385-.20681,1.64717-.52631,2.50688-.655a.57317.57317,0,0,0,.405-.194c.67437.01774,1.32553.23659,2.00259.231a2.02394,2.02394,0,0,1,.88964.258c.15768.152.3548.25289.51861.39528.14725.128.29907.26972.098.47648a1.16577,1.16577,0,0,1-.58013.03876c-.76946-.1652-1.55489-.21715-2.33225-.32646C84.88742,16.76611,84.78131,16.78352,84.698,16.7081Z"/><path class="cls-200" d="M71.756,27.72189a10.055,10.055,0,0,0,1.12146.32719.73394.73394,0,0,0,.74435-.227c.138-.14379.28245-.29685.44525-.02314.11595.16871-.01467.28579-.0929.40669-.3627.56046-.32641.66734.30823.86878.10507.3284-.19189.51807-.27027.78364a3.70953,3.70953,0,0,0-.73868.581,1.51953,1.51953,0,0,1-1.28633-.02169,6.27573,6.27573,0,0,0-.24029-.93418c-.08972-.16508-.14533-.355-.376-.37505A4.40724,4.40724,0,0,1,71.756,27.72189Z"/><path class="cls-201" d="M74.45209,38.88967l-1.46337-.23127c.06864-.346-.2329-.52289-.35785-.78033-.07114-.14657-.27583-.23854-.18151-.45158.17342-.18688-.12449-.4328.07721-.61615a.47769.47769,0,0,1,.41434-.09033,3.42118,3.42118,0,0,1,1.23457.55443,1.7053,1.7053,0,0,0,.59361.21792.16673.16673,0,0,1-.00381.21356A1.62135,1.62135,0,0,0,74.45209,38.88967Z"/><path class="cls-202" d="M72.98861,36.81016l-.462.00018a5.82618,5.82618,0,0,1-.88808-.88077,2.58542,2.58542,0,0,1-.26762-1.12191.44494.44494,0,0,1,.385-.15418,1.37678,1.37678,0,0,1,.78659.16323c.36546.31564.85176.52678.94245,1.08212C73.27917,36.18044,73.28909,36.57987,72.98861,36.81016Z"/><path class="cls-203" d="M71.98715,30.41737c.43427-.06418.88705.18747,1.3096-.07673.112.122.05456.26379.04444.39891-.03585.47921-.005.51341.4547.60417a1.59,1.59,0,0,1,.58924.12866.36109.36109,0,0,1,.04923.35934,14.58816,14.58816,0,0,1-1.87614,1.272,11.69984,11.69984,0,0,0-1.34124-.37556c-.0217-.20286-.1778-.29292-.32447-.3948-.13484-.09366-.27767-.18585-.292-.3753.189-.30719.09709-.70094.30851-1.00125a.535.535,0,0,0,.42527-.27828C71.45856,30.29876,71.69381,30.31308,71.98715,30.41737Z"/><path class="cls-204" d="M71.217,32.72814a2.41031,2.41031,0,0,1,1.38664.3085,1.69185,1.69185,0,0,1,.553.9365c.10426.52106-.3228.675-.63045.91154-.24581-.11361-.53353-.08763-.77035-.2312q-.17065-.22626-.34133-.45248A1.58,1.58,0,0,1,71.217,32.72814Z"/><path class="cls-205" d="M81.00029,47.05371c.11838-.06268.34414-.08257.13168-.28856-.18549-.17986-.10715-.27615.0897-.3559a.746.746,0,0,0,.28272-.89481.3962.3962,0,0,1,.11238-.61727c.2785.12933.34171.41616.47646.65073a2.84073,2.84073,0,0,0,1.434,1.365,13.71014,13.71014,0,0,1,1.32088.62331,8.59006,8.59006,0,0,0,3.049.86331c.75122.07686,1.49846.20076,2.24749.30356a5.9934,5.9934,0,0,0,1.148-.07043c.62528-.03321,1.25307-.06774,1.87458-.1592a.65692.65692,0,0,0,.223-.05642,20.07214,20.07214,0,0,0,2.282-1.26534.86012.86012,0,0,0,.407-.70315.29958.29958,0,0,1,.09727-.242c.25426.01481.27417.27753.42181.40709.10089.08854.13085.26062.23422.34311A6.28939,6.28939,0,0,1,98.17892,48.825c-.3971-.0072-.5785.345-.8646.52216a5.37644,5.37644,0,0,1-3.16992,1.26354c-.34558-.02081-.69884.13469-1.00472-.15521-.04177-.03959-.15-.02011-.22555-.01135a17.53143,17.53143,0,0,1-2.14556.07764.34369.34369,0,0,0-.18482.03623,2.438,2.438,0,0,1-2.16164.20331A22.4232,22.4232,0,0,1,82.94054,48.332c-.07591-.04692-.18725-.07829-.21978-.14657a.66473.66473,0,0,0-.79623-.43859A2.78,2.78,0,0,1,81.00029,47.05371Z"/><path class="cls-206" d="M105.57416,53.67775l.07748.15365a.41164.41164,0,0,0,.14217.33872c.18537.19918.42623.37037.37168.70546-.00829.05091.07971.12316.1317.17735a23.2704,23.2704,0,0,0,2.54008,2.26,1.08717,1.08717,0,0,1,.12689.13837.55431.55431,0,0,1-.39055-.11439c-.7262-.56786-1.37611-1.22052-2.05456-1.8406a3.2672,3.2672,0,0,0-1.09852-.50962l-.69313-.61616c-.4524-.68236-1.04365-1.25092-1.55743-1.8834-.87542-1.07767-1.73906-2.16155-2.5445-3.293-.138-.19388-.21451-.48312-.52038-.52323a5.44,5.44,0,0,0-.93606-1.50385c-.13-.18534-.29378-.31528-.25745-.59323.02442-.18687-.12484-.37389-.23338-.5506a1.22518,1.22518,0,0,1-.26789-.66377c.20331-.03316.24225.14931.33075.2592a7.20822,7.20822,0,0,0,1.03768,1.24754,1.90635,1.90635,0,0,1,.48605.53529,52.52339,52.52339,0,0,0,4.11868,4.93979A8.51142,8.51142,0,0,1,105.57416,53.67775Z"/><path class="cls-207" d="M96.17647,46.2065a1.12327,1.12327,0,0,1-.70348,1.23026c-.61747.35815-1.25553.68067-1.88178,1.02392a2.53328,2.53328,0,0,1-1.04557.1931c-.69713.0608-1.39745.14482-2.09413.153a13.893,13.893,0,0,1-1.93062-.21479c-.63014-.082-1.26175-.15867-1.88727-.26865a11.04069,11.04069,0,0,1-2.23613-.88438c-.40038-.1648-.80038-.34431-1.18305-.53519a2.81852,2.81852,0,0,1-1.14095-1.14487,7.46813,7.46813,0,0,1-.45672-.86177l.00018-.23068c.30318-.08439.47877-.40278.80791-.44078,1.59576.383,3.15737.89221,4.75256,1.2772a15.07276,15.07276,0,0,0,2.401.286c.22962.01766.4596.01874.68914.05265a2.22741,2.22741,0,0,0,1.24289-.14427c.47026-.20407.94843-.39132,1.42827-.57246a2.28514,2.28514,0,0,0,1.10736-.72862.48077.48077,0,0,1,.39811-.20141,6.17752,6.17752,0,0,0,1.342.8581.60152.60152,0,0,1,.23606.38342A1.34234,1.34234,0,0,1,96.17647,46.2065Z"/><path class="cls-208" d="M96.02221,45.43631c-.13661-.06043-.19568-.18928-.27751-.30156-.09738-.13363-.21341-.2674-.40417-.23517a.51973.51973,0,0,1-.6216-.4151c-.043-.12293-.10422-.19838-.23743-.20346a1.52508,1.52508,0,0,0-.05365-.95388,1.46388,1.46388,0,0,1-.0282-.71053.95388.95388,0,0,1,.37479-.52433c.37193-.02162.42686.3427.63521.52095a17.30994,17.30994,0,0,0,.88931,1.50961.22871.22871,0,0,1,.03172.31258A.95467.95467,0,0,1,96.02221,45.43631Z"/><path class="cls-209" d="M96.33068,44.43542l-1.0016-1.77171c.03823-.13644-.03832-.31176.13607-.40219a.26035.26035,0,0,1,.28815.1395c.27208.45933.6639.82595.96223,1.264.33342.65409.67753,1.303.99657,1.96406a3.49474,3.49474,0,0,1,.46691,1.42462,18.34748,18.34748,0,0,1-1.312-1.89613A2.067,2.067,0,0,0,96.33068,44.43542Z"/><path class="cls-210" d="M96.71553,42.587c-.11268-.0928-.156-.2549-.30815-.30826a16.20978,16.20978,0,0,1-1.21585-1.99552,7.16513,7.16513,0,0,0-.38764-.66321c-.58166-1.06339-1.1218-2.15-1.77-3.17633a2.27432,2.27432,0,0,0-.50463-.6672,2.23136,2.23136,0,0,1-.58921-.98545c.44834-.03045.75589.28822,1.12359.45669a1.25676,1.25676,0,0,1,.23814.18422,2.85865,2.85865,0,0,1,.54015.83214,16.40306,16.40306,0,0,1,.95216,1.92014,1.39413,1.39413,0,0,0,.52405.64831,11.64726,11.64726,0,0,1,1.00964,1.93,2.39038,2.39038,0,0,1,.41241,1.02205C96.7042,42.05129,96.863,42.324,96.71553,42.587Z"/><path class="cls-211" d="M94.86649,39.58275c.54066.88321,1.07138,1.7721,1.54089,2.696-.02359.49019.26992.90992.30815,1.38637a3.34382,3.34382,0,0,1-.89791-1.02887.90324.90324,0,0,0-.335-.3574c-.10283.02209-.12525-.0594-.16156-.12434-.39273-.70251-.65011-1.4683-1.01963-2.18187-.05643-.109-.12911-.22782-.03659-.3578A.47922.47922,0,0,1,94.86649,39.58275Z"/><path class="cls-212" d="M96.71553,42.587a2.97943,2.97943,0,0,1-.07685-.84749c.2095-.097.27289.0871.34515.20126q.92334,1.45884,1.80653,2.94279a9.9561,9.9561,0,0,0,.789,1.5352c.07459.14811.25806.27387.1407.48125-.29894-.04725-.35716-.34412-.52111-.52448-.2875-.31631-.52831-.67506-.78868-1.016-.56171-.77981-.92672-1.68225-1.52326-2.44143A.51231.51231,0,0,1,96.71553,42.587Z"/><path class="cls-213" d="M100.10509,34.03756c-.14671-.06262-.18342-.20823-.24069-.33285a19.98871,19.98871,0,0,1-1.69-5.4434c-.06448-.43815-.15034-.87316-.22636-1.30961a11.85229,11.85229,0,0,1-.14341-1.89478,10.85156,10.85156,0,0,0-.16745-1.9457.89762.89762,0,0,1,.04409-.599c.2142-.09079.19649.1047.22313.20171a3.11409,3.11409,0,0,1,.15.86856,17.65964,17.65964,0,0,0,.2142,2.21326,35.33137,35.33137,0,0,0,.912,4.69856l.00037.00027c.29572,1.03929.60647,2.0737,1.00109,3.08086A1.38044,1.38044,0,0,1,100.10509,34.03756Z"/><path class="cls-214" d="M99.25805,35.57793c.03048.43441.38035.74119.46186,1.15521a.42218.42218,0,0,1-.15407.30807c-.272.01772-.33117-.20844-.40626-.384-.3518-.82239-.8-1.59907-1.14246-2.42588a29.20645,29.20645,0,0,1-1.42375-5.45413,5.50592,5.50592,0,0,1-.11327-1.71568c.05794-.1502-.00764-.29926-.00464-.44878.00667-.33139.16257-.53456.42912-.562a3.814,3.814,0,0,1,.13229.9793c.08459.55469.17037,1.108.29871,1.65422a25.70611,25.70611,0,0,0,1.11668,4.72384,18.39214,18.39214,0,0,0,.73675,1.80739C99.2423,35.32886,99.31611,35.44183,99.25805,35.57793Z"/><path class="cls-215" d="M98.10216,34.26825q.54233,1.11019,1.08387,2.22077c.099.204.15336.43664.37981.55219a13.09018,13.09018,0,0,0,1.17984,2.215c.351.58657.75213,1.14315,1.131,1.713a4.41014,4.41014,0,0,1-1.29713-1.43883c-.08683-.13187-.10437-.32633-.32024-.33261a3.06253,3.06253,0,0,1-.68777-1.0367c-.34163-.62476-.714-1.23517-1.00471-1.88777-.19626-.527-.39073-1.05468-.62135-1.56807a.42379.42379,0,0,1-.042-.333A.19474.19474,0,0,1,98.10216,34.26825Z"/><path class="cls-216" d="M104.57314,45.59034c-.25216-.01556-.29027-.26759-.43124-.4031-.62857-.60425-1.2396-1.22679-1.8548-1.84487a5.97848,5.97848,0,0,0-.87241-.90981c-.11.04-.17015-.03422-.21874-.10753-.71937-1.08526-1.446-2.16588-2.11349-3.28451a.622.622,0,0,1-.05529-.14274c-.01742-.1808-.19062-.43446.01341-.52289.217-.09408.27219.20872.37439.353.31626.44652.64012.88748.95986,1.33111.41245.44053.67839.99121,1.08141,1.43989a.40731.40731,0,0,1,.11252.3176,12.9363,12.9363,0,0,0,1.25889,1.6991,15.51757,15.51757,0,0,0,1.70205,1.93182C104.56007,45.48046,104.55937,45.54205,104.57314,45.59034Z"/><path class="cls-217" d="M101.56876,41.8165,100.336,40.12189a19.35055,19.35055,0,0,1-1.96175-3.55716c-.05244-.1267-.14488-.251-.04152-.39519.13868-.0745.23389-.01726.30883.10148l1.61774,2.92673a18.49294,18.49294,0,0,0,1.45549,2.27161c.11367.14492.26206.28569.23911.50118C101.79219,42.00256,101.68992,41.88592,101.56876,41.8165Z"/><path class="cls-218" d="M99.10362,38.88958c.62623.9901,1.19241,2.01966,1.91338,2.94735.1481.19056.16641.46408.39769.59563a2.43642,2.43642,0,0,0,.5167.78769,1.44433,1.44433,0,0,1,.40772.67567c-.35834-.14964-.49265-.53379-.78712-.752-.13129-.0973-.24611-.21684-.36841-.32628-.07483.02609-.1188-.02-.15959-.07a17.8073,17.8073,0,0,1-2.087-3.23638c-.134-.31578-.27033-.63045-.40408-.94612-.07772-.18345-.18369-.37074-.07629-.58175.3177-.018.34577.27438.46114.45513A3.802,3.802,0,0,1,99.10362,38.88958Z"/><path class="cls-219" d="M90.09048,15.55281c-.01118-.13393.1107-.20131.15407-.30795.65871.15309,1.25442.503,1.92588.61622A6.70168,6.70168,0,0,1,93.624,16.92577,10.99332,10.99332,0,0,1,97.45175,23.714c.05884.38172.02609.767.11268,1.143a.25278.25278,0,0,1-.07855.24625,20.01716,20.01716,0,0,0,.23092,3.08086c-.30675-.02235-.29762-.27995-.31734-.47519a4.273,4.273,0,0,0-.20455-.96c-.17249-1.08428-.231-2.18668-.49822-3.2563a10.2795,10.2795,0,0,0-1.7901-3.832,10.84018,10.84018,0,0,0-2.52112-2.3393,7.3441,7.3441,0,0,0-2.17255-1.63171A.2082.2082,0,0,1,90.09048,15.55281Z"/><path class="cls-220" d="M97.48588,25.10324a10.94175,10.94175,0,0,0-1.94169-5.93882,12.98393,12.98393,0,0,0-3.13278-3.06457.6517.6517,0,0,1-.241-.23878c.19433-.06263.20858-.30512.38518-.38546a8.167,8.167,0,0,1,1.76793,1.03689c.08076.062.15678.13008.235.19535.18791-.04449.27516.1063.38017.20669a9.85994,9.85994,0,0,1,2.77106,5.15256.84013.84013,0,0,1,.00723.41745c.0268.74758.13372,1.48736.2163,2.22953a.78642.78642,0,0,1,.0113.26611,10.07378,10.07378,0,0,0,.0035,1.97151,9.4651,9.4651,0,0,1-.30244-1.495C97.612,25.32388,97.64591,25.17436,97.48588,25.10324Z"/><path class="cls-221" d="M97.25477,26.72064a1.76866,1.76866,0,0,1,.2314.85855c.01409.22514.01343.45679.23063.60491a32.69788,32.69788,0,0,0,1.00354,4.01425c.06951.23.15268.45593.22954.68373a.97735.97735,0,0,0,.0955.59849,13.29179,13.29179,0,0,1,.575,1.65518,14.754,14.754,0,0,0,.98555,2.06643.57756.57756,0,0,1,.03856.147,3.75139,3.75139,0,0,1-1.04172-1.3826.70453.70453,0,0,0-.34472-.38867,18.93087,18.93087,0,0,1-1.41011-3.83213c-.2106-.81285-.32132-1.64624-.56293-2.45112a2.3749,2.3749,0,0,1-.03009-.57173c.10552-.3212-.05408-.62134-.07341-.93251A1.74334,1.74334,0,0,1,97.25477,26.72064Z"/><path class="cls-222" d="M77.68777,40.96938a.21036.21036,0,0,1-.19556-.09868c-.29769-.60691-.87-1.03072-1.11385-1.67292a2.0976,2.0976,0,0,1,.67582-1.065,6.51326,6.51326,0,0,0,.61227-.56258c.22446-.03543.3362.12951.39534.28447.11575.30322.286.38713.575.24126a.17792.17792,0,0,1,.14761.0116,5.66514,5.66514,0,0,1,.43458.59953,3.78506,3.78506,0,0,1-.14507,1.2612.75494.75494,0,0,0-.53188.44435A.95627.95627,0,0,1,77.68777,40.96938Z"/><path class="cls-223" d="M80.69234,43.04853l-.53962-.61583a2.5832,2.5832,0,0,1-.074-.36919,1.19664,1.19664,0,0,0-.49783-1.00628.95276.95276,0,0,1-.42909-1.01173,5.67521,5.67521,0,0,0,.96837-1.04535.341.341,0,0,1,.25743-.14327c.29875.08822.47709.34946.72834.50669.165.63764.30989,1.28.45367,1.92284-.48316.36429-.434.97166-.6635,1.45177C80.84252,42.85034,80.89618,43.0346,80.69234,43.04853Z"/><path class="cls-224" d="M80.384,38.88977a2.11264,2.11264,0,0,0-.58065.65466,1.30851,1.30851,0,0,1-.65154.50106l-.07788-.07719c-.10822-.44444.10972-.86964.07732-1.30961-.01706-.01991-.04195-.04863-.03355-.06485A8.94679,8.94679,0,0,1,80.24562,36.506a.15858.15858,0,0,1,.06915-.03125.44625.44625,0,0,1,.38067.37184.48506.48506,0,0,1-.00691.228,3.27406,3.27406,0,0,0-.206,1.53681A.29874.29874,0,0,1,80.384,38.88977Z"/><path class="cls-225" d="M80.69234,43.04853c.127-.40314.284-.79993.371-1.21152a.66033.66033,0,0,1,.47619-.55985,5.385,5.385,0,0,1,.95772.438.19.19,0,0,1,.04878.21864.57948.57948,0,0,0-.12049.39061,16.817,16.817,0,0,1-.03846,1.95658c-.255.132-.39556.49243-.77017.38554l-.77073-.61657C80.92923,43.69549,80.63677,43.39874,80.69234,43.04853Z"/><path class="cls-226" d="M99.02659,39.50583a16.91547,16.91547,0,0,0,1.92307,2.9682,3.3199,3.3199,0,0,1,.23392.34359.51039.51039,0,0,0,.13163.31361c1.04045,1.1723,1.93044,2.47233,3.04,3.58529.24277.24351.50912.46364.7665.69242a.376.376,0,0,1,.14491.33724,29.76731,29.76731,0,0,1-3.11459-3.20178c-.31709-.39543-.69538-.7418-1.0457-1.11059-.07785.02432-.11725-.02754-.15415-.08007q-1.46991-2.09267-2.74208-4.31107a.65912.65912,0,0,1-.05334-.144c-.18159-.459-.39685-.904-.56424-1.36853-.05475-.15193-.14373-.30257-.057-.47274.189-.081.20754.09694.26924.18838a14.46363,14.46363,0,0,1,1.00639,1.897A2.03893,2.03893,0,0,0,99.02659,39.50583Z"/><path class="cls-227" d="M98.25623,38.88967a22.7982,22.7982,0,0,0,1.27951,2.1619c.51508.79953,1.04638,1.58861,1.57062,2.38224a5.39228,5.39228,0,0,0,.97783,1.47236.76284.76284,0,0,1,.25492.52995,13.31381,13.31381,0,0,1-1.07116-1.22056,5.862,5.862,0,0,0-.62362-.70491.3493.3493,0,0,1-.23167-.18391,26.29251,26.29251,0,0,1-1.60484-2.50194c-.34341-.68688-.66718-1.38371-1.04839-2.05128a.36156.36156,0,0,1-.07038-.32458C98.053,38.37073,98.07271,38.73556,98.25623,38.88967Z"/><path class="cls-228" d="M97.717,22.48455a21.40869,21.40869,0,0,0-.60072-2.07473,9.0579,9.0579,0,0,0-2.55774-3.702c-.05709-.20157-.19544-.37537-.16139-.60953.02486-.171-.119-.28458-.2485-.35474-.36735-.199-.44329-.61871-.705-.89612-.04278-.04534-.02852-.14448-.04062-.21875a8.57844,8.57844,0,0,1,2.1783,1.54849A9.87326,9.87326,0,0,1,97.56749,19.318a13.61158,13.61158,0,0,1,.79117,3.72516c.04669.63593-.00443,1.26564.04182,1.89876a29.92182,29.92182,0,0,0,.5015,4.01383,7.86653,7.86653,0,0,1,.27868,1.53857,14.88475,14.88475,0,0,1-.61312-2.27159,32.39087,32.39087,0,0,1-.60057-3.94529,12.47715,12.47715,0,0,0-.17492-1.62595A1.01407,1.01407,0,0,0,97.717,22.48455Z"/><path class="cls-229" d="M102.87836,48.97938c-.19052-.01511-.28076-.16023-.3778-.29426a10.77921,10.77921,0,0,0-1.16291-1.24631.29473.29473,0,0,1-.25282-.14893A46.16,46.16,0,0,1,98.3954,43.4164a.78967.78967,0,0,1-.08534-.21315,3.97494,3.97494,0,0,0-.278-.8525.381.381,0,0,1-.03976-.35759c.20822-.09679.27655.08518.338.20067.51758.97289,1.22974,1.8181,1.79435,2.75879.11546.19238.33915.313.36563.56071a9.30619,9.30619,0,0,0,1.12073,1.76459c.37434.52745.80078,1.01783,1.20044,1.52755A.6386.6386,0,0,1,102.87836,48.97938Z"/><path class="cls-230" d="M100.49026,45.51333a4.781,4.781,0,0,1-.91956-1.24987,13.3173,13.3173,0,0,1-1.26425-1.94178.64411.64411,0,0,0-.28132-.35124,3.01027,3.01027,0,0,1-.62341-1.09633c-.01275-.214-.141-.42152-.03752-.64215.24113-.13184.27609.0953.34485.21691a13.80487,13.80487,0,0,0,.82746,1.31995c.60972,1.07777,1.311,2.09819,1.97654,3.14109a.32217.32217,0,0,1,.05387.1413,9.28026,9.28026,0,0,0,.81174,1.23016c.04646.07555.11366.13647.11343.2332-.373-.08248-.41276-.47464-.63635-.69837A1.1299,1.1299,0,0,0,100.49026,45.51333Z"/><path class="cls-120" d="M99.7201,46.9q-.34682-.63571-.6939-1.27129a1.62749,1.62749,0,0,1-.30775-.73171c.20689-.04063.2869.12973.39179.24582.19627.21721.32639.48376.51114.7103a7.16273,7.16273,0,0,1,.65821.84967c.59362.86832,1.33325,1.61541,1.98887,2.4314.72953.908,1.51871,1.76082,2.30468,2.61771a.47559.47559,0,0,1,.23018.23151c-.15193.16832.03927.229.11257.296.58366.53342,1.06617,1.166,1.66676,1.68353a4.24121,4.24121,0,0,1,.452.56162.95926.95926,0,0,1-.68179-.33892c-.23912-.2008-.43209-.472-.77875-.50788a13.53247,13.53247,0,0,1-1.67192-1.73211c-.50853-.56807-1.03126-1.1247-1.52371-1.7097-.76278-.90612-1.48829-1.83783-2.194-2.78722C100.04189,47.25679,99.87554,47.08244,99.7201,46.9Z"/><path class="cls-231" d="M104.57314,51.75188a18.41091,18.41091,0,0,1-2.14435-2.28427c-.51687-.59384-1.02349-1.19627-1.54835-1.7837-.3974-.44478-.71447-.96133-1.06731-1.44592l-.24729-.33938c-.48925-.86487-1.03385-1.69829-1.47475-2.59051-.07176-.1452-.17858-.28772-.09895-.4671.30241-.06806.26194.26048.41817.36166a19.0241,19.0241,0,0,0,1.6451,2.52566c.416.57839.854,1.14089,1.28224,1.71049.29974.55985.67331,1.07235,1.02223,1.6009a24.53793,24.53793,0,0,0,2.06973,2.45158C104.49715,51.56927,104.57558,51.63716,104.57314,51.75188Z"/><path class="cls-232" d="M100.56692,45.05121c-.29073-.17671-.38437-.50036-.55788-.762a23.18628,23.18628,0,0,1-1.52189-2.47288c-.17583-.39056-.47726-.73777-.418-1.20971.06758-.07976.14131-.042.21478-.01173a1.47224,1.47224,0,0,1,.35682.48825,26.24915,26.24915,0,0,0,1.63183,2.53214.76765.76765,0,0,1,.21767.51168,6.70529,6.70529,0,0,0,.75809,1.298,1.36223,1.36223,0,0,1,.32041.55064A4.936,4.936,0,0,1,100.56692,45.05121Z"/><path class="cls-233" d="M100.49026,44.127c-.67733-.94156-1.29736-1.92-1.88486-2.91961-.10945-.18622-.23243-.3645-.34917-.54644-.13377-.32845-.48591-.5635-.41868-.978.14319-.10342.21614.01679.26438.10666.20512.38208.5347.66843.77078,1.02558l1.77162,2.6955a16.59666,16.59666,0,0,0,1.267,1.92235,1.434,1.434,0,0,1,.35074.61946c-.46413-.18381-.65323-.63466-.93241-.98952C101.06868,44.73121,100.74791,44.45829,100.49026,44.127Z"/><path class="cls-234" d="M74.45209,38.88967a1.03542,1.03542,0,0,1,.11274-1.06942c.0659-.105.19717-.16887.19578-.31642.02863-.2791.22943-.35091.46245-.38468a1.80274,1.80274,0,0,1,.82683.65751,2.54442,2.54442,0,0,0,.08508,1.019.24028.24028,0,0,1-.06476.24822c-.15333.39091-.544.34659-.84757.462C74.88172,39.40558,74.73665,39.06046,74.45209,38.88967Z"/><path class="cls-235" d="M76.07021,39.0439a2.35527,2.35527,0,0,1-.07722-1.30959c-.00186-.30525.25935-.41779.44163-.57818a1.449,1.449,0,0,0,.46529-.54578.53206.53206,0,0,1,.44084-.325.30458.30458,0,0,1,.31892.14824c.06656.38072.27327.75835.02829,1.1469a.56149.56149,0,0,1-.27651.4308c-.55539.22368-.67826.80237-1.03309,1.18647A.42133.42133,0,0,0,76.07021,39.0439Z"/><path class="cls-236" d="M90.09048,15.55281a5.89116,5.89116,0,0,1,2.31106,1.69442.60411.60411,0,0,1-.639.02231,1.4824,1.4824,0,0,0-.69346-.12626c-.6249-.18518-1.2614-.32693-1.88994-.49824a5.023,5.023,0,0,0-1.31833-.22346,1.20543,1.20543,0,0,1-.62041-.17555,4.301,4.301,0,0,1-.8479-.308.862.862,0,0,1,.61661-.69349Z"/><path class="cls-237" d="M85.1601,19.01886c-.40777.00775-.72966-.26806-1.12689-.32513a4.83843,4.83843,0,0,0-3.01663.58147,10.62779,10.62779,0,0,0-1.90165,1.13638,15.31055,15.31055,0,0,1-2.3871,1.34156,2.46537,2.46537,0,0,1-.96595.192c-.00668-.11691.01056-.2419-.18673-.1832a1.50581,1.50581,0,0,1-.62035.00957c.10233-.37089.39284-.47825.67576-.59165a.99224.99224,0,0,0,.59354-.38968,9.95124,9.95124,0,0,0,2.96679-1.35868,9.34374,9.34374,0,0,1,2.22561-1.17565c.46659-.16265.94039-.30469,1.40654-.46852a11.29013,11.29013,0,0,1,1.875-.309,2.5895,2.5895,0,0,1,1.51727.21245.55728.55728,0,0,1,.20675.78649c-.14019.15781-.22174.30869-.018.49026.07466.06654.17636.19244-.02734.25745A6.11324,6.11324,0,0,1,85.1601,19.01886Z"/><path class="cls-238" d="M86.2387,17.78653a7.50048,7.50048,0,0,0-1.5407-.30819,3.23773,3.23773,0,0,0-1.81463-.2449,2.32144,2.32144,0,0,1-.57347.01384c.64691-.154,1.29343-.30976,1.941-.46085.14711-.03433.298-.05264.44707-.07833a6.32732,6.32732,0,0,1,1.54127.104,5.58539,5.58539,0,0,1,1.07793.20417c.53586.36424,1.16279.57583,1.667.9925.11407.09426.33709.1558.13861.371a1.07791,1.07791,0,0,1-.71064-.05882,8.89424,8.89424,0,0,0-1.76051-.35154A.84335.84335,0,0,1,86.2387,17.78653Z"/><path class="cls-239" d="M74.45228,25.33439c.16053-.08.318-.16688.48205-.23887a24.386,24.386,0,0,0,4.91288-3.09943,12.25283,12.25283,0,0,1,2.75109-1.58033,3.833,3.833,0,0,1,2.068-.05356,3.5921,3.5921,0,0,0,.41686.04291c.36265.23561.6782.53714,1.05787.75021.07944.04458.19094.125.041.23067a1.61682,1.61682,0,0,1-.78694-.08318,7.98913,7.98913,0,0,0-1.31343-.20462,1.1993,1.1993,0,0,0-1.06216-.14107,6.41313,6.41313,0,0,0-2.29614,1.08213,5.85365,5.85365,0,0,0-1.0298.80994c-.30412.29776-.72314.50436-1.05585.79657-.36914.32421-.76605.61786-1.15736.90656-.58033.42816-1.12563.8923-1.68774,1.33706a1.13719,1.13719,0,0,1-.99731.23023.66128.66128,0,0,0-.62555.09657.93548.93548,0,0,1-.719.19638A4.93429,4.93429,0,0,0,74.45228,25.33439Z"/><path class="cls-240" d="M74.29821,29.10824c-.13649-.012-.29243.04821-.40635-.03947-.21688-.16694-.38295-.34808-.17836-.659.12793-.19441.34315-.34663.3536-.61087a2.55581,2.55581,0,0,0,1.24633-.86456c.1694-.255.52439-.38544.79176-.57748a1.33778,1.33778,0,0,0,.321-.26921c.36686-.51076.97419-.7172,1.41152-1.13632.03636-.03485.10074-.04928.12246-.08928.30609-.56361.89646-.80673,1.36374-1.18009a14.07221,14.07221,0,0,1,1.64236-1.27865,10.77887,10.77887,0,0,1,1.82831-.99494,1.88541,1.88541,0,0,1,1.22909.07123.92893.92893,0,0,0,.366.08074.114.114,0,0,1,.09292.12569c-.14206.17563-.35787.14647-.54559.19028-.13228.03087-.27342.02965-.3608.15854a.27745.27745,0,0,1-.17672.06756c-1.0495-.05085-1.71483.69946-2.49929,1.1991-.0955.06082-.16337.16492-.26346.22286A13.95392,13.95392,0,0,0,77.91057,25.82a18.89028,18.89028,0,0,1-1.582,1.51457,1.37589,1.37589,0,0,0-.323.37944c-.34882.57984-.96847.8678-1.42594,1.33028A.23712.23712,0,0,1,74.29821,29.10824Z"/><path class="cls-241" d="M84.467,21.63756l-.0773-.07721a.34985.34985,0,0,0-.308-.46216c.3792-.19881.74138.0071,1.10769.05475a6.7961,6.7961,0,0,0,1.04949.1764,1.19164,1.19164,0,0,1,.74085.11615,10.34661,10.34661,0,0,1,3.15461,1.79333A14.08641,14.08641,0,0,1,94.33683,28.303q.291.60627.52427,1.23772c.05326.1431.16122.31343-.04995.43531-.15023-.04134-.15512-.18357-.21112-.29449a13.553,13.553,0,0,0-1.40573-2.22242,1.759,1.759,0,0,0-.39393-.36079,11.65669,11.65669,0,0,0-1.80471-1.98251,12.7678,12.7678,0,0,0-2.6969-2.08324,8.67484,8.67484,0,0,0-1.41355-.57189c-.74445-.2306-1.502-.42426-2.23723-.68632A.36474.36474,0,0,1,84.467,21.63756Z"/><path class="cls-242" d="M85.1601,19.01886a3.50652,3.50652,0,0,1,1.30957.15356c.15946-.13067.32026-.0393.46906.01274a8.69883,8.69883,0,0,1,1.85062.78522c-.01321.42146.34356.62612.54316.92309.06549.09744.24842.16256.08745.322-.54612-.08877-1.0962-.14364-1.64529-.20663-.68558-.129-1.34468-.35953-2.01977-.52907a.31364.31364,0,0,1-.20951-.15182.28414.28414,0,0,0-.16446-.14915q-.8816-.34674-1.76143-.698a.1591.1591,0,0,1,.15407-.077A1.74365,1.74365,0,0,0,85.1601,19.01886Z"/><path class="cls-243" d="M85.54539,20.328l2.234.61622a2.48873,2.48873,0,0,1,.9082.3985,18.48189,18.48189,0,0,1,3.60485,2.866,11.10923,11.10923,0,0,1,2.79221,4.76167c.3694,1.359.56084,2.764,1.05641,4.0907a.348.348,0,0,1,.00834.2272.11788.11788,0,0,1-.08277.07559c-.17377-.03259-.19274-.18425-.24155-.31347a7.57646,7.57646,0,0,0-.55566-1.26153,13.35947,13.35947,0,0,0-.44534-1.54c-.031-.096-.08482-.18826-.03408-.29329.12977-.34229-.10948-.60382-.22007-.87915a12.88253,12.88253,0,0,0-3.32365-4.771,14.40106,14.40106,0,0,0-3.14156-2.30063,8.26638,8.26638,0,0,0-1.86585-.67545c-.39477-.29617-.8844-.47375-1.15572-.92423A1.38678,1.38678,0,0,1,85.54539,20.328Z"/><path class="cls-244" d="M89.16624,18.32512a3.65813,3.65813,0,0,0-1.33779-.88592.91878.91878,0,0,1-.51125-.42288l.61647-.00052c.28134-.18775.54934-.02932.80509.05427a10.79829,10.79829,0,0,1,2.51772,1.11725,20.9102,20.9102,0,0,1,3.1929,3.08889,11.14,11.14,0,0,1,2.03689,4.75926c.05619.32868.01867.66454.07518.99325a13.64594,13.64594,0,0,0,.56419,3.798,18.01848,18.01848,0,0,0,.96293,3.2897.47381.47381,0,0,1,.01359.15184.159.159,0,0,1-.15407.07749c-.20554-.01573-.20567-.2-.25721-.3299a37.5739,37.5739,0,0,1-1.22414-3.94245c-.03714-.13525-.07884-.26881-.12044-.40242a12.69628,12.69628,0,0,1-.27486-2.05276,9.64193,9.64193,0,0,0-.37022-1.76526,9.0422,9.0422,0,0,0-1.89884-3.8619,11.54532,11.54532,0,0,0-4.4609-3.43734A.34337.34337,0,0,1,89.16624,18.32512Z"/><path class="cls-245" d="M91.246,18.24862a16.17309,16.17309,0,0,0-2.13324-.938,4.207,4.207,0,0,0-1.1791-.29478.406.406,0,0,0-.23651-.392c-.16323-.10991-.36448-.18029-.45681-.37781a13.30705,13.30705,0,0,1,3.85155.84718,5.54842,5.54842,0,0,1,1.05214.7474.23645.23645,0,0,1,.10634.29811A.77066.77066,0,0,1,91.246,18.24862Z"/><path class="cls-246" d="M74.29821,29.10824a7.39706,7.39706,0,0,0,1.49536-1.29289,7.08112,7.08112,0,0,1,.90715-.92707c.90526-.87,1.76349-1.78865,2.708-2.6182a3.94157,3.94157,0,0,1,.33269-.25767c.90716-.639,1.78916-1.31466,2.74541-1.882.33534-.199.70377-.07174,1.0556-.108.10926-.088.21887-.031.326.00259,1.02189.32016,2.05715.59818,3.06309.96847.13738.05057.31078.066.3259.26868a.358.358,0,0,1-.35578.16482,5.21788,5.21788,0,0,1-1.30563.00334,1.91169,1.91169,0,0,1-.6188-.20021,4.00291,4.00291,0,0,0-2.12963-.34163.92174.92174,0,0,0-.42881.15278,17.54069,17.54069,0,0,0-2.81478,2.135,11.95043,11.95043,0,0,0-1.66845,1.74468,7.02224,7.02224,0,0,1-1.43771,1.48942,6.0644,6.0644,0,0,0-.76075,1.0091c-.05658.06817-.09187.15636-.18892.182-.25165.04276-.469.18932-.71727.24006a1.057,1.057,0,0,1-.841-.03989C74.01616,29.53647,74.215,29.34806,74.29821,29.10824Z"/><path class="cls-247" d="M73.98993,29.8016a2.28242,2.28242,0,0,0,1.42907-.30933c.08943-.05758.1033.01053.11178.078.12138.18664-.00921.34347-.06807.50348-.06635.18041-.1198.36421-.17621.54739-.24249.355-.44837.74884-.91078.87556a4.14885,4.14885,0,0,1-.8656-.08455.28738.28738,0,0,1-.29571-.32021,4.71856,4.71856,0,0,1,.08234-.75131A1.26637,1.26637,0,0,1,73.98993,29.8016Z"/><path class="cls-248" d="M75.22264,37.19488a.64963.64963,0,0,0-.462.309.36522.36522,0,0,1-.42642-.00112,4.46865,4.46865,0,0,0-1.34558-.69255c.172-.29907.16076-.68978.46221-.92414.54127-.51375,1.09373-.21645,1.64529-.02314A1.238,1.238,0,0,1,75.22264,37.19488Z"/><path class="cls-249" d="M75.06838,35.886c-.122-.02475-.24677-.04014-.3654-.07593a1.62694,1.62694,0,0,0-1.25216.07593c-.16942-.46188-.61119-.67238-.92461-1.00134a.30259.30259,0,0,1,.21062-.29084c.33352-.10451.35543-.352.329-.6333.38012-.19472.58464-.15877.95132.16721.43266.38464.43342.38583.93366.0696a.52841.52841,0,0,1,.384-.13464c.42142.05682.509.35854.52479.71344A1.3239,1.3239,0,0,1,75.06838,35.886Z"/><path class="cls-250" d="M74.37573,31.49671a6.69368,6.69368,0,0,0,.84691-.84817c.41789-.48353.87721-.92788,1.2961-1.41231a44.24661,44.24661,0,0,1,3.46244-3.90795c.69213-.63214,1.44707-1.184,2.18345-1.76021a1.90023,1.90023,0,0,1,1.05737-.30271,3.45,3.45,0,0,1,1.74727.32681,2.26686,2.26686,0,0,0,1.0631.70793,2.26118,2.26118,0,0,1,.60374.32067c.0857.07175.24295.13878.1045.2981a1.21652,1.21652,0,0,1-.87789-.14936,4.46178,4.46178,0,0,0-1.87853-.41506,5.56485,5.56485,0,0,0-.71727-.11882,1.874,1.874,0,0,0-1.26153.55454c-.65554.62723-1.40662,1.14878-2.03426,1.814A8.30531,8.30531,0,0,0,78.69182,28.278c-.02477.045.01679-.00106-.01934.03259a13.09967,13.09967,0,0,0-1.47081,2.36735c-.07426.1054-.13568.21865-.26645.26527a2.63516,2.63516,0,0,0-1.51735.94035,2.42675,2.42675,0,0,1-.36.39546.36369.36369,0,0,1-.46207.01674c-.13969-.09348-.331-.17984-.22071-.41474Z"/><path class="cls-251" d="M74.37506,31.881c.22.48486.478.54478.79636.15724a2.32272,2.32272,0,0,1,.5923-.63839c.36978-.19654.6683-.57694,1.1537-.52019.11239.1642-.00533.28926-.08455.40728a5.21654,5.21654,0,0,0-.35878.61576,3.44891,3.44891,0,0,0-1.07117,1.85849c-.02192.1221.00536.2571-.10344.35327-.11394-.00256-.17951.07955-.26071.14078-.5494.41437-.59469.41888-1.0733-.05589a.89068.89068,0,0,0-.89964-.23883c-.06535-.35233-.342-.599-.46221-.92391q.67413-.50091,1.34816-1.002A.62294.62294,0,0,1,74.37506,31.881Z"/><path class="cls-252" d="M82.38712,44.281c-.2776-.3469-.039-.73011-.05421-1.0928a6.16031,6.16031,0,0,0-.00671-.74375c-.03017-.19143-.1415-.482.2148-.551a2.36253,2.36253,0,0,1,.94333.28141,15.40568,15.40568,0,0,0,3.63485.92654,2.61986,2.61986,0,0,1,.37683.07135c1.40908.46109,2.69637-.05117,3.98358-.511.40363-.14419.63614-.54583.98116-.789a4.00672,4.00672,0,0,1,.43092-.31821c.24745-.10828.40487.0742.58066.18589a7.10112,7.10112,0,0,1,1.009.84622,3.43427,3.43427,0,0,0,.17222,1.25773.38546.38546,0,0,1-.172.43669.30632.30632,0,0,0-.30764.11938c-.3928.63593-1.0953.755-1.70493,1.02593-.32651.14511-.66677.259-.99551.39946a1.71144,1.71144,0,0,1-.74357.15173,21.47431,21.47431,0,0,1-5.64168-.90463,14.08386,14.08386,0,0,0-2.43535-.64822A.85145.85145,0,0,1,82.38712,44.281Z"/><path class="cls-253" d="M94.48131,42.5866c-.48907-.16295-.74491-.64925-1.19991-.86581-.11244-.05352-.20136-.15126-.34061-.13535a.5785.5785,0,0,1-.1852-.33,5.1235,5.1235,0,0,0-.63976-1.43534.44171.44171,0,0,1-.082-.29112c.1184-.2663.39982-.34922.59566-.52909.39535-.06432.52424.28015.74484.48473.3157.76758.93172,1.34709,1.30414,2.07873.08828.17342.26205.33725.11135.56106Z"/><path class="cls-254" d="M94.78983,42.12439a4.24758,4.24758,0,0,0-.79595-1.447,3.13724,3.13724,0,0,1-.66791-1.17149c-.20487-.33274-.02549-.68242-.04559-1.02318.17176-.16211.2417.01723.31158.10953a10.9313,10.9313,0,0,1,.65811,1.06813l1.23255,2.6184c-.09665.11018-.03121.285-.15354.38491C95.13891,42.49435,95.07526,42.19854,94.78983,42.12439Z"/><path class="cls-255" d="M93.24912,35.50075a4.67475,4.67475,0,0,0-1.30923-.69319,3.809,3.809,0,0,1-.82528-1.07669,4.08033,4.08033,0,0,0-1.10027-1.64537c-.46567-.52684-.94815-1.04281-1.43663-1.55156a8.94938,8.94938,0,0,0-2.61722-1.65011c-.39957-.19989-.83338-.33142-1.25089-.495a2.97658,2.97658,0,0,0-1.32254-.16727.64836.64836,0,0,0-.386.15873,4.23272,4.23272,0,0,0-.98618,1.17085A16.66987,16.66987,0,0,0,80.71949,33.158c-.15845.62046-.32595,1.24-.43709,1.87248a3.25618,3.25618,0,0,1-.57128.61386.29679.29679,0,0,1-.34245.10426.4655.4655,0,0,1-.17162-.44142,6.05163,6.05163,0,0,1,.02294-.953c.21231-.50778.40394-1.02644.65906-1.515a19.30453,19.30453,0,0,0,.84646-2.101,5.64371,5.64371,0,0,1,1.08525-2.01494,2.482,2.482,0,0,0,.37084-.4906,1.52636,1.52636,0,0,1,1.72259-.69281,4.90583,4.90583,0,0,1,1.70627.6743c.72683.38435,1.48181.7055,2.21378,1.07635a10.165,10.165,0,0,1,2.15765,1.78164,26.6289,26.6289,0,0,1,2.14468,2.20553,3.27367,3.27367,0,0,1,.41912.60535,7.69792,7.69792,0,0,0,.62291,1.1736C93.24934,35.19134,93.38783,35.3231,93.24912,35.50075Z"/><path class="cls-256" d="M91.16916,33.72938l.77072,1.07819.61734.92479a.76212.76212,0,0,1,.33312.65716c-.0022.39952.1962.79163.043,1.19573-.16578.02544-.216-.12177-.28725-.213a9.79,9.79,0,0,0-1.28949-1.31521A11.85372,11.85372,0,0,0,89.44445,33.407a1.08441,1.08441,0,0,1-.29817-.39435,1.14653,1.14653,0,0,1,.04018-.94817.24547.24547,0,0,1,.37655.01126A15.526,15.526,0,0,1,91.176,33.65709C91.18984,33.67483,91.18059,33.70439,91.16916,33.72938Z"/><path class="cls-257" d="M98.02515,42.81737a5.76906,5.76906,0,0,0,.76126,1.56255,9.96136,9.96136,0,0,1,.77943,1.51869c-.31572-.30576-.45113-.764-.84739-1.00163-.59018-.94908-1.17824-1.89949-1.77312-2.84563-.077-.12246-.12418-.28757-.30665-.31187a.52078.52078,0,0,0-.07091-.2947c-.47284-.83413-.77186-1.75777-1.31611-2.55518a1.74005,1.74005,0,0,1-.35109-1.19762c.24335-.12333.27094.11937.35084.228.47886.65078.80383,1.3932,1.21934,2.08218a19.7116,19.7116,0,0,0,1.45737,2.46624C98.00017,42.56787,98.08689,42.67521,98.02515,42.81737Z"/><path class="cls-258" d="M92.86394,37.58025c.2138-.23911-.02635-.4748-.0321-.70974a1.54794,1.54794,0,0,0-.27464-1.13816c.15873-.00338.206.1239.276.22956a35.02421,35.02421,0,0,1,2.0333,3.62084,1.59811,1.59811,0,0,0-.61642.07764c-.32713-.16333-.37088-.53542-.57878-.78714-.1195-.14468-.17264-.34118-.34514-.4455A1.61619,1.61619,0,0,1,92.86394,37.58025Z"/><path class="cls-259" d="M94.94368,37.65812a6.55177,6.55177,0,0,0,.308,1.23148,2.24606,2.24606,0,0,1-.6562-.95,14.18463,14.18463,0,0,0-1.34634-2.43885c-.04225-.38227-.344-.63289-.49728-.96087a3.21485,3.21485,0,0,1-.2736-.656c.33459.02836.49981.31489.72977.495a3.91465,3.91465,0,0,1,.81671.94528A6.50455,6.50455,0,0,1,94.94368,37.65812Z"/><path class="cls-260" d="M92.24747,18.09444a4.39361,4.39361,0,0,0-.92094-.76363.76515.76515,0,0,1-.23463-.2376c.18133-.17209.37248-.05725.53166.01651a1.5564,1.5564,0,0,0,.778.13751,10.94346,10.94346,0,0,1,2.167,1.867,9.53934,9.53934,0,0,1,1.81665,3.04321,10.26737,10.26737,0,0,1,.71678,3.27457,7.38061,7.38061,0,0,1,.15278,1.28859,5.64532,5.64532,0,0,0,.13735,1.61236.29319.29319,0,0,1-.13721.39,9.76466,9.76466,0,0,1-.3855-2.69532c-.22246-.11781-.197-.35069-.22549-.5408a11.89249,11.89249,0,0,0-.86846-3.01494,9.16129,9.16129,0,0,0-1.77364-2.67233,15.04972,15.04972,0,0,0-1.50191-1.42613C92.40218,18.29569,92.28332,18.2308,92.24747,18.09444Z"/><path class="cls-261" d="M92.24747,18.09444a2.387,2.387,0,0,1,.72882.55284,10.62212,10.62212,0,0,1,3.744,6.75094,6.45721,6.45721,0,0,0,.1491.6294.68728.68728,0,0,0-.25607.80025.15237.15237,0,0,1-.05189.20085c-.103-.55754-.17918-1.12166-.314-1.6714a11.01735,11.01735,0,0,0-2.26632-4.50324,28.17214,28.17214,0,0,0-2.565-2.40026,2.02851,2.02851,0,0,1-.17007-.2052A1.333,1.333,0,0,0,92.24747,18.09444Z"/><path class="cls-262" d="M96.40738,29.64728c.32129.73663.44142,1.53369.68871,2.29293a21.13659,21.13659,0,0,0,.852,2.40553c.14212.60753.48446,1.14121.64314,1.74264.01611.06106.03355.12177.05037.18264a.51879.51879,0,0,0-.30814-.077,9.5899,9.5899,0,0,1-.82268-1.6314c-.36449-.84566-.61579-1.73276-.97874-2.57817a3.45834,3.45834,0,0,1-.23786-1.11308C96.24477,30.45519,96.1167,30.03175,96.40738,29.64728Z"/><path class="cls-263" d="M96.6383,31.958a.91537.91537,0,0,1,.08783.16271,28.432,28.432,0,0,0,1.55246,3.89192,1.23521,1.23521,0,0,1,.05487.18133,20.32555,20.32555,0,0,0,1.6099,3.19421,2.14674,2.14674,0,0,1,.39268.73368,13.67272,13.67272,0,0,1-1.11053-1.528c-.04444-.07071-.05642-.1719-.16679-.18959-.08966.17652.08072.32115.0449.48526a8.52112,8.52112,0,0,0-.61628-.92414c-.145-.03051-.19722-.14782-.253-.26505q-1.07305-2.25423-1.91953-4.60313c-.19442-.64609-.33411-1.30655-.52309-1.95411a.87978.87978,0,0,1-.0345-.704c.19809-.07187.26058.09869.28217.21007.11443.59043.422,1.11493.552,1.61429A.28583.28583,0,0,1,96.6383,31.958Z"/><path class="cls-264" d="M96.4072,33.11318c.36026.9142.70225,1.83618,1.0866,2.74015.30421.71549.66042,1.4089.99354,2.11211a3.65183,3.65183,0,0,0,.40115,1.18611c.038.12062.09163.23632.1381.35428a6.40689,6.40689,0,0,1-.88107-1.49484c-.183-.33178-.40209-.63853-.5826-.96952-.16061.01414-.17764-.12534-.22166-.22094A19.28365,19.28365,0,0,1,96.156,33.86477c-.04634-.16966-.13686-.33614-.05677-.52026l.00019-.00031C96.20764,33.27468,96.22344,33.0821,96.4072,33.11318Z"/><path class="cls-265" d="M79.30551,34.26853c0,.36886.00113.73773-.00054,1.10658-.00064.1429-.00538.28479.15462.35687a.46285.46285,0,0,1-.02717.40666,7.27628,7.27628,0,0,0-.54479,1.74859.34653.34653,0,0,1-.12136.23235,1.36918,1.36918,0,0,0-.31168.133c-.21069.15938-.3113.02355-.36726-.14a.90822.90822,0,0,0-.39937-.53206c.05521-.39053-.09974-.767-.07723-1.15536a.71069.71069,0,0,1,.157-.81488,11.92236,11.92236,0,0,0,1.04913-1.9035c.17221-.28278.29066-.59721.45634-.88491.07919-.13752.15563-.306.37353-.243a.54129.54129,0,0,1,.08247.60128C79.59172,33.54437,79.43738,33.90208,79.30551,34.26853Z"/><path class="cls-266" d="M78.76627,38.11958a5.62311,5.62311,0,0,1,.50226-1.85458c.07859-.17082.12817-.355.19106-.533l.77054-.69336c.11234-.02651.17446.03448.21976.12551a1.77072,1.77072,0,0,1-.14273,1.3379c-.49092.6623-.725,1.46221-1.1559,2.15666A.74551.74551,0,0,1,78.76627,38.11958Z"/><path class="cls-267" d="M82.46379,41.73929a1.96825,1.96825,0,0,1-.92422-.46213,11.25081,11.25081,0,0,1-.51386-1.78475c-.01378-.03459.03279-.09319.05128-.14062a1.5716,1.5716,0,0,1,.22363-1.11065c.64051-.463.8616-.37131,1.5258.443-.06509.34337.13984.66364.08813,1.00649a8.72339,8.72339,0,0,0-.2754,1.60509A.54.54,0,0,1,82.46379,41.73929Z"/><path class="cls-268" d="M81.38547,38.27343c-.24.32022-.16819.72962-.30848,1.07836-.33967.00892-.44744-.32983-.693-.462a5.4246,5.4246,0,0,1,.23111-2.07968,12.10138,12.10138,0,0,1,.723-1.72086c.04351-.1194.14826-.23686.27217-.04286a20.03326,20.03326,0,0,1-.075,2.21542A2.024,2.024,0,0,1,81.38547,38.27343Z"/><path class="cls-269" d="M81.54,34.96257q-.30256.61191-.60479,1.224c-.103.20979-.10561.47091-.32011.62351a.79177.79177,0,0,0-.308-.30806,6.07493,6.07493,0,0,0,.07685-1.3863,4.5744,4.5744,0,0,1,.394-1.14781,6.04688,6.04688,0,0,0,.48808-1.27521c.0283-.14176.036-.37572.30323-.33236a.42552.42552,0,0,1,.03525.36891,4.94864,4.94864,0,0,0,.06493,2.00158C81.67438,34.83481,81.70037,34.95109,81.54,34.96257Z"/><path class="cls-270" d="M82.46379,41.73929a8.64365,8.64365,0,0,1,.38554-2.07952c.14475-.10235.27225-.01418.394.04626a1.62408,1.62408,0,0,0,.62148.19018,9.15906,9.15906,0,0,1,1.76946.34781,4.27679,4.27679,0,0,0,1.56043-.08681c.40735-.041.811-.1185,1.219-.16108a2.6639,2.6639,0,0,0,1.61279-.63735,3.30839,3.30839,0,0,1,.80474-.52082,1.11648,1.11648,0,0,1,1.26193.668c.102.3968.42441.68257.53886,1.074.09838.33648.20547.67042.30872,1.00548a5.89129,5.89129,0,0,1-3.40016,1.78827,4.97139,4.97139,0,0,1-2.02487-.09088,19.52056,19.52056,0,0,1-3.41707-.76923,9.46729,9.46729,0,0,1-1.55769-.62018Z"/><path class="cls-271" d="M96.09924,33.34451a20.87443,20.87443,0,0,0,1.46368,3.697,6.84558,6.84558,0,0,0,.52225,1.42606c.05564.14126.114.28146.17106.42215l-.53906-.4622a.28245.28245,0,0,1-.17436-.18761c-.25444-.59413-.58705-1.151-.83428-1.74884a15.76069,15.76069,0,0,1-.90774-2.36891c-.18044-.62769-.33828-1.26183-.53744-1.88463a.40064.40064,0,0,1,.06573-.43357,3.58279,3.58279,0,0,1,.60878,1.29956C95.97844,33.20029,95.99413,33.29742,96.09924,33.34451Z"/><path class="cls-272" d="M96.79275,36.5018c.32125.63559.66454,1.26062.92442,1.92567.3224.64465.64664,1.2884.96578,1.93466.07235.14651.127.30179.18976.453a4.8547,4.8547,0,0,1-1.00165-1.15538.32007.32007,0,0,1-.20253-.21218c-.37-.83541-.79379-1.64669-1.12473-2.49955a.73226.73226,0,0,1-.10027-.40009C96.54182,36.39751,96.67346,36.49625,96.79275,36.5018Z"/><path class="cls-273" d="M98.02515,42.81737a21.72746,21.72746,0,0,1-1.61777-2.77222c-.279-.5682-.45512-1.1784-.71712-1.75371a.88361.88361,0,0,1-.15951-.60975c.26959-.08456.33254.157.397.30068.45149,1.007,1.14768,1.88208,1.558,2.90978l.53944,1.07829c.0738.4278.34161.795.38518,1.23222C98.23335,43.12277,98.15505,42.94428,98.02515,42.81737Z"/><path class="cls-274" d="M97.48569,40.89215a8.718,8.718,0,0,1-.68647-1.141c-.44173-.59884-.67888-1.31233-1.0828-1.93216a1.15614,1.15614,0,0,0-.15624-.1617c-.12776-.04-.157-.15832-.20875-.25984a12.70141,12.70141,0,0,1-.96388-2.1751c-.12343-.42226-.41787-.76451-.54976-1.18275a4.11333,4.11333,0,0,0-.30017-1.10421.4485.4485,0,0,1-.02138-.40793c.253-.12826.315.10148.386.23631.233.44217.51272.85706.74193,1.30078a3.55187,3.55187,0,0,1,.33535.85634,19.03479,19.03479,0,0,0,1.46866,3.12118c.293.59788.598,1.19.87569,1.79523.05129.1118.13637.22271.08476.36158Z"/><path class="cls-275" d="M97.40866,40.19886c-.37668-.75286-.747-1.509-1.132-2.2576-.33908-.65941-.72168-1.29781-1.03345-1.96944-.21881-.47135-.34966-.98336-.52261-1.47623a.86893.86893,0,0,0-.16192-.38113,5.40146,5.40146,0,0,0-.35382-1.03176.80805.80805,0,0,1-.08845-.40245c.185-.27592.2507-.01677.30372.08653a11.99616,11.99616,0,0,1,.53712,1.18835,3.06779,3.06779,0,0,0,.42725.81191,3.81038,3.81038,0,0,1,.25706.68138c.495,1.16944,1.10227,2.28343,1.69043,3.406.24981.47682.46738.96961.73155,1.439a.285.285,0,0,1,.03871.29079c.04242.43752.31144.8043.38486,1.23214a6.62615,6.62615,0,0,1-.80372-1.22259C97.59726,40.4584,97.57723,40.27693,97.40866,40.19886Z"/><path class="cls-276" d="M98.10229,40.58422c-.60375-1.18148-1.20394-2.36479-1.81258-3.54375a10.45394,10.45394,0,0,1-.96082-2.23272,2.17,2.17,0,0,1-.35435-1.42705c.0943-.10773.1503-.02248.19537.04738a2.37221,2.37221,0,0,0,.21846.3384,13.797,13.797,0,0,1,.85456,1.95694c.11321.24528.32472.46923.24168.77865a20.87839,20.87839,0,0,0,.88634,2.0784c.16151.36208.33308.71968.50011,1.0793-.02542.23883.15358.38968.24838.57675a.76351.76351,0,0,1,.13679.42441Z"/><path class="cls-277" d="M75.06838,35.886a.245.245,0,0,1,.16041-.2331,1.00068,1.00068,0,0,0,.53328-.84517c.34925-.25417.6984-.50734,1.03177-.78373a.69943.69943,0,0,1,.67734-.15545.26644.26644,0,0,1,.05751.10312.45845.45845,0,0,1-.069.40015.85782.85782,0,0,0-.11453.86484,1.9254,1.9254,0,0,1-.04257,1.11131.63939.63939,0,0,0-.36515.4c-.08042.27224-.35548.3881-.555.56474a5.38946,5.38946,0,0,0-.38948.42163c-.32669-.08-.43856-.46671-.77035-.53944A2.4042,2.4042,0,0,0,75.06838,35.886Z"/><path class="cls-278" d="M77.30259,36.348c-.05633-.04146-.09805-.10816-.07233-.16527.21473-.47678-.02385-.92735-.07364-1.388A.35777.35777,0,0,1,77.275,34.487a.64067.64067,0,0,0,.18189-.52648,5.14681,5.14681,0,0,0,1.267-1.75519,22.45872,22.45872,0,0,0,1.16475-2.58559,2.94636,2.94636,0,0,1,.3108-.57123c.066-.09338.12208-.25091.29271-.13344a3.69719,3.69719,0,0,1-.19454,1.18919,2.7785,2.7785,0,0,0-.16258,1.00481,10.11912,10.11912,0,0,1-.52172,1.46529.49052.49052,0,0,0-.236.24342c-.34934.754-.79455,1.46155-1.089,2.24222a.8309.8309,0,0,1-.236.34573,1.45449,1.45449,0,0,0-.44148,1.0194A.516.516,0,0,0,77.30259,36.348Z"/><path class="cls-279" d="M88.78087,20.02016a12.543,12.543,0,0,0-2.3112-.84774,1.01573,1.01573,0,0,0-.16781-.20052c-.33268-.23589-.14937-.36736.09092-.49227A3.5919,3.5919,0,0,1,88.043,18.883c.693.2965,1.40815.51219,2.11512.75889a12.55162,12.55162,0,0,1,3.2662,2.81,16.85853,16.85853,0,0,1,1.3965,2.1083,11.0896,11.0896,0,0,1,1.22163,4.01249,2.68882,2.68882,0,0,1,.00769,1.06037c-.27179.02914-.2664-.20375-.28466-.35059a12.67686,12.67686,0,0,0-.78807-2.93722,6.61515,6.61515,0,0,0-.55024-1.09131A14.75251,14.75251,0,0,0,92.828,23.05574a10.7847,10.7847,0,0,0-3.64851-2.75823C89.02721,20.2303,88.86244,20.18652,88.78087,20.02016Z"/><path class="cls-280" d="M90.167,19.71185a8.26141,8.26141,0,0,1-1.16641-.3306,18.45416,18.45416,0,0,0-2.60785-.90162c-.01826-.05726-.06965-.1459-.04968-.167.21867-.23093-.00255-.36544-.1044-.52612.99737.06262,1.93758.43576,2.92754.53859a.26866.26866,0,0,1,.15407.15437,7.36,7.36,0,0,0,.80616.89915A.21316.21316,0,0,1,90.167,19.71185Z"/><path class="cls-281" d="M87.24017,23.25474a6.40624,6.40624,0,0,0-1.30464-.49439c-.79419-.25682-1.595-.49313-2.39307-.738-.01578-.18343.07985-.23306.24892-.234a1.54384,1.54384,0,0,0,.67559-.15082c.76971.26531,1.56322.453,2.33829.70463a15.76928,15.76928,0,0,1,1.58272.628,8.70981,8.70981,0,0,1,1.8531,1.34317,16.79761,16.79761,0,0,1,2.28862,2.2594c.12235.14614.1387.36678.334.456a10.03991,10.03991,0,0,1,1.46632,2.65348.27925.27925,0,0,1,.02281.25637c-.28632.06075-.34141-.1919-.41163-.35116a13.41754,13.41754,0,0,0-2.0375-2.72846,1.13789,1.13789,0,0,0-.29666-.24276,26.01539,26.01539,0,0,0-2.24377-2.0182,8.81254,8.81254,0,0,0-1.93525-1.218A.3866.3866,0,0,1,87.24017,23.25474Z"/><path class="cls-282" d="M94.32724,29.95556A13.457,13.457,0,0,0,92.93093,27.203a.66729.66729,0,0,1-.06718-.17429,5.588,5.588,0,0,1,1.31158,1.71142,3.50483,3.50483,0,0,1,.61468,1.2154,5.41156,5.41156,0,0,1,.53907,1.84837,5.52537,5.52537,0,0,0,.39776,1.59032,11.61256,11.61256,0,0,0,.92031,2.67286,3.27231,3.27231,0,0,1,.1456.43471c-.10259.14076-.2054.039-.30814.00027L95.32889,33.8063c-.44037-1.1717-.66347-2.40587-1.03393-3.59772A.243.243,0,0,1,94.32724,29.95556Z"/><path class="cls-283" d="M88.78087,20.02016a10.64342,10.64342,0,0,1,3.84306,2.65638,13.26417,13.26417,0,0,1,1.56557,1.96295,11.56445,11.56445,0,0,1,1.42989,3.31956c.10735.39071.12682.80479.20928,1.20346.03468.16766.02626.36511.19354.48486.22732.11421.18185.34691.22129.53585a1.86158,1.86158,0,0,0,.1637.69657c.08916.35682.00421.75094.2311,1.07825v.53147a7.74276,7.74276,0,0,1-.64515-1.71509.52763.52763,0,0,0-.20243-.357c-.13244.02189-.1438-.08587-.163-.16625-.04764-.19956-.12143-.392-.158-.5943a11.66832,11.66832,0,0,0-2.59793-5.4544,17.22283,17.22283,0,0,0-3.03778-2.69713c-.1306-.09775-.30067-.15422-.35986-.33033-.27955-.21262-.40031-.57208-.71177-.75841C88.54087,20.2841,88.81527,20.15508,88.78087,20.02016Z"/><path class="cls-284" d="M89.47419,21.17505A11.98563,11.98563,0,0,1,91.29492,22.507a12.01112,12.01112,0,0,1,2.52875,2.80891A11.38946,11.38946,0,0,1,95.567,29.65749a6.72715,6.72715,0,0,0,.22374.76,10.69914,10.69914,0,0,0,.41686,1.886c.0442.27121.17.53008.19961.80974-.10373.0755-.13544.24689-.30777.231-.13-.72037-.4642-1.38342-.61-2.09543-.17133-.83672-.33823-1.67174-.56489-2.497a10.4245,10.4245,0,0,0-1.77119-3.38219,15.99624,15.99624,0,0,0-4.18675-3.73026c-.385-.25664-.82136-.41368-1.18718-.6952.09257-.04253.18253-.1.29074-.04671a1.62777,1.62777,0,0,0,.90257.11768C89.17482,20.99485,89.29589,21.16074,89.47419,21.17505Z"/><path class="cls-285" d="M96.4072,30.87979c-.2667-.26065-.18341-.635-.30516-.94309a2.6823,2.6823,0,0,1-.07983-.28933,11.35494,11.35494,0,0,0-1.2935-5.05066,18.76832,18.76832,0,0,0-1.32029-2.00987,14.55844,14.55844,0,0,0-3.24138-2.875.34343.34343,0,0,0-.175-.35161,1.69931,1.69931,0,0,1-.67168-.88075,7.40494,7.40494,0,0,1,2.59881,1.5056,10.56505,10.56505,0,0,1,3.19285,3.8747,11.54786,11.54786,0,0,1,1.072,4.12431c.03091.55681.14645,1.10892.22343,1.66318A2.69957,2.69957,0,0,0,96.4072,30.87979Z"/><path class="cls-286" d="M84.9291,23.63987a3.99873,3.99873,0,0,0-2.24662-.21162,3.43647,3.43647,0,0,0-1.18359.75993A18.39541,18.39541,0,0,0,78.97275,26.481c-.62764.68788-1.17905,1.44356-1.79542,2.13848a9.80387,9.80387,0,0,1-1.95469,2.02905c-.02486-.39586.25287-.70528.30814-1.07826a6.43989,6.43989,0,0,1,1.1497-1.44405,5.919,5.919,0,0,0,1.28944-1.4094,11.42389,11.42389,0,0,1,.92538-.95813A15.62982,15.62982,0,0,1,81.325,23.67087a9.04037,9.04037,0,0,1,1.17748-.787,1.52829,1.52829,0,0,1,.95846-.12461,4.742,4.742,0,0,1,1.8292.49574,1.07857,1.07857,0,0,0,.25524.07679c.13311.0948.30606.09955.43915.19582.10971.07935.24361.14124.19355.31724A4.22538,4.22538,0,0,1,84.9291,23.63987Z"/><path class="cls-287" d="M86.16167,23.794c-.13037-.2541-.48588-.20809-.61628-.46215a6.09749,6.09749,0,0,0,1.69478-.07706,3.35457,3.35457,0,0,1,1.361.6602,19.18626,19.18626,0,0,1,2.9156,2.50029,1.67187,1.67187,0,0,1,.11443.15128,6.32744,6.32744,0,0,1,1.54091,2.16c.16022.37559.43322.69309.59905,1.06725.09595.21647.24225.43055.12259.68816-.19414.081-.26293-.07971-.34767-.19031a3.45849,3.45849,0,0,0-.41133-.53012,18.04779,18.04779,0,0,0-3.96055-4.3117A8.07486,8.07486,0,0,0,86.6729,24.05,1.272,1.272,0,0,1,86.16167,23.794Z"/><path class="cls-288" d="M77.45648,33.88361a1.90491,1.90491,0,0,0-1.12879.64131,1.20957,1.20957,0,0,1-.56562.28283.59633.59633,0,0,0-.46259-.69327,1.93105,1.93105,0,0,1,.48567-1.46732A.79211.79211,0,0,0,76,32.25255a.4205.4205,0,0,1,.45519-.37162c.17325-.19393.34927-.31828.51935-.00009.075.1403.14317.08674.23259.016.08119-.06417.16136-.1769.2884-.06928a1.18093,1.18093,0,0,0,.40947.75557A2.05872,2.05872,0,0,1,77.45648,33.88361Z"/><path class="cls-289" d="M94.17335,32.651c.09285.49718.46962.91963.38537,1.46343-.25049-.44843-.50327-.89561-.74989-1.34616a.58866.58866,0,0,0-.25192-.2716c-.21723-.05983-.2725-.259-.35359-.42732a12.73846,12.73846,0,0,0-2.23515-3.14423,27.14363,27.14363,0,0,0-2.64506-2.39709,4.66825,4.66825,0,0,0-1.0499-.55521c-.7913-.36618-1.62806-.61875-2.42423-.97279a5.1958,5.1958,0,0,0-.7525-.52488c-.0833-.043-.19849-.08069-.16884-.21915a4.21907,4.21907,0,0,1,2.03509.44194,1.85955,1.85955,0,0,0,.81522.17421,3.63465,3.63465,0,0,1,1.66059.73249A20.07434,20.07434,0,0,1,92.43529,29.466c.17873.21941.39263.40532.561.63262a20.53878,20.53878,0,0,1,1.05868,2.07815A1.5619,1.5619,0,0,1,94.17335,32.651Z"/><path class="cls-290" d="M83.92764,24.256c.29635.24673.71535.32992.92443.693-.21873.1044-.47593-.03066-.68873.11126a2.02813,2.02813,0,0,0-2.35257.65867c-.6455.63473-1.34008,1.22984-1.921,1.92393a13.561,13.561,0,0,0-1.26612,1.963c-.41527.719-.77606,1.46666-1.16774,2.198l-.42425.3556c-.11891-.25654-.23792-.52355-.57646-.27858-.05972-.25035.13867-.38992.24722-.5662a.98007.98007,0,0,0,.215-.43505,6.03249,6.03249,0,0,0,.92026-1.57676,1.63354,1.63354,0,0,1,.40871-.63921c.47513-.42182.66972-1.04547,1.09757-1.5096a15.51924,15.51924,0,0,1,1.86965-1.8123,4.43293,4.43293,0,0,0,.67546-.56095A1.78223,1.78223,0,0,1,83.92764,24.256Z"/><path class="cls-291" d="M92.9406,30.10958a8.85134,8.85134,0,0,1-1.30087-1.44374q-.82153-.91447-1.71722-1.7482a9.13407,9.13407,0,0,0-1.93158-1.48549c-.3937-.20687-.808-.37459-1.213-.56-.32262-.39449-.82535-.46942-1.24459-.69046a1.23859,1.23859,0,0,1-.60426-.54185,3.67852,3.67852,0,0,1,1.23257.15408,8.11872,8.11872,0,0,1,2.803,1.36856,21.42287,21.42287,0,0,1,2.65,2.44373,8.4772,8.4772,0,0,1,1.55724,2.11793A.64361.64361,0,0,1,92.9406,30.10958Z"/><path class="cls-292" d="M92.09321,39.50593a1.56537,1.56537,0,0,0-1.23258-.616c-.21089-.015-.19451-.19706-.23239-.32989-.038-.13321-.02818-.30061-.15735-.37454a1.34022,1.34022,0,0,1-.56157-.91171,5.31673,5.31673,0,0,0-.38389-.90751.17716.17716,0,0,1,.0878-.1922.64011.64011,0,0,0,.336-.58254c.148-.22089.26558-.044.36039.04521a5.39524,5.39524,0,0,1,.77565.82835,11.70052,11.70052,0,0,1,1.48613,2.0496c.095.16483.216.33262.06122.529C92.52771,39.28513,92.266,39.34369,92.09321,39.50593Z"/><path class="cls-293" d="M92.63265,39.04371a.84994.84994,0,0,0-.14876-.5016,14.43747,14.43747,0,0,0-1.46918-2.03992,1.17093,1.17093,0,0,1,.38556-.462,4.68237,4.68237,0,0,1,1.46367,1.5401,2.92611,2.92611,0,0,1,.46221.84749c.15407.35942-.06928.71878-.00018,1.07818C93.06789,39.39229,92.98138,39.02141,92.63265,39.04371Z"/><path class="cls-294" d="M81.53954,32.343a.37329.37329,0,0,0-.14949.25793c-.12671.85569-.69718,1.548-.877,2.38426-.01084.05042-.08458.08732-.12906.1305l-.15388-.07711a10.15539,10.15539,0,0,1,.44054-2.08775,12.6096,12.6096,0,0,1,.6331-2.04111,6.06861,6.06861,0,0,1,1.526-2.524,1.098,1.098,0,0,1,.68784-.28033,5.74941,5.74941,0,0,1,2.09091.5234,14.92549,14.92549,0,0,1,2.18035,1.11485,6.07489,6.07489,0,0,1,1.51252,1.40486,18.23646,18.23646,0,0,1,1.63525,1.92028.90861.90861,0,0,1,.23248.66061c-.53735-.52184-1.07268-1.0458-1.61423-1.56325a.48423.48423,0,0,0-.31177-.13107.18551.18551,0,0,1-.101-.05164c-1.1898-1.44969-2.90957-2.05121-4.53237-2.79013a1.72639,1.72639,0,0,0-2.2123,1.00987,11.80449,11.80449,0,0,1-.50991,1.20061,1.61671,1.61671,0,0,0-.17441.58535C81.69945,32.12633,81.70635,32.27874,81.53954,32.343Z"/><path class="cls-295" d="M79.61328,32.57438a4.65459,4.65459,0,0,1,.46259-1.46364,4.747,4.747,0,0,1,.48815-1.47426,11.82112,11.82112,0,0,1,1.63709-2.25659,1.6612,1.6612,0,0,1,1.63323-.55055A13.26141,13.26141,0,0,1,86.525,27.83126a8.08238,8.08238,0,0,1,3.11459,2.18434c.43615.48522.93971.90731,1.36258,1.40673a7.75852,7.75852,0,0,1,1.0026,1.46844c.07054.13724.20158.27527.08839.45352Q90.99,32.222,89.88623,31.10013a9.46881,9.46881,0,0,0-3.52576-2.38706,10.448,10.448,0,0,1-1.43259-.72547,2.81374,2.81374,0,0,0-1.79314-.34752,1.05158,1.05158,0,0,0-.73266.43317A11.36656,11.36656,0,0,0,80.939,30.39339a4.01851,4.01851,0,0,0-.17081.50691,22.12465,22.12465,0,0,1-1.46264,3.36823,2.10173,2.10173,0,0,1,.22129-.75239A1.05685,1.05685,0,0,0,79.61328,32.57438Z"/><path class="cls-296" d="M92.09321,33.34429a6.2045,6.2045,0,0,0-1.15534-1.84855.31655.31655,0,0,1,.13286-.41036c.1991-.07134.30791.074.42605.18466a7.56645,7.56645,0,0,1,1.30536,1.54549c.22061.35891.4982.67944.701,1.05024a7.621,7.621,0,0,1,.386.79243c.079.21872.21965.44572.05309.68859a6.61418,6.61418,0,0,0-1.464-1.463Z"/><path class="cls-297" d="M81.53954,32.343a8.08981,8.08981,0,0,1,.77952-2.18,2.08177,2.08177,0,0,1,1.50745-1.24222,1.72028,1.72028,0,0,1,1.12513.28885,19.70692,19.70692,0,0,1,3.3603,1.82485,3.18164,3.18164,0,0,1,.93122,1.00052,1.70129,1.70129,0,0,0-.00007,1.00116c-.235-.00447-.39259-.18435-.59585-.262a2.43549,2.43549,0,0,0-.86892-.79836c-.88021-.57681-1.83727-1.01524-2.76456-1.507a2.0667,2.0667,0,0,0-1.08125-.22483,1.19844,1.19844,0,0,0-.93279.70817A8.68858,8.68858,0,0,0,82.04227,33.89c-.17509.26323-.13926.63364-.42569.8405-.19434-.20265-.10186-.46821-.15409-.702A4.61423,4.61423,0,0,1,81.53954,32.343Z"/><path class="cls-298" d="M88.70384,32.80506c.26592-.12389.35793.15775.53925.23116.34936.3878.69646.77768,1.049,1.16258a13.23818,13.23818,0,0,1,1.10818,1.84135c-.03684.23049-.22128.33785-.38556.462-.322-.32084-.56109-.73157-1.00141-.92433-.14273.01711-.13594-.10154-.169-.1844A1.28075,1.28075,0,0,0,89.543,34.822c-.36078-.51219-.77651-.98038-1.17321-1.46409A1.41819,1.41819,0,0,1,88.70384,32.80506Z"/><path class="cls-277" d="M93.94225,35.34679a3.54723,3.54723,0,0,0-.539-1.46329.27461.27461,0,0,1,.21774-.0823c.1642.001.24026.12209.32127.23645.50762.84407.69531,1.82866,1.1821,2.68342.16978.29812.29193.62335.43583.9362.24222.63872.47922,1.2795.73041,1.91467a.97557.97557,0,0,1,.11679.47321c-.457-.66884-.75372-1.43257-1.23586-2.08647-.0746-.10118-.15183-.20043-.22784-.30057-.24487-.61814-.48474-1.23834-.738-1.853A3.88446,3.88446,0,0,0,93.94225,35.34679Z"/><path class="cls-299" d="M89.55123,36.348a2.27705,2.27705,0,0,1,.52538,1.11651c.08922.2471.15219.4781.42015.59364a.36117.36117,0,0,1,.21285.37363.6644.6644,0,0,0,.151.4581c-.62161.3614-1.08023.997-1.84632,1.11367-.96839.14755-1.93736.2927-2.90878.41788a1.382,1.382,0,0,1-.5639-.08586,9.25625,9.25625,0,0,0-1.83519-.35723c-.322-.03295-.5491-.27544-.85712-.31861.00181-.33587-.25133-.65209-.07722-1.00125a.23607.23607,0,0,1-.03263-.21654,12.48112,12.48112,0,0,0,.29392-1.60278c.02046-.13361.02036-.2835.16453-.36441.69282.01569,1.361.21927,2.05024.27025.34367.02542.68747.06125,1.03052.10226a1.73106,1.73106,0,0,0,1.22174-.37783,1.86915,1.86915,0,0,1,1.49639-.40092A.75989.75989,0,0,1,89.55123,36.348Z"/><path class="cls-300" d="M83.23413,36.50208a14.88446,14.88446,0,0,0-.29385,1.619,2.96607,2.96607,0,0,0-.16817.53747c-.14167-.12792-.29191-.24767-.42331-.38538-.32522-.34085-.64257-.158-.96333.00029L81.54,34.96256c.08954-.05622.0744-.147.07656-.232.1583-.26883.12435-.625.38524-.84725.25561-.06757.422.14379.6664.21209.018-.16237.05384-.32419.0552-.48028a5.89861,5.89861,0,0,1,.87785-2.34743.40246.40246,0,0,1,.442-.24094,3.01711,3.01711,0,0,1,1.188.27933c.922.52892,1.867,1.0185,2.75811,1.60017.16911.11038.35414.21523.40634.43816a6.7559,6.7559,0,0,1,1.54052,2.0025,1.642,1.642,0,0,1-.87384-.57435,17.54537,17.54537,0,0,0-2.86125-1.98234c-.31814-.21219-.65848-.396-.99411-.58359a.66374.66374,0,0,0-.61328-.00033c-1.00077.36922-1.06769,1.22767-1.191,2.09332-.09586.673-.04028,1.34909-.11905,2.01954A.38367.38367,0,0,1,83.23413,36.50208Z"/><path class="cls-301" d="M93.94225,34.03765c-.10665-.04364-.174-.16536-.308-.15479-.30216-.51843-.638-1.02047-.91859-1.547a7.22577,7.22577,0,0,0-1.3833-1.87737c-.87326-.8287-1.75522-1.65032-2.68147-2.42036A9.20463,9.20463,0,0,0,86.377,26.7631a15.85339,15.85339,0,0,0-2.36362-1.0138c-.09805-.02493-.19639-.07409-.19407-.20576.25557-.28036.56438-.14907.85162-.0929a4.51232,4.51232,0,0,1,.60625.23231,8.54289,8.54289,0,0,1-.83271-.36913c-.1221-.06786-.25308-.12971-.28576-.28762.20032-.30222.45639-.10368.69332-.07716.73281.225,1.43209.54076,2.152.79855a9.44807,9.44807,0,0,1,3.15895,2.252,14.07379,14.07379,0,0,1,1.71545,1.81118,9.628,9.628,0,0,1,1.3445,2.08238,5.51644,5.51644,0,0,0,.33392.60359,1.23121,1.23121,0,0,0,.05557.33536A4.37234,4.37234,0,0,1,93.94225,34.03765Z"/><path class="cls-302" d="M92.9406,30.10958a.47869.47869,0,0,1,.23129-.38541c.23868.06571.28231.30762.41451.468.088.10672.14172.24148.27881.3025.23146.1353.26514.39431.37285.60505.30771.602.47584,1.2606.74784,1.87772a.40762.40762,0,0,1,.03485.36675,5.64419,5.64419,0,0,0,.30814,1.46355,3.37165,3.37165,0,0,1-.60666-1.164c-.1514-.31987-.28524-.648-.43067-.97078-.02228-.04944-.06757-.07533-.11821-.0219Z"/><path class="cls-303" d="M95.02075,33.3442c-.37346-.9546-.71444-1.92235-1.15554-2.84952a1.71875,1.71875,0,0,0-.38143-1.0229,9.99693,9.99693,0,0,1-.70835-1.302,5.57814,5.57814,0,0,0-.9635-1.313,1.65511,1.65511,0,0,1-.18074-.29033c.4268.13283.58611.5472.86233.83518.29841.31111.55126.66572.82608.99964a3.68756,3.68756,0,0,1,.693,1.13412.7553.7553,0,0,0,.31459.42011c.32624,1.16984.65423,2.33921.9758,3.51033a1.74364,1.74364,0,0,1,.02585.34041C95.12052,33.72269,95.1571,33.47581,95.02075,33.3442Z"/><path class="cls-304" d="M83.85061,25.56526c1.16963.41118,2.26753.984,3.39089,1.49987a10.6697,10.6697,0,0,1,2.4004,1.69337c.5472.46472,1.0366.98705,1.57523,1.46a6.0493,6.0493,0,0,1,1.5766,2.0875,4.07494,4.07494,0,0,0,.41612.63893,2.65575,2.65575,0,0,1,.42445.93791l-.23106.00063a12.29769,12.29769,0,0,0-2.05206-2.63056c-.0771-.06772-.14523-.14456-.25905-.1422a16.69429,16.69429,0,0,0-3.06657-3.15593,5.63716,5.63716,0,0,0-1.72744-.82337,7.99974,7.99974,0,0,1-1.034-.41161,4.25133,4.25133,0,0,0-1.65342-.46777,1.7396,1.7396,0,0,0-1.27241.53673c-.42631.39-.78712.84093-1.18252,1.25936a2.73376,2.73376,0,0,0-.64953.80224l-.04523.02679a4.21843,4.21843,0,0,0-.802,1.54763,18.33611,18.33611,0,0,1-1.60189,3.09559.84709.84709,0,0,1-.60036.44014l-.00037-.07693a.47723.47723,0,0,1,.07307-.3644,1.6355,1.6355,0,0,0,.31249-.94508,1.73761,1.73761,0,0,1,.11177-.36241,38.13723,38.13723,0,0,1,2.08915-4.058,10.55437,10.55437,0,0,1,1.76345-1.91154,2.94456,2.94456,0,0,1,1.37118-.87409C83.44107,25.31749,83.68915,25.284,83.85061,25.56526Z"/><path class="cls-305" d="M81.07733,28.03a9.26763,9.26763,0,0,1,1.30243-1.406,1.9932,1.9932,0,0,1,1.99545-.34067c.4438.13573.85184.34568,1.28041.51054.61973.23841,1.2432.46373,1.84733.74413a4.54722,4.54722,0,0,1,1.32321.9672c.6921.70279,1.4357,1.356,2.05908,2.1259a.699.699,0,0,1,.20689.47967l-.15426.385c-1.18126-1.161-2.17133-2.55431-3.74551-3.24708a15.94074,15.94074,0,0,0-3.41342-1.33778,1.76132,1.76132,0,0,0-1.5963.62507c-.22469.39828-.59574.6658-.8411,1.03933a6.72152,6.72152,0,0,0-1.09838,2.11885,1.20927,1.20927,0,0,1-.16729.41661c-.12483-.11872-.07034-.25232-.03846-.38875.14357-.61439.28282-1.22978.42364-1.84481A8.58716,8.58716,0,0,1,81.07733,28.03Z"/><path class="cls-306" d="M83.85061,25.56526a1.49417,1.49417,0,0,0-1.5087.3067,20.24352,20.24352,0,0,0-2.01469,2.04585,6.00647,6.00647,0,0,0-.79845,1.29986c-.50588.99174-.98,1.99965-1.47059,2.99923-.06109.12445-.14358.23841-.21614.35723-.38983-.1259-.41808-.433-.38612-.77022a6.64912,6.64912,0,0,1,.89293-1.89733,13.095,13.095,0,0,1,1.27551-2.08516,9.92942,9.92942,0,0,1,1.97681-2.02117,4.2134,4.2134,0,0,0,.48347-.43534,1.56021,1.56021,0,0,1,2.07411-.33871L85.391,25.705a1.494,1.494,0,0,1-.6609-.14337A1.201,1.201,0,0,0,83.85061,25.56526Z"/><path class="cls-307" d="M83.23413,36.50208a.51187.51187,0,0,1-.06357-.17836,20.28912,20.28912,0,0,1,.29038-2.9961,1.32493,1.32493,0,0,1,.70381-.98809,3.97033,3.97033,0,0,0,.46429-.268.43847.43847,0,0,1,.53222.00058c.83715.51175,1.66614,1.0454,2.5104,1.53413.84587.48965,1.462,1.22657,2.26456,1.74064.00293.08458-.01341.17559.07708.231.11932.42065-.19881.579-.46207.77018-.33192-.25006-.74518-.09233-1.10377-.2191-.141-.04983-.25679.03426-.38217.11572a2.79811,2.79811,0,0,1-1.45873.7006A13.56359,13.56359,0,0,1,83.23413,36.50208Z"/><path class="cls-308" d="M88.3957,33.34439a25.267,25.267,0,0,0-3.33725-2.01065,3.32323,3.32323,0,0,0-1.0774-.21974.21212.21212,0,0,0-.26.11874c-.171.60552-.69374,1.05162-.78132,1.68554a7.42694,7.42694,0,0,0-.17355,1.35626l-.76439-.39125a5.85552,5.85552,0,0,1,.60666-2.33715,2.41861,2.41861,0,0,0,.21674-.40467A1.30362,1.30362,0,0,1,84.683,30.256a17.316,17.316,0,0,1,2.36618,1.17411,6.92509,6.92509,0,0,1,1.22556.7802c.18488.16375.44089.28551.4291.59473A.83488.83488,0,0,1,88.3957,33.34439Z"/><path class="cls-278" d="M81.07733,28.03a2.13447,2.13447,0,0,1-.61628.84721A1.37911,1.37911,0,0,1,81.07733,28.03Z"/></g></svg>
\ No newline at end of file
diff --git a/static/images/denso_featured_logo.svg b/static/images/denso_featured_logo.svg
index 375d9cefbc..e2b26b2c8c 100644
--- a/static/images/denso_featured_logo.svg
+++ b/static/images/denso_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:#fbfbfb;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#ee3248;fill-rule:evenodd;}</style><clipPath id="clip-path"><rect class="cls-1" x="4.70501" y="-8.81268" width="206.90403" height="145.3255"/></clipPath></defs><rect class="cls-2" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M28.02166,50.76936l7.69058-.0617c6.9525.12305,7.75228,4.1837,4.61435,13.41275-2.64567,7.87531-6.76768,12.67414-14.58165,12.61279h-6.091ZM169.22325,61.044c4.55274-11.01316,10.52065-15.19686,22.76431-15.50454,10.9518-.24609,15.81224,4.79908,11.813,17.41187C199.49376,76.67151,191.67987,82.209,179.86693,82.209c-12.98175.06134-16.24263-7.87514-10.64368-21.165m8.429.73843c2.83006-7.01411,6.95215-11.87463,13.04345-11.93633,5.47555-.06125,6.46007,3.938,3.99905,12.36706-3.13794,10.82842-7.69068,15.5659-13.90466,15.44286-6.89106-.06135-6.768-6.82946-3.13784-15.87359m-15.07382-8.67536,2.09172-6.02932a34.76316,34.76316,0,0,0-10.95146-1.66134c-7.62924-.0616-13.35114,2.33806-15.6892,7.69066-3.69162,8.183,1.4766,10.70564,7.69084,13.59749,9.10583,4.245,3.876,11.56684-4.86069,10.82842-3.50688-.3077-6.58311-1.90724-9.65961-3.38384l-1.96859,6.15264A33.79646,33.79646,0,0,0,142.64393,82.209c9.0444-.55369,14.64308-4.184,16.91972-9.90595,2.584-6.52159-1.41525-10.52064-7.38324-12.42789-12.42831-3.99939-4.98338-15.75088,10.398-6.76811M95.57659,46.15492a19.153,19.153,0,0,1,2.215,3.62993L87.76306,81.47059H93.854l8.36766-26.45618,9.59791,26.45618h8.61375l-.36939-.98451,10.89012-34.33116h-6.15273l-7.99827,25.34837-9.22879-25.34837c-3.999,0-7.99836.06135-11.99767,0m-34.39259,0a14.395,14.395,0,0,1,2.21468,3.62993L53.43173,81.47059H79.826L81.05656,77.533H63.21437L67.152,65.16635H78.96492l1.23051-3.87627H68.3825L71.95081,49.9695H89.17822L90.347,46.15492c-9.72121,0-19.44208.06135-29.163,0m-42.26817,0a16.4482,16.4482,0,0,1,2.21468,3.62993L11.102,81.47059h8.61366l5.04517-.06135c14.766,0,21.77988-7.32179,24.73333-16.85828,4.245-13.5973-.92316-18.33469-13.47418-18.33469Z"/></g></g></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 215 127"><defs><style>.cls-1{fill:none;}.cls-2{fill:transparent;}.cls-3{clip-path:url(#clip-path);}.cls-4{fill:#ee3248;fill-rule:evenodd;}</style><clipPath id="clip-path"><rect class="cls-1" x="4.70501" y="-8.81268" width="206.90403" height="145.3255"/></clipPath></defs><rect class="cls-2" x="-3.37342" y="-3.34411" width="223.25536" height="134.51135"/><g class="cls-3"><g class="cls-3"><path class="cls-4" d="M28.02166,50.76936l7.69058-.0617c6.9525.12305,7.75228,4.1837,4.61435,13.41275-2.64567,7.87531-6.76768,12.67414-14.58165,12.61279h-6.091ZM169.22325,61.044c4.55274-11.01316,10.52065-15.19686,22.76431-15.50454,10.9518-.24609,15.81224,4.79908,11.813,17.41187C199.49376,76.67151,191.67987,82.209,179.86693,82.209c-12.98175.06134-16.24263-7.87514-10.64368-21.165m8.429.73843c2.83006-7.01411,6.95215-11.87463,13.04345-11.93633,5.47555-.06125,6.46007,3.938,3.99905,12.36706-3.13794,10.82842-7.69068,15.5659-13.90466,15.44286-6.89106-.06135-6.768-6.82946-3.13784-15.87359m-15.07382-8.67536,2.09172-6.02932a34.76316,34.76316,0,0,0-10.95146-1.66134c-7.62924-.0616-13.35114,2.33806-15.6892,7.69066-3.69162,8.183,1.4766,10.70564,7.69084,13.59749,9.10583,4.245,3.876,11.56684-4.86069,10.82842-3.50688-.3077-6.58311-1.90724-9.65961-3.38384l-1.96859,6.15264A33.79646,33.79646,0,0,0,142.64393,82.209c9.0444-.55369,14.64308-4.184,16.91972-9.90595,2.584-6.52159-1.41525-10.52064-7.38324-12.42789-12.42831-3.99939-4.98338-15.75088,10.398-6.76811M95.57659,46.15492a19.153,19.153,0,0,1,2.215,3.62993L87.76306,81.47059H93.854l8.36766-26.45618,9.59791,26.45618h8.61375l-.36939-.98451,10.89012-34.33116h-6.15273l-7.99827,25.34837-9.22879-25.34837c-3.999,0-7.99836.06135-11.99767,0m-34.39259,0a14.395,14.395,0,0,1,2.21468,3.62993L53.43173,81.47059H79.826L81.05656,77.533H63.21437L67.152,65.16635H78.96492l1.23051-3.87627H68.3825L71.95081,49.9695H89.17822L90.347,46.15492c-9.72121,0-19.44208.06135-29.163,0m-42.26817,0a16.4482,16.4482,0,0,1,2.21468,3.62993L11.102,81.47059h8.61366l5.04517-.06135c14.766,0,21.77988-7.32179,24.73333-16.85828,4.245-13.5973-.92316-18.33469-13.47418-18.33469Z"/></g></g></svg>
\ No newline at end of file

From 18bc5496fa3352ec2874c560be24abd691beb0bb Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 11 Apr 2021 16:30:04 +0900
Subject: [PATCH 528/788] Add k8s-ruby/k8s-ruby as a community-maintained
 client libraries

---
 content/en/docs/reference/using-api/client-libraries.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/reference/using-api/client-libraries.md b/content/en/docs/reference/using-api/client-libraries.md
index a484c8e74f..2ab3d5e654 100644
--- a/content/en/docs/reference/using-api/client-libraries.md
+++ b/content/en/docs/reference/using-api/client-libraries.md
@@ -71,6 +71,7 @@ their authors, not the Kubernetes team.
 | Ruby                 | [github.com/abonas/kubeclient](https://github.com/abonas/kubeclient) |
 | Ruby                 | [github.com/Ch00k/kuber](https://github.com/Ch00k/kuber) |
 | Ruby                 | [github.com/kontena/k8s-client](https://github.com/kontena/k8s-client) |
+| Ruby                 | [github.com/k8s-ruby/k8s-ruby](https://github.com/k8s-ruby/k8s-ruby) |
 | Rust                 | [github.com/clux/kube-rs](https://github.com/clux/kube-rs) |
 | Rust                 | [github.com/ynqa/kubernetes-rust](https://github.com/ynqa/kubernetes-rust) |
 | Scala                | [github.com/hagay3/skuber](https://github.com/hagay3/skuber) |

From 6e1b8d8b2d62f054b057921f5664b08f17379484 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Sun, 11 Apr 2021 12:27:16 +0200
Subject: [PATCH 529/788] Fix

---
 .../configure-pod-configmap.md                | 21 ++++++-------------
 1 file changed, 6 insertions(+), 15 deletions(-)

diff --git a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
index ce2c14dc99..93c6d1725a 100644
--- a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -7,19 +7,16 @@ card:
   weight: 50
 ---
 
-{{% capture overview %}}
+<!-- overview -->
+
 Les ConfigMaps vous permettent de découpler les artefacts de configuration du contenu de l'image pour garder les applications conteneurisées portables.
 Cette page fournit une série d'exemples d'utilisation montrant comment créer des ConfigMaps et configurer des pods à l'aide des données stockées dans des ConfigMaps.
 
-{{% /capture %}}
-
-{{% capture prerequisites %}}
+## {{% heading "prerequisites" %}}
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-{{% /capture %}}
-
-{{% capture steps %}}
+<!-- steps -->
 
 ## Créer un ConfigMap
 
@@ -619,9 +616,7 @@ Vous pouvez déclencher un rafraîchissement immédiat en mettant à jour l'une
 Un conteneur utilisant un ConfigMap comme volume [subPath](/docs/concepts/storage/volumes/#using-subpath) ne recevra pas les mises à jour de ConfigMap.
 {{< /note >}}
 
-{{% /capture %}}
-
-{{% capture discussion %}}
+<!-- discussion -->
 
 ## Comprendre le lien entre les ConfigMaps et les Pods
 
@@ -684,10 +679,6 @@ data:
 
 * Vous ne pouvez pas utiliser des ConfigMaps pour {{< glossary_tooltip text="static pods" term_id="static-pod" >}}, car le Kubelet ne le supporte pas.
 
-{{% /capture %}}
-
-{{% capture whatsnext %}}
+{{% heading "whatsnext" %}}
 
 * Suivez un exemple concret de [Configurer Redis en utilisant un ConfigMap](/docs/tutorials/configuration/configure-redis-using-configmap/).
-
-{{% /capture %}}

From 7ecb5e309a348afab9af3e6661704a6c3a2e3f23 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Sun, 11 Apr 2021 12:29:33 +0200
Subject: [PATCH 530/788] update gitignore to include folder created by make
 container-serve

---
 .gitignore | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 51e94f41b4..6a629010d0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,4 +33,8 @@ resources/
 # Netlify Functions build output
 package-lock.json
 functions/
-node_modules/
\ No newline at end of file
+node_modules/
+
+# Generated files when building with make container-build
+.config/
+.npm/

From 02099e2dd3abc05676167a08a6dc882a2b5f2023 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?George=20Ga=C3=A1l?= <gb12335@gmail.com>
Date: Sun, 11 Apr 2021 14:24:40 +0300
Subject: [PATCH 531/788] Update konnectivity to 0.0.16 and update ZH docs
 accordingly

---
 .../konnectivity/konnectivity-agent.yaml      |  2 +-
 .../konnectivity/konnectivity-server.yaml     |  2 +-
 .../egress-selector-configuration.yaml        |  2 +-
 .../konnectivity/konnectivity-agent.yaml      |  6 ++-
 .../konnectivity/konnectivity-server.yaml     | 44 ++++++++++---------
 5 files changed, 30 insertions(+), 26 deletions(-)

diff --git a/content/en/examples/admin/konnectivity/konnectivity-agent.yaml b/content/en/examples/admin/konnectivity/konnectivity-agent.yaml
index 3c71999427..0eb47e1c58 100644
--- a/content/en/examples/admin/konnectivity/konnectivity-agent.yaml
+++ b/content/en/examples/admin/konnectivity/konnectivity-agent.yaml
@@ -22,7 +22,7 @@ spec:
         - key: "CriticalAddonsOnly"
           operator: "Exists"
       containers:
-        - image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-agent:v0.0.12
+        - image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-agent:v0.0.16
           name: konnectivity-agent
           command: ["/proxy-agent"]
           args: [
diff --git a/content/en/examples/admin/konnectivity/konnectivity-server.yaml b/content/en/examples/admin/konnectivity/konnectivity-server.yaml
index a0f45af5ff..f1f378431a 100644
--- a/content/en/examples/admin/konnectivity/konnectivity-server.yaml
+++ b/content/en/examples/admin/konnectivity/konnectivity-server.yaml
@@ -8,7 +8,7 @@ spec:
   hostNetwork: true
   containers:
   - name: konnectivity-server-container
-    image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-server:v0.0.12
+    image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-server:v0.0.16
     command: ["/proxy-server"]
     args: [
             "--logtostderr=true",
diff --git a/content/zh/examples/admin/konnectivity/egress-selector-configuration.yaml b/content/zh/examples/admin/konnectivity/egress-selector-configuration.yaml
index 6659ff3fbb..c85f25ea51 100644
--- a/content/zh/examples/admin/konnectivity/egress-selector-configuration.yaml
+++ b/content/zh/examples/admin/konnectivity/egress-selector-configuration.yaml
@@ -18,4 +18,4 @@ egressSelections:
       # The other supported transport is "tcp". You will need to set up TLS 
       # config to secure the TCP transport.
       uds:
-        udsName: /etc/srv/kubernetes/konnectivity-server/konnectivity-server.socket
+        udsName: /etc/kubernetes/konnectivity-server/konnectivity-server.socket
diff --git a/content/zh/examples/admin/konnectivity/konnectivity-agent.yaml b/content/zh/examples/admin/konnectivity/konnectivity-agent.yaml
index c3dc71040b..0eb47e1c58 100644
--- a/content/zh/examples/admin/konnectivity/konnectivity-agent.yaml
+++ b/content/zh/examples/admin/konnectivity/konnectivity-agent.yaml
@@ -22,7 +22,7 @@ spec:
         - key: "CriticalAddonsOnly"
           operator: "Exists"
       containers:
-        - image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-agent:v0.0.8
+        - image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-agent:v0.0.16
           name: konnectivity-agent
           command: ["/proxy-agent"]
           args: [
@@ -32,6 +32,8 @@ spec:
                   # this is the IP address of the master machine.
                   "--proxy-server-host=35.225.206.7",
                   "--proxy-server-port=8132",
+                  "--admin-server-port=8133",
+                  "--health-server-port=8134",
                   "--service-account-token-path=/var/run/secrets/tokens/konnectivity-agent-token"
                   ]
           volumeMounts:
@@ -39,7 +41,7 @@ spec:
               name: konnectivity-agent-token
           livenessProbe:
             httpGet:
-              port: 8093
+              port: 8134
               path: /healthz
             initialDelaySeconds: 15
             timeoutSeconds: 15
diff --git a/content/zh/examples/admin/konnectivity/konnectivity-server.yaml b/content/zh/examples/admin/konnectivity/konnectivity-server.yaml
index 730c26c66a..f1f378431a 100644
--- a/content/zh/examples/admin/konnectivity/konnectivity-server.yaml
+++ b/content/zh/examples/admin/konnectivity/konnectivity-server.yaml
@@ -8,34 +8,33 @@ spec:
   hostNetwork: true
   containers:
   - name: konnectivity-server-container
-    image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-server:v0.0.8
+    image: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-server:v0.0.16
     command: ["/proxy-server"]
     args: [
-            "--log-file=/var/log/konnectivity-server.log",
-            "--logtostderr=false",
-            "--log-file-max-size=0",
+            "--logtostderr=true",
             # This needs to be consistent with the value set in egressSelectorConfiguration.
-            "--uds-name=/etc/srv/kubernetes/konnectivity-server/konnectivity-server.socket",
+            "--uds-name=/etc/kubernetes/konnectivity-server/konnectivity-server.socket",
             # The following two lines assume the Konnectivity server is
             # deployed on the same machine as the apiserver, and the certs and
             # key of the API Server are at the specified location.
-            "--cluster-cert=/etc/srv/kubernetes/pki/apiserver.crt",
-            "--cluster-key=/etc/srv/kubernetes/pki/apiserver.key",
+            "--cluster-cert=/etc/kubernetes/pki/apiserver.crt",
+            "--cluster-key=/etc/kubernetes/pki/apiserver.key",
             # This needs to be consistent with the value set in egressSelectorConfiguration.
             "--mode=grpc",
             "--server-port=0",
             "--agent-port=8132",
             "--admin-port=8133",
+            "--health-port=8134",
             "--agent-namespace=kube-system",
             "--agent-service-account=konnectivity-agent",
-            "--kubeconfig=/etc/srv/kubernetes/konnectivity-server/kubeconfig",
+            "--kubeconfig=/etc/kubernetes/konnectivity-server.conf",
             "--authentication-audience=system:konnectivity-server"
             ]
     livenessProbe:
       httpGet:
         scheme: HTTP
         host: 127.0.0.1
-        port: 8133
+        port: 8134
         path: /healthz
       initialDelaySeconds: 30
       timeoutSeconds: 60
@@ -46,25 +45,28 @@ spec:
     - name: adminport
       containerPort: 8133
       hostPort: 8133
+    - name: healthport
+      containerPort: 8134
+      hostPort: 8134
     volumeMounts:
-    - name: varlogkonnectivityserver
-      mountPath: /var/log/konnectivity-server.log
-      readOnly: false
-    - name: pki
-      mountPath: /etc/srv/kubernetes/pki
+    - name: k8s-certs
+      mountPath: /etc/kubernetes/pki
+      readOnly: true
+    - name: kubeconfig
+      mountPath: /etc/kubernetes/konnectivity-server.conf
       readOnly: true
     - name: konnectivity-uds
-      mountPath: /etc/srv/kubernetes/konnectivity-server
+      mountPath: /etc/kubernetes/konnectivity-server
       readOnly: false
   volumes:
-  - name: varlogkonnectivityserver
+  - name: k8s-certs
     hostPath:
-      path: /var/log/konnectivity-server.log
+      path: /etc/kubernetes/pki
+  - name: kubeconfig
+    hostPath:
+      path: /etc/kubernetes/konnectivity-server.conf
       type: FileOrCreate
-  - name: pki
-    hostPath:
-      path: /etc/srv/kubernetes/pki
   - name: konnectivity-uds
     hostPath:
-      path: /etc/srv/kubernetes/konnectivity-server
+      path: /etc/kubernetes/konnectivity-server
       type: DirectoryOrCreate

From 2c3ece825f7017cee38bc85dc9d7d1f2f2fea4b6 Mon Sep 17 00:00:00 2001
From: joostas <justas.narbutas@gmail.com>
Date: Mon, 5 Apr 2021 21:17:02 +0300
Subject: [PATCH 532/788] [zh] Fix label selector in "kubectl for Docker Users"

Before:
```sh
kubectl get po -l run=nginx-app
No resources found in default namespace.
```
Because:
```sh
kubectl get po --show-labels
NAME                         READY   STATUS    RESTARTS   AGE   LABELS
nginx-app-58cfd4c468-jx6qp   1/1     Running   0          17m   app=nginx-app,pod-template-hash=58cfd4c468
```
After:
```sh
kubectl get po -l app=nginx-app
NAME                         READY   STATUS    RESTARTS   AGE
nginx-app-58cfd4c468-jx6qp   1/1     Running   0          18m
```
---
 content/zh/docs/reference/kubectl/docker-cli-to-kubectl.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/reference/kubectl/docker-cli-to-kubectl.md b/content/zh/docs/reference/kubectl/docker-cli-to-kubectl.md
index b53e6fcd77..74473b4b1c 100644
--- a/content/zh/docs/reference/kubectl/docker-cli-to-kubectl.md
+++ b/content/zh/docs/reference/kubectl/docker-cli-to-kubectl.md
@@ -371,7 +371,7 @@ nginx-app   1         1         1            1           2m
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 ```
 ```
 NAME                         READY     STATUS    RESTARTS   AGE
@@ -385,7 +385,7 @@ deployment "nginx-app" deleted
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 # Return nothing
 ```
 

From 4f4716f42d9f74e5056f17d9730a4a595bf69dcf Mon Sep 17 00:00:00 2001
From: wangyysde <net_use@bzhy.com>
Date: Mon, 12 Apr 2021 21:58:45 +0800
Subject: [PATCH 533/788] Update container-runtimes.md

As if the correct url of tasks/administer-cluster/kubeadm/configure-cgroup-driver is docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver
---
 .../en/docs/setup/production-environment/container-runtimes.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index b296636212..59a38fbc91 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -59,7 +59,7 @@ configuration, or reinstall it using automation.
 
 ### Migrating to the `systemd` driver in kubeadm managed clusters
 
-Follow this [Migration guide](/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
+Follow this [Migration guide](docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
 if you wish to migrate to the `systemd` cgroup driver in existing kubeadm managed clusters.
 
 ## Container runtimes

From 120c02aa0980bdb856edca00690836cbd51826a4 Mon Sep 17 00:00:00 2001
From: Aldo Culquicondor <acondor@google.com>
Date: Mon, 22 Mar 2021 12:47:36 -0400
Subject: [PATCH 534/788] Blog: Introducing Indexed Jobs

Signed-off-by: Aldo Culquicondor <acondor@google.com>
---
 .../2021-04-19-introducing-indexed-jobs.md    | 95 +++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-19-introducing-indexed-jobs.md

diff --git a/content/en/blog/_posts/2021-04-19-introducing-indexed-jobs.md b/content/en/blog/_posts/2021-04-19-introducing-indexed-jobs.md
new file mode 100644
index 0000000000..990dd6308b
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-19-introducing-indexed-jobs.md
@@ -0,0 +1,95 @@
+---
+title: "Introducing Indexed Jobs"
+date: 2021-04-19
+slug: introducing-indexed-jobs
+---
+
+**Author:** Aldo Culquicondor (Google)
+
+Once you have containerized a non-parallel [Job](/docs/concepts/workloads/controllers/job/),
+it is quite easy to get it up and running on Kubernetes without modifications to
+the binary. In most cases, when running parallel distributed Jobs, you had
+to set a separate system to partition the work among the workers. For
+example, you could set up a task queue to [assign one work item to each
+Pod](/docs/tasks/job/coarse-parallel-processing-work-queue/) or [multiple items
+to each Pod until the queue is emptied](/docs/tasks/job/fine-parallel-processing-work-queue/).
+
+The Kubernetes 1.21 release introduces a new field to control Job _completion mode_,
+a configuration option that allows you to control how Pod completions affect the
+overall progress of a Job, with two possible options (for now):
+
+- `NonIndexed` (default): the Job is considered complete when there has been
+  a number of successfully completed Pods equal to the specified number in
+  `.spec.completions`. In other words, each Pod completion is homologous to
+  each other. Any Job you might have created before the introduction of
+  completion modes is implicitly NonIndexed.
+- `Indexed`: the Job is considered complete when there is one successfully
+  completed Pod associated with each index from 0 to `.spec.completions-1`. The
+  index is exposed to each Pod in the `batch.kubernetes.io/job-completion-index`
+  annotation and the `JOB_COMPLETION_INDEX` environment variable.
+
+You can start using Jobs with Indexed completion mode, or Indexed Jobs, for
+short, to easily start parallel Jobs. Then, each worker Pod can have a statically
+assigned partition of the data based on the index. This saves you from having to
+set up a queuing system or even having to modify your binary!
+
+## Creating an Indexed Job
+
+To create an Indexed Job, you just have to add `completionMode: Indexed` to the
+Job spec and make use of the `JOB_COMPLETION_INDEX` environment variable.
+
+```yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: 'sample-job'
+spec:
+  completions: 3
+  parallelism: 3
+  completionMode: Indexed
+  template:
+    spec:
+      restartPolicy: Never
+      containers:
+      - command:
+        - 'bash'
+        - '-c'
+        - 'echo "My partition: ${JOB_COMPLETION_INDEX}"'
+        image: 'docker.io/library/bash'
+        name: 'sample-load'
+```
+
+Note that completion mode is an alpha feature in the 1.21 release. To be able to
+use it in your cluster, make sure to enable the `IndexedJob` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/) on the
+[API server](docs/reference/command-line-tools-reference/kube-apiserver/) and
+the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/).
+
+When you run the example, you will see that each of the three created Pods gets a
+different completion index. For the user's convenience, the control plane sets the
+`JOB_COMPLETION_INDEX` environment variable, but you can choose to [set your
+own](/docs/tasks/inject-data-application/environment-variable-expose-pod-information/)
+or [expose the index as a file](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/).
+
+See [Indexed Job for parallel processing with static work
+assignment](/docs/tasks/job/indexed-parallel-processing-static/) for a
+step-by-step guide, and a few more examples.
+
+## Future plans
+
+SIG Apps envisions that there might be more completion modes that enable more
+use cases for the Job API. We welcome you to open issues in
+[kubernetes/kubernetes](https://github.com/kubernetes/kubernetes) with your
+suggestions.
+
+In particular, we are considering an `IndexedAndUnique` mode where the indexes
+are not just available as annotation, but they are part of the Pod names,
+similar to {{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}.
+This should facilitate inter-Pod communication for tightly coupled Pods.
+You can join the discussion in the [open issue](https://github.com/kubernetes/kubernetes/issues/99497).
+
+## Wrap-up
+
+Indexed Jobs allows you to statically partition work among the workers of your
+parallel Jobs. SIG Apps hopes that this feature facilitates the migration of
+more batch workloads to Kubernetes.
\ No newline at end of file

From 991352090a20b1d0658cf66b67c3fd6fdcb6b687 Mon Sep 17 00:00:00 2001
From: Lili Cosic <cosiclili@gmail.com>
Date: Mon, 12 Apr 2021 19:13:38 +0200
Subject: [PATCH 535/788] 2021-04-13-kube-state-metrics-goes-v-2-0.md: Add
 kube-state-metrics v2.0 (#27324)

blog post announcement.
---
 ...021-04-13-kube-state-metrics-goes-v-2-0.md | 45 +++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-13-kube-state-metrics-goes-v-2-0.md

diff --git a/content/en/blog/_posts/2021-04-13-kube-state-metrics-goes-v-2-0.md b/content/en/blog/_posts/2021-04-13-kube-state-metrics-goes-v-2-0.md
new file mode 100644
index 0000000000..822880547d
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-13-kube-state-metrics-goes-v-2-0.md
@@ -0,0 +1,45 @@
+---
+layout: blog
+title: "kube-state-metrics goes v2.0"
+date: 2021-04-13
+slug: kube-state-metrics-v-2-0
+---
+
+**Authors:** Lili Cosic (Red Hat), Frederic Branczyk (Polar Signals), Manuel Rüger (Sony Interactive Entertainment), Tariq Ibrahim (Salesforce)
+
+## What?
+
+[kube-state-metrics](https://github.com/kubernetes/kube-state-metrics), a project under the Kubernetes organization, generates Prometheus format metrics based on the current state of the Kubernetes native resources. It does this by listening to the Kubernetes API and gathering information about resources and objects, e.g. Deployments, Pods, Services, and StatefulSets. A full list of resources is available in the [documentation](https://github.com/kubernetes/kube-state-metrics/tree/master/docs) of kube-state-metrics.
+
+## Why?
+
+There are numerous useful metrics and insights provided by `kube-state-metrics` right out of the box! These metrics can be used to serve as an insight into your cluster: Either through metrics alone, in the form of dashboards, or through an alerting pipeline. To provide a few examples:
+
+* `kube_pod_container_status_restarts_total` can be used to alert on a crashing pod.
+* `kube_deployment_status_replicas` which together with `kube_deployment_status_replicas_available` can be used to alert on whether a deployment is rolled out successfully or stuck.
+* `kube_pod_container_resource_requests` and `kube_pod_container_resource_limits` can be used in capacity planning dashboards.
+
+And there are many more metrics available! To learn more about the other metrics and their details, please check out the [documentation](https://github.com/kubernetes/kube-state-metrics/tree/master/docs#readme).
+
+## What is new in v2.0?
+
+So now that we know what kube-state-metrics is, we are excited to announce the next release: kube-state-metrics v2.0! This release was long-awaited and started with an alpha release in September 2020. To ease maintenance we removed tech debt and also adjusted some confusing wording around user-facing flags and APIs. We also removed some metrics that caused unnecessarily high cardinality in Prometheus! For the 2.0 release, we took the time to set up scale and performance testing. This allows us to better understand if we hit any issues in large clusters and also to document resource request recommendations for your clusters. In this release (and v1.9.8) container builds providing support for multiple architectures were introduced allowing you to run kube-state-metrics on ARM, ARM64, PPC64 and S390x as well!
+
+So without further ado, here is the list of more noteworthy user-facing breaking changes. A full list of changes, features and bug fixes is available in the changelog at the end of this post.
+
+* Flag `--namespace` was renamed to `--namespaces`. If you are using the former, please make sure to update the flag before deploying the latest release.
+* Flag `--collectors` was renamed to `--resources`.
+* Flags `--metric-blacklist` and `--metric-whitelist` were renamed to `--metric-denylist` and `--metric-allowlist`.
+* Flag `--metric-labels-allowlist` allows you to specify a list of Kubernetes labels that get turned into the dimensions of the `kube_<resource-name>_labels` metrics. By default, the metric contains only name and namespace labels.
+* All metrics with a prefix of `kube_hpa_*` were renamed to `kube_horizontalpodautoscaler_*`.
+* Metric labels that relate to Kubernetes were converted to snake_case.
+* If you are importing kube-state-metrics as a library, we have updated our go module path to `k8s.io/kube-state-metrics/v2`
+* All deprecated stable metrics were removed as per the [notice in the v1.9 release](https://github.com/kubernetes/kube-state-metrics/tree/release-1.9/docs#metrics-deprecation).
+* `quay.io/coreos/kube-state-metrics` images will no longer be updated. `k8s.gcr.io/kube-state-metrics/kube-state-metrics` is the new canonical location.
+* The helm chart that is part of the kubernetes/kube-state-metrics repository is deprecated. https://github.com/prometheus-community/helm-charts will be its new location. 
+
+For the full list of v2.0 release changes includes features, bug fixes and other breaking changes see the full [CHANGELOG](https://github.com/kubernetes/kube-state-metrics/blob/master/CHANGELOG.md).
+
+## Found a problem?
+
+Thanks to all our users for testing so far and thank you to all our contributors for your issue reports as well as code and documentation changes! If you find any problems, we the [maintainers](https://github.com/kubernetes/kube-state-metrics/blob/master/OWNERS) are more than happy to look into them, so please report them by opening a [GitHub issue](https://github.com/kubernetes/kube-state-metrics/issues/new/choose).

From f3ffc37352f3170eb111a21c573b80f38515e973 Mon Sep 17 00:00:00 2001
From: xing-yang <xingyang105@gmail.com>
Date: Tue, 30 Mar 2021 03:20:44 +0000
Subject: [PATCH 536/788] blog: Volume Health Monitoring Alpha Update

---
 ...21-04-16-volume-health-monitoring-alpha.md | 95 +++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-16-volume-health-monitoring-alpha.md

diff --git a/content/en/blog/_posts/2021-04-16-volume-health-monitoring-alpha.md b/content/en/blog/_posts/2021-04-16-volume-health-monitoring-alpha.md
new file mode 100644
index 0000000000..99b2fd65b2
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-16-volume-health-monitoring-alpha.md
@@ -0,0 +1,95 @@
+---
+layout: blog
+title: "Volume Health Monitoring Alpha Update"
+date: 2021-04-16
+slug: volume-health-monitoring-alpha-update
+---
+
+**Author:** Xing Yang (VMware)
+
+The CSI Volume Health Monitoring feature, originally introduced in 1.19 has undergone a large update for the 1.21 release.
+
+## Why add Volume Health Monitoring to Kubernetes?
+
+Without Volume Health Monitoring, Kubernetes has no knowledge of the state of the underlying volumes of a storage system after a PVC is provisioned and used by a Pod. Many things could happen to the underlying storage system after a volume is provisioned in Kubernetes. For example, the volume could be deleted by accident outside of Kubernetes, the disk that the volume resides on could fail, it could be out of capacity, the disk may be degraded which affects its performance, and so on. Even when the volume is mounted on a pod and used by an application, there could be problems later on such as read/write I/O errors, file system corruption, accidental unmounting of the volume outside of Kubernetes, etc. It is very hard to debug and detect root causes when something happened like this.
+
+Volume health monitoring can be very beneficial to Kubernetes users. It can communicate with the CSI driver to retrieve errors detected by the underlying storage system. PVC events can be reported up to the user to take action. For example, if the volume is out of capacity, they could request a volume expansion to get more space.
+
+## What is Volume Health Monitoring?
+
+CSI Volume Health Monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on PVCs or Pods.
+
+The Kubernetes components that monitor the volumes and report events with volume health information include the following:
+
+* Kubelet, in addition to gathering the existing volume stats will watch the volume health of the PVCs on that node. If a PVC has an abnormal health condition, an event will be reported on the pod object using the PVC. If multiple pods are using the same PVC, events will be reported on all pods using that PVC.
+* An [External Volume Health Monitor Controller](https://github.com/kubernetes-csi/external-health-monitor) watches volume health of the PVCs and reports events on the PVCs.
+
+Note that the node side volume health monitoring logic was an external agent when this feature was first introduced in the Kubernetes 1.19 release. In Kubernetes 1.21, the node side volume health monitoring logic was moved from the external agent into the Kubelet, to avoid making duplicate CSI function calls. With this change in 1.21, a new alpha [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) `CSIVolumeHealth` was introduced for the volume health monitoring logic in Kubelet.
+
+Currently the Volume Health Monitoring feature is informational only as it only reports abnormal volume health events on PVCs or Pods. Users will need to check these events and manually fix the problems. This feature serves as a stepping stone towards programmatic detection and resolution of volume health issues by Kubernetes in the future.
+
+## How do I use Volume Health on my Kubernetes Cluster?
+
+To use the Volume Health feature, first make sure the CSI driver you are using supports this feature. Refer to this [CSI drivers doc](https://kubernetes-csi.github.io/docs/drivers.html) to find out which CSI drivers support this feature.
+
+To enable Volume Health Monitoring from the node side, the alpha feature gate `CSIVolumeHealth` needs to be enabled.
+
+If a CSI driver supports the Volume Health Monitoring feature from the controller side, events regarding abnormal volume conditions will be recorded on PVCs.
+
+If a CSI driver supports the Volume Health Monitoring feature from the controller side, user can also get events regarding node failures if the `enable-node-watcher` flag is set to true when deploying the External Health Monitor Controller. When a node failure event is detected, an event will be reported on the PVC to indicate that pods using this PVC are on a failed node.
+
+If a CSI driver supports the Volume Health Monitoring feature from the node side, events regarding abnormal volume conditions will be recorded on pods using the PVCs.
+
+## As a storage vendor, how do I add support for volume health to my CSI driver?
+
+Volume Health Monitoring includes two parts:
+* An External Volume Health Monitoring Controller monitors volume health from the controller side.
+* Kubelet monitors volume health from the node side.
+
+For details, see the [CSI spec](https://github.com/container-storage-interface/spec/blob/master/spec.md) and the [Kubernetes-CSI Driver Developer Guide](https://kubernetes-csi.github.io/docs/volume-health-monitor.html).
+
+There is a sample implementation for volume health in [CSI host path driver](https://github.com/kubernetes-csi/csi-driver-host-path).
+
+### Controller Side Volume Health Monitoring
+
+To learn how to deploy the External Volume Health Monitoring controller, see [CSI external-health-monitor-controller](https://kubernetes-csi.github.io/docs/external-health-monitor-controller.html) in the CSI documentation.
+
+The External Health Monitor Controller calls either `ListVolumes` or `ControllerGetVolume` CSI RPC and reports VolumeConditionAbnormal events with messages on PVCs if abnormal volume conditions are detected. Only CSI drivers with `LIST_VOLUMES` and `VOLUME_CONDITION` controller capability or `GET_VOLUME` and `VOLUME_CONDITION` controller capability support Volume Health Monitoring in the external controller.
+
+To implement the volume health feature from the controller side, a CSI driver **must** add support for the new controller capabilities.
+
+If a CSI driver supports `LIST_VOLUMES` and `VOLUME_CONDITION` controller capabilities, it **must** implement controller RPC `ListVolumes` and report the volume condition in the response.
+
+If a CSI driver supports `GET_VOLUME` and `VOLUME_CONDITION` controller capability, it **must** implement controller PRC `ControllerGetVolume` and report the volume condition in the response.
+
+If a CSI driver supports `LIST_VOLUMES`, `GET_VOLUME`, and `VOLUME_CONDITION` controller capabilities, only `ListVolumes` CSI RPC will be invoked by the External Health Monitor Controller.
+
+### Node Side Volume Health Monitoring
+
+Kubelet calls `NodeGetVolumeStats` CSI RPC and reports VolumeConditionAbnormal events with messages on Pods if abnormal volume conditions are detected. Only CSI drivers with `VOLUME_CONDITION` node capability support Volume Health Monitoring in Kubelet.
+
+To implement the volume health feature from the node side, a CSI driver **must** add support for the new node capabilities.
+
+If a CSI driver supports `VOLUME_CONDITION` node capability, it **must** report the volume condition in node RPC `NodeGetVoumeStats`.
+
+## What’s next?
+
+Depending on feedback and adoption, the Kubernetes team plans to push the CSI volume health implementation to beta in either 1.22 or 1.23.
+
+We are also exploring how to use volume health information for programmatic detection and automatic reconcile in Kubernetes.
+
+## How can I learn more?
+
+To learn the design details for Volume Health Monitoring, read the [Volume Health Monitor](https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/1432-volume-health-monitor) enhancement proposal.
+
+The Volume Health Monitor controller source code is at [https://github.com/kubernetes-csi/external-health-monitor](https://github.com/kubernetes-csi/external-health-monitor).
+
+There are also more details about volume health checks in the [Container Storage Interface Documentation](https://kubernetes-csi.github.io/docs/).
+
+## How do I get involved?
+
+The [Kubernetes Slack channel #csi](https://kubernetes.slack.com/messages/csi) and any of the [standard SIG Storage communication channels](https://github.com/kubernetes/community/blob/master/sig-storage/README.md#contact) are great mediums to reach out to the SIG Storage and the CSI team.
+
+We offer a huge thank you to the contributors who helped release this feature in 1.21. We want to thank Yuquan Ren ([NickrenREN](https://github.com/nickrenren)) who implemented the initial volume health monitor controller and agent in the external health monitor repo, thank Ran Xu ([fengzixu](https://github.com/fengzixu)) who moved the volume health monitoring logic from the external agent to Kubelet in 1.21, and we offer special thanks to the following people for their insightful reviews: David Ashpole ([dashpole](https://github.com/dashpole)), Michelle Au ([msau42](https://github.com/msau42)), David Eads ([deads2k](https://github.com/deads2k)), Elana Hashman ([ehashman](https://github.com/ehashman)), Seth Jennings ([sjenning](https://github.com/sjenning)), and Jiawei Wang ([Jiawei0227](https://github.com/Jiawei0227)).
+
+Those interested in getting involved with the design and development of CSI or any part of the Kubernetes Storage system, join the [Kubernetes Storage Special Interest Group](https://github.com/kubernetes/community/tree/master/sig-storage) (SIG). We’re rapidly growing and always welcome new contributors.

From 9905824cc38c25f49de600f1f74efc6c53da4381 Mon Sep 17 00:00:00 2001
From: yahaa <1477765176@qq.com>
Date: Tue, 13 Apr 2021 10:30:57 +0800
Subject: [PATCH 537/788] fix feature-gates-docs err

---
 .../reference/command-line-tools-reference/feature-gates.md    | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
index f2818820fb..a1024ae7c1 100644
--- a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
@@ -388,17 +388,14 @@ different Kubernetes components.
 | `SupportIPVSProxyMode` | `false` | Beta | 1.9 | 1.9 |
 | `SupportIPVSProxyMode` | `true` | Beta | 1.10 | 1.10 |
 | `SupportIPVSProxyMode` | `true` | GA | 1.11 | - |
-<<<<<<< HEAD
 | `Sysctls` | `true` | Beta | 1.11 | 1.20 |
 | `Sysctls` | `true` | GA | 1.21 | |
-=======
 | `SupportNodePidsLimit` | `false` | Alpha | 1.14 | 1.14 |
 | `SupportNodePidsLimit` | `true` | Beta | 1.15 | 1.19 |
 | `SupportNodePidsLimit` | `true` | GA | 1.20 | - |
 | `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 |
 | `SupportPodPidsLimit` | `true` | Beta | 1.14 | 1.19 |
 | `SupportPodPidsLimit` | `true` | GA | 1.20 | - |
->>>>>>> upstream/master
 | `TaintBasedEvictions` | `false` | Alpha | 1.6 | 1.12 |
 | `TaintBasedEvictions` | `true` | Beta | 1.13 | 1.17 |
 | `TaintBasedEvictions` | `true` | GA | 1.18 | - |

From 280496cd6dbf0d4d17b6165ae1654c449beb8a7d Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Thu, 25 Mar 2021 09:47:58 +0900
Subject: [PATCH 538/788] [ko] Translate generate-ref-docs (partial)

---
 .../contribute/generate-ref-docs/_index.md    |   8 +-
 .../prerequisites-ref-docs.md                 |  22 ++
 .../generate-ref-docs/quickstart.md           | 257 ++++++++++++++++++
 3 files changed, 283 insertions(+), 4 deletions(-)
 create mode 100644 content/ko/docs/contribute/generate-ref-docs/prerequisites-ref-docs.md
 create mode 100644 content/ko/docs/contribute/generate-ref-docs/quickstart.md

diff --git a/content/ko/docs/contribute/generate-ref-docs/_index.md b/content/ko/docs/contribute/generate-ref-docs/_index.md
index 756c509206..ad9d221f15 100644
--- a/content/ko/docs/contribute/generate-ref-docs/_index.md
+++ b/content/ko/docs/contribute/generate-ref-docs/_index.md
@@ -1,11 +1,11 @@
 ---
-title: 참조 문서 개요
+title: 레퍼런스 문서 개요
 main_menu: true
 weight: 80
 ---
 
-이 섹션은 쿠버네티스 참조 가이드를 생성하는 방법에 대해 설명한다.
+이 섹션은 쿠버네티스 레퍼런스 가이드를 생성하는 방법에 대해 설명한다.
 
-참조 문서화 시스템을 빌드하려면, 다음의 가이드를 참고한다.
+레퍼런스 문서를 생성하려면, 다음의 가이드를 참고한다.
 
-* [참조 문서 생성에 대한 퀵스타트 가이드](/docs/contribute/generate-ref-docs/quickstart/)
\ No newline at end of file
+* [레퍼런스 문서 생성에 대한 퀵스타트 가이드](/ko/docs/contribute/generate-ref-docs/quickstart/)
diff --git a/content/ko/docs/contribute/generate-ref-docs/prerequisites-ref-docs.md b/content/ko/docs/contribute/generate-ref-docs/prerequisites-ref-docs.md
new file mode 100644
index 0000000000..b7c77889d8
--- /dev/null
+++ b/content/ko/docs/contribute/generate-ref-docs/prerequisites-ref-docs.md
@@ -0,0 +1,22 @@
+
+### 필요 사항: {#Requirements}
+
+- 리눅스 또는 macOS 로 구동되는 개발 환경이 필요하다.
+
+- 다음의 도구들이 설치되어 있어야 한다.
+
+  - [Python](https://www.python.org/downloads/) v3.7.x
+  - [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)
+  - [Golang](https://golang.org/doc/install) version 1.13+
+  - [Pip](https://pypi.org/project/pip/) (PyYAML 설치에 필요함)
+  - [PyYAML](https://pyyaml.org/) v5.1.2
+  - [make](https://www.gnu.org/software/make/)
+  - [gcc compiler/linker](https://gcc.gnu.org/)
+  - [Docker](https://docs.docker.com/engine/installation/) (`kubectl` 명령어 레퍼런스 업데이트에만 필요함)
+
+- 위에 나열된 도구들 (예: `Go` 바이너리나 `python`) 을 사용할 수 있도록 `PATH` 환경 변수를 알맞게 설정해야 한다.
+
+- GitHub 저장소로 풀 리퀘스트를 생성하는 방법을 알고 있어야 한다. 
+이를 위해 `kubernetes/website` 저장소를 개인 계정으로 포크해야 한다. 
+더 자세한 내용은 [로컬 포크에서 작업하기](/ko/docs/contribute/new-content/open-a-pr/#fork-the-repo)를 참조한다.
+
diff --git a/content/ko/docs/contribute/generate-ref-docs/quickstart.md b/content/ko/docs/contribute/generate-ref-docs/quickstart.md
new file mode 100644
index 0000000000..6e3fbb5263
--- /dev/null
+++ b/content/ko/docs/contribute/generate-ref-docs/quickstart.md
@@ -0,0 +1,257 @@
+---
+title: 퀵스타트 가이드
+content_type: task
+weight: 40
+---
+
+<!-- overview -->
+
+이 문서에서는 `update-imported-docs` 스크립트를 사용하여 
+쿠버네티스 레퍼런스 문서를 생성하는 방법에 대해 설명한다. 
+이 스크립트는 특정 쿠버네티스 릴리스 버전에 대해 빌드 설정을 자동으로 수행하고 레퍼런스 문서를 생성한다.
+
+## {{% heading "prerequisites" %}}
+
+{{< include "prerequisites-ref-docs.md" >}}
+
+<!-- steps -->
+
+## `website` 저장소 클론하기 {#Getting-the-docs-repository}
+
+개인 계정에 있는 포크 버전의 `website` 저장소가 `kubernetes/website` 저장소의 master 브랜치만큼 최신인지 확인한 뒤,
+개인 계정에 있는 포크 버전의 `website` 저장소를 로컬 개발 환경으로 클론한다.
+
+```shell
+mkdir github.com
+cd github.com
+git clone git@github.com:<your_github_username>/website.git
+```
+
+아래에서 사용될 '베이스 디렉터리'를 숙지해야 한다. 예를 들어 위에 안내된 대로 
+저장소를 클론했다면, 베이스 디렉터리는 
+`github.com/website` 가 된다. 이제 이 문서의 나머지 부분에서 `<web-base>` 라는 구문이 나오면 
+이 부분에 당신의 베이스 디렉터리를 대입하면 된다.
+
+{{< note>}}
+만약 쿠버네티스 구성 도구와 API 레퍼런스에 기여하고 싶다면, 
+[업스트림 코드에 기여하기 (영문)](/docs/contribute/generate-ref-docs/contribute-upstream) 를 참조한다.
+{{< /note >}}
+
+## `update-imported-docs` 스크립트 개요 {#Overview-of-update-imported-docs}
+
+`update-imported-docs` 스크립트는 `<web-base>/update-imported-docs/` 
+디렉터리에 존재한다.
+
+이 스크립트는 다음 레퍼런스를 생성한다.
+
+* 구성요소 및 도구 레퍼런스 페이지
+* `kubectl` 명령어 레퍼런스
+* 쿠버네티스 API 레퍼런스
+
+`update-imported-docs` 스크립트는 쿠버네티스 소스코드로부터 레퍼런스 문서를 
+생성한다. 스크립트가 실행되면 개발 머신의 `/tmp` 디렉터리 아래에 임시 디렉터리를 
+생성하고, 이 임시 디렉터리 아래에 레퍼런스 문서 생성에 필요한 `kubernetes/kubernetes` 저장소와 
+`kubernetes-sigs/reference-docs` 저장소를 클론하며, 
+`GOPATH` 환경 변수를 이 임시 디렉터리로 지정한다.
+또한 이 스크립트는 다음의 환경 변수를 설정한다.
+
+* `K8S_RELEASE`
+* `K8S_ROOT`
+* `K8S_WEBROOT`
+
+스크립트가 정상적으로 실행되려면 인자 2개를 전달해야 한다.
+
+* 환경설정 YAML 파일 (`reference.yml`)
+* 쿠버네티스 릴리스 버전 (예: `1.17`)
+
+환경설정 파일은 `generate-command` 라는 필드를 포함하는데,
+이 필드에는 
+`kubernetes-sigs/reference-docs/Makefile` 에 있는 Make 타겟들을 활용하여 빌드하는 일련의 과정이 명시되어 있다.
+`K8S_RELEASE` 환경 변수는 릴리스 버전을 결정한다.
+
+`update-imported-docs` 스크립트는 다음의 과정을 수행한다.
+
+1. 환경설정 파일에 있는 관련 저장소를 클론한다. 
+   레퍼런스 문서 생성을 위해 
+   기본적으로는 `kubernetes-sigs/reference-docs` 저장소를 클론하도록 되어 있다.
+1. 클론한  안에서, 문서 생성에 필요한 사항을 준비하기 위한 명령어를 실행한 뒤, 
+   HTML 파일과 마크다운 파일을 생성한다.
+1. 생성된 HTML 파일과 마크다운 파일을 
+   환경설정 파일에 명시된 규칙에 따라 `<web-base>` 로 복사한다.
+1. `kubectl`.md 에 있는 `kubectl` 명령어 링크들이 
+   `kubectl` 명령어 레퍼런스 페이지의 올바른 섹션으로 연결되도록 업데이트한다.
+
+생성된 파일이 `<web-base>`  아래에 복사되었으면, 
+`kubernetes/website` 저장소로 [풀 리퀘스트를 생성](/ko/docs/contribute/new-content/open-a-pr/)
+할 수 있다.
+
+## 환경설정 파일 형식 {#Configuration-file-format}
+
+각 환경설정 파일은 레퍼런스 생성을 위해 필요한 여러 저장소의 정보를 담을 수 있다. 
+필요한 경우, 환경설정 파일을 직접 수정하여 사용할 수도 있다. 
+또는, 다른 그룹의 문서를 임포트하기 위해 새로운 환경설정 파일을 작성할 수도 있다.
+다음은 환경설정 YAML 파일의 예시이다.
+
+```yaml
+repos:
+- name: community
+  remote: https://github.com/kubernetes/community.git
+  branch: master
+  files:
+  - src: contributors/devel/README.md
+    dst: docs/imported/community/devel.md
+  - src: contributors/guide/README.md
+    dst: docs/imported/community/guide.md
+```
+
+이 도구에 의해 처리될 단일 페이지 마크다운 문서는 
+[문서 스타일 가이드](/docs/contribute/style/style-guide/)의 내용을 만족해야 한다.
+
+## reference.yml 환경설정 파일 다루기 {#Customizing-reference-yml}
+
+`<web-base>/update-imported-docs/reference.yml` 환경설정 파일을 열어 수정할 수 있다.
+레퍼런스 문서 생성을 위해 명령어들이 어떻게 사용되고 있는지 파악하지 못했다면, 
+`generate-command` 필드의 내용은 수정하지 말아야 한다.
+대부분의 경우 `reference.yml` 을 직접 수정해야 할 필요는 없다.
+때때로, 업스트림 소스코드 업데이트 때문에 이 환경설정 파일을 수정해야 할 수도 있다. 
+(예: Golang 버전 의존성, 서드파티 라이브러리 변경 등)
+만약 스크립트 사용 시 빌드 문제가 있다면, 
+[쿠버네티스 슬랙의 #sig-docs 채널](https://kubernetes.slack.com/archives/C1J0BPD2M)에서 SIG-Docs 팀에 문의하면 된다.
+
+{{< note >}}
+`generate-command` 는 특정 저장소로부터 문서를 만들기 위한 
+명령어나 스크립트를 실행하기 위해 사용할 수 있는 선택적 필드이다.
+{{< /note >}}
+
+`reference.yml` 환경설정 파일에서, `files` 필드는 `src` 와 `dst` 필드를 포함한다.
+`src` 필드에는 `kubernetes-sigs/reference-docs` 디렉터리 아래에 있는 생성된 마크다운 파일의 위치를 명시하고,
+`dst` 필드에는 이 파일을 
+`kubernetes/website` 디렉터리 아래의 어느 위치로 복사할지를 명시한다.
+예시는 다음과 같다.
+
+```yaml
+repos:
+- name: reference-docs
+  remote: https://github.com/kubernetes-sigs/reference-docs.git
+  files:
+  - src: gen-compdocs/build/kube-apiserver.md
+    dst: content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
+  ...
+```
+
+만약 하나의 `src` 디렉터리에서 하나의 `dst` 디렉터리로 많은 파일이 복사되어야 한다면, 
+`src` 필드에 와일드카드를 사용할 수 있다.
+이 경우, `dst` 필드에는 단일 파일의 경로가 아니라 디렉터리의 경로를 명시해야 한다.
+예시는 다음과 같다.
+
+```yaml
+  files:
+  - src: gen-compdocs/build/kubeadm*.md
+    dst: content/en/docs/reference/setup-tools/kubeadm/generated/
+```
+
+## `update-imported-docs` 도구 실행하기 {#Running-the-update-imported-docs-tool}
+
+다음과 같이 `update-imported-docs` 도구를 실행할 수 있다.
+
+```shell
+cd <web-base>/update-imported-docs
+./update-imported-docs <configuration-file.yml> <release-version>
+```
+
+예를 들면 다음과 같다.
+
+```shell
+./update-imported-docs reference.yml 1.17
+```
+
+<!-- Revisit: is the release configuration used -->
+## 링크 업데이트하기 {#Fixing-Links}
+
+`release.yml` 환경설정 파일은 상대경로 링크를 수정하는 방법을 포함하고 있다.
+임포트하는 파일 안에 있는 상대경로 링크를 수정하려면, `gen-absolute-links` 필드를 
+`true` 로 명시한다. 이에 대한 예시는 
+[`release.yml`](https://github.com/kubernetes/website/blob/master/update-imported-docs/release.yml) 에서 볼 수 있다.
+
+## `kubernetes/website` 의 변경사항을 커밋하기 {#Adding-and-committing-changes-in-kubernetes-website}
+
+다음의 명령을 실행하여, 스크립트에 의해 생성된 뒤 `<web-base>`  아래에 복사된 파일의 목록을 볼 수 있다.
+
+```shell
+cd <web-base>
+git status
+```
+
+위의 명령을 실행하면 새로 추가된 파일과 수정된 파일의 목록을 볼 수 있다. 
+아래의 결과 예시는 업스트림 소스코드의 변경사항에 따라 다르게 나타날 수 있다.
+
+### 생성된 구성요소 도구 레퍼런스 {#Generated-component-tool-files}
+
+```
+content/en/docs/reference/command-line-tools-reference/cloud-controller-manager.md
+content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
+content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
+content/en/docs/reference/command-line-tools-reference/kube-proxy.md
+content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
+content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm.md
+content/en/docs/reference/kubectl/kubectl.md
+```
+
+### 생성된 kubectl 명령어 레퍼런스 {#Generated-kubectl-command-reference-files}
+
+```
+static/docs/reference/generated/kubectl/kubectl-commands.html
+static/docs/reference/generated/kubectl/navData.js
+static/docs/reference/generated/kubectl/scroll.js
+static/docs/reference/generated/kubectl/stylesheet.css
+static/docs/reference/generated/kubectl/tabvisibility.js
+static/docs/reference/generated/kubectl/node_modules/bootstrap/dist/css/bootstrap.min.css
+static/docs/reference/generated/kubectl/node_modules/highlight.js/styles/default.css
+static/docs/reference/generated/kubectl/node_modules/jquery.scrollto/jquery.scrollTo.min.js
+static/docs/reference/generated/kubectl/node_modules/jquery/dist/jquery.min.js
+static/docs/reference/generated/kubectl/css/font-awesome.min.css
+```
+
+### 생성된 쿠버네티스 API 레퍼런스 와 파일 {#Generated-Kubernetes-API-reference-directories-and-files}
+
+```
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/index.html
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/js/navData.js
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/js/scroll.js
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/js/query.scrollTo.min.js
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/css/font-awesome.min.css
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/css/bootstrap.min.css
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/css/stylesheet.css
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/fonts/FontAwesome.otf
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/fonts/fontawesome-webfont.eot
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/fonts/fontawesome-webfont.svg
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/fonts/fontawesome-webfont.ttf
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/fonts/fontawesome-webfont.woff
+static/docs/reference/generated/kubernetes-api/{{< param "version" >}}/fonts/fontawesome-webfont.woff2
+```
+
+`git add` 와 `git commit` 명령을 실행하여 추가/변경된 파일을 커밋한다.
+
+## 풀 리퀘스트 만들기 {#Creating-a-pull-request}
+
+`kubernetes/website` 저장소에 풀 리퀘스트를 등록한다.
+등록한 풀 리퀘스트를 모니터하고, 리뷰 커멘트가 달리면 그에 대해 대응을 한다. 
+풀 리퀘스트가 머지될 때 까지 계속 모니터한다.
+
+풀 리퀘스트가 머지된 뒤 몇 분이 지나면, 
+변경사항을 
+[쿠버네티스 문서 홈페이지](/docs/home/)에서 확인할 수 있다.
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+수동으로 빌드 저장소를 설정하고 빌드 타겟을 실행하여 개별 레퍼런스 문서를 생성하려면, 
+다음의 가이드를 참고한다.
+
+* [쿠버네티스 구성요소와 도구에 대한 레퍼런스 문서 생성하기](/docs/contribute/generate-ref-docs/kubernetes-components/)
+* [kubectl 명령어에 대한 레퍼런스 문서 생성하기](/docs/contribute/generate-ref-docs/kubectl/)
+* [쿠버네티스 API에 대한 레퍼런스 문서 생성하기](/docs/contribute/generate-ref-docs/kubernetes-api/)
+
+

From 343269000d3f628dab94f956f842ee5d8e0cec91 Mon Sep 17 00:00:00 2001
From: Danni Setiawan <mail@danni.id>
Date: Tue, 13 Apr 2021 17:17:02 +0700
Subject: [PATCH 539/788] Move "Resource Bin Packing" into Scheduling &
 Eviction section

Move ID Docs "Resource Bin Packing" based on #23529
---
 .../resource-bin-packing.md                                      | 0
 static/_redirects                                                | 1 +
 2 files changed, 1 insertion(+)
 rename content/id/docs/concepts/{configuration => scheduling-eviction}/resource-bin-packing.md (100%)

diff --git a/content/id/docs/concepts/configuration/resource-bin-packing.md b/content/id/docs/concepts/scheduling-eviction/resource-bin-packing.md
similarity index 100%
rename from content/id/docs/concepts/configuration/resource-bin-packing.md
rename to content/id/docs/concepts/scheduling-eviction/resource-bin-packing.md
diff --git a/static/_redirects b/static/_redirects
index 9e85a4aa52..673547ce6e 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -104,6 +104,7 @@
 /docs/concepts/configuration/container-command-args/     /docs/tasks/inject-data-application/define-command-argument-container/     301
 /docs/concepts/configuration/manage-compute-resources-container/ /docs/concepts/configuration/manage-resources-containers/ 301
 /docs/concepts/configuration/resource-bin-packing/      /docs/concepts/scheduling-eviction/resource-bin-packing/ 301
+/id/docs/concepts/configuration/resource-bin-packing/      /id/docs/concepts/scheduling-eviction/resource-bin-packing/ 301
 /docs/concepts/configuration/scheduler-perf-tuning/      /docs/concepts/scheduling-eviction/scheduler-perf-tuning/    301
 /docs/concepts/configuration/scheduling-framework/     /docs/concepts/scheduling-eviction/scheduling-framework/    301
 /docs/concepts/configuration/taint-and-toleration/     /docs/concepts/scheduling-eviction/taint-and-toleration/ 301

From af5a179182a7f20dcce14ac55dfdc48c26b0d262 Mon Sep 17 00:00:00 2001
From: Danni Setiawan <mail@danni.id>
Date: Tue, 13 Apr 2021 17:55:48 +0700
Subject: [PATCH 540/788] Rename ID Docs "Scheduling: concept as "Scheduling
 and Eviction"

* Rename `docs/concepts/scheduling` to `docs/concepts/scheduling-eviction`
* Retitle concept header to "Penjadwalan dan Pengusiran"
* Update redirects
* Update internal links (id only)

Part of proposal #19081
---
 content/id/docs/concepts/architecture/controller.md          | 2 +-
 content/id/docs/concepts/scheduling-eviction/_index.md       | 5 +++++
 .../id/docs/concepts/scheduling-eviction/kube-scheduler.md   | 2 +-
 .../scheduler-perf-tuning.md                                 | 4 ++--
 .../scheduling-framework.md                                  | 0
 content/id/docs/concepts/scheduling/_index.md                | 5 -----
 static/_redirects                                            | 5 +++++
 7 files changed, 14 insertions(+), 9 deletions(-)
 create mode 100644 content/id/docs/concepts/scheduling-eviction/_index.md
 rename content/id/docs/concepts/{scheduling => scheduling-eviction}/scheduler-perf-tuning.md (97%)
 rename content/id/docs/concepts/{scheduling => scheduling-eviction}/scheduling-framework.md (100%)
 delete mode 100644 content/id/docs/concepts/scheduling/_index.md

diff --git a/content/id/docs/concepts/architecture/controller.md b/content/id/docs/concepts/architecture/controller.md
index bff7130eb7..096dd75085 100644
--- a/content/id/docs/concepts/architecture/controller.md
+++ b/content/id/docs/concepts/architecture/controller.md
@@ -60,7 +60,7 @@ Job adalah sumber daya dalam Kubernetes yang menjalankan a
 {{< glossary_tooltip term_id="pod" >}}, atau mungkin beberapa Pod sekaligus, 
 untuk melakukan sebuah pekerjaan dan kemudian berhenti.
 
-(Setelah [dijadwalkan](../../../../en/docs/concepts/scheduling/), objek Pod 
+(Setelah [dijadwalkan](../../../../en/docs/concepts/scheduling-eviction/), objek Pod 
 akan menjadi bagian dari keadaan yang diinginkan oleh kubelet).
 
 Ketika _controller job_ melihat tugas baru, maka _controller_ itu memastikan bahwa, 
diff --git a/content/id/docs/concepts/scheduling-eviction/_index.md b/content/id/docs/concepts/scheduling-eviction/_index.md
new file mode 100644
index 0000000000..0d080ed79d
--- /dev/null
+++ b/content/id/docs/concepts/scheduling-eviction/_index.md
@@ -0,0 +1,5 @@
+---
+title: "Penjadwalan dan Pengusiran"
+weight: 90
+---
+
diff --git a/content/id/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/id/docs/concepts/scheduling-eviction/kube-scheduler.md
index 6f7efab3d9..f55b1d942d 100644
--- a/content/id/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/id/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -94,7 +94,7 @@ penilaian oleh penjadwal:
 
 ## {{% heading "whatsnext" %}}
 
-* Baca tentang [penyetelan performa penjadwal](/id/docs/concepts/scheduling/scheduler-perf-tuning/)
+* Baca tentang [penyetelan performa penjadwal](/id/docs/concepts/scheduling-eviction/scheduler-perf-tuning/)
 * Baca tentang [pertimbangan penyebarang topologi pod](/id/docs/concepts/workloads/pods/pod-topology-spread-constraints/)
 * Baca [referensi dokumentasi](/docs/reference/command-line-tools-reference/kube-scheduler/) untuk _kube-scheduler_
 * Pelajari tentang [mengkonfigurasi beberapa penjadwal](/docs/tasks/administer-cluster/configure-multiple-schedulers/)
diff --git a/content/id/docs/concepts/scheduling/scheduler-perf-tuning.md b/content/id/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
similarity index 97%
rename from content/id/docs/concepts/scheduling/scheduler-perf-tuning.md
rename to content/id/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index 3689ecf7cb..3e94be5432 100644
--- a/content/id/docs/concepts/scheduling/scheduler-perf-tuning.md
+++ b/content/id/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -8,7 +8,7 @@ weight: 70
 
 {{< feature-state for_k8s_version="v1.14" state="beta" >}}
 
-[kube-scheduler](/id/docs/concepts/scheduling/kube-scheduler/#kube-scheduler)
+[kube-scheduler](/id/docs/concepts/scheduling-eviction/kube-scheduler/#kube-scheduler)
 merupakan penjadwal (_scheduler_) Kubernetes bawaan yang bertanggung jawab
 terhadap penempatan Pod-Pod pada seluruh Node di dalam sebuah klaster.
 
@@ -66,7 +66,7 @@ Kamu bisa mengatur ambang batas untuk menentukan berapa banyak jumlah Node minim
 persentase bagian dari seluruh Node di dalam klaster kamu. kube-scheduler akan mengubahnya menjadi
 bilangan bulat berisi jumlah Node. Saat penjadwalan, jika kube-scheduler mengidentifikasi
 cukup banyak Node-Node layak untuk melewati jumlah persentase yang diatur, maka kube-scheduler
-akan berhenti mencari Node-Node layak dan lanjut ke [fase penskoran] (/id/docs/concepts/scheduling/kube-scheduler/#kube-scheduler-implementation).
+akan berhenti mencari Node-Node layak dan lanjut ke [fase penskoran] (/id/docs/concepts/scheduling-eviction/kube-scheduler/#kube-scheduler-implementation).
 
 [Bagaimana penjadwal mengecek Node](#bagaimana-penjadwal-mengecek-node) menjelaskan proses ini secara detail.
 
diff --git a/content/id/docs/concepts/scheduling/scheduling-framework.md b/content/id/docs/concepts/scheduling-eviction/scheduling-framework.md
similarity index 100%
rename from content/id/docs/concepts/scheduling/scheduling-framework.md
rename to content/id/docs/concepts/scheduling-eviction/scheduling-framework.md
diff --git a/content/id/docs/concepts/scheduling/_index.md b/content/id/docs/concepts/scheduling/_index.md
deleted file mode 100644
index 8903577124..0000000000
--- a/content/id/docs/concepts/scheduling/_index.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: "Penjadwalan"
-weight: 90
----
-
diff --git a/static/_redirects b/static/_redirects
index 9e85a4aa52..84f16821dc 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -105,7 +105,9 @@
 /docs/concepts/configuration/manage-compute-resources-container/ /docs/concepts/configuration/manage-resources-containers/ 301
 /docs/concepts/configuration/resource-bin-packing/      /docs/concepts/scheduling-eviction/resource-bin-packing/ 301
 /docs/concepts/configuration/scheduler-perf-tuning/      /docs/concepts/scheduling-eviction/scheduler-perf-tuning/    301
+/id/docs/concepts/configuration/scheduler-perf-tuning/      /id/docs/concepts/scheduling-eviction/scheduler-perf-tuning/    301
 /docs/concepts/configuration/scheduling-framework/     /docs/concepts/scheduling-eviction/scheduling-framework/    301
+/id/docs/concepts/configuration/scheduling-framework/     /id/docs/concepts/scheduling-eviction/scheduling-framework/    301
 /docs/concepts/configuration/taint-and-toleration/     /docs/concepts/scheduling-eviction/taint-and-toleration/ 301
 /id/docs/concepts/configuration/taint-and-toleration/     /id/docs/concepts/scheduling-eviction/taint-and-toleration/ 301
 /docs/concepts/extend-kubernetes/extend-cluster/      /docs/concepts/extend-kubernetes/ 301
@@ -118,8 +120,11 @@
 /docs/concepts/policy/container-capabilities/     /docs/tasks/configure-pod-container/security-context/#set-capabilities-for-a-container/ 301
 /docs/concepts/policy/security-context/     /docs/tasks/configure-pod-container/security-context/ 301
 /docs/concepts/scheduling/kube-scheduler/     /docs/concepts/scheduling-eviction/kube-scheduler/ 301
+/id/docs/concepts/scheduling/kube-scheduler/     /id/docs/concepts/scheduling-eviction/kube-scheduler/ 301
 /docs/concepts/scheduling/scheduler-perf-tuning/     /docs/concepts/scheduling-eviction/scheduler-perf-tuning/ 301
+/id/docs/concepts/scheduling/scheduler-perf-tuning/     /id/docs/concepts/scheduling-eviction/scheduler-perf-tuning/ 301
 /docs/concepts/scheduling/scheduling-framework/     /docs/concepts/scheduling-eviction/scheduling-framework/ 301
+/id/docs/concepts/scheduling/scheduling-framework/     /id/docs/concepts/scheduling-eviction/scheduling-framework/ 301
 /docs/concepts/service-catalog/     /docs/concepts/extend-kubernetes/service-catalog/ 301
 /docs/concepts/services-networking/networkpolicies/     /docs/concepts/services-networking/network-policies/ 301
 /docs/concepts/storage/etcd-store-api-object/     /docs/tasks/administer-cluster/configure-upgrade-etcd/ 301

From f0d53f9f793f40504e0ca342d8c6f058ec5d0d8f Mon Sep 17 00:00:00 2001
From: Rebecca <me@rebeccapruim.com>
Date: Tue, 13 Apr 2021 05:46:50 -0700
Subject: [PATCH 541/788] Update macOS installation instructions (#27512)

* Update macOS installation instructions

* Add tabs to example

* tabs render weird in infoboxes
---
 .../docs/tasks/tools/install-kubectl-macos.md | 32 ++++++++++++++-----
 1 file changed, 24 insertions(+), 8 deletions(-)

diff --git a/content/en/docs/tasks/tools/install-kubectl-macos.md b/content/en/docs/tasks/tools/install-kubectl-macos.md
index b4fa864985..43a9f15dd5 100644
--- a/content/en/docs/tasks/tools/install-kubectl-macos.md
+++ b/content/en/docs/tasks/tools/install-kubectl-macos.md
@@ -29,17 +29,28 @@ The following methods exist for installing kubectl on macOS:
 
 1. Download the latest release:
 
-   ```bash
+   {{< tabs name="download_binary_macos" >}}
+   {{< tab name="Intel" codelang="bash" >}}
    curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl"
-   ```
+   {{< /tab >}}
+   {{< tab name="Apple Silicon" codelang="bash" >}}
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/arm64/kubectl"
+   {{< /tab >}}
+   {{< /tabs >}}
 
    {{< note >}}
    To download a specific version, replace the `$(curl -L -s https://dl.k8s.io/release/stable.txt)` portion of the command with the specific version.
 
-   For example, to download version {{< param "fullversion" >}} on macOS, type:
+   For example, to download version {{< param "fullversion" >}} on Intel macOS, type:
 
    ```bash
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
+   curl -LO "https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl"
+   ```
+
+   And for macOS on Apple Silicon, type:
+
+   ```bash
+   curl -LO "https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/arm64/kubectl"
    ```
 
    {{< /note >}}
@@ -48,10 +59,15 @@ The following methods exist for installing kubectl on macOS:
 
    Download the kubectl checksum file:
 
-   ```bash
-   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
-   ```
-
+   {{< tabs name="download_checksum_macos" >}}
+   {{< tab name="Intel" codelang="bash" >}}
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
+   {{< /tab >}}
+   {{< tab name="Apple Silicon" codelang="bash" >}}
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/arm64/kubectl.sha256"
+   {{< /tab >}}
+   {{< /tabs >}}
+  
    Validate the kubectl binary against the checksum file:
 
    ```bash

From 8f0424d057ae047a9bae16b750524b9cdd204865 Mon Sep 17 00:00:00 2001
From: Patrick Ohly <patrick.ohly@intel.com>
Date: Tue, 13 Apr 2021 15:20:50 +0200
Subject: [PATCH 542/788] blog: local storage features go beta (#27240)

* blog: local storage features go beta

* Apply link and wording fixes

Co-authored-by: Mike Petersen <mpetason@gmail.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Bob Killen <killen.bob@gmail.com>
Co-authored-by: Mike Petersen <mpetason@gmail.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 ...21-04-14-local-storage-features-go-beta.md | 216 ++++++++++++++++++
 1 file changed, 216 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-14-local-storage-features-go-beta.md

diff --git a/content/en/blog/_posts/2021-04-14-local-storage-features-go-beta.md b/content/en/blog/_posts/2021-04-14-local-storage-features-go-beta.md
new file mode 100644
index 0000000000..457e9238f3
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-14-local-storage-features-go-beta.md
@@ -0,0 +1,216 @@
+---
+layout: blog
+title: "Local Storage: Storage Capacity Tracking, Distributed Provisioning and Generic Ephemeral Volumes hit Beta"
+date: 2021-04-14
+slug: local-storage-features-go-beta
+---
+
+ **Authors:** Patrick Ohly (Intel)
+
+The ["generic ephemeral
+volumes"](/docs/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes)
+and ["storage capacity
+tracking"](/docs/concepts/storage/storage-capacity/)
+features in Kubernetes are getting promoted to beta in Kubernetes
+1.21. Together with the [distributed provisioning
+support](https://github.com/kubernetes-csi/external-provisioner#deployment-on-each-node)
+in the CSI external-provisioner, development and deployment of
+Container Storage Interface (CSI) drivers which manage storage locally
+on a node become a lot easier.
+
+This blog post explains how such drivers worked before and how these
+features can be used to make drivers simpler.
+
+## Problems we are solving
+
+There are drivers for local storage, like
+[TopoLVM](https://github.com/cybozu-go/topolvm) for traditional disks
+and [PMEM-CSI](https://intel.github.io/pmem-csi/latest/README.html)
+for [persistent memory](https://pmem.io/). They work and are ready for
+usage today also on older Kubernetes releases, but making that possible
+was not trivial.
+
+### Central component required
+
+The first problem is volume provisioning: it is handled through the
+Kubernetes control plane. Some component must react to
+[PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)
+(PVCs)
+and create volumes. Usually, that is handled by a central deployment
+of the [CSI
+external-provisioner](https://kubernetes-csi.github.io/docs/external-provisioner.html)
+and a CSI driver component that then connects to the storage
+backplane. But for local storage, there is no such backplane.
+
+TopoLVM solved this by having its different components communicate
+with each other through the Kubernetes API server by creating and
+reacting to custom resources. So although TopoLVM is based on CSI, a
+standard that is independent of a particular container orchestrator,
+TopoLVM only works on Kubernetes.
+
+PMEM-CSI created its own storage backplane with communication through
+gRPC calls. Securing that communication depends on TLS certificates,
+which made driver deployment more complicated.
+
+### Informing Pod scheduler about capacity
+
+The next problem is scheduling. When volumes get created independently
+of pods ("immediate binding"), the CSI driver must pick a node without
+knowing anything about the pod(s) that are going to use it. Topology
+information then forces those pods to run on the node where the volume
+was created. If other resources like RAM or CPU are exhausted there,
+the pod cannot start. This can be avoided by configuring in the
+StorageClass that volume creation is meant to wait for the first pod
+that uses a volume (`volumeBinding: WaitForFirstConsumer`). In that
+mode, the Kubernetes scheduler tentatively picks a node based on other
+constraints and then the external-provisioner is asked to create a
+volume such that it is usable there. If local storage is exhausted,
+the provisioner [can
+ask](https://github.com/kubernetes-csi/external-provisioner/blob/master/doc/design.md)
+for another scheduling round. But without information about available
+capacity, the scheduler might always pick the same unsuitable node.
+
+Both TopoLVM and PMEM-CSI solved this with scheduler extenders. This
+works, but it is hard to configure when deploying the driver because
+communication between kube-scheduler and the driver is very dependent
+on how the cluster was set up.
+
+### Rescheduling
+
+A common use case for local storage is scratch space. A better fit for
+that use case than persistent volumes are ephemeral volumes that get
+created for a pod and destroyed together with it. The initial API for
+supporting ephemeral volumes with CSI drivers (hence called ["*CSI*
+ephemeral
+volumes"](/docs/concepts/storage/ephemeral-volumes/#csi-ephemeral-volumes))
+was [designed for light-weight
+volumes](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/20190122-csi-inline-volumes.md)
+where volume creation is unlikely to fail. Volume creation happens
+after pods have been permanently scheduled onto a node, in contrast to
+the traditional provisioning where volume creation is tried before
+scheduling a pod onto a node. CSI drivers must be modified to support
+"CSI ephemeral volumes", which was done for TopoLVM and PMEM-CSI. But
+due to the design of the feature in Kubernetes, pods can get stuck
+permanently if storage capacity runs out on a node. The scheduler
+extenders try to avoid that, but cannot be 100% reliable.
+
+## Enhancements in Kubernetes 1.21
+
+### Distributed provisioning
+
+Starting with [external-provisioner
+v2.1.0](https://github.com/kubernetes-csi/external-provisioner/releases/tag/v2.1.0),
+released for Kubernetes 1.20, provisioning can be handled by
+external-provisioner instances that get [deployed together with the
+CSI driver on each
+node](https://github.com/kubernetes-csi/external-provisioner#deployment-on-each-node)
+and then cooperate to provision volumes ("distributed
+provisioning"). There is no need any more to have a central component
+and thus no need for communication between nodes, at least not for
+provisioning.
+
+### Storage capacity tracking
+
+A scheduler extender still needs some way to find out about capacity
+on each node. When PMEM-CSI switched to distributed provisioning in
+v0.9.0, this was done by querying the metrics data exposed by the
+local driver containers. But it is better also for users to eliminate
+the need for a scheduler extender completely because the driver
+deployment becomes simpler. [Storage capacity
+tracking](/docs/concepts/storage/storage-capacity/), [introduced in
+1.19](/blog/2020/09/01/ephemeral-volumes-with-storage-capacity-tracking/)
+and promoted to beta in Kubernetes 1.21, achieves that. It works by
+publishing information about capacity in `CSIStorageCapacity`
+objects. The scheduler itself then uses that information to filter out
+unsuitable nodes. Because information might be not quite up-to-date,
+pods may still get assigned to nodes with insufficient storage, it's
+just less likely and the next scheduling attempt for a pod should work
+better once the information got refreshed.
+
+### Generic ephemeral volumes
+
+So CSI drivers still need the ability to recover from a bad scheduling
+decision, something that turned out to be impossible to implement for
+"CSI ephemeral volumes". ["*Generic* ephemeral
+volumes"](/docs/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes),
+another feature that got promoted to beta in 1.21, don't have that
+limitation. This feature adds a controller that will create and manage
+PVCs with the lifetime of the Pod and therefore the normal recovery
+mechanism also works for them. Existing storage drivers will be able
+to process these PVCs without any new logic to handle this new
+scenario.
+
+## Known limitations
+
+Both generic ephemeral volumes and storage capacity tracking increase
+the load on the API server. Whether that is a problem depends a lot on
+the kind of workload, in particular how many pods have volumes and how
+often those need to be created and destroyed.
+
+No attempt was made to model how scheduling decisions affect storage
+capacity. That's because the effect can vary considerably depending on
+how the storage system handles storage. The effect is that multiple
+pods with unbound volumes might get assigned to the same node even
+though there is only sufficient capacity for one pod. Scheduling
+should recover, but it would be more efficient if the scheduler knew
+more about storage.
+
+Because storage capacity gets published by a running CSI driver and
+the cluster autoscaler needs information about a node that hasn't been
+created yet, it will currently not scale up a cluster for pods that
+need volumes. There is an [idea how to provide that
+information](https://github.com/kubernetes/autoscaler/pull/3887), but
+more work is needed in that area.
+
+Distributed snapshotting and resizing are not currently supported. It
+should be doable to adapt the respective sidecar and there are
+tracking issues for external-snapshotter and external-resizer open
+already, they just need some volunteer.
+
+The recovery from a bad scheduling decising can fail for pods with
+multiple volumes, in particular when those volumes are local to nodes:
+if one volume can be created and then storage is insufficient for
+another volume, the first volume continues to exist and forces the
+scheduler to put the pod onto the node of that volume. There is an
+idea how do deal with this, [rolling back the provision of the
+volume](https://github.com/kubernetes/enhancements/pull/1703), but
+this is only in the very early stages of brainstorming and not even a
+merged KEP yet. For now it is better to avoid creating pods with more
+than one persistent volume.
+
+## Enabling the new features and next steps
+
+With the feature entering beta in the 1.21 release, no additional actions are needed to enable it. Generic
+ephemeral volumes also work without changes in CSI drivers. For more
+information, see the
+[documentation](/docs/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes)
+and the [previous blog
+post](/blog/2020/09/01/ephemeral-volumes-with-storage-capacity-tracking/)
+about it. The API has not changed at all between alpha and beta.
+
+For the other two features, the external-provisioner documentation
+explains how CSI driver developers must change how their driver gets
+deployed to support [storage capacity
+tracking](https://github.com/kubernetes-csi/external-provisioner#capacity-support)
+and [distributed
+provisioning](https://github.com/kubernetes-csi/external-provisioner#deployment-on-each-node).
+These two features are independent, therefore it is okay to enable
+only one of them.
+
+[SIG
+Storage](https://github.com/kubernetes/community/tree/master/sig-storage)
+would like to hear from you if you are using these new features. We
+can be reached through
+[email](https://groups.google.com/forum/#!forum/kubernetes-sig-storage),
+[Slack](https://slack.k8s.io/) (channel [`#sig-storage`](https://kubernetes.slack.com/messages/sig-storage)) and in the
+[regular SIG
+meeting](https://github.com/kubernetes/community/tree/master/sig-storage#meeting).
+A description of your workload would be very useful to validate design
+decisions, set up performance tests and eventually promote these
+features to GA.
+
+## Acknowledgements
+
+Thanks a lot to the members of the community who have contributed to these
+features or given feedback including members of SIG Scheduling, SIG Auth,
+and of course SIG Storage!

From bb6faa16a6fff477315b667232be7107e83c1e17 Mon Sep 17 00:00:00 2001
From: Maciej Filocha <maciej.filocha@gmail.com>
Date: Tue, 13 Apr 2021 10:40:57 +0200
Subject: [PATCH 543/788] Udate Polish localization of README.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Synchronize Polish localization of the main README file up to 1eddc8bfedfbf9e9253600f36789333281f515a6.

Co-authored-by: Karol Pucyński <9209870+kpucynski@users.noreply.github.com>
---
 README-pl.md | 160 +++++++++++++++++++++++++++++++++++----------------
 1 file changed, 111 insertions(+), 49 deletions(-)

diff --git a/README-pl.md b/README-pl.md
index 7d89d518cb..cff5df065b 100644
--- a/README-pl.md
+++ b/README-pl.md
@@ -1,60 +1,45 @@
 # Dokumentacja projektu Kubernetes
 
-[![Build Status](https://api.travis-ci.org/kubernetes/website.svg?branch=master)](https://travis-ci.org/kubernetes/website)
-[![GitHub release](https://img.shields.io/github/release/kubernetes/website.svg)](https://github.com/kubernetes/website/releases/latest)
-
-Witamy!
+[![Netlify Status](https://api.netlify.com/api/v1/badges/be93b718-a6df-402a-b4a4-855ba186c97d/deploy-status)](https://app.netlify.com/sites/kubernetes-io-master-staging/deploys) [![GitHub release](https://img.shields.io/github/release/kubernetes/website.svg)](https://github.com/kubernetes/website/releases/latest)
 
 W tym repozytorium znajdziesz wszystko, czego potrzebujesz do zbudowania [strony internetowej Kubernetesa wraz z dokumentacją](https://kubernetes.io/). Bardzo nam miło, że chcesz wziąć udział w jej współtworzeniu!
 
-## Twój wkład w dokumentację
++ [Twój wkład w dokumentację](#twój-wkład-w-dokumentację)
++ [Informacje o wersjach językowych](#informacje-o-wersjach-językowych)
 
-Możesz kliknąć w przycisk **Fork** w prawym górnym rogu ekranu, aby stworzyć kopię tego repozytorium na swoim koncie GitHub. Taki rodzaj kopii (odgałęzienia) nazywa się *fork*. Zmieniaj w nim, co chcesz, a kiedy będziesz już gotowy/a przesłać te zmiany do nas, przejdź do swojej kopii i stwórz nowy *pull request*, abyśmy zostali o tym poinformowani.
+# Jak używać tego repozytorium
 
-Po stworzeniu *pull request*, jeden z recenzentów projektu Kubernetes podejmie się przekazania jasnych wskazówek pozwalających podjąć następne działania. Na Tobie, jako właścicielu *pull requesta*, **spoczywa odpowiedzialność za wprowadzenie poprawek zgodnie z uwagami recenzenta.** Może też się zdarzyć, że swoje uwagi zgłosi więcej niż jeden recenzent, lub że recenzję będzie robił ktoś inny, niż ten, kto został przydzielony na początku. W niektórych przypadkach, jeśli zajdzie taka potrzeba, recenzent może poprosić dodatkowo o recenzję jednego z [recenzentów technicznych](https://github.com/kubernetes/website/wiki/Tech-reviewers). Recenzenci zrobią wszystko, aby odpowiedzieć sprawnie, ale konkretny czas odpowiedzi zależy od wielu czynników.
+Możesz uruchomić serwis lokalnie poprzez Hugo (Extended version) lub ze środowiska kontenerowego. Zdecydowanie zalecamy korzystanie z kontenerów, bo dzięki temu lokalna wersja będzie spójna z tym, co jest na oficjalnej stronie.
 
-Więcej informacji na temat współpracy przy tworzeniu dokumentacji znajdziesz na stronach:
+## Wymagania wstępne
 
-* [Jak rozpocząć współpracę](https://kubernetes.io/docs/contribute/start/)
-* [Podgląd wprowadzanych zmian w dokumentacji](http://kubernetes.io/docs/contribute/intermediate#view-your-changes-locally)
-* [Szablony stron](https://kubernetes.io/docs/contribute/style/page-content-types/)
-* [Styl pisania dokumentacji](http://kubernetes.io/docs/contribute/style/style-guide/)
-* [Lokalizacja dokumentacji Kubernetes](https://kubernetes.io/docs/contribute/localization/)
+Aby móc skorzystać z tego repozytorium, musisz lokalnie zainstalować:
 
-## Różne wersje językowe `README.md`
+- [npm](https://www.npmjs.com/)
+- [Go](https://golang.org/)
+- [Hugo (Extended version)](https://gohugo.io/)
+- Środowisko obsługi kontenerów, np. [Docker-a](https://www.docker.com/).
 
-|                                        |                                        |
-|----------------------------------------|----------------------------------------|
-| [README po angielsku](README.md)       | [README po francusku](README-fr.md)    |
-| [README po koreańsku](README-ko.md)    | [README po niemiecku](README-de.md)    |
-| [README po portugalsku](README-pt.md)  | [README w hindi](README-hi.md)        |
-| [README po hiszpańsku](README-es.md)   | [README po indonezyjsku](README-id.md) |
-| [README po chińsku](README-zh.md)      | [README po japońsku](README-ja.md)     |
-| [README po wietnamsku](README-vi.md)   | [README po rosyjsku](README-ru.md)     |
-| [README po włosku](README-it.md)       | [README po ukraińsku](README-uk.md)    |
-|                                        |                                        |
+Przed rozpoczęciem zainstaluj niezbędne zależności. Sklonuj repozytorium i przejdź do odpowiedniego katalogu:
 
-## Jak uruchomić lokalną kopię strony przy pomocy Dockera?
-
-Zalecaną metodą uruchomienia serwisu internetowego Kubernetesa lokalnie jest użycie specjalnego obrazu [Dockera](https://docker.com), który zawiera generator stron statycznych [Hugo](https://gohugo.io).
-
-> Użytkownicy Windows będą potrzebowali dodatkowych narzędzi, które mogą zainstalować przy pomocy [Chocolatey](https://chocolatey.org).
-
-```bash
-choco install make
+```
+git clone https://github.com/kubernetes/website.git
+cd website
 ```
 
-> Jeśli wolisz uruchomić serwis lokalnie bez Dockera, przeczytaj [jak uruchomić serwis lokalnie przy pomocy Hugo](#jak-uruchomić-lokalną-kopię-strony-przy-pomocy-hugo) poniżej.
+Strona Kubernetesa używa [Docsy Hugo theme](https://github.com/google/docsy#readme). Nawet jeśli planujesz uruchomić serwis w środowisku kontenerowym, zalecamy pobranie podmodułów i innych zależności za pomocą polecenia:
 
-Jeśli [zainstalowałeś i uruchomiłeś](https://www.docker.com/get-started) już Dockera, zbuduj obraz `kubernetes-hugo` lokalnie:
+```
+# pull in the Docsy submodule
+git submodule update --init --recursive --depth 1
+```
 
-```bash
+## Uruchomienie serwisu w kontenerze
+
+Aby zbudować i uruchomić serwis wewnątrz środowiska kontenerowego, wykonaj następujące polecenia:
+
+```
 make container-image
-```
-
-Po zbudowaniu obrazu, możesz uruchomić serwis lokalnie:
-
-```bash
 make container-serve
 ```
 
@@ -62,29 +47,106 @@ Aby obejrzeć zawartość serwisu otwórz w przeglądarce adres http://localhost
 
 ## Jak uruchomić lokalną kopię strony przy pomocy Hugo?
 
-Zajrzyj do [oficjalnej dokumentacji Hugo](https://gohugo.io/getting-started/installing/) po instrukcję instalacji. Upewnij się, że instalujesz rozszerzoną wersję Hugo, określoną przez zmienną środowiskową `HUGO_VERSION` w pliku [`netlify.toml`](netlify.toml#L9).
+Upewnij się, że zainstalowałeś odpowiednią wersję Hugo "extended", określoną przez zmienną środowiskową `HUGO_VERSION` w pliku [`netlify.toml`](netlify.toml#L10).
 
-Aby uruchomić serwis lokalnie po instalacji Hugo, napisz:
+Aby uruchomić i przetestować serwis lokalnie, wykonaj:
 
 ```bash
+# install dependencies
+npm ci
 make serve
 ```
 
 Zostanie uruchomiony lokalny serwer Hugo na porcie 1313. Otwórz w przeglądarce adres http://localhost:1313, aby obejrzeć zawartość serwisu. Po każdej zmianie plików źródłowych, Hugo automatycznie aktualizuje stronę i odświeża jej widok w przeglądarce.
 
-## Społeczność, listy dyskusyjne, uczestnictwo i wsparcie
+## Budowanie dokumentacji źródłowej API
 
-Zajrzyj na stronę [społeczności](http://kubernetes.io/community/), aby dowiedzieć się, jak możesz zaangażować się w jej działania.
+Budowanie dokumentacji źródłowej API zostało opisane w [angielskiej wersji pliku README.md](README.md#building-the-api-reference-pages).
+
+## Rozwiązywanie problemów
+### error: failed to transform resource: TOCSS: failed to transform "scss/main.scss" (text/x-scss): this feature is not available in your current Hugo version
+
+Z przyczyn technicznych, Hugo jest rozprowadzany w dwóch wersjach. Aktualny serwis używa tylko wersji **Hugo Extended**. Na stronie z [wydaniami](https://github.com/gohugoio/hugo/releases) poszukaj archiwum z `extended` w nazwie. Dla potwierdzenia, uruchom `hugo version` i poszukaj słowa `extended`.
+
+### Błąd w środowisku macOS: "too many open files"
+
+Jeśli po uruchomieniu `make serve` na macOS widzisz następujący błąd:
+
+```
+ERROR 2020/08/01 19:09:18 Error: listen tcp 127.0.0.1:1313: socket: too many open files
+make: *** [serve] Error 1
+```
+
+sprawdź aktualny limit otwartych plików:
+
+`launchctl limit maxfiles`
+
+Uruchom następujące polecenia: (na podstawie https://gist.github.com/tombigel/d503800a282fcadbee14b537735d202c):
+
+```shell
+#!/bin/sh
+
+# These are the original gist links, linking to my gists now.
+# curl -O https://gist.githubusercontent.com/a2ikm/761c2ab02b7b3935679e55af5d81786a/raw/ab644cb92f216c019a2f032bbf25e258b01d87f9/limit.maxfiles.plist
+# curl -O https://gist.githubusercontent.com/a2ikm/761c2ab02b7b3935679e55af5d81786a/raw/ab644cb92f216c019a2f032bbf25e258b01d87f9/limit.maxproc.plist
+
+curl -O https://gist.githubusercontent.com/tombigel/d503800a282fcadbee14b537735d202c/raw/ed73cacf82906fdde59976a0c8248cce8b44f906/limit.maxfiles.plist
+curl -O https://gist.githubusercontent.com/tombigel/d503800a282fcadbee14b537735d202c/raw/ed73cacf82906fdde59976a0c8248cce8b44f906/limit.maxproc.plist
+
+sudo mv limit.maxfiles.plist /Library/LaunchDaemons
+sudo mv limit.maxproc.plist /Library/LaunchDaemons
+
+sudo chown root:wheel /Library/LaunchDaemons/limit.maxfiles.plist
+sudo chown root:wheel /Library/LaunchDaemons/limit.maxproc.plist
+
+sudo launchctl load -w /Library/LaunchDaemons/limit.maxfiles.plist
+```
+
+Przedstawiony sposób powinien działać dla MacOS w wersji Catalina i Mojave.
+
+
+# Zaangażowanie w prace SIG Docs
+
+O społeczności SIG Docs i terminach spotkań dowiesz z [jej strony](https://github.com/kubernetes/community/tree/master/sig-docs#meetings).
 
 Możesz kontaktować się z gospodarzami projektu za pomocą:
 
-* [Komunikatora Slack](https://kubernetes.slack.com/messages/sig-docs)
-* [List dyskusyjnych](https://groups.google.com/forum/#!forum/kubernetes-sig-docs)
+- [Komunikatora Slack](https://kubernetes.slack.com/messages/sig-docs) [Tutaj możesz dostać zaproszenie do tej grupy Slack-a](https://slack.k8s.io/)
+- [List dyskusyjnych](https://groups.google.com/forum/#!forum/kubernetes-sig-docs)
 
-### Zasady postępowania
+# Twój wkład w dokumentację
 
-Udział w działaniach społeczności Kubernetes jest regulowany przez [Kodeks postępowania](code-of-conduct.md).
+Możesz kliknąć w przycisk **Fork** w prawym górnym rogu ekranu, aby stworzyć kopię tego repozytorium na swoim koncie GitHub. Taki rodzaj kopii (odgałęzienia) nazywa się *fork*. Zmieniaj w nim, co chcesz, a kiedy będziesz już gotowy/a przesłać te zmiany do nas, przejdź do swojej kopii i stwórz nowy *pull request*, abyśmy zostali o tym poinformowani.
 
-## Dziękujemy!
+Po stworzeniu *pull request*, jeden z recenzentów projektu Kubernetes podejmie się przekazania jasnych wskazówek pozwalających podjąć następne działania. Na Tobie, jako właścicielu *pull requesta*, **spoczywa odpowiedzialność za wprowadzenie poprawek zgodnie z uwagami recenzenta.** 
+
+Może też się zdarzyć, że swoje uwagi zgłosi więcej niż jeden recenzent, lub że recenzję będzie robił ktoś inny, niż ten, kto został przydzielony na początku.
+
+W niektórych przypadkach, jeśli zajdzie taka potrzeba, recenzent może poprosić dodatkowo o recenzję jednego z [recenzentów technicznych](https://github.com/kubernetes/website/wiki/Tech-reviewers). Recenzenci zrobią wszystko, aby odpowiedzieć sprawnie, ale konkretny czas odpowiedzi zależy od wielu czynników.
+
+Więcej informacji na temat współpracy przy tworzeniu dokumentacji znajdziesz na stronach:
+
+* [Udział w rozwijaniu dokumentacji](https://kubernetes.io/docs/contribute/)
+* [Rodzaje stron](https://kubernetes.io/docs/contribute/style/page-content-types/)
+* [Styl pisania dokumentacji](http://kubernetes.io/docs/contribute/style/style-guide/)
+* [Lokalizacja dokumentacji Kubernetes](https://kubernetes.io/docs/contribute/localization/)
+
+# Różne wersje językowe `README.md`
+
+| Język  | Język |
+|---|---|
+| [angielski](README.md)       | [francuski](README-fr.md)    |
+| [koreański](README-ko.md)    | [niemiecki](README-de.md)    |
+| [portugalski](README-pt.md)  | [hindi](README-hi.md)        |
+| [hiszpański](README-es.md)   | [indonezyjski](README-id.md) |
+| [chiński](README-zh.md)      | [japoński](README-ja.md)     |
+| [wietnamski](README-vi.md)   | [rosyjski](README-ru.md)     |
+| [włoski](README-it.md)       | [ukraiński](README-uk.md)    |
+
+# Zasady postępowania
+
+Udział w działaniach społeczności Kubernetes jest regulowany przez [Kodeks postępowania CNCF]((https://github.com/cncf/foundation/blob/master/code-of-conduct-languages/pl.md).
+
+# Dziękujemy!
 
 Kubernetes rozkwita dzięki zaangażowaniu społeczności — doceniamy twój wkład w tworzenie naszego serwisu i dokumentacji!

From 47691b509c5a6d7745d3f21392d2b90ab3699aed Mon Sep 17 00:00:00 2001
From: joostas <justas.narbutas@gmail.com>
Date: Mon, 5 Apr 2021 21:06:36 +0300
Subject: [PATCH 544/788] [ko] Fix label selector in "kubectl for Docker Users"

Before:
```sh
kubectl get po -l run=nginx-app
No resources found in default namespace.
```
Because:
```sh
kubectl get po --show-labels
NAME                         READY   STATUS    RESTARTS   AGE   LABELS
nginx-app-58cfd4c468-jx6qp   1/1     Running   0          17m   app=nginx-app,pod-template-hash=58cfd4c468
```
After:
```sh
kubectl get po -l app=nginx-app
NAME                         READY   STATUS    RESTARTS   AGE
nginx-app-58cfd4c468-jx6qp   1/1     Running   0          18m
```
---
 content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md b/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md
index 12b41b1d98..a367c175cb 100644
--- a/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md
+++ b/content/ko/docs/reference/kubectl/docker-cli-to-kubectl.md
@@ -265,7 +265,7 @@ nginx-app    1/1     1            1           2m
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 ```
 ```
 NAME                         READY     STATUS    RESTARTS   AGE
@@ -279,7 +279,7 @@ deployment "nginx-app" deleted
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 # 아무것도 반환하지 않는다
 ```
 

From 7c77d75a811295ba7900b45e2cfb45639ace5d0e Mon Sep 17 00:00:00 2001
From: Xander Grzywinski <xanderg@apple.com>
Date: Tue, 13 Apr 2021 12:27:46 -0700
Subject: [PATCH 545/788] add 1.21 graceful node shutdown blog post (#27335)

* add 1.21 graceful node shutdown blog post

* Address initial feedback

* Address final feedback

Co-authored-by: David Porter <porterdavid@google.com>
---
 .../2021-04-21-Graceful-Node-Shutdown-Beta.md | 80 +++++++++++++++++++
 1 file changed, 80 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md

diff --git a/content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md b/content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md
new file mode 100644
index 0000000000..7f00300e88
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md
@@ -0,0 +1,80 @@
+---
+layout: blog
+title: 'Graceful Node Shutdown Goes Beta'
+date: 2021-04-21
+slug: graceful-node-shutdown-beta
+---
+
+**Authors:** David Porter (Google), Murnal Patel (Red Hat), and Tim Bannister (The Scale Factory)
+
+Graceful node shutdown, beta in 1.21, enables kubelet to gracefully evict pods during a node shutdown.
+
+Kubernetes is a distributed system and as such we need to be prepared for inevitable failures — nodes will fail, containers might crash or be restarted, and - ideally - your workloads will be able to withstand these catastrophic events.
+
+One of the common classes of issues are workload failures on node shutdown or restart. The best practice prior to bringing your node down is to [safely drain and cordon your node](/docs/tasks/administer-cluster/safely-drain-node/). This will ensure that all pods running on this node can safely be evicted. An eviction will ensure your pods can follow the expected [pod termination lifecycle](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination) meaning receiving a SIGTERM in your container and/or running `preStopHooks`.
+
+Prior to Kubernetes 1.20 (when graceful node shutdown was introduced as an alpha feature), safe node draining was not easy: it required users to manually take action and drain the node beforehand. If someone or something shut down your node without draining it first, most likely your pods would not be safely evicted from your node and shutdown abruptly. Other services talking to those pods might see errors due to the pods exiting abruptly. Some examples of this situation may be caused by a reboot due to security patches or preemption of short lived cloud compute instances.
+
+Kubernetes 1.21 brings graceful node shutdown to beta. Graceful node shutdown gives you more control over some of those unexpected shutdown situations. With graceful node shutdown, the kubelet is aware of underlying system shutdown events and can propagate these events to pods, ensuring containers can shut down as gracefully as possible. This gives the containers a chance to checkpoint their state or release back any resources they are holding.
+
+Note, that for the best availability, even with graceful node shutdown, you should still design your deployments to be resilient to node failures.
+
+## How does it work?
+On Linux, your system can shut down in many different situations. For example:
+* A user or script running `shutdown -h now` or `systemctl poweroff` or `systemctl reboot`.
+* Physically pressing a power button on the machine.
+* Stopping a VM instance on a cloud provider, e.g. `gcloud compute instances stop` on GCP.
+* A Preemptible VM or Spot Instance that your cloud provider can terminate unexpectedly, but with a brief warning.
+
+
+Many of these situations can be unexpected and there is no guarantee that a cluster administrator drained the node prior to these events. With the graceful node shutdown feature, kubelet uses a systemd mechanism called ["Inhibitor Locks"](https://www.freedesktop.org/wiki/Software/systemd/inhibit) to allow draining in most cases. Using Inhibitor Locks, kubelet instructs systemd to postpone system shutdown for a specified duration, giving a chance for the node to drain and evict pods on the system.
+
+Kubelet makes use of this mechanism to ensure your pods will be terminated cleanly. When the kubelet starts, it acquires a systemd delay-type inhibitor lock. When the system is about to shut down, the kubelet can delay that shutdown for a configurable, short duration utilizing the delay-type inhibitor lock it acquired earlier. This gives your pods extra time to  terminate. As a result, even during unexpected shutdowns, your application will receive a SIGTERM, [preStop hooks](/docs/concepts/containers/container-lifecycle-hooks/#container-hooks) will execute, and kubelet will properly update `Ready` node condition and respective pod statuses to the api-server.
+
+For example, on a node with graceful node shutdown enabled, you can see that the inhibitor lock is taken by the kubelet:
+
+```
+kubelet-node ~ # systemd-inhibit --list
+    Who: kubelet (UID 0/root, PID 1515/kubelet)
+    What: shutdown
+    Why: Kubelet needs time to handle node shutdown
+    Mode: delay
+
+1 inhibitors listed.
+```
+
+One important consideration we took when designing this feature is that not all pods are created equal. For example, some of the pods running on a node such as a logging related daemonset should stay running as long as possible to capture important logs during the shutdown itself. As a result, pods are split into two categories: "regular" and "critical". [Critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) are those that have `priorityClassName` set to `system-cluster-critical` or `system-node-critical`; all other pods are considered regular.
+
+In our example, the logging DaemonSet would run as a critical pod. During the graceful node shutdown, regular pods are terminated first, followed by critical pods. As an example, this would allow a critical pod associated with a logging daemonset to continue functioning, and collecting logs during the termination of regular pods.
+
+We will evaluate during the beta phase if we need more flexibility for different pod priority classes and add support if needed, please let us know if you have some scenarios in mind.
+
+
+## How do I use it?
+
+Graceful node shutdown is controlled with the `GracefulNodeShutdown` [feature gate](/docs/reference/command-line-tools-reference/feature-gates) and is enabled by default in Kubernetes 1.21.
+
+You can configure the graceful node shutdown behavior using two kubelet configuration options: `ShutdownGracePeriod` and `ShutdownGracePeriodCriticalPods`. To configure these options, you edit the kubelet configuration file that is passed to kubelet via the `--config` flag; for more details, refer to [Set kubelet parameters via a configuration file](/docs/tasks/administer-cluster/kubelet-config-file/).
+
+
+During a shutdown, kubelet terminates pods in two phases. You can configure how long each of these phases lasts.
+1. Terminate regular pods running on the node.
+2. Terminate critical pods running on the node.
+
+The settings that control the duration of shutdown are:
+* `ShutdownGracePeriod`
+    * Specifies the total duration that the node should delay the shutdown by. This is the total grace period for pod termination for both regular and critical pods.
+* `ShutdownGracePeriodCriticalPods`
+    * Specifies the duration used to terminate critical pods during a node shutdown. This should be less than `ShutdownGracePeriod`.
+
+For example, if `ShutdownGracePeriod=30s`, and `ShutdownGracePeriodCriticalPods=10s`, kubelet will delay the node shutdown by 30 seconds. During this time, the first 20 seconds (30-10) would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating critical pods.
+
+Note that by default, both configuration options described above, `ShutdownGracePeriod` and `ShutdownGracePeriodCriticalPods` are set to zero, so you will need to configure them as appropriate for your environment to activate graceful node shutdown functionality.
+
+## How can I learn more?
+* Read the [documentation](/docs/concepts/architecture/nodes/#graceful-node-shutdown)
+* Read the enhancement proposal, [KEP 2000](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2000-graceful-node-shutdown)
+* View the [code](https://github.com/kubernetes/kubernetes/tree/release-1.20/pkg/kubelet/nodeshutdown)
+
+## How do I get involved?
+Your feedback is always welcome! SIG Node meets regularly and can be reached via [Slack](https://slack.k8s.io) (channel `#sig-node`), or the SIG's [mailing list](https://github.com/kubernetes/community/tree/master/sig-node#contact)

From f94b9bf6b3f61e6f754494735c29ef749b23b3e5 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 13 Apr 2021 21:43:26 +0100
Subject: [PATCH 546/788] Update publication date

---
 content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
index 9e86770abe..5df7e4ca5e 100644
--- a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
@@ -1,7 +1,7 @@
 ---
 layout: blog
 title: 'Annotating Kubernetes Services for Humans'
-date: 2021-04-12
+date: 2021-04-20
 slug: annotating-k8s-for-humans
 ---
 

From 2ec89f253c6436dc54aa08f2cdd007510a696795 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Wed, 14 Apr 2021 07:32:33 +0900
Subject: [PATCH 547/788] Update
 content/en/docs/reference/using-api/client-libraries.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/docs/reference/using-api/client-libraries.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/reference/using-api/client-libraries.md b/content/en/docs/reference/using-api/client-libraries.md
index 2ab3d5e654..90043f953c 100644
--- a/content/en/docs/reference/using-api/client-libraries.md
+++ b/content/en/docs/reference/using-api/client-libraries.md
@@ -70,8 +70,8 @@ their authors, not the Kubernetes team.
 | Python               | [github.com/Frankkkkk/pykorm](https://github.com/Frankkkkk/pykorm) |
 | Ruby                 | [github.com/abonas/kubeclient](https://github.com/abonas/kubeclient) |
 | Ruby                 | [github.com/Ch00k/kuber](https://github.com/Ch00k/kuber) |
-| Ruby                 | [github.com/kontena/k8s-client](https://github.com/kontena/k8s-client) |
 | Ruby                 | [github.com/k8s-ruby/k8s-ruby](https://github.com/k8s-ruby/k8s-ruby) |
+| Ruby                 | [github.com/kontena/k8s-client](https://github.com/kontena/k8s-client) |
 | Rust                 | [github.com/clux/kube-rs](https://github.com/clux/kube-rs) |
 | Rust                 | [github.com/ynqa/kubernetes-rust](https://github.com/ynqa/kubernetes-rust) |
 | Scala                | [github.com/hagay3/skuber](https://github.com/hagay3/skuber) |
@@ -83,4 +83,3 @@ their authors, not the Kubernetes team.
 | Elixir               | [github.com/coryodaniel/k8s](https://github.com/coryodaniel/k8s) |
 
 
-

From 0349ac00355b31805107537c6d3bc8b9604d9441 Mon Sep 17 00:00:00 2001
From: Eddie Zaneski <eddiezane@gmail.com>
Date: Tue, 13 Apr 2021 19:56:53 -0600
Subject: [PATCH 548/788] Remove PSGallery kubectl install instructions

Signed-off-by: Eddie Zaneski <eddiezane@gmail.com>
---
 .../tasks/tools/install-kubectl-windows.md    | 28 -------------------
 1 file changed, 28 deletions(-)

diff --git a/content/en/docs/tasks/tools/install-kubectl-windows.md b/content/en/docs/tasks/tools/install-kubectl-windows.md
index 09e8217626..c50bc3560e 100644
--- a/content/en/docs/tasks/tools/install-kubectl-windows.md
+++ b/content/en/docs/tasks/tools/install-kubectl-windows.md
@@ -21,7 +21,6 @@ Using the latest version of kubectl helps avoid unforeseen issues.
 The following methods exist for installing kubectl on Windows:
 
 - [Install kubectl binary with curl on Windows](#install-kubectl-binary-with-curl-on-windows)
-- [Install with PowerShell from PSGallery](#install-with-powershell-from-psgallery)
 - [Install on Windows using Chocolatey or Scoop](#install-on-windows-using-chocolatey-or-scoop)
 - [Install on Windows as part of the Google Cloud SDK](#install-on-windows-as-part-of-the-google-cloud-sdk)
 
@@ -76,33 +75,6 @@ The following methods exist for installing kubectl on Windows:
 If you have installed Docker Desktop before, you may need to place your `PATH` entry before the one added by the Docker Desktop installer or remove the Docker Desktop's `kubectl`.
 {{< /note >}}
 
-### Install with PowerShell from PSGallery
-
-If you are on Windows and using the [PowerShell Gallery](https://www.powershellgallery.com/) package manager, you can install and update kubectl with PowerShell.
-
-1. Run the installation commands (making sure to specify a `DownloadLocation`):
-
-   ```powershell
-   Install-Script -Name 'install-kubectl' -Scope CurrentUser -Force
-   install-kubectl.ps1 [-DownloadLocation <path>]
-   ```
-
-   {{< note >}}
-   If you do not specify a `DownloadLocation`, `kubectl` will be installed in the user's `temp` Directory.
-   {{< /note >}}
-
-   The installer creates `$HOME/.kube` and instructs it to create a config file.
-
-1. Test to ensure the version you installed is up-to-date:
-
-   ```powershell
-   kubectl version --client
-   ```
-
-{{< note >}}
-Updating the installation is performed by rerunning the two commands listed in step 1.
-{{< /note >}}
-
 ### Install on Windows using Chocolatey or Scoop
 
 1. To install kubectl on Windows you can use either [Chocolatey](https://chocolatey.org) package manager or [Scoop](https://scoop.sh) command-line installer.

From 61cf431d1bf8cc4b600f285db0f33ad7ad818aea Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Tue, 13 Apr 2021 16:43:39 +0800
Subject: [PATCH 549/788] [zh] Sync setup pages for container-runtimes.md

* Sync with english version in 'Update container-runtimes.md (#27518)'

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../production-environment/container-runtimes.md | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 99739e8b10..943cbb2d17 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -85,7 +85,7 @@ stabilized the system. To configure this for Docker, set `native.cgroupdriver=sy
 
 <!--
 {{< caution >}}
-Changing the cgroup driver of a Node that has joined a cluster is strongly *not* recommended.  
+Changing the cgroup driver of a Node that has joined a cluster is a sensitive operation. 
 If the kubelet has created Pods using the semantics of one cgroup driver, changing the container
 runtime to another cgroup driver can cause errors when trying to re-create the Pod sandbox
 for such existing Pods. Restarting the kubelet may not solve such errors.
@@ -94,10 +94,22 @@ If you have automation that makes it feasible, replace the node with another usi
 configuration, or reinstall it using automation.
 {{< /caution >}}
 -->
-注意：非常 *不* 建议更改已加入集群的节点的 cgroup 驱动。
+注意：更改已加入集群的节点的 cgroup 驱动是一项敏感的操作。
 如果 kubelet 已经使用某 cgroup 驱动的语义创建了 pod，更改运行时以使用别的 cgroup 驱动，当为现有 Pods 重新创建 PodSandbox 时会产生错误。重启 kubelet 也可能无法解决此类问题。
 如果你有切实可行的自动化方案，使用其他已更新配置的节点来替换该节点，或者使用自动化方案来重新安装。
 
+<!-- 
+### Migrating to the `systemd` driver in kubeadm managed clusters
+-->
+### 将 kubeadm 托管的集群迁移到 `systemd` 驱动
+
+<!-- 
+Follow this [Migration guide](docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
+if you wish to migrate to the `systemd` cgroup driver in existing kubeadm managed clusters.
+-->
+如果你想迁移到现有 kubeadm 托管集群中的 `systemd` cgroup 驱动程序，
+遵循此[迁移指南](/zh/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)。
+
 <!-- 
 ## Container runtimes
  -->

From 9c64caed1dd610bdb5adb4eaaf93becfc0a2fe82 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Fri, 9 Apr 2021 18:54:08 +0800
Subject: [PATCH 550/788] [zh]Sync
 content/zh/docs/reference/command-line-tools-reference/feature-gates.md

---
 .../feature-gates.md                          | 202 ++++++++++++------
 1 file changed, 140 insertions(+), 62 deletions(-)

diff --git a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
index a1024ae7c1..597bc98040 100644
--- a/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/zh/docs/reference/command-line-tools-reference/feature-gates.md
@@ -104,11 +104,10 @@ different Kubernetes components.
 | `AnyVolumeDataSource` | `false` | Alpha | 1.18 | |
 | `AppArmor` | `true` | Beta | 1.4 | |
 | `BalanceAttachedNodeVolumes` | `false` | Alpha | 1.11 | |
-| `BoundServiceAccountTokenVolume` | `false` | Alpha | 1.13 | |
+| `BoundServiceAccountTokenVolume` | `false` | Alpha | 1.13 | 1.20 |
+| `BoundServiceAccountTokenVolume` | `true` | Beta | 1.21 | |
 | `CPUManager` | `false` | Alpha | 1.8 | 1.9 |
 | `CPUManager` | `true` | Beta | 1.10 | |
-| `CRIContainerLogRotation` | `false` | Alpha | 1.10 | 1.10 |
-| `CRIContainerLogRotation` | `true` | Beta| 1.11 | |
 | `CSIInlineVolume` | `false` | Alpha | 1.15 | 1.15 |
 | `CSIInlineVolume` | `true` | Beta | 1.16 | - |
 | `CSIMigration` | `false` | Alpha | 1.14 | 1.16 |
@@ -119,7 +118,8 @@ different Kubernetes components.
 | `CSIMigrationAzureDisk` | `false` | Alpha | 1.15 | 1.18 |
 | `CSIMigrationAzureDisk` | `false` | Beta | 1.19 | |
 | `CSIMigrationAzureDiskComplete` | `false` | Alpha | 1.17 | |
-| `CSIMigrationAzureFile` | `false` | Alpha | 1.15 | |
+| `CSIMigrationAzureFile` | `false` | Alpha | 1.15 | 1.19 |
+| `CSIMigrationAzureFile` | `false` | Beta | 1.21 | |
 | `CSIMigrationAzureFileComplete` | `false` | Alpha | 1.17 | |
 | `CSIMigrationGCE` | `false` | Alpha | 1.14 | 1.16 |
 | `CSIMigrationGCE` | `false` | Beta | 1.17 | |
@@ -129,13 +129,16 @@ different Kubernetes components.
 | `CSIMigrationOpenStackComplete` | `false` | Alpha | 1.17 | |
 | `CSIMigrationvSphere` | `false` | Beta | 1.19 | |
 | `CSIMigrationvSphereComplete` | `false` | Beta | 1.19 | |
-| `CSIServiceAccountToken` | `false` | Alpha | 1.20 | |
-| `CSIStorageCapacity` | `false` | Alpha | 1.19 | |
+| `CSIServiceAccountToken` | `false` | Alpha | 1.20 | 1.20 |
+| `CSIServiceAccountToken` | `true` | Beta | 1.21 | |
+| `CSIStorageCapacity` | `false` | Alpha | 1.19 | 1.20 |
+| `CSIStorageCapacity` | `true` | Beta | 1.21 | |
 | `CSIVolumeFSGroupPolicy` | `false` | Alpha | 1.19 | 1.19 |
 | `CSIVolumeFSGroupPolicy` | `true` | Beta | 1.20 | |
 | `ConfigurableFSGroupPolicy` | `false` | Alpha | 1.18 | 1.19 |
 | `ConfigurableFSGroupPolicy` | `true` | Beta | 1.20 | |
-| `CronJobControllerV2` | `false` | Alpha | 1.20 | |
+| `CronJobControllerV2` | `false` | Alpha | 1.20 | 1.20 |
+| `CronJobControllerV2` | `true` | Beta | 1.21 | |
 | `CustomCPUCFSQuotaPeriod` | `false` | Alpha | 1.12 | |
 | `DefaultPodTopologySpread` | `false` | Alpha | 1.19 | 1.19 |
 | `DefaultPodTopologySpread` | `true` | Beta | 1.20 | |
@@ -143,14 +146,11 @@ different Kubernetes components.
 | `DevicePlugins` | `true` | Beta | 1.10 | |
 | `DisableAcceleratorUsageMetrics` | `false` | Alpha | 1.19 | 1.19 |
 | `DisableAcceleratorUsageMetrics` | `true` | Beta | 1.20 | |
-| `DownwardAPIHugePages` | `false` | Alpha | 1.20 | |
+| `DownwardAPIHugePages` | `false` | Alpha | 1.20 | 1.20 |
+| `DownwardAPIHugePages` | `false` | Beta | 1.21 | |
 | `DynamicKubeletConfig` | `false` | Alpha | 1.4 | 1.10 |
 | `DynamicKubeletConfig` | `true` | Beta | 1.11 | |
 | `EfficientWatchResumption` | `false` | Alpha | 1.20 | |
-| `EndpointSlice` | `false` | Alpha | 1.16 | 1.16 |
-| `EndpointSlice` | `false` | Beta | 1.17 | |
-| `EndpointSlice` | `true` | Beta | 1.18 | |
-| `EndpointSliceNodeName` | `false` | Alpha | 1.20 | |
 | `EndpointSliceProxying` | `false` | Alpha | 1.18 | 1.18 |
 | `EndpointSliceProxying` | `true` | Beta | 1.19 | |
 | `EndpointSliceTerminatingCondition` | `false` | Alpha | 1.20 | |
@@ -162,15 +162,17 @@ different Kubernetes components.
 | `ExpandPersistentVolumes` | `false` | Alpha | 1.8 | 1.10 |
 | `ExpandPersistentVolumes` | `true` | Beta | 1.11 | |
 | `ExperimentalHostUserNamespaceDefaulting` | `false` | Beta | 1.5 | |
-| `GenericEphemeralVolume` | `false` | Alpha | 1.19 | |
-| `GracefulNodeShutdown` | `false` | Alpha | 1.20 | |
+| `GenericEphemeralVolume` | `false` | Alpha | 1.19 | 1.20 |
+| `GenericEphemeralVolume` | `true` | Beta | 1.21 | |
+| `GracefulNodeShutdown` | `false` | Alpha | 1.20 | 1.20 |
+| `GracefulNodeShutdown` | `true` | Beta | 1.21 | |
 | `HPAContainerMetrics` | `false` | Alpha | 1.20 | |
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | Beta | 1.19 | |
-| `IPv6DualStack` | `false` | Alpha | 1.15 | |
-| `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 |
-| `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | |
+| `IngressClassNamespacedParams` | `false` | Alpha | 1.21 | |
+| `IPv6DualStack` | `false` | Alpha | 1.15 | 1.20 |
+| `IPv6DualStack` | `true` | Beta | 1.21 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
 | `KubeletPodResources` | `true` | Alpha | 1.13 | 1.14 |
 | `KubeletPodResources` | `true` | Beta | 1.15 | |
@@ -179,22 +181,25 @@ different Kubernetes components.
 | `LocalStorageCapacityIsolation` | `false` | Alpha | 1.7 | 1.9 |
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
+| `LogarithmicScaleDown` | `false` | Alpha | 1.21 | |
+| `KubeletPodResourcesGetAllocatable` | `false` | Alpha | 1.21 | |
 | `MixedProtocolLBService` | `false` | Alpha | 1.20 | |
+| `NamespaceDefaultLabelName` | `true` | Beta | 1.21 | |
+| `NetworkPolicyEndPort` | `false` | Alpha | 1.21 |  |
 | `NodeDisruptionExclusion` | `false` | Alpha | 1.16 | 1.18 |
 | `NodeDisruptionExclusion` | `true` | Beta | 1.19 | |
 | `NonPreemptingPriority` | `false` | Alpha | 1.15 | 1.18 |
 | `NonPreemptingPriority` | `true` | Beta | 1.19 | |
-| `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 |
-| `PodDisruptionBudget` | `true` | Beta | 1.5 | |
+| `PodDeletionCost` | `false` | Alpha | 1.21 | |
+| `PodAffinityNamespaceSelector` | `false` | Alpha | 1.21 | |
 | `PodOverhead` | `false` | Alpha | 1.16 | 1.17 |
 | `PodOverhead` | `true` | Beta | 1.18 |  |
+| `ProbeTerminationGracePeriod` | `false` | Alpha | 1.21 | |
 | `ProcMountType` | `false` | Alpha | 1.12 | |
 | `QOSReserved` | `false` | Alpha | 1.11 | |
 | `RemainingItemCount` | `false` | Alpha | 1.15 | |
 | `RemoveSelfLink` | `false` | Alpha | 1.16 | 1.19 |
 | `RemoveSelfLink` | `true` | Beta | 1.20 | |
-| `RootCAConfigMap` | `false` | Alpha | 1.13 | 1.19 |
-| `RootCAConfigMap` | `true` | Beta | 1.20 | |
 | `RotateKubeletServerCertificate` | `false` | Alpha | 1.7 | 1.11 |
 | `RotateKubeletServerCertificate` | `true` | Beta | 1.12 | |
 | `RunAsGroup` | `true` | Beta | 1.14 | |
@@ -202,9 +207,9 @@ different Kubernetes components.
 | `SCTPSupport` | `true` | Beta | 1.19 | |
 | `ServerSideApply` | `false` | Alpha | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | Beta | 1.16 | |
-| `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | 1.19 |
-| `ServiceAccountIssuerDiscovery` | `true` | Beta | 1.20 | |
+| `ServiceInternalTrafficPolicy` | `false` | Alpha | 1.21 | |
 | `ServiceLBNodePortControl` | `false` | Alpha | 1.20 | |
+| `ServiceLoadBalancerClass` | `false` | Alpha | 1.21 | |
 | `ServiceNodeExclusion` | `false` | Alpha | 1.8 | 1.18 |
 | `ServiceNodeExclusion` | `true` | Beta | 1.19 | |
 | `ServiceTopology` | `false` | Alpha | 1.17 | |
@@ -214,16 +219,9 @@ different Kubernetes components.
 | `StorageVersionAPI` | `false` | Alpha | 1.20 | |
 | `StorageVersionHash` | `false` | Alpha | 1.14 | 1.14 |
 | `StorageVersionHash` | `true` | Beta | 1.15 | |
-| `SupportNodePidsLimit` | `false` | Alpha | 1.14 | 1.14 |
-| `SupportNodePidsLimit` | `true` | Beta | 1.15 | |
-| `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 |
-| `SupportPodPidsLimit` | `true` | Beta | 1.14 | |
-| `TokenRequest` | `false` | Alpha | 1.10 | 1.11 |
-| `TokenRequest` | `true` | Beta | 1.12 | |
-| `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
-| `TokenRequestProjection` | `true` | Beta | 1.12 | |
-| `Sysctls` | `true` | Beta | 1.11 | |
+| `SuspendJob` | `false` | Alpha | 1.21 | |
 | `TTLAfterFinished` | `false` | Alpha | 1.12 | |
+| `TopologyAwareHints` | `false` | Alpha | 1.21 | |
 | `TopologyManager` | `false` | Alpha | 1.16 | 1.17 |
 | `TopologyManager` | `true` | Beta | 1.18 | |
 | `ValidateProxyRedirects` | `false` | Alpha | 1.12 | 1.13 |
@@ -232,8 +230,8 @@ different Kubernetes components.
 | `WinDSR` | `false` | Alpha | 1.14 | |
 | `WinOverlay` | `false` | Alpha | 1.14 | 1.19 |
 | `WinOverlay` | `true` | Beta | 1.20 | |
-| `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | |
-
+| `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | 1.20 |
+| `WindowsEndpointSliceProxying` | `true` | beta | 1.21 | |
 {{< /table >}}
 
 <!--
@@ -263,6 +261,9 @@ different Kubernetes components.
 | `BlockVolume` | `false` | Alpha | 1.9 | 1.12 |
 | `BlockVolume` | `true` | Beta | 1.13 | 1.17 |
 | `BlockVolume` | `true` | GA | 1.18 | - |
+| `CRIContainerLogRotation` | `false` | Alpha | 1.10 | 1.10 |
+| `CRIContainerLogRotation` | `true` | Beta | 1.11 | 1.20 |
+| `CRIContainerLogRotation` | `true` | GA | 1.21 | - |
 | `CSIBlockVolume` | `false` | Alpha | 1.11 | 1.13 |
 | `CSIBlockVolume` | `true` | Beta | 1.14 | 1.17 |
 | `CSIBlockVolume` | `true` | GA | 1.18 | - |
@@ -278,6 +279,7 @@ different Kubernetes components.
 | `CSIPersistentVolume` | `false` | Alpha | 1.9 | 1.9 |
 | `CSIPersistentVolume` | `true` | Beta | 1.10 | 1.12 |
 | `CSIPersistentVolume` | `true` | GA | 1.13 | - |
+| `CSIVolumeHealth` | `false` | Alpha | 1.21 | - |
 | `CustomPodDNS` | `false` | Alpha | 1.9 | 1.9 |
 | `CustomPodDNS` | `true` | Beta| 1.10 | 1.13 |
 | `CustomPodDNS` | `true` | GA | 1.14 | - |
@@ -308,6 +310,12 @@ different Kubernetes components.
 | `EnableAggregatedDiscoveryTimeout` | `true` | Deprecated | 1.16 | - |
 | `EnableEquivalenceClassCache` | `false` | Alpha | 1.8 | 1.14 |
 | `EnableEquivalenceClassCache` | - | Deprecated | 1.15 | - |
+| `EndpointSlice` | `false` | Alpha | 1.16 | 1.16 |
+| `EndpointSlice` | `false` | Beta | 1.17 | 1.17 |
+| `EndpointSlice` | `true` | Beta | 1.18 | 1.21 |
+| `EndpointSlice` | `true` | GA | 1.21 | -  |
+| `EndpointSliceNodeName` | `false` | Alpha | 1.20 | 1.21 |
+| `EndpointSliceNodeName` | `true` | GA | 1.21 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | Alpha | 1.5 | 1.12 |
 | `ExperimentalCriticalPodAnnotation` | `false` | Deprecated | 1.13 | - |
 | `EvenPodsSpread` | `false` | Alpha | 1.16 | 1.17 |
@@ -321,6 +329,10 @@ different Kubernetes components.
 | `HugePages` | `true` | GA | 1.14 | - |
 | `HyperVContainer` | `false` | Alpha | 1.10 | 1.19 |
 | `HyperVContainer` | `false` | Deprecated | 1.20 | - |
+| `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 |
+| `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | 1.20 |
+| `ImmutableEphemeralVolumes` | `true` | GA | 1.21 | |
+| `IndexedJob` | `false` | Alpha | 1.21 | |
 | `Initializers` | `false` | Alpha | 1.7 | 1.13 |
 | `Initializers` | - | Deprecated | 1.14 | - |
 | `KubeletConfigFile` | `false` | Alpha | 1.8 | 1.9 |
@@ -344,6 +356,9 @@ different Kubernetes components.
 | `PersistentLocalVolumes` | `false` | Alpha | 1.7 | 1.9 |
 | `PersistentLocalVolumes` | `true` | Beta | 1.10 | 1.13 |
 | `PersistentLocalVolumes` | `true` | GA | 1.14 | - |
+| `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 |
+| `PodDisruptionBudget` | `true` | Beta | 1.5 | 1.20 |
+| `PodDisruptionBudget` | `true` | GA | 1.21 | - |
 | `PodPriority` | `false` | Alpha | 1.8 | 1.10 |
 | `PodPriority` | `true` | Beta | 1.11 | 1.13 |
 | `PodPriority` | `true` | GA | 1.14 | - |
@@ -359,6 +374,9 @@ different Kubernetes components.
 | `ResourceQuotaScopeSelectors` | `false` | Alpha | 1.11 | 1.11 |
 | `ResourceQuotaScopeSelectors` | `true` | Beta | 1.12 | 1.16 |
 | `ResourceQuotaScopeSelectors` | `true` | GA | 1.17 | - |
+| `RootCAConfigMap` | `false` | Alpha | 1.13 | 1.19 |
+| `RootCAConfigMap` | `true` | Beta | 1.20 | 1.20 |
+| `RootCAConfigMap` | `true` | GA | 1.21 | - |
 | `RotateKubeletClientCertificate` | `true` | Beta | 1.8 | 1.18 |
 | `RotateKubeletClientCertificate` | `true` | GA | 1.19 | - |
 | `RuntimeClass` | `false` | Alpha | 1.12 | 1.13 |
@@ -370,6 +388,9 @@ different Kubernetes components.
 | `SCTPSupport` | `false` | Alpha | 1.12 | 1.18 |
 | `SCTPSupport` | `true` | Beta | 1.19 | 1.19 |
 | `SCTPSupport` | `true` | GA | 1.20 | - |
+| `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | 1.19 |
+| `ServiceAccountIssuerDiscovery` | `true` | Beta | 1.20 | 1.20 |
+| `ServiceAccountIssuerDiscovery` | `true` | GA | 1.21 | - |
 | `ServiceAppProtocol` | `false` | Alpha | 1.18 | 1.18 |
 | `ServiceAppProtocol` | `true` | Beta | 1.19 | |
 | `ServiceAppProtocol` | `true` | GA | 1.20 | - |
@@ -388,14 +409,14 @@ different Kubernetes components.
 | `SupportIPVSProxyMode` | `false` | Beta | 1.9 | 1.9 |
 | `SupportIPVSProxyMode` | `true` | Beta | 1.10 | 1.10 |
 | `SupportIPVSProxyMode` | `true` | GA | 1.11 | - |
-| `Sysctls` | `true` | Beta | 1.11 | 1.20 |
-| `Sysctls` | `true` | GA | 1.21 | |
 | `SupportNodePidsLimit` | `false` | Alpha | 1.14 | 1.14 |
 | `SupportNodePidsLimit` | `true` | Beta | 1.15 | 1.19 |
 | `SupportNodePidsLimit` | `true` | GA | 1.20 | - |
 | `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 |
 | `SupportPodPidsLimit` | `true` | Beta | 1.14 | 1.19 |
 | `SupportPodPidsLimit` | `true` | GA | 1.20 | - |
+| `Sysctls` | `true` | Beta | 1.11 | 1.20 |
+| `Sysctls` | `true` | GA | 1.21 | |
 | `TaintBasedEvictions` | `false` | Alpha | 1.6 | 1.12 |
 | `TaintBasedEvictions` | `true` | Beta | 1.13 | 1.17 |
 | `TaintBasedEvictions` | `true` | GA | 1.18 | - |
@@ -408,6 +429,7 @@ different Kubernetes components.
 | `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
 | `TokenRequestProjection` | `true` | Beta | 1.12 | 1.19 |
 | `TokenRequestProjection` | `true` | GA | 1.20 | - |
+| `VolumeCapacityPriority` | `false` | Alpha | 1.21 | - |
 | `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 |
 | `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | 1.19 |
 | `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
@@ -430,7 +452,6 @@ different Kubernetes components.
 | `WindowsRunAsUserName` | `false` | Alpha | 1.16 | 1.16 |
 | `WindowsRunAsUserName` | `true` | Beta | 1.17 | 1.17 |
 | `WindowsRunAsUserName` | `true` | GA | 1.18 | - |
-
 {{< /table >}}
 
 <!--
@@ -538,7 +559,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `Accelerators`: Enable Nvidia GPU support when using Docker
 - `AdvancedAuditing`: Enable [advanced auditing](/docs/tasks/debug-application-cluster/audit/#advanced-audit)
 - `AffinityInAnnotations`(*deprecated*): Enable setting
-  [Pod affinity or anti-affinity](docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity).
+  [Pod affinity or anti-affinity](/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity).
 - `AllowExtTrafficLocalEndpoints`: Enable a service to route external requests to node local endpoints.
 - `AllowInsecureBackendProxy`: Enable the users to skip TLS verification of
   kubelets on Pod log requests.
@@ -589,7 +610,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
 <!--
 - `CPUManager`: Enable container level CPU affinity support, see
   [CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/).
-- `CRIContainerLogRotation`: Enable container log rotation for cri container runtime.
+- `CRIContainerLogRotation`: Enable container log rotation for CRI container runtime. The default max size of a log file is 10MB and the
+  default max number of log files allowed for a container is 5. These values can be configured in the kubelet config.
+  See the [logging at node level](/docs/concepts/cluster-administration/logging/#logging-at-the-node-level) documentation for more details.
 - `CSIBlockVolume`: Enable external CSI volume drivers to support block storage.
   See the [`csi` raw block volume support](/docs/concepts/storage/volumes/#csi-raw-block-volume-support)
   documentation for more details.
@@ -601,7 +624,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
 -->
 - `CPUManager`：启用容器级别的 CPU 亲和性支持，有关更多详细信息，请参见
   [CPU 管理策略](/zh/docs/tasks/administer-cluster/cpu-management-policies/)。
-- `CRIContainerLogRotation`：为 cri 容器运行时启用容器日志轮换。
+- `CRIContainerLogRotation`：为 CRI 容器运行时启用容器日志轮换。日志文件的默认最大大小为10MB,缺省情况下，一个容器允许的最大日志文件数为5。这些值可以在kubelet配置中配置。
+    更多细节请参见[日志架构]( /zh/docs/concepts/cluster-administration/logging/#logging-at-the-node-level)。
 - `CSIBlockVolume`：启用外部 CSI 卷驱动程序用于支持块存储。有关更多详细信息，请参见
   [`csi` 原始块卷支持](/zh/docs/concepts/storage/volumes/#csi-raw-block-volume-support)。
 - `CSIDriverRegistry`：在 csi.storage.k8s.io 中启用与 CSIDriver API 对象有关的所有逻辑。
@@ -744,6 +768,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `CSIVolumeFSGroupPolicy`: Allows CSIDrivers to use the `fsGroupPolicy` field.
   This field controls whether volumes created by a CSIDriver support volume ownership
   and permission modifications when these volumes are mounted.
+- `CSIVolumeHealth`: Enable support for CSI volume health monitoring on node.
 - `ConfigurableFSGroupPolicy`: Allows user to configure volume permission change policy
   for fsGroups when mounting a volume in a Pod. See
   [Configure volume permission and ownership change policy for Pods](/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods)
@@ -755,6 +780,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 -->
 - `CSIVolumeFSGroupPolicy`: 允许 CSIDrivers 使用 `fsGroupPolicy` 字段. 
   该字段能控制由 CSIDriver 创建的卷在挂载这些卷时是否支持卷所有权和权限修改。
+- `CSIVolumeHealth`: 启用对节点上的 CSI volume 运行状况监控的支持
 - `ConfigurableFSGroupPolicy`：在 Pod 中挂载卷时，允许用户为 fsGroup
   配置卷访问权限和属主变更策略。请参见
   [为 Pod 配置卷访问权限和属主变更策略](/zh/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods)。
@@ -799,7 +825,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `DevicePlugins`: Enable the [device-plugins](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
   based resource provisioning on nodes.
 - `DisableAcceleratorUsageMetrics`:
-  [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/system-metrics/).
+  [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/system-metrics/#disable-accelerator-metrics).
 - `DownwardAPIHugePages`: Enables usage of hugepages in
   [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information).
 - `DryRun`: Enable server-side [dry run](/docs/reference/using-api/api-concepts/#dry-run) requests
@@ -812,7 +838,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [设备插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)的
   资源制备。
 - `DisableAcceleratorUsageMetrics`： 
-  [禁用 kubelet 收集加速器指标](/zh/docs/concepts/cluster-administration/system-metrics/).
+  [禁用 kubelet 收集加速器指标](/zh/docs/concepts/cluster-administration/system-metrics/#disable-accelerator-metrics).
 - `DownwardAPIHugePages`：允许在
   [下行（Downward）API](/zh/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information)
   中使用巨页信息。
@@ -887,6 +913,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   该缺陷导致 Kubernetes 会忽略 exec 探针的超时值设置。
   参阅[就绪态探针](/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes).
 <!--
+- `ExpandCSIVolumes`: Enable the expanding of CSI volumes.
 - `ExpandInUsePersistentVolumes`: Enable expanding in-use PVCs. See
   [Resizing an in-use PersistentVolumeClaim](/docs/concepts/storage/persistent-volumes/#resizing-an-in-use-persistentvolumeclaim).
 - `ExpandPersistentVolumes`: Enable the expanding of persistent volumes. See
@@ -895,6 +922,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   so that their [scheduling is guaranteed](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/).
   This feature is deprecated by Pod Priority and Preemption as of v1.13.
 -->
+- `ExpandCSIVolumes`: 启用扩展 CSI 卷。
 - `ExpandInUsePersistentVolumes`：启用扩充使用中的 PVC 的尺寸。请查阅
   [调整使用中的 PersistentVolumeClaim 的大小](/zh/docs/concepts/storage/persistent-volumes/#resizing-an-in-use-persistentvolumeclaim)。
 - `ExpandPersistentVolumes`：允许扩充持久卷。请查阅
@@ -903,7 +931,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [确保其被调度](/zh/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/)。
   从 v1.13 开始已弃用此特性，转而使用 Pod 优先级和抢占功能。
 <!--
-- `ExperimentalHostUserNamespaceDefaultingGate`: Enabling the defaulting user
+- `ExperimentalHostUserNamespaceDefaulting`: Enabling the defaulting user
    namespace to host. This is for containers that are using other host namespaces,
    host mounts, or containers that are privileged or using specific non-namespaced
    capabilities (e.g. `MKNODE`, `SYS_MODULE` etc.). This should only be enabled
@@ -919,7 +947,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [Graceful Node Shutdown](/docs/concepts/architecture/nodes/#graceful-node-shutdown)
   for more details.
 -->
-- `ExperimentalHostUserNamespaceDefaultingGate`：启用主机默认的用户名字空间。
+- `ExperimentalHostUserNamespaceDefaulting`：启用主机默认的用户名字空间。
   这适用于使用其他主机名字空间、主机安装的容器，或具有特权或使用特定的非名字空间功能
   （例如 MKNODE、SYS_MODULE 等）的容器。
   如果在 Docker 守护程序中启用了用户名字空间重新映射，则启用此选项。
@@ -954,12 +982,17 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `HyperVContainer`: Enable
   [Hyper-V isolation](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container)
   for Windows containers.
-- `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
-  support for IPv6.
 - `ImmutableEphemeralVolumes`: Allows for marking individual Secrets and ConfigMaps as
   immutable for better safety and performance.
-- `KubeletConfigFile` (*deprecated*): Enable loading kubelet configuration from a file
-  specified using a config file.
+- `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
+  support for IPv6.
+- `IndexedJob`: Allows the [Job](/docs/concepts/workloads/controllers/job/)
+  controller to manage Pod completions per completion index.
+- `IngressClassNamespacedParams`: Allow namespace-scoped parameters reference in
+  `IngressClass` resouce. This feature adds two fields - `Scope` and `Namespace`
+  to `IngressClass.spec.parameters`.
+- `KubeletConfigFile` (*deprecated*): Enable loading kubelet configuration 
+  from a file specified using a config file.
   See [setting kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file/)
   for more details.
 - `KubeletCredentialProviders`: Enable kubelet exec credential providers for image pull credentials.
@@ -968,10 +1001,12 @@ Each feature gate is designed for enabling/disabling a specific feature:
 -->
 - `HyperVContainer`：为 Windows 容器启用
   [Hyper-V 隔离](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container)。
-- `IPv6DualStack`：启用[双协议栈](/zh/docs/concepts/services-networking/dual-stack/)
-  以支持 IPv6。
 - `ImmutableEphemeralVolumes`：允许将各个 Secret 和 ConfigMap 标记为不可变更的，
   以提高安全性和性能。
+- `IPv6DualStack`：启用[双协议栈](/zh/docs/concepts/services-networking/dual-stack/)
+  以支持 IPv6。
+- `IndexedJob`：允许 [Job](/zh/docs/concepts/workloads/controllers/job/) 控制器按每个完成的索引去管理 Pod 完成。
+- `IngressClassNamespacedParams`：允许引用命名空间范围的参数引用 `IngressClass`资源。该特性增加了两个字段 —— `Scope` 和 `Namespace` 到 `IngressClass.spec.parameters`。
 - `KubeletConfigFile`（*已弃用*）：启用从使用配置文件指定的文件中加载 kubelet 配置。
   有关更多详细信息，请参见
   [通过配置文件设置 kubelet 参数](/zh/docs/tasks/administer-cluster/kubelet-config-file/)。
@@ -980,15 +1015,20 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `KubeletPluginsWatcher`：启用基于探针的插件监视应用程序，使 kubelet 能够发现
   类似 [CSI 卷驱动程序](/zh/docs/concepts/storage/volumes/#csi)这类插件。
 <!--
-- `KubeletPodResources`: Enable the kubelet's pod resources grpc endpoint. See
-  [Support Device Monitoring](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md)
+- `KubeletPodResources`: Enable the kubelet's pod resources gRPC endpoint. See
+  [Support Device Monitoring](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/606-compute-device-assignment/README.md)
   for more details.
+- `KubeletPodResourcesGetAllocatable`: Enable the kubelet's pod resources `GetAllocatableResources` functionality.
+  This API augments the [resource allocation reporting](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#monitoring-device-plugin-resources)
+  with informations about the allocatable resources, enabling clients to properly track the free compute resources on a node.
 - `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and
   node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the
   feature-specific labels provided by `NodeDisruptionExclusion` and `ServiceNodeExclusion`.
 -->
 - `KubeletPodResources`：启用 kubelet 的 Pod 资源 GRPC 端点。更多详细信息，请参见
   [支持设备监控](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md)。
+- `KubeletPodResourcesGetAllocatable`：启用kubelet的pod资源`GetAllocatableResources`功能。该API增强了[资源分配报告]（https://kubernetes.io/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#monitoring-device-plugin-resources）
+   包含有关可分配资源的信息，使客户端能够正确跟踪节点上的可用计算资源。
 - `LegacyNodeRoleBehavior`：禁用此门控时，服务负载均衡器中和节点干扰中的原先行为
   会忽略 `node-role.kubernetes.io/master` 标签，使用 `NodeDisruptionExclusion` 和
   `ServiceNodeExclusion` 对应特性所提供的标签。
@@ -1004,9 +1044,11 @@ Each feature gate is designed for enabling/disabling a specific feature:
   supports project quotas and they are enabled, use project quotas to monitor
   [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than
   filesystem walk for better performance and accuracy.
+- `LogarithmicScaleDown`: Enable semi-random selection of pods to evict on controller scaledown
+  based on logarithmic bucketing of pod timestamps.
 - `MixedProtocolLBService`: Enable using different protocols in the same `LoadBalancer` type
   Service instance.
-- `MountContainers`: Enable using utility containers on host as
+- `MountContainers` (*deprecated*): Enable using utility containers on host as
   the volume mounter.
 -->
 - `LocalStorageCapacityIsolation`：允许使用
@@ -1019,35 +1061,48 @@ Each feature gate is designed for enabling/disabling a specific feature:
   的后备文件系统支持项目配额，并且启用了这些配额，将使用项目配额来监视
   [emptyDir 卷](/zh/docs/concepts/storage/volumes/#emptydir)的存储消耗
   而不是遍历文件系统，以此获得更好的性能和准确性。
+- `LogarithmicScaleDown`：启用Pod的半随机（semi-random）选择，控制器将根据 Pod 时间戳的对数桶按比例缩小去驱逐 Pod。
 - `MixedProtocolLBService`：允许在同一 `LoadBalancer` 类型的 Service 实例中使用不同
   的协议。
-- `MountContainers`：允许使用主机上的工具容器作为卷挂载程序。
+- `MountContainers`（ *已弃用* ）`：允许使用主机上的工具容器作为卷挂载程序。
 <!--
 - `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
   For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).
+- `NamespaceDefaultLabelName`: Configure the API Server to set an immutable {{< glossary_tooltip text="label" term_id="label" >}}
+  `kubernetes.io/metadata.name` on all namespaces, containing the namespace name.
+- `NetworkPolicyEndPort`: Enable use of the field `endPort` in NetworkPolicy objects, allowing the selection of a port range instead of a single port.
 - `NodeDisruptionExclusion`: Enable use of the node label `node.kubernetes.io/exclude-disruption`
   which prevents nodes from being evacuated during zone failures.
 - `NodeLease`: Enable the new Lease API to report node heartbeats, which could be used as a node health signal.
-- `NonPreemptingPriority`: Enable NonPreempting option for PriorityClass and Pod.
+- `NonPreemptingPriority`: Enable `preemptionPolicy` field for PriorityClass and Pod.
 - `PVCProtection`: Enable the prevention of a PersistentVolumeClaim (PVC) from
   being deleted when it is still used by any Pod.
+- `PodDeletionCost`: Enable the [Pod Deletion Cost](/docs/content/en/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)
+   feature which allows users to influence ReplicaSet downscaling order.
 - `PersistentLocalVolumes`: Enable the usage of `local` volume type in Pods.
   Pod affinity has to be specified if requesting a `local` volume.
 - `PodDisruptionBudget`: Enable the [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) feature.
+- `PodAffinityNamespaceSelector`: Enable the [Pod Affinity Namespace Selector](/docs/concepts/scheduling-eviction/assign-pod-node/#namespace-selector)
+  and [CrossNamespacePodAffinity](/docs/concepts/policy/resource-quotas/#cross-namespace-pod-affinity-quota) quota scope features.
 - `PodOverhead`: Enable the [PodOverhead](/docs/concepts/scheduling-eviction/pod-overhead/)
   feature to account for pod overheads.
 -->
 - `MountPropagation`：启用将一个容器安装的共享卷共享到其他容器或 Pod。
   更多详细信息，请参见[挂载传播](/zh/docs/concepts/storage/volumes/#mount-propagation)。
+- `NamespaceDefaultLabelName`：配置 API 服务器以在所有名字空间上设置一个不可变的 {{< glossary_tooltip text="label" term_id="label" >}} 
+   `kubernetes.io/metadata.name`，也包括名字空间。
 - `NodeDisruptionExclusion`：启用节点标签 `node.kubernetes.io/exclude-disruption`，
   以防止在可用区发生故障期间驱逐节点。
 - `NodeLease`：启用新的 Lease（租期）API 以报告节点心跳，可用作节点运行状况信号。
-- `NonPreemptingPriority`：为 PriorityClass 和 Pod 启用 NonPreempting 选项。
+- `NonPreemptingPriority`：为 PriorityClass 和 Pod 启用 `preemptionPolicy` 选项。
 - `PVCProtection`：启用防止仍被某 Pod 使用的 PVC 被删除的特性。
+- `PodDeletionCost`：启用[Pod 删除成本](/zh/docs/content/en/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)功能
+  该功能使用户可以影响 ReplicaSet 的降序顺序。
 - `PersistentLocalVolumes`：允许在 Pod 中使用 `local（本地）`卷类型。
   如果请求 `local` 卷，则必须指定 Pod 亲和性属性。
-- `PodDisruptionBudget`：启用
-  [PodDisruptionBudget](/zh/docs/tasks/run-application/configure-pdb/) 特性。
+- `PodDisruptionBudget`：启用 [PodDisruptionBudget](/zh/docs/tasks/run-application/configure-pdb/) 特性。
+- `PodAffinityNamespaceSelector`：启用[Pod 亲和性名称空间选择器](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#namespace-selector)
+   和[CrossNamespacePodAffinity](/zh/docs/concepts/policy/resource-quotas/#cross-namespace-pod-affinity-quota)资源配额功能。
 - `PodOverhead`：启用 [PodOverhead](/zh/docs/concepts/scheduling-eviction/pod-overhead/)
   特性以考虑 Pod 开销。
 <!--
@@ -1059,6 +1114,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `PodShareProcessNamespace`: Enable the setting of `shareProcessNamespace` in a Pod for sharing
   a single process namespace between containers running in a pod.  More details can be found in
   [Share Process Namespace between Containers in a Pod](/docs/tasks/configure-pod-container/share-process-namespace/).
+- `ProbeTerminationGracePeriod`: Enable [setting probe-level
+  `terminationGracePeriodSeconds`](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationGracePeriodSeconds)
+   on pods.  See the [enhancement proposal](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2238-liveness-probe-grace-period) for more details.
 - `ProcMountType`: Enables control over the type proc mounts for containers
   by setting the `procMount` field of a SecurityContext.
 - `QOSReserved`: Allows resource reservations at the QoS level preventing pods
@@ -1076,6 +1134,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `PodShareProcessNamespace`：在 Pod 中启用 `shareProcessNamespace` 的设置，
   以便在 Pod 中运行的容器之间共享同一进程名字空间。更多详细信息，请参见
   [在 Pod 中的容器间共享同一进程名字空间](/zh/docs/tasks/configure-pod-container/share-process-namespace/)。
+- `ProbeTerminationGracePeriod`：在 Pod 上 启用 [设置探测器级别 `terminationGracePeriodSeconds`](/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationGracePeriodSeconds)。
+     有关更多信息，请参见 [enhancement proposal](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2238-liveness-probe-grace-period) for more details.
 - `ProcMountType`：允许容器通过设置 SecurityContext 的 `procMount` 字段来控制
   对 proc 文件系统的挂载方式。
 - `QOSReserved`：允许在 QoS 级别进行资源预留，以防止处于较低 QoS 级别的 Pod
@@ -1143,8 +1203,10 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery)
   for more details.
 - `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints.
+- `ServiceInternalTrafficPolicy`: Enables the `InternalTrafficPolicy` field on Services
 - `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
   field on Services.
+ `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services. See [Specifying class of load balancer implementation](/docs/concepts/services-networking/service/#specifying-class-of-load-balancer-implementation-load-balancer-class) for more details.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.
 -->
 - `SCTPSupport`：在 Pod、Service、Endpoints、NetworkPolicy 定义中
@@ -1155,7 +1217,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
   （颁发者和 JWKS URL）。详情参见
   [为 Pod 配置服务账户](/zh/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery) 。
 - `ServiceAppProtocol`：为 Service 和 Endpoints 启用 `appProtocol` 字段。
+- `ServiceInternalTrafficPolicy`：为服务启用 `InternalTrafficPolicy` 字段。
 - `ServiceLBNodePortControl`：为服务启用 `spec.allocateLoadBalancerNodePorts` 字段。
+ `ServiceLoadBalancerClass`: 为服务启用 `LoadBalancerClass` 字段。 有关更多信息，请参见 [负载均衡器类的定义 implementation](/zh/docs/concepts/services-networking/service/#specifying-class-of-load-balancer-implementation-load-balancer-class) for more details.
 - `ServiceLoadBalancerFinalizer`：为服务负载均衡启用终结器（finalizers）保护。
 <!--
 - `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers
@@ -1166,9 +1230,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [ServiceTopology](/docs/concepts/services-networking/service-topology/)
   for more details.
 - `SetHostnameAsFQDN`: Enable the ability of setting Fully Qualified Domain
-  Name(FQDN) as hostname of pod. See
+  Name(FQDN) as the hostname of a pod. See
   [Pod's `setHostnameAsFQDN` field](/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field).
-- `SizeMemoryBackedVolumes`: Enables kubelet support to size limit for
+- `SizeMemoryBackedVolumes`: Enable kubelets to determine the size limit for
   memory-backed volumes (mainly `emptyDir` volumes).
 -->
 - `ServiceNodeExclusion`：启用从云提供商创建的负载均衡中排除节点。
@@ -1214,6 +1278,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
   options can be specified to ensure that the specified number of process IDs
   will be reserved for the system as a whole and for Kubernetes system daemons
   respectively.
+- `SuspendJob`: Enable support to suspend and resume Jobs. See
+  [the Jobs docs](/docs/concepts/workloads/controllers/job/) for
+  more details.
 - `Sysctls`: Enable support for namespaced kernel parameters (sysctls) that can be
   set for each pod. See
   [sysctls](/docs/tasks/administer-cluster/sysctl-cluster/) for more details.
@@ -1225,6 +1292,8 @@ Each feature gate is designed for enabling/disabling a specific feature:
   `--system-reserved` 和 `--kube-reserved` 中的参数 `pid=<数值>` 可以分别用来
   设定为整个系统所预留的进程 ID 个数和为 Kubernetes 系统守护进程预留的进程
   ID 个数。
+- `SuspendJob`： 启用支持以暂停和恢复作业。 更多详细信息，请参见
+  [Jobs 文档](zh//docs/concepts/workloads/controllers/job/)。
 - `Sysctls`：允许为每个 Pod 设置的名字空间内核参数（sysctls）。
   更多详细信息，请参见 [sysctls](/zh/docs/tasks/administer-cluster/sysctl-cluster/)。
 <!--
@@ -1238,8 +1307,12 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `TaintNodesByCondition`: Enable automatic tainting nodes based on
   [node conditions](/docs/concepts/architecture/nodes/#condition).
 - `TokenRequest`: Enable the `TokenRequest` endpoint on service account resources.
-- `TokenRequestProjection`: Enable the injection of service account tokens into
-  a Pod through the [`projected` volume](/docs/concepts/storage/volumes/#projected).
+- `TokenRequestProjection`: Enable the injection of service account tokens into a
+  Pod through a [`projected` volume](/docs/concepts/storage/volumes/#projected).
+- `TopologyAwareHints`: Enables topology aware routing based on topology hints
+  in EndpointSlices. See [Topology Aware
+  Hints](/docs/concepts/services-networking/topology-aware-hints/) for more
+  details.
 - `TopologyManager`: Enable a mechanism to coordinate fine-grained hardware resource
   assignments for different components in Kubernetes. See
   [Control Topology Management Policies on a node](/docs/tasks/administer-cluster/topology-manager/).
@@ -1254,9 +1327,13 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `TokenRequestProjection`：启用通过
   [`projected` 卷](/zh/docs/concepts/storage/volumes/#projected)
   将服务帐户令牌注入到 Pod 中的特性。
+- `TopologyAwareHints`： 在 EndpointSlices 中启用基于拓扑提示的拓扑感知路由。
+  更多详细信息可参见[Topology Aware Hints](/docs/concepts/services-networking/topology-aware-hints/)
 - `TopologyManager`：启用一种机制来协调 Kubernetes 不同组件的细粒度硬件资源分配。
   详见[控制节点上的拓扑管理策略](/zh/docs/tasks/administer-cluster/topology-manager/)。
 <!--
+- 'VolumeCapacityPriority`: Enable support for prioritizing nodes in different
+  topologies based on available PV capacity.
 - `VolumePVCDataSource`: Enable support for specifying an existing PVC as a DataSource.
 - `VolumeScheduling`: Enable volume topology aware scheduling and make the
   PersistentVolumeClaim (PVC) binding aware of scheduling decisions. It also
@@ -1264,6 +1341,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   type when used together with the `PersistentLocalVolumes` feature gate.
 - `VolumeSnapshotDataSource`: Enable volume snapshot data source support.
 -->
+- 'VolumeCapacityPriority`: 基于可用 PV 容量的拓扑，启用对不同节点的优先级支持。
 - `VolumePVCDataSource`：启用对将现有 PVC 指定数据源的支持。
 - `VolumeScheduling`：启用卷拓扑感知调度，并使 PersistentVolumeClaim（PVC）
   绑定能够了解调度决策；当与 PersistentLocalVolumes 特性门控一起使用时，

From 9458e2d6df9d9214e58ed7b1773545eb4b176140 Mon Sep 17 00:00:00 2001
From: Maciej Filocha <maciej.filocha@gmail.com>
Date: Wed, 14 Apr 2021 10:06:31 +0200
Subject: [PATCH 551/788] Fix a typo in README-pl

Remove an extra parenthesis.
---
 README-pl.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README-pl.md b/README-pl.md
index cff5df065b..5426aef445 100644
--- a/README-pl.md
+++ b/README-pl.md
@@ -145,7 +145,7 @@ Więcej informacji na temat współpracy przy tworzeniu dokumentacji znajdziesz
 
 # Zasady postępowania
 
-Udział w działaniach społeczności Kubernetes jest regulowany przez [Kodeks postępowania CNCF]((https://github.com/cncf/foundation/blob/master/code-of-conduct-languages/pl.md).
+Udział w działaniach społeczności Kubernetesa jest regulowany przez [Kodeks postępowania CNCF](https://github.com/cncf/foundation/blob/master/code-of-conduct-languages/pl.md).
 
 # Dziękujemy!
 

From 59a0ba9bc4ed590ab168772e5ec1daeab690f773 Mon Sep 17 00:00:00 2001
From: Luo Lan <luolanzone@gmail.com>
Date: Wed, 14 Apr 2021 16:52:33 +0800
Subject: [PATCH 552/788] add antrea as network policy provider

---
 .../declare-network-policy.md                 |  1 +
 .../antrea-network-policy.md                  | 24 +++++++++++++++++++
 2 files changed, 25 insertions(+)
 create mode 100644 content/en/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy.md

diff --git a/content/en/docs/tasks/administer-cluster/declare-network-policy.md b/content/en/docs/tasks/administer-cluster/declare-network-policy.md
index fed4a77f9d..7acbaa9e7d 100644
--- a/content/en/docs/tasks/administer-cluster/declare-network-policy.md
+++ b/content/en/docs/tasks/administer-cluster/declare-network-policy.md
@@ -18,6 +18,7 @@ This document helps you get started using the Kubernetes [NetworkPolicy API](/do
 
 Make sure you've configured a network provider with network policy support. There are a number of network providers that support NetworkPolicy, including:
 
+* [Antrea](/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy/)
 * [Calico](/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy/)
 * [Cilium](/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy/)
 * [Kube-router](/docs/tasks/administer-cluster/network-policy-provider/kube-router-network-policy/)
diff --git a/content/en/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy.md b/content/en/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy.md
new file mode 100644
index 0000000000..36da1839e9
--- /dev/null
+++ b/content/en/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy.md
@@ -0,0 +1,24 @@
+---
+title: Use Antrea for NetworkPolicy
+content_type: task
+weight: 10
+---
+
+<!-- overview -->
+This page shows how to install and use Antrea CNI plugin on Kubernetes.
+For background on Project Antrea, read the [Introduction to Antrea](https://antrea.io/docs/).
+
+## {{% heading "prerequisites" %}}
+
+You need to have a Kubernetes cluster. Follow the
+[kubeadm getting started guide](/docs/reference/setup-tools/kubeadm/) to bootstrap one.
+
+<!-- steps -->
+
+## Deploying Antrea with kubeadm
+
+Follow [Getting Started](https://github.com/vmware-tanzu/antrea/blob/main/docs/getting-started.md) guide to deploy Antrea for kubeadm.
+
+## {{% heading "whatsnext" %}}
+
+Once your cluster is running, you can follow the [Declare Network Policy](/docs/tasks/administer-cluster/declare-network-policy/) to try out Kubernetes NetworkPolicy.

From fd7a2cb5bc3bef3bc6a26a01f330f47729b88ee0 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Wed, 14 Apr 2021 19:29:17 +0900
Subject: [PATCH 553/788] [ko] Update outdated files in dev-1.21-ko.1 (p3)

---
 .../ko/docs/reference/kubectl/cheatsheet.md   |  5 +-
 .../ko/docs/reference/scheduling/config.md    | 16 +++--
 .../ko/docs/reference/scheduling/policies.md  |  8 +--
 .../reference/setup-tools/kubeadm/_index.md   |  2 +
 .../setup/best-practices/cluster-large.md     |  5 +-
 .../container-runtimes.md                     |  7 +-
 .../tools/kubeadm/install-kubeadm.md          | 37 +++--------
 .../tools/kubeadm/self-hosting.md             | 65 -------------------
 .../production-environment/tools/kubespray.md |  2 +-
 .../windows/intro-windows-in-kubernetes.md    | 46 +++++++------
 10 files changed, 64 insertions(+), 129 deletions(-)
 delete mode 100644 content/ko/docs/setup/production-environment/tools/kubeadm/self-hosting.md

diff --git a/content/ko/docs/reference/kubectl/cheatsheet.md b/content/ko/docs/reference/kubectl/cheatsheet.md
index d5870bba30..4ee9c5406e 100644
--- a/content/ko/docs/reference/kubectl/cheatsheet.md
+++ b/content/ko/docs/reference/kubectl/cheatsheet.md
@@ -357,7 +357,7 @@ API 리소스를 탐색하기 위한 다른 작업:
 ```bash
 kubectl api-resources --namespaced=true      # 네임스페이스를 가지는 모든 리소스
 kubectl api-resources --namespaced=false     # 네임스페이스를 가지지 않는 모든 리소스
-kubectl api-resources -o name                # 모든 리소스의 단순한 (리소스 이름 만) 출력
+kubectl api-resources -o name                # 모든 리소스의 단순한 (리소스 이름만) 출력
 kubectl api-resources -o wide                # 모든 리소스의 확장된 ("wide"로 알려진) 출력
 kubectl api-resources --verbs=list,get       # "list"와 "get"의 요청 동사를 지원하는 모든 리소스 출력
 kubectl api-resources --api-group=extensions # "extensions" API 그룹의 모든 리소스
@@ -384,6 +384,9 @@ kubectl api-resources --api-group=extensions # "extensions" API 그룹의 모든
 # 클러스터에서 실행 중인 모든 이미지
 kubectl get pods -A -o=custom-columns='DATA:spec.containers[*].image'
 
+# `default` 네임스페이스의 모든 이미지를 파드별로 그룹지어 출력
+kubectl get pods --namespace default --output=custom-columns="NAME:.metadata.name,IMAGE:.spec.containers[*].image"
+
  # "k8s.gcr.io/coredns:1.6.2" 를 제외한 모든 이미지
 kubectl get pods -A -o=custom-columns='DATA:spec.containers[?(@.image!="k8s.gcr.io/coredns:1.6.2")].image'
 
diff --git a/content/ko/docs/reference/scheduling/config.md b/content/ko/docs/reference/scheduling/config.md
index 7b6942e119..5da54ed813 100644
--- a/content/ko/docs/reference/scheduling/config.md
+++ b/content/ko/docs/reference/scheduling/config.md
@@ -18,12 +18,10 @@ weight: 20
 각 단계는 익스텐션 포인트(extension point)를 통해 노출된다. 플러그인은 이러한
 익스텐션 포인트 중 하나 이상을 구현하여 스케줄링 동작을 제공한다.
 
-컴포넌트 구성 API([`v1alpha1`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1alpha1?tab=doc#KubeSchedulerConfiguration)
-또는 [`v1alpha2`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1alpha2?tab=doc#KubeSchedulerConfiguration))를
-사용하고, `kube-scheduler --config <filename>`을 실행하여
+[KubeSchedulerConfiguration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) 
+구조에 맞게 파일을 작성하고, 
+`kube-scheduler --config <filename>`을 실행하여 
 스케줄링 프로파일을 지정할 수 있다.
-`v1alpha2` API를 사용하면 [여러 프로파일](#여러-프로파일)을
-실행하도록 kube-scheduler를 구성할 수 있다.
 
 최소 구성은 다음과 같다.
 
@@ -149,7 +147,12 @@ profiles:
   익스텐션 포인트: `Score`.
 - `VolumeBinding`: 노드에 요청된 {{< glossary_tooltip text="볼륨" term_id="volume" >}}이 있는지
   또는 바인딩할 수 있는지 확인한다.
-  익스텐션 포인트: `PreFilter`, `Filter`, `Reserve`, `PreBind`.
+  익스텐션 포인트: `PreFilter`, `Filter`, `Reserve`, `PreBind`, `Score`.
+  {{< note >}}
+  `Score` 익스텐션 포인트는 `VolumeCapacityPriority` 기능이 
+  활성화되어 있어야 활성화되며, 
+  요청된 볼륨 사이즈를 만족하는 가장 작은 PV들을 우선순위 매긴다.
+  {{< /note >}}
 - `VolumeRestrictions`: 노드에 마운트된 볼륨이 볼륨 제공자에 특정한
   제한 사항을 충족하는지 확인한다.
   익스텐션 포인트: `Filter`.
@@ -249,3 +252,4 @@ profiles:
 
 * [kube-scheduler 레퍼런스](https://kubernetes.io/docs/reference/command-line-tools-reference/kube-scheduler/) 읽어보기
 * [스케줄링](/ko/docs/concepts/scheduling-eviction/kube-scheduler/)에 대해 알아보기
+* [kube-scheduler configuration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) 레퍼런스 읽어보기
diff --git a/content/ko/docs/reference/scheduling/policies.md b/content/ko/docs/reference/scheduling/policies.md
index f2cae65b68..626e077784 100644
--- a/content/ko/docs/reference/scheduling/policies.md
+++ b/content/ko/docs/reference/scheduling/policies.md
@@ -8,9 +8,7 @@ weight: 10
 
 스케줄링 정책을 사용하여 {{< glossary_tooltip text="kube-scheduler" term_id="kube-scheduler" >}}가 각각 노드를 필터링하고 스코어링(scoring)하기 위해 실행하는 *단정(predicates)* 및 *우선순위(priorities)* 를 지정할 수 있다.
 
-`kube-scheduler --policy-config-file <filename>` 또는 `kube-scheduler --policy-configmap <ConfigMap>`을 실행하고 [정책 유형](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy)을 사용하여 스케줄링 정책을 설정할 수 있다.
-
-
+`kube-scheduler --policy-config-file <filename>` 또는 `kube-scheduler --policy-configmap <ConfigMap>`을 실행하고 [정책 유형](/docs/reference/config-api/kube-scheduler-policy-config.v1/)을 사용하여 스케줄링 정책을 설정할 수 있다.
 
 <!-- body -->
 
@@ -110,9 +108,9 @@ weight: 10
 - `EvenPodsSpreadPriority`: 선호된
   [파드 토폴로지 분배 제약 조건](/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints/)을 구현한다.
 
-
-
 ## {{% heading "whatsnext" %}}
 
 * [스케줄링](/ko/docs/concepts/scheduling-eviction/kube-scheduler/)에 대해 배우기
 * [kube-scheduler 프로파일](/docs/reference/scheduling/profiles/)에 대해 배우기
+* [kube-scheduler configuration 레퍼런스 (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1) 읽어보기
+* [kube-scheduler Policy 레퍼런스 (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/) 읽어보기
diff --git a/content/ko/docs/reference/setup-tools/kubeadm/_index.md b/content/ko/docs/reference/setup-tools/kubeadm/_index.md
index 9211da1e0f..ca7a08f5ef 100644
--- a/content/ko/docs/reference/setup-tools/kubeadm/_index.md
+++ b/content/ko/docs/reference/setup-tools/kubeadm/_index.md
@@ -26,5 +26,7 @@ kubeadm을 설치하려면, [설치 가이드](/ko/docs/setup/production-environ
 * [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config/): kubeadm v1.7.x 이하의 버전을 사용하여 클러스터를 초기화한 경우, `kubeadm upgrade` 를 위해 사용자의 클러스터를 구성한다.
 * [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token/): `kubeadm join` 을 위한 토큰을 관리한다.
 * [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset/): `kubeadm init` 또는 `kubeadm join` 에 의한 호스트의 모든 변경 사항을 되돌린다.
+* [kubeadm certs](/docs/reference/setup-tools/kubeadm/kubeadm-certs): 쿠버네티스 인증서를 관리한다.
+* [kubeadm kubeconfig](/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig): kubeconfig 파일을 관리한다.
 * [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version/): kubeadm 버전을 출력한다.
 * [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/): 커뮤니티에서 피드백을 수집하기 위해서 기능 미리 보기를 제공한다.
diff --git a/content/ko/docs/setup/best-practices/cluster-large.md b/content/ko/docs/setup/best-practices/cluster-large.md
index 6f6dbbae0e..d67892e6dc 100644
--- a/content/ko/docs/setup/best-practices/cluster-large.md
+++ b/content/ko/docs/setup/best-practices/cluster-large.md
@@ -67,9 +67,8 @@ _A_ 영역에 있는 컨트롤 플레인 호스트로만 전달한다. 단일 
 
 쿠버네티스 [리소스 제한](/ko/docs/concepts/configuration/manage-resources-containers/)은
 파드와 컨테이너가 다른 컴포넌트에 영향을 줄 수 있는 메모리 누수 및 기타 방식의 영향을
-최소화하는 데 도움이 된다. 이러한 리소스 제한은 애플리케이션 워크로드에 적용되는 것과 마찬가지로
-{{< glossary_tooltip text="애드온" term_id="addons" >}}에도 적용될 수 있으며
-적용되어야 한다.
+최소화하는 데 도움이 된다. 이러한 리소스 제한은 애플리케이션 워크로드에 적용될 수 있는 것처럼 
+{{< glossary_tooltip text="애드온" term_id="addons" >}} 리소스에도 적용될 수 있다.
 
 예를 들어, 로깅 컴포넌트에 대한 CPU 및 메모리 제한을 설정할 수 있다.
 
diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index 52ab0fc94b..d2638f4433 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -48,7 +48,7 @@ Systemd는 cgroup과의 긴밀한 통합을 통해 프로세스당 cgroup을 할
 시스템이 안정화된다. 도커에 대해 구성하려면, `native.cgroupdriver=systemd`를 설정한다.
 
 {{< caution >}}
-클러스터에 결합되어 있는 노드의 cgroup 관리자를 변경하는 것은 강력하게 권장하지 *않는다*.
+클러스터에 결합되어 있는 노드의 cgroup 관리자를 변경하는 것은 신중하게 수행해야 한다.
 하나의 cgroup 드라이버의 의미를 사용하여 kubelet이 파드를 생성해왔다면,
 컨테이너 런타임을 다른 cgroup 드라이버로 변경하는 것은 존재하는 기존 파드에 대해 파드 샌드박스 재생성을 시도할 때, 에러가 발생할 수 있다.
 kubelet을 재시작하는 것은 에러를 해결할 수 없을 것이다.
@@ -57,6 +57,11 @@ kubelet을 재시작하는 것은 에러를 해결할 수 없을 것이다.
 교체하거나, 자동화를 사용하여 다시 설치한다.
 {{< /caution >}}
 
+### kubeadm으로 생성한 클러스터의 드라이버를 `systemd`로 변경하기
+
+kubeadm으로 생성한 클러스터의 cgroup 드라이버를 `systemd`로 변경하려면
+[변경 가이드](/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/)를 참고한다.
+
 ## 컨테이너 런타임
 
 {{% thirdparty-content %}}
diff --git a/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 12b48ad17e..a7ce213fda 100644
--- a/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/ko/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -70,7 +70,7 @@ sudo sysctl --system
 
 | 프로토콜   | 방향       | 포트 범위    | 목적                      | 사용자                     |
 |----------|-----------|------------|-------------------------|---------------------------|
-| TCP      | 인바운드    | 6443*      | 쿠버네티스 API 서버         | 모두                       |
+| TCP      | 인바운드    | 6443\*      | 쿠버네티스 API 서버         | 모두                       |
 | TCP      | 인바운드    | 2379-2380  | etcd 서버 클라이언트 API    | kube-apiserver, etcd      |
 | TCP      | 인바운드    | 10250      | kubelet API             | 자체, 컨트롤 플레인          |
 | TCP      | 인바운드    | 10251      | kube-scheduler          | 자체                      |
@@ -294,33 +294,17 @@ Flatcar Container Linux 배포판은 `/usr` 디렉터리를 읽기 전용 파일
 kubelet은 이제 kubeadm이 수행할 작업을 알려 줄 때까지 크래시루프(crashloop) 상태로
 기다려야 하므로 몇 초마다 다시 시작된다.
 
-## 컨트롤 플레인 노드에서 kubelet이 사용하는 cgroup 드라이버 구성
+## cgroup 드라이버 구성
 
-도커를 사용할 때, kubeadm은 kubelet 용 cgroup 드라이버를 자동으로 감지하여
-런타임 중에 `/var/lib/kubelet/config.yaml` 파일에 설정한다.
-
-다른 CRI를 사용하는 경우, 다음과 같이 `cgroupDriver` 값을 `kubeadm init` 에 전달해야 한다.
-
-```yaml
-apiVersion: kubelet.config.k8s.io/v1beta1
-kind: KubeletConfiguration
-cgroupDriver: <value>
-```
-
-자세한 내용은 [구성 파일과 함께 kubeadm init 사용](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)을 참고한다.
-
-`cgroupfs` 가 이미 kubelet의 기본값이기 때문에, 사용자의
-CRI cgroup 드라이버가 `cgroupfs` 가 아닌 **경우에만** 위와 같이 설정해야 한다.
-
-{{< note >}}
-`--cgroup-driver` 플래그가 kubelet에 의해 사용 중단되었으므로, `/var/lib/kubelet/kubeadm-flags.env`
-또는 `/etc/default/kubelet`(RPM에 대해서는 `/etc/sysconfig/kubelet`)에 있는 경우, 그것을 제거하고 대신 KubeletConfiguration을
-사용한다(기본적으로 `/var/lib/kubelet/config.yaml` 에 저장됨).
-{{< /note >}}
-
-CRI-O 및 containerd와 같은 다른 컨테이너 런타임에 대한 cgroup 드라이버의
-자동 감지에 대한 작업이 진행 중이다.
+컨테이너 런타임과 kubelet은 
+["cgroup 드라이버"](/ko/docs/setup/production-environment/container-runtimes/)라는 속성을 갖고 있으며, 
+cgroup 드라이버는 리눅스 머신의 cgroup 관리 측면에 있어서 중요하다.
 
+{{< warning >}}
+컨테이너 런타임과 kubelet의 cgroup 드라이버를 일치시켜야 하며, 그렇지 않으면 kubelet 프로세스에 오류가 발생한다.
+ 
+더 자세한 사항은 [cgroup 드라이버 설정하기](/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/)를 참고한다.
+{{< /warning >}}
 
 ## 문제 해결
 
@@ -328,5 +312,4 @@ kubeadm에 문제가 있는 경우, [문제 해결 문서](/docs/setup/productio
 
 ## {{% heading "whatsnext" %}}
 
-
 * [kubeadm을 사용하여 클러스터 생성](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)
diff --git a/content/ko/docs/setup/production-environment/tools/kubeadm/self-hosting.md b/content/ko/docs/setup/production-environment/tools/kubeadm/self-hosting.md
deleted file mode 100644
index cfa18135b1..0000000000
--- a/content/ko/docs/setup/production-environment/tools/kubeadm/self-hosting.md
+++ /dev/null
@@ -1,65 +0,0 @@
----
-reviewers:
-title: 컨트롤 플레인을 자체 호스팅하기 위해 쿠버네티스 클러스터 구성하기
-content_type: concept
-weight: 100
----
-
-<!-- overview -->
-
-### 쿠버네티스 컨트롤 플레인 자체 호스팅하기 {#self-hosting}
-
-kubeadm은 실험적으로 _자체 호스팅_ 된 쿠버네티스 컨트롤 플레인을 만들 수 있도록
-해준다. API 서버, 컨트롤러 매니저 및 스케줄러와 같은 주요 구성 요소가 정적(static) 파일을
-통해 kubelet에 구성된 [스태틱(static) 파드](/ko/docs/tasks/configure-pod-container/static-pod/)
-대신 쿠버네티스 API를 통해 구성된 [데몬셋(DaemonSet) 파드](/ko/docs/concepts/workloads/controllers/daemonset/)
-로 실행된다.
-
-자체 호스팅된 클러스터를 만들려면 [kubeadm alpha selfhosting pivot](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/#cmd-selfhosting)
-명령어를 확인한다.
-
-<!-- body -->
-
-#### 주의사항
-
-{{< caution >}}
-이 기능은 클러스터를 지원되지 않는 상태로 전환하여 더 이상 클러스터를 관리할 수 없게 만든다.
-이것은 `kubeadm upgrade`를 포함한다.
-{{< /caution >}}
-
-1. 1.8 이후 버전에서 자체 호스팅은 몇 가지 중요한 한계가 있다.
-  특히 자체 호스팅된 클러스터는 수동 조정 없이는
-  _컨트롤 플레인 노드를 재부팅하고 나서 복구할 수 없다._
-
-1. 기본적으로 자체 호스팅된 컨트롤 플레인 파드는
-  [`hostPath`](/ko/docs/concepts/storage/volumes/#hostpath) 볼륨에서 불러 온
-  자격 증명에 의존한다. 초기 생성을 제외하고, 이러한 자격 증명은 kubeadm에 의해
-  관리되지 않는다.
-
-1. 컨트롤 플레인의 자체 호스팅된 부분에는 스태틱 파드로 실행되는 etcd가
-  포함되지 않는다.
-
-#### 프로세스
-
-자체 호스팅 부트스트랩 프로세스는 [kubeadm 설계
-문서](https://github.com/kubernetes/kubeadm/blob/master/docs/design/design_v1.9.md#optional-self-hosting)에 기록되어 있다.
-
-요약하면 `kubeadm alpha selfhosting`은 다음과 같이 작동한다.
-
-  1. 부트스트랩 스태틱 컨트롤 플레인이 실행되고 정상 상태가 될 때까지 기다린다.
-    이것은 자체 호스팅이 없는 `kubeadm init` 프로세스와 동일하다.
-
-  1. 스태틱 컨트롤 플레인 파드 매니페스트를 사용하여 자체 호스팅된 컨트롤
-    플레인을 실행할 데몬셋 매니페스트 집합을 구성한다. 또한 필요한 경우
-    해당 매니페스트를 수정한다. 예를 들어, 시크릿을 위한 새로운 볼륨을
-    추가한다.
-
-  1. `kube-system` 네임스페이스에 데몬셋을 생성하고 결과 파드가 실행될 때까지
-    대기한다.
-
-  1. 일단 자체 호스팅된 파드가 동작하면 관련 스태틱 파드가 삭제되고
-    kubeadm은 계속해서 다음 구성 요소를 설치한다.
-    이것은 kubelet이 스태틱 파드를 멈추게 한다.
-
-  1. 기존의 컨트롤 플레인이 멈추면 새롭게 자체 호스팅된 컨트롤 플레인은
-    리스닝 포트에 바인딩하여 활성화할 수 있다.
diff --git a/content/ko/docs/setup/production-environment/tools/kubespray.md b/content/ko/docs/setup/production-environment/tools/kubespray.md
index cb0caf175e..301c724927 100644
--- a/content/ko/docs/setup/production-environment/tools/kubespray.md
+++ b/content/ko/docs/setup/production-environment/tools/kubespray.md
@@ -68,7 +68,7 @@ Kubespray에서는 디플로이먼트의 많은 속성들을 사용자가 정의
   * {{< glossary_tooltip term_id="cri-o" >}}
 * 인증서 생성 방법
 
-Kubespray의 [변수 파일들](https://docs.ansible.com/ansible/playbooks_variables.html)을 사용자가 정의할 수 있다. 만약 Kubespray를 막 시작한 경우, kubespray의 기본 설정값을 이용해 클러스터를 배포하고 Kubernetes를 탐색하는 것이 좋다.
+Kubespray의 [변수 파일들](https://docs.ansible.com/ansible/latest/user_guide/playbooks_variables.html)을 사용자가 정의할 수 있다. 만약 Kubespray를 처음 접하는 경우, kubespray의 기본 설정값을 이용해 클러스터를 배포하고 Kubernetes를 탐색하는 것이 좋다.
 
 ### (4/5) 클러스터 배포하기
 
diff --git a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index b488e6c04d..cbe02c49e2 100644
--- a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -33,7 +33,7 @@ weight: 65
 쿠버네티스의 윈도우 운영 체제 지원은 다음 표를 참조한다. 단일 이기종 쿠버네티스 클러스터에는 윈도우 및 리눅스 워커 노드가 모두 있을 수 있다. 윈도우 컨테이너는 윈도우 노드에서, 리눅스 컨테이너는 리눅스 노드에서 스케줄되어야 한다.
 
 | 쿠버네티스 버전 | 윈도우 서버 LTSC 릴리스 | 윈도우 서버 SAC 릴리스 |
-| --- | --- | --- | --- |
+| --- | --- | --- |
 | *Kubernetes v1.17* | Windows Server 2019 | Windows Server ver 1809 |
 | *Kubernetes v1.18* | Windows Server 2019 | Windows Server ver 1809, Windows Server ver 1903, Windows Server ver 1909 |
 | *Kubernetes v1.19* | Windows Server 2019 | Windows Server ver 1909, Windows Server ver 2004 |
@@ -230,23 +230,32 @@ CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템
 
 ### 제한
 
-#### 컨트롤 플레인
-
 윈도우는 쿠버네티스 아키텍처 및 컴포넌트 매트릭스에서 워커 노드로만 지원된다. 즉, 쿠버네티스 클러스터에는 항상 리눅스 마스터 노드가 반드시 포함되어야 하고, 0개 이상의 리눅스 워커 노드 및 0개 이상의 윈도우 워커 노드가 포함된다.
 
-#### 컴퓨트 {#컴퓨트-제한}
-
-##### 리소스 관리 및 프로세스 격리
+#### 자원 관리
 
  리눅스 cgroup은 리눅스에서 리소스 제어를 위한 파드 경계로 사용된다. 컨테이너는 네트워크, 프로세스 및 파일시스템 격리를 위해 해당 경계 내에 생성된다. cgroups API는 cpu/io/memory 통계를 수집하는 데 사용할 수 있다. 반대로 윈도우는 시스템 네임스페이스 필터가 있는 컨테이너별로 잡(Job) 오브젝트를 사용하여 컨테이너의 모든 프로세스를 포함하고 호스트와의 논리적 격리를 제공한다. 네임스페이스 필터링 없이 윈도우 컨테이너를 실행할 수 있는 방법은 없다. 즉, 시스템 권한은 호스트 컨텍스트에서 삽입 될(assert) 수 없으므로 권한이 있는(privileged) 컨테이너는 윈도우에서 사용할 수 없다. 보안 계정 매니져(Security Account Manager, SAM)가 분리되어 있으므로 컨테이너는 호스트의 ID를 가정할 수 없다.
 
-##### 운영 체제 제한
+#### 자원 예약
 
-윈도우에는 호스트 OS 버전이 컨테이너 베이스 이미지 OS 버전과 일치해야 하는 엄격한 호환성 규칙이 있다. 윈도우 서버 2019의 컨테이너 운영 체제가 있는 윈도우 컨테이너만 지원된다. 윈도우 컨테이너 이미지 버전의 일부 이전 버전과의 호환성을 가능하게 하는 컨테이너의 Hyper-V 격리는 향후 릴리스로 계획되어 있다.
+##### 메모리 예약
+윈도우에는 리눅스에는 있는 메모리 부족 프로세스 킬러가 없다. 윈도우는 모든 사용자-모드 메모리 할당을 항상 가상 메모리처럼 처리하며, 페이지파일이 필수이다. 결과적으로 윈도우에서는 리눅스에서 발생할 수 있는 메모리 부족 상태에 도달하지 않으며, 프로세스는 메모리 부족 (out of memory, OOM) 종료를 겪는 대신 디스크로 페이징한다. 메모리가 오버프로비저닝되고 모든 물리 메모리가 고갈되면 페이징으로 인해 성능이 저하될 수 있다.
 
-##### 기능 제한
+kubelet 파라미터 `--kubelet-reserve` 를 사용하여 메모리 사용량을 합리적인 범위 내로 유지할 수 있으며, `--system-reserve` 를 사용하여 노드 (컨테이너 외부) 의 메모리 사용량을 예약할 수 있다. 이들을 사용하면 그만큼 [노드 할당(NodeAllocatable)](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)은 줄어든다.
 
-* TerminationGracePeriod: CRI-containerD 필요
+{{< note >}}
+워크로드를 배포할 때, 컨테이너에 리소스 제한을 걸어라 (제한만 설정하거나, 제한이 요청과 같아야 함). 이 또한 NodeAllocatable 에서 차감되며, 메모리가 꽉 찬 노드에 스케줄러가 파드를 할당하지 않도록 제한한다.
+{{< /note >}}
+
+오버프로비저닝을 방지하는 가장 좋은 방법은 윈도우, 도커, 그리고 쿠버네티스 프로세스를 위해 최소 2GB 이상의 시스템 예약 메모리로 kubelet을 설정하는 것이다.
+
+##### CPU 예약
+윈도우, 도커, 그리고 다른 쿠버네티스 호스트 프로세스가 이벤트에 잘 응답할 수 있도록, CPU의 일정 비율을 예약하는 것이 좋다. 이 값은 윈도우 노드에 있는 CPU 코어 수에 따라 조정해야 한다. 이 비율을 결정하려면, 각 노드의 최대 파드 밀도(density)를 관찰하고, 시스템 서비스의 CPU 사용량을 모니터링하여 워크로드 요구사항을 충족하는 값을 선택해야 한다.
+
+kubelet 파라미터 `--kubelet-reserve` 를 사용하여 CPU 사용량을 합리적인 범위 내로 유지할 수 있으며, `--system-reserve` 를 사용하여 노드 (컨테이너 외부) 의 CPU 사용량을 예약할 수 있다. 이들을 사용하면 그만큼 [노드 할당(NodeAllocatable)](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)은 줄어든다.
+
+#### 기능 제한
+* TerminationGracePeriod: 구현되지 않음
 * 단일 파일 매핑: CRI-ContainerD로 구현 예정
 * 종료 메시지: CRI-ContainerD로 구현 예정
 * 특권을 가진(Privileged) 컨테이너: 현재 윈도우 컨테이너에서 지원되지 않음
@@ -254,15 +263,8 @@ CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템
 * 기존 노드 문제 감지기는 리눅스 전용이며 특권을 가진 컨테이너가 필요하다. 윈도우에서 특권을 가진 컨테이너를 지원하지 않기 때문에 일반적으로 윈도우에서 이 기능이 사용될 것으로 예상하지 않는다.
 * 공유 네임스페이스의 모든 기능이 지원되는 것은 아니다. (자세한 내용은 API 섹션 참조).
 
-##### 메모리 예약 및 처리
-
-윈도우에는 리눅스처럼 out-of-memory 프로세스 킬러가 없다. 윈도우는 항상 모든 사용자 모드 메모리 할당을 가상으로 처리하며 페이지 파일은 필수이다. 결과적으로 윈도우는 리눅스와 같은 방식으로 메모리 부족 상태에 도달하지 않고, 메모리 부족(OOM)으로 인한 종료 대신 페이지를 디스크로 처리한다. 메모리가 과도하게 프로비저닝되고 모든 실제 메모리가 고갈되면, 페이징으로 인해 성능이 저하될 수 있다.
-
-2단계 프로세스를 통해 적절한 범위 내에서 메모리 사용량을 유지할 수 있다. 먼저, kubelet 파라미터 `--kubelet-reserve` 그리고/또는 `--system-reserve`를 사용하여 노드(컨테이너 외부)의 메모리 사용량을 고려한다. 이렇게 하면 [노드 할당(NodeAllocatable)](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)이 줄어든다. 워크로드를 배포할 때 컨테이너에 리소스 제한을 사용(limits만 설정하거나 limits이 requests과 같아야 함)한다. 또한 NodeAllocatable에서 빼고 노드가 가득차면 스케줄러가 더 많은 파드를 추가하지 못하도록 한다.
-
-오버 프로비저닝을 방지하는 모범 사례는 윈도우, 도커 및 쿠버네티스 프로세스를 고려하여 최소 2GB의 시스템 예약 메모리로 kubelet을 구성하는 것이다.
-
-플래그의 동작은 아래에 설명된 대로 다르게 동작한다.
+#### 각 플래그의 리눅스와의 차이점
+윈도우 노드에서의 kubelet 플래그의 동작은 아래에 설명된 대로 다르게 동작한다.
 
 * `--kubelet-reserve`, `--system-reserve`, `--eviction-hard` 플래그는 Node Allocatable 업데이트
 * `--enforce-node-allocable`을 사용한 축출(Eviction)은 구현되지 않았다.
@@ -362,7 +364,7 @@ SELinux, AppArmor, Seccomp, 기능(POSIX 기능)과 같은 리눅스 특유의 
 
 * ID - 리눅스는 정수형으로 표시되는 userID(UID) 및 groupID(GID)를 사용한다. 사용자와 그룹 이름은 정식 이름이 아니다. UID+GID에 대한 `/etc/groups` 또는 `/etc/passwd`의 별칭일 뿐이다. 윈도우는 윈도우 보안 계정 관리자(Security Account Manager, SAM) 데이터베이스에 저장된 더 큰 이진 보안 식별자(SID)를 사용한다. 이 데이터베이스는 호스트와 컨테이너 간에 또는 컨테이너들 간에 공유되지 않는다.
 * 파일 퍼미션 - 윈도우는 권한 및 UUID+GID의 비트 마스크(bitmask) 대신 SID를 기반으로 하는 접근 제어 목록을 사용한다.
-* 파일 경로 - 윈도우의 규칙은 `/` 대신 `\`를 사용하는 것이다. Go IO 라이브러리는 일반적으로 두 가지를 모두 허용하고 작동하도록 하지만, 컨테이너 내부에서 해석되는 경로 또는 커맨드 라인을 설정할 때 `\`가 필요할 수 있다.
+* 파일 경로 - 윈도우의 규칙은 `/` 대신 `\`를 사용하는 것이다. Go IO 라이브러리는 두 가지 파일 경로 분리자를 모두 허용한다. 하지만, 컨테이너 내부에서 해석되는 경로 또는 커맨드 라인을 설정할 때 `\`가 필요할 수 있다.
 * 신호(Signals) - 윈도우 대화형(interactive) 앱은 종료를 다르게 처리하며, 다음 중 하나 이상을 구현할 수 있다.
   * UI 스레드는 WM_CLOSE를 포함하여 잘 정의된(well-defined) 메시지를 처리한다.
   * 콘솔 앱은 컨트롤 핸들러(Control Handler)를 사용하여 ctrl-c 또는 ctrl-break를 처리한다.
@@ -410,6 +412,10 @@ PodSecurityContext 필드는 윈도우에서 작동하지 않는다. 참조를 
 * V1.PodSecurityContext.SupplementalGroups - 윈도우에서는 사용할 수 없는 GID를 제공한다.
 * V1.PodSecurityContext.Sysctls - 이것들은 리눅스 sysctl 인터페이스의 일부이다. 윈도우에는 이에 상응하는 것이 없다.
 
+#### 운영 체제 버전 제한
+
+윈도우에는 호스트 OS 버전이 컨테이너 베이스 이미지 OS 버전과 일치해야 하는 엄격한 호환성 규칙이 있다. 윈도우 서버 2019의 컨테이너 운영 체제가 있는 윈도우 컨테이너만 지원된다. 윈도우 컨테이너 이미지 버전의 일부 이전 버전과의 호환성을 가능하게 하는 컨테이너의 Hyper-V 격리는 향후 릴리스로 계획되어 있다.
+
 ## 도움 받기 및 트러블슈팅 {#troubleshooting}
 
 쿠버네티스 클러스터 트러블슈팅을 위한 기본 도움말은 이 [섹션](/docs/tasks/debug-application-cluster/troubleshooting/)에서 먼저 찾아야 한다. 이 섹션에는 몇 가지 추가 윈도우 관련 트러블슈팅 도움말이 포함되어 있다. 로그는 쿠버네티스에서 트러블슈팅하는데 중요한 요소이다. 다른 기여자로부터 트러블슈팅 지원을 구할 때마다 이를 포함해야 한다. SIG-Windows [로그 수집에 대한 기여 가이드](https://github.com/kubernetes/community/blob/master/sig-windows/CONTRIBUTING.md#gathering-logs)의 지침을 따른다.

From 17e45d842c402c73950355db30a4450c7a0fea15 Mon Sep 17 00:00:00 2001
From: Jim Bugwadia <jim@nirmata.com>
Date: Wed, 14 Apr 2021 04:08:41 -0700
Subject: [PATCH 554/788] Add multi-tenancy usage models blog post (#27200)

* multi-tenancy usage models blog post

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update slug, date, filename

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* rename file

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* make links relative

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update publish date to 4/15

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add file

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---
 ...-15-Three-Tenancy-Models-for-Kubernetes.md | 81 +++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md

diff --git a/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md b/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
new file mode 100644
index 0000000000..cf29c5cfea
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
@@ -0,0 +1,81 @@
+---
+layout: blog
+title: 'Three Tenancy Models For Kubernetes'
+date: 2021-04-15
+slug: three-tenancy-models-for-kubernetes
+---
+
+**Authors:** Ryan Bezdicek (Medtronic), Jim Bugwadia (Nirmata), Tasha Drew (VMware),  Fei Guo (Alibaba), Adrian Ludwin (Google)
+
+Kubernetes clusters are typically used by several teams in an organization. In other cases, Kubernetes may be used to deliver applications to end users requiring segmentation and isolation of resources across users from different organizations. Secure sharing of Kubernetes control plane and worker node resources allows maximizing productivity and saving costs in both cases.
+
+The Kubernetes Multi-Tenancy Working Group is chartered with defining tenancy models for Kubernetes and making it easier to operationalize tenancy related use cases. This blog post, from the working group members, describes three common tenancy models and introduces related working group projects.
+
+We will also be presenting on this content and discussing different use cases at our Kubecon EU 2021 panel session, [Multi-tenancy vs. Multi-cluster: When Should you Use What?](https://sched.co/iE66).
+
+## Namespaces as a Service
+
+With the *namespaces-as-a-service* model, tenants share a cluster and tenant workloads are restricted to a set of Namespaces assigned to the tenant. The cluster control plane resources like the API server and scheduler, and worker node resources like CPU, memory, etc. are available for use across all tenants. 
+
+To isolate tenant workloads, each namespace must also contain:
+* **[role bindings](/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding):** for controlling access to the namespace
+* **[network policies](/docs/concepts/services-networking/network-policies/):** to prevent network traffic across tenants
+* **[resource quotas](/docs/concepts/policy/resource-quotas/):** to limit usage and ensure fairness across tenants
+
+With this model, tenants share cluster-wide resources like ClusterRoles and CustomResourceDefinitions (CRDs) and hence cannot create or update these cluster-wide resources.
+
+The [Hierarchical Namespace Controller (HNC)](/blog/2020/08/14/introducing-hierarchical-namespaces/) project makes it easier to manage namespace based tenancy by allowing users to create additional namespaces under a namespace, and propagating resources within the namespace hierarchy. This allows self-service namespaces for tenants, without requiring cluster-wide permissions.
+
+The [Multi-Tenancy Benchmarks (MTB)](https://github.com/kubernetes-sigs/multi-tenancy/tree/master/benchmarks) project provides benchmarks and a command-line tool that performs several configuration and runtime checks to report if tenant namespaces are properly isolated and the necessary security controls are implemented.
+
+## Clusters as a Service
+
+With the *clusters-as-a-service* usage model, each tenant gets their own cluster.  This model allows tenants to have different versions of cluster-wide resources such as CRDs, and provides full isolation of the Kubernetes control plane.
+
+The tenant clusters may be provisioned using projects like [Cluster API (CAPI)](https://cluster-api.sigs.k8s.io/) where a management cluster is used to provision multiple workload clusters. A workload cluster is assigned to a tenant and tenants have full control over cluster resources. Note that in most enterprises a central platform team may be responsible for managing required add-on services such as security and monitoring services, and for providing cluster lifecycle management services such as patching and upgrades. A tenant administrator may be restricted from modifying the centrally managed services and other critical cluster information. 
+
+## Control planes as a Service
+
+In a variation of the *clusters-as-a-service* model, the tenant cluster may be a **virtual cluster** where each tenant gets their own dedicated Kubernetes control plane but share worker node resources. As with other forms of virtualization, users of a virtual cluster see no significant differences between a virtual cluster and other Kubernetes clusters. This is sometimes referred to as `Control Planes as a Service` (CPaaS).
+
+A virtual cluster of this type shares worker node resources and workload state independent control plane components, like the scheduler. Other workload aware control-plane components, like the API server, are created on a per-tenant basis to allow overlaps, and additional components are used to synchronize and manage state across the per-tenant control plane and the underlying shared cluster resources. With this model users can manage their own cluster-wide resources. 
+
+The [Virtual Cluster](https://github.com/kubernetes-sigs/multi-tenancy/tree/master/incubator/virtualcluster) project implements this model, where a `supercluster` is shared by multiple `virtual clusters`. The [Cluster API Nested](https://github.com/kubernetes-sigs/cluster-api-provider-nested) project is extending this work to conform to the CAPI model, allowing use of familiar API resources to provision and manage virtual clusters.
+
+## Security considerations
+
+Cloud native security involves different system layers and lifecycle phases as described in the [Cloud Native Security Whitepaper](https://www.cncf.io/blog/2020/11/18/announcing-the-cloud-native-security-white-paper/) from CNCF SIG Security.  Without proper security measures implemented across all layers and phases, Kubernetes tenant isolation can be compromised and a security breach with one tenant can threaten other tenants.
+
+It is important for any new user to Kubernetes to realize that the default installation of a new upstream Kubernetes cluster is not secure, and you are going to need to invest in hardening it in order to avoid security issues.
+
+At a minimum, the following security measures are required:
+* image scanning: container image vulnerabilities can be exploited to execute commands and access additional resources. 
+* [RBAC](/docs/reference/access-authn-authz/rbac/): for *namespaces-as-a-service* user roles and permissions must be properly configured at a per-namespace level; for other models tenants may need to be restricted from accessing centrally managed add-on services and other cluster-wide resources.
+* [network policies](/docs/concepts/services-networking/network-policies/): for *namespaces-as-a-service* default network policies that deny all ingress and egress traffic are recommended to prevent cross-tenant network traffic and may also be used as a best practice for other tenancy models.
+* [Kubernetes Pod Security Standards](/docs/concepts/security/pod-security-standards/): to enforce Pod hardening best practices the `Restricted` policy is recommended as the default for tenant workloads with exclusions configured only as needed.
+* [CIS Benchmarks for Kubernetes](https://www.cisecurity.org/benchmark/kubernetes/): the CIS Benchmarks for Kubernetes guidelines should be used to properly configure Kubernetes control-plane and worker node components.
+
+Additional recommendations include using:
+* policy engines: for configuration security best practices, such as only allowing trusted registries.  
+* runtime scanners: to detect and report runtime security events.
+* VM-based container sandboxing: for stronger data plane isolation.
+
+While proper security is required independently of tenancy models, not having essential security controls like [pod security](/docs/concepts/security/pod-security-standards/) in a shared cluster provides attackers with means to compromise tenancy models and possibly access sensitive information across tenants increasing the overall risk profile.
+
+## Summary
+
+A 2020 CNCF survey showed that production Kubernetes usage has increased by over 300% since 2016. As an increasing number of Kubernetes workloads move to production, organizations are looking for ways to share Kubernetes resources across teams for agility and cost savings. 
+
+The **namespaces as a service** tenancy model allows sharing clusters and hence enables resource efficiencies. However, it requires proper security configurations and has limitations as all tenants share the same cluster-wide resources. 
+
+The **clusters as a service** tenancy model addresses these limitations, but with higher management and resource overhead. 
+
+The **control planes as a service** model provides a way to share resources of a single Kubernetes cluster and also let tenants manage their own cluster-wide resources. Sharing worker node resources increases resource effeciencies, but also exposes cross tenant security and isolation concerns that exist for shared clusters.
+
+ In many cases, organizations will use multiple tenancy models to address different use cases and as different product and development teams will have varying needs. Following security and management best practices, such as applying [Pod Security Standards](/docs/concepts/security/pod-security-standards/) and not using the `default` namespace, makes it easer to switch from one model to another.
+
+The [Kubernetes Multi-Tenancy Working Group](https://github.com/kubernetes-sigs/multi-tenancy) has created several projects like [Hierarchical Namespaces Controller](https://github.com/kubernetes-sigs/multi-tenancy/tree/master/incubator/hnc), [Virtual Cluster](https://github.com/kubernetes-sigs/multi-tenancy/tree/master/incubator/virtualcluster) / [CAPI Nested](https://github.com/kubernetes-sigs/cluster-api-provider-nested), and [Multi-Tenancy Benchmarks](https://github.com/kubernetes-sigs/multi-tenancy/tree/master/benchmarks) to make it easier to provision and manage multi-tenancy models.
+
+If you are interested in multi-tenancy topics, or would like to share your use cases, please join us in an upcoming [community meeting](https://github.com/kubernetes/community/blob/master/wg-multitenancy/README.md) or reach out on the *wg-multitenancy channel* on the [Kubernetes slack](https://slack.k8s.io/).
+
+

From b4603846d250d463f5d607e9fa5c708693382b1d Mon Sep 17 00:00:00 2001
From: Pushkar Joglekar <3390906+PushkarJ@users.noreply.github.com>
Date: Wed, 14 Apr 2021 09:05:28 -0700
Subject: [PATCH 555/788] Update CNCF security whitepaper link

---
 .../_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md b/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
index cf29c5cfea..d65e127f37 100644
--- a/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
+++ b/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
@@ -44,7 +44,7 @@ The [Virtual Cluster](https://github.com/kubernetes-sigs/multi-tenancy/tree/mast
 
 ## Security considerations
 
-Cloud native security involves different system layers and lifecycle phases as described in the [Cloud Native Security Whitepaper](https://www.cncf.io/blog/2020/11/18/announcing-the-cloud-native-security-white-paper/) from CNCF SIG Security.  Without proper security measures implemented across all layers and phases, Kubernetes tenant isolation can be compromised and a security breach with one tenant can threaten other tenants.
+Cloud native security involves different system layers and lifecycle phases as described in the [Cloud Native Security Whitepaper](https://kubernetes.io/blog/2020/11/18/cloud-native-security-for-your-clusters) from CNCF SIG Security.  Without proper security measures implemented across all layers and phases, Kubernetes tenant isolation can be compromised and a security breach with one tenant can threaten other tenants.
 
 It is important for any new user to Kubernetes to realize that the default installation of a new upstream Kubernetes cluster is not secure, and you are going to need to invest in hardening it in order to avoid security issues.
 

From 36d5eb8ec83ff94d91f29a6bd73993e936e6ad3a Mon Sep 17 00:00:00 2001
From: Pushkar Joglekar <3390906+PushkarJ@users.noreply.github.com>
Date: Wed, 14 Apr 2021 09:14:09 -0700
Subject: [PATCH 556/788] Update
 content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md   | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md b/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
index d65e127f37..a3687cf5fd 100644
--- a/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
+++ b/content/en/blog/_posts/2021-04-15-Three-Tenancy-Models-for-Kubernetes.md
@@ -44,7 +44,7 @@ The [Virtual Cluster](https://github.com/kubernetes-sigs/multi-tenancy/tree/mast
 
 ## Security considerations
 
-Cloud native security involves different system layers and lifecycle phases as described in the [Cloud Native Security Whitepaper](https://kubernetes.io/blog/2020/11/18/cloud-native-security-for-your-clusters) from CNCF SIG Security.  Without proper security measures implemented across all layers and phases, Kubernetes tenant isolation can be compromised and a security breach with one tenant can threaten other tenants.
+Cloud native security involves different system layers and lifecycle phases as described in the [Cloud Native Security Whitepaper](/blog/2020/11/18/cloud-native-security-for-your-clusters) from CNCF SIG Security.  Without proper security measures implemented across all layers and phases, Kubernetes tenant isolation can be compromised and a security breach with one tenant can threaten other tenants.
 
 It is important for any new user to Kubernetes to realize that the default installation of a new upstream Kubernetes cluster is not secure, and you are going to need to invest in hardening it in order to avoid security issues.
 
@@ -78,4 +78,3 @@ The [Kubernetes Multi-Tenancy Working Group](https://github.com/kubernetes-sigs/
 
 If you are interested in multi-tenancy topics, or would like to share your use cases, please join us in an upcoming [community meeting](https://github.com/kubernetes/community/blob/master/wg-multitenancy/README.md) or reach out on the *wg-multitenancy channel* on the [Kubernetes slack](https://slack.k8s.io/).
 
-

From 98a20fb1234dee4d58ededc36ecfa5149cf9221d Mon Sep 17 00:00:00 2001
From: Adam Robertson <adam.i.robertson@gmail.com>
Date: Wed, 14 Apr 2021 12:41:44 -0700
Subject: [PATCH 557/788] Update cheatsheet.md

Adding a common command I use to ensure common or namespace wide ENV variables are properly set, i.e. by a ConfigMap
---
 content/en/docs/reference/kubectl/cheatsheet.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md
index f5a971d3bd..2418e82155 100644
--- a/content/en/docs/reference/kubectl/cheatsheet.md
+++ b/content/en/docs/reference/kubectl/cheatsheet.md
@@ -216,6 +216,10 @@ kubectl get nodes -o json | jq -c 'path(..)|[.[]|tostring]|join(".")'
 
 # Produce a period-delimited tree of all keys returned for pods, etc
 kubectl get pods -o json | jq -c 'path(..)|[.[]|tostring]|join(".")'
+
+# Produce ENV for all pods
+# Make sure to set your default namespace or this will run on system pods
+for pod in $(kubectl get po --output=jsonpath={.items..metadata.name}); do echo $pod && kubectl exec -it $pod env; done
 ```
 
 ## Updating resources

From f7a0a0a951ec80ec745018c92b1f7b9d5c45177b Mon Sep 17 00:00:00 2001
From: Bridget Kromhout <bridget@kromhout.org>
Date: Wed, 14 Apr 2021 16:40:32 -0500
Subject: [PATCH 558/788] "*-controller-manager" typo fix

I noticed a typo in a recent blog post, and a similar typo appears in
the comments for some examples. This PR corrects these typos.

Signed-off-by: Bridget Kromhout <bridget@kromhout.org>
---
 content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md | 2 +-
 content/en/examples/admin/cloud/ccm-example.yaml              | 2 +-
 content/ja/examples/admin/cloud/ccm-example.yaml              | 2 +-
 content/zh/examples/admin/cloud/ccm-example.yaml              | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md
index d6a245cbf7..bb9214b027 100644
--- a/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md
+++ b/content/en/blog/_posts/2021-04-08-cronjob-reaches-ga/index.md
@@ -102,4 +102,4 @@ controllers. As mentioned before, the new controller is on by default starting
 from Kubernetes v1.21; if you want to check it out in the previous release (1.20),
 you can enable the `CronJobControllerV2`
 [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) 
-for the kube-controller-manger: `--feature-gate="CronJobControllerV2=true"`.
+for the kube-controller-manager: `--feature-gate="CronJobControllerV2=true"`.
diff --git a/content/en/examples/admin/cloud/ccm-example.yaml b/content/en/examples/admin/cloud/ccm-example.yaml
index 20aafb31e5..3bce7b58fa 100644
--- a/content/en/examples/admin/cloud/ccm-example.yaml
+++ b/content/en/examples/admin/cloud/ccm-example.yaml
@@ -1,4 +1,4 @@
-# This is an example of how to setup cloud-controller-manger as a Daemonset in your cluster.
+# This is an example of how to setup cloud-controller-manager as a Daemonset in your cluster.
 # It assumes that your masters can run pods and has the role node-role.kubernetes.io/master
 # Note that this Daemonset will not work straight out of the box for your cloud, this is
 # meant to be a guideline.
diff --git a/content/ja/examples/admin/cloud/ccm-example.yaml b/content/ja/examples/admin/cloud/ccm-example.yaml
index 4c98162a70..96b7833174 100644
--- a/content/ja/examples/admin/cloud/ccm-example.yaml
+++ b/content/ja/examples/admin/cloud/ccm-example.yaml
@@ -1,4 +1,4 @@
-# This is an example of how to setup cloud-controller-manger as a Daemonset in your cluster.
+# This is an example of how to setup cloud-controller-manager as a Daemonset in your cluster.
 # It assumes that your masters can run pods and has the role node-role.kubernetes.io/master
 # Note that this Daemonset will not work straight out of the box for your cloud, this is
 # meant to be a guideline.
diff --git a/content/zh/examples/admin/cloud/ccm-example.yaml b/content/zh/examples/admin/cloud/ccm-example.yaml
index 20aafb31e5..3bce7b58fa 100644
--- a/content/zh/examples/admin/cloud/ccm-example.yaml
+++ b/content/zh/examples/admin/cloud/ccm-example.yaml
@@ -1,4 +1,4 @@
-# This is an example of how to setup cloud-controller-manger as a Daemonset in your cluster.
+# This is an example of how to setup cloud-controller-manager as a Daemonset in your cluster.
 # It assumes that your masters can run pods and has the role node-role.kubernetes.io/master
 # Note that this Daemonset will not work straight out of the box for your cloud, this is
 # meant to be a guideline.

From 7f8147adc4baf052f0a082b5e8d49c1476b7ea55 Mon Sep 17 00:00:00 2001
From: Maciej Filocha <maciej.filocha@gmail.com>
Date: Thu, 15 Apr 2021 10:07:37 +0200
Subject: [PATCH 559/788] Fix translation for API server glossary definition

---
 content/pl/docs/reference/glossary/kube-apiserver.md | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/content/pl/docs/reference/glossary/kube-apiserver.md b/content/pl/docs/reference/glossary/kube-apiserver.md
index 14b58a9ba6..12620387d0 100755
--- a/content/pl/docs/reference/glossary/kube-apiserver.md
+++ b/content/pl/docs/reference/glossary/kube-apiserver.md
@@ -4,7 +4,7 @@ id: kube-apiserver
 date: 2018-04-12
 full_link: /docs/concepts/overview/components/#kube-apiserver
 short_description: >
-  Składnik warstwy sterowania udostępniający API Kubernetes. 
+  Składnik warstwy sterowania udostępniający API Kubernetesa.
 
 aka:
 - kube-apiserver
@@ -12,13 +12,12 @@ tags:
 - architecture
 - fundamental
 ---
- Składnik *master* udostępniający API Kubernetes. Służy jako *front-end* dla warstwy sterowania Kubernetes.
- Serwer API jest składnikiem
-{{< glossary_tooltip text="warstwy sterowania" term_id="control-plane" >}} Kubernetes, który udostępnia API.
+Serwer API jest składnikiem
+{{< glossary_tooltip text="warstwy sterowania" term_id="control-plane" >}} Kubernetesa, który udostępnia API.
 Server API służy jako front-end warstwy sterowania Kubernetes.
 
 <!--more-->
 
-Podstawowa implementacją serwera API Kubernetes jest [kube-apiserver](/docs/reference/generated/kube-apiserver/).
+Podstawową implementacją serwera API Kubernetesa jest [kube-apiserver](/docs/reference/generated/kube-apiserver/).
 kube-apiserver został zaprojektowany w taki sposób, aby móc skalować się horyzontalnie &mdash; to oznacza, że zwiększa swoją wydajność poprzez dodawanie kolejnych instancji.
 Można uruchomić kilka instancji kube-apiserver i rozkładać między nimi ruch od klientów.

From 18ec3f432f69e76384dc49193766c304b2f2f0ba Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Thu, 15 Apr 2021 16:11:39 +0800
Subject: [PATCH 560/788] [zh] translate task/Install and Set Up kubectl on
 Windows

---
 .../tasks/tools/install-kubectl-windows.md    | 301 ++++++++++++++++++
 1 file changed, 301 insertions(+)
 create mode 100644 content/zh/docs/tasks/tools/install-kubectl-windows.md

diff --git a/content/zh/docs/tasks/tools/install-kubectl-windows.md b/content/zh/docs/tasks/tools/install-kubectl-windows.md
new file mode 100644
index 0000000000..9b3c975056
--- /dev/null
+++ b/content/zh/docs/tasks/tools/install-kubectl-windows.md
@@ -0,0 +1,301 @@
+---
+title: 在 Windows 上安装 kubectl
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: Windows 安装 kubectl
+---
+<!-- 
+---
+reviewers:
+- mikedanese
+title: Install and Set Up kubectl on Windows
+content_type: task
+weight: 10
+card:
+  name: tasks
+  weight: 20
+  title: Install kubectl on Windows
+---
+-->
+
+## {{% heading "prerequisites" %}}
+
+<!-- 
+You must use a kubectl version that is within one minor version difference of your cluster.
+For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master.
+Using the latest version of kubectl helps avoid unforeseen issues.
+-->
+kubectl 版本和集群版本之间的差异必须在一个小版本号内。
+例如：v1.2 版本的客户端只能与 v1.1、v1.2 和 v1.3 版本的集群一起工作。
+用最新版的 kubectl 有助于避免不可预见的问题。
+
+<!-- 
+## Install kubectl on Windows
+-->
+## 在 Windows 上安装 kubectl {#install-kubectl-on-windows}
+
+<!-- 
+The following methods exist for installing kubectl on Windows:
+-->
+在 Windows 系统中安装 kubectl 有如下几种方法：
+
+- [用 curl 在 Windows 上安装 kubectl](#install-kubectl-binary-with-curl-on-windows)
+- [用 PowerShell 从 PSGallery 安装](#install-with-powershell-from-psgallery)
+- [在 Windows 上用 Chocolatey 或 Scoop 安装](#install-on-windows-using-chocolatey-or-scoop)
+- [作为谷歌云 SDK 的一部分，在 Windows 上安装](#install-on-windows-as-part-of-the-google-cloud-sdk)
+
+<!-- 
+### Install kubectl binary with curl on Windows
+-->
+### 用 curl 在 Windows 上安装 kubectl {#install-kubectl-binary-with-curl-on-windows}
+
+<!-- 
+1. Download the [latest release {{< param "fullversion" >}}](https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe).
+
+   Or if you have `curl` installed, use this command:
+-->
+1. 下载 [最新发行版 {{< param "fullversion" >}}](https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe)。
+
+   如果你已安装了 `curl`,也可以使用此命令：
+
+   ```powershell
+   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
+   ```
+
+   <!-- 
+      To find out the latest stable version (for example, for scripting), take a look at [https://dl.k8s.io/release/stable.txt](https://dl.k8s.io/release/stable.txt).
+   -->
+   {{< note >}}
+   要想找到最新稳定的版本（例如：为了编写脚本），可以看看这里 [https://dl.k8s.io/release/stable.txt](https://dl.k8s.io/release/stable.txt)。
+   {{< /note >}}
+
+   <!-- 
+   1. Validate the binary (optional)
+
+      Download the kubectl checksum file:
+   -->
+1. 验证该可执行文件（可选步骤）
+   
+   下载 kubectl 校验和文件：
+
+   ```powershell
+   curl -LO https://dl.k8s.io/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe.sha256
+   ```
+
+   <!-- 
+   Validate the kubectl binary against the checksum file:
+   -->
+   基于校验和文件，验证 kubectl 的可执行文件：
+
+   <!-- 
+   - Using Command Prompt to manually compare `CertUtil`'s output to the checksum file downloaded:
+   -->
+   - 在命令行环境中，手工对比 `CertUtil` 命令的输出与校验和文件：
+
+     ```cmd
+     CertUtil -hashfile kubectl.exe SHA256
+     type kubectl.exe.sha256
+     ```
+
+   <!-- 
+   - Using PowerShell to automate the verification using the `-eq` operator to get a `True` or `False` result:
+   -->
+   - 用 PowerShell 自动验证，用运算符 `-eq` 来直接取得 `True` 或 `False` 的结果：
+
+     ```powershell
+     $($(CertUtil -hashfile .\kubectl.exe SHA256)[1] -replace " ", "") -eq $(type .\kubectl.exe.sha256)
+     ```
+
+   <!-- 
+   1. Add the binary in to your `PATH`.
+
+   1. Test to ensure the version of `kubectl` is the same as downloaded:
+   -->
+1. 将可执行文件的路径添加到 `PATH`。
+
+1. 测试一下，确保此 `kubectl` 的版本和期望版本一致：
+
+   ```cmd
+   kubectl version --client
+   ```
+
+<!-- 
+[Docker Desktop for Windows](https://docs.docker.com/docker-for-windows/#kubernetes) adds its own version of `kubectl` to `PATH`.
+If you have installed Docker Desktop before, you may need to place your `PATH` entry before the one added by the Docker Desktop installer or remove the Docker Desktop's `kubectl`.
+-->
+{{< note >}}
+[Windows 版的 Docker Desktop](https://docs.docker.com/docker-for-windows/#kubernetes) 
+将其自带版本的 `kubectl` 添加到 `PATH`。
+如果你之前安装过 Docker Desktop，可能需要把此 `PATH` 条目置于 Docker Desktop 安装的条目之前，
+或者直接删掉 Docker Desktop 的 `kubectl`。
+{{< /note >}}
+
+<!-- 
+### Install with PowerShell from PSGallery
+-->
+### 用 PowerShell 从 PSGallery 安装 {#install-with-powershell-from-psgallery}
+
+<!-- 
+If you are on Windows and using the [PowerShell Gallery](https://www.powershellgallery.com/) package manager, you can install and update kubectl with PowerShell.
+-->
+如果你工作在 Windows 平台上，且使用 [PowerShell Gallery](https://www.powershellgallery.com/) 包管理器，
+则可以用 PowerShell 安装、更新 kubectl。
+
+<!-- 
+1. Run the installation commands (making sure to specify a `DownloadLocation`):
+-->
+1. 运行安装命令（确保提供了参数 `DownloadLocation`）：
+
+   ```powershell
+   Install-Script -Name 'install-kubectl' -Scope CurrentUser -Force
+   install-kubectl.ps1 [-DownloadLocation <path>]
+   ```
+
+   <!-- 
+   If you do not specify a `DownloadLocation`, `kubectl` will be installed in the user's `temp` Directory.
+   -->
+   {{< note >}}
+   如果没有指定 `DownloadLocation`，`kubectl` 则会被安装到用户的 `temp` 目录下。
+   {{< /note >}}
+
+   <!-- 
+   The installer creates `$HOME/.kube` and instructs it to create a config file.
+   -->
+   安装程序创建 `$HOME/.kube`，并指示其创建配置文件。
+
+   <!-- 
+   1. Test to ensure the version you installed is up-to-date:
+   -->
+1. 测试一下，确保你安装的是最新版本：
+
+   ```powershell
+   kubectl version --client
+   ```
+
+<!-- 
+Updating the installation is performed by rerunning the two commands listed in step 1.
+-->
+{{< note >}}
+更新安装是通过重新运行步骤 1 中的两个命令而实现。
+{{< /note >}}
+
+<!-- 
+### Install on Windows using Chocolatey or Scoop
+-->
+### 在 Windows 上用 Chocolatey 或 Scoop 安装 {#install-on-windows-using-chocolatey-or-scoop}
+
+<!-- 
+1. To install kubectl on Windows you can use either [Chocolatey](https://chocolatey.org) package manager or [Scoop](https://scoop.sh) command-line installer.
+-->
+1. 要在 Windows 上安装 kubectl，你可以使用包管理器 [Chocolatey](https://chocolatey.org) 
+   或是命令行安装器 [Scoop](https://scoop.sh)。
+
+   {{< tabs name="kubectl_win_install" >}}
+   {{% tab name="choco" %}}
+   ```powershell
+   choco install kubernetes-cli
+   ```
+   {{% /tab %}}
+   {{% tab name="scoop" %}}
+   ```powershell
+   scoop install kubectl
+   ```
+   {{% /tab %}}
+   {{< /tabs >}}
+
+   <!-- 
+   1. Test to ensure the version you installed is up-to-date:
+   -->
+2. 测试一下，确保安装的是最新版本：
+
+   ```powershell
+   kubectl version --client
+   ```
+
+   <!-- 
+   1. Navigate to your home directory:
+   -->
+3. 导航到你的 home 目录：
+
+   <!-- 
+   # If you're using cmd.exe, run: cd %USERPROFILE%
+   -->
+   ```powershell
+   # 当你用 cmd.exe 时，则运行： cd %USERPROFILE%
+   cd ~
+   ```
+
+   <!-- 
+   1. Create the `.kube` directory:
+   -->
+4. 创建目录 `.kube`：
+
+   ```powershell
+   mkdir .kube
+   ```
+
+   <!-- 
+   1. Change to the `.kube` directory you just created:
+   -->
+5. 切换到新创建的目录 `.kube` 
+
+   ```powershell
+   cd .kube
+   ```
+
+   <!-- 
+   1. Configure kubectl to use a remote Kubernetes cluster:
+   -->
+6. 配置 kubectl，以接入远程的 Kubernetes 集群：
+
+   ```powershell
+   New-Item config -type file
+   ```
+
+<!-- 
+Edit the config file with a text editor of your choice, such as Notepad.
+-->
+{{< note >}}
+编辑配置文件，你需要先选择一个文本编辑器，比如 Notepad。
+{{< /note >}}
+
+<!-- 
+### Install on Windows as part of the Google Cloud SDK
+-->
+### 作为谷歌云 SDK 的一部分，在 Windows 上安装 {#install-on-windows-as-part-of-the-google-cloud-sdk}
+
+{{< include "included/install-kubectl-gcloud.md" >}}
+
+<!-- 
+## Verify kubectl configuration
+-->
+## 验证 kubectl 配置 {#verify-kubectl-configration}
+
+{{< include "included/verify-kubectl.md" >}}
+
+<!-- 
+## Optional kubectl configurations
+
+### Enable shell autocompletion
+-->
+## kubectl 可选配置 {#optional-kubectl-configurations}
+
+### 启用 shell 自动补全功能 {#enable-shell-autocompletion}
+
+<!-- 
+kubectl provides autocompletion support for Bash and Zsh, which can save you a lot of typing.
+
+Below are the procedures to set up autocompletion for Zsh, if you are running that on Windows.
+-->
+kubectl 为 Bash 和 Zsh 提供自动补全功能，可以减轻许多输入的负担。
+
+下面是设置 Zsh 自动补全功能的操作步骤，前提是你在 Windows 上面运行的是 Zsh。
+
+{{< include "included/optional-kubectl-configs-zsh.md" >}}
+
+## {{% heading "whatsnext" %}}
+
+{{< include "included/kubectl-whats-next.md" >}}
\ No newline at end of file

From 1d3134793ac593d346d3473d1561214e9760de01 Mon Sep 17 00:00:00 2001
From: Peter Rifel <peter.rifel@datadoghq.com>
Date: Thu, 15 Apr 2021 08:35:49 -0500
Subject: [PATCH 561/788] Update kops versioned download URLs

kops releases started including a `v` prefix in their tags and GitHub releases.
This updates to a more recent kops version and includes that prefix in the URL.

Signed-off-by: Peter Rifel <peter.rifel@datadoghq.com>
---
 .../en/docs/setup/production-environment/tools/kops.md    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kops.md b/content/en/docs/setup/production-environment/tools/kops.md
index 4afab697e4..cf5333a92d 100644
--- a/content/en/docs/setup/production-environment/tools/kops.md
+++ b/content/en/docs/setup/production-environment/tools/kops.md
@@ -56,10 +56,10 @@ To download a specific version, replace the following portion of the command wit
 $(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)
 ```
 
-For example, to download kops version v1.15.0 type:
+For example, to download kops version v1.20.0 type:
 
 ```shell
-curl -LO  https://github.com/kubernetes/kops/releases/download/1.15.0/kops-darwin-amd64
+curl -LO https://github.com/kubernetes/kops/releases/download/v1.20.0/kops-darwin-amd64
 ```
 
 Make the kops binary executable.
@@ -94,10 +94,10 @@ To download a specific version of kops, replace the following portion of the com
 $(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)
 ```
 
-For example, to download kops version v1.15.0 type:
+For example, to download kops version v1.20.0 type:
 
 ```shell
-curl -LO  https://github.com/kubernetes/kops/releases/download/1.15.0/kops-linux-amd64
+curl -LO https://github.com/kubernetes/kops/releases/download/v1.20.0/kops-linux-amd64
 ```
 
 Make the kops binary executable

From 21bf5f96bcc5d5cf15c0157024bd9a69c8958b9b Mon Sep 17 00:00:00 2001
From: Adam Robertson <adam.i.robertson@gmail.com>
Date: Thu, 15 Apr 2021 11:28:07 -0700
Subject: [PATCH 562/788] Update cheatsheet.md

Adding comments to ensure default namespace, container and that the command is supported.
Add note to show you can substitute `env` for any supported command.
---
 content/en/docs/reference/kubectl/cheatsheet.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/kubectl/cheatsheet.md b/content/en/docs/reference/kubectl/cheatsheet.md
index 2418e82155..c32ba4f809 100644
--- a/content/en/docs/reference/kubectl/cheatsheet.md
+++ b/content/en/docs/reference/kubectl/cheatsheet.md
@@ -217,8 +217,8 @@ kubectl get nodes -o json | jq -c 'path(..)|[.[]|tostring]|join(".")'
 # Produce a period-delimited tree of all keys returned for pods, etc
 kubectl get pods -o json | jq -c 'path(..)|[.[]|tostring]|join(".")'
 
-# Produce ENV for all pods
-# Make sure to set your default namespace or this will run on system pods
+# Produce ENV for all pods, assuming you have a default container for the pods, default namespace and the `env` command is supported.
+# Helpful when running any supported command across all pods, not just `env`
 for pod in $(kubectl get po --output=jsonpath={.items..metadata.name}); do echo $pod && kubectl exec -it $pod env; done
 ```
 

From 52a5e4f7181ecbef95303da9be3ca2fd9991e3b4 Mon Sep 17 00:00:00 2001
From: Antoine Pelisse <apelisse@gmail.com>
Date: Thu, 1 Apr 2021 16:43:34 -0700
Subject: [PATCH 563/788] SSA Toplogy improvements

Include documentation for topology changes
---
 .../reference/using-api/server-side-apply.md  | 65 +++++++++++++++++--
 1 file changed, 61 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/reference/using-api/server-side-apply.md b/content/en/docs/reference/using-api/server-side-apply.md
index 81afa5b567..3ff636a3d5 100644
--- a/content/en/docs/reference/using-api/server-side-apply.md
+++ b/content/en/docs/reference/using-api/server-side-apply.md
@@ -224,16 +224,74 @@ merging, see
 A number of markers were added in Kubernetes 1.16 and 1.17, to allow API
 developers to describe the merge strategy supported by lists, maps, and
 structs. These markers can be applied to objects of the respective type,
-in Go files or in the OpenAPI schema definition of the 
+in Go files or in the OpenAPI schema definition of the
 [CRD](/docs/reference/generated/kubernetes-api/{{< param "version" >}}#jsonschemaprops-v1-apiextensions-k8s-io):
 
 | Golang marker | OpenAPI extension | Accepted values | Description | Introduced in |
 |---|---|---|---|---|
-| `//+listType` | `x-kubernetes-list-type` | `atomic`/`set`/`map` | Applicable to lists. `atomic` and `set` apply to lists with scalar elements only. `map` applies to lists of nested types only. If configured as `atomic`, the entire list is replaced during merge; a single manager manages the list as a whole at any one time. If `set` or `map`, different managers can manage entries separately. | 1.16          |
-| `//+listMapKey` | `x-kubernetes-list-map-keys` | Slice of map keys that uniquely identify entries for example `["port", "protocol"]` | Only applicable when `+listType=map`. A slice of strings whose values in combination must uniquely identify list entries. While there can be multiple keys, `listMapKey` is singular because keys need to be specified individually in the Go type. | 1.16 |
+| `//+listType` | `x-kubernetes-list-type` | `atomic`/`set`/`map` | Applicable to lists. `set` applies to lists that include only scalar elements. These elements must be unique. `map` applies to lists of nested types only. The key values (see `listMapKey`) must be unique in the list. `atomic` can apply to any list. If configured as `atomic`, the entire list is replaced during merge. At any point in time, a single manager owns the list. If `set` or `map`, different managers can manage entries separately. | 1.16          |
+| `//+listMapKey` | `x-kubernetes-list-map-keys` | List of field names, e.g. `["port", "protocol"]` | Only applicable when `+listType=map`. A list of field names whose values uniquely identify entries in the list. While there can be multiple keys, `listMapKey` is singular because keys need to be specified individually in the Go type. The key fields must be scalars. | 1.16 |
 | `//+mapType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to maps. `atomic` means that the map can only be entirely replaced by a single manager. `granular` means that the map supports separate managers updating individual fields. | 1.17 |
 | `//+structType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to structs; otherwise same usage and OpenAPI annotation as `//+mapType`.| 1.17 |
 
+If `listType` is missing, the API server interprets a
+`patchMergeStrategy=merge` marker as a `listType=map` and the
+corresponding `patchMergeKey` marker as a `listMapKey`.
+
+The `atomic` list type is recursive.
+
+These markers are specified as comments and don't have to be repeated as
+field tags.
+
+#### Compatibility across topology changes
+
+On rare occurences, a CRD or built-in type author may want to change the
+specific topology of a field in their resource without incrementing its
+version. Changing the topology of types, by upgrading the cluster or
+updating the CRD, has different consequences when updating existing
+objects. There are two categories of changes: when a field goes from
+`map`/`set`/`granular` to `atomic` and the other way around.
+
+When the `listType`, `mapType`, or `structType` changes from
+`map`/`set`/`granular` to `atomic`, the whole list, map or struct of
+existing objects will end-up being owned by actors who owned an element
+of these types. This means that any further change to these objects
+would cause a conflict.
+
+When a list, map, or struct changes from `atomic` to
+`map`/`set`/`granular`, the API server won't be able to infer the new
+ownership of these fields. Because of that, no conflict will be produced
+when objects have these fields updated. For that reason, it is not
+recommended to change a type from `atomic` to `map`/`set`/`granular`.
+
+Take for example, the custom resource:
+
+```yaml
+apiVersion: example.com/v1
+kind: Foo
+metadata:
+  name: foo-sample
+  managedFields:
+  - manager: manager-one
+    operation: Apply
+    apiVersion: example.com/v1
+    fields:
+      f:spec:
+        f:data: {}
+spec:
+  data:
+    key1: val1
+    key2: val2
+```
+
+Before `spec.data` gets changed from `atomic` to `granular`,
+`manager-one` owns the field `spec.data`, and all the fields within it
+(`key1` and `key2`). When the CRD gets changed to make `spec.data`
+`granular`, `manager-one` continues to own the top-level field
+`spec.data` (meaning no other managers can delete the map called `data`
+without a conflict), but it no longer owns `key1` and `key2`, so another
+manager can then modify or delete those fields without conflict.
+
 ### Custom Resources
 
 By default, Server Side Apply treats custom resources as unstructured data. All
@@ -458,4 +516,3 @@ Server Side Apply is a beta feature, so it is enabled by default. To turn this
 you need to include the `--feature-gates ServerSideApply=false` flag when
 starting `kube-apiserver`. If you have multiple `kube-apiserver` replicas, all
 should have the same flag setting.
-

From acfea6f2ef952991f6a897086b5083ec461b1ca4 Mon Sep 17 00:00:00 2001
From: Antoine Pelisse <apelisse@gmail.com>
Date: Thu, 15 Apr 2021 20:33:29 -0700
Subject: [PATCH 564/788] Fix broken headings throughout server-side apply doc

---
 .../en/docs/reference/using-api/server-side-apply.md   | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/reference/using-api/server-side-apply.md b/content/en/docs/reference/using-api/server-side-apply.md
index 3ff636a3d5..1502684325 100644
--- a/content/en/docs/reference/using-api/server-side-apply.md
+++ b/content/en/docs/reference/using-api/server-side-apply.md
@@ -243,7 +243,7 @@ The `atomic` list type is recursive.
 These markers are specified as comments and don't have to be repeated as
 field tags.
 
-#### Compatibility across topology changes
+### Compatibility across topology changes
 
 On rare occurences, a CRD or built-in type author may want to change the
 specific topology of a field in their resource without incrementing its
@@ -292,7 +292,7 @@ Before `spec.data` gets changed from `atomic` to `granular`,
 without a conflict), but it no longer owns `key1` and `key2`, so another
 manager can then modify or delete those fields without conflict.
 
-### Custom Resources
+## Custom Resources
 
 By default, Server Side Apply treats custom resources as unstructured data. All
 keys are treated the same as struct fields, and all lists are considered atomic.
@@ -303,7 +303,7 @@ that contains annotations as defined in the previous "Merge Strategy"
 section, these annotations will be used when merging objects of this
 type.
 
-### Using Server-Side Apply in a controller
+## Using Server-Side Apply in a controller
 
 As a developer of a controller, you can use server-side apply as a way to
 simplify the update logic of your controller. The main differences with a
@@ -318,7 +318,7 @@ read-modify-write and/or patch are the following:
 It is strongly recommended for controllers to always "force" conflicts, since they
 might not be able to resolve or act on these conflicts.
 
-### Transferring Ownership
+## Transferring Ownership
 
 In addition to the concurrency controls provided by [conflict resolution](#conflicts),
 Server Side Apply provides ways to perform coordinated
@@ -387,7 +387,7 @@ Note that whenever the HPA controller sets the `replicas` field to a new value,
 the temporary field manager will no longer own any fields and will be
 automatically deleted. No clean up is required.
 
-## Transferring Ownership Between Users
+### Transferring Ownership Between Users
 
 Users can transfer ownership of a field between each other by setting the field
 to the same value in both of their applied configs, causing them to share

From ee806e7cb1362a0a3db8e9f79c1b89b82bd04297 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Fri, 16 Apr 2021 17:19:25 +0900
Subject: [PATCH 565/788] Apply suggestions from code review

Co-authored-by: atoato88 <akihito-inou@nec.com>
---
 content/ja/docs/contribute/new-content/overview.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/contribute/new-content/overview.md b/content/ja/docs/contribute/new-content/overview.md
index b106b0fb28..e3db3744e9 100644
--- a/content/ja/docs/contribute/new-content/overview.md
+++ b/content/ja/docs/contribute/new-content/overview.md
@@ -16,7 +16,7 @@ weight: 5
 
 - KubernetesのドキュメントはMarkdownで書き、Kubernetesのウェブサイトは[Hugo](https://gohugo.io/)を使ってビルドします。
 - ソースは[GitHub](https://github.com/kubernetes/website)にあります。Kubernetesのドキュメントは`/content/en/docs/`にあります。リファレンスドキュメントの一部は、`update-imported-docs/`ディレクトリ内のスクリプトから自動的に生成されます。
-- [Page content types](/docs/contribute/style/page-content-types/)はHugo内のドキュメントのコンテンツの見え方を？指定します？
+- [Page content types](/docs/contribute/style/page-content-types/)にHugoによるドキュメントのコンテンツの見え方を記述しています。
 - 標準のHugoのshortcodeに加えて、多数の[カスタムのHugo shortcode](/docs/contribute/style/hugo-shortcodes/)を使用してコンテンツの見え方をコントロールしています。
 - ドキュメントのソースは`/content/`内にある複数の言語で利用できます。各言語はそれぞれ[ISO 639-1標準](https://www.loc.gov/standards/iso639-2/php/code_list.php)で定義された2文字のコードの名前のフォルダを持ちます。たとえば、英語のドキュメントのソースは`/content/en/docs/`内に置かれています。
 - 複数言語でのドキュメントへの貢献や新しい翻訳の開始に関する情報については、[Kubernetesのドキュメントを翻訳する](/docs/contribute/localization)を参照してください。
@@ -42,7 +42,7 @@ pull requestをオープンするときは、どのブランチをベースに
 それでも選ぶべきブランチがわからないときは、Slack上の`#sig-docs`チャンネルで質問してください。
 
 {{< note >}}
-すでにpull requestを作成していて、ベースブランチが間違っていたことに気づいた場合は、作成者であるあなただけがベースブランチを変更できます。
+すでにpull requestを作成していて、ベースブランチが間違っていたことに気づいた場合は、作成者であるあなただけがベースブランチを変更できます。
 {{< /note >}}
 
 ### 言語ごとのPR

From 418e9f779e92f26dc019d2993df16096e954abf2 Mon Sep 17 00:00:00 2001
From: David Schott <daschott@microsoft.com>
Date: Fri, 16 Apr 2021 16:19:17 -0700
Subject: [PATCH 566/788] corrected outdated information about Windows
 networking

---
 .../windows/intro-windows-in-kubernetes.md        | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index b8d5cd3c9b..0a6251f203 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -215,10 +215,11 @@ On Windows, you can use the following settings to configure Services and load ba
 {{< table caption="Windows Service Settings" >}}
 | Feature | Description | Supported Kubernetes version  | Supported Windows OS build | How to enable |
 | ------- | ----------- | ----------------------------- | -------------------------- | ------------- |
-| Session affinity | Ensures that connections from a particular client are passed to the same Pod each time. | v1.19+ | [Windows Server vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) (or higher) | Set `service.spec.sessionAffinity` to "ClientIP" |
-| Direct Server Return | Load balancing mode where the IP address fixups and the LBNAT occurs at the container vSwitch port directly; service traffic arrives with the source IP set as the originating pod IP. Promises lower latency and scalability. | v1.15+ | Windows Server, version 2004 | Set the following flags in kube-proxy: `--feature-gates="WinDSR=true" --enable-dsr=true` |
-| Preserve-Destination | Skips DNAT of service traffic, thereby preserving the virtual IP of the target service in packets reaching the backend Pod. This setting will also ensure that the client IP of incoming packets get preserved. | v1.15+ | Windows Server, version 1903 (or higher) | Set `"preserve-destination": "true"` in service annotations and enable DSR flags in kube-proxy. |
-| IPv4/IPv6 dual-stack networking | Native IPv4-to-IPv4 in parallel with IPv6-to-IPv6 communications to, from, and within a cluster | v1.19+ | Windows Server vNext Insider Preview Build 19603 (or higher) | See [IPv4/IPv6 dual-stack](#ipv4ipv6-dual-stack) |
+| Session affinity | Ensures that connections from a particular client are passed to the same Pod each time. | v1.20+ | [Windows Server vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) (or higher) | Set `service.spec.sessionAffinity` to "ClientIP" |
+| Direct Server Return (DSR) | Load balancing mode where the IP address fixups and the LBNAT occurs at the container vSwitch port directly; service traffic arrives with the source IP set as the originating pod IP. | v1.20+ | Windows Server 2019 | Set the following flags in kube-proxy: `--feature-gates="WinDSR=true" --enable-dsr=true` |
+| Preserve-Destination | Skips DNAT of service traffic, thereby preserving the virtual IP of the target service in packets reaching the backend Pod. Also disables node-node forwarding. | v1.20+ | Windows Server, version 1903 (or higher) | Set `"preserve-destination": "true"` in service annotations and enable DSR in kube-proxy. |
+| IPv4/IPv6 dual-stack networking | Native IPv4-to-IPv4 in parallel with IPv6-to-IPv6 communications to, from, and within a cluster | v1.19+ | Windows Server, version 2004 (or higher) | See [IPv4/IPv6 dual-stack](#ipv4ipv6-dual-stack) |
+| Client IP preservation | Ensures that source IP of incoming ingress traffic gets preserved. Also disables node-node forwarding. | v1.20+ | Windows Server, version 2019 (or higher) | Set `service.spec.externalTrafficPolicy` to "Local" and enable DSR in kube-proxy |
 {{< /table >}}
 
 #### IPv4/IPv6 dual-stack
@@ -314,9 +315,9 @@ The following networking functionality is not supported on Windows nodes
 * Local NodePort access from the node itself fails (works for other nodes or external clients)
 * Accessing service VIPs from nodes will be available with a future release of Windows Server
 * A single service can only support up to 64 backend pods / unique destination IPs
-* Overlay networking support in kube-proxy is an alpha release. In addition, it requires [KB4482887](https://support.microsoft.com/en-us/help/4482887/windows-10-update-kb4482887) to be installed on Windows Server 2019
-* Local Traffic Policy and DSR mode
-* Windows containers connected to l2bridge, l2tunnel, or overlay networks do not support communicating over the IPv6 stack. There is outstanding Windows platform work required to enable these network drivers to consume IPv6 addresses and subsequent Kubernetes work in kubelet, kube-proxy, and CNI plugins.
+* Overlay networking support in kube-proxy is a beta feature. In addition, it requires [KB4482887](https://support.microsoft.com/en-us/help/4482887/windows-10-update-kb4482887) to be installed on Windows Server 2019
+* Local Traffic Policy in non-DSR mode
+* Windows containers connected to overlay networks do not support communicating over the IPv6 stack. There is outstanding Windows platform work required to enable this network driver to consume IPv6 addresses and subsequent Kubernetes work in kubelet, kube-proxy, and CNI plugins.
 * Outbound communication using the ICMP protocol via the win-overlay, win-bridge, and Azure-CNI plugin. Specifically, the Windows data plane ([VFP](https://www.microsoft.com/en-us/research/project/azure-virtual-filtering-platform/)) doesn't support ICMP packet transpositions. This means:
   * ICMP packets directed to destinations within the same network (e.g. pod to pod communication via ping) work as expected and without any limitations
   * TCP/UDP packets work as expected and without any limitations

From f310ad9004080eafd07bf56890da9573e036c05b Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Fri, 16 Apr 2021 23:12:46 +0800
Subject: [PATCH 567/788] [zh] translate concepts/Service Internal Traffic
 Policy

---
 .../service-traffic-policy.md                 | 128 ++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 content/zh/docs/concepts/services-networking/service-traffic-policy.md

diff --git a/content/zh/docs/concepts/services-networking/service-traffic-policy.md b/content/zh/docs/concepts/services-networking/service-traffic-policy.md
new file mode 100644
index 0000000000..f52f073d2e
--- /dev/null
+++ b/content/zh/docs/concepts/services-networking/service-traffic-policy.md
@@ -0,0 +1,128 @@
+---
+title: 服务内部流量策略
+content_type: concept
+weight: 45
+---
+<!-- 
+---
+reviewers:
+- maplain
+title: Service Internal Traffic Policy
+content_type: concept
+weight: 45
+---
+-->
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!-- 
+_Service Internal Traffic Policy_ enables internal traffic restrictions to only route
+internal traffic to endpoints within the node the traffic originated from. The
+"internal" traffic here refers to traffic originated from Pods in the current
+cluster. This can help to reduce costs and improve performance.
+-->
+_服务内部流量策略_ 开启了内部流量限制，只路由内部流量到和发起方处于相同节点的服务端点。
+这里的”内部“流量指当前集群中的 Pod 所发起的流量。
+这种机制有助于节省开销，提升效率。
+
+<!-- body -->
+
+<!-- 
+## Using Service Internal Traffic Policy
+-->
+## 使用服务内部流量策略 {#using-service-internal-traffic-policy}
+
+<!-- 
+Once you have enabled the `ServiceInternalTrafficPolicy`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/),
+you can enable an internal-only traffic policy for a
+{{< glossary_tooltip text="Services" term_id="service" >}}, by setting its
+`.spec.internalTrafficPolicy` to `Local`.
+This tells kube-proxy to only use node local endpoints for cluster internal traffic.
+-->
+一旦你启用了 `ServiceInternalTrafficPolicy` 这个
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/),
+你就可以通过将 {{< glossary_tooltip text="Services" term_id="service" >}} 的 
+`.spec.internalTrafficPolicy` 项设置为 `Local`，
+来为它指定一个内部专用的流量策略。
+此设置就相当于告诉 kube-proxy 对于集群内部流量只能使用本地的服务端口。
+
+<!-- 
+For pods on nodes with no endpoints for a given Service, the Service
+behaves as if it has zero endpoints (for Pods on this node) even if the service
+does have endpoints on other nodes.
+-->
+{{< note >}}
+如果某节点上的 Pod 均不提供指定 Service 的服务端点，
+即使该 Service 在其他节点上有可用的服务端点，
+Service 的行为看起来也像是它只有 0 个服务端点（只针对此节点上的 Pod）。
+{{< /note >}}
+
+<!-- 
+The following example shows what a Service looks like when you set
+`.spec.internalTrafficPolicy` to `Local`:
+-->
+以下示例展示了把 Service 的 `.spec.internalTrafficPolicy` 项设为 `Local` 时，
+Service 的样子：
+
+
+```yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: my-service
+spec:
+  selector:
+    app: MyApp
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 9376
+  internalTrafficPolicy: Local
+```
+
+<!-- 
+## How it works
+-->
+## 工作原理 {#how-it-works}
+
+<!-- 
+The kube-proxy filters the endpoints it routes to based on the
+`spec.internalTrafficPolicy` setting. When it's set to `Local`, only node local
+endpoints are considered. When it's `Cluster` or missing, all endpoints are
+considered.
+When the [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+`ServiceInternalTrafficPolicy` is enabled, `spec.internalTrafficPolicy` defaults to "Cluster".
+-->
+kube-proxy 基于 `spec.internalTrafficPolicy` 的设置来过滤路由的目标服务端点。
+当它的值设为 `Local` 时，只选择节点本地的服务端点。
+当它的值设为 `Cluster` 或缺省时，则选择所有的服务端点。
+启用[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
+`ServiceInternalTrafficPolicy` 后，
+`spec.internalTrafficPolicy` 的值默认设为 `Cluster`。
+
+<!-- 
+## Constraints
+-->
+## 限制 {#constraints}
+
+<!-- 
+* Service Internal Traffic Policy is not used when `externalTrafficPolicy` is set
+  to `Local` on a Service. It is possible to use both features in the same cluster
+  on different Services, just not on the same Service.
+-->
+* 在一个Service上，当 `externalTrafficPolicy` 已设置为 `Local`时，服务内部流量策略无法使用。
+  换句话说，在一个集群的不同 Service 上可以同时使用这两个特性，但在一个 Service 上不行。
+
+## {{% heading "whatsnext" %}}
+
+<!-- 
+* Read about [enabling Topology Aware Hints](/docs/tasks/administer-cluster/enabling-topology-aware-hints)
+* Read about [Service External Traffic Policy](/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip)
+* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
+-->
+* 请阅读[启用拓扑感知提示](/zh/docs/tasks/administer-cluster/enabling-topology-aware-hints)
+* 请阅读[Service 的外部流量策略](/zh/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip)
+* 请阅读[用 Service 连接应用](/zh/docs/concepts/services-networking/connect-applications-service/)

From f1349a26bba51723663ba3161705578a8ed87860 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 18 Apr 2021 11:31:01 +0900
Subject: [PATCH 568/788] Fix the description of `-f` argument

---
 scripts/linkchecker.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/linkchecker.py b/scripts/linkchecker.py
index 71f40ac22b..6a5ea7d089 100755
--- a/scripts/linkchecker.py
+++ b/scripts/linkchecker.py
@@ -373,7 +373,7 @@ def parse_arguments():
     parser.add_argument("-f", dest="filter", default="/docs/**/*.md",
                         metavar="<FILTER>",
                         help=("File pattern to scan, e.g. '/docs/foo.md'. "
-                              "(default='/docs/foo/*.md')"))
+                              "(default='/docs/**/*.md')"))
     parser.add_argument("-n", "--no-color", action="store_true",
                         help="Suppress colored printing.")
 

From c1a4a5044b5d9e05b5fcd70f7d08596d02539363 Mon Sep 17 00:00:00 2001
From: Guilherme Caminha <gpkc@cin.ufpe.br>
Date: Sun, 18 Apr 2021 15:07:32 +0200
Subject: [PATCH 569/788] Fixing small typo

---
 content/en/docs/concepts/workloads/pods/disruptions.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/disruptions.md b/content/en/docs/concepts/workloads/pods/disruptions.md
index c791ed42f3..cf0346e939 100644
--- a/content/en/docs/concepts/workloads/pods/disruptions.md
+++ b/content/en/docs/concepts/workloads/pods/disruptions.md
@@ -136,7 +136,7 @@ during application updates is configured in the spec for the specific workload r
 
 When a pod is evicted using the eviction API, it is gracefully
 [terminated](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination), honoring the
-`terminationGracePeriodSeconds` setting in its [PodSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core).)
+`terminationGracePeriodSeconds` setting in its [PodSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core).
 
 ## PodDisruptionBudget example {#pdb-example}
 

From ba0db04a8f6fa498d29ebe1e8dd55f94fd8ab615 Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Fri, 9 Apr 2021 08:41:35 +0200
Subject: [PATCH 570/788] New version of api-ref-generator submodule

---
 Makefile          | 2 +-
 api-ref-generator | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 12b6f67d5a..154b5f2348 100644
--- a/Makefile
+++ b/Makefile
@@ -91,4 +91,4 @@ clean-api-reference: ## Clean all directories in API reference directory, preser
 
 api-reference: clean-api-reference ## Build the API reference pages. go needed
 	cd api-ref-generator/gen-resourcesdocs && \
-		go run cmd/main.go kwebsite --config-dir config/v1.20/ --file api/v1.20/swagger.json --output-dir ../../content/en/docs/reference/kubernetes-api --templates templates
+		go run cmd/main.go kwebsite --config-dir config/v1.21/ --file api/v1.21/swagger.json --output-dir ../../content/en/docs/reference/kubernetes-api --templates templates
diff --git a/api-ref-generator b/api-ref-generator
index ce97454e55..23513afe9c 160000
--- a/api-ref-generator
+++ b/api-ref-generator
@@ -1 +1 @@
-Subproject commit ce97454e557b2b164f77326cb06ef619ab623599
+Subproject commit 23513afe9cf79710a2b19c5c40e38b8e2e5cd46c

From b329defb0d53b3fb6002cd0ed70b7aecd524a8bd Mon Sep 17 00:00:00 2001
From: On The Dock <x.inthecloud+onthedock@gmail.com>
Date: Sun, 18 Apr 2021 20:00:05 +0200
Subject: [PATCH 571/788] =?UTF-8?q?Corrige=20error=20tipogr=C3=A1fico?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 content/es/docs/concepts/configuration/configmap.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/concepts/configuration/configmap.md b/content/es/docs/concepts/configuration/configmap.md
index b607f0b82d..ce16f99aca 100644
--- a/content/es/docs/concepts/configuration/configmap.md
+++ b/content/es/docs/concepts/configuration/configmap.md
@@ -75,7 +75,7 @@ Hay cuatro maneras diferentes de usar un ConfigMap para configurar
 un contenedor dentro de un {{< glossary_tooltip text="Pod" term_id="pod" >}}:
 
 1. Argumento en la linea de comandos como entrypoint de un contenedor
-1. Variable de enorno de un contenedor
+1. Variable de entorno de un contenedor
 1. Como fichero en un volumen de solo lectura, para que lo lea la aplicación
 1. Escribir el código para ejecutar dentro de un {{< glossary_tooltip text="Pod" term_id="pod" >}} que utiliza la API para leer el ConfigMap
 

From 9b70b8464a940d26cc28eb23d0a011394344c353 Mon Sep 17 00:00:00 2001
From: Guangwen Feng <fenggw-fnst@cn.fujitsu.com>
Date: Fri, 16 Apr 2021 15:39:41 +0800
Subject: [PATCH 572/788] [zh] Sync
 docs/reference/access-authn-authz/admission-controllers.md

1. Update content/zh/docs/reference/access-authn-authz/admission-controllers.md
2. Fix 27545

Signed-off-by: Guangwen Feng <fenggw-fnst@cn.fujitsu.com>
---
 .../admission-controllers.md                  | 277 +++++++++++-------
 1 file changed, 168 insertions(+), 109 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/admission-controllers.md b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
index 202b13a27b..80d1256504 100644
--- a/content/zh/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
@@ -163,7 +163,7 @@ In the current version, the default ones are:
 在目前版本中，它们是：
 
 ```shell
-NamespaceLifecycle, LimitRanger, ServiceAccount, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, RuntimeClass, CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, ResourceQuota
+CertificateApproval, CertificateSigning, CertificateSubjectRestriction, DefaultIngressClass, DefaultStorageClass, DefaultTolerationSeconds, LimitRanger, MutatingAdmissionWebhook, NamespaceLifecycle, PersistentVolumeClaimResize, Priority, ResourceQuota, RuntimeClass, ServiceAccount, StorageObjectInUseProtection, TaintNodesByCondition, ValidatingAdmissionWebhook
 ```
 
 <!--
@@ -181,13 +181,22 @@ This admission controller allows all pods into the cluster. It is deprecated bec
 
 该准入控制器会允许所有的 pod 接入集群。已废弃，因为它的行为根本就和没有准入控制器一样。
 
+### AlwaysDeny {#alwaysdeny}
+
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+
+<!--
+Rejects all requests. AlwaysDeny is DEPRECATED as it has no real meaning.
+-->
+拒绝所有的请求。由于它没有实际意义，已废弃。
+
 ### AlwaysPullImages {#alwayspullimages}
 
 <!--
 This admission controller modifies every new Pod to force the image pull policy to Always. This is useful in a
 multitenant cluster so that users can be assured that their private images can only be used by those
 who have the credentials to pull them. Without this admission controller, once an image has been pulled to a
-node, any pod from any user can use it simply by knowing the image's name (assuming the Pod is
+node, any pod from any user can use it by knowing the image's name (assuming the Pod is
 scheduled onto the right node), without any authorization check against the image. When this admission controller
 is enabled, images are always pulled prior to starting containers, which means valid credentials are
 required.
@@ -198,15 +207,6 @@ required.
 的名称（假设 Pod 被调度到正确的节点上）来使用它，而不需要对镜像进行任何授权检查。
 当启用这个准入控制器时，总是在启动容器之前拉取镜像，这意味着需要有效的凭证。
 
-### AlwaysDeny {#alwaysdeny} 
-
-{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
-
-<!--
-Rejects all requests. AlwaysDeny is DEPRECATED as no real meaning.
--->
-拒绝所有的请求。由于没有实际意义，已废弃。
-
 ### CertificateApproval
 
 <!--
@@ -254,6 +254,37 @@ that specifies a 'group' (or 'organization attribute') of system:masters.
 CertificateSigningRequest 资源创建请求，
 它拒绝任何包含了 `system:masters` 一个“组”（或者“组织”）的请求。
 
+### DefaultIngressClass {#defaultingressclass}
+
+<!--
+This admission controller observes creation of `Ingress` objects that do not request any specific
+ingress class and automatically adds a default ingress class to them.  This way, users that do not
+request any special ingress class do not need to care about them at all and they will get the
+default one.
+-->
+该准入控制器监测没有请求任何特定 Ingress 类的 `Ingress` 对象的创建，并自动向其添加默认 Ingress 类。
+这样，没有任何特殊 Ingress 类需求的用户根本不需要关心它们，它们将获得默认 Ingress 类。
+
+<!--
+This admission controller does not do anything when no default ingress class is configured. When more than one ingress
+class is marked as default, it rejects any creation of `Ingress` with an error and an administrator
+must revisit their `IngressClass` objects and mark only one as default (with the annotation
+"ingressclass.kubernetes.io/is-default-class").  This admission controller ignores any `Ingress`
+updates; it acts only on creation.
+-->
+当未配置默认 Ingress 类时，此准入控制器不执行任何操作。如果将多个 Ingress 类标记为默认 Ingress 类，
+它将拒绝任何创建 `Ingress` 的操作，并显示错误。
+要修复此错误，管理员必须重新检查其 `IngressClass` 对象，并仅将其中一个标记为默认（通过注解
+"ingressclass.kubernetes.io/is-default-class"）。
+此准入控制器会忽略所有 `Ingress` 更新操作，仅响应创建操作。
+
+<!--
+See the [ingress](/docs/concepts/services-networking/ingress/) documentation for more about ingress
+classes and how to mark one as default.
+-->
+关于 Ingress 类以及如何将 Ingress 类标记为默认的更多信息，请参见
+[ingress](/zh/docs/concepts/services-networking/ingress/)。
+
 ### DefaultStorageClass {#defaultstorageclass}
 
 <!--
@@ -288,41 +319,20 @@ storage classes and how to mark a storage class as default.
 
 <!--
 This admission controller sets the default forgiveness toleration for pods to tolerate
-the taints `notready:NoExecute` and `unreachable:NoExecute` for 5 minutes,
-if the pods don't already have toleration for taints
-`node.kubernetes.io/not-ready:NoExecute` or
+the taints `notready:NoExecute` and `unreachable:NoExecute` based on the k8s-apiserver input parameters
+`default-not-ready-toleration-seconds` and `default-unreachable-toleration-seconds` if the pods don't already
+have toleration for taints `node.kubernetes.io/not-ready:NoExecute` or
 `node.kubernetes.io/unreachable:NoExecute`.
+The default value for `default-not-ready-toleration-seconds` and `default-unreachable-toleration-seconds` is 5 minutes.
 -->
-该准入控制器为 Pod 设置默认的容忍度，在 5 分钟内容忍 `notready:NoExecute` 和
+该准入控制器基于 k8s-apiserver 输入参数 `default-not-ready-toleration-seconds` 和
+`default-unreachable-toleration-seconds` 为 Pod 设置默认的容忍度，以容忍 `notready:NoExecute` 和
 `unreachable:NoExecute` 污点。
 （如果 Pod 尚未容忍 `node.kubernetes.io/not-ready：NoExecute` 和
 `node.kubernetes.io/unreachable：NoExecute` 污点的话）
+`default-not-ready-toleration-seconds` 和 `default-unreachable-toleration-seconds` 的默认值是 5 分钟。
 
-### DenyExecOnPrivileged {#denyexeconprivileged} 
-
-{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
-
-<!--
-This admission controller will intercept all requests to exec a command in a pod if that pod has a privileged container.
--->
-如果一个 pod 拥有一个特权容器，该准入控制器将拦截所有在该 pod 中执行 exec 命令的请求。
-
-<!--
-This functionality has been merged into [DenyEscalatingExec](#denyescalatingexec).
-The DenyExecOnPrivileged admission plugin is deprecated and will be removed in v1.18.
--->
-此功能已合并至 [DenyEscalatingExec](#denyescalatingexec)。
-而 DenyExecOnPrivileged 准入插件已被废弃，并将在 v1.18 被移除。
-
-<!--
-Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
-which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods
-is recommended instead.
--->
-建议使用基于策略的准入插件（例如 [PodSecurityPolicy](#podsecuritypolicy) 和自定义准入插件），
-该插件可以针对特定用户或名字空间，还可以防止创建权限过高的 Pod。
-
-### DenyEscalatingExec {#denyescalatingexec} 
+### DenyEscalatingExec {#denyescalatingexec}
 
 {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
 
@@ -336,17 +346,64 @@ attach 命令。这包括在特权模式运行的 Pod，可以访问主机 IPC 
 和访问主机 PID 名字空间的 Pod 。
 
 <!--
-The DenyEscalatingExec admission plugin is deprecated and will be removed in v1.18.
+The DenyEscalatingExec admission plugin is deprecated.
 
 Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
 which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods
 is recommended instead.
 -->
-DenyExecOnPrivileged 准入插件已被废弃，并将在 v1.18 被移除。
+DenyExecOnPrivileged 准入插件已被废弃。
 
 建议使用基于策略的准入插件（例如 [PodSecurityPolicy](#podsecuritypolicy) 和自定义准入插件），
 该插件可以针对特定用户或名字空间，还可以防止创建权限过高的 Pod。
 
+### DenyExecOnPrivileged {#denyexeconprivileged} 
+
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+
+<!--
+This admission controller will intercept all requests to exec a command in a pod if that pod has a privileged container.
+-->
+如果一个 pod 拥有一个特权容器，该准入控制器将拦截所有在该 pod 中执行 exec 命令的请求。
+
+<!--
+This functionality has been merged into [DenyEscalatingExec](#denyescalatingexec).
+The DenyExecOnPrivileged admission plugin is deprecated.
+-->
+此功能已合并至 [DenyEscalatingExec](#denyescalatingexec)。
+而 DenyExecOnPrivileged 准入插件已被废弃。
+
+<!--
+Use of a policy-based admission plugin (like [PodSecurityPolicy](#podsecuritypolicy) or a custom admission plugin)
+which can be targeted at specific users or Namespaces and also protects against creation of overly privileged Pods
+is recommended instead.
+-->
+建议使用基于策略的准入插件（例如 [PodSecurityPolicy](#podsecuritypolicy) 和自定义准入插件），
+该插件可以针对特定用户或名字空间，还可以防止创建权限过高的 Pod。
+
+### DenyServiceExternalIPs
+
+<!--
+This admission controller rejects all net-new usage of the `Service` field `externalIPs`.  This
+feature is very powerful (allows network traffic interception) and not well
+controlled by policy.  When enabled, users of the cluster may not create new
+Services which use `externalIPs` and may not add new values to `externalIPs` on
+existing `Service` objects.  Existing uses of `externalIPs` are not affected,
+and users may remove values from `externalIPs` on existing `Service` objects.
+-->
+该准入控制器拒绝 `Service` 字段 `externalIPs` 的所有新规使用。 此功能非常强大（允许网络流量拦截），
+并且无法很好地受策略控制。 启用后，群集用户将无法创建使用 `externalIPs` 的新服务，也无法在现有
+`Service` 对象上向 `externalIPs` 添加新值。 `externalIPs` 的现有使用不受影响，用户可以从现有
+`Service` 对象上的 `externalIPs` 中删除值。
+
+<!--
+Most users do not need this feature at all, and cluster admins should consider disabling it.
+Clusters that do need to use this feature should consider using some custom policy to manage usage
+of it.
+-->
+大多数用户根本不需要此功能，集群管理员应考虑将其禁用。
+确实需要使用此功能的集群应考虑使用一些自定义策略来管理其的使用。
+
 ### EventRateLimit {#eventratelimit} 
 
 {{< feature-state for_k8s_version="v1.13" state="alpha" >}}
@@ -437,7 +494,7 @@ for more details.
 <!--
 This plug-in facilitates creation of dedicated nodes with extended resources.
 If operators want to create dedicated nodes with extended resources (like GPUs, FPGAs etc.), they are expected to
-[taint the node](/docs/concepts/configuration/taint-and-toleration/#example-use-cases) with the extended resource
+[taint the node](/docs/concepts/scheduling-eviction/taint-and-toleration/#example-use-cases) with the extended resource
 name as the key. This admission controller, if enabled, automatically
 adds tolerations for such taints to pods requesting extended resources, so users don't have to manually
 add these tolerations.
@@ -764,8 +821,6 @@ and the [example of Limit Range](/docs/tasks/configure-pod-container/limit-range
 
 ### MutatingAdmissionWebhook {#mutatingadmissionwebhook} 
 
-{{< feature-state for_k8s_version="v1.13" state="beta" >}}
-
 <!--
 This admission controller calls any mutating webhooks which match the request. Matching
 webhooks are called in serial; each one may modify the object if it desires.
@@ -787,12 +842,12 @@ webhooks or validating admission controllers will permit the request to finish.
 
 <!--
 If you disable the MutatingAdmissionWebhook, you must also disable the
-`MutatingWebhookConfiguration` object in the `admissionregistration.k8s.io/v1beta1`
+`MutatingWebhookConfiguration` object in the `admissionregistration.k8s.io/v1`
 group/version via the `--runtime-config` flag (both are on by default in
 versions >= 1.9).
 -->
 如果你禁用了 MutatingAdmissionWebhook，那么还必须使用 `--runtime-config` 标志禁止
-`admissionregistration.k8s.io/v1beta1` 组/版本中的 `MutatingWebhookConfiguration`
+`admissionregistration.k8s.io/v1` 组/版本中的 `MutatingWebhookConfiguration`
 对象（版本 >=1.9 时，这两个对象都是默认启用的）。
 
 <!--
@@ -807,8 +862,6 @@ versions >= 1.9).
    different when read back.
    * Setting originally unset fields is less likely to cause problems than
      overwriting fields set in the original request. Avoid doing the latter.
- * This is a beta feature. Future versions of Kubernetes may restrict the types of
-   mutations these webhooks can make.
  * Future changes to control loops for built-in resources or third-party resources
    may break webhooks that work well today. Even when the webhook installation API
    is finalized, not all possible webhook behaviors will be guaranteed to be supported
@@ -818,7 +871,6 @@ versions >= 1.9).
 * 当它们回读的对象与尝试创建的对象不同，内建的控制环可能会出问题。
   * 与覆盖原始请求中设置的字段相比，使用原始请求未设置的字段会引起问题的可能性较小。
     应尽量避免前面那种方式。
-* 这是一个 beta 特性。Kubernetes 未来的版本可能会限制这些 Webhook 可以进行的变更类型。
 * 内建资源和第三方资源的控制回路未来可能会受到破坏性的更改，使现在运行良好的 Webhook
   无法再正常运行。即使完成了 Webhook API 安装，也不代表会为该 webhook 提供无限期的支持。
 
@@ -934,6 +986,55 @@ subresource of the referenced *owner* can change it.
 以便只有对所引用的 **属主（owner）** 的 `finalizers` 子资源具有 “更新” 
 权限的用户才能对其进行更改。
 
+### PersistentVolumeClaimResize {#persistentvolumeclaimresize}
+
+<!--
+This admission controller implements additional validations for checking incoming `PersistentVolumeClaim` resize requests.
+-->
+该准入控制器检查传入的 `PersistentVolumeClaim` 调整大小请求，对其执行额外的验证操作。
+
+{{< note >}}
+<!--
+Support for volume resizing is available as an alpha feature. Admins must set the feature gate `ExpandPersistentVolumes`
+to `true` to enable resizing.
+-->
+对调整卷大小的支持是一种 Alpha 特性。管理员必须将特性门控 `ExpandPersistentVolumes`
+设置为 `true` 才能启用调整大小。
+{{< /note >}}
+
+<!--
+After enabling the `ExpandPersistentVolumes` feature gate, enabling the `PersistentVolumeClaimResize` admission
+controller is recommended, too. This admission controller prevents resizing of all claims by default unless a claim's `StorageClass`
+ explicitly enables resizing by setting `allowVolumeExpansion` to `true`.
+
+For example: all `PersistentVolumeClaim`s created from the following `StorageClass` support volume expansion:
+-->
+启用 `ExpandPersistentVolumes` 特性门控之后，建议将 `PersistentVolumeClaimResize`
+准入控制器也启用。除非 PVC 的 `StorageClass` 明确地将 `allowVolumeExpansion` 设置为
+`true` 来显式启用调整大小。否则，默认情况下该准入控制器会阻止所有对 PVC 大小的调整。
+
+例如：由以下 `StorageClass` 创建的所有 `PersistentVolumeClaim` 都支持卷容量扩充：
+
+```yaml
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: gluster-vol-default
+provisioner: kubernetes.io/glusterfs
+parameters:
+  resturl: "http://192.168.10.100:8080"
+  restuser: ""
+  secretNamespace: ""
+  secretName: ""
+allowVolumeExpansion: true
+```
+
+<!--
+For more information about persistent volume claims, see [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims).
+-->
+关于持久化卷申领的更多信息，请参见
+[PersistentVolumeClaims](/zh/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)。
+
 ### PersistentVolumeLabel {#persistentvolumelabel} 
 
 {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
@@ -959,10 +1060,12 @@ PersistentVolumeLabel 已被废弃，标记持久卷已由
 
 ### PodNodeSelector {#podnodeselector}
 
+{{< feature-state for_k8s_version="v1.5" state="alpha" >}}
+
 <!--
 This admission controller defaults and limits what node selectors may be used within a namespace by reading a namespace annotation and a global configuration.
 -->
-该准入控制器通过读取名字空间注解和全局配置，来为名字空间中可以可以使用的节点选择器
+该准入控制器通过读取名字空间注解和全局配置，来为名字空间中可以使用的节点选择器
 设置默认值并实施限制。
 
 <!--
@@ -1048,7 +1151,7 @@ node selector.
 2. If the namespace lacks such an annotation, use the `clusterDefaultNodeSelector` defined in the `PodNodeSelector`
 plugin configuration file as the node selector.
 3. Evaluate the pod's node selector against the namespace node selector for conflicts. Conflicts result in rejection.
-4. Evaluate the pod's node selector against the namespace-specific whitelist defined the plugin configuration file.
+4. Evaluate the pod's node selector against the namespace-specific allowed selector defined the plugin configuration file.
 Conflicts result in rejection.
 -->
 1. 如果 `Namespace` 的注解带有键 `scheduler.alpha.kubernetes.io/node-selector`，
@@ -1056,7 +1159,7 @@ Conflicts result in rejection.
 2. 如果名字空间缺少此类注解，则使用 `PodNodeSelector` 插件配置文件中定义的
    `clusterDefaultNodeSelector` 作为节点选择算符。
 3. 评估 Pod 节点选择算符和名字空间节点选择算符是否存在冲突。存在冲突将导致拒绝。
-4. 评估 pod 节点选择算符和名字空间的白名单定义的插件配置文件是否存在冲突。
+4. 评估 Pod 节点选择算符和特定于名字空间的被允许的选择算符所定义的插件配置文件是否存在冲突。
    存在冲突将导致拒绝。
 
 {{< note >}}
@@ -1068,55 +1171,6 @@ PodNodeSelector 允许 Pod 强制在特定标签的节点上运行。
 另请参阅 PodTolerationRestriction 准入插件，该插件可防止 Pod 在特定污点的节点上运行。
 {{< /note >}}
 
-### PersistentVolumeClaimResize {#persistentvolumeclaimresize}
-
-<!--
-This admission controller implements additional validations for checking incoming `PersistentVolumeClaim` resize requests.
--->
-该准入控制器检查传入的 `PersistentVolumeClaim` 调整大小请求，对其执行额外的验证操作。
-
-{{< note >}}
-<!--
-Support for volume resizing is available as an alpha feature. Admins must set the feature gate `ExpandPersistentVolumes`
-to `true` to enable resizing.
--->
-对调整卷大小的支持是一种 Alpha 特性。管理员必须将特性门控 `ExpandPersistentVolumes`
-设置为 `true` 才能启用调整大小。
-{{< /note >}}
-
-<!--
-After enabling the `ExpandPersistentVolumes` feature gate, enabling the `PersistentVolumeClaimResize` admission
-controller is recommended, too. This admission controller prevents resizing of all claims by default unless a claim's `StorageClass`
- explicitly enables resizing by setting `allowVolumeExpansion` to `true`.
-
-For example: all `PersistentVolumeClaim`s created from the following `StorageClass` support volume expansion:
--->
-启用 `ExpandPersistentVolumes` 特性门控之后，建议将 `PersistentVolumeClaimResize`
-准入控制器也启用。除非 PVC 的 `StorageClass` 明确地将 `allowVolumeExpansion` 设置为
-`true` 来显式启用调整大小。否则，默认情况下该准入控制器会阻止所有对 PVC 大小的调整。
-
-例如：由以下 `StorageClass` 创建的所有 `PersistentVolumeClaim` 都支持卷容量扩充：
-
-```yaml
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: gluster-vol-default
-provisioner: kubernetes.io/glusterfs
-parameters:
-  resturl: "http://192.168.10.100:8080"
-  restuser: ""
-  secretNamespace: ""
-  secretName: ""
-allowVolumeExpansion: true
-```
-
-<!--
-For more information about persistent volume claims, see [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims).
--->
-关于持久化卷申领的更多信息，请参见
-[PersistentVolumeClaims](/zh/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)。
-
 ### PodSecurityPolicy {#podsecuritypolicy}
 
 <!--
@@ -1135,9 +1189,10 @@ for more information.
 
 ### PodTolerationRestriction {#podtolerationrestriction}
 
+{{< feature-state for_k8s_version="v1.7" state="alpha" >}}
+
 <!--
-The PodTolerationRestriction admission controller verifies any conflict between tolerations
-of a pod and the tolerations of its namespace.
+The PodTolerationRestriction admission controller verifies any conflict between tolerations of a pod and the tolerations of its namespace.
 It rejects the pod request if there is a conflict.
 It then merges the tolerations annotated on the namespace into the tolerations of the pod.
 The resulting tolerations are checked against a list of allowed tolerations annotated to the namespace.
@@ -1278,7 +1333,13 @@ We strongly recommend using this admission controller if you intend to make use
 ### StorageObjectInUseProtection
 
 <!--
-The `StorageObjectInUseProtection` plugin adds the `kubernetes.io/pvc-protection` or `kubernetes.io/pv-protection` finalizers to newly created Persistent Volume Claims (PVCs) or Persistent Volumes (PV). In case a user deletes a PVC or PV the PVC or PV is not removed until the finalizer is removed from the PVC or PV by PVC or PV Protection Controller. Refer to the [Storage Object in Use Protection](/docs/concepts/storage/persistent-volumes/#storage-object-in-use-protection) for more detailed information.
+The `StorageObjectInUseProtection` plugin adds the `kubernetes.io/pvc-protection` or `kubernetes.io/pv-protection`
+finalizers to newly created Persistent Volume Claims (PVCs) or Persistent Volumes (PV).
+In case a user deletes a PVC or PV the PVC or PV is not removed until the finalizer is removed
+from the PVC or PV by PVC or PV Protection Controller.
+Refer to the
+[Storage Object in Use Protection](/docs/concepts/storage/persistent-volumes/#storage-object-in-use-protection)
+for more detailed information.
 -->
 `StorageObjectInUseProtection` 插件将 `kubernetes.io/pvc-protection` 或
 `kubernetes.io/pv-protection` finalizers 添加到新创建的持久化卷声明（PVC）
@@ -1302,8 +1363,6 @@ This admission controller {{< glossary_tooltip text="taints" term_id="taint" >}}
 
 ### ValidatingAdmissionWebhook {#validatingadmissionwebhook} 
 
-{{< feature-state for_k8s_version="v1.13" state="beta" >}}
-
 <!--
 This admission controller calls any validating webhooks which match the request. Matching
 webhooks are called in parallel; if any of them rejects the request, the request
@@ -1325,12 +1384,12 @@ webhooks or other validating admission controllers will permit the request to fi
 
 <!--
 If you disable the ValidatingAdmissionWebhook, you must also disable the
-`ValidatingWebhookConfiguration` object in the `admissionregistration.k8s.io/v1beta1`
+`ValidatingWebhookConfiguration` object in the `admissionregistration.k8s.io/v1`
 group/version via the `--runtime-config` flag (both are on by default in
 versions 1.9 and later).
 -->
 如果你禁用了 ValidatingAdmissionWebhook，还必须通过 `--runtime-config` 标志来禁用
-`admissionregistration.k8s.io/v1beta1` 组/版本中的  `ValidatingWebhookConfiguration`
+`admissionregistration.k8s.io/v1` 组/版本中的  `ValidatingWebhookConfiguration`
 对象（默认情况下在 1.9 版和更高版本中均处于启用状态）。
 
 

From 3100379bcd3eee3feb0c7039cfcf57079e7b3db0 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Fri, 16 Apr 2021 15:26:52 +0900
Subject: [PATCH 573/788] Fix errors #27565, #27569

---
 ...019-12-09-kubernetes-1.17-release-announcement.md |  6 +++---
 content/en/blog/_posts/2020-09-03-warnings/index.md  |  2 +-
 .../concepts/scheduling-eviction/assign-pod-node.md  |  2 +-
 .../concepts/workloads/controllers/replicaset.md     |  2 +-
 .../pods/pod-topology-spread-constraints.md          |  2 +-
 content/en/docs/reference/_index.md                  |  2 +-
 .../command-line-tools-reference/feature-gates.md    | 12 ++++++------
 .../en/docs/reference/labels-annotations-taints.md   |  2 +-
 static/_redirects                                    |  2 ++
 9 files changed, 17 insertions(+), 15 deletions(-)

diff --git a/content/en/blog/_posts/2019-12-09-kubernetes-1.17-release-announcement.md b/content/en/blog/_posts/2019-12-09-kubernetes-1.17-release-announcement.md
index f5c6761eab..983d7ba31e 100644
--- a/content/en/blog/_posts/2019-12-09-kubernetes-1.17-release-announcement.md
+++ b/content/en/blog/_posts/2019-12-09-kubernetes-1.17-release-announcement.md
@@ -31,9 +31,9 @@ Standard labels are used by Kubernetes components to support some features. For
 
 The labels are reaching general availability in this release. Kubernetes components have been updated to populate the GA and beta labels and to react to both. However, if you are using the beta labels in your pod specs for features such as node affinity, or in your custom controllers, we recommend that you start migrating them to the new GA labels. You can find the documentation for the new labels here:
 
-- [node.kubernetes.io/instance-type](https://kubernetes.io/docs/reference/kubernetes-api/labels-annotations-taints/#nodekubernetesioinstance-type)
-- [topology.kubernetes.io/region](https://kubernetes.io/docs/reference/kubernetes-api/labels-annotations-taints/#topologykubernetesioregion)
-- [topology.kubernetes.io/zone](https://kubernetes.io/docs/reference/kubernetes-api/labels-annotations-taints/#topologykubernetesiozone)
+- [node.kubernetes.io/instance-type](/docs/reference/labels-annotations-taints/#nodekubernetesioinstance-type)
+- [topology.kubernetes.io/region](/docs/reference/labels-annotations-taints/#topologykubernetesioregion)
+- [topology.kubernetes.io/zone](/docs/reference/labels-annotations-taints/#topologykubernetesiozone)
 
 ## Volume Snapshot Moves to Beta
 
diff --git a/content/en/blog/_posts/2020-09-03-warnings/index.md b/content/en/blog/_posts/2020-09-03-warnings/index.md
index d88dd8328d..50576c0329 100644
--- a/content/en/blog/_posts/2020-09-03-warnings/index.md
+++ b/content/en/blog/_posts/2020-09-03-warnings/index.md
@@ -325,7 +325,7 @@ Now that we have a way to communicate helpful information to users in context,
 we're already considering other ways we can use this to improve people's experience with Kubernetes.
 A couple areas we're looking at next are warning about [known problematic values](http://issue.k8s.io/64841#issuecomment-395141013)
 we cannot reject outright for compatibility reasons, and warning about use of deprecated fields or field values
-(like selectors using beta os/arch node labels, [deprecated in v1.14](/docs/reference/kubernetes-api/labels-annotations-taints/#beta-kubernetes-io-arch-deprecated)).
+(like selectors using beta os/arch node labels, [deprecated in v1.14](/docs/reference/labels-annotations-taints/#beta-kubernetes-io-arch-deprecated)).
 I'm excited to see progress in this area, continuing to make it easier to use Kubernetes.
 
 ---
diff --git a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
index 88ca9e8128..3c779dda79 100644
--- a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -72,7 +72,7 @@ verify that it worked by running `kubectl get pods -o wide` and looking at the
 ## Interlude: built-in node labels {#built-in-node-labels}
 
 In addition to labels you [attach](#step-one-attach-label-to-the-node), nodes come pre-populated
-with a standard set of labels. See [Well-Known Labels, Annotations and Taints](/docs/reference/kubernetes-api/labels-annotations-taints/) for a list of these.
+with a standard set of labels. See [Well-Known Labels, Annotations and Taints](/docs/reference/labels-annotations-taints/) for a list of these.
 
 {{< note >}}
 The value of these labels is cloud provider specific and is not guaranteed to be reliable.
diff --git a/content/en/docs/concepts/workloads/controllers/replicaset.md b/content/en/docs/concepts/workloads/controllers/replicaset.md
index 316b6a3b6c..f47f3be439 100644
--- a/content/en/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/en/docs/concepts/workloads/controllers/replicaset.md
@@ -325,7 +325,7 @@ If all of the above match, then selection is random.
 ### Pod deletion cost 
 {{< feature-state for_k8s_version="v1.21" state="alpha" >}}
 
-Using the [`controller.kubernetes.io/pod-deletion-cost`](/docs/reference/command-line-tools-reference/labels-annotations-taints/#pod-deletion-cost) 
+Using the [`controller.kubernetes.io/pod-deletion-cost`](/docs/reference/labels-annotations-taints/#pod-deletion-cost) 
 annotation, users can set a preference regarding which pods to remove first when downscaling a ReplicaSet.
 
 The annotation should be set on the pod, the range is [-2147483647, 2147483647]. It represents the cost of
diff --git a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
index 2e8a915c62..8e588da111 100644
--- a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
+++ b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -58,7 +58,7 @@ graph TB
     class zoneA,zoneB cluster;
 {{< /mermaid >}}
 
-Instead of manually applying labels, you can also reuse the [well-known labels](/docs/reference/kubernetes-api/labels-annotations-taints/) that are created and populated automatically on most clusters.
+Instead of manually applying labels, you can also reuse the [well-known labels](/docs/reference/labels-annotations-taints/) that are created and populated automatically on most clusters.
 
 ## Spread Constraints for Pods
 
diff --git a/content/en/docs/reference/_index.md b/content/en/docs/reference/_index.md
index 55e9a91d9f..a9d7ee3a9b 100644
--- a/content/en/docs/reference/_index.md
+++ b/content/en/docs/reference/_index.md
@@ -26,7 +26,7 @@ This section of the Kubernetes documentation contains references.
 * [One-page API Reference for Kubernetes {{< param "version" >}}](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 * [Using The Kubernetes API](/docs/reference/using-api/) - overview of the API for Kubernetes.
 * [API access control](/docs/reference/access-authn-authz/) - details on how Kubernetes controls API access
-* [Well-Known Labels, Annotations and Taints](/docs/reference/kubernetes-api/labels-annotations-taints/)
+* [Well-Known Labels, Annotations and Taints](/docs/reference/labels-annotations-taints/)
 
 ## Officially supported client libraries
 
diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 726207c9fe..f3b5a01e1e 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -664,7 +664,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `IndexedJob`: Allows the [Job](/docs/concepts/workloads/controllers/job/)
   controller to manage Pod completions per completion index.
 - `IngressClassNamespacedParams`: Allow namespace-scoped parameters reference in
-  `IngressClass` resouce. This feature adds two fields - `Scope` and `Namespace`
+  `IngressClass` resource. This feature adds two fields - `Scope` and `Namespace`
   to `IngressClass.spec.parameters`.
 - `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
   support for IPv6.
@@ -679,7 +679,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [Support Device Monitoring](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/606-compute-device-assignment/README.md)
   for more details.
 - `KubeletPodResourcesGetAllocatable`: Enable the kubelet's pod resources `GetAllocatableResources` functionality.
-  This API augments the [resource allocation reporting](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#monitoring-device-plugin-resources)
+  This API augments the [resource allocation reporting](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#monitoring-device-plugin-resources)
   with informations about the allocatable resources, enabling clients to properly track the free compute resources on a node.
 - `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and
   node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the
@@ -712,7 +712,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `NonPreemptingPriority`: Enable `preemptionPolicy` field for PriorityClass and Pod.
 - `PVCProtection`: Enable the prevention of a PersistentVolumeClaim (PVC) from
   being deleted when it is still used by any Pod.
-- `PodDeletionCost`: Enable the [Pod Deletion Cost](/docs/content/en/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)
+- `PodDeletionCost`: Enable the [Pod Deletion Cost](/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)
    feature which allows users to influence ReplicaSet downscaling order.
 - `PersistentLocalVolumes`: Enable the usage of `local` volume type in Pods.
   Pod affinity has to be specified if requesting a `local` volume.
@@ -730,7 +730,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   a single process namespace between containers running in a pod.  More details can be found in
   [Share Process Namespace between Containers in a Pod](/docs/tasks/configure-pod-container/share-process-namespace/).
 - `ProbeTerminationGracePeriod`: Enable [setting probe-level
-  `terminationGracePeriodSeconds`](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationGracePeriodSeconds)
+  `terminationGracePeriodSeconds`](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationgraceperiodseconds)
    on pods.  See the [enhancement proposal](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2238-liveness-probe-grace-period) for more details.
 - `ProcMountType`: Enables control over the type proc mounts for containers
   by setting the `procMount` field of a SecurityContext.
@@ -776,7 +776,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `ServiceInternalTrafficPolicy`: Enables the `InternalTrafficPolicy` field on Services
 - `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
   field on Services.
-- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services. See [Specifying class of load balancer implementation](/docs/concepts/services-networking/service/#specifying-class-of-load-balancer-implementation-load-balancer-class) for more details.
+- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services. See [Specifying class of load balancer implementation](/docs/concepts/services-networking/service/#load-balancer-class) for more details.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.
 - `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers
   created by a cloud provider. A node is eligible for exclusion if labelled with
@@ -835,7 +835,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `TopologyManager`: Enable a mechanism to coordinate fine-grained hardware resource
   assignments for different components in Kubernetes. See
   [Control Topology Management Policies on a node](/docs/tasks/administer-cluster/topology-manager/).
-- 'VolumeCapacityPriority`: Enable support for prioritizing nodes in different
+- `VolumeCapacityPriority`: Enable support for prioritizing nodes in different
   topologies based on available PV capacity.
 - `VolumePVCDataSource`: Enable support for specifying an existing PVC as a DataSource.
 - `VolumeScheduling`: Enable volume topology aware scheduling and make the
diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index 08861e5811..8cd68c877b 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -69,7 +69,7 @@ Example: `controller.kubernetes.io/pod-deletion-cost=10`
 
 Used on: Pod
 
-This annotation is used to set [Pod Deletion Cost](/docs/content/en/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)
+This annotation is used to set [Pod Deletion Cost](/docs/concepts/workloads/controllers/replicaset/#pod-deletion-cost)
 which allows users to influence ReplicaSet downscaling order. The annotation parses into an `int32` type.
 
 ## beta.kubernetes.io/instance-type (deprecated)
diff --git a/static/_redirects b/static/_redirects
index 84f16821dc..ae7c753135 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -187,6 +187,8 @@
 /docs/home/contribute/blog-post/ /docs/contribute/start/ 301
 /docs/home/contribute/write-new-topic/ /docs/contribute/style/write-new-topic/ 301
 
+/docs/reference/command-line-tools-reference/labels-annotations-taints/     /docs/reference/labels-annotations-taints/ 301
+
 /docs/reference/deprecation-policy/     /docs/reference/using-api/deprecation-policy/ 301
 
 /docs/reference/generated/cloud-controller-manager/     /docs/reference/command-line-tools-reference/cloud-controller-manager/ 301

From 69dd10b2aec857ae870ad4ca3e6a238d5a64e5de Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 19 Apr 2021 16:32:35 +0900
Subject: [PATCH 574/788] Fix bugs in setup/release/notes.md

---
 content/en/docs/setup/release/notes.md | 93 +-------------------------
 1 file changed, 2 insertions(+), 91 deletions(-)

diff --git a/content/en/docs/setup/release/notes.md b/content/en/docs/setup/release/notes.md
index 89dc5694c0..2741de7e50 100644
--- a/content/en/docs/setup/release/notes.md
+++ b/content/en/docs/setup/release/notes.md
@@ -19,6 +19,8 @@ card:
 
 ## Downloads for v1.21.0
 
+### Source Code
+
 filename | sha512 hash
 -------- | -----------
 [kubernetes.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes.tar.gz) | `19bb76a3fa5ce4b9f043b2a3a77c32365ab1fcb902d8dd6678427fb8be8f49f64a5a03dc46aaef9c7dadee05501cf83412eda46f0edacbb8fc1ed0bf5fb79142`
@@ -62,12 +64,6 @@ filename | sha512 hash
 
 ## Changelog since v1.20.0
 
-# Release notes for v1.21.0-rc.0
-
-[Documentation](https://docs.k8s.io/docs/home)
-
-# Changelog since v1.20.0
-
 ## What's New (Major Themes)
 
 ### Deprecation of PodSecurityPolicy
@@ -554,91 +550,6 @@ The feature gate currently falls back to the default behavior in most cases. Ena
 - sigs.k8s.io/kustomize: v2.0.3+incompatible
 
 
-## Dependencies
-
-### Added
-- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
-- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
-- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
-- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
-- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
-- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
-- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
-- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
-- go.starlark.net: 8dd3e2e
-- golang.org/x/term: 6a3ed07
-- sigs.k8s.io/kustomize/api: v0.8.5
-- sigs.k8s.io/kustomize/cmd/config: v0.9.7
-- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
-- sigs.k8s.io/kustomize/kyaml: v0.10.15
-
-### Changed
-- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
-- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
-- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
-- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
-- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
-- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
-- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
-- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
-- github.com/creack/pty: [v1.1.7 → v1.1.11](https://github.com/creack/pty/compare/v1.1.7...v1.1.11)
-- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
-- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
-- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
-- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
-- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
-- github.com/google/cadvisor: [v0.38.5 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.5...v0.39.0)
-- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
-- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
-- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
-- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
-- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
-- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
-- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
-- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
-- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
-- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
-- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
-- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
-- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
-- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
-- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
-- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
-- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
-- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
-- golang.org/x/crypto: 7f63de1 → 5ea612d
-- golang.org/x/exp: 6cc2880 → 85be41e
-- golang.org/x/mobile: d2bd2a2 → e6ae53a
-- golang.org/x/mod: v0.3.0 → ce943fd
-- golang.org/x/net: 69a7880 → 3d97a24
-- golang.org/x/sync: cd5d95a → 67f06af
-- golang.org/x/sys: 5cba982 → a50acf3
-- golang.org/x/time: 3af7569 → f8bda1e
-- golang.org/x/tools: c1934b7 → v0.1.0
-- gopkg.in/check.v1: 41f04d3 → 8fa4692
-- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
-- gotest.tools/v3: v3.0.2 → v3.0.3
-- k8s.io/gengo: 83324d8 → b6c5ce2
-- k8s.io/klog/v2: v2.4.0 → v2.8.0
-- k8s.io/kube-openapi: d219536 → 591a79e
-- k8s.io/system-validators: v1.2.0 → v1.4.0
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.1.0
-
-### Removed
-- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
-- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
-- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
-- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
-- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
-- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
-- sigs.k8s.io/kustomize: v2.0.3+incompatible
-
-
 
 # v1.21.0-rc.0
 

From 76174c4d651f71651bb28fb5624f334232f3e6df Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Mon, 19 Apr 2021 15:57:42 +0800
Subject: [PATCH 575/788] [zh]update setup/_index.md

---
 content/zh/docs/setup/_index.md | 39 +++++++--------------------------
 1 file changed, 8 insertions(+), 31 deletions(-)

diff --git a/content/zh/docs/setup/_index.md b/content/zh/docs/setup/_index.md
index 16c58a7b6c..d7828c8ac3 100644
--- a/content/zh/docs/setup/_index.md
+++ b/content/zh/docs/setup/_index.md
@@ -37,27 +37,21 @@ card:
 <!-- overview -->
 
 <!--
-This section covers different options to set up and run Kubernetes.
+This section lists the different ways to set up and run Kubernetes.
 -->
-本节介绍了设置和运行 Kubernetes 环境的不同选项。
+本节列出了设置和运行 Kubernetes 的不同方法。
 
 <!--
-Different Kubernetes solutions meet different requirements: ease of maintenance, security, control, available resources, and expertise required to operate and manage a cluster.
+When you install Kubernetes, choose an installation type based on: ease of maintenance, security,
+control, available resources, and expertise required to operate and manage a cluster.
 -->
-不同的 Kubernetes 解决方案满足不同的要求：易于维护、安全性、可控制性、可用资源以及操作和管理 Kubernetes 集群所需的专业知识。
+安装 Kubernetes 时，请根据以下条件选择安装类型：易于维护、安全性、可控制性、可用资源以及操作和管理 Kubernetes 集群所需的专业知识。
 
 <!--
-You can deploy a Kubernetes cluster on a local machine, cloud, on-prem datacenter; or choose a managed Kubernetes cluster. You can also create custom solutions across a wide range of cloud providers, or bare metal environments.
+You can deploy a Kubernetes cluster on a local machine, cloud, on-prem datacenter, or choose a managed Kubernetes cluster. There are also custom solutions across a wide range of cloud providers, or bare metal environments.
 -->
 可以在本地机器、云、本地数据中心上部署 Kubernetes 集群，或选择一个托管的 Kubernetes 集群。还可以跨各种云提供商或裸机环境创建自定义解决方案。
 
-<!--
-More simply, you can create a Kubernetes cluster in learning and production environments.
--->
-更简单地说，可以在学习和生产环境中创建一个 Kubernetes 集群。
-
-
-
 <!-- body -->
 
 <!--
@@ -66,26 +60,9 @@ More simply, you can create a Kubernetes cluster in learning and production envi
 ## 学习环境
 
 <!--
-If you're learning Kubernetes, use the Docker-based solutions: tools supported by the Kubernetes community, or tools in the ecosystem to set up a Kubernetes cluster on a local machine.
+If you're learning Kubernetes, use the tools supported by the Kubernetes community, or tools in the ecosystem to set up a Kubernetes cluster on a local machine.
 -->
-如果正打算学习 Kubernetes，请使用基于 Docker 的解决方案：Docker 是 Kubernetes 社区支持或生态系统中用来在本地计算机上设置 Kubernetes 集群的一种工具。
-
-<!--
-{{< table caption="Local machine solutions table that lists the tools supported by the community and the ecosystem to deploy Kubernetes." >}}
-|Community           |Ecosystem     |
-| ------------       | --------     |
-| [Minikube](/docs/setup/learning-environment/minikube/) | [Docker Desktop](https://www.docker.com/products/docker-desktop)|
-| [kind (Kubernetes IN Docker)](/docs/setup/learning-environment/kind/) | [Minishift](https://docs.okd.io/latest/minishift/)|
-|                     | [MicroK8s](https://microk8s.io/)|
--->
-{{< table caption="本地机器解决方案表，其中列出了社区和生态系统支持的用于部署 Kubernetes 的工具。" >}}
-
-|社区           |生态系统     |
-| ------------       | --------     |
-| [Minikube](/zh/docs/setup/learning-environment/minikube/) | [Docker Desktop](https://www.docker.com/products/docker-desktop)|
-| [kind (Kubernetes IN Docker)](/zh/docs/setup/learning-environment/kind/) | [Minishift](https://docs.okd.io/latest/minishift/)|
-|                     | [MicroK8s](https://microk8s.io/)|
-
+如果正打算学习 Kubernetes，请使用 Kubernetes 社区支持或生态系统中的工具在本地计算机上设置 Kubernetes 集群。
 
 <!--
 ## Production environment

From df213b8437f5c9107240527790e1879a121dbcc6 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Mon, 19 Apr 2021 18:41:57 +0800
Subject: [PATCH 576/788] [zh] Update CronJob example from  batch/v1beta1 to
 batch/v1

---
 content/zh/examples/application/job/cronjob.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/examples/application/job/cronjob.yaml b/content/zh/examples/application/job/cronjob.yaml
index 816d682f28..da905a9048 100644
--- a/content/zh/examples/application/job/cronjob.yaml
+++ b/content/zh/examples/application/job/cronjob.yaml
@@ -1,4 +1,4 @@
-apiVersion: batch/v1beta1
+apiVersion: batch/v1
 kind: CronJob
 metadata:
   name: hello

From 8c6d2905fe49d5cbf0d01cd38ed523e18e8fe3d0 Mon Sep 17 00:00:00 2001
From: jay vyas <jvyas@vmware.com>
Date: Mon, 19 Apr 2021 03:42:36 -0700
Subject: [PATCH 577/788] =?UTF-8?q?Create=20blog=20article=20=E2=80=9CDefi?=
 =?UTF-8?q?ning=20Network=20Policy=20Conformance=20for=20Container=20Netwo?=
 =?UTF-8?q?rk=20Interface=20(CNI)=20providers=E2=80=9D=20(#27159)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Create 2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

* Update content/en/blog/_posts/2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* fix name spelling

* Update content/en/blog/_posts/2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* cleanup, spelling

* clean up, simplify example

* fix typos

* explain result table

* Update content/en/blog/_posts/2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* merge code review comments

* Apply suggestions from code review

* Update 2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

* Update 2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

* Update content/en/blog/_posts/2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update 2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs

* fix filename extension

* Update content/en/blog/_posts/2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/2021-03-09-Defining-NetworkPolicy-Conformance-For-CNIs.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* handle review comments

* Update content/en/blog/_posts/2021-04-20-Defining-NetworkPolicy-Conformance-For-CNIs.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Minor corrections and tweaks for readability

* Clarifying transports

* Minor changes to blog post

* clarify requirements to run new e2e Network Policy testsuite with
  sonobuoy
* modify link for Network Policy user stories

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Matthew Fenwick <mfenwick100@gmail.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Chris Tomkins <chris.tomkins@tigera.io>
Co-authored-by: Antonin Bas <abas@vmware.com>
---
 ...ning-NetworkPolicy-Conformance-For-CNIs.md | 479 ++++++++++++++++++
 1 file changed, 479 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-20-Defining-NetworkPolicy-Conformance-For-CNIs.md

diff --git a/content/en/blog/_posts/2021-04-20-Defining-NetworkPolicy-Conformance-For-CNIs.md b/content/en/blog/_posts/2021-04-20-Defining-NetworkPolicy-Conformance-For-CNIs.md
new file mode 100644
index 0000000000..86c005eed1
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-20-Defining-NetworkPolicy-Conformance-For-CNIs.md
@@ -0,0 +1,479 @@
+---
+layout: blog
+title: "Defining Network Policy Conformance for Container Network Interface (CNI) providers"
+date: 2021-04-20
+slug: defining-networkpolicy-conformance-cni-providers
+---
+
+Authors: Matt Fenwick (Synopsys), Jay Vyas (VMWare), Ricardo Katz, Amim Knabben (Loadsmart), Douglas Schilling Landgraf (Red Hat), Christopher Tomkins (Tigera)
+
+Special thanks to Tim Hockin and Bowie Du (Google), Dan Winship and Antonio Ojea (Red Hat),
+Casey Davenport and Shaun Crampton (Tigera), and Abhishek Raut and Antonin Bas (VMware) for
+being supportive of this work, and working with us to resolve issues in different Container Network Interfaces (CNIs) over time.
+
+A brief conversation around "node local" Network Policies in April of 2020 inspired the creation of a NetworkPolicy subproject from SIG Network. It became clear that as a community,
+we need a rock-solid story around how to do pod network security on Kubernetes, and this story needed a community around it, so as to grow the cultural adoption of enterprise security patterns in K8s.
+
+In this post we'll discuss:
+
+- Why we created a subproject for [Network Policies](https://kubernetes.io/docs/concepts/services-networking/network-policies/)
+- How we changed the Kubernetes e2e framework to `visualize` NetworkPolicy implementation of your CNI provider
+- The initial results of our comprehensive NetworkPolicy conformance validator, _Cyclonus_, built around these principles
+- Improvements subproject contributors have made to the NetworkPolicy user experience
+
+## Why we created a subproject for NetworkPolicies
+
+In April of 2020 it was becoming clear that many CNIs were emerging, and many vendors
+implement these CNIs in subtly different ways.  Users were beginning to express a little bit
+of confusion around how to implement policies for different scenarios, and asking for new features.
+It was clear that we needed to begin unifying the way we think about Network Policies
+in Kubernetes, to avoid API fragmentation and unnecessary complexity.
+
+For example:
+- In order to be flexible to the user’s environment, Calico as a CNI provider can be run using IPIP or VXLAN mode, or without encapsulation overhead.  CNIs such as Antrea
+  and Cilium offer similar configuration options as well.
+- Some CNI plugins offer iptables for NetworkPolicies amongst other options, whereas other CNIs use a completely
+  different technology stack (for example, the Antrea project uses Open vSwitch rules).
+- Some CNI plugins only implement a subset of the Kubernetes NetworkPolicy API, and some a superset. For example, certain plugins don't support the
+  ability to target a named port; others don't work with certain IP address types, and there are diverging semantics for similar policy types.
+- Some CNI plugins combine with OTHER CNI plugins in order to implement NetworkPolicies (canal), some CNI's might mix implementations (multus), and some clouds do routing separately from NetworkPolicy implementation.
+
+Although this complexity is to some extent necessary to support different environments, end-users find that they need to follow a multistep process to implement Network Policies to secure their applications:
+- Confirm that their network plugin supports NetworkPolicies (some don't, such as Flannel)
+- Confirm that their cluster's network plugin supports the specific NetworkPolicy features that they are interested in (again, the named port or port range examples come to mind here)
+- Confirm that their application's Network Policy definitions are doing the right thing
+- Find out the nuances of a vendor's implementation of policy, and check whether or not that implementation has a CNI neutral implementation (which is sometimes adequate for users)
+
+The NetworkPolicy project in upstream Kubernetes aims at providing a community where
+people can learn about, and contribute to, the Kubernetes NetworkPolicy API and the surrounding ecosystem.
+
+## The First step: A validation framework for NetworkPolicies that was intuitive to use and understand
+
+The Kubernetes end to end suite has always had NetworkPolicy tests, but these weren't
+run in CI, and the way they were implemented didn't provide holistic, easily consumable
+information about how a policy was working in a cluster.
+This is because the original tests didn't provide any kind of visual summary of connectivity
+across a cluster.   We thus initially set out to make it easy to confirm CNI support for NetworkPolicies by
+making the end to end tests (which are often used by administrators or users to diagnose cluster conformance) easy to interpret.
+
+To solve the problem of confirming that CNIs support the basic features most users care about
+for a policy, we built a new NetworkPolicy validation tool into the Kubernetes e2e
+framework which allows for visual inspection of policies and their effect on a standard set of pods in a cluster.
+For example, take the following test output.  We found a bug in
+[OVN Kubernetes](https://github.com/ovn-org/ovn-kubernetes/issues/1782). This bug has now been resolved. With this tool the bug was really
+easy to characterize, wherein certain policies caused a state-modification that,
+later on, caused traffic to incorrectly be blocked (even after all Network Policies were deleted from the cluster).
+
+This is the network policy for the test in question:
+```yaml
+metadata:
+  creationTimestamp: null
+  name: allow-ingress-port-80
+spec:
+  ingress:
+  - ports:
+    - port: serve-80-tcp
+  podSelector: {}
+```
+
+These are the expected connectivity results.  The test setup is 9 pods (3 namespaces: x, y, and z;
+and 3 pods in each namespace: a, b, and c); each pod runs a server on the same port and protocol
+that can be reached through HTTP calls in the absence of network policies.  Connectivity is verified
+by using the [agnhost](https://github.com/kubernetes/kubernetes/tree/master/test/images/agnhost) network utility to issue HTTP calls on a port and protocol that other pods are
+expected to be serving.  A test scenario first
+runs a connectivity check to ensure that each pod can reach each other pod, for 81 (= 9 x 9) data
+points.  This is the "control".  Then perturbations are applied, depending on the test scenario:
+policies are created, updated, and deleted; labels are added and removed from pods and namespaces,
+and so on.  After each change, the connectivity matrix is recollected and compared to the expected
+connectivity.
+
+These results give a visual indication of connectivity in a simple matrix.  Going down the leftmost column is the "source"
+pod, or the pod issuing the request; going across the topmost row is the "destination" pod, or the pod
+receiving the request.  A `.` means that the connection was allowed; an `X` means the connection was
+blocked. For example:
+
+```
+Nov  4 16:58:43.449: INFO: expected:
+
+-   x/a x/b x/c y/a y/b y/c z/a z/b z/c
+x/a .   .   .   .   .   .   .   .   .
+x/b .   .   .   .   .   .   .   .   .
+x/c .   .   .   .   .   .   .   .   .
+y/a .   .   .   .   .   .   .   .   .
+y/b .   .   .   .   .   .   .   .   .
+y/c .   .   .   .   .   .   .   .   .
+z/a .   .   .   .   .   .   .   .   .
+z/b .   .   .   .   .   .   .   .   .
+z/c .   .   .   .   .   .   .   .   .
+```
+
+Below are the observed connectivity results in the case of the OVN Kubernetes bug.  Notice how the top three rows indicate that
+all requests from namespace x regardless of pod and destination were blocked.  Since these
+experimental results do not match the expected results, a failure will be reported.  Note
+how the specific pattern of failure provides clear insight into the nature of the problem --
+since all requests from a specific namespace fail, we have a clear clue to start our
+investigation.
+
+```
+Nov  4 16:58:43.449: INFO: observed:
+
+-   x/a x/b x/c y/a y/b y/c z/a z/b z/c
+x/a X   X   X   X   X   X   X   X   X
+x/b X   X   X   X   X   X   X   X   X
+x/c X   X   X   X   X   X   X   X   X
+y/a .   .   .   .   .   .   .   .   .
+y/b .   .   .   .   .   .   .   .   .
+y/c .   .   .   .   .   .   .   .   .
+z/a .   .   .   .   .   .   .   .   .
+z/b .   .   .   .   .   .   .   .   .
+z/c .   .   .   .   .   .   .   .   .
+```
+
+This was one of our earliest wins in the Network Policy group, as we were able to
+identify and work with the OVN Kubernetes group to fix a bug in egress policy processing.
+
+However, even though this tool has made it easy to validate roughly 30 common scenarios,
+it doesn't validate *all* Network Policy scenarios - because there are an enormous number of possible
+permutations that one might create (technically, we might say this number is
+infinite given that there's an infinite number of possible namespace/pod/port/protocol variations one can create).
+
+Once these tests were in play, we worked with the Upstream SIG Network and SIG Testing communities
+(thanks to Antonio Ojea and Ben Elder) to put a testgrid Network Policy job in place.  This job
+continuously runs the entire suite of Network Policy tests against
+[GCE with Calico as a Network Policy provider](https://testgrid.k8s.io/sig-network-gce#presubmit-network-policies,%20google-gce).
+
+Part of our role as a subproject is to help make sure that, when these tests break, we can help triage them effectively.
+
+## Cyclonus: The next step towards Network Policy conformance {#cyclonus}
+
+Around the time that we were finishing the validation work, it became clear from the community that,
+in general, we needed to solve the overall problem of testing ALL possible Network Policy implementations.
+For example, a KEP was recently written which introduced the concept of micro versioning to
+Network Policies to accommodate [describing this at the API level](https://github.com/kubernetes/enhancements/pull/2137/files), by Dan Winship.
+
+In response to this increasingly obvious need to comprehensively evaluate Network
+Policy implementations from all vendors, Matt Fenwick decided to evolve our approach to Network Policy validation again by creating Cyclonus.
+
+Cyclonus is a comprehensive Network Policy fuzzing tool which verifies a CNI provider
+against hundreds of different Network Policy scenarios, by defining similar truth table/policy
+combinations as demonstrated in the end to end tests, while also providing a hierarchical
+representation of policy "categories".  We've found some interesting nuances and issues
+in almost every CNI we've tested so far, and have even contributed some fixes back.
+
+To perform a Cyclonus validation run, you create a Job manifest similar to:
+
+```yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: cyclonus
+spec:
+  template:
+    spec:
+      restartPolicy: Never
+      containers:
+        - command:
+            - ./cyclonus
+            - generate
+            - --perturbation-wait-seconds=15
+            - --server-protocol=tcp,udp
+          name: cyclonus
+          imagePullPolicy: IfNotPresent
+          image: mfenwick100/cyclonus:latest
+      serviceAccount: cyclonus
+```
+
+Cyclonus outputs a report of all the test cases it will run:
+```
+test cases to run by tag:
+- target: 6
+- peer-ipblock: 4
+- udp: 16
+- delete-pod: 1
+- conflict: 16
+- multi-port/protocol: 14
+- ingress: 51
+- all-pods: 14
+- egress: 51
+- all-namespaces: 10
+- sctp: 10
+- port: 56
+- miscellaneous: 22
+- direction: 100
+- multi-peer: 0
+- any-port-protocol: 2
+- set-namespace-labels: 1
+- upstream-e2e: 0
+- allow-all: 6
+- namespaces-by-label: 6
+- deny-all: 10
+- pathological: 6
+- action: 6
+- rule: 30
+- policy-namespace: 4
+- example: 0
+- tcp: 16
+- target-namespace: 3
+- named-port: 24
+- update-policy: 1
+- any-peer: 2
+- target-pod-selector: 3
+- IP-block-with-except: 2
+- pods-by-label: 6
+- numbered-port: 28
+- protocol: 42
+- peer-pods: 20
+- create-policy: 2
+- policy-stack: 0
+- any-port: 14
+- delete-namespace: 1
+- delete-policy: 1
+- create-pod: 1
+- IP-block-no-except: 2
+- create-namespace: 1
+- set-pod-labels: 1
+testing 112 cases
+```
+
+Note that Cyclonus tags its tests based on the type of policy being created, because
+the policies themselves are auto-generated, and thus have no meaningful names to be recognized by.
+
+For each test, Cyclonus outputs a truth table, which is again similar to that of the
+E2E tests, along with the policy being validated:
+
+```
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  creationTimestamp: null
+  name: base
+  namespace: x
+spec:
+  egress:
+  - ports:
+    - port: 81
+    to:
+    - namespaceSelector:
+        matchExpressions:
+        - key: ns
+          operator: In
+          values:
+          - "y"
+          - z
+      podSelector:
+        matchExpressions:
+        - key: pod
+          operator: In
+          values:
+          - a
+          - b
+  - ports:
+    - port: 53
+      protocol: UDP
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchExpressions:
+        - key: ns
+          operator: In
+          values:
+          - x
+          - "y"
+      podSelector:
+        matchExpressions:
+        - key: pod
+          operator: In
+          values:
+          - b
+          - c
+    ports:
+    - port: 80
+      protocol: TCP
+  podSelector:
+    matchLabels:
+      pod: a
+  policyTypes:
+  - Ingress
+  - Egress
+
+0 wrong, 0 ignored, 81 correct
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| TCP/80 | X/A | X/B | X/C | Y/A | Y/B | Y/C | Z/A | Z/B | Z/C |
+| TCP/81 |     |     |     |     |     |     |     |     |     |
+| UDP/80 |     |     |     |     |     |     |     |     |     |
+| UDP/81 |     |     |     |     |     |     |     |     |     |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| x/a    | X   | X   | X   | X   | X   | X   | X   | X   | X   |
+|        | X   | X   | X   | .   | .   | X   | .   | .   | X   |
+|        | X   | X   | X   | X   | X   | X   | X   | X   | X   |
+|        | X   | X   | X   | X   | X   | X   | X   | X   | X   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| x/b    | .   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| x/c    | .   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| y/a    | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| y/b    | .   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| y/c    | .   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| z/a    | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| z/b    | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+| z/c    | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
+|        | X   | .   | .   | .   | .   | .   | .   | .   | .   |
++--------+-----+-----+-----+-----+-----+-----+-----+-----+-----+
+```
+
+Both Cyclonus and the e2e tests use the same strategy to validate a Network Policy - probing pods over TCP or UDP, with
+SCTP support available as well for CNIs that support it (such as Calico).
+
+As examples of how we use Cyclonus to help make CNI implementations better from a Network Policy perspective, you can see the following issues:
+
+- [Antrea: NetworkPolicy: unable to allow ingress by CIDR](https://github.com/vmware-tanzu/antrea/issues/1764)
+- [Calico: default missing protocol to TCP; don't let single port overwrite all ports](https://github.com/projectcalico/libcalico-go/pull/1373)
+- [Cilium: Egress Network Policy allows traffic that should be denied](https://github.com/cilium/cilium/issues/14678)
+
+The good news is that Antrea and Calico have already merged fixes for all the issues found and other CNI providers are working on it,
+with the support of SIG Network and the Network Policy subproject.
+
+Are you interested in verifying NetworkPolicy functionality on your cluster?
+(if you care about security or offer multi-tenant SaaS, you should be)
+If so, you can run the upstream end to end tests, or Cyclonus, or both.
+- If you're just getting started with NetworkPolicies and want to simply
+  verify the "common" NetworkPolicy cases that most CNIs should be
+  implementing correctly, in a way that is quick to diagnose, then you're
+  better off running the e2e tests only.
+- If you are deeply curious about your CNI provider's NetworkPolicy
+  implementation, and want to verify it: use Cyclonus.
+- If you want to test *hundreds* of policies, and evaluate your CNI plugin
+  for comprehensive functionality, for deep discovery of potential security
+  holes: use Cyclonus, and also consider running end-to-end cluster tests.
+- If you're thinking of getting involved with the upstream NetworkPolicy efforts:
+  use Cyclonus, and read at least an outline of which e2e tests are relevant.
+
+## Where to start with NetworkPolicy testing?
+
+- Cyclonus is easy to run on your cluster, check out the [instructions on github](https://github.com/mattfenwick/cyclonus#run-as-a-kubernetes-job),
+  and determine whether *your* specific CNI configuration is fully conformant to the hundreds of different
+  Kubernetes Network Policy API constructs.
+- Alternatively, you can use a tool like [sonobuoy](https://github.com/vmware-tanzu/sonobuoy)
+  to run the existing E2E tests in Kubernetes, with the `--ginkgo.focus=NetworkPolicy` flag.
+  Make sure that you use the K8s conformance image for K8s 1.21 or above (for example, by using the `--kube-conformance-image-version v1.21.0` flag),
+  as older images will not have the *new* Network Policy tests in them.
+
+## Improvements to the NetworkPolicy API and user experience
+
+In addition to cleaning up the validation story for CNI plugins that implement NetworkPolicies,
+subproject contributors have also spent some time improving the Kubernetes NetworkPolicy API for a few commonly requested features.
+After months of deliberation, we eventually settled on a few core areas for improvement:
+
+- Port Range policies: We now allow you to specify a *range* of ports for a policy.
+  This allows users interested in scenarios like FTP or virtualization to enable advanced policies.
+  The port range option for network policies will be available to use in Kubernetes 1.21.
+  Read more in [targeting a range of ports](/docs/concepts/services-networking/network-policies/#targeting-a-range-of-ports).
+- Namespace as name policies: Allowing users in Kubernetes >= 1.21 to target namespaces using names,
+  when building Network Policy objects.  This was done in collaboration with Jordan Liggitt and Tim Hockin on the API Machinery side.
+  This change allowed us to improve the Network Policy user experience without actually
+  changing the API! For more details, you can read
+  [Automatic labelling](/docs/concepts/overview/working-with-objects/namespaces/#automatic-labelling) in the page about Namespaces.
+  The TL,DR; is that for Kubernetes 1.21 and later, **all namespaces** have the following label added by default:
+
+    ```
+    kubernetes.io/metadata.name: <name-of-namespace>
+    ```
+
+This means you can write a namespace policy against this namespace, even if you can't edit its labels.
+For example, this policy, will 'just work', without needing to run a command such as `kubectl edit namespace`.
+In fact, it will even work if you can't edit or view this namespace's data at all, because of the magic of API server defaulting.
+
+```yaml
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: test-network-policy
+  namespace: default
+spec:
+  podSelector:
+    matchLabels:
+      role: db
+  policyTypes:
+  - Ingress
+  # Allow inbound traffic to Pods labelled role=db, in the namespace 'default'
+  # provided that the source is a Pod in the namespace 'my-namespace'
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: my-namespace
+```
+
+## Results
+
+In our tests, we found that:
+
+- Antrea and Calico are at a point where they support all of cyclonus's scenarios, modulo a few very minor tweaks which we've made.
+- Cilium also conformed to the majority of the policies, outside known features that aren't fully supported (for example, related to the way Cilium deals with pod CIDR policies).
+
+If you are a CNI provider and interested in helping us to do a better job curating large tests of network policies, please reach out!  We are continuing to curate the Network Policy conformance results from Cyclonus [here](https://raw.githubusercontent.com/K8sbykeshed/cyclonus-artifacts/), but
+we are not capable of maintaining all of the subtleties in NetworkPolicy testing data on our own.  For now, we use github actions and Kind to test in CI.
+
+## The Future
+
+We're also working on some improvements for the future of Network Policies, including:
+
+- Fully qualified Domain policies: The Google Cloud team created a prototype (which
+  we are really excited about) of [FQDN policies](https://github.com/GoogleCloudPlatform/gke-fqdnnetworkpolicies-golang).
+  This tool uses the Network Policy API to enforce policies against L7 URLs, by finding
+  their IPs and blocking them proactively when requests are made.
+- Cluster Administrative policies: We're working hard at enabling *administrative* or
+  *cluster scoped* Network Policies for the future. These are being presented iteratively to the NetworkPolicy subproject.
+  You can read about them here in [Cluster Scoped Network Policy](https://docs.google.com/presentation/d/1Jk86jtS3TcGAugVSM_I4Yds5ukXFJ4F1ZCvxN5v2BaY/).
+
+The Network Policy subproject meets on mondays at 4PM EST. For details, check out the
+[SIG Network community repo](https://github.com/kubernetes/community/tree/master/sig-network).  We'd love
+to hang out with you, hack on stuff, and help you adopt K8s Network Policies for your cluster wherever possible.
+
+### A quick note on User Feedback
+
+We've gotten a lot of ideas and feedback from users on Network Policies.  A lot of people have interesting ideas about Network Policies,
+but we've found that as a subproject, very few people were deeply interested in implementing these ideas to the full extent.
+
+Almost every change to the NetworkPolicy API includes weeks or months of discussion to cover different cases, and ensure no CVEs are being introduced.  Thus, long term ownership
+is the biggest impediment in improving the NetworkPolicy user experience for us, over time.
+
+- We've documented a lot of the history of the Network Policy dialogue [here](https://github.com/jayunit100/network-policy-subproject/blob/master/history.md).
+- We've also taken a poll of users, for what they'd like to see in the Network Policy API [here](https://github.com/jayunit100/network-policy-subproject/blob/master/p0_user_stories.md).
+
+We encourage anyone to provide us with feedback, but our most pressing issues right now
+involve finding *long term owners to help us drive changes*.  
+
+This doesn't require a lot of technical knowledge, but rather, just a long term commitment to helping us stay organized, do paperwork,
+and iterate through the many stages of the K8s feature process.  If you want to help us and get involved, please reach out on the SIG Network mailing list, or in the SIG Network room in the k8s.io slack channel!
+
+Anyone can put an oar in the water and help make NetworkPolices better!

From 804181b0d879c9426378414d81c266dd9a719752 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Mon, 19 Apr 2021 18:54:32 +0800
Subject: [PATCH 578/788] [id] Update CronJob example yaml apiversion:
 batch/v1beta1 --> batch/v1

---
 content/id/examples/application/job/cronjob.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/id/examples/application/job/cronjob.yaml b/content/id/examples/application/job/cronjob.yaml
index 2ce31233c3..34ab2a3f06 100644
--- a/content/id/examples/application/job/cronjob.yaml
+++ b/content/id/examples/application/job/cronjob.yaml
@@ -1,4 +1,4 @@
-apiVersion: batch/v1beta1
+apiVersion: batch/v1
 kind: CronJob
 metadata:
   name: hello

From b924fdfba58502dafbc3a44f20ae10b58b8afd5d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Hanu=C5=A1?= <marekdiamo@gmail.com>
Date: Thu, 8 Apr 2021 22:19:24 +0200
Subject: [PATCH 579/788] Update broken link to Ansible inventory in
 kubespray.md

---
 content/en/docs/setup/production-environment/tools/kubespray.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubespray.md b/content/en/docs/setup/production-environment/tools/kubespray.md
index c4300b53a2..08893370cf 100644
--- a/content/en/docs/setup/production-environment/tools/kubespray.md
+++ b/content/en/docs/setup/production-environment/tools/kubespray.md
@@ -50,7 +50,7 @@ Kubespray provides the following utilities to help provision your environment:
 
 ### (2/5) Compose an inventory file
 
-After you provision your servers, create an [inventory file for Ansible](https://docs.ansible.com/ansible/intro_inventory.html). You can do this manually or via a dynamic inventory script. For more information, see "[Building your own inventory](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)".
+After you provision your servers, create an [inventory file for Ansible](https://docs.ansible.com/ansible/latest/network/getting_started/first_inventory.html). You can do this manually or via a dynamic inventory script. For more information, see "[Building your own inventory](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)".
 
 ### (3/5) Plan your cluster deployment
 

From 1aad050bab8d86b85c12cff9f754f5b1349be483 Mon Sep 17 00:00:00 2001
From: gyunnkim <m9kihoon1@gmail.com>
Date: Tue, 13 Apr 2021 00:06:01 +0900
Subject: [PATCH 580/788] Translate
 tasks/access-application-cluster/list-all-running-container-images in Korean

1st review reflected

some parts below prerequistes modified

2nd review reflected

'in a Cluster' part modified

gitignore file restored

final review reflected

Final review reflected and error modified

Jsonpath modified
---
 .../list-all-running-container-images.md      | 109 ++++++++++++++++++
 1 file changed, 109 insertions(+)
 create mode 100644 content/ko/docs/tasks/access-application-cluster/list-all-running-container-images.md

diff --git a/content/ko/docs/tasks/access-application-cluster/list-all-running-container-images.md b/content/ko/docs/tasks/access-application-cluster/list-all-running-container-images.md
new file mode 100644
index 0000000000..77f5f5d635
--- /dev/null
+++ b/content/ko/docs/tasks/access-application-cluster/list-all-running-container-images.md
@@ -0,0 +1,109 @@
+---
+title: 클러스터 내 모든 컨테이너 이미지 목록 보기
+content_type: task
+weight: 100
+---
+
+<!-- overview -->
+
+이 문서는 kubectl을 이용하여 클러스터 내 모든 컨테이너 이미지 목록을
+조회하는 방법에 관해 설명한다.
+
+## {{% heading "prerequisites" %}} 
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+<!-- steps -->
+
+이 작업에서는 kubectl을 사용하여 클러스터 내 모든 파드의 정보를
+조회하고, 결과값의 서식을 변경하여 각 파드에 대한 컨테이너 이미지 목록으로
+재구성할 것이다.
+
+## 모든 네임스페이스의 모든 컨테이너 이미지 가져오기
+
+- `kubectl get pods --all-namespaces` 를 사용하여 모든 네임스페이스의 모든 파드 정보를 가져온다.
+- 컨테이너 이미지 이름만 출력하기 위해 `-o jsonpath={..image}` 를 사용한다.
+  이 명령어는 결과값으로 받은 json을 반복적으로 파싱하여,
+  `image` 필드만을 출력한다.
+  - jsonpath를 사용하는 방법에 대해 더 많은 정보를 얻고 싶다면
+    [Jsonpath 지원](/ko/docs/reference/kubectl/jsonpath/)을 확인한다.
+- 다음의 표준 툴을 이용해서 결과값을 처리한다. `tr`, `sort`, `uniq`
+  - `tr` 을 사용하여 공백을 줄 바꾸기로 대체한다.
+  - `sort` 를 사용하여 결과값을 정렬한다.
+  - `uniq` 를 사용하여 이미지 개수를 합산한다.
+
+```shell
+kubectl get pods --all-namespaces -o jsonpath="{..image}" |\
+tr -s '[[:space:]]' '\n' |\
+sort |\
+uniq -c
+```
+
+이 커맨드는 결과값으로 나온 모든 아이템 중에 `image` 라고 명명된 필드를
+모두 출력한다.
+
+이와 다른 방법으로 파드 이미지 필드 값의 절대 경로를 사용할 수 있다.
+이것은 필드명이 반복될 때에도
+정확한 값을 출력하도록 보장한다.
+예) 결과값 중에 많은 필드들이 `name`으로 명명되었을 경우,
+
+```shell
+kubectl get pods --all-namespaces -o jsonpath="{.items[*].spec.containers[*].image}"
+```
+
+이 jsonpath는 다음과 같이 해석할 수 있다.
+
+- `.items[*]`: 각 결과값에 대하여
+- `.spec`: spec 값을 가져온다.
+- `.containers[*]`: 각 컨테이너에 대하여
+- `.image`: image 값을 가져온다.
+
+{{< note >}}
+명령어로 하나의 파드를 가져올 때, 예를 들어 `kubectl get pod nginx` 라면,
+jsonpath에서 `.items[*]` 부분은 생략해야 하는데, 이는 명령어가 아이템 목록이 아닌
+단 한 개의 아이템(여기선 파드)으로 결과값을 주기 때문이다.
+{{< /note >}}
+
+## 각 파드의 컨테이너 이미지 보기
+
+`range` 연산을 사용하여 명령어의 결과값에서 각각의 요소들을
+반복하여 출력할 수 있다.
+
+```shell
+kubectl get pods --all-namespaces -o=jsonpath='{range .items[*]}{"\n"}{.metadata.name}{":\t"}{range .spec.containers[*]}{.image}{", "}{end}{end}' |\
+sort
+```
+
+## 파드 레이블로 필터링된 컨테이너 이미지 목록 보기
+
+특정 레이블에 맞는 파드를 지정하기 위해서 -l 플래그를 사용한다. 아래의
+명령어 결과값은 `app=nginx` 레이블에 일치하는 파드만 출력한다.
+
+```shell
+kubectl get pods --all-namespaces -o=jsonpath="{..image}" -l app=nginx
+```
+
+## 파드 네임스페이스로 필터링된 컨테이너 이미지 목록 보기
+
+특정 네임스페이스의 파드를 지정하려면, 네임스페이스 플래그를 사용한다.
+아래의 명령어 결과값은 `kube-system` 네임스페이스에 있는 파드만 출력한다.
+
+```shell
+kubectl get pods --namespace kube-system -o jsonpath="{..image}"
+```
+
+## jsonpath 대신 Go 템플릿을 사용하여 컨테이너 이미지 목록 보기
+
+jsonpath의 대안으로 Kubectl은 [Go 템플릿](https://golang.org/pkg/text/template/)을 지원한다.
+다음과 같이 결과값의 서식을 지정할 수 있다.
+
+```shell
+kubectl get pods --all-namespaces -o go-template --template="{{range .items}}{{range .spec.containers}}{{.image}} {{end}}{{end}}"
+```
+
+## {{% heading "whatsnext" %}}
+
+### 참조
+
+* [Jsonpath](/ko/docs/reference/kubectl/jsonpath/) 참조
+* [Go 템플릿](https://golang.org/pkg/text/template/) 참조

From 21a27150317037cf45c72991010be6cee8a514be Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Sun, 18 Apr 2021 17:30:44 +0200
Subject: [PATCH 581/788] Add auto_gerated metadata

---
 api-ref-generator                                   |  2 +-
 .../authentication-resources/_index.md              | 13 +++++++++++++
 .../certificate-signing-request-v1.md               | 12 ++++++++++++
 .../authentication-resources/service-account-v1.md  | 12 ++++++++++++
 .../authentication-resources/token-request-v1.md    | 12 ++++++++++++
 .../authentication-resources/token-review-v1.md     | 12 ++++++++++++
 .../authorization-resources/_index.md               | 13 +++++++++++++
 .../cluster-role-binding-v1.md                      | 12 ++++++++++++
 .../authorization-resources/cluster-role-v1.md      | 12 ++++++++++++
 .../local-subject-access-review-v1.md               | 12 ++++++++++++
 .../authorization-resources/role-binding-v1.md      | 12 ++++++++++++
 .../authorization-resources/role-v1.md              | 12 ++++++++++++
 .../self-subject-access-review-v1.md                | 12 ++++++++++++
 .../self-subject-rules-review-v1.md                 | 12 ++++++++++++
 .../subject-access-review-v1.md                     | 12 ++++++++++++
 .../kubernetes-api/cluster-resources/_index.md      | 13 +++++++++++++
 .../cluster-resources/api-service-v1.md             | 12 ++++++++++++
 .../kubernetes-api/cluster-resources/binding-v1.md  | 12 ++++++++++++
 .../cluster-resources/component-status-v1.md        | 12 ++++++++++++
 .../kubernetes-api/cluster-resources/event-v1.md    | 12 ++++++++++++
 .../cluster-resources/flow-schema-v1beta1.md        | 12 ++++++++++++
 .../kubernetes-api/cluster-resources/lease-v1.md    | 12 ++++++++++++
 .../cluster-resources/namespace-v1.md               | 12 ++++++++++++
 .../kubernetes-api/cluster-resources/node-v1.md     | 12 ++++++++++++
 .../priority-level-configuration-v1beta1.md         | 12 ++++++++++++
 .../cluster-resources/runtime-class-v1.md           | 12 ++++++++++++
 .../kubernetes-api/common-definitions/_index.md     | 13 +++++++++++++
 .../common-definitions/delete-options.md            | 12 ++++++++++++
 .../common-definitions/label-selector.md            | 12 ++++++++++++
 .../kubernetes-api/common-definitions/list-meta.md  | 12 ++++++++++++
 .../common-definitions/local-object-reference.md    | 12 ++++++++++++
 .../common-definitions/node-selector-requirement.md | 12 ++++++++++++
 .../common-definitions/object-field-selector.md     | 12 ++++++++++++
 .../common-definitions/object-meta.md               | 12 ++++++++++++
 .../common-definitions/object-reference.md          | 12 ++++++++++++
 .../kubernetes-api/common-definitions/patch.md      | 12 ++++++++++++
 .../kubernetes-api/common-definitions/quantity.md   | 12 ++++++++++++
 .../common-definitions/resource-field-selector.md   | 12 ++++++++++++
 .../kubernetes-api/common-definitions/status.md     | 12 ++++++++++++
 .../typed-local-object-reference.md                 | 12 ++++++++++++
 .../common-parameters/common-parameters.md          | 12 ++++++++++++
 .../config-and-storage-resources/_index.md          | 13 +++++++++++++
 .../config-and-storage-resources/config-map-v1.md   | 12 ++++++++++++
 .../config-and-storage-resources/csi-driver-v1.md   | 12 ++++++++++++
 .../config-and-storage-resources/csi-node-v1.md     | 12 ++++++++++++
 .../csi-storage-capacity-v1beta1.md                 | 12 ++++++++++++
 .../persistent-volume-claim-v1.md                   | 12 ++++++++++++
 .../persistent-volume-v1.md                         | 12 ++++++++++++
 .../config-and-storage-resources/secret-v1.md       | 12 ++++++++++++
 .../storage-class-v1.md                             | 12 ++++++++++++
 .../volume-attachment-v1.md                         | 12 ++++++++++++
 .../config-and-storage-resources/volume.md          | 12 ++++++++++++
 .../kubernetes-api/extend-resources/_index.md       | 13 +++++++++++++
 .../custom-resource-definition-v1.md                | 12 ++++++++++++
 .../mutating-webhook-configuration-v1.md            | 12 ++++++++++++
 .../validating-webhook-configuration-v1.md          | 12 ++++++++++++
 .../kubernetes-api/policy-resources/_index.md       | 13 +++++++++++++
 .../policy-resources/limit-range-v1.md              | 12 ++++++++++++
 .../policy-resources/network-policy-v1.md           | 12 ++++++++++++
 .../policy-resources/pod-disruption-budget-v1.md    | 12 ++++++++++++
 .../policy-resources/pod-security-policy-v1beta1.md | 12 ++++++++++++
 .../policy-resources/resource-quota-v1.md           | 12 ++++++++++++
 .../kubernetes-api/service-resources/_index.md      | 13 +++++++++++++
 .../service-resources/endpoint-slice-v1.md          | 12 ++++++++++++
 .../service-resources/endpoints-v1.md               | 12 ++++++++++++
 .../service-resources/ingress-class-v1.md           | 12 ++++++++++++
 .../kubernetes-api/service-resources/ingress-v1.md  | 12 ++++++++++++
 .../kubernetes-api/service-resources/service-v1.md  | 12 ++++++++++++
 .../kubernetes-api/workload-resources/_index.md     | 13 +++++++++++++
 .../workload-resources/controller-revision-v1.md    | 12 ++++++++++++
 .../workload-resources/cron-job-v1.md               | 12 ++++++++++++
 .../workload-resources/daemon-set-v1.md             | 12 ++++++++++++
 .../workload-resources/deployment-v1.md             | 12 ++++++++++++
 .../workload-resources/ephemeral-containers-v1.md   | 12 ++++++++++++
 .../horizontal-pod-autoscaler-v1.md                 | 12 ++++++++++++
 .../horizontal-pod-autoscaler-v2beta2.md            | 12 ++++++++++++
 .../kubernetes-api/workload-resources/job-v1.md     | 12 ++++++++++++
 .../workload-resources/pod-template-v1.md           | 12 ++++++++++++
 .../kubernetes-api/workload-resources/pod-v1.md     | 12 ++++++++++++
 .../workload-resources/priority-class-v1.md         | 12 ++++++++++++
 .../workload-resources/replica-set-v1.md            | 12 ++++++++++++
 .../workload-resources/replication-controller-v1.md | 12 ++++++++++++
 .../workload-resources/stateful-set-v1.md           | 12 ++++++++++++
 83 files changed, 994 insertions(+), 1 deletion(-)

diff --git a/api-ref-generator b/api-ref-generator
index 23513afe9c..78e64febda 160000
--- a/api-ref-generator
+++ b/api-ref-generator
@@ -1 +1 @@
-Subproject commit 23513afe9cf79710a2b19c5c40e38b8e2e5cd46c
+Subproject commit 78e64febda1b53cafc79979c5978b42162cea276
diff --git a/content/en/docs/reference/kubernetes-api/authentication-resources/_index.md b/content/en/docs/reference/kubernetes-api/authentication-resources/_index.md
index cca65e5302..fac624bf4b 100644
--- a/content/en/docs/reference/kubernetes-api/authentication-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/authentication-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Authentication Resources"
 weight: 4
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md b/content/en/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md
index c6a0d34757..5cf56dd6e6 100644
--- a/content/en/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "CertificateSigningRequest objects provide a mechanism to obtain x509 certificates by submitting a certificate signing request, and having it asynchronously approved and issued."
 title: "CertificateSigningRequest"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: certificates.k8s.io/v1`
 
 `import "k8s.io/api/certificates/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authentication-resources/service-account-v1.md b/content/en/docs/reference/kubernetes-api/authentication-resources/service-account-v1.md
index 8e202ad28d..a83d44bbf9 100644
--- a/content/en/docs/reference/kubernetes-api/authentication-resources/service-account-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authentication-resources/service-account-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ServiceAccount binds together: * a name, understood by users, and perhaps by peripheral systems, for an identity * a principal that can be authenticated and authorized * a set of secrets."
 title: "ServiceAccount"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authentication-resources/token-request-v1.md b/content/en/docs/reference/kubernetes-api/authentication-resources/token-request-v1.md
index c0ddd62af3..b9ee5ab858 100644
--- a/content/en/docs/reference/kubernetes-api/authentication-resources/token-request-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authentication-resources/token-request-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "TokenRequest requests a token for a given service account."
 title: "TokenRequest"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: authentication.k8s.io/v1`
 
 `import "k8s.io/api/authentication/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authentication-resources/token-review-v1.md b/content/en/docs/reference/kubernetes-api/authentication-resources/token-review-v1.md
index 06e0ffd5cd..df71bf4e1a 100644
--- a/content/en/docs/reference/kubernetes-api/authentication-resources/token-review-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authentication-resources/token-review-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "TokenReview attempts to authenticate a token to a known user."
 title: "TokenReview"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: authentication.k8s.io/v1`
 
 `import "k8s.io/api/authentication/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/_index.md b/content/en/docs/reference/kubernetes-api/authorization-resources/_index.md
index e5390914a1..5b58698bd8 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Authorization Resources"
 weight: 5
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1.md
index d7dfea2179..ad6a0ff732 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ClusterRoleBinding references a ClusterRole, but not contain it."
 title: "ClusterRoleBinding"
 weight: 6
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: rbac.authorization.k8s.io/v1`
 
 `import "k8s.io/api/rbac/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1.md
index 34bb8099ef..cc58c7804e 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding."
 title: "ClusterRole"
 weight: 5
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: rbac.authorization.k8s.io/v1`
 
 `import "k8s.io/api/rbac/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1.md
index 144dfe257b..a163bfa743 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace."
 title: "LocalSubjectAccessReview"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: authorization.k8s.io/v1`
 
 `import "k8s.io/api/authorization/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/role-binding-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/role-binding-v1.md
index 36b5ebc4d6..bb847f3370 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/role-binding-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/role-binding-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "RoleBinding references a role, but does not contain it."
 title: "RoleBinding"
 weight: 8
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: rbac.authorization.k8s.io/v1`
 
 `import "k8s.io/api/rbac/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/role-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/role-v1.md
index f87d305247..6c1f8b1fde 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/role-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/role-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding."
 title: "Role"
 weight: 7
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: rbac.authorization.k8s.io/v1`
 
 `import "k8s.io/api/rbac/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1.md
index aacafd39b1..430a4a953b 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "SelfSubjectAccessReview checks whether or the current user can perform an action."
 title: "SelfSubjectAccessReview"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: authorization.k8s.io/v1`
 
 `import "k8s.io/api/authorization/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
index a890598ddf..82ab54ec4f 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-rules-review-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace."
 title: "SelfSubjectRulesReview"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: authorization.k8s.io/v1`
 
 `import "k8s.io/api/authorization/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1.md b/content/en/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1.md
index 5385b125e1..5c8d23ea4d 100644
--- a/content/en/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1.md
+++ b/content/en/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "SubjectAccessReview checks whether or not a user or group can perform an action."
 title: "SubjectAccessReview"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: authorization.k8s.io/v1`
 
 `import "k8s.io/api/authorization/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/_index.md b/content/en/docs/reference/kubernetes-api/cluster-resources/_index.md
index 40d8cdc68d..c0fbcc0813 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Cluster Resources"
 weight: 8
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/api-service-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/api-service-v1.md
index 19ed5e0eb0..45f3629c39 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/api-service-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/api-service-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "APIService represents a server for a particular GroupVersion."
 title: "APIService"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: apiregistration.k8s.io/v1`
 
 `import "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/binding-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/binding-v1.md
index a007116367..4acdf07c98 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/binding-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/binding-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Binding ties one object to another; for example, a pod is bound to a node by a scheduler."
 title: "Binding"
 weight: 9
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/component-status-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/component-status-v1.md
index 3b52667550..0542fedfbd 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/component-status-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/component-status-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ComponentStatus (and ComponentStatusList) holds the cluster validation info."
 title: "ComponentStatus"
 weight: 10
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
index cf321c1f44..d01f3ee709 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/event-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Event is a report of an event somewhere in the cluster."
 title: "Event"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: events.k8s.io/v1`
 
 `import "k8s.io/api/events/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
index 0c221dea87..8329c6016b 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/flow-schema-v1beta1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "FlowSchema defines the schema of a group of flows."
 title: "FlowSchema v1beta1"
 weight: 7
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: flowcontrol.apiserver.k8s.io/v1beta1`
 
 `import "k8s.io/api/flowcontrol/v1beta1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/lease-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/lease-v1.md
index 478bc2a8e7..8f74401a59 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/lease-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/lease-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Lease defines a lease concept."
 title: "Lease"
 weight: 5
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: coordination.k8s.io/v1`
 
 `import "k8s.io/api/coordination/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md
index caa39a5856..a05f7f4f26 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/namespace-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Namespace provides a scope for Names."
 title: "Namespace"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
index d48dc829ab..23764d9033 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Node is a worker node in Kubernetes."
 title: "Node"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
index 073da2a28a..e7bd624556 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/priority-level-configuration-v1beta1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "PriorityLevelConfiguration represents the configuration of a priority level."
 title: "PriorityLevelConfiguration v1beta1"
 weight: 8
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: flowcontrol.apiserver.k8s.io/v1beta1`
 
 `import "k8s.io/api/flowcontrol/v1beta1"`
diff --git a/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md b/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
index 8b08e83dd3..b505277ccc 100644
--- a/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "RuntimeClass defines a class of container runtime supported in the cluster."
 title: "RuntimeClass"
 weight: 6
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: node.k8s.io/v1`
 
 `import "k8s.io/api/node/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/_index.md b/content/en/docs/reference/kubernetes-api/common-definitions/_index.md
index 580fa96ff2..00b036aa6e 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/_index.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Common Definitions"
 weight: 9
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/delete-options.md b/content/en/docs/reference/kubernetes-api/common-definitions/delete-options.md
index 09fd2ce3d1..4131bcb1dd 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/delete-options.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/delete-options.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "DeleteOptions may be provided when deleting an API object."
 title: "DeleteOptions"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/apimachinery/pkg/apis/meta/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
index 58d94dd5b8..d81c26d17a 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/label-selector.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "A label selector is a label query over a set of resources."
 title: "LabelSelector"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/apimachinery/pkg/apis/meta/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md b/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
index af9749a02c..96f2dafd30 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/list-meta.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ListMeta describes metadata that synthetic resources must have, including lists and various status objects."
 title: "ListMeta"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/apimachinery/pkg/apis/meta/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
index 83d4d046b1..ce56803bac 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/local-object-reference.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace."
 title: "LocalObjectReference"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md b/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
index ad5c95bf4c..33af2e88e3 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/node-selector-requirement.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values."
 title: "NodeSelectorRequirement"
 weight: 5
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
index ba4cf37ef0..9d1fc9e9c8 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-field-selector.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ObjectFieldSelector selects an APIVersioned field of an object."
 title: "ObjectFieldSelector"
 weight: 6
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
index 46361d861b..81d66b38c7 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-meta.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create."
 title: "ObjectMeta"
 weight: 7
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/apimachinery/pkg/apis/meta/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
index b1ae24f612..fa999b11f4 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/object-reference.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ObjectReference contains enough information to let you inspect or modify the referred object."
 title: "ObjectReference"
 weight: 8
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/patch.md b/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
index eaf37c8d15..a32a88b309 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/patch.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Patch is provided to give a concrete name and type to the Kubernetes PATCH request body."
 title: "Patch"
 weight: 9
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/apimachinery/pkg/apis/meta/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md b/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
index f0386bb66f..45f909c5e7 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/quantity.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Quantity is a fixed-point representation of a number."
 title: "Quantity"
 weight: 10
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/apimachinery/pkg/api/resource"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md b/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
index 3d3b8d68a3..76576bdb5d 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/resource-field-selector.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ResourceFieldSelector represents container resources (cpu, memory) and their output format."
 title: "ResourceFieldSelector"
 weight: 11
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/status.md b/content/en/docs/reference/kubernetes-api/common-definitions/status.md
index a134ed1407..d40a22d6da 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/status.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/status.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Status is a return value for calls that don't return other objects."
 title: "Status"
 weight: 12
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/apimachinery/pkg/apis/meta/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md b/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
index 2ec9fd5176..a6d75abf25 100644
--- a/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
+++ b/content/en/docs/reference/kubernetes-api/common-definitions/typed-local-object-reference.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "TypedLocalObjectReference contains enough information to let you locate the typed referenced object inside the same namespace."
 title: "TypedLocalObjectReference"
 weight: 13
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/common-parameters/common-parameters.md b/content/en/docs/reference/kubernetes-api/common-parameters/common-parameters.md
index 12792cbd08..deb8164881 100644
--- a/content/en/docs/reference/kubernetes-api/common-parameters/common-parameters.md
+++ b/content/en/docs/reference/kubernetes-api/common-parameters/common-parameters.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: ""
 title: "Common Parameters"
 weight: 10
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/_index.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/_index.md
index 4f29e8ec4f..aac30882a9 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Config and Storage Resources"
 weight: 3
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
index 7d7dac6bf0..be3ef5c8e4 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/config-map-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ConfigMap holds configuration data for pods to consume."
 title: "ConfigMap"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
index ddcef415e8..22fcf194ee 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "CSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster."
 title: "CSIDriver"
 weight: 8
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: storage.k8s.io/v1`
 
 `import "k8s.io/api/storage/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
index d918d4568f..343ab01135 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-node-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "CSINode holds information about all CSI drivers installed on a node."
 title: "CSINode"
 weight: 9
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: storage.k8s.io/v1`
 
 `import "k8s.io/api/storage/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
index 1b619a0ef2..cc915b8b15 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-storage-capacity-v1beta1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "CSIStorageCapacity stores the result of one CSI GetCapacity call."
 title: "CSIStorageCapacity v1beta1"
 weight: 10
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: storage.k8s.io/v1beta1`
 
 `import "k8s.io/api/storage/v1beta1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
index b05083deb4..f73ded9ff5 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "PersistentVolumeClaim is a user's request for and claim to a persistent volume."
 title: "PersistentVolumeClaim"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
index e02238f3ad..c5c68b19d7 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "PersistentVolume (PV) is a storage resource provisioned by an administrator."
 title: "PersistentVolume"
 weight: 5
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
index 8dd7eb4a48..5e75c90b79 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/secret-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Secret holds secret data of a certain type."
 title: "Secret"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
index 24d9636d49..c00f36797d 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/storage-class-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "StorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned."
 title: "StorageClass"
 weight: 6
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: storage.k8s.io/v1`
 
 `import "k8s.io/api/storage/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
index 8e83398b69..b9bc3ee831 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node."
 title: "VolumeAttachment"
 weight: 7
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: storage.k8s.io/v1`
 
 `import "k8s.io/api/storage/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
index ff72bda7f0..60badecc43 100644
--- a/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
+++ b/content/en/docs/reference/kubernetes-api/config-and-storage-resources/volume.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Volume represents a named volume in a pod that may be accessed by any container in the pod."
 title: "Volume"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/_index.md b/content/en/docs/reference/kubernetes-api/extend-resources/_index.md
index ce6d3d3e39..1886f6e26c 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Extend Resources"
 weight: 7
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
index 5597325fac..ce88ef945d 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/custom-resource-definition-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "CustomResourceDefinition represents a resource that should be exposed on the API server."
 title: "CustomResourceDefinition"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: apiextensions.k8s.io/v1`
 
 `import "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
index 59f3b7c457..e335c9fc2e 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/mutating-webhook-configuration-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object."
 title: "MutatingWebhookConfiguration"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: admissionregistration.k8s.io/v1`
 
 `import "k8s.io/api/admissionregistration/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md b/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
index 41bf5b2905..a985763cb3 100644
--- a/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
+++ b/content/en/docs/reference/kubernetes-api/extend-resources/validating-webhook-configuration-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it."
 title: "ValidatingWebhookConfiguration"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: admissionregistration.k8s.io/v1`
 
 `import "k8s.io/api/admissionregistration/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/_index.md b/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
index 06a9e27fee..2b614bb534 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Policy Resources"
 weight: 6
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
index d1f45d5557..5d84379b6e 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/limit-range-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "LimitRange sets resource usage limits for each kind of resource in a Namespace."
 title: "LimitRange"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
index 2288204257..6643b81bee 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/network-policy-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "NetworkPolicy describes what network traffic is allowed for a set of Pods."
 title: "NetworkPolicy"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: networking.k8s.io/v1`
 
 `import "k8s.io/api/networking/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
index 841f1bb82a..3b21024aeb 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/pod-disruption-budget-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods."
 title: "PodDisruptionBudget"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: policy/v1`
 
 `import "k8s.io/api/policy/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md b/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
index a499f1dc6d..b6050390e6 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/pod-security-policy-v1beta1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container."
 title: "PodSecurityPolicy v1beta1"
 weight: 5
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: policy/v1beta1`
 
 `import "k8s.io/api/policy/v1beta1"`
diff --git a/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md b/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
index 00818ec921..2f66235c0f 100644
--- a/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
+++ b/content/en/docs/reference/kubernetes-api/policy-resources/resource-quota-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ResourceQuota sets aggregate quota restrictions enforced per namespace."
 title: "ResourceQuota"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/_index.md b/content/en/docs/reference/kubernetes-api/service-resources/_index.md
index 0ab511b5a4..4f2d9118d9 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Service Resources"
 weight: 2
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
index d296130937..a405d50660 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/endpoint-slice-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "EndpointSlice represents a subset of the endpoints that implement a service."
 title: "EndpointSlice"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: discovery.k8s.io/v1`
 
 `import "k8s.io/api/discovery/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
index 223f9d2d54..acc7d938f9 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/endpoints-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Endpoints is a collection of endpoints that implement the actual service."
 title: "Endpoints"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
index a6dd55e7c7..c549ac2f83 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/ingress-class-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "IngressClass represents the class of the Ingress, referenced by the Ingress Spec."
 title: "IngressClass"
 weight: 5
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: networking.k8s.io/v1`
 
 `import "k8s.io/api/networking/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
index 6f8ebf1aad..00fe1bb617 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/ingress-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend."
 title: "Ingress"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: networking.k8s.io/v1`
 
 `import "k8s.io/api/networking/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
index ab17bf3f0e..8d643c688a 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Service is a named abstraction of software service (for example, mysql) consisting of local port (for example 3306) that the proxy listens on, and the selector that determines which pods will answer requests sent through the proxy."
 title: "Service"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/_index.md b/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
index 85d1bfa44f..7c4e44d99a 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/_index.md
@@ -1,4 +1,17 @@
 ---
 title: "Workload Resources"
 weight: 1
+auto_generated: true
 ---
+
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
index d13ae1b404..23b324fb6e 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/controller-revision-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ControllerRevision implements an immutable snapshot of state data."
 title: "ControllerRevision"
 weight: 8
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: apps/v1`
 
 `import "k8s.io/api/apps/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
index f6196ef14d..a518d1f72a 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/cron-job-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "CronJob represents the configuration of a single cron job."
 title: "CronJob"
 weight: 11
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: batch/v1`
 
 `import "k8s.io/api/batch/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
index a40aa4c592..2a313f533f 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/daemon-set-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "DaemonSet represents the configuration of a daemon set."
 title: "DaemonSet"
 weight: 9
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: apps/v1`
 
 `import "k8s.io/api/apps/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
index b455760a4c..f304fd9239 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/deployment-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Deployment enables declarative updates for Pods and ReplicaSets."
 title: "Deployment"
 weight: 6
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: apps/v1`
 
 `import "k8s.io/api/apps/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
index 05957e573a..960fc9c8c4 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/ephemeral-containers-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "A list of ephemeral containers used with the Pod ephemeralcontainers subresource."
 title: "EphemeralContainers"
 weight: 2
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
index 42d61cb3b2..a62d79e4f7 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "configuration of a horizontal pod autoscaler."
 title: "HorizontalPodAutoscaler"
 weight: 12
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: autoscaling/v1`
 
 `import "k8s.io/api/autoscaling/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
index 0ed4942e1b..9d326e2131 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2beta2.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified."
 title: "HorizontalPodAutoscaler v2beta2"
 weight: 13
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: autoscaling/v2beta2`
 
 `import "k8s.io/api/autoscaling/v2beta2"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
index da8c6422e1..4848a36d4d 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/job-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Job represents the configuration of a single job."
 title: "Job"
 weight: 10
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: batch/v1`
 
 `import "k8s.io/api/batch/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
index 5cbe3e4894..9a0bbecab1 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/pod-template-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "PodTemplate describes a template for creating copies of a predefined pod."
 title: "PodTemplate"
 weight: 3
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
index 6553afa238..d16d9b0a85 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/pod-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "Pod is a collection of containers that can run on a host."
 title: "Pod"
 weight: 1
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
index df6c08603f..020c25c05a 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/priority-class-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "PriorityClass defines mapping from a priority class name to the priority integer value."
 title: "PriorityClass"
 weight: 14
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: scheduling.k8s.io/v1`
 
 `import "k8s.io/api/scheduling/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
index 223832c382..7a344128c8 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/replica-set-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ReplicaSet ensures that a specified number of pod replicas are running at any given time."
 title: "ReplicaSet"
 weight: 5
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: apps/v1`
 
 `import "k8s.io/api/apps/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
index 29bac77169..c14db8ece9 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/replication-controller-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "ReplicationController represents the configuration of a replication controller."
 title: "ReplicationController"
 weight: 4
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: v1`
 
 `import "k8s.io/api/core/v1"`
diff --git a/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md b/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
index 7e69ec17bb..ec097d7cce 100644
--- a/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
+++ b/content/en/docs/reference/kubernetes-api/workload-resources/stateful-set-v1.md
@@ -7,8 +7,20 @@ content_type: "api_reference"
 description: "StatefulSet represents a set of pods with consistent identities."
 title: "StatefulSet"
 weight: 7
+auto_generated: true
 ---
 
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference content, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
 `apiVersion: apps/v1`
 
 `import "k8s.io/api/apps/v1"`

From 371c74a6aef52484ca9a6a8cc1d5083ddbdcbf16 Mon Sep 17 00:00:00 2001
From: Han Kang <hankang@google.com>
Date: Mon, 19 Apr 2021 08:54:37 -0700
Subject: [PATCH 582/788] metrics stability to GA blog post (#27359)

* add metrics stability blog post

* Update content/en/blog/_posts/2021-03-30-metrics-stability-hits-ga.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/2021-03-30-metrics-stability-hits-ga.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* add diagram for metric lifecycle

* add link to stable metrics list

* Update content/en/blog/_posts/2021-03-30-metrics-stability-ga/2021-03-30-metrics-stability-hits-ga.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Update content/en/blog/_posts/2021-03-30-metrics-stability-ga/2021-03-30-metrics-stability-hits-ga.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* fix dates on blog

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Bob Killen <killen.bob@gmail.com>
---
 .../2021-04-23-metrics-stability-hits-ga.md   |  80 ++++++++++++++++++
 .../lifecycle-metric.png                      | Bin 0 -> 39548 bytes
 2 files changed, 80 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-23-metrics-stability-ga/2021-04-23-metrics-stability-hits-ga.md
 create mode 100644 content/en/blog/_posts/2021-04-23-metrics-stability-ga/lifecycle-metric.png

diff --git a/content/en/blog/_posts/2021-04-23-metrics-stability-ga/2021-04-23-metrics-stability-hits-ga.md b/content/en/blog/_posts/2021-04-23-metrics-stability-ga/2021-04-23-metrics-stability-hits-ga.md
new file mode 100644
index 0000000000..686016e3c5
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-23-metrics-stability-ga/2021-04-23-metrics-stability-hits-ga.md
@@ -0,0 +1,80 @@
+---
+layout: blog
+title: 'Kubernetes 1.21: Metrics Stability hits GA'
+date: 2021-04-23
+slug: kubernetes-release-1.21-metrics-stability-ga
+---
+
+**Authors**: Han Kang (Google), Elana Hashman (Red Hat)
+
+Kubernetes 1.21 marks the graduation of the metrics stability framework and along with it, the first officially supported stable metrics. Not only do stable metrics come with supportability guarantees, the metrics stability framework brings escape hatches that you can use if you encounter problematic metrics.
+
+See the list of [stable Kubernetes metrics here](https://github.com/kubernetes/kubernetes/blob/master/test/instrumentation/testdata/stable-metrics-list.yaml)
+
+### What are stable metrics and why do we need them?
+A stable metric is one which, from a consumption point of view, can be reliably consumed across a number of Kubernetes versions without risk of ingestion failure.
+
+Metrics stability is an ongoing community concern. Cluster monitoring infrastructure often assumes the stability of some control plane metrics, so we have introduced a mechanism for versioning metrics as a proper API, with stability guarantees around a formal metrics deprecation process.
+
+### What are the stability levels for metrics?
+
+Metrics can currently have one of two stability levels: alpha or stable.
+
+_Alpha metrics_ have no stability guarantees; as such they can be modified or deleted at any time. At this time, all Kubernetes metrics implicitly fall into this category.
+
+_Stable metrics_ can be guaranteed to not change, except that the metric may become marked deprecated for a future Kubernetes version. By not change, we mean three things:
+
+1. the metric itself will not be deleted or renamed
+2. the type of metric will not be modified
+3. no labels can be added or removed from this metric
+
+From an ingestion point of view, it is backwards-compatible to add or remove possible values for labels which already do exist, but not labels themselves. Therefore, adding or removing values from an existing label is permitted. Stable metrics can also be marked as deprecated for a future Kubernetes version, since this is tracked in a metadata field and does not actually change the metric itself.
+
+Removing or adding labels from stable metrics is not permitted. In order to add or remove a label from an existing stable metric, one would have to introduce a new metric and deprecate the stable one; otherwise this would violate compatibility agreements.
+
+
+#### How are metrics deprecated?
+
+While deprecation policies only affect stability guarantees for stable metrics (and not alpha ones), deprecation information may be optionally provided on alpha metrics to help component owners inform users of future intent and assist with transition plans.
+
+A stable metric undergoing the deprecation process signals that the metric will eventually be deleted. The metrics deprecation lifecycle looks roughly like this (with each stage representing a Kubernetes release):
+
+![Stable metric → Deprecated metric → Hidden metric → Deletion](lifecycle-metric.png)
+
+_Deprecated metrics_ have the same stability guarantees of their stable counterparts. If a stable metric is deprecated, then a deprecated stable metric is guaranteed to not change. When deprecating a stable metric, a future Kubernetes release is specified as the point from which the metric will be considered deprecated.
+
+Deprecated metrics will have their description text prefixed with a deprecation notice string “(Deprecated from x.y)” and a warning log will be emitted during metric registration, in the spirit of the official Kubernetes deprecation policy.
+
+Like their stable metric counterparts, deprecated metrics will be automatically registered to the metrics endpoint. On a subsequent release (when the metric's deprecatedVersion is equal to _current\_kubernetes\_version - 4_)), a deprecated metric will become a _hidden_ metric. _Hidden metrics_ are not automatically registered, and hence are hidden by default from end users. These hidden metrics can be explicitly re-enabled for one release after they reach the hidden state, to provide a migration path for cluster operators.
+
+
+#### As an owner of a Kubernetes component, how do I add stable metrics?
+
+During metric instantiation, stability can be specified by setting the metadata field, StabilityLevel, to “Stable”. When a StabilityLevel is not explicitly set, metrics default to “Alpha” stability. Note that metrics which have fields determined at runtime cannot be marked as Stable. Stable metrics will be detected during static analysis during the pre-commit phase, and must be reviewed by sig-instrumentation.
+
+```golang
+var metricDefinition = kubemetrics.CounterOpts{
+    Name: "some_metric",
+    Help: "some description",
+    StabilityLevel: kubemetrics.STABLE,
+}
+```
+For more examples of setting metrics stability and deprecation, see the [Metrics Stability KEP](http://bit.ly/metrics-stability).
+
+
+### How do I get involved?
+
+This project, like all of Kubernetes, is the result of hard work by many contributors from diverse backgrounds working together.
+We offer a huge thank you to all the contributors in Kubernetes community who helped review the design and implementation of the project, including but not limited to the following:
+
+- Han Kang (logicalhan)
+- Frederic Branczyk (brancz)
+- Marek Siarkowicz (serathius)
+- Elana Hashman (ehashman)
+- Solly Ross (DirectXMan12)
+- Stefan Schimanski (sttts)
+- David Ashpole (dashpole)
+- Yuchen Zhou (yoyinzyc)
+- Yu Yi (erain)
+
+If you’re interested in getting involved with the design and development of instrumentation or any part of the Kubernetes metrics system, join the [Kubernetes Instrumentation Special Interest Group (SIG)](https://github.com/kubernetes/community/tree/master/sig-instrumentation). We’re rapidly growing and always welcome new contributors.
diff --git a/content/en/blog/_posts/2021-04-23-metrics-stability-ga/lifecycle-metric.png b/content/en/blog/_posts/2021-04-23-metrics-stability-ga/lifecycle-metric.png
new file mode 100644
index 0000000000000000000000000000000000000000..7618a98c5c7c67cec224fcdc83b05054cd7a7d52
GIT binary patch
literal 39548
zcmZ^KV{m58)^=<s6Z4KUv2EM7jXSn&Cli|!+nU(6GqE-CH_tieMZHyDSM~0z*S^+T
zjUU~6_v%PRc?m=~TsROA5JV|SQDqPiFo?fc90uy|vk@_7^=|>{tSli6QZtQz`nQr`
zrYU7ECkI0F7sG%+fkJ_R|3d)*`};uq4+i~<aX}#eB?kdf2gUnutPe`{Km2ejkbivr
zWrLXi&Hp6Hzxki~zf16Z(EqWR5B6VdFo=Bc|H2^R|EOur$;baKU>zm3oIya~(f`Sy
zAV0FP|8@u7N>$TEQ%;uK#KDf<$kf5ujNZe}@gFS^UJvfS(9X=oh}gr<*4~-hgAed8
z2KQh5kC*{K{4a`&4Ie;LPLWu|0cb|dPR~fs2;he!CMM<unwoPfi;Dk8{cnvAVCmxG
z$j!ju?(R<S&O+}1v|wQ3;^JapWM*Jyru)mFbM~}%G4i0ZcP9O}k^izIYUXSLv~qN@
za<C`<$F7mFgR2W40Pv5a|4#pIr;C;O|9G-@{!h35c97wpHw;Ylj12#6`>!hRKT>XG
zGiL`|*MH2b*;~2rGxPq7{C~y&<L%#C3P3BfzwP};ji2d1D*s#dfB7N~c8)+ZXXk(T
zZ2#f^Z`uFlD_T0ZIQ$)Jpp}V~y^9&}ukwGq{Z|A3|BV0G;$`?}xc=Ah{d;cyCH*@&
z{BXPs|2@(CaEowfR3IRNAX1`2sve-5InV(ZOCNuFSvps^IODeCw}n7E=V_^i3E9Nu
z_8ErBewZ(^78Ozqv&zvjxyd10$KWcdataPX%@?;8xyQNrx*vbN^sKG9dAsvOi{JUz
zaj-aSzfGU-y!Ol_-Dw@ot2&y3*9sd;eU&CfkP?j!-3r*=`R+%1-oq8wT=4*w*COYr
zpPQ8(^eB^u?c^gB{IdDH8$w8TP$$M^{7`*?0D;s<^c|_U>1f>+S`D}BPkPsk3$b4{
zY0U~?PtCw}tJL~7S^MoDuGy=1r0dm9V~24U$&Q0xW0@9&mdsOgcgD-v22raHV}De3
zY*mZfoukPyI-;J<>fPg1NL|^GN7pQ_qkowJS)6}M)`R7h2{>m-5hiW!5*;2Ux3VXT
zn_g|!phYRtTVctRnRq@;j+l<8NYYNvOvP}GL|<krya1CLwW3Ymt^5_@Y<^pfW9U%G
zat5<!5yzQOmbhelRn+<_Qpl~RV)(NPOlI>is`FMEF}QA^doSaS)SC{+!~s0*hFYqN
z-M2-25A(D6+&Z5#p157D1=n59Xt)9gny%4F3Et|mw+FC|P?NZv*Bh6c>{M&kNBJ{(
z-P{4Am{)Y3$2myK$4z!A)Ahm)?lz&iZdz?~or@8t(a}R|D`G%ru!`EGT$|txv%5&>
z<o&q$a4}NKFV<$uIMTiM*NzdW+U$DwN=d`MQRfkE`9rdahNR<QNj1yoX^9bA9mO0t
z(p%59*@E^*w|IEkjkx$<LlB$c1Qxd^<h9*NXj>Ntg^9^w+Ht;dCR#5Qumr+=^<VtP
zr&Z@FJ0;%wtUzN9$|QdhHd$O!dEY^Sc)i=-KU_SO4>031e1t`_7Z#e5DYjm(e=X$Z
z0Ft&|F+VaOh4SHj8DH^xHPvk>oD~wx*i_0wrFj(UP~O>cxu*0yUl^UL^FXR(ezcA$
z#WhMlUG$J#lF=|Y{4(}p`99TlC`+vnhmSGwVqF9|F7xzzGZzg;u7J0@yIfpD0&_gX
zi6amqTl`v?bbP{Uu&?=H#H>rY_lEqp)1e+rMIM<rLF%(K3a32y<13<FyMX#|>(136
zZD*3jD=9hWH2b`O?5pB<)^L0j@rXPxG{D;SAl=Fszf3tQnlORMWS#+yWrx3?_^Qcd
zJ(KQWSWX7K`Lw)31-@A1SmtDIPmTgOFr&2cBG>b*-}UKLarjNQ-{b65jIBevX=^$M
zxrE>?7L5oJH4;K7q@>6E3zO@bx79&E(|`(+Ek~%0T2%E1kORXZQHr!`z6+I_VJ6+N
z&PLpk7vwYo{d!9kJ8)l5kDP&WCR)0qbeZ(jY<zIBqJ6$b2W$C<xFl&>1BvbySnvTF
zB}u0h1pq20OOX>$BKB<(^!L#m!8|I2wlPe=)E?AvtfBp`4<Qe$9=y#9Q?$W{hRU@D
zB4@3yn%{}C<rL@bj_AH4*~9uti36?WzAJ4<m#vTA2K&o#fJN9aU}2MS9XS=h+ONs|
zSM@q;tsF+gpf>N_g-U+(2z%gY6)ok%>L|HGG0~e~=E_HL(EB_))@s^TZN;^v4;h-D
z!{Yp@16z7&i90*|79a5kL?sx_c0&gmbYT-%*G$o~cE;=zTOq!FM}CU0=SwpRcrUd2
z#8ALMU3K7m&qq35ph}_e1*J9_6as?P)RFr5Ha6ExhHn~#h<`D!96C6CjEUKD_3)7-
zT?QH!AbyrS-P!KFd-37bc1)^iBJ@<Bz}0E|8;_fA)ZKD5tmCdhQFd%3C|y?^5p0ug
z>*+$YVDXB%EJ9n|#`xaZcf7~*_ZP0FV=Q7QdI~KQFpYceWzI}K@49VsjPZ$yVv(}z
zd5ynbp%Q#SckFj)C-2<j65oXl*+dYiK*C$jSIM`Rr@;8e^(!Ir>zbl@UoGRh9`z}y
zD=!n7(2xnQXjPQSD73pdc0?N#6S(ker3U(yUyE=5&@wP2%7=TgNg-JJ{ge=rvKZE+
z895VjuU*)-p(D@nVv|9zluotodQ|rcDLHT(=HVk(F&5l|1aHAFH;MbGg<3Y9z{Q$u
zwl9I2LIKwnuoz9+vp|&ASST5sCeYQxe(jZw0G)Es>2FL?QGlL^*5Tc+-Y)qGUuzSI
zJ^K)ov=43<^&`9L{w;gXd@iD~7oz%B4h0;pl!~?mP0VU=-pJySipK7(Iqk0%+l@eU
zEF}I$e{MnPjN)j8SZDO9Y|lW=r{_`defRM;%nn$B5})N;o6H60>~5dCbu#+-qXB<u
zpLOAm9m})YZ)tUp1Y9N;z@e_2c=Q@Dq}X#-26-EZX+LF(n2+elTz0w{y%fkZhQa)y
zB=jCJd4Z3jCa&=b0qENYI&ldvds4en%VN?;S_*@*DViTLPnkVgY{%?9*YwqivnsO@
zl*%h4IH?s})1I#vgh>{9kl9Hwh9wkHeU}O`z_*2+Q!39&fFpMah0Q}XO>F+ho4J~h
zv}jr{Ut$kea0h!lhA~lH%XrNtGROXf8eOx+Oepc|TzzrorszeP>3&7kJOy2zccr9=
zow#yj69|9*s3>e;5TX`j(sxKSr>B?Cs3pe$?#qZH@AIGX#>W;M{IXiR#n0E9l6i~K
z%oLX$?wH@_GbAH?8ILH)!Vjxe65UE52#6Z_FUaJ5vr;(Z1S%H`80&CcHRNdLnyh}3
zYc7rv|IsXt&kCy?FVgE?)D+&uSU@B8sG3cZq%zhb8c1DkRXnde>rVCO^_=J|y~Jpz
z!{<MB5euL@w0XeQy6z9-3#1&j^(L1ZI2kPo6dSCh7*NDVzMF>e^y(8q^|YFtx030$
z=&tMlEg3K+HVeVR|IYleDpu>C0b{aP=d6IqGmp=dn6bGTTy1?;b$E-u(u1i&-OaI|
zedYLgOq%HFG#PcefoCQi5uwr5^=`lZg7;nsv!aAL4CP06-oqP!Y5{6|qoXNGz<C}m
zSh52WdF)mDVW4GtZsSkO<;ekV5%TqZ=!idlZAiI`Uux|RQr7Cgd3pis!i<Hn1!jwR
zObQonbq`lj(V<15P{RX|%o8_X%7H#aJF9@Vav$$tKA0)5Br)WpHBosOY^-ZU(IJO9
z<$947FyxXxfyA-EV)^|Z(@57~GeU$*;_y)eEbiwWdew?Sr+jCJxfH11PfvFbNBILN
z_V&7BOk=#9GJ=_V3mo|q0Y#@n{0!90>4`b^Vy*8@W|3b#@BWmnArvxPOXDnXL#vOH
z;{t2<9<t&*?36`R(>d(ZYMy_}v5)Bl+j&u8VGTJiar+{)TIwN%$o;y-tXWGmJui|K
z%a^pnd5_^}Rh1`rg7E%+I4?uW{Bb#*WYa27S95J)S1Xn5@{^xNB%9b#^?E()Wp<Fx
zGKAX3!AK8uL^ClBjwo&PZZ6v3YvsM>_!|@tD=}o#g!cHt<XbE$mckqSXgna&htUOi
zY^X>da_68wz5*dQ;bd)7dBh|(P{Suu>ugA>oj}75h8eXwom_<3)1q^ZZHcAs9n2rA
zY=&Y~5QkHL_$XlYff>(vEQ;$6V2!&JEe3kW-VYr%*Rn-g(28)iUO%W&Okn*<qyKZM
zWs5YY<ATwYy|X*&d<c2UZSrm|m)wJ>mo~EB^?izmNJ$$}=Fv`4umK^?Cxj0)1opsd
zI7Z1B+7F?)8Y)2t%u-@R=-JXW|L2n;KN-$}U#8h9|CDXoWcH&>!fb`Cd4%T$&rp=J
z6P+&?nh@}i7sR-V&E%&_8GL}Vu*{maPwl?$#F-f0)!`4(%hn7H^bpePvC{(sS?MYo
zY90?*#v-(a;#N8VLrVxWe_WI0C1&SoO;yQc)wmVlFom+_w6!f^E~~@wBu?N|7#hD5
znH5(SO0+;ybAc&(-s88Q5P{Sx#eCHwU;~Jxu!#0|kTU2J0MKH1L@np33ZfXz5;Vce
zlL#Wxe$Et8-;b>O4N3d*q7aeYINIQ4I((-F0M)$jJT_gfE(w7-Nov1iqnXLLiz0tB
zXF73&4CI3dZ9%wJqDB$NjTqy4;w=6M9AU7}?+93Gg`FP9RV~U5H%ENN#=J87bGr~m
zDrlsbxYQig3835B(v!~K`{)bt%_O;&l^4Uss1F$<c||2u-AYuVOlfxlMRcUHNgDl0
za3091S9Cs*WerHMj)L+{xu0Qr?Pm8or)4UgkOU?hM!hL`w2Lf65)&;J5;rL(q|;Nf
zgUPVx0(s169yYrWX8LyzM9?%lNwq1E5hdxh&q!H(9zLD&JnbHw#t~(Q7<dw6TBZ6e
z=$;-ku8HEFPx7&;Za8c{-y^v!Y;gJ!<={MZ6uhN}5is>k%=Q@Z{Op?@5>?DV)kJ2^
z<NB(hR+t7RS+>3q!v?Z(ST^ZBhJpHRQ^zLg?fO#|@l{afT-H1#51VNea~tG!1|xn=
z*CA?DqC2%p$#OObRqA%6qUAtI{-As}2GoRBlVfH#5fqh;0D@__LTQ|8K?0VYR6kS5
z5Lr}&=1WKF$szs-!mo3!j%#*S&BZD~Fwk@=`{@j3y-x)$q@Z2uQB!yNz7A$dnhc_>
z4?j$7Mg=f%kitfvxGGj6aL;4XqH?h1L^LqLa0Ev~d6dX{Bs;nL_L#zQ(kCjk;@D-g
zl!8dn8*;|^X+t-?zAmXEJz!#87ysFT)%}8*JLN5H%n*J%pI#8cL4My)dsT{#l7Vu(
zW%CRUHZ6WsGlU<aTQV@K-^+{h#Cn<VN7fMVzdGbvL&}Y0!|e{3yp2aTx=~f8+WIQ8
zu6}FMB;Ih;X{=($@_Er8HC~tcke(br>gvqDl%#AZ38P-kaW{x<3qo?iaZ5_5>By4Q
zFDvERQW_EHkd;a6Z)>5L<S4^ke$6?p*ApWY>pJo;D}R9~JI~t3v4Ip?aNW$ubLF5H
zyh@<hyd4j#2&7LnD&Z(jM{qn3LMI^n$ufyr1l}oegzUp`pskbi;}@|!>CuwY;={nN
z(z*<=p@4S^X80|~{h=gH<UI?<P}mTtmJR(v>4Ra!I3<=JGV4%HO2OL<EABhym40a=
z@hT=&{&t4BW_6Y^txiI|;eYS67cmy5DOR8=HK)En-t5;CFTWYabD<FJy6ltTav64R
z#&1fb$;utv{{{*Q7=NYmmONA+7)T<STrl<xFwq9#&7;AmOpiiz8e(Rrj#($~vkVz!
zp{5k6qO{W$_YU01fievIgSTcGawc*&c{@?cmh{k3SbKXgK|MQ>=~L%~8{OSV8^mNR
z_ylg_d*Fie>%@2_=!YNzHUQ*o8=1+F1a&r)6%~mzfZ3e#%y~~ttSE_mKi>wwm~i_l
zcIdaG?D2QC42KJRRRzzc&|4D+ivT_ayjR^J{8Vfq$&=zh;1s)PO1ofLX%Z+o6s^k%
zAevgCWe8*`^1&Q$_oMGT$*x|OU(JA1-hUWR$3{tpOB_)0IL&^dIoA;fAqc853`7@-
zC3L={mmo;q5RFpcSg$Y%Y<((%s(~uFzL7(qD!?8+O%g@GUXq#p!dDzR*PNUQKr@fQ
zdIRYt&_V~74<SHuEKPJo@)MCx08%IKu@Fy1g>?M-yUF`$Rs~Pe%o`LC%H!Axuqq#x
zxA3lx>kujA-VD9X*wS`~5R=YZT8ob|B$xDvG%yD7@O0U)CuGXM(Hh`k<i$|<gN(XG
zcYK0R5HVkh#u@zqE;YI55(I`lnBfeom732@clkqd(&1`DSUl!70yMTjH~2(j{ERdq
zmz_`u{?RQG)b9HQdv=o>XMb0KYyCP;u^$P)<#M%G#CWxo-0VYRg^$Me^T7md&^vng
zueG(&MgwczU+mo#!W=)vd5Nv+Vo-I=7n3SsRLOn<XujEd3nA74;-qQcf#upY4cNR}
z;Md$Xcf=MRY&2l&QkRfuK{6M!`X@o%?2VStTe)sckmhWpk6clyT6o6B6Pnnv{)QkU
znsXI}5DM%<h$?pH*bB%%c7!+21S54Y;r-M>tsvopS3d$_Q8880U!Y4p>2SmfT<AT7
zxHc}@q(-O<ZHvaPBej<D#AWc6ysdU#c&`t>mTa=vH%@Xylzkofhd}Vt^YTZP)q>^m
zUycs}x#^cl;E8*b<pd%k*rf7pjuYaz_?w|FeR;(LZ~C0lnp8%|6~bWs+OSY~U1XVh
z;F7~&Imve4SuNV6vv;Q_4U3DJ&EQ2Ih*Rrri@~for5@jIe)EJC$&Y;)_=muNoNBKv
zHq(WwnQqXu&&u;L4vsnD@TCTI#hakgm{IE>Z#5xkbK`N+2BRHvK#1~3<n6<R*^)sF
zXidwBiI)@@OA26k1`j3MZD`U3r!>2oJ7U8!YSSC-OPx~1m-u<uE`C2<k(3ObUpI`O
zDe)tXV||SE^00vs7^c)r`GMF`_q^XY2dUrARu$yaf%1yDz6bZ+KH(4zt1?`T&$Lu%
zLK!Oi&%QCxm}fVl63z#Wn&yR(1}uW0L(UYQ@tuKDt^!7MiDp@Ro%REOUhhXz7VkZ%
zx@Y;SqCYKca?U<cO1&ys3<6P;-Ng}SEo41W?%-ALe*d@-3OWGbwpw(GM{{ra>6;{`
z_!t^GF2ty=HXuyN#C>fWgnlZmPwufF(oBxcHEzB8itm8YhsG%-K@Kh{h2xCWq28P~
z#u{>{)hNfY@Q~-y(YozG=_X>nnFZWYucO;+?SwkTZv=z(C3RBcfB@o<_AMAf&mI_C
zT4!6CsR%`2z|+sLBrF2Oh~?i=sf5P!8IxcQ$yHM%`wQgQ$xVJbPGHs>ISO~0C<m4X
z5Lm8KW07;B+t6&4VH53`CA>&j-sQ@MZN~yL{F;}8E`(#Z*>Lt&Z%BQMLdv3MNosu2
zvS90|@eY>fAF0ADR0#%5^<Z^x3?~9ZN#Y^Fg8&5c@v8MLbm1T45p7UVZ7R39SOL>l
zh~tg=Sf~sw6*iTP6z<FvrMa=7T0`wDOf*OO?VB||Y`B;B`GM?ApuY40F0q`%SXCx)
z@7ntuXd`Tc`G60Y;h0EeP)$gn!(Mu(3&~T(B9JSJmgbL{J|Q?fXT2T-1>kk$AyIjf
z2hC(*b48Ns4<gt7qMX&XZ;KMk4&l^*n-+SgpdL6_ydAYEXjAn!-nWb)LenyY;&Sj@
zBjZ<e*tB>8Btq=&%JKeXJy<3W9h~Fy1~OXJfqXZFOXIvc7w@X(9~J_l)meJv#Hhv8
zxvmYrG8%20Gr3TL^VX(}a0H&NCX@W6E6lqVqI;ypLn8C$FC+K7mJ<RbXa|S_cX0>2
zPvHGSGRs8V0W~KJ4Qh6C%!RVF3iI7)(T<OViG}lUu-8u|=k5TSJ)<(r%IhIRB?-2s
z$uvc!RNK*VMj9Nv%vks>lKNggKkP8`kaD!>H>oWKY|p1(p!MOVV8{>O0-OmDRtWMm
zD2fu{s`r<%L`q?>tO9_ykh;hu?AqdGfACD|gT6~Jn5h>kHQA80=Xyq)@*d<@0?x|W
z)hhbe;FdL^yD(9?OlYB9IIx$(nPunl*}=sNugY?S10A;(1_g4BiaE!E)%)Y{IKm-6
z#IDhAtAHVj+TyHm^c(;~HPisw4>WM|nKoQkGBogYsE!Y$D;kx<ji#u4D6(SkQ6i@N
zBcN+Ped2y43^M~Vkqfw8iKDU_ga`9pcO|_x015*kZLom4FwQQnh4Gek=yCcjHmYQ?
z(&TA}CR{X}`&(1L^85=ql<I3fR17_nA)c`<$pLw?n~f^%c;a;>ehM*&Q<bV<HEjt(
z6l)9>i_u&ZKER$|;A<$r%Q|}0DMexrZ4z_wC55F?Y-j55L(OW#0`CmzBB0I6TF8VW
ze1T0If$EtKn<Pw2;vEg#niCtY%6>bC2uU{&n6QS8e5NiD=~7CBMusWbXkEp^@vb5j
z8r%yT&PJDt?HFLDG;$FE`q&tFnW$%qfXYG+<$_TzA>ukWx%*lTCAPH<UVD34iO^#J
z!Nk~s$|RUKaOx-MM<j^^+Cge|*#9XQ3970HfNvy+!Y+k``yPtTDeG@6m_f}Xm?`?o
zxF3EmLjsku%fybk8x|80h^8DXMFv%V14>3>J$q7=BRNF{yT+C7@dObI3npjG<)7aW
zrMR_wQa~^*NLUCjzs&8~2Qs0gnad%X&s}KjOhw9uVgqE_b5&Nn#lc*a!bmdTk;4b*
z1p6d2H{I-}O<Yuj;kmk#4Y|J2nZ|Xie+z6;+xK(2M_US&DK=&1(sfLGU=L^b6+k4$
zkvKZxxFwBZtr+Kty~6Bk=wxTOXCUp%(J{mS*%20AgoCa$p6&)O!EfAUT4X<qJQ#}$
zA>Vs)g+fuE^DEb7rM#X4{!?;1tt=puGU^Y?`Gz*XKN{J}u&^4|IG@#9e;=d$oZa0;
zdH`TT32m`mUCz>=X#T{<5e=mcIN722ww0J*%~_85M6xBeoBZb)t~~eKud6U^K`dXe
zSF5LBaEI2z@*H(2A@Xnix(RNYBbvOHYcAE))wV&w7-H@YkeWnzXDzQusvbKF_qe6b
zH}e)4i=D)u;3-s=^osl=#Md5xV6yZ9$XbY0^Xl{G1P+1~_=*7O$kc*^blAdJ|E*4N
zd5eT*G@6<{;zb-s4%9DHc9<po4$K<QVvU1Q!q|DOMBfzI%*dDw4a0{*T2gAU6eX7l
zkpfIJnH$CUd9Ti6Q@Si=y3^pfZxah-N{0kT`jVBOAhc^kdc!%U{0WEX#J9=A0)3bU
zH}h36!YPOlS2JsnJ8DG<SGU}Rfl-1p){@Q4YNwH@v1fpaSifn%msT{BxTv?*ov<RH
zpKuP-XQXyxrM`aRj}EgZJb*0rhEnl)tjtmYY0?CMYJlz4_jL#YItznz-opMBQ5+&}
zTQRcRa#jxs^&zY!XHN8~A+rjNkKGL+u{>^VAa|(QY}6%C3M~DB(eDB|Iai<xnh$#5
z771Az<yVy|am47xmexV7i?nLU+?4m#gxV4cmoSshs-({*a5WIO2zYZ)OB~Yd50YAf
zE@fUr+kz1W=p?3@-+*D$a8|1daeO!ofw!vau9jOv8@#P$b@x!^T`F^HwLEOcT5ynl
zr+_d8Gd5x|@mU$#&-~!=s9#1V$<M^mUVVtDKLxe=9*E?WqqlKNMg9fi$7Bqb!A5+L
znsQBiivu~nNXYcrN7dy)sK#+(-xc$L$=TkAjX$CSH(m~-N^tIv7?m!%A=fI^%>f)c
zXK9+3gG71`fUD;<?yD}^u)Luy*DLACVWvqY{#2i%GiIF_?_!o#jexuh^L|haOWXEP
z50R|rv|iMZWW;BEiRni+GtRt4S6xD3dW;6*=$p4dv`;6zla64+EXnzU(aZCB<Q*<K
zc`;_HSwu}|ASu<C&rPr_en1{2K+pNp0M$4>XvB_^5h)#dqO;7R$AX_dc4>stx-SC<
zUtrSe@cNr6+^T+YIz@u^Mt8@pGt;cH@DBhsPIj7o1|726#kjP;mR)w}Uw9@?2IEF~
zut^b2QsE9YKV9y$dsPR8R4l5bt<PDG_melM*G}RgQH2c!L~(mfyK=MX_Nej2lL#!4
zLE*9T=3TAvt+c#v#WNB}26Yae`@~~IYPsg>0~1Zzg_ejTLt+W5c)uN6q??%)<jKJ%
z-G#Vad+@CW2Iq55j`;Ssa7%;%cPMgE02`@=S1e#pf1)w3R!6RxYpi=kIgAgn`W<5J
zx)xdzIJRucAjsk_g;deXrHGZWDX>}1*Zs^%&P9f=V#C6{tX=A=jDsyZYRiVj$mTI!
zL(#x1rDLJCrlknT;fE){_w=hs_eLj1=(Bp%iSW=Nyp-1h`VGt&^~D1pckD5H(QsRX
z0`rt0lX}ZA(v<BxFuekuAt6LWC(7ZvM$>940aT=k-)oi@Gn9jPTe6tX8hd9m4?9-T
zvH6kC;I_mPG$$u_D>SHDxF|>v1OaYMt3($>`tMb7XT>?4oI}vk&s1<R=15<e2+DXe
z6|;FP>@m<HnBL|^y&!k&`q143-xG0j1)vg5S(cl&mV_{M!?i!b;Y9#`YM<kx)}%%O
zC@4?O-sj!lgEj^6dE|YTRaz;<QwE+F?aS3@y~!suOl~`_2Y%cIaRO>Bk{?yZoIOY;
ztd0RlJjx*z6Rb$lt1VR?(+ZBiZcmQ*bU+Pps{C7A*J001N*M>;NO(vD+mt4WSnxwM
z$5^T6TQ1@dl2RVgO;HEb-09Qy*C0m3ffz!rV>l>Wpk&}$C>XDLj}a#@!#0w?c-7Py
zE%Ba*CH7V6vbe?WW7b;oy@XENYoWoW$sh8i*NLI_5daIY6#>m@b9*v(2<LNzfyUY3
zt=Ut=p^u*{By{D{w4&rGe1*T3Imt)W17V)$k8e-RuV%?A8v$-wp3Yk`)%(7Dy+X?>
zJF=9*nMbSLyf7~G6ItD;g5Pf2Ca)}?iFaa|reJD0uoekkSMt@a%Mnvx$EwzK93F+r
z+^e({yD_fRBuZ=J0NovbE~Wa5I<Sm+A?W!_5Kh$~TxnU?8EIengKRh@!AESdQRuk7
z3Eo)wN-vaZpw`XeVU4ZP!Rf2vdt#9m8jMzy4RcR;KW6Gbj_zl_f6sLEjc>!R*m$Cq
zpB!3Y_dRp3wo+P5a7Ov4RPPFb8G?o3$h!15)?KU&A)&uj!Wt{Y@Kgtk*2L8Rc@pKs
z9`8u<GLH*ctWZ~Ro%@-Ai1?MjGQDb5`Kk3aXA+KgK|fqBw*`HCSV<uH+x2lg@5E_#
zh>8AeEjEG3b>X~Z;=!7QeNlM_-umKLqqkO4=Q6D;2ZoT==-e6xjGv=tcUZsK#iY%X
zjsDkEgUAOj#}M6-jBhPJ+yz8@#96}{lD$}xa`btyoy6dt6@H5|OAW!aF)iNaAWh|Y
z&3cs?Jv9Z>C@l!^5<2O;dJ4o(O&Q(E&uv>VF#HRy?MAd0x^ibE4D`gWn3aHv074oN
zTu$zCM#7;!FNCwqvgTbNtccC}qbB}s>sa=yqY`JsiF;oE-st!YHL#b*dd%jiPX-{X
z3#Y-=!{tnWw4`BWHN+4bGy|y}2~vgysX**BciI+#29ZsH&x?@|i+8WJdK0r<q|V*s
zkk6Z7YNZOXANk};84+(7LmJyHn6d~S2lS?nod*n2s6jZ=)pQ5UJSnRSjwy)53iop<
zj1R$nS=Qr!T|#(y<$Y`WF*9r@-9Q~Y;fow#6LJq8u;yGViXk3ho_PbS`g71u1cA}5
zzWW=z`!Kuu7XMz`m{PFeNZ+p9Xg9c~O~f6?_N1HeCT&&JglbHK))Q22eXJxz-c5;1
ztF?0gI>xXV<jcOK!34V7@A2H6+A_X&CW2}Oo|>*~k+`6eFswO;HBK1g=d9X%80BBL
zXo_VD_Ke~Y7l2XZAx?ZE#wBF~y?61FXcSD$?5;}@;30`!Gp7S<P2ts#g`e4U-<V@^
z0xGJcsf2Y%px$c;<{0u@;KTMm(OK1fsY7mRJeD=d`SDUaN(z0Gt{*-2evwv9I|1VM
zp<YpL-Je>(?1-UMi}SA2<|@oHd}Iken8N4az$B0}&qwf`Z-b=42(+LPd*~L}iG$_f
z2gxdenH^@uWhkfh$!TYq%(&fd^(`+TjRA~BP);~#0z;8#@=C%I+7-5exKBvoIXoji
z@9P~duJGdzrvzM;e@0aIGhATbf7Op?c0X5A+~9^foe)c7e!DEgNl{a4*?f!syu0em
z5q$*eWApp;zMqUd&NpXmP^mF)UiV@p2nDmttkiTQ=O5*Fj5JQ;f5*~qlj?CMjSe`{
zsyT-%2?1HeJ<4ML+5P^iA#$YAt4}pTu#(gt@%PWm9V&xO;dsH3a!IjbVkLLFVbbcd
z?iridaBMg_-*`|SY4r6EVAN!`C$Ji7{rcB0=#r);<!OG45}!Tzml)WGH{9~p1Hngg
za_$u+Me(dhh+MGX6IQ?J4;eKK&vULzb9WJ2$5R~Ks=$dqvA<5;lLoiD+wWd&%zy*1
z8^s1+<)GN!bELzFtuij~;lf(WKxTFaVz(1T#c7^r@k~ai+)cMP-eHK4=H>Wa>xsT6
zz__wZmKq=~FN(DAaV+#DCb!fu-DSNKdr4fI8Yj<{vD10BU=VcJXm@R<K`~Ekuo$)$
zXfgJ1H>R(8;kD38IX)1IEVJ|3I&q*NKq>Iqe|-4i*_&3?d*}Odr@;jF%Trs_9YF3;
zq0<gfsQFq4oNm4#-?bhS#q{6VcQJ3>CN~~la&e43?tGN$zQ4p8>e}i7-9+C1NQic@
zAMGhp$9U|h51vW>euCF;H(n{9Gv_=z92@dJgD<9bKBfW9BeB2*e~sLlyml7PBL9ix
zOL$fXe}E%CqXk(y%hooZ(~{{&Lo<(61r4(R5i;#9$bBIyc`}304+@Ujv345<TE^2$
zy&|Mu^{t#_o~6dhun6_LA+VB9RB8U4$|z7nR3Jpm!QI=$r8`h-08$5X!C$4(MsYrT
z3;IVn%f0wz-egR1jwVkr0L4W$Y8^r-A?ulpK_K#D0{_#b7|e;O>Z)^z02W(`RV$On
zo`?({(`6{iuPP?5P3P%iI`xIfEmV*yG4GR=EMC9~rc%pvFbt~wt)>Nd@GLehu=CT&
z++XYL{-KGJ$`Nt+wJ9hI;#(k&-h-e^idBQSkQVorh+VUS*HK+xxo_yX3Gt~K6mpK#
zLS(~f*<6mq@3B9y5?D-(e?xKJ3AL)xC@*iAOfaS2kf38dTt}u`8mvqlUJgjRj|P#S
z#vHB;L~x%hs>thdZVyQnSo=`9mQe_GQ&TGOVmuh&6Mqs)7mG{%{aE`5TB8GX+RM<R
zoO57z(&}hZCG@`#K6^=exNJ?E{P<(F(;@Uca*hOjurU;E`vm8V77*MJUm|P&!P*{0
zLYK;^ITH}0pTaV1HfKNO$I+RtQo72#7pyM{*07hj<=_RwELA*{WEVVIolkEXDKr-;
zVM#vh{ak5igkW4ziy-Fr=|*iEy4qEsY`chc3XADJ>4nl|BRYc*({xMNZp|H5eI*%C
z2U9s$J7ahOP~{$;hG>-Fmr=;1X;$ooP6Lj^{&GxVG!GZC$B<g?&reNX$sir|#e9@Z
z_UC+$;TPh07FJ)T0v80Y>@WFJ9BN?Bu%(}eRGLS{6CBFwroRQB$3EMu$Dq2(U{jWE
zl=Cw2Nmiji$%!)z1C3dP088_Ux?klI)ng&Uj5Rt$i3nWP1h*%cnW(Uok+oJ9N}VM!
z2I-|TiL>n+xDvGMhUw$=y^UyOkJG&q&mLXIf|&Xvg#teANh&YD|0C1G1(O;6LvdYE
z#b%;V?9%LJ*BAIkK$9e<5EZ!nE1eTK_(-DFLrZ0&4r#iZe~C|9nEfq`*H3uyR;gMy
zH!6VQ9$i(8Sb6v`8lC5X-6%bCmcM_FT#_%FxrPQUbo3E{^e6mo_3`*nBs|6+B~)&=
zo;b8LGqtp6dM(<r?85Ce%^)XHH9Zyh#1$;CI@QuoJ`MV}0pa!h)7!a43BCz`6W5a1
zYt=eo5urDPD^NyXYH;t-BG0W*A*@WqlntUjLnJ7hW$Xks)fB4;bQq#GoxJ>FS0^m~
z+@y&JZC8O;c`o09IUxi~c)3ip#ANx(q-=n@)8mRYEAl-_#)N%{Xb>3EO8<F&>QQ7k
zd5Ilk&G$6Co<_+Y_xmMc+1^e(UAAC|eep^C?n<NvK?%-LYCf|)av5*74Gg9~&csy0
z!}@(+e>D1X7YF89L<)ssIlwCo*aaBUDnPC4;X7v)@Z=1B?f9Iz3w=L^;|IH%=ARYZ
z5<=((MYnTo**I+n)oLepdpyNHbB#|QU4=e%8;Bu~t^@@97z`tMG-MU)`R#FxxLG{8
z^9M`iN)Z*?n6eaLsI@tA7jn2r6g-F`>Gbo0RZy`yzZ;EQw7>3KSDWsz0F#h8c?Hvt
zq6U@m?B8=DyODlyj90`*n10zLv%=o^+}MoPU@NEa&^fcG^mpH0em^cTUoPQSRBX{8
z3#2eO%&46y9xBW{CHi;IisX7ek%E8KOL&jQ;OLoN>$_O?M?9RnEBf6GKF(KR;p6Um
zAgYDawSSbw(dus!;DzSSmt70JJhd(hS*m6|pMLVb*>ZTAcwym#e;e-$G~#-8evIhU
zqYma)2Kq8lCGK+&_bi};EcFOKHx%*2I|vl)T;z>rIeZe0td#=A{Ce-lirsDT5yZwD
zph}N%HP1RyM5N)O0l<Z+Z+9i%We$H~@r)g5v_<b#YvmkOP!5khUFMXOpVT4XH0axR
znzUeGh!%tL{P^DM(Hw)@E!|>g!+^K^Y&Hq8H-tRV+S9ELg`iv;34J(588-T`GBWDh
z>n(rv@^ac>Z|C5-UqQKtByxA3CzsM}<F)WCM19^ZRrB_`!ED|HP?a|{jp=%mum9Uc
z_lnj0*Or8b3pJXZ4x`=}&fy%<uNMV{mp222RK3pGxw}ht@>JmMuj|nz18s7F&U4eu
zUP1D200!Q_N9Pn|3VfY0%mk*BSE(aJISDQLKlIPtW@Z!usR;j`Os7b8y1gBaR}qWD
zFaef%Z>zH#O2m^MX<scyyF9D@3BnZL@q0>_N_HE2So72z8R6`Yfh)nhb;E`j1LDKy
z2I|Yt8-MfO+LRMYlxcznzgl<ua(J7_TIiv-$hkLp`J}5d`|{JN>3!0v#!8;lPRQ!a
zWqOcAlXQi7xY__e3ViFKetSX~e99MGZ#Ia~TcAm{-}&U+Z~J}r-Ry07B48=HzD3pR
zF_*^Q<KkQLRVPO_b(Ol0h&-Nv*mjP0(c)rE5(u=Q>-A?B@7<wqIYJVD)~$#rq6K;k
zDO*wQUcP<SQX7*V49DU4m_;3h{94-8W7#)opzMi;zk!j{XfQuf2u8jrn>lV@{V*hx
z!s+?iB&DE4j2x+&EXpO%hG53I;1v$KIb8TPGGu2-jO&3h4y;3|xWCdj$^DwJ^21=H
zU(@B8<Heq0?OwN+4V-v;7aGPOBE#h_yt%OBmA;*OFBW6UnV9iMRguU&SItg(@xhgO
zQBdEKv5~_SD{w;M2=GuOG{!2`?2f_(@Iz~=Bp1~M2WLrA?}CXY(@o;HsO>hEWZs_W
zB~*1ciMPDlB6GbeJKqn8e1!lcT+f?R!1vouvzNP;ySJU#e53uG&%Ce02??U+0e-{Q
zm!H~NfStE(sznq+%45HUx3`U*r!<S)D+U5?P08<PhqEL)ex42_FyS}|clCdFwy5AV
z@2t6%iv+bKP#Al)^2AV^wK|T-{hLIdVlR`m=<+!-o>*pTaoO2uZOL<ot|f|RlVv(9
z$R#Et1j<?!%H%?Td9kY>KysLRHr?OC!-M(>TTXXd*KJ+}C|+}Vo!mu5M9@js43s%t
z25~$_dDWWwv^zaUZM0vj0g1k;Via3H1^5-zYp{v!)@KzGbXI&XX|y^_VOl6{jxv-c
zOg}o9+do<u#?z)Kaf}VGHhvzJwIZe2={V!q(4Ls#kr2L){%qBUnjcLik6s`D=<N=<
zOB)?coH$xs;7|E+2IhG-b}#tw5|apZx*pmbsJO{JWLzuyn<7)IN93yQa-QP6<kaEy
zlPdzKkQOBT?U+8b#m@QA{h6q$)>!B<0n>us(WjaOY7+~z!lq65_e{JqMm<8_-c(?Y
z*Nv*VxI#@^CwjzBf@~k3Q<VvSod*ap|Dgcx`#F(F?N)m`ZDQMXyL8)i5Lh(<RU{%e
ztZSQ^*Y=B5C%(-O(9_jZoW(@w!vpf?&Yz_dB-UYU-zN^Ib%;{*c;qRjBv29;4*Nd0
ztLY4!7R0{%_LA_-4#GAZ`I}_8U3@T&>zk`}KfkwscFbgAEG^khwOaJNG#&mvme$Hk
z*Al2C;jK;1+hk>eRX0bj!8=ej7F1AJH0jd;e&Ne13Ya~0&oHJgByM95uA>h!#3Wr}
zP<_W5a-7y9p>Uy#+7Hd>+-38N0DVRNRy%NOo4-k+tOK>rf0&MXrD7c3l)a0)voHB#
zjWa~U=9(FVptBQ7K9bNiIW>?J_=RU#|7-ClD${PD+3{uh%ixSKBn~qDHv<3Zi)kU3
zTAizhMqEq8&$dqxwBIdn4Vk^;kX!fB((T8&yf3>Sy7vnz7vtmBhiwOgcfY<v&Q<i0
z*h~C$)U@xYSEcXpU}1;oL|k+~c1;)<fbu-q6Pt(2F7lpr=;0!>QSW?gP!$UZb!Ws*
zd-LyAeEqvXa5Y+7r%}7dq*&yhQoC=rb6139u^)}uEO?D-S*VT0JGkQAf7Sd<J@3`0
zRS@`=B9%;&G;i^cUkO!)aEB?Ou&&*t)~LgfgKqXaTgG&M6^j|{%Zk!k?WPOAQe6l7
zl{XoM01NV^V`(~dz=IHBDN#I&JzOiL6F21T@BsZ}kjC>Y(_$}S>!}B?#(P+&%(!n!
zYFKc{O7V2&nn;)A<JFqTJ}KP*c-ZqspH4|Apmg=M<&rG^b+NM}?)TNF!t68T*Z$R`
zq}*QH?eq2am2%IpIl7TgtFKDR;dhPka=b_nJdn#eI;HFc=OOF;yktQ^j0l2#-gXY^
z`h4XiQ|+#|vic>QN4oO9GXXp`i^>oq{5ar$dE227@jytb^(QsJq+h4!@N3P{^_ipS
zxo7`~9@@WUVArWtM`@8sLrC5BT~P@a(>yqr3a>hB(Rmx?ai06g%=eOPMu}G*o73z*
z;lhEgnm)KPfUVEFyfjM>C2?$t)SDF<C@9TDRM^b1<SgH}|6Uh=V7JL{SwUe$=3ACG
zynhObNl4&Ug9{UX<-K-mLfN`Oiu?>!ZvX<$B=LD$TkGsv97p2*655**49#HplbYQ+
z4EmY}Ij%P++hzRvu*RSZDNs4`wwbQC`&n!l3~2+9_I{+GXSOnJL%g4xjHTZ`m0~=R
z7Jj(S@S(E&^M!rp>sFdVuVX5?m)9N3I-0N0%;W01cC3_+^2X1cR!)ZF_bl0#XW}lZ
zk{&6%9VP-{p)8%ypFEElsy?Hj2j~*l2RMYnLl*=ax|!;%x#nNqYx8VD;A9)v&n@6B
zuu)w&v{fEALN1l-Dt3@JGD#>@IvH)QmS!$;Gps3Kw5I{2<3njS2at0TnU;v}jDm0@
zAB-o<qR))&F)+#b1f0*^e#f>vPM0?3+b^Ur__!+#-t(07BV|h*NLJZ$o9*~MrE-81
zEj6*(GKU)8+e4D_YmiQu8<cKhz;_MIiPuM8!O5+|KxoW?=92J_Xam2Ph$NB}6=E9{
zSOx<n;wlYj#;Zb%lrbjz#JBPKqNm{qP`aHqr&LE^_%5@_qDA#;G^VTBeB)z%S?Ca8
zJkUsUxx%@mdXVx@)VEL+O8TT|GwY`?sp@Iqq;+Z~z>>S@QkRltTZ^nLZy!)ls^a(R
zFdSo*(7OHF2m$Po<3qckn)lKE`53L^F7JiT)4*A&0v|~0GLb#yRHxJGCNkBCBqj8$
znHxu-SIp?W48pZ1inV+)ms$?%vIj2I@b|6+yx8aaagO6VpUKO^Z|CDFmZ5-c2AyRY
zptH?hDfr!dG^wJN;c*a0*8IHJ%grDf=f_e^qdK$k;mF^JpnKnA?|UXkJxbqKe1Jbh
z^xZex(4XQ-YP2$#?kVjK@w28eJS|k(P7rRpeO@96`26^mE&4|+Z&D-EKNOZo!V&&P
z%DBYnx<3AmRa;ylEUqD%6Q47aMK6Zf;1)8U(eL-rPrUox=$##4H<;xB#1s^|!=6Q}
z*fX5{Z90!Jlht9sAHx@y69`(S!2&NOY;`J=6uikNpwUiuC`9{``o=w05KK9X9Lsb#
z09iC@KapSH&;B>4Ub+4wH2q!g^Wgz9!13{RqZLsE=&0%Eb<FAo6Raq2#QTQ7n5xhN
zLgF1vJ<!!YZueVS$tiTx=YSKv%>V9w1$%!#F&s)-N(v8Mz<5<v1mR?m!(o+};XRoE
zfOy4|oS!K`^WrFc){j0-RUkcF8{8o-uI7jV9kP$dXndX{g}O95({d4LJ6$5Mm9NW!
z4sy^n`S_-<Ut>4ML50SK4{;h6*oukz8W+Nvxe2^MJNqTspbDZHj_vgQPZ%>b4n%&$
zQWh_tab#>%pEhz}136~;Tr3)ux`22{#{>sS=g&xWA-_ajkceJIPF_2%2mqZER@-m5
z!tD}T-5OjGdO1t!`e><g{{12`Yb3#W9)jJiNid~B%=vxeI1ijI_^n&@_TRV?i<JE$
z$WLh;J16w<{Mum{MrO+P*GA7Zx}F#H{S6l;yoI5(F4K-UDZlg(Xr#mmU~_obuIl0l
zZ05FFSgyMTxUktT*A9mHUPKH1sN_K|x05H3=44@lFh*o6t!ICdT4B;$zeQ?1LZe!?
z<<KRr5FjFnIeIl>U0oBc&ijOVwO#(u)PE*quxXNKG><6Rx2JNFr#5XG4vN~*Y37Dt
zwwKE$w^?~gZbp8J?tZox-ecD9+;2o8P^x!iOr)RIr=r_JCdtUY&M-Mh_7&KvupoLG
zME2XBK<oT{yfSf?Ds3ApL7OcrhlLq-G=z={ispj1OGL;G`<C3VtW(7fg-V7G8_oEk
zrBelQ%Q&2)T-c_iRTAyH@W}002eTgnnLAsQ-ahpCaC(_m(t#WO$2<a*A=tz>*RP!@
zb<l|6jHS2oV?yWJX~2|9-qAZOICrF9lVs2pt;JngqxI7GmTnUw_|5dJm(YZ_<9_j;
z^G`RPyxGPctd+9{!IkO0_p_TFLkuZVoH74%kTpz@N80+2r*cp?(!G8v?GJ5Hk*pRx
z5}3_!aA;jHw~106(`Yw;X_#;*CWuX;ol?C@7*5c}vO^i4MfPaU3vovADOd+Z_e0G$
zV;QG`tfEWyE}NC;ek6ikX&qK65HZ9Duc`uruKI$_Li&h;NVMNN6l|;!8VZ;Yxf_sk
zbnf5lYpSOpg3_U|^#rLuh@os5<Y8IT`s7@UA(H}!03*q)Jt~E+FgGq!EP>Tg>1p@(
zZ0=UI>M_;*7^G1}la7^w-@BF4b7+NY<HcpU)zW1B@p4o@`I_cb`lLhyU>RK%@m2;M
zJLY!nDGv_{--5eW(`qXLvw9GfSo5~ET`AD}3@HYionep}Qn+>-%fF0X_Trbvv)6J;
z3ITC3=)EYBhog1^eCoKn?7jZZY~sd<C(h5~cCFvWf?mcVK6m@6%JM++JGf!ecad0+
zaM>WhexmAhCcBR3K;O96g~Ddix?L=@#U-Hik?-J+$Vw{HlEam&iuy8MlwOUEX?rOv
z#6ybF_`S=?NPT_3rj*r$z4MF?<8Hit&Su7}(U-baQ=?}}z<$~GzBD5;e(&*J>38k4
ztJ*-XZ36~Ml@5vf5gNa5PDeN%NE&Y}i!>PlH&zx8W%Tu#>sNa8d<L+v8rcw@e?5P4
z*I)uydGrl>L1jLCBfRxImX?^}hEjwg16B;qLlpw0ZB^qEpLdApOh)_y#&;Q^EPtAA
zZ!QCmF_0+X&Ra1h_4I6$vffY6%=B+4M>Wr9D=05D%?pw6BV<k=Qo5&f7Ef%dJ=52S
zrtM(#rRU37WIhd~U56uij;7i@ZHH+LndD43CAn;mQ4sgh^!=hr&LhlNS__8)Vn=y5
zXPL8ud=jXPW(X6Kk4K?7ZPb6g&1jxMyUEz;&5-?F5SCQi-59(KG*A4lS50cu{esyo
zF+^j@FV|Bf<&6qru)FlH+MiW9dQj&rJ?9p;VAR_PO!#xv$*B>a2wS)*;yv#Zi|*q)
zXmfYW=kNPB`_ie6e5xg)Z4&TgLz1oY)4SpKn>Nt<xv~xr*MK_xDge3$=%fa4nm`Yz
z$LjK9ln7ViK;ej91?Q0jYYC1@(vqRqYp9x6lZaX;tGm+3voO|z+Ig}oo{NT|`O8>F
z*)`~5in4$1a3Hpv45f~O%LR;E>?7<3!w!MGvf|lTkVCygs-e#IIgz3!1j*oZKV1I_
zc`&@%N*)~e>AiaZ-}NkyJha+j#~2~z`uYf*UTelCus2QIi77Bt;?;Vv?+<!X)+4y?
zz1(o#qut17pXE*o2<RBTLok#G4Ey%|N$Tsf(`+}u`riBKXc{{b(Jt4f$eUoA9_v(u
z@6?B{deEcI`EeJjZbx9ceHA_CKI>dXrnZc}(tFQC(b!rPjR^&=-4`>COh(!5ay<FX
zk7doY`{M4IiN1Oe#<tgXeGxLa$Cug51#yL$OqB01oCA3P8|6{dG*hbA$5Q~|VISRk
z@D;GuP{On6%M7@I@!a~s=|UC0uRc)0?Ed;(n+p2jCf#~<e`w*J7lY)1z@t=&C{%B2
z<!^F(y>yyc7GB?Ygyu37+Tdr0Oa=yhG@Z9JT8Ek~l^3n<U&1qtL^wdjYE8O#v}AMO
zWwrG*)(@_?_VftZvf!2~6ukAq^1=2y&7N|R-K@ZKk4rDa2day8I>WbNMmEpyZoH*#
z0sEAV8Q;_jp*&hEA!{eUCK#NPf@z|_3qK@6dCP~Qpt=@l!r7+x=^3#;J)E4!ukf(}
z(TxqOP-j@RMu!6Ho}}aN5)`>2U~N<9eB54t{0XkB+3EJkW*u<e)2-I?`skJU`TON=
z6uebhEm+29h}qPmhz88{+4f+SCJ}qK$W5e;<dX;h)rA|c#pKHq%d_SER6{KN(12;3
z-A0uQnew=zCI0TkpeM7EMT05JX@1+(S=dVyr_X%Z)tENJ`Etf~9phm<!tEF%K-yik
zGTFKRaKz%@=gw2?gI6m5y9}_S_vqU0zgcfSI<kZ<E-_fdvy8BOH@Vq+Alf4^NeYz!
zCtALP%NSZI#7qfQ7aCxRi<Iq`(oYVRkS}P>P7|*IC7>}5WNf9!aKc)RL@$$hxk#q6
z#J^?b79j4(nVr83@#8m}@1OzmTAQi>K_NvZs#gg^KpgkJc1^nW;i0m~>(064dnAqk
zYrzyQNWPkE)Wy*=3f%Cx-##^?7#~{5EJ!ik?#fr<V9kHddpcuW>nOo4CNQe?u8+a)
zHzdaA&;Gvix-8j#m^8Htt$8=&zbhL0prNlO!sS)Z*nTvBjY!x8ix*gPx4EdVY+x~V
zlL)OS)ij)2(3$Q2Nx=!u&1xs<G>M^xTD)LZI<+lZ{H+IPWqx8$IX<Ay5~}A~W6!@X
z-!JR)RK}ou=Bo<=C2MZa+TbxY{fiHOQ1CUtZ3|K3>2^NQaRKt;;g2LmPWP|FOqZv(
zrbn`Od7nT60yXU5qq%22!9~QAVGF^-_8~DlyF{P+^Yq4#dy#{alah4#pf}`EF)ZJN
z8@o$s7=eS~wq#w;NBNlkj!|R>9MK(yLhL2UoM~gD>%T{yoq}>1e*)L~Z(?f=$Sktk
zF@hQh%m`y$EWevLd^hX2y8U6?Lhyva=9VMSo7(lK*8X=EJeG?@YJ*l(Q4+-#u8vyr
z{{vk>qQ5KO_{LJ|=ho}GYcJydW2vj{Ew8*XQ1Tha6DH!L0|sOuMvODw>cqRP7*7^r
zM{^=-GMB4Ns#FUP%GC<{kB_FHXI=#NcZQR}?n6(XWXaLs*$ZIK=c~Ahu7jDhz@*NR
ztw;(oUsQi`+cKH|!6MnQ{SvwMYMt8)*iq77mMy*7l;z+7%39YT7k>Uv^7tcH;^FXj
z^0jO3W1HztS-s*C#_ot%nSb!(Wiq>b9=0Oik!!AQ4I#S$La#3dg`dac;bSsvSUN@~
zmObr_chVuoI<fa!Pve}4^(0%b#tKaBD*~bHh?H1ivcEZI@oNhg9&>J2ROZK0rF@3N
zV7gHcVM++ux*%5OORTd>x@_r^lV20U=yP3dm9wmRfBT1buD<Av1KS5aH}JH-Cw!>M
zTguk8l^rbQ8e<@pNWm6jE$Rjr7p3H0P_?JSA9t>~A|#Q24l8W)vA#pUKR*BfKmbWZ
zK~ydY<T&kvc~xzLxhkzTcnCO(Z<a9=TxK8zPBV|j7J?qc;DtaVqD-uSF4*Luu4eLP
z@G7!wTa`6!^4d4+;v82^)qN~h!<e`ofuP6Q;@}_(OAR_A4*Mc~>T*(51PU&uZa@^z
zSsd&UUoH<l)Encd&a!lAT-4v8L$!SO#uez#UFyGYKlsoQbu7q5`~>7&kLCAX`SYJj
z<*vI1Q#KsW4yu$deR&PO3i`{#5BJ0VV3B@NjyZOZ?A}!%zxnkrQ=?X`8swHARLUu*
zx@wXrJ%CNaCf@InpZ$D4b_)aK<(GT1U*1OFT`wn}vQw_THdPmB!0|^#iLPTNRS~EW
zox;&IE4u)KRlT8#RDtK%ub{j9%qDZADyZRDdHEX3bs_J-Yy>^B*tOhMqD7@7xSB@P
zu0i$gt=sI!P;(0soh31AeSP<hZ+?uGba#2_-vj06cL&XG0+q~McG;VFn5<^+wmUHg
z3|P(9!V=>VQ1j*ISK$ZXKXTzk75d1c={9zLfl4dfaoxE~gWUVeMe>V#%CI$YxxMxs
zc0okEWgI4HzMF3PfQ3E?5pW#42N-08($YQnIKYiGo&vvl!ydWwj<)jHqrJ_$;^ISc
z?blvrTk1I&LY~4-n8h+=SS8Yi3Xn@*^HYN0o7XRv+L|1B<Be00HuN|38a()*eB~Op
zhtXupDcp0<8}j2Hjew{fi2*Bn)B_>5Ue4$Fcr%{O2h;pfKYZRnM-Eo`woH`?<JY7~
z`B_BaQW)dg9EUkUm#EE$C3`t@0r#*N9*1zM6bLj$R5wvx#QS>gMFb~2iXbDL6d8gT
zOlNmsrNGv)r=hr*`DAyKU;O6hGUe7A@n>;92B{a*&TNJ4{&yIOt4QUhz2eFp>{R-)
zyffz>5d7UHe;}|EBf%Hg#c~OCa>v@uKe|~SdGP15sp2baKg60HiAPDvzvY&nJYn*9
z@S+bXm*h5Z@GD@mjwBwMl%xB{Q8i|BFjV5l9DHlkRBo5^&Z|z0{%_x}S@i1b{YRWV
z24Y|gz38qR(L%7uW$S{tv~4iQtT&gH_S`zUxSfGRyY1f>s>}KMx(_a0Q+sI0{o7WI
zys_)x#ZA?j^2FU3CnQqN8O*YRv6C@@#}I9Qd55xgm$ff@FAmDtMIBee6K77qvXD^^
zV}$4l1(;Ly%p<%P9*K&;ctzC1mg=2`$n;UmrpMaFL-}sG%V%HC#~xq;yA-NUK8roU
zirjn$tkE5(j0wj?^a50_9_)gQ&x?s&)obCVihS9RSh#bidYr@HeluFU)NPJxnCCcp
z1Z^dL3)r>1J&(QMb=U;BlWgm@TxnYpYQ)WN-Kv~y8|l`q6Ac}s0BK}J-rInejKS3^
zddrqPDPxy|SC&|Txk)5=G~Q7afmOi`lwg)2CYhm*5r+X4xkFAr{i7_Qee&7L%XM+S
zoO%ucI6mjGzEwZ{;^^TbeixkLXntT4wrs}fPwQ0>4_nN${!xP9oJlv!*m3X4U3bp`
z;c{Fu6Q%zEC6?mBiS(pH%Cu7wBKPpPif7KDLtSy`P)<xu6;I^e=?<<HE83tQP+tjc
z$){T;-7yjlIkK?=%lY7D#)3=TtB(SO=RG%u2ii6^6+LA$<F2$V<1souEr?-VWW4Q!
zx+`JB`eF!LjKxq%G!?w_7ToPp%NZLVQ-&8l>xDj6+-cMDFzm(ZIY;MNa!_YK7W?J>
zhA>DnfSN!NrDr(k2SIu}8=RD#4SV<I$cOK?k<-R6fmmo-TJh%e5{Q6Yx%Bc~NktE_
zzS&L(BaPg*d!M}gLOZ$QE1P{g8w$V`g%VCE^gfc!NsKB*5xX5b5B4Adb=Sh$hAKI{
zd;4d7_|?4bCl%zEmYmC&9|?mCqkzGr1|FEO8@N%tkZ}M3*z7OsgDSn-JzGBR^W45o
zeIDsE=Cu=Bb^L%8Kvi%is2CsB!S_4m<ZpX@$i&Aqa%X*Y-j6meItN0bUjsYm`sKIU
z{G)C|w+}01juNh4|G}`8H3v${hn@LX9xF8N?k!7Bn0;XPn95LnyUw}!ThDCM^~3LV
z9k}F{ijT&BczExK{o#fVt?giCo1EP6%LB(RnsH!9+XuI=>OZCD@Q;rvEL}vIw%@sV
z$%*eA+;hy{P+iA1fnep3!je_L>~-vnq5#|C3D>QC|8vyK8d%tR>l>9jPTm`;?a(Es
zpc+DE)#+{6<))`EMo`!LHnLRcik`eJozfPL;+0@H^3S2mrYA9)E+?gZGJEz_EK*;l
zgFxEY45)8?_jJOhCyV=?bbnD1h;Fs>FuD#-B`o%)OKjo_@;M47#dDz9=E%+l3om!E
z;3%b5L7ZDIB?3JE0$!SKU7@T~f(qWcbwej)wTr(ou3%LvpayI4XzwluwN3Bd=_y0w
z^@_6_VrP2OZZ;yE>{SFxF(*o9s#t8c&@U?G_(a2Px7{|{4g}^?)_cR@@Do4#+0WKx
z^nn>O5S80k(N?9=^ePQl$xu_o+nC5}4yYn<%POP&+=kcVg}ZlO&SUdPBX)RD6nG3t
z+HK>XgP5|cwZPsUi&MS6{+bHvhIZ)CYT9HF`S6?<OIX9MiRH#KVl0Xq^_k%LO-PK_
zd-ZH*TO5>xNK`}j?(TSG@gr_4@Ygf9;$LXhDjeG?X)>hwqeQVI{dp5)j-oqfchI=;
zx?p|cA*=CGz7Qu=b$D{b$TwZ^OANS<i`3r<wnq#tH9*Y7a4_-P4IrJMo*BTg!l|J{
z={}i!-s;roM$czX+TSQnJq6n8DG&muf%6PX+d1-;>--YKfJO2V;e^6OV>9(Fp!OAh
zPGZyodcGa-iOe=zY{VG*Aqa!X6OtDEMs>*|!teN4I_#XjjEeI>2fB`{#ArDa0ZAUm
zb7kj(xCqv52$S5E@EW~5a`|v%1FK1l7|^OA!au0QfFg2zt_p_&SFC>Lx&z@*+hdE`
zE^Nh?_4f|$9(==w`DK6VchU#F@><nVHdp}TV5>s&d}sZFGv*xHIj(nJt2ILkN>(ka
z*+1}^-RnND1HCkud$?^dZ@&@*rNKPum0M)y`oVC0aASQ{>uvS5YmY6G?cZGg!P)N~
z+H(qOgzcvkw|}>yzN*{YL%UDAV$IyHFAp03jDBZFsHXk)`kHQwswzi~Z_{aeLnN}}
z-NSo2-M)G8h~tXd{<%#~-UhH(mcc2Z{n>&U$>YlI8K*Lp7*N1LM8EB2)|^|pKZXIy
zMNeij#&G`i)h@@ZoLXGnkoGVk{d5b#GK;CgQbg$nC$bO59`2Ea)nCYC5S9VU<wP~F
z!vbU64;zCnf6x*o7K|PiXeD-zL`6_UeyyvXxEF_~y6|xmt`?c{tiJ-bkU9_;O#?#k
zSvT6j;CFAIGG#SL?7`aF+Nr<#)vuB{Zx2*?`H6JJc|5vAq!+LIv}wqUgKno}V6wvN
z7R6|Y=;?D17EzI{7v0h|{h>t4eZxIxv^6yT1qVXWJ^3sr7U};`BC<N2A>`EXCq8Z!
zpk?;h<3j-(9DhM~sth0t#4JG_JgEU9WH9^v+k7f6uKkP;J^ZR&cbxT9;lRn1@W}so
zM*<r^{c1SKQN@ztWT?fjV7CyYPu1moV(<{IZ+HM{Xvjgm-vJ~Jp^?Y>XuK*WLiceW
zC}FIW7@H<9m#S1E>~P@FVlOJAtA!LL906W51cN|`9G0_B{=|s^^93K{WATVdquBgE
zIeCS!_Or~bVjb8|eA7g_SD%C{oMm_N^r7tyNVL6``$D*77L4th2(1G-2X{2o_E6)$
zM|Q3nwJ+Sz@dsT7|M`m@%W~m`+byixS9R^W_m6*e_l6#~cON$IP&m|y@);&{adl;z
zxrcV1a%@rQ{HOb!_>z7CqN4o5m9wvVVc({SvxlAeI}8VFzQ6IK{$K1+w)xU_y^JKO
zF2a%6gfKgiKC0SR^4_66Cw9#(*!bLl)1LMu0@tj4?*hI(=BZul2L4~izN@H^g~THN
zXFW$QJh!BqVV>{Zy6n(D_ih|G`{1t7`R#frNS^`4fLMKCM7lHHa9U(90RX2=TK%+d
zMlPBDQ6fMV8|z6H8JCkWZw#{aPYehmw1`tiKWXPgLldHS?{&JXa`F~BXh)#vOrMh~
zK}Em|U%^3_X=!6b#lIfHwX#ryq&jAbsR&eLo^?Qd!7-Jlt{@G|h^P{!5?3Q7_y_~L
zrCEO=T}ISFP>OlcS0h<B?=L7UeCW12?wAH6`-eHUJ$u%aDel7LstHafZ89;C4sLUC
zioh*vAYJGpT|?Ph>sai!HQB9tp26=Pcs%C1TH(6}KYeMl_@PARyGocL8A#;5n=6kC
z3yXEs1LDLSd=RbmMknv<P$EU#1Ig3A@h2g8#8z(9ZO_ID(#JTFQqx|pJqhy~4~=3~
zn8bM904ZI{{S)akA7N~!<D*@-G7$EWjf=#hD)()nBG3Vm?x^C#wCV2EN?&(2gw=T(
z=p!j0RSX7n!S>e=28I$CY9JO0NluXQ8fr)ao#{hN@)1g8P9Pt1AQZ#<Q^?4cpsKV8
zsSHw-SWu}2XBq^8tz_!F0=ewuBUzhbP#fK3IzANfi;U;za`RC@Eb=fCeu9&W{(TVG
z&6NbQcF@u5nG{=D(kC_t346)_X~QMKU;`?IK6#d1+bS3w^q<OYG2*{8m{a@q!JVxw
zYxoLA%`gvM`TkwKcn)^W&ENaXu5|;v_)fV6yFRYof6V;Dd&d;ofi7M=T4yDT*C2sl
zthk~4z|Jy8bKsJ;-RFA5fWATHFzd@}-W{{x@V?&Hbm+Ui&<?hSc&YP<0aX#8&e%%Q
zf&0Ss?6~qB;#)91b%Vt@Jkfwg^vos0&)qO$>8q7q90MxuD8Y-&;>sfEdE+Cu>!4*5
zun)4J`2m+to-!6a4^b&FMUEA~@kL3pp4j9=ZGmUBSOAu*21!J?vA50M#3UB6DXW~`
zX3Cek>NE=`_R=FRJU{;qZk8?eR+TFKKm-_;pCZZm>h0y_H(9nlB?jZjZju&7dZ}2!
zK_pzj@8Z+K;bF7z^=Cfe8WH}LF?}7+0Tbuvk0Nl(Q1!Uyjb(%zvX;|Jhhi~J-5e7=
zWJuq;{xaM{iQ?%Q<c8xgRCPSM#XI(Tn_Uv|$>wq3V)+>(EK)|*kel*F+Sq|W!SRlt
zzyjvBmmMW|%p6!j<yATm4_Hz_ES?OpI8P&Qzy0<*{_Eqz!nxTe6Vy+CN07Mg*3sF^
zB83AUoyD03&q`n2)iw$W%eXRc^rqQ}L;}O2{jC5lX5)jn*}SPQlO!L}m%8hsP7!$K
zMr$Ug2g{p}7CWo7ehxkv+&1G>lyDcBI(4IGKk!+M502QaT0G+HS3y2Xyk-?(P;d@o
z4W!lGel<r6TiD=aCIzevHMC{tz@c2M4i1GHI@LLm{M$D#JubB{xu&m^W4G2<8T|2T
z<+e%5Z``N-q5AH?HnK5}=j6CzSpcV{L|BX<*i~N(fr|*EuyvBeW@KSo^<@w`9B$y8
z1vv(S$1VxvVuxl1*anP{HnSF&X<m?wFGLEFggC+K4J^&Lmbrv6vqDM?R!+orE~H(b
zA&nW-M>d%gRRpo`aKMp^bdwNH>~+&O9eC9>x!(A9h61FlerI4~6@mJS&I*=NG&p9$
zXS6AsCt*+(fv+w~sCW`_VJJ#=a0nu%CaP(%P+Hb4cinZ@9YDD=0a8}Cw@sOH9Yw#N
zU%dYv?Kfkc|0<*V4|4+nrR?Kj!h{O^AxvjbO^!!qaOXIB#B(wNw@hEC_}t$ZaUwcC
z;>LdN=h?!C2;FJ=5RXQs)YCORgFj}kdGAibO~9{cl)kA5kI+%Co2i3AZE;+~LBE8o
zdIZJ(011EwTXq1O9UYC>UAI&b`lGyjHJ%FhFg|o_=<kR^R^#JHzL@BzKU>TCbXNMN
zOsE_jJ!aUq!7HmU#EEUABA^#S_&dmrRApVwM9D`C2=+311hTrv_7hTJS?orzas8~P
zuqFl@8wyqD2nQb#KCAIDa>?tf7K}J&aR7tD#NxGduZDvl#J<QfnfDshG)TR@DuYOE
zGYGTx@94BQT-T{@UaQq)7|}jA4;^u&=7F*?3t7q?Yz4MeJK=2#iiMyNOzZ*-!*WBX
z{(l`-RI*3Y<-lYX*n!^QTDx0bVcm-A1FG^Bb~S8>5(D}e3$24W#=c~CLtT=T1bczj
zDt+jfQ;-9OGwTp#QoBMmLQE$9W6)Z>QG$9fwSfp>8>a=+)x6K3ZcB$xK24TRo1>89
z2%*LAq$WsJ5zv-;z=OlU^cS=Yy~u2IHf~nKb;EtDzO_*wwFF&7O5K6y(nE>T3jeSW
z#TmmvS0v{|>VaJW>@3A_DZ~YeS72@A8_5$nT@4+)*Ug%Bo{S&=O1jrs#06<tMOG?$
zTg8EM57t#zKi8xUfqr1(*xC52D5IZ;=wr(PeY$e7um^5hCG4CEu$)e6KY=l#95@!#
zvEg8d#Eq0?V>~V+ka`@m`c5zs5tBpp`xa-9>!C!M2FJl_UVxKus;0?nT-{cfI+`h-
zDL}Iz(6&(aN~9Rkp0k>Jvj{Z_McvyvfiK|j=nwq-A(keAniu}ZNAvI+zco7m@-X03
zl_f<thJ$))T&$BD=ShuG5qt#u3Y+yPHJj?>E&Tllvf03oe%}tNj-Ro?VPv^J{2e5h
zF)sP=;$z&rO2>Q&+#16&-X2vo>j6)>T9H;9)K!X)mn7~qB~><$zQ#v>c+>QTV9#Ex
zcX3;XX1|*3o)=MkEv}7MP|b`H<+l3j{Cl=8zeqpxtu6zQ>`2>wd94mDt3H5HsMHS0
zZ@WMd?*R+|FI_qJ+MaoZTTd+RkhH!Y+p6t$bojEqzN*95I`><})a=K2>vHGjrQP2<
zyt~8m15TS)<%BoziQ_37{~L#6irQ{}Zto^R$}sZt?Rr*d3WQ+oU);C(OuZjiz*c4g
zgi1qgB#fRv^Ezt2c)-oIZ~zlxEMRPBM&Ua_Csy+zY&oZXH1N!|qgK7SEn9*hSw-OP
zja0;DD52&*pYT@wIzRi&Kz@Z%)XI^6{riCA<<!uuz)CPSdEsB3<e>*Z2!yH6&*NP3
z#t1Z~B8XYQqsduai&L5X_%djI5dH9ngGt*){`KN}<{R!GkPn=nF3l$BK}lF=>XEwH
z1&9idxG>{J#mGCF7(?m55OHqcMbdyxpRk44aCm_g2;@?VUqnKoCx4ddE&~O-d*@WV
zM}CL4F`~34z7#ct<3v6$=+VcH%`O5TNLTaz`d8!S)&CsF7Sb@|<0Hw-*TzGfZ$yS}
zzdrfI5d2Y`Yd-atzdeLie|mzAiOfRKmvrtbyn@59)~;&cprm)0p-oFGuK(ueWYfm(
z@}FscG~W;hpA*uXHi!~BZY*(Cj1IO1*@vSsnO%~I3p3m*nFB~rGL(8)>`oawae~N{
z8JT^sg;Yl}K3V`Bdu?_A<gx=GoJ(JZF@oC*()GuI>(;;TUH@&4z`h2ge^~zZ!j<g&
zXwcOb>H<eTs&=3~ufL8Xu{oAl!;fz}Nz&~c@CxSX_{GVSKR?z^K3dpL9(ec-?{(Vi
zg_D27_UF;^=4|>PA?Q|1*HdGBoHWJFCuB=|8^BF-2zvqVv_n6}k-?(&NRg_MA~A11
zfsn=c7`kj({nBCGUJBWPFTu5%LEcnJV&ZND0-A=@JLpnWZ_V#ydVcT5Q8N$j;7~Bf
z+SyQ7f@7kgs0Rusm2}xWzIA6awyy2eZ_|JFZ|nZ`wI7VSuw9SJB0E?=^T3V~yF#^H
ze$Z{mzf;R}c1hQ5f7r2l-So<Brx#hlp2xLnSG}luUz?XJH}|}twELRkK=6Y+D`1$5
zIR|zPuZe_nZ|OSZqeM98w(Yj%v7KwyssZ8G*S#M)ueAH2mDLA(|6@-@A9g9!UfH2+
zD|K84G0>ZQNm7JFI8EI%+7*uvprtyfn@b3S<uu%G)zfAY=nh-*0vFDg(T}SQ!OJW@
z=Vy|U4q^ME(~}Pyors$UMCqVQ_k$=EdFxTSmNCH6$-+{4n5~cHwRneH!?VGdu`<oX
zo13O-I;ibIFOq<C39eXwyZrm##dt3qEa#lViDk`XZ`-yWXEfeqQDmX|7k8(G3rj_A
zdz&qRez&O*^DO{`m}4g2-l`~4qHRS}A8R@O?z`_^K&oaMq!}2OT~>qRoWDqY=z3B$
zCMcE2vz2pBG;}h=loA7t3Av^|WyJb+8GFRLn6m2G6Xi2Y;B;0~^i{M4nvH09d(Kdk
z#(Qpj&0$asBu}D*AtKLXAwP4*2>IOkGeF{vb9pf(ZK~t|?u)%Gj*g{LsCaPI4Tv2v
zkj&&jqIgcF-+RzrWrnzLw@+;V&X&X^8Qt4*I{mUzPCnU)hcn94L?U0~!-4owF4R}>
zb^vgcuV*;umjhSJdK=4nU6XVyhr`A4_#cm#TW_5$4T#}`cAO~OSaE?#qh$=MK&*)n
z2I*R;27@fIb)g;d+N+<J-Mg>FZSkOH{R`x<;~=NOh@A~&)kT{V3Z1wVN?%w3#t?*0
z^6J(^VG^Pp&NOI9H2n5y9Espv!a>xYP6h3iEkhG4kgxF(%Z1<FkKfpg>fl`#*pm~Y
z6K)->{#iR>QUtSJ=zQPfc5_0~G`H^`-g}}()4`E8ft<?01#K!XDebZPbEVyllueOk
z*Sx|NclH>u;=ZjbFZ}cF4VP$o-3oX~yYAD@DCrD?1}RDJ>D3F5_B~<7lub*{hoc|x
z{Ju>#L_pn%#qHO9tJ8qzkQmgBX;oT}bYUHS4F>8@2?FY9U<9J;!DD@n|HltDExvI6
z;eE$ZPBn6L1{Jifyt~JUh52?s2?!%4@V=RPWsoP8$$PISM8dNUqSm<-`v7M!tst#R
zetiYnw=^)k!<j)21bSF@?H)nyvgRSENX{XRw~N4t^>yLGVM6mcQ{E;c@Ayjx<ekGd
zs^p66xdSU!Brm}6JbK6WHLC|@h?YXPcR3p=r!EM|6EZnp{OLzOTIW6>{&gTMJjYBJ
ziEv-RJC9h1=gI8OB`#uKAK{KIHAKWr@P9cd(kY+&3X7W&$Hl7RAOTUr4E=+N%SJD6
zGO|D0HpYIfW3Y8Xyz+9soHJQ<V)3A78f@IyD;|+@=WR{&9HHoI*D=s?TvH#Hk~;n4
zJ@=OL`S$FhA$`;fqL)$+JBeV>Xxnh3egbtA8N>qJhVko_DekPu4=6WnK<dMnb9<lv
ztVfVz@0J~6b{b@0T&RdL#0~&GJ{@nc5JLM5C*KS$mZoG;u{j)ka&Y9M55@!kZyZY<
zM|v;4*nwlNPl_cCq&Y#-Q(ahL#+&N(BmVUI&%OA|82m624;#r?(g}r8I|kdg9YeIP
zc0ygVG>%kzf|)awxISWnF;>?sZbmJ6ZPua@ll!njbWY5!B6K*_fyB8?hFZmowUYj5
zk%_pkZ1ha>>CXg%Bpud|ggLLsQq_WrEaBLN-$SZWI2a1$3@U7$gpB{%|CHwyklHZ7
zx%TTEEa>vbJ|}$K!0E{qwTFUz^NJU7oQ5GXG#v;%;`tKLXANKL+<yhX+uSD+b|tib
zrr$~GTVUsgy2JV1a|-K<0s*`ia=?*l3kaz&G)`3v{9<r4PJ^+p5DPm78)+qE6t0X}
zOE&tON-iw#F9yk@f;eNT$5Qz&T#NpZiHi6xZE#ftBrw6j6JK^ti*R^^fk+H_1I={+
zQ6R@3zl-w+I+z2CN=xJ7+gD#jtO$*8+;O`&!(MeHZqVgq*~fk4iN`z1>eWFw{0Ilg
z9F!Zrwb~fzT>I5y@LBJQU%qtpXc;|buYBPP+vJBo7%pG=%6fCQ{jAxYKrmZn&+a_g
zwzX7#dw<AOv9i*V-`y9)m2v^+ARH%Mx>U>Mmv5BG=f(zsSBz$^5Eqt9T&M`sG81uc
zGwJ`gUQIalJ(=}(Z#wW8>Xyq0bt(HeIj5pq#NIZGzK@`X61jE<N=(JW(BW%j1-|09
zZ_lSc;so0BFJQ0;MjbR{C1PPH<!De#{rMk`mM5P)7B7IUqy#C@=u!LSyWe{cwZmGu
z>WV8EYc8RA`K4dR_xw8f@-++P2RC1WJK{OAaz!UxFAtOP6BprvxCi5-gZ%D6xD~>l
zJwdtux4rOPUu2F)Zr5&rTyW95a^;mO-O3<fTcP`=9eix)WRBpp%R;)4!kJ_MC?yGP
z_umeeT^8oNh#e9r>;@u?E)Z!7p@=dNQRCPg$=+}f5qyBP2+2ZfC~fy9=U|MNS>?rY
z`WXjeuU~lXbKKif-1;@n*f=LiLh#GGhsoP--@@_L!*P?n7Y9Rg<lf)hi^>U8O}y0A
z*SUn|1!w<@^<|cP;p)H1AAbL+j5y|g*}ioM-Y+kZZaw}g)m5F4a1NCJOuq#r)J_(C
zR3g9r#dT7-cQ^;MwPrn9%PE<El;1!6W~^K--6R@XnzWqK8R1CgBRSm2%4^lqXFu)t
z43NmG+Q7f73L36OJOuLBGXt!C{JQ8e&wK#a$vUil;}REtg(?F{y8Wj4m|w>4ziW(`
z1gUFoVQtsk^voXq<q9do5Q@Z@b3?9eAM9VyMo$)uuRq?)rmni<#g>6AQSCGd28qsq
zg5ql00VdSi+Vq5J3ZNkdT4B)0dMkx$TLJ79%)I8+;!T4~dgD&4apN}7aE~Ot(Fa#f
zQ^rj<enikb4xYI<t%(OeVhPnL_c3r1i2=3zudQ*B<QZq~MC_*r6vdG~A7O%b=A^m<
zNHP*TA)kYChRTiK>&B$C<#XrNfFura_CQ<t5%vHYx^%6<E}_BPckNcqQMV23&t)g~
zregW$KYQ})W89(k=pMo~X$QDWx8rMT9QoQ;3t1?NaF2U{1BJF5*QLMt%}^<y)tscl
zd@A}!7v_F6nTo10Y?4(x|Nlb_cs1R%{RR5fb~$HGjr4-qy5}tLMGPnccen1Thrc*6
zP*>*;^zpcuRsHVs&&83xe((MFhO&TfX2DLJ5XBsUJ)W^J)*O~J>1<9p>{cbyrgf2T
ze|spo9LCc=&O>m=RELgx@j=i2?RsprcXj4KqZ2U18b>M!<{=#+9NIBHT;j5ZQ!~Hu
zwW0Fvyi)1fZG(&&vlRVtkv#tBh4Swg%d|+%1RW2<s2{!<lo&A5g{2_UwdB#|@P9K*
znp7p>YHVzp2$4{0to*woIbv~CkAu!u5OaMKsT)UoTmKx+S#eT`0namNS)Uikm@9w(
z(>X~1cI~(Tcgi1fqG>XM`PrQ#AY}f|nCc<D`@RIyUM1VMTq)OId!NalpSJ<K1edVL
z&tETj1$#mIK@j{<4nw+@Lyf*qIvA05TMWTiS3ks@*RX9{zWn6o-^-3|<5+(dGA^HE
z-DxjN7yn*<eA6jOWlQ&<(h5h7XA|nGY8Bl!b|l0=x^I0(aRXPsvIpJsOxW6DilFBj
zsN@24!`N_7?@R8hjLND0`Q;d3#fSkKl6I4Yi1jyR1R|Em=?Kyv#bb;Z0O6`Me4!s=
zz(^`At)EK_D0u2v119~5yDTL&P7hEhWiwtHcUz9dX@{Q-F`(sh2?D*FFad)K=N-Lu
zgHaJ6!tv|{jGN!}EMkp){(D){UM=l()!*vX4Q3LnSf55#M@ky{^r?}uvV$1EC^B`!
zGB~iUTmN5kX98zOQ8oJ0_s)_Pl0ZlZ5E39^$qrGJCCMa#Kma!&iW~SL@DTMwKfmYm
z$x}plDhLV!%BF(25ClX*5+E>{Bm!#o1;|2n$i6Q#nYp+7`=9FDef#d+Jp+^aC3Cy0
zyG~bCSJ&Ck=^|stZT6~6Tyw`7D8Kp5k!<3QJp9Nex$(vYa@Wrnk}YqIELhM}7B1`}
zKmPG@BnCT7yPy8_ZMpjD><d`Fyt{n+zn015r<cpvv7{PRN>vLgf<OInpJ<%=Yp+`&
zKl|C+a?Af)C3pUOk-7Zh3ufV(<6?g_wtx}>V!;6#0!pJ7DpwhWcq#_jt#icXP)pzO
z;a#b(S9Q}w=1f&UI#{pp;aCfJ-%-Y_@c_<ZEo9$47PkOYWb3}eQwQvlUcEPgh!vr`
z<;^#GBHcMg&O2|JS4H5N6X??j5)}<3wQ`F*^4q1n>&0^SJx{_p&XE<%2a?FB7r~CE
zBOOyjEOP$?Q%Iz>z=yGZ{fY98Z@!KV%G)yTf?Pw{C;xB+>!X8Qapf!W;IF61U3blp
z+irhKzjT>4ZI}<E-~g2aaxTVbI0gEs(x$o5RSgAz-3lXVv!|4}`oULEn6QnIxw-FL
z349Y<AbAu_y=`3gqNY4niGq#WuN~Mw{LvuZ-?PUh1P2UUONPwF>=&Q#FW+<5KoIz8
zaPiOkb$XB{f55-qyoLLB%iRxrMIQOxkK}JJeqDO^`4tku3*^q9o*~apxrP0u-n4t_
zZ{LyM{o#*3jK;=~kqY}}d8vMa+<EsuAvn}?#r+0;apy#mW%WX0b%*@*`ESb8&)+VW
zPr8P-#Ls-|N*_kC12@z%x_(t%P*k#*R>MfL>=jGoR18L`I?Z-it*N39kCL#J=y&>o
zESWnKX>2X~#(WU2BJrrDJ8+b+IMQnflH3fzF^{b&M;+i@FZQcqc<Pm#Kb`-EDN(xv
z`ni;P<>*5a?TXZ#laN#l#V%3_6;r6&4g#MCoc&&1gkMz~LGV~G*8GLZ<UdJ{BB`Hi
zLA_aKEAViZnnPIQH!_GYbEUEIPU+a`QO@A92{h#G^RdGG(p@zigctMS=wmDsGIuRw
zD&!DGkJ*C9!2nXwb`Z@WFm-A#vc#n^3f#s9-%p$K;T?}C4-fCRl5*ym`{j){c2esS
z8^`o=H>6n&N6YZxr6+yJkR3=BIsmMXfvJC#NKu5lXweyPjwzXRWtIpzb>KmH<k5eD
zY)UT(Kehl1Dd_6RG_*nCxz;o2>>p|aSgi*!10zo>`FQ|A_z)b#F%lyrA{v#ff}33a
z(~Bh~A{;4*6Lo{+u91&@Y#CV*$IFt%-AwHNDKDG>7nhRDuUszo-8;&FPF9~FO^4F5
zYE>5*I&8PhX*eJUn{+K4Pc8!&dDOplikv@cOMX}U^C3gF$!D(MJ^D4?!5SnIBjF|w
z$$wnC#H)nx+$s0o`xy0Uzs@^wgAA$brAzF%k<1`ONdMht1#Y7``4^dRZhLO{j`Tg|
zec8T`)Z#?0S08?hJOV_@0iib{8Q2!tb<g6vPGL|7mdKeZMU>UaoxtUN+S#|%yU*Wc
z-I`nE_Ya>yZh;M?FIM8<kX(EHOLEW8ZZt4Dbs&M-=I*k8-(V71&5_5<zS7TJ>(XVD
z`CT}7EWdA=<6?h0cb+NtJvbfwL54y?a0mOhZp|Rh_sI`#o9s8e@uoH0H&Hru1i6$b
z>XA@|eT5fl*-H~$9g?v2>>#jmM;haf!+VsCab7a@zMS7iUIrfA7{BkFdT!UI4qZP<
zXor4q@E8X>gL#1~L2RKBclNP{o9xfG1ry*F7lE6opxeS2B6{suQK$%H5Pj+7)d6cS
zMtW~SCAfISyHMtrrP-0ys_w`xPSSfJc%Ts8Wtk9FF-|e6zyXFxF+rJFn~Fyx6xXf-
zcWX(gBrk7mJG;~AmcNf&He-D*L16rKtsOowz#C(;-^9bWMR>N}3bMt(%n9TUFaS^y
znB*=@f3b4OrCV_yJ6Wbo=_OygX`RfO-Ajgz*ujTe4WZJ*Z}R?oDf(q$bAV`g-cY~Z
zJJ?BfvT|kcU^c6a+njDLsg{GNE0oi<(GPb(%-1BE*eF;|KDqb{P?5Py_#Dlfr$y|*
zOu?rGkMZKLe~KjIpTWv@JDxrJY>cih<M}ELaf?M5QrqO2a8)#3eYs!HVqbF__(j)+
zvzA4>p7-O|`Uh7|dRzYf{8%{mGi1=<*O3ODfjVgwZm2zw2Dk`UZ(hGagL7E2XkmB$
zkM`Sp2YdGVqCl_8{8kgEUdzB!b2k77E`cwG*Sj8$bR5sx16P<eT+=o~1JM-q+!TD-
zv2I|^D|N3MgAycfbKt5fOl62aZte^?#k{~XO2j6lUPhfigZawsPYAGWev8^8)z@z$
zF2X?6!^GDI|Eb|%6^3w8ib@tNwH44<4|(e#kp#IB>!g^<;j^EAQSQ9s|H#WTJ|S0r
z;X&E4^D=A)>gDW@WtoE`x*sF6X0t!hvpsu8$^3u2gk-RPhnjhInR4WjZ}AO~v%(3)
zK4AJ2?2`u$9L?VGzVz;$i~Mi6aa~b}MLiNS0gJ+>iT0B?K@8}0nGBICS)e$F_RF}j
z?BVUdKIRR+<n*SbJ(2a_(ezD>TkZV3H|$=j@R!-HWszV%gjZ9hpoZ9;CMQZ11nxF9
zc1r{KPHC#e1VGxr3tgS5aH}i+b$YQ}UBsQaH>0)yfk&4Lup26V9>{#LFEL^w*)ms1
z>BCAYybhyga1tkF&VXg27&1PNY+16YQKnB^HN)(AS%P534E>0I$Suk>Z{fEa6Qql{
zI3iSN#Y-{6L1x%k*F&A;;@KP!8ed@0pj}3!J9Ow?*}JzEH#0a;R0NhQ!eOJ|g@M@n
zwCjnQ<30K8RasSl2keNhxgVofpUe;e-N^oEO2&&ImFmx_ZW7Rkol-_5Y)%4y-hA^&
zHaJVpJuj#$4R}l_E`u_+A_r!2AEFWlS89?)7B+hLj<x?ES2C4?v~PKxxaiHzSD+^y
z%)2P;OCk}T81O9ry_^OHn%Y`uRIM^1K8-JM(n)J%?%XqE%HQ8(^X)31_~d@({Z!g!
zJJs_jT@%A(<j4hb)feU!bhbzLT!gQ>V9i62bn~i%@B{0I{0RFG=(}+_huYdE)}=3+
z^kKjB(s5+tBaY*xnn?_MDXTwX?&IC-eA>Z01b(9m2PP7tbqaT>q)okf7H3;v37=|t
z3a^~?*}8T<(nLpgEylD+2db1St=d);ahL0+P0Bb+1FRJDTFAudNA_J5#6=hHk_Ub{
zM|NzxOm6?d0&IkO$tfrQoqMa$=Xb${kln0lA8|BRoA%v%{8`3Nc%lGSpFUXvqTnJG
zy^jS~cu0+NWUUayNQX4pQF0%)C|Sv)*ZxP}KNEMzD!Kiq|MIF>v#JikE+QjV&XIf+
zmF)UWvj?6FXTWdPq>D}+lqTY)TsqDr46+SA^rN|FomE|x>NSCPI-EIb_4Apgqp)8+
zErT!tsnox$;Un9S+1Nuq!x%Iw0#`|ArZ_D~79iR)1eI4^<`?vw1YIlQX5HqLZE)0h
z5yT2=1*7DJLl5>T{QRkUfNha^%FVCBIccL&S=xyw&szGTj@2*j{MFZgijVhx-j%nI
zH?sk)phHoJ0bRlUnUp{<A8Is>a>829Q4o>(9Vj>$KYlYGZYTNmg9Aj<!j2xJ@c@_w
zJ~}OF!c2DW)<OW1MtS$$BV^!!gQ6mR{lAkO=imG8P+77xE3R=LpoC9<HvC@hse)6n
zw9(0D5wKo7;e-RSYgY#Xl4N11>*M$T?=ZYEf}DdI{^%m;U=X=OG8`+8jt)d-p}KH%
z?o2ENI)@vIB@fHEy6+qo#6Uwsf8q|@%q}=srzmz&1m`#dm@^FPf)WNZZ*zfLS!_6J
z^fKAAyNCS#@d?tYbBm0>&|Mc^r&8$^(!Ix0kos;6NRO2fBX$~*zKZp?v#xIa!6XQZ
zzy_cVt&#i*yjxy@22v7x3GZg5E*8HWd+c^R3yvUaWERG|?{<-&{p54357q-4v?XUj
z(0jxH>&sfm|Fu4hFbA4KS*#H}8th|=W`{h{969m^-^MQwD`G$iMmNz>7wmi>1R@#^
zx&tFRpsnN0GAdfHk^M|c;Hs?!k~`Bb@TXtD=gCUgPv+0R#n@+j@3wh-r^nGJcdy&C
zYnPmJ?mkpa8zCr%$bVe7MpUG)|F__2^z7uvWOhT=P9*?Zx*z2df}XvABJiZO8>7PP
zKH0J3O7^Heq8<!hdG4uWSR0Sa^0zPWs?0jEHHn*DW9q7Fnx%%MNk$Ely{qJr=>t*}
zjnbHJXz9AKrR3lyl}NQ~Ap%~XWJ}NM=mf+-Yl~44oXmn4>=6UXf%CP_r_OM^5uQNe
zA32Nv{&x(lJ?zH14}~V8XnzFMi0&UgF#rS4p5&|q79I)Fhyk@@U|F34TqNJb7O-R|
z|NkAOPdWz>128bwnfb(kUSogS#YViJu!zby<rIRwG~7z_(K)qxqT=)Lr3<&RS>^d?
zoBRQ64CXzC1UCMH9rEj6r;N+sC6^+)*S&!dzl}`?IdHi&1@-C6*UO_1pDN$_)?nNL
zHyL8!xo7)gD3q3Q<96sR1QT(`@cZA705K4!u8*tZZE1$va@L!B^8Z|Q)kZ$vW97D6
z2g#SOUTr)PrcQGSr7wO-7o8G5=&Uk<i;TV-<H%_9<vkT{h<Wqk)|<deh)Koyl8mW)
z$GfRre`n4-A3|UveTqhW=XbhTQX<u-JBn~oIVc$vrd)o-Y79SHc;DSbJySf@PAUZg
zr=(l9o8Ji+{ZpQvJVCDi>ZfJGMT=#}_D*;XoQ;oqvwZ4Ps|^?5y@yNmJ@o7Tcnj>6
zK7CvmspbRp>E93o0ZD;@D)NOd%|lH!On!dnr)Bl31~@|t|L)<yv*d;w-{-C~8IwC2
zKYenfZwU|>ASMVl0=mgO)%~$FBcuH&lCc>%^@qdB!2|)RQZ6FLJSkF_)O#dRMb3aU
zM3DQ5`t74e_Pgok*W{+__d^t%B*z_(yI{8-Am~Pn1^4?f^`PHL56inNZ<8xN@qnCq
z+S5pV@FZFDRfvd#a?7o=%)QAZ#2n?iYrZBQ|M*H7G&IZ9sE%I)AUS~mNP4eI9G?F3
zl`><-{jzSu-53ZaWbN9|amA8PUj92{e5i({c8ax^*<zDO7Mc!j_t&z*DOY^S0xE)n
zl98h5chR%25?31wZut-^tlFw;;8I(+chFyuWCy+~RT21%8s};&v5KjUf~x?bM1WyT
zGW}8&L1G<n)<&5c`qY=P^#ghPyO*mXu$Iv`_K>KBaLsODCIV#XhGMM-0`JcU9||D-
z(wGh^8OYy1G%6P`u{p95$qt>JD;&A<aZ8@|KRPC)2r&@qv3e83c1%K|lR0)b1Fcrw
zrU?$Dh_ZsdBV(Ma%}nXsxf=#wZU-k^$Oi4G@zpBe_?<TQeg3LV^2IN$!fO0T`N<ta
zh(|CGtM^7M%9q0pa0`7K4?%wP(Y8GCcxQR;IYqwihTnqCK(KJDUj__plv{qV#C)8;
zy6+5m;DOWeLGLWrd}WpN?TctxgJ-Dcg&E^|#)`h%`?7r~l@HX0!MLAglGtbqm$=Zr
zb*l{EL%KuVOpOt6E1suGi5y402q1R+qSAo5j2ZP*nUWj%ud8(FJWS3$+ufKix|jr0
z`Z?mUa`1qzlWe*1Ym4Nv%U(lDaDqH=|K((Ty8zeI-FOd7gDB95bZ5$i7ou%Neel#@
zPLOB++8b`qU1NLq=|+<!27+r?B@X|2^It(6X?fy_OXbNYFTw7lr(Au_3h956ihos}
zMGOWt+`%xiR8pdBPqRl#TnO&Djx~t?`5*IExJTwI`Ei;0rmr{6Hg4ymac6HOhRmVJ
zz0j<E<cM*JfxOmasN>zjP?U{unTrfgJN=M!>){eiW9nu@AnwA3K_#Bq_o<J$|Dnlz
z&p(la2S>{MxxbNBD}IPk=tenj^!M>DaAA)4$g3DNZ<dYgzlqe~a*ka>=g^^MYzS}z
zB+R;7vVBlV!`Wxwz?fQyi*Xn6PJV`}Z2$zw9rC5CxA6|~m{4MXqTz=V#1?R{J@5!y
z7hdVVDPw4PoG)4M?gR@INKu?rXPJ(BY&({=AO^r7AUNZ`XXcGhig)QOV^}Nr#<Fu?
zah%H3Acj}<pl>gr;&^KjP1jaz?%$vh6`f%`yMK@v0QOc?1oOBpGBKdU1@O+~Ki`9M
zkcEcSBMvd=^asYEBE$fyRqY$ZfM2XWi-sMz*gxgK!neLYSP|hE1WVu@pS#VpG%5ln
zx0n|}IpAuXC+J)?B&im+{W{Kbk#{i|8#dNT58@1T?(8lO3!R+p^rL@p9GRlF2Rgw~
zkoUIj)%YGK<%GUXh!|Df0A)$hz)T6K$*5!0wn{BK#;7BJ^o=@1DS1~^rAc<|^tCd6
z{0?o>?nRR-N#eX1{eVc+572Y91A-!OhtRx^t(MpB23rZR8^)NVKfF^V^t=)_Dbe!f
zUC|pivC(7aKpp~-{@D$|1BSt$717{t<HnA1sPT9<dkoAB6-xJbhn6TI;1Zu6_)5R7
zk)?7#5SuwgjTw=mfHeGKuSI3?P#Y&R@}b8*m^`^gy7f8{Zycq_D;Le$N0ixu8%>=4
z8i+l(-Ka&g9-2L*id-?I6;3276Dfas@>m%(WVZ|(<{^0ZsTwlaLGs}hMY_IsgI8JR
z_m!8r$>vR+<+4w0k}lmkgRo%&GI10v;xMFC1yYvS$pTjuLAtpo0?Hs!?OxYFPd2to
z#Rw;LH{6-rAd}9?9a|Ri2YR${*u-1nKLG05k(1%ykMm$K3%l4r-r+-w_I(jk073N`
z*!B2Q<_xU2fyKTMuCRR_MX$2<3);*CQ?gdEGbtkxsj#Gwe5jja#yAppNw{pj_b7yp
zq9oL8t^~!!pMEb?`eCgHF|Nf3v*><{pmyr8#V;uV0*E*SfpWL1BUN4~w;)2ZBgQE(
z0MwwbAKj@nXK|3XX~-YPQ8yqq{fwAOKVp{<*y-I8?H9uzHz|>d^7Y>~My;aZI7L6^
zzVt0C>MKQD5QtUkMt_H~6n%+t9v-`m8jJPp^>zBvCp-*{QZ>f5BknuZhDI+B*X$8K
zp@5kXzv{-5-Iz@~jAATfo019z#`9_*<5}+gW_>_-8UxzgOXbe;;k70YflZ&>{12?P
zU?IOfnJDR7;pS({EV56&7`*$iIDQl9#le({s!JEOimxS6PpTmNFl}(NOSdS;9D0*B
z4>D>8^y#)T0T2?&8aVHWstd2j#%e!>v?r1MPJPuyNCfV|GP-`;3Dek?c*V<U;GI|c
zP127vI%+$ew?1g7>V{_2WaT6b>UKEpytS+&@WO{%77V@k`yixzJW;U|Y}>>qP!&NY
z3$8K}B5Oc78!9%=yMdO+vW=pb_f!{V8rHgMg1nncoT_eLi4)dm-X0h##c&CzS$9JC
zRQ564C8K-vfr_0jAbX?&8N>L@(-<=uBCWU4J(RU2p<SBbi%$$+^cs;9U#p+NLdg|R
zmgqj!dfy35N-kBeDgqM?3eGla$ssP#DZ644S0o$-mU7-MkrLSO@gi_VK}}IW1@6^x
z>UbG9ftieYpo|rKpka~2jD*4aHk7!q;QH)M%v}kj@2I}`k40d8_*M1w7~LiQlfGs*
z$zr|mk`m#So^#n!<YtJ02pfGM#IFy`thH5~Mxe&g$*Y(!sMb<=mdVbk973*s*?(4v
z0}Zb%#`@n?lexJO;^iUG{10OF%XyNCRbahKUHLKEi6><2dCPLz9u6ndXB|t-fjk1v
z>lld9MB>YfIH;E`8!1gPx>QUhfoTW~MLY@CnG?b|)$2~dZ;}3)6vGMEHl^VHG8HCV
zGnVHXq0tmnQc<%y+7QBtGz?fCQdL9CG-Is_IaW<VHLmrEugZ+J=%s~&FTN0><)cL}
zmaJ4S6VmwlYBNOWNbf*;k-k&4vS-g42rPw{DJK4nh98cCt1v)By5L3!^Z@beY~`&i
z*M%FXtau0lu42pA07&eq^bli4qz>#u;o}`-A7Y3KovU1_oZ2rD9|p9jIJIH{13@&T
z9z#OV@L2}-zbdv6O-N$(g@VbYQkBD1r0ePDLjW?jC<4zBontsC%B4l5z!exlCHQ+{
z4zg;Ml!13-JT5Y#Za*+no*vQ+q{1JKUT7s0Ic7NoB`!q6X%eclT+skW$;3Bg^k`iy
z?O$fh{0REkD@u2y7&i}>W?8Eluc}1C7S|0h$MT=1UQ!~<s;oxRCz)`_264Npp5W6h
z+zAO5Lf@i%%-S#AU=ZDAit4z<Any`Hop)owufk%JDUeu%S6%40S6hAGVd04q93H!q
zygaKP;`J=?sGPD%Y!u*>{WdWWrPnrrv@)e?0>tJ7p5~oLAUHiB{1)vW{nG4&R>ZW-
z3RZ(EIX1?F8AR?#6MPuKnL_R%8jGPCFM^aB8RwO_V?BsB&!y+@%7gZSo=%2|9603S
zYf-TVkaF=yDi_Yis}}aYgb8~AWtdh`ALTpEaLsZCOVL*w^CmQy73s;ts|X+j`q1v=
z9E6KB5J|;KMv-f`RD4+ZwcQbRoCXKYx4~b*n9%}%MlOZw6c>b9|0^JPq7$$p>s)rV
zzTqeAo*ygTCtc9WsTF&nh;1D<){-1<afsA*U^DDbJ0?Z<QH|OLMH8pEL0ecrKIhH4
zB9V~3{CGvx7s|D1AL*P~kZ|%bit2?dqaskrid!@ymr5FfMr+=+qQ4kbHaCA&G+zAS
zP#PLO4`Dd0pex0b5|ISUd5gJ>LfIqXF?I)8WTFp?j(EG$3ROeEXw!w$%={yUkC=2x
z1bsItls%vESn3b$fGPCNQNzJnuYz^PT1%{Dz3AEqU-bJE`vD|L;Z!H#A-C?%sZ(pE
zbC13zYGFB%w?UMs2x@Ag^*<=qw;`;nVsP-@2n#rQE@;2hjW}w^;Cx-bsw_1yle#&F
zEgI#~-EUn9RIr`Hx0DRplLRkTI97Xt@#n9oa95jOo`1^4J<;G_>n1ZQ4&HT>ODKVy
zA%F~GBRsDL%8OQ%pa3OhRRqRvN!9`@^tYvN4H#;ve^l<%kt!zeB5*?3wgnn0u|u3&
z{Qq5h2w;<xNZyGksmMUoybVT0kSm2FLnPeSa)_rw6=R?;<qq8i*LdJ3nUKX<&c|(~
z5#N;a_Ngql+KBcya7;=`4-uDpOwKj+-_OJ<Fyb5Kl%pd%!+ER3BBNt+AEBxN-BeXo
z5T^wD1`Mp%W5w1sL=;&aU6GLKi27sL#$#e@w2l!pqqg?jwE1zgb|28)w*4%dBnEzP
zW?H<^yh3PRrR}_ufO@tg7{@>=bN|UKbaZsVHDzN|mw1P|a0H&JEL0+6nMj#IK-x2c
zagbXgS`a0OIqg>>NOVGdN3dV;=0txT4GC^^k=ec($p<3CIIc=+*I_3=3Cw2{{9#ij
zPCR6y7A9&2Kok^;yn~1`AV>(+f3>tHtq>6r+5haVAl&HthxZ_pcqx(XpY}^*3yAse
z-4*WFBYX&WVj7fkO)Lk^3x{l{v+G0eS3}FHgd)c%#C7hI(tJzpP|jR6ZQFuD7vZrX
z6N*1xBL!MS3S<w^Vhjg`h=b7(TSi52DiC_AkjfOr1&)P^pu8U4z1jP#_D`bu4Dy))
zeHeo0k}W`8p*y*EXP963%C0>BG~00v8aaoNChajYvoP(0_pm&VWRlLH1KGZ*#KMu)
z>`~YN#4Etn*`JwhUtd3%f&P*g!v<)I>f(>*?YJ)~Q^|(bRw{zsJWHdxMVegGjbfa)
z7#%fYX$BU(=$O@3;7GTr(L<_~A$s44e!#d+WG=HrlzJmr)>`_ea~H4Ja;J<NGc8`@
zHf}X%PG7{ds%A1DPTp7%vs!8#6M^tCVq`TO?3B|}<A$jzltXR|8qCM|@8=mH#?2qV
z$H%jg3S{18TsS%?LpT{&S)$u;E)hL0awaHqqU)<FagUt;;fjNcb;Yk!L)4>=?=4RA
zNrjg2n#vb<)~wqvn6<qC02fwCL_t)Z->mFGFr;x*5qv)2Vj_7BiyYQ7As?O+7Ks31
zq4^uE>aCJYhucGvcxI$*4KkGb4d`>?stAI8Y{oug!ugw7&vEw0Af(vGi-unGIaJ-J
zWC5rfphcuW*L#buF;~_auCtFvEoKkNQxP~jK<aSeVG*yPBKpy$Z_d+AztG2PlBtM=
zv7N~CPvjRyh4DG@yb<)V;B3?vMy2B8ZRTtrut|R$D=Cy24V`L)R($RwOJ=P00h=qY
z&b$gL;YN-F$kANM{AmLfff4|2D#`F7G`|Z>t)DQ-t26|KE}$6j6b8QW8UfBtRjdXW
z3M;x%qXAXK`@)C{ooMck3ahZ}Cn3vc@vRT1KQC<GmNk~loOLrRbQ1HIT|;qV^%qNS
z1h!xk)Qw?7_)Z(O)+xM8kDzs%#_1D-qH#Z9WjBU+aNIsPss|>vfCPv{O^YqKCq^@F
za^VI4YMh94%O7x2ji+)8!fLDI7hdQjoq8P023RF6*bY>S#u;$AW=-X5Bl3<air1`~
zCMq9kvXj+(pXqqtsE$#?BTI|ww5zg1j_H{YBvKTZa$0t3w^Y|e=pSRVuuDk?`;+Ne
zRD(uMauoD9NI{TT&0C3T8O4Y$J1uQ^v}ovsxc()shm%#cK#rjvl)(Wt9Hc(7v_}yo
z-;sX%?p_3;4Wd{Ltk8r7O*+s>2@2GC*`ob|N>K?zq<z<gmvtuuaqou|BRgSq#I5QE
z2Bx_ddigzb$A~+jvkpm0Y$A`<x;eeS`RS3XXPEU7_#k*x!db$`h2^8iDSMA^GZleO
z>N@_%(Q&|e2c!CF-^`}EmV=lo0yDwA-DT7YqejpBLVd{HC8>R59htZXQ3(~zvPXuu
z0Eg{hZJxA#d{__zbLMoFL#fX(w%+{LMMMH0mX)LKK$ar$ki{4vp2nifNM-zHa8{br
zAhc*y*RXypS<c&lqEE(1HKIGAB5yZanWxLtZDu{N)*7&p|3Ija@Pv2D-jXTmuZ*D-
zb-G5v79FP|vG@H3ma~Y&PJbo;N1X4;2h*kp>Wz}F>cN_Dzl3UtyJP}mKU6L$dk=)b
z?!Zihe6)&ililF9({c!Vqhwl%sd%LYSk-nnX5Q_e5yjUcibpqZKG_IhRo9;+A(l_<
zWF!pLWWx+yGGj{@Q4u7G#h@;fVT#%=*w`#3t5vGC3Bm+b8-b#BZ+l-RO*$;r$FRjO
zADB02!VAeNxtaZO0CR4>39QTCWAr2vie@+n8q^#Ds0jG>Gbj<n+r**nALR|UbLP}J
zhSeJIYRFt9CIF#SS4Qm@t$PDcjUx?n0x_Y4$!cQ;nDgAqClEUtp;7IPe4}*6*r<{Z
zR`6c>RvAc%J4nH?c+cXdsdX~bS6#RSff4T=^JOOX3%n@w8wMe{6n$H$2wVb2IT%D%
zC3;t`+H*~$gW20!qayHP3#b8$SxIi+yj7KbNSGr<9DV6pjeoPwS)9N{I!>3`O)^q-
zb5s|q*W|#yyAKOuprPS(avEI82A@Hes`qw=GHxPCMv$sF_AzW)ip2A|c|sVYZg3)P
z46F%6`@yB53AtQ1o(P+Qd3#94M1vM())@q6f-xGG9RKZxJ8+{r>ZYfJlUrOv#O0jm
zdkt4yH%>wpn+RkYd_<8UQ30J7@jiJy9FPy;uKM~aNs$~%)hk)j$9=G7CUoqLQXS3(
zD$v_1*PRd}WJ@!WB3Y<W91x>;aSD>yLuno&Ehb|k!GXvU<yJ)an=ooAY!5s{PKHAD
zArBvHt4z3NGhe)8GHiw|CP`98-C*OU=+rKkaiqfrdxQn?LEooIjuOpD{N+`=uf%|f
z68H`j_s;w!Q>ibimuGCmDaiWXW2UtoI#dy5<^`9BqBaMJ+BLaRmh+|wQ>N`#a)ix5
z0OgbihvW&5vV<Wll&R)!CCccJe(zD>WS`TW{vovpNRA*<m_LFb;Q<q~up-jPjb1r(
z>GZkzAY6i=V@Kt_FJJ(=L8Al4m`>yr{zIY0@gmTV&gsWw)VP$YkqU&PbaQ*C{lS2(
z2<L571hLjS$iqYmR8E{17Q1iSQ(Z`G_}-$SKN`45NEywF)f*xe8*ag~;jq=v#`&R)
zt@~Rf7$3yVy4gF)OBm5PAjs?!jH{_tu&A;(lsU>J29!e84-ihWOq=4D*fh;Yr-TWI
z8F#{n+y?8EcWIr(fA=ZIkC#62@wgQc{;Dm5Wh|!I_`Cw4Z44U2yF8heR$?f9fJ4so
zON|n1s&1Ea&t2z1Zuj5%dd68x=x6o&E>WVY2pk)tQ&S+TktiFgmE4o33@Y)UBGoDO
zqeKEu-t2Fg8?gMZRzuZ@3r<x83B>!U1iF6S3A;0W+lh2_ZzKsrRic-q(x@)-it(68
z5@@LOROYpCPtzF9C2+qsQ67<Y?9`YJhYvA;y5N{}OY(Ba0JYkG*G!wc_l75W{DG@s
zu7xXL=A%&Yx$8pwUX-^9QdKVk)>yFE2Ouhz#SrcHfQ>j6!$FrZ^bI3pNyANt7~jbp
zxH#H%$6vw6KtQ(e<dYH;^vjn3Fi$W^&NF8&owhMJYVX*6nChix%(`8Y&VAghD-mi}
zIU{2X=iM9jmkH*Dxl9(~!I*}F`ZUdxU<K6|txyrD$Tk>TfM5`uZ{R7>H+**{*sucJ
zp9x%qTMI@W{^sr87yhq>yQI3@xq7B`{33a1=Q3jkh%%|RC0N<FQLzvqs~evKLDd@F
ze6~Bgfb%Z%j!KG6K7%{6mqQ#`Bv=wn9)#3Lr4)kCcpNx|iHY=MM1rCToMHe>sAohb
zw}mAt+I|N&)c(L+7h+T&{4F!y#JeN~!4i*gFX*6(zMYhM`*bC-8KQ39gW=>0?hIF<
zVT==~2>hZ3jpPrgieccZeM=_r>d4qbsIgzN1|s%Qbfjh@{YxZ!`w|8hk#CRfF`?tJ
z@Ql#(%j(kHt4a}_?r-g0<_)><thAN5fDJf<+(5Y&-$caXBDZWnA8pQJY2@cE#=buy
zIHl#*0DyhS#jx~g6Plz|&>4{zGb)0kATDayhd8uW)0d4($+oUInk4Bgc*{M&Ledb8
znP3pLtk{tdNg57$HRD~sE8X-=-Ljb_=PFBTj333MI*<DUh!dyZ#A7yome@KtEJh>^
zal8n;PM8qE8pMa9;&aiBI+neF8ttg~mW_sGB^ddsdt!WIfTl_`sWgD1fs0It*$RP%
z%*|#0pnJ5YLglaIE_IjrguMEXlgqaFpf4sn5em8uiGgf?i3Om#K5GI0RSX`#U}Xz;
zb`t<pcNo8<?P+W*{{VpdUSmO0shFn<adxvf<}%Ls27hS{1&)1-C2Q!;QvUNjB*q;!
z364^YIYwBqrYxtC>h~cA)Zf18;QO(O0avHq2bDvX7_i7>=+thEMGR;kO(^8FyP0bL
zOyZ>&#DE#Eu6fTel5ovcNzFhPM~dpsUW>I$w!OcI6L-H%H+PbkUV>?9|3VD90p(&4
zgzKSGZIEMtqsIhi8_04V`$tIxR}MD)Vm)B>PfALJDQ|P{3W%1-#DG2nI^bR4Y=;Dx
z&uLNaTknff81LS6I`t5JT+9<96P@(Q&AH&<El38$eJuxGE=LS#-?9XOp3R*3M>wP<
zdKjyyucu?LW>eM89t7U%f=vg0<0c+}QoD-GV-*z#6L1I#gM}ZdD5up1#W8)F2TY|1
z-48K7SVbP+lg0zrGJl&~Fi2|>shi`2Y=f3{=e&ccRgq*H7L3c1)^GTVe#}^7eSoGj
zO0*`eXQgh`?+MI9UV8Zp^>N-qioU!k<Ld5ZZ+N<u1689xeSazySj7Jb24+Q`oJc@y
zI=6FWy?<3zah+N&@z2}ypf*;tw$eS;aJ;If)ZjZoYx&YGieFLWokS(5#mJ|Dt7@RI
zZh*z1vbyY@NG{fy{*}5XbUhrsV{c&>)-@An-LkD=mtnQMCljz2m^7&oD9W6;#jeRS
zwDm50xW7$1_dL(r*xS0NS}pAU?$~hO197cLSP88EBip6qcEfQNLR9>jiBzd&?1CtM
zK`PzyUHaI{ae7^F-mgyCkDRsimFIvt$Eywd%cgofV^V`}v>58To!Hj3y6ZIy248qi
zIT*PF!L7I2xXj$a7Zjc1Qj2Lz{v=I}V?iKm%RMyoH4V1VlDLY2-5<J5@f)Gov`<FD
z&^m6^gYOWswkq*8;C_WF6<f8USo5T|=30>2o1y_-#CaeK%o!}N&6<!sZ-*nxo(iFu
zAyQiTe2cWD`}X}3pZV1o#jODW&x!@n5M%be!1<@&{-ROz(Vp&~hdMAD^8NHh`{D2o
z=7K=tOB!s_;@VYT2NaTzRu%`TKvm+GGG<IYeS%8}7H7CLH1rSFw99c_-F{K-v@MDQ
z*SvGnT9Eb%_K>*5f1oEsFH|nDrV1$wHUq6Khtz6+%R1SzK@DHyA#kq`ipcgs2<+Oj
zI5w=b?mLIpvSzdU_3ro8R>hsW+Ui=FI`s(ek?r++&c-(yQ+5i(7S)X-x5pr><sk1J
zh|lLEmv8lc<k<H7;Y+&ww#z{aMj}QY9=gX&vtOs58@71b3nQ1!SdXM3-hP%Ds?L#Z
zJF|x^n)bUv%U&`}^_feiHGtPw<<3UwGy2pC&yD`{rAg-ssfUqJB5_Ds$*QpnhF)~_
zg5hJblCuCP<~XmYKXcl;C$F~BDf(9Dzu34Q0io^1Am&Fjh%DmBeTXwfdiA_fCXC)7
z+qV23Vk71zO%e;o{vNgrR|CIwAF<a#M_!f=wby}+R`4-y1pd9=rAWV;tH6?nWz4Am
z&WT4~S2u_HfBCR1`v!SwQTvJiG%Rj&@=vV(`0rHPI_c*?yieqKOl;lyGH{hc3RiSf
zNjtAf!)p&R_uC5^jTtkWx^N$lEwA(J`(%_762W3W!&!Ed4PGjB?DeZ|^!+A@OuFSs
zU^kb#y<)xPG%&`8<-GG;t|-+!r2w97eUdt)l<iz5oVyLA);dC4iHdROt~V}nb#+aW
z!mzHj<xmPY$L4=YOS*MZ8tsSOv|BE&TW9(=X;NAa)^73<Z`6M3Ty?EkC!gfq#(|{>
zzX?gj1?R2j8_3<$)Wz^nD$AwTbUiw1_dbaGKf3hg4M;*7S_2y?!@_Di{ojl}JH8kI
z6^Yv^=h+cUrcbrx>GXhA(+)MK(|?Ofu&@(tl)VQZ8NTSHWnMRiEt>uhQ}0zo_{Fkf
zCpP7e8v;O?lR(+Ix9M-d4MljfBlLjz-Obj3I;AkK15%X}B;E1)1;Zx}4?MygmflS2
z8@@}QF3N9EaPG)#DDb=djmx{?wT90?Bz(g=jquwDg1uYDj(s(!O?`cDG#ro8rwEAA
zSqO|fe8f@T08!vvlLI%(iN>$CoL>NMMnSXshVKJ=d_jGw3gx)d#1^=qMB<`XUp)>3
zq2JNG+JLa-Ss6FxSEayxDD|^vpA9npOpIr3mQ?efN(RqS!^LFvHxRG8V=euF9dOKl
zVXdt%eG6Bnl7hE$%eO$5or>P4HXo`Q7&~@((d%0I+MGccqkXyL_22~!4wR6mAa+n|
z1xiE12oUAx0yUKn)nzqpO%}E3$uA8JV}Umzr`mF!=ee)v)V0US<jFPCt=Ea@!V8&<
za{Xy;NsFo-f?Te5fBl>2K2s6C_e?_##*;d*#V{vYHDz{p=~OHii}#>1zeXf|sCfTg
zAm&2n>Z8iEF1)0Kj}lO97C9F+euEPNmP#g4`!|=(ZK7U5iH`kE9tnMj)v|^8-JSEi
zb~;%!bmCPYtcZ3|PK%RDy)<IkE4rTxVURy!RV8x2gOKBa7}%V2tY?NUd9eVw&L1*y
z6xo$VRRRU!fIQs!$MB`o8$h7B?~%rfhg{M<owTn5!PiuR<z2_hazQ$|`Q?%G=9Of+
z)KdfVq_6NoOYW1VZwcog&9=R+TB<I?sIaVrNaHM2Iq4}HBSQO9=HrFyRk3*K0!QG0
zxX1jUfEds=V@E&BR4KO>rK|$x^##O$La3`FHok<DTqx(Ab{<1w@om~=IgN(;KhUSe
zQ99(`s|j&Z&DR01kQmUL_V4`#u)}e>Zft?CmLvug-nenhz4eqHnv#GUeD&3cAClL&
zjeb=;ZzJ-LQVbWK{#8k0Kw+s=%CV-E1?$MaW$Wf&RwM=#$i$DqL6CEySW$IAbJH)%
z5(C=Kq!q5<QfW2@qzqj<-&;ToD2&mg7cgI0m4?=pE!KN-sPVp{#DKQjvPC(pT>BSW
zE<7xZ$CNWYqSlBe%MLMkF_}IHF_0_r4qo4OHtxG1z$it<=sh~G^@#y(s~P?@{cqG#
zOe7zKaT$9{3u6dVg1Y`9NW|<@$(r)8^jV4Kb!CYG?TbnctmZ5MVArTIb!p}=O#j>H
zo|f&&=Uvyg&;Yk}Y^-|BBL=k9h-K6NjgaJ>&=4{=^4z&A7f=0NF=D{LT{3kxg1%g$
zKJOvG*h}<;Cr2!uKC>7xptmc0?t3M#X{l31#FIxXeDTF{#DF#iX>TP&!i%K<spJD!
z%BM#xoIdmH#V@bvdeC_Y3xcJk?$>$(-VAW8s_PdHn>bL<%P*4p`qMyi_rtj*^=7{~
z_-AY6ynK$xzaev=V(#i)kMNXZ^Dh;gJMw}Y(dAb%a%4#g$+W2`xgdd1B5@mid%NHn
zS}|)DAwuoPIO<yTdSN9Lp!1Y$+xDmt?-gFp*64hRrCfYfwle1kogX6Vy1MB(wWUrp
zV_e71kJF}?xkU{=$By}CsoOu4`qy9YNN}Q?c~-Zw&$I0VtdXZnzK3Fs8yc<!0hop9
zUsgC(iN7M&FXWj0n@SwaoP8y8H_}{H@x7CnB4YzK2PK;M)$aU%i}l~#uk#NujBI9n
z7mi-(R~0+ZpkGHHa}#UwxMG+6It#+Vw*PK6bHB34fd+?itZQ<v*r=Drj(R4iuDwpC
z&pK9W5@op(SJYm!L&l$-OWYLev)M!T9bfEHPMwO;lO1<T-N-Bh5WGPHMZG$wAF9KW
z+?9WOC0PEA98AXW_o&zVAvrAd&8sg{qpV)GNp85I!rlgFe@OaCO<oWJ?T>_<FRyPp
z-kEQlgtXP&yX~g!5Z;yN+iU*;{?0#r;)zzZ^F@$XdHf@?aMz-P)9V6}^t^7ZJmuor
z1D)kM_S^FN5DgSjR@v5+AxmE@juSkf{LVdT{E^8n)z{Ir4uNWOh<1N@w|z}7^j|v@
zX1H=$IC#P&NhWjmvz%t+M+k7|IhV?uEF5<6g^c^7!CNpQ++LeXPxkB%g4dP|zU1_l
zq&*Q^f{wxZ{9`4U%18*fy{--_Eb-ewLl$P@DHi|NDiQ<QXu>e4ANxlfmHrTn7+!7z
z(cM##7%&|%`g)86ixlO&HC1paVnCaW8iil8+*PD?VU=Y9m;7($;h~DefVS58vL!fQ
zS(r*hsq`Z(F`zBgz|c-T=mW82h=1H(2j`rFB{PzXa^3-H3}9-ieo^*46zhL7Ihn6F
zz$IB&$2#}KA_f$G&mPYMZzpSz^}@P|LJVkoo&TzY_9;&+XfKqlTYpiJ7*H6hBW`X|
zdjg2TB1H)m%lQj)g|`HpU8Q2yHuDlJNo%CM{(5<WBY6J@dHm*USn^kwww<uCCFzvh
z5Q-Ske(D}l$!Jlf2#p;#mLvugj;_~E$;x_vh1IPBEQRNlNkoiO5xzm%US;67Dx>SK
zL=0#X!`b)P6ll$sp<~;<G4y<Sjdi@W0Z%Wxx`!xndKi>5-=4Y-fyL}nUBN28Ic3Z9
z!xv4RQj8eTcB=Qcn^Mn$#LC8z!5DATerNBaVTb{Rt1<m;JCVnQBNK4aQ?WUCIxI1u
zuu?m>PhsBy2j&;2B?Y|Ui>5v0iR$z3D0hy*;VUe+_1-<q!P~W|b-yh}4Cp;N_S#hA
kLxd_OR!iyPSm~Yr126_?TFVolBme*a07*qoM6N<$f~1vIApigX

literal 0
HcmV?d00001


From 34d914fce3db68dbe863f06e399a8ae3afbd0f17 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?George=20Ga=C3=A1l?= <gb12335@gmail.com>
Date: Mon, 19 Apr 2021 22:16:54 +0300
Subject: [PATCH 583/788] Update node-resource-managers.md

fix typo
---
 content/en/docs/concepts/policy/node-resource-managers.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/policy/node-resource-managers.md b/content/en/docs/concepts/policy/node-resource-managers.md
index ce9e6be98b..719e8b1151 100644
--- a/content/en/docs/concepts/policy/node-resource-managers.md
+++ b/content/en/docs/concepts/policy/node-resource-managers.md
@@ -19,4 +19,4 @@ The configuration of individual managers is elaborated in dedicated documents:
 
 - [CPU Manager Policies](/docs/tasks/administer-cluster/cpu-management-policies/)
 - [Device Manager](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#device-plugin-integration-with-the-topology-manager)
-- [Memory Manger Policies](/docs/tasks/administer-cluster/memory-manager/)
\ No newline at end of file
+- [Memory Manager Policies](/docs/tasks/administer-cluster/memory-manager/)

From f156e9eb6e3c1dd7c9c57dce80e8d04bc0292ed8 Mon Sep 17 00:00:00 2001
From: "Lubomir I. Ivanov" <lubomirivanov@vmware.com>
Date: Tue, 20 Apr 2021 01:31:28 +0300
Subject: [PATCH 584/788] container-runtimes: fix 404 link to cgroup driver
 migration guide

The URL needs a leading '/', otherwise it points to:
https://kubernetes.io/docs/setup/production-environment/container-runtimes/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver
---
 .../en/docs/setup/production-environment/container-runtimes.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index 59a38fbc91..7b1d3673cb 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -59,7 +59,7 @@ configuration, or reinstall it using automation.
 
 ### Migrating to the `systemd` driver in kubeadm managed clusters
 
-Follow this [Migration guide](docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
+Follow this [Migration guide](/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
 if you wish to migrate to the `systemd` cgroup driver in existing kubeadm managed clusters.
 
 ## Container runtimes

From ae197690de7fee20f4e5a506da76a4605e105e83 Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Mon, 19 Apr 2021 21:10:33 -0300
Subject: [PATCH 585/788] Move portuguese content to pt-br to correct shortcode
 problems and add redirection (#27413)

* Move portuguese content to pt-br to correct shortcode problems and add a redirection

* Correct small shortcode

* Move portuguese content to pt-br to correct shortcode problems and add a redirection

* Add missing print page shortcodes
---
 config.toml                                   |   6 +-
 content/{pt => pt-br}/OWNERS                  |   0
 .../{pt => pt-br}/_common-resources/index.md  |   0
 content/{pt => pt-br}/_index.html             |   0
 content/{pt => pt-br}/blog/_index.md          |   0
 ...ng-kubernetes-networking-endpointslices.md |   0
 ...-12-02-dont-panic-kubernetes-and-docker.md |   0
 content/{pt => pt-br}/case-studies/_index.md  |   0
 .../chinaunicom/chinaunicom_featured_logo.png | Bin
 .../case-studies/chinaunicom/index.html       |   0
 content/{pt => pt-br}/community/_index.html   |   0
 .../community/code-of-conduct.md              |   0
 .../{pt => pt-br}/community/static/README.md  |   0
 .../community/static/cncf-code-of-conduct.md  |   0
 content/{pt => pt-br}/docs/_index.md          |   0
 content/{pt => pt-br}/docs/_search.md         |   0
 content/{pt => pt-br}/docs/concepts/_index.md |   0
 .../docs/concepts/architecture/_index.md      |   0
 .../concepts/architecture/cloud-controller.md |   0
 .../docs/concepts/architecture/controller.md  |   0
 .../architecture/master-node-communication.md | 105 ++++++++++++++++++
 .../concepts/cluster-administration/_index.md |   0
 .../concepts/cluster-administration/addons.md |   0
 .../cluster-administration/certificates.md    |   0
 .../cluster-administration-overview.md        |   0
 .../kubelet-garbage-collection.md             |   0
 .../cluster-administration/logging.md         |   0
 .../cluster-administration/networking.md      |   0
 .../docs/concepts/configuration/_index.md     |   0
 .../organize-cluster-access-kubeconfig.md     |   0
 .../docs/concepts/containers/_index.md        |   0
 .../containers/container-environment.md       |   0
 .../containers/container-lifecycle-hooks.md   |   0
 .../docs/concepts/containers/images.md        |   0
 .../docs/concepts/containers/runtime-class.md |   0
 .../docs/concepts/extend-kubernetes/_index.md |   0
 .../extend-kubernetes/api-extension/_index.md |   0
 .../api-extension/apiserver-aggregation.md    |   0
 .../compute-storage-net/_index.md             |   0
 .../compute-storage-net/network-plugins.md    |   0
 .../concepts/extend-kubernetes/operator.md    |   0
 .../docs/concepts/overview/_index.md          |   0
 .../docs/concepts/overview/components.md      |   0
 .../concepts/overview/what-is-kubernetes.md   |   0
 .../overview/working-with-objects/_index.md   |   0
 .../overview/working-with-objects/names.md    |   0
 .../concepts/scheduling-eviction/_index.md    |   0
 .../scheduling-eviction/kube-scheduler.md     |   0
 .../scheduling-eviction/pod-overhead.md       |   0
 .../docs/concepts/security/_index.md          |   0
 .../docs/concepts/security/overview.md        |   0
 .../concepts/workloads/controllers/_index.md  |   0
 .../workloads/controllers/cron-jobs.md        |   0
 .../{pt => pt-br}/docs/contribute/_index.md   |   0
 content/{pt => pt-br}/docs/home/_index.md     |   0
 .../docs/home/supported-doc-versions.md       |   0
 .../{pt => pt-br}/docs/reference/_index.md    |   0
 .../access-authn-authz/authentication.md      |   0
 .../access-authn-authz/bootstrap-tokens.md    |   0
 .../glossary/alternate-x509-schemes.md        |   0
 .../glossary/cloud-controller-manager.md      |   0
 .../docs/reference/glossary/cluster.md        |   0
 .../docs/reference/glossary/cncf.md           |   0
 .../docs/reference/glossary/cni.md            |   0
 .../reference/glossary/container-runtime.md   |   0
 .../docs/reference/glossary/containerd.md     |   0
 .../docs/reference/glossary/control-plane.md  |   0
 .../docs/reference/glossary/controller.md     |   0
 .../docs/reference/glossary/cri-o.md          |   0
 .../docs/reference/glossary/cri.md            |   0
 .../glossary/customresourcedefinition.md      |   0
 .../docs/reference/glossary/etcd.md           |   0
 .../docs/reference/glossary/kerberos.md       |   0
 .../docs/reference/glossary/keystone.md       |   0
 .../docs/reference/glossary/kube-apiserver.md |   0
 .../glossary/kube-controller-manager.md       |   0
 .../docs/reference/glossary/kube-proxy.md     |   0
 .../docs/reference/glossary/kube-scheduler.md |   0
 .../docs/reference/glossary/kubelet.md        |   0
 .../docs/reference/glossary/ldap.md           |   0
 .../docs/reference/glossary/node.md           |   0
 .../docs/reference/glossary/pod.md            |   0
 .../docs/reference/glossary/saml.md           |   0
 .../reference/glossary/tls-common-name.md     |   0
 .../docs/reference/glossary/uid.md            |   0
 .../docs/reference/glossary/username.md       |   0
 .../docs/reference/kubectl/_index.md          |   0
 .../docs/reference/kubectl/cheatsheet.md      |   0
 content/{pt => pt-br}/docs/reference/tools.md |   0
 content/{pt => pt-br}/docs/setup/_index.md    |   0
 content/{pt => pt-br}/docs/sitemap.md         |   0
 content/{pt => pt-br}/docs/tasks/_index.md    |   0
 .../docs/templates/feature-state-alpha.txt    |   0
 .../docs/templates/feature-state-beta.txt     |   0
 .../templates/feature-state-deprecated.txt    |   0
 .../docs/templates/feature-state-stable.txt   |   0
 content/{pt => pt-br}/docs/templates/index.md |   0
 .../{pt => pt-br}/docs/tutorials/_index.md    |   0
 .../docs/tutorials/hello-minikube.md          |   0
 .../tutorials/kubernetes-basics/_index.html   |   0
 .../create-cluster/_index.md                  |   0
 .../create-cluster/cluster-interactive.html   |   0
 .../create-cluster/cluster-intro.html         |   0
 .../kubernetes-basics/deploy-app/_index.md    |   0
 .../deploy-app/deploy-interactive.html        |   0
 .../deploy-app/deploy-intro.html              |   0
 .../kubernetes-basics/explore/_index.md       |   0
 .../explore/explore-interactive.html          |   0
 .../explore/explore-intro.html                |   0
 .../kubernetes-basics/expose/_index.md        |   0
 .../expose/expose-interactive.html            |   0
 .../expose/expose-intro.html                  |   0
 .../kubernetes-basics/scale/_index.md         |   0
 .../scale/scale-interactive.html              |   0
 .../kubernetes-basics/scale/scale-intro.html  |   0
 .../admin/logging/fluentd-sidecar-config.yaml |   0
 .../two-files-counter-pod-agent-sidecar.yaml  |   0
 ...o-files-counter-pod-streaming-sidecar.yaml |   0
 .../admin/logging/two-files-counter-pod.yaml  |   0
 .../examples/debug/counter-pod.yaml           |   0
 content/{pt => pt-br}/includes/index.md       |   0
 content/{pt => pt-br}/partners/_index.html    |   0
 i18n/{pt.toml => pt-br.toml}                  |  15 +++
 static/_redirects                             |   4 +-
 124 files changed, 126 insertions(+), 4 deletions(-)
 rename content/{pt => pt-br}/OWNERS (100%)
 rename content/{pt => pt-br}/_common-resources/index.md (100%)
 rename content/{pt => pt-br}/_index.html (100%)
 rename content/{pt => pt-br}/blog/_index.md (100%)
 rename content/{pt => pt-br}/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md (100%)
 rename content/{pt => pt-br}/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md (100%)
 rename content/{pt => pt-br}/case-studies/_index.md (100%)
 rename content/{pt => pt-br}/case-studies/chinaunicom/chinaunicom_featured_logo.png (100%)
 rename content/{pt => pt-br}/case-studies/chinaunicom/index.html (100%)
 rename content/{pt => pt-br}/community/_index.html (100%)
 rename content/{pt => pt-br}/community/code-of-conduct.md (100%)
 rename content/{pt => pt-br}/community/static/README.md (100%)
 rename content/{pt => pt-br}/community/static/cncf-code-of-conduct.md (100%)
 rename content/{pt => pt-br}/docs/_index.md (100%)
 rename content/{pt => pt-br}/docs/_search.md (100%)
 rename content/{pt => pt-br}/docs/concepts/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/architecture/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/architecture/cloud-controller.md (100%)
 rename content/{pt => pt-br}/docs/concepts/architecture/controller.md (100%)
 create mode 100644 content/pt-br/docs/concepts/architecture/master-node-communication.md
 rename content/{pt => pt-br}/docs/concepts/cluster-administration/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/cluster-administration/addons.md (100%)
 rename content/{pt => pt-br}/docs/concepts/cluster-administration/certificates.md (100%)
 rename content/{pt => pt-br}/docs/concepts/cluster-administration/cluster-administration-overview.md (100%)
 rename content/{pt => pt-br}/docs/concepts/cluster-administration/kubelet-garbage-collection.md (100%)
 rename content/{pt => pt-br}/docs/concepts/cluster-administration/logging.md (100%)
 rename content/{pt => pt-br}/docs/concepts/cluster-administration/networking.md (100%)
 rename content/{pt => pt-br}/docs/concepts/configuration/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/configuration/organize-cluster-access-kubeconfig.md (100%)
 rename content/{pt => pt-br}/docs/concepts/containers/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/containers/container-environment.md (100%)
 rename content/{pt => pt-br}/docs/concepts/containers/container-lifecycle-hooks.md (100%)
 rename content/{pt => pt-br}/docs/concepts/containers/images.md (100%)
 rename content/{pt => pt-br}/docs/concepts/containers/runtime-class.md (100%)
 rename content/{pt => pt-br}/docs/concepts/extend-kubernetes/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/extend-kubernetes/api-extension/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md (100%)
 rename content/{pt => pt-br}/docs/concepts/extend-kubernetes/compute-storage-net/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md (100%)
 rename content/{pt => pt-br}/docs/concepts/extend-kubernetes/operator.md (100%)
 rename content/{pt => pt-br}/docs/concepts/overview/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/overview/components.md (100%)
 rename content/{pt => pt-br}/docs/concepts/overview/what-is-kubernetes.md (100%)
 rename content/{pt => pt-br}/docs/concepts/overview/working-with-objects/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/overview/working-with-objects/names.md (100%)
 rename content/{pt => pt-br}/docs/concepts/scheduling-eviction/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/scheduling-eviction/kube-scheduler.md (100%)
 rename content/{pt => pt-br}/docs/concepts/scheduling-eviction/pod-overhead.md (100%)
 rename content/{pt => pt-br}/docs/concepts/security/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/security/overview.md (100%)
 rename content/{pt => pt-br}/docs/concepts/workloads/controllers/_index.md (100%)
 rename content/{pt => pt-br}/docs/concepts/workloads/controllers/cron-jobs.md (100%)
 rename content/{pt => pt-br}/docs/contribute/_index.md (100%)
 rename content/{pt => pt-br}/docs/home/_index.md (100%)
 rename content/{pt => pt-br}/docs/home/supported-doc-versions.md (100%)
 rename content/{pt => pt-br}/docs/reference/_index.md (100%)
 rename content/{pt => pt-br}/docs/reference/access-authn-authz/authentication.md (100%)
 rename content/{pt => pt-br}/docs/reference/access-authn-authz/bootstrap-tokens.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/alternate-x509-schemes.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/cloud-controller-manager.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/cluster.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/cncf.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/cni.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/container-runtime.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/containerd.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/control-plane.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/controller.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/cri-o.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/cri.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/customresourcedefinition.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/etcd.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/kerberos.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/keystone.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/kube-apiserver.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/kube-controller-manager.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/kube-proxy.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/kube-scheduler.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/kubelet.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/ldap.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/node.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/pod.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/saml.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/tls-common-name.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/uid.md (100%)
 rename content/{pt => pt-br}/docs/reference/glossary/username.md (100%)
 rename content/{pt => pt-br}/docs/reference/kubectl/_index.md (100%)
 rename content/{pt => pt-br}/docs/reference/kubectl/cheatsheet.md (100%)
 rename content/{pt => pt-br}/docs/reference/tools.md (100%)
 rename content/{pt => pt-br}/docs/setup/_index.md (100%)
 rename content/{pt => pt-br}/docs/sitemap.md (100%)
 rename content/{pt => pt-br}/docs/tasks/_index.md (100%)
 rename content/{pt => pt-br}/docs/templates/feature-state-alpha.txt (100%)
 rename content/{pt => pt-br}/docs/templates/feature-state-beta.txt (100%)
 rename content/{pt => pt-br}/docs/templates/feature-state-deprecated.txt (100%)
 rename content/{pt => pt-br}/docs/templates/feature-state-stable.txt (100%)
 rename content/{pt => pt-br}/docs/templates/index.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/_index.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/hello-minikube.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/_index.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/create-cluster/_index.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/deploy-app/_index.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/explore/_index.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/explore/explore-interactive.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/explore/explore-intro.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/expose/_index.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/expose/expose-interactive.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/expose/expose-intro.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/scale/_index.md (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/scale/scale-interactive.html (100%)
 rename content/{pt => pt-br}/docs/tutorials/kubernetes-basics/scale/scale-intro.html (100%)
 rename content/{pt => pt-br}/examples/admin/logging/fluentd-sidecar-config.yaml (100%)
 rename content/{pt => pt-br}/examples/admin/logging/two-files-counter-pod-agent-sidecar.yaml (100%)
 rename content/{pt => pt-br}/examples/admin/logging/two-files-counter-pod-streaming-sidecar.yaml (100%)
 rename content/{pt => pt-br}/examples/admin/logging/two-files-counter-pod.yaml (100%)
 rename content/{pt => pt-br}/examples/debug/counter-pod.yaml (100%)
 rename content/{pt => pt-br}/includes/index.md (100%)
 rename content/{pt => pt-br}/partners/_index.html (100%)
 rename i18n/{pt.toml => pt-br.toml} (94%)

diff --git a/config.toml b/config.toml
index 170e6b1091..e1ef9db014 100644
--- a/config.toml
+++ b/config.toml
@@ -399,15 +399,15 @@ time_format_blog = "02.01.2006"
 # A list of language codes to look for untranslated content, ordered from left to right.
 language_alternatives = ["en"]
 
-[languages.pt]
+[languages.pt-br]
 title = "Kubernetes"
 description = "Orquestração de contêineres em nível de produção"
 languageName ="Português"
 weight = 9
-contentDir = "content/pt"
+contentDir = "content/pt-br"
 languagedirection = "ltr"
 
-[languages.pt.params]
+[languages.pt-br.params]
 time_format_blog = "02.01.2006"
 # A list of language codes to look for untranslated content, ordered from left to right.
 language_alternatives = ["en"]
diff --git a/content/pt/OWNERS b/content/pt-br/OWNERS
similarity index 100%
rename from content/pt/OWNERS
rename to content/pt-br/OWNERS
diff --git a/content/pt/_common-resources/index.md b/content/pt-br/_common-resources/index.md
similarity index 100%
rename from content/pt/_common-resources/index.md
rename to content/pt-br/_common-resources/index.md
diff --git a/content/pt/_index.html b/content/pt-br/_index.html
similarity index 100%
rename from content/pt/_index.html
rename to content/pt-br/_index.html
diff --git a/content/pt/blog/_index.md b/content/pt-br/blog/_index.md
similarity index 100%
rename from content/pt/blog/_index.md
rename to content/pt-br/blog/_index.md
diff --git a/content/pt/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/pt-br/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
similarity index 100%
rename from content/pt/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
rename to content/pt-br/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
diff --git a/content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md b/content/pt-br/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
similarity index 100%
rename from content/pt/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
rename to content/pt-br/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
diff --git a/content/pt/case-studies/_index.md b/content/pt-br/case-studies/_index.md
similarity index 100%
rename from content/pt/case-studies/_index.md
rename to content/pt-br/case-studies/_index.md
diff --git a/content/pt/case-studies/chinaunicom/chinaunicom_featured_logo.png b/content/pt-br/case-studies/chinaunicom/chinaunicom_featured_logo.png
similarity index 100%
rename from content/pt/case-studies/chinaunicom/chinaunicom_featured_logo.png
rename to content/pt-br/case-studies/chinaunicom/chinaunicom_featured_logo.png
diff --git a/content/pt/case-studies/chinaunicom/index.html b/content/pt-br/case-studies/chinaunicom/index.html
similarity index 100%
rename from content/pt/case-studies/chinaunicom/index.html
rename to content/pt-br/case-studies/chinaunicom/index.html
diff --git a/content/pt/community/_index.html b/content/pt-br/community/_index.html
similarity index 100%
rename from content/pt/community/_index.html
rename to content/pt-br/community/_index.html
diff --git a/content/pt/community/code-of-conduct.md b/content/pt-br/community/code-of-conduct.md
similarity index 100%
rename from content/pt/community/code-of-conduct.md
rename to content/pt-br/community/code-of-conduct.md
diff --git a/content/pt/community/static/README.md b/content/pt-br/community/static/README.md
similarity index 100%
rename from content/pt/community/static/README.md
rename to content/pt-br/community/static/README.md
diff --git a/content/pt/community/static/cncf-code-of-conduct.md b/content/pt-br/community/static/cncf-code-of-conduct.md
similarity index 100%
rename from content/pt/community/static/cncf-code-of-conduct.md
rename to content/pt-br/community/static/cncf-code-of-conduct.md
diff --git a/content/pt/docs/_index.md b/content/pt-br/docs/_index.md
similarity index 100%
rename from content/pt/docs/_index.md
rename to content/pt-br/docs/_index.md
diff --git a/content/pt/docs/_search.md b/content/pt-br/docs/_search.md
similarity index 100%
rename from content/pt/docs/_search.md
rename to content/pt-br/docs/_search.md
diff --git a/content/pt/docs/concepts/_index.md b/content/pt-br/docs/concepts/_index.md
similarity index 100%
rename from content/pt/docs/concepts/_index.md
rename to content/pt-br/docs/concepts/_index.md
diff --git a/content/pt/docs/concepts/architecture/_index.md b/content/pt-br/docs/concepts/architecture/_index.md
similarity index 100%
rename from content/pt/docs/concepts/architecture/_index.md
rename to content/pt-br/docs/concepts/architecture/_index.md
diff --git a/content/pt/docs/concepts/architecture/cloud-controller.md b/content/pt-br/docs/concepts/architecture/cloud-controller.md
similarity index 100%
rename from content/pt/docs/concepts/architecture/cloud-controller.md
rename to content/pt-br/docs/concepts/architecture/cloud-controller.md
diff --git a/content/pt/docs/concepts/architecture/controller.md b/content/pt-br/docs/concepts/architecture/controller.md
similarity index 100%
rename from content/pt/docs/concepts/architecture/controller.md
rename to content/pt-br/docs/concepts/architecture/controller.md
diff --git a/content/pt-br/docs/concepts/architecture/master-node-communication.md b/content/pt-br/docs/concepts/architecture/master-node-communication.md
new file mode 100644
index 0000000000..8cf2ad86c6
--- /dev/null
+++ b/content/pt-br/docs/concepts/architecture/master-node-communication.md
@@ -0,0 +1,105 @@
+---
+reviewers:
+- dchen1107
+- liggitt
+title: Comunicação entre Node e Master
+content_type: concept
+weight: 20
+---
+
+<!-- overview -->
+
+Este documento cataloga os caminhos de comunicação entre o Master (o
+apiserver) e o cluster Kubernetes. A intenção é permitir que os usuários
+personalizem sua instalação para proteger a configuração de rede
+então o cluster pode ser executado em uma rede não confiável (ou em IPs totalmente públicos em um
+provedor de nuvem).
+
+
+
+
+<!-- body -->
+
+## Cluster para o Master
+
+Todos os caminhos de comunicação do cluster para o Master terminam no
+apiserver (nenhum dos outros componentes do Master são projetados para expor
+Serviços remotos). Em uma implantação típica, o apiserver é configurado para escutar
+conexões remotas em uma porta HTTPS segura (443) com uma ou mais clientes [autenticação](/docs/reference/access-authn-authz/authentication/) habilitado.
+Uma ou mais formas de [autorização](/docs/reference/access-authn-authz/authorization/)
+deve ser habilitado, especialmente se [requisições anônimas](/docs/reference/access-authn-authz/authentication/#anonymous-requests)
+ou [tokens da conta de serviço](/docs/reference/access-authn-authz/authentication/#service-account-tokens)
+são autorizados.
+
+Os nós devem ser provisionados com o certificado root público para o cluster
+de tal forma que eles podem se conectar de forma segura ao apiserver junto com o cliente válido
+credenciais. Por exemplo, em uma implantação padrão do GKE, as credenciais do cliente
+fornecidos para o kubelet estão na forma de um certificado de cliente. Vejo
+[bootstrapping TLS do kubelet](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)
+para provisionamento automatizado de certificados de cliente kubelet.
+
+Os pods que desejam se conectar ao apiserver podem fazê-lo com segurança, aproveitando
+conta de serviço para que o Kubernetes injetará automaticamente o certificado raiz público
+certificado e um token de portador válido no pod quando ele é instanciado.
+O serviço `kubernetes` (em todos os namespaces) é configurado com um IP virtual
+endereço que é redirecionado (via kube-proxy) para o endpoint com HTTPS no
+apiserver.
+
+Os componentes principais também se comunicam com o apiserver do cluster através da porta segura.
+
+Como resultado, o modo de operação padrão para conexões do cluster
+(nodes e pods em execução nos Nodes) para o Master é protegido por padrão
+e pode passar por redes não confiáveis ​​e / ou públicas.
+
+## Master para o Cluster
+
+Existem dois caminhos de comunicação primários do mestre (apiserver) para o
+cluster. O primeiro é do apiserver para o processo do kubelet que é executado em
+cada Node no cluster. O segundo é do apiserver para qualquer Node, pod,
+ou serviço através da funcionalidade de proxy do apiserver.
+
+### apiserver para o kubelet
+
+As conexões do apiserver ao kubelet são usadas para:
+
+  * Buscar logs para pods.
+  * Anexar (através de kubectl) pods em execução.
+  * Fornecer a funcionalidade de encaminhamento de porta do kubelet.
+
+Essas conexões terminam no endpoint HTTPS do kubelet. Por padrão,
+o apiserver não verifica o certificado de serviço do kubelet,
+o que torna a conexão sujeita a ataques man-in-the-middle, o que o torna
+**inseguro** para passar por redes não confiáveis ​​e / ou públicas.
+
+Para verificar essa conexão, use a flag `--kubelet-certificate-authority` para
+fornecer o apiserver com um pacote de certificado raiz para usar e verificar o
+certificado de serviço da kubelet.
+
+Se isso não for possível, use o [SSH túnel](/docs/concepts/architecture/master-node-communication/#ssh-tunnels)
+entre o apiserver e kubelet se necessário para evitar a conexão ao longo de um
+rede não confiável ou pública.
+
+Finalmente, [Autenticação e/ou autorização do Kubelet](/docs/admin/kubelet-authentication-authorization/)
+deve ser ativado para proteger a API do kubelet.
+
+### apiserver para nós, pods e serviços
+
+As conexões a partir do apiserver para um nó, pod ou serviço padrão para simples
+conexões HTTP não são autenticadas nem criptografadas. Eles
+podem ser executados em uma conexão HTTPS segura prefixando `https:` no nó,
+pod, ou nome do serviço no URL da API, mas eles não validarão o certificado
+fornecido pelo ponto de extremidade HTTPS, nem fornece credenciais de cliente, enquanto
+a conexão será criptografada, não fornecerá nenhuma garantia de integridade.
+Estas conexões **não são atualmente seguras** para serem usados por redes não confiáveis ​​e/ou públicas.
+
+### SSH Túnel
+
+O Kubernetes suporta túneis SSH para proteger o Servidor Master -> caminhos de comunicação no cluster. Nesta configuração, o apiserver inicia um túnel SSH para cada nó
+no cluster (conectando ao servidor ssh escutando na porta 22) e passa
+todo o tráfego destinado a um kubelet, nó, pod ou serviço através do túnel.
+Este túnel garante que o tráfego não seja exposto fora da rede aos quais
+os nós estão sendo executados.
+
+Atualmente, os túneis SSH estão obsoletos, portanto, você não deve optar por usá-los, a menos que saiba o que está fazendo. Um substituto para este canal de comunicação está sendo projetado.
+
+
diff --git a/content/pt/docs/concepts/cluster-administration/_index.md b/content/pt-br/docs/concepts/cluster-administration/_index.md
similarity index 100%
rename from content/pt/docs/concepts/cluster-administration/_index.md
rename to content/pt-br/docs/concepts/cluster-administration/_index.md
diff --git a/content/pt/docs/concepts/cluster-administration/addons.md b/content/pt-br/docs/concepts/cluster-administration/addons.md
similarity index 100%
rename from content/pt/docs/concepts/cluster-administration/addons.md
rename to content/pt-br/docs/concepts/cluster-administration/addons.md
diff --git a/content/pt/docs/concepts/cluster-administration/certificates.md b/content/pt-br/docs/concepts/cluster-administration/certificates.md
similarity index 100%
rename from content/pt/docs/concepts/cluster-administration/certificates.md
rename to content/pt-br/docs/concepts/cluster-administration/certificates.md
diff --git a/content/pt/docs/concepts/cluster-administration/cluster-administration-overview.md b/content/pt-br/docs/concepts/cluster-administration/cluster-administration-overview.md
similarity index 100%
rename from content/pt/docs/concepts/cluster-administration/cluster-administration-overview.md
rename to content/pt-br/docs/concepts/cluster-administration/cluster-administration-overview.md
diff --git a/content/pt/docs/concepts/cluster-administration/kubelet-garbage-collection.md b/content/pt-br/docs/concepts/cluster-administration/kubelet-garbage-collection.md
similarity index 100%
rename from content/pt/docs/concepts/cluster-administration/kubelet-garbage-collection.md
rename to content/pt-br/docs/concepts/cluster-administration/kubelet-garbage-collection.md
diff --git a/content/pt/docs/concepts/cluster-administration/logging.md b/content/pt-br/docs/concepts/cluster-administration/logging.md
similarity index 100%
rename from content/pt/docs/concepts/cluster-administration/logging.md
rename to content/pt-br/docs/concepts/cluster-administration/logging.md
diff --git a/content/pt/docs/concepts/cluster-administration/networking.md b/content/pt-br/docs/concepts/cluster-administration/networking.md
similarity index 100%
rename from content/pt/docs/concepts/cluster-administration/networking.md
rename to content/pt-br/docs/concepts/cluster-administration/networking.md
diff --git a/content/pt/docs/concepts/configuration/_index.md b/content/pt-br/docs/concepts/configuration/_index.md
similarity index 100%
rename from content/pt/docs/concepts/configuration/_index.md
rename to content/pt-br/docs/concepts/configuration/_index.md
diff --git a/content/pt/docs/concepts/configuration/organize-cluster-access-kubeconfig.md b/content/pt-br/docs/concepts/configuration/organize-cluster-access-kubeconfig.md
similarity index 100%
rename from content/pt/docs/concepts/configuration/organize-cluster-access-kubeconfig.md
rename to content/pt-br/docs/concepts/configuration/organize-cluster-access-kubeconfig.md
diff --git a/content/pt/docs/concepts/containers/_index.md b/content/pt-br/docs/concepts/containers/_index.md
similarity index 100%
rename from content/pt/docs/concepts/containers/_index.md
rename to content/pt-br/docs/concepts/containers/_index.md
diff --git a/content/pt/docs/concepts/containers/container-environment.md b/content/pt-br/docs/concepts/containers/container-environment.md
similarity index 100%
rename from content/pt/docs/concepts/containers/container-environment.md
rename to content/pt-br/docs/concepts/containers/container-environment.md
diff --git a/content/pt/docs/concepts/containers/container-lifecycle-hooks.md b/content/pt-br/docs/concepts/containers/container-lifecycle-hooks.md
similarity index 100%
rename from content/pt/docs/concepts/containers/container-lifecycle-hooks.md
rename to content/pt-br/docs/concepts/containers/container-lifecycle-hooks.md
diff --git a/content/pt/docs/concepts/containers/images.md b/content/pt-br/docs/concepts/containers/images.md
similarity index 100%
rename from content/pt/docs/concepts/containers/images.md
rename to content/pt-br/docs/concepts/containers/images.md
diff --git a/content/pt/docs/concepts/containers/runtime-class.md b/content/pt-br/docs/concepts/containers/runtime-class.md
similarity index 100%
rename from content/pt/docs/concepts/containers/runtime-class.md
rename to content/pt-br/docs/concepts/containers/runtime-class.md
diff --git a/content/pt/docs/concepts/extend-kubernetes/_index.md b/content/pt-br/docs/concepts/extend-kubernetes/_index.md
similarity index 100%
rename from content/pt/docs/concepts/extend-kubernetes/_index.md
rename to content/pt-br/docs/concepts/extend-kubernetes/_index.md
diff --git a/content/pt/docs/concepts/extend-kubernetes/api-extension/_index.md b/content/pt-br/docs/concepts/extend-kubernetes/api-extension/_index.md
similarity index 100%
rename from content/pt/docs/concepts/extend-kubernetes/api-extension/_index.md
rename to content/pt-br/docs/concepts/extend-kubernetes/api-extension/_index.md
diff --git a/content/pt/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md b/content/pt-br/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
similarity index 100%
rename from content/pt/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
rename to content/pt-br/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
diff --git a/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/_index.md b/content/pt-br/docs/concepts/extend-kubernetes/compute-storage-net/_index.md
similarity index 100%
rename from content/pt/docs/concepts/extend-kubernetes/compute-storage-net/_index.md
rename to content/pt-br/docs/concepts/extend-kubernetes/compute-storage-net/_index.md
diff --git a/content/pt/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md b/content/pt-br/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
similarity index 100%
rename from content/pt/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
rename to content/pt-br/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
diff --git a/content/pt/docs/concepts/extend-kubernetes/operator.md b/content/pt-br/docs/concepts/extend-kubernetes/operator.md
similarity index 100%
rename from content/pt/docs/concepts/extend-kubernetes/operator.md
rename to content/pt-br/docs/concepts/extend-kubernetes/operator.md
diff --git a/content/pt/docs/concepts/overview/_index.md b/content/pt-br/docs/concepts/overview/_index.md
similarity index 100%
rename from content/pt/docs/concepts/overview/_index.md
rename to content/pt-br/docs/concepts/overview/_index.md
diff --git a/content/pt/docs/concepts/overview/components.md b/content/pt-br/docs/concepts/overview/components.md
similarity index 100%
rename from content/pt/docs/concepts/overview/components.md
rename to content/pt-br/docs/concepts/overview/components.md
diff --git a/content/pt/docs/concepts/overview/what-is-kubernetes.md b/content/pt-br/docs/concepts/overview/what-is-kubernetes.md
similarity index 100%
rename from content/pt/docs/concepts/overview/what-is-kubernetes.md
rename to content/pt-br/docs/concepts/overview/what-is-kubernetes.md
diff --git a/content/pt/docs/concepts/overview/working-with-objects/_index.md b/content/pt-br/docs/concepts/overview/working-with-objects/_index.md
similarity index 100%
rename from content/pt/docs/concepts/overview/working-with-objects/_index.md
rename to content/pt-br/docs/concepts/overview/working-with-objects/_index.md
diff --git a/content/pt/docs/concepts/overview/working-with-objects/names.md b/content/pt-br/docs/concepts/overview/working-with-objects/names.md
similarity index 100%
rename from content/pt/docs/concepts/overview/working-with-objects/names.md
rename to content/pt-br/docs/concepts/overview/working-with-objects/names.md
diff --git a/content/pt/docs/concepts/scheduling-eviction/_index.md b/content/pt-br/docs/concepts/scheduling-eviction/_index.md
similarity index 100%
rename from content/pt/docs/concepts/scheduling-eviction/_index.md
rename to content/pt-br/docs/concepts/scheduling-eviction/_index.md
diff --git a/content/pt/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/pt-br/docs/concepts/scheduling-eviction/kube-scheduler.md
similarity index 100%
rename from content/pt/docs/concepts/scheduling-eviction/kube-scheduler.md
rename to content/pt-br/docs/concepts/scheduling-eviction/kube-scheduler.md
diff --git a/content/pt/docs/concepts/scheduling-eviction/pod-overhead.md b/content/pt-br/docs/concepts/scheduling-eviction/pod-overhead.md
similarity index 100%
rename from content/pt/docs/concepts/scheduling-eviction/pod-overhead.md
rename to content/pt-br/docs/concepts/scheduling-eviction/pod-overhead.md
diff --git a/content/pt/docs/concepts/security/_index.md b/content/pt-br/docs/concepts/security/_index.md
similarity index 100%
rename from content/pt/docs/concepts/security/_index.md
rename to content/pt-br/docs/concepts/security/_index.md
diff --git a/content/pt/docs/concepts/security/overview.md b/content/pt-br/docs/concepts/security/overview.md
similarity index 100%
rename from content/pt/docs/concepts/security/overview.md
rename to content/pt-br/docs/concepts/security/overview.md
diff --git a/content/pt/docs/concepts/workloads/controllers/_index.md b/content/pt-br/docs/concepts/workloads/controllers/_index.md
similarity index 100%
rename from content/pt/docs/concepts/workloads/controllers/_index.md
rename to content/pt-br/docs/concepts/workloads/controllers/_index.md
diff --git a/content/pt/docs/concepts/workloads/controllers/cron-jobs.md b/content/pt-br/docs/concepts/workloads/controllers/cron-jobs.md
similarity index 100%
rename from content/pt/docs/concepts/workloads/controllers/cron-jobs.md
rename to content/pt-br/docs/concepts/workloads/controllers/cron-jobs.md
diff --git a/content/pt/docs/contribute/_index.md b/content/pt-br/docs/contribute/_index.md
similarity index 100%
rename from content/pt/docs/contribute/_index.md
rename to content/pt-br/docs/contribute/_index.md
diff --git a/content/pt/docs/home/_index.md b/content/pt-br/docs/home/_index.md
similarity index 100%
rename from content/pt/docs/home/_index.md
rename to content/pt-br/docs/home/_index.md
diff --git a/content/pt/docs/home/supported-doc-versions.md b/content/pt-br/docs/home/supported-doc-versions.md
similarity index 100%
rename from content/pt/docs/home/supported-doc-versions.md
rename to content/pt-br/docs/home/supported-doc-versions.md
diff --git a/content/pt/docs/reference/_index.md b/content/pt-br/docs/reference/_index.md
similarity index 100%
rename from content/pt/docs/reference/_index.md
rename to content/pt-br/docs/reference/_index.md
diff --git a/content/pt/docs/reference/access-authn-authz/authentication.md b/content/pt-br/docs/reference/access-authn-authz/authentication.md
similarity index 100%
rename from content/pt/docs/reference/access-authn-authz/authentication.md
rename to content/pt-br/docs/reference/access-authn-authz/authentication.md
diff --git a/content/pt/docs/reference/access-authn-authz/bootstrap-tokens.md b/content/pt-br/docs/reference/access-authn-authz/bootstrap-tokens.md
similarity index 100%
rename from content/pt/docs/reference/access-authn-authz/bootstrap-tokens.md
rename to content/pt-br/docs/reference/access-authn-authz/bootstrap-tokens.md
diff --git a/content/pt/docs/reference/glossary/alternate-x509-schemes.md b/content/pt-br/docs/reference/glossary/alternate-x509-schemes.md
similarity index 100%
rename from content/pt/docs/reference/glossary/alternate-x509-schemes.md
rename to content/pt-br/docs/reference/glossary/alternate-x509-schemes.md
diff --git a/content/pt/docs/reference/glossary/cloud-controller-manager.md b/content/pt-br/docs/reference/glossary/cloud-controller-manager.md
similarity index 100%
rename from content/pt/docs/reference/glossary/cloud-controller-manager.md
rename to content/pt-br/docs/reference/glossary/cloud-controller-manager.md
diff --git a/content/pt/docs/reference/glossary/cluster.md b/content/pt-br/docs/reference/glossary/cluster.md
similarity index 100%
rename from content/pt/docs/reference/glossary/cluster.md
rename to content/pt-br/docs/reference/glossary/cluster.md
diff --git a/content/pt/docs/reference/glossary/cncf.md b/content/pt-br/docs/reference/glossary/cncf.md
similarity index 100%
rename from content/pt/docs/reference/glossary/cncf.md
rename to content/pt-br/docs/reference/glossary/cncf.md
diff --git a/content/pt/docs/reference/glossary/cni.md b/content/pt-br/docs/reference/glossary/cni.md
similarity index 100%
rename from content/pt/docs/reference/glossary/cni.md
rename to content/pt-br/docs/reference/glossary/cni.md
diff --git a/content/pt/docs/reference/glossary/container-runtime.md b/content/pt-br/docs/reference/glossary/container-runtime.md
similarity index 100%
rename from content/pt/docs/reference/glossary/container-runtime.md
rename to content/pt-br/docs/reference/glossary/container-runtime.md
diff --git a/content/pt/docs/reference/glossary/containerd.md b/content/pt-br/docs/reference/glossary/containerd.md
similarity index 100%
rename from content/pt/docs/reference/glossary/containerd.md
rename to content/pt-br/docs/reference/glossary/containerd.md
diff --git a/content/pt/docs/reference/glossary/control-plane.md b/content/pt-br/docs/reference/glossary/control-plane.md
similarity index 100%
rename from content/pt/docs/reference/glossary/control-plane.md
rename to content/pt-br/docs/reference/glossary/control-plane.md
diff --git a/content/pt/docs/reference/glossary/controller.md b/content/pt-br/docs/reference/glossary/controller.md
similarity index 100%
rename from content/pt/docs/reference/glossary/controller.md
rename to content/pt-br/docs/reference/glossary/controller.md
diff --git a/content/pt/docs/reference/glossary/cri-o.md b/content/pt-br/docs/reference/glossary/cri-o.md
similarity index 100%
rename from content/pt/docs/reference/glossary/cri-o.md
rename to content/pt-br/docs/reference/glossary/cri-o.md
diff --git a/content/pt/docs/reference/glossary/cri.md b/content/pt-br/docs/reference/glossary/cri.md
similarity index 100%
rename from content/pt/docs/reference/glossary/cri.md
rename to content/pt-br/docs/reference/glossary/cri.md
diff --git a/content/pt/docs/reference/glossary/customresourcedefinition.md b/content/pt-br/docs/reference/glossary/customresourcedefinition.md
similarity index 100%
rename from content/pt/docs/reference/glossary/customresourcedefinition.md
rename to content/pt-br/docs/reference/glossary/customresourcedefinition.md
diff --git a/content/pt/docs/reference/glossary/etcd.md b/content/pt-br/docs/reference/glossary/etcd.md
similarity index 100%
rename from content/pt/docs/reference/glossary/etcd.md
rename to content/pt-br/docs/reference/glossary/etcd.md
diff --git a/content/pt/docs/reference/glossary/kerberos.md b/content/pt-br/docs/reference/glossary/kerberos.md
similarity index 100%
rename from content/pt/docs/reference/glossary/kerberos.md
rename to content/pt-br/docs/reference/glossary/kerberos.md
diff --git a/content/pt/docs/reference/glossary/keystone.md b/content/pt-br/docs/reference/glossary/keystone.md
similarity index 100%
rename from content/pt/docs/reference/glossary/keystone.md
rename to content/pt-br/docs/reference/glossary/keystone.md
diff --git a/content/pt/docs/reference/glossary/kube-apiserver.md b/content/pt-br/docs/reference/glossary/kube-apiserver.md
similarity index 100%
rename from content/pt/docs/reference/glossary/kube-apiserver.md
rename to content/pt-br/docs/reference/glossary/kube-apiserver.md
diff --git a/content/pt/docs/reference/glossary/kube-controller-manager.md b/content/pt-br/docs/reference/glossary/kube-controller-manager.md
similarity index 100%
rename from content/pt/docs/reference/glossary/kube-controller-manager.md
rename to content/pt-br/docs/reference/glossary/kube-controller-manager.md
diff --git a/content/pt/docs/reference/glossary/kube-proxy.md b/content/pt-br/docs/reference/glossary/kube-proxy.md
similarity index 100%
rename from content/pt/docs/reference/glossary/kube-proxy.md
rename to content/pt-br/docs/reference/glossary/kube-proxy.md
diff --git a/content/pt/docs/reference/glossary/kube-scheduler.md b/content/pt-br/docs/reference/glossary/kube-scheduler.md
similarity index 100%
rename from content/pt/docs/reference/glossary/kube-scheduler.md
rename to content/pt-br/docs/reference/glossary/kube-scheduler.md
diff --git a/content/pt/docs/reference/glossary/kubelet.md b/content/pt-br/docs/reference/glossary/kubelet.md
similarity index 100%
rename from content/pt/docs/reference/glossary/kubelet.md
rename to content/pt-br/docs/reference/glossary/kubelet.md
diff --git a/content/pt/docs/reference/glossary/ldap.md b/content/pt-br/docs/reference/glossary/ldap.md
similarity index 100%
rename from content/pt/docs/reference/glossary/ldap.md
rename to content/pt-br/docs/reference/glossary/ldap.md
diff --git a/content/pt/docs/reference/glossary/node.md b/content/pt-br/docs/reference/glossary/node.md
similarity index 100%
rename from content/pt/docs/reference/glossary/node.md
rename to content/pt-br/docs/reference/glossary/node.md
diff --git a/content/pt/docs/reference/glossary/pod.md b/content/pt-br/docs/reference/glossary/pod.md
similarity index 100%
rename from content/pt/docs/reference/glossary/pod.md
rename to content/pt-br/docs/reference/glossary/pod.md
diff --git a/content/pt/docs/reference/glossary/saml.md b/content/pt-br/docs/reference/glossary/saml.md
similarity index 100%
rename from content/pt/docs/reference/glossary/saml.md
rename to content/pt-br/docs/reference/glossary/saml.md
diff --git a/content/pt/docs/reference/glossary/tls-common-name.md b/content/pt-br/docs/reference/glossary/tls-common-name.md
similarity index 100%
rename from content/pt/docs/reference/glossary/tls-common-name.md
rename to content/pt-br/docs/reference/glossary/tls-common-name.md
diff --git a/content/pt/docs/reference/glossary/uid.md b/content/pt-br/docs/reference/glossary/uid.md
similarity index 100%
rename from content/pt/docs/reference/glossary/uid.md
rename to content/pt-br/docs/reference/glossary/uid.md
diff --git a/content/pt/docs/reference/glossary/username.md b/content/pt-br/docs/reference/glossary/username.md
similarity index 100%
rename from content/pt/docs/reference/glossary/username.md
rename to content/pt-br/docs/reference/glossary/username.md
diff --git a/content/pt/docs/reference/kubectl/_index.md b/content/pt-br/docs/reference/kubectl/_index.md
similarity index 100%
rename from content/pt/docs/reference/kubectl/_index.md
rename to content/pt-br/docs/reference/kubectl/_index.md
diff --git a/content/pt/docs/reference/kubectl/cheatsheet.md b/content/pt-br/docs/reference/kubectl/cheatsheet.md
similarity index 100%
rename from content/pt/docs/reference/kubectl/cheatsheet.md
rename to content/pt-br/docs/reference/kubectl/cheatsheet.md
diff --git a/content/pt/docs/reference/tools.md b/content/pt-br/docs/reference/tools.md
similarity index 100%
rename from content/pt/docs/reference/tools.md
rename to content/pt-br/docs/reference/tools.md
diff --git a/content/pt/docs/setup/_index.md b/content/pt-br/docs/setup/_index.md
similarity index 100%
rename from content/pt/docs/setup/_index.md
rename to content/pt-br/docs/setup/_index.md
diff --git a/content/pt/docs/sitemap.md b/content/pt-br/docs/sitemap.md
similarity index 100%
rename from content/pt/docs/sitemap.md
rename to content/pt-br/docs/sitemap.md
diff --git a/content/pt/docs/tasks/_index.md b/content/pt-br/docs/tasks/_index.md
similarity index 100%
rename from content/pt/docs/tasks/_index.md
rename to content/pt-br/docs/tasks/_index.md
diff --git a/content/pt/docs/templates/feature-state-alpha.txt b/content/pt-br/docs/templates/feature-state-alpha.txt
similarity index 100%
rename from content/pt/docs/templates/feature-state-alpha.txt
rename to content/pt-br/docs/templates/feature-state-alpha.txt
diff --git a/content/pt/docs/templates/feature-state-beta.txt b/content/pt-br/docs/templates/feature-state-beta.txt
similarity index 100%
rename from content/pt/docs/templates/feature-state-beta.txt
rename to content/pt-br/docs/templates/feature-state-beta.txt
diff --git a/content/pt/docs/templates/feature-state-deprecated.txt b/content/pt-br/docs/templates/feature-state-deprecated.txt
similarity index 100%
rename from content/pt/docs/templates/feature-state-deprecated.txt
rename to content/pt-br/docs/templates/feature-state-deprecated.txt
diff --git a/content/pt/docs/templates/feature-state-stable.txt b/content/pt-br/docs/templates/feature-state-stable.txt
similarity index 100%
rename from content/pt/docs/templates/feature-state-stable.txt
rename to content/pt-br/docs/templates/feature-state-stable.txt
diff --git a/content/pt/docs/templates/index.md b/content/pt-br/docs/templates/index.md
similarity index 100%
rename from content/pt/docs/templates/index.md
rename to content/pt-br/docs/templates/index.md
diff --git a/content/pt/docs/tutorials/_index.md b/content/pt-br/docs/tutorials/_index.md
similarity index 100%
rename from content/pt/docs/tutorials/_index.md
rename to content/pt-br/docs/tutorials/_index.md
diff --git a/content/pt/docs/tutorials/hello-minikube.md b/content/pt-br/docs/tutorials/hello-minikube.md
similarity index 100%
rename from content/pt/docs/tutorials/hello-minikube.md
rename to content/pt-br/docs/tutorials/hello-minikube.md
diff --git a/content/pt/docs/tutorials/kubernetes-basics/_index.html b/content/pt-br/docs/tutorials/kubernetes-basics/_index.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/_index.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/_index.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/create-cluster/_index.md b/content/pt-br/docs/tutorials/kubernetes-basics/create-cluster/_index.md
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/create-cluster/_index.md
rename to content/pt-br/docs/tutorials/kubernetes-basics/create-cluster/_index.md
diff --git a/content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/pt-br/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html b/content/pt-br/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/deploy-app/_index.md b/content/pt-br/docs/tutorials/kubernetes-basics/deploy-app/_index.md
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/deploy-app/_index.md
rename to content/pt-br/docs/tutorials/kubernetes-basics/deploy-app/_index.md
diff --git a/content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/pt-br/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/pt-br/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/explore/_index.md b/content/pt-br/docs/tutorials/kubernetes-basics/explore/_index.md
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/explore/_index.md
rename to content/pt-br/docs/tutorials/kubernetes-basics/explore/_index.md
diff --git a/content/pt/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/pt-br/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/explore/explore-intro.html b/content/pt-br/docs/tutorials/kubernetes-basics/explore/explore-intro.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/explore/explore-intro.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/explore/explore-intro.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/_index.md b/content/pt-br/docs/tutorials/kubernetes-basics/expose/_index.md
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/expose/_index.md
rename to content/pt-br/docs/tutorials/kubernetes-basics/expose/_index.md
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/pt-br/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/pt-br/docs/tutorials/kubernetes-basics/expose/expose-intro.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/expose/expose-intro.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/expose/expose-intro.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/_index.md b/content/pt-br/docs/tutorials/kubernetes-basics/scale/_index.md
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/scale/_index.md
rename to content/pt-br/docs/tutorials/kubernetes-basics/scale/_index.md
diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/pt-br/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
diff --git a/content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html b/content/pt-br/docs/tutorials/kubernetes-basics/scale/scale-intro.html
similarity index 100%
rename from content/pt/docs/tutorials/kubernetes-basics/scale/scale-intro.html
rename to content/pt-br/docs/tutorials/kubernetes-basics/scale/scale-intro.html
diff --git a/content/pt/examples/admin/logging/fluentd-sidecar-config.yaml b/content/pt-br/examples/admin/logging/fluentd-sidecar-config.yaml
similarity index 100%
rename from content/pt/examples/admin/logging/fluentd-sidecar-config.yaml
rename to content/pt-br/examples/admin/logging/fluentd-sidecar-config.yaml
diff --git a/content/pt/examples/admin/logging/two-files-counter-pod-agent-sidecar.yaml b/content/pt-br/examples/admin/logging/two-files-counter-pod-agent-sidecar.yaml
similarity index 100%
rename from content/pt/examples/admin/logging/two-files-counter-pod-agent-sidecar.yaml
rename to content/pt-br/examples/admin/logging/two-files-counter-pod-agent-sidecar.yaml
diff --git a/content/pt/examples/admin/logging/two-files-counter-pod-streaming-sidecar.yaml b/content/pt-br/examples/admin/logging/two-files-counter-pod-streaming-sidecar.yaml
similarity index 100%
rename from content/pt/examples/admin/logging/two-files-counter-pod-streaming-sidecar.yaml
rename to content/pt-br/examples/admin/logging/two-files-counter-pod-streaming-sidecar.yaml
diff --git a/content/pt/examples/admin/logging/two-files-counter-pod.yaml b/content/pt-br/examples/admin/logging/two-files-counter-pod.yaml
similarity index 100%
rename from content/pt/examples/admin/logging/two-files-counter-pod.yaml
rename to content/pt-br/examples/admin/logging/two-files-counter-pod.yaml
diff --git a/content/pt/examples/debug/counter-pod.yaml b/content/pt-br/examples/debug/counter-pod.yaml
similarity index 100%
rename from content/pt/examples/debug/counter-pod.yaml
rename to content/pt-br/examples/debug/counter-pod.yaml
diff --git a/content/pt/includes/index.md b/content/pt-br/includes/index.md
similarity index 100%
rename from content/pt/includes/index.md
rename to content/pt-br/includes/index.md
diff --git a/content/pt/partners/_index.html b/content/pt-br/partners/_index.html
similarity index 100%
rename from content/pt/partners/_index.html
rename to content/pt-br/partners/_index.html
diff --git a/i18n/pt.toml b/i18n/pt-br.toml
similarity index 94%
rename from i18n/pt.toml
rename to i18n/pt-br.toml
index 808c82679d..3f55a665b3 100644
--- a/i18n/pt.toml
+++ b/i18n/pt-br.toml
@@ -218,8 +218,23 @@ other = "Seu servidor Kubernetes deve ser versão"
 [version_check_tocheck]
 other = "Para verificar a versão, digite "
 
+[version_menu]
+other = "Versões"
+
 [warning]
 other = "Aviso:"
 
 [whatsnext_heading]
 other = "Qual é o próximo"
+
+[print_printable_section]
+other = "Essa é a versão completa de impressão dessa seção"
+
+[print_click_to_print]
+other = "Clique aqui para imprimir"
+
+[print_show_regular]
+other = "Retornar à visualização normal"
+
+[print_entire_section]
+other = "Imprimir toda essa seção"
diff --git a/static/_redirects b/static/_redirects
index ae7c753135..0941f21486 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -14,7 +14,7 @@
 /ko/docs/     /ko/docs/home/ 301!
 /no/docs/     /no/docs/home/ 301!
 /pl/docs/     /pl/docs/home/ 301!
-/pt/docs/     /pt/docs/home/ 301!
+/pt-br/docs/  /pt-br/docs/home/ 301!
 /ru/docs/     /ru/docs/home/ 301!
 /uk/docs/     /uk/docs/home/ 301!
 /vi/docs/     /vi/docs/home/ 301!
@@ -524,3 +524,5 @@
 
 /docs/concepts/configuration/pod-overhead/     /docs/concepts/scheduling-eviction/pod-overhead/   301
 /id/docs/concepts/configuration/pod-overhead/     /id/docs/concepts/scheduling-eviction/pod-overhead/   301
+
+/pt/*         /pt-br/:splat  302!

From c76c3784aab5e2411c88401046c4cfe149215da6 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Wed, 14 Apr 2021 19:39:34 +0900
Subject: [PATCH 586/788] Fix some errors

---
 content/en/blog/_posts/2020-12-08-kubernetes-release-1.20.md  | 2 +-
 content/en/docs/concepts/workloads/controllers/job.md         | 4 ++--
 .../docs/setup/production-environment/container-runtimes.md   | 2 +-
 .../windows/intro-windows-in-kubernetes.md                    | 2 +-
 .../tasks/administer-cluster/enabling-topology-aware-hints.md | 2 +-
 .../administer-cluster/kubeadm/configure-cgroup-driver.md     | 2 +-
 .../en/docs/tasks/job/indexed-parallel-processing-static.md   | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/en/blog/_posts/2020-12-08-kubernetes-release-1.20.md b/content/en/blog/_posts/2020-12-08-kubernetes-release-1.20.md
index e0fef7ab90..deb459c4be 100644
--- a/content/en/blog/_posts/2020-12-08-kubernetes-release-1.20.md
+++ b/content/en/blog/_posts/2020-12-08-kubernetes-release-1.20.md
@@ -64,7 +64,7 @@ The Kubernetes community has written a [detailed blog post about deprecation](ht
 
 A longstanding bug regarding exec probe timeouts that may impact existing pod definitions has been fixed. Prior to this fix, the field `timeoutSeconds` was not respected for exec probes. Instead, probes would run indefinitely, even past their configured deadline, until a result was returned. With this change, the default value of `1 second` will be applied if a value is not specified and existing pod definitions may no longer be sufficient if a probe takes longer than one second. A feature gate, called `ExecProbeTimeout`, has been added with this fix that enables cluster operators to revert to the previous behavior, but this will be locked and removed in subsequent releases. In order to revert to the previous behavior, cluster operators should set this feature gate to `false`.
 
-Please review the updated documentation regarding [configuring probes](docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes) for more details.
+Please review the updated documentation regarding [configuring probes](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes) for more details.
 
 ## Other Updates
 
diff --git a/content/en/docs/concepts/workloads/controllers/job.md b/content/en/docs/concepts/workloads/controllers/job.md
index a23c37ad0d..9a49e2afd7 100644
--- a/content/en/docs/concepts/workloads/controllers/job.md
+++ b/content/en/docs/concepts/workloads/controllers/job.md
@@ -192,7 +192,7 @@ parallelism, for a variety of reasons:
 {{< note >}}
 To be able to create Indexed Jobs, make sure to enable the `IndexedJob`
 [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
-on the [API server](docs/reference/command-line-tools-reference/kube-apiserver/)
+on the [API server](/docs/reference/command-line-tools-reference/kube-apiserver/)
 and the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/).
 {{< /note >}}
 
@@ -412,7 +412,7 @@ Here, `W` is the number of work items.
 {{< note >}}
 Suspending Jobs is available in Kubernetes versions 1.21 and above. You must
 enable the `SuspendJob` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
-on the [API server](docs/reference/command-line-tools-reference/kube-apiserver/)
+on the [API server](/docs/reference/command-line-tools-reference/kube-apiserver/)
 and the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/)
 in order to use this feature.
 {{< /note >}}
diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index 7b1d3673cb..ebbd11f081 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -59,7 +59,7 @@ configuration, or reinstall it using automation.
 
 ### Migrating to the `systemd` driver in kubeadm managed clusters
 
-Follow this [Migration guide](/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
+Follow this [Migration guide](/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/)
 if you wish to migrate to the `systemd` cgroup driver in existing kubeadm managed clusters.
 
 ## Container runtimes
diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index b8d5cd3c9b..0a1bc25679 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -38,7 +38,7 @@ In this document, when we talk about Windows containers we mean Windows containe
 Refer to the following table for Windows operating system support in Kubernetes. A single heterogeneous Kubernetes cluster can have both Windows and Linux worker nodes. Windows containers have to be scheduled on Windows nodes and Linux containers on Linux nodes.
 
 | Kubernetes version | Windows Server LTSC releases | Windows Server SAC releases |
-| --- | --- | --- | --- |
+| --- | --- | --- |
 | *Kubernetes v1.17* | Windows Server 2019 | Windows Server ver 1809 |
 | *Kubernetes v1.18* | Windows Server 2019 | Windows Server ver 1809, Windows Server ver 1903, Windows Server ver 1909 |
 | *Kubernetes v1.19* | Windows Server 2019 | Windows Server ver 1909, Windows Server ver 2004 |
diff --git a/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md b/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
index 919f522c7c..dadc653f4e 100644
--- a/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
+++ b/content/en/docs/tasks/administer-cluster/enabling-topology-aware-hints.md
@@ -27,7 +27,7 @@ The following prerequisite is needed in order to enable topology aware hints:
 ## Enable Topology Aware Hints
 
 To enable service topology hints, enable the `TopologyAwareHints` [feature
-gate](docs/reference/command-line-tools-reference/feature-gates/) for the
+gate](/docs/reference/command-line-tools-reference/feature-gates/) for the
 kube-apiserver, kube-controller-manager, and kube-proxy:
 
 ```
diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md b/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
index 02fdc958fa..df4fbcf273 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
@@ -60,7 +60,7 @@ kubeadm init --config kubeadm-config.yaml
 
 {{< note >}}
 Kubeadm uses the same `KubeletConfiguration` for all nodes in the cluster.
-The `KubeletConfiguration` is stored in a [ConfigMap](docs/concepts/configuration/configmap)
+The `KubeletConfiguration` is stored in a [ConfigMap](/docs/concepts/configuration/configmap)
 object under the `kube-system` namespace.
 
 Executing the sub commands `init`, `join` and `upgrade` would result in kubeadm
diff --git a/content/en/docs/tasks/job/indexed-parallel-processing-static.md b/content/en/docs/tasks/job/indexed-parallel-processing-static.md
index 08ada55471..b5492eed6e 100644
--- a/content/en/docs/tasks/job/indexed-parallel-processing-static.md
+++ b/content/en/docs/tasks/job/indexed-parallel-processing-static.md
@@ -40,7 +40,7 @@ non-parallel, use of [Job](/docs/concepts/workloads/controllers/job/).
 
 To be able to create Indexed Jobs, make sure to enable the `IndexedJob`
 [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
-on the [API server](docs/reference/command-line-tools-reference/kube-apiserver/)
+on the [API server](/docs/reference/command-line-tools-reference/kube-apiserver/)
 and the [controller manager](/docs/reference/command-line-tools-reference/kube-controller-manager/).
 
 <!-- steps -->

From 5f306a0d34335b104ad4342a14bb7d7832d6af39 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Tue, 13 Apr 2021 18:33:48 +0900
Subject: [PATCH 587/788] [ko] Update outdated files in dev-1.21-ko.1 branch

---
 .../job/parallel-processing-expansion.md      |  2 +-
 .../tasks/manage-daemon/update-daemon-set.md  |  6 +--
 .../docs/tasks/manage-gpus/scheduling-gpus.md |  4 +-
 .../run-application/delete-stateful-set.md    |  4 +-
 .../horizontal-pod-autoscale-walkthrough.md   |  2 +-
 .../horizontal-pod-autoscale.md               |  6 +--
 content/ko/docs/tasks/tools/_index.md         |  6 +--
 content/ko/docs/tutorials/_index.md           |  2 +
 .../ko/docs/tutorials/clusters/apparmor.md    |  2 +-
 content/ko/docs/tutorials/hello-minikube.md   |  6 +--
 .../basic-stateful-set.md                     |  7 +--
 .../stateless-application/guestbook.md        | 47 ++++++++++---------
 .../ko/examples/application/job/cronjob.yaml  |  2 +-
 .../application/zookeeper/zookeeper.yaml      |  2 +-
 14 files changed, 52 insertions(+), 46 deletions(-)

diff --git a/content/ko/docs/tasks/job/parallel-processing-expansion.md b/content/ko/docs/tasks/job/parallel-processing-expansion.md
index ef02dac61b..fbf105024d 100644
--- a/content/ko/docs/tasks/job/parallel-processing-expansion.md
+++ b/content/ko/docs/tasks/job/parallel-processing-expansion.md
@@ -2,7 +2,7 @@
 title: 확장을 사용한 병렬 처리
 content_type: task
 min-kubernetes-server-version: v1.8
-weight: 20
+weight: 50
 ---
 
 <!-- overview -->
diff --git a/content/ko/docs/tasks/manage-daemon/update-daemon-set.md b/content/ko/docs/tasks/manage-daemon/update-daemon-set.md
index 659836833a..ec29259de7 100644
--- a/content/ko/docs/tasks/manage-daemon/update-daemon-set.md
+++ b/content/ko/docs/tasks/manage-daemon/update-daemon-set.md
@@ -111,8 +111,8 @@ kubectl edit ds/fluentd-elasticsearch -n kube-system
 
 ##### 컨테이너 이미지만 업데이트
 
-데몬셋 템플릿에서 컨테이너 이미지를 업데이트해야 하는
-경우(예: `.spec.template.spec.containers[*].image`), `kubectl set image` 를 사용한다.
+데몬셋 템플릿(예: `.spec.template.spec.containers[*].image`)에 의해 정의된 컨테이너 이미지만 업데이트하려면, 
+`kubectl set image` 를 사용한다.
 
 ```shell
 kubectl set image ds/fluentd-elasticsearch fluentd-elasticsearch=quay.io/fluentd_elasticsearch/fluentd:v2.6.0 -n kube-system
@@ -168,7 +168,7 @@ kubectl get pods -l name=fluentd-elasticsearch -o wide -n kube-system
 데몬셋 롤아웃이 진행되지 않는다.
 
 이 문제를 해결하려면, 데몬셋 템플릿을 다시 업데이트한다. 이전의 비정상 롤아웃으로 인해
-새로운 롤아웃이 차단되지 않는다.
+새로운 롤아웃이 차단되지는 않는다.
 
 #### 클럭 차이(skew)
 
diff --git a/content/ko/docs/tasks/manage-gpus/scheduling-gpus.md b/content/ko/docs/tasks/manage-gpus/scheduling-gpus.md
index 78c5dc2cbd..087399df01 100644
--- a/content/ko/docs/tasks/manage-gpus/scheduling-gpus.md
+++ b/content/ko/docs/tasks/manage-gpus/scheduling-gpus.md
@@ -13,7 +13,7 @@ description: 클러스터의 노드별로 리소스로 사용할 GPU를 구성
 쿠버네티스는 AMD 및 NVIDIA GPU(그래픽 프로세싱 유닛)를 노드들에 걸쳐 관리하기 위한 **실험적인**
 지원을 포함한다.
 
-이 페이지는 다른 쿠버네티스 버전 간에 걸쳐 사용자가 GPU들을 소비할 수 있는 방법과
+이 페이지는 여러 쿠버네티스 버전에서 사용자가 GPU를 활용할 수 있는 방법과
 현재의 제약 사항을 설명한다.
 
 
@@ -37,7 +37,7 @@ description: 클러스터의 노드별로 리소스로 사용할 GPU를 구성
 `nvidia.com/gpu` 를 스케줄 가능한 리소스로써 노출시킨다.
 
 사용자는 이 GPU들을 `cpu` 나 `memory` 를 요청하는 방식과 동일하게
-`<vendor>.com/gpu` 를 요청함으로써 컨테이너를 통해 소비할 수 있다.
+`<vendor>.com/gpu` 를 요청함으로써 컨테이너에서 활용할 수 있다.
 그러나 GPU를 사용할 때는 리소스 요구 사항을 명시하는 방식에 약간의
 제약이 있다.
 
diff --git a/content/ko/docs/tasks/run-application/delete-stateful-set.md b/content/ko/docs/tasks/run-application/delete-stateful-set.md
index 1ef9220d65..07b3396440 100644
--- a/content/ko/docs/tasks/run-application/delete-stateful-set.md
+++ b/content/ko/docs/tasks/run-application/delete-stateful-set.md
@@ -37,8 +37,8 @@ kubectl delete statefulsets <statefulset-name>
 kubectl delete service <service-name>
 ```
 
-kubectl을 통해 스테이트풀셋을 삭제하면 0으로 스케일이 낮아지고, 스테이트풀셋에 포함된 모든 파드가 삭제된다.
-파드가 아닌 스테이트풀셋만 삭제하려면, `--cascade=false` 를 사용한다.
+kubectl을 통해 스테이트풀셋을 삭제하면, 스테이트풀셋의 크기가 0으로 설정되고 이로 인해 스테이트풀셋에 포함된 모든 파드가 삭제된다. 파드가 아닌 스테이트풀셋만 삭제하려면, `--cascade=false` 옵션을 사용한다. 
+예시는 다음과 같다.
 
 ```shell
 kubectl delete -f <file.yaml> --cascade=false
diff --git a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index b4ca1826d6..61f1dbc758 100644
--- a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -381,7 +381,7 @@ object:
 외부 메트릭 사용시, 먼저 모니터링 시스템에 대한 이해가 있어야 한다.
 이 설치는 사용자 정의 메트릭과 유사하다.
 외부 메트릭을 사용하면 모니터링 시스템의 사용 가능한 메트릭에 기반하여 클러스터를 오토스케일링 할 수 있다.
-위의 예제처럼 `name`과 `selector`를 갖는 `metric` 블록을 제공하고,
+위의 예제처럼 `name`과 `selector`를 갖는 `metric` 블록을 명시하고,
 `Object` 대신에 `External` 메트릭 타입을 사용한다.
 만일 여러 개의 시계열이 `metricSelector`와 일치하면, HorizontalPodAutoscaler가 값의 합을 사용한다.
 외부 메트릭들은 `Value`와 `AverageValue` 대상 타입을 모두 지원하고,
diff --git a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md
index f762357603..b4cc1b3be5 100644
--- a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md
+++ b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale.md
@@ -23,9 +23,7 @@ Pod Autoscaler는 크기를 조정할 수 없는 오브젝트(예: 데몬셋(Dae
 
 Horizontal Pod Autoscaler는 쿠버네티스 API 리소스 및 컨트롤러로 구현된다.
 리소스는 컨트롤러의 동작을 결정한다.
-컨트롤러는 관찰된 평균 CPU 사용률이 사용자가 지정한 대상과 일치하도록 레플리케이션
-컨트롤러 또는 디플로이먼트에서 레플리카 개수를 주기적으로 조정한다.
-
+컨트롤러는 평균 CPU 사용률, 평균 메모리 사용률 또는 다른 커스텀 메트릭과 같은 관찰 대상 메트릭이 사용자가 지정한 목표값과 일치하도록 레플리케이션 컨트롤러 또는 디플로이먼트에서 레플리카 개수를 주기적으로 조정한다.
 
 
 
@@ -355,7 +353,7 @@ API에 접속하려면 클러스터 관리자는 다음을 확인해야 한다.
 
 ## 구성가능한 스케일링 동작 지원
 
-[v1.18](https://github.com/kubernetes/enhancements/blob/master/keps/sig-autoscaling/20190307-configurable-scale-velocity-for-hpa.md)
+[v1.18](https://github.com/kubernetes/enhancements/blob/master/keps/sig-autoscaling/853-configurable-hpa-scale-velocity/README.md)
 부터 `v2beta2` API는 HPA `behavior` 필드를 통해
 스케일링 동작을 구성할 수 있다.
 동작은 `behavior` 필드 아래의 `scaleUp` 또는 `scaleDown`
diff --git a/content/ko/docs/tasks/tools/_index.md b/content/ko/docs/tasks/tools/_index.md
index 8c2b3e1aed..990a9fd99b 100755
--- a/content/ko/docs/tasks/tools/_index.md
+++ b/content/ko/docs/tasks/tools/_index.md
@@ -17,9 +17,9 @@ no_list: true
 `kubectl` 은 다양한 리눅스 플랫폼, macOS, 그리고 윈도우에 설치할 수 있다.
 각각에 대한 설치 가이드는 다음과 같다.
 
-- [리눅스에 `kubectl` 설치하기](install-kubectl-linux)
-- [macOS에 `kubectl` 설치하기](install-kubectl-macos)
-- [윈도우에 `kubectl` 설치하기](install-kubectl-windows)
+- [리눅스에 `kubectl` 설치하기](/ko/docs/tasks/tools/install-kubectl-linux/)
+- [macOS에 `kubectl` 설치하기](/ko/docs/tasks/tools/install-kubectl-macos/)
+- [윈도우에 `kubectl` 설치하기](/ko/docs/tasks/tools/install-kubectl-windows/)
 
 ## kind
 
diff --git a/content/ko/docs/tutorials/_index.md b/content/ko/docs/tutorials/_index.md
index 7c1216c5fd..8d3fd54010 100644
--- a/content/ko/docs/tutorials/_index.md
+++ b/content/ko/docs/tutorials/_index.md
@@ -27,6 +27,8 @@ content_type: concept
 
 ## 구성
 
+* [예제: Java 마이크로서비스 구성하기](/ko/docs/tutorials/configuration/configure-java-microservice/)
+
 * [컨피그 맵을 사용해서 Redis 설정하기](/ko/docs/tutorials/configuration/configure-redis-using-configmap/)
 
 ## 상태 유지를 하지 않는(stateless) 애플리케이션
diff --git a/content/ko/docs/tutorials/clusters/apparmor.md b/content/ko/docs/tutorials/clusters/apparmor.md
index ae3fce6cb8..43b07e293b 100644
--- a/content/ko/docs/tutorials/clusters/apparmor.md
+++ b/content/ko/docs/tutorials/clusters/apparmor.md
@@ -322,7 +322,7 @@ Events:
   23s          23s         1        {kubelet e2e-test-stclair-node-pool-t1f5}             Warning        AppArmor    Cannot enforce AppArmor: profile "k8s-apparmor-example-allow-write" is not loaded
 ```
 
-파드 상태는 Failed이며 오류메시지는 `Pod Cannot enforce AppArmor: profile
+파드 상태는 Pending이며, 오류 메시지는 `Pod Cannot enforce AppArmor: profile
 "k8s-apparmor-example-allow-write" is not loaded`이다. 이벤트도 동일한 메시지로 기록되었다.
 
 ## 관리 {#administration}
diff --git a/content/ko/docs/tutorials/hello-minikube.md b/content/ko/docs/tutorials/hello-minikube.md
index 39e57ff501..e5831046df 100644
--- a/content/ko/docs/tutorials/hello-minikube.md
+++ b/content/ko/docs/tutorials/hello-minikube.md
@@ -48,7 +48,7 @@ Katacode는 무료로 브라우저에서 쿠버네티스 환경을 제공한다.
     {{< kat-button >}}
 
 {{< note >}}
-    minikube를 로컬에 설치했다면 `minikube start`를 실행한다.
+    minikube를 로컬에 설치했다면 `minikube start`를 실행한다. `minikube dashboard` 명령을 실행하기 전에, 새 터미널을 열고, 그 터미널에서 `minikube dashboard` 명령을 실행한 후, 원래의 터미널로 돌아온다.
 {{< /note >}}
 
 2. 브라우저에서 쿠버네티스 대시보드를 열어보자.
@@ -154,7 +154,7 @@ minikube dashboard --url
     `k8s.gcr.io/echoserver` 이미지 내의 애플리케이션 코드는 TCP 포트 8080에서만 수신한다. `kubectl expose`를
     사용하여 다른 포트를 노출한 경우, 클라이언트는 다른 포트에 연결할 수 없다.
 
-2. 방금 생성한 서비스 살펴보기
+2. 생성한 서비스 살펴보기
 
     ```shell
     kubectl get services
@@ -229,7 +229,7 @@ minikube 툴은 활성화하거나 비활성화할 수 있고 로컬 쿠버네
     metrics-server was successfully enabled
     ```
 
-3. 방금 생성한 파드와 서비스를 확인한다.
+3. 생성한 파드와 서비스를 확인한다.
 
     ```shell
     kubectl get pod,svc -n kube-system
diff --git a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
index a17ae9f320..8b0a258ae6 100644
--- a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -434,7 +434,7 @@ web-4     0/1       ContainerCreating   0         0s
 web-4     1/1       Running   0         19s
 ```
 
-스테이트풀셋 컨트롤러는 레플리카개수를 스케일링한다.
+스테이트풀셋 컨트롤러는 레플리카 개수를 스케일링한다.
 [스테이트풀셋 생성](#차례대로-파드-생성하기)으로 스테이트풀셋 컨트롤러는
 각 파드을 순차적으로 각 순번에 따라 생성하고 후속 파드 시작 전에
 이전 파드가 Running과 Ready 상태가 될 때까지
@@ -1067,9 +1067,10 @@ statefulset "web" deleted
 ### Parallel 파드 관리
 
 `Parallel` 파드 관리는 스테이트풀셋 컨트롤러가 모든 파드를
-병렬로 시작하고 종료하는 것으로 다른 파드를 시작/종료하기 전에
+병렬로 시작하고 종료하는 것으로, 다른 파드를 시작/종료하기 전에
 파드가 Running과 Ready 상태로 전환되거나 완전히 종료되기까지
 기다리지 않음을 뜻한다.
+이 옵션은 스케일링 동작에만 영향을 미치며, 업데이트 동작에는 영향을 미치지 않는다.
 
 {{< codenew file="application/web/web-parallel.yaml" >}}
 
@@ -1114,7 +1115,7 @@ web-1     1/1       Running   0         10s
 스테이트풀셋 컨트롤러는 `web-0`와  `web-1`를 둘 다 동시에 시작했다.
 
 두 번째 터미널을 열어 놓고 다른 터미널창에서 스테이트풀셋을
-스케일링 하자.
+스케일링하자.
 
 ```shell
 kubectl scale statefulset/web --replicas=4
diff --git a/content/ko/docs/tutorials/stateless-application/guestbook.md b/content/ko/docs/tutorials/stateless-application/guestbook.md
index 04230b4f3e..1a984319d8 100644
--- a/content/ko/docs/tutorials/stateless-application/guestbook.md
+++ b/content/ko/docs/tutorials/stateless-application/guestbook.md
@@ -49,13 +49,15 @@ min-kubernetes-server-version: v1.14
 1. 매니페스트 파일을 다운로드한 디렉터리에서 터미널 창을 시작한다.
 1. `mongo-deployment.yaml` 파일을 통해 MongoDB 디플로이먼트에 적용한다.
 
+      <!--
+      콘텐츠에 대한 로컬 테스트는 파일의 상대 경로로 한다.
+      kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-deployment.yaml
       ```
-<!--
-컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
-kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.yaml
--->
+
 
 1. 파드의 목록을 질의하여 MongoDB 파드가 실행 중인지 확인한다.
 
@@ -84,14 +86,15 @@ kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.ya
 
 1. `mongo-service.yaml` 파일을 통해 MongoDB 서비스에 적용한다.
 
+      <!--
+      콘텐츠에 대한 로컬 테스트는 파일의 상대 경로로 한다.
+      kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
       ```
 
-<!--
-컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
-kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
--->
 
 1. 서비스의 목록을 질의하여 MongoDB 서비스가 실행 중인지 확인한다.
 
@@ -122,14 +125,15 @@ kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
 
 1. `frontend-deployment.yaml` 파일을 통해 프론트엔드의 디플로이먼트에 적용한다.
 
+      <!--
+      콘텐츠에 대한 로컬 테스트는 파일의 상대 경로로 한다.
+      kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-deployment.yaml
       ```
 
-<!--
-컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
-kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment.yaml
--->
 
 1. 파드의 목록을 질의하여 세 개의 프론트엔드 복제본이 실행되고 있는지 확인한다.
 
@@ -160,14 +164,15 @@ Google Compute Engine 또는 Google Kubernetes Engine과 같은 일부 클라우
 
 1. `frontend-service.yaml` 파일을 통해 프론트엔드 서비스에 적용시킨다.
 
+      <!--
+      콘텐츠에 대한 로컬 테스트는 파일의 상대 경로로 한다.
+      kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-service.yaml
       ```
 
-<!--
-컨텐츠에 대한 로컬 테스트는 파일의 상대경로로 한다.
-kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.yaml
--->
 
 1. 서비스의 목록을 질의하여 프론트엔드 서비스가 실행 중인지 확인한다.
 
@@ -179,7 +184,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.ya
 
       ```
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)        AGE
-      frontend       ClusterIP   10.0.0.112   <none>       80/TCP   6s
+      frontend       ClusterIP   10.0.0.112   <none>        80/TCP         6s
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP        4m
       mongo          ClusterIP   10.0.0.151   <none>        6379/TCP       2m
       ```
@@ -214,8 +219,8 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.ya
       결과는 아래와 같은 형태로 나타난다.
 
       ```
-      NAME       TYPE        CLUSTER-IP      EXTERNAL-IP        PORT(S)        AGE
-      frontend   ClusterIP   10.51.242.136   109.197.92.229     80:32372/TCP   1m
+      NAME       TYPE           CLUSTER-IP      EXTERNAL-IP        PORT(S)        AGE
+      frontend   LoadBalancer   10.51.242.136   109.197.92.229     80:32372/TCP   1m
       ```
 
 1. IP 주소를 복사하고, 방명록을 보기 위해 브라우저에서 페이지를 로드한다.
@@ -245,7 +250,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.ya
       frontend-3823415956-k22zn       1/1       Running   0          54m
       frontend-3823415956-w9gbt       1/1       Running   0          54m
       frontend-3823415956-x2pld       1/1       Running   0          5s
-      mongo-1068406935-3lswp   1/1       Running   0          56m
+      mongo-1068406935-3lswp          1/1       Running   0          56m
       ```
 
 1. 프론트엔드 파드의 수를 축소하기 위해 아래 명령어를 실행한다.
@@ -266,7 +271,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.ya
       NAME                            READY     STATUS    RESTARTS   AGE
       frontend-3823415956-k22zn       1/1       Running   0          1h
       frontend-3823415956-w9gbt       1/1       Running   0          1h
-      mongo-1068406935-3lswp   1/1       Running   0          1h
+      mongo-1068406935-3lswp          1/1       Running   0          1h
       ```
 
 
diff --git a/content/ko/examples/application/job/cronjob.yaml b/content/ko/examples/application/job/cronjob.yaml
index 816d682f28..da905a9048 100644
--- a/content/ko/examples/application/job/cronjob.yaml
+++ b/content/ko/examples/application/job/cronjob.yaml
@@ -1,4 +1,4 @@
-apiVersion: batch/v1beta1
+apiVersion: batch/v1
 kind: CronJob
 metadata:
   name: hello
diff --git a/content/ko/examples/application/zookeeper/zookeeper.yaml b/content/ko/examples/application/zookeeper/zookeeper.yaml
index a858a72613..4d893b369b 100644
--- a/content/ko/examples/application/zookeeper/zookeeper.yaml
+++ b/content/ko/examples/application/zookeeper/zookeeper.yaml
@@ -27,7 +27,7 @@ spec:
   selector:
     app: zk
 ---
-apiVersion: policy/v1beta1
+apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:
   name: zk-pdb

From ef35a914374383ad54e628fbccff651ec9913b27 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 19 Apr 2021 16:24:55 +0900
Subject: [PATCH 588/788] [ko] Update outdated files in dev-1.21-ko.1 (p6)

---
 content/ko/docs/setup/release/notes.md | 3442 +++++++++++-------------
 1 file changed, 1508 insertions(+), 1934 deletions(-)

diff --git a/content/ko/docs/setup/release/notes.md b/content/ko/docs/setup/release/notes.md
index 8cb17b2ec0..05de7fb440 100644
--- a/content/ko/docs/setup/release/notes.md
+++ b/content/ko/docs/setup/release/notes.md
@@ -1,5 +1,5 @@
 ---
-title: v1.20 릴리스 노트
+title: v1.21 릴리스 노트
 weight: 10
 card:
   name: release-notes
@@ -13,953 +13,760 @@ card:
 
 <!-- NEW RELEASE NOTES ENTRY -->
 
-# v1.20.0
+# v1.21.0
 
 [문서](https://docs.k8s.io)
 
-## v1.20.0 다운로드
+## v1.21.0 다운로드
 
 파일명 | sha512 해시
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes.tar.gz) | `ebfe49552bbda02807034488967b3b62bf9e3e507d56245e298c4c19090387136572c1fca789e772a5e8a19535531d01dcedb61980e42ca7b0461d3864df2c14`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-src.tar.gz) | `bcbd67ed0bb77840828c08c6118ad0c9bf2bcda16763afaafd8731fd6ce735be654feef61e554bcc34c77c65b02a25dae565adc5e1dc49a2daaa0d115bf1efe6`
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes.tar.gz) | `19bb76a3fa5ce4b9f043b2a3a77c32365ab1fcb902d8dd6678427fb8be8f49f64a5a03dc46aaef9c7dadee05501cf83412eda46f0edacbb8fc1ed0bf5fb79142`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-src.tar.gz) | `f942e6d6c10007a6e9ce21e94df597015ae646a7bc3e515caf1a3b79f1354efb9aff59c40f2553a8e3d43fe4a01742241f5af18b69666244906ed11a22e3bc49`
 
 ### 클라이언트 바이너리
 
 파일명 | sha512 해시
 -------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-darwin-amd64.tar.gz) | `3609f6483f4244676162232b3294d7a2dc40ae5bdd86a842a05aa768f5223b8f50e1d6420fd8afb2d0ce19de06e1d38e5e5b10154ba0cb71a74233e6dc94d5a0`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-386.tar.gz) | `e06c08016a08137d39804383fdc33a40bb2567aa77d88a5c3fd5b9d93f5b581c635b2c4faaa718ed3bb2d120cb14fe91649ed4469ba72c3a3dda1e343db545ed`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-amd64.tar.gz) | `081472833601aa4fa78e79239f67833aa4efcb4efe714426cd01d4ddf6f36fbf304ef7e1f5373bff0fdff44a845f7560165c093c108bd359b5ab4189f36b1f2f`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-arm.tar.gz) | `037f84a2f29fe62d266cab38ac5600d058cce12cbc4851bcf062fafba796c1fbe23a0c2939cd15784854ca7cd92383e5b96a11474fc71fb614b47dbf98a477d9`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-arm64.tar.gz) | `275727e1796791ca3cbe52aaa713a2660404eab6209466fdc1cfa8559c9b361fe55c64c6bcecbdeba536b6d56213ddf726e58adc60f959b6f77e4017834c5622`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-ppc64le.tar.gz) | `7a9965293029e9fcdb2b7387467f022d2026953b8461e6c84182abf35c28b7822d2389a6d8e4d8e532d2ea5d5d67c6fee5fb6c351363cb44c599dc8800649b04`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-linux-s390x.tar.gz) | `85fc449ce1980f5f030cc32e8c8e2198c1cc91a448e04b15d27debc3ca56aa85d283f44b4f4e5fed26ac96904cc12808fa3e9af3d8bf823fc928befb9950d6f5`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-windows-386.tar.gz) | `4c0a27dba1077aaee943e0eb7a787239dd697e1d968e78d1933c1e60b02d5d233d58541d5beec59807a4ffe3351d5152359e11da120bf64cacb3ee29fbc242e6`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-client-windows-amd64.tar.gz) | `29336faf7c596539b8329afbbdceeddc843162501de4afee44a40616278fa1f284d8fc48c241fc7d52c65dab70f76280cc33cec419c8c5dbc2625d9175534af8`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-darwin-amd64.tar.gz) | `be9d1440e418e5253fb8a3d8aba705ca8160746a9bd17325ad626a986b6da9f733af864155a651a32b7bca94b533b8d596005ddbe5248bdeea85db47a1b957ed`
+[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-darwin-arm64.tar.gz) | `eed0ddc81d104bb2d41ace13f737c490423d5df4ebddc7376e45c18ed66af35933c9376b912c1c3da105945b04056f6ca0870c156bee8a307cf4189ca5eb1dd1`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-386.tar.gz) | `8a2f30c4434199762f2a96141dab4241c1cce2711bea9ea39cc63c2c5e7d31719ed7f076efac1931604e3a94578d3bbf0cfa454965708c96f3cfb91789868746`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-amd64.tar.gz) | `cd3cfa645fa31de3716f1f63506e31b73d2aa8d37bb558bb3b3e8c151f35b3d74d44e03cbd05be67e380f9a5d015aba460222afdac6677815cd99a85c2325cf0`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-arm.tar.gz) | `936042aa11cea0f6dfd2c30fc5dbe655420b34799bede036b1299a92d6831f589ca10290b73b9c9741560b603ae31e450ad024e273f2b4df5354bfac272691d8`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-arm64.tar.gz) | `42beb75364d7bf4bf526804b8a35bd0ab3e124b712e9d1f45c1b914e6be0166619b30695feb24b3eecef134991dacb9ab3597e788bd9e45cf35addddf20dd7f6`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-ppc64le.tar.gz) | `4baba2ed7046b28370eccc22e2378ae79e3ce58220d6f4f1b6791e8233bec8379e30200bb20b971456b83f2b791ea166fdfcf1ea56908bc1eea03590c0eda468`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-s390x.tar.gz) | `37fa0c4d703aef09ce68c10ef3e7362b0313c8f251ce38eea579cd18fae4023d3d2b70e0f31577cabe6958ab9cfc30e98d25a7c64e69048b423057c3cf728339`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-windows-386.tar.gz) | `6900db36c1e3340edfd6dfd8d720575a904c932d39a8a7fa36401595e971a0235bd42111dbcc1cbb77e7374e47f1380a68c637997c18f96a0d9cdc9f3714c4c9`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-windows-amd64.tar.gz) | `90de67f6f79fc63bcfdf35066e3d84501cc85433265ffad36fd1a7a428a31b446249f0644a1e97495ea8b2a08e6944df6ef30363003750339edaa2aceffe937c`
 
 ### 서버 바이너리
 
 파일명 | sha512 해시
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-amd64.tar.gz) | `fb56486a55dbf7dbacb53b1aaa690bae18d33d244c72a1e2dc95fb0fcce45108c44ba79f8fa04f12383801c46813dc33d2d0eb2203035cdce1078871595e446e`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-arm.tar.gz) | `735ed9993071fe35b292bf06930ee3c0f889e3c7edb983195b1c8e4d7113047c12c0f8281fe71879fc2fcd871e1ee587f03b695a03c8512c873abad444997a19`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-arm64.tar.gz) | `ffab155531d5a9b82487ee1abf4f6ef49626ea58b2de340656a762e46cf3e0f470bdbe7821210901fe1114224957c44c1d9cc1e32efb5ee24e51fe63990785b2`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-ppc64le.tar.gz) | `9d5730d35c4ddfb4c5483173629fe55df35d1e535d96f02459468220ac2c97dc01b995f577432a6e4d1548b6edbfdc90828dc9c1f7cf7464481af6ae10aaf118`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-server-linux-s390x.tar.gz) | `6e4c165306940e8b99dd6e590f8542e31aed23d2c7a6808af0357fa425cec1a57016dd66169cf2a95f8eb8ef70e1f29e2d500533aae889e2e3d9290d04ab8721`
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-amd64.tar.gz) | `3941dcc2309ac19ec185603a79f5a086d8a198f98c04efa23f15a177e5e1f34946ea9392ba9f5d24d0d727839438f067fef1001fc6e88b27b8b01e35bbd962ca`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-arm.tar.gz) | `6507abf6c2ec2b336901dc23269f6c577ec0049b8bad3c9dd6ad63f21aa10f09bfbbfa6e064c2466d250411d3e10f8672791a9e10942e38de7bfbaf7a8bcc9da`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-arm64.tar.gz) | `5abe76f867ca6865344e957bf166b81766c049ec4eb183a8a5580c22a7f8474db1edf90fd901a5833e56128b6825811653a1d27f72fd34ce5b1287a8c10da05c`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-ppc64le.tar.gz) | `62507b182ca25396a285d91241536860e58f54fac937e97cbdf91948c83bb41be97d33277400489bf50e85164d560205540b76e94e5d519892312bdc63df1067`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-s390x.tar.gz) | `04f2a1f7d1388e4a7d7d9f597f872a3da36f26839cfed16aad6df07021c03f4dca1df06b19cfda56df09d1c2d9a13ebd0af40ca1b9b6aecfaf427ab7712d88f3`
 
 ### 노드 바이너리
 
 파일명 | sha512 해시
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-amd64.tar.gz) | `3e6c90561dd1c27fa1dff6953c503251c36001f7e0f8eff3ec918c74ae2d9aa25917d8ac87d5b4224b8229f620b1830442e6dce3b2a497043f8497eee3705696`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-arm.tar.gz) | `26db385d9ae9a97a1051a638e7e3de22c4bbff389d5a419fe40d5893f9e4fa85c8b60a2bd1d370fd381b60c3ca33c5d72d4767c90898caa9dbd4df6bd116a247`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-arm64.tar.gz) | `5b8b63f617e248432b7eb913285a8ef8ba028255216332c05db949666c3f9e9cb9f4c393bbd68d00369bda77abf9bfa2da254a5c9fe0d79ffdad855a77a9d8ed`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-ppc64le.tar.gz) | `60da7715996b4865e390640525d6e98593ba3cd45c6caeea763aa5355a7f989926da54f58cc5f657f614c8134f97cd3894b899f8b467d100dca48bc22dd4ff63`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-linux-s390x.tar.gz) | `9407dc55412bd04633f84fcefe3a1074f3eaa772a7cb9302242b8768d6189b75d37677a959f91130e8ad9dc590f9ba8408ba6700a0ceff6827315226dd5ee1e6`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0/kubernetes-node-windows-amd64.tar.gz) | `9d4261af343cc330e6359582f80dbd6efb57d41f882747a94bbf47b4f93292d43dd19a86214d4944d268941622dfbc96847585e6fec15fddc4dbd93d17015fa8`
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-amd64.tar.gz) | `c1831c708109c31b3878e5a9327ea4b9e546504d0b6b00f3d43db78b5dd7d5114d32ac24a9a505f9cadbe61521f0419933348d2cd309ed8cfe3987d9ca8a7e2c`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-arm.tar.gz) | `b68dd5bcfc7f9ce2781952df40c8c3a64c29701beff6ac22f042d6f31d4de220e9200b7e8272ddf608114327770acdaf3cb9a34a0a5206e784bda717ea080e0f`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-arm64.tar.gz) | `7fa84fc500c28774ed25ca34b6f7b208a2bea29d6e8379f84b9f57bd024aa8fe574418cee7ee26edd55310716d43d65ae7b9cbe11e40c995fe2eac7f66bdb423`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-ppc64le.tar.gz) | `a4278b3f8e458e9581e01f0c5ba8443303c987988ee136075a8f2f25515d70ca549fbd2e4d10eefca816c75c381d62d71494bd70c47034ab47f8315bbef4ae37`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-s390x.tar.gz) | `8de2bc6f22f232ff534b45012986eac23893581ccb6c45bd637e40dbe808ce31d5a92375c00dc578bdbadec342b6e5b70c1b9f3d3a7bb26ccfde97d71f9bf84a`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-windows-amd64.tar.gz) | `b82e94663d330cff7a117f99a7544f27d0bc92b36b5a283b3c23725d5b33e6f15e0ebf784627638f22f2d58c58c0c2b618ddfd226a64ae779693a0861475d355`
 
-## v1.19.0 이후 변경로그(Changelog)
+## v1.20.0 이후 변경로그 (Changelog)
 
-## 새로운 소식(주요 테마)
+# v1.21.0-rc.0 릴리스 노트
 
-### Dockershim 사용 중단(deprecation)
+[문서](https://docs.k8s.io/docs/home)
 
-Docker as an underlying runtime is being deprecated. Docker-produced images will continue to work in your cluster with all runtimes, as they always have.
-The Kubernetes community [has written a blog post about this in detail](https://blog.k8s.io/2020/12/02/dont-panic-kubernetes-and-docker/) with [a dedicated FAQ page for it](https://blog.k8s.io/2020/12/02/dockershim-faq/).
+# v1.20.0 이후 변경로그 (Changelog)
 
-### client-go를 위한 외부 자격증명(credential) 제공자
+## 새로운 소식 (주요 테마)
 
-The client-go credential plugins can now be passed in the current cluster information via the `KUBERNETES_EXEC_INFO` environment variable. Learn more about this on [client-go credential plugins documentation](https://docs.k8s.io/reference/access-authn-authz/authentication/#client-go-credential-plugins/).
+### Deprecation of PodSecurityPolicy
 
-### 기능 게이트(feature gate)를 통해 크론잡(CronJob) 컨트롤러 v2 활성화 가능
+PSP as an admission controller resource is being deprecated. Deployed PodSecurityPolicy's will keep working until version 1.25, their target removal from the codebase. A new feature, with a working title of "PSP replacement policy", is being developed in [KEP-2579](https://features.k8s.io/2579). To learn more, read [PodSecurityPolicy Deprecation: Past, Present, and Future](https://blog.k8s.io/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/).
 
-An alternative implementation of `CronJob` controller is now available as an alpha feature in this release, which has experimental performance improvement by using informers instead of polling. While this will be the default behavior in the future, you can [try them in this release through a feature gate](https://docs.k8s.io/concepts/workloads/controllers/cron-jobs/).
+### Kubernetes API Reference Documentation
 
-### PID 제한(PID Limits)이 안정 기능(General Availability)으로 전환
+The API reference is now generated with [`gen-resourcesdocs`](https://github.com/kubernetes-sigs/reference-docs/tree/c96658d89fb21037b7d00d27e6dbbe6b32375837/gen-resourcesdocs) and it is moving to [Kubernetes API](https://docs.k8s.io/reference/kubernetes-api/)
 
-PID Limits features are now generally available on both `SupportNodePidsLimit` (node-to-pod PID isolation) and `SupportPodPidsLimit` (ability to limit PIDs per pod), after being enabled-by-default in beta stage for a year.
+### Kustomize Updates in Kubectl
 
-### API 우선순위 및 공정성(API Priority and Fairness)이 베타 단계로 전환
+[Kustomize](https://github.com/kubernetes-sigs/kustomize) version in kubectl had a jump from v2.0.3 to [v4.0.5](https://github.com/kubernetes/kubernetes/pull/98946). Kustomize is now treated as a library and future updates will be less sporadic.
 
-Initially introduced in 1.18, Kubernetes 1.20 now enables API Priority and Fairness (APF) by default. This allows `kube-apiserver` to [categorize incoming requests by priority levels](https://docs.k8s.io/concepts/cluster-administration/flow-control/).
+### Default Container Labels
 
-### IPv4/IPv6이 작동
+Pod with multiple containers can use `kubectl.kubernetes.io/default-container` label to have a container preselected for kubectl commands. More can be read in [KEP-2227](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/2227-kubectl-default-container/README.md).
 
-IPv4/IPv6 dual-stack has been reimplemented for 1.20 to support dual-stack Services, based on user and community feedback. If your cluster has dual-stack enabled, you can create Services which can use IPv4, IPv6, or both, and you can change this setting for existing Services. Details are available in updated [IPv4/IPv6 dual-stack docs](https://docs.k8s.io/concepts/services-networking/dual-stack/), which cover the nuanced array of options.
+### Immutable Secrets and ConfigMaps
 
-We expect this implementation to progress from alpha to beta and GA in coming releases, so we’re eager to have you comment about your dual-stack experiences in [#k8s-dual-stack](https://kubernetes.slack.com/messages/k8s-dual-stack) or in [enhancements #563](https://features.k8s.io/563).
+Immutable Secrets and ConfigMaps graduates to GA. This feature allows users to specify that the contents of a particular Secret or ConfigMap is immutable for its object lifetime. For such instances, Kubelet will not watch/poll for changes and therefore reducing apiserver load.
 
-### go1.15.5
+### Structured Logging in Kubelet
 
-go1.15.5 has been integrated to Kubernetes project as of this release, [including other infrastructure related updates on this effort](https://github.com/kubernetes/kubernetes/pull/95776).
+Kubelet has adopted structured logging, thanks to community effort in accomplishing this within the release timeline. Structured logging in the project remains an ongoing effort -- for folks interested in participating, [keep an eye / chime in to the mailing list discussion](https://groups.google.com/g/kubernetes-dev/c/y4WIw-ntUR8).
 
-### CSI 볼륨 스냅샷(CSI Volume Snapshot)이 안정 기능으로 전환
+### Storage Capacity Tracking
 
-CSI Volume Snapshot moves to GA in the 1.20 release. This feature provides a standard way to trigger volume snapshot operations in Kubernetes and allows Kubernetes users to incorporate snapshot operations in a portable manner on any Kubernetes environment regardless of supporting underlying storage providers.
-Additionally, these Kubernetes snapshot primitives act as basic building blocks that unlock the ability to develop advanced, enterprise grade, storage administration features for Kubernetes: including application or cluster level backup solutions.
-Note that snapshot support will require Kubernetes distributors to bundle the Snapshot controller, Snapshot CRDs, and validation webhook. In addition, a CSI driver supporting the snapshot functionality must also be deployed on the cluster.
+Traditionally, the Kubernetes scheduler was based on the assumptions that additional persistent storage is available everywhere in the cluster and has infinite capacity. Topology constraints addressed the first point, but up to now pod scheduling was still done without considering that the remaining storage capacity may not be enough to start a new pod. [Storage capacity tracking](https://docs.k8s.io/concepts/storage/storage-capacity/) addresses that by adding an API for a CSI driver to report storage capacity and uses that information in the Kubernetes scheduler when choosing a node for a pod. This feature serves as a stepping stone for supporting dynamic provisioning for local volumes and other volume types that are more capacity constrained.
 
-### 비재귀적 볼륨 소유(Non-recursive Volume Ownership (FSGroup))가 베타 단계로 전환
+### Generic Ephemeral Volumes
 
-By default, the `fsgroup` setting, if specified, recursively updates permissions for every file in a volume on every mount. This can make mount, and pod startup, very slow if the volume has many files.
-This setting enables a pod to specify a `PodFSGroupChangePolicy` that indicates that volume ownership and permissions will be changed only when permission and ownership of the root directory does not match with expected permissions on the volume.
+[Generic ephermeral volumes](https://docs.k8s.io/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes) feature allows any existing storage driver that supports dynamic provisioning to be used as an ephemeral volume with the volume’s lifecycle bound to the Pod. It can be used to provide scratch storage that is different from the root disk, for example persistent memory, or a separate local disk on that node. All StorageClass parameters for volume provisioning are supported. All features supported with PersistentVolumeClaims are supported, such as storage capacity tracking, snapshots and restore, and volume resizing.
 
-### FSGroup를 위한 CSIDriver 정책이 베타 단계로 전환
+### CSI Service Account Token
 
-The FSGroup's CSIDriver Policy is now beta in 1.20. This allows CSIDrivers to explicitly indicate if they want Kubernetes to manage permissions and ownership for their volumes via `fsgroup`.
+CSI Service Account Token feature moves to Beta in 1.21. This feature improves the security posture and allows CSI drivers to receive pods' [bound service account tokens](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md). This feature also provides a knob to re-publish volumes so that short-lived volumes can be refreshed.
 
-### CSI 드라이버의 보안성 향상(알파)
+### CSI Health Monitoring
 
-In 1.20, we introduce a new alpha feature `CSIServiceAccountToken`. This feature allows CSI drivers to impersonate the pods that they mount the volumes for. This improves the security posture in the mounting process where the volumes are ACL’ed on the pods’ service account without handing out unnecessary permissions to the CSI drivers’ service account. This feature is especially important for secret-handling CSI drivers, such as the secrets-store-csi-driver. Since these tokens can be rotated and short-lived, this feature also provides a knob for CSI drivers to receive `NodePublishVolume` RPC calls periodically with the new token. This knob is also useful when volumes are short-lived, e.g. certificates.
-
-### 그레이스풀 노드 종료(Graceful Node Shutdown) 기능 소개(알파)
-
-The `GracefulNodeShutdown` feature is now in Alpha. This allows kubelet to be aware of node system shutdowns, enabling graceful termination of pods during a system shutdown. This feature can be [enabled through feature gate](https://docs.k8s.io/concepts/architecture/nodes/#graceful-node-shutdown).
-
-### 런타임 로그 관리(sanitation)
-
-Logs can now be configured to use runtime protection from leaking sensitive data. [Details for this experimental feature is available in documentation](https://docs.k8s.io/concepts/cluster-administration/system-logs/#log-sanitization).
-
-### 파드 리소스 메트릭
-
-On-demand metrics calculation is now available through `/metrics/resources`. [When enabled](
-https://docs.k8s.io/concepts/cluster-administration/system-metrics#kube-scheduler-metrics), the endpoint will report the requested resources and the desired limits of all running pods.
-
-### `RootCAConfigMap` 소개
-
-`RootCAConfigMap` graduates to Beta, seperating from `BoundServiceAccountTokenVolume`. The `kube-root-ca.crt` ConfigMap is now available to every namespace, by default. It contains the Certificate Authority bundle for verify kube-apiserver connections.
-
-### `kubectl debug` 이 베타 단계로 전환
-
-`kubectl alpha debug` graduates from alpha to beta in 1.20, becoming `kubectl debug`.
-`kubectl debug` provides support for common debugging workflows directly from kubectl. Troubleshooting scenarios supported in this release of `kubectl` include:
-Troubleshoot workloads that crash on startup by creating a copy of the pod that uses a different container image or command.
-Troubleshoot distroless containers by adding a new container with debugging tools, either in a new copy of the pod or using an ephemeral container. (Ephemeral containers are an alpha feature that are not enabled by default.)
-Troubleshoot on a node by creating a container running in the host namespaces and with access to the host’s filesystem.
-Note that as a new builtin command, `kubectl debug` takes priority over any `kubectl` plugin named “debug”. You will need to rename the affected plugin.
-Invocations using `kubectl alpha debug` are now deprecated and will be removed in a subsequent release. Update your scripts to use `kubectl debug` instead of `kubectl alpha debug`!
-For more information about kubectl debug, see Debugging Running Pods on the Kubernetes website, kubectl help debug, or reach out to SIG CLI by visiting #sig-cli or commenting on [enhancement #1441](https://features.k8s.io/1441).
-
-### kubeadm에서 사용 중단된 플래그 삭제
-
-`kubeadm` applies a number of deprecations and removals of deprecated features in this release. More details are available in the Urgent Upgrade Notes and Kind / Deprecation sections.
-
-### 파드의 호스트네임을 FQDN으로 사용하는 것이 베타 단계로 전환
-
-Previously introduced in 1.19 behind a feature gate, `SetHostnameAsFQDN` is now enabled by default. More details on this behavior is available in [documentation for DNS for Services and Pods](https://docs.k8s.io/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field)
-
-### `TokenRequest` / `TokenRequestProjection` 이 안정 기능으로 전환
-
-Service account tokens bound to pod is now a stable feature. The feature gates will be removed in 1.21 release. For more information, refer to notes below on the changelogs.
-
-### 런타임클래스(RuntimeClass)가 안정 기능으로 전환
-
-The `node.k8s.io` API groups are promoted from `v1beta1` to `v1`. `v1beta1` is now deprecated and will be removed in a future release, please start using `v1`. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-
-### 클라우드 컨트롤러 관리자(Cloud Controller Manager)가 이제 각 클라우드 공급자를 통해서만 제공
-
-Kubernetes will no longer ship an instance of the Cloud Controller Manager binary. Each Cloud Provider is expected to ship their own instance of this binary. Details for a Cloud Provider to create an instance of such a binary can be found under [here](https://github.com/kubernetes/kubernetes/tree/master/staging/src/k8s.io/cloud-provider/sample). Anyone with questions on building a Cloud Controller Manager should reach out to SIG Cloud Provider. Questions about the Cloud Controller Manager on a Managed Kubernetes solution should go to the relevant Cloud Provider. Questions about the Cloud Controller Manager on a non managed solution can be brought up with SIG Cloud Provider.
+The CSI health monitoring feature is being released as a second Alpha in Kubernetes 1.21. This feature enables CSI Drivers to share abnormal volume conditions from the underlying storage systems with Kubernetes so that they can be reported as events on PVCs or Pods. This feature serves as a stepping stone towards programmatic detection and resolution of individual volume health issues by Kubernetes.
 
 ## 알려진 이슈
 
-### kubelet의 요약(Summary) API는 가속기(accelerator) 메트릭을 가지고 있지 않음
-Currently, cadvisor_stats_provider provides AcceleratorStats but cri_stats_provider does not. As a result, when using cri_stats_provider, kubelet's Summary API does not have accelerator metrics. [There is an open work in progress to fix this](https://github.com/kubernetes/kubernetes/pull/96873).
+### `TopologyAwareHints` feature falls back to default behavior
+
+The feature gate currently falls back to the default behavior in most cases. Enabling the feature gate will add hints to `EndpointSlices`, but functional differences are only observed in non-dual stack kube-proxy implementation. [The fix will be available in coming releases](https://github.com/kubernetes/kubernetes/pull/100804).
 
 ## 긴급 업그레이드 노트
 
 ### (주의. 업그레이드 전에 반드시 읽어야 함)
 
-- A bug was fixed in kubelet where exec probe timeouts were not respected. This may result in unexpected behavior since the default timeout (if not specified) is `1s` which may be too small for some exec probes. Ensure that pods relying on this behavior are updated to correctly handle probe timeouts. See [configure probe](https://docs.k8s.io/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes) section of the documentation for more details.
-
-  - This change in behavior may be unexpected for some clusters and can be disabled by turning off the `ExecProbeTimeout` feature gate. This gate will be locked and removed in future releases so that exec probe timeouts are always respected. ([#94115](https://github.com/kubernetes/kubernetes/pull/94115), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Testing]
-- RuntimeClass feature graduates to General Availability. Promote `node.k8s.io` API groups from `v1beta1` to `v1`. `v1beta1` is now deprecated and will be removed in a future release, please start using `v1`. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-- API priority and fairness graduated to beta. 1.19 servers with APF turned on should not be run in a multi-server cluster with 1.20+ servers. ([#96527](https://github.com/kubernetes/kubernetes/pull/96527), [@adtac](https://github.com/adtac)) [SIG API Machinery and Testing]
-- For CSI drivers, kubelet no longer creates the target_path for NodePublishVolume in accordance with the CSI spec. Kubelet also no longer checks if staging and target paths are mounts or corrupted. CSI drivers need to be idempotent and do any necessary mount verification. ([#88759](https://github.com/kubernetes/kubernetes/pull/88759), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Kubeadm: http://git.k8s.io/enhancements/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md ([#95382](https://github.com/kubernetes/kubernetes/pull/95382), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-  - The label applied to control-plane nodes "node-role.kubernetes.io/master" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Introduce a new label "node-role.kubernetes.io/control-plane" that will be applied in parallel to "node-role.kubernetes.io/master" until the removal of the "node-role.kubernetes.io/master" label.
-  - Make "kubeadm upgrade apply" add the "node-role.kubernetes.io/control-plane" label on existing nodes that only have the "node-role.kubernetes.io/master" label during upgrade.
-  - Please adapt your tooling built on top of kubeadm to use the "node-role.kubernetes.io/control-plane" label.
-  - The taint applied to control-plane nodes "node-role.kubernetes.io/master:NoSchedule" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Apply toleration for a new, future taint "node-role.kubernetes.io/control-plane:NoSchedule" to the kubeadm CoreDNS / kube-dns managed manifests. Note that this taint is not yet applied to kubeadm control-plane nodes.
-  - Please adapt your workloads to tolerate the same future taint preemptively.
-
-- Kubeadm: improve the validation of serviceSubnet and podSubnet.
-  ServiceSubnet has to be limited in size, due to implementation details, and the mask can not allocate more than 20 bits.
-  PodSubnet validates against the corresponding cluster "--node-cidr-mask-size" of the kube-controller-manager, it fail if the values are not compatible.
-  kubeadm no longer sets the node-mask automatically on IPv6 deployments, you must check that your IPv6 service subnet mask is compatible with the default node mask /64 or set it accordenly.
-  Previously, for IPv6, if the podSubnet had a mask lower than /112, kubeadm calculated a node-mask to be multiple of eight and splitting the available bits to maximise the number used for nodes. ([#95723](https://github.com/kubernetes/kubernetes/pull/95723), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]
-- The deprecated flag --experimental-kustomize is now removed from kubeadm commands. Use --experimental-patches instead, which was introduced in 1.19. Migration information available in --help description for --experimental-patches. ([#94871](https://github.com/kubernetes/kubernetes/pull/94871), [@neolit123](https://github.com/neolit123))
-- Windows hyper-v container featuregate is deprecated in 1.20 and will be removed in 1.21 ([#95505](https://github.com/kubernetes/kubernetes/pull/95505), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- The kube-apiserver ability to serve on an insecure port, deprecated since v1.10, has been removed. The insecure address flags `--address` and `--insecure-bind-address` have no effect in kube-apiserver and will be removed in v1.24. The insecure port flags `--port` and `--insecure-port` may only be set to 0 and will be removed in v1.24. ([#95856](https://github.com/kubernetes/kubernetes/pull/95856), [@knight42](https://github.com/knight42), [SIG API Machinery, Node, Testing])
-- Add dual-stack Services (alpha).  This is a BREAKING CHANGE to an alpha API.
-  It changes the dual-stack API wrt Service from a single ipFamily field to 3
-  fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack),
-  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
-  clusterIP).  Most users do not need to set anything at all, defaulting will
-  handle it for them.  Services are single-stack unless the user asks for
-  dual-stack.  This is all gated by the "IPv6DualStack" feature gate. ([#91824](https://github.com/kubernetes/kubernetes/pull/91824), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- `TokenRequest` and `TokenRequestProjection` are now GA features. The following flags are required by the API server:
-  - `--service-account-issuer`, should be set to a URL identifying the API server that will be stable over the cluster lifetime.
-  - `--service-account-key-file`, set to one or more files containing one or more public keys used to verify tokens.
-  - `--service-account-signing-key-file`, set to a file containing a private key to use to sign service account tokens. Can be the same file given to `kube-controller-manager` with `--service-account-private-key-file`. ([#95896](https://github.com/kubernetes/kubernetes/pull/95896), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle]
-- kubeadm: make the command "kubeadm alpha kubeconfig user" accept a "--config" flag and remove the following flags:
-  - apiserver-advertise-address / apiserver-bind-port: use either localAPIEndpoint from InitConfiguration or controlPlaneEndpoint from ClusterConfiguration.
-  - cluster-name: use clusterName from ClusterConfiguration
-  - cert-dir: use certificatesDir from ClusterConfiguration ([#94879](https://github.com/kubernetes/kubernetes/pull/94879), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Resolves non-deterministic behavior of the garbage collection controller when ownerReferences with incorrect data are encountered. Events with a reason of `OwnerRefInvalidNamespace` are recorded when namespace mismatches between child and owner objects are detected. The [kubectl-check-ownerreferences](https://github.com/kubernetes-sigs/kubectl-check-ownerreferences) tool can be run prior to upgrading to locate existing objects with invalid ownerReferences.
-  - A namespaced object with an ownerReference referencing a uid of a namespaced kind which does not exist in the same namespace is now consistently treated as though that owner does not exist, and the child object is deleted.
-  - A cluster-scoped object with an ownerReference referencing a uid of a namespaced kind is now consistently treated as though that owner is not resolvable, and the child object is ignored by the garbage collector. ([#92743](https://github.com/kubernetes/kubernetes/pull/92743), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-
+- Kube-proxy's IPVS proxy mode no longer sets the net.ipv4.conf.all.route_localnet sysctl parameter. Nodes upgrading will have net.ipv4.conf.all.route_localnet set to 1 but new nodes will inherit the system default (usually 0). If you relied on any behavior requiring net.ipv4.conf.all.route_localnet, you must set ensure it is enabled as kube-proxy will no longer set it automatically. This change helps to further mitigate CVE-2020-8558. ([#92938](https://github.com/kubernetes/kubernetes/pull/92938), [@lbernail](https://github.com/lbernail)) [SIG Network and Release]
+ - Kubeadm: during "init" an empty cgroupDriver value in the KubeletConfiguration is now always set to "systemd" unless the user is explicit about it. This requires existing machine setups to configure the container runtime to use the "systemd" driver. Documentation on this topic can be found here: https://kubernetes.io/docs/setup/production-environment/container-runtimes/. When upgrading existing clusters / nodes using "kubeadm upgrade" the old cgroupDriver value is preserved, but in 1.22 this change will also apply to "upgrade". For more information on migrating to the "systemd" driver or remaining on the "cgroupfs" driver see: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/. ([#99471](https://github.com/kubernetes/kubernetes/pull/99471), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+ - Newly provisioned PVs by EBS plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99130](https://github.com/kubernetes/kubernetes/pull/99130), [@ayberk](https://github.com/ayberk)) [SIG Cloud Provider, Storage and Testing]
+ - Newly provisioned PVs by OpenStack Cinder plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99719](https://github.com/kubernetes/kubernetes/pull/99719), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider and Storage]
+ - Newly provisioned PVs by gce-pd will no longer have the beta FailureDomain label. gce-pd volume plugin will start to have GA topology label instead. ([#98700](https://github.com/kubernetes/kubernetes/pull/98700), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider, Storage and Testing]
+ - OpenStack Cinder CSI migration is on by default, Clinder CSI driver must be installed on clusters on OpenStack for Cinder volumes to work. ([#98538](https://github.com/kubernetes/kubernetes/pull/98538), [@dims](https://github.com/dims)) [SIG Storage]
+ - Remove alpha `CSIMigrationXXComplete` flag and add alpha `InTreePluginXXUnregister` flag. Deprecate `CSIMigrationvSphereComplete` flag and it will be removed in v1.22. ([#98243](https://github.com/kubernetes/kubernetes/pull/98243), [@Jiawei0227](https://github.com/Jiawei0227))
+ - Remove storage metrics `storage_operation_errors_total`, since we already have `storage_operation_status_count`.And add new field `status` for `storage_operation_duration_seconds`, so that we can know about all status storage operation latency. ([#98332](https://github.com/kubernetes/kubernetes/pull/98332), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
+ - The metric `storage_operation_errors_total` is not removed, but is marked deprecated, and the metric `storage_operation_status_count` is marked deprecated. In both cases the `storage_operation_duration_seconds` metric can be used to recover equivalent counts (using `status=fail-unknown` in the case of `storage_operations_errors_total`). ([#99045](https://github.com/kubernetes/kubernetes/pull/99045), [@mattcary](https://github.com/mattcary))
+ - `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior` features have been promoted to GA. `ServiceNodeExclusion` and `NodeDisruptionExclusion` are now unconditionally enabled, while `LegacyNodeRoleBehavior` is unconditionally disabled. To prevent control plane nodes from being added to load balancers automatically, upgrade users need to add "node.kubernetes.io/exclude-from-external-load-balancers" label to control plane nodes. ([#97543](https://github.com/kubernetes/kubernetes/pull/97543), [@pacoxu](https://github.com/pacoxu))
 
 ## 종류(Kind)별 변경 사항
 
 ### 사용 중단
 
-- Docker support in the kubelet is now deprecated and will be removed in a future release. The kubelet uses a module called "dockershim" which implements CRI support for Docker and it has seen maintenance issues in the Kubernetes community. We encourage you to evaluate moving to a container runtime that is a full-fledged implementation of CRI (v1alpha1 or v1 compliant) as they become available. ([#94624](https://github.com/kubernetes/kubernetes/pull/94624), [@dims](https://github.com/dims)) [SIG Node]
-- Kubeadm: deprecate self-hosting support. The experimental command "kubeadm alpha self-hosting" is now deprecated and will be removed in a future release. ([#95125](https://github.com/kubernetes/kubernetes/pull/95125), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: graduate the "kubeadm alpha certs" command to a parent command "kubeadm certs". The command "kubeadm alpha certs" is deprecated and will be removed in a future release. Please migrate. ([#94938](https://github.com/kubernetes/kubernetes/pull/94938), [@yagonobre](https://github.com/yagonobre)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. This change also removes the parent command "kubeadm alpha kubelet" as there are no more sub-commands under it for the time being. ([#94668](https://github.com/kubernetes/kubernetes/pull/94668), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated --kubelet-config flag for the command "kubeadm upgrade node" ([#94869](https://github.com/kubernetes/kubernetes/pull/94869), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubectl: deprecate --delete-local-data ([#95076](https://github.com/kubernetes/kubernetes/pull/95076), [@dougsland](https://github.com/dougsland)) [SIG CLI, Cloud Provider and Scalability]
-- Kubelet's deprecated endpoint `metrics/resource/v1alpha1` has been removed, please adopt `metrics/resource`. ([#94272](https://github.com/kubernetes/kubernetes/pull/94272), [@RainbowMango](https://github.com/RainbowMango)) [SIG Instrumentation and Node]
-- Removes deprecated scheduler metrics DeprecatedSchedulingDuration, DeprecatedSchedulingAlgorithmPredicateEvaluationSecondsDuration, DeprecatedSchedulingAlgorithmPriorityEvaluationSecondsDuration ([#94884](https://github.com/kubernetes/kubernetes/pull/94884), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-- Scheduler alpha metrics binding_duration_seconds and scheduling_algorithm_preemption_evaluation_seconds are deprecated, Both of those metrics are now covered as part of framework_extension_point_duration_seconds, the former as a PostFilter the latter and a Bind plugin. The plan is to remove both in 1.21 ([#95001](https://github.com/kubernetes/kubernetes/pull/95001), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-- Support 'controlplane' as a valid EgressSelection type in the EgressSelectorConfiguration API. 'Master' is deprecated and will be removed in v1.22. ([#95235](https://github.com/kubernetes/kubernetes/pull/95235), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-- The v1alpha1 PodPreset API and admission plugin has been removed with no built-in replacement. Admission webhooks can be used to modify pods on creation. ([#94090](https://github.com/kubernetes/kubernetes/pull/94090), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps, CLI, Cloud Provider, Scalability and Testing]
-
+- Aborting the drain command in a list of nodes will be deprecated. The new behavior will make the drain command go through all nodes even if one or more nodes failed during the drain. For now, users can try such experience by enabling --ignore-errors flag. ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan))
+- Delete deprecated `service.beta.kubernetes.io/azure-load-balancer-mixed-protocols` mixed procotol annotation in favor of the MixedProtocolLBService feature ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Deprecate the `topologyKeys` field in Service. This capability will be replaced with upcoming work around Topology Aware Subsetting and Service Internal Traffic Policy. ([#96736](https://github.com/kubernetes/kubernetes/pull/96736), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
+- Kube-proxy: remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
+- Kubeadm: deprecated command "alpha selfhosting pivot" is now removed. ([#97627](https://github.com/kubernetes/kubernetes/pull/97627), [@knight42](https://github.com/knight42))
+- Kubeadm: graduate the command `kubeadm alpha kubeconfig user` to `kubeadm kubeconfig user`. The `kubeadm alpha kubeconfig user` command is deprecated now. ([#97583](https://github.com/kubernetes/kubernetes/pull/97583), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: the "kubeadm alpha certs" command is removed now, please use "kubeadm certs" instead. ([#97706](https://github.com/kubernetes/kubernetes/pull/97706), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: the deprecated kube-dns is no longer supported as an option. If "ClusterConfiguration.dns.type" is set to "kube-dns" kubeadm will now throw an error. ([#99646](https://github.com/kubernetes/kubernetes/pull/99646), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubectl: The deprecated `kubectl alpha debug` command is removed. Use `kubectl debug` instead. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
+- Remove deprecated `--generator, --replicas, --service-generator, --service-overrides, --schedule` from `kubectl run`
+  Deprecate `--serviceaccount, --hostport, --requests, --limits` in `kubectl run` ([#99732](https://github.com/kubernetes/kubernetes/pull/99732), [@soltysh](https://github.com/soltysh))
+- Remove the deprecated metrics "scheduling_algorithm_preemption_evaluation_seconds" and "binding_duration_seconds", suggest to use "scheduler_framework_extension_point_duration_seconds" instead. ([#96447](https://github.com/kubernetes/kubernetes/pull/96447), [@chendave](https://github.com/chendave)) [SIG Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- Removing experimental windows container hyper-v support with Docker ([#97141](https://github.com/kubernetes/kubernetes/pull/97141), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
+- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
+- The GA TokenRequest and TokenRequestProjection feature gates have been removed and are unconditionally enabled. Remove explicit use of those feature gates in CLI invocations. ([#97148](https://github.com/kubernetes/kubernetes/pull/97148), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- The PodSecurityPolicy API is deprecated in 1.21, and will no longer be served starting in 1.25. ([#97171](https://github.com/kubernetes/kubernetes/pull/97171), [@deads2k](https://github.com/deads2k)) [SIG Auth and CLI]
+- The `batch/v2alpha1` CronJob type definitions and clients are deprecated and removed. ([#96987](https://github.com/kubernetes/kubernetes/pull/96987), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+- The `export` query parameter (inconsistently supported by API resources and deprecated in v1.14) is fully removed.  Requests setting this query parameter will now receive a 400 status response. ([#98312](https://github.com/kubernetes/kubernetes/pull/98312), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
+- `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
+- `discovery.k8s.io/v1beta1` EndpointSlices are deprecated in favor of `discovery.k8s.io/v1`, and will no longer be served in Kubernetes v1.25. ([#100472](https://github.com/kubernetes/kubernetes/pull/100472), [@liggitt](https://github.com/liggitt))
+- `diskformat` storage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
+  
+  vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
+  
+  VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
+  
+  Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
+  
+  Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel))
 
 ### API 변경
 
-- `TokenRequest` and `TokenRequestProjection` features have been promoted to GA. This feature allows generating service account tokens that are not visible in Secret objects and are tied to the lifetime of a Pod object. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection for details on configuring and using this feature. The `TokenRequest` and `TokenRequestProjection` feature gates will be removed in v1.21.
-  - kubeadm's kube-apiserver Pod manifest now includes the following flags by default "--service-account-key-file", "--service-account-signing-key-file", "--service-account-issuer". ([#93258](https://github.com/kubernetes/kubernetes/pull/93258), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle, Storage and Testing]
-- A new `nofuzz` go build tag now disables gofuzz support. Release binaries enable this. ([#92491](https://github.com/kubernetes/kubernetes/pull/92491), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery]
-- Add WindowsContainerResources and Annotations to CRI-API UpdateContainerResourcesRequest ([#95741](https://github.com/kubernetes/kubernetes/pull/95741), [@katiewasnothere](https://github.com/katiewasnothere)) [SIG Node]
-- Add a `serving` and `terminating` condition to the EndpointSlice API.
-  `serving` tracks the readiness of endpoints regardless of their terminating state. This is distinct from `ready` since `ready` is only true when pods are not terminating.
-  `terminating` is true when an endpoint is terminating. For pods this is any endpoint with a deletion timestamp. ([#92968](https://github.com/kubernetes/kubernetes/pull/92968), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
-- Add dual-stack Services (alpha).  This is a BREAKING CHANGE to an alpha API.
-  It changes the dual-stack API wrt Service from a single ipFamily field to 3
-  fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack),
-  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
-  clusterIP).  Most users do not need to set anything at all, defaulting will
-  handle it for them.  Services are single-stack unless the user asks for
-  dual-stack.  This is all gated by the "IPv6DualStack" feature gate. ([#91824](https://github.com/kubernetes/kubernetes/pull/91824), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Add support for hugepages to downward API ([#86102](https://github.com/kubernetes/kubernetes/pull/86102), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Adds kubelet alpha feature, `GracefulNodeShutdown` which makes kubelet aware of node system shutdowns and result in graceful termination of pods during a system shutdown. ([#96129](https://github.com/kubernetes/kubernetes/pull/96129), [@bobbypage](https://github.com/bobbypage)) [SIG Node]
-- AppProtocol is now GA for Endpoints and Services. The ServiceAppProtocol feature gate will be deprecated in 1.21. ([#96327](https://github.com/kubernetes/kubernetes/pull/96327), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Automatic allocation of NodePorts for services with type LoadBalancer can now be disabled by setting the (new) parameter
-  Service.spec.allocateLoadBalancerNodePorts=false. The default is to allocate NodePorts for services with type LoadBalancer which is the existing behavior. ([#92744](https://github.com/kubernetes/kubernetes/pull/92744), [@uablrek](https://github.com/uablrek)) [SIG Apps and Network]
-- Certain fields on  Service objects will be automatically cleared when changing the service's `type` to a mode that does not need those fields.  For example, changing from type=LoadBalancer to type=ClusterIP will clear the NodePort assignments, rather than forcing the user to clear them. ([#95196](https://github.com/kubernetes/kubernetes/pull/95196), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, Network and Testing]
-- Document that ServiceTopology feature is required to use `service.spec.topologyKeys`. ([#96528](https://github.com/kubernetes/kubernetes/pull/96528), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
-- EndpointSlice has a new NodeName field guarded by the EndpointSliceNodeName feature gate.
-  - EndpointSlice topology field will be deprecated in an upcoming release.
-  - EndpointSlice "IP" address type is formally removed after being deprecated in Kubernetes 1.17.
-  - The discovery.k8s.io/v1alpha1 API is deprecated and will be removed in Kubernetes 1.21. ([#96440](https://github.com/kubernetes/kubernetes/pull/96440), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps and Network]
-- External facing API podresources is now available under k8s.io/kubelet/pkg/apis/ ([#92632](https://github.com/kubernetes/kubernetes/pull/92632), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node and Testing]
-- Fewer candidates are enumerated for preemption to improve performance in large clusters. ([#94814](https://github.com/kubernetes/kubernetes/pull/94814), [@adtac](https://github.com/adtac))
-- Fix conversions for custom metrics. ([#94481](https://github.com/kubernetes/kubernetes/pull/94481), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- GPU metrics provided by kubelet are now disabled by default. ([#95184](https://github.com/kubernetes/kubernetes/pull/95184), [@RenaudWasTaken](https://github.com/RenaudWasTaken))
-- If BoundServiceAccountTokenVolume is enabled, cluster admins can use metric `serviceaccount_stale_tokens_total` to monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off extended tokens by starting `kube-apiserver` with flag `--service-account-extend-token-expiration=false` ([#96273](https://github.com/kubernetes/kubernetes/pull/96273), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Auth]
-- Introduce alpha support for exec-based container registry credential provider plugins in the kubelet. ([#94196](https://github.com/kubernetes/kubernetes/pull/94196), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Release]
-- Introduces a metric source for HPAs which allows scaling based on container resource usage. ([#90691](https://github.com/kubernetes/kubernetes/pull/90691), [@arjunrn](https://github.com/arjunrn)) [SIG API Machinery, Apps, Autoscaling and CLI]
-- Kube-apiserver now deletes expired kube-apiserver Lease objects:
-  - The feature is under feature gate `APIServerIdentity`.
-  - A flag is added to kube-apiserver: `identity-lease-garbage-collection-check-period-seconds` ([#95895](https://github.com/kubernetes/kubernetes/pull/95895), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Apps, Auth and Testing]
-- Kube-controller-manager: volume plugins can be restricted from contacting local and loopback addresses by setting `--volume-host-allow-local-loopback=false`, or from contacting specific CIDR ranges by setting `--volume-host-cidr-denylist` (for example, `--volume-host-cidr-denylist=127.0.0.1/28,feed::/16`) ([#91785](https://github.com/kubernetes/kubernetes/pull/91785), [@mattcary](https://github.com/mattcary)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Migrate scheduler, controller-manager and cloud-controller-manager to use LeaseLock ([#94603](https://github.com/kubernetes/kubernetes/pull/94603), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, Apps, Cloud Provider and Scheduling]
-- Modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly ([#94182](https://github.com/kubernetes/kubernetes/pull/94182), [@mattfenwick](https://github.com/mattfenwick)) [SIG API Machinery, Apps, Auth, Network and Node]
-- Move configurable fsgroup change policy for pods to beta ([#96376](https://github.com/kubernetes/kubernetes/pull/96376), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]
-- New flag is introduced, i.e. --topology-manager-scope=container|pod.
-  The default value is the "container" scope. ([#92967](https://github.com/kubernetes/kubernetes/pull/92967), [@cezaryzukowski](https://github.com/cezaryzukowski)) [SIG Instrumentation, Node and Testing]
-- New parameter `defaultingType` for `PodTopologySpread` plugin allows to use k8s defined or user provided default constraints ([#95048](https://github.com/kubernetes/kubernetes/pull/95048), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- NodeAffinity plugin can be configured with AddedAffinity. ([#96202](https://github.com/kubernetes/kubernetes/pull/96202), [@alculquicondor](https://github.com/alculquicondor)) [SIG Node, Scheduling and Testing]
-- Promote RuntimeClass feature to GA.
-  Promote node.k8s.io API groups from v1beta1 to v1. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-- Reminder: The labels "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" are deprecated in favor of "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" respectively.  All users of the "failure-domain.beta..." labels should switch to the "topology..." equivalents. ([#96033](https://github.com/kubernetes/kubernetes/pull/96033), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, CLI, Cloud Provider, Network, Node, Scheduling, Storage and Testing]
-- Server Side Apply now treats LabelSelector fields as atomic (meaning the entire selector is managed by a single writer and updated together), since they contain interrelated and inseparable fields that do not merge in intuitive ways. ([#93901](https://github.com/kubernetes/kubernetes/pull/93901), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Storage and Testing]
-- Services will now have a `clusterIPs` field to go with `clusterIP`.  `clusterIPs[0]` is a synonym for `clusterIP` and will be syncronized on create and update operations. ([#95894](https://github.com/kubernetes/kubernetes/pull/95894), [@thockin](https://github.com/thockin)) [SIG Network]
-- The ServiceAccountIssuerDiscovery feature gate is now Beta and enabled by default. ([#91921](https://github.com/kubernetes/kubernetes/pull/91921), [@mtaufen](https://github.com/mtaufen)) [SIG Auth]
-- The status of v1beta1 CRDs without "preserveUnknownFields:false" now shows a violation, "spec.preserveUnknownFields: Invalid value: true: must be false". ([#93078](https://github.com/kubernetes/kubernetes/pull/93078), [@vareti](https://github.com/vareti))
-- The usage of mixed protocol values in the same LoadBalancer Service is possible if the new feature gate MixedProtocolLBService is enabled. The feature gate is disabled by default. The user has to enable it for the API Server. ([#94028](https://github.com/kubernetes/kubernetes/pull/94028), [@janosi](https://github.com/janosi)) [SIG API Machinery and Apps]
-- This PR will introduce a feature gate CSIServiceAccountToken with two additional fields in `CSIDriverSpec`. ([#93130](https://github.com/kubernetes/kubernetes/pull/93130), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Users can try the cronjob controller v2 using the feature gate. This will be the default controller in future releases. ([#93370](https://github.com/kubernetes/kubernetes/pull/93370), [@alaypatel07](https://github.com/alaypatel07)) [SIG API Machinery, Apps, Auth and Testing]
-- VolumeSnapshotDataSource moves to GA in 1.20 release ([#95282](https://github.com/kubernetes/kubernetes/pull/95282), [@xing-yang](https://github.com/xing-yang)) [SIG Apps]
-- WinOverlay feature graduated to beta ([#94807](https://github.com/kubernetes/kubernetes/pull/94807), [@ksubrmnn](https://github.com/ksubrmnn)) [SIG Windows]
+- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
+  2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
+- Add Probe-level terminationGracePeriodSeconds field ([#99375](https://github.com/kubernetes/kubernetes/pull/99375), [@ehashman](https://github.com/ehashman)) [SIG API Machinery, Apps, Node and Testing]
+- Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed`. This is an alpha field and is only honored by servers with the `IndexedJob` feature gate enabled. ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- Adds support for endPort field in NetworkPolicy ([#97058](https://github.com/kubernetes/kubernetes/pull/97058), [@rikatz](https://github.com/rikatz)) [SIG Apps and Network]
+- CSIServiceAccountToken graduates to Beta and enabled by default. ([#99298](https://github.com/kubernetes/kubernetes/pull/99298), [@zshihang](https://github.com/zshihang))
+- Cluster admins can now turn off `/debug/pprof` and `/debug/flags/v` endpoint in kubelet by setting `enableProfilingHandler` and `enableDebugFlagsHandler` to `false` in the Kubelet configuration file. Options `enableProfilingHandler` and `enableDebugFlagsHandler` can be set to `true` only when `enableDebuggingHandlers` is also set to `true`. ([#98458](https://github.com/kubernetes/kubernetes/pull/98458), [@SaranBalaji90](https://github.com/SaranBalaji90))
+- DaemonSets accept a MaxSurge integer or percent on their rolling update strategy that will launch the updated pod on nodes and wait for those pods to go ready before marking the old out-of-date pods as deleted. This allows workloads to avoid downtime during upgrades when deployed using DaemonSets. This feature is alpha and is behind the DaemonSetUpdateSurge feature gate. ([#96441](https://github.com/kubernetes/kubernetes/pull/96441), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps and Testing]
+- Enable SPDY pings to keep connections alive, so that `kubectl exec` and `kubectl portforward` won't be interrupted. ([#97083](https://github.com/kubernetes/kubernetes/pull/97083), [@knight42](https://github.com/knight42)) [SIG API Machinery and CLI]
+- FieldManager no longer owns fields that get reset before the object is persisted (e.g. "status wiping"). ([#99661](https://github.com/kubernetes/kubernetes/pull/99661), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Auth and Testing]
+- Fixes server-side apply for APIService resources. ([#98576](https://github.com/kubernetes/kubernetes/pull/98576), [@kevindelgado](https://github.com/kevindelgado))
+- Generic ephemeral volumes are beta. ([#99643](https://github.com/kubernetes/kubernetes/pull/99643), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Node, Storage and Testing]
+- Hugepages request values are limited to integer multiples of the page size. ([#98515](https://github.com/kubernetes/kubernetes/pull/98515), [@lala123912](https://github.com/lala123912)) [SIG Apps]
+- Implement the GetAvailableResources in the podresources API. ([#95734](https://github.com/kubernetes/kubernetes/pull/95734), [@fromanirh](https://github.com/fromanirh)) [SIG Instrumentation, Node and Testing]
+- IngressClass resource can now reference a resource in a specific namespace 
+  for implementation-specific configuration (previously only Cluster-level resources were allowed). 
+  This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi))
+- Jobs API has a new `.spec.suspend` field that can be used to suspend and resume Jobs. This is an alpha field which is only honored by servers with the `SuspendJob` feature gate enabled. ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac))
+- Kubelet Graceful Node Shutdown feature graduates to Beta and enabled by default. ([#99735](https://github.com/kubernetes/kubernetes/pull/99735), [@bobbypage](https://github.com/bobbypage))
+- Kubernetes is now built using go1.15.7 ([#98363](https://github.com/kubernetes/kubernetes/pull/98363), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Node, Release and Testing]
+- Namespace API objects now have a `kubernetes.io/metadata.name` label matching their metadata.name field to allow selecting any namespace by its name using a label selector. ([#96968](https://github.com/kubernetes/kubernetes/pull/96968), [@jayunit100](https://github.com/jayunit100)) [SIG API Machinery, Apps, Cloud Provider, Storage and Testing]
+- One new field "InternalTrafficPolicy" in Service is added.
+  It specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only.
+  "Cluster" routes internal traffic to a Service to all endpoints.
+  "Local" routes traffic to node-local endpoints only, and traffic is dropped if no node-local endpoints are ready.
+  The default value is "Cluster". ([#96600](https://github.com/kubernetes/kubernetes/pull/96600), [@maplain](https://github.com/maplain)) [SIG API Machinery, Apps and Network]
+- PodDisruptionBudget API objects can now contain conditions in status. ([#98127](https://github.com/kubernetes/kubernetes/pull/98127), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- PodSecurityPolicy only stores "generic" as allowed volume type if the GenericEphemeralVolume feature gate is enabled ([#98918](https://github.com/kubernetes/kubernetes/pull/98918), [@pohly](https://github.com/pohly)) [SIG Auth and Security]
+- Promote CronJobs to batch/v1 ([#99423](https://github.com/kubernetes/kubernetes/pull/99423), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+- Promote Immutable Secrets/ConfigMaps feature to Stable. This allows to set `immutable` field in Secret or ConfigMap object to mark their contents as immutable. ([#97615](https://github.com/kubernetes/kubernetes/pull/97615), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Architecture, Node and Testing]
+- Remove support for building Kubernetes with bazel. ([#99561](https://github.com/kubernetes/kubernetes/pull/99561), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Scheduling, Storage, Testing and Windows]
+- Scheduler extender filter interface now can report unresolvable failed nodes in the new field `FailedAndUnresolvableNodes` of  `ExtenderFilterResult` struct. Nodes in this map will be skipped in the preemption phase. ([#92866](https://github.com/kubernetes/kubernetes/pull/92866), [@cofyc](https://github.com/cofyc)) [SIG Scheduling]
+- Services can specify loadBalancerClass to use a custom load balancer ([#98277](https://github.com/kubernetes/kubernetes/pull/98277), [@XudongLiuHarold](https://github.com/XudongLiuHarold))
+- Storage capacity tracking (= the CSIStorageCapacity feature) graduates to Beta and enabled by default, storage.k8s.io/v1alpha1/VolumeAttachment and storage.k8s.io/v1alpha1/CSIStorageCapacity objects are deprecated ([#99641](https://github.com/kubernetes/kubernetes/pull/99641), [@pohly](https://github.com/pohly))
+- Support for Indexed Job: a Job that is considered completed when Pods associated to indexes from 0 to (.spec.completions-1) have succeeded. ([#98812](https://github.com/kubernetes/kubernetes/pull/98812), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- The BoundServiceAccountTokenVolume feature has been promoted to beta, and enabled by default.
+  - This changes the tokens provided to containers at `/var/run/secrets/kubernetes.io/serviceaccount/token` to be time-limited, auto-refreshed, and invalidated when the containing pod is deleted.
+  - Clients should reload the token from disk periodically (once per minute is recommended) to ensure they continue to use a valid token. `k8s.io/client-go` version v11.0.0+ and v0.15.0+ reload tokens automatically.
+  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be shortened to 1 hour by starting `kube-apiserver` with `--service-account-extend-token-expiration=false`. ([#95667](https://github.com/kubernetes/kubernetes/pull/95667), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle and Testing]
+- The EndpointSlice Controllers are now GA. The `EndpointSliceController` will not populate the `deprecatedTopology` field and will only provide topology information through the `zone` and `nodeName` fields. ([#99870](https://github.com/kubernetes/kubernetes/pull/99870), [@swetharepakula](https://github.com/swetharepakula))
+- The Endpoints controller will now set the `endpoints.kubernetes.io/over-capacity` annotation to "warning" when an Endpoints resource contains more than 1000 addresses. In a future release, the controller will truncate Endpoints that exceed this limit. The EndpointSlice API can be used to support significantly larger number of addresses. ([#99975](https://github.com/kubernetes/kubernetes/pull/99975), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- The PodDisruptionBudget API has been promoted to policy/v1 with no schema changes. The only functional change is that an empty selector (`{}`) written to a policy/v1 PodDisruptionBudget now selects all pods in the namespace. The behavior of the policy/v1beta1 API remains unchanged. The policy/v1beta1 PodDisruptionBudget API is deprecated and will no longer be served in 1.25+. ([#99290](https://github.com/kubernetes/kubernetes/pull/99290), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- The `EndpointSlice` API is now GA. The `EndpointSlice` topology field has been removed from the GA API and will be replaced by a new per Endpoint Zone field. If the topology field was previously used, it will be converted into an annotation in the v1 Resource. The `discovery.k8s.io/v1alpha1` API is removed. ([#99662](https://github.com/kubernetes/kubernetes/pull/99662), [@swetharepakula](https://github.com/swetharepakula))
+- The `controller.kubernetes.io/pod-deletion-cost` annotation can be set to offer a hint on the cost of deleting a `Pod` compared to other pods belonging to the same ReplicaSet. Pods with lower deletion cost are deleted first. This is an alpha feature. ([#99163](https://github.com/kubernetes/kubernetes/pull/99163), [@ahg-g](https://github.com/ahg-g))
+- The kube-apiserver now resets `managedFields` that got corrupted by a mutating admission controller. ([#98074](https://github.com/kubernetes/kubernetes/pull/98074), [@kwiesmueller](https://github.com/kwiesmueller))
+- Topology Aware Hints are now available in alpha and can be enabled with the `TopologyAwareHints` feature gate. ([#99522](https://github.com/kubernetes/kubernetes/pull/99522), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Instrumentation, Network and Testing]
+- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#97099](https://github.com/kubernetes/kubernetes/pull/97099), [@pacoxu](https://github.com/pacoxu)) [SIG CLI]
 
-### 기능(feature)
+### 기능 (Feature)
 
-- **Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.**:
-- A new metric `apiserver_request_filter_duration_seconds` has been introduced that
-  measures request filter latency in seconds. ([#95207](https://github.com/kubernetes/kubernetes/pull/95207), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Instrumentation]
-- A new set of alpha metrics are reported by the Kubernetes scheduler under the `/metrics/resources` endpoint that allow administrators to easily see the resource consumption (requests and limits for all resources on the pods) and compare it to actual pod usage or node capacity. ([#94866](https://github.com/kubernetes/kubernetes/pull/94866), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Instrumentation, Node and Scheduling]
-- Add --experimental-logging-sanitization flag enabling runtime protection from leaking sensitive data in logs ([#96370](https://github.com/kubernetes/kubernetes/pull/96370), [@serathius](https://github.com/serathius)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Add a StorageVersionAPI feature gate that makes API server update storageversions before serving certain write requests.
-  This feature allows the storage migrator to manage storage migration for built-in resources.
-  Enabling internal.apiserver.k8s.io/v1alpha1 API and APIServerIdentity feature gate are required to use this feature. ([#93873](https://github.com/kubernetes/kubernetes/pull/93873), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Auth and Testing]
-- Add a metric for time taken to perform recursive permission change ([#95866](https://github.com/kubernetes/kubernetes/pull/95866), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
-- Add a new `vSphere` metric: `cloudprovider_vsphere_vcenter_versions`. It's content show `vCenter` hostnames with the associated server version. ([#94526](https://github.com/kubernetes/kubernetes/pull/94526), [@Danil-Grigorev](https://github.com/Danil-Grigorev)) [SIG Cloud Provider and Instrumentation]
-- Add a new flag to set priority for the kubelet on Windows nodes so that workloads cannot overwhelm the node there by disrupting kubelet process. ([#96051](https://github.com/kubernetes/kubernetes/pull/96051), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node and Windows]
-- Add feature to size memory backed volumes ([#94444](https://github.com/kubernetes/kubernetes/pull/94444), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Storage and Testing]
-- Add foreground cascading deletion to kubectl with the new `kubectl delete foreground|background|orphan` option. ([#93384](https://github.com/kubernetes/kubernetes/pull/93384), [@zhouya0](https://github.com/zhouya0))
-- Add metrics for azure service operations (route and loadbalancer). ([#94124](https://github.com/kubernetes/kubernetes/pull/94124), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider and Instrumentation]
-- Add network rule support in Azure account creation. ([#94239](https://github.com/kubernetes/kubernetes/pull/94239), [@andyzhangx](https://github.com/andyzhangx))
-- Add node_authorizer_actions_duration_seconds metric that can be used to estimate load to node authorizer. ([#92466](https://github.com/kubernetes/kubernetes/pull/92466), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Auth and Instrumentation]
-- Add pod_ based CPU and memory metrics to Kubelet's  /metrics/resource endpoint ([#95839](https://github.com/kubernetes/kubernetes/pull/95839), [@egernst](https://github.com/egernst)) [SIG Instrumentation, Node and Testing]
-- Added `get-users` and `delete-user` to the `kubectl config` subcommand ([#89840](https://github.com/kubernetes/kubernetes/pull/89840), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-- Added counter metric "apiserver_request_self" to count API server self-requests with labels for verb, resource, and subresource. ([#94288](https://github.com/kubernetes/kubernetes/pull/94288), [@LogicalShark](https://github.com/LogicalShark)) [SIG API Machinery, Auth, Instrumentation and Scheduling]
-- Added new k8s.io/component-helpers repository providing shared helper code for (core) components. ([#92507](https://github.com/kubernetes/kubernetes/pull/92507), [@ingvagabund](https://github.com/ingvagabund)) [SIG Apps, Node, Release and Scheduling]
-- Adds `create ingress` command to `kubectl` ([#78153](https://github.com/kubernetes/kubernetes/pull/78153), [@amimof](https://github.com/amimof)) [SIG CLI and Network]
-- Adds a headless service on node-local-cache addon. ([#88412](https://github.com/kubernetes/kubernetes/pull/88412), [@stafot](https://github.com/stafot)) [SIG Cloud Provider and Network]
-- Allow cross compilation of kubernetes on different platforms. ([#94403](https://github.com/kubernetes/kubernetes/pull/94403), [@bnrjee](https://github.com/bnrjee)) [SIG Release]
-- Azure: Support multiple services sharing one IP address ([#94991](https://github.com/kubernetes/kubernetes/pull/94991), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- CRDs: For structural schemas, non-nullable null map fields will now be dropped and defaulted if a default is available. null items in list will continue being preserved, and fail validation if not nullable. ([#95423](https://github.com/kubernetes/kubernetes/pull/95423), [@apelisse](https://github.com/apelisse)) [SIG API Machinery]
-- Changed: default "Accept: */*" header added to HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes (https://github.com/kubernetes/website/pull/24756) ([#95641](https://github.com/kubernetes/kubernetes/pull/95641), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Client-go credential plugins can now be passed in the current cluster information via the KUBERNETES_EXEC_INFO environment variable. ([#95489](https://github.com/kubernetes/kubernetes/pull/95489), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
-- Command to start network proxy changes from 'KUBE_ENABLE_EGRESS_VIA_KONNECTIVITY_SERVICE ./cluster/kube-up.sh' to 'KUBE_ENABLE_KONNECTIVITY_SERVICE=true ./hack/kube-up.sh' ([#92669](https://github.com/kubernetes/kubernetes/pull/92669), [@Jefftree](https://github.com/Jefftree)) [SIG Cloud Provider]
-- Configure AWS LoadBalancer health check protocol via service annotations. ([#94546](https://github.com/kubernetes/kubernetes/pull/94546), [@kishorj](https://github.com/kishorj))
-- DefaultPodTopologySpread graduated to Beta. The feature gate is enabled by default. ([#95631](https://github.com/kubernetes/kubernetes/pull/95631), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
-- E2e test for PodFsGroupChangePolicy ([#96247](https://github.com/kubernetes/kubernetes/pull/96247), [@saikat-royc](https://github.com/saikat-royc)) [SIG Storage and Testing]
-- Ephemeral containers now apply the same API defaults as initContainers and containers ([#94896](https://github.com/kubernetes/kubernetes/pull/94896), [@wawa0210](https://github.com/wawa0210)) [SIG Apps and CLI]
-- Gradudate the Pod Resources API to G.A
-  Introduces the pod_resources_endpoint_requests_total metric which tracks the total number of requests to the pod resources API ([#92165](https://github.com/kubernetes/kubernetes/pull/92165), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Instrumentation, Node and Testing]
-- In dual-stack bare-metal clusters, you can now pass dual-stack IPs to `kubelet --node-ip`.
-  eg: `kubelet --node-ip 10.1.0.5,fd01::0005`. This is not yet supported for non-bare-metal
-  clusters.
-
-  In dual-stack clusters where nodes have dual-stack addresses, hostNetwork pods
-  will now get dual-stack PodIPs. ([#95239](https://github.com/kubernetes/kubernetes/pull/95239), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Introduce api-extensions category which will return: mutating admission configs, validating admission configs, CRDs and APIServices when used in kubectl get, for example. ([#95603](https://github.com/kubernetes/kubernetes/pull/95603), [@soltysh](https://github.com/soltysh)) [SIG API Machinery]
-- Introduces a new GCE specific cluster creation variable KUBE_PROXY_DISABLE. When set to true, this will skip over the creation of kube-proxy (whether the daemonset or static pod). This can be used to control the lifecycle of kube-proxy separately from the lifecycle of the nodes. ([#91977](https://github.com/kubernetes/kubernetes/pull/91977), [@varunmar](https://github.com/varunmar)) [SIG Cloud Provider]
-- Kube-apiserver now maintains a Lease object to identify itself:
-  - The feature is under feature gate `APIServerIdentity`.
-  - Two flags are added to kube-apiserver: `identity-lease-duration-seconds`, `identity-lease-renew-interval-seconds` ([#95533](https://github.com/kubernetes/kubernetes/pull/95533), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Kube-apiserver: The timeout used when making health check calls to etcd can now be configured with `--etcd-healthcheck-timeout`. The default timeout is 2 seconds, matching the previous behavior. ([#93244](https://github.com/kubernetes/kubernetes/pull/93244), [@Sh4d1](https://github.com/Sh4d1)) [SIG API Machinery]
-- Kube-apiserver: added support for compressing rotated audit log files with `--audit-log-compress` ([#94066](https://github.com/kubernetes/kubernetes/pull/94066), [@lojies](https://github.com/lojies)) [SIG API Machinery and Auth]
-- Kubeadm now prints warnings instead of throwing errors if the current system time is outside of the NotBefore and NotAfter bounds of a loaded certificate.  ([#94504](https://github.com/kubernetes/kubernetes/pull/94504), [@neolit123](https://github.com/neolit123))
-- Kubeadm: Add a preflight check that the control-plane node has at least 1700MB of RAM ([#93275](https://github.com/kubernetes/kubernetes/pull/93275), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--cluster-name" flag to the "kubeadm alpha kubeconfig user" to allow configuring the cluster name in the generated kubeconfig file ([#93992](https://github.com/kubernetes/kubernetes/pull/93992), [@prabhu43](https://github.com/prabhu43)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--kubeconfig" flag to the "kubeadm init phase upload-certs" command to allow users to pass a custom location for a kubeconfig file. ([#94765](https://github.com/kubernetes/kubernetes/pull/94765), [@zhanw15](https://github.com/zhanw15)) [SIG Cluster Lifecycle]
-- Kubeadm: make etcd pod request 100m CPU, 100Mi memory and 100Mi ephemeral_storage by default ([#94479](https://github.com/kubernetes/kubernetes/pull/94479), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubeadm: make the command "kubeadm alpha kubeconfig user" accept a "--config" flag and remove the following flags:
-  - apiserver-advertise-address / apiserver-bind-port: use either localAPIEndpoint from InitConfiguration or controlPlaneEndpoint from ClusterConfiguration.
-  - cluster-name: use clusterName from ClusterConfiguration
-  - cert-dir: use certificatesDir from ClusterConfiguration ([#94879](https://github.com/kubernetes/kubernetes/pull/94879), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubectl create now supports creating ingress objects. ([#94327](https://github.com/kubernetes/kubernetes/pull/94327), [@rikatz](https://github.com/rikatz)) [SIG CLI and Network]
-- Kubectl rollout history sts/sts-name --revision=some-revision will start showing the detailed view of  the sts on that specified revision ([#86506](https://github.com/kubernetes/kubernetes/pull/86506), [@dineshba](https://github.com/dineshba)) [SIG CLI]
-- Kubectl: Previously users cannot provide arguments to a external diff tool via KUBECTL_EXTERNAL_DIFF env. This release now allow users to specify args to KUBECTL_EXTERNAL_DIFF env. ([#95292](https://github.com/kubernetes/kubernetes/pull/95292), [@dougsland](https://github.com/dougsland)) [SIG CLI]
-- Kubemark now supports both real and hollow nodes in a single cluster. ([#93201](https://github.com/kubernetes/kubernetes/pull/93201), [@ellistarn](https://github.com/ellistarn)) [SIG Scalability]
-- Kubernetes E2E test image manifest lists now contain Windows images. ([#77398](https://github.com/kubernetes/kubernetes/pull/77398), [@claudiubelu](https://github.com/claudiubelu)) [SIG Testing and Windows]
-- Kubernetes is now built using go1.15.2
-  - build: Update to k/repo-infra@v0.1.1 (supports go1.15.2)
-  - build: Use go-runner:buster-v2.0.1 (built using go1.15.1)
-  - bazel: Replace --features with Starlark build settings flag
-  - hack/lib/util.sh: some bash cleanups
-
-    - switched one spot to use kube::logging
-    - make kube::util::find-binary return an error when it doesn't find
-      anything so that hack scripts fail fast instead of with '' binary not
-      found errors.
-    - this required deleting some genfeddoc stuff. the binary no longer
-      exists in k/k repo since we removed federation/, and I don't see it
-      in https://github.com/kubernetes-sigs/kubefed/ either. I'm assuming
-      that it's gone for good now.
-
-  - bazel: output go_binary rule directly from go_binary_conditional_pure
-
-    From: [@mikedanese](https://github.com/mikedanese):
-    Instead of aliasing. Aliases are annoying in a number of ways. This is
-    specifically bugging me now because they make the action graph harder to
-    analyze programmatically. By using aliases here, we would need to handle
-    potentially aliased go_binary targets and dereference to the effective
-    target.
-
-    The comment references an issue with `pure = select(...)` which appears
-    to be resolved considering this now builds.
-
-  - make kube::util::find-binary not dependent on bazel-out/ structure
-
-    Implement an aspect that outputs go_build_mode metadata for go binaries,
-    and use that during binary selection. ([#94449](https://github.com/kubernetes/kubernetes/pull/94449), [@justaugustus](https://github.com/justaugustus)) [SIG Architecture, CLI, Cluster Lifecycle, Node, Release and Testing]
-- Kubernetes is now built using go1.15.5
-  - build: Update to k/repo-infra@v0.1.2 (supports go1.15.5) ([#95776](https://github.com/kubernetes/kubernetes/pull/95776), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
-- New default scheduling plugins order reduces scheduling and preemption latency when taints and node affinity are used ([#95539](https://github.com/kubernetes/kubernetes/pull/95539), [@soulxu](https://github.com/soulxu)) [SIG Scheduling]
-- Only update Azure data disks when attach/detach ([#94265](https://github.com/kubernetes/kubernetes/pull/94265), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Promote SupportNodePidsLimit to GA to provide node-to-pod PID isolation.
-  Promote SupportPodPidsLimit to GA to provide ability to limit PIDs per pod. ([#94140](https://github.com/kubernetes/kubernetes/pull/94140), [@derekwaynecarr](https://github.com/derekwaynecarr))
-- SCTP support in API objects (Pod, Service, NetworkPolicy) is now GA.
-  Note that this has no effect on whether SCTP is enabled on nodes at the kernel level,
-  and note that some cloud platforms and network plugins do not support SCTP traffic. ([#95566](https://github.com/kubernetes/kubernetes/pull/95566), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
-- Scheduler now ignores Pod update events if the resourceVersion of old and new Pods are identical. ([#96071](https://github.com/kubernetes/kubernetes/pull/96071), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Scheduling Framework: expose Run[Pre]ScorePlugins functions to PreemptionHandle which can be used in PostFilter extention point. ([#93534](https://github.com/kubernetes/kubernetes/pull/93534), [@everpeace](https://github.com/everpeace)) [SIG Scheduling and Testing]
-- SelectorSpreadPriority maps to PodTopologySpread plugin when DefaultPodTopologySpread feature is enabled ([#95448](https://github.com/kubernetes/kubernetes/pull/95448), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Send GCE node startup scripts logs to console and journal. ([#95311](https://github.com/kubernetes/kubernetes/pull/95311), [@karan](https://github.com/karan))
-- SetHostnameAsFQDN has been graduated to Beta and therefore it is enabled by default. ([#95267](https://github.com/kubernetes/kubernetes/pull/95267), [@javidiaz](https://github.com/javidiaz)) [SIG Node]
-- Support [service.beta.kubernetes.io/azure-pip-ip-tags] annotations to allow customers to specify ip-tags to influence public-ip creation in Azure [Tag1=Value1, Tag2=Value2, etc.] ([#94114](https://github.com/kubernetes/kubernetes/pull/94114), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Support custom tags for cloud provider managed resources ([#96450](https://github.com/kubernetes/kubernetes/pull/96450), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support customize load balancer health probe protocol and request path ([#96338](https://github.com/kubernetes/kubernetes/pull/96338), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support for Windows container images (OS Versions: 1809, 1903, 1909, 2004) was added the pause:3.4 image. ([#91452](https://github.com/kubernetes/kubernetes/pull/91452), [@claudiubelu](https://github.com/claudiubelu)) [SIG Node, Release and Windows]
-- Support multiple standard load balancers in one cluster ([#96111](https://github.com/kubernetes/kubernetes/pull/96111), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- The beta `RootCAConfigMap` feature gate is enabled by default and causes kube-controller-manager to publish a "kube-root-ca.crt" ConfigMap to every namespace. This ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver. ([#96197](https://github.com/kubernetes/kubernetes/pull/96197), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth and Testing]
-- The kubelet_runtime_operations_duration_seconds metric buckets were set to 0.005 0.0125 0.03125 0.078125 0.1953125 0.48828125 1.220703125 3.0517578125 7.62939453125 19.073486328125 47.6837158203125 119.20928955078125 298.0232238769531 and 745.0580596923828 seconds ([#96054](https://github.com/kubernetes/kubernetes/pull/96054), [@alvaroaleman](https://github.com/alvaroaleman)) [SIG Instrumentation and Node]
-- There is a new pv_collector_total_pv_count metric that counts persistent volumes by the volume plugin name and volume mode. ([#95719](https://github.com/kubernetes/kubernetes/pull/95719), [@tsmetana](https://github.com/tsmetana)) [SIG Apps, Instrumentation, Storage and Testing]
-- Volume snapshot e2e test to validate PVC and VolumeSnapshotContent finalizer ([#95863](https://github.com/kubernetes/kubernetes/pull/95863), [@RaunakShah](https://github.com/RaunakShah)) [SIG Cloud Provider, Storage and Testing]
-- Warns user when executing kubectl apply/diff to resource currently being deleted. ([#95544](https://github.com/kubernetes/kubernetes/pull/95544), [@SaiHarshaK](https://github.com/SaiHarshaK)) [SIG CLI]
-- `kubectl alpha debug` has graduated to beta and is now `kubectl debug`. ([#96138](https://github.com/kubernetes/kubernetes/pull/96138), [@verb](https://github.com/verb)) [SIG CLI and Testing]
-- `kubectl debug` gains support for changing container images when copying a pod for debugging, similar to how `kubectl set image` works. See `kubectl help debug` for more information. ([#96058](https://github.com/kubernetes/kubernetes/pull/96058), [@verb](https://github.com/verb)) [SIG CLI]
+- A client-go metric, rest_client_exec_plugin_call_total, has been added to track total calls to client-go credential plugins. ([#98892](https://github.com/kubernetes/kubernetes/pull/98892), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation]
+- A new histogram metric to track the time it took to delete a job by the `TTLAfterFinished` controller ([#98676](https://github.com/kubernetes/kubernetes/pull/98676), [@ahg-g](https://github.com/ahg-g))
+- AWS cloud provider supports auto-discovering subnets without any `kubernetes.io/cluster/<clusterName>` tags. It also supports additional service annotation `service.beta.kubernetes.io/aws-load-balancer-subnets` to manually configure the subnets. ([#97431](https://github.com/kubernetes/kubernetes/pull/97431), [@kishorj](https://github.com/kishorj))
+- Aborting the drain command in a list of nodes will be deprecated. The new behavior will make the drain command go through all nodes even if one or more nodes failed during the drain. For now, users can try such experience by enabling --ignore-errors flag. ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan))
+- Add --permit-address-sharing flag to `kube-apiserver` to listen with `SO_REUSEADDR`. While allowing to listen on wildcard IPs like 0.0.0.0 and specific IPs in parallel, it avoids waiting for the kernel to release socket in `TIME_WAIT` state, and hence, considerably reducing `kube-apiserver` restart times under certain conditions. ([#93861](https://github.com/kubernetes/kubernetes/pull/93861), [@sttts](https://github.com/sttts))
+- Add `csi_operations_seconds` metric on kubelet that exposes CSI operations duration and status for node CSI operations. ([#98979](https://github.com/kubernetes/kubernetes/pull/98979), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Instrumentation and Storage]
+- Add `migrated` field into `storage_operation_duration_seconds` metric ([#99050](https://github.com/kubernetes/kubernetes/pull/99050), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Instrumentation and Storage]
+- Add flag --lease-reuse-duration-seconds for kube-apiserver to config etcd lease reuse duration. ([#97009](https://github.com/kubernetes/kubernetes/pull/97009), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery and Scalability]
+- Add metric etcd_lease_object_counts for kube-apiserver to observe max objects attached to a single etcd lease. ([#97480](https://github.com/kubernetes/kubernetes/pull/97480), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery, Instrumentation and Scalability]
+- Add support to generate client-side binaries for new darwin/arm64 platform ([#97743](https://github.com/kubernetes/kubernetes/pull/97743), [@dims](https://github.com/dims)) [SIG Release and Testing]
+- Added `ephemeral_volume_controller_create[_failures]_total` counters to kube-controller-manager metrics ([#99115](https://github.com/kubernetes/kubernetes/pull/99115), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Storage]
+- Added support for installing `arm64` node artifacts. ([#99242](https://github.com/kubernetes/kubernetes/pull/99242), [@liu-cong](https://github.com/liu-cong))
+- Adds alpha feature `VolumeCapacityPriority` which makes the scheduler prioritize nodes based on the best matching size of statically provisioned PVs across multiple topologies. ([#96347](https://github.com/kubernetes/kubernetes/pull/96347), [@cofyc](https://github.com/cofyc)) [SIG Apps, Network, Scheduling, Storage and Testing]
+- Adds the ability to pass --strict-transport-security-directives to the kube-apiserver to set the HSTS header appropriately.  Be sure you understand the consequences to browsers before setting this field. ([#96502](https://github.com/kubernetes/kubernetes/pull/96502), [@249043822](https://github.com/249043822)) [SIG Auth]
+- Adds two new metrics to cronjobs, a histogram to track the time difference when a job is created and the expected time when it should be created, as well as a gauge for the missed schedules of a cronjob ([#99341](https://github.com/kubernetes/kubernetes/pull/99341), [@alaypatel07](https://github.com/alaypatel07))
+- Alpha implementation of Kubectl Command Headers: SIG CLI KEP 859 enabled when KUBECTL_COMMAND_HEADERS environment variable set on the client command line. ([#98952](https://github.com/kubernetes/kubernetes/pull/98952), [@seans3](https://github.com/seans3))
+- Base-images: Update to debian-iptables:buster-v1.4.0
+  - Uses iptables 1.8.5
+  - base-images: Update to debian-base:buster-v1.3.0
+  - cluster/images/etcd: Build etcd:3.4.13-2 image
+    - Uses debian-base:buster-v1.3.0 ([#98401](https://github.com/kubernetes/kubernetes/pull/98401), [@pacoxu](https://github.com/pacoxu)) [SIG Testing]
+- CRIContainerLogRotation graduates to GA and unconditionally enabled. ([#99651](https://github.com/kubernetes/kubernetes/pull/99651), [@umohnani8](https://github.com/umohnani8))
+- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99385](https://github.com/kubernetes/kubernetes/pull/99385), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Release]
+- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99738](https://github.com/kubernetes/kubernetes/pull/99738), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- EmptyDir memory backed volumes are sized as the the minimum of pod allocatable memory on a host and an optional explicit user provided value. ([#100319](https://github.com/kubernetes/kubernetes/pull/100319), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
+- Enables Kubelet to check volume condition and log events to corresponding pods. ([#99284](https://github.com/kubernetes/kubernetes/pull/99284), [@fengzixu](https://github.com/fengzixu)) [SIG Apps, Instrumentation, Node and Storage]
+- EndpointSliceNodeName graduates to GA and thus will be unconditionally enabled -- NodeName will always be available in the v1beta1 API. ([#99746](https://github.com/kubernetes/kubernetes/pull/99746), [@swetharepakula](https://github.com/swetharepakula))
+- Export `NewDebuggingRoundTripper` function and `DebugLevel` options in the k8s.io/client-go/transport package. ([#98324](https://github.com/kubernetes/kubernetes/pull/98324), [@atosatto](https://github.com/atosatto))
+- Kube-proxy iptables: new metric sync_proxy_rules_iptables_total that exposes the number of rules programmed per table in each iteration ([#99653](https://github.com/kubernetes/kubernetes/pull/99653), [@aojea](https://github.com/aojea)) [SIG Instrumentation and Network]
+- Kube-scheduler now logs plugin scoring summaries at --v=4 ([#99411](https://github.com/kubernetes/kubernetes/pull/99411), [@damemi](https://github.com/damemi)) [SIG Scheduling]
+- Kubeadm now includes CoreDNS v1.8.0. ([#96429](https://github.com/kubernetes/kubernetes/pull/96429), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubeadm: IPv6DualStack feature gate graduates to Beta and enabled by default ([#99294](https://github.com/kubernetes/kubernetes/pull/99294), [@pacoxu](https://github.com/pacoxu))
+- Kubeadm: a warning to user as ipv6 site-local is deprecated ([#99574](https://github.com/kubernetes/kubernetes/pull/99574), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle and Network]
+- Kubeadm: add support for certificate chain validation. When using kubeadm in external CA mode, this allows an intermediate CA to be used to sign the certificates. The intermediate CA certificate must be appended to each signed certificate for this to work correctly. ([#97266](https://github.com/kubernetes/kubernetes/pull/97266), [@robbiemcmichael](https://github.com/robbiemcmichael)) [SIG Cluster Lifecycle]
+- Kubeadm: amend the node kernel validation to treat CGROUP_PIDS, FAIR_GROUP_SCHED as required and CFS_BANDWIDTH, CGROUP_HUGETLB as optional ([#96378](https://github.com/kubernetes/kubernetes/pull/96378), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
+- Kubeadm: apply the "node.kubernetes.io/exclude-from-external-load-balancers" label on control plane nodes during "init", "join" and "upgrade" to preserve backwards compatibility with the lagacy LB mode where nodes labeled as "master" where excluded. To opt-out you can remove the label from a node. See #97543 and the linked KEP for more details. ([#98269](https://github.com/kubernetes/kubernetes/pull/98269), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: if the user has customized their image repository via the kubeadm configuration, pass the custom pause image repository and tag to the kubelet via --pod-infra-container-image not only for Docker but for all container runtimes. This flag tells the kubelet that it should not garbage collect the image. ([#99476](https://github.com/kubernetes/kubernetes/pull/99476), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: perform pre-flight validation on host/node name upon `kubeadm init` and `kubeadm join`, showing warnings on non-compliant names ([#99194](https://github.com/kubernetes/kubernetes/pull/99194), [@pacoxu](https://github.com/pacoxu))
+- Kubectl version changed to write a warning message to stderr if the client and server version difference exceeds the supported version skew of +/-1 minor version. ([#98250](https://github.com/kubernetes/kubernetes/pull/98250), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- Kubectl: Add `--use-protocol-buffers` flag to kubectl top pods and nodes. ([#96655](https://github.com/kubernetes/kubernetes/pull/96655), [@serathius](https://github.com/serathius))
+- Kubectl: `kubectl get` will omit managed fields by default now. Users could set `--show-managed-fields` to true to show managedFields when the output format is either `json` or `yaml`. ([#96878](https://github.com/kubernetes/kubernetes/pull/96878), [@knight42](https://github.com/knight42)) [SIG CLI and Testing]
+- Kubectl: a Pod can be preselected as default container using `kubectl.kubernetes.io/default-container` annotation ([#99833](https://github.com/kubernetes/kubernetes/pull/99833), [@mengjiao-liu](https://github.com/mengjiao-liu))
+- Kubectl: add bash-completion for comma separated list on `kubectl get` ([#98301](https://github.com/kubernetes/kubernetes/pull/98301), [@phil9909](https://github.com/phil9909))
+- Kubernetes is now built using go1.15.8 ([#98834](https://github.com/kubernetes/kubernetes/pull/98834), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- Kubernetes is now built with Golang 1.16 ([#98572](https://github.com/kubernetes/kubernetes/pull/98572), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
+- Kubernetes is now built with Golang 1.16.1 ([#100106](https://github.com/kubernetes/kubernetes/pull/100106), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- Metrics can now be disabled explicitly via a command line flag (i.e. '--disabled-metrics=metric1,metric2') ([#99217](https://github.com/kubernetes/kubernetes/pull/99217), [@logicalhan](https://github.com/logicalhan))
+- New admission controller `DenyServiceExternalIPs` is available.  Clusters which do not *need* the Service `externalIPs` feature should enable this controller and be more secure. ([#97395](https://github.com/kubernetes/kubernetes/pull/97395), [@thockin](https://github.com/thockin))
+- Overall, enable the feature of `PreferNominatedNode` will  improve the performance of scheduling where preemption might frequently happen, but in theory, enable the feature of `PreferNominatedNode`, the pod might not be scheduled to the best candidate node in the cluster. ([#93179](https://github.com/kubernetes/kubernetes/pull/93179), [@chendave](https://github.com/chendave)) [SIG Scheduling and Testing]
+- Persistent Volumes formatted with the btrfs filesystem will now automatically resize when expanded. ([#99361](https://github.com/kubernetes/kubernetes/pull/99361), [@Novex](https://github.com/Novex)) [SIG Storage]
+- Port the devicemanager to Windows node to allow device plugins like directx ([#93285](https://github.com/kubernetes/kubernetes/pull/93285), [@aarnaud](https://github.com/aarnaud)) [SIG Node, Testing and Windows]
+- Removes cAdvisor JSON metrics (/stats/container, /stats/<podname>/<containername>, /stats/<namespace>/<podname>/<poduid>/<containername>) from the kubelet. ([#99236](https://github.com/kubernetes/kubernetes/pull/99236), [@pacoxu](https://github.com/pacoxu))
+- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
+- Sysctls graduates to General Availability and thus unconditionally enabled. ([#99158](https://github.com/kubernetes/kubernetes/pull/99158), [@wgahnagl](https://github.com/wgahnagl))
+- The Kubernetes pause image manifest list now contains an image for Windows Server 20H2. ([#97322](https://github.com/kubernetes/kubernetes/pull/97322), [@claudiubelu](https://github.com/claudiubelu)) [SIG Windows]
+- The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
+- The `CronJobControllerV2` feature flag graduates to Beta and set to be enabled by default. ([#98878](https://github.com/kubernetes/kubernetes/pull/98878), [@soltysh](https://github.com/soltysh))
+- The `EndpointSlice` mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
+  The well-known annotation `endpoints.kubernetes.io/last-change-trigger-time` is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea))
+- The `RunAsGroup` feature has been promoted to GA in this release. ([#94641](https://github.com/kubernetes/kubernetes/pull/94641), [@krmayankk](https://github.com/krmayankk)) [SIG Auth and Node]
+- The `ServiceAccountIssuerDiscovery` feature has graduated to GA, and is unconditionally enabled. The `ServiceAccountIssuerDiscovery` feature-gate will be removed in 1.22. ([#98553](https://github.com/kubernetes/kubernetes/pull/98553), [@mtaufen](https://github.com/mtaufen)) [SIG API Machinery, Auth and Testing]
+- The `TTLAfterFinished` feature flag is now beta and enabled by default ([#98678](https://github.com/kubernetes/kubernetes/pull/98678), [@ahg-g](https://github.com/ahg-g))
+- The apimachinery util/net function used to detect the bind address `ResolveBindAddress()` takes into consideration global IP addresses on loopback interfaces when 1) the host has default routes, or 2) there are no global IPs on those interfaces in order to support more complex network scenarios like BGP Unnumbered RFC 5549 ([#95790](https://github.com/kubernetes/kubernetes/pull/95790), [@aojea](https://github.com/aojea)) [SIG Network]
+- The feature gate `RootCAConfigMap` graduated to GA in v1.21 and therefore will be unconditionally enabled. This flag will be removed in v1.22 release. ([#98033](https://github.com/kubernetes/kubernetes/pull/98033), [@zshihang](https://github.com/zshihang))
+- The pause image upgraded to `v3.4.1` in kubelet and kubeadm for both Linux and Windows. ([#98205](https://github.com/kubernetes/kubernetes/pull/98205), [@pacoxu](https://github.com/pacoxu))
+- Update pause container to run as pseudo user and group `65535:65535`. This implies the release of version 3.5 of the container images. ([#97963](https://github.com/kubernetes/kubernetes/pull/97963), [@saschagrunert](https://github.com/saschagrunert)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Release, Security and Testing]
+- Update the latest validated version of Docker to 20.10 ([#98977](https://github.com/kubernetes/kubernetes/pull/98977), [@neolit123](https://github.com/neolit123)) [SIG CLI, Cluster Lifecycle and Node]
+- Upgrade node local dns to 1.17.0 for better IPv6 support ([#99749](https://github.com/kubernetes/kubernetes/pull/99749), [@pacoxu](https://github.com/pacoxu)) [SIG Cloud Provider and Network]
+- Upgrades `IPv6Dualstack` to `Beta` and turns it on by default. New clusters or existing clusters are not be affected until an actor starts adding secondary Pods and service CIDRS CLI flags as described here: [IPv4/IPv6 Dual-stack](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/563-dual-stack) ([#98969](https://github.com/kubernetes/kubernetes/pull/98969), [@khenidak](https://github.com/khenidak))
+- Users might specify the `kubectl.kubernetes.io/default-container` annotation in a Pod to preselect container for kubectl commands. ([#99581](https://github.com/kubernetes/kubernetes/pull/99581), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
+- When downscaling ReplicaSets, ready and creation timestamps are compared in a logarithmic scale. ([#99212](https://github.com/kubernetes/kubernetes/pull/99212), [@damemi](https://github.com/damemi)) [SIG Apps and Testing]
+- When the kubelet is watching a ConfigMap or Secret purely in the context of setting environment variables
+  for containers, only hold that watch for a defined duration before cancelling it. This change reduces the CPU
+  and memory usage of the kube-apiserver in large clusters. ([#99393](https://github.com/kubernetes/kubernetes/pull/99393), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery, Node and Testing]
+- WindowsEndpointSliceProxying feature gate has graduated to beta and is enabled by default. This means kube-proxy will  read from EndpointSlices instead of Endpoints on Windows by default. ([#99794](https://github.com/kubernetes/kubernetes/pull/99794), [@robscott](https://github.com/robscott)) [SIG Network]
+- `kubectl wait` ensures that observedGeneration >= generation to prevent stale state reporting. An example scenario can be found on CRD updates. ([#97408](https://github.com/kubernetes/kubernetes/pull/97408), [@KnicKnic](https://github.com/KnicKnic))
 
 ### 문서
 
-- Fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList ([#95117](https://github.com/kubernetes/kubernetes/pull/95117), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-- Kubelet: remove alpha warnings for CNI flags. ([#94508](https://github.com/kubernetes/kubernetes/pull/94508), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network and Node]
-- Updates docs and guidance on cloud provider InstancesV2 and Zones interface for external cloud providers:
-  - removes experimental warning for InstancesV2
-  - document that implementation of InstancesV2 will disable calls to Zones
-  - deprecate Zones in favor of InstancesV2 ([#96397](https://github.com/kubernetes/kubernetes/pull/96397), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
+- Azure file migration graduates to beta, with CSIMigrationAzureFile flag off by default
+  as it requires installation of AzureFile CSI Driver. Users should enable CSIMigration and
+  CSIMigrationAzureFile features and install the [AzureFile CSI Driver](https://github.com/kubernetes-sigs/azurefile-csi-driver)
+  to avoid disruption to existing Pod and PVC objects at that time. Azure File CSI driver does not support using same persistent
+  volume with different fsgroups. When CSI migration is enabled for azurefile driver, such case is not supported.
+  (there is a case we support where volume is mounted with 0777 and then it readable/writable by everyone) ([#96293](https://github.com/kubernetes/kubernetes/pull/96293), [@andyzhangx](https://github.com/andyzhangx))
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
+- Set kubelet option `--volume-stats-agg-period` to negative value to disable volume calculations. ([#96675](https://github.com/kubernetes/kubernetes/pull/96675), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
 
 ### 실패 테스트
 
-- Resolves an issue running Ingress conformance tests on clusters which use finalizers on Ingress objects to manage releasing load balancer resources ([#96742](https://github.com/kubernetes/kubernetes/pull/96742), [@spencerhance](https://github.com/spencerhance)) [SIG Network and Testing]
-- The Conformance test "validates that there is no conflict between pods with same hostPort but different hostIP and protocol" now validates the connectivity to each hostPort, in addition to the functionality. ([#96627](https://github.com/kubernetes/kubernetes/pull/96627), [@aojea](https://github.com/aojea)) [SIG Scheduling and Testing]
+- Escape the special characters like `[`, `]` and ` ` that exist in vsphere windows path ([#98830](https://github.com/kubernetes/kubernetes/pull/98830), [@liyanhui1228](https://github.com/liyanhui1228)) [SIG Storage and Windows]
+- Kube-proxy: fix a bug on UDP `NodePort` Services where stale connection tracking entries may blackhole the traffic directed to the `NodePort` ([#98305](https://github.com/kubernetes/kubernetes/pull/98305), [@aojea](https://github.com/aojea))
+- Kubelet: fixes a bug in the HostPort dockershim implementation that caused the conformance test "HostPort validates that there is no conflict between pods with same hostPort but different hostIP and protocol" to fail. ([#98755](https://github.com/kubernetes/kubernetes/pull/98755), [@aojea](https://github.com/aojea)) [SIG Cloud Provider, Network and Node]
 
 ### 버그 또는 회귀(regression)
 
-- Add kubectl wait  --ignore-not-found flag ([#90969](https://github.com/kubernetes/kubernetes/pull/90969), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Added support to kube-proxy for externalTrafficPolicy=Local setting via Direct Server Return (DSR) load balancers on Windows. ([#93166](https://github.com/kubernetes/kubernetes/pull/93166), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
-- Alter wording to describe pods using a pvc ([#95635](https://github.com/kubernetes/kubernetes/pull/95635), [@RaunakShah](https://github.com/RaunakShah)) [SIG CLI]
-- An issues preventing volume expand controller to annotate the PVC with `volume.kubernetes.io/storage-resizer` when the PVC StorageClass is already updated to the out-of-tree provisioner is now fixed. ([#94489](https://github.com/kubernetes/kubernetes/pull/94489), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery, Apps and Storage]
-- Azure ARM client: don't segfault on empty response and http error ([#94078](https://github.com/kubernetes/kubernetes/pull/94078), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- Azure armclient backoff step defaults to 1 (no retry). ([#94180](https://github.com/kubernetes/kubernetes/pull/94180), [@feiskyer](https://github.com/feiskyer))
-- Azure: fix a bug that kube-controller-manager would panic if wrong Azure VMSS name is configured ([#94306](https://github.com/kubernetes/kubernetes/pull/94306), [@knight42](https://github.com/knight42)) [SIG Cloud Provider]
-- Both apiserver_request_duration_seconds metrics and RequestReceivedTimestamp fields of an audit event now take into account the time a request spends in the apiserver request filters. ([#94903](https://github.com/kubernetes/kubernetes/pull/94903), [@tkashem](https://github.com/tkashem))
-- Build/lib/release: Explicitly use '--platform' in building server images
-
-  When we switched to go-runner for building the apiserver,
-  controller-manager, and scheduler server components, we no longer
-  reference the individual architectures in the image names, specifically
-  in the 'FROM' directive of the server image Dockerfiles.
-
-  As a result, server images for non-amd64 images copy in the go-runner
-  amd64 binary instead of the go-runner that matches that architecture.
-
-  This commit explicitly sets the '--platform=linux/${arch}' to ensure
-  we're pulling the correct go-runner arch from the manifest list.
-
-  Before:
-  `FROM ${base_image}`
-
-  After:
-  `FROM --platform=linux/${arch} ${base_image}` ([#94552](https://github.com/kubernetes/kubernetes/pull/94552), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
-- Bump node-problem-detector version to v0.8.5 to fix OOM detection in with Linux kernels 5.1+ ([#96716](https://github.com/kubernetes/kubernetes/pull/96716), [@tosi3k](https://github.com/tosi3k)) [SIG Cloud Provider, Scalability and Testing]
-- CSIDriver object can be deployed during volume attachment. ([#93710](https://github.com/kubernetes/kubernetes/pull/93710), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Node, Storage and Testing]
-- Ceph RBD volume expansion now works even when ceph.conf was not provided. ([#92027](https://github.com/kubernetes/kubernetes/pull/92027), [@juliantaylor](https://github.com/juliantaylor))
-- Change plugin name in fsgroupapplymetrics of csi and flexvolume to distinguish different driver ([#95892](https://github.com/kubernetes/kubernetes/pull/95892), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation, Storage and Testing]
-- Change the calculation of pod UIDs so that static pods get a unique value - will cause all containers to be killed and recreated after in-place upgrade. ([#87461](https://github.com/kubernetes/kubernetes/pull/87461), [@bboreham](https://github.com/bboreham)) [SIG Node]
-- Change the mount way from systemd to normal mount except ceph and glusterfs intree-volume. ([#94916](https://github.com/kubernetes/kubernetes/pull/94916), [@smileusd](https://github.com/smileusd)) [SIG Apps, Cloud Provider, Network, Node, Storage and Testing]
-- Changes to timeout parameter handling in 1.20.0-beta.2 have been reverted to avoid breaking backwards compatibility with existing clients. ([#96727](https://github.com/kubernetes/kubernetes/pull/96727), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
-- Clear UDP conntrack entry on endpoint changes when using nodeport ([#71573](https://github.com/kubernetes/kubernetes/pull/71573), [@JacobTanenbaum](https://github.com/JacobTanenbaum)) [SIG Network]
-- Cloud node controller: handle empty providerID from getProviderID ([#95342](https://github.com/kubernetes/kubernetes/pull/95342), [@nicolehanjing](https://github.com/nicolehanjing)) [SIG Cloud Provider]
-- Disable watchcache for events ([#96052](https://github.com/kubernetes/kubernetes/pull/96052), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
-- Disabled `LocalStorageCapacityIsolation` feature gate is honored during scheduling. ([#96092](https://github.com/kubernetes/kubernetes/pull/96092), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Do not fail sorting empty elements. ([#94666](https://github.com/kubernetes/kubernetes/pull/94666), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default ([#90439](https://github.com/kubernetes/kubernetes/pull/90439), [@SataQiu](https://github.com/SataQiu)) [SIG API Machinery]
-- Duplicate owner reference entries in create/update/patch requests now get deduplicated by the API server. The client sending the request now receives a warning header in the API response. Clients should stop sending requests with duplicate owner references. The API server may reject such requests as early as 1.24. ([#96185](https://github.com/kubernetes/kubernetes/pull/96185), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery and Testing]
-- Endpoint slice controller now mirrors parent's service label to its corresponding endpoint slices. ([#94443](https://github.com/kubernetes/kubernetes/pull/94443), [@aojea](https://github.com/aojea))
-- Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null ([#94355](https://github.com/kubernetes/kubernetes/pull/94355), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Exposes and sets a default timeout for the SubjectAccessReview client for DelegatingAuthorizationOptions ([#95725](https://github.com/kubernetes/kubernetes/pull/95725), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Exposes and sets a default timeout for the TokenReview client for DelegatingAuthenticationOptions ([#96217](https://github.com/kubernetes/kubernetes/pull/96217), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Fix CVE-2020-8555 for Quobyte client connections. ([#95206](https://github.com/kubernetes/kubernetes/pull/95206), [@misterikkit](https://github.com/misterikkit)) [SIG Storage]
-- Fix IP fragmentation of UDP and TCP packets not supported issues on LoadBalancer rules ([#96464](https://github.com/kubernetes/kubernetes/pull/96464), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix a bug that DefaultPreemption plugin is disabled when using (legacy) scheduler policy. ([#96439](https://github.com/kubernetes/kubernetes/pull/96439), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
-- Fix a bug where loadbalancer deletion gets stuck because of missing resource group. ([#93962](https://github.com/kubernetes/kubernetes/pull/93962), [@phiphi282](https://github.com/phiphi282))
-- Fix a concurrent map writes error in kubelet ([#93773](https://github.com/kubernetes/kubernetes/pull/93773), [@knight42](https://github.com/knight42)) [SIG Node]
-- Fix a panic in `kubectl debug` when a pod has multiple init or ephemeral containers. ([#94580](https://github.com/kubernetes/kubernetes/pull/94580), [@kiyoshim55](https://github.com/kiyoshim55))
-- Fix a regression where kubeadm bails out with a fatal error when an optional version command line argument is supplied to the "kubeadm upgrade plan" command ([#94421](https://github.com/kubernetes/kubernetes/pull/94421), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Fix azure disk attach failure for disk size bigger than 4TB ([#95463](https://github.com/kubernetes/kubernetes/pull/95463), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix azure disk data loss issue on Windows when unmount disk ([#95456](https://github.com/kubernetes/kubernetes/pull/95456), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix azure file migration panic ([#94853](https://github.com/kubernetes/kubernetes/pull/94853), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix bug in JSON path parser where an error occurs when a range is empty ([#95933](https://github.com/kubernetes/kubernetes/pull/95933), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
-- Fix client-go prometheus metrics to correctly present the API path accessed in some environments. ([#74363](https://github.com/kubernetes/kubernetes/pull/74363), [@aanm](https://github.com/aanm)) [SIG API Machinery]
-- Fix detach azure disk issue when vm not exist ([#95177](https://github.com/kubernetes/kubernetes/pull/95177), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix etcd_object_counts metric reported by kube-apiserver ([#94773](https://github.com/kubernetes/kubernetes/pull/94773), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- Fix incorrectly reported verbs for kube-apiserver metrics for CRD objects ([#93523](https://github.com/kubernetes/kubernetes/pull/93523), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- Fix k8s.io/apimachinery/pkg/api/meta.SetStatusCondition to update ObservedGeneration ([#95961](https://github.com/kubernetes/kubernetes/pull/95961), [@KnicKnic](https://github.com/KnicKnic)) [SIG API Machinery]
-- Fix kubectl SchemaError on CRDs with schema using x-kubernetes-preserve-unknown-fields on array types. ([#94888](https://github.com/kubernetes/kubernetes/pull/94888), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Fix memory leak in kube-apiserver when underlying time goes forth and back. ([#96266](https://github.com/kubernetes/kubernetes/pull/96266), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery]
-- Fix missing csi annotations on node during parallel csinode update. ([#94389](https://github.com/kubernetes/kubernetes/pull/94389), [@pacoxu](https://github.com/pacoxu)) [SIG Storage]
-- Fix network_programming_latency metric reporting for Endpoints/EndpointSlice deletions, where we don't have correct timestamp ([#95363](https://github.com/kubernetes/kubernetes/pull/95363), [@wojtek-t](https://github.com/wojtek-t)) [SIG Network and Scalability]
-- Fix paging issues when Azure API returns empty values with non-empty nextLink ([#96211](https://github.com/kubernetes/kubernetes/pull/96211), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix pull image error from multiple ACRs using azure managed identity ([#96355](https://github.com/kubernetes/kubernetes/pull/96355), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix race condition on timeCache locks. ([#94751](https://github.com/kubernetes/kubernetes/pull/94751), [@auxten](https://github.com/auxten))
-- Fix regression on `kubectl portforward` when TCP and UCP services were configured on the same port. ([#94728](https://github.com/kubernetes/kubernetes/pull/94728), [@amorenoz](https://github.com/amorenoz))
-- Fix scheduler cache snapshot when a Node is deleted before its Pods ([#95130](https://github.com/kubernetes/kubernetes/pull/95130), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Fix the `cloudprovider_azure_api_request_duration_seconds` metric buckets to correctly capture the latency metrics. Previously, the majority of the calls would fall in the "+Inf" bucket. ([#94873](https://github.com/kubernetes/kubernetes/pull/94873), [@marwanad](https://github.com/marwanad)) [SIG Cloud Provider and Instrumentation]
-- Fix vSphere volumes that could be erroneously attached to wrong node ([#96224](https://github.com/kubernetes/kubernetes/pull/96224), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fix verb & scope reporting for kube-apiserver metrics (LIST reported instead of GET) ([#95562](https://github.com/kubernetes/kubernetes/pull/95562), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Fix vsphere detach failure for static PVs ([#95447](https://github.com/kubernetes/kubernetes/pull/95447), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fix: azure disk resize error if source does not exist ([#93011](https://github.com/kubernetes/kubernetes/pull/93011), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: detach azure disk broken on Azure Stack ([#94885](https://github.com/kubernetes/kubernetes/pull/94885), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: resize Azure disk issue when it's in attached state ([#96705](https://github.com/kubernetes/kubernetes/pull/96705), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: smb valid path error ([#95583](https://github.com/kubernetes/kubernetes/pull/95583), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Fix: use sensitiveOptions on Windows mount ([#94126](https://github.com/kubernetes/kubernetes/pull/94126), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fixed a bug causing incorrect formatting of `kubectl describe ingress`. ([#94985](https://github.com/kubernetes/kubernetes/pull/94985), [@howardjohn](https://github.com/howardjohn)) [SIG CLI and Network]
-- Fixed a bug in client-go where new clients with customized `Dial`, `Proxy`, `GetCert` config may get stale HTTP transports. ([#95427](https://github.com/kubernetes/kubernetes/pull/95427), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Fixed a bug that prevents kubectl to validate CRDs with schema using x-kubernetes-preserve-unknown-fields on object fields. ([#96369](https://github.com/kubernetes/kubernetes/pull/96369), [@gautierdelorme](https://github.com/gautierdelorme)) [SIG API Machinery and Testing]
-- Fixed a bug that prevents the use of ephemeral containers in the presence of a validating admission webhook. ([#94685](https://github.com/kubernetes/kubernetes/pull/94685), [@verb](https://github.com/verb)) [SIG Node and Testing]
-- Fixed a bug where aggregator_unavailable_apiservice metrics were reported for deleted apiservices. ([#96421](https://github.com/kubernetes/kubernetes/pull/96421), [@dgrisonnet](https://github.com/dgrisonnet)) [SIG API Machinery and Instrumentation]
-- Fixed a bug where improper storage and comparison of endpoints led to excessive API traffic from the endpoints controller ([#94112](https://github.com/kubernetes/kubernetes/pull/94112), [@damemi](https://github.com/damemi)) [SIG Apps, Network and Testing]
-- Fixed a regression which prevented pods with `docker/default` seccomp annotations from being created in 1.19 if a PodSecurityPolicy was in place which did not allow `runtime/default` seccomp profiles. ([#95985](https://github.com/kubernetes/kubernetes/pull/95985), [@saschagrunert](https://github.com/saschagrunert)) [SIG Auth]
-- Fixed bug in reflector that couldn't recover from "Too large resource version" errors with API servers 1.17.0-1.18.5 ([#94316](https://github.com/kubernetes/kubernetes/pull/94316), [@janeczku](https://github.com/janeczku)) [SIG API Machinery]
-- Fixed bug where kubectl top pod output is not sorted when --sort-by and --containers flags are used together ([#93692](https://github.com/kubernetes/kubernetes/pull/93692), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Fixed kubelet creating extra sandbox for pods with RestartPolicyOnFailure after all containers succeeded ([#92614](https://github.com/kubernetes/kubernetes/pull/92614), [@tnqn](https://github.com/tnqn)) [SIG Node and Testing]
-- Fixes an issue proxying to ipv6 pods without specifying a port ([#94834](https://github.com/kubernetes/kubernetes/pull/94834), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Network]
-- Fixes code generation for non-namespaced create subresources fake client test. ([#96586](https://github.com/kubernetes/kubernetes/pull/96586), [@Doude](https://github.com/Doude)) [SIG API Machinery]
-- Fixes high CPU usage in kubectl drain ([#95260](https://github.com/kubernetes/kubernetes/pull/95260), [@amandahla](https://github.com/amandahla)) [SIG CLI]
-- For vSphere Cloud Provider, If VM of worker node is deleted, the node will also be deleted by node controller ([#92608](https://github.com/kubernetes/kubernetes/pull/92608), [@lubronzhan](https://github.com/lubronzhan)) [SIG Cloud Provider]
-- Gracefully delete nodes when their parent scale set went missing ([#95289](https://github.com/kubernetes/kubernetes/pull/95289), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- HTTP/2 connection health check is enabled by default in all Kubernetes clients. The feature should work out-of-the-box. If needed, users can tune the feature via the HTTP2_READ_IDLE_TIMEOUT_SECONDS and HTTP2_PING_TIMEOUT_SECONDS environment variables. The feature is disabled if HTTP2_READ_IDLE_TIMEOUT_SECONDS is set to 0. ([#95981](https://github.com/kubernetes/kubernetes/pull/95981), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- If the user specifies an invalid timeout in the request URL, the request will be aborted with an HTTP 400.
-  - If the user specifies a timeout in the request URL that exceeds the maximum request deadline allowed by the apiserver, the request will be aborted with an HTTP 400. ([#96061](https://github.com/kubernetes/kubernetes/pull/96061), [@tkashem](https://github.com/tkashem)) [SIG API Machinery, Network and Testing]
-- If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn`t automatically scale the number of pods correctly ([#95647](https://github.com/kubernetes/kubernetes/pull/95647), [@JoshuaAndrew](https://github.com/JoshuaAndrew)) [SIG Apps and Autoscaling]
-- Ignore apparmor for non-linux operating systems ([#93220](https://github.com/kubernetes/kubernetes/pull/93220), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Ignore root user check when windows pod starts ([#92355](https://github.com/kubernetes/kubernetes/pull/92355), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Improve error messages related to nodePort endpoint changes conntrack entries cleanup. ([#96251](https://github.com/kubernetes/kubernetes/pull/96251), [@ravens](https://github.com/ravens)) [SIG Network]
-- In dual-stack clusters, kubelet will now set up both IPv4 and IPv6 iptables rules, which may
-  fix some problems, eg with HostPorts. ([#94474](https://github.com/kubernetes/kubernetes/pull/94474), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Increase maximum IOPS of AWS EBS io1 volume to current maximum (64,000). ([#90014](https://github.com/kubernetes/kubernetes/pull/90014), [@jacobmarble](https://github.com/jacobmarble))
-- Ipvs: ensure selected scheduler kernel modules are loaded ([#93040](https://github.com/kubernetes/kubernetes/pull/93040), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
-- K8s.io/apimachinery: runtime.DefaultUnstructuredConverter.FromUnstructured now handles converting integer fields to typed float values ([#93250](https://github.com/kubernetes/kubernetes/pull/93250), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- Kube-proxy now trims extra spaces found in loadBalancerSourceRanges to match Service validation. ([#94107](https://github.com/kubernetes/kubernetes/pull/94107), [@robscott](https://github.com/robscott)) [SIG Network]
-- Kubeadm ensures "kubeadm reset" does not unmount the root "/var/lib/kubelet" directory if it is mounted by the user. ([#93702](https://github.com/kubernetes/kubernetes/pull/93702), [@thtanaka](https://github.com/thtanaka))
-- Kubeadm now makes sure the etcd manifest is regenerated upon upgrade even when no etcd version change takes place ([#94395](https://github.com/kubernetes/kubernetes/pull/94395), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Kubeadm now warns (instead of error out) on missing "ca.key" files for root CA, front-proxy CA and etcd CA, during "kubeadm join --control-plane" if the user has provided all certificates, keys and kubeconfig files which require signing with the given CA keys. ([#94988](https://github.com/kubernetes/kubernetes/pull/94988), [@neolit123](https://github.com/neolit123))
-- Kubeadm: add missing "--experimental-patches" flag to "kubeadm init phase control-plane" ([#95786](https://github.com/kubernetes/kubernetes/pull/95786), [@Sh4d1](https://github.com/Sh4d1)) [SIG Cluster Lifecycle]
-- Kubeadm: avoid a panic when determining if the running version of CoreDNS is supported during upgrades ([#94299](https://github.com/kubernetes/kubernetes/pull/94299), [@zouyee](https://github.com/zouyee)) [SIG Cluster Lifecycle]
-- Kubeadm: ensure the etcd data directory is created with 0700 permissions during control-plane init and join ([#94102](https://github.com/kubernetes/kubernetes/pull/94102), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: fix coredns migration should be triggered when there are newdefault configs during kubeadm upgrade ([#96907](https://github.com/kubernetes/kubernetes/pull/96907), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Kubeadm: fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR ([#94555](https://github.com/kubernetes/kubernetes/pull/94555), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: for Docker as the container runtime, make the "kubeadm reset" command stop containers before removing them ([#94586](https://github.com/kubernetes/kubernetes/pull/94586), [@BedivereZero](https://github.com/BedivereZero)) [SIG Cluster Lifecycle]
-- Kubeadm: make the kubeconfig files for the kube-controller-manager and kube-scheduler use the LocalAPIEndpoint instead of the ControlPlaneEndpoint. This makes kubeadm clusters more reseliant to version skew problems during immutable upgrades: https://kubernetes.io/docs/setup/release/version-skew-policy/#kube-controller-manager-kube-scheduler-and-cloud-controller-manager ([#94398](https://github.com/kubernetes/kubernetes/pull/94398), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: relax the validation of kubeconfig server URLs. Allow the user to define custom kubeconfig server URLs without erroring out during validation of existing kubeconfig files (e.g. when using external CA mode). ([#94816](https://github.com/kubernetes/kubernetes/pull/94816), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubectl: print error if users place flags before plugin name ([#92343](https://github.com/kubernetes/kubernetes/pull/92343), [@knight42](https://github.com/knight42)) [SIG CLI]
-- Kubelet: assume that swap is disabled when `/proc/swaps` does not exist ([#93931](https://github.com/kubernetes/kubernetes/pull/93931), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
-- New Azure instance types do now have correct max data disk count information. ([#94340](https://github.com/kubernetes/kubernetes/pull/94340), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Cloud Provider and Storage]
-- Port mapping now allows the same `containerPort` of different containers to different `hostPort` without naming the mapping explicitly. ([#94494](https://github.com/kubernetes/kubernetes/pull/94494), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev))
-- Print go stack traces at -v=4 and not -v=2 ([#94663](https://github.com/kubernetes/kubernetes/pull/94663), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Recreate EndpointSlices on rapid Service creation. ([#94730](https://github.com/kubernetes/kubernetes/pull/94730), [@robscott](https://github.com/robscott))
-- Reduce volume name length for vsphere volumes ([#96533](https://github.com/kubernetes/kubernetes/pull/96533), [@gnufied](https://github.com/gnufied)) [SIG Storage]
-- Remove ready file and its directory (which is created during volume SetUp) during emptyDir volume TearDown. ([#95770](https://github.com/kubernetes/kubernetes/pull/95770), [@jingxu97](https://github.com/jingxu97)) [SIG Storage]
-- Reorganized iptables rules to fix a performance issue ([#95252](https://github.com/kubernetes/kubernetes/pull/95252), [@tssurya](https://github.com/tssurya)) [SIG Network]
-- Require feature flag CustomCPUCFSQuotaPeriod if setting a non-default cpuCFSQuotaPeriod in kubelet config. ([#94687](https://github.com/kubernetes/kubernetes/pull/94687), [@karan](https://github.com/karan)) [SIG Node]
-- Resolves a regression in 1.19+ with workloads targeting deprecated beta os/arch labels getting stuck in NodeAffinity status on node startup. ([#96810](https://github.com/kubernetes/kubernetes/pull/96810), [@liggitt](https://github.com/liggitt)) [SIG Node]
-- Resolves non-deterministic behavior of the garbage collection controller when ownerReferences with incorrect data are encountered. Events with a reason of `OwnerRefInvalidNamespace` are recorded when namespace mismatches between child and owner objects are detected. The [kubectl-check-ownerreferences](https://github.com/kubernetes-sigs/kubectl-check-ownerreferences) tool can be run prior to upgrading to locate existing objects with invalid ownerReferences.
-  - A namespaced object with an ownerReference referencing a uid of a namespaced kind which does not exist in the same namespace is now consistently treated as though that owner does not exist, and the child object is deleted.
-  - A cluster-scoped object with an ownerReference referencing a uid of a namespaced kind is now consistently treated as though that owner is not resolvable, and the child object is ignored by the garbage collector. ([#92743](https://github.com/kubernetes/kubernetes/pull/92743), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-- Skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:162]: Driver azure-disk doesn't support snapshot type DynamicSnapshot -- skipping
-  skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:185]: Driver azure-disk doesn't support ntfs -- skipping ([#96144](https://github.com/kubernetes/kubernetes/pull/96144), [@qinpingli](https://github.com/qinpingli)) [SIG Storage and Testing]
-- StatefulSet Controller now waits for PersistentVolumeClaim deletion before creating pods. ([#93457](https://github.com/kubernetes/kubernetes/pull/93457), [@ymmt2005](https://github.com/ymmt2005))
-- StreamWatcher now calls HandleCrash at appropriate sequence. ([#93108](https://github.com/kubernetes/kubernetes/pull/93108), [@lixiaobing1](https://github.com/lixiaobing1))
-- Support the node label `node.kubernetes.io/exclude-from-external-load-balancers` ([#95542](https://github.com/kubernetes/kubernetes/pull/95542), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- The AWS network load balancer attributes can now be specified during service creation ([#95247](https://github.com/kubernetes/kubernetes/pull/95247), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- The `/debug/api_priority_and_fairness/dump_requests` path at an apiserver will no longer return a phantom line for each exempt priority level. ([#93406](https://github.com/kubernetes/kubernetes/pull/93406), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
-- The kube-apiserver will no longer serve APIs that should have been deleted in GA non-alpha levels.  Alpha levels will continue to serve the removed APIs so that CI doesn't immediately break. ([#96525](https://github.com/kubernetes/kubernetes/pull/96525), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
-- The kubelet recognizes the --containerd-namespace flag to configure the namespace used by cadvisor. ([#87054](https://github.com/kubernetes/kubernetes/pull/87054), [@changyaowei](https://github.com/changyaowei)) [SIG Node]
-- Unhealthy pods covered by PDBs can be successfully evicted if enough healthy pods are available. ([#94381](https://github.com/kubernetes/kubernetes/pull/94381), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
-- Update Calico to v3.15.2 ([#94241](https://github.com/kubernetes/kubernetes/pull/94241), [@lmm](https://github.com/lmm)) [SIG Cloud Provider]
-- Update default etcd server version to 3.4.13 ([#94287](https://github.com/kubernetes/kubernetes/pull/94287), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
-- Update max azure data disk count map ([#96308](https://github.com/kubernetes/kubernetes/pull/96308), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Update the PIP when it is not in the Succeeded provisioning state during the LB update. ([#95748](https://github.com/kubernetes/kubernetes/pull/95748), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Update the frontend IP config when the service's `pipName` annotation is changed ([#95813](https://github.com/kubernetes/kubernetes/pull/95813), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Update the route table tag in the route reconcile loop ([#96545](https://github.com/kubernetes/kubernetes/pull/96545), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Use NLB Subnet CIDRs instead of VPC CIDRs in Health Check SG Rules ([#93515](https://github.com/kubernetes/kubernetes/pull/93515), [@t0rr3sp3dr0](https://github.com/t0rr3sp3dr0)) [SIG Cloud Provider]
-- Users will see increase in time for deletion of pods and also guarantee that removal of pod from api server  would mean deletion of all the resources from container runtime. ([#92817](https://github.com/kubernetes/kubernetes/pull/92817), [@kmala](https://github.com/kmala)) [SIG Node]
-- Very large patches may now be specified to `kubectl patch` with the `--patch-file` flag instead of including them directly on the command line. The `--patch` and `--patch-file` flags are mutually exclusive. ([#93548](https://github.com/kubernetes/kubernetes/pull/93548), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
-- Volume binding: report UnschedulableAndUnresolvable status instead of an error when bound PVs not found ([#95541](https://github.com/kubernetes/kubernetes/pull/95541), [@cofyc](https://github.com/cofyc)) [SIG Apps, Scheduling and Storage]
-- Warn instead of fail when creating Roles and ClusterRoles with custom verbs via kubectl ([#92492](https://github.com/kubernetes/kubernetes/pull/92492), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-- When creating a PVC with the volume.beta.kubernetes.io/storage-provisioner annotation already set, the PV controller might have incorrectly deleted the newly provisioned PV instead of binding it to the PVC, depending on timing and system load. ([#95909](https://github.com/kubernetes/kubernetes/pull/95909), [@pohly](https://github.com/pohly)) [SIG Apps and Storage]
-- [kubectl] Fail when local source file doesn't exist ([#90333](https://github.com/kubernetes/kubernetes/pull/90333), [@bamarni](https://github.com/bamarni)) [SIG CLI]
+- AcceleratorStats will be available in the Summary API of kubelet when cri_stats_provider is used. ([#96873](https://github.com/kubernetes/kubernetes/pull/96873), [@ruiwen-zhao](https://github.com/ruiwen-zhao)) [SIG Node]
+- All data is no longer automatically deleted when a failure is detected during creation of the volume data file on a CSI volume. Now only the data file and volume path is removed. ([#96021](https://github.com/kubernetes/kubernetes/pull/96021), [@huffmanca](https://github.com/huffmanca))
+- Clean ReplicaSet by revision instead of creation timestamp in deployment controller ([#97407](https://github.com/kubernetes/kubernetes/pull/97407), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
+- Cleanup subnet in frontend IP configs to prevent huge subnet request bodies in some scenarios. ([#98133](https://github.com/kubernetes/kubernetes/pull/98133), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Client-go exec credential plugins will pass stdin only when interactive terminal is detected on stdin. This fixes a bug where previously it was checking if **stdout** is an interactive terminal. ([#99654](https://github.com/kubernetes/kubernetes/pull/99654), [@ankeesler](https://github.com/ankeesler))
+- Cloud-controller-manager: routes controller should not depend on --allocate-node-cidrs ([#97029](https://github.com/kubernetes/kubernetes/pull/97029), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider and Testing]
+- Cluster Autoscaler version bump to v1.20.0 ([#97011](https://github.com/kubernetes/kubernetes/pull/97011), [@towca](https://github.com/towca))
+- Creating a PVC with DataSource should fail for non-CSI plugins. ([#97086](https://github.com/kubernetes/kubernetes/pull/97086), [@xing-yang](https://github.com/xing-yang)) [SIG Apps and Storage]
+- EndpointSlice controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99345](https://github.com/kubernetes/kubernetes/pull/99345), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- EndpointSlice controllers are less likely to create duplicate EndpointSlices. ([#100103](https://github.com/kubernetes/kubernetes/pull/100103), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- EndpointSliceMirroring controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99756](https://github.com/kubernetes/kubernetes/pull/99756), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Ensure all vSphere nodes are are tracked by volume attach-detach controller ([#96689](https://github.com/kubernetes/kubernetes/pull/96689), [@gnufied](https://github.com/gnufied))
+- Ensure empty string annotations are copied over in rollbacks. ([#94858](https://github.com/kubernetes/kubernetes/pull/94858), [@waynepeking348](https://github.com/waynepeking348))
+- Ensure only one LoadBalancer rule is created when HA mode is enabled ([#99825](https://github.com/kubernetes/kubernetes/pull/99825), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Ensure that client-go's EventBroadcaster is safe (non-racy) during shutdown. ([#95664](https://github.com/kubernetes/kubernetes/pull/95664), [@DirectXMan12](https://github.com/DirectXMan12)) [SIG API Machinery]
+- Explicitly pass `KUBE_BUILD_CONFORMANCE=y` in `package-tarballs` to reenable building the conformance tarballs. ([#100571](https://github.com/kubernetes/kubernetes/pull/100571), [@puerco](https://github.com/puerco))
+- Fix Azure file migration e2e test failure when CSIMigration is turned on. ([#97877](https://github.com/kubernetes/kubernetes/pull/97877), [@andyzhangx](https://github.com/andyzhangx))
+- Fix CSI-migrated inline EBS volumes failing to mount if their volumeID is prefixed by aws:// ([#96821](https://github.com/kubernetes/kubernetes/pull/96821), [@wongma7](https://github.com/wongma7)) [SIG Storage]
+- Fix CVE-2020-8555 for Gluster client connections. ([#97922](https://github.com/kubernetes/kubernetes/pull/97922), [@liggitt](https://github.com/liggitt)) [SIG Storage]
+- Fix NPE in ephemeral storage eviction ([#98261](https://github.com/kubernetes/kubernetes/pull/98261), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fix PermissionDenied issue on SMB mount for Windows ([#99550](https://github.com/kubernetes/kubernetes/pull/99550), [@andyzhangx](https://github.com/andyzhangx))
+- Fix bug that would let the Horizontal Pod Autoscaler scale down despite at least one metric being unavailable/invalid ([#99514](https://github.com/kubernetes/kubernetes/pull/99514), [@mikkeloscar](https://github.com/mikkeloscar)) [SIG Apps and Autoscaling]
+- Fix cgroup handling for systemd with cgroup v2 ([#98365](https://github.com/kubernetes/kubernetes/pull/98365), [@odinuge](https://github.com/odinuge)) [SIG Node]
+- Fix counting error in service/nodeport/loadbalancer quota check ([#97451](https://github.com/kubernetes/kubernetes/pull/97451), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Network and Testing]
+- Fix errors when accessing Windows container stats for Dockershim ([#98510](https://github.com/kubernetes/kubernetes/pull/98510), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node and Windows]
+- Fix kube-proxy container image architecture for non amd64 images. ([#98526](https://github.com/kubernetes/kubernetes/pull/98526), [@saschagrunert](https://github.com/saschagrunert))
+- Fix missing cadvisor machine metrics. ([#97006](https://github.com/kubernetes/kubernetes/pull/97006), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node]
+- Fix nil VMSS name when setting service to auto mode ([#97366](https://github.com/kubernetes/kubernetes/pull/97366), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Fix privileged config of Pod Sandbox which was previously ignored. ([#96877](https://github.com/kubernetes/kubernetes/pull/96877), [@xeniumlee](https://github.com/xeniumlee))
+- Fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable ([#95269](https://github.com/kubernetes/kubernetes/pull/95269), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
+- Fix the regression with the slow pods termination. Before this fix pods may take an additional time to terminate - up to one minute. Reversing the change that ensured that CNI resources cleaned up when the pod is removed on API server. ([#97980](https://github.com/kubernetes/kubernetes/pull/97980), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Node]
+- Fix to recover CSI volumes from certain dangling attachments ([#96617](https://github.com/kubernetes/kubernetes/pull/96617), [@yuga711](https://github.com/yuga711)) [SIG Apps and Storage]
+- Fix: azure file latency issue for metadata-heavy workloads ([#97082](https://github.com/kubernetes/kubernetes/pull/97082), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fixed Cinder volume IDs on OpenStack Train ([#96673](https://github.com/kubernetes/kubernetes/pull/96673), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider]
+- Fixed FibreChannel volume plugin corrupting filesystems on detach of multipath volumes. ([#97013](https://github.com/kubernetes/kubernetes/pull/97013), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed a bug in kubelet that will saturate CPU utilization after containerd got restarted. ([#97174](https://github.com/kubernetes/kubernetes/pull/97174), [@hanlins](https://github.com/hanlins)) [SIG Node]
+- Fixed a bug that causes smaller number of conntrack-max being used under CPU static policy. (#99225, @xh4n3) ([#99613](https://github.com/kubernetes/kubernetes/pull/99613), [@xh4n3](https://github.com/xh4n3)) [SIG Network]
+- Fixed a bug that on k8s nodes, when the policy of INPUT chain in filter table is not ACCEPT, healthcheck nodeport would not work.
+  Added iptables rules to allow healthcheck nodeport traffic. ([#97824](https://github.com/kubernetes/kubernetes/pull/97824), [@hanlins](https://github.com/hanlins)) [SIG Network]
+- Fixed a bug that the kubelet cannot start on BtrfS. ([#98042](https://github.com/kubernetes/kubernetes/pull/98042), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Fixed a race condition on API server startup ensuring previously created webhook configurations are effective before the first write request is admitted. ([#95783](https://github.com/kubernetes/kubernetes/pull/95783), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
+- Fixed an issue with garbage collection failing to clean up namespaced children of an object also referenced incorrectly by cluster-scoped children ([#98068](https://github.com/kubernetes/kubernetes/pull/98068), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
+- Fixed authentication_duration_seconds metric scope. Previously, it included whole apiserver request duration which yields inaccurate results. ([#99944](https://github.com/kubernetes/kubernetes/pull/99944), [@marseel](https://github.com/marseel))
+- Fixed bug in CPUManager with race on container map access ([#97427](https://github.com/kubernetes/kubernetes/pull/97427), [@klueska](https://github.com/klueska)) [SIG Node]
+- Fixed bug that caused cAdvisor to incorrectly detect single-socket multi-NUMA topology. ([#99315](https://github.com/kubernetes/kubernetes/pull/99315), [@iwankgb](https://github.com/iwankgb)) [SIG Node]
+- Fixed cleanup of block devices when /var/lib/kubelet is a symlink. ([#96889](https://github.com/kubernetes/kubernetes/pull/96889), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed no effect namespace when exposing deployment with --dry-run=client. ([#97492](https://github.com/kubernetes/kubernetes/pull/97492), [@masap](https://github.com/masap)) [SIG CLI]
+- Fixed provisioning of Cinder volumes migrated to CSI when StorageClass with AllowedTopologies was used. ([#98311](https://github.com/kubernetes/kubernetes/pull/98311), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixes a bug of identifying the correct containerd process. ([#97888](https://github.com/kubernetes/kubernetes/pull/97888), [@pacoxu](https://github.com/pacoxu))
+- Fixes add-on manager leader election to use leases instead of endpoints, similar to what kube-controller-manager does in 1.20 ([#98968](https://github.com/kubernetes/kubernetes/pull/98968), [@liggitt](https://github.com/liggitt))
+- Fixes connection errors when using `--volume-host-cidr-denylist` or `--volume-host-allow-local-loopback` ([#98436](https://github.com/kubernetes/kubernetes/pull/98436), [@liggitt](https://github.com/liggitt)) [SIG Network and Storage]
+- Fixes problem where invalid selector on `PodDisruptionBudget` leads to a nil pointer dereference that causes the Controller manager to crash loop. ([#98750](https://github.com/kubernetes/kubernetes/pull/98750), [@mortent](https://github.com/mortent))
+- Fixes spurious errors about IPv6 in `kube-proxy` logs on nodes with IPv6 disabled. ([#99127](https://github.com/kubernetes/kubernetes/pull/99127), [@danwinship](https://github.com/danwinship))
+- Fixing a bug where a failed node may not have the NoExecute taint set correctly ([#96876](https://github.com/kubernetes/kubernetes/pull/96876), [@howieyuen](https://github.com/howieyuen)) [SIG Apps and Node]
+- GCE Internal LoadBalancer sync loop will now release the ILB IP address upon sync failure. An error in ILB forwarding rule creation will no longer leak IP addresses. ([#97740](https://github.com/kubernetes/kubernetes/pull/97740), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider and Network]
+- Ignore update pod with no new images in alwaysPullImages admission controller ([#96668](https://github.com/kubernetes/kubernetes/pull/96668), [@pacoxu](https://github.com/pacoxu)) [SIG Apps, Auth and Node]
+- Improve speed of vSphere PV provisioning and reduce number of API calls ([#100054](https://github.com/kubernetes/kubernetes/pull/100054), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- KUBECTL_EXTERNAL_DIFF now accepts equal sign for additional parameters. ([#98158](https://github.com/kubernetes/kubernetes/pull/98158), [@dougsland](https://github.com/dougsland)) [SIG CLI]
+- Kube-apiserver: an update of a pod with a generic ephemeral volume dropped that volume if the feature had been disabled since creating the pod with such a volume ([#99446](https://github.com/kubernetes/kubernetes/pull/99446), [@pohly](https://github.com/pohly)) [SIG Apps, Node and Storage]
+- Kube-proxy: remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
+- Kubeadm installs etcd v3.4.13 when creating cluster v1.19 ([#97244](https://github.com/kubernetes/kubernetes/pull/97244), [@pacoxu](https://github.com/pacoxu))
+- Kubeadm: Fixes a kubeadm upgrade bug that could cause a custom CoreDNS configuration to be replaced with the default. ([#97016](https://github.com/kubernetes/kubernetes/pull/97016), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubeadm: Some text in the `kubeadm upgrade plan` output has changed. If you have scripts or other automation that parses this output, please review these changes and update your scripts to account for the new output. ([#98728](https://github.com/kubernetes/kubernetes/pull/98728), [@stmcginnis](https://github.com/stmcginnis)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug in the host memory detection code on 32bit Linux platforms ([#97403](https://github.com/kubernetes/kubernetes/pull/97403), [@abelbarrera15](https://github.com/abelbarrera15)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where "kubeadm join" would not properly handle missing names for existing etcd members. ([#97372](https://github.com/kubernetes/kubernetes/pull/97372), [@ihgann](https://github.com/ihgann)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where "kubeadm upgrade" commands can fail if CoreDNS v1.8.0 is installed. ([#97919](https://github.com/kubernetes/kubernetes/pull/97919), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where external credentials in an existing admin.conf prevented the CA certificate to be written in the cluster-info ConfigMap. ([#98882](https://github.com/kubernetes/kubernetes/pull/98882), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
+- Kubeadm: get k8s CI version markers from k8s infra bucket ([#98836](https://github.com/kubernetes/kubernetes/pull/98836), [@hasheddan](https://github.com/hasheddan)) [SIG Cluster Lifecycle and Release]
+- Kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false ([#98984](https://github.com/kubernetes/kubernetes/pull/98984), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubectl logs: `--ignore-errors` is now honored by all containers, maintaining consistency with parallelConsumeRequest behavior. ([#97686](https://github.com/kubernetes/kubernetes/pull/97686), [@wzshiming](https://github.com/wzshiming))
+- Kubectl-convert: Fix `no kind "Ingress" is registered for version` error ([#97754](https://github.com/kubernetes/kubernetes/pull/97754), [@wzshiming](https://github.com/wzshiming))
+- Kubectl: Fixed panic when describing an ingress backend without an API Group ([#100505](https://github.com/kubernetes/kubernetes/pull/100505), [@lauchokyip](https://github.com/lauchokyip)) [SIG CLI]
+- Kubelet now cleans up orphaned volume directories automatically ([#95301](https://github.com/kubernetes/kubernetes/pull/95301), [@lorenz](https://github.com/lorenz)) [SIG Node and Storage]
+- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]
+- Kubelet: Fix kubelet from panic after getting the wrong signal ([#98200](https://github.com/kubernetes/kubernetes/pull/98200), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Kubelet: Fix repeatedly acquiring the inhibit lock ([#98088](https://github.com/kubernetes/kubernetes/pull/98088), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Kubelet: Fixed the bug of getting the number of cpu when the number of cpu logical processors is more than 64 in windows ([#97378](https://github.com/kubernetes/kubernetes/pull/97378), [@hwdef](https://github.com/hwdef)) [SIG Node and Windows]
+- Limits lease to have 1000 maximum attached objects. ([#98257](https://github.com/kubernetes/kubernetes/pull/98257), [@lingsamuel](https://github.com/lingsamuel))
+- Mitigate CVE-2020-8555 for kube-up using GCE by preventing local loopback folume hosts. ([#97934](https://github.com/kubernetes/kubernetes/pull/97934), [@mattcary](https://github.com/mattcary)) [SIG Cloud Provider and Storage]
+- On single-stack configured (IPv4 or IPv6, but not both) clusters, Services which are both headless (no clusterIP) and selectorless (empty or undefined selector) will report `ipFamilyPolicy RequireDualStack` and will have entries in `ipFamilies[]` for both IPv4 and IPv6.  This is a change from alpha, but does not have any impact on the manually-specified Endpoints and EndpointSlices for the Service. ([#99555](https://github.com/kubernetes/kubernetes/pull/99555), [@thockin](https://github.com/thockin)) [SIG Apps and Network]
+- Performance regression #97685 has been fixed. ([#97860](https://github.com/kubernetes/kubernetes/pull/97860), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
+- Pod Log stats for windows now reports metrics ([#99221](https://github.com/kubernetes/kubernetes/pull/99221), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node, Storage, Testing and Windows]
+- Pod status updates faster when reacting on probe results. The first readiness probe will be called faster when startup probes succeeded, which will make Pod status as ready faster. ([#98376](https://github.com/kubernetes/kubernetes/pull/98376), [@matthyx](https://github.com/matthyx))
+- Readjust `kubelet_containers_per_pod_count` buckets to only show metrics greater than 1. ([#98169](https://github.com/kubernetes/kubernetes/pull/98169), [@wawa0210](https://github.com/wawa0210))
+- Remove CSI topology from migrated in-tree gcepd volume. ([#97823](https://github.com/kubernetes/kubernetes/pull/97823), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider and Storage]
+- Requests with invalid timeout parameters in the request URL now appear in the audit log correctly. ([#96901](https://github.com/kubernetes/kubernetes/pull/96901), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]
+- Resolve a "concurrent map read and map write" crashing error in the kubelet ([#95111](https://github.com/kubernetes/kubernetes/pull/95111), [@choury](https://github.com/choury)) [SIG Node]
+- Resolves spurious `Failed to list *v1.Secret` or `Failed to list *v1.ConfigMap` messages in kubelet logs. ([#99538](https://github.com/kubernetes/kubernetes/pull/99538), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- ResourceQuota of an entity now inclusively calculate Pod overhead ([#99600](https://github.com/kubernetes/kubernetes/pull/99600), [@gjkim42](https://github.com/gjkim42))
+- Return zero time (midnight on Jan. 1, 1970) instead of negative number when reporting startedAt and finishedAt of the not started or a running Pod when using `dockershim` as a runtime. ([#99585](https://github.com/kubernetes/kubernetes/pull/99585), [@Iceber](https://github.com/Iceber))
+- Reverts breaking change to inline AzureFile volumes; referenced secrets are now searched for in the same namespace as the pod as in previous releases. ([#100563](https://github.com/kubernetes/kubernetes/pull/100563), [@msau42](https://github.com/msau42))
+- Scores from InterPodAffinity have stronger differentiation. ([#98096](https://github.com/kubernetes/kubernetes/pull/98096), [@leileiwan](https://github.com/leileiwan)) [SIG Scheduling]
+- Specifying the KUBE_TEST_REPO environment variable when e2e tests are executed will instruct the test infrastructure to load that image from a location within the specified repo, using a predefined pattern. ([#93510](https://github.com/kubernetes/kubernetes/pull/93510), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- Static pods will be deleted gracefully. ([#98103](https://github.com/kubernetes/kubernetes/pull/98103), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Sync node status during kubelet node shutdown.
+  Adds an pod admission handler that rejects new pods when the node is in progress of shutting down. ([#98005](https://github.com/kubernetes/kubernetes/pull/98005), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- The calculation of pod UIDs for static pods has changed to ensure each static pod gets a unique value - this will cause all static pod containers to be recreated/restarted if an in-place kubelet upgrade from 1.20 to 1.21 is performed. Note that draining pods before upgrading the kubelet across minor versions is the supported upgrade path. ([#87461](https://github.com/kubernetes/kubernetes/pull/87461), [@bboreham](https://github.com/bboreham)) [SIG Node]
+- The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 ([#99795](https://github.com/kubernetes/kubernetes/pull/99795), [@robscott](https://github.com/robscott)) [SIG Network]
+- Truncates a message if it hits the `NoteLengthLimit` when the scheduler records an event for the pod that indicates the pod has failed to schedule. ([#98715](https://github.com/kubernetes/kubernetes/pull/98715), [@carlory](https://github.com/carlory))
+- Updated k8s.gcr.io/ingress-gce-404-server-with-metrics-amd64 to a version that serves /metrics endpoint on a non-default port. ([#97621](https://github.com/kubernetes/kubernetes/pull/97621), [@vbannai](https://github.com/vbannai)) [SIG Cloud Provider]
+- Updates the commands `
+   - kubectl kustomize {arg}
+   - kubectl apply -k {arg}
+  `to use same code as kustomize CLI [v4.0.5](https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.0.5) ([#98946](https://github.com/kubernetes/kubernetes/pull/98946), [@monopole](https://github.com/monopole))
+- Use force unmount for NFS volumes if regular mount fails after 1 minute timeout ([#96844](https://github.com/kubernetes/kubernetes/pull/96844), [@gnufied](https://github.com/gnufied)) [SIG Storage]
+- Use network.Interface.VirtualMachine.ID to get the binded VM
+  Skip standalone VM when reconciling LoadBalancer ([#97635](https://github.com/kubernetes/kubernetes/pull/97635), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Using exec auth plugins with kubectl no longer results in warnings about constructing many client instances from the same exec auth config. ([#97857](https://github.com/kubernetes/kubernetes/pull/97857), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Auth]
+- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
+  "primary IP family" of the cluster by picking a primary pod IP of the same family
+  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
+  in the order the administrator wanted (since some CNI plugins don't allow
+  configuring this). ([#97979](https://github.com/kubernetes/kubernetes/pull/97979), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
+- When dynamically provisioning Azure File volumes for a premium account, the requested size will be set to 100GB if the request is initially lower than this value to accommodate Azure File requirements. ([#99122](https://github.com/kubernetes/kubernetes/pull/99122), [@huffmanca](https://github.com/huffmanca)) [SIG Cloud Provider and Storage]
+- When using `Containerd` on Windows, the `C:\Windows\System32\drivers\etc\hosts` file will now be managed by kubelet. ([#83730](https://github.com/kubernetes/kubernetes/pull/83730), [@claudiubelu](https://github.com/claudiubelu))
+- `VolumeBindingArgs` now allow `BindTimeoutSeconds` to be set as zero, while the value zero indicates no waiting for the checking of volume binding operation. ([#99835](https://github.com/kubernetes/kubernetes/pull/99835), [@chendave](https://github.com/chendave)) [SIG Scheduling and Storage]
+- `kubectl exec` and `kubectl attach` now honor the `--quiet` flag which suppresses output from the local binary that could be confused by a script with the remote command output (all non-failure output is hidden). In addition, print inline with exec and attach the list of alternate containers when we default to the first spec.container. ([#99004](https://github.com/kubernetes/kubernetes/pull/99004), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
 
 ### 기타 (정리 또는 플레이크(flake))
 
-- **Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.**:
+- APIs for kubelet annotations and labels from `k8s.io/kubernetes/pkg/kubelet/apis` are now moved under `k8s.io/kubelet/pkg/apis/` ([#98931](https://github.com/kubernetes/kubernetes/pull/98931), [@michaelbeaumont](https://github.com/michaelbeaumont))
+- Apiserver_request_duration_seconds is promoted to stable status. ([#99925](https://github.com/kubernetes/kubernetes/pull/99925), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
+- Bump github.com/Azure/go-autorest/autorest to v0.11.12 ([#97033](https://github.com/kubernetes/kubernetes/pull/97033), [@patrickshan](https://github.com/patrickshan)) [SIG API Machinery, CLI, Cloud Provider and Cluster Lifecycle]
+- Clients required to use go1.15.8+ or go1.16+ if kube-apiserver has the goaway feature enabled to avoid unexpected data race condition. ([#98809](https://github.com/kubernetes/kubernetes/pull/98809), [@answer1991](https://github.com/answer1991))
+- Delete deprecated `service.beta.kubernetes.io/azure-load-balancer-mixed-protocols` mixed procotol annotation in favor of the MixedProtocolLBService feature ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- EndpointSlice generation is now incremented when labels change. ([#99750](https://github.com/kubernetes/kubernetes/pull/99750), [@robscott](https://github.com/robscott)) [SIG Network]
+- Featuregate AllowInsecureBackendProxy graduates to GA and unconditionally enabled. ([#99658](https://github.com/kubernetes/kubernetes/pull/99658), [@deads2k](https://github.com/deads2k))
+- Increase timeout for pod lifecycle test to reach pod status=ready ([#96691](https://github.com/kubernetes/kubernetes/pull/96691), [@hh](https://github.com/hh))
+- Increased `CSINodeIDMaxLength` from 128 bytes to 192 bytes. ([#98753](https://github.com/kubernetes/kubernetes/pull/98753), [@Jiawei0227](https://github.com/Jiawei0227))
+- Kube-apiserver: The OIDC authenticator no longer waits 10 seconds before attempting to fetch the metadata required to verify tokens. ([#97693](https://github.com/kubernetes/kubernetes/pull/97693), [@enj](https://github.com/enj)) [SIG API Machinery and Auth]
+- Kube-proxy: Traffic from the cluster directed to ExternalIPs is always sent directly to the Service. ([#96296](https://github.com/kubernetes/kubernetes/pull/96296), [@aojea](https://github.com/aojea)) [SIG Network and Testing]
+- Kubeadm: change the default image repository for CI images from 'gcr.io/kubernetes-ci-images' to 'gcr.io/k8s-staging-ci-images' ([#97087](https://github.com/kubernetes/kubernetes/pull/97087), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubectl: The deprecated `kubectl alpha debug` command is removed. Use `kubectl debug` instead. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Kubelet command line flags related to dockershim are now showing deprecation message as they will be removed along with dockershim in future release. ([#98730](https://github.com/kubernetes/kubernetes/pull/98730), [@dims](https://github.com/dims))
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97618](https://github.com/kubernetes/kubernetes/pull/97618), [@jherrera123](https://github.com/jherrera123)) [SIG Release and Testing]
+- Process start time on Windows now uses current process information ([#97491](https://github.com/kubernetes/kubernetes/pull/97491), [@jsturtevant](https://github.com/jsturtevant)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Windows]
+- Resolves flakes in the Ingress conformance tests due to conflicts with controllers updating the Ingress object ([#98430](https://github.com/kubernetes/kubernetes/pull/98430), [@liggitt](https://github.com/liggitt)) [SIG Network and Testing]
+- The `AttachVolumeLimit` feature gate (GA since v1.17) has been removed and now unconditionally enabled. ([#96539](https://github.com/kubernetes/kubernetes/pull/96539), [@ialidzhikov](https://github.com/ialidzhikov))
+- The `CSINodeInfo` feature gate that is GA since v1.17 is unconditionally enabled, and can no longer be specified via the `--feature-gates` argument. ([#96561](https://github.com/kubernetes/kubernetes/pull/96561), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps, Auth, Scheduling, Storage and Testing]
+- The `apiserver_request_total` metric is promoted to stable status and no longer has a content-type dimensions, so any alerts/charts which presume the existence of this will fail. This is however, unlikely to be the case since it was effectively an unbounded dimension in the first place. ([#99788](https://github.com/kubernetes/kubernetes/pull/99788), [@logicalhan](https://github.com/logicalhan))
+- The default delegating authorization options now allow unauthenticated access to healthz, readyz, and livez.  A system:masters user connecting to an authz delegator will not perform an authz check. ([#98325](https://github.com/kubernetes/kubernetes/pull/98325), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth, Cloud Provider and Scheduling]
+- The deprecated feature gates `CSIDriverRegistry`, `BlockVolume` and `CSIBlockVolume` are now unconditionally enabled and can no longer be specified in component invocations. ([#98021](https://github.com/kubernetes/kubernetes/pull/98021), [@gavinfish](https://github.com/gavinfish)) [SIG Storage]
+- The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavinfish](https://github.com/gavinfish)) [SIG Node, Scheduling and Storage]
+- The e2e suite can be instructed not to wait for pods in kube-system to be ready or for all nodes to be ready by passing `--allowed-not-ready-nodes=-1` when invoking the e2e.test program. This allows callers to run subsets of the e2e suite in scenarios other than perfectly healthy clusters. ([#98781](https://github.com/kubernetes/kubernetes/pull/98781), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- The feature gates `WindowsGMSA` and `WindowsRunAsUserName` that are GA since v1.18 are now removed. ([#96531](https://github.com/kubernetes/kubernetes/pull/96531), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Node and Windows]
+- The new `-gce-zones` flag on the `e2e.test` binary instructs tests that check for information about how the cluster interacts with the cloud to limit their queries to the provided zone list. If not specified, the current behavior of asking the cloud provider for all available zones in multi zone clusters is preserved. ([#98787](https://github.com/kubernetes/kubernetes/pull/98787), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Cluster Lifecycle and Testing]
+- Update cri-tools to [v1.20.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.20.0) ([#97967](https://github.com/kubernetes/kubernetes/pull/97967), [@rajibmitra](https://github.com/rajibmitra)) [SIG Cloud Provider]
+- Windows nodes on GCE will take longer to start due to dependencies installed at node creation time. ([#98284](https://github.com/kubernetes/kubernetes/pull/98284), [@pjh](https://github.com/pjh)) [SIG Cloud Provider]
+- `apiserver_storage_objects` (a newer version of `etcd_object_counts`) is promoted and marked as stable. ([#100082](https://github.com/kubernetes/kubernetes/pull/100082), [@logicalhan](https://github.com/logicalhan))
 
-  <!--
-  This section can be blank if this pull request does not require a release note.
+### 분류되지 않음
 
-  When adding links which point to resources within git repositories, like
-  KEPs or supporting documentation, please reference a specific commit and avoid
-  linking directly to the master branch. This ensures that links reference a
-  specific point in time, rather than a document that may change over time.
-
-  See here for guidance on getting permanent links to files: https://help.github.com/en/articles/getting-permanent-links-to-files
-
-  Please use the following format for linking documentation:
-  - [KEP]: <link>
-  - [Usage]: <link>
-  - [Other doc]: <link>
-  --> ([#96443](https://github.com/kubernetes/kubernetes/pull/96443), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps]
-- --redirect-container-streaming is no longer functional. The flag will be removed in v1.22 ([#95935](https://github.com/kubernetes/kubernetes/pull/95935), [@tallclair](https://github.com/tallclair)) [SIG Node]
-- A new metric `requestAbortsTotal` has been introduced that counts aborted requests for each `group`, `version`, `verb`, `resource`, `subresource` and `scope`. ([#95002](https://github.com/kubernetes/kubernetes/pull/95002), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery, Cloud Provider, Instrumentation and Scheduling]
-- API priority and fairness metrics use snake_case in label names ([#96236](https://github.com/kubernetes/kubernetes/pull/96236), [@adtac](https://github.com/adtac)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Testing]
-- Add fine grained debugging to intra-pod conformance test to troubleshoot networking issues for potentially unhealthy nodes when running conformance or sonobuoy tests. ([#93837](https://github.com/kubernetes/kubernetes/pull/93837), [@jayunit100](https://github.com/jayunit100))
-- Add the following metrics:
-  - network_plugin_operations_total
-  - network_plugin_operations_errors_total ([#93066](https://github.com/kubernetes/kubernetes/pull/93066), [@AnishShah](https://github.com/AnishShah))
-- Adds a bootstrapping ClusterRole, ClusterRoleBinding and group for /metrics, /livez/*, /readyz/*, & /healthz/- endpoints. ([#93311](https://github.com/kubernetes/kubernetes/pull/93311), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Auth, Cloud Provider and Instrumentation]
-- AdmissionReview objects sent for the creation of Namespace API objects now populate the `namespace` attribute consistently (previously the `namespace` attribute was empty for Namespace creation via POST requests, and populated for Namespace creation via server-side-apply PATCH requests) ([#95012](https://github.com/kubernetes/kubernetes/pull/95012), [@nodo](https://github.com/nodo)) [SIG API Machinery and Testing]
-- Applies translations on all command descriptions ([#95439](https://github.com/kubernetes/kubernetes/pull/95439), [@HerrNaN](https://github.com/HerrNaN)) [SIG CLI]
-- Base-images: Update to debian-iptables:buster-v1.3.0
-  - Uses iptables 1.8.5
-  - base-images: Update to debian-base:buster-v1.2.0
-  - cluster/images/etcd: Build etcd:3.4.13-1 image
-    - Uses debian-base:buster-v1.2.0 ([#94733](https://github.com/kubernetes/kubernetes/pull/94733), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Changed: default "Accept-Encoding" header removed from HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes ([#96127](https://github.com/kubernetes/kubernetes/pull/96127), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Client-go header logging (at verbosity levels >= 9) now masks `Authorization` header contents ([#95316](https://github.com/kubernetes/kubernetes/pull/95316), [@sfowl](https://github.com/sfowl)) [SIG API Machinery]
-- Decrease warning message frequency on setting volume ownership for configmap/secret. ([#92878](https://github.com/kubernetes/kubernetes/pull/92878), [@jvanz](https://github.com/jvanz))
-- Enhance log information of verifyRunAsNonRoot, add pod, container information ([#94911](https://github.com/kubernetes/kubernetes/pull/94911), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
-- Fix func name NewCreateCreateDeploymentOptions ([#91931](https://github.com/kubernetes/kubernetes/pull/91931), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG CLI]
-- Fix kubelet to properly log when a container is started. Previously, kubelet may log that container is dead and was restarted when it was actually started for the first time. This behavior only happened on pods with initContainers and regular containers. ([#91469](https://github.com/kubernetes/kubernetes/pull/91469), [@rata](https://github.com/rata))
-- Fixes the message about no auth for metrics in scheduler. ([#94035](https://github.com/kubernetes/kubernetes/pull/94035), [@zhouya0](https://github.com/zhouya0)) [SIG Scheduling]
-- Generators for services are removed from kubectl ([#95256](https://github.com/kubernetes/kubernetes/pull/95256), [@Git-Jiro](https://github.com/Git-Jiro)) [SIG CLI]
-- Introduce kubectl-convert plugin. ([#96190](https://github.com/kubernetes/kubernetes/pull/96190), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- Kube-scheduler now logs processed component config at startup ([#96426](https://github.com/kubernetes/kubernetes/pull/96426), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Kubeadm: Separate argument key/value in log msg ([#94016](https://github.com/kubernetes/kubernetes/pull/94016), [@mrueg](https://github.com/mrueg)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the CoreDNS check for known image digests when applying the addon ([#94506](https://github.com/kubernetes/kubernetes/pull/94506), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: update the default pause image version to 1.4.0 on Windows. With this update the image supports Windows versions 1809 (2019LTS), 1903, 1909, 2004 ([#95419](https://github.com/kubernetes/kubernetes/pull/95419), [@jsturtevant](https://github.com/jsturtevant)) [SIG Cluster Lifecycle and Windows]
-- Kubectl: the `generator` flag of `kubectl autoscale` has been deprecated and has no effect, it will be removed in a feature release ([#92998](https://github.com/kubernetes/kubernetes/pull/92998), [@SataQiu](https://github.com/SataQiu)) [SIG CLI]
-- Lock ExternalPolicyForExternalIP to default, this feature gate will be removed in 1.22. ([#94581](https://github.com/kubernetes/kubernetes/pull/94581), [@knabben](https://github.com/knabben)) [SIG Network]
-- Mask ceph RBD adminSecrets in logs when logLevel >= 4. ([#95245](https://github.com/kubernetes/kubernetes/pull/95245), [@sfowl](https://github.com/sfowl))
-- Remove offensive words from kubectl cluster-info command. ([#95202](https://github.com/kubernetes/kubernetes/pull/95202), [@rikatz](https://github.com/rikatz))
-- Remove support for "ci/k8s-master" version label in kubeadm, use "ci/latest" instead. See [kubernetes/test-infra#18517](https://github.com/kubernetes/test-infra/pull/18517). ([#93626](https://github.com/kubernetes/kubernetes/pull/93626), [@vikkyomkar](https://github.com/vikkyomkar))
-- Remove the dependency of csi-translation-lib module on apiserver/cloud-provider/controller-manager ([#95543](https://github.com/kubernetes/kubernetes/pull/95543), [@wawa0210](https://github.com/wawa0210)) [SIG Release]
-- Scheduler framework interface moved from pkg/scheduler/framework/v1alpha to pkg/scheduler/framework ([#95069](https://github.com/kubernetes/kubernetes/pull/95069), [@farah](https://github.com/farah)) [SIG Scheduling, Storage and Testing]
-- Service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset is removed.  All Standard load balancers will always enable tcp resets. ([#94297](https://github.com/kubernetes/kubernetes/pull/94297), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Stop propagating SelfLink (deprecated in 1.16) in kube-apiserver ([#94397](https://github.com/kubernetes/kubernetes/pull/94397), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Strip unnecessary security contexts on Windows ([#93475](https://github.com/kubernetes/kubernetes/pull/93475), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node, Testing and Windows]
-- To ensure the code be strong,  add unit test for GetAddressAndDialer ([#93180](https://github.com/kubernetes/kubernetes/pull/93180), [@FreeZhang61](https://github.com/FreeZhang61)) [SIG Node]
-- UDP and SCTP protocols can left stale connections that need to be cleared to avoid services disruption, but they can cause problems that are hard to debug.
-  Kubernetes components using a loglevel greater or equal than 4 will log the conntrack operations and its output, to show the entries that were deleted. ([#95694](https://github.com/kubernetes/kubernetes/pull/95694), [@aojea](https://github.com/aojea)) [SIG Network]
-- Update CNI plugins to v0.8.7 ([#94367](https://github.com/kubernetes/kubernetes/pull/94367), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Network, Node, Release and Testing]
-- Update cri-tools to [v1.19.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.19.0) ([#94307](https://github.com/kubernetes/kubernetes/pull/94307), [@xmudrii](https://github.com/xmudrii)) [SIG Cloud Provider]
-- Update etcd client side to v3.4.13 ([#94259](https://github.com/kubernetes/kubernetes/pull/94259), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
-- Users will now be able to configure all supported values for AWS NLB health check interval and thresholds for new resources. ([#96312](https://github.com/kubernetes/kubernetes/pull/96312), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- V1helpers.MatchNodeSelectorTerms now accepts just a Node and a list of Terms ([#95871](https://github.com/kubernetes/kubernetes/pull/95871), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
-- Vsphere: improve logging message on node cache refresh event ([#95236](https://github.com/kubernetes/kubernetes/pull/95236), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
-- `MatchNodeSelectorTerms` function moved to `k8s.io/component-helpers` ([#95531](https://github.com/kubernetes/kubernetes/pull/95531), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
-- `kubectl api-resources` now prints the API version (as 'API group/version', same as output of `kubectl api-versions`). The column APIGROUP is now APIVERSION ([#95253](https://github.com/kubernetes/kubernetes/pull/95253), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-- `kubectl get ingress` now prefers the `networking.k8s.io/v1` over `extensions/v1beta1` (deprecated since v1.14). To explicitly request the deprecated version, use `kubectl get ingress.v1beta1.extensions`. ([#94309](https://github.com/kubernetes/kubernetes/pull/94309), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and CLI]
+- GCE L4 Loadbalancers now handle > 5 ports in service spec correctly. ([#99595](https://github.com/kubernetes/kubernetes/pull/99595), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider]
+- The DownwardAPIHugePages feature is beta.  Users may use the feature if all workers in their cluster are min 1.20 version.  The feature will be enabled by default in all installations in 1.22. ([#99610](https://github.com/kubernetes/kubernetes/pull/99610), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
 
 ## 의존성
 
 ### 추가
-- cloud.google.com/go/firestore: v1.1.0
-- github.com/Azure/go-autorest: [v14.2.0+incompatible](https://github.com/Azure/go-autorest/tree/v14.2.0)
-- github.com/armon/go-metrics: [f0300d1](https://github.com/armon/go-metrics/tree/f0300d1)
-- github.com/armon/go-radix: [7fddfc3](https://github.com/armon/go-radix/tree/7fddfc3)
-- github.com/bketelsen/crypt: [5cbc8cc](https://github.com/bketelsen/crypt/tree/5cbc8cc)
-- github.com/form3tech-oss/jwt-go: [v3.2.2+incompatible](https://github.com/form3tech-oss/jwt-go/tree/v3.2.2)
-- github.com/fvbommel/sortorder: [v1.0.1](https://github.com/fvbommel/sortorder/tree/v1.0.1)
-- github.com/hashicorp/consul/api: [v1.1.0](https://github.com/hashicorp/consul/api/tree/v1.1.0)
-- github.com/hashicorp/consul/sdk: [v0.1.1](https://github.com/hashicorp/consul/sdk/tree/v0.1.1)
-- github.com/hashicorp/errwrap: [v1.0.0](https://github.com/hashicorp/errwrap/tree/v1.0.0)
-- github.com/hashicorp/go-cleanhttp: [v0.5.1](https://github.com/hashicorp/go-cleanhttp/tree/v0.5.1)
-- github.com/hashicorp/go-immutable-radix: [v1.0.0](https://github.com/hashicorp/go-immutable-radix/tree/v1.0.0)
-- github.com/hashicorp/go-msgpack: [v0.5.3](https://github.com/hashicorp/go-msgpack/tree/v0.5.3)
-- github.com/hashicorp/go-multierror: [v1.0.0](https://github.com/hashicorp/go-multierror/tree/v1.0.0)
-- github.com/hashicorp/go-rootcerts: [v1.0.0](https://github.com/hashicorp/go-rootcerts/tree/v1.0.0)
-- github.com/hashicorp/go-sockaddr: [v1.0.0](https://github.com/hashicorp/go-sockaddr/tree/v1.0.0)
-- github.com/hashicorp/go-uuid: [v1.0.1](https://github.com/hashicorp/go-uuid/tree/v1.0.1)
-- github.com/hashicorp/go.net: [v0.0.1](https://github.com/hashicorp/go.net/tree/v0.0.1)
-- github.com/hashicorp/logutils: [v1.0.0](https://github.com/hashicorp/logutils/tree/v1.0.0)
-- github.com/hashicorp/mdns: [v1.0.0](https://github.com/hashicorp/mdns/tree/v1.0.0)
-- github.com/hashicorp/memberlist: [v0.1.3](https://github.com/hashicorp/memberlist/tree/v0.1.3)
-- github.com/hashicorp/serf: [v0.8.2](https://github.com/hashicorp/serf/tree/v0.8.2)
-- github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/internal/testify/tree/v1.5.1)
-- github.com/mitchellh/cli: [v1.0.0](https://github.com/mitchellh/cli/tree/v1.0.0)
-- github.com/mitchellh/go-testing-interface: [v1.0.0](https://github.com/mitchellh/go-testing-interface/tree/v1.0.0)
-- github.com/mitchellh/gox: [v0.4.0](https://github.com/mitchellh/gox/tree/v0.4.0)
-- github.com/mitchellh/iochan: [v1.0.0](https://github.com/mitchellh/iochan/tree/v1.0.0)
-- github.com/pascaldekloe/goe: [57f6aae](https://github.com/pascaldekloe/goe/tree/57f6aae)
-- github.com/posener/complete: [v1.1.1](https://github.com/posener/complete/tree/v1.1.1)
-- github.com/ryanuber/columnize: [9b3edd6](https://github.com/ryanuber/columnize/tree/9b3edd6)
-- github.com/sean-/seed: [e2103e2](https://github.com/sean-/seed/tree/e2103e2)
-- github.com/subosito/gotenv: [v1.2.0](https://github.com/subosito/gotenv/tree/v1.2.0)
-- github.com/willf/bitset: [d5bec33](https://github.com/willf/bitset/tree/d5bec33)
-- gopkg.in/ini.v1: v1.51.0
-- gopkg.in/yaml.v3: 9f266ea
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
+- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
+- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
+- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
+- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
+- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
+- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
+- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
+- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
+- go.starlark.net: 8dd3e2e
+- golang.org/x/term: 6a3ed07
+- sigs.k8s.io/kustomize/api: v0.8.5
+- sigs.k8s.io/kustomize/cmd/config: v0.9.7
+- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
+- sigs.k8s.io/kustomize/kyaml: v0.10.15
 
 ### 변경
-- cloud.google.com/go/bigquery: v1.0.1 → v1.4.0
-- cloud.google.com/go/datastore: v1.0.0 → v1.1.0
-- cloud.google.com/go/pubsub: v1.0.1 → v1.2.0
-- cloud.google.com/go/storage: v1.0.0 → v1.6.0
-- cloud.google.com/go: v0.51.0 → v0.54.0
-- github.com/Azure/go-autorest/autorest/adal: [v0.8.2 → v0.9.5](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.8.2...v0.9.5)
-- github.com/Azure/go-autorest/autorest/date: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.2.0...v0.3.0)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.3.0 → v0.4.1](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.3.0...v0.4.1)
-- github.com/Azure/go-autorest/autorest: [v0.9.6 → v0.11.1](https://github.com/Azure/go-autorest/autorest/compare/v0.9.6...v0.11.1)
-- github.com/Azure/go-autorest/logger: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/logger/compare/v0.1.0...v0.2.0)
-- github.com/Azure/go-autorest/tracing: [v0.5.0 → v0.6.0](https://github.com/Azure/go-autorest/tracing/compare/v0.5.0...v0.6.0)
-- github.com/Microsoft/go-winio: [fc70bd9 → v0.4.15](https://github.com/Microsoft/go-winio/compare/fc70bd9...v0.4.15)
-- github.com/aws/aws-sdk-go: [v1.28.2 → v1.35.24](https://github.com/aws/aws-sdk-go/compare/v1.28.2...v1.35.24)
-- github.com/blang/semver: [v3.5.0+incompatible → v3.5.1+incompatible](https://github.com/blang/semver/compare/v3.5.0...v3.5.1)
-- github.com/checkpoint-restore/go-criu/v4: [v4.0.2 → v4.1.0](https://github.com/checkpoint-restore/go-criu/v4/compare/v4.0.2...v4.1.0)
-- github.com/containerd/containerd: [v1.3.3 → v1.4.1](https://github.com/containerd/containerd/compare/v1.3.3...v1.4.1)
-- github.com/containerd/ttrpc: [v1.0.0 → v1.0.2](https://github.com/containerd/ttrpc/compare/v1.0.0...v1.0.2)
-- github.com/containerd/typeurl: [v1.0.0 → v1.0.1](https://github.com/containerd/typeurl/compare/v1.0.0...v1.0.1)
-- github.com/coreos/etcd: [v3.3.10+incompatible → v3.3.13+incompatible](https://github.com/coreos/etcd/compare/v3.3.10...v3.3.13)
-- github.com/docker/docker: [aa6a989 → bd33bbf](https://github.com/docker/docker/compare/aa6a989...bd33bbf)
-- github.com/go-gl/glfw/v3.3/glfw: [12ad95a → 6f7a984](https://github.com/go-gl/glfw/v3.3/glfw/compare/12ad95a...6f7a984)
-- github.com/golang/groupcache: [215e871 → 8c9f03a](https://github.com/golang/groupcache/compare/215e871...8c9f03a)
-- github.com/golang/mock: [v1.3.1 → v1.4.1](https://github.com/golang/mock/compare/v1.3.1...v1.4.1)
-- github.com/golang/protobuf: [v1.4.2 → v1.4.3](https://github.com/golang/protobuf/compare/v1.4.2...v1.4.3)
-- github.com/google/cadvisor: [v0.37.0 → v0.38.5](https://github.com/google/cadvisor/compare/v0.37.0...v0.38.5)
-- github.com/google/go-cmp: [v0.4.0 → v0.5.2](https://github.com/google/go-cmp/compare/v0.4.0...v0.5.2)
-- github.com/google/pprof: [d4f498a → 1ebb73c](https://github.com/google/pprof/compare/d4f498a...1ebb73c)
-- github.com/google/uuid: [v1.1.1 → v1.1.2](https://github.com/google/uuid/compare/v1.1.1...v1.1.2)
-- github.com/gorilla/mux: [v1.7.3 → v1.8.0](https://github.com/gorilla/mux/compare/v1.7.3...v1.8.0)
-- github.com/gorilla/websocket: [v1.4.0 → v1.4.2](https://github.com/gorilla/websocket/compare/v1.4.0...v1.4.2)
-- github.com/jmespath/go-jmespath: [c2b33e8 → v0.4.0](https://github.com/jmespath/go-jmespath/compare/c2b33e8...v0.4.0)
-- github.com/karrick/godirwalk: [v1.7.5 → v1.16.1](https://github.com/karrick/godirwalk/compare/v1.7.5...v1.16.1)
-- github.com/opencontainers/go-digest: [v1.0.0-rc1 → v1.0.0](https://github.com/opencontainers/go-digest/compare/v1.0.0-rc1...v1.0.0)
-- github.com/opencontainers/runc: [819fcc6 → v1.0.0-rc92](https://github.com/opencontainers/runc/compare/819fcc6...v1.0.0-rc92)
-- github.com/opencontainers/runtime-spec: [237cc4f → 4d89ac9](https://github.com/opencontainers/runtime-spec/compare/237cc4f...4d89ac9)
-- github.com/opencontainers/selinux: [v1.5.2 → v1.6.0](https://github.com/opencontainers/selinux/compare/v1.5.2...v1.6.0)
-- github.com/prometheus/procfs: [v0.1.3 → v0.2.0](https://github.com/prometheus/procfs/compare/v0.1.3...v0.2.0)
-- github.com/quobyte/api: [v0.1.2 → v0.1.8](https://github.com/quobyte/api/compare/v0.1.2...v0.1.8)
-- github.com/spf13/cobra: [v1.0.0 → v1.1.1](https://github.com/spf13/cobra/compare/v1.0.0...v1.1.1)
-- github.com/spf13/viper: [v1.4.0 → v1.7.0](https://github.com/spf13/viper/compare/v1.4.0...v1.7.0)
-- github.com/storageos/go-api: [343b3ef → v2.2.0+incompatible](https://github.com/storageos/go-api/compare/343b3ef...v2.2.0)
-- github.com/stretchr/testify: [v1.4.0 → v1.6.1](https://github.com/stretchr/testify/compare/v1.4.0...v1.6.1)
-- github.com/vishvananda/netns: [52d707b → db3c7e5](https://github.com/vishvananda/netns/compare/52d707b...db3c7e5)
-- go.etcd.io/etcd: 17cef6e → dd1b699
-- go.opencensus.io: v0.22.2 → v0.22.3
-- golang.org/x/crypto: 75b2880 → 7f63de1
-- golang.org/x/exp: da58074 → 6cc2880
-- golang.org/x/lint: fdd1cda → 738671d
-- golang.org/x/net: ab34263 → 69a7880
-- golang.org/x/oauth2: 858c2ad → bf48bf1
-- golang.org/x/sys: ed371f2 → 5cba982
-- golang.org/x/text: v0.3.3 → v0.3.4
-- golang.org/x/time: 555d28b → 3af7569
-- golang.org/x/xerrors: 9bdfabe → 5ec99f8
-- google.golang.org/api: v0.15.1 → v0.20.0
-- google.golang.org/genproto: cb27e3a → 8816d57
-- google.golang.org/grpc: v1.27.0 → v1.27.1
-- google.golang.org/protobuf: v1.24.0 → v1.25.0
-- honnef.co/go/tools: v0.0.1-2019.2.3 → v0.0.1-2020.1.3
-- k8s.io/gengo: 8167cfd → 83324d8
-- k8s.io/klog/v2: v2.2.0 → v2.4.0
-- k8s.io/kube-openapi: 6aeccd4 → d219536
-- k8s.io/system-validators: v1.1.2 → v1.2.0
-- k8s.io/utils: d5654de → 67b214c
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.9 → v0.0.14
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1 → v4.0.2
+- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
+- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
+- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
+- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
+- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
+- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
+- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
+- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
+- github.com/creack/pty: [v1.1.7 → v1.1.11](https://github.com/creack/pty/compare/v1.1.7...v1.1.11)
+- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
+- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
+- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
+- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
+- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
+- github.com/google/cadvisor: [v0.38.5 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.5...v0.39.0)
+- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
+- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
+- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
+- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
+- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
+- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
+- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
+- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
+- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
+- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
+- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
+- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
+- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
+- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
+- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
+- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
+- golang.org/x/crypto: 7f63de1 → 5ea612d
+- golang.org/x/exp: 6cc2880 → 85be41e
+- golang.org/x/mobile: d2bd2a2 → e6ae53a
+- golang.org/x/mod: v0.3.0 → ce943fd
+- golang.org/x/net: 69a7880 → 3d97a24
+- golang.org/x/sync: cd5d95a → 67f06af
+- golang.org/x/sys: 5cba982 → a50acf3
+- golang.org/x/time: 3af7569 → f8bda1e
+- golang.org/x/tools: c1934b7 → v0.1.0
+- gopkg.in/check.v1: 41f04d3 → 8fa4692
+- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
+- gotest.tools/v3: v3.0.2 → v3.0.3
+- k8s.io/gengo: 83324d8 → b6c5ce2
+- k8s.io/klog/v2: v2.4.0 → v2.8.0
+- k8s.io/kube-openapi: d219536 → 591a79e
+- k8s.io/system-validators: v1.2.0 → v1.4.0
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.1.0
 
 ### 제거
-- github.com/armon/consul-api: [eb2c6b5](https://github.com/armon/consul-api/tree/eb2c6b5)
-- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
-- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
-- github.com/xlab/handysort: [fb3537e](https://github.com/xlab/handysort/tree/fb3537e)
-- github.com/xordataexchange/crypt: [b2862e3](https://github.com/xordataexchange/crypt/tree/b2862e3)
-- vbom.ml/util: db5cfe1
+- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
+- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
+- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
+- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
+- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
+- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
+- rsc.io/quote/v3: v3.1.0
+- rsc.io/sampler: v1.3.0
+- sigs.k8s.io/kustomize: v2.0.3+incompatible
 
 
 ## 의존성
 
 ### 추가
-- cloud.google.com/go/firestore: v1.1.0
-- github.com/Azure/go-autorest: [v14.2.0+incompatible](https://github.com/Azure/go-autorest/tree/v14.2.0)
-- github.com/armon/go-metrics: [f0300d1](https://github.com/armon/go-metrics/tree/f0300d1)
-- github.com/armon/go-radix: [7fddfc3](https://github.com/armon/go-radix/tree/7fddfc3)
-- github.com/bketelsen/crypt: [5cbc8cc](https://github.com/bketelsen/crypt/tree/5cbc8cc)
-- github.com/form3tech-oss/jwt-go: [v3.2.2+incompatible](https://github.com/form3tech-oss/jwt-go/tree/v3.2.2)
-- github.com/fvbommel/sortorder: [v1.0.1](https://github.com/fvbommel/sortorder/tree/v1.0.1)
-- github.com/hashicorp/consul/api: [v1.1.0](https://github.com/hashicorp/consul/api/tree/v1.1.0)
-- github.com/hashicorp/consul/sdk: [v0.1.1](https://github.com/hashicorp/consul/sdk/tree/v0.1.1)
-- github.com/hashicorp/errwrap: [v1.0.0](https://github.com/hashicorp/errwrap/tree/v1.0.0)
-- github.com/hashicorp/go-cleanhttp: [v0.5.1](https://github.com/hashicorp/go-cleanhttp/tree/v0.5.1)
-- github.com/hashicorp/go-immutable-radix: [v1.0.0](https://github.com/hashicorp/go-immutable-radix/tree/v1.0.0)
-- github.com/hashicorp/go-msgpack: [v0.5.3](https://github.com/hashicorp/go-msgpack/tree/v0.5.3)
-- github.com/hashicorp/go-multierror: [v1.0.0](https://github.com/hashicorp/go-multierror/tree/v1.0.0)
-- github.com/hashicorp/go-rootcerts: [v1.0.0](https://github.com/hashicorp/go-rootcerts/tree/v1.0.0)
-- github.com/hashicorp/go-sockaddr: [v1.0.0](https://github.com/hashicorp/go-sockaddr/tree/v1.0.0)
-- github.com/hashicorp/go-uuid: [v1.0.1](https://github.com/hashicorp/go-uuid/tree/v1.0.1)
-- github.com/hashicorp/go.net: [v0.0.1](https://github.com/hashicorp/go.net/tree/v0.0.1)
-- github.com/hashicorp/logutils: [v1.0.0](https://github.com/hashicorp/logutils/tree/v1.0.0)
-- github.com/hashicorp/mdns: [v1.0.0](https://github.com/hashicorp/mdns/tree/v1.0.0)
-- github.com/hashicorp/memberlist: [v0.1.3](https://github.com/hashicorp/memberlist/tree/v0.1.3)
-- github.com/hashicorp/serf: [v0.8.2](https://github.com/hashicorp/serf/tree/v0.8.2)
-- github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/internal/testify/tree/v1.5.1)
-- github.com/mitchellh/cli: [v1.0.0](https://github.com/mitchellh/cli/tree/v1.0.0)
-- github.com/mitchellh/go-testing-interface: [v1.0.0](https://github.com/mitchellh/go-testing-interface/tree/v1.0.0)
-- github.com/mitchellh/gox: [v0.4.0](https://github.com/mitchellh/gox/tree/v0.4.0)
-- github.com/mitchellh/iochan: [v1.0.0](https://github.com/mitchellh/iochan/tree/v1.0.0)
-- github.com/pascaldekloe/goe: [57f6aae](https://github.com/pascaldekloe/goe/tree/57f6aae)
-- github.com/posener/complete: [v1.1.1](https://github.com/posener/complete/tree/v1.1.1)
-- github.com/ryanuber/columnize: [9b3edd6](https://github.com/ryanuber/columnize/tree/9b3edd6)
-- github.com/sean-/seed: [e2103e2](https://github.com/sean-/seed/tree/e2103e2)
-- github.com/subosito/gotenv: [v1.2.0](https://github.com/subosito/gotenv/tree/v1.2.0)
-- github.com/willf/bitset: [d5bec33](https://github.com/willf/bitset/tree/d5bec33)
-- gopkg.in/ini.v1: v1.51.0
-- gopkg.in/yaml.v3: 9f266ea
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
+- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
+- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
+- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
+- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
+- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
+- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
+- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
+- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
+- go.starlark.net: 8dd3e2e
+- golang.org/x/term: 6a3ed07
+- sigs.k8s.io/kustomize/api: v0.8.5
+- sigs.k8s.io/kustomize/cmd/config: v0.9.7
+- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
+- sigs.k8s.io/kustomize/kyaml: v0.10.15
 
 ### 변경
-- cloud.google.com/go/bigquery: v1.0.1 → v1.4.0
-- cloud.google.com/go/datastore: v1.0.0 → v1.1.0
-- cloud.google.com/go/pubsub: v1.0.1 → v1.2.0
-- cloud.google.com/go/storage: v1.0.0 → v1.6.0
-- cloud.google.com/go: v0.51.0 → v0.54.0
-- github.com/Azure/go-autorest/autorest/adal: [v0.8.2 → v0.9.5](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.8.2...v0.9.5)
-- github.com/Azure/go-autorest/autorest/date: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.2.0...v0.3.0)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.3.0 → v0.4.1](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.3.0...v0.4.1)
-- github.com/Azure/go-autorest/autorest: [v0.9.6 → v0.11.1](https://github.com/Azure/go-autorest/autorest/compare/v0.9.6...v0.11.1)
-- github.com/Azure/go-autorest/logger: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/logger/compare/v0.1.0...v0.2.0)
-- github.com/Azure/go-autorest/tracing: [v0.5.0 → v0.6.0](https://github.com/Azure/go-autorest/tracing/compare/v0.5.0...v0.6.0)
-- github.com/Microsoft/go-winio: [fc70bd9 → v0.4.15](https://github.com/Microsoft/go-winio/compare/fc70bd9...v0.4.15)
-- github.com/aws/aws-sdk-go: [v1.28.2 → v1.35.24](https://github.com/aws/aws-sdk-go/compare/v1.28.2...v1.35.24)
-- github.com/blang/semver: [v3.5.0+incompatible → v3.5.1+incompatible](https://github.com/blang/semver/compare/v3.5.0...v3.5.1)
-- github.com/checkpoint-restore/go-criu/v4: [v4.0.2 → v4.1.0](https://github.com/checkpoint-restore/go-criu/v4/compare/v4.0.2...v4.1.0)
-- github.com/containerd/containerd: [v1.3.3 → v1.4.1](https://github.com/containerd/containerd/compare/v1.3.3...v1.4.1)
-- github.com/containerd/ttrpc: [v1.0.0 → v1.0.2](https://github.com/containerd/ttrpc/compare/v1.0.0...v1.0.2)
-- github.com/containerd/typeurl: [v1.0.0 → v1.0.1](https://github.com/containerd/typeurl/compare/v1.0.0...v1.0.1)
-- github.com/coreos/etcd: [v3.3.10+incompatible → v3.3.13+incompatible](https://github.com/coreos/etcd/compare/v3.3.10...v3.3.13)
-- github.com/docker/docker: [aa6a989 → bd33bbf](https://github.com/docker/docker/compare/aa6a989...bd33bbf)
-- github.com/go-gl/glfw/v3.3/glfw: [12ad95a → 6f7a984](https://github.com/go-gl/glfw/v3.3/glfw/compare/12ad95a...6f7a984)
-- github.com/golang/groupcache: [215e871 → 8c9f03a](https://github.com/golang/groupcache/compare/215e871...8c9f03a)
-- github.com/golang/mock: [v1.3.1 → v1.4.1](https://github.com/golang/mock/compare/v1.3.1...v1.4.1)
-- github.com/golang/protobuf: [v1.4.2 → v1.4.3](https://github.com/golang/protobuf/compare/v1.4.2...v1.4.3)
-- github.com/google/cadvisor: [v0.37.0 → v0.38.5](https://github.com/google/cadvisor/compare/v0.37.0...v0.38.5)
-- github.com/google/go-cmp: [v0.4.0 → v0.5.2](https://github.com/google/go-cmp/compare/v0.4.0...v0.5.2)
-- github.com/google/pprof: [d4f498a → 1ebb73c](https://github.com/google/pprof/compare/d4f498a...1ebb73c)
-- github.com/google/uuid: [v1.1.1 → v1.1.2](https://github.com/google/uuid/compare/v1.1.1...v1.1.2)
-- github.com/gorilla/mux: [v1.7.3 → v1.8.0](https://github.com/gorilla/mux/compare/v1.7.3...v1.8.0)
-- github.com/gorilla/websocket: [v1.4.0 → v1.4.2](https://github.com/gorilla/websocket/compare/v1.4.0...v1.4.2)
-- github.com/jmespath/go-jmespath: [c2b33e8 → v0.4.0](https://github.com/jmespath/go-jmespath/compare/c2b33e8...v0.4.0)
-- github.com/karrick/godirwalk: [v1.7.5 → v1.16.1](https://github.com/karrick/godirwalk/compare/v1.7.5...v1.16.1)
-- github.com/opencontainers/go-digest: [v1.0.0-rc1 → v1.0.0](https://github.com/opencontainers/go-digest/compare/v1.0.0-rc1...v1.0.0)
-- github.com/opencontainers/runc: [819fcc6 → v1.0.0-rc92](https://github.com/opencontainers/runc/compare/819fcc6...v1.0.0-rc92)
-- github.com/opencontainers/runtime-spec: [237cc4f → 4d89ac9](https://github.com/opencontainers/runtime-spec/compare/237cc4f...4d89ac9)
-- github.com/opencontainers/selinux: [v1.5.2 → v1.6.0](https://github.com/opencontainers/selinux/compare/v1.5.2...v1.6.0)
-- github.com/prometheus/procfs: [v0.1.3 → v0.2.0](https://github.com/prometheus/procfs/compare/v0.1.3...v0.2.0)
-- github.com/quobyte/api: [v0.1.2 → v0.1.8](https://github.com/quobyte/api/compare/v0.1.2...v0.1.8)
-- github.com/spf13/cobra: [v1.0.0 → v1.1.1](https://github.com/spf13/cobra/compare/v1.0.0...v1.1.1)
-- github.com/spf13/viper: [v1.4.0 → v1.7.0](https://github.com/spf13/viper/compare/v1.4.0...v1.7.0)
-- github.com/storageos/go-api: [343b3ef → v2.2.0+incompatible](https://github.com/storageos/go-api/compare/343b3ef...v2.2.0)
-- github.com/stretchr/testify: [v1.4.0 → v1.6.1](https://github.com/stretchr/testify/compare/v1.4.0...v1.6.1)
-- github.com/vishvananda/netns: [52d707b → db3c7e5](https://github.com/vishvananda/netns/compare/52d707b...db3c7e5)
-- go.etcd.io/etcd: 17cef6e → dd1b699
-- go.opencensus.io: v0.22.2 → v0.22.3
-- golang.org/x/crypto: 75b2880 → 7f63de1
-- golang.org/x/exp: da58074 → 6cc2880
-- golang.org/x/lint: fdd1cda → 738671d
-- golang.org/x/net: ab34263 → 69a7880
-- golang.org/x/oauth2: 858c2ad → bf48bf1
-- golang.org/x/sys: ed371f2 → 5cba982
-- golang.org/x/text: v0.3.3 → v0.3.4
-- golang.org/x/time: 555d28b → 3af7569
-- golang.org/x/xerrors: 9bdfabe → 5ec99f8
-- google.golang.org/api: v0.15.1 → v0.20.0
-- google.golang.org/genproto: cb27e3a → 8816d57
-- google.golang.org/grpc: v1.27.0 → v1.27.1
-- google.golang.org/protobuf: v1.24.0 → v1.25.0
-- honnef.co/go/tools: v0.0.1-2019.2.3 → v0.0.1-2020.1.3
-- k8s.io/gengo: 8167cfd → 83324d8
-- k8s.io/klog/v2: v2.2.0 → v2.4.0
-- k8s.io/kube-openapi: 6aeccd4 → d219536
-- k8s.io/system-validators: v1.1.2 → v1.2.0
-- k8s.io/utils: d5654de → 67b214c
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.9 → v0.0.14
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1 → v4.0.2
+- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
+- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
+- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
+- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
+- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
+- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
+- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
+- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
+- github.com/creack/pty: [v1.1.7 → v1.1.11](https://github.com/creack/pty/compare/v1.1.7...v1.1.11)
+- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
+- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
+- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
+- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
+- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
+- github.com/google/cadvisor: [v0.38.5 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.5...v0.39.0)
+- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
+- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
+- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
+- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
+- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
+- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
+- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
+- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
+- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
+- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
+- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
+- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
+- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
+- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
+- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
+- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
+- golang.org/x/crypto: 7f63de1 → 5ea612d
+- golang.org/x/exp: 6cc2880 → 85be41e
+- golang.org/x/mobile: d2bd2a2 → e6ae53a
+- golang.org/x/mod: v0.3.0 → ce943fd
+- golang.org/x/net: 69a7880 → 3d97a24
+- golang.org/x/sync: cd5d95a → 67f06af
+- golang.org/x/sys: 5cba982 → a50acf3
+- golang.org/x/time: 3af7569 → f8bda1e
+- golang.org/x/tools: c1934b7 → v0.1.0
+- gopkg.in/check.v1: 41f04d3 → 8fa4692
+- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
+- gotest.tools/v3: v3.0.2 → v3.0.3
+- k8s.io/gengo: 83324d8 → b6c5ce2
+- k8s.io/klog/v2: v2.4.0 → v2.8.0
+- k8s.io/kube-openapi: d219536 → 591a79e
+- k8s.io/system-validators: v1.2.0 → v1.4.0
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.1.0
 
 ### 제거
-- github.com/armon/consul-api: [eb2c6b5](https://github.com/armon/consul-api/tree/eb2c6b5)
-- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
-- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
-- github.com/xlab/handysort: [fb3537e](https://github.com/xlab/handysort/tree/fb3537e)
-- github.com/xordataexchange/crypt: [b2862e3](https://github.com/xordataexchange/crypt/tree/b2862e3)
-- vbom.ml/util: db5cfe1
+- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
+- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
+- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
+- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
+- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
+- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
+- rsc.io/quote/v3: v3.1.0
+- rsc.io/sampler: v1.3.0
+- sigs.k8s.io/kustomize: v2.0.3+incompatible
 
 
 
-# v1.20.0-rc.0
+# v1.21.0-rc.0
 
 
-## Downloads for v1.20.0-rc.0
+## Downloads for v1.21.0-rc.0
 
 ### Source Code
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes.tar.gz) | acfee8658831f9503fccda0904798405434f17be7064a361a9f34c6ed04f1c0f685e79ca40cef5fcf34e3193bacbf467665e8dc277e0562ebdc929170034b5ae
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-src.tar.gz) | 9d962f8845e1fa221649cf0c0e178f0f03808486c49ea15ab5ec67861ec5aa948cf18bc0ee9b2067643c8332227973dd592e6a4457456a9d9d80e8ef28d5f7c3
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes.tar.gz) | ef53a41955d6f8a8d2a94636af98b55d633fb8a5081517559039e019b3dd65c9d10d4e7fa297ab88a7865d772f3eecf72e7b0eeba5e87accb4000c91da33e148
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-src.tar.gz) | 9335a01b50d351776d3b8d00c07a5233844c51d307e361fa7e55a0620c1cb8b699e43eacf45ae9cafd8cbc44752e6987450c528a5bede8204706b7673000b5fc
 
 ### Client binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-darwin-amd64.tar.gz) | 062b57f1a450fe01d6184f104d81d376bdf5720010412821e315fd9b1b622a400ac91f996540daa66cee172006f3efade4eccc19265494f1a1d7cc9450f0b50a
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-386.tar.gz) | 86e96d2c2046c5e62e02bef30a6643f25e01f1b3eba256cab7dd61252908540c26cb058490e9cecc5a9bad97d2b577f5968884e9f1a90237e302419f39e068bc
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-amd64.tar.gz) | 619d3afb9ce902368390e71633396010e88e87c5fd848e3adc71571d1d4a25be002588415e5f83afee82460f8a7c9e0bd968335277cb8f8cb51e58d4bb43e64e
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-arm.tar.gz) | 60965150a60ab3d05a248339786e0c7da4b89a04539c3719737b13d71302bac1dd9bcaa427d8a1f84a7b42d0c67801dce2de0005e9e47d21122868b32ac3d40f
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-arm64.tar.gz) | 688e064f4ef6a17189dbb5af468c279b9de35e215c40500fb97b1d46692d222747023f9e07a7f7ba006400f9532a8912e69d7c5143f956b1dadca144c67ee711
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-ppc64le.tar.gz) | 47b8abc02b42b3b1de67da184921b5801d7e3cb09befac840c85913193fc5ac4e5e3ecfcb57da6b686ff21af9a3bd42ae6949d4744dbe6ad976794340e328b83
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-linux-s390x.tar.gz) | 971b41d3169f30e6c412e0254c180636abb7ccc8dcee6641b0e9877b69752fc61aa30b76c19c108969df654fe385da3cb3a44dd59d3c28dc45561392d7e08874
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-windows-386.tar.gz) | 2d34e8387e31531d9aca5655f2f0d18e75b01825dc1c39b7beb73a7b7b610e2ba429e5ca97d5c41a71b67e75e7096c86ab63fda9baab4c0878c1ccb3a1aefac8
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-client-windows-amd64.tar.gz) | f909640f4140693bb871936f10a40e79b43502105d0adb318b35bb7a64a770ad9d05a3a732368ccd3d15d496d75454789165bd1f5c2571da9a00569b3e6c007c
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-darwin-amd64.tar.gz) | 964135e43234cee275c452f5f06fb6d2bcd3cff3211a0d50fa35fff1cc4446bc5a0ac5125405dadcfb6596cb152afe29fabf7aad5b35b100e1288db890b70f8e
+[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-darwin-arm64.tar.gz) | 50d782abaa4ded5e706b3192d87effa953ceabbd7d91e3d48b0c1fa2206a1963a909c14b923560f5d09cac2c7392edc5f38a13fbf1e9a40bc94e3afe8de10622
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-386.tar.gz) | 72af5562f24184a2d7c27f95fa260470da979fbdcacce39a372f8f3add2991d7af8bc78f4e1dbe7a0f97e3f559b149b72a51491d3b13008da81872ee50f02f37
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-amd64.tar.gz) | 1eddb8f6b51e005bc6f7b519d036cbe3d2f6d97dbf7d212dd933fb56354c29f222d050519115a9bcf94555aef095db7cf763469e47bb4ae3c6c07f97edf437cb
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-arm.tar.gz) | 670f8ca60ea3cf0bb3262a772715e0ea735fccda6a92f3186299361dc455b304ae177d4017e0b67bbfa4a95e36f4cc3f7eb335e2a5130c93ac3fba2aff4519bf
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-arm64.tar.gz) | a69a47907cff138ba393d8c87044fd95d97f3ca8f35d301b50742e2801ad7c229d99d6667971091f65825eb51854d585be0dd7421670110b1aa567e67e7ab4b3
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-ppc64le.tar.gz) | b929feade94b71c81908abdcd4343b1e1e20098fd65e10d4d02585ad649d292d06f52c7ddc349efa188ce5b093e703c7aa9582c6ae5a69699adb87bbf5350243
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-s390x.tar.gz) | 899d1470e412282cf289d8e24806d1a08c62ec0151f345ae3c9e497cc7bc0feab76498de4dd897d6adcdfa0c422e6b1a37e25d928669030f53457fd69d6e7df7
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-windows-386.tar.gz) | 9f0bc90a269eabd06fe4f637b5172a3a6a7d3de26de0d66504c2e1f2093083c584ea39031db6075a7da7a86b98c48bed25aa88d4ac09060b38692c6a5b637078
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-windows-amd64.tar.gz) | 05c8cc10188a1294b0d51d052942742a9b26411a08ec73494bf0e728a8a167e0a7863bdfc8864e76a371b584380098381805341e18b4b283b5d0cf298d5f7c7c
 
 ### Server binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-amd64.tar.gz) | 0ea4458ae34108c633b4d48f1f128c6274dbc82b613492e78b3e0a2f656ac0df0bb9a75124e15d67c8e81850adcecf19f4ab0234c17247ee7ddf84f2df3e5eaa
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-arm.tar.gz) | aef6a4d457faa29936603370f29a8523bb274211c3cb5101bd31aaf469c91ba6bd149ea99a4ccdd83352cf37e4d6508c5ee475ec10292bccd2f77ceea31e1c28
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-arm64.tar.gz) | 4829f473e9d60f9929ad17c70fdc2b6b6509ed75418be0b23a75b28580949736cb5b0bd6382070f93aa0a2a8863f0b1596daf965186ca749996c29d03ef7d8b8
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-ppc64le.tar.gz) | 9ab0790d382a3e28df1c013762c09da0085449cfd09d176d80be932806c24a715ea829be0075c3e221a2ad9cf06e726b4c39ab41987c1fb0fee2563e48206763
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-server-linux-s390x.tar.gz) | 98670b587e299856dd9821b7517a35f9a65835b915b153de08b66c54d82160438b66f774bf5306c07bc956d70ff709860bc23162225da5e89f995d3fdc1f0122
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-amd64.tar.gz) | 355f278728ef7ac7eb2f5568c99c1429543c6302bbd0ed3bd0378c08116075e56ae850a49241313f078e2392702672ec6c9b70c8d97b4f2f5f4bee36828a63ba
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-arm.tar.gz) | 9ac02c2825e2fd4e92f0c0f67180c67c24e32841ccbabc82284bf6293727ffecfae65e8a42b527c2a7ca482752384928eb65c2a1706144ae7819a6b3a1ab291c
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-arm64.tar.gz) | eb412453da03c82a9248412c8ccf4d4baa1fbfa81edd8d4f81d28969b40a3727e18934accc68f643d253446c58ffd2623292402495480b3d4b2a837b5318b957
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-ppc64le.tar.gz) | 07da2812c35bbc427ee5b4a0b601c3ae271e0d50ab0dd4c5c25399f43506fa2a187642eb9d4d2085df7b90264d48ea2f31088af87d9efa7eb2e87f91e1fdbde4
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-s390x.tar.gz) | 3b79442a3d6e389c4ff105922a8e49994c0b6c088d2c501bd8c78d9f9e814902f5bb72c8f9c89380b750fda9b3a336759b9b68f11d70bef4f0e984564a95c29e
 
 ### Node binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-amd64.tar.gz) | 699e9c8d1837198312eade8eb6fec390f6a2fea9e08207d2f58e8bb6e3e799028aca69e4670aac0a4ba7cf0af683aee2c158bf78cc520c80edc876c8d94d521a
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-arm.tar.gz) | f3b5eab0669490e3cd7e802693daf3555d08323dfff6e73a881fce00fed4690e8bdaf1610278d9de74036ca37631016075e5695a02158b7d3e7582b20ef7fa35
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-arm64.tar.gz) | e5012f77363561a609aaf791baaa17d09009819c4085a57132e5feb5366275a54640094e6ed1cba527f42b586c6d62999c2a5435edf5665ff0e114db4423c2ae
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-ppc64le.tar.gz) | 2a6d6501620b1a9838dff05c66a40260cc22154a28027813346eb16e18c386bc3865298a46a0f08da71cd55149c5e7d07c4c4c431b4fd231486dd9d716548adb
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-linux-s390x.tar.gz) | 5eca02777519e31428a1e5842fe540b813fb8c929c341bbc71dcfd60d98deb89060f8f37352e8977020e21e053379eead6478eb2d54ced66fb9d38d5f3142bf0
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-rc.0/kubernetes-node-windows-amd64.tar.gz) | 8ace02e7623dff894e863a2e0fa7dfb916368431d1723170713fe82e334c0ae0481b370855b71e2561de0fb64fed124281be604761ec08607230b66fb9ed1c03
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-amd64.tar.gz) | f12edf1faf5f07de1ebc5a8626601c12927902e10aca3f11e398637382fdf55365dbd9a0ef38858553fb7569495ae2cf68f155dd2e49b85b27d76fb599bb92e4
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-arm.tar.gz) | 4fba8fc4e2102f07fb778aab597ec7231ea65c35e1aa618fe98b707b64a931237bd842c173e9120326e4d9deb983bb3917176762bba2212612bbc09d6e2105c4
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-arm64.tar.gz) | a2e1be5459a8346839970faf4e7ebdb8ab9f3273e02babf1f3199b06bdb67434a2d18fcd1628cf1b989756e99d8dad6624a455b9db11d50f51f509f4df5c27da
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-ppc64le.tar.gz) | 16d2c1cc295474fc49fe9a827ddd73e81bdd6b76af7074987b90250023f99b6d70bf474e204c7d556802111984fcb3a330740b150bdc7970d0e3634eb94a1665
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-s390x.tar.gz) | 9dc6faa6cd007b13dfce703f3e271f80adcc4e029c90a4a9b4f2f143b9756f2893f8af3d7c2cf813f2bd6731cffd87d15d4229456c1685939f65bf467820ec6e
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-windows-amd64.tar.gz) | f8bac2974c9142bfb80cd5eadeda79f79f27b78899a4e6e71809b795c708824ba442be83fdbadb98e01c3823dd8350776358258a205e851ed045572923cacba7
 
-## Changelog since v1.20.0-beta.2
+## Changelog since v1.21.0-beta.1
 
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Migrated pkg/kubelet/cm/cpuset/cpuset.go to structured logging. Exit code changed from 255 to 1. ([#100007](https://github.com/kubernetes/kubernetes/pull/100007), [@utsavoza](https://github.com/utsavoza)) [SIG Instrumentation and Node]
+ 
 ## Changes by Kind
 
+### API Change
+
+- Add Probe-level terminationGracePeriodSeconds field ([#99375](https://github.com/kubernetes/kubernetes/pull/99375), [@ehashman](https://github.com/ehashman)) [SIG API Machinery, Apps, Node and Testing]
+- CSIServiceAccountToken is Beta now ([#99298](https://github.com/kubernetes/kubernetes/pull/99298), [@zshihang](https://github.com/zshihang)) [SIG Auth, Storage and Testing]
+- Discovery.k8s.io/v1beta1 EndpointSlices are deprecated in favor of discovery.k8s.io/v1, and will no longer be served in Kubernetes v1.25. ([#100472](https://github.com/kubernetes/kubernetes/pull/100472), [@liggitt](https://github.com/liggitt)) [SIG Network]
+- FieldManager no longer owns fields that get reset before the object is persisted (e.g. "status wiping"). ([#99661](https://github.com/kubernetes/kubernetes/pull/99661), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Auth and Testing]
+- Generic ephemeral volumes are beta. ([#99643](https://github.com/kubernetes/kubernetes/pull/99643), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Node, Storage and Testing]
+- Implement the GetAvailableResources in the podresources API. ([#95734](https://github.com/kubernetes/kubernetes/pull/95734), [@fromanirh](https://github.com/fromanirh)) [SIG Instrumentation, Node and Testing]
+- The Endpoints controller will now set the `endpoints.kubernetes.io/over-capacity` annotation to "warning" when an Endpoints resource contains more than 1000 addresses. In a future release, the controller will truncate Endpoints that exceed this limit. The EndpointSlice API can be used to support significantly larger number of addresses. ([#99975](https://github.com/kubernetes/kubernetes/pull/99975), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- The PodDisruptionBudget API has been promoted to policy/v1 with no schema changes. The only functional change is that an empty selector (`{}`) written to a policy/v1 PodDisruptionBudget now selects all pods in the namespace. The behavior of the policy/v1beta1 API remains unchanged. The policy/v1beta1 PodDisruptionBudget API is deprecated and will no longer be served in 1.25+. ([#99290](https://github.com/kubernetes/kubernetes/pull/99290), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- Topology Aware Hints are now available in alpha and can be enabled with the `TopologyAwareHints` feature gate. ([#99522](https://github.com/kubernetes/kubernetes/pull/99522), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Instrumentation, Network and Testing]
+
 ### Feature
 
-- Kubernetes is now built using go1.15.5
-  - build: Update to k/repo-infra@v0.1.2 (supports go1.15.5) ([#95776](https://github.com/kubernetes/kubernetes/pull/95776), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
-
-### Failing Test
-
-- Resolves an issue running Ingress conformance tests on clusters which use finalizers on Ingress objects to manage releasing load balancer resources ([#96742](https://github.com/kubernetes/kubernetes/pull/96742), [@spencerhance](https://github.com/spencerhance)) [SIG Network and Testing]
-- The Conformance test "validates that there is no conflict between pods with same hostPort but different hostIP and protocol" now validates the connectivity to each hostPort, in addition to the functionality. ([#96627](https://github.com/kubernetes/kubernetes/pull/96627), [@aojea](https://github.com/aojea)) [SIG Scheduling and Testing]
+- Add e2e test to validate performance metrics of volume lifecycle operations ([#94334](https://github.com/kubernetes/kubernetes/pull/94334), [@RaunakShah](https://github.com/RaunakShah)) [SIG Storage and Testing]
+- EmptyDir memory backed volumes are sized as the the minimum of pod allocatable memory on a host and an optional explicit user provided value. ([#100319](https://github.com/kubernetes/kubernetes/pull/100319), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
+- Enables Kubelet to check volume condition and log events to corresponding pods. ([#99284](https://github.com/kubernetes/kubernetes/pull/99284), [@fengzixu](https://github.com/fengzixu)) [SIG Apps, Instrumentation, Node and Storage]
+- Introduce a churn operator to scheduler perf testing framework. ([#98900](https://github.com/kubernetes/kubernetes/pull/98900), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- Kubernetes is now built with Golang 1.16.1 ([#100106](https://github.com/kubernetes/kubernetes/pull/100106), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- Migrated pkg/kubelet/cm/devicemanager to structured logging ([#99976](https://github.com/kubernetes/kubernetes/pull/99976), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
+- Migrated pkg/kubelet/cm/memorymanager to structured logging ([#99974](https://github.com/kubernetes/kubernetes/pull/99974), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
+- Migrated pkg/kubelet/cm/topologymanager to structure logging ([#99969](https://github.com/kubernetes/kubernetes/pull/99969), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
+- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
+- Update pause container to run as pseudo user and group `65535:65535`. This implies the release of version 3.5 of the container images. ([#97963](https://github.com/kubernetes/kubernetes/pull/97963), [@saschagrunert](https://github.com/saschagrunert)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Release, Security and Testing]
+- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#99833](https://github.com/kubernetes/kubernetes/pull/99833), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
 
 ### Bug or Regression
 
-- Bump node-problem-detector version to v0.8.5 to fix OOM detection in with Linux kernels 5.1+ ([#96716](https://github.com/kubernetes/kubernetes/pull/96716), [@tosi3k](https://github.com/tosi3k)) [SIG Cloud Provider, Scalability and Testing]
-- Changes to timeout parameter handling in 1.20.0-beta.2 have been reverted to avoid breaking backwards compatibility with existing clients. ([#96727](https://github.com/kubernetes/kubernetes/pull/96727), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
-- Duplicate owner reference entries in create/update/patch requests now get deduplicated by the API server. The client sending the request now receives a warning header in the API response. Clients should stop sending requests with duplicate owner references. The API server may reject such requests as early as 1.24. ([#96185](https://github.com/kubernetes/kubernetes/pull/96185), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery and Testing]
-- Fix: resize Azure disk issue when it's in attached state ([#96705](https://github.com/kubernetes/kubernetes/pull/96705), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fixed a bug where aggregator_unavailable_apiservice metrics were reported for deleted apiservices. ([#96421](https://github.com/kubernetes/kubernetes/pull/96421), [@dgrisonnet](https://github.com/dgrisonnet)) [SIG API Machinery and Instrumentation]
-- Fixes code generation for non-namespaced create subresources fake client test. ([#96586](https://github.com/kubernetes/kubernetes/pull/96586), [@Doude](https://github.com/Doude)) [SIG API Machinery]
-- HTTP/2 connection health check is enabled by default in all Kubernetes clients. The feature should work out-of-the-box. If needed, users can tune the feature via the HTTP2_READ_IDLE_TIMEOUT_SECONDS and HTTP2_PING_TIMEOUT_SECONDS environment variables. The feature is disabled if HTTP2_READ_IDLE_TIMEOUT_SECONDS is set to 0. ([#95981](https://github.com/kubernetes/kubernetes/pull/95981), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- Kubeadm: fix coredns migration should be triggered when there are newdefault configs during kubeadm upgrade ([#96907](https://github.com/kubernetes/kubernetes/pull/96907), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Reduce volume name length for vsphere volumes ([#96533](https://github.com/kubernetes/kubernetes/pull/96533), [@gnufied](https://github.com/gnufied)) [SIG Storage]
-- Resolves a regression in 1.19+ with workloads targeting deprecated beta os/arch labels getting stuck in NodeAffinity status on node startup. ([#96810](https://github.com/kubernetes/kubernetes/pull/96810), [@liggitt](https://github.com/liggitt)) [SIG Node]
+- Add ability to skip OpenAPI handler installation to the GenericAPIServer ([#100341](https://github.com/kubernetes/kubernetes/pull/100341), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery]
+- Count pod overhead against an entity's ResourceQuota ([#99600](https://github.com/kubernetes/kubernetes/pull/99600), [@gjkim42](https://github.com/gjkim42)) [SIG API Machinery and Node]
+- EndpointSlice controllers are less likely to create duplicate EndpointSlices. ([#100103](https://github.com/kubernetes/kubernetes/pull/100103), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Ensure only one LoadBalancer rule is created when HA mode is enabled ([#99825](https://github.com/kubernetes/kubernetes/pull/99825), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fixed a race condition on API server startup ensuring previously created webhook configurations are effective before the first write request is admitted. ([#95783](https://github.com/kubernetes/kubernetes/pull/95783), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
+- Fixed authentication_duration_seconds metric. Previously it included whole apiserver request duration. ([#99944](https://github.com/kubernetes/kubernetes/pull/99944), [@marseel](https://github.com/marseel)) [SIG API Machinery, Instrumentation and Scalability]
+- Fixes issue where inline AzueFile secrets could not be accessed from the pod's namespace. ([#100563](https://github.com/kubernetes/kubernetes/pull/100563), [@msau42](https://github.com/msau42)) [SIG Storage]
+- Improve speed of vSphere PV provisioning and reduce number of API calls ([#100054](https://github.com/kubernetes/kubernetes/pull/100054), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- Kubectl: Fixed panic when describing an ingress backend without an API Group ([#100505](https://github.com/kubernetes/kubernetes/pull/100505), [@lauchokyip](https://github.com/lauchokyip)) [SIG CLI]
+- Kubectl: fix case of age column in describe node (#96963, @bl-ue) ([#96963](https://github.com/kubernetes/kubernetes/pull/96963), [@bl-ue](https://github.com/bl-ue)) [SIG CLI]
+- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]
+- Kubelet: Fixed the bug of getting the number of cpu when the number of cpu logical processors is more than 64 in windows ([#97378](https://github.com/kubernetes/kubernetes/pull/97378), [@hwdef](https://github.com/hwdef)) [SIG Node and Windows]
+- Pass `KUBE_BUILD_CONFORMANCE=y` to the package-tarballs to reenable building the conformance tarballs. ([#100571](https://github.com/kubernetes/kubernetes/pull/100571), [@puerco](https://github.com/puerco)) [SIG Release]
+- Pod Log stats for windows now reports metrics ([#99221](https://github.com/kubernetes/kubernetes/pull/99221), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node, Storage, Testing and Windows]
+
+### Other (Cleanup or Flake)
+
+- A new storage E2E testsuite covers CSIStorageCapacity publishing if a driver opts into the test. ([#100537](https://github.com/kubernetes/kubernetes/pull/100537), [@pohly](https://github.com/pohly)) [SIG Storage and Testing]
+- Convert cmd/kubelet/app/server.go to structured logging ([#98334](https://github.com/kubernetes/kubernetes/pull/98334), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- If kube-apiserver enabled goaway feature, clients required golang 1.15.8 or 1.16+ version to avoid un-expected data race issue. ([#98809](https://github.com/kubernetes/kubernetes/pull/98809), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
+- Increased CSINodeIDMaxLength from 128  bytes to 192 bytes. ([#98753](https://github.com/kubernetes/kubernetes/pull/98753), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps and Storage]
+- Migrate  `pkg/kubelet/pluginmanager`  to structured logging ([#99885](https://github.com/kubernetes/kubernetes/pull/99885), [@qingwave](https://github.com/qingwave)) [SIG Node]
+- Migrate  `pkg/kubelet/preemption/preemption.go` and `pkg/kubelet/logs/container_log_manager.go` to structured logging ([#99848](https://github.com/kubernetes/kubernetes/pull/99848), [@qingwave](https://github.com/qingwave)) [SIG Node]
+- Migrate `pkg/kubelet/(cri)` to structured logging ([#99006](https://github.com/kubernetes/kubernetes/pull/99006), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate `pkg/kubelet/(node, pod)` to structured logging ([#98847](https://github.com/kubernetes/kubernetes/pull/98847), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate `pkg/kubelet/(volume,container)` to structured logging ([#98850](https://github.com/kubernetes/kubernetes/pull/98850), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate `pkg/kubelet/kubelet_node_status.go` to structured logging ([#98154](https://github.com/kubernetes/kubernetes/pull/98154), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node and Release]
+- Migrate `pkg/kubelet/lifecycle,oom` to structured logging ([#99479](https://github.com/kubernetes/kubernetes/pull/99479), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG Instrumentation and Node]
+- Migrate cmd/kubelet/+ pkg/kubelet/cadvisor/cadvisor_linux.go + pkg/kubelet/cri/remote/util/util_unix.go + pkg/kubelet/images/image_manager.go to structured logging ([#99994](https://github.com/kubernetes/kubernetes/pull/99994), [@AfrouzMashayekhi](https://github.com/AfrouzMashayekhi)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/cm/container_manager_linux.go and pkg/kubelet/cm/container_manager_stub.go to structured logging ([#100001](https://github.com/kubernetes/kubernetes/pull/100001), [@shiyajuan123](https://github.com/shiyajuan123)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/cm/cpumanage/{topology/togit pology.go, policy_none.go, cpu_assignment.go} to structured logging ([#100163](https://github.com/kubernetes/kubernetes/pull/100163), [@lala123912](https://github.com/lala123912)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/cm/cpumanager/state to structured logging ([#99563](https://github.com/kubernetes/kubernetes/pull/99563), [@jmguzik](https://github.com/jmguzik)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/config to structured logging ([#100002](https://github.com/kubernetes/kubernetes/pull/100002), [@AfrouzMashayekhi](https://github.com/AfrouzMashayekhi)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/kubelet.go to structured logging ([#99861](https://github.com/kubernetes/kubernetes/pull/99861), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/kubeletconfig to structured logging ([#100265](https://github.com/kubernetes/kubernetes/pull/100265), [@ehashman](https://github.com/ehashman)) [SIG Node]
+- Migrate pkg/kubelet/kuberuntime to structured logging ([#99970](https://github.com/kubernetes/kubernetes/pull/99970), [@krzysiekg](https://github.com/krzysiekg)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/prober to structured logging ([#99830](https://github.com/kubernetes/kubernetes/pull/99830), [@krzysiekg](https://github.com/krzysiekg)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/winstats to structured logging ([#99855](https://github.com/kubernetes/kubernetes/pull/99855), [@hexxdump](https://github.com/hexxdump)) [SIG Instrumentation and Node]
+- Migrate probe log messages to structured logging ([#97093](https://github.com/kubernetes/kubernetes/pull/97093), [@aldudko](https://github.com/aldudko)) [SIG Instrumentation and Node]
+- Migrate remaining kubelet files to structured logging ([#100196](https://github.com/kubernetes/kubernetes/pull/100196), [@ehashman](https://github.com/ehashman)) [SIG Instrumentation and Node]
+- `apiserver_storage_objects` (a newer version of `etcd_object_counts) is promoted and marked as stable. ([#100082](https://github.com/kubernetes/kubernetes/pull/100082), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
 
 ## Dependencies
 
@@ -967,1175 +774,942 @@ filename | sha512 hash
 _Nothing has changed._
 
 ### Changed
-- github.com/google/cadvisor: [v0.38.4 → v0.38.5](https://github.com/google/cadvisor/compare/v0.38.4...v0.38.5)
+- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
+- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
+- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
+- github.com/creack/pty: [v1.1.9 → v1.1.11](https://github.com/creack/pty/compare/v1.1.9...v1.1.11)
+- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
+- github.com/google/cadvisor: [v0.38.8 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.8...v0.39.0)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
+- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
+- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
+- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
+- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
+- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
+- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
+- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
+- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
+- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
+- gotest.tools/v3: v3.0.2 → v3.0.3
+- k8s.io/klog/v2: v2.5.0 → v2.8.0
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.3 → v4.1.0
 
 ### Removed
 _Nothing has changed._
 
 
 
-# v1.20.0-beta.2
+# v1.21.0-beta.1
 
 
-## Downloads for v1.20.0-beta.2
+## Downloads for v1.21.0-beta.1
 
 ### Source Code
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes.tar.gz) | fe769280aa623802a949b6a35fbddadbba1d6f9933a54132a35625683719595ecf58096a9aa0f7456f8d4931774df21bfa98e148bc3d85913f1da915134f77bd
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-src.tar.gz) | ce1c8d97c52e5189af335d673bd7e99c564816f6adebf249838f7e3f0e920f323b4e398a5d163ea767091497012ec38843c59ff14e6fdd07683b682135eed645
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes.tar.gz) | c9f4f25242e319e5d90f49d26f239a930aad69677c0f3c2387c56bb13482648a26ed234be2bfe2352508f35010e3eb6d3b127c31a9f24fa1e53ac99c38520fe4
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-src.tar.gz) | 255357db8fa160cab2187658906b674a8b0d9b9a5b5f688cc7b69dc124f5da00362c6cc18ae9b80f7ddb3da6f64c2ab2f12fb9b63a4e063c7366a5375b175cda
 
 ### Client binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | d6c14bd0f6702f4bbdf14a6abdfa4e5936de5b4efee38aa86c2bd7272967ec6d7868b88fc00ad4a7c3a20717a35e6be2b84e56dec04154fd702315f641409f7c
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-386.tar.gz) | b923c44cb0acb91a8f6fd442c2168aa6166c848f5d037ce50a7cb11502be3698db65836b373c916f75b648d6ac8d9158807a050eecc4e1c77cffa25b386c8cdb
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | 8cae14146a9034dcd4e9d69d5d700f195a77aac35f629a148960ae028ed8b4fe12213993fe3e6e464b4b3e111adebe6f3dd7ca0accc70c738ed5cfd8993edd7c
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-arm.tar.gz) | 1f54e5262a0432945ead57fcb924e6bfedd9ea76db1dd9ebd946787a2923c247cf16e10505307b47e365905a1b398678dac5af0f433c439c158a33e08362d97b
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | 31cf79c01e4878a231b4881fe3ed5ef790bd5fb5419388438d3f8c6a2129e655aba9e00b8e1d77e0bc5d05ecc75cf4ae02cf8266788822d0306c49c85ee584ed
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | 2527948c40be2e16724d939316ad5363f15aa22ebf42d59359d8b6f757d30cfef6447434cc93bc5caa5a23a6a00a2da8d8191b6441e06bba469d9d4375989a97
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | b777ad764b3a46651ecb0846e5b7f860bb2c1c4bd4d0fcc468c6ccffb7d3b8dcb6dcdd73b13c16ded7219f91bba9f1e92f9258527fd3bb162b54d7901ac303ff
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-windows-386.tar.gz) | 8a2f58aaab01be9fe298e4d01456536047cbdd39a37d3e325c1f69ceab3a0504998be41a9f41a894735dfc4ed22bed02591eea5f3c75ce12d9e95ba134e72ec5
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | 2f69cda177a178df149f5de66b7dba7f5ce14c1ffeb7c8d7dc4130c701b47d89bb2fbe74e7a262f573e4d21dee2c92414d050d7829e7c6fc3637a9d6b0b9c5c1
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | 02efd389c8126456416fd2c7ea25c3cc30f612649ad91f631f068d6c0e5e539484d3763cb9a8645ad6b8077e4fcd1552a659d7516ebc4ce6828cf823b65c3016
+[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-darwin-arm64.tar.gz) | ac90dcd1699d1d7ff9c8342d481f6d0d97ccdc3ec501a56dc7c9e1898a8f77f712bf66942d304bfe581b5494f13e3efa211865de88f89749780e9e26e673dbdb
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-386.tar.gz) | cce5fb84cc7a1ee664f89d8ad3064307c51c044e9ddd2ae5a004939b69d3b3ef6f29acc5782e27d0c8f0d6d3d9c96e922f5d1b99d210ca3e754666d775df9f0c
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | 2e93bbd2e60ad7cd8fe495115e96c55b1dc8facd100a827ef9c197a732679b60cceb9ea7bf92a1f5e328c3b8adfa8d3922cbc5d8370e374f3381b83f5b877b4f
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-arm.tar.gz) | 23f03b6a8fa9decce9b89a2c1bd3dae6d0b2f9e533e35a79e2c5a29326a165259677594ae83c877219a21bdb95557a284e55f4eec12954742794579c89a7d7e5
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | 3acf3101b46568b0ded6b90f13df0e918870d6812dc1a584903ddb8ba146484a204b9e442f863df47c7d4dab043fd9f7294c5510d3eb09004993d6d3b1e9e13c
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | f749198df69577f62872d3096138a1b8969ec6b1636eb68eb56640bf33cf5f97a11df4363462749a1c0dc3ccbb8ae76c5d66864bf1c5cf7e52599caaf498e504
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | 3f6c0189d59fca22cdded3a02c672ef703d17e6ab0831e173a870e14ccec436c142600e9fc35b403571b6906f2be8d18d38d33330f7caada971bbe1187b388f6
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-windows-386.tar.gz) | 03d92371c425cf331c80807c0ac56f953be304fc6719057258a363d527d186d610e1d4b4d401b34128062983265c2e21f2d2389231aa66a6f5787eee78142cf6
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | 489ece0c886a025ca3a25d28518637a5a824ea6544e7ef8778321036f13c8909a978ad4ceca966cec1e1cda99f25ca78bfd37460d1231c77436d216d43c872ad
 
 ### Server binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | 3ecaac0213d369eab691ac55376821a80df5013cb12e1263f18d1c236a9e49d42b3cea422175556d8f929cdf3109b22c0b6212ac0f2e80cc7a5f4afa3aba5f24
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-arm.tar.gz) | 580030b57ff207e177208fec0801a43389cae10cc2c9306327d354e7be6a055390184531d54b6742e0983550b7a76693cc4a705c2d2f4ac30495cf63cef26b9b
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | 3e3286bd54671549fbef0dfdaaf1da99bc5c3efb32cc8d1e1985d9926520cea0c43bcf7cbcbbc8b1c1a95eab961255693008af3bb1ba743362998b5f0017d6d7
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | 9fa051e7e97648e97e26b09ab6d26be247b41b1a5938d2189204c9e6688e455afe76612bbcdd994ed5692935d0d960bd96dc222bce4b83f61d62557752b9d75b
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | fa85d432eff586f30975c95664ac130b9f5ae02dc52b97613ed7a41324496631ea11d1a267daba564cf2485a9e49707814d86bbd3175486c7efc8b58a9314af5
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | 2e95cb31d5afcb6842c41d25b7d0c18dd7e65693b2d93c8aa44e5275f9c6201e1a67685c7a8ddefa334babb04cb559d26e39b6a18497695a07dc270568cae108
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-arm.tar.gz) | 2927e82b98404c077196ce3968f3afd51a7576aa56d516019bd3976771c0213ba01e78da5b77478528e770da0d334e9457995fafb98820ed68b2ee34beb68856
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | e0f7aea3ea598214a9817bc04949389cb7e4e7b9503141a590ef48c0b681fe44a4243ebc6280752fa41aa1093149b3ee1bcef7664edb746097a342281825430b
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | c011f7eb01294e9ba5d5ced719068466f88ed595dcb8d554a36a4dd5118fb6b3d6bafe8bf89aa2d42988e69793ed777ba77b8876c6ec74f898a43cfce1f61bf4
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | 15f6683e7f16caab7eebead2b7c15799460abbf035a43de0b75f96b0be19908f58add98a777a0cca916230d60cf6bfe3fee92b9dcff50274b1e37c243c157969
 
 ### Node binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-amd64.tar.gz) | 86e631f95fe670b467ead2b88d34e0364eaa275935af433d27cc378d82dcaa22041ccce40f5fa9561b9656dadaa578dc018ad458a59b1690d35f86dca4776b5c
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-arm.tar.gz) | a8754ff58a0e902397056b8615ab49af07aca347ba7cc4a812c238e3812234862270f25106b6a94753b157bb153b8eae8b39a01ed67384774d798598c243583b
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-arm64.tar.gz) | 28d727d7d08e2c856c9b4a574ef2dbf9e37236a0555f7ec5258b4284fa0582fb94b06783aaf50bf661f7503d101fbd70808aba6de02a2f0af94db7d065d25947
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-ppc64le.tar.gz) | a1283449f1a0b155c11449275e9371add544d0bdd4609d6dc737ed5f7dd228e84e24ff249613a2a153691627368dd894ad64f4e6c0010eecc6efd2c13d4fb133
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-linux-s390x.tar.gz) | 5806028ba15a6a9c54a34f90117bc3181428dbb0e7ced30874c9f4a953ea5a0e9b2c73e6b1e2545e1b4e5253e9c7691588538b44cdfa666ce6865964b92d2fa8
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.2/kubernetes-node-windows-amd64.tar.gz) | d5327e3b7916c78777b9b69ba0f3758c3a8645c67af80114a0ae52babd7af27bb504febbaf51b1bfe5bd2d74c8c5c573471e1cb449f2429453f4b1be9d5e682a
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | ed58679561197110f366b9109f7afd62c227bfc271918ccf3eea203bb2ab6428eb5db4dd6c965f202a8a636f66da199470269b863815809b99d53d2fa47af2ea
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-arm.tar.gz) | 7e6c7f1957fcdecec8fef689c5019edbc0d0c11d22dafbfef0a07121d10d8f6273644f73511bd06a9a88b04d81a940bd6645ffb5711422af64af547a45c76273
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | a3618f29967e7a1574917a67f0296e65780321eda484b99aa32bfd4dc9b35acdefce33da952ac52dfb509fbac5bf700cf177431fad2ab4adcab0544538939faa
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | 326d3eb521b41bdf489912177f70b8cdd7cd828bb9b3d847ed3694eb27e457f24e0a88b8e51b726eee39800a3c5a40c1b30e3a8ec4a34d8041b3d8ef05d1b749
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | 022d05ebaa66a0332c4fe18cdaf23d14c2c7e4d1f2af7f27baaf1eb042e6890dc3434b4ac8ba58c35d590717956f8c3458112685aff4938b94b18e263c3f4256
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | fa691ed93f07af6bc1cf57e20a30580d6c528f88e5fea3c14f39c1820969dc5a0eb476c5b87b288593d0c086c4dd93aff6165082393283c3f46c210f9bb66d61
 
-## Changelog since v1.20.0-beta.1
+## Changelog since v1.21.0-beta.0
 
 ## Urgent Upgrade Notes
 
 ### (No, really, you MUST read this before you upgrade)
 
- - A bug was fixed in kubelet where exec probe timeouts were not respected. Ensure that pods relying on this behavior are updated to correctly handle probe timeouts.
-
-  This change in behavior may be unexpected for some clusters and can be disabled by turning off the ExecProbeTimeout feature gate. This gate will be locked and removed in future releases so that exec probe timeouts are always respected. ([#94115](https://github.com/kubernetes/kubernetes/pull/94115), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Testing]
-  - For CSI drivers, kubelet no longer creates the target_path for NodePublishVolume in accordance with the CSI spec. Kubelet also no longer checks if staging and target paths are mounts or corrupted. CSI drivers need to be idempotent and do any necessary mount verification. ([#88759](https://github.com/kubernetes/kubernetes/pull/88759), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-  - Kubeadm:
-  - The label applied to control-plane nodes "node-role.kubernetes.io/master" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Introduce a new label "node-role.kubernetes.io/control-plane" that will be applied in parallel to "node-role.kubernetes.io/master" until the removal of the "node-role.kubernetes.io/master" label.
-  - Make "kubeadm upgrade apply" add the "node-role.kubernetes.io/control-plane" label on existing nodes that only have the "node-role.kubernetes.io/master" label during upgrade.
-  - Please adapt your tooling built on top of kubeadm to use the "node-role.kubernetes.io/control-plane" label.
-
-  - The taint applied to control-plane nodes "node-role.kubernetes.io/master:NoSchedule" is now deprecated and will be removed in a future release after a GA deprecation period.
-  - Apply toleration for a new, future taint "node-role.kubernetes.io/control-plane:NoSchedule" to the kubeadm CoreDNS / kube-dns managed manifests. Note that this taint is not yet applied to kubeadm control-plane nodes.
-  - Please adapt your workloads to tolerate the same future taint preemptively.
-
-  For more details see: http://git.k8s.io/enhancements/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md ([#95382](https://github.com/kubernetes/kubernetes/pull/95382), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-
+ - Kubeadm: during "init" an empty cgroupDriver value in the KubeletConfiguration is now always set to "systemd" unless the user is explicit about it. This requires existing machine setups to configure the container runtime to use the "systemd" driver. Documentation on this topic can be found here: https://kubernetes.io/docs/setup/production-environment/container-runtimes/. When upgrading existing clusters / nodes using "kubeadm upgrade" the old cgroupDriver value is preserved, but in 1.22 this change will also apply to "upgrade". For more information on migrating to the "systemd" driver or remaining on the "cgroupfs" driver see: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/. ([#99471](https://github.com/kubernetes/kubernetes/pull/99471), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+  - Migrate `pkg/kubelet/(dockershim, network)` to structured logging
+  Exit code changed from 255 to 1 ([#98939](https://github.com/kubernetes/kubernetes/pull/98939), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Network and Node]
+  - Migrate `pkg/kubelet/certificate` to structured logging
+  Exit code changed from 255 to 1 ([#98993](https://github.com/kubernetes/kubernetes/pull/98993), [@SataQiu](https://github.com/SataQiu)) [SIG Auth and Node]
+  - Newly provisioned PVs by EBS plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99130](https://github.com/kubernetes/kubernetes/pull/99130), [@ayberk](https://github.com/ayberk)) [SIG Cloud Provider, Storage and Testing]
+  - Newly provisioned PVs by OpenStack Cinder plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99719](https://github.com/kubernetes/kubernetes/pull/99719), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider and Storage]
+  - OpenStack Cinder CSI migration is on by default, Clinder CSI driver must be installed on clusters on OpenStack for Cinder volumes to work. ([#98538](https://github.com/kubernetes/kubernetes/pull/98538), [@dims](https://github.com/dims)) [SIG Storage]
+  - Package pkg/kubelet/server migrated to structured logging
+  Exit code changed from 255 to 1 ([#99838](https://github.com/kubernetes/kubernetes/pull/99838), [@adisky](https://github.com/adisky)) [SIG Node]
+  - Pkg/kubelet/kuberuntime/kuberuntime_manager.go migrated to structured logging
+  Exit code changed from 255 to 1 ([#99841](https://github.com/kubernetes/kubernetes/pull/99841), [@adisky](https://github.com/adisky)) [SIG Instrumentation and Node]
+ 
 ## Changes by Kind
 
 ### Deprecation
 
-- Docker support in the kubelet is now deprecated and will be removed in a future release. The kubelet uses a module called "dockershim" which implements CRI support for Docker and it has seen maintenance issues in the Kubernetes community. We encourage you to evaluate moving to a container runtime that is a full-fledged implementation of CRI (v1alpha1 or v1 compliant) as they become available. ([#94624](https://github.com/kubernetes/kubernetes/pull/94624), [@dims](https://github.com/dims)) [SIG Node]
-- Kubectl: deprecate --delete-local-data ([#95076](https://github.com/kubernetes/kubernetes/pull/95076), [@dougsland](https://github.com/dougsland)) [SIG CLI, Cloud Provider and Scalability]
+- Kubeadm: the deprecated kube-dns is no longer supported as an option. If "ClusterConfiguration.dns.type" is set to "kube-dns" kubeadm will now throw an error. ([#99646](https://github.com/kubernetes/kubernetes/pull/99646), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Remove deprecated --generator --replicas --service-generator --service-overrides --schedule from kubectl run
+  Deprecate --serviceaccount --hostport --requests --limits in kubectl run ([#99732](https://github.com/kubernetes/kubernetes/pull/99732), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
+- `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
+- `diskformat` stroage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
+  
+  vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
+  
+  VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
+  
+  Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
+  
+  Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
 
 ### API Change
 
-- API priority and fairness graduated to beta
-  1.19 servers with APF turned on should not be run in a multi-server cluster with 1.20+ servers. ([#96527](https://github.com/kubernetes/kubernetes/pull/96527), [@adtac](https://github.com/adtac)) [SIG API Machinery and Testing]
-- Add LoadBalancerIPMode feature gate ([#92312](https://github.com/kubernetes/kubernetes/pull/92312), [@Sh4d1](https://github.com/Sh4d1)) [SIG Apps, CLI, Cloud Provider and Network]
-- Add WindowsContainerResources and Annotations to CRI-API UpdateContainerResourcesRequest ([#95741](https://github.com/kubernetes/kubernetes/pull/95741), [@katiewasnothere](https://github.com/katiewasnothere)) [SIG Node]
-- Add a 'serving' and `terminating` condition to the EndpointSlice API.
-
-  `serving` tracks the readiness of endpoints regardless of their terminating state. This is distinct from `ready` since `ready` is only true when pods are not terminating.
-  `terminating` is true when an endpoint is terminating. For pods this is any endpoint with a deletion timestamp. ([#92968](https://github.com/kubernetes/kubernetes/pull/92968), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
-- Add support for hugepages to downward API ([#86102](https://github.com/kubernetes/kubernetes/pull/86102), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Adds kubelet alpha feature, `GracefulNodeShutdown` which makes kubelet aware of node system shutdowns and result in graceful termination of pods during a system shutdown. ([#96129](https://github.com/kubernetes/kubernetes/pull/96129), [@bobbypage](https://github.com/bobbypage)) [SIG Node]
-- AppProtocol is now GA for Endpoints and Services. The ServiceAppProtocol feature gate will be deprecated in 1.21. ([#96327](https://github.com/kubernetes/kubernetes/pull/96327), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Automatic allocation of NodePorts for services with type LoadBalancer can now be disabled by setting the (new) parameter
-  Service.spec.allocateLoadBalancerNodePorts=false. The default is to allocate NodePorts for services with type LoadBalancer which is the existing behavior. ([#92744](https://github.com/kubernetes/kubernetes/pull/92744), [@uablrek](https://github.com/uablrek)) [SIG Apps and Network]
-- Document that ServiceTopology feature is required to use `service.spec.topologyKeys`. ([#96528](https://github.com/kubernetes/kubernetes/pull/96528), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
-- EndpointSlice has a new NodeName field guarded by the EndpointSliceNodeName feature gate.
-  - EndpointSlice topology field will be deprecated in an upcoming release.
-  - EndpointSlice "IP" address type is formally removed after being deprecated in Kubernetes 1.17.
-  - The discovery.k8s.io/v1alpha1 API is deprecated and will be removed in Kubernetes 1.21. ([#96440](https://github.com/kubernetes/kubernetes/pull/96440), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps and Network]
-- Fewer candidates are enumerated for preemption to improve performance in large clusters ([#94814](https://github.com/kubernetes/kubernetes/pull/94814), [@adtac](https://github.com/adtac)) [SIG Scheduling]
-- If BoundServiceAccountTokenVolume is enabled, cluster admins can use metric `serviceaccount_stale_tokens_total` to monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off extended tokens by starting `kube-apiserver` with flag `--service-account-extend-token-expiration=false` ([#96273](https://github.com/kubernetes/kubernetes/pull/96273), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Auth]
-- Introduce alpha support for exec-based container registry credential provider plugins in the kubelet. ([#94196](https://github.com/kubernetes/kubernetes/pull/94196), [@andrewsykim](https://github.com/andrewsykim)) [SIG Node and Release]
-- Kube-apiserver now deletes expired kube-apiserver Lease objects:
-  - The feature is under feature gate `APIServerIdentity`.
-  - A flag is added to kube-apiserver: `identity-lease-garbage-collection-check-period-seconds` ([#95895](https://github.com/kubernetes/kubernetes/pull/95895), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Apps, Auth and Testing]
-- Move configurable fsgroup change policy for pods to beta ([#96376](https://github.com/kubernetes/kubernetes/pull/96376), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]
-- New flag is introduced, i.e. --topology-manager-scope=container|pod.
-  The default value is the "container" scope. ([#92967](https://github.com/kubernetes/kubernetes/pull/92967), [@cezaryzukowski](https://github.com/cezaryzukowski)) [SIG Instrumentation, Node and Testing]
-- NodeAffinity plugin can be configured with AddedAffinity. ([#96202](https://github.com/kubernetes/kubernetes/pull/96202), [@alculquicondor](https://github.com/alculquicondor)) [SIG Node, Scheduling and Testing]
-- Promote RuntimeClass feature to GA.
-  Promote node.k8s.io API groups from v1beta1 to v1. ([#95718](https://github.com/kubernetes/kubernetes/pull/95718), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Apps, Auth, Node, Scheduling and Testing]
-- Reminder: The labels "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" are deprecated in favor of "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" respectively.  All users of the "failure-domain.beta..." labels should switch to the "topology..." equivalents. ([#96033](https://github.com/kubernetes/kubernetes/pull/96033), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, CLI, Cloud Provider, Network, Node, Scheduling, Storage and Testing]
-- The usage of mixed protocol values in the same LoadBalancer Service is possible if the new feature gate MixedProtocolLBSVC is enabled.
-  "action required"
-  The feature gate is disabled by default. The user has to enable it for the API Server. ([#94028](https://github.com/kubernetes/kubernetes/pull/94028), [@janosi](https://github.com/janosi)) [SIG API Machinery and Apps]
-- This PR will introduce a feature gate CSIServiceAccountToken with two additional fields in `CSIDriverSpec`. ([#93130](https://github.com/kubernetes/kubernetes/pull/93130), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Users can try the cronjob controller v2 using the feature gate. This will be the default controller in future releases. ([#93370](https://github.com/kubernetes/kubernetes/pull/93370), [@alaypatel07](https://github.com/alaypatel07)) [SIG API Machinery, Apps, Auth and Testing]
-- VolumeSnapshotDataSource moves to GA in 1.20 release ([#95282](https://github.com/kubernetes/kubernetes/pull/95282), [@xing-yang](https://github.com/xing-yang)) [SIG Apps]
+- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
+  2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
+- Add a default metadata name labels for selecting any namespace by its name. ([#96968](https://github.com/kubernetes/kubernetes/pull/96968), [@jayunit100](https://github.com/jayunit100)) [SIG API Machinery, Apps, Cloud Provider, Storage and Testing]
+- Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed` ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- Clarified NetworkPolicy policyTypes documentation ([#97216](https://github.com/kubernetes/kubernetes/pull/97216), [@joejulian](https://github.com/joejulian)) [SIG Network]
+- DaemonSets accept a MaxSurge integer or percent on their rolling update strategy that will launch the updated pod on nodes and wait for those pods to go ready before marking the old out-of-date pods as deleted. This allows workloads to avoid downtime during upgrades when deployed using DaemonSets. This feature is alpha and is behind the DaemonSetUpdateSurge feature gate. ([#96441](https://github.com/kubernetes/kubernetes/pull/96441), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps and Testing]
+- EndpointSlice API is now GA. The EndpointSlice topology field has been removed from the GA API and will be replaced by a new per Endpoint Zone field. If the topology field was previously used, it will be converted into an annotation in the v1 Resource. The discovery.k8s.io/v1alpha1 API is removed. ([#99662](https://github.com/kubernetes/kubernetes/pull/99662), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network and Testing]
+- EndpointSlice Controllers are now GA. The EndpointSlice Controller will not populate the `deprecatedTopology` field and will only provide topology information through the `zone` and `nodeName` fields. ([#99870](https://github.com/kubernetes/kubernetes/pull/99870), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, Apps, Auth, Network and Testing]
+- IngressClass resource can now reference a resource in a specific namespace 
+  for implementation-specific configuration(previously only Cluster-level resources were allowed). 
+  This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi)) [SIG API Machinery, CLI and Network]
+- Introduce conditions for PodDisruptionBudget ([#98127](https://github.com/kubernetes/kubernetes/pull/98127), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Jobs API has a new .spec.suspend field that can be used to suspend and resume Jobs ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
+- Kubelet Graceful Node Shutdown feature is now beta. ([#99735](https://github.com/kubernetes/kubernetes/pull/99735), [@bobbypage](https://github.com/bobbypage)) [SIG Node]
+- Limit the quest value of hugepage to integer multiple of page size. ([#98515](https://github.com/kubernetes/kubernetes/pull/98515), [@lala123912](https://github.com/lala123912)) [SIG Apps]
+- One new field "InternalTrafficPolicy" in Service is added.
+  It specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only.
+  "Cluster" routes internal traffic to a Service to all endpoints.
+  "Local" routes traffic to node-local endpoints only, and traffic is dropped if no node-local endpoints are ready.
+  The default value is "Cluster". ([#96600](https://github.com/kubernetes/kubernetes/pull/96600), [@maplain](https://github.com/maplain)) [SIG API Machinery, Apps and Network]
+- PodSecurityPolicy only stores "generic" as allowed volume type if the GenericEphemeralVolume feature gate is enabled ([#98918](https://github.com/kubernetes/kubernetes/pull/98918), [@pohly](https://github.com/pohly)) [SIG Auth and Security]
+- Promote CronJobs to batch/v1 ([#99423](https://github.com/kubernetes/kubernetes/pull/99423), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+- Remove support for building Kubernetes with bazel. ([#99561](https://github.com/kubernetes/kubernetes/pull/99561), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Scheduling, Storage, Testing and Windows]
+- Setting loadBalancerClass in load balancer type of service is available with this PR. 
+  Users who want to use a custom load balancer can specify loadBalancerClass to achieve it. ([#98277](https://github.com/kubernetes/kubernetes/pull/98277), [@XudongLiuHarold](https://github.com/XudongLiuHarold)) [SIG API Machinery, Apps, Cloud Provider and Network]
+- Storage capacity tracking (= the CSIStorageCapacity feature) is beta, storage.k8s.io/v1alpha1/VolumeAttachment and storage.k8s.io/v1alpha1/CSIStorageCapacity objects are deprecated ([#99641](https://github.com/kubernetes/kubernetes/pull/99641), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, Scheduling, Storage and Testing]
+- Support for Indexed Job: a Job that is considered completed when Pods associated to indexes from 0 to (.spec.completions-1) have succeeded. ([#98812](https://github.com/kubernetes/kubernetes/pull/98812), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
+- The apiserver now resets managedFields that got corrupted by a mutating admission controller. ([#98074](https://github.com/kubernetes/kubernetes/pull/98074), [@kwiesmueller](https://github.com/kwiesmueller)) [SIG API Machinery and Testing]
+- `controller.kubernetes.io/pod-deletion-cost` annotation can be set to offer a hint on the cost of deleting a pod compared to other pods belonging to the same ReplicaSet. Pods with lower deletion cost are deleted first. This is an alpha feature. ([#99163](https://github.com/kubernetes/kubernetes/pull/99163), [@ahg-g](https://github.com/ahg-g)) [SIG Apps]
 
 ### Feature
 
-- **Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.**: ([#95896](https://github.com/kubernetes/kubernetes/pull/95896), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Cluster Lifecycle]
-- A new set of alpha metrics are reported by the Kubernetes scheduler under the `/metrics/resources` endpoint that allow administrators to easily see the resource consumption (requests and limits for all resources on the pods) and compare it to actual pod usage or node capacity. ([#94866](https://github.com/kubernetes/kubernetes/pull/94866), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Instrumentation, Node and Scheduling]
-- Add --experimental-logging-sanitization flag enabling runtime protection from leaking sensitive data in logs ([#96370](https://github.com/kubernetes/kubernetes/pull/96370), [@serathius](https://github.com/serathius)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Add a StorageVersionAPI feature gate that makes API server update storageversions before serving certain write requests.
-  This feature allows the storage migrator to manage storage migration for built-in resources.
-  Enabling internal.apiserver.k8s.io/v1alpha1 API and APIServerIdentity feature gate are required to use this feature. ([#93873](https://github.com/kubernetes/kubernetes/pull/93873), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery, Auth and Testing]
-- Add a new `vSphere` metric: `cloudprovider_vsphere_vcenter_versions`. It's content show `vCenter` hostnames with the associated server version. ([#94526](https://github.com/kubernetes/kubernetes/pull/94526), [@Danil-Grigorev](https://github.com/Danil-Grigorev)) [SIG Cloud Provider and Instrumentation]
-- Add feature to size memory backed volumes ([#94444](https://github.com/kubernetes/kubernetes/pull/94444), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Storage and Testing]
-- Add node_authorizer_actions_duration_seconds metric that can be used to estimate load to node authorizer. ([#92466](https://github.com/kubernetes/kubernetes/pull/92466), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Auth and Instrumentation]
-- Add pod_ based CPU and memory metrics to Kubelet's  /metrics/resource endpoint ([#95839](https://github.com/kubernetes/kubernetes/pull/95839), [@egernst](https://github.com/egernst)) [SIG Instrumentation, Node and Testing]
-- Adds a headless service on node-local-cache addon. ([#88412](https://github.com/kubernetes/kubernetes/pull/88412), [@stafot](https://github.com/stafot)) [SIG Cloud Provider and Network]
-- CRDs: For structural schemas, non-nullable null map fields will now be dropped and defaulted if a default is available. null items in list will continue being preserved, and fail validation if not nullable. ([#95423](https://github.com/kubernetes/kubernetes/pull/95423), [@apelisse](https://github.com/apelisse)) [SIG API Machinery]
-- E2e test for PodFsGroupChangePolicy ([#96247](https://github.com/kubernetes/kubernetes/pull/96247), [@saikat-royc](https://github.com/saikat-royc)) [SIG Storage and Testing]
-- Gradudate the Pod Resources API to G.A
-  Introduces the pod_resources_endpoint_requests_total metric which tracks the total number of requests to the pod resources API ([#92165](https://github.com/kubernetes/kubernetes/pull/92165), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Instrumentation, Node and Testing]
-- Introduce api-extensions category which will return: mutating admission configs, validating admission configs, CRDs and APIServices when used in kubectl get, for example. ([#95603](https://github.com/kubernetes/kubernetes/pull/95603), [@soltysh](https://github.com/soltysh)) [SIG API Machinery]
-- Kube-apiserver now maintains a Lease object to identify itself:
-  - The feature is under feature gate `APIServerIdentity`.
-  - Two flags are added to kube-apiserver: `identity-lease-duration-seconds`, `identity-lease-renew-interval-seconds` ([#95533](https://github.com/kubernetes/kubernetes/pull/95533), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Kube-apiserver: The timeout used when making health check calls to etcd can now be configured with `--etcd-healthcheck-timeout`. The default timeout is 2 seconds, matching the previous behavior. ([#93244](https://github.com/kubernetes/kubernetes/pull/93244), [@Sh4d1](https://github.com/Sh4d1)) [SIG API Machinery]
-- Kubectl: Previously users cannot provide arguments to a external diff tool via KUBECTL_EXTERNAL_DIFF env. This release now allow users to specify args to KUBECTL_EXTERNAL_DIFF env. ([#95292](https://github.com/kubernetes/kubernetes/pull/95292), [@dougsland](https://github.com/dougsland)) [SIG CLI]
-- Scheduler now ignores Pod update events if the resourceVersion of old and new Pods are identical. ([#96071](https://github.com/kubernetes/kubernetes/pull/96071), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Support custom tags for cloud provider managed resources ([#96450](https://github.com/kubernetes/kubernetes/pull/96450), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support customize load balancer health probe protocol and request path ([#96338](https://github.com/kubernetes/kubernetes/pull/96338), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Support multiple standard load balancers in one cluster ([#96111](https://github.com/kubernetes/kubernetes/pull/96111), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- The beta `RootCAConfigMap` feature gate is enabled by default and causes kube-controller-manager to publish a "kube-root-ca.crt" ConfigMap to every namespace. This ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver. ([#96197](https://github.com/kubernetes/kubernetes/pull/96197), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Apps, Auth and Testing]
-- The kubelet_runtime_operations_duration_seconds metric got additional buckets of 60, 300, 600, 900 and 1200 seconds ([#96054](https://github.com/kubernetes/kubernetes/pull/96054), [@alvaroaleman](https://github.com/alvaroaleman)) [SIG Instrumentation and Node]
-- There is a new pv_collector_total_pv_count metric that counts persistent volumes by the volume plugin name and volume mode. ([#95719](https://github.com/kubernetes/kubernetes/pull/95719), [@tsmetana](https://github.com/tsmetana)) [SIG Apps, Instrumentation, Storage and Testing]
-- Volume snapshot e2e test to validate PVC and VolumeSnapshotContent finalizer ([#95863](https://github.com/kubernetes/kubernetes/pull/95863), [@RaunakShah](https://github.com/RaunakShah)) [SIG Cloud Provider, Storage and Testing]
-- Warns user when executing kubectl apply/diff to resource currently being deleted. ([#95544](https://github.com/kubernetes/kubernetes/pull/95544), [@SaiHarshaK](https://github.com/SaiHarshaK)) [SIG CLI]
-- `kubectl alpha debug` has graduated to beta and is now `kubectl debug`. ([#96138](https://github.com/kubernetes/kubernetes/pull/96138), [@verb](https://github.com/verb)) [SIG CLI and Testing]
-- `kubectl debug` gains support for changing container images when copying a pod for debugging, similar to how `kubectl set image` works. See `kubectl help debug` for more information. ([#96058](https://github.com/kubernetes/kubernetes/pull/96058), [@verb](https://github.com/verb)) [SIG CLI]
-
-### Documentation
-
-- Updates docs and guidance on cloud provider InstancesV2 and Zones interface for external cloud providers:
-  - removes experimental warning for InstancesV2
-  - document that implementation of InstancesV2 will disable calls to Zones
-  - deprecate Zones in favor of InstancesV2 ([#96397](https://github.com/kubernetes/kubernetes/pull/96397), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
+- A client-go metric, rest_client_exec_plugin_call_total, has been added to track total calls to client-go credential plugins. ([#98892](https://github.com/kubernetes/kubernetes/pull/98892), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation]
+- Add --use-protocol-buffers flag to kubectl top pods and nodes ([#96655](https://github.com/kubernetes/kubernetes/pull/96655), [@serathius](https://github.com/serathius)) [SIG CLI]
+- Add support to generate client-side binaries for new darwin/arm64 platform ([#97743](https://github.com/kubernetes/kubernetes/pull/97743), [@dims](https://github.com/dims)) [SIG Release and Testing]
+- Added `ephemeral_volume_controller_create[_failures]_total` counters to kube-controller-manager metrics ([#99115](https://github.com/kubernetes/kubernetes/pull/99115), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Storage]
+- Adds alpha feature `VolumeCapacityPriority` which makes the scheduler prioritize nodes based on the best matching size of statically provisioned PVs across multiple topologies. ([#96347](https://github.com/kubernetes/kubernetes/pull/96347), [@cofyc](https://github.com/cofyc)) [SIG Apps, Network, Scheduling, Storage and Testing]
+- Adds two new metrics to cronjobs, a  histogram to track the time difference when a job is created and the expected time when it should be created, and a gauge for the missed schedules of a cronjob ([#99341](https://github.com/kubernetes/kubernetes/pull/99341), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps and Instrumentation]
+- Alpha implementation of Kubectl Command Headers: SIG CLI KEP 859 enabled when KUBECTL_COMMAND_HEADERS environment variable set on the client command line.
+  - To enable: export KUBECTL_COMMAND_HEADERS=1; kubectl ... ([#98952](https://github.com/kubernetes/kubernetes/pull/98952), [@seans3](https://github.com/seans3)) [SIG API Machinery and CLI]
+- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99738](https://github.com/kubernetes/kubernetes/pull/99738), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- Disruption controller only sends one event per PodDisruptionBudget if scale can't be computed ([#98128](https://github.com/kubernetes/kubernetes/pull/98128), [@mortent](https://github.com/mortent)) [SIG Apps]
+- EndpointSliceNodeName will always be enabled, so NodeName will always be available in the v1beta1 API. ([#99746](https://github.com/kubernetes/kubernetes/pull/99746), [@swetharepakula](https://github.com/swetharepakula)) [SIG Apps and Network]
+- Graduate CRIContainerLogRotation feature gate to GA. ([#99651](https://github.com/kubernetes/kubernetes/pull/99651), [@umohnani8](https://github.com/umohnani8)) [SIG Node and Testing]
+- Kube-proxy iptables: new metric sync_proxy_rules_iptables_total that exposes the number of rules programmed per table in each iteration ([#99653](https://github.com/kubernetes/kubernetes/pull/99653), [@aojea](https://github.com/aojea)) [SIG Instrumentation and Network]
+- Kube-scheduler now logs plugin scoring summaries at --v=4 ([#99411](https://github.com/kubernetes/kubernetes/pull/99411), [@damemi](https://github.com/damemi)) [SIG Scheduling]
+- Kubeadm: a warning to user as ipv6 site-local is deprecated ([#99574](https://github.com/kubernetes/kubernetes/pull/99574), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle and Network]
+- Kubeadm: apply the "node.kubernetes.io/exclude-from-external-load-balancers" label on control plane nodes during "init", "join" and "upgrade" to preserve backwards compatibility with the lagacy LB mode where nodes labeled as "master" where excluded. To opt-out you can remove the label from a node. See #97543 and the linked KEP for more details. ([#98269](https://github.com/kubernetes/kubernetes/pull/98269), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: if the user has customized their image repository via the kubeadm configuration, pass the custom pause image repository and tag to the kubelet via --pod-infra-container-image not only for Docker but for all container runtimes. This flag tells the kubelet that it should not garbage collect the image. ([#99476](https://github.com/kubernetes/kubernetes/pull/99476), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: promote IPv6DualStack feature gate to Beta ([#99294](https://github.com/kubernetes/kubernetes/pull/99294), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubectl version changed to write a warning message to stderr if the client and server version difference exceeds the supported version skew of +/-1 minor version. ([#98250](https://github.com/kubernetes/kubernetes/pull/98250), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- Kubernetes is now built with Golang 1.16 ([#98572](https://github.com/kubernetes/kubernetes/pull/98572), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
+- Persistent Volumes formatted with the btrfs filesystem will now automatically resize when expanded. ([#99361](https://github.com/kubernetes/kubernetes/pull/99361), [@Novex](https://github.com/Novex)) [SIG Storage]
+- Remove cAdvisor json metrics api collected by Kubelet ([#99236](https://github.com/kubernetes/kubernetes/pull/99236), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
+- Sysctls is now GA and locked to default ([#99158](https://github.com/kubernetes/kubernetes/pull/99158), [@wgahnagl](https://github.com/wgahnagl)) [SIG Node]
+- The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
+- The endpointslice mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
+  The well-known annotation endpoints.kubernetes.io/last-change-trigger-time is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea)) [SIG Apps, Network and Testing]
+- Update the latest validated version of Docker to 20.10 ([#98977](https://github.com/kubernetes/kubernetes/pull/98977), [@neolit123](https://github.com/neolit123)) [SIG CLI, Cluster Lifecycle and Node]
+- Upgrade node local dns to 1.17.0 for better IPv6 support ([#99749](https://github.com/kubernetes/kubernetes/pull/99749), [@pacoxu](https://github.com/pacoxu)) [SIG Cloud Provider and Network]
+- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#99581](https://github.com/kubernetes/kubernetes/pull/99581), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
+- When downscaling ReplicaSets, ready and creation timestamps are compared in a logarithmic scale. ([#99212](https://github.com/kubernetes/kubernetes/pull/99212), [@damemi](https://github.com/damemi)) [SIG Apps and Testing]
+- When the kubelet is watching a ConfigMap or Secret purely in the context of setting environment variables
+  for containers, only hold that watch for a defined duration before cancelling it. This change reduces the CPU
+  and memory usage of the kube-apiserver in large clusters. ([#99393](https://github.com/kubernetes/kubernetes/pull/99393), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery, Node and Testing]
+- WindowsEndpointSliceProxying feature gate has graduated to beta and is enabled by default. This means kube-proxy will  read from EndpointSlices instead of Endpoints on Windows by default. ([#99794](https://github.com/kubernetes/kubernetes/pull/99794), [@robscott](https://github.com/robscott)) [SIG Network]
 
 ### Bug or Regression
 
-- Change plugin name in fsgroupapplymetrics of csi and flexvolume to distinguish different driver ([#95892](https://github.com/kubernetes/kubernetes/pull/95892), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation, Storage and Testing]
-- Clear UDP conntrack entry on endpoint changes when using nodeport ([#71573](https://github.com/kubernetes/kubernetes/pull/71573), [@JacobTanenbaum](https://github.com/JacobTanenbaum)) [SIG Network]
-- Exposes and sets a default timeout for the TokenReview client for DelegatingAuthenticationOptions ([#96217](https://github.com/kubernetes/kubernetes/pull/96217), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Fix CVE-2020-8555 for Quobyte client connections. ([#95206](https://github.com/kubernetes/kubernetes/pull/95206), [@misterikkit](https://github.com/misterikkit)) [SIG Storage]
-- Fix IP fragmentation of UDP and TCP packets not supported issues on LoadBalancer rules ([#96464](https://github.com/kubernetes/kubernetes/pull/96464), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix a bug that DefaultPreemption plugin is disabled when using (legacy) scheduler policy. ([#96439](https://github.com/kubernetes/kubernetes/pull/96439), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
-- Fix bug in JSON path parser where an error occurs when a range is empty ([#95933](https://github.com/kubernetes/kubernetes/pull/95933), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
-- Fix client-go prometheus metrics to correctly present the API path accessed in some environments. ([#74363](https://github.com/kubernetes/kubernetes/pull/74363), [@aanm](https://github.com/aanm)) [SIG API Machinery]
-- Fix memory leak in kube-apiserver when underlying time goes forth and back. ([#96266](https://github.com/kubernetes/kubernetes/pull/96266), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery]
-- Fix paging issues when Azure API returns empty values with non-empty nextLink ([#96211](https://github.com/kubernetes/kubernetes/pull/96211), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix pull image error from multiple ACRs using azure managed identity ([#96355](https://github.com/kubernetes/kubernetes/pull/96355), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix vSphere volumes that could be erroneously attached to wrong node ([#96224](https://github.com/kubernetes/kubernetes/pull/96224), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fixed a bug that prevents kubectl to validate CRDs with schema using x-kubernetes-preserve-unknown-fields on object fields. ([#96369](https://github.com/kubernetes/kubernetes/pull/96369), [@gautierdelorme](https://github.com/gautierdelorme)) [SIG API Machinery and Testing]
-- For vSphere Cloud Provider, If VM of worker node is deleted, the node will also be deleted by node controller ([#92608](https://github.com/kubernetes/kubernetes/pull/92608), [@lubronzhan](https://github.com/lubronzhan)) [SIG Cloud Provider]
-- HTTP/2 connection health check is enabled by default in all Kubernetes clients. The feature should work out-of-the-box. If needed, users can tune the feature via the HTTP2_READ_IDLE_TIMEOUT_SECONDS and HTTP2_PING_TIMEOUT_SECONDS environment variables. The feature is disabled if HTTP2_READ_IDLE_TIMEOUT_SECONDS is set to 0. ([#95981](https://github.com/kubernetes/kubernetes/pull/95981), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
+- Creating a PVC with DataSource should fail for non-CSI plugins. ([#97086](https://github.com/kubernetes/kubernetes/pull/97086), [@xing-yang](https://github.com/xing-yang)) [SIG Apps and Storage]
+- EndpointSlice controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99345](https://github.com/kubernetes/kubernetes/pull/99345), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- EndpointSliceMirroring controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99756](https://github.com/kubernetes/kubernetes/pull/99756), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Fix --ignore-errors does not take effect if multiple logs are printed and unfollowed ([#97686](https://github.com/kubernetes/kubernetes/pull/97686), [@wzshiming](https://github.com/wzshiming)) [SIG CLI]
+- Fix bug that would let the Horizontal Pod Autoscaler scale down despite at least one metric being unavailable/invalid ([#99514](https://github.com/kubernetes/kubernetes/pull/99514), [@mikkeloscar](https://github.com/mikkeloscar)) [SIG Apps and Autoscaling]
+- Fix cgroup handling for systemd with cgroup v2 ([#98365](https://github.com/kubernetes/kubernetes/pull/98365), [@odinuge](https://github.com/odinuge)) [SIG Node]
+- Fix smb mount PermissionDenied issue on Windows ([#99550](https://github.com/kubernetes/kubernetes/pull/99550), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider, Storage and Windows]
+- Fixed a bug that causes smaller number of conntrack-max being used under CPU static policy. (#99225, @xh4n3) ([#99613](https://github.com/kubernetes/kubernetes/pull/99613), [@xh4n3](https://github.com/xh4n3)) [SIG Network]
+- Fixed bug that caused cAdvisor to incorrectly detect single-socket multi-NUMA topology. ([#99315](https://github.com/kubernetes/kubernetes/pull/99315), [@iwankgb](https://github.com/iwankgb)) [SIG Node]
+- Fixes add-on manager leader election ([#98968](https://github.com/kubernetes/kubernetes/pull/98968), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider]
+- Improved update time of pod statuses following new probe results. ([#98376](https://github.com/kubernetes/kubernetes/pull/98376), [@matthyx](https://github.com/matthyx)) [SIG Node and Testing]
+- Kube-apiserver: an update of a pod with a generic ephemeral volume dropped that volume if the feature had been disabled since creating the pod with such a volume ([#99446](https://github.com/kubernetes/kubernetes/pull/99446), [@pohly](https://github.com/pohly)) [SIG Apps, Node and Storage]
+- Kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false ([#98984](https://github.com/kubernetes/kubernetes/pull/98984), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- On single-stack configured (IPv4 or IPv6, but not both) clusters, Services which are both headless (no clusterIP) and selectorless (empty or undefined selector) will report `ipFamilyPolicy RequireDualStack` and will have entries in `ipFamilies[]` for both IPv4 and IPv6.  This is a change from alpha, but does not have any impact on the manually-specified Endpoints and EndpointSlices for the Service. ([#99555](https://github.com/kubernetes/kubernetes/pull/99555), [@thockin](https://github.com/thockin)) [SIG Apps and Network]
+- Resolves spurious `Failed to list *v1.Secret` or `Failed to list *v1.ConfigMap` messages in kubelet logs. ([#99538](https://github.com/kubernetes/kubernetes/pull/99538), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- Return zero time (midnight on Jan. 1, 1970) instead of negative number when reporting startedAt and finishedAt of the not started or a running Pod when using dockershim as a runtime. ([#99585](https://github.com/kubernetes/kubernetes/pull/99585), [@Iceber](https://github.com/Iceber)) [SIG Node]
+- Stdin is now only passed to client-go exec credential plugins when it is detected to be an interactive terminal. Previously, it was passed to client-go exec plugins when **stdout*- was detected to be an interactive terminal. ([#99654](https://github.com/kubernetes/kubernetes/pull/99654), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
+- The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 ([#99795](https://github.com/kubernetes/kubernetes/pull/99795), [@robscott](https://github.com/robscott)) [SIG Network]
+- Updates the commands 
+   - kubectl kustomize {arg}
+   - kubectl apply -k {arg}
+  to use same code as kustomize CLI v4.0.5
+   - [v4.0.5]: https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.0.5 ([#98946](https://github.com/kubernetes/kubernetes/pull/98946), [@monopole](https://github.com/monopole)) [SIG API Machinery, Architecture, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Storage]
+- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
+  "primary IP family" of the cluster by picking a primary pod IP of the same family
+  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
+  in the order the administrator wanted (since some CNI plugins don't allow
+  configuring this). ([#97979](https://github.com/kubernetes/kubernetes/pull/97979), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
+- When using Containerd on Windows, the "C:\Windows\System32\drivers\etc\hosts" file will now be managed by kubelet. ([#83730](https://github.com/kubernetes/kubernetes/pull/83730), [@claudiubelu](https://github.com/claudiubelu)) [SIG Node and Windows]
+- `VolumeBindingArgs` now allow `BindTimeoutSeconds` to be set as zero, while the value zero indicates no waiting for the checking of volume binding operation. ([#99835](https://github.com/kubernetes/kubernetes/pull/99835), [@chendave](https://github.com/chendave)) [SIG Scheduling and Storage]
+- `kubectl exec` and `kubectl attach` now honor the `--quiet` flag which suppresses output from the local binary that could be confused by a script with the remote command output (all non-failure output is hidden). In addition, print inline with exec and attach the list of alternate containers when we default to the first spec.container. ([#99004](https://github.com/kubernetes/kubernetes/pull/99004), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
+
+### Other (Cleanup or Flake)
+
+- Apiserver_request_duration_seconds is promoted to stable status. ([#99925](https://github.com/kubernetes/kubernetes/pull/99925), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
+- Apiserver_request_total is promoted to stable status and no longer has a content-type dimensions, so any alerts/charts which presume the existence of this will fail. This is however, unlikely to be the case since it was effectively an unbounded dimension in the first place. ([#99788](https://github.com/kubernetes/kubernetes/pull/99788), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
+- EndpointSlice generation is now incremented when labels change. ([#99750](https://github.com/kubernetes/kubernetes/pull/99750), [@robscott](https://github.com/robscott)) [SIG Network]
+- Featuregate AllowInsecureBackendProxy is promoted to GA ([#99658](https://github.com/kubernetes/kubernetes/pull/99658), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
+- Migrate `pkg/kubelet/(eviction)` to structured logging ([#99032](https://github.com/kubernetes/kubernetes/pull/99032), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
+- Migrate deployment controller log messages to structured logging ([#97507](https://github.com/kubernetes/kubernetes/pull/97507), [@aldudko](https://github.com/aldudko)) [SIG Apps]
+- Migrate pkg/kubelet/cloudresource to structured logging ([#98999](https://github.com/kubernetes/kubernetes/pull/98999), [@sladyn98](https://github.com/sladyn98)) [SIG Node]
+- Migrate pkg/kubelet/cri/remote logs to structured logging ([#98589](https://github.com/kubernetes/kubernetes/pull/98589), [@chenyw1990](https://github.com/chenyw1990)) [SIG Node]
+- Migrate pkg/kubelet/kuberuntime/kuberuntime_container.go logs to structured logging ([#96973](https://github.com/kubernetes/kubernetes/pull/96973), [@chenyw1990](https://github.com/chenyw1990)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/status to structured logging ([#99836](https://github.com/kubernetes/kubernetes/pull/99836), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/token to structured logging ([#99264](https://github.com/kubernetes/kubernetes/pull/99264), [@palnabarun](https://github.com/palnabarun)) [SIG Auth, Instrumentation and Node]
+- Migrate pkg/kubelet/util to structured logging ([#99823](https://github.com/kubernetes/kubernetes/pull/99823), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
+- Migrate proxy/userspace/proxier.go logs to structured logging ([#97837](https://github.com/kubernetes/kubernetes/pull/97837), [@JornShen](https://github.com/JornShen)) [SIG Network]
+- Migrate some kubelet/metrics log messages to structured logging ([#98627](https://github.com/kubernetes/kubernetes/pull/98627), [@jialaijun](https://github.com/jialaijun)) [SIG Instrumentation and Node]
+- Process start time on Windows now uses current process information ([#97491](https://github.com/kubernetes/kubernetes/pull/97491), [@jsturtevant](https://github.com/jsturtevant)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Windows]
+
+### Uncategorized
+
+- Migrate pkg/kubelet/stats to structured logging ([#99607](https://github.com/kubernetes/kubernetes/pull/99607), [@krzysiekg](https://github.com/krzysiekg)) [SIG Node]
+- The DownwardAPIHugePages feature is beta.  Users may use the feature if all workers in their cluster are min 1.20 version.  The feature will be enabled by default in all installations in 1.22. ([#99610](https://github.com/kubernetes/kubernetes/pull/99610), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
+
+## Dependencies
+
+### Added
+- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
+- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
+- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
+- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
+- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
+- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
+- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
+- go.starlark.net: 8dd3e2e
+- golang.org/x/term: 6a3ed07
+- sigs.k8s.io/kustomize/api: v0.8.5
+- sigs.k8s.io/kustomize/cmd/config: v0.9.7
+- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
+- sigs.k8s.io/kustomize/kyaml: v0.10.15
+
+### Changed
+- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
+- github.com/creack/pty: [v1.1.7 → v1.1.9](https://github.com/creack/pty/compare/v1.1.7...v1.1.9)
+- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
+- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
+- github.com/google/cadvisor: [v0.38.7 → v0.38.8](https://github.com/google/cadvisor/compare/v0.38.7...v0.38.8)
+- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
+- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
+- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
+- golang.org/x/crypto: 7f63de1 → 5ea612d
+- golang.org/x/exp: 6cc2880 → 85be41e
+- golang.org/x/mobile: d2bd2a2 → e6ae53a
+- golang.org/x/mod: v0.3.0 → ce943fd
+- golang.org/x/net: 69a7880 → 3d97a24
+- golang.org/x/sys: 5cba982 → a50acf3
+- golang.org/x/time: 3af7569 → f8bda1e
+- golang.org/x/tools: 113979e → v0.1.0
+- gopkg.in/check.v1: 41f04d3 → 8fa4692
+- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
+- k8s.io/kube-openapi: d219536 → 591a79e
+- k8s.io/system-validators: v1.3.0 → v1.4.0
+
+### Removed
+- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
+- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
+- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
+- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
+- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
+- sigs.k8s.io/kustomize: v2.0.3+incompatible
+
+
+
+# v1.21.0-beta.0
+
+
+## Downloads for v1.21.0-beta.0
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes.tar.gz) | 69b73a03b70b0ed006e9fef3f5b9bc68f0eb8dc40db6cc04777c03a2cb83a008c783012ca186b1c48357fb192403dbcf6960f120924785e2076e215b9012d546
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-src.tar.gz) | 9620fb6d37634271bdd423c09f33f3bd29e74298aa82c47dffc8cb6bd2ff44fa8987a53c53bc529db4ca96ec41503aa81cc8d0c3ac106f3b06c4720de933a8e6
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-darwin-amd64.tar.gz) | 2a6f3fcd6b571f5ccde56b91e6e179a01899244be496dae16a2a16e0405c9437b75c6dc853b56f9a4876a7c0a60ec624ccd28400bf8fb960258263172f6860ba
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-386.tar.gz) | 78fe9ad9f9a9bc043293327223f0038a2c087ca65e87187a6dcae7a24aef9565fe498d295a4639b0b90524469a04930022fcecd815d0afc742eb87ddd8eb7ef5
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-amd64.tar.gz) | c025f5e5bd132355e7dd1296cf2ec752264e7f754c4d95fc34b076bd75bef2f571d30872bcb3d138ce95c592111353d275a80eb31f82c07000874b4c56282dbd
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-arm.tar.gz) | 9975cd2f08fbc202575fb15ba6fc51dab23155ca4d294ebb48516a81efa51f58bab3a87d41c865103756189b554c020371d729ad42880ba788f25047ffc46910
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-arm64.tar.gz) | 56a6836e24471e42e9d9a8488453f2d55598d70c8aca0a307d5116139c930c25c469fd0d1ab5060fbe88dad75a9b5209a08dc11d644af5f3ebebfbcb6c16266c
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-ppc64le.tar.gz) | b6a6cc9baad0ad85ed079ee80e6d6acc905095cfb440998bbc0f553b94fa80077bd58b8692754de477517663d51161705e6e89a1b6d04aa74819800db3517722
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-s390x.tar.gz) | 7b743481b340f510bf9ae28ea8ea91150aa1e8c37fe104b66d7b3aff62f5e6db3c590d2c13d14dbb5c928de31c7613372def2496075853611d10d6b5fa5b60bd
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-windows-386.tar.gz) | df06c7a524ce84c1f8d7836aa960c550c88dbca0ec4854df4dd0a85b3c84b8ecbc41b54e8c4669ce28ac670659ff0fad795deb1bc539f3c3b3aa885381265f5a
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-windows-amd64.tar.gz) | 4568497b684564f2a94fbea6cbfd778b891231470d9a6956c3b7a3268643d13b855c0fc5ebea5f769300cc0c7719c2c331c387f468816f182f63e515adeaa7a0
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-amd64.tar.gz) | 42883cca2d312153baf693fc6024a295359a421e74fd70eefc927413be4e0353debe634e7cca6b9a8f7d8a0cee3717e03ba5d29a306e93139b1c2f3027535a6d
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-arm.tar.gz) | e0042215e84c769ba4fc4d159ccf67b2c4a26206bfffb0ec5152723dc813ff9c1426aa0e9b963d7bfa2efb266ca43561b596b459152882ebb42102ccf60bd8eb
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-arm64.tar.gz) | bfad29d43e14152cb9bc7c4df6aa77929c6eca64a294bb832215bdba9fa0ee2195a2b709c0267dc7426bb371b547ee80bb8461a8c678c9bffa0819aa7db96289
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-ppc64le.tar.gz) | ca67674c01c6cebdc8160c85b449eab1a23bb0557418665246e0208543fa2eaaf97679685c7b49bee3a4300904c0399c3d762ae34dc3e279fd69ce792c4b07ff
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-s390x.tar.gz) | 285352b628ec754b01b8ad4ef1427223a142d58ebcb46f6861df14d68643133b32330460b213b1ba5bc5362ff2b6dacd8e0c2d20cce6e760fa1954af8a60df8b
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-amd64.tar.gz) | d92d9b30e7e44134a0cd9db4c01924d365991ea16b3131200b02a82cff89c8701f618cd90e7f1c65427bd4bb5f78b10d540b2262de2c143b401fa44e5b25627b
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-arm.tar.gz) | 551092f23c27fdea4bb2d0547f6075892534892a96fc2be7786f82b58c93bffdb5e1c20f8f11beb8bed46c24f36d4c18ec5ac9755435489efa28e6ae775739bd
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-arm64.tar.gz) | 26ae7f4163e527349b8818ee38b9ee062314ab417f307afa49c146df8f5a2bd689509b128bd4a1efd3896fd89571149a9955ada91f8ca0c2f599cd863d613c86
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-ppc64le.tar.gz) | 821fa953f6cebc69d2d481e489f3e90899813d20e2eefbabbcadd019d004108e7540f741fabe60e8e7c6adbb1053ac97898bbdddec3ca19f34a71aa3312e0d4e
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-s390x.tar.gz) | 22197d4f66205d5aa9de83dfddcc4f2bb3195fd7067cdb5c21e61dbeae217bc112fb7ecff8a539579b60ad92298c2b4c87b9b7c7e6ec1ee1ffa0c6e4bc4412c1
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-windows-amd64.tar.gz) | 7e22e0d9603562a04dee16a513579f06b1ff6354d97d669bd68f8777ec7f89f6ef027fb23ab0445d7bba0bb689352f0cc748ce90e3f597c6ebe495464a96b860
+
+## Changelog since v1.21.0-alpha.3
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - The metric `storage_operation_errors_total` is not removed, but is marked deprecated, and the metric `storage_operation_status_count` is marked deprecated. In both cases the storage_operation_duration_seconds metric can be used to recover equivalent counts (using `status=fail-unknown` in the case of `storage_operations_errors_total`). ([#99045](https://github.com/kubernetes/kubernetes/pull/99045), [@mattcary](https://github.com/mattcary)) [SIG Instrumentation and Storage]
+ 
+## Changes by Kind
+
+### Deprecation
+
+- The `batch/v2alpha1` CronJob type definitions and clients are deprecated and removed. ([#96987](https://github.com/kubernetes/kubernetes/pull/96987), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
+
+### API Change
+
+- Cluster admins can now turn off /debug/pprof and /debug/flags/v endpoint in kubelet by setting enableProfilingHandler and enableDebugFlagsHandler to false in their kubelet configuration file. enableProfilingHandler and enableDebugFlagsHandler can be set to true only when enableDebuggingHandlers is also set to true. ([#98458](https://github.com/kubernetes/kubernetes/pull/98458), [@SaranBalaji90](https://github.com/SaranBalaji90)) [SIG Node]
+- The BoundServiceAccountTokenVolume feature has been promoted to beta, and enabled by default.
+  - This changes the tokens provided to containers at `/var/run/secrets/kubernetes.io/serviceaccount/token` to be time-limited, auto-refreshed, and invalidated when the containing pod is deleted.
+  - Clients should reload the token from disk periodically (once per minute is recommended) to ensure they continue to use a valid token. `k8s.io/client-go` version v11.0.0+ and v0.15.0+ reload tokens automatically.
+  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be shortened to 1 hour by starting `kube-apiserver` with `--service-account-extend-token-expiration=false`. ([#95667](https://github.com/kubernetes/kubernetes/pull/95667), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle and Testing]
+
+### Feature
+
+- A new histogram metric to track the time it took to delete a job by the ttl-after-finished controller ([#98676](https://github.com/kubernetes/kubernetes/pull/98676), [@ahg-g](https://github.com/ahg-g)) [SIG Apps and Instrumentation]
+- AWS cloudprovider supports auto-discovering subnets without any kubernetes.io/cluster/<clusterName> tags. It also supports additional service annotation service.beta.kubernetes.io/aws-load-balancer-subnets to manually configure the subnets. ([#97431](https://github.com/kubernetes/kubernetes/pull/97431), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
+- Add --permit-address-sharing flag to kube-apiserver to listen with SO_REUSEADDR. While allowing to listen on wildcard IPs like 0.0.0.0 and specific IPs in parallel, it avoid waiting for the kernel to release socket in TIME_WAIT state, and hence, considably reducing kube-apiserver restart times under certain conditions. ([#93861](https://github.com/kubernetes/kubernetes/pull/93861), [@sttts](https://github.com/sttts)) [SIG API Machinery]
+- Add `csi_operations_seconds` metric on kubelet that exposes CSI operations duration and status for node CSI operations. ([#98979](https://github.com/kubernetes/kubernetes/pull/98979), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Instrumentation and Storage]
+- Add `migrated` field into `storage_operation_duration_seconds` metric ([#99050](https://github.com/kubernetes/kubernetes/pull/99050), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Instrumentation and Storage]
+- Add bash-completion for comma separated list on `kubectl get` ([#98301](https://github.com/kubernetes/kubernetes/pull/98301), [@phil9909](https://github.com/phil9909)) [SIG CLI]
+- Added support for installing arm64 node artifacts. ([#99242](https://github.com/kubernetes/kubernetes/pull/99242), [@liu-cong](https://github.com/liu-cong)) [SIG Cloud Provider]
+- Feature gate RootCAConfigMap is graduated to GA in 1.21 and will be removed in 1.22. ([#98033](https://github.com/kubernetes/kubernetes/pull/98033), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Auth]
+- Kubeadm: during "init" and "join" perform preflight validation on the host / node name and throw warnings if a name is not compliant ([#99194](https://github.com/kubernetes/kubernetes/pull/99194), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubectl: `kubectl get` will omit managed fields by default now. Users could set `--show-managed-fields` to true to show managedFields when the output format is either `json` or `yaml`. ([#96878](https://github.com/kubernetes/kubernetes/pull/96878), [@knight42](https://github.com/knight42)) [SIG CLI and Testing]
+- Metrics can now be disabled explicitly via a command line flag (i.e. '--disabled-metrics=bad_metric1,bad_metric2') ([#99217](https://github.com/kubernetes/kubernetes/pull/99217), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- TTLAfterFinished is now beta and enabled by default ([#98678](https://github.com/kubernetes/kubernetes/pull/98678), [@ahg-g](https://github.com/ahg-g)) [SIG Apps and Auth]
+- The `RunAsGroup` feature has been promoted to GA in this release. ([#94641](https://github.com/kubernetes/kubernetes/pull/94641), [@krmayankk](https://github.com/krmayankk)) [SIG Auth and Node]
+- Turn CronJobControllerV2 on by default. ([#98878](https://github.com/kubernetes/kubernetes/pull/98878), [@soltysh](https://github.com/soltysh)) [SIG Apps]
+- UDP protocol support for Agnhost connect subcommand ([#98639](https://github.com/kubernetes/kubernetes/pull/98639), [@knabben](https://github.com/knabben)) [SIG Testing]
+- Upgrades `IPv6Dualstack` to `Beta` and turns it on by default. Clusters new and existing will not be affected until user starting adding secondary pod and service cidrs cli flags as described here: https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/563-dual-stack ([#98969](https://github.com/kubernetes/kubernetes/pull/98969), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, Cloud Provider, Network and Node]
+
+### Documentation
+
+- Fix ALPHA stability level reference link ([#98641](https://github.com/kubernetes/kubernetes/pull/98641), [@Jeffwan](https://github.com/Jeffwan)) [SIG Auth, Cloud Provider, Instrumentation and Storage]
+
+### Failing Test
+
+- Escape the special characters like `[`, `]` and ` ` that exist in vsphere windows path ([#98830](https://github.com/kubernetes/kubernetes/pull/98830), [@liyanhui1228](https://github.com/liyanhui1228)) [SIG Storage and Windows]
+- Kube-proxy: fix a bug on UDP NodePort Services where stale conntrack entries may blackhole the traffic directed to the NodePort. ([#98305](https://github.com/kubernetes/kubernetes/pull/98305), [@aojea](https://github.com/aojea)) [SIG Network]
+
+### Bug or Regression
+
+- Add missing --kube-api-content-type in kubemark hollow template ([#98911](https://github.com/kubernetes/kubernetes/pull/98911), [@Jeffwan](https://github.com/Jeffwan)) [SIG Scalability and Testing]
+- Avoid duplicate error messages when runing kubectl edit quota ([#98201](https://github.com/kubernetes/kubernetes/pull/98201), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery and Apps]
+- Cleanup subnet in frontend IP configs to prevent huge subnet request bodies in some scenarios. ([#98133](https://github.com/kubernetes/kubernetes/pull/98133), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Fix errors when accessing Windows container stats for Dockershim ([#98510](https://github.com/kubernetes/kubernetes/pull/98510), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node and Windows]
+- Fixes spurious errors about IPv6 in kube-proxy logs on nodes with IPv6 disabled. ([#99127](https://github.com/kubernetes/kubernetes/pull/99127), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
+- In the method that ensures that the docker and containerd are in the correct containers with the proper OOM score set up, fixed the bug of identifying containerd process. ([#97888](https://github.com/kubernetes/kubernetes/pull/97888), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
+- Kubelet now cleans up orphaned volume directories automatically ([#95301](https://github.com/kubernetes/kubernetes/pull/95301), [@lorenz](https://github.com/lorenz)) [SIG Node and Storage]
+- When dynamically provisioning Azure File volumes for a premium account, the requested size will be set to 100GB if the request is initially lower than this value to accommodate Azure File requirements. ([#99122](https://github.com/kubernetes/kubernetes/pull/99122), [@huffmanca](https://github.com/huffmanca)) [SIG Cloud Provider and Storage]
+
+### Other (Cleanup or Flake)
+
+- APIs for kubelet annotations and labels from k8s.io/kubernetes/pkg/kubelet/apis are now available under k8s.io/kubelet/pkg/apis/ ([#98931](https://github.com/kubernetes/kubernetes/pull/98931), [@michaelbeaumont](https://github.com/michaelbeaumont)) [SIG Apps, Auth and Node]
+- Migrate `pkg/kubelet/(pod, pleg)` to structured logging ([#98990](https://github.com/kubernetes/kubernetes/pull/98990), [@gjkim42](https://github.com/gjkim42)) [SIG Instrumentation and Node]
+- Migrate pkg/kubelet/nodestatus to structured logging ([#99001](https://github.com/kubernetes/kubernetes/pull/99001), [@QiWang19](https://github.com/QiWang19)) [SIG Node]
+- Migrate pkg/kubelet/server logs to structured logging ([#98643](https://github.com/kubernetes/kubernetes/pull/98643), [@chenyw1990](https://github.com/chenyw1990)) [SIG Node]
+- Migrate proxy/winkernel/proxier.go logs to structured logging ([#98001](https://github.com/kubernetes/kubernetes/pull/98001), [@JornShen](https://github.com/JornShen)) [SIG Network and Windows]
+- Migrate scheduling_queue.go to structured logging ([#98358](https://github.com/kubernetes/kubernetes/pull/98358), [@tanjing2020](https://github.com/tanjing2020)) [SIG Scheduling]
+- Several flags related to the deprecated dockershim which are present in the kubelet command line are now deprecated. ([#98730](https://github.com/kubernetes/kubernetes/pull/98730), [@dims](https://github.com/dims)) [SIG Node]
+- The deprecated feature gates `CSIDriverRegistry`, `BlockVolume` and `CSIBlockVolume` are now unconditionally enabled and can no longer be specified in component invocations. ([#98021](https://github.com/kubernetes/kubernetes/pull/98021), [@gavinfish](https://github.com/gavinfish)) [SIG Storage]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.0.3
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.21.0-alpha.3
+
+
+## Downloads for v1.21.0-alpha.3
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes.tar.gz) | 704ec916a1dbd134c54184d2652671f80ae09274f9d23dbbed312944ebeccbc173e2e6b6949b38bdbbfdaf8aa032844deead5efeda1b3150f9751386d9184bc8
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-src.tar.gz) | 57db9e7560cfc9c10e7059cb5faf9c4bd5eb8f9b7964f44f000a417021cf80873184b774e7c66c80d4aba84c14080c6bc335618db3d2e5f276436ae065e25408
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | e2706efda92d5cf4f8b69503bb2f7703a8754407eff7f199bb77847838070e720e5f572126c14daa4c0c03b59bb1a63c1dfdeb6e936a40eff1d5497e871e3409
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-386.tar.gz) | 007bb23c576356ed0890bdfd25a0f98d552599e0ffec19fb982591183c7c1f216d8a3ffa3abf15216be12ae5c4b91fdcd48a7306a2d26b007b86a6abd553fc61
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | 39504b0c610348beba60e8866fff265bad58034f74504951cd894c151a248db718d10f77ebc83f2c38b2d517f8513a46325b38889eefa261ca6dbffeceba50ff
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | 30bc2c40d0c759365422ad1651a6fb35909be771f463c5b971caf401f9209525d05256ab70c807e88628dd357c2896745eecf13eda0b748464da97d0a5ef2066
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | 085cdf574dc8fd33ece667130b8c45830b522a07860e03a2384283b1adea73a9652ef3dfaa566e69ee00aea1a6461608814b3ce7a3f703e4a934304f7ae12f97
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | b34b845037d83ea7b3e2d80a9ede4f889b71b17b93b1445f0d936a36e98c13ed6ada125630a68d9243a5fcd311ee37cdcc0c05da484da8488ea5060bc529dbfc
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | c4758adc7a404b776556efaa79655db2a70777c562145d6ea6887f3335988367a0c2fcd4383e469340f2a768b22e786951de212805ca1cb91104d41c21e0c9ce
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-windows-386.tar.gz) | f51edc79702bbd1d9cb3a672852a405e11b20feeab64c5411a7e85c9af304960663eb6b23ef96e0f8c44a722fecf58cb6d700ea2c42c05b3269d8efd5ad803f2
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | 6a3507ce4ac40a0dc7e4720538863fa15f8faf025085a032f34b8fa0f6fa4e8c26849baf649b5b32829b9182e04f82721b13950d31cf218c35be6bf1c05d6abf
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | 19181d162dfb0b30236e2bf1111000e037eece87c037ca2b24622ca94cb88db86aa4da4ca533522518b209bc9983bbfd6b880a7898e0da96b33f3f6c4690539b
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | 42a02f9e08a78ad5da6e5fa1ab12bf1e3c967c472fdbdadbd8746586da74dc8093682ba8513ff2a5301393c47ee9021b860e88ada56b13da386ef485708e46ca
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | 3c8ba8eb02f70061689bd7fab7813542005efe2edc6cfc6b7aecd03ffedf0b81819ad91d69fff588e83023d595eefbfe636aa55e1856add8733bf42fff3c748f
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | cd9e6537450411c39a06fd0b5819db3d16b668d403fb3627ec32c0e32dd1c4860e942934578ca0e1d1b8e6f21f450ff81e37e0cd46ff5c5faf7847ab074aefc5
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | ada3f65e53bc0e0c0229694dd48c425388089d6d77111a62476d1b08f6ad1d8ab3d60b9ed7d95ac1b42c2c6be8dc0618f40679717160769743c43583d8452362
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | ae0fec6aa59e49624b55d9a11c12fdf717ddfe04bdfd4f69965d03004a34e52ee4a3e83f7b61d0c6a86f43b72c99f3decb195b39ae529ef30526d18ec5f58f83
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | 9a48c140ab53b7ed8ecec6903988a1a474efc16d2538e5974bc9a12f0c9190be78c4f9e326bf4e982d0b7045a80b99dd0fda7e9b650663be5b89bfd991596746
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | 6912adbc9300344bea470d6435f7b387bfce59767078c11728ce59faf47cd3f72b41b9604fcc5cda45e9816fe939fbe2fb33e52a773e6ff2dfa9a615b4df6141
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | d66dccfe3e6ed6d81567c70703f15375a53992b3a5e2814b98c32e581b861ad95912e03ed2562415d087624c008038bb4a816611fa255442ae752968ea15856b
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | ad8c69a28f1fbafa3f1cb54909bfd3fc22b104bed63d7ca2b296208c9d43eb5f2943a0ff267da4c185186cdd9f7f77b315cd7f5f1bf9858c0bf42eceb9ac3c58
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | 91d723aa848a9cb028f5bcb41090ca346fb973961521d025c4399164de2c8029b57ca2c4daca560d3c782c05265d2eb0edb0abcce6f23d3efbecf2316a54d650
+
+## Changelog since v1.21.0-alpha.2
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Newly provisioned PVs by gce-pd will no longer have the beta FailureDomain label. gce-pd volume plugin will start to have GA topology label instead. ([#98700](https://github.com/kubernetes/kubernetes/pull/98700), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider, Storage and Testing]
+  - Remove alpha CSIMigrationXXComplete flag and add alpha InTreePluginXXUnregister flag. Deprecate CSIMigrationvSphereComplete flag and it will be removed in 1.22. ([#98243](https://github.com/kubernetes/kubernetes/pull/98243), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Node and Storage]
+ 
+## Changes by Kind
+
+### API Change
+
+- Adds support for portRange / EndPort in Network Policy ([#97058](https://github.com/kubernetes/kubernetes/pull/97058), [@rikatz](https://github.com/rikatz)) [SIG Apps and Network]
+- Fixes using server-side apply with APIService resources ([#98576](https://github.com/kubernetes/kubernetes/pull/98576), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Apps and Testing]
+- Kubernetes is now built using go1.15.7 ([#98363](https://github.com/kubernetes/kubernetes/pull/98363), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Node, Release and Testing]
+- Scheduler extender filter interface now can report unresolvable failed nodes in the new field `FailedAndUnresolvableNodes` of  `ExtenderFilterResult` struct. Nodes in this map will be skipped in the preemption phase. ([#92866](https://github.com/kubernetes/kubernetes/pull/92866), [@cofyc](https://github.com/cofyc)) [SIG Scheduling]
+
+### Feature
+
+- A lease can only attach up to 10k objects. ([#98257](https://github.com/kubernetes/kubernetes/pull/98257), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery]
+- Add ignore-errors flag for drain, support none-break drain in group ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan)) [SIG CLI]
+- Base-images: Update to debian-iptables:buster-v1.4.0
+  - Uses iptables 1.8.5
+  - base-images: Update to debian-base:buster-v1.3.0
+  - cluster/images/etcd: Build etcd:3.4.13-2 image
+    - Uses debian-base:buster-v1.3.0 ([#98401](https://github.com/kubernetes/kubernetes/pull/98401), [@pacoxu](https://github.com/pacoxu)) [SIG Testing]
+- Export NewDebuggingRoundTripper function and DebugLevel options in the k8s.io/client-go/transport package. ([#98324](https://github.com/kubernetes/kubernetes/pull/98324), [@atosatto](https://github.com/atosatto)) [SIG API Machinery]
+- Kubectl wait ensures that observedGeneration >= generation if applicable ([#97408](https://github.com/kubernetes/kubernetes/pull/97408), [@KnicKnic](https://github.com/KnicKnic)) [SIG CLI]
+- Kubernetes is now built using go1.15.8 ([#98834](https://github.com/kubernetes/kubernetes/pull/98834), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Release and Testing]
+- New admission controller "denyserviceexternalips" is available.  Clusters which do not *need- the Service "externalIPs" feature should enable this controller and be more secure. ([#97395](https://github.com/kubernetes/kubernetes/pull/97395), [@thockin](https://github.com/thockin)) [SIG API Machinery]
+- Overall, enable the feature of `PreferNominatedNode` will  improve the performance of scheduling where preemption might frequently happen, but in theory, enable the feature of `PreferNominatedNode`, the pod might not be scheduled to the best candidate node in the cluster. ([#93179](https://github.com/kubernetes/kubernetes/pull/93179), [@chendave](https://github.com/chendave)) [SIG Scheduling and Testing]
+- Pause image upgraded to 3.4.1 in kubelet and kubeadm for both Linux and Windows. ([#98205](https://github.com/kubernetes/kubernetes/pull/98205), [@pacoxu](https://github.com/pacoxu)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Testing and Windows]
+- The `ServiceAccountIssuerDiscovery` feature has graduated to GA, and is unconditionally enabled. The `ServiceAccountIssuerDiscovery` feature-gate will be removed in 1.22. ([#98553](https://github.com/kubernetes/kubernetes/pull/98553), [@mtaufen](https://github.com/mtaufen)) [SIG API Machinery, Auth and Testing]
+
+### Documentation
+
+- Feat: azure file migration go beta in 1.21. Feature gates CSIMigration to Beta (on by default) and CSIMigrationAzureFile to Beta (off by default since it requires installation of the AzureFile CSI Driver)
+  The in-tree AzureFile plugin "kubernetes.io/azure-file" is now deprecated and will be removed in 1.23. Users should enable CSIMigration + CSIMigrationAzureFile features and install the AzureFile CSI Driver (https://github.com/kubernetes-sigs/azurefile-csi-driver) to avoid disruption to existing Pod and PVC objects at that time.
+  Users should start using the AzureFile CSI Driver directly for any new volumes. ([#96293](https://github.com/kubernetes/kubernetes/pull/96293), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+
+### Failing Test
+
+- Kubelet: the HostPort implementation in dockershim was not taking into consideration the HostIP field, causing that the same HostPort can not be used with different IP addresses.
+  This bug causes the conformance test "HostPort validates that there is no conflict between pods with same hostPort but different hostIP and protocol" to fail. ([#98755](https://github.com/kubernetes/kubernetes/pull/98755), [@aojea](https://github.com/aojea)) [SIG Cloud Provider, Network and Node]
+
+### Bug or Regression
+
+- Fix NPE in ephemeral storage eviction ([#98261](https://github.com/kubernetes/kubernetes/pull/98261), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fixed a bug that on k8s nodes, when the policy of INPUT chain in filter table is not ACCEPT, healthcheck nodeport would not work.
+  Added iptables rules to allow healthcheck nodeport traffic. ([#97824](https://github.com/kubernetes/kubernetes/pull/97824), [@hanlins](https://github.com/hanlins)) [SIG Network]
+- Fixed kube-proxy container image architecture for non amd64 images. ([#98526](https://github.com/kubernetes/kubernetes/pull/98526), [@saschagrunert](https://github.com/saschagrunert)) [SIG API Machinery, Release and Testing]
+- Fixed provisioning of Cinder volumes migrated to CSI when StorageClass with AllowedTopologies was used. ([#98311](https://github.com/kubernetes/kubernetes/pull/98311), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixes a panic in the disruption budget controller for PDB objects with invalid selectors ([#98750](https://github.com/kubernetes/kubernetes/pull/98750), [@mortent](https://github.com/mortent)) [SIG Apps]
+- Fixes connection errors when using `--volume-host-cidr-denylist` or `--volume-host-allow-local-loopback` ([#98436](https://github.com/kubernetes/kubernetes/pull/98436), [@liggitt](https://github.com/liggitt)) [SIG Network and Storage]
 - If the user specifies an invalid timeout in the request URL, the request will be aborted with an HTTP 400.
-  - If the user specifies a timeout in the request URL that exceeds the maximum request deadline allowed by the apiserver, the request will be aborted with an HTTP 400. ([#96061](https://github.com/kubernetes/kubernetes/pull/96061), [@tkashem](https://github.com/tkashem)) [SIG API Machinery, Network and Testing]
-- Improve error messages related to nodePort endpoint changes conntrack entries cleanup. ([#96251](https://github.com/kubernetes/kubernetes/pull/96251), [@ravens](https://github.com/ravens)) [SIG Network]
-- Print go stack traces at -v=4 and not -v=2 ([#94663](https://github.com/kubernetes/kubernetes/pull/94663), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Remove ready file and its directory (which is created during volume SetUp) during emptyDir volume TearDown. ([#95770](https://github.com/kubernetes/kubernetes/pull/95770), [@jingxu97](https://github.com/jingxu97)) [SIG Storage]
-- Resolves non-deterministic behavior of the garbage collection controller when ownerReferences with incorrect data are encountered. Events with a reason of `OwnerRefInvalidNamespace` are recorded when namespace mismatches between child and owner objects are detected.
-  - A namespaced object with an ownerReference referencing a uid of a namespaced kind which does not exist in the same namespace is now consistently treated as though that owner does not exist, and the child object is deleted.
-  - A cluster-scoped object with an ownerReference referencing a uid of a namespaced kind is now consistently treated as though that owner is not resolvable, and the child object is ignored by the garbage collector. ([#92743](https://github.com/kubernetes/kubernetes/pull/92743), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-- Skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:162]: Driver azure-disk doesn't support snapshot type DynamicSnapshot -- skipping
-  skip [k8s.io/kubernetes@v1.19.0/test/e2e/storage/testsuites/base.go:185]: Driver azure-disk doesn't support ntfs -- skipping ([#96144](https://github.com/kubernetes/kubernetes/pull/96144), [@qinpingli](https://github.com/qinpingli)) [SIG Storage and Testing]
-- The AWS network load balancer attributes can now be specified during service creation ([#95247](https://github.com/kubernetes/kubernetes/pull/95247), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- The kube-apiserver will no longer serve APIs that should have been deleted in GA non-alpha levels.  Alpha levels will continue to serve the removed APIs so that CI doesn't immediately break. ([#96525](https://github.com/kubernetes/kubernetes/pull/96525), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
-- Update max azure data disk count map ([#96308](https://github.com/kubernetes/kubernetes/pull/96308), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Update the route table tag in the route reconcile loop ([#96545](https://github.com/kubernetes/kubernetes/pull/96545), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Volume binding: report UnschedulableAndUnresolvable status instead of an error when bound PVs not found ([#95541](https://github.com/kubernetes/kubernetes/pull/95541), [@cofyc](https://github.com/cofyc)) [SIG Apps, Scheduling and Storage]
-- [kubectl] Fail when local source file doesn't exist ([#90333](https://github.com/kubernetes/kubernetes/pull/90333), [@bamarni](https://github.com/bamarni)) [SIG CLI]
+  - in cases where the client specifies a timeout in the request URL, the overall request deadline is shortened now since the deadline is setup as soon as the request is received by the apiserver. ([#96901](https://github.com/kubernetes/kubernetes/pull/96901), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]
+- Kubeadm: Some text in the `kubeadm upgrade plan` output has changed. If you have scripts or other automation that parses this output, please review these changes and update your scripts to account for the new output. ([#98728](https://github.com/kubernetes/kubernetes/pull/98728), [@stmcginnis](https://github.com/stmcginnis)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where external credentials in an existing admin.conf prevented the CA certificate to be written in the cluster-info ConfigMap. ([#98882](https://github.com/kubernetes/kubernetes/pull/98882), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
+- Kubeadm: fix bad token placeholder text in "config print *-defaults --help" ([#98839](https://github.com/kubernetes/kubernetes/pull/98839), [@Mattias-](https://github.com/Mattias-)) [SIG Cluster Lifecycle]
+- Kubeadm: get k8s CI version markers from k8s infra bucket ([#98836](https://github.com/kubernetes/kubernetes/pull/98836), [@hasheddan](https://github.com/hasheddan)) [SIG Cluster Lifecycle and Release]
+- Mitigate CVE-2020-8555 for kube-up using GCE by preventing local loopback folume hosts. ([#97934](https://github.com/kubernetes/kubernetes/pull/97934), [@mattcary](https://github.com/mattcary)) [SIG Cloud Provider and Storage]
+- Remove CSI topology from migrated in-tree gcepd volume. ([#97823](https://github.com/kubernetes/kubernetes/pull/97823), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider and Storage]
+- Sync node status during kubelet node shutdown.
+  Adds an pod admission handler that rejects new pods when the node is in progress of shutting down. ([#98005](https://github.com/kubernetes/kubernetes/pull/98005), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Truncates a message if it hits the NoteLengthLimit when the scheduler records an event for the pod that indicates the pod has failed to schedule. ([#98715](https://github.com/kubernetes/kubernetes/pull/98715), [@carlory](https://github.com/carlory)) [SIG Scheduling]
+- We will no longer automatically delete all data when a failure is detected during creation of the volume data file on a CSI volume. Now we will only remove the data file and volume path. ([#96021](https://github.com/kubernetes/kubernetes/pull/96021), [@huffmanca](https://github.com/huffmanca)) [SIG Storage]
 
 ### Other (Cleanup or Flake)
 
-- Handle slow cronjob lister in cronjob controller v2 and improve memory footprint. ([#96443](https://github.com/kubernetes/kubernetes/pull/96443), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps]
-- --redirect-container-streaming is no longer functional. The flag will be removed in v1.22 ([#95935](https://github.com/kubernetes/kubernetes/pull/95935), [@tallclair](https://github.com/tallclair)) [SIG Node]
-- A new metric `requestAbortsTotal` has been introduced that counts aborted requests for each `group`, `version`, `verb`, `resource`, `subresource` and `scope`. ([#95002](https://github.com/kubernetes/kubernetes/pull/95002), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery, Cloud Provider, Instrumentation and Scheduling]
-- API priority and fairness metrics use snake_case in label names ([#96236](https://github.com/kubernetes/kubernetes/pull/96236), [@adtac](https://github.com/adtac)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Testing]
-- Applies translations on all command descriptions ([#95439](https://github.com/kubernetes/kubernetes/pull/95439), [@HerrNaN](https://github.com/HerrNaN)) [SIG CLI]
-- Changed: default "Accept-Encoding" header removed from HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes ([#96127](https://github.com/kubernetes/kubernetes/pull/96127), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Generators for services are removed from kubectl ([#95256](https://github.com/kubernetes/kubernetes/pull/95256), [@Git-Jiro](https://github.com/Git-Jiro)) [SIG CLI]
-- Introduce kubectl-convert plugin. ([#96190](https://github.com/kubernetes/kubernetes/pull/96190), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- Kube-scheduler now logs processed component config at startup ([#96426](https://github.com/kubernetes/kubernetes/pull/96426), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- NONE ([#96179](https://github.com/kubernetes/kubernetes/pull/96179), [@bbyrne5](https://github.com/bbyrne5)) [SIG Network]
-- Users will now be able to configure all supported values for AWS NLB health check interval and thresholds for new resources. ([#96312](https://github.com/kubernetes/kubernetes/pull/96312), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
+- Fix the description of command line flags that can override --config ([#98254](https://github.com/kubernetes/kubernetes/pull/98254), [@changshuchao](https://github.com/changshuchao)) [SIG Scheduling]
+- Migrate scheduler/taint_manager.go structured logging ([#98259](https://github.com/kubernetes/kubernetes/pull/98259), [@tanjing2020](https://github.com/tanjing2020)) [SIG Apps]
+- Migrate staging/src/k8s.io/apiserver/pkg/admission logs to  structured logging ([#98138](https://github.com/kubernetes/kubernetes/pull/98138), [@lala123912](https://github.com/lala123912)) [SIG API Machinery]
+- Resolves flakes in the Ingress conformance tests due to conflicts with controllers updating the Ingress object ([#98430](https://github.com/kubernetes/kubernetes/pull/98430), [@liggitt](https://github.com/liggitt)) [SIG Network and Testing]
+- The default delegating authorization options now allow unauthenticated access to healthz, readyz, and livez.  A system:masters user connecting to an authz delegator will not perform an authz check. ([#98325](https://github.com/kubernetes/kubernetes/pull/98325), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth, Cloud Provider and Scheduling]
+- The e2e suite can be instructed not to wait for pods in kube-system to be ready or for all nodes to be ready by passing `--allowed-not-ready-nodes=-1` when invoking the e2e.test program. This allows callers to run subsets of the e2e suite in scenarios other than perfectly healthy clusters. ([#98781](https://github.com/kubernetes/kubernetes/pull/98781), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- The feature gates `WindowsGMSA` and `WindowsRunAsUserName` that are GA since v1.18 are now removed. ([#96531](https://github.com/kubernetes/kubernetes/pull/96531), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Node and Windows]
+- The new `-gce-zones` flag on the `e2e.test` binary instructs tests that check for information about how the cluster interacts with the cloud to limit their queries to the provided zone list. If not specified, the current behavior of asking the cloud provider for all available zones in multi zone clusters is preserved. ([#98787](https://github.com/kubernetes/kubernetes/pull/98787), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Cluster Lifecycle and Testing]
 
 ## Dependencies
 
 ### Added
-- cloud.google.com/go/firestore: v1.1.0
-- github.com/armon/go-metrics: [f0300d1](https://github.com/armon/go-metrics/tree/f0300d1)
-- github.com/armon/go-radix: [7fddfc3](https://github.com/armon/go-radix/tree/7fddfc3)
-- github.com/bketelsen/crypt: [5cbc8cc](https://github.com/bketelsen/crypt/tree/5cbc8cc)
-- github.com/hashicorp/consul/api: [v1.1.0](https://github.com/hashicorp/consul/api/tree/v1.1.0)
-- github.com/hashicorp/consul/sdk: [v0.1.1](https://github.com/hashicorp/consul/sdk/tree/v0.1.1)
-- github.com/hashicorp/errwrap: [v1.0.0](https://github.com/hashicorp/errwrap/tree/v1.0.0)
-- github.com/hashicorp/go-cleanhttp: [v0.5.1](https://github.com/hashicorp/go-cleanhttp/tree/v0.5.1)
-- github.com/hashicorp/go-immutable-radix: [v1.0.0](https://github.com/hashicorp/go-immutable-radix/tree/v1.0.0)
-- github.com/hashicorp/go-msgpack: [v0.5.3](https://github.com/hashicorp/go-msgpack/tree/v0.5.3)
-- github.com/hashicorp/go-multierror: [v1.0.0](https://github.com/hashicorp/go-multierror/tree/v1.0.0)
-- github.com/hashicorp/go-rootcerts: [v1.0.0](https://github.com/hashicorp/go-rootcerts/tree/v1.0.0)
-- github.com/hashicorp/go-sockaddr: [v1.0.0](https://github.com/hashicorp/go-sockaddr/tree/v1.0.0)
-- github.com/hashicorp/go-uuid: [v1.0.1](https://github.com/hashicorp/go-uuid/tree/v1.0.1)
-- github.com/hashicorp/go.net: [v0.0.1](https://github.com/hashicorp/go.net/tree/v0.0.1)
-- github.com/hashicorp/logutils: [v1.0.0](https://github.com/hashicorp/logutils/tree/v1.0.0)
-- github.com/hashicorp/mdns: [v1.0.0](https://github.com/hashicorp/mdns/tree/v1.0.0)
-- github.com/hashicorp/memberlist: [v0.1.3](https://github.com/hashicorp/memberlist/tree/v0.1.3)
-- github.com/hashicorp/serf: [v0.8.2](https://github.com/hashicorp/serf/tree/v0.8.2)
-- github.com/mitchellh/cli: [v1.0.0](https://github.com/mitchellh/cli/tree/v1.0.0)
-- github.com/mitchellh/go-testing-interface: [v1.0.0](https://github.com/mitchellh/go-testing-interface/tree/v1.0.0)
-- github.com/mitchellh/gox: [v0.4.0](https://github.com/mitchellh/gox/tree/v0.4.0)
-- github.com/mitchellh/iochan: [v1.0.0](https://github.com/mitchellh/iochan/tree/v1.0.0)
-- github.com/pascaldekloe/goe: [57f6aae](https://github.com/pascaldekloe/goe/tree/57f6aae)
-- github.com/posener/complete: [v1.1.1](https://github.com/posener/complete/tree/v1.1.1)
-- github.com/ryanuber/columnize: [9b3edd6](https://github.com/ryanuber/columnize/tree/9b3edd6)
-- github.com/sean-/seed: [e2103e2](https://github.com/sean-/seed/tree/e2103e2)
-- github.com/subosito/gotenv: [v1.2.0](https://github.com/subosito/gotenv/tree/v1.2.0)
-- github.com/willf/bitset: [d5bec33](https://github.com/willf/bitset/tree/d5bec33)
-- gopkg.in/ini.v1: v1.51.0
-- gopkg.in/yaml.v3: 9f266ea
+- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
+
+### Changed
+- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
+- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
+- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
+- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
+- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
+- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
+- golang.org/x/sync: cd5d95a → 67f06af
+- golang.org/x/tools: c1934b7 → 113979e
+- k8s.io/klog/v2: v2.4.0 → v2.5.0
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
+
+### Removed
+- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
+
+
+
+# v1.21.0-alpha.2
+
+
+## Downloads for v1.21.0-alpha.2
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes.tar.gz) | 6836f6c8514253fe0831fd171fc4ed92eb6d9a773491c8dc82b90d171a1b10076bd6bfaea56ec1e199c5f46c273265bdb9f174f0b2d99c5af1de4c99b862329e
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-src.tar.gz) | d137694804741a05ab09e5f9a418448b66aba0146c028eafce61bcd9d7c276521e345ce9223ffbc703e8172041d58dfc56a3242a4df3686f24905a4541fcd306
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | 9478b047a97717953f365c13a098feb7e3cb30a3df22e1b82aa945f2208dcc5cb90afc441ba059a3ae7aafb4ee000ec3a52dc65a8c043a5ac7255a391c875330
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-386.tar.gz) | 44c8dd4b1ddfc256d35786c8abf45b0eb5f0794f5e310d2efc865748adddc50e8bf38aa71295ae8a82884cb65f2e0b9b0737b000f96fd8f2d5c19971d7c4d8e8
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | e1291989892769de6b978c17b8612b94da6f3b735a4d895100af622ca9ebb968c75548afea7ab00445869625dd0da3afec979e333afbb445805f5d31c1c13cc7
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | 3c4bcb8cbe73822d68a2f62553a364e20bec56b638c71d0f58679b4f4b277d809142346f18506914e694f6122a3e0f767eab20b7b1c4dbb79e4c5089981ae0f1
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | 9389974a790268522e187f5ba5237f3ee4684118c7db76bc3d4164de71d8208702747ec333b204c7a78073ab42553cbbce13a1883fab4fec617e093b05fab332
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | 63399e53a083b5af3816c28ff162c9de6b64c75da4647f0d6bbaf97afdf896823cb1e556f2abac75c6516072293026d3ff9f30676fd75143ac6ca3f4d21f4327
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | 50898f197a9d923971ff9046c9f02779b57f7b3cea7da02f3ea9bab8c08d65a9c4a7531a2470fa14783460f52111a52b96ebf916c0a1d8215b4070e4e861c1b0
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-windows-386.tar.gz) | a7743e839e1aa19f5ee20b6ee5000ac8ef9e624ac5be63bb574fad6992e4b9167193ed07e03c9bc524e88bfeed66c95341a38a03bff1b10bc9910345f33019f0
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | 5f1d19c230bd3542866d16051808d184e9dd3e2f8c001ed4cee7b5df91f872380c2bf56a3add8c9413ead9d8c369efce2bcab4412174df9b823d3592677bf74e
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | ef2cac10febde231aeb6f131e589450c560eeaab8046b49504127a091cddc17bc518c2ad56894a6a033033ab6fc6e121b1cc23691683bc36f45fe6b1dd8e0510
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | d11c9730307f08e80b2b8a7c64c3e9a9e43c622002e377dfe3a386f4541e24adc79a199a6f280f40298bb36793194fd44ed45defe8a3ee54a9cb1386bc26e905
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | 28f8c32bf98ee1add7edf5d341c3bac1afc0085f90dcbbfb8b27a92087f13e2b53c327c8935ee29bf1dc3160655b32bbe3e29d5741a8124a3848a777e7d42933
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | 99ae8d44b0de3518c27fa8bbddd2ecf053dfb789fb9d65f8a4ecf4c8331cf63d2f09a41c2bcd5573247d5f66a1b2e51944379df1715017d920d521b98589508a
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | f8c0e954a2dfc6845614488dadeed069cc7f3f08e33c351d7a77c6ef97867af590932e8576d12998a820a0e4d35d2eee797c764e2810f09ab1e90a5acaeaad33
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | c5456d50bfbe0d75fb150b3662ed7468a0abd3970792c447824f326894382c47bbd3a2cc5a290f691c8c09585ff6fe505ab86b4aff2b7e5ccee11b5e6354ae6c
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | 335b5cd8672e053302fd94d932fb2fa2e48eeeb1799650b3f93acdfa635e03a8453637569ab710c46885c8317759f4c60aaaf24dca9817d9fa47500fe4a3ca53
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | 3ee87dbeed8ace9351ac89bdaf7274dd10b4faec3ceba0825f690ec7a2bb7eb7c634274a1065a0939eec8ff3e43f72385f058f4ec141841550109e775bc5eff9
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | 6956f965b8d719b164214ec9195fdb2c776b907fe6d2c524082f00c27872a73475927fd7d2a994045ce78f6ad2aa5aeaf1eb5514df1810d2cfe342fd4e5ce4a1
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | 3b643aa905c709c57083c28dd9e8ffd88cb64466cda1499da7fc54176b775003e08b9c7a07b0964064df67c8142f6f1e6c13bfc261bd65fb064049920bfa57d0
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | b2e6d6fb0091f2541f9925018c2bdbb0138a95bab06b4c6b38abf4b7144b2575422263b78fb3c6fd09e76d90a25a8d35a6d4720dc169794d42c95aa22ecc6d5f
+
+## Changelog since v1.21.0-alpha.1
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Remove storage metrics `storage_operation_errors_total`, since we already have `storage_operation_status_count`.And add new field `status` for `storage_operation_duration_seconds`, so that we can know about all status storage operation latency. ([#98332](https://github.com/kubernetes/kubernetes/pull/98332), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
+ 
+## Changes by Kind
+
+### Deprecation
+
+- Remove the TokenRequest and TokenRequestProjection feature gates ([#97148](https://github.com/kubernetes/kubernetes/pull/97148), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- Removing experimental windows container hyper-v support with Docker ([#97141](https://github.com/kubernetes/kubernetes/pull/97141), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
+- The `export` query parameter (inconsistently supported by API resources and deprecated in v1.14) is fully removed.  Requests setting this query parameter will now receive a 400 status response. ([#98312](https://github.com/kubernetes/kubernetes/pull/98312), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
+
+### API Change
+
+- Enable SPDY pings to keep connections alive, so that `kubectl exec` and `kubectl port-forward` won't be interrupted. ([#97083](https://github.com/kubernetes/kubernetes/pull/97083), [@knight42](https://github.com/knight42)) [SIG API Machinery and CLI]
+
+### Documentation
+
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
+- Set kubelet option `--volume-stats-agg-period` to negative value to disable volume calculations. ([#96675](https://github.com/kubernetes/kubernetes/pull/96675), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
+
+### Bug or Regression
+
+- Clean ReplicaSet by revision instead of creation timestamp in deployment controller ([#97407](https://github.com/kubernetes/kubernetes/pull/97407), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
+- Ensure that client-go's EventBroadcaster is safe (non-racy) during shutdown. ([#95664](https://github.com/kubernetes/kubernetes/pull/95664), [@DirectXMan12](https://github.com/DirectXMan12)) [SIG API Machinery]
+- Fix azure file migration issue ([#97877](https://github.com/kubernetes/kubernetes/pull/97877), [@andyzhangx](https://github.com/andyzhangx)) [SIG Auth, Cloud Provider and Storage]
+- Fix kubelet from panic after getting the wrong signal ([#98200](https://github.com/kubernetes/kubernetes/pull/98200), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fix repeatedly acquire the inhibit lock ([#98088](https://github.com/kubernetes/kubernetes/pull/98088), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Fixed a bug that the kubelet cannot start on BtrfS. ([#98042](https://github.com/kubernetes/kubernetes/pull/98042), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Fixed an issue with garbage collection failing to clean up namespaced children of an object also referenced incorrectly by cluster-scoped children ([#98068](https://github.com/kubernetes/kubernetes/pull/98068), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
+- Fixed no effect namespace when exposing deployment with --dry-run=client. ([#97492](https://github.com/kubernetes/kubernetes/pull/97492), [@masap](https://github.com/masap)) [SIG CLI]
+- Fixing a bug where a failed node may not have the NoExecute taint set correctly ([#96876](https://github.com/kubernetes/kubernetes/pull/96876), [@howieyuen](https://github.com/howieyuen)) [SIG Apps and Node]
+- Indentation of `Resource Quota` block in kubectl describe namespaces output gets correct. ([#97946](https://github.com/kubernetes/kubernetes/pull/97946), [@dty1er](https://github.com/dty1er)) [SIG CLI]
+- KUBECTL_EXTERNAL_DIFF now accepts equal sign for additional parameters. ([#98158](https://github.com/kubernetes/kubernetes/pull/98158), [@dougsland](https://github.com/dougsland)) [SIG CLI]
+- Kubeadm: fix a bug where "kubeadm join" would not properly handle missing names for existing etcd members. ([#97372](https://github.com/kubernetes/kubernetes/pull/97372), [@ihgann](https://github.com/ihgann)) [SIG Cluster Lifecycle]
+- Kubelet should ignore cgroup driver check on Windows node. ([#97764](https://github.com/kubernetes/kubernetes/pull/97764), [@pacoxu](https://github.com/pacoxu)) [SIG Node and Windows]
+- Make podTopologyHints protected by lock ([#95111](https://github.com/kubernetes/kubernetes/pull/95111), [@choury](https://github.com/choury)) [SIG Node]
+- Readjust kubelet_containers_per_pod_count bucket ([#98169](https://github.com/kubernetes/kubernetes/pull/98169), [@wawa0210](https://github.com/wawa0210)) [SIG Instrumentation and Node]
+- Scores from InterPodAffinity have stronger differentiation. ([#98096](https://github.com/kubernetes/kubernetes/pull/98096), [@leileiwan](https://github.com/leileiwan)) [SIG Scheduling]
+- Specifying the KUBE_TEST_REPO environment variable when e2e tests are executed will instruct the test infrastructure to load that image from a location within the specified repo, using a predefined pattern. ([#93510](https://github.com/kubernetes/kubernetes/pull/93510), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
+- Static pods will be deleted gracefully. ([#98103](https://github.com/kubernetes/kubernetes/pull/98103), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
+- Use network.Interface.VirtualMachine.ID to get the binded VM
+  Skip standalone VM when reconciling LoadBalancer ([#97635](https://github.com/kubernetes/kubernetes/pull/97635), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+
+### Other (Cleanup or Flake)
+
+- Kubeadm: change the default image repository for CI images from 'gcr.io/kubernetes-ci-images' to 'gcr.io/k8s-staging-ci-images' ([#97087](https://github.com/kubernetes/kubernetes/pull/97087), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Migrate generic_scheduler.go and types.go to structured logging. ([#98134](https://github.com/kubernetes/kubernetes/pull/98134), [@tanjing2020](https://github.com/tanjing2020)) [SIG Scheduling]
+- Migrate proxy/winuserspace/proxier.go logs to structured logging ([#97941](https://github.com/kubernetes/kubernetes/pull/97941), [@JornShen](https://github.com/JornShen)) [SIG Network]
+- Migrate staging/src/k8s.io/apiserver/pkg/audit/policy/reader.go logs to structured logging. ([#98252](https://github.com/kubernetes/kubernetes/pull/98252), [@lala123912](https://github.com/lala123912)) [SIG API Machinery and Auth]
+- Migrate staging\src\k8s.io\apiserver\pkg\endpoints logs to  structured logging ([#98093](https://github.com/kubernetes/kubernetes/pull/98093), [@lala123912](https://github.com/lala123912)) [SIG API Machinery]
+- Node ([#96552](https://github.com/kubernetes/kubernetes/pull/96552), [@pandaamanda](https://github.com/pandaamanda)) [SIG Apps, Cloud Provider, Node and Scheduling]
+- The kubectl alpha debug command was scheduled to be removed in v1.21. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Update cri-tools to [v1.20.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.20.0) ([#97967](https://github.com/kubernetes/kubernetes/pull/97967), [@rajibmitra](https://github.com/rajibmitra)) [SIG Cloud Provider]
+- Windows nodes on GCE will take longer to start due to dependencies installed at node creation time. ([#98284](https://github.com/kubernetes/kubernetes/pull/98284), [@pjh](https://github.com/pjh)) [SIG Cloud Provider]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- github.com/google/cadvisor: [v0.38.6 → v0.38.7](https://github.com/google/cadvisor/compare/v0.38.6...v0.38.7)
+- k8s.io/gengo: 83324d8 → b6c5ce2
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.21.0-alpha.1
+
+
+## Downloads for v1.21.0-alpha.1
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes.tar.gz) | b2bacd5c3fc9f829e6269b7d2006b0c6e464ff848bb0a2a8f2fe52ad2d7c4438f099bd8be847d8d49ac6e4087f4d74d5c3a967acd798e0b0cb4d7a2bdb122997
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-src.tar.gz) | 518ac5acbcf23902fb1b902b69dbf3e86deca5d8a9b5f57488a15f185176d5a109558f3e4df062366af874eca1bcd61751ee8098b0beb9bcdc025d9a1c9be693
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | eaa7aea84a5ed954df5ec710cbeb6ec88b46465f43cb3d09aabe2f714b84a050a50bf5736089f09dbf1090f2e19b44823d656c917e3c8c877630756c3026f2b6
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-386.tar.gz) | 47f74b8d46ad1779c5b0b5f15aa15d5513a504eeb6f53db4201fbe9ff8956cb986b7c1b0e9d50a99f78e9e2a7f304f3fc1cc2fa239296d9a0dd408eb6069e975
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | 1a148e282628b008c8abd03dd12ec177ced17584b5115d92cd33dd251e607097d42e9da8c7089bd947134b900f85eb75a4740b6a5dd580c105455b843559df39
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | d13d2feb73bd032dc01f7e2955b98d8215a39fe1107d037a73fa1f7d06c3b93ebaa53ed4952d845c64454ef3cca533edb97132d234d50b6fb3bcbd8a8ad990eb
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | 8252105a17b09a78e9ad2c024e4e401a69764ac869708a071aaa06f81714c17b9e7c5b2eb8efde33f24d0b59f75c5da607d5e1e72bdf12adfbb8c829205cd1c1
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | 297a9082df4988389dc4be30eb636dff49f36f5d87047bab44745884e610f46a17ae3a08401e2cab155b7c439f38057bfd8288418215f7dd3bf6a49dbe61ea0e
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | 04c06490dd17cd5dccfd92bafa14acf64280ceaea370d9635f23aeb6984d1beae6d0d1d1506edc6f30f927deeb149b989d3e482b47fbe74008b371f629656e79
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-windows-386.tar.gz) | ec6e9e87a7d685f8751d7e58f24f417753cff5554a7229218cb3a08195d461b2e12409344950228e9fbbc92a8a06d35dd86242da6ff1e6652ec1fae0365a88c1
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | 51039e6221d3126b5d15e797002ae01d4f0b10789c5d2056532f27ef13f35c5a2e51be27764fda68e8303219963126559023aed9421313bec275c0827fbcaf8a
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | 4edf820930c88716263560275e3bd7fadb8dc3700b9f8e1d266562e356e0abeb1a913f536377dab91218e3940b447d6bf1da343b85da25c2256dc4dcde5798dd
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | b15213e53a8ab4ba512ce6ef9ad42dd197d419c61615cd23de344227fd846c90448d8f3d98e555b63ba5b565afa627cca6b7e3990ebbbba359c96f2391302df1
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | 5be29cca9a9358fc68351ee63e99d57dc2ffce6e42fc3345753dbbf7542ff2d770c4852424158540435fa6e097ce3afa9b13affc40c8b3b69fe8406798f8068f
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | 89fd99ab9ce85db0b94b86709932105efc883cc93959cf7ea9a39e79a4acea23064d7010eeb577450cccabe521c04b7ba47bbec212ed37edeed7cb04bad34518
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | 2fbc30862c77d247aa8d96ab9d1a144599505287b0033a3a2d0988958e7bb2f2e8b67f52c1fec74b4ec47d74ba22cd0f6cb5c4228acbaa72b1678d5fece0254d
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | 95658d321a0a371c0900b401d1469d96915310afbc4e4b9b11f031438bb188513b57d5a60b5316c3b0c18f541cda6f0ac42f59a76495f8abc743a067115da23a
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | f375acfb42aad6c65b833c270e7e3acfe9cd1d6b2441c33874e77faae263957f7acfe86f1b71f14298118595e4cc6952c7dea0c832f7f2e72428336f13034362
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | 43b4baccd58d74e7f48d096ab92f2bbbcdf47e30e7a3d2b56c6cc9f90002cfd4fefaac894f69bd5f9f4dbdb09a4749a77eb76b1b97d91746bd96fe94457879ab
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | e7962b522c6c7c14b9ee4c1d254d8bdd9846b2b33b0443fc9c4a41be6c40e5e6981798b720f0148f36263d5cc45d5a2bb1dd2f9ab2838e3d002e45b9bddeb7bf
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | 49ebc97f01829e65f7de15be00b882513c44782eaadd1b1825a227e3bd3c73cc6aca8345af05b303d8c43aa2cb944a069755b2709effb8cc22eae621d25d4ba5
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | 6e0fd7724b09e6befbcb53b33574e97f2db089f2eee4bbf391abb7f043103a5e6e32e3014c0531b88f9a3ca88887bbc68625752c44326f98dd53adb3a6d1bed8
+
+## Changelog since v1.20.0
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Kube-proxy's IPVS proxy mode no longer sets the net.ipv4.conf.all.route_localnet sysctl parameter. Nodes upgrading will have net.ipv4.conf.all.route_localnet set to 1 but new nodes will inherit the system default (usually 0). If you relied on any behavior requiring net.ipv4.conf.all.route_localnet, you must set ensure it is enabled as kube-proxy will no longer set it automatically. This change helps to further mitigate CVE-2020-8558. ([#92938](https://github.com/kubernetes/kubernetes/pull/92938), [@lbernail](https://github.com/lbernail)) [SIG Network and Release]
+ 
+## Changes by Kind
+
+### Deprecation
+
+- Deprecate the `topologyKeys` field in Service. This capability will be replaced with upcoming work around Topology Aware Subsetting and Service Internal Traffic Policy. ([#96736](https://github.com/kubernetes/kubernetes/pull/96736), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
+- Kubeadm: deprecated command "alpha selfhosting pivot" is removed now. ([#97627](https://github.com/kubernetes/kubernetes/pull/97627), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: graduate the command `kubeadm alpha kubeconfig user` to `kubeadm kubeconfig user`. The `kubeadm alpha kubeconfig user` command is deprecated now. ([#97583](https://github.com/kubernetes/kubernetes/pull/97583), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Kubeadm: the "kubeadm alpha certs" command is removed now, please use "kubeadm certs" instead. ([#97706](https://github.com/kubernetes/kubernetes/pull/97706), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
+- Remove the deprecated metrics "scheduling_algorithm_preemption_evaluation_seconds" and "binding_duration_seconds", suggest to use "scheduler_framework_extension_point_duration_seconds" instead. ([#96447](https://github.com/kubernetes/kubernetes/pull/96447), [@chendave](https://github.com/chendave)) [SIG Cluster Lifecycle, Instrumentation, Scheduling and Testing]
+- The PodSecurityPolicy API is deprecated in 1.21, and will no longer be served starting in 1.25. ([#97171](https://github.com/kubernetes/kubernetes/pull/97171), [@deads2k](https://github.com/deads2k)) [SIG Auth and CLI]
+
+### API Change
+
+- Change the APIVersion proto name of BoundObjectRef from aPIVersion to apiVersion. ([#97379](https://github.com/kubernetes/kubernetes/pull/97379), [@kebe7jun](https://github.com/kebe7jun)) [SIG Auth]
+- Promote Immutable Secrets/ConfigMaps feature to Stable.
+  This allows to set `Immutable` field in Secrets or ConfigMap object to mark their contents as immutable. ([#97615](https://github.com/kubernetes/kubernetes/pull/97615), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Architecture, Node and Testing]
+
+### Feature
+
+- Add flag --lease-max-object-size and metric etcd_lease_object_counts for kube-apiserver to config and observe max objects attached to a single etcd lease. ([#97480](https://github.com/kubernetes/kubernetes/pull/97480), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery, Instrumentation and Scalability]
+- Add flag --lease-reuse-duration-seconds for kube-apiserver to config etcd lease reuse duration. ([#97009](https://github.com/kubernetes/kubernetes/pull/97009), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery and Scalability]
+- Adds the ability to pass --strict-transport-security-directives to the kube-apiserver to set the HSTS header appropriately.  Be sure you understand the consequences to browsers before setting this field. ([#96502](https://github.com/kubernetes/kubernetes/pull/96502), [@249043822](https://github.com/249043822)) [SIG Auth]
+- Kubeadm now includes CoreDNS v1.8.0. ([#96429](https://github.com/kubernetes/kubernetes/pull/96429), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Kubeadm: add support for certificate chain validation. When using kubeadm in external CA mode, this allows an intermediate CA to be used to sign the certificates. The intermediate CA certificate must be appended to each signed certificate for this to work correctly. ([#97266](https://github.com/kubernetes/kubernetes/pull/97266), [@robbiemcmichael](https://github.com/robbiemcmichael)) [SIG Cluster Lifecycle]
+- Kubeadm: amend the node kernel validation to treat CGROUP_PIDS, FAIR_GROUP_SCHED as required and CFS_BANDWIDTH, CGROUP_HUGETLB as optional ([#96378](https://github.com/kubernetes/kubernetes/pull/96378), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
+- The Kubernetes pause image manifest list now contains an image for Windows Server 20H2. ([#97322](https://github.com/kubernetes/kubernetes/pull/97322), [@claudiubelu](https://github.com/claudiubelu)) [SIG Windows]
+- The apimachinery util/net function used to detect the bind address `ResolveBindAddress()`
+  takes into consideration global ip addresses on loopback interfaces when:
+      - the host has default routes
+      - there are no global IPs on those interfaces.
+  in order to support more complex network scenarios like BGP Unnumbered RFC 5549 ([#95790](https://github.com/kubernetes/kubernetes/pull/95790), [@aojea](https://github.com/aojea)) [SIG Network]
+
+### Bug or Regression
+
+- ## Changelog
+  
+  ### General
+  - Fix priority expander falling back to a random choice even though there is a higher priority option to choose
+  - Clone `kubernetes/kubernetes` in `update-vendor.sh` shallowly, instead of fetching all revisions
+  - Speed up binpacking by reducing the number of PreFilter calls (call once per pod instead of #pods*#nodes times)
+  - Speed up finding unneeded nodes by 5x+ in very large clusters by reducing the number of PreFilter calls
+  - Expose `--max-nodes-total` as a metric
+  - Errors in `IncreaseSize` changed from type `apiError` to `cloudProviderError`
+  - Make `build-in-docker` and `test-in-docker` work on Linux systems with SELinux enabled
+  - Fix an error where existing nodes were not considered as destinations while finding place for pods in scale-down simulations
+  - Remove redundant log lines and reduce severity around parsing kubeEnv
+  - Don't treat nodes created by virtual kubelet as nodes from non-autoscaled node groups
+  - Remove redundant logging around calculating node utilization
+  - Add configurable `--network` and `--rm` flags for docker in `Makefile`
+  - Subtract DaemonSet pods' requests from node allocatable in the denominator while computing node utilization
+  - Include taints by condition when determining if a node is unready/still starting
+  - Fix `update-vendor.sh` to work on OSX and zsh
+  - Add best-effort eviction for DaemonSet pods while scaling down non-empty nodes
+  - Add build support for ARM64
+  
+  ### AliCloud
+  - Add missing daemonsets and replicasets to ALI example cluster role
+  
+  ### Apache CloudStack
+  - Add support for Apache CloudStack
+  
+  ### AWS
+  - Regenerate list of EC2 instances
+  - Fix pricing endpoint in AWS China Region
+  
+  ### Azure
+  - Add optional jitter on initial VMSS VM cache refresh, keep the refreshes spread over time
+  - Serve from cache for the whole period of ongoing throttling
+  - Fix unwanted VMSS VMs cache invalidations
+  - Enforce setting the number of retries if cloud provider backoff is enabled
+  - Don't update capacity if VMSS provisioning state is updating
+  - Support allocatable resources overrides via VMSS tags
+  - Add missing stable labels in template nodes
+  - Proactively set instance status to deleting on node deletions
+  
+  ### Cluster API
+  - Migrate interaction with the API from using internal types to using Unstructured
+  - Improve tests to work better with constrained resources
+  - Add support for node autodiscovery
+  - Add support for `--cloud-config`
+  - Update group identifier to use for Cluster API annotations
+  
+  ### Exoscale
+  - Add support for Exoscale
+  
+  ### GCE
+  - Decrease the number of GCE Read Requests made while deleting nodes
+  - Base pricing of custom instances on their instance family type
+  - Add pricing information for missing machine types
+  - Add pricing information for different GPU types
+  - Ignore the new `topology.gke.io/zone` label when comparing groups
+  - Add missing stable labels to template nodes
+  
+  ### HuaweiCloud
+  - Add auto scaling group support
+  - Implement node group by AS
+  - Implement getting desired instance number of node group
+  - Implement increasing node group size
+  - Implement TemplateNodeInfo
+  - Implement caching instances
+  
+  ### IONOS
+  - Add support for IONOS
+  
+  ### Kubemark
+  - Skip non-kubemark nodes while computing node infos for node groups.
+  
+  ### Magnum
+  - Add Magnum support in the Cluster Autoscaler helm chart
+  
+  ### Packet
+  - Allow empty nodepools
+  - Add support for multiple nodepools
+  - Add pricing support
+  
+  ## Image
+  Image: `k8s.gcr.io/autoscaling/cluster-autoscaler:v1.20.0` ([#97011](https://github.com/kubernetes/kubernetes/pull/97011), [@towca](https://github.com/towca)) [SIG Cloud Provider]
+- AcceleratorStats will be available in the Summary API of kubelet when cri_stats_provider is used. ([#96873](https://github.com/kubernetes/kubernetes/pull/96873), [@ruiwen-zhao](https://github.com/ruiwen-zhao)) [SIG Node]
+- Add limited lines to log when having tail option ([#93920](https://github.com/kubernetes/kubernetes/pull/93920), [@zhouya0](https://github.com/zhouya0)) [SIG Node]
+- Avoid systemd-logind loading configuration warning ([#97950](https://github.com/kubernetes/kubernetes/pull/97950), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
+- Cloud-controller-manager: routes controller should not depend on --allocate-node-cidrs ([#97029](https://github.com/kubernetes/kubernetes/pull/97029), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider and Testing]
+- Copy annotations with empty value when deployment rolls back ([#94858](https://github.com/kubernetes/kubernetes/pull/94858), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
+- Detach volumes from vSphere nodes not tracked by attach-detach controller ([#96689](https://github.com/kubernetes/kubernetes/pull/96689), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- Fix kubectl label error when local=true is set. ([#97440](https://github.com/kubernetes/kubernetes/pull/97440), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
+- Fix Azure file share not deleted issue when the namespace is deleted ([#97417](https://github.com/kubernetes/kubernetes/pull/97417), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fix CVE-2020-8555 for Gluster client connections. ([#97922](https://github.com/kubernetes/kubernetes/pull/97922), [@liggitt](https://github.com/liggitt)) [SIG Storage]
+- Fix counting error in service/nodeport/loadbalancer quota check ([#97451](https://github.com/kubernetes/kubernetes/pull/97451), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Network and Testing]
+- Fix kubectl-convert import known versions ([#97754](https://github.com/kubernetes/kubernetes/pull/97754), [@wzshiming](https://github.com/wzshiming)) [SIG CLI and Testing]
+- Fix missing cadvisor machine metrics. ([#97006](https://github.com/kubernetes/kubernetes/pull/97006), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node]
+- Fix nil VMSS name when setting service to auto mode ([#97366](https://github.com/kubernetes/kubernetes/pull/97366), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable ([#95269](https://github.com/kubernetes/kubernetes/pull/95269), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
+- Fix the regression with the slow pods termination. Before this fix pods may take an additional time to terminate - up to one minute. Reversing the change that ensured that CNI resources cleaned up when the pod is removed on API server. ([#97980](https://github.com/kubernetes/kubernetes/pull/97980), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Node]
+- Fix to recover CSI volumes from certain dangling attachments ([#96617](https://github.com/kubernetes/kubernetes/pull/96617), [@yuga711](https://github.com/yuga711)) [SIG Apps and Storage]
+- Fix: azure file latency issue for metadata-heavy workloads ([#97082](https://github.com/kubernetes/kubernetes/pull/97082), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fixed Cinder volume IDs on OpenStack Train ([#96673](https://github.com/kubernetes/kubernetes/pull/96673), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider]
+- Fixed FibreChannel volume plugin corrupting filesystems on detach of multipath volumes. ([#97013](https://github.com/kubernetes/kubernetes/pull/97013), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed a bug in kubelet that will saturate CPU utilization after containerd got restarted. ([#97174](https://github.com/kubernetes/kubernetes/pull/97174), [@hanlins](https://github.com/hanlins)) [SIG Node]
+- Fixed bug in CPUManager with race on container map access ([#97427](https://github.com/kubernetes/kubernetes/pull/97427), [@klueska](https://github.com/klueska)) [SIG Node]
+- Fixed cleanup of block devices when /var/lib/kubelet is a symlink. ([#96889](https://github.com/kubernetes/kubernetes/pull/96889), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- GCE Internal LoadBalancer sync loop will now release the ILB IP address upon sync failure. An error in ILB forwarding rule creation will no longer leak IP addresses. ([#97740](https://github.com/kubernetes/kubernetes/pull/97740), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider and Network]
+- Ignore update pod with no new images in alwaysPullImages admission controller ([#96668](https://github.com/kubernetes/kubernetes/pull/96668), [@pacoxu](https://github.com/pacoxu)) [SIG Apps, Auth and Node]
+- Kubeadm now installs version 3.4.13 of etcd when creating a cluster with v1.19 ([#97244](https://github.com/kubernetes/kubernetes/pull/97244), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubeadm: avoid detection of the container runtime for commands that do not need it ([#97625](https://github.com/kubernetes/kubernetes/pull/97625), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug in the host memory detection code on 32bit Linux platforms ([#97403](https://github.com/kubernetes/kubernetes/pull/97403), [@abelbarrera15](https://github.com/abelbarrera15)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where "kubeadm upgrade" commands can fail if CoreDNS v1.8.0 is installed. ([#97919](https://github.com/kubernetes/kubernetes/pull/97919), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Performance regression [#97685](https://github.com/kubernetes/kubernetes/issues/97685) has been fixed. ([#97860](https://github.com/kubernetes/kubernetes/pull/97860), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
+- Remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
+- The current version of the container image publicly exposed IP serving a /metrics endpoint to the Internet. The new version of the container image serves /metrics endpoint on a different port. ([#97621](https://github.com/kubernetes/kubernetes/pull/97621), [@vbannai](https://github.com/vbannai)) [SIG Cloud Provider]
+- Use force unmount for NFS volumes if regular mount fails after 1 minute timeout ([#96844](https://github.com/kubernetes/kubernetes/pull/96844), [@gnufied](https://github.com/gnufied)) [SIG Storage]
+- Users will see increase in time for deletion of pods and also guarantee that removal of pod from api server  would mean deletion of all the resources from container runtime. ([#92817](https://github.com/kubernetes/kubernetes/pull/92817), [@kmala](https://github.com/kmala)) [SIG Node]
+- Using exec auth plugins with kubectl no longer results in warnings about constructing many client instances from the same exec auth config. ([#97857](https://github.com/kubernetes/kubernetes/pull/97857), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Auth]
+- Warning about using a deprecated volume plugin is logged only once. ([#96751](https://github.com/kubernetes/kubernetes/pull/96751), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+
+### Other (Cleanup or Flake)
+
+- Bump github.com/Azure/go-autorest/autorest to v0.11.12 ([#97033](https://github.com/kubernetes/kubernetes/pull/97033), [@patrickshan](https://github.com/patrickshan)) [SIG API Machinery, CLI, Cloud Provider and Cluster Lifecycle]
+- Delete deprecated mixed protocol annotation ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Kube-proxy: Traffic from the cluster directed to ExternalIPs is always sent directly to the Service. ([#96296](https://github.com/kubernetes/kubernetes/pull/96296), [@aojea](https://github.com/aojea)) [SIG Network and Testing]
+- Kubeadm: fix a whitespace issue in the output of the "kubeadm join" command shown as the output of "kubeadm init" and "kubeadm token create --print-join-command" ([#97413](https://github.com/kubernetes/kubernetes/pull/97413), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubeadm: improve the error messaging when the user provides an invalid discovery token CA certificate hash. ([#97290](https://github.com/kubernetes/kubernetes/pull/97290), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Migrate log messages in pkg/scheduler/{scheduler.go,factory.go} to structured logging ([#97509](https://github.com/kubernetes/kubernetes/pull/97509), [@aldudko](https://github.com/aldudko)) [SIG Scheduling]
+- Migrate proxy/iptables/proxier.go logs to structured logging ([#97678](https://github.com/kubernetes/kubernetes/pull/97678), [@JornShen](https://github.com/JornShen)) [SIG Network]
+- Migrate some scheduler log messages to structured logging ([#97349](https://github.com/kubernetes/kubernetes/pull/97349), [@aldudko](https://github.com/aldudko)) [SIG Scheduling]
+- NONE ([#97167](https://github.com/kubernetes/kubernetes/pull/97167), [@geegeea](https://github.com/geegeea)) [SIG Node]
+- NetworkPolicy validation framework optimizations for rapidly verifying CNI's work correctly across several pods and namespaces ([#91592](https://github.com/kubernetes/kubernetes/pull/91592), [@jayunit100](https://github.com/jayunit100)) [SIG Network, Storage and Testing]
+- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97618](https://github.com/kubernetes/kubernetes/pull/97618), [@jherrera123](https://github.com/jherrera123)) [SIG Release and Testing]
+- Scheduler plugin validation now provides all errors detected instead of the first one. ([#96745](https://github.com/kubernetes/kubernetes/pull/96745), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node, Scheduling and Testing]
+- Storage related e2e testsuite redesign & cleanup ([#96573](https://github.com/kubernetes/kubernetes/pull/96573), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Storage and Testing]
+- The OIDC authenticator no longer waits 10 seconds before attempting to fetch the metadata required to verify tokens. ([#97693](https://github.com/kubernetes/kubernetes/pull/97693), [@enj](https://github.com/enj)) [SIG API Machinery and Auth]
+- The `AttachVolumeLimit` feature gate that is GA since v1.17 is now removed. ([#96539](https://github.com/kubernetes/kubernetes/pull/96539), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Storage]
+- The `CSINodeInfo` feature gate that is GA since v1.17 is unconditionally enabled, and can no longer be specified via the `--feature-gates` argument. ([#96561](https://github.com/kubernetes/kubernetes/pull/96561), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps, Auth, Scheduling, Storage and Testing]
+- The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavinfish](https://github.com/gavinfish)) [SIG Node, Scheduling and Storage]
+- `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior`(locked to false) features have been promoted to GA. 
+  To prevent control plane nodes being added to load balancers automatically, upgrade users need to add "node.kubernetes.io/exclude-from-external-load-balancers"  label to control plane nodes. ([#97543](https://github.com/kubernetes/kubernetes/pull/97543), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Apps, Cloud Provider and Network]
+
+### Uncategorized
+
+- Adding Brazilian Portuguese translation for kubectl ([#61595](https://github.com/kubernetes/kubernetes/pull/61595), [@cpanato](https://github.com/cpanato)) [SIG CLI]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
+- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
+- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
+- github.com/google/cadvisor: [v0.38.5 → v0.38.6](https://github.com/google/cadvisor/compare/v0.38.5...v0.38.6)
+- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
+- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
+- k8s.io/system-validators: v1.2.0 → v1.3.0
+
+### Removed
 - rsc.io/quote/v3: v3.1.0
 - rsc.io/sampler: v1.3.0
-
-### Changed
-- cloud.google.com/go/bigquery: v1.0.1 → v1.4.0
-- cloud.google.com/go/datastore: v1.0.0 → v1.1.0
-- cloud.google.com/go/pubsub: v1.0.1 → v1.2.0
-- cloud.google.com/go/storage: v1.0.0 → v1.6.0
-- cloud.google.com/go: v0.51.0 → v0.54.0
-- github.com/Microsoft/go-winio: [fc70bd9 → v0.4.15](https://github.com/Microsoft/go-winio/compare/fc70bd9...v0.4.15)
-- github.com/aws/aws-sdk-go: [v1.35.5 → v1.35.24](https://github.com/aws/aws-sdk-go/compare/v1.35.5...v1.35.24)
-- github.com/blang/semver: [v3.5.0+incompatible → v3.5.1+incompatible](https://github.com/blang/semver/compare/v3.5.0...v3.5.1)
-- github.com/checkpoint-restore/go-criu/v4: [v4.0.2 → v4.1.0](https://github.com/checkpoint-restore/go-criu/v4/compare/v4.0.2...v4.1.0)
-- github.com/containerd/containerd: [v1.3.3 → v1.4.1](https://github.com/containerd/containerd/compare/v1.3.3...v1.4.1)
-- github.com/containerd/ttrpc: [v1.0.0 → v1.0.2](https://github.com/containerd/ttrpc/compare/v1.0.0...v1.0.2)
-- github.com/containerd/typeurl: [v1.0.0 → v1.0.1](https://github.com/containerd/typeurl/compare/v1.0.0...v1.0.1)
-- github.com/coreos/etcd: [v3.3.10+incompatible → v3.3.13+incompatible](https://github.com/coreos/etcd/compare/v3.3.10...v3.3.13)
-- github.com/docker/docker: [aa6a989 → bd33bbf](https://github.com/docker/docker/compare/aa6a989...bd33bbf)
-- github.com/go-gl/glfw/v3.3/glfw: [12ad95a → 6f7a984](https://github.com/go-gl/glfw/v3.3/glfw/compare/12ad95a...6f7a984)
-- github.com/golang/groupcache: [215e871 → 8c9f03a](https://github.com/golang/groupcache/compare/215e871...8c9f03a)
-- github.com/golang/mock: [v1.3.1 → v1.4.1](https://github.com/golang/mock/compare/v1.3.1...v1.4.1)
-- github.com/golang/protobuf: [v1.4.2 → v1.4.3](https://github.com/golang/protobuf/compare/v1.4.2...v1.4.3)
-- github.com/google/cadvisor: [v0.37.0 → v0.38.4](https://github.com/google/cadvisor/compare/v0.37.0...v0.38.4)
-- github.com/google/go-cmp: [v0.4.0 → v0.5.2](https://github.com/google/go-cmp/compare/v0.4.0...v0.5.2)
-- github.com/google/pprof: [d4f498a → 1ebb73c](https://github.com/google/pprof/compare/d4f498a...1ebb73c)
-- github.com/google/uuid: [v1.1.1 → v1.1.2](https://github.com/google/uuid/compare/v1.1.1...v1.1.2)
-- github.com/gorilla/mux: [v1.7.3 → v1.8.0](https://github.com/gorilla/mux/compare/v1.7.3...v1.8.0)
-- github.com/gorilla/websocket: [v1.4.0 → v1.4.2](https://github.com/gorilla/websocket/compare/v1.4.0...v1.4.2)
-- github.com/karrick/godirwalk: [v1.7.5 → v1.16.1](https://github.com/karrick/godirwalk/compare/v1.7.5...v1.16.1)
-- github.com/opencontainers/runc: [819fcc6 → v1.0.0-rc92](https://github.com/opencontainers/runc/compare/819fcc6...v1.0.0-rc92)
-- github.com/opencontainers/runtime-spec: [237cc4f → 4d89ac9](https://github.com/opencontainers/runtime-spec/compare/237cc4f...4d89ac9)
-- github.com/opencontainers/selinux: [v1.5.2 → v1.6.0](https://github.com/opencontainers/selinux/compare/v1.5.2...v1.6.0)
-- github.com/prometheus/procfs: [v0.1.3 → v0.2.0](https://github.com/prometheus/procfs/compare/v0.1.3...v0.2.0)
-- github.com/quobyte/api: [v0.1.2 → v0.1.8](https://github.com/quobyte/api/compare/v0.1.2...v0.1.8)
-- github.com/spf13/cobra: [v1.0.0 → v1.1.1](https://github.com/spf13/cobra/compare/v1.0.0...v1.1.1)
-- github.com/spf13/viper: [v1.4.0 → v1.7.0](https://github.com/spf13/viper/compare/v1.4.0...v1.7.0)
-- github.com/stretchr/testify: [v1.4.0 → v1.6.1](https://github.com/stretchr/testify/compare/v1.4.0...v1.6.1)
-- github.com/vishvananda/netns: [52d707b → db3c7e5](https://github.com/vishvananda/netns/compare/52d707b...db3c7e5)
-- go.opencensus.io: v0.22.2 → v0.22.3
-- golang.org/x/exp: da58074 → 6cc2880
-- golang.org/x/lint: fdd1cda → 738671d
-- golang.org/x/net: ab34263 → 69a7880
-- golang.org/x/oauth2: 858c2ad → bf48bf1
-- golang.org/x/sys: ed371f2 → 5cba982
-- golang.org/x/text: v0.3.3 → v0.3.4
-- golang.org/x/time: 555d28b → 3af7569
-- golang.org/x/xerrors: 9bdfabe → 5ec99f8
-- google.golang.org/api: v0.15.1 → v0.20.0
-- google.golang.org/genproto: cb27e3a → 8816d57
-- google.golang.org/grpc: v1.27.0 → v1.27.1
-- google.golang.org/protobuf: v1.24.0 → v1.25.0
-- honnef.co/go/tools: v0.0.1-2019.2.3 → v0.0.1-2020.1.3
-- k8s.io/gengo: 8167cfd → 83324d8
-- k8s.io/klog/v2: v2.2.0 → v2.4.0
-- k8s.io/kube-openapi: 8b50664 → d219536
-- k8s.io/utils: d5654de → 67b214c
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.12 → v0.0.14
-- sigs.k8s.io/structured-merge-diff/v4: b3cf1e8 → v4.0.2
-
-### Removed
-- github.com/armon/consul-api: [eb2c6b5](https://github.com/armon/consul-api/tree/eb2c6b5)
-- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
-- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
-- github.com/xordataexchange/crypt: [b2862e3](https://github.com/xordataexchange/crypt/tree/b2862e3)
-
-
-
-# v1.20.0-beta.1
-
-
-## Downloads for v1.20.0-beta.1
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes.tar.gz) | 4eddf4850c2d57751696f352d0667309339090aeb30ff93e8db8a22c6cdebf74cb2d5dc78d4ae384c4e25491efc39413e2e420a804b76b421a9ad934e56b0667
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-src.tar.gz) | 59de5221162e9b6d88f5abbdb99765cb2b2e501498ea853fb65f2abe390211e28d9f21e0d87be3ade550a5ea6395d04552cf093d2ce2f99fd45ad46545dd13cb
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | d69ffed19b034a4221fc084e43ac293cf392e98febf5bf580f8d92307a8421d8b3aab18f9ca70608937e836b42c7a34e829f88eba6e040218a4486986e2fca21
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-386.tar.gz) | 1b542e165860c4adcd4550adc19b86c3db8cd75d2a1b8db17becc752da78b730ee48f1b0aaf8068d7bfbb1d8e023741ec293543bc3dd0f4037172a6917db8169
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | 90ad52785eecb43a6f9035b92b6ba39fc84e67f8bc91cf098e70f8cfdd405c4b9d5c02dccb21022f21bb5b6ce92fdef304def1da0a7255c308e2c5fb3a9cdaab
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-arm.tar.gz) | d0cb3322b056e1821679afa70728ffc0d3375e8f3326dabbe8185be2e60f665ab8985b13a1a432e10281b84a929e0f036960253ac0dd6e0b44677d539e98e61b
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | 3aecc8197e0aa368408624add28a2dd5e73f0d8a48e5e33c19edf91d5323071d16a27353a6f3e22df4f66ed7bfbae8e56e0a9050f7bbdf927ce6aeb29bba6374
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | 6ff145058f62d478b98f1e418e272555bfb5c7861834fbbf10a8fb334cc7ff09b32f2666a54b230932ba71d2fc7d3b1c1f5e99e6fe6d6ec83926a9b931cd2474
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | ff7b8bb894076e05a3524f6327a4a6353b990466f3292e84c92826cb64b5c82b3855f48b8e297ccadc8bcc15552bc056419ff6ff8725fc4e640828af9cc1331b
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-windows-386.tar.gz) | 6c6dcac9c725605763a130b5a975f2b560aa976a5c809d4e0887900701b707baccb9ca1aebc10a03cfa7338a6f42922bbf838ccf6800fc2a3e231686a72568b6
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | d12e3a29c960f0ddd1b9aabf5426ac1259863ac6c8f2be1736ebeb57ddca6b1c747ee2c363be19e059e38cf71488c5ea3509ad4d0e67fd5087282a5ad0ae9a48
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | 904e8c049179e071c6caa65f525f465260bb4d4318a6dd9cc05be2172f39f7cfc69d1672736e01d926045764fe8872e806444e3af77ffef823ede769537b7d20
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-arm.tar.gz) | 5934959374868aed8d4294de84411972660bca7b2e952201a9403f37e40c60a5c53eaea8001344d0bf4a00c8cd27de6324d88161388de27f263a5761357cb82b
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | 4c884585970f80dc5462d9a734d7d5be9558b36c6e326a8a3139423efbd7284fa9f53fb077983647e17e19f03f5cb9bf26201450c78daecf10afa5a1ab5f9efc
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | 235b78b08440350dcb9f13b63f7722bd090c672d8e724ca5d409256e5a5d4f46d431652a1aa908c3affc5b1e162318471de443d38b93286113e79e7f90501a9b
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | 220fc9351702b3ecdcf79089892ceb26753a8a1deaf46922ffb3d3b62b999c93fef89440e779ca6043372b963081891b3a966d1a5df0cf261bdd44395fd28dce
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | fe59d3a1f21c47bab126f689687657f77fbcb46a2caeef48eecd073b2b22879f997a466911b5c5c829e9cf27e68a36ecdf18686d42714839d4b97d6c7281578d
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-arm.tar.gz) | 93e545aa963cfd11e0b2c6d47669b5ef70c5a86ef80c3353c1a074396bff1e8e7371dda25c39d78c7a9e761f2607b8b5ab843fa0c10b8ff9663098fae8d25725
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | 5e0f177f9bec406a668d4b37e69b191208551fdf289c82b5ec898959da4f8a00a2b0695cbf1d2de5acb809321c6e5604f5483d33556543d92b96dcf80e814dd3
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | 574412059e4d257eb904cd4892a075b6a2cde27adfa4976ee64c46d6768facece338475f1b652ad94c8df7cfcbb70ebdf0113be109c7099ab76ffdb6f023eefd
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | b1ffaa6d7f77d89885c642663cb14a86f3e2ec2afd223e3bb2000962758cf0f15320969ffc4be93b5826ff22d54fdbae0dbea09f9d8228eda6da50b6fdc88758
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | 388983765213cf3bdc1f8b27103ed79e39028767e5f1571e35ed1f91ed100e49f3027f7b7ff19b53fab7fbb6d723c0439f21fc6ed62be64532c25f5bfa7ee265
-
-## Changelog since v1.20.0-beta.0
-
-## Changes by Kind
-
-### Deprecation
-
-- ACTION REQUIRED: The kube-apiserver ability to serve on an insecure port, deprecated since v1.10, has been removed. The insecure address flags `--address` and `--insecure-bind-address` have no effect in kube-apiserver and will be removed in v1.24. The insecure port flags `--port` and `--insecure-port` may only be set to 0 and will be removed in v1.24. ([#95856](https://github.com/kubernetes/kubernetes/pull/95856), [@knight42](https://github.com/knight42)) [SIG API Machinery, Node and Testing]
-
-### API Change
-
-- + `TokenRequest` and `TokenRequestProjection` features have been promoted to GA. This feature allows generating service account tokens that are not visible in Secret objects and are tied to the lifetime of a Pod object. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection for details on configuring and using this feature. The `TokenRequest` and `TokenRequestProjection` feature gates will be removed in v1.21.
-  + kubeadm's kube-apiserver Pod manifest now includes the following flags by default "--service-account-key-file", "--service-account-signing-key-file", "--service-account-issuer". ([#93258](https://github.com/kubernetes/kubernetes/pull/93258), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle, Storage and Testing]
-- Certain fields on  Service objects will be automatically cleared when changing the service's `type` to a mode that does not need those fields.  For example, changing from type=LoadBalancer to type=ClusterIP will clear the NodePort assignments, rather than forcing the user to clear them. ([#95196](https://github.com/kubernetes/kubernetes/pull/95196), [@thockin](https://github.com/thockin)) [SIG API Machinery, Apps, Network and Testing]
-- Services will now have a `clusterIPs` field to go with `clusterIP`.  `clusterIPs[0]` is a synonym for `clusterIP` and will be syncronized on create and update operations. ([#95894](https://github.com/kubernetes/kubernetes/pull/95894), [@thockin](https://github.com/thockin)) [SIG Network]
-
-### Feature
-
-- A new metric `apiserver_request_filter_duration_seconds` has been introduced that
-  measures request filter latency in seconds. ([#95207](https://github.com/kubernetes/kubernetes/pull/95207), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Instrumentation]
-- Add a new flag to set priority for the kubelet on Windows nodes so that workloads cannot overwhelm the node there by disrupting kubelet process. ([#96051](https://github.com/kubernetes/kubernetes/pull/96051), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node and Windows]
-- Changed: default "Accept: */*" header added to HTTP probes. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#http-probes (https://github.com/kubernetes/website/pull/24756) ([#95641](https://github.com/kubernetes/kubernetes/pull/95641), [@fonsecas72](https://github.com/fonsecas72)) [SIG Network and Node]
-- Client-go credential plugins can now be passed in the current cluster information via the KUBERNETES_EXEC_INFO environment variable. ([#95489](https://github.com/kubernetes/kubernetes/pull/95489), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
-- Kube-apiserver: added support for compressing rotated audit log files with `--audit-log-compress` ([#94066](https://github.com/kubernetes/kubernetes/pull/94066), [@lojies](https://github.com/lojies)) [SIG API Machinery and Auth]
-
-### Documentation
-
-- Fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList ([#95117](https://github.com/kubernetes/kubernetes/pull/95117), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-
-### Bug or Regression
-
-- Added support to kube-proxy for externalTrafficPolicy=Local setting via Direct Server Return (DSR) load balancers on Windows. ([#93166](https://github.com/kubernetes/kubernetes/pull/93166), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
-- Disable watchcache for events ([#96052](https://github.com/kubernetes/kubernetes/pull/96052), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
-- Disabled `LocalStorageCapacityIsolation` feature gate is honored during scheduling. ([#96092](https://github.com/kubernetes/kubernetes/pull/96092), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Fix bug in JSON path parser where an error occurs when a range is empty ([#95933](https://github.com/kubernetes/kubernetes/pull/95933), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
-- Fix k8s.io/apimachinery/pkg/api/meta.SetStatusCondition to update ObservedGeneration ([#95961](https://github.com/kubernetes/kubernetes/pull/95961), [@KnicKnic](https://github.com/KnicKnic)) [SIG API Machinery]
-- Fixed a regression which prevented pods with `docker/default` seccomp annotations from being created in 1.19 if a PodSecurityPolicy was in place which did not allow `runtime/default` seccomp profiles. ([#95985](https://github.com/kubernetes/kubernetes/pull/95985), [@saschagrunert](https://github.com/saschagrunert)) [SIG Auth]
-- Kubectl: print error if users place flags before plugin name ([#92343](https://github.com/kubernetes/kubernetes/pull/92343), [@knight42](https://github.com/knight42)) [SIG CLI]
-- When creating a PVC with the volume.beta.kubernetes.io/storage-provisioner annotation already set, the PV controller might have incorrectly deleted the newly provisioned PV instead of binding it to the PVC, depending on timing and system load. ([#95909](https://github.com/kubernetes/kubernetes/pull/95909), [@pohly](https://github.com/pohly)) [SIG Apps and Storage]
-
-### Other (Cleanup or Flake)
-
-- Kubectl: the `generator` flag of `kubectl autoscale` has been deprecated and has no effect, it will be removed in a feature release ([#92998](https://github.com/kubernetes/kubernetes/pull/92998), [@SataQiu](https://github.com/SataQiu)) [SIG CLI]
-- V1helpers.MatchNodeSelectorTerms now accepts just a Node and a list of Terms ([#95871](https://github.com/kubernetes/kubernetes/pull/95871), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
-- `MatchNodeSelectorTerms` function moved to `k8s.io/component-helpers` ([#95531](https://github.com/kubernetes/kubernetes/pull/95531), [@damemi](https://github.com/damemi)) [SIG Apps, Scheduling and Storage]
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-_Nothing has changed._
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.20.0-beta.0
-
-
-## Downloads for v1.20.0-beta.0
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes.tar.gz) | 385e49e32bbd6996f07bcadbf42285755b8a8ef9826ee1ba42bd82c65827cf13f63e5634b834451b263a93b708299cbb4b4b0b8ddbc688433deaf6bec240aa67
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-src.tar.gz) | 842e80f6dcad461426fb699de8a55fde8621d76a94e54288fe9939cc1a3bbd0f4799abadac2c59bcf3f91d743726dbd17e1755312ae7fec482ef560f336dbcbb
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-darwin-amd64.tar.gz) | bde5e7d9ee3e79d1e69465a3ddb4bb36819a4f281b5c01a7976816d7c784410812dde133cdf941c47e5434e9520701b9c5e8b94d61dca77c172f87488dfaeb26
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-386.tar.gz) | 721bb8444c9e0d7a9f8461e3f5428882d76fcb3def6eb11b8e8e08fae7f7383630699248660d69d4f6a774124d6437888666e1fa81298d5b5518bc4a6a6b2c92
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-amd64.tar.gz) | 71e4edc41afbd65f813e7ecbc22b27c95f248446f005e288d758138dc4cc708735be7218af51bcf15e8b9893a3598c45d6a685f605b46f50af3762b02c32ed76
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-arm.tar.gz) | bbefc749156f63898973f2f7c7a6f1467481329fb430d641fe659b497e64d679886482d557ebdddb95932b93de8d1e3e365c91d4bf9f110b68bd94b0ba702ded
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-arm64.tar.gz) | 9803190685058b4b64d002c2fbfb313308bcea4734ed53a8c340cfdae4894d8cb13b3e819ae64051bafe0fbf8b6ecab53a6c1dcf661c57640c75b0eb60041113
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-ppc64le.tar.gz) | bcdceea64cba1ae38ea2bab50d8fd77c53f6d673de12566050b0e3c204334610e6c19e4ace763e68b5e48ab9e811521208b852b1741627be30a2b17324fc1daf
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-linux-s390x.tar.gz) | 41e36d00867e90012d5d5adfabfaae8d9f5a9fd32f290811e3c368e11822916b973afaaf43961081197f2cbab234090d97d89774e674aeadc1da61f7a64708a9
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-windows-386.tar.gz) | c50fec5aec2d0e742f851f25c236cb73e76f8fc73b0908049a10ae736c0205b8fff83eb3d29b1748412edd942da00dd738195d9003f25b577d6af8359d84fb2f
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-client-windows-amd64.tar.gz) | 0fd6777c349908b6d627e849ea2d34c048b8de41f7df8a19898623f597e6debd35b7bcbf8e1d43a1be3a9abb45e4810bc498a0963cf780b109e93211659e9c7e
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-amd64.tar.gz) | 30d982424ca64bf0923503ae8195b2e2a59497096b2d9e58dfd491cd6639633027acfa9750bc7bccf34e1dc116d29d2f87cbd7ae713db4210ce9ac16182f0576
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-arm.tar.gz) | f08b62be9bc6f0745f820b0083c7a31eedb2ce370a037c768459a59192107b944c8f4345d0bb88fc975f2e7a803ac692c9ac3e16d4a659249d4600e84ff75d9e
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-arm64.tar.gz) | e3472b5b3dfae0a56e5363d52062b1e4a9fc227a05e0cf5ece38233b2c442f427970aab94a52377fb87e583663c120760d154bc1c4ac22dca1f4d0d1ebb96088
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-ppc64le.tar.gz) | 06c254e0a62f755d31bc40093d86c44974f0a60308716cc3214a6b3c249a4d74534d909b82f8a3dd3a3c9720e61465b45d2bb3a327ef85d3caba865750020dfb
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-server-linux-s390x.tar.gz) | 2edeb4411c26a0de057a66787091ab1044f71774a464aed898ffee26634a40127181c2edddb38e786b6757cca878fd0c3a885880eec6c3448b93c645770abb12
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-amd64.tar.gz) | cc1d5b94b86070b5e7746d7aaeaeac3b3a5e5ebbff1ec33885f7eeab270a6177d593cb1975b2e56f4430b7859ad42da76f266629f9313e0f688571691ac448ed
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-arm.tar.gz) | 75e82c7c9122add3b24695b94dcb0723c52420c3956abf47511e37785aa48a1fa8257db090c6601010c4475a325ccfff13eb3352b65e3aa1774f104b09b766b0
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-arm64.tar.gz) | 16ef27c40bf4d678a55fcd3d3f7d09f1597eec2cc58f9950946f0901e52b82287be397ad7f65e8d162d8a9cdb4a34a610b6db8b5d0462be8e27c4b6eb5d6e5e7
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-ppc64le.tar.gz) | 939865f2c4cb6a8934f22a06223e416dec5f768ffc1010314586149470420a1d62aef97527c34d8a636621c9669d6489908ce1caf96f109e8d073cee1c030b50
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-linux-s390x.tar.gz) | bbfdd844075fb816079af7b73d99bc1a78f41717cdbadb043f6f5872b4dc47bc619f7f95e2680d4b516146db492c630c17424e36879edb45e40c91bc2ae4493c
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-beta.0/kubernetes-node-windows-amd64.tar.gz) | a2b3ea40086fd71aed71a4858fd3fc79fd1907bc9ea8048ff3c82ec56477b0a791b724e5a52d79b3b36338c7fbd93dfd3d03b00ccea9042bda0d270fc891e4ec
-
-## Changelog since v1.20.0-alpha.3
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - Kubeadm: improve the validation of serviceSubnet and podSubnet.
-  ServiceSubnet has to be limited in size, due to implementation details, and the mask can not allocate more than 20 bits.
-  PodSubnet validates against the corresponding cluster "--node-cidr-mask-size" of the kube-controller-manager, it fail if the values are not compatible.
-  kubeadm no longer sets the node-mask automatically on IPv6 deployments, you must check that your IPv6 service subnet mask is compatible with the default node mask /64 or set it accordenly.
-  Previously, for IPv6, if the podSubnet had a mask lower than /112, kubeadm calculated a node-mask to be multiple of eight and splitting the available bits to maximise the number used for nodes. ([#95723](https://github.com/kubernetes/kubernetes/pull/95723), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]
-  - Windows hyper-v container featuregate is deprecated in 1.20 and will be removed in 1.21 ([#95505](https://github.com/kubernetes/kubernetes/pull/95505), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-
-## Changes by Kind
-
-### Deprecation
-
-- Support 'controlplane' as a valid EgressSelection type in the EgressSelectorConfiguration API. 'Master' is deprecated and will be removed in v1.22. ([#95235](https://github.com/kubernetes/kubernetes/pull/95235), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-
-### API Change
-
-- Add dual-stack Services (alpha).  This is a BREAKING CHANGE to an alpha API.
-  It changes the dual-stack API wrt Service from a single ipFamily field to 3
-  fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack),
-  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
-  clusterIP).  Most users do not need to set anything at all, defaulting will
-  handle it for them.  Services are single-stack unless the user asks for
-  dual-stack.  This is all gated by the "IPv6DualStack" feature gate. ([#91824](https://github.com/kubernetes/kubernetes/pull/91824), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
-- Introduces a metric source for HPAs which allows scaling based on container resource usage. ([#90691](https://github.com/kubernetes/kubernetes/pull/90691), [@arjunrn](https://github.com/arjunrn)) [SIG API Machinery, Apps, Autoscaling and CLI]
-
-### Feature
-
-- Add a metric for time taken to perform recursive permission change ([#95866](https://github.com/kubernetes/kubernetes/pull/95866), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
-- Allow cross compilation of kubernetes on different platforms. ([#94403](https://github.com/kubernetes/kubernetes/pull/94403), [@bnrjee](https://github.com/bnrjee)) [SIG Release]
-- Command to start network proxy changes from 'KUBE_ENABLE_EGRESS_VIA_KONNECTIVITY_SERVICE ./cluster/kube-up.sh' to 'KUBE_ENABLE_KONNECTIVITY_SERVICE=true ./hack/kube-up.sh' ([#92669](https://github.com/kubernetes/kubernetes/pull/92669), [@Jefftree](https://github.com/Jefftree)) [SIG Cloud Provider]
-- DefaultPodTopologySpread graduated to Beta. The feature gate is enabled by default. ([#95631](https://github.com/kubernetes/kubernetes/pull/95631), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
-- Kubernetes E2E test image manifest lists now contain Windows images. ([#77398](https://github.com/kubernetes/kubernetes/pull/77398), [@claudiubelu](https://github.com/claudiubelu)) [SIG Testing and Windows]
-- Support for Windows container images (OS Versions: 1809, 1903, 1909, 2004) was added the pause:3.4 image. ([#91452](https://github.com/kubernetes/kubernetes/pull/91452), [@claudiubelu](https://github.com/claudiubelu)) [SIG Node, Release and Windows]
-
-### Documentation
-
-- Fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList ([#95117](https://github.com/kubernetes/kubernetes/pull/95117), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery]
-
-### Bug or Regression
-
-- Exposes and sets a default timeout for the SubjectAccessReview client for DelegatingAuthorizationOptions. ([#95725](https://github.com/kubernetes/kubernetes/pull/95725), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
-- Alter wording to describe pods using a pvc ([#95635](https://github.com/kubernetes/kubernetes/pull/95635), [@RaunakShah](https://github.com/RaunakShah)) [SIG CLI]
-- If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn`t automatically scale the number of pods correctly ([#95647](https://github.com/kubernetes/kubernetes/pull/95647), [@JoshuaAndrew](https://github.com/JoshuaAndrew)) [SIG Apps and Autoscaling]
-- Ignore apparmor for non-linux operating systems ([#93220](https://github.com/kubernetes/kubernetes/pull/93220), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Ipvs: ensure selected scheduler kernel modules are loaded ([#93040](https://github.com/kubernetes/kubernetes/pull/93040), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
-- Kubeadm: add missing "--experimental-patches" flag to "kubeadm init phase control-plane" ([#95786](https://github.com/kubernetes/kubernetes/pull/95786), [@Sh4d1](https://github.com/Sh4d1)) [SIG Cluster Lifecycle]
-- Reorganized iptables rules to fix a performance issue ([#95252](https://github.com/kubernetes/kubernetes/pull/95252), [@tssurya](https://github.com/tssurya)) [SIG Network]
-- Unhealthy pods covered by PDBs can be successfully evicted if enough healthy pods are available. ([#94381](https://github.com/kubernetes/kubernetes/pull/94381), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
-- Update the PIP when it is not in the Succeeded provisioning state during the LB update. ([#95748](https://github.com/kubernetes/kubernetes/pull/95748), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Update the frontend IP config when the service's `pipName` annotation is changed ([#95813](https://github.com/kubernetes/kubernetes/pull/95813), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-
-### Other (Cleanup or Flake)
-
-- NO ([#95690](https://github.com/kubernetes/kubernetes/pull/95690), [@nikhita](https://github.com/nikhita)) [SIG Release]
-
-## Dependencies
-
-### Added
-- github.com/form3tech-oss/jwt-go: [v3.2.2+incompatible](https://github.com/form3tech-oss/jwt-go/tree/v3.2.2)
-
-### Changed
-- github.com/Azure/go-autorest/autorest/adal: [v0.9.0 → v0.9.5](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.9.0...v0.9.5)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.4.0 → v0.4.1](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.4.0...v0.4.1)
-- golang.org/x/crypto: 75b2880 → 7f63de1
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.20.0-alpha.3
-
-
-## Downloads for v1.20.0-alpha.3
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes.tar.gz) | 542cc9e0cd97732020491456402b6e2b4f54f2714007ee1374a7d363663a1b41e82b50886176a5313aaccfbfd4df2bc611d6b32d19961cdc98b5821b75d6b17c
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-src.tar.gz) | 5e5d725294e552fd1d14fd6716d013222827ac2d4e2d11a7a1fdefb77b3459bbeb69931f38e1597de205dd32a1c9763ab524c2af1551faef4f502ef0890f7fbf
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | 60004939727c75d0f06adc4449e16b43303941937c0e9ea9aca7d947e93a5aed5d11e53d1fc94caeb988be66d39acab118d406dc2d6cead61181e1ced6d2be1a
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-386.tar.gz) | 7edba9c4f1bf38fdf1fa5bff2856c05c0e127333ce19b17edf3119dc9b80462c027404a1f58a5eabf1de73a8f2f20aced043dda1fafd893619db1a188cda550c
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | db1818aa82d072cb3e32a2a988e66d76ecf7cebc6b8a29845fa2d6ec27f14a36e4b9839b1b7ed8c43d2da9cde00215eb672a7e8ee235d2e3107bc93c22e58d38
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | d2922e70d22364b1f5a1e94a0c115f849fe2575b231b1ba268f73a9d86fc0a9fbb78dc713446839a2593acf1341cb5a115992f350870f13c1a472bb107b75af7
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | 2e3ae20e554c7d4fc3a8afdfcafe6bbc81d4c5e9aea036357baac7a3fdc2e8098aa8a8c3dded3951667d57f667ce3fbf37ec5ae5ceb2009a569dc9002d3a92f9
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | b54a34e572e6a86221577de376e6f7f9fcd82327f7fe94f2fc8d21f35d302db8a0f3d51e60dc89693999f5df37c96d0c3649a29f07f095efcdd59923ae285c95
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | 5be1b70dc437d3ba88cb0b89cd1bc555f79896c3f5b5f4fa0fb046a0d09d758b994d622ebe5cef8e65bba938c5ae945b81dc297f9dfa0d98f82ea75f344a3a0d
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-windows-386.tar.gz) | 88cf3f66168ef3bf9a5d3d2275b7f33799406e8205f2c202997ebec23d449aa4bb48b010356ab1cf52ff7b527b8df7c8b9947a43a82ebe060df83c3d21b7223a
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | 87d2d4ea1829da8cfa1a705a03ea26c759a03bd1c4d8b96f2c93264c4d172bb63a91d9ddda65cdc5478b627c30ae8993db5baf8be262c157d83bffcebe85474e
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | 7af691fc0b13a937797912374e3b3eeb88d5262e4eb7d4ebe92a3b64b3c226cb049aedfd7e39f639f6990444f7bcf2fe58699cf0c29039daebe100d7eebf60de
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | 557c47870ecf5c2090b2694c8f0c8e3b4ca23df5455a37945bd037bc6fb5b8f417bf737bb66e6336b285112cb52de0345240fdb2f3ce1c4fb335ca7ef1197f99
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | 981de6cf7679d743cdeef1e894314357b68090133814801870504ef30564e32b5675e270db20961e9a731e35241ad9b037bdaf749da87b6c4ce8889eeb1c5855
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | 506578a21601ccff609ae757a55e68634c15cbfecbf13de972c96b32a155ded29bd71aee069c77f5f721416672c7a7ac0b8274de22bfd28e1ecae306313d96c5
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | af0cdcd4a77a7cc8060a076641615730a802f1f02dab084e41926023489efec6102d37681c70ab0dbe7440cd3e72ea0443719a365467985360152b9aae657375
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | 2d92c61596296279de1efae23b2b707415565d9d50cd61a7231b8d10325732b059bcb90f3afb36bef2575d203938c265572721e38df408e8792d3949523bd5d9
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | c298de9b5ac1b8778729a2d8e2793ff86743033254fbc27014333880b03c519de81691caf03aa418c729297ee8942ce9ec89d11b0e34a80576b9936015dc1519
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | daa3c65afda6d7aff206c1494390bbcc205c2c6f8db04c10ca967a690578a01c49d49c6902b85e7158f79fd4d2a87c5d397d56524a75991c9d7db85ac53059a7
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | 05661908bb73bfcaf9c2eae96e9a6a793db5a7a100bce6df9e057985dd53a7a5248d72e81b6d13496bd38b9326c17cdb2edaf0e982b6437507245fb846e1efc6
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | 845e518e2c4ef0cef2c3b58f0b9ea5b5fe9b8a249717f789607752484c424c26ae854b263b7c0a004a8426feb9aa3683c177a9ed2567e6c3521f4835ea08c24a
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | 530e536574ed2c3e5973d3c0f0fdd2b4d48ef681a7a7c02db13e605001669eeb4f4b8a856fc08fc21436658c27b377f5d04dbcb3aae438098abc953b6eaf5712
-
-## Changelog since v1.20.0-alpha.2
-
-## Changes by Kind
-
-### API Change
-
-- New parameter `defaultingType` for `PodTopologySpread` plugin allows to use k8s defined or user provided default constraints ([#95048](https://github.com/kubernetes/kubernetes/pull/95048), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-
-### Feature
-
-- Added new k8s.io/component-helpers repository providing shared helper code for (core) components. ([#92507](https://github.com/kubernetes/kubernetes/pull/92507), [@ingvagabund](https://github.com/ingvagabund)) [SIG Apps, Node, Release and Scheduling]
-- Adds `create ingress` command to `kubectl` ([#78153](https://github.com/kubernetes/kubernetes/pull/78153), [@amimof](https://github.com/amimof)) [SIG CLI and Network]
-- Kubectl create now supports creating ingress objects. ([#94327](https://github.com/kubernetes/kubernetes/pull/94327), [@rikatz](https://github.com/rikatz)) [SIG CLI and Network]
-- New default scheduling plugins order reduces scheduling and preemption latency when taints and node affinity are used ([#95539](https://github.com/kubernetes/kubernetes/pull/95539), [@soulxu](https://github.com/soulxu)) [SIG Scheduling]
-- SCTP support in API objects (Pod, Service, NetworkPolicy) is now GA.
-  Note that this has no effect on whether SCTP is enabled on nodes at the kernel level,
-  and note that some cloud platforms and network plugins do not support SCTP traffic. ([#95566](https://github.com/kubernetes/kubernetes/pull/95566), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
-- Scheduling Framework: expose Run[Pre]ScorePlugins functions to PreemptionHandle which can be used in PostFilter extention point. ([#93534](https://github.com/kubernetes/kubernetes/pull/93534), [@everpeace](https://github.com/everpeace)) [SIG Scheduling and Testing]
-- SelectorSpreadPriority maps to PodTopologySpread plugin when DefaultPodTopologySpread feature is enabled ([#95448](https://github.com/kubernetes/kubernetes/pull/95448), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- SetHostnameAsFQDN has been graduated to Beta and therefore it is enabled by default. ([#95267](https://github.com/kubernetes/kubernetes/pull/95267), [@javidiaz](https://github.com/javidiaz)) [SIG Node]
-
-### Bug or Regression
-
-- An issues preventing volume expand controller to annotate the PVC with `volume.kubernetes.io/storage-resizer` when the PVC StorageClass is already updated to the out-of-tree provisioner is now fixed. ([#94489](https://github.com/kubernetes/kubernetes/pull/94489), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery, Apps and Storage]
-- Change the mount way from systemd to normal mount except ceph and glusterfs intree-volume. ([#94916](https://github.com/kubernetes/kubernetes/pull/94916), [@smileusd](https://github.com/smileusd)) [SIG Apps, Cloud Provider, Network, Node, Storage and Testing]
-- Fix azure disk attach failure for disk size bigger than 4TB ([#95463](https://github.com/kubernetes/kubernetes/pull/95463), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix azure disk data loss issue on Windows when unmount disk ([#95456](https://github.com/kubernetes/kubernetes/pull/95456), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix verb & scope reporting for kube-apiserver metrics (LIST reported instead of GET) ([#95562](https://github.com/kubernetes/kubernetes/pull/95562), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Fix vsphere detach failure for static PVs ([#95447](https://github.com/kubernetes/kubernetes/pull/95447), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fix: smb valid path error ([#95583](https://github.com/kubernetes/kubernetes/pull/95583), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Fixed a bug causing incorrect formatting of `kubectl describe ingress`. ([#94985](https://github.com/kubernetes/kubernetes/pull/94985), [@howardjohn](https://github.com/howardjohn)) [SIG CLI and Network]
-- Fixed a bug in client-go where new clients with customized `Dial`, `Proxy`, `GetCert` config may get stale HTTP transports. ([#95427](https://github.com/kubernetes/kubernetes/pull/95427), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Fixes high CPU usage in kubectl drain ([#95260](https://github.com/kubernetes/kubernetes/pull/95260), [@amandahla](https://github.com/amandahla)) [SIG CLI]
-- Support the node label `node.kubernetes.io/exclude-from-external-load-balancers` ([#95542](https://github.com/kubernetes/kubernetes/pull/95542), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-
-### Other (Cleanup or Flake)
-
-- Fix func name NewCreateCreateDeploymentOptions ([#91931](https://github.com/kubernetes/kubernetes/pull/91931), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG CLI]
-- Kubeadm: update the default pause image version to 1.4.0 on Windows. With this update the image supports Windows versions 1809 (2019LTS), 1903, 1909, 2004 ([#95419](https://github.com/kubernetes/kubernetes/pull/95419), [@jsturtevant](https://github.com/jsturtevant)) [SIG Cluster Lifecycle and Windows]
-- Upgrade snapshot controller to 3.0.0 ([#95412](https://github.com/kubernetes/kubernetes/pull/95412), [@saikat-royc](https://github.com/saikat-royc)) [SIG Cloud Provider]
-- Remove the dependency of csi-translation-lib module on apiserver/cloud-provider/controller-manager ([#95543](https://github.com/kubernetes/kubernetes/pull/95543), [@wawa0210](https://github.com/wawa0210)) [SIG Release]
-- Scheduler framework interface moved from pkg/scheduler/framework/v1alpha to pkg/scheduler/framework ([#95069](https://github.com/kubernetes/kubernetes/pull/95069), [@farah](https://github.com/farah)) [SIG Scheduling, Storage and Testing]
-- UDP and SCTP protocols can left stale connections that need to be cleared to avoid services disruption, but they can cause problems that are hard to debug.
-  Kubernetes components using a loglevel greater or equal than 4 will log the conntrack operations and its output, to show the entries that were deleted. ([#95694](https://github.com/kubernetes/kubernetes/pull/95694), [@aojea](https://github.com/aojea)) [SIG Network]
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-_Nothing has changed._
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.20.0-alpha.2
-
-
-## Downloads for v1.20.0-alpha.2
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes.tar.gz) | 45089a4d26d56a5d613ecbea64e356869ac738eca3cc71d16b74ea8ae1b4527bcc32f1dc35ff7aa8927e138083c7936603faf063121d965a2f0f8ba28fa128d8
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-src.tar.gz) | 646edd890d6df5858b90aaf68cc6e1b4589b8db09396ae921b5c400f2188234999e6c9633906692add08c6e8b4b09f12b2099132b0a7533443fb2a01cfc2bf81
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | c136273883e24a2a50b5093b9654f01cdfe57b97461d34885af4a68c2c4d108c07583c02b1cdf7f57f82e91306e542ce8f3bddb12fcce72b744458bc4796f8eb
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-386.tar.gz) | 6ec59f1ed30569fa64ddb2d0de32b1ae04cda4ffe13f339050a7c9d7c63d425ee6f6d963dcf82c17281c4474da3eaf32c08117669052872a8c81bdce2c8a5415
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | 7b40a4c087e2ea7f8d055f297fcd39a3f1cb6c866e7a3981a9408c3c3eb5363c648613491aad11bc7d44d5530b20832f8f96f6ceff43deede911fb74aafad35f
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | cda9955feebea5acb8f2b5b87895d24894bbbbde47041453b1f926ebdf47a258ce0496aa27d06bcbf365b5615ce68a20d659b64410c54227216726e2ee432fca
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | f65bd9241c7eb88a4886a285330f732448570aea4ededaebeabcf70d17ea185f51bf8a7218f146ee09fb1adceca7ee71fb3c3683834f2c415163add820fba96e
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | 1e377599af100a81d027d9199365fb8208d443a8e0a97affff1a79dc18796e14b78cb53d6e245c1c1e8defd0e050e37bf5f2a23c8a3ff45a6d18d03619709bf5
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | 1cdee81478246aa7e7b80ae4efc7f070a5b058083ae278f59fad088b75a8052761b0e15ab261a6e667ddafd6a69fb424fc307072ed47941cad89a85af7aee93d
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-windows-386.tar.gz) | d8774167c87b6844c348aa15e92d5033c528d6ab9e95d08a7cb22da68bafd8e46d442cf57a5f6affad62f674c10ae6947d524b94108b5e450ca78f92656d63c0
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | f664b47d8daa6036f8154c1dc1f881bfe683bf57c39d9b491de3848c03d051c50c6644d681baf7f9685eae45f9ce62e4c6dfea2853763cfe8256a61bdd59d894
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | d6fcb4600be0beb9de222a8da64c35fe22798a0da82d41401d34d0f0fc7e2817512169524c281423d8f4a007cd77452d966317d5a1b67d2717a05ff346e8aa7d
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | 022a76cf10801f8afbabb509572479b68fdb4e683526fa0799cdbd9bab4d3f6ecb76d1d63d0eafee93e3edf6c12892d84b9c771ef2325663b95347728fa3d6c0
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | 0679aadd60bbf6f607e5befad74b5267eb2d4c1b55985cc25a97e0f4c5efb7acbb3ede91bfa6a5a5713dae4d7a302f6faaf678fd6b359284c33d9a6aca2a08bb
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | 9f2cfeed543b515eafb60d9765a3afff4f3d323c0a5c8a0d75e3de25985b2627817bfcbe59a9a61d969e026e2b861adb974a09eae75b58372ed736ceaaed2a82
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | 937258704d7b9dcd91f35f2d34ee9dd38c18d9d4e867408c05281bfbbb919ad012c95880bee84d2674761aa44cc617fb2fae1124cf63b689289286d6eac1c407
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | 076165d745d47879de68f4404eaf432920884be48277eb409e84bf2c61759633bf3575f46b0995f1fc693023d76c0921ed22a01432e756d7f8d9e246a243b126
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | 1ff2e2e3e43af41118cdfb70c778e15035bbb1aca833ffd2db83c4bcd44f55693e956deb9e65017ebf3c553f2820ad5cd05f5baa33f3d63f3e00ed980ea4dfed
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | b232c7359b8c635126899beee76998078eec7a1ef6758d92bcdebe8013b0b1e4d7b33ecbf35e3f82824fe29493400845257e70ed63c1635bfa36c8b3b4969f6f
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | 51d415a068f554840f4c78d11a4fedebd7cb03c686b0ec864509b24f7a8667ebf54bb0a25debcf2b70f38be1e345e743f520695b11806539a55a3620ce21946f
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | b51c082d8af358233a088b632cf2f6c8cfe5421471c27f5dc9ba4839ae6ea75df25d84298f2042770097554c01742bb7686694b331ad9bafc93c86317b867728
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | 91b9d26620a2dde67a0edead0039814efccbdfd54594dda3597aaced6d89140dc92612ed0727bc21d63468efeef77c845e640153b09e39d8b736062e6eee0c76
-
-## Changelog since v1.20.0-alpha.1
-
-## Changes by Kind
-
-### Deprecation
-
-- Action-required: kubeadm: graduate the "kubeadm alpha certs" command to a parent command "kubeadm certs". The command "kubeadm alpha certs" is deprecated and will be removed in a future release. Please migrate. ([#94938](https://github.com/kubernetes/kubernetes/pull/94938), [@yagonobre](https://github.com/yagonobre)) [SIG Cluster Lifecycle]
-- Action-required: kubeadm: remove the deprecated feature --experimental-kustomize from kubeadm commands. The feature was replaced with --experimental-patches in 1.19. To migrate see the --help description for the --experimental-patches flag. ([#94871](https://github.com/kubernetes/kubernetes/pull/94871), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: deprecate self-hosting support. The experimental command "kubeadm alpha self-hosting" is now deprecated and will be removed in a future release. ([#95125](https://github.com/kubernetes/kubernetes/pull/95125), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Removes deprecated scheduler metrics DeprecatedSchedulingDuration, DeprecatedSchedulingAlgorithmPredicateEvaluationSecondsDuration, DeprecatedSchedulingAlgorithmPriorityEvaluationSecondsDuration ([#94884](https://github.com/kubernetes/kubernetes/pull/94884), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-- Scheduler alpha metrics binding_duration_seconds and scheduling_algorithm_preemption_evaluation_seconds are deprecated, Both of those metrics are now covered as part of framework_extension_point_duration_seconds, the former as a PostFilter the latter and a Bind plugin. The plan is to remove both in 1.21 ([#95001](https://github.com/kubernetes/kubernetes/pull/95001), [@arghya88](https://github.com/arghya88)) [SIG Instrumentation and Scheduling]
-
-### API Change
-
-- GPU metrics provided by kubelet are now disabled by default ([#95184](https://github.com/kubernetes/kubernetes/pull/95184), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node]
-- New parameter `defaultingType` for `PodTopologySpread` plugin allows to use k8s defined or user provided default constraints ([#95048](https://github.com/kubernetes/kubernetes/pull/95048), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Server Side Apply now treats LabelSelector fields as atomic (meaning the entire selector is managed by a single writer and updated together), since they contain interrelated and inseparable fields that do not merge in intuitive ways. ([#93901](https://github.com/kubernetes/kubernetes/pull/93901), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Storage and Testing]
-- Status of v1beta1 CRDs without "preserveUnknownFields:false" will show violation "spec.preserveUnknownFields: Invalid value: true: must be false" ([#93078](https://github.com/kubernetes/kubernetes/pull/93078), [@vareti](https://github.com/vareti)) [SIG API Machinery]
-
-### Feature
-
-- Added `get-users` and `delete-user` to the `kubectl config` subcommand ([#89840](https://github.com/kubernetes/kubernetes/pull/89840), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-- Added counter metric "apiserver_request_self" to count API server self-requests with labels for verb, resource, and subresource. ([#94288](https://github.com/kubernetes/kubernetes/pull/94288), [@LogicalShark](https://github.com/LogicalShark)) [SIG API Machinery, Auth, Instrumentation and Scheduling]
-- Added new k8s.io/component-helpers repository providing shared helper code for (core) components. ([#92507](https://github.com/kubernetes/kubernetes/pull/92507), [@ingvagabund](https://github.com/ingvagabund)) [SIG Apps, Node, Release and Scheduling]
-- Adds `create ingress` command to `kubectl` ([#78153](https://github.com/kubernetes/kubernetes/pull/78153), [@amimof](https://github.com/amimof)) [SIG CLI and Network]
-- Allow configuring AWS LoadBalancer health check protocol via service annotations ([#94546](https://github.com/kubernetes/kubernetes/pull/94546), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- Azure: Support multiple services sharing one IP address ([#94991](https://github.com/kubernetes/kubernetes/pull/94991), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Ephemeral containers now apply the same API defaults as initContainers and containers ([#94896](https://github.com/kubernetes/kubernetes/pull/94896), [@wawa0210](https://github.com/wawa0210)) [SIG Apps and CLI]
-- In dual-stack bare-metal clusters, you can now pass dual-stack IPs to `kubelet --node-ip`.
-  eg: `kubelet --node-ip 10.1.0.5,fd01::0005`. This is not yet supported for non-bare-metal
-  clusters.
-
-  In dual-stack clusters where nodes have dual-stack addresses, hostNetwork pods
-  will now get dual-stack PodIPs. ([#95239](https://github.com/kubernetes/kubernetes/pull/95239), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Introduces a new GCE specific cluster creation variable KUBE_PROXY_DISABLE. When set to true, this will skip over the creation of kube-proxy (whether the daemonset or static pod). This can be used to control the lifecycle of kube-proxy separately from the lifecycle of the nodes. ([#91977](https://github.com/kubernetes/kubernetes/pull/91977), [@varunmar](https://github.com/varunmar)) [SIG Cloud Provider]
-- Kubeadm: do not throw errors if the current system time is outside of the NotBefore and NotAfter bounds of a loaded certificate. Print warnings instead. ([#94504](https://github.com/kubernetes/kubernetes/pull/94504), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: make the command "kubeadm alpha kubeconfig user" accept a "--config" flag and remove the following flags:
-  - apiserver-advertise-address / apiserver-bind-port: use either localAPIEndpoint from InitConfiguration or controlPlaneEndpoint from ClusterConfiguration.
-  - cluster-name: use clusterName from ClusterConfiguration
-  - cert-dir: use certificatesDir from ClusterConfiguration ([#94879](https://github.com/kubernetes/kubernetes/pull/94879), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubectl rollout history sts/sts-name --revision=some-revision will start showing the detailed view of  the sts on that specified revision ([#86506](https://github.com/kubernetes/kubernetes/pull/86506), [@dineshba](https://github.com/dineshba)) [SIG CLI]
-- Scheduling Framework: expose Run[Pre]ScorePlugins functions to PreemptionHandle which can be used in PostFilter extention point. ([#93534](https://github.com/kubernetes/kubernetes/pull/93534), [@everpeace](https://github.com/everpeace)) [SIG Scheduling and Testing]
-- Send gce node startup scripts logs to console and journal ([#95311](https://github.com/kubernetes/kubernetes/pull/95311), [@karan](https://github.com/karan)) [SIG Cloud Provider and Node]
-- Support kubectl delete orphan/foreground/background options ([#93384](https://github.com/kubernetes/kubernetes/pull/93384), [@zhouya0](https://github.com/zhouya0)) [SIG CLI and Testing]
-
-### Bug or Regression
-
-- Change the mount way from systemd to normal mount except ceph and glusterfs intree-volume. ([#94916](https://github.com/kubernetes/kubernetes/pull/94916), [@smileusd](https://github.com/smileusd)) [SIG Apps, Cloud Provider, Network, Node, Storage and Testing]
-- Cloud node controller: handle empty providerID from getProviderID ([#95342](https://github.com/kubernetes/kubernetes/pull/95342), [@nicolehanjing](https://github.com/nicolehanjing)) [SIG Cloud Provider]
-- Fix a bug where the endpoint slice controller was not mirroring the parent service labels to its corresponding endpoint slices ([#94443](https://github.com/kubernetes/kubernetes/pull/94443), [@aojea](https://github.com/aojea)) [SIG Apps and Network]
-- Fix azure disk attach failure for disk size bigger than 4TB ([#95463](https://github.com/kubernetes/kubernetes/pull/95463), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix azure disk data loss issue on Windows when unmount disk ([#95456](https://github.com/kubernetes/kubernetes/pull/95456), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix detach azure disk issue when vm not exist ([#95177](https://github.com/kubernetes/kubernetes/pull/95177), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix network_programming_latency metric reporting for Endpoints/EndpointSlice deletions, where we don't have correct timestamp ([#95363](https://github.com/kubernetes/kubernetes/pull/95363), [@wojtek-t](https://github.com/wojtek-t)) [SIG Network and Scalability]
-- Fix scheduler cache snapshot when a Node is deleted before its Pods ([#95130](https://github.com/kubernetes/kubernetes/pull/95130), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Fix vsphere detach failure for static PVs ([#95447](https://github.com/kubernetes/kubernetes/pull/95447), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fixed a bug that prevents the use of ephemeral containers in the presence of a validating admission webhook. ([#94685](https://github.com/kubernetes/kubernetes/pull/94685), [@verb](https://github.com/verb)) [SIG Node and Testing]
-- Gracefully delete nodes when their parent scale set went missing ([#95289](https://github.com/kubernetes/kubernetes/pull/95289), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- In dual-stack clusters, kubelet will now set up both IPv4 and IPv6 iptables rules, which may
-  fix some problems, eg with HostPorts. ([#94474](https://github.com/kubernetes/kubernetes/pull/94474), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- Kubeadm: for Docker as the container runtime, make the "kubeadm reset" command stop containers before removing them ([#94586](https://github.com/kubernetes/kubernetes/pull/94586), [@BedivereZero](https://github.com/BedivereZero)) [SIG Cluster Lifecycle]
-- Kubeadm: warn but do not error out on missing "ca.key" files for root CA, front-proxy CA and etcd CA, during "kubeadm join --control-plane" if the user has provided all certificates, keys and kubeconfig files which require signing with the given CA keys. ([#94988](https://github.com/kubernetes/kubernetes/pull/94988), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Port mapping allows to map the same `containerPort` to multiple `hostPort` without naming the mapping explicitly. ([#94494](https://github.com/kubernetes/kubernetes/pull/94494), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Network and Node]
-- Warn instead of fail when creating Roles and ClusterRoles with custom verbs via kubectl ([#92492](https://github.com/kubernetes/kubernetes/pull/92492), [@eddiezane](https://github.com/eddiezane)) [SIG CLI]
-
-### Other (Cleanup or Flake)
-
-- Added fine grained debugging to the intra-pod conformance test for helping easily resolve networking issues for nodes that might be unhealthy when running conformance or sonobuoy tests. ([#93837](https://github.com/kubernetes/kubernetes/pull/93837), [@jayunit100](https://github.com/jayunit100)) [SIG Network and Testing]
-- AdmissionReview objects sent for the creation of Namespace API objects now populate the `namespace` attribute consistently (previously the `namespace` attribute was empty for Namespace creation via POST requests, and populated for Namespace creation via server-side-apply PATCH requests) ([#95012](https://github.com/kubernetes/kubernetes/pull/95012), [@nodo](https://github.com/nodo)) [SIG API Machinery and Testing]
-- Client-go header logging (at verbosity levels >= 9) now masks `Authorization` header contents ([#95316](https://github.com/kubernetes/kubernetes/pull/95316), [@sfowl](https://github.com/sfowl)) [SIG API Machinery]
-- Enhance log information of verifyRunAsNonRoot, add pod, container information ([#94911](https://github.com/kubernetes/kubernetes/pull/94911), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
-- Errors from staticcheck:                                                                                                                                      
-  vendor/k8s.io/client-go/discovery/cached/memory/memcache_test.go:94:2: this value of g is never used (SA4006) ([#95098](https://github.com/kubernetes/kubernetes/pull/95098), [@phunziker](https://github.com/phunziker)) [SIG API Machinery]
-- Kubeadm: update the default pause image version to 1.4.0 on Windows. With this update the image supports Windows versions 1809 (2019LTS), 1903, 1909, 2004 ([#95419](https://github.com/kubernetes/kubernetes/pull/95419), [@jsturtevant](https://github.com/jsturtevant)) [SIG Cluster Lifecycle and Windows]
-- Masks ceph RBD adminSecrets in logs when logLevel >= 4 ([#95245](https://github.com/kubernetes/kubernetes/pull/95245), [@sfowl](https://github.com/sfowl)) [SIG Storage]
-- Upgrade snapshot controller to 3.0.0 ([#95412](https://github.com/kubernetes/kubernetes/pull/95412), [@saikat-royc](https://github.com/saikat-royc)) [SIG Cloud Provider]
-- Remove offensive words from kubectl cluster-info command ([#95202](https://github.com/kubernetes/kubernetes/pull/95202), [@rikatz](https://github.com/rikatz)) [SIG Architecture, CLI and Testing]
-- The following new metrics are available.
-  - network_plugin_operations_total
-  - network_plugin_operations_errors_total ([#93066](https://github.com/kubernetes/kubernetes/pull/93066), [@AnishShah](https://github.com/AnishShah)) [SIG Instrumentation, Network and Node]
-- Vsphere: improve logging message on node cache refresh event ([#95236](https://github.com/kubernetes/kubernetes/pull/95236), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider]
-- `kubectl api-resources` now prints the API version (as 'API group/version', same as output of `kubectl api-versions`). The column APIGROUP is now APIVERSION ([#95253](https://github.com/kubernetes/kubernetes/pull/95253), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-
-## Dependencies
-
-### Added
-- github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/internal/testify/tree/v1.5.1)
-
-### Changed
-- github.com/aws/aws-sdk-go: [v1.28.2 → v1.35.5](https://github.com/aws/aws-sdk-go/compare/v1.28.2...v1.35.5)
-- github.com/jmespath/go-jmespath: [c2b33e8 → v0.4.0](https://github.com/jmespath/go-jmespath/compare/c2b33e8...v0.4.0)
-- k8s.io/kube-openapi: 6aeccd4 → 8b50664
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.9 → v0.0.12
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1 → b3cf1e8
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.20.0-alpha.1
-
-
-## Downloads for v1.20.0-alpha.1
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes.tar.gz) | e7daed6502ea07816274f2371f96fe1a446d0d7917df4454b722d9eb3b5ff6163bfbbd5b92dfe7a0c1d07328b8c09c4ae966e482310d6b36de8813aaf87380b5
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-src.tar.gz) | e91213a0919647a1215d4691a63b12d89a3e74055463a8ebd71dc1a4cabf4006b3660881067af0189960c8dab74f4a7faf86f594df69021901213ee5b56550ea
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | 1f3add5f826fa989820d715ca38e8864b66f30b59c1abeacbb4bfb96b4e9c694eac6b3f4c1c81e0ee3451082d44828cb7515315d91ad68116959a5efbdaef1e1
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-386.tar.gz) | c62acdc8993b0a950d4b0ce0b45473bf96373d501ce61c88adf4007afb15c1d53da8d53b778a7eccac6c1624f7fdda322be9f3a8bc2d80aaad7b4237c39f5eaf
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | 1203ababfe00f9bc5be5c059324c17160a96530c1379a152db33564bbe644ccdb94b30eea15a0655bd652efb17895a46c31bbba19d4f5f473c2a0ff62f6e551f
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | 31860088596e12d739c7aed94556c2d1e217971699b950c8417a3cea1bed4e78c9ff1717b9f3943354b75b4641d4b906cd910890dbf4278287c0d224837d9a7d
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | 8d469f37fe20d6e15b5debc13cce4c22e8b7a4f6a4ac787006b96507a85ce761f63b28140d692c54b5f7deb08697f8d5ddb9bbfa8f5ac0d9241fc7de3a3fe3cd
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | 0d62ee1729cd5884946b6c73701ad3a570fa4d642190ca0fe5c1db0fb0cba9da3ac86a948788d915b9432d28ab8cc499e28aadc64530b7d549ee752a6ed93ec1
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | 0fc0420e134ec0b8e0ab2654e1e102cebec47b48179703f1e1b79d51ee0d6da55a4e7304d8773d3cf830341ac2fe3cede1e6b0460fd88f7595534e0730422d5a
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-windows-386.tar.gz) | 3fb53b5260f4888c77c0e4ff602bbcf6bf38c364d2769850afe2b8d8e8b95f7024807c15e2b0d5603e787c46af8ac53492be9e88c530f578b8a389e3bd50c099
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | 2f44c93463d6b5244ce0c82f147e7f32ec2233d0e29c64c3c5759e23533aebd12671bf63e986c0861e9736f9b5259bb8d138574a7c8c8efc822e35cd637416c0
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | ae82d14b1214e4100f0cc2c988308b3e1edd040a65267d0eddb9082409f79644e55387889e3c0904a12c710f91206e9383edf510990bee8c9ea2e297b6472551
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | 9a2a5828b7d1ddb16cc19d573e99a4af642f84129408e6203eeeb0558e7b8db77f3269593b5770b6a976fe9df4a64240ed27ad05a4bd43719e55fce1db0abf58
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | ed700dd226c999354ce05b73927388d36d08474c15333ae689427de15de27c84feb6b23c463afd9dd81993315f31eb8265938cfc7ecf6f750247aa42b9b33fa9
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | abb7a9d726538be3ccf5057a0c63ff9732b616e213c6ebb81363f0c49f1e168ce8068b870061ad7cba7ba1d49252f94cf00a5f68cec0f38dc8fce4e24edc5ca6
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | 3a51888af1bfdd2d5b0101d173ee589c1f39240e4428165f5f85c610344db219625faa42f00a49a83ce943fb079be873b1a114a62003fae2f328f9bf9d1227a4
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | d0f28e3c38ca59a7ff1bfecb48a1ce97116520355d9286afdca1200d346c10018f5bbdf890f130a388654635a2e83e908b263ed45f8a88defca52a7c1d0a7984
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | ed9d3f13028beb3be39bce980c966f82c4b39dc73beaae38cc075fea5be30b0309e555cb2af8196014f2cc9f0df823354213c314b4d6545ff6e30dd2d00ec90e
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | ad5b3268db365dcdded9a9a4bffc90c7df0f844000349accdf2b8fb5f1081e553de9b9e9fb25d5e8a4ef7252d51fa94ef94d36d2ab31d157854e164136f662c2
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | c4de2524e513996def5eeba7b83f7b406f17eaf89d4d557833a93bd035348c81fa9375dcd5c27cfcc55d73995449fc8ee504be1b3bd7b9f108b0b2f153cb05ae
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | 9157b44e3e7bd5478af9f72014e54d1afa5cd19b984b4cd8b348b312c385016bb77f29db47f44aea08b58abf47d8a396b92a2d0e03f2fe8acdd30f4f9466cbdb
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.20.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | 8b40a43c5e6447379ad2ee8aac06e8028555e1b370a995f6001018a62411abe5fbbca6060b3d1682c5cadc07a27d49edd3204e797af46368800d55f4ca8aa1de
-
-## Changelog since v1.20.0-alpha.0
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - Azure blob disk feature(`kind`: `Shared`, `Dedicated`) has been deprecated, you should use `kind`: `Managed` in `kubernetes.io/azure-disk` storage class. ([#92905](https://github.com/kubernetes/kubernetes/pull/92905), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-  - CVE-2020-8559 (Medium): Privilege escalation from compromised node to cluster. See https://github.com/kubernetes/kubernetes/issues/92914 for more details.
-  The API Server will no longer proxy non-101 responses for upgrade requests. This could break proxied backends (such as an extension API server) that respond to upgrade requests with a non-101 response code. ([#92941](https://github.com/kubernetes/kubernetes/pull/92941), [@tallclair](https://github.com/tallclair)) [SIG API Machinery]
-
-## Changes by Kind
-
-### Deprecation
-
-- Kube-apiserver: the componentstatus API is deprecated. This API provided status of etcd, kube-scheduler, and kube-controller-manager components, but only worked when those components were local to the API server, and when kube-scheduler and kube-controller-manager exposed unsecured health endpoints. Instead of this API, etcd health is included in the kube-apiserver health check and kube-scheduler/kube-controller-manager health checks can be made directly against those components' health endpoints. ([#93570](https://github.com/kubernetes/kubernetes/pull/93570), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Cluster Lifecycle]
-- Kubeadm: deprecate the "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. ([#92881](https://github.com/kubernetes/kubernetes/pull/92881), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. This change also removes the parent command "kubeadm alpha kubelet" as there are no more sub-commands under it for the time being. ([#94668](https://github.com/kubernetes/kubernetes/pull/94668), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated --kubelet-config flag for the command "kubeadm upgrade node" ([#94869](https://github.com/kubernetes/kubernetes/pull/94869), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubelet's deprecated endpoint `metrics/resource/v1alpha1` has been removed, please adopt to `metrics/resource`. ([#94272](https://github.com/kubernetes/kubernetes/pull/94272), [@RainbowMango](https://github.com/RainbowMango)) [SIG Instrumentation and Node]
-- The v1alpha1 PodPreset API and admission plugin has been removed with no built-in replacement. Admission webhooks can be used to modify pods on creation. ([#94090](https://github.com/kubernetes/kubernetes/pull/94090), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps, CLI, Cloud Provider, Scalability and Testing]
-
-### API Change
-
-- A new `nofuzz` go build tag now disables gofuzz support. Release binaries enable this. ([#92491](https://github.com/kubernetes/kubernetes/pull/92491), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery]
-- A new alpha-level field, `SupportsFsGroup`, has been introduced for CSIDrivers to allow them to specify whether they support volume ownership and permission modifications. The `CSIVolumeSupportFSGroup` feature gate must be enabled to allow this field to be used. ([#92001](https://github.com/kubernetes/kubernetes/pull/92001), [@huffmanca](https://github.com/huffmanca)) [SIG API Machinery, CLI and Storage]
-- Added pod version skew strategy for seccomp profile to synchronize the deprecated annotations with the new API Server fields. Please see the corresponding section [in the KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/20190717-seccomp-ga.md&#35;version-skew-strategy) for more detailed explanations. ([#91408](https://github.com/kubernetes/kubernetes/pull/91408), [@saschagrunert](https://github.com/saschagrunert)) [SIG Apps, Auth, CLI and Node]
-- Adds the ability to disable Accelerator/GPU metrics collected by Kubelet ([#91930](https://github.com/kubernetes/kubernetes/pull/91930), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node]
-- Custom Endpoints are now mirrored to EndpointSlices by a new EndpointSliceMirroring controller. ([#91637](https://github.com/kubernetes/kubernetes/pull/91637), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Cloud Provider, Instrumentation, Network and Testing]
-- External facing API podresources is now available under k8s.io/kubelet/pkg/apis/ ([#92632](https://github.com/kubernetes/kubernetes/pull/92632), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node and Testing]
-- Fix conversions for custom metrics. ([#94481](https://github.com/kubernetes/kubernetes/pull/94481), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- Generic ephemeral volumes, a new alpha feature under the `GenericEphemeralVolume` feature gate, provide a more flexible alternative to `EmptyDir` volumes: as with `EmptyDir`, volumes are created and deleted for each pod automatically by Kubernetes. But because the normal provisioning process is used (`PersistentVolumeClaim`), storage can be provided by third-party storage vendors and all of the usual volume features work. Volumes don't need to be empt; for example, restoring from snapshot is supported. ([#92784](https://github.com/kubernetes/kubernetes/pull/92784), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Instrumentation, Node, Scheduling, Storage and Testing]
-- Kube-controller-manager: volume plugins can be restricted from contacting local and loopback addresses by setting `--volume-host-allow-local-loopback=false`, or from contacting specific CIDR ranges by setting `--volume-host-cidr-denylist` (for example, `--volume-host-cidr-denylist=127.0.0.1/28,feed::/16`) ([#91785](https://github.com/kubernetes/kubernetes/pull/91785), [@mattcary](https://github.com/mattcary)) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
-- Kubernetes is now built with golang 1.15.0-rc.1.
-  - The deprecated, legacy behavior of treating the CommonName field on X.509 serving certificates as a host name when no Subject Alternative Names are present is now disabled by default. It can be temporarily re-enabled by adding the value x509ignoreCN=0 to the GODEBUG environment variable. ([#93264](https://github.com/kubernetes/kubernetes/pull/93264), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Storage and Testing]
-- Migrate scheduler, controller-manager and cloud-controller-manager to use LeaseLock ([#94603](https://github.com/kubernetes/kubernetes/pull/94603), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, Apps, Cloud Provider and Scheduling]
-- Modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly ([#94182](https://github.com/kubernetes/kubernetes/pull/94182), [@mattfenwick](https://github.com/mattfenwick)) [SIG API Machinery, Apps, Auth, Network and Node]
-- The ServiceAccountIssuerDiscovery feature gate is now Beta and enabled by default. ([#91921](https://github.com/kubernetes/kubernetes/pull/91921), [@mtaufen](https://github.com/mtaufen)) [SIG Auth]
-- The kube-controller-manager managed signers can now have distinct signing certificates and keys.  See the help about `--cluster-signing-[signer-name]-{cert,key}-file`.  `--cluster-signing-{cert,key}-file` is still the default. ([#90822](https://github.com/kubernetes/kubernetes/pull/90822), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps and Auth]
-- When creating a networking.k8s.io/v1 Ingress API object, `spec.tls[*].secretName` values are required to pass validation rules for Secret API object names. ([#93929](https://github.com/kubernetes/kubernetes/pull/93929), [@liggitt](https://github.com/liggitt)) [SIG Network]
-- WinOverlay feature graduated to beta ([#94807](https://github.com/kubernetes/kubernetes/pull/94807), [@ksubrmnn](https://github.com/ksubrmnn)) [SIG Windows]
-
-### Feature
-
-- ACTION REQUIRED : In CoreDNS v1.7.0, [metrics names have been changed](https://github.com/coredns/coredns/blob/master/notes/coredns-1.7.0.md&#35;metric-changes) which will be backward incompatible with existing reporting formulas that use the old metrics' names. Adjust your formulas to the new names before upgrading.
-
-  Kubeadm now includes CoreDNS version v1.7.0. Some of the major changes include:
-  -  Fixed a bug that could cause CoreDNS to stop updating service records.
-  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
-  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
-  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
-  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
-  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92651](https://github.com/kubernetes/kubernetes/pull/92651), [@rajansandeep](https://github.com/rajansandeep)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
-- Add metrics for azure service operations (route and loadbalancer). ([#94124](https://github.com/kubernetes/kubernetes/pull/94124), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider and Instrumentation]
-- Add network rule support in Azure account creation ([#94239](https://github.com/kubernetes/kubernetes/pull/94239), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Add tags support for Azure File Driver ([#92825](https://github.com/kubernetes/kubernetes/pull/92825), [@ZeroMagic](https://github.com/ZeroMagic)) [SIG Cloud Provider and Storage]
-- Added kube-apiserver metrics: apiserver_current_inflight_request_measures and, when API Priority and Fairness is enable, windowed_request_stats. ([#91177](https://github.com/kubernetes/kubernetes/pull/91177), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery, Instrumentation and Testing]
-- Audit events for API requests to deprecated API versions now include a `"k8s.io/deprecated": "true"` audit annotation. If a target removal release is identified, the audit event includes a `"k8s.io/removal-release": "<majorVersion>.<minorVersion>"` audit annotation as well. ([#92842](https://github.com/kubernetes/kubernetes/pull/92842), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Instrumentation]
-- Cloud node-controller use InstancesV2 ([#91319](https://github.com/kubernetes/kubernetes/pull/91319), [@gongguan](https://github.com/gongguan)) [SIG Apps, Cloud Provider, Scalability and Storage]
-- Kubeadm: Add a preflight check that the control-plane node has at least 1700MB of RAM ([#93275](https://github.com/kubernetes/kubernetes/pull/93275), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--cluster-name" flag to the "kubeadm alpha kubeconfig user" to allow configuring the cluster name in the generated kubeconfig file ([#93992](https://github.com/kubernetes/kubernetes/pull/93992), [@prabhu43](https://github.com/prabhu43)) [SIG Cluster Lifecycle]
-- Kubeadm: add the "--kubeconfig" flag to the "kubeadm init phase upload-certs" command to allow users to pass a custom location for a kubeconfig file. ([#94765](https://github.com/kubernetes/kubernetes/pull/94765), [@zhanw15](https://github.com/zhanw15)) [SIG Cluster Lifecycle]
-- Kubeadm: deprecate the "--csr-only" and "--csr-dir" flags of the "kubeadm init phase certs" subcommands. Please use "kubeadm alpha certs generate-csr" instead. This new command allows you to generate new private keys and certificate signing requests for all the control-plane components, so that the certificates can be signed by an external CA. ([#92183](https://github.com/kubernetes/kubernetes/pull/92183), [@wallrj](https://github.com/wallrj)) [SIG Cluster Lifecycle]
-- Kubeadm: make etcd pod request 100m CPU, 100Mi memory and 100Mi ephemeral_storage by default ([#94479](https://github.com/kubernetes/kubernetes/pull/94479), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubemark now supports both real and hollow nodes in a single cluster. ([#93201](https://github.com/kubernetes/kubernetes/pull/93201), [@ellistarn](https://github.com/ellistarn)) [SIG Scalability]
-- Kubernetes is now built using go1.15.2
-  - build: Update to k/repo-infra@v0.1.1 (supports go1.15.2)
-  - build: Use go-runner:buster-v2.0.1 (built using go1.15.1)
-  - bazel: Replace --features with Starlark build settings flag
-  - hack/lib/util.sh: some bash cleanups
-
-    - switched one spot to use kube::logging
-    - make kube::util::find-binary return an error when it doesn't find
-      anything so that hack scripts fail fast instead of with '' binary not
-      found errors.
-    - this required deleting some genfeddoc stuff. the binary no longer
-      exists in k/k repo since we removed federation/, and I don't see it
-      in https://github.com/kubernetes-sigs/kubefed/ either. I'm assuming
-      that it's gone for good now.
-
-  - bazel: output go_binary rule directly from go_binary_conditional_pure
-
-    From: @mikedanese:
-    Instead of aliasing. Aliases are annoying in a number of ways. This is
-    specifically bugging me now because they make the action graph harder to
-    analyze programmatically. By using aliases here, we would need to handle
-    potentially aliased go_binary targets and dereference to the effective
-    target.
-
-    The comment references an issue with `pure = select(...)` which appears
-    to be resolved considering this now builds.
-
-  - make kube::util::find-binary not dependent on bazel-out/ structure
-
-    Implement an aspect that outputs go_build_mode metadata for go binaries,
-    and use that during binary selection. ([#94449](https://github.com/kubernetes/kubernetes/pull/94449), [@justaugustus](https://github.com/justaugustus)) [SIG Architecture, CLI, Cluster Lifecycle, Node, Release and Testing]
-- Only update Azure data disks when attach/detach ([#94265](https://github.com/kubernetes/kubernetes/pull/94265), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Promote SupportNodePidsLimit to GA to provide node to pod pid isolation
-  Promote SupportPodPidsLimit to GA to provide ability to limit pids per pod ([#94140](https://github.com/kubernetes/kubernetes/pull/94140), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node and Testing]
-- Rename pod_preemption_metrics to preemption_metrics. ([#93256](https://github.com/kubernetes/kubernetes/pull/93256), [@ahg-g](https://github.com/ahg-g)) [SIG Instrumentation and Scheduling]
-- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](/docs/reference/using-api/server-side-apply/#transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
-- Set CSIMigrationvSphere feature gates to beta.
-  Users should enable CSIMigration + CSIMigrationvSphere features and install the vSphere CSI Driver (https://github.com/kubernetes-sigs/vsphere-csi-driver) to move workload from the in-tree vSphere plugin "kubernetes.io/vsphere-volume" to vSphere CSI Driver.
-
-  Requires: vSphere vCenter/ESXi Version: 7.0u1, HW Version: VM version 15 ([#92816](https://github.com/kubernetes/kubernetes/pull/92816), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
-- Support [service.beta.kubernetes.io/azure-pip-ip-tags] annotations to allow customers to specify ip-tags to influence public-ip creation in Azure [Tag1=Value1, Tag2=Value2, etc.] ([#94114](https://github.com/kubernetes/kubernetes/pull/94114), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Support a smooth upgrade from client-side apply to server-side apply without conflicts, as well as support the corresponding downgrade. ([#90187](https://github.com/kubernetes/kubernetes/pull/90187), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery and Testing]
-- Trace output in apiserver logs is more organized and comprehensive. Traces are nested, and for all non-long running request endpoints, the entire filter chain is instrumented (e.g. authentication check is included). ([#88936](https://github.com/kubernetes/kubernetes/pull/88936), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Scheduling]
-- `kubectl alpha debug` now supports debugging nodes by creating a debugging container running in the node's host namespaces. ([#92310](https://github.com/kubernetes/kubernetes/pull/92310), [@verb](https://github.com/verb)) [SIG CLI]
-
-### Documentation
-
-- Kubelet: remove alpha warnings for CNI flags. ([#94508](https://github.com/kubernetes/kubernetes/pull/94508), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network and Node]
-
-### Failing Test
-
-- Kube-proxy iptables min-sync-period defaults to 1 sec. Previously, it was 0. ([#92836](https://github.com/kubernetes/kubernetes/pull/92836), [@aojea](https://github.com/aojea)) [SIG Network]
-
-### Bug or Regression
-
-- A panic in the apiserver caused by the `informer-sync` health checker is now fixed. ([#93600](https://github.com/kubernetes/kubernetes/pull/93600), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery]
-- Add kubectl wait  --ignore-not-found flag ([#90969](https://github.com/kubernetes/kubernetes/pull/90969), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Adding fix to the statefulset controller to wait for pvc deletion before creating pods. ([#93457](https://github.com/kubernetes/kubernetes/pull/93457), [@ymmt2005](https://github.com/ymmt2005)) [SIG Apps]
-- Azure ARM client: don't segfault on empty response and http error ([#94078](https://github.com/kubernetes/kubernetes/pull/94078), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- Azure: fix a bug that kube-controller-manager would panic if wrong Azure VMSS name is configured ([#94306](https://github.com/kubernetes/kubernetes/pull/94306), [@knight42](https://github.com/knight42)) [SIG Cloud Provider]
-- Azure: per VMSS VMSS VMs cache to prevent throttling on clusters having many attached VMSS ([#93107](https://github.com/kubernetes/kubernetes/pull/93107), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
-- Both apiserver_request_duration_seconds metrics and RequestReceivedTimestamp field of an audit event take
-  into account the time a request spends in the apiserver request filters. ([#94903](https://github.com/kubernetes/kubernetes/pull/94903), [@tkashem](https://github.com/tkashem)) [SIG API Machinery, Auth and Instrumentation]
-- Build/lib/release: Explicitly use '--platform' in building server images
-
-  When we switched to go-runner for building the apiserver,
-  controller-manager, and scheduler server components, we no longer
-  reference the individual architectures in the image names, specifically
-  in the 'FROM' directive of the server image Dockerfiles.
-
-  As a result, server images for non-amd64 images copy in the go-runner
-  amd64 binary instead of the go-runner that matches that architecture.
-
-  This commit explicitly sets the '--platform=linux/${arch}' to ensure
-  we're pulling the correct go-runner arch from the manifest list.
-
-  Before:
-  `FROM ${base_image}`
-
-  After:
-  `FROM --platform=linux/${arch} ${base_image}` ([#94552](https://github.com/kubernetes/kubernetes/pull/94552), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
-- CSIDriver object can be deployed during volume attachment. ([#93710](https://github.com/kubernetes/kubernetes/pull/93710), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Node, Storage and Testing]
-- CVE-2020-8557 (Medium): Node-local denial of service via container /etc/hosts file. See https://github.com/kubernetes/kubernetes/issues/93032 for more details. ([#92916](https://github.com/kubernetes/kubernetes/pull/92916), [@joelsmith](https://github.com/joelsmith)) [SIG Node]
-- Do not add nodes labeled with kubernetes.azure.com/managed=false to backend pool of load balancer. ([#93034](https://github.com/kubernetes/kubernetes/pull/93034), [@matthias50](https://github.com/matthias50)) [SIG Cloud Provider]
-- Do not fail sorting empty elements. ([#94666](https://github.com/kubernetes/kubernetes/pull/94666), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Do not retry volume expansion if CSI driver returns FailedPrecondition error ([#92986](https://github.com/kubernetes/kubernetes/pull/92986), [@gnufied](https://github.com/gnufied)) [SIG Node and Storage]
-- Dockershim security: pod sandbox now always run with `no-new-privileges` and `runtime/default` seccomp profile
-  dockershim seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90948](https://github.com/kubernetes/kubernetes/pull/90948), [@pjbgf](https://github.com/pjbgf)) [SIG Node]
-- Dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default ([#90439](https://github.com/kubernetes/kubernetes/pull/90439), [@SataQiu](https://github.com/SataQiu)) [SIG API Machinery]
-- Endpoint controller requeues service after an endpoint deletion event occurs to confirm that deleted endpoints are undesired to mitigate the effects of an out of sync endpoint cache. ([#93030](https://github.com/kubernetes/kubernetes/pull/93030), [@swetharepakula](https://github.com/swetharepakula)) [SIG Apps and Network]
-- EndpointSlice controllers now return immediately if they encounter an error creating, updating, or deleting resources. ([#93908](https://github.com/kubernetes/kubernetes/pull/93908), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- EndpointSliceMirroring controller now copies labels from Endpoints to EndpointSlices. ([#93442](https://github.com/kubernetes/kubernetes/pull/93442), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- EndpointSliceMirroring controller now mirrors Endpoints that do not have a Service associated with them. ([#94171](https://github.com/kubernetes/kubernetes/pull/94171), [@robscott](https://github.com/robscott)) [SIG Apps, Network and Testing]
-- Ensure backoff step is set to 1 for Azure armclient. ([#94180](https://github.com/kubernetes/kubernetes/pull/94180), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null ([#94355](https://github.com/kubernetes/kubernetes/pull/94355), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Eviction requests for pods that have a non-zero DeletionTimestamp will always succeed ([#91342](https://github.com/kubernetes/kubernetes/pull/91342), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
-- Extended DSR loadbalancer feature in winkernel kube-proxy to HNS versions 9.3-9.max, 10.2+ ([#93080](https://github.com/kubernetes/kubernetes/pull/93080), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
-- Fix HandleCrash order ([#93108](https://github.com/kubernetes/kubernetes/pull/93108), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG API Machinery]
-- Fix a concurrent map writes error in kubelet ([#93773](https://github.com/kubernetes/kubernetes/pull/93773), [@knight42](https://github.com/knight42)) [SIG Node]
-- Fix a regression where kubeadm bails out with a fatal error when an optional version command line argument is supplied to the "kubeadm upgrade plan" command ([#94421](https://github.com/kubernetes/kubernetes/pull/94421), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Fix azure file migration panic ([#94853](https://github.com/kubernetes/kubernetes/pull/94853), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix bug where loadbalancer deletion gets stuck because of missing resource group &#35;75198 ([#93962](https://github.com/kubernetes/kubernetes/pull/93962), [@phiphi282](https://github.com/phiphi282)) [SIG Cloud Provider]
-- Fix calling AttachDisk on a previously attached EBS volume ([#93567](https://github.com/kubernetes/kubernetes/pull/93567), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider, Storage and Testing]
-- Fix detection of image filesystem, disk metrics for devicemapper, detection of OOM Kills on 5.0+ linux kernels. ([#92919](https://github.com/kubernetes/kubernetes/pull/92919), [@dashpole](https://github.com/dashpole)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- Fix etcd_object_counts metric reported by kube-apiserver ([#94773](https://github.com/kubernetes/kubernetes/pull/94773), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- Fix incorrectly reported verbs for kube-apiserver metrics for CRD objects ([#93523](https://github.com/kubernetes/kubernetes/pull/93523), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Instrumentation]
-- Fix instance not found issues when an Azure Node is recreated in a short time ([#93316](https://github.com/kubernetes/kubernetes/pull/93316), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix kube-apiserver /readyz to contain "informer-sync" check ensuring that internal informers are synced. ([#93670](https://github.com/kubernetes/kubernetes/pull/93670), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Fix kubectl SchemaError on CRDs with schema using x-kubernetes-preserve-unknown-fields on array types. ([#94888](https://github.com/kubernetes/kubernetes/pull/94888), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Fix memory leak in EndpointSliceTracker for EndpointSliceMirroring controller. ([#93441](https://github.com/kubernetes/kubernetes/pull/93441), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Fix missing csi annotations on node during parallel csinode update. ([#94389](https://github.com/kubernetes/kubernetes/pull/94389), [@pacoxu](https://github.com/pacoxu)) [SIG Storage]
-- Fix the `cloudprovider_azure_api_request_duration_seconds` metric buckets to correctly capture the latency metrics. Previously, the majority of the calls would fall in the "+Inf" bucket. ([#94873](https://github.com/kubernetes/kubernetes/pull/94873), [@marwanad](https://github.com/marwanad)) [SIG Cloud Provider and Instrumentation]
-- Fix: azure disk resize error if source does not exist ([#93011](https://github.com/kubernetes/kubernetes/pull/93011), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: detach azure disk broken on Azure Stack ([#94885](https://github.com/kubernetes/kubernetes/pull/94885), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: determine the correct ip config based on ip family ([#93043](https://github.com/kubernetes/kubernetes/pull/93043), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
-- Fix: initial delay in mounting azure disk & file ([#93052](https://github.com/kubernetes/kubernetes/pull/93052), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: use sensitiveOptions on Windows mount ([#94126](https://github.com/kubernetes/kubernetes/pull/94126), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fixed Ceph RBD volume expansion when no ceph.conf exists ([#92027](https://github.com/kubernetes/kubernetes/pull/92027), [@juliantaylor](https://github.com/juliantaylor)) [SIG Storage]
-- Fixed a bug where improper storage and comparison of endpoints led to excessive API traffic from the endpoints controller ([#94112](https://github.com/kubernetes/kubernetes/pull/94112), [@damemi](https://github.com/damemi)) [SIG Apps, Network and Testing]
-- Fixed a bug whereby the allocation of reusable CPUs and devices was not being honored when the TopologyManager was enabled ([#93189](https://github.com/kubernetes/kubernetes/pull/93189), [@klueska](https://github.com/klueska)) [SIG Node]
-- Fixed a panic in kubectl debug when pod has multiple init containers or ephemeral containers ([#94580](https://github.com/kubernetes/kubernetes/pull/94580), [@kiyoshim55](https://github.com/kiyoshim55)) [SIG CLI]
-- Fixed a regression that sometimes prevented `kubectl portforward` to work when TCP and UDP services were configured on the same port ([#94728](https://github.com/kubernetes/kubernetes/pull/94728), [@amorenoz](https://github.com/amorenoz)) [SIG CLI]
-- Fixed bug in reflector that couldn't recover from "Too large resource version" errors with API servers 1.17.0-1.18.5 ([#94316](https://github.com/kubernetes/kubernetes/pull/94316), [@janeczku](https://github.com/janeczku)) [SIG API Machinery]
-- Fixed bug where kubectl top pod output is not sorted when --sort-by and --containers flags are used together ([#93692](https://github.com/kubernetes/kubernetes/pull/93692), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Fixed kubelet creating extra sandbox for pods with RestartPolicyOnFailure after all containers succeeded ([#92614](https://github.com/kubernetes/kubernetes/pull/92614), [@tnqn](https://github.com/tnqn)) [SIG Node and Testing]
-- Fixed memory leak in endpointSliceTracker ([#92838](https://github.com/kubernetes/kubernetes/pull/92838), [@tnqn](https://github.com/tnqn)) [SIG Apps and Network]
-- Fixed node data lost in kube-scheduler for clusters with imbalance on number of nodes across zones ([#93355](https://github.com/kubernetes/kubernetes/pull/93355), [@maelk](https://github.com/maelk)) [SIG Scheduling]
-- Fixed the EndpointSliceController to correctly create endpoints for IPv6-only pods.
-
-  Fixed the EndpointController to allow IPv6 headless services, if the IPv6DualStack
-  feature gate is enabled, by specifying `ipFamily: IPv6` on the service. (This already
-  worked with the EndpointSliceController.) ([#91399](https://github.com/kubernetes/kubernetes/pull/91399), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
-- Fixes a bug evicting pods after a taint with a limited tolerationSeconds toleration is removed from a node ([#93722](https://github.com/kubernetes/kubernetes/pull/93722), [@liggitt](https://github.com/liggitt)) [SIG Apps and Node]
-- Fixes a bug where EndpointSlices would not be recreated after rapid Service recreation. ([#94730](https://github.com/kubernetes/kubernetes/pull/94730), [@robscott](https://github.com/robscott)) [SIG Apps, Network and Testing]
-- Fixes a race condition in kubelet pod handling ([#94751](https://github.com/kubernetes/kubernetes/pull/94751), [@auxten](https://github.com/auxten)) [SIG Node]
-- Fixes an issue proxying to ipv6 pods without specifying a port ([#94834](https://github.com/kubernetes/kubernetes/pull/94834), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Network]
-- Fixes an issue that can result in namespaced custom resources being orphaned when their namespace is deleted, if the CRD defining the custom resource is removed concurrently with namespaces being deleted, then recreated. ([#93790](https://github.com/kubernetes/kubernetes/pull/93790), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
-- Ignore root user check when windows pod starts ([#92355](https://github.com/kubernetes/kubernetes/pull/92355), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Increased maximum IOPS of AWS EBS io1 volumes to 64,000 (current AWS maximum). ([#90014](https://github.com/kubernetes/kubernetes/pull/90014), [@jacobmarble](https://github.com/jacobmarble)) [SIG Cloud Provider and Storage]
-- K8s.io/apimachinery: runtime.DefaultUnstructuredConverter.FromUnstructured now handles converting integer fields to typed float values ([#93250](https://github.com/kubernetes/kubernetes/pull/93250), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- Kube-aggregator certificates are dynamically loaded on change from disk ([#92791](https://github.com/kubernetes/kubernetes/pull/92791), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
-- Kube-apiserver: fixed a bug returning inconsistent results from list requests which set a field or label selector and set a paging limit ([#94002](https://github.com/kubernetes/kubernetes/pull/94002), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
-- Kube-apiserver: jsonpath expressions with consecutive recursive descent operators are no longer evaluated for custom resource printer columns ([#93408](https://github.com/kubernetes/kubernetes/pull/93408), [@joelsmith](https://github.com/joelsmith)) [SIG API Machinery]
-- Kube-proxy now trims extra spaces found in loadBalancerSourceRanges to match Service validation. ([#94107](https://github.com/kubernetes/kubernetes/pull/94107), [@robscott](https://github.com/robscott)) [SIG Network]
-- Kube-up now includes CoreDNS version v1.7.0. Some of the major changes include:
-  -  Fixed a bug that could cause CoreDNS to stop updating service records.
-  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
-  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
-  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
-  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
-  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92718](https://github.com/kubernetes/kubernetes/pull/92718), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cloud Provider]
-- Kubeadm now makes sure the etcd manifest is regenerated upon upgrade even when no etcd version change takes place ([#94395](https://github.com/kubernetes/kubernetes/pull/94395), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
-- Kubeadm: avoid a panic when determining if the running version of CoreDNS is supported during upgrades ([#94299](https://github.com/kubernetes/kubernetes/pull/94299), [@zouyee](https://github.com/zouyee)) [SIG Cluster Lifecycle]
-- Kubeadm: ensure "kubeadm reset" does not unmount the root "/var/lib/kubelet" directory if it is mounted by the user ([#93702](https://github.com/kubernetes/kubernetes/pull/93702), [@thtanaka](https://github.com/thtanaka)) [SIG Cluster Lifecycle]
-- Kubeadm: ensure the etcd data directory is created with 0700 permissions during control-plane init and join ([#94102](https://github.com/kubernetes/kubernetes/pull/94102), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR ([#94555](https://github.com/kubernetes/kubernetes/pull/94555), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: make the kubeconfig files for the kube-controller-manager and kube-scheduler use the LocalAPIEndpoint instead of the ControlPlaneEndpoint. This makes kubeadm clusters more reseliant to version skew problems during immutable upgrades: https://kubernetes.io/docs/setup/release/version-skew-policy/#kube-controller-manager-kube-scheduler-and-cloud-controller-manager ([#94398](https://github.com/kubernetes/kubernetes/pull/94398), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: relax the validation of kubeconfig server URLs. Allow the user to define custom kubeconfig server URLs without erroring out during validation of existing kubeconfig files (e.g. when using external CA mode). ([#94816](https://github.com/kubernetes/kubernetes/pull/94816), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: remove duplicate DNS names and IP addresses from generated certificates ([#92753](https://github.com/kubernetes/kubernetes/pull/92753), [@QianChenglong](https://github.com/QianChenglong)) [SIG Cluster Lifecycle]
-- Kubelet: assume that swap is disabled when `/proc/swaps` does not exist ([#93931](https://github.com/kubernetes/kubernetes/pull/93931), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
-- Kubelet: fix race condition in pluginWatcher ([#93622](https://github.com/kubernetes/kubernetes/pull/93622), [@knight42](https://github.com/knight42)) [SIG Node]
-- Kuberuntime security: pod sandbox now always runs with `runtime/default` seccomp profile
-  kuberuntime seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90949](https://github.com/kubernetes/kubernetes/pull/90949), [@pjbgf](https://github.com/pjbgf)) [SIG Node]
-- NONE ([#71269](https://github.com/kubernetes/kubernetes/pull/71269), [@DeliangFan](https://github.com/DeliangFan)) [SIG Node]
-- New Azure instance types do now have correct max data disk count information. ([#94340](https://github.com/kubernetes/kubernetes/pull/94340), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Cloud Provider and Storage]
-- Pods with invalid Affinity/AntiAffinity LabelSelectors will now fail scheduling when these plugins are enabled ([#93660](https://github.com/kubernetes/kubernetes/pull/93660), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Require feature flag CustomCPUCFSQuotaPeriod if setting a non-default cpuCFSQuotaPeriod in kubelet config. ([#94687](https://github.com/kubernetes/kubernetes/pull/94687), [@karan](https://github.com/karan)) [SIG Node]
-- Reverted devicemanager for Windows node added in 1.19rc1. ([#93263](https://github.com/kubernetes/kubernetes/pull/93263), [@liggitt](https://github.com/liggitt)) [SIG Node and Windows]
-- Scheduler bugfix: Scheduler doesn't lose pod information when nodes are quickly recreated. This could happen when nodes are restarted or quickly recreated reusing a nodename. ([#93938](https://github.com/kubernetes/kubernetes/pull/93938), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scalability, Scheduling and Testing]
-- The EndpointSlice controller now waits for EndpointSlice and Node caches to be synced before starting. ([#94086](https://github.com/kubernetes/kubernetes/pull/94086), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- The `/debug/api_priority_and_fairness/dump_requests` path at an apiserver will no longer return a phantom line for each exempt priority level. ([#93406](https://github.com/kubernetes/kubernetes/pull/93406), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
-- The kubelet recognizes the --containerd-namespace flag to configure the namespace used by cadvisor. ([#87054](https://github.com/kubernetes/kubernetes/pull/87054), [@changyaowei](https://github.com/changyaowei)) [SIG Node]
-- The terminationGracePeriodSeconds from pod spec is respected for the mirror pod. ([#92442](https://github.com/kubernetes/kubernetes/pull/92442), [@tedyu](https://github.com/tedyu)) [SIG Node and Testing]
-- Update Calico to v3.15.2 ([#94241](https://github.com/kubernetes/kubernetes/pull/94241), [@lmm](https://github.com/lmm)) [SIG Cloud Provider]
-- Update default etcd server version to 3.4.13 ([#94287](https://github.com/kubernetes/kubernetes/pull/94287), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
-- Updated Cluster Autoscaler to 1.19.0; ([#93577](https://github.com/kubernetes/kubernetes/pull/93577), [@vivekbagade](https://github.com/vivekbagade)) [SIG Autoscaling and Cloud Provider]
-- Use NLB Subnet CIDRs instead of VPC CIDRs in Health Check SG Rules ([#93515](https://github.com/kubernetes/kubernetes/pull/93515), [@t0rr3sp3dr0](https://github.com/t0rr3sp3dr0)) [SIG Cloud Provider]
-- Users will see increase in time for deletion of pods and also guarantee that removal of pod from api server  would mean deletion of all the resources from container runtime. ([#92817](https://github.com/kubernetes/kubernetes/pull/92817), [@kmala](https://github.com/kmala)) [SIG Node]
-- Very large patches may now be specified to `kubectl patch` with the `--patch-file` flag instead of including them directly on the command line. The `--patch` and `--patch-file` flags are mutually exclusive. ([#93548](https://github.com/kubernetes/kubernetes/pull/93548), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
-- When creating a networking.k8s.io/v1 Ingress API object, `spec.rules[*].http` values are now validated consistently when the `host` field contains a wildcard. ([#93954](https://github.com/kubernetes/kubernetes/pull/93954), [@Miciah](https://github.com/Miciah)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Storage and Testing]
-
-### Other (Cleanup or Flake)
-
-- --cache-dir sets cache directory for both http and discovery, defaults to $HOME/.kube/cache ([#92910](https://github.com/kubernetes/kubernetes/pull/92910), [@soltysh](https://github.com/soltysh)) [SIG API Machinery and CLI]
-- Adds a bootstrapping ClusterRole, ClusterRoleBinding and group for /metrics, /livez/*, /readyz/*, & /healthz/- endpoints. ([#93311](https://github.com/kubernetes/kubernetes/pull/93311), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Auth, Cloud Provider and Instrumentation]
-- Base-images: Update to debian-iptables:buster-v1.3.0
-  - Uses iptables 1.8.5
-  - base-images: Update to debian-base:buster-v1.2.0
-  - cluster/images/etcd: Build etcd:3.4.13-1 image
-    - Uses debian-base:buster-v1.2.0 ([#94733](https://github.com/kubernetes/kubernetes/pull/94733), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Build: Update to debian-base@v2.1.2 and debian-iptables@v12.1.1 ([#93667](https://github.com/kubernetes/kubernetes/pull/93667), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Build: Update to debian-base@v2.1.3 and debian-iptables@v12.1.2 ([#93916](https://github.com/kubernetes/kubernetes/pull/93916), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
-- Build: Update to go-runner:buster-v2.0.0 ([#94167](https://github.com/kubernetes/kubernetes/pull/94167), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
-- Fix kubelet to properly log when a container is started. Before, sometimes the log said that a container is dead and was restarted when it was started for the first time. This only happened when using pods with initContainers and regular containers. ([#91469](https://github.com/kubernetes/kubernetes/pull/91469), [@rata](https://github.com/rata)) [SIG Node]
-- Fix: license issue in blob disk feature ([#92824](https://github.com/kubernetes/kubernetes/pull/92824), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fixes the flooding warning messages about setting volume ownership for configmap/secret volumes ([#92878](https://github.com/kubernetes/kubernetes/pull/92878), [@jvanz](https://github.com/jvanz)) [SIG Instrumentation, Node and Storage]
-- Fixes the message about no auth for metrics in scheduler. ([#94035](https://github.com/kubernetes/kubernetes/pull/94035), [@zhouya0](https://github.com/zhouya0)) [SIG Scheduling]
-- Kube-up: defaults to limiting critical pods to the kube-system namespace to match behavior prior to 1.17 ([#93121](https://github.com/kubernetes/kubernetes/pull/93121), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider and Scheduling]
-- Kubeadm: Separate argument key/value in log msg ([#94016](https://github.com/kubernetes/kubernetes/pull/94016), [@mrueg](https://github.com/mrueg)) [SIG Cluster Lifecycle]
-- Kubeadm: remove support for the "ci/k8s-master" version label. This label has been removed in the Kubernetes CI release process and would no longer work in kubeadm. You can use the "ci/latest" version label instead. See kubernetes/test-infra&#35;18517 ([#93626](https://github.com/kubernetes/kubernetes/pull/93626), [@vikkyomkar](https://github.com/vikkyomkar)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the CoreDNS check for known image digests when applying the addon ([#94506](https://github.com/kubernetes/kubernetes/pull/94506), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubernetes is now built with go1.15.0 ([#93939](https://github.com/kubernetes/kubernetes/pull/93939), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Kubernetes is now built with go1.15.0-rc.2 ([#93827](https://github.com/kubernetes/kubernetes/pull/93827), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
-- Lock ExternalPolicyForExternalIP to default, this feature gate will be removed in 1.22. ([#94581](https://github.com/kubernetes/kubernetes/pull/94581), [@knabben](https://github.com/knabben)) [SIG Network]
-- Service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset is removed.  All Standard load balancers will always enable tcp resets. ([#94297](https://github.com/kubernetes/kubernetes/pull/94297), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]
-- Stop propagating SelfLink (deprecated in 1.16) in kube-apiserver ([#94397](https://github.com/kubernetes/kubernetes/pull/94397), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
-- Strip unnecessary security contexts on Windows ([#93475](https://github.com/kubernetes/kubernetes/pull/93475), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla)) [SIG Node, Testing and Windows]
-- To ensure the code be strong,  add unit test for GetAddressAndDialer ([#93180](https://github.com/kubernetes/kubernetes/pull/93180), [@FreeZhang61](https://github.com/FreeZhang61)) [SIG Node]
-- Update CNI plugins to v0.8.7 ([#94367](https://github.com/kubernetes/kubernetes/pull/94367), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Network, Node, Release and Testing]
-- Update Golang to v1.14.5
-  - Update repo-infra to 0.0.7 (to support go1.14.5 and go1.13.13)
-    - Includes:
-      - bazelbuild/bazel-toolchains@3.3.2
-      - bazelbuild/rules_go@v0.22.7 ([#93088](https://github.com/kubernetes/kubernetes/pull/93088), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Update Golang to v1.14.6
-  - Update repo-infra to 0.0.8 (to support go1.14.6 and go1.13.14)
-    - Includes:
-      - bazelbuild/bazel-toolchains@3.4.0
-      - bazelbuild/rules_go@v0.22.8 ([#93198](https://github.com/kubernetes/kubernetes/pull/93198), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Update cri-tools to [v1.19.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.19.0) ([#94307](https://github.com/kubernetes/kubernetes/pull/94307), [@xmudrii](https://github.com/xmudrii)) [SIG Cloud Provider]
-- Update default etcd server version to 3.4.9 ([#92349](https://github.com/kubernetes/kubernetes/pull/92349), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
-- Update etcd client side to v3.4.13 ([#94259](https://github.com/kubernetes/kubernetes/pull/94259), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
-- `kubectl get ingress` now prefers the `networking.k8s.io/v1` over `extensions/v1beta1` (deprecated since v1.14). To explicitly request the deprecated version, use `kubectl get ingress.v1beta1.extensions`. ([#94309](https://github.com/kubernetes/kubernetes/pull/94309), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and CLI]
-
-## Dependencies
-
-### Added
-- github.com/Azure/go-autorest: [v14.2.0+incompatible](https://github.com/Azure/go-autorest/tree/v14.2.0)
-- github.com/fvbommel/sortorder: [v1.0.1](https://github.com/fvbommel/sortorder/tree/v1.0.1)
-- github.com/yuin/goldmark: [v1.1.27](https://github.com/yuin/goldmark/tree/v1.1.27)
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.1
-
-### Changed
-- github.com/Azure/go-autorest/autorest/adal: [v0.8.2 → v0.9.0](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.8.2...v0.9.0)
-- github.com/Azure/go-autorest/autorest/date: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.2.0...v0.3.0)
-- github.com/Azure/go-autorest/autorest/mocks: [v0.3.0 → v0.4.0](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.3.0...v0.4.0)
-- github.com/Azure/go-autorest/autorest: [v0.9.6 → v0.11.1](https://github.com/Azure/go-autorest/autorest/compare/v0.9.6...v0.11.1)
-- github.com/Azure/go-autorest/logger: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/logger/compare/v0.1.0...v0.2.0)
-- github.com/Azure/go-autorest/tracing: [v0.5.0 → v0.6.0](https://github.com/Azure/go-autorest/tracing/compare/v0.5.0...v0.6.0)
-- github.com/Microsoft/hcsshim: [v0.8.9 → 5eafd15](https://github.com/Microsoft/hcsshim/compare/v0.8.9...5eafd15)
-- github.com/cilium/ebpf: [9f1617e → 1c8d4c9](https://github.com/cilium/ebpf/compare/9f1617e...1c8d4c9)
-- github.com/containerd/cgroups: [bf292b2 → 0dbf7f0](https://github.com/containerd/cgroups/compare/bf292b2...0dbf7f0)
-- github.com/coredns/corefile-migration: [v1.0.8 → v1.0.10](https://github.com/coredns/corefile-migration/compare/v1.0.8...v1.0.10)
-- github.com/evanphx/json-patch: [e83c0a1 → v4.9.0+incompatible](https://github.com/evanphx/json-patch/compare/e83c0a1...v4.9.0)
-- github.com/google/cadvisor: [8450c56 → v0.37.0](https://github.com/google/cadvisor/compare/8450c56...v0.37.0)
-- github.com/json-iterator/go: [v1.1.9 → v1.1.10](https://github.com/json-iterator/go/compare/v1.1.9...v1.1.10)
-- github.com/opencontainers/go-digest: [v1.0.0-rc1 → v1.0.0](https://github.com/opencontainers/go-digest/compare/v1.0.0-rc1...v1.0.0)
-- github.com/opencontainers/runc: [1b94395 → 819fcc6](https://github.com/opencontainers/runc/compare/1b94395...819fcc6)
-- github.com/prometheus/client_golang: [v1.6.0 → v1.7.1](https://github.com/prometheus/client_golang/compare/v1.6.0...v1.7.1)
-- github.com/prometheus/common: [v0.9.1 → v0.10.0](https://github.com/prometheus/common/compare/v0.9.1...v0.10.0)
-- github.com/prometheus/procfs: [v0.0.11 → v0.1.3](https://github.com/prometheus/procfs/compare/v0.0.11...v0.1.3)
-- github.com/rubiojr/go-vhd: [0bfd3b3 → 02e2102](https://github.com/rubiojr/go-vhd/compare/0bfd3b3...02e2102)
-- github.com/storageos/go-api: [343b3ef → v2.2.0+incompatible](https://github.com/storageos/go-api/compare/343b3ef...v2.2.0)
-- github.com/urfave/cli: [v1.22.1 → v1.22.2](https://github.com/urfave/cli/compare/v1.22.1...v1.22.2)
-- go.etcd.io/etcd: 54ba958 → dd1b699
-- golang.org/x/crypto: bac4c82 → 75b2880
-- golang.org/x/mod: v0.1.0 → v0.3.0
-- golang.org/x/net: d3edc99 → ab34263
-- golang.org/x/tools: c00d67e → c1934b7
-- k8s.io/kube-openapi: 656914f → 6aeccd4
-- k8s.io/system-validators: v1.1.2 → v1.2.0
-- k8s.io/utils: 6e3d28b → d5654de
-
-### Removed
-- github.com/godbus/dbus: [ade71ed](https://github.com/godbus/dbus/tree/ade71ed)
-- github.com/xlab/handysort: [fb3537e](https://github.com/xlab/handysort/tree/fb3537e)
-- sigs.k8s.io/structured-merge-diff/v3: v3.0.0
-- vbom.ml/util: db5cfe1

From 59b166ed89a38082e6bcbe7859dac43180f0716f Mon Sep 17 00:00:00 2001
From: kartik494 <kartik.sharma@india.nec.com>
Date: Tue, 6 Apr 2021 13:48:52 +0530
Subject: [PATCH 589/788] Improvement in Docs

---
 content/en/docs/tasks/tools/install-kubectl-linux.md   | 3 +--
 content/en/docs/tasks/tools/install-kubectl-macos.md   | 3 +--
 content/en/docs/tasks/tools/install-kubectl-windows.md | 3 +--
 3 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/tasks/tools/install-kubectl-linux.md b/content/en/docs/tasks/tools/install-kubectl-linux.md
index 243dbf4e0d..d64ef99b13 100644
--- a/content/en/docs/tasks/tools/install-kubectl-linux.md
+++ b/content/en/docs/tasks/tools/install-kubectl-linux.md
@@ -12,8 +12,7 @@ card:
 
 ## {{% heading "prerequisites" %}}
 
-You must use a kubectl version that is within one minor version difference of your cluster.
-For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master.
+You must use a kubectl version that is within one minor version difference of your cluster. For example, a v{{< skew latestVersion >}} client can communicate with v{{< skew prevMinorVersion >}}, v{{< skew latestVersion >}}, and v{{< skew nextMinorVersion >}} control planes.
 Using the latest version of kubectl helps avoid unforeseen issues.
 
 ## Install kubectl on Linux
diff --git a/content/en/docs/tasks/tools/install-kubectl-macos.md b/content/en/docs/tasks/tools/install-kubectl-macos.md
index b4fa864985..0170a37800 100644
--- a/content/en/docs/tasks/tools/install-kubectl-macos.md
+++ b/content/en/docs/tasks/tools/install-kubectl-macos.md
@@ -12,8 +12,7 @@ card:
 
 ## {{% heading "prerequisites" %}}
 
-You must use a kubectl version that is within one minor version difference of your cluster.
-For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master.
+You must use a kubectl version that is within one minor version difference of your cluster. For example, a v{{< skew latestVersion >}} client can communicate with v{{< skew prevMinorVersion >}}, v{{< skew latestVersion >}}, and v{{< skew nextMinorVersion >}} control planes.
 Using the latest version of kubectl helps avoid unforeseen issues.
 
 ## Install kubectl on macOS
diff --git a/content/en/docs/tasks/tools/install-kubectl-windows.md b/content/en/docs/tasks/tools/install-kubectl-windows.md
index 09e8217626..32ae77d357 100644
--- a/content/en/docs/tasks/tools/install-kubectl-windows.md
+++ b/content/en/docs/tasks/tools/install-kubectl-windows.md
@@ -12,8 +12,7 @@ card:
 
 ## {{% heading "prerequisites" %}}
 
-You must use a kubectl version that is within one minor version difference of your cluster.
-For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master.
+You must use a kubectl version that is within one minor version difference of your cluster. For example, a v{{< skew latestVersion >}} client can communicate with v{{< skew prevMinorVersion >}}, v{{< skew latestVersion >}}, and v{{< skew nextMinorVersion >}} control planes.
 Using the latest version of kubectl helps avoid unforeseen issues.
 
 ## Install kubectl on Windows

From 8fde623f8acd1e1d324e1c3b3f9ff3af7f9c0d55 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Fri, 16 Apr 2021 12:24:10 +0800
Subject: [PATCH 590/788] Fix nits in feature gates page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Issues fixed by this PR:

- Link in PodDeletionCost is wrong.
- Default value for APIResponseCompression since 1.16 should be true
- Default value for KubeletPodResources in 1.13, 1.14 should be false
- CSIVolumeHealth is an Alpha feature introduced in 1.21, not graduated or deprecated
- EndpointSlice is still Beta in 1.20
- EndpointSliceNodeName is only GA’ed in 1.21
- IndexedJob is an Alpha starting 1.21, not graduated or deprecated
- KubeletPodResources has been GA’ed in 1.20, thus should be removed from the first table
- RequestManagement was deprecated in 1.17 and replaced by APIPriorityAndFaireness
- Several field names are incorrect (e.g. `appProtocol`, `internalTrafficPolicy`, `loadBalancerClass`)
- SCTPSupport should be removed from the first table because it was GA’ed in 1.20.
- ServcieAppProtocol is Beta until 1.20
- StreamingProxyRedirects  is GA’ed in 1.19, not deprecated
- No description for ValidateProxyRedirects is provided
- VolumeCapacityPriority is an Alpha feature introduced in 1.21, not graduated
- The order of VolumePVCDataSource is wrong in the table
- No description provided for Initializers
- The deprecated status should not be repeated in the description since it is already indicated by the table in which a feature is listed.
- No description is provided for RequestManagement
---
 .../feature-gates.md                          | 64 ++++++++++---------
 1 file changed, 34 insertions(+), 30 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index f3b5a01e1e..1b5b7746b2 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -53,7 +53,7 @@ different Kubernetes components.
 | `APIPriorityAndFairness` | `false` | Alpha | 1.17 | 1.19 |
 | `APIPriorityAndFairness` | `true` | Beta | 1.20 | |
 | `APIResponseCompression` | `false` | Alpha | 1.7 | 1.15 |
-| `APIResponseCompression` | `false` | Beta | 1.16 | |
+| `APIResponseCompression` | `true` | Beta | 1.16 | |
 | `APIServerIdentity` | `false` | Alpha | 1.20 | |
 | `AllowInsecureBackendProxy` | `true` | Beta | 1.17 | |
 | `AnyVolumeDataSource` | `false` | Alpha | 1.18 | |
@@ -90,6 +90,7 @@ different Kubernetes components.
 | `CSIStorageCapacity` | `true` | Beta | 1.21 | |
 | `CSIVolumeFSGroupPolicy` | `false` | Alpha | 1.19 | 1.19 |
 | `CSIVolumeFSGroupPolicy` | `true` | Beta | 1.20 | |
+| `CSIVolumeHealth` | `false` | Alpha | 1.21 | |
 | `ConfigurableFSGroupPolicy` | `false` | Alpha | 1.18 | 1.19 |
 | `ConfigurableFSGroupPolicy` | `true` | Beta | 1.20 | |
 | `CronJobControllerV2` | `false` | Alpha | 1.20 | 1.20 |
@@ -125,12 +126,11 @@ different Kubernetes components.
 | `HPAScaleToZero` | `false` | Alpha | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | Beta | 1.19 | |
+| `IndexedJob` | `false` | Alpha | 1.21 | |
 | `IngressClassNamespacedParams` | `false` | Alpha | 1.21 | |
 | `IPv6DualStack` | `false` | Alpha | 1.15 | 1.20 |
 | `IPv6DualStack` | `true` | Beta | 1.21 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
-| `KubeletPodResources` | `true` | Alpha | 1.13 | 1.14 |
-| `KubeletPodResources` | `true` | Beta | 1.15 | |
 | `LegacyNodeRoleBehavior` | `false` | Alpha | 1.16 | 1.18 |
 | `LegacyNodeRoleBehavior` | `true` | True | 1.19 |  |
 | `LocalStorageCapacityIsolation` | `false` | Alpha | 1.7 | 1.9 |
@@ -158,8 +158,6 @@ different Kubernetes components.
 | `RotateKubeletServerCertificate` | `false` | Alpha | 1.7 | 1.11 |
 | `RotateKubeletServerCertificate` | `true` | Beta | 1.12 | |
 | `RunAsGroup` | `true` | Beta | 1.14 | |
-| `SCTPSupport` | `false` | Alpha | 1.12 | 1.18 |
-| `SCTPSupport` | `true` | Beta | 1.19 | |
 | `ServerSideApply` | `false` | Alpha | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | Beta | 1.16 | |
 | `ServiceInternalTrafficPolicy` | `false` | Alpha | 1.21 | |
@@ -181,6 +179,7 @@ different Kubernetes components.
 | `TopologyManager` | `true` | Beta | 1.18 | |
 | `ValidateProxyRedirects` | `false` | Alpha | 1.12 | 1.13 |
 | `ValidateProxyRedirects` | `true` | Beta | 1.14 | |
+| `VolumeCapacityPriority` | `false` | Alpha | 1.21 | - |
 | `WarningHeaders` | `true` | Beta | 1.19 | |
 | `WinDSR` | `false` | Alpha | 1.14 | |
 | `WinOverlay` | `false` | Alpha | 1.14 | 1.19 |
@@ -225,7 +224,6 @@ different Kubernetes components.
 | `CSIPersistentVolume` | `false` | Alpha | 1.9 | 1.9 |
 | `CSIPersistentVolume` | `true` | Beta | 1.10 | 1.12 |
 | `CSIPersistentVolume` | `true` | GA | 1.13 | - |
-| `CSIVolumeHealth` | `false` | Alpha | 1.21 | - |
 | `CustomPodDNS` | `false` | Alpha | 1.9 | 1.9 |
 | `CustomPodDNS` | `true` | Beta| 1.10 | 1.13 |
 | `CustomPodDNS` | `true` | GA | 1.14 | - |
@@ -258,9 +256,9 @@ different Kubernetes components.
 | `EnableEquivalenceClassCache` | - | Deprecated | 1.15 | - |
 | `EndpointSlice` | `false` | Alpha | 1.16 | 1.16 |
 | `EndpointSlice` | `false` | Beta | 1.17 | 1.17 |
-| `EndpointSlice` | `true` | Beta | 1.18 | 1.21 |
+| `EndpointSlice` | `true` | Beta | 1.18 | 1.20 |
 | `EndpointSlice` | `true` | GA | 1.21 | -  |
-| `EndpointSliceNodeName` | `false` | Alpha | 1.20 | 1.21 |
+| `EndpointSliceNodeName` | `false` | Alpha | 1.20 | 1.20 |
 | `EndpointSliceNodeName` | `true` | GA | 1.21 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | Alpha | 1.5 | 1.12 |
 | `ExperimentalCriticalPodAnnotation` | `false` | Deprecated | 1.13 | - |
@@ -278,7 +276,6 @@ different Kubernetes components.
 | `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 |
 | `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | 1.20 |
 | `ImmutableEphemeralVolumes` | `true` | GA | 1.21 | |
-| `IndexedJob` | `false` | Alpha | 1.21 | |
 | `Initializers` | `false` | Alpha | 1.7 | 1.13 |
 | `Initializers` | - | Deprecated | 1.14 | - |
 | `KubeletConfigFile` | `false` | Alpha | 1.8 | 1.9 |
@@ -315,6 +312,7 @@ different Kubernetes components.
 | `PodShareProcessNamespace` | `true` | Beta | 1.12 | 1.16 |
 | `PodShareProcessNamespace` | `true` | GA | 1.17 | - |
 | `RequestManagement` | `false` | Alpha | 1.15 | 1.16 |
+| `RequestManagement` | - | Derecated | 1.17 | - |
 | `ResourceLimitsPriorityFunction` | `false` | Alpha | 1.9 | 1.18 |
 | `ResourceLimitsPriorityFunction` | - | Deprecated | 1.19 | - |
 | `ResourceQuotaScopeSelectors` | `false` | Alpha | 1.11 | 1.11 |
@@ -338,7 +336,7 @@ different Kubernetes components.
 | `ServiceAccountIssuerDiscovery` | `true` | Beta | 1.20 | 1.20 |
 | `ServiceAccountIssuerDiscovery` | `true` | GA | 1.21 | - |
 | `ServiceAppProtocol` | `false` | Alpha | 1.18 | 1.18 |
-| `ServiceAppProtocol` | `true` | Beta | 1.19 | |
+| `ServiceAppProtocol` | `true` | Beta | 1.19 | 1.19 |
 | `ServiceAppProtocol` | `true` | GA | 1.20 | - |
 | `ServiceLoadBalancerFinalizer` | `false` | Alpha | 1.15 | 1.15 |
 | `ServiceLoadBalancerFinalizer` | `true` | Beta | 1.16 | 1.16 |
@@ -350,7 +348,7 @@ different Kubernetes components.
 | `StorageObjectInUseProtection` | `true` | GA | 1.11 | - |
 | `StreamingProxyRedirects` | `false` | Beta | 1.5 | 1.5 |
 | `StreamingProxyRedirects` | `true` | Beta | 1.6 | 1.18 |
-| `StreamingProxyRedirects` | - | Deprecated| 1.19 | - |
+| `StreamingProxyRedirects` | - | GA | 1.19 | - |
 | `SupportIPVSProxyMode` | `false` | Alpha | 1.8 | 1.8 |
 | `SupportIPVSProxyMode` | `false` | Beta | 1.9 | 1.9 |
 | `SupportIPVSProxyMode` | `true` | Beta | 1.10 | 1.10 |
@@ -375,16 +373,15 @@ different Kubernetes components.
 | `TokenRequestProjection` | `false` | Alpha | 1.11 | 1.11 |
 | `TokenRequestProjection` | `true` | Beta | 1.12 | 1.19 |
 | `TokenRequestProjection` | `true` | GA | 1.20 | - |
-| `VolumeCapacityPriority` | `false` | Alpha | 1.21 | - |
-| `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 |
-| `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | 1.19 |
-| `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
 | `VolumePVCDataSource` | `false` | Alpha | 1.15 | 1.15 |
 | `VolumePVCDataSource` | `true` | Beta | 1.16 | 1.17 |
 | `VolumePVCDataSource` | `true` | GA | 1.18 | - |
 | `VolumeScheduling` | `false` | Alpha | 1.9 | 1.9 |
 | `VolumeScheduling` | `true` | Beta | 1.10 | 1.12 |
 | `VolumeScheduling` | `true` | GA | 1.13 | - |
+| `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 |
+| `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | 1.19 |
+| `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
 | `VolumeSubpath` | `true` | GA | 1.10 | - |
 | `VolumeSubpathEnvExpansion` | `false` | Alpha | 1.14 | 1.14 |
 | `VolumeSubpathEnvExpansion` | `true` | Beta | 1.15 | 1.16 |
@@ -451,7 +448,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `APIServerIdentity`: Assign each API server an ID in a cluster.
 - `Accelerators`: Enable Nvidia GPU support when using Docker
 - `AdvancedAuditing`: Enable [advanced auditing](/docs/tasks/debug-application-cluster/audit/#advanced-audit)
-- `AffinityInAnnotations`(*deprecated*): Enable setting
+- `AffinityInAnnotations`: Enable setting
   [Pod affinity or anti-affinity](/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity).
 - `AllowExtTrafficLocalEndpoints`: Enable a service to route external requests to node local endpoints.
 - `AllowInsecureBackendProxy`: Enable the users to skip TLS verification of
@@ -592,18 +589,18 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [downward API](/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information).
 - `DryRun`: Enable server-side [dry run](/docs/reference/using-api/api-concepts/#dry-run) requests
   so that validation, merging, and mutation can be tested without committing.
-- `DynamicAuditing`(*deprecated*): Used to enable dynamic auditing before v1.19.
+- `DynamicAuditing`: Used to enable dynamic auditing before v1.19.
 - `DynamicKubeletConfig`: Enable the dynamic configuration of kubelet. See
   [Reconfigure kubelet](/docs/tasks/administer-cluster/reconfigure-kubelet/).
 - `DynamicProvisioningScheduling`: Extend the default scheduler to be aware of
   volume topology and handle PV provisioning.
   This feature is superseded by the `VolumeScheduling` feature completely in v1.12.
-- `DynamicVolumeProvisioning`(*deprecated*): Enable the
+- `DynamicVolumeProvisioning`: Enable the
   [dynamic provisioning](/docs/concepts/storage/dynamic-provisioning/) of persistent volumes to Pods.
 - `EfficientWatchResumption`: Allows for storage-originated bookmark (progress
   notify) events to be delivered to the users. This is only applied to watch
   operations.
-- `EnableAggregatedDiscoveryTimeout` (*deprecated*): Enable the five second
+- `EnableAggregatedDiscoveryTimeout`: Enable the five second
   timeout on aggregated discovery calls.
 - `EnableEquivalenceClassCache`: Enable the scheduler to cache equivalence of
   nodes when scheduling Pods.
@@ -666,9 +663,11 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `IngressClassNamespacedParams`: Allow namespace-scoped parameters reference in
   `IngressClass` resource. This feature adds two fields - `Scope` and `Namespace`
   to `IngressClass.spec.parameters`.
+- `Initializers`: Allow asynchronous coordination of object creation using the
+  Initializers admission plugin.
 - `IPv6DualStack`: Enable [dual stack](/docs/concepts/services-networking/dual-stack/)
   support for IPv6.
-- `KubeletConfigFile` (*deprecated*): Enable loading kubelet configuration from
+- `KubeletConfigFile`: Enable loading kubelet configuration from
   a file specified using a config file.
   See [setting kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file/)
   for more details.
@@ -699,8 +698,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   based on logarithmic bucketing of pod timestamps.
 - `MixedProtocolLBService`: Enable using different protocols in the same `LoadBalancer` type
   Service instance.
-- `MountContainers` (*deprecated*): Enable using utility containers on host as
-  the volume mounter.
+- `MountContainers`: Enable using utility containers on host as the volume mounter.
 - `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
   For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).
 - `NamespaceDefaultLabelName`: Configure the API Server to set an immutable {{< glossary_tooltip text="label" term_id="label" >}}
@@ -742,7 +740,9 @@ Each feature gate is designed for enabling/disabling a specific feature:
   [chunking list request](/docs/reference/using-api/api-concepts/#retrieving-large-results-sets-in-chunks).
 - `RemoveSelfLink`: Deprecates and removes `selfLink` from ObjectMeta and
   ListMeta.
-- `ResourceLimitsPriorityFunction` (*deprecated*): Enable a scheduler priority function that
+- `RequestManagement`: Enables managing request concurrency with prioritization and fairness
+  at each API server. Deprecated by `APIPriorityAndFairness` since 1.17.
+- `ResourceLimitsPriorityFunction`: Enable a scheduler priority function that
   assigns a lowest possible score of 1 to a node that satisfies at least one of
   the input Pod's cpu and memory limits. The intent is to break ties between
   nodes with same scores.
@@ -772,11 +772,11 @@ Each feature gate is designed for enabling/disabling a specific feature:
   JWKS URLs) for the service account issuer in the API server. See
   [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery)
   for more details.
-- `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints.
-- `ServiceInternalTrafficPolicy`: Enables the `InternalTrafficPolicy` field on Services
-- `ServiceLBNodePortControl`: Enables the `spec.allocateLoadBalancerNodePorts`
-  field on Services.
-- `ServiceLoadBalancerClass`: Enables the `LoadBalancerClass` field on Services. See [Specifying class of load balancer implementation](/docs/concepts/services-networking/service/#load-balancer-class) for more details.
+- `ServiceAppProtocol`: Enables the `appProtocol` field on Services and Endpoints.
+- `ServiceInternalTrafficPolicy`: Enables the `internalTrafficPolicy` field on Services
+- `ServiceLBNodePortControl`: Enables the `allocateLoadBalancerNodePorts` field on Services.
+- `ServiceLoadBalancerClass`: Enables the `loadBalancerClass` field on Services. See
+  [Specifying class of load balancer implementation](/docs/concepts/services-networking/service/#load-balancer-class) for more details.
 - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers.
 - `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers
   created by a cloud provider. A node is eligible for exclusion if labelled with
@@ -804,12 +804,12 @@ Each feature gate is designed for enabling/disabling a specific feature:
   Examples of streaming requests include the `exec`, `attach` and `port-forward` requests.
 - `SupportIPVSProxyMode`: Enable providing in-cluster service load balancing using IPVS.
   See [service proxies](/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies) for more details.
-- `SupportPodPidsLimit`: Enable the support to limiting PIDs in Pods.
 - `SupportNodePidsLimit`: Enable the support to limiting PIDs on the Node.
   The parameter `pid=<number>` in the `--system-reserved` and `--kube-reserved`
   options can be specified to ensure that the specified number of process IDs
   will be reserved for the system as a whole and for Kubernetes system daemons
   respectively.
+- `SupportPodPidsLimit`: Enable the support to limiting PIDs in Pods.
 - `SuspendJob`: Enable support to suspend and resume Jobs. See
   [the Jobs docs](/docs/concepts/workloads/controllers/job/) for
   more details.
@@ -835,7 +835,10 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `TopologyManager`: Enable a mechanism to coordinate fine-grained hardware resource
   assignments for different components in Kubernetes. See
   [Control Topology Management Policies on a node](/docs/tasks/administer-cluster/topology-manager/).
-- `VolumeCapacityPriority`: Enable support for prioritizing nodes in different
+- `ValidateProxyRedirects`: This flag controls whether the API server should
+  validate that redirects are only followed to the same host. Only used if the
+  `StreamingProxyRedirects` flag is enabled.
+- 'VolumeCapacityPriority`: Enable support for prioritizing nodes in different
   topologies based on available PV capacity.
 - `VolumePVCDataSource`: Enable support for specifying an existing PVC as a DataSource.
 - `VolumeScheduling`: Enable volume topology aware scheduling and make the
@@ -843,6 +846,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   enables the usage of [`local`](/docs/concepts/storage/volumes/#local) volume
   type when used together with the `PersistentLocalVolumes` feature gate.
 - `VolumeSnapshotDataSource`: Enable volume snapshot data source support.
+- `VolumeSubpath`: Allow mounting a subpath of a volume in a container.
 - `VolumeSubpathEnvExpansion`: Enable `subPathExpr` field for expanding environment
   variables into a `subPath`.
 - `WarningHeaders`: Allow sending warning headers in API responses.

From 1909f036204c50b9959e6a61491e3c993e6b4188 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Tue, 20 Apr 2021 16:49:59 +0800
Subject: [PATCH 591/788] [zh] Sync
 content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md

---
 .../job/automated-tasks-with-cron-jobs.md     | 38 +++++++++----------
 1 file changed, 18 insertions(+), 20 deletions(-)

diff --git a/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
index ccf573b155..6de803ec91 100644
--- a/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/zh/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -2,7 +2,7 @@
 title: 使用 CronJob 运行自动化任务
 content_type: task
 weight: 10
-min-kubernetes-server-version: v1.8
+min-kubernetes-server-version: v1.21
 ---
 
 <!--
@@ -11,12 +11,17 @@ reviewers:
 - chenopis
 content_type: task
 weight: 10
-min-kubernetes-server-version: v1.8
+min-kubernetes-server-version: v1.21
 -->
 
 <!-- overview -->
 
 <!--
+
+CronJobs was promoted to general availability in Kubernetes v1.21. If you are using an older version of
+Kubernetes, please refer to the documentation for the version of Kubernetes that you are using,
+so that you see accurate information. Older Kubernetes versions do not support the `batch/v1` CronJob API.
+
 You can use [CronJobs](/docs/concepts/workloads/controllers/cron-jobs) to run jobs on a time-based schedule.
 These automated jobs run like [Cron](https://en.wikipedia.org/wiki/Cron) tasks on a Linux or UNIX system.
 
@@ -24,6 +29,7 @@ Cron jobs are useful for creating periodic and recurring tasks, like running bac
 Cron jobs can also schedule individual tasks for a specific time, such as if you want to schedule a job for a low activity period.
 -->
 
+在Kubernetes v1.21 版本中，CronJob 被提升为通用版本。如果你使用的是旧版本的 Kubernetes，请参考你正在使用的 Kubernetes 版本的文档，这样你就能看到准确的信息。旧的 Kubernetes 版本不支持`batch/v1` CronJob API。
 你可以利用 [CronJobs](/zh/docs/concepts/workloads/controllers/cron-jobs) 执行基于时间调度的任务。这些自动化任务和 Linux 或者 Unix 系统的 [Cron](https://en.wikipedia.org/wiki/Cron) 任务类似。
 
 CronJobs 在创建周期性以及重复性的任务时很有帮助，例如执行备份操作或者发送邮件。CronJobs 也可以在特定时间调度单个任务，例如你想调度低活跃周期的任务。
@@ -283,25 +289,17 @@ If this field is not specified, the jobs have no deadline.
 不满足这种最后期限的任务会被统计为失败任务。如果该域没有声明，那任务就没有最后期限。
 
 <!--
-The CronJob controller counts how many missed schedules happen for a cron job. If there are more than 100 missed
-schedules, the cron job is no longer scheduled. When `.spec.startingDeadlineSeconds` is not set, the CronJob
-controller counts missed schedules from `status.lastScheduleTime` until now. For example, one cron job is
-supposed to run every minute, the `status.lastScheduleTime` of the cronjob is 5:00am, but now it's 7:00am.
-That means 120 schedules were missed, so the cron job is no longer scheduled. If the `.spec.startingDeadlineSeconds`
-field is set (not null), the CronJob controller counts how many missed jobs occurred from the value of
-`.spec.startingDeadlineSeconds` until now. For example, if it is set to `200`, it counts how many missed
-schedules occurred in the last 200 seconds. In that case, if there were more than 100 missed schedules in the
-last 200 seconds, the cron job is no longer scheduled.
+If the `.spec.startingDeadlineSeconds` field is set (not null), the CronJob
+controller measures the time between when a job is expected to be created and
+now. If the difference is higher than that limit, it will skip this execution.
+
+For example, if it is set to `200`, it allows a job to be created for up to 200
+seconds after the actual schedule.
 -->
-CronJob 控制器会统计错过了多少次调度。如果错过了100次以上的调度，CronJob 就不再调度了。
-当没有设置 `.spec.startingDeadlineSeconds` 时，CronJob 控制器统计从
-`status.lastScheduleTime` 到当前的调度错过次数。
-例如一个 CronJob 期望每分钟执行一次，`status.lastScheduleTime`是 `5:00am`，
-但现在是 `7:00am`。那意味着 120 次调度被错过了，所以 CronJob 将不再被调度。
-如果设置了 `.spec.startingDeadlineSeconds` 域(非空)，CronJob 控制器统计从
-`.spec.startingDeadlineSeconds` 到当前时间错过了多少次任务。
-例如设置了 `200`，它会统计过去 200 秒内错过了多少次调度。
-在那种情况下，如果过去 200 秒内错过了超过 100 次的调度，CronJob 就不再调度。
+如果`.spec.startingDeadlineSeconds`字段被设置(非空)，CronJob 控制器会计算从预期创建 Job 到当前时间的时间差。
+如果时间差大于该限制，则跳过此次执行。
+
+例如，如果将其设置为 `200`，则 Job 控制器允许在实际调度之后最多 200 秒内创建 Job。
 
 <!--
 ### Concurrency Policy

From c2584f705a14b7571945cfa3bf66092eb9cf1e33 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 20 Apr 2021 12:34:19 +0100
Subject: [PATCH 592/788] Rename article to match publication date

---
 ...-k8s-for-humans.md => 2021-04-20-annotating-k8s-for-humans.md} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/en/blog/_posts/{2021-02-27-annotating-k8s-for-humans.md => 2021-04-20-annotating-k8s-for-humans.md} (100%)

diff --git a/content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md
similarity index 100%
rename from content/en/blog/_posts/2021-02-27-annotating-k8s-for-humans.md
rename to content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md

From fc661952b2a6d6f890ac0eb0e6415ffb5e12e3a6 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 20 Apr 2021 12:36:07 +0100
Subject: [PATCH 593/788] Tweak article wording

- Tweak capitalization etc
- Remove links to commercial services
---
 .../_posts/2021-04-20-annotating-k8s-for-humans.md  | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md
index 5df7e4ca5e..155ff5a3b3 100644
--- a/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md
+++ b/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md
@@ -20,7 +20,7 @@ Troubleshooting always begins with information gathering. While much attention h
 Kubernetes annotations are designed to solve exactly this problem. Oft-overlooked, Kubernetes annotations are designed to add metadata to Kubernetes objects. The Kubernetes documentation says annotations can “attach arbitrary non-identifying metadata to objects.” This means that annotations should be used for attaching metadata that is external to Kubernetes (i.e., metadata that Kubernetes won’t use to identify objects. As such, annotations can contain any type of data. This is a contrast to labels, which are designed for uses internal to Kubernetes. As such, label structure and values are [constrained](/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set) so they can be efficiently used by Kubernetes.
 
 
-## Kubernetes Annotations in Action
+## Kubernetes annotations in action
 
 Here is an example. Imagine you have a Kubernetes service for quoting, called the quote service. You can do the following:
 
@@ -28,7 +28,7 @@ Here is an example. Imagine you have a Kubernetes service for quoting, called th
 kubectl annotate service quote a8r.io/owner=”@sally”
 ```
 
-In this example, we’ve just added an annotation called `a8r.io/owner` with the value of @sally. Now, we can use `kubectl describe` to get the information.
+In this example, we've just added an annotation called `a8r.io/owner` with the value of @sally. Now, we can use `kubectl describe` to get the information.
 
 ```
 Name:              quote
@@ -85,15 +85,16 @@ Adopting a common convention for annotations ensures consistency and understanda
 | `a8r.io/dependencies`                      | Unstructured text describing the service dependencies for humans. |
 
 
-## Visualizing annotations: service catalogs
+## Visualizing annotations: Service Catalogs
 
-As the number of microservices and annotations proliferate, running `kubectl describe` can get tedious. Moreover, using `kubectl describe` requires every developer to have some direct access to the Kubernetes cluster. Over the past few years, [service catalogs](https://www.getambassador.io/learn/kubernetes-glossary/service-catalog) have gained greater visibility in the Kubernetes ecosystem. Popularized by tools such as [Shopify's ServicesDB](https://shopify.engineering/scaling-mobile-development-by-treating-apps-as-services) and [Spotify's System Z](https://dzone.com/articles/modeling-microservices-at-spotify-with-petter-mari), service catalogs are internally-facing developer portals that present critical information about microservices. Note that these service catalogs should not be confused with the [Kubernetes Service Catalog project](https://svc-cat.io/). Built on the Open Service Broker API, the Kubernetes Service Catalog enables Kubernetes operators to plug in different services (e.g., databases) to their cluster.
+As the number of microservices and annotations proliferate, running `kubectl describe` can get tedious. Moreover, using `kubectl describe` requires every developer to have some direct access to the Kubernetes cluster. Over the past few years, service catalogs have gained greater visibility in the Kubernetes ecosystem. Popularized by tools such as [Shopify's ServicesDB](https://shopify.engineering/scaling-mobile-development-by-treating-apps-as-services) and [Spotify's System Z](https://dzone.com/articles/modeling-microservices-at-spotify-with-petter-mari), service catalogs are internally-facing developer portals that present critical information about microservices.
 
-Historically, service catalogs have not been a key piece of infrastructure, as applications consisted of a single monolith. Today, with distributed development and microservices the norm, service catalogs are increasingly being adopted as a best practice. Some popular options today include [Backstage](https://backstage.io/) and [Ambassador Service Catalog](https://www.getambassador.io/products/service-catalog). Backstage is a highly flexible project ideal for organizations that wish to customize every aspect of their service catalog, while Ambassador Service Catalog provides a turnkey, cloud-hosted solution that can be set up quickly.
+Note that these service catalogs should not be confused with the [Kubernetes Service Catalog project](https://svc-cat.io/). Built on the Open Service Broker API, the Kubernetes Service Catalog enables Kubernetes operators to plug in different services (e.g., databases) to their cluster.
 
 ## Annotate your services now and thank yourself later
+
 Much like implementing observability within microservice systems, you often don’t realize that you need human service discovery until it’s too late. Don't wait until something is on fire in production to start wishing you had implemented better metrics and also documented how to get in touch with the part of your organization that looks after it.
 
-There's enormous benefits to building an effective [version 0](https://www.getambassador.io/learn/kubernetes-glossary/version-0/) of any service: a “[dancing skeleton](https://containerjournal.com/topics/container-management/dancing-skeleton-apis-and-microservices/)” application with a thin slice of complete functionality that can be deployed to production with a minimal yet effective continuous delivery pipeline. 
+There's enormous benefits to building an effective “version 0” service: a [_dancing skeleton_](https://containerjournal.com/topics/container-management/dancing-skeleton-apis-and-microservices/) application with a thin slice of complete functionality that can be deployed to production with a minimal yet effective continuous delivery pipeline.
 
 Adding service annotations should be an essential part of your “version 0” for all of your services. Add them now, and you’ll thank yourself later.

From 81ad8e29b625f29084163ecdb901e8bdaa03b8f6 Mon Sep 17 00:00:00 2001
From: Mark Church <markac10@gmail.com>
Date: Wed, 14 Apr 2021 15:10:26 -0500
Subject: [PATCH 594/788] Gateway API blog post proposal

---
 .../gateway-api-resources.png                 | Bin 0 -> 280124 bytes
 .../2021-04-22-gateway-api/httproute.png      | Bin 0 -> 120633 bytes
 .../_posts/2021-04-22-gateway-api/index.md    | 197 ++++++++++++++++++
 .../2021-04-22-gateway-api/route-binding.png  | Bin 0 -> 93032 bytes
 4 files changed, 197 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-04-22-gateway-api/gateway-api-resources.png
 create mode 100644 content/en/blog/_posts/2021-04-22-gateway-api/httproute.png
 create mode 100644 content/en/blog/_posts/2021-04-22-gateway-api/index.md
 create mode 100644 content/en/blog/_posts/2021-04-22-gateway-api/route-binding.png

diff --git a/content/en/blog/_posts/2021-04-22-gateway-api/gateway-api-resources.png b/content/en/blog/_posts/2021-04-22-gateway-api/gateway-api-resources.png
new file mode 100644
index 0000000000000000000000000000000000000000..ef589bc9144e04b9b5b7f312f5ee79c92e7057be
GIT binary patch
literal 280124
zcmeGEWn5HU_Xms*$iTn=Gk|mrAV{Oq-J*1NcXxNEgb0XqNOy~L2q-1eASD8dAR#6B
zoYCvLZ?FIV#eKbcKF^CEA7<vvIcM+LYwfkZ>$}$8Gcn4FGB{XdSRfDx=kX&cRS*aw
z1_GgNL(qXU`lgY<Gq#<Lq@?m=NlApVtCOXTy#)yLC?-`4LtE`FQI1}6Qqp@=yd->I
zf|puMG>srsRWLaX=A9H0g3wr;;et>*V!X;P<<SLpDCR17emb}Pj95z<znO}ws4s`3
zxi4vT@~(J&zdRjzag!qGwnqu#@@vI^%w7%_%i%L3qox|6$jlhH;{n1ZL16}U#|}Sx
ztnK150T1iB-rK#x31&R6NWiKNO1POV?js)Z1|imI##V>Dec-&ef@`)Ozx)Y;6Z*!L
z{lo{ehiYqK-3s?^LbYN#Py~-De=0`F?DyvBe~zMD=-T>$6~y&jT(}|lIoO9wL~@69
zGp-+Goe<0yeE0Jqjb^_HEr(M*>T^kZ=q^3H&pX&_z$;59XnmaI)0S&PWbK2RkYXa*
z<j1b9lQ-iZF89)&vrr$I;6yN|JnUyVjN)!j<>Z$QS>u#?-A{VIE>>6aBg-e2Z@3^?
zymxfTDJP|PN&}I{x3HtLe|}72jE+a(5^N1fRUDDND7c5)@7$C(DfKf;D*Bkl@J><$
zL#aKF+}*(n|9p=ZsyuQ<qQj}UXBua|i1Ej!WoIi8Fa@D#u?nNSd`LQKoka*EKe{PS
zbhbG^rV4YWN`!>xNM5`;RZa8?{wMDcJ|XS5iG=2|eV;T==zZ#Y{Od*~@a{g0INgF0
z(4`#rC?3ALb<n3@JB)gt#U@DxK~6554mE<~myb~TvBU4umwNls|Li$<*UBfIOkPqy
zI0|lE!|LGg|6U)8HmxtjPtC4KFPg*jHc?J}Acok|jcz^VV0BoW%Qy_)jpoWoYW!db
zy<n#LoZY*G0`rzW0<0qjqR`0bA!WKnXX>p0ida>OMib-V;_x<B2Vv!14<~8*c%Z$w
zRS3St>DsLp{X^{bP{iqBh|VV(r?;z^Q_<IJ+0Y1#_0fm|lAF_W@m*dVsBM7;+0Q(g
z;>|qz`za(6PY{uKyUvnApwqs>HEu{O%lG&T?9GGGoc)yd551*cDO%tCm~$uN?iJ0u
zi9E`~s50B92LWu(c0*r7FxIb=C?Bk2e}waW`u-jUg@xw`=cQG}>ZuTJ!afEKueO!s
z*V73;Q#rin3ZFk2d_i_XMkUD_s~coQZBa=od29)bzx<MWWpMnnHt~D{UoV`pd(3#S
z&P|&@6P7-AzY?V_no?yofBM+m*aOEmjyn1-#vve5V#Q%u>C2JUf!4{N4X&(4_t=c;
z4(6WGPZkxhnut6Dcj2Nk$c(s=^|*U@dZ36MRH<}!E<Zr;q=Bqo@-F$m8oYXQb#<k%
z;;xbl;<H9?3A*6T9wj`>2;TeJz~b#{6QUZ$!j5*9_C8#26qF8v8bg1$fOEQGXd%jQ
zOjB{%M_>Yz)ClKnxgPa<1S8-#dAC_H?8LxxXw9M7#;`fqwm1PFu3{K;^}#FL@4eHL
zD2Abq`&36X5D5uu2<3e-c|4YW6c_3Cr=UBxV;+8bs(y#^twet`#fz8`8QG_)kHGcd
zvWJ1vxO9V0-5!y<lKVuv(>f(7F-EGY7)+5gJ(MX}W`xE|5KLfN6A6IXq=@t6CR`h_
zmf~mf2PdFkJQ^tjVor=fYJ(){q?^$`X7;Q^a(xf(Gx3nK^t`KOt|YPxAOFcbli*=O
z?Lw<K_~I3veh;2E{#akhYQq7&H@K6arcddU)<Kjv?{%se9SI%<q!SI-gq0@lUaGP@
zBc1(S3fintzp}9XoJV&aMDs{-ydqYMneQj<r|-w<@94KQB|o@d7bQhYnndyF`lUAh
z^Asg!hAO&U21+^u8jmF3>8WY?Y5nQmsSi{Awm+ucO?j44YP1!c$X6v+N;lJ9B%8hU
zKXgBQaLD6I_Y=Q0?4!&?@tpD{Q%s8eJAGOHqBPf7*Th3j1A`^~C7FOHuOD?h>d+6!
zJ=Zyo+NLfOQ1@fb6v$yNVK4fg$D`(?w(`N6%T5>07N4f1CtFdRohO`kZ2O)&i;IuU
zKc1f~mCS=oi_6d^nY)ThCxd_+%00{lvo`#&^MTe*$F8pFm2N{5a}%!J($w}uv0a<>
zpzW3o$Ha0`fZ|0f?&Cq-yXsLj4PsUmW0={4?oS-WttNerejYg-sU6`O6jaBv%kb*8
zsCy+kRyelgB;>Ri)-Q8)$ac{A?qWYN8C|{SN;*t(LCQ;#8%YW?!y&-d6RPx_OEsZB
ziu#7}6?!Chbh>Rcdt=_s1>qjLuWh32<h%msZRDje<C}IaTx061UVGhl75O9bIrfU^
zWdfe9xzlYYu0HFE3F$&AGlF$zvzP;cb%Fr{2JB~uXZFvg8Dta$6uuUt6w^*l7Z1uC
z-8)WawPbI|@=2a|urwz!Vc=afow1#<ax}{^7a8}j`56F>jcAcBeq$R)6z3?XHawBW
z$!5p8r~S05y((POu4+s>ptiYAvCh!i!0GDa!<9%gHET69xA8Pfa%;gi&F@Y!C@01i
z*#{lNmMr|Hmir8?jckJ6qIm4P!};x<t;xkn);J}E3T*ooWXkD=>$>X(4)O{5m=<hu
z)H)_Bo~F@FKCCA3vHYxM1>4f!av1Y6aM!0b*lgu`-R{!lwb82i+R&}AHKKLY#m?Dp
z_xmcl^U9aN;jr)b7tHcy;s%M8IF!n)s;o+$7iqno^{vTVe!c9nEZ07M4)+fY*gWI<
z>3?*5G<v$Uckw*8&?sSry=$w`{vqZ=2lC^&m5;gKy54jN2a_gI)$->Fzh_M%*Csq;
z9HNb;ZWR7PI-HO?x-jZXxI@8;BXavPWOq2{jU#T4M6aZ*gs!BA#4`yN3F`0{Q5F%?
z;T}<b;o}ge1ca27bY=9bxA!;q`KGhJKdKqhd3v|7R0UIoP$jWox3Fj;zHnmVX`xnp
zC$SkJT|!wRxGrl>qwaLw{!?-P6;C7|gQNULddUI%0q6Soo%aL`^gFWNxg=SySPvYN
z9g>C0=yf=K{9Qc`qf(MmQkizmWD>HuPbA7s${Cwz;#1PHnuV*Z^uN5~UKbefd%{5#
zWEMIaZbLApz?GFQcrbKl^zp~X7#}ddGJS3PAnIn;s_`)gTXEq0i6d2JOWJ8Nb-&T*
z-t9A}CRUEcxmERuf6hj36LW<c2_q|kXUtpy*2K4+=pBW5YFAS?&(B9&#h<^AstwDH
z3$o7OZAB|7^1KjoaLw!&S7o)y{Um5Hn&N1a;@*b+R3VA`^S9pI^Eg+%pGt>OU=(mF
zxI^t(2~~Qru!7L;C-;l5aV4TG*esV8=ptdfg%-v0Bdwg&W2U1E56E9+-*2->c#{Qo
z6Nv4N^BgN08GUhaA++Vgvel89`=HAu<RG*FoEU_4Q&y~9sIBYomcP=g5VtQ~AYB!=
zL{y`9*%WT%+BwzQSb6jVe>wSwXxpX!wcE{yk)o<$q2~_ziu&w^fo9UHvDqw5T13_U
z?Y2kduct?*=_^*MUNmm%zwnzcZc1r7Y}(zJ*ueS5I?HBs+A5*#((&Mx>z;4naolXs
zT=$Bzh1vUo1%-i3S>AvJ)&+k%xwEv_%-_oEtNN?Jdby5r%buIWdq(9g<c=Im*A`LU
zG8bcK*>@{C$}7A`cXc(xW`^tpyb@Oee3XWAB6SBB*!)QS<W55Z4g)v>6>g3Pu1l}j
zFxp{LRE+|!uHje8k117oJF43ZwO5vt7T$aE9XiVu8m;HAWCboxn9r#DNbL>P7p4?K
z6HcgEgk~mLZN3ZScwD*+zf5bpJCO6r({<$SjG9WxSPrgWz$ff)BXteeR+(cza|HdD
zFZ{2-<4_M`VRowXrS((Es+=m1=k4s=`X{X)=XlC@zod4v4Aw;I3kSrz?e-q0e{<kX
zcKrC7|Jw3`?Ye5K#m%X!Q_Z<#&v8Pyw<GyN_jH(wM7Z?4?|Wj$ZqBX@Rise+8ROc-
z(qQ`_NA6IL|99>El#|At7hfB;x2nf81^NUyx=2n7){8z{7-=2kE(BEvSzK(d8i@xP
z>`*N(9q69Fz8Ot!L3i?McMF>RKrs7bHDLLo6Gq>G-XSRJ8zl6DX=AdXvn=;<?r_&!
zfXyY@@v&i$VNh2%%LeWxma+2t5qZ$^4k$Pc3q+Z-$he+j)e{oQI9_uLa(TB>hy#~P
z31n+hau#pJd#e@}>w)(<vfwO22^+OEb1|tjgLQIL<E?bWT^b3epc_3i(4%;e|I?Gx
zQ-?2mH}yE^e&oTMOz${L3-H!nn79R_8q97Hhfrr6`kxylh@Obyg$SP2-4N$TCnoD5
zmg9iDBi2Iuv893nh#5GBfY4CLKw#hq1$c;{kpJiSAqpet*01xZAW)PI2<@+X6oFUd
zUlQ;@w)y>fD>)K`0ldQp9^QGVf8Pxe%e(dWG1@k84J586`S>yLs%GYDVd3az?d0Cm
zuT=(|z;u43;|2l|(IX!yk5%vN1O3n0sB61xE659&IXSSKm^+zTuzNc=Bl`gfc?$rC
z4i@ev2yX{_M>hd)VcK7J2mr^((;T#jU$?m13DasTC?h1DTrChh?DyF3(TZRp5C|bx
zb4vkLsfT|x2i^(OTD!YD3vh6Fd3mvWak4wPT5;Ux=jZ3R_kiQU12*6eHa8zfcN1?m
zM>o3Po&4R8l!cp_tBtd}jgun+*{_MIlZU%7EiLkc{`2>HoEF|T|NSIKx4*;!1mr+o
z;keI!kK;dm15JgHX9bjPye;f?q--1jodKUAa{mE0pU|%c|9_YM`;mV%)&6hO2lwwk
z__OIBm;Qg7YPearN;)|JAL=gh-wFGx@t+s}YAD2kl>HA~{8sd@vw)^Wu!K1NGixGP
zqfgu%fQh8Aky26zUI8;h{-JsRPmI4`fn!tw!vS=74hSR$dMqWb?v1jugb|$Ok$rP8
ze)M9OKC`~8F<cCkN-JF+T{6TZ4KDiVV<n!bCXT|AgO%g8<x^@^<Lw(%hX{=dEsYLE
zJlcbQko4ru+?}+#UfJVpGr5KN(%#d{bA_(q#|Y=R(8e)&disi0*NXDI<EKavDg+Vy
zKcCd=#G*k`go#uo3IFq6WOpGT6o?4q-}H=7K1M}Dlm|juL1=I>5X%30LV$X#{`XzT
zj>-*#K~mE&8sh&g9&*TNh%@Yep$SB=*fbO#TzXFP8TH?cS1cHWmis@Y`XzX&FA6GL
zLo{6fU#S=Z4_@W`ccN)<h=B^WqmrQiLchQ*sBnMue<fPpHW(tNeg$_$`ByV71_~Yj
zccQ6xfKZ~#sU_I|-AqHo_DTPhXd&gq2$0IL<Pi8@%{0=8Z~ZIL{?Ca2Hu3*6;=fJ&
z|BU!=@BKd{{u`(N4~hT6>Hl|;xVW>sT%+P>o%+Um+lWys`j?A#^Fgw_Kg9@q$qO4;
zdqjcyH-h~dA&C(X2G_rhPW%}NjWNKT=hHRYIey>gd%WuS|DsOqN!<kz(Bphq&{+h}
z8uvdKOx`vc5F(e7TzdbABl6TCIXP4Yu5allw?bQ0e>WIVSuKcT|M2Ne+~7ep1=c@C
zGuHvo6VDnBKbgN>3K&+10sPhV>u>H$$FqCARNgFqjmBPXHD$I#u|{ws#i3)w_uq^L
z5Ovb3^7lYO4uBAO|9X=G@6Qo<)&K!{>D%x!-XC$+m>7_42bIc6`q!vdrGdBY5I6_j
z-_{O@EH;e^kfql&>*0U2Ocz02#1cCTAN@oxR}4ebiv2ww>=2>rIWs*6CTWl<v9izK
z0{sfr^0L4npSf!DG5sl!a|kh(*!za8ama7s7w>kTem&u@Bm7GjznZFd0b}2$maP6$
zcT6nZ;iD;(y6o6UF^ws}XCjm`_P7y$gEz7z0kas$RN^N;-=Dp;CxHlfI9~SI{hm+z
zT+m9%;#R-rAJdCazCu#kAnaDuKL%S|2{csmv~InJJQ?D0d-cMdqK^OepPkE>0z<{z
z*joLww|xmz`MLHa+!~r+daVsW_0M(8CD8l*_P4IZj**=7`u=CEKkPNV9%v{(pTE)j
z>*Rn+@ZO|L|EBVvo!`p`hRTqV8}{d<bwe@lnf#CtX#brZbe~}E2fPkYwEu^8rjexb
zd@zaSPm6emb<c#;A}S3kiBvX;3`(ccAYP{ApF`~q$ASl^D+l8KBa`5`1I!2X>pt24
zXD2c}9CbrgyvS7ZXAgVoVHmR|2KRfHpjwKA>2k--kk~u6gbA}unv><ucgmFc9$?ml
zt1V=J*4wxVXOPmj$pm9&F0H>a{N)D4&jG8Mv}<qG{nJ1ifXV+VbgnOm3VG5h_WFW}
z5M7gTvQ0nY2;Bl>=B+ARwY1cl>y9+*XJzIxWyT71TowvNCS6XwI`d5Y(Kte<IZ5s+
zzr>$Db$xYs#{Po?PdkuiEJzEeHo>}%?YC<6hyla<#$Nf`X@C1fNZDP$)VJfAw88<i
zN4#&_);z8`&rS(cjajI*CCjiVqI_wsx@P_H`~7(sR3f~{^{oV4Iu(mQ73$MwrTz|=
zacQ<fet<`Aw<z-GV3|n|3&W}`-{%=Ll9j5mT3n<lP@^!|4-CF2{O!#SfMJxJoVj}Z
zX^Z=nfC8-8v?YK+HS6V3ppiUa-b9}|9)hJTp2=`e6{%11Xwlf&;Kk_q#cB6`z}7sV
zF-@hiAGgo}L%LGgFib?>(X<ioKAtZZzs&}D+Hhsz%QaW0d)09j+d`4we6?(PQP!}7
z#`b{Od;Q0=14?SEgiyfY?GpjdTrBM8`8}BST3~WGcKRy*9NRq)0NmuW>psgO(E=^@
zXJe!Q^;Gw^XnE3Cb*3(r810&Et0tD5Qk6T?FP#f!@Nw^_vR$q|#falW3&DU1sORA1
zmTH7CV!VJ{tU-y&8Hwwei~Uj?5K=4W)9*I6?X}o69~CGZyCtgZ?%WE!*S}BYO=5;J
z;Ppg&o)Vb2d+2~KKS7~w`{ixvCjbU0UL*p=tzY{5tyFR(j$4+tDx<;YG(tM3TWluP
zM78)EWN}8z@_Hp%@zg4-AFEWHtZGn7JWbK?k507pGLgaY8HToDJciVqty-CeU~oY3
z4$;Cf5SKAdYPCTh(xM<txnH$9Yvg`rX+;fH)Z8spHqFmC@eLy*rm$IbBbNil$jUuW
zj2xpUa*WyZe#i-gr*|U9xKg+E?oZ@*1mLE4G1{#If~f67ZS7HX@V&H>^}14FYtSXM
ztBu93d-aAW7VCL~W`0i^TleZTxrB<HA6`93YDm`zZ7p)G9Ja9rlA^y-=EoQp@jmNu
z+{n8f?)2>0VHlBnsoLAL;d$}Y0!@_y3N4!F4PyNa9$rV<74d~rjpO9EYqCk(bEyS6
zy3fA1Q|?Itqa2U~-10zqljN5k)eHcHEEDO~r~d6Kzm@w0$h1kGt|H^%Tx_@T;MKP8
zmqpoW?6PKu{A8S&Pqe00Y_d8!HCRv<?4b{EBIR0;6pt`P@cw?7hC2im-aMK2DQxfK
zE!@o9xljA`PF5%}uC3OY=4`hnYMdS7I@p{plvuK|Of=}XcYQu$J-(g#{aYOmMMdh^
zl=VR1P2R!_4Ev1{ohD(_CwnK1bvQ^(*CCO;QdH&_A4n%dYC7KKGxHzdFShyyNY2||
z;priQySWJG8ZRH>R9-&K*c{QU_er3An;~1BZ=Fht6{cz;W&soHR}}|GCpT3>{Gd;2
zBWPGbc!yNPIWCa+a4MlMtHXWc9n9e?mC_GetxuD|RI)ayz#V0|4i~ky@K*5%H3y<#
z>w0JDY~ca>wq)0@jjqDurG5cXWT$*;3V!Y7^&EkYEdUrUsoNvD7ZBzMcnIE&_xuLK
zXu#jp%n_~Fe}Ey}TLrLY4%vQmK-wj=cSQ1YM`ulB+J03FCv$QK13GDfkH{p8B*L(4
zpkmk>67ZiiOe%VqVlR1hwxCckv|SF?OGFLYnlF|AKE?%}(1L4H$o>{p=>EQB4;3p&
zWlS3{T11*`Q(LpZSc9Hb{i$so4>?tEX^V42whW)GQwuspYvtip_O|vx<M!rtl`c_N
zPpsmZOKV3GX#L`^&?qkgfEvR}y7R+dmNE^n51Zq7QmZF_vIs#Wv~GR$20TPwC8WM7
zeeUc_V(RW|6@?!s%H<Xb8XmPo#LJxp>2+;QoseD_Q7EHDC2D_?L?24@C*|iF(fe5N
z8Cp7sxHpK_TpYaueN8-iZC|qJM}!Q?JI#$AO<idWn5Z{6+I3#n*xZlM#=b=>j=6*l
z`{_PNYRMT4fr^EHN^K@5@?<28C0l3|7q-)4p7%`FeV%2qWjwgitO0m%1#2bJ9T=K`
ziFxMh&By<XqcG#GUNp+0$4(-z{cT$z21E!@-EjC0aIQF3tW{fiwot2L>Qs<>Y*Ft(
z07@mrcB#zHZ0^9J-e?QE)*jNe?CFIQX)<ou8weFegQ*U$$ScnzUHO9HO{nmRya(a*
zwCcEt>LDZskltR{@^vpNJoSWlMz_%3tKuAPms4T-Hf?eSm(FIIn$`nr(AGXTMixYC
zPZJ%zwEOCf=|sX(;j)Jk%SUg2cqnACuGN95`^@oc4<|6<JYBT(+Oo8#pM-u{8bbqM
zY0rGz`FQ^$4Kg&z0hVS~_O=taza0FUs_o%dtLo{Ijx=UNr!|b4m&W;!Z;$Kv&y4A*
zSu2fu(AqA}RRfh{>2EhXKs)T%z9rS$!iX|zc?k2JN0^1Qk1^~b*4|JvTOfAwRWEu1
zb@zLQ#l6X~7i(7J0xL&?P1&e|Yq1Ev(m=(ybjNxY?4|7NbBTOwuh6|}<k!Y`z3HJU
zpE3NV501=aN3ZopYduLmHs3b(Z#h~e1zca54RC$+;YThxzijTA4ggtig#@z5{{dM=
zKqRf3GB*P5Z$g#KhFP!o87Y6eY!zRO%k!0d+Y19%9IZ}M`Oo*l#f#9L6ihS_?cj&^
zXPqdS0LN~^f*aVezBERGKpEA0VJ9T@ve-nS`+BYR6H!)B@ws!^vwVA$=%l7DMxA2}
z7N-1q48#H}=qWX>*h`>!Rnr)mCQ2_VEHyYHf|J!84-L`I98NhY3IDpx?x5Rb$aZn_
z%+_*8t7-lI%-ylGgeJxdBwrj*LV|I_=A&Pdsc9j>Sg=_iDfMrbi;UGwfH%p(a%cch
zyFGMLqc*toysW9iFlI)$vO(&@2P`7*AwBL$i3JHv&EuX0<5Kg}HCr5d=tFPvC#uCt
zvJ9*ocp9B<9`8{lHDAy`n7kv<0sjC1p_zw76Sn~0w{`&*2xS)2CWJWE;ZgJ@5TGGk
zse;pMLR)4bz-cJ9UC<gzwDK!_&;1!<@dzxKwv>axdosFWiTphOaRCQ^hN>4Ft^Et$
zBRP?DuQ%v9JN10`kx51=4*(YB4*h&azkKU0Bao_?QxJ|}{@1lo&^)7niCfBlCxR!I
zXN%T;E-`p@Q?+ooD?7HJH8F)P=v6VI+*l5ihKXrwphG27<d*vj@Ix8>DzN-I>`x28
zh<BPOv}w^yv#lQ_Fq!0dv_Z6+YZz^M7jdgp>LC!Fq+U&opHZ&x;M)GM-8Snth{Kt~
z0^?LfC8|`Q*nti-m7GkKQMmMxf@BeDcvCk7W16acHv)|C&!q~EK3kH66Md}Rdb5*M
zpFPa29$2RPyrZf<JNu1$`~A*Im#J1uAne;BLsJvphVL)HV2}W2F-CbS{f{|B+`~gA
z9TM4Qw87mk@rI6siW2-pD(C%1R4W4=i+Uv{Bw*s8UTT0pX;5EUrjoVeOU+AS0eC0@
z4}Qdy6U*GTj0&GYrGtn8epLa?9Y_kUUb_vmkP~@=hS(A9Y&PJZ^J1LabN0i5N~Bbw
zN|}z)S^$=*c*>H|2nyE-hUfrbN)zQggbEkGfG)ORu=>weD4@|qhY#|qlYG$}jP<Y;
zUX_&P*~QDccE9X7Qyf&;%D@vdE(bCr&gq9K-^7uSm<|DW?A>32{1@`Or2xW^4)I8c
z0iiy7XuMu1s>~YDVQa-vi!I&}LBaa+9z`I8P<VfJElO6oXVFMq*W|N0YjM@RaIN4k
zT1-z>>lw;+UYAr+MrfD-9D<n;Az|VaWI_Y3IA48%vFB~_hMc(tfd=q}9X=wR+I8K<
z_*zO%JCx{FKSs`bdGC{&`W{W|fqFw>;!y0BAR&lWc;%twke;14VKf46GWf&?L|2fk
zQBC4+S%mdgtK8>+v=1XI5cXv6h}^B31VHs1WTxsQ-%9(-QV);`!{sPH?Vo-q{{%49
z7?-V5AUtCN;aN=EYcOi+L%aCf0aDGY9%dHrA)4IgywH}m{bxt}VK+xx%hkOSSehsW
z=4%*EVJeNa67#6=7<C7FkcoJN@?6COZwRgJUc+Zerh@v7+v<l{@MZ>xSa{_FV4qvL
zXn5qJu{WeQ_qiJo?zO?uAtDhE00Yn|app5=lb`PlxFHJOcZ*kN7E@2yqJg&gf%+=M
z=UOd&+omQbE9avOc`zFXZ*G&U9Pn;M1E$#h9d6uf=~Y^<^h?CA41hDble<(C|JNBq
zz5<!8>3M>%Rzi0pF{8Qfl*?cnx0&Gwth-aX@Sa{Qu#>b&6$fi2Ts;f`|3DVKylzRn
zqIxacp@o8$!J+b`1CW&J+jDe_S@sqzY$CDRRmq_~h~bN#WEfTGoPWzwcwcIO?|#o-
zvss&86J`yX$*KRt7|#mOMB8H;sH7Brlek}8bOgD?%qFe5Np#+MpELQBTCMbbx6@VW
z_gH-ib}b*3b;)O8www7k`H$LZw0W}w?{!YvG`4C2ruh!(hrsrVh2P1)9N>os$(wxt
z@WTnDANr#4i2&Rry<2%!aywujABangWXJe8MDmb&2$2M%-gG3Q-#D&$;TD`qnUVO%
z$rnO|Ybrv@^N~fxNRqW}Jr;bJg^+|b363R!NflU%h7ihIt&2)-nuF+R=HvVCYllZ5
zLV3uWgG66xMeKw6KMJSLo1;Wu279!ZVoJc)(ltT=n(X4&m=p$PWp=nHWN&gaCu|*o
zci2oqLwHE<QM0Fc)k&>YZn1*tmQ#9*vy*^++y#i}A$5enEZPgt{|bKHN63<jZ-Ss!
z{2$Kfej6xfQOac7Jp_e_<vATwrx*rC=q{+mMpj)(O-#aw7#MXHp*rN4c4jJ=qI0%T
zrj+)phzNwNCQU(BOB<LbR>v*^uc|Isyy1ggPW`30Enm#42C0w~-b+e*y*PonB~N3o
z#U|l}py048^a)4}*BT*Wr%w4%h2`=x+4gd&w#j=`xTXfJ`C8N~Fm?N}^w2H%j47RU
z6JDKIgqDA;+bQ;-vvnWQj%)As{QHv6p+TBU9}6#QC$|UA6f4#?O##%wf&!=$f$?1K
zcUgrOSyqY9xb=^+3K~!WN?%1;-3L6<1vP*ruxcbWNNc$A6>WYa7%mhJe+dC>wIx_w
z2*QR2CJS8+1K*CFK`qSEnqU#vMiitBmy?vKDCkw7YYN+-M8D+jhUj6$*Gj`#(M<9&
z#)Z8b;_|8<zE?HlLo*o`hxAf)ybh0|#qz8zXqqX_bwY`*W|zj2#Janq&-!_Fnz~oT
zsCi#<>J~gzliWlwtxNQC6?dp|IQNg*Rp~ks4W+?6(;v%Kk>I=X6h~;3FAlO1-nenV
zygjJ{z{d>x-S=N+TU>-Jl(^2dTK~b=fRiZEHvBvKT&R#&Vk?Ig8rnA=+>N@Rf++_u
z3F}Mc$1K{nX)N=>70s&vuc4JHvnC{DH8(y@j-ZY;#OYlyO~KMhrEMyA$jrayR?@xK
zb7G-_eq+RMZ-NCAOWFB8j|CME7us1(Y^MFZ%g)-k3P5lthhJmIqR(dyQ6~-@PfsR&
zAdc)#%8H_CP}6#f1S*Qddl!to&uF~6v=Sk)igRw?>eeFe#^wtgd*U#PTnJ6G33)8w
z2&@b4MrJ_)TV!Gesxr4Jwb`La$T8MO79h18asRO%PrwKu5b6OxAg6qm7|mjl|EyAK
zB@WAMKw?2h5cYz+H$y(YcXT<4qIMF(b`5N2WYU8H<niLs$r?8MGAwn<WoRaB_iQc4
z-gjq|RNaaI-)0?xH*-l0v2dPUvtAlM4L26O&gjtA`Pvh;wq>zcx`T0=2}am%?dInv
zutyw{N*AQrN6%eXev+J%fB}s4Oqk->VzDLSZm*}K_+4zL5WM46X~T$&TZDEWwOZvL
zP0Xkf#*CNl1d&~u`<L_}++qN0bO1>B3m(bQ2wEhK+j$6BuNNJA+rvMTipTVTsH!*^
zcf&xa>om&DmMPR{75F%+uYVW{2P|qeS$pcdl``d<GfpLW_f!@PaL=B7{m>|?%6Ag<
zXlp1CC%v^@W>yHE9Fqmxy-0x1oy^=OvfYPBC0PN)K%5_a{EqfXkEiXpFrLZN=ywTG
zZI0d~z0C*55$(1BbN#-PQu!tl1Hr68S=lTF53e=ThW8S{49#g@h7u;%Zr|>FM}S9^
zGPLnScTq?6LT+5O+#<*VgD!TK+WzA4yh`y&{6Y4@`tUTsOOFTuP&$w2*ZP$P-b0pZ
z5;~at{*gnyMbcQ;1gI5IQf+&jXP=4}JCAW&!Cd`IkgC$nnrNfrE;^guhvLoiXfSy@
z_>D8Dz<!z<5R2W<w<i>rDwt8X0;^_b)dszdxJp-&$&wJEYh`V{gjLbGN=O%}v`o!X
z7HQnGLU5Qy()R+QB#AcMLvC*-$9cBNe47<iH^eOF&aD4P?;r{>Z@kMM83reE-cJhC
z3I{lDirb0qW4x7`E69AHFS@MnQJLas#$<U!RF}-tb7A$N8O98uZd_wF?&2@Mgcg(*
zZPq73g|tTlp38ySKm0qy*hc}byBN~X@Q;W?k1V6bn0%%MZ2khR(p2*LKJ@kxP(+*J
z^tz0iseWbj!as~?RKdnD6HHkt5k_oTTZ~WSUMnUAC#uyX5?_SYpaM9pzF_VR>eW>O
zs6c-uQ3a@OArx~NwNRCYwiK{xbf<h1o0!qW9N+!bP$w(7G~Lp0ruKJXyWN_8;OL+4
z9OtaFSu4SjS^<z=oNMd7T3(Db4A?_$Mmmc6ZP*$>qbt9M@AX~lEb2^U981PZUvT;L
zTxSG)@gr0iRj+$r`pEwA245hS8WN&+53*IMHQCVt@-7DCFO=P;YQM3nnFb&gJjU98
zL?aNYnqn}hKZRVC9Rk!i>6M2(t(~uwQlpPby*8*DHxEQBNUA5487k);n0BYBn$N@m
zl0?ULkCy0Ow61(lD0=5|xhUE$8!MVhJu{vKlp^Jj$S`^!wGkwBv)~~fhXs?F+a&TX
z&59A#d;q6%CNZ>;yB-O{34~HP%uB-Q?J876TMS;{ENSBOmJ9X^G2mhK;!p+eA4xIp
zm_YonbwH9tp|uT9!gnt(ubR6EzsdR*+dblb9Os(y!FJ^boSR+XVXNsg+pVnXM+Izr
z-__3nW(+7mHdmt>3@AVzsem7*c7G`V$*N}5wWIzUjsXRz018m2(5MFTo@VBxudnrP
z!2-oFD`IQQ3MI1xz!it^8Dm{r8(EuNADTCXhSTEAX|&7{te47%syH(<y@9%)dkkxH
z0dsv4R)Z;l_w*G$XXaGPHEG4b>NM@8;{_(qVYnpy5&ZJVJ#^QV@6=dH=)H3DHjd$Z
z&)%|W;mb(=hSaZL>ehh_;L{e6;;u|RkE##~50k~G3MA=_au7|MA0m8NGLtgB1aRt<
z+jX;g-wJJW=8Ns~#XW{aN<Ke%J}*)-^V{^BM5^?Gg4_<$^aTsvH2-D#$U0(GTP@Ll
z+2k))jS^kPTda=<WU-QnS&xbjO8%@6v?EWC(!ya~lQ~Y9*wie2qqjH^uO?98G=zY=
z<LbC~Q%MqqL(2KEF{p(;8s8i==7ma=*&7Tk81`Fnm3jrpD8DfA_JD^1rY;J@how?T
zZR|w4;fZfxKpz3|Xo!36yuPW)I!jn>zPdAyGO`QaJUc8d_Gumw-qoVt%u@SaYKW>3
z$k*FUUqVfUTgywAL!Q{GSx7qsaq4AG&CL+0H$3|OgGq2j%U-g~SBtY#&CkE$^x4}N
zbiv)#z<N(ZMQA(qZ%JeJ)I`Al@OJ~GzdwJvDS#&?_Tsop-R5{J<?Uy#+A_IpA^^l<
zjTz~tivU2nSFT?9GE~EdQRiEn>AVCykQ!6W`xrxx6AegClO>A^B;Qie#Wv}JO#2=}
z1-y@=*4~FX*(|2YrU8i`HdR{b9h#jUfQ_BkR<*RCeG`5UueXI?7Z2!Ey>r@W_!ypA
z2+^y6uJkuUGfceUv=8*}7i7W8A4*ARf_oQCqyQ!$A(dFeZ2g|SlEDTba9N9%T;<g^
zk;!GRXn%01nvT8g9Axq^^9L3!6w6>N#6Xx5L@rt3y42nOofqj50_^jzI@*6~WlYEj
zj)lwo99UP;BPP+lHi(!B(vqCddT=GYy}hHdTz(hZLPD0|nQlFze8F4X2g;B#d>=@0
zHZbf$)*K!Py<V;22$hno)#raWFM%graU0L3R3j10ER+Ygx6Dkl@3{r<(_0V;c-vAN
zftY|_0z}%R;&2rOQiHmN62|~#y?ues+HO2e$+`n?=Y+_fv9rS078gzDDn!HMG{FVd
zd*dvYD6u{MQi(d?X!(I#aEmuPmsXA3Oe%}kgf#ff<3IhTcYO?N$G5KcgQHg3X{DQ%
zNLGlcS8U1E#*pcfGf>tzqxfB+sr?27yYH`Q{Qg)I1chwFflXJG>-{=Fy3dZ~trycN
z(^aZH?jgH%_zw4^+$^A^zNp{>DHJc<6sTSlzfK1uu!u|<2P(xRKk6E5Z+AaHk%n@5
z=k+WadUy9!@S=?ie>Nth-rnLW^II1yIuFaOa9FRw08?I;b&XTWJizXZiNY4LG<IsC
zg`E^0CW6V{+1iw;-JDY`7E`nnwL5+b;B<;w8>j2ri_!iT=geQ?+z(VD>(O0RDnL(L
z%r;YHBU2$VTy~0?pSa^?87k|ge~_zpeHL!si_RS&YO%!;yVp6M;FSOM*jD>c>4e|+
z`pohEoDi}kP%Z^PATueWBEc_OrwZK<5Gad^diIOB|D~0X`^cOmGJOYF<Y%Y}R!Z_(
z@r%Hh<Yjq2&LTQh=ush<!jxiOhmvX*pCKw(q+5}`njfXgX!7_LU>HD3*ir-OMbA;*
zhlGLgXiu!g(O}$CW_TWz-#-jA8N}*zclW`>GkS<GsiC50H_YEIxw~}udT+K;iFR^F
z7Z+Vc^pwAS<QdIcDVJE*)kDkF3oiH~(}2@n8Lnkp8!SB$N`mL~Oa)kR;kVn;{g9{8
zsC^}`o9~}%pkw&f`qAzWE9Nv?RUsm^=95%gpSMvvbDq`Xtr~8i&;v@+6@qEk_eCcv
z0oP|DR<C@J3;XI305)pem(RL`^poy8$ZA3|3|{h&s9?qb_{j+4Jb;bznjxklh2IB*
z%6bS_)XdBbpQ>kXKze1jCS#|HZr3!$tgFY<@)%Jh=-i{p!tRC9z=*W_^AD|ui3$J+
ztlSN+fu*fmR0VlwYYKNh#;H<e=6Ued{^H;e=Gk!b9z9Xq8~AP+wrEonP_(?97#34c
zhI<-<j~%dW);?K|E;}Wpko$}lz-Pv2=h#b^;dLE9oqqbo;rcbgrCL)|n4GNiYg>vi
zQptBzTo7hksr9Es8YE=uK}P!AepwZp9ZH&9j<W*Wn(-)*0k4ZeuPNmQ<dTPaJW>ms
z>RF7xwLk=D0Uw52@(;dmhTL!<&p!`TJmq;pmT{D<uL5o=9@#Wy5VNW(=(RP)MC(i;
zYMkpNi;mQqKROXovTDK)gTt1D_2K1pek0$h_#n3T=GL9R^hjbGM)WX?y0aTO?sB0|
z1$G19o>-$ngUQYnU;EY?Y~&vr>fstzhEs)JC76>7U9JuuZat0OEiUzdRcaP=DmuiS
zG}gld4Fjp@oJc$r#igU$cYTMx2jUPtVU%&8HuNemT$?gvmbP4Q9buOJ%sthlxKyE8
zPLfk|@;s|3@`c}`A9IT>6mS$lo=&>;5jsF@Wd&sEdeYjZ`d5f}rU69Bw*n8ckZXtk
zDeyjNLYA(HEP{Z<feB5vDEYP4a`E>PClxcjFjY3r%6F3Q8o+7NkMzV4h06I#8%Jcr
zLX}O&{1qURX*g}_4DrldZ#{Z5MN`|QBTzIc3I@Z3oQ*XQ=d&VZ*EosRV<@{PQ!~V_
zC%OyYH3MlNv~!-~B)!YuH4u?2#Of}PUR)~Q+S$wRG;s*;wZSG^oQYQsnjaQ0X3AV<
zuFG@VN;+0r>e?{w%X(r%T^{KORxeduMX=5J3P!2U7%En1%a>BTumWmvCv(P8`|pU#
z*0$j`MZBKnB@ISZepDqh(lY3~eC70@p0n>C&laM>k);b|52RxLvq|WgGN72pe2iK6
ze=25&2w0|Qi%87|P*e))&URCUE^z&_nZMz7?B;D|OZA~67Tzhdc{IC#e3}S0#?_Dz
z=U1hrP1O*cIhxxCaH)@>=tNQw33!^~K0NFS@-x(msIp0Vs2Ba~7<Vi$m$qEI@34?I
zNspe{?GAj&f$!H}@-Zrgl!4N}cq;lzqQkl$R@6>O$^9M6RJwM;hm56sYlEj)geHQ|
zOD)LJQ}%Y%${h^%efh1uRO(r!>G@UoxmSXgaW!g>iGpkQC28ztGdbq->CzUXE6hz2
z3T$`llVfMOkYVOU!pm$geS>ej+7?d=xy%yRS+>-`qDJ=qeLS6bu+VfF_o*}AZu-w&
z<SVZCIyZOLx6Qae)b|h0_0sD-sY$FzT>5fwJRYub$(Z=0rtK%+1r=K<K5j4b$rOw4
z-0P<YI6u$M?My0$p6<3B0RP!~q(*vsxv9itEA>%&#b;*%^vLxfV<d9pVN(5Gt)BBi
zW~s{wUcYkIzsyt21G$;0`rwm2P?Hfvs}Cce{yCItTlTf-<Tg3i-0>6iHosKrcZ_zY
z(F&%|tKLZEulAti?pCX7)?$ZhDC~PIJNDkx-T3r?Gr!>K8PgEey>*4L&)JDL_oM|V
zw(mG_gn}e30{C{E>QB!^cA|Fg&n;7huFu;-8O{idn1^w7UP!?h-m-{8bA@2dbuudk
zj1Wcjll5uX&Jpj*rH}*evaX@FeJ{_6+cBZEkxd<jsF7%*F^A_!fksAj5q>$q9s067
zxkq*KmL)PR*#dGS=yZAZyz1H8=gxdd-VC;I+4@WNq(9Mr+V-kpX@rO5uHF+VfBVt*
zh7iN11J9G>_?j9o8S3VzfW9O3{HC!>POef%cu8FJ@cf(Yv%5;Z0Q-_oW<%F;_C~_+
zJE@(rKlPAx`9$^(R@VnOKj>Sx+dDn|X}I$yd5_C_-qh;b#lG_s4NNATyyA?(*_vO@
za8DPQhY2#)-y4!@-H?nTi+u0bo`Syv=r#esC<4p|NC65O2f_9fEwA<ysj82l=Be6M
zcalj|AR;DI3fHK`+#bxuEUTz_ndR|hX#S3mz%w<5To^-&6<6_5a=<1NQNvsF%<zPT
zJKi4|2B2xGLvx<s#j(5j>oKqJ%gpyPuTt~GEnW+xqo49`8)J1m(AiA|Gf(bnV&pv-
zq|_JZOCM<_<XJapjQM8VE0i7(<XNbFk7+OS4Eyyi{agzMrTuoBF-^kSe#D+=?&#O2
zC9@TGvtbOIeVXF5q>12JV=%k<^Oq-)1-hnSD2BQO6`r8s<c?(%yH4>59S5>9ANNJ^
za(Iz!B|YBhtptdiCt{k{8b`w3K8|PktGi;r*C$}om+C_0FBCjt9|}tubMuYdu|@YG
zU(xThUVQG59c92OwQ9Vni&=1%yat2)aK_CKHMuwlInF1=lsJR-6kjK^`P}P`ddEu{
z@MCSc{apej#W2tQvG_DR=ty{O%vE!u(8~IKsGw(Rvj}No1%u5r>m?a&s<E^rZB2&r
z7_;Bpn+2Z2L9c{(Ck4VMd)CxxNcSN&?u{Hr`3+ue>_8G&O<s@jJ16|jj7xC=EStWs
zm_-ldPQhZHtE9pw4PLg^ePLwV4W1}{&lWA@gg#!oYm2sXl(j1`_$AR~kCnI8tT3a`
z^}EpKx8%CMO8d?|o}l@H!stT2h05DBHAjE4Xlz+LQ=Nm+bkD9@!TRmx3*VpOanqf~
z)s%e<S!}7R7ZfoZPtYj*Q5Wxy1h_8Vf_Ls*z?#WzUKrQJw~w=6p%JW~ob|^Z`x^fw
ztJ>Sq7(m4}49KfyDErx<+qjbB#%1-;Oqngu8YR({y~dB)S3>k`>5Aw}t$S3Hu622h
zngO##56G^<7=zDVQL$$6Zee6`dWK$d&re@ap3C_2?cj#aLhEt|jF)#UC#&L}mV2SC
z_J+f}{qCn3=+LP2CLN1W^W#W`?G}*K95dZcSM3ri{8(J9e=yGqQN?W#uwb1iIUfo}
z$ckGdY+{~nzD_wwUwS#uhC`$ed3YZ}{;Dw1@cn?PTfv)I^?_MK>`H?YeCyiT9fd&H
zGO5r)vcv3Ru8P%o@OdO_xLNLaXnbL!i<^V0g93NCg6;+WVyF3AtS+aysgk?19&=lz
zm9M4b-K=<6Y^H_UnWLR}yDXJ2#>r|A;wv`z*V{%0cs0T6g7<To69AeAtV3gF{%0Lp
ztO>Fopvy-0#^+D?1hPeV@SKMDaw2fQV)xyQ+_UM81@ArHl%{S8cC{(7AjSERtm}56
z0wW;};t}PGa1W=I;Pa>tnv^szy*j@uQwFZ$Ct_I_D#)%}K9_M{dG;-(#m8>3NCPc;
zfu%lX+aI1q(&$N6)#Q>Lv@qd2FZX=@LTFz3#pmkAI}lrRG|nZF`P~}qt{u75$F7TY
zRtS4v!BRfFa5{T~nO<Dc*9VGME7W@}GuS5d9iOCxOuN2P&$mAl$UGA<-fQ)JBYsiZ
zl>cyEe&!w3XZP7YrLX0gds+(;pr&R8H%WtgKb=TXIx6X_v^dCACG8~G99*Vn^aw*T
z!Y!#iJBg^gT$~M`T@5x5@Gd={p3KG+ZZ6}8c%E6?@9a);E`^En8GjAs&sdqUUrSCx
zcfiioU#a3IzmQ+9r)?g~zS>Mhd?1P>sTY&}ST07<y64ZfXqRS1yu<S#DHVtr@w|+f
z4|z$Z-X%NfV+x;HmDtlztXRGhe+akqc9xE!(wW9X)4t@pUop4VB5N&CUbjtIb<8ws
z=TPgc$O@UiUFkZw5Z|FYF+sXxR~+w`+3|gFpP7KOH(;TpRY{==*xe(izHx>QxkMuH
zL*yDLR+#i}kM>jr*h+Tzy2BqN4#{YM9k7l=d?vuADXI|pJ>8{?ups5)Zz52Z+bL9y
zk9Rw>s0@iej8oO96~pUev2>1cu;<Oa6s;(lq?`hdhY1tzHa0iN%wC?bb5BiwIg>n9
zvvccE;8{d#Qh0=+0j^vC>HvyDuT8@oUtgh2&woC)Vi%CXw3AuooJf5Kq9gb$f@fF;
z!W((2g^%0(VvxiChw<hDm4olcw17iFM}h;<&V%vunQ_MnmnimWnu|S?uCFWRT?f=H
z+i1(og%s*oBqQeTD+Co`+wiFGZDMg-W3@b#nqRxiA^JBZ7e|GnBIS>`$_ExQ@-#v*
zxDs->OX(Kf%AK0F;hdkui-IFtG3>f{10`e5`4=SxnVRPp&Tvo6oANoT?*e5Vb*WZ;
z#cyn@@0~P6HpgmXNq;P|_2buhlISd*9&ye{(3S@fH<tCFB1||>(}<}O_HD7kUW5u<
zL>>h@Xw{1K>(uzifRzho26_jEn=v0wH^4=r1IZ0>2O8=(=MS3V+nXZqviVOH@<hU_
zKIVxEzmmNev77GI;c4bRK!mURoviy!Cs#&L&Nywij9Y8EWqg~mC1i5dr0=aT5L&96
z2!&^|-oaDxvnvFf<9lM;Xui_>L5?0)SG9RS$?zEkNNpiNO@A%yH*4>%2D04O-y(OA
z7yb&-Kqf2+eErVj34s-`3@%7>Z|>(ys<W>bT(z5u$Hzom@1IR_3R?u6UXvYLvY<pO
z1cWVkIX+{*iJC1hn`g$*j)=g`bU#VM_Z!P34JW<iJ*BIA)l0+xkuei5ML3#-dka;2
z%ov(%L^@J7?$N&4@o)-RqruF*bNcvT)yLws{}iG3G)86>t^`bk$#ECD<K1jracONK
zd^oj@xLxP2(x!2@wj53KZGo`^TkP_7_Z|=bcMlBz-oVkwcrprkJ5RMLg@mnL?#w$%
zu&;;IA1m9Qd+Cy6+Z7oTe6F*8RKiN~q5dQ}qw-ub4vfe+5t6v*So=|Kvt&2*Q)BRx
z+hB{6+L-R+M~PnJwfDs2J8p&P&Mpx@nWXXC%V&VXr3y@NUb-=BBTR~YeDdy?ci)Hd
z_7^<OyON%2E@PFMGSd)w?KhcWg_45sH|5f_?$K5DE`2jNq3PX)PcC?~#!VF}LvA!K
zbVhbFsAqSE<z%+jVztxmZ{w+E0QWs0Vt$j{bRU!F$FBe2^>UK0gMEi^q*nO;xR{8Y
z36+yqy=hZqrSDtTMHx9WhuQ$YM!g2I2HWh^#)GCLIl{ym12~cpBY-9HNEqtB4dXAx
zURzZ~AlPThyO#5Ij1`vx=mV~D$ULwkxl$A>l7_cG@lqAdQu>u*<v)VE?(+~V<L3)e
zSVrrf(HN=~dOxrs*uaGHNrk?(%RNh&w^M<N+zyR#$i00E3SYYNcbHd$kFzhT<r1D|
z3Tu{w)v3ZTos5XlC@KR(_6AXLTjkl)NlvfMcf6PTaCk5cYc+|fGWJg+>^nqHiAba?
ze3M$<5iM7)H~UddY>2+rkZ!A9$Vkyu{h)L4vdPO&8;A2-)0h3prZXoI+f-^xt+6t!
zAV;bdKS$+-g)D6Blw+VMRbQ0;n&-HzA?T6cxWjC6YeTBM^yoAy3`iL5j$N=8wFjT!
z(LcLi#5#rF5FCe7(?y1@v9ALxUAXYQf}7*>2!iRzg%));FkqZ>d0-Tbpbpm-3Al)5
z-&#yod{GTdg!zO7jb<nQjRgG{{Pw|w-H<H(YCekK+Gcj5U>yfS1eH#QW_;NzOI}`P
zDt24(ayhpJ3EK>A?g1}OZYYp1SAl_rwvT;#(<M9(3+5|DkEds6F@o4LK3a{;)71Vz
zy|!xT>=c3K>&msF+o@UJP}7{bosaD$d(qx=M6Obib7TC2W@7?7{qFbN>RtoVom1#%
zbl$HAD*<w_n{AfuZ`vg_H{3-fyZ|HR%X`jhJKdEVR8D3!qCD4&z5IaI{@G`fT#A+#
z``QnR&WjnOcU$%*zdnh;c8#5v@+s7ado*X{y$QHATgocigHRn0m?+v>#M8G2@79Mn
zGtpb1&237hiRLu+JvR@ywM`Pm2_b$<x8Rr+vdYZ5$FV&$c1}-m%Hc0nV~p{af-Xdj
zYGYwM{D#0fNKYS(2XpN-Gy-w>RXpIloct&gW2UsOT2am_#bXRbr%8`H+@eIkG$Jb3
zAp~Z(sIt*w>>qT2BYgDDskF;1o@$9t^48B+O<iAbdYLiy8cKA@w{I(HgL;Kz9^L^q
zHR8vlE6lvKuV*L-jlgoXByAZFuK7Vk%F}M?U}olY=t4=#;H05S+JLqEWdm_~?~-a|
z*$BGKD>Mdh%_C;SHUEzT#l@|1<J`hW?_>McSu8f{eFQtTFb>j4r~+%-G(v~w&g~g$
zX#B=IShVK09#oyAF>v2?TPP{g0@mfYiUwNViRNSh8#bPV02L*(V7`ZK`+MbndmUO{
zD*-J6f`Uyh>jTEL-bdd9B)rG6_yzX6Z+W~I#{dr(8d;Hs*y4ZL-JQ<8KDsM>&`;2_
z)zQ`_So(^`6$cMG$uobWH3#%^ocz39O71y(Q?R@J=M7^2_JaZPmbvFnJ2VAm3H+Pj
zmBBd3P9?CqC&)5*@n66Pwofhq)qeHGXqQf4clRW!upQOJ(yYJX^Pt_5^I_YHj3mmb
zk}*M*lFoCIR9ejq8VfdjTA(<9g<_H!U0qeB)~P+i7IYrx*uH@)+}b>>3%i|KdrwNv
zKvkyGzD!Z{%0su-n*&O29`^W~Y)917SAETj-06fh?b<I$skvW#S6it!>rZVC?mO-}
zuL`_cTx@bQGkT9sV;S^Tz{#@kdh?Z}#||Dw#RS7i6f1>F?F=zh=+L~mw@9YuSRl)&
z=JrX~a?NSL#&gv>`2;7J-vYL>E5lZf?oW>!)>l2NSU488qn-|!H7qkSxCrtsR@(mZ
zbyDQVCh$W_t+LboVYOjEDdMS?{v&z<X6>QRAtf{0`5P5g77u62gTo1V*R6+i^F|yd
zU4SY|#7TM+JQnsOu`-HSXl0ddqi^fmLkxuf<-;5pOwo($)!)Abuvfa(L%z!~K=)2J
zX{|ac=fjm!r7D9H4Mx!01U0K&SzLV~Be}|}$IPTH?_dB=$cqPHO7n^)v*Ep@p^cyZ
z^mI{_R`rzp1qG`u+t>ct4p|Q2^}h04?&E<LTha6^;HynL^?)6<$-f#F+^_AcYFRE{
zbZk=qe)3DOvCHSgz<;}}#CE>kLhwk0=b<qzm@42%Wyy7zO?<WFLx%mu7=uYrg5Pn4
zQPnd=fv?hG@V%g$i(F!at&`KN#dCw^01Pu0G*4tbixSPu?GJVUFVzK7Kn+3nUqdJr
zYgK=r(RQP>*Kt<(`Xn*YF0q-+;CP~IGF13fb!t)XPO>Imk1k?v$2%Y(-m&W&&DHQ$
zXMT^XYS0hfyEZdBFUV?{v0b2dkB;m=?0PL%RCBX<d~I8)R9iU$es8GhDdyhj)=4`d
zUCo(&%aV*^->@c3Oyy$qEyiBZBkGHh*(t5)ulsbkv+ev<J^g+G4i4|HS0jy<UM}NQ
z94EM4Yg%Rbhc>+%np<Mn2X-X_`=3bd_DoEobE<JWt{SwyE)y>K{$L^6{$X@pZ@J@D
z;I)_T+Vb&z@b}jzi|21{0`-)twF~|EE9p*Fl-w!>LNPE+HFs(3cUdn#JZrw(k3Bwr
zL;YQ|yiVh8`=)uv(S}S#b=kab?CnO|H?B+GSI53bIfBRMg(tHvGVD<1duTlv<Sf*!
zR+6|PX?m^+flEf1<&UtPK55*|G3*eZ{pkPPcJXvZrAFv++;eu7|A(-*jEXwo`b9xO
zT0%;i0i;1dKtQ@dx?AaxlCGg!x|EcX?vfljM7pHAhR&g8xPP8|?mFi=?}y7;EEdcM
zW(}LYf3^3RY2-)oIp8k)rGYPo?PlseXT{dUj|^WgO0KZ<7~~KJBT3O(dvJdrwVCSt
zi8%j9hnW(kUt2A`Yj|UG<nxdb959e-)%z5u{&bJ3U7=6(<q){?)D9VHgZr$WvHz%^
zcdo1P4)>p1cAZkXyB+hV(xh8Rf!{d}=D5x3r3<%u8#o^Qxw=?^;+@VCuilP&xIV&R
zCzBXWjg8O|N3e@3s)d0N2&sns_3R19lkAqpcK=`7NkdQWKy3{AF5tSgDt-Di@_cgP
z{xWCv!N27&12T<)c9iRAe9bY_@K=*9MYC7`Q^--%qn)kYWs;raWKrcqwz2<$jo@RD
z$3d)t<1~)wBlWV^*ekNXGHz?Neco5{1I#4$({qq(Kcn+l{=JIbjuL{Pe>+6q(ivc#
zJx+U{FLtg!XeUildaP8y{I?*k)AEc5Tbm}OvIyVc<CcS$%V%pZMzVPg7_&Tsl>HBy
ziN`%ZnjpG&uV(oviafGh(v@PZQYgtZoePL$ya!n{E)SmPJW|8AX3^Y+=Bp;r9`~uI
zoz_<WUGX`H9470&Z5?oghf;N{%eL%J47knZs}y%siVsjY1?ZOxN^lc3@x4*Ai^Q*;
zCFX*kbqrh%FCI_XT$4=s!?Lk>%~rDYZ~xi1AkrWc=~vJ7-PgD&-S=|6HxkgULRm#}
zlU}A5y^8xFr-w!R?c0VN66h2w%w;P@fy(sqpi6Zz?l<LqWYOFnbalDtm9mfyW5*r+
zmHUUvZ581>EAM>4!@+#FUi<;3xz!T8$K8Xw2^gd*7`7}qK+)znjsQ7UaGuZSHFOQy
zI5FjmW3@kAMGj0iml&XNE^CBS`i8{%&kbnu=ldyOvyub?t7dd-$PwYx;P>x;t7!Y+
zna-B$y>j7p*95jI!oW^WZ@;61*O2corbw6Dg!@}pt~l8BxCK~<aImrWSWRyKTvU$s
zkQHTq{c|x}XKIU8u3IBv@_08FtW9F(T(}}~^zQzVz!=BWj{g~+fyU?M<EMO}2ej7l
z|LjBGKR#t3r>vbgfSI+3^5>fTJec)Zon<Ol2;o~a+H#{n>AXgDw-LTlqHC1z76B|(
zeB^a=yPJJPNIc%AP(!D35F}aND?(S1SYs3UxGN=!qV7MA5yOsGLn{6{a2sY~j)Nus
zte<m_%lDV_W4`hyo>N?c+c=D@juotpU?2COhk3or$<trN;OajFDiykgFuxm7x9eMy
z{ebH>#F5ELRg=l7a>JNG0oLk0{<1gBTMz$vySYtk$HUPHYhrp)Q<hKT%N565#8uBO
zt6dTiRmk8ypd95&Xy?GM<F0P0AI0Z<k0r94mJ*`a1tlVPN_fSMYu%|~Mvq2rEB>w7
zy3P8KMlJ^%+o=g{ht?Xt!Vpv%&{=guSHyvbzn@go(nT>x$Kfl%?Zb<PhapC{v5M8H
z_3(C02>fcybwU<goQX3-6-~UCrzn~yi7TX#(|p<PJ%1PxE9fa|C!JVz*-pwkDBjtH
z=H?k8E932g-pv;wlMg+FPLClT>PP(^8K+kaCsTBM#T<nmKW6A==3}j1&@SH&1}J-9
z)wCSenal;DMqdsd@$XGyt>oYGq`N{f!ddLJs4<BH2KDhwX|mL2N4L9(RIK}2tS-~@
zU(N(IU%37gAhDTULHi~sMEn#MrF=z789?e)q$5g(A^DD<KdziAO%_;64E2f*E;oS~
z>lk|#0=T)p@2<vkV>SH5b3n-Wlz($z<Nab?-2d9w9$UPOmwY*~xQe*mt+48wCc3%E
zc`QFMIIUN$ZnQG<^_eL%F60?~zv<<}fOPhOK>N`0siE<_ZT+v!ZFxGNp-p0=G6L&|
zts0%r@qTD|uqGVLeuBvuIqh5V+9^kiT#nXNP)o$*%~my4)~I=ioPHm@EmGMNt-L8v
z7TEQLUz3<j{jlm#B!OQH-R<JS!;f#^DsG6|$Gnv<QbX2y4Ta?$r=hr|N1ZO0M^(OR
zX>IqeBVTM9As^TsHowaJ>Oa~}kj|iJGQrcB&^AQ;;M^OZ%PdM#(J$pu`Jgb=Qe1gA
z^jK%V={?ZAyU+LtD<&gLQXro6hL@%8^E|plr;2vS>}I)CjtU&<wjZ!p%>}?Mz+6_q
z&WNN``O$#Z975lubq990-6UG}<C?s!CX`dB&Bit*hhxX3Wpx3tcMct{F0b_Lq770M
zc=w&|ai&@{6^0hR+u9|1+xmrfxGYm&p83Q1;UgK3;(mT`@8NyMgWqW~SAqWUU&psc
zDz38v)RX=7F;(a3%b)Dk!QK@F?9rDa!=lAzFdI!t$zX-;gtb4X@4ZcMOfIQj_cSFG
z0<rn$6dc=bo6ETST92NgvEE*-qrNjWd>x<3SE+{x$h^n&cK7_jXVvOl`%C-~ZEE-u
zY<m2iBn*zQYPku*a@`7ycDqE5<{h_US7y6;`-zC={5tJ2u0pSJhSErIGsLXITR!-u
z(7i;%QG@H&JI|-spS$iSAWAeLR8m*HCP$h#tIu<EOb&o91J7Z&Re8!Rk&a<54msbK
z+isU^US3|C_3qGf^~a9GlY^6!G=K0zhXBe=Caj^U>7W~nv)<k8YRt>xA%`G<)c<10
zv$rS*tpA8Oc|_#d8xynX;%WBS*w`dIHdT!w{?5<Om&j6i^&-BcF76bzBd)6E>`d+#
zcH5PaHoWM||BXDkE0&+!0Y&zI%XdjKKt!wHHKsBO@YKr!lyt3hR`aEPDcam)-H9UZ
zWTYi6C~qc%2`fr;mK3;2DxUSWiaIr4>(xR;uA4d0l9tjQHtnvq%fMy9u$)|;vG>YN
zi2bTNc#e*qQ0Q;lJZZ}5M4*41l)wzV^1=R#U!{GhrZ5I5OpznhUTtM?elb^A(*CA@
z$w<}t8+N_udI3MUM8qM=5O@AMdrDURQoK0K@TtYvnyBY$Mz=E=4K~%~a`Xj~3(@-H
znzKHLqeXr1ErFKpUnU1h)a|;f@Fj-ysfC|iD<a!3(6+h)X3A!ZUEbzzns~KEx$6(L
z8|Pa49qiPlV`3R2Zv-B6lvReG)MMhHF2hfg{w(%!qzh<V@nT@TppSW5aAFMep@cU%
zPK){<@>r5hG>EqATj`U3lZ4q#ERKn&@xu`uaOiA`Ha>l2i>`cllcn3_fk}}I$78bt
zd?d#E@UF_{v3<9!ejDjUNSD;u>2C+FwrksI{jzesRzpdb*l7V0UtO3Xj4R9exX9i&
z$$M3ls!Z;E>6q_6KeX{oNv2TeBxO!I2cDgp?G#(S7G8P3;=iw$1213kf<`Jxn~_x$
z(8GbYsHYgak_%=yR8l17P!%AYTlarNZeaW8!-CB^2k3UM=ud&yd!lIjRp1J!=Q%#t
zJ=HQL|C=xF;m}#w{;CB~C3CK0!muxX&kcM68qx%>|Cu#BBJNo!t{qEuS3l@F4YN1x
z{mO7q7jaBU3Uj>J8A(#P^Nz6OUIG$dVQSz1xtwZq=G;veHR>JFfA*IVz1z#biqdHV
z-8e4Kj?VVrdMvx8RW|RW(-3lbXH2PxW)YL-i|b~q0u7V#|2|0Y9&ipw|KIxzuUO-a
zU_VX$%92M&W+3i`-0kgvea-wC7{wXsZd24J<4yjj{&&Y?;F5(|Ju;|48IOv9c+=xH
zhP0XU{YYgwNV`!W<r}K_GsnQQU%`^;%fxf!74{NSL9g8A9IIyWhj$j-hblfM++W3|
zlTkNVUu@nTIfC<rW4)uV7wi%`?)ICYuX5V;OIpb6d_F<;b2#;)vF)ZlUts_6)vFR<
z%7t55xb?m!f$s5C#gow7{2@UoZdb})jn)|#A(Yx@U*?;Heq302r5)WMgRW;yX9mgC
zZoNbaebxHN?>^vGZ{NMMo&hfBZF*EdbunuGrP2Oe(zc{ZEBG~^9z!@<wsA?gPr)Oi
zYb?3A0@skkcT5y&uzHhf%J)majuk&LRLky&`va3HCC_DJ&+vi^I77MhK?QSebRuT;
zp`MKUfUpUIy}H5oAvNEB(aqcw&ZYUcq?K^;vm-ot=dZ)`oQT^m5rpHM{&0#u`6{iQ
zg_`#JY}H-~fo4-(e-9@aN1r*N`mJwOx>}KWdD_%lQzY#M&s9VVbg0@O-ri{JNC`Ol
zpKiSBn|KZSqJI-%mdtUT+&P`zE^j<|K5g3{26V=v(8!#)7qIlQmGQkx1&Xd;{UQ{0
zbzt(SFM2;e*4UDuf&$rQcdS|4T{rOavt#9VSRzGX(XKRntr_ik;<HNru=6n6m=)pn
zv_|H4PBHbkblt}ZR>Kv(9M@K{Jzi=SZzX<oT)bYI+^?@}fwI7_s{9+E4z%s_5{(1Y
z{ttYsK!)6Y^0eE50KkO&U9|@Pg$Z4sFyV5%lLUYXTT#xJS(6QJ=V*Gz+igQ9g)=m#
zmP!jyX`uR6dr)eGZfQnglkvlkPtQK^|JL4ZM|dtj>@ud*USm)hpRT%KFPd2Iv?WRu
zl;dXWmuZ3u%vKSU?7G*2ZWUfqSGT-;;>M7a$uT;OjUJu%5AO&u%i@pKtT^)YqE$3M
zq)zdRTxt6~)QL7=BJ;B78idAEjxDkh9tlhSs9kaU+D<&iVLg`5InKIrBkxmFt~H!9
ziDLpWw92|;nfG5x**~d6l6n(iI6anWpCyv`N1rt&?74Dn^gm%pVQXu@gU@v<^w_|4
zRRv;^Mm$mKmbG9`8<-j<$m@la$5kl$;ie$=!-25(@@p$pcKVI8@1vryn7j2ju&H>6
z+NPZ|!Egr3=KVg8-OQwJJ{`wR44Eb8MA!f#Z<`-1Tl-d$=}XNkm2B*|&Dn0;F0Vyh
z&$1}gf$Wk{P9gCcCrHOtNz-1>qj$S4nH}qP>XB!k`cS`ML0A1{<dmZKaPw~QRY=uh
z4d%Ig5oGCWe#dzY44O>$Qk%m-byant`@^+CgZslgPkM6wLFBuU$+8unA6kSzOp()$
zZjq{iQ0})Moue;kWRz(f0$UT_O1ZdP3_`QO=G~S>`|f)&B3?d23~5XmBO)h$#>bDr
z)DLTX{?8F!j-(CUFc0|E+yQTuSB!1>#;opASXfxl$(WISJ{J`-`r}1llftRps*#p@
zf46J-wHllL_&@zz&y=`g)Nsa&qb@XRY=CbF$yPaiMcnS5oPJL^9CKNHM8Fz$vwdEq
z&^0!mB)FNq4j?V_XOtPWzclMYPzb$!`_p`K;dI`w+`(b{{z`!xu}X>?<FwfRG@y-5
zuK(*;N|G!vptoLQjXn+NI<Xpv<nuVVagCg2`@x)Tu}?lKjec^i&l1Zs?CUR@p8X)+
zLmxvtz6j~_mWOu#GETpXH#5_W@4jQ99x?j%dv)p)wLyRWM%<3XK$RHXZoG8LEJhVI
z|6VDQpXmHPOxmPMBW=bROLW{Wd9*O$n5y_X44zFl4Me5szMF~@EpN(stkN!_Ekw@P
zd?{%A4@g-UOdj^fbNG9-M$L<}`;9>CR(r;3<O71vCH<hc!(%gRNznPW+ULNKvIx2;
z&Js|>xL4ehDAl{VZ=W1Bg~CzI243OrHJ&_#gZM=31o=u95$ElFz$Xw4Zs2vs(QA$9
z8EcihfHffnqDnq+Izett(hepSMSr#2eZQ-ty^p?A$jhyQlxw_<JOHkaPXFB5>%0J$
zSbq)sGcO|ib;Q54$}SkyCL1T=+e^_Kyf`X*$FYR!Pu&Q|-(rzrucM?DTi}c&&^8ZW
zwFJ#c5gp=qrm*tuC?JGB-JM$9;VYhh?Xw+fD|lm?f+b+roTxhR3bv=CV{921`ywOr
z4;rwK5{TbelR2|s-IZBQ23yh@fLuskPt+xXmH@#tFpKct3{vl2&mH}qTr_sh+QJV2
z4hrQrZk{yX?qs-K&FF}p#2|K)u{eIySbLqdkqmqe^&j9c=`ef}d40QET3dZw3~+GK
z8yg#K`@g*w-`n}U8H<(ecu?<a0=Zv4;e#CJ#+f{9kYwb<v9ak^i^)<r_YO{t#2Ldk
z`Xng8*i}qU2Ng}W%Pnr_ETmMJrx|E`ZT5e~(I^S)HLdIMjvF1CmfbVBuXj^+SK49*
zfvZ$Gt=`eQi{2;ES^hdYX~&R91pD>2$^(znU#@|FIl(!PyI792>+Bl7zS>pBlpn2I
z10e%dRTUNNq)CN}Y0zy>|64xB<|el<qKIMRYi<DN-fl#%_)5S>g-({B?%@<)Bgn|e
z_#oG-kMLE4c4O-NIPhhDYrFms@L$}2z8X0~nos=U`x?9OaqEeQFn}hyzQ?v5BJ=Yb
z)|yAY6gsS4n;7u+af}m1cvd?;dh|XnpW2;e_&54OE_TOouYJ}6(Ow|09W8S%+W-F@
zZThDi_|-uSj=NGI$6S?tbx@8fqk;#Pn|CboM(SQ9OD=blcHZHZP8_)=H&GMz9hmWk
z=~<QW+PoTRU>2_JFi)D9WKEsXy$ZNha6DA~GD_}xT9Shs^rFjT<LW~}gi^AB%5$N*
z361r9W!Fn+Eqn*^*#3E#J2amc(?E=_X&<@$guO}&26bC-`K;hkj%nlPp?9&6=e<Zy
zVl960GfV;NDyqq-LaKBo)^tAt;fCoUl2;DbHU~R(>VLx4#RKKXA62=_WM~mEF>_f(
zCPu$}?FQ1Ya{lR(1%_>_l#Q?EyDhgvUpoX&nA^XF+Ew^PY!fZu3Q8!d+=hSBeP|jH
z)Df+0f*-NYXc|_j8Y#dkOTL{rqZM8TLUM{8ekn6tdsPu<Ih82f8lIBdmVrG|W<{J@
zwbDHsab&hR!NXnF2KMM!JlMF^!i48~BMT>QkKlh?g2y6sR+(HMhx%cf_WFy3?ZmTt
zjVTsFyNTD|DeF{6*eI(DjAFw5#2e~x>-~s>-6>fe;gQ*QfTQ=?6vEE`eIlSiW@tW~
z%QS^)AsrfwNe~_97h`-E2FVZ%{*wZvi$l=ASs<BSqTUqbh0{KC&_Q00hKyMEE!Q3T
zgKuvJL@Q%sV|OXn3X+s3_lt56ZC9H$rhQRFcU`z(n#Ye0V<VzE15`fc$|AR070Sl<
zy_JvJkE1Ihw?it>Q2jPfytQ<@%84)>a^p)p#BRJKuCS(6mRo8=je@Y_y`$fOfkD>b
zs$EsP>scR(sN;PCk@3vNq$20?hnf$yE7boXX{ZL@4FTjU-Vi%+a%SO(x}Fm^(bT4u
z3*40h6D_q%bY3s{iWX(Lr>C+TT(^z1t4HY2oT>hCaTGd#-L@V^ehCN;56!LU&j@u4
zo%?q1!c{u_x9F(nOOx(fE{;2nJ|dZxKW2Fz^LnoVh#%&E^>p$VR#+hd^QT@xTsNV0
zg;qGcZJT_~A^Nb6+cfX6)qHaG^L*Yahw?$_d}+?J<Kk)L{IB~s|DU@P2qgd#cSf6i
z^G_Lm^yG?^&NWGX<}d3ZRQJ*Qxk}3l^NvY{>H5jVWjgfP^{3);eNw>^_QQlx1|=KT
zdUN0lv%4$)s%d;q9GmN<7mIwk0?}kM%gype<hy%=O>i-s3ZF8~C%U@jF}EB=e8_(d
zN@>J2$UNU$3x?o*Oit5$$*AREWSfhTqsgg9N>_;nepG^wS)9z!D!SONw(7MvC)+NP
z5jJ!aWQ~Qmo!UGWUNbNjTN6D?KGrNga89|f+2+yPK5AO6eGb=70NK5Itob=3+x6!3
z04A(o(<t2ZzOdxHAf9q^#N@8v#cZXftRtia?Zu4w_OFZsyXj9bxo%qq-Es4iO_jMk
zI%D#OP>**6vlVkjg(k*cxyH_&KP~^-sFsTq-umzXVc)synw*z{_dZb!2JE8h)njrJ
ztPULtWhc$jTxFwN1Wsq}q#2TUeEkfZyK7YoH>n?xoY$Ne4nmrAE$|h`fD1QLQn-(Z
z$2u4#(pN1vm=$#Ndf9wx@dW|FGuq^FpM=<eHMAggLa7_V2ZPh+;?ioW`{)Yz%t7dr
z(Re8PayWQ$z=wqQ;>hg${-ewBU$(lsx}jfR{yKp9e|ViNdz|>4WUXfW-GYw_@9Hnz
zM@MscNnp|qTuZ)x-5Vgzz*I>Z(0O_>?th<DvL&`i6x;3!#rn>*4Nhd1OU;E#YiNWa
zb%jWFo=8H@xupbJU8^)kyY`lG-3J=^B|GunqRf&6W`o4GvQ@N+OqGVVzW6BqGf&uS
z-oD(Qat6SahhTuEg^Aa83Z><UhwZc^k%B2}S9TU{2S>Qtxn?S*y5b<auynw<fCxZ4
zRnPs5qD7wXW_e_5R1Y5AulSs-ry4j6ReU`FDI5A6H5lpRw>_K>$G)2^p<^v5a2gfZ
zC0y8sf?=(zp8*Rr>zdl{a^n5Yce90q6pA!&3EJ+DKKZ=maz>lqct-c8H*&+Nx|5kT
z1ZNb5cbXvZBmE;LLNsQ6rul4>SmA433a_n%qnQ>6W}o6L5y<pQRBa_nME1?cE#o5e
z55Sl-Xf>5T?%=H$Uf3pIy$RE}VVYJB`B_%gL572a6Y5@7bKLnHw|9s!r>&o_vF;xI
zAIt_;Q=1wVK>G=u^x6OZGTw^+_L<a4Y))1?@JRWqXUz3~eNjui|6H6S8xBWVpeNqY
zkblcNSGXxb%0+47o@Op(`Dsgt2bHx8WcnrILjFssnTR2<kcssyF9O#z81CNrp5^)U
zx0UA@qd{hp1o+xr8lusWcD00Gw?C!eru~r=<jfYat0?-8=W*oucQRKlC1%UL#rf@C
z*WWaUe%Ud^kKQoUh=OP6XTGdxDxD#c9KAm)V4t}&>$dcXyJWA>?u_D3@m$;{u#qK(
zJd8A)r5UI#f2lSPC!D67F5H>RZ!`#1^>o8ld!easwaXo(q~+1o1B%O;X!mK5aM?M0
z>4m3{-3Y@}L_&JQxNjn0<&Pg?<FZ=_7={Fxm@jBF4Wse`eSTiA<>Y_q)Rm<_BN%AB
zW4O7Q$iTBHrQ_<_H7%`XSpg?n)o0V((ssT6^)M{)4CP4vnFa5^>*6|9uHUIJObk|I
zQR<BWuHC{_vpW|UC|>ua%1;!np8kur(cVr<!~nhy!MD{!7$UT}N>qF?mUQ5m={jk8
zdXF+Ph**V2?wORAJePX%@ArofiW3m`wwGV}fcnM`yps8(fk#uz$S82d_Bt;;>SJgW
z!xzllTIYk7^jk<{$ZfxHG^fn{fG8pm!2QS3QCGT23!Qx=CQIV>1x4t1O)K7Ibpg6@
zQ?5qlWwfE8OJf0q_~4r!>c&OCtynnZ@g5Q{EtdPW2Z!HPVAwd7cFxd63GHL8*`R|Y
zhS%q06OQ)FNq6p{F#0-|0pWx4I>C|SwDw5N*O*y7z-)_czg}SVh)_PL)f&IrC1Kc;
z-b!FlX*6`3(Ym>uQmM;08lF-X!U2K<9{27lmE~B-c|{_x<_})kZ0(9Z3bd5%Bpjs~
zVVd<RKW6U|_nnhKZls$u)xO?uS9&mBHy_!z+o2rZ*V}#h68C?V@h9|4c9d^O6HOa7
zI%YtD+lkZEdJ5|Av`O1VFp;IQg+PAy;?qbFY0-;?tXU;4N?xI++5FNHFD(e0MVDM>
zt&lO;RA)2!kb|*jsX2=+wf(c^6is4_QuT-yKaf!!R|RX^G^J2`h(WBtP7pGM$P<pP
zyh;?8OMRK|jWX7?X_2@js~EjqZ1V8h3LdVeW)uwV%3r@gi?=pJ;)Hp*`cg*YlD_iQ
zrLx1KTbPzZjj+sC_=_(TrLfmZRVp?!Dmz6GYzCX)-ZY6@Tb4bMrYA14kQ0u&{RwF)
zCj_1}ArTrzSsV*BeMYZYF{#Kbv-l->17*~Ejd!!Ndu&{JhT7NEA+=qb=w&(fo7kb@
zAwQ(Q3v4^ov*pM>c;!SKb>{ii=8h}Yaa;J~$MFzju=qGZe9k=k;NhkR&sAi$tGUXP
zjbsEnCQ?y#+pVd(@kL9+9fQxIh=_?6^Q)jAx;LXPy1b5pafQLRnRk*QQW3vo@M%C1
z8dtdy+U$Mw9-7!>VRYadI~2t~Zu%L1KLlKMEd68MgTgvfqr}Y2@-Hk`r{}7+3KFfn
znQ1fGQ>%wS6E4G$hi%TAF@MC=K2l<1&Ihk4eJkDz*zl8~&%tnm_L3rk%dG$RNk0**
z_FCPT$N{&F&%e*%0>hz)p;su#8=)k|olhk9kXDebP>Sp8mfZC8^zVZoqW<8tx`U@K
zY3S62`s3u`@-6?WFOSI0TJTFV+s&WBFT3R#v!+Xo>0czgnN99RtiU>S#)CF`a7A59
zU)}~om;B)eCQUkz_p6WYa|UuhBtzaXGwt!PvBrjCkw|c{XkNb7>28m*{n9LriE`3*
zq3n=i0ML#;X%eI95|O4275}?e1*Y*PQr37iv`vF=3V;Yy)1QiH8c<)Pl3I&mz~0c9
z)U{yi9lsbv91WN1aARR|GHAZeN^)1D7)T4azkhtV5IXb*rk3-Zk%wFHumjWe9b5DV
zT5bi}?UxPgoSXyOX(lU$P<i(c29=b^_aa6@GPB)JO#=Bpv+#d?xqI<UCSZ@;xxVbF
zeK>%CdJMaR<%EX!2Hf>w6~9=M#Sk8nOaX}{zke2zCht<T(@D=Oj5TQ<LSywUwA3bA
z?N11QB>vJi8)u#`5~*Vt<LsYCE?NCG1Hpr=k@(%53_&ZHjZvR{QCwQ0n+(2HmpVSp
z_UG>GA@>p-&tl?)sBnBo1JwG;pgBDU)le}76teK4Q<NdRnptfY!gn+alYdG{Uu}Fu
zTp;^?8YfM5sB^sY^t<%iFNd8~WmLLGQDEtmgTzCx@je!7r6%mDD?CFPdInxl@#Ox4
zT`smAKd~n}6Y^($Q`Jx}7|HLqv~v7cNf4P#!Dj~Oj$a57&#H8r8}BB*>(?dY{*Mzb
zTWF;Ur<^@|Zue3F5lydX)IU%ys^|8|_C+E#-6gMzF}CtAcbf^5KH|F$#d;dBE~IPc
z+3XvZXY%00DDJczoSsu@O@#afPW>(DgRE&@zxha@@{Nm=_OmQ~M1}h*iBFC@vOyGE
z%`FMTLNY~->C>zgqeZ!cotz{(C=`fD8U!+C`_^jInK2FfyT-El7roG)ut#Z0$EgZ&
zVShDd$ExtPs){m*p#0UFk9$t&4Cg>~jb58KE>M7P);Z2h)YK+&D-!>uQ<^Z@RDyxp
zF!I^Zl)o>^_AYIQ#A?XdnC^||{sUq#3yT&y^aD8=6gokVQLL4FQt!u|XS8SWn~(A*
zis{}hxr_<NcT0j3*h3C!YYWS^YD7rVwQ@{W{9s0MF{VlutA4P)ISArPS&7PX4fz95
zk6BPa>Qv2i>c*gi7Aa+f2_64_Uhyze0wTxNqltK+Sxo+dzY;YJhpn2twK29nY<Afd
zYzR9fZ64-bj;qzdE6I)bmZ}U2?N>a7C277pm#0u4WGbLZ@Oeq@(%y=KPFeS#VZbbf
zK4GP#%?+a5CSJB`S_S(E&EB;|B-a5X$+ebwKT4N&F-<<{&GyUazG#xxF}qn7$=-0_
zx30FIi^3=c7i5~AAWc(lZP@>YIsXgvj1NCO#EJVetK$jnkUwK4AcC%X#fPB&{5)?u
zTI?t(PlSP&8A!;)L5Cb9f3Aul|MIV;i_9ZQ^A@&RmzMdfzw>Z?OXJ(3sTKA`#-czu
ztWxca>t(|P_Ar*ZtCEj&4QO?1m3!;8jXX!clhwr~pt$TKnq}5b3V6&SYd8}K5FYkV
z^Ne<Uih89MA8Nn2cl>MnWgHSbM@p%a&*&r+<H5C^G{|}7nwZqUsCwA?R&c};()yNQ
zqHlQK3OVspCJtsKwuBKTS&b9cVtm^g?4n~(WO}SOq{5eiwKE)Uyu#UnLzu`kgzLPZ
zvDejtRR?W|9*`GoO{STVRq$e4_<E`m)%d!WCo%ygL7`s&#V)Jwh0xcW=r&CTxd3Yi
z5OUrRa}48*ay}Moe|(yI(>RUM{(tSbD%8a!ZRE&#Bq&456L|kV;>n$@w(zfdV=1Px
z?K{Z;O$KS;g*{UZ+kM~zh#~Blo+<}?XY&C-(zna4?S7jv{1Q;)+iigIg&HSzj;W;X
zG|s?|uI5bQUh`OPX}7vDxXZ>-EteP*fi~b<jH3JXDy1aq5M6`j?NozP0DZgJx<8x^
z2zAR8QU1VWxOE#zSIaSYM{bO<`(*+_4d0VJiro3qo(dpoN1+nNh~(3q496Y5gL-2<
zz5TnWf&>Gp;=#vnHjq>N8d^xiC8!UTSt`?O=f@F!(u4a#Dl{pA>2@nbA`02I$}Xu^
z7My?@b{s0PokOqiB>QB!$B^>_vRxOh;IyKRm^;p`v;tb1k-Hw)EzZ6Q3mN1?Abj>i
z)lf=qkTK*C(8b=vmR#z>kE?y}kD8X--A}vFB%usODH2;O2|=2i+w~85KBpb`$1YMo
zm)#dDei|u)sTYq$o|?6Y_Uz>U=;Pk}PY*4h)z$F>ecVlkMjADub<OTNw+2k4uU#p|
zWyMdV1CvzqLM3`0wU%!hl(-(7vX+f=5L0#7LPgqS)nH_?!}k5x@#$N=d)=Z#HwVAQ
zsxp#XT90q8X|9Zwt$AFAo0;|%rONle*Mb%21$%om*?!(hem~#ldNW-}p=PKDoIw#~
z@%TW1h!ThXD;j3?FplwZgv5r;@|9a#OIX-&*}nx&%UP&72b5xgF-28TC8{r!Fp!!!
z8gM%(mIDf&YeBop!?&I>3l(p@!Kys~6Hq@Ou#tmmT!~4)$+D%s5&Io0;D}k6=*7(J
z{ku?(;K#*y@Y>&+#1Cj5Xf?ri^m4@!4Sf^i<59m-tLeldTxp+$L<ogv`7^(8X!jdU
z;5*Tx6Z^7qR#V4=!Y7MjK2l>n0b(rU#Bc|G+{Q$t&}(~H8G&&tyQ2E67Z3&&i$L+B
zm5pZfFBL%k_7*@4==UA8Oo%t>Dv%8iGX;lM>>V$!z}J9jl&?T;%@KG0V|m4(g2W&6
zW@!k!IX^9G@|R}7n>zzImO1}o8i>-m->;D=lKnoqoJF#+W1KsOFz+>t#Mtw5(J!L}
zhFTnp2HL*xL&v-?ez}FF`J~&aP$)FW7T1VbZ%+hI0HmWOxykIzDbZ7^r71tm8k+n9
zFxJ=Dh|bgV8r_fh$Z!4l%v;BIm2EL=U+8J<M~?MA;d%^F_{&u9uu&Vo=tIr|^F$M6
z;VaEUpljaFG%oj`lOpGZBR8(&{1+$yu)(J~@lJHS3?-&Rsi*HWXvgcf=<1dHiNqJE
zr#Um@=<VMq++C@#G9)``i)=gki7%*{Gx$=9cC|M!7Nt<Aq<v|xT__)#Wi`t(^1!J(
z;#poGfolFN_7{X_t?W1QxH%Zjygm<Uyge1hkBLW`h&qLOOQn<B<lsp&A5pW&1)!(B
zl<2!g<7w)+Mv=G+XovZoUBcdO@2sBQZGMON7S@FqmoRytM5vdFp-2V%#0eXGUintp
z+lf;WOXU~GJ&h=(#PQIl?4x|8xp2t>BAWMa?iC`%89us&F=1eVxVA{HW;~%el>7#1
z_GR8P``FUO@e)$p=~8wsC}kP?;}o$pe{P6TgNm76em-?iavIkYl?osxZ!ZL1uqLTL
zqf>Y{Cm<RvBzXt~D2l8^7ny*6o;A0CUbY><a7$Mi`8|HoT@nLNT{!-(D?JMRtvaP@
zt#LsxH==(+(L9hKQO7OE&?&I|r(i0l-@f8|Aonb!ZP~~df^=5p568k4x%pJ&-0H#(
zr6-7!L%T)6)RR910PfKyF-XC>Xb=}9ZXT^k{Nz+0{xZ;3TmP$q%F0Z&l}Z=;{@DPf
zhoMhON0NnByotG}(;w!dEgg>q;#-Mp)To$BR;dHtJ{jT{&tG6WLA*jz-VSrBAFJLk
z<(+XfZzU?{cr_$YhL`hv9R@5(!|@ggC}EljxLFA7;KOXURVHB#IVI>a)kwKw5HlZh
zGy}gW*x_=6P9KgRDK3kuOC=Nz7pvt9ex6^cj!pq;8yP_At60Y=g5iYp1t@u&y8B*F
zH0*+O5&yq|=u?$lh&|PuEX5()(|4~x@d|J7jBoIFI_?O6`Jak3QVJ8yWX=<o7E8qA
z+DU^?&&0o25us-naBp~9TrBKkd)*xxwb#xr<k-jW=WFs|ko;|Vu4(JUN78KnPU2Yi
zXqks~zEPdon)8Pr#+w0~nfSHfM{C6-I<a1x(20emkg+s2*{f6g>Zuy5PMw9Sb}JKO
z`8OLkH+@BCe<Wd_j)QLL8E&|~e;w1R?P9{nEe>J96DOc4UWgAh>_vk+`x{x1ElNm5
zusL@n(EjUFNs0N?8GW8d6J=dPJ1R*x!<gQ!ChMfScln3v0PFBIf7sNfd=lm4(eyvK
zl832T0yRPXw44-ywJo+8?-6Hr0+VU^D-6qjvt~|P0*?dl;}E8M#?_W65yp7*Lei3J
zkcfbSy>RT;8=A;$pQkPYe*-Sf8DR9e3dW<OKA}U+9Fv+{6!Z~pY7t*gM0G61DIoi<
zvjc(e4E`~{svZ7GSS>-Fph}i3ST8B7FAR@HigesV4?Lu@vwJeO94iINs@&hpkL%|e
zpqN@I@93baWg1F+QzvwubcOrj6e-&uaeL^{^kFMrlA?JHXmf|EIaS=_GY!7L-`pg>
zy{kJEYnjXKWNXpO9G3|cVoGP)3rKBsGe?Sgj(c_4CM}@vgdkqml(t8x4g~YFYVqC*
zvCW&NJ>!=BUm2OD(hhzq6;-&%5+OeTVQcWKR4P9x$5l(}9f6w7;lG-A;r`CR=dHF2
z#+=dw_$98?9$HdhQep3Uave;TTEij4i<8p0nJVgM*M2SF-+G+?C++!9?d|zJwLe(j
z-_d`-Jmq`w>@S}vqO<+?c@*m@BwV>y+~*M8QJPo6V*4~aiW0e7RtQ^G_fz7cML!S5
z`DIJ#QtV%mhR;LV7IiE7mi9RB4X8h+PGtmn+5KU#TC}EUuRluN&s}Oo$DQ{pbpqfk
z{e_eI&{q+3B?WjOu5%BLo3-5+G5jRxScd@4obZDnNBaXNg@?rYkGNw}zf*Q`g5C@j
z(FkS_qv+H|raPU>0i;n0wxVZJ&dv#SU3eJJzGkjn6{S$i1&)U`Hvbjz9O0PqnLM!x
zeGxQ9@H0zBtuu}#Hsg)hxMg7|O2jPsD}Hrvxwt|R$^imoQ2XjKCU%LULv_0x?tCKs
z1g-K_xUK>ARhfZYrFCJ86hVR~t78#;tni8Y$A7yKUoMR6ra!7NfXe~C(zz2Jkk~z(
z%D%Y8I9p{RnubnvOFMVoNx&yejX5$t`|;=jl!8=(T3+$Aq~UqHoi;c7m-+pmAP8bT
z+fH!TYyo5;;(ZZ`42oaN=Dhp>nAG*8a0bDF_UAmKrLztMZ-7HyVVZv`B^xQ5w=ogM
zM9B1ztwc0TJ<^9gS<#J?Y*V>)I*8nBaVR#6DBy(9uzijG^2Rl$R(z0CAyM>lT=F<u
zPow(-#3c7<$!>6&^J~y3YfiyWzFJbXJVWWySGAXeqH%e7prW0h2b`M8$!Uek;DnU^
z!34UCG9PmvBMdxY_zzD2QJzg}sJPwh%O=&+FeLiHmOWw$5&%dlra*m54@B+h6Ndro
z?^u(u0Ay;hN&9KFh#XgueCU4wG(Jb5@6~t>42+Hfk9p$-%2InJ<A(Uh4E01iuj^dP
z?En1C#8M>|z()!ed3U9b(cSY}-bP*W4Nqmv5}Vikt&M+JXZ(-uoT$cx?|7kcn}IAS
zNATKSv{F9${jBoM_lY6UDKuagB&NihQez8kPNtOy<12^ynY9c&_ci;Kn_PXP(-IT-
zs>y$Iv(Ntb*)Q_9UUNeNW)82*G)z1R$CkWN$%;ePVQFT%5aePe)?f5I_HT=)*IZce
zjKhD^y)l<Ktf!IsHrPMkl@jaNsEq5BPfy=#CQq1#iqC@i{#-J?kr|`EBow$+SAETh
zhmA_QQok%6PD>=+H`X`3If$q4A^X*BpNY})n<ss2>JHyD@7sQQ*WM)OHz;JPGgX+3
z#-2D~aT)a%C^MB$0GAKrS&l!#tLw*tu(Q+1%dt{nrgi;d-R@s_EaXj<tQnyabw~VL
zgHPcc!2~<shvTPe6QWmj!!`E1nn6ukJ@9@2<bFaBMfpK9k*&#|Z;sc_>ksFHbXn;+
zzUM<6@@x!YzKOvE15f5OMWDDm+?V_tun2+v21L7+CJbA8WtHhH18%rq{tC$a#F~)3
z>EGl;M))+-4e_O+P)6m<h!a50*LN$WjuXEAZZPJTWD$J2U+P*&=G=*lwg!Y6^>vo{
zY~d|<G<-8w5|6|YO9atsHI*6Cm~5+evrU<%Dmq4%Bk7@{kGEr45qw4sI)2j9sK8Ru
zrF-pg`ocoT@l!!9_YCR3{y!x7|8P~Y6Iozbwu^?jqXI0pIvf4N^=VJCcY73lsJ7wd
zw*2?D=Wr|5GBqiph<Y3ud|&BvdP{``hJmY8FB|U6_vn<|3kzusZwl~=D5V#nS`<|T
zhz){7idw(st#X95q;Mz=0XhyTdfXw`WXTC|JZJdZz)UO@_fIBI36%;BKF$<X?g+DJ
zh=9-7z}C%W^Tk<4_)6d40@v?{CLPn82z;{7(JUH|S8ucLhqaUwn;FtO*PywYK}^zK
z01t=?rf<F>welAX!H%q}r;z{&FqH?1v}U7nkiWzy>Q=&kSK%P-Wx*xEpqT<dJHbDd
z5_NbPP=k`Cc(E(76&20MJ*P6K&P!b&{TZ`b`9k~(jl?bV`@vb`Z#si_?}iY0sQ4>9
z3D!Ih9Vjy2mWgGvJOoO^zj&RE^!Gkl9Mxy|dp6Ic-jaS{6xP(ysk(Z`_PI_wg73FD
zphRX!b9%ua5``8;{8wAPD0Yb{ytuUhatZx_n)uI{l2PC?QITU`o!cZNQbFHf$X256
zv9;EC@TG2qYW#8&Ehe7Al4G%;^!10YY3aZlI#>A%H~mSFk)j&nOnRf#?X{b=Yk6dM
z4R#pPO7sM1AFX2K5{Udcvy`hec;YviD5ULXBl-pibEldtcd%!m^f4+BRG+fDsx<KL
z{7Fa01KIBx%Oy!e_6k?6)T{SaA)->px(&87Btp%<;6N*#Cwq0SQKTFyhj%Nz%ef&}
ziKzt6h-p|hde-~v;p5&y!DQk6_Oi$75g&$p6nRwNPx0WE5ZRm=zz-Nru$ncGOc3ql
zhukU^p(mI)E*``N_~ldzS<d$SkB;We_(VCgoa^fN0LmE?&}o(_4+}r2>?xg5`sers
zmE%2FG^ErHue99sYbGD5Z~QK9N`V%Q>xVOvOsgOR=OKp~SGFI1n#git2G!nOhP~aN
zlW{5jn)}4#nwPxq)JeYYrWZ?AP5Bvuf^In|@bQ;ps?>x?HTU|Dw6dudZR_05@Zqz@
zw{a6uZ`<ASM`BKCV?{rlv8;Swjv5kD>1Ie4K2{DYfjjw`OQS^iuewlnvsdUYPkyUa
zU-%Tirmm;{jbK3wB?^ung|trMOiMZXZe5%VkL^d3??#Y2gWSi6#@=e{b%hWCNe8D#
zg(9Tff2H+dbk^2i#ND)Bm%bR+4&6eJ$ujtgf#+R)(%7I$N8-?*rcF{aOWLjJSG?&t
zvd-80BNI~=Iu0@6mHE>8>gD})AyckjG|_*M2p{n?z)T!u5iVyI*WM#z`>cVU5@X^4
z$N`&xA$<Jq6aY804Z)S=D1vT#c^glJRD33YF75*XpmTlk;ncHP0(_FA#d#uTvM0^$
zpWB>K$)S`55E7N{mZkRF8ifOz*O+z_r%x0TfHwHoHseGcL}Rs+;~{H7Sc20P2Vn%K
zq2`ZR_#9Hto|vlhc8ZQE;^CI^Ws2gbc&+e5V5XL{Ycgge0Ca@LgCzNH>N8mpj896D
zH$zE`o8Qf1owt4+e!BCcOB@tBX$zh+@o%Rou~0%mkC{qQ@A(`~83wF<iaQT-)(+q~
zTPaDK&qQ;y6#oQu0g;{%U^mZ3X_@~|$1wp7-?kM9)-7c^A&dY7An|K*?|rJh(uluL
zZ;tnS%5ml4x`oqK1zO0p`}aq%wtkzN*5!|JKagom3XWuFhYCNo=z;xzxt32YvK<YX
zPV6#Ucm4+%fLUZ@))M?5p8N0ot$OojkZ#@5@G`}ydRO_?I(wB=d=!o{YEVa4hnVU)
z(h<fPXYICNZe~Fv_rD(~zcuV4CSK$^pr(%9p;XWd5vC+N^J|fR@4R+ugW@+Zk#iG*
zXL}BY4YT@Pm{0$@TV`RvT>UH!2271WpmRymgkLiCiAeY#`_8T}^?q+8c#K!A(tK$>
z@_b098o2FP_|bKLxzW!2*m;1v(v4O+Vx9L@A~WiBaB0}j(sGo-T$-pG0t`^asMzFl
zv!pl7<6%MOp`16E`)<PJBZ;J$+|Oqy$+R0j^*{6#@7`E^lqgn7JWAFqru;|!98HT>
zldPbefAe^JwAqAE&B`t@@;8>vn~u>V`cTpePN{lpTZ~pSDX)`v4V7VxL|yT@JzVC0
zQGE9g6;;(&CivS`&}KRQgI6d5W8?$&=Bi9u7bL;l4Xq@m7#YW)hR;XIA=7_h5*9!>
zq}!w8B1@vRMT^li6rDIUDsjA_q2Z{tl1{)4NP_`|ngYZb(Kyz#mPbt#P{pKT9ws$V
zA^-)s$`dHObKKo>CMmM{f6{!oDxz@LqR&rC-R3N?rl*>t@@d?Wl;KxKdb(h}&{6$V
z=17PfeX|8HmHP#DGm{LqXIoojrKD83Mel`5G-S00`2am}Wv|}O9wh=WO*CqbU|DxV
z+*X|d$lv)Ljf?z1xgWp3&DHP&_a&)_L^5W3f*=d_2X~=8cZBN?;i3=70QvpUA4k2q
zjknAo_T|r*R2t(jB}fW@4UC@qg=rM~#i|A+QF2D+Mp1)IQTfNX_!gK6Y*Lj1fEGAs
zp=)P=1XwQYNKsn<b8zQK0fXC*yWCw3m_*~0C<rI`m1ioh2wi3u#MX_j9~XOLvWhYy
z9Y24a?yQR%bW6)bg#M-xu5SHlXs1e8uR92;%Pb+$Xx^kp;^-h&(2Sv^m`2mq5}QgQ
zkHTB$c#4;-4GV|VQ&3U$#3UT$v`+s%GUH*b+;}PNhLr7*`3IM4^t)|^Nho0ojdr<i
zAeIA|P>HE$kT&?O<zLbwB()iw$g|5ezg>8!PvyYhxf~gC4A6)YyS25wxQ#P|3^r+0
zB1qJ#mY9|lgbdmXPGiBFwsvyHYpd;1CB2BIIxOk|-oAxEbs;_9I+wR^L#s?}%&b@5
znkjd3U>q@1T*4w-%@%+Zw|(baeHm}l5YCn>G3@%C=-@AY^T%Fmw+UiNJ4KW-0e6FU
zVJ)dLe~sVbZpvc!kALn_)o8_eDSEF?m;t;qNb#4&Cy<B~h{GV3oRZRzM3r2yG!B#{
zj&$`s+(Io^$~?FB{<wAX3BN;;La#lvie7IuEq%oTCCC-MQOJz`7jHnH&v_8Mly|=e
zM5u-;p!FO?!5NMn%^L7KJetONOY(=)aM8ne+75ldPa^?8gAOq1sGWQ9-yi?p6r3R`
z#p5!++?yyaDPgW}mCPcf0$*gTx)x7`4ZghnM+_=o0{DXGQNx_zCFisb&Zyu4TT%T)
zE*C!n$V-VSP~C2CC8_iWqEUS}S^jL0N`ytswx?PY(*Ph$nYpYgr`$UUi@|u>8(@9)
z80<r|kYm6Y{ZcP_YqN;2TSl9{^{COnA+4cuI8{0XbzUywk|F315IIz>Hu1o~%Q)xB
zT`i;r-{iJ3hMzTA>TDzKPdu)fZ|@5;X;EV&q`8upM|&e*VI8@<8R;bvwiLBe^t!u7
z0^{BtBj)J;_6e~AMZyB`Y3_8zj=loq`KJ&1JARF`K-@->Q}Iko9$r;cAhNc7)4!5`
z*6v6VXI@MQE)l&E@L4Spi!Y!dLMKXlty8;X|C<Gt${@1EmZWJd_x6k`PNsMk&uzpP
zS+wnA;(Z~vcr;ECS;Em~*jDF0+dYY5+Uqg-cnu6Ovwi{hf=K%4{uf0Er(2`A^_`;C
zo=TyQy`AX@QeoS7;JY%DyfB`v#sY#|Xpbc1kyc-at-w!;90PAex89V9%vz~tpz)QO
z@>fM?XQZw?8WVbP!omvq+Ednk5WBf#<{MTgPAz)+^Y!kYteVF67#v(HlKW{lSmKa4
zv#*DEL%0lq*gt}LF-kmtBTt2(k;G-jx4;EM5cG1{k@VxU1k!Xf)MN%d^&LN32Ficv
z)|S3BS#bXF;w9y`^aO*=@j4E1y{l9rlklu|pdX0E(N>F~pflVhdrsS#Epq5}{~C~3
zwprUAPHQ!H`M%X9A$`pNEKmv3yFnV&RV+%;s63HQ+F{0NN-0RAIkb;Y5xT5$0&{jX
zrrR7!-PI{|jCcugu-+?V37)YhG6U*b)oPYbynkx0xfVJMG9c&^c$IH4fl!+R7rfjT
z-DYNHRDN)y0*+n0Mhro-ls1i>Mr^#kjFHhY*}%*wkk5PNb66uA?yg|F3an65LNV<J
zjis(hYUc*mGiI-mki?MWrNlKkL8=jQ2_~*8hYfSaw=+kJQ$;ERSM*dQEX%ZF<?`b6
z{vQ)u0d*Ym0Oe>}^*&&Kcq-<vkASstkWA4cxkDf>1@l!@RJ`{T$-!NH*x{#*j(?bZ
z0;@M4<xr*0{MJKBD3Il$!Y!*TEG*|Li}oHwQ<5(QP)y)ZoyGe-o;P;syE*<;>KAxa
zEytC>E(7A{Sb@k?v&Gh60v>+vpRoUM^01sM0Hyx7${n~843xCDO8MbOK>z+k2Rh|y
z&-3p`JCqkOk3L6sXQjRy$%Y`6q^8{5kBxTsW--z#&xF&w+BQz4dGJL#UVr{Mt&3QX
z)}X#}*QHV!;}{tJkc`{0UN_KWn7QRnewsW8*PhomQ*S5xXrFyiG>dlZ(z3nZ-O(Ym
zY~LcWAck}Zmy1PAPOqCfZv6<?YVC4$Is6xCHLI2OjOx|r&Hyq)sj;PsVw4(&l+YY-
z2w=mYgB=rDF!4*p>P_ENu&iX%p`e|7Kwf-VCH;0yQr;OI%wZ8qON6dQWynM^$IxC$
z%7Vg-%l?)k!lYN%Ez+96nT5A^LtbAaAeGFRz{>Yj@m72@{@uE}(+o}uxkCSxy(N^;
zq{8;E^>-*i1^&Bt4S6wVMutrUoFB7dCx23hD^bNEKS%p%x`sz_J`!D`UwbW;Eac|H
z^Yq&OBu57lJEo^=UCKw|!`UpU)%(omSaGZjp`wVhxGaMB=8AA!>X!^*(jj;P;!?;A
zs%dO`8^%~99KAp;P2b7V&pi`>tkl5rw1Rt`AM-(g&D5_3M=PCoW&VI^JwNht*ecuW
zMcjvTx$u_5et-+v=A*QY3PAug)u=oq9{FkBPA=UaK+ppP@<|IBEb|q;4q)atUfL{p
z3cbU`tW8X`4}h<|z8+3JTH$__Ot13{f_Ezx(<*3uEGD?3rDGKO5YmoLuHL{@;2ytd
zGRO2xHg_@wQ(7nWHJM}-dad@5&edS-D&@0~w@K}ha=dmdEx7*oi>n~Hyt9^MVAzb!
z3%bt87T_`CMHGVw;*T+A_OnT7rMC!}gXFGqRVN&W9DO&*{{g^V=<t{WIge5F6^QI1
zxG~_aZO0(@OT&zIe3l#nUMvDz@o^N#`fkXJ=Vxiom8h~X(SDnh^U(Ww9vRQUwXob2
z6Yo~8Vzm(<XVea}!~c_<Q9qG0Kdw5SCvt`(MI%1hljGQmqjK6+XGz;96-1N!ssB(w
zx89tqqaH4|<UKTBOu_w40f$zf9;F$395a|6UC(5ks*9*;JVO(??PJ0HkArJV0nE&^
zoB}0jl!^YCkMT{p5s7Oc5qkY}8%I3x>e_S`yuwjqN%@mxOX^ycC_c=i;DV{m{mrw_
zbOoSJzS@q6@jJlq9&*CcW-|z@^MBN7yV@ssLmR~v*)aewD^)c%jy-X4-*E7%Lz;Si
zJp!Z0V66J!$tvQt&*kY0?k!HnX8<zLaaNmfFIKK<mXLh+W&GfK90~j(6lqPn)2SCd
zdRk14cL%z7Hr+wGSR(y%yBB!ijWLMvtc{kVJ-&Xz_yWC@sUo-hVw81|*;hlBj}fZ0
zn*=kAuZ89Y+%&A3y7@im1VYjI7h_sYUmryG@4VG7rkMP<5W@d!tTTv6shEwqI~N3K
zs`&*b{)hg5U}{3n9{ib4Z5@ymxbSqzktHy3^%~HaMK4`zLX=eKmb@MS!iN2XX?H1&
zruRftgW6jQ8yktA{wa(I1R!JiaUxOv03^7bQKnq4pHjBV5vV-*sOKLkM>GFW`DXzg
z&;M>JXZD|{$CAsa0Gh(JRkY>ZlVlF%<`NCSG)&*mW<ZZbp$UqVLk|6u9)V&jYB$SP
zG^$$c*jO1~A?LmdTu_MumNfWV^_)ti;3D^j8csQ;zQ7{T1%C{9*_ADv%9|-x5L$d~
z-W);PqOHfU#R76YoDs&tzVf=Bw-QQ_IUkr5cw(8iGj_|V&;UZI9k<VqiJ}2uMriij
zBXx_0RO)zpl4IzE(K9I(|2I;WPqHtTan#_4*5j5kI_iBMM)D*e@Ig$EV}n#8vv*N(
z4y;(L@gZ``RPoiU0L!X(Zz6wLnC?8H!v}bRJP6~_2j$WIo0KYF)No37UFDdHO57(Y
zU!+)%`u}0?Ed!!lyRcDWfT3iD?(QxDkq&8)kZ$QlB&53=q!B?nBqc<;L0Y9-K<Vx{
z&*<LocE9iW@qNF~`9sV+x$d>D)$9J>P<{+7l+XWUcw`1<6oLZ^vewVl6A`v9Ai7vD
zPQ#V3td}y+pq6v|T+r<H5Qe>|s1aej0XTb3M);kzAO#&0S<KG0NyXNe6T0Xea#$6o
zEY&}fRGzA7#sYYcicQ{GZfjUis+x%VNtRQ`AjsI7X!hm2RodEXDvf6`5KHBh2ZYg(
zq?x-KG?{SOxDlQqpF4&Z!Pq~!N<@R9_SO>7l>$bhZMP=#T;|M{pO}6=up8BhLKJWa
z{~n{B#(J?e)mkr}c3L=s$&$J}UIut(O>YEb79>3rDBrv~e$HBMOO;L);@ow$rto+-
z8aq)}f|dm&8w>%G64b#A3QnrYm;Q4@_E6{+v0nC-M50+(y%p(josy33RJeH=$yaPW
zOd>JVU0nRiQcH=xsKFZSlS<aLGTg801<LlFeOCezkeegdctHtiWPKgu@ax3zam{xR
zLkqw0)jdVZYpTH8A59OLiPAiBTfVHi?P#_OGI@9lp)9eOde<78{opp|Gh_WPlhL>f
z$|&VO7HyC~p4`v2)+U@;quptto|i3>f*r5+3>HvFr*Gy5%2tS-7hi3<zM^32@a)0U
zdRbG@Pp*D$iYNC*&AdOS`i*^3vp!Hx()<lV%##C`D>&mI>zoT=61#5Jv$3&p0@~!p
z^2!>A*abuF_%klNK9s$fkYiW@D)*Qhz3knv<mDAA#6h#~2Qy@Gsqqz{Qkx|gxbkM3
zao6a~PCu4XKD^e%_A^Hse;pVyVo*<~W~rT%cL*!glbO}dxidJ0s;&Z>g3T%dFhyVt
zZH8IwRmrlQ`Tjjyn_)c%b^mw#1(lF;>lbt7_6Fx`uv$Ci_d0rBb4w2aCY^oASKs$P
zn0$o~!(_d~x-u?UtsSM4sJX-b?T}IOf*Y1<kT<8!(sX!9vR<ruNWd$r<SX^YtNAtO
zS-HNv5IJkn2vBP|UMPPVLP8-^INbQRr(s17ZA28UJY+!vJZ<`NuGn<>7;nQmZsjEz
zF_GkC4_u!3VX%;N$#&zskI{YrC8v=_iU1jfWt}|3nDMpT+f<ZKW!TJAh*eOfj`X07
z)^<V9s~E0p4PXA)CK9o9yGEDqVW`F&A9tEIs~b(u)#*y1!reW3IaZZ85XhGM>GVsB
z$N7L)IGHmYRGPcLY)fk`$5BZ}kM$>**%@2Tjf@}7%dr7*ZA}`wt8AtNWlgY0s^FZ+
zb#+3L^G$CtX4><}Qd`WT($;0wSx=6#&%(Npjt6u0iq9B2&EUs0xe2y{akq@*o0A3;
zAx|*Mds~~Mi{xd(od?r}2QDHp5~2^Yc)k&^t$?Yc&%J6bO?o$@$i|-x;v{GzcqtQx
z9KMrjJSG*g@FI2IGiPM4oX768ow5SLLYZ&@tnd;M&8$C7e3Bwb)?Tui)N(!5Z{xBU
zeG>y1sx1m3L9S%a%z^<EcyjoSk^0i!=d;m$4%<L;jqX7XTN<(A7K;+w`m0%apupq`
zmUOrPnuO7qP|H;kN(bHBt_}Ki&Ft5KtWYn|b@R=<7G~AP20twhz@D$^7<25AFweBF
zcfLm79r`9Wypq~>LkBdcWmo8Kt9=LElBo3~zk?OKeRuS`CNcCr><R4C%k+HGp^U^_
zq?o?CqrsOvmX|AS^9bk@n0=;jgf(RVJjUsX<th;0>t$=0pP=iYy`MjBkd~ildFZs<
z{-9YZxCxjDRONkn^x$-1VeJ0hNz>4WH$NSWY^R8TFvV_k#MeJd{(t8emVSjPc;34`
zgM}%O5Y(5vu(XVv>2xzQ1<KlH=&}_ACLKm@F4H7u^yI$S)axe8?f9CD&$|vZIE~$T
z2?hqno#7d_-q`I!Q6=c!;Zwel+AgK@2!At^qnH^3v1im>V@f1jb?9y5{#sC@XPo#c
z{dt3PN?T5M#MAaZ!C6Zy3qR`UUH3Hqt~OUb`Ku|)pR8Q6zD_BGbuGr+LgV;_x6*|6
zS(jSLkt+d~hMicBuMq4}=~o`rWA9NrW2_=hMXdET6M2+APN;<+71(B#>6Oj#Sn|I2
zzVf=5B5RWlL?ekQ+m=(8O{jVr7`OSkYc7XXEZ!r^3i8};S#EVXyS}G;mMaznrM>L#
z)2h;@4d+FanEr_e_TaKz#Gb#JE~|U@HXHRhQ(p9O!$E$;19)b?A1cw^$h&IeeCy=;
ziuv<S(++d1K#KL_@@>*HzxX_mO2qdtTEOTJo};$f;4(d=wO~yPYOoktBQylPQWmUa
zM1?#LJL@w{>ZR&P8f$z^?u&hPHK=oNL{<G))EE~YN-0G?G<fFt!-HgY37d~3ayj%=
ztMeMj{CC6HcM;W>P8!HZX@^I@-T(Rl?-pO3+fC^ke$(?E@v=&F6=A%k>&5dIWec9}
zV2GLqtZE?p#<vLm1@lL0vEm33e!)!%xw|YX!HU6}RiNg?@ZFY#Ly<M@&fN-@Uw?&-
z5rz0snZ;3M$-Gk+=F^(yr#eZVQVw1^&Nm5duL?4%>ZyAOSNL2u6ooFoCuL^<wQmw~
zCpot}mU|7JcVaafK<-r0_teu~p&Hmggk0Bg9pTnb!i^Ld2=bkHKxA9Oe;PL@;_~Kx
z42a-0J_$*X@Q?JSMNkpBq?*%2!y#^H#;2L_Rg;984EAH`Nbz}F0~y!Y+?c-#IRE(7
zf(VQM#tO{n{EGjI8B@`{uKXVTp&%-ivtvH+wX5roQ6hKdeLo?xvJ!+9hKTmzi`AfW
zKIVtfWNHD;e$MP}v(D7B+MAfTs+f7;R%%@n0c;S(YO`5WUjl>fcFI~sA9+tC(WF7*
z<Ia;hT#7BdciO}0w`v%SOlZb%yU;;NUtAs&vY7f@Hu4_L$GgD`al+8tNaj+}G4-_C
z^|X}@$wgXw=(N^%l-4{&DNquZ(EU~O#oj5F=_{8nC0Mc%5|?h-e%5lRZf^v}b&P|p
z_jApzwUmXR3^^~*Y<|cr5GdSEj2`Y(v=yHAbMta1P#GN%kML=D7<xM*?=okQ!b@}`
zbOwN{F%zbpx*d|LPUBaCGiecZOgPy;Vv(W-`h573L%GXk@!25SuaygPXq%WDgk0J6
z_{l@82ixTRC~{V)<B?K>5Vgqg7ktHED9+}bNzdj@%7YdY7(B2AvACF4cPQ**j^9KH
z%tcvI$39ZPUlpAcHNVHjqZd+Mkd%xxRyEL!mUNqY(35LA=%)@1Mp;^~!l}L<FUl+b
z=-Au9u~_S-1Opgh5KzP-oaOoPbvQ&#@R#+-%=VqaNN&0Md7tUg_kn2uOy|$-d^11T
zN5LHe%}Z}%+h)-4$kr~_;`*q<NLO2f+K#jLU)p>F+%rL@4p#FJAcitK!~gvOZXQ`i
zKN7=HgND7m{oeZr+cn=kfOh8Qka0~t`w$>TM?mfPgJ0G?N`szvvNis;4=8vE0<3b+
z7)d5ym?zf32h3rj%YQPSO+C>MGy&}Fp_*tFM-x9BOrS7}0&2HZ>^R{iXmMurzo#b9
z$gCEL-dg*fB0F;EH;(lj4f8LthP&Uvhdv-fV^ZB|+I*vYOXcTxcLwBzYka(}cydQC
zSt>uRCi87=Z`X#gHI|o`zm$qYd?3(%D_U&)PO)H5ucZ9bK_@z7+*GL`e9*e{>G^SC
zy}s_`tJ4r4z}z6nvzq#Y^8tFo{#$^R@GXcB%))BSD`kxLEOS=eMl>=XJx3nEsz_^d
zf({l>aHg60ud`^a(u|m?^Xb-NpF*^P;n~)CK281*Z#+$`<+3g!gKV(+a8T5HF`=_R
z1Xp-T3H9TaNc9(*F6vd9Tz+w1j`^UPP9?@26eqU@!X{OhM^p=x<s2Y$h@zI*4pD91
z4S^=Pxv$Yb=PJ?{TY-xdt%~c%O5kgyrWNI-l9~a)+ZSE*(<PL()G?P>ygl1pw?YgA
zrr%9xTnhL`pcV+BGDWrg9CG;-R?gnjkWM-sgEjY>_XjYhv~%=e7ST^)Au!#_!KSy!
zMN~%m6>2CJd2r8==JIPS%Vv*33F;9-T5RtKkT_jz<ODTo^>*yE&B0Rwg*MzrkyZ>6
zFCtU7XAUAkD@B1)EEP;587*+?qS<kpy`z=+A-x4hp}hnhbj!yyq%qXJ7crz7K?@9a
zF;s}9r111Th?Y1=*yplI6jqty=J6J>Y>A(XqBhnlR5lK75@T=PPG1f9Lf|FNAp`<W
zeTRgC9&imw+MmprboFMdc9ok~+mqUY#*@zS%@vj+9F3Y(b_Ibjit#O^DtP#6<y%rq
zG9mu>({7O5Jc}yx*Z9atv?4RgQwS3YV?t9d-Qd3ZaK91IX70r#Ue;Z<L+wWWsxCNx
zG{!)Ree5v#yOx?B>dhXb*7rAkfFMLlN8vy64o+e<mtv2{>xSi3dWY?o^rp-o=LOdv
zBuWJBAsVbnVLRK}+VXFi55!8#(_Tt5!&4`oXpG;Z;K$2WcnM!8UWM$rFGSV&L2}L2
zOE&BxM}zO~DZj?<Z0hG665hw<*?v297`nF%_o#WFgWe;19wkC@rEjJ0Qz-oslG3Sq
z?{-pfUv%=tr%7aO_WbA7TMM863d#XtBz|gRQ1~L@!^f6@pQp_LO18U0TK6v+zsn22
zE=R}baJ%h0$hAwxIuglkJKYKmtrG^}3^R!wC>#`^_+^aZ=hAgtnA|#Dn{S#<Wz#2u
zI;8mJFv;m#Z>6a`F2wX`!F2r#M&E3kD{{$MEJwu<DUNy?-%zh~C{PE7eGfC%L5jS_
z5<^YeTbB%@(lCrL>*W{BCS^bk+D-CaCf*DJs@_e#1qh``<3#U?eWm82o()4~3T1I9
zUMfaB;UpSOid7Rg?Qa)P6Js(Kc5*DR?=5d~F<89`#!+rx*V2a{7(9zf>|Eo&!7a1!
z3;!7U#QW@00$W>X+Ch;`4hi~+e~pK=qUb6}gAA;eg@y)YrVj^E<tdOjb8xVCCN%Gc
zs|JNO^4YM|i^tnQL=q`M4sLFRPG^S|>A^uELtEA5t?*@;dRb&h`{b5Is-3|q&&-)Z
z&&oR6?_R(63p4|}#|fB5*>QQq$zA5MbsR_Mg_uPWJ{R#iL`b9%aVdQu(mTnpifDuz
z;Gg68kwMS8g4@9ZlU{{z$SeMgrNYGfV!#eGZPE5lxm`~5Q{v{L*6JMpo?0^+Y_a?R
z6tBIT)=`msTS@uWtVx6X<XQ*_yZIscP3d+D5#Z_ZgV1PznwAjfYTf_!;=N#A{C>}u
z_x*tLbOeFqE;m`e>9|e4#=8{fNk?|tNVF&(rhjC@W%-_IJj=(4IpP~Dd}jh>nsaQt
zKc}0v-@MZbk$}~x0i`YaaM$@$I<ZnL!%{(yraeN)Pu>O^!Ei8ijkQx2hYe?y%iY3;
zfRR1-t3-q?4LazYQ!CwdWJ5(wj<UeTSWRD(P|epkh17Z0ZT@~V^<bz?S=>i~Rmpd(
zI*nAz)MyLQ0UtjVwFG*QQUC7b1a3q(IU^vMBT_)&C<7>gXgpjye!A6?8Mz-lmD8iA
zvJe%5j&J&PaGg-3STvF-HO^wRXD5Uu>oi0b(}slVr&tP<3!4&m6T~5mt@M@^_ibq>
z2pj#0;3-H(kh0#l=Ub(=7g=xcJl+b+3yHwsG`>=PS^<m1Y7L=CS$VJ;n}jqPrck*6
zE=FZITMe(=#8ogCK2gw+z%!A&2)@tyHDJflv>_rl>e_rP+I18%neQk)+Fz-iK#eth
zXU{o3j4|zX5Ud;=q^H$`dDxpCbk%P?K6Is=%>?v_-8dNV;G-V28GNEzhQKOTU=_+`
zIK(wK@y`NbR;l)5SX{;}x;*5U+WAZS{Q7l*39I(yU$xRQfhi<0G3*ws`!$L*3CB%F
zIn-mOrBD7ZTGY(JoC6gYAJqLIm;OYybhSwXjp`as^6&|S$jJmNiH_tkj<=&+2hJ&e
z$q`me;^AN_(;!1~3Op)agB)5^JQ?|?$n$u!6hE+%_T|G_cotj3`jXZ|!m-tmWv%2^
zLqwrn^73f+ca<uu9O{b&AwgmFV8!>fZJ|zmn-fg9ji6T<VCcIRNptB(^zk67ny?(7
zQpOf<*4wi4IX}NIV|VX3UiZEpIv7bt;oAP-CrFa0Q`eE!WXv>xD1wWEXOsw)6^LIC
zw&Prl4$vT6jjWYrr{xYetJ-eVRZOvS_unGlp*aeOGeb_m%12%SGni5}!WBNJB*ine
z)LYfm?x2?=ry*fjkc<#8q7~|YKqo&T72Rh^Q`ehu038tEAs8#AO$;__B_WMYP^2*0
zY-fhLzSLe&r&h)&XYcyH+dF|Aa#*k~?Mz2kge6G+-0czE`t6mb_w_`J%@nM`Y&+DS
z&h8r~hpj#M<RQq6-+5e`K>Qmm(5B#%e+T5|Sb(LfaswJ?U+xm>p#QH_lE9?Wv3vYI
ztbOpCzkfIu#n|2II)PC)%6?lM{;V-8eXjA$;Okgf$`}5T>WGj-e^hHGB-)2AO9_;9
zBT{@us);oHhV61FJK^`&-%tq~h6(GqoZpxR>e7O%i6;06G%z70d6KFUnS;>5`Y4hP
z^T<A9kxZa$rRXaDB?yeoDeHSM_JC^qTjbQz9h}xYKa%5!uHv%*e|6-i2>Q3lnCFAO
zK=y;aFB?tDqGUlWkWea5lFg^477gmDEmT^M|GWgDx-0gv>1fNj8wmBoeoTS$S8mp{
zLvj(H?IrD#fopJ>9;YAlwm7vyLM-2(+VqKc{uKo8G9WE{eic|w#%?La{%##JunAuz
z8n&0C=!2kAltwRcG-44h$n-Y_?%*6LFcWY7bIOMhY$DRBj;~IyN#@J0WqnLF(&CST
zVt2nVcu+);LSq_CI!X&@MOb@}1ZS-pxn5!wd?m-#l4)O71ErP|2djq}&k^>Ok?9B7
z+sM@QEsb6`dH!I;C?$*Qc<$DomVNHVOxMCy?>6#Fyuk1Z)6+hHjLv|Cu6JrZE>^-G
z2UG#!=4D{O#*T&~9&prCLRck2bktYC3;K6+zu1x_tP+8v&`lcnCSF`j6JJI6PJlem
zY>#=?F!+&edBXRw*C&u~ANxTWsvKwjtc+QwNJ(FG5P}n@bf|-|H`KzO>dwvJkENK-
zhZB3>=Sv>E?mClEwI))F4R6nHe6g(W9*IG^#KikUAU$uvK|hhq!}y3P|4a-UDOE0k
z+$t<S`bpKx71R0C6Bdt))40RSL5pB3m$%W)6MH(HL7^|}!GaH1PA8mCCq5?b3*J%A
z8h<&U1IWoS5vGBNj71Wv0F*^xkP1ANJS|P6)TC%V5GYhT&24gcB!_ITy&(2ts8o>m
z!xK_N-$eYEEz|<xpMbuu5)lDY^mjkQA@i{j7wxIx>^BN(3Z%EiXVusBdbw_6jH~pk
z5mopDw6(Z$;`M|YG5x(#K1h$lUOX@2?n~MV20v8ug>(Rg{vQj!rt$5&uvQo;Jq!;f
zk!095Ef)B=_VhAf?YfbTI(U`Y8M@FwEgo)_yDmFxj6vRhkyxDTK@bwiSU4<S><I?C
zz&164e)t^jKI4CvT@JwK2_piKHdFPmcLG{)o`|)L!b1P1r(0jMM~+vcIC^2t6<_sW
zK#ThXsC+_S19r{$_o@QE)HwubVqA(UF-QQ8GlOU!Ty6@S&n>x~K`ZJKt!x}j@*Zu;
z!gYx0o^~*?bJ}L(qKb1ssTx1yLup7a0|sm>SUM_7?&OnY(rB^93YTSMb|W20KTyb{
zVA4bLzA%Y<ST$3c2HK7kFi6HeH9FVY!Y1uXVD=D_@m@w;1dY}fw2}`iq%ObTT<THc
zP<9`17`}0Te)xlZW@Psy?WdU#)(ZBfGLl45|JtLk2=y*<F7&;Ubvwm*Qcli{`S?H*
z<bWow`xSw{|I@;e-5+$0t_mW32B}#gg<o05=4V5%dM$#j(V+*EM}ehS67pQG-*D9Q
zmOs|EJ@vMxp%%i?IF@zF`9g{7b?3T^XIa96J1+SArXM<OaRHgN!tGLd7RNgyo*&Fx
zQb6Wa!T2e%?9L2~_tT5n=e}ER*2>1Zx3o~uyT*x0lP_3R>LDtWUPB-->YcieQ!qM|
zLMo5yXTaKHQ}nqXi`Y$FAD-JG>T_V?<@!BCl8=(yo0X6jI`@g|4Jdkp<;O|pLe>@e
zODVQs0-}0SA3k$Qj6i}Fz`y8$=)U;MvIriSxL~XAu@aKKRRM$7kFZs3?(IGMe+kG*
zz@(MsjoU+*v<8VOD4;tu?g`GjoG&OZh(}n{#h<=F!<ffE6h}Sc9S_*Tn#CUvSZhpG
zh~!DnrV=aG<T(L4$)j^MR0xH<X`fupIz5%fsend4ovkD`*U)9G*b7^&;r1wLd|L->
z(n6^f*us<UKsRtY$S6{$nx5Ab3)Gqu)ba6Ai7AAT7+r$md=4HlOU%F6O#3-pJyA~}
z9~}i=Q9IHvOxkqFB+*$7vZKu6hTE=Vrw&f0JezShx(VjlM1DY=9HhIi6Em^3I@A2V
z2OVo+JsB@JK^9eKH3F9)t0DsYAo?9Hxs*dh)OtH-_{(^DVa~hA=+(U~e_z^K403J^
zNtrll+Xdz?eplp?;d<7^gjCEd$)WP$baK3j&y5+R{llIc^HyDNn{Mp!kR_FpvsDaR
z+1X1d(C%EZ=CAi`ZSWCDx=ZYoQZmOj*<gJn?@9L~Ba(osMN3Dj>PJ}(sCIjJda%P+
z=77SfWe{d8j(i2SvZ7Q~d9)2+-4B3#*+Q#=l`1i_vm2?ZI>7pFGv?Z#Je-T1Ta^-z
z*_(GJN*0-6>G1#4Sro6p;UMRGpYxS!8H%1jB=oT-+vpn!2G02iy10z0?_KHIKj5ND
zG+Eg<OYu~2UnPCv^u6&=%o2d&xKG1pxE6j?V;1o~nMJp{Jr@oKs;9oALa}b@QW;Aa
zWmM(30_o_yUvotaTi*;;xtw^=M%Jg$)8=tulM_R2qd4Wr*SOLZH|_4I$&Y_ZtA65i
zLB$?EwOW5w>0oDqU^L)qKKq(+>a}-uGG1V8MV>H#{rwN9MP%jL`_|*BB%OAg`&Mj=
z-bDJ|UNxPyoU%>K22SNP5;%&UGipACQWHC@x#Hj$#)GkxR|1C0J!Ldwau@aj*;?uv
zip%%npn7qAKMv>Kx!urWR4in;K4i4;Uh+BA5qfbdO*<|{rXntYj}&Fa)iIrTLd^nA
z!0pzD3`oc16Jyi;6z8&kmo1kzNIow08OmlhxN>}{%4I{US>e!~h~$z@7xhJM0{UzR
zSAqRf#(ASq@5;lmI3^O85<w#l%w6ayht#PcA$8hLm3C9GRy|t1BxY^y`mwr&<kt#E
z!B&{#!JF)lR8{a`Zy;;c2#mQBjCpEc01PbM;NNR-D9YA^*|Y}KfHz|x@%-`s`mw+a
z5>U7Z{?lesz@}o17Bes)D?Fy!s<WOvIFz9<8PAipqI;D0p#aZbQ8|i`QZE{^i^$Bv
zlFi&{jE(dpmM{PaB?)$RjjePoL|@;~eD>Rv{_JzYM{8}eQb&`O2#1PCq!yCdqN0G2
zDr_03Zv&y0$d{^nYZ_3_ntVVn*@>C0<d(Yc%38m;31&5_gNwrVj>QtWflP{~M<AgS
zn7B#?Jw8uyV(I)8nyiq>13y~+ickDaeY<hZn?a<Y;v-JLZ~`h7_#X)Ga5lX0BWrop
z{OXjM_2%Tcw}>sVNX{j6E0vvkrT`CGDkUZDNyXLPcYz!U2$5lgd?~dC7GZP-6%Ciu
zv@8a>w8YTz$_O7VMOX=kXjIty8z^?2kTVyZN$9xCcBi0{AoORTUp|=17fm5UJ81^!
zcEuq&Rs9?%d~Z3u;!jg;c1OypCxGQ*q1Y8TYGJZo(-UotBgbWeEvO60H4WY)2jXx+
zxhA|RV2Gew{Ne7D9|SqJxaVTv+IXThEZ0Jt%}X0dx&cDzNNJ3k*$R~b{8eKEC@}B?
zi!|U-n~}XeTm6#n^^MIOtX|>+C9tTr@cnMTxZ%&pnph4jsOCeT>_!Dc0s~O~(HJ9w
zxGhUYW=0lsum-k7*0|A=IkXn};@Po<n$;jJuC>F*S*D<+32O%^*@cW>`tAmIHn<2C
z<-B?D<%b8WiEB35N(n_tTVIo~dfjAvTe_@eU+0xHp~h&$SUKbsAfyhZa`ctHX3<e0
z!EDVJd}~`)UfSuD$ag~g$R=6c7aSr%*1H`=Ld_JMNerQamtZDQh3XeKLY6;-$q!yK
zOG52gKk5~>9`KU4?IpTNC<qqs46haEFMUXl&D|n&CRjSjSe#UKzphJKU!H6YyHyrs
zX-Rmc<t^=NW$&<DlRor>w_G=%@Z)Q%cRrz8*oTCsw5`b+8Yb;y(AY**9y?rAGD+Ek
zAJ>PwaB21cK(^xt0RBdOIOm-7Unb`XCoCu01vhu_KekHM3?(2W!}Pdr)G&H(LuBdF
zX3k6wN$$HhD@9(*IVb%Pi$Ljn)vx_5pI^#RmSKqJa{uM(ynU5$?T=W_6}5GskE7??
zW8=@xmR)61UQftO?FkF;(5!C79-@`#nz3<x`!;$;AlBY96*Wcik%Z%ZS0#36nN?oD
z{L5Wb+Q&t9<(VHAXBJ!fJ3NZ03nZRO)Avr^mp4XLRQu@;eOl)PU+J)&XALg0SHm9H
z|1R?w3xlBp#e??-8NYOUXgmF{Ds-YRZj}GyJza3n055p|0&WNP@>Q2K@y4A^5s^^)
zI$A<SmI%TDBv&P9xm_$Zq$FrFs0do27foxq|2PGaLk`u!zOlREIlo8oZTtL(vZ>aS
zkLt+AiStPtO8MKbgmiR3gQa7BZAk~?TihB1*PL!vM1j7><EwNUE`;(!4;-{-j6okG
z9Sv+rt@H!W_gfyY5PX)y(VUGdq-<(azNG5%kke}9n;k{g&kuT!=gwc{lR>He$OC)^
zl-PQc@5T+9R`xWI>FNCz92%Hm8Xji<pMvJ?AXsY%md&^S&2)Rxz%t!2s<kdKX;KOl
z3)I9OM&G35-t<v?<ww7$-$>j{=0U3IiDEi3D3I47A8qT2Cle+T$dOi0e()-NeuE`@
zZ={Bdd%&?Ta?G=^am!9kNN-@~b^!N+pw$ecHfYURrR)8O;dAdcaG=6c=O?256+JJN
z_B7`;C}|5~WU1}45)XSTVfVLhk?pgqnc!2&;dutm)moWlOk5Ws>}UO^hh|kHQXhoB
z{d79Y28H3uaadm|T=CL^5_DV+@rWc2G2=ww?n@q#%hGa<tY#t&{2q<=QVeKwBwMZm
z`VM~Q_l;X1Rr`~tfy09TA<W-QF2*4RU_}e3mD?bUw_U)Ds$|yXGRL1(#%>0h!`ZGe
z@FJdk`e^*n!MlxI(p?DS*<-S>OINP^z=CP^I*g?UO5&=jV<mhS-n6`&3hzmqrp$-Z
zvE0+0vw2wNrg)~}H$=@eK#iI55IMIoZhyu%HVZ^5y!MFQ?+BOe+Y<>K#or#f+*ri<
z7QZi-%700TKtuo5d(J>r$cYf=lxo)SgjA%(=euh}CBH`O%J`#c`!kB=^D9El7F<Il
zwg$%OpY|%;O1|SMw(GNn!%C!OAs^)K<f^kd7DLm!TBEIRA4qXyS6^&M*Z=_rKoGve
zkd>6v?(1*D0C6D|SWH1Upw{7Uiu}h@0R$azQ7X~Xv#WqJPe2F}QV1(w5P1Fg$YMtC
zQQoAiA4p{;L_d5-i`Sc&Lg;&<%X1Ud&~?^#FUpFM`u5?9w6rtaQso_gFH$Pi7E|Dq
z%u$dAWf~I!yhIAY&zDWyn@u}mFV*Ig4!is9xE``&OGSPU6VU8da2lRy;cWW=HV>dJ
z&9GeU3ajk6NW|B#)`KQ4LRRmvx#<SuPqZjGJxK>2ERq$NudOJhbT~dB+HDxT>gLZn
z$j$mjgTnR+^C4Rf^-q@2Fc3iz-1z&(gxL3iJKwnB-SY{^h073f`=f623JhDNaEI@F
zJxu!ftA(CLU^|k2Wy3ehHTylP%^L`nCdGx@|3}6ApSM~Ci*cumsm~Qzg||jp86$t<
z(WJT4#^ISVxqwn7P@=UlAUiV0QhdVi`fT;^Oz^Y_j4}Hlhn+#ZQ!kjTRM&aYpP#dR
zN)cNs-sd$Y0W^>!yNFLZbUBA(2S+=7B(j+$VLgOKmNS6-pnE(Syb^1Ub7*6LDKr4?
z{eo+<eyy^)(03O;*>JerjB{%hc`cU)rd(m6whqL{eAWZb`ieEs?u5(W_C(sr5rkOa
zaKm<LFS)jT7{)o#jEz!$!6Hw?65-kp)mMwIHZ9d|NFo)SHf-!~CVU(lMe~HS-|UHp
zI+v8UxyOgCp^Gn~_$AsT_4OAHB@M*}4FIpaL<AhEmx#2szeXp)7^)lz2yhsni`B#W
z0sd`;U17j*h$puW9aeGUDlQfr^sOGLIPO!p><i+XTtWH<5`P`&vLp0DNR_@}vKxg1
zyO>da^<xR@JkMN^L7XTsbHz(&qr$FhH59C-n7FUM5L}6M1AZQ)nCRubvjRlv%Q=%7
z2@nG<H)S8BcY9<IuPEz$o!va8mGzZ1G07*zVx<U5)x?zIChs^Hq<o_3dGHN!%4EY9
zYi0H}(y1Lxk&!3jmNW>8fH-4QAt!ntR#0Ea4_c+G#z?)S9rQtYC)7xW;EPRL|F&j)
zwOJ5Br5IPwE5&%Uw@7u8FV5pSo_2$reNqaHz=Do3=q`KP)iVifrS+k{U@P~!U&b-%
zsvYi=x+kT@MK29G>T{3RJyRX#j=#k5B}_|ygzGK+d-g|ws~F&WPQkO<+5mR#zeTo%
z7?w-lI+z&%*tPv5b-Xd3;71#}ErOPqlw6KZJ^e6^PZ8gPEZ+0Xw9tlr*+unOQ`Ee^
z$ioZao?8#VHPlY)y!Uz(>3p5#Z=n1Mj*7n5lHInW=E)fis;R6sLLXLE)Pg)gZjLC%
zM-xufJ@b7G)c_iEJW73=EJyiNp6n5KEIhKni>fA3aznK!or(gXN=9TY5SOnkYQ}cT
z%2I<t^uZ^9BUO6{HCDy-)LPOtRh&VIRGb-=j#udxSk%xW1IbcSCP$=CEc9==-3SM5
z8bVV`aebQXPA=HZy)*L;@bKQXaYPS{-@mOlCzf9=lNP3G?S8|-<Qx7YKBjW5K|lxV
z3Eyi<#7@btVQQ==jv)<EXWeT1aM&8SOa46#982+T_5jhURAJe>CjsNgztm<sWV#ay
zC<wM2<f<WHG|#^((CaB-J>f`5bL?Ls(-Y9}`jBdyts$#7SM=V9_%zM}Nz)~oi3qc4
zZLu9jQaxe4Ahm}0i?Mjxl7KHrSgEv(paGKNxcmcAm73iHgR1)(t+%E3#_a^{MG6^J
z$+Tcj=-%2{cp{iSWy&OM!kiFlB_>VTdFKrB;Z}f91tMU2M-|*y$>Ez=*I`WRl^*&^
z;%(F=Qz?#wgvrAPu|#p2cr>X8XbV~*ziIl3GEG%Q=uS>9#oAG8s%Fp~0kAB!SU$bW
zHH&qpG&i1c8wA@Bn<^!l=1dkdkfuTM>wA=3y9-Tr(WR-qus5-leVbvU6k;(&@HE&t
z&&|y6OHCD2v+U?2=r+Px4WWisF5+mIYoub`dV$EyBCJPo-3a@Ptj8E)Qo*myFeI5J
z@RwTMaAr>d&J>G-X&Ul?ugDL76Lh*0ri0m7m))BF&9;Co8V!{A*Do*66_6n4p&>+g
zkj5Na=I-ro2AJ0-l$Xiac=I3_S%)wX(K!ZmqZnnGp|oO~(cgsRhdt7;V9aYpK!q62
zs>$+G{XiMX!0ytk2y(hOf8W)vI!6s*4GilJ4Pnu%e#;*1#QGDL=u@&EBSS!*Afe>F
z7|CEu1>^C=YG<lMbZ|(0KE-eeWGj!VJo0KBa!Rc%5%h&pzQ3Muv5oK@a<GT5n4T@6
zi>L?c=*^*NR)alAbY?h;lT6U8EnclgxW~+kWS#cG=9w?IE+vx$4KSJO0F<ClE^#!%
zZD@pt{R|N@>tLjzG>_O3X=A9j--ga-?_F@Uym`AS&9tAY#`!)1IT%|B9B_`Eut^qF
z+z|df>;<ov{CG06ILmXWW!5K+ATW{;;kan`MPioe;qEQ}TY~_YVitfIea_*#aDUNN
z4-S^<K?2RNkN*$Yk^)#;MbZI$e#MIL9ocxjRFKu@_))Nk4^D|Jj@me~M~2=?4sO7G
zJ{V_$Xf>!GOVQvutzB7I94T~4_6Z~Ok_s~p4CxVH4lQBQKW!xldvk0Xy?6<^kn=yd
z^kJlal*g9R-uV$29MCg{9q}%P8%vJ9@n=+fYHA&bi4X8-CLhbaUlxzNF-#7*`C&xf
ze&8$3h^ngYFAs5!WkTq_R^RJwzHcP=6QcF+dZI2Y0Ro?g@sY?CE&vVtXtuo(H<YLF
z1*^Avk%=tDQchmrl6vfXdHEGoP0Fu+0-bYysCp{1MA8BNkINR%&X!^wr4C(H*B8WX
zp&{w2PMncxi7z^|XmO3O<k?zVcJXVE0rm_S1_AoYjy|Aj@-OA|<11{|ZsmiV>`wrN
z{|&U|hyV?>QL4&IV8mw!Wyp~>UdKMJQdr~t@)kA13f+5v^HZ|Qfdhr)0ST=bXUHzY
zGqG-zaU3gJ_|axs0wIaoNNPcS&IToTaOyn1%5qE(dDf*JXbnr0q}luOF(VpY5}dd+
zTs?XMWv;nUf`qLe0%nEx_-Nk4M6qD0P{yxRW^v2rg+h=6Rn+#r{6;Li9ubX{3sv3k
z(*6-gv~e<bphQ$CnW>e7ReO~C9d<R*efLtU;<`Wg8;Uq81pi`O)QV$$VatN}9fq!0
z-f?Q5XS5Qm=QM75kO)pZsz8n4gV)qgH3IlM@d%v`m;{XXg(nE6n>(WxAx2OgW`J%x
zBQ=x1=mraz+Brb0kN?8aA2BexIYwt>*ZwcvuwZnf_)-oV`+9-~61n!KdVhave(`PD
zGucZwAu{TqT}zMj&bjWLfUx{gpazAM_n4v&HhJTofh=}MHmz8^Eaf#i7Am?jYM^73
z^~1wchIe4BC6ur%7o<TJX6x6`m)A_76)+BQ-;k>{yg(qrGfGoxruZ33ad1P<^925m
zvxyK{0#xMio3|40L95QQ=2E7`Ml}!>gL~nf)to3%(k+>ELZbI3SKtzGA2}-m2o=9>
z8mJ9<8N0(>oos{MkgzenArpzB6h8w!Ab4)04xS7n^WV>QXGbLxN;lMGZT%^5{`KOl
zW^P=03Xm~R2rQsX*~nM-n;Px-Fn7#>E4Lo~FI4=GF;wpXQ!_nF2*`jJ;tuuLTjxJG
zCt>gFnd@Cv_>d6OPPclXX4uj847<Z|;*2^CnCujeO8da0OXF$d>+awuiD(G4MEMuk
zQ~qWloC6S1PpW{;ZIqSp{iR@dng$8zEyt&1-*{b6W@Ejs&9jg_0teyd?Dw~UJ8$g|
z$w|+ty6hoD)Nf>|<&h#TDOw_!_;2AX9Z5P=&c17NJ#^TIuY2KxZPXWKn82<(sUQ{J
zO^ub;a5#ul*G<Vo^YgH4AJbGhiK5}#)au}pQ3(9)wYlfnn~<Ic$G(R1`3Sc{0Gh@o
zfgE*V5w!mBFJq=21amzU!fOoP{SUK%0aFH+G$Tat!4A+Cia2I(c`$%Q-d*XIk|LR$
z51%d(4=4T#={}wo!P2E!suat!L@A?q8Sauq2fbEXowX%Yk?Im&9LphntHW_g-ngyS
zH-@X3EL3bv;UNkIf=D96iwxWLoiyE#F+1A&f@p|Kyya^=#n6Ul9H(I(LIF;;7!*R+
zT8cj3b>}^tz%mY!M$xiv5PpQQ&Rvd#y{c43tWpJnEs4g8ZXss*8)<q9-kaqP*=tJp
z&N#Zd?u$h|@vQsWrL{Cf_aV1!JcX!A>IL_;ITi<r$8vyII&B8a*C&bFqj3M$jz79!
zg7ZhX;y+#(U`@j&ZvExX{$K$sUfUs!w4B%|YTxm`pHCV@84w^cs%tt(L>7AyP#LKo
zS}PY^Ol_T;ogQDn0tq1)FdHk=2(L11KGE#ndS#e(Jj&VY`x8S^<jy-d60vULfGVxJ
z?&;7Oy93SfMsI(GEEdaPpqqIKx|(135$U^XP{vl~L9cL|#6sBU@|)+9(<YR9Jr^%x
zF6l=Q2gn5yDyvIB`#7sVoSgaYt84mnm|FZ{l-a~KE{mp2i@>ckh0OyI3itaP-dR&z
zfsPYM=0bDN)B+qkyAM}u<^rZAgBh^M_s;-F>)0q{>4C#<v>lUySqmcAvdtKOJMn+{
z@_@_A0s|5jsc*1PJjoD})i1i#C!NoI&Y!R5T|3{xODo=}KMME`R|!-K<)gGhP$5h5
z9XwC9in{&wqB1F*uYod-NbbZ3u_WycaGaJOP>O_zrQf=_@7z|fJRPqjzVoLLk(UFN
zAW%u8v}n{U)M*R~HdpwNp}ET=N!SA^5NcYn?pbW@)&rMMzH@O;7mkSb9*=~<)7e2S
zX&8t)3fQCg$S(wqZof9SZ!76~3Mrk2<>5NZCct%UZ=&)^2@ANQK^BiuE*6@Mddb(w
z2uYvwaNrvuGct_$u(f7h?phXE0%XV}hoP(I=iTtX6uS==tPtFb>jTSQT=O6FzzFDs
z<^MU^HEn?tTL=RRQ#gG+mv}$jbgHMFTpHZxv|Rfq<@H~S-UXQt5Ye(wV&f*iO@oR@
z`wzl1N4^Lo!W}Iq<RrBami`Qnrx+ed4Q4(v#)slcbIU$W^#5+&b+fHCcDtXRy^w9d
z_ww9(>y=xPq^tYa<_!m<%59EkM>kA(pQG+saYQ&*P?E$L?GfM#6f$%CGE@7nZE3~*
zcz+nLp?Zl-W$spQXn(x?@{oIn>3E2A)<gn@zy~)$y4iM+D^-XVQ;(FMsiZ&&uJbd3
z$<`J(p{}qVq?6Qz!i4V>ub$0<X6Qx$KKvz)zbyaI%lrcKfg_!J2GQ6S_1MZ<g*T6e
z=k++ab;5*uc7D7d#QbdOILTO>CG#c9`5L5ti9VTe&r_uML$dO#W%}OGlUnBfM--Xn
ze9ENk3vsp_4cQA5Sz{wt&77@QbWXmV{H=F)XXAn(2qP-I;dFAa;3#ZEMhG|)&QGO_
zFYg2e_(u%(3GBxUV3Ui4B#b_&7-bbg8@mq8xzdfKZ_Z^pY0VFvR~0hSOy-L?GN12X
z^Ob;ZnO>V<!}$y=e3$%Oq(o;0*U7Xo&3AnK{!#tNP5#!9MXh65hLJh-i|x9Jqr1fL
zx^1tdx}6&i9>n1EXC1*PgK5FiTZ<S0p%_{1LCw~DJ7u=F=7WoI_Z0q|C=;%iQPGMs
zAA}7ylwL`1_#Fl6ztE1H_xSY4S_1uyd6GhJ;&V0M#wIV0f7R&2x%wYPm*c0r^yy(E
ze4^{0>kW&F6dUdqU(@-BV$XctZF`|T6l5lqv!Pb2Ywq<S$B(O3P;iCJNYwA#iUa|i
z91X`|C*PZ0L=9{U2o6^8Z!20MR`CS(TK;EC$Vcc9|Nfa!9xx?DDxe(W@<(&Q(UD5?
z_qd!Qg)W`Aem%=)@sVy@ARO;8jX>q$cne=;J~AOUM`B}@j~%3(eWwfy-rlBa2yL0W
zFFZfvwkVIj#(6aiLfg9+RLUSf=dhkTM`qH?EeCdC=tZV{i4XQ7Y3XI!sA<ufqsfru
zEOVYVH8RgMx+-~vlnrls{vKoIYE<*`a@Wgzmm_DWi{W)Dk8TEW^M@2BH&l$;irXJ%
z?1Hm$eA7v~9XDyuKkE0+6^>9?w3U-{=Xh2;s`K<JJh>eU<{R<W*m@`+=CGx!7i*<D
znl+hnRma(CVf@nWlp%O+d$N*jSOP8}5pOv}Y2fPkC5%e~oWKX?yrgTg9RKhQM2ylA
z*v<SEi7FyI2!S>}J%Q>S{m5&kvcbVnX;JxtpIzqql^P|_MuLfWX^f|eI5{pJ3XF~K
z<dmAgxs1dx2yomFZ)$C9>bZ=7$mb7&W|Fz7UA`qJisQJ;6+E%eU+9UG{h<5dGb?06
zO5U2umYr#BUTu53*=Doe%YApHrSD<f+a^#&(OmQ7a1HKbp6~mjT7#ds_~m}a46UEm
zs;{?a6vm>;?7X^fX{bRa^~{KUI5lF;)n`Ah;$oM2=`k$iT{|;n94aE_r$$}l@jUb-
zTift#`@Bx0^qJ9!J>84NL#611pJ6}^MA=%Yv}hN9YrXA_1Ryb{AP*B9#7_3#tbznt
z-nWJyYXr6>`-eCPOk!}<@m){e0aC>f5OZ&rnrU<^{w>*>GE?i0{wI!O!l7kqV(2qP
zYN{a+JnzoimEf1hWhIw8_J*{n<1YirzvRv7e%=&vv8%ZpPsiCYIaUxIw!_v_^v_$m
zPOo8CGnmEj(AeU$r!yb?iA~7lmV#=4+~pOqsA{D1SkzP51*|-tPEqqYK=HWA%e@eo
zW~ld#EsYL+k(_>*Wj~S2(z>csf4QkQl<EYzMG-A8!9jrG)MbD4$?;{V^=Ai{=az%0
zK53|8H}!myBiH#gyhJB8`5L8EyUdP>nWKVI%*j&^u4_441=#_S^7GvWwwwVc*TF=}
z6XYQRBa9d!=)#LQR5c&#AAtf>#)refhf5_F19BDsO>1~rF@N#RQSH6*^O;YcC3eJq
z+0onS>?mJ(Yl+Ql{7v@b945Ez`QZMV1+X2BcB@3#&hDI>0Ajmpa`y^B74<gueW{f?
za*!N8fUD0_knCN}t)P4Q@fk6>Z)7rCj*Uft?879*<V1~@&-$z7jk&2?wzhhoLtmAW
z_>av{oZU##Dx|i_Dx_x5xeb(3h{P8p<s{bXr6k<DJ$(JL9>sBdhH@|y(T7{QG}B)1
zWU{tpey7!vSgn_|Hf)%~N4vCtM|9$QCx?xE6pJCxN{oDBjd_TW_g=?DvGPMN2GKiH
zZ&%2!*xseSgNOugYau@_z$BEJ0HJCUoPHy4fHyiITT5p8Fd(A*`v*K8B^-1t;N1)W
zJ~Hi}-yZxdr#ou@@=&eTkY=W4MMdYf_ruYd^<2K|LK<9fA+aJ@jGa?8c*~O`NxP~C
zRWNO|Z8*T)^$c`uEn-()G|a&x*Ll2@nsV>crcO*Yr<ak<r#<+roDzum<ItZz9lXi6
zGB|#(8wAnKn)>E-cDA$43h|sDK{oNVhBKXt<(;`3wa^h+m($_*DxG(ec-8c_!rJoV
z=7WzV0boq$6F&IxBVYrXNz$pu_ckJhHeSQ^!sfo#SJV%wjo9UrSX!5ibd3%Z^HVA)
z@5_yt+_UtxVg>U940qZ(FEY5QgBsoKKD(v$PWdef=mx_fh(MP^VpNa=Eq>7hqzj;P
z0J#Y9zc%c>gaCRAi?x*6-+vV8Gx`w$!*D`_pF%3J>(=1eFp1ga^!E3!IDGw3B_&R(
zg}Nm<njb|2n6ebd*i8wo8sCyT7xM#;o4QDeEfcZyJ{KWVX4wuGhB8>Nvan4l&#>W<
zkW-^%yX0t;=;)~pA3+P`GtD^_4fGb83Jl**rOW)BtP{v_)9b?85KGZPd_HxSeKb1z
zy2kD%o0=qbXwou&aAo$1Bb)@s#2qhRpI3%dkjwFp=16bbK(eLuq;*B%<9jb+V?M=e
zhS3E&{t<hsFvGj@^rpNlJMCKC_dD9+BSQ7*nkPmk-ot6r;`5LBEFLSaZMQj+vH=j3
z13u{NWk3|?`Gq(LZ0$>vVptS0|JrWb8w_YK6#QpUvGz@b4W!Gesn&!XzGsQ0Uv1OP
zY59f{`5jUcWNxSo^it+<2%S1Hi3w%-+dR__#L#_8>~KI{j~m_jz}ZYIh)Les<|3~3
zU_Hxy^dH;>-{Xd<Q<Zsfq|G$r3pb<VZ!^d&QW6<in3&AZEa()$olT0O=lGj=^|xQp
zKAQN}C?Zhv&~$+)-TJSPMEfJL_7V`8&HG)1rMI;B@OZ0odkn2aTrDEIK95AqJ{2zJ
zpR`xGoIhD7sCE44Sd{Mc#`1{L@wQR@39GQ;1G1C+{QQ*HO50QYaxrcLV{gJ{;KDZ9
z@21VXhXsN?yl)TL-r<2Mmn8wa=fdf!74|PET82SUBh|Z(f8+~H`BV(hUP!@f+#tw7
zPW#?M^ZMXsYsx9pX@P0MU}F9AGFH!RWuir!Hz(Fw9Ux>y*>-wt#W`2cP=k%ys7K$#
zyAYL~u@SDUeGAhmNGQi{g~N7=bXHBHbOKikOPG#MBNrxqd@sviarPO;CS1>dnXXZb
z7FyDFj;*(JxlZarZhhve-h~A{PO5%v;AX!-U)Dy>V%zHdOxfDd@XkxEP~*$CA{=F@
z72K-8vBak!@~<ws1J{A`JAP&e5QSkA91o|c#UeYVS7&8pN1vBuhH?o+Xqn6h`%_}J
z*WZ4@JR0+lwZM;Rp@N*}B`z6zcL}%B-DAE(0*IppBaW+?6~Qm!#KVY_Kb}|dCvmDc
zfX!gfq~mM>?$JW<bDU+?Y7tW4E~TI>DOoo^f4^H}Jn!?uAV`P%N7|7W0z{cve2K0o
zJ%>h-a2bS&`2+rTd^H&L^Ie?9xh)Rz7!mG#O_5=KbpN}Jc@~$6e78*YiQ?;FwGtaw
zo=k~!VR$f3;@E0SnHPF(u8K2x!Ae*-D!tjxES(;IMbc{uVOl+WKMpN&9c5$+^I6MI
ze76{k=J%m3FGi~;hno<y&-R2{H%Gi`AZto<Q)&2V^>_ECTLmeJGDW-bT+J$pe4Ci5
z6BaYEyZ3g<HjlLi)q`S_(eUyFZ|*tRI@o&o=hyTCjo8Rz0N^12fM*mXe1i%G#2^V6
z@DS1yNBjxRA(Ucpc@Rhw5(4-_(s<p7<oj0jae>`#ui7lDWJ0x9>Sw=wcp~j}mZm+a
zQ4EN(p_t`Uf$5v94NNfsj`Z_0>uOYpBDW}DvpI??6}Ov#M6N38Ff!jTy|(2~zG~S^
zA--;?t7S@-m*eU{*%aRpWI$SJ32~p(7#{qbe3IS#eSf`eFe7d+p{~Mjh{ixcj^7}U
zM!3FahJQHGuyEJabaqE$!Gdp*=XHI?vF?<0u(d*pPUqU9+}!uBnuYavk%n|QDeD>Y
z6bz;h&P~z8FB`v<Y7R6-If@W1rR9QWE_zR54FEOO4p@LO3LVJ5wGt9OVCDq;Y=r#F
z%%KO&9Am^ME`XV18DNB89<R4_FUkDXk(r4eE+IXEzD>nL-&3Y=@L*CAt`ifwqeSzg
z91SJSNvu+_)&vLPP3C?@?IJ00PL2CVWZ_*o?lc`-{988eA2hWYPc(^2e2$)$xO=z*
z?t>08O+j6W^_E~mOscBWNIFK)dwJ*p;7YmKrHWcA$1Cx?d0kpku)bbflP~A$GGTwc
zNN<x=mXYH!{A6Z2bAMsU_|1L5t8irDEX&<&GU~3EKMS$k2elqv%a-v}K4b~Zm(4&G
z+tF^&cw*>L%=_NRWk2ZVxZ^_bIdtUE)w7QQpaO)Y9X(SUdItUFJN35#-qf*UF90`x
zD{bHqMF3PfNcnXEUUCMtzG;yqzkT^y!**JKFj?t!dGtcfkIC@~>p9w{>n}%YPb3lD
zP*Gc^gAsY*R3|?v?pZ4*PZ<Z@37GG@Wjwlnqa$kC{K!E9QPovm+RR;(>2kEFz<lxQ
zWy$OrMu}f1C6iWbUNZB$A>-r}To)1_gO>BxAFfN>fu4&u;bs;y?Y-}J^~{D(2+X%{
zMhkpeUL46bupVny<nzDSGj;p0>pC1)zc6R#BD+tTpvZJuWPOgC<UKa@2_Ec{v#^no
zDZ&Sz5bCqu{{EhiwSd<CTC~P~0j;UROWk_zQ$R~njxSg1h*hwQclP2TOhCHP4m#;I
zgMEIR!ABf`Qo6}>2BhR4`he8^;iNeGVl-*~Az3^w!lx>^NRz^(Uk6IF0_Ra9Z=C&c
z8s#zxK-N|wG-B9Z+W)y+HE?1Co(aV-jtsbgnNjx^`T>6)(t!(@QJ<aPef{SwFl`86
zekGcw{iKCmOAHE}R~H`8B>cyf!52^b;es7Q14I9FGuWZ!z=@{P)4$a$<vqfU@NgTE
z*1rznL;{O}T;{DF{&6)qDu8eD2`vPF!N}8Y;5;@{V~2lPGp$fcxRuP@w^V;T=>ILl
z{e7yK8eksKGlixr|8j0|s{uxhB21h6gXsSLjv%nug$1J(_>Twu|CbQ9%Ku+o!lsrg
z>+u?MHNr8u-y(eW%y=ab>1ez=V#Z;zRtD?mc&%kUkV5@Ca`emi3}gmWKrxL>^KVrA
z^`$IAKo$Z-Zp`&#_%C4;O8_D%j4w>d|B-s&uO3!FkEV6JBK?yCY1x6xIkVXO;#|sj
zBS7vi@!tLNDF2r03j;tlmt?}ve(C7n(ih(i*ek%e<DY`Ci~V2Suj<vY1#AOqoHqZA
zza%KWsvX!Eh=WbHPPS15?~fM)-mVRJm4j>WxX5oB{h~pl{xUFD_BAjGl%WY>;Ws?I
zbwbMEbzp5+bkkc|Om6<;S%FulgS~n%ihtjqA}O|rz@k|m4~(>3H%K4`4AdP2LG_`J
zuG=-j4W6f4YDLP~c72avXLF2I=<!?6)!Ps72jl+<KX3>kuq(%lH<A5GRM;T{v<I-U
zen-6|j%M30Hb=78Z;nSt-Leq>MvcG83y@D06<982oxP}kKKs3n*nm$V8z^2F_1`Cf
zqyS(SLyolgy>7t${yJh=23SE~QoLEftNYhUVlU8uYmGP;P5tX*;3(WkAVwfz@}2&_
zzo2{y238pjK0)u_?+k<$%3;gz`u!*Wzi$GEaEAlnY8zLs^nYIr1R%VWacE@de?KwA
z6L{iW3RA(~y!+2%i;cs`BB-|){m*BA{dEc4B|((K=FjE)^_9O2z^f=hN`ElRFOGpQ
zsseYR8yxNWH+KO++IryajpHaP{&ePG8jeyCc*joOj1#0kEim9}0jBuCHpQQpg&zFZ
z7eH(mP=5(Dm<$lHxA~w&?_;HOp;t9N-nUn$>%ce<){?@;(OZBG%z^p2N5F`o!B4M_
z^MRRoFMuY@q2-RC^@A=f_wDLGG^$t)Km*x&Xi?jL)AK?LcvHW=&=jipIt2cCrywC<
zQf>V`AVcv;==jNL(wdqnn2%sxWX^L3z&(cwQVogENm2fIe_3RJCIg&<C(!?TkpN?W
z@4&qR<MN<H`F0NY@aSj^B2Hs}*le6fR}AWKrZY9>+^$<1Qxf)rsT})zwbe4l^Nr3m
z&TCJaCkvHG9s%Q2--`c@TM}#l#(e2g*!;Z||KJ%o8KAuwCc*#1-g}2*{YU@fw~>&o
zkd>XXvNyMxvXZo9mQYsqhzOC*yNp68A=!J6h$1W5dt|SyBK1A5qH*{AT;I=szkhz$
z^}gPhtNXs6uh;WD&wQNoJSSL*NgVepg{L!g<28ZKfV`!=4Y#1}UlTMGIZh{H5w=vh
z-BLLqv)U{;C}A|@481d-IV}xYQGZA{pK*CnhRzKa`lOzSk#x!&JS=d{KZstOf_9Gu
zm^$Gc<)zE*F^|g&4YbAYv}wPH8=-*gvMWQk2~LE&v~v18wCsLnHCXzFAODu?DHIFI
z=~x9^rm+MY{9RK0FZTq8r>R-gBzeum<kH&cE59Z^r@@ExIAIEW1n3DArCl^ikqEzR
z_iX=XNiYQG0rz^U87KA|))7Bc-3y)cYu|S^o!Vh&-(c$Gkpaq6`En?hoEnG%qA3e@
z>C7aBaIj$H+Fwv9!odlkRPnd)J3MgZInP96;m6e^+Rt=+Ill!hhoIFW$D#uaRJb4O
zI-9oWam(VRL6yFc|4OUu_nty}n`*3mvw=k!k43E`4espd9M^eq4TrJdX7@&Xi$fVF
zHd$W-^gZn_>`cGF*F8nu@CJD2Qi*Ny%ZoYkFV1J&7`)k;8lH7>|1ng!!FLrlmh=l*
zktR)%r+f(yDOUXllZW0!kv`mIQl{I;21K8)?NNP?fxHqxnc>eiwp-!KbBC#*j9~z?
z0JNw{KU3x5KGXixZ*Zu>t!UbUn6K(<?pJ76nrk&Ev2D8(ra(gO&hI|x&^`INb_4o&
zJh1F9?A`tfT`Fy1B0%X|1wWF9zy@X8TP(%!w{0Ey$>Ijv8^F_#C(=^lBM2xt8k3X)
z=K~!ox?!|Pvdikn#r4ueBTs6B+gkZNs!_bb5*ISBh?{r4j9Hug&{U|dKy?2gu{API
zQNV4(!tKtI@D}zq-297_^Ttzp=RDfk?qS`NU9))O#7GlgmAyvqVg7vep-<4P?9}Aj
zhl2_*n8&j@PO^LPX4&@I3~NkGjDYK!nG4(uHL1C~&q|N@>huAZlq)bH1ElYD>diR2
z688`q{@Qy|`7P}ykMJM^eXTwyDUcqyz3hc_IN8wbpW^wDejy63`1CHdK<oAiX_F$;
z=4j?V>lC#|LZ^hxl9Hjhgw`;*v?I)#YV^dyv40;q^FF2N0AKmY{M%^$tIy7*on7?M
zpo3PQ2lXD+ADivXHc~L{_E-$8+EmWF{w{Ysd3aQ>%+W=&cggPix1Grs>6rmrtt#i(
z9rt+if0Rl?g6Jq`1hxer1Uk^W*L@XD+u`R68!ud_g!y@M_P`=tUtst!3&)ueMyJKm
z9U;D6*74WDfo__Vc#Z3qm)z~$da{kQHt%;oKc@X$5rl<mvyww?MBiG!^d#e*uPZ9`
z0f)xBg53*U+8Oxy-VV-<TRuxpR#F>bHP(MV<<bf~UFYy7>pp?1qHwZqk=0_}5={7O
z1jb;6&Ksp}&HY&q9z00BNhf?`qU-%lN}eIpjfH;E?j{dt!RSvQT->@+c+|1KnT>)!
zF~~pUVNrCpx_r0fCLQRe%}@RW<%)Vo+`gy2jgQN!+&VrhLHT(lb}(<IpfRgz$fzNN
zAspI59-S4}kR5ZM-F%08I=8@k&ut*H!lIlGLawOwdb|!{pj!-iFS)1b_Vg{;avVw!
z9W5#bR9ucivk0QUZdQGN2+gDhMFw!0>U>D&t6qxo?NH7(&t+BdZe?{<Bm?g_&fqNN
z3=~2_Ri-<QvY%tM_EL-3IFaNlPwj^7w7g^VK)H>uFGqr&UdOVTov|R~(Jefv7x60Q
zevNp_6AA4)WE6(<wW4={H)jS)^1ebJAFU~Sak4mf`6%bMWMSjLmV>vT*Ltbn>dhp}
zmpbW@ZaXk!iu;NCM$F&^(zu5TQ62sl)KDyMZ-8zqQuQ>`tJr{{*7uz*6<!@OeT4FX
z$*7XOv(s3VKH<n1vZV7vNva0Z%`|;cpnn3sG%ZN;aF7|AnyaX*7c{`&_d|!pYz)uE
z4LAZA((-Mz(*>SB0mD9SIW7<#zR%tN3B1m-;Ug6nEghayTCZH5=r%ANpYF{|xeYHc
zq#F?OUyEWye7se|N!bdesDSnu7Gu->D_ur(yGEdvy_$&ZpEM?Db95LImb$E&Nn$e}
zY6Mg|ioGqF3nmV-mU8=O)MxRfJr*)&xwEq#<<5^h3nc&RSb(ru8`_=#Ye|5DR^CP)
zZ|m$p^Uz3_ER57l22-?HX*F$20<DoN-J0n<r+adqM)#6jgYga<<-86?*JZLtQF<C9
zaL5I6C}MQb5!s=krjqcOee%#Mj#qr<*?-SKAUAyT;<r~@Wi3bK6$o1dh=p%-W;aQj
z-6^l{r;^UxJR8NUSL(0--@}I{dNNzntaQ9>?mX8y@MA=+<D+}2=PN4*x;@PJ^VoZm
zmF7dfB&(`B@2nNmM)Da9rLhcAFP~&^c(5%{0V8k(oR<v|FTi3DY_|rCvfcj$_+jv7
zpa9C~`hlFLtIh^PbIwDyO+2=s%E~O;lDUNvmfI9adneDuQkF^uY#0Q(iZhcAcAFes
zb4yWrCGKiq4K8>Faf(<&02dgKJA!ULNXt_VLCfOW=CdqEV{PtAzMf4PHrT10y%Qgs
z^!;!byEx~rZ4ILbQxb7Cc7`3(WA!3i9*jLG1STdzpQ%dKF#3CLf%aMykFH2k6LuY!
z1kZPvsFL*jlc*qJUHXks9)n7$7mG)q+>W@aH|66*K$N1smDVuMb8|%R_(=Fk#{1ES
z_pw~x@bM=&DOMD;Z7z?k)pR+UOu5kYBYRo@H<<S!kn6U&XyFix11)6pGj3j&@sFnN
zCZ}Y(rJ>~hh<b2Qy1;;go5De6D8z{Xuc5B_I61#ji1UZ1A%{Lt(DWBshelr#PTERR
z)txvW$*V_OaPA&~i(>Oj`dfVBFeYozt%28xeCh7kWo%a2ZyeXgH{`O)rjr6~cSthy
zD<q7uPc90VUTK8!*pyjtk@2U_@FFA3##P4O|B(0ZxCsEZGg#L>Pgpww9Y^@QzP6x7
z^F5$LzJOsh%2c#}Dw0Qc-j+f_+lMOd#V{^i?uYj{r4v3aOrr-gQr7Lba`Jf125)AT
zD91aG-5=n!Yn|c7myq=4bqT+)LOUaHh$EZa;Xd#9Nb^8~sxLDBL~H7*Q~sR>db^-=
z>F0Si9+YLNURYZk>>mu(Tdb8H?Okp`CHjHOz*}msFn^XfUUlGI(j%-fP$Lf#75qwD
z+u0R|oX3fe>AZO0#yxbeg{h;`-A&T%9>K##7#l8olS+3p`xOb&xVG<APLp0;*N2_4
zM_BSt9{N`iG^v1}ZUTnH^?n?=LIZaeI}a6~KDUH+0B>C4BpBp}aJRe3YW2XL^z$In
z&uHN4hY_Ek!w`4PJl~89`xMKFd&zK;(t%6ahH{1R4flxG*f(JIKum`IychHcI~(u5
zamnp7bU%B*t{Pc)K4;sP+;bYVr`lr?_2#O3q1!?3;vhJ(0laym4`4puNujlogL>C%
zE`3r^z=yFw4jP9(=bgYN+seH&Qtd@hkeG^1#voxI2C;F!NNQr`fM}jITjz5a`FN?b
zt4vLK-q(W!%{KNOT4uk!WEwZ=sOl|VdRv)gvUDz!QjbF+kasfIap7{>l@eQ)sIz;8
zE7%a_vQ&GYeE&!E@WYMAj{y%pjF@v!j)@3+9|3wga3+wiQml3HaWcmQgueOfXV0F!
z1}4oovZc{c&j^>v{yA1&zI>tEQCGAA@%5Q~?J-=<wqzR(UoLz$H#a|<c9xxA^=40h
z%p_jYb=KmqpPK5qua3yf!lc88`;XjiYdJB>*gT~S3&E%hW?BoCX9tx~#zW;U9i<L8
zVT5?)){E##hJl^ho@F}}3;CVAX908^H-^efxUUqSFrp&vb2dHA-&D|e*fchLdHvjv
zIvsF`4H19xV{!WpOj}yZ2|EvZdin_&elc1On{0KeRnu(7AMW}$XuMk@o6HYVfOq-W
z9COw5fKB|v#uR-!@X6nRJ2=WKH*zIKRY=I9=gijH%+*(nr32OACM?Xru$?CJl(>)Q
z3ci2(1}e`XinWdM(D8HG4r{*lpn;!V%DZm0qbRZ=j7n4u;MOhV4nNr|p+xTK4Abh8
zt%oZ&zRjkMM%2b9R%bzWe@B=pNsgSSlwK7Oi}}KD0!{8E{VO7l3w`WY8$uj3XDqmA
zUnlN{@aST&Og?V6XZ`^!VDcr3{6}7j?LOKAhfL?ixg5S+%F$D6?B6P(T*eX4y(E76
z6E&TvRlceMj9Xz2x4M>233+|O(tK}T;@le_URbQJ!=N;JrV7{fh;KXFP2?x($%{fZ
z4U-&)ZrXndZk5??X6!JXk*45*-Ly>}wvWN%0hd2VE?lwyKQrknJSK|uEC}gpzq`C`
znh23x40Bs7Ihu7Nb~iZp@<alc&!~>unCB$V2Ir*ced+=kejxJp;1Gm7nqd<4Q#2S`
zx`|?uwLFakVtCUpNj2I>>Ija;GQkvv1idX|@a=Q2y`d<huNkWkjJvTo1p&~++Ivl>
z&A8xqk3|D3eY);E%-U>B%eU-5uMbXz`EaGXhK_}EB7~reUt+Jf+Hge^gN--Mq!G1>
z-L%i_hs_nk6zlo3Oj{!&mVJ!_C3bd}3UV4-!l-cns+N%iLEnSt+rM+meqDa$>ma$f
zR|O>lMF^wsy%I0&8m(Wj4qGCK85_NQX^`jez6c%^|FuT4!@@TnNOBLBIYq&6D4_;+
z>B^lA-S!wFd-46Ir|tqC*rNWvqeId3ezb(c3q+kD(}iPgWwo`nCu2<G!y*1CX(*?=
zfA3^@_X9;#68O2FzDzyozdmhCT{?eX8~S&Wmq5V3U<Ic+kyZ80R^w2g>8*WCl`tST
zb@G_U_JXK5j0#QK(jvPPSAhumhRmyb#CfWjii1L440`&Cs)MBtN^!?_cLS~~_WxU7
zhN)rU6Q4Mjr9Y@=JCgb|gktANSkptUs5!HxffDUCC5I#||DMNSg|EnbT~=^`X%gVI
z-Eq*Ivon47h&@BM$T3u$j{UG_@y<s7Br-<)QN&yd??R64<Z0cbBB&Jz2K!Cq)}FQG
z=D2S=9y6%Cow?bx^v0bSeeK#cmD8tB$A`K@tMjL|$9)fZn)T);$C)eARTGi8kl-BJ
zja{I`)^p_MufzETj(H$Cg{bfZ2C$WcY=Dx0bA~`WW$xYVEcR)4%ilr>&Arf9V3$5A
zjN_xrf1Q<!OZ6N0=5N3eU5XcnAaNn$@S;}*T|I-R*@qVoCAI5eYS<(|HvyJs3wL^w
zRgH1T>^?T%zx<I^YsrH2?IgnM))niKYjfSL72^SixD=zlH>O{KHp57mSajKFACv3a
zH1m-=Uvny!ZZ$9*m3WW)3(#s*2TaaNB6imc_>BU2jRBCQ7278TwvK{A<vGg7Ng2ET
zQn5{<koAz1X3F=kQ?eq(Bj<vsJwJmtX#&Td#5b{e9L703zrEIevhWcesR#JA7EyJ0
zOkJ6JTu5AhzSS*(N%e$Sx0^xT6YvK<)l(aYrPzL@mvnr&wlq8}eFSs~C9PQd$bIl@
zN_!>+V%h2DYp!^xKatV9(VfX-*_Zz&CsGuJ%r$!pBSqt`>PfGFZ9EOEHz=_c)DkCI
zwk>Wsy?JeAtbTE(mJnSIQ_v7sWwR1SFlwJOtCJ3Y^?JTHZ&gRuuiu7dcf;6-?m&Ah
zY5!y0N)YQtdSXz4$sha8LC?>i7A7BPYuxfPpY2RbO7t2C_!jsTTJY*P&i9O-Uj;3B
zD$wtU$3^?=Uay1c`q_EkM)J&c1sC0VuP)kqbL|SqgUP!`!o4qM1WTQk78$!QaegAa
zFt3Ul>${ot5XM&3%4C5W&9$F7n+EaG_Sc?Z7(@RS+Lw;=4kt{F?_*+gon}VR^TDR9
zl8>~T;)^w6big*D`DX3%5T72UZKQ$Wzyk@j;EEm-G;PUun*NX;WoE-xlxzN;BkfY&
zb6pb%j%~q6m29twC<oKBE8HWxFQIc03tx}wnSO<9u4TW7+jnS+dgZxVOhkIc`!J9%
zJ>Jr37IBC~CK09lUPJPocs-J$MTEfTB5;xa{;14<e8&?Y@K|&w9tENW@DX`{wnw&L
zAN+Zh5+`5gwM1+V-!ZU#6pnsHiiFkMwtZh@oN>rXx$p9ZjvO5H0NG|^XRjAOxDKet
zv8@jM@5xn>lp10+nd9_2Z|2QViC`!fN4J-%46I5fshnhoURUBW<-dcWi7{@v?xV7{
z6Dm%_W#N&L*S%Q{Jia7v+6<uTKE8XL45&|%s=AmG&VE{{#x#q;QXSXLMIPFV?MdTL
zuO{+sT@A!T3E?Lw;n0<GpG-de&^TRbK@{w`{c92)#89i=naC%44bzq;p`kJrgQ)ef
zmnfg1RR~tYVLU=ph5KArhUM^Fch(YP;NTfL;j>&kTX9=kb6Lr1F#<U{y?f>?3_&1!
zJv$gM&DmXUvL6;(hO+qE)*S1{stXIDU#K^4>6+?aEOTg%z`ZqBCn*MPV>Tt+?_FYH
z(JyHHG}-iY)*TSkTXQa?RQc*0Yh>#$kuaHD5XXD7i+uI2tnppq@V5`S`bz<!3w^+=
z*H_Vk%QUdXp+-K_mgw!Kv2Fg1-J`C#XQZn=7=lG5HAAM3Jk!?HQof3{v*)Bu8_I1$
z0r{!VxT)WX^mh*TcUfWN7rdaD2{yr>;E>pd1=Av{!GSIJt+o3SQQaXiqb$bqsKxcZ
zP*vU%He+let*F^mb<VnsDa)rZSS&9x^8~NH4&s!pC@LKGITU+*Ly(n~6&WO<sD`Sp
zsOl1C_DgjgVi4R`J~yZlC!qu|92I|4fMPr#lZ{tHr9Wm^6{%;l&eASyPQ3Z=>FkWt
z2z28Oj6UI;F}ILXc#6STRc@zX__|1Nsz}VT>coc&2Jf!t+fKgqkI`Z^#ul;K0gb5)
zhLNnFez(j3&GZcWIzg5{LFV;s{-*zY^Be5<9R5A@5exV0ad7=VW{`s>{mLGuCWuZg
zZy`%iy&O&bdJ!E>-Pn<-Ct2oGzqLMR0?4FsE$!kL2)MM>Xwdd0*gPLiTsm!W5bSLA
zlWud9`6lgP8#|Z%VLxzM`b?m-kY%=<_fmo&(S(q09q2b+Xp^hgDLllm8ewp`;Kn3l
zU({iyH4dO$I3RLu6;G_DgRu8A*oO(-=xl5m%QkCg;lFduGLBK&^`f92i@a(%`-ypi
zRaMhy8Y$=OXDKO?eil{hLlRtmu5&M`OV@mh>=*iUWIm7J@MGaF89BMZDCiC#wZ(>p
zuU)HjH?QW{{9FnFeIo+Lg9E(DSg3k+dj3G4vUEz`1+!D?>W3&lh9m9uGYp~y(bMYd
zZfSYJ)6uUZVUf2m4$W-4_}ZI@)Lu^e!UH=Vj||o4P3Ct~H)xf8(O4|ca8!$aQ}^dz
z_z9qVQ6#kL%1ravZ>T)mRv^Rh)ZOSSz_t?-<<~#%cNx2XbiRY^x`;nL4w)+@v8-8w
z5kvwdL)w}*M&zQTi`Tn!?XGwz%*~u-C~fw_LybMGB|)2I%SH8`5L7R2@~LynWZdqq
z`o^AB{wZJp9Gb<mhfDS`t<mZUD9o8Lv4wZQH0<pl;FrnEgUz1}<6^7t7TK1geBwm~
z?Hd8^isHc?tvFwFv+JdKzYR1M>Sq^;UG-(~Y}=l-rP|rvj3Sl&+UBB``J~jM!H0nI
znfvxeN!R#~ItWB@s)FJye*NFjFArkRQ@RF<Q;t!(F9gU_j^z(g_G@=$DdRf)!y*>Z
zhkC55cCLXbAuun8X4b}$#x`@a^Mo)m)^;<FIPZaX+^Oo`Cjuq`v9@oIwO9?b-YtAn
z(hJ6MvasKZQcx$`tgKw=dwo^qNVm+K8rEg7M7*xSk>C!aLtqqB*}_h;;DK^*pFTk|
zowwk-R;0{3LTJ38MoD}7gsSj0$tUl<VEW93c#kdfFW|XY>K3?z51JoDC#o^ql`*IP
z{Hiz%tSK8Vu`@j^bGz7$SC)>JsATp<y2TM8pHUtLNyi7!{QG>1?DyMlJ={l`m#V&3
z4$45=?MV>*wezio6<~v0V9s70w<ft$Ax>VWe?b+DkXL;2(5!uF0&*xO3RDuTel24O
zLpLlV`~BVM;=&cGaIPPwXpdnlS2B%lJ8@S(OAbf+4otf#(-HdGUVQ7SlYuB<lK~FH
z>=xkSO7AvCq|{8yX(a4Zuh`V=GmccgMY6hAcXo;eJc3hrkE~cQygV`#V$x{X9znA5
z4SPbOFPIf22v|%^o!g=YAwabmNKp2;W`D{LavE<yB_~5BxueihHw|KS4=eJb#SjKb
z#i)7CkR&fsJwkb$eSLmlkouEp2<LhcJW#j;rS{>4j#8AXS;w<CGF6>Uk-cpRDoIKW
z2Bu4Gm)P=&OAp@T<<p8#QlM^eGTU4n6tPK6JYYSY%+}wKx9h+pTmt~&L6D@T(l1DO
zH|gdz4=`BnV;jtj5V(0r>XPZ;2TU<UCp1FDcu<_5^mpFw=U+_aNOnfDaE<7<<M`t*
zuLQ)b_4&8!W16+w;Az#K^p?}ce2R)K(Dl@}eF@u`q0f9Er~&u(@ynQNk#QomU%qK?
zD*jna09j0A#GV@C#juVb#RMxOZ9<rfeT6cJ+9g)S?SIx{gtguXcC8)6Sj$VE8eHV*
zX9Ir~=>7OPAz%hco;FwRVc<e2Y!+Om&lm*+uwPFDq&CQe&1^p=Hi-p?LS8NR^bICe
ze9nRDP}v`8h3RvhL2%9hg&0#zo#KgRflny3l1MNgf?tQ!zDN0bV?KoG3^x4aG%D`o
zKVm=yR53byYU__w^^eV>ml5Fm4$%x2=2O@?fGBm-E+;TQz^{XF${)+<pTokX01Af}
z9}>oN%h3sD2uo)0IsKEf{~xnTzjM79C;XKiPTpW#?k2{+lc`)sPF`wjjREuI-QiSn
zLOrj9{Byp($R^u3OURK;qKyb&UdmGz5EM){dUem&MR(En*ALD#0%ZvgKj_CiKTot5
zvbX4v13z{haM}<ChJJ$ly(;AMAxbh(4rSC!4c&rD0TUR^w<vw*`;HT!b-87&yM?33
zlgE&wE=uC~ht>x(K$?=)Cl`O5^_PPevkkrSZ+tjD`{Iem)~UWC>mv>p29858*Kwvh
z>xo++q<B;w9@iOg7x_(||K+hXrc|3gapwS}+_qDPl0z*F90bAHp2~SL&mL;&%wMW0
z3HGb#mW>IbLfOqxAm+rpi@*<J(tAO&7{Yrhy-0ag0BKDi#yblUidew`M}L%J%|J2X
z-Z}Zh4_V>~8-Bm??q3OPh+f>gp4X^j*qy1D#O%AaW{-s4$!C*Kmvpr*o%*{3Dl893
z7HcWC2h#kOl6o$9LFWn=TI2;iNf9A7Bs0U_CAtq%@M3l^A_P+s$((_)ypG6A{ID(m
zlwAGqo@cm^CES098$i0m0E_-Ybt<0AY&z-ZAA-kqdZr_Jwfs9&*qcBGc_Rg4ybXy8
znN)T`!S@>`Up`Hq&A2RVK2V&~`SOzB3(0K?&o&eBwW0L$84-O2H~Y7#pLc`fx&S%x
zJ9pA9Wa*zP>-|;A@fB2CZRk_^$C$KL(Lkg{d~uBy3pYT;5K_|uS6>skIk|uFfO{%E
zmc&vB1f}mhy6?+M!;yspTMr%_q!U3fjw`M+$+oj;DW~<l{E_rJOdh|wl-4~6V1=XZ
z($4VrZ{0Gl7*A9kKbLCQk0j*9{03U{^MzcXK*XdoRjW|?(xpp_;)7;w30_F&;LPGN
zLURalJH<_>9$wH7M?lBL8*O8NZ56fJw@j_4byotcY*hdwp|60ua&z-!2>mgLhvNnz
z%T_Sp*l%f75i0@_4VTM&PQ$gay8B7Y`>c^c(3S?g<;(JPgj%l<w>Tr$q=_o+Y;r)^
zk+MV?WHPVRr$*L7J=)x5D&k8>iq;mUnyJJ|IFzU4TFNe0;|Mq{UU4f2l6ItM9%<hW
zW|Y3n=<(U8eJM;^$S~0hpKwoJM@)g59*hiqm?i`b)9F1`GFP4#LA_cXHpFES?gW{k
z=Iu$o?lBpH`w&;g>I6#)2fb}0^9H*!AR~4!j1@?VhCRxphtsr=y0rp*wHGTkhl;yz
z1I}d&UhB!Y$1?7vfFNl?hLX}jYDgnSz{KLS;pgSi-rB<kw^w{2KKM{E53XJmpt@z-
zE|#${INQoI2}&dcz|-5LAU-N4N9z6>vXhJPfrD+A_|{5jN#3N#0?Z=-L#V$1@slCz
zWwj0|jE0s+qm0WI(-x$raSoAi6nybdS44&FlZLU@-=#TkXJAD>wkmytXTqTwAG<(7
z{04xzYmzN{(v7ax1nu@!h&KNhj<x69Oh92)_`ta45;-~{Y#%^n|8b~O#JL*+JVhXV
z${+zQc(gQ==TOgZlMbPLS{P5*Pq+2lSoE+!K_n3$MrT#b+^_1OS3By7LlTAnFHqpZ
z-a^695{zJI0H(jAqCg-)$R)I$e{bV;kA>nG#7h4`zO$sYy_eOViYSGR_6H<386?<}
z?S(gWd8c#4bK@iqJ+0w#3;wM(x&6H{EG<&2YMT)N(E>p8AYR(-Ey&$qX=&oP{fO88
zw@Bm_#^#6@3{V234=Az#Lqot;7btrg(<#_NjP<=eV?DwOoFYR@^ysfjZNvsdfUl$S
zi4O(!kzTcjmhqToKcpXpAc4ZYCPT@f(ZKGVuwxhQU{};Ez|h{va3`cdrHHwd=pHZW
zXq;Y+_zW=`;JyJot~K`CH*UO`{zO81uFZ7Tf)E;OX2ew_BKhP`P&lBpk4uOxp-JS5
z!v`IR8|kLVMQ{_Fbf;}ehc2-QStM>QQ|Z}`0s2womp>Rt#gkiuXC3F<FR@w!)k~(D
z=AY%giNMI%rgMNQ3R8v*h~oGCPARE#F#L=K2ahNWg7m&uv`k3)V-mqwhVOhIWPI-m
z)tffF|2bp%SAGAcYkxk(VXmuWz0;}ApM0Zu%UtV@-rI2)+7<~$qtwCS7|9YhWeb5d
zY79W-2#7d_;$Hw7M#Ly}5g;uwNHls*Z;nH>?Z`VxxyNhE$tWy*1Cj&5$TieIRUXqZ
zuv%=B+3(Ha()V#JYgFxa5a1E#WdLT}OfKJywSsrt5wPev;iQb~E+^}>IA9^j3*c6Z
zG(dt}+RxR<<Gh$tlK8fvs+0?AsS0%fQM?)z4Y@x%ji??^Wk@n8nTFfEMQUz%R}ve9
z*xI1R=9H>xo=!fgMs`gJ$A+Mwpf;_j6*uHV3sYbY3o;8#hbJ7hhZ)4V4I+7t@rKYS
zV6ZX(`}@x8{U{k2dgUmo4^;^~F5|(X1EruMUtaO}GP&q6f3L;k*49i)8P)n+cNA1N
zodV46=?hnQaf0=>>HvL(U#8$L_&O|Rtjcbf?iqd-7|i7m9%%)X7X_I=wWk@VRbp~b
z)vVoA^_6YiF+@T%qdYlKcIGe&I)&Q((i7bhNKsozXFP3^S9>Be7-!B@G-t2u4e7F`
z2zFHqVfUD<JmF~yGL4zxswzE3g-s~ExfT^`bN!^vth20xGEUs7nq#zU%Pr`{hE+ne
z*@(Ppj}111`Xiy7Cc|k9ijqUbcc+OCfQ<`yK?N}LVWAMQG5jKp^00eu9eFEIoY@Go
zwfRIFKS87Y#zPmbjHWSD(0QJD4|$KimgD3);lCg{CMHln*aBySesRg3`e8$ENaA{{
zQG@#Vj0@^#i*L)cCDz>ZRAc&~990P+sP8zRdF5ELYLp{iFfn>MmpZFr<B^-p&^@TD
zaGW0~c^_X1*zP1iCjJ+M7y09`<V`QwAO%-R*whB@>kpCICvhIoYPo{U#rus#Ah=|w
zJ=m6Hgj*p~IC03cjh)BdkuYVNhz4dZ2jo4TOTpu{7a>}AJZ%B_smL~T02MLk^jRkG
z3+!G@ZS^K9>~}gv=@7$zRr%ab56Z{G6pw_SM#t~>W>sLbcZDwJANrgB;f6YriQD|#
z0o6yG*S&gBb<3l#CNs+xPZu9ToV~nOnf{Edrt9`|UGD}%iP2`C<rK(D9wKFOyZ|QZ
zDwzgdEVPKxyUS8^)3}wvvB${q6p3^u-!kMdX?2uLOWGzG^C9!EE0jQ%^-`~_tA!#w
zJlsgL;oh;>o1X~L(}IxOk=CsM1UT1u#dxa2M@Ca(hAl?K@{w*g9I&BJ%e6#7J+l(1
z_fd@crjn1?^~Gj}*$TvHgTL(Nf{-M+2gG!6)#8_rCPxYCH6Nyj{C4wx{^fH4+&Sll
z$arQ?Gyy)SWGdb(oRA;XEM}jXnK@hLXt~{Sg^!ls*k{0XE@N>$2g@H&)~UnSi$6ZP
zc@1WlZ!jXb2e=6}6$VLkfS(kZMMJt>dIjM1UdySdA%iDRlP!949q-=<?4?zF!9xbh
zIg$j=n6-P%o;|p7{d^-A>Q*DOUn3|lt0g;-+<+lb*-4}<5yoxzRn*aWUaaz{=uFdY
zkahxt_7*AaTXZuGu_1L85i%SjzR>(c*5GoX#Y`7i1N#}049(xdj3oFQpPuahN0_5P
zm~DcOR>*-cQ^D`fYHOQ-+pMK}k*%W~k<VChJBttLnWd+}&z#hUOLrjX3L;hm)A3E_
z3Z@U*V%YPibIFlWtQtCYQkjD4L^LO=<GU{r+lv!h+Ze5We3zu^DAr^l1=)p9PriRW
z+P`x--;5ct6Ag9;c!8@^FBiN3jQ+#W6jc31Le+#of1a)6iCbfeGf=CgTTka1E$vn~
zEkNa~BlG>M-ArFWx|<|YbcJ*4daeyu_OBonR}Idv8ZYSMKk=+FSW#xiE2ZFX)$@%Y
zqKQ{pF6W^N_=-u#vr`)a#C+x7zilt_z-6sCIXP3V#&mkSX8uouPQ$%7Ac1nr)Vpy`
zV(E*f%ojxsm<+vnrrd;%xAL>`VQJU=45TF5=?&3T63j|efvW%unfEyD9f_8j2{oj5
znt4!(i4lZ{ju(G$C?VFPV3k!etr43|eLA2D&|gnw=|jTeM56-?+9_Z@09X$Piz}Y;
zdAD)_T0#77eek!D!UyB!e};rB4(TpI0Y?X!C3dK$ZgkQvwVz>mpQ2gR9S8oHfaCnd
zO-7`6Lv8;Sg?<y@nn$fGzdUy{Pu>XG>jhAyC<;aEtkn9>iMsCKRcbNgO0PhO&;(f8
zLRb3^)HQVsR)G?q0F7R>O^c0Wo!xjHS&L9UT^Z-nBFyOWr8WobY<o?jdKVP$sK-nF
zs4grj6-DtwMl;p%CQ2#lMWc0lm|rCLQ$LDdn+VXw2lr$XtpWj-&o!o*-*N74IL!=t
zm;A2WvjdQKJp#5^UN>1){sEtXi~(`8WsLt_TqZnHM($EIpGd?+S3*MNcEL%mP#S*u
zd&G3tv!G<|2b_9qsU2W@#8q7oCuTPjlMBQnnuQb&Z+K#p%=9Nx@rUKuWDpSN3#v@7
z7Y#Z-PF3{?D4Yx6%CzBI!DE7D`O0Gb>;xR~_D?y>$r7Lso(q}VbsDO(5T8{-ARjZA
z;57jXC;awRjZiQe_=wL6zCpOQhB*7^Q7CSElB8-1wd1`vl_5qcweZy@r0}GH#J^jp
z09-wWTuw4%>{@szw>l?T?0fNfN`rg_6_n=dTcuWm5O-|D1_2Xa;U3~TpN~aEY;0x@
zQ4+ZPN0Kbxq=9HH^HNe+mjuTy&e1PH*)-A^za^8{%*?GI)g3Iq3FNUH4ZM$l<Mm{a
zH^=}m3x#mEU1jO{1c`Xfh0G4@g)Mtv=^Lcrzog;G5UVGe`2grjh$oL)m#-+-YPw7(
z`b~U%Y+bnSK;T;+NZkasZd%_U3{?l;L2weJ-g4<F-)dYh{Q%umF289DJrrD2=#KkR
z>xV%Wscvx7%FGOnLjsOdo*x)Ro%Uot3Hxa#NK_RzEP|RT*<LKGh%)JK;X?644!q>^
zSm59s6i4)@PKpjt-Vy;codXniRCBZ1=1V6$d}%S85wr{Bl;^)lILtPJv-u3FpR9HU
zMDmwtzqXmyaY5yOn#~@{dG~*(D*eIc`HvQK>;DHK(^PM6jG*ah@NBPbZ!8op!U6CB
za%|G+fQTJ2ln1ebmsYg-;!NV*xOZ}<8ja~tkbJ-8+X(kfEhvfFwyiq-@VL1C3snO%
z75OH_s|%I=R!k3dm5#FP>`G98$s0^7oVzW)^Og&hD0d*P-WY^*gQ_nIGXMOoVYT3n
z^2|!y`SvySWCI@4_2y_J(^8w`=1lV2=SuC(r_O{t@x~*jAoegjV($_HiR6<X*iq#5
zHG5#84;nNlK3+KQFGIO&AIT^X&3Ra*6qM{YGGx=~h=r*2A+QBEa;m2hE~E5NuY%gK
znM2BVJBq9g5Fnn`Ga712>2KAM=h{taxXH%pjCqsFgej0p3(bBTVjw<@%up#@Xt@=a
zI0kiO_KxEoEsunoWSYd&R6W(=Bt9(0J9J&zC}}B)l>vuu+Cd_)-k+RxKo_d+RY6l-
zjT-o2_AYi5+`Qm)jI=c^mHh-v%b*BHZgs%OhJhP>&%yEzhNQTixIPXJ-~(N&l6q-Z
zxEt^WMupBU&f#JCbCUe3SH}ebmWTNzSeTAb7;;zU4Z4FEimm<7kQ^#}X<Q$$F<Dai
ztossk`6Q&LqoAI<fj4i2zI((Qj|p;;kgj?H;Mn=h@=vEXBl|eqFWrIC<i6g6v6N*_
zOOfClbn|NG*o?|gWfS9?g)tZISnX?7h7(-~B8pdVT>Vc|CLFwd;SHO@9Ywfup%E7+
zA2n_B*2s^61C(s&+I+9zjlz3Sv)^A`2bssK>0O9Xw(Og@5((z!C}b?yU1hDMiTQ{Q
z3n&8Dv$>L{m`y9ZqJbDQ-cH5#(ZjnaAJw`&RqKOXH&elju=?ltv617aQ7i?~|3(fr
z28l<cUDv|2o+_6RgEy0mKmbV6zY#)^1q)mRXK~XPeI#nli$sx~FLbzOix;5+LO!bs
zTwf*ATg#D%Y6IVe4JcPNO+g+=%?Bb|=$zgNbr4rgtx_SC(zz1r2(z@6=w2>^D{*vf
z=sqqd1&C6Ga6+P>8lvEaPM(5F8{{HGlDlrcS-4)|tF#1F(`j2O+6bF~4bh=oMx^ju
zPew7S5#m!qg;(UR!Mrm_ozRjwa(zQBUaB|5q>~^|0mbs`mNglEDHzp+P^N`{pl2yy
zklo8Rx0%3&fD$IXt}FvSaCviJut4}nb1~zupI6Sp^@!pRn^4*(`XPoL+-=TMHbs`n
z+$P@tU_8iaxL8G*W;HimK__HJcIcTi00I^$*6_ywE3~;mB&*RPvu!~~`(_T(x855D
zrlDrtnQ^+(DJY-wZIh?gzCn7{X>O{p9a3+S_g1jET^X?a2iC;)&{a7kp-`vw^xZ%1
zEpk&_tl^<P;@%Q~r*Z7qu?TRubrJZc?3quCCt23?JU#$E1*+$sJ%9c>eQfCDlSCyP
zsvpU_mZdCWIuZYtj%A3S6nQE}2U6sH32kfkQTIT)y3lftzNLE#+y%bUYxk())<@xb
zRU~L+zC<^0+Yp2)qaR`s7bqRFtKbEk@*WAJ+dO|eyOOagI8T#+5f!}#cRC7+WEJ0?
z;Rn~ROzqUXLyO1d%a4dP%*d`m1!jxUruKG<pw<<)g#yR>p##@TkQpzEQOyt^-G{qZ
z{gxiT&~`Z_<<S}bbnqWKXaXHRzka}o(18%>&`0FXpVh=}c3+WYBe}BjYZp76y$c?(
z4E^op8br6WS1aD4wtNrZ%Ag6o{m1(p>W_M!K*soxlO5rtOKE;%N3yEr6S#wNeY*pg
z-HCo<ompbM4zR;{nj6uzD=#h=%vKIPn%i@{z0gQ0>O^+C*<XMIxOVc0qxay|>69P0
z3vCaeADnyayxSD($2OGU3rU;~CI4K?#Gim`k%}JqsmKM>31(P^lu6_F-ANw}_;mW-
z1Cn3l*;DQpLAt#dBxoVi;Q^d8+Mt!F{+nX||MPy*GvWJq);*@!PqXP+rvVR+)sxvf
zOt2OBaiB2Th>tP+10iLD!oZfa7ox|sC=p0z@zYiGfj<$aAHKa|DBw|*1iz19_pdXC
za8Uc6kIQ573>ha<O5jWMb^&uO6%P2|jZohjW@L|b2T77{er|()hJUAgZ-ZM`+x<#m
z9OK`~RF1=1r-TRWsW7)v3v#Aa96vye@c|YtA!J;WMjWr~rQG-Sgzi9a%dIRFYVTk6
zl4k$c9udfgWK!_>8alztm=}f77XhX7akw_~qw~(*I*1LcM|#T8gt_2ix~}+akfLT`
z<~WWi3!Z4?DJ$p1Fd=zJRDnb#v30uqlWt>%f>81ZuV-|aTlpW|sWWGRDWC>*3Nu1Q
znqgr1|7wQv$H6ce!Fv&CYhhmEg**&Wm`9Fd=Z1NZwTKJb{8V)q^C0mf;UR{>)EU3B
zbGzSwyLh-vw}t72@GuV2>luQ%cfQh``h(|xyj_ndyw~=}hCf?@{B$4AIKyIutr3!#
zG!C<e4<f7@XZ}eNS0a_s{fUW2n3Vi%0N0?uH~3Rw5-f}xS<B?v%wCz|FV{s0IeYvw
zCI8$6!at}21oP@C#=LHdg$wC+++iF{I+86zaRPo-5bnYs=kY^OnLOd?*kWcvhcW3D
zhN$<M>JA>v#R3%I;kP(fi7-DPQ$f5hmeZZT(3-tt^D2g?jOE(=TY_*J4L>1BSXIGX
ztQM(k;buK0ySK*P`{7r@(T{{OOJi;&p$<u!(nymk{|zs|tqB@9VSc80Ow#|a^Ur@A
zrq5+~;Z(n<7EGQX<AjHJ(elz_Hb?NRLc-6RQf9=MGW-T%@0gQMDu0`}pNF3v3iR3_
z4{O5YRdhldEOwBVUGyI<{RKW?8;*W|6_b)*p%F)I7OO(pKa}(YN}`A;)PF%VyWe0s
zg{<`k{r;c!1Of7}d#zMkP0WXoaUu;I@21}RXOsAdZN5#8`EYbKAMEj~07X7@3H|Fs
zFBHOgBMI%-{{DAxEMO=9*AhHV5_m>^V)M_ocYm(NL=K<a=hWJ}AoTmQF?fo9Q>`54
zL*N|YC+warteC{dM=E@>gV=U3IgjZxY~`-(y|sTBkAf1+it(D%UIq8>#~TBQ>pZhD
znFWP?A2BNf0edY+_Mi$#qvpd?0=lBgFu8^72E1@0qrSwR^SsBd=mdBO?u}wIZcNVm
zMgeLnYb8N=@2h(@hYcwrxW?$dg;_IFEd%uGIf>@Qj3-cD^2jF59t>b=qdy^|zbUhv
zj;Ny$qJ@9B7zKO8KA|FnX(YVZz(j?!;i!vZo(d-+>|QDHtu*Eb=maKMj4<i-KbvGS
z1arHrgn5k6!v#X*<tCLj5=^GRhH?THPjBV_Fdu@S2J{Le;U2`?NrD*A{-B>g>pxHN
zQbeRHN%2?i;umfFp-zK^_rRa6FMj?y0T+Jq03{LnkE9~TqgEhd?H?f;0XD+_M$_?+
zEjW!}%lF$?4Kepf=8t#*zuMRS!5M$|-ucaup6GU93eL+0i<sPkPDLCVSLd0(diWs9
z%?mh>JasfF=a2P&D80|BU?8hrdw2a*fxn*;)(m@$a9Nv?#N^^_I2Gd~SS6T_DL8G&
zg^@%pTUN|XMj&C+r(khuOe66>1D_}aH>qZ7SNvx!#N0&?2@PVNN&+Wx_P)nAF+V_g
z-G#+C{b{=~H|gmKjzbMKCTIg?+h7N4`B>#7f2)q4fBh~y{>48(nFZ>?0RfW8{-+$=
zYYgybE&8`on9Kr2m56ltQ#fEg1kIEQ{9VjV|L;yHkj1d4r6@4fcQ!(=CY26SOnTkr
z1NQ!WRfQDuDV+R>##L_h#*{8J6H=S>yYa{$Oi>K)RhN;9>6N3fm5^d5Gxw5zxFr!B
zK=RqqWIIgG!#xcTNw^pI8q+@*;e+@3MoW4bv!n_wfGFvY?I}x`Yt27}_j1Rbu*KXw
z8K)2|=BxZB7<2b3GVsA0(T{8Y7>O#7uI0JLHeSrdu)#BAL3t}uViHURK{-zewAufY
z^G!mI>)?w4%nv|TfWwlQZd}3KBntaHIFkmrm=FK|(3$k2pzJAiNN)y!_1lAstj^$m
zPjDiAx-J!2=@qUb%|ZYp{8@v;>EeZCQ65460w@vS`|`RC8`+81_l6-CRHKfL_1FHm
z!U_}7H*lNYenyFWCc(2q>zMp>g+eN`&^~hJyDUsTZMe9H$guA+C9Yl|it`EcSu5<7
zkaYh(Tq0;K*gG$Oe7?nldZ>JJu>yJrcubAyPTjT(!T0yv{qLm$HU;{nLNx7ZTt)OB
z{}~QaeqOM?6A0Jp?FUI;k}LiEFoBwq=7b@Nx9Y3y=i8O~YI32x*epzc{1<i;m(8<L
zIB?eGujQEh@S7itl0vCrQ{vH%r@N0wZ!+6_j4?G1<SCq%q3lrm>nHF)LmmPZR8Azy
zq2%`qBR{R)VqI>2uQ@(r8h`1IXj|j%8?*%y&^uRSiH%g_xbb62m;U`DbS8Niilv+T
z#S}RfIoYrOyy#h&uoOuSYlpJ@*hbp|z6z>+K`n{k{vM5fzU@nPECQx3iUeNjU%&nF
z$HhCa<BNAJgmZVFr-Dip{*xr|_y0^4dv?zge(#i@Do?ikH><Tv0K*;f=&fGUxaSWd
zP{up_-Fq9{TXmQOUZs*@u{8bfEmj{V`+OYB$2Kwx8||>SONzGbb4`C9E&QEOL>7ih
zD!O>N_1GV0$Am2%=1DIi-DdXa=U&i7tO=XuMS}M^*#7z&OLjaEDJQ=A#>GD<3Doc^
zILhSru1~NNfA>fdHq*NPCZj*vni&Xgos%E0{Rh9Hab20P#4TJC+J#Jhtm$QS620`^
z%9KJ~<*%<P8cM@C8cTb9$o`A*n6PhZqDdYXn5L5NvC)!t#@|Op<~1ab#`YgFHkVHM
zi*jpdY}=kS^i%V<Ki3=#@f=DSY+-v8_Se_^t6hOv>RhqYjdtZ>kFH(uK)9Q&XIS?H
zYbfP14#xXc_<G`!Rn&L5YWzjCX)oM~>=`fR_YZ!qS;~M_p;;DpN{IQduaSAJE5f_4
z<DP#N@Ha(YN(14#;uDqkn7Tr<0B?^5yR>sX0372Qn7khQ*GskG5HuRS#|eIZEbzyg
z_LA7HPaGxxGn4=8YfRX4_u<{=2wvVh^fyH>x&h%{N-G5Kv8L;j8^n7w*rnYX6{wgs
zD%CmhzlfHwpCatl^Zm5y+EhQ*oOZ-rlUZ=&X!pT*_by6A@F*`5b73&y1`zI&+dW#j
z-A%5^e4yQ<!7lBlc|bU)c_O>){vsNhl#R(xomA-2bM7B&g3wR9_x<05{wSgzk7m=J
z$6&$*AY9%Ck?`H!O-{SNz!ds6T||@Ua%W5({F7*2j4HsVjAlaWmwv37&`;jBo!=j$
zNJ;VM*RaT8LM$j2O+(?Apz(?{nI5VoWoD8DtE-z?S-lS8tE?Unw`=R@xU0yLbNjA~
zOXJja_Ti<IVY*66`)+J))I+DKwyHuZVPWCM)>Z?L;E+;cufjqRMHX^yy<A*KZ8WU4
z%AVZGHSw<>&lX1Ybxo}%rl#WWY;B(8S-7O`c7AilJ88^VB*k*rl2L{7r#iXl1$@pm
z(sqA$+b_w1S-bHc^J2U^Fg4J9m#IrR+7xqMt<Ah&+0eBf9S@bMg<HezhAqn%n=OwK
z9#NYZxiVxQJN2I5YRpfBB<5M(K;gOLz6V>?m&pk6wA7jF+7cCVMwRJ|psU#H=Z~!d
zYzf(#(=tE3qwv@6Z0qdt7tf!AJFfwnvR~>JqO_(df|cWfUyWwxB@)o7(T@f!xG*M2
zdqYmOaHYqGmsL5W?)hWOd%>bZG~Rfmjt;)QzQgn0Ggd!YUJv0)RiPWZjO3-mk+3;)
z{OQ?~7}Ch70n*55g;qDfRYbMCk%r3M@{QSa=ZF1A?E_BIOeSV0pguP8;`@>b_=)<G
zdIV5?5(uYnmRq#^$Z0J&inGb#>95Uc^jL}fM1yNIIUe_0ln!~1%`4)Z-j9#3ZZkMm
zQ|VgGun=+vRB!3sr>YqD-W+a#rY?S)-&T(_8?lj6W=4nA^hUZ#ipmAv*HtSY8;=Z^
zEv}%Rs+qqjABDR~MNn7AuVr<LG3voXBd&leg+tfrEaVfLI38Qv&HeOgecOgs?*{{p
zZ~-r`K6LKn+?B6%MbNxDwa+v#lz=!IwoHE_iBS&MRnUu6<})f(c8hb!V^y8|>NCH9
zj<e9o`Dt->BLQPG^N_yUM3^|gX|Yr6;80qaS2ue}3{$Nl8F7$6d*cJzk3vOjH2oH3
zJdVRxN#{T9EIsv1I`Ggzq1uOlPv*N6<b8ZvId5D#ZxAXUa7nGrc#KL_XKd;tVLj=&
z+G2&)%(QbK%Y#>>`uf$^j0ZU*8(S6qvmI)9l(!$Lv&N`U+zMd3M?&{8NnyUETffH~
z?iLQW4xT#lb3enlpf4*4-j@3PU}AJ8W!tt;H_yu{%D?4r8N_!qyiFg><w^2vA^cFO
zPxu@f(Vk*T1UolwoT)Kb(sjkzUatzAu0ERUUf5IfrBYHVZR&(|R*P82!azZ<OW)1K
z(u=rQfkf@KoRq`|<%MopZw@$?Ei8|Flhl$r_7m6F*Dt)9F<i$N`fq0LzoX+d_bK_I
z6C`!P(+A;F0gat?q#X9yDhw^JFS$_)N7vQIaOF8UIrjPI6MyNj6LFBIo@+D?XKk)L
zAN3?^X`_pa$NB!*`HqPsrJ!pQp{#c{1n0NBk0e~tVy2gL|KT`^%7N~&zMH$q{Nt>{
z=0NAZb2u>f1w-dbf!cFs%Li9ynjaVL)cMh6Rx$EbEMwo;-l)gh*-B;@Pyd4Z@mmYk
z$>JtKja!nAiz`8|2J8wS|2Ke3mKkUHk<B_8^@>IQ;x&J^en%5F|MsJC6CIqzAzK%P
zu_wNCfg<?kwp34NT|R1Y`F#rM>41RP>bj2eGzPRN^8;c$xDC&f2dY|(xdxgD49x`l
zvrhAGyFMmhz5OMKsaDDO*qKOyS`}5XAa#*`qNgWA9p$6KSUg@5o?l1wlve=@xFMHE
z-`DSQ@Cc~)7ruKoYWE-i(9d4<%qO5;JJzl1(&x4DQ2wx)qc@IuESq#(iH;sk4=Aaw
zkl`wRB`MaRM>og)*7JhY{?Y|K>CLW3N!mj#@5GN-Svrt2H=ojfYj$w|5m(L->5Yr$
z1SNdmUZA{~Z^Qh}W_!UI?oP%9Z=E|YG3tGvT<w~1P~5VQ8&|yaKu-FpBU+Vh9v^S?
z48Lw%93HB9ohx!a-=N;kX?`IixWOZnKk$>0x%ezCZ7hv(87PL5sVAWsMMI_TDh#`>
z=?^RH_MBGhr$yOBEXro@70sX4ZExQd4-p6C!zWiOa?sD*lXZup^g`}P?Fg~Tc8Xys
z`X3`7;M=GgbCKHbwBg~qcsQl>L(J2GtxGE`(mgrpn|&5f#0zDt#$5!$6<K0z<o!96
zeeh2{?TOd;q{>%DL>EkJ@+#F{egskQ4&$#!SIys_c`HQC;h_>pJQnmh>`IHws{vfX
z*TeHx^?6b0PKRFdW8rM~3~jk4?{L~xNKWM}RLl*g#^fyY=o+{jME8{69(Ytj6?KBe
zN0z3pKI+O{ZxZomdj8{ss%}4&v6q7aaI?cJt=)KH%?iAi4Xf?BnZF$kQE(WOL@(*K
z9><oBMvD#Hg_{*v)CSJvx9v4TX#{8<PEO)?U@eHJmbsQYrZ_qJ1=+<8t!!MDyzw-l
zCf!`NMXXV}-FxaxQN{fu<?aHf_!V_8lNo6pcr?u>dh&~ZIO{F)xCzNSn`H}|9deJV
zZ)Q~n3=h~-!Yv}7N*(tzXUOEa8Bf+G$%JL7x)?dW$^EalIWPR^<<H0Cxvo6^kdwak
zlDDZllHj;Slh9>F{J_&W&%n&*uS`>FRHvmp35ke^m~V3Ud6d~C_~3VtFx|laNdbLL
zP}TZXxVU?c=ubIzB}Ux6;I#DwmNr3x+qLJYp<!3mO5a5HiS@kJZ08l0&pRGLG!h5h
z4<BP9!xwAF-?WdvIv{Ca{$x_c$vrQ2=Ho@tl)@<*>tRzxa!0G~{BGUvFGZ*c?oL@f
zIm|_IKOr%Vz*kAB_*yf~*Ut&w=O3N5&T#%#GG#MPEXqV4__Xkj0ZyQb&__j5{Tt+0
z$5%x9C$xPG-8B6TH<m-RrCM5Nm-HI;)n4u%S!|CKx3+dtkKrVvFLQ5JljZC13BJl&
z(k{?IMVu7BVR^mpKPYY>y}%!#bol*~)Lo93MEp+4NZM1o91l@W{$`)P=HKCHMKHqg
z@5Ws9$)}ldp%F^JeM*jzEKQkH?XQe4+V4~43s>Wq!EJ3A!J;#?vCIfWjfy{yOGr$g
zdV00&Y7VX4T~q6>hV^UiWi%{y79_6SqUoVdR+eub6qw?Y9h7&zT5uK@%o$B&=6Ehw
zX7#uIjKz1&UOCL091*Pij7=SDM-qABlS0)a+6GpNr=Ptx3f>W@Hg@tKr5m@9$L)Vy
zkuek?StMPwv0<;^R%Nf5uC{rzs!QjY<t(k>k<2^SZ#(gINsf9Cc83VMIn{c63Bofv
zrpawvA1=Fdj5n#Rp5?zia?l~<pbMc@`biEaFlqTt{RWzRf4R&Rh!<b+rqA^}LJsbZ
zSMRF633CWa%WKJb1>%!gS^6eFRAC!iLr;}Wld}4eC~4iw+5T{+;bfDetCPhl{RoFm
z_E>UhwxCn<*2dNJ@e=WgjGmmbxBaHGFW=eqx$O+PJeNK_RjG70`yjzp-m>QVO!JS1
zE(WzOSydbgmHN!|_Oz;2jX!}=fTGlj_kwgwVbPe3G@ZTY$940p4Ic_e%l$d>js~W8
z@~&=3&+89~Z^rl3EG|uu()00ns|>%R)ax1Y;q6*_psiUCv46~Bg62;#DBwW!J!>aw
zSGA)c1j5HKX@7)3Z3_71n@_%v2z<Ni0X+_A+Om$EK1PEtSW!LTdqC@g0VyTLgx~_2
zU;8u+Bc&16(OF)h{v5B}C;nE_<@`;9#Nd_%i~Yp~y^%b|Cr&zV#fI+>vt4KrZ*iUL
z_t1>jeN!nilUzG8B>twCF<4penWub!NM^;N#C$=k%wp-#npV*@g2jp{MyZ`nZL=h%
zXQ|m_!tPtuXMI5lORfrOYsMM}N!0}0677l?s~L}~td$%enjgE*Ebt-z-9jf_>sIfr
zLd%Sn;Hd>k{3G+Ot>0QIyILx>l)aYi+%F#wQXr9RE=}8&6Lusv`~$T3f1v@=p4Cx#
z*GFFpwp0)BRn;Y6;ha%k@fJ_!DX6~vye3*fOVO^l{@5YH!-s3>r*LBMo_eOStKo+0
zHH#0n%f$~a))CY9pDwgvu0KfiHLAt>+f|l(FJ-!%_8l$JxpulRZ{YQ6;rw<_juJt3
zhNCy}^0wqs9VpNWW?PRcf0jtD!#iWIHiu8fYB8#<8HP)53GTb6bk|>NAc9F!bIq_k
zH&p$BVZHlV8+4<_NLZ#?QOroqx{-n8r}?p2OR4Thg-;p!Kc63<ZHz5*EsI*8a&GyU
z8Rf97+;}c}xrU@dn$+@T;;Vb3p-#iWSUCHyOWZj6Lq4*fBax)GZK=i&@j>H8g8bNv
zA7H?MfF?vht=jfix=J8!(dEmRPb|)+uhiPL8qu&yMt^30^MLw1w?Oq-<vY>pSarFt
zm6g5xld==Y*n_Zhu%0SLuS(J2S2q|8xh469XqdP1FJj$laj>)LSN1EQ#;Weub-zp$
zKJ)58Kf|cwyH8%_tQV$&=jdmxi1-2&CF1S|TWfKv;pVhfZja60%#=H<jh=ALnWpXz
zVF<in;8NfFt|O-Tkt8*7zNt(-mjb8rF_UXSKFQ*V(o!Mu=$e&{V!Nf&%JXen4-7Lj
zzJ`6s8g#VCyZWDWajDvoB@dDF8??)_gF}Nta}s5;+eMR8HO65*eNE%E`IU)=WDVcO
zsKr)e?Z`&@&h18mc8JOmm(<%skQgBnl&0wW2_*dFKKTEH1VXaGT2~oF<$SBl$1fVR
zJ%GnAAg^x14$+W!#XIJ~o`E2jAf{~RnX^&KwI@?-PZ^OPZ)$4u+u>nRY+G_7F`M!i
zp)S^zLw#w{iWh&QLfyyEKk=UTe52S<9L_*U@AaKn?E$ezdHo`i8vzA*#hQ{ID_({M
zkFFQ342o~}a=(<8C-+e*6dP|AyhZy|f5O#e+H1c}H-l3`G|PU<{XKbiWb8PoPUQL#
zTv21omK&~2eUWM-kFCl)mLwadBeH7I60aof7?R;sTj6BY?d;yaP%9y7^;$!}Vj-i-
z$-32Qh?f6xsZ6GU>$N~EBh}`vxMb6ucPtSPw0ms3D>jYu-ieI+AOESFZk`68MVLKh
zZdW}SiUZxE^4h|G1S7wY9kdlCpp``n=_!<6jB+D^Gw*MWO}Cqw9P}Rz`exWNYtfDt
zc&K>uW}SEwHP5B7Ix>zh&P2hA=vu!|pKKop7%P&8y35Eiw0(@wpe|~~XR<KWu;z+i
zmF(}eboe-6<z!>3NEUOTqx)KBfrMylvva0qm*13FYY4B=&U;=v<$@81NbIBs8lP5*
zhC?ii`g!MO2PE=4sgKgTakHp7X`$&Z;SvR|Wfy0X2%5G!V&l6RSKY^>dH3{DnmQq8
zL;~}>Gv@r*{nCyt_k^D3S>owz<mkA#3%r}LOE=IToo&|OxY9@^CbqI~`%+xq;q77v
zqq!Oe?Y0P^#JW#HbRu}GCN?`f)N;|BP}sXs6I}Hr*y+N;Pp_`a6M@=L>QTEqhTe~0
zR;VQHAEw|}2<H{c4lrZOqw}O3*wWsf;xTvZ-m5zsjwuqo$WYq14~sw<*Cym+5UOTN
zF<Rb;fZ=0cR99kJGJz2x%U%13sDo4zDW%CZC**vTsI$+}6qZDsmwst8A3Jh5MZ|g{
zw!e#cVc@y$V}}LZQf7De=b_!#L1?aCD0hFJV)s(_j#WHO?W0_Vb&fHAEu!pxMz@jc
z%2g+Bp?M?AzAx{W`a0sxiSHZRQ)6L{?N3F>a=rEOk`GfSiI@nLbd3*Ay_&W0G5&d4
zYMq*kbh3HDasp+JoEko1X@X@JLkqdLP5a-zUT(2mI%|9lm&9?=GX6yE`kT(9{~bhU
zXC<rT7+X48_jC98_pge}Co&yB+&)&hpRo=)tm_&4hyp$FU&?@4IR7Lja}VVRL9jO!
z#i?EUxfd~%oQ8=1O2Nx`Ra{qmFLUjbu?b2I^n;dV;;nT%l8I|?6$#9b=GjTT@1-|=
z>r?t#xsylt-o1|;b)23jqKakfI;jszAMDVwYR74Iv6?x^{m65QZE5<r6N&vN{-cG5
z%KVCot`;S84bbT8IUaGe4RK!TYetz*l}nELi4R{YmvN*%+SJ(DPs4FH+haV2(HMF+
zIqcZYJWWi*nu_(1_$bifEnTHlVMETuX?yBc9w(W)`a6{qZ~cxMo*<W#Suj2Je@J`F
zpeoxpdX(6}CWH-ax;Nb*-3`($C>;{g(%oHxC@2jADlJIoCPh-ZQ@Xo34{x0F|GjfQ
zoioFXpO|rY?)$p0wXSuorHa8E#x*;$zPnu@w5-oM{eIFL30>fMxBQ+5moJ&`z5~bL
z_U^l8Y{TXs)@46V$&DNLjNGF7`8*s~2!~qusT#`}fxr}hjz2wsT~oxb@`jkwfA6vM
z<2}wTwEOoS%K^u*tXIbRzkfny;7>UBqclqe)F6iFO1|hiX>>X7P@5ZJi^FyuD%8a;
z7WQMh(pC0EP##g%UmKs4Da2+;oa7Y<+)!b_%zUVQ2suP!3INwLK?oJwGd9*`FEW1b
zaoO+oM{m@f50=g}W_#{7_)J=!J340JXZn_>tv33zo%2~Yy8ccdohJ*;6l1Ix+QDyH
z$fLP+ez<cP01W#Lp-~S_Hyj+Tm*$M8T)44v{#>|W=x8dRf8$|`q}RyiMajQhE=r?s
z<7F6hRC%>xLA68lIi9^iAxauNn@$XC^NGba^N;)S{<KKM{=ude-EL+ty;9+Z^l<m*
zwY^!WvRQKd;6(nwEIQ589tV=j1c8KkUJ1^{>8W*H9i1pufO`w9yK&TcuKS`Y=C8`v
z_8K7GtoVYzHvUrx-J}6%qn7jKKZ7Z1MqnnC^v-HrCR%ccdRUgGBYYz>^1*k5f-$JV
z4UGZyFk@_?d}nVi50#f+AU`^N4}au2bVQ2MLOA64x;j^6ozPEYw*+6HJTZjigwF93
zkx<jh9&QR2@$K|WIqp5*9d)(x_0`L^t+n993yLPSPpI)UkBq}#5L)HAGvW>E7c0rm
zZ1f=OP1y1hFq71E=evK#c-5V5Z_X~H88_O2BN~LZ--uJH;%l}g{^{jQ$nt_$dKyhu
zl*QI}pEY{?DH}-w@icBK_K~pI?Pc2RYW=XhkT{AvsKTY~q-5K{HHi2X&8GDX{=U)n
zyErB|!b>`IJ$rJI3fG0n7s6GZ{Ogsq6Qbz=k8pOxZ|vBUwdZiaU(Az>J-atYun@sI
zh|a?%toZ5`y(5JLrO0lbMT1fH-)FK|4mh&o@PfgAj_5Em@brju<thEAa+1?MPQ*xc
z6X}q|!rOp=XXoy(MOyt3xmR-GuBHYti0V2^LfPz3q|!8z;c=9v2DF)*4wcVSK*!8!
zIfAexSyum{7Rk4RF4?hI8kS%2*(gvc)~{MlIgba>9n)QdtoKR>W5#_4T{f7CTpNu_
zmV7GaGv-QanFz9w=LS#ur54+l_vd@aud+_&pS&9%ikBOS6uSrq2!Ih4v}D$Tk4ULI
zWi6x!T1)0g;MntF`xSzjQT>npam%-I%3NO>K<~=L2_G`~$ppl?Nu2zIBWqsEh<9Pr
z%#7hDXq-rYh`Ub06;30D%i=PGRYYNmXOTInbD2$k<bq$$R?biEu0$+X>SaLSY9;f#
zA8ik}o5zR%pi<ENjN4tIFHh3h&SHje((zXW{tw^j+dd^F=kxlF6{36vYx(iN8%R_4
zN0bh{mwNy7lfsO^9Bso;=RXsSx4r;N-Yb^A9W9&F1MvcylA~W_WeRe(UzLr_@GoR>
z)<5%a)S+XqK*4om=x%ui)nTZ@BPT1kI)o@Bh_GluTGURaFfb1(NNj0P$Z>>9S|wVu
zmkIft)z3AgC?B0I@p1_rO3o$RtS9LCo;5JdVy<9wsY&IFS%Nbw$4jXRF++L@dlgTU
z@(?vZcMm@&v2H|1+O2QBX+Bs^khpD^lRs>@Si8HecXhdcVQsc>d!>e8HbMo5N~Ia8
z=4cq|%SJHwXSG7mcDXP-vt7Y2J4$UF;#bbpt(Lbu#XDFJ)O+C9R_47$6wHoG?&A2>
z8m2(P<`p4g$Otu406HrB6O7Sp{TM8KY0K%3s?b%%iRYsC3k%zZn6p)Kg2ry(+M%iW
zXp`Nv^l8qYKdh6e@u0GFOuf0bnV0Qhr1V`~kM3>GXFn$MqI&+R%f$+hhkUhQ;on0}
z@_5Me^MwC%$PFJ4Imb)gA>fdQwN0^>!%ea;G5eT<xN<|h<1-OLP6U=i?>;S%_jAWk
zsvwxHpy89J(KfRaO0^!th~{%Ys-5YlNJq(Hu+JsCB{b@wyNMgT#8UoYiv1=QdpVCc
z?Xqp(EMs%m@!?0Sh^k0W>Cg4mnf`PKHP_jy>R8@>&B3c_Z{JSDowk5|@fZG8J==nX
zV#V>A^R=A&jSm4>RN`~;TStE~YZu^kzc^e&2x6C(f17A@Cg<t5*_*);s<w8ol)3gh
zsg_GZJ-eDvl;0|}E5GQCq`RORdKqSYf1rJ9*SC>YS&?8NM`6;Mtx0{0I3tv~(g|Yv
zfSONDEG;EP(?t*tmHFJoiCBglJ8UM6Hd{h`u-hEFW9ngAFr7k?0fr~cce@(++EyY@
zl5S9}-m2_E5_{&v+j%KDC{UfuTv=D{kmqKvXD!E==B|n)aycDJ{+^;&_&g#iG2?Ca
ze+Y=oM@o{1<=cNa_Fg%FXkN?HJyU@VBZI58hMl(+8O{10?jxTH!;zsZX|6Nq7<Eqh
zRnr+iU4(P;D~a>ma(YS=zM{fQ&E)-Ux`Mvpr4YTRRzh>5&6lp0&2!VL&E?CI4!aQ*
zZZUcdiiJojR7cYwAr^M_3U-XbP+Yx>GFPUjN+vSavh>@}9o8kSGwrGdNs8(QrVC6e
zTpX(SS=a4r#n&~gD{s89y~+pnjO>KX+t_OtV#F?HShYv1JOgijnK*9%=ppGVm&)gr
zFqX<MG%ht<h_V*iu~qZhwHdJ#{1ge-5%P4lL;7~0ud?LfEutWQNo~Op63p$x1)`I~
zg$>vF^R8Rr8F49J{cCjOUDpsW5j|W>W0;T-9S)NgoIRP6i&$#l@~wB5v=ibvdc(n<
z^+PBr6kk|F1;46ZV-phn=E)n1La(`r4+&FAYQF7!$@PgwWTsFIve}9BQrlPrvx_p*
znAB(-u`o?Cr@5;5Z_|(1tgTiOxFAl54UT^Ux3{j3BLJay+rj_gOB$$w3qoY71AM`X
z0QCMeZe+%I%6MRBD5v^MuTachg7G$@GLIQ90)W&LHp1irbKbUXt773shjD+&1Nry;
z+Wax75a&+{6br6!X|@laM}?!G7j~IGMZ%zAbC4F+4RKW(#dS=uE#}#%^`DY>KF2sT
zkezk@ZC0vbVZ1<nRsx@2VQ?VZ#iJ;5+e7N*t?6XiTX?LXDGa<*C0*IVMu@($!kxNO
zH_}r+Jg2RG?{%|x`O6|vC|Jf-IZacP$&iMXl_myHi8)BWq7M5{S3nc*^2<|Z7H4VX
zo>&icearA?tXkEjiC>@ILis?%SM71y3d@~ECLC~USHk5JZ)GlDO))|?yYAb9Cn~k=
zXYJKY=*Op1>7cG@>R(YD@ewZ;?4|Li795&_r<r=A@CeP|HQ)23b)ZB!-#<hA`!F<(
zp2x)`BVjmWI4?>(#3rt@$ve1Hl`#jdlgtvMgxCt!b=x~>ss*@@s!sVX`p=*2$o%zQ
zn2tXVm$ysC{uM|xz<}pN&r;`q*}VT#Rgx14@d7L!ohP=6M2g(dM+v6NH%q;?sM)@S
z++i$|ue-!x?M{(TF@!{E&p{k*r2~cY?21{on$%3}{9lro<$O#y=b{CtL11u`BZZG|
z+QT60W9P4c@l%kq?bFS*LF+Yy4Uhn*pfY98FB`nM`io`q%`&n1p>1|{>9i3x6-&+D
zQ%qY;6clJiv0jtK?5uyu)XB@4h*L$M>^0ZB-OYS1U^qH@CU$$`Bi<AHaBD4mjZEtn
zMv~hBqQ%M&HZS}NCV-l*&s|Nu`jvFKa~VrKPP+`^prn<V>aNE78Hd0iWhN7|(+&#-
z-FmN4NFwf8+vOGT^?|9m*<MaW(Z`#`(2%}RKt#Ebw}@M6dxl%{Lw;2>aa8S!$&?oo
z3o)0Dgd~O{%42aiI#WQyk)XoR+-mCHdQ{El#O6lB=v*O&GKlhp6<ShKo$P^`ajg4+
zh%#t6g@+6g&&$N@ew_UQLC9zGG7R|~$+3mkAfB1xf8UqqnE)Iu9#j(h8=cDLus*_3
zIr+1H-k<*)O36P$sj4qo3Lu}(<Sp>OUI5@=#%wR7)$Rm$TN;clus~#`BB~1A62EX6
z`*kS3r1OE6MFsmS^9X1-_6SoS(iQPU`HaxVc?)Y03WJi(tCT1!41BoCdo%0<rcv`w
zV%(4i*sIoS&(_`AXAoP>uxKVWcj=Z)ZAg+jV_hujQZ#fIbv>yTE^JrjJ<|ldYp{58
z`R^4_%q--^Spx~yg@w$+j{S}9KAkk$z@kjgZljC2Pz|Ov_njnP-w9UEdeA#Ybt|0&
zLSAm9uxUEQ8<N!DD=<c+E58YQL*Z*iV$W;bFGbGn1rV2IVzx}Mo?Lq6`X|!>3}uNV
z%a>UAQglo)&$P(R-0j`+P)6zMPKgW^J#b=I&1_ko9*I6(|26fNhDPw4#jmoD79#qN
ztc?@9b|bXO(BE}nIuFOQrXo4kE$x?a){A#g>&1Jb)16vG6iSzijPqL#mMC;bn~mQq
zco~5s;ezW#t(!^bW1k;C%hD_$_ZX;EG`aX&YSK#pe53Uk`ZGZL^*;o;i30GE%4t7)
z05ilh>7_D&oxC(~at}e=*e&XqLI*vCBgI0O_+v=e-Uka6mWmBlgU#f<Y<`{O2APLH
zxw$Z-3(9fT8ufodgbD9na(OA)e(%=QSPf<fGX(_^XC6j>7OI>cYFbo_dYf=<IzoL+
zg4-5Nqkm9k10f#+;c>hUJ$rT3`DC3sQ6tU_78Mc#!H|iwYUfs!Oqw4`aJb(mF;e!y
zaw0GOUKtTj92^PUqtmb7`cAh$iuex34vFA6wVn}n;jr7RTiGh%SvtY+l>>3<Yp<_`
zMg2}trtEsyN5*6k!<3b!kEG>6Nkgtk?noq*pTjX2q?a0Olr<6Bk5nLL@F@O?7tr_`
zemje6%-UBVNQQb(a!sVR^we<EpikQTZ~sh5_!!P}`%KI2d3(bLex0XJevwi61?QKw
zkiB~EpOI7a-mYD~ViSks55}YldiDjcyr@uk`aeK#8y5h2XI@`x{{?#T0MHx!^5tLh
z^`Cc$n&=Ve#XcYBiI&8nJ}llT?*Tl*KYCCv$wJQUeALNJePdTl(+jw`%z_A9S&B9{
z6KZ(#-naG+S;PdZqMgdn=cDT<-g+o_H<Y`Yp1>N#+rQv)3-{%_!4;VEqPQtS<RU8E
zNEsrWTlcL^8Y5jlrgzNB;;3CpN`(roZ}pyQS?gn<xJDar_XKFWV%~7MOPeM6GN@0z
zC6xIrhd(jtODIxfzGrM=w_{=u8%gO60+#-jJU4T*tvWD=gwOz!mIQnWFQh2Ce8x*=
zu1Xt{6GFD`nsn@T6Q{;0biI}8uLaE9QZcLMH!41O&p!*j3ZthKVSKYhYHJ~jiZ7W)
z4fD5$MT6uZhA7oy?Tu%z?BJzU)idpbzvTrC(&R=TYP4(5mN0Pa6{luw%9o^YwJq4J
z8se$4?(EncW4ImUqhm$QT@SD99Spt^Pyt~K&cA;$uEtdj_8FFE{*Af6Jz{QM#jn}_
zehO9KQ<P1A`Fo7?f6o-DYXK=llEL}dXq03kjq_DO>IyJJ+v>z2bZ7^G2d6V|rPC~C
zw*fi>9l3wc9)>=fib6b3^E(EdFFSU=6}o-=#<O&Ttk$I@+tqP4NvLtFnZKu&V#bTV
zrl6F|Om;2|^0S&4K3?yJ1~t`}Fka$kVcS$z7inW|I=n%4tg4^&hsVb|iqjOHaBZ{*
z9jgLPH_puB{l1Q_Z(J)#I5@Mw@O53Smod=*_#UX8GWU+8^s*fCZlAVZ&8%JY*y4N%
zH)DiyKWFga4gmPd?o12yc9+P#&};f%y=?4HD^KZCG6dTdh4EzNZ%wi4|GWznehTWs
z>mI%9U^sSNL94Z9?*dc}8&>sh>FvDtgK1l=1H3O7j=~^iF{=jLG~u(_Q%l#MzQDhE
zIe5QfR-?F3P`R9CCDxhEw$+1iNQX--DFnHmaX*QW3ljW@6g5g8<V=3{mj<KwafUsf
zThQ`PDH?v{gGDy-Uj7HK%+Uhv*#5MRI)GO~+USW);))*51yUK>KnM%v#{;^1853@z
z=}YaumGzYnT@xZh5Q%VeOl)bsVT9Vm%Vh@TeHP60fU$E|Aogo!QT7b}PS|z(v9ZbD
zS`*DyGL`TYQy|i9Ejmsz1Q(<NS$5c}CRdatv87gv6bxJ)awDO++#Gg_)q2}LM$TQh
z&Qw^{7-TEN#vTz(&B8ofp#wId52)~_+tT4=W$n3R2%7S9E#9u|${L4BHXW^}a~;V{
zfgqM<bC}XnypaZ)#?VgIi+CAtMcjNBIvWEe92;vQhmKBc02unts$80O{m|Bbo4T<<
zg64Yn+d(bYoFy$zzuiE=%BZ$Q-|3;ccD7Qrw|gl|!SR`%b<c!|_7*UXmH2FLUpQ6q
z41Xf+X}a$F)oG$dxEax0TmT<miPbm4GP2lP2o|Wm`y`WTeN9^}2?6dh{+9%(gz}LM
zO-%LqXLccJ{m6#K#ccnlBYu+vj8E%rbj99*PZ5xajJ#;FytkPdgPccIeLrQMOrfLb
z+nR%vGa)#&)a|ZRawx%);6Gg`#N*{L*jBD@(;tNQ5Y!KT_e_IJ7*-cNu=lFfMfT=u
zd>Y-ebie0E(=hcoyAxiulh1vqX+QsvK--=|lH>&)v57;%l8;|PX^}+S815b;XSa!Y
zN`b6RmBO7YlcLG;NncM2F-#6&v!q(&(wj5ZLsM5b9E~b~n9QMC(|X=lC3D)jABAXX
z{O7w7Y1HKjFbag*x}4fU&}qax!=*E;Zh2+I#&{y7hPDfb!RHw!_3xS=sMeaZ)_Kfn
zU^qHy|B`KfQN0(9q^OdL$#<<vF!u9|x9wO%7W@6TR&Lh51|U)XV3intb%AMb;qA~;
z6p<P*K7V441QqW2?CK@!(Vq~XnU=5}+U<!Nbd%dS1WiMoC?IeInK9er6PfxyqO4*y
z;2P*!7i9f=4G4g1&<M--`Oh^le7pu_FLZ`zA7MK^krCim$VY()^X(%%YmX87z<w=L
zS3pv5&rh^PLvGEB%CGm~gIPYJ{|g1i`a6pN=bOlT$Jum|*$BnNwFtWhXZMftA|B}?
z8+;SL#6^qh#tn3RHWEtbVSJrihY6YpBP)5@Ycx=d+_GH6U!OjWKonsb8e!COxbXu6
zhmjZ=VAwMSub$r=L8hT{X`8L>s9vX)JzS=3K?z2_b60=jj*rSyjo-lD+OVy|B-cit
zb(a;?<32R`venGkFnyxcT;q8YQAL%{kk&?%C>`YnLRlAK1|!nQ4|8>_@mwR{93tiL
z#n4Sg#da@6Q_Y~@T6LBwb+_5ZiXfx)^M{9<4r1_tW|-V6yWaL};u=OhdlTz=M_)P+
zhRYC9!35cTx7L#P4XgET^j+QNL?m~GiHW#H$jb!3T1WOL@`{SwgZY~qX%>llueHAY
zt!m#40lHbEAk82DJP0MIz-Q1y{?PD0^4TEpsm-IN*XG3b7&h#RZs@U9;I(qpvz-4<
zP}y}U4Ch>D-PF;>QOZ~}q<x%VvttZ`Ti6t(uN3|LX$rSP$W_BYuA`a_J~JIVA0mzl
z2=~w+1>q()urJek?a2gR@n`j2v<G9CBowcem-a#ZmGhC>1t+t*^*FBijNX-U-+E=l
zUv9>kRJfsU3mp{dlVLCqJHyb8wfn%30($z4gP4RXdqmkdSg=`#!ct`ql}z^b_8)=m
zTm?NN4-#Xqdv9J%kogv;isVv}(K`FLj;vXyu-3R%(1>$fi7mJMi6j~G_vSBg8EFjp
zSxAu$-mynNiCho2;_5HW&ylQCxBK2;QEA0e)J$WMIr3s%B}G;F3X^um_|1;9?O_cR
z8dDhvKqtArKSS<f13Y&ly&gul(mH(k`6D&8pl}9SG>g$(WNynT)XmW%aun!G*=fR8
z7&x^`Ud?hLOyDbSUt6(r!Sy%Q8U@-q8cQ>(on|XBcr*9kS<5@kBB>U{@&A>5kv`U~
z_;)`4jH%o70Fvdjc=L<uKeXe&omA@M^Q}BFRuv_Q19JvUdCXRT#2Q}2uW?B2oe1l1
zYX)GbynKAQ>Pa{<Hy1@b4ZUKS=-?13D)Za$0NTvqc=l3`5XmrR<~+9wgHIT-n3~VE
zq6Q+K<j@MQY3bL+3ORaIYBR<;->4`Ts=ov$d8EvW?HThBvB{@ha0iDE@DU&8$9;XG
zgdsDB0Xaq^-lLB5RwktFySmzBb6R$HXLnf}`Dxr<O^gx;O)?Ti4CCfP?8Fw?3q!wH
zOw8*)vAWo^?RlJYTW5PmNPnnCfXOkSA3HeOcZRkK<KF~$+F?9-nYq~x6Hn{?{5cOR
zoAX-_&roxW-oh=F_^ltI)qoK^2kV14twUn9LlENK%}R)NLg%zKIm-G}j!lFTzI^gC
zBK6IsX}|i-c66er&3-DHm2s0<0r#9o7lAGNTIpUFF2$j#21>EGp*I$@1M(|DVy&@a
z9@C^KI`Hb>6B9i!4Sj@|<UDFMN?%5X+f{e_;o3xl9)_R_C^17&eT3b8Q1&gItM%SL
zpz-}9XjD?V`{xVg*gb;A0eSZS;E{Sc0FTUlFUpb!`CtVD-f9%U^gLD>e+iws>1TRW
z?nh1Nv36Y4a5>Iv7FHu!v{=evxDJRxHm%X?qexAQ@zKb1#!*s!nslg9EoHdU{qaH`
zuN#}%rRjT;hq?_N^&KkxpEe+4s>TDN6T)SQ>;W4p)>lSzb>1rDZxcgI5s<&Ja#s{$
zAPS!tbs`Ts*vg32a?xVZ0Tn#%jqs>Lmhlk?^5GuV2gZw}a1jjf-ElB>O<Z^|yY-rr
zFblz#)K7`ymp@CZ{Y<HF&`28)IDKUEI$pa%avAw*{hcBWt%T^^@xyYHT|nYTSE9pd
zlAobSD62d9QEg$2Tgf#lJSbpV)N%9UR!Uj+e7;U*wHM9sO&qA<?Ot@?$`XE$hCcoZ
zp?zyCzQAxdItF>axMJat3LEUkgC>IghGkK#5;hm4RDSXFXzCc|ATQrOYr)go^!6r3
zLwqU5ZLkKDw%XCJM`F(i@Q6Aq{PGWF{I)|r_TSbQ*y~s*`akzN{;7+nSdaA&OT_jA
z3?R@beNQzFU9SF|a*uw@jBYT+`Iz^eTAD^uxsK#cNjmO+7zag#5t4`ReV#0=VkR5(
zT)2V#TKbhO?)CHMIVE+FaKL<dQ?}OT385nOvmS4nQM_uLy{o}J29l9bikC-W*v8Fv
zgMNTtrV=fAd}IA5(~cT1SU7_`&KGNFOxG{c;W<*53$lKb2dAfAL9zN3C0~;qepN)l
zqColh`qv3?IQ%sJYD<oc3$0P?g1IOwrkGfWhN!OtpV3@2^PUh94uWXTl(u{&!7*_~
zI-h-IFvfEij!t%5Pw+IP8~%YQz-_nS(sY{$Dh@KbPNu8Z=Qax|MO=MlM>lvBH|;3m
z5Z^;pPe9P0lVl2dOQ2jcQe}{#`$7s)R*~D-cePb;X)|{C_slj3yCy*e#f%?Y!F;Yr
zjz6G`*?=}$mfS*398VyQB>qDK>J+&u*1H})Jaf_y9URRRoJ}|A;Ua%Hx?-aRuP4V$
zS2}PkfI0Rw{z&ED_=N=m;1>ewud)Ap7QZLJbJdFa_R~LP%)g)UO$5-n30WwKMS)M*
zkO1>MR5kHs*+Ty)U^XOhLzg+A>Xx=qutNNE6UU#0<)d_4q{eV!qV+&mhMe+9t2#==
zX}P?dBJK{d+NmiFmD3?yE;vVGMrb(mOKv{Z+)1FXz`#sxEKLc==#Yn+zL_`n)2;*+
zL$eE|-!x8naVYL*Y0ak0qpxHu_T*(WyP{B4p$cPs{HE>6uk@87199^uQ@BZkh*048
zfoVJv?TRM9c+q<(JTpAgDVra9wAGid?aI5pU;D(!t=KRSg<f~MGg{2D%jeRMtpAo-
z<A#Su14Z#EQuo)%rTB+{-T-f69fQz#1+4Cf4pg%fRr#D4T>j$|AZdZ?4t+FVmg(8m
zy_$j9j;aDo>Zmv7RekC6l3E@o#A=~N24*j>^)3M}-$Ch=H>&TQtBO~vfA*8O9{wEr
zm?mt&Ut9mh`Wl;6AVY#QHN%Ateg>87935d#hMMXSpgI4cqU?#kkcj`*$0A>TSkFY5
z9!DB}L*)nYzd3WA{Qt#nrt#Sk2HaO=n=Rj7Ww^||nC~_juKk@fPwFVu`db=n+aNSA
z<SoAB<tAONxj%-q3VRzbKH>Xz!|AOtFzYiSLz5f*EdJc)J_@%5k>bP++Jh1n{O9n2
zPZ;2#amNvKl}<=>XC@cC6Zgm~CJ6<m|FSg>m+b@1?{yhnZ=rCq_VXlm;Sh9cB$Zhg
ziF}4#z+r69LF{TN|6;MI_Ya883>2r&7GYJ$`IUvEZ85-|6!l4o9C?e|Ys?tXvCR-9
zI}mj=y-Dy&?DQ*35C0-bcyI^m(_{t2FT^w$NPJ&V=NwA%59uhei*_j3?0Qp5WXf4e
z{q-FU@pID3x=fxcy~mtPW45j<`;8g<gzzr-{HxvT_Uc55o(J)ah^O+!Q-QU6kW-#<
z#W-8hDaTbhrgdi4!{x7m&9N3`SNM~TG}(z;B7zrp=L=-DPxq8bXoJ4|qYwQ51bs?X
z1f0i)0uz`Inm7DrPQ`hWkpicOHgUqQn6b*f%D&Kyjy;5!ZX-*eK)g?N8mX}ugqN&f
zV0@g;D@;FBGw0Uz3$)|3?zWBF$qy{;Yv|MFk$>KxoVaj$hLJrjFKrfYoX*(tz;R6u
z-Qx5b@=8X+5^hmV$35i6Lz&&33nNi1?0I%Hl_%3l{59w6kMI%J52gV!th87ud2wHf
zc1d;#Ij)hjEr1ALFCfgA+q4Z~;{5iz&9ZccOCNLE@p5F8_7_v6sCK?TP|1v#?|n+2
zd;7Ia*8rlcyEW$vf_N${tZkqMs-|BFCb!DvUp-*73mh)UayCbqv}!IHIySog{7&6^
zl5O?VQZW5cPkq`G3tV|>MHji>YgRHfHy@K}6L(^~IoPVf=J5kjT|xqsMJfpG_lkpj
zDXE=|Dx+`Ox>^<Db~=9BPBn<FR*yP&>FU)V%@3UZy_8YW_c%LyrL$c}37%TCb$55)
zKj6oI`pH!LFIvV22Gls;ym4OZ|3D)?V6U?Clg20?&_wKnwOs+S2!L7+K|+clJ3hX$
zxM%v5p3YVAop?MhSp$MqZ-WzX!RphHzqQCu<Qb%PlIBk`(2ImysL8~^Ziay(-1#wt
znlzs$Jz*mz8KE_YV=Y&xc688DeQ8Ox#c1>G*UJVEDvCXZIU6uz5|L?V2=#{QnM~SO
zcGv(r6ULS13*+T5$oVTF{|z;SB+I@CFbYB}35vO}wq?-ZP2cx7MAPtVx@7cJN3)^k
zb2#8#Kbb|@k#4O%U#rpo^gM?3FfmXx)`mCam8zLNUmjs#{XKMzh-*NWI?OM|;5cmp
z9)`vM=Eh8Cf`>h+T$h*EeFn>hg$T-_{<I{Ul%Z}$?TgXWm=>TFH%*D?|B;|8k9PEa
zZZ7#*Ic8%jI?GJ5OBfL+Z|I>(3_0<9`|t9!s9g3gFhy7Rq3Z&388g0ETCnQn+q}D(
zy7gqJEa+{gO5tmvr4^CkwrA8d_^K6i?VC7}6aijVStdd}e1D@OH)>$15RF>cs2l{u
z4n#brf}fBS*l%eS@>^W9;>-GUfgU}F+X2Vc1i+0Sk5)de7i`%~`Ilx=@`4T+@?2EM
zTG9UxB@L_Ce_Vpz|M*%KAf<Kb4uKpo^Zu^XHkfGIP(x)wcx#JOSJcew6hgvAUflJ=
z^Qw86#1!Y&fMScyPrLx!%(lVCy$Fh0lDLTm^-9Zj=}utWQ}-Q1nHzG@B!)RsaH666
z!d&9FXF+~jJBt`@r(Vrb79p<b&+k?`Sd<Z^HDBb->`_<P%~C$3<ai8AevT37Y&E%q
zJY1~rK#igKh2MV56>&*;hhU!xc99IIjC1+lOS8q&X)J>%rG!UknF693Tl5miBHxj4
z)1>yTCW<Be;-FZC39*$rb+^nqMWJ<Pg?*^;yJXgIF-OC|G7Lj|GYHr+*nN>vwjh>6
z7U(c9l=Z&<*~7Irx~2BHVw!)ky{s{SX#7e=XoQPOmn?pzfhz&z(1lL(J2LAq{QVY&
zot>wtv*uL8QhnkG1zdR}-+NygiaiH8@H@r5zk@47r??1|9iDj1I1t&l-VHuu%LuP2
zL}A*QU5wV(s!or+Tn5-A8x4fzqV|m;lO+%Ylk^fxO5)o$yTg8o`(WITNN@a6U@Z*j
zE=>6zl^&!OWA5?buq%O2(Ud^W#%>r+G0!twTjp~h^yS|FyWL=vzTU>wIG_f}*?<6Z
z@Qo=Yp8qb=iU18|35A5w<G7U&B!0DqPwsj;0;~@uxoQf8r!TK^?nPeggeJr8;n{<S
z8ce+=%NwJbj$8CWLMQ9yYhRKCZ<2p$7=0%WY}xVXH-U7oF`Jm5=K-$EWSs#LQ+N`h
zw>GzT^<UGDXIh7Azr|GnS`yaOa(u};UIMo=&O9E!$vd3RvRUYArrv#Y!IJ<LA9sv(
z&Tp$?GJ=;1B1>yk-Ak)O9hdV1lNKW(!uG@Et@!+OY(^1s!KPucLb0i)9!5Mdv9X#j
z4Lg10g>zQt0u(Pd^ApW^?mux6#T48hc9C*l6%ZYsyc=}4rTd^c=DaIDYkGU7kjrd~
z1TJi>u)&E#Fx!&xL!^TJx>Ww<g?R1Q$hqLZu~-NA@N!!^vy0z&v54PnDjTnM1kr?Y
zt)DNN&MwmqKRt6lowvt~F;tmrv!OC!4C1N-_~1?)l_K0ylemJD4|!fE2diaAwWiw!
z?=+=G;J-MV!k;O#hM>^w`W$A}opv9A<=|j-|0lY4#U$+^xbk@1pNaQEBRp`Q9ecI7
zjlga%lNT-4SL6#Fe|CIGkAvq2k|utmA<NJCEK1a0Yz>GgdtHzoGf{m5$0sK8a&ndo
z0$&0<hVJ-lry%kBON%*Rant7Y>zBnFyR)^NkHLUMB<7{4zyI1#1D5GG{Tu#Ymg#{F
zc%-PmH{gA6f>9%&;%A*BUVDF15epk_;-CIOFejcV!s}uP0;4hqnS#JERJU<>6{aId
z_6>im>bCW2X~&Pz2gR3dcAJK5ZdbzI9bFf{bH4UYHMg~ZDi%@-Zb#BOcX2v(he<q8
zE%;tJaqxw2TnsYY{y+j7SC>?h_>!Mvl2`ja;Shh&B0sF+7ThgTSPkEx?69@YN-T6H
zM_)L(L{?Z?mk<x3kEe-izGUmq7MesSGp_^zq)vQK<>y?=Q6dft!Z@Uq)c3HTW00RZ
z<Pzd*;JMQs6A?4n^IM<oqoyGV+15*y{&WePMyf!u?OrbO=w+fC`^Y0AErg_A3t@Em
zpq$<=S<D)B-pPC#QrUsQNb~K;^5x4=>~7oYt!SdS_CQ97NDFLHQ1}t}1roh(!6lF>
zWcth&B{{Y*$M5i24DM7#2m&nD*rT}?Qj%cH`C%|E{2N6;oJfEeHvYaJWT;7;Bvjrp
zW@k_c@nSxJ^O_J*`BSh=V2wao(}t!z`HP57M$X)l!Wb#KV{a3DNxG*<QB0&H95;*>
z0f|HF98xJrskG-)*okv~*y{oa1qQqEc!d&xiy%<4_f^_JkacJc;N*;qFAb!QJs4n~
za7L<n8ncUeI)3;Kq%~#1ftYkd*&_ENI))6f-HMJ1qR~(8sgFrztANj|iLEeWhBMN)
zZ{MDO(+dYjN$vw%9K4<m#f<+^)961E)U3zD9|4(%z%x_ve4z}FTg}TTlRo(wB%Amm
zNT0H)%_0l*sjws$u?>+F+bheU1N&OOvfFX5l=qA-SDVdT_eqJ|S6z%1;}<yHj1T^}
zXcT@R!pTVQQmUU3gmEHHp5*>lAj3EN`fQiCflMqcMq8Ns<#>{5flVJ<QRgg+nw`(a
z8JGJ;vD?K0vxD^>#L&|nn^_B+_|VZP-RMvtxKM)Oq{XR_;=%bRMYr2R{SR;WyN$j0
zTQctHm551&q&EUHkfOSsF|9ZZ`!)s?<X(`(9BVUKLc;6<eMJJi+SFU5u6Hh;R~cXN
zL~xNR$XKvq3!ca~-TYJ`VqQ*buI<_*qKYL1Hn~6$mB8d7D5Hw)_c&&GX@fiBf<JO~
zhhM~wHhLD}4z)&!wCb&3b&02lMVW34AwP*x-y;!J4@@*VMJiKz;VwVirQ3z9zSnxY
zQ~<B&;X$^Fr6?H$)D`VoCcOQ(<SmG^7TqC3F8$(YJOzsMls>k2*EpmRJc(B%_ve#}
zUzkA=+)+{4*D=~o&FD9juDFDLm;BP0i!z$-ff!HCZ7e`wB6Jv~oa?+6x!cyk(MX9L
z@c(Ul#Yh=vHz<Tr8cS&I<4niD=#7&e{nzBw%>Zc{3G9?Cj)AKRGBc0b-hN$vO*Z|@
z>?GcFUsoWy%bZvuKosaaYK*f0ImtyAO(gku<8I@5DfT}Z1?QXk-P~uN?gUB!h1Rg|
zqu+tAeJSJrJVU_?k4x<fEl8)gutRpd$5mM8V{QpK|9SH;3x_X>44RvE9ZTC77*rS#
zb5K-XNRBekTRoky#oJ|dV*WQ4{n^LV*uv(#h5dsa3nES-{uh@V##y%<#sNFX>&EA_
zo!k+i4&onDxQ-cIxTB<zOCNp>S}Mi+U3dDkiXQ2qQ}<V9nrMVo)~ZR~Clfhe4ypAN
zVFn|6%%UzXzCshdf!ldm_c88gg$E4IF2)Q*h8-41K19Ui-mEk~_#&rfx|7OLKrM%l
zDC4_ENNu}z>D_Ij3N(zhB0jAkAbB$zdY!oouJz_WPcu*#|9EpO^QC|(cYvt#NN*t+
zE!+Re)fg>#)rH699eq!((ECJ$>1(6_M%gI7F&e`k%q;w~=qH6O!S4bp7(cK@Q<pPE
z#n)V67Y3Y?d?F*2ng>sUD`uIt$!-e-w<e;eY%ZTi1zzzhp<yX11amnv1XQe`Qwocy
zbG__XK|P&5GM(c-w~T8&r{uy!yG|fa$onqscev04{#}N(6s+kVjQhT=*T|#eYpqzK
zjUBWShas0PZ7Bok8F#X5jIG)+ajrSDcEhb#|6ZD~CvzGivS)%AN)Kf<V;3RM;j4CM
zKkG!QqK(48*5ft{LBjZwmg+w$Dk_YyH08M$uQ`C#9Vd9R)2;7*JsRK(w67=b#RP>v
zt_Y-nVpB|UY1ve};o+E>&T!d;OoE$(RUn$X8wjNlvAgfyp$od~PTGlp4LhI%r^rDy
zKl(p=QY99T&5T73DKOFp#7zBZ;uMUOu5=&zvoRYID!(u%zydLluXQwTHG-rus4>!z
z@(T*kd$L^k1H`X+1un_djYG4upJJ>2l)l)xfofB&X<t5W(Z;L}?<E}Q*5(PP!M{!}
z2C<*FLMIKq2*rIopDHm4+x!yj5<3cg@~J2Ad+gOOvX6NdlT;KjC!DPqL-T=@YQh)K
ztMkA|`YG54bbbNZzv36VG5x(AE(26S{?gup7d5k7uP1rDvZ39Jg4jc%*G$>@y#;Mi
zoiP0hHxj}~d?r?AsfT394gJT7RRO`JC7G(C;rv8vwFaEK7$%#qW$kr~VsUl{0Z3nK
zM9Jk4JB=)ufLA#RVKhS!F^rQciHp_}>yDD;`bl@n&&1W;yF~e?iCfIX?zz$T;pXx`
zm$VRgqJ!kS+ZT~BZUc5b&mE@zC=}&wy;Ef3V3zI!aR9rJU=Nz0-d{rsc?Fb}x35zi
zs@coLm#J_6ECd4aqHOlB<S`fWMLTnu>P!!@u}s4@?`lwDUPrDH3A6;8Dn5aYF3L;Y
z>0Dwe*I}z7BuR?XO0uPi5Z##Eil}6pL?*)_SvPkCQvtu8RGyxE)qmb7#y|Tio6^BR
z6=-&;FVOum5n$<(-rnAg#6XWj-DsOh@yo1gP~$Z<o)_S_e>i24=>F3jfZbC7oT~(u
zc6kWM9*8$T1C}GV8xjxgK>DC3FE3Y*ZXr~&!WT#~G~FD|H6E{RNkv#O5C~?VMw*X!
z^xf%(ev0~s(EDe{r_F}}z_vc9CCdP@*T7KW_7g8d{F>O0_m3E8v)}kPx%&v&weAO=
zmomL_LA};)VJs0F&0B-$n<kCHWV-{chKh)tXEv`{&Bc$a6KC@<^`nc9A)g~}i^yv8
z`m-ZxIT{hu4?NKsT8}yJ;SX;ThL|88xXLvM@WIqr>SMz(^w@i@_0(Fk6ZV?6&%Wv%
ziW`g3&XoCtht_xNdL{wt^7N)GvDr>|Qs@WXyH5f;D>BuqX}JAotm_WfRv}iWNGF8~
z#BaP6WyA=%_+-7AQ6L53y%zdMv-?>=dmh(ijSNKMh2owP-)6Tp_$`Sk1J8BI1G^|V
zkh+J?XRt2}eMDbsiGyO4nS#L7iCdhooKgEr9F5L~kJ-&JRTsht@v53*qh({Tx@Q>O
z1>qr4NUzB`1Tnx07)PP+?xXfRL{JAt7bU?1l0jE2DoHER)ENkHmJ&<CXo@4QX;S$n
zdpaei*TjL-nwO)TR4zzhd?POXXTD$asaI~uc#eB6f@QC21aFU1iTz<=mn$UT!3T-d
zzK%{DMR}~FBD}P#F1B6Ic89duYD6;ZZ(VlyWw~jQJ2$^bY-W!ou@?Or&nw;k5?akC
zwQYl`zi*gmYp-fq>g(U#_BZl3`l}}X`D^{Mj5c^k;(@&NYQV{mH!{J&qXmfMUIhT}
z`l8RRg$02UFKHK$jT7>StO4r`K_H!h+v{*ix9&K72Zq=w(DTw0FL+-K(6H<~(hR8o
z?-b0`=+QUIC}~U(;75v8b3U4daSGq?HeLV51fzzik(>5~C`F8NU`6QnWZ#YowQPMz
zU;Q+@FYRJm->7g$6xda%a7*sw_hBV<Ab?kn`I)J53{`0o|8Bh*M$aBpLHjc(GR_~O
zON-O?yDQeE;}wzVd37SmkKEp9ss=(y=ZpzL`})-~!G}IOO+cwq|ImomL*dFW>R8SF
z3Hg9T{TDqk7%9nyETBmaBhsEkfmb(<HsDG$=K5f5y}_$pG)~BY*J|K0S(C*tid#$4
z$O3tNqBf_Y2|7-%a;B*hA~E;CCGXHM{hDXDj7TML&lWluNTu5$Z`xPHQ?c=Lbr@ca
ztFYVhWWRAmHWi812AA5#8eg(g=KVA5nUB(uqW3dTgINP=L>Bz_{dLBWs0NVptu_4G
zBI!NIYZ;w8@7q#dkgYHhsY|OqEJyYGQ?*Z^VBwn~fjK~!^GlsL@?QYczE=c4y^x}}
z*)<GDh@4uzB)V@;>2yFVX+ypPWy<dy{uJER?>Y*K;Eb&Er`QXj`jWe|!w1Z&!*?JV
z7yOxi;_{$egpidF2>ITAPu+#jg)Ruk1ZuT-EBWqyc8JFSJB4*&`LL-yuhV%`4IgL!
zN7hABfWD#-34Gwv?`;o@nwfd2qo?OPZr7CBVHH2J1;++CHf%AdScASN&?g24KIUgk
zIX3d)Gpl{#MNfBX5n}V{Y+zEn54PRnS0ZNbS5G>eNpX@!FmwIk{qj1|kdshxFiXHD
zX?sF@EZxxh%f`()&^cZ2RZeF9XT;F*0(kTMs+!ydfS#WX3B9naE@1c1<w@s_VKv&X
zQhNhtiq&wHU|bATVv-PB1`K4ut0v6K$>7MMa>wEx83FPHJ4YW}8M|8*<>ihhLWY){
zs%y0LYv<#8DYnZzY=U(1sCl(!szW{4-0zU1Nuyv-lLvtq!It+4NZ?|g7op<@5B>pf
zh}A?dl23_-qU-B?ca!S2Jj*RC1F1%xF1a}~a8Ui)DARA8F%E?GI)t(2j;t^D(J$WQ
zAZ<VckAr;=my7~GBTIyXPFOnexp}L3EnF-xU-$h=>u!&HEnic2liM>K7>dXrp21Wl
z?nmT(AQAd~CK%k4JhfHF%H`XxMP9S>yzb%KyT?}#9H6+5Nx=0Aea~1UViOe_zjmWJ
zs6*%^E`eB^AWlIW(UYX$>VHd*0<rXO6AvKw(V#T;=12$-S&S0HX(S$zB};x{0vqOv
z&xM892J9h4z3;-Yx)Q}8NRA^&F1f-+f_8phIjh@B$u{pBedt^l(Lkt#rd5K8_0uCq
zdTzLLo+hL&lE(NC`Jn3hE5MSU(X`rPOJhF#a_{+}pdc556cy4$chB<&f7gHCNvIse
zL3U>mCvu_Bw!*1qz?4GbHax8s^bTKsLI!w&*4To75J*~vaz}n)j9|)db5V@}Hc+Ki
zC*9~CU1JPA=iMoa=dW-AFJ;KxhNUuV{PEwj-!`5Axv;LbeD+xb0|U1=A%W!@X=b)o
zYz<1;;{Fvs8PZLG5s%xM(ZEhD;N{i-k!Lm?XxfeRje3srsqVl9&?~FdfV*q6s(}{c
zw<17tQxlNx3ZxgJe&EVWmxEWBhXj55#u7&^geP&?j?<zAIsVC*ZF+xuHC^l3L#Wu1
zbyTdRH|f}P)IDVy>eg8|Sf+mHRHbL)|D%e*zW&dLOpKb{Pl@8!z0+1eS|-Pz=(`63
zR(?Hv?~nd$$B|;LdU;?n>*KYbgJl$qTz;3%SQNt57VfDV=UDv4Jx|R$!9d#0XNw<$
zaygm6qrJ!E_P<hE*xS{|<t7*8og>+tM*KAAq0Bn7T>_?@srDY{X>{Ra%q=MA3Zc1M
z5IlsM9-SFVNU$_DI@o56Mvf|xFW0&A5b0YkggYd0L>0G*sWXW{s}NSPS`(huT0szN
zzSwSTtuFh;FXblhC|g}DLBXrs=JU9m`K2(2V!&5@P0eVFAyFKWgPO!0$`{v!0Rrow
zrjwyW?zoGRt@KDuvWSYk=O}4H#U#slMio2EP}dY}IlDS^^#^YlWx6w!91cT(jq3=N
zIeD$nT*!n?Si-$l4SmJc#OzYS4dq(u7kU$cQp(X5ul-aTpFiTz!`QR!C$C)=I1k_l
z*?uTDdlk(0Z|=5Kf~AhY;b;Nt6N9UqsLV8y-zzYV`jVicV~3bm)W+Voo?hGQtXw%J
z#4-_Dacu{#cBtA|-0_pAB196x=RT?8bW)npPSZM<@Yvz?DicL5<`LUmV)&@c6e0y?
zbj*{hJ$H8Le(#Ywd+hy&OCtTtkzZ3bmSnAxXsDG!xW~(PiD(u@+2TQF>47-xDrU)x
zf{`JyTfM8zs$Lej)OfeYt#6qP7OoG_rZ#SmrgFYP1M832?D=2QZU3Y-e2PFD=yj_n
z%r2Z+!}3_{mdF??I8Y$d+5!q?j1ilCifQwUA|E=sX>;#pAZdawFyp|xv-c5P8z*u^
zM%8MgH6?EEI9OKVu&hRC?RWZf=ciu*`Lk^RDqVr8xlI6uG!GO&SgO6Xs)<1@&@DDT
zBQ|o+5b@-AOsnw&0<VnRU*s;3ANP>E#>JvmNh7PPV403E3lqlDxd3B(E|~ro3+<aL
zT|J}la7?0_Y+tm+n}rK!AZFU9h;>i3&6HU~m=OQd?e%1<u_DBL1=n|>TfXqSLAZHH
zGQg@(0g1qNMYcKtH?xZ#eS@7ism4BAEOWtIXT<HDu#axf%Yf8swHKZfdhX5dfD_(4
zy6^M)e?~5w@sB2V@y{oDVkHG&hvk84@M%VhA(9{MLpn&n2?w-jxPem7B@tz%n1ZOa
z)#%d7sEJR_hNvils2)!BPpJf<Q3LQ+D$>}8rbE1!AD;u`D~#7SdZxV-zGmqiJ?(m2
zV9fQw&XYiY=!4HbRg|1LR2}41R81tB*=a6Eyyp-{4at{jtgZ&#P`YuQi!N#CjF07&
zp3ydW9q^?cA55m<<>J2Az1lP}2saZU4=N3KLojpe&t<)?Bg%c`*mPbVcvR`vWI#FU
z+ljluBfHAYTN^>Lg#`7{pGjoG7VOM>am!yszFG?P?)SdNhF;?_ZE1(1RBbG+N2~M1
zD{^;dd4X4gkz%Ooj#Aq{kkUyEDJY>=b0f*-RgikWLe`inq7r{tb7&H=Mf%`>Me~F}
zVf-z7#nE7Eo2SQIXdbe>i;WSg$qD%--T;SBn6}`d^6sCm1l8S&CI)}Y3H63*=AZC@
zXD+Nc)bxZ7-FEL7%x4VLX&US)H#DMWG=0sB=M$t_Kea@$-Ql%-Ksl7#7K&4JWty+(
zrH`{R$E8j#Ew$0FMtHaAPjy$^S9vlxoBMtxRp$;y7vWDN<9Tn^6TNBp*d;bl1fS6d
z^#*9%bX6Dha!JXGqr5fIU8}fa5q@nzfVAvP3<OVcKM-1E6=VMy1Kei-|FZd9kGpIR
z{R#xnITtiSZq<oTDVd%NBtTK0Q%Wu4MC=TFxG_;l<H{AA=};2b&x3cW0Y+uro-HSt
z1U~wt==fRspJNmLlvE9FYb}}0bth2F9^rX9B7yLqrsd>T{U%6%A}|L5G9t}x=m|$w
z5(97ZV{eCz>q*fF!_9$pEY@g2@yjLTIUvnCGr<z**`@uAxXGG;+%H!5s!i$*Alq5#
z>>DK59*`DUjSl~<m;gGazkeh-9{nX!ON*@me+fxoj$O1AmXEDK8>maQ#Mz>yf{$y-
z8?_Q5%@_pMtbnk9hlSu{P&Z!2EgQ;~5%BK!9`Py5Vv6BFjVBbpM>Se)C|4AzzFj|&
z&Uqul_Cg~v@!<m7*xv=Okh{~d%>;pJR25J-8eE!w#5;bvg|~}2m9W^}y)|ZKk7Pf{
z>EJoN6FKEvRjN7P3UzprZGO~Luhy&ayu)vZo|Y?cg1qTrpUms-JrTF(gguC9t%B1u
zUj-5Ok03)3SG$ZLo{L%_)hrAuo8fZbC3w|8cMboouNHW&&SaB?34Kq?NhsxZ<R?pf
zm0O|Chw+P*7%>m<cVi05nO6l#={t6<7p++C%dqt7F!9N}HP?x}zV<mrX4!oyZyCj5
z&^C;<_DoYYKz#25)zS}=%FtQs%(BD9;0t=+Yh!N*=CWcztt+X|#~~`eG*JU>`DD~5
zd0?{nRb~X*?;ji6()7?KIvLSf;avU5cWx##MOup0+{p?dHSzql)LON~EfWlM%-i6x
zQ_m_z{&Cv6d8se+Ub6&N`S_2eW-|fQf{qw=F(-b1&`LxAm;UMb959Ooq{+`CCG}cw
zYroL7UXPczJP)f9zIge*g|N8|hRe&#TcUKqar4;hR(yFfUBJp1=#gEP&=>=ZS2!sB
zPe;_cFpT2g8#x8yWV>{eOacDO--}&N1_Uf-cni69G|p%2ILQON7|x6$YXGY>N+5^T
zGIHim5rbQ0FMcLL)sKR`P5sBn=iT~^tg@L-oYtH91K~`)o}HHM+ndD)@dWYfO@fB0
z#U6%*O*S7ny^s&Ph%HLJu7KBbS*O6wON!VaK&hy+^RGPTUlrW{;YvK8(gsI4If|vl
z=`P_c>~K<ZCX5A{;Zm~^$VZujXK$gLYa&0S$y8F__UItfzoOriL93Dr-TcLi`Qd4P
zWeYaux?i++m9_cwZ=Vay2WndOsUOoTXeU1!O)`$#T2kCw#aC046*0J)%<oF83({Ib
zm|6Q3wT(v6euPHmETYP2bQ-RYJR`>37+4jvHe=2%s27S89hB&;cNWB;n_&ugM%^vc
z!?Y0P?3A9}>Y-XG6LWDtURrCBO+~Re&u@KRwdhTmc1}9O6!h$^3I5e3asX84TuSp5
z{Vg;Kgc198D1||s>OIp(6NI9`AJ$0W(Bqk86<4VnSN61LFva#~$w^elUKvg>&@9`Y
z+{>XQS@f*8=5lYXly_2UY#SV|yeWI^^NHa<s+3z6Wd)%9b-mc7P33pyV-wM}&zUkR
zr1~SE5>r+~#CEpwqj}*rUkzd)C(^0ojzQ3kjHqsns*5A09f8iW?Xv<NYlYe%X<w`I
zw~pLJyNYfXSJQ^RaB{w(UET357gtxF?d@%02ZQYQ;c*yi(KLOR31>k6ONqWWnbHRM
zHwFXAf`J9U*mc`A6)1ja-CdVmvPemB5r-B0sQ@!GAY}4bV-s>3&uyi|03MGr&3Sow
z&HhH1)Ict6IPmKucX#6f@A`x9*u`vysV^2w?+zjgtfMqGXJ1r46b@XOXnhy`GYhoH
zQ9V?Feg*r;XxN?a^^EJansuiPTYxxHwb_z4k0vpIK}UmDV>B8^-4fEhL(8p`fB7h9
z;FYqDu5P`yZ^Y4RkLNY{!U;ARKNf!$I!T<mUP09}!t$1D7D}JZ-1i*l8mA6J&-+`c
z8d+)_?*YQ9d~6QL*EDn;;M;!~EgAa~^I&}-g0TB#dw*!Zcvjix0G&AqiYp}<L+wY+
zgcQPrbWiXWM_gm;w=4(*l8eFckn}mA4<n>TM-P*HM*Z2ok0E_vVsh~&+jXP)&np8w
zbFRj#dCP@<V4HF<^Mve}(seK+o91m~kbm}iuvvOU5RECA80r7{XSf&_*fB20E;q`c
zsW_vBY#5vr0cJ93=WtgCByco=5?#>J3OaQN7?m!8$(g)f;ccvSKCSF0Tl_S0$<80!
z%>{2^VbYBH&JJC!*2;r-QVDqBu=#0)RpH-imNm5S=I#WH0SlS4Hr|5BLcdj$m2j+|
z-eq$_@8MFGO%bjemd&yR%;?nSLWm#=>dWUJ!yv+~3GYYHm(?E{&{k{H)6&h$UrYvE
z@|*Ke%Es)I!OK3v5zMp<Uj!$M--)4tF{u6ghB;kAiC8%!I2f>%yLv-q;dm@BrV`v^
zFjqHZxj7Q%hGO5(Nn?C>Fw~&4*X(yobjAv(2&D|NMw@gQFLs`drZL3QcASedAN1{r
zZ?DrNSS^#g5ki!O5lWSOMU1chp1@77oF?=lruZg@8ds*e0!)j2g)3dqKWdHw>|<en
z&=$1pf^dPbg3BQP7iDi57G?MK4U;nT&|L#a34$VB0}QF8bPS==ozmSc2-1y8OLvE$
zv~+iebU)`@|NA-a=f1D^%ll~#7>+rZbML+O`o&snB<)&|r`u^*EK-)vvqWmV3s00d
zly>qKEr^C|f}M}bUzX0BIM&4x-+NDQsS_BXS>160b9LLKuIPxFc|yo5xBLm7h_@0W
zd}uG-xQl^9?sw#U<f(K=KWbC9T{j*@@sj$4Gah<7mU)~d?)%_zh<-D45S71#m`6&)
zXs%yiI}Hqno>OAr58^1R&mHHb0Y=dWq!Tes^po5#-mZUAK2C1CD;O8^+^@t?5?Be+
zcbfR~XC(le%Y1IwW}81pO^3Ar=3`-P?fmU^y1n3|#A2;|B6+s=7g0|>TL9o){2}Kt
zkq#A<o3;lUC)eI<s#3-R(*{W4SDj?p2X_#jULaoyFHlV0)M`2y>ix{ByTb$YG!v>$
zwwF5D|E}*k^WMg3!0t5T$O|K)h(yXr3Y3CmA_bapkZMOfL*)N{+2#b^%B_<gE9(Mp
zcYx*{*IepXQaMCBP|BrNgH0My`_Uo&bvd0({Zh~)PT%;cU`XXp4NpA0+={C1SGN(T
z56;i=6RitoEvx+U8)CnaIdhSS%KgqycwM;?PB|M%r=PbUD*PFqW0N@@&gf_(mk?>F
z%$)K7`7Du+he9YOeKqn@z7DAYo2kBSF4J@6()U3xH1ykyvB%l>kLQjPVs660AY$xe
z553(<0gO<H*e|Zbar~9B7gyW+%XxYsV@BJ?b&;WyGps_DlD2x17-Z%8IP!P`45(U-
z4BBJeZ)30tpY`{2kbxS+6x8E4slp?wVq+k|BIQlt^+(o{lSJa%Txu)L6tX~<zQ*TQ
zDodjF!$jg=l~6!}(oDGo(vyGk-k-B~GZGMMXfkwL;qvszR1a(8%-phW2H<%}*{x*(
zHB-HINKIZ+MnnW7Z7slHQ%Aebt+o~$l(08wj#Rc>l0Lv>V;b=Gvta2^nUXk;_E%H-
z<1;zY-}ioDO3-ZV)8`uOz?DQ!x@~>&6%dW2`JL^#Q$#+#7!p{E;@UbH_I)6F4$N%`
zU4x7>zt}AU=KhiZ%!O9yQ-${qvlc}k+j@kl(Nj}X(<1}McGk%ns96tStzi-<kwe|6
z89keSwBS7egMWF)AiQw6KkH1>n0c`g#u(EMjQgE$O>J8;J=6!9jSFlfsyFs1bVkAN
zceREp8GY#+KK8$XTnfK(+Xq5)CopaI%bbngo*0<+V6GUdb(vj}=p-#xXoET%!Z3n|
zOe9f_+U<(_|7@;*wp#WS1hDKGQt38vOJ#4-AKw&@AFmO`n5KrOuqe@gF_2bkX402l
z37n@(dBQ0DB8{m=Ho@v3evwe>-L*qmN+$jAllHuyr}q7PBrT=<dw10Qve`|VOh4C7
zf@B@7(y8%>0<YILqql1u-oO%lXO+G^ug-dR6ZuumC@v)#l$*qbtWd>ZA`V-<OMK}Y
zGCp)O;~{nNIYZkD`?JWcRuE%NSdlj|M#+2jFmiRN#24r?bV269CB)<paV&l+DlNP$
z&c`Y$=lm?MRia}_zUPA=TPO?+k-N@txvz2Nwvbl&=dE7jV`QMZU>*t!ScC=pgwobI
z$+(HOEgrj2Y%K*Zi=#?6o2`mjI9vKv2PXa7WShME5+sQHXz&=kda`^&ZL6#*$aTUe
zvnWU?x_euc=Uwvsyhsa??Hpoj)vnoT*@3(?(GovP?I2Z$rSl?po539C_KNr)H;_hJ
zota;oFO_lpZSZa?y8xzPyYB<Twlioyb8EIK3NyCMxz!&w?j5g$(v@i$^i-Q@8MyrM
zaJd#vWAxj8oldXyB>tY^!Dp{bPGIB<QD6{l(^0FZ-V|_QQv*%2<>q{BO@~D<y8*y|
zKVPQzxPtF%&!x7f;re6zOI2SF8GK(&v)XR)i#DX~O+ecc^Zc|*d{<by%q*EPv$2$q
zswI&ioV8T%cI=PnOj4NH<Nc+Z67@k}rMFb}OSIQWqZI6#X8+@+MBJM#1i)50>-{?W
ziULIx$6u3hqv&DT{k3nBT~YYbrfiDc0GT=x149t45UD&8^v9ei^#`g4m-TwkX$hu8
zk=DY~02K_<OBwMgWFfq(g}JL4)I*~un1t){Sj36Bok`Ecl?LYK>>j^a#;@y!lMmN^
zLXuRJTn!ESED#KK^b2bU&464C4sbXO!XLxggbyctCJZaf>ztF@&Ux<?KV&m2Fo4ie
z93sFu#T63&w--P_lob!%WGKh?Su}8K2{{Z8Ovo>A#%8IljFgiicifpLxP@oK;T>YH
zJm$ingdB9S!A`)+31y(6U+?L7M<FMp7oQ#MlE5<}7~%d9aECFgR#G8HpA+VBh_8FP
z;;gwJ2NWc)f?{4*2CJFMO%vEzN-N$|N>fs9OUB#dfuS=@r(&#gd)j9-JRQ+?bU^Kj
zD-n=^w97E6=<DOmJna2Gc=B+Y3V)3h9~)xh7TOLhs9p1MCpJy0*JaaE&!XqiLQbo9
z&n6Z<p7@<TwPQcSL8yV<(!H&T2kXLC<JP&1uLaQD2z9g^E`CXM1^j)F)39irq4>eP
z`&zVt5R#WBa*#d+lb<=9Z&TONTZl--Yex~@DbJFTXtk;)Bo{Q&3K0BjQ*93}dNpdY
z>E0JJar6vrQB?f4Es1nOg^7#+?zPpc0x(>%Yi=o|Dd&s^;B_o+ca<)!zO24p>py@7
zko3qzn&drd#n-E&L|<&Mh+kv6P8)|_{NcL)iO5KE3=b)Rc>*^c=L#K;fK2IJ?|Sb$
zipVATL(he#V;DxzQJ(s3qmUQ#{f}D^kyjXo`T?Dn4df02aQrjF+c}=Mgq;ox(Qs&$
z*}FDEv4|Bqdx#}QkOLyejIQnph27b>sil-!btTa`vj{h6%Eeg%fbT>3roL<iQuqgi
zvBTazK{=C4OkOF6qgq%3Lc{tfcBHK|5oa}3>*^&K>zJ`I)NpYz&NQn2Gs-D3?DV%-
zgSgyXHoxX4i|6RQJL01FEE$fJ!&NJF1G7UjU3`?5V!e$Pj}i%xI5{Wmap`Iy2T7g<
zf(Z6vf?q-sautA-12p6r(-$ZWL?dX3+zc@(#VTd9RAGxl3aE^HaW7q6iHy9+|B%a#
z&h@$+S{Xd6m`{I+fl0KE#y}7>W{;*gD5?tM@}qwB>4ch&w|1_OUIy}H3k7N%)D4EP
zId*~sKQak?h;kh+wVI+=U<f)41ov@0=ak{q_Rk5;?Br)=3#nKIb7O#-2!ISDTNq86
zD<WlLtVo%T+<2Tu*VWn-9A_@E>VE<IhM$OHEcM<A9SkspI2S;5l#()|>?Z_bb=v#|
zRa8_gvXQP<PUZcH$q2NtpUR1r^SZwr)447|2`d|W(|_G@PrA4N?qHWm)BMPhzN2&4
zr?&NW=DE)aww%#OYuNnJQd?W`=fKc(k-vk0_rYO8RTer#ehoWSA4qU)jQ-XP0OhN>
zrH9W;-8PDe5U8vc?3+lY_k~V!fb5Qf5C@@n6rDJ&<Er~cl9mv!;9>n*1;BSYf7S8;
zH%L`KPi+cfye=akJd*1kZ{4q7i{T=Xzx9~oM{AU9Z&hxR?A`tMEm+3@+=7dws!g;~
z*`W}6$?K3M{b(w?D^9g=a&`qtR=iQ<fP9BAd{SmV5ZWEFa9p|TdR<?H@Chm%apPO^
z)h=d*W4zMPpzXiXkl>JBO~)CF#3cLuRd5eRHT7mTq;6vp9Nj%i89nab8EZ0>Gq)Oq
zpSjF1rPR&e;3yl%^2ve)0JL|pf*4`slYDi#!AjsywP|5(3)gly8-a6+`b<JPXWcfS
za)YSNrx9pjsGO8wb`Dv27do^rA)S~cD8zXx_G+xi(tM@CiTH=eO_M0$R$A3rirzVl
z&2&uG=7y?)n~l0GBA_JA`Uy&<w+xZsUXkC^`R)(o=vZu6^aD?D9li<h(y^1yk7V8k
zrmCN{3$Zxb?<oP6U5)Mfc{;*TP@j#2qCtk!muyW8hSr*2Q1I+|8hP!wR&&E#k(AM&
z?;1eu-|X_Vw&YgZE4#F%O~$sxHs&<(c~YvCHX5szjb@Xc2u@dT1Kel1PJo*srvG<e
zJ1DITTy+x-TLy-$_m<Wz&gNVL-6&3cA1{4rcIUL@@&WqyzS!F()SF;4gJ6Rt%j<>f
zoK4;N>|WgwKsFzxvsJeUzE=d%Ck{a^XdcF4F_;G#%(U*y$RhV=<1|W1&uQcQppqeX
zf1~ZZPzfvLR7MR&a?dCf@^Tz+59-!_^Dq56+O2)wd@Ly^J*xBZ{(Q;-xKkw#vD4HM
z;|9FWi{S^(VOHfWwSk_&l)wl33;gY8oV)2~Fcn;Y&L&q431I{Okio4bVuwj1c34m^
z-v5g)|3RA)&!qsnV#~8^SHTboWtruRIomE~U`&7ut`$%IcQj^VaXBP{&9o235%d92
z!gZ!rX4ifKMnUADvZfJPOAa_vd>tp2sFJ^w&4Li`%MBT}@XLf%2pXywe`eSXc`#P#
z>%2I*LY3eAy#oUqv?I8=O51S`Hr-jDAZ}Z3(!vI)O!fAw7(!^$YpRXn-Ie(<wY`<Z
z7c)-ycY*k0x9^uM_cou2KB%mvl4zf-w#8f6<O}#6f=)mvomnVh;3e}j_3hO>q}(_F
z5YrRuk--Z(RgmVzjQg==kb^mtEFc|d8T4a61$N1vOWuzuFBk1eeXWmL#fni}!6D&t
z4wDm%4^m6-PKl7}4D&JV%d5BZ#Z#<7>2uA+a6^^fZ-))xI|hz;OCtv-i@|sbQvxo-
z#^C1j=}3@S6=h@@n)2r{oqsJ0b#ey#!+w(2PVpPue5R$7YeE9B()0%abN<X|dEd&6
z^!4jkb0^P{w2cfBMr$Fdo?Sk4|I}1UeV^+Mn#OH6ncKPpVcyxGh_ZQ7pPTV4p=7^#
z6~bQ+=jFaVz#JVXjkKCYLX@x}G>o)YKdrZZ{CE*|HT;~;_l^f4THLYMwTvqXuOzA~
zIdraOJ>G56bbmq+*daI+tMfFok&KD1k~=JKC$zqC{EeJ{U)KD0;O={^jiBJ&8r`G$
z+){e<AsRTNL3dl9nVA_6zd_M?Lo9c1@?4JxjSn69R&0T|x}@}fu@gq1vv-JO>{FhZ
z6F-^<0g8MCnr*)K!I5nvW{uVENZqqA%SPUyFO*PVoiP7`Y3S3jgFJ7u0x%5QoC5m`
zVR4#J>W@!>vVLqO+c&8qu(8J09E!oI5}7C_mpIcWa`lQTPzuz9pJ;?kHG`3gJQa4Y
zV1!I20<Lb%843GPoQAcYkG8QQ$_XN|>MA*V5g!)lQg!o)C3pq@-Veg>AP;xRZAMpN
z1Pi!JRx$E-@r8Pwt96;OE5gc<73`d^-zkl;-k=aayJ96hMn~mh4%eqAmPnqIhJYR%
zZm}%&1b*~|$H9l_iKV->rcC~LI*n-8ky40pbNvcu-#%U*(>gvFK<S<CBW5D;GM{%_
z#XBAihfrL0<JcJOQR}#2DBrbTsR6w}hn!E&XE{n`l#mFDz82QB;>kBkNE39|n+`)~
z>1?YEZK>w?{(;up$RKMAWNB5^cp}mM0|qnIC7Ne4)6SuQPM{6wPI2H|Z;QuT@7p!1
zrt&2($n2c(6V`%3Kr>iYYuxBf6>?z*QueZW+fWxCgM22uh||m6MwdOI{CM*vV;~M4
zHlHdrpN%OVDA&x~0=nEbz0By**6EP&uz}SBW>DAp6g(D?)m*`ESYgs!!9io8^IoUF
zuMMsrage99VyH91;fV4EYJg7OJ0Fdi7h{STO&8)&_^tKxtu5g&E1!bhl);V?QjQbr
zy{uUo145)e-gxdy;k)wq-1%wZ_2Ok~Xt`Gpb#G(WVvGwSAPJk8y!vmt>%Yja5n%-D
zbre->ki;;u29C2iAo&Hqv(x=ureF00<}Zo!%<Kjm3)oC(Q&3;OTc3oD%$I(&A_`gA
zHH?GT>1xysnOcpB<d7dV?;>em$mkMjPfbMCM8DRO;72+t_2n~?6%YUG*y^AGQ)_On
zo)%Q<r_LUP80sq_19?zwgHpV?vf3TEXju}!i%~>59TKMTx~;O2O<^<`zlq!Ih|Z!<
zI7TqAuHeUd9{%Xxbvg-g^dR={;LWak34(E>W8)vnx#+$1e$xIX-&5+RH*Gkw#Ts4F
z*gWF;8RSb$e{*VA)nXDXN}Vf`G8i_YFb7j42BA6|W_MxSazB&f*8Kh2ZcKMs_Gfm^
zS85^ZjU<w<hkCFR^dpYipVFcPuTxLdRh%wES+Z5qcOE3-qq^}eBJ^L(D@mu!<~30K
z22w0yyPn3s1k)Q==T3TdiafPeuYfEyGq(LRSYmr=P2VH(ZvKKQ@G}7)RbWER3>am+
z@Xa1?ba2>Try;?j!M7kPN`5zeJT%8Q=J4JqinZS1KYMj6fWV7ZkZJ*U1^5GMAa_1&
zOPc4o_t8*DrFi+Fo*0~QJ_m%SqD&7gU`mvcEv1cBxXAkIu}<W1Sy|cPh(Q1tQ))K(
zbXa`J;I?X5tZ6X^6;A+3mc}KqSdp6~RiAG*l0ZrH{B6m~qZXoeV(<J<%-9DY%P*6<
z&w4mxacjN6NMx6?V4E#Uj{`}vX(qlfJz4EJXvz^r4x(%WSmFBH!zSS~DnUo4A(7M9
zZb#cUe-&G$q<va!s8Fa7`4xXq91Z`!()YyxMEb7CbRdM|PaD&&TZngcJ!59dzQkLs
zH?=Ic=~DnrBt_4_4w42t`h&(QI~pVeHUa@~FXwo&!SvfHIIYa^w!!l6l;ejm7@>J|
zFK{yqO<+QPYzV3Ra!L&9I>c?U?<dl&KK~t^rWc95mGG3IY_%2^=ENwk1uAG&VaJVr
zjx24(8<BdW$r5pVqW|fO)6KBkyuZA9;kwNH(@E7r@-LT{gQ}^PP$B&Yh>%2(LgEv~
z*94MbWw^vpIV1)$5NRoi><UM`WPLulY6PCxjXA}K)>8s8?P}^*9D5ZWHjF%l_5N$O
z5}~0+$T!5-Dgy%F+qzkCqdaXCQE*Rij&kA@{nb=;13FM|jD8&>Px~|xOdAhq<52X6
z{`DH6wuw<WYA33CM{brZ!&vw9V-7I|TSEwUflPk*7F;jXUMS=$AC<?VjZt6x_CMSW
z3*<P9SmJDN3h1WUA$aHYL?Wu<8Yf#P84najEe^Q&2v+QZFJQUp*w356j?`Dr-UCS*
zSB7L_+vO}-{HEiV{-iQBN<d3RHp_6CylFFY%J{L@_QED4?BW8EQ!RR(zL{65w7vaN
zkdCqF`{=!uIQrlvOYIOu<TEijS?2b&#cu_WY+WRS?qmQuHB`}?$L(<b&T>lxVE3n-
z+jZO45Q9!xjE0WrJNlTD^~Xw&^Ei-yg`j~K7LwJk9x)HL%0AL~9e04aG;#djzz`dV
zgvZM6U$lcL34(T*=$~oE^*0P@XNe?T*#~B6M9oy?g!ai3PBOqLHF}U){Ne<lwqPh7
zI+&^R{&gV36o#OvKu(~Z88m(w+FT<IzEe*jQQZDYYhCz>A~_S1X@rH!v!~DdIjg%V
z_7KO1&fv+9wPNMlT(R9k{JvPLEGmlwrwq9d<M6nzvAw2YYDkrZYyq!0dF)#Eg-oWo
z?{<cLdk?+1n@W=!Vjod^6c?qt$z%u?_|lOAT(?_|Qg)uLqd-RkBEPWss1T#RmL<$a
z+Km5Zx3a<l?+akA!Ewlm{IvR13s=yNwMJgi3hj+Pgh?oIOj;6skx5BF{g*TQ`yLqU
z<~36xTXv6Zf-N3fZG1|B0C6`hoI2Kyt`^@lg&Sq`M#k-zlh5*fr;`9f&=|bJ`vqmr
ztrStNGjVunv0DsrSF8xtpRQh8E906yM4U1VY6rN4cMDlgo*;GY`i34*+Hcs%%@(-+
z@!|I5*URB`*D1X{+()|mZP_?;GxdmWe8^JrbNFIT8X8F(kS@hPF8Pm9u$Dq^{~~B?
zASl?~?w(&Hr5f*y73}@7*s222ucvUgQnCD~v6@;1$o1tTn)~hh>L?oF$p)6~%gc~~
z0Ca5qPebXXvzHp*d47NM#)=2~Hr2SfvT}0v*!i4N0lOypw3o_m880I8G%^byc*+z_
zKf4)~19hz@eRNq`Yc{*78v>)P`^~3AS0}N)^Q|5&_nzA(mq2|_xmHmIE++j%VbiTz
z-)UsfyT+o#kgf=Zif^Fl%bh~Vhl78Ez#;?{nn@{`R>v?h2u|s!`{grKx47whS2^gk
ze}?Wg*!lvkupQ*cCYgdS0n^2hPq?j;44$9MS6ZiUkh;(*p`C2RsG4`%;SNjo^h)y%
zDPEJuA~}0qm)-7Ne<4PAl$kAgzMt+{o3_`d%H*mdt|1tTbZD-JucfZz5FB<XU_cKr
zG%>X%FsYz-B3lrXtoKMuynypS&%Pa+)k?69XN^iXxHSwtb@G)N=o27KhDeiz81al7
z^`i$2;fVF73_QX2eUkmP1TDJzZ^F_Y?r`%Bo_rAG?dK%5ZhBQTbRw?p2nqkoxVav_
zox{AuAgsf%is$RzQfBxOdRS~;BR*wT5hfwpBG40Q;yubV)}Z6Hs84uZC$h8>#!`$4
zBAfcaf0!*GyT(o;lUoyv5+(zXT+6Yt;BxAa$|Vt8hQjj-6U5n-P=+l7TOfk<*<d*B
zz|P@m7La4zv5d~w_NlQWw_KNdHdjG%0zi8U0GbnZY^kcH+zV&Pv=6{4sM#(-5L^Ox
z$6ZsxXS>Dat4Dz2!^34(a3zR{zAvC`p!wse{aQ4?tH+gEVLTPDxk^zV!rCNqvz<p1
z!}g~apu=Z##M)K?Uevn?4=uw$%SYVC_i80n<x!yL8=>yq@Z+6w=o!JmtsFVTzdt0x
zp3v|b)`^M9IvYvzcW%9QID6XzaOgEG)SmDDDK_v(sEyc{G20rn8=s!uriRQ$@=ts)
zMFSHW_WQpx-7Mo}dpvr)Z@U|xt7WJdMeHvbsrR`5-d~}N!2Y78l}Kx47|{c}$Jnji
zr{i;K9din4^}jA+<pq%ys*tieuZBXf=p~^A9sOAJavyH*nJQ;Gh&Z`50`i)4pp$d*
zxGC~bF7S0v@fORRT))H)3jfYc9EnIhyU%(zmgNc>zS1`RNuW?;8;~TPsFkR*;}*2U
zdBW21J2zy&;e+=%B<H1=vJ;WcWY>lU8XJp?Hy1pzR#&xz;nEA%U9hyrUhBDRy%`w}
z8X{6Ldm;s0tN8p1n2A3U42*1hOKvKjL5uYRB}{_bPhjoNH+eBa7M>og+V!N-vxBI;
z|C#~lBRRlXo_hvSd*#mK7JqlPt8>(&)G;XJs&W-)(o9Iq%S2w4D2+?3H^I-B=lX`m
zw)IR_;BQ5F?#FXo*OPfV5oENvr>kN7b=(><s8hsmhznPicEC7`8&**#MMb}t26Rlf
z+Avdn=WG9Y#?zGGX>H`7)^X`ZOI0j?PK~IF8MS`fw6#f|gV}PQbB^ljYG+Kp#WJ#;
z7Qhadr<^6m^**3G*3nbD(j-_fF+$SRMI&VNK#`4~Y4X?eNV4ayJ1_q3RWD==N}vXR
zCbTWlsVem5uUpDMG67PxtMROdi5z%b+c&`EY5p3Z!S2P>EMsPzO$ObBMjn6y^s$_B
zAGf2rB_Ab;QJvX1z-y0Rx8SOWu@%B&+AFXX+!2W3My^g`kWucv2H;6t;lp~<Tgzlg
zsc*cE9E4T|fO<sS?a@YaI=Ab#`o%1B#(1$2BN0W)miQpD`?)UwCV9+;(l0{iA9_Lb
z6DmAvC46t4m7{4zJ*0l`*E5W;p<H;+vOUwZ_}4Ak0!G}To!PU@0C`W~4>a^4YHQwq
zQL=$*SU_PPEQx%W{gpd>46JT^oMW0|!7b^GsWO0CAO<Ed>`x@|0MBinwTC9(?X@f@
zv+F}J<9WXmGnes_cyuX5I-&GmT!N0B=ca?H;nI9*>htaV4>RycC-44%k`w(KY`%oN
zpme%3dfwhT6jNtka}%N1BxheaC)(7&w3p-VZ?!a+S&A}Z#)kw%`BlYU!(l7ZQRLDU
z?xV6-e-E2XB-$QkUY=(r9qS8vvg^WqkuVEeKp~L?tbn!M%2$BHFS`Qjo^<i8yZq6f
ztgQI}`8B!dSdShT9)##lq>L}(QxLwb9t1;jLoJV$PoF77W!)u~)#q;2$%y@ZNIG32
zq|3$$zQcVcQ*;<z<Lo2Hlv{taiCr<CVr*_}=}?AmnWgkJ&gdr6J#q}ro6AihJ3!Z)
zEu}0AdmLJ7*KcqnA^bv2^ECI${6S>Dq3>|J4jog<E&jq7u?FpC5)!1h5bh>+1%fz$
zo@i^)Ya}<WDj-<A=$*RfbVFf@nhzU1Vo#FPGGN9Up}Nn&3_KH-0zy~If$y?EhEP#Z
zx{BI2I_VO?$-J<D#n(tAF)=Z*{CDvAk>&TjKZ+^zx#C(u!*BQ(Cca?@&29@ZXOFaD
z%zpj^Xoy~Z?*~6`glOAwiujyF!b_3~ncDm-1aJ4NGOVP1ydP?VsHWh)-WbN=v;SAR
z^f|?wgWrrL+mFe!xO^SfkTZwy$lXHv!q#Gh%Qy=OyS)HU^c5f$pc~I?%xEKb=fWcG
z|7d8ryoxHO6Lfr6#3s~u@D2mlUj%LcmKPsqj`v@Hz%UvC2wdC`Rsqx$*#1&kG}!Zt
zu$J^$6wsJ|_QvB<r7?RX6i0rWP&^n+C}Gcr6(ow1{tZWjK-&1?x9^b$P0MfmzY8&E
zF=OG-9b6GdJqxz0O)(f2q3#u%Ok9ejH^i&IBy<#+aG!y2Ur397*=>)I@Dwsi<2HmJ
zE9GXkT5q@;nct1?MNYZZHD?alT%^@opoW<~3zqntKZSarmT=GPCFj*mAiGSxsW}-q
zpX8NiZ{hv2*M|Q|)#5d{&fr?{Zhxz2Ewah$+ZLJw(TCZ$@KEMU{XnCqF*w2a3jPGF
zx!`~+RuY*UX}oS`x%oE7JM@(EMOpHZwpgd>IH|zZt^LCB0S-w9oVEPdPnG^I2N$ea
z6Z0+*6H7~Y(YXELmCuPNrVl5}U6YP8-Dy>+O5)I3o^?{{ohhOY4k2-gYEpxbY%r3(
zzlqdTMj8d|8!7@k@34BQy&%ElLVY&{uIH2!6a2>ASE}x}8L`KGaCpG!kSMmWw{h}0
z)okWJOp_imN(Lr<;v{72B975ay!;!b@##l~7MqN%1-GSOH7@5Zv=bfhs4oYg+z81;
zk&nK26MXV3U9f6=&GBj6nxD_70b>(WY03pmdfp*G%Z^r-o3#5{O(yZR<@g%lCBi)(
z_?FTk1V070(#JWuC?5g5&;w`+3me~DXDwLL9S7JlXyJ9XG(*Bi&9*%1@aR#E9VKZ7
zp3-^fnVpf1O{rq|<R5{Cn`jc?BUjIW%x|mFRXYpVf?T4Cp{Sb1AZsQd;5Eie=)C-I
z=fr>cD7H@!28zDW5w3RdHVtT-lU+3X&&_wZfqy8S2WXFyG6$ow_{xuGX3P)bIQAox
z69T1uDtLJLUfsC9?opHsB$`6}t#lYgNUk3<`!l{Z8K)jpD}?EzT`eQD)Yb4r+kPt4
z<@=vnT0X^J^!`2l45&O_D&mtL4+(Zzc!C}ptH}g0{H<?-K<K2Zg{|fh-4%_3hv}G1
z-$%N}7E<aiM*vdVrJ8&3W3oZTk<V>jINHsx25j)YI5m2QiOB7-Xv*UNQT=A46_4|_
zeMXtq=h(~^>~EKFnIB(?a}w0BfDFr>H6Y6hliurrUSU9S8_9v?!G3Fv3kG9DCxBvU
zMx>Ay{75t*JbbRL8Cm1<<}25hXoru2Mvj07fo2JbGE@#D_E|!NFUQ*WbZTK$w?twx
zX<m+CK#1HtrY?l|S9LGpww4BP>;;ILj)XAZM0575xX0(V!%)K96<?Y#p}#l@Ya;uO
zFGg}768k%IWn4pD{pE*W24NCQ9Z`0enW|oJA8P))LpO4PuTI$8%ARwd|Jim~;wS*Q
z-CD=wF*3J6LPC=DDE-5Xw{x@YiFdhprQE&v<Mpt1z5R;sy6$<?IYJIlH85B>a3>_`
zPl5*B_mVc0n$Hi78R>iM6dbnwDeFyO>_XVrpq;HRk%M~Q&c*;$NFP6Kriqi?i`@dA
zc>IRv)?b054Jtqo5^l71T@7b3xm<8N`g;Wk40~KXw1hMq_ra43Bn^STGKA}zp3=nN
zl5@8g$XWOrsiT1rzL9TIv#~ke_f#cTd(T{C5z}_S+c*Gidw@ey{PJHBZZQlI;Y{Bi
zr2a#BG*#c+-{bNd^#Q%##cuZl^{(2_XUsAsf7JL7;SdvY<I3;^g8}AW!G9$W)h{;p
zi72`2JN|MwS{=y#&-FI(=mcTMZq2!NOPPOdqkL%G82qcZPy8{|g3!67@dt6>?IrBJ
zPB`O;%QF_Q{&$H=&>{TSX%b`s#AF2{apTg7F({=>{ZzRYiHRBltL8fi%uF+iCmE)(
zUFc+woxc^gYziXV2gl7AbR_-J&C>hPj;EJ=Lmf~#?1x}vbv1)orVp;^N<<u5r4Ca(
zDQFtX9;}oWw(SAJ<&yNHQJo1`Xv~01u81f|9PA7UlN911E+o>fST>brCEgj-4gz>N
zt5BycdO@wKkoBH6+TLF}NA-<kgjlTP;$+2M74@Y}k`9*U)-X00{*uVPgxBewXHMJ@
zUZr+A+w%ll3rh=_lod{wEDj95nyNC39q!EP1Nf{LXI~>rW3R?*5|dO6_b+fC`W;mZ
zQ-R-OC0az;iM$QQv8x59$)4Hqn@spQ>bw7Ze<*e^!d4C$^0XjX)9dHul9H3u<v}dn
z@+mNc9TZNNxNBm?Dl=`3tGeCd6o+&P)c$k>?1|rphsmpFupK%)p>6v8w#SE|0&COW
ztK%+wM9D<`QUH}Dd|)X~{NW^)$M?ZY<YL;CCe=<3DF+YW{klY*_0&_t%M`RwKs9!j
zmYsms6?3`d+g5y-F**2K(&=c3fUzylhw5?POnmQcNzT&wl%Xf5!gk@L#>a><M+Dbb
z6x!qz+kZ6DfA)b;p+vvoMO)*z&F>vRCFKLuhk&Jr3!v|}bp(>+<tjiTuBVI7;yVL~
zXDv<&&jN098`A!i!Dy){4K4ZAzqNJRD8x>+KepZtk+6eF;6Ltuk*fdkeSqLbA=ZK7
zl;9TYrFNA`xHUP@mRCAK<kwpg1ugpcKo-B_ApD^Xe<b-OdSj?9+=6SDDsA*vXmRPN
z09{$(7p$(l0p<`;FbXS+|6<V(YLfQ_`#Rg{Y`h9-krI>FP)W>l<-(*Ge>5RF);>9H
zjvkq@zB62BK7pP5PbavAjqYLiCh!l2t4A63C@}!I<6HHdJ=@W4;0o>p%X^AR*u><Y
zjAWI!pY%~j+tK`qSFxizWq!pGx0w$Ac<u7`36}kKPH3&&4~?Vep0~`>hOOA)_FokJ
z3EooTgwt>TT`?1iKoPP>Bi}Ny<>*6~isfBfpCr!CXOm{jVa??s?5R?24(p@!#!^h?
zEb3>5ieRV61b*YWlD$mq#%*L|@&Y_ygfYSoa{Co~F>-Y>aYpmb<yS$Z{9aL|hoNX|
zvy>#N67i8vzS*c~J)D(*Y)h}ZqO8tKz}ht;r3|ykdf06-{P^*PO4~3iNZCTvoipMn
z(6<>y{OZs_;I7}Ue5$r8qkv=EhwyAADY-B&!NLgdw%0i0Rh7^`*PO>I6q)I>-DBHV
zWJMFY3N7?Ge%+W<?1Xa&CoTXf7y;#8Tn?@B8!R^fgVr6XyzN2A*G#DCJD!xB06nsQ
z5E_7Aw#`T-%#8{r>H(0F(FAP;OHM&L#u1~*e)04<r%07aI;8`kMaFmnu<UwmaKJkd
zUX)TJ27cFv8-SbX2C(?w;`xiKleH577gbAn`vgm4Cm%mj330GwIFHFRsC+Fy3<b<1
zc*-ItL5fyWGw$!-zrO;kN?`}Jb3@_kWo-{Pc)$5zfD<R(_u*Q}Izc>+nzyWRmwnp{
zpag$I5tJZ?=$_TTz>Fv+0?g!_&*<a&+YlqqpbZx??@P2IKgJ3_gaIW}${_B0SlC4k
z%sCKr)AE*_5XyQGOuNc{9t^U<q&pMQL8~XNob5oOVcez%vU0hnS0BWGI-ma(RFIp_
z4qgy^(nCTWt%hm$Oc2>#<y>9?sRJYbM4FmF5Y_&^XW_CPU+EeyEmv~%1|w2UtYo4=
z^TfY|R{!%cr&v<MQETW7-7{!KZfcM>&Psyg#4~t|7Tpaa7f_J2e-&JIN>uC{WfH@`
z<sHQ!{JOhXeW^3O=&<LN7Q6;J1v+2QRS==<SS@-C=_ENNxCHEo^`IP+!Y&ndoZcx}
zf9xbwB@val=<+n-wFG04mr=nH>5P)ywK=vlbP~_o?=H92KE;xnUjHQ-%8*LIr{hC2
zeHzu(Ex*R|;TLNo`_+g7&ubwHH&cNPsf$)sN?c6S^_#eyCX7G$athO(<SeXSVRgJb
z=dkokL*&jT+8F=2qj;LN@jvr!<V)9zVAgVHJG~IrFr8LM62sQV53`1kSf2{_k1f`e
zYFDWrqc6oe{n&_3daJ*r+;<yz?Va!+J{;yZXiy+b*CSR0+?|C}A+E(O+?eQ^CEETq
z#Ov%EL6hto8ykmp>1wL4(*;Hk9$C0d5M=f5pdp>X2|I<+Y$u?n*af+u<GSxE@m_S!
zQbD6kI6BjOoTvZTFB=6_cmdw1K&Pz5{&!Zx$>vv!^$u$uJ$9rGP_Mg_zC)jpSJ=V@
zc_Zg<GDWV%cUvz2=(GkXxMrc;KwTTHfIq~NBcy#3f{2lk+2{WjFf#uUFck8wGlB20
z4A!nIqczL?E7g247Ww+qvQ!v=m6?79I%9$oM!1-C0GXGV6QLO(i52BLcQF3?1o^?H
zYj1b0INjdUw=urP)ZDPPHFx7Nr_d*W@_4Kc!HUVlX!f|;DQJ-s9F>ad3>El!QaSgg
zJGySsU)8j?@!IvgveuR})8m2UYT!Hg{Vw{0X_U%G_%DwG^y-OUUFBu1pYgRgnsyI&
z$;Nk<Gn6e=1-(#6z3(s!7hQ<TT35$Pdw(>~{oJCl{ss@+z}Jrqc!%>-BE=-cr0&Y1
z?XajF#syXgR&Bpxuf@s?;$){Nq?czVijqz3!(z)c@|}g;&TuhbKIxS{!Lg58RRL2(
zuqL7~Dy;-cv+yP@Yg22jM$D%;qN%d<7(jrQQff@`QI0;u)&L&_B@3e;|3HkF7LapG
zx24ZMAM}H6fbC(z={eBoYpejK>J|9@kNfSpg?Z^mGA(`Y7EkxgrK0<b7ZJ=KytM=W
z8n0DY|HNuOE~m2pos=wP_x3+GwvnDB;2yDIn{_P>X|E0U^YI*LkTglT*dS}WLJz^C
znQfiD!1aG4gNPp#FZTYY=O6KtC@~^_jI_^G1M!2x|N57x*Ts%_XXxo>;~AL}QV0J=
z0P(YWXL21?REiTmezehz+-ksRmyloEjjf=^z=9F`)-4sp;tr~>rX*B%hhQ0(h9+31
z5sB3U<5|_azi2|s@EsD4QA2UMlBO2I7B1%%4H`M0i#$TabpC*R9l{k$>2qMl4s;^E
zOIa1;>!Skqzp`q6w-oyqw!OmU&_!kaz8l#48IAUK&!v93WIP?$PRqM?@@B)S$aG=C
zckIO9j_wI_0IOu29TULEGSG-I`NV;8EBxfyy@(~aYlqeX{oeqye?L59daL4PFwbnH
zO5Np=rV1g)(p+C|@2N2^UDfONER<M{NWbzwn4WIZVg0T$8_5eJmdBzcB#5BPEd>he
zO~2z{F?Mcnox@aNS$Gw#S9fopnRt0O<Na3dx>dMcx%PYrGjJo1RDZnO$L+n0{$iI`
z*b~c5!=#&QA>w#jQ-5sTn{1c<|G8-G>4Hx7K!KE7{Z+L5?P$&?4RRC%df*TmAesL8
zw`9EsMigpbe=~?<sIZ~uw(8ZZ-`+Aa?zp>T(>2n?PFP3gQbL3N(3b=iRNH^!mUAu+
z;~ge@k<S(&cVgokd%#6sJ_NHx-7ONcERSL8c4FgY3g{1K5m^bOW=>$`EN}nA|A2f;
zYai#~toNC-xMM9=JUG{<D?S?=`TAo}Cv#Z7m-{BXt%t%a-M{5xrf!bMnMPUUoSN{x
zR0cQw+Vfsi-&;{1_p_<WsYUof?a`#WN@^f%oL1U$@hub9PBRoZEnt60qu@JrV*xTy
zFDwQ;RO5d_;A-Pga0N9%X9>yP_EU9A-VGwO{F)G5>68?A<zGgil+lg}QrD_3JtG5#
zaS%FshpAnGp)Vx2FnR}*SG);XC9=F*0|!*$$2aTVT;)13vb4rtxA-nY1VU|DwPPo*
z31}bZG_H1reTLGfJ-5!cy-wr%vSb=f1d@nePpv-hym!096BoNs>2=E*64w5Y1Eqx+
znbF$A!sy@!!Y+vG4>+Jmu}PmHY9tVtecGbvaC~)Rc6Js#4MxCkh9H1?{NIP{j1*yA
z(Suk_0Vq8X<Ry2~b#0dAKU4LAdjp!Is6)^nL6_JnY4Oaf#7zlLCs+TSa|ly?UKh;@
z=W5#WPW{7nN|*~N!KzT<85W^Lezm<G8!@4?SKO^sLjLVCgOtPQMqBR#TzvX`ZlsS9
zUnD@|cPT3<QNRIRTt!V36e+F~<OZ*&(i(*US{>oiLShn!<;nbDdG@<y_aV+;2@8_U
z`bVz)%itA(n-tTgorZH-HTFo7a?yzCW{a>fQ)sR~nC8Vg%E~8Dzz#Rom+t{|cg4=+
zgx}=G;|#1qwHxbsG~e=!)JVM{mcC5B>?~Tv+$Goki7NE9)jDgBg8-KBO+F!>l*LC*
z1&sj%^F~=<Doo7N7gfWwbv+}^<$5C?gI31IiJGEO$GynNtN4i#0L)VE_r)E4+u6+;
zd1*~eu6!da%6T`Uy+u#J%GLJ?e<8B`Km<jW*5&oXj`iF>H8+N_egu3iV%@I(A?<w8
z?f;jIYtIIl?)udT4!&*5$(+3ZA4iMfm|!WfaWw&(`ykkC2MyYRis>jm^-uzqjKTA1
zcp?XiC*coE{1D7oBpNb1cNu2y7DwmkeXQ*iP75Rwxzh|^-eknfG1q7HreMyk1SpoZ
zYw;~lXRB&xzAQfyee^+MMh#Jyh_^4&x{0)JBXIZL{UlfRC3Z>Qmq<a8HD<f;SGp+n
zQF9$}L12heCMI#xc@M|9VdvKb&2*1h<;I-`7di!Xw94(BwmhSqCSX$A3icp+ZWtGs
zA$h1%HW_~lt)pHj8P7y(8x0)wolHA;Ql8SeK#(W0X}4qunu}p0bP|YN$&zXmr_&=a
zc<pb&Md<7;*MIImw*xSOiQ*OB8@8T#k7Rfbmx)yTM|rmAmh;|Q_pG!6#F$v`M4-4T
z^LE6A%HGuBf9O^lsqAEU%D*+eI6crwd1=QsAQ02dpEG9J{4mQwt}`E`t}NQpROb5Y
zKT8#gSSqf3S11tO;zHYP>J~zDsy=M|aZf`)xRaW4?^3B2V5zc50Ak_3q+dt;-<*~O
zg3~I3{n|w2#5CZq#l>A&cGsd0*U57P7B&uSJU~E0Bbb2!-9HBa7su-cy~vka04-vl
zC!{-nP)u@<%IcU6mP83Fx#}ow;N%Cw_w5U=hd&xA0v~VjoOZvP^q%pbj1AglTTaUr
z%E~o<P*_oYVNY%7amdE|%mdZ8{#p~L{&Ra3R17Sj1}-MCmS)pO(xi)yC?NRPTQCd>
zUg~cFiVBk6Nr(2ch}5kk$yA_ez6~W73KXr=7>m9hxK^D5v%#GOo!QH<RZ<q`xUbAq
zOX=j2$vfYPb<tmOxF2`pXLeyQdBj~oA!LmrfKe4K*}dDzTTXp{)l4@=(wAYt?cv1}
zuN8aTIg5{{=R3fh#xJZ?BEO<_RN@?pIH`DP)w4VaqaznPf7d+_02EWk#ju9h$$FJ`
zeDrexnfiRfst?03)itkl&%^7()}fl3nt$R~3k@Rhc?KQa;P~5+`M<K7T+WT;T2)p*
zdX#dM3)&8Psui}nx~iX4itGRTpX`E4lInjKZgB&1-4R}P2LB%xlz<$%1==>wVKM1n
z?%B%hptEZvuxsJTFu_os&n6~!435+DOGl}O(~qTh$)hoNq&|XQaLRn9BZHQ`1&JI6
z;S&pO<K9)Hfi3$A;E(=SLnkcD^>pb$V%|5dVwGH$S?=qq&HRr<Z*eIO)1P4Rs>bL{
znt>@-#pW;j;HyEVt>FNKRwH9XikCyXTzVwO8n`{ty-T+W!2^3A56xc^=-fT!YTADh
z#74UPlQ}8ObR(*0ROI$!KE=!L_#zmf2nMDAdkda=gZ{THog<iZtW2YHWL}2NEFt~5
z*?xajWXfo{8l|J>xF+R$KW{0H#xt^=pk~mG5lV97hDZ}2!@+O$vzIb4ax6Oy7bRwl
z=gMh4w~c>2no|s5;5mHbz!G3tc)9WCel!kerB#osE4+^`_~`G$&iC$Z0f(iQSfr@(
zp<>ThZ`J%8=$=XM^_8#vg+CB_u-g8o<j@8kSg_h8xj7d~lsQ@ypbn7V(CefJkL=-3
zxerMn?cB@pS(ke9;%Q58#nE`_Q(``Xf1Ro6PT)+LV53@hQ2}zzXPCtL4>T-D6SJeX
zx?W`4!?otT>-dqJ#7lH!O!I;il~D({f2>VS#ujNDKP;L>O<$y;*X5S!*9Mp#DlPJ*
zH#phQ|Iuw%d0y{IsFij!lV8&;?Q+qD?DMm77N{8O9+=*v$u9;s_$zHA&8GLUn4$N!
z^3^DSiMwJ2a>pyle1D(;c?HUM*{JuFxQ2|ftn5dD_@rDir+wus36akaPf$R{ETcdF
zQVi!<3{`=SA*Rl2tof$^B?Dq;uO<)f@N)``+wLgnj%yFDBq=o1XL2`M8L*L`&&4fE
znq-nX3Dl=cs01bG7p?JZ{fal<*N_x}voFg&KKG^3SY!6tZk<0ZZ>n&I(XeCSZQkb*
zIdC=KCuSB5k6=a}0hO`szXdWbhjW&$WQtA<s<(+muFn*|(uzI7Yz*4=NkZ)ojkFx8
zKGp!pS!Uo6h~c<S0MXBb0zp{(@SEL0xTB@A3kuM;GTdla?{HJ$XH=R2o5-k7*0m5C
z`V2xt{~%?K`fnRGJ`}J~i!!P3y#dy6n-ZBtjo#Rx-<gcPyyb>+>4!L8w3QYkSOp8G
zK|Bo1LdMCDOlsqa)}VF7e!UVuNeFd+MX9&LwaPTGhAD)e??+{KBiib=`csKIM>7rL
z=f0eIdosF8Nw_XWgIpf2(%1og0Sf8-O3R1*N|DTXvRbyXE68Emx9y%AXw-wY;}MrH
z1y#4=_|S4IW~o^M`&u&g+do+nS^CwcZ!^x%)GzhRcc&j0kdIJ2I<`{r&5RdH%v7e;
zWT$W<NXff!f-woDu7K)dwXeh^QEiHmK&1x}Z9heT|Jj3MhKrX977>@lDq9hzpm@Cv
z)(8D%wwO3`nG}p$eA%T1Jjt&|+tHGLAAFbkuDHy+c91$8=0$kvp0G(wg?!IhQ&m63
z{Lp&L?V8$5b1~-zkD`1vkipUMk+-heq_^o*r7Gcslgm!ntiGBMo3vcQqi0T_JhVu_
zqKS3xAMM155y0sm82x{I0B)+0Jg|1HHN}VF%mw2ifWMhG%kmbQ&<kd$Xh1C0CdB;y
z-*$&0dW4;ZkS(nUh^x*KenjGN)2@g3#ab(wvhc1pIxpH&coW&lq=$~Ez>B$~F(V`&
zAW}7myLZVqk32P67O;>_04RADFS)U62KgzB=T4Hn1tV8Csw~TY6^Hx2#&?M#2TUJW
zk9xhG?fo^mr8z8e&b#PwY6I94hk!vondzuoY(tA%__-d(+{C9HTaAAdM=LDRzYj*J
zsA>eOSdi%I$|cC=hRNim0v4VSuCndOkJw~6<_jq4_v2L=!mz{i7GoMK-O$-Oczb$X
zVIU?OcS#h_%DLk4^4e-R-8u?GC_a`kDDp5o>R9!)zV<q)Byuns*jY2~Ht>S^t-TGk
z3cC608x;dWiSxwgdCp^Etn6%S1i17iPF7R(UBCnqkzk#di_j$k)8?zjWA~FkqN@Fg
zq#A)CIr+`hxPY8$hx_Dha$asO)<c3LFQ3e4=d=vD=^I5`QcB3L>ER+&Y4?TOsH5Te
z8W({EAZtJ@l_G*)Nq#cPHHgSK0A||>;i?nYsy}!Ky!}5j^kcX*aGV}t#|IO@dler+
z>yfy+scH7N3&Sfr{K>{MeRM{@h4C3je^62+EOVv#rz2@oW4?jR>UrMk;QFt%t26x(
zox-p?xQPpJ&Bc5%=1BQ9-JQGDb!5tZR5>R5m5nd|VXsf~{e`uN*HIw3h|i0J^b{ho
ziYli<mE9+O<z)2aTrw8#nFj_qz<4*?67l)M5@@5Fq}{m$TjmUoOHS4O+4&yaABIx=
zPrL~MtFzML^p5rY0h8RyGm^X_!_@G$`BTDGTr2y53xcS!3q~%2Ffv^-b(Bu?%E~U8
zWR`2ch$*ff@(&XjgrfDRW#Kn+OzKO7eFk)-rv1|=S10mIk{@BPT2<SmDK@R7x=f&{
z0&U|K6o*=vfNe;WYzd`7!ra!DGRjVs2L>i#%^4|RT{rt4N!-IpAg!whE&>SmB0Z+4
z6@i{4)Z>eEw+aInoTb|b`HyDRhzJElJ#j?Tdmx`90rCLE^SAy8h~mzJrq*WvrBVL(
zi+?F9KuK8BI8^8$Tmv5<+<Ob?_4|`%Bb0+cQxlNlQZrfjrY<}7UCj2=gWoUvSD;=$
zWKGPpW?n|JUhX=npM<-Z5jd0*Q!2?rL;YKYy{I%8Yx`njXKDIq8k;EB8?EgZrl-Tw
z%9{v)6ueWGu(>_srD9Cv8L9D+Qt>M?H{0RSb{ZGyMm2W#J}2pqs!Ig!*WWPguO8q=
zvr&P30<oEsMmoP0(%tU6zJ9ZUN_lfC(P;!ek7h?tf>i&`-V2nJm2<32GS5DR%sYaM
z19e9aq%62sRiDAhdP*aoKnw)2SZIHsww|AhHVZh5X@|~kZhp9X;GfESdr}bA6UidZ
z?4#mEQn!yb&x1vcwXT~pyU!E;RLo}3CPZ9clzKd~nNHTnhHSrS$)9G(isYXsdiDV=
zs$%E&XpPl>sc=`#h?{;G+d??@e{Fap&|Mwid++uYMsf84)@S-1TEaJ+$yZNDN65QU
zYY3jfRYSLyQvBV>%3-X;GVcxuOVS<iSEC10)FA7<m)rIYLheir7otDX3DFJ&o)}=j
z)QYi}7Tv0=^NMNwGvt~5B?Lo!HkcC6=wj@Rsafc1>3VVK+KHbqoRxCP2;>vv>@K-9
zTrOQ2EvDmh8_lETr<j<EI;Ll2==nYQY5PfdtJ*QYo~72FNpP#^8%CsJ92aY6n({pn
znV~(`6Flna^PfOVso@N08JQKu(#;Ks*27kaHtm5R;$vxajp9kE7~OI)BZb~~R4i16
zD=Fk%`a3R?kkGWyEVqURIgc{hLt2$x?3k?lV+NAgh6Bk()WKA2`@u0)xg`9K<-d~Y
zw}F8?uIos|Bp5&XZM63thZi1uZ;ys#A1l|sei`*<iVs}<F1WFp5^3kt;`X}EU{18X
z>gJ=e+1>k;hiSOONe|hW%R7nKu-rFe{{WsxVqp8<6~$FM{8N0vjaK^}vHkU8S`C{1
z*V<IrAd2v8I2K)NLL_3PCD@)#zUo$~Vh>RMT-MbbY{lwfE@5iQk(y@eEFYF9*6@S}
zO+{KO_-!?Ejolq;Y0VKM_?csORbIRNvnI(uNTJR#coV|!(82R8FEeG6nhLXA;}s=v
zI($BHzZ<5@_8USC*XCd+kWqySvJXT8&EhCzV)p|_8Nc&<ct>(`j?1|0WL-<eaarly
zqc-olLC5`WK>D5BqUR7{FxT%8kmK0WVtNKr=iZV`SUF1+AVvm8v`TT?P41Dar1#=0
z3-&P1I<f2#?C}QEODHnMkZ`0`+B=ATp5*1}jV7+I{_CNpt=2|vr9000ejsep#pO!(
z<Qesg-eG4_94b37%ZD7N0JVVi?k5drMAYqFK_)@G!GH;A@=Zao_8zTDI>~pf<N|y6
zDIQ4cOcweBopBH&S41DGDo-GTQ{271qCqZJk3y0J1EFtlb*BC7*;mg_=7fjnmEVaz
zdD#kj(OMQg_SN2&Sc=s}erTnG2xczM;&Z%uKrQ=Y?Xw1cCq~s$d;2P}kNfVotjzw}
ze^zf=1`Ol`RG8HUh5uQ*c2dOMQpeiN_iygU8iq)zIj}<BAky@|1pV2SZ2tJ-WqqD>
zlWPYJ9P(jPc{Q&h(3a+vN6|Z5erB-+wN;}#v}Dt<O19HEOP|iV(aCgq;(zkx@?TQU
zP3?&virIb2QtFMjth#(yp|!>5GO<=F>K_z#%1d|x`tB-1nDhxx`o$MV3nG+o*0DVl
zra#y_e5yc`EQ+9QnUQik!KYCNku*;)x)Q_h*<x5Xc}DjQKOQgM@|>1_A%9`~0@Gnr
zU|C<}g}zr~zkU3M_0f%eS|ccaOJvyqgG2g;Ea@{Nja6>|f6)rdR#xys(!EpBHu4^h
z<rJ?eFx92Ej`URgdtbz#-(k|ZVSR*hOxq)Izvxw{p-f=e?-gjU9I#0^PAj1Ywrq?!
z^I<bSljX7P6T9CWm-C|YA(6${P1RV0arLia1^xY-h|su9_5J3=wnKZ~udQsgB))47
zOqXr^2I}yOHAzJZ&}Sd)1nkxLPh*clF-^a72L*sE7*v)Q%;r10E=Bz)?1s9RPd>$M
zigsXrw0P@IJKQ40vk{|IqHVTUb9AWQlPoLc+$;eJz&G?oesmiZ+}0b_>H^BpfMqsH
z`-fL&pLebNuY5rdgs4rEY@e<8uV4K4OT{0=nJwjF;$x69nv?PK;<MD`T{-{q%H3(w
z@tI*QY5b%B<fNXl2?jP>J|&Hy^I{+zd{5Ag{eRed>%J=1_I;S{SaeB)z@h|^1{Yn@
zz35W9q&uahJEXh2OG;4b?vf6Xkdoh^d+&SS-}@yz&p*rc8D|YMa~)@&*LjGZ1~YLQ
zk|KO~>Gw0OU;4{EbDHH#nrxb?K#J=ll-EXwIA0u<%$aTDDYfHt=~{K>p5j=Ei0m1v
zo%~Qm7`cf{(Yy)b_1a?`OM$eDU}2G}FVnv^+=oMB4-fyiyIMrN7<B;bf^y(>Nm&{#
zm~6^s`Fj??C&1ln-nxs(K<zn2jpx0}ZT#VZ&`j)L_ntyT;W`k-(-p3=1?TmL2}7i}
zD{eSalo#Z$fLU;ja`PTMoC<=RSAo!WVG}+=HVbjgWs3dT7s^wjHU0>g?Tr|_$B>?o
z(b0lj#BmJO2&K=sRD~qI95>>^-Ld_OMxXse%F*jSWRT;t%RtrYk8FUP>8a!QFBDG0
z@MxON`f5$2T{`a1dhd}M3I<VV0;Zr;E3a6?qxWQgN;zoUQhlcs%*LR7r)fM(j%+wf
zj+Ce9oU+3h6mfzW$)3sjPCf;tYh%RY%i3hK57<R1^9hY^ELDIn9KL5lFxu%?GWNBU
zysn6&!dI8?7atvRVz@<OKs8&Nz&4ElTLK>Eg3Qr8I`f47(@1|E__t^B*g0w)EK<Wn
z0=Gy5jD}&Uu;~6VNoaf%S)ipp8*cup1V=hN{tnpCiAFI&7yCSzg0J#M$sG<+0yW<Y
z|0SS@eLi4+cf-$9{qd}?3*q^y8~g|nJI&xLl~hp_%4n;_0urjZC8sAX#jZO~y3u0y
zm|BJN<D6)u2lik<5c69TWzOqo6cGZs`dEmFB`97_EarOaI48mQFGB}sZf_R|*N=V>
z(DbPhZEuUbO63CG9`hjyDDFih7Yau(S2e@sg<uRahEsuWu=B$tI2ig4=wqwYP_tzG
zq(VmsdgYS>--#IoF?MRTp6WgM`7*@lmfU4&*e)HzcpTw%M;pduA^XQ(MbetuMiN%m
ziuR}L?0v+VMv4rGEynqi!r}69j4V+!Nlb<5QXFU`$m{b9xF556h-&2akasB=CA1w#
zCZmGpr1qZGGI2Pfp)@5G_eO*~OStRF88$TIl;JAZiEK;0=x<YJ$YV)?a7qkfhwI*@
zYT$DZj<?6T8s-=e?}0l7kwYB5U;N10S5*%XxtDY37S5~QAqvSU?~5+_VCLm}%^XQC
zjFHFiO2mB?HnK{k_E~2;&(ag#&<JL!;r`h$%3UsHwV3V+#J8sxAK!OxF$sw*)h4b6
za0@-g(!h{kqe&C7H+X*)Kj*@Kr%M=#xe0zdvVYm{KS;@a)a?<yR)LS{l6N>mhS$SS
zUwL1cw4V-3E!m34m7s`+7S+);>qI;ulBsMhhYup&wRcA6q~@IXrP3<G_yrhsB^?u?
z%cdnjxw<SAG@kcvJt{ft<Ke8qK%4|+d}uW9*&-_SoQ4JSlzv|e%6WoZO^@c)C#MiO
z*=Ig&4$|tjArkbSImO0QDwcy-C2F{PZp>)r*q}0_@OLRI8>2Xz7C%2FSv?Kb-q77q
z^@z;1M`=42g!6obx~Ax=8$EB=5mstX3=BQ%Ipr`Jj}8d6cjqIggZo^XU60l-oTa$O
zE53jnh!0b)_ukEl_EO*!^eUCp?BlZsA{}W)&a3-vw~cG;?_X~lUfJLlHA4bo6;1Yx
z!A39=tl_R-xAU465kA2zli!)0A~N|=y~Azp+mJbDFaKE6_H@lIHG1ppO6e00b1yw(
z4sigOgpNMQP>`=Uf_;6HbrTh{o;>PBZb<<})OV!My5s|sC7VjZ<`}nh^TBY$M5}}d
z@fGI!qOq8&cBfNLzA>lN%ucau!Hc*O2)n{6P-rC1$5Q*T&b*q<KC}$ib;a+OI?t7G
zP>k2IsfjsU1aB}&_csoHASy9Rp@&iOQbvJ;C1MytD|P&}<lwP>-sGfk&1X<P5&Ye`
zyvXvXBI<IQ(EkF(PwdAM`Gd$a8^-?yMd_nwtwBzao<Tj<hGT9aZ@6z2ak@KsVl;n-
zB)*A{t<(+KgGu(&8Nuvc9F5z+h42OlLhLsf_a{;C6URxi5q?295aFFr)^zTD!m-jw
z_jlnq$liFnx?(&LCaw5#@pJe7io^Aig(dAJrIn=&r<6&#opEUZzA6^JLnO>F^T@dG
z5K3fvExcq@CZx&#_0o4oJm^THSZE1`3f-)#8YF)YE7sI9@>MNr%{Hqv7Z?+1&sr*6
zpb9OTk$r7CX6`a}?oyx!F__E=j*<Do=xBmr?Cz5lBQ?&7?7Bn-AKsSAxNA4e`Q9R>
z89^c=b5(AeM9dN|s$;7%-9}VO?MH>VH>>x`+Dr?+R;(5*y7fp`FNKLtKI?@+TRo)b
zATz5G6%h^^2+APS%=idtXtzx`JR_KKUniPQRTm#&c<l`uM!#k+E@g5<8KKF;FFE^-
znp^li;u#iiY|MxqnwHl%0VRyG#G}t7IM!h%7456>Rg>xmcKLBEPOGsJX~$ey&}5O;
zkNMQKGDv}`fVjXu{S9e>@;#VXOGzgSgs`V*P{x6^`r7B}vKTiS)uL~wGw3=|9p6hx
zP)Aa#hHax$_D#6zOQDold&STH#B%!1T2(G;;Z9#A&jjUtHp*l)K;*JSa(n0sv!hzm
zfHeEf?6E7Sd*>Zc)%ZX*<wElZ6#n{=z_7i`jkSe>-#s7yPC9gZJgN>MUh6@?D->o&
z&?vVYczOIG3gDDR7&jj-NEk9@^q|7Ya?B0MPTtR@f`q4DI9kM<`bX$DX|@JAwWcDt
zqu)uW8&)FlBjAry`}Og$_p(<&`2BZFUF|o%R`6~e7)YdS1dDP`qlS}{lBSI*8AK<2
zLrEi@ZEd=jla&r73RYHE4+}2^hvSFWRJzdHw*8Q3pXVe@gn##=T{xPmNDRW6DhghB
zW!!-pOMn?#QE(fC0J7dLkftg)QK8S@C8csj`6`FN7Yw2qx%Y?TV)4emH>LzwH)2o6
zg{VYe`}U_Bv;Z!6sE*E1IZ+H1yV!&9wDBCr>vP^GPP;jC+Ytsg?V=Z{UukDU20wUW
zV+(b_G?eLpqUm*?JP(e88@llO{)1xxIx;TiQ24AjXGg_QX|4AhZ`~(~5kp-GMmfvb
z&(JH(%ulPaj|QdO1AT`=BRsRKo@i%JEZ>YAN<7-y`og^O9`wEN#ZVt@`x|0(U(he(
zfd((o@J*DsgfsoJu$SBAHs8<14BT@v{xmq`!tv~G`pn_6f`CfwaY8g|Qk)74@$wZZ
zf3cbGBCj!DW#(uR;XmsPXGn$#JS?K=mBM*d%ow^5ef)843KxS^khrr}#r0&mqNIP}
z=0zm?q%UJ<`N`l<!k^y6d>$-V_XF#57Rl^BPnRm<e>)$*7%8C2^1D0s&qy+1J0LDR
z{~@{b^?zqhJ+K00<nODZD_^ZptUsc#Kvkm2PTVjly{7!=!p<;M^+WL$e+XT3p*n_9
z0d@yXCLkVzfmvQTD7qCnoRZN_I@SeAmEKh4KxyJ7oUhEw!Y(S2uUzm`DAlLDGLFCC
zr8wKM#AvG4+c#bMPL($^tl*;^z1Rr?<Pt?Dpd~n32lr+#o6=?1_J|AyZB)~hxE)>5
zSi^yl3nc_8zeMH2_c&7&Xvy>Px`#c)_je~CqHT~|WHxINS$!sA@$Vzc0d#zdVp)r*
zG!stmrK?)8H^bA%T({hUZq%r?bm1t;^0$#h&X$wk(;SW(>Y32GEWh<VbnTv1lI-;=
zV+FRAV8k`wSCY6n+&H4ihhq1fO{BQheCg*oGL{2c05od@;0j|-mngSjdfbXgm8ZH$
zI&(V}5R|1Ekoz@JY1{1!s$DJ|y$Vd9e&zR}Oi;hda}&X#-$J9GG+?}z0P7U#<i%{H
z!VN5<8f|d2U#$r0UJa>;-yB9-hJ$b|1~iX>CQsTZ(*&AeUI~Jc0~`~t#Qj`I%~p!_
zCmR{=_Mfr{JzXfgz@DvqD2|>F`_qJeWg#!R-X||1JJ>Img(vV^>1ZlW&5Tj5<MG?M
zHsm~gF>g6L>0h-O|E}Kv8A??ke{+qGzR3B<4+ZoBGtg3Sqa9o4^Pf=TFC{WI`Pc-a
z7?JX2_HiU)Xj<0Ig38_f3W?UMK?MA`JHqu0y7h`9xI*x0@E*ci?1n`v-)@CZ?2hT+
zGEJ*Ceti&1sv0X8i9=g-9#TlaSeO?Ogh5yM>3zfxg+gh0)qJI{JMSkP9s~-4j@X@v
z2E9I?Si+4z)up>LqY|LW46vs>z*e@|QCLQ}ib`~eWK^w&5%bci8Y<m&$LG_ng>q+G
zY+LeU*<&3JdSPhe1m%+oitqz76u(4hioq?9-<nRCRLCjo`w~69Vwc#fRz{h0r;$Dr
zkS;=dsmg<&oMiMf<`<*6{(Iv>nYsHB&z&!h2TOOm@eMzByq}-mWT=NSxc88R>!^h1
zWC)42yA^_ryyz_*dXb4V(I~g}*E1;b4QRyu(c>BzDTzb6te<^nbpB584ub<HX(%V=
zn3|)WB{S^#mBL0g{H5s<W2BL_8fPo&0)gUgFNa%nxo#)1ue&t`K)y;$J1B2#&)8>3
zB$;qUKiVT<@mxh2mCACw6^cdMj=cMm3RYawLA`vwS_um;oSn9ki_zzpA<ar@!k+Re
zHlx(1F(ZAi2)T}*oC8MvuAqK_San9WvR$0-HpoRszf+;7EmVd<Uv}W?GW#A=ML?HH
zGA-a-bO?64xc~36zXN)d7qY7{0ShxXf%4hCi%@fwo4jn6i<VSz3@vA_fJ&O_0x|4+
zeKbM~z)%+zQwSe~fb21<zYzl06iUaCqoC5^XSYYI9au^Yi?5Dd2-B;Gjp{;;UeR<;
z9xD%*euKcp!~M}fD%mfvta>Ne)#WRuLJC!lcoMBE^Ltig*n;`c2Cnt@o`oCV`|o$Z
zRtt%)SCi=wm&k`7M7~8^<4Zxxv$#g%ssO*WAQT@Ja9nDE>^`9zbf?d~%!C96wKU>I
zofw%P+|Su+y~M|)6VX>zfE8yFg@(&2&%B{R!rYB^9$D?DMy5E-fS<D|V+9^<y>?Y`
zus2#WFR?c$0D_9hh=`xd*hxLm5Gt4Akc@|*2de#w9bTi7JTxz|Xn{BuhHa@N)E8pE
zZ5Sl#WMJ4X=<ja~xg!q3Uly~p(liox#A4%rjV~GfVRwlj10upB(w0lg2N8#+e?Oe!
z`5uxySxj7mE(-?ZKY2eo2j;bA%#llDkd-7G*A?T5P~VP(?I(-u+$d{%{&8-&tM5z3
zJ@4C<bXj*e@tLpvr+s-T5FEJ_rf0p|+mSXT$+!be7zNY!9QNH1uBrCGk63(DEh^P*
ze+3i%E|1{`7HILGP*WKGQRYb?b!`8;_&_ZRRy-ObU48+y>yA<{xzYUdW{1O7Bq%qC
zE{#SRcWaw2^<H}T+8-`7^21iMv;#i^BYA*aV0S&y`y@gpg@6TuxJi;ibw+7ck*-*J
z#>#wnglTM=OnSc<Y0;&oCor7&a(ybnTIzMg@m?ouag@hlal<}z)iNq&VlI%`EYl`A
zbBKR$yX))C(hv=r6<<xYt0TFM^mD;a$8>{lZR&)`aVVp+jrKUXDoTuR!k>L|XNacq
z{ECmdBK}0=YuGrwAD!@^!;ba^##7U*o?RST5a}}%YTPXe+?Qh{*~Rr}-XW2a`6U#z
zrT*;4wN{srItSoDD_d{W$=6e~!*kq&8=v)ae-6`9znVoJnCnm8Kt|KeScKa~!fnFm
z9KaPW=4C+1m6%3Ai<293RYTpB@R#exd)chx$B`run9G18PM0)L8@)QXPMfsx8Sko~
z21PXpw5jX1?44axC&wAvGu;2fVY&morrMAO=$#aSjmjWnoQc_`o*i43BIz@UJc%nX
z|2&Y)^8v4iD${<0FpP@M-odpL|3zdA0{^(WqDk!uK_n?RevUsp4jZ%79I7ty8-5Qp
zY*K$MRd~s(A0|7QE*ppCe-(6{9v#Na9AoFdm%1BBC<3jw?~)t-cY8us#N+k^+e7Pb
z?;xWhenF?`RczhrP3__0Mv1f!vkmpxR9bsO-!TwD7CRWAr<4kg8ToDlK>hd08z{Pd
ziJacroE`4;l45+xS2{wY?qW`SO&J(vn6AMbf!wy3mZt$dpxc|VB~ogcEb+|=SNk)z
zik}OeZQt8{82rYX^-B>dwwGYIrYic5uoVW&zTk0KZz0Tnl?s-4ww1Ri_9Rw3?Owaj
z`7Ld1Xts|GCUoX<^M&#dwdm6KHC+Cf9M_;$I_&niaw-~mq?gTSlye-XNJ!DdAxd37
zPDt5e5DTX8VX*Sb8_*3VSp)(4>x~%i&d`0!QmV$8-UIL3WwYjuLd_a(n$PIUt4k;b
z#c8(W_(AygvA6JuAV*-@P4GU-%*ec0F^FhDI}VA+_)<}oE|7Rrpfh~$B@)%{8z?Fo
zKEhLHy2@xpj@PeL4%;l%nbQb6-;Z=@2avn2^rO<=wNrCtW$?Fy#=iLXrb?@lQ+WFz
z{rawNfI;3S1O|sQ>KX~Gs5*eb8%~M#G$@%-i{U4&{So8!E>z^gZsd`j4Away(Z$Gu
zV`{ySEef^){5kx}pU5s~T@n5tC27iks=!dYVzYO`kGt+_mFqr3f2cc2R_Z@z(D*B*
zz%K<f@_u!wf&Lv*8mc~~9^^$v7XGT4{RJD~A7FOcV*>!62e&IQsSlv(__;Q`DjfW#
zs7lmm9;S9yxZKJTp?8{Y;JQ&5)e&FiF8dtL(Ra;ZyM{600A9vUD&|d?<Dh@tQ;Ays
z=~ftcDT2KE6A(a_xJ>rY=@)JH13A|CIHF-B+4wquPfOSr>FLP@rW!_i=)^SpdgMo`
zJa$!uQ2Z;tH>i#?ON3#p8{Pvt&%fUir7LrLV4uH13%@E73T=21!Qs*b@79U>YI990
z=sn^01Qlu}7@X+b<M@J5ZcKl6EtZ)KI-$Wh+1zeC_2%cNx+EGZr9Hx5iuFART-XfW
z4;yXb<c^4^d<FKADyt|*2?t71E9nOJzC-+Z<Kroi(>+6aOt(z>%YIO8>Bkh!PdVh)
zpVKd9o|k)*bm0~zD0wkO#sHMA-virm8T}aTYs?}EbS%j5Eh_2VKRv_xo`guuRS8G`
z$^kdGyPuCAG;2uJjgJe9hG$${rtM$wW2M*6p)Hq6E#PRPYW;JbtLW1yBH{P!n#k;}
zvKAtIXg{D+EMC~Nf{nNb;7&h|yb$AU<hpTOdE>2wBV}FP&*$Va;_jm=JH3@zFuBK@
z66Q9<y(5fo3J|by`FE=}4&aWyC2t8)GlZHtk(X*Lg=T^^@{D)Q@i{tkI19QMB^**W
zZXf2`uz8uv>P|LiFNa;U7ADfE(6nG+aSqLu#!}3=1}N}MxCTf~jB^L(&Ln@(B@sul
z4!~)Etnm@^QKU~g*sD8|uUfxy#?PD0r|N0BgxoK?C#ANWylpy}->KWoc+f412pTMq
zHa$k-yN#SY?<Du5NJoT4070?~Vc@x6NVrA8z@bq2LGBTMdP04lUqWCW|MSm>{~A6O
z3{J-VfI2Nm4NgweHs0XDHuvyzRID`lXDrl+xbh4Z)TrrFB%=zarA09O96l;HuPyxM
zP2Oe?HKD>-KZVWdVyDRo$>@y3YaYl-r(8<C>{0&eXYAN!UUI`(*kkg8q>)y{Nwcc~
zGZmE>+U;P(3D<K8$Nk{hA(u?>di$l-b_NcEw0NY?fj;t-O-(Pxji}?5ZSv0Qg90G|
zC4-*Fc`Pxx`3Iiw?%FTBYl9dHq!%d|h8#YQ&X(}pNQYrf5Lrls*5-Q6*BONfpRlY$
zoqG#tmN<^Gq4M2W7176oNMD>!yIAbvO|9=U&#lOx){we{%E&vwhVK4Eut=PcoZ!ER
zE%#1!G`^MITdb-Q5Pf_9=Af~|@xU9;baDk0CVgD&O~97QcguwlTbU@hQNNm73T7~O
zjxJpj3lfIT<?Ih0kEo*d5(JEmiL|@}%Q|YxwNZ@6rObS~@O5%Z5g(M4Gty78hPJA4
zvrP!E)a%N+*d*YwwaOsr+BY0(ztF5CY1UNWw}?Svr_nP)MW0YJM_xR6WiFG{{@g6K
zy#}oAaY@O@R5D(>cF{H5%f6C4(-9&)nq!imuE2v^X%rsNF3JQR-^VGCsI^*_WMVrk
zS7+VedQh6qtE>#VDEd{ETMHgqztKPG;(F6zdg!Kh(}bFw;zFW+e*gzUjWfJ2%SkRT
zzvrwLOE~ANRD62`twaYfVonH$F~=2QyGHXHE&;lJT}2`*{<^}CaQclY-~)jL0z+d6
zCZ+L%h#~5GITs4vPds4?v!snJA%C$0qHW<z#l?*;C%}v20_CXViPnqyrQ`OL!aqqN
z?I|D!?o^dT4Kwb*zV3^EHvH%|A{jkj2PAGnV6WRPz|>}yYNYE|pSl&wIMWMb=-&0Y
z&Lw>?A1)CkHEow~qCyl1TyP*9I}$P=ed5EgZ&X^?IhNzb<K0tVML5(&6eMj~HA%;(
z%*<(CZM<DRUu&|dz{EBjzx4S6N>3xjd4rkY^CmJew3+VHYL}Qx<!V{r<?@A3uO2<B
zt3Us)?O;=ZN^~X9x8nkpGU|k*U(g#<;it<B4N1G_?{O<ssk9J7Q-VxoY$uiD7F^@i
zBa(-LX>VkjDvy>p(hgppw7=A(xV^>rge{XeG?Pg$3eR?1=PIY=WrZnBXPGU*4AJVA
z2!yRH4Y{;aH+xs=({Ni_ill62=4~~eeAbS+uT%^h%7%+aS*B{JHk9T*X|}yY5|`Yf
zM^jHK=H!)@KuBaxRS*F<vQGg<x32oHH!78+^O8lNy|R#6S<HpOo0sV{X8jW<Tc4O(
za8n&h>#b%rxD=^JIy1n`ge(aY0oF{P=L>fZY3@hwvYhz8<1>9`pYHDW$qY9QNl3JO
zkR(TGZe9!2&lg@$F)||eq$r(i+BLaeai0+Q!L+xcU({(nsbL%!e?bA2slT*SNymzt
zs%$IQY1O)I>T)_>YQLRbrh0gUiacYtpFG~iTgykq<8LAf0BP`*rX%gYa748x<p&c)
zNySa;*S(IqMU*haetaG6#pl};RKHK<Q1P6OlV9Jl&ULq(DC|c5)|C8i1`JE;SM3KW
zMt?bX+JyD~Ag~{IX{a^{iT9b{vHrV*g|iKE-1KUlIDV(Z<%8Lw1-rr)ll~%?#NwYW
z{95D(m+VYK2>~6<`Ep(Qj!QAmxyq|`6)--q6J-iX7p0DYL5bUydPXb4?l+nJwM_eT
zds7u5ed1Emmszjo&zJd`k{fMf+RAyQ94{*qmonw(*!UD~K0MbqZaC|kQTKFOYfFCr
zT_<~^yZER7KCTOqx(GVi>8vFJ6jg+~gBl)9Ke>^-P1ZEs3DatK&8=PGDkcM5A>fi6
zGo-<}Ua{wRWR_>THKq_UiyGB_^`*;4qH}Cde%N?XR#zvpRjdg1(|nVBglE3_T>lM^
z{!#gUpuCj|fqhM9qhM&!a0p2-`L1Q%L~&38f$em6H<rxFjAA&tquJh+tLbcE6mI&I
za+!})vNYz)po4nSe)qQgXP%iDya(2MOKn}&ceahXV-AUtPaM(+@yAQ42+TYvgtRTP
z+Rs<uuD$GB_ZEHq4pw7^akYit#%|&7s<GS%Xrwf#U)rRWO{Q8WQiw^)cGV5YNGLZ_
zylq?g=zvRT3ma032J%R4)v6agk^3;e^_06qD!8+B>8ufh#Y=4A_3nvr+B;p`dS4xj
zho=?~F1t?&fX2|{GRjYSFCRKH<}{1Yj6@!-7H>Xa)<W`);Qy#0SoG5?uHOpiZ<Pet
zx)^kjAIcfl))|iZF`U)RQ9_yRb(8f1C9AT`5f{w3au@0c#%um*aWm6;4W%&)Tv4v#
zZ1^ogk7`&)GLj~L2cAyr=*ulgVRuyQ0oo!ITCXX}oGcxy;WpP~_Mxxva;E1y2I}NK
zb`BwDH97NeK|P(+nG0)ThR{g<6_Z%L$!ZU7t5u`!L>GkL`Q+d$0jUbLToOwn(T=37
z%BWFX+LWwg-R17u&smRsr!c!^MdY&=E;)g#1Ox>h$M?0qi=q`sHS(PAPjYtlm=cYa
zFEWsk2C<zYF{3rr{l~1vJ;xo1R4P>&#jEb?Fs49~weQGjR8^+wM2vCq=&2i`>W>yQ
zx$V9r5b5jFXhxD#HR(NvRE=A3wH>cCdUxqw|L`3yCC9-{oYRK~Ep+iWNGp7M9jjH5
zjWY?o<x%jIyVX4DQNJ3~q_(X@*HNDy%_@;EpRDK&X<%laV~tfV)13}>{_%~`J0ssT
zBR?k*|7ep~=-sbMbGL$WUb#!V)S_sC?F4kT#379edZr(5TO74A=<=^ro=4EB4INh;
zY)4aCzKA*gSYYE(npOHr<7+Bw>LPRf{zsWgUvPun$Osy}>!@YsjA?7WizT~INCtR*
zF*jeZyy!KZS1<OBfV<MeLhA4co#PRnqslprraTQ;qU>e;ge5^m936E<RQ;Y)#^KQC
zq&HdD(Brmk>+4^LLKi;iZyvbY40zd4U=g5?5Mr%eY_a&QkZ4)DS0`yPhS&dgi++1g
z^JpMH^G3ao!PNHFDD5vC-Y;Fx5vdTTfosC{aFb^g%DD4odww19-{~?bLkVc;#JdWr
zCTRf=35wi}iPScXjXV(az{6$DgtBNGP0g>QN5i-H#*&Kq74E`$V(2bD5w|@xs^@DX
z#CrpG3;%?zlY}SeB8U3aLJFi$_ei~VHThJ(3OCgGFu&AmI!SJNX#g(ERY<-hSzdA?
zTJ<^0!QT#+lPyxE2RBAx`RFX8mYo`6^Pg7)p14CXbDvoS)43Ao5}@)Qgu10#nJg~n
zViS14bAPsbD4W`&mUZNjJ7~C)d6;qxI~tP-gqPvJ2u7lE@)IoZW{{ay>YGyRO5|Z6
z7)oVmN_yiX@Cp~tsq)?H=Jtniua=V%b~9I__CAIKHSCfjdSMRvqT)F^Gw1|0KegBi
zKh(1a4AELm4f@sGC#F97>%^enaj~K>;KDBFaFt&M?d{uq^@DgW!E7TWBAOb%AY=2l
z2Z6N{UKKDkGMqf0Cj`YCGwfHkE5U=syQ5}9OoMXGNKbo5eryZ9$kccyUFP|OVO%+<
z*6BuVzTGP@-<h1ALngD{m-gK4#xrlHcq}kEd29H%;e$o8Z34H@;DHmE)PDTO{E6Sa
z!8D>;M?C?daq-ydXl(#_T<wiMNel&;WABKLU#5shMtbU(d_sZ?NnF~vl<+U}!dE|4
zw&G$dw#VDvwOHc2h!g&XOCTa~HQ!v&i$B(DN)xbV7X*1i|K$~x!N7(Z9`RL@`BQ<a
zd$t68t{U6<-Rpw-3uV<rtt!UGphfOu-6CIYnOKGsQ?@Y3-5Qy2%Uc5!ybKAbtjEDH
z>Um2y=9?Q?uy1%Em1RzuHjM1dNn@wdLhsb!t7TAh#qKq`N~)@uUxX^@>z7ZOnWN-p
zgAtTdIwbfhTyst9BjVB9PGa;sZil{I9Bfsbh|)J+wcwJFfSF%=v3WLr+dn6Tr;{yH
z3kudrL@QfUau!OwTq5+;hUWIXtA>X~ZF@$x;YzfdHYcos*o!p8+`um}Ur93IeET6^
z>eeaDx+2G)j{J$D^n{^wZNBRslMzSQ*#`6K@Zk&82__B${kxC$BxCFy`&wW23@|;H
z9)@nus<63b-Sgk^;x0;ChihC*%OvM|>l7#jqSk!Uo1)hMgI~ZHtrOgHM3;smhrbyu
z!=?9lGc!Ijpem845{RioFUYBX3t^Tq_g&b4WAivht2j2AAs~=Y(MX_0oF{9r{Kyg(
z%9vbPq{p~y?DFX<dNht(Pcddm?_m4dLR)2NPtf8+77JNtI=kGP&*NyA3|5RqAz68e
z`m*Z0AHSO1TlpuWWeVp(iuyw%<zhn_GoNmDZ&bGIYksLHslOe2n7>Fqyn(hJdAz!9
z$`s!}C#r$Y(@Ki5)r5VDOB&bvP&A_Id#jsdr|5bwux_^_6Vg~A81fD0w=Q}27>PmL
z!u~{J@CZLW7ht$tew(wuBeCqqNGxG_K!O(Z1WsG~+HwBNL(;XC96i6V1kDQ=oIGHQ
zmg<7Egi+Sk;VR8IQzktNjf|Z%EqtOn{MIG?En4Q&T+3%mz3`;gW3U!Ptkoj+ia)z6
zYDBE$sOPd95UHFTHg`#-QR-M*^^t3sxe%0d2xw)|o-dyx^|z4GS4i2BOmJvQUX;d2
zSY3{|#^%+-iSf)gpOVctT1L<{lF=!Dhh9?)O0th4ogV2zuSJmCY}PvV1DuZh<2~LT
z>G6M@lsut5?{>mY<mc5Vp`fo_H{)Zwa^5qXG{`TsbcU(;l?{uM{wvq}O1Rcrvs3Wu
z8`gYmGF|Mp=eEC<=dfbu>gaK~HtRKF|Jld%2m0s9g!|S+B@10P^$Q|tD^fa4BlAV7
zq1MTBPMIszEc&<Iy|mDEG2eQDB`%!HB{<NG>&&dW?aau2c@E0KRduz!x0*AifVn)%
zvIap+4KU|FLj9U?)`A&49G))<PbASI;KZNce#5LnM*=T3G{47eHr4H<UF{U_l_VrR
z;enN~bYx}ry~tp{{wag3ZYh!i*OIYnVe=~Of!fvWHoy9Zedtlw@R_6QWvN1wZSjK7
zT5|WjPpf)PtV-)KJ&Dp?R({g~qjCuoZl?KtItwaOML~rI#eAnpm*DNHP^|!uelGLX
z$iwn;>96GT{aC{RkKj;>0Fcs<U5)k#8yJ5Nw9~8lEJH4-f5+_E1OQU%^#+4!$L<gb
z*_UaOe;qo{8^mR=t|`vIo^fH~(;cXxRydb8tJJ!bCk)ZuCwaX}!+Lhm?PgY-Kt#Bk
zfKMGa#dh6|sS*C(xsAi(_FEUG0Ob(gu3O6hnG;OAC}qV$kl9ngegw4IaQZiP1>)ih
z=jhzz@6<8IC@YAS3suRsPFAU|Z#85FZI4W)duirLCe&p;ACxYu48S@`m9wQV_w=pm
zI^@aGj)^e35-_eV=@X(=y_rMr_H9s>jwP$U1XG-APowLZFbmD*!(Wo-GEP!S9;Sul
z`_8$>mBWTIrc>l3V#NT_ewsq`SfLzyDu-3a-4%L6@l?-w?mefAG_(87uXR$S>be&n
z%;v)@9Jg)kMhfrOaZO;8H7rQKjrm0&QHgR{*V^4WhFL7D_vWeKvwk*au{0>0R1EE-
z7jOB+%@Wb5RZKT^SC6MxfY~8W<j)%eb`U{+`@$8IK7mkES|;|LZZ9iU&H-4qej?<u
zULjpsrCI0FPA5NPI8k`eHU5X{&d~myOKrhsG<~gU6U*%#dRXWY8>-E%`z?=nnNYLO
zlvqo5U@+$r>1|XUr9g|&epl-kA4*-u!3loCuQm7ezU3a`TW6~y-6;)mbB%f8PZ!Uh
zR@Co{h37YZiE$CS`IOIuzLjT(n_tedba4_rDjy%>`(lbb-S@Yvf<<W9{ml?>=1(}T
zWB~gsYeqBj^50<<s2mP~DxhJf*%l$K0}|YR-y_<xoimzGBZ@p|f=54r^yz{@0r@tM
z#^gNxW>rSonmO}^TC8iGG6#N+hW@rmt}N2rV!0^!cBVsJv)bVyG!!&mV;eTML+E#k
zA#;$@lrSHCtfK+l%L>_b!f#o0k^8o<8y2cqMmpBG?n++XXm_Rq%57&+babssnh3z0
zsL)HT-*-++kSzSvs{Pi<zP(6cI!E<wki|5zrhj(nzF+1G@uDgFY1DFKf2{CDKi6qL
z@9DK>GRCGF$2L(Our2(ydX-pjp7Vb6i;36E@DuC>y2cC6j?=KY(1tj-ij1+!x7cA;
z%li7hZ-TuV3ZrKD8K)0Mk}50Yw!0MHCpA`V9zwpDmc+<>V2w}r;ZYA~)+y1>eWz28
zCSGQmxgj3N7OTup-rrj~CTIN4!|DP(ia){hI41vV?8I@9Evbf*+y%y@!uzRCOih&o
ztAn?LMc9`DM%oBhZ8@VO%uXLpL7x_y6<sPn&u&^Z_o`cuQAKJ5#GI+v7!>vduzXtL
z)#)`E*`A8LS4rYl0t;Xyy)f`%q3>tnZ}=4E(Q7XBK|QCsb1EJxHUG)F#(?vntJE~G
zvf8TQh|M;q>cVv$@&J9?r1z1t-`%R<XaPCj&a$|#-lpn4y?9!2!x<XGWw9tDMzoi?
z)z3rt>CU<0#hfaW#6nlc#nnl?@B8uFtGg_9@>pM-N5fN!KwQ1f1N%qWd?Z>s*;^-b
zM0iv^zYhT)C|Iy?pq_C>U3xeX215c83U`li!HWfzuuz4h&}Mw{NCijuZEkXit{0H5
z(aG@-Rv~|KTnhh{gMWw|EYUVAqtb*Rv*(?m5N{Ybu0aA}<_pr$01`fK4VZY8#Dy;K
zn`|)3Ie2thh^XXL*wf1A?G*y1C&Tx+IRsCaLT~*2ZG;lgA!-T9(q<MprYAQFACb)_
zF1Dy^uiGS4bYoaJn1mW?AqixsSTz>R)~7nYOH?ht4hA~(O4of4oEmJ#DNn@FZa&uy
z;F5U+RTGyi{pxgDym#G;%VHb1S(H@^z>2X#3=Nuc+RL6az_+B2^lk4H<KA(OsXh~A
zVj7BT9<z4e%faDvgXjpzJl6(qm+T0~zZATx(72MG^l1>D0aH4Jk(!UkL@4aVwjAqV
zb_MNm;Vqx1HQ)kyou13-xT)vLDz}&8vY0awGflbPWVzHtU+8w<qC<8A4@?eph#beQ
z#lp}b=IPQ$2AIu<IyIU!s{9%+X6z#_Vh>6j(VG*bwT+TYZL&&o0vY$X4+ZC&Y*P<)
z)0t(+6%#?2Yg*aVbmEHpH(zd!yYU%Z@OkJ%rm<?aA&NJGYU<v_XcBV{hwV8z$||*H
z0q37@nw%^vR1NCKnMACCaf@LS!xwf2pO{b+cOL508+Tl%z$Diyx+$zO>n&%;22ygP
zm06_>$N6`GkJiZ^;s;CSL+}S4yk3C1q3EQR`VUwDi?s#<jMJ0*K6M(96P!daz2of(
z!;r7=DqBs(`QkB07%onHdGz;VvhUyd=^^7QtZ~T&i#k_R%12r}n3A75kND+#!7_&v
z5`j2JPWD0yxtkl#X_3;JOjLsTmSaosDmn1e+!qq=+Nt>41kxh<o%maa$%j!o&Qu-o
zK~1t%V9?rfPvPh4TDU~gEXG96dn6yn5KfzP=C+w{2Zr~kxVT2^$YcRcu(qD{v33Gg
zSWX9_&1DFNWlkma;RsOHZa7MQ>JZ!Vm6e5N=^(wLU*Z*>DmO`9C6jtivBgtrnVd8t
z@E}qY^I7GEt3&3InZrb1#rI=W;sB0z%;^JlQJIDlr0fKg*~lhGux443L=RS1JIe0c
zzFbrV>-6Tat~nZZ8!%IBS?kcdyL&p7hOMNrhN_m?GcC0!1mdQ~EtM6C?@kfVG#M!y
zk$RyxOjEMJ7^zd~o<XAY%&_xj3+n4d!_NRh)XZKw&q;2kuT!h&=nywwhH~F}hhUAH
z>OF<?8oD>heMJNZ3E&FT&82OqkxA&SUcG*eaK*lXK+Z3PX6H*o9I^;uwP2d_FyV$B
z_4_hq<Yi-jbaY|2OEhQIJn_o=h;!!j0^p%zcGWt%;9*1YXS?oAOD<1FD3j#0-N;JD
zzy$OXe7MT3idmgIbbJqywk}Wqgh!-6)_4kLo&HZegb7+Zv49_&`(2UvTdM@9_`!%P
zxsVY>L4FX;HN8~yIgijZ{Ysj-FH)3)GRuT(?I$S6sZsPXblT!sTtP0c;-#G)n4=_<
zUhwI(e7ur!3WK{qlC0X*C2pmvxZ2ihxpFM-!9fXG<5~rRSWpoGeXcV^Zxe~WAnrpt
zdy7ZqQajD3NieJ#e}Sa5LM46`l%2!oMpnzIoh-*?b;31pjyuT)ev34ydi>%{RK_})
zmT%GZ0HzUZ_`rFg+g07X2Wg;;aJ1>J45?S><I3f(c6plL4q(mEJuBpO^#aCFFkSGa
z4=%1gIVdmEvvt&o(=)U^leRW41wx~z79`7NXGCPC6S<dAc`9A7b9Prfua4}GtKllP
z6L6D(XWR*D+WGZL2cP3~Mb+?ZnOwt$7#U_0ojIjtVstU@(JFD6;`p!6%j}*FzB&!l
z;iSr+NO@6{&+hKy8jhL6_GYDW7hPkkbG^c5!?9#!P$$63zC5`$vS=NyA18glvzAzh
zEd_DuiL}~?{VK)kT(WhSGV88#bS0A@)ahTPjt`VR!ALq>+Z*7}gk%DlbX)pb-%T(k
znN!kk0^4zOrCmn$MSSLn{v5}7m}j-GH6O^b<_Id>hxk-i$J0BzW0663IJ}nLW;1Yt
z$D^pPVUJN+2D&T;&sIZvDRZ(Uufl(speSrWA5Z8y)-4sJmhjE$!E%V+H+tzueAd|y
zO3Z4!+TSkB6v(i<5DA6-w`~HM`@#4slKBm={g*$J@aWIfE;gGZq;++_*VA@fSJaP*
z(uU$tQBNb{^yYFQ;NX;rgqrKk$`%QsBzKSz?em=J>_Hrm$t~X}aNZ~RYF}c7?T<tA
zP2MoEFeVOf(3G$Y#h=D`g~j5^yhon}!y3gU8-V%Da#V5$%Ok_$V~EKiO|m$txA|Vv
zSg6x$66VeF4u%o^Ag3)T^1yO;g9b9=ER48$F$Irt2>uSem2_U9ZRvu(Itk>;F>smt
ziNTAGfFqq3T$K+ClB2vWSJ(b$h{p{!^^`V6@K<K@BLxTFR%NcX7{g@kswNGzE<zB(
z6cyql^#|p|%kbT=Gv&{gkAXQxD&TEW5EJvK_=#R`$GuQG_p_B)b(3Qk0r__8<s_!n
zwr?M5`FLbbMBv#-xlp5Lo&_N4=H|Xw%O!YOAMH|+S|H+gxzKgw+=_<@Nl232%aX@k
zW)}l5x+b*W2a}#N#z}XKrVP`_grdgR;|nDv`44?%iu-&>!&Dxcun|gJ5*j}KcJKQO
zeAQaFyr8}Fr$*d~!DrCog7DT-12D5QX{6&~OciVpIW#I)rHGqP-?O(=m^ka#Cg!sz
z-Sx8?Js*9fmW&G+bT{FvjtV*(JDug!cl+;O2Z>ugGih;Jxd}ag6_HR}e-1yHZf-t!
zVfPZ%YFb0z%_g>-nYUlwSGm$Zg%h(GpXe}|^8KqMhGR1KwPwNJxcQ0p%y6@;=j|WI
zh4d+q&U@EVL-b!6nGZllX6@j4C9!`tXs+2kI^%ob4jp@YrUu^_jJO(e#V=45{1yjp
zq3Wx?J_{5YHj&z<ssvo}-RMa$2$!M=7KL><CY~vFS;g6}y#t>pc{im_fih<jYfhJl
zfPY#d7>P!-+(S$)A;>a?M!Za9E+2t_{~0-9p(@kim$>kYTRIl*`8P4Q-F{6-l-5d%
zNWIL%&d=H%n=}F$<Ho8Lpl(!4nIlNeWnkesn4kWTz+mDf!)DCTMGrmeQiRzVigT^w
zW*6D?@Epq+L2)sd8A*0E(WXwY_m5x9HVym`aoO;95M26Fb!HjsWsTNzayo%a!r_;z
z%n9BEP?DTn$ccK<F5?UsMC!*|VinqcHm8kCd4TGqrYAair^CcNYaRc#(n}eQhTrm`
z(7cmYgr?rN;Vw{IT-<UxTI*gWp@Zz3z`<OCtqMsgb<6~aY0`oz*P}5h=G=)1JY)I9
zQn%7uN58PLU||(VhKe)4RFmuv7q{vbxuw_L8K~ButV|j^)MYa0(CIzD8opUU)Jd4T
zUc@JUzj8BsV;qgd;&Q;@AyXVok98j9IrX;nmxI)paML{(jIxEQ<t{)YYKf<3H`s6*
zXzSVqOWIsL2&&L9iehH|NN2jJGr|7ADq}Y(LKFXjIQO2+JKI-)(lzdIm^Hqut5FOs
z_tv5W_h@y(m}yo?(V<6}WUA$rzUPLZ=AJnA(C@H&jken_3L8oBFU6DnsCZBYZU0O0
zI6W$!%8_P6ga9$a&7@Z(o<}3NNn<j(8}+RL!IZh@47$u*K@#Q-e)i;4(aCX#LUB!Y
z5q$*~Fw`_6$idDSf_7EnF0x4=OeFl|ggwl*SPOESnIb}d`w@R<+wR3Ew?#?Rs4<wn
zPHUz`p!AnQNB()Hf!p%fBG(AvYU+K#>Nz|6Qe{pgLIqt+K65EjPuctOhj-AQJsOKJ
zO~EuQua%uivZPKL)b%nNC;c7B7-wf^1_~EYrf*r9Srg{u6-OL!$moO{GJ_7fo6BHu
zR%PQFNX0|421oAb+qO1apc2%gRR!&ktLbVf<;tz?<HW2ZvF!&R0bP}Nr<>@f24Eo2
z{=)g|8xK8aN!e?PI4)gK(K`pIgIFL1)R~s^X|K9J<6NEg+0|kKNUz~!vjI*#G~wHE
zY_Y8cZrqGyctrij2H#ho;gCwp-(3!8wW!}r-Mo5n@gVvF1t+OuQnGv`A+$N6^g^Sd
zXJKDa{bc|7qLeRKmiyp`dByR#zEH)6)ED9MeHkLd8lTBzQs?TjVl>FyTPx!TfpSDW
z76c>K^Oggv<)U`2@MJ-nds=QeUD>qsl|DGOap)dhf!;f({kP$t)4CL1m+vwrLNW7I
z7Ole2n82TtL^1E2<jWF(dALp%vyx(TEWcNN8i<Zc271u{QY&<TT0yF*!TT?@k^`s}
zszWX|lD`8czz0sE0m_|ndltudj|a0kfX0i3l-4I?|2YK~AuS&G;kPL=UG#rnP7Mz*
zfTYOme>`mSm`5D;4JiB<4uc+XSUuTn`mZnz8va<&C@5-Cd_3qsfDbrbCi{-o|2hR^
zt^oWnP1Vkx_1~9MlJ|p6w|vt6$BEAtfx8p30g(w%|5M-xs%apg5`xmJuo?G9Jbs^Q
z&IGu5^$A(ugnu6-RRyx(Q6(ca|2hSd&4&t<P!u|P8vZ0G{#+CC0v5@-)ZrBF_v`RS
zLIqM>BG!jN|0&<Wz=<#dT?HrtQF4-hyNtklEI@f?IH}^1b}RmP(EJq;esCAE4gTvC
z82@i{5SU!P3#8fKV*U3+{QnF2C-MCM;e}M11w@i#?GIW(ytr_bKIh{iA=fLxM8m<W
zw<{tC+W!AWAPT}iC7l0=tv?}^eKCwUdb6|b@4P;Yza$YA%=m6!#(!W6e0yID$aWsa
z*S&w`Q6N<IKqAFoXB_tr>~8>>Dy||v`Y(9_Cg%H@9}D$e{7d}C0uWIk^=n^uX8s78
z9uPX^;k||Xw`lVY1ET$&leb9hU-#kPjTjygu?^4^V0s}#Y5o$vZa9FICE4j@MQH7k
z>$f2Nk$m8XX>E@xX+=zz5@_oQhM1WZ1O){l^fx%h{!thR>A(5BQ(stVRO@liM*P84
z9pUbDS@M#@Ao-UY(iYx--xegh6S%K^W=T&#T))FfNJyLkvz$jFNuHZ-4n!Tl8A)Pg
zgBh>X6R7z>E%t5*n7wSaJC=h>O1eLLxSec}6dsN?`}OjX7y0g34F1oRp>f@pM~mBw
zi0IG>*0)tCTx9+e6Dry@js?~W^?RZEs*C4NdnG`LEG$gwy!i<REW#Z+#uF}Sey82F
zE^5|)uLz7k6&{eRFeM+@2D+CfQOk9j6du``-S-NTO;1)jVD&=1v(H0b-icJUd`shJ
z27DoLX>ILPfp5TwJD%(7QD2I&?-u{kTM!d8t&2odyr<H(ww0@sS|s=AY|Ri2OD*I5
zsS=+>PtpvB0TSCT;H8d&DgM3ie^w1pg~0OvR=yB9Jhz*@qHTbhq+zaUm9#d)W50xr
zcf84N73#_Wqs)xX{GZ>aNgEEnC+Bq75Z7*Zt662P4u1o@-gtnYad6RP=WFH}Ks7P4
z)bh6DVBf>|B!pGa;n(%f>~y5fzwN+Z@W^~zuq`86IFx!P*xSNI=UKg-!uHb!6japM
z@jR(Vn(KnMJ715B+S_#x16K%`HHO+wI+@Eft1g!%R8&+<C-P-D-A>mm503h4@cpVi
zxt@>KTF-O3o@C7m{)IsRH(Yl9pW+!t0Om%bF$t^*&Kp7>b6~)H#nDkm4I=eSxwh)T
zWg7DlFJVwM)3(-sE!zJTpX`2=t(~2bu^ch8PjU1sp6??g6Ljo4)NNb$p6-q3g}8d#
zD8BxjLd~=4RmWn`xzxrdEWAQqC6~;$;(WQKg$B_I+md5z>GSkWO-+qUOWXJUg7*)I
z{l768s%p-8w#cV*Uw3qGZJ82z6|*ksEPkzfGwLD|D&%=N)p(ul+~INIC=v?Hv3pV<
zMex6`wL1p^1@c7p-31EO*ajj%rz`u&&)k8f*XH7!NTtBPM|Z;St0*fgy9Lbr4HkU3
z`%$?khAl+bb^XN-Yat4zPlT@gA29{-%EI;c_y45T^MHZj8<r6lQDgi0%x0n9?<=q6
z6eGz?pLQ+Y=FSLpV3R(iD5<VwtDHuBvC-zh6TCqCw?+K>9wF#J*>N0BAX5i0qYrQZ
zeRRN*+h)|tyP`~&wA%rwib|ZTUbZ5bnRz=&$2Qh>x%Csd>yq+;EdrILnbBW49^hgS
zTJ+DU&!wI!WH4%LYx|6vs()trIo9TC*JX2H8IzfLw4wtH@$9I4J>8h;dECN=0t_-#
zw-Nfw(fQA_0pAP&J=sYr_*n8%GrYY#n&|L!Wdeg8DY&t}_XeXEc;8+|eG`Mp9XIED
z_K)ubVTEgRIdbel_WVFL#A&<4%XiZL1I~ifo-EyR6BvJ+)E_~FTpumZ@MfAyGMa*1
z$&>V7I`%K{j{xdm{Ol$}0C*R`{yKo4YTF-~;<WMRux@k<AQL?Aw2fr=1qZr>byiS#
zFW~&@RixA597p!ZT$9}g)7P(C8;y*N*ybFH$(g}mQ-DB_?XbptoJPCWG_0?`Uq({$
z9R?|v^y7rW8thCf9d6sDT~-r8=Y2KJ@4b`90M7?bI_-jMjh~FUdGSf9<*1GAE`VB9
zjVgWCgP97vblH5>A_e1B{wD%1<ru`zvZ1#N`dW{yNUSUJ020rI4Z3_f0Ip`{TH}5+
zCT8aNPVd`cfUFXC%%KB$9rf>*1<Hq0Eqvv$j$Eep&93H350JgjOpJ#eMTpegb}NS`
zj!Q0{zLp}P{_x01Q(2OKL**aqIOYhTxjv)wn*t7m3I-M(*6C<r`gXnSi``v6kpV*W
z&iae*M1IZtrDa<Uv-)otNH~mxKBsWdX5$G1TzHNT_g8I=6*^5x%WbZ+tslJSy!r_=
zhXCp(y#p5=3!_jn+h!38?{no6ZI5O^)#%rWQFOlnYG^8|s@^kdLJir2f!M-~>|J-Y
z_=JQM^~-g=g>*I9vU;n(>O4t=y_(+;F|o6|Qe&pS-zrGfcdY6ly9gs6HQ8><+WGrY
zx@%|**HzMwdwa8gCH3`*6L}HyI~8{oN?G65TTJSLdhzZqT-Scx-?mW&b@;ydcb)z(
zXW*3|3_=$&a6P~1?tGc}rI6w*b&cRP<d;AFcg*sHxXoaUdxKCN0Vy8=E(71%6|cZA
z^T<59H<lCFbRUZX0d$crz`{nWfyNip4~7bU@56Hh_}8Zw+F!%uW@kgb^6fmi23P|v
zZ4_a0H3&8SQl8x$R7z0jegO6d-(T(!*XNE~(nLPh!zNOmHNyrPm>cnm!l*x|0FI+p
zPfG2&eXVZfZ0f%k{vY9g^8C?XNUhwG1VPrMQI-HQuCqCl=oYbg<YEEW<AkB1AzFuB
z{^)Tv*wB`@JHu-|fn|E>-toufbzdE)@vJS;(QyIlBvorD+Nkm3%lmWHQMpG}LsI~z
z#|_@*nIAr!EGH!-&{0!UugqSW9xXJ)#l>yty_vL`L!Jc`#ESEBt8@H`_lc+Rtcj}K
zoD*R@gQ9RT%^-05OkFqARqeO#SyLDgtrwB2ci(ujzS#1E(p5}=LHfrFs1P>`x4+%{
z!I*A<xk2}*5n!)<PKFDg)a|iZdsG+dmpi5+Qh)oLiZ@oE#XD2jUrqTtJN+MD4)|u?
z0=x#O?dn?q7)lY{fXl(AanVD_d?jEtQx1iaU#rU#_z?rb<^?d29KT~RHB2P8OxK_h
z5YRbH_j}~mvpHJy(~vP5%N9X4(vk>!v?Fc5lqU7uND~qhTR;N<ciw@<e8?=oN>PQ*
zEG{MGndVMer1;^ubNvkgxpmDRuk~sg<<u<jq%r-yB!C%-19;eL7S4$YSE_9YTMhq#
z-g`t?Pwdx|dY?bMe3`via~1rBL(p*2MGIuSJ)8);93o%$`ijGPuG(*55@>MyKNj;n
zE1**cHGCa;fErE;+@o&)oF%kK-e1^x8bpotquR&St`sIn-lWF+*2UGEXW1!U5a3k{
zX`cZs)F(iwSpedT$|c7U*0`i34Xec)Bq|EuJBOBo%C`1FkMnV<ez3z-gO-fxZOqCr
z-=eXq4lrb*V1exgJgAXFNND+j{fD?_-Ui}dKzw2X_rd!zb<VT)?98#t6|f0F`|8R0
zYadt30Hjr~A5rL{bDk5BB!CF8nM(Xij5XEm1k(RJRDdSn37=k)Yrcnpi=tX1Lum%c
z$vY;ExOz)U$!kmCK!hmOXT6PcT)5nsed}x&s1P*`jqqR`ZkvTI1<w`tolk(^Vx@8B
zHCoj&u^x9l_%wYgmDC~#X|!4NNS^_gqyVK1>Hsjrc`lwJ{Qc*7lMrSqban!;xtCMA
z`b&MaPmO+_uK!BoE;}OhXb1-ZmKjzrx#OxX9CWnUgk3BY^?%j^1fgmMJbDDz2M53%
zun$7ycRglF=dp8<dL(t+E-A|5?|oBzZx2AP+7b&;_|8OT+W{3f5~Eo{R$W6dvonDI
z_dNfZ`<ZDCNStcqY<r{t(EBTe06}s6-3C$DX=kPT;qy^J)x*V@KY0v5O?B5iRZ>=7
z2h@hojRmCXbq+H6ODz-{;^d_zU7~=W0E+~C=N-Vby(phYNJd6>D*S(91K=V2*8uZ~
z<K;a-Kns|Av<#n{J<hk^Ub(&lP%jR=&P++c#RsfqKxOc(xQY3k=TW+|_X&d<K|KVT
zy3`CA_5rT{kFM*Er}F>eT;xV^OQ?{mrD0VvDqOUMmc3W9WpA#mO3^@>P0HST6B;6W
z@4fdPzw;P<QNO>wzh5u+d7jTY=Y8Jiea^?$Hn4)3VAQX9;qn2?j$P(6A3q+JiNF8c
z$<;NjT9P5RS+%)m{FPv4s|#JnY<JM~(Csq>qb(09zY|ejXleZQ2bZ--W2B>%@o>S$
zt*L?9_Gz>5x;G?@x^+*~RBB^2o{$T%$R~3krz90DBG@dle=frexG`d-pa)+8mARp$
z6imI+r|NWuc7*sFJw~q1+Ep@@CCn{BkQ<pj9k^_MsjUlt;H>s5_XB*gaQ%spR%2?y
zaF;NDlsG}#&2IjVoc<bR#(VZ~8k%Te<15*WI@c^l|6x7~9kan5%a1UXPKQk?Y7NxH
z6y`=Snox>l&WrI^X;pCP))<y1)=Acw?Cr{_xS!A)O|ib`*5DDog$5R&VX?3hH1fM>
zkSmTmTU{B=t|Yw3Myz&na`GV??}wDtuL#j6-{{`4t;t~2X444!u3WAm5BJCzK~p<M
z8zO$4J}QT3TrPMzn<@R7a>O%rl>`m*;fe|J%RY&OiN0yoEBZ6n*dk(<8Z8M%K&K0e
zmd%;A8VfU{FP=YdP11|zetk;KB@F%C%Zs`+qQ*p<#;K<%!x}fZF(_Jt4aG`uTE~YE
zMPeX6e(xY^uTrjTLF0EjCs^|Sz^CIxm_Y0LOxv{drMdngO}MH(u#%Kd5$;4A1MGEO
zTf0xNUiXqM3UlbPyJuA9+;@f$I2or6Te4+6WU9Y=dSa4N0AG%U2rPc9e?{Qr<H)?`
z>kZw}(#}NW{Nb_*--j8#=I292!?3kn)_De^o!@`_P(Zf<I;5D<ciBnT<%n^$vZout
z-*@|ib=F;`C>!uf-_jh&;T&`wRc<Dh%d|;J3-^^E+21cqcaq>i3Ey-Pau17nEtm7x
zp~f_#RA<C?`Y72Qhb#Ub%@gpRITKfB_mGs5hJ3G+v$KSp0XwWi^1|4U&SLInlR_Q<
ztm<%CFDXORyOU@f=iO(EYnJ0JFPZd6PLm%=tUuf|h=AK`SFfT!&Yr3*Xv&gBt3tR$
z*cjxj9kD+j)<fIYgRWHY{)Vu0Z7`dMFan{agnrr}*RVzg?E0|}jEhC{siy*G$Z-oZ
zg#zAEO16~&R^ZrTm2(^&*xKFC{POHA4@pY|J34cqA@h>vI~TYuTf8b#p}%n=pGv$4
z;(}J&LCf1g1o?3D>k$uurR4g`6F3OVzZt*IvpY=ipvH-QHPQvH0gtrzm#-xC^DS;J
z0}6oFh6fPP;#s{@^@EFHBup0wHSM_r{rv|VF_K^0H)W4kro~YlvHp|$q};*!vqal3
z+abZ;Kz&k4z;QM<v94bMC%Np$T3IA}Tl|fGJ%9D;)kBJQb`Y2nl}u1fy$kQIqd4bT
zLgq(x?$oJU&|;>c&Se|+f@^%=F6JN`h*)F4M#LIAOFa6Vf><oLezfQkTt~*2KTsQ|
zQRE4z#&z6@AiuRIhJDScaVFr*%o54@Yvw=TyvIufl-M$7+Hk&!MO@=u#V@bDJo-p<
zo~EcQK}U+#si!&19$T!nqN!NlVJrK!_#%wzOfQ;^2&Tv<`wFA&VYR|%Uf;i8H&@B9
zo;E8#Q$zZ0r_9orPgW6fBXEpCyDjhpsw%|IUzG^jl$Pgw<bmI5QebhvIli~)DQRFj
zScyu0;wV;v82!d`F*;A4J);ThX)!>qv^<Wu3?0e(QQe1Lng<|moW98=W$MGGkRD|l
z1OVomD+NRP9b<WmR%g|B=#zp2246mZ_6%C+U{)QMRkEF|RCUQDCqygl3|xyVaU9#F
zN!ZD~tQ^Bl6|95!ZRIOng)^E%b(+1Ci<_RvU2@CK&2`Xk4vng<*voL<Y{$Rs@>?x%
zkDL(#npX($_gGra^F36!2Vtl*Ca3ETg~_)cKVAZDAO)8UWLcWWT;DylGrp!q8scX{
z^gO2F1e=97+`oATxktO?$HM~=`NPpFd52G){E-%M4|ehnKxApso>&%^8w2&uh^0>g
zegL_pD+UBHG4s$Jx>m3laN{9iSBlBVq?AxN*z&{uzT!if^F!Lxs@)vjBO@ceqG1_!
za4TC!Qr2RGoMyQu^l7I>0#yS#6h@IOaLwxDJkh#M>9r(`a6MG(^ke9M+%R8u>%-+)
zJ&}ifC=wD9HsaA*%^->9n}uP(uB2fv+Su4IMAZD_@Unva`C{!b4!$>zI=YW|N-yfm
zoe;^i%O_bE;KH)Izxd~Mx9{8;kyt#Q>qt4AIUh;)cKXJ?*4lg2w8$|p5t;5`CwLCP
zJh*e@=b|p7g`Bf%og>M4vjIawC!jYZ&R;1eaMDXM*kP3^bDz+IQefex3ninXo<PZy
zH)k}zgK5bhD)xr!QzW4){iTw7!)g!&`&s41<(}Y_zVuWwLN-OhdTL;opJYB2L5y{r
zK~;oeMqS*Kd5-4b9gp1ICnCo$#Mq?(lI(!X2q(gKhtaE452axoMk-r)*AJ07p|yeL
z9Zurd9S1JdWGKac`7OPlEn2Uhi`EG|z95b?CRA&xnUpJnVN>2@WxhGZ0p%9QDJ7o(
zXnzz1*Ki@R<`2Xw51Z@_6p1^Xhag|5Osie2$zA{$rvU+lssyFBcV)r}a=4tmxf8B}
zo1o8~hpAH82{(7zf8WX7(9&2KC~r60X;dYnc`ZsY<M5d?cQWVtPFezuc7&U|Iw7s+
z{S*0{xrz|5)TFvH+SN1$@g;o?4vZ$Fl~T0)biON6AuZpL(oEi(g^kT@aKLKN?@=Z-
zZG#KZvO7KRZD6Nb6)H1rt)-sl@~bD3?ULlp&7}?0SX!86vuNebj1U(UH7%Eu?j$F_
zDs8Cx`~9U~Ip#z6&QHN!KH1yb8<>}J1%;{Pu~;Xti|;A}6&4AYdfrc1LEDc@ufh7P
zwL!j72k}707ttpw<#{Br@p|=DBurv_lNC7M^1spbv-b#x?N<B+@Tvt#xML1niOULX
zj83U&%_|Iz-Cho5T*N%-ZinbECkA*RPLG(}dseEBbDyxwj^{`mq!-Fcph9N{lllYV
zb!p>i;mpMB96Ez^CK@B2ir9O_`+33OQ<C8=>f|hPxd~MIS@)_`?=Ny)4s3tj4c9$m
z_wCykDA5E%+i;-H?1>JQr8;^8V_mYlNL7Ngz=LrZ6^4%w5nUu<nb48onHp-OEB#f-
zVD2C0c~3?CA3@&%2>N`l2p9rShapByF-^jjK3c**AI_qfUNcNBcb0@4+h9^II@Zp(
zocxP2jA%QqX1iW0S=d#T^83=*_laMFV=cPgXv$NQ&fjcQBFKHFg5O3iI3p%}t3F2W
z`%}boO1%86mo}VQ8>jgLoV$FOgdQQfzB+gqxwEw+z`W@>aMsOv64v_VT8O<KD;1_p
z>E#U7yD;KNa8d6>_!^Io@4_m3B_O047xn9`PnsoxY%`@1a@_W!wRXhBK*}kcMTemu
ze4eg9E3U?*;kQ2zRrm+;|G_Y&@yLj)g5tn-c#_q$WQvYPKWM*P8?W_pKIS+ZFymNB
zrg!$sOKcW5<un}Y^lP7KFecWiG8)yN>XQv8%dhxyM`L!ZbEq(v1~82m;@l#W+sF)#
zWkX!el_*`5%kR%up~^Ut332Wigo{OhrW!J2Ugw_RmHtFB&)fOxPTvlriVKONOsaxT
zpG17DJT%{7!Vah?y2`SkN6SRmA9*=(sm;?U0+IdciP(A7BSEY;UwC>Ner{}>^Y^Eh
zNj7|!^i;uGS2uk6toRx(BEWxORWAP|1K5aeRxUR$Phq4LVd<)04L-#ph=A59I{NzC
zCmFO!K;sPG`x8t5`F-#%ApAIo{HZr1?YAV`YhGzH+Rdoo%yn~$AG8--)7I7oSX*I%
z>aUJ67j(l3oiw9<^ym>A@vUl;2T#ot=r`nl*B*w(jhx@)+`+@+4sB<VOZ+KeTLWQA
z^O=vIKBctefi)aRV%_;HG8>@_0PlP~<cW~%Y-p9rioeP4mL5nG@K{y(Z{PCO&geaR
z_5i#UHKi#+Y*ot0Ls8qDG8+>9<ptw6oLVnBIy*^Bo^w5IKx{c`*FSd34D6Ks&9Be=
ziCR`sbUYRhm-~Fn-%fRynY(&e!F;%>k%ZA|YM>Xs+t(F$>(=wIZKq88Dje8*04N$#
zGwt5J8`b3MvIfHcn}(bAV529w)hM@86coE_V$@v2=Atb|+a4xX%I|_KkRxTczp+@c
zXgbAi!hQpIgZWT{LnP0^gSpPwUjoYu|KvLQ*uhgS-5XdphU=ezJG-88kkV^>rwB}J
zkuzgmyq59jqv4bX@sP<#evAR$XM0a*L^FGG3u@nK^{f93W$;LGX~Sdh^(U_%w7XQ&
zDMp`el=iX##c)^8R*(I~%a;lxDkCj933~SwJjoHxg@g$rR;to~iN4AoBusM?y;T3A
zq8*TFT6%i_AA@LXQ>C?e&7~)sFzIS_YK`!}c=_^y(Cz&my9oVg^6ajQh!CY7BF~3J
z+vU1MJ-UCrA^RPmEc!Z^O=19Ko#+p9X#S#q!}H+1x`qZrd_>n{HigvW7GWURboARM
zPq83ueyHG$Ab!4<v<uS>#tN6*K7an~F#Yatp7AbZM{hMgl-fE|6(^!~s@Z65;9_i*
zh<cq!dTxDxfAc2Gvr^-!B-?cxl7CA)luoyJfHP-cWE>X4e7NF4@lU9j3Qnr;K)TR+
zSh04pTd?@!P^vQ`tfA2<Sg#!k&dNc027i2~_V@UP>L)a;M$`z^O^*=*PM%z72R#qR
z+bPbiPa(jcfK^yHy5%rn4bk|@FsZbbyt&DK%HM7FVN_JR)f;9;Pn-0VE=P3iL-C^^
zmt`#I28Jsr!PTxV%ibO^e_cZVJGz*^BbjtKbLo37Y_(2rufL6tuOMNB!#nP9_3|_N
z-cbJh{Cr|y<XNTOe*Bp4jOCy0c<Hc9OkmLjS{+=!PG-RfZ5Y;f<LXzJ?uKQK&sXdY
z{4Za)GD#H2ISiUE(Aw3cnGZA7TX325ReU31oSPc#m-%`KMYw&SDFgN@LZIH9kB;V`
zbxdw?Bu8nBAKH3wWf7p@UDMxiW;4y4Er^1I8f2#ImlohaC#nMDp^r;V)C(8J-o#6U
zNh0){IznC!0;zaHtw0`|=dzRhAIp6I8qARFZ3D>mZeEH6GMlMd&C@Em#K8DRnWhbY
zM=1MHN``YLBMQaF#1tYekW_g<&15!MM_u~BYNDqV#dDW&yW5kkNexyc?jrBKufL+$
z`ENJ1DC150tH4IrCFoE#Nvnz4*rb#5?_lIlFQ8F8XxKp<eB(`<;|l4=FwyZ+98!Xi
zohJQ9)`b2C4B}a5Q)kn<_gS;v+SG7*40BwOSgdOBtdwkzN<;DkRVFkI@qRfhz)NRr
zCXfUU;-)ZGh!AevxRE_y3M|T|=it>u9SHJcsy;MOZe9jl019q9^n66c{5_D*x=&Y=
zPR|!~-Zk;GENFT?JgZz{GBzL5YDDKu!MTzP`kPkC5GI7|+WZs(RG}{{vs%QJ6vizt
zmL-7^10RY&KvU~tFIss+ygS4B#4c^cLxvS35H+1gd=F65OmB_l3^gGWq*|`_A1}7H
zrll{Cq|(QxF2zk76;E?w1ONpb<!jd-DdCZX7RUsS96FR|Ah#cD$Vq~L=MzF;sz^-g
z>=x%z9%CS_^e@^KZ3c%qr|F@*01VA=2fD$2d2y`m347{!pfx-yG$Y&9TBcG+)<$>#
zBH?^Nx~O@KcIAmIP4M&&a$L*B1sajJmfl6d)j^T_^9vd6=|_(2pyT>U!UWkVqJKC%
z;tw!w$^&O35q!W?K&+oJDQOAdu|a{seql6L{o4z*0g4oc^|z7{lJnaD<4hPZ7hf*+
z5<wn9LPCfa!rdW9GK|`oxO>H9J-6Xs<<YspW)Sl2ywCVoE)$~*yUj78Fj*0v+_D#P
zybpGmok&`ZD{)k0EVA)M076oXLz=_xS4Rer^ZQ%0J+iAW19t0JwAr96gj<<5mN*}u
z6$S=aH}pRaCi*Bcr4@4WCy^<22Sp3d<@4V4t9G>I7`eKpCRj;eOo+~n1D(qbsf`CX
zJs68I?Q3p>K)?NJ5Ks^*Xea46b~v6=>zG+uB>IPiaTJ8Z$uY6J8lmOr+mUlLO3^j7
zy8n5|P~{=wK8WZ7P)Kv!WN&$)gl$jRrzg#coH%R^F+XIdq;|ar8}?R&k@LQ182WdN
zTH!yS1HKDd*}UhSrl@uyKwXi43puzZyLmmCRFf~Tc?H339|FUInID;lgYFH_xNc#Q
z+&tdZ(NP5PoqSqR(be9DlsI$7`YDJaixy_bHNXuFSxgO{n18$Y_++GKMa5l%`Z@kt
zpfuGX^%o0-Ol_)Z7=i+ggA8-Gk1Y<{E5Vg~3kQrKU$07$Sd;Ma<HzJ~*llCK&JPzs
zhFt@c9YDS^!PZMh@-h0>#r8C8^2dfVrUS#3vJ?kin+?G^zYbw)eq>?SZ~h9^?$h=q
zV}$}sw-jwBC8o=sje;D+nk%Kyx1f^ifW?E4b5mDmE6kq$i8&6jM_Z2H1Lqv0>fHSB
z%B4$S{yyLOu#otP5S7E?2@FE0V2!;1aVikubtFt}?d?R3&SqOoGn(@}?2Y0`kz_0c
z<2&$+^V2^NMZ@x3br!HO{hlGw9Qh@7Q)gx;qwHC^dh9-T!ZCl<AC=Xlmq@q_?%~nS
zzGb*w-7_T6>iPgtVVyUyJSlU1VT}nEj-&|*VJSn6=FQaP+aYR8?m9Z$52=Kdq166{
zvo)3!3I4WIwQaN5351@}5zwpS1ObnZ{78;@7VHCarOf^TI*p`8Grt)>wVGe!%S+A6
zNUnTtXedx_CP#<~&qk9k9jksVqS(Wv`9P$21nsx$>qm4Cp0deai9e9@_**qfASs*~
z0p+c1TS(E7Ps=7-<T#QLHj0^;#Dg^j5zfD?X)##qi^l!CB1wS_PtJy`{<`@G60eis
z*&ux0Ma~d!(41MNpuG*7xi}?<NEtf9qB27hY>T}lJ6k?@@EcX`*47`lRgjT64hYQS
z!c>h~W>~)szhMhb>diZ##uF05c(V-#?Pu~BuV1_NO>oeb2xG<y*^ptNIRpnO5^_Ve
zE-cNovvIW6cU>jH?*Cvw*Vk@szaqPUlZ7v!j#mB%_74(*S<Kqy!B4H(?`tf{VD5iG
zf!@Ga5FK`ywx}#oPmb1!XR_iBk(L<U+6=8_D}ca!3byZFIkh|*1V1j>kl|;Y8az_+
ziqh;E<lMQbokh!)8Qtpd?p{gxUD!iQYt5d=KjC*qQ!JsE^#UDyvgEgHA!3@>(MJv+
z&bO7me?*<tN%@WjBxj_WY{o@L`C!pXGapp~sam2!X%&Bh%8ac9^kXNGB&uIzp3ol2
z#q95V^%J`QiUi)%pCcnDm6mYxeKJh2%x*s`0tC;}Apk&T#o-MR5^~XBgOj5}X{OYE
zz}8Y=byKNU)pMm}9I_jj{O)zKGmlard}`+zazO;gE5x1mTvEI9@bw$bn5EGg>7Ij3
zOgVAi_++Uc`L@0&=&N^`yPKx0xCU5oAJ7ndrL;WEphT<3Oyk=NJ<NwoP+H=2#Lr9#
zt;PASofH~qOk#g4#|LV+2K)LNd+WbkBxVO<)Zh6eUxp*)=^$$QpzRU!<6`nbnW6M?
zvDrpwf%V|Q1E5R_K@3tP%H4RFidk$Tl8#IFHK26`-J4D3qdRdkkx8XUME?l_{>-pO
zW5~5~QbG28N}mpN8Z{GCGzUJX)R@+gP6d8_hD^{M?RgqWu&wfzonB2CmqFu738`-<
zqte@I8|Qn@XB(8;Sey`O08Tct&WYJZ8SixI3C$y~Cy9NONljK^3xfvs#)UClX0|kA
zpHrmk5thveZpwb5;KOP=H}L>ZcJhl{y=tKy;uM2ZgVRO^>R;Q|V;D<JN7vIZPnkI&
z(Kx--e)G=L*}&RuI)k=%ZG#)e8iTsgfUBnL8i9uh0utXr-xLIdZ0O&qrv3l2@WHzw
z-oHEMPfJL=Um+Vs5S20IJADC>lE?#_-Bg{x7eh&8khN$w+po0T*SJu0$ivN<$i}A*
zg^`rW&D}w?ZO4e7>|ly*_6(3i(u($rro&c#w{vq*nIa(h^E;phayxxf2r9xtZ&s5&
zqfy^`=AOF^@Ptjm#lB}n2J)^qe>Hb#j%#vc!rzEfkzhm8&Qis>xkpS{foS$$m<SP=
z<cgt`9-Pyb>!WkH|1*=1KB#W!sp*=1HMBrUM*MK}0r}dbH8$*mMvg0_ddpW}Ng2tM
z7PT9aX>fjmQh)&2hStf=%?)irTenr~WOx^e{v`Cp5LYLX?MOtkf8<6p$QwZaSnD8W
zFfXmK&2K5!8-VjSZ&tZb3H;}M4sMShzksl+sOb5j#lXDl-1QT5u(u5LSg$I3(b)L-
zC|X^M%$SlLKH(>%x|$-fQY}o>;?~vPA!j!g7xZm;v3XfSN72|}85kcgWOv-UE?l2c
zdzU_O0d|^q+E8j(U4n%oWL$pN*jjViUYITcCF05%s$d)WeT6ZlH$l5u)^_lCi2p%E
z<5*Eq(MM<DOn@>a1Mk-)@eqAjU7a+xWtxOm9#d*RUty`r^;bxQhGVp!&`TH*eUeL`
zeFy@^dXRda*8-<|TWZqDS4vl6&#!a+EW>>W36A7?Apt;$4l^0?uwTeaYixem9c14m
zn$)VL$wb(!b;gFYRga8Jd~aTPW@O<HwzL}vZm7;5szniH-qD>oP`|&HI}_p3tC{H1
z2VLm&4a?1H2z4Jn1FA5gO09BzxY}Qp*A;a|u^K-hJ4XI)POhx1On#&lFvk=STOd?%
zU8jjmkF3!|tx>1tv4!t<ZpG|Zu0u@l{6z;3B)G$gkvP%dxYWsqx_7uMG-JMSq?!$$
z0B+bQt#StsP}db)l@}Gde|-P`Vq(GsDW<mU`x4SnK{u8D`SVrq@}JVv8x)aDJQni%
zAFTD4YZ59GY9{t04k+o7vp`*v!LaS%`D{i823Bx2Iq&(OD74QHXR(J#M(mz1s3~|#
zcLZ#tL{K!@9-6vnev5_C!VJMZevk9~VXsp;+#kr~+s&WQc&L9ZvdPZE2@2xL`5|J+
zvscqofuM0t`Hm9U#q8(1qB)X9m3)GN7)uHD$Z%n3m1TzPby3hd76Hr*g4(_VEekLK
z$52yxAB+9C)6|xG#qC3B(C7&#A9<rkH(qn(oJ~s6*Rzu^X`^#Mgswobd>Ouw3_?RM
zgccHp<s4)qR$+&X0W+V~#E5@iG-G$MA9H52+XO>P5=YKNZ#fbF6&00t2p^&<vDa*%
z=2o{INSutzU2Q-E7O9}%#j-X;`k-@yHS3nmluY`j(fiEl@860e;sW#_=uRW&pBSiJ
zInYSUPL>f}CO1g*Y)c>Cr|IA7h@o-+i^qKX1wtoIuM6FmK#xup{e8P+?c4D1p8<Kn
z3eml^eQ6D5^?GBF?yVfGic%674WOz9w%v<f*Z0vJTPD$9^YYSkXGBtyk!v*0(bmG^
zqqlFl`Apz6oY6@!pVncUsi!}89lGr1RS=;UgT1Oyc^r}kcW1l&47BSdP&;w-Pc!vC
zi$`!5tV5)clgjVDBLQdI*C&gK30fK9ZF#)i{_VgOLNGEyGO#SbisnbSJPMk9`;My>
zxbGtOjN2UA!-DOBW9lmuU<}9f1Cjs_HbDaAZp-$k+#R4-iJIoMpA1v_rnEFho1_G}
z#`Mbly3Pg!aA#<=*3rH+gikuH@qJH{pM;+U+|S!!e3BP>jq*LQ&1R&cYPZ}s@_}Tx
z?kqrV_RR4yE_H`y$DK6ZBX{$o+w1l)0U}F60z0p?1fBTf!n)VpL3MB)QHKMk?{U`j
z2PpWEfxCHhAFy1L(c|Z~-w3=Q(*&;2!E8T-8sq|?u{gTIEa49^D|_{aAI$eXtAjfC
zd2t!iFsIauJpbjT4jsV}v|YVsL=SFW5(R0}376fvsV<P#jBBbkuhsCe3_B!^&Y_Zw
zCYs%b9q@DGBDrka9XQmSm6a6gB!L^b>nEL{?Iqok8;59eb?4j;C2+#{a`#Do%8jdW
zeZwVvtC~-)wgHkcx581btXB>as1#}qAfr*BUC*l#vqc+qUZ)L@ANiPdgqIhRn9n-q
zne4mO&!f;4Y#i28y0lIsJI_@&#cJz8v;m^Y=`4dj?Gmo7FpvUtTKTPHu@HB2ir~w|
z&WjG@@ya0y1VjYgZyNxKZEu87Ta3(Fva)P-rcEy#*@>(9?o3Ym-GPuOy?&7ovc6RF
zl6T>R>GaW+6_u3u%*<E}Gc7^z@a=51e7mh}viSbf+4hk4DS~_IJH-M(d`QQw{|bO+
zmd_ZHAPux0;;kM+pl+H0U0XY?<F++3(L&6^sZISUSk#Zkvj_qmb<nq{YD~&N#nCLf
zCVsEvuG}+&Z?jIu5xjK%tT%`IE2RXrPXrfNtF7*zCiI(X1+{=lchZ-Ax<hriZ3BF?
z7j&vvxDy_BPa?YX2$T@ySw($D!J<PgldVmsmsAJnJf{-lqFoFurB9CPz9W<S1zBfc
z_r%lnD5tLpZ<_%a%BEz$m~h_oZM9nYy@|nksR6pcMEWoA=4m})n}(fZ>%>pRab<~!
zH6gZXV%$@ORFel1j5AfqN+*E3P)F6)*0K?w0_^1wm9r$5>xkjfU|L`FKZo!s6U4%&
z?(!amMN4t;x-(Rl5LSatXGMgJ7siSXfyQl6jqxWUK8Uo{)(+Ke&djLerqtPn1?C?K
zZjAt&&hfc=JxMsRO{Y52R1Z?ay%C(PwX?k;LEdm^eTFoyUUjQ+z>}a+GW_!cXJQ<_
zf(}(m@5IiM%$@sMlCTep=XHL7gtsqXf4=e0x&s0;Ekr4hYEAd+gR;MjI==d{6k|;(
zmE1J7r_4_qlXi}NdGIKGy{3f`54kEp+{_KVabK!JkchzFerYyAUk!XLrvPCXg(fu<
z4Z9+J>DL79%Ik;}_y5q$pFJRsnY;g+hLG6tdiJ(vJxr5#Y3a?`o(~?VIgUk;V0nX^
zYqpL`aAt;(E&KuC2n8=E(8^m*N6h92XGY)tHQrq^t&b=rJBQMSr!o_nAs`v@^MIa8
ztX$Ixwx4_Cj^yfn9`)GCAw7vE*RA1e20@)_;j{wmYJ=vo*zx+ZcfzE#(JDwq?#zM2
zx^YAWB~!m><(-Pcm_6;%eZl})nG97%_XFBmKjA2syo-DZ0z-rkjyGAQ!yhuglJ#*V
zxu%y&ZY};5yk!n^H0aZ%cBz6yg;2o;!L8d)fvD<VRtblw<=$U}C=Y!dHhG&9m6)Ll
zDh)p}VrV%KQz)-NLQYyCPex9Tq(_0O%<$7)2JP^HyYCYc37iHiK3t*X4oPq()@B3U
zL*zk6iTfigQ-WCxS&5brN*1joDWe5+e4<DA`4vGXy(nyV=R3b)yul4wXJR=JjpRF`
z&k9q)w%~pVly0pxE22>af&MZkOzf8N7uE%3J=he8PWQCgfb{UYaK=E3w(Y~CgMs0v
zoitY_#G^aaV%<`o_>aL~d?9^=6*ygna}@}Rc7To)kX`X57wYKfAU25s;=&w)-Il_w
z;3B&f;k)Dorx2M6>j;o4X{CaemMPQc^u&50rCjBFNEWV6g1zw4AanLIXxWa`LYY8P
zfbCuZFrG2Jpv}u9bOVG9{0i7<g}9!c`zaurm%oVw@TwB~SUQyP+ro5PWK>mE8!QKj
zvV>XJ0ZUq~BOQ$|52&)#JBpr1UU&5JPneC55E8z0$vJ6|acP8f7UHgckYkm3655d)
zOhDSQu42!WXhgk1R^x0<M$M}O%i#JNC-#2&^oh;k0YqQlAt-G8(ocqaEdusDbhdtW
zK#`V3x}}S(8F<2Ong%tsNw74b3VYYfQ*%&L2eO-dkobo1c+LD9per9`_<&{^uXbfa
zhQgq4qFfx3rod(WD@$}1LXnC+t!IJTGe#-d&3;+{8NDZju*5b7h-(0oBMy18JN^7H
zUGedpGN8P3-+M|31Sb+Y^S&n|;^QQYqi^CAp6on`=wCe%tuj(*BGXA47H9~XdI`B<
z%ipDhc44W?#*?z2w%b3Ea6!teK7IaNB$}r(NJ@Et#klJyZ$~5&5RyNusKWB`A?!=I
zg4%?hu&s8Qe${FO1uS(}v0ryCWhTBvxG~H5BJ0dexzY(pksJWyAg(+;)X0V&U9L@g
z>0RJ^%)R{+diO0sd0zZsHh-KU!K1tre!Bj+YP;=UGwcYn9D05^=Rf7a+&cKV#bNiQ
zJqJ%6>pRGUZF5jICbPMg<=IenvA$!8JhfizS46`c_5FIw@RvRF4mA?rrcamIiQApp
zlmP&KdFC+~s;JKoAQ1Q%;4txyVc))6XU?3tE<`eV8IbgTdiuL+YHHWT9Nf57i7;iE
zZJnK$`1twzruG}XxHxcaM~rdNc8bQvMr|7#`D-O|<)_Y`{dD=tmCD{;tz41A>e%U_
zQH!>!Bjeka^YR|PxO05L&c0#xNH}(zVw4o=DHj(PlL!d{p~vb0x0jcrucs3@$-nH&
z5G}Ye<hq*2bZ8`g|NAoq|G>b&URH%V#nG<dUDTJ*>h2E2UptAp%d?Z6es+#K)ervK
zOGLBfyp13w3w8x>q+oX`9mIy9Z-|M7=H&@fQ@Bpj4FW@Yy-qbgKE8(veVAC~EDZ1V
zNmj1I4cJ4wAANrGX!{WZR8b)>FYotWlTcsZ{f$<6okqQ>B}-FFOOZ4*G!+dE{+Z@)
z<m&W_GDNZ(mX_=)>*}<5^*Hw4O-f2i6_a(anPO%?(y$9nY?Ah*y<N@J((+5*K_kjB
zmxAnUhwsJ3mE%hC@}E7Ln%hq3oe6iDAX8LQk|HG~P1SI7Vm$oH^RtB8&o`kNqE&_3
zwii5Bl61JE+gaGz`^^+$1`FCE#528re4!jOVBdy9*WAI$QeMXh)e-x;hlZYDaGDvI
zW;tqnXNzFa^9{_&X=5cBY82Wg4)>lQpF4}Q{7;S7vOG@g)7Y%di9KX8O(J%7nH2o-
zNl9{5(0m6qg^`w(EfYlZUMo@O<mT?jUewb1a*g-wdg!$BfdnWnP#mkY7i;#Su_LBH
z=qe?(ucQ2{N`$=IuRBscs#EzIDJDc|)c4Q{yBB_s3wMaGep!x{l#)_o6q||h-@zPl
zik{+1?zzBq-@FD9qoW8wv^T_e5=`h}a4(1Pg`d_wz|$L*mX@Y%W+s`0iIa7RPw{Md
zC_#QQ%+dl5+G(Yhg#~$1rm3kZcN#w*pAccp0guAZfd{uhPiqiLL|5Cz$r59(K8K^R
zNAUD|jJ#ll_w%D;u&Jr5JDn;u+dB{$$@W3^F~WRO;*~i*Kg4KiYBEwDS-9gUIW`;o
z<;!su2JtOSLXC(6fm6nmUnN8+kKyw_qF-pO9my6c^6>ERo{_x%{;*Els;a8c%uIfX
zTennXL<k{D$A~NI>4}mu4Gj&oc`Zy@C@2I_2qnu$W*z8e-?9Qzkh@VSvDK_ZV?95@
z7!DJr(68nG>=JN1^i?^oFJDsqm^a~}KQ~iaTdTGD2IYezQ&YiR-QA{`+>eUdb#-+n
znD@!aH50r0wpfkRHvzqF(?201M1UWLeEsNRK{{%UNm!u6*Vf7;Bq!gWXwy%Uo1B^o
z&CM11V6`$&CFqMEZZSC4)YNdKvYb3A;)?xv_A*Fdf1lm6g>F*!h7bQ)CoT#5SKu%Q
zA76xvtLw6L!qvm?I|S;HJ+pcqQppB}hx_j^Mn*-k`rN#I`~5>oNN;&3>_PtE8<~?3
z6N3}axpSv|LxGVXWjc56oO|E#Em`{_df29K;(WsYRBWv9(KGSci;Ec){JQ%3`xW{p
ztt7<7J#MjHLbmG(lEkDWQ%qZ5-}n2nA?05lVkRdiFHdeA#K$Zc#6+{O<m$(+9T2q5
zH7o{wET|+TFer#MDk?IvDuf^EOk`J18QLbqp?SDk&@Ci{`Gb#^u5N{(8<f1PPT<B2
zZkbdIB>@4!^74W3vgY+0o(CGqO<rjRHqT~Vzun8mgll`2vX@RxSJx(oM}B~-Ao2C6
zbRU23Pm_CGX__ya0{G6KuYIFyATAd4?OMr4=9eaBMq*~C13G>VeKdz!*AM#j%DV2S
zl*{8!?JTI-%dyw^EY_(s<9cY>(sGGhD#7l_gI*t#`W9)}D&-9Lh6l$ptL}t$OO?E=
z4&iPEns9xUkpG3*k3XaNs|Z|SXV32sS{^B|9)11&odE5{<h+qT&AzzZ#KfcsxI=Z2
zbY*hSCPdkaf-L4Rs4_Es-eEUA&H-n(y<?X{Q6yDC)8;d#w##C&QcB^&yC73U!0*f$
z8Wy&=Cu9fwoTC-hT@qxTRZc<A)1p%kbvJCpF(7MG>O8(hKI^FfW-_+lCMId)7#y-c
z6Z0?4s8#ppL7-X2rX(lV??`!4D)Pqa2yhr;&{t4Fdc$(;V^rfCUgKbLAtYsz`Tfq8
z3M=e+IQ{B{ma1!wtJdo^Zfys93mH&|4u*9s=Os;qg&#s1VD^MK6Id$jRTPr7BNqbu
zJ6{(8V)_yiCT|v*wy+D%Th6E>sDBUEbh~D3tnVizzRVh}S#kij)vIUEp2hb^7YLB^
zLuU7wo(vgsVgzYQTNM@1s*taFapS1%U|(Nlm;&Z~aBzW?CE1oEN{qy?93|w|z@=`O
zC3o2tC>&>-F$9zu-+%1bF~d9sB$L1PhT6l*88~Tlu9fqMby!#!RT?b~&76Xh(S|1=
zA3_MU`>wYyb0XIc`r0ehs4aj1=!6>4@dRIxx>rojK^ZgW+5)P7$OhgEXa(_OKc7W~
zhJK&i76S=>-3#(lo3(c61UQ&CgX}24GyFGiMweQkmheFaC=;!@2AO19a$M4)35dCo
ziDyA&Ep)OgU~;X#jT)yx5t}?l_3LA5yT^C7=wPt~uyas`yKB~E0jn#k9FGbJ2w<Cu
zww~5k3X6Wn27CXjOJ)mlN}O&X#rTkd`2D-Je}vJhhl$qdwSawQ)YzUamg@Bduv9NK
zOT0G=9!_l^XiTeiW|WnaE007fVc<O=6NuM14l{}FNX40(Cy@)LPgcogQcgm(7}T9Z
zc|h}zn_DCy%Bp~?Z-jHpZQe5lEQX_PmuPKfAbKr}Jh}T(a!VdCv*q5OkX6BO5zgDD
zYW$$7&9cvm685<K0Tk*B<0bQ}TlPO;3<3TTbRj+!)1<p|<E&%$zRX4>z5<KA;<gcL
zpzdK?xCsYqbxY%;$>{m4DnNDY&(r!O+b&AKF8&%4r~Q3qIZnaMA1!zjv1QBbo<Wl5
z5U!3vwPvt_xT$HvN^Q@HwH=AxLAD_8N>dkW8YZ7&q+!^l7d({GeE{SPsV2R8*GG46
z+}$f?3ghtlm{#IuWaTb|rFjBj8Ds|fb-<|E)j2alddbEs1cUrOI|3zlmRLntZDMMw
zX|9dKn8olOpAgX0YOkf<Y(79(j$6n;uKNyd9*Fs|XoF^c<mh^Pd&i5gNk?asFwW2z
z$(~p_x|zh0N?Aif7^rC<lV~F216r94Er>4W-bb=|w;-a6qGQY_w=6Q7VQ<+HD5<d+
zc^l=GF;ONmmP^h)b3z2MI|TUiR6MqG@#I4E{5Cb!j?~oDKyLGm8E$?C=Cw5JPpban
zs{alZ^5c54bl`s37D}tD&FhV(+8$G%{P^yj;Jsh|ZxUHZR{pl&s9{ej?0X*LF83&E
z;M~Em9RM}$Kb9F0<*0G1@7!cDvR{)tV-y&2qzn-YxSkdX+Z)sf8CIrsv3phyU{QGX
zuYmI!P;6XQSJ$WWmGZ)f!%EFx>EDLUT@l#Fo<Zr=wkzv<b#ELF0022ZXwvekQ-Ky|
z2cHk^EB@Ht)9e_JLInd1gzw`SV~7R}oB!(g9UFFG!3{=cbuvL*qpA36V;drXs7F@>
z$acwAliGErzk&psNf^NydaqB>(aSARxXFf&fnA_P_p_wLoXHL8G4b~~J5Tkm=NGV)
zR#bF2Qi4eNU6g6YOxu&loS#xEt7iR1ayH0Qz;qs1YzT&8W4kB;;1d5fZ`mP$zk_b>
z*}U+lnMRN<E#TabJiq!;A>b*UL7oB-6wK>K>_%obyWJ=`ty8i|?~AB_6!2UM7{?}C
zn+LZxJI1Rg!ELebTHO>YI|G@p7;^s$mSwBL#`u#bp;kY~^{h_SM^=%Q)xo!H*R4+!
zP1J8Z5hMMx`WGK)8*WQUF+;<RDTzR#O&f&(l?NG~y-m(3oBkPhnfS%GkL3J7N;X!{
zu}mmu@Jpi|>5!v~n<9%(NJweInhiDd&SMcmzxvQc(3TBr99vJytUZeZdQhpBIv(G&
z-q;T)QVM#{f`ZE_z>e2V)^X6%*hH(aC$IR^j%V4mXEfEHOl^BG(jurtDgl-HLKsMr
zj{N=Q55X>MV|~5ZDV#o7+R!in%W5-%kD7#@9@mgs8zqfZNaGoR0v_0mPspF&wyv5`
zn&VfW>y-nR`G4<vH;hBei8UCqw&zbD8vzXw2<a{y5KpUurV-Zwjr{cEW?x^{4wr1G
zTLggc>C@M0!bTwBV0&7Os{VCqon!zjye{D{gu?6p=6xR(Y(jR(RDzCMt6EDfO>RU5
zGGJOiZm)O^>@=~JwKbrTFp8(G(}__2@g*$mrB-?H>{h&h>j5<7H1x_i`@e@n@S}x?
zNv}=R^NXtFPq9j<(3yD`8(X$M^o~f}ojWhdK}3;OT`kxJT8k#E?tS;Ghud`aZNWM!
z2pS2FD~{O+HF1|oC>YLlSlP}16<-!<UiA~CtI>c8*8DCO!-fYnh1=w|QSb+I=SKSa
zw85#QnMM5N*mDoUu4mEoZQmH};@!8)XW4;h-fn3;XkNCPoIM@Oo-y$vDs~kXprf)u
zyQ<)Up=DQ`a7I|!6$M_(Ur#qe`aeYmsXU`xw`IsOpI#AE*QQ&>nV6f0C=5dx@2AX6
zMH&`q&vlD~>7lKG0$Xw+6I0X4lGMR=khCaZREHW;l2{9$Y@BKbTqK;TqRBHqM>nEG
zI90#=dD|T+uXr2~P0M`${vfRl!lJD~2S6uz2<A`5<UeCL?_zCPV_9-x+`Xc*@|vaP
zY;@F_&C=Q;gic7YbK&LRc)s?=WrNVEZ~wc6@cU4k#kQc_9%sC2o|MB^@V;p&v?Z~L
z2!&V{0O7yze#Z;IgYxJ6=r<)b)bF-Hp|4p6zkISG)1Z}(j*h}ePAXIPYGi{8CV58B
zdr&S(-wUKLbFz~NA&Y4PQg?dm$;GjuVRD?~icW3x=&*n4>g%BZWpTQBIze&XTW=HA
zhb6jvas)DiDF>K*{rqer+CUcz3h^T%-ZNWGKGqL_oBDXITJuI%k8MXm2IV=NftZ-;
z^2YE}Uy$`>SM-lO7PZRwc%H%o$w2Ffl$IQRc}=NbA;T(xTnHo*f4_nbc}2U7TF{nP
zfPBR`hqPbyLSw|+w}42XDBbhV3pn&qRpd_2*l;OyR#Ix}xfpB6$2DI%=DN`gpw$u8
zS2(Z4z_AU+0qyRS4cb07gkO!S6qxJzpr8B%IsAVHUm({4{4*Q6l{sH?{<effr`1F0
zEW1UE;r;y^FTWrpK6)1%x|31dsg3&v{URI6cH69Md4O84YmChnhUu3kShe{CD8W5E
zhAj@djj0mhQilYRNXTiDo3KbtW(beQx?fs#KG{fZ$HH+{(oGXnz7g*yZo>QEQc6i6
z-`{HG)YH>5k`PA8H{sd8OBIUu{t6V)p)fUX1NTiKw=4d!&IOm0A#nqMs;<u0Y!T@y
zlH&^dV%;ACuY9<)vJ&RQqCX<ZX1EH;Z#rVUyuAL3qcMl!ObMQ&8`!k--Tktm`4MbQ
z&<$QsdkQAekrGm)Yhf;|9kEPyUls_#i@*Ze4&LM3Z_4C`2wc`}>z{oth*-{#aXFcP
z{sqiNb}~90Qa4DBwW2yzDpI~TmogzC;m_dlx)>g-iO=Lh{yYzItA}Lyk|8H<3E9DQ
zH2r7yV2F{==OG^;+O%_?WNQZ59)%7W-XPREJvaw}CKT0xby#;T1bAKQ=yz`s!~m}!
zHAN#yO0YZMzzW)~LH0i{;XpXkqj!Sz{?MeWW5`!M1?FtJ(cCs-87#b6t1B3|Kduj#
zNDg7HOF_@z;H2p>8ch5FCPa9?HB!fagYNgI_Vwv*vULTb%Fs5UtfuA|D=Vv3QjBsA
ziq@t@E<)?eF(jnJdOk!+O37kWK_-&v0nthzs4ImYW`5fYNT?7vf{Ll#vuSdIvZ0y|
zoGx_e$>bUX$;LPEEG=OyYYak>1|HPWX-!xPM*e|*4rogSs&T8EZJYTV;%nejJb!JQ
z-^96p*lhtiJq5s*QS5_bCndu@U0k*S4RUWChU2g|P*5Qb0Vt3`Gv@{@$GZR}gGzGX
zuXz~-9{E&LZaCwnjW5~)T7DoGpgUfC{pav-lN?vj0fejpK|<nOmT2Q{F>cPwIyzzO
zE>IGBv#+mDy*1bQ&*oZx++KFrI_*b(SZzGE$_>O;R#x&ODhLCW2;_kkT$tta;>GU&
zmbHeYZ8W)mrz*hw%;QL37b~aNr!^k`1qRiDGrxHBtjwmC((Y+1K6|DWconUrv-V3i
z5T+#R%KVuh0=ygv6i;<nJ%k2f%@OPrXP5;9nw_!0gK_>0`?(qV6-a?yo0*F>+h7_n
zMV>3Lh9606W>z5pD|OpmCFeg3R}wXk*}&`mUF%4{uNBN-nfQb68&4<!Y9G`&KHqg&
za?|>@AK!@c8-F4_R;+AagZg&E0M1j*d}X%--BHyUr=WU}#SS`RCJH*PJUP7)F>px2
z^s7;;TW<XJz1(>4rKv4>U`qnc=z#bGM0Ky&cO6l|-dCfl0YFE${}9cSS=rxe9(+el
zO-)aO3IDS~>*v<}GR)5X3h7M*O@RdV%?)?~6rkAZ6$(*83<q^H>s_0HLeSIGi{y3-
zIB!1J)B??I`mLOf9X~#rv14-(O_&8HVd46%P5oAmUTn$66CsBdY|6DXKDsU_tLGXZ
zK?o!S(7vWeC{S=C6bCN!=#YN@{$1YSpGe;U>1Sv6X|tDXKd}Ml4?>HKO*kKBrk&kz
zW<;g>P(Bo=*y{asbe9Yg0NKS~8~-XZfXx8R8U$D|Ct#7u)1eg-+X95J<@!3%5vQ!Q
z6bqb*$SSjm%qhnx3ei0ax_NukDA7UR<9Wb>KsNpLg1ulH@~@u$xzP#ZAJA^V`bipU
z&fGnQwEb04;u~I&g38Fq07}-hU$Xf;Qtr*oS%9>h*&0DBe+H-cZvTx<_Sk7VCl}Xu
zXvAcrXE51U8CmTLB*2DEk%PIftqq0;^22j=@6yvRRMR=_e7ft=MH^OOrj45r_f`qp
zO@s*;6`PI9TCnf9ZhdF@)V$R~lZ(JrxuJQu4KZHBg+@6*_^f_F!MNnh=Us-ZPY<^j
zcgv<`l$1)Pc)MsfoGVT+3Hx@{INAI1i_tD)*2X5yo-lb4<R`zpbiVZ4gvc)^U$UyV
z(&sDk>w>;$<s^)X8L^$gQu@oUbb6=wQ;b*}ZC(lT4WI2S@9d}Kyee8d;b;B^X-9{<
zPYh%jQx#o4uuOgZuYvLC1LX6sxZ(yfkTkKu=UFw=K|?dT%Yz0BJcFmRmbkOtB>pT#
zg&Th^h$y#c(mq{AANlFIdit!qNYeDaxf9i8H=oLdq<HI}-KRxSU3T?!lTGBO`uQEU
zUOHOHPipO0JHL*9oOvR2d?B=@>LJ~|U+dwC^^tlH+t+!<amig*VC>yxmdg=d%`a%Z
z`R(V4x+GwxvBaqP>0xs|A^CKR-_^g_ps;8X9b+?Vv|+VYOhqeA(JVp!NmuS4;?Fpn
zMrFDl7S+G(EF*m`?D1-x|89Gg*01@9qlb!HW%pkz@GD6$u?~6{WyHF(GTGEur}wXw
zxnj+FiG9!2=Prz6R^u*_`Zc}a2(R1PX0Sk?h!)ddzX>kYJ^CH^p+4fZX_MHM{F2Gp
z$<E2Kr=)cHSqBv_!4VcZ91X<{P?*`*H)dJ^#J`Ck((G>T4<ubZ=;#pKXB4KNCemy2
z$)c%WQutJ6yi|UOk4G@;nRtSJ`p^gcoPkNc?wqbVT8H-;@K=`&+PY+ZPvAs`6!}R`
z^s;YW0_O{N?jU3<2rG5U?uVb4a4CxTu*-W-CuK2f@(URE6E<>&fE<B@F%bG{`6=%D
zR-l&EiFJ9Cb5>x-cTbsGyC(C1hC^vtHSN#b2=YCtejG-S!*0NwhD>gt5uD*#DJv`8
z`;P>R(-rJpLNvc2S&4J;^Z%k=;Bi)ht+NXQ-$EtA<Y(Tcrq&_8!;=~%Y<;+6_;)yu
z#sIwM#*6IP@$N=z7a~%MnYxD{kFAET<WK3gf-5Ju!ug`bud`PkubXXvhfZi45c<YK
zNl}Vnt5DrwWmQ#b%R^J0;+=STsv1*mkAZUu^$b;Wm-^Kg58CtX?(!unMA+CFY96Bw
zHw3eb1zzaYc@72W5Yr=V=eF*w6sY(<I9+n;$_4@lUb`XpVm%d6JU3_c=;FZ*_AQrb
zLqNtb0@^e1{!sPvXiLnEZ=i;qOWd6Nt?`M^q5rrt^s{WJwE7qmb4!<H*o0fhKe{Ck
z6tCsfou<gSs6Y+VKl_%(SZG6cVG{S;W-#Y{y|-q7Mbi}OTE<>Coi9=1btUPn3|2mw
zAA=fK1d!N^qN2q(%Sg+}S^Se$E-HL-mqDEUB700w#e>D_++vS~$aeF_;_7_El39k_
zVb9h`a=*f1jGe2yiQdd?#;LN{m%IXCBwjxHk+=Z}6`A6pI1{9BrZNFTk~eR*0RHFF
zy(;ypdgYJqwsi6ZjEz|<WU^+a1YgWdNt{URlwl4`%D~-b-_|Spcp~wt%nz~S`pv_d
z)e3JQ@Pobz(+A|o<;U&V{ILq-N%cxoFVE?J?0?v7x)4d%TetUIP&3m4#Xc*(9RXeD
z=qzCuMM`dQgQcN(KTVP)UP8C*po3-`(iM1RGNkX<Se;JPY+VXug6{6$zhAvBeqjE?
zw`#)M2&uT2l#t)8<Ka~S9|`IGXUI}ZuFg)He~j)=W~BKN8fwJk7In~L*Ws}vM|XSc
zXz@@y3%Hzv%+3{s8wwZ75>A=$X9>?RoSv}Sd#)InupJo(F8fl<4P&6ASO9O=M&E<`
zg+?kc!Q}ws7|eH+`~ql?QJ97mYcO=9#Yp6Kq`dfy;^*KKO4=b8_2mLh+brwJ4^OIk
zMtv#~IDd>WJxSD;Eoj>K*lEong;=A>@mRxeM48`7XKP#!5X^rYPJLIMSE^-KGHz|x
zGs#iLx$<dc2{~&kxg(%t*t21oVJss{i-D&TSi)nk{{)Nh6>w~N1_l5tL!s;ZIZnF1
z_rL^%&ugvY9tYe}Bp_vyOVoY->=}hpm@PCalJ~$M62#49hLgnGR#GWaiU5Lq0uri?
zfX-6{Wj#G)+Ui<Wl|wvpwJ-^IKmfN;uX^>;>s9p%98q_fw_#x-NZe(RG3h;Q3cX|?
zg1;pr(`&tt>_0n$#T>;CFHW{}+cz&uPGuPU>MxgjEw;CCgOwmaEs?M(ruP8z37uc-
zoDV*C1Nych`P4c&iQw5cyQ8O1f~Q2n)QHpjpQd8+p%uySmS6*GjU;1BQdHM2^H@b|
zH}NY?3Fpd#=IXi-=4<9%Vqz5%;bOMoPcn#>eKb!KW%pw{YqiP<aoC}N<}wv@1JZA%
z&Mm_L>6U`@Xx(5yR(6CVVti)0-S{@Jeab>4h@cgr<7{R-eYBF~6ch#>DWMMHIs%ZK
zL|eS_{5qMh>~B=Dx3$c$X@@I!cNwO`0%U(g*OV$$9lChuC9RN164i!CcFnFJ*mGq_
z=w#e4QtV8DXm%9N>_0LP%Yg#goP@E-c3MGcegc$tX(Pf=y@ePxEK(JmYgTZ^I-PyE
zcfWKiceVG98)rbAwL}7|*yo4=$d*YHiwl`VpHeH>vDMJ#P$7npk%wgXy_(1BS0JC_
z$h<L^bv|h=zI_4lEyjp&>A=oe5{`mAgPEL4{8?Qv0(h;XPzUe}dJ#P(K}z#Gt#d%K
z_ltxHZ8>-J19n4vi-)*n*Xuhu&o+cJfLx(NnNf}_w9=can-O8pfLnY<91$WFJAjPO
zj>LU%W;@Qk*yGc#WSJJI&43sn&y})yp)9&&Edoy890AuJf<?6cMQy!dO9G>Z)ELs*
z_4N0Pq#>QouOfuGKku29J?Q|z+wr6d3%s%5ePJxxo#ju?>t~U(OZsV~yMmJi#BHuW
zH8v%m9D$fW_*v6saYOv4>`%NQ<K?_L<Aq1qx`v*dxId|&7BLbef8mIM04I~ib|i;X
z<BmcAi*)kV1Xy+lkd?3L%@a2aEZd2EVqyZ)zChF3=vgn$P2N^gVn1@^$m-VCM~cNi
zkd_QVi{tzN%Uk>LztQ>a4}e#MP;K~Y_5TTyaa`MN<}^yOhuG4>43*Ex9fd>q<Bh7o
z20yg-;f8p*T2+Cs-jEiw39C^F2Xbe^b3KbA8SvkU%dc?QJ1grf=%xgs&P+*}n>Vqh
zb#(b4)89fI)gJa7wD;KUP!t^Y)D{7DYdf=rg2dO?7q}5%BqkC%p0H;Yxz1*OJm!S6
zf{3j5>9JF>xJ3IF&avmCWT>2#KpJWxKLpjoj%l0^{yUHcSX8?-eGJ&m<exRy)?WiJ
z9FlJtOltOqM5oBX=U3B4kVx7k?Y~Ic9*Hk`Z)scLb(gcXW<IF0p=z0w`2?ZM;H7X)
zv_KM4fkwjA!}r63W&<DT$hJB#^c;1;(gr5p&=tij9taMgL}2;C;EOGRwfRw~9{H7i
z%=QB^I+OO_BRlW|dyvH=7lL(EA{{|GJ!A93W#YC>q~M;SsjMs8am1scszLu9Z_Hk2
z-03&)I_PIRFI%@E%=WazD}+oHMczqkd|b^g%iK>JQM_<jTJ0B^`aG!^ueB;qbm?{^
z-G<4Be620xJQ9ODVvw!o^KRog7u>b>=FaP?0vq4_5Mppr1Y$+Xr@Sy@<@)IiZC-20
zS6y8Wd@rTH<CpJ>OdM7#(Kt5$ov^D-#K-XP8wgVb{X{mKYy4ZZ`h4>TUPgx&I&Q&P
zCFjNe9P3_6d{-Bgz0W|uS(^wuDBVZ8L(Hw`%)e1tSc-RN7i6U*nkf5j2LeDI4@M;o
zyAq)fx{-(vE><7%xbP=~ygH26y0F(?+HR}i-(c35sF8vs`I(%O<O-yiI)fkS>ikib
zo@@P&JbCfp-J#ouh{%&DFGLXkuUuTVItUzJvsfmsUc~_(83M|yB+z$~9CH7lgO??w
zv#xVV10vn_KTZb@$OwCBeSN<W2J#(~8KqE?1OgZ!;kK*_)p1}P4<^*otbY~wU?$r8
zpjptXPn^9C8TkZGPR^@vPsk?3oNSB_4n9ij1f6A~qMXOa#(;8kDR2Yq?fq^=KC$wh
z1SqN_@c8#1YbiE9o`%Py$FqO36#|p%VMx_4ppF>TOPjvF$UPgX%j7X_pgqf!yq|$X
zxL#<`vLzg$f)W<hgRg2qPy5GxFi|JlEvAz5FD!HmOdlBmQA80qkd8lmDY6|-v#<6J
zOSTw&ALYgVe*)TU3o@JGC^=F|xSC8usU+6Y){2e?1&-}M0|c%Z^cyb_vtVv+US}%{
zog^x%tA99>ke98>ZPxgj8FEC<6AMg9FT|n=F<vL7QnC3UyxKA%bOX4KHc6_kKjQ%+
z=L<^nm;ZwtQh`QhT54(#tw5U+zAy7X3wGgJB>x3%Ad?BO5F$9l{xi-%`Ea`<1_abw
zRv&EvRx5e;h5?~Hv%>`D-{}4}Ae&2x*eu7p5uLpj+NVa?tznw&O+;KPxgpFRJb+I)
zDoE;X@b-fTG30_slcy~S1_x%(aYA(FgS=1wC6+yRA}McgB;SrikBt!#5vGu!I{F5(
z`NY7OUNkHb<r=8{VZANw=W<saw3*SEf~$FK(Db}U`5-h3IM?|hz6fj`C;Aq%2j5ik
zrmczt#DEwBqL65%HhQEn%*u*jbn#PDX50;5SA=_42IU-pS=<fe(n>PnMj(N`2V4}x
zrkk>Yp4G<9Lw2s9sFc-+5_{3uI4+7P6`F7Y>=yB68QluI;k%_vE)+gpI|;Cgy-0Qs
z)M_;~rM>!7DoG@ae{y@cmCBori|W1lka#SkD%3w@NQ(NVUgnHV>>JVK8thI4kqNES
z=PzGI@Az-zWu3&}MLlA?q|hUGZD<^|sI?p)ig#;{50?$dnRviSy><v*6iZbwbdX~k
zVLu5XAXLo|n#riFtW1GUdQu&m(g%MF8I&7HkkWX|!GvlXy>2Mm_ChiTTu&oQZ1K0y
zcn7dr=$h@{VjGzVo@+3>H(tULp@8@@5=09y$<)hBNO+M8LOC}-k(?&=e`gmBuO)PA
z;PIee?;{V^E}H}qX@Z6m$}-D`zK|SXnNcQ0C}7VF*uJsT4J0Zh;L%!HqAAfgo*~`@
z>;|-E$uxszuq05c0oHyC<D<_!((A)V#LoWzfK2S|w{da6@tF-b4eBiGeSQMe!n^Zo
zO7eg}OX003TPswSG5pv5ag88xfx>@+Kpi<GJ4h}B=DvCJ=I8LoB`)(_Cs0j}`+i{+
zS{O+q=@DKV6Z-wAoZZnwPxM$c1sG+a4ZIvQT|NmR{mv@EXl}Inn`}@feN0T`!dQzE
z9K?h$>6jm^7cksUZX+k>2ejM+mM~=*Vx!BTY5N8ZGdd7FWP5|g2|E5TgRA^GeR>ZB
zFXGs%!$)}6+GgMIUi+NbNcuJJl1)s$(Ac~f0HQJJNX3kEIdb=mR~P3-csA06J~C1a
z_Uwfix=bw{Vyr%@wU=Q#f&<J=qJ_zpd)SwR>?}uGJb7=dMur?QC_zhh-k2-v0<*nq
z@MA}yNbsuFDUu;1=UZrHTzWS#vEx~zR~+dN{3;H5i$d~I%}ayLfp^Kl!F~^#q$>e1
zaM>7@Xwb|S1(%@Qr_tEAI+3SOV4S93?Bl~quI}4xh7}Y*j2&uGzq4lrFCrO4wi)Ec
z7tQ{mxaQSyxnFPbSnBck7#w`>?vHz_@7A$SXw@3l$=8;-a+NrCktpQ1fAFwP_jxGQ
zKka)-W;IEHcPGCwW&O>a5p!}iHp~uLoz&d!N5Okn4`eON$ed2pH=U@gz+%_z%vB!3
zun?6sZJosoqQ4Rb_Chdpf>>ldpSD6fo59~K1#4&A{RzSFkwRxLuayZ^$0JYoU9q4q
zNtS72Ry7^%(70T+;Zg011;7!I%#@yUV0Km*V;va_{DqHgmX|xn5%7bG7;7{;V5AEJ
z$4zY?Q9M2WYoGOs)$rU00OrjD_4Pi19M4dPNU$@K13d5Jw258N6O)tI6cw9RmK9M^
zFbdfHI5Ar~N3;7L7IPo}9EC~O+&Q78)(uOF_s6tksEheurdYZA4=W6Z<uvg(?KK~x
zyg+=J47bo1weWc1d(=|jjNa?Bt24quh!R+6rF5o@U?%Vt#d7>Yz5%&m;OV%x3?DL;
zxYr~W?EAXnN@7-iu>+zrRUYcDHPnoIi&(Zkljt)mE4z=TMYw;*!`O4gN0IEt;hZ=b
z*eTc!RJzZOS(5D5l}9vyjHeA5#j2CWl_HNAbdMHTdBmGN@Q54Qv24Ugp%Hn02XqBT
z9`O@-#CUCY%}UtgLIqh*f3oql@nLTw#=-Pl&C0&S?;sy}XX+v-!+?5u7{2yJODzkG
z1R~}p5tjv2%gD+j^molPDJ4<-oL@>hK^h#VaWG2Upf)ycfO*ZJyMu|(?`e=GL$)#K
z&|!Jc|Dv*fggb}CI8GJ}$iFLJAhuxVJrEkcnwG|YL%z#$N_SO9jo*&^UzG~o74e?(
zZequ|cavVvj%t;qH3s{L`s~jD1rGi>#GvlFc_&v!-_DGwn10c2o*%yUhz7{-KCkcg
z`LIflW`l)q5n6#lkb!<{cYpDFYw_62Lr<SA_5bMaq@(2O7}IL0!R(C#i++kKcI7fV
za1F$h86C$coG-0S7>>k<pCE@@Kl#^c6p3LX$dOoC4$mJb!NpQvf{ScQrtS8+2%Aw;
zw8Ca|j}e3Vhd+%Tk^5of@ozJIc0}&|A8&6N73CYfjRJxUJ#-2)gwml1g5)s55YpY<
z-6;(NC>;VyNjFHRgi_L-3JTI7DSe*N-}|ohp0oaEolocMtcQo0d*8dReeJ#d{-gO+
z|9vC2Vpj*+{Bz)B02(s@G4Sz?*#Di&XzYsm@lOHwK5`n*q33{tETrbImu>D%HUk41
z8Pi6&`%rJf)PfWru!M4a$@+J}z^Ev{OH6$C!9TJ5AN5wSGU@~X%bY{0kh)8Oj_e{m
z1*Yv=AL6L}Jxq|fHtKCp{NI-Ut3U>i0ZBV(xMV}(@6YZA#*#69waPX_mEc^BAjJ&2
zq(S{Rc1|L3@o2p{+~`P2ynhB0AguyoNf%e0`G<r{JOl1**bfo6<iGz23Uv1nAK?Y{
z{C$!Be=qut=k$&!4y_l$`~Sm>g2aQBI(MmAn|3R^gSYI{fm_366@By1J{qIu8+{4t
z%lrFngDFAVkuxYSx`pYBjU$1dMUMdvrBL{L;^u~bk1R01{NEl%^uT|qIVkW~y6S(Y
zifRie7Yo=GLCHjd=070}NBvk|{F|RPiZ&4&UISy~MRz$cArTfPK(9OSU<7al3?EBH
z_Wfs;n#_Q#-7guf_d&KRg~X?9iO1s{IPLOA*|)Q4x~xh7QVBo8JIOk5dXbC*bRI(h
zY28DX|Fdw_|6NmKp7ip$8dUbr-;W8A{_vj(HzNma`wi64Qx5%S=XC%3U)G}{Lr`AG
z*rVT-ip~D}$@-oCD!xBlY-}#&GI+95VjCy|=#y3qX*nJ#9r0f)Yg45hl}uXL?s1ls
zSEg9YrmJrrFZje1G_}Ewju`LRS)#s8e==|&3bM8IfA2j67xPrg4&d9g>DF3h|Mg)A
z(jclgG(&$4-fIoi0r&apbN)knKUrhd-W;f4fIo;Hb5iOCXL&ce>pP`Zbv)y?ilv|G
zGjly%N}E_--tQ(_6ZS*M89ipZxL8;Wji9$TG|EaW5Dpm=gVt$*2;e{0WmWwm`zKc*
z(a}TswqNYio4?bif7}#H_d5txeHsu!mZlLllW`B|3H%C}k^Xlqc7K5~P?m(Uc-_i>
z1*6~!qdG;v57UZ>oUv8|!VjLbHU>aH={NrXlrQWkRWK9fP6ggGKvpe~6V^b=qWYX~
z>=`r3cmwo2TxW-6i6-`s>aKYfTZ3rZfAP+r<3W8)N8%>mRe7PSc^TKWPxL}J1Ly>j
z`bpL%!DJNVHr~0~ey*%DpQM6!x}bSo_ur4vGn60IW@>uM3J&>gV}OOVdWZ(#u*g9~
z(;?ieTyJfeFRIU!gpD;(C*~jt>s*{MhTdPnlB-Qij-yO%=on?tmeK*)JU`Ck|9b^J
zaRATY`JU%&CL4v}{5)WF;(UR&CQbCu+$g*T{Qe_UZ$x|<#sFM_MD!ACK8tW`%W<5(
zN3U+UNdD5-Yyo7Bjubg)t?{|E(4G~@H_DlACf*}hijW`W;Y_o3Ng+$!6xA(okXm18
zQ_qhfe%(K9_mDQ0WAToD_+Pav;_gjIYut=lPrA}8HU|5v!1b?1k@-IsEP!FFNqLXU
z;-d?4a+Eok%EB0RRY?hD<xh30C5zf|C|#?W+%Lp3tpxE9n{@<HCMnsX^@ECa7zz&)
z4Iz1rv*C<u%kL-Vr<qco{2IJ2AR1sY@>AL1GRPe|iR4(Kxj;1wFKGgP&B4d}uX;m<
zP+`lE5~NkU{L_%1F!n~Eo5R*8cWx!%eyo2SszKR=E^;8Ya2_S_i;w_gUGg7}EnlR#
zHyXri|FYPMs<(BEJ3ITn5Xh*itILh`qF~{<cR~aD3xjwlPhwToBbIs6G`Lga2ICsd
z+s$P2TD?VIesFHp>B$$CPKi!;TCQoof@Jlt3D)!e1PBF<``v)vP`LVJgCu?)&9BeF
zIE=}so6Q&oR<dujV;Q`a7<GL#6w(=4)^%OTr7I#C1>M6_KIU@QdAfR4g?t=PA2UII
zcRs!}@>GdXXYHN<Q#keyHOdfZ&Xv|jBKJoWn`iuA`qt;^U4Q>^)LV7k!ujeuU&VDD
z#yZOT<fGU;_mOFTy+f^T5K+a)%afX85I*2GsB(<|S{`EzARZD5p0mdd=A_u%>R{h{
z$sjAUs3U8u4dv<7j;{X|!MN89t;&ISVwOqi{?y@Fz1XkBK?Z-Q7l6!W{fziLCctt7
zt00I=sH100Y`^?GM;|~x+ls|_Qqw4JTI0!vq_An7QedlW)ANI77ggDe0wuDyXn-Fi
z4f^^J{1y?sqs84H>2w2MS-jTL{jGhND_2@tR$ml}LFriy<<Q@h^kUx%AuOp5J-hwx
zDAi4Lj}Hkwb`(nueta2%2h$E#2bmgkvIfu(%!cJea0xFw&#yRbad-C^8mzj>5V<Jp
zgu3k;dLG;QpwNOP!0fKwC(Qb5ynen#W6=FIhqLYsLv<k36=ea|1YnM81f3@)4UT>x
z?#B%_&wHsDcoHb@q7p@>F*2Du?$LCF$ZeR{uKFI3;lVoP`QCpv7EmE%I73}mpD*=+
z(}jy@q+Mo`pjIcEU6pQY;@PdS2@+l_^AYUZxcbDsg@<~Qr_a;QXO9oIMicgy<+Fyo
z2jc9aWiX`N+3e9rEg%;^%X)rB7p#XV=5s(W|64GSn~QQ(uKDbba*0=2aUzWfVmqFU
zJJ$*wq-C?UCN+V#Uq40jw95FNUel50K(k(H`4DVVnX;k$^n|w>msX&MVk&bu=7h(3
z$Mv{E3smv!xPEO4!{EUTQ?JHAOe#Q5%DVg#SS8!z>>jfn{|C@3FCfxfi)~{47us83
z_*=jKn}8dmsFzHic>k^_H`YhpoyxXyy5Mqhge_X`@q&s?tFNwZrGKSK*xRq#P0~F?
zDZ=V6)Duh2=o~;3x!mqe?hiJ)7o5wjoLXBS(%XTzCp{q!q=S>yp$+_7{!UqVV%lbL
zSP+GQg<O&aT7X0hu%%qy&p@B>V~)=*=I#KD^&hJG0y6A{V(b^=8RhjBeWCxmvIeP;
zfb|(%8t;4?9O=A?BjM^#J1Utbna*V?Z;T9+U(%@}GEC$tNl6H&b?j)y9b|6_PP1nu
zPpKCEYADZT<#rWw$}`*9aqAq;Q5Jr`o2bF`Ji8-r(ud;f7!XD|C2gec)Lsv~IpVnc
zlP!Dty7{JT4P|$zP-IStF3i6+nGhGS$%I+zglx$`lmhcv5VA%^))T0s+A0cqAOSJP
z2$)z5P|O%PNR8<WgwA%fKtzAP{i@TVXt~@jjT=3<G)A_7NV5GkPTyug1ioB?foD?9
z9AK3X`cIF)*VF2NyTe&doKMGZCS@ptoc9#zrC?Iv0B+3OxCK&po?zj*qU=eX9q5A^
zF0L=XwF;}nG!a5J{EV<tRMA-qGKos2xCSr5Z;gYswIX*f7w;ffjkkfSngu-u)_(xB
zLo@gERJT#e@LWoh=u}INJIeTK%W|cq=N@@xd!@&F4bL0F%sL&<kFNVFJ>->&bgCom
z@s|mdzf-G~!|=qdO&ST(n5R}CEiHh|7(Y_1Jo@(MeIT3LzK)o?OCib_0pa<J{}rAC
zH*3f$%?uB<=AQSxLo8~=0w@-6T%m5<bEKFL4RUy(%M}drL+dval|~|>$6Jy@cb|pW
zxHytq>9x7MxcoHpSQhTV>$GKfd7Ss21}qqoM$OgTCoa$JTX0duURww{ku6nob|9;L
zbe4U3`8{QDlCr(9P<<z%URKA5c;PB^_DOR%r0x+ii%_<Av7oW&<&c-`t5;RYn%oJ|
z8ISnARYbPjcO@Kg{^GcVn^)gT>E4c{Mv1(neKYnmgDdjWD@I;l^qq^<iq2~_p|)cU
zHtwqUL11#GAVrcPfjBe&_4kO5u|dlmJjTW38-}FIZ(qvF+NKQe44aHYH1*FmC;ThB
zKfZ9hHX44jm#o`AxKPpg`b~rh?KY9v+>_Q*Y{*hw#q73>0e>EP)V_CIosAP%t#C9o
z@XzR-!UiW4(?k(q9ee_^v#yl?ug9vEQ^oVpU{-AEdyk5PUrEBqnc{`>V%+-IUz7!w
z(#>C+{c4tu|5VA^Oxs6Mq{+e~yZR@=VP3}_ZQH(PV-2)C3%ur3_)ZZVwiS|<6_4uk
zXAAQ!Dr))`0@^kh9e5_d@QH}tu`G!DpErgNaGB;O3yfAAQsCtVzZ&ID_@UvS>s6n+
zz4=M0__87a8xv5VuBTwzU{Z$tRIS_L1Nk~ub~QV@dH}gU41Ks&2XpB$vQ`3nwhHC&
zYNHp}=0Pn~@tT}rfjM0jJum`do=Ge8$XmG4-3N{znpRyn=U*3JD+1hts)&<9hb*mJ
zT^+4Q+i)eNDtDV8v$H(E_1U{~2D#y-7Y&SmOGKg)&IJEFLLDl2?3fs5e(Bq|cv8Ei
z`oRl$;(rw#|0RFdsL0>-Iu?aGd>Y0G2yoeIy6kY*e-6cBiK&Z>v~BjiMYetWljeHa
zt3e=<EVuWr#Px3B<zt7L01~cDcC2ugOBT(&i!R-G{Y*u6Oq1W(f+7*3+o|Q~eG6_&
z{)@GlLgtj5*T#Z&;zu3&JEF7Mn(B)siNc)H6A|6jkgzk%aaz0S22KLWO?OF?IFp+p
z+5a^QfN)5KMa{BuvXA;+%;R7H?En(Hi`~fUxy+IGiGn~+QU6xl`OY)hb=1haC@(L&
z_3^SE!_6^D-I9~@30{7*aq-bV5%=jFzfTR0OnW(Qd{1ut`eum5fTlasYSE=&`AA^e
z$fZTLs&;bVHhN-PtV(VQM^BYwoSwjGuH)PBVbamgw~JiQVE)gBDEJpjnS+gtH$tOB
z)wSY(pwgVn|40q*fy8KbNRZyX|M!!wRVc3j;9AU%&20Xr9pgBt9Dg%5q5z-(#A3P6
z#l&v3Pt07G{G=RC%R6eO5!f6@>y<fL*|?JzyE`dW*Q6Yn$}nv{sOdAmt$mcA@7i$I
zp<L4Lwo^@cv7$`nGh@-T(=Vy#tiK8Urt7Wm7mFvbIV7wdVfSlbGAPW>$o1Gh?kaNh
za3Qd*YGT{|0eufab}mkgd7jJxMbPHVDz7{1Ywb+Gx?Db7_h+xI0egyBW7tC*2HF2Z
zV;ubMFXI8Ael^<(Fkzo;tu+2z?!0lc>G0MRZZ&f(j-sAycQQNGJs=X^4aXwAyhj*i
zxYN<~g7p4Ivz6{v)Ampz$oC^Q&(<$2YW;$Z!F<DygJ0Q8r$ji)@3stPtH@0sn~Xa6
z7fty$ie;WPIHXwK)j5nhHoUBQ>`?=1Ov52?`AG>kpT-L`dbI~o1&J$ynxR1ws0E^7
zSJ!SQsD!l=?_Va@{A&Hp!SD9AB0J-I0Ic`;{|4(hW1;feCevMN3?b&6JwAhq$o#!+
zbOLeC<h+S_AifL3qps7xR6pyuG+N*6ic!^9WhK`Lf9z-ShSR8Bn%$04UgfuX6nv<j
zt5A9IE#rdb2cRLD&zlVtu%G3<CoprHlyOAkQ9kg9Jkj~s;1T$uvc2!hL=s1@XoXYT
zgecEJ#u4%Q?a3yXD#|<Z%yK1nvVvxAGr2n?KY}58*_kT*^YPN-YY9mC|0>BCE-*2i
z|0ePr+`0R0v`r;zF!A6Z#g41OwY^NfFgb1D9W_Nr|71<FJqRCI*A;xPRnNMs08e!_
zEVI!#H~bd&YazCy)I*0X(fZk|Q2dz>VVP+Qv7++ZB8wdyRXo1ApmX)2Wql{=_a~)d
z2Q`7(_+^3)HwD0~b-iy_M78GY-;OCZ0GurhNJZe*N}|}PI5P}}f=!Okty#G{U7q(x
zFz7$fKHoS{q<uTGjsrBb`FjeX1|UM3FeC$bsP*~I@Pn6#ksj~j?I=BM4_CRPG_|cE
zMv*B<d6AjicG$c48>id%bQj;{hxvcX>*xeGH2)kD<v2(PClbj+N7}M+R!*2a8a!Dq
z-XK4TDW>op`woLMFgbeT%L{B$>M_lnhn`*LI0za(PaKhd`Ag@3h+85z7@NzArLDC=
zXv?>JePDm4*4(JN9t^LFVDSB6K;yqT(Wm)frCsfk#6VSftn5mSUE|5jX2<ZjMH3XP
z2q^2S$U&~?Hiwm1+LyZ@&oee!^T{=uHBI@1T(;#eN(+X8F%5pc^>ghx)e=c=!j*~P
zq!E~;`qq+mEb<GdT55u3x<Os+ynef#1d2Xxm$No6><wnn!z#u@2p2BG@NRX`x=+bW
zEZiCNJHgzXt9wa}_O=|lU+~1e<1Tb{7H(6>)`!~T$|rMqZ!5@BG)@i(;{YTN27EE7
z$QIpWz}|ov{{wU2l&jC^*a6&Xis5EcCRFLaZdynW>h#lBd(1t6y#z@TwZBUF-!GQB
zeNYwfNVlYnuH%xfvkG^N@-j%P+$mZ=+|M59yHZ4GX{pNbqp6U+>7QD7taJO5>9NO#
z{=naCIs85(nk7$E63!S-W63&(7Iu0+S5(THs@pfLnx3(I_zMOFH?GMy(`lc8vy7Lm
znOY+l#1vu9x!AOKup#Xa33!V63&_Ow-&4v|!gLX57ztCnaK>Cwm^Fy8ROog0gj`9v
zPT7^<(|SjGFenWOnVjDrC^I;~{5<~5ci!C-3fK%_V`rO<=FBy?_xb0^g}m$0wMEnx
zFXhDraY+e#iq2#q!XnC(uQVl^Al$^{-g$9|=JJV_j8qZ9to;6bvKKAB)ZB3wA`DMr
zF2f#czsonX+QE9POQ2}6E(>~jkBZ`z^W?q@FV!l+q{+@0S8Mbb{fj=o3C`SyBzSd+
zoID%}X}3k<$ua`3mOW8jbz$m&QXrH>B2hKWF!(<#5j24HOfgax%@mvp0Fzk%;LUUZ
z$MYNb%D`p^M+-&|?s%);`ls-W?3F<@dz$Pkm*$28>jR?8&r@L$IHvEl3R-Vo(=9i?
zjNN_C{a_Er!EGREZNmQnA(N5i^3#|50VhzliYcBc3bGwus?RjuNL$*ZGt7i-0!F1C
zZ~{U-(}^+BNmOX_sIn1z=RtQkJtvuosI)aR>{l~Ip}G>7BDOk<SwA$cUc`o)5;-Qo
zd=S&pl087bSHbu&D$8+eXYUMyc!3FSRIBG#)SuLyXIoP2qk2rGaW8Th6T<{WM@xM&
z>@rvqcQ&9@e~w+I&AADV(-V|-X)cvArhD!utJ~`LPF0;F75BktiKSe)x<;~`EdMsU
zfK~~<OWkhB#_x!)zaL^x`cjyWu@A66lo#9_W(2P!i~cT5O7%u8m%rPf*Z0X3ucJiX
z(nCmSmZ}w`VMa>Yi0+C-y)=#NO5EXDGld6MKC%f*9tWXE-)?^!*{<u)bh6PCOF+y~
zsflN|kUq);ng549_H*~*GoVmn<^KUcy~Jv%3}klD5*st&NtLUslcx16w_wS0cr4ro
zFIV#mvQE|R(-FE|eeUYsc^@L2II&DVYr>2BR3BgxgO5|cj_2~GZc{pP@R#L?ifxL1
z^9>jq3l(&TQz77+bEXph=Ic7fQ`uq&<zF&30aamxG7nBM6K2!c&DtfbY2#+y;I>Ho
z+03wdES=1xfGEwyXkWiNY-CddxeXZRSBbC%Gp3J8z#nserU^l&j-*EG(lQ$O6@HJ9
zK%(I7P4mbL<)o;vw%cEKFtKlUu`@ha!t|<fz5Lf>A5x^Ov=lo2Y?tyk+BHgN?0*b`
z=iUcJdr-ZuU4xadbIeG<qsS=9<xGM-4DwTAheS7t{1jMdF0BZJTZKZE>T}3XYr(0m
z)psXG?4VT`iSQ`xnQ3)eq?kONE)}E32%ea?DEy=l26lYVV7kb%-0WWg;(GJeDXO;{
z#>T;u6nJ=br<+>k<Jf=88-<4Pf3%*jlKum@yS=z9kB|VsZA%hFRcHLKl5_mmf?Y6K
zya54;Wz-+?X3tfEJ?dQD=u!&XOr_k0N$uhstxHvOWR~{F2nhFJ)V<dAIi9#JFjc^W
zXN7!ZG7_QlLcIs;LRHrga-7CJbwwh09gam?{s?>L0;&{Bn7ED3I2zGY?X&+hz#tSn
z!x84^7<Z<j7f_cIrr6Yn^s7AP1g-AtN_WofU=Ztm*{iDO(LsZq3#E^(02ec43=N*0
zxj*xz(D6YQ6Jx>jxxCG^R7+*%V!1*nEijkC|FYn`z{SsF-e8_G2a3jb?PK8>i^Fg9
zjEm>)_W`1OFXP18!Z<gw^6i^9`H~pJ1o|B->{`0d3k>{%orN$eB<%lyT4nH#>M4;J
zY+N%gIVXlRT*=ldQ^TWPB_d_-E~SX+--$AmE0jlK`&H6TWS$-xCm9}gy=-#u{S7+s
zNL!i2%ucD#<w<OhQs;%`YyEn}KW4JCSz{d5zE58f2Rhh*(NF}9$<<av7*h&ZT<=JY
zlD_>36`zdO#tuU9Lvw-5i?~H?1RVv==aT%B7R-a%@)|&z@e}_CX+Z)+CtQDXZEe{m
z=CKK%yvRMxa0tfOdnvhSppS&Cu(kiDi1HE~7zjNW7>H9sXcaYZ)Sn}~tYC73M+I%F
zi%5P<6;+Cq@F9w!ui;+JJl|R%p_QX}&#e!;!WjT_CZ)gWhWF&B-k4+$0RXUP&h+`e
zFESdPK3ZuXU3hzWbShuDkYy%{*j&bYxw&(xG)cZ9>^|sQfp~aYX@WFotZWyz2E!OC
z1d-R*hHPVJ<)sVts@ftl@@`T<apNxuq5GRpp?WGF9l(NYyU4!P2D&Jh$0!{h0HAFJ
zd64w|Jl)^!y{0rFoAGvgd;|#VCJ85E0zvDDPpA3Dl1LaA<+OYDDZWa1Fw&F&HYaN9
zML<qwi$y+;nKdgFrs1rKGhcC6Bc5fvik;~sUXBeq@CoE0G~@*u>?nc`eP1CSa?<BY
zV($@jV-VqFI<<>yAAnmh1V^*Zs}yGKaU?}C*~V_zdAJiZ=G}gFUfl*JWcb9`{{V93
z{}%)3h@yJZ#5x6DE%tCrqnT<`SpF-UBmP#B+`Y?zs(l2g_qh_{_`*P#zgMJv)HxW_
z!Ndg`B1S;0O@tejMHpZ|3GRJLAhDY=nH`YZW5iq+AbY@t6XkJ=uyFu(Oj9(i@(yxD
zTkMPCnSZ&ySlE&ZZn&6(kQ?$4Ey(={XDIi=es9+W;u*`y#iO)848f;J2C$V`(y$RX
zDdT)Y`HG&D8lH9CKaxGfGk8rElfI#c9n5y3+TKuPn5ZogIADPTo^bzZ9?N7wp5^-n
zlN7>nV-lb=`>!;^l&xntKpYHL()YX>?o4BPZj^LZ>A1DMpSt7l0EnGEpsk74Q&>!#
zXyf!dDYX;0%_}S1?-!)PZi&{|iOUe>c@raK`u({QJp>dH)!(J+lsSm@SQtyCUXpE_
z<!VY`=?>@|fE|V8p_{`R?uG&8)9=!J5f)7Pj$Igp0w#h1CqNcEp#Deld17^R)2OdM
z0*iqY4d@-M)B^FKtr{v-^fegebiH9DuveewrMg?p-sYtm^;`Uo3bKJ!1@K};L2MM2
zF--Blcw)KW?fAVB6t5#x63vv~mJ`(&1mV?0RdwlhTxx*Q-V*Cr+UwR_9`_~C08d8A
zp44YuiA5uQ?N1R2)mfzc{5ephd99kSX~oe6&-q|D&xou@>J)T3iKMl>r_5+_mg6L*
z=qXJI>p0Kgc6(c`wk3B4PrcW$SG$n+p70Dw{u_yfte+tSH0qlNt6d>@XDqr7!4o&t
z-$PHA_OKuk5zx!XfogiF{sFP($ih2*kyR`xC)i|XJa8t}+$eb(B4bqb3SB#nCAVGj
zr_BL{MG6ZESF6lmsn)iqDuJ5d5x~x+1t=t_(wg8q#jKxs5>|E}uXn!%$Z-4LM!CCt
z%9jB^^LY~?M?#gTfc62Xorc-k)?xPB6_A>J0rFWU?qP=tnq=$QEpE!kz&9zEtI3Mu
zoQSVl#lRCH+Z5(RQ^}V^GVT%NA=F4HURQI+;JORvp=08$&AU~6UaFPyi*(j_c^9Yd
z-1QziGi^}n<Q&t4T)W#hqPq1AcYKH51K55dyqrlx*b~t|R@73}5GU|jCRkl7bs!_{
zm0H%7OefF9<vUbN2+YHTH;o9&{FUL$|75tB@^=2mFiM6W{%0A2cb+|TNISP_oS&?3
zFI31hsvDN>L6;?v06;clDVdYgEieg9d_O6Hu)9H;+10t+@n;ThG~!t___e8iOO=PL
zKCST)2VQ}K6xd>2MUYI|#wX#c{`YW*J?l|NK4F=OXwXh4QtTl%41ZxHpQp)_(aza*
zPjTjz`6LAr5l&m)2yzH@?J?T)-#J}8g_u+*+_Pvi4#Q%zH=EIGIyE<0Y%r6v1;ZNc
zKNl3&sh8T$AWR09XidB$KJorX3O7+?|L7|JeS$K3fFtmz6R~(ov9-IMNU?X5+s?58
zBbqUjdSO$e_$YtNH*-qyJ=D$4N;dP1Z2Uo-eA*fPc;%439pIPze0}L+ElBmzy4mR}
zv^YT~P~=*1>_t8l8J%dlC!438En~pi9YUd*KHr%u$n%Z&&!qgOj_RnK&I^l4O&gs9
zLILB*5f4dhJc&(_3THoe|3`SR6YCtN!t*B2o~g1p3S{+O%c^jlO!VLcN%MKa^ijpZ
zZF;h%B6SNb(1R-hLd8_ynca{mXaNae2Dzt|YJTRkCCmF?%m1snu6^vy{Z{gqUS8B^
zxBfqsT_uA%@*9rzz12v56TZ2ZY}Xn~pkb1ZPQb?Ow`7p7Wwi<3^1&H?a3X7Emqd5>
z{ntXn6u0QY2XC#S)b{*6-U@?>5{DOj4%q`dvpm@&TuBp0um>ber4BqSs!yyM2w#X9
zMP{*1H9XqWfi2p$9kkl|#l5uokSM^>yl3|@q2Yng>izR+z1i6OD%;E?(MH~|28rg!
zD~Hs=RZ5Yw&Q&{<j(Z+>a@GeVjy|HScC_0c_ZBEEuIgUO7kN}BYb7Hjf8&?DtC5`T
zOEV{bz3A|tmNp7Cw<XhJWbZ9<FWwz@CTbEqtMl@ZlW)~jT+Z;Hbe7~N$4A<Xt!9iE
z`HTiU_Vay%C!w8w=J@j1<^{zpZg<3p^>i+u?(^pb94i&U_vFWQK3lX4Z;Bcf)y3BE
z!gKNHt;4m{Sqm0=;5Ic6(PHvSvY>U3aJWcol*6uyMjCQ7751}5w>wyN$2F7}CPT$^
zdB`a|k$q2p<}AjZpU81~G_G)#U$FpUw;cs*PQSoA&d=v%w^+DQO`x|biQu!`p;Ev5
zgB{4CW;HzYCTU0o5)|YFWY--f{{~LPhoj0u;g8-JD00N_F+3{}{bT}6nWMTNt^?c&
zpf#QQliz^LBg=ar1z;HARS^*F1Po)q>qQ>|EA7uxCPl8+N_KvCg%HhDG*}RoFF#`A
z0xE$eQk}_f8%RI9|2Y|<cp&_vwqa<_&Edn=gmM@`y`eVsG#Fk&_=I?RmACGtv|mVZ
zmXMkymoBr41Ff7k5vi`BU@9)VHeT$j-x}G{`WP@H*Dh?lC*G5eFkE+|^77#+iLjOB
zcq(o&lVdJclU1bua}tAgt%g8W6g1Rha$@bL9Y?sFRV4XFuB13XF0TO3-NzAV+Cg<#
zZ1|&vI4!;Q{~fWOa#MAu{i@@l6Cp2OMtiyD8#&t=`XI38Y(`l}m9c{6HS(O<qUT4P
zyvB?0!i#c0NX4f*)t%_i`BIU+NSjeyoIQd5ZV*NEX0(UApH<q*^L(|UA1*I(&LXMw
zJ(5UfqB)EXG?mCVd8sOYfzGWZL4fiWSZKTzR7~P3D05+J4~w90Qw}{l14yg{&$J7y
z(Q&kdb{;phaXI9I%2o!SYG{}CxXj5pc*ipCrQ|6$YN>0ps+F<-WVngxjQ>nj)i4Z<
z@e2l{7`EdB8_GacCK!yWT!EB)L4+4Tqvt)Di{bi${|BE5sEl@r3If<*I=Fg;A!D?Y
z8$c(muM~sv@U_vpXw;ARla2R;FD_`HV`nt80Q83xBaqe?b5k98AYR&oK%Q~ar>zVL
zm;1)NqSmmQqqH|$csRAP%;fN%Z-67Zzpj<tT+ShiY>Uz?rd|-ay|DGzY?YC%s&ons
z-e~7GQL#Nt<FhNii0-uD>%95Vli6<`>w*0@`@p)_9UJsqn7J(W4=M$L%rROI4YnB8
zX4P^a{B0rrgetKFDrWzdXlE}Ewup=#q(Dq7>|rsg<_|eb8G8elx~G+wGWZi{_fJ_M
z6T{x0bbTj>q@BI@m0poeg-7Mw)hpEOCoA~|ROFOt{ccJk&~O#nOxZGUg?u@Q{6do=
z_dt=9sWmVtRIeHghxzGN2hOO461*8Nk&JR|*E_2E*ed@^XWo!fzuL8dyKI8w%$ht-
zaWSxR&6PZ9PqmcsNxS-b>OnWjg`qdBhzm|U?w9-Uit~Cb@UC<#I)ZP({ME~pMa`l@
zutU87e<YV$e&5sjJcW+i)<8}o@ngGSA@N;cc^*LcKu1QoSpFm5B{6-9oJsmIqDkCe
z2Yjv&Q!9po*3rcQ?%~M?I5lRi7G%anp)xB#rsa8^m9xX2sHPP%ebU!<=>wB1?GDde
zX6+i~$u=of>jQp$9gkaI(4s8R>J(WVr%&r1qEQ~>8Epwq{-CuO%ZcgI{y~26ZQV;m
zDCy)cEyUguE*tk`R`XMk3SYgP?FLVL$rDTK);AHXzCXD2S2az)h1F*^VCjH*fI{^L
zJmJmQrhuB8dK?Z*qrCdeaDh55*@FiA(i}10RgkRjp2B`iU5laL?#HnR!q9|lBglG+
zhA{q@+59H|sEXG>5{WW9sp07$Oc~>$y9-gFmU9QnS4}H3xjn|#P6RZj)p8$d%eC_^
z@$OWIJkkZtQp*E=nv@Ca2dst@pFAtasDXqL@Z=8ZXvv6{<UZPM#-h38ASuh;Z9ZN2
z?i(|PJ4SCnU1ojaSn`}!xF>|v^WzOd!_CkMd{bZKI1{a1V0pLns>!2idswvI5NfYe
z_KrtTa45wt&0^(*oxoNb(!;LGgQij}3eyJXwX`V!5dB?q`N9dU<Ki`-c!ww&-)Qp&
z0;Pq#C@rKK74CZ%1AsKHzsp?}P#*RWMO(dg>!oMpwMBohlDA&AH?iUm6JBVk6P5N0
zs?MTUZ5M6gdAm)CIIh3x&8*U!h)5Zkp}06olA4$v-->8M+Km#u&~gB|>&@&;F9rl_
zF8Z1-P?$+o89D4F+bz(-U%ZU^YN!n?ZcCF>?|iFksPl00K$lg`YGfil{8d+jU|~;o
zYbq<xiLry^%!JvV<i3PjFvxF17|jc-ZC3wTH;0vjlz_#a;!3iXVrGuM6N&6{ga81Q
z-R!u1e)>*@yMR0<-}em9mlMlT=M}^mMd{3Z;T;Qf6TCVDLJPVp=f*R%@zsb=*0Wi}
z<=CkHtWr67eemk`seq69{Nv`k{m+*oxf&4!TqY?oid&(x@}XYF+`Y!ZAlfWg<Y$EK
zWtGhAuWqpLC=3Tcz!@)#MMbrB@I;%05n3CJcq=XCuQlv%$dg4|OwU|PCxD7i;k3cN
z2giYibAy{eRkef^omS@hpLw;%ezpa8#&upcET!wXc#I^|t2}v^&kEYqv+kT;Y0cc-
z1g`C&0Ue7FeiV-8Rw|^7!qJieclcm%azyf14)D|HL`vvTLuBKz0CoEslGMx1$SW5N
z2Q~-_-;@#tx=f#*EHijlpE1~-56m{CAR`#ctuT4!jEy4pk~oZBaZ@S<?k@zj2-h|4
z$p@%TeAtuL6)*+LS!t>je0>pv2y3P90&w5VGfWepr@gX1reUNXs0V&+FO%!J|5;U6
zgI&$mHsA9W##YHXZBZu}y+VJ!J}+V??#e;y8b3q-Q@2z<L(-@^g54=r&<4vstATi4
z+)hePR5w#a^`P<>wnJ;JC+m(u_o;vGl_8ibF;SJk`s+$gyTp>H`3D8Y|2^~)<5Bz+
zq<cgB#%TRmN}O`%rYqvp=0r4WZs&=EHgYi0)MnP*P{}FVUcX(gP;q>fsjk)~7n=al
z6b)x6S9OPis>Eu1dv7NhR>JUv0455*Qc;|MeFRXb?*?o7*i4MTh%48|F9-FeG;A6Y
z)z|r(6qjGi(=Kc~_!{dqm`OR_bm2cw-I&pwKON_>h~AlI{6=tULavvq**o5iF?+9<
ztU|l<jOZ5I=S(ors$cglfG+c*6s|{Sg9@c^hbV>f9u<|z(nBfSj=w8EO5qwn0J~jp
zgzPHn(|a84E4jY<dlN1e+5AQ}u6w-qOt2m7TqbFPst=_CtGjf~)(qY+T=huWIN7+g
z2YVUGBTihi37<HMzOdHea%y*N-KQ?sa>k>!2IXlTEHCpp#B5I)_ARbYoGM0XlJ&p)
ztY$va#-?hh!MLtgYO(On=W#)UCZ!U9n-{*3oAERUtYQNrp3vOzl}!a=M$8=jepO9>
zM@N}o$<+Zt@c6e5b1ZvZqiNZl@iwK-@|{ye<*`RYgX@+s=cn9uRdo#;@DKWujAqHj
zjw25pM<5pl*gYtgAea>$PvZKg(VZF(TJCD3=3YcG2fbJ4HQv(_EnTvdve`w8m0h9Q
zSL;$U)bWdfltE*-UqxHE-?Z`POcUMw-~!V8%I-0ia@-^KM}B#e!uZL4l{lDM<JOzG
zoq07)?={*SsTVV}c;=HczkZ~w*ms|PD@wS+S@R1<)bM6XcvmAcZ7lwCYP)#aNTnwL
zvnCK$SUa%BGFHTY5XOu+CE+V*gLj+_2QrS{&KwX{CbI$DkZ?e`l;2qrqI#u46##)N
z@@&fOyU;^`z}2V78i~sM&7%PR$j6`XnoQ7Au7pvZd<KtwQbXZrfmEl2?Rc>N9@leI
z=>40CvX|%BG>n%lYIa1m5ou+=M*A;FWejq<2%=tbLs=GZ;3_T&WMtA$(SX`Olha6x
zA-TR@+$laVZ&{Qi?sNXfk9ryPdt19Hnl|GCC0lMo7G29~7MEXf*`{*`i@v@sIo^=3
zIaSTtoXL7vzC3tEQX!yjqnGeXWwxGJ=U(F8+vPT!#jN3DLoc4Dps;!;ovXwEli7u$
za!O==#FO2(_6v?a!eJ2v_f++D*~1Ga-5Cs%L-J^xSgzs5$WQ0DEgs+J&pS1Qc;9o8
zUf#jBOGi^hEyanO?gfhxptT)6>g4DPY@Q_u9AB7cS=ODO(=f_!XVhl#(un-xy+1Jh
zxYaVF3^O8vzWj@u0koh+s@C_5##7;MgUu$7Rj($$(S~X;?FVvbW#@<B3OgLP-7W4$
zar~rjV~`>m<SKr0$??>0SWj9iXvMdj62~B2%f@GiYf8@RTc6B&sFGNMjxfHoe&nys
z@fB8F_f5R#nmbtCA;hEBL}1!Y^ls&5D3~3HyK;q>>HfAe2&0SD5iYa+3UWhLjAFC2
z2~oojK}~=p@4X6{6UCHf1CoEX*%7C-)FC4qB|;Z~9*8ED)lfjD%|m!&0;05Lb#~zS
zy-#>?)DN|3o!RYJTJU+XsLg#Ymwwh}K=oz?oKbzMO`G(TLdPz)UWUcjm;Y;ymqTQ<
zhsPGBW^2BzU+ABs2@f0jlm4$*8m?*gp@oV(Nu^tA1-={hUOY%?_jE@BsgrF=dxtsP
zw2<ohvpcJA10FrPb7%TWM2;WM3Uuz(=JKAT;)*w&F)cHkV=b#6kO+)A`T+DKW^s0n
z>1kDAi<IP-ep4GQvwwmmDgiUppYmkD1s_<17@B>(C7v>Rc95X?0OLbNt6qzlXeA?S
zEQMUrS)#IvA=~I(`y*A8`xV9da{!{t-BpARx@mVhzU1I5!{*%mzT7^17Rj)it~I~Z
z^t{B^!q_r!zdzF{B^F2-IKEFy-gqR8Oi-U?FRP`bab-`@Gc38iw-Ve*&)Zt?xEOfe
z>TVqeTmFTNfcScVUi<H54A5eHfK7(czWNcEOmKG?=s9$F516!v8h{}3D}xEuKi|y?
zo+7HKa_5&#TG<n5w{Mx+d=J1ouYo=UQ*&BFN#GGMmH1x_u9L}f7!)R%qf{Aq+E8aG
z#5h~EeMm`jpLGo2M@LXCfhlILLV<~)f}r-rc#;f?_`;7xb?1?0mFJP(<x0MaUh+E3
z+o!kSdU{CPclfK|Q)ZK$L*I~U0eXYbN>~pbjWNO+El+TU%f%ry+RF<7Oq5@3*_OSt
zb4-DoWPN?B#rBa>F=0CcH~n!y%hXD}a%thq$!X@N665O)PFFuL@b5XmZ+gs5vc(tk
z!l5TcioQnO^*mpFMJ1agBCM-OW-871WG_ck$G$K*C=I5q)jnop%jQx0)n5G2;)Y|L
z80c66xVEH4387Rf5`p7)Kfm2}(A|7DXs#3$t+TV3d~o2>`O^XPn&JV;kDB$N_1hPC
zbu@=9WUlSP*59FdqK}%kdtL!WuuJ2rb-SD#@t=oxAI~2IxsYqk%IMY`oN_mtnd$S*
z8S@rm!8WH)p5b7ESXM(NAk0(BBoKe`+(&Q0s{LtWvexLZr_*1)2pH4SYBd*o*=Si5
z+%5TB<)>(J3>?WVOs@n_0|PQwl8>{zEPrJQ%|3iQce=Rs{+H!5zM}VhSEWu8YbE%~
z(jWSrsmtF9bisZ`w<RkjO3INjln2Z8gV%bZY+ymvw}QJJcm8dd&xhn>LlE#JR*CAp
zyxaKx+rme!&R>1B)($^%@7srcAwz!wVFxQ?z|}=8_wpHYK&%)lF%nJOy5g<dJ|gGq
zcpJ^{#E$vj@!3gEi81XpF^(}{CZmlrB=g7peK=a8m>4wMY+ig-vd)Gv9v0MCKxd(6
z2$Pyt<e!<L`p~K349393A%giMV?HkFAm#D+CivC0Om{Lg+|yLBdG@&J*~OXF>s4;L
zY>vLLu*6FwSgS+U;5Wf8KNO|*&#5DO9hrKuTq0Ksw&5JhCUwqcj!CTva1c=x*fCjs
zCbzADxQ30;octk^l{&5~?h_xn@OR@szRSt8Ktq|MDcE7v?>tqUc|9SyyxNlXa;CDj
zg11xQhmZ|u0%01HQg30en`{hU154Io1TzVw_m-KNP)qLNV;P2+{N(np?UypdRBWKv
z-WXx~P1I~v+n=s}SNT=-3=*-r!LdMs*mNo{;(5+B6Ynjoe!_|TDtPbhlyN^1-BVKp
z4bsCIEnX602qNN(u=%xNyuJZpfhOE57)rrZNsO<NdFxGr@6y$Kc^=v53Q6qz4%vo0
zuYOaD&=ma=j<uMm5U7A-&MY@?*s!=bh(48#2DLbRSMjAV@4dI%7D;{!$;)QOuH;Xy
zq;qi!m#M<P*NjY8Wbs}G0N+>{GY=b`MFKwhaVCo$BRYr?{00=ZlUGjy$@}eqZ;+j>
zySvZ2yDRnn!S4h*6^vfQtCj`97ZSkVbyEgAzn72TF<p540&-1kU92Cnoybzm#`EH1
zYj8uFckd$>YK%~*gz}9f8PwD}e?FWUOHd%NK4ky#U=y_d!Ek*(-mZP&`xo{S%%WrT
z%-h5+QR>0pRhF!J|A5F~h2YFYOtUTG?qF8QF>>k5cu4Vm=sF&HUby3eo^Hn2*!SE#
zFHzei`Z^V2Mj=6*bY`iau_N%6Ilg|Hrxa{kTV!_N7f8#x`lB9K0_tus^_;aPh1BEF
zw`pNZ#sb69%LuWhLym@rQvF~?%*iljlZ8G{;6r`yX9jG}7K$>`tG^35Cvk2*fL^0v
zN{gVwDBnqc(rd{y_;Y?w&~)9eDzCPX{w1Ar#=u+BJSl?@*nTRSo1dtkj7jT2UEBc9
zfa$YCA+Qn_Qg@KVfv4=#S)ywxyLuvA#i<`>g4u;5L2lz)n2OI^QM1QKt{<Ph)$WM|
zlYcGl@qak-;iYT59}7ZpW1GsExppISSi9blbdcR{Y^*;xK~<KJgin?2Me_TUi1BhW
zg;(6TwNK_dy!oS^6H$NluA+NkUNSHlk|y>C<UvsHoRGk}j$6Z+zz(Kn<9_#QeQ)mI
zdCRdvR`C57kPMVE^NTv{mHpMv@ko?1?;MP8`cX>F|G@InbSFE%=3$GZ#gfDUs~pDH
z#{l;u2NVXySQSpgmnyE4jh28z#%4Aor_Z!jE9XOi{J@dbfiFM2mk<NfKr6n@7>UP>
zfpoCAYT>Cd`yu_qx2+(GRwX7QLBUiiF$ojd%gh{&3&+4Ai=rUzmQ)RkfAm@n2TFQq
z_Lhu)2FZm$;zAO-IeM`c3Uo6wzxHuNgWcbZFHGUbu}Ue|w>7MU>XI;J=;-Q8i?}|_
zhd$v+DFtKo(>_73e2q`SZ93mTk@%z-)D_o+5L6VzCkhF)pTN4Bc<AH*YmeEKiUm|-
zpre2zkaV6Q&<E@UkaJ&$SY2-+mA=Lxf0eya$Gi*;B7t0nCT>JoW8Qw;6x6=Vwo*~C
zBZh>jL$b9m9fbWy=*%thX&#2eGlUg963hH~IWfIcZGU>7OiTSkN%M45B9c@CWJnoF
z)m=>b#Q+a`RA}<ynqLv!3ngm0uxH3#T=Z_9KS>PNIK*_W3gD3Lku_J5%R2B=8e%8)
zN6!uiHBx8g3bTqOkze4YLs3y5j$IDL)O<KM-Q%EekY#)WmtIdpV0)?~FY9V=L$6DY
zqIo)X3HQ5zJ<+!wbH57>f!oW9F^>8fdB1e*l*rKm%|%LMc6*HL;(*8h2t-tl$^~uq
z9s$kzdm`g+|CwpP2ABema8s{2+PXwbOhLvL)T56ocyc>jA8nV0sV^!1c*RH#c_$*g
z)xfwir(h~;oFjxqzSwB`qcp{OBSOu|4nLzY;d*RC0(Xy1aly>A_|MqbM652mS7SrW
z4oF22Ax$AzYH4K&NyrDeq(d#zjhpV*%~E0AU-0OCaDM;~76!%$V}*gBdEwhcT(H;i
zZ(0?Oo!#uD?kzW|okF=qV@ttN{hSCX3c=5o8*gB?iUK5vwRqn!d=n%gtRWtA#zy^7
zK6myaKF^-MgG0ra2N5oDt9DxDU?@I%_o~_#XQ<tY3S#8lkDVZTvfzFh2^?_39ezD_
z0OYXiV;sQz77t-B6$C})gzq-`Dm^KDlZn*vQ_L&FBcWjh_BRt<PdF9P^bQ^He74K>
zw^@=#y29uNh<}P{|40ikZ|`;kyY|k7aO!s)nm6^|uQM>28?MD6I%}r80R(MZyz%{$
zmijC2>v=(fEy?`^cbvx*vf!h8eew;R1p6Bl`O3?yA*4iob+V+a>CCUip%T1L(gQV^
z{n|Rrqo_q*l)#YGiY?py19E*>jd#SPmitbFQ{pJoEec{qXY|dgKT`+nGg+`T9HLKI
zk%C72#>s5+vK$ks$eDsR9u<!A<R}Xci<4*?VUhZ##-&1xB*dh#>y$7Uz-Iksi0KvZ
zz(HIhq*xGy9x_Pa@_Xso;L8s+HH7MWoZW?09Wbf)k<3`1+CzUvZcu&be;_~6n;I=_
zKW7*_xGmhG<-{k42NQ~iI8NY6um7m-`DHQ@R@0V^HOC2Zc`oUf%=)CRF-FggozMA6
zMX?GMV^}dv8K;{=COZ=!3hS2vk+MuX`Zs@|`#n(8&*9A2$Qz!`Ndk3^&&rIOQYZ~e
z!e4dn{V1mr@IAs{0SR}34f3DHUqhma`E{vN@OY*n)?@<Q%b)MFH1Mf(ArxgLVS~)(
zaYEsPU{0k_MqUiS>h*%WkqhA~#D8|{1J~-sZz<NF(&ZrN4i6{4c3JM9wDWO`$K9jH
zZh01i28D;+Z=@v>J*Mg4E`>)=24l8#gKH&ApNzAzG9Ozf(?4_eF*mk#=qYC-b^e2X
z^)}*960I+z_*_N(@qjWLJAntm8}EzvaVnY`GTEv)<!K)thZc)ZjgiZ|Y^U`|mU0!W
zuf5r0cJX!@X|(zgCUs`j`78(*9d^HpqV$Eg?r$;bn9LZj?sUXAO-_z<&fXfczO~xB
zo9DH-ed)EQsK^RVgdrD%%(AKw)xbo>Xf!~S^}-JD=|2{!TEsZe^GM}cB-~AN`Th!>
zEO?9wT<JD2cCIe3j+uuZtT~n37IS&Tqb!X9|JdiSl-)PE!MIPqb`1h+uspBvIo0KV
zsv4flb^oaz&FT@F(0oZTlaujYtQ@~8Ipd>8_nMjM%<~_qwLj0wv^G<bd5Ww(lCxiI
z3C+}Oe|FwlWb&0&WtV~^tR82kiRaNpP*ev&xfm?uU5x5I4F-IjV9$qDahTAprv#2|
zAJ=GqJQU^n9HpSe==w1c{3DNxjpcsj2|Pcah3P5NgA$!|#7KV_2TO|MV-ikUVp$?s
z5bwSq6{Q8zvqWtH_Bet?6Ux0Bjz&!M$e`#s$&-ZVw+ig$KjA&{c>%96fMApui%4jp
zwaIa-)q7*#PFYpw<$9RqhdD@osLzu#NfSj1me94=ogcJaoFwyt5a<DaF0{03eVJ5~
zNcnPkv6H@#jcG{JJf2W}_9=lEIzfbQNJvFO8pVVoP$Ie3p1{!Z>#5_D;>S?@cFR&B
z#6<&cSn@oAEuW@TcsKuf?5UoYsf<mE%YaKa^vWb|Je=7C6smlmr=cXAost<|uHT8C
z9eDiIz^E6Rr68sfH0O2K+;kW#&L|`*eBFmTLIVi*6AUm_mk(J{ky;MuwfTRhoav&1
z_PT=&5VhI=C~9dj42Kn8b$h>bX5?uxH&<a^NZ*`p7#)~F=`<3q@)G&tr4Lqve|zv5
z842d5cAKl&1G-bgpXSU=sXiS`n&I7T3JTdG^jkJ1bxcC5kSG}FUJbKkud<LN5?p^u
z@F!#aHN6^=Pb_WyOT&+(GYS$ozPPFU<1mmEB8N)`1il8X=DzI56$3tZfU^M0>N_hi
z%|5Co$O``AtJA5U-2YM7`ueialE2O^$w_1np_m9&C5?ZVVXjW6ikLt^*<efN&#WmQ
z?-{ql{J~z-4iT7=mXTEsHH0mn!1{CF^37+SUV1-MD|&sM2KSre!PIohU5nyTU|{eW
zgvbR|XJ^sNaAJ@z3amxZ^1#PuD!!bC<MZeFxF3EEh<~XX3Wk`<`Xiy}k_hl))@R;i
z^&lvm8OSxdf+gm#VAAn-%yAcS=b)`m`1)d)>lqKO^V*7lEbd3l(=Q<M9x{_b3JaV8
z>!WD?#Oppz)x7H8%>0w<5s|O*Ow(y-Y5OD-cSS90^^LVLLBGj0)b%6cI`q3lG_w<n
z&0S8Y@m%(&y=WfhuqoUDvITr@4kohLXKF#^ug>O?1UnnlX#$y7M=W%wjszl{tBwJG
zL_wp5Qg{hskm%otEI_Fq{=)bt)7b7xL^R;9{resQ`4d%QFqQrqLKke-scp_~^Sp$W
z+sYL`L&Sk~Q8{L=g~Gh3IX+#oHgqzo_oun}*ehmpq&B-uFYZM!CN7kq_mD|uF+41u
z5q{BS?@s<BmhW)Pk|`g12>jDc3VKGr!88y|$pyoR!r6l<@`iziZo=Q;*}x`r;ViJq
z3w5U60O=>P;L|tsQ{#&2JL{+Up3DVEju>y|ho6~(E1$!sq2U281*-KS?5lirJk(dI
z{o<h9kY@;nwWz3KQ*(1GMm`6l{PhRiTGF>Md7`_d!H7H2QcR>6LyaZU9dpTJ+IzdQ
zta>f!vvexrn(p&wmhU;hhNma*JKnrA-%X%1Mq<FMzkg@O#V3?yB8J_6`{lkIq`vRd
z5YH=Wsx`A`Iq`?d(&^CO3C#PCc8y6P=CAQ6{C_ZD(?MS#q9|}+`ySN<^n`{4$p*Hz
zF<1tI3EN|_-bY~4&C;GN*NkA<ZL)Rjhi+}QjZ|S@Im1A4tyrIvjdZU+<GNMx3-gIl
zd~3bbdbY77ANo{&5(vMHF_{3#5??#l+x^vGU|Y&xTfI5d{2T<o44IU;d^Nz5cH*5$
z0`U!dLHajh13Y!uUr#+H$|X&VWCuL8X0GqmBI`;m`hJUUB7U*AL~9HfZJ{_%*+A!>
z(mf5Rx1r9q^lw28gmEf=i`b}w$HedpcJjK(Vq|>Cvr@5Mp(F&vnMM^Zl0t4ux1=nO
zg~O%>A~aku|EWLtq!&BSVNJxd=~E5?V$HP3hVm%b-+GdGmh3$o<mk>ap8MVg=FiK`
zf$-%u2eBnF$g|{ybB`_8={!wrlT6!s<Jc1D1ZVkC5hY>k$*4LhYYYDDmMBKj)Fl`d
zAg}1vCHvV88bU>ay~xo}f$4&i$jtq8BH^tt`n;K<>DBx4mr`|1;H^#>AaL1pawa=5
zy8n9i_K#lM#YwiZl&K^h%bUda1J9hltRNoYRX#_DAwYTey8`KoOUh(O-yuh-?-5}S
zUitz_zeE2T1d;Kejr;{`zrtEjqAiv8?N99Ij-+&$w$Fzn+F#Cj;y)zXS>KGPov@wq
zW)n(&g8N3@&)PUMsaQ23HSsl79JWKsV#0QwJRS)&4AUgqSZ{F?<HK+qnu@AQ_~$ZB
zXNCGD_h$pT*XyBoktJ6T?6s<70DVL<qI^v{ksq*L64<`vC-DQAz7^Bf))sWKLINz;
z397f7y>Ff_?7{x<WyTas05E~SxT0b&k)o8;rm@bbTY1{7QIsm{%;WAuv3NmI5mVAp
zaCmt5!~MYasy}*8?N~&8d$*V>K63IO$|_#t|NQl9vN8WsZ<ok1Lx%WJ=3msedY8=K
zQTF#zRi0@baiE(*io?&cjNRS>8y9AZV(0HJfwiL{wY9ZDw1i@RjGr9*?&Kvq?$)Fs
zMUC;gvz4MburaJS9*u{UhqGaXMxd@Bc14eFH6w2baWPjw8aJ;PY`~HPLPLX}Ac4fG
zO|Pq&88+isHuY9f*^r(u6z=7(?@j?nswbkkKAE)Mk<GP*(F~xKAiY}fi5Y{LkzWca
zk|#FSJOvY<#Rt7E$FKZm-jlM+7}=%j7w`L;0AVlcc?fvbc<4_W2T52CkQB^CE|`BT
zgGvK&X)pFd{p&J!%ZjQh8EOO1DVK^7$wpe6O6F(H!LvgiMfXXdH1newEz-%;0(oC1
zqkF$%lD)PP*QY>dd^jWNMj=biFT>JIl8~DI`ez+8bFI-DH&gJ9dtrW8N>)tyc##S*
zY_?#xk8-&0pT)6$<@X`~U`=}Mcs9H5hnL}yWGVGaW^(fa3)B6&EyT->v^I{ezOj#Q
zeey297i>$}yu|zR^@b3)P~r1hT6S+K(Mn&c6FVa35C~|2fp}NW{})kT85Bp`MTxr%
z?l8CncXua&U_pXga1ZXT!Gk*l0t5^05L|-0I|O$hwt4s4+8<P*L)G-{r|&&-59$30
zPR(W#X8gxayh6GCv_NGeJRW4B1vsS4XCn$)eFV~{7Iv&o#xhArhg_F}nEILUD-Ew-
zJv6P5^`@diPY9!_(`e6`=`;E7>f7M?NwsGl=UR1hpB<wEYVq>}J1eQAR%D@fW$4fa
zV@g`&X5eqcVpx2l*D5<Pi+}7h$bqv39Q6hPn28?0C3oHfTZ3VV{ejiRra(e1hWr_e
z1ip8!Kja~Rxg^_-*i2$sY{hASjDd;iQUyiFr$2_MX)Eg8drv9NxYc_jkEQuwGV|jc
zPID9t;d5~yVlHmmXI(8|Uf-Pzi0=)?TeNuu7MnRuNFW*mDM|80w)qIat#Ux}zen5p
zxUvhJ9C(T#E9j2-9*<TWZos0n5-#(P@Oc+(t1w%FcgN$u@_-*oWWa9b<3v&1E6K*?
z*j&hUiT*$I-63GRqT?vXfGeZgey;w;1da^Y_CK(30p<s~I$RGfu-fmF27Y@)?XPzq
zb?b=6XpoRD#0N3S%Y0Cg^D6s;m#i^UaF#Y$-Tw^n<VrJ9?o84prKBtKVGq@fn<c^}
zC}K+!&*J^7e!i-zj%DS-w$xHo9_Kcn`;^=>xfFBw`-c%EACWS!lBV~A%-w_xx+E@H
zFYC?-y&}kjrgl1}J)#$JG3y9ymETqiqa^k@l5B;WBr`*Tk09OBjW4g#gG7z=SDJ7G
zl&K5n2BkznLj(EjjYd%ERbChhfzx3mAs<hYBFM-vYmjk}^QDU6r<BMQ4ILfW;k{rj
zDksn-eWSVM5qXFB(^HO9^p`i^wJ-`65L;ac3<f=^ycsQepBr$F)_hQoQrY^1a{VG?
zF+5mEk1u~a*HA>F{~WsBrGZ1L-3>`5kh%=M|5#@A?ax|?K};L6spI;rSV7T8l2y59
zQi@Ip3jXR>wimWYf+9jv&&P|V<8QBh1P&c=a*L_`^vM@jJ8}W%1Iu(`@)=^#l6rc$
zCl%cW1CV%owtw3DDo#r>V*NYqUpDhI9lC1!MiRt7M@L8DX}z2(lQwUJYd;RFml`}^
zOig9eNK~&Lry3I{LT$S76)u!OO|DGYKJtER)xs1r5~U+|gtH*?|DM2i>5$p~R>pNm
z$*HN~v#j>C;vu&W7@Ahy`0s&H_YUWrUU#86c+<-8Y}{$3$*E~02sMUD+TkIX2-B;z
z<cUXhr0Jj_8XSUz4m^%0gkUyXEMM08`#c=BpMG3~s|ce3A9Z)%4m4%DFazZc9WRd*
zJApU#fKMa%JI4a4EHcPfid+#U#NSTv^;%A9JF05~3`|!FuWQ4VH^9#PLbZe3N~gCv
zm+o5Djh*^1USK<7t$}}5)ZH0bwpf??aj`YOl88ss-k#j9xXewcs=ix_fKZ`sw`fX6
z+V4Aq%MX$*DW((wvPv^%!+LzBPnF#UE|>$?!5A_Za}L!mHduW9P=|{|8rt%G0HZ<G
zQIB7e;~DjEx2X7}7LFa#9w?iJj_qMf{UBlcku1<^PfY1w<_@AkevS1*?Rd>rd2AZ@
z9eZ!<R<(-~)`=E!1s@K)>7BTY6Y}?$eHpX<dLziFLWFsG%4~gUMLsbc-{2fCH#J8l
ziOm-?q8^#|F|dVnJ5-^S?Eh?5KvW?M3AN7ZItHv$3;QuEFhzUE;mOBRf*B<V2QuI(
z|2QT9o>*VST6amu?YQanwOnt=u%}tMKT9k&JDQEBnFxD67A9r?nn5W}L+g$WHWMzZ
zaOf|h9`6>FBaeH1TK(E|*5ZBMsq#W3m+eR1q1{4=8YlW~N)mlg5eAWWqhPtRk7NCb
zXidiz@iOUWgLp%p*km__<*V!G2Z_pgjoCjO_N=!ed;EIddy%EgKL?U>ne%Z~MNeC9
zou4=TDP)z2kwG*D?-!^E=3gFi3B|sOu037(S}t}(b!0O9reS55Mh=2QiUWa}$}iTU
z#y9iJF@D<Yk#9TgK%Vl;)?yd;4ZbnD%;JT;{+?{20$IbEl_bT3QBY7~@-=o&!nqir
zP537%JXX8WZh;~qneL_%mmj;hPW3n}PBqyZO_w0S9`yiShk*%t@xtT5z;|$H1_qT4
zep{d$_&w|fD3kkMPc8t#XfRVelwMd7Au>k?zJg0vfmEPFRAt!1Mr<%bkgnw!GH<vl
zjPyD`CO)*J_1wdk_4{z9aE5(gdn;336Oi%(($Ud@KFna}1R?D=n<*$DM@2{10HIrj
ziVXI|JZ}@oI1;yagUSBm{zrprbZbSW$(0q!;&3{RRK9}z?<k<L?^{6&5g99XmOpKS
z-mL{P+Y6747d%RN5l`*3iV6^&`Cba};-;8(?{@a?_*!fqBA)exv32yeu<<4de+;d#
zMcm7EL{on5hS$Db=TmJoW%<j0q(ReaS)Q=BxPurua{8G9x#uILcBfM$WfUkzDSjmJ
z!%W+{-;=K`lYN&0fk9xE7IS}zL)*8+0%D(bXEFxvK#?yW`e_^2Bs9Zo?g!c%CpDk&
zNo()SdR5WeYRkSUg6wCUxEwY0ai;ozn5^u$+F#lgOUej2%b8QYV;fsYlvZd{&<mJg
zk@d32a2|-E#xfD)l+EtKpVa<AS@z#)N}U6hFJxbExBkV>Tp$NBHm)i^7Z4A-Mg?s`
zO&=|Z%|HWfB1+pdtyT&p0TU7|D8BVr5Gfs5q=2}Q_nS@P>!PflcmL%5zpIml*Fjjv
zYoh(FRV{<Q%&LwdRir`SkIy8*?kkph7f-3GEq<tqVs3L;IR9@KfG;%BqRCDjp)c=d
zH=U5HSZWD1te!#&LAasYyESj%@jbRXPt8jSjmp{)QOOI?7f%$uf5~WVDXIzd*>>q+
z!*iZsvwT;nl2!Yy7RAWLo!?X26rsQ&vj4Fx%9{Rmso3`NfYS1u_v-X5C;U_h^+_c&
zN)4MD<yH(vF4x`jx`TAdMaBpT1ax7YsDanlu2LZ&Noj1~a`dkNp!SiPJmWDLio=l<
zF$s$DSEB!b37C+_S|ctN%|iHq!-XPp3t^j}^Im46<*`YmfGzs$e1O7VI1dw*fVI~+
zoD4s{5_vLOoS#is?o53$=ZqCbg~k4uVe42*|9{NWx!9_a3n8ue^@}Y6@Gt6*o`0Wx
z0Y#Cjh(6E&8%Rk%&irazv*zW8)0+sv3KVY|qb)Bh6O_jsbDgzCbQ&pzLn1*JVS))n
z;{H?xh7M}T_(k&5`QwLq&<BQ9o#=i9Ce{gAs#_d3JW5?FHf#GLY}nPjFZ?)yGZa&`
zzd<TmAhymI<fxyCj+4LcjQ>^mIz1rE<r!VWJzpl!SMQu?IZewD6sG*cHsGrs4^(&B
zS7$T2c*j=Y{8GaIP=|w--n|eKGC3i#AdMt|f+dMd=|dB7AL7CM;L6xA$M1Nm;?VD(
z`+}3>eazOh9qAu`93NgjZV-S+V?mRc8Na32Gv==wvKUSg{8ZVD^fgm!`vCS!LAL#d
z&CvlyVI|hAYpCktLX2cf&)|@XB&sG`MrNDr4doXNI+Mi?LVyfuexU0<l(aB_=0v@f
zo=a0t`@Yn^>qTz<1{n{NH@WdSgG%Y4x7ZpDLZ3a@ki8>4{2vsVUmr=R9k>PgD8k1w
z6ktM73!o?~1QAz_xX(xY`-3P<N0SA#+pjhC-1pLxQLJGi14!#k9;~R3a<;LJBlf{p
zCpzNR*4WA|dv|G~PjJi+S9bCW*1`8*Ylkp`wAo=oV*EeE#>x}&kRbZpajv-ZHG4eX
zjdv;G8~z%#6F@*woxnnL)axfq#Kg>yoa#&VJ#Sw&D7=&s{Pg_fP^$AgZM2id;}D@R
zn}|f9+JU9KD|6&KNqPxCzBA{`#}ffJZeII$-N_Ew0fm0&rdAnm4JRQDTni5PxqN7B
z>;x>;`}jNXg)5Z55-tJ+D=6K^2yL<<j>!uxsryO(POWjpSt*rc-QJ0PJJ8oxD^9X5
zzNLT#c*B-*?z^5y?4##k&mz};B1!WB2rMCFpTZWS5H6x4cMJd$ir@ubkDmmN?J;P@
zk6D8fJpK7cX-S%8nVB#zfk47DEP0@mk)r9CV91bWzPAM@#yS*wjL>-y6RYZJL}n;9
z>NF<A7WQzRCpvb$PD;W@EG*&gd?}&|KV_RbfKa8_H01tT3yDju>b`U6K$Ii*M}XXJ
z{JI}Y>FkNCY$nu#>_I=@t+Q?XyZT#FenS_tWig982MNxs>SIh@3G;usAjcIXsit48
z^7gG{7bM=NpnT|Fh_U5_Bf*!$mgK-QTzfQv|J%ChSI4Wh<&8K#P#UT3^vcCH!I~0*
zsw{|+>(@s5uo9d(fc|?LGcD|M?h8_}P{Vfq5vzpPXOR>zU4BgiInT33BAlwuzC`AT
zgchNsN8V5*ArdkbHD72^l<QLN7AQ9@peR|RNbQA+<qLD|K+YidDP$Hj`&N`?6rFCO
zSy(`OymgUT74W+TJ5+#3yLQi}?P*c5&iNxzW^NocfM<L^1`uK78XB>9fq=9fy<?YK
zJo&NFKUzu#J+b?&(qz80nob|%yC><6k%=UbKwo?^VM&MZ!gF51825kUs*i_SCv=;U
zF_`$TQ=vAku8pprxoY+$<Tg)V1z^Y7yr6&4h|knuAoI#qhX!Bv!fZ4>n7!;P_XQcY
z1t!<o;{LiPBr$w_hgig4=t_wu%cnr{S!wuUxMZXhYEqiwlY;B&1xry$k<sd0Hve@6
zD*IWo%P*AcDgeDjLxE|>0w1HuEUmdEBuI(b1QP)VXxagW!Qvm8fcRCqEk!16kj3K|
z-#V$|qD*=x5Tz>$UKOJZG%aE%kS8qjI(`h^e0VwYr%?Y9Z+t*d6t~rH0c`E|*pB5p
zAV{c#kV~?=({#rm-mUwKNl$i*4aTjhDRNaBc9OGo+?!1FRhCz_ps1H9-*kTM9Y}%V
z*rIS66ePrmo})a9!7oCR=J>Cy!-2BqT7ZklPa_!4QrdHG4@D>8-H4>mK^mmmS#lXa
z@g<{8cV6VAxW#;Hf~h&TfT<&9ANSuUjCnmZKX=qk2|Yax4UOwX7NF#j6D%T3;7U&d
zF2~sNoJX*anU|uLhP{qg^oDL&mV7PEu*@APMUkKjeu*IbI(4I&sW;)alOv)L2e81x
zu=!l?8xc~Ef6e?y1ALRnAq4Z;-lS{353pw6{`Pdc8h2z>j?7o-#}V4=j?n_oQ`N2o
zqG_j99Hozap8eh`Yq7x?S>_S&&~blw*^w{0t&=GwBUl(&MZX=XoEc4Zmuznos&sQj
zpK@DoUeK_SI$qaUOrIRR`pwqm2JP`1VU{JA^li7Tiw3`7h`>{HzMw#ymuLA+=A;|m
zLG$q3l$KUfL-)jbEp^DMjO1k`|JeYaSQo#$8C~HnlPIG6HjJZCM^>yVAi~oMC9wTX
zw!p?&{ECON<!uUg6>&JRqoM4Q*jaqCm%1oZ;V{-<<vn5UcRBM#<D(7ePk?f|_IpYM
ziNi=cV<V$tTvF)93tO{|@}FS)ZPMreFoCrfxP!CR{SAvwBNWfDAQ6yfLvt)b-gIC~
z>>%8HKPNM8bh#F8dSl}+^`Lb|nG*sVh4?idyd&3Oe2vw~+8e=Ji@v<Y{%{|y%I-;r
zSWj{>__dSwG$rb=ImkX;e4I3o6K4p$tH(4j-5VNt`)_Z;zF5Bm8^Y}Mm-@$Mxl$8j
z1^%Jl=Ey{468G<0p>f~ip(bOHJq7MXkwN5-ZA-cavC~y;$Vr&|+=)3q8Z@yY_~9O<
z0?yBprw@-mhRQ49XbI+{D+VC3<Vb1iR>Myl$=<Ck(RSGWe-PrE$amOLRyayTJ-0=3
zX!oM?fkbA~P^OTUoWL!e&!3~c&)Vmi-+w*(tfGjM_$99&_UF-jCxiz8AX>FTfsk$r
zvB$|cm?=5uAZ)Pg<utn8dYH|mU|svf)EkhF4Epnmf#!-atv(XUP1zaUg80*Pt2c5r
z$y)^Trj1?O+-9z#8%T^JaP$N+(UETb5X^3sCLT&C2(hp=VWdNZOF?`trTdArE4wU3
zh?HW-ia=*nnOE#th#tu60P9xyggD$-DGhHYvCNl}U)eux6_+3TBUIMkN#PU^M%q+p
z%4(l+a7>(u@1L3a?$v6sp^;PyqSo^n)lTeE5);;J(^d#|joYr^%(Sxlz%z0k9<8Hc
z^n&dmSJ$MA_?9?=pX*sT11TTb*~`(mBaeM|TFo|^PQKVUB`fPU`-w(VDbIJx%?Dm(
zBE8$M`tFoD&;I_BBqEHdeA*=DR&JbFi@#lWIyBJ6ziuoOhy+Nfyl||nAU*Xu_(vwH
ztaoAkE-45+Qc9Vnk(l8v_|CVZtXN#YpN`Y9f#(i(g;(QeB{>wZk~b<*t9AK_rW&!r
zu`a3BZ!1(zUWogqF#<IH_Hqa?6e6!Qq8@u}Y1(Pgk92&H%iKoQ*^T~?ARkgbcV134
zeHw8ZVmE#7&!|)VD&2MJ{w5j(TMQTH$1h?7(RZRzK{ev4EMhARVCHVCBooJOff{)l
z*lN)mTT<`IT>b-r8uP<UhR1WAmcos}0r1pq_aLTodu&m(_80sgIoCL5J8?a?Ebq>b
zD44}h_QoPc;5rx)nEpW#AkLU};6=j^G;SW<AgB3l8FE;y<BS<;wcClz3BR%<+P8G(
zS%<I_XO`;L*nj58c{x}2kiX}5{6~}Jw-Crc_mJPxj83rr;9W#etNupT8BKr|Gy!Zt
z%FMk@J~K)%<lYlq2DsB1K9W9iBD5GSsVk*GK_6q}6u>zF$uMppV!N2&1W~sEk80aR
zPG%s2q_SW;4FEQl9Xi{$eYB`*|KwLzVoVu47?Uv?Ga!M;<HDoCEC?k21=dAIMJIJ2
z!hbS0efj{kkAN6xgs=x>>bW{H&8WeG7P1B2-}NK|OC87Mv-~mOp(XcoS36n4UVRw$
z5+$7*_4T-2{w#?DcLhRF#u^R_lE-JJnwt^&j}2eZhuyy$FZVldbLy?cEO+xhDye1C
zBP_1*@0gcR3$T!-uW&!D)y~Qncwgh-8z_>f5D(#u-9H@4na<K179=P!UXvR0Rt&#z
z{{crs*#3%USZ@vq@ZUAWC8$hETRCCPwOs())CuiYYL>s=x#8Xs9P!#qpH^&h*sTY@
zpF?zL!}V`|Qmu2gN|VI<Vc^WJ{iBo*YF*^hAPENP{pvu?dV<(SzaifzpG$lL|8p&V
zlRfe}ES@QJ1U#@c@kc4oix`o_gdHmHU<o*eUVB=5329H0(IOb8;@0@Agvg2@)j@I*
zilN2uw6;fjFD&5lT#I_2c*23JA=B;(CigtDlW|F0jL`nRSH2bNszF1AD2`i!F7e%L
zUkMiBw?tt$PBiQtje8o$CFaO~r|n7a{^hwp`an=%^1>Ojy$8o8m&T2avqu4lJ~sNk
zl+$fboW0_h(vQiKm`64E-wGmw#?@mf*Gjpr5fXU1>YN=%dy|vc<eX0}6`AU{SHDp7
zy12h!hc?H`4;8R6VaO(x^cwwb)2=Yw4yAuVA+6isC1%?ah?p%nNYeV)V$D&GjTi0q
z7-k(hFda0T*|_<$FIUaD0KJ4lm;mv8I-tc$i5MU33w3{izEIFNC-Sx_Hvm|~Kz%tQ
zcO(#`KC*k-EvZH*On_GWzK~epVwGdT{j3-p?B)Qid){{VBQvHv>U80j2Dx3RKNtx7
z(evC*fi^>>WEH-ikjic)XyNNU(|aE91HwPGJA9fG)KdC*)4d1pB1%Wi)R&yreee2!
z9FByHjDPN5&JTe29zf6VEdULODMpR=KFzV>8p<YlFzxV;=QW!gC?b=FJOW{VjViII
ziNKs!w7v2zg1Em(A?aA%1$Ukb$Od;zt;<oCHs5Z)Tl<r0=oeXA%gN2{_zph!xO#AO
zv=_(<avG!z7oQPv+xKoPY2mRu2N6ce9Ch2Yf3E<vQM^EhQ=LHAv3)vf+|me$q6A-K
zLLN#+Rn04{!+~hoTYd)-$o)3#-q-{8_o1wss=TZ54iGWqD3~WTdELAr8kG|6#2z^1
zPpL}p;>_T5S7a9Iww#jj?RHAgikE*@FvdU|ze^M2aD5fO3ID`IG59F&g66!0osgM=
zq2+}zi&?wzEmp2)COBTiO)xR*&{ZPm+xof(vVrIE>wzfQ!Z1}c;w<ifFD}2IsQz~f
zjG2D22(Bvcq)a<?g&51eVZPU}tb5s|_(YgFx1HNl%CM7Vo%Ilr{oGKrmM^L2{lERY
zvI+FUw1F$=yx24L*lQCO{`^x!4pu80amItw>Aue)FaEZozaK#()uBZ9{zd+7CNDo{
z7?bB~>94Pa87QF2n#kiM5Lmid4|gOK&bYZ}ka08*TUr!5NnJjGLE3_n50ilOPepbV
z)(_Q3`Z7?{;n@n_DQY7dTDwWT{;d(2DL>ZkyGjWx!gM4J`{j@Uhi8h2S`}qoCQ<z-
z^fm1cltTWrY@ZEVv*Kb`fP^P|zT7A9XO2ZZ+%BQ^-}5nx%?;}hQ)|20AzNtqx6WLW
z0~g^&W8NH}?9IJL>P{jXn~Q=;{~K?edEgsuRY84z)OL^v`yi4H`un*~ZX2Tuxz<=A
z&S}P2?tcN>37^;ld&3BQE-pIH*ThbxU3Qs@1eW772%_)nY6i2tIBrFsv1@UTR6C4m
z6+51xVu5SOP1%vjf3H?sT3?)EXU~ZOa;SVp`8gvacoE>6pkSE1Jp7Jhw@b=tIHmEP
zPhuMYlG%}vLZYCI`Nq1>@IJqZWCoN^?^KaNFJVj-oB#$|SIO%}Fb>2FQIu;{VR*=$
zHf>|<?CrTJtm|)gYijBDQB=k14=3YTNjVI&+c%Po3typ03rJ|7KcYyMEjV<(IL_&O
zA%YKCyL`Q=^6v|$@FR@hZCJJsW`^A28~EO6J|7vrq6|9s;c2<*aAVL3kvW=TB1;}O
z0fCENO(wL+IlR1EoE25z_4=R@AhU8>>r*>90utI>!B;}p51D|Z2=Bknf1th9h47Ue
zKrQdy?hMlB|9fW$#<RPh>gl;o%1AiOK79FT*>ft%u%CGO`4624(C3HLRRKL5W0vj$
zl2l%e1v;-U<V&*cVhCC0$RVU)lEF1P#gLb8f>R3KZX~veL87j{7n}>Bt>v2DC?a-H
zwBSv&lycsQlRCbCNjMm$gQg<+JntLi{r7VKt{j=}&l#4o)dFl$|5xoSKSiMiTU)tJ
z%DAnKZPruqy8BF(i8@ar(u=lkj2?pna-Y3L-bA{k-*iSZqtsXwUw%f<&wbze{<|YM
z>T7xYFm39GVsW0-NII2>?gvydORGFGh8H>h)1dIlnVo!Wemn|ZHo5J6hy46D+?y37
zbvgJ5;+8H32P@f2OKdPUnZ<S`w@exSl_N<_M6|on*0qy79R^Xer#xF);EGepM74Q+
zvG?yAJ*)`0H$oU$MPZrW2sk6qJ+{Jf^EzzlYt@rf^)!RWdF^FU+>!ngi{U?zuIMQ<
ziPQ8Y-GidF!_g!;L0+CYP+u?>?YDnW{c<ENvx!puR0q$Zp*=_@7K!?@@^#^#tZ$#&
z%-Kpve`4&;-vseZkd9TfmKnk)*%Ro#PHNse`ASc#JV$=@cwP&p#H;?El=L`@mYs#>
zhj$uysbEUlY<qq>>PWk?wOZnOp$-Z455+{)rt*G9=rrPv)l|?0#m(?HH{`ZVKR1l@
zVCdbs{^sz1!&aza_*vPV@Fh1cSXpenlaW{pc#KE@3CM6ruXKXhe=#^i2%jHu{&N8I
zu#KM*AHR4Pp@3RDp?qI%=1F+q{q<-eKn~NCmdQLtXsfAkJekS7fw$eAHJXG3{$5aM
zK>-zz{^Bq0Dd6jNVglL?2C^KRwER~R-UonoqvXgvdl^KJQMfr%g*HQQ9D!7$4EQAd
zX00m>7MOg!It=rX5#r&)s@X@rbSa$~JwNU@SljXKI*?}Ox6}%`q@CJnz=Zr2Ywg5=
z>~C_u0?sAitCw82`vEDARAv^I6GtZwZIMqfy+)MfyRw2XCZkpF41-wSy<#r&+5ONj
zhWU{5=}O3eS=1yrA<mY{j@G-osV5Icnj9I_Oa#!(0$kB<X&SwgWKJsw?I1BX4D7=W
z;n+;eb>Bz7wuglihQUh2KCc8R$({p|(ou0WNxNqv{==<-ge;R^lTqfSwkONy$M+cx
z1^3F9#n7w4aZr=W>wDj3gm*^yQIHj`%QsQqiTUCAKlFLZN4^_Kb8>C&ZW;JsA*MaE
zH+;4c5gMJw3w;yIQ@VUXYpvB0JXhx2WMlnNC3MWIl1(!SN_A-^1Q)1dg@C+yx8Uf7
zr1u-$N?L>urY`Ij<4&?SR3iRtJ1T-nX2`<^mLK7${%hh7f~PI+FrkU~4chK3DxQu_
zA59fy@yz`{;n{^p%SH{sH#3Y5v%^J5Yr!B=Q$SOF#}@zLK`H4dZR-$9O&NJ9b{J9k
zIfl@{!NyM3#gwdVjC{|Q>wORZcdK=)dgY=J!R18-5AcT`zUr?A=8U#BBrl!y3XHZ&
zK}o@OCbbUim$e-TEp4S7e(B6puw)jlXz{jmh>RDDGspHacEKbh0+03#j8ZKlk?Gt0
z6L?_+Jns$9r%BlDAgT~e8@;#I7&@?<M*N<SkD9vhk4)HLCn73vT!p>&D0v4><%0{J
z`}H|IXArSl0}*J%LGM|NFL#ET_A+d|e5{InP0SAB{z=8bv#Tas_&sk^m;w}yh(#n&
zM}x#8rwSMK!V`|ylXBYtl}>SR;<XL}gWkFg%e~*_IRh?+9Y#^2zI#^urgK5vrLrR$
zaI$Fs9kg=IZ{_$)3+N-Tz^)Kvw7zE-z}5;Nh!8svWFIzLDXLuJ^NEBW5r!MkY#32j
z?8-606r6r+e<8#D<%N(r@6h+xPSfJ5^jeNL?9$(~94pD+26fd43E-<DV)o#6lAtyV
zE+w30>9EzN59wATn?gMJQRpb0MnxUXW5TA>15(aj$#Nl29CdT{Mdi`>H0IxAA;~yS
zT{W-4qsKuQ2i8jS`KL#iR;~H(L&m3OoN7`dY==J#uj8aA?bSe(?{>>e@gYN<{&8Vb
zRq-2+f6`N8vm(Q{^OCCMF!1`0j^tezZsCdfn5C5LcryMSZT_s3%m#Ecn$rPl4qR#|
z*zq6=R7AYNUv7~vBi8Y$BsP7ryk9$i%9mtL&14}ntQ?UpjZS%6)flM3^^gQ&sRT@r
z@om1qV8|Sa`fe(;-HZ<;Nbcoi!Ugjz|5TOU>gs*giy0pYd&h|N*9;rHwGB34--#oF
z5rk+57sen+@&hzRvl(X+cee|&bKQ&daxa`qp#OV}T1qo;LoX#wpUJ}FoxFkZs!kE|
zV?I^71QO{d-nB*6LT&}jQR>6JL=bq#pM1IRC6rRUE-$L0<ExNcL1_Vs=b;si_fEG|
zN+j>FUatRg@E}QNi3Z<R(0e_%fpe}cs7Va;cQA(jFZB;t!pX6N)bP!Dd0nMa_x_FY
zBmn%EtU~4b6`oqWNsraEVl5>jLjd8n4(zgIRk8^LxUQxY@Ee4FPXkq4ew@ca8y{io
zBn2Q3_i77qx626Vc6#$rAQ5kSN{J1<$vv+>7>JbI0<`@+V*RZIUQ-J6M6^Mthg(Xw
zx62N4=tPiKlEg#KqaT^}LC1qf<Y6Yzf-|h_y|fWVIPbkab#TeW5}OZJtovM{n?e6B
z0k8iQds-X^)8L|SMs|r4{6cKy15j_<5IMI86&5#l*Yp4H68ev;Nt>CO(YMcv`6JSt
zohV4BoYkbX8|r01SaE6Ok|5x+2VQt0s$f=_fB52XpgkYv4I#3AJAj}3_BPW@we}LX
zmWrC17AhVF9cuE?E}yuv!*tQ3x{Sae6<VuBLafNZIoxDBuM`vzo6$&%T`9vazFXp&
zF8-L+Fpiq>b8x?3O?%yxjb)S&#zWRNjk@uC-v^6GE25ROe+4LTnxa<Gkzb3cIviDs
zaFr#zPWic2tpH{db?p;d)=!<m(b|>#sP-R2`mteK^_D9g2pqLFpR@^l;YaFb63VkH
z*|(;g6L|eFvS_q>`*l&US$=&e{kafmp~AJ*Y{mP|9T%C@b_C<616fA7VzWd8-Wpxy
z%j{g29S-=PwW`i+z%W0XnsXn-91Cm~D|P&_pEe@E%<;nHvO<Aj#gsWw=Pu1^y;#x9
zO>UXH07;q{=8bwpRZh574C`oLXV#DT0$FE?*bb0df|?^pEod&rEBp!Un(Pg@#wAD`
z+=y0+D7*}cQ4*zsMTA-ouuLKk8Jb9-gM~vx$b>R3Sr&=sQ1;7173*o5i--QSqA^jD
zn7j=t2#w*iO(I2)lwf@rzM)rLm`7U=G|zC^lud&>VmM`MGh_2w8Dl6ekE>F+W+*S`
zdm+uvR-pLE!jQ&Kw6FL28RIXtOF^6Olbg>)AHgm4L?IQZ9%(QxrKd+yDhxz%i~XjG
ztC9kcy^ptmbfRnVOKz;l-LWD@GKU@#CXig;Ep*m~lWgREGpl7foXiLvN0WB3Q9HsK
z%*=F;NO_JtBpIO&<f&hF&R`MLr!L#K#yW=vDzbI^NR5m+(TJVa43Phb#i4uO)nK<=
z?RKJTyHHJOnG1;Q%=8>x0XqnQd$7OmB&i5KvY0*r>4idnPu@~O+5Mh9o@Pjs<lRL6
zl~yuoy(I$HxE@ZiKJ3tliLDFY5ph|#Hh=o`DXb*Nt8CyQ#3y$RP(qQpbhGmP8>*(R
zeiuC_wW$3fBA9F$*Vcl+vUte%{9q_Muw}{)`#T<%2MryjdyhT8LjSFeK8A>*??0>W
zZ5+*4omnQ14(#%Y-#PYT$q}ZyLJlR1@SJ1(0Z>tlI05I(hLzEbHS-!2qemvtKKq>s
zMuZw{9dFtnbNFDgP~ugyee|Wqs!wU5#gATJ%wyES-PA9?z0d6le2ZH%j)Yv$Tu&Bh
zk9fJAl)zLurQjz|MMNb^3-1Kzw)-dTT5!RyF71?*h4HM@au>S1DXl*z#6uAsY^dAF
zncU~U=hy#8z9r&2!luS?DEK9J$}?beKXh{%Xd`{1w;ZdKuk`I&vbS{#M35`pn(~Js
zsc}ZDN4*&*r_7|T#$GX+L`ak5%;qbfE?h*0^$aR<K|@YMfgtyfx<BcA)kq*$ShibM
z)6a=5i^^8k@ANzOV}|?dUMxPMQ)8O`U^5ew`|6OL^9}~<&Amjmr)njI7$yGof>+q{
zNYiXEB@^1l#S{MDDmkvj57W3dQnTWc9tF=_4{UHqG8A>4QMvfwLH}!LUzZWY`J5BB
zB#SG*eO0h=n#Ry3IyD$8JT}cu5yh!G$~{d&9sw`f_`qC;gGT>cH|u1$hiSl(*sS*=
zHpV$lflGljPatnGIHQ?P8cC`GY?BbIAr*|cJW_t~L4nblc$F|UJM?(QtWHhR>K1EY
zyNTi@MmlcL%ozo)9Uh=N!oC?qe}a={6nEpVDiMZs8hSB8g(V%#L!?ic=0Q1cL|2_6
zPJX{S+WEYpzi%9yN@*<OTk0W)!&+NF3$Mdk3~*0yf%UO#fB%lP4kT?2_fn)9rpmpi
zJ7v6<J|;wgk-lqS)~SVy6N7l%nKA1%fx^k$w8dNegRW2JK0Dl~a5{CrG4Jp%9=Z^L
z)-RyTk#)!|pAXQctg>yEl~?x6{8WdX;xWF*I<T4aYSJx*i`bO(Gn*-gi}<?_e4)&Y
zAcX%<;JwNTfN`soUbB7J&&5}kM8lV~aiC25-2ASx31(HH8nP?=u#=?S=27FH7&+3W
z=J)vy-xab*BDm?xvY@AibS#NRa48jD!`{|f@Jk&IAx7K`2drCdK5JNGwd-GPXDX19
zscSWDRU$ID59z5rCX9|=_|oe)t%w)yMkx+PKHNf}W+79c5u+)Z;Awuh*d#+B6lH6V
z*BbwT5sx(D>S(IO%$FsfchkS%Wg>kck%o^wivDRvtNyHLS>jkcabApYIex+CKvK%A
zD_!DWo-Mp4g>HrGkMzf0w_Z|7KT8`c+2|(Ks$Ze4VfGxQ*t%Nk;n_Sl=N5fbjFE6i
zO9e%d7JpdJe%q<`w+pIl{Y(@++VG9n5r>aBTrVc>_jvto1q^x&Zv%#EoDzu;2u?S1
z#p5u4-DoVa?>v#Ay08Ud7Cm-Q=|lJZ3h9oMqmr_+q>mcu5K_-yQx+Owq}K6x;?ac2
zj=({GzM|&8$If-rGNM15Yf^p!+~z$fcTi%A?_5EYNbhsTFX&JIl#JSMzaHkI2|8DO
zJ&svE)JFn^tq!!Au_$`|E`jH9^{=UKOUy;#{&;C=`-yH!PuZDn$#JT9-sHAXC0SC=
z4Co^xd@7cHf~Y>~=paA1Qwep6kjF9VAcH93JU~$>_1zsMbY=ft@oYM^c1gc#%}*`s
zSc==-KTC3=w!aBgdgJX0FTmJ2>>##+6KqmKMK5%gMMkrQ2nh6DRa1B5sl|m~uBSbY
zel@mSODOw2j2N2qgdjs7LXahc;=gE*gu=eE`$K%P+}AuI3dEQ=a6v4((MO5xw@Wq)
zx<BC}jD!88H2~Y%-+}*Eg~I~xs~Z3Sg^;to1kiur<T}!dA3XoQB9hS^^=C~_NeP`S
zw0hoF_E1fq22c!Cm;~j3g(e>?-pYHnsOT~Uq&!Z(4<ZHq;5N8Zb)H+Y8qE5H`w2;s
z4_vc#hdMAiACLzNelaY{1<2##Ayq!`mtKODo<1-ufH?X)Ok>3R?QxZ0LKe-eambHT
zLu`;mO%qajKD#jzE`P*ypJ<qtr6r~mcZHjyy+$-8!FHBb!qFum-neM)vfRi}(KKg?
zvZ9C{-<H)|Y72p)^ftBo{5_f0jlNL#Z&Rv0_m98nVNU8Ld5*(6@`^b#s@bx*f$~ys
z&cxf^y7tzXfEc3OP6&*_(=;sU%mHeY;d9Cjy1cs}2PGTH7CBX)3^Fynubz`Qml=Yp
z&&ELSgWR_{3NB^0{ucyx?+Hui#=M^$L#3kp*xT{}d9@+zM`>D1CWDw}V6R1dN)~=~
z><{Fvro5R=axic>%cBuySmf`?iRwb3x+VVpX(_iRss33+y8N!3VSA^K5F4zfA1R;L
zSr&cj0VQBczoZ%4R0uF?E7Y?Xp@f04Bz(k|!JT@*w<OV=Bcjz|q&=9#2dNfR{4SFW
zV$1T`$&n<~R$P3JKCl0~7{ey|q-t$xy~XC%33f^RY~S41)N`S9%Au>N2}C<J1&TR0
z|L$UoI6~8byEZ(Jrhy3o5mq+u5i^;pVob3`cm<d8U(*X;jdI<e`M)mHmN!u~Kb^L=
z799eE<VL6E$vV{=n4N#|-@BQu@*WwKt&Qf!jO&utu>@3B2MDFD@@l*?Erj}w7SYdD
zEy{ivr`>f=`w(!TbVEJ$`13>)&PxiMhzznb;G1Lf1!Zda1q|1EO@DCGCqHtLVx>XC
zQn%dK4P+4GR##{(PAAa;HYr#~NU`d_FS3||2dId|QmBOZL<GbWxh(`KTUn}1BV2-}
zHL7*2FsSarB6nnyYL0#y!?N6$QXl{YXNWqC`T-7=xlvypV{D9u`JNMS1WtM4F2~Pr
z%W}<%iqy|q7NN$-w#c!uR7q$`zDt}kjm2(e5aYkE;oFJwRUBr|wAZPq;EE+SjPS+C
z4u2LQ0CSk%^Wwk-OHShjLZ|>23WTcofr>aVY*<bBF?!^qZX4|GwYSE2_BiX~1i94Z
zpZgWtB08bwE(!-dwO&`WC|>9weLk~@zmvng{PACjM$#ChLozNAG$yOm6r-jYlp>y@
zfj&^fWK>*o{-bN~<}TDs2)+Yqt@HF?krGnZJn=w9cZ_Ko@?3xgy5ensU2~^pNv-s|
zl~W51jd^1!CjrHw>%t5i=R-(OIw%gd!-Yz@^Z60$2qFok1`~3Vb6_abMFIU#W1y`a
zQJkFMf4H0a!j|5I4Tb?Dmxma^AtiKt*o>>yN8a7tWng4PZj!+Resstq;g<MDAosUR
zI}o`Kc!1%;UT&8$>2rOYtEM`Ni;J58Rs$x3!)}TD`MN|5T^{p0Shjd~Bo$Gw<D#F0
z!|izC+qFEE_}~+3@3&Kl2(rsV6_A>|QuO*M${Nl1UV<F?A&>{4B9QUL5_E1@cUuJ@
zy%0-F;i)%Pe;)@ZetP_1GF0C1gon^}?X`7Y+r?V=Ew^%S;K%OLUSjhP`{B?~q5l;h
zbR1&=cF-6t5M`|xVWX-#R-T{Lh9F}^Lk${&Lvpa;ne#apveo~Mc2obMAD{a4FH03J
z4Wl*!St8PsypQFsEH*ay9*YW27{jcQhLDd?xw4)%5h_6*M%u?2Wz~p=7!PU0f@U}2
zxr+yW8zLDa1wo)%AEA_nM?Nv>!b*fuK%i>f$n%aoeOQ*B4D6HlG{LOpTU@f<`6Th9
zx)KhFQZ(%{6iTA;XbaM_8nGwX(pg#=RMPRcsgvOcO9c;(24%@*u&RH2;X-{yL$q2L
zrT9H=f9Pmx;$BbSx<D2RsDzr)uEi<{5~&RM^A7cJGDSs2x5R;WqF02|?mPgr5paGn
zqOv&@{z}2bXwHnf6q(G(l=l=Za)3b1#R9MF6qwM}t%M-!7g7y|Eeav*H+SUR4oWfm
zdr~^|huQAe$wKol>~-6B5`wGN0HHu7pnyv*tpkX5F=%?&uP1n9zWNpt>Ct@~ms9-l
z`!~a;a5Zx#6s6odRyiB-B#94GqfomfS-Pc=i47}R1x=ogMV+vJ{jy~;0WYpb$M=!<
zhYsYDr%fV)M?`@f7XyuMCrelhTqkNYRAAZPr$S}nWfWBN3~$_j?^UaE&j?$45g?rL
z0#tMKgwR`;BWwd}z`U-+(++t&@_;<-!=3^<T__r8WE1w(&;ZY?J!60&tM_9-*!h<M
z8uggq(Hj4PiqG7|F+e(fCDW-vbme!~y8ckCJ(;8|h)kce;Ge2h;0(4#T>TU0|7?2v
zdt8)kC_y^l{_&{F32<?^)rll0w4S!0rl;#kOn^Qi!F_)75o(Lj*^RQk9RkW-06-hr
zXEYErW=!s}0ZrpfJyZ$TykB0`fzl*{41$h_qd9n<4l?84%k9=1UG+Npwa4ey_2-iI
z;F*h%Ga+Fux4EckAgNxCQmSe7)c8<aQnH6NX)>%hU)M^SirpM#mE2K;16%5M387)z
z)#qe;T|~askZ5lg(|ryqbkSfjA-Y>^)jfQzEpmH0JLkrN`ew49<SpHfbbn;Lm9Zl+
zBdx5$;5PGMN`q}AIWYX>{o><-Uom2p&}xXj8Z&7RB120a^BdUr-0<>sD}DZ$mHfw3
z1JS8x!Be_EKN1dsZA*VBqGlw;q{tH4whB2hch`+U9H~ZfN<Jw5dX5fLw=`gJ^g|6g
zjSY_)e0${&4D*u@j%Iy97Hr$YQoKhftQfb!?j%o%@#NCb1u52qChk!xjvE1m82t-6
z`&}t(&2&39k>mwP|MMj>c<I!aceSL9d>oM2c+txJBj?Z-q=!vGx3^CfE*)V;zbfrW
z<JkLz1WJa%o(iHANvnB}z>g}!1#yLN04fW4_rB%w^KOD8dD-)LxJ_x<TGYSyaJ>n;
z`@2Sal;u_5U_aXxl9;;GR<Dmn$`2h}(+@a}5SSs=4%cCuiEj%aV}_*+beG0rWA?wm
z$Bi*JHvEmX!_!>QRtvLObA@Q~QBuD{OtKi2RPMGkZ1#Fv6Ob=1j{g`H6%|&%q#j-h
zy<m;GMbhwp4=1W^J!Fv7Hq7>f6lPzkYGF$oZtWiq5s_8GmaD6)&7$kg$`GUeU_h9*
z21*J6-vGas54axk7Pui3_yqXAKYiZDjQbHo2)5%Zrr$X%sn2;g^kFylcb3m#GST?(
zdZPPTE^o81YZ2xE%r$n|yf8qwlG#;L|4$cek&8eo2DvwVei--1kjIqisq(uikI=_O
zk$L@79|K|5#gtpl)xQzWdAfvGzd7Vm`9t&@A5D&{?k^JHI3UPEfO(=#)tlP31N8P-
z-z5~#-jwmZq;TG1-rk_@y(__2wDpI5pvwa0@)JYJd&A|~<{}0^BrHiJEUD&)-7Z*6
z4NkZFPUWQ@WAU!(k0E#tYu|?LK2Jz~jy!=#M!?mbyMn@d*QidZq+hzH7tC<$MabE<
zgk6ItzlS7i*e8GZ5XvQj6DizJ+bpjKz8I7X0KyWe6DVa@OcweJFun)PI{o%csie^@
z?b)cT2q~#V_#4BVNU8@w1>Cn0Cc&kAP0py=hA1N^KeUH#-Eqfb>wj&*1c$&EGIu`}
zvz=%VIZ!f|r{8#5mmNR~`r|3gVC|(^2#|l)M3mSm4q`glHZn*M!Xq{32Gl7uYXpHl
zC#4Q7q`4h?59%Fzc6mCQkCBCy{L~Bsnq`Q$1~O>#lFmv9n9fiUlVod`LyG&W{O<Wt
z=9<7U&_pzZJ4zydC2~KkptqZ^S~EXwkkOngiDkp8a3XRjVW%siGmGO=#QY0h8RQIE
z0TYaR{1N*x_*aa~vq;bw)1Iwd65f{?If>N(Vc?rLp>YmATXBlEqJ#yp^Y25Is1tSx
zl<MG>UeR>i$PpgD_xL%Pff|*lBXMMnzFNr51%FRA#j`@FRRofRxD!3b{OJWp{!z-~
znH($7k-wybo#qpMPy-Cn6fjZ}0idsl#ug(bRjY%57;#jKYa!?-lX#IheyJNz2=;i#
zztgx2qnm%TO|OtAZ)WS;<He@yDJAbV3;NsCCZl~!H#FHI{<F3#U_N>Nw(J%TMTvq_
zz&$CV=hTOn#$hUZxAW~P5E~3|r(D9f3#MedA)J@X>yWv4Q%Rj4-|L@{j{g<hoX#(F
z0+83FSQfX|_?r<^eZ2jj2v1rdFk`iE;}4g=r2n~Y6x9rX0_NnaW$eFK<G^daeg6Af
z@=V}gTJ!z7Unr`dKJgx`YQps9NmbxUGr+{wuN%z@VXDd)lWt|{^yAa?BH~!ySDVxo
z-ybteQUNyacv@*J$(8T)p4;)@N~Y3Ykcy@QB42%!NpL*2iHQ}TiSbE)7!?!BHw=Ry
zTq|Z-zXmdOKXsgpRSokzHFwFx>Et6W?sSXD{L<o@z}sxMmJIpu(ht4;QJHAD=z~nN
zsao%)-V^i$&rmxFOi<C;i!4b;HicT_(8$-xw_hd*vySZHjEr?)bO*{=m4`;u2<y1<
zP--riH`G(n&qu1_+({_jcC6}7PLjq-L;tVpRL>K??XX7mKDXQ)smj$#koqztjC_fu
z+#6YcgyAzhcs59_awFQ1hR7oz%2r79m~9(%(R^c}D?IDMK^S5V4wl}{a#FyN3}uv4
zdzqri1tC`)ae{Q_cP&#VB`U#z-8S-QqKWWV@+7pmWTPj0y)*Xpfda?1KEF5xiioD5
zRSgrLe9)649>!xPI<Vhc(Iu@=7fIyDK@qK-2wF`^w-jF{aK0~tsJ>}sWQ^F6K@C&E
z$BJhTK<nb4fKug?ug9)QK)Bfm#p19m2D!j&14a;$4v$r2q*X4vwKgJP$o+C>=JT|?
z-mmi|8!w)md6Twf&=YW5!m=8Eoz+Ye{Aw-d#SXk0E*81py>W$ZeOV#15T`a=1Tao*
zowlAelppfvc<!aQ9*h3iwlJh&V;dj6YAHE-IHzKt07xc#U}+Zu$!3DSUlAKW`pzLh
z+rK$}$!W#^uV@kKUzR|=W&j~lzCfPpD)!^kF;Hqk(C&F~NZI~w-jvkG+_)|Zn6m+P
zni0gOUF0!9d(bVeIYNqz#65$%8Lc_85lixc0OLaR2-$niSg(eeRraBa=JPGtlO8+B
zIe0;};+5rdOxD62@kj@C`c8(X!Iugp=lzVpA&b@N8^7;8nRY@6dP#A(cIg=vw_j&W
zIhB-p|C+)ZCZ3JHcKN795VkHbwyyD>7NoFr^sCW?YLC_0UvtF_eHC<((^V9{U2!4i
z8__*Yd9j)Ba0UO*BTja97;&<@RDX1SL7z)FkA3k>)qsdb2~J~kqr^$W3SQqY_y>0K
z^Uah(Wa1>$UcZ~`>N<KJZ^=CzwT(p_?N#l&cTdFS@=MF=NG!4~Cp8RO8T}lh4Sw(;
zC}u}sTqod}uL$gm5Y^syUe(H_q)%fq-{2Z!_dga*-2bvP-T#cuaTpWH6qYrjYL<KK
zVzXh|`d(-BjM`XUfU42A3-V;Dk_dhypS!xSka(b}-n}dT(-+Dhc5MA74yD2;e*l!%
z+^p<jF3>IM$IpP)j|><}pxN}X7hm~SU2&Y9ona~!g6{L)a1q$bNU9hRb%m!&*KR-v
z0Dz+}H#%U-r@BSftYfH%+~BVHJ=s0gZ7&c+O6<|{tvJFmF)<0A)=>Md3Vnn}a$=#9
z4LFs+M`Ht=kf%dlqA(z&zJeR0uJiwAdOY|;PaXz*2ola(rc(n5grOtxpegXk6#s~N
zBJ#pha98q4GXO~irt+^CV)&b$5aRPL#3AP+Ffcb}d<b(?&k)rB)`jIus*Mm?Ayw$K
z;#2t6_BItM<Ymj-QkpzP<d-!r=*Kkhjnk^~4n`&PY1`6#P(}xTl5T=($R5;-cNyyE
z?0YuR@v;pHYEIx`pN&VVaQXA28s&!eT>4mAtr2+-W11I|@Jd7z>)%J$>(gInn%K8C
z-Tz27NB7Af^_i}!S*KEIQu1>(3YQzz(3j!bV`*%@{VB}cRrw{xUZle$(qixs^*_R)
zI-D_~_)7K}Wf~PqCaI!Vasc4e=xCrWoW7KKUb$j3xyj&hy^3GRZvnllWV)xdXL)oH
zFH}M`J>QQ2_aZ%DHzEo&n;~R>3k)wAr49~H>2)@%u9F2PStKDJON^Ec5Stb8BRf~2
z5l_jgr}3PgN1++u3rJn2L(5T(I-n~$SDlF_1s;+Gr_Ca%|IjmSsgqe^(mHk(SfXIl
zBpdyjWU)&9!30BKQ+z-oR=^AjFEKQEer~UCjqA%sa*|5zIj6vX8-R|PVDiD@H1zcD
zO-=Flr*MGd1jFl(dli7lh(b%Qu`aT>jf>o+)igaVHvkf#tqhw=j;r9)`5nC(0yE=Z
z-XM4+)u4lSaMXlmU%qSug6XfRUh7^*EN}1~v<$0uHPis9%X{&b?DNBtT;hi>Pb;td
zK=CTjXNTaZ2v2sF1~kRXwcsdaDVI=Y6-}jnG0ZP3LphrJ^=GBo<*V`xfwr-u$V~K{
z@dT}15LLi`HASuQznTI##0M16Wj`=aG@&*ap@804#%e$ba`T9(yr0|NgEL2f=)$UF
zU|{d}d+3b!bD(>k5pcHU4IcVZ6G7L63g7i~g6(Bzm2s(rusG}rThZ%rVt4!neD7EQ
z%jviO_Awql(SDmD<urc&Q!r5T+k+mvi9~l0J#3>3V^OYh$vu$_xZ&r~gt{ki-p`ww
z9Q+=#I3tpUOG;ObK*Dd9*y425-W?8DQte=rP^_0nofDaRk>rf`eoq8gga!&fD6%&W
zXLs1}T6HtLXRpdq5<<ID=2Q~BUEJXksrh^2j7B6Gfh&5Oqo4DkBEILC+sZ+%xkBzT
z?a`xZUWr0w<>cWHg%5?5l`je6@#9S?pi9)pB4mJ;oFPL&MIDoKa|&kycmfT13_Ag!
zo56qyY10G@98?D0C-vlp)#@rDcmrhadU5lRr}fvZ^e;KcO>|e$p{N8~6H>uvysyt!
z<29C(1>^*q%AyZuS&lu(`osFo&a~v7I|-~-&WQ;L#`5sU*GY>aGqbasm93{i%#Sy?
zk5uAF&=UC6t%y24-(?QgB-tC;oU5Ad4g_<LbQ6y^lDtC2DVYd^UfVpcyxL1_kiB?k
zkkIxDZa&`09I3<E!sY0$Sjsuw=DTkEw?OdEYdo;ggA5MIbNa2t>Ev@lr)S-235S3j
zzd{zt>IVfVqMC~;%$LhR=H}+GFmlKs*q{#%#G6Q^+43jS)X#Vn4X1!VYawqws*o)3
z`}a@6&rfoy`ugzUe<b_@WCE&jNtlb_3*jX4m`#FYEUOPtup6gB(I&9INaNzrELauP
zfUS5{C0GfuLx*N>;vDe>Pq~U<j#mDf%OiBuhPWEdo9h!$!I-K=2x!Z>Y&}s2H?Lwu
zeqQut0;%PGEsQ%bV!-_5*=8Y+(Y7Z0K-G%Y{Kw6o^5i?G%o+nNEfE3a+-GO+mbv+4
zoi6s>e-_$fCg=iy-3M;UZ6n~OL_;VGHv9qX;tPk`r2TEM@(C9Y557&CbNr!?%@0^&
z+7GX1V`<qn?hkRPYiK~wOS&+KKzo|5Pw9LYJv^*fp<M$rF8WlF5Ps}e2!btQk+eO>
z6mmQ60(_7Ea%Zq|IZP2)+s-BL%V%wu>X73^9~q<-D76oO9cFMSs$B<+q+e%L`FG-_
zz-1Uyyp+Ka-l$Idv=XOy)ZdJjMdZC@XbVfu^e9E%l)M0bcIcd0YLW%?8)+imZmF&!
z$e3_pCX<4~US+>N!pXh~X933>z!4o#zCrN&{tmgmw?yRL$29@blD8=j+t-KFV=c>J
z=p>_AORwHa`?=87GVgnU=Y$Bk3L;U#j~_qQ`GJj9>mRN986?F|q^;?r3g&&~TY=?1
zl%b#Bsly3kS#C<cQqzcQXlhae28Q>rO8FA<@U<HbX-F~AN@y-0rU+|T74(#ahS2AJ
z>NSdPZBfyEPlhr6KZJb+RMcJf?l9B<0z)?pjndsRG$=?~fPi$PAR<T%Jqk!SNF$1L
zNl1&NbO<Vqga`uCanFF?TKBH||L$FD)_T`Fj5EKp&(3G>^Bk(==S${Sr6;|Xc=GTJ
zGP}7ZLd?xIHEA6JrEPtI&>GCX6z6zFQFfT~%H8{$Ou3%AXw7vsEkxs1oC_sWS1O=-
z8soaHQO~28Y*O%uqOvEcp}0+pc{Mf3E1xR%HViI6PcCpUN2(j0IY5aa4iJK4&auEl
z@WF^qJPRJ?n77anQ)30tcX^=i;T>o}7jADh(Js$V#FF1oubX%=VOs9*sKLi3^tP|)
z!!{hJ=^A3+4GF>mDb|g806PYe)5pffUeQ#B5rDopt7dimghcnJCKx>S=UP!|C|v%C
z!fI}q3#oBt-mtZp3YWLSdOljH2lwgF*#r|zkxm6Eyqa9ih#hU#v<Mc3AA+}Y=K@=F
z1&zXPHdiyfY|&6|nTcMRkz^gUr=`dAtS}Fn`{a!7VAJ7vZ{x#8%`{YSH=1py3*hnj
zy;LAW3}Cmo73wZ<wOLt(PU*T*#0oeGnIrjR*Qkmu>nU6B4@-&qcNsiJ=X6(YG=r3e
zr_3SyC2|H<RaG@Rr@%Kq?@i2T(jw7;TVJvA=&@pNQ^%*mfgoKLJ`3nV#cY3&Dvr>q
z8`tXi5SPq7Ya_2>296}vXt+pVyrm)CGqEeUb$p7~#PULZ{}%Zrvt&oc`3v`HyJqyb
z$gm~~u8*xrI!s{jUbQUxIY;-mk!5l9j(aIqS#by}!t9&Ljrv>*PmP!CZhvxnro9ID
z2}TZ${|*uD4j~%g#>xT3e_%eqSP?KBc4XIYyR_ZeW&>}8$FCmw8>mUDsy1#ANOOP{
zx&B~qZ43YbwB&QrRu_9z2bf>@zEF+n*20sh8yHmR=KRlo`uCaSy{P~vlCS&;XM8uv
z0uBCf0QU$x3;vA*OZkaT#f+(c&76MT&pz2JItW_8SAOPrJY&l#*2iI^0LNsmoVx?a
z_z4+eF>>V4cEaDY!shAzcTY<&BL6^e_t7{7rb!_Wp~BLf6G@`1@P7QboK-pb@3hM#
zuqFnC_d6IItD53%hQ>MT6%ve<GMZEys%GinSkcUHvYfJmgzyR(>o~xCW0^H9W{ql9
zZMI?%!O^q15>N8d2vrVIhn5=VTb_;&(WFWiTe#9mfQ&{!!7dm$Ev(i;tunlu*{wac
zF|>RlK^bN*$$kessEVIsS^Oq2@v2v^r(!WJpGC=U<wmg3()3GGIl{lKi&lR^k*!w>
z<nFj6af=`8<b_DhC3FgN0D9>m(gF2bw`!y(F#MHe>#zgB!1cKXU~LZayu6MRL`1Dj
zU^ov8-L4x9_8<zvx=_W}RBYCKeKs=guqENH=?nXj0$h{03?-$&dzCiYE!AgSTCe5k
zk{&$0Pa{eFeKVmh=$9LXB-tskh?!BDdBEekq0`rAa71caTI71<_V)JgTKsfRZlngD
zUevRLxiD6dPuRrjjE`}?NdHU^_))S?j0K&mu#?AmFm{bHfGiRWBZQv+0WHWQ%y{0F
z6Ho4U_RWX=uHH}bmopo<p}{5-V07a~3>j%{UEaxWa#a|s@&WI`RV+4<AKcDMgBPZ<
zY-yb8#0jGh9la%1RXUF@(k6hj|Bi78W5dM~9zXx{hr7>ea1ITk(_{IEFk-Ruv~zo&
zG|?H_|8N1oJz$61l8d;?QV4P6ux9cK2ll-V=%M3pNdZ2YZlbf~u8-rs*R5e!(>MtI
zMFJL+KKZ@98&AuTd=ygOQZc<^6ZoFMJ}1AYMI^sfKlFB!N7OfNkFTvI?eU89Av_X7
zLB3xXsU~Rdlo_)1$;XCyOg>(}{=>nj>zfFzK5m=9wXo|Y0}7kR;JU009%FXQ);Ypp
zSV|F3CH_2|_)X&L0(e-MN3wZ9CuB$+6}^As$|+mJ^ynz%R;sm?)$DSb>+hI6gnQ^+
zQ!iY><`cK1LuDlEcXF%Wj{#h$Y+}}Rl3$AW%}>p5WHt5muIbgyhMCh6R%bL()bDHs
z99W(0LT6;bmv`^p{Z@S<z4-#dN@qpF(L;ZFJGP973Oc>tv@Z_`hz4#ATPCx?!7=TJ
zgmDr#$zaccqZ2-f(ztx8T991^obUbcKljBXx;D0tXK(Xz(qbu<tO01-VJ?OFi@Rp+
z^!IE+R;y=^XWl4+;ZYefUD=qa7cw(=ks;&(X=kR>dfzsPMr7t=$Y0DUy>;e~jF)hf
zrNRnAHP-u|O~=LOO)H56wZn<{_Gu8Stq&uPLxWp<l*Csaxv~-+`>e};2@!j!K}>zv
zLixqL@?;<vPO<2J)fkP<74mqUc|9|#gENk?PvPpa=-p=m9=*5cIPXnp6E`Vj?1#4n
zJ$M!W@W$*Ap+3~$nG2e5QGL=Q<w%QIU$UCzLyN1?YQsdm!2X{F_InyB)D*gY(O&s0
zB+4%q8Dwq5z8s$^0sbJPv2`<WCVtWyC-@{fI=ZZPpLiS`z@+7~!ml*}C-%5O_3-Y8
ziFRM60t+~yW;&QuT386%Y&sT56nHSj{-Ui(FX9-SV^C=NTkQG}H20snHNVP{`m^7B
z&U7=8k090m*JOF99KyOc=jb;akq21RV08=aqzYmUYbU(7bacW-J;A8hzKlN^6&fHU
zpFa@AJYZ`L>|F}{RYJZLcH-kfKz-%SqZ_0@Ro5T2X-?<Bf@Lo<4{p#`S>Zr-rM=l1
zXz};Yk>UM4*^!Z|@qSuyeACU{UD$oOFH2zUSEI~%RSay?GOv%*(ZK=H?0Yc=&JDFV
z2ODWEOYRttQ%&K~#6ll#iiv_B2mDlaPrA>KxySu0TMMPp41^13f$|g;fgh^j?M*&E
zd&Rj9VR%is>Bo3D%5osuG+6E8>KP$aQ7r3zntROxoc9uhxc+L+q8wvLWOjPwB@SCm
zcE&idW5kBI?oO)Ubi1Ys<l*|gx5zi?yqB++Af*2Gi-oer;nPr(VeI=fZV#roCN?A{
z|8Bj@S9{pA_TEwOhPnS{gKc?f)AbbU6&A2vXe-R4cI)U&m%y%E!D79NrjO+N*7K&O
zhWhQ>x1Cfvw{DRX=wy-z?{40L-=zfzfh0?eo%W3zB1;3Q;=OS4r*D4!_?^(C;VV)L
zCfg!b@46l~m=zTjwXcm85ep<FB!ud+uF+Sd^_cci2cko}6ful)V47a<OH^?BBIDwA
zF2)uDF;s@LlPgrJ2y!^>+Z~<zwsD75AK0T0cfhf$=bYd7cHe_cpW@nF95o=E-BQ#r
z2HPhIb>P;Q)qB>QJyk!4#2mQ|s2`^j!Fla_rs~rj;;ZK^)agyXO;<U}6l~QJC4{$V
z9)sZ9r&3}Q;vitLZ_|IewPbmpI-sSg`Fp(UA2=T_`l&(59NWR#$~dQugmr}vE1kvz
zawj&NFm~xU90eLW)LkpKXQc@`Yt_@!t4(c9T%2HJAfC@T&YPoSYnDnMCulXygdzu5
z^uF{nfxklNh6vgp<{H#m72nPKlEJ86x<_btu0Q5Hrxk{lGv*ItH4SiinEMap0hMm}
z_&|v_^MLPRp#AQ@{=@D!ENu)IFJ^RYR~7VFz}aFlS`rMYwlw2CyNs7e4on=Vrcj-K
zUgXSda=|a}`R&SYBC&7z&AUC02TotzdU5d>D3se!a3&6oZ_(Jap0t6%>D^)eUP6m7
zwJXvAo&M|J)aiv*m4atKlGr4ouO_LRm5q|g3~=7>spzKAPtcZ*p8m>c5Mh#3e-iaH
z<!P#_M%nK~k;wX>Qb~#XipeBORzg4dT1I)P4(FG@bre7Cs?$T6OOK2HaNRaunm){L
ztUK;+?dHxf?-|B~XTTN&ivF%=ucnB=axk5v*Z-J?cTXC{s{LVd)sv^^Uu8)lyzkZ{
zGx>Mf2={niGU>A4)9Xl_WPqzi(i@98IO$nNcBZb(a6BC<EWc?O!Rf$uO(T$s_nJe8
zDV$PqwL$iL=eyVbZ%|eCH2F5jif%U4%X+#<yKin@|IwJS^U?i5`)Qb``=OXE4@zTa
z&CP`a3FUyBK_8#;(V1B=(h+ooLrztk7r3W<MzSk@GB<p3ESIJy=ZQhC;lh1p4d;1T
zv-@ACZ&jWAY&JOI7jjtld5GOXa-f5Ye_)ME(xprpuy}q)PbpETjfRw#HQ0X0=hf3e
zLfW)Wq*{NL*C=bYI1YiGB`ygM>GETj5WFt->`eP0e!ju`M13{Xv_Yn$lVg?zH)`M8
ziEUI#SP}(>Y6at0eMahqok#GG461kvE!9N6-I>niKdZHP=^X0JDSQ5eTg;XXi(G>M
zix8n-5uJ`l5Dg)SMsfsvxL&n9lN;0fsg0Z<qH&jD!tEr*_rdjkIzq&7V|_XU=5rlM
zNE3ydok_InYS2GyNQD>~&(TandxfEKW9O?4zfR(w@k^*HLpjN_AUP_!PSiS3xPqMY
z9NpV79%7sDaIH~%727g0gwXb^bO&A&57s<x7fcJA`z12NEKl-EKP^^Bsj85(k1&pd
zh&OIrKbkj73guh8^FFJ!YS&*eeRg_3R|xqGRl~EBD<@VP#3TyguaFcNZNn3=4<=cj
zN^v*QDL$M4G(6tTA8T4C2X$2G{g~DLr->@5@YW19u<pn@HD^RjK4lnr-K>Ga8CFC=
z(NEs9+bTjYc2*lvLRx$kg*FvTOjHAZvbhCLj5=R`_zDMn7`(1&AxbhidF8ZI*#kz&
zh5T~fjOyf_F(19Sw#Yp!c;?dl9ro2_dhV_7_eU11Tu3aH`U%OumCsj~?k)~}W|m|N
zsh3fJ;sj$aE3mr==?6!kTLmR^!Xh+UUDI0gv?FzubRzd!loiz=WE?MURCUKI-hspf
zQwh(aS=c2}ZIF$>D@0@`HFqM+DPe^ZR=tA*QzS3hwAfE^%L8j99{8r65fkHnU|bu-
zJ5Lc!o4BF!4CPF*s#v65q@`e4^j1%SW3=0);WwMHQ`6hk0W+}VRRnlQnemuP1Qt1X
zp}F7_VdIoYl~S6UH`&3TM7aqOsrQA{FT|tkg;D(bhbhBs1bK0g8qLoVv|A&CI)<zY
zF-Ox+zkAt!bqntwKFpbWudf57H!AqJp8KFPZDcV3pGE(T{1d!t@1T*)zC=nt9GJ)c
zg1`HgC|6F9MSw=@ONxlC)^rP5A~PveJ$-*0Ne7nA@f9l7EQVMrK3Z9CviP*8%YjW)
zV&c|DDKYGJ1UX`}eQH62j4Fg5?sZ;w5|@~tU-mcKo!vfrO5?3Ml>UP8VM#9a82tTO
ztE=Tpt#ZLwyJ2spXa#B$lJnKN?p3TnA{avLcV(?p<B<82|7s8g5H`2Ed-vFYt)wdI
zL5BJQr7?0s1oTj#*KNCd2I8qT5g9lu+&P&%8Kq8N-ihPzpzMg{_ck6uH=FjGzIhBt
zc}z`ce7rUsVaxLHl_3t69weBUE2#0zwx)DYt?3@Ly*3c9O6~cH)wU77JtQKv$)lPJ
zKSuG+@SYzjzp5EK&lV}2L4mYWc7`B&@Q<~OxVTc)tf#6ncQQ&>kr$yaM8=7T6`B}-
zOqZ>^>~<|)XrUutn<4#hh#3*wV#4YqR9r>K2J>fZavs62UiQ9*(tTy=w<r45{PeF7
zBNtdoJUk1+#!1v|kMRQ#0u^%fy0Rl7f-NaL<id{WC~@Kae97z=8d4}1@WC(f{fU-+
z3=XJ<{n-Bg9n^{cLgR`5Wo;uWslJHx*G%_PTx>Rk?JDo5$7<vUD+@Y{<I}(49nPqQ
zA1`Sf))6;!B^5dd=<)-u2K;2nfq5Jl$KYI<E+p$ZUV|`3hAf}mDL1Eoi%WH7(hp8k
z*w{uxmn<i+$c?6T5E)`JpGH&ZuB`b61br0x#YU&7R1o>vDj`L}XgO+-MqF%Pd4@~D
zL8YLXOv_5Z{u6~C<;y;g(L^dWB=h3~R{UNRmg8j6js}z?8VaRE=9!a8<6drPBhLKM
zU@8>dc(d~*IZPKabmaxGf9k%N3!xak#`wKEeg#z;&{YoL_co&fqX6Iblcr8ti#wX<
z&*P!!SI@?_QmNRt#_ozPEgQSWg@)o$ArWgqO+)MFlgn*rFoBF(n2A?B$fEl$m7~V4
zl3XlQ#Vm;<wu4Jv_?fiFM^Sk^k*;v86J2N?OqD8G97#NrC?V{PtCC;VZAU8N45+<N
zn^FMbJr=uBMxFHG5bgU%*h;t^u4NN{KK~47?)z3{Ng=cT!arkK2F*0sbXbsN|0e8L
zA>2>eB|2kGwmT;5T<OjOYbseEW=#~1J`&g{B_G=x5Yxab8n|{ABLhf`XZJllXh5FA
zqiYXeN^8HmezcM<La7TOdl3?X`5Y2T#Ri`kh^0zp?vF;U5e(|&-PBUhTQmE)A>W#J
zE`I|{<$1HkvyU&y50<B;-FEnEdva96^SIbiTh{p3v~;ncDmc-q$uMGZde$}^|E*8N
zaCtlI;*fi7FL4I(Kl#POcEf5Q)^M^(G--115M!3Jjape;41!iMkm^=4-XM)#n^eP-
z4F{RrVloB03^E?8EBDI-XWGw+%b|D=*CO~gim_V`QW4QYfmi&s{QO6AeRsxbnmDWe
z9_KKfwV!Li6%aEY)jg%x(CvAfZoP+8C)!~3gcx<Oppz!JR0p|#>L5qdIUft-I1Mn+
zjJqP917X7nesd{>4JAx0n6}<-gc0PSKpL=1kw0tA*l?BObW@KIVX+@Ok1|p+2g!w7
zZ*gs}oV=19Bmmk$1Zy&9<0(Y8ocuH-y!I3ojTE$al{#cFg0D{dC&~`88qCE`xix(p
zh^-Ka6LG*s<Qz*zmF$>9Dl^ZfK^rkHc<+NQo=aJiQ~6h$?JfnDxXq?C-V7PfJyk-u
z=t1r<Ns1y}K+x*DJ%(yZQDOFYwNkybl%bS8xF~H*u>ArNBb=%Y&G=~a&cV{^9mc2Y
zM8v!g*=}aF?cRQ#{5;e8xQnb=%FuiNcZjJLSm#w%5Cm>e$Bz7q4;=sEg8&WDO^)bY
z{9By2M2qNf;rFGUDP3sM;4L7y`xO}l1HIA6d7vD@oP7r&Th>NLFUZeRU$x`Jp6&DC
z!XH1QdVIy2;^5(#Pu<3z>{6O*v-mvZ*%qr3(h65<C+6;XbN52hiw{|nP#7nIWDA#Q
z>NA=tLaSxd@;$3k5Eb1)4dNOyb6J0d<D?k$-m%z%X2)r6G8lq?!RRzpzGsAO1u)`R
z9fe~pFlwe)ZNU3CV=WbzAQZ}XywGyB(~iQ;rY{A`?J`Kn{<y`&<2mt&0EI9#PIB7P
zYHISjP{8BE?wR3sm!$IT9^P(Nd=?J*de4E;9gLyiVN~TIl{EgPs`y}3#d|oSTg1Mz
z(q@t!&xw~E@5+EAZekpg1Y<`%DY^u>l*o9<3+;bt#I1`o;<_F^M?gGzRwis7|LBGO
z(f02$d(I2xk@=P1PINc0<ph^#@k_&ILW)^`aA7};8exMJna72(ijfAO{7L=<CT8iz
z2|gMmr&L5nUsYz<6}G^SXJCa+9WJfdcEG&FJQI-&FapHOdu8U?E}lcGi9;HMW&^3k
zLo5=})rL628^yI&fL%z$^S9jFqM|tO)5qPD?e}+xi6%zj#I#v;1ysVx<%sRzGh6Q!
z+CQ0O7UqexspFCkyRfuWdSQu~S6>OS<@>%lh0`AnMcqlrWGQQYvOeBVz5PEr*n>eC
zLHau!$;e?Asf3`{P_$cNIq7Bg=}53uY2`>zp+NA259{cK&kX!d>p|2C_u3?l)s2$Z
zyUpqbf~Z+Z7yWHP{sA$7)$lF+ZZNxkwn#AoZNuh((e~|8rh?-XEiE(zStLCW7;Quu
zGJNO@rR~}YMKiM`(LEK{D#;vdUfQn7$I!rtS)?(6%Lgz^_S#9_>E`O!+%O+W&k`T;
z9mmy?H&J{uwWXuuV?A#&{kU`#MD>L5&EgT)&|B;V=6GCeL8k4K6Iip~Oj#EGggtZ<
zco|G3Zr<`?DVuES(AdmM=3%`N8bzg%I&#+4;#YiywyfaSex=@U^-UUs|2gLZmu(N3
z+)H(WE^rAxqL}o5=Ap8Z3u)t*7X9aGG*H0NkVy!tLY<Ky<VrmsrHOxhG^jI*Cs=V!
zOcP6mN<iifBMbCql0=sRv!BY3l(UkfUGaJ>w(Esit!RcP$!b*);b207U2`^3Bs{Ak
z(B`3vniWdIPX*STnUP-|Vk$(TrFJt5x9kPOmEmE|n^yS=cO=*X1s=$xRTP@dd^x<;
z8Rb8SW``3%yG?oR2KN5eRtQz#X{oZyALz06ktK~Qo#TNJlse#SY#bGn6Zv%bJT2l#
zu`)FbZn>4ESTSJwT*KG*<43V5j90;AorKge2A5u?>n4h{cqiu}E&<0&2rm4EkpM{|
zCfn9m2J1Gcj8E4{07lX^v;6Ht;R^S=VSn6&ObJ|gg6)lP4qcIe&Q3M2-OQ+7hLM67
zUw<gF^B|x>k%hD2tUm5=btE?`Sc42shM33dfVA@SBb3UNa2SX1omt^RODPlvNmqk}
zax`mGk!h;oG`--aaDgB^m#mLDBg6SOtxpt~6X{rdt=RaV!9~p%9q^Y=MNKH~?o+t!
zeRD1SSvYK_HVE;^qzhAX8$35Lt`3mvBq|T$#}};nTvr!y76`ZO;!;Tb{`C9T#Z%rL
zNl<0cgUli(^!6g-r6brTn^j)-vATB)+RX+;QZXK$%ZbS@tKhS?-Bs^7e(Dv2+;TYK
zO=h8y*_pG1D<NX)3O{ii@-g($4~4yh=EboI(<C)21nt8hnIl#<Aq!j$tcXc0eJuV@
z=lB1fi36;i-aSm0;c0J#)^jo8`(}o-)BTid4?ax>eL$AZ6e@*==0{eX`{i0ko)sN;
zviteV+P(rw>&J>`b8O#9luO^7`i7s81>!9tw1fh2oA0s9A?ahTw(I$8$u5d|_~pSy
z58LpIMToWYU~zwczHpCV+A9{yDJe0nnRGJvYW*`aS!N^&Q)=mBN-aY^cJ9kkD>@9^
zzxxxb-GW?$79`i?HRg;07*~)N3{kjQV8tpO`HmB*Kz6Ef`*_~9{e=N!DD;tiD$Wg7
zp~v$aDRN6*m7FRWFPXITZ==3`X+tyl{Dp|&HQiIpRcQHBdafuG;LNTY77Q*A;hBig
zL~~*31$<|27aW^0ih@zx(LjBHv+|iXs_cEY6}<2I-NR($k<AM=)WPxT!csdO%Z(`J
z@BR6JSU@~tw$+YOh&=uXyOs9Qvg<-H9$c!$t-zEwdgqwEK1e~L3R!WikaA~gkmg29
z=<8XN^P<vCj%k<5YNzJ!HGbS@T%gh>##GusjbWF*4hP&<`wG>@My`Rtto(x=qsYa|
zQJ9s3gf!$GH&}V2^4ibr%)+&EenUcF6bWpavK+d20ipS?zn#zGc%7dnMF>IK@SHrb
z@=;&Mm7I@q@HGgk21k!`pa-X?{35B=cz%&+3jM64Aw#>!rzrlk2((f!0)fJ1=Nmjy
zC8F-3Hg*z_by8@Ph?M(sw9Eh+^!`0g^5YW|49B!Nzx5xMETo_*o1D$wLox#W<(+2d
zex~&biA<B^e;9iBfv3{4%7XZutB__`ModY%N5<pb#0sgbJtexI{d1oZ(BVaZ0kG9M
zevXN|$e<~?ft&k8R}PFk0IWyz9_OnVjFAtk10x@)ElAh%Aj`@``{k^8f2tjD8u;k=
zx?wN`|L@boJS&G$;kDktSP_d?aX2D4@FDYG#hYECab~f^<45;!N&l)zp*Hv;bQLqs
z;kdK7B#PJ_kZ6jm78So1Izn-}^5Coc>#Pw%=VDdN+CDFWnMKLy2Yb)j|L`O4|5Sfq
z=VTXceY6`BM9Rqiz1~A~Z|C%AApWP-aAjP+W0JrWjs?+qz2fo8`nl*B@BDd$9To;p
zK(h`q{cM_SCHbP}g;cNVegO^GgBz`o*{!WRSP#w?TW89vYdpxvpo<U%6$D2HX31uX
zuQD%yge*8v0RfdT4~}R?kV|mb7E9@4atRFzEWbpp5eGMcF*V@l4?;#I^GN`@@NQ#l
z;E)>QAy{SJhw}rE$5nUwyLKsRVjz0#Zn|K5Xk)4C<~6s%V$mEtcBetlV<V51<9AqQ
zCJ<KaJP2G4**9A&T8pbtx@1!n9s$J?Z@Pl?KR!=;S`c=M8-fF7jhbK7XMyQ|!C12T
zgpNn2-AT(n`xyXl#}@JYAxFhvo_<y>AB-Ao6fTmU6uau4Qc$4g|GqGYw#_d2iK%zo
zj)-N|(u#dB`4pbJ>u3{KHp7`{fpZnii9nxSu=$YvtL=XOB3c=*LHHo!APq+Y(GBWk
zjqSC^zb-@ECs@bd?7#01E3IqJ5P#Q)bP^|6FtzCk_*mCKsQBfloYgN<ZkNs~Eevv@
zK$flslJ14EzWau$7#rcb@q9yRHdE(B=gVQcv52Rh&V9>In^x=EKVonFg_9LRlrj!9
z`i&pj)tTjy_?p234AS;_Pwn7bA~+pTU6vKnDMfa3Cu<z+!oWu@FdnTGJu=$t015FN
z9F-tcw8gYDpvjf|rc2FtFU$CW5ATD9rwM+(NpW@VKf8n9WX9-RKQ)x`{Qb*Jb&RNN
zBZ}L7OFPY5fiRem$q*4>Au3_8NkogV6Vk*FJAY4$Z7J^2WhXKZW4wLu;c||8{MhJ0
zTlfpX5_U6R19qC%68H94#3y&>1Tm&W0Zi%8v5W4qLSN*@Wa0bG!lum0ds%b`g{{Xu
zE0Jo;nK+KXpn{>WCK&iHc*z7}s@A7CM5b{#u_{2Lj$Xv>dN19ZPQu`mC!N~IO<7Y5
z4x5d##(t;M-P^10U4{ooweM`~2RX@Fy?e5T^H{l<j2GDg@$}Dl$r_Q|N}|=v%DDB3
zR4SDs*A2Og-3)n&wfIMYK8sczjpGnGi1lWW;^0&}L0X-`xarBNK42eC0-aOM<pHz8
z80O_0KW}AN*ERL_?9ZGdX8Kdu|7OUfJa*tCJV!ge(?c^o5^KXT2orv&=2xM|^i40k
ze-e({c27SbNUa<7qdh`>owcWodT@Y%qv{K3%qT~sX|dc++fk_VIhB93amhE$@dsfu
z`a5qysO3ll3ejz<@apxY#R*~H%>qcyR(*L5Nbcik>hX?A1sgx+I3{mh!G#l;AxSQ5
zll%ro#VB6JwQ~i4qreJeJ_=jvxPI|+rz#uU+Y74XNW@<#?E0e{Ek$Lx$|hBh-ln_l
zsd%j&vg}4SCW(#iMkget39^SaX3ay<IN)A8wGUYqP=-21hO{C?8+NSOCK0`EP+G8{
z+aUdjVH8}&PTI(^Q^jX6;_A-yyv=+#<%xyKOpQ9}sg5c>ab#o@54&ZlFa=XiO^LvW
z>GL9{Nu^PkBbKGeQ{M%@>juj?lC!Y|_*!!vo5bbHHj^o6(t>RJ_1fO5iMOrPN34M8
z(}3G+JEV2{@V(5cNdr=CqcOtdq=8B7hU&+<>;4$ul!TGg1KC&Umy(kD2Lykbc*Va>
zLF=_DS@Qn@f|+h&oK*l+uPO5QvtVv!p`}?`qqh%8b;vTSXEkmh9_@dST$*ogeA^cG
zL*IDfL8>86d7DVM)dAOej6g=>JBsG(mEs|K!Ut@j5f2(T@j6KRp?GE;DB~cr-(omw
z5vY<656v5hI3`=DDUIGqh()zUthBgj2e7fHY;8(%B?n&>-Oyc)BDR)DAxE=lF;o}F
z@b!6Aw>{k{U61<AQpz&cIynM$_hmfQqZ?uFAWk87#K(I$ePX*dL^)yl&LXm8yY#0-
zV(HIu&Eox_Cq-$z=ljRSR#6YeCHD@(fw!u|c&p!2j~D-WD+1uH#Bt%5A_7o%O8;cJ
zWtz@Ej0_P#c!3TQ>clN;AjB`xL2*HwTY3E$V9CbL{=+bi&A@9x^^5~ouVZBxZN0{W
zkAw(^=QlH%Z(4VB4rtVtgpWqeXu_9TVesAB1p3kO>?=c5at5XN@<-ME7O>_YGiOSi
zFbODdT-R<r8jpAkBRY|2vcrNxVeG%CPQNaA^K0(WciOa224CsC-a#S5Tq&-`Rr<!p
zbXkVB=uk05fu4d`Y3EF;TI=|5`k|fiq^kOcf$=mC5zT(|=S&8+8Q;?Bur9e`GmbQp
zcL~O&-;KThuDwjefC2=ZAQCCjylMx@4TxGiFD`*2z2WV0J!TNk#DcPcNO0XRg_Quj
z)j(`Q=2iY!<TeHnSee<S;5<+0qpK1J`Oj3U(8k?hNcujhyv&0y^;Yl1ZU{!6WkJ!m
zKHmN`c+>l-bMzd8Jg0nv;GhO^#;*4@_Q8FBcBigFNJXv!xVwGiz0lT<pCP^-t&>?7
zwi9nN@s}zsRcbhC^6`~ERyxjr%<5**ZRqp0S7p|?1SLZ8t$TD_)>BH14|C+~vK0u;
zMp1G&WN_guyr*dqw8}c#<!8fc<IG0Vb3w~Pq|@f3W8z(;L`Pi|f-V9IeP%gJGvN~-
zH0nqD<HEm8YV9%92^(ER_;_GN1P`Q0KyU-TH;V)M*w;=QOGUHyvzpfhoEZ9F;KXh&
z;AKv31DPD(?i;G5!N??BtaRiWbjH8=-Ye;)$6j7WK{7kCX&Ztv9(S-*v~^a;^Yv=z
zPOA7u)@2RwT@``}K9D7!Kh7ceDNaAu`uZyt>oB$o795I9Ht!$+EFot!l!~)>MD8E@
zt+*rcV(M-^m7bzspPTR6$>L#4j&e%Bsv=7<q!@M7oDxP?`RcQZf7wz2p}1Y%j($Lh
z0*!xZp-d#?&-eY_o@TQjO4I@-@1HI^hA@j0cGxhCcbk>|xaloQs1hne$`LJx$!A>q
zr7SM7k>P)ql3&Vdyo_lIr4alVFgaEm<(G4^uCAcxC-MGjRLeArpa&EF-shx&xCCH)
z<KDM7>@rgi0@9z2TiqWXy~$4X!~jd>?%U1Ah@(FZH@PEC%KAIwtiHak9IMX!3T0<k
z6A}qYHR8U7D#V(?H7JpRsJI~md0Gf)Mc$zz2%N2qj(=502_m+1{!CByF%~!G)JfF(
zmI<WS=HNfSGVwEAxi^|luM(!DZWj+Xij#Jr80n!=v7-^?R@e?I&mv<l!|jxGPfB`I
z;BqxQ>D^ZL+;b{jaM(|!e!M@X`OJ&^tIZ_jveWi|r1{av?tjo?Y*I8a`-N(R{6ADf
z@Aco@Ode8N>e^7`@HulnBuBhxplL%1a_dBNAPsSTus<<BR(OzIljh<-WU#jWe9g=D
zZIOL!F`fc1FQ26G=Ml|M#7*W{F-)^7wLiBG(~5aVO^c`7lpM81cNIHnh)1V<Y(fjg
z_u=ujZYkH?%ZAuaT<k{D+X7!Kr!J>cT(i>?n)${iY1^4=d>1iCk6wX%49c9)vJs#y
zVNwRjs!>kl5OeOQL^?D?c)j8F;@i6t0Q%+}hGD5JD81DqQ;Fn@#oja06Ogjyep|Yu
z%D&uoq6$znT8yUHyp__u)D#g+1_*qrH6K@l6jalHc9Cm1un!PQF?|K7yapd1$7TNk
ze$jsz+_ekEl$3rsE7pcIq>OR}!~4WTI+WTk^Z7ZW0bFzyWw-jW(zk&E^dDT81}&Kr
z1)Il;1s$GiIQ!mxTeO)EMKd2YnZ8;0V>LN@wPJhQ%)SFkg+%UVnfmhHC?lg6dgK&<
zrHG=qwsMtCA*)LbB{WtRV{bbUPC!vnVrhl@!J_h@MIrp`L0`>=b?_BhxV~D8c~9Tl
zJG1`rX%T`>TWLqr&yicR`y<qJe}e>HqImKYZTuPvw0xY=ViE$01)+yM6bd(03}NLK
znTKuzX6ijg*hj4#6aXb?16mPNhP&_xp!C3-7^z&gCGCbpDjuUT=vhdC!SGdFIOjtP
z_Dkvg?*V5B1RMv`>+9#joVyg_K@UrE{(-JkzS4vDjN!DN=j(2*RD$b!H1bc5iB8{c
z3jEFRF0{yQkon_ih@;1DOzflSSJkHOT>^zg{?;v;Hbn+yNk@`rfAPO^<sHl&sfAva
ztAGn4;pQsvYvd^1HZ-o5C>nqC)m0&`?epz^nd6#=n!e5ph3vsZseO^e>ax`GN2z!d
zEh_Fp&Z5qUM@VRFftuOr8{2}6%G^5+j`T|lDUQAFBNF4|M8K=CIX5Fq^N&voX_Xr5
z+|J%AFVWyT+x+@N17uTyk<I(R^LGDaqxMfWUu7yhBred_*V^{B0B!AjQGA&NU%QD(
z>3C&t8nFjhQDkLmObpZooJ8zwg2vS^8c!|t%nN-%uM&l~Zxe{U-8mbrd>#Fn%a2!k
z_;xNOxRsp{vHM1CM|-Wy)#+VAwxdo0R*`R^B<hyUb0UVwRvM9mAyQo%KXdv({A%Z3
z1iR3D*n79;424*dvy8d`MYFke`uAH{3&UwlXA>{EzT;s}KcBU8@hb>23uESSmsH&#
zXtEp5Tk`OT+-|j9?+zcqf9qsb?)D%D3X@ND7D_}<Na=(UuU@PDz9qUkN)RKN3>F6R
zc_^BrnELaLOWa)_6L941JFQa07Ve8?kYU#(kYR_`K5=j|`vmsC<!yR?E+mK1;g|B|
z=Z!GE+^<t!<q8COA)tGak`U~#UJ1&nr39u;ugf0B{OQrVqaok3PbSjy2kJ}hf@_9b
zgP&jshxK{}vf$Ct^)%l|KIg(X?QuVY@du~!@}-hchzhEu7!t$mfIY<cezp}qd|CxK
ziLRnE#piQ&xhk`Ll*ws?6)EIa)BK86<}ME2s=Vf9lG1$?f%vjQ=hTI7Qo2aBU-zgW
zezmmp6O;4r;+*FSxxc@S)zQG>%2RsgD$kCxYmuOhq{q#%FQ00Ype4%ltgUlfAA8<4
z$XZlA{mqLNluSLKshK0fXdiMBjuEeM0QmfRy-lzB)dl)2`kWBalihj!GDRuoY#E3x
z=IlD-7_0%tvwb+MGg?zBYBa!waV3|?bA?%%rtI^xPdbZ9+~>yB61&4NTzV{}Po&iz
z-}6j&=qp=PP$-B+uK1hYtm+@*72X*+EUSthq+AsNRPvKBQmM90R~4+O_ITTtgCPpt
zRU-C2V%&Ey4m4Y|BpbB3u;2d}`)>&0vV|_M`N^G8$e*AdIxSgel*9R5n{XmgsvRP2
z5#lRJ%U%c2m-SOzDH02xx0k~lH6CaOsiEw|$PlTiWmKJPk&tqvL*wRRm6<co=TkQZ
zQTj8?um=gqDq<_|FkZccpn3_mvORiJ%GFN@BGMXLh~3WTzW-m79srK&^mLXIA%_4&
zezr2utV_x(9>%D+OYz4{eHs(Yoezh-6DU3$)+8;SmpnJ7&refB>CP#0n?dvp05$ad
zdLP4e95}=Ky(Xu|-(nvLMwQRZg9#_k*cQ$t^$>hF*wLsqEY0Zy>D@o!x)#Bt1<i@8
z+PH17=kCI61fIF&z9+ed8Fgd;!C5UCVu*NrzD)V+<;^MMM1?!wKJ4Oe{6))*;C(vE
zbaYL%4kj&BRMzI2!tQjP8b63(tz!JC!OW&=)oBYFtun<WMLUaQ`=LF%I(P441-tlX
zJ2TuqK=BK~vD!v*pY2#5^FQy_z8g8}tl<!;eIYVDjL6DwF>+pt%nN8xy`0N0Rp?{P
zV8pjO!3(SysCEqjbZ4ymOS-iiNN!aW^xVuob~8y|mQ-@fIMjkJ(UpGZu3k^tob2C?
zISa0N+wJ0i$5YN#(9q^)@-2ShH#m4taQ*#JjFZfkIKKf_u*^Zfzf{{-QehM`tBH_4
z#A7ebM@=m2cIqJY6eK-4P>VV8#9d)cso3836MW?b^yDY^xsmpVg32giyPiTyEz@IU
z1n3~!6cL)`KzQ%;nRhyG<meuY*&E_@A+%&?-qlRVSW^1lp3SOWS)Xpz<2|+Dj(#+4
zF}XsvlD}u>ZA)~xRYY~0CYB7jvPTmc30JVgfkoo59*y{a`s8*z>6>@H=37mJiB$R+
zZycX6FLmjSdsqR;x1?*y0?IHTzWG`%Mly`}46y;Q^*;3WGGp8gP%EyJ4O8W1^1KyX
zP<fRGMXLxf;Ah}KCnr`rX0CIUHcw}L@uEVGI_`!Ym85Rw3?bIWQb@5>;>5(pyXkrR
z;)^9-zZ-csw1RsLq8oxDlOMHP42_V1SYX5ObxA&=$YfWD+ZnYZ6W^-k-0wq;pVirp
zUMaX+kl!%T63y$V|NLnY@vbxV4YAtRXM=c_l9s~rxHA${jtQC{lHTIF>+Eb~K_z8l
zI{T<;lVQJ7>`06r8XYi2N_9wPH|u2+Ok1~PU9D|q4HQayG1?n1SsOdhy!vLr*r{`3
zarF)@ahEbo*v!EYGE})ESGP8tVfA@qVkdGNgZ{H&q=mMgNBol(2auL^prs@^nhr?I
zq6Wc8av?1OjI?4ymc=MA6Bc}FM~@;L@n177;DRZWn9^k{VvrG871OAvA)tbd2j%Hc
zf5dGc{u0o?JFV;>wyo^^Kr%9QP<3X(<Cw@dJWMDnyZlb#y7b)|mZS71>x8y`+*D)-
z0%!DQL#X2*GKSIB8frC`tZUdB>{${*IYE8YG}U%dZrWTjLEUQ!x}{23mBpcE#l=ty
zeE#-2LGwX|=-0<ecxZl~A*f$krIx=t*{F4Amb}PmwX6!^RLOY6M4XyRxX{LlDctD5
z0^dw!F0-f*+6Ftn)`@2{T`ZtwNEnHOC5-QMT&w9X^m>BlX5y2W7p25WUPSed4}w-_
zCO;T{BE8vnhgSQVU!naV4?MDRDS{%bXDEzR)N)_FV+OeG$J`hzyo+AAoJ+AI29T-?
z7`)*OIKa%aTz71Z!JuVGaWc?KaWHcJB5r?Kh})Nbt%^v3qA~3iGFhnSx19=;lb=7W
z><wJ0t`|abKq4J97mi5H`+~kwRvEO}RvM#N^pO?&&S7SaYIgnpZ6Qc&K&CqH%u<v-
zj4lF(3_mF(Mw7&l!LwLWl^$i$ppv0VgiiP8ddAYb9Ys0VEri$u5|*uS$v#l4O)>sa
zJWh_aQC2e#a7^ti2%@9Fp)9C%?TDEEGBx65;p4|*Ian0}hu#&k95P!Wlr6}3jl4cr
z64jHccIdW;C$bTzT}^CAUOyH}Eh)x727^zY<tT>0y`4-z$y~Qx`TcH8_`tMw{gc)^
z9GF^N6VqxVzw^TKGJWPr0&SP1o3Bna5T*drKu>r-62rtmU4EQ{`xQoaQg^i2F#T5@
z(ncALaT=U+;>PRClBX)6*#5T@Tk1Uf-SGtF3Tu10ISq2p@16LwYSIaRzAui``Qs$e
z<h*v`$$Gf;?whopZ}kow=n}STfrAvMdack`Yi0W(gv7(OpFdaVXC_sB2e(nt?l*tL
zxB8%nlO->Dn`if&00##Pj&G%copMW!&wR>;@Z>B&t<$tpZ$e?+BE{b!CEU0*NTDTy
zKN%_NY*~{p<US~zwrz8KZ5o-|XZJ`bL!`E$4*<K|O@(ak_nWV#CXahlm6|T||Ilbk
zQ82_M&8QadAe|kxs+qEL=%A*(X?TLtfbUrUX>(nC)1H*1U{dzx$>xu*_vSH>>j4IG
zJ#*|Ji@oSx#Or_-Wv}h$*Bo$eP`7m0i%U^sGVelW=n3C_dB^?~t|*X19epwZ5bJ*1
z5?VGL-~micIE)wn9B5*dJTUR8*TSVh+Tb<#_+n~c{N$^Mv48Z@-xcoObyAE+^#fnO
zXxmPInb+5_W55$<NlT+ktOXJ91oL3u*L%NS4kksTz=Q^l84UBCNT~hA{N8_%VMPUp
zttJug+!%XPyf2YBM%o}_yu+S%QAZ&HFa=ko6`jFDnv0*pyvrHwjfK<vxP3zUBIZE|
z(7KS;yI7Y2F!f(4Z|^r&efq6a+jK>s;{4Hf>Iy<~T=?y>u5>oc=Q^S<21MahVJa8v
zL_%L6FyG1|#X0ZMrFbdLDq)N)XodPOTSHHH{y~mRM->_;pVUo{BGcLrM33uzQboa}
zg_no4B<2y(f|$}TLQwcs#6?nv!kNdc=vgVL`sI8gm`uWqtEdVM|Le4A{d;6#-&PK*
zdjOac9R0629qJOdaR4q_PyA;8i_0f96a`QE&g-u<xFHs#Q3{tRGTUkC$C`9jfMh%Y
zb*4=#<E4a_z|U1$En(Wymz%811Z=GEmB%vQrNe)RQHtAV(Aizg|09<E0Ri#NTT{=x
z!Q){Afck&J%`SBa>4C{<WyVt~|CPdSKvfJ6iBKclm_#HVV2+r%J^iyb$Awiet9T{(
zzrYHYPnS>j?06x+WUl2b!{qu^FytFsq0h+uZ{w>1!IKuFK9^j6w)~>w0QCMWpJE+L
zA2QS^2OhW5{BkZfYa1-&e#N$EzUn_!;)(o+RaAM{@cw&GLkx(L{G$(}+@-Y0{vl*B
zA(kGBn1bK%k(<{waFTSTiyllLmX}3e?ugRGmn)6r(*64)JK=!KF|+Wbbf(J^PXpnF
zL1=%ZKJNIpxPQX9VWwQu2LJ*5TXmw>OqH-y9;-QBHlY9aVOC6_fDpv1Ay)mP^Z`}9
zOeNJnIdEY5N-s>Wll*HV!2Y!ny4uR?5f?LZQgw0(z+y3-Y@i{C013_ui<Pmb$LtE`
z9q7OE8<#ri_CLjlrUqM=XU!>1difEa|D$+Y{8zlG6K7g;z%>!8r0HzjxAUT*Xg1V6
zFsp`fA6yqw(dN3D`|m4t!N}gl@Et*TAJ>0=<_Y*24qsepzssLd!sM`Urg6@Miz28!
z<9{B(!H5Gn1%}=>henAI2a#!2r*R8Dmy+(mSeW$aWY}e0brn-rVFo>Gf?Gax6PfIQ
zae2@GYh3<>k8Y-VuIus}WI{2Xu|4B1X42u}Wrqbc!w3?teQ71+>cH1h)LJnLfmu}G
z?8u3TF8?r<3`&w3Ve`~W$!aiS6bgLqQFKek3yP&gV;8c49j!lu*~&|KakmI1G=0y&
zHEc=X4&uT79l%qb0IoY3%V6J`4;Sp&^xK#9+NhoYN0doo!UgIzK;tfbtbqPjS2q2f
z6n8CN@ZH1p73lzSz$gc7D_h(QpCg(Cvu~D6(nOd?*PzF=Yo}g5ZcN}3a$nYx-l!T$
z&n&bZc<uJxV?t9~TRUHn%JDg%$W0cLkVq9~_Fl=Z0A!{%k^6v5Js$9<8H2Z2zdF}`
zkH{?aKR>(g{BACo@!i7&)eE<AYlF{o#@Ey9SNZ2}Cyy-K(`a6e#bVCg_ee}TEfmNC
z7C|~OyJ%T;o63HPILuMcgzxSH@**~Uw4SE?bZ&)-3CnUL8i-5?TcrC^`ae@?AwTGM
z^<!TzX(*9j0xfvNGR`&u!s5CUNz~<@=7Ur~B%i3)ehL2JWV?3>+%GV2?Q@c?dIW9E
z?ZmyfTNyH%%F010%i<Fz>=-hD@pxA9!{+m2g}b2xC4dJcNVYWbinQV98wL<PruFom
z`+nfuRmIU-k*sQ31_zrGa`g`X+hm9Zm^>S<bv1kAhm(~1O6G=3<DX6y_M^ElmPK$6
zlc)PVKsk_KQt~AuOcXrIYwiI}L@~z7*L&PdFBLolY>NkIiL(bBkO4*Ub8I8SL`9@H
z1t#Y+JzYyZZVA9%%JBTrohrumaOUZ>^L=Z3g{xesNvk+*t@ua14>LT*WA=YMA9&5R
zJvlncfsS<<xmNU^?W6bKiZ?Nz#oW;8b_q1VCoBn~ICRbd?_F;C<4!th1KR68ALNdI
zRZ1_}^Yd__S{li|to-@R;tAu@N{*&D>$=UwAqtqj>BJr488&`>t&ALOr&6&R?qan_
z<zovl#OQTGZ;$3>5U0eHO{$RcR2&P;se@#GSl9(hbNd#UjVL<7)#V)Vp9`U}>gBKP
zOL2~3me;D<viP!<{)#{V{Pu@m6}^kK&8Nj_bKo3lT=mELA`RVT!0pn%P4wOW{PezG
zZsFU!80As9qL076H7rZx&@hiqgBk6&f5bSg%NT8~3EnrKf$77BP5Rs}oy_asA3$CT
zs^Aoc8oq=;heS#~?iqobx9%=(wUZ_d<*IZ0ofo;`!0i`xiAx`UiNQfarjJd0|BeM;
zI#wj~wkqU!ocg8Po!dfE_sKON0hm+E+hAY0%<~v8vIMY2m<cC`d)8n6BwN0U0T*-8
z!yVt3hmy&Iv7E_t%vD1P?60J991v6#NWe3#3s+=nN|4|GX7EaGyQ{;M+w2ukYQ}fV
zs-~(G026;nEh{w!PD|ec901EN3$#+$*wtUfmo^>s#Ao>KeRUgBrKvj-v%Nuv%zJ#c
z1VapW1-P>XIIv<kfm^YcN}JE>jSBj_{sn#MfQ{N2)6NLGk!(tv{!ISLzxZ#>qWmfv
z&xF8+EpiKatc`ZKN~ZWfeUHHafF~dikn%~?A{Trmo`N&mWeUV){rg*;4fMd~{HEYX
z4sfPAQyQ?G6fY^9AL@v3-|Z|6CqVQF(H#qbhp|w&N)io@*@4{PNJMI_Fc)V{KJV|i
z@qmgyQlnJibXBL|m%74Hj1RczOyAhp@yp0bI27jZaTByT`b)7vYWFUnWwASMDN^!>
zkiwXd8Q2tzv1iE;0Ad97P}j=HD<feZKzmHWls=qC{@HG+!tbY5BmQw$%~h;I`Ez@C
z9FiO+_ostm8{->)X8OMlo^y-1G_tGg@HYdoSCxBLJEB`2cz)*uOBm?ynk6~{<n~&W
zzW`NGZzQ!|$HW8A2cEB&K{K5#-zgwwc>?k?ks11y2D!x`StmG-OGHh3d#2Ir?2I41
zi$ar@e%woSs_5n_!Dg2E)wuKJcOyAn!@>>VG&%d0CheS@oF1d6_W+J7+LW$|N0^$L
z+C%;Ji4_j|hC2)){B`^h!Swup($sk6SqzcI_@2dhXE%2y-=ufM3(WE{xg68_w>y=L
zl3v-OAJ4a31O~2P9J&e_;3Ohq3sG)9{=R87cKdGRTARpajJ(EOHUd~40MUsx4+6vA
z--DS1Ot^iA%;zEbYJ}*QXt1H9i@b+L{F!q}>;86vSSoc3y`P)K0f81&#j!IZO0}%9
zcmu!mlg|k(&lJ)Mau30J+20?ONu(Fy23V|Z;HpFpz<F6OJp*pf{Vo{<uFUnX15U`D
zSS22bdjN<vQ&X)I@2i2EGZf;&X6FDAPGXu%y{4((q4go~#*xT}{o)g1q~~NWplsn5
zf#`<KCS!OLlRbzu(beNdy^CZ$r+|(<0iXF9(xxw&^;xB<eSU&f3knMpetN*o1-yVr
zJ;y$6^X^sX#aY-8@3wp8wFc$El6TP>XM45H1P3V5Wt4)<#Nfv&iSJJg4uM5FZ+~*i
zX7*(PF^f*pCA|@-=yH^i3ATF(ltN+lzDA@MVE*YMRX8yh*ayTBJ%1<6HU%PASmdAY
zJ^9%+>j4BwbN3Dj{*%r`UdbQNa<$SV`hWd&nCNyp7%TPTWN<1AXt>pMMMVbI8WKEc
z0_Z)$x&`l7bnsA=pHolHdX!H&6m<iKZk-z`5o>TuTJ_Gohqxn&nCZd`b(aVGJ;WUE
zMNE!Xz&ewsKNo+w1H)7k3_mc{gxtkAEnF3NSe|Qqm#{&XI)toc?oGLwQOHb}T96bl
zfh9mwFY<sj6lsO7udnwhFp+M0LUbOYT{cmiCb;N(yiscn4jQXH3UCwzw`R(<hn3==
z<pq&mzgPcs!=XWqnfq2c&t~&^)7v10hYXP?VK~N<H49)XX%2*%PPT8Zes8G#lhH!z
z4ve`sl)=Sriu&lb7U-^e&eUxvn%e>qik%fIN$BkZTGd`a;bETR*rFrmIL>$9?{F#7
z6=oJIy_{@mRa9Ja&8Bm#`EWT6n)$W){M2>9J?LJ(S+ifKWYrg$by|VugHM9nC11e}
zhKu0FLeafh&$c8FCz+#_T<ev=?7dM&)>o~Lp9<Wh&5NiGdYOH9^%evxOL-4o%>Ha!
zhxm18>GYV2K1)}ck9qkYE&yrw0=bi|_7a$%aM~7qzzh-D(rgswdR*(lEXB^d!B1NS
z1E#Ob6~v>O>hfj2?;m0RNN(_R@r$<Imiyk^H<DC&s3)vQ9SgLtZEQ6y;?1kI_eVb5
z^%<e-Z%CevXw8^3f@EksVcIb?YAtVXx1T4|-k`+TO-lBt)1_xObZ)hOBq3~Lp3!|!
z(pBenxYx!y^PT$=qneo`d-dxj?#^PAhPQk_AZJ?SecPY<=5&UNoDR-1J(~^qkuL4t
z##Qk}oHAje)^#RlZx?SP!+Y)R>mM2wN7EEk^_10Qj72}BobS3jT@9l#eb&k#Vx^%u
zanh~hH~$vRx$Zqj5qW3ciJ0a3H^XLdCgAmt(Fb0SP9#bt{dE)|A^m?Y$7fJDQxPaa
zqK{^0+ey+2M`6#>9>j%$^mSex<sa4QsvRqq<13i5@imhpGR+cXz$>&+uy>p8*PqYt
ztk`DyjtgVY-@Z(DEwmx~#K$L%cS}uQ%d~xe_U2Z`+S=eUuwHkM5Rr3`2UZ;Ug3Rhi
zTL_W-X^z94x{oefg@F*A=3ho#jc)=8ZSnV|IKFRB@P67X2lQ=TYf^%C%}q@|zBYp^
zrrf69q1(qSe;wt|rc1O!Pc7c#E2uqseYkDx`my?r(hKwb^hQG2MsNdhEywd~2V1+n
z-O>`eS!O=`-JwiHF5xlOZ}J&;iQfOPf0MEN7aYP~@%STyVPB2)__(Dx`Q{CoxZJ7!
z``TWC2FfbZ^RI_LGtCCgXq%`9;%-9LN({NLKk6|xl}Z*540uj~p@6BN_W@V2n3hW(
zz9&hED}z8KWu!7T7_7?KgRi{15+UN;(*{KYCgQhN(;sTog1UG`V9oby)F9bpbaFnA
zU?Kt%o}-TOP*Ta#!Y6>_waTuf?9Dq(ov}pe<r{|xIHRj04*Z!m5=CBhm#_4>*z<Qr
zeRQ?_Fd~HE+sPcq!k1&I^Os>0Y#}BVJHJfo)I<p59PHa!BwkCzuAawdOu6tgn1SV&
zWES!lr2&c)q7dqrJ0stq@T;udDM6NmS#EL+<Y-d~G(Ew%@GW)cx~0S~w}j6jYkzQc
zq^ffD??JL-TKki<ZkC5joF4D*{{UftXQbeLvg>=!SLc|^=0@yR`BR@~UiX!YyvHnk
zJ@VB?tH1u5iF1Qv=|_prrl5H>yFaYK#Lv7B2tq4Vq+2zEeZ4=Z-SjcrsuRx7gw(bS
zdImV$c;`ZX8q}plH_cQyt7zzv5CVDl93F^AknK|Dp<4cAr(d$cnY9czM2%O-7!2Pw
z{plj$PB*V9K{C(T!~O7B<I9MHv?q-$0NFx827jfxlWo>Z5BHakWbML&%Wi_~H)@3;
zk>Fv_pcE`1xL6i`!?raLw}8nH*zi*uSrQZO<Qre1*sShl8F;a3DEO}-$^^K}76|t4
zx9y5v%86bNwo>}Q9W2$>Wb_UpmYwWmIcgam_9a7hnyqfDjR^O-_*5`l7lsu)c<Z25
z0uH+!ENud=`*AT7sKTe9Vx25mE_|mkp*EJ3Lq>0M3i8+29?ph^NHxRL)v5R%tmy{`
z!&q(eSNxiA3z)IKxh&y(?h?|p)(Na}%JuNSgxr09(%ruZe*!|S`TC{3DYX1LET$?n
z^yV<bYp>IXt|F(%g+4$>@GQh^rv&TYVGIskR_Hfqt`Y(;MU&q`8JlzXV97o^0B;4+
zppv))g2`s7X$g#lNRlu?NhTUnLolc@=Yk`}B5V;XtFD$C68@4*i_V97i@RmhfX8>M
z75{(H_TKSW_HX#OnH$L_dxk`kGO{<xib^RvDtpV`R7Oa4W}$?_E!iYwQ+D>=dyn6F
zrRVv4KHuN>-|y@3dR}yM-`DlN-s3!v<2aAgcX~?@*F$7Qpvo-Oh@k6K1)YT%kv`Ue
z=3H3O?~riZiX597LB!NE^ZaeYfIhnctKITCD&1J#`q8c$Cz4)MY+bo3V!uxV{vSE>
zZ#n;b-B*XMs@kIMbsFHXAj~6WT*wyn<vd{Ntr>jRA~Za>(|E-Qy&nE3gQx_OvQYg7
z^!!kHX&<+7`DS;4{P*ynk75$X2ljWi#+i<LEvhjkNvFar>oe7ptqyp(D{K}Gh>v1M
zx@T8f3`3N9^$wDc4>B9aslPw79Q2!o@Pv8=ovnRFhpxHDO4s*jB&-MX;AQV^+4SNU
z1ZK_M=XG=~8V$+yBz0<yB*ZUiX!<`6>WTSn$AHckKU5X^&3?R7FPU?9eB3Yma@nsS
z^Qs%yP#Msw)Ozqr-X(1hjW4qodJbk7rCOqW=+OlEmNq;Y!3Dp4Ntt~;f{5r|-+3EQ
z5p&;8`F0^rR$&_28l~W!zx9a{m%?*5atLaD@(c&Yvs!}_rwog9N=TU@Q;2*k_-%`d
zSYpSZb<+Y<=6Zna+Q>j!HO|&oyjO94OSiNyWkfEOP8@<?e@px_co33aiHXK5Wlpdu
z49fW)7j+X|)lSTNS2xOFu$L@DLq;h*<ty3zAq@0{13rAZaSyRRWA`QQt5>eLxC*qy
zXG)L+KlyPIZ32MIg{k13#id5e=JSngWH|lVgReTL6G@qkKAon=!DkP|VEd0qX2u4K
zo86|ZnG_$ZBHgB@cy4q&zisr_V@9h;d&V#f!+j%N>_a0XH8))hNrg-Iu-tL^$~PiE
zI@LqJ0&_Y=xzlYiKk=7C=|wtQuoofTTyB_>W|A+_HK@uX-7-tE`*A*^ryu~bD68%r
z@c-n~eHgZ4KSM1mzVq#pr^SZ~m({Tx!Rjbz0V~`z?8`;JOZJ`4gl1@o^}T*}#HBOh
z8|^#;Izd?tlUuZVlZNW@_;)>y;9>SZaX!7jv9QBex^TINBe8mm8_f_Vx{xpX1;0%e
zXK3%yGczxlThD|ism?yrdH3V=&B|NJo5Tm;E%@w8*`p3tVm0%9Q=7F$PDL~!l>$EV
zDI(g5>^YuZp3B5|KIK$lW{I{6YNabg*o#(QMgtR_Mtz~-n@K=L^=-OQ{(xbgCQ2zB
zSs6q3_uPcUoYVAfOxakiEnXnzZh7oSw~^;{XwLWK{^)lSew@38)*s!oKjM&(l=p7_
z45nn15r~dl`Z|BHhxjlY^3FsnO;E&aM08!$!H^DBIA@E7MLBJ7b^R~i2B;iVf0O52
zxsLS=A&JLc^V|kZm-Tj2b@fZB1$+?1?w=dOK#q52Dx8(F`{`I;rYC7Tt}TB7XhNvR
zDoRzbaiI0K96s}vHNQ;F@0L+zilJ0VlZ8E5r$j8%;li-x@P&PoG>JR>Hg!kNZccVw
zM=^(iX?f1Pl*LU8_p|2t!_P0|&O9y*8lkwsI1nVuqxrlX$-nQ8BR>813#ln^e`n2K
zZe!xnlRQ1NNmV$-uls$Vf;PIg_BMAl#nx=9Wd)x*-u@y4R8}`uC|}p`_g40=ozysU
zyVfx}v`a5B6<d*OtS}V^2HRSuw)&-4Xb=!GJD8tRFBazdS@&yHRiXAm$^5J!u85l$
zZqlBMKy8A1wsLWT4Z1^!ClL;A1$?6C@)A`oeHAR@!IIZhRB1UHyDWLjl%qJJ``;Rf
zx*L2l?pRTII)Dzq7=yLs(DVIlZrR$8vYznwC~kGfgy-~E4RkPkJW{SJgJEb0U5_^=
z_Vw8s!G9hFHz0L|1Wck)QV66U5&w4K<ujy=H%Mw+UODACJPXab7j4-H10h9-8hMe>
z?UkZS=n|Zf#0MV8twr)ozpu0CYiTi3NmU(1sY~3=SI@spk1t((4|Utk5EG}OPQTgt
zA(0eDimuC-UAbMVdl$S>UL|KqOC4X}iTe90y4zCwMnPs)YTyv$tAG_9OoF-U{lI*u
zG3}-<KC?n7?PP9f!$ttBq<?*YqvC|M=vKburG+k8lU*57{+vT--O$tLzX+YkzujIv
zD}4e@lYYv2%u}<4(zr6|R*PyAS!idH^mPBC-2D_{ihY5Hzo<n!4xI;kFMVH8<>&IA
z=_|+#%0lrfe`Sg+sDyOQ%#o<_?rS!06oCSXIJVGNv>Hj6-1(orJp8ZSvw3kyf~k!3
zjlXO`K)L=v;xqk%r5Amz<`sy$z?kn`r`nel=qlmtM2i0KD#5V#RNG0Ms+4jLnfCa+
z=yN_B2(VRdKENoTvWK0yW$?`$vh6ECS^bCC*u}?T6Q<t7I>%Gh){&{sv~6+dPp;Nr
ztz!<K194!k!M@ETG|Ky&xCQaB(`^U^jmEw`ySrJZmVYa7Q?g2*%IQb(Z46SXkgB$B
zMtofpxwk3$rw3jtzD1Kr`S<WYp?i__38zURoN=-HNzt#{O?#aVy_wF?njNQfs>N8B
zvh+xp^@)U*C)UZFJ}^&s9}ftW>0#~n&@7#MUWc0xk^yQeFj&vWNNe|0(+o`MoQJfn
zbO`MIBY*L5c}pp!zkX-%CHdlmuO^PfCqrswOj_h9+l|{KR{ciTEXnb;CT4E&kSpU9
zD3Bp1AMo5?R1Iby)Tp%{+m%CEvUvAe6toP|GJ;X&!xoCv!Ua{7n;fo|4hFx+-iCqW
zko%4w9-6=q)H{Dz1T;HrD7u|*E&mns*wQ}+DPUd1`Fc4Z{@~U4J2Cc1S_|T*Dxvws
z0%!Wsp7XDLJEBRYQ`=(*Yq5gCQ}9#lZsOhpr@p#SQc?=v^IYCKU<l4u$xLg()G7(~
zt*wGnk`I5p%HjA(DU}FELhI4B`JAYSrIDP(;u|l6f|qqIi=vBb2rjq;7k1?7OBVdz
ztJq&MPfHnB=|E;XU7NMn{y+muA*@>@GAO+$tY|q+DiSNjGIiGdqbK;@<q9rz5h{8(
z6UoNK37DDom4Pw7EUybK6qF;vO;oPw^Yvc7#)`YA8Ls{G!}`$M24}(S-bg6ZnH_hy
zVkw=Z@87?>tFFJs`}L@v(aqv^X$r=eFX6?8_ZKGF&r)L2`|dL!8$YSk2#4|R5wvr-
z_)zIwaW&D*H*)pn=Oc!Bl#bu1SgY3nUox=fcC!@r{Gr@S_@m!DpDorG3$?&-`w6$=
zg64Zm^a)JB?861yiJYb(4Zb#$&od^m`NN~e7tO?LH`v?B5bo+{WXWe<*h%JLU+HiS
zER_1g#&TkCe(~4}<2{vsD9<n1!4@tywwGefl4%PY*J7n^ysswhsWbGkzr?w`tG1|l
zRY`DrcgJ_Y&`i8Z&K#EnpoZjvN;s&^`f|TDriV++;T}G!F7aOvwjm7}>VN`jq#1^7
z6?JlxGWewB7WkCl7QZCk-vFR!GV-EkSZ_Le?Rm>re@0blmQX+#+*@5Q%!jfbDCo@X
zK8$%lbtNI1n1Goi>|LV&Vd#R+7Pw6EkV|8JgB>^V)}0@X&<1<PVw@HM>*lFE3oNoR
zu%0W5TG5kQrrgA5d6zOq*ssVq;5{-WY4i<c4SY%~0U@PTsX?`G!{{qEf-i7*4(dEH
zH!oQ5#eNmIwKr)ejF2Ru`PVOVd3&dQ`l;P|U!|zU>F=)nzu?Rxe1u_p(s;iQ%7Ifh
zkxfQi_THb>aD}`|5Py_Uz29t?SEMF9iZ1|{ghZ$CN;UDrdTcz;OSrfscuej#`R^y(
zx0ik=9j>5BU_Rp%Q&*#Bqi-O=-s@xBkdbt0_R~8rNs{PDukn<wtU~Y_POm1C=3PAO
zDLQ}6FqM!sZeZRzzxq@}5ASVZz>3YV(SPEBw-m{5%;_6m3G_&9zi;CBhbg0LBfR!%
zF+okFKEMCsP9E}H6D&mV_oe%61By#f1kAY=dvjC?^?DlJf??IX*RDS;;F;L5e)423
z<#pkfHN@Xk;e7gd{`{YvY`+n00G8SOIE<Lj8mv5m5}vG_3X@no=bc4?CwH809~jRc
z%jJ#gG&rFqnOk9eg4gG4EReB$c^Ye5LUg!5vhggxqB8J>5%B7a(q5S$lC*wHmU7X>
z+CN?KwjMgDEW<+%PPEa%z)Y4`>4H3c`2d^50!K>&ga66TEQ4FhPj@sgd5TW2P%*$5
zE);gDwK}=DEk~Y;&Flaea}JXK+P?49CT$|q^u%WlZDd}(0P^8Cq1Dx}U34bK7(mKS
z#*4$1UM|7slGvV?KH#J$o&5dorn@WJazzPK?xn)27}V0xe3Hi_)A{O<UEF#7!ozY+
zoZ&0?;_DfeHDSejx3~{nl-n$NxPz`_AeN)6rU1&7@E1AkS+WeKmgA_+Sk<>>cd5vv
zs#?Kte0D+KWi+7M;X@e7W1RYsMdtiBb)68oNBqhwhv28@p83bg+y@tf5a_zE7bvrW
zcPf~2RA=76*dW6b3+X?<9{rinKe*x_bn&JVz=jkTxikOB8YtN>xo$k#9u%K(=HfgK
zl00CsGcm;cHXbg?*q5s@s;S5@`TbeeDdaLOAp5U=AGro?!Ac53pUP5@-GEV~cj`54
zmH0*yeSN1U{{bgT_y}P<OlU(aDq&9=godw6Uz4smu7Tx?3axd1$A!GIF$;q;TA6B&
zzuxX_+#i>MauSRXvd<^B64%0{T)f^@9xhrB)iZhB-<XDgWp%~R!zusHOOGfqfc)4v
z$*H7X?VYj+9sTZSBffQQl#5sz6Q^dk@QUGJx0A4p{CVrwbr4{3>g-Q0h*MrohE||m
z5P%r`e4e$1UI22najplpoRpeRiF5~%=TyojWAukYk6}kG?7FN-!2H=}#sANEF@Hy9
z;_8^qqra;fnU69EacZL}at=AovPgWOb+noMCka3@pYH{aD1P>2rT5cy%!B<Yf{l=n
zxfNRMH8=$j7!K^+tI=fi#R|@SQ0f}&)E?;o0IBf67X`Rt*dnWED1oZ`vBzqq@}0)&
zg=IT$l+DJ5&A`Ym0MJW&MVT0^3-+~7Rl49PG81yLC_e&b=Nh@;zUDxG>31I>D=^QV
zGdb_gg-Mp+K<@)+S5LX}#(YnkpI^z_S#Rt!HiED3n#MKoQr2LhHXbYQK}tN6>myXK
zGNb{+H#7rTvEJuhXfN~>fUcYZFNiWsHhCvoKF4CP9+(~g>1FyLy%%5NhCg}Y@z%S*
zq6=3S0l~{<+Kb`#j=gGryF-Oy+~#nzr_|h-LHEb#(f+dYA^%om6sK7z7!dK$i=8k`
z!H8tWs7#oi_7CdxXP#!fgn4@YzP1{W9pFtSH}c~`UbE{`m~~I_l~4vz!KUwCfD+P^
zL$rEut=B2-=SB@7pUDGk{jJmQQZTTNutT!XJqFswajQqin23156;BI>wD*0@o`X#p
zL}I>EFQ(ED<ZKS`ECVaW65D2gwNCt%r;Ygy#wn&P<AN8QPz4r}00iZpp~=|=;C!y1
z`Lcpa*GRSBgJTBgLH-YJ=OxMk&m$*bPRp9$OUGc9r0aILgt-vmw{m%_Wp!sfoX=bi
zrDb9{65N0@N&&(4Zs;YUw;9y>?)>J*X_n|dj!a#MiA)+uph@jhk;NL^FFv6(0vzTC
z(0jSz$?YEr5BcjQzhO&vqgpnA?l*hDIgFopG*SeJXWUDbt#@vaIhNWQdu85~;2KdN
z56SS^{K4s6^+vhckyl>(W(YP#Om#2|iE;1lL_#HRz3Zvsb{*&6j+W7)H!(&vE}h8b
zN$g?%eslK`7W)&8osfQrX!9mICGkYG`LYV>iZ)H?ZCsLg#jKS+PbKDJYb$i@i!<in
z@%BE()V=pAlH{$CACaKVR;lyyn{jN&nO5q0Y$$@<d%i-#on#p@4}etT<NkY?IHynD
z<trYv8v-~s+CC`@ORldf5l9o`WoV&p*TFW`nv`&L38<(m@7-?Gpl=StY5sX{l3c1P
zlYE2xw@oe4U38k-bA0CZ>70UAJEv+#=y9$2j<w0xlPiQscMwkt9*luoLMBE{B-bMB
z!jBVs-(#b2(#b|tvF1wb$mo|Zd@PJ~D<Jsr(LjL5yK0je<pM$k0zEP{XE`BMMfK6)
zvRB(I>?$eZ=y+(wYpXV3fGNi$J@BO@Xq%3EvgPtlAfb=6b`6oF%g5w{2~PR?AYz>A
zlImIOX^JwA1uElbkMMySYNo|Tt{cdIy1SOvm4{ndj~_<k*1rm`wf0<3;3?f<*1Uo9
z$!1grF@0~GbA}eLrVr>i;Q(MZ{3}hnfn?TQ0i*c{JbUuR{1!GLrP&(0d&nl#ejO`#
zi)2HWnbx^v)=Y9guHaXxv-NaF@m3lR$rmK*u}qL-^x7H4vwp#gh9q^m*Eqc8F&*3-
z11k~IS4_mx4|hcbw^EoORa$#v4zlhV-Gtg>Y+KpXD-ahDdkU4RC5bu<4s;DjT*%4y
z{ZM<GJ)nYzaJ3eo@ds|^0?8OyJ>D9%Xi?x#79XxNs*p;#@6Bd1vi{I5ML^({J+9Yp
zJog?G4<z(@_LAWqr5kY9Wl~#MuTx0rkiBJSE3wZt^SVAyns=KlZ`9^WG<$xB0^P%M
z<-+e<=Q9(>ELiSI?*x*a^RA+!uwo|`Tan7ZK7hk~+t-aGRop5Cj#09FYj@$A$47P4
z`V$V)8v(#^{tBhBWNDB>rP;s(`%F<UnM*VH0>9@Q6}#rRA8NcBk7>hK=whMQ*fY+-
z6_Q)5I|{_94KV8_=KSKk4(IhF#_)QZIlaBxSzTlm8#w*tWoqu{TWLHvrFEV@e^N<f
zGMIk>$fu{)RwPph+k4kMfX+c1Y_y&eG@U%DG2~zs&Lw~(=HKID7AY`w?RhQmC!6Ue
z5gzp?A1rVV#(*AJ1)p2QVF+8P-s}feYR9Q#_@IHW_RPq`8jwJGYPNhX1$IM0p*IYI
z0l~xx%?hR+LuP10i?O&soF)yqV&w#c2#t?#J|AaF+5+m;nfJauY{234O#L8j`8D9a
z-crz?3@VQ-yYmNcyYvs|?nLmA^0Hn(@aCr=lR6Cy&;uq-iKUWh#_=w{b|g6!G3JY|
z{bD<w_#gz+7iB^C*`$$7NGL(t-)6_l*WBCjMSm_5F&5E@-NYcxh&Xa5dY8oqG#P2T
z5H8I%hpdF?3ftiK3xiKp1Q01gmezn{S3)$>ta#}F46La_y$xD#HJ<yr=`*AH?bke!
z5_-T&RI}QzIZ;H*VSrE*)Bl5_DI#S-BoKRBiwU>FqJG`hRo(b*@#CsP*nLQ8(^z7f
zODgc6TQRZFGAh69NytIMf;8)`cSA>eK-;i#zHvztcU1iS;kv^Bk+a0V;-XVMT6L-C
zyNL1Agj#c4-O_|EbTklKS#Z_II#{2l5w=OmN|DwUWBqz70Q&9Wp%X;jH^}9F8GD}d
z8BW9-p3sEq>t)L1hBt0Y=fBnkX1T~{%X4yjl29td3TELYL+shR3D-Y^rdSe-?O4%D
z8;drG;Hf-VOB15g^zjF>Kr~Ir?2bNn5NM(9T#*UN+Ns^F>qQTHx@j7Qm3)VXe-Ym9
z5+O%fD|D=)0skiT{N4$EzECd1HEt9s<+F*xXWVBcJ<CF9ul~4|ozJ%BI7Rz+TbIK6
z$et4MMUL&kq)rEK?&qbCB1Af{U%ceTDwt|}-M8oWGfz?SuAUcCafN)P@S^V9RO9-Z
z@s4hQPq^B~z^758HzzVyZA?tZD@}-cXm00f!EfNjCJ-@#+Z64CszI#<`=>kZD?Gy-
zJ7OCuX<OPkUbSCYM)!UA@GM7)z4=ZZ5jhr?O3+UBzapX&Y>w`0hPB7T{peCAk_9%$
z^2=_hB%$y9jIcg1T4Bh_mwDqlcfRZU)%NCw2sZi30~#K?r-x)8>0S^pPkb2<vv+K$
z(#MhvS6x{ji66xorugCL7M8;;3W?9ivMc0iA?iH6C`$)j*AB~$2dkhRd%S?_as5m2
zJoWQXebvfW+@LTYgb`2Ex4L>*MeNCPN$Mu1|Dz4!DB|NzUJkjsb9d`>@F>}Wts)E$
zj1dIx179@uwHfMY`vW~%TRkUeL8h7dV&p1r@*4#yXJf@m$TT_@g%gKK9|}f~bro3p
z)x%~l*u<AH&}Ft8>T4ONj_I>uF81C&u=*oY8mr(d*@v}6LJm)OxmJ7!XrWy~)_A{c
zY?AvEu|u=*h2F9uF7d3qwYPw6Q(kt7;!yqZ?2UnCKzMK($q*ZtOVZ7sMsMXL@&!}v
zPJbo{=bS5RuTbq>Rvuokj}2IqqHzY%M;sSv^;a7gW>GczRFvFIs=>a2p0!E!l%9(4
zjB1~jp|ajU^?dJv4<2JIx!?t142A#6w$5U*wtlGn6d|=w`ek_&uZ-XMaPWY+?VoMT
zQr?@Cx&JxOBBCjhvcu2v6Pn+37dDa=5!i=Vf6=05JA)O+jDsFihT-75na|8%H=f2!
zmcIXHJEuOuULpy@{Q$3_mn^c^KZnl0ap+VQ(apfiqYRN~k4KT@KeH6~)eWSGFaB7Y
zxVCFwakOWyUU^ox^F9(H5Ff>Xn&5X)4`2VO%=jq9EB2ycE1H#O6Mj|vM3JD$4}yYu
zNYM$)_X92u`QwvYY$qB+Fp#KruL?z?sokmjdXM)~#gXCb?X6~Kz&L)r%*U0sX?sJ;
zrl4)o4^yQih>o^~eN-{pqt!|S1JkTr)p^iXu@y~HEmVYweaZ!#_8*!w(3xY`r(noX
zF1{nM9>Jrx@$TzqebhB&TR;mo;F%p4eBarvy{Bq&9l!O<P>rsvTDP=%ck)Uz#mLkt
zJ(B0Wo}+9!M&`liwcbq#jQ_Zr7EnC){K8aGK*9kiomAZ{j4=ncIERV4XnT}s-*D5|
z*GOewyEI=**kAk#TZRV0Uvw5TPM)Ski6+lu98|s3t;o9gQrBLzn9XVH#ZlVJCvhEO
zW(j9afK=yce0D^gjjvyIhViJp?c&OUIv#OA3`k9tFd)t&%U3#)t`!PkhN4H_WSYxi
zj=!>AB*|A5dh<zFGD3mCnWGliftLnzS6E%D`BaR|aV#F^cGM<)%(|fgEOnMDxy9y3
z&Gd4J)Vf=)F1+XiJ(#$~uqF>~0PR~8bB_AEm%kCzci_o~k85E>#sOY<18N3MVKR-+
zxvM0^6cdd@KP8oK;y=!Cnx+N~W0e#2j<02VF)Bf49*{Rta~(rWx%2cR&Z1+%Y+^e}
zY2U*x-`|IH{lZsO6(kJDG*e^tM(sVjzN#$WXL$EAD#Md7WPkW9AMp)0jpN1O5Zbc5
zkfBEzjq7(F;^P!oc|WuuO|`C>V%<}(_Lr`?jfWET&lll#zodKHAOXk!GhmCl28nJ<
zCBFHdg4t`T(Bp}87es=%PyLU4JRILA@CsR!h6z7;bvjNM%n5u#Kl0@l;h<5{kCK7t
zyK;eE`_rn=Y?r#ECAu_US0(4ucUq2(4zQ)t%yH{*^^bFfrozos485LMy0@5{HQ$n<
z#iW%k<dDml7$yNBHBEY&?pF4E$Di;U(sl=SOe>#`h>fR~WWmIU{wKLeX-r8$Z!U=Y
zdvASmT<I+nvgvR9uvr%}AiwEk@i^{eQ@?^W%6lpQ5X)UkFnfH^q7g%~<6w6^G}+{1
zQFmnW(MD$HhdX=&Jj?uFa8IG1g9(YCAsuSxSw6#gbc}}C*Hv=E4=$8vdrcXfz6q}P
zeq}t00OjHJd?K6!xs}kupOx6hBvS;*<mmlwJ}_Urbmh6<#?tT7TlW5v%aEw^(|>v^
ziY~6#xe%RCgnMxRtf*)HA`1R=*6_t^_kof-b9;qa;t<Yey(zNliUW{Cd#ok^ha@^*
zo$lX|iCse(G8FAd4$BDGY=H0>EP7Gf09Mwu+%~8GPn)R=K1Nu<-L0iBG17|Aec*e;
z`~ZoTdt9A*EdVCEv{82HpDa`AG!k3a%8$NOO2J0-RhaEs4$6@C6vieJ;1^=U(&)#$
z%=cGQk0hkHtND>|P%<D$Xjp!i`}zN}4@dA7DHY_En?@Guh?6d++_j#fa#MLQjg6Rc
zRANRdCY0*0*-;^P_R<9IiT&xOuoIaQ;)~H)^oBu@j)3{vX>q<A|AdPqvPf!XqbbZz
zHiH4*I$&&2JctCahL<B#25S*9xpnexRyl!oD3DK-7RzDxk^58rU{!{_?`#JaWALdz
zuGhII{vTPMj}sD#mX1x;DKVqr(t;N|*^La~qKx8%mB@k-XE&n)3i?0wCfdC4(|e~`
zkyQ#ZrM=;F06bRY`$)CYFw)qv*5m(uRJO=l-oFz#&g!#;e7nD<HUPTrs`Hlf)w?gH
z29W{ZrX1Tr;tl3QWIT>(?E`<w{;f_B&-*2q1jYY<^eHD%i8l@zq8s+-JsYHgWr-Aq
z3u5V>GmV0(@9VFhb+P;OA|-KxD%C!J9>6akY0{p=ydhU-`CBtUp#O@2|1EHD_;MtI
zzk!RqsikGCuIqtFLLY)m`+F-y-fSSLwJ1`hMF7};NC{-~)Qx!ifJ})BZa%U|&z8;-
zAtgdN>t(SXBPDwMcVgH7gz-D%2mv|yQ%l_uTYNl3z+|M#XQ`|xj?U_fG|=!y%{c)6
z*g-B<+|9lZi*$nJgbrvZ$mjW6{Pg!zk@>B8QDlqF$AL8Vit*<g@vAv;KZ7v`egtFI
zc3qWjeW!|#P<;tCskXp|AQo%?=8AuSlb2F)e`_)xUKA_+TS)cy6$#|G*=p@hSeKiB
z-Y9$BMD!1>0^{~?P5H^tOR+=E$U9JZS`V%ypHx@>eIqx7^(ue1?)qmYOZ+kSjOzDt
zagH$yM7EtYSWTqz0T2J37x2v_QsMJ&jlR_1DSjRycb-$nX#FK4U>JPPB1Bu@iyD^y
zT)mVGj7vm&z<B;&Uhd=yQ$8Zg_O{96KZ2CMaV#@pw5h4Bqwvovg3r=Gip2j@6#w_S
zUK+uGWVqOhT>a;%LnRgqGVi}|(UbkNO@NKm{~F+&d^Sj_kPotyf9>?&*YyA5))U=&
z#DvxeiRTvAlpBA##7AD%0k^=vxBKU6B9X0tJ%_Ab=|49;i<Gmtc1H@Fplm1e`Vj-%
z-o5(p^8dbOCFUTw6A>jy4{j+N{Qv6q{yg+TT=>I&UvA429r?+Y!yW;Dr+mNYY#5^5
zje!<Kogo&0x<z9Xi(Lv#U+86F05G_-xA)O0+nLm$A7P?Py`Qkhe*OF5{UOK@2EGnd
zX4b@6@-i+HyR;}RFs13Y9o<0}dgJGgh|bAmoj_K(h<RPapOEt&{vZSxYw(!~vmfDT
zwSx+RcaHBLw#`Fg76q-W;*JumD@y3S4ptuy7%9S>I>5R4$7FYn&-0vlx4xIhQ_!u4
zHX=$}B%!+=uO9I6pW=_Ee~Lf2r|OhXZWR9i$MZ1;UqvZ}7FnaAAM{E@!V}8cX$HJp
zg#NGdeo=YkZvjBO${Cu=a_`iV`rpK;e=G7_i%M>Q=(Jf!F`SVXE<~U8dy90WROeq!
z_2PPD21c5&8A$O2jQ*74z{67_ga^?1IWiFszc38rn9-7<^2xIJTBkL=@2c6B<5SZ=
zd+Ptp{q{Go!*Z!X8TwdAuP+WaVpDouBZCMmtae_&_kaHNWEyqKz|Tn8ur$_3MBXvK
zbIT1JS>GR0R_#VfH6hFFvYy3BffkgPQAkmkff@RrinC~>4EG#Y=P594DLVxp2zc|~
zQIon3e;5%NFmXjGB^s{f(YY$_Wi?E>=t>M>53)zdQoDx=X*rn=+-k@rDFI;J8qBMd
zLI%H|g(Ke&yM})c%#w3bM&y5&>3{Y2D2#-cKH}(1{yy)WwMLDRsgA{qoP&fupH39?
zQgz7FqK8A}k3pw4Qv4U4qC^Me!U`?CH;$6UiM#iI8-n}XMvjqaj1Og^{}eT*1R&SX
za!K%{Kr2fauKhV1lxGODp@Z>!iY4{tPF>FT;*3$h4)jGvj`r#AeNc2$R8$nfb{8;;
zNl06+I%X!?Jx6+<M=TOhQhnCX(s%2L7HtK@?MJy&c8FM;fGTuXy1sbRt`yDa)`)E=
z`}d9?;lYp>Vw>ps;*cRr9f#*;NDv^KA=E*#Z2!AqN)g~wxVGx!gQ4cWZOz>!;R`I@
zT-*J;qdm8K9$hHqjiVcQ{hw;UI}bm^=(#HYse=Ka=pht_Tn5bVE)eGrS4OJsfYNRP
zH5KpX=4N2aDLM;gfFOi+Z{m>H6iPzFb~`A%Xn?@pY=Q5=S8dOYbf!jH^BfkaZi+b=
zqpo}@;jt(8IT<2kga?0jChc@c<~cRD4Ueffv&2QsbOq(%3Xk7UFRg#4vu^lxN1qoV
zV`-)#H|InU+8kgMFT3y9RI7S`zQ6in#4gn4FnR8z4gv;z`QZ<W-I?_834mE%4wbt#
z0rGX;AnfTfKm-vzgj6z#Ye=<0+P~EX_1BR0WOiMuLX80S^CWxjWka7<nthTYq@m|$
z0Aq@SKb9}u(f2slbKgF+WC>VSW_{1yw>+f_pF1nPy!sxchfc&)9=tsbD28C0+qZe7
zm`i9=Ht=*rs%%iaST~7G0<ar&f*@dze`*OG(GH(le)9dhQ}@4sskbN}-^1eLf)qLr
z&696;oP)D`aM#YA{iPss7Fo)RFd>gT7!Pyj^n$(T&NI`N_;YZ%WjP?Uu&ctvYXIzI
z;Xt@@?^j-kBsN=p!9liGCRLK0`2kA067OOmpk%besvR#(X{)9kVJj|~LPQM~pdJGZ
z>T!#(pVJRgspcfnJ4hu2LcBk5XGwNnd$u}W6?1Bs;y@hQkX1U&cAj&|PCS6-K_-J=
zY;zB$C67xG_wz)+um>(XE$BR*%g&qtPVhC*L-_6&b<BF}uQ@OF|JvleS^#)<2~aE(
zaHSMG&kX3s{k<#!mJvkSFX~U5H=9u(iR|!1+=f)T&p2HCh9^W}Q=7Z(vcxpWEC*(O
zr-&{~lsk6ctuGwSTSKuQEo(Y@zxyA>J-6BjT=|+p$XOo^3|ub|8q8!1SDhV%%D4Li
zkam=e$aAR1Po!G&@Bc1!-u48l$n8C<>60@wUo+iIzGNt)mLP+>XS%reA*&X8#Wp<7
z6>?HfI?jDivHBjPwkzR9rcf$9T{RZv3t`<o9~PbHsGfxEOzS;Hi|Nu_-a9P*+fY3-
z)r+D!0KCJ|sT=Bpv;uZ5OBd0(gZ+d|pKe26VWal@)n!9x%VCs;x)O9W2e?gFKvI|F
zyXDmXnA2=}(7x@eC11%zq>>=_5Z9v@(SM_oc0C+O%Osz2Z#C_ncN#X&TV1^dFD=S~
z${tNTU8whPSjE(Bi}R!XL>X+}+=>`&?P(HTo)BI}m!f!2f+lSuOvn3fptsJT-Z1y~
zz!UD_`{cU!R<0Jef@R>8M7m5inJ13pJF{JUq(P%hOmlWAR9pOZ;a|!!6O2A<wo)VQ
zRS)pK-z|~db1JW0GLxL*d(sudb8PQ@uTFn{v#j!9l21g?7x#}=e_@8&N<3#B$iIYJ
zjD_aw`Ch<eoNA$L(FeAPaqlkOZrF#M&(F7!8pD)wC`oPT>)_)^Kp*e*REize<Xs@{
z@8N5uDy;u8hO;o7Cd|RFOosP6l7HPtOXbniAz-nmKjzmEL|C7#79vi#Qx}sNfs3$s
zt()iBy}fNx?WbFFKNe}tpjfJ)MCavI(m{tSMt%k9*K2e3WH{fW*0q04?Y;3j+7)TJ
zr8*^jR`b#Q(Q7DD8|=myUnU9yd}ib|Dt)@JW59KJhToQhM1OptCr`g|9h>jgsi`9C
z3l+Olbi_i*ml9;AzeqoRg=fw>efB^K1M?d^(U=|y2%mNkbQQkZrQxKQVO}ZY!T%Nl
z2X$zlFS~^>2x(qj8U!P7_BXH%Jkys^^G5asBU!0*5jO}{o(@f~XtwQ-CVS`AbyGqf
z+!>y~zf@Xk{>0xl@6)GGCSkOz)tdp~7ZSNe)XYU^mbuuyt7t)HC1~aT+WgZvh~>pX
zEe!c$98VK6Ur7rphMHmY3~lBc*C(3ab^OTHgj406uGW;|MaWhF6?p(978ki%p_L6&
zV`ozoG_F8&^@JSB7&X+Ez*nUiVF%%`IH-xO%5?~NkuRMx^we`1#VvvA5L{hZW|qMY
zkYa+cUsYh5+ndB=#(J$<A7v|GH_>1aK@T-4YX!-N&Hj{gpwjE}9fj)A7(~xw5obVW
zEPDD@OrMthPoaASxL9f=u6P5o1}_4Ply8~YfjA(}w6{i<O)nPUBT4^}YAPZWo=Mcu
zg8XoPi|{8RRPI|%(i>+PEJ%&W(V;F-RKX^T8T}deRIJsfIx3E`mqpp6XK_-~(L=80
z<Ww`D)rf}7OGP{B5t_96jk4ea&`zXrD}rO@qYqD1?ZXyD^MB)6Fthw5nL^i|5sf`)
zjuU7Z%>6pYEkNC+<YoARG_=sLzwh&iX8NPxA)bPod)apCt-|A{`y9GdaYqA5!jx{k
zGHoLAH~)-3k7qSPtycX~167o9T}pE@{c#|#QWdUp02>Ti9;!x~|8G7crAQ7sdWLeW
zG70=|epMMXQ4c#$dtLbYw=}-q*nnQ16~!(w@raen{w4cMMiAw*iJLdZAyJi-B3ae#
z$plMuTp#W4Fzf*WgHj8Nb78#Tw(l#6(&ea1PQQ4o`u3!YULI+cst~1A?DS@Lp!n_n
za12RobVWYC?vrIuziwSwCe@WN_<)nJRKBfO5b7_Uw;}xTcS@x!E{WZ+$95mLGmgFm
zi&3$UVt}XZ-7w)Xl)xQ}h%m>S(tdrNGL<eC==|bS+9oXABn^H2^tu`b1NaH;XC#<1
z^vYdn_Ro^{^XTMP?YxA-XN7{zQ{BBBhmr5Idh6ay(W_sZWgnL<q+B_!vi<_cNrGiF
zzmvtWCsJSs3Wkfl9JL%4n@GOUujO2}Gxj2BnJ}*n%Fgtl8Kc$Qs9Q~Z?Q($SosAbm
zm!S+<6Z6@8+l?lCI43$fix?X%8m$Lkp{+Db0)Cn7na=U*l?iuZpx+A5r1-H?-q$2$
zPI;vj;cs3!XxBtJh{l`~ERXoQwWr?ICGP(Dd)mGz2u+{ACs{Z<n2X(Uu148fs`a9_
z*<4k_hex&DG!W_(n}^#fv@rE>QDMqhb1|kVRh{z8KMWwCWi7_|Wb6sNXMqfg1*-=1
z3HrK=VPJCGEfH25NYwP<l$@ExRm@Z9@aN~&tTsutM^eSnH0KL>8$fNcw2)RlR47)y
zTEahYLxc2jy-x!h%9=t=hZwBF|6l{b*r29AfxKXod1(O(&+n?AXYDr-W6}_eh_b8W
z!AKy@9EJlWaydEETfsO!AIa9vQA(Q>6}PRd%X?=PGGR*i0D0CDnyR54FhW04|H(LD
znP5QmK+<g+OS0a5+3O&RjGe{qqq)4F5*ye1+)Dqg6kBzfbfUM{yV48A9YYDiUVbTh
z%S&1KUYOEu)aLq&$ODbgFY^B6ltj{ve3o+L+>Tqvhatz!txNEqp6T{}($kjl)%Ap=
z`R)CK+=B|y^`T||Ow*VyNv9o8#gfnQ7*ZO7yy?3}wyo}lJ(6;b)*d<K5>|tG;YSrv
z{e2yMff2K2SdU5T6KM1!7Y}iflG5sQjt#vYIO%8eF7A9}`yRA>K8{(j6-R^sjbGWm
zSj&c<4<3bJ@}3L1b;TF)gU|D8S(=hx?r6*CtYh^^hQB)^JsVzjS!g?%`2ND-jF?uT
zxAI-egYm33r}u)hO#XZxvnsgzvy#^|F}<xl=5?!`T#bh_us$$IWY#WQp!-a#J)!E=
zxKYCNr>}uWiDcGj(v7_fy?Rae+{u4u91wKRGwnZ#l3-H~Qd~Q({zc+TBcEzg`~)+2
zEUXTqvO9JmS-7+~{OM*m(?XAnBirS)F={gC>`kvc%aWzy>7o<%{Jl|3(~)XWUePY8
zG^z;pz5J|~n>EVP885gmfU=azI+D;C<)G_v9II{8=)?mj5e|t|6$d63iD1#Ghtlxl
zAjKDtrMbl8aZ@6$t5~SQo8B057m7rvu~5t})iBpT9wZJ8ujKX3i_;vAnHDKmHq0)M
zABTO_kNW9>BS3J|#<N`gll$)4bNOz*qd+E73EQ!6zKc=ZnQz$LE7`a)Qp25Ah&G)E
z>nqJg<04x8JX(S$hQ!e}b!k{6rV~MffHK!6$hRg$j1pE%m@8ZkAG~;QPG8`O{1Vj8
z!VhID2yH671zaMP-eQX)F7pOI-Hk?k5^tr}*KEZa%=GM+YNscfNkl)j=C+Y_;@sI`
zni#|Q22r`j%QFJu$-#~mzh^)(!Yz!Zxt(n=4D2X%j!?K1myZ5Hjo5Y8UOmOw_6VMu
zE@?aliku!vDqAh1ets04T&RNPd5lyxCV$0-b~%0CsHflLt9PODH`Vv|3v3cvp1Wv^
zyVZh|dRZO7Kl+U))Zcr>J_pG=ExbvNHEd`lwb49GR~~8PTmNJ_unCe1<y4K=wmVJ5
z?2Q3~Ymk6}i5j@)zjpE?{M#%QGe*SH)>|hOv$xa*oEm8?BAM8FuX>3^00DgG4_p}}
zxiKPO*vpwnD~{88Ot@7?_pk2-sFYWdzlnqqXM+)+^9+94tTd9ft;QXCKytC5HK9J7
z+Fi3~NAJ2VhK%A9ICSxz6Kic1G4i=H-DsnJ)11yp(A~2p-@TGW?V6XfGjtz*Z~3k~
z^4G-cp)k;on#0R^N!oE<AF(YT*E;S_#`I{vhk4D`dna6z-uqHp|9KsK-V73nk~1GC
zVpP25gGyF1l*Lseb_WunzI5~#?s~j;*Qou0<%{|3bito%il0YDrs|*|n2CNstSQUI
zvHH^sY_dHU;>!Dbx?K)MH)vCO;o$T$o*7rJ(Xz#;5lcQ__I2(6O7AJ@b(`)SDDo%r
zAXT^@82QSizZhqPqq#g6u78nDnbylUkalsNBK<Sb^I<OgN4LnNlAO$Y44<C_FmEio
zZt}w_NO_2L?Q5Y|^4N$UaqeuHD<7wrD=aY9#(fk7#3mYBqqRYIc-(gQXEZl&d`=wQ
zXQ;zOF_g$u8q5_-|1{>|zTKSj(|B)xK3%$o#b*q|Kg>d}N&9{U)4>QHZs~mR>7$bU
z?PdKnoe1C17kUR%LY4Sizl<Sr$TWBX6I31G9pBBeM-|@ln88-pjfQUAprN`XG+cLJ
zi^92aPp!H5z^~_*X)}>Ie=Y7anyWPfKXI79-QOT~+CSQ^<dZyF4KMEjojj@ix}*;E
z^rAByDNUeQ9A8{7%JWdQf=JZBD~Z3Byzy;}-W>1zKyhBIWTBB&2DL>xpH;~uRmY(t
zBJ{5d@g9jD&^0((A3i=Dwu8FS9llA3+DHU$%B+07cUQGRs#)^K&=!&(@;vx@rT30m
zGt))>?5oysw6PJFd^ZuHzq7=HOQ28V4=+M>*CpYLCYYqePD|jH#*?ys6YFMov3xVl
z{!W0rELYGNi|S3ZGM#IJTHNJ2`yT4A%{VH)vWYHZ&x{l(@b&K4L(O~rH?bwQ-XXC)
zxn?f*YV$6d2w2VSZoffmKRY)^7Iouvw}2nAhP=H)vHG{4&c2Pg{`}ox24vT-dCV}8
z7yi78ffb61wO)L#*LC3yDEr;}j9&0Qr(UN;_CRPv=Yz;8HjY9i5x9R1>hFJf(abyV
z+^fKs3f{eJk+0vmP1-!(S||2dTsV0*GTZ%VJ(*Z<U%++P1Tc@W;o|mv8N}J9^6T4e
z(HlC_&0P4^C7}Et{=pJNPga(@sh6~*<DT3UV#R_~6gxKqD=d%x?WAk1cZ|qwnm`*t
zUlt}H@Z={~2>>7Es)%Mu)7k5CdR>!1o7i|c<bL9H?uLE(lrDIL&rNUV=&%g$4{iIt
zMbfItdHrM8mAy!nixB`y@VOiUj`5>abeX=)^xZC&@w;5qnQP`o#|A^uG*~3Lh1$N8
zWgrXk^$Oll*!mHD!CWHYDb=gkdM%fIN<8KYcth#~Hof&~S<zUB#Mllz85OyWz>=f%
z#pCMB%KS*dJpsCd+Ej@?PSiQK`2MlYJk!dG10?KJ{$w@tPm+4_{Z7f&2+du<WiBi;
z?LD`A#S{m(L*x3#sH0Dp)6ct<#zpXyttUi?m-UQd_`j|ddo6e1Xxo;~Ky{d&)&=@4
z*1d|3#~o?%pCQ6_S#Q~CgWR1P)K2O)SvHx<$6uasdgK3ja+m|SD5>5dnODRoKjM%m
z#b96tI}~viAqUz$UMQU93#Jia5&k&TaI|11Ne6>$-~TuhSKpiW47fotRg3)?C{@o8
zI&kcCJ2%Rww>Mb{W*BnErgItkCcpMoOeYAyTV&ap0uSzGihoJ(F0=#WrM;f**r~gP
zhxLya0AFQ%#}B{X8!Dx23Lz_c)OgGro_7@$74t0<Y08fgeZ|v+GjxJCHay1FO$(j)
z)8%&f==LlX+(`s#<ZME0Fw&r~T~Fg}x7+>d>ey%JMqDvutZ4-v-XDPnPZao?|JdNy
zTibSNJly(A#~4)f#=r)j>5e=8KpQWF|Jm1gpYKK|k8ti87HzROQcB;=dx5R3tz)Wo
zhCvEV+56Oz3Fi-7LdO&h{6m|WzC?bmySpNJye^6B_;XrsS8Ip#?6n0=@u)Mnlch5@
zH;*<T)sxU!%Cnv*R_59Z+VZ?ZOZMJCR`2g=6@d|6m7m4WMext+dWnh2=o8_i@a{Qs
zT=`<v_3XA}4PH&QocozwUG57XOTknb;fDHZz3PF(n?qA_O}G-DWa4(7-UAIh4|@M0
zrqwp_r)v|wn|rLYcDKI{lU68h#<jV>%doJedX#jyH*38vKVnb}Zxkyfmw$07MB?6%
zWCaaBd#@^!rBww9ea?Du_I5GNs+cgk)t|}7P$7d)r~ZWrPHXAr@5JM%W|~NGZZ@gd
z<NePPk0YOSW+*fIoe3D{oOoi}ffI*M=~7A&j**%!D7MiqJM^{9W62)!gq?e57A@z)
zGg88*gh3ppvXw0Eh7JL-ZSQR@x1)TCuPd<1sMd)KiuJTY+9Z$5gqV)hd!>V1JJ}6B
zM(L~lZWCMP+Cq_B(|#%WxegLqJ_Le$B3>l)BQOj-s(vjp==jm|6%@%-pURLi`@!Pa
z5rY3sf=G5%kT^Ugl}*rJ%lF#ph&Soojm2F~SCU>DY{ReDJ!>#vGd(%S@^65yhR2-b
z`N<v#TV2L|_?MeQRocjkP|``+xmGE`EyGmwpeZB#!R1se>zFZ8=I7zV3;QV7PN?h{
zC@oG2-{@9m%3PA9dZ0fH8=+CfOm;z9`lCuv;o^o%_e?6s6m%Y*@!0qxIVZhp+*)K|
z%fa9yt!T88S-SM~g3E^6DvHE4nMZ6cs8apyFo(@~aEwSTem0c1&Q$r9&1NQj*29fq
z(>+{#E6X9P!STq0)x*6}&ux*?f*c}s9OihzPB|Ma)0>=97_5$}_uK+DOiPb>lCl(q
zzKNts2s9F_!Rk{J9>rNE4rNsIBfB=CR*;DZE{B-Lg@)a`L<<9{54`*xe}gW6_HeZ;
z+H@nJLGgh<!$x?r@{dL!etHViZoA@qSLRG&r@h%e`$GR9O>Aex?`rZL>%v&=#A5x`
z6(!h;tX4pA?&cNpM5Gb4MiY=_Z8?doHw*YlJ#+Gx0P7*VpuJkABWBvykGi$9W!rP?
zZRn8$1QREoR|+GoFO8lU6FObyEk#~jPw(>9!!}9THI(@iXfxwOpsk!`cLRQ(Srl0!
zS5YLM+K%+kpcF&X>gz0rb=Me%-0Erq>`8q3I}r<eIu6GwNnbs|U*$3wo>+I;>7#Fa
zO^jZ0MyM<V`FJ|{VOw)*Z-z`D@~iXd!#0qxQkGpjBlU=RLPdY?ChR?Nh-%mllw&Rl
zOHi108C2s2LWeikz<j2>hc>VyU#@@yi=-v8xz!dWWs>=^sayNFeMZ&Ut22Ur3$WMY
zhrfp7BfGqMn+?tlq3bY%ZRYa8RK+Mzjoanj&0pl-2ASO%J)ELWUEZLP8tq`&=#!$2
zZ1<L0-2mlF6LrN(fPt-e+ZO_-u-I%0Z`ASl$A@kJ^ksl69I4{@$_BC5GH_j1)_&kh
zcJ~c<QyGjyJcQWMb!c*qsXcj@e)-XJ^-M%{Vh8xK>w5gmd`Egv>}Yyfk8AC;+wlGy
zq2Z8Y?KzSw<2&@&C#N|(4oZqW^#?zxjk>{i-@BLXM=kP3jDx~or#tPr{JggPMCRF_
zpwNPv87v?OHNllzs>;d-aKQFb&Qbm8o(Ot}SAqB5fpNp_4USSZxb2K(ww=k-!^@o=
zU}3GtbMIm~-&_4xn~GfRe5rxUFLw7iAGBWI7G;Ep#n;V#(_aGtggV?Du01}y11Gh|
z{?;aPCUAfo&b2u?XhxqZTPJ2WG$4<CPQbJo<<wKvI9Os|-lIrw>pwF?-V$H4-F_A`
z?e6>Yl4_sTdmkNl4DZ&j4W<?AZ+JSq$=0q4IrXy3Y%{j_>$b518`tlw8nSiF3lM}G
z9@+Bt?x}n2X;tq*1Xy4I*3?tP)<vpin;dsv3-|<$+@Ip8EFL`ln1bhnb}`g`F`FHc
z;0z$j)G$Xquk<IASJJQJ)C;C-?36yO)CYqJgCyGc)Hs6fJ8r8zl}A^pB|KLPJ|OmV
zzT;k#7xc588hkfn9ys02uiQ<K6Y%09><*{B%B@ogXE#O8hpifaZo79{nob4R+rDv^
zl3zI4xE>W$g#-DMs9YCwFf;7VfkV;|R+ZG&(#&8#@M$Q#Re(j~Mb)Bx&%{CUy)9#1
zc=?_8?(2uj!&>|4O|N;II8a3j$hyk93qwJ2e|p%ebkWXrQDVu&3aYi|#Ltj>bM;+?
z`2DD{u=$?Tv1d$4<MPML;Y!4><2rILbn`YM=Zv9(K$|7NfYKr@4U3*dM#qBTg{Und
z%y8esBVaJ_=6}}X$k@5Ie$iSjuRu&}a7zQ1+2Z(crklt4krC0HWlVVL@1fyD?w#et
z)y?*@%X%@>b<9_*Y)X80BFfK8Y(rrWKnEIgMc_o^tdHT^B;z4@5N|h=SO;wL5U)3*
z)ri4s@<+7Dx=ZNb&g!`R3o73CU)zwtG0_aTl#(8OFY#hPXmFaEZ6qnfSC@~EmaEaG
zg~5ZM7JFd3zj9pwOSUy6F=E}1dere6(-|(<E*%bmgkwk?2tkt!C~aS@y@tF01obWC
zN9qf|Y+;O4mO!M4Sx5iz_tS>2v<NF}Qyh8T09wYF)3cZh{&!=lKPm)=U$(?4K62SV
zSWiCY>C3$tlwxB1Ps;iXQdSjOUnAyrQ%s3)bO|QC<l)Tu2O`JytM4`3aY!EdKpaNJ
zY)^pfcavD)fudXO=qV5{l|zd#LLve`WU4DPF@xEcp)H1M9pxRIhkc+mFXuC`g4e4*
zGaao2jkc&vMe&#w?K2=Y3>s?XnHx|d6Z0x>&=;|O>Akbu^~fzS6Y?#q^zBpQHy%8A
zfV;ihjG8LB_2D+<!h4^fmBTN<7YUjvP@M05H%M4c{HxOIII-JncWv@q0;x9_i=i|n
z?8~>jKY#8QTS^^a;!v%6?2^*Caj@P-9TGb-%p6W21<qU_N0^3?3LZ1Yb&c5-5rzn9
zS==MrO{RTB06HeIJ!r3<e+Yt}WPxxalwQI#>8-&#cb+6&iJMBc9}g93jWY~-zeKHu
zo~=M)fa_b?RNknV2jNISHwn+FJaU|ZFZP<_6AiuJ%SaW_5c?f^@Ak#QH%Jwm3Yv(|
z1ri&(_;+24hsj8~UG_{U&+;wHDK9!Ao!EMlR~C2541g08vE=lsM1XsjsQX1{q#Mut
zgYsa(O;TOKl9#GF`Oddi9yaK`1SE>i;(((oo@D;dp7<Ugip@DP^;<XcdXQ32k@7(O
z$DIiyaL}9QhgVvkB*mkb=ZH2|Jc7WqQ<N*YJG-CS;p92F>Z>iQ?1lj$_v5imYQG8N
zVMN#0-TlWSvWi~B>YA9S-$!_oJJK!%k-J_8<4h&uTfJ<;=q39f=QCefWD+`T*jAq2
z+y9_{_@s`s%8`lTBR73Y$L^SBExuG1g%&Rs4)c?a>$_+WICJj=JqBX71rdox$YMU`
zViu!N-(f1u!tn152qNlSbUd53yFRVRcpN~j$90xex>#~L(f&Q!`%Dk{5jMlc9zM_2
z7w`AyPXU?z*vBu-)8LKq1n%YM#0GEZCW-jYO0<E<i(JG)qX@&FQB({ofKf}awLLXG
zjl*L?ag~Xjfj3>)F>_x5K&YMg&IA#AQxiHwAXf4b-T%I73~1&s?&rlf6tVF$_cwMR
zATnH9_BwWJl-LVG?BH6F;^XSo{mpr55%!zNv#P#(lBs&*!d>z_!g=of&v!vDq%dkm
zzo*Zj3Z(&&qiYvA2a)$n86QZ6FJ<c6Y%D*Wp+3J!tGL?Y@No}{P~(BcIP|qV^w@CL
z#*o=oo|Eu}TbK>qwt0H63!Zlu%kK8=X8fR;_EcO&QP2jr*S}K~XO&sTdo0ZCeyqG)
zDi>;{cM&61(3MXS`%+!hP|&rNDr`cY&8Gaxin0%*WDJhA+ug%ped3}PPJR`13LYgb
zf&)1QZVzsY!K$Jfb-e0h_0{Jo_B*HePX@1>?+Xun815ZSpUg`7o`KE{z1{4O_w8W(
z0!POk8!mftJ%up(^Bg+NNJv*Vc$RuSIK+T%{XQ4J7fxM>!3ggkl*1GS*rud$pmZb@
zs;V?I$$Ld?51clK)>a`TQDhWR%~4>GaJyOc*w+%m4!+=BMfGOMLENTvz55Ow@^;m@
z)D$^$U76vrqt4$3SNL=oH*3V$t|K%B|7f`HFAnkP=wTfCZ({GIn;%i=#W@Tm|5Q3`
zX2S5&T+t2vsl&OBI=u@7I7805*$qyaW+rleultAcL)HRDfiq7xcczGgW4(i8!-8W+
z{d^aHu0kLggCr8wm%YCGOHP0V@0woxw-kB+4eh|MaOXo^24<au_BR|xxq-&hLK8*y
z`95*{K9svqQ_1D}#xCk<*z4FU538T7E1l^B#;|<5U4hP$-D|f=Urb2A<Ys<SfBeg5
zv5K)cO$Tw<XN0Rhe5jBBx6BDh`#0{a()|gAFwJqB+1`8$$<V$jK~53<FDR0s<=vJ(
zYteK2*OTU-l-1d$syxRcJiWm*aLyKb>k)UE>(?Q*&wNuVH|kzI4gCY5NZrL0VD-Kc
zcloWsAz~y8SlMf+NK|MJ#`p{bK7Tki@sj3DIpI2&J-_~?&8@C|@u`Rj-1-%Lc3Y-u
zN%XPqGXJc{$FWASn>D3vT4iE$j%1S|Zk3>ZY~?CxGp#7(F`ckkK8m7Yk-m`v5X!Jo
z4N7{oB}RJ^=qJJ@JlqS-%~1NwYU&VR5TP%5Ecj_?zeBLw^2S-#N5;n$ua`iwK<Bz>
z#W>4IpXoA%<WWnTGyFACLqc7G9osKyW@}1`b=(&bgUu*VT?9F=PXU`w*5P<9PP3`p
z?b#6Fk)IR|Y?TiUK7ZA*o=Pw~YTzv%BzrM}Bn-{*S5=ygsV8zvm)5q<Q+u~ZBLEMg
zcBm#=6z1%p+n(x^*K1&H-P$v>h9LJ$&8e?#&K2tn{A_2w_5B`D@WVCzhL7-}#>>Wm
z7;C3D!Zm(UaDr9IEK@FoyrpY!%!<ujifEG9?`!)3Ho4`lik2i0&YzX@<Io4@dlGCc
zL;K52;sV*4l}L>g9&_EjQ#JzNX^ge|INcCa!<eIHo=~3&d7C9rV<Go=ZAEb+L<>kx
z!eT)Lza<yTl&`uBxA^*MuyGv=#;A^;=6#%gI49Cth^l7c4Dfk{AFFu(h37N2gLBPx
zw|>$M!16ARt-lofl&7Tl?pru)+aY<>d`Kr~5sQ#*)!c_^?>sS!UuXAC=1h794fS;J
zbp}@Y>t-*|8eB?O3?3?e5&s;U<R~UWUGmUjxkCG=#OOm>yAD2?55`5aCDU)n*Mr@b
z2|xWp|JrmtzEN5DVVg4@(h^PX#*4az4wg2)hJIi1)?1sk=~!zvH&2V)(<dAPoNkCj
zekwGF&HvTG%sBrIVF+Y*o^qZQcP$j+i98c(f<;29{yscAR?zaE)y~T3xq71HCiZGO
z4sFd<oyprzo*o!Kj-%qer)|~syh+uU-;B%=S5{)Te$#6{T@2CN$(_NZl=!lXC&m>;
zgUMRPZKoHs`^<jnL+)2@yGLm&(zW4L?e*F_QTSge#B>|;qK<W$vQxv~2h-kblvMa>
zy(s~w0pS~wNv5vj-(a$sDB(5_MiL>{<no&xP*}y+!$(j~2B%KeDItyvP9Scm6e&r*
z6f8}uD{w%Mke)pw#3-+rLWCuTl}<F1NCv;FRN_s;%i`Q?7!+MDnHJuA)LmQ=?FKR#
zas2X_lx^b;Gl;Z4yzgp;C&bz1#(8vzI<%~Cpe?%l>tPFz*~e|sW+gh2^?<JXV9G}@
zN0u8Sp?A<M(ALbWi_S56@SMqKRMPWz2<i>;)SDRfnW_OxX^88ny}(%M@>b&iWADww
zsd~Tv;X{-mG7I5EhGZzol;I>(Bx5pbFb@$8hJ=blA)yRKs8EKGC{v|O852<?8A2js
z6n^X8`}7`qzkk2ycRknV`~35Kt_!vI+2`K(u<kY8ueBEA5%8TTObfj&sOk9O;4l#V
z9-NcLW&TfHS%YXI4`~W+#@sGeD@yg?*RZ9%Gex;ryGqYR!n{EJRpI$Etxeba&O+#!
z*j(7!!6?bJ=M2h_WyOYWFaLNxzz_V=*E=a1G#>$9#gmqT(N8?b&(rcA*3wF7(bD?-
zY3D2cnd<QD=j%s~XwAG=6pxO4mO9*_b@ll1<JF3%e5hz7GVjRFwz4TE1ac2TtodAM
zx^(j)mg)PV+n%nO_`dj=nO8cich9?-TNn7I`25pqI-uTl*AC|F&DHWzo3iHLf4P7&
zx}DTud)-(}=ArPXT2JxpX0hjkO_vBC58pF%pz0QZxS;XE;aAAj)lEIKTnh^3P>)Dk
zO~#n$+r{hWpRZH3I$k}ZDRSVeU{PVR;^W7W`M2gT&S+`vZSj`?iOTQpLCLZ|=@xXj
z{8ajU(9b$5<+2|Neo~IJqi=cxHUwCOs1#fCd)Q3aRU90<OqVwyDDkACL+jyKRPU#5
z(2>WKWqt^W_AL$@QZmt2D9FoD7Sou}k=`0<)(7JQNCXQwBWp(%J>@JtQ&8rINM#MH
z%06`-fgqAAI82K=k_tCs+D2a@3G^G+*;{3GbS2Bau>|#kiFJ{YLF}M|+;>_{hqV{I
z5%>j{i(7U$i5mXL?rFAvf7LAgzWrNjSJMz%OyHj0;J`uL)t<2rRFu&~nO3?|ti3dk
zb&QcgywKhkr!_iwd%W<CE@xMlaFS54g07-{Q%q^Eu;7}g=qu-Tin%u_QqfUCcTEhq
zz~e~jhp)1T3{m0D%Y&cg*~pNq??>wuB^^TApa<8!Fwz(rRBtkfCm6q-CG?>9T}rng
zTs1OzE}b>rzE*xUB~3Nh`^+E0CGZoW+B7gw#EbowPMlntb{bv9bo$esWjQ(jJ6iB{
zzwVes%-dPA5#D$CWLhk|KB$rM_0CSJ7d)M<+pjyKog2miE#7_xRoJmprAg?<cb1=#
zg5bxBWO)ajw?rL_OSy`=LSttDEwAReA%<O{=H1zdgjUVd`)~mpv<im0!D&-OxHjQg
z+RIc?8X^-6SD-rt0-{g@n}pzMvw36$w#w)aU|b0TIwAJ>=fpl(?Mb2Uyl4m;go<}T
zI4~WYGHJ<Bebfg>Ss?=C1=e|xyX#Z{Ga!7<OP+iUygwXzAU2hcI1OCAqDKLzUN5;E
zsTe_djsz5=xKHC+%0sYzhZx8wYxsE@iH0-@b_CAN!1}ulO`E!SOa5w_*aI!M^;EPo
z{(1!3PlVZN-}{o0+<O=z0}aS1LX<VWM5sMFD&d}DF&|~$(-Uxfk#JODd#RCG{l!0K
zASj3)TDEc$st@~hFXL}3h|Qb~^et_h>Kx`Xz`L2M4wFPnOV3oBQ8o3(y3PK~aqbq^
zptUlpd&#p6OD{mXKl0Ca^#RGya9UoL{$l}Y%n&_}4&CykDcbwX*)(w)cQ$dqF7Wmi
zz-H17WN)phzcDy6$deR2MVYmZG<i8`>T)yppLgw$@9I;%A+x6*99X(aI2`c3d#Zw;
z&B;nD>flY#&qzca=yxn#!>@)Ys0u`*7YS6H$pznw?==0IOOih#z0Q<E!GjTm6fJjW
zTDgX84x{0zeTBkv>xL50@kkoHOg$@q?H@}*jDWc;cstt8_2(@^SnP{aUY=Bthmr7c
zud%tg0VR{EEPaStl?8m%A<IC$`_FZM0PD_i&Rg-%5zPQiY6tQd@22X9#SKfZmK}uG
z#$G+7KuMzx(-LNMi0juuLJ)}qdTsaMP1bgFizG~~xO1mHq*3kF7pBOR!S7Km&Ws51
z{`k7Zf1)r7vXkWHoDhbPjx)phH{TGdA?bzG^ibnf2>pD%Ae(`={FU}?`?cfxQ7rhv
z9lQYRxU)Oh2%`;RbY|7)n|p((CI-Zqi?mLAdg9%8V}6Sq@&L(qb_M@vQQU`xtB%_U
z-ymwI4yE%x{mu}dr+I3(&$^HEv>C8Pv0^s^t;Jvl(^_(0F$H<vzAY+(_k@8)9P;;{
zS$v%$>q&J|1Dm)i<zR4Un0A;u-Y8~ICaAyrY<#R=d^J%f{|8u#chZ(JsnC~$eo&5o
z)qO1W$6Gv?rbQ`e4t(&9#kKulZmO^4!+fQ~z5cFm&*|ZN$kVnD1zK#}9a@wlKt=4<
zObKUwa^`8)P0i~7YE^#nU>)AEi!?<~q!P4m%ZuXI+o(W@>ktGq1q*5MJGrosp5@e=
zRna9$nR2|sNso|r)AR_xEs_RjlwB6!nnR)(8<n<2YEM92##qfaydR<>xWF2;h=(Nq
zh?`|-10jcVU(Lp@syUqIHC!o~9wdb`2qN~+W_UY0f`()wba)k7jbIKs=wR2gY%ei<
zaX?035+GH<mn`)Zsq3kUj5}ux6lU_Dx0yS;gdmO(%@vG%Nd*WCv{?KjZ8llxhO}dy
zRh|`D;^@@ZQc~5^mcXP~m5WJ8LCG>u8E^NPk+p%{l*MyGJlSkJapGwS3K~n%q9w_+
zeE$L!A<)8XK^(|=GtQL^q6nNhV}?ig-%%qW79~Xy=GXpq4I-3OLyE<i%X9_!40fXd
zB*M=9P_pOUidQ@S2p{aJ*-U&@pkb?`lR!L<5}4#kiW>XO_3Ex~C_z2Z^4eo0!sqB(
zt`$9U7sa*^$scxBQO%7)Ob)^#F+j&$sty}tGd4_B;xuk`)$kyd0Bkb#f_%&_fV3ft
zF|@0^eaO$ykmNh<*w$lo9sC8cEt@3cBk&<n7dq2q<Z9e0gLbs{n2{XZt+Iiy&lNKW
zVLZSo3by}TiMJ`%7`T>@zk<Qc4V$OFWSE#6uF`auNEz^$HU|gR%}wGYTj@gw8Kcl#
z!ZQ>!!-<zD@wtvxhS}(H^>(=gAKL8+is&$RaUV@|fV<8|tw%%Q?%ORS+qT}~TXq;x
zjRTKr<vZ1cFARYa&RC%0bp*Z_l3DxG9(wC(1~Z3&+-0tNriQv1e4hHVuJGDdA2B*j
zX1#v=U3TiLt2OhCL)Hl+@!PL%3Avq&Q!LRS1v<X?{w+P4o+<_kNsA|~`(jywU0|NG
zX&>;R+i=jc7(+hjf$iNb0+J_SE*a;j!STol<JuvD9SS*}3(Dclx%T^U5r_sVV*R^(
z%r+n@P+0zmse5x>kUS+vVelhIZC!Bc41(s*%28rlGLhP?+)4S!Q}KjS&tfeA%Q-2y
z+}-AUboFQ`={YpXEj&QL26BStZTGeN>0)2bV)RR()FjSQ&{Q0I{$m5S?i9?FOl9;K
zFKZJ&IEJ>R^O;T|+eafeCf0~>b+!s#*PmWX5hn9U@&sD<FYNgbrJVED<3xbYQrg!L
zOZx2Qd7|48k<t`t0v)&}E6`*8^rwP;HV(JWmGQTEb!;;}K(#+%$AiGFDMNrx_;Xzk
zy4tqcY|}xD40{ae4_}V*>yS64F;Kcp$dz*#?=Ta?I~iYbXv1a>im=nW^^#;IR?aHm
zWSA%pO%>F=8SuoH(GK;-Au%x=R~NzWrXFvZ@)*tU2xtCm+761anacSXsAdvYCJDdP
zP-6o=YvhDccKuBBQpcMuK>7jC_+DI}l$M06PacG9M8_FcRUHu>R8W2FrEZBI6>+Kx
zemP!Yb0K3})lp$L?OM-_GsfCbpeeVa?GM$FFsLnot4oy>nJO^qXfFy&DGSyh?FAmG
zkE6^%wX0ZzYAv^7Q_yl6(M4n4W-aV{B;w7gwA-%d7%ni3^1XT@y_@hXE<TM+w=zVa
zK?)^Y+~nKfeY+nxW@b&IWLg;7NVxLoAf}h4E+Af)WNRFWD^nyT3V=ScKxM=xH;kDE
z1-*uKNIt4Uhiz8_4ZN*vnGN^0&>;?bc(DF{G6<FdZc3&r;^J7}oMM7<0_ueKM?J?@
zi)c`YbI|tp178qz!0P%#tM6U6>!5v3WP%w&v)BJ<qh&nSY7t~LhmCx+n&V$rqMsJG
zUCK^6Y{Azi8Srx-k53z7TrF6Pve>3bm|%GOqnWiKl2z<m4mb!=gh_7|#}q<s6SO30
zaYKDLftY~N0HQUF?s5ZJ*t7}2>PkrLQN}h!8X{n2$31snnM-$WnW}v%XgAOonb}{s
zHdvdYQ%YXLG`n66ohq1NihXn#8o#<&!!CTq!#3iga2t1m9@ZX{r!^>hV-ng6*aKp;
zo~@5#7{{#Gk?o@Vm5MkD;sgyWSQB`atXS<b)=y_v=q7Ht2)nN|7~+rk!Omz;f2o2!
zl1t;++KmX|A<f<iD^@p^+;qp^_t}4#f5OCLLIxXI0k9_lfA@WtVPL`HFfK*i96jsT
z;BFFV%+c*Z&-lZTy5GshVp?dbG7v)drzUfJrbwx)f!pmk_+T?eCEiFJ=GKXBrMv=<
z37DH<R2rR62&g+Bte`}G2IvzB8H}(<b1)lrd5u}y;KOJkVAzgX53^j6;gL~#B8vy^
z9?T;I?D2mW8iR8xWIOo3SJ;9YgC^S1)>$nsi|I6;`#=IU?ck!;BqC_+CVG0Tn=Blu
zQVCnPUeH1t*mK{(HurmHrS<tf?7V);{*GnS-dwhLuU`^506ISEeMAZ)Q#mA&HFp~7
zP-TNy$P}*j!xniH6$m7BevO$5PDtj=b$L7Blx-ml9kOpvra_z<Tth(FHWiO`AHRy)
zx5|$pI(X;;oaxkqgckL9j@cE#15|F~y21yJM3SfEF&g}nfGl2oh&Msv_R`=4#R1%J
z_7ZiW-O#fxzNKFd`%<n<9!dsi(&>8iDtuNpB90oFosThen5OlJ<9~n2FyW2&QXR}e
zV2IF1?Ls8uXh|6h*4Iw=+yPrA*$&w<DvjI0AbkJ0odF)oKL8srqx>*V1O$pF)JFV4
zeP^%sc#v?0-@*-akaKKE9P8&eGvd-ITJNUMXg8SG?6qb#vG1r}etJ65@vrL&yKayF
z3tTlKP@aSV<Ua`zB@bH<X$owbjF<>Kn1y%JY%%m$h8gf`h8^zRML+3>@a^eTfHANG
zSD#}v0xBi+Cc)W73{x|r?cvJ&XuxPBOhg8mceSnb>K24TOOOBOIX@53R6%P~J7%>L
zKf#ss^6Jz@m?}~|QVH}30)rl9kQ9p`ux>9wz~ku#wDP2BYM=|*$~zmF5h)RZeJCU1
za~Whe$Y%O)ov2?6mW4$)nQmKxfCg7jzGX*GR{7ylDStWV$O#Hs(m>J$f_g75Y=ejB
zLA7u@qo*K%Q`a}L8DX=tkR89X57xo+@q#F}T}kYCTbXU1_jAFeMSV9sZcCvTl-Ri9
z`lpVXx(5?WCd!OB%!$-UnH$I_L@@NeTDS^t^($;3&%8!aw9kV`ARCd~4Eqr3W-f+W
zZR6f=t42tB%xsC#@9#1=jBK2I>rTkQm)z3=IP&X8EnF+irg`hvnn+NO3q5i|19ABM
z_pK7*KuN30$24W4Ari(HO%u=IN}9p0s@djraHYsd-ox9|j(`~~D%v!QZHh1!w9$SU
zBDG{gBrUvI8gz4H`<Q2m(bJMlC=LS*AI2kq#?P81z6LiKiJ`avt#-1LMRq)_$qAsr
z+(*Pgj0a_Is?r$KQM~Vsx#?z00Gyz8IRNVjH+!m7S0?cX*3S$*)J@zCQM4qbg+DS1
zJHs%F`v*2tB?46%u80si1h$rY>*X($MBe;;pZ$mVCrmu1q+>Hx3+yTE%R_}7NKhA`
zafv^aJ)u_!cmLErQ>C0e-WgzCxL^R>1vy3Sbi`+h05&m*!=M*;U>XUOO(21~ONG;`
zXw(7y9cFiEBR0LyC})INR}W2+p8-n3gba4s#R^FLa@o5t(K^Hf!@hC5<4&$K!sicl
z+&&6-gUaFS<L*4TrrLrGxbb7d_pxu&5Dm^jSGn`wvSG`l01{{?vadi<_)|gBHVdk-
zdsejpvmdGyg7-Yip{rN=caPUBk`&FC%dypb&jc0?&$#+#=1gG_3%?HWW0*i7ofoUY
zHN#XSbGjXy6Ug!;0Xh_KNOnxgBFgq#7?m86R#jy9yo0nlksrV~qEgUY8G|eKmKau0
zd=soLD@fye?XSTJ!18>cc^^THS~AR$=C+;VRZIfCqyG%q4R&?NA@wMY3_4>vq{fJ8
zd<GW~M^(&zCP|*AgH(v)^T?Go<Gp0sNO<}LBW+?MuDx9uI%Pd|BB^)bjAzU-Ugfh3
zGR=Q8Ltz8Xg&UGxv0pf}0|;m7_noYy*o-lJk}J?b(aVHFte-_%sGq0#+?#)FlyKzT
zenP__&YbnfnrY{opbY=HuCVLI+0${;lIAUP^?jYYbsX=qj0UIx#_JVm(4++2#yfdv
zgy-dz!=S0lwHG<Ro|3wbyT(%MFa~C&$4E9`9FSUaCo2ncwvghH)2npW(sCXO{%ZFI
z%v+m3Ihivv@xd0tgnK$Th=Ps{gI-f``sdqW>GmK5@+IvQ+;KONMx7q#OUL~m$e@i<
z#)_FMw<%{-b@gJ*)K<2G|I#@E2|~-$qHFNw%SEg*=Y^;get80!$g3_}AEt+b5?cTv
zsN@UD9PI#*l*XxbVzeVC$qlex(g&*uU68BGZlLx`Te<)I+Zy}lPQkgklBJNTbPxjZ
zXJrkB;TW0(=>R?@XidB@qH2@Ct+J6bAB3!TQZo4-f?xU}6^_)EuI^KmOU)gA-o+i5
zyeOw~BwI1OKum3|k?oYYObUlf@JAQy3ufP9T8pZaAcX&6-dj+ZQyQ@HQZ%>Z#uHpP
zTRh|;h(IG=!qT*0x>bu`Vr9-_#k3%qn#OJyZcG$Re$~y51Yul^1hRQb`byX0DFSpN
z$@}GRo#;CftfAYvn(g`O()kcsN~T@Y+sJaq52;R%+~4glgp9m~a1gAx0H@$Cl4@F7
z7d8O)Z^uLpqd)|w6i2x{=MHzs@QF%oYUCW|g36D$VcA|e%aTK+2vY*LP?<*j@aMqd
zyR##K#o)9lHbqv5E4w_>N@17y;<i`qBO%=Wq{%P^igQUSmSFdXVpW5Xxa8iJpM9KW
zT4F8C^w(WjA#g%u0K%KX-|yj<LgBRHUcB_o+E2&|*wT$_ZcCU;stJOK1WpNp3nV5h
zWJdK}=X>}A48l?bsdXnPlW}l;uo~V2Q8#@Xvf`ryTr111qj<l|)Ii;psDqggNhr=6
zvVfL#^hlR4LCCHoOwF;3r$DR{tRnj^S=FdfwMmkl2!X>wmZ~5=-=yy*r13p;`?7nb
zFkpNy{FzHGJ%RR!rASo*#&noO*>EH5+1vnGbI1a(&6Rowcir1?Y`Y1vE}R%B^`9LT
zLZ!D*V)3?gt#uF-5(5#;Itad}b+i&97wh1Fc}vgZ6A@O;&zyo$OtH6w&5s)sr?nu_
z%!U3JWtv1*GKabN$o6pDab$CCMK+i2iVDojhnMKj>R6&V=7{M?Oef2D8(hZMKa#-N
zB$M`K*n;gc_V2b#0bW3Ds4?k)Q6xf0%&h(ii7*TbzMiW5aRXok_v{uNlH7;JUjvpl
z=7hMYRQ}0viv&QID?x&c-Xq#5JAv{(J4ihsS;^{(&U`_I9u^;oRnQ&sTO?}>M!hU1
zc?p!cww~EFX9?=cE+Zc<EIa;qcOCr+V%f9>)>695!uvR`k=N7XHu6HTJp)c(Ss>@H
zB;IlJ*MNjm0+63sVsj0|2Z;e#Rl+=%-m5fO&ZQbsWr(JHuNG1FXrBPIxb*SQEw$t3
z>-9<2Q1>)YGjv}+Z*UHiHu8DCejVSwNeXFOr}g@qnS;VS;%-Zf1a`mfo>3ilrq^k+
z0>@b6?0^$S-Ct3EWH7hWr{xv9c8u4j9s~Ni%;R-FiW+jB?=^quvY(;`!Cp`j#is@R
zoLdg$#+G^y>p)~hSE~9ql{YqH)MgU8%{P^A`_F%UBkSQ)escm&U}M2OU-|J!*Ga;X
z=?8G`-##_bYojf6aSBx!OB?QjY#_d0_OMiOsS0!EY+qij?L2$;R4%QH>|gBTp2acE
zm8;8+<r931DYNzV9;%BmzkHEI1LQTb=kFlfbwN02>wGNRt@m=1kROO{V#qh<O*;X?
zPs)flZrqrH#I^O|>{|v<7K(jY8`lQJhDJ(0fI=1ZkjZ4jJyAdL^3D7=XO8g!c5aGe
z;pt@nujw8*aP5?eax;8a^27I+a%Gb*04%=IwPV1;XrYFC>%kyYe_**GyAty0`<hpr
z_N_Y!VPIE4XzVb90#%1mT;gPR3d)(00r4fv4dInL<fj0eRu9ocA_%^MieXM`j<zr>
zwl_U`4_G=4_pyYT4c<equ7uEY`pvclh3w-tZEaO6etVccF9){F8cOC_LZN;ztT?^A
zPjFBnu;^s>$LjR^R;C5>JTzAd7vEi4c02(|Zon?)8h>VlSr=bG;i^6Q&X{Z<{yI#u
zZGlV%=6sNLDaLE`@-k#s5_-VX)vPpq>D5hT%U&oG6XVS()splbRZ}?)aN{d{%6@El
zl0HlPE8qBqK88RU5hExcBm|{_G9W-(qW6d}-O0rjDM_fW)#~{SPCo~sgb28w6s2DP
zo}bV4I32^GWXKgFWZ!x&l54vrqvGe(zVDR_jUEGl7@~!sE=ZzV!6`OrtF_dT`W(fV
z18k+}Cxpb=whL1?pv)bpNI3%jJb2E|y}A_6NbMmT`xJ<$dwo8JQZk}bgHnNA^m*zz
zj$D+-KxgFDy6Dc7Zws33l6!k3OWVq;d#_hsS)K>>AG+guo))No$}V3pArt*q=QgOE
zI-n_JWNehkgtCe&mCIw50=jAG!k73}Rn{wS^h)RE9L-#Z06Hi=?T)XTLFOd++`0rA
zC5ygP3{o;JiiRQNkp28?_GM}(Uao#P(Vf;b5bga4r3%=16K-{9q-(#22uq=)5hq%|
zo0GMSv#W_vvYEYfd2vib>tW`J#Q_o3&A?N$9W9(~c@sW$yXIZqP?y$r2AJwqDC4V+
zYMoW9$;34^E6!7cN8=2S(JCsFAOh9IIZ=wm6km4ur4Ni;zAN=~LKA!&vS~FH7!Pnp
z4E?3)?S0r4O~zi>Q}x_Mm*2E{%pl}B(s<$|UI5fbgqN2WWl*k#$cF<bpU7{S30*?b
z4vw#D-H)@a=H=SOU&^#YgPI5xuZ1D0m{(o;w($9RDbm=KYi_9~hq#$R*~PVxQEQ*-
z(oD?Y3wo%Yr8ANIqG9$JA1d1ZwBHZrYCWCAkz_-Dx_umex8fCbUI3Hkut-d?F0i|Z
zN_wX?TjZWXNJv!jcJ^!287_{#v=gB`DcN_?nQV4qp>y1=m4v$)D+!NU6c$rL_{y?v
zVQH66e!<R=A%+@U_ihL9bEzOwHd@+jg?BayAj{tP7wvwSGy?Le;tS*>vRQu^%F^z*
z_G4Y(_j7wwRFu6c8D!s*io0F5wAP5A95QjYb+6S!@np8rae$I@Er4+0Q79k*KzEAB
zO#hrSl~clEpy#Jl?_Mq0lFw-o>RJY(awA8SWips|=q1YRDTdv0cK^fG#AS#fZGbeg
z_5eSjuE`qKC?(ZEN}q`vM_z=pU%BwcP=2QL&7w~Xs&s9yb<04C;gVBWC~dF>5Vmy$
z$2$S=pi$8Hzq`{Tl)kcXjJ{>%RVC|4;E=?1S1TC(r_c=)NSPyAQ(ir4$!_8_^}Y9L
z*_Q1+ukxQM9H7%xz!iQ{stU}`Z0UmozQMlJL%vaAW=~GKFI-l0RhiAwuY>w*M8pD4
zu__gbd7bPku$MkDYSQZQGeo3(R|P~&`bX)|sB-ip-jC9Lqo~#e$U(%_`yxpd5~kZh
zXup`bjRfJA+?NaM_`fQ59D$6BQ-Hm$gR|G6%X6NP5KaebjFug7xwZ(^lb9H`v+1X6
zUXB3<Q{Z!K(hn5dsj5}$sPdM$7${KL`{jndQ#ll2sCq9wFVz~FMz^9?%>q<fb|ZaG
zM6Xp#tJKV?(qiS2jH_iQ*Yawj#1_6#e&KmUnQy?_I!KUi2O*=PW{*xUcuBpVLWpzm
zPEKx@RzuCAoCKz@Enw`H7`a^_AAO{pycW4UObG-Q$O#O@a%*P^_&r}TC}4*_1WE+&
z%g@>&N_NT7!lgEi?57I>5MDZnvN6T}=m=zsiabA=;}M_>>^vg#&C>$Nd{+li1iWQ)
zj!+^@!gjIk+Rtl3m9sCGAco|1Oe-S_Qbi$9y2W{HK`owDD2X?~iv#M;D0ZLkP3;Ui
zuNuem;4pyP;~^7%(Lu{Veg+??+n`{R|IBu1r6Y+1(D8dK(%-FhA?Dn&g`nP^@iY=L
z9NGBIOX?k~1oNR+l>cLm`R9`;a#C|<@*KaPRlwJ&z~$k<_~f*}m1Ucrw8%W3F&Y7G
zGhe6^tvmPTWR_!lbj+#;#O?n_|7T(p_2<C0m3A;T^p`c9ijmFf(0TO}S(!!1e{*N&
zQG9bc!&So3W%Vt2=@JMt!*_ae7fShe<c2F$BDxB&>3u4&1GJ9jrHdy+q>@lnQ47x;
zXulQ%Dj!22cqsopNUM(;HfA3o4wo58b2yHcd7Bz_8`U;@mUJMwGrtPX_}LXGUp%T@
za_@pX20C*os(}?KIhjzykGb(J#&`B!T&vg45>zsBCu!iK$W2j&Go@PQ=jDJKa+Ytc
zgHj^)5FT+AN|tFLyuhSz?@x$J*a+3g4C<yXvWnCL%d{>~DkJS?>h8E_I(XsD>sge7
zgtLjpqd|!>4m-IZ9}ymydGK7T!Eop0EE9%~jnTen0s`r)DN|Px9Mk^fVc}9plRU%l
z7Doj^nH(~5#nXE`b_x`|A5EnDLdP3RE$Q#CQ<gU&Y=3!;M73{yVx&r{+~Wul2IKbt
zVtx@(&b;CHrVB2wA!dD@R9I@d%y|(8>o2ggKWZ2O;{4sn+{1l?&uCHT5~{Z*bm7Tp
z_C57;t6v!3z9LzFWA`eak5_igFmqT`_G_6tg&hJo;)7?rE~S9{<=~X^$)Q*su(t*j
zzH|19>FIKxOF!-H?&u!+xCatDI9hGr$OMjN>}aW&_)dd%@5E_UGo{>gtzSnXJwu(B
zmxpWa3@(Pws5VrBc#eNmH_8pJ1#|axqhuI#IvT#`)2!A<G-Nm0F5v#$7OgiF#ceCB
zP~PW>*43^Z_cvQkLTZ~jV67T~7w&qcbGSi3#m7dmrZKry5xdu4;PcBwm5-=@#L<)3
zF3{4Q%%1Fruz;zXjaFqBBSmk?%{-4f_ZbWtP%!c`l2KkVz63)_AA_#~r;a6jIP=5Z
zgDs-Jpqh72x=&?hr^N-7Zb0ZBQczk`<gc#YAHJJ=(dP;ZmGPpwBwu5f^o17r3!2lr
z{H0_IUt)3La;}Fz(r7*nk8K2gVScVSUvWlNO1$;Xin$t#c<Kt5!Pe;&<S1?<;X?ZF
zXW#^iyCB5m-&kdBz8}gYLvswmlItNZV7+-><`oVkWPKq=gy16&yN@VmuI-QRPC7<r
z_Mn!e2~_|&AO27!C7<g14KVL!Hhv?w`(H>qyjrgSiFeKpLLRVdNU3@18hEGs6Mz3|
z;&D4#-a~0VihV(=1~Stl#cZrP#~@F^N*w>vXRQ<CmhN|f1DVVi68F+nV<!X@Ve&aO
z7~E*U{*GQ!d?0wf*{MDUa`d;Xh|grsg)ckqxHXge2)tW1$6WA(W>Nv@voW)SpYh?E
z!6EOnaEDsAjSzAFk(#a-@Ruy-ZYulx1qV-tgBE?@c#4BQWN}M6J)QJHT;9!ufLIo!
z8jL+V?&A9m1>!dcE>Fi;t1Q&%`w7~7rVBV;4GGi)LG?dccT!QT`Ys5#n8D?<B@|((
zToq(%a0q<VHxH@Nwt&|2bWGD>=86ak8{$?_?+TDAn|x*#H6rRyFtyXciCKD9*3Hiz
z9PxYLSK@kv2x(>dh{$5fw_d4b(;3x(i(i(CVTk4NsmO^59y=Ly$mP93fgHeXicUrz
z`zA}gM=&UeQh9=`>HTA=&soMkNzPdMzIY9qvm}&DJeF@Jr8JtpDN%VuFR*-p|0ZN^
zL1|M_6^M_GE{UC<=R((~scnEFw4rVQM4p1+b>Ao-QI$z3(Xqwxrmw@d{<EFORx#--
z&&HxU9MnHXBcRx1JyaDiD=523Jw4of4N@TAx@mpytMSi@%*U&E>@3KmTq<@enF8m{
z`Ckqkt|dkw&~c+Nqs5em;kO<AVV{mL-x0<KS%kbLuH_13Z;CrQ@8Os;xhZq4;iAf1
zA2^BPphKFnJ;#j`WSoueKOX(Ge&)g27gs}>LK%6v#h0Phy#UO%+N6c!ag$I4(5G&2
z3AmN6hvYo<6CviH7S^AjbzL<tbYS20lYZq_E`VfR+b`gBm;xoOhllwSilZ<O1i{}h
ztTJC3Gx(7jCIC{RXMf&W@xr)0ofQ7);t#*N7$Glku*JEZf%-ZPkoFelBc6KkvPQrL
zT2?S3@N=AfV-NHcfZO^4Qo=Vvys35NQs?N5>PX;A|GWA7W08Q%EGWPMeZi(Q;ueo(
z<s0*N^_=rP;6OtvX)}st#T{#_VcW_C)#To+0u^#o<;v2;AP^iYZ{tQKy<~Yq$c8pH
znO5r?u;H9a{4F1`iV>8bPsh>G@tZ?04U3;~S%R?<1<lgQeyA2C;o3Q*D(+MYWt=1z
z!`AUK?5@n>ya|O@#+3a&v8H@i_c>N~`aR*iip?jez9iOVt5qTosP7~eNwZR~+XtHa
zuR@*=J}>ZIaYzmApuC7NDT4Z8y_**i;6ZLX<|-Td9N5tTu7r`mj=9J~WBF*To?Hpo
zfd?ry4nGlUtv^LSj0aq&>cK|trb;PzZR1rZGzC^mT)Pf`@G;0<=p#3;YZ}Ud;)15Y
z`aU0jTIpVJ(5`c<sT)=xk7At^MA`H`R7J@+6sBqgm#(n~szNm9)QEnd#p<=|4URp@
zpk(rE^9qgv{(jLWRq`eZBT|5X@(9jrWsy8VExad=M*^1c?!bD)^3=7?X3F+J7N@kQ
zYk5l#qw+fMl}0xx`^`+M@x2f{s?JN|PX~b7;Vvj8cH82+pi5x<##G!X_4G#}Gdgj4
zV?0mGDy;rhlOPZy#7Ymd(D7<URpi>G?;JwfE8BI1-ZcQ1c6hQsQyIB;NIR)<c-)N%
zz9zEZihwmQqEQ^Yn?Tk%t~_k7kwqzw3t+i5as$CPG6>;Am#pRyL!SA@ww#eJ{JEAI
zWZ5@P-^$rzG|1WaCI2}ibwh;hXKnWFj!iR1?~G|vaf^w{d8x-x&@e=N*7za+8Ul94
zlye349ZZcUsF&V~mV58H+hZWqOVVNpDkNy3403tjyH$`?hjjPgFwYzHH;&XsZ%nI*
zQ)5s(d)~&aJvuaAW49!Cab}VJ_xG;^`*2_P`44J8bF~nNW41j3b9?oI+sl1i7rAQO
zC)O9wA!)TZ_(=};a^-N~ZbZ|{Bl7(CEq5kh1*>P+ZW{4-rGA*37#$72Z@sd-WIyw{
zRoZ9r;7Dg)%KY~W_6_lMyVogiLcHqpbW(&!k10R9p;8Z&BkVo%qTz%c1uymC>M&*@
zxw?m^Aze!l^6VXyD^JL!xcu!?O#^cI<xAEP&fokDg@Uhv3+r}YvY`~JC9VJ#Nt$V#
z_&p)Q1D7{q9>*DZ)gJq_G4n>MEIM_8(4*(O@D1X68X%qO*~#5Lst=VwCems4`+$5c
zlf9&PA#^`V)6xLmUT&33a(TBdq%3`LOdF=xUsP%H8V6JP<BL~<28KB66qDuIa*qbV
zb980}4#2snUEPct@Ju<?C4Km(()I20j*3kZWGD9%GO*HmVnY*-G$+x6-@Axu=OBbO
z<1XfGiw3CK;7<|e!gFSL=ZA|MT6gg?Z}Xk9YyIe)ekXX<ntCwWIp3Rg8oWfFCM4_H
zhYH4WpXjvf#bvAlw?rg}lWhfiKZd-BqM*&&ax+f|0-;cb**Ik8ec$@jmG|Lp{v!oo
zA2dLH#d_{hM(!YaFht6ubv+5&jgPX?1g0E%9$E*^v9Fi;Zrxf7%qUGGLSXkcMefi@
z0?Qe3o$pq!1et`u_dG_9GO)R##mKi&aLp-o_7r<K1B5BrTwt`HLvtyo!`g>Rlf5K1
z4>TXkRj*fmmNe_E6c*3xbv#1CbN1vd9CR~|KsSI5nkzpgkAaj4loG5!Ptv1%lQX*+
zW=m+EUsyNK=WKY?pI6}{q;X_h8nP994fVJO!1cn)tDNSeqX@Z11dxrCCb!g}_s*^G
z@~P*Q?-%<A!5Tk4a2X;vEo?yH@8A9Ar-fGF`t1&T>(2Nw@-`m&_$)+d%*A@^(f9HT
z&p0a##*VtB97CX%pA6A$qZq8$VIv&gTFB1bTH&g^0dnEd)T4}*5na1^xq!Ma#mYM{
zei?=~1sOTCc)0=h(2+6fkJ5?@9h>7(Qs1w}4B#?3KC^~*b6VR>jq0-D(ehc-1;_%h
z-?^}03^@E2<QI~AwyRxp4`jSaMsd&spEmuRN`?|W1(1yNht$30+#Q5lYual}oJb#m
zvFg70bnV?i2v3Ve7S-|dp_zNM#!Da@(P8B&;Ct4^zz-U>)od_6x}$+v6xqN9GWR{r
z4*Crzrp|m)^jrPwjLyC6=#1(op0<@s9vUm#EA}To%8*JRAKeisXVIzFuS0JD%G?HF
zU{QY~;i@ul>E2K5GcQlQ&$4`Uv;YbUN1SPJK|J|kl8WT63l$wTR_)U6U}bqBnGN1&
zlar53sfebzR+|^Y=$B+|zO_T4?gVN3aFAw-FYeV><U$bNn%7KqkQ`<J;*KQ!zhts^
zJ1CAm2eoGX!^Z~`B0IKu5AAK8*Oa)r`cS0uoLOr$H7oQHa9(^n=5|#f*T>w$i|#^c
zD_nURp94)#rLCCvi0WFlTzdtG+XI*fRUU@WFZzJ&y{9SK5BiPef^onUByp&E(v`!R
z{sGYH1t;DZt^x%{47Bi)wcIk9Urr91e)i=Hm@!1zn#v&deo%HgejT5ZnWCa%S<(pd
z?u#9L7fv|O(HF{dG#dQQ*J3r485IViV+P|m+IfN|qe?+GK?=c0B{*tf*Xn2qs)tM$
z8&NGTH^`o_{Pn?^u}``(PTwGq%tT2Gyz%AUpXDZGyX>x-)i?-3oB_B%QJBno*eM@v
zk{+g4!_sBFUb%D<20R`!dwWKxaG5a`-(fFcoZ%WixX>a{b|Ak-?jEB9#B!!`w=QX^
z<Wvf3-kd{FIg*L@<3TtHy9U|W{PU6wQQ<E0UY}14<_`{s{2ccPoaRfv74`Ttuyd64
zws#@%*v%sT-TV;`oLbYW47H|O=8S5Vmwq(lA9~Jxw9sp~WsVyvxXo8&&aICvdbDcR
zH4>cMNuO#BnVcTM(ay<7L6*aJS4K?zot+zI8Abvhcg8z!*%nY&^iXsb!(ljq*Hb<H
z>=(=|22J}SXx7@v*IDsHXG1`bxmORj)5sXYW31a0*f2@$2FD@~vfkooY(W^jbX$uF
zuBK631IAnO-Y=FHX>F;A(4Bh-W-JGiyaXYS;kI@XxPkuC0}Ot)d+&eYXa9wtfuZzY
z_!$<(@?ZEF@UQ>E&;D=VyZ?os{TF`5^#4crS=LTaN21S=LrzxwrRum@f@;U$_kS01
z@*e^oyMeA=tGUxy7gKXDfzDL>ohN7%!E82@VN<b{-&k__05-K11Gr%xzTe|<`e~87
z>#gV8)UW7#@h>5HL8MinR&iGy!4zqVF&q^AZ1GX#8|qDjD;|6pFb#tpC8EQQf`uJ}
zVYnBunr!a*jK4C)?~o(V({Z%ue%vvart|#4<FueL&SWvu+*kF;Q<J;#&k!?VT7-%=
znw4LRdmwg@!8nb2O^kS}B_iNwE|*QO#xB2+VcTbT3hc8`t2(YG0kjlhqnd75tm8j}
zf5?DfSI1)9`&EUGv-ZjHhv0x<0UUs}pF8pmI~JDsz{}p0B}jDD^TXJrt0Sk0u!S=t
z!mxw)h#E(JWww;u$J-;K+)Hh3G3{86JtF3L_KrVZpDg5EE)carNllaSYnYfy15+5l
zw$2*c-Od)@L@=ZddxMSVA__R$n^CX<L%|Y)*W=zg=JYFFRG2@Kq7x~)y=P<jF-129
z6x}T&`Az#V&)27Y02Tu?2|<KF!>+LVrC~?QqHf+%Av~2k+BR3Y0awB^k$3wSoT4ur
znzDx2O!J7UnWi02hyH3p{?EX7VdAkE5gfgWBAW_2huRTNycUhCu)Vu|M<bfeKY|~E
zAojt1cO6E6-H<#WP5Emw2DOJKT)<gnxQZhQ0~*PT02&($k7U{mAv7@|A=vcN(zjgO
zyZ-uf445X5C<((jV^)WqKFr2kcQQBn(3}MT3-K07kMAJ((*IZtDT>$^ogVmBj@-_V
z2VV{79NJ8df2L`N?xm^7&0%Eaxf>+%(IVE{>R{V|GfC|}My}dwu*fXg8_2%uIj{ho
zQj{I>;C;x|4W_(i<3)VBh{(M&c<)I@!_Ut$shtEar!&{VR4Rk!reyD9G^4!_0V}<B
z4Ao+@MU#ONL_B_Xt$QOn3?cSG^L>}G{{r|10tcGSw(2@aCXcs9@v2xvc02D)ObULy
zu_Ygx45d}THwZ5RD~@H-J;5d!0Km)$a13P+Rd9zi={&$+D6zdILk8(4emGIr>FziD
z<LRE4CuV4dUMubXYZMf0!0s)YI1w=ATcU_eN%^j&)fqV6I0v0ya62|(@hSi^hkj1`
z7Aa3$C`vv7Ih=OwchLL7|9fmO?7E@@m+;6Y;z6)sX`Z~h(1s7Yg$)Q*@6Z4do0NDu
z3`u<cw#Ry{a1DaM2Lq_o(ol(q1rmaVF_^B`4h1Z9gg}`9y}6Qb=S~{-WpjjvAMCjM
z6|P8&WZtzjQNGDln;?*<`@au4`44ga|4<}mm`J|UNcX|#hfubmf5hzr4gN|@aUYjT
zG-DqWO*x|p>J`2;=->?xfv!LY6GNS`f;cpgNgs!a_CMTiNv5|VSckhwQO~gLYC=A#
z6l16v4ad-&W~I_wMD|{1DupobUm<3Rn~+%A^XAi5oP^uO@esltatb?f3hYC1T=U(R
z@DvBtWV!j>y*B<fYE>-9a8?L{lzARdV+{VE!9Q3;4RhX&E;^he-vy2=-*cJ`3ra{0
z$3es<&hn-QFb@BsKF)j(A#Ls22n@f&f<k~3oNg<~qvi>4%!(gBsC_EH+Y2rNDX*=o
zYqSpA6r$KhGjH4M9sg=JT*+&ahD)JDF#EgsZlV!#?q7+^E`XV3Cz@ijv`GMA5U$jF
z8K7@dP#vbh(X5v=9a!-@R-B@oLF=XM!p8Qe|HLN=0-89bB(KOr4Y!cW6GGzRp6b}S
z!PaZ^q{)?I%85AQ&L9FDC>BL;IncO?<482=VS71aDR9>)2H0oPO0^;gG*!6aF7lvz
zz=EvY73y=auzV)6Oo5zW+TJ&?pu*pRLZa^j@30F{P{b#PMrIdqAXX*?Jg>vAutv|9
zFy(eX8A!8eN*e$vXVF1q!_xx%jp+e@vk8WCI}<=T#rvIdRK=$tnXLrUaoGc|X<z&e
zHNj|&V93vC34Y6j7um*+*faDHY-#aUlnn!TrwSoX`s~#nY)YX~W(;Ld&1pq+?aXx_
z*!l%`{|9ZS{DsG8ioJGLAP54H*C`PpacvM8re6#K$jzVCfPh{SEDKOiCqb3FIKL(Y
zf2RcG@Dr%+Ly}qh^gPZ#6RAVj@k>Gi!+hkLbIuh$v6~o2`8xN>zME%;5==TS>tLG&
z((l-|k<;%GD1Vjuz(@jE4JBIOeSMi5$jFqPSZa`zp93P}qHAwMPaabNz)RT|jxI;L
zuie0h>7)+AMbHl)TQmn2Y?Ceh@4+@W9g$f)*73jn`A7N^@}~@R;<i0P)<ar%Dau#Z
zlBS>IgZ|rhiP4biAZ)<xS5VEbSCK-g9mKB-ZRc#7qk756FQGLqBmA7(1akml8pR)f
zv~BRH{i{Ed!nXg`$5>bb(H)2OoDN1I`#g|0f*G<{|GfjSO9$~dOXG!?j=$W><c3II
zl&AUhnq=v<_)v6ABNiR=>bJMR5+Kmfpu5@cO_O?nv_|h7(E@Ge?4!SyVZg@u5On;^
zo=eJP!uw-LnPQ+Eh%xh+Af<=m!v0^A@~h*qAa)E_hramzz6^wCr!gzf2@#(9|Irxc
z{{tfEhF#Tu^d;Z#Uov5b#^S;l#L!Ve&~tL6_pdGmS5t9FSo3V~{}*%OS9gegv51u?
zHavdDf_&7XOyvEI&r>ulIfA45U91inDE{lKMG#-8e(%NW6Dn}Fd;8vw%)ifnG%xw9
zP5yC-zkd~_k)nTK>?4N0n!hKL<^P+v9&C!)mr!Vzd+Oztb6T~vPkAMjcHZ@}Ml3b=
zhw&Ml2a%_bcn{a`ue>=WIZNgPxLCm+b450YorL&bG6!L+m5H*NwPK;fdN1aswveHr
ze=cd28W6PWS)<D+5z0RZniK<67t=oY_V=a!2i>A&Xkh``l{hrC>Hq5K=nUAdn@%Xm
z{%x``t?^&}6rto&y4MxRsdN4x-mnQN^Lwl#e;s-JpC6ZCMkz}Al>R+M$-i{wucIdc
z#fFKp$K$HVpAWaB{(BOvzkc^04EPr@+nN1JeWic!%Veup`@SR6_jkSd$LbM+2QY@i
zBUe{>QJx&R`)jbIEa;gLYkW25b%^oH|5g&o_f%>7uTOuyifDjwJxTdEkJBB0?;Oo0
zk*eX=0k=ZW0hCkZO)|<U(oD9v|I$t@q=7T+4c+mVTUbNw5Z{+}RPm$?5RnhhZ*3C|
zAQ~~OyYVfaWByNC4$g+hvsoVOBB#c~(`5Y7-5_#4Q8PUF{xA2@Ne_4H5nD*LvgQ}l
z`PFPD<bzNjcld%QHu}q#5Ylr0#kZ+vp)+*yWZV3Y?V-K*AQZHF`rwZoApI*3PjPq}
z?YG^a+Hi8Bt*1voTP`dpB)0y8CNontNn;xm)e8>xC-ke_Xh&kdevL6Z_=IzLSSh(n
zZlXu-0mb$wmD3CNr+WkBD(9Q}UM=-_pSHi#qR&L2`0Xb}fIx9xU+-Gy2@Xn{yd;+6
zG*l$Q-+scWDQs6%=qS`5nB7^wi6)5f_n)fU!cZ9Vwy;f6_w+1(a(IW^K^Y=}@^3!|
zr)j<~&KuGY!<#K$Xz%)a`|vu+jTAIQ$&FtG-p1yw^qElIrP@vTTStQr@2cvoj8Y>Q
zipOtWP5bxu;dP!_v?Ri@tc#pEbElWq+)dlTv!3Da9VO7P@l#eT2e3im=|a<OM!!u2
z6Cqev`{1|b+eJPrEIBWlcI-49PUMw3H0D&_N&9_q-M)$@{-rg)_o`oq+$*aCk}nzl
z(JSa!-$N?skVqbNL}c)9Q%9hY7wQ}PpcPR@pcFZpoNKE@^;`Sc<)j+r_V_#9{yR#J
zTwmgbE%1-m7+j|!28r%{oXPXImHTZWf4}UDVG1Jj#~joY{Ff&G`I29ELiP|S!=7bC
zJpSi8{{Du)EVLvoT4GuU8One3{#V2Q(u@Ds1M^uNQ}^G=dO^J_FJSQ51Z7g*agL>b
zo!x)zh(G9p9eQkH621CgI=rySQ&A|g|GWPE<37$}&jYvq@uk22C-|8lfkOS`1C7Ri
z4(`SEs;DH#HhoJ+XR1ZHuUe}TdrdAmAN>5!C(#{)?^NL!na~9?-=hBeTM(6Oht9s*
z8{MxG%%%JKOTwB{YaiNvqWm{<s7fSV;Ux8~5gDtiVf{x#(Bq(q^pKij`S#PVW4F&8
zYT9t1{>)|ie>{j@3fZMdW`$4x*$M?yE$YzJB}VE5uq@10|I48I6yOOZ$557k`z!{&
zCCR+;94ov*KKPs#JfpI!uj-<k#S=N*u1+!gpILh4#KG<Ns(pFdHmeMt9r<?IT}^ar
zRdZ}46>Q}OU82gMQscYmL!;{B;S|R;8cD{AEM)pjO{F0b3=K9JuKS%s0CW2cpWQka
ztQ!UV<l{DJHlUA5Y07CihnAgzLR<WW&W6Zc&@^5!3mo*`-+w)-e`IoG!|QaZm$4aP
z1~kOI2crp;*Al9pUhSHh6rsIiGgB&kKGcTysE!sT`DJWuFmAf=O`{b5ve|jzv*TMm
zN4BB4(F{eTXQNq_Ku~+!U0}+jtRUJpZnK;4QC7^3iXx8)toy*;Rf-hoF<*iFC4*ef
zywEqNn_a<D_f0&>_B#_rFB}F|;n}oC{|0Li;h6%z5;ctP3}r4All0kRs|2$4^UkXs
zf{`zINAjHwx(UnR$6c}-eer_;;#C`iCUa&(d(ZxZm3^myE}ynbD=SK>SUz|4+F^}H
zFx|k}Pf;=1r|Y&@&c85Vx=`(D&qOK_I6qA6vxbgL<}Q#t(5h6i;;flQ-+{;XUl>c3
z9uPtaEnQbE#!UxPqiJAI+@~oK3}Pal>%P#|c;lH>K``N&kboV5A`c0*1A1!|SD~5V
zW1gIyNM|DX$n?~%MK^x?`N|A4p}ep5ws7B=s(hAKhzSr-zj~E5g*wqc(8t?JCN66B
zR5--o-}RYfqAH7oNwJX=`pkqDv_uaV03YW}1O?FzD;3JX@nk(`^O1VSnfvc<2%Hm)
zYc{!9!y5HEd-pxPD3`cgjYct<ZMOv}VAxM+H$<wcz1!z@_sGv)m3YrfUXlX_rC|jo
z@hjZ1_w+9}?3nsWk$MXC*x)>^cyDDa$AoR#<$UkPeeI<VH3CW&YjaXD@kHIYY8C{{
zcRq?!)J)O^@ej{_uG`fV_zuQ4-$C%RDg$~pEF0!e2N^c$PM+-#Hi4g&X@W@GHg5Im
za8gV<xlf@x_u=D~fSd_K6=R`Xm9lsn+qpX<hIx+<yuKmfu^sRAPTCBI+ijOFtG1Mt
zPmeqcp|9Upe6J&3^CADO)1m5ru!;$6LVe||XBeqSeMU@^>V%C;Tyn%1i#N0dUo3Xf
z5xtsNg))-w)^1g$o0%_kD<tw~I9R2ANv3CGH+`1wvb{jkz;B2;oN@ks@{`M(?%cdf
zaA4xFn%q#}9hR}&LR6)bIKSwAB-W$)qEgDP;P;G=_OFkRITP&F<gXHVb55gUkE!gV
z=hN2mf~E2zAv=Z_zxjy;ML)dx@>5i#Xz~NyCF!VbR)H6voxQh;sQSik%4+rW<MT*L
z2jyWjqhUh`W|ga$i&qN-nlzzGrX~LTKGsrg(`=Mu^w2~@&zXsIJ(@^Cbvm*tYruHs
zOW8%X6po3a31C_;&RrnWS>GEf2XVcJ^B$fxTYv13#K`>sjTtSmUh`V2G3|ZQ*6SJi
zPozROZ3?ZQ5)9JTc|y8(%D!#t2G{XEyU60rQb|K?M&cf!I^P+bE1fTsM&FBG|JiQs
z`8nS0>(QMt<I%!N+2wg_AKcC9y1M7tp@v)Hb6<Q7OZZ-Wx@XvwlKb)WI1km;%3Ynr
z{!6nzq@8<1*LM4gN5uF(Hx-wzj>?W_NbMe6<wW{nKsWrO?CmXMg_)XeneG6kq<uGc
z>T{Lt+9LccSlUo1b5|T`^n}LN{ZgEL$7b8+2X{(4HGbXO{ptwESJ|t_8eV!|&8BF-
z!X=l>@i}%n{+#)7`ABv)MOJ3*3#&Obqze+t?Oazcm2W=BICZ_i%u0ZRYgCKfN9CQ|
z+B<xD=cYH6MJJx*Z@j~<6o2AJp{V4yvf?Wevkmg~FJe=@T9-{8#8%3FuwPKg6Q167
zYPX`hYK+F+g@7ydhdH+~55@K`WHMQvRos?$Qt4}1_z61irW=>v=@44;^hA3)X8Tv(
zeL39Z?elYN&cUcH(AD~-dFY3z*)7xtAL2Kfoa;Po^QF3L!<lBsHW!<ynx=ubUG@IC
zYnyF-Z$2vc*?s%i);D?mHaycMc?ppXMq`dSbes(-dWw0M9T(>IDkelfPvc5!Q;K?1
zPt|gLOmOOFMPtKv!_`RkPVEL=>1WGsb9_%cqLF7MX;bge?MU5IE<DMp)oFWXV~{7k
zf^=|DCrb&5^K;08R9o@Ych+;vlr-1EqJc&HMTa5**8{Q<e$S$DHBh_2qiigRznbTV
z+$p1oiYbAh=&LiTIoj#w_u9sJ1{UW`I`=nxe?4yfEK|eX)q~CG>->(9nYs^~8TV67
zz8sy8x^`G9K%Kv7&#kU9^U+tMlXtRwDwqxhy{+?BnCX_PD;l=dIu!CCvh9jcQDb}P
z{#BQw#3$BGYd)DdaGv(-bvKo$&#b%Rbbma#dP6;bk|Jthy@%qHBkblGlTMX1y0>0D
z3EcGhL(=vQ+1W36K1zLH*Yh_o`_`RTcl@lcLZN|*Z(zU}6L<T@S6Oe>Y%jDgEq`I_
zuA$^SwRfoOR0I=um3!FtXV&kUy?=fzW9vTgs{Eun;q_g6QHC!}qs8-QpWXC6aO5Ei
zY3(@IzMdrN*CNwK&b`9J6U@%(%z4vm7S9_i*lhp$wsc^6W^<wS%l<W|#>LK5u0&~Y
z<#zmV&%1G(ZO-V{qm4J7X9hkouz0L|u6IdLW1&lULDi2KuQTP(i79;*B(UFXuM5pE
zqh&aq9JGbv{8|sEdrva`Zyc4>qN6ykt6mENTJK=*&4rn|#OC*-f>caL52*?N!2+@W
z1gjAb3I$#F(~@ylNY=2Gd^LOgh^tMRYS|7Mi_+GSEP~p;)0I_f^aqj#ii<DjSudD;
z&m0rDR5$0pg`&DMDn3KbygL7^^1hNI{l5LPx3(P@TUJt@wLiNQ`}kgg*J{WJZP<SQ
zjw^Gu&esM@@%8z>{+|0EjhE8UynN5}QAXzCfc1;n%0=&(lifY09XAdnOfZ)}&)Qxn
zn;1tpY?kNAy>cS0NATQ(<k1TI9HL)X%}24dHJuSg&O_NUdR1xJHRg#vEj}Lu4dc%;
z26UB<y&m~gY23px__@KR?uhSqO}>Z-1O5=@;YAg5YfD<<%ejd5G8?zUt(TraC5X+P
zC6A|PC0&noPt?WErHC+`8oPG7|Eayt1dU$uq5Vxd1m@?xdwLhPcV%CXXQVi9tmFfd
zz0V#g2L-gdP9geF6=m_%A}}+v?aH&Am)4-N3{>EhWg@Y?U_ZN!U4-(JqpI$YrmqJW
z&C8yeMC8=x?teW})wRmPDcNvbOLSTQTfM*TBf6_WafE(_Il@Mf$2F(d=gn{sliuhv
zhRd92WTmJ+Hm5c@bKv4}$&jVy;pcX*%LFeN86@ZsHl|V08h)%lckV%j<c9u(KU&4@
zotTc;ECuYCGyT@Bylr1O&(G3$xpxaPWuFpG1V}XHy}0|dB=|~u+cUvXpPcoxyOivQ
znIDD`ZS3<HUtXOTqflS(vG}8ql@Q>>FkIdoAl54@{DIG%PT_FFw}qc3i}oiH$7S{N
z`jrRbo*Wjfx|mMMZ2q%II&i$UOuu}4x3tyXL(Qd6JnvI64IcS9qF&}b!J93+>G%t8
zx#{6G7xWFg#28O}8x?O3kzahgsk&}#Ufp;hW^|7UEiuvibMp8GMv>`CPwB<QnNB9s
zXXid{P)FV&rFVS$`DG*oNzBB)NP=2u*F#gz$9c2L`?S`Q*T+VW^vw4C>{9t@mzq|F
z%;Sp{9lIB{rxxyB`SiMfv#`v|jSO<XDOp6%&4_pLJ=q-7-A<p@czW?isRwJE^%aJB
z(@=&}`czDTlXq4`IFgnNo|;EJ-)Zu(h0!sl>Gdu~hC>gzc=*0(dGzw6AGge7A&IUr
zuDzI^cR5v3uU+7Bzy^np7o}KYZ*tjfFV*ZKWSi8dP*V>(*R;Ad7*BgWUecR0V&)R|
zqS5jndt_%(^yVk;elMLK7M<Nx^a7LlERsbBr8qvV(NZwE&q9*7t9{-`Vtn8gAyBPj
zG)nCkQ|@6FG9lW0i<8@wu|<h0`Jg^8OR>NfEs4z|or<wX$L=tGDmdeDXDCkHx~-6c
zVaQ<pxt)pcO4+=>9@WpGV)`0?U~miT{<FP(4>PBRzSY0lq}#m3@Rm@K!lgkbHWBmF
z8wG^!&5EY1lX}mQvvx-s3n_CkOXnOxO@rDQX0TTWIFQE;t{Hm7fx?-PZg=K%`@#M<
z%`SH<azfWpoM-3CI2Sa}Du07TD?QM+w!QV`Aa|>APs&zIRr{;-0BxL;0yxU50KrVl
z*AYB(rabX19EZCDwlRvlS7s*FUhkZ8m`>U-w^8U*|4DC+-fF&9k>t_+jK?P_iTc;v
zo1vWQ9Z@-Tj}o!iub+?hI-L{>qB$76>(QN!?fEW29JwUfJAsy0k8YN3X*QlMSZ*)2
z+4@FoLjPNtLgitt)j1#X7&#9PZW9z7qg0+bc2=4yEZMB`iB`$E&XDP~hbO+d`JJO?
z$j;x`V`le_5Fv5t<cD{|qLCq+{32+#Jmsl1G<oV7erB*~uiyB!_pFNoYNf^d!#F4f
z!$LOud21029~~x~u$$mwFXdGT2>gDWvGGIf(UCp7)i#v9y2<L2e~mGHPwjbUrIX(T
zh{ENiS?;2<?p$iyn3WO~BXpJYQ=0W}4Jz@aU*wF=<CAozGh}Y=)#kI)=h`#kvT!ax
zy7YdNH(wQRPt&2p#k_TCyOr+HhYR#89N~`eu75c&H*VBedhC_yJe;Eo$QOm&&ryt{
z?7EkeQXIehaVy8zoTFHcg!`-;huZUnayOZ$Gq0y)7Ed~7m*3wSH=h@FY)1J0nI(}M
z6_)Wy2UdRWq0bWmgRJ0X?tL!xhd%D{Q4+hpZRT`Rt(+g6{w%S)cS{}R+V#lT_)Zyo
zSK)nZqcGz!w$0sb<qL1X)ggC^DPR?5TN1qv5H{Ygre4mlVST%F>-7HZmb>VQM%#@y
z|4?Jppib&BPPA+e)M0!Scl~CqZMeYZ{PPR+_x96IHCrFn6bPXX@i%G8RypF=vEa6B
zD3p+<mS(omX42N7t?;!1qm!6MeaX_B+~rFF^$h_w3y<HKHu>IEy}3qzxVdL>cERoj
z)%P_9W~mDo!~!bHY#I`EwDnUx&5c9kMHZLccb47|ZcItjZ_CYdZMk-|yx+n2@m<>f
zLuw_|Yp9I1Nnv+iC^x0VB&ZEbC3ki_tO+svJ1LW@?$H82`PzSZe$3~!<(IV{n^Y&y
zDEXIeUr|>M(;xeAe`n6hWX-q4N2@=jR<1XW5m0+m8C<Kmtg9+?rQ|(-fc5#Q_L7{6
zoc=5QPt=zq59^kG&z{;x)CV13O~K?j>ylvBo)a|_6US(WM_Tn+MXxAJnwkGt++|^F
zf6mgQzqS9=oZF!yow5a0_v>BLA8g0kMs{<YSg$90KBceGx+`<PIi*Lte&QANANw43
zDscoqySwhCqT3hxd%;pSw}o^%S&M}6@ux1|(5@ENEp~8ucGls`!qa*yTH?%@w(W&4
zC&MP~X&<E*@HL(_r#Zsm^>(VMf0C`x^meN#hksH3F|&lC?Z-3)+?5V;+$pQRB|DnW
zNm0H;<eAnrn%&d=@aO4Mf)Q><M>gD9d*gwV?&|Vc|AO5Lw85>z^-QDf^4HI<@)nsg
zdR4kx%j$gz3#t9^#_;piw2sW@TZ<=u9BW&*C-(MtH=3FGbbZYlv4%a$Jm%svi+Ov>
zUaC10{p+`O-h9`+u0fJc*vnYbrl&*b(&7WcOQ$9(rhfbWRvy932Ok5ZP7F+1+6;A%
z1~|H{na8EU0`i6}f4?Pz8Okh_AOf@UjW&H9w}0O4wA->rqi5{+c461~1z<))pKq3w
z7mc>Kbk9r(hwCcrPEg={^R?iRg>2c{xQn8@*#)<>K+!3qgvqvgmG!K{6V}@1!@QMS
zJ0z^NSiQA-y`6`hmT!g>{cO=uj61FKZtLu)JgNTfm29z`&xw8qj2CLXUb>V99xL+v
zaM;4viT#F-LZhv$SM7&p+XhRaJ9H;9TO)Jtw?8v!x<SP?UvRF$c_BFNxWGb2hgKI8
z=eON%PWL-Be~gZ2TF(}<eeqZd>B^SqT5nSj$d#j796XoYHO4eW6c@du6B3`n5to}f
zrxYsI8kdvZ+IDS&nP!%Gq-}v~wdq|y`%#zXX6X;q+#lFq&Ch65{LI<=(oi9r<;1<7
z5R3iJ2_lEIq$AWiHdx=wNjUfI!uO2bEO}}4O8!QwDJEf}4T1KV$3kAV-?G@L`!Vu0
z#nkRB@99cQ=hh01<DcIj3fEPB{#8^eH>;(}K#biqCi|tyo0o0*R;zLX4xHdl(d9{6
z?z#WJDtimKDBgE%91x_WyBq25Zb3?<K|s12q)V4hDG34TknUJSx}~JMLArC{omIc@
zIp=?VzjNL{?#ItE%<jxQ^E`K4*LB}h)}4#|LIKR#mxhf4`^wtzs5%p*Eg764(7CST
z>Xy;U{78SV=z4W;-_~HjQ!yHqrfFl-GHJMp>JOj-!g)lFd5>J;)l)Ig$qTuQEd?F+
zx+$8d-%}T9crx1P)WZg3y5+xA!;9_~{kH7x&Cj}Wb@xz%SUZA&bs5(0BXg}8S(aQO
zc-kn<@Ee&4R+4xqi+iNNN*EFJcw8=uYYG1K7Z3sf>q=~ih4xighZPQ3z67*wb^<|v
z%Op!`7*AUOr7;~rGf{O8gF~Kp%VP<L)X$ua0_WNJbC$lS?1$xb?YfqjS4G3PugTp9
zL=)&D;fC$%Tf+L;+9bph4BEa<>3+t9qxy91M#{ZFRs{E%&o(I?i3n1k#j%H}V%mVn
z&=LiDrppE$N$pW=l=BRa_Qg6!C<0OEdz{?j4*P}2L&1bz1mud7UyGa?N&LUgY=HI9
z;J!J$%hzPvHxq)yZJ3^q9*WtshKuDwh(LcU)RhhzqX~X!I`F>BW+8r5K19~lzkR||
zxzi(sn(pjj)%ZR^gdfGv&iuRrAOOZ<nP2l(P*VFA8Fj0@F&^|O-ddQ-{HhIHDVDPm
zDYiYMVSF?H{$LKHIQ{7n?pAWh6?$Rja2bX}qj2c#ea(-uiqD*NW5J@4QQwwW605K!
z!YU=DTs16I$^XFDL4&G5wmK+|xC0AapN+I%uqA2%SSM$8{<~4jR?5I&&*t8A>rmnT
z@MCVKHf+~7?z`Rf$*l1pS48E5Vr;k>Vd)Ve(Vc=GeulejcGr>EPM)Kux3%f%7&#=w
zhP~;tp*!8d?CK&}wGCWYybF`3?-0j&vxF@t_(|Go9AD`t9jLXCEWX>sL~&8iqofYa
zYJj{9I80NnZaNz1y8B*-b~_p!UE$#~VZhfIFmsMWXW3kCH0NkoMHFo%Jamc+Nim|x
zPGBJ&(_g;z+X-NG$fiR~9=Eh@`%=qt#)$3rFwWB0RMw5zTw=rQSG`#mhT%VZNdjqx
z@Z&cKJgk^#$}6Doo5H||C@RQEYRE7)@KKaT_cFyY`OUWDop)|g@ScSHYT_(2(Lf-c
zsTHp)o}0VwJ2hP5=jIC-p$-aQJ)0r#^S0A3LtC8ub?NJqHREDJqHK7aQ)UxuxVhcx
z=m3$@m76-L5cYrWl@->D=us*;d+XMl^f)1da=0<Qt?OYY>eq1MBb4T(lx62-AXY7c
z=D_zoSFpPD83r_iS>eLIc0N<OwccYXLxhlA<-#gEHb=EePW+9wove`?nFHg{<dGen
z?@Mn2L&d<IsLRjCn*Fxoo&X_5z1kr1ey+2i8`}+dD@YQ|6GlnNG!$zvd1njve&j(V
z+elC;c<h^h7wP!-moRGaopfM+YAvrcqhCp4Q4gamY;l%MK|y)*b{!4jwc)BgBnO=z
zt2CIHrb#w~aAwbue9}1PSohUTDSf7#ddY8SgU|`V5^gqxN~R7@_hr_<Vijs_V!aG$
z;Q>sj{b#7Oyu1L62Ry^Azb-Omv+H%@M^d@&q<-I6h{gf08L3a9)7E0URs*O^!1+=n
zLs3*!kR>mCZIoPX-#$;Nwr$H#LWWV=P}FwNA%HhT`J)s5x_fz-J<(v5WqiY7^gE`W
z%1!09R}3G)T4npMe>7=QMD1$9g<)Rmar${alMUT2*EQ9hhb&y|o-dKsye%T~(e+Gj
zebHF$mPvEqH{zPov+6`G{qhy<NH!>^GB}rT&~|a>L<X!5_SLQ}_6E=Z<`L?G2mtYi
z4*#p7e;68f$QKtVohTzg7Z|5}1Z1J3G;N{<xQK3FCzB5C{Thlxy#No_lW&(iP*7Y*
zUwD*tAedQlvg^ZK1NdS#%}7Io)2EI<3U%?^<=ehalDY9lvMm{1P_fRnb*-k>q~DtV
zvi5UJevzqw6w#2}mg@!Ulr(+)2Fxom>L7rOVR<=u>$nq}5g<62<Es_l$}2K;p+;xP
z3@eiwHlB7Zshdr$#`n|F#+T;8ac-nIMOp+I48G<S`snsrEpjhUg;!|&xc;hXh@m55
zL>Ej&E^}%EAzqYtl78VKgs*$HT+=8e!=9Oj#7e%)6T-CB=_+N6L>bQ&Z#8%7VLcdL
zmWi%_df}`+C|qP)_QN3w4}*8v{yNit`KD0+COUNk!U9K!rO^(Z&)*5431?)@mZ)Fy
zL?$1}!r0BD^xWwx9yHwnhX=O6A?=>gzta^D>O?NGBMr5+(i9Fed=yMgKI91Hb)pLt
z=vsQ_ub&}j>zN?dzarW`m1!4ds751?BUdCv40f-$F>3%)eH*bPfAK7p1}?!=|Fgj@
zW!Krchh$Mffisb}bSNqQ0a1(UA+;@U)t|OP3U6M?a`;R#ta^{=?lqsQ%fNfvYS6{e
zKa4m}cwJT50U4od*fat&D#m4QNYayH$w?R+b^fq{nnF}<3*M>e!<d3!n+ta_R&`zu
z=TbRGkx^cJj?L_g$&x-XmNo41HQ}K#b709Opm!;xlKN`dR$m3#^i;lW0h98KFK^;}
zc1zh;JCnukqUp?=aeE=-L7p7AZy5MhQBKlb)b3_x247m1g<eqejp-BN--AawD3}wj
z?!ah7X>aAh-;0z$s@Q85q5%)`jijxzH8Zjz!GyyvVNQBP_fPUl_uTDEG5*G4!O~y)
zP$`c;sIRh+{zL%?bZg`ycueeXD@~cI6R*)bj}IfRl*mrk9Zhj6{F7~}!Xz9sQ7FIZ
zJ+eCXZQGxXPnCb(&+;8UOHNN=f(12pi2o?;Uc4Zuv{xWRKiP>RfNhs1lM}vhpj;x%
zOyv%GP!=*KN$#z1e>pw1rPN_oq$Fhn&P`F&G}KJ9YgFA8?cW%dq6@?%SinA9xku=%
zAS#JKv-bOCkZb>vB)(36_3VC`-D*`=V`Nd8WYPhIFV@A>W>?zA@hCgzY*VO--!NVV
zlB(};WJ{O(ie6E_=zUL2j;o@6r&JJ6`ksbeYZNXF{xXlt|FT9eEDn6$t0mV(^I=B%
z12@h|-%r_!aXIu)2^2UZII8XeQm94=S>CVkp_7me5!RQYmGoz%N;<!?pee=BkaPY%
z(7z3uUl~!Ygu_VnoDV3u_r0$kqpPjNq!>}mZz369A_7pE>W`4k_qewi(kcS;pFKhg
zpTmXyMjVB0SJOVT?mn6vT7t_Ugkorq{Z?loUk{qV{(a9^AJ>Mxa$EUDl7Y1HVd{7>
zUgOrk$;)&}=f}j|>3-FUfmoActz%Owg@{!Jn-6GbK_I348#RdbO~`--9MZ`g)snyh
zFS8@bbd`2Qi+7qVlaJ02=RvHQkav$W_rl_(-Ob!2YR(JC0Xzxc8i6Efos{i$1^la8
zGiO!Fnfy#wk6SysK&Q>!E}bh^QVTQgP?E9q()1$=cJosf>=AN90IHMSWtB5pnym8-
zy|IhBffNCe1f^WZsJsC2@1!&^&;t+_bO>+3w*DTbLU`cBu<-hNN@hS_30B*?1_eSk
z$)%DB-pX(JW11eH90H@L5+UB}J{azwloZSIg1RdX4U(WxXr;P9uGrq;j&?g<roB*F
z5(0dYd5@G*>36m(qi>h8gUVCW$zTQBm~zcaN_w7<l3tBm26Tn$qaiU?r4EEmBG{ON
z88?`V^-4;)gyA*LHqo4C>y(Adwuz-Gld`xSRD_pZ2l+#!H9iW(XZYw;&VHS?WF^|j
zl%!mqo-~=1J?=iA(-Ixcm;^1a-dqkG<HatOmSb#j(A4R|zZPuf%1{&@TvbL-mvWt9
z`U!gCR~YA6|7w<><Xi6YyZdbK4d=ND(agLMbCQ&S;i;a}d`1IosVCB&VkPPT#pf2a
zOmR0tUiqwHJkQs3>mo&66=y(Bpo$U!$ovafd=<V<l!$svn4?7<oN^ebRW+G^Ox5=<
zps2q$yIDv;{2?YTQjGYUD_waFaJg%*aoF_^Bw^HQw{UV{gVyA~tHa8?S@R;k@E0+!
z+=k6XJH&jM3Vsyaqd23l2H;Fyr90kK{1e89_Z$HFW?CNmMJ4(@YdV0chcT>l3lFhf
zUEnn_2YTLJndw#LzwIe^T((iyIlb?fN*Ez1c%5wWaPGcS(H;37^s}hw7%3ZDLW8ZF
zisq0TmE+v~R|VZhd))NU5?>TKao&(WI>{+dXfcO3@#ysSVVxQb=K+AlHBO3996gK7
zMv16unU4`$-b``zyDPB;AS!rtgE5e_PNS_OXPYdFe^&Kdc?vn2U{SEhg(e)CScW)k
z<oTdY*;jbXa<E#Xu*$|Cyn{giV2N=_6@S7*J#w%d;C~s&v?2-?uS2G`R<CJz4l7Ou
zChq@cnl)Dd+zY~eIk=|d^L43k@&%j2!(dOLU8RwF8$mZnz@Jk*!8@eOw5z1^ab~{8
zAPi}J9hSn1q_>`D{wrXV(Uz<n3=Wu-VJPkIU9HgU#j3is7EUMIK;rHtV?n>F<!P7%
z;?Xlj^SnakhhJ(Ydj+*>gjsc2VVkVxPG%7%)H&gQNJq;fADUifpB~OYdSP*trpVp!
zV8=w`=be8Psga35;4Pfw8$o`5f#nzfj<s-^V(%0w7#=i}wfT7@+fk4ue2M$T#Hn(T
z#|OiorBdn>axFkmf~2FT<shl;loInAT%PynqjCg|gFoUipI9Bwxw9vP5l7XpUdws=
zbi1*dg^A!e_qUcEWjE*V9rwq)QK634@p8iRt3L!D_hTwLJ#{24t+!yJG$qBaq|2en
zSRFS+Jyc{=Ag0NztNGQVw?CscLsYgazbo}uJZNAnX{TF^U0^61T-Y<>-$T3e@nZR_
zgDUGYd6`$B)^E@7^Gb!AGsUjAX&$P6+~<aX&f`YOGt){V^AVHhBl}y2BFBi6Y~`!9
z&guPHi~FN5^Ni{r<*<Lqna4M{D4E;b8;PFmGn&kY9}L-tx;W&;gsmWXH;v$8!^Vxh
z%UCM&f~z{^px!H0YkK;#$X6QW81+lp^Cs2@;r?~?)bpco2UCS9!DqkOoN$1}|Hh-g
zG_8$933gN&r2!232$CmLVBDN#xl(Qgerj6{qRUQ5!6aN#VY4P&Sld+oM5ya96`~zY
zT->uNEIRoPk<SW3jwlyz2Q7UrWMDXxRUaD6F<`VT=mM=Yk~$TiIX`1JF712?WBe@W
z1U6JZW!RViWsb?EFR(#yAtZ@xHG11faG@`PEcM<eUbioYi2!@&MTL_NYAzDs3K@ot
zF~pp(FTd+N3SK^S8mV>dG5a+|n?l~mcO~2kk|*R8HPlBf82U`P^wg|13=yT6dzLye
zqO4R6#+cVpUHABPdN4bJ@h96K85fH$VK^ONLhFi6A>^D>H>au!wJr@el%xFnXtbd1
zE(<L~vyG;W_)2`WRsY09@1QmH5!WIkeTB2HfYU0;hwP%ECp`JH#*TrKO9{`BH(#DZ
zgWk6az#2nBeU=-G_|1|1th>2lr^3K>|EeB!HqS4Ezr?)ewcWv(`}wbUe!JL%iq>C-
z${zLLVSh*Pwfo)C`TV8$&O`mxcv6xcA;tU=dnQ*_iT&$&oX3`wnLWW0d!&A<SOAdI
z({758tEW&2+DDLdTz2>@IsTj(6%{2nR9LJpy%deC`twUM<#mhL2FD+J6fuV!@pD@C
zxvJF2b;sXFOqHm}^2FB=+8cLE*;zWmW2b!wjEYFx)QUS0?be5v70wEGB5kJ|8m=iW
zEULl>zUf@?`n>P^V*Bf2obN=_i*^`L-*kjT?cJtq^>^wRf-rF&GnHOo#}HFkU(w8?
z6{1hhGiLS6UD|?w3{;1Lu<S#vO|Z=6R1&LH4Ugj$zSEe*Ja3NS#Y-3^&{uWf&L8wy
zE7xjp&6-QkROq<-DwZdE_h}}pzrcF}MS15}vnY@1Q*Tv9N0tn^M^etvZ;eeil+D?z
z?w3MQ1U|D*`V=D#vp1gg>U^z_<L$Z6T+;Uf5sq%q|60z=GIz&*Y0)*LMw|U63V(+}
zKGw}Utee}yIS7ex$>2ncRlK%CN2%p#xsd|R$~$2<m1D-!Hv#ZTpD*115}1jb8?Bd0
zv4x2vP<_pR@DIy71i)(HRNbKiv=O{PU?j@wo0Utb`srHtO4W%30rPcl*e(>UN0Zxo
zB_8(F110z6zQT8l(`X2T;{yBqM@dvZO9uXSKV=wWI@;9xHY@ulGkot<jXunD2Uw#k
ztPODK+*cY0;2#L3Df>KZwyn?7Qa@p~eI*!3@4W1WuA~6OhE(tEydx=l$mYFh(=*Lt
zVdO~qs9rj(zM|txA2gO-T0f?iOHe)*ZV6Qj4Qa=XYcb<t$J)CxALF{@I2|EB>j49P
zCo)*nhzTT`TM_w%jT9x1a^Gd7$>tf56}EVTCfv(hFm8(meoc@+2n3;L4op2)BSfY6
zHXbbf(djvcKcVC43np8eS9cu0I*nDSrCq0^L4C7cw2{dUBYEBX1|2(Iz_Y3m7aD&n
zyRrbV6EvbsBm`)VUXenB>uP7n?3dVmfsMR}&NfjwWM7wgt3@04O`K~F+kP#QA|OG3
zt<%8<&!}=wGC$v5c#!pYhhWNuX3L$}{Bz&#WdpWEB09UW<D18b&VFD0)zZ%__NI?^
zX}bOFUgRsoH<$S7XEpT?Qp=7HV_HcNO}xyGmmDs(XX(4mA$|wuWo(8<w*`wnA*``s
za7*9^&H1uRrX^%K$Z4E(+JgL2F)51FrgeMbEOk2&9=P6kPQOT6rLfcN_l|E$93_!U
zKs$S`BVue`y-WU`oI=KGWkAM?YU$}Yy&>Gv!^mJbtAPk*)Xjxj{#EG7Vs9!ud%epk
zlS%R?{BKf-Kgjc-irSIp#X3y<TM?IxzK&R|8o5*{J)Vl0DDtDzBF>gw!;V1T`b))7
zH{;_ew2F_VyZ0%Rchjjw5_9_gPQhDAoip`FUgWzhYoP@_FD`wsB$f0Z%ExOWJ>gQ{
zb?)gAlIp{rj8ogrGTeXM)_RYuuj}QG@4Yc;Tll)W2<3MFkBqGXkSl|<Rb!_;&;h}7
z7PT8DkcJ{ar*z(cGT2$nSS}}W&Xod~($%|Shl*#8G|Dp{x?K0YjoSJ%^#{9|zrI5F
zMjxotL2~BkgoK$Jy-y~&m`*Sh(o*GMc|{#I<H8WRRXXy@`y{S9VdhR&`trRocM^<L
zW)ljh2{U^IMHNAu_$*1-*x?bLigrWaVqm~Si_Dy7plK=LzLz0;bOy*q052f((6TCe
zEDA0xf1Z2i!f5DhEd9=j{VJbwXnyNWj~QKHQLiC;K_k+Yi7B;75uyN3%vjXwD}TL@
zaz^ZYKCwhU#S$GX#uB(mE`JCL4O4lZKZONlJ}n23)CiiOgZrcUVdB$A>6<i3m{nWu
zkOx4|hpPw&uvhR=jXhc4fM+9u(2_sfWqDrIXhgQM?+e#t^^AB;UG_Zy&r0h^*5&I~
zrOn6#)xr;KDR0W7vtxCW)0?^Si!i(akjpEKtGViVqdOP*508ve#88^X#vReXpfI!*
ze6ludKH;f8<@?g8LlNwKpopGceOtYj`Pk%z17Nc5(|Q@Z0GmuUZlrrJR3==%M5PQ?
z1p9TS4>*yd6Wz!Syd;zJfi!CiJd+a)-S7z@Ef>jVUlR8Ic__DN<B`whH6sBmlPD_>
zarfHe<S$1vvp;LnW@O;eyc0%=D9!`4(_Q_VPxL^Dz1T4mO|_n^pQWrQzaG}{;`GCT
zT<+I#zFtlT<OV<IOoo`Pgra{AnB$7{U*MWZiJsH8eSuL~h^bA#%9tl=DU~Vi@uPr!
zI>5f<7mzYDi<%R1M{Gx}qQG|hkv`3{Eo1B1CtuvwgrOqmtN%P>V>3ud-J7`D2A|sb
z{Lwp&mM3fsNH2z{c)CaQ1M-Q|12`;l-%ZYq7G2UP@0P%yz)>wxM$s?vccCKw30Q)m
z0SlM<(yS^Fu(%qIG6Mn274imf09KtQuy&mTt^~_myrd(<Vabksj{A);LU~DNa)FRF
z+la3+4Av*7%#f2Fa61)Uu?Xu-kAv@`^YvQKizgWj?I|w;*zL;}(-k&zAjLMi87=UB
z^xqy*WRU|HWRS0p@6R{YZ}|XZN`q-vHNi2mppRoalokDRU%`nH9h0;(xQB|r<kR2<
zkN0EC_6{!hguYoAh2O&~1;6-RZ#18PlvC4q#zls}u=U{!<Ao4sv98>15@}OXk@ys*
zbx`dPDsjWqetRCEJ;@K-b{T3askr3<!q^S3>ky>jnh>$J6Fo4GlKD5=%hXmoH%DS6
zn!BwKPOtRkGt}!=N1j#vx~L0prBx^ThF1S6ohZsc4k}4NY%9S@^GC4CV1bI?36;4j
z!yTefvK=>FBcIWKv^yp#v*;)0DV~NG`sf=kDx1=Y0x)44Kw$0VvpsS8gqa5`xYnF!
zR;OIIn%*&luRwR+pHr-WPg8&50~t9-J|J}|xJsAf%%0*r|2BI}2B}}iQ1_eW2PZpN
zi_IiDC;~a`M{#khmb$hGLJ1jI?}TFlmmCAf>JxTyfrT2>G|H|N?ai{4tBip0>Af~y
z3-?BXj|vd3iy~tndM!Ckx*VlPPkqJ@kYu>1m`mp09`>`_$$V^Qg=<fbnbfEHr$tnG
zJ?)E?_y!*rZU`bJ_)?^#W=<n9bF6RZ(>P4d!ddIh?)I2j%!+X}$Nbqdk+ewltN{*3
z>DR?)`s1p_?d^+2yrZ%44};2@pr;{e<E7XDv8zmuxp3nDRx^uLv;r;+u+cRz-6t9m
zpl4oJ1=bEe1gSMX<UaM+9aDIBd-kj$ud;5ZXO5N)#SDnJOgkn=UM-Hh@85hjke^BF
zeIT?PpkDPLH;={p%`hC}0iomdfRdM`xF1jwag-Nf2<S}Syo7`DeHMpB7;DN7yP6Pw
z6v{2ffiE5pJgAg_TN`%(Ticlb5K+BO1Hcx6@K&o*OGjcklJBb&4wJzF9Ack*1TO?n
z?r5U}Oz|b20WwTw77?mE^EY4G1l{_wY$tZje9@C)m?YJYq6$)+mKL>B@V55^X*)7V
ziQ6r-;E=owKXjvxEECJFvb=sZi-m5@^{@y3@+J4<JG%7MYR2*gpJg#i6u;LYy(bTS
zI(~eiw#8l|KE$)_<S(Kua3%U&zus8s(8XmE<0@p6j!T+jk8cJa;aE?!N4n~YO&Q@t
z^y%>>SJ~u#*?u#rs+q<O3knk_KOj&j+k09ZVPk@Il17znt-%+*Z4^L#qkQREog$h=
zcmTnw(&$l`0jM#aepS+(E-Oq4!tfPxKn>OSSI>;wfERfJ818G@-;&=(>66g9gt@i)
zB`cS?y8$Nc@#9nrtoH!PwZwh5)0#vvTGh4Q!z9}5sD8nOFA>F+q=rlh2YIr4)=nXe
zmUY~@m1VUxm8E>qBs9rJg&qRo>Ch-wk4EPKA8`0IfA(&Jw6rL6k7qK*642;cjkT}%
zNlHCc`YfJG3knmaUkl#COH;cNGT4oX7-o$GqMb|!+L8G)e!uE1S9OwDH)3g4-LP!_
z)ysnrqVwr;!5fP!mt}%t7dJYei?t?cx?@i7h)ROK&S22JlLxv;vEin1SHfvLKk%$G
zEcQjdb+!b`T(zbUS}9VGgOw&}XewW@-@0cY-C!ixm06xf6CfUNd%C5{dqi>>#m08{
zuquX+A^3o###&F@I^z=`8SnX9{JjK7GLeo_QH}P)fm)-D$e}Sy0IPpb7e@gLI`10D
zZ>{<y2T)r9HP-u<TbP9QUb*gekMgF@2M=#fy@;=5-}j>ivevMpP(I9ND6m7!E>$S!
z_ou51gC)s26XD*Yv81I8Y;skTbw61XU3;*lE*c0Z+}+&W4k#Q2M-$Prqh2r}jB@k8
zNafqfAMy!sNmbse#69#5tQ=OzK!N1}do+G{j#wN(a}_}B^CV1_^O23--0_H5j=$bn
zWQ8NOo7@)9@abnSjFkTLEu)jICIIyd(`@0g{-t#0D}PfBmV8{P!^*p=r&_|eJk!gp
zV~W-~c|*(^g@A+chCtHZ4Gt=vG^Kd6D2yW^KMR8|DUTFat}MkM;UV@y#KO0Va`N>(
z<yzvE&gYy@QTL~+#C|`_qqc_5B0UAYw&rEfgKSu2k711E-s1wpW+L~u{AmcEB?J}F
z?WMzu0BadZ+~|&Ocu91cXC~|ml6Ub4>dPZUAjW>OjXvJh_B@@BS~;oZBNROCkd{wD
zvIG)l&zwCS8?EeOb2UKX<jm;I^XpTGpuInT=+#a!($U9{2?|D~kO=&JeXH4k$tPIq
z@)=C*2!LrE5n2>{%qS^IwARWN$wMz5v{)lDyN$R?BFDA!67k|ip)?aSGd#y9As$>}
zSsH)7x#!K(;5;`f_l@bkqH^-~D(?^o{mfXn=yQujG6~Oij>?w!wKc6}G2BV*M@rIi
zUmNG|9FQzmZaZ(A>{F<Yj)6?kb?HclLLr61d8@xwzF=sL%aVxj(lWo%V|)J{a&9OT
zep04vgF_O$5!>qY6!MQ@|D2)*^Rb)cssZehjBv9h#b1w}A4Dc~KytQAs`r*Rl=C{Q
zlZ&>7*_ZiD78VpG$9Fl+$aiV}d9~f&O*UGhL}M<iL+a&dDu{G$C=+0!U!SoNtgB)R
zQ6~=0?n7o7c`QHZ4pEMnfB0sa`?h50B2qy<VzIYocZbLwqJ9)sFo);b`C8x%CR_7*
zIiRG9Qo6&$tePf7y0B)K$1zhsHEQ+3Cx@|X#lC$2RRZC%{#YW*sf9x_B~v6_+K5F-
zGXmT0pajTJ-mQ6r*PaB<GKZGEF=O!2GC#s!BQx&(XqQmgm8@#0D3|z!|0voSv+7NR
z;Ph4dWF6qk%fL}BS~oD4F24$gm&x({i<a8z?=hAM708GMykjZ>WSMm3DyxrrhFpj?
zsGBpunJ}3`J5RU%2?i$LoG0MB8OnjWk2?l<%x?EhlLcUO#blxQri~U;Xp?6Y_W1B~
zay?B41>4y2b$go|y+m7JY5=OG_+eLMqHL}c2}}}fX{sP9+^l4Y{!|Nsgj*LalJ86y
zn3_4v6F<MHpLZ)y1M{=cM??W_kdI@tflkMMgP0$LGl640GxV|E1mRYwWD&_myS2<b
zgXD2h#`WEB?(n07^L(UKQVP>KTxcE=%g4J9K|BCwPS|Ro^KPRJkr}-_&zgCO*PLYO
zQtX#TZmy^wn@_~G#wue+G8I%AQvH^SM)<=I7x||rDl0=#a7dE{p7Ih%eq1|G3YVll
z*BSd>?i|H#&(DWfsWcrKwlJf${&JY4X_x@S-j#Ysz%1?WKyYOs{Q5%&nK8;%f%gUV
zw_B$`%MOI3xEvl-#sV*fyh>t>aj1L(D8JAF2QacOwaM6){HY!}Y)k!=<5#;n|GT7S
zxgd7w1CRy42i>Dk=3%&`J$j*U{ywYzJCv+iqxR>An)K;|=DCo%=n-|&>h_aqEKOu;
zBftU5)53RkQuL;G2p7Gu&R}|eQMf>^TsO1#ekuMn`{*%%3nT^8-c;f9KC!-EVF+bf
zz>^Tbb#YOD?@p2sBBKsriZP9&u2y3=l-9_E+3=zboePU*kt|#v5yqpFH{=A8r*ZRj
z$Z9Ok&gWncl>YVdXbM6FRvY06m^?eE1QwFu3j}r|#Wm`kZ;4%{LB;ZNQwZL12<n9b
zzA*zbNNRiq@cn7gs+!wlp8#p4>XT_;0(E~3tO%e8hRG2q*NY+oa=`81;2$iTU}aQ6
zh41n~6)@QYj&vm`DsFyiywGr>MYDEBtpoHBi<6uF&PszX3xRa8?KA(NteG*75nxOo
z9kZPI%{K)~&gQl3r2)2-AAKa(2Y5s?qE0V)ohJSWb#ins|JV{BYYKgg>7w8b*S7Q8
zya)-I9vdD;+)YS?3j@?Z<F2Av@A|g)EvBZ7cJ7A7)2c-#A;>mw%0DJ&mLXe^=K~rW
zr5n&}U;(7aL__wD8*7zRQ9y+mqbx@jESQHqM~HyQ&gPpsJ!9cRR*!nZMrrsIrNi)z
zK+^oo+AB>!F2z$mzm9I5xdcKCP5^tHngU$3ypP9FV<^{bOW2YK+Vd*NPxN7usBh>^
zhtoSxiGSJ!ir(Z0SHvNCMqQqKzhY$J7)mJx6BrMXEiap5_jxuuBqh=Oqq6n|1w#EQ
zP0E-u;2@-EUjdyJc9#Z8V~q2u;RDO|fQ8BBcprPikom*K3e`gygq5Frze^iQ9kulp
z4v8ofq?U4T8vlajd>sRjpMCV}EXMJ1eU%!fL0c;=<S4P--IdUuN2R8b*($K344|al
z)F5K>CyA>}=jPGV{w)5DEiVKvHb*J6_#&nCe66v@J4%#fFEO)EUzq@Gy!Shb!2$v=
zv4vTXb{+HHdHLb$&)$9=6rUfOkk|Qu3gPw*kyOoep}x1#t4TU*_gU$_36?};OUa0V
zcVxo_h2LHt7a3v+ZB({|CqC=FK!pWGaEt>qVFV7eNLp_L0aL(P{qs@`Au|%L0UVU&
z-#UeoUemja4naV?MbGXT4$TIc#J}AM*l3hzGcG2-b$`7;fPjes;Y(Jb&8S3E_F*N`
zdhNP>w2f&$N~M^+7^WTJ-pe;?1Sn-bf^rMq$;6!kIMR%P$sq<JV8i_H4+7@UDq2{H
zJ@;ds2QCd;FX>u}j6D{}z26<46^Qlgd6mrL?AyG8AZVf}8Qs7}zDrIUAV$EXD0={H
z9T`{+@E3G4*ce<ese2n@i`{SIm?OncSNNn3yht8VOhVA22NHo7081Y8{K58D=yTKC
zDCxZ+HPBQOAPWBph{Jsrfp1FOwhDqQy)z!NRMc+$kHWFgUk6rZEvp4?w1A`t`jSwi
z<uJ7_@zePrs3QC)vyGOJM5bK3mbn5lfZ2pE>reBeLjeS8q~2K|lt5R+cwweCX`(Fx
z^`ZAxb{wDW406f?p*fiQ1k||&%7~pj+yd1qyI<B}F(xF?kj-;mj;`~|zE=LQjVR4G
z*GnC#K<Yr#9-VM;TTM;rY4eI!lOv3RHWny6XeU{wh>FVJ{-*r1!+K}0x*2`bi2$Rj
zH!vB+5&4#jz|*UBNGe8CrHk+O-arSFtJI?r-$6EuZTbg1=IK2ts;lAp&CI)*nwz*v
zI#VyPG%buoo6mZHMVjb&^sxeBnv;5~xn4tlv9wQ89gAdp;{qumt^(Lt8v->(+JzGY
zsIM2WC4a6t(Zphe<?#n>HVLc=5CElPxlxu-0~G{B72U?koN~}2lExu;Xo(LSg^)*B
z=4Z&WN7c4H91JGdt`BWuN`>*N!ck(>DF(Aw9)|<a%97>{v``n9^+>odjE9>P{6l>+
z;=zP{v@Z%bJq2#2?>%KPISuD+$`-{SY^zks6nc_tyi`0KKXvlou^Ted-$URIglk65
z@AJhHikU(?E1~5NBXb(|%DMBgZcIvXzFhvRZ)@c*EjS<r)*DA2YIeq(?i)Xn8`LYB
zMWegP4zsRp!S#k@*f%{4fjaM;5L#<Gzz@KDT90F7PwNOE+`}2`%M!LwukaQv_O|0)
zH$7M?i6$X2Pz4w<jbu*x^0yWEb&8XD)mY}yv8V1?fZFW2tyr#?&sO?eG6x|>wPzlP
zf`ZD~q!&AOg4>lo4m3TM9u{ag0ixR6@BfPaDDBARGw<)%f_c&h`kLjuiy$r1ue4F;
zx3VCquXeZRR~A}5lT!mBCjdtJKfjg~zkC5|VLP(4^2Vkk$=YIP<QxFIv0aUP-~C=g
zuaT~k>!)nlDeO6+Bh#mFHpyjH1=e^tBx5R);Xx0x(a&f^Z2U`u-Ph`|7VSUxA}}M~
zIs@5JHo=y?QsM00I3rvC&C#o>Rl1!JzHHh|7&w;^M**H(Yzg@gM+(+{^ZOkie3XZJ
z`o-}x8Tl_1?zY5A(?)nD!D3ED3;n}P=ozO#1sCq8BJvM*-!XQvdoDt(Y)c+-YY3FI
z;gGB|Gtful?TL6CrG*aOjv)L{0-N={IR{gxn51O1XwA4DmQVmw*PR)0^asuC`O?0b
z5a}mVUCmCWAUFH3m^SJoq=%g)akY1=3%G@Eglht2;qfF%iPv{4u&Dwo--o+FBYs6d
zBWNOgK`8KB!z%>mg(o48QKn)~;scasMBU#=s_VQTCq<DELDWg*9>Mv>5QrJnel0kX
z8bU&bt(;KdmDxoCN(v`=<WE+f=m-KK1gjl2w-$Lo3~945HSj-Szo_vT&JDgJaK0bX
zuz_m(4(=;Ax6VCC+6n<O(4yq!Ky8s*uqZ%jQ4s;KxYAW!Q)olgq_|b-iW9wK#pfU5
ziO2k|ABd)hI{YGa8BRV@5sX3X4_%4Rd;v&=$GlxbT~L7og;M64(|3yDWxo>V=8^gl
z@$GU_gI<iRlxrXT!)&dq-t1HJJ@q5+)}4U?R#HO!Ix2D&@*}R~G)*fL8~v<fD07t_
zy=>hPce!8n#b|vGb;wo55CIcW_Ze@DEIrfSt5#8{D)BYa8M}{!S7vL!ya0Y~xCh1w
zQZ7FhBr1hB4Ny#-_s_ZG;ctmdKoqd4k_Ke%X^d6gWiFX}lM)k3P29B}XzdWH8~<ZE
z{}@mpMze+M9oZON!kKl8;@6AK8qR*ZM9MzAgx19@VgK%{(ZW9AS={ipI<lZ!ny8)G
znPJ;8LwCUB;I(?EO%Q$?b|XC<$(=sBnRT{|N=?|xvq$sls~EziF7|#Zmb9uXxD$r#
z2R!Nqe}ITTzcVc&^@+h8T&W~s_OKWSszVo4&=F3+5uUkk_Pd+VOk<I~IE%HfNjK|U
zHr&wZ3Ns3I4g=6G2}jfT*UF?gHu6~+T@$DCL5>35rlVUQE?~GQPPM~ZO?fOVuy3iw
zwNhL&v-}liMM?3^L_=SH6ja)Lg=?Mz;T?PV1YbeJa?6YJ2G16QTeQP2w#(f1eR5wV
zwnpZ(+`M-?dAP~xxYz*HsRUL)tJ$Y5G5>VvprC|i^LBaS=XW~sqsTvo8dF)l3fa7q
z_(+$nnE2|Ba7(ZaW)s<vtEt#Y&X|7ZTkGNCSvdfNqAXqV{rTL{+oPu?XwHI+j}IlW
zRu><6(KowtrI&A8ivtq;FVEqZbRNuxx6@vA?3Asi0kzQw+7BbOf*F|^<-r0UqwRB*
z%`q^m$LzSFGUSOSix<sJvy>6Y(N%a<Sg<T_M=*@a@6ue@ijuAY5zH68{mt(dfE46Q
z;mms2Sb52K1o<z4xs=ky-ooyQnzKxPFXAe5J`_sY#nhq~d>coOuI%BjdM!F^rgufp
zCvPiutvWdMt08rEGDP0-(r$?pUbfdJi`r0><x-?Rvhq6z@q#a<d&T19;Z4V-k^rP?
zo&EOR`ZN7_fd9ekO79ibUbNmF>&y;JNCyMK|I1X8RGK7csC)afEyO0V)PdkbpJgvl
zm%2MqXEfUMC_~dzohuymv&TZ|(Hqime)mH>x_=HRgadPKM5Grxq&DO32b{paz>lQA
z>^aD%;Cqx2Ryoi}-UIZ#++f9<XW{?Z<o<at8woASJ22+dP{ZQNwTdRs{o5Y_=;Z*F
zB@a@R0qIGgMAh$m3!~@qmQmU0CP-Zi@PSdv;-e$;{=7*z+LxVk&+?)A$dRtS&i*`g
z@W~yS<8=iukkVb3z?cAW*nWIKbw1`7mEAcFntGwEQ}$jexbdCkE*usM9YrF+)cR~;
zFtM~$*v{$+AhCD&p(r`~<&zU0wh9%aXt>OIrLaS+i@F|IQK@a$KJ*nPK-!Im1Rw{L
zXjapsBEGEB*)k#NPwhXIw=QYI9qY<i#?TCT(^M{LbO~~zL4}d3y_HF<JlyeC9$G0S
zOM;>PD2j^2j-{%jON1}cC)X0Dc$p>mR?y?Mp@_Z6(xzHyNj!J_?nzrFmzPA9Id&Du
zGp>kG^P~17g3xfb$rQQ1<80xSW_b=L*^AkT?HgWk04@_35x(*gn>9VqQ->$N&`F_O
zB1d;YLP^@j(BGE5KJ%QedKpVX4TBwv(}O8gUwumaiaM|p^mE+MT+~tzY((qWKdO^9
zzK!r{m7A9RcZdenYX0BX_baGq^UgI4=$im_0@rNN&JP}kqpr|E<(LTW22Y~z>4B^3
zbDQ)ntq)qrl;|gNcj~U0bjX`uxSUNX21yc}84DR%nGKS<sg&!i*@zBroKx^mC9`xz
zl)?&;E$IupEgc}UiJQCRs;@h%(Uf-U;b$c%E+>%Y%OG{RAUG?JHi%)s$=>C%^7Ffk
zk;PUA%_ch0g<VPYOV;Q0;~NO<spF!`jrliko4>8rp?5D}0U4*0GmWcQ-H}-Y5?3gv
zXM(hUsSsFC_d^)V0O->gJT^69ock_RL&r#C2nVfA!qsmqQGa|Rl>i>UlC>w>o7kL7
zI_^$c{$&WyqVBCqjYY6A4b<z$)o<@-ehpVSoyYKiM?OSiTi6Zt9F4oGRd(7`A=>!w
zT|R*B3jhp$d7u4PiTO==Ww*jrG(wdWd(-v9$$Elcxd(->gU${IbaZi9q2q~!hQ%$?
z&vqP5g>RP!oTFFrr|1A=v=hg1Wc|rYZ6jdrSU?I%3rqka|MJAsn~J2-R9IZ8dbhk<
zS3e;8i2t$3dqXSDla_G$f)nK&!>teS);z4sAQjpyCvU0c?D$8Au1-*tBpAL(2`nh`
z(3{{kMQ!%JB&sb-JjrAP2M94!$pOlPcKyB;RZygJI~k5l-8=+Tv?33P3>bd!O?CSW
zym<7L!p@;$*WxOr6`k6|D#2IhW$#utKLs@DC~g06B#Vdii73pnv2NtKUZT#LTNL=6
zN=6s3=4O_S10}v}wq84$9_od}WQijme~S?Qi>-LY1MOqMvyGSgx4B7>q9kA*6eWr5
zp|ep!3>g;$bW1s&onya-zZNlf1caD52|lK?`YO`;JIuK3C|9-L(hom7$BOB;T$;mz
z>^TO}*$QK|0)Cx@H~{|MN<LCwp6@PWHU|>v)d^8Aq$1JStSFlKOum7M+WsI}&<hwG
zO-;S=?*&hI*io?QJIE58Fo41C$`%_C9{vX8&ff0*B=i;JB~l+*q~b;~=T-N=WYz!R
zGIypAj2rS<yByaaTq<b%$z4$W0~@Hw$$p{RN0rU>W)>E3tUcomBKVO!Ow)044HOD$
zR0xG}tVjSH=mDr`(m1GixhE%&$ujxBjwZ@gf5J`W_c+j5bB<mHP{~95u~P;4R8BHE
z>ue<vrm!LCxUI;-s}y!s6_yH=y~w{=CiQq&JjprCW&V#bb(#el-Z;;W<{Cp+FLVKW
zL8s?Et_cjVQ+E(FH#4g_%U<q%ZQ@;iM@=FQ;CTl(zdCJq2QQ3t9e5Cvk-oGKBdP(;
zv2OHfgTHG_SrMd;0RUAw0Q{wMVKHE0?TI3TAkD0p*m^L?x3T&)YICy#M*Ogo$ARZs
z8;|Am8^D?q<y#74uu^9tJmn>kU}Z8e)@=nU5Wbozr@0No$2(E3&6)siIC)8OqpK|{
z+cJY3mzdCGHs&Gd=N+pLF@S9qn-@hA)7g%8lD$Z<LxMDVS!4pH+2W-I3hPWu7=Rqh
zKaW@W)neRSj-{XBeX293?Wib;QWaMGJpkES*ZR#Pby}Nc(0EJuw>KH%b;Ujh4nM2p
zeBzJM5Ude^3_vWyl%4GCiX|^tgw2v%_`WZe_>-fIsHaj{N&SYfcx-4QfKd-#vgfv4
zv3>clAKjCxaGieW-u!wyErWsfd+Wtksh9{<LKQTqAn|yl|JVbul9)(mv-B9{`<)p7
zv8B(Tw$!3zRPCR;Aq4lQ3yERF)+iOQk%FEwJ*7qUh+c5akLQ8VQRKP0lKeA3jh9qj
zvM|6^`vC)E)_R(brDH3A|E%B+St!F-ZvIuwvlvROXNfTk%F2WM1v_z8h3*1A4C#mZ
z4~ue^uh*}SN-qh%=b#kV*qQ0t7-kbCMKi3Iq8vc;K0n{P9{zoEb8g?s>`6DS8`|zd
zy2|PI@?!aVAxym*IR$uWjpuKSEBc(MOk$o`VvJUS*3+CQX(@HqU1jqvG`?!EN*~@Y
zzD$YFD10{ts4(5=H=kuSigvC_!0`mhTBBD%DVj;MF<F26?cGTGF1o>DLu;D2UXA!|
zFzzI)!6&8{+5?U_pK8IN?pbdalKwZ{CqiPKOFU+oGAY#A3beH^0XZ$g)N@@7Ac*>@
zB7-V!ZKNWj=rd{ZH6BU+Ep)EG(tx&n(y%x^jWX>S=ke+MARIDR;rzRE((h^hpL1<s
z5ipSc9(Ib)D3+^VwEo<SWhwyN?E>|Tp8HSuT4L@n{=IG2lz>G1qFv!Ehi#dMj=yUf
zkcfkeEO$`;{vB5gxTh#toO*xO7fetNP}LolBUD33@OO{<7XT;4@=sT<MiHR-L8Hh*
z<jb#snl&l4OW=?1J(YSpoT)SyK;5fRt2&4o@$5o`C%2gTKe7W{U0~(n&K7rn|Ld$*
zsDUE`C3AmV_sS`>-`lAZJ5$*&1k417=-239jq4=Lo5h@g`ZGw`pzY6HQY=rQ?c9Kf
zy1YW;Z#{Zk+*L2z^{S~|ImvAM1t}ovrF5cbXS`GKso|O^Q}KAIk-IvIKW=uiOjviV
zQ!1*Ghm=ZRvrX$&{~Fm;358j68G)Jm+cPgn3J~7NP(6{m_-lLK0(Kh-l|%krWS}98
zvF7)TQNqKYxfK-dzkqLQpBU<5La^<R80vN_rQ7yBSFK7u=NX#TQM91fV$@O8GGi++
zWflA%PIY3iF8SQ=xWE=rOIY)b68v3H4Diq~g459Wr-h&cRI83A-)Ew*vKqU-yTVwr
z=jazSctJzpANF(P{h961M^~}`evy^QrG0Oddi7j>ym-X5RZ#8pjjl7ZFiCn}XC}L4
zA~Y56Dt23_qv%b%wb!AexTOWA0lIe|r68XF(~}J)8klmyA^3REs1|qysskqm?Ha^}
zL@JW1+*YPis2;w}>Z(GTgC3pDetbS1eyjg!x@ba>`q=G%J*aId9XHNb+)_GbE`o`w
z<j-eg;@x`V6C6gStf{Fw`ESbW%qFu2GtgnXHZx&sG5$gz!AiiylzJNVPr>E)_rN*g
zzm5A>U9*6@7%T(b9WK)5Z++%>ePEHTvT_IcLoWyjUHGA6-9Xgq`FDr^8$$km!^RKH
zPPVIOU;O^LH)e1(9wYgQQMjR6Qg9!N9U)@q)_=rw&^;J*pkK$L`tx6P<O5Ep95{M5
zjoa_Wd?N<TWQJ)2$64Ic87sSXelwZItgC)z`lvnHz9B2zU5)e_SJ%(lEyHXK<cY<k
zkBLm`_|A8KZ}Au1sW>5ue;kSHzWX%322tcG&9Hr!1IX8YVXXsAGXCpD{QdPyAP|;h
zKPeH<$W^Qd@BfupZn}B}3Rwzn<^~{T>L}h`d}-^sLpq{?cvm*}SR#o@mrgzXSI2%o
zf(hN_-8Oeu3CnNx=3gBXB?j8ZuP;3PO3P0o!^Z7r7s?M2zLj3(`^McL`hyu1{8h=7
zz`xHp-|vt}qP3Xev$C%5YxPKO-JnAt(?)(i{r7@(42;T0Fuy)flKs2OTS3D00_Zji
zCP<?>Jy5Z`HNIH1Bw8#Sw&-jeA;jM7gP^(%4;-rn?)MdLAAN~bJrV1;>$AyN;fBwm
z(z2D#iW$N54cVFg@IahJb^UCt0`aS@2QUT$)c?y-+q0#V|JscIiq-wQjsLZ4#=pK{
z|9wQiL&NgMXcVG<Ia&YRw}6v?C9)*Mz4MPP|1<Ufm;VFjp<Vb$@VNeaAHDzKlb+1L
zf&sf*jI#e-Fn=A&@38IPzi)u1Yri`N{{Q&cu@*2Io_j-IjQ-sy|I6(TP#nfyqwl{5
z?*GHBTPcHf`<Y6WZ2Nbk{4cjJK$V>HMRETyPyceK|L?}{`q0rR<Nn|eZE^Ge{AyGN
poK=Gw)$bO6|F0hlY{0%2_vyfTN;N&!1_S&k$g0ScOTB&ne*le^_^<!~

literal 0
HcmV?d00001

diff --git a/content/en/blog/_posts/2021-04-22-gateway-api/httproute.png b/content/en/blog/_posts/2021-04-22-gateway-api/httproute.png
new file mode 100644
index 0000000000000000000000000000000000000000..4dc0cb9457f2f95903d426deb16ee0d88dca601c
GIT binary patch
literal 120633
zcmdRWbzBtd8!sRrpeTxf^dc=KOZO^Wf*@Ve-5?zciXz<|QU<+rgLHSNbR*qx2hY(1
zdd~g%=e>SD$TIWJ%=13^ePY&I`l&EF8Xg)P92~l+h=2?n9EvU+90CstGH@j7RDlBy
z4sFDcpI=&(pC2S`Wv*vv0-P7|4vV<{Ty_{6vf;EuLIPQod1CHigCK&+<L+UD5f+Ge
zSL`k7`{AIPI|Nt)0y(}@RBt_!`Gayn*tBnx5FRcg;yw@Ecv0ik;#N)B)~0cOzT2t1
zA6L=AwLfOPUb>&T4F@{TdG&=^5#HVAaT-<Iqz^VGzHlx2HRizU0*N>K6ispi@8IFx
z#E9y53)^>ri|(<b{h)Pve0=^;j36r#9qwL$#RK8Cr^3aAxKhJUo>9PkRIW1%jH8a7
zrhgSCDB^)4{(;@WYf{p3nmKv1m-mk51d1`dJ7un7k`A0m+S|DB`lmwEfe09d*cJx}
zudFd%>TfF&yi&OnpAa9<SYJhI^6uaUJSYSsjq;3IZ%bpEvSm6?u^Aly$yoUtuXFAr
zzp!IBv-b1w9p>g$yoM&wrU1O=+i>B%4Rs@-Kwl(pAAY^4&ZxZvy?8Q^Rrs*hMzPX-
zj<bi3buaeyPOH0<0n|Pr&AySkSwn2j;exoDu!3NL311~W@A-kS6rq+?ZhBd4z5tv%
zJgrJ6AM5jIpQ7K6-rfu!77Tu*bfyZe8XPNig^l#qyM2!63~g_p6+~<@(r=&Z#CkNZ
z^-f!-#Il&T(wa92?53F(VM3>={IM+|W}YF>C+~}{HB(S62OHb-!Z*|z)m=)+@2j!d
z;fZnt@>$@b#$ww(Jt${-Rr0_U%n;H5F~f^!xR;YT-)oX-Y6=%wTEry$)pTgb<<;}f
zj$!bv2f_zDRtjSCCf>Sm`S%bK&t7!s72k#vgNJJ;H1Vb~Zt#kCd=Z!pk90_607v)&
zPT~WTHDXpZ=79$U1K|OLR`J%5NXHTc5msZA1Aos$D~E6uG3*83NBDxN`|R+_)rJ;C
zs>p*ibX_-)-S6G>jCgUg{5mEE;#Uw@;59QytqBF@ZbHI2d+YE?jr9F{H^?E)fpEc)
z^!I+!jL*^Jo?K7lT-0B@XG2tqwhP&R|JVT0@tTX*vqz}%UIm)k_V5yKa4j$h;2Ata
zzJ>u$f-`?jGi7u@HFh)MO?GWX&OKMufMhtaTdD7Q_?40tsm!0FJiHb5>hAl2q<7MD
zAB~=0`;6Z2UFsQ}B=jtyOOY8%l3yiBts8z(gc-l$ZUuG)lA3pxAX_p+(njL-ZtX?$
z`(U9P+EB}yM~sY-IufjD7_$BxuMEGae%aCTV%*48%y>9}xbh0Ux<N}eCp||c$0^ru
z=%vZ+mndBRwO^Snu-VyEQT$)G)?rP*objLT_-Z!eWl6kgWv^CFH*uTz4bIf|=G+14
zLEgdWf&Kxi2SUx;sV68T7APgJOka7vV*Mid<&mbxM-gU{(mSMYsq4_|(6p{?-rXeG
z%#4kVt&GhZyUS5I=2(JOGGnDMi#*306e==LW-h}m`ea0mQ^JUHoU(#Eq`5&y%8Gy^
zq&!SjxDw(jaYiK-Rurt?Vm&+9tkBHXIvMUJNFwb^b+g4vj3_nMD%dIn{23zsNdBAr
z3+fEHk2373UD=PaMC9_H-FzmYFqUL5u=#n~nmjf*H#qyQ@F&P8p(T$V3@kyGL`T`-
zKEFQCKJh+H-3*vFSe8SuMDZ}vs%R_nUGTdKu~0F8v9K0gtWOWc`W3@IMW>ZY?!Gcg
zSk`ATW%0sOFwIl;95F4py}aGW(_gYIxa_xFv7EqSfLDq436C6)4ljVYJ9<7^oH>tW
z-%!1WAnpTqr!A3_dUrYIHjzP%^1QO9a(cc|erbL~fo=Y2!RwK-0tSPC<&Vqu%PEVY
zOR@d9-Koo^D_gd$Hl0hAiJ!Xe=QArKtvxW6kP>HrNF~`pvQ^BVObYPH@M%;%I}d{I
zb~g*uk=E<de5Ci$xVXupK(pfOHByf|<8SrzTR-+Ldggjt=5JEWV9zX2EK^8?aECaC
zyh+oMz1<s@)}LnAo}*`z_dKscuc%Ga`nq+zL)f9@jiE2y9_G1&N&38cmD|oWC(DPY
z;bh`oy5YJNbBSS}<#OaI<$U_nk-Tn9V~5f%s(x!9so`utO5An#3zkfjtdxvt$5*jd
zDKrgRQ{#fgC5&^H$(If8VehFPyX@@~e7xmDz{+96?rdvgb&rFU-Jczolbn6ca`^*I
zFaMItqCzZVhkD0KtQ41<m8DIy4ae85H|eRypI7b-F5HmBw!$G&WuHykXt3g%qOko?
zLRoyiNWa^){lek76Za<bw^@6lE$4<u+9{9x!Rii5PTu9w<-GP~_Su_e`;QL~j_)1X
z96vl1I+8!)-Rs>K-%H=e-?savF*ix%j*5atg}SJ3#5CN-Ij@)~I~85+^Ef5(TVhKh
zWzBp|(o~_~x1?%8E^HoElYGUTVsgY+kN97{;znaZRl_}6xw{(NMJ^{E?=}1?^VZ7E
z4_?_Qe0R@yztCu@)Im}VQ^;VX@9ts|%i-*jj8K*`E92#X^d#GM726eEO^gZX=^w63
zj~&QNrgBBxYUHZJY1pS@QVP#oUAAhUGi>e5NX&SV$sXk{`t~V%@VD1kUq0*kQGzk|
z$^3IGhRcQ+IO1c$9Vml-DlIPIv*FL9cesb?9E7(}Iz1IS@aLSiX%4ex5oGp0IE$c*
z^2BmRVaE+b`b$ZP@R3X3O+lmAThy7=*+HRu_4>(@SVS0?g1@(iz?-^2`>0|TSzN=w
zQnIw*4Kh!qbtO3^;=E*-)I8NZidCsqyEWSaZ|ipJu_2ZtmXlngQAIz#{Ov5w42~RZ
z<(T3^?YNp!58K+6)4@SAkeSH11?ePb74!Lc!=j%l(g@PZ4X?`W^Q=ngO6liARn4}&
zXB*v<+f^GACPfbW^X7uFNyha9^>g(ag*ip4$2IeB-Vsw2QJAhx%om$ZzFd7-vsZaH
zAb3QkzNftBJ)zG_=7{c=cP$fZs=3=nB`$|&YISPCYCZ3!-VKa<l@)EA$uy_0W^R2p
z8cQzF-;TfS#NlMVu{}1Jqv7PXdDh9d<yLN2eGaiMu(WkRFQiDHU#j`&8OPV{_L(ci
z;p0KqV68`O&q&UQkL^=iTj6|vlk_($<h!K8GXWEv^VS&!HL$OcWFzfOOAA%2llo3n
zzWq29&Th+KSJ+paWQ{%MXEE=h-_MWD=VGh-<g*kOEIgn3<j*=-n5L2G%HyoOVbhNr
z#x&Y-w-Y-yjyuB6tXyq~*OB+|M7r^vKlBD8&bqp)RqnA&S1L`!DZR#`j!k^o^vk&&
zxrp=+S>4$Ms&?fQV{={oHnm@cWQ(-zwk1ErWERDm7wpomayX67>>YCP+R;zyPE<^k
z6&HPAfNiL|IalovElg}58}4iHH90<F%sC^O*X$;JEj$-cK%{W4x2KZa_smhROFw5t
z^dJOEve(r*SzqObOK&gcs(dD~uQYBwy6{2xM98c{@kr|+_1j#X!B@U}=eY}EOX(VC
z-%gT^Y4uDF3Kn-~W9ZCTCWu`1&$G0-ZB90iclI%f-|-qbXPgS0_Z@N^ZRdHfG88jl
zX|z`sy4*P0vjDqT$u!-~O;drt2cAkHgPR}_I+|95`&a}AqK{ij|9}*Ih!aWiEx|r*
zKOS2c&gcmKts)ZS8#>%eg$J3mcN08LZoiVjD5G&-Th*D-c<>aK7w0Xw1yK$W4hb<2
zipN(#s2&V%ZuX9DZq8;Afn9^kU+CD`mem@EgEQ87haBBD=vmb)k$wIF?>wvKIr84r
z#!<q<a9jkns)hjo?8@sZit0&9!aW2&qrkzxF@!?|KEVS&c)$-F+_hjYxa+|0yTFe?
zBEpZeD7uN)etbsYxmfsEmS0p9_${k#rK@XZZD4L=V_i4{+-lJ9xuT7tqy(q7xhcJ-
zj=7dDy}hZ$#U*gu_ME^+Q(YTPkiDsinKh?9&x7wPIDyX>hZ!D#zAv#c=6RqfDGlN`
zx6%c%(m$eq^ne!)1Ojne>F9CF2nhXsIq(<H0|Ofy3r+?GJ3BjiJ0^N_D}4q=4h{~6
zM_>jpm=0J$XYF8SqiIiPW=;CnO@7=*K-XH^%Fx2b(A*4kabHa>b6Xpp2M;bD^z+|e
zbn4n0{_`X=>%X@JY>?sN3<D$mBZi;%1}^2kILaw)Xs>IcBw%O?um^YsFAEzJ_xJU`
zo%!d9m#$R&=SnamGsopiFP-}JQaNi~D}HlR;F&hO|A^-Ai!Y!2`$BGpi>+T`#b12>
zeiUFdFB&()PoV*)T;rf{a1c0AfydA7;aA76I}`L59Bk&5eGc~-o1<Ve@wBXE?Psm1
zbGI~r*5wBxe<eSMyZr>^6}S2mwD;wR_M(gRkhjEfk$M*1hH1r6zp^=xGCH<`@&5C8
zM&tI5wyc+_YKEz&<DL3^Wn9(^9Tk&G&EfNl1R9x!Px#^B5iubD`#+IS?tH1qjQ0^x
zK<;q=`#*Pbh%_=W;vd}_0zyYX)J=g8Bf0YjgaAuCzy~+~hzd9aLktiVDf-8o-hV(d
zummHtM*n~F;yaZho^X$G4I#QBf3`>W#GAa={)~4JJVcZhk!uh6AN&cY;Q-!!!~HYH
zA@+bE(n5IBxOe|d=pZW3&Oc)uC=eMCOOJa?;GgXg;GHw_pXeO~4$2IOB?$Ssm%yJ%
z2Bl?+>CYI4lJeL+(U&<9O!mJO`hpFBN+<jo<NkkDX~<K&2AzL28j6TCPk*C1J57#a
zNM#m=T4Hthsyy<PI6;<9s_m0^$z-K=L%ZN!QP$vxvE0srcH`Qn9``X9QRpDO@u)`u
zNr{<}ma&eDYE{#9?@me$w<D#g;~SHFq?4Ej`%pLH2MI`LE>n|l=8yK@n?j||_9~uG
zFHQM46F3N65%t}>AX%X&5;jkM9PJ^^(XyuExyJPHvfxrAUYP4<noM9l9k##u>ayMr
zlS0ybS4##m?)@!3uqxynt+<l4MJM&`V8$ut^sb1r#)IwdZZXcffbBK))grJnnU&sv
zeip+ZLr{R&mjr6w1m{yhUTJ5yugBuEdD4?i=Vyc%)5ny+b~I>)&rb6yvtPf(?7X7>
z5L$S^$L79-5&l#gPzA!C73ps3%+n2t`~MsUb{31UC*y1<MI9LAGIL#&D`0`=^5#Go
z=bd<)kAHCBf0&LzAYfqVS~H+Ob55X2VELxYkk4hNUD?T%6U-uj*&ydyVq78cKWz>}
z16Y2*yDIo+#N&|xKFV{59pxv_{;$`)WeCJ{V{`hC&;eb&cYkP{0bpwmc6PSml|4aV
zfa@fq5pw&%B+zRFa>5fZj5+Yj9b7bcM404MZ5YYn9N)v_aKcCXz7xftsEky~*>1Ex
zu^N}{);2g_;$sL_9WDB3y*|QloNhFO9@bZ>x{bNCgMYh?DNb9MVs}QEMrT;zYtv|C
z=W7SvrJe~&9v>I5tB5~=n*rqAmJ8#t@JljI*XqcZhUp96THo@za=6(0?<}?XRlX&?
z&?X24YChe!=BCO*x0_6cR&7X^*`oXk5FFh!m{IiaJs4yn==(O^ap?jS1nPy>7kwX9
zKl0VKi;K4Lxq!cDzJ|+!&+6^br_mj`qzk?Jqtt6L$?6-~Sz$2KBaFirf+A-pUQMYp
z+q2W!*7X`vCPEKpuJb>LX)$gmCG#14J-f7Tq%$_<u4<=Od9Ucx0^&2KIrM+g0!Z2o
zi|e4?Y>e$+@P&aqbUCr9mMJ|G&Tmp9l)?0FQ*_Yks|CQz1fyeFH3}kuKc?*JwMSNh
zsL~4s^l7@?L!X^sIl_o>k4S&jFvyKN1{GCHh9o%dhQGwh{F~6u!8fy28X0$;yaJwg
zI5$=*ANJ>qQBNj_RQf%SFIj3hY6=~7a8;M=)2>fj1o@@KpzHs1F#niW4+Ef$M}8dF
zuI>^-bLTB07Fj7l`{(XdwVh=C*t_H^F9%yRCNiGd*dLMnN-AJKI>m5v;@}emMxGz~
z_Fb<*vWV)HS(0s^Ode*3i4zTNjGQmtzL6@maCA-tiqkHm&>gj?-*m8QE><1I4m#~G
zkSVN?S3gS;no!j-ieQh{b7bFWQr$cz;NqT8cb3SKu=LFy-+SKIvU0<7t0}{%dy8t1
z)yYu0aHBn>!xWPpdJ0khjguGT#X?T2a9fM1nMkhC2M3+U_!e~^su-XMkCuBRTqrzn
z$6;f4YzR=GZ;k`GaSOEIVY*u@OA!fDEfE_Dp$nWQd8m*>6Un9mo+$J+G#9I{-6d8b
z9B=YoORxmkRapoav2$$_T~_12*_|ke5=fmas7gWc3ta0WK!{$N?w2waV1f>*4DaRm
zE)nOL8+EN<-f9ivpGXhFijgGq%FLX+b2?E-vz*$o-0G(}oWn$`e59kHn`vXZ5n{G>
z3NC(A)vrG)T?8}LTse9kd6Tl#Ozr$@#YqyBff?9yVlKjw%RIE`c4*kq<|hX$5xcX7
z%-l4BfPb7Hq!1OrBBlzlyMOB&L<n_Jva)^dx>>m&t?5a7g|9L}$c2|yhPvx@-yb7=
zVRj^}pVei8`^m`BvlBNoH#L59KXS@vkoQK5@wO+d8&Suer5(X)HPJnmi9(@a027jw
z`kcsqrCPGFNfFP+YSdv}f+*<p=p>VGBccWG7(3`Viz=`uTYSLeQ4P5QpRz*^zntIb
znx^cRId3=N+eu1d4d{Dkc8mt$T-uh>`M$orbXG~++oS%NlGUw;!gE&FSUkQkA)qje
zKs?8>Gk5|CMKyZ=QTPkTp@RefP<h|8AMO%@hBTq5NGjFFVL@sHM0{$3sQ2HmkRi{h
zYH`7&=X=d38KF?zXs&|6)mn>#|HbO~Mi{JLr{V437rp&4U6K_>OCA4{Szl*wmW{-c
z$>Pr3r|sO&G<vmTALAAj*4o_au#D4|kFk$fPFw@^lH7miO3a}*SgBmHcKA@KoZj{D
zKH+w|;A4k{?ZlJDr9-fx4H|=@4w(C2G#M2o(3}CDtn`-*LFWVH@Jv}rtHqODMby&B
zHFm-j0gRn(7ciNfzJCx+GCe{`vy9$k(P4Mwk$5tji`IP;pROR2iCjC&F+XX-{pRrz
zb9zHXwnDRZUUHuM(D66C-&I)T1DxB#;HPR0R{>1)V~~!S!1?0Wcdt5CYfg=%XxiZ{
z7mVfNqlmnAzTJxcMnKgd)Ly-L9FeXQAe`oV$7O6Ld*p67-)XuSb5|mXX)4EAheG=7
z-VHQ7EBibmS?#;pV`opo^dE^eK1jH^I3J-ZyEbbbB3ReD{i%c{X-?5=f0N$3C&OoE
z_J<6ADsk6mK)MF~5fSy5y%eMnEn{e`nrmMPxzJTukyja44Nbd>dh}UgrhI-~Uz(Mj
z9%@By_G372=89Y9QLET{^12>8JLSsC+Q;hq2aUJTnjQ&%a}USqPDG?@{b~Z(J-Ac@
z;=hO=7_5~LCOVy0pn0g}A`+Wy%n=g7`zfed+bXU$WzHoRHSz$kw(E_qE}GKJ#dQ-6
z=(n1hdKO=J^Op)A^B$NLtQ5O1Z6$|n>ue3FHXoLjW!W93<($mdKOBDHODZY;dF)WR
zfZJ8>eI5Nx%%yffvwx91D3BA#O=R?&MSeL$Cou)+RJU-Fr1_!-n0M3NYgpVfDL_Ca
zhC4ykR!j|pf3~=!)gx(+D>hSKxN6K=6l!CrfMaAa>+bG6Xya_^D!tAa#S#m}?R1eQ
zUGVL|(ikV{(3IV)RD()&@O|zO7cXG<1PevN-E$&dXfCL0ZKVjT8>Z)F9kh+5H?;89
zICEBlj(xMy?JHpx(cUb@7zW1%mJ9!iccA%b0_RJj%2M@Hzw7`d-vmnYv?(Mv?WPc?
zvQx<Bw3IAbiXG*Cz;bpp+ztH|O_<i0>Cxyl@TyA(UKlCgsTWr@f1aB&jDnNv?P;-u
z(`h(rboUndp8QBXLxjIwHeJt$V!zJS>>J45CJCCbkP9I3i=IQ%?g4mQ*2tRvmq39{
zotO$v^KA_iZzCm?Yz<T8W0YbZsvgcCYt~OEe1@9VTi-Y@I=Hvlt7ahNi!+au+7_fc
z!z0^3rdC7VamcoJx|+IPaC>772Yuk};AhVQc~%TMwY!GOBd@%Es_)Op%A5*dAIVSc
zC08hfQeb?GIo>&U($)N;ue>LxxDM8(H!y=ocevlp2IAwUmb$gJbSu(=IA|>VsUUBO
zrA(zkbC9B`wZo8{hrqEvm81!8?eT%yV_Z%>aYKB&(uL2dN;^R&qlJyw?}Jurc7Br%
zJR;sjR(-9D9q|gInsne3yvf*8oV3_hZ3&M*!}f)28Dt-(e4xIjWe#9Lnrnih*Ask+
zgGtAin}sy_1`ZwbscpfZnO`8uNgU@0?L8M#Nq5<IY?v(PI=aszER5OqY=k4%nEOlY
zByM%iaOfjLRLR!x)v<`uk~FJ~@To?E-#~EU;f1ZA8CT!D!X$XaXwfO(uN?A9!8UQ~
z*TDI!-i1UI2Q&T=Nld}dqjYZDm8+8Pt39LQVAP^ronw2j-DmaCn>D-g6N)uT%wuMQ
z2XS;J!8$2gSwS2|)#&KJzD0yyq%?;!&&((3+<MP&#Rf5eT9DAa>*ha5fTm%wYYSxU
z;`B*6$#;C0ED+#75X6&ON4(Y<2wsHYx3ayS+Z^uSs=(al{xBEziNDptKq(-ea3!Ea
zF~39Ytkzg!p_zYIfZt>UD?HH2VBwLUV}kj#(g@Cxj-BARPCj=hAr6*E4OB5ArJ?g8
zX5YIX_d9pGfdqg#IuQORWnMQ7j81}YLA`EQ2Yoj+I<YDJ$)=F{l_xM4bG1My{Z!Px
z@$4cL9(SPe)cgtCw)txX73pwA>4qoPy!zJ2y7oxyCc9KITExPhqB7k{<YT1Es%wvN
zqu(cw)D;kLRGZH6M$`Rj#Q@6RM(aDLWNGK(>+t_Y)gkG3x-xDLCWLJ$2ZU1{j?>7&
zszwNtx*9^qzM%~qR0S9%d0?q}Mx*CNAnUec+kLC+ej{-1=M^q*S(q(B;j4B$zTNFw
zYP&p!w?ML6xnCkRgC=cxYZ}XWbDEN6T5h1;H6vX9aFnZms~&m(XzkSA?-vSyKT~9Z
z9L{DL%z8z#fGysFZ+~k!@NqE_WesMikU4g)SCG69EmA*KFh_4imr`hn7u%>tr3>2{
z#YxYALpx548$HU%AlNhI;ciJpl$5U3PRn?gw=_)TTBI!Ri0H(A%sFZ7MWr9Jtt<V|
zbdwOzB)30Q-#eelFKqjxl){_YuTkqIg8tnlldPFC@yCfmu3Pr6#||V?!`_p@67;Wn
zqzijY{De4Gg=F-Z$(rcbld$Jg%d*?Ey(}b$Er?n}qX1&Qz+t|`cTZ=IP~XfoCFgzC
z^+`@?de^R5viuc|!_30pcNrg}-9EP|lqRZ*m3D*fwpbUbXdM8n#Hu$b@#5Y&C*g9$
zMscbiGE+Ix)T2FE((&NfaW<zzYblpo52o6)t#ceN@|meiOGZwPb=%<O(3AGRSG1`_
zPkFmNNW5`Dxps#cp0pAD)?4JLp_p*z!!ezjV&^AWH|aOUH7lj$V<16?#{6JwQ4wAZ
zjlpwF%)0jhDxK{Sn119JX84P<Hh2i{irM|VC-(X;=b+h0Xp(Ssk|A4j`ciVGEf!-u
z70O<Fz*EHplq(OHP6w=S%mRo=6^acce{+WpECZxHd;{ByuJDHg-Pb(`V_hf$n(v_7
zSQOe-p}gaj=?2^?4xQ#SEl*MuSg(Pj(N=%HwZ{)DONR0yT|Vu*R)ce>rzE$&L>#*}
zbOzr&g^l;CE}?+BLJ`*ao*A~}{Tf?<Wc>LHMdA%O@2%5<tq%(6st@^{4(FnKw=)uv
z2Rjg1cfh!mX7RDa+Xp@Y?O}yTwouS6`fx#o)RCR|`XE{~^~_lA#AA}pjt{uZ%&mft
zWBF&0bPSM#G-9;}h&ISpf5}rX_}Bvq95a{dc?ADk<q@QURO$32erIF(tosBg5jY&m
z+Ks%i7FuW_rl-$oaVFDdtqJ8nTnR(!=?-_Pbtp&HIjLgWB4dE++&yiJJ-2dre^UfZ
z#oy^L2h`L=?DnJMwk<1(%{&y(_RC(&EI&i2A09kAYl6S-Pvf8W(#h?6#`Y45lt$J=
zZMT|7bQFCxAd=Apo|r!l=DBwIkCW3vE6;sIH7J>xPsGTTd+oa|^rOup3z&g%39PtX
zInP&ojfP9h1`75V({46SR%uX8a?rDx1->R?hnYiMb-@xRM<>pPAsTM+Z$oZ(23?n!
z@<djvGfHkh+^EQhloqDDac48;+xW!K0A`dVmT#a@g)5V1xU)3NQ;4i%@S@?iR7XfW
z#kO!cYjGXJU<{11s_Y|V1j{i1XTyH)GWz`6;e5jQ)*l`I4toDPwcl|E$N}28@Vph%
z`ql~gj&F=lFtI!7cP)o0gYIKTnV(rX&2;3LP-ll#$QATtR!nj`TNy}I?X2J9vmn8a
z_b<~kR+KkIZ8h2^V0I&z825FUt#-#^zOz#7WiqMujK;X=wWQZA*<1C9o@BwF_&bxU
z+7!#_b^J5K+UGQfWtC_Ee<j%Z`6d`1_Zog+eKN`R!hJ*xgK>mtLVnMW1>-!a)o3q`
z$7%FzFFW->BPe2UaN1F*@0;Iz=_ib?oA}z2^Jv||Xfgij<U)8ddSt_f`D{wG`OKm)
zNo$Qo%i3cyC$dYj{9)J7G)#k`gf`~!6L!qst>-5+x&(l`9$X-Rpa?(Fe@T@tll<4k
zK;Z@mmP-n65C26x|FYcY9*8PgP@R?HUt-23Dt=HFMGruMG!2sZ-`Vo}&EXK}WPqrH
z?Jyk4{70MBDTO>ulM4J#(%VV8Dux&$fWpMn%>Pvjyb5}o(4fJ$cuSn0sLN-B30|%>
zK^zgC3(`{c4TS!%ya`iqk98V$T2tcqqdlcO16aU34gNz8WCNJ^|CyVEDE+jV{)_M~
zEhN^k!IqdCo&zUR#6hIwgwAv?=_Cj)2dZdcVDs~q3mN~W94Mf`uLv=A08r%UAD|Tu
zKa!Ld0@dob?ffv7i#vgOfnHiuKFt^BzmI~_5qEIPf$l}_05<?uGnBb}{#$T~1vd^<
zjuDiI|439I0LALG7~Hb$xLUqq4ypEl1*)Du*X<iF!#UPj4j2_Mo%y%2Dc~!Z)qyQH
z;DZsaJhCeZ(I_s@*3{zV)YY!Q55q!X767jE`e=Fc%5}hLCHhA$kEH<@C`|2(PZ0Rb
z<=V4Rd(Ypz5{gdVh3Yu(DslaK2lRUf2D&184Cq3H;}sPFiM~{KCVsPRNa2lxJVN)~
zKk_ng2ul}zS;Ei0S2^|DUH>Li>7ocb;D!h^$uFzNWkFv$0kuJyP0^Na_@!TH@ED<T
zu_S8(FT8%`3ryEe5zWe_CwYkSTIpe`#-LZ@ZuZ#SaIBaw0MO4|P5&Hbwq~nZ#Zt(-
zfS9z<)n(^1@LDH~V{k$&Xd=!ToKrT*&E`CT9w#g*GCLzjGMqz7`(8PB6*=M{RXga~
z=u3oN$;z?&;pklb6YO#WVhS^TnH3ty``^SD3UdPr(0jEsvW5u4flB1?b9EZ5{v+H?
zl@-472#pb}!u5ipA)ki2J531ir*^aJ)JOwjyDV41orpXjZJqkXpQXtZ>BJOI4WaO~
z#iu%G3-!`~ai}2>juI4qt+18KyeO7n25LS);~vT3g)jN`kpP#EESH#^<&oxyFbmk_
zaTnUtZ})pf`f6g`S}aSz4iaW#Q@;9>*+CyB)4lQLBPQD-lCLA{#G|^~Ph}cWj}rNh
zX!O)j%4Qp47SLgtyB?~h(t@EhdwZ*H_rw60n&zTN+8J3AzA^a7r}SmRTY{3!)ss?m
zjj9oC4+iyPTB_{!+bu$vfnWPi=I;`6QGpijC+D8doR@7LeM!{SB-Z!km@nKOTPWN=
z97xy~*JaKgvlE1dzT~yQl({C6<=Q7u<~;t{C~5FR3~{_1ozw}JW8g*k+0wIOfq=O+
zE|;CEvork;ddoK>hxwV8)0!MsXU|HkP}l@2-VOoK$?%?m%2Y^@OGVY2)Xn^xSAtij
z2q<?lr636@@7@nQ4GKZrL5|}!0NfD78qJ0U7nPa6#;;SpMLy&`iG1%1bQcK%+~5Qk
zQa&@d`srPglI?yYC3Cac!9iyGuh63OO#E%fYi<I*FAA0u6_r?5XOJYP-b{22y88|>
z6%hwT4`NZQLzrBLV)W_`HgG=c4BTbvMjZXCjJi2)`!NUCX&n~08_5n9cC`|!oNYW<
z;FpZG?rp=|W#MVS4Si<JC9yC?FvyXnp8Qt<_2VNV)4$56LysXr{5EZDI7oAGot|67
z9~N3ux*4&FINbjwSps<?HkCv?#_{}g)fC%F5{GfmCPQ|wBMZ!@MKQRVA+YaIR4Bw$
zv68XzszpgdyiV=uRNhB%zEr5YKQwW;GDw_xvqeLn*%ac{$ebY=(D7OHA&8$zK=oKh
za13%k+xpYF6j3@xdrr5^C}&9b>}O#bEj`^$<p{n0;{Dx+4kj-P2F(ip1%%*I1HM2=
z9h>6y6(7bN=N|4SLV@u_KMjf_yC4+t>22EqF>#+rm@w?^7w!ZDT)$qgxu%>6_)ZD@
z(fxsF{0;9(8@K+@Q<VM$Us7;EK5x~IchQ?cQ3U`kCY;HU;~8`X7WNRhEu_n#bL0;P
zbi-JSVtgN{D=Bee6CU^ySc?EqmWV2SCia``ymb+kkT;>e#>Bt)zjiuEN9TMcLM-tW
z=hXy)nytB5^#O2{`@QZXUM0fdfOhRsB0G66%5yb3OfSR~jlo6x^GQ`jkek~F<un%?
zkjVR#AxgIRIELC|#5(h`&a5cLvql}>1A|nKpiINV0H8%LGeYjDs)ExQfw#!`(!HaR
z(uqbe+yx68UEN?gO`Q8IhX8k^l>vyhNl=O#EnkuzQ;+n?dEU*ZeUoPh`U2#497*Po
zKFQX4=R#ImjYz9U9W;q^63iGnTal^@j|?3&Ob{qsosA}Hay2yW-$SR*Ewc2y2JU(0
zIv=>+J-At8m#)@`BoRRz7fTt^I4{;QIBr`3lyfpysqsy8E%H-Z;<DvhXB4pBt<C5p
zAZP!Rul(@lP~SU1Y|y4h!o1q;j#iiw!R$(e$KrsNI>b8L`-kmL<D{uJd%zZ_P}`+9
zM@|w|t(C|99C>8Sb2LoNCWuFR8S)~$W=om2Q`DfxdnL%UCr9N7B_pA^ie+?1^JmMM
zUtf8GZDv~oIzz-87KFxA64+s8gh2{GS}%I&s&CJ)lfAzkNaTv!MaP*_UG_obS*4V#
z<<m+6t|l)7PAMW;ySg#m$K6|m9RqpE8tWw~kkb70ydL8%wcclO8yBTvCbte9at{4`
zCA+^W!|K^z4~6@Y+-cQ`Um_{^K7z9C@pgn53x!AUfZwS)n`Eu9tMyFXtvWe`A(YgF
z*5+P!Hwg4X&M-*4eKi7nkAy&p(E|)VTz<s%!&7|^gNfdV%v`l=I0Dyo1fIs3yIP&B
z6>ZHebjmj`P-uHrRBQ`MXK|8uqSfV?4-QhIx91XdtnKX|&J$JbIhnk)X%1$g5Sc-A
zYGlurVx5zwXMxA{&i`bcuDc{;2N5XOcC(OC|MD2u=<CfU3;)y4s5uru@sOrrTsG<N
zGP8C|zJXql0cAVuR&#WqFN?0G@)IZHXVUr3-W7&Iq2i6g*Y}3@ae%7F;C@wn0R13%
zW*hVv_a)WujY)_Q8jz0!MZ6Zh>Ix)j5_PG!rcYjdOl4!9nxYI)5Rfzh93G8l4Jf3$
zI(-djX$Qy~p!#1Um)?s$US2~J;EV(lM&mwd_1jrpe7Y@N*dB%X#n>jd<-MvQOh@O*
zN`EuM<bB-h-4d{t=Qf9Jp`Mn7Kq(<4E6qltJPnsoJyKt+j2&iDuHO=wADVcxJ$Blp
z*6CQ#lV!SK`9)?Jx`23uKy*0k`wK#suoZJTXm6LhfIv^rGi}0k#P$zyub97bCFEoh
zyWnIu7vYEOK*>lu46$qx#KoVOVfnfzVb(&PU=ASJ41{oDg1Q-?TLhkxxVPI)-b0c0
z3W2bG^I@(z$2Vp1*C*?#54)><71x54?#j`V_hiE;_85bBkH%^dUxr4~Vn%fdg&k#r
zg6yrkHxAWl@HPD<Q_weN?2vQ?&Im<k59ZhNEI)7sJ`vAbBpohncV7P<=}M9I<OW(0
zFcm*a{@x(Gdz>i+OYZq+PaqN~8}>kxt(2T{z^hw{7wKsrGW5>8klO=IbdGt-rdp?x
zYfXjg{*~QXMH%rYc77+z31ODkzz@VxOG79HUiKf4eUN>?lx-IoYO`nx*6kZ)-FP|K
zwW2s1($ld^oUR@44P|Q71mQ&aNiU3?OHwcFdBJo4u+JQfw|+&eD4;2zMd2m;YX3^&
z00~D$Jn_EHYHwQ*5h`7JJdqKO!}l_!Hzx`^(gZ&&*KX8t;2g#uQ@4<nd<uAqZkhYd
z`Fp7G$wP<=eS@*`BYc61++HmC3X`+)Gd#69xB{LOJ;PrpUQ%LN`?Wn2U;ejdi3ASd
z&3>PR=%LNYq0KGZB(at~-A3<LVze<*8|fb>n9NU?S3m3{v}8<kgV4tW8n?tEl1-kF
zeI}P?jgleSh`CE?PKzcs%(`E^r1)}hk8`l}Fl~llvtd;)j<57h_}4BN5sxHw_|Zs`
ztr=xDW8BQEWpA&cd>UFum)_z09Z4tIhx!*Ka^|K5e;+h~Yqr6r9MJhP|K^UcpZ(sS
zku|UasF3Sy6zI=gVWc~Gj<H)N*1cyV<gU`yKy~!f$E>pVL|<1%D%Xqm!>_Bc?c0t`
zx~4;{Ov9vhkX<zL)QBCm&&)TT3ws&&caC$~U%yLBB~DAF{gu-W&X0+zmZn-WU3mB&
z*UpyYC+{W;H_lc4JKZHCo?vEvVO#0hCiueJ!aF48|5Bw>&WDVfcPQ_GBe}1t0Yn>-
z$hl|)OG1-aN?e7TyO)r?JF6Oi`~9Z|C6*tK3r`e7$ZLrLHHj58+z#c85D;Q#^rnwl
z(`FlTc-P@xogaUsc&J!oy#7~Ry{P}9tX?4)pk+7Js6c_~g*<7`GR|q6#Z~65pmEHa
zaLf#I$=>I9(CC1qQGOumXCG$kO_1Dqbl6)R$G{CP7&_kkmyU50GqiLvR(GT=^7b#}
zhoAzk=Iz*~RhYp%g8q$YcK36~N*P|IwT>Q(FPh!(IIkT#k_8_cb0eRY#vtpofoqV5
z`#SKj2nF67YgDk%vT>_XJ3Xw(yqMrK2j*ZFCOS-AtahpwK><WWy3!u=Jv^+VgwK;_
zcuWwiE=uoxc9LS;FxR$2utApHc+k(vd;3USE<r+cXP82@)a?DZW7FP;b0xQpW&x+$
z<k$JUMJvFUB<SqlTJce2Q)iOW6z%>cSK%ZIb5wO3g9pq^MbV$|ULa|^pKAr~+2-fK
z@~Q`9#u8obd4_4P^86p!ikPeguCEWBD~Ug`>Sokj8mD%g?D5k)+`yq(X%BvZUny74
z{WXWc!A8Eo#4_|=_tql?9#xV?^o}4P&rQN*z>b>oJT$IN($!>UZy4_2d#HfWoze5D
zi84A!yDGV_jV1wE*F3dEkK$2M2<m*-c0~ad)pi?;nMiLBQ%51t&$v{gZ~kEX#A>UH
zpv2|`+9@i9`N#?wgfa;9uHe~r^>a3Zy-?*PQMkze9!*lFOC~m*6p%z2^718QXRl<}
zJU%Mk9dqXBR_yr!bN<1CPzmg*BAh5^+erK?D$rGj5Y70QSc+V_V_HR+xEN}dF#VqA
z+B91Y-kvZ1@n@sCcU5vtUn>ygtKT5wWH7_STSp+xgiGWGj7F<3#3a<2^Atg{Twq_Y
z401n}%f}}uX!9(qT$J#;ji>s5mhUB}{QfTAqqkXx6Lm}A;!R<us{s>UwBw3jAKJol
zXvqepcrcuU%){m8;?HVG3dsDCi~il$SpcF+>x}%h1efwWF+WekD)?l{LgaRps)I+F
zyr`XQ&veh``kLd6Yi{$)Z;8}l@0A|t#RQYT&t~FV^gA^%{#oJo^2(@)XlA$Eo;`_d
z)BsRYKAi|bp|MlK&PMpy8witbEY|=R71=~Iv!|C{3DsL`gL3zq?Vv3m>$Z`ZxK}P$
zoY!~f2Ju26+sBW%8O7ZDOHDxpNF*K}4%gM0TM@e%_ybM<_p^xQ3l`qga*REplOic`
z0Q4NQkavBcrlOW`spg+ojLL5{o2`H?A}pImCg1Dsdu}HbKT94ck))webuzd01Q&Qi
z&ny181=FfNT}Lv*L9p=l24>*-soDEb$54p(&ZZ-;RW)?x-Au;#3j6om2OX=+ty6DI
zRfp&9X;J3;g=zL5VBrGj8N?x=o;ar2(#OjEL`P8|i-xzVxN^}$eytLb4A#Ij&j8IM
zVED!W*~2MKq4kJR<3o-GtpXFZs>SoHSjGpGX5k2Q8e1PW?lp-g^hIXe2gXOlV<kP2
zve<d0=s77A^yt0SmcKZt8awedgnm6Z-oG(dA7HElOv$VQ3HrMXC3EDbL~$V&!?)1w
zyN&l^aME?!<u{BuM`F(vD2xTm$Y4eS^T`*}j}Fy{3gs{6&u`1p>%K8PJK|W>hUEa=
z0z&R2cwD^5_X!~id^cJe;wG&7wt;?ED;Z{8QbMmuTSgM{#eCMK63@lvqYx^UdzI(=
zqFAn2jXUHs($4idL0uAABQo02y*_1f3deiLlGsQI1QT3`AQ%r;0Zd0*v8C{}?o5`l
zb;txIzY~(qi~U*gv=qn8C|32ZI<htme3%DjVd!9sI%eDDu0mgqP6THbvTg=2ozp+h
zasTd;Swr7VYGn_yFw>%v3FG#Hj#kDwX$fS10kG}j;jVR&y;>823QbIFE$jnKp0jAz
zCtMC!2LX)C3i1(tI9RXvFS^NpQL_I?(D+lRzpwcjp#iXIi70bS$!Phs?w5Ite>}|9
zPoS8KnrK>jyYlbJ*VUDOWfRT7as#l@(<>v@|4GvD#rQ6(n(4s1%QXJya!CqcdB`*C
z2fqpUySxoV5pE24&4zOADcyFFyc+(4v6@8p;4Y1YraYbUd;Qo!`&k#>H=u0x2|qIE
zSFO3EM2W)}Y~B;E{_$i`3{a7N^SY|IbzTb2_+REc{<@h#J3=UfVY@;^!5_&7k_U_*
zbertN-v1ZgURCJ};*>ASu$hO;FxDSr{l4bXrVLnt3^3X+9`j%74!`ppVvG&6YgjbY
z2ClXbe~HdN|7^byPF}aQ)}PVR4uHk{`SjM2O9WnG_%9nt97eQ?UTgbLzBIjnuGhPk
zm^{g1;s0Iq0H{`Cyd?XdGy}Va$fJbXd~2S=+=6KVZ~tB9dk^VUItv{S|J64KE?<0A
zYXJZ}JJvd3+}ZL+wgU14Sdelj;{Bhkb^<i8>HnFVa~KlD{1@R+Y?>SZLrkdN&!2ZY
zdP@Mjr(v9HtT}yI$GW&L#%Th$^#8q~0=<bdR8B)1(D|uQj|0|c?g2)?<<(BR(g}>Z
zP`EU;JM%vp6iVcYRZ}inPyGt!aoKQm`$v>$uX_8-;>uL3o*cnxI{G8^yO?VRjDe$%
zgYv)ccxik2j)0{ppOWiAFCF}E#Q}Oj05jfjF8tDk_;-7N%3pLi(yQudF)nNCe{Lk2
z|DrJ_y%76nv@BnEy4{FKq|2Sl%bdG%8;CXV!c{lHaxCT_(V|=dd77?4a^t@?iU)d>
zQ>L*VFY|)%)Boza{`v;SKMar|?<%aOBt70b-+k@?zMSz7Q(c%eK2AsU9~m7S)CMik
znjx;#_e$0O3I{H;Mu`TH%z(Nh_OEkUmlyqW_0qj2(S@o1%e^6=5%oG^sS}*HylGVm
zY32C8Zzj+RDjGu3JXPbFDco|s(;fa$Jr*7ZN(~BxN60*NQhVr)+9Hxlp-mE)il9<t
zhIJ|xnTJlu`TQ2&iN%861SNHj-G+J;uS@C5M@H?2CU^L2s-u|W7%QdqoD&P%qGd1F
zQi_We#l*!^g#(CkOIZ*1>V0rpgUQ8J7vi`bV6$^`C53tLK==uVI5?D;Oq7@CN=6U=
z7;=Atz~i(RT4*{-(HHR)*lYFP+UT6d`BB7TC&~pf1BD=|JIrBm><wwF=t?6``Y;`a
zG>%~yC_@KMD(L%z0iUQGx{1;B1RBR>*D`8ewWjRg>dN~Vmp*KkZFRD0vbQKDCFR*;
z+}tdcB&OBg4*>*jC!1i+FNodle)A?Y3RyeMoZD?os4WH^H)>1n7^GDD6LRT{<QooX
z)Ua4l-TFINLvLc=XETe9wQRucsc_oA8BZ?D4+oXNus=WDM{R0)b)$v=AeIFFG~Tuz
zOM$Gfh}?GC$x^&jxeW`tb0dFX!}e47_6J8u!*`(3bPH;`GSJ-jNp`M-YvW#f>EnyT
zGIWXX3en+_KO$(R%8T`}5}3u;F9Q`K@`GAP@+P-hZDnaP-&Ceu1qjU-rOb@`e~on{
zA?~CtjoVGq0it;~(t!_5P)fXzb;zWpx}g+M=id~so~Pg05nm6J`78FqQ~`^pJ%`iz
zwzV%8eV(1oa<0MlFOVqFSrn%A*O00Os)0B3c%w?gtnzSPk3n}jngAc8$>MvN4%6Bw
zL#d;<gsN7*^-9AW4%&A2KDT|2L^LyX9!0$gz%Lr4_0pBB4Amm~=#6?MrzItOY&4zi
z{n7?iGY>Fca$_!_5fGYti-6cd!^2DEvC&@Zw1(5cUal#34|d4Q%Tpw{>_zz!@r;!C
zTrJ3bHzCLf;*K8ZqPlJH6sp@A&a$w?G(G0b(DAmlnhZlE9d2?3uR~l~sCJG0B9t41
zA&?6B23mJ;P|lB39xc;2EWUrEb9%I!#ha(s{(!1B^$Rk<%vAR?cem5s!4Fm<4S&DZ
z1Es*W-|bhJ3sX=xoX)f2{1wzh3s+A9)24q78_>xm0+wRcFQ*`?t{!iUiqB?dW2*hj
zTR^|LfZ>P0i-sl@TN(IJd64w8XC$MArXhq}FPpN|%2Gal6yda8CQ~c52?Feg&GB_X
zK|zudiOtE@mX$F#p$aju@LpBbrln~qG94<+c13=;$UNa54vx5}sJG3=L`C<u)B>DZ
z*~>8Kwd*Z_?It}1bc6`?O)cu^$IL7Zm-Nq{Z>d*x#Bqt6nVIzsEjjnz8yw+qJ6$y!
z%BfLydUJ~~MZYtCK)-cio1={4R9&seeA3M2WxpJsLQuA!hlfW>qcu_Dpb}r6<E_)1
z!VQC+g08NWc}~d_D+NkLW^ua(S=S7u16^HGrdP6`Va~kx$w4SKbxu{O{KV;li?_sd
zw%3)1OS0uT3pYjgZ}Bb-_A`7y?+kh>=y%RnGMzDw9e!Kkl}>F(PR8UjnzFq?vHd;X
zC7}FX!F4$Ms@5uHD7Ngqsg!PJ`9(EmFuEXgP`P%I(|-{su(zG_-Bt+xalzqZR4=2s
zSjLjzu^@Cc_+L_`VG_V+zf{$i_r4gO#n0Dp-hAB_#UzYPtM~#5&YmvI?flH@WV5k#
zC|8?@iPN4Cb2#lWg0k04uM}T_nUQeeXu__S1;BCLo)pofIo@DX<H4*jy9ozj-m?R3
zRAkSr+Uqy(gD@$d<~Nv)7G@e(nMwQ1o2YO1yofw93ty2u8P3yJF=n8l*;e&HrZB*$
zq5cs2fHKy?V|F%WAtBvH)%euJ^;^yLXDiEt*$JxlUtbRtUO42cyi!YzAKwLVw#%SY
zVx{|>*d=*b*q?h#q+~J4C-|0`v;t4|NJEQa(x4DuwvpqI<{MEkJm|<lCEp;ZEs~Kx
zoL+4?y3FN_({-}ah39yPjrVk?SN_F2m(f?Kn6r`E{<)QfyT$^<cqf|XE=M~-DrP11
zmEME@#4waPtgaWnZzeK>fQr6|uB45^u@regTSoW{@<P+aOdnA_`VC1%pvEY5S|+4N
zhaR0Un$%gKm+nvn)-gRf=IWP+s}mGn5VH)1g0|&f&laAihdyjnmN&tUDx)R4-I)<I
z+SwV=eR{1M^X;ZtGAcpIdFDgoat;lzS-#Geh`X3m-(BrL(I3O09OAfc#p0^&dol4+
zjL4i<J$bgr=50$l=~}(qpDsw;$#-7vyx}yNX9gMFcdE$x^eJdi!)@Hr9!YE{pxXq4
zGvLA%-r|_WSn(>Gu+Pq3vh3tN&cNEalfCg-E<GbxihEO_<Y3w-6MrXq6C@iwkvLd=
zSHG7Qd2^)PVSBb@AwFch%&u`o4=Hxh&wefaG2G<IJlovIWdC<g5@4=ghfEgn`gd3~
zNomPSe0>t07{Hjke0o+^c!~8w3rx2)qcam3hrEaPc$LWk(7ntItj(j91@p6$!vTIz
z3fGevVihI&X~N{=9pjB`x6|~n+z0BDO((YKGmQZe=5EKMme-61vNbl)p5n5aM24{l
zRSi^~Y>9XFzJ7Au)qAZZ#P5;>*%8CdZnm0he7=j${V^L!GGdq_a{6M>`7p(q!%SN1
zF?x_?f=g8cqT6#HQfyKf*Rql)|HU{pFt{A~9IpPjm49nxfksl^=i}F;iRY1^P>r)Z
z8MCTHh(7^_8#?D8mqt48{i)3;rDK)=`KI2%{GgLG@fY`5+<qAi$`q}hjK;221_rTr
z(P&kRrCpClCn@d)YASSrZ=7%Qos(u)>_xletrQ@0k6Cx}Y%Ql}JL+Xw5WW~qWSiQk
zJT^;@^)$^}nL9f@&a^hb_7@lhEIG3}_~jbV=oSgtahmaC%Ycz~gc!aIR+PL(OXRrt
z-tihZw$a$4q4qW(EnZj9yMYToD23hx*cr|=vJRjRJs`KU?F2zSrp;)7F4GZanio%)
zbjf;|KhFDet$(|jl^c+(#F(EDjv<<MdOUd^UbbE;zPCOe)21o^ttB~t7mo=<`l)8o
z_h$qM+(n=%dNo)22@4fTXDD|sx(8GRevH21yxw7Au%YjEI<#u!@TdlOjm#1cV!3S{
zwgsiOmC?vU084oJ+QZ`pF@A3EGiNdG%D~$kxv_1eqp4(*0Q4WpL8L@@$CoStDCm)0
zd_M$&PZlsQ&5aPv^5k5ssuI61SMLK`mWJ!0uEX(K5l@-Hp8N57S?4a!aeSP%Ngw{H
zBdJp3yZ(6lX;hkPPclw(3#$(2W8~936pv*q)CQBHXk%};hkrX<NKhFTW3H|q_PUAt
zK$yVtm37|kS!#qj46JUyE@3gl)X7Z>U>32QBD<or(t(aV;}@RDFtXmAZC=2c6u&XZ
z=~gkXz$%g|kDHsDlke)ObUEfOGo<hVN}vq#^Jty7c1`-S)lSDKd;3INQ!ba04KglX
z(W9ZNQJN<0wq)_F8}Cim9p4+`TM%q;><Ojm7Uoy+^Y$(_RZew=adNVM;f+7+9(c%@
zG|atfYQRu+vWkCbwN~ehJIuyO<K^#ku9C}SXYy#6p9oB@vby$d0={I5N=9c$@|QOp
zn1$T8$o;x!6am~&<~|WQu!^?Xf_31`+YQ6TV@{mI)MBC2O-dDt)fGB%t%`MA{v?m>
z-_p|J`KHLQS4hYYPnVF%VhTbtr3JvABwV<1GrVlo5}65y1w!KtPfzF5>5BacOghFp
z*;x1PDW;OKnvUGdRvFnh{3ezG7p_RjceI#12WzFrEZ8wpcAN!*5Z3WX{>Ixoq&i)R
zkHamWJqrpm7062h6u&VnSK!+9w5M?o2UV^82C46k0J_cj-aGOs03JfWe0efl?qJ>4
zS>zi3l=o04J=<E9ZtZ=P+H}G6wAKp2a#oF~x}+Kq4h5sYx?+81r^-FqJlQh5ah$fn
zz+=@M_t)u;O8Ps`w&q$hVN@MwH?V1Q#9+SoZ1hGaisq{to<Y3IXQ`&6g-MUeHW3mY
zoL>H_1_%;Sf-GrFYsEP+cZL+CA*zQgRqf<r)DAlXy|s;eJ>!0K{dAU_Tx&%HcAbD)
z6)6xvxb`}ec;2~K2~@f7tgS|nr-imShlFVj^6r;24^2-Drq2ZtV~d&Dn7p=K2i|<x
z>d#u7$!Bf`UhjE3Y4^fWpD>8Dh)+W|?1i_4qNf<I2F_izyo#j&6gTIBEEDhbR<<hY
z^37FlMn1jXO6)F31W-o!3jJxe7tw@S5rEdny_O*0<7@W`+JP-Bb<?37&7?W-PFf|h
zw82yZ5MeU$Yw?~>m7``J6T6*QmaG+ys@D1uaL54QT91abvB3{N)qJvYE1CFIgwt-F
zpuY%!TJnhv*NL59=r+6^F`O{S@j|vAikV0mxQm%P0ssOn-N^foUbrJ7z|-*818^>*
z`Yj9wQ+%V_wg(uQEQM4&fgLX%^R|!1$rB={RYn?i!PeZ9sq1_g?OB@U7dY@e{~P7O
z-P>*lp6upbZkzQu1Cob|HN<<lS`|+h3jA%K9`BI`aLdpaPa)922^Xy_@H45GpB=4a
zxnCRq0DoJ%(ZArfrb{7^i;52Ft8y*r8vu9*?0RDF9a_;{?E`>urD4t;<GNv+7(J2Z
z&Q88!@oT&Q=1%wAAZ1{NTj&vIz(Nmwn-5rilQ(6&K^TF<6!g04;2Hq2gJ%4>I!?6M
zN+wtRahZfDp2kvDIPSs_T$w@qz&mvc%CcO*OJKea{mzgajFpLve-8UZ^Fvw#%5%Ho
zN}imHe^w%Awtv6w_5mIkqG=k&>-y%=OrUs&@F1rNkvW4^SNh0q`__}HjdmkTz3eWQ
zg{aBW)4@X|t3Js7`R>IO;yG6>VN-6mPS(MP;r+Oo<+CcnO_j3tpa-?9#X8RGfJ0vU
zVBFI~ninB-Ju+ih-q-`2FRXUVCtIkKs}xhA=Aae7vp!q#)QRuc;S{oqS@vo99RWBX
zvFM7aBX&J_zn}yp4W{FLMU%0EG2PLq{KNp-ze8vD)dbHXSF0W^J-}LHe|>x|EyfH6
z)-=d@bDEZyx53y*K#B*NicRp}Fo`}Sk#~4|gQ2_&tFF7!#i<*Avi8mG2&eUu#+IqC
z1Wd9M=_SZAi|tm&1>d3*^qv<le@@rgTOA%4VU`uhNULEmN`_wFOM8qKoe8AWb(I`T
zgG;3YyOOi{y-$H)vwCV}WtEYLjSlH<yWdd=<QNMS-BwiUqb%%8BgWZbJv}`iwV7{t
zhlk?=N#M!ZepS)U-H|0$^t7&O3MX0pc9a<t$CJ4T4KpNH_WdO%bXfQH`MO<|&q#&!
z!c&?MFQNp4-s<4IPF}9hWv&g(#(uoYvNTImA;GuSHTsIuSYX&cl7_@jNE3$-sKVAG
zZ_*4s_GBoJ*2_ES%-fn%Nb`N0SHa3hb#CbxZ=Khsf(0Y$AOyYu0C@dbfJw=|;D$eI
z%{_{}$KpQhqkSd)R`X2+)byWk;CJ(uNpN861CP6vxH!Rk#Gb9qQr1Z74<nBjojD;L
zuK{&fZ~gMc10W9geJQhMLMd~AE|4h#VBEPY4C}l9hp@K}i*nui$7yK?kOmn_x<ML-
zMv;{6?i4{n8tHB&B}AlCy1P@l1SBPt4*lJ;_u2dG^L~Htd9Q2!;1YG1=eeJ?KD8F+
zx<9^x#_ziXMQE9L{p)JmdsI=utlRb-6O2cz8>>HzqL`F2!vWmPGK8p$Rln8w5wG%j
z`V1Yu1IjbBn=#*Wo?_leAMZykG3HcPXXSouc3(=KSlf~v<8wf1xx-S+4}T7>Km;GX
z-F~UR@3B3rMsva)VJ(YZ{*CbUIw9x#zP-y)fELooGESzle@*Wdc96a+?Iw+Tf44oB
zeRNH+?|%1g(m2LLaR}KHRdG0-pJT;D_2wmxRi>Nf^y7b`u(&AL+X3u#d);>%RTziu
znBHyh#9mG6&8)=`e^a&kjtdWwoK=2U)LBsC4^uRA>FW$DB&ZVAAueRXIH6%Ek4Jll
zD|4}NySA6sTlOuJ)>r$?#V@F~6s&rt>0YhjJvsK_&!hj7*~4s6mc*|LEcIpK&ovoa
z4!ub8g6DRo)={*Hs1ou+-k<)zl3QDBQUW|mb8{tmn|cCKu}Y$l;E>^M7*Lub#CR3D
z)<db--@JK~)dd78otg(v@@=j#tft6MS1)_{Gtv!?&K@;dVtD`_WpFcDD-k5|GIR99
zmhp6M<HB94exv2c-h2Mr7RUa@zDXEv3!2x4(NMKDG}2OLqIS<y7*O$0O7}DidvW$3
zUQ-_w!HkTr(phZ`|NHAeA6}`5g`?FraoaS|SEXBK`E?_@=Xr1XFc>n{mJYni-zwH@
zf>>C#pVd^uF5i@#&j^d%Q|{UC8Lp#G8mFK5xSERptt!LZF<#dWQKsc=$-P)|!C_C6
zphvtil{!617wyGLuaCX2*%-ut`OLqI|JjE~>33+B%?<rTlqY8rM{HPwI(fN$0{Pvd
zSAdSCycfmFSNs)_6Uodo-BrEBB#Aa3lX<Qh{km1mYh{(+Lcz=JWo&jo+0I|``M($e
z#0Yv_*mUVL4`1-ZTjW1GV$EhZktY`${Ovt|h+GT>6OYws)LwZ2DjCVzZ6v_=X?%7m
z&8L$JW#k(|?OCGUB`zr(M(ih54%5@qcSz5Syp!1{s_+c?%kmywpQWqj$?CYy2=dDa
z@8%~;J4JZ&@lEdkxZW?<+hVJ+hu^knIQcrP-@u(vqc>DUcBm<dLUR#F7qYQQ&?wdn
zw|o*lQ&S^rrYBV9=Ht3IRjBM^AdSoemP3s0m+i;CCi;$iezYoX5rDn;+3E9rhn6p%
zirHezwW1R^a4cG5*AgI#abH^QuiAnTP(t|e{IZgoUnP}|=HaufKBpmft$H3OR%Wb$
zhq2!a-yRUl7~Ol)EgX9|WsEU0ypD}@^-{5)xh)s*VZ6JxavR0uG6##jj&O<-=Fr8%
zlDLigBV6M5)3C{hB&%Gkmd9+o4&ol(i<z3;e?}B7XDM@UA(j!RzafcD_2GZcHO3Jk
zO0G?H4(5P7942CUP87RABOS<)`L$3V4QIVy1bl^>#kk$`xkwR#kdW{g!Tfi=@_w;x
zSEZODdV6j=bIG4?SAV!2F6n%D_V%kzgcLH%itmlXSWzp0_b-lGF1*mpJs!q=i2kF@
zYw@U0&rW}C{a{4gh-Ni~&0b_{C_x%csmGH`H@Q%2XJvu?B%j0QAABN=e!L~<=JyxC
zUV84tZ7$HscGm2BWDZZhrRQLmyDxCYe#9-0F>(@~$!kMPW}RPq_!|Uj3mha)_3IAG
z2uFNR#_rqcBa*@wy#VaJ|LooTMr^rexTvvAkeH(Yi*l}96pxPke@da~bZl`;%HdD$
zk0HXv!!FcjZW?QUNp3bxKkvs_lt+Mt#HMFbzja->@hX+L=zEuXr+u?;ezO>>IJ?g?
zDj;P!oMw_tRhhj3C|=FevboPTf>C~eLZ2&+oC_JuHnyVnFu!`f>N0vaI!qdW=jnN3
zXC`+||Ks5HT7EO_`kGEie1zzq%MZcw7g5otE(hhGlHsda=H<G7HM|(;tzgyN#tqq7
z`a)S(VOIVsEOfSEqqI=2@?!Ow!v%>^wc+iqFzSmgp5!bYp@VHE$Bjhscdf{Z^F$70
zHS5FuC!nIz&0j5yb=duVG~uSoT3OSfEpKNWwUquv3Yn-i8V=;9a2)#`-E#>9u(E1r
zt}?IqS&-Iwl!s6yx5mr8>D@Jxh3(8&D}t9|KP0P(q9}zmW5lklS%jq>9m}jSLQ3^M
z58ht=-1<2to~kWD9M5HHQ7=CuM6+!ZV|6x>K(S}+1f<AF=KFa%l!hMbsAC7X$oFuQ
z2$V%s8($r<13+JkBy#GtlLnV+t#*lT8WMamN9{5X^vM>C+Sr>HJ}9O)Kjybi&oTqD
zm}=i%Et#m-%jr7vl^UC=M{f^L|Ka)Ns3I{?5XH$^MzHYoB0Fh4X=4{7{lc(D<~LQQ
zd$p{ff&YSGFiy(5@x~j~Vl&OrP=`;Sq1s_*VTJPeebcMMpSaiK2@LQ}XnKVj5u@|P
zXWSA@pN--;?iwGW_cJaMrN~iQD9E1U^lw(yT{9XYS1JO2F#t4oHVii{{{MLVrZIrY
zQgWz>Y_v;K-uxqC>BSJ+mzF{_+{DUIyrlTb)R1s$fB%#LMi!RHK<zf)7Q&D3>2dLG
z6jIsU+*p{I6K-#jclF%1LHRl&)pzMYCGIaO%p!AZPRSwRwT`2BwdA5{84W-_r)}HM
z=#{W9t{NH|GT$e2f_{z)bJ*&Y@DHVOr0(tQylbnxetdQw5rH|&)U{qgsE>#7P`lPP
z*?y^hV#aB+KmG-frqdhy+}ix7?N-|S{Pw^7-W*8W3L$rNrkqW~*=_z3{Z@;+j|ecx
zEzt}M_s8~gal@Q0H@4%Gjc)t7*E?4kM)y@IJ*JF-z>l^SEpsm-YoEjOA1lwIiN|w-
zx$cmEob2tC5Nq(!h<krhdqf$}vJr}sUlVCmmlSI8YoS8q&ahVf-JPN0jZnJQxOA#}
zYraCjOTIpjT1qYej*k!$@4gllFZMTUQ1e{G*|Up7GTvM0!PVJHWTboB?=2L584spR
z&oS264@6sSQ5|f!`TmbV4n?+{3zyUTfqHthjCr*Ns$YU&EclFUY_(PNbE)}nnQF{?
z`P;4(Z!E`V$uvF#A7NIEa(1Pe8{4`eE>THnU}fZNVP8Otq53@_Syf(VdmjzR^sB5V
zXh_9gdrZ4;laFu%ZLM6G->UltXm*ihUGspr&jneU3TC=5*r+0sj=GpqZXcu$dzW(o
z(<Sk(g4s2Ycl0vi3xU~GQ-||VMBs27aIY2bqk)gAc_jyQhM8w}<{g2ks!edyfu&wn
zd<;xwNlrc^Co`8SHZo3Zz{v6Qk^6T<MZUCMqww1RkjLa_0xoBRg3_s~H@B4SO8PpY
zT@0<qyPac)$!>DZj!N+s2tDp;cas`M{7{633O?JmaJpfpBtH-yu@n9FF#vIYeU9+#
z91OGct36NYS@HFFk(Km-L0s#Gr1?Mh45_iL-3Cpl$FAycQ1+Y5>050#!^<m0fLW}l
z<|$fRHN0t7FNL*aqnU{uw<Dh`-ZP4&692Vk=TiyD>&J_0*&s|L#0w)y86jKeemN?i
z2cF~?Iz!nWwQaxej&gN4P5FR|_BEWr{N!s-Wh3vRd&};xIkQ+#%j0oYEV3PljbUpe
zho((xzY7`8+r4jmsp^LN>SO$0JT`ixe=eP!PAPjE5_nsE|GAl{JgCUOZ0^(A%x%9j
zn<W|qa_DjoJ@Z#i&Z<vR+iqnXTh27?Ub9_D{ri%_as*MX(<dp#1@qVyOr^FtE%dW4
zMZXd+5I6GoGBe;GExp_7ghOQE8kblqCyH_(ySfmtNMzzIF<)Y@pxNGF$^lmg6&MYR
zPtPh%I{MWj$$qzrc{NtZvc=`P^kw-3S*m$-;D1DK0;~fXn=B_5J>gLWUR~Jl7r&$V
zSLAIor0$EVU!Q-sqs-gl2*DwLghkB$GWsOe?^a6keH`4uR4tI_#cEGA@?|1BUenOc
z17%h-1mVX2I`#Kxdnnus1vaKMGIsMqad|6qI=|ET!q$TOw5r^I`0p!ayVmne-Goih
z=M#&|8lU0{A8_8V7cYfB%p=8l*XXd?x}5xmnmZI&vtgF$X`<eB2Me_<Rf2muvvy9E
z+$=lWQbQdcd~8PvF|~y^y56Pql#9Jlq_l9=d!MIlp4Inf`f5L5>P)~qixjF&p_(XR
zas4)2SvNa9-M`e}S{mxRtoW8&29y`e?^D>sQlYqnEx6|&@ILw7?HiT08tQNYE-yY6
zZ%j*R6l8bG!(}r`w>w!7=_Bw@t{mqc5Kik#XKZ?R^wyAmCMJqBJVU?w$uo+ryZve<
zhh+%@vbBn#BuXas7e|q9t!~1()!Ne6ZqH1k`nk@x<4DhA0f7VQ!7F9G`2<u8>V~Zb
z=6NGZ%GZ@Hh5c4`lH6{N(M!(mtr=oVi|xK*|9oqIm^<clYKL%E1P_Zxb1R!CmAGo{
zW^vyV9<V_R6jCF^5^PqlzkJ3;v)FOj&hjo})v1y`MXRb-On<DH<@d{T|J%>@0OV3A
z#@#mq9i80+uj4xaO{kK4BwlrYQaoD=x<7c)deQQceBhnU`dh24c+a2TC@HF2iDhJD
zG?|h<ulg>|Xl#1{l&0%C&i8<bXb@1F5-47I4*o2H%^YAZRAFLdlRtj`+)8?`6fUH$
z;NZcBBQ!yN6NH8%RIi8Zz#AtQWH>o7=~FtzWmV4Q>grkw4Fx~yXsuq*n_tJF;$e;Z
zURaozB~T2UkK+d{hKdRk0?2VS(s5`4Hku^fQ?Teo$EFd?n(>n}GTS12N+WT8xbZ{A
z$mjR#wcyP`_4jnoe<UGbi5S+f4u3~qmY-eshNQmUwV596g1M^J&3Xa>-Apr7Me8^j
z7uAE|$WfkT2L)x7kQBD7AH_SB<w8A4Y`e}-<IU#;FI|SjSqcX4HqJYkLU6uN85Jeu
z6xF@5j9N<y%JlpX^-YJ#8Mw6k*2}M!-L!&Y?85KiB~9R$lex-5BZ14)@wx5Jp%^=G
zw(2b851S@**7xQy+ko?uOW!=dPI)Lcsp)dPJDTfGz1PnMt#U(6!9+H_y08?}FgLSB
zz6u8^y87;7^<eiY@`Y>b0mUH$eU~1>+<Ex}#i1nYa{@LdGbb<F-^za1iKjagU5%AS
zhKB6#b~{K>jKx1xmZyK!<#&$>e^}nZLB?BY+<`PpeeI^Isc9*yFHA`eF0vuN_W<d4
zHC<h1VndJjgu$Bv-IxiJtR&%e3LGuGmYPY@eL4S}9*@Qo$Zs<8bu|gFpCg42B7bpp
zY-b31di&$xhOf#xGhE2Ih9LA?ze|wmJ*}5^N0~Tg%jdeJD}7wr8J{b;ExO6XM^)~<
zD*aML@0vT55_L!wR~;j8T-*+qMu)bU2?ihLO0d5AT|7vZ-X0ay-Ta?<BYdJTy#4Is
zlb7(Y&Llgh<C4Hz0T<J}(YykZ)}NV29x)R@Q%t+zg~5U_YMR5*Eas58dFP-LANZU7
zj)SP=Z_d9Hh;AB-kI=0Tn>ssNg*1<!?M7b!F6lig&l3Z3B%X&;FzmCLoCn@8S?<;>
zWN&->2)pkt3pEat#+X)b6U>!9%zpnd#1T8FWG4Qrn?Sjys(J1+{mu0-&sb8WS>Ge?
ze<dXT<S6oyu<{sRK{M$XeNV|OeIc<~p-?TD?2Tmh?I!P0wh0XZxp2F%v02Zzor4GQ
zzbdn|yiT3KY_F8JS1grXM!!3o-jC4oYCY+?S}qF($BJaOtHmf=Em$uY>npAqU|Ss~
z#*we&#~Hr7X_`?Z%#<HndGk*z6rS+n0)9&vVwWWfq@NX$t-u)|HHGxY4hiqlES=JL
zZ4z!z3&o>JALJlE^f{e?`^pR=bt~4bKL%L{4$CR|XuCQ5u7>g*bN9I#9j(qWD3xbZ
zFcj_HECVc>+rd+*3q&M~!6c?Kd+f^V`{a+G`GWG=x3K*2yP``eIbR1I?w9gVa>x4j
z5&;C?7itst%bJv81iz)#TQ$S&%CW|j4^KYW{H6lcfZOxOra5ljKlg7bKB{mvDqXr-
z2*8GnCK?KJjU_?DfAgeTuI}u`vu%|2NX+ZK)sBC_#sStpy@K>jAS2^juQ`3s@-3H5
zaf*2O^V9R6bP1kjXDJn|t_M_LcGRz-S>;j8aD3u3Sa0bg&W*r4T$EC2d-%@Lo1w75
zFpuMZ+hTBiosJnod7ibSdJ1pk?<9<;KdNfNx=M6@XSe+HkImIx{jDI>5{&QVG#UBy
zo@xa(CSwF@rQv~g`B$U6fwNDuNQOhTxpS(Bh<GRkSn>oCUdah6NGM3uqE}<C&YcGb
z!-of!{PT)g7aR3J#>f!d7Ot)~S=nwrGL_gv$#1IQk+x_*xQ%3QlrJ!;D7In^wMN)Z
z1EHsg2$QA4^1hy)f&O?}&<)tDd~V!Z=1v%L#YI4psmgo+U#G%2fI`%3`iHhO=gxA|
zXKYHL>AbY=A8Sw|SvfhZTt)R#U5z+Qlz6VVm7eg9tJQiJvt(Q|U<0LuLX&$z??9!=
zFpf})_^PXi%ZdJ`UJIJBGhLL(s#_ypz%wx7cE6=0n`{;riEhaVVky9duJex9h6dn>
zBtjO={<l0<_V<HSP-YuJUg4RJsY1B0yg$m{FUf#*mTK;;;77xpi|y{JlZDCET9%@E
z(gUY_^X!Tl1H-9KT9(Du6zsyRj~}tQD01a$?M`&IF_Jd%b@ULoHP+1&+9(KRk&msI
zl?CEt{0uqda-@k{U(U4{WS*`3KBZPY4&Li2d%*KTr2)YIHZM;$_FBkSf;7qv4cO!r
z_xH_<5)=k~&ELL#%MF?dp(pW?@v(2d<;c79d(QVU;t>9L!HS^HheqZFru7tb7;!L8
zbf{V<pi@*)AC?z_KO*uR;oTv{_~bw65P$GoO)dZR)en3ss&b-y7AC;l7Ee|%LClMG
zO!OiHz#D})O=JZxuSR^DHL7e%p_dSJ0^?sX<X|S`q-T%H0wm*-ySt_7M+JPYYlM^~
zB?Iw&NPfSML?;h;>~~|7<_k6LP2)0~7JtU&c-&JPB!I9HQqi9FwP)Aojd$m47<NbF
zmtUtcR=R0BP{@Gs6GcUhRh-ux6>Am<t^AjcYxD?vu-mW2Gapr@Lhe(sONC&^kEHV}
zym(PXA?*I_xD#y_o5@|}-m2)G@YnAYAW#tenR!VWi4OMfmjv~3%cFel+988s{o<;W
zI`f?E8v0&bgAWCgZz~_`DY)6N5=zuWe8a$-Y$~`b=11o)xmHn(9G@tCd*@PSCG<Ht
z&xTEX0YB(luD(5Ka>AxQTYRF`v&<QH&GMaxgeZ4m;}JixXOy)m?ChK9%4R>|Q`359
z``q_;Bg06NMgsLaad)b)_yWVzGbA+3qyl2C|6+ii+qfM8{OYDmn5O0*vfrLhYAZ3p
z(66g8zo)>pIi>MU05=l`Ltkq-0;qTMBip4C^nsN5A<!F)jvYm~C&lq9@(9q1CWVih
zY5jg(6)NnfNiXKf-B0CqjDs=aAKw{yycfVc4@Z&Dna1;fPU<IMj8Q}V!~bv%_vK>m
zIRqmYWbJIZQc^?Q(Df@Gd?uW!Wgm2rga-5zb#SAzLzQyl|2$6rI#l)ebBP%YRIJX?
zj{+*8Qk#idJ($7RN;sWZ`L}6zp?13W!*~rd;+go*hEw-z!w4oqUadf6Ue_=VeJ8og
zcy$&VFEBeyea#-5ZNxT|k{N1{S#)7*qcF^*X{-K%n8^Rh&_dbPO>G#NtOS~pqvMcS
z=+pjD6vdCOc23)pnfToHxOoroE>HTXEWVWJm@@Q^tD2jefAk77zB%r?FC3HciOPsf
z46ow>L0lBt`(9uWaNHL;_ODFahaUzA1nJ7sqC&Aa4H9AT``2BS?F=(t`2C4|pl&+3
zO79Q}Q@ZZN_=~cXqA(6JmTF~fJVL~W{_#S`K=SAqN^PcgVVcAE*PlTH)L>9Ote6ug
zMb`MOPw!P|seDapYMhK!lm#|j<l0Dds`#{&tVkrETK9dW$Y%YL;i9V^^R1Rfoj0O8
z>Giw|qw-|6{{CK}P`P6;_V{Gsr7gtlb;GcR^$Xubd3qAA&oj^Vu}~O$UtMO~stU(_
zla5UbXl)Z-tre}Ak|cQlN14D40N8f`Skyjb5E@IRG){?!z$cZER$mZA3d6Lsc=F_l
zW)CYZ_z(f6w9a3<F(jrj^8Ms&?a9EwI>tCQQtPl9=J{96_~)(u<Lh7qMCtxH*KWRd
zD2+4umcdIavu)Ps8iUF4p&XH_MPel(9yDx5nn$C_g8Q!KU9I|h60#PhnR4Y}gxfAc
zqggmM3WitI&yS1rJlPid^0a#Q(%G~5Sd!zh(i<a`WAeWZWm0_@vJ<x)T>M$JIT|~;
ztX4c-N=BW@w~iJK&a63PuIW|zv-HO!<sGoJ6CexNd}X%_cxx1$;vaM%%`DHL@W)3}
zp{sCSmjs1diP1gUhb91DuKm@nPq<V&;(r|9e|)~Amq=~DlUY{FN8QOEsYOOnQn0AL
z87Ds#=6EWT4I9MI6X^VI{up&;Fg0GwDJoHx?{&8LSx>o6)es$TgOh(sU4Cv$^Tw}$
z%BmarMp)GQMJBe%d%?7tAxZ4Y`h*+R#@(OTQox%BqajKURN!k&mm3)Y#e|;Eb{dku
za=BmLhN9FoJp3#*hV~j+a_t_^n@>X+UB-DvZN7o0>}dgI<Z7Jv$#~^gHyPmNJeVSY
zl*h6kSUJS_yS-AlxWdv%h;%SjSp<_RroYbPUx)S2BMS`}ryKv^n2&vk&&D%rIV8vw
zh&~z1`-R5h!I$g0n1s0<?jKb|wO`d6Pq4G}93fQH9Qwp8ZpBwCq55n>y@Q#$N<=}_
zn7swxMcaN98x%w}yC~>*o({bf^yqXoV(GRqYou1vojqys3vqNwMv;dGqXQf|0BGxy
z*L1a&GO6H;d<D-!rA(A9j^^XQNY0=MDt*qP=oedq10Vp1imN0|Q>0t_N#FNsYqG}X
z`NbeBHT;-D@jMPH`|@?FE!j(HJ10Qsax;|5Hx39&O$R|RcyQ|lNZK?dxdwsvtUwX@
zjm1{6ZEE+=YX2W!tFWS&=E*#4=9TrT3ro_nvUvKV==JV6r&?JHY!MH-|AkepwXwY9
znNcF`YUyx_`u(riVO)-fq-?~s;Z=%0UrY7k-zj}9Rkc8!;BM8;VzV$im`X`o{G`zk
z^=v$t^fy1BRNW)e7uh7tUnbO2M0n^lb?H>%Oxim&@X@`I`eLb4m-MwHh|&07?x+k^
zO8C1hyUh;3#R(uw5K0GIPko3cqV5-?iM5a_$f*EV$FVa-jnf`C{*Oxvm5jZ*(l1h@
zC&bAErTWMDqSFuvJs5a3TaJ)5?0!h6d;CS{E>pq65uB1s8UI}Dwu%$z|8^pr>Bb9O
z@?XEy(z$XrNm-hHt}uXSoNX$oNaA7^YfU=I_q2}g+dx2)$P<w)4koJ~1)2riYRZve
zs^z+*g36Igcww$`HeTVXKG4VE33>0v=~@GSB2xDZ2*3Miw%8$}(;}>eo7qnwz3OkA
z=Wr*F$g*AfW@EWsED^R#XRIWHgz5a%^F{9&ko+*XA$J`{i*0^w6hbfMV;+ir%5_vP
z)>M>91YwBqBo3pMRZD}IF8gC3v43(+V$;*yn=Z<e{NYWOu7KRr93LM~4J;^pbgK$!
zSy@a06Pu;_%09czqJ7AEjzL9V;C|`nNYXP^)t7{xU;BLMRMgO6C0wT6=$_ZRg$5zP
zRw!9G;BvY#@jF6u(Q*+e1z$*uW=~E{&G1l+C7|Ju$tN>wM9ugZin|}A*;3uXk&P|+
zckYF_F-A{V82%cELzp3nd*r`i;otZW{smM3B`#rOeJDtn0HVqwWS5J^Dq}KIYfUsl
za4Y<LXaO(q%{QgB@qyQGKU2$nC;3?L=E*n;3okzUE2LW688s!(e69(c{kFUFbl7VX
zt6%8cYdd-kFA7+-D`3#UimII*Yq;P8hY)IQzCOjws1|0uQB2x>m=s~L;=k(gJzrle
zzp4Vshk*gXo6H%O7&5-6aKpi=`6T4_Y}UxD@;aDg9X?6`YhNGvb$8?kM^g&5AaKL7
z{XvX{a#sN$`VF;h5HC^r3Q3imk~KBWh35!0OLeyr9`$Oov9l|INBz-VjXZs=-R$GT
zDg$K&g+zFoHdiKc6KLouXUv)<AJwMy0Z0s-Kjj6Fc7h_pSScnUGvj)YOFl$KJDmIY
znO@_|BHiIJ*qsM@3vkK`vy_41l4W?XLl9UAk8lEo52f>dH9Z~O$7yC9^2ZNE%B|@j
zWuQZ&&$9ISCjO(Q|Bo()lH6{>=G9-QP(3Xu#2Yp)O)5iMg|U}2=TXFfK#i244|*dz
zE6Dqlpy2r2oNMIbq-OfsLv4G!k6IXnUmc!$ymWW3!w)VoY|(YBUq=G~F4n<kc=$0{
zuCKA|8PE<t<vNpGyq%@Co~yEmY|wT#RNn4J6m~y|1OHtEr8lrG>hm#RzlVKzBaD{F
z#xcK*Wpe;jU;B*7tR$9^45D=l<Z|W_SnNa5sHWvF)G$wQ+qSyH2^?>tQ0tY%?@kk0
zjav0(V;_#_?8*x0GX&tvBaG1%hdtrq;&RMeZt?#78i-j52?<~8#<cw(&z2jNrvTgd
zlQjio$+KF}^;>@wDGzH8$#rE|1uqB~oxPS+$0frEW<iYL?mQc;T>ZOJ(gz|K9{bku
z>P1`pnrjcXW5Y8RK>vTrNI(uAiGXtsm{J%h@R3gQ=R}Stgm58G&<`fFY^(L{_O5q@
zT66|u7*cuyaH+8|#L=cs6W9@SkNnkqnH0ha0B+ud<~ac%mk*fta}*ksJc-RU#iRfs
z%OK=xpd)=V&8`!_+9aTtKiPun7b=V2sTbUbTRvOw_rH`Th7&MgqHrj&@$qR0iUE1g
z&<0e`sV?nU@W>6LgKgm>Kj!_>$z-LHXhrOf?azBs*z`V3#)*KW-$OsC<7T5O^YFY6
z)K9%Z2hkv7kh@o*rcEH=yyg#&XMt6txv*O6iO!7{k~jiE>)>4MdvV%t{+CDmFGlzj
z6A_&qfKgibr~>&U_^exC(k2=FU>Kd_w4KtR0aD0~`CGR;TJlYrK}EzYRcOscC+*T4
zKzs;zNOm@0>c=y6@f?UbsF4Ix!H_V;@zx1oi?BE&%oJ;lY3o<SjNgGIJlotCE%xT)
zPDw#e2sJX3*=;T8kwq^N(RZC{XysziyB}%>M!n;+`!vk}sXmym?kmMDqwE&?ec|_;
zVQa|sYgjzX?2{Zi2rMFjqxG`Wfl(gIG)gkS>g#s4-(fZQ{e&ca8#+kwsmbea_tfLw
zQ^jr*<PuFh6+^r|bX;u}g(Axcry97w#U|yZgMKIcfEU4yDHYoXXDI*W1tY<)zdK*t
zy1Q5<9)4HHEzk}ev>c-0oL>9q!3D9=(Y2opRnWNZQM{0i3=501D{s-fKHF!AkGGma
z*xKGMPJ&YToW{fCbI1q9L4=zW%o!=zLVVhmt@QOXpqc2>m>@2vVTu!`<m|W%!9y+*
z8fKD#U?3MgFTt+vDMi60Hh3AY;U;Gh9v;qY5w5WXnkNe$wloc-wEcZ>4U6Roh5&UH
zT=*XgwB%$z<}G~mQLP~2sV6)@8`yY#_GV*Rn+lJ|8ONz%D<!Z|A7B)8DkMnr+bKqB
zNl4ZZ+_JoC-OuZ+R`t{TI*(wIIpccYv=r3IB6=|~!-B$2C-ljTwYTQH`8*PX^dcA0
zA=_lR=GvsWJQCPpsFLw;5Bb|jI;yDz8OEgo!fpfO;Bo51SU9fzudm~DgbX`S_Em8`
zq#Zc12%~VMAjc#8tNkF7&k8~&nw|GHe0?ZKALom6ky{o?PMg$lTMT}5hewe;L3&$1
zm;z#Ru+%W6T7zAq)8y^|qW0eT;OFjr-VcJudsPOtwi>&@62JX*bHu&{F~kNMnar{C
z{CfxO0(J?;m(sV#vtYDi?J+W?NL(Fi$;)lVh0t-7-0)dLZ^dwJl@PmGz(jW!KXW|B
z!lrp3{fl!EczWumcxHk$p)WzQVkAcH6KVdvafh?LnHNBg#!{<+bDGY`b};<qv&Wgm
zAiIvz{XkyAqK=Huwja1@k074A9}0y6=a40_syWS8nmzXf-)yHldbDcGJdvcM$`|3P
zE5{l*z6siX6peCAjZkUAI42lx&3GE(^WU!~_%0(pk{1e=bOFrvzQCU7{K-Zid}ax6
zSg4jef1{n%E>D8f1^fwFr2ZE!@&()9V0=M;Z{EQe8xoO*O6q=AN}~@|zlP&q+$(_Z
z^}A`j-hlZ0ezBOJq%mS){yem*{%Zt_J_@N9r8EOPvZ>yf07BauAQJ!kV?V8P0@=t@
zSm4eh`Fmzo(PVsTOtw)s6LQi|-UA+yWRK+G`)h;hHzYr05(f#Znp!tOhts4aXf+m(
zR+c1kT4=HWIvG2mS)y&Sq`n{4c+yWBTaV5il?=s~;=K=QJ`duUpUIn_{d2GWkAnq8
zEJs;eg2&V~Je<(c)|OTQO51XQ7(iRlX=I=pVH01<4D7(0jJ)F`2;&nW?c6kbRO^y*
z29KOms#TPGUmPaH#i>+$caVvF5%7RUR<F+fZNyU(*6J5ZngHVoz1%S_`8Fjq8Ba3x
zX3aQ^Jp`9>uaZ(g@u=;$@1l_LB`8RZ2lt*=RN~u_u<S8eL|Lq@*4k;A;mtk)$`}N2
zQW8KeYV7B$jMa5?beJvVB|27F!i0k5rLwT&y&)rC$KOk_&p<qpcjb*C?Ggu;b)XY1
z+1-Flr&b`W`gm-K=yO*#g0v8X`PxqW_Bg056zxnPf;%uGHTu6G3V5M|c|gXy=4g{d
zCqr+6o}Pk72hD<gye`c0dK%7jIzi9CuwRUt4SB2`PL9buSCS#%(rFoM=TfX$s*gos
zPp#WaZ1j3v%@xE#0(sfe@NlJs?iYs<8Jj)h_&OODgd<JPr3a*+e91SM@Lo7kCWwkt
zmRMedeVQn=RX)27*dX``!eU}Hiz4HyiU3_;&y+RC$`epp#o$UOumjB`oe|k#&+<aw
zWm4=qx?k+lAvf6`31Wdw#@k;mA$dviNmf<%qao?}{{~+F>TD6=2sHY}5<6G$F07`e
zrteh+rd>hOy&8m1WRuO#e-u40)Zcqx*=2+4QD~zO<<qbhhy@=Hwf$0Oh$}~zYoYIR
zHuDKR5ZhH6O90jTY_EXo>ug~%V^^v?l{*8Ukl6RVOSQwKHV%g>_CMqZUdJVEIFxun
z6W01ky@<wbZ#o`$wNF8<AM*9-+Pey76jjPrg;=D?c=TE&UcExumbp>N-muQj#lEvW
z;aNggNy2l~in^o!ucZ?jfPmLNY$33JPy$E*vqLX99jx;4CcOCw6EdV>lg4~q3)-ux
zZo-A{8*uz+o<R-JCG%+U!zSQqJS_va<cMIC<R8eUxY7hnQ94}A&o*&dIKDBGdNs6V
z8%u-AjV_KfYw#+Q*I{A0JcjuEYV*5}=G=Ly8rv10%0p?S9+-b_l&Syd^Z(L3gT(?q
z)Y6#WDq2}3nr6x((Z4}Zb1l)WeL7+-I~cEJ=qY1rYHA-EdP;`Q(FVdmsX}1Tka@26
z1j3qMP(YZ}A@K@~-+J3O<y6_wGc(s8MuNu^9#%34rh|Mmjsp3=<hEbeL({bJphz_(
zU+Jop>hgV-ilSI{7h<ij1^JJK7gLJ-g7zJ?WR~Sqa7~&Rv3MIjEAlcE)bS845=~Xs
zC<k2(1Ropmr035)-gIFWWWk(&e_}fG!1(JBfqy1KApenqnvzV~tE{`_Z@~HI7d?_W
zlKP~(<8glF#8|Jhco|XR3{h-^;dlx>*r?mEPcZ<`64~pOY70(9Az@P>Z>LvcPmn_l
zq+&mq%mCqGrbOrYnH|VEup7WI6T#tWN-{w<`AMzBR6<Ib<fV5HmjZ%rks*6;B9_Nj
zx7Pde*d&0nE8Ci;x2{16iB3fbU0YO+^F<hSMi{sI!Q499;M^k=C(V$J=Gxc?I^O38
zl|mU7bPysG#v|Owp>CzWZ&{K$Qfggn!U=z0Q9*u8{07bcbL7x*khTVs6M<IUgw8!)
z&Gh_3KXBUYg~Q{1HoZD>Uo>j*a!ciAIq3n6Nk3P$p5pidEyDp$5JW;X?qJC}GOd>z
zvEuO1hht&Ir+v)<2?;Q4OD80>P+$q<_*<ZPvRiz^3Dbkmyu9Ty3o*8An1}Ab8MFeI
zG?%8COHsbV+JYZo6)$ctU4F7Vg5s7$gX9sjMr!dm--{dbaQLS34%h+;YHA6KWxypT
zN}_(Jw%q83Rd<#Q=ohARP!{%>m@6im@>xSHiexl`4C#A!nK`Qeqlcg)1@!mJH*6*-
zEa{55ev4{8`=ST09-n<6&t3x~@5S+&#AhE23=DP)Q0)=`FsV;+n6HxgpqzcEX1N5r
z0V8N-AYH8t?~VQBPR-Ps)W^|%D7JUaKSv3qhdIem7`3B9=9fWEn3w3P1=r-+_GspE
zj1h2-pie`SCG<}w<fsM!d4#9*!Hw0v0+({RjQBDg$Mn7{FT^Y}Dd_>JxNmd&?)C3q
ztG^QgYSITXgl$Qu8(^wx(mAh=Rvh!*%$Wi@6S#`W5|oBB#`v?E051iw)a@7Yz&$jm
zs|<Lc<Z-@;A%0BJ<%ANA()ku)DmD1$jM*w^RN(0UudnudNY3>gl}_$u5-(3c8&Lob
zL4ohxbs*`;z`y`}hI^<V8z9?c5L>O!AYI>fxdpJ;V9@V+mtnrvE>+)cMq{$VL@GQw
z8g9K1;!_o=S19v`2~;e(%^FOCX4xXZm<@?L-Jex%y*t;7{eJO%QHzEKiNB9fl^;&x
zzqSV-e+2^r1OogWghgsf*<z(666z)ohBv=`8w8J$1>jrUj!X4{H4JNfuHT-e?xQm7
z0%pS|>U9dq&?26M;<SVFVt(~w3sqHZ{II<3*QW(vkk|*PcZHVtkPZMUPn6?Z33W`@
z&5XO7iy<&wk%M9jVgl-8_t1BaDFTeK$L?3Jzcur92ieFs%-kxLmLC+{@?9ivfXAd#
zRKTq9Dc=_hjBVv-1+gbLNFbTWgSyGtY<<A}UpWU5!lV$^ci{nRs@KN>Fmz*Hd#MNh
zJ?Ye6(Q?JozNhFpsv;q|Mnr?d^DzwjBNYL`Mv7$594?J^8Y)%qU4VY5HX^Qkb&!hq
zJ+)}<5sKN1o1gO^RcRZ5w+uHP97DSr!h6D(U;i9I4aA-for7;GP|t{-CF;bMUT;Ub
z$3!H}Sjlr59f&O~#LDo8?jaKP)zJGpAOCw)HOi4}aU-@B#v0q1r)anoJDNDAkpM6n
zhK~;mQ={nAJHOW*zNuG4T33QPPmVe>bo~0iFbNZMyy!UtDW7eU-Y2|5slF2}eU~>D
zXJ9Or*#rRv$vq`G+2XUpC#`aJkd0|t^{IB4v%E*+Yy7P)GZWZGYVRdco0ff3;ezu*
zox}dciL*NmbNKu_ekb;>5F8$2Vtc8Q^(S!wk2#tSssgX!B#6-m1(>F}!35u4sw+K#
zvQ1OIS~9tzIGV36T$|r3rVfOF#~~Sk)*^U6*{tn99*1@;#NkHnv1ZA`Q2>8uhT@kL
zk?3O)ewc$W+_Hu7CA;=kwOdhlG`^hiM6L`l*UeL1JiQ;oC!kPGX4b7c9|Layv?JO8
zR4k&8FY(j1o?`hSL1>_XNNTS@^AjY4P`tccmJUX9mG?43hM<X@O+WtuSPa%=u0Sm~
zPmFR8)e0XJ7`&X2f!obP&uMObIk8!fnvTSh9Z_}-oY^w8&CT<pNVq!9PI0BVB$(eS
zi(N?rc`%c=IHNGt(5ncJZ0cgv<!~z1#xbBWilAghvc7vZey^J#m<}=DA+X-`Yj^mI
zy=kUCpJ^Gtu))m%=)y<M(s#p|!n4n71AUOuu;V}_(UYBH{Mb#1k8XnWz#{m#$7J?D
zYDP{4N=EA(%Ymnd2u83F;%nkdAM~?gb>2HE0q37B#(YE5bL1=HvSdISnv^l#UKhDq
z<*>3kUG;tv#apb=h<u+)?6o%B5#kf3Dxz<6|IVzc`nrc=bTz_px$#L~3?-N;@>Pw@
zM5aQDB4X2J3>CFh5#|yYgAV&cUjU6UAtS@yTN|8#0_AM6!1<|Pqr-I$OC2#_qk=rJ
z+bsZ$Wv>OH4Cb@_*;h<hn`rfht|NR%T$pM|B}Q#4Yz0xiV)+l+hkrzJv}$Jz6CI7e
z4-x?@MLsS6%V|ITpf5IYPx=7XB+n1Sx{o9;j&g#Z)unxWmmd$y!KiUu))keDQ$yK}
zReS#2K{>#?0yrcwJ(3<@?t?un%S{l=GzQfjhCs-J3BP0SH)7-RP<@PJj&IH_FAn(s
zsuHkpsPm3_D}|Wn<4~tiw0L^cXA~&^`erb5KvWbqzZF(Sc)y-9z-~?}oJ@c10)Qg2
zAlZ;!RrxxVExb9KbZo4qK;mbG?=^VQ3d>nnT+>{bfAiy#E1k567h*uo#ia^u?LZ2U
z1#MqL2rmrn_Q`s{gGXVl{_5mFP)q_*z5##$)Xi~gqID*5$atOUxDlkJSI|>LfArJ7
zar6Sc#<w=0pGJG_IM@t73V?1DRjzhMpd$#f4*^{K{6@g>@_3!wydN?TBu9{uP_NBQ
zPiFyOPQ!uU?#r{%n`us#P!vSzdYxvEN?m+>{3HS7PRf!gAmfM_1zkOx#`vm(b26u)
zWl->o4K-jHu-xQvtT6^wKsXb0Yi)N!FHbR4NmBCj>A*6DSTChaF(2K#UuzeLH>ds2
zAcrRJ<6#2$IgGRv<zzR{{xaBAOwosz<Jhv<Ml?6xiq~0pRi}`IQK0|p5)05(c>c8f
zOtF_nXgBQnyN}9`QEmg3SU<;dcn?>;`1xAFIuM>UJe-3?3*mkp><NRh?;}eqt0AYh
zyAMPH4$#qdBnA$)TXa}PKtDtq$)Wz$%XNvIMfNA(O=JafAEGQkEP^_VV9#+%&!HZZ
z&(pp(h1{ScMdvD^KG0R4ONZh6%d@7Lx=XWmO40@-JOy1O!OKFB{r?xl5F@3{I6STn
zLZWt2y`Qb|NnLeRW*B9PjfdwsNMk$#LYzi*y-Lh{*aM55;L9ffLMC9O$&mI|W{G&J
z0X-y#D8F=kD%}`hb~wgWd5HpGCAD_zuWP&ArG{#JtF^>`edjgYW)?da;rZ*F{!>ST
z;o<cU4JC^IzMcAR-~YLcToUHAQ1fIp39P^PC~|;`x_~K7+V5%4JN#@3<knSON6E+f
z0CWMBnH?!hnzUDp5{wcW_dd>L-$BBWp2~q=Sp<v+lmV-LzYQv&rXdeSk>h!-|HR=k
z3gDXLZjDs``M3UuqW1tf0N8I>F9^s>0Y+gLoL-lf-f<7(dCiqC9>9tGeF9#ya_9)0
znFl$!=Kwr0z5+f~0hpCVMZ(E{{?}XMAl~{kd7PNmLI=s!(qZ`lARO@rr9Q?0wC#1T
z2=aeih+w*a+uPUktv*c@0?sgqBiU8t#>Pg0%SJD=d7F4<@3T{Qlou$@GuW>7Ksz?D
zo&NZKp$yd6%b(n<OQ{(d6mYUi0jwQo+)YY{@tgp%poTJzMUYmC2k~8bV0nOHP5Fiw
zTS;AY029FhmC-v)TZ7>hIRV|*Swe14;TDF#e#yEzZg58c9KgCg94`5!Q~jaFVNvrS
zgR!Wn2<(_3lK2!_Qo<@x{{yH$pNM_>#q~(KY9*3_z^HFgolAMHc)yO(TwUfV*0u~?
zFwo{Od&A$h)@QE=-@C}I0_A6G4#|v_MEE)Yb=4pY`L^=l;2_YQOH+hu{E+~^&1CnH
z`-sm(TN8v61`Rlc0=X;^6zjBNB6|jUdJGi8OC{6h`ofCK!DVK*aIU9lN?|v<Gg?L(
z6Wria(eKZeYhCC`SYfl^;o(hwP$X|S?!?lFarc`if49jDzvRIp0iC}nLswt?QQGjW
zpn)M*Iut)3a}x0Lgzk!Tsdo!JSQV^axS;~bSieT({!}N?ae<Ez*p*!RH!1q#cFN=X
z|9ptX)tmn$F)3(qNmYRCB=GfGd%)8j;}xe`9ELOCQ89wKOqcX<$CCRe-C!Ok33*D}
z(a;ZAKS?|7+P?rIX6ZWys|9G_9>}7n*Xa)R=M}Hw6G-1aBtB<()%RxP3nEs41X#6F
z0Dw9^;npu@rp<i=V3I8ghT@Qah;dnbPiWk`119R1-2us0ggZE&UmVMnxeI(;=l#qr
zP<nH^OAB~(0luB~j0EW<2Yk-o;sQ+j6iE|9s9s;Lhd$NcP?K0}7Y(lCXxzySG}ztU
z9c&1!sD})s;T()V&Ny;EKd2sKt_*6WqInO_Ws!>#2yTz;1Uk3dJMUcp?0v?dV)|f1
zu+DM$(_wTpIlnG<s4LJ7HTP~iUNX}^dNkPi1`AaZF@LOrJBsQ8*TcVopsS?~j8wQC
zNnM&+SQB?5>$^IAU+{S~f!1nNzg?QElCum1KX~)SYDD1b1yWhr;YFZi*HgeCW?r=d
z-6%xuMgyI7IOOqg$Pr|)a;>oqkgspdwl`p%R3hN|dWUAz@VgEO>>EOh9ewCz*Q%oS
zae8?ne}F*D-&O0_5n)Kn$VcOt6)f6vopAHFf-~FzHOclnMN=kHflyHT{*kaMh)1w&
zE!X?3BzC<++cD(K67<{$98~5b)?h^EWA7@E^cw`SE^3UY6B+|cMqR%N7K13oo@R(O
z!ngBr4s=wwsOT29Y60RxS6iudBBvqoUyOfj4h(v7dYxK-ZZ!hHBJk~Hn4vK*IwoiO
z!-MFMFbarvS`T5`U2I)cNEk`B?{!fGt|{wh-La7ojnNwbF&GiCDNZ%f0)pOh#k@gZ
z2b;eL^^sYm%yFIld8jV#<x<{WfEWm{>vS}<EQ~L}WIcTDL_JNvIASNVQar3T!22b@
zaeIa}LTDDoJU-Vi-3$(a??fotRaVBaRlf>$e38>@AHSq1qsk33-km8<#V67ZcNeK$
zcUT2t%gih6*}lYe5WhSD2p>LrK?h;><eu)Tt-)_1iIr+XcWbtv=WaM(urojr?Df+A
ze0>-=0T$oDWi-c&CSQ?5yd}BM%kJroa*+3^i<(HdcO<V@p-UhQ5*3k>m#XJO^9k1y
zg$!qmN_wu6Ckpk#KhwnB1R%TR)<yR-9UyVQkmv(oInt!EM34(fk1$k|Q?~%L?q*=f
z!tZA;t-qh0S-=kXJ+A?NO>mh9yfBqPJLu#w$NKjjR>?(gr^b@gnE9lEOjOn?jfnZP
z1Db$n*^%}JL9;6mnZy)Tpyl5EhxQsWGJ5`bGg?x6IAPfEG0VQt(KIgFwLt8!Cu^+d
zJ<tyxU}b{E!CWPKXA~%&%%ML(!qMQevodo2S8rwKdThn=w|##`dNAY_N<u5<{~MS>
zAJjfwPAX>*<GzwEbQaowAc-6N;4{Gi$=Llq3^jQeCqif=zf^kIqrg)J<E;@04iam;
zWKZ~RXDk34OT|GedfpJGW}s;AHGM5Da}k%umG?o8M<}y^9waJ@sp36)ZG%;Eau*1*
zhHw4|HGM=8Ow>xU&?Ac4fr9c_31<usy``BnOYqXL{W#ovE}i-eKiA2>fuZ`TL7+TI
zRz{>T3RkG3{8nI+Y#1G~lsO*y5?CEk>2Kh4r+*8WFuDxV)xwc`7K|!%)u|Y@?MQR0
zmz%*&rA=T@P>><l4Rs2dBX!EhDxY0|#d{Fk+;M=l2+y7cz#wUyCX&#1E;h(agh4it
z6{&-0RJ`xdae?2rKT&N&ZT`GLzwmMxyTlzuBL1y7JY_``fPqd|)O&B6pqo_t<@=B;
z0ypb*DPw@y#a@BRHP0-H{9=R*hr@O)?K5}q`w$31j7_t?IIu(YYJq4~oGRiTPceLN
z?Trc)N6C~$0__^RQUZwn$x=i<p|0K5&L~~GcVHN!QNXRky4@eq@w;h>^Bipg61F57
z%OiO#q<g^=kT2vhzSZxu)3#!D@|l>J22~xE!~=Z0iejgsm6es>9xc`3$@CCUQSK<k
zN=zf?D{{#pRSG@K#V!oQzVnFs4fL-RhV0jq+&xi-V~Y$Kw-AoEIM~!Liu4<*zWN-@
zak&z9yuvnX23q{``IWB!4GNR^AI9h(%NI?$Lf93djnU<S*nkHf!9!T=t(T@|mERi)
zBtm>SgGnGlm!@HAfk$&7T4m*(HZ@J}g&dY+_Dn7~>CvlIpU;?;zrj{01q^N#;tNI^
zOE~Sjet&zKh>)cP`L;IIob$w$w9bd^Vw<GN6{V^);YExww+jtX`&H(&t6JZZW_8=q
z=T}B*pDBN9Nuxj!I(~o>#H7lALbj4COQ<^QK?Z*cou45P7<JA=efw6Mw2zMr!g!ix
z7O=KYs*d2d7s3jtAxb3c;=e`h08V=24AuMh7*c@vvp8Wa+oto;WTi~IGWYw*lIm-e
zHT5?H)j&QP+`ZrT$dKf%Rbdwwd`u|$QF~enBDEr@lr~$i86)0Wz^@9NILC748(a(V
zxk#)s%{HCMgh5-#=d7j_bfh+HA9h2hTZ6r#5gK2Fp&$;g@auu8{jG25PVV6~{z+uc
zF&p$r6Kg1jV5$<nQLWc>E2BrOdIt#?HJ=Mn*;Nn3zFXn8*FtA6uoXYGnuXN`q#BVh
zOop^`nNaYQk)!ZJP)Km9Kd#LkEq*SqoZAp;odtT4R_8l_sghGrm28zmZq{=n*%N?w
zi-khyg-P*~3l1OX200&wy3_#`#o14SHAtStI4TUsQtCkv_;>@4C4(DUJ;_IJ=oM1Z
zA`8I8A~y(N5e{krp9DLXDJ_q4?fR<)z1qa3oyQ?fLS%A)3$W^wU?`HrOTRCFy|Wr#
zH<U7ugzu|D9f5w2GI)x6N*s0ato;?`s$ET_*>FhfdI4(|trE^G?rt3P5t1-^vNM|~
zsWc~m%39kU7w3RkyWBXgdn{?W=VIT+tdpAa-eqy8kj{>*u2M^d$mhvMt0%+#zk<t&
z{ryfhWmW#u#@iYOe{V#lus?9Qv5YYgwgcac>9Pp@nc>W(_V;_G9X=cR?LY+U59r1Z
zk8<2xS6=*Gs!f#ECeJ4(D<#b3qmiy8xsa)<(KAUXI>Lhedq#8f@>($Yp_@5`l!*DX
z66$Dq5)_CN-Jm&@silxyP}3k72ERI(o6u&3EJ4}&;0fBaCo%J1H93Z;&l`X$yZMIL
z(D|)~D^NB%zN*&;)eyraCFpnmiPwbge*~23ICX(2XaNR$Y#%jOQfy0OqD%kg#1e$6
zb4GHn4a;KU=L>L+LOWlfPVlv3<f7(Dpahs5FIRJCAWsN`X?q&r(!Iiq-Z`5<lSW>%
zAyT2Er{A4v_LbBRu*2+YaD*U0?MpM|5k}o9%pOp~1cKzr!Um0bmlQl&=b~q{iTCUI
zA9`-$rE*Cv1zM9kk4qhxKF%Px_&n2MU1ql;TmQ0py}@IM?Q?x?D5K=Xl4~qJ8)+W1
zF%d`I$SRj>Q&ycz>^m!DGm*<fL-%<L_FMQKA2(&{kr7~^s8`o#d!O#CKkAie>b+4r
zLT-It|J%iHFJ!+gvT7Jlc%1*Z4eTg7-FqlbZ4EOgJyqaen*9wnnk-4PUHhKyf&uh|
zv^0_y`EY~dW$sAS(%gZad(`x?SNu3MRJV`kNn5QTPuCyzZqujgtEmu<Nra_9S2|ve
z+H}VSqSZ_Ofw<QA5ySR|kxbjjHv;~=>ArZdZguqRe>H<qz^2wS2<`q2%3<vobn5K1
z7|COT?MS{z;$*>j4{+uECiUksadBY+!y<ws&W2{eILdC{N4s8Fp~Pu+jOt)-UxO+C
zl3-H6aoBM>ne2!xa*)cFD@?ld_jDcTKpty{=$kjzx=LmQcUjB1F26*`OoK@B*5;=6
zhhTpKqE0N~E^NPiJ1$HL&J;Ll^`7;hP>V3O6rD6C!BM?ea?nfeq^>Gna=vR3M#5=1
zOyV<jP7rh18O9AM?PBa7S4QdMnQVcbn$&^Qxgrzy{wOr9hjq~3m7+5W<N<bO?8VpH
z`_ek52G<z-ep+0g?y@(zC_=UnRjFQcNzZf2t@>}QJdJz*Ir4_;f}SRbgz|S-uIYv7
zRBY|dG;MU+#m0iJ%yS7*fue^VYlv3>$*a?mO7C$-;zG{486Qq8%0(o?mm9DLV*5}9
zL&4*!hJ@!zmH^^zm}M=AyqaM!vj^rmJ_hEdF}#635Ys3M!AY68fEQs|(5GO&i{>%b
z@RU=C23*Z%6!_wZI$;e-M)BdodVM^+52jkax7f@+8v0Wiy`}YE<zu}pt&0%&W>oyI
zKHkoRc&iw-?L1p%pkd1-7MYn~CJJvC0)VVzuVDQBz=JOwQ6Mwz2Li8(AFLq>@Zi0B
zh{fiC0zpNbU=<<lCP+hdbbq;sfq7cDh7Rwjn?S5rW0F~8?YpXgsrXML$=jK>eufUh
z$WWZnI?yvF-|z+Z^J8H_dtrX@N*#&R+<~e|0gOoU2F8TDsMuUmtK|IBSe$Z;75m7o
z4Cus>?k5Hv0>>|~qbBa<XL1(CNaz_Kbc1>h;IM^;v`Tx6iRHZxX#hOfVkNRmELA0r
zH>8sgsj&|!mC@qyXo%9XDdnBM7Bg;udh<${kVa%J>m<c859m?syHXHQ^ot}Nl67~a
zNF;qTS6)JWa%qcW^ZM97;sVUpvlP^5$>mLlLiFwx!jM3eu$19k?5O)+iKS&u%<DP6
zgY?a>fQlYQYYDx}vc>S)5@{iMGjofuol3ZEYCv*7m{AFPc4iQYTe%miVE|8U#{uba
zO)vy?Oxb7okVnPs^!(%^>x!R$d}C@cNJXF6YzGMz#{EZ)hA5#NJH3OE{~9Tk>&JSz
z`0X6hf-8wF5_^)4v<L!v4P>AHyv5BBfYGp^hkwr$Km#V_5jbFxQ){n-c`lCEyL#rM
z@jV^U9go$P({;iDQ6R&bG$+C73<fzbj7c%$<;0G7o5$5Z=bMdIL(H`NF!EEce%kQm
zJ)}X*XFBd%%c$UXmJJR7MD&TS?mG=aLP}&+?hKNQTlurKU2m>ehx$X-_rl`Vx}iJm
z7h|I(8Jn7_d{KQHBz{thy33)xb!ToO)x&sDAUmEe$B366;xGhaHxcCAhY(!ZYL2pp
zJ%_e3MNvzJ&qFsW@PBB}bZN(Z?Y9QIxA+`&%N7AfA~mJTN9XpF6Is^Mym-GAUMs0D
zUJXH=;1H4NskDpSqBEw;`JJ*CWBZd~@7>U;Lz9pDmcVGX&o7FNU48fOsGpXm8r<A_
z$6ygS88vTQg-eMK8jTJ0AA6tM1A9|;Tq#!F+WD56kGRK4qH8z=T-b=Xc0j5g99NHI
z2=aW)jgo!GX%HJ>!iPw`hHM%He?(L;(d*mr*ieJMLH_ANh!FU1wAPmZx7GH`IZ!G@
zgt8-x{nmXA3zZImZTN}wR~m*BufSWN_Zg_5#P<RanoDE;;DML6#2&<NglfBPrlEvl
zMe{5p<?U26No*HZ3E<`M;eB&fcI`H>hHXij9aR{IB`hl7amJ>KoH>FY8?eT<rPf6-
zLOM=nK;&IcaijHdB=<o#cNSR<KAXp<qyLYvua1g({l11_Xe1>@L5A)|I)+A28bm_r
zltx6QJBCgHX%y*h6r@91kWfHC>68ZjJ>$LitM|Ttylb&oA};3>=Q+9eJ`S|G5hrf*
z2A}f6w6yfA?WWcQ(7%P80Jm3RH$JECyG`O7&6h<v3wk<_Il3Q88?2Hbo~DDY6P~=q
z$(Fwf(Z-os^h?rSl7-KcloF2@G(usRXx)d1%yfr1L<7mlTU!53Vfp5#@<=cSfmYep
zDf|^uV$ptZ72@+rgcs2W_1OL8S(riEnd;}9@Vll^MkET{c!vaSHwqYGz6k>7(j@4J
zvq~nYJ$zx+!>rI+cZv!ZgRlw(09!e#vm@i#+Kd0hxd~?1`GYCbdzmvFNSpQ|WA!*D
zjd^VgeEGM#%o6(5R#BuDRMXeb{l8NYH-Fp`o;<9J4#RwtCfy?<8oG`4NNZ~S{$Y>*
z#xP&z*|)9F72=cY1_n{1+n&w)@9H88DXgmP#*KQYjeA<=?Zh>XKY-Uamxh`&7{c%)
zve2Ng7^$;D2PL>lpaw?Pnb<oIh9q>UsMiG#uUAf+BEv9bh&xr3U6#0R#@un^WcDY$
z1CPxm$cK%0QJvJI{TekXXWQT|Oc%dmmTA)br)P<Rnn(a()9=UgE)Ag>!7t{qSqO#s
zr@?3@7Xs%_w`S`H6ex|C4><uWN_U9IO~HJ140M3*;qi}1C4)G|YKpCO7vWU_X1?U_
z(MB;M#zBMVtH;xz-lMz3%WQ`jBJ`z^FT4R_b*xC2BdNQyh>-d-4vC|O7sDA!$_6?_
zAW}{zC}R-@2nB52fQ$#cW=TIU^D;XYtrJ#g(R7hssU7!zQ`9qz)8|nDe#tA-gzq~z
z-n#f&viRB6`J8uYy3Kl<n?vThQ$=^0mm-^})t<UNCBGQrrS{Q$5Z;zS^yLO;631O`
zn-Qut%z!8$VN-}Hd&Rh9vG^n2F+uXmKni}Y;^Hy7n)%Wbe6coiQr2K79!Ec7ndS1?
zin`!yt*{KaU*)VHncs;HIG#)`geSPu@L%m-KaIrp^gl=CZSiRDJbwbsisW;MZW!!G
zSoA1R%tqYo^JpP<zINH!e;RR55KLG&L^@E0KY5sRL-J|w72&yTry_Og@%&q4wQxJA
zmdn*w_eA3sTe>7^l>w?Y-(zo?xbvaYMEj;Q2a6Jbvl}+yv<N-}`01oog&m%LVn>P#
zzS)Z|$_EpVgAZA@<ydkF!lDMPt`a{#o^~+&be*^vdIpT|?S01&L?Y=fZ%@b`z0+=1
zz6Hgu5!N&U9+&j)n!{R_p7)1i@?#e5l&i<&tTP7;{8#9SV0lEa;A@_l>$z7F#rbeH
zDnPICRa-c6Ucg|Dz5+~_B=#*su6;jA|B^2!cU&k_5FYknp5t?O%sjUwy&~xKwd#KJ
z`Kw<8C$<4hUKt$%-yfw{gSabiq5hgx7d1-IO-T>@UyX=!6XGVk+&d@jrc=KgFRVkb
z_*wG(Hj%tEiPVh%0(osv0QgT#=sXv8$|Rr`89B-aEu#c5Pi@!|9#ZZeT3)uO7X!BY
zm}49tu7(IZHMy2CNgUZ0_c>bzqq1L>5L+B7(_O>vJRyU&@c#4-2&F3%z$;~Ws^0O(
zp#+Vf?_x$7$Dln~*TSra1YUG&@0oe@_k~&vIwRA*cqUgM3LNq3c}*k*muqB*AKmHF
zcbVSLKuEVMxED-=RzM4w(rL}jnfkt?$J$tzmPwxQ`tl8heEI{)w9HIy6lm|M<GRCh
zX%}^0@D8=g?@Kay2)upR^_c2Q5hxr}<UsR-4b?g8@mZSt8pfrpzAP`e<XS~PXR;no
zA4HS;s*2POVG{IA?m_I2zVu&nF77Y&B))G=lBH$6$Ca}MNp}?zbA~%Z;0(mJ4Jr&y
z(Z3Emo*ddc?~C^Vm_Man{ykKo1w~jyjO6hD24V<^>#9Yj$&qm(RW7E95bKy0bYP(~
zkP1W1!C;R#RqRob>xn@DpMR<;3SKgOU<J??>8f!bklxkRQ=VuU_gK_31t~DyF9An-
zALPk6@=Q(bPlP}tlu`+e{&Abj4*<nj`!K<hF|96nnE3Ji#XOh?wg7E1l|fXXM<H+W
z0ev|+4j*2_D}L-k$_vG)u@uA+fx~4I@$*jmsR)090pIm>oQ+3eVcjvbJSgIbWdvnD
zC5ogyOU0p6Xu{U(Qf$NS$BMzj9d%56=J#wVC-erX#M=^rL6<A0#5^cb2Rp@zY4nu=
zuw}r_Iw_*tQ_3qe_Gum{x4X@12}j34Jk(jR>6VO0DF?vEN|km$m4+-0EJsBYp9MbC
z5AKgE80KjOxFsW=VFpU;Y))q6^??zEXj2ZunUdVraz(UG?>JI08Z_x~0WIi0ps|!u
zcukSC;zF*3ZD&x?SD1|ES%YD$dJ`kdH!~VkukEuuj2LTu?bhaxmv~(+mFh>(8z1Pq
zQh&Zb>(s5}uXu4duW-cW0;tjmO=7<WL-jjmH*e*zp0&A!?N0YK17Fm3+s{|@dAM`>
zZ|AN;hdx*qqD?|_HDi$Kkdh>q6%o5=JK6l!;Xq^_2OvR&`$;fa1g)AF=rO3ZoCVvT
z+t#ThvEx!#C>B3>`v$P62lN>az75|!9Moil`;EMq<i>_NF98;btINwgTO{@<#UMRA
zj14Zu|B|A;Aq&W$G;UT6OsH~-d?R^*2Eoto(Qol|k#WB=SkvuEtbo!zaUt=BbN&Fy
z%Umv=-y-1kl+ScNK`tKbwVngCQxa?E>Pe`1$3y4Mr54XoE5R_ySUk*kY4H}sIITcr
z(9T2bKKqx`N{3k?)SRrz`u*s2UXL(}i@qoVB{F#eFk~skmo@qcVBu<IZ_exvz1wRg
zd@dTAc!V713d=%$+JI=qL~ZBeC19Wvksn@39~ZiKH9SD!^iM&RkywFqjBT}>=evqM
z#<`lDo?a|ZgQALq{FFQ_lvgT@w_@Ig*bb38Rp(%MQ*jr=T7q(yhBtkv-{=PWtaHuv
z>6`}*z88%=vX-|ul@>rk9y5>4+3=HYsI7I0@k2@`o&u#coIL%WKIO@cY6VhOABY}s
z*>s2B8N08_cFh|e!HJ>!wTcxZ?;;UeDw!?9(yC(wu;%S;S_UqArJyOqN5dZI?&B8j
zZr&g1V=fpaR2mR353H-!aW}iIt>bdIlUQ<D^K|Ze5T^aMgCP<>210?NMP-8Ic3dpJ
z5M7H9lNSkFPnprInKDY%tg+0oB(3JCO2J;4fC&=CK<yI%L?aKAG^lqhg+iRw3`HMB
z^^kke4B0iiwN(;?rjK3|ddP|bm8OF<lNkWu$|#VOX1LYncb%{`i5J|3mE=ygn|C<J
zZL_&^-Azy`^ldUAGd&@;H0_P0!|V!^MI(U(Q7OvFLnneYUIIukdjTGll{hj{9;j_5
zqBur&dqQtOG1ZqX6WF3#{fVfZ5K2hwO|`W;n#b?*MPAn;3DT)gX)EXK3wuBH?5b!M
z5N%U=4#X%cVYOwijGbpqHJyQlQ{wPfT$d%BGuM83+od>aLRi0K$hM52+Y>9OXz|=c
zNPZ|M&W{FNKBpaGdLy@FbzVRsT@u#$jCgBthfP9yx1Nx}+LON9dr_^8wI3zO;EF~M
zfq@JQ?v67!u9g2rR9F>IqE`f8ua(W_jGG^IK7gD&F6HiAn5X@rwd}&^oQ#(BqJ=Er
z4j50EkXfDoE`f=2p}f`C;`n$O1XDwd#)vK2G*vi!AkMu{-FTlr!(|~W%bO-ndkRn!
zc0#Q#wDjd|bapFOyCS{B;{q$MJeZ<G`sK~BkKt=k=uZPoOc^~seBCd}lsc0j+QE$-
zDsqql);oAmWl-q5ZvY-x$-Qbt1(A_~U0i@~@29eU{_b^jBEOYmC=spRVN{Q~q(1Wf
zH{2s3tH*SkjrU@|thI!Vxc1OIE_~LmEvbIqwgcwlDL*g1NwWtab&b_+pE}b54Cf0+
zTgi(?B|0xZWyo=ov=C4?e<b}ph6c!0Hyx9>bkPPjpa;Zh-1K_<o-Lq_wi?@(aUlo+
zT7;PRxl8aF0_ZhQt7j_h!RLg-&hoinG9M{wmzdyIO^Ct{U8oV#N*RfwlZZxu86UA2
zbjafCz;$WMzKc7eIpb_cj5g3r&=$4@6OfS^>kdW@1DxIIdj@6hdoc->MG-%*Rbc;q
z+#31NSUl8p4kb4VC|z(#Oxb7W=FWa}x*dS(qb?I7jTY!mV6_8=v!66KJlCW^^Ysx;
zDPh|Wpo?@Tqb0WI(s`?P3a=BVoxj*6CkEiBswJ3?qHahUC<wMSX$K~30i&l7X^Haq
zItV+xI2evnu%n6NQ$$iNYDFK=o#9ZQC<g9A*p!j4?-<lQWFw9h;R|!j1e)3`x^iy_
z=~YomYth?01X#mGESa9NyoMzeAvjE)eYR@TOQpv0H_?5o^_8TDKsygeeQ8h4r#!nl
z8V>&|BTpe7=nOsI`{Zu7ijgt#t3mivM6#@KqdnY_Vn`66Y!qIzt-smzT2x14d$Zto
zL)@c;lwt97p)Xc;9bjowK;w5>EC1V?{x*ZZGwAt~Xqk$hp7T(5cSyw}ZqZeU@~Lm9
zrK-s&-fGOg-_7T_Yl6q$!u!RM)LGVVSdAr7pG5;o#m1n)I8FE~L;eNa2txNiJ@{6<
zO65%DS=G=W@+-n;CGVp*j=5y;giQB_MaRX)E)1BK7(zk+p9Ww7U5$n_M780Jyw}&^
zmpDOa9z&LwR6)w#0HmpVEf(~}aj4g<I#i#936H!KwG3@^G_50PgqSXq$lk!(g9gcP
z8PrrbP?#$SLh=pTy`u|Zjg5`Thod)g1L6ICy33Tv_v_7=J;GYZ)KZ|v@B04cR4?cS
zZ&Y!Jir$NbV5&X(w15+;4GUl|?j@m80(ErKNC)fcNDNVr`kbmV9e{xi7oKBHbyIUe
zmjYG`0EEMJtsn)@bq2ei*c9_iAgGf105lqE>$yoV9|&;Z>@4JG=GH&v@`&#&NTH~I
zO-dyG-RsXn+yW@yQFh$J@{bk{tWbV?OoG|QEk=-=jA9wp&MK=GldgvpVp*B5lM0YH
zo~xkQhA*JCKc;#6Sii(a?$9G4K7JVh)L6qZ+P@Qu!G5W3py5K}{a&smmnT~f017GN
z)Mb{LzXbX0uOT?8oZs*esT*5|9UP$cKCGBo|86a`Nkg2!TmplwGVdWQzhc5HY}K|_
z{eBV0gT3F+oXU(q1Zvx*j%J3zsTX2D*ZkOtJYEt2#{j%dw<#E8zQq$Ty<Ci94~>^f
z0e<?X0O8=eIzlH3Jb79ps<@H)jy89_0zjfQx$HVRegg3$O`>O|kK5_I0q40Wj5-Vl
zLz6h8PmN$rw!#lX>l~$#5=|>zmNDntz<`I5F_kGh%CL_{@ql2S{M9_A$V%3;ZP97a
zsWKxNBBt}>qh2A_ZYTC$0>}7x=8F1p=%@CdCq2@e9@EJ&*M)~Xvg&D+$^9zna&gOW
zGqxJI!vg&5A*T2ZsSMHjwHw2d!5;9=b`-uFFeEPhPF@0K8TMAZZ6_Sx4EYS!K}kIS
zs}xI;5$DvJe6e3KB}RzUbBQ^)!@{6B6!hqT!dbfTITWq?W0`h)q;v+L&pUm%Im;iG
zA@ONR_>+5r3BaH6;w&^{`IC2=G>I@UFmxR0oXq0m2g#glbvfbwRjvbdf0+faiRtwC
z`|W#ghYfUYgt=8*`Bf>|LQgh1ZSM+tbuVpRu{=SBO8&280)-SWN!#W=nEOrXtiQpv
zrp@R8D;iv<*SNF-?!%%raro_~%1SBs1Uhk7tLOPJq=>O(u#>+Ci40Vpn1`+Vhmqyj
zHCQ>fJd5~2QsjO7>Oprem2=R$oO?zg)`r=cPC1@2vV*2RKPV~fGgF}N{L$o1!-Dc7
z1t@s#KfLaMwd9YWPz7AziFre{-02_;>?5E7;0NV*lh@lGjLT2-5`7WJbCW$OPE3~}
z-}q8FJn|@J_<4!fsku`owbXN#o|}s@M((iJK&ydKCp=bc#yV-=8gu?ft<QF$chA1X
zxW9zxQ}zdTc9)Ji46<n~^2+iiY0{5#;iW4!2FR^Ysv8W-p3|JT&?FFLWx6&hU8KY%
zzbp>HQFy;F=V`&;-sq|@x(H57K_o)NF{mQ6dfe`%u<NU-Qp3B%ciM+Q+qjABuQtgq
z*OkZ&3F8cY8;G>MvpHtskFWKRZk=dM>ktsC1#|FbD<{V?+JIWlA*VSCGY8i?bkgjs
z`7q6Id#f(r(oR(HwjNy>(&#gtN?9|n!50n@ZPCpUC|1_bG^XOm-&B&Bk1DG1(-r%T
zDZ7-H(vIf)qOe^pH-(>b-yzthW_oPb!}M~w@48#n^6}d_hTC3`9*DlyoxbO5e69YY
z{;S%bb2?K}*)tXRxyzHE`6!ecD7a?g8J4WA8!7Az&AB7vemLanNbhV?ayh*hzssU{
zaDsdzqWA`=MV#LpMVTAOU3RC}HVwcxB$<6MsuX;;lUCXDJ6JA+wSjtn1wawL>r=`S
zgt4_K2qS6;I5fLK$bUsm0$5Iao;Og4d0>I4FaP-4XukNLoI9>y#tFpEbW&~gh#UcR
z?g5l+1fZnE*_Smc#>R(IG(kxPzm<@Evqj0)F!;BT72dBzdR4$x-<)#I*15>PKXJ6I
zyQtz*%A}>>a9CHEnd~ZAIj%i=S>Bf{@z^_b)`jEoN`KL(HP?IRtWTCB^apw=8q;pH
zb5it;4PjJvYp3ZiA%kN(x8#F4S3k096(w@y$-}!}`WU4!)PIkt+^nzs%vqZGgdnLu
zIqp8!aO0!0?Q2~4^~?R;myKiDPlF`f?vx0QcCr&&qL`hsk-)Hq%CNyVkxIQ2l8Ti0
zka_)&=KtI`07{4hogH!ChfivuRR<_hWF;9zp!2XCr*uPe2*W9W;CnG>hC6<027s9r
zR56OjKQ~hGzwS|XA}PWk9_1UmqiHw*y#Kp0x~2fCx&`(1fqslQ%1y&3a4vQzhXEwO
zS9@%KC5}hHB8fS_qKf*C#NI^>fy@M|?cEyXb*F{T+B^F8eN!HS(T(*i>{=WckJkgi
z0D=s%Jt3^eqAb}X=PtKZ`^<Xe$`kSr4~Zg`Z`}1jlFE0CT>0jC(N6`N6E*nUTv|eE
zv3iaIiV_<D-{bBf3BGlQ*S?DZT$;tl@Bh60UFC(+`p@yG4Iq=@5fSlm3`+gL5Ay)h
zL`{jgZkRHx2{p0L^gg-=14-fiPW9i94vvoD4}>dvC6DJAzzVKbokETFik?S@fC{;f
z($fW`y-w{JvZ=g=Up?P0)rDipNeF)PeLB)^l%QEB?3kA-y|$O!{^3k9EiE0!jN+~1
zuW@y33R1@LOyWf1s^gVjN@a{$t~-IoZ!t8ZZEm<&3&0x%h0lqG&Elthm%|!gk)*wH
zb*4P-Ue}F`4XsIJuH0@m8tMa{*Z&JsoAoQVA6_0})?I0fa&6hK39{6xU;REM2*@P#
zzVGED6yS43O#}*554aTlgDn*z-vJ_sGLYayEz#r$IdSAQ&Ogakykx8MZ{MQG6hH!v
z33Qrn?r?w16n|W{`MK4wK%g>0Lr)`)1NA|~ve4Wbwydq|@+wozabqQVK@acrC)B33
zLD*ztr8;fGQul_2@9ls8P}yzv=pvnApx;efV0pK%nm-8Wv#p%r=M|_t8BCF~4@2%%
zC*!R|i9V0F?H%-2zW#t`IN3U+p{|(L`uN@}yP#w&My)jaOU0mQl;b`1nD1ovaJW9e
z(U}ydDrkzU6-TvI|DqAXtb4_L;yCcr+?BG!%5v*S*4OvesL5KTq=B8jLmigS<&@wX
ztWxm=Abc1u%3#m_XfY*2C2;ux=#>tzz)4tMt8iYQ!rN)u;C^jbU-ro{`A^b_J~5)G
zzIo@3AqX`kov4v6MXfvvmrTZdTjL#pB4f3Dr!06&#Pq~8Z2LQlE@K6ib^G<EmoGC%
zt8SACBgeJk5xk}~U52j9Z_xR)3Nnf-vY*HXwLE@y?}@j^OQShvm9rYx$A*ccgs_j>
z4^Mr4dIg0zp2go`ah=|HGg_^XFY!dTBr)>QR?n8V@rI*#Dob<B$)v|&gypi=oqV$z
z`zFQaaDI48>algSQ8}*0V4WEt@JvCkTU~d3BTnf?gW|3Q3871gmzEP{y_hu8H>kqd
zz1w18tR5ZmPk9c`|1M*1A?UZDC?BM-wKKEcyE<1bPE?SG;E{UK@q%Q#Z_wSl{RS=V
zjw)G+Dr)>ecPAS#PuRVwbFF~Z$4phZsHiAlq$LIv!hjk}RY?zcGN8w*2GN|6=KATB
zS`6>_NE>#e+m3|qero3HT#eOpxV(OYs8WaxJ!Z8oyP;y{)XaCQ%bTO!o_AW}9B}O7
zJSEg|5xnPf=}bCo48w%sWXSe(8TtM9PMPD#)LB1x2WP*H5reFlATsgr*_9WQgz^!j
zAU?zxG)|{YOw5er#{Xi*rvQ^Unu;D)dnPoe?FuFknyzI`N`JuuP@^stTu)L9xNaXx
zcv_{;`6IZw#a~Re#R=mhpwZ+9y`YbcjfI1qiq`%jOF(HPc?(7FuL27#VPfuuM$YY+
z$&d7vQBS2yA^TZ1>)PaCH6q(-gOy24Kd(T5@7h>8kZt)c7Iqt0y)ujIru!RtyLL`?
z+qj!Wb^}iyG3Z!C2eFe>J(w-OPVdTS`wofqp|zM_@i5$lv3F#aaN^rd<J>uU7<P@+
z&qnFHGasaT_Lc44lziUmC-C0w<kaxC5C<RLj`9{eUZ<PiU%+B;j8WW}?OM}ea07pT
zwQ-=U2OvS&p&7fF1m{5Ej{o{XjFR~gmjVyU{-O`e2)M*!<KyW8{2(!bMICSaxjsF6
z{5v_81Iy1L)zy>OfWR5lU$#aVkxwRpiyK7ce{`iKl6GX}$iM=-8tghJqtTy!KIrwt
z#p-3r$3<@CkqzIsics6zC2xY)2r&%Y9o^N?a_SAQW&r`nTTv?a%x*~MT2d*%+$OD6
z-{5L0a7FZXIjr@wMQn7s0TD)AkR*s3ONo11cQeSQ_*K8nl&$}{3H#^T0VdY~k_m<N
z8b>EG{e{o`J0Tch)Tp+)(+HF_EP-gf7GUbms?oo|r2x%j5ifdmDdV&PiV_rfb0~r<
z!+F(&?z70#{(O;<YqDo?=ggL#S1ne*1)9(ex8i!&_Y8}0*{gVAa@-2->3~!TXdQGC
zY;R`PS?*0z`@=CqD&ODR$!uDVAk-vPy`zXI!?;f8|Ai4PCyi{W`hc2AN_@C-!Qg~!
zLH)_e1G(t`y%9JPcL8(9T6I`$4NyQ@mf}zdYLvF;z}ep3-agnec<*oE@jq|MhGZ46
z#Uj%90Ic?2>(g4xZ-75&P0j~qr`r{C!+)JR6^Jt1mri>6IgT_;@^H2%uI0?VA}>r!
zYr+DEv}c2_G6mPN8{l1iuzBV<>T0PpZ^Y^X^s5_W?KcFrXb^RDRLU=p#7x@18o?&m
zRP=0t)?l2V-|jm1wi)4r?)D~NYdJEY>OS891}Axan@tqzbsm|!j7(=hsgeEt_$!!r
z&ASOe&nI%$&Xk;8Cl>UwN6kRM|KHt%<R%FL@XjbEU?S-I_5tuOS97D?2X;}HFF_~)
zn&k6)zs{9{f=R~@BU_{KXT;lA&I#57--_RD%`LWB+*p}*3_w<;Rha5z*{sbos}v<m
z8%i^AJ*cA{ObAYQvlvaL?sIVxTj(e+2^Xn=_QUZSS6f)0AHT8}L{9r!p!~(goLhyv
z(+#%TR3SEv6u+%lL?!7$^|<tfm&aL8lv3~w^c`Q(;QLwA4FB94aBQ_upc+93mfF@)
z`?|Z=zzhCYMWOBwE`dt`8b@V~U$4y$F=)*I&M1eit!>?-1|Y!Z2MxGm(jjGS%26T@
zyLmeoSui{Ift=|6HHNAC#9SW)Ww01Y^eaA>-piK|711-xP!lE+!jYbN`?C1iM5II7
zM~hktrltB9+ngc#6UR$65<%eeps0NMrvkWaUk?d>chsC!Y$`zV_v=89fqHDuu_Z9y
zsVY4HjkMYACBomg1NYyBI|Bsy02nP4+=gvTPlKjhGN4_l0K&W{L0Bt_nd$=7+w6@y
zq|oF=Vg&b^Y(3bf4<x)27qeXQLS^`IWW2v*7@?{4dCb?o=bRflEFL{UT2Fv%*H}|@
zv!T_dFf87FtVytpgzm+)>1vz;mr5RBN1sur`$e4b6)Ewp-U^8foQ9ugq1rpscYj|S
zD-#sd`75aHDKuMe!KT?+?>U)Y6L{dgQ3=X@=+mQ3HX`YZ3Y{{e>8d3d3<gNJBB=iS
ziVp<}(FL4{h26Ap<_{rlA(k{9sBf10<!7TOjw&IB5hOP6xhJ*aS1GO=E7Eg*w|>5T
zPvX1Wa$xX1%#Fn+vztre!?M<9x;#cbgDBxFFzvY4(A>8Eyw}=#F?D}6mk9_8j_!Y*
z{%zK6JP=|FcxXe?C-37=TEGPr8~*|#{&O^Nv>_ljO+<|dK<mO<Jm4qTT^8`&<CpVd
zwS%k~)I_kn8H)8C?oE8+`?WW7S>pMnQZ({hN;`8bSE}vQrf%EdEN(sII}=};RGv>u
zbL5xemFajVQZ@^F8R5_ASxg)r4NCL8Su7Lv=e5!C>;_^K>Uw--NCKN@YHeR$b032d
zTo4gR3ohU40V5xdRtmvF|51d!C<aEDs!z{gKn3eIv4M4hf()FQS+PhjiYG#Qj~ex~
z!Pi1k8yHb?_tH9AqA0WOVA5zuIq>`bK^m5U0BFV)Fl`|T<JrtLgSXOjHY-1qMKNIf
za~aXTeF?ZDYPaWcAAsFkI44UD(w~x4-BrD1Rs*xI{^e4`@<5`rDV@w?f3$3uRd$H%
z2^xQzm>g%J(ZhOb_S{=Jc0f%2)<buZs0eS+i*Qx}?&wv%(Z=5NT7RJ7q7vwJ!;Px*
z^Dn`w4T<N{zG{EnP4=S=kNxEYo~vE2J)?=?Xp7!OFF*IhYxDnbpoHj52gj?x4bt1R
zZk=zS<CogtT!4Z4J^<1gWD=N`mV<H5fH&vwiW3|OQ78(m@2@enz4H!K=JwV72bclI
zzsh)MIwB#Br0P8EAjL*mbHA6IPpgBNNp5F}#@pPYk>c`;e44!t!NcKuS$SMf-&bcn
z^}?N+DSPzJ)L!G8&FNExx@7|s`Lq=KCXF}}!l^iKM)U`$Gmg)-(d6Y};AU#;Nt~_9
z<Tu48ARy<l^O+fFDkbLUw*qx6{P38V6#f&A2#PT%ilY7=@tGMMXOd-0Ntawl<>QnW
z_?+k$4BJ7>x93y1<I67P!sb7=?OWP2MIxR!2q|4wUA4UWLDv{W7cU@(k^E`{2pXYq
zdaktizgu>IOMJs0>|<5{YoU1__+HkoEPzc%befu)sB&ZA^4Ej%N06Kx?~1_A9YQu;
z;Dd$P3ca3I$|dd&C9N72y!m@4-?H_eSgC|8d-mPds(c80qG!KR`s7~K@KxiE+_hNl
z07L;u@bBd+K>4oI2Qlg_URM#IbWA`rkS$bK@7|3a9zqc=x=^nhty2AtBpoR96O%Y7
z?E{b)2J4Y3W4Q`$uk}i=DZtRps7tI+Ej{DrPes5umuj9f-T!e$q^I=JF^;Tvbb<<&
zhO>n9=!>xmr=ALe5nCft<8qQLZL^-w0RH2cBAS4HZVi)xA-jz)o6bbCvV-xt`hLyM
zl{eRG7RWvV+UFMjF_5Gh0Hq|^h1xE`--qSbk)cz_1`J%(xcv#xao{??`Dk5-X%JO`
z0S9%amTg;#1M}6+5F_3|`GB~61B&>1CoYbi;o<n{jcTs0tCcg&L6NhHeNmET`E`{3
z?U;8MR`SFL*ekmXxbB1})sBp%N{9;%*&FKhgxF2TmQCg&>5O4a3_9hoa|K8+U7NMF
z>FNvd<l!MV&IXG6C?UYMLlsqVCh^CPNh<@CVAq2$iVRf%CU9C{`y*P-5OaV6nyKXY
z*q8+XIqdh)Zb09qrQIyHd6iesr#~oHYAljWWNjA-5(`|ukRzuzWN9LjY;w!7dW3O`
z5p_Is9dser9v`uM2SjgNdNTxav?QZ0k&?|`GKc9qHW`-W?O*yP4G^_Ecap%-Qn^%n
z9;)$5jiwP0uikgf{YLzOW5xsp5^c;*Z%$uIoGb(;GyDKZ`b6G5K(7V~!s>PO!Tp_)
zk;9!w^9Cjkq&QBHCe}W?t3<{W40&hr165m%@rm&)ufQfSs{$ORjMZF)?!tV9I%m7X
zC5GiB5|^qajm*tkL)vk?ynM?oO(0-7=6Bu|nVMvIY)>cAO7-J~q;JWQEJIMKH}Sd1
z8trFTFz+=Fz|_wKl|_4V5Ey^Pa2XPEgC-VUpD+)PI@o#kx{fn>d0B1@h<V*oR*rRD
z5#*uZvcN^e`r99Gln)5Xy!QZ_74c$^zA$lfD~^rd<dG<qCu@^lb*){gVScAP$t^sV
z45wFoSr-)sdo~odIhh=o#=DfwJTg)=rkt%q+_rH=zK``)s}pjH*>Ymc>WxlxZ-Ut9
z6Vig<_hHd(B^7QwGAfvf^i<0QTY1pPQF!midZ(;P<x-T0JlF}t3Pg3CXL}&O<1Bzy
z%E5(%^guBB*$1`&+l#IOGNBf(z-}gL_yy_<MvX=zSYvM9##>u_w>Mu6<Ow+cidlWA
z{&3&j6mtf2d&tE`cUt6>mdJPY4CT1#>bEICSOe!m=UdjiF6abvfhxnYpR^nrSuPu$
zoWU!4S_t}lN~(rcs?8oxv|67kY&CVMSXcykY(<niNw|#?ixh<O5ZahUwx&@rC`5+%
zhryHt(YvDs<F;N6Co^bu+a4!ID~!uz216sl5y&G$Jxwx;iOEi?QuZ+SqC}P?*YRZ=
zpn9$<$_Bf4wUoT80PGWvC^4)b+Sg%FL=xw7qol(AsD*%tK}4#l(igB~I0;Nsrnjs_
z|M>Oa1rrI1JVZ1Cir)Cth6g|~F}t8u|8;FF!<FlkDWJk)mr)E#yS1s*A;Gu`tr83c
zX;iMtT`=A70J~}9Rg(HuPWLT;Qdj`z{ymZy!s7Q)meLZgaI22FUwKji23|D}mkQQc
z8ay5=&myP|)0{E_iQtrn%`7KF?<9^k$-Z$fOJzxN8%vDcvgya|8_Z{A_(*BK_%3)K
z=$sp7TJ0{hkChq<|2JU0fD-eWU!3gK1!jr3<f6*hy7R_gIq9GATN!==T*Pi19~1`q
z2|8v-g-D<Hxj9aUZaZz;vHVJTB_#pbkQj-`BC)X~3u|lpsqL_bGc}rE=liQ*Q8_`q
zf3yJht^&2<T+mfhi%gc`Q`9t${31rAm7H;5i1cTr(pUcgg(<67;mZ<m*>(Fk$cQBf
z-a*FYedys6BxPNL?tTYw!bd-%V@DZ<l)hArEq7L$$Gh*wZq7YJ#79#n3BYDjLMa3x
z*M%O&_9d_w*3AP6Wt83s*KuX+KSeLd#<ShYSRcG;X#u~fBmV6B)4P2>?U&*HU8?+D
zuzaCIXoe8Y#Z@uhJPcB~2QmjEuB>M*fRkYiGyw!(Nok(>RrMCj-cBe9o=2%-0xh*$
z?0TFWkJdYj6Pa$`)ml!;(^o58;{*Z(M>d+g@q%yn+3qBw?<vGH_kYYS;G8Z^VzFCM
zwvK<TFq9pKu%$!0V{mVarKE^i$6iA(-@D7pmLi?Ya!jrNM_{Ps)DOn#vneT2XOVkj
z{53oTT&z&yt~HR3)IDqlh8a-vuW}ciw1PpS(be(^APR1I3;=QaygORc7R_1zTEy_z
zTMkh2Q-Op&93LO<&6E^h2Gt2Fbuh3%Dvp&I8*=r_KH=I@$nVh8FBQSb0E}*+S;Kws
zjVCsNB}QeX-?G4<He$U=Ggg!OZobX%^J0bO-Vu2UV$*zZ&(S8Mos?l=;FN|%qvv$D
zzr}=E|A>y)tZ7}IR?c3<MIcE^FUd93&T)%L7{-*rQH>gkJGmeTSCf9N&?my)d`z2o
z85-T2lh?D-xhB{*Mo%~zAZG%UPf==2_1*S>uMUNUbu0YErvB#*szbjlEm_VrxYX%>
z_Byz;b=fO4d-<<2;ji44m>M$EqMt?vxpfPBxrg>u|N4gkMs9Asswz9%$gf=m!4m#p
zF-I@Z6}@RaWqL=R>{YHsXZKhm`938#f@W|Ge6){0D~v6TS8iS^`_4%y+`POF5gS+b
zA<!>S5mFG0NM!E!gXa|;i9FQ1pRarB72bC{MVpO<X+^(kb1sGT87WbJpSEp$LZrSx
zjR^?~)dn`kPM1EBUz80ZkYE1y?f^eBl(uoab(Z&}UIrf!qiqjJWD&H6dfXUF_<5Q8
zesg5=v#MGCJ+2`aH^u1Mf1P1Js5@u@tunTFF*9u?JUQ?gq36^|y101AWzdaY>nVzC
zmh)?SF0d9K7sm};^f(l@!YGzj?~P-Woc$R6EJ9+-m)MXR{5A3Ye7mf$AeY<EQUX?~
zl<&Ff8!Al@fE^7KkTeRpd&r|3mGMU+CFC4q4G%MGUdQq%jgMQ*@8wl}Ym-T;gXR(#
zIOAS`l5=LB@_<tvBBKbjPdNX5Lj9ndI1^wJ1||^p=|jtXELn+wx<0V&oScr6Z@D~h
z)@mKRuK!Eu;!j`gR}Ni$apX@$Z(;P**7vnmK^2iwrJW1e#|D?k5~D@~c3pNJP0iak
zwdbbt3Wu^H+?m3nbGUkLj$%qB)T~nJAK8rZ5wl^KMY&_4u@<SmI|#z@*S~`#dBvrI
z)Kts&xm}hxppp<6I=0-_UTucN2u)zpRlO^V&kY3D32}fR>9ij@Mm|VG^qTd5g~<OU
zefMz%AAZ#MB^wIlFXz^+EG=K#z+xo!!)B!@eg~U>ZU&kO<{DCbTns>?+iq`-SC3l{
zg7Z_2!y5|k|M)7LhnO5=lwZvjLV&|pXYXT`&jlKhL3-GuK#D>m4F{3vj{|#Dg99tA
zO=OC?sj0X>svV!0!P!j2*mu;5&3Nh=Vew6)^6KU}BmfEUtM%h3i5P(R{;D_hX99pu
zx*LoDL`BQNR6Z1dvVjI1e4*z;4r!=mG7hx(|FJLdBSh8j^LpF91xiZ3OBsHbOdo;t
z*J0|Lan&-E{_!{n`6-PUgfe5?plix^T@4O|t?kXOP|E>95j8aFBVu!%kpRpOAXszN
zd>_4HUR7Y^k(MFqViZj+Mc;hH)bHP+v?9OGc58SrKEnveCOmn7h^<8FqG*GdB7@7{
zpEyePzCqU%{a+DUgc+@UXLk`S?Kww77E6p{UZ`co39f%)=dPN=r@GyPMMfII!$=%Y
z48-OW<`Um?r$3BOH%@+UmGTg`ITp<}<w{=~RCecuUlgAZ)%C{%cUtS?1Y1AtNJj@L
z3RK-J5=c8%CrmpXelGA$LMgfQ`QtY`A*r)(0i70T^eYWM%E(8<WJRFkY4|~|W~2V-
z-$!P`YQE3e$bzR~5`qaKtyoQL>*B+GP-qgO`dM3V5nq>XX~ZvxpD}hcm)$~HLk^Q)
zgf*5O^7M)CJhMNNnvD0ZL2^ldV!0J<07h$}y<=Bp2s3q=1430Pg`!uPJmtCAFqpto
zq9AC4ukMob_YVx1mn|{=c^TadfQE);1oWHuXwTX(h_YY4Wd16qruEN7{(Ze|%Q(D=
ze4^2F_?WD`fsmq^U^~s+A`ACh3$mCzGfWvd1}TLRup;9=7hJo-WG2a~`@uJL`~m|Z
z)y9ZRCZ`KGIKu-7Y(>u`nk|epkWy$KjoSEy$mm4C*`$Z<1A1NlGwgha@C%tQsr>%k
z-HL_mU{F(jX_f&bwJP;oqW^wkzb=N1v;m0qYv}5dyU~K3Ym_syv;Vy*)MLJF<d=gC
zzwSzOHM@-fzc4l!&!~`ssYokC9deC5)@2ZvI=MjYtFE$~?t2q|B<zj8*O@IjZ~y#0
zOfh?efHN_f$=W(Jj@F}n^i%LmHwE=;r%uh+@uMF$5WJoFW9~-O<h`pK8<9`h>mQ*v
zxe6)1cMJIQDifHTXC3P4B#nLe!uWK$2(r|DT)zH#?SERpElOYkW49XRfCV&R8pYRW
zY^kUr2`rT#A+OmQYL&~vs(cW5XuICu*4~JDy?K6>_f`_p9sDLcnE#!KIDW5o4w4(!
zQn2=mjdwzw`{5DYRWl3QqVgm>3!wA@U$;eCU2m!qrY}i|?2`HOgV{)VuSK2AzP+4H
zeO6vt+6DA@%>H8;zaHXk)I&Vo8$~@tJP}5V90+ApRpBJljn_e=?2D0dS~N?kQ2uKL
zPebgia}Cm+HQ-55&i(pkV|I(dI1i=)ev4c9@78G$2{mk@bmaVmQ$pEq3a)sood&++
z<AMMhTL(vZ3+X{4`)~ur4ONBzoRT&Ryu`%Bh3oStii5^LIhzJ-B$EHnzxj2N_V9sq
z`iM)#L$0QpqK87cb?oDraUT$b@XzS5$`zS|E51^tRx9A5st;`PH9fqG4?MyA)c`z8
z&Uy^haY%*d`6z1+a_P!@5go%AF<i^<0*QQF^Azjap@8yYGx*Kmt&d~`MJBBq4GY^J
zhnSZf0`{$TzLLINOKk@0H&XV1hwL=!x%K;)|Ml3Zvi!WFlLLW?AYAcI@*&-RP;R3t
zXonyBg|t3h_6YqklSel~(e=LJjl&a69aaXpAH4Yk^ScEv(Kcmh12WOwAGzD;@?V=3
z8(CTH@H5m>rPk)oK65Qbgp9M@sw6Q7n_U~Wn>Kbsw;1$xx&J)kFZCCy2Ds%yFQRur
zg{&w!&JZIJ03>}fT)JVJ8(J=Ax&`RvKjD((>My?C{=-PX8Hz`fgC#&;dn_djHvpLf
zqAYc(H^Y1m5KPQd0HI#2k)+LHt%OcoA9;F63ln<6&~%#}!=hhZC<ZE|Bc9+FbQAb1
z707x_peE!N^P`R>1(P=avu$o_2OHU_8ZJ#P)s~BAb~A67bl^(>K&v@yU8!G#2$_D^
z-E%jjvPrh9U*u1Z$?FZty4<v`HR%T0D|wkZwR~(mJW4)3J`-YU|MRMU-vGi3LSWhX
z?NNWJ<o?&G&#l-RdP0<qjhL_Ik^yIBp);Ief6bf{++D}>nrFB{?{=|dcl+*sNMJL(
zRN}h8O{tkm#Fp|wPwJ{reoj@a8R}6^*+U}<d~95SuKhhyLV?$UKA%o*yzZBB`rIP=
zHBcv*K$lG}>I>%!PVl)wU;c2iZHc(6?qXhF1+v<QeU1dUGWagSfz!$ffIT?vzZ;@{
zAoS<kLftS@&d=#yG{%-YQR9y@o`rY#!WoVNWm!=F^X+qCYSAid(xXme#%e^$Y)qP?
z@U`=nKCf#M9(cDS{Oo46U!*ffUb*BJUQeHO&M&)Ve-DDi&)nt7DK6^18ar9XI9Ue}
z9DxS^ezM~bu<%oZTtJ7{eEDOe8_RvKJp~jef#L3+)PJw8ldereky?K)5pq@ew!c~m
zEp5%wQed5brv%~#Ip#~vHpWY@d>exPEee7LBZEiCyu&;Elvwr_w}*qBMW_wn3|Hf&
zR2V{vqH~HYod0}pa7`$X1&#)_%#9eyBmD_FNicdgxK37k1^d6(fK&&LX|Hil6Pzaq
zZlQ3t?gnX04ew$$q6i<#l$c|1R*0sk{{}0N4jRy|WBq*c!1w#8(&)#JREHT9kqY=0
zh2_+LMd82fMVZk*#(UG;#?I~?$Zm28H^6>{6unl<-l3srgC5-fo@S9&zpJ9({&451
z1pZ)uCOT@7!l3bMJXnzy*1xWqR1<OethS{^VtphnJ$(;sjg<dSz(8G1H*=dt_s5I|
z^8ekgNI@IuO@fkFy=Tq}AbU0N|NY<UwmH_@JKX+$wwi(us9n)OX6U9S(Tg61f1P6u
zcn)T+?|{l`$4a~AKat(PlT4!^llIASTq^cU;3Cy&T>telMln$c2TTDonpbw_063YW
zUu<<a7y3x%VZ-=qu63b*T?oi#JTa;I!|ozywNW2{h`<Z-ui(sqyQ9;(OVuCgeo_)~
zcQuaa&p)%phM;rBj*gF$DVY8`?q^~%o=?=#d=Fxk3>9ZX4*q;EsoefxQwb2m<_>$>
zRB<7d9{^K(C16Lx@~2-w`C}7z^rh9}hLFEwus@x@3EHkIRfhmtVBQr)CGmhGFDO4g
zaosd}H92ousL;2l2@(wukZ7f-4}x@2hj&RQ?*j=$+T}4jU0L4mR4vufA7zkHQBj4(
z#gU%tXJ=2jQun%eeE7^VAG7j~L%?Rgx!bgmtSr=R_v7zcyY&0w6N85!5)8cOtF}e<
zzpSS%)(_9p(|F|Y(YufCR9|0W>{9Z`7rK)Kh|y#VgYXrUBqof~H3fyA=vUlgb*eJM
zdhY+EV(>W3v9YllA!dN3CepENSTqM`nU#m92Z$W-d!^O0@tQ+!-n{vbl?-N}`BDsL
zNM=0;N0ksggg<^sY>)L<{4#lo>CPfYX%$JX@Z6U52$c0^p{4xzQt7yopQXM(rCz;q
zZR9#Xy+ynSIrHmG(}f4M0^Vyc*H4c(rvm{KN$~4702xPtrJi))64i_rfE+{GiCP2p
z?~~%Mji+<>u6;Wa=$(n!iGS#p#}p_kD$1R7`B$QZdfW7vCu*Ac*gJpQrWt;rb8r_{
zq||lGZu*j5_Z%}BSbwp~0zr_b_EcC}rW*Bu;pk31U1IW;k4(Mo8j25x8M7Sh?E~!$
zN$m?M0ehx#xXYlc@fPs{%K|fcT=VaPYJOGY18-VdS_No0hAEv~`jkfXJ@|R}pu;Q<
zA%>0l@)n$j$0;o{TwM-jQ(qt+%{3C4!GY3|){6=&Y?>wzNcExhC#bTSln$+1a>75R
zDv!6iQhqxRCRR<ZXn&1!ZH;xf*8Gkw;Sf*lQU(NnsDIL2H~Gc@|08`H{M@+(8JUma
z-~Gt2%E_Aih;Tv~jt8FIVj)hpFNDBeym+D6Q`Rq0j8OEb3v&Ipm&S*dz5VfYFiTo`
z9R);=255YGyG*jHsVb;t&;d?ZY6ZN<cR<{J*@kM3yFJFO=J~;?ma5v0k%N%M8Jx^|
zln^zb(QOgw>ig@`d5bY6+KJa`99yO~5gmTCbgd-8r>FXLh1WKQMai<ntVMquH{$O-
zFS_kDC*>y)_&#;%VL)R&OtBuL$=O-&JpWzaYXmA9n`ai`SpdxvIIxCpo(h}M+!NYP
zrGNZMY$7VW+<G$i+Id8;m>dYY(+pa<O{@XQuk?>#am$1R3oEZK1n87EfO08kX5&{_
zP`2;~I&WrmZ#4U|y23AB^qA+hea9R83T}d{?}#aZtN-$s!L)6XQk6W+@xIcrage7e
z3o9-47BO!N&Hn6n(PDI!V%h#%Y5z&l%Exdr5uNc6BAORCPXkuBr`ownZwJ(I2EoE_
z&+Nnj$4TycHlAg6<7e&E{Yaop(QVYzw}%TBYD2-o@y(MPgG&Fn&R88((s#RP=}v86
zX;D!?QR*JhC6QX6$O4=R9X-8VK$=9kD3BZi9%ty^q1NOpl=;AV@9x{P4~1l!PT%hX
z0VK_X43urgmVji1aU*HT<(Knpo4_xGhg9FC2<4P)L+~Jn94(r}<5o6gU-}~KZ;=vY
zmiXjMZJ6>>)hzX=NY&#P%PNEQ2`VtU5)brdNxjXz)J2?iVw_+S3zme}Z$lDJ2*4(#
zHh^TJaEk#;Tu92m@{H6C5m6s>-ABtHxyAyiU0_{Z-QG@E%s)jc+!RyCl9RmCqP8-q
zRbCDo=<bPu!VbvRY>#9#jn2=P*YcfC*1sX=8y5fP6#VnLowfXO2z*%n{!x*PiomjF
z3S+AlVaP>*LDPF%AXnr)S~H&INvlQ<0eSDpn!DTsT~-DG0kS0j>>6I&yxHp^rIW#m
z_aw^D7!&An2ww6l=Bd}5rlnm&QBnAaR9nNdXOf+7NBNyia7v4c->jSC_+Q8jyNmEP
zLt!;nw~}_xDspDdB`?2^H+)UA4|zWnovtwb)N7AE!Gr(*6T#Xx$#)y+!g23mq1~l*
z-<Gn#Htr=9H60%7a2!yo<0eyhzE+i=^YlLECTvYkh5$1!0A{ConfxKwm6Gl><~?OV
z>m7Ex)j5M;f^NR}Z?np}HVt6!vDpo07Z*Oqmc8yAJT^YzKhs1sOsjB&jEujYiWlg%
zXj*@NhtFf<a9gkZK20t6bC!r|_l8q?H~uV0%!|K+++Q&s6g(mPRwt0%wO@`M?hl<K
z?OwHmh+X%aTpD?NGdsV8>ca|Cs&qY-TjbqrL22ygYeKJ+O#`3G@Cyr5D&}e8TXl*h
z@V>)QX6;}p;A?3op7SU6(h`-!yeUHZplxYyp-1|M%OFOrK4$|su$ub%RBo60EFbV&
zyy7007|i`qor9>Nv+*Vno5&1k$ZLk?2Ef1o`U7NLlSA~+@)KM*TmhsD%A@$h<1bMM
zpb8Rb8kS8PJIR1^l1&s^(=|7b9$AcG^;rD&wx0f{_xg5y?d!SjoUge<*B=|}>0upO
zwS2InA<J3jVMLO2`vvjMp_32dbd*0$ab^r|i}Cr+(C|r1hN=5xKjkeF(0zLJJJ|k+
zO%|j$A%P;>HnAdyN_m`lRJPrfm+3$Al+anuu2t5aVoVU#Waqq9n4uEWh}ZLTeTK_!
zIj!L%<;wZIgO+q^ODc<uXW~up@$7MK*L03#9b+q+HDzg=uG<ttM<T`4k4&*2*C07)
zWyNPA`CsQ#X~jQwcdofBO1vy9BLwpJ5>lsq>WYI0g#R<zUlGb*hr)!FA*ozy81;q`
z?0Cv(7<9G_WAj(sC*-C+5vaD6auqxm(pk33t;vTxDISP(LjRh0)m+UbTt|)-;p6j$
zqE{n{uUkw94IClaY5}xRaGD51WV@R%9EHsx0ISF%CN6F+^%Fp&fugzIzYA6WWfB{Y
zx}}}^Pf@MLH%YL)f1ZigWXp9fvu#tmO)UM~@+EK*bc`&Dcm<)g5j|bV@;Q+<K>LCp
zSte6<bK~kW<o()GOUgIRhb+5LCL^hb6W=Gll)gN6{+T(yBn`x$CMim(>pZ@vM`4sU
zYy{5RoIlHR5qFe6w`aXYYe?QOHl_uFF{n*R51~A*-{bYT<br2J|C{HbQJpudOyvHR
zpABO9#|H63{1bAJA%P<ww*9APBMDBShAZ(3`i7NQ9LZdr7f%j&og54FJf<x8+f8^8
zuM&o%`$&g1N>!e=v`dHb2gDLGQ{RH`j%WS2x~}b0*=;R#0LyS268(4E2_6o;Uo;!w
z`{|TJ<g$_@FX~Xo=h-gXT>Uq?*EM`ClZu;4%^3F|ihU=@6gg8dLXY5jzq9m=w0Bok
zH*z$DW1-!_&<B}iv}>Gk*R|Uw-S%Kz|EF!wr5t+9@yyYeuXo?ZSPT82)(gxZ@8RWc
z{jLS{s0FRAlj(8=<{<gtu4KPW7j<@+py2F;4-6)tymf3YWGoGOpK{?wEOCgA#Og)>
z+iD=&vQqR=Ocg{xMMaNcxJ0f@Av8j?fV4A}g-hjYc6K%zz@3e39Lo74D_KJdNJ9*;
zFsRjR?`h5M^lYoePz;)E#8<KoZ3+=doxqQF=4lV$lck2(hhGH#$odiccn$elpWkj>
z_!?Y~4bSZ2IhHKZ?G1Y@ZQy5i5VPk*>4i<1Tqe5Gp$lJXHvB0!gH-N%J5G>QV|y_)
z`!hOAxeKX{DRATU6ZB>=Lix?DNYyeLH@Nw(KTtj4Qp*tW-*$X0FY=ID%8RPVteZt@
zFWj`c<<?(b@1K+oeiP+K-fs+5|MDZ(AU<px8=II-1$q@aU5F(*Tno>*GW^_@8k}#L
zl@M$02LWF$BpfQO^X+8_ih%-WuZDvPRtLE`rnWyaR%b~gM%$n8E}YT3!22Up4wBi{
z^qoexK9jXoGvJ(1gML-y=`ubAXB(K6Q~kRY6fbAud#qV%9B%iCZ!~8nsnD{egT-|3
z?WePyhVxw7g^Vw{e2>ZE=Xthg4$}(}-4QKzMmL=#zmF`goYhxWU*>64&XhkL%p*ml
z82D<QJH)!ZRX2D+K+ADJx!AoP)$yv^y}6=-c*@A_iqAp%yu3qsktHfQNlHr6+z|P%
zcTGZBNI~&?w*p`xyy=(|uew{bJU+5S7DdxVP79-@bK2g(-lU-23|{LMd`UN6(i0HD
zUvf{7hyxTQK0Z?W`}^55iJbzF9Nv85kVJ99_C@@6Yxr%eZnml+I@1-i0v0qQUkMlF
z->T1~2GwjWJt1@y_lAH@Gu{MH0p_IeI&Pkis*P~_BR9AO&wh91t@!t=I+l@@IvFCL
z*ghN!FZpA{L^n-mAn7xV8>rm`1}e%oaHLj0#yFm~S}bey?3auCMk$q@@T4A&zKz*@
zI3N1bzb-8F#od-`j~`rMtUh|`@M8uuW%1l_=iT+F9YTk@EIr4j-%Lw}9!Lnja%2tl
zo$=Yxm?gbw&6n!ZGvn0zBNv0(?sBag>}V_29q<HPYzCpjQ!k*mNV!{E?#*Q;HN9OU
z_RiCCxUY^crCcyq#NJD-&*QVi{ePW7lYQ`nQzcZl!+!;1D=kDV`&t48ljMGQ{g7gI
zF^TP1ZvIC{g?nmP6gnxnMV^?hTWh_^5mZkaMOoQ7<As<`fvYCKlABZ7Nzw=zr&R>$
zH}=yOo7G43#c#={_xq~%$IJ$k)Pt@-9ai_Cql<+7_*q&Ca`&Mt$`a_hG;+FqR1R|h
zOPE*sMdEiHK?LBtH#EES9Az!G*0m;h<V%NZw#shJJ>*@K=04#b;t^$7Z@eLP!MXkU
za<=e^ZtYTz-0&AwRcZ3tZTYMVM**{ouBwet2+S_2D8ywTUR^PWf8qjHNlu4#X)*0v
zLG2g1+NU;N-d$0J6)A+DXos(S=w1e@vxVj5F`g&epPEq(P{v32ZFQfCeVP?~<`XN6
zWO;IsC%%u7h((%zJwx~k%1RqmhsaQ8msb^<f0sXC-?kuIrxyn^+wHLZ<2ZqwHO6h4
z9#cnY|1W|JUtdw0YFc6G0Za)12pcFMH#Z*^_G1@y_3DTAYXuQ2@-lXbFd}o3Z#WUR
zYF)}=^4HZiIXC1HDM&i7ZoUp=DN!<Tq&q`eeLs_(sWbQHb`)-foFDJ>1QJP!tS5YS
z8<sTSNYfNfUBEkp?CjL_9#<o$d}F2BTlW_KFk}Wy1LGHCpUvlc*Ief3C!4O%8h9v3
z-q&q9=?k6@EV3Z6_wpH4q{?p!w&UV=z4*GY)L``kYuTWhUhmK|uh>5EC8grSyzQ$6
zD@yMl#dww!ZM*#Z+*`*~6yI%KTpscCVGEg1`W5!nJrI-x*K>-Z`o45UY8r@DE+|bz
z|38V;E!0Dd$M5R+mAd<zLW*?5^W=)mlwl8)nmuMWX%LyBNQu`chMKw&{nZrNg2MP+
zr;V)1c2w(_hz~Cr@61F{MRhkoVC&CyaXQFxats5gSk5j)fWFo%oi+{C>hG+tH;(hh
z*&J?5FxO!7o9ybxE)uA+GWhw}I=zcah3vE(5c-_YuBvko-q?Ek^Zc!Sk`C6+!S9Sb
z8?ldD(px+kfc;kb!l<*I^5x3nSe08&ky57sh^nM+2To;Y7lr=FcI-m5&c#eJ&$6TU
z?QC1c;tO40zaBepT@28FJ#c6wIsWj%TnjzVq|?jTS9`*vqh6Ez+^1nl$}^CKL#i;U
z6bt{yVun+6vqN7mi&5P}7*N*;15<J#vkz@;XqkYV>$Sr1AUyTkzs=AO3<N+&v&hIc
zlLZ_k|7kD;jFl@7;=4xF?@DD;<UcL#_pYCRu$;9=R2ScQd!|}L$eM7|Lwt-WEN3Qx
zAcXJB>sY?tm$EQ#t-V}LgQSP{Zl<c$*Gsq2W-MJ)R_Wmza{llV(*BCGE#7Bby)-xs
zCU_>Ge<{-)bapl(M`U{N^?lxrap|82(hM9N`w0<wj)UZX*c&d_ZY_CM$Jdv~EAt0q
z+Zx?XqSi}CwGUG8uAML8Sq8nMYx&e7ux{j_h%YqMENCY+*=b!=j>NMp-1=-6L1@X@
zpGjF8d441TB^SIUJYDmM-Nxl-W-lI<UDs~Uk2hcMZLTHGzX*wPD!Gv87l;UbfBWJq
z*w+{i#@P#Cc1a>W3nXoioOS@QTLjhg`eXh9{+J&C+FY-llb%GQE;(Kku|b(T^M7nz
zWmuJI*Ol(hLnGZOCEeYJlJ1Zc5RmTflrDh-NQX42w19L7(juXtAg$lcyfOODcg_6Z
z$INw|^PKzH_ugx*y;j;V=vq&`966K$02u$R#Hx5AY~Zn2;}Owt&8XZ<!>H6v>2yM(
z;*JiojGdj~ckkw46xpiU;#To8V$PC3x6txx;)_E`YF`HH;gvqBj>Vf=&dA$4S2{>7
zBA(R@!Fr&}^{Ku;Hkbhe3l78k3=vnruVsCZw6GvoEv=6$@C4&<naIS$@Axywz3?U^
zB*a|X(f_;lgwT^{LTP_~Is6sYyXMdI({YaE<a0zJ=>p_vUx>LE0aI4&$LOfnFn77!
zyP@X>d3<IV(8D8Gj6rv)GY%m0h>l4q#=aAmh&<zT^m9U~aI5?zBz`^Z+}?a+ytfnN
zDsV)Ko{Q<y%-@C{=b?@)vR~#rGI{>f!Y$*+S$t^uh3Xj*-jg(Ug}Q|;SoO=;r9oNf
zm_f5WUhMW$0qnm&=3kvo6+JkctR~I{ckfe38NTLc)ZSApcZ4G^$yL*$QaHb-)Z?^V
zyBt-65EWv}z$JKHLZTvWE`{poVwh#+KB;4a0lOv_dZJgQq`bk;PZ*K!4=|Lo??>kY
z(1%MUjW3uAkX_0x@#2P`lIsG|tSavft)m`zqK;O~Nh1?H4`sykR4J0Bo~9CP$LgJ^
zk$n18kjnp9ib9;?lBIt`;jH^>0FI4~&Fc!E+`q?Cb7IsyXgh_5S%Ad1nx!pqa;PEQ
ze7nb&4uhG}2@@?}9{EUKe<_I{N}5}TB}8~hIu@xw$4Tc9w@2~Z)yvD$`e9~&M$Rtg
z&BrG7R&=clvB36Q(@RQ)z_zRJn#D;$$*i=jy5dAK0E1W@5|6w?y)DnNqY&<9E0^xG
z`Dov@;(v_@0ED1J(tX&R!tq|-<@NPnM^p*Cd)6IBqI!3ay2((I)x58cI0=zQbZSJu
z^dm<c%4Y-)MVxcGcl%*#v8Ia*r*6A>6g5?>L!n6cqm`9+gVubBYzqtIK+`uiIh<P;
ziV6O2-CR7P_Pw*nGG6(6&iJF6A@S$StM)055XbIEt&{<K^vSeAEu)*LpSjo3l`rFI
zLZ_W0tagz=Qd%rPNJ+7<uu7@Mfyy#qJeS1ezTYg08`5vrx;C0BeR8pSGl0#%`;YN%
zR{!L-OFyzYGJ|%v|4My$oFMp%#Wo{x10~&R<W0cAFF1_yj!3dxYzYFQpBKBMxtana
z&MM7J<UgpP99!%CVfK$7QwU%@{@7zuo#_tZwPpV~jV`eRHsWzlhp6D)a~h#v|B@xZ
zU?QoJ%g!;S(wWL{au0Gvv%6zk<fw!+>XAu1S&-OOgXsX(4oyw9+}_@%0XZ)i)^8pW
z(J@zH&iR$88KpNX1#d>bj(Xi~TFV-#15bL}SjipfXtsG8Rn9xOC<T3+U~VAp%Lu{t
z%C)jZx<kW7FSpZB5zG9P;){Et0*}L}?LTVp=sk)3`>X}SKbOp^5L6y06TCn4oajLi
zET*KnE4vyz8|O-+f}71$>dl9)zsR5GAMsE>;*^RjG`<iUpJZK_FWhr_!*wo>-*EJN
zz-G&36~Cc$=0n5MV<Yl3v!CCxv>w46A#o&J@}{Pb!zxkS{s*>}Oa-KK$~H-Il*Zjm
z#)8x=PMhjBr3_VkfW}f)O}-cTvKsHI)riz6X<&LL+&GTvQco;1t7cGGMeokGEt}6S
zaX!odiF>vrEtB>HbHtp6ezMvqsZuf$7WkeUw@(Yr`f*k)scT!iTg@cb9EWbD<&6dU
z5g}wS`qQ-PNGr@F2Hgsn|69%8Ry(qNyqtKt>FC9`Khgf%2Q}Bj@Ek(5Azbv>azWB2
zwPThk<{W?dCQW}e>gl7WTem*~?A^WX=NUdD8I7d@cnFJfNOL813N#}hNtbP5T(e+X
zBL>uc(p*8;L?778mz=c}mmF;$@PC8-%3kyV)zC4puc_D_`Ch{!8NwVQ7e_4j?p-7r
zK&D<pw}tPZKt%z#It(|FduWzL`r<n~_EB?pV@L#Xk;jN}x($bvlx+t)1aKKLHZ}~g
zak0rMDaGBsRIW5KNIbeUrDFuLQS2~y`K@5H>e%<38N9RF3ttu5^p_KcTWefW9)Hw*
zKXl!XLTw)s|KrDEA-!&r5a38o%DDnquKM%-E(QQs!3=@xz2W4uw0_PfKc4r~rGp2{
z4=ua;qfTTJoZ0Ems5<>5;ofabXNb7Ow;x}z#S(5;73f~{w(Mgtt8v9==k7ne%Q~4K
zEGylz4z@nN1cc#>79L^H1|e5mWc>SJh7b}}zI-{qjI}U3TUL2b0~AM6LQQ9EX!|n(
zZ17aJpgY2Mc(S4=T;Zbu(pt#__oAQorrhr7#o;Xp5Wt8hhAveyE#K{DFb_{ESV)OK
z)?;HQ#!zLP(acTtVYRNz5{A;y(Qx^A`@jp$ZoMvW;S%3FUYATFSu-asFh>=?gt<gn
zZw+V36HulP2^!O|FBn3He1JkBN<(3Ft=*jt7?JH)`u;(joAZaTH;Fkyn{<r02ZfDH
zD78W`TjCz8*ycTpUAt*7h3j2AABrZrgSxz+)YQ)pz6+m7ALaTez+9S@-(m$Z--Eha
zL4R5rKMX>Mo&FZpnm>#+=c0|o2in7r@<+Q%c7+js1dQ)jve}uZw<IK7=Mv3U|Er2I
z_do(*Csqspg9rVeJ=J|avEE#Q9YEQ`imomS!4GaSZz#TkgA~J{X=DToU>0mhbo`bW
zSsXvov|aF5PeLOtX^F+Uw0^EA7f)3cPura(_N|Jmj=(`muu+=IxBq=yO{}Oj35SAu
z2i6kA0U)CIY?)mB1DD^EGcw9K09kA~S<zVvPr6TFhY*76*X@W_qCgBqDm8^!%__^q
zTTQ<#lh2f|Fq0<D)~rsQp~P9xDC~<NU^<@F(bxcpbE&w4p&{fB+_MDBB&9BV`E0RG
zrv^~GkLMSjRMdrWe^;$_x)4#P9|})@`l}#ObckVt>7ZmjK|pI^f$#~`l;S$NCCpqX
zI_QIYU9;m&rL)rW_pvLJKbOJFi6er&-ug}=l8wgV(xTM8i0Es}(c2(uABwiRTalLq
zoq>zXCm%&Ys6|UqAy~#1vt$~X9;AN_dks_m`Alqc^W@*Cqd7XF?#liMX#=av;$s00
zOcBWSC-J-I7_V^0tyiA#fV}V!U_(SMH!WfbG~_HkKSX!j(JFbn9Nls9YNFq>?|kYg
z7m?S%;N@fR*U}4RH6+fgO|E-8tg0as$-adDMzipRb_izEQcVkM%=sns8n2h0Ph?e!
z!^i#2Mh0#qBF~jS{se0ABuP30Vw68tBddH@7uu_Updg7gzXOggkWzT;LyyWo+74ot
zS|lSK!_t_yw%8K>LvP+yl_JSajO{^Go66Fc2d;^1=~^q)57T*;e-5#J?+nw}GCyyK
ze)r4q?435!mh}ogQO89t$1m0l_-?!v%w7WYsAG+luQD`*voKpsGr_f$JM%d3V%ODi
zS&}@q!td|@liTQHCt81aujzE)Tk{>cBLRMBO=IKurU?<1N6N~|FE$<8C(DR5cUa1{
z!xfareNCp2{HK)Aj7ytP1TG1)-_0R6)gkO^3bJw_vyU`cj(oV!Zqh-jlF2S*WJIQG
zX$XBA-S!}6G!T*Actg)wu}nn1*9?hES{v_m)a`VEYzwpShl3g7xf0n3fmth|RI|P#
zZzl`DpzMA5LUk6diz)*h0*uNZ9b~+IkxzOn6>GY?e19s>*VdPH!n>`dM-sb(bc{*D
z`zHstDb6YYnSH}VV*JASGVogb<}CAJx$~9+lwbbPa_^<%p3kRey;EPRy%`B8_hqQS
zSQ;g9L+hx2cdGXL{&yTT2hqYd@p!ShS~PP=$RFulot@u;vATi-3WXX8S%J(G?Mw5`
z09Tz=p{hwU28!9uER9Dk6i8$^GG9N3X??NF9mvjgma*}I#2#YUG!zR-;K;p|1Bi(%
zpho7I#;tiBpghRE3xoUajjYI1Otnh;We=1Bf+UU7FSe_xIbPlq5p4v(BBus!AeyzJ
z_m=gej0SPIHWfv<!pW$2xq?o27sL-8s!~Ut5_kyA8SOVj^Bxl8eK(gA)(@R_I<ug)
z2O^Dp$C4Lq0*)=K>4`SJP_6G)IaAA-k9+l5k&z<>H29XA1?WW_j7tVJp8n!wO>O`k
z{{qwmyShJAFxPv1?y6QMNxwh7FyKO>z2w_{1I*px%ab*O-oS1>4l9s*i`S``DZq$_
z^6t-bb`NP27cc?X>@LcH6No;OzXa0r;>^1?5u~4!!HNL=r<23#HEE*!p#Z1_t3GtQ
z4orRI%;3ozemB{_*<xpPRN}~P)U5bO_ZfcNTli9U%OI>Oe>u&9c{YnU7YCIRn8o4a
z^Yzy+(^QfW9|+lINh-n`Dq*Co$?rc<T+c+jp7a4`c<tZ~jM6yyL!UIrQO|5g6<cN`
zpIgmmNqt9y)YV>4=+<v~%CwLytuP!>D#T+bPlij`k@7rj?d%mkrpG>`NLsvT<#QP{
z-$^LdmfKp7K4bd^J2}9TAoH6TW8;(z;kd&FK1>B(`6DcTIHeM2JYck{bcBE;?pR0R
zVFAXp;<13g-uM5u^)am64NqU=pVjyn19f6E#@&*<<`@t%Mh@JuPWeB!)(Iwxg2UZU
zr~T;pR*|2XGO~UmDuLCYejoc}?qXBkN~mmuIVUd--a4XF;nnxmtR!$%!^P61923EM
zXr-%^lAXE(nou6HW@Shqzwqs{K*b960#j13qgqMe;N#T}BG9u}h#kkqq8o!mElns;
z=l(VtbLYSx?B*p%Q2Fv$W~uj*=VFVMBJthVd(-|sE&yjJ8)-Ihh%fPUeghz&@}j!X
z({}HlHZo6I0up4}P+a}pM_K?n-~Wn>y@T<7dhxE)buO~L#zpnj(++f7(VrJvTG!gn
zs=CP%f`Wqo)Wgs>fuVfF|IFu*Fk3#Pp(o_anO}>b+8lX>udlDnks9lcns1^Zd(lHf
zY<*Ym`)u!Gg<ly8*%=aXzB=}2&qRkf2#`N+%zkI<tTm@QcqR70n1en9vk;LN`G%Il
z{o+_E3gyAKGlN2$TKqT1!y+w}Q<3@^Q|pS3aA)7GxsS_xu5K&72AF{22omEgy3^%t
z=L*VtZbW_lJKZMN!;^n92^~u8p|8b*9`z&*hM^SpZRTCJmmTIMF)DnxDo5m9b69#{
zNj%(SyA_)HK<j%&E^2t_#n6#N*p-OTw3@)p?UEUJS9QSA*$=r7`cGpY`)WOT<w4<>
zZ#r>Q`mw^#QdD3+#9h@G2s1%X58w=0QRNmMUto>rwv{0G{}6E2K#xneR7aCk2#>~I
zWUA>4`lS}R0J7bhrip1{qWSgg1bF=MWRkC;w&Y!{>;@ijn%aSl(t|$Ir2A)Th3SLG
zW7D57iWf-2WsK4*>rAFIw<X(1u5GH0&P%metv#EdBQ=*VmV1MKX_A(<wLMk+RBp5h
zxPGG=y@PD3*9m`|A1XMat_!p8oNsl8%#wWC(H(AXJD+aNmoIE!#MOlux{?`vJUAK(
zcqSkxX6qK#YkY>Z7@yhSY4!6eH!P_XR4vQv6}^uoEd~&ALsGinVx#BmBPQJbe6vc>
z_zlq5@y=V(QSm1}3<JmL*}#TO3#;zj7rmFp!v22puGG#L8$TEPmwEhedHG<mi;Z6L
zT&RV4e>X6}@Jh@8nZP&Yr{YDjl{OcJVntHh1q6uAego<@$(9EYOnU?Nliodk|K6^A
z19;l1?DrLIwASPDZM2l8pQ9);Nf_twzn*JqQf;A!PjNwc5|tkS^oI$76sD$>%g!49
z{s^sjk~&<cbxYASM3ScH)_<|{X&v#Py(8H(-|gn+=3;JnJv}|``v9)Df0B1YWeVl#
zq1sgP-4wO|`<T6fH#58R?OHp2dDF8QFN9$>m1K4pVBqB1s5n3#(P}(<-nQ;G>3(@T
zNYHS!o=@aE2XKnFVNZu{pb<PjuO+R?lfNrZ^gZ}4D0@^YVppKsHzlWgelgdhP_&#!
zILrepPQ3lH+MD2ah%cNpLUnh|krT`{0`6jt7nnidoqtWHJLfYz&oAH>uX$(~Bl~y5
zd)K~za)w(6-qn*>_h&$HGyo5itug|M0{ny%24Kl2{CtdZyh{>Qq+Rv%@gn+Et;PbY
zar>%E<#B?ei3bcXIhJ(VOV&xF#3&iyJ8cTkx2WbCS^7>;kM@N)dAobH_@nEJrf^WX
zikC0dF)S<VT3TA%UKzXRC-<9^qFWIX6Azv(%C21Ohy~ubjE&5*-wA==V<!#W>7V}d
z`DAE@Qe%ESo7XSn9Td~bV3^%qr9x?aYp=uWp}$1jIqxXT)T{EAPra4nm0*dpQX~sj
zP|*CZm{+-*&HfHa9*nL0Unz_}?(e^`GwZ-Q_>@Nn6{+#5@FF3jm*n+Nw<EN2KAF|6
zy#UsTi6BhWzLy*`XaeMYZU6)MHvoqez7w|nR#?HG^tIrTDLwn_vrd?88sbw;5x=vi
zn==h;%IsBaZ5ctZcxeRxER(HJs;;D~Br_e3#U-L%UHV$B(}8RiOLR$zG$AqJ8&Q^{
zC-T}vR+6lir^>mhj1F=hHIq>ym&<HN$`qj2mkT9TYxMMkcN_Jlh+!*&mH2d<`iK@p
z*RlGzZ@xj}2!6l1D)xl{Fo<AoNx<N2zqhlqv$cjpt@!uDlMIPL_pjN6ui7mdI+|{j
zjiBG8^qqhFq4y{D_+;#_k1aS9K9~yf%^a6MAZF4Q%X>%Cy#a%@-?Bx}UOmO8bS#{V
zu~YBj@eI01@Jz#cn)h8TChiRhDWoS!XH_6aRkJ_d>~>#YD;G;|Y`yog)c${%K>Fgl
z2j%nLXShkGsJE9IFqkvy^4&32@+AS3fvV2V&dWUNb3s>ESI0oZu5{PMMzY!yl8|W3
z>3H<&&=yHUyjcQrQ|OB0O*zuFC=SEkIzk?#(|)|r41(9qO(m`{gIW62zj_;yPf6vV
zcK=9)z7j9lxhy$S&+&XR$oR$P-m6I=q&qh<Q814$m(EVsnRBDg#adgN?Fl_4Z+Qia
zEe<7h)Pi~~{$P%cCiv@(_}7okNAG5M>03`W-fne0S*E?-mz`wkvP*IEDdMBTt8VM@
zB*+JDQf$kE`dAW2Q)qv?-x@<$?wcDCrc%`2j#Gt;<=kJ)78g3d5?!;<qa{qv&kYLN
zxOaOPowNglwt$JwTj1hF-k?HssyD~m^DU$9|AD})3Bi2;sUu7B)kCe+NRjyIWBql(
z(A_f44WEO9Lo>i;uF-8{pg34wUVf1NFuxO+jzd*&^@y0a2{iq>{d4-5inr4&9R*Da
zaDSY2nqyri^9@Bs$T*-=iuNb#K}r?iNm#)g1?65|1+!-B$0V{S4VWcj%aJJ1G$dpX
z<zuGpcV*P_>a{xNlxRGEhp5oytgtC8fA%SeJ3ghbka|+)702Hw;XR}mYU=~j4}840
zCQpXwxGZOi?aG(UepOD^4v+>locbAaLIqCupH{eIhD`+j>Ny<pS??>oco)Ky!dR;S
z@bE=v75OhcK+V$Iv0Zq)TKg*mU>^!E=f7krjio-E{6)?_l0*IE)><QQlc2C~t^3)A
zrwE;Q_mfZRN3YpI<gDo%(Yq1-w;%Bi_5r%nqu3K4yM#X7W`vvvLa)_<^Aerr81>I%
zl)EJa84mS5K}?4MK`0tJOA9%sqMoEF;p~VR*0=i~WfdyI*?;`#u)rj3FbE}KV(YK0
zS0J5`M6GT7=~GDkwWZVM#NJu?ioUFv)wWWP5!@Y$@K~@|d2Jk`QO#CuIe7V*!i2P|
z_!p<^P%jE7mP`cC?qp#BNl3+Mc>9z87CFg~aN_pnL*uUVoFPX4cn5iM7sGEXAL@^l
z4-a5c0YMmK$VO8~?vhBfth~ya7F-#l1atU<*^;O~ClwsiStHC$ej3)~HW5>PaUonR
zv)mw!a&-T;KJ=3ag+9HZ)~gM1=V95cvgE@F=%tFA`iXK(ipCA;kdF|!C7|SKcS6p6
zT0r!HkX?(mmC}D`WF;HH{#6RQe(aD^2qB4Px2>}P`Si?8dGzbkZlQGaLlHEr?41bd
z8A(C&*8B9e3Za>vh_6Ku8IPs&2;?u4BMGDs65Bn$g%;wNewNxyD_4P;H@CwJ(L#B=
zz1vShnpxdZUV~OQl=TgFZsbRdQ!lAc`w{O7syN`nh+Oi~dX!Lm#~EROZXM5mNCN1p
znVyLkPqtqD_FI=l2E&XRTJ6hQRfiy4nU2JckV%8*kC0mE2Q-W0L0w<pdq2ESSzB8R
zYL*6&TE@6#iz5H$`KKD(EuO_B6-23n>fU+Ryapoq-YBv4nfEVpu7Yq=w;xM(PI2#t
zsST}k;#}GCbw?DR^3zou(Ilr}6jqT@RU@gB;-V(?TFMVUhYRv%5pniA^vEf$qn2zF
zjOH|KjwRJ5DqSFv%?;<v!yiOdG@whr@!}~t5!3EyFGs%0v>IlsldP(u2>8a*N*s_G
z&inZNO2x6Nt83l7iqTmbCp-Hr%%&0sfkI<Wq}|cY$O=UMc=3!STX<fbuRSX*_yh!`
zuYtU(-sfbq((5mQ=f4V?6&@f3I=^%{vFCb_-+gnP`+ZM^D#9}!miH|p0?9=rOdK<k
zfAbbrz_K<JZ+G3(BhD`<m~`}pu^sB`D?A}`z|Ij}953`jPm%<i_VrxM0I-o-vBbXV
z5Oy;f*h?-7UkGXpP_(BY;*+)|pPhD^w(4C8FOX+?&JbKooYl;Q7Fp&r`WVn@2im?S
zlFuklTc}I=s0K^Esd|!4ug{hDmp0kYDZ*=K&>Kcw@sXv^vxi9D3+y#}Bu)FOoq*!#
z=*R~wt~Sd>@FG8YURnR=jsr9IHKOkE=4Kq%Ah0|sRab|Of$A9>@q0}Ncugv*S#nC@
zf4l&|sir51jS{{FTSPf`W_r_ki@^Ci$?VtFf{u4rPEL*t5s&TxeBx&UP1=0VT%t>1
zLuQT<sgo|z3yj9&o@T-&mN*4gTOazDcoYiUGWijX`qLao$~WJj(BWg{T>P_w+mZI6
z)BI2IVrlz>_csVi^W1Hu1UL<Nal{xOdQi~L3YplWKYvfbJ-N7{wjCq*c=28fCbfmI
ze%%5_(h$K(OKU4JlX_n8)$%Gwt;Z%QEWE)8n4^yryWMF>$cL!fS$;nV%*mMWFr!FE
zs}k5A7Bxt3c>_#TLsYoBJumoO|C0CqcY-BUM8B(zo4hA9EZonKkl8GOX`<hc0_)Ji
z9CVv9L+9bKiNVHH<C>f-43nPb`C}Bfni&if_G2aTH1{Z8`tbKaqD1BJ=>99rrKC4J
zx|*~$k$E*`nwTBjyN<>2mwOnW&Fh>a9<0muRjVv(%Gan=_7v9WRkvcAnVFb~dA3zo
zV|aOa0qMp<53DG1jDbi_olh4j5v0vKi~+q@izI50cOG&=_3zzRvMl^Q0y{u~j$h*_
zP`1D_i(w9cV3n=S9gTrzAb0%?JFW6Z|MDL)Fhq$^^Q*Av^<h(5yTTVh+bG(GJaC$)
zf3v}to`Rbdf+7_H+L_0`yby(syQ>sN3Y2MS4P!A!G7N}*M%E4)jo2<nSf{$mSbMmk
zYf}iN;`ee#!XM{Cat!rqSSEs*aNiXF#Kk^~nA*v5B(dn8cd=4k?+>QuhDUvdjJxNI
zawRf!T5s5<Rp)Qkk{>+rIaruNGI9>Fa|zwdf%DWBLwZ%}q9cC~JI9)5fNiiTppwLB
z&SN*n&anb!R9G1tiEe!O;S~XEvwKJJl_bmtxTm&*G!achL*I@l`opWFI(`eU2wIDz
zBoz7I+rH0)?I1a(KIm8A;cBPgrUNB5ifQ1b%?HmJHN5X#f4A3>7@*s-y1hDEK8U})
zy?w2J2e%|!!tcxEW7?E0%6<B*4UjZ+42-ByQU(Twn74SDresH6eH%wiVF;|Mxaf@Y
zJnB2|N$C+aQ?b%*W$G6CY0jU}XS;jHQ0_n&K?*UAv%=K|Rya4!5MDA2VnsIk{s6Iq
z;n>5UM3ek7bUFJ654k|9Cc5A9_A_O82~!eJeE883#V|Q|Zpi1&(t~?>`9gadVJexr
zs5bFkHS(o+AbVvY6G-zNd%3IJ28T&36vWk6KQ>sQ=ssg08rM_-Ls`u`e7~1MDp8v?
zJU?G4@9}N?y>|p2lDP*W(4eDpWEaDBu&5ukKJEwpk}WnDqJO_2Asg_8*B?F|f7S>h
z1J>o#;_p^K?TAIgtXmhGshCiP@C6`U+z=|_hn(n+YI0yAucWb?b_s<{@?++PV?Uk{
zD7$`^?9$TbsGLuoBwtE3cL}&9mU$Qnz`DzF5-P_VEz~<8lm)oUCgN3P8#3LGqP)#e
z`|H1)9;xawzy1{RRxr3`{T{E^Ew>V`6bI`~3NPI|%tee8Ti&8(8XQ~Upfj;di>6U$
zx(_aBj_p_X(45cDu8Yp2*3nhoVvhfeg*5b_jN9@70z=eU%UMlVXv=esZx*8kNaSK$
zR{>$x+{)PS<DKw-Zoq#r7{Z9e>;}PiJF#G`$aoeGr<DgXc|fT3a0~H2MW#tlG60u7
zWi2_sWlEF>JWN&is_!qivW435fQSkLzpuj<W`Wr)e)7>^UM4D(y$W4RD-_A_NrPLz
zKR9Y?$a30;uZw2r^d}^^*a#vbkYqBDXIs*O+AQ5o$uLuknU$Yz9qEyXu8Ox?B(Dd<
zO<&lY;$=G0!BO*;?*oxRb%UcEUSm^JN`6``5}$m~I{Twi@g;@~eN}u}!wzdS-b08c
z7ZvQStw3=jH;Dr=pLBv4>g6+c=1Li7W=dy^1NN}!U!J=Y`4}znEnsi>*|$4+IdfhL
zv(3n+#1rw~*h|n!lGbE`St|xL9t?yI&Z<BIs`3By>9R!NrqQayOp1d?V|44#C<0p;
z*ey(2u3bzsnx8TYGeY*=@FpG^Bw}!N;i}+wG!C8av62vtSB^GVn7)8`H^Jp=^OROi
zhJ7ib(w0P^RkDdE8`rc552nu1<I@|j9+-P_#LU6*Hc$9T5v&rBbZ9o|pFS0_bCCxY
z;`D#f3lFe3MPc7dRgFV+9ISGA&;`Di{+(HZ`8Gz=>x9|3X2(|-n{g*q8Ug6At3P-6
zn3Ij+_h)KhMuR}iN8+^(E{`k8=qt*!yJg|O?}{SHk~_Y6Pd|D{Aq0_Fb0ZEIv^;vG
z%N%CqjgG1JFvqHGbMu?3wSn5=9KjouRjKw++KW&N2Rq(}lL5;U%JAH8Ul|&-6v4|Y
z;O@c^@a7})zY1+cBpoO9rk#IjQhht_dwaG}ocZO;7YipkSC_Re$l2MM5x3R*61fyM
z-=sf2jG_;~rT~mB25eQ{MO%4wu7aix1Ta7Nr#y(h1T=FoK2RT3LPg1ter3r1fjO>B
zx6lC3HCS_&F*z5`(X%$dWS(rM)&2Cwy@G(Yj_@^rHTt=AAOx4{$zQmQnCXTJusdI)
zJgFd==j=Z^Eq+Uxu8ABFbq)JEG{)J<em@Tn6*1D4*RvB`)xhvT5G<pK9P!Ao`TY3^
z!F3D74}BpB_O7l;LTezC&1sHT_geQ4!UVKsF+lhrf8UIfYNZ(?yo?0w%35OF)$Qfn
zqQ_!*D|P~tFu{Hfc?1u7F>ac#0Tnr-%b&k#jBT5E#f>1gEC%=)s7aBY2JXGhxAF`D
zyFj(*k?65iFvy*J_?5e2s0>&s-_x9nw{~hE{9Y#XyP`RS5Kr^h7eE=HQ2TT5$3t7<
z!D82aFl#!lTC4dRki7XQ>iO;I`mdWVqH0#Gv=*l?QGfn0cyIx+c}yB<@K*T8ez*9e
z_jEsMCn|=_RqJno+;4aUND60_rv?&t=oBsPd_Px^y6#G9aCkQ9cy`xUcqr~`rq%#_
z|Ia@nHuM54Q2mY8zkT!g;4#K=0akq?K&D-MNB0%|D%f}o>wb2g*zr!a2CQyMK1+Fe
z9I=)oge-n1p!@GFh;O*w^?hPSoSyd^DLEP0F_^g%@^%CMsCdEfXbj+KOPgR*jjN&o
zy^>2Cj<d5EGe<ttMi>^K7qkBw1RwQ44K=rnBkFy8y?R|Y&dW6njf@@L!%<11WOw8N
z`!qc=tciOa-LyW)GLX`id0Yij`gLpEN8NBz`LqnqEnjIbHGKFhB(@$he4hS{=6Iz1
z+(fF`S9*`+$)KtF*(&6f3rI7%sP4UD0}f!E9&hWPy?ghr9W?VNAbbQTH-9O&HW7EW
z;_K|dpE~O|#9({_V_2yk4CdSU^lRetPya2`|9W>rWbw>}gJoagizY${P?2T8MnFk*
zwVAj@H>T5qX*jfcG0Ag~a~M<9-M~mTyasYi9*Z|ToCWMaHVB=p=-zUbArFoe8)aZp
z$4W!r*i#&Dbz=*zxt^PwwUKb5VGjSIji9u|DMiCwNPd9YyM$i%9=&&>5=m71-BX`e
zaVb6M8aofj%D6xRJD2$3H_NA4C_@zDrx&56*MoW*mxgg~LqT_n_hfgxe=A7>yKaGe
zW*aCzq^zvydamZ`28}2GG%}!RKvY&yX%S$AJ=hp7hS`7xPYnn1w3Nw_zm!$K{q}>b
zKs;nnzPb42cmrW-tYSd;g=tYsi?6f>VBI*gNLE*G?H%`J1AFw>%ACT~+b~|eQfLm)
z*B#FiJZEJ*74>)9#0anPMw|v#2q;o$IN|C#b2KND%sq4z@fMYR!LU7UQ6b!P$w)Kc
z;~+h_YfED4>RF;O0MB{({fRPTRdTU3#3DCbke$&7%l6_-9+3eq)v<@Ec;MU9F!2FB
z69${gOk}j~$4*{bVd^;8N<uOb=GM=x@<8t{Z)li9JTByYXfWRG4+0S{>V92ueehm!
z=2>_G3?_c7$%^bDp#EUqHTfXX{66;M`h*dXo{9ULIOg9IGQJex)Rnr>_tjL-&{ly_
zs_G*~_k|C0EQm1JZocKwUiB>bBvn!nbMpJCsl=ld>hMVtuna~#UsENmsC*B+f(!1i
zu>_NP=w2%M!Nt%Nu{|DqUr$*a$S1Nd=F?dx_<7Q)hN%b#CFSeE`^?QeRp6UJ!}gGz
zHNKeDf@1Gvvq*PvacSc{tMI8(E>=>_LuX4#cvM(`QZL1@cm-TBHqGRgoM{_^trhz1
z+15Tn2bsnG*S^?&K<U$ny<;p_@^nLywoj>7iDN6e{6gYHG_glwh0Hs6MJama4HhD%
zmUDpri);6p-Z&NxrAT<tWmZuC$J^D9Z~vbo^s-~0wK8Z31wJGiK?jfzE%Bf{Dg0A_
zmP4#q{PgXMf@PP<zB&CMWAT&mw&@q9*QIvcx$me~AzQV{UBxx<5K2nys`&SbS62ef
z&7LZ#bnG0eqc$vQ=PC$|$3}@M{8fTF`i2p_d9-xTuP`tAwnE+#UT&&u7p^;CuMz&R
z()!55{zW1Z`hBd~qb|pA=@=tkAJC(qs%RAM4N0M4disRADVx(UOMFtlu8?6W#w^7S
zXxtF5z;2nA8=$Wh9+y9}bE+2@a=>;GsL7N>#_o<g-3`0=FqdWJVu<!wfK67x3GPYF
zWD*YjabwdA7SX8vQ<Qa#0==gK!>VJ#@#XnS0Ri2_qnaCka`&1v4M+g1!XX;>x%ymD
zik<GPTB7*B0B<n3UekQ=Fp&{FJQ|tYlRnJpqJl+Dmo^Pn>(k=mVzo?cj=TGj$JG>~
ztnxi2#UhhIX2q5@G2~iR6pjn?I1<b4VtcXd0ZLKkEa`4C^)4I<@Ab9T#%bRXj=5wg
zNrHN>UW-)A%py|;uPzb_*yDyylFpziqQ5?f{P;;qqc3W$sClb?2~T}29i41?S+>Pj
zIl@i80>l0&qWcwsGd7d|w<h_PAoq)bN^(^5ws6z6uWnm_I;6xO)+{DT90B8>T_Z?6
z<rh?F>)Ag%oL$bY^k)3So}oz662sVcCj+o}V0k+l!G=5y75g`d=iN(*FDn_KnH2`l
zLRa)xg)uP+&<0x)!}eK{@?5k2?(X8FV;BH44LS8B@OW~>O}3+Eg^fP$4M!But@1D-
zo+7*!g1Vou_XGLFw39rE;%KJFdnABpIGT-fo$8(ld9jnwz1#Qa=0f#ISG#0;dDCR_
z(qyRRipO$B?R}YW*1IvTWYQuC%f?c*CL@K<^L*Oo5^xx@-_tv*cGV>Flm{&XOBAl4
z%Q5^OwuDPj&Mb^O<o+MlMac$tC8(x&IU9s-Je+5p_|Mkyzwgy-yt{SJ@O%vs0(e+$
zyrbdt>MGY9&$9cC561Gc-}-l?vH>MV;G+>-!(PoUKuBoa|5%`0FD@ddo!NgP92XTR
z_wCigxWq_qcQKo<&xAOk<ZD@(WOV}AKs}}b6A5odhop{?Ub~&aQF?K=%+hooAnu+D
z7QI<WxZjQA>nCw&!Bqo?6W=d^!av|HCq5WR!Pi}`WyD_9r=pH#Z2Pd|w(lgcmw0q>
zes_=x&6*+up97{GiQeO;S{saR?GL12R1dO?3vPjoWMh^J@f;w2zu}0g2IeQ5Z^4E#
zo8=dU7M>HoazDC1BpN^kjd-Vyfa8S6vDinF{w806ZtdwU((KIula_z>3`ch?wWP$D
z-Pi!R8p_qy#8A|a4$%pcyTAlN@R3xvj1P^bm5)Ot2qyWFj^CV!`!hSMTrtFNq$u;!
zqCI#krYjepSvpK<-yZ=jzlhT?4dJSNl#rW6v>rqh>F!-gl#ysP?A<E!$zA#?Pw_0?
zkaWDh3=WA1Rkx-OFM!I_;bbF$kwo`VHUWO%=M+|YiW#<|Wt~;`A<9x@KHX<&cR%{f
zGfjVi-@mjbjSFZ^t-gGCrIiFKB5+@MTX}h+N@#O%@-|L&xy0qkZ%^p%Pq5_d2z#Pw
z{sRLsOv*uLQ}W4^3gS_rrAB&o4iyhAy-cnQ9^P_iCB{Q<a#hAKJz6W#uTqnNN(CE_
z2{ki#ufT}=Ji@kWb3OA{ds%lhA8sZC;+dTVMGB@lce=&N=0HT&=6C$j<BM{+D0UQ$
zS*vGGY^sSah_&T=ja4MA({OY9GSc^(9D&1<W+GV_(w&H0X;H3)P0QJGkjN(oD#`bh
z7l1^i)VHX>IztPk0dNGB8Ve?OOYi@?u0|gjJYpS+Zu<fB?pi2i(vYz%E(JiO&UW}P
z{%h^IDtP$M&P&rg?@nh#kcgwg8B*jw-P`*yVt(EQ&F*yIE6#l`E`pt%h;K@tMUT9_
zy^&A-x)FI(4?g%b6J}Qi!_+o1e|cV)C&a*5>4HrC`?+sY-$Zxj$}7Ueff|`TM;ygt
zdva;O7-N@khmMI&=jY+224{H$s)|i~=m0$XoLz}hW}-NW$o2E)QM_(i1Y~pg8c47j
zu?arPgIOFRwA}FRIJzR4*OHQaRL3eR+3g`rel3?5Deyo`_Yhb#an8=p#v4a~#S}dl
zv!VNvO_p43?l{^RJeS#azN*%j-&BIYO$!k6F?SXyAd@yp#F=RPVyyRO?0<Bd;6P-n
zgR-zWg&j3VevM#66d^=4sAgx-cl6`t5_MoNO)#L_R06C8!yK`dl|8f!vN_IYd`;{w
zL{2{2sY^l!+*F{Ly@;#>9tz(`jm{$7AK+^hV=ACbu{taH2UN1MyxIKbPq_O@g@}wG
zUY-sJQCYXWUAzS{eY)Hf=TM`#;(-;trI{V2V@E#f<vaY*<Wb10@?aRhh2o~>;JOBl
zJ5&m@?q2miskk>s&MVg|yvds**Pv&!=7Xh4;xHsW&aUGDyrfN&KVJ$hM9>?^L}3?K
zRk3U)|2SHS5?u2^$TIbF_$SZw?+5T>I5!Fy6i4dnn6pF(E!z6)^foJN($N<x>Su84
zM#TGmk8NpXkdqTuRB7T)=GoGZK>;2vftTNlGtqE3K;{lVm3*S^aAm=xScbSyz%>Jc
z9A;sEZrcPg^nMsy-jcj<5HYkR<rjoJ?dLo^jgoTkpqSe}c;+yIZxJKQjLQtJSN(@Y
z<ESNMS-<gvW(N#D#z+WXV_mmD{?}#UulJ!4yL>ObO-iAp=s#LXNk6}idB5YV-W!|r
zL4X#Q0dp&M_V|B#56uAgr9sjR5-!t3*Pv_cs^;~+XJ5M$z^kK=f6-#)&o8J#2p0!-
zRNhopGEW1cuw<kKu|K?omcK6rVV`+9CYsH*EmvQvuT%ZwC0>BszImf1#R8R*3CMqB
z7;+kq$xeD)G(#?(JCn4WNHyEKP^^v*qHDSRu(ZYKI#GvXyL+=W29(g_weG%?TCM;s
z8yf}&2`9zYT07+T>5rK^AKtFOmk|KTQNXs7?Jo#ampm=kwMY1$Fo9|o=wqzXCnhE`
zbZ;Sx4O`B>I*jCVb8%%m5nVjPDaY_GZRD$~t6+3jaB!dkSNS&9=3{GX14CN6jXEkE
z?$3zQw0kDld!1w{c9pVFo1B}jnt7wlHzFkY>J<^Zy4<BT&AN}^LxT0hN-Nq(sK0nw
zK2<;&*H(M|fTk82Z-{EMh&LTk_D-1;uIdY3B(_C<vtUYqyQX;w{2dqJ4m|Hm0Yzo0
zzyCG$BgkgB*cI$$A<Fu8fBrv$+JEz&$)xaLAEgDzNNa03HiJPJEoH6IAn;?kzw7(w
zuwK;XdFQGqZxdCD(&_Cyq@y7gKd$-^yz#7a#G^wO_AUZx@FpfEU=$(6rdX^);sM=b
zOD2Pr7-QiiLRPieHGOZtdHN`s{Ht3n^2mlSQ7c+BM2ML3rG$;lazDP!G3WH+<_Nz6
z%kGhFoWl99&Cf79b>C%6)Zr6XBkfGwn{bPoqIFiKupsCN!=63w&}536$wm$`!VcYS
zo;iAcz~W{Em-{Xf06Rnyzb+@W^z}&^0-ikKyNfpf;BAk_pX>P{Z}5l5$3gpc=hC5t
z@&g!Hm;?0a8=xNk>Cl#~3<}m@<+JT!+MBC|b6_)}_!fy0Y<&|i<i=b1leq{W!P8!D
z_gvizP*?BJ6;{g9ILzJj%goH&0y3bcQ>J(6lIlH&6$XJJleQTN?S!w~VW@jp$lHp{
zr33WE@xDwl5aKw7mowCuHkC9(U9X;Kfvr9N{$zFw&-1g=;#Wj19L_!!P2|{Bp<8X+
zN=R62G7xu`CtEsbV0Xp7JR#^uQ(<vM1(W5>?e)165uZ!P=NEtM75&w8%9sN}z^Em@
z_EDQWg(jGr?~;H0e||4a%9dEo*Ha*^J4Cb3HR+j--emVpiTM+dDw3r5OD)TWdrU`)
zxxN`UnI`z@(&3P&k>QQ4mlu|h$95$m>-09k^^5k`gvFY;F6Z}<k^QD-JqcO2EqDzX
z)>D#hZnU>|Gwo@ypi+0%hMc(bkahJ*nYuu@eGa+BPrUbMccc=Pq9~f0S$W9JGwUNv
zgZ4=pbRQ7_dOQv)O=;l(Ey=`8qnb~q_73Cc;2A5F>7+cO#qhJ~VVh0*Ax^S<ZGvia
zgt~l)N<Kb4FKd#aBVh(J6D$a7?xR3M2mnuMj@35axYK5g7;SH79W1nwy^1~moie&>
z*fgD0f!9_%c)z1dK?VySU<jjtC%J^>Pu-`>elizF#D%RRF!b(lUIVc+T~lL)Kbk^W
zjAN5+`!p@P+1xN9qB~bMGB5I%U=KQLETL2(Nhw*ng)-(>f?=E-bdfokTmGJD-6L3e
zdy%vVwn9|%1NWlRQmN{qlq`MrkK}UPWbfQjB=9v76l6nA(12Uqd#jO<A@c|%?;^H%
z&U}KnBR}@>sn;$|edaS#B=bXOpJaiUsNSfSnSD6QWPtRNLA=J}`u+STS*Ne}65Gzr
z?VQ+<pD(Y!s}5e!WZA$xTgYq9iT;(;^TYo}!w~~;dSoC)P>kx?VFPnCsEG2?zORJ9
zwn)kR+lR%b>$j`Ky+7)~nlaVa*RRC>tf118w~tJKMFM~!@SKXEW7!fx;<0gY|I`Qc
z>E2ZmBG`vdHTas&D(Dz&438~RHTI)`o#GH5@Ve~icn-cObK$Pw2-kPuf%`o;skHs)
z#f(ygDaQyaz`O>{!x}y#$MZ0xYpN>I6u(Hu)saRI!JVc>LIq)xXe>7}(nE{uQ)mo~
zg96~6?x!P-H7{qBu6jRadjUaptUA*H{q5S&K__sq%D?@x=IFgE_!TRIR%Vba1ju7r
zV<kmM8jCfgwnk1L!Besp*sG54k3|Zcr55wW?yo#AD;}X!dq>4Gyr1mvC6Jz*$-cy*
zl$w%9&oV-FvX4JPGk)yXZ5zT|Y9MCU=l%6%CgsD2*5;3DJ!hkv_1aWSY;$KTuFJ)%
zl=dI_Pk&hEbl%^1LD@S-AI)E{S%nuP+!mMTw_iop`Z&v6K7ZyXh%+Ehf&fmz%VksK
z51Zg*NgRUUV6rt{a6(Bm!MI803sRnUmYwRb6hEQ=`JdiH^CSWJ4jpmqV@G_5xS5Dy
z{a9Gf%3HnLnp*`RuB6AYJoZykj5Q;Plm|95FNpS2tQvH6<I}WC8I^r6E5%<2GfBfY
z;8yC;zRA4Ob9n5Wc7&zW*uG5X%bGr{;+kTy#Ny%ha>#$T>O8(HK7h(rgf6Y`D?Y6n
zFCU+-&;w2FX+DOEdV|3PDi&xh*#r>6&+C85BwA@39o$EDnBYpwyz%&aY#Z%^Hy_Sv
zXZ7mktvhu%PgPA#x`y~A{rc&nM~`;yj1F`7?3CTz-TMSy{*MXusb~nWLQ&AGH7d9K
zxeAwY2}oZc05DCNQGdumlh5{FXX}6eF+~Xy0`{<B>`fW~#vH~EXLN9KN-HVxz_OZt
zfgx&pG5bh9BbMK2HX`8FE=$(Y%EITkp8|C2l~qd&bP80ARaH6p=rdCl>nGM%4?_Hi
zY|NLI>v0eeNrbD&2HqT`(4lLWwb08=FaL<)X`Jo~-IF%pZ%6wX$GV9c4gp#LTS#Tt
zrj`8R_ksrCQN7d}(CJ^_W@O}~H&(!rky=I@ee?O%^h;A-5q=72)JbMY$LD@~FcjV!
z$dbywyWvsZmaTzZ=ewmtk5#XQ2$qoC|8ckW3zf96D3;9LARa_q<Bi0j<^=WUOAPEJ
z`+uIrZ8R|NzTLC@u3O3!ymTHIlshp%LhziPLv4#=5py6uGgF>Vh1wD;1)IqEqP*sD
z89KKpywu?STwJ`5)$w{5f0<ITk7!<otITlSZSuWs{GL|qsw{6qv#(igX(HA#R-M~l
z_BAyi;w&l}sg3dUknEKEZy}~58XE6ECJeE^-)!u%v$nBQiSe7vp5jc+%%IzX{ZLkO
z?3pdI8OaoTW}|XuTlM2v8IPFRb7&<k%f2uIhRk!>xQ>rIGF=X+d{jQ`Aw^H_0u4k#
zyf`li#w>DH{g1K!zw<%%4B?9hvWq0_fPolDU<_=sV;e37aag~fqElbsH-CDmGEQ*F
z4u{I?FW&3dX`dMyDm^kWfyN3C9~U1_(FC&6oYst%n(QiexwIxpA)99}Mg|kccD9l}
zK`aLAEuu&*<Ta&KX+i?!`xah?GC}QX>Ri+E)s9kISGZWH3S$dJJ$y`4RmZ;%(;`gM
zS8?k!@{gnbRAi{)F6HZCrx_of7)?Dr^&A=FN=|tlsbr$lbokOadDZKzvB)>K%dA^l
zWHwCUnN$S-0S|+i3Xy?nEbrCQ?c&l5r9@ztvBwC*ov0b{2z_A)>^ggVa34Z)wu1lT
zdnQXx;-eA`TJMZze4AF`8UZl+QWMek``@#Xz*)ND2L<EmbZ2Metu(;H)%N$FTYs7$
z1KWctHiwHR7I7hVz}3PZt1y|arKMA?GF2)}zDkJBB$G4XQ3T{`PBIhN0`XY%Xiq`B
zLV%mIR(vS>z7i!4xsva3=5ztQGf0P6S*Bfilxl4+6NRbi3W?Z%fIzF^(WR97ax)=d
zjc;I#Ut3!nQN_>b`Sz~0O3FvBh@}=XkKt;|cuOURmuXU7fmN!LnaW<tTB}|9Feh)7
zG$yE#F6O3&lKv!wbvjrRBpL|71B<emUYv(Jz)7mH{L6JLH{)?7kL8=_|L2eh!*2{^
zcLDly`J6BF=%S!gRFwCRNB7$i!3@bH?v12!(3Fx(H1^rB+gY^In9Z3CD`ka8c#CV-
zry}p+5sS_vVm+MP(CD<lxYX+0LP(qms;PYw2Mj(Z2Js3KlK*bMT>dQ?`Ew(Nry5bQ
zJpQ}_T+qSYXEp}jv6y38A(65C+TEy5__u{zJ`;-S>Y40k1si96HeEmE$L30<paD&~
z586h&Z;e~Mqu5toX?gp3l!;W!-sD8w-^WtW#RZ9FOd)Zc9g3~4A33w3c5PrT@ZGPf
z*aj=G`WniRA8I%1zeUl3jESk&h`58+z_a8oKNxBDP2K%KR6g5@JV^2c(QjEhe?^W&
zlZ5Okv}}6GX3D^$Dc+-1xe@US`nrZZGRBrEgPlXql;;*Z;lr8L%%9Igox$*V{6=?+
z1z~ArWu>fS(;UlLyR=x%dn6KzdaN&m$kxrkie46apD#r+=)UF*t9Gd=Z&|ULMyFb%
zwtr*Od#-1Xy0ljgGctiX+QyfGty_k7hJP~}rGRg?I3mzb*9XLuFo)TrZ>ZL9@9vJ)
z(}p1;?A_&NQ$BpEH1D#?SFY}HW~Jcq^6-RTMWs{0$e(hWmFnbRy4WHP(Gr(~t+}5l
znpLIVzMEd@98ITgYR66GK0z=EF)H7e&adKUHM%64b6`aTP1N?zZW!*faZEnIvYLRi
zk*r)|rzKbTv%9Fizy76X4*@C8=$W&+UKR>;Aufz=UtWDeUp~Y&TyX~c-M9Vfy3wkN
z0!NMAr~i1S7~rkj3{8nRwFN1B7yf}&3rpWjU0cz46O*fSDyoa_3!Hx+A^SqZ!SOnp
zSF}JXwa~1@=Bt(~#L4UUrI8#2A;G6qkk4vWX<ZUGcp;vHb;@3+jxTqA#d^b~kkF>G
zEnc;buo@*UWod+$b%oB?f$RnS9NQWpk)-DUcYQ&AK1Vt0^XxL|s*tyDwU?gLLysI9
zyBnYahp_2#c~}~+%~S2j<`>o0bZlny9DJu*xP|5A?jJXyQY7E*W1`ni;*s)NM;ilJ
z@Eee6v+R8U1IDk)ta4uAqvn~=R-WP~hyt!_?0{FU{E4+X|B5mv_diKDMf!O4%X%o3
zo|<(qLAI4^)a{)ev~UQH*r}%GPAxZMJN1!3;~Tnj<5t%J?4B9Ff_no>oW|{%;Le}>
zo?(G?cmL5K{?!IdwSKNXA{UR7G4^3hla!#FS}627>B=Ltd6ULCwx5A$^k_ww{XP3b
z@7dvaNTC)EWX9&=_`Qh;iO)Eg3o|k^8CjT_p*R#!ZIf=3*2jkBO+mb#FM1;7i$K;=
zIKvbSK8j<X#VXg4VjT$~k;$W*3X*q}fsSS4VcDSX@lYFF{Pc3K(>(RkLo^vPxvkdw
zLOd>tx5{4jNd1_fAMJSeX!~}xlfhxZ<IG2krlq5KH#62iI!^P!S51bPpI_u63>a@>
z1ffr~)A7*tT{R^3D@)@I%mL^sRq<_{Z?dwjTsw!`LV8NTPTHYB0h@eTSSzI|zNe$d
z@+~?#@74a>9bfQ4?+#;d!acy5n;%t&5x45>EFjWwyKl;F;UN_893s2MYDnBRe*ls5
z`!pv(n{kJy^ujfvM_v!B3vPNIeVjA%`^<3Uw6c;mx887fIndk>0T-W>&#Be5^>yUr
zW^`5|M6u{2?%vpBhmV;oIJau)J7=u$92|jFRSue8iE>1?E<K#-^DCQj5$t5&_(>}%
zp=Kqs$jR-H-M5I+)pOBaILIyQ@+XvoG)V6R-X`9o(5M`jk`-I-+fQA#u}d?%=_n|H
zk6u-))lQvbMBrVCCrL>4OiH(pGJGK@$EyRaFIG-;vrwylhbpewj{dNbj}Ny}mUUFQ
z>};wbwJ?jWQ-s$#%X-))sPXVbaKz;!@ltsKzqf<fGT*l{nQlAJO5Cw*GpqW;wfl{i
z1S8bCv=Io6x=N{Row+Mz$S)=A0}}guKjqsQQ*!~y*4_u)!LqI{<6qc>NX|`6dE&Hk
z^;4l}G>`wzPAv+;EwZcm>7Gxp!w!xt2qwp>#Fy>Y5Ial1yPHAPP@;gpGtr@;bLT{H
z0x8b8A@>Rl!J58JxN)~DU*X&Cug@C>>8J7$ulAcb*T#k5aa~K;>-2FYhw*)eE32xq
zy1MWo5`m4XIlOAh%A-)lhDin+eGNo}Zqs}yP7(+YU3$^Jzn@RWTK=k9?nw~-UK^s(
zib$Ce682f`k#>1WbP_DBjJq59I_IM7{zEy&U8XUM4nn(%7=0wj$XY;C&Hx(UA@_zD
z0<D_1&dljjGMAM?QtF^UihQr%(UcpblYmQR#-pbr)6eCrUOM6jX+<<wos%zdjULBT
z-c!*FqCxt6#OwFLUTO4fRCz94Gu?t|wXMet<aWqs18jXFn4lW8^@dHhBM%mg3I1`d
zgcL9YKa~JQ7f4o%V!MDz7bC?+3{wGVa{}7`G_Lfxcg51Ocrd{4!M_@|*?EDgdvs>l
zVxFmap3_ylo_ojjeEU|ypSQOOiEQ`Q>p73}wCZTFZUQNr%fTD+Mpp6xWctOg2M5~M
zpEVp5bUF$7zYsWF_)|GN*3y!f=_IuA8V)`sWKsN{UC;EHWxtz|!7wQ9dZ4%+dXLkw
zp(u=#jcvyI<oeccT!7_At4g3#{<astN~Yh&u)0c02j;EGGxBmhG3!}@%d)B$M$_al
z`c*SFnQn1mAtt3|4;||)bfvP1qiEFw48(Obgn@VzDj%9XPr#*efpE9vG!1cKdvXFx
zI?1-(2KOz~e?Nd^dqhz5GVGz20icQCu^O}|U4ev7g{g<NVfu8FKX6QcLa^{Z?VMuK
z448P_q#~uBVfMAO!pN^Q-hFz#N8QDCfiPWrbfanv-=10Toe(y)w)V0lTEM~HJ~RK}
z`QF&Mp~q%S#b~_+-ButxBYi0L7t4E#WP8qzj@;*ZA8-cYm5Qhd?6pD$smyXO&dyh-
z_EY9s0!P%G((-1BA(?6Sqjnj_?9cRgxF151ZOa`L(*hboO3w;HK5~7-W@es3Wg5{I
zs+X1LZyx5s5?_L?dAA-`Wwm5HvxyMbX{{1WC}|ae81PDBb85ZUw}|AgWZp_6i*2~N
z;t&bExk#q$IL_qp*j6O^g>`g5ioJNb3WQ!LhX$g!|LNQ$Z_w@{`j|(fCG;~Fec>ze
zy`KZ?azmOIt>jm5wBzkRuMVK~brviRXlnNcj=&hnRD3Wz3XaDq4m?1spZ*fk%4*tf
zT0}xmQ!Glt-<zE5cxkL1%WJ$hH$OidMLm&aS9p8<v-a%FYx={7`vBDMfTXYVhM3_O
z+;s?kgZ3F-2dz0FP~G-YgiXv|5Up%vqK*CK#gi$PTh?u@gd`rHQALf(>FX$oP8awI
z%WD?6LiCsZJ=j$`tFHy#kZGx$H7gr=q{hEf%Z%J4bZ}Ce<EFoQMtDo<sF*fuon)x3
z%b!tVp+5UG5>GQHpYoSfI^5X1cMrzQZ?zt+@y*-cY&>vsWT@+qHwt)IUh3P1`R?2B
z6x@!-anXI@c5WRQe~q#!4E>=v;93+0Dx7ZiR1l|%JKeYB4eQON`W%2!dk!}v2o}Tq
z2e2SHNze{V@8h|xK>Q|L#?t@M_0~~Uwp;fwv4IV4U;~0|x<LeKX{1v^Q2`0*5J9?Y
z15(m0jigFRcS|=YNH<6$Ddq3l&-u>#yyrRZH->}3Kd9XMy05j?oO8`tW)whVjv~NO
zSKT9w<HDrm$+uMu$QxNde@!BZcbDVT!;ZV9kn^H<*L{voQ*8v8=kM+eYrVY^jm<Cl
zsiLeLPI>A5qf6Amv8sls^#m+bRDftcsjtM;?6Ex~+iBl93($G6#T+Hk#=ci`T}jEy
z6UZUvq*LF<O41=8T%%u1%enAZ_4>cMe!UlcHAk_|1gwG)y-zaUGpy;{<yA}~)(^%B
zHyv&sVL>w2mFmp%!K<a$sA6?Am;!<)mDlDydX-)!ytYcnCMA9HgkLg6v@teY8Xh8h
zb)jdeNrd|rv8Q(_z4dz|lWVgPcxvMbr2~idUf?{#hT=;kMYR4ohbKxRJ>+D`Nowo@
z!OhQS^oXuC|NpDb|85wgC5ynzSr#Lc{O;T5q<#fj&ghgB<@fwnu`n7jZ4e)AQ+Hlf
zL+l4N*_{^fu=xz+)p8c~uC7Ap1M_D}Dk^b44?augsOlT6Z+&TMBBkF}#b^rh+oI_#
z$l$5|OrG;8Pljy&P{kouU5p~g^tC})_^^6R2c9PLM>hRmnq!c$BGVP3j$al;7f*@$
zAPfXznsj}VI0j$sS{{8rcrFoGJGRi!k|)Re?W>KNTFKK%7e$sv$5uw1cDA25vbvSc
zN@!=0KvX=K;s|atu)yFo?t}`1sMCOI9^}8<JJ3LYKUo`4I;tgbw_A(N3R@q7W~S%e
zy?0FRtwO&qj-Mi)l@F(W;G_Mo%Zu(dxalRBF{R}7=M3=Gc~wsLig^QA$c3^`@G%aw
zM?VDQ(t1~F>p!uL9~f}LR~VlzW(_uZAn<M5`x$3MMAh;r`j4wCW76MFQ5KQ5;s`P|
zjHYnEJokgoHL!<QPm&8+E}sZ~vo0fkCdXem6GpANTmGSo>#NSkCuu)eu&ii$wdS5a
z4^wE=e(FWkM>nK6x~u)9$)NX<R@>W~JzZTsCo6$vu3U?}3p2%PErPp>0!z=T1wXmv
zBo*@7MOu9{(0{@#%Gi;n$wu?&4=oaeJ@#LmY_Ea!o6DEW1q<ebDQ45;E?lajr!GB1
zO&%4Ws2}hji=SB$UHucsz(z4u`M4$^-SI=#*!FV?R$Ux2m5%sd|2@vqAr&EPyEpM8
zk<_|tKP>*JgCUS3FE5YRVYNqbr?%-15y**%OEO4d1ai-~@bIU-{rzOr);sd!2N3g-
zDw$88Yx+UFq5w=S1%}|2$D*&BbJHVJ1uaXcWL1}d&a;gqSJ$eZ3QEeg(QnSbW`jK3
zt#xxaieJU<IuDMG%rZ#$&J?t)C^CQQk)dVNhJT0516@w5pVZl^X%vwgZ1}KG_N0$T
zyCcs{AYADUPnxE@M?I{kKOt@Bk<v3RnaWLQt8Q1};~alpnId$fpg9ABG4_S47W0a!
z@!#qHd8`&&iBZ>3Zf&j5X4d?7{U?>IWz@9sq5s`7_@gOk-G)IBz{?~$PvuVE!BR)=
z2jfD5G>ag~uGM+@tn%_F&x_7wt6%?M|M{~wHZ?W7z)xy)3R|8B(`T+eK?L*SYcyL{
z_vWUhpb_dA#!pYbB54LG!>mqa4|H)}X&&>b0LLOq`u;_15Es5jKT=4;TlO?%d4`Ge
z2bTcFU}4uJy=O|S*&CBs*pow91Nq=pV<n|ns#1?|4Ia6$Fpkr=!nh@=%mb}tfr4K+
zG|y;1tWm#Md^SwwbGY}VnrV-9XmndO#)&jJ{x+GS)hHU`=~Fta_a9?F7UT<A5<%%6
zkp&`vB(yZB{};}x570_SoRb)hS^lGY3Y9_ghXM4==X@zk*-Y?$!tXyBoWc4&1|ttx
z{x!z_{Z&#3<Juq|uxj`ElYDbOgui9U#ga}0JJ~6S;iXo4-F-TZmoK>}1#S61z@iHD
zf#&`xEGFMb&I$5B9vrTUAgSMyNx#_-dIb1Z7)cXSQq0PMW=N&l_F6+`b?2M+(cQif
zNaT#tA{tyWgd~L7YnQsbSVAc=p9Rz%OkS@i$x8`eglU9@CK)lGMMvjkxbQxWK|`0X
zOe`^u9D_yiZ!q;Q^OL$*vgODM2I}AK8H{Pa5<^JTK9z^DkJt8Mnriz5-7W|tGH1FF
zW|F>MybD^bf(#G#LJ?rZ*NAKKL_-7q-wmd?!eR(xBs`E8WyIjm{$;VL&f&Z*V6}%a
z3O3yZ`RD8omCK@i$15`7DAnL0rp@_|Y*6bBLU(mFt^f~PVTUhG25I84Oagde&3$s+
zV~SD~WPg{7))0a?i2lM=skkxRwqecV4>X1k6IUWdhhT+ypRNB`!n$8uS&b%L+{w$%
zmPpZ04u&X#=VUp)V4fGoTc(XoFK6Tt1{+XJj0=ln{+7u>eIb}5u9V}$%&g+@B=|l9
z4N0|ZTzd%r*hEEVt5XzH6|;&_io%3_(BXIvfiv-t9gR@Iaplvy96fQ_dCa`#n})(}
z=Ws+y()|El@h7s6<qJw?j(?70(W`)s4|v%Ei1~rEhkq`qXa8?pU0i(;Xr~i^d(CI9
zxjd-^<Ys+Q(Iad^8mj+(x=f4mSqovjS2qtnmX;>eIc6rTuZz6r{|UXz&i;X}WB2~g
zw^m^7yWB#(%0ue6Hv7FAfD^gPN5>Rp<Gj$l_845co8u_+fz7cuR&LAPq}YBt3Nd1k
zu1ZrZz|Y^~`$tqAurE*dDMBA=N=zRaOAv3qgG?VEYAk%Z&wng@Xyn{5aWS1+_(JA=
z?xmSukQ7DiRua9H&6DKxyKjYcDAr9DDq2<3&|_p?D3_al9HG~g@i+AlkKMAq)8et-
zYERtjP|nNrkX4~0;dW11IdMfedvB7FumK}S@A&h8t*7B-Ofg&Oo6g9ZaG;7&1S%oP
zXA2;_7a`(QsJMj-`Xl;(1^52@>!v#fpZNfHocHMtZnzZgenHg3o7#aiVa>}FI78BZ
z=5vB~c?owje&NP~Tu%WS#+rHc4v+6u?o$g4LJEFG_@6l&$>KjmTXPmLLN>5C=igS+
z*Owlf@+lx&WCSYJCBdUs;n8={cl^^r$=+V+DeKJi)_7Z`{)=_pEu%a+`ADklwS0N+
z7XAkhdV!cFVv-=LKxUgH-8G_+z55aP$L(3s+90xs1XUaMKFfq3y57IeFXVrZe|qtI
zJM5LavrQhyLZyDS)_y`hS>|Em?N7usQDNM4U5ZD_&p-L(yD_QGy_PJBu}qA6e>Xrm
z%yeQziq~ZdE^K;kh|vFl5s`Kq#T9tr&wYr|mUU*XRD=6%lC;AFJ;7>ip3CHm8r4Vt
znV(C%DTQ$mgtCXM{f^?fe@&T0)!CXb{CfuYccUeQd)#l7kS<#DxjO*M93fPu7z9In
z2w2rod!V<U2Z4Vw{TfEf?$=6}^s>ByZz4yooFK(T(Zu9k*c;wwPwfjIrMl#MC?LoW
zIfz^!27>FuzFHkwPnCUqO7Ps38TTyAT5lR$wR*vl7{8ZNT&}fZAU|~)YSLu7k1kXu
zsZEk8A^1vHpi#-O;kEVaxWN-29o=WFw8h$-`^`s@MFv$*URhgX89%hp&V4TCcm?Kl
zqsQOBSNFxf%6x5gpb}T#?H3#_YZr^Iuc+)$etUJjN8==%$4ld5IF%ktP9IL6;t4l@
zBb{bnd1Gwm)?=Pf5vP&om{iwH8EH)R`^=xs<5<<7^DH`9JO3$I*iVX}9U@l85fd8y
zN6$(e+WJ_5nwca@_*<1Skj&f;<o(Z-aqv7PnJ})^;zuVY==u{mV+kePwD4}>^nh?Y
z)u~v;tlB15xTUS_^E-#z&m?)&WdfZPBZEkLdKCHm0ipDqRL;qAVE8e6&v`hNL(dZX
zR8OdzF(>CBP}hpMuSC?bm|MF4&Qg2JY4!T`givm(>9<enOu%tb4)GE8k~l_$FIsY$
zNFySsa@+Uh1ixHahOy~)X_D#h*eKICgES}YD}=uimo(Spii7SVqfOdMSln$?0yq}N
z83Z_O#y-qwJXfEVP@q;~q0$Tux`z<`Af1%$FcQs+(0Rhval~h4nXeEw7R#h5lUNuB
zW9-@N6*)UK>CnZNekojB;?Q(^@BPZ7^?$Ol7;qt%>EC0~JVRA1rA?<PC|9_WnPkQP
z1lT1p$dEp)eV{o$GhJ%`qv+@uK;?UND598g#~F%ui{c?kQtMbAZErB`{n+o{pOen5
z7SeTCo0ndC6_;CU6?^oMvufr)io+#|1XzqnANkv2or))k_w||T>V7;iFvypV>X9b!
z`~rNXo=J7#F?RI~JknC99;Kc%z-|GA7vM=FBVDYt4&Rp6J%07cwZED(HBa8;)}<Fk
zv+M~e+^CgL-nk;E=SdX#_Jn8`9;uO6WrL1H;p^Bl*9UzUFEVl8`5&-N6%@d->l^PH
z^!E0}FZ+ujo;=~e!RJg0z)t8Xd_rovdE}^}mU8<u9V07quUpSZ$i3s}(XY3HxUJyk
zi{n=A&il%?*S_h!daVDx{QlMFDxzT|V48;v>#o0uE6DVD(R6s<ey&UQpM@3;>BHCu
zPS=<n*}XO3L#u_ello1io!;C|d>ZLKe?L?etzu%bL_cTJttp7jirYWDvhu0s&vo-m
zegWq~t$3N$+Lip?Hk_!WiHXWWwZc!Yl7ggl*hO7lKd0|@a~yUP8@+z5Q2?qKXozdS
zUMFQ{=19Y%h6>+|=ZSw>;UfX3AA@LQp^|@6<yERWup%*??d;`sn}YWC4#v5thfQ3F
zhHHhtO&I(&mM`LN>s>7NCI7j>lm_emz9ldHqfbxEkR#0ERx}Y0V~d8rh@CJ6YA^>=
z^GkO<hs7FgQJYNpQ6Vx?Spp^m<TJY1k*=^19?L^UG<5{rycW@Dwz!WS@t^%KojsK5
zc?<{FAH%X)j}9}DC6>7=V-(0f@$K9Hbq~r4*3b3}|Mub(DQx~0m|6IFh7l9Y5pr^G
z599rQv{%lfp5W(CpH{)LO=3#QD{m>a$A_}{hkj$TJ4w~mxA7nIDT<q>F|2f{M*I7J
z2w|PgHo{u8F*#f&G`&0>++t?zck2Z@2%<B&pwm+q04Bw+^(U#=*hJ*!F@K(ne7aJV
z)7-37UhYtJe<g?g-Ft8W5eG^F|7>20aJHPMatIt+2_5W@Y>c{c2x_?5=KA1Cak)m5
z@xYum*KqOYI933o7oD*8O?~_j-X!s(_yf$XcT=fjK^)rotGvQAkjN}No@a~MBoq7%
z@~ioMhNNbzpBXwn7ehRHLjHV9k?^j6lp!WuxVU<X?GCC+z}WkLC9MC?*O4O#9OE}2
zNS%unH8taAtAs4_{_O<-d;<TkH@oeo;*y*MR<b{@e;0Krf+k!)QtTHSg2y<JAll;i
z3*T;LLBKW;Gu*TOUi6#`vCYKCCnqyz`X0UeJBSyy`l(Thz%(1nH34j5!ItxIINt3*
znuG+=wE)8TZ@ijoSpi+-MCwmPt@HEq%}E_!PnI#?bN*vW8ft3wD%fMdQoxylZ=Fu~
zXYTk1&dA@WXNr_8zv+E692+@ddYEUXV)7z}<8Y&IFJf?6>2r*D^8?2EDeXyi?N3i{
zf1mwc(sGp{2<2I%$IS3i#=DhUY3KJep0uA0UyE0^$s~TwT+uxdZ)!|DHhW1q93GJJ
z)wap*An^-`WoBfrq=gzcZ)AAh&lSY?H1PSyi!D?Ji3I7iyB4#Y73PC@A_u^Vb`>Oa
z#i4Tf0K)kn^(Tvqr1o;Jp~1@oaQUN_I5_>lgr!06IRn|qh8*Iuk$OOj3&GWw9ULj>
zAKuv5DBDO@qzQw(c;U6R<^66T^UuqbPz)O0Cz?$xVv4G&Ie5H%PeU9VfviS&ONz0>
zZ8&6|8>;)O{g%3N*o|~wpECckq7Q$=?r??kHkte7ZVe<-fR}H)ii*1Pr0SDKj{JUy
z5=(erXK44%@GuwXewzFw!)~&~dnrCKsd(woSoNIt82g4@S!h=9SJx=U1u?%GgR`ho
zWajF$)O=EaafBL<XfavOHC=G9-@6|#qkx~Zl=t;XVkYMryD4R^e|VeD)~Es&;v@Xc
zCc%WM(|*D|c6Q$OcM3G_Oq-HG(%E7PLM_?Z(r*8E6D_W?2r!iRt*uvpr*QRW$A~%M
z8x~^(jU@D+6Uydi6l(l!O;ZL@VKJNtGQQMU9wm>g{UR>*lb~*f&@%xA=rf&qr)*OT
z3se;NHxntf3CyEVmoM6xk{AcEU%Y;IdwAd3-gz?$XM9h=()rm)0WOlOTKXGJ_~u-5
zLhkA?o!As?+I`xHSS$CrRz~m_>UGS)b|%EZlYKttn*Kd|KJYP8F}JQxZfjfDbgFFh
zMS;~PFbercY)WTCG6W{ULGTEdBsO->Rn%4fG~qsG7Hrzrm1wF{H_3JHtTOq4DHU{9
zW^pgKj)f<RmSNYEIf=Q13L)*hd}Dc)mVV(S<QzEyroDx~ki1@o$fvgp=@><yh4DRM
z(lSXfEqn+2W~LEs?^i-0olF-Wno1w8WM-B(!}3o+?wA|N<+XInp@%-W_WLqQM+AJL
z|NA19bi)8R0&Zq@lI?Cq25(9#r9j$O_TQU1g#3E4Idpp_K!IaFH?LAk`q_qY<omkT
zQilhrdQmL6QBO=`Y{bkeYgj)jgb|QhtoDp5WHJR)yTr#QCb}v={o-+gM|#v)V!&B#
z$rit(Mi>UVS`~{&PnDlP|MXE)<(70}<!8%WMK!U*rwBn?e;|*Z9twI1Kz|Ps^l!R~
z&MK)y`jwV$#35W)TSPK(Btx;!;$uExlr^TkMhI8x5qu(Nkik1LwL=DRj9NT>5BiGa
zFY4jQXy!^x^;SHSa)3$s1!z5c_8#E^LXK?y8`mTbXa!1tF4tN6U|{XdSSU^S@TzRq
zc~XD+kLLd|OK0N(a|*uWE`!EA^)OzqW-@Axg?xII^({Z|1OP8-%STYiNy&3HKi++&
zpqK(&czXP?Xf3IRmGKE<KP`uH494az2R~r!A?H~(O!xLm3=_Z;@ty-k{-fES?m!N}
zCskdKJoW|=;hMu#cel)PG!~2VvfC^gU8p=ZP2cmb-M&_P!}%C#%0jHDfnl?iS5QK#
z!qCT!k)7wE3C1{;7uTR%DArL)cqHF8bIaov*TLR${KUklgPrTXiC~1!pzEuQ3hBVj
zXMu{H!lR$oZU_9v8tVh^8Nq^t%m4X+2z?GP>i~u2>>tflC|xt_@J=#K>K~H}9a7?M
zA4oE80Mbcc)A>f%)j*Q`9&qC^3k$#3YKVeM&JKZCIAC)!BOs>u=`c1XKAtHeVpk-K
zc}v0}P0wj`jeVj=OG^IrWK(UeqQvD7J`;x1_0;{I68)KzjHANta1l;MRTL*iP_O?A
zf}rVq@mDk7icY5yoyv$4RTv$XkK`?{)KIQyd{Sf_&H!p<!QN4{6b=GsQCe0A5|{%w
z7Xt~$Qo=+sZ$`4Dc!ANuf8&inW3~CFakqLVyc<@NLPv87vT8P~L#_S;cN(#PQaO!C
z@nrUYdiL3PzD96&id7B)s$n$XK&7^}PWycSTsCv)R#%SC6MKxy?YwdRx)U%x-NbIE
zsQFkvD2U|{RO8h962g16KkL(qvZa3+lbQOl%F-C58_~RT7gHLW-kQ8DRZ2;nK_M>)
zLWGWva3i4!dY?DATZ~!I9?Q#nq_~MpKMjv*^hFdd@M*>#>)df1o#h#V<f~`i2mbMi
zXA8a$3s+GJSO8sceEs@WY9{%A8iRj*GtvZ+n4V%;xbmzJ?h#MQ>o+1rlK6q0<28^|
z8HCc6OOYZ48$o@O0{W5We?Bf`v-Bd!IFJ1KbPtrl<kRg4(XS7-(iSbk&^-e=0l`Zp
zZpw6C6_)4Wc{)+Jn5`BT*7sCs=@~ji%#^8jDVUZqj)nT3OmO7L_IyQ+i?wy?_j^j)
zd~z)65^CH0X=lb9cSQTV@pzw@dOc1w^~4mF|1g{WLorL8Nb$MRRF6MQN&Rp$mgz^Y
zfs$6K)Y~mY4!3}k!wH|NFMCQvA|1rQU^yu%=^~HuCl!8O^|uhdoo9fyy$$6nX*zx3
z$%`5#{)Pv^cnd`yu5|Z<a9;*>kbJKZ0kWg9(kHGzb_hc;{!!gCNj87PY}*EACM4Wd
zpcPjF^hU!W8%I4Wv`D|f03_j<$`bhaHau^;x3(5wc5z(c%xztpo0sQY_kxpC;zzT$
z!lN|+O#Jjtq6cXnYscfmabaOZFA9#6`<B&4iP!+H(K+^7xR9H%o;vv*<boSLs_;Pi
z*&PIXpQ6fMwBECqt3S`s*}KT2*NIByHI(z;g$LGSy6o888E7WyjmF_>92xjv{ib`N
z=FblxVPgY3=P|&+;?g(t>K`CXG&cme_~vKmTbrS@8P1<dOOy6}&KiEbdwIq1&#ne2
z>Lid7_xd(3lS+IujTC|lS@8f^D<4jtUqMvzd~&a2nWY^lUSq-FL(kGf{i3de@Zl5l
zfph=wHkIE$ZZpIrvyTzFj6q?s`=m-IZl-oDSlZW%u}8N>mFP6F$m@F9$26i4b@NQU
zW9l!ANytTAiu4NG!&x)Ecnd$ED!x<zc5i1W$^S*l;HCjbD~i5q9h6N*Rv*~=>anSr
zV|jS_V;G2b{>kCIA<1IPdGm5X!qX*LO7GdToOunkXfP?riJQTAvL7wmw-=;2BvN@;
zPGUEfS2*V7=JMM*hjqK3eC7RhjJy7rmC1+n=LmQm{c$A&V)8%aP2>`sq)180b7yxx
z5?+hfGzDSNe+kf@!HrPp;s4Jocm$CE0m?vk+30@c&#w9G88fOHU2Q5n#6vYdiVzGa
z;u^??Rh*rxfVYtrFhCFpbc)eoXJ-eEHy_cb_an}hR#q`U^sX;1{wChv9|L(O9f^s<
z;*_o<{O_p~xyL$UA&0=nS1mVe3uft*J2P1&B49#pZBa0~kU#W^rE;FQjo>p+Yo_bu
zdM&4<^d67Bk6`ugp*9b3&nPQ783h;@*)S5}9T%{KsGp(oX!E>u15;&2GLqle@7=>{
z54SFDdVs=G;bCa)^M+q$zI4;v)6%nlD;~O_l=Tu`3)*S`fILIr2wTALA*sBPTLfap
zSYIHmLT9D^`Q!Za%WGxejADJ-+uKW2G>&Sf>24!|H_sT94<0mP1wwVBGp|-z9YAj@
zDrlb$TC7%Za906|nFRFJvS~~F#mZ7yJl+>h!r+>Z(C$#)*!TlI_mZeP8WI%%u7=m4
z$#%#Cxn#q?su$7?P?0-9l(r$CdVp&P<L!I*?!|#T%qIlGtI-C+J{OAtgneUqDwspR
zfAw=E0WAAIUBo@6=n%-os-3xkK{LT8!q~Y6O5zyd?Flms8ic^BqDSc-DdCi^$*XIm
zPIa<m|GsTQWzj04=mu&*oG-s#QrC7lLc}H0W9x3+=7)E$KVB(gWaH9RQh;e#64HWo
zL*vHk*BZ;L;=lJ6mxLwoZO0`m2aPQgI<Xx+8vV%|pCd}Xp556-umHkmcM0-<hU-GN
zne19|QJPQr9%|)qqi4`;ce-;Ry8pu|IOi0HTWV#qvLS&1_nF2*D8AKL0nB9_5TO$T
z2mr`O(j_bRYk~QUzZqb5d3|rZdWVOTfYHJuh9;b^P3`t<+|!Pc9ogCt+|C3^puPjY
zWIe%DCXJQ`NBG|ZJUC0hHJ#F^>*38|R8~jx>9n={T%?XN|Nor8O<Y4sE1=g!7tPJh
zEnM`~lce~IW~QTofP`N8I?&6T0%I<zuWk2e8uw6(%LJ$wKu7~(;J!xc4iW=JoP`2~
zP_BQ2O}bB>jD7UJ^e}g8bgHnKsjg$@`wL9~eYdJ=MC*2EFKZ?Tv`HTHDVshR8G8>Q
zQUCrlP^BDx3kigXeL#}4S%0t5thP?ZWpLnch(^W`1WGKQU1C~>BlzUU#>P$yI1L)L
zZ%%7kdV$rTzu2pt;p3loV3iU;y8a84KoQh|1V<Kz)U~aX>+A2=w<^-9=yDsdo9mG!
z-ZaMmv{F1O8!bOaGWigMkjY(%A~ctp+zK=p62QB9x?ExW4fMSiyy%VH!1S?(E0bY3
z0zw=lnRy%^!|kL)^zX+Aejf%TAnLVU_GS_MpYME?0OsUfCP1~_QSWwp@83$;>i{(A
zB%#5d<#)a;#1LlMZHrm~p>|2hd<&(qpb6X>1WY`6_RMTdMMY(hqvHDg`CHU~|21T<
zc7;HykodBqa~c+fI7s{}6i<@Q+-8FnwSD2%Yv+jm(6k5sp4Ti4*juHJP}VB&SO&NF
zx&)lz)V4mn*v#4Oy}l4-c}~}O%REbW{m^Z7r((GJ`EMl@govwP2;73Z91TH0dHc5r
zQU+wRtlx+5W+wsn`~TBoc}Mz9ZVT8#_FMkkWU0+gPrs0Ii$hI%4vvnOvvo&-sJj7m
zJ!C+pXJ*WPj^#<o(YQ<*U5-;wP@uq``Ibnj1aKdE{}E|6)Yw`}dP$%-^Ti}MbT}Nz
zfx5^R7&Kz{WBSz(QsUarw0D7PSbVB&y%Gf_Wk8r@1CY{`Cei*m?<Rhg?>(Xhbny4#
ztqZb(!|y;UX(P(s9GzJ`P3Unn!BVt-veZ5ydh&p>xq1Gq$9Azlx|$mU&|O9kd#&@K
zNb1FbM<|K}Y0Gd>{Ki`aObDbJB4SiPLMvxJoWTid#H}f8B+a}#Dj>$s3AGZ^nIyUM
zhWM};N9BKa*-$C8y-1m_uAN29ZUZO@=f7H)Kvut@ZeS?v_Xz&ju(h)s*et1l<<=^S
z6V~=j$z;@3x9JH{K8jrpBY86DzpwuVbpBf0))Mj8i#QLtv*V;~EJScS-=Q^DS5{SF
zk-7r<0g^|LjuDQMT*t=7nqHkB@;a_RVr2M`6mF;o4DIEoP<L>@VDlk99<M(U4>&qm
zskm9i$c-xRHq#ROm9Adb<|At1;}MyFS7nB6{%A}38rUd4*6BT(xS11z{?^}$0OS;|
zHg#i+ax2F?a0}A_`+PsMijtR(LB`8_weqY8@btMM+?2+kbeLCn0uS7X?u7PsX@rDV
zt^E&L^U3H`?rnm@Q6d){zJV_WPoJ93(&p@-V`3*qBBQZn>)Q6u`hm-<8JMxw$>Ci1
z)FPGr1}5B|&funbqN8&ch^vVPTsr(X&5K!L@2QvRH+fVUg(J9xg@uDEzKSGDnF$^P
z0i;01m0csK665qy1XON^_Iv}!*Q;^r;TE)+!>nLOf!A_`PRcTPb=9;+|ASgb6*4Jc
zuECX3Yq~a*Thb39sn02zqP$oO+VTfW>~<NOcHP(EQr>nCHNMZza@5`@f7Ishs32ap
zSaZu>lH>dIbbX6n+Pw@yHj*@jaB?EYx}kdQ7JVo=U9_ZIbXx#UzZ4Gj>Oj3O_1-9b
zVe1>>jdz}SDi(DOZ|{Hc>}^H2e+XO;T6pJq7h|u%!Z+{P%uU}^b5_Msv<v}{?F<nH
z^YhbchTjR`bEAcyU+?>Jp;l~Fbvt&Q=x1wx_1y!=U6k|806%faE%b)&Tc0Jb^lzQj
z>;#giabvo>@Z?mzsm!!g$;S6Pcv*-!O~FQJgI_7IVq{5Ks{N&%ijk2~<{-n*#jDow
zUAO(pGkMpl6S{UOO5&X_iypc*ij}@ko(Mg?U25Iqphy>kD_MB>d)U{&wqdv0@6|E_
zX@NOkA&r<PTEc=}bGzLE8a>`&J290J+5p#v67qSO#}ZpeSGg;1$-3hQ6JQ5VFa~<S
zWy7G4|NXB!>|d8dJ6s4f0je9E#uFmDK%&AIP;QZCAB2(=()pob?;F8QuGYAGc`#?u
z5l&dtPH`-%v0%$;un|qPrlHs*`U1G2-ySHj8<MTrP$<|$DW%9;VHO~uIg5yT>Iel9
z<nxi9UAEkulxD3^ftJnTE2-9$Yv_fjEEC(=_1OZUFxo9-n-Xg}(`K~GcBQOPHh9J@
zQr&4hCP6<~Edy9kYfry2|6H+Jj`MU=t!&ZbcrCcC;PXjF5D*D=WSxNGgi>QAy5Fx|
zlcH$n0%bwa@F=PIn0fq1B*75?);dG1F?cue_UPlifAzBNF9Z%HgFMhbaRBB)#0=cv
zXZoOv#z(ZBX$1XftBvC5ctlfc-|a3P9b`cph^Z#iJv{MIQ`LK!S^f(xX8J{~U?QjP
zI)y8B`U|kBC(!Lma4^&VbL$N3+NQYe!SQPGbF;kC9_~>epdDGl&Thb-ve}-uVA93&
zx@6pU)-)eyHCps1@LRZMkDx@${PFLG+JLHaX92>~WfCP$wrVih=eGg%Ir{PA$MYvs
z>QIif^;3@aH_)Hjc5_711B2WqZqt=kwyDW~4Jbyqbg)h^JiG>pVP>+F_|laC5*)YT
z8&}NghtLVhr_y4)>OY|N{XF^|-|P#NmwP1m0q=B~rAa*k(&F|f8DQf?jrD6^#!$V*
z_UGT7Xv;M%*EZu4?WS+tkJfQzvs@|y)mnZJzJbiM>;}19tNZ*SLHaSqUhh~uyhZ#}
ziYcs3wG!6|`f~ZTrjfbGd_cPnIL9M<(xMc*;?To6*sf<_A*#=>=WuYnmx)3MLgmng
zIU8k!FKy|<>`2TO-=BiYl8i;7Jqz>ITvWo{|8USViU=@-U6a5^8%`VzV{xQEOB!07
zSUKl=turHK=_Mb_f6&AI9`ILv`>V=*p!4HqaYOeHMk@e5aE|7Z1YDB*#85djKJrEV
zwJ6^!6Ag>JDnb#{hv$o!d>Ve91ejM#Fs_YZv7_+!%tZHTtBs;b1FFH=+=GDQZ1X3E
zLFCvMyFngOY-M&!(w+`UEi$(cL8mCrM7WIxwLTd3y%~36f9bhfB~>AbveO(7^+Pba
z1Z1IA{A`=IJ?KFWSy>cdiYRI%&MkgiF7>_sy!~b&gK%N=@ESBiDFjwfLuqjmIy*bw
zu4XvBAsJT*GS%pmUdWJ}_6$eF0kwznqtYr)*Ch_y1<Y#&Su$5ZisCdFTtBrPFy!u3
z_y?Gf;t5;6^>1AVubtrJ+V;yo^@kZt9)4;p%RZjVp{$Q^Tx#|0uNSEy{qc7-!^>J#
zD@jVi6=&cJcUpM#GVOw_g9y%077h0sc6gB*chl%;OY%~uzBbeL$ywZh`e)Jj;0KoQ
zsn_}5=?qp50Bz(lyib2*UCvF@o<a9=fGnhMmNA+Bt+OC{FnG4RbhB-Xk8+U&1M3b!
zciN6{_)4V_Ls(~$Y%*f&;EalG)=;xQ97l<jTh$i9AoGc+5~UzKUA<ng0J6B7E`5)m
zd6(m$$y$~}vmu2!WZT#ZR^A%9@rNTYU+W80QqqDQ{}m-JJsrz;l5l_5XvKZn(^H1N
zKyA|9$8PlwH^r_rB+Jh#f20Mi$a`!clSFDx_W-+H^)edikZ$uLH(MVuRR6gc2OV$v
z#F8tRPmeWZ{?H)sjA}@kP~qK-V%8Z+D_^hbW+ss9I5`|>p94Ffwh+012h+qFEV2jM
zbie!;CE|lsXKc+sK&Qoqe26@0#Af#EHfWB#98Nz^9UY3|GKm2FBJnle7oY!W)tC$!
z{UUjso)~>ENfn{yJIQv*6mu`P;qqZd{vq;X#dPb1p0!)Ab)j*0;%#<bf>+C$8OO``
z0VehfQR~f#z@A0a0Oq09SlF!_jYQhQ$XvVV^3Op%ur+V{A;+AoAB=A1L^k!?*ziup
z_3lO(!7aDMvJDyP1Im{56zlNTzE33QD00E&dQjJWR>EG-si;E~OOIH=Bv~f}PCxYH
zt?i}sIZ}szQ?|>`gGuJSn>_uM5<ef&s1hVGS%4%$r=4&hKAc~Y_M;dKb_E)IftCbC
z_uUzKht>)N1JVs<nze&+V=#|y_eoP+XrpN1f(8yrT)v*%K}lPPUewycVnQ73)up)6
zk*bwJ8&GUf21JJNxqj<GsHae@Q5S3D8zGB9ku%3z`WWiufHJf2DGDI!q)McZza>qf
zQ{ly90>h|z<GrnG-!T9E%Q<M2M;=03k8a<X8;wj4(uD+c!=Sr6HUu?|j~J0d#C}?0
zZf0LnPikn+XvECv!U=9pzZ%027^n#MmMl3_&Im1Z;8J3s5hubzOcCz)!XL>58VXh}
zF@*9)cUzIS2C~)M`>t;T?l5}WNT%khNos@bk(;0q#0Q7JdSj+Chc)F%ivT_`rbeoz
zCf>1CG*;%2--kn}^!DIuO8>J?V68J#*RU-zk5B8ih)z;IE`UjLc^k>8Tir9~x<H-e
z=zoVTP$i;DoFqxv>xJUvTFGG%em}$i;>kl4(Mrte2cTx;bYbRx{1Z2i_Gcgmzjkk9
z$cn50%b8whI|{xrZti_^sJMM6kwS9hum=6T#Y3!$i=3*V)rkB@FyaPWUhZTGFpR87
zBQk9Rs>z}98-a1m2FLJMJyt?mo(lH^0io(dfo%cToUz@6+LIV%XLJPN^UcEvB+d;d
z?>w3yq;9gUFx=@bYtA_$OFtZ?z#bAkYD7+ALft>`ObEY_3VKF^-8*`B;k{$oX_c>W
zH0?5T0X><pIl=OL7g|&5k|5cxaQ*HZ^$u@;ot!Vzz_Ip`MY5x>TTPpxN)h%U!4_Gu
z9Ai&epR@(#O(g2O)3$IeLBc2BUA*Ke>pQ1$_~dq%Lf~Vo_g?-EL*$mZt}oKO?S_F5
z0?Yx*hQN#0e*`-l_JJ2BEqPm+5d~T-Vi@ZP%3Koc(ue3Ttr4_uD$djFtYvYMy)qY=
zCmC^hE5v*6UVrn<&A!_ozYtLhz<|esqbihA!~)6Ibt8k()K?7_OOJLrkpwd~rZ(vt
zu0@?zG)#NI6PBr4Rik<A7A2*6#2agB2aUU{0<>AvYRWB#qyA!IqtK+|wWZxWcj086
zdv7s@Wgp%DSwz>tPI4*w*7y4ZujTg?#dIChgu?}ve;#OG9#pszw=U=(_jZ~fy9?b;
zMx7GOm9=gy-u!)mNMhh*pot7~tNhr-!U-sAIseK9IdrgMf=8l3a6(Rm%?HT&HlvWL
zfhBeXLCYEKO+nn~r)98%KL7Jxa>=hg+)icfs?41-F1i)w5kx#w7U?FU*bxP4>92+<
z4n<{&$!`a{p<}MV6&L03G1o^a#Gr=HgT}cRZ{Biw(YKCcm@i~^Ob8!@Ni70?;+BZX
zt_xV&NkKQZ=)P~PXVQgm6X|ci5vtbRIUiSlI5!X}7Yr47Zl3`+r{Al-PP3mILGF6}
zkW~=CK3xhDd7+}No@6zik07L!$Q%wdYol`(>bUkRBkKqz6l8#dhKBFmI7)zcJLBv7
z?z+e$Du8d+wT#4sN0J{X;M9*Vens0$l5r2QTX!unIhZeYgx=TYs$IlbiRb}G<>8WQ
z+t0V?lXr|>r13=*U4Qs3t7q@#V9&?h1wa(_P44dNs0FT)syVyTwu-N=EthlGy~$M+
z>`XXY?-sZ-aL<cZTq7L5M2%|*I<2n=6BjQ{8<DX~2l-J4D#wU?vx_7L7IOy;-k@RD
z!%?++`8G^HoPb&^V8?t;^OXP6bz}cdwjZ6pzdqO<?INw!8T}J|r)UnM_ngKDwKfU_
zww9Oxp?es!aJ}bRVytjw)6ps<{XPp{793n6RJ`390R72Al;>cWhL#(KQljV;s-rCB
zHBxh@0j%O13s0b7T#X0P<EOz>L_sZ?P+b2r+)Gc4u|MEmet#A<bmc8aNwy>lpwDoN
z2bB?^UnN@{#j_!*Bu!@^sZ^0x_3_gfS6zhP&rPMg<M{&gYjy^UKX03L%n&s0Ny1Ft
zJ9{6NSPX*=v)Z7SSIc*bi>?5!wkZdpqjC-M@DHXFOQIjC`7>WU-d-{K>omjyGtk*~
zSUlwCfo&w#HILhH`vN>rxUFKw)~%*%mBJ#EaNcO{!laBV(AKTA10x$cuXMP#@V=Ms
zROCPu*AMNY;y`U-T>i1V`b%`0%)gsDV<tZ-c38V{>!6j}?~D1fW>!=ugc?p-;gUkc
zZf0ea2Jxc^ygSID+KyyZB*7r)GG?3Kxhu(QM*<*KZKMuQ%3rtpZo7q^>zwni@yr|k
z#jiBfnA!*B)DiSMSRzro>7i4@zhh}X76B74#=<y^^jjdy;)kb82M<qcl#@j_y1`D`
z2N=wp5rQk7HYLh);Q7`S-_F6sKMNCashv)Dy0Rh~iPWICs{wnkcW^@FiyGN5KcF8t
z;jyJ1wikQPO3;_I3Vdy?GlQeWCnUVRjcZs&eK{ou1&0Vm<#aKHe?~0wPA2`cI9Kz^
zJj%ZbVK)S?L1Fafel*5+3YL;<TjuuUEDSa-0G_q^C>G#{scKdh?pRn@zp6^T2SXBf
z3`n_Cq1!_X+8S*}#CB047R*cM=erpo#RmO~``phH&&ak&d!sfpN_4N5j)$PHY9Z-4
z=|O7y^&9+HI_gPkYU|BHSC1XZIWRf*WLU!dgSJasBn;&__N-x&B66J1-3!N2CSYH>
z9|TQdwQ#~rrv?X8!>g$2-P16+Hf5bssbB2|EFiFz><L#KFOGkHXE~w@w8UMezFOy&
zltY0l4G@=|-Ds`Eog)V4>A>4}2UWHb<GwD80U+?}fb!ds0ju-N$Tml}RgsM}M+Sm0
z(X$N^+*%?@PjvcLZZtxo@}vDcZ(1l7-HzAEH!amv^mZJ<4#U(`h5MB+(|q|xtEGew
z$O4qGT<CG;Rk){uU9|aws@bQ_)a->ILoPCx`1|~7huqV)KrLZsLpvotuVW^a7Ix}h
zgsSn46?M2tJRdQabsLtNuxwlgA{7b|4MMaS+bZ|#n6jwN7m^l0+e(}y$!70cNU`z;
z*`$tTj3;R1V{iWjcg~XVqxoBrc2S`Vm9%!48|zmH(PaaF2AA!;+X$I-4~ggR=L>{4
zH;Z*jj7V*$<m+T;*8y{=9jP|X-*9C}44V16q2bsdcaD(3;n{4T#fyFBgZIN;EUSh*
z2L5k=&l8;y#?W_RHfy5RMG+Bhd#>r1mBqW?EkHDdh9$x4?SXKdfszV?zG4T_%TOI!
z+YNsy?E<<Eg9ql3bbAeR+>D)f4clB+9W|Faw$VhC(}UiZX15z@yD#yerLPZ(XwMX@
z!#YKa`GCA?yX+QkQTa$Hjj~t(fo=mRRo#QSSR$A710h{SNPmruaHK<x1zkz#S`%~1
zincp9$&VkQ5lGJgVwm%rm78wwpSRz)zEdv3M!wbUA=J~=quuyoM>U|GF6@{ePWy1)
z&B3pmY2p^OMPl1_sJ@tSo=Ik@&&g+Wf0#Ap5M}x~Tt*20zQxj828sY23O)6P?AIZW
zW?|Cd{ah_#mUL(VIOG%dFN7WkrEX%{HZUR@M`wL5ch|4dCuxU4n4<&1eL42H8I(SP
z7MU)v`)ktG%e?Juj~~iGFCTDlFWyM<D#LRxR76jv&>>k3gADyMCuXS|bQjrDwFKLL
z-vS_y0NK{>5|$P@O*Vp1miEwRpbeOzvGK&)K(qg-8EsS=aNUp^e5=w5-ZyMT`QSAa
z{!V+Q<65m)EL)=Cb8+xW9j@ZyT<6`MvPt~qA10B)T^Xj37F(M_zegx3_~r@Z;HtAB
ztBI>q_zMPW=$UtcVY|<-^Go#7k7^wa4=<#4g6xvjWPG74CR135Q?X4)$xK)T#Dfoc
zz*#i!WnLuuHzj+Ffw8%GJtJD2pI^E_A*4-ebHdXaiRiaof-jEIw8I*K<QEOHh=o4S
z(T?aO*);V6)<Kx%!Y^|%A8g@aw*%8Yj?G$GMWTVO?!z)k4YaekO*ZFxg&;OezCi{A
zgwfVNK=D$zhEWg0JarnM8eUkc%bG7vYySNQ7C|zWKf>FV8pkjMaS>D7rt3F86Lg(?
zx)0}H1T}P&KJut_QGh&$04lol9YI}ufQ5MpB&}a)9sanwX|y&inc}p`7P_q#lFUYl
z;Oz0JwB0A0@`ZQbajIXO$F*?7ZZ|=9o5H`Z*5NEMbM#^%osT6ZQtj0&UrhUJ!=P+&
zubxP1(E)MNA<6(}y$#lqFXO3rCHRfJfqb*w3+G*e(&kciYJ$~0UZZk%-ctJ^>Citg
z7id6Q5Fsxa>c+ag5$prFd$djv5sUTZ8X9HDD$7_KU-#g_*(kz-W&@L6ncqC>^XuU#
z^m{cPQ%9g!{nc-xVG_Dw52Xn7S3xVQP$}YgH`vm%K^trlka}e_8@>=WdXBCIugZ7y
z+Rl6-_u&SR42CosKDucqipKT2&=0%6M@m{3EH62%`!SQnGiO}gVq`@HUQ{&d35maH
z0>lk)1ZbkFX;Z2s{6OS3-T%dRzoeRmd|ABB))4PO%)H~y{8-U-oA0mH-tX)WQG5tF
zddNC`VE1K;8T?m+s-52?{c&(0pIfJ&;H}16Gx!;TMH+FNl#-%dR+i(k?6mv22Y6ez
zZ-o1oJ@#4AV$`%Q{>)zVkRb8o5dXNAHW|>ZAJpsSkWfp&&FLy7b9L19i?Chyu^=P#
zVUcx;>nyQ;qPiT(U#$e4(uTn5E&Q}?KJ?YFiMMM5PI|!bbAt_55xixd&BX^fGz{p0
zcSF9;ikW3m*#!lo4~RH94u*=kjRq!#Tf(R*p(l&$@)Og401@GG;^G&X018p09Z&ll
zcJEx{tEs5B-k=g+p4u(U?a9<!*;(%%qkXX$rl~118lT;Zu!JD8@#LuKShk9Uu~?>P
zmv4u>sW-NzQKnn9Bl#s172qXw#}g=SzTA48cB#Fc4M9vrqN4>u9d6{?=d^6kvYk1=
z0m{@2;q^K{@Oy7K<X!t0OB5=JmJxHX<Gu5xTl%>L;Qm<}F#{2!H-j)8a>3}<0tkoT
zsir_BeS0vS-uqM>+{(+PPc%k+yZd)+cke<eXFKs@vVvb(h@Q!4mk&`inhDMPfk)-o
zn7I3OG(>5}hpqUjYR#(vP$JkNU0O@8U?>PI`pEY$^bM;6K4e}BjRc3TDEO=eh#&ow
zSJFp|U$RcSV9yVxgJ<DsS-7Fhzm_xK;WP%hc`$nM0R1>Y$9pbaT=O`9_0wbd^g^wm
zlfMT_q#CiL3F%?p91MR9s4j=yxa?+VK!U`ZW`yd4btOBD(Z<c?+uSRIHbE_pS(MZX
zz>p)F$gH-hR@C0fOkRc~U}k8=WUiQGg7ami)snGhyJleOE%nbk)+Kc;imS#p6~4w@
zGwH7Li09EpYrz(N+W1_}=>ng}>nkqh`l2HDfK`fopLun|++?<hXFI9oJ_lYB*R+jV
zDZ}XAhD(%-`Kd+WN^Qb+*ZqkbTb{YOKBqm}esSV{iJ=u^>WcET@895xL%;s@!OY2_
z&3|6(6P;a<2^oeDL6)^Ca641cAal@L{%{XlzGR|P{P|uE8Qq89Potg%UGwRQ&SY>=
zAU}#fY^HUdc-)nfDo(x6caUg=fFRV+h38|W-4iQL-+}JMCrm+?Yu@IE<!=R%m$pFP
z3N)>B(hpaoWiZIxHUewj0q9HF=X(2P|2M6d)J#2+oO2oK@KE{7a0gF|%7>|G-pWGe
zl_Xfvlf_=S0E!iaXBC9c+a+i#{I7x^ix!ATcHV)BBIoD_S~)yxbMXbOg(tGh9-0fb
z=^JwJ#YiXgA7iS}O(XPsHWDZAH@0$cG!6tiScfAV55my}>krF@1|kVv8%sjSX8Z6r
zbTEE*xL3ErV(l<Fr+nM|u}~Q{qt4ZM)j1~Q)QhLq0ms@fnp+~)Uv@|adF=j7S?CAN
zbnhBC4-vy^TB<k`y^Fl(BpBx?Z7=BtcVE<}n-pHl<hfSq3D$hKH4};2KQ39B-K(Z4
zz3k&8^U#`&X!w@!m*NXJSS;S%$xpS7y<^}eg`%M+WtMcpcaw$jN)hDY*)ft9P|1NU
zvdCd}O!_4_!!C$I!Fx5s2!Ue%F|<^X8-GyN7jcZRp=2O?V{BQ_CLkh)oWd_T<oSVa
z!&MVa3wLZyRn!`Ycq}&U5jvK*i$}Sq0?;3445&KdV<!E?<N6D)uw#zxSHErdbF+uu
z{$v8K32c3emG{~&{zd<xzDnM~r6XVzDZK%(8FoToZ3L>$uZ8msMWYyvZzR$qYMCsO
z@sGiFBe;S~Tho650RScYy>XIcv=T<W6M5bN562<A4vEvDX)pvg;PGlmkagyD-4d48
zlJxRBAA|A`4gYYA8S1bRHI@{`PyY-86hH6@e>$<_J8I>b9ry<1Ib$Jd((Z+l!C1?^
zqN4W~1t5pbqf(J=)=<@v_XJ7(hC5`K4?e{yWjzuq00u;I%orUUMg?_)>rU(TB`foG
zT{Ul2Cbe;D+UF>TOlBtM_8u49()PTuY-vEfGf&-Z-RJsXRez9b3)MEd8g8U+i)>t6
z4@aIY9isT2EENb{Yv)1^5u-f$Ay&p4TkI$-x92j+$ZClQNIQ{Vw`k=CeWOATQ6no5
zod?ZgWlt;`ZKE<cdQ9Hr82UoVc8q!tB+#T3YRfV4DvN91N>tkH{hEwZ6Hx+TswaNc
z52h!C6e^k1ccrQ90861SQKEa<JH+!Hvo=BZ`E!;eeHWcaa>l13K!lLxOJwI6xmXv{
zLbACMYHFJ;w_`Sa8DCT`qA77vX~{IAi>nbos#{707To^_2Qh*gN>cIp-T){Qd+pb6
zuYA5c6~XjF$wKzV8Z;Id*opK#WjlFE2D||+2PsIm$jW({)?KV0#izCbrJIU_0|T>}
zbDY)u=BeI$j+rx=I4{cxv5CrBts&C($GJa5Aw?dBc8v43+)MPU0O5Dk(6iW1K9{u+
z`ZWu*QY8lT+(&kRB0bd)7feG<NLezF3OTwRv_B}h75IT8KW~q1yuA)fv7=h&fm-KN
z+2uu-H(3E}^JnrLCsXBS@9JKDNaxvdfz=!ZTxxsnIMrN72epybv|-fn$|TrljU(z;
zB}q0=pH_V;+VpPnZ@jkr8JG_h?QRs1D0aCG`rT>DmI-!IsREG$;oOzFcox}n%4irr
zfokHrn@LAQwi)!B{ncT&?&p$B+ueH&XqckeHiqf}XV|kziGui({+?_^(iRiez?%wP
zKoS~<Dl7a&S*lQbWv#*D>j~5}<SUg-^iD9QB!l$~+<lwgkl74%p<9iP3XFYr+bZQr
zh*!TLr|+Ihhy|9sY-v7|GK)}J)Wo2P{hO`^Ka~pM7P|aa>Lak)YxI3shEUuzkTTnR
zMn}}-v}qhDnC_uw`NpeX{X?pH>V_C0x2XC~s-D?&UV4EP^rCOqnaKzX!GU<Y=|EhP
zG^NYQQThe|8C`GB9bz#A18S;ww$3rY{7|P`#)92EZ5ls4%QhY7RO~!b$FX)}t}#UD
z$hZ~kr|b@`W;s)xfqNQXS;3#u#OYJec9C7`=*9~-E=4au&<Dug9eUMr@?BSI9v+Re
zH!o_v(iL%Q8VmFGsGBQt+d44C-b28ijC@c$?0k2~^LD^Xps#ZwyHgg49tHA{MquBi
z9xd}<1<jd%Y+v)v^;nr25=(BPh_LL^iNdTJ8ezr><ByWTV6vmbHC(^A({e6X2Vw*;
z#FB-#(TpghRZ(KwlEbC+-=Yl!*)-E4=QA?f`VhM0AT81cI!ud$<8k#{^O(|zY4ii*
zb$++(^3>FGj9mc>(e`G-W|J~}e})<pp`$Lxxxu5a%U|EE0gl>r#Ax;xwpkcMHVUrX
zmxjI(Yz(MNe<x1ZyfW=NdDQOCQ36DrU{6s@;UL_BV%~MvUv$Hzi0ehA;_Ss8Q1nNx
ze=Mouk|?DG`6Mdt&%JgP`e@%&Lj<INHTpc?lm3QiM5O*&n;s}6v<P|cc{b;oDrFRS
z%Z{%`XY;wlKzTjTa_L!U=(?Z3*M^Mz_zkG9`sa9<b<oEFKaSKy*ON^!VrR{FL`7Y9
zMI|@Cxb7QxKGAFG$mv8ecE9^y-Y}qcwo!aT0tzgX%3vQM61N)5%`*A3MCc0@wLAm@
zrk;J@Kc0LQ2c8R;8LcKT?5R1J^eqdoSF4yZfmHSsB6k)^JFL>p!Y{H6yuZ>h)B|Kl
zngG7|dyVW9E+6_FHiW?*$<~2T#&&LPLW1cQdwsLhXEjD)6_7vKxb!Pz;|+XgY#9q`
z9dDp~f^)F$%N5!`Y;cAw3E&|98ATyrs4FBc`J@0&r>g!B3H=+C0_rUl2kyy$(A7Z)
zGb^iwuW;xw*5sh@JG^Wkg38G_S>yJ4P?U~2G2n*2N2v==HsjhBVb$W(j0ahy_tR1m
zTKF=Pz296n;eIRGdE`Fexd?6Tm<Fra0R$n@0YJ0tD>>8F7w9qqZs$FAq5GViRpsx8
z?`q~l-2G$#^?IZc^lNk|$n6RoxVKjTRpOa9kY0<j5SjKpNH!9LDyA_I5A4a$u+jvb
z#q3#bXWK6B^M_cc&r9yOAM6D`5X`uP5<9E`d7>k!_{`Z7aIZr)t1JR-15`vfgmXkI
zu!YnXn}>2<A$?fQO`GDOk5}vcZW_<mts>9qPCF|e#vfn~e^Dd}_s28Cz-1yw58_fP
zyVbt+zv^)#uA$*C>z9`)hg9%a*y7T0hUT}ikJNzEvb~2Wl(kRNn`ay^U@1w@A(ZYu
z7v~|a*kLCLOE^@7o@bnz2C;~RQNhlW{F8s6&&fra0KqG}$n(`Uq&M6PnrTu49?`-;
zer3VeOHq-q^omP6iGylx=dB694x>a$W6K$wA^Z7<7o$;+v@?O4aSS%pA&L$mJI6N+
zdM`kEn;HxLr1f3<Zq35|kOUh<qopMI@=iFK%$2+bOQgwJH8Ro?mL;=e6qUZaPJ_U_
z6uQ4<DF`)y<9!{J@fUyj<}y;v*lkUCr>rA<1S5U@U_M}jU{8nDB8^t>jY(^EMIzAk
z1Kn&GO5A|nuzaxqk~kbti2A~<5;LG+t>YSLi`X_oh{V}(9?sMrkEs-!9wGY0Up;&{
zTMAdt>bTX;FiY#^ljBnutnY_J3Wab!FVZ&37*1@(*$8$jfD&TdajG;TBgw#B#2GT&
zS(ocFCbjd&t@P(sa&al7xS{ECc*!(k^@SZ(TH%sexw*2av~lS4OUtCG8M4#xWOuw$
zMa#=9{M%8d^`v8XyR1+qBDFQX%-`Xk&xZ}}_^87$$n63OyM$}8x!xR<`JYKup77)#
z_Hn@uv6GF7^ugwB(T*I-Q{Yo{IoWb!Hmv}Fy~w9epC+GSg~X0VB5QaqJ+Wk|w3|U2
z=6Wgq_5uDpY1;0?jfD37uK9IW+x?yT6A9xtrJXr|uf6ZHf9i@swSvT<;m#(o*Hcl%
zM87xfX^Hb<|FI?G@>%#P!@N$K|JqOn>k(@8RRY7UBu5|VYS3T<?4Nut#xqkSXx;KV
zkI?BI4ymMkKO9k$TrR&~@p7T@J|6A5m0K}~L730B;BnUNDR@J+n10*$9_T@4P(8>@
zDc!dE-#y4<cq^SSb`G};ff2Pd!oZ;{OLGf|oF1eLxV1Snv(@cJC2_%ojM3nj!?uS(
zbEhURhT)RkR0glV$eJX*^l{e^!m90hd(XJRNaGybhh!n*i$oad$W23M%89D|$#46c
ztuSYp6MQkFno`7n^#8T@mSI(GUDz<)u@$9LB$O^ea?>KIk`jWnAR*msKtv@4=|)OY
zx<iz1M5Ifk*>uM@H^$NPoF~42?|WVExzK~K_F8j|8KdrT54yl$jOxY#G?NVj@qMfS
zh83#x-I@i>hUDsEUu0^cw{PFBXmvS#{g^Ajil7vzCvju6hwAUP08l`^7?~axt%NtE
z$toJ=Q?vh=eu8gTy2U9=i(%KpZPp2oF~yEl{%RA_;IL^D)iv$b)dgOk2IN%2>gm{1
z059N{11#I!EO?1t74<8hhu!P}kon1HEz>rTzgzhj4PRJ)e=*2o8utN2J`{Egc``-q
z3+XY3tQpt}W$<v23XK~IZEb(8vZKWUox7>efv1A<`bN)X*D6`ZSN!46%^+hzlsEfJ
zEaJWDS9YF;qO3Xu7;jL9e9VbZqZT&)g8%q}bKv{QC4gzU7jFPxaXF}+$4-9iy(>}!
zO9^_&pDT&<g5g!;EXGKgl4Jl?4at|M$gRG+g2LPlS4uP2MW-*hM^jZ#i#aD^Gg-cO
zgN=4><g2D5lwyn5qWlBy_|+j|IPZFeKRTR4b3LD^y_X=Jmi`h|MmThm(c6?-$`%1!
z^7SKz*ofnSCyB3kjhJVm8y7R?>c58#00v4-cGu}Aucloe(1u1^U-W>n_WTB*Po-6f
zod?XmjByMvR&?8aqTT|Cbq`*2^;6|Sl3<vl-_=HWVvG_Y!vH$$0<wjbbOvf<{vO=0
zN6*C{Wme0r*nPSqi)|t+fIo4SllFyHc=QER5_x^b`%a{Sm;2r=n?yIxn?!dlZl4<T
zJln!zXoZU6Sqe$g>2sa|7yKQGVI2Z~S*Ym<upm_g>a@XcJtAp04OPa2C@>^LX^Iay
ztGg~5Rm_zJkH(2kbA4F6EqM2&58I=QZ^*BP<jQKu>XZ|Rwd0z&_!rsu;Eg?7z;g26
z37Dh)=p7?+YL#{9cUu-SdSL6q=6m{A0|U3SxX1eGte~<UspOv3(RYmb*WozwZdwT1
z+1`3AqfDkYgUcg&L+F!4gPaX+pm7}Oo#ZX+(Bf`@?&L9;;Iy0Abe`@cG8g&e>3n*H
z_ezaS<1z}HEtqguK<`~u#*>!KxBCpKrOSpeRpje-qG=CBzK9yYGL9HxzSVuXhu%3x
zU~I-uC#+YK2j<vW7KSApA)b3dDHOIlOJ*8>;gM4Y;%q=gflL{`SIg}&sOgv;7yfj*
zZbjB1WX|ew|77aP#w9mwfZuR!d-{+MfmAvFI%I?mFuiFNd2oxr112chdA}MIdMPpm
zjpj1uP^)Ab7V?wtRF{VAJa07cyR#2~IFBUwG#8IoTu`EG;l%X=c_z*-b%3*|^QCjv
zs)nw^YyC*ct4-buPf7HcA@uf9l?f!>)6s^(wjx){bOENwWc`Y&ENnD*LB~JGW<HRx
z!b|4ZICI)*7r3sXv}7$!D^i)EXjdS|jw=)9wC*tPtK^cHAKA*sE-HTZ>+$WL0kCx$
z2d`-(&TzQU<Uz3Qv+=?3Cg^)m=RvGqGV6$EFAS@{muol|G)G+vn*Vg}z&k}=K&T*F
ze#?O^Q0%hVa<aS>0<3ADP|bvF<&wD;78>CjH!)oSE_Y5aoL{fS=q5sOgfgRXwz@6n
zmB%6vs=Qat$;aC9Th{@QV6ok2X2oSs5B-KjuqqM~x#JHm98Mw3sRrL@21<u-)2=;4
z-Vo&Xcz)NOf9}QbHpT8tB^U~Zx?!apw70jXvW<N8#UvSP3i}|PaGm!>=lUhGcG|me
z0@RMRN6U>b+kirGc)m?pm_)LK$|aLpzO&-6Rxo)X6~n*_oZ1O!kTPtao^H_)x{;<M
z`!{u00&XaYoor_*BZuQwExS-UFhqx;RYAR{<*SfFs(*3$hC;0wy^)PO9sT3fKVT6U
z>n=)tT=8IumlFs<O9}4U-Y0^}QV8l@s6(Z?*)7m7aAmVWm(vd^1tTgi_VT4m(V9&a
zArl}ILA%$|`i#UjfM11C$HXbB(M}o^m2Z&4457lX7^>+p(^(xZXJj}Rgtk$!SesHc
zN7xxtToy^fNC1ESn|)uPFzLQbz=h04BGj58fmscDD}D@4&MYf3jQ3nwcyRh|6~<QI
zE$FcsmdJ_^fyLRxKK309;p6ihNL^#8?UoKo9|G~EV5%f+%9)BvLDdhMWApneD-kj}
zX6#exXAq9HJR_?9_$1_EA?hAB2D44bd)%P$%cZr{Q%{FwvSfLA0@j@xs`mP_aS4g6
zFbWuCDQ*3(IYoDWP_nnfU47rn@Z57yQw*4d&KF5J^}RP1p2D_3G2f&KHa`pX6<k)3
zwYJ>~H5nxIdPz4E@L3P6=@U9dL7w%Cj}JPB98e&fv%2_0IJhGNR{l4zM+VKJWGLR_
zAvmgRyc**uM=DeB;7kykG{vW7tFSWA?sXQuck$ZA6d0gz>3=-9*j+|FB4#F^hJVv~
zLU_nYES_`;DdeG<<drd`JSV`PnpJ;x0{<ogf%{nLvAVUy6h=N*K!U$?4yKLAdQStW
z9Q||IPh}Jm1o@VF?>T=qyaL(vB~kIa=g6~tE#(2aSAhy9Irg?Xirh%(n(<M@PcDG9
zg}m3MwZD!9a5&6JB2n=os>XmG-oLbP7w6Lo$pd%WPgIsRZY%C|O)p2f_$OEH3Wh(V
z^X_)R)3X|{8m!SY+(p$vPn+#iw1+H`R(RcbJYqDaKQuVl)|(=!_>8Rvld?5f4eL1|
zu%`zkZa$4)yGaE}Z6@iIuGf6j52Zj|TYvA}9bm&AEo2w3xiu5pI47XvZwSLePM9HO
zmbF};u$%-gh_9e?@AD8l-|5&X&yNl;5;PqmENxnK8&^s$p$`XQ75cK4_McE^C_0%x
zCX=jL3&-`wQ00AGrvB(bP(Yf6>6}bGEk!rIgb5?Ypv!fm(M8{VGJDM#TZ7PQnFg)*
zTeOIqV?*1fwL20)ekfE2+j6+*BNh*Ba?oeaTZFLYH*(=9jtDZXz$_tJuJ+5vT~Zae
z{5^N>5F1Qr?H>n3s?Trn@$<(yp*l-6qQEddd~}wD#^tcABA2j%;s-+jQngMN@hj?^
zXmFF{_37_Ux&t3=Iu*UxQ<ivn0v~QUMMx(&Vb?%2W9^>l5QH>A-xo4n0*d&)#C)1_
zP$+Z;>3G!kMj_!3WDs+w&ytEz@jJPNY$WJ!M5EDr@N0M^^q=iLsgax^^FfENzT2iB
z<^lyWik}M}SRXPjFE4jZVjX*Uo8|JrM|ZgoL{8CWPI6y5omtl`lPLQnET;s{hiMW2
zm4yq1z6Vwwv!Gs*+uF?mgHfu>ZXk}a>(({361PS>cEFuC439>pA(S*_i%h(M7wOcD
zUR+xj4TA;eO7ZFN;ORVEBs58qMCub4DDNNdLZyn^SQ=CK;CAUDK}8ILRS4lNilC6L
z)U6bCD70cbcYD(cy=s)aOib#R?fd|m^)jEd#^VG5)=uP^3d8qhE%|T-DU1VcM04gb
z#Jmaj!Bu7V4N)s=mV)XDS=t*(fK%GKsqxU!2gy$r@<<=ni!p;&GwLX<F!;QQ$3l$O
z8yk7udqfu_L|PLZsTv4FSfhZo=jCs{zZ_EjAxG_Y|H%xVvv5GU_>L#Mb}zP&)TTxG
z_mT_{782k@Lv*Fk%q?WZ(!Csnz+wB$^~uuk6&s`tGwDz}%U7J89tDv?5_vdrBfpnk
zLc~y<yB~^ITvK@OEzq=h!0ah&DEB=Q*at~wrYFDM3BoEs3!Q&~&K9b0O;E|sV52-n
zb;D^*XLfV_l{`BaJ3;j<DQoy&!$zod+Gy`Nhvog*kSO57%Y(+(X;TVxcc=1&^>zXD
z1}73kG}{8o$VBP%jI;<4qCXC4NR@txhATV^SVRwB&VM|+GsTYx<^v`#&`IK$Pyd{g
z{JX(GONUKMZR9jk<*@t}Q8WWu3O(o+m<?PLzSP0^8@i7c7LAoVJj`D2)@8bTa?Xi4
z^E^9VYOL*|VNa6Sq#v0df1vXV_EZs5KUEhHTtV040o00XedkekD9Q#y@0TxT?+0gM
zwC~@4RAbuUD^nxE+gx78dTwhUQUgQgaDs1+>{l7g_7#-xypyXL&Cl=^bGuvAa@46H
zuX;rG;x}S#!ImlJnev9ri+{I!zW<%d(AzskNAuW{XLzHQV+6q#rRgr31X>7<_+5uV
z4FUZL=8FC3$cPa*uw>$q4KQj<5fz`{tLj+;NYEN}$KNy|6LH=4gvo%`hkKNv>ECrO
zmNZ!n_Fs=m#>B3vd82l^tCW-7xLj_sqp#>g=#eZ%Ca?*LQ|3T6<7{^gP4w-i&hdV@
zpC1wo3Hf4~9}>3Pdt&3LykutDH8qPohsDQ(uB#8_wMSj8OD9-#EG|b?X?(1A5N|}k
zBn=7GB}RWA%=+BY-$Q;gX}<TlX`B&bOdIP#t>-tM`I>nVxJ%ETLNMKY%zUk~y<qrs
z(=#DVNqiJ6P!93qFF#e<YuDslw-*d*fT<FQ6a=_~D71JVEl*-RBcOT(VAAPV>|~Ne
zJtSPa?SsLmJ~<%cHxCSf;7z*qWSxw+OugsHk|6GU2>2bEu6J@^a(F-8&nG}mP-KHC
z!xDs?J}*6Apz+)ZK?3*!P9L5}J5!W+$Y>BK5;EHR>ozkVuxDZ3P7u%`XF_^*yv9oJ
zbI>=3ttXEyXGu?whCbZhOaGJ)b$73^U+n+rtP8+NMW7V24=D&R1>FKouP8Sg7wV-G
zooBEYhl?}0(&gs66C^zq2oSIN$pQA7MdL*sIo~7IFcErw{_^}{n^PbHs0tcZI~ERo
z!Y^sOV<-fLOoa)(pu|6LQ6ZMs{9+lGjXoMA%L4|=GFw6UAS<SlynJzPu@4f;JC=38
zBhdkZ!I!F;T4M%pHBea2dJJ`sMUF4M9sNA2k!_mMxZ-sNU#zVEDEIJvr8gbi@xe*l
za?T^|!QER+@|gnJT}4*of_*~`FjV8Q3foc_v*4!)IZEp<eaaSJY#D1iJvr*i5q}`+
zxDxFSIutjv(9<_z^)fRvLv%CF$E~UiWWH4Sj^vlj2T)31Cw?KB0d?)t4=#bh3!#7p
zk9k5&9WhrB0ztc~qNit7vR8*$Vh15-I<5{OYLQYxOA)KW(m^zaO)XeiS!r-GAq3My
z8;CM}+%M0mRGpP|3&HkU^W@1BDPNvPLQoFUd2t$q7%R|$822tu?f+a>P&6DrdS=Ob
zx~yR?P$M4{mBGq>?b>rFmA@Z&{4Z%wL%x8#jsQUi*9F8f5Jri+@wiBV9}@?0jrSP}
zn(@B1wEXuq0)je9Sd_xfD!Xgr6eV_mK>jUO2`8qm+4@tLaZ%kiU?74)jHo5k|GXaD
zG4%oT>~SN1N!pp<6AUa`$T$k%GrU@DZvQ|+1}s+t2rV-`-U8*tAL|ejV1(>-&m!Z^
z8`4JN-3A=%3|wmuUkv;!2liwXzl|G9s?ht?E!FGnwAlhtJqrvbENV7MN$|vn_mVwN
z4x2wQxQa~_8RPEFe5vV-zl?(ArvfGkGSkoZ^EQwm6hQ|$u*2TsRb**|JYY!MIOI0@
zKK3hjX!-dy0K0;fq1oKr++|5#4hv)B<&-ZbVkRZjX+^fOvo~XVS{@JQbq~3y4>}&z
z-E}c&Bs<w|!<W3skRx5=XnerxdbD1r;Z*HX|Mn2)&Evwukz&&j)(3Sugt{#0PVkA#
zjiiEuDa82g$%yIbyJ~}|0Q9IBEw_%M5^_YVeNaxYwY9~v_Hkol{*)$5oD8fZC=#pz
zZC~D1U#~<4yzBYieW-_UgbX^9=$Qh3%xxIcl*hu7M@Y>D?$j#g(84s;;Cun|c-MKW
zwpU57RY=GJ?GTz(f;ytF(r*66Gp`^D{`}(4@d7AVAA%b|*%rliID!&Lf;=KDAwf6n
zvSe|}-SdY%Vuz~8bm1=||C}(yvN`|F_pzuzeL24=SzYoqCEmYwnS=zhE}X{A$jC?)
z?O}=4_(+I|8Q8U89azGM+3u6>&48+TbC3Wltj-hzw@L2Cg+$z$7ehh%u|lB&=*{04
zZo@mPjviOrjM!QJ_AJQygXFBN*0W}{5(PQAY^)EhZEe}9d~xS1S%OXl9Eva8Z1>j2
zC2g?|r4Ym1FGmt5bHDU+xG+u}qc_cRGS|h)3~JCQ$$x*5V@R(8890Zdd@%_R`$lTz
z&Q4E)Fugqvw{5MVY=|WUZAIVQ+`L}&@Iy<>vtwt<b2&i$lJP{*|Jq-F`%V;{fJ*Qx
zg6pO;noDv55PBx9j@_^a>^w7ZU+~F!Z7d|H&hH(74rp+})Pu&O_#1r-)QF)q0MYyF
z`Z@eAg5RYN!-0X*L5=mOxEBy)fl1A~U%F{ZGIB0TG%e8dMG*%FC-BG?<gk3lgvRO4
z527nzK56flNdGa7KP3bnYlHPBBSRhSq5aC2zIO>P7A|O3!dVX5TD(f|Djd=xH+LBZ
zSRHbuA{#b}nT(F6$BW<}=&rGGypF_=m0$K}OPBU-@OgV>IhRy18AVP`uDMpzm#fMN
zPQ9>JQjpScP@sElZtk<v_C)rc%55VY8+c&n^2L{FSD5LE3$D-qaaR2%OEj(IvE4V<
z=;%_eK<GI*I9g@Xs%>y0UhZV4I<Upl&wg=)?O>L-7B5dmNV{pYFZT27cJ=eH$+E9;
z>M%Nxvtip}2d}Dr@P`)Y)q)vZsExTu4dWg?V`}2T30?|8+Een1Fe6ex_Tl!)mV5Bq
zgMS^I;AhZ4+-<;Ed4*K6{<Wew5^No-rgToy#cZzlNmVCV;51cV6>6N+1Gwdp=BY(P
z4?~VE1)OmrO(z*>g3DT5u{R!*&zUx@U&s<cUP~x7?Fy?SqGg^H!j1e*`hT0>L804o
zYf;MN%l8W8Bad^dPF80@0HqC;P?#31)dJ3kU|T+V0Jb2t=4nJHXdgF;Ib{8G@^GVe
zb7t@K`Xaveek~0?{k<trcvf3tJt@kK*^&hbPyqwD;A*hcS~#=Z>hdJ^=L<una60wu
zKJU{P>=D*pxOoc$p&0)XfiqfjAekf-BMA-d3Uq4ly%Q=<>pH=~RGamj2JYDq&rN)y
zerLth4UhMJ*l0#lvri2>4M?UY$advbGBKeUfr1_fH(h?LW~_4P9l4l=ayavE5BPZq
zsG&SlrU@tcTt7FG>y?w(pCg_B!R_>Dsh3!*#_4rh0^m8RF)PLETv+`ggN`^|a!|&E
z40qaPdR#6<To4(05q7S0{~G!4-$AK}ojtZNQwd2{=jxE1+NHIcSO>`?Hj;2pucyy_
z=I~u8VL~(3%+dr?Oo|x(EQtV)Qb=+jbHy#Z3%{Qk5=;nVME=g5u$9UB2TBQo#&5n_
zea?*mTj!4b#I}CKY)eQ7FyR9Y<3-%m@0VM#0srtd=+`E93u|(08<aB_xonx-v|k7{
zGBF{a#c4i>JrZ!)d;|PoX##3tvzl#p2WnRjV^dRkP(|I<b#ni7chnkmTvSYjBTT&J
zAPV`H#B6~Yz<vh&Ps0VCZy&u$dcLzfL@}#$`!;vJ7SQfj!7(s1GxK(2yhxV{@a33o
ztKGeOWh5zB?Wo^L<eC1Z6V{yak%f6pF;l@Idw1dDD2%2k(eFz#D+gtF(!DHVC4ytu
zI&^0Ch~Z{RU5TPxRQxB_#psc`5vjPkadryA$Kf7K1a0q%TNu&|aLosp#}}#<)6`#)
z(!{rr<?QA~u`vh*Hu!foKfYRS9=YIF5<yX|_^LZQW|KqNrukJWU$g4fv{6EPG^2$B
zJj-#}{5C2k4(oXHo3&K3yPBW1z(n+7N1v@`-NRzrM3cYlvX)@laXVe{Hp}d3c+_X<
z8PsF`45trcLbVrP*W1B!$DZY-kYIINbEVKQ$^O2hkkNb?Rqo%v4rtiIK&6f*FLP7g
zRYu0!Kyw&@t*zEQ<Tj-1q*c|6IbDA^Sb%8X11N43X9dUu4LA;=r?O&)VW5ky=8eZ+
z3dIqYuY5v&AUWUd<`5cqR=Ea3*Xw~cNN%NwVgbMsuK$Tf)Lj#FNaX@VL~hd60KC=?
za0I&V^unKlvh@xC=eYv7SNVK&#}50ao`Y)oR=_ZSf`iq!)o)P-Sn!%Y=PBbKlHRb4
zMl{KKjUi|@^&XL)mnR|7v4H_&S&ld08)(TF2HJ@9?+8>@Rz4X}<R=p+j3m%e2gDWE
zK=wSpZwLf)b?(RKECD-R$8p$L2J*B(=5^2kK<$Nre3I67u^|V@cGh1w-T=NUx#2tO
zdJvrkCd=Caje1Z_vI#Ol+Kxl|Az~+s%KdNTh~!0Be(YL^HcD6cy&$5)Z~Mpx<1=SG
zDBNS+g-$Q?pXf$yaMz3<SjAB}WOj77vQU_|35^QZN6`!~e_6{jyI=oq?9<7U%G9l=
zuQ5z(3O)UW>rWNoR?SCVgf;RQ<!crSb6h(w=Z%4iiCoPSL8gK0aChC+2!A~)cEWM6
z*}y1IB8UBav$>*P{`Nyj`P$KT!f(g-9jVxgEc=rqqMA<&KDeB|40#!4@EA96XeiOq
z+A4;A=$qa{b8Edei@uK+B5WJB^rL}wQcB-j<M}rJnh=YZ?rB6#^~pWiZ{$=@G0Jok
z?80;=Tyn2|WKzG$xt5@G1^gj;bVVK*maSFPff#=r2CT_3mwBhed8Aa;w~?zvz4gj0
zV|47g_?mq^AFP5riox(3GJamHS&%7veVIjFvn)n~fKq@KfSJRd6EU?*ljy3x%Lc1K
z1_~23<BtLyQk_^gvaT-!7#{8iQO2%A1J89)K)NFj^{19ar53bbpq)>GPtx>t8S-%S
zBnW9tfTH%ksi^iBCLz)M)`<%)<_)dM;=Vd@7N4IXV0D1^f@Ns++ij5y3}05gnlD&|
zz21c7sjDk8u3dZ<tsvmXKU_VuCkcE1UZN5#oUb6a7)dSSTH#==<HgszH4u1J?Q++f
zRB_rzHlR;HwMp4Jp9%hFX8?4N5@BH>N7@3X(@PNnsoKsY{BqH4o?5fME3)2-z>>ml
zwLwiII2RX;l<3x;QQj9v=cuubMK6kBF872)lb+t855Z|)6FtjS$)WE?2G;7*2aGal
zv?%IC9HcVxUG*|Z>X^Jl&m0#AimI0(N>K@sX{N#2WsBu~4|Z1g9R}@W)Ui97A-RED
z3Uozp%t}j5l`Yp+5|Y~H5}GxaA6vwJG;B)AE4v?tTkKDcOty=^dXM|-`~m-$9JXb*
z;QMEaDHPgQ`HM>o(2>z3=#!C+O*?wpIY^E}SXuOzw`i+Fh$;3eZVHjKpAnpvmY7W)
znMSx}hKIRj4*12k6482@f7K<D`NMpnyU5JW9*KYms$m#K6BZD@=R<82g4Y=4=i6(c
ziXmDl+(zZDp)$LH@1as>F~n~Dnv2ih<Z&ShzEbbAz1Ocjj&{igjJ}NGQ3<N@9z7$*
zzo=RL`GioSZfW)8;Jz0~_J0MIdk!~kQ%yZap;_-oz=YE|*j$vj1>EDW8c=^1Q+$=)
zP69Rb$>_blTw=hfpr4LRHnAJ4I1A_yGU*${%a={Rf!>1LK03$Pt?RqlNl%~RlC-Z3
z7uTw()h%CQK_p_{;<fe$+rPL}?oH8^pE8iBs_t$q+_%DZ?wx=s4e&tj8nfvb6H_G*
zHBfhUTh^%@AZoayzD6BibsXogS?scRa5>aq%?bX_+Ng->o^0D9{kNstQ6y`+*9g5f
zB=W$q50x<`xM*#1VXI+cVl&KT(7~ly-IOAM+T>wNU;gSzwvLB>TAG%SGAAaOo=37!
zc*1LRqiET8-QmXb{)F%imx8$o^UsG?F>dot#H`Z!!0ZomdrV69yY+&02TF6i?E9q4
zPoG0@N21(n9B_my^QQS}y8ze7Xn@gz{9(D{{Y)6zY1!cJgt?Oaur{xu1kk*-IhWyw
zy>&&YT1+Kkc72`X-)IRF20m+);Xl~<cIwV%;g5H;O<XrpHE5yI45C%6arUuf_`L5(
zs4`7<RG4ZVfeT#1&qc|5OR89S|K4_NrH82dYR+T6>VVpX?dx?#u5U6kDejdmm?~x#
z*s_4uN!vH`f@@Ef26Ir!iwkIRx)$ze#fW*;85SQp0kiy$GQ#LVSo0qe8=56YQE>cJ
zkUgCDS2V0E9v<5@jXrt1U1F%+<l6ScQ>HF(*#`F2Eki;s(24PA!fPg!3*Xz&l;*Pa
z<AYv@DkPdN3!S`sggQ$XrQS`1BO4Bsk9zESeeL9mIof&H;@I`7?`qr0By(_c8BW4m
z<G#e#W%qkZ0#-2vma>3zI)!T%ne_g)=h}F11^k2f!B&5Z4r*J4li)}2M=|TU0`j~y
zZ`e&GnLjPbPq(H(R-?oyt+#u-@$|BW4jm}mjPmnCOY_1v>kY(4v>J@gB<wo`sgS<t
zG6`SuW41$x9x7&0QIS+Ji&+M40>*ni`z4$%*WOfVT*Gh-GBb75qo#E}i_fhf;-;G!
z*qe)I<uN}$FAu^6ECkuJ@PW(_3nb~uIuDi+^rAwyJuAcZi{&1`?FyPLwHQ(Y^TsH6
z(gHf|1a0w^YZ!J}*@Bp+s%i+8kUB8k?}xpXKvlCBi~+F*EgyAW9)FDPFU1O3*%&XP
zeeYfuEHFv|^fk@Vqb26_f?a_a)fL9$z1d>+f!|(*htnfK072$Y>>scJl435s*u3}J
z+wOb|Ujfjx$Y`urfr7?;9X9r)gKZ+iv$ouFxS!Mx@EnEVOBX*t6a_|l?6?CTY7LA0
zPMTaeqn1Lg(4*wQQ-v=GuH#j;TzbS>01gTjq;*}vn7hz{=BAiPPk3bgr|7q{c0Kk~
zhqQfqiKm+mWW!e8_6m=!hj|?qtiOg0o<(TfNbHFCoN<TcAkFmttBFKt;C{vai?Ud<
z*#eeRx|h58Z?guTh6p#}mb+%$YqRR_zWZSC1%@l$I+}<5?XHNX%n<T>Ptgt=O5PeS
zI3{F#eY(R#*+|PHOeW<yxYv@eTT|~*XOY}KSUIaRs-fmGvvTbqfhnhTk-KN?T1NlX
zYtsIuY@CCIAdpc?*DLTYEIumCbj;TtC*|^_`?Vwz54t${__NRbo#Z^i!w!rNhl$2!
zV?u0{%{Y5Xnb>?`*MK)`q(}1S@)Ez)3-ty|=u_V;B0s*{iA-LYjC|=(MK_a{OPM8A
zocvH<kEZJA-uCn!;KsWS9Puo({6@5qGZ0~AS*pPmtbM`HEV&HW7N@b=dmCPUd`TjN
zf?QH-qS)(=?`G@f><Lf}6l5Y`0kV-NKLIl&51*)Atv)KvC!^<$ZqWJk1h_z{-QVyi
zK~N<ztX3kEVMBCf2#<lhW`<ZerSTfV5kL?L=2tCU?`uGDlLPH~5ma#YOQdf4?TI38
zD_tzQ^?<g{2vnvw^Kwu4qhjE3qBulyJOI6{Ciqy|flYTk!+*o-Q$qj(*eJvKJh4E#
z@a3UdJ$d}b@m7zU6W;`1D??~1j32>Gm*rcz;PRyd_^(vrWK2r&oG4QM_!K7A?6}0N
zHlNZnGHwGkO|_$nI9A><hEDM6S&_z?#YeK=gJdnEkOy)Zw~9pK5gYP6BW*+z)NO0`
zc%T(<TST0~+9l)bzH}0e))LXo#jj#+lguKq^Q6Oco*L^k`NOpL-F*0{DUanV4Z1~&
zx`_M?*tKuh?Fuo|E6sfUoT$+j;-)jLb;#b}nkta_Fs|M$hEj0uIAO%y^61Ilw*-bv
zb9HHl9Dj3QO1cDhlF+O~bBOiSi@&<qJ+5)xah<gyeG)$O_L==IS}5B6Pr9hwV<<{i
zJ=IFQap#&s845R64ysY+&Fa$jFIi*~i=qfb;_LD@;5Zu*9=#CJSUcbXpP4W}`&vky
z4T7IiORo)des@SAyvSWB$pcZ*@&IBIM2lvZ;G)GtZWj6;G+Q*!k4%@3I=mc_LfGPU
zJWHdE0<^jL6bysQ4B}t;C3CTN%6Du`hrZaaGC|4UVNZARC|{g!t(havYLgx>QH!qA
zxG`G70xu<?5{m+noZ+~G()<BmKxf<8r|!$z9AtN9l4Md-0T>YjSLn$LRa8`_uq-*9
zvgT7}^WH9SSzL@r8L-s>j3>cOW=Ky>)ZSqln?axI@s~p{;PW1|DSOT=bm*msQ^c}0
z9g__r(c(YZFtK?DH`E(~QsbXyYxLB6%~%wMdY*!qnZ;T&mQE440mj9X&e4~i{wHK{
z9%7$CYz<~c)Osr@oQ6R0MVSGQ9-71zmCy-!YVu<XV2SQQcZgnnJ@Z$L6cRn*&?@#y
zD<5%AD&FF$%-O?FB_vukR`{mhr(uk69Q(etIh^(MTjnq^OO6nhd^)&K7RM)LwPu@M
z&=u*L@MNyTH;&CgEpIH*sg{9Ra`eG#yD)m@+4V)k&5isX>CCHKBq9?T)=tqmfpa-_
zV_s2?yu4}=E}mj11FvL_8>uZg-`(g_po?-OfBdNH3J3t-hx(Qzl5Q}8aUMiFeLI78
zM<l$~z@6mNpctSsC&n*tU|ma?&#G{`FUp-ORpIUB_3rt4xW4nx1pqC<S)g$~ptmm3
z6KSSWL}5|SwZSU~T}kr?oT4cnVW4@C77$L<evBJ#tX^Bz&6EQ1F5B^3k4KE?ZYust
zr3M_aY?7HroFwDcz-Nz~3I(yn7fP^)998uNsk6QMcpigq7WR2Ln{;>=BzQDb)j{&(
z3ZVROGgf3B<&_Vhwg7>`)cG7OE<g{5XPPkc2Dk^Q10TP<6xna68?W(fV~C2@VCx_+
zNi{4prSDt*MjSCcu2r13z<Wh7;g+1-^DsUsF$(hif$V!si=Xr2057hVC?R=h3XF_g
z_>LMN4z8I*CL4*;bLxVm!Dzpw&VEwhJS?7O1D0HU8TqjR;lz5`Jk<|3=b^@wm2w$w
zIUeBzkCi6JFp>L)WaVO7+r;(Rlc~0g^i#<e#lexT@ODIGa60jI5wQN6FEPss!*GK{
z?pgBYO=^y$8<A$8?u_fL#PF<))-DTDwR>$J);X1ao;WI7u@Y7&RaRW@E(-x?6i=D^
z0%??I+NlpxCfT*9CkGuxEpxt9-3q27lc>IHWkxu*lo2>+5Ui>Od|jp&N`0zYeGR4M
zB3e)FN9gRd06|7O8(2g(@NFYfu)|L)3Mr=%JA5Dg;jalsXiXJ6WH$_))jOF+HgS<D
zZ_^g-FP}z$WX$cj#cjgfhuslV;~4|b%{aYHiaANTA`KE{q=&j1=||Lg_!d6Vq_C6I
zf@vOpuc7jyHcxDsyqELw2(SE<k4OD*v1zr5wSdQANo{t|&fEMr46iS~+$#fR&O$@1
zL<rg_1aqbKobwri;Eom>KcbMtt7W{@LgOf3Eq}S>8USO40y?StBi(WQJr^UUcX?7{
zM0k_^&I9V;n0Am&e$I3&_1>dFSj~8>!^JL3+oDg0`Wtbxm><BaXW|?*&4-W@l6aVl
z);U&LI1(Ijxvx&%V5n`!Os(6^Gp{x2sPH-nkF<&;DF`2zeJS0NE=`l$JzUw_FQbva
zuo8pPOQbSm-RB*M87am<zHPvv_=>!Zp5$2X{tYv$$q#~Hi)lhpOWt0OmCMq&Poj0-
z@}zv0pNXJit-UtfEpr*uw>^M({p@Vvf(JR?ckl0~$81B=3&rfpg5*B*qJ`&7s^?ul
zV+<UXbS|%(nVpr+d{Ic!b(%tWQfkKOk74|!W2(`YCE?<SiMpy~D{;`ZxZ9dXz1*uS
zaH9d05V#%FtD_p;eok)2aPkkS168W($F)|ma}q5&THu5da6RG0z2)%2<Z2%@3@ZQd
zVe0byBfxTaS)2(_-9pMcIq7AC@wRPBWWR^RVay~814VHU$cUFdx>2*1*(fELdKG3N
zqbYkGR2^>?pJnsXHg#lVpX6v4k(Xz$<?~Iz-{%_i1LGx~M#RZ($`8YcQp{~_&(&Ho
zf#6%eQd&)pTAf9b*AALd&D>_5Eq<%>wvQV_wOsY}qZDM28`OY$oeHL#91NOIs&`M}
z<D2o2tR+mMC)mPyy|^`lF_5{9rJB?p2L3#k&X?_DWREY8duZ>hb_)wJGBF*MR*SL{
zs*{0!>YcHC@|`ifyf1x}*ir^=EtD|qDv*<Ra)GK;ef*Su&oTF%{YK`FD2^yV9z8P8
z_h|~n!InZYxn*x}M18P;pLTYCV>VyW;gFEZS`p<|4b{+9iszo9yww2*cIh2S9=kDt
z6#U(M;ejTm*^Bo46YsVVIckLA&_|y<IkQ`SwZh1WnMV;b>qNL@Q_JP?z>#RRrAk2^
zeNcT*vzjG{{m5Nr%Z;M}X2DHe*XH|LAMd{nF<fv7gbPUM4GVPiH+4QvYJDtHaD&?b
zgxKjjZs=BWT4cRpJcx=>py?N_IHuXmuz<?E5WaD&H^j;i?0Xl6gd$GTYst?pcR@F#
zsdh_<7)Vg7@RAVN@*lcOzbgD5V{ecK`S-Ty=2_6T;<7fM{uGE?kc<<X^<gfR>e{~z
z0QujJ`6Mr^n<b*cL&<pM*BC+K2gFgk`bAY)y5fWeXqWBj`Pj%S*1-pbP}q5K+W=PS
zjdr<Jf3i3#eT8`D>){I9G*+!5sT-DGR0br6%+7%G4P8MdBY(qV@E(mz`6Pu*hnE78
zQI`T`8ou<8c#*`Mtoq+P2dx=eK@kp{TW6Bk173YeU(XfePt0fa@60EoerAFK^k8a7
zb(<FJ>2v8tCTB9Tqv{#vJiC-fG812fTl&5o2fA0Lx4f1?f|<PNU6k9U9%b5c;)rr8
z?+JhW%<1MXwzRZs6S4TJdL~^=-G;96f|QGN{gDzSB6lL^+QfUXH1+L;EByUnqPg<%
zwF&P){xSg(zAVF$0I}Ov0|ck`(iGs_g*B9C2Dg^I((UgHSxi!2(}t6Z=lD;aXveu_
zV(lrl$ojotzL<4V&nR<&K=Su=6YLA5HyPPZ#owey!0uZh2)xoiQnL9Fa3MGu&m*}&
zi+e1iwRg8vZOn(;adpI4q2O-#3Q@HaoVZKSfE^nf`w6hAZ-bCG%iB^VR22+-@~a4I
z`UqZM|4>_i*d7PsRtZRvjT^j?BOl?vSO7h8w^xSmsTb(!E{l^1Mg#T}As=qu<#xc>
zc|B7}Yu-m=_W0Pn<7VNngH>{>H@itjMM~|SzNK(U7uV%yIHj9tG|nBz;~i4I{GHNA
z34+`FuP!BN-bsj8nT&oSS-!~MdRBJ$@x|l5l3q~;NsQ7pdfdJI61=0;$29UC7+tIm
zRjKzre%-%tD+QTM(D=EwKOPD<Wv(hM<Ob|@VshDAAMW<{4x=5>`6%4`d{Yx`wLF$I
zx&)L)u&J-%_?yWKf1aOM8Q$9K9|4m&B^l{T%co9s>zWOJO8^b5%l<qh1VV#={4scT
zsmTtXn=1;S18;$xYnNJn2a|FlFLi4@fJ({OJhPw|yDsFk#wr*TP#G^^D`C<dZ=U~z
z)k41$@JN~%HT5cx>=uEfk=tuTD)(ZjfpwwBk)xYhUcSY8h={yD0hA|d|9Y&NRDra>
z?P|wW9WfT|GD}-L*<w>Pi~HoV^XJ~gh3hJ+ciB1E1q^HKV|<{x#Lo6z9l`oI#Vw0P
zJlv00?d@K_8@rkvW^Wa%cBg*X%=TlE)AVtmFtFOnCyq|j<!@la%gmgeI@~uF^V1Up
z>58eE>IF^X)4KJ5C<#?BhHeOuajzKV(gRUO@png@FcGM^9(%bT#4;tX`lTt>t514_
z`MJ&Cq+Ux14#B>B2ay7e&|&s}{^Qs>Kf4A=NWs}@N<AbXkGVWl5Cu5eHJ3VB$U`>(
z$g2a?D|~Ilq=^9NK+PN0jv2%^;6zKt<trq+-gs2L+CoQPcu_xk?2R)as?Da?0nuV>
ziTMB}GWG7s*k=I0VFtlG2g^fnD`UV29qgLd3%Fyq2V^2cK&7xUqjDlEi1+4lB|LM&
zEN7+2R8HEpa;&k?_uakRoqBJk0-as;#v1>mJ7^0^?3Hn~Z&71=J^-;?Kk>n4tUJCw
zMb8Y1Lbz%jD6!Ksgh^so4uh=RZfdJvuh$Zgj=YptX8o#f6;lg^ot%+TXe3_PqN~@~
zDtW-oy{1EOJl4gHmzB_LTziDy>M_|{4D|??jAb4Ykk4|i-s)5fHXetc8Y{PIYm3@j
z4&adieXE>--_i|c7kUc~MBHB`bsrU*HPe-EzCR?}+>R;`x?#*`ML!<rl%F*};S%iQ
zX8KXq=P5Ih{^2X;YJEJCp9ZBo^sFIgvSxtW=}Fob!JFL}FszHc+3dXcU`iJZ*by-i
zGZ}9HsgYM#k6iFIP2f%|EK~t5u$ARj*$^#($2f?X^w)cNSv%y_?JW-}gD8tv8%VOa
zQ){4JT^TT{;PV8y|E~b)6REfaihkYu0<mC`h%5}?n`axA<z1fv^s^Bhb^8+bE3vPq
zfp_c=2MIe?WKw{dEi!7mc;2F%H5C}i6MDSSMxf>uk=7Yj1t~NH;;q7XtdJLP<An+6
zkf9t^>$Z14_|5RG{K{|S@;0Fur!}A`G=HE+(~)4~g;GkYAv?RHr^TR~*@?oU>C0cI
zjrLSi0xlxY!JVt<MYe#=D{#;8GuDUbdecfvwu2EE5ga?Pu4G`3b*EA>VR%yX(DmJM
z^0HLhwy+;BNmnSBOP{Ljx=*DdFKdfjyw0#ou7d84dwNrC>K18_DjW9eG8c;uS#HB+
zouM1!1A-kj<MKgK7O3~;o@zBoWvZuuSzJIbqncnC>N-u=>D?9Xv6rb8xkthmW&F{?
z*tU<Pxq1|feVMoUZddKVdjqZM3G-=v1_=N_3h2dcD*Ros(pI2|?Kctz(jpy69swvr
z8{oYS@->h2ZRaMphfj=Sv16^Z9>eqWYF)YQ7kY0Oiz7OgZwp^%A!kjQUsVU`NzJ@u
zyac_unU@@qpi9rqDqX-fHwnW8v65P69wT0G!Tr)l4CDa@?6C%tnKFyx)#U)M&<@(n
z26|H@2wuH-8&J|wij!>#56tBPl4LA`_Rh{r2}NIX3hLhSLQ>1RrHfn5RJyhoyX|KM
zG2pu+<b*BaKP<mi;xF5)j(tNs4{p{EKc+cw&}F<;ZbHR2C?Y(0931kp+-OX|^;?C`
z!D&xAFnGz9u=fSDJ=JjtA4e&R4Bx!nA<uRsyWGCN61G`k>Ka8PTI6$;;c9z2RUR^{
z)x7K168NMG30#-qa5Hn;GEq{+UreP$oc0z9LiY~wd+FD_T`JPJpRW^ck<cFCmgy$L
zu$G|a5&MPu8j8Y$i`O)KZ2w4P-$LI;J_B)7OQWWBhvaq??)xQXbckRN!vL(nQ$kD3
z@(btCBG-2G;rdt-D~VvOe?dbK(3h%i`-qZApcRWpjzY+Inz8P4Iwgyf?`E6YSDQEh
zSaw+r(4e4e_>~O|ql!|#Jq?Nuz!jOjFyE!e+w@#%KDCiB$$e8!8tNZ>b8MEH*DSP0
zfs{NjBCN5Td37lKhoQ3c3i^!kak`%S92w;bb*$r=n5)O69$OwoX+#_d`(zDe3#-E?
zX+!c|<PtTH-kP?*>S00Q=AD%(iHi8(&&|G!l9b8CXcxen2S29jpC_;c!H577vsV#U
z^2jsLd6g3U7kW_FczuRCg`U89E!@jHf#HW6c|{wMpQ{rM{6l5>Foz-nu_vq6=?)gl
z?%irssj?x|+%B6&Lzt^-s}w7%U9o&T+)@=gIrmD;)&s<hry5|vCgh}3J)f9@sm^p$
zj?MtBYB*qPXHKT|1+nVBsh5CGYOK#8id{GGl#)W{x_wpnBq)_-*M3wEQacDj<i1Wu
zwbuy91_<_C-c82D@9*=bDd&FliMjmI(vPi^On?ob4D|J@UU8-u3C?`zWlCw7m4lCq
zuQpeoiEhuXY22z;7dgI2xs0v8FWIPk@`z$FD8I9^cOFvE_Rf=K!c_7G*u<Z(jCd{S
z2nkQ}cyDjRI|vi*^2|MjpA4E3Q>-O)%lFg{m`f-c;XooT#0)*Xa}Eajv6`R(XuPzN
zs5}T3UvqH8rOURpw_i-y{TeK^2JvvFz9yX+Yr{e>6KIp;m>0)u{>sb|%{m(t?%U>r
zjPu0XN3|Bj1YMUlKqDIoK;1UWlk?0mF*@2TP#jgy{yy;oV-Ukc7;WVDVk%1e^g$0u
z6hMsO1}y4AYr4uEl0d;O(kCDXa~tGj+#NHMI7Ifqem=Ck7e}$pqtCIpxR@Hl{R=13
zfY!53F(7k%hnu2&<9Xlk7Ib4`%af51uS)wBQGC6&v(u+V`3(HCwBsVUVk+6yu@@O{
z>gms158yB-xhEo%9+j&U*$#&drCuziCY8s;y6N)8E4Qd_%t|1^$g#fiuF?*)D1~kH
zZ@KUG3s+{3jci?aaoj%XzriqWDzuiMP7eMMe!ikjn?H8%id(>6t1LhlMnW7PNkS6O
zrDU`Awbf;c0(%CL-Ua#84wY?#ccKgFv=CP0llk6nU2*9E+zIl(`U<eH*x2g`<XLB@
zLSHBDJ3af65P%pWiy=R5TY+S?fOJMslJU;qteHCA&fpaGNsQH(-jk4ZtCpK?ySWIP
zuR_nY>+apVZvdNke~Kg~h$TCYGF(|g<o^Nfei%?oFFd~?5*@b7rfhd#j65oQrN?1+
z09exDLlFYsJTzsJufxD;+twMw!`8L$RrA#MHP%JV+BDTQ&x1Eyso6se@}BDY1N>6G
z*&jZrRCq}>8?%Cl%)?1n!?$5GvzX~HCVdH-E8pIj$mzXgM<(1{UrZ}nYhWA(N!}Gv
zbyls!<Pbgc%2%VjLQ~i7p@<3y(L$~wpBz0srE1bk1P6(m+NT0Lj{H-GF&Co{*0Jil
zFM{Dw{YBj716i+`dh<%-lfvLU#i0dhw(xBRNe^apACCgu-AONBkvjeRRr3V6-!3fR
z{){c0BR&AesSDKA#xCUK6L%q9Y-goajO7gjo*m{>4PTk<#=N@JY%}kWx+|5yP5W>m
zGzFQ*YG6!i(}nZKPlQsfw~|4Brm@rP<-jyPx!Ymlc}JuL`rESS0Ngh?W*I5%Mfm94
zR%;0`vp!<jIxeS&+<pNv{hx>vfakSDiLIRl#FF-uUh7khGdI$or_o*h-I@QMzCl6(
zNW%7Yxh9OiBmN#fK(wiD{&f8tPf$om6kuP8&e8mZ2mMV0XZa%yM5&?%>HhY!@8Y<O
zT+T{%aB%P{GLo1jv(*K$^#_R;BB(h4wCu+2knuSJ_?JNp$pR@<*o(e%AR<CLVx>Z5
z9@Ts`Wkh=?TP1O>FB`mI0JnMzbS*S|25c%pL_!c5Z7CIc`$_y)(~Ton-J0Eap6`)?
z^S5oh2*AIZueN=EK1Nki-%?Mcj|3!j!GK{lSYQFR*nR<CpPZFdep(_3@BLkv01u1a
zT1iqt=JvZPMBEUvgMvvw847Ucg58FnvhD;6UjNrmBcr`#Y8c|qnQsPl%|FHd{X41B
zhIfW7UqKHdr}!oShMmt!L-}J#eIH7)D+np5_5{`b{pJCWV2B<3<7NK*B&|I{feUK8
z{?nxW>njSf0uP0%Za*G`*#0)kfBL7NlJ}y#gsFVbKVJ;_h!Xd*!)Qb{Gl*w@apCG>
ze7DnB>i!dM``^U-9^n*ee!0o~^NBV}$ysl7UdXoxzCP|m)BOEyX?@Uw6Ii1FI5FtL
zBKP;n`}w|DszCWdKbj#*6VAtqc1M3VmS=OuhesyFj)@=VVUPWvx!^zFXquRIQm>)_
zspUsB?&p2~MM&qrfJI*dONx<$h3P-t^DnW0yED^|X?V~6$e8{d<ey{sc|BACp)JFs
zUWb2Q@ZYV(e>)<W4FEG=SYv6}I7cM^F0p_5BrPMtgl_9-m-}58|JxD$E9C#*UW)hy
zBpea>`f5D)=D&^Od~CF1C_C>(kb-|r+utN2l?wG#_vuU+W4`#TIr{fo(%uFY9RaU!
zKXU$fYuXz>Al!amgl~4^{CjZ;BB13|XGk`OKLifZg9UyPXuHM0Okbk`OZ)e81R;m*
z_u9)B{G6!&C<$-qIGFV`s|Q})zfQA%UQIuSDsi=8n}N<JUHjMe05FG3#Ki50;^*Vw
z#Xm5hsp^PEOLv4EF%Ut}4=<4RW;82b#bbilxCGb<Dp~zZKX=rh#|^O9TG4rJv=P-J
z;Otw+w&5U15|IT#y9EgFlNTzK0)G`r{Kw&@DuCzw?p8yxSWrL-#aoulc9-usSe1G7
zD*MH|^Y};s3NWy3jX#~V1cG?MdzMh34knOo5GMgG5)1%JF?$7FW1nyYCt7^Gbs-BM
zrdd0LJ{p`HsQ<E`=I4t*yc<^dOwWPI1xSuLM2dEHcIgl5JsoCrZpwWZ+EP&ih}k2m
zl^kNc?Z93ZLk9o`c4542qL(IMbvnW{PvS84W(vJZNRd!3FhFwls`TlHa2=m*Kl?SC
zQ}qap@OqGt6UT`ms1cvI&cMKMS4U@MBH;dyxdDeRBDw{ds;efU`pP1~Mu<QY=hvVg
zN-O9e_NK6~aF?Jn3?X17bb!+2I5ZB|WF32HxbgOh5|*kmZ6w@bkZ7ZpM4YVd@t2<-
zIT#-@%3+9y$DQ97IuZ<6VlV5y+o97$Sl?>*%SNs2;sZn%YQMgcr~IBf@4F5bPoL`?
zDgRGt{e9Yhy&mEhQYApoUhr@srTpJ6&jFYJUwe0Gtr?ZT?7vfi64!pB4k#s}uKlsK
zp~>JdL%S~H_G8xnwjZ*HP{^`vH=9!Aep`Xxrw%I!2rR`mUE}8`8#s_pP&vH5?!0^<
z^T#v(oR$Qnn|rBiued-R+TR}bPyY<S0F?u&)7QCV{<q5o5tsiTb9b0)ALp&+pQS{9
z7s{tHun8+Wwd_6%tVGwiz6vAP7?qs*BZUf?1JfgQfNu1w8to5Z(t_jqXOOaci)U6u
zoD4hVCZzTUMj!gL0hoQ~RdY~Ub%Zi`&C+&mpMs%4RS_xp2Rb&*q(@_IL8+URq`d!O
zr&Qp6sMfgm^3TWr+YP8f1m@vUYD?YU-}!IKk5+{Zb|+0n%|gr(_=sOFEr95uLL#X+
z8JCOJ&1?T<%7LQ@D$BN|5iuqV!fsQ`Z%9bkFgYo4Rcclc6b_OLaOHAQkH7RE-s*ff
zQYBD;F_L}&5+RYm(HnHmeM!O*2|7?|9hy(p)#^A5sznN_gJZl14e%z?U%PfKj4z8e
z*grXt_F+FLhx_|G{V5eRMnnx!gX4N%RbgT8yL3QDXf$h+r2_J5rPsiTR+`=Q?tj?{
zprQ*4RCJlL^D({npJt&Hf#7=l$d2{Di1GWwvv^Q;mO5jer2d=Nfg+(K^v@bEIkYuX
zS1J4m>-|vcD3^ilr@}Sz%d8N;1aK`;$DMw(ySFrczafMb7V%Y}t!HL$N8hEN@Hg2x
z+yT0_%6agn>5t(Ckiy=%>_~lA;{V3f2@pYkvi1>FQ3w7{5~M{z>;dnW4Uqrs@?FH`
zwHEDU|C<?!2Il7iG6{_CKQD+MzlE+~gUj89B6$8c6BrAUMS^UokM+Aae_LtL57?IM
z?BV7#2{)Q|2KwasZzjMiq{pNmLVx>!R0TpOdcsJle@Onr`4My}DuRqDCMgCo%G5FZ
z+q*)HQCa|aZiy<rIm;pDFCC6}EZTLjx{@FMOzngE4`xocE;1L}MzXY)%5Vzwccwp_
z*?+OnFEg{Uq9GhWtT-?ngS7dE--h^)vV+`4#&3=0HonbFC_V`;hNdGt#rCFON+Ed{
z4G~b8)i-n-41ecR=VcsM`z^Oq&+YTOByDLmJAJX;Y4hRDuF7oHv0eTl#ai~^nk7v~
zAre`7W%T)$oh?uHefQ0+`4d(fFWb}l1`9*a`O~(Ofg_ix^Z#j0osz{KG2M%F7Bi^%
zwagJCaX@!Jds<&5QuND)^M;n9)!3=UId%60@)rn3zP#Oj{ab~jWr>>V4(1%&$HY3v
z#5j)8GK+>BtNEGF*nd1;b*KAeE*`R{yp}YPba^dlOsqEP>D!4)FO0KOt=Bh4|MY*r
zzVqz?IEU{-gUEm#^E|Z?BJ1J)j)T5*GZ}9@F)3zhh>Z7ka88MC=5~9C8lYzhIt_ll
zHGAkHCg?7DaIob`{ML2;^odfy5!0SBya(s}**y|!@G&t9$1?@xpm6=uI-S9theAId
zq^hjn8cK&K6kb~G1kOIh4pEUE6kzv)WiKLt6x;Wo6#1V&dqfL3KpxU_&VmFI-@;Sf
z3sBk-^v$iUxptO<2+$M7|3noOKp!#aBmLK<p#X|1-s?Ncg4#l`UP09K0?$Jq?knH!
zazg&6gD-#qHl<iYCVxF1_opC#+gAT@(yB-zbQ@Od+J76`_uF_Q7P-~+PrvP}|8##o
z;C83^d$0Tie*Bk*RDeTdI^%n(>pzV3Z%_JvL;ssVe*W|SN&TPK+5hha({P4~Gom2U
U_#~Dc3H&D~tt6E%q3`qm0UWKF*#H0l

literal 0
HcmV?d00001

diff --git a/content/en/blog/_posts/2021-04-22-gateway-api/index.md b/content/en/blog/_posts/2021-04-22-gateway-api/index.md
new file mode 100644
index 0000000000..a7d54ad645
--- /dev/null
+++ b/content/en/blog/_posts/2021-04-22-gateway-api/index.md
@@ -0,0 +1,197 @@
+
+---
+layout: blog
+title: 'Evolving Kubernetes networking with the Gateway API'
+date: 2021-04-22
+slug: evolving-kubernetes-networking-with-the-gateway-api
+---
+
+**Authors:** Mark Church (Google), Harry Bagdi (Kong), Daneyon Hanson (Red Hat), Nick Young (VMware), Manuel Zapf (Traefik Labs)
+
+The Ingress resource is one of the many Kubernetes success stories. It created a [diverse ecosystem of Ingress controllers](/docs/concepts/services-networking/ingress-controllers/) which were used across hundreds of thousands of clusters in a standardized and consistent way. This standardization helped users adopt Kubernetes. However, five years after the creation of Ingress, there are signs of fragmentation into different but [strikingly similar CRDs](https://dave.cheney.net/paste/ingress-is-dead-long-live-ingressroute.pdf) and [overloaded annotations](https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/). The same portability that made Ingress pervasive also limited its future.
+
+It was at Kubecon 2019 San Diego when a passionate group of contributors gathered to discuss the [evolution of Ingress](https://static.sched.com/hosted_files/kccncna19/a5/Kubecon%20San%20Diego%202019%20-%20Evolving%20the%20Kubernetes%20Ingress%20APIs%20to%20GA%20and%20Beyond%20%5BPUBLIC%5D.pdf). The discussion overflowed to the hotel lobby across the street and what came out of it would later be known as the [Gateway API](https://gateway-api.sigs.k8s.io). This discussion was based on a few key assumptions:
+
+1. The API standards underlying route matching, traffic management, and service exposure are commoditized and provide little value to their implementers and users as custom APIs
+2. It’s possible to represent L4/L7 routing and traffic management through common core API resources
+3. It’s possible to provide extensibility for more complex capabilities in a way that does not sacrifice the user experience of the core API
+
+
+## Introducing the Gateway API
+
+This led to design principles that allow the Gateway API to improve upon Ingress:
+
+- **Expressiveness** - In addition to HTTP host/path matching and TLS, Gateway API can express capabilities like HTTP header manipulation, traffic weighting & mirroring, TCP/UDP routing, and other capabilities that were only possible in Ingress through custom annotations.
+- **Role-oriented design** - The API resource model reflects the separation of responsibilities that is common in routing and Kubernetes service networking.
+- **Extensibility** - The resources allow arbitrary configuration attachment at various layers within the API. This makes granular customization possible at the most appropriate places.
+- **Flexible conformance** - The Gateway API defines varying conformance levels - core (mandatory support), extended (portable if supported), and custom (no portability guarantee), known together as [flexible conformance](https://gateway-api.sigs.k8s.io/concepts/guidelines/#conformance). This promotes a highly portable core API (like Ingress) that still gives flexibility for Gateway controller implementers.  
+
+### What does the Gateway API look like?
+
+The Gateway API introduces a few new resource types:
+
+- **[GatewayClasses](https://gateway-api.sigs.k8s.io/references/spec/#networking.x-k8s.io/v1alpha1.GatewayClass)** are cluster-scoped resources that act as templates to explicitly define behavior for Gateways derived from them. This is similar in concept to StorageClasses, but for networking data-planes.
+- **[Gateways](https://gateway-api.sigs.k8s.io/references/spec/#networking.x-k8s.io/v1alpha1.Gateway)** are the deployed instances of GatewayClasses. They are the logical representation of the data-plane which performs routing, which may be in-cluster proxies, hardware LBs, or cloud LBs.
+- **Routes** are not a single resource, but represent many different protocol-specific Route resources. The [HTTPRoute](https://gateway-api.sigs.k8s.io/references/spec/#networking.x-k8s.io/v1alpha1.HTTPRoute) has matching, filtering, and routing rules that get applied to Gateways that can process HTTP and HTTPS traffic. Similarly, there are [TCPRoutes](https://gateway-api.sigs.k8s.io/references/spec/#networking.x-k8s.io/v1alpha1.TCPRoute), [UDPRoutes](https://gateway-api.sigs.k8s.io/references/spec/#networking.x-k8s.io/v1alpha1.UDPRoute), and [TLSRoutes](https://gateway-api.sigs.k8s.io/references/spec/#networking.x-k8s.io/v1alpha1.TLSRoute) which also have protocol-specific semantics. This model also allows the Gateway API to incrementally expand its protocol support in the future.
+
+![The resources of the Gateway API](gateway-api-resources.png)
+
+### Gateway Controller Implementations
+
+The good news is that although Gateway is in [Alpha](https://github.com/kubernetes-sigs/gateway-api/releases), there are already several [Gateway controller implementations](https://gateway-api.sigs.k8s.io/references/implementations/) that you can run. Since it’s a standardized spec, the following example could be run on any of them and should function the exact same way. Check out [getting started](https://gateway-api.sigs.k8s.io/guides/getting-started/) to see how to install and use one of these Gateway controllers.
+
+## Getting Hands-on with the Gateway API
+
+In the following example, we’ll demonstrate the relationships between the different API Resources and walk you through a common use case:
+
+*   Team foo has their app deployed in the foo Namespace. They need to control the routing logic for the different pages of their app.
+*   Team bar is running in the bar Namespace. They want to be able to do blue-green rollouts of their application to reduce risk.
+*   The platform team is responsible for managing the load balancer and network security of all the apps in the Kubernetes cluster.
+
+The following foo-route does path matching to various Services in the foo Namespace and also has a default route to a 404 server. This exposes foo-auth and foo-home Services via `foo.example.com/login` and `foo.example.com/home` respectively.:
+
+
+```yaml
+kind: HTTPRoute
+apiVersion: networking.x-k8s.io/v1alpha1
+metadata:
+  name: foo-route
+  namespace: foo
+  labels:
+    gateway: external-https-prod
+spec:
+  hostnames:
+  - "foo.example.com"
+  rules:
+  - matches:
+    - path:
+        type: Prefix
+        value: /login
+    forwardTo:
+    - serviceName: foo-auth
+      port: 8080
+  - matches:
+    - path:
+        type: Prefix
+        value: /home
+    forwardTo:
+    - serviceName: foo-home
+      port: 8080
+  - matches:
+    - path:
+        type: Prefix
+        value: /
+    forwardTo:
+    - serviceName: foo-404
+      port: 8080
+```
+
+
+The bar team, operating in the bar Namespace of the same Kubernetes cluster, also wishes to expose their application to the internet, but they also want to control their own canary and blue-green rollouts. The following HTTPRoute is configured for the following behavior:
+
+*   For traffic to `bar.example.com`:
+    *   Send 90% of the traffic to bar-v1
+    *   Send 10% of the traffic to bar-v2
+*   For traffic to `bar.example.com` with the HTTP header `env: canary`:
+    
+    *   Send all the traffic to bar-v2
+    
+![The routing rules configured for the bar-v1 and bar-v2 Services](httproute.png)
+
+
+
+```yaml
+kind: HTTPRoute
+apiVersion: networking.x-k8s.io/v1alpha1
+metadata:
+  name: bar-route
+  namespace: bar
+  labels:
+    gateway: external-https-prod
+spec:
+  hostnames:
+  - "bar.example.com"
+  rules:
+  - forwardTo:
+    - serviceName: bar-v1
+      port: 8080
+      weight: 90
+    - serviceName: bar-v2
+      port: 8080
+      weight: 10
+  - matches:
+    - headers:
+        values:
+          env: canary
+    forwardTo:
+    - serviceName: bar-v2
+      port: 8080
+```
+
+
+
+### Route and Gateway Binding
+
+So we have two HTTPRoutes matching and routing traffic to different Services. You might be wondering, where are these Services accessible? Through which networks or IPs are they exposed? 
+
+How Routes are exposed to clients is governed by [Route binding](https://gateway-api.sigs.k8s.io/concepts/api-overview/#route-binding), which describes how Routes and Gateways create a bidirectional relationship between each other. When Routes are bound to a Gateway it means their collective routing rules are configured on the underlying load balancers or proxies and the Routes are accessible through the Gateway. Thus, a Gateway is a logical representation of a networking data plane that can be configured through Routes.
+
+
+![How Routes bind with Gateways](route-binding.png )
+
+### Administrative Delegation
+
+The split between Gateway and Route resources allows the cluster administrator to delegate some of the routing configuration to individual teams while still retaining centralized control. The following Gateway resource exposes HTTPS on port 443 and terminates all traffic on the port with a certificate controlled by the cluster administrator.
+
+
+```yaml
+kind: Gateway
+apiVersion: networking.x-k8s.io/v1alpha1
+metadata:
+  name: prod-web
+spec:
+  gatewayClassName: acme-lb
+  listeners:  
+  - protocol: HTTPS
+    port: 443
+    routes:
+      kind: HTTPRoute
+      selector:
+        matchLabels:
+          gateway: external-https-prod
+      namespaces:
+        from: All
+    tls:
+      certificateRef:
+        name: admin-controlled-cert
+```
+
+
+The following HTTPRoute shows how the Route can ensure it matches the Gateway's selector via it’s `kind` (HTTPRoute) and resource labels (`gateway=external-https-prod`). 
+
+
+```yaml
+# Matches the required kind selector on the Gateway
+kind: HTTPRoute
+apiVersion: networking.x-k8s.io/v1alpha1
+metadata:
+  name: foo-route
+  namespace: foo-ns
+  labels:
+
+    # Matches the required label selector on the Gateway
+    gateway: external-https-prod
+...
+```
+
+### Role Oriented Design
+
+When you put it all together, you have a single load balancing infrastructure that can be safely shared by multiple teams. The Gateway API not only a more expressive API for advanced routing, but is also a role-oriented API, designed for multi-tenant infrastructure. Its extensibility ensures that it will evolve for future use-cases while preserving portability. Ultimately these characteristics will allow Gateway API to adapt to different organizational models and implementations well into the future.
+
+### Try it out and get involved
+
+There are many resources to check out to learn more. 
+
+*   Check out the [user guides](https://gateway-api.sigs.k8s.io/guides/getting-started/) to see what use-cases can be addressed. 
+*   Try out one of the [existing Gateway controllers ](https://gateway-api.sigs.k8s.io/references/implementations/)
+*   Or [get involved](https://gateway-api.sigs.k8s.io/contributing/community/) and help design and influence the future of Kubernetes service networking!
\ No newline at end of file
diff --git a/content/en/blog/_posts/2021-04-22-gateway-api/route-binding.png b/content/en/blog/_posts/2021-04-22-gateway-api/route-binding.png
new file mode 100644
index 0000000000000000000000000000000000000000..4e42643316584be5f08b28ed8c765622b47720fb
GIT binary patch
literal 93032
zcmc$GWmr_}_ckCXA)$l{5@LWNq0%`B(%s$N-Hj3|AxL+3cMKsSN(|kp^uQ3pFu=g@
zZme_8@AyA{e7&w=_TKa4TI*TsUa<|8lM%(oCC5cWL&Fyr6IMV&yCjT;hM|Ui5qR=7
zOZgBD4R^|1NJvgxNQg$x!Pdmw$`}nzEHozWl9J*i8ED&c{njnen!;1t04EGF96rAQ
zC!&~0%&QV1I2n^~+OOOs6&5aky+9ulkR|k{f`;s2NG8SuDCP~Nx7&K{LEXM>biKX0
zXJ_z!4MYkU!h@J`+-gLW?4i*h%b&kvRYUi463nIVoqt6}Od;BVe}Ogfl5qOv5jCrd
z$SdUJmx&TaePa;bXo*9v5AzI8k;t<L5;sfZ@zF>k>}W-MWkl;KZ^%wQmA{9Uukqd{
zGUa~q7pCVi&%^?-CG$AlgXX2}zp!TQ4)b5ppTo99_oJ&&%QQk0%MD41?UWJu5{W@n
zOJ;Y7@!XNf#dJ^Y=5x&}scEUHk2+g#TfIEQL#K%*%B4fyH~Fgjg|7QcmD;DrsRfoA
zJN#Z1EMYN7Uz@(O*nQSdo8%up((DSO>xaaO9&GDah(x}|3VkJHlF*-UkY<v4hsGgx
z(qOw@eWlzhz{qi!>{7qO)%l3~ucAM_jyEoy;P8rlc0<3iCQ5kjwYo{@%2-UcNcSc$
zlOmZw#I-AYJ?ba<omCHI@Cg(5c4H@>MX{)(wESDgXBvGfr-nOy3*-9V_Vq12!~AGr
z+PB<K%Cchc($J{EzMj9uk^jwOU;W%TD@J{d{NA*r73Qi}Rqu=)pS<bd;^0uK4ZdI8
zHlThnqm7IcovK{8nhh;sCb_qOw)x5P23nuT%+Vh}Hso<1NXkoAhOJ7ht<mBe>z;^y
zww~Dcey-FHnS4w@D|*Q1penIq6>5xDO@fh*(u0`P6QW6=qxDf*h0<Go2uk(Pi!4LO
zI-)W|qtru_%6sC7S=vT?7yu%|panftBbX3_tb;Hs+bzn`NdgSYDK{}=^aS$JYZk6^
zqHDC7+fiv<9B*eFz`N*2ayc+g?{f1cVj|4XG>?T}u+nIM#IE$Sy2ZUjaP+iY?m7wH
zUC^gUv?x$fMwr|qC0ymFm(sb{OxH-9s2XwMAVh|s8K%bt?;v>=9F?FNeM2{Nso)!S
zL^siy1EW9305hT4zF=6eIHaGsoEBWx0WK%;!HLL1lOV`>IV7Z>xkhiRg#CaZ=K0l(
zvCNlp%lQ^c7Ygx5LmLC5GDYOm2Gm$drG+#zwFlAH#8@f7SHWapEbY+JXB=6~ncL}?
z1`XG2uRj*SGxWD_XL<A}-bji)mq;<3>$&+mt#|tdL65d8)QTUBVQxIfZ~I`NSYA}F
zS?*a8HsNAL=z`4?-tn2$j*OE-3p@Np&wJ7@E{ow`AfIg(gY2ny9o)2=8RrP8gRd>@
z?JghQKCC*NJ~TbV3BYI%S$K+l%MQEYx%KnF=j`vK-?8Wi<cqQ1YP@ng<o<j7_qYZZ
zcCYT<+AT>=PHsuAnz_o=GUL&J+py@Mx^!`w|IJ&ml{>Zyyy8!%B)Fw4=w|7_ccVXj
zFp_n+$rarkqb1q`@{vN(%f{42nRYuajek=8#L+V!>-+4M+-v&F-3}5|Imr%D4$+Sb
zL2@iAJ1Tnji<R>gICBQdSW3l|tK~1tOR3Iex(V+VesR2;990ojc2%?hR3Ne*FhoT9
zj4j<madISVBydD>MBli$GW4+`*Ruw-qj-n9ukkOVUV<gwN`y<qbl)H?cpx#V7E_Rz
z+b9ixZjlBxWwT}rB3HGp(g>Wgt|5f(jqr^&K%YUwpkQbkn;Cfvc>(!daz^q9*1^P;
zL`l{vHiWs((9M)Q-hO8)Po2SL;yo&}c8wJceT|}Oi|WSe4>iu!r!_C8nrfKMBB1$D
zH)!_S+x6tp8-qE}#*MGeJx=}WE$IaV*Q;4Iuwb;-QnHfFAlXb;P?@If(|KV51p(bw
z`Lj3ZgMK!VMsg+t`Ya~-mh~U)YV^UMFWe5eG8<xA-IG7O7FZE#U%h*8k!*4G9`v46
zG;g#=ba1YbBH?gM?r5%SU%81>l~NVhq^?)r@seYzd(4qE-o(4X0NaZ3OjCZ7mOZcb
z6X?-t>>bG<<5*+xa(Yama=CJg@~hDztRTEEWN#m?Y3=k)wR86!r^EfiqNLNMTcnfv
zC^Q{4Ypr8o+B}shX|vo-Dox`DWCvPE?*qime1cau*}0rJy_}sKNVwQJ!#Qto-{pka
zL-QDhh1NCKRFfY;bRZkavOK;H_D-LixITXkF3Pbi+_*BniYHCxaE(ffb18TGg9FdP
zJ?Fdzy85#<CiuXfp1YDK?=I`kk{i`muMaGS*(~9Yb==iGLz@$u`Q4h_%64rKf=7o)
zk|QVNgCmh+m1F*cVT9yC5rSgRbw_u3p2`mg8<!qu&D7$_WH0xMTDsywV%sah?DU=V
z?sU5LmG;bq+GjhNZO?ef__VC5)ynJdVm@aPa(T{+%Z8(U<9OrhX4Jr4Wy#c_$>${m
z8<+Ef%CH5lqWIr27-+r+Wt(T;sl5I2Dk-({HTbP5x<*zF@+uk=>0Y>6pPG-A<xM80
z2U~J8hYIsKJaGhFJnyf4KrlX0kFDB-I`l1@_w*O17weU9Cisbm$Z$sOydZs7Xc9*E
zm>6*<yaGJgG{MZ3n*11oJszgn?H#)mtCYCUJIUxS`W3rBP!&S4?77EqRHlfbaFFLE
zhA+;S%$-1%G8P{$D=Q{&SMF*yE|bZc(UQ?VHskXbPuC^lVt7=;Lj#0^-$%M7)Uzqx
zFpq4!lN+^tCs2J$U0I#FDyvd<g?<Iwq0ynwkz<v=XRiloPU=DGsoZ4&9;HwrEY&aO
zDksxOs;@OnX>Sa0?$|gTAGe{g5u3HUJ<r|BdN%uEEzBBg3Tp!|sAcc0v_-B(PHCd`
zlk+fYdvJcQb$iaL&K<F0`z$%rvU99+xl^~cyiN<*z7qVB`d-~VYuMaMz4g4yrc3)l
z%hiaeDTU6V=AjJAS1zn^gWWH?=U`eDdln7eM=0(0+ELm=FBe{p%?35qZKD)E6>XM$
zEwq@)sxjS5CG_O-wB6pD886rM^xZ}E3w-r$c5OQYIo8-ayW`j1D_U7^&ksxy81yaV
z$#%~_92oBi=op$RpL*pi<LoS29d1<=ym1$PTXZpEj(f$ixTd}GGbqc#aM#{W%i*N6
zA4dR@g3Uc>ALUc|`C69l0jqq{%fyV8nUxAMombUtwKc0s3kBiq<F&cEB|dy!8rx2z
zH)5VlL$3CdC8zMlx!N>qPw;#2ADzf`y$tuqdvt9}N6VoCsW6bk5O>O?yJqB++VsU`
zd0#oMD6e#|tVYYVd2VKTVAQGOvxs7yq3fP>UQ$V2vTY6g;U<^o^y0x055FtZyzv}(
zuBpB*kGXPN$JeWMpK5h(4{46j75M1E@~9kjYej$X_6yPFh#D%@Gm`_&tPyz+lL6E6
z4e`Th|62zGJ@cKdzBicMBz!bbQV8`~$LZBP(Gw9Hu-dV~Vb0F-d$Z31Bxe<?G3!OT
zsGXB6%ZDabhc#>Pr6fjMwmB*v)3Z`TUZ;~?<UWF!`X#@GSMjOv*~k&s@m^KvCUZSA
zscv6OtvBBBf!$+o2ZfJUD{?i_Nggj`-$9$ZDRTTp4K2S8jfN>@y(kYW@#tFoy`40-
zTtq6FD4NAFdWaepXa^t7MU}SX;nlQ&6T;^TL`@8SuuY>yU0RvSs+7=YUqKqtqS4W|
zZ&E2#G1|tXK79&J{Pd}eO|0?)TJ<Vqe^1e177fkP=;g)4-toZJPf}%PdE{rM?MfF9
z7PgPm9>m_j&~E)O27p}^V>NLTX=$_vz%@1+dayYfCUAuge8_<h8rp@ZAhb)s_f_B{
zoR0DHR{)P*_<4<?cHU4>QAk`I_*OJ@FgCVvG_!Sji?d7$3^i`9q~@e1EyZnUYt5u@
zWNTo|<YsMm-UW@<jT^YMHg?jdakI9vapZR6qy5%`8@N7y%uGx3t%;K*AFZ0S9F35z
zgE0*|6AKdyEk7;|4Gph@kqNhgu*i?@z#Sj0nUj+pH#4)Vt1FZ16DC^+Q|3opTwKg7
zkC`7oW&~O=I=b69>ANx7INts~$j@<vjU5dg%<Y`aZEa}I$JIBmb#~&Tr9GeM*T3)U
zG<GxpYbG1VAKL;p$b9|_^CKn}=3iq2U3t%+a?6>!8C$6fn_C0q0p{RmXJO&}*8X3=
z{59j>daC`^^ARWeKf3<yr~mD$>}c#DWNQt~>BRpRYkti8_aA?B<YhkJ`rk<LozCB$
z0)*zr<z@cGG=AK5Q5=BzAT)7dK_xfz&Dl%IB=FO-T|yelY}EpcJUbGsE2MI5<XBDV
zs1o}8&`|QQ-MoqqS1DrOQ+bA7<xvv^31SsINXNhxi`I!?I$7m2f=o_Mf@hn+O|#%}
zj)<NuFVhvCd3VUiEmwiPQ=cA~OVk@85E?q>fBo@)NJ5|XV)gy~TYhL5*fjt3rxXoc
z-UjnOM+4^isDX}=sqSgc_2^G6X=u9n{%gK(t5IhFfmkh>8R>%lv^-4VhD-mo({nn|
zSYly^n80$D-~XwlpC3KqPcvd0m7t*y7K5vkum6E`*hECjRDWbeF)0mAVoh8uvCtow
z22gnB!hbUhn<lab15>!_V93GXPc1>9x1N8R5wlXo&(Ca3M?>cFe+v{kCU%Ge;eQGe
zupZDDE)h}Rlw?onALR~Re(O&&{{Is?PeG#l<@Tbf-i=0;j6IrH8fZT#oT+#hi^GE+
zjU|R93yj5D>)dbz`*udo_@g@W5wd;cR590L2eUOUY|J;>PCVd{U1fJ@uaDn2W#AMj
zO>-5n^Zh!XwuOcA{yZ<cJ&(yxedx8bg?0Y5u-86Qdttr|aZ=Q_dLfO_i+}S<`e{qo
zEyZcVIq&4~vXk7sY30vPg8Of7+oVfBO%g^t&GlK?Nzw23{iM~piRv3fA{wi8aY8PZ
zwnaY)o-T5n!&~~GvpGe>VFPk{PE3?i>)^79;bn<?yrVLERa~3GDTIPZJF#x)D)Xzo
z#ba2*M!mq%wyZ10S<B9L9)j!rDs|fS9Qem-;&)G{kk<s~NzDWXd?p+Pc8=Osh3@(C
zpB$8F9D^61tkzk+GbOOTx^1&?zQ$R+6O&F`mAO_NFaGTL)j(Hk31rMI#|x@@kf|g8
zn`Br1aA0T@vASU{3b`sRoKWvi@kw7jo%rVvV;F>Q6!T(6i`Dp6TpY(3%fqJk3`!AY
zYhx_qt=Hi`(3k4+?)o>_7?kUhr%K+bG`N$Kxk09|9*rYa?R>NZwtW^*ORWOH;*jrJ
z)4nZk=V)OT&x`+jJApUm%fP-@dcQHFiQ@e0R<r<hGm?{1_o(*>R=AVUVH)nr@$G91
z%ctrK2g5fe4sGwXH?ilON`P4HuujkiKLzR#78_srlVm>@_u~?NvTh--`WtQP{}zXr
z%dwu1&9eW*ll*>hdaB8N9=lt(jlRcK?Bh2=rS89x@0-Ct68NjHDxlXmFn+78%$ZnB
zVJ9c%sYA_$N`yZa)}7u~*-Q!uC?}$~iT$H=)1^M_kl6O5C`FO~))+L(7?OJ`i6ZlI
z<WW2<FpSJ)Md!@7fqzt~*-3y(b!ws=x%4N}DBNp{Y`CA5P4j(s-KA}%vrSf^Ph{JM
zq<czyM!CnTJ#H5@sxDXJy-T?LTSEhy0u-}!lBD3X@8%$cY@*UJiE{S?mpnr%_t)*Q
z9283a=xz!i*J+#n>;03xqmI_dQpzjA0$yobF1}^0B1^{5r^OrTdkrnf9G9;xqW7FE
zIApv&@@sJ3GMHAJzG*#9$;wI_f%O*){(dEv0_@gr*>B7{B~*v!qJz5dH>#%ZW4cUl
z4e_`o-xgq9#PT$Th$(Ill)tSrbX0Tsu+rH`5aG2K1-BgQI4D)Ro#FUOS>`EE)s^3}
z75fe&U_n7+^Ee?<Ka3ttOWU-7w*m9%j?GC}_s1#cY4)kC`R1q0{f`~MT+)AE;EyBd
z-%CuN=B}Lk;fE=aOT=JcFRQ&|%Bz~FEY@V$3LmCNLT>QKKmR?0*XclngZoYQMzFte
z)xVnTdX-z|GHl|ia@W`8ZcT(pO0jlHY^~nnRiyKHnf$bo<p+S9u+#$C$tR+-=F7=v
ze}giQh0@L87sqM@FV$57=eYm1grelHMf+z1CjOrE2ZHZQeQWJcJ<j|RW8fsAjEbX|
zT&X0f)yDJ&ZU{8nv^3Rn`-Js_%pBsQ*M+&iOjdTCU#?8|+x6(wHCIg!Lj|6ngVTfo
zW9RO6W>|b5JUgrH1pif5A-pLzSQJyJrd?;5LD)JDcH<{|NNDc;*1pN9U^+mnE4z?$
z(9}|q&ti4LAlBJZY`EZe_Fu<}T`4Iqi}f{ZT`H-3;Hg~6UZYX(E1k@IKa>F8Xfqv@
zPfj(q)Ry0D^kj^CxzI+Eqokaiv`9T^iqYzf8>vwPE__Z_<GxCkROyw=INdy?Vy$kf
zj3~51j+hxq7jaa37jjfKDqFnRQcX_SsI{&ZZFTP~<uNnsCaiMkAy2Axs9kr4jp3{0
zb<d6Ua`opzxHue9g)n8dyIm(HqlE09eG#=58{{12)0rZ~JjLRwMM@b4W=BPJr9G{A
zwWp1<8ZdA~P08$##^_AmfZ(n%#QV6T5v$f{*g><&8a!I0Fioy%smE2L*)YyoO^ao;
zHBmE6(tD;4^Fq2WDy&i!*}x0OTs9Ik%dFoae2Y6i!kTIX8plP^?Pmiip|utFAg5{*
ztmBX5yj5+~E!}xIcrL<IkWKO^Z=DLS&#m44nrBsvcD%96CDrh04vo_X&c$yOTS|2|
zz)7UF-7@Y4tu8N0FZ0m;uU-I!;*2=?Sgwz;)V&Xn+w{jhW00s6HSqi)0`w~WWvbq`
zsy;5J?;pw7dKRB%?44ENPw#E!h7wL*>&czAS@mttc8|8<S(3E@-Kn>Ee^SA2bzF5c
zi7R|@*jabRl(hTV0k$`4%~$PJqVygI47uWdv<=TKA%5)*{WxvC2Prvd+h5&0#Y&qx
z(B`47ZD{CP9&1%j3u)dSM;XcXd(5^R8aG;>u{n621@WcO%q?p}>?0QYWk-=gqfqrc
z53YkxnasCedTr#%yC@`O6@!U;rJs?5*YG@@A;?@mO@PvmMko-~>|ImO8uBz#x;?vi
zH}~ej*8ScHllRBdgy12goVIDWF8{(syxZ({WJ)WY4W<)qF0DPfHRfF=O@?0=*<E(;
zAe~+Jy((}EXFtE4h2R+6OT5Q?Hl~yCWQbpvn{i)@w0fMkrm*V@(n&Udf;35WdY(?e
zLQ$o+TCIa~!`}~8ay*4aDN`Y_oOPkK{p_OCf&jH!2EJX;MD%nR#8*?FFRv$#VRgc#
z$`K*(iNI=rKjRqM>aXf^-FzEDZTO0v=~aU)teef+E_irzzqU&~(_cP@&jH2hxz`mj
z>(TX~S!lLarlD)fp3##|%f()+NezCR`rk%H>>SsEtg`pA$~+S3@jp>sSL>nuu1VJ!
zb~d)Ob7^7(tQ|3eaIv*f>+?bv*yn1Y?rvkjs?(Ig+Qz}`{B1ohx}#N0YBujLLf*xu
zOb4jTL|Ul|>y%%{dODir@G-uXi*Gbm*ovYy-Glc8j>qn`6<o_8=Q44S#++oL%PlyJ
zUV@y2U(z;M?uj9sE*@~7PMM2T<q@o4j_b1vXl%s_b%o7YBc!~$Q@NlJS~$0o?7(!3
z$NPJzug?C?O6l7*4ckc=u5mo*J5Q!4uQm1`XisOA<{T)qY$W0!gp-3?(cp7n*QsHd
za;F6CVdrwsS=8E$BCbrA1TK*d3-oL=m&&)?P;>ufO+r$cAJls|wPt+P`?@O+*7MO<
zYQBj@@F^RiFBdoW(c1c=sa!TF%Jkq-UKV3^6s=A#PZ!IJvOF?^PC3$fvDC{F?CO?b
zhp=O0M3$$Zv5Xq`C=<*nm!fUIjId=~2*1u7Ze}LOU0;HlzOlk9wnI&)=2Nt{(B=;j
z!rzVZutC9JAz?gu2wOq(gG6^3z7;OVFFpo{gGP3nNN|0rwxF{S-@ol#<ZF<H?+vMy
zkLHafK4M-DD|QHG=_0Y3?*>myZNbwNyB|-Wf!~H@gu!YtoVUsQt6{FbtR(F+m!L3Q
zL;BA3!t_~Z85U8#yTmv_9&lBVgdipSwUo1hU!CA+BYXDZ4f$vNT72Vkr{+>hKAAUg
zg9s=c6@jdgZvt-b9LK47(r3)EtJ2$y*G*NuTts{I@>_3WY0sm~s}<`g7B32cy+>~E
z&K1atV(Ek79;2rR$cj3$>zCo%SqNL6aky;S9MzuB;o)lkEY&dX&3lO?3t)>AZF^5D
zPh;<sJ<O&r!#oDSD6suP(3asmstYE+(T`|VwSyBb+DOu0htA9T%fL5B%j+tl0@7E#
zPU4;iWS}0Cr1SZXI3M(^D5Ew{5S`AjuY_$BKdsqc0FLGv;3_I&ia+{g*7jrO8~B8Y
zOOiaIAFQce72gx`IqG@+oB$4kQYSCy9o90Y=(|VQIzNZoctk$YH9UL{lZANnt#Ix=
z%6)uatjKRbor~@{q~Wm4R>vXu0aNcI0ky*f#<_jTky7$l&hZ<N>eeSp8|`7-JdR!}
z5mO?93!3*%hbdojS{RE31vM+%b_quZeZr@pVjn}{j&$OQS#p}d<p}QeQBDJ(%*AL=
z$Pm&|Kx3db39X?&TOjHncTg2NLX|FmhMc5YX9c;dP&(O=*Vd)8I(HW5-%7=s5^Xoa
z_rDpdbAn142)?p3kY#@jK@}%Du~T1^%q4R6X!%pQfixj^zG;3?ACr_qn=&}CLjh15
z<%^NQ|3)<=%6_*TUp@GU`c5*V5Wf|j&GF)3Vj_zz0>U#$M3#`}Rn+*6+WnIQy45u0
z)ng>r-d&x@)|1Um4r!tM<6(2_@QPT^Gj`qlv2%0SDn5f4Wl(VrR<_>8EU-{2Hj&(m
zZQ4swIh<#yBPZBjzr9^<DbPC3+FUTig-kPB-Exf@Em2@-wZghUD%EV+O?;*OE*7)$
zb`t^85mj5@7QMQEwPYiCRW~I=lbO=fQTPos;c$(EdD{6Be%MD@qtDH!vM!!!4-WIw
zEl0r*rga;2tVG!adcC(}GN>{DJJX?ah_Ytx@m4NZcdWFa`Y5ajz>3E9Stba44ti5j
z2yC(R+D&{<&4Rx_+<AI3R<~|a6pwBqzLPl1MV@GfFr`1d`^@Q+ktu(Vy!;UzSI1|a
zxuctkM>-1SC~An@`@%SZ`xD+)JvsnT?>O1)gdBMyLgNaKc+)l!t{fks%jWsh0z7<A
z!G6UnLwuI4C>OWk_bYVpZuv;~z`aXqh@cd!(J|+($d>5jjBpOC`6cV9Gmkjpdfs~Z
zxO}~X^0{#?p{K2D5bDA(XZ}PX1R5PSlzK}YU4qMuQ_q(i)@#f&g0oV{gvtgL9N^?i
zkUrq<AfR5p7(~I%moi%9-bfsu+WciYzd=R7u{4@WXNNFPTWg$2O*ZzsYf5i}?k&TF
zoHxUUS=3c0l4enJGHh|n@&D3Kpj|v7B1Rv>@b4%CRDh>7fKozwuU65nRP(khUpc4?
zC7hx+HIw&MSP&Pi?<RfFFllXB!*c4r9_CIhiY1KX^dA#S*0Fjaj=Nx%`V_vuPlttd
zY7St$saIVyi<dW$^^~i<;svRJ?b+$$I5M{K@XO84L#?zbXZ5JnkY%NZ^y#^NW_3Xg
zHXy`p)9cE<9=~9LqU&8>y`EO>2~W7eTcnUo<YwUoNF95N<$`q?%?fo>vY};d2}fVx
zmaIUj?vn0nq>g`=FO_}PrwK{#*#-9}9Ac}>N4iPlW}918vSA`elc$N42Cm%gYjqfc
zGFWt@mWq5@r|awLXK?1mZ9=PoIh!>f^Y`FFQv9OPDr7QpiEOp;!5Zu?R@1!hPJ(u_
zXJedkQA)ZI3tP$DN0J!?9o83W&Jzz$lY<SH*N(EwBR0#rDFeviX{uGs_sroFDtk$V
z1mp*Yt6`G2$L@=9TMVw|24kOyv#V0t`43;HPx1bO$zi+ZqpmcdG|gd;k>iSJ{s2K9
zmdW!uJNKQU%i}v!jNMj7jHW<3&{5X#w)Zbw3fHMxc6)-qdX7W&pZi0St8ovG745Zo
z&K|i%d{Y7-aqQRe0+19*tuBw|?UF4-V-%;2ez<+;-t0TiNXxJ3<9Ldg$X~vMu}ZpE
z0-vMI&F_BCW7>fNo$zTM*^U>-(E-7#E?oU-%Pp!b@_d&iY43yFWcyo%v4jjMn^bZV
zUCOGw)mTPa`|TM$G;_X^o~qZH4Oix;+Fqd`G0=}QT+U%2;Oqy~fj~hQluyQ%-*!y}
zYa!s1=C$5&2Oc^Qf|*Y42H9n}t#9U&=Qb>-Z-vp^0IWnCkfEb)y1ZY<9fLR^yRB2U
z#XWJ-E@!(OIkU#4OnMprU}A*m!#tOx%W<>^BdQMv^WwI$EyXOe1Hr{ufn)dPx=<vP
zaNnJQ6|-U`bRN2I1gFz}0vBPFVo~z%w`|g0VrDu6dx#0lA!6lj!{@?c!p#SV@!f*(
zgEwJ{IZuu0{HBLBdwoyu6Jd_?);3-`6+hFSS;UO(cwIePA)|LFs||7Xyw>V5!;+^8
zv$pA90(YO0^)f*$SIZc-{}mIWam3vB^cRsE*4=48b>hVH2+8eGPXFQjkz}<+hF>s@
zE!A<wox$`RVRQ~6n66XVi$~^IJUb85jm{zOXwS?z<H3gS>P`mWOD5lv7;i+coRV26
zwOQ5}EAR=2+XdYj^~%Ka2JekT%Lxvu`KM<yT$#x5f3mp-#Pnn$AlGQe%;*)ca#=4I
z2VIb1zaP(O-D!pNnq=k3uOC~-*XYFgGU^i00Z6^G$0Mi9`1H&Z^>;Fa?$fvd@q%ER
zBAWQp{;8NZLU$NI(^cZ*1KvyNdOCIxiCM$GWStxx1?G=>3fmveA<cEiuj0s6i?%Np
zolLWoHxizJ6G`8Xo>E*ULQSu~;r7}>LT+Y?P6*1B&0R>Ii$LkSFH%0Kmtn`n?ZTb2
z@Ko0t`RvpLD-xx3IRkvSTI1E)kk1jP6lU~G{c$o+`rb4GuHW=p@0og)0)AcTV<lUw
z)|@(9JDYKwo?MTjue$v%L6|Drb8g}t@?Dah?yxVEan9e(-!FLw!p<!i$EOBBl+6a~
zTfpe$RU+vo$)_)VK(P`~mj~<%S$?`S3r(ZpIHVq#ZIKhSE_Kg5WQu~0pM)(UyY=;W
zvR|A>t46wLaqT1&Gvnoxlmy2BFpsa)h+OX3@ygwejmvaNRv;z+7R!4xlvgJ3$Igzn
z=h%I>`D{;PQ#8SK_PUy!LZp`ALuv)##6|?Ur_gEwlV=adT@G+A3ZJ_)BZg1nS%Y&>
zxX~({{zAU#+qr>fde_2Q+9?aibyJ}^p2EHo&>MxHL)i!mP?}<_HD$veMii^kvv2uz
z40SUWNguRlA933zAC}*zCuiV0fcX|19Ich@w$GLIoN-Vmwk8KAqj|_H+UquDjzygQ
zOKj2n)6s-hE<RKH9!8^ig~|Hfs_*6KV(Ocx!8tJjdqE$Hx-!FhHUkF7JMn`&ke2ZS
z+D)$RukIccwk_58AKh`@IS<<y&bJthMz7uC)?Zgbc%6c^3{yfpTFKZ8=&UOX3Z6t5
z%PZPp&t}Hf-D9yevze`R*|_EF6!a*ZDtE&7A^vKn4)|15%K`{jNWANK;A%b5t}E4x
zfPT6`W~RN>JGvoD&V4jrrQ?dRfOvnt3X=VScL%zz6Nx1o;J!Uwyy4qCzN=^8`&*XR
zc&U2+B@2Eac_3gyrX2Z$0Ahyz7PlN#auuD~daY^A-wY@1oXC$i2rUI!m(4logYR_I
zGH&t0+whX+cl)RXYPZKv;s-v9G9SMyP2C|>jF>1_YIvGcFH{o*BW7Supea!mspQiJ
zpPrPp=5p#$Cbueg4SB^gQ+t-d9X(cq;Q9MNz+iv1#dA0)ykQU*m))WjciAUNaadPo
z0*MQm$!jM`<~e9F@1G!kqT82d%U<u@tkc|XUDMoiq^pJtX(g|f7IeRB55q0Iu<;un
z8ewL3O-Y#8);{}*r6oWM4U@K0A1K|gh$^6MMunR;3Z;ydRGO-(!b6Y{9B!YJz17@w
z16u!*kf(~(cFX9iNgi%C2l$#rIz_f;`{Mqh11=HVLYdIfw8U{M1K%~LTDaXxgc3*r
z{FH4IN@8jgL`ddi5*_EeG0zK|x1<`Fv|M>MviFi{Row<%h*xxTLDNkAi5HUwe4x2$
zl?_7Fl4O<qWV?7}`@{vFoPYEToLMd77^X9}{*akr-+Ah6<vq6cdXJKAx9-!RQfsvu
z9h6EUAsm1otIVFZP9?!hsrtzA$#D|Q@yPlI+f{cJH^EqonL#E82g5}{d!r}$(3DMC
z@*u9_u0r3WfVsGl8istTV$q)z`4MvjZm$CAE%Hc@%z5j-g8S*!SRa^DNt9n$HsMzg
zYfxT!qgy6ny)jyy1h<+R<#%2&cv#|>k0B%EaH&zKLPUwh{{;}vW5p-jl!cxi?|kNn
z5Af7c&>=Qmn?f(4(3sX>+-#Qjg{v69w_Jq6v!D$#I6JAs3-9w!l#DjD3xZN68q<(@
zUs-Lp;-3-2j<)A(7qpUqKxiqk74=f@Gm6=&;i4WZx}8#ea|Y%7HRBg89}<ac^lRo<
z7)F~jTDQV)9@N9<`mEHpH;NUG=DSrR6_1V;%M|h96wGX;V>AzFj%$dCWL&o979L3e
z0gj0N$G_0vFDD|h7__PD9>o|6`zcfY21IiGEqdE>l)0|Mfd*94;05;W%hWdPD>C<W
z>`fpzHVY3X4X)X0P}RJ`&_n5&*#)Zmr^dF!*XzB+7B6HL=A?ox>#Re%2~C>6c8F0d
zTTyI2qnMEq6tPAG5bs~Uht=P2=9+wp{5YM`X1XNRi0eeg>be2Mmy%PP%P?Pssi|!D
z0_TK*Ru&JsyPh`9x|xVDo8h9pPX6%D8%v*%;SSb#9jAvXHtNK^;c8<Yn7-FtlcsyP
zdh73$Y74(m`%S9mB|QjK9pbkc{$t;r4Cy-d`h4(Ou8!aj5@#pJIch}`4|VxC%U~|{
zLtS`Dc#a#8iPb`Pk+g(Uk)f{pFiH<r=$CyvYa;nDHkq=%4gS`C606rSPNjssZjjQm
zujmx}pJTS{+7r))(@2C>X}-RH)9P9`e7ds|k#&-^)M~r7zcR{4CY9u31!#Z9){_ow
z&y#7@tgkT{G$`s1v*g^xu-y`Zh>1Ln&Iea|G(uea*hY5ZJ9R~1#J!yM^S85B5=U7e
z<Gzm`n#k>MD9`hlbZiza&rc{XZdVQq97f}(AqC&>^aG|aV72XcjK)O|>Xm*$Yy87L
zf+}###D-$ol0>j#Q|(tsPbJ4+(Rv^nzy~evogbJ}6s+LlxeI~hF4b9@`%a$s?=|Ym
zq>RZYF-`5i;$en9l2J!hTl8o&xeo~#UaUKr&Ykvzck}kFKjX1FcD$l|9=1){MUigZ
zOeLRE=Hp_!w5ntZfiTBPJ5n}Nju0OLG0LXB0MzJ>r|RN+R;egdTBb+h+!OeGt-+oJ
zPxUACvB88qCB<q~wf-A0|8`c0UYcs{R)g@+aFs5{XoG2VsZ05Akz<XcG!S~K@ve2M
z<e4`uzYM?3SNm)`WHWhcaNKJ@lNmO1DqBhB?*X{d7>W9P9Jg_u$r5>l9wHoqBB-`|
zO*dqpB&V+?P@^XAp9x#)=7q5ptMsR+I(L6fumO(>jY*QX9L<@_HVHx<52l|a+XMJ}
zJHGjQs8%itW0rh{JD6gPs?vNxza*+yl(vg}ps~!^u|@Z1f&)-CQP+T6dh-p>pOnYJ
zb1G=nRRZn9-KiVFOCD_ND+Gdtw`Ay0kF(k`WF+gME~DtH)2lKd3BJ9n;?57YVHYb&
zFyVO=$y9G-Azppq6RUbfx;3?Z+I0i`nvXljZ0FbJA7;&2s(l6s?0O*t^^&<yQ~x~q
z)2Fa4jm2enw{M(#Bw>44a>_@qX%QBh@P?0r&8svZ?pTpotB;w&GF-h+sEA9HSUQnz
zB!yu=DF9L5xbZ@zPNF0P-*KbX*;5ed*;p71y+N&|p8|!g5)gtN5i&_tF8(|mHg+w8
zA@4Bod^da&Qs9GZxpQ@>Y@O-|PC~*vQ6wOKo;=_8xt;bfT7tG8>At&n(*4#_)6H-w
z%dvykw=spqf7)wMBkoAC(rhF9+JXu*B{i$z#~CNEWB#=tnrjJ9YixZppC(GBbh2@7
zE=AzOR>Fa;r}Y-{sC~d;3zYF@@9D}lm3Ouz<xQN3*V*A7-U!L8AZ}%J++z!VDR|+{
zN4{1*EUcWDOcX9LbcQ*n0KxH>^?O+#@PZy3x_4!$CI);&Wv50^Ces)eXD>Jv>*WXJ
z#JQq;D_r{eZ54~2p^(D!`E@&?CCF#ir5S<D5I(*Kx?m97b69JO`zOjo*WNFoD_BCr
z;1%Z-s@gi94>1f%FCPfJxjfricW`JpQa%cVzOEJ!PyY?4{&2~Uah67GjAi$m`c5Ug
zE;Rt@oq0Z?u%C%Cnsh2>4r;Fk<%haE3uMqqgjibAxzm6taUa}Sl|1KMg0P9T!(tuT
zS|G@~TkXxW+Oq=Wt6~Of*X!Q|BrsDsM!@YoTJA-&-rTGboj1OO+WsVT)`E-Tn?tCW
zy3JfToy2M>Q?F<|-3y^$e4}UDY7#tg1e0Ydm$D6XOs0Xsg0<EeMZh{EpZA}8=G~mm
zjGLV}MaUb!?;aTF=;ua=*&WWRO?w^zSk;o)vh_>7%Up%~FEsL(?NzuBBmrX*-@f>%
zjPKdS6VDv?+jkU;E;2oe7;J&G9K0KJO~L@Jzdd-M+n%z`n!v3+wJzm(7}Bb~mni+z
zRgq8->jMyhCa_c}5nN+Wh*HloU~8%yuQ_ndqce;<Ms}6dt~A|@;u%O4Sh2CB$cr;M
zk1JgOmsKTsYHbk|+$@uWv+{vq6$dLgXO$4hPH$-TGNd^-&XvEbq-upLEQX}qI~{R0
zNvaKb6~7Iju_K3N*dRa0G@JINB;I#XE5oOTagLiVd8$^Vt0z(7K-k48Ajx%lJ7sPR
z$ZEZAD$*+BG0R5^n>ITt-U6imi%NLRPbvRpe*HkVFwYAIZXNVYX*1n$jFxs>@mEOX
zU4s|%$^IyB@s}by^nuA9EFM3r)$1@AF3(I!PPL-kSmt!J9Q(91j9bza<Z|i)zv)Ua
zibWAy-_haX0AZ`s(KKc1EzCd~d8~M?HbQjvvVfux^P<|~3NXWXxyUF~^A)-DjLutJ
zs(VQ-j$1conQ@Jn=9@o|WS6e)^V(<@<xtM#SKXhu&Hz4Iq;EP8>J@piuUimO`GAx1
z^sQR8*gINuc?4QpkV>{o1k*(zqe}5TPY4j02Cqndjn(W)luq&F?Q*cFbJ<9-a&L#Z
zPTM3^eC6pf3_VW+vRh3rq3VVw9@%IYHJHl`zsm(A=0yn}@;6z^RG{2T_KR;Brtk%t
zhrjY<##%HFX$n8PQS+Y!J!a}y|4m{&;a23yB0RxfXXNU?(=Go46w1LY|MTSgZTdr8
zDeXr+3Ebwfp3qZGc*Q-e-Wu&hk=v^g&cRKpl&pE&IKKv`u?GsGLNzPy{u^rffyi*^
zX^uyVKX2V|wvJ31Lm#{%19F<`p0v@%2{9Rz{#fu`Cq&-Gpm1H91VRC`RptsMK2zRh
zv^0r#Imq+;{}P<vU4hK8d)1rTm?%A~Jk9u;*{Tga!pz!lX6D$d+DZL8)c#LcOn(Jf
z`Q3NDf`6UV-(RJ(VqSk-$2!7w@7EqdAF!PY;|zgdm!PnBl8P-+MepwlJ3z-krIqx&
zrBL5rBM*VnwPCTj0#|<x_SeopCO~_9t-56Hk_%ja@%`VY=vx<1?zh$rMTE^PksUws
zX8%W9po38%=t!!B6aI(d5r9azS7~T8B8h(Eb^T)dH&W6VVqJgCVaQBL`Wugfi2h~U
zK==h|--O6gAk4*X)8F&FP(k!3S7>10^uW~UOWfbc|37vC62X4hqp5#;CBkuIszkqZ
zojK(yP^Z#JK7#en_572+=fbS;pzUVn{pD<ypVR)k$#>3((V?#Zln>+DAe+dgOq!i3
z#plKxs|@*zH^0A1xC7{RyPB=EgV)lUT+@9ifF^6x_;dMGG$2wO(WPY0zp)p8$qI1g
zpAFRX-Rtc9S^e?9IrCr3iWJAVoRB20`l|7lzW5szv!xb3C3L_F)H`OsQf+${Ia|gj
zRaPo$51bCC)ii97Ese8{E-O;~l*!1x^ZLajsDsVl#`tBx)o%gSN?risbx}#iqx*SA
zC+W%`+P(<WVuA2gl;S%KZwWrZ$eeWTw-@={7=L^AHok4BIVN|I<89CqfmD+py<<r1
zL`j?fKj`oqPN$z&o5WUgcKxYj)Bh?lAkYRQH@{cF{AQ@1Vj-acB&5Y(Ir9EVUg#hB
zgC#b_ZaAa^`D1QkuuE^`l)~?-cm6S12pu3T>BE032l_ejzxGPQb1oq~rMFFg()Vu^
z`^AZG&u(Gt6X6Tq!u!Wm-&Hvc5-U-~Ru8Bpw3Dqi$$?J#zDvIKlgV--=ky!I>o@<6
zAu-klDbg8t?~4QQtfW|%3Gyp_PhSmcn3Z|3KezeE(_yTk2jqLtL9=DLJZGYkZM+H<
zrtmP-LGH#mf&HVdsx>+lSWi_KWD|7Rf1|-;H5xiPx<E_W(I5Uf2qTHZwzl)twZQL$
z0QqA89V&21ACS~jQW(Vop*)i@cxLT4QamG31AElqQ}fT5^v27-kD8!7CrWxTcD2>y
z5Vz}=)hQCe%#hdX{{4(ZDq}E%_oKq71^9~~q0!$efav-CJ>bwu|4US6rpfjqyOhtP
zB(>7LLa8715pp`9)I5RIJA%2dNCN(Cy|}<xfZPnocwuLF?R=_-cn`Je2U-rlysDIH
zYxqvs$O;VNdr~yl6Dw3BUY<Y7xt&fxnk5>+ei|;;O$C@Ce@m`+I3fH%K_T**TIV-a
z4kE+e33MUT5|%*+_CSw?&K6>RISzw2_(z#q2uAch=?4Zl-+g>J6)dw0CgU-5G>O{d
z(N*7Tnf_1VLPJkOa|}6VaeMVkef*_Y<XkX;%AIoKB-IAGnNk<YBJ~Q7NiKH?$xr#B
z7Xp++&p_vj(l-{p!@79+x*kASLS1pDbJ+qVkkl_lNp>%}I}V-SsuN#-<eLmsO4fT$
zMIgYVjcmQrngNm@W{ieaATApm?gJa<n*CDwYBDn6+TQTd1UY5sH_?)Nih-E-6&TKb
z8|iFL8RTbX{>f464=1w{qz7rlI<NZKO4zp@?K-a8N>VX>24XE?x)k#Vvd~mv0%oeJ
zfWf38W^0P(RAiPuO+9&p?B~XRi<ZubET#phjV~%zp}!&LUxWp&ZrlSDKnK(H(LbvF
z_rTe_XVV$`O|1XpPozGEr?Hy%D{$laL7j+bNB@^9`5!SzH^N-IrSTYY^N-e3LJ-*2
z{d7mMKhT_r{ss_hVZ31)9`G9iM4Ehy8nBVCjTHi=gXSttAEB4cX2%=ZHm@gq`U?hu
zo&sV;Y+!KvH?#R$5zB#`WaU^-`-@wNiSGV_4C@c%suY|zrqTm7!A@QSul>v#=eS0G
zrwac@1^>%L9}8x?&npb4#@=!X4<8K4{qc<n`a+;wG!wT{;HUch2V?)nq3n|L>;hBY
zT|=8na|Y9<hUiORs$X?Ye{1+pEskvzg~s=PmK*;=1jQr(z9?u}z5Wfg|FNosJ3yIk
zf>TXC!*3Q1>c-41jbD~ZVeMfo^DW{Z%l7Da8<PSJ5P?uz_OO>Zy`luFhetdAh6+Z{
zQNi(72Z!J7q5_kI$Qw|OuFm5Z8_X$*C_iHg=anSG#$x=;iWwyMF$zfIpO}VACvy(g
z+RR$Ort9i-z#i%i4$BIjL=xvVyi)j^xoEP<@MM=R9F=X_RtDx<5?N&ZA=7#hZRPqM
zQei5-+-E0yumK@Lxan?7JQf*~mYM6Uv+8?!=vaxR>zuo(Fcse4*BGge5yAU4#2X2#
zyAs2{-MqJ1-a+u{qvZGthSK_Xwbs*Q@?f5=`VQ!5(X}^-&TG08c+AauO|IK6dwDV`
z7LKcsn)bj;qE=l`*YO5W4^J&Y_(YLy$u)SJLlqoN*FD@U&ARr<2Lrf-8)SdjEt(?C
z5jA|2@hFbTz$eVIK!niKizyh&e?R#CME(n|r;*Y_><ntIwv)P_wVPZfEz7{M)R*C7
z(uu5}$R4UKFn&!G!I*R2Z_Sm5=i_2vXZr(UGQ2=5_kWZ%17>xfNUh1Ggh$Fo%{rDz
z+oD9H23Ipi-W>|#1}tX?H;47qhzDYe@=e#d&l1Ua&eUZI2dcjl>>pzEj4WTfsaCmI
zZO~<N;)=3L;6?n*ua6%Y?tbZH2kdM}q3hO6f}h!QY=GvG(&sQ#S~c47|5Ud0QJ@#N
zq*iTy=<>!+YXj|5HI~<6WG{X*9mjYBLacUSK!Gm7Qu+UhFXUn|!}$)>ij<3Dy-`Q2
z0RPw(S@xe3%g{?=CZEeXVAuiIIc^Vnf%)=(jWdQxz_mm)O#RKDrP%{?t_g~5>GF4R
z`}n|rw#jw6JBC4eFJZ0B>*(v2VgnpHT9ur9bK0_OskOyy>l*Xv@kSZD=Yf@GtyO~c
zT=OLBndES;^lU58%`@rlNg+4tWUs&0=hS1m()iVAiRL(TylgwRi2GV@i~glF9@kPv
z^~(1pj#(mM#p+cix#Mo;gPG3`dYD@$3YCjy=n|FdxSgRBEyyj)(IVA|I?Ea7CKp(x
z``*grOHziJN(SXZBku8VN}iQC%~Gv~dgHev-8GiuQxO8FwJ|_$Q^uOz9W5s-bIfIE
z{?fI8;t<9y)&WleCuhyacdptzdfLZqF!M!?`S3l54%&z7*DZ?jQ!4d4F4lqbYG1Y#
z6)`Hm&31@m(oQ@()m`4IoA((5j^c@dWMN6BOY{^ix9+Jqzrv`fuSGv;u5_jIh6?g?
zFtt@*BAX3`lJ%n+^HHi{OW<y=zbbov0L7Yhsy^gO*(F57<-g=BFIDPQ`^zuAdR1<5
z2R^P_7fMW*Nbas*U@=-aR%5Bkv-_Sn+JbirjF_{re}HT~J1r~Fr<TG^Om*nKKUStI
zz>x1>+%~l~m^GUbO+xZI#$qI2zl++pnbQ9K75fWW)ZY7Vym#6!UFp>F+U>OQvmYx~
zXZJd^<0xOB2jS20Y&Q>|7lgFA4rPl2a(x{k8kCQpd^yFk&SrKqKP%k9*9m+2-b2|A
z;er`ifzuJ|HLN=M9o1Ej<Mq5a3n4AILZn9S6O&$+Q=%(UU!yAmI&O=GJC)`6CJ6>!
zoXiNOf|`JLKTxpyoVcA?AWrc)W)@IuL^ba|4IE4{$J;b4$HpVJ=+e9lZi~Fe-ZB{1
z@hqVzkI)eOb~1jb`ukVq7Gz*iwk<~=_9HD=*lcDdE)r60@@uJ0q)!82Y1?NzmCMm&
z?a>IqwC~wziS2yLSdL_z9;pFSQH!oOJZ2qP9nheEpMzt(q;<-y(6^X9&v(9`AK5$S
zwI}Tx>kJ+F#MHQ!8PdEE5YTM#L^__OeXK<Dnih;{qg^*<G*6b=m40p@%qziSz8Nv+
znR}2i1*wRlQs9G+C|aj^AK=U`<tEuU1P*8vxLC8SPieU?$6T2Nd%zv0-L52@X{Mhx
zTnacaotPD*!T{b(0I{By;;=paW}MS|ap?08m!f4qTwZXef%+F5X^x1g-mdmW9?TWi
zm*Ix^oa}bl7_t}Jm!*v6D=o+ypP>+~b!y;eaH00SegWH_IOYgXsS>3HW#dA9pU*F@
zX#hv%DPpj~*#?yzloJp!C7_aWI=ylFA&dgH+ePi_X?t<}D9)J|E0|6;)yg#0J(tqw
z@H1*OV;jDIa65wc3%@mGqknY4#TtmREW?J^=tn|4kq=V>%15{&EyvKJ41BNc>mE;$
zDCBmXBZRA~)^?t1dHc*B<cPJ7!pYrkK{A<uoR0U`<&7<TXLT!@;fo?W{BjE_eDOaM
z0CKz-LOcYlr^Zhk8#nZ(>-m_83neI@NP!5iw(LQ8?58Qo-AyLS^<CC;;u`sGMsq!@
z!O`)Au~Bf?XwA%yYz?|vo!-ZG9aA^$^e$I=v7XVln(7J3l};k7v+^Eq0d8jW(nR_O
z^M$c;%3Ttt2zH|aTF&V<TdUp-Gx`dgvnF4Ud?nc9nzR6M*i}BW`%S`AD!67)Ekd46
zmbwz+hl;Q;y`&CbDazaRIt2Qm2dh-1Q)&9Hm)x<l^8ie=-^?_E`wgG?Kfax=w?^qY
z^Jaj!k?JM64lZQYZ7~dsfTGBIWW%QW?ftned)-mL(da?w3vwy)#I>}u6Vn+whd`v6
zdV5`7sz<j?%hAfoE#r>bz14GLZL`BMsF#mXO~|_gGV7Q2Z9pM#8(U7k_G~Hk=&x>A
z7kz%Q4Mynn^hj=A;>5ZDSE}}SO|~EC@A_H^4DCt=v=mRqm;J>6AKn6$5{(%c+xyts
zL82a1HnqjOfTTGV6_hm?aXfh2ihA@}2koU{!0Wr-YjEQS+Um{+$-q>M_j|cuUr6LU
zL43D}#g9{wWxl698g(`)A6K^6adY`jb~@NiA<54XgF#U3g7h2@hKqq7I)WCKGp_UA
zTWc&jI?bvz30o~ln<9lAiRM0Bu#EpB_j^-8dj#2Y+1%p-sNIMwtAz)NR5w*9XcMv*
zHv|pvGmuU5r%Vaj#B;F#y&p`a;mkj_QWL>E_vVEh5WHq%CHgi~DbD+bbmpqh9{hau
zXYyhCXNis=h9R#9<YUTUP=|+Qp?*o;Yhv+Gpn$njB#fMtTuq6&y*$rQSzvT8Qi#BQ
zbqptoL&@=Vp?$KMf+6=CIzQ#q0CNj^%a$mh^hs^B1TZ3x0xPy#&wR{SAPmU$yfhik
z>rhHvK66R#>xG7ZWoptPz3PL1kvotFdg=NRRy4+vzJSYGft7Z2dA6VD#3^c6R^Wxl
z6(W4aJ3rrT16~Iv#Zb(Xkv<=ac`VRt?s%a{q!|Y<s1QHLU7YRiOOa<dlE*D2!ODhr
z;mIR%IiK#}>le+H7Rca{JuE*vSry2D1qz3=0hZVGIn7zE#cg_lhin!jAFX{0Q?B;N
z5?-{_=~tqgO7j#p_su<qWHwt7nJIuXc)kXS%!_sT(envceP&v``NP!fp~EZja-(JW
zxxR?2U|pQ|*eE&Cm!x2~T7$p~^!=j56L}OnuGCmhk39ek?%ry@YtIOaBv8DXnwk%r
zZ*3KrM(qR()OV1YqvUdq;TzLOt7+S@tG*WMd{1@Vmq``%deim;13fg^&4=EnX)k!5
z%BAaTvJt)xa80~s3IM4iq`3~oS*1!oe_~ISY#P5x##1a;O{{G|n1k%T_InqeT+?xD
zw`qda<{v4--&+=oIQ7Ib&U%>B>&4_*7WnB7JZa7BJQP_?pG(yjG{O&c-mK`-ctyrI
za}?l&zyB6~P1ozq4j~z?ltsM0uR?^ndv|-<7ryoqYQp`jAfLnCyz(;wlHRczx?jE(
z0HZ9>z2m~*ZMh<%@<<`yL|euAT{xx6d{(shvChpgWVLC3>K1QYV*jwDN4=soz4W8c
zvba#^?YUWN&!at3qfwSheQ_9T8OmaMy{Q&j7OeE@_IidoUwR=`N_%!~$W%#R5{K)w
z@!m?`6D$u>5dOUs%LpnyEyof?o{cHXGUvQ!@)U~e@rL2{0N$@JWMnlTy5k9GLRzW?
zWpDnI9U+RxMj=gQDB0T=+zCr9o|A`dEy^aA3U!bo6{}48PF`&(u~rM1`-;qvJfw-d
zbq)%zb=G*z{QSQFEPz-+t$A1K=K&xAOZ1nMmaPD4XXvZCA$5t`%T72pz%wt!C9$Br
zSkC}(2Qo2Sukbv7NME1rXHuk6@^yS=WhF7(8BkZESi2|aLbjJi7hgYt*!2wDWCQfC
z&6-`2$5TX<BvS<dF`ht00|A44?<NtWYH2dXTfWcFiD@CK0yJ*o0!C&bIeOe%^^2Py
zZ%4fTsN#-0S0I175J)J3Dev53k&ImB8inH^(S=?>J@OxI-Bmw;O^<s|X>_QVt1Svg
z`5cD8M;wb!ovGUO>V1^3n@ld<wDZ%pYsXTlu^2r8RM_@V&MTy0V33Z?9lxSIMWR{c
zZX1J?0Kw6P%*S{a-+`^c<2Rm|+#w-So^>w0^EW?Sfsw`i>(YR{-oEw`w5W_dY+~`Q
zZ8b^Q004KcGdH!315kk3f})0FBplbLUwL7tvWLl$+Cj;#UlJE;u5L~1OU~m`?EB~p
z+_GB4xWY$LNQ(Oy%5x?}$Y%r{je};_W?U=Zk1GkL3A7gJ9}-Zi5V<~dA>Jc?lzL4`
z-6MZ5h{C2Ekl;b<ri;|YBkYwUX3yq?GQ0PNqV7sI*KJt>FGBCdjke%l6eg7-sJ*@C
zYBy)(fmDRmFt?rz`AXn`$DQ|dDF8KEQE>&s{2X`KiGL5;H<;1~{PTrih5P9j<AaWI
z_|1!h4kk_0C<n2}?MHjc%GZ0J^jE92=;f=1lb?uEI={uD*wAlhv!&+CC~kEVZ?6g@
z;QpA>I?|egkx7or`6gS>x;)OpP5`cPnV`Qg-G1lNg)<+EkLIVuvb>-BYs*@WAJEbi
zf^t?c@bB>{ZxRL_k8=QkuCx*Qpy><+95}sQ+aiQTdXcNeV{tz3Ky-Qd!R33WA;g!1
zj_U?z(&<v1qRg+C1w@4xq?-YQ^I31TGQ+by1ci1ieAL+9JD)LFPgZuq;1tCdI+lMG
zJf4Fsu^5n=oEV`C>Zsp0+#=Y$>n5vN<n%!Zd?33nMTf2XwMgwQop&AqUXaK18nQy9
zLB3pNJ`SAi^0L)CYkRsqHG8Vouq&J$@ZUlJdISZn0f_{Z(KkE2EoIyEuGykxSWls8
z?aM1>f|6IYd>h48Gjqun5rv|;R10A-g{oyXaXKF6#iK_@76OHF`K{jhE+qloC^UN%
z!3($Ob(pOBo$3Ea*n7uQ-T&d^5e*V$cFdNHipnTDAtHN^$jXRgRrawdqO4Rx_BxK4
zjO<mCQpP#iqwHgbLkPd;>E^z>@6Yf1{r=OVdKmBX8qaY(uj_hmGITh18ZsZEOW(Nh
zFfPcD?)q*3OReu5!fa35EN)0jWtm87N%Ln#$CF>Bx;n}GeGd(SAy&SD{vGwz*^0Sp
zb&GucVm`hviOKF<+H%MvSa&NNPiLzJ;T^Ud^^jZGK7hAv6}4pMOCC;nlBR)G332%1
z#Y&qytTa<;r-F$LucG}I=k62xv?AKJ%<h-wZ)r=fV@ok(L1(fUL`HCP-YXRk6Ov7x
zCp+^K#cd1oOr_*k%mlfxM#Y7=aB+pYZ}*4|j{>c~{(5cHUX}7K%V~~(l4D_ODD`r`
z;sE+g)E{u&^=H1-;f-sXISH{p+H3uG_h+5@B~@B5gSR>VV#ya<y?08$2y0N9x7url
zl3uNGwAm^c<~PY6c>YS`8J~7vGCGKcmB}V5Z4tjHWE-Y+3044Gl^G-&C6CC^No{G8
zZrH*eD3&1BW@q$R4OUl)Cr&Jkeq4N{y$iV2=9zXM1i0n{q1=ej+uHak$4%8*_NYjr
zL90nRX@ugI&()_l*)Q(2kWWp?T9~n1PXbklr-b`5lw!Vb@*2}P5}R>%<mxUd{aSxe
zC1AxNyLCrxVAGVw)*+s-4wvVJf6A+N2!ixIEUM;iI?u9_LzZ;a^vmv9;JAn1hl_5U
zjPsYO8xmG`-#qF({48<8<wx^%OT&WM9^D2-#-|JnUoT%WUEjNcS8G{QmtM(;UTSz8
z*xv(<PJa%Z0<sN=Cqi(gXo};R=MTh5Xi1-cw@&s>{7U{G*v1Kdx~U2W6%`e~Ym-uv
zlp;hElS+oKD)J{-5ZOw_%9VRnI&*H&7vBKbWT8_ocgbSHRF6`5xOl}gj`^oZ&RLY%
ziCZ^JzHRkN&V0^H^cE}9&4Kez_w_E3S*gxi!hb62#=(lbB8ioK?VCztDz^+M6y!|4
zTr^B~v<(Z{LG0cje+rdmcD@O{ma?Y+-Mz6f=Ofy({$hgd8J}vyLdLNy(e%KtUXa4S
zL)~V^m>wB_Jzm@U{6V9tTUC34-qTP&<nAfxq@_8@*xC{C+SG4M=75EIYt^`WR;Ojx
zst1`e@)i3_@#~Aed_#!oZ_~6d(d!=X+p?FBZ)bN<$B^s`oPB1TRvdsZ{?4cN7~8ka
z$uB+WW)3b}A!-LIj?obXvDbynZBhmk>D_;x`&sn{Grj4eswaLjQY`Br)kKMHcOeG<
zVNe1{3CTfKhs+m5Pmiz?XDg@jDoBr=f;XZGyF8q$_>O<(3o@igLi4Vu`W_g5fF8a5
z?l@+9Plo7QBT9VMdk2-O_=IsbMn(w^c1s2=%#OWwrQODx3!tXEK}lmk?{$Bkt;G&|
z%E9a;O*n$-#iL@cN>3UOEj10ZPKgmasb1zHBkAj_ntI)c=e&^&Q<Eb@)l`CfO@>cT
zxUviA4JyZp#EkXw@>o}Zx~+v~k6^K9GjHab2Hn+<>XLd@3eSoXeY$SakY%iDGMW=<
zt<&v<w{pfLj{RK^dHY?m8SgE6_Il$+rCgF4dEHzK--))l)gF<^y_}ltFFIVk1s>of
zBE{U-PdVldTzO^GKzM>(s4~F>UOcEsn8XgR%N6YJJ*(~B-MabohG|dYW^x)7r-ZPS
zm$nRg&r9oN&$5gs=mUI8s_ymUxyjm!%GtE`{MB3)@+ZkY7`t%^8twkFOTsVP0fR87
zW<GnsZYWE1n1omA8hbfU6i8-0*V;7&C3h&F&SKF47QtHf1Z`C^n~TSgG`UGL(Z=3K
zge6c~WY?P1hLp%8e0JRkoddY3j|O|v!0ApkyYL#oj&$me$KFo@;v{3#RsU;skscAK
zFdkt=+fp#hqdJ~*w9sGL=Zs;wP;zEpfMZvqSl9yIaZzGxRaItQ+cBSj`03$=GNANe
zoY!ji-t@&R6nS;sX+c<uYO6k-y7*^h@r&GaP>N`%-;lgVPUOejcol8jg${%9DilYn
ziNW`x4wcscKX}BQAQI-P2(&8h4^C*DvdcCKLuIG&O<oR=x07Q()m2SpuiLs1#OZBS
zXM*WzIhEj+!tOa=H`|xYCtY<LZ=Z14z0f*LmA&GkhDebFk?YLNm!^t<<=bg{6|d3j
zfyIi@T3|Z}N+@I=HGUY_K9><Q<R~FNw-K5nSdM5YCJWV5Wy{DkwpKl)I{e4>5$80!
zR;Y|96Ytr#rv<ZmE{QtfuWMCr;=0hop`uhCP4|~IclUA9X|oIGrz3=~DVs_>ZMq!!
zbiyV0>9Z!0SO;Mix_BY$C%qRg3~a7N%KCN4M3LvO9g?d<3ruF&5^Z%%aEawklTT_e
zNAC+Ci1E?;4z-!yaAW9V>5l=7DDOWUoLzq35AUPqA?U3gG**)oYV*CNm!vk>NzdLR
zGEf$TH*T2VqswxUs(d;T5ci{bKA&1#wfKY6%anwvrOA$spnHRW+jP4$9SxEh$&OEs
zv=(Z9+>`r`kq$3q?K7L4xpCw!b)hd%UQURN-DrGykZ~Ks_ETc~2`I`835a9;w3rx>
z;5*Y(oNegXB5WVgR--b<d`6$)6W?<S<QaA)0y}{=a8KtHZ~u1{Q@<~Fha0agnH<Ot
zKzyM3y0+V+Zf3dHp~mF7b=XU{hCMcWZ#*Dogz}w!aHPN7`4OM81ea2r$Qi!Dj}di`
z1giCto|RUuAeai+u6TZ-j~Ea^6aClF`9p6cB(azKIjMTqq5{_lePypD9<BTl_|vo`
zQ$J0={&Gd#!h5Mr&fcK`!&rSl*)e6WAhiO!nA5`^86?Ywqo1tZe9hywRJq=#yqdSX
zRULXu>?Y`H0CKa$N#|^uVFm!#$&<)#niHOR$l-l}yV$NFu!HE3xpoEok(2H8kxPha
zcC6QMF{AhDD06SQbM_Y9-NEe8!%9<~`LrN~>DcURkXpa+y~Kpf@9`nv%ASi33E7@V
zdy&UZ$&e+Jz{uIMaSqLf73d^sk?NEo^$FGeg%*kv%UPcfe9q5W5WZ}mla>&K$iuve
z3e2YwF&EApg*9YfY^9>OvfO1hOP2=#L@Dy;P=JWTKqY2|`1EcU+sjx*=lc8m)qDA+
z$vR9M0&hssOt!{9is*)MbnDQPrYdsuvofovf__~SX&}NRVDxfHy@5QX?y7!?t##e0
z&JD8mq2+-EfV>>CVi&*iNB!xJ<4+#MfwmI-$e^a#TPr~x>XUltxU7uw?r+9(KKZ^@
z00aKIF>A%EdS%tTkK-|53f1dLIo0n6?|nRD?{V&;hAJS${R0t)9*9$;e6o;7m>w?m
zNCqFwWj!rEaIfp>F_eQ9Hq=D?Ex(+dF=di)OY=<Wpgq8zHP#eI@@En5Jho@s-R#sT
z^`hiWtE`E&cMC$(cugy1)*ZtsW>n|Gh8X=m9X2`G_Nm-xd#vl1bJz_IL;vd4jZ^8F
zf%tjxiKGA}Bm<sKE4;y>X5%Y>Wgc4@v+D&%<x)iyq-3F2O;u12Scj%GI5tzGPEB~I
zs?in~#`~!?LI<sI@uE-qSe$ykL5l-+=q0-6ETH>KyL}T%zKRL(`eJL2N(a7~HL6C}
zEKhesFGw5TsVGoo4qzvzm{a_70b~2ux4*bdMK);;4xG~<Vryq2<v1ocF+&2H5(yJ>
zj5K9^Mb?_G3GA1wuIJWs$4mvIpV9L_pp;;o)-pj3X!ZtE7?`m~dH&J69cEOMlp|A7
zR{yR_704@@*`|zRRcm;K%}ugada|FJkgV(_K^vBqavrcZOYzCHD5b%0?P?CJ*5;>}
z3;phbRckzwq~h(39WxE%l&T!t-TPjPEux#JSE@1!Tc5I^j%RIBaiM1zp6Rm5+vy@B
z2#Flh@7pk!5P@$1$jDeu<5<8i&`SIoDsk9wZd<kKhnoI2R9A&Cz$gbH@W<z?qOWPM
z{H*<adGXW3pj(ViUQ@ZHSCPkD4xYA(jW*F(m!}OI8yV4qAlzpyg}YKiz-IR;Lu@*f
zx^bk^QBRiZ0+6Kk<aPYl%Lf7@-9_l9Q^-@q!qA}vRT^1g3Ny-xCG$I7YD(|ab%ho1
zbW0NPIRja!Pc{!vY?vf*<fBt`RF~IE`NP(Je!L7fy8oMQfTI;wDt91Of$H>ok667h
z(}qo+B&<m`dBSE|62`lr)wuk`1}24*nIYmJH%<7n=A(}p-zbT2VRyYo_w!9~KCchN
z)AWY@$tnurOOhN(k_wo9z-;u8uQ`r8H7V<Sipv4>rK!#@b^<(Hld7>(ivYH{yrx2B
z;_?i8y_z~|Y6fhom0HrXc3BB-z*xzi%VDG`vQGP5VNQ^$K>5V6QdhhAWIf8;069Io
zALfBmmn#E#>9B}hj~=unlj=(*dF0h+^o#C*c0shuXtDX>3ii+on6EGjmxuQhqFK5<
zxNi8__@r!<$ptKDZsiRj$zzVf5ZP}E2dt%oGZ$MosB>=ZSZ8URZp||kU$O4id&gJH
z!q0;BQW2jKDjhe=+0cy1|CXR~@!NgOG5nCWgCdP;+NzV#?R4e?GzTqMiycGGGq8|Y
zGQ;|BsRL1%G}3tWvc<HvvV<DuZoaJdd3n`?HiJ);sFI9bx-DjDcL#Im)=d{k-jP~=
zKlLHYQP%-i!0^=(*Q?@qbTWu{r!OJR)K4BwYBMQ!ol96s#yJW`rY%SG99i>b<9}z9
zi9sg2g!PD<PUgJ+9D>L_Wh?HJ&?EeVFgz#{vqFVP@Lc%tVfyf^+@40Ng4L*IYH`=l
zrbP(A719fQRx^~+qwz|tTD{GJ-K2=ZGV{fJj;%y4X^F(6+7wRO^H;KYYE33wTTdSP
zLk*{?*+B82#e?3VCM8dN^XG7Xa=>9;If>IRVMZNn8~el#=et?6wJt%;y38{`CiEBw
za6D&EE6BSdDiGzowqZvcShunfO}aPlUYq!px;YavT$R98v)p5&?ASYTB{<q?>n1Q}
zlE<}MtJe<kJeR9X%1kiVRc$L^5NJY_Al?5+e+=4^v=SU1)35e3J3_>ZLwj?_;zZtj
z3uHY#;5t%Jhybv&L<;vg_?Zy<gC5@CFhttiPXHa0#p_jb&OdsRe<%WcHwY?GkxG|P
z6;{{vL&HW?3oC~Fsc)5V{^~{T>*UX`Y=083A!`>gQ01}yNMQmAb-z-P1bw+-*FL|Z
zL;JRbx$UrW+lF7jmD=~x?R&6&(htC0?~ZHiKX_r}2!<@XF%KQsNbnoCGhoXXt43gB
zsb#CAgw5>*vkqmOS`t(J#|WoCq=8N$W%#A()5dVlxzAOIsh?E$IAC})%a$B``Pyj*
zN)?H<iQ{o#nLau?dW|vno{&?=rSX@VSR}hMjnLyL@~(0n2<47vgi6B#pS73S{N$x^
z%qjBTSi?BBh0{`=+`wEwFHK-tzHfA;a@s8|xpk>E{8)Y@w(rPJeR$X}1JA10xre>4
z5T%1ncygYX!cXaNtLsllqIkRT$qMfr_p8EBf_qG%{jQ>qlGo1GahAJB0?_(OLS(yw
zpAm3b!zJoMTULP2-LiY0m~XfF^SwmR?L;q2lxm*dt7AU#TcI3QTCB;>E-*HeinVNw
zHKWuon5uIq9FHsFMS)1_K_1s)yY;2X;gaNA+E;0{2An#S?H$xwMiI}QE>qqzLlzt<
z371fv5iPzp;5JO-`q0S7<7NY)`Sj_w&A!yD>ldbHxoG{C7<k5i?JgBZX3OUOg-Bel
zs@+%_<iyu%&SQPHHnSvHPBJN&!1%kQHfHxdDD*PQY#82Z3>!2cvP8{75yDj3_E=X9
z$vd0BR%c(H;n&S`N_=bAUtTQiFwhsjE`)!tSaR9xohH{jbRg$qu+_1gvNZaXl=SRl
zeA90bUlkT{6P3bS;Rs)ZhF+aom8E_;OcrLK!w$ie_}8qN`f0gPo-G@Bf{D@%{|=V-
z7|-+D*a?>xWqptD+U3r1F<yO1M<Z-}>fCCah~2$jI+O&Dpl&M<Ut9WvaVw)w52%^T
zXP!DweJwlw5fh(clw2<I02$UJ2{R7i_<$b1SpREeUpJO}1uWGBDg(1V^uIC-;(f@g
zSZr6Ev$*8{_`|{e>@sy{`-P4&>_!%^B<{1KwuXV~DAb58b{Du0KmGd3+K1bl(#nV1
zUc22O(938(&h(zHDRkH_lU;HB@qr^5gSe+lbjq{nLg8&v4#R6-a#ReRR!4-)n!2RV
z<cp=ZuL947h`!Y_oyslqY%dc{9lH~M&MdGuKzH%jJJM95;G`m$8Xc=pdb9U9U&}Ta
z_WNA&(zP}TzC$9y(M;Upc)4Sl8FN3VFc}|r+oJDi(S~O5@e1bFd{;tEF^<)#^&}Qa
zJX)+yoBnjDDXXKIL<}}C4Xux~4+b8U;UU65mVs(KWJu@SWPjnbeDZkI(`>m{qC)n1
z$p|I|Rf%;?sE|7{P8HS|RsM$vew~)ACvoyFJLVdCKQ2eFpG5u3S6D@94y+`U{t=tZ
z(|pH{whNY$Dnix+czLU?44B3?vWs1G)1dMv4g5szet$c}=W3LOQQFz|zZqS3D6D+$
zv2sPkkchB1OCuNG_Y}79_umY?tMu1o`8VR};|FQ*&Eh!5l%Q%*YG3RzSJjD|(v+64
z-pAu$bb@${hP!3Bqsn8&MC5<e)Nja(B+3raH7Sv}no}ac)l?y|y-#u>YE5^NAsr~J
zp}FV<(D91vY^#azcuO2}k0!3hki>Rria4qRIG2ye|JW!zq)Xa3QddV#euR{0kKB#H
zoY+1Xz@3yLhl=>MO<q|esx!~9HA8)hk%IlQTS4z5A=Js8Nc1;Z=O-)#iPb3?2;Pb<
z5!Ba&cSNp0>St0*U4qeNHgTe@p*dQ0Iy*109setJFT0ak-Ch&w?TQgdFBb0neUbG-
z`dy%;zTs^D^1yFq&JQXeJ{cJ+$Z_FG3?Gzw^FOp}9&NvJ=c)24r0S(n23A1&&j1G&
z2Cf!1oq5H^J{x!v+zZr#yW?y#-LEqt+F`Y(KGtnN95^n@e&W0h?yR#qLqDoZ^}#VE
zT{nh2%#&m+n(0nb2a%Up{=P0?0RoS)-y+OU5(PD1Mq{MLKLBdGlBCoZ2)@EKIzZhj
zi5GX(e;2~IxajuJIsR*@KpJo5Lz2e7min75n)NqZH1mJhqC98)?u|AdI&kLf&E`J|
zTmZ~8F(+-rsMf`uKT&YkBS9H-GsxjQnsx_V=v!_bK56F1n*aHR{~?k3O_N$cWapC$
z|3}8u_V@Vt!nl3czDIvtod0kL|N3VHl0@km*T2X8|N2Tgx-R~Ln`6w0K!uDE-Szj4
z`k#mV3xcveloVuDa#Q~E?%)6Zzx<H`n<E<;@&DwmcOQc@-+k}oCE7namYp31?E?f1
z=Mv6|*^VM~K-%(|$<Vz;vo`$*m(!CC_x>)Yx%lC?S-!IvIkA%v)cpXu>V^Ko7LU~~
zv1~!~0>cT9QEz~gX93~A7-IYvJ{Z7R-L?J4U@D@Hoa*81{*a6<`6XBK6o9F&8*vE;
zd?AtOP}EqOH!d^!+4{xU84?3YT=3MX_g>1?=F7hqYo2;X#%Y;89AHTyv!VMp_z>}o
zT-<fGC`&W5=jV@MyV<_7yI=0+S1sQQNI{~P3Ib@abOBq8+0{emKhlk~=-OFu;sjvp
zPOmSCSya5=>}2sOsS^jPVDS~NwRvCL(>x1sk^IOhKzLSoYOP<VRwunQ*4JvX+tGY`
zQF+MxNQ9*U_i^?P&AQ+d!cT9v#Ex!4(rzXd>^6hdUdJj5Y5op7zfo#QUh0XXU8JEK
zw517Z$_$qc3rzghMbS%Etb!)KPzii&juuF4-L(D9K8QF1hwj3#nEH+#=yeSfm{8jv
z*F#EE$1$DJH-{E4DgI9VewXjTr<h7!9GlDBvr%N-aje-I1OUX@e)0cWwI=0I@f57q
z?d9xxc<8t-#J>l(fC&>&1?gZJ3gzC`WNF3R(g_&1&ot0VJifR$)G}?a%U{fz2O#-C
z+^I1Cq%2}LYAfmr=0Lk`wk=+F`6<!0vL(|Zmm<Vft@sG*10HkT5WuD@7e6aryDK04
z%I(K3)(e(OZ@nRgaC0G!*8iDe_dV72V;6VnN)5k)dVPCt)vy$E@WSoSMWlq1S2l(q
z(LB^2DWZKs?=aZz#)9G@D#Ls)Yz3Dw@OH0II_#WMRtjJ)T80CYvCqT`iqTvs5Owm6
zkl9*UPe`ml2B(`KkH|X8u7o~Zsu+E?&UV}U>hJ5>E;;l}*C?3vKrRq80f^hQXDzU7
zi7mM|s?hOJ61CTUpz_kv0WqfuHNLvm*5-)c1a&oY$YR&H({^p2j_arVNZbM%+dzDl
z$I7e=GzSK-a}7Eb4Sd#CX)vby0GV^dKGkHxBHGXrKKg<Fp#RA0{MzY%0<<;_=-j?s
zUyl2D1|HOxcd_(Zer@B4J_9rn=m%^*zkay1%b#+8^p~96+z+DJ={FBw?yT+fAvI|?
zAPK3nJ>%CcA*E6vXGUP0HxCF$kOqsr0B6m>Jhqrbew_2!^5}@F`v*$)o2GwJe(U)K
z=l0VpZ`Vo*X3AJmrQRsEOFlUy^=0lL;Jelas(gWx@>EtuiNLNqvlKxZ;>M#1S-`e<
z&`LDQkfkf1EuWgsEgdKXjOr~28;16%R}r@#I0zni`c2qN%D*m(g^|h1Z2xkb9Ot!5
zPx*B}&wT5y_FBg{zdBEfGSIR;5Pz)E5cptS-FE70?lK(Fu2^9k+l@8iY-=SALg-GA
zReN@zHD7KKnuuDN9EaWS4y0jK8i(q{u!EM2IMpeTi(;I7GdXRTMsId|=Q8V%QOYF7
z3ilyp|Cea}YJiC$L5du}JW~3T#b4~^NI)E!06Ibe{Qf?KFp5Fj=-3h9#ogn?8diIj
z<r<WJX7{^3!=KNN5sB`}Opg>gJr96?zsM}`asj15>13*~uiP{XP0~UTmBwC7PRD<8
zFE~Tq4GB*!fuzVsrgP&7nf)t#Aop@Ay?gerr1R9&FXqDSz|XAMZ;?;H*6}_H!^F+9
z20Xo9xG1*)%b|)7$MG9Wi%eRN0{;B|V~AVTWJX+{N&5K)#80t7=qAtKN(72{H=rOK
zk>kcc0drKAV6if$j0lh)&vAENTb^MRyNwN`*ZI<If`9=wJ9;9y&eqkvyU@aArQcO9
zSA6`X<8)HM!H{O%zyqY|Xt9dXnqPgQ#y2E1P%E*kAMxwdXW!Hwyg1}*;(}Yq&aXz%
zpHg|;r0XzjU|;rb86v|&Po|xOL`ryE!sPDm?jk^kz|`Y1)CIoOr`1zP6C<*Ed=a@#
zap;rNT`*}X)>OIl4g^PRB|SnLA0f*1Ia4iDMsbkSl#l^+Z+h9D#(wGy|HW*Pq#pj>
zQiqko<3@2p*0)IL8ic}L2A1Vh@n1qk2Uzgl(_eGr;yq@|HkB6#vvae&{FxB1NK}MR
zgP*r#$2~TPopGPr63vC(=1qK__o|%5mijk9Y*Ujd)91k`&&(v*<Yu|}Pu5cl9I#W|
zTWWU1&zA88XtE5&mMvG7mgc{<hD{2mTpOvm(~V}lD6oCZn$Ui)%-+k!r~0d-&%ZhG
z#Q(WN<&VHnR?*L1hu<Wb@$qCOO_~O=TT&g|GyWPD{L!R<jz++_H{S2V*puUI3}}w0
zm%md)z43;Pm`z0Z-;Q_IkqOX~I6c8qw=4JaaUDr5DVzyXJ7}^a^ZkK`pA(ScPKkYe
zeZL5q?FKZ90Fa#G^Ud|Zf^h;w$-dQ)C4wr|^5Fx-NAn#26dry!Dy0{KM+xGUVS;yt
zYB9^&sPJC~)-X(V?e#OYOBgKaS+t*QPhSQ`4Upnzrh$)80tZ{pHpSOMYLudLFPKM=
z3+EGH0>*~-UUW!ZK|j={byorQ{n@Ie_J?Rv)xaRQ0fUa?F6%I)IR1Qt+DKK)Ct-lU
zD?7-#0sY~uUO_F+QTT;Ft!QR*1ymQayIZN5XD2_5vFncVzsR$8{hki#SBRiLiFP62
zcn9orq<8sgF!2~SzaO99DbXY&DZMv{x}p!6Ph)^qMfsVTzAsboqu3^ZBi3e(kLAH=
zlwF#v>5IhHWhacWLtIKVpYLkzZdwMG12i0R5@#<15%JJ?s;p_3Czjxj_&Tg*!N-Mo
z&OrCvKu<$W<b{5b)whG9Ilr_#Y<_;{K%yyVt;O<<y;o224JQ7;>l)t>WWf^UINZ~G
zE)4uB2$T$=toOeM%7NfZRH`Agb0xz#MM0Ld(-Rj-vIvOo)k!TOMMkt!1eUs>8^erP
z$+39Xfysj_Q-ibccuQbFD17EId8H|@4y)Qa#qNlKO_T>*1;p}72A<(k*3v<n*Sxhk
zwRbAhj7lBHJ_YxTY`u0pWun30%K2WAVnmD1g_40xN{fjyTKW<th3fpnkT#j)!AUQq
zLmdt)S2|j8gu9(kubh9#92_g7<$p88_aRsF(Y(D}<W&1uZZgohujpnp4kRQv-nR6x
ztR`M=QF7IF)%8NVbjSMW;sJua$Mi6~{30t{ZC*%>^5-IVCTsPllTOJ81TusOpRmc8
zT7W`?g@`(!fVd}*q{Bzp08d|yX%Vts&n4t;*ROYm@9(E4XSJcSCw%l@SXg*5+RldA
zbiWaRR<Z{c4zTUTuxSV}g-}9LTA-!caSgJYTOIGk2732>33OF6)9X~mWiO9L8|##y
zvVihD=DYhKrX-Yc`#Szk`As>skRVc2UO?Cg44^@zU#D!pehzgz>okzhjJ1vwOU=BO
zu?wx;9o2;~y$_sbwr84Tjc|PsG_Kj5NeQu3`g{=tuOWOd(_(_qgp|%qI86Df0Tm&f
z<fDwwh7HYt$()FTNTsvSuPP_!bHvTZ(YQyrM3OK@xayGv?bJRlwRLC!4c1qD4{vuL
zk~Eb5h<Y&#d3pKz3)z_|KK4;EduM<cnxUI-6lsfCn24_Vm0kvLP7A;}s8UYHPv>MG
zp*hRbWYZHw@S3>;-|X<icY$_qxirysHv19`A&xm#PVB!$b8bpG)<?FX2OU-ODmTzd
ztyTqjTbMI5P~x7v)aZK-k584vuLkx};FGH33|yyl!#N0+UIaX+ug-3fiM4@1r($~D
zT+F#?PVz~p+OsW(!+wa=zy5YcmFP{}TO!;UHnzGS0bsMJ%|T5c1h5Hx=;0&&-BEKz
zNRbsM!~BfRxzQXjCe|xDbB!2!w20M3E#@Rm1A=JHYG@e@1gD$MH)oWDX0ZSGB8?RZ
z^M4E}fAM9@3(znih<r}+wCyM!-IJ8u8?>1yZ`I=A$`8-p+x5P=o664JnOmWYJdmBG
zkDI+Kk2D|&jyPMLdzY{xk+Su7QztNIFeL+WoL(a>mQyo61zOHHy2@8idN7$U?<o}b
zBlz@atJb1QX<pDc6i<zAeev0R-IK1Z+W%T5UQD|;kCFHWul9EH1pijm{J1ITVNp<p
zV&*uU>^EC{#Hw3zwtEiAhm<$z+6`ocW&Qp21}>xXeFsCZs|p&*1m3JnNyGMtJQSV8
zLeudK*SUe^V3X1>RfPRFh3_$*fI<7-e#>>joarT#THhvb<cBHRhgfxjgQx7lpM!BE
zI(p5A&$_^mAD2PW^no1Zg3Gj?!Pz-FskIcTDblbW8I4Fmv8;Kx@^OjTb`_vHAFY@d
zoJZAE3(jXGoeCg6@E^<lk)h-<)h8WvFcjV&ph%AQ0pIF@kG(5Ws(a>&JB`kb%Z7@P
z!6p8uhvhm$M!D(FQQZgi27Q8n4sEl{-p%RT5*I8iEFx{uKZ%eFM7~^Jd>oG*1=T?q
z>NfA|9#s+@yM@H+Lecu5(%8?;9_`69tU#Pmpz7K~DMMdOCLH?6XP<F#sIVvoorl(J
z2&8G5|JE?$(jrVyrdliW#gy=0oP-rn#_YAg8#(jp(5jUh6ZLDny^4dPiMtAXtc;7}
zH&W>>dJHTy#OGkT5PtdbbaU1~g%p{3OMw238<U0CjNExduGX<qTs<>C<B+Y!e8KfW
z#q_+oWnaY9%#(`jdnb3Yv?v)k?Vaju#m!&;@q|1BUEUeDbRyS3JVpVisUfk6*U0*k
zOfVH0h(fq}=;A%O%afBP4hvVZrb?#v>pL9RSw!t=**&~4r5(7*@m%Wt+l5a>rRaxi
zyYu;Ow?@b#7CPrrDxpl)QW?v|7hnI^)e!efg7QU;#EqRHvItS+@*Bc0CC|h^?2Kz?
zkDJc!F++T7Oq2~{JHmK?IHs=F+UuybF60$bx;IbaV%B98{c7g*AK@3%JU2&t?ubkz
z>k*&QAU=z944^cZCp+F7%cRz3X88WdObWUM&EwF^7K14PQUr>Kl_WZR*ARc+xAQ!b
zJQV(8V>rz?s^*g&ibC-UZUH`<!^DxCgvT2{hr?&o<WNOfx6>1>@M_l(3i1}4u;Iso
z_`rGGN=@?Y6W#}+sM^)2u@YQIss8tqNbMQ+Ks{nBT}_@`4tWY`TwSc$q~E}1oxpsO
z=Jg0WlU}dvW0ph0Y*B~?!c110#~5t{%0q3JPOo9})6(kNR{Bmvdsm!)ppu55mh&<<
zWmy3F33~C*$^|as*(8xio8Buchw&3q5F8y^1nBPU@mX(-yH+O+=WHz^utM9Yn5@|9
z%?+eyR-^-i)e<+Qj3H}t1u}jGHJ<f8OEgOt)4b5kpYJ9rSJnAYYQXgVDApx{S^>;?
z!}O}etK{pHitj!XVhrVYO5|2Pp1N15%I?%9YbTCqf3R)o@r_x6q^#NECZUK*{5TB?
zx;yWRW?Z+f%lF97weCCQK)0_7nx59dV^lk0ykLsHU(Yu^Q8}yQ#Y^Mzu7)%QKJD~{
zFogHPU4A*>*^#MQO0$xb86@ngknyA@8N0|$e<0M^3rS<Bua9!ge$@xp3B!RwHI+A3
zZe<x$27pw}Ej2l)GSo>pkda5bJ$m<mET*K)X0l4cqQO8KVRP`vR%PMl(J23f13F)f
zMf;xB<mCLTLK&kF+Di3z-ZYAnnn_YJ6vohCmLH9g<DE`!mOS1n-&FT68f4{J8dr5j
zVrB`W6Fx&1x);$N4+$)kypSbt&fJ0Jp3ZxM4qBtZt!vQsqB*;~wl-E~8VU&UStZFn
zYb^2nI+8-H15{cznD5sfF-^8drg2T)eb3H(L`r^YGi~nJK~T$VS$;hv$(05`h&0-a
zhiMy6IU$ggbfdMSE|!&BT~ce&vT<rAtFbq6b14(`psg6^w#ZGK{q@m!^Ona0bm`tI
z-Q%AJ)ebc4M%hU%V!w`fqA=yYn9r$u2!Ih~$7?k7qXyVojt_J4WkH|l!gE8I3BVl2
zODd}D**S!Bam`V6-3vMbdNdwWi9XtnZwMbLkfyoly+rfT4?|6MquVHt`*FdHsq3jH
zIomBpC4>x0<h~e2(^_Oc-e)c?S;yl8UTq-2ORauek>G!GEl$E{ZJ2Y5Mc5p>^-T_$
zbO|JEy%&TA%KEC^W>lgxx$|Rng`+-5nCAqx5ckRmo9FqLBVs;mspa&9BSLiFyYEiP
ztHPLM^+arzyqXFn<SU9);mz=zbokqf&KkYCEB2pXUfMj?J&-I#D=ueYzMFjC{j2cu
zCF#4YJQUljh?9|2-D|V&7`SzxQBT!WWz0UxZqp`Mu$gxBg_CkL!^;YoWP(jU@kD`W
zjriHPe3ZH6`PCqfgR#=G4bome-Z3{Ke@s<Xf8<<B%coA@W~FN>S%K;=Wy}pf-b8bO
z5huO`<*JZfZwXN+=5OARq%5VFsEq^q>GSTBsi(%w_l;!vqKT_fJq{%5ze8S0UXX!V
z@m7%`^7uxbBxO~l&s=tuGw>tc9|+{DiMyB9^X~PV6jP%MF~96;cOSgSg*vNYsM*kj
z(lb(y`>vcv<2I2TBwHM0I4{&KVp38iOl#HJfJ5+JmnSn+{_$NIZ~{R<3>NLbBgwA`
zv}W85K4K`+es(SHq-`)qifP61r#mleYCo(-XY=97Nqm@gzATNg6ObFVdK0EY5Y9j;
z32XLlmD;P_3-Xf_uc1Xj_2S$vLz(s1l|}oRTopCm(HZ7;`vZ#cDlfi=jN#OM+v7;k
zU`Mj_-noplK^vB%4(&HH0S~}3QRp1k4mI7X<SSI$ttr2liRu>@dK%cG{Y8C?P8CgF
z0kWQfk3B2h%Q^zB(7s<olI0wIvUI8ASMp|>`|baxkj;(t-sOZIyMZML$*~{^8;?v@
zsak*H&M72>^|u&M_s4PXqpCc}ak<N?%`*<B2(M<|LdfVU*&6#CZ(z3;Vcz^ifuopg
zLw=^sZ};9c(No2<4!il9vbiz`<)oB}3rnhG!{jLdb{1-8y9FdtB@n8!f-n-4NSQcl
zhvG>N01Z&@+KSF5dM?Oo#Xplr-ehC|hk@Es@?6&FK=cR=dCK4b|G*A&mV<gCOB30W
zebgSJ>jmV8*w2+5sO#$iPGY4sei`4iHYTAZ5Qz<Mk7KaXyhJ?lI^m%*&I9jZi=7KV
zG@#pWAdg&lHZl+GxR!W4qU;f~Kwe31PR{8Cry}%6>?YN|inLu=*M7TB!HTuRb&2=B
z<sOatC4J1gDGm6QU-15Ad~t#6+BbFtguhGG2ywEO$!^$ZOik~g*NWjHzymBux>%IP
zkg}hm&%HWiDH5aHUg}`H*gxmpY4IwbY7Z8Pz2+ypRgi-}e@gEM?U|`B9JoC<Ut20S
z_WD94LUVgc8U04v*+t%az!$?2fp`C<S!MOYFtlkzwQOEzUN4c=Va_B*0_bIp68E0^
zHvk8`Mlt6&owwhF!;5<3v7F}xw-%{hn`~%Qm=mwQ{L6)%jN&|B(w+~m-gB@zs|cHr
zC~ovZpRBdUw(MG?u+Swt4Z&#JJs<=j@_tZUD>Inc7f)ZmxyLN0(5iwkrV32O7$41I
zV$#w3_zT)qTJ-6>ni(uDRZ*C_nJo>;@%SrVXf3+##4ns`I$zpBQOJkY+w^RXpms2n
zQ}wMd%GGz3Zy;NbLWl05wBK0O`*U9D_laskN*3uvV%{u3zh7EKx3PXJw+4isV-7y+
z1~~iBJE=yA0}M+;wv|x$T;}xtnY_YqcW`ep8KcZnSkbVAUr*MiDVoGQNZoZeC9UoG
z=3?U3TV&1W<hCaaBSdaWLt(>E(GT?odyDs1O*M;~)>F(KUG`FARTD3q$+ekqOe=|(
zSPe+-$q({mtb{`->Ajzhj@X}Xz;xN<><gD-L(dAm9r|SiwG|H+^60cG)g7#<2MO;&
zc29oEUOk-;AapOw(wydQm4+d-CWMdO0j8VZ{43w{bj2!Ye9`r3pI1Wlp`%tN^(kfW
zj%{&EY1#e_KhPOhKxQ=t&}u~)2zpwethPxE(-}tc6gvzK2ssQ~w$e3^BY!|(oKi+z
z-s5Hctp)P7Klzigd6&`amMk~DE~O-w|NDY_kRhAg8jswjFw$F;00Kg&Y!&rzOMaGb
z!q{$h32#pmNwpdBxjSX$daY_%KYDyYJAWaV14Y!iYIn(Jm-_lfYL{EDFO}9ZOf5YS
z>qd69071#xxw7IM7xOA+3u!5h@4jP{wX4^ood=EOton?&E5}^+R&p2M;4v;UJ?^h5
zs#iG2&s+5N8p;jw{tRfgPh1g>DM=BPfKe<L8+lv!m;0$VpOWu@O4k*K`W(LqXY1yR
z!1yv$%!tPH44@z90QVL`Xj~6%gz(w@OH8&QrBUHMo8#m7-5nLip(k5%zt<!LKEdCS
zACS!<k3{&(Np)&H8JmKaM)3M<tq=B==`Ee~O%TzU|Iw}}P<+GLP`Le<YCp<NpVE_5
zV6xu9309-nY$^iFwFNYyaZyANqY4rjvyS=(JVE3T7!mx=vwfEc`@aJO&~xh1hGRAQ
zOEMQqtyPG5AdihNU^X|fB;=XU>B6o3lX~vmJJ!FyE94kvwfySQkI}5e`K41x8SGv&
z{A`<aDr)yE?6GV|Foq`cS{1DslA<R|^VEe~Z})9kE5lIVPW(fK8IV+5!jzFhlgfOZ
zHJe0%xs3aBL@rD-fyRx%MMQgn9M9Ge7uG>n8T+;2B+W3^)TfHr7VxUm&^7)Nknfc8
zjjE;tUK@M<crbGb>yq?&e9RR8@G@U^&jVdUXYHYe8p69HLOBKe0R$i5Aiu#kWrrEO
zx^>OGe@j-X;~=}(PtjhYtw+Tp6lU;v*v0xvsCVr(aoIiNQp88iO?xQl_L1J?*V=!W
zYDWeud`NA0D&^7H^B@5Bz<H+3R-(!E6#3-+Y5<l!IZsEa3vZx6hUU1R6V_@aF<BXI
z!lcEzZ%BXWL$*k{Y{gdaE#Z67XACTv*{9~zvl<KhUzX>IS|{Mw=V}J+HKfG{qCTOX
z?(rfU`kX0iR|y6ur#y?1Mv_I9m3@ZC2*SMsv;I_kAJvS-C{C72SaJ6Lt1opW9|Q%q
z9j(&b<!1xg{5&iSg2b^OHJuHSfZHEDK!xICEMBd&9&LU$20FUebqbW97@Y78=^qZ<
zm_mko<lFq*ozgRI_XW*ai@!pw*IIAk^wkcB#(y!<rA;~mtta}GffwDXL;JQdmMJYK
z=hJeEla!WWXI!86oJf@}s~YXT_X<68`QaZS0lJ<+>ahuMVMUGs?6sf?Z`N5{tX4;D
z_m>ZkCzV~!t6Wf^7r-!$&tnW@1;!wAJ?`exO43q&vKBQqg}cc|h2gcDKqIh`%-PA~
z5<y>|tpLA{s)x}vE^Pf9t&f$0g2Jt_N6ZJb3zmSjNShNUo;;TIgO+o2c~V$MvIy$f
zb2K<f-Q!|9%_XHP<$!*LcJJ0weNl?SH^;^A)M630$yZJ%n4ppF<%VPV28RjlgA0vr
zj^CDSrVkVRH7-)1q$KSg!UU=->^?nzM6|*y+~-w%zPH7auaz31zoL|#*jS?~RWCZ|
z*>M@XBrE}N!uuy@6_Gg)%z2KBHxBmVe5#U&!{HKFEX9>pwHtwlG$R3ei%<e5e^xw8
zeic(T4W>l1a#=HHRa!gjrd!1tN+wH>s0qf_6p;WRN&pjZY}_jqx80XUNJ=&o8i4{+
zB!Wf2gn3RVwnCFkYOA$$(~RK&5`1XLgWQPY+BZnNrZ+TFTj%t3hwp$fid4mSd(Cd|
z#kj$@c658=C8b6IpT2A_t@nQN;~q-UfF}tmVZ!e*fmtEKY)^n`h}eV>OjI{BUTmT`
zITpHK!<2QqY&KU+y47(nHOa1PcWF0PV*DCcq%V2csh4;BS3&w`k4un0Wu2!$EYONO
zV<fK82?L_1>>;9U&Nxf4jinB=68>B4`H}uOCVXXl)`@4zv`biyEDBTn9vF{4Zqqs!
ztdTR6PQYf#-AdPc|3SYa_pL(N{IZd_jzK<<#$@eefS5@^os)a>_N?Lgy0fOgJRTf%
z447jz*x`OiQtZ)gIn@E~9paudKsaszu!gzR5>?BqmU&7I-?cyX{rL$Bn05<;x}|uA
z24VApn{pq%Rx3$3KFu^~sb~fW9~MCq#4Gsh#(V3_GrLu@hvvIpna$ihe*qil++Lvk
z>IwOa1&!T;-DT(Sn0Taz3y#+ed1U%L;SGs&oGWW&Cj8|15$wQ7eXpSa&&BL-uNmI_
z<1hs~Dfxy1SMdXUUPNKX!rWI!qg(19P`7-J7awNQKr-XKkBHd5u!hsrS81QwqY@jZ
z+0a1{8*mpl<Y+O()@Jn_gc<LP-j_?+vN`JOPC&mexiWy}d5D?3;s1pEVM7pYsiPsv
zzQb(~Y7VoJU7j5urPPiSM2W9Y<s?~Fx}-fecKh}Kqd0NYAYQ<z`9Wz#HTm#n+Jf~G
z4=nFnCOyrv0jnjN^frs*%Hi!@sXp(nC@wDp11RCl?QK^TzleQSKTpuuq+W9@u)6XE
za%j&=qR(cT-8{B4**^qT`_AL=MWbgpH(b<PQdtw<d2KO-&njzA&e&!3{Oi$qRm=J-
zBI&x6<i%DPgLofE4wf|=%a3{|oS4;)>plwW_$5-<S}B6fC*);fw6|nv)LpNvU>oP(
z+#T*iwdbQ3F2-bro5c$<55yXrvI^5`VU23;`1*=a>+&yvyV7@4hg4F|XxzAA4YP2&
zUSAU3%`ud3C|x9p{CT{Xv%-3^HszL3Rj_|BYA-f7D@&6Bqs6Lbce>NQweqFDhBAya
zOB%@df4;Hr7kdqUHsasaa@yP~$LG3UrM9J9(&FdivxToWEsk{d1cAJ5tI)(zwK?}+
zbMXGI+47Gym%f#Ad{@q#nNWENWuwi)$cNb{k-Eq?agW_ccEPJkB`1Jx5;*%@ZTs!F
zbWIt)2v7aO7~IcLVw!zMUbZP3H!KvNwx{^{Rr&6v1Tgv8Sg5s0mvu|L;#C>9{Wha*
zDd17Y>q2Zc+#$Kpa<T8{>7JUZ!^<q*X%veluR(e&KQ0!ZE4kfaAa%QC_mt|Zz&7Hz
z8GyL;{B$*(Xt$5bAO6TJO;}&_3W-#$-q{*apLIow-TAP{A6Pc2Rk*JrX(u_iB*d4*
zA*-Wm0Ox0<6td^9YM-b7jMcal$zfp%8>l^0zf_(xqWRZ6Xczf|<4NDb#y`c-YadmP
zxq5Y%-!Ep9rkjIEwl>o{c$s`dFM}KZke+x%{E`NeLB{iOE#l+5F(t2mC~5HMeuDcx
zy*Sq}4O^qHPG$Gz8|s-ErQb1nE-pgFw}$NBB%EzX*Y7)%UfI3$EDYx1)u9hVJpcV@
z?gB}Y81j@&Ct$tDlsoTF{b{Ht$HhsqsO6kPSp01-MArmwarqFH`nhJ%n}2HP+Kv~%
zdJJ4>IlJ2cKK!|6lHSx-m_C@gRqCH)*vEeHj!Cgy4jh6_s(CBv%>i+Re+sP#%HK4b
z(|QG5giiq2JK;ojmLGmfk@d}6&5Gq+3PQPq7i;*XCx0(Q`{Ax)o9O+q=hI>6Co4Vn
z1Uw`K;e0VQdZjV_^B_kKV{&qY0BP07b(6fiibH93Qp_NEtQfCxhAKjIWbIdD#u6!D
zU8lrd(2^cr>wpRE*x*|+*yUHS%a^O&8Gbur{szgp7RjNUscC~9+^KzkFEx*+ANa?_
zCQAn~d0)#qN`8ZBqOY>5%wyhpnGf;cxGj)FyJq)|{y*4iT;UY4Uu|pwIC)U=*7>Tz
zd8)u2@#~+<`>+4QsrhoGT&WHIm>E}W(Ak@t`cZamx$tk%?EmTeR>6c9=USSOOZD)q
zUJcIvBp0E<l<{Am>5s9%Umw=*GQCMt-{lHZ2Il|!7m{9Q0IatKosqwcH~+I%Tz<vR
zrmz_*Jtj6zCa+yGtg9L+wZyUi7$FY9W{T}M`q!!7{*56DL*1hnK2<4lcZm%me~NXa
z7M(64)|m9*Bdrt0;#b34pGW!sEk8A707g?|#nqTUZv6jzEcnSy^nM{N{GW0i9+#%G
z4|qo$88E$rQBaW-(kcz8|359^&S5epHz?7KU7dQ~bu~KrKCl?YR^Q26|NlMwzn;Qx
zgmU6&Y$fBR-(N|kXY&1RFy&2g?0>d=h%t#~0uP#!-@opG0KBARe(s#`?}fe2H4nH6
zcT=7Hp9ujX#MMI>3`S6Yr>z9TB$z&4UWtwU4_WTNA5F~(=)lDOg}c&uD|UY!holG!
zFm&Kdpg5bxs$fV8KWtPaOOYVmVU3*?*iQzixY`IC=^EXoYTa`>XI+K1t-d@F_gja{
z<tGVV6Z9h{qJMpeHgfQY14q50;DI`(?I+(?TpN5UfrYT3ev$M)es`#fppb>p=JA&g
zQnjr2gT>t$k%PZ)U6ZaKM4h;EW{oda7suny7?h0I2=lleqK1gr;7P>my6i{Sz*zRF
zbF8R?J=D?1-g`m)VF~OzZoK16Nw0kdKx`TI{pFFma~?CA9EZtQxmy9}N!^mzS+NKo
z@->4M7!nA<bp0H_md!O(YPTo~c?xd5qXMvw{WX|P-2TD$65;oYegdBzJ&DVT0#2Uw
zCS$_k_oP!770CYAj`1aBR=Cw?tIgSacPdJ)ktEenN;G=5IMM8-L70CQo65m-=xAxZ
z03l-k9-~y3#;yXJ&a<z*)?F&zHr-;Shw84hjad^-tZ@MMwH)bx+EnwKNpjXV@R#Iz
z7E7#u&FsE)q(*Iz%Egoh6Sx*Odp>J<W?J=@<dUM5p93XstYY-J!E|8cak+&H3ukEN
zAZ$uP@y#?5ny$aSm4HM6bMlS;yk_0oo7_Y+HB}(?0D(pnrjL%}@vfFd*Wn!*;6G_G
z<W6)d6jeh*_xS=il@wzZ$9HmonkJB~YW9bGT~g|n@OIOdd`jvu%@u|K9uI$s8mM%q
zkU5U1l-lLzL>c?l!Il)@8ybElb=zyJF3c&E-edcNURqrX7JrZZQ;H+e%hT4f;T-Yv
z?cio42%28S7XqwDfL$Wth}YJ&7{<M%|5sGvLHT_=Tk**g%nrXw(xwmGX`s0_BQ<(R
zGHITYz~Bua!OjEIsrZ40C5A-UtGpA$?xF_@MaCRxOCKYI`Nl19ltBmC_4zwTQ??gr
zn-G1Jx)QAEB26%aENcTGYic!VXOO(VeUEZA1MO}5U}LWN-Q2rz@XAjUaRz%n?JF=2
zZUI7GeDhJ^&)EaX2c8+2$*TM_J16~3X8)%|2?<nOV9W24`oU>ZsCE?qC~J~9GU@VT
z=GNbVy6KJNS&v|jJGEpYELe9jO=S{0?-Fz&n#j{LzhKU)xUP5bKS6jOQ&)*y+>g(k
zgnLz>iW-A9$tn9cU61lq#9FB-rJUsU+wb5W_AoYGn^#4i1%{Fhi7w`1q5U~ZMT~c5
zI0~s|p`EYwr-}?dyrd;1!-0Nq9>mEPhZ?1*pSFb`LQXQrmlTb{ZpRx*Z>pu4UeRpF
z;OEbu_n1s1c+B1~O9F?NHa6G3yTVsgE9pm$NwUqYP5;A}CxvY)Z7!=fH+6N1hyPj_
zJ_v?tbEk>h$=I**aFY&Q0a!wcu=EsKe0=Qw5_pQ1AR{;;p12|dQ;Kv~4D<cJdt+@s
z2-+_^qLm6h_B1=+sM1jeP1Wks^&2+mvte=|gk<OfvcZi)bNNrrx^O`OLBBZW?Lztx
ztFR|RiE|tl+hC}l|Dh&Xfi^G;>o&0h8O`}wr?HsZu>jQH{#Dscb>Mbo(o4GSBSCdl
zlB~^xNwwf(Y%?)Auj92gnY!**HRh-FfL&TqekUGueqh;k^Hd$Ua;EVWSjeT{DDciQ
ztpAyGgse?#j%RfzwfLRh=Ly8q43H!r5qE@g(N2(L{C7k=b4vzDd|}{45bfjGGX;T<
z`sGLN8Txx%J4b%|2+K$=25~DKh>N@aaAO}A9jWi7a;z)Lo>`b)IP$6x-?Lm^>|$~D
zAJbeDhJEqpEkb~$s3I%e2xkKLdN11?_ry;FNFfTOJW-P7yLI+y$qWSJ$D9%aXiVnB
zAvw0l_8;c|l#{=6@IEHBUPllc)QKYvI&%$fKL_lHbWgtM43N^)ssMOi{Hh7U?Ode=
zHObI6FqdlmwOm@$;wHG{PkmMpy4;qS5dZujwtLqb^8ozdTZD<!i@}XqS4$v`9}yQg
z_3u(GM4Kz-+r4<2Dw%i+usBh>4wFafNqY^F6FKQO?W?K<;?8TPecGdPp$LoSj~^Wg
z1-<qa-QV2BU8Y~OO_kS9kchP8sYjlTn*SLQ)NIK=9EhG$5(=My{M64!GEk9}0#(VG
zhrQQNZs&fkY4WplXy6~-u9U-Mudh_EARR{{<;w9dt7ie>7vbpv>d|B46=0qgA!Qj^
zM&(BzFW$Sl{cyjZkmrtHNC;JG@|`H<Sf&Rhx`p~9z>V_+MFgQjGd|8$aP*|%^!MI(
zd^?*RQRqwlo4GA7Le~SsDUt!zYvA8xIOSgWe6isG+eN{2v-9y~)*TrlJmp|)ndU_3
zP!Vqd9}KQ<=cpbJfLY8Kt<TThp^NwR&3`|`-+xpex(=7>f~J5vDG<PFI#XwzkHLJj
z2nuh0YkhI=_A@Y)!6Rs9D4m0Oi;BWkKcJxp#U>y<dVWDy{Mrv^e(=ibNYu=$4<juu
z2@p%Wk|yj*`z?V)^m3jgoV!3mjaxF;YM@gaBhj}#`e3wcXQEXNG429r<U`^T<Nw?Y
zU&(XSY3F?~j{1e>!QH@sw+5zD@7v!-x1F%%i)+j3ZaZ5ZC#k$UIqwSGonkU=fD6Px
zcG|N4)Jr-6#m_6n_WeD3u7RxGg){_w)2T~`O9!1!49UE5&!s4u#{<Bz7I~;(g5zEI
zciHX9UvTH!RgxCgr{d@XSHelG$SD#}j)wv`a}Vw?XYI62xbj*O%h}{?KS#0@qgsJl
z!%U-sbl`z=B)U>ge{p#gJX&PZ1i(3rdQ8NFGf+R_t}wG`Z{VqgVmMN%9+z{Z=0)4#
zg1i5^*pNhihgyahNwJ1ev18;ZD*oU(z(e8J@1mW46|>Lz?+rvrbK#)}d_ZV<VcV+W
z7`}&im}Jg3qkIFVO{1|eY7-%uLk}H=PvH%dbYLQU-4jO|pSy8vHEM-!ynp?7H+Nq>
zi8Q{l@JK(SAKqRl$P{@VLRu4r5aY*_(Kl~ZZ>~)hDK0-U{#EY;oX(lyOAr!6<V-fp
zPma}3c6L#PpJlafbYee(ZJzVC)27l6=J~CoB7K^Oz2sE)ufU9M48;AUf=og07UksU
zi^B&TNr4t}_lZw)=W+SQgH{iZJ80xLgAwSL3f`hQMMcFHm~q(ra{SsP&GaFS)TTk{
z7Xxfg7NUsqNN$-T^JzU3p>bufXx3Oz$+$f7cbA5ePP!IgnV~$aQGshDmchGhMiOiL
z${bUBqO!hTwQH9K>m+<b6TE5p8c%_Nc6=Pp#&&7wInze};S3qtHo<<HW@u_GVVGnI
zz_j1tJZTT`ELMUe-vTM`$cymM7-lypt3E;Kn+~QGo8U?vlHrC?N0m8Acj^d*H!G!b
z{R^EOJyVHjm|?CgMZZo-ssA-)yjAFU@%ghKPhD8%Ofx>FNn!#mmD5X80=;KI#nW@`
z$MWHsfvO7j5RsWEe7hgmreTl3<Y<KOVfkPv+mL${D!&iL1YJgDR2XQVcS0<w^1gNG
z&2X6bbU=!5mIG8-EkNwokJ7wz8a9EB3Jz}a8yW@}{Jg9MnCcTK@h5bKt5I(b5+l}r
zg!|aSIc5?S5Vzq5YO&-6$1x?3C!pa$v>51hIDt7)416|Rf+Yxf3Z?xC;nM{tDZzkk
z%iACa#w7W8a&@Y)=h4w}As|-~h$Gv*N9L=$rXG3mp?%K&q(Yn|hXH2tqcR8s{bQ9L
z_%BT)MG4RlLiqDAcUOg<7Wj93_}q)GCELqFnYsV**B1%&+eOFkJ0aObDPrIEBGM%q
zdkLh<X_;R8FHygP@Og|0WAN6QHm7{d?5F2@or?U*G({5*kz>A+7b$?yj&vM-rW*@J
z!|h55m%E`g;bWsrWsu*08B9YWJxLQ*cks^rL}J}{Kc{uz0Nn=a9qx9dua)o<f4!_0
zNzCr)j?8ed7|{K6joENSWOOu}Bd?WB1k4=2TwfJtn4|Tc-_1G#Cd<sB<nMp9L!SFR
z=}oQ0jNK((X{DRHxcqlp`}=aQat|ezq;ZcXiaKzRwZ-nb2Rj4|5a20_^c4<~{T?Da
z55#QE&sadYc#k)ULne>;i+zPP#e&0=Ks>(n(VB)K$v8X1xW-%7IB-gF)>D}(!)v8t
zu=pJb!EXUSr1*Sod2AoxGDU5iI0ce^>7!%{;ZBFL=ruxIaKh`zs2>?$DZl0!+W6#;
z+_UO)d&U7$#*G`n(Wf|<dFf&%(`qrY2U^P@Orm7S$x~yh>0kciX9~xz{#e8Z-wA+*
zLpdxv_ZgG4DO|>+iNI8RYTrHvKVN@EdyIyUGx$lPg5=o%YHy?CA`m-je0*5h?7)3n
zLVW5d!%t$qkDXIKm@t_%K0abbav-F8e%?DW?9v!ZYC;~BQ8>%F`j_BT@PpRG!Dt^3
z9oAG2fBZsBTA2mo!|V@i$scZJ%13d3Fy|*+J}Zbdz3WUHHF*wOYXxQR43fkWf7BD+
z{4f5L>F?Uha&=+!NbX|}l&--eQkOH54Umy%mE%)Zzhlf+I7}pompiRiMo7=h#4)^W
zW$vXaimVrC1w)cWpRE<2Zvs{?4`as{ZrqNyh`!j}_3RY+B*j%c%QQsz1YChzNZFwG
zdN)UExdh=HR-N*DI&j7Yt&R#JRD-?#Om`6i<T2Ci1cH(zPJSM;&?=P1LdJ7!qfm44
zCmnTW+_gcP>U3^F>2!#0^fibKdH2)pQx4|OKhH0Sjik64-e$f#6`<n6_pN3^`Szj@
z{(>X9&iFy8D!6hs#w5H7;H(U2IQ7Rrypt-eJU38T;eIVGr|b=PC&Z0k3~o@?Triqv
z<kxutY9vJH6B$zJwV+N?a1DSz;x2MLg^+C)^+VJ|Uw+MI&;Li*dw^rvzJK6(;tfSI
z8c0$iWo0GFQ+D>2U1X2!knu=~D2eQq>`<~tG?baWXUPr~5840odbHm6|NZ}e$9o(d
zym;>WzV7onuXB7ppR*l2gAUVX9pbj+Puv&A3wGQ{(Jyu4g_M55tTD!UU1jBi$Xxfw
zn^4a--^4;3VAVOjFcxFiJ8fyJMWK~}_05TCggG^*<~w!mq7Yw?@%k`saS%zekIGq2
zTn#r&h(XHDsSy09LbWgz2t&scPIPQPxADVx9^_IFP#7N(^4#E0_y`>2_|}Ye5gkXj
zbV>;Ic*wWm0Z@rr_$l+W#-^C0YR4}8iy2Jv6fZ=*{l(#~o6-|YQMbisLAs%T?aS{p
z%i*x{bBhuP+AX-ass+HH?~`zFa5Mm0E>Cqk<Sxw7bUKQG5E`N$&#|1y%hRd`s(VX!
zG(s-^_I=PrX61g&%IjWM5<g&Z%Q1X*>g&(Kq})HZl3oI*TJVO?d>V|~i9-FiF_1{*
zB@hr?P1e)I)-#ruDmQJq>?-h@j=dIXl8Yo2DpgZ3^g#fK9H*e}AV@w|vH-tW+wan6
z<D&6OIO3Q>w8<hM5sNGhVS#LJ>URigX3NK&=~x4Qp8w{;%2I|R#}K#Ix1DMR2D3wP
zouxaw*8$naQ@K84XJgdr&C;<1EmuAOE$6g6%R4XY=pPShmrEC7y2JxZ$+8D@+V?uX
zKj_+R^T7>D7-QhvcgOarRNOk`K5<x0^U;q0TM|2GMT+O;5Q17lE>M&cw{roZvcYYL
z8nlipC5WUzU%IT<Ole78e2OEOQMk1qL>mORWdgr`E?wk<Y5I!ve0rvQZG&Vcb_z&9
z=1e!fo>v24u;OLIrEcThjsU2LM2C!&IL#(PG$R!AK-#paM^3%vEwYb+zAfZ|DW{~_
z#Yb*`l}c4PN+RX`<ISO7W;R?4|2ARbU->*bD=%<|1b=kUPr(~4fybZKBuuc(Bzu~n
zXNOeLCh{H-OJq$xLj_F}tPyCLKX~B;*mfOk-3-bomuFoo8TRu#xzWbDf3Ib01P(+4
z!i|84X=attAYc_5pa^5Wdw$2`{*v-s^0zrU1$DNn*!CC%suzxMT?K~e9^rR3n@AQz
zcQtd{G=#(!NKIM2Z&qI=F8=x_GKL#!*S<)Ltvqmb)tRF+LJV`nCNO5IG;d)M@lL?J
zhv^<N!=gQfHo8w{Q&Lh?##Nbnrk`$0@$CTSZBShn#mdbg5=mI5hN`o@>G3Hbv41DF
zFG1ylk|;h5U<p385X4M2soLl-0n2B`C1y52==kZmsl>sj<W+GnU!c$|ODMr(vz9HP
zdmZlB{;2ZoqMISzeodZBxPio@x)g^hoF-N0p*P+=4LVPs>*$^IlI-LJs51Sj+eJcz
zFYKIq_z{zA%RXS@5tJ!idX8qL^7b#h!j|{*Q(<O!Gg|6CRYo72FBwx4KyZFXsVe*A
z&UN_Z!SUTfUOX6$*$+L4u$vea#1(S`l<JXH{*#&U=F`waQE6&`Nm+eWahPM|mii#X
zCRpjtXv$Y$-twAqInxRR8>=T)F2ZOLUeqL;8xWhCnN--P@1#-yoRkcW5P9)j4jHIs
z@-z6XLK194g;L=n=Qb;aR;08A0xOq20s&alQ<XN>W7V99n_1`JqZrD3GI)o)_qh3t
z`=j22$2aETk77U-ZqDVj3H}^vbARD^kMK0nG+z;}%2|zBS@imSk=fHPfQBile-%)R
zgoFDSmqpF!$2b0cgGE-IPoJN6#A|khM8RmOqPz9F54A|7I&`%Xq)B|Zi-$3Nj@sh*
zsd>m(mL%&~jqzXAFRjZ~#DHfpPcG%i*pc-?#Jrig?~VGKDn$r$7K=5w^*Ro-4}TG}
zJDfW`ZV5zF)3JsqSq(LuGD+Qn$4&KaOlcRKOsm;Dm>2RL%NM|j(sL3^jU0deuT$Pq
z4y!gb@#@AB_NCMexz572BBpms$2=>CQ$xwmyt7d&3-AGfU?|MMIR?4esG^D@Wa6~V
zAxY#%OPpYYL0QoQEqtKUE9FK`7)gI!B+TmQo6W&B@a#fEtAk6{!wNC93nEkL$zLKy
zH_D@Qx|CCO!rDbNDzwAfx68hIt1U}(p-WuNI|O8NZ(qh!&ShS9=wMJjuR5w#y3i_T
z!;=jxiRX%O*UDhVulAFwn93a~?%7CL=3bc6d3K7)RS3Dyd@M1(8WJ3e*;hK0`9hA|
z$5JIk`IQZckzMh}e?(%R)+cM>A9YZ@<l2vz3nB~OAfcabG_B8JitNqt$pZGdyv0*<
zbI{`4{WSjZl*P0{sbOiVZ!)l>v|kz6sTz;QI(`Ts78g*OKq<iXtic=PkLvZu9f=s{
zHm<lSG3RT~IyFvbRHbj^UK5pqn960gzlZ5f1d%}Hj#xDE>~|n<$<<up;hM~<qB`!2
z9J7v~!iXc3#<lw1!8{y7o=%=|3Jrq{6vsNAo7yczayzH^Q=m+WKK6KC(p0cJ-3CfB
zVrV7G0M@qsW>Q@uQ)IO9!jp%JdCU0wzTxz?Lh`cW?<{L{BKXr%_uBEa&!{ykIeKPB
zB!>Fp$oF>gBRR>%-DciA>L9hW%<a8=cjn_njw48!NxD~-+GM=UT*~#W8Z=55@gKXP
z!Q7bwT8+i<o(DYek?N`k=(_Pc#Pv<_4Ph~rS~-0Qvsv`}raVCraq0%N4xZ2ZmpYzc
z9*NV^>>DLS2`2%qdI}Ly$#0jA?11rV{@#=;dc|jNtz<%Wv`bTI&cyvzsey0ha--b@
zolg3pz@yV0AjQS7zhgUNZ9{>sipu5jsgBt9^!H-^?PNaR#5TL0*s$>Vp2QS}q)TKZ
zA<R~?lJI}!lBcEc<06#Td+D0{AJQ+jSDOF02kgV1f6nTW37Dk2A6{vLJc%WyeY?8o
zt`Sy}Dt`a;RTe!*KMooC)F(;T2Fk-A=sJbY(viKnP{|vENGAAm%UYyBl(g!3W&Ey=
zYn6b;xJNEyVSa^Ge-3QwZn$X1%o)S-Z7H|0F0$vzz1@LMbR?!dS#a=da$WjmSMVMm
zYIvirJ3^d(fMn=O3UI7@f#{ia`0-_ridqrB7h`@J8`ovUiLB1`Uy+Tz8ICo7-aqrD
zQw^s=!JXr8+rPQvTTc3ru)ERuN-MIUcMq=|`dLvRBvXE9$l3l`%vA{c^mYQ+GGI51
z8o4)lrj_fZK9HlZ_el8PW{hbqa7XWa#Yz%^RPq>zzisj^0r9)XjXzw=k!|fWo0z?S
zwda8GebEM(9>rKYa{ErOb^55#;9)(1w|1u-9Ra_1<kW6I_wr-(l&1{n=wz%Rb1pyW
zlHi`^-dHiJc>Njo8=@VIAz!0mFxGwT^nK6wf-Po@4XUd)U8Fc3Bae_dJrG?!tc_NW
zhk-Jz4Qb3pkWZLpbL$qKJQbVMsdV}yam7*j=pzNq4|n=mnkSgJ`%TSf`5&3sqcf2Z
z6y2p%sikMsE;_tt?&;Jki2b0)9~cq-uh`oMn@#qkQe5pkjEJ);y1DZRJU?-yIKOnW
z9<;wy_ccFz%*x98V7oy7G!jfG_4S$JOdHmFdiXqy2BKd!R&>PuL!m}5Tr$@Pnhh+v
zPVqdfLhql{J^AP(aOkS?_szqrKsA-j10Xra_j4UWQ_hjr-~XBESI(^k_mXzlnuZn6
zWYhUHYI&he$)*z`T}jGs2D;~KO~iJRPjMvvcuS)s@gaPcf#hQ-*-;O%`N1>SJ??T~
zzclX4m5&yA0t<tB06`I)+)Kx)&RngdoreI8O~Y&1>Yfb6bNLI*bVMXl()XEc#$CN2
zKW&`Otz=rdw*H~T0r2rX#+0H9&Be<-{~qM`Srtr#tDpo39e%J|%(Z8UN5NXyaj4?h
z4+X^sGgCd<nwqBLkK4~iPZ80B65h@7^Oe`%gh_D?yCq+~ETBGzM7_rC`=4DFf8w9Q
zrkh=^QK7F>d@ac%rga)}0kyih##njfrctft4<sWd8Hp}1-m!o7i6LE3y6pGpl$A>|
zDKEd(Mb@5Km~3MkOv#*4ODu-APD8wCS?}TvgTqwOO|IOP^|P2{@~0>ECs-S)&vWf&
z5NvRo=@qCXV*lB5C1FPtg5%tiSFAeoy+$xk4{M;j<}qZcQZdiKg_0wUijPCamUpnP
zNX;i&K|#GQ7R5h`^i1=>q!L0sC8L9o!qWHTxbdqgoRK<zHii4;50;KMFCH1rN0&Yk
zK5E>UbztFrwn)yg^Doso^|9(*kBrYiV_??FuwqF`d@MCoHQSD3T#+@m$Uj$JO*Ugp
zX|%tjL5`U}qF3)kJQjLX*7sH5xHonJR>HTuzQef!Uj%S1#qvKBlSEBoe&^6fH)KX`
z>m}^2eiB3|s+}J?uq;hqf74P~0;S%pP~bUk{{W`BSn3V~xj-;lXdd>g0IKYxmO>nZ
zs(8#wo7d{hz8;WZn5tPd8D#(Q`Cxnz)JAI=_ePq53I?vPZ6Mtp4fbLJdUjU~lxWTj
zsHHgfLviR!#7ZsW)5QD}S+gqes}F@wj<_ujxDM3_tF51W5-sMCw5#%)S3Hbe>Uh$W
zBkXE*%FMcTU)>d{^^+VEZ<~uRNsP5ykg@Zeff{zQTVRJVe^1rKVSmOe{&uPF&2_#o
z{>ya>Kqpp597_q!94zibV_!_!4nwmg3)*|nSTVndAk^gjz)3Pikll&?qCxk1XjmW-
z0q5A4=`I$~t#mopk|_2=4-nF~&#N=b%Hr7Pn#%{5a&}}aX>YEo`)X|%-|XxtYim5R
z0zusPS?0{)-jKuMzJYrS8bxBCFh0cJKchk+blu}^=9>EyZ%>{dYvjbisU?UG1tH+`
z4!-T87`AY!MY(!8QkBAQiZAuDY}66{Lvt=(5trsyN~_X+m!Rc&NB8jhE-Muy^@K|l
zJCy$2)No*>T8JYRm2gaHa;9R}!=>WsW0+DtuHQ>m{Mf3-2bEuSB8oT>+x}u1ylv^^
zF+K<tYf3%ZvUP<<#%%OJ(<17eXK7#fS3HzT?|!xyUnr%3Y}?T;_(KePW2`Wr%A@pk
zuKf%J$(A>7letVn+3%Vi%}dkFv?-{8(vt0ED^34i>I4f}QY7r%!5AIgq%ON;4Yim>
z&&S^FeTerRkT+_w3G>Zt^^CL<?wg2d)piQ7h0A<rA@|GN_d`QVKU_UmndAa$y3Et;
zQlO5qzO+Z#h|uJzTpQ({>8}XjdYqWf^t}Xxh#Fyr1@%?4e-D-nLDR_(T>g9%EZYp?
zNKYZ_Pv0lU23cu-wnO}6h9Q1AML-e<&@!F@rP5^gSCjWeNM!X^UhVcW@)vNLer|9G
zGDp-!l5p9akQNIp?}`Chuw>^=%<~6v8g~3apP*Cuae#Kd!nJz{c;N3ET%q73Jx0+H
zF^PD24du4)p~@@|-n{`%>li2I#)H$|9cQnLtxqbg$0T>sHPb^a)}(A!#fB9>g~mLv
zM0A;52HB+t_(Y-UuH0M~dF6OL+qUr@&oSo#kX2^eRnrtF(zUkIRr%p6uay%g$%R9p
zN*RVpg6c67u9-f=@tPp<8J92n$%3XX-<Gg|BI$#w^ufO;C4l#}hT-Rpsa)ey+i=g|
zOZ-5T8NkI5KzQE}mnI<lO)yg$BV&u|!{5fmHr>?8=!(_mcv0n{h7!L5?@nsekpToh
zWs|q1GaQp3N{5%<K2w-G=uDB8Y3$nyGr~~Y#7NM(n<`(#QWr+)9qH4|(X&7uq?*zt
z1vot$l)Sz_tT`6`4XUcaPgjT7_q#)(qGv@35)M6}CCDy)T}Y_U-h_&tK$ref<Mpq$
zF-y*9yxjg7MuDTBp_llvF?4<@LeC)p@S_10Ilf8cl+#Qwh=MmOz8KnCw#~CTeQ5Sq
zbZe`s$2v^*i#EO|{0^#rY`9UC;T1Rz`NPA*ajS3gTNp?Y7N2^rf>;|DRd1S7g5Pqj
z57q`8j62kGdzq4J|A7QbeJ8G^x714SFW3|A^*(SdKb9itA>7G_qMtcUA+-DANugfU
z-|x9J@Sv50{RfaDBs=j^ZtZH2TiAIG9B=N1!et)~v`+*Czm^!kr%W!9frH>m-}WX7
zt*oTobU)_PpfjP)P`C)W056(ncj@_+TcSgt=-&7?fTnTy)y+l_x;FN=M1j*<T7Zrg
zwq1nH1OPU{7^A7HZcye>Uv*f6;V*ZHEj0`p_0zDk$lzss<Z-8#)5~p(hfxaz3Jj+|
z?a{b%RIs?@l7<;Rzx`R>DfO>vxJjf)`j1h8LI(8FJKXz^*#|r|Q7M6nQfEy`N10~A
zEflMog7lJ0+1TjXd$EnnMOg+HK@u;-lj4mS{bCoxnimWhlLwujnQ^5hZE;)6jn@c?
z@gaE`swFz!cuGoR7AgWPEAQ|yCb{xQHMcwmPDS)b@{q<KaUzt?Fh7KC%$HGHf~vyA
zQ)6=HkF%jZ#L>hgN4k(3&^Y}v3+gySCk@KG)AyywZQnu34^_bY#xytn4iV*7N}Rw2
zeD<mwbbU&{ENYx5C?vA`><=SEq}PF^l>6n|6laFyI7F7ZPy8*QlW4tLm4qLN395rg
z&4%(;=8dU}>(IK8q*Q5AjG#5rXx5mIc?rl5mlwB}oyFHP89@*vrQX)C<Hc8?;-#r1
z79Eon-<EZ5$|7qx^AVhF1LoQ~-UsQb+645u2cq?aXx>{!_CT9P+P#RQIkD-!Dl~<H
ze0#W#-|+$h$N~H_q}DYsrsLgVW{}|O**S`oRHUayxcgBfi@)g$98cPuiL*@+)6Nvq
zPpfQBRh-ul>=3UAnxu%H7OBRc;!Hf;RWNb+pY>gD8JP6DI>jk<>gwvgG*!V#89K>g
ze{L&P3^XvZ89nm?=1C{7Fm^wUv(U-4Z;9CkJ;c9oW;k;q_n(2zcX_P%&Qe%<#@4TX
z8&0sH7%1$r5(9;R%0O`&8Y|r&?q`&ohhSl@QD>&Yy}vPv@BNR;*v{pCp6640081s`
zr<ULQ%3hQ9v+CE2uSz5=pcW&<F%B&e6VTGt<}4H1pDE_xzx$BwbV7iSD)jjpAlkI0
zjdYZ~y<s!~ZQ~gMs5MRJ-TI^<s>>!HY4mwq0aD1b0<?MVgSUAtB27FCO&CvD-1!95
zzP|Xk<o#t&s+?_DNiGOTr@QZAquHgw3@A?nh%bo6t)^4$2cD9$vxDc<Ce-5#BU~Tf
zWoOUaVKQ4jujn3h?DdtOXUuW(vt>7KmjKYvC8Il^r8?O$Mt}4R!sFD=gqP4`NNJ<N
z3tT8mZU=H{=$`KEsk^KCwI(MYon0Amc(syJSUUe<P5QZdj62vqQR7{0NH^<~t90|;
zgj=R-Htv}U^}Y5SBNnau4V8ODo%sE7d=1IHGPNcUMnL3kx`@(aEfOZ@9AHxSFkL6l
z%-E6YdrL>}0PWchs=O)Lo?OF9iL`=>4cZ3P-BJgW-Q)xepSVBxhZTQJLrH;RJuAtB
zZX1xZ;#8D1ozHx&+J2K#&OOGR7Yejyf}7A(wdkj+Dvi&{O2W~7QB_j*Z1IKxiBZrh
ztro4ko#tGj+d)%QUS6)_)gitlE$iGOdNC~a#rKR@klecOcE`6ERRyC!arNMo)~HH|
z`uP#ZCebd+qNg`IlCMLTWbv$n(<@ikPoQKgOig@<#|T^S@ecI8V(ea8yg-yHS(0=7
zc8M{rnnbSnyx<60_7*cqvF$5CXn@=<dj9n2%G-wVLU!?@!M8IMoIYIdk~2#<#{igu
z=MZ@2V$*#qF7HfbQ*-&w9CFWR?1bihm8Dgd7U5Et8OuXog#jN=bM@-4c;P5jvDr6b
z$GK24!LEUuxqPA*>!}%4Jj#|oWG;RwIfc1(EYUv<UzH~$0Hf#b>5UD%^FZE+?l(%*
zf0vzD&8|6~)8TJk#7Fp~-;WgI@?_r91^HazGuEncO;cR9%*cw1Lz0<)U!7iZ2r+5U
z-qwL9TT)-kET}&-OFJq7!g}abesXLaLOM1c?*VE8J7)@t$fojL4{WvA4Xo_?%azr|
zybjYg&h|g`Y>?M=QIB>N@^14uZkoC|V?L0cVlhz6Zz?z!OUKK%ZYS*~8&P~oZ+BO5
zRHlnyM%SGc`^_)!{hG#$9N!&XDfu`)7sIp=5c^|2v|{s+pl!E#yxZrwRIBBru{+6`
zyQLWymeqG_l8A>dP8WNd(E43pdX~C0SIHp8XV<7>^r*q}#NbsHm@k@kOZcf_iE#Q_
z%;wOQb+Ntbl{K=NgKy7#h>@PN(h-|m{;^&=r?li&Q#1Y|idVep+^fY9&D<#oQ7Hkl
z!bj`7r;JMRBK`ToiP<Oad5+H4j<<O-pZdQ1^vr=uu@_65Wo26DbNj_MHrmI16Dq%~
zuVoLEo|}-qZv&NI?D?HMCbs8?3^)KP$O~xUcRnp+i0}E1qU4+@Wh3Xu#{-0wcx+xg
z_Vk)~{?Rj9kCSe6)C)vCxh;TS9kaM4VbCvjE@77Mb<?3r!-Y%f*+U5oW*QVj9$nL>
zU0Q}Q|EvlM=x<!h&v@~Ec6P*KEkTK5=h};e^^<wt11}A`OCGQ=Tq&0=^76RxyzIDs
zM^)I3cIJ0cS$3Vx#dyk|`m^hJdA_TT9m+jznR83I%hTgSO`G0Bcb<4`uEpz&Z&voM
zZsr0=)rHiJA|>l%?MTY*p-Z;;H#!~4E_E%+y+~Q6jEP&-@>t^TTz|a&HG5Zr65MTD
z)#luqXLi#C?M*NH1T}<^#$BL+K*ZcNYz3C(6pDH;0tQH?)IVTO8A3WpR1tVT-v3eb
z8T?daoCZ+~x0W3*op+?g8U4=p?E{YY)2F?_lM^Uv3p~@!NjELLF1m~{^pD&<qk(I_
zExY3aD1jP}i?uT*(LZiD8NhK4Bx4dUV$Z8^MyFj8m7*b$TIy9EGPlR6Q2m6aF}o4r
zUsKGlCDnHM#iI9h1tRl+;2LN<-eRj_d`z^YKEilH06_g8L-O3~M55YL?PXsdcI;9=
zCL}NSSgcupnI`=1iU$4ckWd2kxrFImV%|eH_JYOgndAt1dv8oXPXoajuizda0#sN~
z&<pY$dFc^&T%_ERbYOdZBkG<b1ybn4+rI#HrW$XOsjHo9&pIFAuiJ%Y4?R-YRIo7D
zBe?)svn6O@?kg$39W*{Z$3W?|@p^N9-}3N3<+au8YDNpUY9BWA-F?V#?t5b1&Bm`I
ziuva|d{`K~HePDLFSK>=kN)HB?KSdYC}C}L+zYe3JhCa~xi@ruwawG^Q$_0PDr<}V
zx16XfPx?L83N#PWU7d64-a3OX5hH<~z*Qu_Zh6ZNx&kPx$+9tqasreWnZG#Rp{7z8
zwGG`0IdN2^XBV2q$520~C8Ri@6@q6Q6vObryk?0@4+kq@>U19v`xho<57N+*DokM!
z@+PqgP>^4mh967b#VoA~xlDI9o(oDGO#KyP)fmESS@xJ?7sgzsi4^rHY;oN=m=6+B
zk!X%dSpY&xVlQGY@4j=&#P(v*!-lP<OZ&?zgjQ%PbG37XxjoTHQwrg(Rc;X`twB-V
z4kejwaPjo@No!`R=zH|<nM2%gNVU}*GT4gBecT3&ODupDOg(r`7uN!H&#3LY&+^!M
zx%`b#$6iL;{PK{YC2aFoVB0tKySE@#*mM#Qx};j=Ps7BM2c9&1+5gnAa?m_Sc}A@&
z8PMGaGTtEBtead5q>ZF(Z0DJcF~m}QQndkpO5{}R9Psp#&Se<@oLE!x@nJvob3FWa
z?Zo{2cJl+!GkRzBz>+y1Y8!=1QLguzgZ2f|K)fI3voq)=ye}6*XUYX;cWyKwmAa`|
zK)a&2bsO$0S<nPe_X7J2{YzgJ7TAL#a4|R6dUhVv6NGxvKUBg$H8F1;4N+u<p@2!L
zK>xe-7ORhb8Bf{uxGMd2t3IGl`_G&NZD`c>j|hm{dIf$`M!$j8fcY>#Mk@?ZyC1*t
z)QvXu5kFkJR#t4wGF7udxaKDa2AjQ;olxTAgBtpiy2ngO#1|euW}(3pusnla+$vuj
zJI@rk>yMBAeF+xsL1*^-O~PQ8$AOG!6m$`Dbw;6HVhp;UIhK9e2ror03pA8lPC^+w
zw+h7;q<}8i9xP5(vmM8!U%H=@JSg*hy1___(BSnqU;|E|N}CGP5WnTU_*bXsyE=T1
zoBIg6AcnME2A(YV$LalBOS(pfnx_<@%}4mX=MJ+<Gan!V2%M4%9-}14qhnxT>k&k~
zUqLGB?A8(yp7`^92+Gz<w8CgXMS%^@T*pVTTT*qnaw-`Cs@_bE6Mect!WZU0Evm{8
zUm*_*4?nPVuVeJV5eQI{&(4#{lni4*vE^U>g-6Dn-9t)#CvzfNpS$zr*$nz>1OT`K
zhk3B<8_KN!n_LbMy_W}+EN@~<!2sLBM+oc&!t=nIi8E_9KlCxb+;3<Jp7GxX{)&K7
zIR(mQ(du#SN05D(R{0Rgj<V4J%p?sgkPDKYje9bM@6BQUtM&aBz;k^zt3LiqA|E}!
zBo`Gov(9IJ^+RwqZCFjBA-yev2|x^pFWg<-Q1c)TrJH~eR4rTPR%m^xUwphN!7iU_
ze{lU<Xu~0kKE=gjzw88wg1g5cFedrDyc9v(sQL)tudmMv2uLD&0qGqtt5+gFpZkIl
zh!O~<pTFPiTO6m3!NrmlS51H$g4+a`32^lCE9xeBqhIJ&Z$Zri)rWgBeI|VIayBz$
zclJ*D`&b?cxk^M4C5H-Kt#sXa$*q7kNf9k~PJWc?Jksi<6dpbT3f8y6A8vV!5D%RC
z_N3J>FYX^)3{A3k^v*42!Cc;Z8r){^UQ`xc0ENW>-Tp2^?}1<T2dGN>`4|794OnV{
z{S{0%b?jkR#|0{!Xt>pu`@Ey=jjnO&Z7YeLfZJTDO*SA{nB);GbH2H)0G%Xr8fNkz
zDG&VARb+yVlQW;L{AGhjIl=BMI8K4%AOd9y&cqm54Z^Ah$}z`bQBKncgDdau4D5y9
z2qxAuT0mO5qEf)Q{1gvUsNAIPBFqVrRQqq4y@U>A&~@!{fHU-w3P>mSR<XyoJe-UU
z7S{|qAKk1`H~IOwaLp!9YCzKc8!^&cO1@QPewOubJQ<Z2xTlYm(qVweJOvyh{`u6{
zEs=iQQ`pIk<R{qRCDW3?%{2-Q<?l8<+Gm`PRP8?Qat}%+Rs5Tgdg>(A3FhdJ_1DgT
zF)*ux+ZJ~g`Gw?c!NdsJ6~0l=)G|L6z?4+W{s7V?OO9r!L?%n(T99;hIXD=5rDX)p
zft_f{J^(W{#Qu9SxDa0<k#L>q4UgODpoy+SjIMKyhW)29@_9_gKNkS|X%m7IzHpPj
z2Ue(u`WmhU>UCRHo%^Rhk@gvfRhbvg?i&9?y~Hx3ZSriVF7QO2flcpSTu*T!yi7NC
zaMS9JeoW5oDsI}kfdFT^#X{(^O5#-T`#quN@ktX2mH&KQfaCt}>xx3E^#`Os05D{k
z6&AU2c3%qN((Fb=kf5H-!I0G+#gnp9MF-Kk!81i5vqCV9RgvH-bFR6)U4P2H>{9T?
zs;_rt@L>RAPVr+G0uy!G4p2Q~b5{ec7Wr}0nPk^ByZT25!^Z|1PZ-ZG&Hl_3+RHL}
zSJmq@3|doqpKpYdOh>E;k>sd}%_giGeO;E{Si*>TuX(jJDR5MZ71?I++r7-IDi^TA
ztv<NBI<?#H`{tV>z3PqmrEH1ogDKyOLN4lmS$Y<-A?1i`LEin`mj~(ZCy*>~zSFGN
z9bpG$!?wAQL0++%j2k&W7;aZy?%xqG#Jv`r+H`@#JGrDu@u`+qCGFx|g!WQ}V3DEb
zhB!couiEUzSwSlehXC{;46+DEg}M{xxI9Z7THoHip=+F*sUm7ygXiT_x7NAL73-zY
zus(PY_>a-N`qJ(~8XlWKVnEg3Oq;s}r{)^G-}YWDGUS<=DqbB>oO-|Rm_TwaVQsCX
z2~%l!YH4*o?O_gIN)~;j=Q-<%>mx5$wkL7%ZHk>HGY(vzUq;WWe|m;q?YWy|D+$M<
zhxQ%s<bx2sp|@RhcEhag$BQ2dA%VB-7|Iw+-cqKN0dP;!)9VMrsxI}0)QBDblEv_n
z+1Q3uGR0<NT4uL*WpP3_PsKYAW-<BECnuq(^?M8AZqS;y6~CRZlSyGpxtf%9Va@Ky
z1+D%s`(zArLbkSdO==Ztjv2%)1PVK8&OhOL@!o)<(Sj|$jxkBr;=yriOa`&|8%>wG
zhnI**B!@D7H1O*h4xJ+nh2z~l2nhvJrZCX%Z?q;8{-t_=&Wq~9;L%Ud@)bxhcVXy>
z1PszD^&;MTR{(09b@Sa71FhXH>b{Q^riBzwo7m=!t1X;u2`RDS=wfsBpq3mO&(#fW
zcS|??p0Hzf=**k(`Iti|yf%KUKUTWXJf{Q(E|xw<rZ84HB)T+M&)7M4jnC<8%i3nu
zruX7L`Nu=tLu-4<yDDop8b4l)OTSke&plz*tS_FMvDWy0^IOldnAdXXQs!-P?>9H{
zEVGw7-`>crns|2kO#@WL>euJlzb!X>7;h72#6KG1&VSJF4_V{ujb+EBC^T&^k%|P=
z5Vy}my^=T663jH&V(@H<e^D}}DMH~>Ie=*$t~^gm2u7GUNoYwmsMKFIn_!ZlcUvgb
z4ytG0E58%CC^F1E-WxYoMN|#zjy?oEZ7XkS4j#Y&{5;j+1>xFB&{#U!wS_bW+u~PW
zKt*+<ks!ZEg65Tw*fV4hB-*h1Nl5)}f6Gxm256TUEF9xOa8%)k@4So+h%f~(-d5~^
zn3553|LQpp0~1&85NQ@bIcUN0-Tfq}CX0?<oF4faAOM4R1+N0zj;)+u^a2g_gI8?7
zj_<Zol>i{OKC|P_f*@iWu4S#<E{q=TyvCJ?;(evjx=@=Jls4FB)#;WEwCVuaPI{DD
z##B8^V%!K7PpC9uoi11Kh3!O7%REO64J(*w+q!6b#k{|~tfRnS7_}63c5({<3x)Jf
z=gL6hwy3?}c+t5_nGyp50C4SkhBA<dy3>QxhfuhPCECf(><-nK!rP;)SAmc7!$3`d
znCgcnoW(;rUnvnw0KD?Iek)5t_#eWGbHV_Fgi_$<j<y%vaz%b^=x`-n_|nsc@(b}v
zGziKz8)aC3#WA?Edy7YdzaejEO)<-KL!YV3?=iR-8-Orm&xlmv!RHG?F`@JJnJxmD
zlbw`^<U*Q!)RoF~B~x=f<e7D-isCQA9aF+l=mcl;qN{Blt_2CQ4V5hHZ~WN!X^Rzm
zi7vf6zyBU}Xvf`a4$yx?$azWon2e(s;eFb=B_HJVc;6Uk9kE+r=d5=-@JT<!$NcQU
zpC>XEGnScu+bspOGLJ~0%X)Ro4q!f1kVmzafm`*j00z*k{|;aPy${uZldjS3EFro$
zf$-@@(YuvVfksX}GML9Dqe|<RbQ<FK`*j3}16sc>-i(Ym;e6p9itxxa(d3Cmx$B;L
zlptuUXjDJ>2D4AG@?HG5D$|)pMCbY1BdpI${)A!wK^SE*!+X&ve}9V%%j7RD05O4f
zXd7?2Cv4RT;4Egnf~pz&UML^0%q~2d2{#3zhf7xJ!cW4%HJmcV{W7S5_%XwHy=N5<
zB9HJNraKUbty<TIrcDk@I;TcM3QDzrrMP%G9L6E?%#NCUh_%>S4v6)X{)XMcCRZkb
zs9<No%XVa*A=`*l&h6L=#NJXdQ_*j~-H4X-4l$?!*nnM7v?wI8Z~YuOzofl)=%_}|
zcPbAFl0&}vr*{mW#eVje#Q`nn_}N{S1h97i+#FE7y3(b+Azs@-$!PB1n)2Q}zTZ6X
z4;n(*7+$@=vCqWNmGp<bI{!6Q#e}d|zn~DGyG20SJWqUtnzZpl#qd*fgQXY*Q$zu|
zR{|QuKAU0SwR{!ABNd7iT^${IAu*9(6hOE&*tw9zd+j(5`|}Az<opK(?hzO)?CeCC
zBob$lj9swDj8NzXFp`4ZWk(tIivm&(&;pp`8$Ztzf(dBA9!na$G<6HbiBMB(yS%kK
z&+kMe+QKCmNZ|!(KG}3BK*IV4#dihAgaq!ow72-_n!joN;>9*VN1QYaXgd<Ji9wiT
z^aSofXl|_i2|Tb`wh}9Iki7o&+G^}@dk+2+1*cpgbzDqQ(_EdhJMt^C@JO;39#DW?
zUWA)EKcL7#m`4;6v<)KJuo@au=;rtOms}5{z$p_<5~!)jB>BUN!Y?46guq_&f#P=a
z!|3bkqj0K4&I&q1tOYsX7D668=U0Ta7m%I+fP?;5L3PB>1Z&;5KaS7r-VARkY`kKP
z1gL0lJqNhCQ@^9o5KbI$<eNG(gt?*e9|cJ!OW8+tDAqhhMn_68DiS2Fal5)hIiQv@
zSdKY=7)qpw@T8XrBR-{|rO2|$tnB$~$0U-XX!D~&S{><UEVgZTKZqN6qzDGT5nA6x
zq%!1>b+iwUa3Y(bn5T=-Aehf-$lykXpY6mkk`-5Goe`P~Nj~9lfLN6Vye(>e_?v~!
z@ScGQ2O?oyqEc$}$9~f9k%`S9m$&YLC8J`OKxhH!G1J|~>n?p7;jguM>b5WxV298q
zEd<HtTeIEIk9@R%$qsg_DT3l7$DXjDLlYJd;&Ta{fK}&F4M3U-gxNxaH?&R(j<cV2
z5QHN!f?na6R^^I@I<MDqy<zmdgCbH}k|D~ZAUDA2S0;0i@cU1(nYiY$#+W|t=VX50
zi3lg^H4G$a0y@Z(djuUL4^m7xH(-7MG{-%QZ&#&1{QR2<jb$Dpo)8JQa}D|qX8{Ln
zG_@8McscN}>?EyZewO!?Ie*r@e2JmtXSU@;z|T<B?d<{n7(d!z`28Id+kchE&@;Sd
zhXea^`H3*78swowuJ3g$B-3D{RzOIz)YkJ<iEC&sp4xMfnIFJkG~>#{kA&XExC-U+
z>=3lF;}W@{PMO<~LdAX#=d?YU-V?hyPPL!&Wz#MJXu_{iM;6~GjViu!n{%NlYa?e$
z55Gi5U<f+F2Ds(rp8*??7;;96pW;+d_JV+6Wl_19kraYn+r3W>E%$$5-_fmy!EK@x
z8=ALQ4!vCl(9uXQ!tkThP*e)9Oi3tuFyFvHuoi=)Dtv8v3=X`+s6uH9%e)g->xEC<
zaX<hpz?b6QciEZI%K6ZA!zAW)>S(4UML)vKVu1TC%ncz1O0<<*4uPkC4e^D=?L#A7
z$HcZF$J4qOvK+yKJK!}iftfXq#7MWGLiLqBTOJ=?s9%RI;MHb=-!LYTWz@hH1>cy8
zoN26Z8|6?uxF#Vd5mBi&zj2=5ri7zMHp_dM4L)icE--U4&Ne%GOxEK1>Uq=a{;!Bi
zEbVBBR1(%9-_dY%$j;Z*6|%I@5#qv+8WD_ySqp7<yyT19$Bsg6^fWPley%DcN|6sw
zFc$f#nrItAc?CuD^sj~i!5QE|BHEu^z3!dje_e*KpSS+`tjY|k#t~PCK{7%4Iwsny
zN<mT?(KpDc0Z<Y8t7M=n9TCiLTzYTe*VX&LT&C);cs`G{zOTGg?NC_%4v5^$0z?!u
zsp<x;)j<pno|ZcvGT_cq%Lwsg`d?r0-j8cJTiQeW+r(=eaoR*Jz<3^YYh*tMYeuCD
z&e57-ajVp&%{+ije<^bh|Nh3ktg2DMmI~CXB9Vgr^wm|PCIBCP3Y_?O$nJg%@cvKy
z_GN_SS60Jm4<*3@XPkTwAyFhaqua}~%7U=`i890>khF6(#XeK?0-4|5+8utDsOI9v
zjyQhFtWj0zFR!!kMEeUxvHYe;xgi3Qk{x3;m^nRIaQ2=<I|x5)m#8AS(7|U44R<o7
z6azk6^H<v5<!ook4s7|1nk01M117tW&Agl`d9W&db@LumvT*q&J#w_~P?*h54L6(7
zES@iOZksv{js>b9I!}b+Ezt!Ejzd*O5MKiIL)iK@q>PZR6Ebp&QV2XFtDE<!JY-YK
z5e%C}6ihxbk*$v;d@jQEnsexUhEm4`6i2bUhPtD*bz=rk?tXLX?y!jm+Vl9(0Q`G*
zCiNJWt=bb6Sau7bm%BG<Mo6S8f#xb>)Q;cJ%0r(7O1Qs_2OEuf{?a(f-#j{z5y}y6
zkZbXC+tS=Zq2_m8^zwX@K&rQPu1?LJIFFeJQrk<XPozPIP>&oMpfzYO?<TkDes*|l
zly3hz&|}oH-<w07&3Md=z_Z4F$AHE06J%eoyr|TaTBe}C2U`VSI#d4~$fP$6SkHXJ
z@2R~<!m#G=>`2%Mp)P3#mIK#<<{x2_bKbM#T0#c310fI~H92ntIA@@Jb)AfjQiDC6
zL|VK@s=bY`g<5?aAR<v{>dch(C_X+Hj<qp>P3<~Eg0vfP%}@%Zn8{8uLN8*2yciC{
z_Z_PevTrs^xLqdqM9bV=CoIh^b^w7O3H04Go-31SyjdAl6HjCxTAy3r%t!%N9`F1M
z!t6ZIc)G1cB7sDFv1f@q(;h#NHvJHLfLpi06Y-rIJZ;~fTm54EL3By4s16amsrH!b
zR6a+*&8|Lvt^n)Z^$d`_l+c8sk7M74qN8gx8H9onHk*7GQcIR)<;mO;(jVJLEM<jX
zw737|eG)rS93Jk1<&S#31XIYPtbrwrW1*ese_BB{&#zRb;p{x5;kU$U8s4Ru!`H->
zaCvEooimF*@X1M21A=4(>5U^$Kx+52m%FcgPLh<iuuAkUTQ~VsE!JItcCjMWrDsp1
zpiOj~2*1I771vSNtx{5Y%sf--*MC>10+oiNt#Wt|L03zY1BGHS05lRhF+TPLt%)G)
zSyQzLN3;t_xRAxBnBQwQ@qY(d%kUxcOoF!#L0De=<_ti!XyPlOQ}Tc*8E9dOkqNs9
zFJtSCu=3b{l0aixOv_ado^j%VroG#{rg}2u#`Vyg%v+~`@(0nG{Fd1Q;?)CZp?q*_
zxg6MdoTt=Rc~tXoDnimixR(BbBRRiuneByD@N5kT@b~RXto^$Ki?7Op5+Z5PRuYCH
zX7qLwE~ti+(gs#R3C(&g4E7v4o=-U)!Zlx5rd1}4Jp>UnsLOBO2jWfGv(pHJu(02z
zJzeGXnh9Ym6aK03#v#m|DU4b=kX?gFVW0>U-{R<S3T_n617ZnB)<$T?ZG+5^a5k+1
z5dG*=GF-Etgb6lL3bRkXtoJ0yV}(KFg*U+qWF7@4hE;{yqLe-gpJl&=!oeDd#m>hK
zm3@v8Zkl7d5jUx#qe)zl8VKjZE)2}<It7W#wRf2SSk{_vOW5Ey9v_iF?<<F7YHY<<
zZ>!=Uf<ZLJMp?GFu$G5uG^EaseyvCNlZ$*Gq6ijjnf)5X(F~lnigQ32-Z9qp4lwV8
zK_QDLHH_5dKnB5hOv%iDER&x1io_Xz2Nd-CU@^E~!eDw(7&}(eXbYC_f`j)S1*G2g
zFa0HaM`&T7Voi<PX)^c=WnEYlE4lb-^fnIAM)F&PuKUizSREesE4it%I5@d1^Ux{K
zsUA17m4wI`VmEhN*>8HY(d^eSSlV<whDk<^y{Oank6WlJpgCy068=#JnFfGxQFVZx
zRRZ+TnD;P%YdVrxS&Py!pcReuL=X0zah{3<U5Hdy9%(qFTS%>YR4fJu%3C{&eir_f
zJK}uI(`|R$LZOE0KD1@rKmp(jZsp30V?-@Z+mlvK71-);$jPqH+W!>7kD|MVQ)%SR
ztlaqt8UIW7AdUovi$%w9Dsj@2fJrMn-vYDL%?cf2A>;UY9zd}XPu(biRez;SqP^vF
ze)j_|!2qzxoR9P^zIM5uu6BT-;<K;bRaQ{`B&g)bjdO?rQA}*$HcB@S5NauMJcty<
z0LLtik+y@%edUw790yuLsR=hoYIuqJWA(Bb!XrN(B)#|6=n5a^z`kqZpGr4}#2~?q
z>{5mRPK2)6NmPn~-<*oiyO|PCnGJe=U)*6N<d+B}E^ya+<gZi4mIR<)@{r6o0+G<t
z>GJLRt+N*^13BG_?OPC?8H=x``JyTL%p>g4vcoe}Qt=ZX1_%xxsx_-$UZ^(9tB}xV
zRyXtk_>aJp-UbEG-vSnxlcduP{hgs!MSaa%3$l^J%=E->1&Q-c4!e6z&23-zKE%zl
z0^^wA44Ey4KF^s-F;U=7qj8N!*9F9O{hks8<&$=~1wawYtOkN0mH@Dwl~%74go<7x
zWXwrdUk7yX9w$YePed2MNuSg${Ic0ow)=EO=8O9y_et4LlCqc4_OVD_eURtF`h1&<
zWN?d-!r%mhvhfxEqn3dJ)k2cSgI(;8x{Y5kJ-chPk4`zdlwC3;FUyzfE;+~Cx}ie^
z5FHynz<+~L%W+G5a}E6tv%*7VCilim#$%632bfZm;-!M9NGYzG9YNb^8|DFB_m#Vx
zUqZww?GIUgmkRO%^b}cr7U96UA{E5(EQ&otKhNluZ}R}EF^Z@<!N{GY)t+CIKp@W5
z#f|+Vao}Kd->Ud5d@F{s_ZMRq(Qefw9)r#sU;y=7%c+B@0jZWOo-fw12Q_I`fA*<B
zY3M5^dBtX_cY7@+Ia+FHXOR05sW+J9x)YaF%SO$_R-=%_SuLe8A$do>1FBWTg`ny@
z4GIKMiu5=znu8Z7m^3dcuHPo)Ux_Bf?bmHM_H*nCrY0o70A0>eNX02TM-~Dr*W^Y9
z`_>YqFgHWf)b(w;*LcOAWIP^EmX%XA0n|miC2c#KR`A)S@7Wj*PF?*0oucBIeI$~u
zJy-YH@y!tyknoQibu)X5JmxV-7QFy!(pW|qV#-j}WJ4a^zY;0}7YY%;rN~8;#s!eu
zriSwCh#%oCzxTmO%8!~<K{C>KYmc&9!&!!=_RZhluK)+P;O!48*VJc%)I(E0;-vy-
zpS_{Xh<(lb=en1um9dDTs3;<oTCWfjL<6V5YjAi+ZaA_7f{%Ha>?ts9k#4JQnM-z2
zMy+cw^?Eh8*X1c6YYxbTOX8x5FT{ibB(R0*bY_<fgAQ+%`=fB_WGs?GC)Y8m=Pa_`
z6~s}M;bWFpmClscdZz_xMxbHbVbeL2ZWW2<l9G~j<Mzzx5#?}6bQ+3_#{F{5g>@<X
zZg8~7k*5zys|_J|sRiB5Nr$#ipNxp9?i9nq+!<mHL`OIbMeC)wjUYP~#{6`<pjjk%
zoQ;`^4A-LgQ)x{Xi)(p9De~0*bDD2*Ez`S;Z2PCe@xa1>;kk$mh=R<%2DHk}S73Ut
zEqP#}_MTz@CNPKWBMPQgU}Nsh(&BDgNk)lqqBgjVz4dWVnBa5>!%$FA*z!1mn#rZ?
z1WeMPy6e+D(Hc6Zwsg7@he^t-(tF7V@3ffUTAWUl-&p?s?!jYV638t%fua@>@kLFe
z8~91h%9lwd(@ND)Z*{}m+_Br`kjyG@m(=R+v?LwpwWor^ABuM^n9@rq`MD@(1gD#=
z*+)S2gcJmNfJt5hD-*O@4&4LyjE+az1T65YXTHAKeg6P&rhh@+1JDp^-%qQt?GYjF
zXwJu0eh61M^mY&YK9(9Dvg12x#?j8*3X%a}OjX>8qdVSd+UNu_2l8D5VEhp0ITS_h
zp>C$v1?ol3#el*=_vv>9uSoq&Z-vSKG`|Bx+z>5hw&NBd-%cxVF=t5!YHb%q;0AEp
zWSvO+{#5Dm*h4I_`I(t@rB0Kf)h8a(VMxP#vG?=H8H9|~u>65|7>izfV!c$o*Y80@
zi7s8^F?8&69_E2*2hcDz=;W#ZMW!Akq*bt1LkgQkMx)9~%h_7@(bRFIm$!$mnSYg@
z_l(D)wQljX%bFL3%|0-q@h;Z=#rBtK@Bh4K6c$nMRM*t(1z`nixko2uZ-l(?pLBTm
z{TZ~u$<-4zaF0aHs%N`X8~DStxFuf@+{8-~gf)s0u+r4z)>Tt8p1KAZH1sg{e(lwe
z|MtiZDgjtqVhF~g3XIaVUZYG1TG&&bqkjpf`eW!>qff#Z^SVebp(v_VLbVnwYYORn
zAj^V0B26LToGA2?APaB|<&N4)u6(eQq)$r6)Js`%%fAN#dsKfi{@u4fo7#e$9|rPG
zG-ns~ay04*qnR0ZUV`;Z3>~=$ZkLq>#j+lN=6BH4&2CFMJ`35r@(;|zeF_B(;|ly0
zh$Df!L1ykW0m`lkFX}~s6|x9v%;%Hdr;uXVYhu&(4~~5rmb%&I=@cS<1pJ{2nG;ZN
z|Dm7{d!`sfsUU*@AMDq_m6LdFKMtumt$!6Lcv%BFwbt#bgFxnyaguScRjMOAwPb#S
zJg$!?<B(x~mSaBjLg6fkt-z3(CpR<#rja?P`lR=2xO3X2izC$mb~2nqvIGcHn8Qxt
zBHPXZrR5YTW9Bc+3Zo*@9fAlAGQsf_^&slToqYQU<zH;#1hK<&Fv=&j583*lq7h{-
zge(#lN>}XA$>}oIF4wPB%c2Z9PEDW><}u<>*57SOvOkI>`&f`<p9Dd&5BrhK{O#D0
z`)5PDeEBZ&=l1LEg4=@Mc}!LFenMHS9bjGNYH6p)2kl;?fxC&OcotWQEU5xi=f{na
z`vrsKMX#R52kFFolKeHFM~9nF1kTW59;d7?$<BZeAR&qO-f)8)V)eTLMk-(|E_UbE
zt5<HufL7Tv=-H1|P{M1u57R~E+$y>D5mHuU%NNfZHHj_-WtalF4iI2oynR2A>cW#F
zu%XLSNFVQ~vWZi?dhsJn5xzUaVMb1!(h`2e+9~%zin7fVSclu*>ySpx7;dg;#pjkT
zJJ7S9xi(zY$nb;kc4V+^rN{9zdKM%8v5%6oLO9`#sV1_TMHB=0D;tQGdj)+DM>rp|
z`xP`Mc9Q@E&lurbU~)v6##JZt=R@{Wus?|<wtH{KPczW_f7guAB3b;7sygN`eL9Cr
zM;|HdHsBX4`oReLp~j$p@*JekIz8PI*5`EXDxB8>tkL^)U>+9T161O7jGq-Bfv4V$
zLqm8wa}Di4C7=*ZUWUJ@aJA{;Es+r#aC*o<dywB;nJbS?>G#c<knmqz02YtSv=~eb
z40TTY1UrEqZcT3F+<5jQ@CMI?9mhV;xa*Musx&=2y8!0Q3T1VZn-)Tu^c&sU%MMN5
z>d{J=4c~?sUG}TpaAJ{J7Y(>{0<C2l^jzfVaMLVQ7C1C)2sJR_xOl+DcI$*b(cH%@
zkVz>6#FQ5_6UYo<wuR(7Z8Y!#jfU@phELG^umo|SKK5V_goE6Rma1aJr}j3_h4gB!
z%sGI%oHey}k!{@S`Q0r|(E|0JmmzqLA%=0&MsPA;qkRBdo~1O3Q$HNWNA`vtSJNro
zuXhOdcwe*k+sTwY2aXbx>toNi0Lrl0lg?eAT@2GhdmZGMzQD+kXDcf!)~0d>q_j_c
zq@t#WNFb@B-YF0BY>_aE$Y_`v^`W;+#23|#fLG-LgQ|oSDRdt1QfI*VVWx~*=SboA
z1$Ryi`E_={e3rGb;2Rv~I873Lck)9Ah(r~@Xt^a*&(ab!M4*bnkGV%V`?^>w>{KNt
z+91xz+^Z202vE9csr7ADWtVH{857-Mz$+czA8n)l9UZP0v5Bdv?@SvaRWJga!5q|7
zoWZNH^EzC*g$)OvKbqfZ|8q;yG`ID_v3&<J2HT%?Y(P(e{#`b7L<ibVGr@`^+Gs2k
zMUtaECQOrP6VBILZq^W1;>I@a`^&9j=ZW8GCD?+&J~i&k8@u|p=l4$nb~1KY`B7x2
zJJ78-XPmUB$V6S@tz$SBUc#q}q6g_wW8H)k3}UK%%}z(2jFBx&>-CiHI$g$0Vy;E^
z*(SLe{sgNC-v}fWNng4(Daj#9)T^1|+LXZypVl0<%_b|=kK99ysO9xb?+4tXJ1M0%
z_NrjPn3;1iP{9+Vk8oohzan|`*>p}>??g-T-E=8+gr3DFmSD_c?WG)F46k9Ri@n-M
zNz{8M_JtQ}EX?g;B^28@v3(pvpOz~?H*3w^5jxF(N(TSqtH6uc`rY#T-J*2U;;)WA
z$YLOBsp4$W(d!spKjQHQQ$31mO|X{W-Ytl7^*eIqK>Yt9h<W~6maQM6Z%w$GpDSD%
z>HQKl9$LmncIO}Kf@AyCLWq@rY{6R5udrjwIK)pY{#*HU>kez8u~|<?C8U16i~sip
zeqIXu7J@dZFSnH$|Bq**s)^sGHfGus8vAPvaOI?W!qa<opP4?#JEyK368oHAuJ`cn
z?`NoH=W%OMk14+%ty_>FGQ+`{BJl_Mz<v&nz-m{ejNgG-3AS-cQt*ZCOPl`U=QUOr
z@xQOrPkz!a{l$TT`To1@xpp-()ir;jg~V#O|HA#E`~D*ty7hLL1#o=v72Tffiqe%{
zuh%o;-m3grksN5iZBYHX3Sn3LkAIkrar9<xX<4yX<HMx1?mcU%kTQ+c;!-@yOs||h
z)I9vOw&3kRZ?dP>w2J1Q)4oW`^XFn`kegc?rcm1SzBs0pY5tc~@vmPXrH%A?bm;3N
zmUOP%K)p$L$+ohMQ`Lm?HrqJsU3W2&F-H39@2WnQS%XLcdI0)^Lpg_>-7?ec8GqT+
z?~g=RzeHmmUJy%&{r-oM{`J6jB4HQa8K4Rzv`qi?8Gjyw@Kp~Dl-oq*9R9q(|NY4j
zV*skPn<DA-e?H*<^=*hK7(ma9qip||-Q9`APTvXl|MYuZN%;?7TTic#Iqf^}=TkFC
zgBW<;EwKFAOSEY6!l##&?Enh->zTLiJCT(5-jqP=ZOvWmzR}7*(cIuLHsOq$xBEc%
zCm#RnPi5qc@@c643@=fko9HfV$gE#2tDe53$y9QMnku-TGYR|WuKwp&wD(Yov3K-p
zJn5Z(HXhLyFzFUp%-n$t4_9&HcLkS9MjFC)$#1n)PE)U*|E~|a1;`2hYjf^l8ek|f
zn8!H%zyDgz$3-LBi1D}L=AY$b4sph5UTS)<>wiAv-|rQ72eSU)n&8C!|LgjH|GyAV
z^frZ9rGG6o0A0<_dOWA7T)N&SLTD+%(F6<Zh+`O2bV4z5V|rYKn^f!{_yhRFPO9LA
znWSrffAVjuj8rh-@6ddj<#_y^W-#uL$`&&PT-w6O{%6tQKYt5}Q7ze>4^Ly}45EF^
z<@$+oeqFGZcuI)B+gCuYU)()^&Qi3FBlKYWk|(@>#SbL^$I`Gf;i5b4&NO616w|f7
z(H;3m!b%DdzqrZ*I*I~8w{QHeR?cqWaPpBez9Mu(2_}eBC$WtcY7xzsUUgs?urm4o
z*}#C%P1GAyHWO+XXtz%z6(nleMrHWxrf~ek<t`e|Zr<?R#sBlUv5UkySGiC8pW79*
zDOkaXbe3+m{$(G(m;CSlhuw>s274Yp{cA(~Z7aVw8M6-Tp=4(<_CJ-z|ButhL?zLA
z?>x(iUp529byA2Jo={}(HxjL{o4+PNDDM;Qf;P9RIglgG!MLBiwUA?QRlf1}ePAB1
zQT)DBl4Cr*WOx1&Dvjn&^qELaG@qYm+41K>69{}iTaje)A9LCIwiq*#rBt+nr!fEh
zxuhn{uu$9i6}K`bf-(R3hdBYWenx9--a(Imc0)gqk%L$uD7!bG_B^fGFnG_-na@z5
z`JYSn`-8sjTwu?7X1`sKL}I-!`FoU)`LN=`w5kP-l);#-2LE4bLm?$TT{%<Tg(v6b
zPyY*+{_6@jQ`ox{!_L-frYeke4D84Ln2#@2qP_-IQNV?tY4hK&N0PHSGu=vht0(;H
zvwpwZ-#3a)d_uDSuuf}H!Y{2$>|t{GtquBuX{H_|HXq#5CP7M$TT3c&!ANT6Y|JI0
zCeHeax;?1{xqr3Ft5K5rWA?bf&*KFYF(W?{OPF;w7EOKM0MO!^ftu*gwX4a73{>bt
z%!I*{((*tbbK8>I-_d|MFSr6usis@McFMnQTt;EI?otu#_`3r)*@DVX7Cb!tyHAX*
zg3fT=p`VcO{}{!ded(7fYT{UreyV<Q{pZh=A7f6?TiSg8WMMlaF#oPOFjGbrOsah*
zk>@{u{oikCA60$7eWvX4Y-$QAcrvJr<NLHm<V79A`A7m<VQrq))8QGUmVYijb1TM7
zvEnVK;n0V0L9ZH%2V5s^{jZ3RU6DxY&OftO>ns1nsE9NTWFD^ggHFLUkd(W0Kqrr{
z$&c^9i^Fb@<E~t5J-7B%d=+W~16`nMj#AdbM!`O95N61>8+tkG5x}S7NlXpfhET%z
zegb&GySqX6^`K+RfJ<K^^iumHZE9a4(c6XZY0x(6A=#%lJoI^N89HTet*t&pfG|Oy
zK$qT#Y0~#G4!hhSEj{~NoR{+6u10_L%*rmz1M-h{SB}07sPJp*>)W7O;PrBs^vmB6
zmvWMKP*LD?dv`a8QQAPIyb#KhI>5;*A1L1!>EkN^GJ6j^5q^yI5J))%AK*J?D+1(0
zFxbbORGp@$S0<8Y?i{%%Q!)%=5yLy$+ut&J!))MQs9pCJ+d#6m=r6XG^vy%?973&p
z5FTf&zdC3j+-9)}JfD)8ERb60hC%e%P?#(1caY=GYF;XF92YF46W{&S#(L;wMU1zb
zTL}e70{yd_$=cE?^zjL*#krFz78Q$*NX}<2xAzO-ec;S@e$Hy*h?t4j8=D!Z&@0Ml
ztsPozOlhhs6S=ki5};!qFt^njiUYPoS0DFUKd;_f2wI+HGYfl;NHyP6B(7czr5mn1
zDYw|E_Kls~#CSoT!)+o`{hnM$O@bEJ{9@h1DFNC@eb9nfjRtty05pDGK>i^546km1
z<>=LYOS8F3{fa~X2uNsU>x{k}^jftkgApY&(5c{c&OcT^6hU(6$kDIB8@!~iuWue;
z;4vcrB)^g9FJCD{qk;+M%y}%tGUo6lBDKaN9gE_5R?ADv^Yh+|haOIjKU;fUcx$xM
zWk#n>E-rAzv;ECw&?XODy{6s$tv9t?t+6sG>D7X2S`$p`kSFSf2@$n3?XqEFeY%>=
zajVmIVomX)eZaCehbelPrJ}2LhqX{SSe04^Uv&18X~yRVb-cAXd-}(lnl^>6>m3_<
z^L=OE-bb#-Y&b?AT5fC%>8(6{J&V0;ods11G$;j_Ss|)8{L=I5->xhPK)YE4G}{Nx
zvmB3WI8Pep13@BnajiN~SOm$S*6|9dFsfZsKf;CTxKCSefGiQJn8naX(_hWpLs=aS
z6O9k+f@+^Uo_1H~o&F07uz4I_Kkn-4D)SbiPk{+41h0c@#2}SL@3oObf)1Z$L|`PM
z&|FO`8;P_XFdkjQaxl5o(dX6|)I6X&cO^6J!E<-!tjLGG+NG61I~ZJgsnwv7V!P!$
zj?&dQ#{{0sdOiIjTG%la_M6RtrnhManvcmx4i~oJw?#|c52a#v2Je@$u@Aexhy6Sb
z$^Y7xf0Gh{-k{^DP_=_+U^3&281LtTf(F+=lDID1-fRM5z~b?4pY-_HSO70pp0Q7$
z<AL(>``0k`6Kx$mB2nBR%q$gw)|?~DchD><t7kS(y?;fXd<_5;FL*WD-gs0qQQ<k(
zU?g(!k`~VS=a7$-lOfZBbe@{GzICNsn(&p&x~k)_t}uBxA8OOV$DQ~jKbJp7xEcPU
z&_KxU&tP=wFUBc?G>G!WG>bF2!z<d+p+YV08T7X@6F<TX(FD~E#`Zi+bg0t#786--
zK1=MB9nKFcw=*dB+`v?qkoNn+tDO3@IjF$EPkt6gr=%7r71*k9$hOV=^Dy=PD(H9k
z#th6wPl`_$TCJ<9=92*3f9jvpH&fOCydbYud27IUeI4QNL87{B*y4sXM6l9$`pe=c
zGW)II4328EdLRskSx6wZ)P`f_sj3QRtZ}}kd7e>v??nv_jY4=UCEICWI021rzWD=i
zY)5Scg>pM}UWj(*PR@)R#Hpe}=|$I=QkJiWa6o!FlT`iwkhe8b8T_<p=sua!S>dr%
zJoAd8q(S65=ca3RpWE9#(m#YsUcmqZEvWdleF0c*a8DXHDCohwnG}`BW^vAs@UsIV
zT)W*w!NV;=`KWrPjYgYTVnmyz<ZzEui2+WaBB=AC2)OGCh4LfN#(_Yku)ClHnmBKF
zegOgZStoUHdp1aLynixh?f)U~EyJSh+O}aqP(lR+L{Jn(I+YTT5<!WfyAh>Bq$GzB
zQ6!{uXa*R%yF>v&x@QO#=~7Y{nR(Y>UH5hSe9!j${`}#F;GCSRj&;Po?+3bi!u$dn
zG*(`np*j$ba}P4=ul`EY{4EeCaa{d&GAN*;X#oei`S?2UI=aGq03^^>K}jZj;?l0n
zN+EVh85)e*!4>pYqJRx)gzJiZmqQO14JBq|S(17I^m~|1k|)#Xb_*_zZ*^J~iqpcv
z@sS1ZgU-0-;*77H{4PDDhSPwkLC=Wc$WTs28*rmE>IA*DAX9#?CyLYNfx?Y6X~D5Y
z)w}c$LCvQe;6C2aXI5?E6mP00AHQ6>!p}nwn%&r=YjrG2x0c_D;^z@n$j>nV#IxV0
zv;AZyW!gG+BUUk8!tcTcno6Rrr%e|;P_K*fS>OP_Gp9uCxLVrb5hU2e5x)-#fr37L
zp9AO^CBC(i-4?Y6oQ-wY#fOnR3!jxGp(h0d1g_Hz&!~@6x#STjncetwL~WIPNA$E(
z<~!;&!*_I>xaY#twJnFOu&rkFUXb_h<)lR?oeK~@gHU`i&=%UR#TU;p2UpC4^wyEP
zMLGl&<x#+wZ%zVfWG_!aZ;cj3KW(*-Afqq`61%!GGG51)LD_(FGFbI7!6pMP9$wp_
zTz4~euelf}nI=Q<8p(yRGY#C_AVaUhD69IKdqjJ&>ob>kC!n?&eOv=@HQmK>dFQ(s
zwcY?1;0ml<P;XW`Q?d_Opv2gG64GY~*#l8^QNs@R01<w^X&}w}{vdszVJ;d$NO1lN
z5`WR)EC8eNr0u{fcBB1`F<BH@ATM7JRhLZ-2U_Yw(dSyv)B)B(LdtDhb^t|dr6)|c
z;?|IzD+fjAy3jF0*NM0Ml`^Hwp$)@C<XpQ&adeLm^+t3tgLN+UPz1ln%_lQd_hvwu
zY%M+L(hV`w1*XvFx}cA+{NAu=klPOf6|5>r?@yOUo2+}MdF4P15UJLZH0>%+@*nR6
zAcYH2;j$FgB%XxkN%Gl~O?n_FEb5|XXb39=g;6Aso>9sJK1p?S4!?a@wJ>@lB4;VQ
z(lu9NY5HgUz{=zY?&k+`shaap)&13STsM~411`-?AcR<(>8oBCcuD+%giixdJkkd)
z3vAiyVh||JSA1{5)#luHI63;{QzqVDt8RQh!D*GUIe3%`oXVH^`fTonUpE72qGoMk
zT_MHGfH+fcd(Gv>(z|*SACgDR3MBC!>IaBfc1}C+>?$DcG|?Hsm}J1W0stb_pr=mz
zgUluVNXQoA*bESKrgc&RuFxu=^LWn+hK6h_Pf%33E`w6VSj|#UOwcBY0<IWKuDdff
zY-K99Vq)1P5F-&2)>m>X5ec_C6(AQ1nHmD+_4d%Kv2StROl}2&8vH9skbu}(8RTfC
zum#nl+tmFc5eKlbx>QWou9nmBj4qx5>4(<FOg1zR>b+fn++&BLD7*~hqTS_=ztj_v
zT7m9IrL1B>i{kN`cQf`|625cvX}hDf3n?q!E;E%+-vU&}`SKpDjEnXwRWdKDXepgR
zx`IRzJJ9;Hdq2R!bZoCGu+S{~<fosZLUf{J5lUlQH-Y+gYRo~0znpg{X4mWyG-Jcs
zg5ne;t8LeS#MxGTv_{aAyEw{f8dOpq>qRN3zXH^Sv~L8j{ht7@wntt@;5F|!ZElEw
zokPa<r<XiP;JTX8HNN7^o22tbxX9y_*@So#7oWIzS$%#g0rY>gF~yFlBX~5oSZ=bb
zyAy;Hn{NZ`$_b&jp$*$-bQ+$N8oEunRDoiLgZg5<EHSSAF`VIZf<?;2&AGdat+ciV
zB_@7WpYQOpF(9(Sx<6EO>D|@XyHY^O6Hhh+piP$AU+?-#Qjq4Jrr1TN7Vc{5pyZR6
zhZUk94>YM=U>!e0LTYl*owaNDCE3LHM#0p4pLA+~`_oE`MyFvTp!9~J7U@ZJ3z^m~
z(D_&;C2&}R)CTy>-HqOEi~SzZAZ%SPF+1R>yzMKQNBp@CB9j^uSfv|K9_S8r;~KEY
zw($YFutpSgGXU1pnPoTAetaJ!0oaI3o>|H(;)D_dxzo;60zIL(n$pT2A2M2<?kYKh
z0O+e{=1@?WnV@%@9C*Mx3@!7IBuN8)Qz52@a1SToz8>WcA(TF(9=iVp=Xc|JSTxs8
zq_)WhS@Q?WDzToX7vZ;u5gu~&0Hw`|G3Mhx&NV2&kev<`8;>d6je+lzFheT!j4p}q
zsIgTSUwZNZuO66?#8b}>#6|=$Kwp0R^Kom8Q`uKtDd#DU9<@)(bo7WS-1PyR7(X@2
zAHLHtHbW25$6hd%Pdf|XPO%;zg@FM}q%wJG8FlBPuVgnd01)w-BM0H~k(S5-crVB9
z;j**pN!2gJo+J80i-JNUqoaxNTcpgPM&rOL`zNj8v<>fiwXfZC4Df$Kf@DepJECCI
zC%yov*vIzw4uRfFLgabqtTS~cC-d=Nlbpa^@>*J2qpM{$8bI-o@6+Z4kUqLlZ8a4L
zcF@SQ`vR=p?jX&R_d(~YcssA7R0HcNJjg@3WFv9icRMJVV4D7l8gRlaCeJ|JQbVnj
zL40O|+pq>0;5>wR>d2jpd5o4{frx=hv7?q=kfu6KerR^H88B5BiPNz@Dx&*9E{@nG
zw449!X^$t0WEJ~SMTI+xBfX^SL#!j^ed40_`-IqiucLhW^VnnFS`)RGYwgtsEMgA4
zt>1~~e>iK*?xLv~V^=w%m8b2?2+FcJ5)S07BY+{Wq)8fmdAAhH0jVf1*oho=oL8nR
zt$jQv?^ZWb@+@#P=oG2W!PXaXj*Sn)2)!+JdWFQ>0_Pis+!IHyjz3Zr2GnRH9#p(r
zD102mEmOym;RTxH>p1;O7^NZ|VLy<rdTL`s81As{<{}<O%Ll)ngwv<9H$>nRLjYuA
z@JWdHqLm<z6-j)OeI1*9;#n78oWi^y0HANExH$)i3{oB2QGT1#TMj@X{Y^ktQ|MCC
z(n+x$nu{a(mFA#z{aoQjt8Xsm5<je1#9NN2;%Q4vxqT_2%{hHz3k3G7w35w>tB)Xn
z2PfIg)M}#Gs>R$v2ykb6vzJ(hHd2uiB$5Zv%*Kq>W-Nw{u#)QHkVsr>7VWj+R=VBj
z2A`Z}^wh=)Wk-~J;CK@fI7mH7SGD}W_3Cv4Zf{L?V&#GttKv$Yb>gIn8ftA=U0DEY
z%jB_W3l!CHmH+rQ0hdB#xn8-rzMPbDqney`I2Lqiu#3p^RA;-~LDk&ySw{UREg=J4
zugI^6J`2u4;<>awgcak)bAzfp=hFuTB+cL;%-ql~FM0wEYGCyBr3IA`5?~}*35L_p
zjpoJXK3-N4{q&si>{=KKGj10C)=r^HN_iIaM!CBF3PcTp{7(=jX`_!eixu)Ho-cE1
zsPO7k;~I6OxX;syu2p;|xUF%yv0-~LGrXPf4)x7Rs~lK^^rz_&Nn@N!i7VHcV#yMT
zyyGe_n{A%Ho5Ac>$G2q5N+myfO*}fe^RA*-i<hnQqQPB-J*lC({jvKo&7)Hyi)jJ=
zx?ku)*=e}I=mFo#d`IZ^yY9EOL;xWZ;(Mt@o`p?^W)wr*Ep2zPhb}@12|97zw%B7G
z-W~D9JFdu+4GQf+C+;LAQrvMN>-En-r@77vqHHPK@+;SXX7QRm*$LGV?k;ml{`uE(
zO_o$Z^51M0X)LE?N`tRUqXV+BeAYr-J*v%3S623;a6KVkbqmHgFO{=@7tb&8wS3f%
zhXsy9+CI?zMS4j;2F3@U3YT~&1Zpk9Y_;%@hq$KjB+L6za7#^cu6WQ9h)i@ggzvt8
z`t)^@Np_Q)Uf&)$sL$5JJx5qaZp-219t~7+B8nZrhMv^a(n^$7{uY&T+ismMg$|M~
zAmYzfz^I~r*(Nd4ghU_8|Kt?7O>p5SE5L474W|&F_*kY1t)x{FS<0$em9O>A4yyDg
z>mj~Z?s2W2jPC8qWnqNVFt@ygw;L=fG>i6*4;DRx0tb)gpx;EWNa_+1Ra6UYpOJ0b
zhS;<>wR&SNaBOYQ{V=FKqZnn?<?_wAmwjL+4E@HZ4_4<PxQJEqGr@4laA&`>Y!F<J
zn2?8BMco1hMd)mJaoxY{<!_8`+H2f+OQ_uFv|Z#iQkoqRfyuJ+5Qxc_Rg)FVD*)}A
zUa-NJM}RCnsg3gi*>-s1P8AefP(6A&MzA2dgip#OCM<e18kxoc>U&mok}-@ExjKMo
z{i6h!rbEbo_3KHAZ+@a{(5jVO!4X`W=B8m+BDk8pF_%tB3+(lbLxyB7(hyQv%>PL;
zQ>`(}H3BKvnsB4xaH%Q(@Z9J#b#iSf6{woKz}Aack^zy7RwkD39h*N`tA6*-bw0#}
z<8PqCs*B}F`}(!X%F)B@VdM&c4nWe{b*GouEfQFM0Z1Yc_@EBFmiwbvXeHlqX{}x_
zyeznd!b^q$iXYRvc(d>@%Gv{f9Uwev4Zd_fdVJd;FypH=7qx;h7url@-VJ}M8w7!-
zE9C>2Ez_+IRQfFF6QfAlfF1(i?9W)bi9Wgr+STuB9r|@c?N6v}*NL8$48Q;&zl0^_
z$?N(%@9Sk#pE5ys?n?42KC=UB*gxDPPmipyfE4v`dRa^1L6+)pef|vmL8^z*xoa<)
zkM+}Wpyo9z9-qCd3AAO(jMPI(G^dv@Dn^5iL~Sr*B&&CM4`9O--^4h3I-#^N?*#-L
z#*aU@CPN$|bk!@&5h4tYS*i%&!B>ll23Ln3`Rsm+B>fgKjh<0Q>4A3}np6h`ROC2G
zjQb>dtlmD?1Lqaqky`HKIk5RJZ+@fQ)1!M1vfyXHk+;R=L8nBjtV2RC@G?IlFsA5C
z^&Q=x0GiC|O(xtT8EQ>WNH6D_n7X^WE3$1n*QWT4UHyy$4UT1o2s4E8=#|T_=voIO
zf!>qI`uk_kPV9*|ih5lbZXsbV)J?EflN35ne!81)<ol+(fsVyPr=sHCCdDCu^}4)}
z+b~R=8&>NaDZ7U2*d=%O8$9ZA$5oXO{6r)qudbolP-1!We!*22c3!;7xIru9m`%${
z9CjWaw#OnSnWg$P@v-Jweu?h&?;R`$1wkVfPyHfgPXHDh-?|E6UnHTl%WWO~Tn(hQ
zsY|%DqM5W4QajH`w!AWT$_I2@uO*8y^jxdFp2M!<0kW3N-krSj1WiZ9iHdk|MduAI
zltHr9z|0;r5{cd*@zx@FeqyM>eM_-hHf9qVP5}89Cg}tUID*=*wg8vxEI!EIC@-on
zPOv9$j#0YE1B^{z<CoW@*L8~xY6t1po`9rOyX_v7SZM&^y-X!95C{=H7i)pockjq^
zj9H<&NROOc5y-ios|uTt2aq3^9DF7I5&NnlY4IN^tBR+-@SQ!R#6(jQe#SJ>ZAd1f
zDjG_nZK%vAf@>qWw0X?bE}gZa_-qe%1f&Dp9U@5+bB*P8{b^Egm-n%p6a3Oq?3seI
zAWaDBPCLDkw75zF$oPB)Bdr^-7-<l_7%0wB>5h{(jt|boeg&)z-kwB|fAd=frH`I4
z##-?IiHUQsph3`7KjgiiF9ygVC?JMgfME9$ITp%$nz`^W+L}aEkh9Ok2jUVN2&q2z
zKC^bFtt)RSP+52`I;3or>UF|3NH@IwfnXGV0U$rJ$^X#w$!1P-X#fhc&h?*yIXK7d
z2eykzx|kD*nF>NFM$P3P(7D>`q_l1&E#D;VU8cAtaRK*Kmp+h|!-kY8Kco!`xuNtp
z5*dK;%{|i-WEgq1^hfE)&mUaY?1w0tQFxbIYK$y}jU1dz{2K!tAJ^6iwLq0z$u!RZ
z)?Ts;)Y;VGpKw4IlPF(VmK0Z{)h-AIM!sjB-QLFqiZ6MZZaRBZmz;<_cW*55SmLOV
z?qGBSoiK%B>#a6fCBaG}&yrH=23f?+;ki~P|G8ld2-s_tu{O(%UQCdV9G2Cxg!x|B
zO3_%1)hofIhgW!hy62jbL+5SiMsThdoW%M#E+M%K2rI+<2>$rj$nz8S##VYCJ~)>p
z770!)>OziBPDU5lWjC}f7pYe1neWb8*ZtB0NLNuCuV_vMsJ?Wn)W<&xQslyTAcyN9
zSLUjzlZ0S8C^&QT!?AkMYVbaL+L9NJ!G#75r!JO@#qjh=U>oxKtO0VBb0?bQd`I+C
z$z>;jSb~!=IQWhl<styG<GPDDp0uHt4}CzSpx1{0L7-zj2FR&*5NOSwc_awXTWss+
zfyW8JbobAYkrr_4Rj|&V$I`^?Wycw9I>;|MjcYik`W#rjb{dJO0RqKuR>wMnK>>o>
zTz{NK00YuPP5lC|Uxz7ILDV-0qehuUfl{}cM<C=yfky+7BxtqW|5b;#BC%ZSH1U+u
zwLHwaWB1IfqWJZwv;1h&V03Zo5;Q4;h;-LlH{gN71=cSUKz%vBAP)4pHO(|KJ97}8
zH>#u@3;mL83mubo*F%YcsV;9d`}XV6F9;XQgUQ^fKyYk+KxE_A1hNu>02QoXZEyG~
zX&sgMVFQ<|E2>|=0rTt;7^|>M>eJ>IzuNx^|0{N-|C3C{G296=CA#SJ{`x3rzgqL!
zn(7lsRMJ%&O0@#vy|;F$K>J;^jDKLrn(WpWUkFS@V7&qGVe~=sJF}`F7Y3`Rx5xQQ
zJr0bN6RhYaoYi%XL!_jj^!#VlGesIIzy;%R`N9nK;>eKoi%8ig1}-C-yC88q?f^yW
z@5u>==Js4;D+bXG%la^`>no?aJFa~fXskQC**RaA<(N?ZqjinnS&IJS+KGXTt9WI=
zJWDuNh2SRA2fg#gTPNuO=oGvjV6ZfOqq6X|e@1Ii?RHvx9KTB<@_MUt+i9U|-merD
zBn&{vzWX773|Z{6!{OG5u<c8u;Ecl7BVUrx83SAEsD5pwrmIUH`|+n=am?=&0hnN!
zmmaAx^7(>~G6s^ZMGrxC;}QBo)Xr=knaZIhXewj7nyHT30DXV!uan+gogtW!SNCOe
zQrK!zw*l~3f620)qIIA=?p9Z3@&Q*v<0q61STSQugGUe?KXK~OU2k0QxC^#a9ply4
zDVy3s37aJF;Naj7%zJ1F?7p)4N!aMkky^ccIVo8PUZmWh9tr5Y8Ya90R9vbP6X^i=
z=M^qxAqeo@qM!@vg&aF|UY$%+0rnAvW%8jY>zRYmYFog61KDObw>VkDT+HLIBA5re
zAQMvO6KCkEyQuDD)MUCrqJ}<RHGSO!p9jY8_3cYd;JO5;5RN$m9eE`djxZSjj9R&C
znDVtY8An;Uqbq5b0FG$yaO@_F%lApItsd7_LYjD_9A^0J8b{0m6te(b1)+pM;eG`u
z4!Kp#0&V<=f$i_h$A+BkjOsh`Q!nz1Q~_7n{*@EB7wu8+P{q4ZBHzB-BwBkISH|Gv
z$kgj))>K`5^B{RuiJMy@gWF$_0BwBVy2H?UK<1nv>2tS2=jj|slDWq{-gsw2!pIS=
zQwr=hI<JIQb*ir5q!^C3#~b15aB1;iG4(DwiDph)%u#ERJ+q=8H__KYk30h?Tm4m#
zxvoSY*sDXwvK44RwWkrKG|X^p=P;0|r^^xGh-=6$KU=f7fS-L8RIWAF`F8;KHks&}
z-iEyLM1I5#pYPw|a}M3cO;1+ODrR2vm&227WL8eOI7z+dy}dY)uHMDQ0NT%-<2E?&
z6ejX6+JW7@BRT%V%OZ-4rD@UvgfC<jpE4Diea*al*y*j-Gh>y*kPTlOQGh-2U|PPW
z-UKu=9w1v)U^H4r0v82h6h-9lh5>z!6UYQBOY(;Wp8jzOXL0d@oVuGw@&49AM{@qj
zy5ZP?=O>|EE@*2|`Ee}1a8X9r*m$FN^CORflX$*2^{MCV5@MjiZ7cW*qAF<ANK<7f
zRYR+=0}%%w(L}MYw(`O<tHwaInhfy!n;J>H6T{9T%<&r4lu9?R<j)Zq1#A#e)wQTL
z$|C!N@dAxb<Aj0S&w?B6oJg0q7A6wG1-h~?oO$rYVNcv<*?{oLkeoGN7;Rgd#8SMY
zts_YVd#|-B4iN%8;}@g#gX-UaTC|3NRK;#?%4i?I6#?AeAJ`7|tf&f1G(1Ux#p(bB
zb49Yj)F;hcxIz!^MN_dt&Yhya`6x{kd1YY#Mb(O2P02t>9a(GG+dJ-0Py!-aSXBx|
zI#@)(YU}K8yZnL>v(k*|=4Z0ywIVS8(#k_0)xE2U%c`aYoFO^KwB**)6=8n>`tjL#
z_;OA;1KrDdbu5dBa^?+6;Jk$)!>ltaAE<dMO6gWQ0V>2RAO}fF{_u{?{mX!KFWCT`
zw6DxBswy;6HFezi<u!&D;3#97*tlgEkoD08f5z>>2G#Tnv+FJZ?j(9y_gwR;juua>
zlsV9~mz<>nQv%2*Im?uVZrN=2!L2YaF?m=J5lM1tc~T=vB$)r|r-JfcdAc{CD@3a3
zp)LEqH603MmxR_%#C8>i$-9ullZMm3;nHP*UmCZWhp2~p+aT6o+&FcC9$_{F;~wjl
zSiJ=i&av{xQ8{qHjeajbAX<Y0R8y+Bh)XGh!?iepfXOC<s$!}~kcV2tmAb=zG4Ck9
zCEnNry%Iu_&fYA_@H<@xk7et>r|PXF!1fIhRwaE#_}Ym2<HwW0C2_zt=&%FHl0G@i
zgP#JeY^1<%ot|=dA)bGSY4`>{uJvLePz-!=My}2fuU}nRYy{TG4HK`)N+_fBV<tFo
zDdOka%8I-6Iau$0*JKO5>ad6H2>jzLDAnP6?jMm9NpVM!@kFK10%#|F)-6LM)pf?(
zEeSNFZv-`#P#a-Fvf(<ik&%)0#Ppb6J^Z|D5FvQWBCZWzqC8{#FvBI`$5|-TIHisR
ziOUdW(CPND7gzXoGgO9lWWmkV7ql{b^HMNlBASSL{}|JU!<8CJh53leR^SQ=VdvB_
z1*#OAr{Q-P#R574y~jFnZF+g_D*~4@JY|4~+JkRY&mOFN!k(Kc73}q3e2-&GIJrbX
zh<QV$to}UjF#Urm?;OHAJ7=qs>NQ|wEi1t`QZX|e0bv8I9YB?#+uFvavB#>>#?Ylu
zP6QBF+{9e4bz95B^8C_4NGCnDRvZ1U9%xZBImy#5Evab`IPSa6eJ}5tC^fqa0Qgb$
z?*ot!>vBZT-Cq^!NuquW0kL`0I@TRs0hf*uEm2%$3ScAFMZP4$-p^pqxi%qRTAMAI
z^2r81BQ7nBCaih{@14-;IyNjOiVvz_uAqq6{t#D9>aa6Aj;k=TGJM0`Wh=7YfQDwD
z2FWA<lta<#C{|UI>*6`%TzV4np>RNZ?#DI%0G?Up=H_EJJpmWlha5{e4?r7X`-N0l
z=iE}5bw@0IEXe3o)!%Fw?NM8RjqYk33Y?Wrm3zyWRyhNDlTvA4@!|P&Z(QZm5vn`c
zR~E|lK?+RvFu~)IrojXCM7%p|9E29Q0_Vy^d5)De)TQJh2iqc|1%cGT5lizS+n^tC
z0_Fn5j-!%Gle;o+xJsj+KPu0?T$5+>U6JJYMxg&52|pkLnUwn;6l^!Y#N0u36}MUd
z62NB!NULk!-@4=Z0A4va(vAknuSwSoq>IP6B9EBP7~n13$tf2j^ed^NZl+;tq3*mA
zg3~LMxehX@HG~ziqo5T~nUP$mM!z0jtr3m9GMd9TPrFWz-g#N_h(&dDDkrEqHPKxw
zj{p#5E#$UGjiR4Q;~<1&(AtXNXYC!FTLV9X$~;it!}fOCf-Bw8cqz4qmWZLHf&U*+
zxu1vp-)KM32NO^|k@^a6k1zn>s?;IueX@K1g3rcRxZCgF;VU_hFZ3R^Sd~9qm8dGp
zvla3W92x*EDJEQ4LP>x8`HUZ!h@*@=_=`8G!4grZqrIROQb>0k$0q;r5|TKI$xzED
zl^<cozdoyX+a!{b9HuKY)5woE5L<KH;1}>Ml6cs`vV_nkwkBxXa%Kb|Vy}tb+CYQe
z(7y>n{~qNpTpEMQEqsA|8dQQhk0VD`P<8w1=c6I#a2y<)pZKoz(dA9{3wo;5{{nYU
z-gL<Dv<%;!6RaES)KLBpz1}}>Ud9YygOark>Am*x^?9>O6t?&ocnnRyk#|-^Pu37e
zAh)4Mvws`6-zsrMmyy=zALX0hul<+t+))6UBo*r?v;PWF{KpFTae@`@xyr2j2Q2+_
z0si%P$qF1fV8us;?yn2-XO!ff8ImiU^D<h$RuWwL|Kz<ce6%(Iyw@KeU^O~ov(B~G
zP-od`HtZ!N{(cXFJNp-o5}3HZNEH7QZcW5*EQvP&ks6p^kU8_`7YzX99^I6u^t*q&
z&hKZCKO+3ePU-*iz0M<5ZOddF|Lea7E-6k3E|~WVb2XqL-H)HXiUlzJ^8lpH=Fi&O
zA|=URh<exh-=F-?r+uJVRMj$_Jz-1o{Gj^o93Myl!WPG}2bn_}-cKPc1%H&MaC5@o
zgyVvg+Ud?GJYxR!JO5*SdvJ=qEh~U(nQ=2(NJa6__946?S&v}&DGl?l2?*9p(^MS`
z>-s&r|HCUw%8~NkuE=tbh`|A^z(f3QQ^o%{pcZ1tIMkvMBWWo~^l!<&=TBQgknVt~
zk)j_9IC6?M#u0yhb1;xcxBNP#ek6N`n?4!tp8#wJz=8pS&HIgTk6-huk4JdN0U)9q
z@42{B148%XC>+)JXy^c_LU2bvBn9+H{Lgtk`sb^}Up1Nflgj7ab*)((seXOZ*B9X8
zqa_Ibx@E6&tCV|0h$`HB^HT2X&$mvyL#V|+jQsp|XcB2N9|~~z5s_fN^H5Tzf5!FK
zuUI+#=1#k~woO75D1arCmgHZqE^bfo`234Ms1wJrEEKZ&a|I-`2z!$~Ug$S9!8q)`
zzZ$w~sD+ac{I6wENyZN$KRr1H0LX%wt||4J(jLD&GBElCQeZKF5Q}*VvBhsQ^3P}V
zpYqe{xf!SaZ=C0!1Mu@Jzk5I@>wgB^|Kn)%Uj!Ato`G3|zfS5u=H@xB!PUK)OMe~L
zf2?E=h2>Ool<=QMS%7=-6Lmcb&H{$#4+#TMOaX_U2-x7c(Ol!WuB!-I%|ABo3mC+X
z&6nTXll7RN4~&B}Et=|wEH&8D&zo=r>Y<l^Y$#6D{0<N`SNkbL{*NJm{eP7lM+TEo
zAw~Rt<%$q6uvo_h#6M^H_fP*!6;&Xx74f{AH>$Y-gq=~F1+W72Gb(EUOXTkEGs58R
z-*f<QM;g^5jN^=Ow8y_8dOHo$%#zC5D<}B+nA|MRlAj*8hH%3fh|~Tsf;v?I%j4Oj
zWFQjtU+)EU5wvu>UxfU}(0<wAf9{3<6K4nhz9)rA__s-Mr@%3Ut4w<CudFEUNC14Y
zdoA-%RxvOp!Kx;k8F@HDM76bq8&XqG{>4Amzzeqq8!2jxKX(=DV;rl()_lqfRpV$D
zF&4f2`}fpR|ERw$)Y9Y`&%8ptjQDLSd?jB3&XL`95ANS!^FPZ0LNDthA_`h1In3wq
zDOz3hMdqIwF#y~8`;~wG_rFY}uVg#EK<}oKws7|?w$P%BrkS3h?{5|xB;S+dPt$8o
zZ`F;mc~M_^7hN=(S#T9sm-s!qYSe$~EE)qh|H4FK<;CNY_`oHjVrWENJ4gwRedI4@
ziGGJxXemfo5QKgB%^UQUMEtYj@c-d<^t0OtNBkn!{m&yL$3f;P>aS1%arHm*^0%+b
z07#$TGxmRXL?|eM^(?(`+wpHt`RDf-Ji!Jiw~$l%uf6-PgGGMbZ<K<A?CqaJZ+ZK}
zfohzPBSHN?CY$2CkV(iA2(Nw(h1DJm?yWaezrhv9^L!cS_p7@FkosicwHmzk$0lU6
zJ<=$S5UjW_X{9B8vJ!3=b6lhB2YdWKlt2FUYT%z|&#w_2X^kE29Z3yBkt(io;L_QD
z#VLLi#RJt4Hw9K8Rq;Qs0(eRwV}G$zwv2lM&SEq($rN?~l?l=NmNJ?qJjRs7+v`&(
zT;zm9=u^_a{;8sWn-JHMrVbYR_R5FK{ETl8Orit#CM+&{f;cS0;7-?(T_Bh8145ce
z?)ufUt&ytN2=uf}zJ2+qrLI0y7WiTL=&cCZBvA+k2Yt(QKtj~{C!-8<wFKnDa9v7Q
z0iH?jF;)GK6$G^5HV|l@37zV!&N!Q97&Eap3G(N*K-FH$*f>@9L^4hijzJ|75S1(K
zA==7v(_ZW_4V<7UNG&VtH+i`a&W``!V)+_Nl6?hzqpV1Du&&}X@RoBIU>fl<Im4<{
zI%N-DfYxv<!7`bOM{i0&sluxf+J$SgS@3}Bq@N{`<$Ng6Fx8iqmgXn9^P{K1RW4rJ
zao!ccBG2l+_mSLE&JUE*U)$*e1W(n2>oq?F|NMwfo#$;~=ingCs-WVd20JB>)$vFR
z>u)yT*Y~KhB=h|_1p<H5P33hygjn!YecZd`;KB0SUIG5@qqfNx_Vx01`GB~3qwo1Y
zXct$xT3(-xXcD9Pi#-6Qqx{`VI5OD9h5PL|;`*yUn<fh<19+PA%pZ#2Z#x5mG$sOO
zVZ4C^m#rxUN^-jwqAdbHPX<GR<l(aufTjDw^IrI_Vc}g}nX<O6rf^@&>36jZ|I4m?
z%Lx3XQkd}0+3MRKPi!WAEqg411N^1BDkFWAnI~o5zL2}P3`bpL{6kD;c!g*Q-D0i_
z+O;&c2gXuyhd=CZ7aUF*6+~Lm-4~WupVcObtW&izGteFT^xN9KdIm^N2<{D#(>yKo
z*Kv2INan9Tl=)vRi0}U;lmRzA=lw_^yz*!6|Mu1YCElv&y>Im3=tLaZk5?!CGCe{o
z(y5OZSm?T6DgwfLKiAUl6ZLuE=V;i6=u08B-g>6y9o0Q?+YflP&A%)gXxKy`D~hN3
zk8pg8kcxbYiptK%=<^>NMQ#Z8^+2Og^baA9-yi>JBDH^N?BJdLZTvx%1Jql6+u8m)
z`p@cV#tU6uMqxI;x4IRv<-T93W>W0c=buhp1o3+v?BZW<;$KGyH<vy*h_|493lK1Y
zdTNL}ln%(LvMEw^se<d&T8qc^Wrk&yJ;Og@BtAbJ|C>^@ii=NH;DLFk?%!Uo2i!c!
zTN1s$59hC0{nxnth)64fA59!7IsKWdzkSuu2{@^C=PtAS4ny{7{uLW-86PY9E!su(
z!WX`ms#|Rpj0K^Qj!53Ub&iqW$J8He_kgQjKf^3Mf~)@-8_9k*QoZ$aA)Z(Lq`93d
zJEFN&IM8JOK0`Nfy1CcsS^nz&zq;(lVKH@|bd=MTN6_^1!~I%T?cWz?@Es7IMNHm9
z;B*uJy{T0iaH){m@~2b|r+;rds<M{gXL?60e!`xH>lGR7Y9oNN_Wz6Mi1#-CV0F-6
z^%;K8-B<jTri0hh*zM!`9}A{x8q!C#3en?L_EVz(=3X9CjT*%f#5cZLlo9$3g8ixI
zv6oDDSMo!1N>l$d=JR1q<i)BjAJ_fqg*SF&s4rh$v+Z__vAkJDOqzQpJ^42BL#L*P
za@_L5T75WXSlpnVoja2fO>ZS}d9$r%?MEN6&f=B@V{faIw;ow9%0R`wE24Y3Pd-~G
zwQpD)X+}jU7==uHpPD|23T$hCYdZ^2T>M<G7MtB)_iE%Ay4SDSE`*7#eSkGRJZamU
zQwgMG#?x(&c3Wq<WCnH(-pn4f_#jmB89vxmRp=Sd!4#cMe>T=cRy$LD9ju)v>Wb)^
zO~;<tFtW-zYEh+%QDqw>0QGU&A+oBHc(El|Pp@}dg8BA7!7^vM{dOkQ-puk6sGWOK
zzHX;q<@#{3d4eSwT5jyU<<jMTBzfj5xlZs}U-rV<<?@Y+zR_aH{_9pRHSvh!0KFp1
z@Xdj3!cA=Wi`3y`Pt*Miu3z)9HZuv|%{-R_;_h$a#s?h#b;7fU4g!aowbctGL|N=5
z6+VHXp1W5?_um<h2W&{d_|GG5?QD2VvusSvOgD@)?Tz=@E|)Fk83oUhvx)$_DdVP)
zr;<+k-Mt;MyCaLw8R&DF4f>TxQIB81^r04XKcTVazU=G6Rh&R5E_5Yk<l)1KL^0I1
zB=W4RAt&6JB%U_{u@5%9%2J=Lu9?ZO`g_zNuc@+e1+tno_R2z>E=re(8XG~`6-lV3
zAl19$e)GhNx(C7D*rhEPo`8czbOd}@44d6NZfuSjYMSV5Nem$u&PxMWo^#u4nP1+r
zeo5h5KsO46)0mCqQsNV`qz#Z*+cGOeMG+`Q!8*hV5|129z(v1-d$%+zzo2vCb`Hfx
z<J*20ffa~2TeC9t&UM4T<EkbziMkg)Ai__&#vrxmQPI@Kgg~D|_iS1-yTYpn0bu>1
z&@I>cFLNA)rfmzf^CkNgFGw%BT^2`u>CsLS+9dWnOKx)dh)-Agg}^@Et(d-Ut7-ky
zSfI9te2C;%qFeQ=Bg{FM+^ya!4zWJt*0)o?MV-TpTdWA;#ia#_zM27h@x}075)pkW
z-L>2^z$-5C4zeE|A{Hkc>M$<24#A!qWfL;(6?1(sN3_xp_x{4)#HjKZe=NMN;q$U$
zU?vloMqCb*jUKO%+GC*}tE6LE8MV7EK3=t<VoKdxx5_a(GSLuDGmc8-tl(+F+}OTV
zIMy_GPXF1u86*B%AVyuGv%$H;Ziy$h<g}AiJ+ZNi(Ulqtc+IG?h@TgN8K%q7Q`pY(
z$s}#8i^l1@vs(MrDh0JLlBQN}tUfkT9gFI^LjKSX_&sGq=*u*EZ^Ffm?Vw&}{^eno
ztB(n6gbK<#Xe1nFRy=hU-EEH|jLy_!hnh#yj!*C%pqovG0xRb>Y~I(K3*#ah`i9wR
z+k7rm`|41fgP@ODabcoaoDx=I=(wekNK;?BE2jVQ*OJ_muRTWr^#q7!sVwVirBr&A
z$55!xpST9DOk6aw&JircsbbJ{uC#?x!RXO^K&tT@fh=pHJNhOv(l8*#K%?HNrEhC0
zabY_k-tORr)j&m!9Zug1@-t2GiU9ycu<_nG-c>$!FXIA0C?(k-Ip%7(8tf2SO)u&k
zj@qBjQTS9<dIZu)dq}WYY)$J{q?d?KH|6ff2eBXLq+_g_8N#?M8rxRzMak;$YTPfZ
zvYZRKNdLg?(k9J?VHY8qub&O?q6nos&Yt4xk;qFP)9WU)q{VNfDhb!S|J3qBm?hVb
z97yF`f(nyESTC7=RSu8N-pImkJEC@doA|PKQ#-P9x+_7=bZA=>73WfJSG^t`Ba+{y
zI`qP)rfPH)T0ZSj!BgEjSFc}e=StKA&9tjXsNAyqn4?g*yQQ4`*w)NjWX-lwbS>I3
zL0o_4gCd2h*=50kGR+lnS2&Wr+<vXP945M3F;%@ruNS5vxSWRoG5hM2z)QsyMc1ji
zmwA*qbs5br)~M?-oM$g(-e|74|I8|Vi>KLWLy4m*VCXu3&C2>{ou;|E?yztQAM9BD
zv^Mmk;>Pm$`iIGtlwR+dR`*JWDQ;8uL}WV49Si99qC#i<=Nx0+5A5_RT|?^i+!iz|
z4UJhg3X{67IycK2vCoi=6+PzEstv7K@11$IIWiMb6xF@G_-P@zxpSOwKEDds=WX%+
zqJ%>pw8!jNXq+*S?P*;3F19M)k~8p>jOYn|MgA?~=}d-_`EHMT*Ih%`k0p+}JWAY9
zo5MiEI@j#R^;>g|%M#7Ci9Q-bW=z)2d0bz+f_1Cj?{ggv=QSg}to4^-mK?T8azZzY
zwoo}UizCK9%iLROGnR+d(VKnOmW13AqEeCCBtChE`BgESnrMVwzF@)w)RVBu=|@xI
zt|)c(9As9#%S86qcxQ<x%~+S-&h}@;qqTO?DN5)r8*QPS!VEMz%&c@UVO<fbPmgjg
zS$}9a<(iIU^ti_n6`fz@$o!C4^e)UD?I1CU*;&tupVCY5JxV!|)8ifFC(anh<cpIX
z<O^a&*`8q#EO8B%)}AM$kP6U=z3(69pU#XFjpjBkh<o*%nRHBj+EIGk?><eZox|hO
z6;%m>GS;*u!HuGXi&2^93dXLEO(X_y!A3~eQn%Kt<FtFrc8ndK*T!PIt35SP$|qpU
z1dMK*4q@n9o2}y!k3}%;$DtdF9RQcRxrf<HA@cUOx|}n#KGxRfEE?LNn8WG)7K0h3
zPnXzS{<8mZea0on_nyGbhAf}jsX6DYTl0#=F_uMMF8=gm3*@3zd#!A4Wn$kjLm>U^
zX$DXDvYh5d$T`B6m)Ej8UX%*eo?V!|B-$bV6{23cHVRwwW5kTPpl7P>tI-#$OVH}m
z_WEd})V9^9K0!GbTfEGdx?Pof%mmSyZnOTLMt&OevmTeNv4$>QdMhT&8(T&!8!Qq}
zT2GUB?(fe~TZ(0D9=kBB=orgNzAj;uN_{WRZ}e_Ij$H<8N_@Qb#^>(5ZQ;~i8s(Su
z6?DlSgI3QeUwLP`+P}xVdzk}dawtCH?&$t9eCpogDhFIz7ur%U>3yr%dekjd<;jO{
ziuqo)ua6$RyD?tdhaE_5v=YfLKbi6gBaYdP$zO|!acEy1qah>>pMDq(6Z#f3>e>zQ
zlO{YrVy-GGsUCJB%BRmq?E5Lv&IBWlku1qoLnY6h>^VMZ6t!Ne%adxc<e9^^wPOoH
zd@)&qeKX0~S1&nTx-%&4X)0%PH56&;AnFuO30X@w8AL`&JUQ@>?-9Xdh(TBD47ZnO
zU};~H(jShtDO%fHR;`7~E59qong<NEC);9;whQX#AHJ9IHWqOh8L%U}v{5lNNF1_k
zdb`rk$aQ)I4jQT7R9w?;R5NV5rEND`vMJ!EKYrYoBm^fd3Fxk}z8J*nuJ#<FF93t+
z!HNgxHOsHPHd+3tDDCksMS|GgezP8_Lm-{>;FIrFn(<9F7HW6;yi52Ilus-_@;UmY
z%-qDg-9uc=(sC%r_&Mw`zC<g_H|j|*;3HwA3%9gTHS{XiFTi*bwLUHjIaEqCh_{~e
zu6j>9u?zX~Dt<#@tf(Yt8rns#TI<l4UM1tt(vSTZ5~-f^Y7YswJ1J@%7qOe9jhR=x
za!??u?5)_2-7kCZejEFa%&5ZKQ>z|!lZ+?%eq7@&RBIz7<dniPNuuUn6~tH=b!N)l
zm}N2kyKa~qNN%|I8Jjvu=$aVs%YG%?GMc?*g(>5^|EW^593u6hOz_2BIYhwv;L_N*
zorA<@0&EkJ`N%gzdhN?MVUMF=Y#P<mk2x-kyNtDaPX_@Qj7e%yv4gXEz=IIV&(TRD
zV`rx>$9&vD3il2f6r-laPKYw9iayb8Z(P|}d>w~fj@~nMBaoZKYdX!ob*p39Z!hJs
zY=4!Ttjq4#wbR(#4~?6t8{d1D^V;voK|Qx5-1{!MV&(;IROhkrxvbWJRL=rTq)6dY
z0hl8ZSbMmrjobP_rLp28F;(5ciK6D}51j-sZ1*zO6>C0H`aO8d#7|;r<KVN;-C9Q7
zL)89JX#C0(@9^Bz=5D}s8a49eE^nSkNdCSzx6-m*17&yVXA77R$5JF9hJsVHuy20Q
zs2w-+XcbS^_{U%M^Czxcaz>gMq2xE}9Z(&vOBDeyfgQD^+4mk4vBR$Y4rNIGptXin
zwEi}Ftk@|ay^E34s^0(Yax_{i{EBH1zx_}F5j4TQeCr?w)oV3Lu_;yl_|{IVf>P41
z8LH!*n}S7R(H%Lz_o?E0qScTKf~Vu%Qo0bj!c_bttQtMZAC+yAT}NOW7}0jS1v?Mq
zF$;L`1N$!NOjfwCau?5|_4;+EvJct#qYJn8PO6g|*uNX3p-WgHD8B53WUm*N(snUm
zQt<Fq-dn{^*9{4rAq%wcl3F7di_doL@83l9Gn8WWYApc)U3pu0wb`AD_wpxB)hJdg
zSU%R}Qsj2AW44*{<4gWSx#mZy4@rB%*O=-gaB6n6=Q41oW*kcScGy^;Z;7$qYTCP$
z+PMiP^f@T~Fx2s68E{NKf$T<mL<yeXB<WKD-tcjEsD($asgk5^@YeRhd{*xj7ow0!
z)8d{BFy*`xcSfY1r1On=jc=!3r#;b>dnyrMgYgVM9XIFHO^5sM&3hEE8GQE{&a(y!
zFG?6wX=q57v=VO~KAeYKcR3?!gtCT(2@ujoxn$%XpTj0=XQbWNnNCd6#zRWGA%*x^
z5lStW#l6!hLqg~&&d0`8Lo#o`i#@twHz4$Gn5;AP<7vyXo-T9xy&OJog0QzX%JFN%
zdE9%~DoB$qDbrVwup`X)VOh;U6aC}V3FgzhMxQv}_@G6@uU)JpcZImvv%Sh6Xd3Cg
zxCyLs|3c#<nb$2(#)ThiSfq*MyRD8huD%MX%4^LF(}oUu53}kqg}zr|L}48?=~I`#
z6e#jCRY>rNGXg9LNGE*yF6uQ7D=W*Blyxe8yH7;rFR3G`K_&y6EkIA2caQc;YdXBu
zkZwLqoEE!jXpO)dFgP47dIY}<TfH?tr)-yeGH2b{ys>|~0>U(+&>ZT)tFYpk9l5PC
zY&1oQ-L>hON>xO|AiC#72dnZL1g7%wpRadzzY1F64_wPrhHWTS&uAD;`w*Va;q)Bw
zE;D50ZOl5^!=E24vE)~LGWkQ<B^`MtF3hU5o5p-Z;~66FZ%TNbPAO>b_nepWKG(ZS
z2Y^;)K!>}U{(`GgqtpBFl>N{l*JS!C(T{>+x8T0{vZ5^3C+9Nkl1n80=uNRbQJf5j
zlhYWH6?3<Dr=eQbZdUx|82x~!lH3H_&Gp*CWaP@O=FbO?C!>V<zP%!6)$}XD#mR`J
z=4ToQ`Hu${q@bFsjcipI#7USRX?gNo@pn1CQY&Z6vY>C@JGMZz@;>1=o?soarYoS-
z?J-#2%!mIW-tbH?M*zNf>*bc3fU~yovmv|?(BM-fF|pUVIi>Bac%@HUgJ)qotxSZx
z+JcG5+;EhVwy1hmb`;gI{sUuExlD@nNBAzSS-q5yAlFxXcbok6Ol`QWtVg?z(Lt0S
zHiK#e=lI_(X`Bi>H*hHwKHPZ{@(yn0&=x5>&zy+q5jBEIEb}U|SRLlPG(Mb(r{J01
zKky`8`99>_rrA3)ZkZ!(ugtPo3qjr3h;Datxn#6VaEmguSA$$7lkWzEB%^sP#QqGk
zOYm}?sXAePfb!6~rf4Q{gVnLa1&&vq2~Hcsw27fvy`vWRLmccgZLpwo4Ox{mK!xv1
zlVFoFNrHK`Bg<s~Ch;8|$B7sj+VH%b0Et)`rZk2;e|I|FbAongf$|M!+5Nyir2(ot
zz&Q;V8!aHL>=jweV}?ZJQ-myCBkVbwou7P?x8jUDuhnj(l%bnbK$KXri(*@(|MSGc
ztDIIMGbMtN@Hd)C5WAQUr`Wpg?rqCkR9LIam1kJe_c})+8=z3W$=h~{hNAHr?TvM0
zk5R*$L@UW^qFd1Enk!GNXZN~uu#6Rj6Hg=~$=HWBk|VNB?WzqbL!+p2-Weu-lw}M(
zES3-@yBh}ms=N!k+vh6lEI}U?gt=6N+|XW6EW0lH%^xVL#R?7A;?e+Td-S5;c1KWy
z@Eydj*43Q4P|c!)TZ_d=FNfgLX8H0Cf}!eU+F20Tu-7EuxcM29o9-;?@1M4TkbWQk
zG*%b2wCcwqq+~qbCon{~B9I7Lt72Mvp-Viy2gxq>u{rCm72eP>vt$ONoOV!+g7-FZ
zOxK9R%RA^DuVba^Kj}+2+!Bl-^Eg10TfCV&Lti(Mp&VDsn4l#%z?R)ofNzWvU9e=Y
zPlDw=3}{v6dS0X&g82~LmD!-VYcd#J*-YyS=Np*}3#}iH*Op#-R$IzwARw>)GR6iW
z4D}HEY~@XOyLftI?0V~n1&o5U*=OIOcX7CQ$|Q5tg>HytXGh!xB4Evb+lgnPGLw&f
zQV~ME8p1!~+|`<;BntV6&O~gyT|H>EpK;7l8lrj!K+q}81(=9>+4$yxETv9puV+i6
z5atv=zKoP|q3*mg2?@(G??|*W-P_4A;+xQAf`So8#K6tg_9RR%=Ef{@{eD`{N~YCz
zE}Zm?>*u`Vt7C1w&lBJ(t;&!b&k38cHwF3#)#0(5>hBNDzv*JGT5Rho+no@#q`oue
z+ylfe-s&mzq*hFiu^4;NZ8>x|rvefrNFeW1tDxn{xD0un3qa8%GX7<LsAD1DA@(Tm
zraY%m<YSXmR|Vf6(VI)0hxXnTSa*1$^QyP|E?MBxo&gy(+oPNb?g~sck{y#(*-q^|
zQkRd(nxL<^q{*9iQG)gfqTHZuUNun!3pJlSU!4_jsc6W-vQM&~|JwzGO)h<b%WPxT
zV~p9ZVJKO{(v>_)^resDlXLV@UG=h_R;N7)xpy9o*!12wmDnpduB2+TC%O`UxnZc<
zfDbyYz2=sVIun^1x$N}LNTRe=iF{b%v18znBhyK)?hncy<JQTPS*K4d%;mFrwndIU
zp__kSQ0mmNW+!(Tq|{>G#K*O%@95_x7M;sPTQOP?_jp2Zw<zKrdNQ0Q-YD-{B?q<%
zTbz`9_GV1O%@d%-+s(EF;!e+db3nF)C)Qdu{5fgA@xygVe?@fu;|X9sN8r#~Z;{5?
zt`B*4I9JY1z5)Efd(t3%O{a4)SdyEN-=#n;r-~kS2Clvu?)M?ZXHtMV{#?2CrdvbJ
zg~;y`kdtm5SD>z=Oo=8z!cxg4gca0Zga>K45EPMd!Zr^NhR}YM72naX#i1Rva|awb
zP6HgXycXA{Ok>a!#Nnwl)v^dT4DE3xXME2jIOB*QtQ^|+QE>i+)2!_2XQ4g~W3;E!
zC37UKAVbYw=s3qrA%QX{+mZ7Y>{;B7QW}LHX-_>rF~&P6Ky`{VjDO^wDq)z!{-*kv
z+7KEZRd>^-MG4@R6u)Tsjg_xGa1-k;8K_vkBie}l>iAH#r6#<*cW?$qae3i1rnp}q
zj=!f}`6O&PR_LbK3_6uNl;Z#-{Mrj?5S3%Sle2enwl>Gx(S?)`b0dmpQ-D<6v@Xh7
zBFuHPO{}Qz$^kNd*!29lFO3iS%BRA*+mFM@=v>m9XV!Z~3@nuE-%~N{MaoJ6AtkYo
z&d$@0kVYF=p$X!QZmP|2m?tVV`HV856}WAQ_+>u6tG7RJTee#`QrrU>o^8=|-$fOc
z+^iXUNW_LR8J8C_Y{~nT=v;1<ryULU`U~-ePt}40mD`^AACi#PMryvw>gL$JXyYIy
zvtrlI)aFA{H^G<fPRX+ZHti0^wMf+Px2E^HXuk90hZdcQGJ5h-HZKUrj7MsrQ+r-+
zJuYGo7MKnN#jC#U$GfJ8oX{3kI7Tp(F8WqH8a~0*OS|n|?LCQduUSL&9&EL)oY*4r
z8I#t>o_8#zB%f~3YCzhORAH9q@)gN$6Am42h|$uJYwGr1_%3Zx7234k_R@oh!?x;l
zXzXFsEG8g_n>SQ#ho!REA5WDln_RI=TRnYk;}+{8lbG!juhh25TUb<rk@nCkJKH@k
zuMO#0|2MU^7d#(!&DCSLFpjBPM9=2WCNzLDtREF2$b}g}HM!9^o4$S5px{um8#c%9
zpQrx;ul<8h6J!4%K3z+u?lYXm@N@J=bS(E}ki1*>#k8p@qn4<5sboJqYP$ML053Fo
zD-zx_HKj{=J-)~der}6S^kI_{{YFh_)2#-(>3aM^k~7Z;r5nw*ed32GvR$MPt(K6~
zj()sYAFPFo2&U|yc~*o<w2G~KLzGdyEfP+$dlLL_ezooAFd?_^?x?uYjv~Tr-{H)c
zIqvlrW;)1(xwy|GYlil}7+MhIKtJd1_B@hRT4eKtE?4%1VT#umpuNpAhGqga(wW!7
zSG?~brGyDdM|5d8!{e}Q^_S+t62CNgZm`>oQ~Du`bC!#RKV<Zq<hnIYhr7c2Ps0QK
z7;0o4*gu?C)FWHj#&o=$a-h!{$ki5A-q}Do<sL#k7w~vwTn@k5;6-0;)GzUsry!6C
zrF;9VwEd3l_1HJ#p)aN^?{k)(J<NYm+HpQ}pn2YbO4Z-6gpiz^T&h#rBO>D}$$9L8
zP@lWQ{QBzps@Y!YM&riU^4|ATqHe%$IV?Qt6<he;o}APcUNZ)p*|_$SZk_7F{89o>
zdsXF?j=YSUWiQmQ>{Ct}&S4Jk=_&2lpBN5MnVnPW8t-$9%nwLe%0h;=u^YV`Pd!1z
z4;q0RF=e0kleDA!=5UR=X<EvML~F@d2=zIZ_hHjj9&h62EmWo9dpEnmZ>CAh@9)CW
zP3x1ryGkOiN!MMz==AKF_viD|gI&zuZlKHeOPLRQ4y@Lx4c)Va@ymso=H8sOm?^#W
zX;$dI*@|b3{TG=XMsG1iZ>8z4Xg~3YwHnOLk5$Zs)1`ee*DWl+!7e6`Z8-XUy+AIg
z$z@#ryk{{hAHicgm&Ubs>SBsqZ+}T@^1$*!x1z)Agh8i+$;!S!QS7z(Q=wsuLCgJ(
zJT7Qg`o(pAv5h>?f{6LPOkd7$o#VEbd?k0zemKS@qTcSibm^)<w#cQ~+sE+9eI;G-
z$MX>^8$r>7$o%2vXhE`7P3}&?QSw#IkL4X_@#mBz=T2^KT=dq6O`Cj5q`DENsIR3O
zqohFbAZJg!eWjI|KweogB1nGCb-A-U|CF-`;uK$XICR{w9Niai5F;QQwbX4POzX}r
z4qJ)!s^#R>sVwV!BM8x}6JPVtL5wy@i4Ewc_T<wU@uBCab}TBiU7i=5Dy^`UbGbC~
zus&8_#zU((rJ^lj<ia$v>fGF-!XniflxFpC_ze~7iV>`#S@42_Y4w|j9q=`S;hRh{
z#v#!~0#w=T>IW6MoljgoHFKZIIJrCJm8Nd}sp}w1Aju*lSB_TG>4jRS*h9jR!{N3K
z9r+pCUTGPLkn(NoOs<%GHD;dj#SsYSLn98SS8kR_=G=gU2d@fBDr{A0EqJa=WEX~X
zE$9x*au0ad^el@%q|DyGAmCuIY9of75?o2#n|}9dsaqpI|A~n|-rz=@oqm|h%$Gu9
z{NNLiv%>N*O1$hIK5#vl2CXRtkz|W-wrdpY!v!(4;qkLX1w!~9)e6nc-mlwAom38b
zEzFy2T_*R6BYZRq-0W7f8cst(x|pZ*?P9)i57uwLxrnyJAMKzpR5n8&j3^NAR8Z6B
zIb#k!M=HUMWrhaiH-<%<-^qsNyP~qqHbRKxv)^hT>`R?%-KT%)yJj(vi@Ae9;Hed`
zt^_mlK8y+#n(Q=uK)F91FC;iBBhb^qv){5dQ41{)n^dtr9Dq0H$|5e-9NdMHCQZVr
zUW?33*{Nv{x}zyFGv_<P^S`1i)*`Miaon=68Q#bfpU47xuWA-<MY9zu)X6V>&moSI
zpS_MuUbO(4nIC3Zu`OM3d4=5f7y*NdCqap}W;wWI*eiREd&cl3X&+W<yI3K`S#4Ag
zhlQ*AyEGWUZtWp{fKkYrH!EcUpSgn{>>Fj;n<@vVdT>|Qx_UlVKA${-Z)eP5CPj6O
zO{9HxC@3kw`MAv>3%9Y}!4Q82zwN{|y>fmeOWbVk4s()BJ#$fCX<}ScXKoH%qCkX<
z(bL=vYijSW?G5i2+juwSI#e~@i3{o*vu&Ty)8ms6xjI(M%49<qF)NVxObMN9t{vI=
z?a4rHQo+1Nr4wpnFODq5^@iepSyu*E<|k3pohesy-_X%BFL#yeiyR-`3kyyjoUo3O
zMKcxh=*7Ihn&+T~a>BX`WY%WW3TfsG$Tb<%i{wq5E_Zw^HugevfC!IB612Htd1MeS
z4I7+Ahvi8qdR=?;nyt|1iW;y-MYHpR#d@eLL1Ux?QqUsyRQ6IIiyRZlXUm}+=BtPD
zI|I_f^?k%zG+rUJF0oG`t!k8CW%aa3yssrTz!Ot~;(cNqHg!tcs<A_F@?Zr`7UHU0
zD%t3r9X6=w#k)!<<7V%>vW;KAcyeL4F=kSUSj(i*=I<g!$~-!>&8|BUnNJL}hwHx9
zC8shovDQE589XTv@ZDXZ`1_aP95dDQ$G12l^{q0&9tW022a8+b=>Yy+gc|BriFR#B
z8r~G_;C`_h+q16<@OI4Nf^GsS0X})IuwP=}jgjw9R*CV5s3bp3Hc5~yb05@C-rDt1
zc&8`UHjSO0(c+(F<1va|?B7Cn(a!bt?xH^<N4x9DBZf-U%UuIkBL}o2!rw+`&nxcC
zA*OnX&C%$!0Xtz>kaoj-uP0!$PLk4GgAa%9l8tekc0~mx3CA6B>HWX<t~?y-x80W%
zl~AH&P1zE%Zy{NVX^4zbNRjOOG8jWhvM2kN3}auiFT+qm$XLfV1~s;^hp~+rXVmX~
z&+lC4J@2{B|7ZT0>w3Q5>v`_)J@@^2?$76$@AF`it_w~JMR@cn_s%k$>xlg!k-6Kh
zLtGn%+oNzB{^keJTD~=jO3&nHI&;gtctSD;9LwXzDF~Ae<JFG8a_fnSbODp&pMWOO
zN}pbMe>~5M(|Zq`nZmN9pEeOcdG*OM#Iao)hW%)m-@l(Uwy%kuoiPCmQ<M}-%{%w}
zmL`+h(sQ)uZ*tAV7WCG!XqnE4dE?t7i+Qz4`Hmg3*qmsg2jMkaL=mfZbpac3vSZ70
z>FB<7zk!A0p7)x=r;zJcBI@H+Zid!NN|Vucq5F~(0wMb>><22;{|6l5{mS{4rwP%X
zzla47(&)Aezn^|dY<rrJGuW&U&}fn%X~U0uq$5r*eUnCBgJYOHXSa0uIEH+?!vMCo
z5sQKNSr}@DNE|!H^-Wtt&2WFy-~DF|=WW55#+&zJsc$Rxzu^$nq8A_n2NMmk(j)$b
z<?-?R(jzJqi2v)XLs%BpA11L<2F<!+SQwKUPt&9NhCwzD<y{Z;L1QUkcI=t1lF08p
zyEn3*UvuXrT_~B)T6>yK&PBQmMLo7R7dA7?lBqkeT#ygZXekVMKh)j?P;@fDemcBZ
zww=eYBpHA0kMI3yy$F3u<tV)B%Y$y9nc_9f>7<`#X)7%~ZaIEEHF{aGrP_GE6@)l&
z@zH&g_x=dC6EO_ji_vSY#y_v$3GlO8>dUFjIsL$Y>h4yz^ggD~m8k(LKvuq1?e9I2
zn&S>keQi9oRrF5pYB#K5)sAt+(GvL<BjP?8R!v<?Jqq`wm}A?89?SNvbAe5ZX_0CA
z=350#7wm9F9<ATT5>gB$#nMmF-{BQMZZJ2esX<3yY)&&ZHTR0wah2{v;3|)lR<2@s
zXzoEPtmdUvaT$Yw^_B|y+@zg2AkQe}r6VCpBt1Io?u_IHA_c?E;i2r5ubUuVxUw7U
z$h496$kBNW?rx!~a6X1WX`0Tq`2t~k;1Q>iGB;V<J8zHrHhPaCp{6zyVQ+6)EnOML
zCp~2@*|TD2>$MqXu(c1DcFy|d>XU@9-Q-F(8I{SfEFc)#8)_MFxtAl7xGbyL;)8ak
z&Q39f-ZvGH_%MrM2Tn-nSq{_{f}ne1)-z*LdrRv+x)fPx(V}l;)jTSBqgcV1&JkrI
z5&GihZ!Dl5@@&4Pq>x;9p(LgRVvQQdEBX~oR%<p?!Ovwww&D>yZS6|UYucq?>}q*U
z6^Dsc=gq54TR|Cm<qb1}r(}8)-h+Mn>AGLi?uV<QBz;Utt2{VdaA~JP)`R)g5m92t
znc6rzxE4_aqYmPNnCF1W#Ut-{fhd7=Vg6D+wfHl}o}HVT(q4AMlfdoENjl9pLY$U2
zh30Cu)ToDZcKHS$A=axqd(6~aIea>lNS%^E2T$X5G7BA{Am>3ODB5<hBBlJS;qZmA
zv?oK)e!g(vmF4X_c6yrG@s(T#pwxu6g0)x=%Bn3@AkMxn1+l4xS*TaZgl4?tUKv9)
zLwoG5VLU?@B3UbO=oLt$nWco>ernt!p0Jk(K<QT8Bc3RiYbxBVO5gK}RGA`+w5#94
zxn>t0;F*DiSj_W5S&({<u|)S?J0F6s5sw6a<uk$LZncLx<32l%xB(yo-vCAJ_n&C%
z*x!cj74uq|X4xLV@sJ9dUnrrTviR?wC3=f7Y4#=of;v8?4}9DyP+cvoDSF+4JEolX
z7&U@<l>@i8R}Dp5v4XeL{qvlmiHl|?>tXTUp*fJlyJ-(RElAgN++J9Tj*ZxrFI|hR
z++R6~5B8`}^<zueVGDT1GN4jC&<39hSsJja&g2Vn4;vUp%Z28N>yve;42PbHa6@Mg
z>)omaLf+U68z<@y*`nq}I`1n!?+gXuF&_N369!A|GRh+kB+>gqVX@N3C9ssLKL|!R
z{j993*BdrUokbMDnad#638zmdO%8;&KWRgn_A^xLvY@jyvu$4cUU=c|@Xf@rqS8b3
zNeN}y0&z#?{1{qEck$tlqM20QhaIO4*@~yiri<Q5p<@^^yimv(|B^9lCK?F3B)oKN
z=|@C{(w0YR0#5>=TO>WwYHvnVs!I7bk<hY`ShhCNd#M52p_(3>3ltuk@oRF5F|WH;
zJEm%RIRl`wry8+K<VvBa==pC24JzzP@*03WbieFKcFpQ+F5MH@#oHq@%`$t9wF;mD
z${&WB3LS|f_Cdbp0TuZm%+D>v<7}W=W{t8%k51TjjzZFA7~d_5^?~^Wjns?MBB9j5
zONfkmt1^HAEM8~q61#3@Ch^VGcUju-yVD=YrLKo6+uC{jG{@<OB3oRQ8P9QoLsrcS
zA&yz|`im4KWHHH=-s-~RZA>2fihpZ152O3FlCsS5FKc;@R=7GUN6=MNH@v9OFg1rn
zLU)j|zf=(YWvf1iYidI;Jth_!&}-4B1EOS4E~U!XJVGw+uWIl3)#@tEO7l_gyZC%D
zqQdLj@if4kv36u;lLsPB4WM6u8cK9p=BYKth6g3vFglwz$gVBOm7k-YHTQ7k2?4aP
zap(w&|IAKHLrkZF=Y(8cjRW^+(NEdW`!C8AM=MC4HN|`=q2$@0{k7M}VPw=erJVwG
z7{3J>OeO{0Nj69MpQyeccc<TIjhcofJGIGYi^XZt)zTJeGEPtXW^EFE4JHrDE-(oG
zXo2W@UpFn00wCUw21F=JqIW9f0x}05Z?Ap{TZQY(DVS}Z@BJ{#oxWjc5kGAV5P|;6
zPs1_2$z0;zTW5D)$GuDD0}FoA+(fg_$G(&$39@N>4;O(2wS;W$C@ed1lkT*ShQlYa
z2hpGvZDKv@yS{^&er&_4A78tq&i=-3)jUq>&}Yn<v1WF(@n;D(eGx{ue2+n?o4mh*
zl^V!|1z=A|ZZ|t`;MK+(BgIjU52ZU&%1mb|+dnE-^XIAMOt)}`8BoJA>T!IE<nA$O
z?w9)segK4luAAbeN-<ktX%y^F8Y>-FXcA+0d9uy;7$uBB%69)4HraIIBE7t99=|tT
z(XWnMJZ#TM>W>>zGG|1ar!cxKpKYc$*d$d;CN!7}lM=FiO1m$22Kq)JJ_9e{1QCfu
z{wRN$$@G#-DAz}CDnXW=LLRv0wKH9syOwKIrtnZz#ld;pCeEeWE(OqR&@h=a-w49U
zVRbH85}RC?VQL=s1O7MMT_^2F6wI(umaCqjD((%W*01-{w^APJlyHQ02yYuOE`mkv
zJ3?|Zm)L(HtkYHw1ZuAKP1AFth#z@d11mVGXJ%ib@>aL0FoW@<T9Vh%0agtrbiQ}o
zX<sv4hzGV^A^-)W>qgI&d5a3M{s`c43aDFFT`dOtFFC>1vhL6sAsyiJC@-K9>1CZb
zfPP4hCM7_dxN@eRn|_FeCfrB~n#V%ZdT$(H*QkH378D`IPK@BLYJi8^Jo1fu_+qrd
z{%3aJ<_(7;KsUaD=jYQ;HjVk8fm%q*%tM5dRY&%On#n4A&Retk?Xx?RaABwApPg!=
z`M0h-Z(Hn5hhJvhTVI&Y0!7a>>yoXtW?sQ<0-WCDXNx+vwL~k`d!^Md8f5EMU9=9!
zq?n$nageDzh?abjahv*<n%;<623*px+puc|dsd*XmaP$tsM6R`vREQ#Foa}n*))09
zJ*iH2)TeC_lX%<p9@ISnTAN6@T+hC8sgwtcX9k?U*^W86#Cp<a1qn&{wP+?tXR%|1
zqi(^?$!_g;&*V(B&59s<jYmxT&D5C>iZhIta>tcjB9w7Bw$JCIcrg+)-YUgd-aPsb
zC9+Ew(%WbBa_Js?kf3u-p47z`&S71oidFWSlq4f-f9zSCFqU~MdjX#}e>MuOVP<cf
zeYzSbtk>?fXVcbUbiy$g+i#~r<#k64(4RJ5mv{%NdLvb$B!0szZJX0BJ9FzReue91
ztF~eMT)?;WP26KxG}8dNXgR1t=Dsy`-l|Iu)>j;Ko<z0kob_7}tA2kj%jWL5%@PM|
z0@r9ubis~oK(~K6p&gjcCv~rv!@e3VsD(VWWJ?rbhw5H-%_4wL0Gk&%UNpXQlIap~
zAaG?|_vhN@E|DY_U9xVT^>1vA%`F2h3jL4|XCPzJY6TYAo@crUx2GB+7_RHb>R!M1
z>)i@tO?-3H1E$5ruLg?o0;$3PEuqZPrv%Ez=Rv33gorxNweHrJ;2XHQ#bYw2d*<EV
z8}G|EH4oWRcJ|=KXs-lcDhPe=^r6T*sDDJU$baXA)6;fE9bq6O$M8sy!AvX_HQi{u
z3p|5-Hveb>Xt~CeR+xB(@tvddLLD8BJA+g&mMi7yFfRL+V!GQV7>JiLF@q8o)H{@?
z{gGH75Wbuy(38Ip?kY9X4C{TCEOwg3WW@8p6UP&}&~V{J0R0eOV0Mi{AKAS<;&GIm
zcHY3q0BlcO1@RP9Ol(qQq7Qd3dYNq}ZTlE(MI|8(Qq*ms<Ylr)*4xHGtED?U=TzL7
z%c^}1^h2LkmBDSrtMA9!7_P)(Ihik~%-o6!w=)PK7GJC{+WI;+^Ui6iXB(u29O&z;
z&(l+htt44Dg???QcB)9xEb!{Ozf^R;2P)cB5*fH6>&QCv$Q!nLdEOlCaLZY}z{P*u
z{VmdYgJn`q>=wH7PLfvX=<N3!*7^J0(|bw)IltT<qX@++&&-Rk!kE?0_QX_qutt}y
zmy@=w#zw~Ar*N=TgNMU7dVm%@{I+LT643e#VEI!?0|U~B%WG8L$!0$)``DRxt(xOb
z<fYje<;EJI><2lUWl1&$@9iwQ1240(KaD4<!5=Sa+nTge3P*e!2sZi(V**8cjQX&$
zut)ng6=3{14r@_--^;kf&oku<$@Rkse4$1V^`wD!PNcduk5V)$i!u<H6QM!8sF}~`
zL-7NUn_&;5Emq|0aaC5VYG)*yCv8eCKlI_(UzHooYH4=(`t7ezvpDKKah}XCKsvM#
z%FA>R936}X!RLVA2J@I>@w;C#^r{<*F>%Mvj%A|$q?9ieBP*oD5{}AOnazE>vO?5d
zYc+N{y10`G!lK%SlEBZ*A#WW(my)AHjy72GHU9KKAqm1~RSKz{tu|Ub56kEJ@%g!X
z6U#e^=>aoc2*+rE?QF4%pgen&pMHa=LaGxtB;c9N>5Qx^$alZUt|Rl?1<C=;Ir2ST
zjNzwx<`^(4^D7>33{6S;=L^y0DLr<-GID-Een=)s8A^F?B6jQ=pI@sD(F|teGsrK)
zkq=tv32Qq=X1xy@L$f3v#&YX?=1^28nj#Vgeb2e-TmwJSzuxxL?9_{8u~pSI5<YVK
zlbY6NQ}jbjTY_u#!+wXl7#0B<q12kb<`Wn@3}7nhe5F>s%-q|1ynPQ(zxGWqXuQfS
zbdSbult4CmOGO!zZ$9x2Ws@Nz$*9<PHkI36V%GWTh}5m?f^LR}P}u#Q;A~*Ir&T~-
zPK|@x2Li)Dh+CL|Ha|iRT^$2gj#~_}FCO&e$|x_|(!tyTbv>~{dQ+*an8%x3Oxcj0
zq8U)Ylkhs{-cy-%&XLc2$Nhw<JcB2D2<v-FT*kUgGXF2^Ls7MnS(F^&lh3oVaH%rq
z?ZRCQ$cg+#z-{sw!M!!oUK=)0Lr7_~?{hvY)|=?%x3Bimlv?EwS0fF6rB9NQr-Rjp
zf?HocW)`Y?)|8$FK6hJAVx%!ZE!^V(k7{<s-4q3zU1WdYG`{(BdQGn6yv~TQWy-~H
z7Kl9GuZjd6=Y^+9*A;nKAiFico&oB85ekBvolgKtP!gofMMoh?YfFjPLK#u&IncX+
zI3#KJ@(92Z`g1SVGI6`8Ye8#Hxi(QjE}g+4M4o|_@T<rS{f)47(7zqZF%QUqa}I=~
z)r4a`1J2aX|JZe75DZ&2175dPRroNd)jK?synG_iO^|sJl;bV3qlEd?ySB?6ssMD*
z7D4!p<SK`bFA7@EnKLyg%u`9ZyMBAPDv!5%`-{p?Yy4zAfQRIpDM3+IgpdAVrm+qg
z7Ke(i_H-JbG_yvJ+Smpf(>beKF;o0nh>wZyGPiFl5??<?kjcbSYv{diC}FPk*kC7N
z?}3zUB(%8*he}&Zl=m+1z<&)+_~=R%pBqR!&1mv7><PdvMfE>|dHE6j09IZ64b0z{
z(wYkQyMEf=024=oo!nqp)<n!rPEFy`vRfvz%DL)n76E5>tWO6v=)Q`t_armAQO><@
zQDE!btzbo?SyL{b%&s!0Zg^OPY}@$Kj7Qu)OA-bKr3aa%K^W2&XAI7~gU5O;jgBbG
zIwnIsSCNSVJ4;{fW3O%TN*R+!IkWu9f&p}zycEZEQQ0~7RRutKgWU?)KdI1>-Pv#r
zM9Mj@sVZCZbD_}87e7i0@=c#IZhL4hP0|zA*B$>sDh0){QAWyFq)43e`%k*SxXrQ5
zo)}o(IadR&2obsuvnb;@G0kW4ZzE%^O=f;^8_gTuj`x*|d_zxq-7UZ&!)TY()i=?E
zF?#MkjCgsds<^wes*i-UMpZ6a@Q0zF>p@FpR!g}^*F8J2+nA9eTtwy6_k|?U0jX@u
zyTN>bwe<D-T1{X?56;<r@hLxV_UR-1ea!rB@Ih>#b+fPM;->H{QkJMaWN?oi;8fmu
zPsf@xbMIPE{x^qEqnw|yM)-r>6(&#7D>B`~qBg48JFZ6Nx!{j_ksnlL?FE>cc0h-Z
z#;(`MD2qhhG$m?(jIjMV;%T(zH@*@66*p4{!U<!RhFmMcP)Pf!qIA1wH?9~8yTkN-
zP9?a!D^1L?+$CpYQ<J^15OF#3yl0WSD!foyy-KfcvYj*QUW%@Fq~@5Na#FmG9NP1H
zs$brw11<-V;AP`z`xZ*;8z&$%-ykTXz)1QdC)gfEPEYM$k%N#MqJx5nto&u2Zwj<6
z2b>XU&9|0_>0UZf6~SXLPz+fp%|;+kh$irj&a+_W2Uix`+;Pk{Z)tPI(g-h$lUJxK
zDlC^X_N!J_ebf5Y+C%q+0L`YW?P96Ra{=X}qPrGh_7=o^L(|4Mgvz7qcd`nGzTWrQ
z>ky~3h*teF{OA{gVFGQvW_Wew(VJ>hw{=xL_smfr%~^4}N#lek5K32@nno7-u`W^!
zsAOE&5bXpJi7p*-4|!`)T{v8@_|3>qQBGcuJ;k>gS1Ked>mk;V=sG3I7Na#cvGPJj
zzRg%mSHaDmufYp5n7X-l7YT_7uBzmc#WdN^dpXrwTG-X4a)$n)DOA1e?nl|l>LoXS
z#3<O8s@qDXdnED~B{uY=O3RT8Gq4pt^St2|0=mU}MoAtOQS6IgdkRuOi1aBWsvZga
z(j~+G!0LE3H)V4ap=0ffUuXtZ10V0la#Y$Fd_-!42^Q>fHMaGdE~t<fO?|IY<K+o)
zgg}28$n4#`hSh;G->Pv%PYpXvnAPJH+x`7`E2)W~1VG_sNJaigsn_I*n;iGYzkvgG
z4Hnud5~FXZ<tkMq8G3z3y%L=8g(~sgpv=fzgeK?!zYQz(ZrKusDta6(X8Fe*2NXZ;
zY&#7$q3K$_uH7`DirdFI;WE}8AC4wyI}P5>tNYdwPZu1~wp8W&6?Ho$>&62PIj3J2
z(>(eriz6_3^=$jU)pIb7Hlx0#eYDDcxhGdD`RcL2Q+K8(we{*q0;=at2~_b*H-j5_
z{Ns-cN0+pYK|v>wKTO4FukcbOM%k7$H2-h$<d5aQ!||_&5T&`%mi6H7g@kam-<0u4
z_&P>Az|wLx^#iN&)gv+JPt)J7@_u?sf7_l>-|BSiG_#p_?W^G5&`9m^UGOUdh@QEM
z$U^^ESD{DEd!E_r@*3R)Cl|5bCCR_;?yuH-OWIt~A{T3v8^~oiwb9deZKKO3P<;sc
z(a_u5xUERd{&2gAT9N#E&hp#HBa1HH<t^^S)Z0QKqr<^x#uENiKL33fp)*v+bGQ45
zTtY$xmCsjo1uK747cZkr`<q#|)CvJ~xUKB^HaA2|^<O>ru|W8R(NFo=5|@8Rz`yX!
z-$xFV<h%3Qh8@SCdy<CP<}xjM0ak2My<Ifg=H)c3QqyzlKRclws8y0y<<Yzh(J9`1
z!*Odz?$qmZ|Fqy;D3uJ{ezkjrx;nB+>+*K4E(Fh}=k**X;@J&;<gpCz)TJUl0^h^m
zkDpsiD&q!M3D}joZgGutkk4kG|Ipi2HFh<|q1%E&2KgzDRO50$HR=lf=7s(1e#4Z_
zPEyvvBoij!yr;Dz<r2Wc7bFp&?xWSc#;!?MLcz}L&FnE`p7OZtaas9n;~`u9bJnsq
z0c;9M)qA9rO^vQCz*y9-*$;?jj9|0K>>e`6v38>)Za!{a$}eho4w}*2Ox)SYdmlf0
zQ(nV;f=hvS>$GP0%hFW%V%m0$Xy(9`VeFZh49Ao|X4go3@hXiWU4pTFA?EP+TJy6~
zD24W7g35yZvi|0~u+y1zlL3TC**$;r2I-||ai4Nu8!vq|V60dmU7M1Dw;E0v`K#}p
zJC}LNUp-=zqiYSYt5M&Q@}=2zP#JtcM&J!EO|6+N+SG6pK(~{KJM}~2o`#T8$}HNn
zC?Wu2YEFdBP@bEd$vj2Dbu^RUy?5(AR246+h3427mdI|<`{Y2YR_9XX>=vsls0&no
zg+Nzm%X1T^GrC&Q{ccIrHGwCqdEfTb{z{y_S4X9%gIc`+ef$YHOpeExG4Hd&KZ7T*
zk+w_Ud2E^^uF-n(n3Bdd_15l@;?HOWhL~`_`y3b2^*VJG{k^&Sts>fcOk<32a9}yH
zcevPNFcI{1yu#51HqpF3HoaFI&A^m$U38Cx-{JQY+a=HJNcpkZZSJ_E5LY`9CtlAR
zGIrZ`i%eJ-f!lRMrXKpMx6%du{<6-J4N%{cGvN26P<Bc9wX*lG9B%FT2j4YXg0fdD
z&nj6v01_Z)n^>Bp4v@1=9Z+#Uwq5eq?E>q-9d*Ja)0x{2{rQh~1;MfaPPmo3i2R==
zzav`z_k8%Lw|=*N9HqUVV&VXgr2DV!{~c|peZ-%mrtkluXP38ZX+rpa`~d&65yxn(
z)Q^SQj7^-;Jp$l=YcSO?Az7*!Z3121|NE`4?u;?FTzw*28^jX$zjaF;HylVcqdZKK
z``@|jFV{SjrD8y0Psy~#zj5zB+!$y<h4Lr=@8&=L_<uM5Eyjgp0}tuMOfCJFi1LJE
P)Q`5Nu14wIXF>k~CVF@X

literal 0
HcmV?d00001


From d9ea2d6e27d407a3480d1180b6abd1257e723877 Mon Sep 17 00:00:00 2001
From: Bob Killen <bobkillen@google.com>
Date: Tue, 20 Apr 2021 10:15:13 -0400
Subject: [PATCH 595/788] Fix metrics stability images

---
 .../{2021-04-23-metrics-stability-hits-ga.md => index.md}         | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/en/blog/_posts/2021-04-23-metrics-stability-ga/{2021-04-23-metrics-stability-hits-ga.md => index.md} (100%)

diff --git a/content/en/blog/_posts/2021-04-23-metrics-stability-ga/2021-04-23-metrics-stability-hits-ga.md b/content/en/blog/_posts/2021-04-23-metrics-stability-ga/index.md
similarity index 100%
rename from content/en/blog/_posts/2021-04-23-metrics-stability-ga/2021-04-23-metrics-stability-hits-ga.md
rename to content/en/blog/_posts/2021-04-23-metrics-stability-ga/index.md

From 25066196e38a4fc7a09a9a1f4e7f2520a397d437 Mon Sep 17 00:00:00 2001
From: Vlad Romanenko <vlad-ro@users.noreply.github.com>
Date: Tue, 20 Apr 2021 17:12:43 +0100
Subject: [PATCH 596/788] Fix broken link to 'debugging service'

---
 .../docs/tasks/debug-application-cluster/debug-application.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/debug-application-cluster/debug-application.md b/content/en/docs/tasks/debug-application-cluster/debug-application.md
index f927ba5e5b..477c9b8248 100644
--- a/content/en/docs/tasks/debug-application-cluster/debug-application.md
+++ b/content/en/docs/tasks/debug-application-cluster/debug-application.md
@@ -144,7 +144,7 @@ Verify that the pod's `containerPort` matches up with the Service's `targetPort`
 
 #### Network traffic is not forwarded
 
-Please see [debugging service](/docs/tasks/debug-application-cluster/debug-service.md) for more information.
+Please see [debugging service](/docs/tasks/debug-application-cluster/debug-service/) for more information.
 
 ## {{% heading "whatsnext" %}}
 

From 4f319fd5ab0ef41a1110ec5ef4aedb403e4b3fad Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mauricio=20V=C3=A1squez?= <mauricio@kinvolk.io>
Date: Tue, 20 Apr 2021 13:42:25 -0500
Subject: [PATCH 597/788] Fix requirements for label value
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Value *can* indeed be empty.

Fixes: bd55d498df83 ("Clarify requirements for label value syntax")

Signed-off-by: Mauricio Vásquez <mauricio@kinvolk.io>
---
 .../en/docs/concepts/overview/working-with-objects/labels.md   | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/overview/working-with-objects/labels.md b/content/en/docs/concepts/overview/working-with-objects/labels.md
index 811d9fb3f7..d2a879c0a2 100644
--- a/content/en/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/en/docs/concepts/overview/working-with-objects/labels.md
@@ -53,7 +53,7 @@ If the prefix is omitted, the label Key is presumed to be private to the user. A
 The `kubernetes.io/` and `k8s.io/` prefixes are reserved for Kubernetes core components.
 
 Valid label value:
-* must be 63 characters or less (cannot be empty),
+* must be 63 characters or less (can be empty),
 * must begin and end with an alphanumeric character (`[a-z0-9A-Z]`),
 * could contain dashes (`-`), underscores (`_`), dots (`.`), and alphanumerics between.
 
@@ -237,4 +237,3 @@ selector:
 
 One use case for selecting over labels is to constrain the set of nodes onto which a pod can schedule.
 See the documentation on [node selection](/docs/concepts/scheduling-eviction/assign-pod-node/) for more information.
-

From 8a3d7acf03a9daf98cda2e7eacb131e14bf7c647 Mon Sep 17 00:00:00 2001
From: Shihang Zhang <zshihang@google.com>
Date: Tue, 20 Apr 2021 11:46:17 -0700
Subject: [PATCH 598/788] update doc for BoundServiceAccountTokenVolume

---
 .../service-accounts-admin.md                 | 75 +++++++++++--------
 1 file changed, 45 insertions(+), 30 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/service-accounts-admin.md b/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
index 4aaf6da0a2..040eb31bc7 100644
--- a/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
+++ b/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
@@ -1,23 +1,24 @@
 ---
 reviewers:
-- bprashanth
-- davidopp
-- lavalamp
-- liggitt
+  - bprashanth
+  - davidopp
+  - lavalamp
+  - liggitt
 title: Managing Service Accounts
 content_type: concept
 weight: 50
 ---
 
 <!-- overview -->
+
 This is a Cluster Administrator guide to service accounts. You should be familiar with
 [configuring Kubernetes service accounts](/docs/tasks/configure-pod-container/configure-service-account/).
 
-Support for authorization and user accounts is planned but incomplete.  Sometimes
+Support for authorization and user accounts is planned but incomplete. Sometimes
 incomplete features are referred to in order to better describe service accounts.
 
-
 <!-- body -->
+
 ## User accounts versus service accounts
 
 Kubernetes distinguishes between the concept of a user account and a service account
@@ -53,37 +54,51 @@ It is part of the API server.
 It acts synchronously to modify pods as they are created or updated. When this plugin is active
 (and it is by default on most distributions), then it does the following when a pod is created or modified:
 
-  1. If the pod does not have a `ServiceAccount` set, it sets the `ServiceAccount` to `default`.
-  1. It ensures that the `ServiceAccount` referenced by the pod exists, and otherwise rejects it.
-  1. If the pod does not contain any `ImagePullSecrets`, then `ImagePullSecrets` of the `ServiceAccount` are added to the pod.
-  1. It adds a `volume` to the pod which contains a token for API access.
-  1. It adds a `volumeSource` to each container of the pod mounted at `/var/run/secrets/kubernetes.io/serviceaccount`.
+1. If the pod does not have a `ServiceAccount` set, it sets the `ServiceAccount` to `default`.
+1. It ensures that the `ServiceAccount` referenced by the pod exists, and otherwise rejects it.
+1. It adds a `volume` to the pod which contains a token for API access if neither the ServiceAccount `automountServiceAccountToken` nor the Pod's `automountServiceAccountToken` is set to `false`.
+1. It adds a `volumeSource` to each container of the pod mounted at `/var/run/secrets/kubernetes.io/serviceaccount`, if the previous step has created a volume for ServiceAccount token.
+1. If the pod does not contain any `ImagePullSecrets`, then `ImagePullSecrets` of the `ServiceAccount` are added to the pod.
 
 #### Bound Service Account Token Volume
+
 {{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 When the `BoundServiceAccountTokenVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled, the service account admission controller will
-add a projected service account token volume instead of a secret volume. The service account token will expire after 1 hour by default or the pod is deleted. See more details about [projected volume](/docs/tasks/configure-pod-container/configure-projected-volume-storage/).
+add the following projected volume instead of a secret volume for the non-expiring service account token created by Token Controller.
 
-This feature depends on the `RootCAConfigMap` feature gate enabled which publish a "kube-root-ca.crt" ConfigMap to every namespace. This ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver.
-1. If the pod does not have a `serviceAccountName` set, it sets the
-   `serviceAccountName` to `default`.
-1. It ensures that the `serviceAccountName` referenced by the pod exists, and
-   otherwise rejects it.
-1. If the pod does not contain any `imagePullSecrets`, then `imagePullSecrets`
-   of the ServiceAccount referenced by `serviceAccountName` are added to the pod.
-1. It adds a `volume` to the pod which contains a token for API access
-   if neither the ServiceAccount `automountServiceAccountToken` nor the Pod's
-   `automountServiceAccountToken` is set to `false`.
-1. It adds a `volumeSource` to each container of the pod mounted at
-   `/var/run/secrets/kubernetes.io/serviceaccount`, if the previous step has
-   created a volume for ServiceAccount token.
+```yaml
+- name: kube-api-access-c5cs8
+  projected:
+    defaultMode: 420 # 0644
+    sources:
+      - serviceAccountToken:
+          expirationSeconds: 3600
+          path: token
+      - configMap:
+          items:
+            - key: ca.crt
+              path: ca.crt
+          name: kube-root-ca.crt
+      - downwardAPI:
+          items:
+            - fieldRef:
+                apiVersion: v1
+                fieldPath: metadata.namespace
+              path: namespace
+```
 
-You can migrate a service account volume to a projected volume when
-the `BoundServiceAccountTokenVolume` feature gate is enabled.
-The service account token will expire after 1 hour or the pod is deleted. See
-more details about
-[projected volume](/docs/tasks/configure-pod-container/configure-projected-volume-storage/).
+This projected volume consists of three sources:
+
+1. A ServiceAccountToken acquired from kube-apiserver via TokenRequest API. It will expire after 1 hour by default or the pod is deleted. It is bound to the pod and has kube-apiserver as the audience.
+1. A ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver. This feature depends on the `RootCAConfigMap` feature gate enabled which publish a "kube-root-ca.crt" ConfigMap to every namespace.
+1. A DownwardAPI that references the namespace of the pod.
+
+See more details about [projected volume](/docs/tasks/configure-pod-container/configure-projected-volume-storage/).
+
+You can manually migrate a secret-based service account volume to a projected volume when
+the `BoundServiceAccountTokenVolume` feature gate is not enabled by adding the above
+projected volume to the pod spec. However, `RootCAConfigMap` needs to be enabled.
 
 ### Token Controller
 

From f7a3863970dc2a80108038b4a691b5e76fd0f56b Mon Sep 17 00:00:00 2001
From: zacharysarah <zach@corleissen.com>
Date: Tue, 20 Apr 2021 14:25:51 -0700
Subject: [PATCH 599/788] Going emeritus, remove myself from WGs and SIGs

---
 OWNERS                                     | 2 +-
 OWNERS_ALIASES                             | 2 --
 content/en/docs/contribute/localization.md | 1 -
 3 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/OWNERS b/OWNERS
index f352793ec1..9b12305b4b 100644
--- a/OWNERS
+++ b/OWNERS
@@ -11,7 +11,7 @@ emeritus_approvers:
 # - jaredbhatti, commented out to disable PR assignments
 # - steveperry-53, commented out to disable PR assignments
 - stewart-yu 
-- zacharysarah
+# - zacharysarah, commented out to disable PR assignments
 
 labels:
 - sig/docs
diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 18e11bcfe9..b958f84bac 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -3,7 +3,6 @@ aliases:
     - castrojo
     - kbarnard10
     - onlydole
-    - zacharysarah
     - mrbobbytables
   sig-docs-blog-reviewers: # Reviewers for blog content
     - castrojo
@@ -33,7 +32,6 @@ aliases:
     - sftim
     - steveperry-53
     - tengqm
-    - zacharysarah
     - zparnold
   sig-docs-en-reviews: # PR reviews for English content
     - bradtopol
diff --git a/content/en/docs/contribute/localization.md b/content/en/docs/contribute/localization.md
index ad0b9420c5..eafc241d40 100644
--- a/content/en/docs/contribute/localization.md
+++ b/content/en/docs/contribute/localization.md
@@ -4,7 +4,6 @@ content_type: concept
 approvers:
 - remyleone
 - rlenferink
-- zacharysarah
 weight: 50
 card:
   name: contribute

From 2cdf96e165eb1ec632d39725f0d1288fa79f9db9 Mon Sep 17 00:00:00 2001
From: John Gardiner Myers <jgmyers@proofpoint.com>
Date: Tue, 20 Apr 2021 17:22:46 -0700
Subject: [PATCH 600/788] Remove obsolete caution about cordoning

As of Kubernetes 1.19, unschedulable nodes are no longer removed from load balancers
---
 content/en/docs/concepts/architecture/nodes.md | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/content/en/docs/concepts/architecture/nodes.md b/content/en/docs/concepts/architecture/nodes.md
index 30dc0d4af9..c583098693 100644
--- a/content/en/docs/concepts/architecture/nodes.md
+++ b/content/en/docs/concepts/architecture/nodes.md
@@ -309,13 +309,6 @@ The node controller also adds {{< glossary_tooltip text="taints" term_id="taint"
 corresponding to node problems like node unreachable or not ready. This means
 that the scheduler won't place Pods onto unhealthy nodes.
 
-
-{{< caution >}}
-`kubectl cordon` marks a node as 'unschedulable', which has the side effect of the service
-controller removing the node from any LoadBalancer node target lists it was previously 
-eligible for, effectively removing incoming load balancer traffic from the cordoned node(s).
-{{< /caution >}}
-
 ### Node capacity
 
 Node objects track information about the Node's resource capacity: for example, the amount

From 8924074b3722bab872e0202d684b33dc5e9a8e52 Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Tue, 20 Apr 2021 22:00:11 -0300
Subject: [PATCH 601/788] Add default storageclass annotation (#27419)

* Add default storageclass annotation

* Add review suggestions

Co-authored-by: Rey Lejano <52760880+reylejano@users.noreply.github.com>

Co-authored-by: Rey Lejano <52760880+reylejano@users.noreply.github.com>
---
 content/en/docs/reference/labels-annotations-taints.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md
index fff32791c7..2d74362913 100644
--- a/content/en/docs/reference/labels-annotations-taints.md
+++ b/content/en/docs/reference/labels-annotations-taints.md
@@ -224,6 +224,14 @@ When a single IngressClass resource has this annotation set to `"true"`, new Ing
 
 {{< note >}} Starting in v1.18, this annotation is deprecated in favor of `spec.ingressClassName`. {{< /note >}}
 
+## storageclass.kubernetes.io/is-default-class
+
+Example: `storageclass.kubernetes.io/is-default-class=true`
+
+Used on: StorageClass
+
+When a single StorageClass resource has this annotation set to `"true"`, new Physical Volume Claim resource without a class specified will be assigned this default class.
+
 ## alpha.kubernetes.io/provided-node-ip
 
 Example: `alpha.kubernetes.io/provided-node-ip: "10.0.0.1"`

From 2fed8ee042edeb2fa069a5315c434d6c9add2c8a Mon Sep 17 00:00:00 2001
From: Miciah Masters <miciah.masters@gmail.com>
Date: Tue, 20 Apr 2021 22:10:07 -0400
Subject: [PATCH 602/788] taint-and-toleration: Delete out-of-disk, add pid

Delete a reference to the "node.kubernetes.io/out-of-disk" taint, which
Kubernetes 1.14 deleted (commit 8f87e71e0cc3a2b714291ecd7210dfd8f4de33d6).

Document that the DaemonSet controller adds a toleration for the
"node.kubernetes.io/pid-pressure" taint since Kubernetes 1.14 (commit
ad6e3617d3e92f47fa0874ca258ffe31d1d2ff4c).

* content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md:
Delete references to "node.kubernetes.io/out-of-disk" and document that the
DaemonSet adds a toleration for "node.kubernetes.io/pid-pressure".
---
 .../docs/concepts/scheduling-eviction/taint-and-toleration.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md b/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md
index 079024c9d6..946e858a02 100644
--- a/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md
+++ b/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md
@@ -210,9 +210,9 @@ are true. The following taints are built in:
    the NodeCondition `Ready` being "`False`".
  * `node.kubernetes.io/unreachable`: Node is unreachable from the node
    controller. This corresponds to the NodeCondition `Ready` being "`Unknown`".
- * `node.kubernetes.io/out-of-disk`: Node becomes out of disk.
  * `node.kubernetes.io/memory-pressure`: Node has memory pressure.
  * `node.kubernetes.io/disk-pressure`: Node has disk pressure.
+ * `node.kubernetes.io/pid-pressure`: Node has PID pressure.
  * `node.kubernetes.io/network-unavailable`: Node's network is unavailable.
  * `node.kubernetes.io/unschedulable`: Node is unschedulable.
  * `node.cloudprovider.kubernetes.io/uninitialized`: When the kubelet is started
@@ -275,7 +275,7 @@ tolerations to all daemons, to prevent DaemonSets from breaking.
 
   * `node.kubernetes.io/memory-pressure`
   * `node.kubernetes.io/disk-pressure`
-  * `node.kubernetes.io/out-of-disk` (*only for critical pods*)
+  * `node.kubernetes.io/pid-pressure` (1.14 or later)
   * `node.kubernetes.io/unschedulable` (1.10 or later)
   * `node.kubernetes.io/network-unavailable` (*host network only*)
 

From 184ca963308785ef90a8076fec09da8c7e9b5fd6 Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Wed, 21 Apr 2021 15:04:32 +0800
Subject: [PATCH 603/788] [zh]update cloud-controller.md

---
 .../zh/docs/concepts/architecture/cloud-controller.md  | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/concepts/architecture/cloud-controller.md b/content/zh/docs/concepts/architecture/cloud-controller.md
index 7d84826583..33d660b243 100644
--- a/content/zh/docs/concepts/architecture/cloud-controller.md
+++ b/content/zh/docs/concepts/architecture/cloud-controller.md
@@ -35,7 +35,7 @@ mechanism that allows different cloud providers to integrate their platforms wit
 <!--
 ## Design
 
-![Kubernetes components](/images/docs/components-of-kubernetes.png)
+![Kubernetes components](/images/docs/components-of-kubernetes.svg)
 
 The cloud controller manager runs in the control plane as a replicated set of processes
 (usually, these are containers in Pods). Each cloud-controller-manager implements
@@ -44,7 +44,7 @@ process.
 -->
 ## 设计  {#design}
 
-![Kubernetes 组件](/images/docs/components-of-kubernetes.png)
+![Kubernetes 组件](/images/docs/components-of-kubernetes.svg)
 
 云控制器管理器以一组多副本的进程集合的形式运行在控制面中，通常表现为 Pod
 中的容器。每个 `cloud-controller-manager` 在同一进程中实现多个
@@ -126,7 +126,7 @@ Route 控制器负责适当地配置云平台中的路由，以便 Kubernetes 
 <!--
 ### Service controller
 
-{< glossary_tooltip text="Services" term_id="service" >}} integrate with cloud
+{{< glossary_tooltip text="Services" term_id="service" >}} integrate with cloud
 infrastructure components such as managed load balancers, IP addresses, network
 packet filtering, and target health checking. The service controller interacts with your
 cloud provider's APIs to set up load balancers and other infrastructure components
@@ -314,11 +314,15 @@ rules:
 [Cloud Controller Manager Administration](/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager)
 has instructions on running and managing the cloud controller manager.
 
+To upgrade a HA control plane to use the cloud controller manager, see [Migrate Replicated Control Plane To Use Cloud Controller Manager](/docs/tasks/administer-cluster/controller-manager-leader-migration/).
+
 Want to know how to implement your own cloud controller manager, or extend an existing project?
 -->
 [云控制器管理器的管理](/zh/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager)
 给出了运行和管理云控制器管理器的指南。
 
+要升级 HA 控制平面以使用云控制器管理器，请参见 [将复制的控制平面迁移以使用云控制器管理器](/zh/docs/tasks/administer-cluster/controller-manager-leader-migration/)
+
 想要了解如何实现自己的云控制器管理器，或者对现有项目进行扩展么？
 
 <!--

From 3711ce6d5b0b3a223bee3a1b04135d3c33308711 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Wed, 21 Apr 2021 12:26:07 +0000
Subject: [PATCH 604/788] Copy docs/tasks/job/_index.md for the translation

---
 content/ja/docs/tasks/job/_index.md | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 content/ja/docs/tasks/job/_index.md

diff --git a/content/ja/docs/tasks/job/_index.md b/content/ja/docs/tasks/job/_index.md
new file mode 100644
index 0000000000..9e41e241c1
--- /dev/null
+++ b/content/ja/docs/tasks/job/_index.md
@@ -0,0 +1,6 @@
+---
+title: "Run Jobs"
+description: Run Jobs using parallel processing.
+weight: 50
+---
+

From 248e051a9418b408698a4c7992117e4b4a12b6f2 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Wed, 21 Apr 2021 12:33:44 +0000
Subject: [PATCH 605/788] Translate tasks/job/_index.md into Japanese

---
 content/ja/docs/tasks/job/_index.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/job/_index.md b/content/ja/docs/tasks/job/_index.md
index 9e41e241c1..bde073017b 100644
--- a/content/ja/docs/tasks/job/_index.md
+++ b/content/ja/docs/tasks/job/_index.md
@@ -1,6 +1,6 @@
 ---
-title: "Run Jobs"
-description: Run Jobs using parallel processing.
+title: "Jobの実行"
+description: 並列処理を使用してJobを実行します。
 weight: 50
 ---
 

From 87dd022604b881776a72f40e9c4a508faed89ce0 Mon Sep 17 00:00:00 2001
From: Shihang Zhang <zshihang@google.com>
Date: Wed, 21 Apr 2021 08:14:28 -0700
Subject: [PATCH 606/788] Apply suggestions from code review

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
---
 .../access-authn-authz/service-accounts-admin.md       | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/service-accounts-admin.md b/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
index 040eb31bc7..ea04f462b1 100644
--- a/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
+++ b/content/en/docs/reference/access-authn-authz/service-accounts-admin.md
@@ -65,10 +65,10 @@ It acts synchronously to modify pods as they are created or updated. When this p
 {{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 When the `BoundServiceAccountTokenVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled, the service account admission controller will
-add the following projected volume instead of a secret volume for the non-expiring service account token created by Token Controller.
+add the following projected volume instead of a Secret-based volume for the non-expiring service account token created by Token Controller.
 
 ```yaml
-- name: kube-api-access-c5cs8
+- name: kube-api-access-<random-suffix>
   projected:
     defaultMode: 420 # 0644
     sources:
@@ -90,11 +90,11 @@ add the following projected volume instead of a secret volume for the non-expiri
 
 This projected volume consists of three sources:
 
-1. A ServiceAccountToken acquired from kube-apiserver via TokenRequest API. It will expire after 1 hour by default or the pod is deleted. It is bound to the pod and has kube-apiserver as the audience.
-1. A ConfigMap contains a CA bundle used for verifying connections to the kube-apiserver. This feature depends on the `RootCAConfigMap` feature gate enabled which publish a "kube-root-ca.crt" ConfigMap to every namespace.
+1. A ServiceAccountToken acquired from kube-apiserver via TokenRequest API. It will expire after 1 hour by default or when the pod is deleted. It is bound to the pod and has kube-apiserver as the audience.
+1. A ConfigMap containing a CA bundle used for verifying connections to the kube-apiserver. This feature depends on the `RootCAConfigMap` feature gate being enabled, which publishes a "kube-root-ca.crt" ConfigMap to every namespace. `RootCAConfigMap` is enabled by default in 1.20, and always enabled in 1.21+.
 1. A DownwardAPI that references the namespace of the pod.
 
-See more details about [projected volume](/docs/tasks/configure-pod-container/configure-projected-volume-storage/).
+See more details about [projected volumes](/docs/tasks/configure-pod-container/configure-projected-volume-storage/).
 
 You can manually migrate a secret-based service account volume to a projected volume when
 the `BoundServiceAccountTokenVolume` feature gate is not enabled by adding the above

From 2d528707cd50d0f2533b730d03076676d1cd771d Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <ax3shannonkularathna@gmail.com>
Date: Wed, 21 Apr 2021 17:12:27 -0400
Subject: [PATCH 607/788] Correct v1.21 to v1.21.0

---
 .../tasks/administer-cluster/kubeadm/configure-cgroup-driver.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md b/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
index df4fbcf273..9ed45bd07f 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
@@ -45,7 +45,7 @@ A minimal example of configuring the field explicitly:
 # kubeadm-config.yaml
 kind: ClusterConfiguration
 apiVersion: kubeadm.k8s.io/v1beta2
-kubernetesVersion: v1.21
+kubernetesVersion: v1.21.0
 ---
 kind: KubeletConfiguration
 apiVersion: kubelet.config.k8s.io/v1beta1

From 1035d3c13e0ca5d94ab050a97ec12ed8f5501bc2 Mon Sep 17 00:00:00 2001
From: David Porter <porterdavid@google.com>
Date: Wed, 21 Apr 2021 14:36:45 -0700
Subject: [PATCH 608/788] Minor fixes for graceful node shutdown beta blog

---
 .../en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md b/content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md
index 7f00300e88..2c16967472 100644
--- a/content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md
+++ b/content/en/blog/_posts/2021-04-21-Graceful-Node-Shutdown-Beta.md
@@ -5,7 +5,7 @@ date: 2021-04-21
 slug: graceful-node-shutdown-beta
 ---
 
-**Authors:** David Porter (Google), Murnal Patel (Red Hat), and Tim Bannister (The Scale Factory)
+**Authors:** David Porter (Google), Mrunal Patel (Red Hat), and Tim Bannister (The Scale Factory)
 
 Graceful node shutdown, beta in 1.21, enables kubelet to gracefully evict pods during a node shutdown.
 
@@ -74,7 +74,7 @@ Note that by default, both configuration options described above, `ShutdownGrace
 ## How can I learn more?
 * Read the [documentation](/docs/concepts/architecture/nodes/#graceful-node-shutdown)
 * Read the enhancement proposal, [KEP 2000](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2000-graceful-node-shutdown)
-* View the [code](https://github.com/kubernetes/kubernetes/tree/release-1.20/pkg/kubelet/nodeshutdown)
+* View the [code](https://github.com/kubernetes/kubernetes/tree/release-1.21/pkg/kubelet/nodeshutdown)
 
 ## How do I get involved?
 Your feedback is always welcome! SIG Node meets regularly and can be reached via [Slack](https://slack.k8s.io) (channel `#sig-node`), or the SIG's [mailing list](https://github.com/kubernetes/community/tree/master/sig-node#contact)

From 1878107fa20e5810f6e1e62a5596c02979c0bd27 Mon Sep 17 00:00:00 2001
From: Justin Bertrand <justin.m.bertrand@gmail.com>
Date: Wed, 21 Apr 2021 17:53:13 -0400
Subject: [PATCH 609/788] fix spelling mistake

---
 content/en/docs/concepts/services-networking/ingress.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/ingress.md b/content/en/docs/concepts/services-networking/ingress.md
index e41b629f20..de4e665af1 100644
--- a/content/en/docs/concepts/services-networking/ingress.md
+++ b/content/en/docs/concepts/services-networking/ingress.md
@@ -230,7 +230,7 @@ reference additional implementation-specific configuration for this class.
 reference a namespace-specific resource for configuration of an Ingress class.
 `Scope` field defaults to `Cluster`, meaning, the default is cluster-scoped
 resource. Setting `Scope` to `Namespace` and setting the `Namespace` field
-will reference a paramters resource in a specific namespace:
+will reference a parameters resource in a specific namespace:
 
 {{< codenew file="service/networking/namespaced-params.yaml" >}}
 

From 9ae0f93af1278ceb8828d871548b07f40e023981 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Fri, 16 Apr 2021 15:06:25 +0900
Subject: [PATCH 610/788] [ko] Update outdated files in dev-1.21-ko.1 (p4)

---
 .../workloads/controllers/replicaset.md       |  48 ++++++-
 .../controllers/replicationcontroller.md      |  21 +--
 .../workloads/controllers/ttlafterfinished.md |   8 +-
 .../concepts/workloads/pods/disruptions.md    |   2 +-
 .../workloads/pods/init-containers.md         |  17 ++-
 .../concepts/workloads/pods/pod-lifecycle.md  |   4 +-
 content/ko/docs/reference/_index.md           |  33 +++--
 .../service-accounts-admin.md                 |   4 +-
 .../feature-gates.md                          | 129 +++++++++++++-----
 .../glossary/cloud-controller-manager.md      |   4 +-
 10 files changed, 198 insertions(+), 72 deletions(-)

diff --git a/content/ko/docs/concepts/workloads/controllers/replicaset.md b/content/ko/docs/concepts/workloads/controllers/replicaset.md
index 8966029620..7cf399d242 100644
--- a/content/ko/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/ko/docs/concepts/workloads/controllers/replicaset.md
@@ -222,7 +222,7 @@ pod2             1/1     Running   0          36s
 ## 레플리카셋 매니페스트 작성하기
 
 레플리카셋은 모든 쿠버네티스 API 오브젝트와 마찬가지로 `apiVersion`, `kind`, `metadata` 필드가 필요하다.
-레플리카셋에 대한 kind 필드의 값은 항상 레플리카셋이다.
+레플리카셋에 대한 `kind` 필드의 값은 항상 레플리카셋이다.
 쿠버네티스 1.9에서의 레플리카셋의 kind에 있는 API 버전 `apps/v1`은 현재 버전이며, 기본으로 활성화 되어있다. API 버전 `apps/v1beta2`은 사용 중단(deprecated)되었다.
 API 버전에 대해서는 `frontend.yaml` 예제의 첫 번째 줄을 참고한다.
 
@@ -237,7 +237,7 @@ API 버전에 대해서는 `frontend.yaml` 예제의 첫 번째 줄을 참고한
 우리는 `frontend.yaml` 예제에서 `tier: frontend`이라는 레이블을 하나 가지고 있다.
 이 파드를 다른 컨트롤러가 취하지 않도록 다른 컨트롤러의 셀렉터와 겹치지 않도록 주의해야 한다.
 
-템플릿의 [재시작 정책](/ko/docs/concepts/workloads/pods/pod-lifecycle/#재시작-정책) 필드인
+템플릿의 [재시작 정책](/ko/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy) 필드인
 `.spec.template.spec.restartPolicy`는 기본값인 `Always`만 허용된다.
 
 ### 파드 셀렉터
@@ -307,9 +307,51 @@ curl -X DELETE  'localhost:8080/apis/apps/v1/namespaces/default/replicasets/fron
 
 ### 레플리카셋의 스케일링
 
-레플리카셋을 손쉽게 스케일 업 또는 다운하는 방법은 단순히 `.spec.replicas` 필드를 업데이트 하면 된다.
+레플리카셋을 손쉽게 스케일 업 또는 다운하는 방법은 단순히 `.spec.replicas` 필드를 업데이트하면 된다.
 레플리카셋 컨트롤러는 일치하는 레이블 셀렉터가 있는 파드가 의도한 수 만큼 가용하고 운영 가능하도록 보장한다.
 
+스케일 다운할 때, 레플리카셋 컨트롤러는 스케일 다운할 파드의 
+우선순위를 정하기 위해 다음의 기준으로 가용 파드를 정렬하여 삭제할 파드를 결정한다.
+ 1. Pending 상태인 (+ 스케줄링할 수 없는) 파드가 먼저 스케일 다운된다.
+ 2. `controller.kubernetes.io/pod-deletion-cost` 어노테이션이 설정되어 있는 
+    파드에 대해서는, 낮은 값을 갖는 파드가 먼저 스케일 다운된다.
+ 3. 더 많은 레플리카가 있는 노드의 파드가 더 적은 레플리카가 있는 노드의 파드보다 먼저 스케일 다운된다.
+ 4. 파드 생성 시간이 다르면, 더 최근에 생성된 파드가 
+    이전에 생성된 파드보다 먼저 스케일 다운된다. 
+    (`LogarithmicScaleDown` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가 활성화되어 있으면 생성 시간이 정수 로그 스케일로 버킷화된다)
+    
+모든 기준에 대해 동등하다면, 스케일 다운할 파드가 임의로 선택된다.
+
+### 파드 삭제 비용
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+[`controller.kubernetes.io/pod-deletion-cost`](/docs/reference/labels-annotations-taints/#pod-deletion-cost) 어노테이션을 이용하여, 
+레플리카셋을 스케일 다운할 때 어떤 파드부터 먼저 삭제할지에 대한 우선순위를 설정할 수 있다.
+
+이 어노테이션은 파드에 설정되어야 하며, [-2147483647, 2147483647] 범위를 갖는다.
+이 어노테이션은 하나의 레플리카셋에 있는 다른 파드와의 상대적 삭제 비용을 나타낸다.
+삭제 비용이 낮은 파드는 삭제 비용이 높은 파드보다 삭제 우선순위가 높다.
+
+파드에 대해 이 값을 명시하지 않으면 기본값은 0이다. 음수로도 설정할 수 있다.
+유효하지 않은 값은 API 서버가 거부한다.
+
+이 기능은 알파 상태이며 기본적으로는 비활성화되어 있다. 
+kube-apiserver와 kube-controller-manager에서 `PodDeletionCost` 
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 켜서 활성화할 수 있다.
+
+{{< note >}}
+- 이 기능은 best-effort 방식으로 동작하므로, 파드 삭제 순서를 보장하지는 않는다.
+- 이 값을 자주 바꾸는 것은 피해야 한다 (예: 메트릭 값에 따라 변경). 
+apiserver에서 많은 양의 파드 업데이트를 동반하기 때문이다.
+{{< /note >}}
+
+#### 사용 예시
+한 애플리케이션 내의 여러 파드는 각각 사용률이 다를 수 있다. 스케일 다운 시, 
+애플리케이션은 사용률이 낮은 파드를 먼저 삭제하고 싶을 수 있다. 파드를 자주 
+업데이트하는 것을 피하기 위해, 애플리케이션은 `controller.kubernetes.io/pod-deletion-cost` 값을 
+스케일 다운하기 전에 1회만 업데이트해야 한다 (파드 사용률에 비례하는 값으로 설정).
+이 방식은 Spark 애플리케이션의 드라이버 파드처럼 애플리케이션이 스스로 다운스케일링을 수행하는 경우에 유효하다.
+
 ### 레플리카셋을 Horizontal Pod Autoscaler 대상으로 설정
 
 레플리카셋은
diff --git a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
index 06ce543012..db69cf921c 100644
--- a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -54,7 +54,9 @@ kubectl 명령에서 숏컷으로 사용된다.
 ```shell
 kubectl apply -f https://k8s.io/examples/controllers/replication.yaml
 ```
+
 출력 결과는 다음과 같다.
+
 ```
 replicationcontroller/nginx created
 ```
@@ -64,7 +66,9 @@ replicationcontroller/nginx created
 ```shell
 kubectl describe replicationcontrollers/nginx
 ```
+
 출력 결과는 다음과 같다.
+
 ```
 Name:        nginx
 Namespace:   default
@@ -103,14 +107,16 @@ Pods Status:    3 Running / 0 Waiting / 0 Succeeded / 0 Failed
 pods=$(kubectl get pods --selector=app=nginx --output=jsonpath={.items..metadata.name})
 echo $pods
 ```
+
 출력 결과는 다음과 같다.
+
 ```
 nginx-3ntk0 nginx-4ok8v nginx-qrm3m
 ```
 
 여기서 셀렉터는 레플리케이션컨트롤러(`kubectl describe` 의 출력에서 보인)의 셀렉터와 같고,
-다른 형식의 파일인 `replication.yaml` 의 것과 동일하다. `--output=jsonpath` 옵션은
-반환된 목록의 각 파드에서 이름을 가져오는 표현식을 지정한다.
+다른 형식의 파일인 `replication.yaml` 의 것과 동일하다. `--output=jsonpath` 은
+반환된 목록의 각 파드의 이름을 출력하도록 하는 옵션이다.
 
 
 ## 레플리케이션 컨트롤러의 Spec 작성
@@ -118,7 +124,7 @@ nginx-3ntk0 nginx-4ok8v nginx-qrm3m
 다른 모든 쿠버네티스 컨피그와 마찬가지로 레플리케이션 컨트롤러는 `apiVersion`, `kind`, `metadata` 와 같은 필드가 필요하다.
 레플리케이션 컨트롤러 오브젝트의 이름은 유효한
 [DNS 서브도메인 이름](/ko/docs/concepts/overview/working-with-objects/names/#dns-서브도메인-이름)이어야 한다.
-컨피그 파일의 동작에 관련된 일반적인 정보는 [쿠버네티스 오브젝트 관리](/ko/docs/concepts/overview/working-with-objects/object-management/)를 참고한다.
+환경설정 파일의 동작에 관련된 일반적인 정보는 [쿠버네티스 오브젝트 관리](/ko/docs/concepts/overview/working-with-objects/object-management/)를 참고한다.
 
 레플리케이션 컨트롤러는 또한 [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)도 필요하다.
 
@@ -198,7 +204,7 @@ REST API나 Go 클라이언트 라이브러리를 사용하는 경우 레플리
 
 ### 레플리케이션 컨트롤러에서 파드 격리
 
-파드는 레이블을 변경하여 레플리케이션 컨트롤러의 대상 셋에서 제거될 수 있다. 이 기술은 디버깅, 데이터 복구 등을 위해 서비스에서 파드를 제거하는데 사용될 수 있다. 이 방법으로 제거된 파드는 자동으로 교체된다 (레플리카 수가 변경되지 않는다고 가정).
+파드는 레이블을 변경하여 레플리케이션 컨트롤러의 대상 셋에서 제거될 수 있다. 이 기술은 디버깅과 데이터 복구를 위해 서비스에서 파드를 제거하는 데 사용될 수 있다. 이 방법으로 제거된 파드는 자동으로 교체된다 (레플리카 수가 변경되지 않는다고 가정).
 
 ## 일반적인 사용법 패턴
 
@@ -208,8 +214,7 @@ REST API나 Go 클라이언트 라이브러리를 사용하는 경우 레플리
 
 ### 스케일링
 
-레플리케이션컨트롤러는 `replicas` 필드를 설정하여 레플리카의 수를 늘리거나 줄인다.
-레플리카를 수동으로 또는 오토 스케일링 제어 에이전트로 관리하도록 레플리케이션컨트롤러를 구성할 수 있다.
+레플리케이션컨트롤러는 `replicas` 필드를 업데이트하여, 수동으로 또는 오토 스케일링 제어 에이전트를 통해, 레플리카의 수를 늘리거나 줄일 수 있다.
 
 ### 롤링 업데이트
 
@@ -246,7 +251,6 @@ REST API나 Go 클라이언트 라이브러리를 사용하는 경우 레플리
 
 레플리케이션 컨트롤러는 조합 가능한 빌딩-블록 프리미티브가 되도록 고안되었다. 향후 사용자의 편의를 위해 더 상위 수준의 API 및/또는 도구와 그리고 다른 보완적인 기본 요소가 그 위에 구축 될 것으로 기대한다. 현재 kubectl이 지원하는 "매크로" 작업 (실행, 스케일)은 개념 증명의 예시이다. 예를 들어 [Asgard](https://techblog.netflix.com/2012/06/asgard-web-based-cloud-management-and.html)와 같이 레플리케이션 컨트롤러, 오토 스케일러, 서비스, 정책 스케줄링, 카나리 등을 관리할 수 있다.
 
-
 ## API 오브젝트
 
 레플리케이션 컨트롤러는 쿠버네티스 REST API의 최상위 수준의 리소스이다.
@@ -261,8 +265,7 @@ API 오브젝트에 대한 더 자세한 것은
 이것은 주로 [디플로이먼트](/ko/docs/concepts/workloads/controllers/deployment/)에 의해 파드의 생성, 삭제 및 업데이트를 오케스트레이션 하는 메커니즘으로 사용된다.
 사용자 지정 업데이트 조정이 필요하거나 업데이트가 필요하지 않은 경우가 아니면 레플리카셋을 직접 사용하는 대신 디플로이먼트를 사용하는 것이 좋다.
 
-
-### 디플로이먼트 (권장되는)
+### 디플로이먼트 (권장됨)
 
 [`Deployment`](/ko/docs/concepts/workloads/controllers/deployment/)는 기본 레플리카셋과 그 파드를 업데이트하는 상위 수준의 API 오브젝트이다. 선언적이며, 서버 사이드이고, 추가 기능이 있기 때문에 롤링 업데이트 기능을 원한다면 디플로이먼트를 권장한다.
 
diff --git a/content/ko/docs/concepts/workloads/controllers/ttlafterfinished.md b/content/ko/docs/concepts/workloads/controllers/ttlafterfinished.md
index 5ed869fb57..4703b63b4a 100644
--- a/content/ko/docs/concepts/workloads/controllers/ttlafterfinished.md
+++ b/content/ko/docs/concepts/workloads/controllers/ttlafterfinished.md
@@ -6,7 +6,7 @@ weight: 70
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.12" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 TTL 컨트롤러는 실행이 완료된 리소스 오브젝트의 수명을
 제한하는 TTL (time to live) 메커니즘을 제공한다. TTL 컨트롤러는 현재
@@ -14,9 +14,9 @@ TTL 컨트롤러는 실행이 완료된 리소스 오브젝트의 수명을
 처리하며, 파드와 커스텀 리소스와 같이 실행을 완료할 다른 리소스를
 처리하도록 확장될 수 있다.
 
-알파(Alpha) 고지 사항: 이 기능은 현재 알파이고,
-kube-apiserver와 kube-controller-manager와 함께
-[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)로 `TTLAfterFinished` 를 활성화할 수 있다.
+이 기능은 현재 베타이고 기본적으로 활성화되어 있다. 
+kube-apiserver와 kube-controller-manager에서 `TTLAfterFinished` 
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 이용하여 비활성화할 수 있다.
 
 <!-- body -->
 
diff --git a/content/ko/docs/concepts/workloads/pods/disruptions.md b/content/ko/docs/concepts/workloads/pods/disruptions.md
index bcfde559cb..9d2319ae6a 100644
--- a/content/ko/docs/concepts/workloads/pods/disruptions.md
+++ b/content/ko/docs/concepts/workloads/pods/disruptions.md
@@ -89,7 +89,7 @@ weight: 60
 
 ## 파드 disruption budgets
 
-{{< feature-state for_k8s_version="v1.5" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 쿠버네티스는 자발적인 중단이 자주 발생하는 경우에도 고 가용성 애플리케이션을
 실행하는 데 도움이 되는 기능을 제공한다.
diff --git a/content/ko/docs/concepts/workloads/pods/init-containers.md b/content/ko/docs/concepts/workloads/pods/init-containers.md
index 56f59c1d30..b7a1241fc2 100644
--- a/content/ko/docs/concepts/workloads/pods/init-containers.md
+++ b/content/ko/docs/concepts/workloads/pods/init-containers.md
@@ -313,17 +313,16 @@ myapp-pod   1/1       Running   0          9m
 파드는 다음과 같은 사유로, 초기화 컨테이너들의 재-실행을 일으키는, 재시작을 수행할 수
 있다.
 
-* 사용자가 초기화 컨테이너 이미지의 변경을 일으키는 파드 스펙 업데이트를 수행했다.
-  Init Container 이미지를 변경하면 파드가 다시 시작된다. 앱 컨테이너
-  이미지의 변경은 앱 컨테이너만 재시작시킨다.
-* 파드 인프라스트럭처 컨테이너가 재시작되었다. 이는 일반적인 상황이 아니며 노드에
+* 파드 인프라스트럭처 컨테이너가 재시작된 상황. 이는 일반적인 상황이 아니며 노드에
   대해서 root 접근 권한을 가진 누군가에 의해서 수행됐을 것이다.
-* 파드 내의 모든 컨테이너들이, 재시작을 강제하는 `restartPolicy` 가 항상(Always)으로 설정되어 있는,
-  동안 종료되었다. 그리고 초기화 컨테이너의 완료 기록이 가비지 수집
-  때문에 유실되었다.
-
-
+* 초기화 컨테이너의 완료 기록이 가비지 수집 때문에 유실된 상태에서, 
+  `restartPolicy`가 Always로 설정된 파드의 모든 컨테이너가 종료되어 
+  모든 컨테이너를 재시작해야 하는 상황
 
+초기화 컨테이너 이미지가 변경되거나 초기화 컨테이너의 완료 기록이 가비지 수집 
+때문에 유실된 상태이면 파드는 재시작되지 않는다. 이는 쿠버네티스 버전 1.20 이상에 
+적용된다. 이전 버전의 쿠버네티스를 사용하는 경우 해당 쿠버네티스 버전의 문서를 
+참고한다.
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
index aa154a4b42..71523e183a 100644
--- a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -312,8 +312,8 @@ kubelet은 실행 중인 컨테이너들에 대해서 선택적으로 세 가지
 준비성 프로브는 활성 프로브와는 다르게 준비성에 특정된 엔드포인트를 확인한다.
 
 {{< note >}}
-파드가 삭제될 때 단지 요청들을 흘려 보낼(drain) 목적으로,
-준비성 프로브가 필요하지는 않다는 점을 유념해야 한다. 삭제 시에, 파드는
+파드가 삭제될 때 요청들을 흘려 보내기(drain) 위해
+준비성 프로브가 꼭 필요한 것은 아니다. 삭제 시에, 파드는
 프로브의 존재 여부와 무관하게 자동으로 스스로를 준비되지 않은 상태(unready)로 변경한다.
 파드는 파드 내의 모든 컨테이너들이 중지될 때까지 준비되지 않은 상태로
 남아 있다.
diff --git a/content/ko/docs/reference/_index.md b/content/ko/docs/reference/_index.md
index ff1727ffee..4c0b0b8177 100644
--- a/content/ko/docs/reference/_index.md
+++ b/content/ko/docs/reference/_index.md
@@ -21,8 +21,6 @@ no_list: true
 
 * [표준 용어집](/ko/docs/reference/glossary/) -  포괄적이고, 표준화 된 쿠버네티스 용어 목록
 
-
-
 * [쿠버네티스 API 레퍼런스](/docs/reference/kubernetes-api/)
 * [쿠버네티스 {{< param "version" >}}용 원페이지(One-page) API 레퍼런스](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 * [쿠버네티스 API 사용](/ko/docs/reference/using-api/) - 쿠버네티스 API에 대한 개요
@@ -50,16 +48,35 @@ no_list: true
 
 ## 컴포넌트
 
-* [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - 각 노드에서 구동되는 주요한 *노드 에이전트*. kubelet은 PodSpecs 집합을 가지며 기술된 컨테이너가 구동되고 있는지, 정상 작동하는지를 보장한다.
-* [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) - 파드, 서비스, 레플리케이션 컨트롤러와 같은 API 오브젝트에 대한 검증과 구성을 수행하는 REST API.
+* [kubelet](/docs/reference/command-line-tools-reference/kubelet/) - 각 
+노드에서 구동되는 주요한 에이전트. kubelet은 PodSpecs 집합을 가지며 
+기술된 컨테이너가 구동되고 있는지, 정상 작동하는지를 보장한다.
+* [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/) - 
+파드, 서비스, 레플리케이션 컨트롤러와 같은 API 오브젝트에 대한 검증과 구성을 
+수행하는 REST API.
 * [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) - 쿠버네티스에 탑재된 핵심 제어 루프를 포함하는 데몬.
-* [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - 간단한 TCP/UDP 스트림 포워딩이나 백-엔드 집합에 걸쳐서 라운드-로빈 TCP/UDP 포워딩을 할 수 있다.
+* [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - 간단한 
+TCP/UDP 스트림 포워딩이나 백-엔드 집합에 걸쳐서 라운드-로빈 TCP/UDP 포워딩을 
+할 수 있다.
 * [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - 가용성, 성능 및 용량을 관리하는 스케줄러.
 
-## 스케줄링
+  * [kube-scheduler 정책](/ko/docs/reference/scheduling/policies)
+  * [kube-scheduler 프로파일](/ko/docs/reference/scheduling/config/#여러-프로파일)
 
-* [kube-scheduler 정책](/ko/docs/reference/scheduling/policies)
-* [kube-scheduler 프로파일](/docs/reference/scheduling/config#profiles)
+## 환경설정 API
+
+이 섹션은 쿠버네티스 구성요소 또는 도구를 환경설정하는 데에 사용되는 
+"미발표된" API를 다룬다. 이 API들은 사용자나 관리자가 클러스터를 
+사용/관리하는 데에 중요하지만, 이들 API의 대부분은 아직 API 서버가 
+제공하지 않는다.
+
+* [kubelet 환경설정 (v1beta1)](/docs/reference/config-api/kubelet-config.v1beta1/)
+* [kube-scheduler 환경설정 (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
+* [kube-scheduler 정책 레퍼런스 (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
+* [kube-proxy 환경설정 (v1alpha1)](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
+* [`audit.k8s.io/v1` API](/docs/reference/config-api/apiserver-audit.v1/)
+* [클라이언트 인증 API (v1beta1)](/docs/reference/config-api/client-authentication.v1beta1/)
+* [WebhookAdmission 환경설정 (v1)](/docs/reference/config-api/apiserver-webhookadmission.v1/)
 
 ## 설계 문서
 
diff --git a/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md b/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
index f9bc6a1112..a64633ed52 100644
--- a/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
+++ b/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
@@ -55,9 +55,9 @@ weight: 50
  1. `/var/run/secrets/kubernetes.io/serviceaccount` 에 마운트된 파드의 각 컨테이너에 `volumeSource` 를 추가한다.
 
 #### 바인딩된 서비스 어카운트 토큰 볼륨
-{{< feature-state for_k8s_version="v1.13" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
-`BoundServiceAccountTokenVolume` 기능 게이트가 활성화되면, 서비스 어카운트 어드미션 컨트롤러가
+`BoundServiceAccountTokenVolume` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가 활성화되면, 서비스 어카운트 어드미션 컨트롤러가
 시크릿 볼륨 대신 프로젝티드 서비스 어카운트 토큰 볼륨을 추가한다. 서비스 어카운트 토큰은 기본적으로 1시간 후에 만료되거나 파드가 삭제된다. [프로젝티드 볼륨](/docs/tasks/configure-pod-container/configure-projected-volume-storage/)에 대한 자세한 내용을 참고한다.
 
 이 기능은 모든 네임스페이스에 "kube-root-ca.crt" 컨피그맵을 게시하는 활성화된 `RootCAConfigMap` 기능 게이트에 따라 다르다. 이 컨피그맵에는 kube-apiserver에 대한 연결을 확인하는 데 사용되는 CA 번들이 포함되어 있다.
diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index 62fb53396c..a0f970d7c4 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -59,11 +59,10 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `AnyVolumeDataSource` | `false` | 알파 | 1.18 | |
 | `AppArmor` | `true` | 베타 | 1.4 | |
 | `BalanceAttachedNodeVolumes` | `false` | 알파 | 1.11 | |
-| `BoundServiceAccountTokenVolume` | `false` | 알파 | 1.13 | |
+| `BoundServiceAccountTokenVolume` | `false` | 알파 | 1.13 | 1.20 |
+| `BoundServiceAccountTokenVolume` | `true` | 베타 | 1.21 | |
 | `CPUManager` | `false` | 알파 | 1.8 | 1.9 |
 | `CPUManager` | `true` | 베타 | 1.10 | |
-| `CRIContainerLogRotation` | `false` | 알파 | 1.10 | 1.10 |
-| `CRIContainerLogRotation` | `true` | 베타| 1.11 | |
 | `CSIInlineVolume` | `false` | 알파 | 1.15 | 1.15 |
 | `CSIInlineVolume` | `true` | 베타 | 1.16 | - |
 | `CSIMigration` | `false` | 알파 | 1.14 | 1.16 |
@@ -74,7 +73,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CSIMigrationAzureDisk` | `false` | 알파 | 1.15 | 1.18 |
 | `CSIMigrationAzureDisk` | `false` | 베타 | 1.19 | |
 | `CSIMigrationAzureDiskComplete` | `false` | 알파 | 1.17 | |
-| `CSIMigrationAzureFile` | `false` | 알파 | 1.15 | |
+| `CSIMigrationAzureFile` | `false` | 알파 | 1.15 | 1.19 |
+| `CSIMigrationAzureFile` | `false` | 베타 | 1.21 | |
 | `CSIMigrationAzureFileComplete` | `false` | 알파 | 1.17 | |
 | `CSIMigrationGCE` | `false` | 알파 | 1.14 | 1.16 |
 | `CSIMigrationGCE` | `false` | 베타 | 1.17 | |
@@ -84,13 +84,16 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CSIMigrationOpenStackComplete` | `false` | 알파 | 1.17 | |
 | `CSIMigrationvSphere` | `false` | 베타 | 1.19 | |
 | `CSIMigrationvSphereComplete` | `false` | 베타 | 1.19 | |
-| `CSIServiceAccountToken` | `false` | 알파 | 1.20 | |
-| `CSIStorageCapacity` | `false` | 알파 | 1.19 | |
+| `CSIServiceAccountToken` | `false` | 알파 | 1.20 | 1.20 |
+| `CSIServiceAccountToken` | `true` | 베타 | 1.21 | |
+| `CSIStorageCapacity` | `false` | 알파 | 1.19 | 1.20 |
+| `CSIStorageCapacity` | `true` | 베타 | 1.21 | |
 | `CSIVolumeFSGroupPolicy` | `false` | 알파 | 1.19 | 1.19 |
 | `CSIVolumeFSGroupPolicy` | `true` | 베타 | 1.20 | |
 | `ConfigurableFSGroupPolicy` | `false` | 알파 | 1.18 | 1.19 |
 | `ConfigurableFSGroupPolicy` | `true` | 베타 | 1.20 | |
-| `CronJobControllerV2` | `false` | 알파 | 1.20 | |
+| `CronJobControllerV2` | `false` | 알파 | 1.20 | 1.20 |
+| `CronJobControllerV2` | `true` | 베타 | 1.21 | |
 | `CustomCPUCFSQuotaPeriod` | `false` | 알파 | 1.12 | |
 | `DefaultPodTopologySpread` | `false` | 알파 | 1.19 | 1.19 |
 | `DefaultPodTopologySpread` | `true` | 베타 | 1.20 | |
@@ -98,14 +101,11 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `DevicePlugins` | `true` | 베타 | 1.10 | |
 | `DisableAcceleratorUsageMetrics` | `false` | 알파 | 1.19 | 1.19 |
 | `DisableAcceleratorUsageMetrics` | `true` | 베타 | 1.20 | |
-| `DownwardAPIHugePages` | `false` | 알파 | 1.20 | |
+| `DownwardAPIHugePages` | `false` | 알파 | 1.20 | 1.20 |
+| `DownwardAPIHugePages` | `false` | 베타 | 1.21 | |
 | `DynamicKubeletConfig` | `false` | 알파 | 1.4 | 1.10 |
 | `DynamicKubeletConfig` | `true` | 베타 | 1.11 | |
 | `EfficientWatchResumption` | `false` | 알파 | 1.20 | |
-| `EndpointSlice` | `false` | 알파 | 1.16 | 1.16 |
-| `EndpointSlice` | `false` | 베타 | 1.17 | |
-| `EndpointSlice` | `true` | 베타 | 1.18 | |
-| `EndpointSliceNodeName` | `false` | 알파 | 1.20 | |
 | `EndpointSliceProxying` | `false` | 알파 | 1.18 | 1.18 |
 | `EndpointSliceProxying` | `true` | 베타 | 1.19 | |
 | `EndpointSliceTerminatingCondition` | `false` | 알파 | 1.20 | |
@@ -117,15 +117,17 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `ExpandPersistentVolumes` | `false` | 알파 | 1.8 | 1.10 |
 | `ExpandPersistentVolumes` | `true` | 베타 | 1.11 | |
 | `ExperimentalHostUserNamespaceDefaulting` | `false` | 베타 | 1.5 | |
-| `GenericEphemeralVolume` | `false` | 알파 | 1.19 | |
-| `GracefulNodeShutdown` | `false` | 알파 | 1.20 | |
+| `GenericEphemeralVolume` | `false` | 알파 | 1.19 | 1.20 |
+| `GenericEphemeralVolume` | `true` | 베타 | 1.21 | |
+| `GracefulNodeShutdown` | `false` | 알파 | 1.20 | 1.20 |
+| `GracefulNodeShutdown` | `true` | 베타 | 1.21 | |
 | `HPAContainerMetrics` | `false` | 알파 | 1.20 | |
 | `HPAScaleToZero` | `false` | 알파 | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | 알파 | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | 베타 | 1.19 | |
-| `IPv6DualStack` | `false` | 알파 | 1.15 | |
-| `ImmutableEphemeralVolumes` | `false` | 알파 | 1.18 | 1.18 |
-| `ImmutableEphemeralVolumes` | `true` | 베타 | 1.19 | |
+| `IngressClassNamespacedParams` | `false` | 알파 | 1.21 | |
+| `IPv6DualStack` | `false` | 알파 | 1.15 | 1.20 |
+| `IPv6DualStack` | `true` | 베타 | 1.21 | |
 | `KubeletCredentialProviders` | `false` | 알파 | 1.20 | |
 | `KubeletPodResources` | `true` | 알파 | 1.13 | 1.14 |
 | `KubeletPodResources` | `true` | 베타 | 1.15 | |
@@ -134,22 +136,25 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `LocalStorageCapacityIsolation` | `false` | 알파 | 1.7 | 1.9 |
 | `LocalStorageCapacityIsolation` | `true` | 베타 | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | 알파 | 1.15 | |
+| `LogarithmicScaleDown` | `false` | 알파 | 1.21 | |
+| `KubeletPodResourcesGetAllocatable` | `false` | 알파 | 1.21 | |
 | `MixedProtocolLBService` | `false` | 알파 | 1.20 | |
+| `NamespaceDefaultLabelName` | `true` | 베타 | 1.21 | |
+| `NetworkPolicyEndPort` | `false` | 알파 | 1.21 |  |
 | `NodeDisruptionExclusion` | `false` | 알파 | 1.16 | 1.18 |
 | `NodeDisruptionExclusion` | `true` | 베타 | 1.19 | |
 | `NonPreemptingPriority` | `false` | 알파 | 1.15 | 1.18 |
 | `NonPreemptingPriority` | `true` | 베타 | 1.19 | |
-| `PodDisruptionBudget` | `false` | 알파 | 1.3 | 1.4 |
-| `PodDisruptionBudget` | `true` | 베타 | 1.5 | |
+| `PodDeletionCost` | `false` | 알파 | 1.21 | |
+| `PodAffinityNamespaceSelector` | `false` | 알파 | 1.21 | |
 | `PodOverhead` | `false` | 알파 | 1.16 | 1.17 |
 | `PodOverhead` | `true` | 베타 | 1.18 |  |
+| `ProbeTerminationGracePeriod` | `false` | 알파 | 1.21 | |
 | `ProcMountType` | `false` | 알파 | 1.12 | |
 | `QOSReserved` | `false` | 알파 | 1.11 | |
 | `RemainingItemCount` | `false` | 알파 | 1.15 | |
 | `RemoveSelfLink` | `false` | 알파 | 1.16 | 1.19 |
 | `RemoveSelfLink` | `true` | 베타 | 1.20 | |
-| `RootCAConfigMap` | `false` | 알파 | 1.13 | 1.19 |
-| `RootCAConfigMap` | `true` | 베타 | 1.20 | |
 | `RotateKubeletServerCertificate` | `false` | 알파 | 1.7 | 1.11 |
 | `RotateKubeletServerCertificate` | `true` | 베타 | 1.12 | |
 | `RunAsGroup` | `true` | 베타 | 1.14 | |
@@ -157,9 +162,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `SCTPSupport` | `true` | 베타 | 1.19 | |
 | `ServerSideApply` | `false` | 알파 | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | 베타 | 1.16 | |
-| `ServiceAccountIssuerDiscovery` | `false` | 알파 | 1.18 | 1.19 |
-| `ServiceAccountIssuerDiscovery` | `true` | 베타 | 1.20 | |
+| `ServiceInternalTrafficPolicy` | `false` | 알파 | 1.21 | |
 | `ServiceLBNodePortControl` | `false` | 알파 | 1.20 | |
+| `ServiceLoadBalancerClass` | `false` | 알파 | 1.21 | |
 | `ServiceNodeExclusion` | `false` | 알파 | 1.8 | 1.18 |
 | `ServiceNodeExclusion` | `true` | 베타 | 1.19 | |
 | `ServiceTopology` | `false` | 알파 | 1.17 | |
@@ -169,8 +174,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `StorageVersionAPI` | `false` | 알파 | 1.20 | |
 | `StorageVersionHash` | `false` | 알파 | 1.14 | 1.14 |
 | `StorageVersionHash` | `true` | 베타 | 1.15 | |
-| `Sysctls` | `true` | 베타 | 1.11 | |
+| `SuspendJob` | `false` | 알파 | 1.21 | |
 | `TTLAfterFinished` | `false` | 알파 | 1.12 | |
+| `TopologyAwareHints` | `false` | 알파 | 1.21 | |
 | `TopologyManager` | `false` | 알파 | 1.16 | 1.17 |
 | `TopologyManager` | `true` | 베타 | 1.18 | |
 | `ValidateProxyRedirects` | `false` | 알파 | 1.12 | 1.13 |
@@ -179,7 +185,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `WinDSR` | `false` | 알파 | 1.14 | |
 | `WinOverlay` | `false` | 알파 | 1.14 | 1.19 |
 | `WinOverlay` | `true` | 베타 | 1.20 | |
-| `WindowsEndpointSliceProxying` | `false` | 알파 | 1.19 | |
+| `WindowsEndpointSliceProxying` | `false` | 알파 | 1.19 | 1.20 |
+| `WindowsEndpointSliceProxying` | `true` | beta | 1.21 | |
 {{< /table >}}
 
 ### GA 또는 사용 중단된 기능을 위한 기능 게이트
@@ -200,6 +207,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `BlockVolume` | `false` | 알파 | 1.9 | 1.12 |
 | `BlockVolume` | `true` | 베타 | 1.13 | 1.17 |
 | `BlockVolume` | `true` | GA | 1.18 | - |
+| `CRIContainerLogRotation` | `false` | 알파 | 1.10 | 1.10 |
+| `CRIContainerLogRotation` | `true` | 베타 | 1.11 | 1.20 |
+| `CRIContainerLogRotation` | `true` | GA | 1.21 | - |
 | `CSIBlockVolume` | `false` | 알파 | 1.11 | 1.13 |
 | `CSIBlockVolume` | `true` | 베타 | 1.14 | 1.17 |
 | `CSIBlockVolume` | `true` | GA | 1.18 | - |
@@ -215,6 +225,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CSIPersistentVolume` | `false` | 알파 | 1.9 | 1.9 |
 | `CSIPersistentVolume` | `true` | 베타 | 1.10 | 1.12 |
 | `CSIPersistentVolume` | `true` | GA | 1.13 | - |
+| `CSIVolumeHealth` | `false` | 알파 | 1.21 | - |
 | `CustomPodDNS` | `false` | 알파 | 1.9 | 1.9 |
 | `CustomPodDNS` | `true` | 베타| 1.10 | 1.13 |
 | `CustomPodDNS` | `true` | GA | 1.14 | - |
@@ -245,6 +256,12 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `EnableAggregatedDiscoveryTimeout` | `true` | 사용중단 | 1.16 | - |
 | `EnableEquivalenceClassCache` | `false` | 알파 | 1.8 | 1.14 |
 | `EnableEquivalenceClassCache` | - | 사용중단 | 1.15 | - |
+| `EndpointSlice` | `false` | 알파 | 1.16 | 1.16 |
+| `EndpointSlice` | `false` | 베타 | 1.17 | 1.17 |
+| `EndpointSlice` | `true` | 베타 | 1.18 | 1.21 |
+| `EndpointSlice` | `true` | GA | 1.21 | -  |
+| `EndpointSliceNodeName` | `false` | 알파 | 1.20 | 1.21 |
+| `EndpointSliceNodeName` | `true` | GA | 1.21 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | 알파 | 1.5 | 1.12 |
 | `ExperimentalCriticalPodAnnotation` | `false` | 사용중단 | 1.13 | - |
 | `EvenPodsSpread` | `false` | 알파 | 1.16 | 1.17 |
@@ -258,6 +275,10 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `HugePages` | `true` | GA | 1.14 | - |
 | `HyperVContainer` | `false` | 알파 | 1.10 | 1.19 |
 | `HyperVContainer` | `false` | 사용중단 | 1.20 | - |
+| `ImmutableEphemeralVolumes` | `false` | 알파 | 1.18 | 1.18 |
+| `ImmutableEphemeralVolumes` | `true` | 베타 | 1.19 | 1.20 |
+| `ImmutableEphemeralVolumes` | `true` | GA | 1.21 | |
+| `IndexedJob` | `false` | 알파 | 1.21 | |
 | `Initializers` | `false` | 알파 | 1.7 | 1.13 |
 | `Initializers` | - | 사용중단 | 1.14 | - |
 | `KubeletConfigFile` | `false` | 알파 | 1.8 | 1.9 |
@@ -281,6 +302,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `PersistentLocalVolumes` | `false` | 알파 | 1.7 | 1.9 |
 | `PersistentLocalVolumes` | `true` | 베타 | 1.10 | 1.13 |
 | `PersistentLocalVolumes` | `true` | GA | 1.14 | - |
+| `PodDisruptionBudget` | `false` | 알파 | 1.3 | 1.4 |
+| `PodDisruptionBudget` | `true` | 베타 | 1.5 | 1.20 |
+| `PodDisruptionBudget` | `true` | GA | 1.21 | - |
 | `PodPriority` | `false` | 알파 | 1.8 | 1.10 |
 | `PodPriority` | `true` | 베타 | 1.11 | 1.13 |
 | `PodPriority` | `true` | GA | 1.14 | - |
@@ -296,6 +320,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `ResourceQuotaScopeSelectors` | `false` | 알파 | 1.11 | 1.11 |
 | `ResourceQuotaScopeSelectors` | `true` | 베타 | 1.12 | 1.16 |
 | `ResourceQuotaScopeSelectors` | `true` | GA | 1.17 | - |
+| `RootCAConfigMap` | `false` | 알파 | 1.13 | 1.19 |
+| `RootCAConfigMap` | `true` | 베타 | 1.20 | 1.20 |
+| `RootCAConfigMap` | `true` | GA | 1.21 | - |
 | `RotateKubeletClientCertificate` | `true` | 베타 | 1.8 | 1.18 |
 | `RotateKubeletClientCertificate` | `true` | GA | 1.19 | - |
 | `RuntimeClass` | `false` | 알파 | 1.12 | 1.13 |
@@ -307,6 +334,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `SCTPSupport` | `false` | 알파 | 1.12 | 1.18 |
 | `SCTPSupport` | `true` | 베타 | 1.19 | 1.19 |
 | `SCTPSupport` | `true` | GA | 1.20 | - |
+| `ServiceAccountIssuerDiscovery` | `false` | 알파 | 1.18 | 1.19 |
+| `ServiceAccountIssuerDiscovery` | `true` | 베타 | 1.20 | 1.20 |
+| `ServiceAccountIssuerDiscovery` | `true` | GA | 1.21 | - |
 | `ServiceAppProtocol` | `false` | 알파 | 1.18 | 1.18 |
 | `ServiceAppProtocol` | `true` | 베타 | 1.19 | |
 | `ServiceAppProtocol` | `true` | GA | 1.20 | - |
@@ -331,6 +361,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `SupportPodPidsLimit` | `false` | 알파 | 1.10 | 1.13 |
 | `SupportPodPidsLimit` | `true` | 베타 | 1.14 | 1.19 |
 | `SupportPodPidsLimit` | `true` | GA | 1.20 | - |
+| `Sysctls` | `true` | 베타 | 1.11 | 1.20 |
+| `Sysctls` | `true` | GA | 1.21 | |
 | `TaintBasedEvictions` | `false` | 알파 | 1.6 | 1.12 |
 | `TaintBasedEvictions` | `true` | 베타 | 1.13 | 1.17 |
 | `TaintBasedEvictions` | `true` | GA | 1.18 | - |
@@ -343,6 +375,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `TokenRequestProjection` | `false` | 알파 | 1.11 | 1.11 |
 | `TokenRequestProjection` | `true` | 베타 | 1.12 | 1.19 |
 | `TokenRequestProjection` | `true` | GA | 1.20 | - |
+| `VolumeCapacityPriority` | `false` | 알파 | 1.21 | - |
 | `VolumeSnapshotDataSource` | `false` | 알파 | 1.12 | 1.16 |
 | `VolumeSnapshotDataSource` | `true` | 베타 | 1.17 | 1.19 |
 | `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
@@ -444,7 +477,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   확인한다.
 - `CPUManager`: 컨테이너 수준의 CPU 어피니티 지원을 활성화한다.
   [CPU 관리 정책](/docs/tasks/administer-cluster/cpu-management-policies/)을 참고한다.
-- `CRIContainerLogRotation`: cri 컨테이너 런타임에 컨테이너 로그 로테이션을 활성화한다.
+- `CRIContainerLogRotation`: cri 컨테이너 런타임에 컨테이너 로그 로테이션을 활성화한다. 로그 파일 사이즈 기본값은 10MB이며, 
+컨테이너 당 최대 로그 파일 수 기본값은 5이다. 이 값은 kubelet 환경설정으로 변경할 수 있다. 
+더 자세한 내용은 [노드 레벨에서의 로깅](/ko/docs/concepts/cluster-administration/logging/#노드-레벨에서의-로깅)을 참고한다.
 - `CSIBlockVolume`: 외부 CSI 볼륨 드라이버가 블록 스토리지를 지원할 수 있게 한다.
   자세한 내용은 [`csi` 원시 블록 볼륨 지원](/ko/docs/concepts/storage/volumes/#csi-원시-raw-블록-볼륨-지원)
   문서를 참고한다.
@@ -525,6 +560,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `CSIVolumeFSGroupPolicy`: CSI드라이버가 `fsGroupPolicy` 필드를 사용하도록 허용한다.
   이 필드는 CSI드라이버에서 생성된 볼륨이 마운트될 때 볼륨 소유권과
   권한 수정을 지원하는지 여부를 제어한다.
+- `CSIVolumeHealth`: 노드에서의 CSI 볼륨 상태 모니터링 기능을 활성화한다.
 - `ConfigurableFSGroupPolicy`: 사용자가 파드에 볼륨을 마운트할 때 fsGroups에 대한
   볼륨 권한 변경 정책을 구성할 수 있다. 자세한 내용은
   [파드의 볼륨 권한 및 소유권 변경 정책 구성](/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods)을
@@ -546,7 +582,6 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   생성된 리소스에서 스키마 기반 유효성 검사를 활성화한다.
 - `CustomResourceWebhookConversion`: [커스텀리소스데피니션](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)에서
   생성된 리소스에 대해 웹 훅 기반의 변환을 활성화한다.
-  실행 중인 파드 문제를 해결한다.
 - `DefaultPodTopologySpread`: `PodTopologySpread` 스케줄링 플러그인을 사용하여
   [기본 분배](/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints/#내부-기본-제약)를 수행한다.
 - `DevicePlugins`: 노드에서 [장치 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
@@ -624,10 +659,15 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `HyperVContainer`: 윈도우 컨테이너를 위한
   [Hyper-V 격리](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/manage-containers/hyperv-container)
   기능을 활성화한다.
-- `IPv6DualStack`: IPv6에 대한 [듀얼 스택](/ko/docs/concepts/services-networking/dual-stack/)
-  지원을 활성화한다.
 - `ImmutableEphemeralVolumes`: 안정성과 성능 향상을 위해 개별 시크릿(Secret)과 컨피그맵(ConfigMap)을
   변경할 수 없는(immutable) 것으로 표시할 수 있다.
+- `IndexedJob`: [잡](/ko/docs/concepts/workloads/controllers/job/) 컨트롤러가 
+  완료 횟수를 기반으로 파드 완료를 관리할 수 있도록 한다.
+- `IngressClassNamespacedParams`: `IngressClass` 리소스가 네임스페이스 범위로 
+  한정된 파라미터를 이용할 수 있도록 한다. 이 기능은 `IngressClass.spec.parameters` 에 
+  `Scope` 와 `Namespace` 2개의 필드를 추가한다.
+- `IPv6DualStack`: IPv6을 위한 [이중 스택](/ko/docs/concepts/services-networking/dual-stack/)
+  기능을 활성화한다.
 - `KubeletConfigFile`: 구성 파일을 사용하여 지정된 파일에서
   kubelet 구성을 로드할 수 있다.
   자세한 내용은 [구성 파일을 통해 kubelet 파라미터 설정](/docs/tasks/administer-cluster/kubelet-config-file/)을
@@ -638,10 +678,14 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `KubeletPodResources`: kubelet의 파드 리소스 gPRC 엔드포인트를 활성화한다. 자세한 내용은
   [장치 모니터링 지원](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/606-compute-device-assignment/README.md)을
   참고한다.
+- `KubeletPodResourcesGetAllocatable`: kubelet의 파드 리소스 `GetAllocatableResources` 기능을 활성화한다.
+  이 API는 클라이언트가 노드의 여유 컴퓨팅 자원을 잘 파악할 수 있도록, 할당 가능 자원에 대한 정보를 
+  [자원 할당 보고](/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#장치-플러그인-리소스-모니터링)한다.
 - `LegacyNodeRoleBehavior`: 비활성화되면, 서비스 로드 밸런서 및 노드 중단의 레거시 동작은
   `NodeDisruptionExclusion` 과 `ServiceNodeExclusion` 에 의해 제공된 기능별 레이블을 대신하여
   `node-role.kubernetes.io/master` 레이블을 무시한다.
-- `LocalStorageCapacityIsolation`: [로컬 임시 스토리지](/ko/docs/concepts/configuration/manage-resources-containers/)와
+- `LocalStorageCapacityIsolation`: 
+  [로컬 임시 스토리지](/ko/docs/concepts/configuration/manage-resources-containers/)와
   [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir)의
   `sizeLimit` 속성을 사용할 수 있게 한다.
 - `LocalStorageCapacityIsolationFSQuotaMonitoring`: [로컬 임시 스토리지](/ko/docs/concepts/configuration/manage-resources-containers/)에
@@ -651,21 +695,30 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   프로젝트 쿼터를 사용하여 [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir)
   스토리지 사용을 모니터링하여 성능과 정확성을
   향상시킨다.
+- `LogarithmicScaleDown`: 컨트롤러 스케일 다운 시에 파드 타임스탬프를 로그 스케일로 버켓화하여 
+  축출할 파드를 반-랜덤하게 선택하는 기법을 활성화한다.
 - `MixedProtocolLBService`: 동일한 로드밸런서 유형 서비스 인스턴스에서 다른 프로토콜
   사용을 활성화한다.
 - `MountContainers` (*사용 중단됨*): 호스트의 유틸리티 컨테이너를 볼륨 마운터로
   사용할 수 있다.
 - `MountPropagation`: 한 컨테이너에서 다른 컨테이너 또는 파드로 마운트된 볼륨을 공유할 수 있다.
   자세한 내용은 [마운트 전파(propagation)](/ko/docs/concepts/storage/volumes/#마운트-전파-propagation)을 참고한다.
+- `NamespaceDefaultLabelName`: API 서버로 하여금 모든 네임스페이스에 대해 변경할 수 없는 (immutable) 
+  {{< glossary_tooltip text="레이블" term_id="label" >}} `kubernetes.io/metadata.name`을 설정하도록 한다. (네임스페이스의 이름도 변경 불가)
+- `NetworkPolicyEndPort`: 네트워크폴리시(NetworkPolicy)	오브젝트에서 단일 포트를 지정하는 것 대신에 포트 범위를 지정할 수 있도록, `endPort` 필드의 사용을 활성화한다.
 - `NodeDisruptionExclusion`: 영역(zone) 장애 시 노드가 제외되지 않도록 노드 레이블 `node.kubernetes.io/exclude-disruption`
   사용을 활성화한다.
 - `NodeLease`: 새로운 리스(Lease) API가 노드 상태 신호로 사용될 수 있는 노드 하트비트(heartbeats)를 보고할 수 있게 한다.
 - `NonPreemptingPriority`: 프라이어리티클래스(PriorityClass)와 파드에 `preemptionPolicy` 필드를 활성화한다.
 - `PVCProtection`: 파드에서 사용 중일 때 퍼시스턴트볼륨클레임(PVC)이
   삭제되지 않도록 한다.
+- `PodDeletionCost`: 레플리카셋 다운스케일 시 삭제될 파드의 우선순위를 사용자가 조절할 수 있도록, 
+   [파드 삭제 비용](/ko/docs/concepts/workloads/controllers/replicaset/#파드-삭제-비용) 기능을 활성화한다.
 - `PersistentLocalVolumes`: 파드에서 `local` 볼륨 유형의 사용을 활성화한다.
   `local` 볼륨을 요청하는 경우 파드 어피니티를 지정해야 한다.
 - `PodDisruptionBudget`: [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) 기능을 활성화한다.
+- `PodAffinityNamespaceSelector`: [파드 어피니티 네임스페이스 셀렉터](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#네임스페이스-셀렉터) 기능과 
+  [CrossNamespacePodAffinity](/ko/docs/concepts/policy/resource-quotas/#네임스페이스-간-파드-어피니티-쿼터) 쿼터 범위 기능을 활성화한다.
 - `PodOverhead`: 파드 오버헤드를 판단하기 위해 [파드오버헤드(PodOverhead)](/ko/docs/concepts/scheduling-eviction/pod-overhead/)
   기능을 활성화한다.
 - `PodPriority`: [우선 순위](/ko/docs/concepts/configuration/pod-priority-preemption/)를
@@ -676,6 +729,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `PodShareProcessNamespace`: 파드에서 실행되는 컨테이너 간에 단일 프로세스 네임스페이스를
   공유하기 위해 파드에서 `shareProcessNamespace` 설정을 활성화한다. 자세한 내용은
   [파드의 컨테이너 간 프로세스 네임스페이스 공유](/docs/tasks/configure-pod-container/share-process-namespace/)에서 확인할 수 있다.
+- `ProbeTerminationGracePeriod`: 파드의 [프로브-수준 
+  `terminationGracePeriodSeconds` 설정하기](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationgraceperiodseconds) 기능을 활성화한다. 
+  더 자세한 사항은 [기능개선 제안](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2238-liveness-probe-grace-period)을 참고한다.
 - `ProcMountType`: SecurityContext의 `procMount` 필드를 설정하여
   컨테이너의 proc 타입의 마운트를 제어할 수 있다.
 - `QOSReserved`: QoS 수준에서 리소스 예약을 허용하여 낮은 QoS 수준의 파드가
@@ -715,8 +771,10 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   [파드의 서비스 어카운트 구성](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery)을
   참고한다.
 - `ServiceAppProtocol`: 서비스와 엔드포인트에서 `AppProtocol` 필드를 활성화한다.
+- `ServiceInternalTrafficPolicy`: 서비스에서 `InternalTrafficPolicy` 필드를 활성화한다.
 - `ServiceLBNodePortControl`: 서비스에서`spec.allocateLoadBalancerNodePorts` 필드를
   활성화한다.
+- `ServiceLoadBalancerClass`: 서비스에서 `LoadBalancerClass` 필드를 활성화한다. 자세한 내용은 [로드밸런서 구현체의 종류 확인하기](/ko/docs/concepts/services-networking/service/#load-balancer-class)를 참고한다.
 - `ServiceLoadBalancerFinalizer`: 서비스 로드 밸런서에 대한 Finalizer 보호를 활성화한다.
 - `ServiceNodeExclusion`: 클라우드 제공자가 생성한 로드 밸런서에서 노드를
   제외할 수 있다. "`node.kubernetes.io/exclude-from-external-load-balancers`"로
@@ -725,8 +783,6 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   있도록 한다. 자세한 내용은
   [서비스토폴로지(ServiceTopology)](/ko/docs/concepts/services-networking/service-topology/)를
   참고한다.
-- `SizeMemoryBackedVolumes`: kubelet 지원을 사용하여 메모리 백업 볼륨의 크기를 조정한다.
-  자세한 내용은 [volumes](/ko/docs/concepts/storage/volumes)를 참조한다.
 - `SetHostnameAsFQDN`: 전체 주소 도메인 이름(FQDN)을 파드의 호스트 이름으로
   설정하는 기능을 활성화한다.
   [파드의 `setHostnameAsFQDN` 필드](/ko/docs/concepts/services-networking/dns-pod-service/#파드의-sethostnameasfqdn-필드)를 참고한다.
@@ -750,6 +806,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   파라미터를 지정하여 지정된 수의 프로세스 ID가
   시스템 전체와 각각 쿠버네티스 시스템 데몬에 대해 예약되도록
   할 수 있다.
+- `SuspendJob`: 잡 중지/재시작 기능을 활성화한다. 
+  자세한 내용은 [잡 문서](/ko/docs/concepts/workloads/controllers/job/)를 
+  참고한다.
 - `Sysctls`: 각 파드에 설정할 수 있는 네임스페이스 커널
   파라미터(sysctl)를 지원한다. 자세한 내용은
   [sysctl](/docs/tasks/administer-cluster/sysctl-cluster/)을 참고한다.
@@ -765,9 +824,15 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `TokenRequest`: 서비스 어카운트 리소스에서 `TokenRequest` 엔드포인트를 활성화한다.
 - `TokenRequestProjection`: [`projected` 볼륨](/ko/docs/concepts/storage/volumes/#projected)을 통해
   서비스 어카운트 토큰을 파드에 주입할 수 있다.
+- `TopologyAwareHints`: 엔드포인트슬라이스(EndpointSlices)에서 토폴로지 힌트 기반 
+  토폴로지-어웨어 라우팅을 활성화한다. 자세한 내용은 
+  [토폴로지 어웨어 힌트](/docs/concepts/services-networking/topology-aware-hints/)
+  를 참고한다.
 - `TopologyManager`: 쿠버네티스의 다른 컴포넌트에 대한 세분화된 하드웨어 리소스
   할당을 조정하는 메커니즘을 활성화한다.
   [노드의 토폴로지 관리 정책 제어](/docs/tasks/administer-cluster/topology-manager/)를 참고한다.
+- `VolumeCapacityPriority`: 가용 PV 용량을 기반으로 
+  여러 토폴로지에 있는 노드들의 우선순위를 정하는 기능을 활성화한다.
 - `VolumePVCDataSource`: 기존 PVC를 데이터 소스로 지정하는 기능을 지원한다.
 - `VolumeScheduling`: 볼륨 토폴로지 인식 스케줄링을 활성화하고
   퍼시스턴트볼륨클레임(PVC) 바인딩이 스케줄링 결정을 인식하도록 한다. 또한
diff --git a/content/ko/docs/reference/glossary/cloud-controller-manager.md b/content/ko/docs/reference/glossary/cloud-controller-manager.md
index ebfa3d926c..d4eb23111b 100644
--- a/content/ko/docs/reference/glossary/cloud-controller-manager.md
+++ b/content/ko/docs/reference/glossary/cloud-controller-manager.md
@@ -11,10 +11,10 @@ tags:
 - architecture
 - operation
 ---
- 클라우드별 컨트롤 로직을 포함하는 쿠버네티스
+클라우드별 컨트롤 로직을 포함하는 쿠버네티스
 {{< glossary_tooltip text="컨트롤 플레인" term_id="control-plane" >}} 컴포넌트이다.
 클라우드 컨트롤러 매니저를 통해 클러스터를 클라우드 공급자의 API에 연결하고,
-해당 클라우드 플랫폼과 상호 작용하는 컴포넌트와 클러스터와 상호 작용하는 컴포넌트를 분리할 수 있다.
+해당 클라우드 플랫폼과 상호 작용하는 컴포넌트와 클러스터와만 상호 작용하는 컴포넌트를 구분할 수 있게 해 준다.
 
 <!--more-->
 

From 03c1683d18ec02956be564cd9d213a68d772860a Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Thu, 22 Apr 2021 17:11:44 +0800
Subject: [PATCH 611/788] [en] Remove redundant feature gate introductions

---
 content/en/docs/concepts/storage/ephemeral-volumes.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/en/docs/concepts/storage/ephemeral-volumes.md b/content/en/docs/concepts/storage/ephemeral-volumes.md
index dc715d7c46..e76f76f492 100644
--- a/content/en/docs/concepts/storage/ephemeral-volumes.md
+++ b/content/en/docs/concepts/storage/ephemeral-volumes.md
@@ -130,7 +130,6 @@ As a cluster administrator, you can use a [PodSecurityPolicy](/docs/concepts/pol
 
 ### Generic ephemeral volumes
 
-{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
 {{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 This feature requires the `GenericEphemeralVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be

From 76d4faf38fba4bf642223c7a589d28006ac9d7f0 Mon Sep 17 00:00:00 2001
From: ebarped <eduardo.barajas.pedrosa@gmail.com>
Date: Thu, 22 Apr 2021 12:48:13 +0200
Subject: [PATCH 612/788] Fix kubectl download url in spanish docs

---
 content/es/docs/tasks/tools/install-kubectl.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/tasks/tools/install-kubectl.md b/content/es/docs/tasks/tools/install-kubectl.md
index af1abeb63d..b11ed21dbb 100644
--- a/content/es/docs/tasks/tools/install-kubectl.md
+++ b/content/es/docs/tasks/tools/install-kubectl.md
@@ -188,7 +188,7 @@ Si estás en macOS y utilizas el gestor de paquetes [Macports](https://macports.
 
 ### Instalar el binario de kubectl con curl en Windows
 
-1. Descargar la última entrega {{< param "fullversion" >}} de [este link]((https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe).
+1. Descargar la última entrega {{< param "fullversion" >}} de [este link]((https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe.
 
     o si tiene `curl` instalada, utiliza este comando:
 

From 04a13f15e57e7da9c0a5c49c1ea91691179aa919 Mon Sep 17 00:00:00 2001
From: ebarped <eduardo.barajas.pedrosa@gmail.com>
Date: Thu, 22 Apr 2021 13:03:25 +0200
Subject: [PATCH 613/788] Remove the incorrect parenthesis

---
 content/es/docs/tasks/tools/install-kubectl.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/tasks/tools/install-kubectl.md b/content/es/docs/tasks/tools/install-kubectl.md
index b11ed21dbb..fdca3db92c 100644
--- a/content/es/docs/tasks/tools/install-kubectl.md
+++ b/content/es/docs/tasks/tools/install-kubectl.md
@@ -188,7 +188,7 @@ Si estás en macOS y utilizas el gestor de paquetes [Macports](https://macports.
 
 ### Instalar el binario de kubectl con curl en Windows
 
-1. Descargar la última entrega {{< param "fullversion" >}} de [este link]((https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe.
+1. Descargar la última entrega {{< param "fullversion" >}} de [este link](https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe).
 
     o si tiene `curl` instalada, utiliza este comando:
 

From 08b8930751eb97ec797b92582fcdafc2299b3fbd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mauricio=20V=C3=A1squez?= <mauricio@kinvolk.io>
Date: Thu, 22 Apr 2021 06:59:44 -0500
Subject: [PATCH 614/788] Update
 content/en/docs/concepts/overview/working-with-objects/labels.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../en/docs/concepts/overview/working-with-objects/labels.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/overview/working-with-objects/labels.md b/content/en/docs/concepts/overview/working-with-objects/labels.md
index d2a879c0a2..25eb5da66e 100644
--- a/content/en/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/en/docs/concepts/overview/working-with-objects/labels.md
@@ -54,7 +54,7 @@ The `kubernetes.io/` and `k8s.io/` prefixes are reserved for Kubernetes core com
 
 Valid label value:
 * must be 63 characters or less (can be empty),
-* must begin and end with an alphanumeric character (`[a-z0-9A-Z]`),
+* unless empty, must begin and end with an alphanumeric character (`[a-z0-9A-Z]`),
 * could contain dashes (`-`), underscores (`_`), dots (`.`), and alphanumerics between.
 
 For example, here's the configuration file for a Pod that has two labels `environment: production` and `app: nginx` :

From ea7c79ff0edb732bc5ee2055b348fd506b873809 Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <shannduin@google.com>
Date: Thu, 22 Apr 2021 11:31:41 -0400
Subject: [PATCH 615/788] Update Stages column

- Replaces *True*  with *Beta* for *LegacyNodeRoleBehavior*
- Replaces *beta*  with *Beta* for *WindowsEndpointSliceProxying*
---
 .../reference/command-line-tools-reference/feature-gates.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 1b5b7746b2..849af9f00b 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -132,7 +132,7 @@ different Kubernetes components.
 | `IPv6DualStack` | `true` | Beta | 1.21 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
 | `LegacyNodeRoleBehavior` | `false` | Alpha | 1.16 | 1.18 |
-| `LegacyNodeRoleBehavior` | `true` | True | 1.19 |  |
+| `LegacyNodeRoleBehavior` | `true` | Beta | 1.19 |  |
 | `LocalStorageCapacityIsolation` | `false` | Alpha | 1.7 | 1.9 |
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
@@ -185,7 +185,7 @@ different Kubernetes components.
 | `WinOverlay` | `false` | Alpha | 1.14 | 1.19 |
 | `WinOverlay` | `true` | Beta | 1.20 | |
 | `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | 1.20 |
-| `WindowsEndpointSliceProxying` | `true` | beta | 1.21 | |
+| `WindowsEndpointSliceProxying` | `true` | Beta | 1.21 | |
 {{< /table >}}
 
 ### Feature gates for graduated or deprecated features

From 764c26c875650a7526d81162f770ea19569cbd9a Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <shannduin@google.com>
Date: Thu, 22 Apr 2021 18:33:13 +0000
Subject: [PATCH 616/788] Sort client library links

---
 .../reference/using-api/client-libraries.md   | 19 ++++++++-----------
 1 file changed, 8 insertions(+), 11 deletions(-)

diff --git a/content/en/docs/reference/using-api/client-libraries.md b/content/en/docs/reference/using-api/client-libraries.md
index 90043f953c..9ec9f84c5d 100644
--- a/content/en/docs/reference/using-api/client-libraries.md
+++ b/content/en/docs/reference/using-api/client-libraries.md
@@ -30,13 +30,12 @@ The following client libraries are officially maintained by
 
 | Language | Client Library | Sample Programs |
 |----------|----------------|-----------------|
-| Go       | [github.com/kubernetes/client-go/](https://github.com/kubernetes/client-go/) | [browse](https://github.com/kubernetes/client-go/tree/master/examples)
-| Python       | [github.com/kubernetes-client/python/](https://github.com/kubernetes-client/python/) | [browse](https://github.com/kubernetes-client/python/tree/master/examples)
-| Java     | [github.com/kubernetes-client/java](https://github.com/kubernetes-client/java/) | [browse](https://github.com/kubernetes-client/java#installation)
 | dotnet   | [github.com/kubernetes-client/csharp](https://github.com/kubernetes-client/csharp) | [browse](https://github.com/kubernetes-client/csharp/tree/master/examples/simple)
-| JavaScript   | [github.com/kubernetes-client/javascript](https://github.com/kubernetes-client/javascript) | [browse](https://github.com/kubernetes-client/javascript/tree/master/examples)
+| Go       | [github.com/kubernetes/client-go/](https://github.com/kubernetes/client-go/) | [browse](https://github.com/kubernetes/client-go/tree/master/examples)
 | Haskell  | [github.com/kubernetes-client/haskell](https://github.com/kubernetes-client/haskell) | [browse](https://github.com/kubernetes-client/haskell/tree/master/kubernetes-client/example)
-
+| Java     | [github.com/kubernetes-client/java](https://github.com/kubernetes-client/java/) | [browse](https://github.com/kubernetes-client/java#installation)
+| JavaScript   | [github.com/kubernetes-client/javascript](https://github.com/kubernetes-client/javascript) | [browse](https://github.com/kubernetes-client/javascript/tree/master/examples)
+| Python   | [github.com/kubernetes-client/python/](https://github.com/kubernetes-client/python/) | [browse](https://github.com/kubernetes-client/python/tree/master/examples)
 
 ## Community-maintained client libraries
 
@@ -48,6 +47,10 @@ their authors, not the Kubernetes team.
 | Language             | Client Library                           |
 | -------------------- | ---------------------------------------- |
 | Clojure              | [github.com/yanatan16/clj-kubernetes-api](https://github.com/yanatan16/clj-kubernetes-api) |
+| DotNet               | [github.com/tonnyeremin/kubernetes_gen](https://github.com/tonnyeremin/kubernetes_gen) |
+| DotNet (RestSharp)   | [github.com/masroorhasan/Kubernetes.DotNet](https://github.com/masroorhasan/Kubernetes.DotNet) |
+| Elixir               | [github.com/obmarg/kazan](https://github.com/obmarg/kazan/) |
+| Elixir               | [github.com/coryodaniel/k8s](https://github.com/coryodaniel/k8s) |
 | Go                   | [github.com/ericchiang/k8s](https://github.com/ericchiang/k8s) |
 | Java (OSGi)          | [bitbucket.org/amdatulabs/amdatu-kubernetes](https://bitbucket.org/amdatulabs/amdatu-kubernetes) |
 | Java (Fabric8, OSGi) | [github.com/fabric8io/kubernetes-client](https://github.com/fabric8io/kubernetes-client) |
@@ -77,9 +80,3 @@ their authors, not the Kubernetes team.
 | Scala                | [github.com/hagay3/skuber](https://github.com/hagay3/skuber) |
 | Scala                | [github.com/joan38/kubernetes-client](https://github.com/joan38/kubernetes-client) |
 | Swift                | [github.com/swiftkube/client](https://github.com/swiftkube/client) |
-| DotNet               | [github.com/tonnyeremin/kubernetes_gen](https://github.com/tonnyeremin/kubernetes_gen) |
-| DotNet (RestSharp)   | [github.com/masroorhasan/Kubernetes.DotNet](https://github.com/masroorhasan/Kubernetes.DotNet) |
-| Elixir               | [github.com/obmarg/kazan](https://github.com/obmarg/kazan/) |
-| Elixir               | [github.com/coryodaniel/k8s](https://github.com/coryodaniel/k8s) |
-
-

From 0b64e26b14341511beebeeca84c097edae90dccc Mon Sep 17 00:00:00 2001
From: ravisantoshgudimetla <ravisantoshgudimetla@gmail.com>
Date: Thu, 22 Apr 2021 19:42:17 -0400
Subject: [PATCH 617/788] Remove unsupported windows OS versions

Kubernetes supports 1.21,1.20 and 1.19 versions. Windows 1903 support ended on Dec 19, 2020 as mentioned at
https://docs.microsoft.com/en-us/windows-server/get-started/windows-server-release-info#windows-server-current-versions-by-servicing-option
This commit cleans the docs to reflect it.

Co-authored-by: Mark Rossetti <marosset@microsoft.com>
---
 .../windows/intro-windows-in-kubernetes.md                   | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index a2055ce425..00d2b46bf0 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -38,11 +38,10 @@ In this document, when we talk about Windows containers we mean Windows containe
 Refer to the following table for Windows operating system support in Kubernetes. A single heterogeneous Kubernetes cluster can have both Windows and Linux worker nodes. Windows containers have to be scheduled on Windows nodes and Linux containers on Linux nodes.
 
 | Kubernetes version | Windows Server LTSC releases | Windows Server SAC releases |
-| --- | --- | --- |
-| *Kubernetes v1.17* | Windows Server 2019 | Windows Server ver 1809 |
-| *Kubernetes v1.18* | Windows Server 2019 | Windows Server ver 1809, Windows Server ver 1903, Windows Server ver 1909 |
+| --- | --- | --- | --- |
 | *Kubernetes v1.19* | Windows Server 2019 | Windows Server ver 1909, Windows Server ver 2004 |
 | *Kubernetes v1.20* | Windows Server 2019 | Windows Server ver 1909, Windows Server ver 2004 |
+| *Kubernetes v1.21* | Windows Server 2019 | Windows Server ver 2004, Windows Server ver 20H2 |
 
 {{< note >}}
 Information on the different Windows Server servicing channels including their support models can be found at [Windows Server servicing channels](https://docs.microsoft.com/en-us/windows-server/get-started-19/servicing-channels-19).

From 4522ec629b36d24802b331332b8a955f37a0f8af Mon Sep 17 00:00:00 2001
From: vaibhav <t_vaibhav.goel@india.nec.com>
Date: Fri, 19 Mar 2021 14:29:01 +0530
Subject: [PATCH 618/788] Update the hyperlink address of High-Availability
 Clusters

---
 .../en/docs/tasks/debug-application-cluster/debug-cluster.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/debug-application-cluster/debug-cluster.md b/content/en/docs/tasks/debug-application-cluster/debug-cluster.md
index fdde133345..391efe4376 100644
--- a/content/en/docs/tasks/debug-application-cluster/debug-cluster.md
+++ b/content/en/docs/tasks/debug-application-cluster/debug-cluster.md
@@ -102,7 +102,7 @@ This is an incomplete list of things that could go wrong, and how to adjust your
 - Action: Use IaaS providers reliable storage (e.g. GCE PD or AWS EBS volume) for VMs with apiserver+etcd
   - Mitigates: Apiserver backing storage lost
 
-- Action: Use [high-availability](/docs/admin/high-availability) configuration
+- Action: Use [high-availability](/docs/setup/production-environment/tools/kubeadm/high-availability/) configuration
   - Mitigates: Control plane node shutdown or control plane components (scheduler, API server, controller-manager) crashing
     - Will tolerate one or more simultaneous node or component failures
   - Mitigates: API server backing storage (i.e., etcd's data directory) lost

From 8cbee312b485b6e02c4eb217017b57c2fea89e74 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Fri, 23 Apr 2021 16:34:52 +0800
Subject: [PATCH 619/788] [zh] Sync
 content/zh/docs/concepts/configuration/configmap.md

---
 content/zh/docs/concepts/configuration/configmap.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/configuration/configmap.md b/content/zh/docs/concepts/configuration/configmap.md
index 1f2f34b1e3..7851c880d3 100644
--- a/content/zh/docs/concepts/configuration/configmap.md
+++ b/content/zh/docs/concepts/configuration/configmap.md
@@ -349,7 +349,7 @@ When a ConfigMap currently consumed in a volume is updated, projected keys are e
 The kubelet checks whether the mounted ConfigMap is fresh on every periodic sync.
 However, the kubelet uses its local cache for getting the current value of the ConfigMap.
 The type of the cache is configurable using the `ConfigMapAndSecretChangeDetectionStrategy` field in
-the [KubeletConfiguration struct](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go).
+the [KubeletConfiguration struct](/docs/reference/config-api/kubelet-config.v1beta1/).
 -->
 #### 被挂载的 ConfigMap 内容会被自动更新
 
@@ -386,15 +386,15 @@ ConfigMaps consumed as environment variables are not updated automatically and r
 -->
 ## 不可变更的 ConfigMap     {#configmap-immutable}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 <!--
-The Kubernetes beta feature _Immutable Secrets and ConfigMaps_ provides an option to set
+The Kubernetes feature _Immutable Secrets and ConfigMaps_ provides an option to set
 individual Secrets and ConfigMaps as immutable. For clusters that extensively use ConfigMaps
 (at least tens of thousands of unique ConfigMap to Pod mounts), preventing changes to their
 data has the following advantages:
 -->
-Kubernetes Beta 特性 _不可变更的 Secret 和 ConfigMap_ 提供了一种将各个
+Kubernetes 特性 _不可变更的 Secret 和 ConfigMap_ 提供了一种将各个
 Secret 和 ConfigMap 设置为不可变更的选项。对于大量使用 ConfigMap 的
 集群（至少有数万个各不相同的 ConfigMap 给 Pod 挂载）而言，禁止更改
 ConfigMap 的数据有以下好处：

From c32a1194687b362af9731418677cf8617eaacafa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <remy.leone@gmail.com>
Date: Fri, 23 Apr 2021 12:03:01 +0200
Subject: [PATCH 620/788] Update
 content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md

Co-authored-by: Johan BONTEMPS <revenant75@hotmail.com>
---
 .../tasks/configure-pod-container/configure-pod-configmap.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
index 93c6d1725a..11e34afe2a 100644
--- a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -628,7 +628,7 @@ Les utilisateurs comme les composants du système peuvent stocker des données d
 {{< note >}}
 Les ConfigMaps doivent faire référence aux fichiers de propriétés, et non les remplacer.
 Pensez à la ConfigMap comme représentant quelque chose de similaire au répertoire `/etc` de Linux et à son contenu.
-Par exemple, si vous créez un [volume Kubernetes] (/docs/concepts/storage/volumes/) à partir d'une ConfigMap, chaque élément de données de la ConfigMap est représenté par un fichier individuel dans le volume.
+Par exemple, si vous créez un [volume Kubernetes](/docs/concepts/storage/volumes/) à partir d'une ConfigMap, chaque élément de données de la ConfigMap est représenté par un fichier individuel dans le volume.
 {{< /note >}}
 
 Le champ `data` de la ConfigMap contient les données de configuration.

From f587b8711644fd785db50f3e663c032c3932d354 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Fri, 23 Apr 2021 15:31:17 +0200
Subject: [PATCH 621/788] Fix

---
 .../tasks/configure-pod-container/configure-pod-configmap.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
index 11e34afe2a..6e9c4c5ba6 100644
--- a/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/fr/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -1,5 +1,5 @@
 ---
-title: Configure a Pod to Use a ConfigMap
+title: Configurer un pod pour utiliser une ConfigMap
 content_template: templates/task
 weight: 150
 card:

From 67169986e8f5f75c39a3daa851910c98415a4eb6 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Fri, 23 Apr 2021 13:48:16 +0000
Subject: [PATCH 622/788] Copy
 content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md for Japanese
 translation

---
 .../job/automated-tasks-with-cron-jobs.md     | 215 ++++++++++++++++++
 1 file changed, 215 insertions(+)
 create mode 100644 content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md

diff --git a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
new file mode 100644
index 0000000000..26c7c91134
--- /dev/null
+++ b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -0,0 +1,215 @@
+---
+title: Running Automated Tasks with a CronJob
+min-kubernetes-server-version: v1.21
+reviewers:
+- chenopis
+content_type: task
+weight: 10
+---
+
+<!-- overview -->
+
+CronJobs was promoted to general availability in Kubernetes v1.21. If you are using an older version of
+Kubernetes, please refer to the documentation for the version of Kubernetes that you are using,
+so that you see accurate information. Older Kubernetes versions do not support the `batch/v1` CronJob API.
+
+You can use a {{< glossary_tooltip text="CronJob" term_id="cronjob" >}} to run {{< glossary_tooltip text="Jobs" term_id="job" >}} on a time-based schedule.
+These automated jobs run like [Cron](https://en.wikipedia.org/wiki/Cron) tasks on a Linux or UNIX system.
+
+Cron jobs are useful for creating periodic and recurring tasks, like running backups or sending emails.
+Cron jobs can also schedule individual tasks for a specific time, such as if you want to schedule a job for a low activity period.
+
+Cron jobs have limitations and idiosyncrasies.
+For example, in certain circumstances, a single cron job can create multiple jobs.
+Therefore, jobs should be idempotent.
+
+For more limitations, see [CronJobs](/docs/concepts/workloads/controllers/cron-jobs).
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+* {{< include "task-tutorial-prereqs.md" >}}
+
+
+
+<!-- steps -->
+
+## Creating a Cron Job
+
+Cron jobs require a config file.
+This example cron job config `.spec` file prints the current time and a hello message every minute:
+
+{{< codenew file="application/job/cronjob.yaml" >}}
+
+Run the example CronJob by using this command:
+
+```shell
+kubectl create -f https://k8s.io/examples/application/job/cronjob.yaml
+```
+The output is similar to this:
+
+```
+cronjob.batch/hello created
+```
+
+After creating the cron job, get its status using this command:
+
+```shell
+kubectl get cronjob hello
+```
+The output is similar to this:
+
+```
+NAME    SCHEDULE      SUSPEND   ACTIVE   LAST SCHEDULE   AGE
+hello   */1 * * * *   False     0        <none>          10s
+```
+
+As you can see from the results of the command, the cron job has not scheduled or run any jobs yet.
+Watch for the job to be created in around one minute:
+
+```shell
+kubectl get jobs --watch
+```
+The output is similar to this:
+
+```
+NAME               COMPLETIONS   DURATION   AGE
+hello-4111706356   0/1                      0s
+hello-4111706356   0/1           0s         0s
+hello-4111706356   1/1           5s         5s
+```
+
+Now you've seen one running job scheduled by the "hello" cron job.
+You can stop watching the job and view the cron job again to see that it scheduled the job:
+
+```shell
+kubectl get cronjob hello
+```
+The output is similar to this:
+
+```
+NAME    SCHEDULE      SUSPEND   ACTIVE   LAST SCHEDULE   AGE
+hello   */1 * * * *   False     0        50s             75s
+```
+
+You should see that the cron job `hello` successfully scheduled a job at the time specified in `LAST SCHEDULE`. There are currently 0 active jobs, meaning that the job has completed or failed.
+
+Now, find the pods that the last scheduled job created and view the standard output of one of the pods.
+
+{{< note >}}
+The job name and pod name are different.
+{{< /note >}}
+
+```shell
+# Replace "hello-4111706356" with the job name in your system
+pods=$(kubectl get pods --selector=job-name=hello-4111706356 --output=jsonpath={.items[*].metadata.name})
+```
+Show pod log:
+
+```shell
+kubectl logs $pods
+```
+The output is similar to this:
+
+```
+Fri Feb 22 11:02:09 UTC 2019
+Hello from the Kubernetes cluster
+```
+
+## Deleting a Cron Job
+
+When you don't need a cron job any more, delete it with `kubectl delete cronjob <cronjob name>`:
+
+```shell
+kubectl delete cronjob hello
+```
+
+Deleting the cron job removes all the jobs and pods it created and stops it from creating additional jobs.
+You can read more about removing jobs in [garbage collection](/docs/concepts/workloads/controllers/garbage-collection/).
+
+## Writing a Cron Job Spec
+
+As with all other Kubernetes configs, a cron job needs `apiVersion`, `kind`, and `metadata` fields. For general
+information about working with config files, see [deploying applications](/docs/tasks/run-application/run-stateless-application-deployment/),
+and [using kubectl to manage resources](/docs/concepts/overview/working-with-objects/object-management/) documents.
+
+A cron job config also needs a [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status).
+
+{{< note >}}
+All modifications to a cron job, especially its `.spec`, are applied only to the following runs.
+{{< /note >}}
+
+### Schedule
+
+The `.spec.schedule` is a required field of the `.spec`.
+It takes a [Cron](https://en.wikipedia.org/wiki/Cron) format string, such as `0 * * * *` or `@hourly`, as schedule time of its jobs to be created and executed.
+
+The format also includes extended `vixie cron` step values. As explained in the
+[FreeBSD manual](https://www.freebsd.org/cgi/man.cgi?crontab%285%29):
+
+> Step values can be	used in	conjunction with ranges.  Following a range
+> with `/<number>` specifies skips	of the number's	value through the
+> range.  For example, `0-23/2` can be used in the	hours field to specify
+> command execution every other hour	(the alternative in the	V7 standard is
+> `0,2,4,6,8,10,12,14,16,18,20,22`).  Steps are also permitted after an
+> asterisk, so if you want to say "every two hours", just use `*/2`.
+
+{{< note >}}
+A question mark (`?`) in the schedule has the same meaning as an asterisk `*`, that is, it stands for any of available value for a given field.
+{{< /note >}}
+
+### Job Template
+
+The `.spec.jobTemplate` is the template for the job, and it is required.
+It has exactly the same schema as a [Job](/docs/concepts/workloads/controllers/job/), except that it is nested and does not have an `apiVersion` or `kind`.
+For information about writing a job `.spec`, see [Writing a Job Spec](/docs/concepts/workloads/controllers/job/#writing-a-job-spec).
+
+### Starting Deadline
+
+The `.spec.startingDeadlineSeconds` field is optional.
+It stands for the deadline in seconds for starting the job if it misses its scheduled time for any reason.
+After the deadline, the cron job does not start the job.
+Jobs that do not meet their deadline in this way count as failed jobs.
+If this field is not specified, the jobs have no deadline.
+
+If the `.spec.startingDeadlineSeconds` field is set (not null), the CronJob
+controller measures the time between when a job is expected to be created and
+now. If the difference is higher than that limit, it will skip this execution.
+
+For example, if it is set to `200`, it allows a job to be created for up to 200
+seconds after the actual schedule.
+
+### Concurrency Policy
+
+The `.spec.concurrencyPolicy` field is also optional.
+It specifies how to treat concurrent executions of a job that is created by this cron job.
+The spec may specify only one of the following concurrency policies:
+
+* `Allow` (default): The cron job allows concurrently running jobs
+* `Forbid`: The cron job does not allow concurrent runs; if it is time for a new job run and the previous job run hasn't finished yet, the cron job skips the new job run
+* `Replace`: If it is time for a new job run and the previous job run hasn't finished yet, the cron job replaces the currently running job run with a new job run
+
+Note that concurrency policy only applies to the jobs created by the same cron job.
+If there are multiple cron jobs, their respective jobs are always allowed to run concurrently.
+
+### Suspend
+
+The `.spec.suspend` field is also optional.
+If it is set to `true`, all subsequent executions are suspended.
+This setting does not apply to already started executions.
+Defaults to false.
+
+{{< caution >}}
+Executions that are suspended during their scheduled time count as missed jobs.
+When `.spec.suspend` changes from `true` to `false` on an existing cron job without a [starting deadline](#starting-deadline), the missed jobs are scheduled immediately.
+{{< /caution >}}
+
+### Jobs History Limits
+
+The `.spec.successfulJobsHistoryLimit` and `.spec.failedJobsHistoryLimit` fields are optional.
+These fields specify how many completed and failed jobs should be kept.
+By default, they are set to 3 and 1 respectively.  Setting a limit to `0` corresponds to keeping none of the corresponding kind of jobs after they finish.
+
+

From 16c4fa7977d109ce0fb5025d9d5f2cff62a7afc1 Mon Sep 17 00:00:00 2001
From: szmytson <52168902+szmytson@users.noreply.github.com>
Date: Fri, 23 Apr 2021 15:48:33 +0200
Subject: [PATCH 623/788] Fix table formatting.

---
 content/en/docs/concepts/services-networking/service.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index b0a774951f..2c9e6e8996 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -996,7 +996,6 @@ groups are modified with the following IP rules:
 | Rule | Protocol | Port(s) | IpRange(s) | IpRange Description |
 |------|----------|---------|------------|---------------------|
 | Health Check | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | Subnet CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
-
 | Client Traffic | TCP | NodePort(s) | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/client=\<loadBalancerName\> |
 | MTU Discovery | ICMP | 3,4 | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/mtu=\<loadBalancerName\> |
 

From 27b2611cbcba82816f4d0a045efe7866a81fbc78 Mon Sep 17 00:00:00 2001
From: Michael Gugino <mgugino@redhat.com>
Date: Fri, 23 Apr 2021 12:19:23 -0400
Subject: [PATCH 624/788] Update webhook server example code link

Fix 404 error and point to the latest released code.
---
 .../access-authn-authz/extensible-admission-controllers.md      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md b/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md
index 051b81d21b..26a7634c2a 100644
--- a/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/extensible-admission-controllers.md
@@ -57,7 +57,7 @@ In the following, we describe how to quickly experiment with admission webhooks.
 ### Write an admission webhook server
 
 Please refer to the implementation of the [admission webhook
-server](https://github.com/kubernetes/kubernetes/blob/v1.13.0/test/images/webhook/main.go)
+server](https://github.com/kubernetes/kubernetes/blob/release-1.21/test/images/agnhost/webhook/main.go)
 that is validated in a Kubernetes e2e test. The webhook handles the
 `AdmissionReview` request sent by the apiservers, and sends back its decision
 as an `AdmissionReview` object in the same version it received.

From dd60f06954afee31be4fe1a97c7ab8ebcac081b7 Mon Sep 17 00:00:00 2001
From: ravisantoshgudimetla <ravisantoshgudimetla@gmail.com>
Date: Fri, 23 Apr 2021 18:05:28 -0400
Subject: [PATCH 625/788] Update pause image

---
 .../windows/intro-windows-in-kubernetes.md             | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 00d2b46bf0..0cf09f0ad9 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -58,7 +58,7 @@ Windows containers with process isolation have strict compatibility rules, [wher
 
 #### Pause Image
 
-Microsoft maintains a Windows pause infrastructure container at `mcr.microsoft.com/oss/kubernetes/pause:1.4.1`.
+Microsoft maintains a Windows pause infrastructure container at `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`.
 
 #### Compute
 
@@ -483,9 +483,9 @@ Your main source of help for troubleshooting your Kubernetes cluster should star
         nssm start flanneld
 
         # Register kubelet.exe
-        # Microsoft releases the pause infrastructure container at mcr.microsoft.com/oss/kubernetes/pause:1.4.1
+        # Microsoft releases the pause infrastructure container at mcr.microsoft.com/oss/kubernetes/pause:3.4.1
         nssm install kubelet C:\k\kubelet.exe
-        nssm set kubelet AppParameters --hostname-override=<hostname> --v=6 --pod-infra-container-image=mcr.microsoft.com/oss/kubernetes/pause:1.4.1 --resolv-conf="" --allow-privileged=true --enable-debugging-handlers --cluster-dns=<DNS-service-IP> --cluster-domain=cluster.local --kubeconfig=c:\k\config --hairpin-mode=promiscuous-bridge --image-pull-progress-deadline=20m --cgroups-per-qos=false  --log-dir=<log directory> --logtostderr=false --enforce-node-allocatable="" --network-plugin=cni --cni-bin-dir=c:\k\cni --cni-conf-dir=c:\k\cni\config
+        nssm set kubelet AppParameters --hostname-override=<hostname> --v=6 --pod-infra-container-image=mcr.microsoft.com/oss/kubernetes/pause:3.4.1 --resolv-conf="" --allow-privileged=true --enable-debugging-handlers --cluster-dns=<DNS-service-IP> --cluster-domain=cluster.local --kubeconfig=c:\k\config --hairpin-mode=promiscuous-bridge --image-pull-progress-deadline=20m --cgroups-per-qos=false  --log-dir=<log directory> --logtostderr=false --enforce-node-allocatable="" --network-plugin=cni --cni-bin-dir=c:\k\cni --cni-conf-dir=c:\k\cni\config
         nssm set kubelet AppDirectory C:\k
         nssm start kubelet
 
@@ -600,7 +600,7 @@ Your main source of help for troubleshooting your Kubernetes cluster should star
 
 1. `kubectl port-forward` fails with "unable to do port forwarding: wincat not found"
 
-    This was implemented in Kubernetes 1.15 by including wincat.exe in the pause infrastructure container `mcr.microsoft.com/oss/kubernetes/pause:1.4.1`. Be sure to use these versions or newer ones.
+    This was implemented in Kubernetes 1.15 by including wincat.exe in the pause infrastructure container `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`. Be sure to use these versions or newer ones.
     If you would like to build your own pause infrastructure container be sure to include [wincat](https://github.com/kubernetes-sigs/sig-windows-tools/tree/master/cmd/wincat).
 
 1. My Kubernetes installation is failing because my Windows Server node is behind a proxy
@@ -616,7 +616,7 @@ Your main source of help for troubleshooting your Kubernetes cluster should star
 
     In a Kubernetes Pod, an infrastructure or "pause" container is first created to host the container endpoint. Containers that belong to the same pod, including infrastructure and worker containers, share a common network namespace and endpoint (same IP and port space). Pause containers are needed to accommodate worker containers crashing or restarting without losing any of the networking configuration.
 
-    The "pause" (infrastructure) image is hosted on Microsoft Container Registry (MCR). You can access it using `mcr.microsoft.com/oss/kubernetes/pause:1.4.1`. For more details, see the [DOCKERFILE](https://github.com/kubernetes-sigs/windows-testing/blob/master/images/pause/Dockerfile).
+    The "pause" (infrastructure) image is hosted on Microsoft Container Registry (MCR). You can access it using `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`. For more details, see the [DOCKERFILE](https://github.com/kubernetes-sigs/windows-testing/blob/master/images/pause/Dockerfile).
 
 ### Further investigation
 

From 12e000d41af5880a88b1978d480e5d0b2335b420 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sat, 24 Apr 2021 05:30:47 +0000
Subject: [PATCH 626/788] Translate tasks/job/automated-tasks-with-cron-jobs
 into Japanese

---
 .../job/automated-tasks-with-cron-jobs.md     | 144 +++++++-----------
 1 file changed, 52 insertions(+), 92 deletions(-)

diff --git a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
index 26c7c91134..b53474f6a2 100644
--- a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -1,78 +1,66 @@
 ---
-title: Running Automated Tasks with a CronJob
+title: CronJobを使用して自動化タスクを実行する
 min-kubernetes-server-version: v1.21
-reviewers:
-- chenopis
 content_type: task
 weight: 10
 ---
 
 <!-- overview -->
 
-CronJobs was promoted to general availability in Kubernetes v1.21. If you are using an older version of
-Kubernetes, please refer to the documentation for the version of Kubernetes that you are using,
-so that you see accurate information. Older Kubernetes versions do not support the `batch/v1` CronJob API.
+CronJobは、Kubernetes v1.21で一般利用(GA)に昇格しました。古いバージョンのKubernetesを使用している場合、正確な情報を参照できるように、使用しているバージョンのKubernetesのドキュメントを参照してください。古いKubernetesのバージョンでは、`batch/v1` CronJob APIはサポートされていません。
 
-You can use a {{< glossary_tooltip text="CronJob" term_id="cronjob" >}} to run {{< glossary_tooltip text="Jobs" term_id="job" >}} on a time-based schedule.
-These automated jobs run like [Cron](https://en.wikipedia.org/wiki/Cron) tasks on a Linux or UNIX system.
+{{< glossary_tooltip text="CronJob" term_id="cronjob" >}}を使用すると、{{< glossary_tooltip text="Job" term_id="job" >}}を時間ベースのスケジュールで実行できるようになります。この自動化されたJobは、LinuxまたはUNIXシステム上の[Cron](https://en.wikipedia.org/wiki/Cron)のように実行されます。
 
-Cron jobs are useful for creating periodic and recurring tasks, like running backups or sending emails.
-Cron jobs can also schedule individual tasks for a specific time, such as if you want to schedule a job for a low activity period.
-
-Cron jobs have limitations and idiosyncrasies.
-For example, in certain circumstances, a single cron job can create multiple jobs.
-Therefore, jobs should be idempotent.
-
-For more limitations, see [CronJobs](/docs/concepts/workloads/controllers/cron-jobs).
+CronJobは、バックアップやメールの送信など、定期的なタスクや繰り返しのタスクを作成する時に便利です。CronJobはそれぞれのタスクを、たとえばアクティビティが少ない期間など、特定の時間にスケジューリングすることもできます。
 
+CronJobには制限と特性があります。たとえば、特定の状況下では、1つのCronJobが複数のJobを作成する可能性があるため、Jobは冪等性を持つようにしなければいけません。
 
+制限に関する詳しい情報については、[CronJob](/ja/docs/concepts/workloads/controllers/cron-jobs)を参照してください。
 
 ## {{% heading "prerequisites" %}}
 
-
 * {{< include "task-tutorial-prereqs.md" >}}
 
-
-
 <!-- steps -->
 
-## Creating a Cron Job
+## CronJobを作成する
 
-Cron jobs require a config file.
-This example cron job config `.spec` file prints the current time and a hello message every minute:
+CronJobには設定ファイルが必要です。次の例のCronJobの`.spec`は、現在の時刻とhelloというメッセージを1分ごとに表示します。
 
 {{< codenew file="application/job/cronjob.yaml" >}}
 
-Run the example CronJob by using this command:
+次のコマンドで例のCronJobを実行します。
 
 ```shell
 kubectl create -f https://k8s.io/examples/application/job/cronjob.yaml
 ```
-The output is similar to this:
+
+出力は次のようになります。
 
 ```
 cronjob.batch/hello created
 ```
 
-After creating the cron job, get its status using this command:
+CronJobを作成したら、次のコマンドで状態を取得します。
 
 ```shell
 kubectl get cronjob hello
 ```
-The output is similar to this:
+
+出力は次のようになります。
 
 ```
 NAME    SCHEDULE      SUSPEND   ACTIVE   LAST SCHEDULE   AGE
 hello   */1 * * * *   False     0        <none>          10s
 ```
 
-As you can see from the results of the command, the cron job has not scheduled or run any jobs yet.
-Watch for the job to be created in around one minute:
+コマンドの結果からわかるように、CronJobはまだスケジュールされておらず、まだ何のJobも実行していません。約1分以内にJobが作成されるのを見てみましょう。
 
 ```shell
 kubectl get jobs --watch
 ```
-The output is similar to this:
+
+出力は次のようになります。
 
 ```
 NAME               COMPLETIONS   DURATION   AGE
@@ -81,135 +69,107 @@ hello-4111706356   0/1           0s         0s
 hello-4111706356   1/1           5s         5s
 ```
 
-Now you've seen one running job scheduled by the "hello" cron job.
-You can stop watching the job and view the cron job again to see that it scheduled the job:
+"hello"CronJobによってスケジュールされたJobが1つ実行中になっていることがわかります。Jobを見るのをやめて、再度CronJobを表示して、Jobがスケジュールされたことを確認してみます。
 
 ```shell
 kubectl get cronjob hello
 ```
-The output is similar to this:
+
+出力は次のようになります。
 
 ```
 NAME    SCHEDULE      SUSPEND   ACTIVE   LAST SCHEDULE   AGE
 hello   */1 * * * *   False     0        50s             75s
 ```
 
-You should see that the cron job `hello` successfully scheduled a job at the time specified in `LAST SCHEDULE`. There are currently 0 active jobs, meaning that the job has completed or failed.
+CronJob`hello`が、`LAST SCHEDULE`で指定された時間にJobを正しくスケジュールしたことが確認できるはずです。現在、activeなJobの数は0です。つまり、Jobは完了または失敗したことがわかります。
 
-Now, find the pods that the last scheduled job created and view the standard output of one of the pods.
+それでは、最後にスケジュールされたJobの作成と、Podの1つの標準出力を表示してみましょう。
 
 {{< note >}}
-The job name and pod name are different.
+Jobの名前とPodの名前は異なります。
 {{< /note >}}
 
 ```shell
-# Replace "hello-4111706356" with the job name in your system
+# "hello-4111706356" の部分は、あなたのシステム上のJobの名前に置き換えてください。
 pods=$(kubectl get pods --selector=job-name=hello-4111706356 --output=jsonpath={.items[*].metadata.name})
 ```
-Show pod log:
+
+Podのログを表示します。
 
 ```shell
 kubectl logs $pods
 ```
-The output is similar to this:
+
+出力は次のようになります。
 
 ```
 Fri Feb 22 11:02:09 UTC 2019
 Hello from the Kubernetes cluster
 ```
 
-## Deleting a Cron Job
+## CronJobの削除
 
-When you don't need a cron job any more, delete it with `kubectl delete cronjob <cronjob name>`:
+CronJobが必要なくなったときは、`kubectl delete cronjob <cronjob name>`で削除します。
 
 ```shell
 kubectl delete cronjob hello
 ```
 
-Deleting the cron job removes all the jobs and pods it created and stops it from creating additional jobs.
-You can read more about removing jobs in [garbage collection](/docs/concepts/workloads/controllers/garbage-collection/).
+CronJobを削除すると、すべてのJobと、そのJobが作成したPodが削除され、追加のJobの作成が停止されます。Jobの削除について詳しく知りたい場合は、[ガベージコレクション](/ja/docs/concepts/workloads/controllers/garbage-collection/)を読んでください。
 
-## Writing a Cron Job Spec
+## CronJobのSpecを書く
 
-As with all other Kubernetes configs, a cron job needs `apiVersion`, `kind`, and `metadata` fields. For general
-information about working with config files, see [deploying applications](/docs/tasks/run-application/run-stateless-application-deployment/),
-and [using kubectl to manage resources](/docs/concepts/overview/working-with-objects/object-management/) documents.
+すべてのKubernetesの設定と同じように、CronJobにも`apiVersion`、`kind`、`metadata`のフィールドが必要です。設定ファイルの扱い方についての一般的な情報については、[アプリケーションのデプロイ](/ja/docs/tasks/run-application/run-stateless-application-deployment/)と[kubectlを使用してリソースを管理する](/ja/docs/concepts/overview/working-with-objects/object-management/)を読んでください。
 
-A cron job config also needs a [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status).
+CronJobの設定には、[`.spec`セクション](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)も必要です。
 
 {{< note >}}
-All modifications to a cron job, especially its `.spec`, are applied only to the following runs.
+CronJobの特に`spec`へのすべての修正は、それ以降の実行にのみ適用されます。
 {{< /note >}}
 
 ### Schedule
 
-The `.spec.schedule` is a required field of the `.spec`.
-It takes a [Cron](https://en.wikipedia.org/wiki/Cron) format string, such as `0 * * * *` or `@hourly`, as schedule time of its jobs to be created and executed.
+`.spec.schedule`は、`.spec`には必須のフィールドです。`0 * * * *`や`@hourly`などの[Cron](https://en.wikipedia.org/wiki/Cron)形式の文字列を取り、Jobの作成と実行のスケジュール時間を指定します。
 
-The format also includes extended `vixie cron` step values. As explained in the
-[FreeBSD manual](https://www.freebsd.org/cgi/man.cgi?crontab%285%29):
+フォーマットには`vixie cron`のステップ値(step value)も指定できます。[FreeBSDのマニュアル](https://www.freebsd.org/cgi/man.cgi?crontab%285%29)では次のように説明されています。
 
-> Step values can be	used in	conjunction with ranges.  Following a range
-> with `/<number>` specifies skips	of the number's	value through the
-> range.  For example, `0-23/2` can be used in the	hours field to specify
-> command execution every other hour	(the alternative in the	V7 standard is
-> `0,2,4,6,8,10,12,14,16,18,20,22`).  Steps are also permitted after an
-> asterisk, so if you want to say "every two hours", just use `*/2`.
+> ステップ値は範囲指定と組み合わせて使用できます。範囲の後ろに`/<number>`を付けると、範囲全体で指定したnumberの値ごとにスキップすることを意味します。たとえば、`0-23/2`をhoursフィールドに指定すると、2時間毎にコマンド実行を指定することになります(V7標準では代わりに`0,2,4,6,8,10,12,14,16,18,20,22`と指定する必要があります)。ステップはアスタリスクの後ろにつけることもできます。そのため、「2時間毎に実行」したい場合は、単純に`*/2`と指定できます。
 
 {{< note >}}
-A question mark (`?`) in the schedule has the same meaning as an asterisk `*`, that is, it stands for any of available value for a given field.
+スケジュール内の疑問符`?`はアスタリスク`*`と同じ意味を持ちます。つまり、与えられたフィールドには任意の値が使えるという意味になります。
 {{< /note >}}
 
 ### Job Template
 
-The `.spec.jobTemplate` is the template for the job, and it is required.
-It has exactly the same schema as a [Job](/docs/concepts/workloads/controllers/job/), except that it is nested and does not have an `apiVersion` or `kind`.
-For information about writing a job `.spec`, see [Writing a Job Spec](/docs/concepts/workloads/controllers/job/#writing-a-job-spec).
+`.spec.jobTemplate`はJobのテンプレートであり、必須です。[Job](/docs/concepts/workloads/controllers/job/)と完全に同一のスキーマを持ちますが、フィールドがネストされている点と、`apiVersion`と`kind`が存在しない点だけが異なります。Jobの`.spec`を書くための情報については、[JobのSpecを書く](/docs/concepts/workloads/controllers/job/#writing-a-job-spec)を参照してください。
 
 ### Starting Deadline
 
-The `.spec.startingDeadlineSeconds` field is optional.
-It stands for the deadline in seconds for starting the job if it misses its scheduled time for any reason.
-After the deadline, the cron job does not start the job.
-Jobs that do not meet their deadline in this way count as failed jobs.
-If this field is not specified, the jobs have no deadline.
+`.spec.startingDeadlineSeconds`フィールドはオプションです。何かの理由でスケジュールに間に合わなかった場合に適用される、Jobの開始のデッドライン(締め切り)を秒数で指定します。デッドラインを過ぎると、CronJobはJobを開始しません。この場合にデッドラインに間に合わなかったJobは、失敗したJobとしてカウントされます。もしこのフィールドが指定されなかった場合、Jobはデッドラインを持ちません。
 
-If the `.spec.startingDeadlineSeconds` field is set (not null), the CronJob
-controller measures the time between when a job is expected to be created and
-now. If the difference is higher than that limit, it will skip this execution.
+`.spec.startingDeadlineSeconds`フィールドがnull以外に設定された場合、CronJobコントローラーはJobの作成が期待される時間と現在時刻との間の時間を計測します。もしその差が制限よりも大きかった場合、その実行はスキップされます。
 
-For example, if it is set to `200`, it allows a job to be created for up to 200
-seconds after the actual schedule.
+たとえば、この値が`200`に設定された場合、実際のスケジュールの最大200秒後までに作成されるJobだけが許可されます。
 
 ### Concurrency Policy
 
-The `.spec.concurrencyPolicy` field is also optional.
-It specifies how to treat concurrent executions of a job that is created by this cron job.
-The spec may specify only one of the following concurrency policies:
+`.spec.concurrencyPolicy`フィールドもオプションです。このフィールドは、このCronJobで作成されたJobの並列実行をどのように扱うかを指定します。specには以下のconcurrency policyのいずれかを指定します。
 
-* `Allow` (default): The cron job allows concurrently running jobs
-* `Forbid`: The cron job does not allow concurrent runs; if it is time for a new job run and the previous job run hasn't finished yet, the cron job skips the new job run
-* `Replace`: If it is time for a new job run and the previous job run hasn't finished yet, the cron job replaces the currently running job run with a new job run
+* `Allow` (デフォルト): CronJobがJobを並列に実行することを許可します。
+* `Forbid`: CronJobの並列実行を禁止します。もし新しいJobの実行時に過去のJobがまだ完了していなかった場合、CronJobは新しいJobの実行をスキップします。
+* `Replace`: もし新しいJobの実行の時間になっても過去のJobの実行が完了していなかった場合、CronJobは現在の実行中のJobを新しいJobで置換します。
 
-Note that concurrency policy only applies to the jobs created by the same cron job.
-If there are multiple cron jobs, their respective jobs are always allowed to run concurrently.
+concurrent policyは、同じCronJobが作成したJobにのみ適用されます。もし複数のCronJobがある場合、それぞれのJobの並列実行は常に許可されます。
 
 ### Suspend
 
-The `.spec.suspend` field is also optional.
-If it is set to `true`, all subsequent executions are suspended.
-This setting does not apply to already started executions.
-Defaults to false.
+`.spec.suspend`フィールドもオプションです。このフィールドを`true`に設定すると、すべての後続の実行がサスペンド(一時停止)されます。この設定はすでに実行開始したJobには適用されません。デフォルトはfalseです。
 
 {{< caution >}}
-Executions that are suspended during their scheduled time count as missed jobs.
-When `.spec.suspend` changes from `true` to `false` on an existing cron job without a [starting deadline](#starting-deadline), the missed jobs are scheduled immediately.
+スケジュールされた時間中にサスペンドされた実行は、見逃されたJob(missed job)としてカウントされます。[starting deadline](#starting-deadline)が設定されていない既存のCronJob`.spec.suspend`が`true`から`false`に変更されると、見逃されたJobは即座にスケジュールされます。
 {{< /caution >}}
 
-### Jobs History Limits
-
-The `.spec.successfulJobsHistoryLimit` and `.spec.failedJobsHistoryLimit` fields are optional.
-These fields specify how many completed and failed jobs should be kept.
-By default, they are set to 3 and 1 respectively.  Setting a limit to `0` corresponds to keeping none of the corresponding kind of jobs after they finish.
-
+### Job History Limit
 
+`.spec.successfulJobsHistoryLimit`と`.spec.failedJobsHistoryLimit`フィールドはオプションです。これらのフィールドには、完了したJobと失敗したJobをいくつ保持するかを指定します。デフォルトでは、それぞれ3と1に設定されます。リミットを`0`に設定すると、対応する種類のJobを実行完了後に何も保持しなくなります。

From d3dc94bd4822f16b48b3c241084dafd28121a153 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sat, 24 Apr 2021 16:15:00 +0900
Subject: [PATCH 627/788] Fix the "prerequisites" header

---
 .../run-application/horizontal-pod-autoscale-walkthrough.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index 445742e1d6..a395a412ba 100644
--- a/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/ja/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -10,7 +10,7 @@ Horizontal Pod Autoscalerは、Deployment、ReplicaSetまたはStatefulSetとい
 
 このドキュメントはphp-apacheサーバーに対しHorizontal Pod Autoscalerを有効化するという例に沿ってウォークスルーで説明していきます。Horizontal Pod Autoscalerの動作についてのより詳細な情報を知りたい場合は、[Horizontal Pod Autoscalerユーザーガイド](/docs/tasks/run-application/horizontal-pod-autoscale/)をご覧ください。
 
-## {{% heading "前提条件" %}}
+## {{% heading "prerequisites" %}}
 
 この例ではバージョン1.2以上の動作するKubernetesクラスターおよびkubectlが必要です。
 [Metrics API](https://github.com/kubernetes/metrics)を介してメトリクスを提供するために、[Metrics server](https://github.com/kubernetes-sigs/metrics-server)によるモニタリングがクラスター内にデプロイされている必要があります。

From 38ad80e5e114359291fc94c93bf319effb314953 Mon Sep 17 00:00:00 2001
From: edsoncelio <edsoncelio@users.noreply.github.com>
Date: Sat, 24 Apr 2021 10:39:01 -0300
Subject: [PATCH 628/788] Move control-plane-node-communication from pt to
 pr-br

---
 .../control-plane-node-communication.md       |   0
 .../architecture/master-node-communication.md | 105 ------------------
 2 files changed, 105 deletions(-)
 rename content/{pt => pt-br}/docs/concepts/architecture/control-plane-node-communication.md (100%)
 delete mode 100644 content/pt-br/docs/concepts/architecture/master-node-communication.md

diff --git a/content/pt/docs/concepts/architecture/control-plane-node-communication.md b/content/pt-br/docs/concepts/architecture/control-plane-node-communication.md
similarity index 100%
rename from content/pt/docs/concepts/architecture/control-plane-node-communication.md
rename to content/pt-br/docs/concepts/architecture/control-plane-node-communication.md
diff --git a/content/pt-br/docs/concepts/architecture/master-node-communication.md b/content/pt-br/docs/concepts/architecture/master-node-communication.md
deleted file mode 100644
index 8cf2ad86c6..0000000000
--- a/content/pt-br/docs/concepts/architecture/master-node-communication.md
+++ /dev/null
@@ -1,105 +0,0 @@
----
-reviewers:
-- dchen1107
-- liggitt
-title: Comunicação entre Node e Master
-content_type: concept
-weight: 20
----
-
-<!-- overview -->
-
-Este documento cataloga os caminhos de comunicação entre o Master (o
-apiserver) e o cluster Kubernetes. A intenção é permitir que os usuários
-personalizem sua instalação para proteger a configuração de rede
-então o cluster pode ser executado em uma rede não confiável (ou em IPs totalmente públicos em um
-provedor de nuvem).
-
-
-
-
-<!-- body -->
-
-## Cluster para o Master
-
-Todos os caminhos de comunicação do cluster para o Master terminam no
-apiserver (nenhum dos outros componentes do Master são projetados para expor
-Serviços remotos). Em uma implantação típica, o apiserver é configurado para escutar
-conexões remotas em uma porta HTTPS segura (443) com uma ou mais clientes [autenticação](/docs/reference/access-authn-authz/authentication/) habilitado.
-Uma ou mais formas de [autorização](/docs/reference/access-authn-authz/authorization/)
-deve ser habilitado, especialmente se [requisições anônimas](/docs/reference/access-authn-authz/authentication/#anonymous-requests)
-ou [tokens da conta de serviço](/docs/reference/access-authn-authz/authentication/#service-account-tokens)
-são autorizados.
-
-Os nós devem ser provisionados com o certificado root público para o cluster
-de tal forma que eles podem se conectar de forma segura ao apiserver junto com o cliente válido
-credenciais. Por exemplo, em uma implantação padrão do GKE, as credenciais do cliente
-fornecidos para o kubelet estão na forma de um certificado de cliente. Vejo
-[bootstrapping TLS do kubelet](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)
-para provisionamento automatizado de certificados de cliente kubelet.
-
-Os pods que desejam se conectar ao apiserver podem fazê-lo com segurança, aproveitando
-conta de serviço para que o Kubernetes injetará automaticamente o certificado raiz público
-certificado e um token de portador válido no pod quando ele é instanciado.
-O serviço `kubernetes` (em todos os namespaces) é configurado com um IP virtual
-endereço que é redirecionado (via kube-proxy) para o endpoint com HTTPS no
-apiserver.
-
-Os componentes principais também se comunicam com o apiserver do cluster através da porta segura.
-
-Como resultado, o modo de operação padrão para conexões do cluster
-(nodes e pods em execução nos Nodes) para o Master é protegido por padrão
-e pode passar por redes não confiáveis ​​e / ou públicas.
-
-## Master para o Cluster
-
-Existem dois caminhos de comunicação primários do mestre (apiserver) para o
-cluster. O primeiro é do apiserver para o processo do kubelet que é executado em
-cada Node no cluster. O segundo é do apiserver para qualquer Node, pod,
-ou serviço através da funcionalidade de proxy do apiserver.
-
-### apiserver para o kubelet
-
-As conexões do apiserver ao kubelet são usadas para:
-
-  * Buscar logs para pods.
-  * Anexar (através de kubectl) pods em execução.
-  * Fornecer a funcionalidade de encaminhamento de porta do kubelet.
-
-Essas conexões terminam no endpoint HTTPS do kubelet. Por padrão,
-o apiserver não verifica o certificado de serviço do kubelet,
-o que torna a conexão sujeita a ataques man-in-the-middle, o que o torna
-**inseguro** para passar por redes não confiáveis ​​e / ou públicas.
-
-Para verificar essa conexão, use a flag `--kubelet-certificate-authority` para
-fornecer o apiserver com um pacote de certificado raiz para usar e verificar o
-certificado de serviço da kubelet.
-
-Se isso não for possível, use o [SSH túnel](/docs/concepts/architecture/master-node-communication/#ssh-tunnels)
-entre o apiserver e kubelet se necessário para evitar a conexão ao longo de um
-rede não confiável ou pública.
-
-Finalmente, [Autenticação e/ou autorização do Kubelet](/docs/admin/kubelet-authentication-authorization/)
-deve ser ativado para proteger a API do kubelet.
-
-### apiserver para nós, pods e serviços
-
-As conexões a partir do apiserver para um nó, pod ou serviço padrão para simples
-conexões HTTP não são autenticadas nem criptografadas. Eles
-podem ser executados em uma conexão HTTPS segura prefixando `https:` no nó,
-pod, ou nome do serviço no URL da API, mas eles não validarão o certificado
-fornecido pelo ponto de extremidade HTTPS, nem fornece credenciais de cliente, enquanto
-a conexão será criptografada, não fornecerá nenhuma garantia de integridade.
-Estas conexões **não são atualmente seguras** para serem usados por redes não confiáveis ​​e/ou públicas.
-
-### SSH Túnel
-
-O Kubernetes suporta túneis SSH para proteger o Servidor Master -> caminhos de comunicação no cluster. Nesta configuração, o apiserver inicia um túnel SSH para cada nó
-no cluster (conectando ao servidor ssh escutando na porta 22) e passa
-todo o tráfego destinado a um kubelet, nó, pod ou serviço através do túnel.
-Este túnel garante que o tráfego não seja exposto fora da rede aos quais
-os nós estão sendo executados.
-
-Atualmente, os túneis SSH estão obsoletos, portanto, você não deve optar por usá-los, a menos que saiba o que está fazendo. Um substituto para este canal de comunicação está sendo projetado.
-
-

From 03ab26491944035aefb5092099841a8a8351bf02 Mon Sep 17 00:00:00 2001
From: Rolfe Dlugy-Hegwer <rolfedh@users.noreply.github.com>
Date: Sat, 24 Apr 2021 16:01:21 -0400
Subject: [PATCH 629/788] Append `.git` to upstream URLs

The upstream URLs are missing the `.git` suffix. You can see this minor omission if you run the `git remote -v` command in your local `website` repo.
---
 content/en/docs/contribute/new-content/open-a-pr.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/contribute/new-content/open-a-pr.md b/content/en/docs/contribute/new-content/open-a-pr.md
index d511360e22..a49bffb030 100644
--- a/content/en/docs/contribute/new-content/open-a-pr.md
+++ b/content/en/docs/contribute/new-content/open-a-pr.md
@@ -123,8 +123,8 @@ Make sure you have [git](https://git-scm.com/book/en/v2/Getting-Started-Installi
     ```bash
     origin	git@github.com:<github_username>/website.git (fetch)
     origin	git@github.com:<github_username>/website.git (push)
-    upstream	https://github.com/kubernetes/website (fetch)
-    upstream	https://github.com/kubernetes/website (push)
+    upstream	https://github.com/kubernetes/website.git (fetch)
+    upstream	https://github.com/kubernetes/website.git (push)
     ```
 
 6. Fetch commits from your fork's `origin/master` and `kubernetes/website`'s `upstream/master`:

From 0e8792c2f752b75b58a67e31afe3427b1dfe042a Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 25 Apr 2021 14:17:00 +0900
Subject: [PATCH 630/788] Make minor changes on
 en/docs/tasks/network/validate-dual-stack

---
 content/en/docs/tasks/network/validate-dual-stack.md | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/tasks/network/validate-dual-stack.md b/content/en/docs/tasks/network/validate-dual-stack.md
index 5e11cb3057..bc90dea4ea 100644
--- a/content/en/docs/tasks/network/validate-dual-stack.md
+++ b/content/en/docs/tasks/network/validate-dual-stack.md
@@ -40,9 +40,10 @@ a00:100::/24
 ```
 There should be one IPv4 block and one IPv6 block allocated.
 
-Validate that the node has an IPv4 and IPv6 interface detected (replace node name with a valid node from the cluster. In this example the node name is k8s-linuxpool1-34450317-0):
+Validate that the node has an IPv4 and IPv6 interface detected. Replace node name with a valid node from the cluster. In this example the node name is `k8s-linuxpool1-34450317-0`:
+
 ```shell
-kubectl get nodes k8s-linuxpool1-34450317-0 -o go-template --template='{{range .status.addresses}}{{printf "%s: %s \n" .type .address}}{{end}}'
+kubectl get nodes k8s-linuxpool1-34450317-0 -o go-template --template='{{range .status.addresses}}{{printf "%s: %s\n" .type .address}}{{end}}'
 ```
 ```
 Hostname: k8s-linuxpool1-34450317-0
@@ -52,9 +53,10 @@ InternalIP: 2001:1234:5678:9abc::5
 
 ### Validate Pod addressing
 
-Validate that a Pod has an IPv4 and IPv6 address assigned. (replace the Pod name with a valid Pod in your cluster. In this example the Pod name is pod01)
+Validate that a Pod has an IPv4 and IPv6 address assigned. Replace the Pod name with a valid Pod in your cluster. In this example the Pod name is `pod01`:
+
 ```shell
-kubectl get pods pod01 -o go-template --template='{{range .status.podIPs}}{{printf "%s \n" .ip}}{{end}}'
+kubectl get pods pod01 -o go-template --template='{{range .status.podIPs}}{{printf "%s\n" .ip}}{{end}}'
 ```
 ```
 10.244.1.4
@@ -72,6 +74,7 @@ You can also validate Pod IPs using the Downward API via the `status.podIPs` fie
 ```
 
 The following command prints the value of the `MY_POD_IPS` environment variable from within a container. The value is a comma separated list that corresponds to the Pod's IPv4 and IPv6 addresses.
+
 ```shell
 kubectl exec -it pod01 -- set | grep MY_POD_IPS
 ```

From c8b33f8ecf0863f50bbb526fc08d34ccdc1246fa Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Sun, 25 Apr 2021 15:24:22 +0800
Subject: [PATCH 631/788] [zh] translate concepts/Node Resource Managers

---
 .../concepts/policy/node-resource-managers.md | 45 +++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 content/zh/docs/concepts/policy/node-resource-managers.md

diff --git a/content/zh/docs/concepts/policy/node-resource-managers.md b/content/zh/docs/concepts/policy/node-resource-managers.md
new file mode 100644
index 0000000000..0651a66f73
--- /dev/null
+++ b/content/zh/docs/concepts/policy/node-resource-managers.md
@@ -0,0 +1,45 @@
+---
+title: 节点资源管理器
+content_type: concept
+weight: 50
+---
+<!-- 
+---
+reviewers:
+- derekwaynecarr
+- klueska
+title: Node Resource Managers 
+content_type: concept
+weight: 50
+---
+-->
+
+<!-- overview -->
+
+<!-- 
+In order to support latency-critical and high-throughput workloads, Kubernetes offers a suite of Resource Managers. The managers aim to co-ordinate and optimise node's resources alignment for pods configured with a specific requirement for CPUs, devices, and memory (hugepages) resources. 
+-->
+Kubernetes 提供了一组资源管理器，用于支持延迟敏感的、高吞吐量的工作负载。
+资源管理器的目标是协调和优化节点资源，以支持对 CPU、设备和内存（巨页）等资源有特殊需求的 Pod。
+
+<!-- body -->
+
+<!-- 
+The main manager, the Topology Manager, is a Kubelet component that co-ordinates the overall resource management process through its [policy](/docs/tasks/administer-cluster/topology-manager/).
+
+The configuration of individual managers is elaborated in dedicated documents:
+-->
+主管理器，也叫拓扑管理器（Topology Manager），是一个 Kubelet 组件，
+它通过[策略](/zh/docs/tasks/administer-cluster/topology-manager/)，
+协调全局的资源管理过程。
+
+各个管理器的配置方式会在专项文档中详细阐述：
+
+<!-- 
+- [CPU Manager Policies](/docs/tasks/administer-cluster/cpu-management-policies/)
+- [Device Manager](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#device-plugin-integration-with-the-topology-manager)
+- [Memory Manger Policies](/docs/tasks/administer-cluster/memory-manager/)
+-->
+- [CPU 管理器策略](/zh/docs/tasks/administer-cluster/cpu-management-policies/)
+- [设备管理器](/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#device-plugin-integration-with-the-topology-manager)
+- [内存管理器策略](/zh/docs/tasks/administer-cluster/memory-manager/)

From 06e7be5ff3c4f73be806a415a9f6fc32286b32a5 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Mon, 5 Apr 2021 14:16:29 +0100
Subject: [PATCH 632/788] Allow localization teams to review their own strings

---
 data/i18n/de/OWNERS     |  13 ++
 data/i18n/de/de.toml    | 203 +++++++++++++++++++++++++++++++
 data/i18n/en/OWNERS     |  13 ++
 data/i18n/en/en.toml    | 226 +++++++++++++++++++++++++++++++++++
 data/i18n/es/OWNERS     |  13 ++
 data/i18n/es/es.toml    | 203 +++++++++++++++++++++++++++++++
 data/i18n/fr/OWNERS     |  13 ++
 data/i18n/fr/fr.toml    | 143 ++++++++++++++++++++++
 data/i18n/hi/OWNERS     |  13 ++
 data/i18n/hi/hi.toml    | 195 ++++++++++++++++++++++++++++++
 data/i18n/id/OWNERS     |  13 ++
 data/i18n/id/id.toml    | 227 +++++++++++++++++++++++++++++++++++
 data/i18n/it/OWNERS     |  11 ++
 data/i18n/it/it.toml    | 197 +++++++++++++++++++++++++++++++
 data/i18n/ja/OWNERS     |  13 ++
 data/i18n/ja/ja.toml    | 203 +++++++++++++++++++++++++++++++
 data/i18n/ko/OWNERS     |  13 ++
 data/i18n/ko/ko.toml    | 232 ++++++++++++++++++++++++++++++++++++
 data/i18n/nl/nl.toml    | 197 +++++++++++++++++++++++++++++++
 data/i18n/no/no.toml    |  68 +++++++++++
 data/i18n/pl/OWNERS     |  13 ++
 data/i18n/pl/pl.toml    | 197 +++++++++++++++++++++++++++++++
 data/i18n/pt/OWNERS     |  11 ++
 data/i18n/pt/pt-br.toml | 240 +++++++++++++++++++++++++++++++++++++
 data/i18n/pt/pt.toml    | 225 +++++++++++++++++++++++++++++++++++
 data/i18n/ru/OWNERS     |  13 ++
 data/i18n/ru/ru.toml    | 201 +++++++++++++++++++++++++++++++
 data/i18n/uk/OWNERS     |  13 ++
 data/i18n/uk/uk.toml    | 255 +++++++++++++++++++++++++++++++++++++++
 data/i18n/vi/OWNERS     |  13 ++
 data/i18n/vi/vi.toml    | 197 +++++++++++++++++++++++++++++++
 data/i18n/zh/OWNERS     |  13 ++
 data/i18n/zh/zh.toml    | 230 ++++++++++++++++++++++++++++++++++++
 i18n/de.toml            | 204 +-------------------------------
 i18n/en.toml            | 227 +----------------------------------
 i18n/es.toml            | 204 +-------------------------------
 i18n/fr.toml            | 144 +---------------------
 i18n/hi.toml            | 196 +-----------------------------
 i18n/id.toml            | 228 +----------------------------------
 i18n/it.toml            | 198 +------------------------------
 i18n/ja.toml            | 204 +-------------------------------
 i18n/ko.toml            | 233 +-----------------------------------
 i18n/nl.toml            | 198 +------------------------------
 i18n/no.toml            |  69 +----------
 i18n/pl.toml            | 198 +------------------------------
 i18n/pt-br.toml         | 241 +------------------------------------
 i18n/ru.toml            | 202 +------------------------------
 i18n/uk.toml            | 256 +---------------------------------------
 i18n/vi.toml            | 198 +------------------------------
 i18n/zh.toml            | 231 +-----------------------------------
 50 files changed, 3847 insertions(+), 3414 deletions(-)
 create mode 100644 data/i18n/de/OWNERS
 create mode 100644 data/i18n/de/de.toml
 create mode 100644 data/i18n/en/OWNERS
 create mode 100644 data/i18n/en/en.toml
 create mode 100644 data/i18n/es/OWNERS
 create mode 100644 data/i18n/es/es.toml
 create mode 100644 data/i18n/fr/OWNERS
 create mode 100644 data/i18n/fr/fr.toml
 create mode 100644 data/i18n/hi/OWNERS
 create mode 100644 data/i18n/hi/hi.toml
 create mode 100644 data/i18n/id/OWNERS
 create mode 100644 data/i18n/id/id.toml
 create mode 100644 data/i18n/it/OWNERS
 create mode 100644 data/i18n/it/it.toml
 create mode 100644 data/i18n/ja/OWNERS
 create mode 100644 data/i18n/ja/ja.toml
 create mode 100644 data/i18n/ko/OWNERS
 create mode 100644 data/i18n/ko/ko.toml
 create mode 100644 data/i18n/nl/nl.toml
 create mode 100644 data/i18n/no/no.toml
 create mode 100644 data/i18n/pl/OWNERS
 create mode 100644 data/i18n/pl/pl.toml
 create mode 100644 data/i18n/pt/OWNERS
 create mode 100644 data/i18n/pt/pt-br.toml
 create mode 100644 data/i18n/pt/pt.toml
 create mode 100644 data/i18n/ru/OWNERS
 create mode 100644 data/i18n/ru/ru.toml
 create mode 100644 data/i18n/uk/OWNERS
 create mode 100644 data/i18n/uk/uk.toml
 create mode 100644 data/i18n/vi/OWNERS
 create mode 100644 data/i18n/vi/vi.toml
 create mode 100644 data/i18n/zh/OWNERS
 create mode 100644 data/i18n/zh/zh.toml
 mode change 100644 => 120000 i18n/de.toml
 mode change 100644 => 120000 i18n/en.toml
 mode change 100644 => 120000 i18n/es.toml
 mode change 100644 => 120000 i18n/fr.toml
 mode change 100644 => 120000 i18n/hi.toml
 mode change 100644 => 120000 i18n/id.toml
 mode change 100644 => 120000 i18n/it.toml
 mode change 100644 => 120000 i18n/ja.toml
 mode change 100644 => 120000 i18n/ko.toml
 mode change 100644 => 120000 i18n/nl.toml
 mode change 100644 => 120000 i18n/no.toml
 mode change 100644 => 120000 i18n/pl.toml
 mode change 100644 => 120000 i18n/pt-br.toml
 mode change 100644 => 120000 i18n/ru.toml
 mode change 100644 => 120000 i18n/uk.toml
 mode change 100644 => 120000 i18n/vi.toml
 mode change 100644 => 120000 i18n/zh.toml

diff --git a/data/i18n/de/OWNERS b/data/i18n/de/OWNERS
new file mode 100644
index 0000000000..63d33cd516
--- /dev/null
+++ b/data/i18n/de/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for German.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-de-reviews
+
+approvers:
+- sig-docs-de-owners
+
+labels:
+- language/de
diff --git a/data/i18n/de/de.toml b/data/i18n/de/de.toml
new file mode 100644
index 0000000000..cd4c3d7924
--- /dev/null
+++ b/data/i18n/de/de.toml
@@ -0,0 +1,203 @@
+# i18n strings for the German (main) site.
+
+[deprecation_warning]
+other = " Die Dokumentation wird nicht mehr aktiv gepflegt. Die aktuell angezeigte Version ist eine statische Momentaufnahme. Aktuelle Dokumentation finden Sie unter "
+
+[deprecation_file_warning]
+other = "Veraltet"
+
+[objectives_heading]
+other = "Ziele"
+
+[cleanup_heading]
+other = "Aufräumen"
+
+[prerequisites_heading]
+other = "Bevor Sie beginnen"
+
+[subscribe_button]
+other = "Abonnieren"
+
+[whatsnext_heading]
+other = "Nächste Schritte"
+
+[feedback_heading]
+other = "Feedback"
+
+[feedback_question]
+other = "War diese Seite hilfreich?"
+
+[feedback_yes]
+other = "Ja"
+
+[feedback_no]
+other = "Nein"
+
+[latest_version]
+other = "aktuelle Version."
+
+[version_check_mustbe]
+other = "Ihr Kubernetes-Server benötigt die Version "
+
+[version_check_mustbeorlater]
+other = "Ihr Kubernetes-Server benötigt mindestens die Version  "
+
+[version_check_tocheck]
+other = "Um die Version zu überprüfen, geben Sie Folgendes ein "
+
+[caution]
+other = "Achtung:"
+
+[note]
+other = "Hinweis:"
+
+[warning]
+other = "Warnung:"
+
+[main_read_about]
+other = "Mehr Informationen"
+
+[main_read_more]
+other = "Weiterlesen"
+
+[main_github_invite]
+other = "Interested in hacking on the core Kubernetes code base?"
+
+[main_github_view_on]
+other = "Auf GitHub ansehen"
+
+[main_github_create_an_issue]
+other = "Problem berichten"
+
+[main_community_explore]
+other = "Entdecke die Community"
+
+[main_kubernetes_features]
+other = "Kubernetes Features"
+
+[main_cncf_project]
+other = """Wir sind ein <a href="https://cncf.io/">CNCF</a> Abschlussprojekt</p>"""
+
+[main_kubeweekly_baseline]
+other = "Möchten Sie die neuesten Nachrichten von Kubernetes erhalten? Melden Sie sich für KubeWeekly an."
+
+[main_kubernetes_past_link]
+other = "Frühere Newsletter anzeigen"
+
+[main_kubeweekly_signup]
+other = "Abonnieren"
+
+[main_contribute]
+other = "Contribute"
+
+[main_edit_this_page]
+other = "Diese Seite bearbeiten"
+
+[main_page_history]
+other ="Seitenverlauf"
+
+[main_page_last_modified_on]
+other = "Letzte Änderung am"
+
+[main_by]
+other = "durch"
+
+[main_documentation_license]
+other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+# Labels for the docs portal home page.
+[docs_label_browse]
+other = "Dokumention durchsuchen"
+
+[docs_label_contributors]
+other = "Mitwirkende"
+
+[docs_label_users]
+other = "Users"
+
+[docs_label_i_am]
+other = "ICH BIN..."
+
+
+# layouts > blog > pager
+
+[layouts_blog_pager_prev]
+other = "<< Zurück"
+
+[layouts_blog_pager_next]
+other = "Vor >>"
+
+# layouts > blog > list
+
+[layouts_case_studies_list_tell]
+other = "Erzählen Sie Ihre Geschichte"
+
+# layouts > docs > glossary
+
+[layouts_docs_glossary_description]
+other = "Dieses Glossar soll eine umfassende, standardisierte Liste der Kubernetes-Terminologie darstellen. Es enthält technische Begriffe, die für K8 spezifisch sind, sowie allgemeinere Begriffe, die einen nützlichen Kontext bieten."
+
+[layouts_docs_glossary_filter]
+other = "Begriffe nach ihren Tags filtern"
+
+[layouts_docs_glossary_select_all]
+other = "Alle auswählen"
+
+[layouts_docs_glossary_deselect_all]
+other = "Alle abwählen"
+
+[layouts_docs_glossary_aka]
+other = "Auch bekannt als"
+
+[layouts_docs_glossary_click_details_before]
+other = "Klicken Sie auf die"
+
+[layouts_docs_glossary_click_details_after]
+other = "Indikatoren unten, um eine längere Erklärung für einen bestimmten Begriff zu erhalten."
+
+# layouts > docs > search
+
+[layouts_docs_search_fetching]
+other = "Ergebnisse werden abgerufen..."
+
+# layouts > partial > feedback
+
+[layouts_docs_partials_feedback_thanks]
+other = "Danke für die Rückmeldung. Wenn Sie eine spezifische, beantwortbare Frage zur Verwendung von Kubernetes haben, stellen Sie diese unter "
+
+[layouts_docs_partials_feedback_issue]
+other = "Öffnen Sie ein Problem im GitHub-Repo, wenn Sie möchten "
+
+[layouts_docs_partials_feedback_problem]
+other = "Ein Problem melden"
+
+[layouts_docs_partials_feedback_or]
+other = "oder"
+
+[layouts_docs_partials_feedback_improvement]
+other = "Eine Verbesserung vorschlagen"
+
+
+# Community links
+[community_twitter_name]
+other = "Twitter"
+[community_github_name]
+other = "GitHub"
+[community_slack_name]
+other = "Slack"
+[community_stack_overflow_name]
+other = "Stack Overflow"
+[community_forum_name]
+other = "Forum"
+[community_events_calendar]
+other = "Veranstaltungskalender"
+
+# UI elements
+[ui_search_placeholder]
+other = "Suchen"
+
+[input_placeholder_email_address]
+other = "E-Mail-Addresse"
\ No newline at end of file
diff --git a/data/i18n/en/OWNERS b/data/i18n/en/OWNERS
new file mode 100644
index 0000000000..39cf7550c6
--- /dev/null
+++ b/data/i18n/en/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Upstream (English) localized strings.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-en-reviews
+
+approvers:
+- sig-docs-en-owners
+
+labels:
+- language/en
diff --git a/data/i18n/en/en.toml b/data/i18n/en/en.toml
new file mode 100644
index 0000000000..c6f24f8e2e
--- /dev/null
+++ b/data/i18n/en/en.toml
@@ -0,0 +1,226 @@
+# i18n strings for the English (main) site.
+# NOTE: Please keep the entries in alphabetical order when editing
+[caution]
+other = "Caution:"
+
+[cleanup_heading]
+other = "Cleaning up"
+
+[community_events_calendar]
+other = "Events Calendar"
+
+[community_forum_name]
+other = "Forum"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_title]
+other = "You are viewing documentation for Kubernetes version:"
+
+[deprecation_warning]
+other = " documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the "
+
+[deprecation_file_warning]
+other = "Deprecated"
+
+[docs_label_browse]
+other = "Browse Docs"
+
+[docs_label_contributors]
+other = "Contributors"
+
+[docs_label_i_am]
+other = "I AM..."
+
+[docs_label_users]
+other = "Users"
+
+[docs_version_current]
+other = "(this documentation)"
+
+[docs_version_latest_heading]
+other = "Latest version"
+
+[docs_version_other_heading]
+other = "Older versions"
+
+[error_404_were_you_looking_for]
+other = "Were you looking for:"
+
+[examples_heading]
+other = "Examples"
+
+[feedback_heading]
+other = "Feedback"
+
+[feedback_no]
+other = "No"
+
+[feedback_question]
+other = "Was this page helpful?"
+
+[feedback_yes]
+other = "Yes"
+
+[input_placeholder_email_address]
+other = "email address"
+
+[latest_version]
+other = "latest version."
+
+[layouts_blog_pager_prev]
+other = "<< Prev"
+
+[layouts_blog_pager_next]
+other = "Next >>"
+
+[layouts_case_studies_list_tell]
+other = "Tell your story"
+
+[layouts_docs_glossary_aka]
+other = "Also known as"
+
+[layouts_docs_glossary_description]
+other = "This glossary is intended to be a comprehensive, standardized list of Kubernetes terminology. It includes technical terms that are specific to Kubernetes, as well as more general terms that provide useful context."
+
+[layouts_docs_glossary_deselect_all]
+other = "Deselect all"
+
+[layouts_docs_glossary_click_details_after]
+other = "indicators below to get a longer explanation for any particular term."
+
+[layouts_docs_glossary_click_details_before]
+other = "Click on the"
+
+[layouts_docs_glossary_filter]
+other = "Filter terms according to their tags"
+
+[layouts_docs_glossary_select_all]
+other = "Select all"
+
+[layouts_docs_partials_feedback_improvement]
+other = "suggest an improvement"
+
+[layouts_docs_partials_feedback_issue]
+other = "Open an issue in the GitHub repo if you want to "
+
+[layouts_docs_partials_feedback_or]
+other = "or"
+
+[layouts_docs_partials_feedback_problem]
+other = "report a problem"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on"
+
+[layouts_docs_search_fetching]
+other = "Fetching results..."
+
+[main_by]
+other = "by"
+
+[main_cncf_project]
+other = """We are a <a href="https://cncf.io/">CNCF</a> graduated project</p>"""
+
+[main_community_explore]
+other = "Explore the community"
+
+[main_contribute]
+other = "Contribute"
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+[main_documentation_license]
+other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_github_invite]
+other = "Interested in hacking on the core Kubernetes code base?"
+
+[main_github_view_on]
+other = "View On GitHub"
+
+[main_kubernetes_features]
+other = "Kubernetes Features"
+
+[main_kubeweekly_baseline]
+other = "Interested in receiving the latest Kubernetes news? Sign up for KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "View past newsletters"
+
+[main_kubeweekly_signup]
+other = "Subscribe"
+
+[main_page_history]
+other ="Page History"
+
+[main_page_last_modified_on]
+other = "Page last modified on"
+
+[main_read_about]
+other = "Read about"
+
+[main_read_more]
+other = "Read more"
+
+[note]
+other = "Note:"
+
+[objectives_heading]
+other = "Objectives"
+
+[options_heading]
+other = "Options"
+
+[post_create_issue]
+other = "Create an issue"
+
+[prerequisites_heading]
+other = "Before you begin"
+
+[seealso_heading]
+other = "See Also"
+
+[subscribe_button]
+other = "Subscribe"
+
+[synopsis_heading]
+other = "Synopsis"
+
+[thirdparty_message]
+other = """This section links to third party projects that provide functionality required by Kubernetes. The Kubernetes project authors aren't responsible for these projects. This page follows <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF website guidelines</a> by listing projects alphabetically. To add a project to this list, read the <a href="/docs/contribute/style/content-guide/#third-party-content">content guide</a> before submitting a change."""
+
+[ui_search_placeholder]
+other = "Search"
+
+[version_check_mustbe]
+other = "Your Kubernetes server must be version "
+
+[version_check_mustbeorlater]
+other = "Your Kubernetes server must be at or later than version "
+
+[version_check_tocheck]
+other = "To check the version, enter "
+
+[version_menu]
+other = "Versions"
+
+[warning]
+other = "Warning:"
+
+[whatsnext_heading]
+other = "What's next"
diff --git a/data/i18n/es/OWNERS b/data/i18n/es/OWNERS
new file mode 100644
index 0000000000..40b7c2ebd5
--- /dev/null
+++ b/data/i18n/es/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Spanish.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-es-reviews
+
+approvers:
+- sig-docs-es-owners
+
+labels:
+- language/es
diff --git a/data/i18n/es/es.toml b/data/i18n/es/es.toml
new file mode 100644
index 0000000000..c232ce7c27
--- /dev/null
+++ b/data/i18n/es/es.toml
@@ -0,0 +1,203 @@
+# i18n strings for the Spanish (main) site.
+
+[deprecation_warning]
+other = " ya no mantiene activamente la documentación. La versión que está viendo actualmente es una instantánea estática. Para la documentación actualizada, visita la "
+
+[deprecation_file_warning]
+other = "Descontinuado"
+
+[objectives_heading]
+other = "Objetivos"
+
+[cleanup_heading]
+other = "Limpieza de recursos"
+
+[prerequisites_heading]
+other = "Antes de empezar"
+
+[subscribe_button]
+other = "Suscribir"
+
+[whatsnext_heading]
+other = "Siguientes pasos"
+
+[feedback_heading]
+other = "Comentarios"
+
+[feedback_question]
+other = "¿Esta página le ha sido de ayuda?"
+
+[feedback_yes]
+other = "Sí"
+
+[feedback_no]
+other = "No"
+
+[latest_version]
+other = "última versión."
+
+[version_check_mustbe]
+other = "Su versión de Kubernetes debe ser "
+
+[version_check_mustbeorlater]
+other = "Su versión de Kubernetes debe ser como mínimo "
+
+[version_check_tocheck]
+other = "Para comprobar la versión, introduzca "
+
+[caution]
+other = "Precaución:"
+
+[note]
+other = "Nota:"
+
+[warning]
+other = "Advertencia:"
+
+[main_read_about]
+other = "Leer"
+
+[main_read_more]
+other = "Leer más"
+
+[main_github_invite]
+other = "¿Está interesado en participar en el código base de Kubernetes?"
+
+[main_github_view_on]
+other = "Ver en GitHub"
+
+[main_github_create_an_issue]
+other = "Abrir un Issue"
+
+[main_community_explore]
+other = "Explorar la comunidad"
+
+[main_kubernetes_features]
+other = "Características de Kubernetes"
+
+[main_cncf_project]
+other = """Somos un proyecto graduado de la <a href="https://cncf.io/">CNCF</a></p>"""
+
+[main_kubeweekly_baseline]
+other = "¿Interesado en recibir las últimas noticias de Kubernetes? Suscríbase a KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "Ver boletines anteriores"
+
+[main_kubeweekly_signup]
+other = "Suscríbase"
+
+[main_contribute]
+other = "Contribuir"
+
+[main_edit_this_page]
+other = "Editar esta página"
+
+[main_page_history]
+other ="Historial cambios"
+
+[main_page_last_modified_on]
+other = "Página modificada por última vez el "
+
+[main_by]
+other = "por"
+
+[main_documentation_license]
+other = """Los autores de Kubernetes | Documentación distribuida bajo <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. Todos los derechos reservados. The Linux Foundation tiene marcas registradas y utiliza marcas registradas. Para obtener una lista de marcas registradas por The Linux Foundation, visita <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+# Labels for the docs portal home page.
+[docs_label_browse]
+other = "Explorar la documentación"
+
+[docs_label_contributors]
+other = "Contribuidores"
+
+[docs_label_users]
+other = "Usuarios"
+
+[docs_label_i_am]
+other = "Yo soy..."
+
+# layouts > blog > pager
+
+[layouts_blog_pager_prev]
+other = "<< Anterior"
+
+[layouts_blog_pager_next]
+other = "Siguiente >>"
+
+# layouts > blog > list
+
+[layouts_case_studies_list_tell]
+other = "Cuéntanos tu historia"
+
+# layouts > docs > glossary
+
+[layouts_docs_glossary_description]
+other = "Este glosario tiene la intención de ser una lista completa y estandarizada de la terminología de Kubernetes. Incluye términos técnicos que son específicos de k8s, así como términos más generales que proporcionan un contexto."
+
+[layouts_docs_glossary_filter]
+other = "Filtrar terminos por categoría:"
+
+[layouts_docs_glossary_select_all]
+other = "Seleccionar todos"
+
+[layouts_docs_glossary_deselect_all]
+other = "Elmininar selección"
+
+[layouts_docs_glossary_aka]
+other = "Also known as"
+
+[layouts_docs_glossary_click_details_before]
+other = "Haz click en el símbolo"
+
+[layouts_docs_glossary_click_details_after]
+other = "para obtener información detallada sobre el término."
+
+# layouts > docs > search
+
+[layouts_docs_search_fetching]
+other = "Obteniendo resultados.."
+
+# layouts > partial > feedback
+
+[layouts_docs_partials_feedback_thanks]
+other = "Muchas gracias por el feedback. Si tienes alguna pregunta específica sobre como usar Kubernetes, puedes preguntar en"
+
+[layouts_docs_partials_feedback_issue]
+other = "Abre un issue en el repositorio de GitHub si quieres"
+
+[layouts_docs_partials_feedback_problem]
+other = "reportar un problema"
+
+[layouts_docs_partials_feedback_or]
+other = "o"
+
+[layouts_docs_partials_feedback_improvement]
+other = "sugerir alguna mejora"
+
+# Community links
+[community_twitter_name]
+other = "Twitter"
+[community_github_name]
+other = "GitHub"
+[community_slack_name]
+other = "Slack"
+[community_stack_overflow_name]
+other = "Stack Overflow"
+[community_forum_name]
+other = "Foro"
+[community_events_calendar]
+other = "Calendario de eventos"
+[community_youtube_name]
+other = "YouTube"
+
+# UI elements
+[ui_search_placeholder]
+other = "Buscar"
+
+[input_placeholder_email_address]
+other = "dirección de correo electrónico"
\ No newline at end of file
diff --git a/data/i18n/fr/OWNERS b/data/i18n/fr/OWNERS
new file mode 100644
index 0000000000..baeda53bd4
--- /dev/null
+++ b/data/i18n/fr/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for French.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-fr-reviews
+
+approvers:
+- sig-docs-fr-owners
+
+labels:
+- language/fr
diff --git a/data/i18n/fr/fr.toml b/data/i18n/fr/fr.toml
new file mode 100644
index 0000000000..4cfc419cb7
--- /dev/null
+++ b/data/i18n/fr/fr.toml
@@ -0,0 +1,143 @@
+# i18n strings for the French (main) site.
+
+[deprecation_warning]
+other = " documentation non maintenue. Vous consultez une version statique. Pour une documentation à jour, veuillez consulter: "
+
+[objectives_heading]
+other = "Objectifs"
+
+[cleanup_heading]
+other = "Cleanup"
+
+[prerequisites_heading]
+other = "Pré-requis"
+
+[subscribe_button]
+other = "Souscrire"
+
+[whatsnext_heading]
+other = "A suivre"
+
+[feedback_heading]
+other = "Feedback"
+
+[feedback_question]
+other = "Cette page est elle utile ?"
+
+[feedback_yes]
+other = "Oui"
+
+[feedback_no]
+other = "Non"
+
+[latest_version]
+other = "dernière version."
+
+[version_check_mustbe]
+other = "Votre serveur Kubernetes doit être version "
+
+[version_check_mustbeorlater]
+other = "Votre serveur Kubernetes doit être au moins à la version "
+
+[version_check_tocheck]
+other = "Pour consulter la version, entrez "
+
+[caution]
+other = "Avertissement:"
+
+[note]
+other = "Note:"
+
+[warning]
+other = "Attention:"
+
+[main_read_about]
+other = "A propos"
+
+[main_read_more]
+other = "Autres ressources"
+
+[main_github_invite]
+other = "Souhaitez vous contribuer au code de Kubernetes ?"
+
+[main_github_view_on]
+other = "Voir sur GitHub"
+
+[main_github_create_an_issue]
+other = "Ouvrez un ticket"
+
+[main_community_explore]
+other = "Explorez la communauté"
+
+[main_kubernetes_features]
+other = "Fonctionnalités Kubernetes"
+
+[main_cncf_project]
+other = """Nous sommes un projet <a href="https://cncf.io/">CNCF</a> diplômé</p>"""
+
+[main_kubeweekly_baseline]
+other = "Intéressez pour recevoir les dernières informations sur Kubernetes ? Abonnez-vous à KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "Voir les newsletters précédentes"
+
+[main_kubeweekly_signup]
+other = "S'abonner"
+
+[main_contribute]
+other = "Contribuer"
+
+[main_edit_this_page]
+other = "Editez cette page"
+
+[main_page_history]
+other ="Historique"
+
+[main_page_last_modified_on]
+other = "Dernière modification le"
+
+[main_by]
+other = "de"
+
+[main_documentation_license]
+other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+# Labels for the docs portal home page.
+[docs_label_browse]
+other = "Parcourir la documentation"
+
+[docs_label_contributors]
+other = "Contributeurs"
+
+[docs_label_users]
+other = "Utilisateurs"
+
+[docs_label_i_am]
+other = "JE SUIS..."
+
+[examples_heading]
+other = "Exemples"
+
+# Community links
+[community_twitter_name]
+other = "Twitter"
+[community_github_name]
+other = "GitHub"
+[community_slack_name]
+other = "Slack"
+[community_stack_overflow_name]
+other = "Stack Overflow"
+[community_forum_name]
+other = "Forum"
+[community_events_calendar]
+other = "Calendrier"
+
+# UI elements
+[ui_search_placeholder]
+other = "Recherche"
+
+[input_placeholder_email_address]
+other = "adresse email"
diff --git a/data/i18n/hi/OWNERS b/data/i18n/hi/OWNERS
new file mode 100644
index 0000000000..4e43a2939e
--- /dev/null
+++ b/data/i18n/hi/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Hindi.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-hi-reviews
+
+approvers:
+- sig-docs-hi-owners
+
+labels:
+- language/hi
diff --git a/data/i18n/hi/hi.toml b/data/i18n/hi/hi.toml
new file mode 100644
index 0000000000..2e5d6ad331
--- /dev/null
+++ b/data/i18n/hi/hi.toml
@@ -0,0 +1,195 @@
+# i18n strings for the English (main) site.
+
+[deprecation_warning]
+other = " documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the "
+
+[deprecation_file_warning]
+other = "Deprecated"
+
+[objectives_heading]
+other = "Objectives"
+
+[cleanup_heading]
+other = "Cleaning up"
+
+[prerequisites_heading]
+other = "Before you begin"
+
+[whatsnext_heading]
+other = "What's next"
+
+[feedback_heading]
+other = "Feedback"
+
+[feedback_question]
+other = "Was this page helpful?"
+
+[feedback_yes]
+other = "Yes"
+
+[feedback_no]
+other = "No"
+
+[latest_version]
+other = "latest version."
+
+[version_check_mustbe]
+other = "Your Kubernetes server must be version "
+
+[version_check_mustbeorlater]
+other = "Your Kubernetes server must be at or later than version "
+
+[version_check_tocheck]
+other = "To check the version, enter "
+
+[caution]
+other = "Caution:"
+
+[note]
+other = "Note:"
+
+[warning]
+other = "Warning:"
+
+[main_read_about]
+other = "Read about"
+
+[main_read_more]
+other = "Read more"
+
+[main_github_invite]
+other = "Interested in hacking on the core Kubernetes code base?"
+
+[main_github_view_on]
+other = "View On GitHub"
+
+[main_github_create_an_issue]
+other = "Create an Issue"
+
+[main_community_explore]
+other = "Explore the community"
+
+[main_kubernetes_features]
+other = "Kubernetes Features"
+
+[main_cncf_project]
+other = """We are a <a href="https://cncf.io/">CNCF</a> graduated project</p>"""
+
+[main_kubeweekly_baseline]
+other = "Interested in receiving the latest Kubernetes news? Sign up for KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "View past newsletters"
+
+[main_kubeweekly_signup]
+other = "Subscribe"
+
+[main_contribute]
+other = "Contribute"
+
+[main_edit_this_page]
+other = "Edit This Page"
+
+[main_page_history]
+other ="Page History"
+
+[main_page_last_modified_on]
+other = "Page last modified on"
+
+[main_by]
+other = "by"
+
+[main_documentation_license]
+other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+# Labels for the docs portal home page.
+[docs_label_browse]
+other = "Browse Docs"
+
+[docs_label_contributors]
+other = "Contributors"
+
+[docs_label_users]
+other = "Users"
+
+[docs_label_i_am]
+other = "I AM..."
+
+# layouts > blog > pager
+
+[layouts_blog_pager_prev]
+other = "<< Prev"
+
+[layouts_blog_pager_next]
+other = "Next >>"
+
+# layouts > blog > list
+
+[layouts_case_studies_list_tell]
+other = "Tell your story"
+
+# layouts > docs > glossary
+
+[layouts_docs_glossary_description]
+other = "This glossary is intended to be a comprehensive, standardized list of Kubernetes terminology. It includes technical terms that are specific to K8s, as well as more general terms that provide useful context."
+
+[layouts_docs_glossary_filter]
+other = "Filter terms according to their tags"
+
+[layouts_docs_glossary_select_all]
+other = "Select all"
+
+[layouts_docs_glossary_deselect_all]
+other = "Deselect all"
+
+[layouts_docs_glossary_aka]
+other = "Also known as"
+
+[layouts_docs_glossary_click_details_before]
+other = "Click on the"
+
+[layouts_docs_glossary_click_details_after]
+other = "indicators below to get a longer explanation for any particular term."
+
+# layouts > docs > search
+
+[layouts_docs_search_fetching]
+other = "Fetching results.."
+
+# layouts > partial > feedback
+
+[layouts_docs_partials_feedback_thanks]
+other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on"
+
+[layouts_docs_partials_feedback_issue]
+other = "Open an issue in the GitHub repo if you want to "
+
+[layouts_docs_partials_feedback_problem]
+other = "report a problem"
+
+[layouts_docs_partials_feedback_or]
+other = "or"
+
+[layouts_docs_partials_feedback_improvement]
+other = "suggest an improvement"
+
+# Community links
+[community_twitter_name]
+other = "Twitter"
+[community_github_name]
+other = "GitHub"
+[community_slack_name]
+other = "Slack"
+[community_stack_overflow_name]
+other = "Stack Overflow"
+[community_forum_name]
+other = "Forum"
+[community_events_calendar]
+other = "Events Calendar"
+
+# UI elements
+[ui_search_placeholder]
+other = "Search"
diff --git a/data/i18n/id/OWNERS b/data/i18n/id/OWNERS
new file mode 100644
index 0000000000..98a4ead779
--- /dev/null
+++ b/data/i18n/id/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Bahasa.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-id-reviews
+
+approvers:
+- sig-docs-id-owners
+
+labels:
+- language/id
diff --git a/data/i18n/id/id.toml b/data/i18n/id/id.toml
new file mode 100644
index 0000000000..101ea071ff
--- /dev/null
+++ b/data/i18n/id/id.toml
@@ -0,0 +1,227 @@
+# i18n strings for the Indonesian version of the site (https://kubernetes.io/id/)
+# NOTE: Please keep the entries in alphabetical order when editing
+
+[caution]
+other = "Perhatian:"
+
+[cleanup_heading]
+other = "Bersihkan"
+
+[community_events_calendar]
+other = "Kalender Acara"
+
+[community_forum_name]
+other = "Forum"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_title]
+other = "Kamu sedang menampilkan dokumentasi untuk Kubernetes versi:"
+
+[deprecation_warning]
+other = " dokumentasi sudah tidak dirawat lagi. Versi yang kamu lihat ini hanyalah snapshot statis. Untuk dokumentasi terkini, lihat "
+
+[deprecation_file_warning]
+other = "Sudah usang"
+
+[docs_label_browse]
+other = "Telusuri Dokumentasi"
+
+[docs_label_contributors]
+other = "Kontributor"
+
+[docs_label_i_am]
+other = "AKU..."
+
+[docs_label_users]
+other = "Pengguna"
+
+[docs_version_current]
+other = "(dokumentasi ini)"
+
+[docs_version_latest_heading]
+other = "Versi terbaru"
+
+[docs_version_other_heading]
+other = "Versi lama"
+
+[error_404_were_you_looking_for]
+other = "Apakah kamu sedang mencari:"
+
+[examples_heading]
+other = "Contoh"
+
+[feedback_heading]
+other = "Masukan"
+
+[feedback_no]
+other = "Tidak"
+
+[feedback_question]
+other = "Apakah halaman ini membantu?"
+
+[feedback_yes]
+other = "Ya"
+
+[input_placeholder_email_address]
+other = "alamat email"
+
+[latest_version]
+other = "versi terbaru."
+
+[layouts_blog_pager_prev]
+other = "<< Sebelumnya"
+
+[layouts_blog_pager_next]
+other = "Selanjutnya >>"
+
+[layouts_case_studies_list_tell]
+other = "Ceritakan kisahmu"
+
+[layouts_docs_glossary_aka]
+other = "Dikenal juga sebagai"
+
+[layouts_docs_glossary_description]
+other = "Glosarium ini dimaksudkan sebagai daftar terminologi Kubernetes yang komprehensif dan terstandardisasi. Glosarium ini mencakup istilah-istilah teknis yang spesifik digunakan di Kubernetes, serta beberapa istilah umum untuk membantu memberikan konteks."
+
+[layouts_docs_glossary_deselect_all]
+other = "Hapus semua pilihan"
+
+[layouts_docs_glossary_click_details_after]
+other = "indikator di bawah ini untuk mendapatkan penjelasan yang lebih lengkap untuk istilah tertentu."
+
+[layouts_docs_glossary_click_details_before]
+other = "Klik pada"
+
+[layouts_docs_glossary_filter]
+other = "Filter istilah sesuai dengan penandanya"
+
+[layouts_docs_glossary_select_all]
+other = "Pilih semua"
+
+[layouts_docs_partials_feedback_improvement]
+other = "beri saran perbaikan"
+
+[layouts_docs_partials_feedback_issue]
+other = "Buat isu di repositori GitHub jika kamu ingin "
+
+[layouts_docs_partials_feedback_or]
+other = "atau"
+
+[layouts_docs_partials_feedback_problem]
+other = "laporkan problem"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Terima kasih atas masukannya. Jika kamu mempunyai pertanyaan yang spesifik terkait bagaimana menggunakan Kubernetes, tanyakanlah di "
+
+[layouts_docs_search_fetching]
+other = "Mengambil hasil..."
+
+[main_by]
+other = "oleh"
+
+[main_cncf_project]
+other = """Kami merupakan proyek yang lulus dari <a href="https://cncf.io/">CNCF</a></p>"""
+
+[main_community_explore]
+other = "Jelajahi komunitas"
+
+[main_contribute]
+other = "Bantu"
+
+[main_copyright_notice]
+other = """Linux Foundation &reg;. Hak cipta dilindungi. Linux Foundation telah mendaftarkan merek dagang dan pengunaannya. Perinciannya bisa dilihat pada <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">halaman penggunaan merek dagang</a>"""
+
+[main_documentation_license]
+other = """Para Pencipta Kubernetes | Dokumentasi didistribusikan di bawah <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_github_invite]
+other = "Tertarik untuk mengulik kode dari Kubernetes?"
+
+[main_github_view_on]
+other = "Lihat di GitHub"
+
+[main_kubernetes_features]
+other = "Fitur Kubernetes"
+
+[main_kubeweekly_baseline]
+other = "Tertarik untuk mendapatkan info terbaru tentang Kubernetes? Daftarkan dirimu ke KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "Lihat buletin edisi sebelumnya"
+
+[main_kubeweekly_signup]
+other = "Langganan"
+
+[main_page_history]
+other ="Riwayat laman"
+
+[main_page_last_modified_on]
+other = "Halaman diubah terakhir kali pada"
+
+[main_read_about]
+other = "Baca tentang"
+
+[main_read_more]
+other = "Baca lebih lanjut"
+
+[note]
+other = "Catatan:"
+
+[objectives_heading]
+other = "Tujuan"
+
+[options_heading]
+other = "Opsi"
+
+[post_create_issue]
+other = "Buat isu"
+
+[prerequisites_heading]
+other = "Sebelum kamu memulai"
+
+[seealso_heading]
+other = "Lihat juga"
+
+[subscribe_button]
+other = "Langganan"
+
+[synopsis_heading]
+other = "Sinopsis"
+
+[thirdparty_message]
+other = """Bagian ini tertaut ke proyek-proyek pihak ketiga yang menyediakan fungsionalitas yang dibutuhkan oleh Kubernetes. Pencipta proyek Kubernetes tidak bertanggung jawab atas proyek-proyek tersebut. Laman ini mengikuti <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">pedoman website CNCF</a> dengan membuat daftar proyek menurut abjad. Untuk menambakan proyek ke dalam daftar ini, bacalah <a href="/docs/contribute/style/content-guide/#third-party-content">panduan</a> sebelum mengirimkan perubahan."""
+
+[ui_search_placeholder]
+other = "Cari"
+
+[version_check_mustbe]
+other = "Kubernetes servermu harus dalam versi "
+
+[version_check_mustbeorlater]
+other = "Kubernetes servermu harus dalam versi yang sama atau lebih baru dari "
+
+[version_check_tocheck]
+other = "Untuk melihat versi, tekan "
+
+[version_menu]
+other = "Versi"
+
+[warning]
+other = "Peringatan:"
+
+[whatsnext_heading]
+other = "Selanjutnya"
diff --git a/data/i18n/it/OWNERS b/data/i18n/it/OWNERS
new file mode 100644
index 0000000000..e2a59b255f
--- /dev/null
+++ b/data/i18n/it/OWNERS
@@ -0,0 +1,11 @@
+# Localized strings for Italian.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-it-reviews
+
+approvers:
+- sig-docs-it-owners
+
+labels:
+- language/it
\ No newline at end of file
diff --git a/data/i18n/it/it.toml b/data/i18n/it/it.toml
new file mode 100644
index 0000000000..7c0970dfaa
--- /dev/null
+++ b/data/i18n/it/it.toml
@@ -0,0 +1,197 @@
+# i18n strings for the Italian site.
+# NOTE: Please keep the entries in alphabetical order when editing
+
+[caution]
+other = "Attenzione: "
+
+[cleanup_heading]
+other = "In pulizia"
+
+[community_events_calendar]
+other = "Calendario Eventi"
+
+[community_forum_name]
+other = "Forum"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_warning]
+other = " documentazione non è più manutenuta. La versione che stai visualizzando in questo momento è archiviata. Per una versione aggiornata, guarda "
+
+[deprecation_file_warning]
+other = "Deprecata"
+
+[docs_label_browse]
+other = "Sfoglia documenti"
+
+[docs_label_contributors]
+other = "Contributors"
+
+[docs_label_i_am]
+other = "Io Sono..."
+
+[docs_label_users]
+other = "Utenti"
+
+[feedback_heading]
+other = "Feedback"
+
+[feedback_no]
+other = "No"
+
+[feedback_question]
+other = "Questa pagina è stata di aiuto?"
+
+[feedback_yes]
+other = "Sì"
+
+[input_placeholder_email_address]
+other = "indirizzo email"
+
+[latest_version]
+other = "ultima versione."
+
+[layouts_blog_pager_prev]
+other = "<< Precedente"
+
+[layouts_blog_pager_next]
+other = "Succesiva >>"
+
+[layouts_case_studies_list_tell]
+other = "Racconta il tuo use case"
+
+[layouts_docs_glossary_aka]
+other = "Anche noto come"
+
+[layouts_docs_glossary_description]
+other = "Questo glossario vuole essere un aiuto per standardizzare la terminologia usata per Kubernetes. Include termini tecnici che sono specifici di Kubernetes, così come termini più generali che sono utili per dare un contesto."
+
+[layouts_docs_glossary_deselect_all]
+other = "Deseleziona tutto"
+
+[layouts_docs_glossary_click_details_after]
+other = "per il significato di questo termine."
+
+[layouts_docs_glossary_click_details_before]
+other = "Fare click sull'icona"
+
+[layouts_docs_glossary_filter]
+other = "Filtra i termini sulla base delle loro etichette"
+
+[layouts_docs_glossary_select_all]
+other = "Seleziona tutto"
+
+[layouts_docs_partials_feedback_improvement]
+other = "suggerire un miglioramento"
+
+[layouts_docs_partials_feedback_issue]
+other = "Apri un issue sul repository GitHub se vuoi "
+
+[layouts_docs_partials_feedback_or]
+other = "o"
+
+[layouts_docs_partials_feedback_problem]
+other = "riportare un problema"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Grazie per il feedback. Se hai una domanda specifica su Kubernetes, chiedi su"
+
+[layouts_docs_search_fetching]
+other = "Caricando i risultati..."
+
+[main_by]
+other = "di"
+
+[main_cncf_project]
+other = """Kubernetes è un progetto <a href="https://cncf.io/">CNCF</a></p>"""
+
+[main_community_explore]
+other = "Explora la community"
+
+[main_contribute]
+other = "Contribuire"
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. Tutti i diritti riservati. The Linux Foundation ha marchi registrati e utilizza marchi commerciali. Per un elenco dei marchi di Linux Foundation, consulta la <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">pagina sull'utilizzo dei marchi</a>"""
+
+[main_documentation_license]
+other = """Gli autori di Kubernetes | Documentazione distribuita sotto <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_edit_this_page]
+other = "Modifica questa pagina"
+
+[main_github_create_an_issue]
+other = "Crea un issue"
+
+[main_github_invite]
+other = "Sei interessato a contribuire a Kubernetes?"
+
+[main_github_view_on]
+other = "Visualizza su GitHub"
+
+[main_kubernetes_features]
+other = "Caratteristiche di Kubernetes"
+
+[main_kubeweekly_baseline]
+other = "Sei interessato a ricevere le ultime notizie su Kubernetes? Registrati alla newsletter KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "Vedi le precedenti mail della newsletter"
+
+[main_kubeweekly_signup]
+other = "Iscriviti"
+
+[main_page_history]
+other = "Storico della Pagina"
+
+[main_page_last_modified_on]
+other = "Ultima modifica alla pagina"
+
+[main_read_about]
+other = "Leggi"
+
+[main_read_more]
+other = "Leggi di più"
+
+[note]
+other = "Nota:"
+
+[objectives_heading]
+other = "Obbiettivi"
+
+[prerequisites_heading]
+other = "Prima di cominciare"
+
+[subscribe_button]
+other = "Iscriviti"
+
+[ui_search_placeholder]
+other = "Cerca"
+
+[version_check_mustbe]
+other = "La tua installazione Kubernetes deve avere la versione "
+
+[version_check_mustbeorlater]
+other = "La tua installazione Kubernetes deve avere almeno la versione "
+
+[version_check_tocheck]
+other = "Per verificare la versione, esegui "
+
+[warning]
+other = "Attenzione:"
+
+[whatsnext_heading]
+other = "Voci correlate"
diff --git a/data/i18n/ja/OWNERS b/data/i18n/ja/OWNERS
new file mode 100644
index 0000000000..c8da00076d
--- /dev/null
+++ b/data/i18n/ja/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Japanese.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-ja-reviews
+
+approvers:
+- sig-docs-ja-owners
+
+labels:
+- language/ja
diff --git a/data/i18n/ja/ja.toml b/data/i18n/ja/ja.toml
new file mode 100644
index 0000000000..a7a103f435
--- /dev/null
+++ b/data/i18n/ja/ja.toml
@@ -0,0 +1,203 @@
+# i18n strings for the English (main) site.
+# NOTE: Please keep the entries in alphabetical order when editing
+
+[caution]
+other = "注意:"
+
+[cleanup_heading]
+other = "クリーンアップ"
+
+[community_events_calendar]
+other = "イベントカレンダー"
+
+[community_forum_name]
+other = "フォーラム"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_file_warning]
+other = "廃止予定"
+
+[deprecation_title]
+other = "現在表示しているのは、次のバージョン向けのドキュメントです。Kubernetesバージョン:"
+
+[deprecation_warning]
+other = " のドキュメントは積極的にメンテナンスされていません。現在表示されているバージョンはスナップショットです。最新のドキュメントはこちらです: "
+
+[docs_label_browse]
+other = "ドキュメントの参照"
+
+[docs_label_contributors]
+other = "コントリビューター"
+
+[docs_label_i_am]
+other = "私は..."
+
+[docs_label_users]
+other = "ユーザー"
+
+[feedback_heading]
+other = "フィードバック"
+
+[feedback_no]
+other = "いいえ"
+
+[feedback_question]
+other = "このページは役に立ちましたか？"
+
+[feedback_yes]
+other = "はい"
+
+[input_placeholder_email_address]
+other = "メールアドレス"
+
+[latest_version]
+other = "最新バージョン"
+
+[layouts_blog_pager_prev]
+other = "<< 前"
+
+[layouts_blog_pager_next]
+other = "次 >>"
+
+[layouts_case_studies_list_tell]
+other = "あなたの話を聞かせてください"
+
+[layouts_docs_glossary_aka]
+other = "またの名を"
+
+[layouts_docs_glossary_description]
+other = "この用語集は、Kubernetesの用語の包括的で標準化されたリストを対象としています。これには、Kubernetesに固有で有用なコンテキストを提供しつつも、より一般的な技術用語が含まれています。"
+
+[layouts_docs_glossary_deselect_all]
+other = "すべての選択を解除"
+
+[layouts_docs_glossary_click_details_after]
+other = "特定の用語の詳細な説明を取得するには、以下のインジケータを使用します。"
+
+[layouts_docs_glossary_click_details_before]
+other = "Click on the" # TODO: Translate me
+
+[layouts_docs_glossary_filter]
+other = "タグに従って用語をフィルタ"
+
+[layouts_docs_glossary_select_all]
+other = "すべてを選択"
+
+[layouts_docs_partials_feedback_improvement]
+other = "改善を提案"
+
+[layouts_docs_partials_feedback_issue]
+other = "Open an issue in the GitHub repo if you want to " # TODO: Translate me
+
+[layouts_docs_partials_feedback_or]
+other = "or" # TODO: Translate me
+
+[layouts_docs_partials_feedback_problem]
+other = "問題を報告する"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on" # TODO: Translate me
+
+[layouts_docs_search_fetching]
+other = "結果を取得しています..."
+
+[main_by]
+other = "by"
+
+[main_cncf_project]
+other = """私達は<a href="https://cncf.io/">CNCF</a> graduated プロジェクトです</p>"""
+
+[main_community_explore]
+other = "コミュニティを探す"
+
+[main_contribute]
+other = "コントリビュート"
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+[main_documentation_license]
+other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_edit_this_page]
+other = "ページ編集"
+
+[main_github_invite]
+other = "Kubernetesのコードを編集することに興味がありますか？"
+
+[main_github_create_an_issue]
+other = "Issue作成"
+
+[main_github_view_on]
+other = "GitHubで参照する"
+
+[main_kubernetes_features]
+other = "Kubernetesの機能"
+
+[main_kubeweekly_baseline]
+other = "最新のKubernetesのニュースを受け取りたいですか？ KubeWeeklyにサインアップしてください。"
+
+[main_kubernetes_past_link]
+other = "過去のニュースレターを見る"
+
+[main_kubeweekly_signup]
+other = "登録"
+
+[main_page_history]
+other ="ページ履歴"
+
+[main_page_last_modified_on]
+other = "ページの最終更新"
+
+[main_read_about]
+other = "Read about" #other = "について参照する" TODO: Translate me
+
+[main_read_more]
+other = "続きを読む"
+
+[note]
+other = "備考:"
+
+[objectives_heading]
+other = "目標"
+
+[prerequisites_heading]
+other = "始める前に"
+
+[subscribe_button]
+other = "購読する"
+
+[ui_search_placeholder]
+other = "検索"
+
+[version_check_mustbe]
+other = "作業するKubernetesサーバーは次のバージョンである必要があります: "
+
+[version_check_mustbeorlater]
+other = "作業するKubernetesサーバーは次のバージョン以降のものである必要があります: "
+
+[version_check_tocheck]
+other = "バージョンを確認するには次のコマンドを実行してください: "
+
+[version_menu]
+other = "バージョン"
+
+[warning]
+other = "警告:"
+
+[whatsnext_heading]
+other = "次の項目"
diff --git a/data/i18n/ko/OWNERS b/data/i18n/ko/OWNERS
new file mode 100644
index 0000000000..8dfae5d770
--- /dev/null
+++ b/data/i18n/ko/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Korean.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-ko-reviews
+
+approvers:
+- sig-docs-ko-owners
+
+labels:
+- language/ko
diff --git a/data/i18n/ko/ko.toml b/data/i18n/ko/ko.toml
new file mode 100644
index 0000000000..f79f689b88
--- /dev/null
+++ b/data/i18n/ko/ko.toml
@@ -0,0 +1,232 @@
+# i18n strings for the Korean translation.
+# NOTE: Please keep the entries in alphabetical order when editing
+[announcement_title]
+other = "Black lives matter."
+
+[announcement_message]
+other = "우리는 흑인 공동체를 지지합니다.<br/>인종차별은 용납될 수 없습니다.<br/> 인종차별은 [쿠버네티스 프로젝트의 핵심 가치](https://git.k8s.io/community/values.md)에 상충되며 우리 공동체는 이를 용인하지 않습니다."
+
+[caution]
+other = "주의:"
+
+[cleanup_heading]
+other = "정리하기"
+
+[community_events_calendar]
+other = "이벤트 캘린더"
+
+[community_forum_name]
+other = "Forum"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_title]
+other = "해당 문서의 쿠버네티스 버전:"
+
+[deprecation_warning]
+other = " 문서는 더 이상 적극적으로 관리되지 않음. 현재 보고있는 문서는 정적 스냅샷임. 최신 문서를 위해서는, 다음을 참고. "
+
+[deprecation_file_warning]
+other = "사용 중단됨(deprecated)"
+
+[docs_label_browse]
+other = "문서 둘러보기"
+
+[docs_label_contributors]
+other = "컨트리뷰터"
+
+[docs_label_i_am]
+other = "나는..."
+
+[docs_label_users]
+other = "사용자"
+
+[docs_version_current]
+other = "(현재 문서)"
+
+[docs_version_latest_heading]
+other = "최신 버전"
+
+[docs_version_other_heading]
+other = "이전 버전"
+
+[error_404_were_you_looking_for]
+other = "무엇과 관련된 정보를 찾으시나요?"
+
+[examples_heading]
+other = "예시"
+
+[feedback_heading]
+other = "피드백"
+
+[feedback_question]
+other = "이 페이지가 도움이 되었나요?"
+
+[feedback_yes]
+other = "네"
+
+[feedback_no]
+other = "아니요"
+
+[input_placeholder_email_address]
+other = "전자 우편 주소"
+
+[latest_version]
+other = "최신 버전."
+
+[layouts_blog_pager_prev]
+other = "<< 이전"
+
+[layouts_blog_pager_next]
+other = "다음 >>"
+
+[layouts_case_studies_list_tell]
+other = "당신의 이야기를 들려주세요."
+
+[layouts_docs_glossary_aka]
+other = "별칭"
+
+[layouts_docs_glossary_description]
+other = "이 용어집은 쿠버네티스 용어의 종합적이고 표준화된 리스트를 제공한다. 용어집은 K8s 고유의 기술 용어 뿐만 아니라, 맥락을 이해하는데 유용한 더 일반적인 용어도 포함한다. "
+
+[layouts_docs_glossary_deselect_all]
+other = "모두 선택 해제"
+
+[layouts_docs_glossary_click_details_after]
+other = "표시를 클릭하면 각 용어에 대한 더 자세한 설명을 볼 수 있다."
+
+[layouts_docs_glossary_click_details_before]
+other = "다음"
+
+[layouts_docs_glossary_filter]
+other = "태그에 따라 용어 필터링"
+
+[layouts_docs_glossary_select_all]
+other = "모두 선택"
+
+[layouts_docs_partials_feedback_improvement]
+other = "개선 제안이 가능합니다."
+
+[layouts_docs_partials_feedback_issue]
+other = "원한다면 GitHub 리포지터리에 이슈를 열어서"
+
+[layouts_docs_partials_feedback_or]
+other = "또는"
+
+[layouts_docs_partials_feedback_problem]
+other = "문제 리포트"
+
+[layouts_docs_partials_feedback_thanks]
+other = "피드백 감사합니다. 쿠버네티스 사용 방법에 대해서 구체적이고 답변 가능한 질문이 있다면, 다음 링크에서 질문하십시오."
+
+[layouts_docs_search_fetching]
+other = "결과를 가져오는 중.."
+
+[main_by]
+other = ", 다음 변경에 의해서:"
+
+[main_cncf_project]
+other = """쿠버네티스는 <a href="https://cncf.io/">CNCF</a> graduated 프로젝트입니다.</p>"""
+
+[main_community_explore]
+other = "커뮤니티 둘러보기"
+
+[main_contribute]
+other = "기여하기"
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+[main_documentation_license]
+other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_github_invite]
+other = "쿠버네티스 핵심 코드 베이스를 살펴보는데 관심이 있으십니까?"
+
+[main_github_view_on]
+other = "GitHub에서 보기"
+
+[main_kubernetes_features]
+other = "쿠버네티스 기능"
+
+[main_kubeweekly_baseline]
+other = "최신 쿠버네티스 뉴스 수신에 관심이 있으십니까? KubeWeekly를 신청하세요."
+
+[main_kubernetes_past_link]
+other = "과거 뉴스레터 보기"
+
+[main_kubeweekly_signup]
+other = "구독하기"
+
+[main_page_history]
+other ="페이지 변경 이력"
+
+[main_page_last_modified_on]
+other = "최종 수정일시"
+
+[main_read_about]
+other = "읽어 보기"
+
+[main_read_more]
+other = "더 읽기"
+
+[note]
+other = "참고:"
+
+[objectives_heading]
+other = "목적"
+
+[options_heading]
+other = "옵션"
+
+[post_create_issue]
+other = "이슈 생성"
+
+[prerequisites_heading]
+other = "시작하기 전에"
+
+[seealso_heading]
+other = "더 보기"
+
+[subscribe_button]
+other = "구독"
+
+[synopsis_heading]
+other = "시놉시스"
+
+[thirdparty_message]
+other = """이 섹션은 쿠버네티스에 필요한 기능을 제공하는 써드파티 프로젝트와 관련이 있다. 쿠버네티스 프로젝트 작성자는 써드파티 프로젝트에 책임이 없다. 이 페이지는 <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF 웹사이트 가이드라인</a>에 따라 프로젝트를 알파벳 순으로 나열한다. 이 목록에 프로젝트를 추가하려면 변경사항을 제출하기 전에 <a href="/contribute/style/content-guide/#third-party-content">콘텐츠 가이드</a>를 읽어본다."""
+
+[ui_search_placeholder]
+other = "검색하기"
+
+[version_check_mustbe]
+other = "쿠버네티스 서버의 버전은 다음과 같아야 함. 버전: "
+
+[version_check_mustbeorlater]
+other = "쿠버네티스 서버의 버전은 다음과 같거나 더 높아야 함. 버전: "
+
+[version_check_tocheck]
+other = "버전 확인을 위해서, 다음 커맨드를 실행 "
+
+[version_menu]
+other = "버전"
+
+[warning]
+other = "경고:"
+
+[whatsnext_heading]
+other = "다음 내용"
diff --git a/data/i18n/nl/nl.toml b/data/i18n/nl/nl.toml
new file mode 100644
index 0000000000..a0aa6faee4
--- /dev/null
+++ b/data/i18n/nl/nl.toml
@@ -0,0 +1,197 @@
+# i18n strings for the Dutch (main) site.
+
+[deprecation_warning]
+other = " documentatie wordt niet langer actief onderhouden. De versie die u momenteel bekijkt is een statische momentopname. Zie voor bijgewerkte documentatie "
+
+[deprecation_file_warning]
+other = "Verouderd"
+
+[objectives_heading]
+other = "Doelen"
+
+[cleanup_heading]
+other = "Opschonen"
+
+[prerequisites_heading]
+other = "Voordat je begint"
+
+[whatsnext_heading]
+other = "Wat nu volgt"
+
+[feedback_heading]
+other = "Feedback"
+
+[feedback_question]
+other = "Was deze pagina nuttig?"
+
+[feedback_yes]
+other = "Ja"
+
+[feedback_no]
+other = "Nee"
+
+[latest_version]
+other = "laatste versie."
+
+[version_check_mustbe]
+other = "Je Kubernetes server moet op de volgende versie zitten "
+
+[version_check_mustbeorlater]
+other = "Je Kubernetes server moet op de volgende of latere versie zitten "
+
+[version_check_tocheck]
+other = "Voer het volgende in om de versie te controleren "
+
+[caution]
+other = "Voorzichtig:"
+
+[note]
+other = "Opmerking:"
+
+[warning]
+other = "Opletten:"
+
+[main_read_about]
+other = "Lees over"
+
+[main_read_more]
+other = "Lees meer"
+
+[main_github_invite]
+other = "Geïnteresseerd om aan de core Kubernetes code base te werken?"
+
+[main_github_view_on]
+other = "Bekijk op GitHub"
+
+[main_github_create_an_issue]
+other = "Maak een Issue"
+
+[main_community_explore]
+other = "Verken de community"
+
+[main_kubernetes_features]
+other = "Kubernetes functies"
+
+[main_cncf_project]
+other = """We zijn een <a href="https://cncf.io/">CNCF</a> project</p>"""
+
+[main_kubeweekly_baseline]
+other = "Wil je het laatste Kubernates nieuws ontvangen? Abonneer je op KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "Eerdere nieuwsbrieven bekijken"
+
+[main_kubeweekly_signup]
+other = "Abonneren"
+
+[main_contribute]
+other = "Bijdragen"
+
+[main_edit_this_page]
+other = "Bewerk deze pagina"
+
+[main_page_history]
+other ="Pagina geschiedenis"
+
+[main_page_last_modified_on]
+other = "Pagina laatst gewijzigd op"
+
+[main_by]
+other = "door"
+
+[main_documentation_license]
+other = """De Kubernetes auteurs | Documentatie verspreid onder <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. Alle rechten voorbehouden. De Linux Foundation heeft handelsmerken geregistreerd en handelsmerken. gebruikt Voor een lijst met handelsmerken van The Linux Foundation raadpleegt u onze<a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Handelsmerkgebruikspagina</a>"""
+
+# Labels for the docs portal home page.
+[docs_label_browse]
+other = "Bladeren door documenten"
+
+[docs_label_contributors]
+other = "Bijdragers"
+
+[docs_label_users]
+other = "Gebruikers"
+
+[docs_label_i_am]
+other = "IK BEN..."
+
+# layouts > blog > pager
+
+[layouts_blog_pager_prev]
+other = "<< Vorige"
+
+[layouts_blog_pager_next]
+other = "Volgende >>"
+
+# layouts > blog > list
+
+[layouts_case_studies_list_tell]
+other = "Vertel jouw verhaal"
+
+# layouts > docs > glossary
+
+[layouts_docs_glossary_description]
+other = "Deze verklarende woordenlijst is bedoeld als een uitgebreide, gestandaardiseerde lijst van Kubernetes-terminologie. Het bevat technische termen die specifiek zijn voor K8s, evenals meer algemene termen die een bruikbare context bieden."
+
+[layouts_docs_glossary_filter]
+other = "Filter termen op basis van hun tags"
+
+[layouts_docs_glossary_select_all]
+other = "Alles selecteren"
+
+[layouts_docs_glossary_deselect_all]
+other = "Alles deselecteren"
+
+[layouts_docs_glossary_aka]
+other = "Ook bekend als"
+
+[layouts_docs_glossary_click_details_before]
+other = "Klik op de"
+
+[layouts_docs_glossary_click_details_after]
+other = "onderstaande indicatoren om een ​​langere verklaring voor een bepaalde term te krijgen."
+
+# layouts > docs > search
+
+[layouts_docs_search_fetching]
+other = "Resultaten ophalen.."
+
+# layouts > partial > feedback
+
+[layouts_docs_partials_feedback_thanks]
+other = "Bedankt voor de feedback. Als je een specifieke vraag hebt, die beantwoord moet worden, over het gebruik van Kubernetes, vraag het dan op"
+
+[layouts_docs_partials_feedback_issue]
+other = "Open een probleem in de GitHub-repo "
+
+[layouts_docs_partials_feedback_problem]
+other = "meld een probleem"
+
+[layouts_docs_partials_feedback_or]
+other = "of"
+
+[layouts_docs_partials_feedback_improvement]
+other = "doe een suggestie voor een verbetering"
+
+# Community links
+[community_twitter_name]
+other = "Twitter"
+[community_github_name]
+other = "GitHub"
+[community_slack_name]
+other = "Slack"
+[community_stack_overflow_name]
+other = "Stack Overflow"
+[community_forum_name]
+other = "Forum"
+[community_events_calendar]
+other = "Evenementenkalender"
+[community_youtube_name]
+other = "YouTube"
+
+# UI elements
+[ui_search_placeholder]
+other = "Zoeken"
diff --git a/data/i18n/no/no.toml b/data/i18n/no/no.toml
new file mode 100644
index 0000000000..ff786d7d35
--- /dev/null
+++ b/data/i18n/no/no.toml
@@ -0,0 +1,68 @@
+# i18n strings for the Norwegian translation.
+
+[main_read_about]
+other = "Les om"
+
+[main_read_more]
+other = "Les mer"
+
+[main_github_invite]
+other = "Interessert kode i Kubernetes?"
+
+[main_github_view_on]
+other = "Åpne på GitHub"
+
+[main_github_create_an_issue]
+other = "Opprett en issue"
+
+[main_community_explore]
+other = "Utforsk folkene bak Kubernetes"
+
+[main_kubernetes_features]
+other = "Egenskaper i Kubernetes"
+
+[main_cncf_project]
+other = """Vi er et <a href="https://cncf.io/">CNCF</a>-prosjekt</p>"""
+
+[main_contribute]
+other = "Bidra"
+
+[main_edit_this_page]
+other = "Endre denne siden"
+
+[main_page_history]
+other ="Side-historikk"
+
+[main_page_last_modified_on]
+other = "Side sist endret"
+
+[main_by]
+other = "av"
+
+[main_documentation_license]
+other = """Kubernetes-forfatterene | Dokumentasjonen er utgitt med <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0-lisens</a>"""
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. Alle retter er reservert. The Linux Foundation har registrerte varemerker. For en oversikt, se <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Bruk av varemerker</a>"""
+
+# Labels for the docs portal home page.
+[docs_label_browse]
+other = "All dokumentasjon"
+
+# Community links
+[community_twitter_name]
+other = "Twitter"
+[community_github_name]
+other = "GitHub"
+[community_slack_name]
+other = "Slack"
+[community_stack_overflow_name]
+other = "Stack Overflow"
+[community_forum_name]
+other = "Forum"
+[community_events_calendar]
+other = "Kalender"
+
+# UI elements
+[ui_search_placeholder]
+other = "Søk"
\ No newline at end of file
diff --git a/data/i18n/pl/OWNERS b/data/i18n/pl/OWNERS
new file mode 100644
index 0000000000..020de30383
--- /dev/null
+++ b/data/i18n/pl/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Polish.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-pl-reviews
+
+approvers:
+- sig-docs-pl-owners
+
+labels:
+- language/pl
diff --git a/data/i18n/pl/pl.toml b/data/i18n/pl/pl.toml
new file mode 100644
index 0000000000..9621301a49
--- /dev/null
+++ b/data/i18n/pl/pl.toml
@@ -0,0 +1,197 @@
+# i18n strings for the Polish site.
+# NOTE: Please keep the entries in alphabetical order when editing
+
+[caution]
+other = "Ostrzeżenie:"
+
+[cleanup_heading]
+other = "Sprzątamy po sobie"
+
+[community_events_calendar]
+other = "Kalendarz wydarzeń"
+
+[community_forum_name]
+other = "Forum"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_warning]
+other = " dokumentacja nie jest już aktualizowana. Wyświetlona jest wersja archiwalna. Po aktualną dokumentację zajrzyj na"
+
+[deprecation_file_warning]
+other = "Przestarzały"
+
+[docs_label_browse]
+other = "Przeglądaj dokumentację"
+
+[docs_label_contributors]
+other = "Współautorzy"
+
+[docs_label_i_am]
+other = "Jestem..."
+
+[docs_label_users]
+other = "Użytkownicy"
+
+[feedback_heading]
+other = "Twoja opinia"
+
+[feedback_no]
+other = "Nie"
+
+[feedback_question]
+other = "Czy ta strona była przydatna?"
+
+[feedback_yes]
+other = "Tak"
+
+[input_placeholder_email_address]
+other = "adres e-mail"
+
+[latest_version]
+other = "to najnowsza wersja."
+
+[layouts_blog_pager_prev]
+other = "<< Poprzedni"
+
+[layouts_blog_pager_next]
+other = "Następny >>"
+
+[layouts_case_studies_list_tell]
+other = "Opowiedz swoją historię"
+
+[layouts_docs_glossary_aka]
+other = "Znany też jako"
+
+[layouts_docs_glossary_description]
+other = "Celem tego słownika jest przedstawienie wszechstronnej, ujednoliconej listy terminologii związanej z projektem Kubernetes. Słownik zawiera terminy specyficzne dla Kubernetesa, a także pojęcia bardziej ogólne, umożliwiające lepsze zrozumienie kontekstu."
+
+[layouts_docs_glossary_deselect_all]
+other = "Odznacz wszystko"
+
+[layouts_docs_glossary_click_details_after]
+other = "po dokładniejsze wytłumaczenie."
+
+[layouts_docs_glossary_click_details_before]
+other = "Kliknij w"
+
+[layouts_docs_glossary_filter]
+other = "Znajdź pojęcia według etykiet"
+
+[layouts_docs_glossary_select_all]
+other = "Zaznacz wszystko"
+
+[layouts_docs_partials_feedback_improvement]
+other = "zaproponować poprawkę"
+
+[layouts_docs_partials_feedback_issue]
+other = "Otwórz zgłoszenie w repozytorium GitHub, jeśli chcesz "
+
+[layouts_docs_partials_feedback_or]
+other = "lub"
+
+[layouts_docs_partials_feedback_problem]
+other = "zgłosić problem"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Dziękujemy za informację zwrotną. Jeśli masz konkretne pytanie dotyczące użycia Kubernetesa, odwiedź"
+
+[layouts_docs_search_fetching]
+other = "Pobieram wyniki.."
+
+[main_by]
+other = "przez"
+
+[main_cncf_project]
+other = """Nasz projekt jest uznany przez <a href="https://cncf.io/">CNCF</a> za dojrzały</p>"""
+
+[main_community_explore]
+other = "Poznaj społeczność"
+
+[main_contribute]
+other = "Wnieś swój wkład"
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+[main_documentation_license]
+other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_edit_this_page]
+other = "Edytuj stronę"
+
+[main_github_create_an_issue]
+other = "Zgłoś problem"
+
+[main_github_invite]
+other = "Chcesz zacząć współtworzyć kod Kubernetesa?"
+
+[main_github_view_on]
+other = "Zajrzyj na GitHub"
+
+[main_kubernetes_features]
+other = "Funkcjonalności Kubernetesa"
+
+[main_kubeweekly_baseline]
+other = "Zapisz się na KubeWeekly, jeśli jesteś zainteresowany najnowszymi wiadomościami o Kubernetesie."
+
+[main_kubernetes_past_link]
+other = "Poprzednie newslettery"
+
+[main_kubeweekly_signup]
+other = "Zapisz się"
+
+[main_page_history]
+other ="Historia strony"
+
+[main_page_last_modified_on]
+other = "Ostatnia modyfikacja strony"
+
+[main_read_about]
+other = "Przeczytaj o"
+
+[main_read_more]
+other = "Przeczytaj więcej"
+
+[note]
+other = "Informacja:"
+
+[objectives_heading]
+other = "Cele"
+
+[prerequisites_heading]
+other = "Nim zaczniesz"
+
+[subscribe_button]
+other = "Subskrybuj"
+
+[ui_search_placeholder]
+other = "Szukaj"
+
+[version_check_mustbe]
+other = "Twój serwer Kubernetes musi być w wersji "
+
+[version_check_mustbeorlater]
+other = "Twój serwer Kubernetes musi być co najmniej w wersji "
+
+[version_check_tocheck]
+other = "Aby sprawdzić wersję, wpisz "
+
+[warning]
+other = "Uwaga:"
+
+[whatsnext_heading]
+other = "Następne:"
diff --git a/data/i18n/pt/OWNERS b/data/i18n/pt/OWNERS
new file mode 100644
index 0000000000..6c71975765
--- /dev/null
+++ b/data/i18n/pt/OWNERS
@@ -0,0 +1,11 @@
+# Localized strings for Portuguese.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-pt-reviews
+
+approvers:
+- sig-docs-pt-owners
+
+labels:
+- language/pt
diff --git a/data/i18n/pt/pt-br.toml b/data/i18n/pt/pt-br.toml
new file mode 100644
index 0000000000..3f55a665b3
--- /dev/null
+++ b/data/i18n/pt/pt-br.toml
@@ -0,0 +1,240 @@
+ # i18n strings for the Portuguese (main) site.
+[caution]
+other = "Cuidado:"
+
+[cleanup_heading]
+other = "Limpando"
+
+[community_events_calendar]
+other = "Calendário de Eventos"
+
+[community_forum_name]
+other = "Fórum"
+
+[community_github_name]
+other = "GitHub"
+
+# Community links
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[deprecation_file_warning]
+other = "Descontinuado"
+
+[deprecation_title]
+other = "Você está vendo a documentação do Kubernetes versão:"
+
+[deprecation_warning]
+other = " a documentação não é mais mantida ativamente. A versão que você está visualizando no momento é uma captura instantânea estática. Para obter documentação atualizada, consulte "
+
+[docs_label_browse]
+other = "Procurar documentos"
+
+[docs_label_contributors]
+other = "Colaboradores"
+
+[docs_label_i_am]
+other = "Eu sou..."
+
+[docs_label_users]
+other = "Usuários"
+
+[docs_version_current]
+other = "(esta documentação)"
+
+[docs_version_latest_heading]
+other = "Versão mais recente"
+
+[docs_version_other_heading]
+other = "Versões mais antigas"
+
+[error_404_were_you_looking_for]
+other = "Talvez você estivesse procurando por:"
+
+[examples_heading]
+other = "Exemplos"
+
+[feedback_heading]
+other = "Comentários"
+
+[feedback_no]
+other = "Não"
+
+[feedback_question]
+other = "Esta página foi útil?"
+
+[feedback_yes]
+other = "Sim"
+
+[input_placeholder_email_address]
+other = "endereço de e-mail"
+
+[latest_version]
+other = "última versão."
+
+[layouts_blog_pager_next]
+other = "Próximo >>"
+
+[layouts_blog_pager_prev]
+other = "<< Anterior"
+
+[layouts_case_studies_list_tell]
+other = "Conte seu caso"
+
+[layouts_docs_glossary_aka]
+other = "Também conhecido como"
+
+[layouts_docs_glossary_click_details_after]
+other = "indicadores abaixo para uma maior explicação sobre um termo em particular."
+
+[layouts_docs_glossary_click_details_before]
+other = "Clique nos"
+
+[layouts_docs_glossary_description]
+other = "Este glossário pretende ser uma lista padronizada e abrangente da terminologia do Kubernetes. Inclui termos técnicos específicos dos K8s, além de termos mais gerais que fornecem um contexto útil."
+
+[layouts_docs_glossary_deselect_all]
+other = "Desmarcar tudo"
+
+[layouts_docs_glossary_filter]
+other = "Filtrar termos de acordo com suas tags"
+
+[layouts_docs_glossary_select_all]
+other = "Selecionar tudo"
+
+[layouts_docs_partials_feedback_improvement]
+other = "sugerir uma melhoria"
+
+[layouts_docs_partials_feedback_issue]
+other = "Abra um bug no repositório do GitHub se você deseja "
+
+[layouts_docs_partials_feedback_or]
+other = "ou"
+
+[layouts_docs_partials_feedback_problem]
+other = "reportar um problema"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Obrigado pelo feedback. Se você tiver uma pergunta específica sobre como utilizar o Kubernetes, faça em"
+
+[layouts_docs_search_fetching]
+other = "Buscando resultados.."
+
+# Main page localization
+
+[main_by]
+other = "por"
+
+[main_cncf_project]
+other = """Nós somos uma <a href="https://cncf.io/">CNCF</a> projeto graduado</p>"""
+
+[main_community_explore]
+other = "Explore a comunidade"
+
+[main_contribute]
+other = "Contribuir"
+
+[main_copyright_notice]
+other = """A Fundação Linux &reg;. Todos os direitos reservados. A Linux Foundation tem marcas registradas e usa marcas registradas. Para uma lista de marcas registradas da The Linux Foundation, por favor, veja nossa <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Página de uso de marca registrada</a>"""
+
+[main_documentation_license]
+other = """Os autores do Kubernetes | Documentação Distribuída sob <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_edit_this_page]
+other = "Edite essa página"
+
+[main_github_create_an_issue]
+other = "Abra um bug"
+
+[main_github_invite]
+other = "Interessado em mergulhar na base de código do Kubernetes?"
+
+[main_github_view_on]
+other = "Veja no Github"
+
+[main_kubernetes_features]
+other = "Recursos do Kubernetes"
+
+[main_kubernetes_past_link]
+other = "Veja boletins passados"
+
+[main_kubeweekly_baseline]
+other = "Interessado em receber as últimas novidades sobre Kubernetes? Inscreva-se no KubeWeekly."
+
+[main_kubeweekly_signup]
+other = "Se inscrever"
+
+[main_page_history]
+other ="História da página"
+
+[main_page_last_modified_on]
+other = "Última modificação da página em"
+
+[main_read_about]
+other = "Ler sobre"
+
+[main_read_more]
+other = "Consulte Mais informação"
+
+# Miscellaneous
+
+[note]
+other = "Nota:"
+
+[objectives_heading]
+other = "Objetivos"
+
+[options_heading]
+other = "Opções"
+
+[post_create_issue]
+other = "Abra um bug"
+
+[prerequisites_heading]
+other = "Antes de você começar"
+
+[subscribe_button]
+other = "Se inscrever"
+
+[thirdparty_message]
+other = """Esta seção tem links para projetos de terceiros que fornecem a funcionalidade exigida pelo Kubernetes. Os autores do projeto Kubernetes não são responsáveis por esses projetos. Esta página obedece as <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">diretrizes de conteúdo do site CNCF</a>, listando os itens em ordem alfabética. Para adicionar um projeto a esta lista, leia o <a href="/docs/contribute/style/content-guide/#third-party-content">guia de conteúdo</a> antes de enviar sua alteração."""
+
+[ui_search_placeholder]
+other = "Procurar"
+
+[version_check_mustbeorlater]
+other = "O seu servidor Kubernetes deve estar em ou depois da versão "
+
+[version_check_mustbe]
+other = "Seu servidor Kubernetes deve ser versão"
+
+[version_check_tocheck]
+other = "Para verificar a versão, digite "
+
+[version_menu]
+other = "Versões"
+
+[warning]
+other = "Aviso:"
+
+[whatsnext_heading]
+other = "Qual é o próximo"
+
+[print_printable_section]
+other = "Essa é a versão completa de impressão dessa seção"
+
+[print_click_to_print]
+other = "Clique aqui para imprimir"
+
+[print_show_regular]
+other = "Retornar à visualização normal"
+
+[print_entire_section]
+other = "Imprimir toda essa seção"
diff --git a/data/i18n/pt/pt.toml b/data/i18n/pt/pt.toml
new file mode 100644
index 0000000000..808c82679d
--- /dev/null
+++ b/data/i18n/pt/pt.toml
@@ -0,0 +1,225 @@
+ # i18n strings for the Portuguese (main) site.
+[caution]
+other = "Cuidado:"
+
+[cleanup_heading]
+other = "Limpando"
+
+[community_events_calendar]
+other = "Calendário de Eventos"
+
+[community_forum_name]
+other = "Fórum"
+
+[community_github_name]
+other = "GitHub"
+
+# Community links
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[deprecation_file_warning]
+other = "Descontinuado"
+
+[deprecation_title]
+other = "Você está vendo a documentação do Kubernetes versão:"
+
+[deprecation_warning]
+other = " a documentação não é mais mantida ativamente. A versão que você está visualizando no momento é uma captura instantânea estática. Para obter documentação atualizada, consulte "
+
+[docs_label_browse]
+other = "Procurar documentos"
+
+[docs_label_contributors]
+other = "Colaboradores"
+
+[docs_label_i_am]
+other = "Eu sou..."
+
+[docs_label_users]
+other = "Usuários"
+
+[docs_version_current]
+other = "(esta documentação)"
+
+[docs_version_latest_heading]
+other = "Versão mais recente"
+
+[docs_version_other_heading]
+other = "Versões mais antigas"
+
+[error_404_were_you_looking_for]
+other = "Talvez você estivesse procurando por:"
+
+[examples_heading]
+other = "Exemplos"
+
+[feedback_heading]
+other = "Comentários"
+
+[feedback_no]
+other = "Não"
+
+[feedback_question]
+other = "Esta página foi útil?"
+
+[feedback_yes]
+other = "Sim"
+
+[input_placeholder_email_address]
+other = "endereço de e-mail"
+
+[latest_version]
+other = "última versão."
+
+[layouts_blog_pager_next]
+other = "Próximo >>"
+
+[layouts_blog_pager_prev]
+other = "<< Anterior"
+
+[layouts_case_studies_list_tell]
+other = "Conte seu caso"
+
+[layouts_docs_glossary_aka]
+other = "Também conhecido como"
+
+[layouts_docs_glossary_click_details_after]
+other = "indicadores abaixo para uma maior explicação sobre um termo em particular."
+
+[layouts_docs_glossary_click_details_before]
+other = "Clique nos"
+
+[layouts_docs_glossary_description]
+other = "Este glossário pretende ser uma lista padronizada e abrangente da terminologia do Kubernetes. Inclui termos técnicos específicos dos K8s, além de termos mais gerais que fornecem um contexto útil."
+
+[layouts_docs_glossary_deselect_all]
+other = "Desmarcar tudo"
+
+[layouts_docs_glossary_filter]
+other = "Filtrar termos de acordo com suas tags"
+
+[layouts_docs_glossary_select_all]
+other = "Selecionar tudo"
+
+[layouts_docs_partials_feedback_improvement]
+other = "sugerir uma melhoria"
+
+[layouts_docs_partials_feedback_issue]
+other = "Abra um bug no repositório do GitHub se você deseja "
+
+[layouts_docs_partials_feedback_or]
+other = "ou"
+
+[layouts_docs_partials_feedback_problem]
+other = "reportar um problema"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Obrigado pelo feedback. Se você tiver uma pergunta específica sobre como utilizar o Kubernetes, faça em"
+
+[layouts_docs_search_fetching]
+other = "Buscando resultados.."
+
+# Main page localization
+
+[main_by]
+other = "por"
+
+[main_cncf_project]
+other = """Nós somos uma <a href="https://cncf.io/">CNCF</a> projeto graduado</p>"""
+
+[main_community_explore]
+other = "Explore a comunidade"
+
+[main_contribute]
+other = "Contribuir"
+
+[main_copyright_notice]
+other = """A Fundação Linux &reg;. Todos os direitos reservados. A Linux Foundation tem marcas registradas e usa marcas registradas. Para uma lista de marcas registradas da The Linux Foundation, por favor, veja nossa <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Página de uso de marca registrada</a>"""
+
+[main_documentation_license]
+other = """Os autores do Kubernetes | Documentação Distribuída sob <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_edit_this_page]
+other = "Edite essa página"
+
+[main_github_create_an_issue]
+other = "Abra um bug"
+
+[main_github_invite]
+other = "Interessado em mergulhar na base de código do Kubernetes?"
+
+[main_github_view_on]
+other = "Veja no Github"
+
+[main_kubernetes_features]
+other = "Recursos do Kubernetes"
+
+[main_kubernetes_past_link]
+other = "Veja boletins passados"
+
+[main_kubeweekly_baseline]
+other = "Interessado em receber as últimas novidades sobre Kubernetes? Inscreva-se no KubeWeekly."
+
+[main_kubeweekly_signup]
+other = "Se inscrever"
+
+[main_page_history]
+other ="História da página"
+
+[main_page_last_modified_on]
+other = "Última modificação da página em"
+
+[main_read_about]
+other = "Ler sobre"
+
+[main_read_more]
+other = "Consulte Mais informação"
+
+# Miscellaneous
+
+[note]
+other = "Nota:"
+
+[objectives_heading]
+other = "Objetivos"
+
+[options_heading]
+other = "Opções"
+
+[post_create_issue]
+other = "Abra um bug"
+
+[prerequisites_heading]
+other = "Antes de você começar"
+
+[subscribe_button]
+other = "Se inscrever"
+
+[thirdparty_message]
+other = """Esta seção tem links para projetos de terceiros que fornecem a funcionalidade exigida pelo Kubernetes. Os autores do projeto Kubernetes não são responsáveis por esses projetos. Esta página obedece as <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">diretrizes de conteúdo do site CNCF</a>, listando os itens em ordem alfabética. Para adicionar um projeto a esta lista, leia o <a href="/docs/contribute/style/content-guide/#third-party-content">guia de conteúdo</a> antes de enviar sua alteração."""
+
+[ui_search_placeholder]
+other = "Procurar"
+
+[version_check_mustbeorlater]
+other = "O seu servidor Kubernetes deve estar em ou depois da versão "
+
+[version_check_mustbe]
+other = "Seu servidor Kubernetes deve ser versão"
+
+[version_check_tocheck]
+other = "Para verificar a versão, digite "
+
+[warning]
+other = "Aviso:"
+
+[whatsnext_heading]
+other = "Qual é o próximo"
diff --git a/data/i18n/ru/OWNERS b/data/i18n/ru/OWNERS
new file mode 100644
index 0000000000..2c3a37935b
--- /dev/null
+++ b/data/i18n/ru/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Russian.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-ru-reviews
+
+approvers:
+- sig-docs-ru-owners
+
+labels:
+- language/ru
diff --git a/data/i18n/ru/ru.toml b/data/i18n/ru/ru.toml
new file mode 100644
index 0000000000..37447c0cad
--- /dev/null
+++ b/data/i18n/ru/ru.toml
@@ -0,0 +1,201 @@
+# i18n strings for the Russian (main) site.
+
+[deprecation_warning]
+other = " документация больше не поддерживается. Версия, которую вы сейчас просматриваете, является статической. Актуальную документацию вы можете найти "
+
+[deprecation_file_warning]
+other = "Устаревшая"
+
+[objectives_heading]
+other = "Цели"
+
+[cleanup_heading]
+other = "Очистка"
+
+[prerequisites_heading]
+other = "Подготовка к работе"
+
+[subscribe_button]
+other = "Подписаться"
+
+[whatsnext_heading]
+other = "Что дальше"
+
+[feedback_heading]
+other = "Обратная связь"
+
+[feedback_question]
+other = "Была ли эта страница полезной?"
+
+[feedback_yes]
+other = "Да"
+
+[feedback_no]
+other = "Нет"
+
+[latest_version]
+other = "последняя версия."
+
+[version_check_mustbe]
+other = "Ваш сервер Kubernetes должен быть версии "
+
+[version_check_mustbeorlater]
+other = "Ваш сервер Kubernetes должен быть версии или позже, чем версия "
+
+[version_check_tocheck]
+other = "Чтобы проверить версию, введите "
+
+[caution]
+other = "Внимание:"
+
+[note]
+other = "Заметка:"
+
+[warning]
+other = "Предупреждение:"
+
+[main_read_about]
+other = "Прочитать о"
+
+[main_read_more]
+other = "Прочитать больше"
+
+[main_github_invite]
+other = "Хотите взломать ядро кодовой базы Kubernetes?"
+
+[main_github_view_on]
+other = "Посмотреть на GitHub"
+
+[main_github_create_an_issue]
+other = "Сообщить о проблеме"
+
+[main_community_explore]
+other = "Познакомиться с сообществом"
+
+[main_kubernetes_features]
+other = "Возможности Kubernetes"
+
+[main_cncf_project]
+other = """Мы являемся проектом <a href="https://cncf.io/">CNCF</a></p>"""
+
+[main_kubeweekly_baseline]
+other = "Интересуетесь последними новостями Kubernetes? Зарегистрируйтесь в KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "Посмотреть последние новости"
+
+[main_kubeweekly_signup]
+other = "Подписаться"
+
+[main_contribute]
+other = "Помочь проекту"
+
+[main_edit_this_page]
+other = "Редактировать эту страницу"
+
+[main_page_history]
+other ="История страницы"
+
+[main_page_last_modified_on]
+other = "Последний раз страница редактировалась"
+
+[main_by]
+other = "by"
+
+[main_documentation_license]
+other = """Авторы Kubernetes | Документация распространяется под лицензией <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. Все права защищены. The Linux Foundation является зарегистрированной торговой маркой. Список торговых марок The Linux Foundation приведен на странице <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">использования торговых марок</a>"""
+
+# Labels for the docs portal home page.
+[docs_label_browse]
+other = "Просмотр документации"
+
+[docs_label_contributors]
+other = "Участники сообщества"
+
+[docs_label_users]
+other = "Пользователи"
+
+[docs_label_i_am]
+other = "Я ..."
+
+# layouts > blog > pager
+
+[layouts_blog_pager_prev]
+other = "<< Назад"
+
+[layouts_blog_pager_next]
+other = "Вперёд >>"
+
+# layouts > blog > list
+
+[layouts_case_studies_list_tell]
+other = "Расскажите свою историю"
+
+# layouts > docs > glossary
+
+[layouts_docs_glossary_description]
+other = "Данный глоссарий должен стать исчерпывающим стандартизированным списком терминологии в Kubernetes. Он включает технические термины, специфичные для K8s, а также более общие термины, которые полезно знать."
+
+[layouts_docs_glossary_filter]
+other = "Фильтрация терминов по тегам"
+
+[layouts_docs_glossary_select_all]
+other = "Выделить всё"
+
+[layouts_docs_glossary_deselect_all]
+other = "Отменить выбор всех тегов"
+
+[layouts_docs_glossary_aka]
+other = "Также известный как"
+
+[layouts_docs_glossary_click_details_before]
+other = "Нажмите на значок"
+
+[layouts_docs_glossary_click_details_after]
+other = "для получения более подробное объяснения по интересующему термину."
+
+# layouts > docs > search
+
+[layouts_docs_search_fetching]
+other = "Получение результатов.."
+
+# layouts > partial > feedback
+
+[layouts_docs_partials_feedback_thanks]
+other = "Спасибо за отзыв! Если у вас есть конкретный вопрос об использовании Kubernetes, спрашивайте"
+
+[layouts_docs_partials_feedback_issue]
+other = "Сообщите о проблеме в репозитории GitHub, если вы хотите "
+
+[layouts_docs_partials_feedback_problem]
+other = "сообщить о проблеме"
+
+[layouts_docs_partials_feedback_or]
+other = "или"
+
+[layouts_docs_partials_feedback_improvement]
+other = "предложить улучшение"
+
+# Community links
+[community_twitter_name]
+other = "Twitter"
+[community_github_name]
+other = "GitHub"
+[community_slack_name]
+other = "Slack"
+[community_stack_overflow_name]
+other = "Stack Overflow"
+[community_forum_name]
+other = "Форум"
+[community_events_calendar]
+other = "Календарь событий"
+
+# UI elements
+[ui_search_placeholder]
+other = "Поиск"
+
+[input_placeholder_email_address]
+other = "адрес электронной почты"
\ No newline at end of file
diff --git a/data/i18n/uk/OWNERS b/data/i18n/uk/OWNERS
new file mode 100644
index 0000000000..3175dc7d48
--- /dev/null
+++ b/data/i18n/uk/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Ukrainian.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-uk-reviews
+
+approvers:
+- sig-docs-uk-owners
+
+labels:
+- language/uk
diff --git a/data/i18n/uk/uk.toml b/data/i18n/uk/uk.toml
new file mode 100644
index 0000000000..ec60865783
--- /dev/null
+++ b/data/i18n/uk/uk.toml
@@ -0,0 +1,255 @@
+# i18n strings for the Ukrainian (main) site.
+
+[caution]
+# other = "Caution:"
+other = "Увага:"
+
+[cleanup_heading]
+# other = "Cleaning up"
+other = "Очистка"
+
+[community_events_calendar]
+# other = "Events Calendar"
+other = "Календар подій"
+
+[community_forum_name]
+# other = "Forum"
+other = "Форум"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_warning]
+# other = " documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the "
+other = " документація більше не підтримується. Версія, яку ви зараз переглядаєте, є статичною. Для перегляду актуальної документації дивіться "
+
+[deprecation_file_warning]
+# other = "Deprecated"
+other = "Застаріла версія"
+
+[docs_label_browse]
+# other = "Browse Docs"
+other = "Переглянути документацію"
+
+[docs_label_contributors]
+# other = "Contributors"
+other = "Контриб'ютори"
+
+[docs_label_i_am]
+# other = "I AM..."
+other = "Я..."
+
+[docs_label_users]
+# other = "Users"
+other = "Користувачі"
+
+[feedback_heading]
+# other = "Feedback"
+other = "Ваша думка"
+
+[feedback_no]
+# other = "No"
+other = "Ні"
+
+[feedback_question]
+# other = "Was this page helpful?"
+other = "Чи була ця сторінка корисною?"
+
+[feedback_yes]
+# other = "Yes"
+other = "Так"
+
+[input_placeholder_email_address]
+# other = "email address"
+other = "електронна адреса"
+
+[latest_version]
+# other = "latest version."
+other = "остання версія."
+
+[layouts_blog_pager_prev]
+# other = "<< Prev"
+other = "<< Назад"
+
+[layouts_blog_pager_next]
+# other = "Next >>"
+other = "Далі >>"
+
+[layouts_case_studies_list_tell]
+# other = "Tell your story"
+other = "Розкажіть свою історію"
+
+[layouts_docs_glossary_aka]
+# other = "Also known as"
+other = "Також відомий як"
+
+[layouts_docs_glossary_description]
+# other = "This glossary is intended to be a comprehensive, standardized list of Kubernetes terminology. It includes technical terms that are specific to Kubernetes, as well as more general terms that provide useful context."
+other = "Даний словник створений як повний стандартизований список термінології Kubernetes. Він включає в себе технічні терміни, специфічні для Kubernetes, а також більш загальні терміни, необхідні для кращого розуміння контексту."
+
+[layouts_docs_glossary_deselect_all]
+# other = "Deselect all"
+other = "Очистити вибір"
+
+[layouts_docs_glossary_click_details_after]
+# other = "indicators below to get a longer explanation for any particular term."
+other = "для отримання розширеного пояснення конкретного терміна."
+
+[layouts_docs_glossary_click_details_before]
+# other = "Click on the"
+other = "Натисність на"
+
+[layouts_docs_glossary_filter]
+# other = "Filter terms according to their tags"
+other = "Відфільтрувати терміни за тегами"
+
+[layouts_docs_glossary_select_all]
+# other = "Select all"
+other = "Вибрати все"
+
+[layouts_docs_partials_feedback_improvement]
+# other = "suggest an improvement"
+other = "запропонувати покращення"
+
+[layouts_docs_partials_feedback_issue]
+# other = "Open an issue in the GitHub repo if you want to "
+other = "Створіть issue в GitHub репозиторії, якщо ви хочете "
+
+[layouts_docs_partials_feedback_or]
+# other = "or"
+other = "або"
+
+[layouts_docs_partials_feedback_problem]
+# other = "report a problem"
+other = "повідомити про проблему"
+
+[layouts_docs_partials_feedback_thanks]
+# other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on"
+other = "Дякуємо за ваш відгук. Якщо ви маєте конкретне запитання щодо використання Kubernetes, ви можете поставити його"
+
+[layouts_docs_search_fetching]
+# other = "Fetching results..."
+other = "Отримання результатів..."
+
+[main_by]
+other = "by"
+
+[main_cncf_project]
+# other = """We are a <a href="https://cncf.io/">CNCF</a> graduated project</p>"""
+other = """Ми є проектом <a href="https://cncf.io/">CNCF</a></p>"""
+
+[main_community_explore]
+# other = "Explore the community"
+other = "Познайомитись із спільнотою"
+
+[main_contribute]
+# other = "Contribute"
+other = "Допомогти проекту"
+
+[main_copyright_notice]
+# other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+other = """The Linux Foundation &reg;. Всі права застережено. The Linux Foundation є зареєстрованою торговою маркою. Перелік торгових марок The Linux Foundation ви знайдете на нашій сторінці <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Використання торгових марок</a>"""
+
+[main_documentation_license]
+# other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+other = """Автори Kubernetes | Документація розповсюджується під ліцензією <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_edit_this_page]
+# other = "Edit This Page"
+other = "Редагувати цю сторінку"
+
+[main_github_create_an_issue]
+# other = "Create an Issue"
+other = "Створити issue"
+
+[main_github_invite]
+# other = "Interested in hacking on the core Kubernetes code base?"
+other = "Хочете зламати основну кодову базу Kubernetes?"
+
+[main_github_view_on]
+# other = "View On GitHub"
+other = "Переглянути у GitHub"
+
+[main_kubernetes_features]
+# other = "Kubernetes Features"
+other = "Функціональні можливості Kubernetes"
+
+[main_kubeweekly_baseline]
+# other = "Interested in receiving the latest Kubernetes news? Sign up for KubeWeekly."
+other = "Хочете отримувати останні новини Kubernetes? Підпишіться на KubeWeekly."
+
+[main_kubernetes_past_link]
+# other = "View past newsletters"
+other = "Переглянути попередні інформаційні розсилки"
+
+[main_kubeweekly_signup]
+# other = "Subscribe"
+other = "Підписатися"
+
+[main_page_history]
+# other ="Page History"
+other ="Історія сторінки"
+
+[main_page_last_modified_on]
+# other = "Page last modified on"
+other = "Сторінка востаннє редагувалася"
+
+[main_read_about]
+# other = "Read about"
+other = "Прочитати про"
+
+[main_read_more]
+# other = "Read more"
+other = "Прочитати більше"
+
+[note]
+# other = "Note:"
+other = "Примітка:"
+
+[objectives_heading]
+# other = "Objectives"
+other = "Цілі"
+
+[prerequisites_heading]
+# other = "Before you begin"
+other = "Перш ніж ви розпочнете"
+
+[subscribe_button]
+# other = "Subscribe"
+other = "Підписатися"
+
+[ui_search_placeholder]
+# other = "Search"
+other = "Пошук"
+
+[version_check_mustbe]
+# other = "Your Kubernetes server must be version "
+other = "Версія вашого Kubernetes сервера має бути "
+
+[version_check_mustbeorlater]
+# other = "Your Kubernetes server must be at or later than version "
+other = "Версія вашого Kubernetes сервера має дорівнювати або бути молодшою ніж "
+
+[version_check_tocheck]
+# other = "To check the version, enter "
+other = "Для перевірки версії введіть "
+
+[warning]
+# other = "Warning:"
+other = "Попередження:"
+
+[whatsnext_heading]
+# other = "What's next"
+other = "Що далі"
diff --git a/data/i18n/vi/OWNERS b/data/i18n/vi/OWNERS
new file mode 100644
index 0000000000..932adeb73f
--- /dev/null
+++ b/data/i18n/vi/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Vietnamese.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-vi-reviews
+
+approvers:
+- sig-docs-vi-owners
+
+labels:
+- language/vi
diff --git a/data/i18n/vi/vi.toml b/data/i18n/vi/vi.toml
new file mode 100644
index 0000000000..d65c07a720
--- /dev/null
+++ b/data/i18n/vi/vi.toml
@@ -0,0 +1,197 @@
+# i18n strings for the Vietnamese (main) site.
+
+[caution]
+other = "Chú ý:"
+
+[cleanup_heading]
+other = "Cleaning up"
+
+[community_events_calendar]
+other = "Lịch sự kiện"
+
+[community_forum_name]
+other = "Diễn đàn"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_warning]
+other = " tài liệu này không còn được duy trì. Phiên bản đang xem hiện tại là một snapshot tĩnh. Để rõ hơn về tài liệu bản cập nhật, xem "
+
+[deprecation_file_warning]
+other = "Không dùng nữa"
+
+[docs_label_browse]
+other = "Duyệt tài liệu"
+
+[docs_label_contributors]
+other = "Người đóng góp"
+
+[docs_label_i_am]
+other = "TÔI LÀ..."
+
+[docs_label_users]
+other = "Users"
+
+[feedback_heading]
+other = "Phản hồi"
+
+[feedback_no]
+other = "Không"
+
+[feedback_question]
+other = "Trang này có hữu ích?"
+
+[feedback_yes]
+other = "Có"
+
+[input_placeholder_email_address]
+other = "địa chỉ email"
+
+[latest_version]
+other = "phiên bản mới nhất."
+
+[layouts_blog_pager_prev]
+other = "<< Trước"
+
+[layouts_blog_pager_next]
+other = "Sau >>"
+
+[layouts_case_studies_list_tell]
+other = "Kể câu chuyện của bạn"
+
+[layouts_docs_glossary_aka]
+other = "Cũng được biết đến như là"
+
+[layouts_docs_glossary_description]
+other = "Bảng chú giải này được kì vọng là một danh sách hoàn thiện, được chuẩn hóa về thuật ngữ Kubernetes. Nó bao gồm các thuật ngữ kỹ thuật dành riêng cho Kubernetes, cũng như các thuật ngữ chung hơn cung cấp ngữ cảnh hữu ích"
+
+[layouts_docs_glossary_deselect_all]
+other = "Bỏ chọn tất cả"
+
+[layouts_docs_glossary_click_details_after]
+other = "danh mục dưới đây để giải thích rõ hơn cho các thuật ngữ cụ thể"
+
+[layouts_docs_glossary_click_details_before]
+other = "Click vào"
+
+[layouts_docs_glossary_filter]
+other = "Lọc các thuật ngữ theo tags"
+
+[layouts_docs_glossary_select_all]
+other = "Chọn tất cả"
+
+[layouts_docs_partials_feedback_improvement]
+other = "đề xuất cải tiến"
+
+[layouts_docs_partials_feedback_issue]
+other = "Tạo một issue trên Github repo nến bạn muốn "
+
+[layouts_docs_partials_feedback_or]
+other = "hoặc"
+
+[layouts_docs_partials_feedback_problem]
+other = "báo cáo một vấn đề"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Cảm ơn vì đã phản hồi. Nếu bạn có một câu hỏi cụ thể, có thể trả lời về cách sử dụng Kubernetes, hãy hỏi nó trên"
+
+[layouts_docs_search_fetching]
+other = "Đang lấy kết quả..."
+
+[main_by]
+other = "bởi"
+
+[main_cncf_project]
+other = """Chúng tôi là một dự án <a href="https://cncf.io/">CNCF</a></p>"""
+
+[main_community_explore]
+other = "Khám phá cộng đồng"
+
+[main_contribute]
+other = "Đóng góp"
+
+[main_copyright_notice]
+other = """The Linux Foundation &reg;. Đã đăng ký Bản quyền. The Linux Foundation đã đăng ký và sử dụng nhãn hiệu. Để biết danh sách các nhãn hiệu của The Linux Foundation, xem <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
+
+[main_documentation_license]
+other = """Các tác giả Kubernetes | Tài liệu được phân phối theo <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_edit_this_page]
+other = "Sửa trang này"
+
+[main_github_create_an_issue]
+other = "Tạo một Issue"
+
+[main_github_invite]
+other = "Quan tâm đến việc hacking mã nguồn Kubernetes?"
+
+[main_github_view_on]
+other = "Xem trên GitHub"
+
+[main_kubernetes_features]
+other = "Các tính năng của Kubernetes"
+
+[main_kubeweekly_baseline]
+other = "Muốn nhận những tin tức Kubernetes mới nhất? Đăng kí KubeWeekly."
+
+[main_kubernetes_past_link]
+other = "Xem các bản tin trước đây"
+
+[main_kubeweekly_signup]
+other = "Đăng kí"
+
+[main_page_history]
+other ="Lịch sử trang"
+
+[main_page_last_modified_on]
+other = "Trang được sửa lần cuồi vào"
+
+[main_read_about]
+other = "Đọc về"
+
+[main_read_more]
+other = "Đọc thêm"
+
+[note]
+other = "Ghi chú:"
+
+[objectives_heading]
+other = "Mục tiêu"
+
+[prerequisites_heading]
+other = "Trước khi bắt đầu"
+
+[subscribe_button]
+other = "Đăng ký"
+
+[ui_search_placeholder]
+other = "Tìm kiếm"
+
+[version_check_mustbe]
+other = "Server Kubernetes của bạn phải ở phiên bản "
+
+[version_check_mustbeorlater]
+other = "Server Kubernetes của bạn ở phiên bản mới hơn hoặc tại phiên bản "
+
+[version_check_tocheck]
+other = "Để kiểm tra phiên bản, nhập "
+
+[warning]
+other = "Cảnh báo:"
+
+[whatsnext_heading]
+other = "Có gì tiếp theo"
+
diff --git a/data/i18n/zh/OWNERS b/data/i18n/zh/OWNERS
new file mode 100644
index 0000000000..3bb5f8ebe5
--- /dev/null
+++ b/data/i18n/zh/OWNERS
@@ -0,0 +1,13 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Localized strings for Chinese.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+- sig-docs-zh-reviews
+
+approvers:
+- sig-docs-zh-owners
+
+labels:
+- language/zh
diff --git a/data/i18n/zh/zh.toml b/data/i18n/zh/zh.toml
new file mode 100644
index 0000000000..dcf32839f8
--- /dev/null
+++ b/data/i18n/zh/zh.toml
@@ -0,0 +1,230 @@
+# i18n strings for the Chinese version of the site (https://kubernetes.io/zh/)
+# 注意：修改此文件时请维持字符串名称的字母顺序并与英文版保持一致
+
+[caution]
+other = "注意："
+
+[cleanup_heading]
+other = "清理现场"
+
+[community_events_calendar]
+other = "事件日历"
+
+[community_forum_name]
+other = "论坛"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_title]
+other = "您正在查看 Kubernetes 版本的文档："
+
+[deprecation_warning]
+other = " 版本的文档已不再维护。您现在看到的版本来自于一份静态的快照。如需查阅最新文档，请点击"
+
+[deprecation_file_warning]
+other = "已过时"
+
+[docs_label_browse]
+other = "浏览文档"
+
+[docs_label_contributors]
+other = "贡献者"
+
+[docs_label_i_am]
+other = "我是..."
+
+[docs_label_users]
+other = "用户"
+
+[examples_heading]
+other = "示例"
+
+[feedback_heading]
+other = "反馈"
+
+[feedback_no]
+other = "否"
+
+[feedback_question]
+other = "此页是否对您有帮助？"
+
+[feedback_yes]
+other = "是"
+
+[input_placeholder_email_address]
+other = "电子邮件地址"
+
+[latest_version]
+other = "最新版本。"
+
+[layouts_blog_pager_prev]
+other = "<< 前一篇"
+
+[layouts_blog_pager_next]
+other = "后一篇 >>"
+
+[layouts_case_studies_list_tell]
+other = "分享您的故事"
+
+[layouts_docs_glossary_aka]
+other = "亦称作"
+
+[layouts_docs_glossary_description]
+other = "此术语表旨在提供 Kubernetes 术语的完整、标准列表。其中包含特定于 Kubernetes 的技术术语以及能够构造有用的语境的一般性术语。"
+
+[layouts_docs_glossary_deselect_all]
+other = "全不选"
+
+[layouts_docs_glossary_click_details_after]
+other = "下面的指示符号获取特定术语的更为完整的描述。"
+
+[layouts_docs_glossary_click_details_before]
+other = "点击"
+
+[layouts_docs_glossary_filter]
+other = "根据标签过滤术语"
+
+[layouts_docs_glossary_select_all]
+other = "全选"
+
+[layouts_docs_partials_feedback_improvement]
+other = "提出改进建议"
+
+[layouts_docs_partials_feedback_issue]
+other = "在 GitHub 仓库上登记新的问题"
+
+[layouts_docs_partials_feedback_or]
+other = "或者"
+
+[layouts_docs_partials_feedback_problem]
+other = "报告问题"
+
+[layouts_docs_partials_feedback_thanks]
+other = "感谢反馈。如果您有一个关于如何使用 Kubernetes 的特定的、需要答案的问题，可以访问"
+
+[layouts_docs_search_fetching]
+other = "检索结果中.."
+
+[main_by]
+other = "由："
+
+[main_cncf_project]
+other = """我们是 <a href="https://cncf.io/">CNCF</a> 毕业项目</p>"""
+
+[main_community_explore]
+other = "了解社区"
+
+[main_contribute]
+other = "贡献"
+
+[main_copyright_notice]
+other = """Linux 基金会&reg;。保留所有权利。Linux 基金会已注册并使用商标。如需了解 Linux 基金会的商标列表，请访问<a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">商标使用页面</a>"""
+
+[main_documentation_license]
+other = """The Kubernetes 作者 | 文档发布基于 <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a> 授权许可"""
+
+[main_edit_this_page]
+other = "修改本页面"
+
+[main_github_create_an_issue]
+other = "报告 GitHub 问题"
+
+[main_github_invite]
+other = "想要修改 Kubernetes 的核心源代码？"
+
+[main_github_view_on]
+other = "在 GitHub 上查看"
+
+[main_kubernetes_features]
+other = "Kubernetes 特性"
+
+[main_kubeweekly_baseline]
+other = "想要获取最新的 Kubernetes 新闻么？请订阅 KubeWeekly。"
+
+[main_kubernetes_past_link]
+other = "浏览往期的周报"
+
+[main_kubeweekly_signup]
+other = "订阅"
+
+[main_page_history]
+other ="页面历史"
+
+[main_page_last_modified_on]
+other = "页面最后一次修改于"
+
+[main_read_about]
+other = "了解"
+
+[main_read_more]
+other = "了解更多"
+
+[note]
+other = "说明："
+
+[objectives_heading]
+other = "教程目标"
+
+[options_heading]
+other = "选项"
+
+[post_create_child_page]
+other = "创建子页面"
+
+[prerequisites_heading]
+other = "准备开始"
+
+[seealso_heading]
+other = "另请参见"
+
+[subscribe_button]
+other = "订阅"
+
+[synopsis_heading]
+other = "简介"
+
+[thirdparty_message]
+other = """本部分链接到提供 Kubernetes 所需功能的第三方项目。Kubernetes 项目作者不负责这些项目。此页面遵循<a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF 网站指南</a>，按字母顺序列出项目。要将项目添加到此列表中，请在提交更改之前阅读<a href="/docs/contribute/style/content-guide/#third-party-content">内容指南</a>。"""
+
+[ui_search_placeholder]
+other = "搜索"
+
+[version_check_mustbe]
+other = "您的 Kubernetes 服务器版本必须是 "
+
+[version_check_mustbeorlater]
+other = "您的 Kubernetes 服务器版本必须不低于版本 "
+
+[version_check_tocheck]
+other = "要获知版本信息，请输入 "
+
+[version_menu]
+other = "版本列表"
+
+[warning]
+other = "警告："
+
+[whatsnext_heading]
+other = "接下来"
+
+[docs_version_latest_heading]
+other = "当前版本"
+
+[docs_version_other_heading]
+other = "往期版本"
+
+[docs_version_current]
+other = "(此文档)"
diff --git a/i18n/de.toml b/i18n/de.toml
deleted file mode 100644
index cd4c3d7924..0000000000
--- a/i18n/de.toml
+++ /dev/null
@@ -1,203 +0,0 @@
-# i18n strings for the German (main) site.
-
-[deprecation_warning]
-other = " Die Dokumentation wird nicht mehr aktiv gepflegt. Die aktuell angezeigte Version ist eine statische Momentaufnahme. Aktuelle Dokumentation finden Sie unter "
-
-[deprecation_file_warning]
-other = "Veraltet"
-
-[objectives_heading]
-other = "Ziele"
-
-[cleanup_heading]
-other = "Aufräumen"
-
-[prerequisites_heading]
-other = "Bevor Sie beginnen"
-
-[subscribe_button]
-other = "Abonnieren"
-
-[whatsnext_heading]
-other = "Nächste Schritte"
-
-[feedback_heading]
-other = "Feedback"
-
-[feedback_question]
-other = "War diese Seite hilfreich?"
-
-[feedback_yes]
-other = "Ja"
-
-[feedback_no]
-other = "Nein"
-
-[latest_version]
-other = "aktuelle Version."
-
-[version_check_mustbe]
-other = "Ihr Kubernetes-Server benötigt die Version "
-
-[version_check_mustbeorlater]
-other = "Ihr Kubernetes-Server benötigt mindestens die Version  "
-
-[version_check_tocheck]
-other = "Um die Version zu überprüfen, geben Sie Folgendes ein "
-
-[caution]
-other = "Achtung:"
-
-[note]
-other = "Hinweis:"
-
-[warning]
-other = "Warnung:"
-
-[main_read_about]
-other = "Mehr Informationen"
-
-[main_read_more]
-other = "Weiterlesen"
-
-[main_github_invite]
-other = "Interested in hacking on the core Kubernetes code base?"
-
-[main_github_view_on]
-other = "Auf GitHub ansehen"
-
-[main_github_create_an_issue]
-other = "Problem berichten"
-
-[main_community_explore]
-other = "Entdecke die Community"
-
-[main_kubernetes_features]
-other = "Kubernetes Features"
-
-[main_cncf_project]
-other = """Wir sind ein <a href="https://cncf.io/">CNCF</a> Abschlussprojekt</p>"""
-
-[main_kubeweekly_baseline]
-other = "Möchten Sie die neuesten Nachrichten von Kubernetes erhalten? Melden Sie sich für KubeWeekly an."
-
-[main_kubernetes_past_link]
-other = "Frühere Newsletter anzeigen"
-
-[main_kubeweekly_signup]
-other = "Abonnieren"
-
-[main_contribute]
-other = "Contribute"
-
-[main_edit_this_page]
-other = "Diese Seite bearbeiten"
-
-[main_page_history]
-other ="Seitenverlauf"
-
-[main_page_last_modified_on]
-other = "Letzte Änderung am"
-
-[main_by]
-other = "durch"
-
-[main_documentation_license]
-other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "Dokumention durchsuchen"
-
-[docs_label_contributors]
-other = "Mitwirkende"
-
-[docs_label_users]
-other = "Users"
-
-[docs_label_i_am]
-other = "ICH BIN..."
-
-
-# layouts > blog > pager
-
-[layouts_blog_pager_prev]
-other = "<< Zurück"
-
-[layouts_blog_pager_next]
-other = "Vor >>"
-
-# layouts > blog > list
-
-[layouts_case_studies_list_tell]
-other = "Erzählen Sie Ihre Geschichte"
-
-# layouts > docs > glossary
-
-[layouts_docs_glossary_description]
-other = "Dieses Glossar soll eine umfassende, standardisierte Liste der Kubernetes-Terminologie darstellen. Es enthält technische Begriffe, die für K8 spezifisch sind, sowie allgemeinere Begriffe, die einen nützlichen Kontext bieten."
-
-[layouts_docs_glossary_filter]
-other = "Begriffe nach ihren Tags filtern"
-
-[layouts_docs_glossary_select_all]
-other = "Alle auswählen"
-
-[layouts_docs_glossary_deselect_all]
-other = "Alle abwählen"
-
-[layouts_docs_glossary_aka]
-other = "Auch bekannt als"
-
-[layouts_docs_glossary_click_details_before]
-other = "Klicken Sie auf die"
-
-[layouts_docs_glossary_click_details_after]
-other = "Indikatoren unten, um eine längere Erklärung für einen bestimmten Begriff zu erhalten."
-
-# layouts > docs > search
-
-[layouts_docs_search_fetching]
-other = "Ergebnisse werden abgerufen..."
-
-# layouts > partial > feedback
-
-[layouts_docs_partials_feedback_thanks]
-other = "Danke für die Rückmeldung. Wenn Sie eine spezifische, beantwortbare Frage zur Verwendung von Kubernetes haben, stellen Sie diese unter "
-
-[layouts_docs_partials_feedback_issue]
-other = "Öffnen Sie ein Problem im GitHub-Repo, wenn Sie möchten "
-
-[layouts_docs_partials_feedback_problem]
-other = "Ein Problem melden"
-
-[layouts_docs_partials_feedback_or]
-other = "oder"
-
-[layouts_docs_partials_feedback_improvement]
-other = "Eine Verbesserung vorschlagen"
-
-
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Forum"
-[community_events_calendar]
-other = "Veranstaltungskalender"
-
-# UI elements
-[ui_search_placeholder]
-other = "Suchen"
-
-[input_placeholder_email_address]
-other = "E-Mail-Addresse"
\ No newline at end of file
diff --git a/i18n/de.toml b/i18n/de.toml
new file mode 120000
index 0000000000..4435a0f16c
--- /dev/null
+++ b/i18n/de.toml
@@ -0,0 +1 @@
+../data/i18n/de/de.toml
\ No newline at end of file
diff --git a/i18n/en.toml b/i18n/en.toml
deleted file mode 100644
index c6f24f8e2e..0000000000
--- a/i18n/en.toml
+++ /dev/null
@@ -1,226 +0,0 @@
-# i18n strings for the English (main) site.
-# NOTE: Please keep the entries in alphabetical order when editing
-[caution]
-other = "Caution:"
-
-[cleanup_heading]
-other = "Cleaning up"
-
-[community_events_calendar]
-other = "Events Calendar"
-
-[community_forum_name]
-other = "Forum"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_title]
-other = "You are viewing documentation for Kubernetes version:"
-
-[deprecation_warning]
-other = " documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the "
-
-[deprecation_file_warning]
-other = "Deprecated"
-
-[docs_label_browse]
-other = "Browse Docs"
-
-[docs_label_contributors]
-other = "Contributors"
-
-[docs_label_i_am]
-other = "I AM..."
-
-[docs_label_users]
-other = "Users"
-
-[docs_version_current]
-other = "(this documentation)"
-
-[docs_version_latest_heading]
-other = "Latest version"
-
-[docs_version_other_heading]
-other = "Older versions"
-
-[error_404_were_you_looking_for]
-other = "Were you looking for:"
-
-[examples_heading]
-other = "Examples"
-
-[feedback_heading]
-other = "Feedback"
-
-[feedback_no]
-other = "No"
-
-[feedback_question]
-other = "Was this page helpful?"
-
-[feedback_yes]
-other = "Yes"
-
-[input_placeholder_email_address]
-other = "email address"
-
-[latest_version]
-other = "latest version."
-
-[layouts_blog_pager_prev]
-other = "<< Prev"
-
-[layouts_blog_pager_next]
-other = "Next >>"
-
-[layouts_case_studies_list_tell]
-other = "Tell your story"
-
-[layouts_docs_glossary_aka]
-other = "Also known as"
-
-[layouts_docs_glossary_description]
-other = "This glossary is intended to be a comprehensive, standardized list of Kubernetes terminology. It includes technical terms that are specific to Kubernetes, as well as more general terms that provide useful context."
-
-[layouts_docs_glossary_deselect_all]
-other = "Deselect all"
-
-[layouts_docs_glossary_click_details_after]
-other = "indicators below to get a longer explanation for any particular term."
-
-[layouts_docs_glossary_click_details_before]
-other = "Click on the"
-
-[layouts_docs_glossary_filter]
-other = "Filter terms according to their tags"
-
-[layouts_docs_glossary_select_all]
-other = "Select all"
-
-[layouts_docs_partials_feedback_improvement]
-other = "suggest an improvement"
-
-[layouts_docs_partials_feedback_issue]
-other = "Open an issue in the GitHub repo if you want to "
-
-[layouts_docs_partials_feedback_or]
-other = "or"
-
-[layouts_docs_partials_feedback_problem]
-other = "report a problem"
-
-[layouts_docs_partials_feedback_thanks]
-other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on"
-
-[layouts_docs_search_fetching]
-other = "Fetching results..."
-
-[main_by]
-other = "by"
-
-[main_cncf_project]
-other = """We are a <a href="https://cncf.io/">CNCF</a> graduated project</p>"""
-
-[main_community_explore]
-other = "Explore the community"
-
-[main_contribute]
-other = "Contribute"
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-[main_documentation_license]
-other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_github_invite]
-other = "Interested in hacking on the core Kubernetes code base?"
-
-[main_github_view_on]
-other = "View On GitHub"
-
-[main_kubernetes_features]
-other = "Kubernetes Features"
-
-[main_kubeweekly_baseline]
-other = "Interested in receiving the latest Kubernetes news? Sign up for KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "View past newsletters"
-
-[main_kubeweekly_signup]
-other = "Subscribe"
-
-[main_page_history]
-other ="Page History"
-
-[main_page_last_modified_on]
-other = "Page last modified on"
-
-[main_read_about]
-other = "Read about"
-
-[main_read_more]
-other = "Read more"
-
-[note]
-other = "Note:"
-
-[objectives_heading]
-other = "Objectives"
-
-[options_heading]
-other = "Options"
-
-[post_create_issue]
-other = "Create an issue"
-
-[prerequisites_heading]
-other = "Before you begin"
-
-[seealso_heading]
-other = "See Also"
-
-[subscribe_button]
-other = "Subscribe"
-
-[synopsis_heading]
-other = "Synopsis"
-
-[thirdparty_message]
-other = """This section links to third party projects that provide functionality required by Kubernetes. The Kubernetes project authors aren't responsible for these projects. This page follows <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF website guidelines</a> by listing projects alphabetically. To add a project to this list, read the <a href="/docs/contribute/style/content-guide/#third-party-content">content guide</a> before submitting a change."""
-
-[ui_search_placeholder]
-other = "Search"
-
-[version_check_mustbe]
-other = "Your Kubernetes server must be version "
-
-[version_check_mustbeorlater]
-other = "Your Kubernetes server must be at or later than version "
-
-[version_check_tocheck]
-other = "To check the version, enter "
-
-[version_menu]
-other = "Versions"
-
-[warning]
-other = "Warning:"
-
-[whatsnext_heading]
-other = "What's next"
diff --git a/i18n/en.toml b/i18n/en.toml
new file mode 120000
index 0000000000..a13dbc01ce
--- /dev/null
+++ b/i18n/en.toml
@@ -0,0 +1 @@
+../data/i18n/en/en.toml
\ No newline at end of file
diff --git a/i18n/es.toml b/i18n/es.toml
deleted file mode 100644
index c232ce7c27..0000000000
--- a/i18n/es.toml
+++ /dev/null
@@ -1,203 +0,0 @@
-# i18n strings for the Spanish (main) site.
-
-[deprecation_warning]
-other = " ya no mantiene activamente la documentación. La versión que está viendo actualmente es una instantánea estática. Para la documentación actualizada, visita la "
-
-[deprecation_file_warning]
-other = "Descontinuado"
-
-[objectives_heading]
-other = "Objetivos"
-
-[cleanup_heading]
-other = "Limpieza de recursos"
-
-[prerequisites_heading]
-other = "Antes de empezar"
-
-[subscribe_button]
-other = "Suscribir"
-
-[whatsnext_heading]
-other = "Siguientes pasos"
-
-[feedback_heading]
-other = "Comentarios"
-
-[feedback_question]
-other = "¿Esta página le ha sido de ayuda?"
-
-[feedback_yes]
-other = "Sí"
-
-[feedback_no]
-other = "No"
-
-[latest_version]
-other = "última versión."
-
-[version_check_mustbe]
-other = "Su versión de Kubernetes debe ser "
-
-[version_check_mustbeorlater]
-other = "Su versión de Kubernetes debe ser como mínimo "
-
-[version_check_tocheck]
-other = "Para comprobar la versión, introduzca "
-
-[caution]
-other = "Precaución:"
-
-[note]
-other = "Nota:"
-
-[warning]
-other = "Advertencia:"
-
-[main_read_about]
-other = "Leer"
-
-[main_read_more]
-other = "Leer más"
-
-[main_github_invite]
-other = "¿Está interesado en participar en el código base de Kubernetes?"
-
-[main_github_view_on]
-other = "Ver en GitHub"
-
-[main_github_create_an_issue]
-other = "Abrir un Issue"
-
-[main_community_explore]
-other = "Explorar la comunidad"
-
-[main_kubernetes_features]
-other = "Características de Kubernetes"
-
-[main_cncf_project]
-other = """Somos un proyecto graduado de la <a href="https://cncf.io/">CNCF</a></p>"""
-
-[main_kubeweekly_baseline]
-other = "¿Interesado en recibir las últimas noticias de Kubernetes? Suscríbase a KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "Ver boletines anteriores"
-
-[main_kubeweekly_signup]
-other = "Suscríbase"
-
-[main_contribute]
-other = "Contribuir"
-
-[main_edit_this_page]
-other = "Editar esta página"
-
-[main_page_history]
-other ="Historial cambios"
-
-[main_page_last_modified_on]
-other = "Página modificada por última vez el "
-
-[main_by]
-other = "por"
-
-[main_documentation_license]
-other = """Los autores de Kubernetes | Documentación distribuida bajo <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. Todos los derechos reservados. The Linux Foundation tiene marcas registradas y utiliza marcas registradas. Para obtener una lista de marcas registradas por The Linux Foundation, visita <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "Explorar la documentación"
-
-[docs_label_contributors]
-other = "Contribuidores"
-
-[docs_label_users]
-other = "Usuarios"
-
-[docs_label_i_am]
-other = "Yo soy..."
-
-# layouts > blog > pager
-
-[layouts_blog_pager_prev]
-other = "<< Anterior"
-
-[layouts_blog_pager_next]
-other = "Siguiente >>"
-
-# layouts > blog > list
-
-[layouts_case_studies_list_tell]
-other = "Cuéntanos tu historia"
-
-# layouts > docs > glossary
-
-[layouts_docs_glossary_description]
-other = "Este glosario tiene la intención de ser una lista completa y estandarizada de la terminología de Kubernetes. Incluye términos técnicos que son específicos de k8s, así como términos más generales que proporcionan un contexto."
-
-[layouts_docs_glossary_filter]
-other = "Filtrar terminos por categoría:"
-
-[layouts_docs_glossary_select_all]
-other = "Seleccionar todos"
-
-[layouts_docs_glossary_deselect_all]
-other = "Elmininar selección"
-
-[layouts_docs_glossary_aka]
-other = "Also known as"
-
-[layouts_docs_glossary_click_details_before]
-other = "Haz click en el símbolo"
-
-[layouts_docs_glossary_click_details_after]
-other = "para obtener información detallada sobre el término."
-
-# layouts > docs > search
-
-[layouts_docs_search_fetching]
-other = "Obteniendo resultados.."
-
-# layouts > partial > feedback
-
-[layouts_docs_partials_feedback_thanks]
-other = "Muchas gracias por el feedback. Si tienes alguna pregunta específica sobre como usar Kubernetes, puedes preguntar en"
-
-[layouts_docs_partials_feedback_issue]
-other = "Abre un issue en el repositorio de GitHub si quieres"
-
-[layouts_docs_partials_feedback_problem]
-other = "reportar un problema"
-
-[layouts_docs_partials_feedback_or]
-other = "o"
-
-[layouts_docs_partials_feedback_improvement]
-other = "sugerir alguna mejora"
-
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Foro"
-[community_events_calendar]
-other = "Calendario de eventos"
-[community_youtube_name]
-other = "YouTube"
-
-# UI elements
-[ui_search_placeholder]
-other = "Buscar"
-
-[input_placeholder_email_address]
-other = "dirección de correo electrónico"
\ No newline at end of file
diff --git a/i18n/es.toml b/i18n/es.toml
new file mode 120000
index 0000000000..8bbbc64bd6
--- /dev/null
+++ b/i18n/es.toml
@@ -0,0 +1 @@
+../data/i18n/es/es.toml
\ No newline at end of file
diff --git a/i18n/fr.toml b/i18n/fr.toml
deleted file mode 100644
index 4cfc419cb7..0000000000
--- a/i18n/fr.toml
+++ /dev/null
@@ -1,143 +0,0 @@
-# i18n strings for the French (main) site.
-
-[deprecation_warning]
-other = " documentation non maintenue. Vous consultez une version statique. Pour une documentation à jour, veuillez consulter: "
-
-[objectives_heading]
-other = "Objectifs"
-
-[cleanup_heading]
-other = "Cleanup"
-
-[prerequisites_heading]
-other = "Pré-requis"
-
-[subscribe_button]
-other = "Souscrire"
-
-[whatsnext_heading]
-other = "A suivre"
-
-[feedback_heading]
-other = "Feedback"
-
-[feedback_question]
-other = "Cette page est elle utile ?"
-
-[feedback_yes]
-other = "Oui"
-
-[feedback_no]
-other = "Non"
-
-[latest_version]
-other = "dernière version."
-
-[version_check_mustbe]
-other = "Votre serveur Kubernetes doit être version "
-
-[version_check_mustbeorlater]
-other = "Votre serveur Kubernetes doit être au moins à la version "
-
-[version_check_tocheck]
-other = "Pour consulter la version, entrez "
-
-[caution]
-other = "Avertissement:"
-
-[note]
-other = "Note:"
-
-[warning]
-other = "Attention:"
-
-[main_read_about]
-other = "A propos"
-
-[main_read_more]
-other = "Autres ressources"
-
-[main_github_invite]
-other = "Souhaitez vous contribuer au code de Kubernetes ?"
-
-[main_github_view_on]
-other = "Voir sur GitHub"
-
-[main_github_create_an_issue]
-other = "Ouvrez un ticket"
-
-[main_community_explore]
-other = "Explorez la communauté"
-
-[main_kubernetes_features]
-other = "Fonctionnalités Kubernetes"
-
-[main_cncf_project]
-other = """Nous sommes un projet <a href="https://cncf.io/">CNCF</a> diplômé</p>"""
-
-[main_kubeweekly_baseline]
-other = "Intéressez pour recevoir les dernières informations sur Kubernetes ? Abonnez-vous à KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "Voir les newsletters précédentes"
-
-[main_kubeweekly_signup]
-other = "S'abonner"
-
-[main_contribute]
-other = "Contribuer"
-
-[main_edit_this_page]
-other = "Editez cette page"
-
-[main_page_history]
-other ="Historique"
-
-[main_page_last_modified_on]
-other = "Dernière modification le"
-
-[main_by]
-other = "de"
-
-[main_documentation_license]
-other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "Parcourir la documentation"
-
-[docs_label_contributors]
-other = "Contributeurs"
-
-[docs_label_users]
-other = "Utilisateurs"
-
-[docs_label_i_am]
-other = "JE SUIS..."
-
-[examples_heading]
-other = "Exemples"
-
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Forum"
-[community_events_calendar]
-other = "Calendrier"
-
-# UI elements
-[ui_search_placeholder]
-other = "Recherche"
-
-[input_placeholder_email_address]
-other = "adresse email"
diff --git a/i18n/fr.toml b/i18n/fr.toml
new file mode 120000
index 0000000000..1bb0befdcb
--- /dev/null
+++ b/i18n/fr.toml
@@ -0,0 +1 @@
+../data/i18n/fr/fr.toml
\ No newline at end of file
diff --git a/i18n/hi.toml b/i18n/hi.toml
deleted file mode 100644
index 2e5d6ad331..0000000000
--- a/i18n/hi.toml
+++ /dev/null
@@ -1,195 +0,0 @@
-# i18n strings for the English (main) site.
-
-[deprecation_warning]
-other = " documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the "
-
-[deprecation_file_warning]
-other = "Deprecated"
-
-[objectives_heading]
-other = "Objectives"
-
-[cleanup_heading]
-other = "Cleaning up"
-
-[prerequisites_heading]
-other = "Before you begin"
-
-[whatsnext_heading]
-other = "What's next"
-
-[feedback_heading]
-other = "Feedback"
-
-[feedback_question]
-other = "Was this page helpful?"
-
-[feedback_yes]
-other = "Yes"
-
-[feedback_no]
-other = "No"
-
-[latest_version]
-other = "latest version."
-
-[version_check_mustbe]
-other = "Your Kubernetes server must be version "
-
-[version_check_mustbeorlater]
-other = "Your Kubernetes server must be at or later than version "
-
-[version_check_tocheck]
-other = "To check the version, enter "
-
-[caution]
-other = "Caution:"
-
-[note]
-other = "Note:"
-
-[warning]
-other = "Warning:"
-
-[main_read_about]
-other = "Read about"
-
-[main_read_more]
-other = "Read more"
-
-[main_github_invite]
-other = "Interested in hacking on the core Kubernetes code base?"
-
-[main_github_view_on]
-other = "View On GitHub"
-
-[main_github_create_an_issue]
-other = "Create an Issue"
-
-[main_community_explore]
-other = "Explore the community"
-
-[main_kubernetes_features]
-other = "Kubernetes Features"
-
-[main_cncf_project]
-other = """We are a <a href="https://cncf.io/">CNCF</a> graduated project</p>"""
-
-[main_kubeweekly_baseline]
-other = "Interested in receiving the latest Kubernetes news? Sign up for KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "View past newsletters"
-
-[main_kubeweekly_signup]
-other = "Subscribe"
-
-[main_contribute]
-other = "Contribute"
-
-[main_edit_this_page]
-other = "Edit This Page"
-
-[main_page_history]
-other ="Page History"
-
-[main_page_last_modified_on]
-other = "Page last modified on"
-
-[main_by]
-other = "by"
-
-[main_documentation_license]
-other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "Browse Docs"
-
-[docs_label_contributors]
-other = "Contributors"
-
-[docs_label_users]
-other = "Users"
-
-[docs_label_i_am]
-other = "I AM..."
-
-# layouts > blog > pager
-
-[layouts_blog_pager_prev]
-other = "<< Prev"
-
-[layouts_blog_pager_next]
-other = "Next >>"
-
-# layouts > blog > list
-
-[layouts_case_studies_list_tell]
-other = "Tell your story"
-
-# layouts > docs > glossary
-
-[layouts_docs_glossary_description]
-other = "This glossary is intended to be a comprehensive, standardized list of Kubernetes terminology. It includes technical terms that are specific to K8s, as well as more general terms that provide useful context."
-
-[layouts_docs_glossary_filter]
-other = "Filter terms according to their tags"
-
-[layouts_docs_glossary_select_all]
-other = "Select all"
-
-[layouts_docs_glossary_deselect_all]
-other = "Deselect all"
-
-[layouts_docs_glossary_aka]
-other = "Also known as"
-
-[layouts_docs_glossary_click_details_before]
-other = "Click on the"
-
-[layouts_docs_glossary_click_details_after]
-other = "indicators below to get a longer explanation for any particular term."
-
-# layouts > docs > search
-
-[layouts_docs_search_fetching]
-other = "Fetching results.."
-
-# layouts > partial > feedback
-
-[layouts_docs_partials_feedback_thanks]
-other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on"
-
-[layouts_docs_partials_feedback_issue]
-other = "Open an issue in the GitHub repo if you want to "
-
-[layouts_docs_partials_feedback_problem]
-other = "report a problem"
-
-[layouts_docs_partials_feedback_or]
-other = "or"
-
-[layouts_docs_partials_feedback_improvement]
-other = "suggest an improvement"
-
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Forum"
-[community_events_calendar]
-other = "Events Calendar"
-
-# UI elements
-[ui_search_placeholder]
-other = "Search"
diff --git a/i18n/hi.toml b/i18n/hi.toml
new file mode 120000
index 0000000000..36d4a3bf76
--- /dev/null
+++ b/i18n/hi.toml
@@ -0,0 +1 @@
+../data/i18n/hi/hi.toml
\ No newline at end of file
diff --git a/i18n/id.toml b/i18n/id.toml
deleted file mode 100644
index 101ea071ff..0000000000
--- a/i18n/id.toml
+++ /dev/null
@@ -1,227 +0,0 @@
-# i18n strings for the Indonesian version of the site (https://kubernetes.io/id/)
-# NOTE: Please keep the entries in alphabetical order when editing
-
-[caution]
-other = "Perhatian:"
-
-[cleanup_heading]
-other = "Bersihkan"
-
-[community_events_calendar]
-other = "Kalender Acara"
-
-[community_forum_name]
-other = "Forum"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_title]
-other = "Kamu sedang menampilkan dokumentasi untuk Kubernetes versi:"
-
-[deprecation_warning]
-other = " dokumentasi sudah tidak dirawat lagi. Versi yang kamu lihat ini hanyalah snapshot statis. Untuk dokumentasi terkini, lihat "
-
-[deprecation_file_warning]
-other = "Sudah usang"
-
-[docs_label_browse]
-other = "Telusuri Dokumentasi"
-
-[docs_label_contributors]
-other = "Kontributor"
-
-[docs_label_i_am]
-other = "AKU..."
-
-[docs_label_users]
-other = "Pengguna"
-
-[docs_version_current]
-other = "(dokumentasi ini)"
-
-[docs_version_latest_heading]
-other = "Versi terbaru"
-
-[docs_version_other_heading]
-other = "Versi lama"
-
-[error_404_were_you_looking_for]
-other = "Apakah kamu sedang mencari:"
-
-[examples_heading]
-other = "Contoh"
-
-[feedback_heading]
-other = "Masukan"
-
-[feedback_no]
-other = "Tidak"
-
-[feedback_question]
-other = "Apakah halaman ini membantu?"
-
-[feedback_yes]
-other = "Ya"
-
-[input_placeholder_email_address]
-other = "alamat email"
-
-[latest_version]
-other = "versi terbaru."
-
-[layouts_blog_pager_prev]
-other = "<< Sebelumnya"
-
-[layouts_blog_pager_next]
-other = "Selanjutnya >>"
-
-[layouts_case_studies_list_tell]
-other = "Ceritakan kisahmu"
-
-[layouts_docs_glossary_aka]
-other = "Dikenal juga sebagai"
-
-[layouts_docs_glossary_description]
-other = "Glosarium ini dimaksudkan sebagai daftar terminologi Kubernetes yang komprehensif dan terstandardisasi. Glosarium ini mencakup istilah-istilah teknis yang spesifik digunakan di Kubernetes, serta beberapa istilah umum untuk membantu memberikan konteks."
-
-[layouts_docs_glossary_deselect_all]
-other = "Hapus semua pilihan"
-
-[layouts_docs_glossary_click_details_after]
-other = "indikator di bawah ini untuk mendapatkan penjelasan yang lebih lengkap untuk istilah tertentu."
-
-[layouts_docs_glossary_click_details_before]
-other = "Klik pada"
-
-[layouts_docs_glossary_filter]
-other = "Filter istilah sesuai dengan penandanya"
-
-[layouts_docs_glossary_select_all]
-other = "Pilih semua"
-
-[layouts_docs_partials_feedback_improvement]
-other = "beri saran perbaikan"
-
-[layouts_docs_partials_feedback_issue]
-other = "Buat isu di repositori GitHub jika kamu ingin "
-
-[layouts_docs_partials_feedback_or]
-other = "atau"
-
-[layouts_docs_partials_feedback_problem]
-other = "laporkan problem"
-
-[layouts_docs_partials_feedback_thanks]
-other = "Terima kasih atas masukannya. Jika kamu mempunyai pertanyaan yang spesifik terkait bagaimana menggunakan Kubernetes, tanyakanlah di "
-
-[layouts_docs_search_fetching]
-other = "Mengambil hasil..."
-
-[main_by]
-other = "oleh"
-
-[main_cncf_project]
-other = """Kami merupakan proyek yang lulus dari <a href="https://cncf.io/">CNCF</a></p>"""
-
-[main_community_explore]
-other = "Jelajahi komunitas"
-
-[main_contribute]
-other = "Bantu"
-
-[main_copyright_notice]
-other = """Linux Foundation &reg;. Hak cipta dilindungi. Linux Foundation telah mendaftarkan merek dagang dan pengunaannya. Perinciannya bisa dilihat pada <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">halaman penggunaan merek dagang</a>"""
-
-[main_documentation_license]
-other = """Para Pencipta Kubernetes | Dokumentasi didistribusikan di bawah <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_github_invite]
-other = "Tertarik untuk mengulik kode dari Kubernetes?"
-
-[main_github_view_on]
-other = "Lihat di GitHub"
-
-[main_kubernetes_features]
-other = "Fitur Kubernetes"
-
-[main_kubeweekly_baseline]
-other = "Tertarik untuk mendapatkan info terbaru tentang Kubernetes? Daftarkan dirimu ke KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "Lihat buletin edisi sebelumnya"
-
-[main_kubeweekly_signup]
-other = "Langganan"
-
-[main_page_history]
-other ="Riwayat laman"
-
-[main_page_last_modified_on]
-other = "Halaman diubah terakhir kali pada"
-
-[main_read_about]
-other = "Baca tentang"
-
-[main_read_more]
-other = "Baca lebih lanjut"
-
-[note]
-other = "Catatan:"
-
-[objectives_heading]
-other = "Tujuan"
-
-[options_heading]
-other = "Opsi"
-
-[post_create_issue]
-other = "Buat isu"
-
-[prerequisites_heading]
-other = "Sebelum kamu memulai"
-
-[seealso_heading]
-other = "Lihat juga"
-
-[subscribe_button]
-other = "Langganan"
-
-[synopsis_heading]
-other = "Sinopsis"
-
-[thirdparty_message]
-other = """Bagian ini tertaut ke proyek-proyek pihak ketiga yang menyediakan fungsionalitas yang dibutuhkan oleh Kubernetes. Pencipta proyek Kubernetes tidak bertanggung jawab atas proyek-proyek tersebut. Laman ini mengikuti <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">pedoman website CNCF</a> dengan membuat daftar proyek menurut abjad. Untuk menambakan proyek ke dalam daftar ini, bacalah <a href="/docs/contribute/style/content-guide/#third-party-content">panduan</a> sebelum mengirimkan perubahan."""
-
-[ui_search_placeholder]
-other = "Cari"
-
-[version_check_mustbe]
-other = "Kubernetes servermu harus dalam versi "
-
-[version_check_mustbeorlater]
-other = "Kubernetes servermu harus dalam versi yang sama atau lebih baru dari "
-
-[version_check_tocheck]
-other = "Untuk melihat versi, tekan "
-
-[version_menu]
-other = "Versi"
-
-[warning]
-other = "Peringatan:"
-
-[whatsnext_heading]
-other = "Selanjutnya"
diff --git a/i18n/id.toml b/i18n/id.toml
new file mode 120000
index 0000000000..250debab53
--- /dev/null
+++ b/i18n/id.toml
@@ -0,0 +1 @@
+../data/i18n/id/id.toml
\ No newline at end of file
diff --git a/i18n/it.toml b/i18n/it.toml
deleted file mode 100644
index 7c0970dfaa..0000000000
--- a/i18n/it.toml
+++ /dev/null
@@ -1,197 +0,0 @@
-# i18n strings for the Italian site.
-# NOTE: Please keep the entries in alphabetical order when editing
-
-[caution]
-other = "Attenzione: "
-
-[cleanup_heading]
-other = "In pulizia"
-
-[community_events_calendar]
-other = "Calendario Eventi"
-
-[community_forum_name]
-other = "Forum"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_warning]
-other = " documentazione non è più manutenuta. La versione che stai visualizzando in questo momento è archiviata. Per una versione aggiornata, guarda "
-
-[deprecation_file_warning]
-other = "Deprecata"
-
-[docs_label_browse]
-other = "Sfoglia documenti"
-
-[docs_label_contributors]
-other = "Contributors"
-
-[docs_label_i_am]
-other = "Io Sono..."
-
-[docs_label_users]
-other = "Utenti"
-
-[feedback_heading]
-other = "Feedback"
-
-[feedback_no]
-other = "No"
-
-[feedback_question]
-other = "Questa pagina è stata di aiuto?"
-
-[feedback_yes]
-other = "Sì"
-
-[input_placeholder_email_address]
-other = "indirizzo email"
-
-[latest_version]
-other = "ultima versione."
-
-[layouts_blog_pager_prev]
-other = "<< Precedente"
-
-[layouts_blog_pager_next]
-other = "Succesiva >>"
-
-[layouts_case_studies_list_tell]
-other = "Racconta il tuo use case"
-
-[layouts_docs_glossary_aka]
-other = "Anche noto come"
-
-[layouts_docs_glossary_description]
-other = "Questo glossario vuole essere un aiuto per standardizzare la terminologia usata per Kubernetes. Include termini tecnici che sono specifici di Kubernetes, così come termini più generali che sono utili per dare un contesto."
-
-[layouts_docs_glossary_deselect_all]
-other = "Deseleziona tutto"
-
-[layouts_docs_glossary_click_details_after]
-other = "per il significato di questo termine."
-
-[layouts_docs_glossary_click_details_before]
-other = "Fare click sull'icona"
-
-[layouts_docs_glossary_filter]
-other = "Filtra i termini sulla base delle loro etichette"
-
-[layouts_docs_glossary_select_all]
-other = "Seleziona tutto"
-
-[layouts_docs_partials_feedback_improvement]
-other = "suggerire un miglioramento"
-
-[layouts_docs_partials_feedback_issue]
-other = "Apri un issue sul repository GitHub se vuoi "
-
-[layouts_docs_partials_feedback_or]
-other = "o"
-
-[layouts_docs_partials_feedback_problem]
-other = "riportare un problema"
-
-[layouts_docs_partials_feedback_thanks]
-other = "Grazie per il feedback. Se hai una domanda specifica su Kubernetes, chiedi su"
-
-[layouts_docs_search_fetching]
-other = "Caricando i risultati..."
-
-[main_by]
-other = "di"
-
-[main_cncf_project]
-other = """Kubernetes è un progetto <a href="https://cncf.io/">CNCF</a></p>"""
-
-[main_community_explore]
-other = "Explora la community"
-
-[main_contribute]
-other = "Contribuire"
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. Tutti i diritti riservati. The Linux Foundation ha marchi registrati e utilizza marchi commerciali. Per un elenco dei marchi di Linux Foundation, consulta la <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">pagina sull'utilizzo dei marchi</a>"""
-
-[main_documentation_license]
-other = """Gli autori di Kubernetes | Documentazione distribuita sotto <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_edit_this_page]
-other = "Modifica questa pagina"
-
-[main_github_create_an_issue]
-other = "Crea un issue"
-
-[main_github_invite]
-other = "Sei interessato a contribuire a Kubernetes?"
-
-[main_github_view_on]
-other = "Visualizza su GitHub"
-
-[main_kubernetes_features]
-other = "Caratteristiche di Kubernetes"
-
-[main_kubeweekly_baseline]
-other = "Sei interessato a ricevere le ultime notizie su Kubernetes? Registrati alla newsletter KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "Vedi le precedenti mail della newsletter"
-
-[main_kubeweekly_signup]
-other = "Iscriviti"
-
-[main_page_history]
-other = "Storico della Pagina"
-
-[main_page_last_modified_on]
-other = "Ultima modifica alla pagina"
-
-[main_read_about]
-other = "Leggi"
-
-[main_read_more]
-other = "Leggi di più"
-
-[note]
-other = "Nota:"
-
-[objectives_heading]
-other = "Obbiettivi"
-
-[prerequisites_heading]
-other = "Prima di cominciare"
-
-[subscribe_button]
-other = "Iscriviti"
-
-[ui_search_placeholder]
-other = "Cerca"
-
-[version_check_mustbe]
-other = "La tua installazione Kubernetes deve avere la versione "
-
-[version_check_mustbeorlater]
-other = "La tua installazione Kubernetes deve avere almeno la versione "
-
-[version_check_tocheck]
-other = "Per verificare la versione, esegui "
-
-[warning]
-other = "Attenzione:"
-
-[whatsnext_heading]
-other = "Voci correlate"
diff --git a/i18n/it.toml b/i18n/it.toml
new file mode 120000
index 0000000000..bf4e0e004c
--- /dev/null
+++ b/i18n/it.toml
@@ -0,0 +1 @@
+../data/i18n/it/it.toml
\ No newline at end of file
diff --git a/i18n/ja.toml b/i18n/ja.toml
deleted file mode 100644
index a7a103f435..0000000000
--- a/i18n/ja.toml
+++ /dev/null
@@ -1,203 +0,0 @@
-# i18n strings for the English (main) site.
-# NOTE: Please keep the entries in alphabetical order when editing
-
-[caution]
-other = "注意:"
-
-[cleanup_heading]
-other = "クリーンアップ"
-
-[community_events_calendar]
-other = "イベントカレンダー"
-
-[community_forum_name]
-other = "フォーラム"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_file_warning]
-other = "廃止予定"
-
-[deprecation_title]
-other = "現在表示しているのは、次のバージョン向けのドキュメントです。Kubernetesバージョン:"
-
-[deprecation_warning]
-other = " のドキュメントは積極的にメンテナンスされていません。現在表示されているバージョンはスナップショットです。最新のドキュメントはこちらです: "
-
-[docs_label_browse]
-other = "ドキュメントの参照"
-
-[docs_label_contributors]
-other = "コントリビューター"
-
-[docs_label_i_am]
-other = "私は..."
-
-[docs_label_users]
-other = "ユーザー"
-
-[feedback_heading]
-other = "フィードバック"
-
-[feedback_no]
-other = "いいえ"
-
-[feedback_question]
-other = "このページは役に立ちましたか？"
-
-[feedback_yes]
-other = "はい"
-
-[input_placeholder_email_address]
-other = "メールアドレス"
-
-[latest_version]
-other = "最新バージョン"
-
-[layouts_blog_pager_prev]
-other = "<< 前"
-
-[layouts_blog_pager_next]
-other = "次 >>"
-
-[layouts_case_studies_list_tell]
-other = "あなたの話を聞かせてください"
-
-[layouts_docs_glossary_aka]
-other = "またの名を"
-
-[layouts_docs_glossary_description]
-other = "この用語集は、Kubernetesの用語の包括的で標準化されたリストを対象としています。これには、Kubernetesに固有で有用なコンテキストを提供しつつも、より一般的な技術用語が含まれています。"
-
-[layouts_docs_glossary_deselect_all]
-other = "すべての選択を解除"
-
-[layouts_docs_glossary_click_details_after]
-other = "特定の用語の詳細な説明を取得するには、以下のインジケータを使用します。"
-
-[layouts_docs_glossary_click_details_before]
-other = "Click on the" # TODO: Translate me
-
-[layouts_docs_glossary_filter]
-other = "タグに従って用語をフィルタ"
-
-[layouts_docs_glossary_select_all]
-other = "すべてを選択"
-
-[layouts_docs_partials_feedback_improvement]
-other = "改善を提案"
-
-[layouts_docs_partials_feedback_issue]
-other = "Open an issue in the GitHub repo if you want to " # TODO: Translate me
-
-[layouts_docs_partials_feedback_or]
-other = "or" # TODO: Translate me
-
-[layouts_docs_partials_feedback_problem]
-other = "問題を報告する"
-
-[layouts_docs_partials_feedback_thanks]
-other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on" # TODO: Translate me
-
-[layouts_docs_search_fetching]
-other = "結果を取得しています..."
-
-[main_by]
-other = "by"
-
-[main_cncf_project]
-other = """私達は<a href="https://cncf.io/">CNCF</a> graduated プロジェクトです</p>"""
-
-[main_community_explore]
-other = "コミュニティを探す"
-
-[main_contribute]
-other = "コントリビュート"
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-[main_documentation_license]
-other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_edit_this_page]
-other = "ページ編集"
-
-[main_github_invite]
-other = "Kubernetesのコードを編集することに興味がありますか？"
-
-[main_github_create_an_issue]
-other = "Issue作成"
-
-[main_github_view_on]
-other = "GitHubで参照する"
-
-[main_kubernetes_features]
-other = "Kubernetesの機能"
-
-[main_kubeweekly_baseline]
-other = "最新のKubernetesのニュースを受け取りたいですか？ KubeWeeklyにサインアップしてください。"
-
-[main_kubernetes_past_link]
-other = "過去のニュースレターを見る"
-
-[main_kubeweekly_signup]
-other = "登録"
-
-[main_page_history]
-other ="ページ履歴"
-
-[main_page_last_modified_on]
-other = "ページの最終更新"
-
-[main_read_about]
-other = "Read about" #other = "について参照する" TODO: Translate me
-
-[main_read_more]
-other = "続きを読む"
-
-[note]
-other = "備考:"
-
-[objectives_heading]
-other = "目標"
-
-[prerequisites_heading]
-other = "始める前に"
-
-[subscribe_button]
-other = "購読する"
-
-[ui_search_placeholder]
-other = "検索"
-
-[version_check_mustbe]
-other = "作業するKubernetesサーバーは次のバージョンである必要があります: "
-
-[version_check_mustbeorlater]
-other = "作業するKubernetesサーバーは次のバージョン以降のものである必要があります: "
-
-[version_check_tocheck]
-other = "バージョンを確認するには次のコマンドを実行してください: "
-
-[version_menu]
-other = "バージョン"
-
-[warning]
-other = "警告:"
-
-[whatsnext_heading]
-other = "次の項目"
diff --git a/i18n/ja.toml b/i18n/ja.toml
new file mode 120000
index 0000000000..6b08e1f22f
--- /dev/null
+++ b/i18n/ja.toml
@@ -0,0 +1 @@
+../data/i18n/ja/ja.toml
\ No newline at end of file
diff --git a/i18n/ko.toml b/i18n/ko.toml
deleted file mode 100644
index f79f689b88..0000000000
--- a/i18n/ko.toml
+++ /dev/null
@@ -1,232 +0,0 @@
-# i18n strings for the Korean translation.
-# NOTE: Please keep the entries in alphabetical order when editing
-[announcement_title]
-other = "Black lives matter."
-
-[announcement_message]
-other = "우리는 흑인 공동체를 지지합니다.<br/>인종차별은 용납될 수 없습니다.<br/> 인종차별은 [쿠버네티스 프로젝트의 핵심 가치](https://git.k8s.io/community/values.md)에 상충되며 우리 공동체는 이를 용인하지 않습니다."
-
-[caution]
-other = "주의:"
-
-[cleanup_heading]
-other = "정리하기"
-
-[community_events_calendar]
-other = "이벤트 캘린더"
-
-[community_forum_name]
-other = "Forum"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_title]
-other = "해당 문서의 쿠버네티스 버전:"
-
-[deprecation_warning]
-other = " 문서는 더 이상 적극적으로 관리되지 않음. 현재 보고있는 문서는 정적 스냅샷임. 최신 문서를 위해서는, 다음을 참고. "
-
-[deprecation_file_warning]
-other = "사용 중단됨(deprecated)"
-
-[docs_label_browse]
-other = "문서 둘러보기"
-
-[docs_label_contributors]
-other = "컨트리뷰터"
-
-[docs_label_i_am]
-other = "나는..."
-
-[docs_label_users]
-other = "사용자"
-
-[docs_version_current]
-other = "(현재 문서)"
-
-[docs_version_latest_heading]
-other = "최신 버전"
-
-[docs_version_other_heading]
-other = "이전 버전"
-
-[error_404_were_you_looking_for]
-other = "무엇과 관련된 정보를 찾으시나요?"
-
-[examples_heading]
-other = "예시"
-
-[feedback_heading]
-other = "피드백"
-
-[feedback_question]
-other = "이 페이지가 도움이 되었나요?"
-
-[feedback_yes]
-other = "네"
-
-[feedback_no]
-other = "아니요"
-
-[input_placeholder_email_address]
-other = "전자 우편 주소"
-
-[latest_version]
-other = "최신 버전."
-
-[layouts_blog_pager_prev]
-other = "<< 이전"
-
-[layouts_blog_pager_next]
-other = "다음 >>"
-
-[layouts_case_studies_list_tell]
-other = "당신의 이야기를 들려주세요."
-
-[layouts_docs_glossary_aka]
-other = "별칭"
-
-[layouts_docs_glossary_description]
-other = "이 용어집은 쿠버네티스 용어의 종합적이고 표준화된 리스트를 제공한다. 용어집은 K8s 고유의 기술 용어 뿐만 아니라, 맥락을 이해하는데 유용한 더 일반적인 용어도 포함한다. "
-
-[layouts_docs_glossary_deselect_all]
-other = "모두 선택 해제"
-
-[layouts_docs_glossary_click_details_after]
-other = "표시를 클릭하면 각 용어에 대한 더 자세한 설명을 볼 수 있다."
-
-[layouts_docs_glossary_click_details_before]
-other = "다음"
-
-[layouts_docs_glossary_filter]
-other = "태그에 따라 용어 필터링"
-
-[layouts_docs_glossary_select_all]
-other = "모두 선택"
-
-[layouts_docs_partials_feedback_improvement]
-other = "개선 제안이 가능합니다."
-
-[layouts_docs_partials_feedback_issue]
-other = "원한다면 GitHub 리포지터리에 이슈를 열어서"
-
-[layouts_docs_partials_feedback_or]
-other = "또는"
-
-[layouts_docs_partials_feedback_problem]
-other = "문제 리포트"
-
-[layouts_docs_partials_feedback_thanks]
-other = "피드백 감사합니다. 쿠버네티스 사용 방법에 대해서 구체적이고 답변 가능한 질문이 있다면, 다음 링크에서 질문하십시오."
-
-[layouts_docs_search_fetching]
-other = "결과를 가져오는 중.."
-
-[main_by]
-other = ", 다음 변경에 의해서:"
-
-[main_cncf_project]
-other = """쿠버네티스는 <a href="https://cncf.io/">CNCF</a> graduated 프로젝트입니다.</p>"""
-
-[main_community_explore]
-other = "커뮤니티 둘러보기"
-
-[main_contribute]
-other = "기여하기"
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-[main_documentation_license]
-other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_github_invite]
-other = "쿠버네티스 핵심 코드 베이스를 살펴보는데 관심이 있으십니까?"
-
-[main_github_view_on]
-other = "GitHub에서 보기"
-
-[main_kubernetes_features]
-other = "쿠버네티스 기능"
-
-[main_kubeweekly_baseline]
-other = "최신 쿠버네티스 뉴스 수신에 관심이 있으십니까? KubeWeekly를 신청하세요."
-
-[main_kubernetes_past_link]
-other = "과거 뉴스레터 보기"
-
-[main_kubeweekly_signup]
-other = "구독하기"
-
-[main_page_history]
-other ="페이지 변경 이력"
-
-[main_page_last_modified_on]
-other = "최종 수정일시"
-
-[main_read_about]
-other = "읽어 보기"
-
-[main_read_more]
-other = "더 읽기"
-
-[note]
-other = "참고:"
-
-[objectives_heading]
-other = "목적"
-
-[options_heading]
-other = "옵션"
-
-[post_create_issue]
-other = "이슈 생성"
-
-[prerequisites_heading]
-other = "시작하기 전에"
-
-[seealso_heading]
-other = "더 보기"
-
-[subscribe_button]
-other = "구독"
-
-[synopsis_heading]
-other = "시놉시스"
-
-[thirdparty_message]
-other = """이 섹션은 쿠버네티스에 필요한 기능을 제공하는 써드파티 프로젝트와 관련이 있다. 쿠버네티스 프로젝트 작성자는 써드파티 프로젝트에 책임이 없다. 이 페이지는 <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF 웹사이트 가이드라인</a>에 따라 프로젝트를 알파벳 순으로 나열한다. 이 목록에 프로젝트를 추가하려면 변경사항을 제출하기 전에 <a href="/contribute/style/content-guide/#third-party-content">콘텐츠 가이드</a>를 읽어본다."""
-
-[ui_search_placeholder]
-other = "검색하기"
-
-[version_check_mustbe]
-other = "쿠버네티스 서버의 버전은 다음과 같아야 함. 버전: "
-
-[version_check_mustbeorlater]
-other = "쿠버네티스 서버의 버전은 다음과 같거나 더 높아야 함. 버전: "
-
-[version_check_tocheck]
-other = "버전 확인을 위해서, 다음 커맨드를 실행 "
-
-[version_menu]
-other = "버전"
-
-[warning]
-other = "경고:"
-
-[whatsnext_heading]
-other = "다음 내용"
diff --git a/i18n/ko.toml b/i18n/ko.toml
new file mode 120000
index 0000000000..093839dd5d
--- /dev/null
+++ b/i18n/ko.toml
@@ -0,0 +1 @@
+../data/i18n/ko/ko.toml
\ No newline at end of file
diff --git a/i18n/nl.toml b/i18n/nl.toml
deleted file mode 100644
index a0aa6faee4..0000000000
--- a/i18n/nl.toml
+++ /dev/null
@@ -1,197 +0,0 @@
-# i18n strings for the Dutch (main) site.
-
-[deprecation_warning]
-other = " documentatie wordt niet langer actief onderhouden. De versie die u momenteel bekijkt is een statische momentopname. Zie voor bijgewerkte documentatie "
-
-[deprecation_file_warning]
-other = "Verouderd"
-
-[objectives_heading]
-other = "Doelen"
-
-[cleanup_heading]
-other = "Opschonen"
-
-[prerequisites_heading]
-other = "Voordat je begint"
-
-[whatsnext_heading]
-other = "Wat nu volgt"
-
-[feedback_heading]
-other = "Feedback"
-
-[feedback_question]
-other = "Was deze pagina nuttig?"
-
-[feedback_yes]
-other = "Ja"
-
-[feedback_no]
-other = "Nee"
-
-[latest_version]
-other = "laatste versie."
-
-[version_check_mustbe]
-other = "Je Kubernetes server moet op de volgende versie zitten "
-
-[version_check_mustbeorlater]
-other = "Je Kubernetes server moet op de volgende of latere versie zitten "
-
-[version_check_tocheck]
-other = "Voer het volgende in om de versie te controleren "
-
-[caution]
-other = "Voorzichtig:"
-
-[note]
-other = "Opmerking:"
-
-[warning]
-other = "Opletten:"
-
-[main_read_about]
-other = "Lees over"
-
-[main_read_more]
-other = "Lees meer"
-
-[main_github_invite]
-other = "Geïnteresseerd om aan de core Kubernetes code base te werken?"
-
-[main_github_view_on]
-other = "Bekijk op GitHub"
-
-[main_github_create_an_issue]
-other = "Maak een Issue"
-
-[main_community_explore]
-other = "Verken de community"
-
-[main_kubernetes_features]
-other = "Kubernetes functies"
-
-[main_cncf_project]
-other = """We zijn een <a href="https://cncf.io/">CNCF</a> project</p>"""
-
-[main_kubeweekly_baseline]
-other = "Wil je het laatste Kubernates nieuws ontvangen? Abonneer je op KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "Eerdere nieuwsbrieven bekijken"
-
-[main_kubeweekly_signup]
-other = "Abonneren"
-
-[main_contribute]
-other = "Bijdragen"
-
-[main_edit_this_page]
-other = "Bewerk deze pagina"
-
-[main_page_history]
-other ="Pagina geschiedenis"
-
-[main_page_last_modified_on]
-other = "Pagina laatst gewijzigd op"
-
-[main_by]
-other = "door"
-
-[main_documentation_license]
-other = """De Kubernetes auteurs | Documentatie verspreid onder <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. Alle rechten voorbehouden. De Linux Foundation heeft handelsmerken geregistreerd en handelsmerken. gebruikt Voor een lijst met handelsmerken van The Linux Foundation raadpleegt u onze<a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Handelsmerkgebruikspagina</a>"""
-
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "Bladeren door documenten"
-
-[docs_label_contributors]
-other = "Bijdragers"
-
-[docs_label_users]
-other = "Gebruikers"
-
-[docs_label_i_am]
-other = "IK BEN..."
-
-# layouts > blog > pager
-
-[layouts_blog_pager_prev]
-other = "<< Vorige"
-
-[layouts_blog_pager_next]
-other = "Volgende >>"
-
-# layouts > blog > list
-
-[layouts_case_studies_list_tell]
-other = "Vertel jouw verhaal"
-
-# layouts > docs > glossary
-
-[layouts_docs_glossary_description]
-other = "Deze verklarende woordenlijst is bedoeld als een uitgebreide, gestandaardiseerde lijst van Kubernetes-terminologie. Het bevat technische termen die specifiek zijn voor K8s, evenals meer algemene termen die een bruikbare context bieden."
-
-[layouts_docs_glossary_filter]
-other = "Filter termen op basis van hun tags"
-
-[layouts_docs_glossary_select_all]
-other = "Alles selecteren"
-
-[layouts_docs_glossary_deselect_all]
-other = "Alles deselecteren"
-
-[layouts_docs_glossary_aka]
-other = "Ook bekend als"
-
-[layouts_docs_glossary_click_details_before]
-other = "Klik op de"
-
-[layouts_docs_glossary_click_details_after]
-other = "onderstaande indicatoren om een ​​langere verklaring voor een bepaalde term te krijgen."
-
-# layouts > docs > search
-
-[layouts_docs_search_fetching]
-other = "Resultaten ophalen.."
-
-# layouts > partial > feedback
-
-[layouts_docs_partials_feedback_thanks]
-other = "Bedankt voor de feedback. Als je een specifieke vraag hebt, die beantwoord moet worden, over het gebruik van Kubernetes, vraag het dan op"
-
-[layouts_docs_partials_feedback_issue]
-other = "Open een probleem in de GitHub-repo "
-
-[layouts_docs_partials_feedback_problem]
-other = "meld een probleem"
-
-[layouts_docs_partials_feedback_or]
-other = "of"
-
-[layouts_docs_partials_feedback_improvement]
-other = "doe een suggestie voor een verbetering"
-
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Forum"
-[community_events_calendar]
-other = "Evenementenkalender"
-[community_youtube_name]
-other = "YouTube"
-
-# UI elements
-[ui_search_placeholder]
-other = "Zoeken"
diff --git a/i18n/nl.toml b/i18n/nl.toml
new file mode 120000
index 0000000000..181ed9aedb
--- /dev/null
+++ b/i18n/nl.toml
@@ -0,0 +1 @@
+../data/i18n/nl/nl.toml
\ No newline at end of file
diff --git a/i18n/no.toml b/i18n/no.toml
deleted file mode 100644
index ff786d7d35..0000000000
--- a/i18n/no.toml
+++ /dev/null
@@ -1,68 +0,0 @@
-# i18n strings for the Norwegian translation.
-
-[main_read_about]
-other = "Les om"
-
-[main_read_more]
-other = "Les mer"
-
-[main_github_invite]
-other = "Interessert kode i Kubernetes?"
-
-[main_github_view_on]
-other = "Åpne på GitHub"
-
-[main_github_create_an_issue]
-other = "Opprett en issue"
-
-[main_community_explore]
-other = "Utforsk folkene bak Kubernetes"
-
-[main_kubernetes_features]
-other = "Egenskaper i Kubernetes"
-
-[main_cncf_project]
-other = """Vi er et <a href="https://cncf.io/">CNCF</a>-prosjekt</p>"""
-
-[main_contribute]
-other = "Bidra"
-
-[main_edit_this_page]
-other = "Endre denne siden"
-
-[main_page_history]
-other ="Side-historikk"
-
-[main_page_last_modified_on]
-other = "Side sist endret"
-
-[main_by]
-other = "av"
-
-[main_documentation_license]
-other = """Kubernetes-forfatterene | Dokumentasjonen er utgitt med <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0-lisens</a>"""
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. Alle retter er reservert. The Linux Foundation har registrerte varemerker. For en oversikt, se <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Bruk av varemerker</a>"""
-
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "All dokumentasjon"
-
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Forum"
-[community_events_calendar]
-other = "Kalender"
-
-# UI elements
-[ui_search_placeholder]
-other = "Søk"
\ No newline at end of file
diff --git a/i18n/no.toml b/i18n/no.toml
new file mode 120000
index 0000000000..d27b699464
--- /dev/null
+++ b/i18n/no.toml
@@ -0,0 +1 @@
+../data/i18n/no/no.toml
\ No newline at end of file
diff --git a/i18n/pl.toml b/i18n/pl.toml
deleted file mode 100644
index 9621301a49..0000000000
--- a/i18n/pl.toml
+++ /dev/null
@@ -1,197 +0,0 @@
-# i18n strings for the Polish site.
-# NOTE: Please keep the entries in alphabetical order when editing
-
-[caution]
-other = "Ostrzeżenie:"
-
-[cleanup_heading]
-other = "Sprzątamy po sobie"
-
-[community_events_calendar]
-other = "Kalendarz wydarzeń"
-
-[community_forum_name]
-other = "Forum"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_warning]
-other = " dokumentacja nie jest już aktualizowana. Wyświetlona jest wersja archiwalna. Po aktualną dokumentację zajrzyj na"
-
-[deprecation_file_warning]
-other = "Przestarzały"
-
-[docs_label_browse]
-other = "Przeglądaj dokumentację"
-
-[docs_label_contributors]
-other = "Współautorzy"
-
-[docs_label_i_am]
-other = "Jestem..."
-
-[docs_label_users]
-other = "Użytkownicy"
-
-[feedback_heading]
-other = "Twoja opinia"
-
-[feedback_no]
-other = "Nie"
-
-[feedback_question]
-other = "Czy ta strona była przydatna?"
-
-[feedback_yes]
-other = "Tak"
-
-[input_placeholder_email_address]
-other = "adres e-mail"
-
-[latest_version]
-other = "to najnowsza wersja."
-
-[layouts_blog_pager_prev]
-other = "<< Poprzedni"
-
-[layouts_blog_pager_next]
-other = "Następny >>"
-
-[layouts_case_studies_list_tell]
-other = "Opowiedz swoją historię"
-
-[layouts_docs_glossary_aka]
-other = "Znany też jako"
-
-[layouts_docs_glossary_description]
-other = "Celem tego słownika jest przedstawienie wszechstronnej, ujednoliconej listy terminologii związanej z projektem Kubernetes. Słownik zawiera terminy specyficzne dla Kubernetesa, a także pojęcia bardziej ogólne, umożliwiające lepsze zrozumienie kontekstu."
-
-[layouts_docs_glossary_deselect_all]
-other = "Odznacz wszystko"
-
-[layouts_docs_glossary_click_details_after]
-other = "po dokładniejsze wytłumaczenie."
-
-[layouts_docs_glossary_click_details_before]
-other = "Kliknij w"
-
-[layouts_docs_glossary_filter]
-other = "Znajdź pojęcia według etykiet"
-
-[layouts_docs_glossary_select_all]
-other = "Zaznacz wszystko"
-
-[layouts_docs_partials_feedback_improvement]
-other = "zaproponować poprawkę"
-
-[layouts_docs_partials_feedback_issue]
-other = "Otwórz zgłoszenie w repozytorium GitHub, jeśli chcesz "
-
-[layouts_docs_partials_feedback_or]
-other = "lub"
-
-[layouts_docs_partials_feedback_problem]
-other = "zgłosić problem"
-
-[layouts_docs_partials_feedback_thanks]
-other = "Dziękujemy za informację zwrotną. Jeśli masz konkretne pytanie dotyczące użycia Kubernetesa, odwiedź"
-
-[layouts_docs_search_fetching]
-other = "Pobieram wyniki.."
-
-[main_by]
-other = "przez"
-
-[main_cncf_project]
-other = """Nasz projekt jest uznany przez <a href="https://cncf.io/">CNCF</a> za dojrzały</p>"""
-
-[main_community_explore]
-other = "Poznaj społeczność"
-
-[main_contribute]
-other = "Wnieś swój wkład"
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-[main_documentation_license]
-other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_edit_this_page]
-other = "Edytuj stronę"
-
-[main_github_create_an_issue]
-other = "Zgłoś problem"
-
-[main_github_invite]
-other = "Chcesz zacząć współtworzyć kod Kubernetesa?"
-
-[main_github_view_on]
-other = "Zajrzyj na GitHub"
-
-[main_kubernetes_features]
-other = "Funkcjonalności Kubernetesa"
-
-[main_kubeweekly_baseline]
-other = "Zapisz się na KubeWeekly, jeśli jesteś zainteresowany najnowszymi wiadomościami o Kubernetesie."
-
-[main_kubernetes_past_link]
-other = "Poprzednie newslettery"
-
-[main_kubeweekly_signup]
-other = "Zapisz się"
-
-[main_page_history]
-other ="Historia strony"
-
-[main_page_last_modified_on]
-other = "Ostatnia modyfikacja strony"
-
-[main_read_about]
-other = "Przeczytaj o"
-
-[main_read_more]
-other = "Przeczytaj więcej"
-
-[note]
-other = "Informacja:"
-
-[objectives_heading]
-other = "Cele"
-
-[prerequisites_heading]
-other = "Nim zaczniesz"
-
-[subscribe_button]
-other = "Subskrybuj"
-
-[ui_search_placeholder]
-other = "Szukaj"
-
-[version_check_mustbe]
-other = "Twój serwer Kubernetes musi być w wersji "
-
-[version_check_mustbeorlater]
-other = "Twój serwer Kubernetes musi być co najmniej w wersji "
-
-[version_check_tocheck]
-other = "Aby sprawdzić wersję, wpisz "
-
-[warning]
-other = "Uwaga:"
-
-[whatsnext_heading]
-other = "Następne:"
diff --git a/i18n/pl.toml b/i18n/pl.toml
new file mode 120000
index 0000000000..e4ecf8192e
--- /dev/null
+++ b/i18n/pl.toml
@@ -0,0 +1 @@
+../data/i18n/pl/pl.toml
\ No newline at end of file
diff --git a/i18n/pt-br.toml b/i18n/pt-br.toml
deleted file mode 100644
index 3f55a665b3..0000000000
--- a/i18n/pt-br.toml
+++ /dev/null
@@ -1,240 +0,0 @@
- # i18n strings for the Portuguese (main) site.
-[caution]
-other = "Cuidado:"
-
-[cleanup_heading]
-other = "Limpando"
-
-[community_events_calendar]
-other = "Calendário de Eventos"
-
-[community_forum_name]
-other = "Fórum"
-
-[community_github_name]
-other = "GitHub"
-
-# Community links
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[deprecation_file_warning]
-other = "Descontinuado"
-
-[deprecation_title]
-other = "Você está vendo a documentação do Kubernetes versão:"
-
-[deprecation_warning]
-other = " a documentação não é mais mantida ativamente. A versão que você está visualizando no momento é uma captura instantânea estática. Para obter documentação atualizada, consulte "
-
-[docs_label_browse]
-other = "Procurar documentos"
-
-[docs_label_contributors]
-other = "Colaboradores"
-
-[docs_label_i_am]
-other = "Eu sou..."
-
-[docs_label_users]
-other = "Usuários"
-
-[docs_version_current]
-other = "(esta documentação)"
-
-[docs_version_latest_heading]
-other = "Versão mais recente"
-
-[docs_version_other_heading]
-other = "Versões mais antigas"
-
-[error_404_were_you_looking_for]
-other = "Talvez você estivesse procurando por:"
-
-[examples_heading]
-other = "Exemplos"
-
-[feedback_heading]
-other = "Comentários"
-
-[feedback_no]
-other = "Não"
-
-[feedback_question]
-other = "Esta página foi útil?"
-
-[feedback_yes]
-other = "Sim"
-
-[input_placeholder_email_address]
-other = "endereço de e-mail"
-
-[latest_version]
-other = "última versão."
-
-[layouts_blog_pager_next]
-other = "Próximo >>"
-
-[layouts_blog_pager_prev]
-other = "<< Anterior"
-
-[layouts_case_studies_list_tell]
-other = "Conte seu caso"
-
-[layouts_docs_glossary_aka]
-other = "Também conhecido como"
-
-[layouts_docs_glossary_click_details_after]
-other = "indicadores abaixo para uma maior explicação sobre um termo em particular."
-
-[layouts_docs_glossary_click_details_before]
-other = "Clique nos"
-
-[layouts_docs_glossary_description]
-other = "Este glossário pretende ser uma lista padronizada e abrangente da terminologia do Kubernetes. Inclui termos técnicos específicos dos K8s, além de termos mais gerais que fornecem um contexto útil."
-
-[layouts_docs_glossary_deselect_all]
-other = "Desmarcar tudo"
-
-[layouts_docs_glossary_filter]
-other = "Filtrar termos de acordo com suas tags"
-
-[layouts_docs_glossary_select_all]
-other = "Selecionar tudo"
-
-[layouts_docs_partials_feedback_improvement]
-other = "sugerir uma melhoria"
-
-[layouts_docs_partials_feedback_issue]
-other = "Abra um bug no repositório do GitHub se você deseja "
-
-[layouts_docs_partials_feedback_or]
-other = "ou"
-
-[layouts_docs_partials_feedback_problem]
-other = "reportar um problema"
-
-[layouts_docs_partials_feedback_thanks]
-other = "Obrigado pelo feedback. Se você tiver uma pergunta específica sobre como utilizar o Kubernetes, faça em"
-
-[layouts_docs_search_fetching]
-other = "Buscando resultados.."
-
-# Main page localization
-
-[main_by]
-other = "por"
-
-[main_cncf_project]
-other = """Nós somos uma <a href="https://cncf.io/">CNCF</a> projeto graduado</p>"""
-
-[main_community_explore]
-other = "Explore a comunidade"
-
-[main_contribute]
-other = "Contribuir"
-
-[main_copyright_notice]
-other = """A Fundação Linux &reg;. Todos os direitos reservados. A Linux Foundation tem marcas registradas e usa marcas registradas. Para uma lista de marcas registradas da The Linux Foundation, por favor, veja nossa <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Página de uso de marca registrada</a>"""
-
-[main_documentation_license]
-other = """Os autores do Kubernetes | Documentação Distribuída sob <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_edit_this_page]
-other = "Edite essa página"
-
-[main_github_create_an_issue]
-other = "Abra um bug"
-
-[main_github_invite]
-other = "Interessado em mergulhar na base de código do Kubernetes?"
-
-[main_github_view_on]
-other = "Veja no Github"
-
-[main_kubernetes_features]
-other = "Recursos do Kubernetes"
-
-[main_kubernetes_past_link]
-other = "Veja boletins passados"
-
-[main_kubeweekly_baseline]
-other = "Interessado em receber as últimas novidades sobre Kubernetes? Inscreva-se no KubeWeekly."
-
-[main_kubeweekly_signup]
-other = "Se inscrever"
-
-[main_page_history]
-other ="História da página"
-
-[main_page_last_modified_on]
-other = "Última modificação da página em"
-
-[main_read_about]
-other = "Ler sobre"
-
-[main_read_more]
-other = "Consulte Mais informação"
-
-# Miscellaneous
-
-[note]
-other = "Nota:"
-
-[objectives_heading]
-other = "Objetivos"
-
-[options_heading]
-other = "Opções"
-
-[post_create_issue]
-other = "Abra um bug"
-
-[prerequisites_heading]
-other = "Antes de você começar"
-
-[subscribe_button]
-other = "Se inscrever"
-
-[thirdparty_message]
-other = """Esta seção tem links para projetos de terceiros que fornecem a funcionalidade exigida pelo Kubernetes. Os autores do projeto Kubernetes não são responsáveis por esses projetos. Esta página obedece as <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">diretrizes de conteúdo do site CNCF</a>, listando os itens em ordem alfabética. Para adicionar um projeto a esta lista, leia o <a href="/docs/contribute/style/content-guide/#third-party-content">guia de conteúdo</a> antes de enviar sua alteração."""
-
-[ui_search_placeholder]
-other = "Procurar"
-
-[version_check_mustbeorlater]
-other = "O seu servidor Kubernetes deve estar em ou depois da versão "
-
-[version_check_mustbe]
-other = "Seu servidor Kubernetes deve ser versão"
-
-[version_check_tocheck]
-other = "Para verificar a versão, digite "
-
-[version_menu]
-other = "Versões"
-
-[warning]
-other = "Aviso:"
-
-[whatsnext_heading]
-other = "Qual é o próximo"
-
-[print_printable_section]
-other = "Essa é a versão completa de impressão dessa seção"
-
-[print_click_to_print]
-other = "Clique aqui para imprimir"
-
-[print_show_regular]
-other = "Retornar à visualização normal"
-
-[print_entire_section]
-other = "Imprimir toda essa seção"
diff --git a/i18n/pt-br.toml b/i18n/pt-br.toml
new file mode 120000
index 0000000000..b76a47d58e
--- /dev/null
+++ b/i18n/pt-br.toml
@@ -0,0 +1 @@
+../data/i18n/pt/pt-br.toml
\ No newline at end of file
diff --git a/i18n/ru.toml b/i18n/ru.toml
deleted file mode 100644
index 37447c0cad..0000000000
--- a/i18n/ru.toml
+++ /dev/null
@@ -1,201 +0,0 @@
-# i18n strings for the Russian (main) site.
-
-[deprecation_warning]
-other = " документация больше не поддерживается. Версия, которую вы сейчас просматриваете, является статической. Актуальную документацию вы можете найти "
-
-[deprecation_file_warning]
-other = "Устаревшая"
-
-[objectives_heading]
-other = "Цели"
-
-[cleanup_heading]
-other = "Очистка"
-
-[prerequisites_heading]
-other = "Подготовка к работе"
-
-[subscribe_button]
-other = "Подписаться"
-
-[whatsnext_heading]
-other = "Что дальше"
-
-[feedback_heading]
-other = "Обратная связь"
-
-[feedback_question]
-other = "Была ли эта страница полезной?"
-
-[feedback_yes]
-other = "Да"
-
-[feedback_no]
-other = "Нет"
-
-[latest_version]
-other = "последняя версия."
-
-[version_check_mustbe]
-other = "Ваш сервер Kubernetes должен быть версии "
-
-[version_check_mustbeorlater]
-other = "Ваш сервер Kubernetes должен быть версии или позже, чем версия "
-
-[version_check_tocheck]
-other = "Чтобы проверить версию, введите "
-
-[caution]
-other = "Внимание:"
-
-[note]
-other = "Заметка:"
-
-[warning]
-other = "Предупреждение:"
-
-[main_read_about]
-other = "Прочитать о"
-
-[main_read_more]
-other = "Прочитать больше"
-
-[main_github_invite]
-other = "Хотите взломать ядро кодовой базы Kubernetes?"
-
-[main_github_view_on]
-other = "Посмотреть на GitHub"
-
-[main_github_create_an_issue]
-other = "Сообщить о проблеме"
-
-[main_community_explore]
-other = "Познакомиться с сообществом"
-
-[main_kubernetes_features]
-other = "Возможности Kubernetes"
-
-[main_cncf_project]
-other = """Мы являемся проектом <a href="https://cncf.io/">CNCF</a></p>"""
-
-[main_kubeweekly_baseline]
-other = "Интересуетесь последними новостями Kubernetes? Зарегистрируйтесь в KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "Посмотреть последние новости"
-
-[main_kubeweekly_signup]
-other = "Подписаться"
-
-[main_contribute]
-other = "Помочь проекту"
-
-[main_edit_this_page]
-other = "Редактировать эту страницу"
-
-[main_page_history]
-other ="История страницы"
-
-[main_page_last_modified_on]
-other = "Последний раз страница редактировалась"
-
-[main_by]
-other = "by"
-
-[main_documentation_license]
-other = """Авторы Kubernetes | Документация распространяется под лицензией <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. Все права защищены. The Linux Foundation является зарегистрированной торговой маркой. Список торговых марок The Linux Foundation приведен на странице <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">использования торговых марок</a>"""
-
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "Просмотр документации"
-
-[docs_label_contributors]
-other = "Участники сообщества"
-
-[docs_label_users]
-other = "Пользователи"
-
-[docs_label_i_am]
-other = "Я ..."
-
-# layouts > blog > pager
-
-[layouts_blog_pager_prev]
-other = "<< Назад"
-
-[layouts_blog_pager_next]
-other = "Вперёд >>"
-
-# layouts > blog > list
-
-[layouts_case_studies_list_tell]
-other = "Расскажите свою историю"
-
-# layouts > docs > glossary
-
-[layouts_docs_glossary_description]
-other = "Данный глоссарий должен стать исчерпывающим стандартизированным списком терминологии в Kubernetes. Он включает технические термины, специфичные для K8s, а также более общие термины, которые полезно знать."
-
-[layouts_docs_glossary_filter]
-other = "Фильтрация терминов по тегам"
-
-[layouts_docs_glossary_select_all]
-other = "Выделить всё"
-
-[layouts_docs_glossary_deselect_all]
-other = "Отменить выбор всех тегов"
-
-[layouts_docs_glossary_aka]
-other = "Также известный как"
-
-[layouts_docs_glossary_click_details_before]
-other = "Нажмите на значок"
-
-[layouts_docs_glossary_click_details_after]
-other = "для получения более подробное объяснения по интересующему термину."
-
-# layouts > docs > search
-
-[layouts_docs_search_fetching]
-other = "Получение результатов.."
-
-# layouts > partial > feedback
-
-[layouts_docs_partials_feedback_thanks]
-other = "Спасибо за отзыв! Если у вас есть конкретный вопрос об использовании Kubernetes, спрашивайте"
-
-[layouts_docs_partials_feedback_issue]
-other = "Сообщите о проблеме в репозитории GitHub, если вы хотите "
-
-[layouts_docs_partials_feedback_problem]
-other = "сообщить о проблеме"
-
-[layouts_docs_partials_feedback_or]
-other = "или"
-
-[layouts_docs_partials_feedback_improvement]
-other = "предложить улучшение"
-
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Форум"
-[community_events_calendar]
-other = "Календарь событий"
-
-# UI elements
-[ui_search_placeholder]
-other = "Поиск"
-
-[input_placeholder_email_address]
-other = "адрес электронной почты"
\ No newline at end of file
diff --git a/i18n/ru.toml b/i18n/ru.toml
new file mode 120000
index 0000000000..4e9327662b
--- /dev/null
+++ b/i18n/ru.toml
@@ -0,0 +1 @@
+../data/i18n/ru/ru.toml
\ No newline at end of file
diff --git a/i18n/uk.toml b/i18n/uk.toml
deleted file mode 100644
index ec60865783..0000000000
--- a/i18n/uk.toml
+++ /dev/null
@@ -1,255 +0,0 @@
-# i18n strings for the Ukrainian (main) site.
-
-[caution]
-# other = "Caution:"
-other = "Увага:"
-
-[cleanup_heading]
-# other = "Cleaning up"
-other = "Очистка"
-
-[community_events_calendar]
-# other = "Events Calendar"
-other = "Календар подій"
-
-[community_forum_name]
-# other = "Forum"
-other = "Форум"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_warning]
-# other = " documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date documentation, see the "
-other = " документація більше не підтримується. Версія, яку ви зараз переглядаєте, є статичною. Для перегляду актуальної документації дивіться "
-
-[deprecation_file_warning]
-# other = "Deprecated"
-other = "Застаріла версія"
-
-[docs_label_browse]
-# other = "Browse Docs"
-other = "Переглянути документацію"
-
-[docs_label_contributors]
-# other = "Contributors"
-other = "Контриб'ютори"
-
-[docs_label_i_am]
-# other = "I AM..."
-other = "Я..."
-
-[docs_label_users]
-# other = "Users"
-other = "Користувачі"
-
-[feedback_heading]
-# other = "Feedback"
-other = "Ваша думка"
-
-[feedback_no]
-# other = "No"
-other = "Ні"
-
-[feedback_question]
-# other = "Was this page helpful?"
-other = "Чи була ця сторінка корисною?"
-
-[feedback_yes]
-# other = "Yes"
-other = "Так"
-
-[input_placeholder_email_address]
-# other = "email address"
-other = "електронна адреса"
-
-[latest_version]
-# other = "latest version."
-other = "остання версія."
-
-[layouts_blog_pager_prev]
-# other = "<< Prev"
-other = "<< Назад"
-
-[layouts_blog_pager_next]
-# other = "Next >>"
-other = "Далі >>"
-
-[layouts_case_studies_list_tell]
-# other = "Tell your story"
-other = "Розкажіть свою історію"
-
-[layouts_docs_glossary_aka]
-# other = "Also known as"
-other = "Також відомий як"
-
-[layouts_docs_glossary_description]
-# other = "This glossary is intended to be a comprehensive, standardized list of Kubernetes terminology. It includes technical terms that are specific to Kubernetes, as well as more general terms that provide useful context."
-other = "Даний словник створений як повний стандартизований список термінології Kubernetes. Він включає в себе технічні терміни, специфічні для Kubernetes, а також більш загальні терміни, необхідні для кращого розуміння контексту."
-
-[layouts_docs_glossary_deselect_all]
-# other = "Deselect all"
-other = "Очистити вибір"
-
-[layouts_docs_glossary_click_details_after]
-# other = "indicators below to get a longer explanation for any particular term."
-other = "для отримання розширеного пояснення конкретного терміна."
-
-[layouts_docs_glossary_click_details_before]
-# other = "Click on the"
-other = "Натисність на"
-
-[layouts_docs_glossary_filter]
-# other = "Filter terms according to their tags"
-other = "Відфільтрувати терміни за тегами"
-
-[layouts_docs_glossary_select_all]
-# other = "Select all"
-other = "Вибрати все"
-
-[layouts_docs_partials_feedback_improvement]
-# other = "suggest an improvement"
-other = "запропонувати покращення"
-
-[layouts_docs_partials_feedback_issue]
-# other = "Open an issue in the GitHub repo if you want to "
-other = "Створіть issue в GitHub репозиторії, якщо ви хочете "
-
-[layouts_docs_partials_feedback_or]
-# other = "or"
-other = "або"
-
-[layouts_docs_partials_feedback_problem]
-# other = "report a problem"
-other = "повідомити про проблему"
-
-[layouts_docs_partials_feedback_thanks]
-# other = "Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on"
-other = "Дякуємо за ваш відгук. Якщо ви маєте конкретне запитання щодо використання Kubernetes, ви можете поставити його"
-
-[layouts_docs_search_fetching]
-# other = "Fetching results..."
-other = "Отримання результатів..."
-
-[main_by]
-other = "by"
-
-[main_cncf_project]
-# other = """We are a <a href="https://cncf.io/">CNCF</a> graduated project</p>"""
-other = """Ми є проектом <a href="https://cncf.io/">CNCF</a></p>"""
-
-[main_community_explore]
-# other = "Explore the community"
-other = "Познайомитись із спільнотою"
-
-[main_contribute]
-# other = "Contribute"
-other = "Допомогти проекту"
-
-[main_copyright_notice]
-# other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-other = """The Linux Foundation &reg;. Всі права застережено. The Linux Foundation є зареєстрованою торговою маркою. Перелік торгових марок The Linux Foundation ви знайдете на нашій сторінці <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Використання торгових марок</a>"""
-
-[main_documentation_license]
-# other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-other = """Автори Kubernetes | Документація розповсюджується під ліцензією <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_edit_this_page]
-# other = "Edit This Page"
-other = "Редагувати цю сторінку"
-
-[main_github_create_an_issue]
-# other = "Create an Issue"
-other = "Створити issue"
-
-[main_github_invite]
-# other = "Interested in hacking on the core Kubernetes code base?"
-other = "Хочете зламати основну кодову базу Kubernetes?"
-
-[main_github_view_on]
-# other = "View On GitHub"
-other = "Переглянути у GitHub"
-
-[main_kubernetes_features]
-# other = "Kubernetes Features"
-other = "Функціональні можливості Kubernetes"
-
-[main_kubeweekly_baseline]
-# other = "Interested in receiving the latest Kubernetes news? Sign up for KubeWeekly."
-other = "Хочете отримувати останні новини Kubernetes? Підпишіться на KubeWeekly."
-
-[main_kubernetes_past_link]
-# other = "View past newsletters"
-other = "Переглянути попередні інформаційні розсилки"
-
-[main_kubeweekly_signup]
-# other = "Subscribe"
-other = "Підписатися"
-
-[main_page_history]
-# other ="Page History"
-other ="Історія сторінки"
-
-[main_page_last_modified_on]
-# other = "Page last modified on"
-other = "Сторінка востаннє редагувалася"
-
-[main_read_about]
-# other = "Read about"
-other = "Прочитати про"
-
-[main_read_more]
-# other = "Read more"
-other = "Прочитати більше"
-
-[note]
-# other = "Note:"
-other = "Примітка:"
-
-[objectives_heading]
-# other = "Objectives"
-other = "Цілі"
-
-[prerequisites_heading]
-# other = "Before you begin"
-other = "Перш ніж ви розпочнете"
-
-[subscribe_button]
-# other = "Subscribe"
-other = "Підписатися"
-
-[ui_search_placeholder]
-# other = "Search"
-other = "Пошук"
-
-[version_check_mustbe]
-# other = "Your Kubernetes server must be version "
-other = "Версія вашого Kubernetes сервера має бути "
-
-[version_check_mustbeorlater]
-# other = "Your Kubernetes server must be at or later than version "
-other = "Версія вашого Kubernetes сервера має дорівнювати або бути молодшою ніж "
-
-[version_check_tocheck]
-# other = "To check the version, enter "
-other = "Для перевірки версії введіть "
-
-[warning]
-# other = "Warning:"
-other = "Попередження:"
-
-[whatsnext_heading]
-# other = "What's next"
-other = "Що далі"
diff --git a/i18n/uk.toml b/i18n/uk.toml
new file mode 120000
index 0000000000..7066896b8c
--- /dev/null
+++ b/i18n/uk.toml
@@ -0,0 +1 @@
+../data/i18n/uk/uk.toml
\ No newline at end of file
diff --git a/i18n/vi.toml b/i18n/vi.toml
deleted file mode 100644
index d65c07a720..0000000000
--- a/i18n/vi.toml
+++ /dev/null
@@ -1,197 +0,0 @@
-# i18n strings for the Vietnamese (main) site.
-
-[caution]
-other = "Chú ý:"
-
-[cleanup_heading]
-other = "Cleaning up"
-
-[community_events_calendar]
-other = "Lịch sự kiện"
-
-[community_forum_name]
-other = "Diễn đàn"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_warning]
-other = " tài liệu này không còn được duy trì. Phiên bản đang xem hiện tại là một snapshot tĩnh. Để rõ hơn về tài liệu bản cập nhật, xem "
-
-[deprecation_file_warning]
-other = "Không dùng nữa"
-
-[docs_label_browse]
-other = "Duyệt tài liệu"
-
-[docs_label_contributors]
-other = "Người đóng góp"
-
-[docs_label_i_am]
-other = "TÔI LÀ..."
-
-[docs_label_users]
-other = "Users"
-
-[feedback_heading]
-other = "Phản hồi"
-
-[feedback_no]
-other = "Không"
-
-[feedback_question]
-other = "Trang này có hữu ích?"
-
-[feedback_yes]
-other = "Có"
-
-[input_placeholder_email_address]
-other = "địa chỉ email"
-
-[latest_version]
-other = "phiên bản mới nhất."
-
-[layouts_blog_pager_prev]
-other = "<< Trước"
-
-[layouts_blog_pager_next]
-other = "Sau >>"
-
-[layouts_case_studies_list_tell]
-other = "Kể câu chuyện của bạn"
-
-[layouts_docs_glossary_aka]
-other = "Cũng được biết đến như là"
-
-[layouts_docs_glossary_description]
-other = "Bảng chú giải này được kì vọng là một danh sách hoàn thiện, được chuẩn hóa về thuật ngữ Kubernetes. Nó bao gồm các thuật ngữ kỹ thuật dành riêng cho Kubernetes, cũng như các thuật ngữ chung hơn cung cấp ngữ cảnh hữu ích"
-
-[layouts_docs_glossary_deselect_all]
-other = "Bỏ chọn tất cả"
-
-[layouts_docs_glossary_click_details_after]
-other = "danh mục dưới đây để giải thích rõ hơn cho các thuật ngữ cụ thể"
-
-[layouts_docs_glossary_click_details_before]
-other = "Click vào"
-
-[layouts_docs_glossary_filter]
-other = "Lọc các thuật ngữ theo tags"
-
-[layouts_docs_glossary_select_all]
-other = "Chọn tất cả"
-
-[layouts_docs_partials_feedback_improvement]
-other = "đề xuất cải tiến"
-
-[layouts_docs_partials_feedback_issue]
-other = "Tạo một issue trên Github repo nến bạn muốn "
-
-[layouts_docs_partials_feedback_or]
-other = "hoặc"
-
-[layouts_docs_partials_feedback_problem]
-other = "báo cáo một vấn đề"
-
-[layouts_docs_partials_feedback_thanks]
-other = "Cảm ơn vì đã phản hồi. Nếu bạn có một câu hỏi cụ thể, có thể trả lời về cách sử dụng Kubernetes, hãy hỏi nó trên"
-
-[layouts_docs_search_fetching]
-other = "Đang lấy kết quả..."
-
-[main_by]
-other = "bởi"
-
-[main_cncf_project]
-other = """Chúng tôi là một dự án <a href="https://cncf.io/">CNCF</a></p>"""
-
-[main_community_explore]
-other = "Khám phá cộng đồng"
-
-[main_contribute]
-other = "Đóng góp"
-
-[main_copyright_notice]
-other = """The Linux Foundation &reg;. Đã đăng ký Bản quyền. The Linux Foundation đã đăng ký và sử dụng nhãn hiệu. Để biết danh sách các nhãn hiệu của The Linux Foundation, xem <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">Trademark Usage page</a>"""
-
-[main_documentation_license]
-other = """Các tác giả Kubernetes | Tài liệu được phân phối theo <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
-
-[main_edit_this_page]
-other = "Sửa trang này"
-
-[main_github_create_an_issue]
-other = "Tạo một Issue"
-
-[main_github_invite]
-other = "Quan tâm đến việc hacking mã nguồn Kubernetes?"
-
-[main_github_view_on]
-other = "Xem trên GitHub"
-
-[main_kubernetes_features]
-other = "Các tính năng của Kubernetes"
-
-[main_kubeweekly_baseline]
-other = "Muốn nhận những tin tức Kubernetes mới nhất? Đăng kí KubeWeekly."
-
-[main_kubernetes_past_link]
-other = "Xem các bản tin trước đây"
-
-[main_kubeweekly_signup]
-other = "Đăng kí"
-
-[main_page_history]
-other ="Lịch sử trang"
-
-[main_page_last_modified_on]
-other = "Trang được sửa lần cuồi vào"
-
-[main_read_about]
-other = "Đọc về"
-
-[main_read_more]
-other = "Đọc thêm"
-
-[note]
-other = "Ghi chú:"
-
-[objectives_heading]
-other = "Mục tiêu"
-
-[prerequisites_heading]
-other = "Trước khi bắt đầu"
-
-[subscribe_button]
-other = "Đăng ký"
-
-[ui_search_placeholder]
-other = "Tìm kiếm"
-
-[version_check_mustbe]
-other = "Server Kubernetes của bạn phải ở phiên bản "
-
-[version_check_mustbeorlater]
-other = "Server Kubernetes của bạn ở phiên bản mới hơn hoặc tại phiên bản "
-
-[version_check_tocheck]
-other = "Để kiểm tra phiên bản, nhập "
-
-[warning]
-other = "Cảnh báo:"
-
-[whatsnext_heading]
-other = "Có gì tiếp theo"
-
diff --git a/i18n/vi.toml b/i18n/vi.toml
new file mode 120000
index 0000000000..cc26ca1c86
--- /dev/null
+++ b/i18n/vi.toml
@@ -0,0 +1 @@
+../data/i18n/vi/vi.toml
\ No newline at end of file
diff --git a/i18n/zh.toml b/i18n/zh.toml
deleted file mode 100644
index dcf32839f8..0000000000
--- a/i18n/zh.toml
+++ /dev/null
@@ -1,230 +0,0 @@
-# i18n strings for the Chinese version of the site (https://kubernetes.io/zh/)
-# 注意：修改此文件时请维持字符串名称的字母顺序并与英文版保持一致
-
-[caution]
-other = "注意："
-
-[cleanup_heading]
-other = "清理现场"
-
-[community_events_calendar]
-other = "事件日历"
-
-[community_forum_name]
-other = "论坛"
-
-[community_github_name]
-other = "GitHub"
-
-[community_slack_name]
-other = "Slack"
-
-[community_stack_overflow_name]
-other = "Stack Overflow"
-
-[community_twitter_name]
-other = "Twitter"
-
-[community_youtube_name]
-other = "YouTube"
-
-[deprecation_title]
-other = "您正在查看 Kubernetes 版本的文档："
-
-[deprecation_warning]
-other = " 版本的文档已不再维护。您现在看到的版本来自于一份静态的快照。如需查阅最新文档，请点击"
-
-[deprecation_file_warning]
-other = "已过时"
-
-[docs_label_browse]
-other = "浏览文档"
-
-[docs_label_contributors]
-other = "贡献者"
-
-[docs_label_i_am]
-other = "我是..."
-
-[docs_label_users]
-other = "用户"
-
-[examples_heading]
-other = "示例"
-
-[feedback_heading]
-other = "反馈"
-
-[feedback_no]
-other = "否"
-
-[feedback_question]
-other = "此页是否对您有帮助？"
-
-[feedback_yes]
-other = "是"
-
-[input_placeholder_email_address]
-other = "电子邮件地址"
-
-[latest_version]
-other = "最新版本。"
-
-[layouts_blog_pager_prev]
-other = "<< 前一篇"
-
-[layouts_blog_pager_next]
-other = "后一篇 >>"
-
-[layouts_case_studies_list_tell]
-other = "分享您的故事"
-
-[layouts_docs_glossary_aka]
-other = "亦称作"
-
-[layouts_docs_glossary_description]
-other = "此术语表旨在提供 Kubernetes 术语的完整、标准列表。其中包含特定于 Kubernetes 的技术术语以及能够构造有用的语境的一般性术语。"
-
-[layouts_docs_glossary_deselect_all]
-other = "全不选"
-
-[layouts_docs_glossary_click_details_after]
-other = "下面的指示符号获取特定术语的更为完整的描述。"
-
-[layouts_docs_glossary_click_details_before]
-other = "点击"
-
-[layouts_docs_glossary_filter]
-other = "根据标签过滤术语"
-
-[layouts_docs_glossary_select_all]
-other = "全选"
-
-[layouts_docs_partials_feedback_improvement]
-other = "提出改进建议"
-
-[layouts_docs_partials_feedback_issue]
-other = "在 GitHub 仓库上登记新的问题"
-
-[layouts_docs_partials_feedback_or]
-other = "或者"
-
-[layouts_docs_partials_feedback_problem]
-other = "报告问题"
-
-[layouts_docs_partials_feedback_thanks]
-other = "感谢反馈。如果您有一个关于如何使用 Kubernetes 的特定的、需要答案的问题，可以访问"
-
-[layouts_docs_search_fetching]
-other = "检索结果中.."
-
-[main_by]
-other = "由："
-
-[main_cncf_project]
-other = """我们是 <a href="https://cncf.io/">CNCF</a> 毕业项目</p>"""
-
-[main_community_explore]
-other = "了解社区"
-
-[main_contribute]
-other = "贡献"
-
-[main_copyright_notice]
-other = """Linux 基金会&reg;。保留所有权利。Linux 基金会已注册并使用商标。如需了解 Linux 基金会的商标列表，请访问<a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">商标使用页面</a>"""
-
-[main_documentation_license]
-other = """The Kubernetes 作者 | 文档发布基于 <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a> 授权许可"""
-
-[main_edit_this_page]
-other = "修改本页面"
-
-[main_github_create_an_issue]
-other = "报告 GitHub 问题"
-
-[main_github_invite]
-other = "想要修改 Kubernetes 的核心源代码？"
-
-[main_github_view_on]
-other = "在 GitHub 上查看"
-
-[main_kubernetes_features]
-other = "Kubernetes 特性"
-
-[main_kubeweekly_baseline]
-other = "想要获取最新的 Kubernetes 新闻么？请订阅 KubeWeekly。"
-
-[main_kubernetes_past_link]
-other = "浏览往期的周报"
-
-[main_kubeweekly_signup]
-other = "订阅"
-
-[main_page_history]
-other ="页面历史"
-
-[main_page_last_modified_on]
-other = "页面最后一次修改于"
-
-[main_read_about]
-other = "了解"
-
-[main_read_more]
-other = "了解更多"
-
-[note]
-other = "说明："
-
-[objectives_heading]
-other = "教程目标"
-
-[options_heading]
-other = "选项"
-
-[post_create_child_page]
-other = "创建子页面"
-
-[prerequisites_heading]
-other = "准备开始"
-
-[seealso_heading]
-other = "另请参见"
-
-[subscribe_button]
-other = "订阅"
-
-[synopsis_heading]
-other = "简介"
-
-[thirdparty_message]
-other = """本部分链接到提供 Kubernetes 所需功能的第三方项目。Kubernetes 项目作者不负责这些项目。此页面遵循<a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF 网站指南</a>，按字母顺序列出项目。要将项目添加到此列表中，请在提交更改之前阅读<a href="/docs/contribute/style/content-guide/#third-party-content">内容指南</a>。"""
-
-[ui_search_placeholder]
-other = "搜索"
-
-[version_check_mustbe]
-other = "您的 Kubernetes 服务器版本必须是 "
-
-[version_check_mustbeorlater]
-other = "您的 Kubernetes 服务器版本必须不低于版本 "
-
-[version_check_tocheck]
-other = "要获知版本信息，请输入 "
-
-[version_menu]
-other = "版本列表"
-
-[warning]
-other = "警告："
-
-[whatsnext_heading]
-other = "接下来"
-
-[docs_version_latest_heading]
-other = "当前版本"
-
-[docs_version_other_heading]
-other = "往期版本"
-
-[docs_version_current]
-other = "(此文档)"
diff --git a/i18n/zh.toml b/i18n/zh.toml
new file mode 120000
index 0000000000..e4758b4160
--- /dev/null
+++ b/i18n/zh.toml
@@ -0,0 +1 @@
+../data/i18n/zh/zh.toml
\ No newline at end of file

From 40e7940be2c06bb3faa753dd854a835af3c2eeed Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Mon, 5 Apr 2021 15:19:13 +0100
Subject: [PATCH 633/788] Add explanatory note about localized string OWNERS

---
 i18n/OWNERS | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 i18n/OWNERS

diff --git a/i18n/OWNERS b/i18n/OWNERS
new file mode 100644
index 0000000000..83c9158cd2
--- /dev/null
+++ b/i18n/OWNERS
@@ -0,0 +1,2 @@
+# No owner overrides here
+# See data/i18n/*/OWNERS instead

From b0ad9ff416ba4c8d1a9a158a393a0f31946040f3 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 8 Apr 2021 21:59:51 +0100
Subject: [PATCH 634/788] Revise localization guide

- explain new localized strings
- general tidying
---
 content/en/docs/contribute/localization.md | 162 ++++++++++++++-------
 1 file changed, 109 insertions(+), 53 deletions(-)

diff --git a/content/en/docs/contribute/localization.md b/content/en/docs/contribute/localization.md
index eafc241d40..85772dc9ed 100644
--- a/content/en/docs/contribute/localization.md
+++ b/content/en/docs/contribute/localization.md
@@ -16,18 +16,21 @@ card:
 This page shows you how to [localize](https://blog.mozilla.org/l10n/2011/12/14/i18n-vs-l10n-whats-the-diff/) the docs for a different language.
 
 
-
 <!-- body -->
 
-## Getting started
+## Contribute to an existing localization
 
-Because contributors can't approve their own pull requests, you need at least two contributors to begin a localization.
+You can help add or improve content to an existing localization. In [Kubernetes Slack](https://slack.k8s.io/) you'll find a channel for each localization. There is also a general [SIG Docs Localizations Slack channel](https://kubernetes.slack.com/messages/sig-docs-localizations) where you can say hello.
 
-All localization teams must be self-sustaining with their own resources. The Kubernetes website is happy to host your work, but it's up to you to translate it.
+{{< note >}}
+If you want to work on a localization that already exists, check
+this page in that localization (if it exists), rather than the
+English original. You might see extra details there.
+{{< /note >}}
 
 ### Find your two-letter language code
 
-First, consult the [ISO 639-1 standard](https://www.loc.gov/standards/iso639-2/php/code_list.php) to find your localization's two-letter country code. For example, the two-letter code for Korean is `ko`.
+First, consult the [ISO 639-1 standard](https://www.loc.gov/standards/iso639-2/php/code_list.php) to find your localization's two-letter language code. For example, the two-letter code for Korean is `ko`.
 
 ### Fork and clone the repo
 
@@ -40,13 +43,54 @@ git clone https://github.com/<username>/website
 cd website
 ```
 
-### Open a pull request
+The website content directory includes sub-directories for each language. The localization you want to help out with is inside `content/<two-letter-code>`.
 
-Next, [open a pull request](/docs/contribute/new-content/open-a-pr/#open-a-pr) (PR) to add a localization to the `kubernetes/website` repository.
+### Suggest changes
 
-The PR must include all of the [minimum required content](#minimum-required-content) before it can be approved.
+Create or update your chosen localized page based on the English original. See
+[translating content](#translating-content) for more details.
 
-For an example of adding a new localization, see the PR to enable [docs in French](https://github.com/kubernetes/website/pull/12548).
+If you notice a technical inaccuracy or other problem with the upstream (English)
+documentation, you should fix the upstream documentation first and then repeat the
+equivalent fix by updating the localization you're working on.
+
+Please limit pull requests to a single localization, since pull requests that change
+content in multiple localizations could be difficult to review.
+
+Follow [Suggesting Content Improvements](/docs/contribute/suggest-improvements/) to propose changes to
+that localization. The process is very similar to proposing changes to the upstream (English) content.
+
+## Start a new localization
+
+If you want the Kubernetes documentation localized into a new language, here's what
+you need to do.
+
+Because contributors can't approve their own pull requests, you need _at least two contributors_
+to begin a localization.
+
+All localization teams must be self-sustaining. The Kubernetes website is happy to host your work, but
+it's up to you to translate it and keep existing localized content current.
+
+You'll need to know the two-letter language code for your language. Consult the
+[ISO 639-1 standard](https://www.loc.gov/standards/iso639-2/php/code_list.php) to find your
+localization's two-letter language code. For example, the two-letter code for Korean is
+`ko`.
+
+When you start a new localization, you must localize all the
+[minimum required content](#minimum-required-content) before
+the Kubernetes project can publish your changes to the live
+website.
+
+SIG Docs can help you work on a separate branch so that you
+can incrementally work towards that goal.
+
+### Find community
+
+Let Kubernetes SIG Docs know you're interested in creating a localization! Join the [SIG Docs Slack channel](https://kubernetes.slack.com/messages/sig-docs) and the [SIG Docs Localizations Slack channel](https://kubernetes.slack.com/messages/sig-docs-localizations). Other localization teams are happy to help you get started and answer any questions you have.
+
+Please also consider participating in the [SIG Docs Localization Subgroup meeting](https://github.com/kubernetes/community/tree/master/sig-docs).  The mission of the SIG Docs localization subgroup is to work across the SIG Docs localization teams to collaborate on defining and documenting the processes for creating localized contribution guides. In addition, the SIG Docs localization subgroup will look for opportunities for the creation and sharing of common tools across localization teams and also serve to identify new requirements to the SIG Docs Leadership team.  If you have questions about this meeting, please inquire on the [SIG Docs Localizations Slack channel](https://kubernetes.slack.com/messages/sig-docs-localizations).
+
+You can also create a Slack channel for your localization in the `kubernetes/community` repository. For an example of adding a Slack channel, see the PR for [adding a channel for Persian](https://github.com/kubernetes/community/pull/4980).
 
 ### Join the Kubernetes GitHub organization
 
@@ -70,15 +114,6 @@ Next, add a GitHub label for your localization in the `kubernetes/test-infra` re
 
 For an example of adding a label, see the PR for adding the [Italian language label](https://github.com/kubernetes/test-infra/pull/11316).
 
-### Find community
-
-Let Kubernetes SIG Docs know you're interested in creating a localization! Join the [SIG Docs Slack channel](https://kubernetes.slack.com/messages/sig-docs) and the [SIG Docs Localizations Slack channel](https://kubernetes.slack.com/messages/sig-docs-localizations). Other localization teams are happy to help you get started and answer any questions you have.
-
-Please also consider participating in the [SIG Docs Localization Subgroup meeting](https://github.com/kubernetes/community/tree/master/sig-docs).  The mission of the SIG Docs localization subgroup is to work across the SIG Docs localization teams to collaborate on defining and documenting the processes for creating localized contribution guides. In addition, the SIG Docs localization subgroup will look for opportunities for the creation and sharing of common tools across localization teams and also serve to identify new requirements to the SIG Docs Leadership team.  If you have questions about this meeting, please inquire on the [SIG Docs Localizations Slack channel](https://kubernetes.slack.com/messages/sig-docs-localizations).
-
-You can also create a Slack channel for your localization in the `kubernetes/community` repository. For an example of adding a Slack channel, see the PR for [adding a channel for Persian](https://github.com/kubernetes/community/pull/4980).
-
-## Minimum required content
 
 ### Modify the site configuration
 
@@ -107,20 +142,20 @@ Add a language-specific subdirectory to the [`content`](https://github.com/kuber
 mkdir content/de
 ```
 
+You also need to create a directory inside `data/i18n` for
+[localized strings](#site-strings-in-i18n); look at existing localizations
+for an example. To use these new strings, you must also create a symbolic link
+from `i18n/<localization>.toml` to the actual string configuration in
+`data/i18n/<localization>/<localization>.toml` (remember to commit the symbolic
+link).
+
+For example, for German the strings live in `data/i18n/de/de.toml`, and
+`i18n/de.toml` is a symbolic link to `data/i18n/de/de.toml`.
+
 ### Localize the community code of conduct
 
 Open a PR against the [`cncf/foundation`](https://github.com/cncf/foundation/tree/master/code-of-conduct-languages) repository to add the code of conduct in your language.
 
-### Add a localized README file
-
-To guide other localization contributors, add a new [`README-**.md`](https://help.github.com/articles/about-readmes/) to the top level of k/website, where `**` is the two-letter language code. For example, a German README file would be `README-de.md`.
-
-Provide guidance to localization contributors in the localized `README-**.md` file. Include the same information contained in `README.md` as well as:
-
-- A point of contact for the localization project
-- Any information specific to the localization
-
-After you create the localized README, add a link to the file from the main English `README.md`, and include contact information in English. You can provide a GitHub ID, email address, [Slack channel](https://slack.com/), or other method of contact. You must also provide a link to your localized Community Code of Conduct.
 
 ### Setting up the OWNERS files
 
@@ -174,10 +209,38 @@ For each team, add the list of GitHub users requested in [Add your localization
      - remyleone
 ```
 
+### Open a pull request
+
+Next, [open a pull request](/docs/contribute/new-content/open-a-pr/#open-a-pr) (PR) to add a localization to the `kubernetes/website` repository.
+
+The PR must include all of the [minimum required content](#minimum-required-content) before it can be approved.
+
+For an example of adding a new localization, see the PR to enable [docs in French](https://github.com/kubernetes/website/pull/12548).
+
+### Add a localized README file
+
+To guide other localization contributors, add a new [`README-**.md`](https://help.github.com/articles/about-readmes/) to the top level of k/website, where `**` is the two-letter language code. For example, a German README file would be `README-de.md`.
+
+Provide guidance to localization contributors in the localized `README-**.md` file. Include the same information contained in `README.md` as well as:
+
+- A point of contact for the localization project
+- Any information specific to the localization
+
+After you create the localized README, add a link to the file from the main English `README.md`, and include contact information in English. You can provide a GitHub ID, email address, [Slack channel](https://slack.com/), or other method of contact. You must also provide a link to your localized Community Code of Conduct.
+
+### Launching your new localization
+
+Once a localization meets requirements for workflow and minimum output, SIG Docs will:
+
+- Enable language selection on the website
+- Publicize the localization's availability through [Cloud Native Computing Foundation](https://www.cncf.io/about/) (CNCF) channels, including the [Kubernetes blog](https://kubernetes.io/blog/).
+
 ## Translating content
 
 Localizing *all* of the Kubernetes documentation is an enormous task. It's okay to start small and expand over time.
 
+### Minimum required content
+
 At a minimum, all localizations must include:
 
 Description | URLs
@@ -185,7 +248,7 @@ Description | URLs
 Home | [All heading and subheading URLs](/docs/home/)
 Setup | [All heading and subheading URLs](/docs/setup/)
 Tutorials | [Kubernetes Basics](/docs/tutorials/kubernetes-basics/), [Hello Minikube](/docs/tutorials/hello-minikube/)
-Site strings | [All site strings in a new localized TOML file](https://github.com/kubernetes/website/tree/master/i18n)
+Site strings | [All site strings](#Site-strings-in-i18n) in a new localized TOML file
 
 Translated documents must reside in their own `content/**/` subdirectory, but otherwise follow the same URL path as the English source. For example, to prepare the [Kubernetes Basics](/docs/tutorials/kubernetes-basics/) tutorial for translation into German, create a subfolder under the `content/de/` folder and copy the English source:
 
@@ -213,27 +276,30 @@ To find source files for your target version:
 2. Select a branch for your target version from the following table:
     Target version | Branch
     -----|-----
-    Next version | [`dev-{{< skew nextMinorVersion >}}`](https://github.com/kubernetes/website/tree/dev-{{< skew nextMinorVersion >}})
     Latest version | [`master`](https://github.com/kubernetes/website/tree/master)
-    Previous version | `release-*.**`
+    Previous version | [`release-{{< skew prevMinorVersion >}}`](https://github.com/kubernetes/website/tree/release-{{< skew prevMinorVersion >}})
+    Next version | [`dev-{{< skew nextMinorVersion >}}`](https://github.com/kubernetes/website/tree/dev-{{< skew nextMinorVersion >}})
 
-The `master` branch holds content for the current release `{{< latest-version >}}`. The release team will create `{{< release-branch >}}` branch shortly before the next release: v{{< skew nextMinorVersion >}}.
+The `master` branch holds content for the current release `{{< latest-version >}}`. The release team will create a `{{< release-branch >}}` branch before the next release: v{{< skew nextMinorVersion >}}.
 
 ### Site strings in i18n
 
-Localizations must include the contents of [`i18n/en.toml`](https://github.com/kubernetes/website/blob/master/i18n/en.toml) in a new language-specific file. Using German as an example: `i18n/de.toml`.
+Localizations must include the contents of [`data/i18n/en/en.toml`](https://github.com/kubernetes/website/blob/master/data/i18n/en/en.toml) in a new language-specific file. Using German as an example: `data/i18n/de/de.toml`.
 
-Add a new localization file to `i18n/`. For example, with German (`de`):
+Add a new localization directory and file to `data/i18n/`. For example, with German (`de`):
 
-```shell
-cp i18n/en.toml i18n/de.toml
+```bash
+mkdir -p data/i18n/de
+cp data/i18n/en/en.toml data/i18n/de/de.toml
 ```
 
-Then translate the value of each string:
+Revise the comments at the top of the file to suit your localization,
+then translate the value of each string. For example, this is the German-language
+placeholder text for the search form:
 
-```TOML
-[docs_label_i_am]
-other = "ICH BIN..."
+```toml
+[ui_search_placeholder]
+other = "Suchen"
 ```
 
 Localizing site strings lets you customize site-wide text and features: for example, the legal copyright text in the footer on each page.
@@ -244,7 +310,9 @@ Some language teams have their own language-specific style guide and glossary. F
 
 ## Branching strategy
 
-Because localization projects are highly collaborative efforts, we encourage teams to work in shared localization branches.
+Because localization projects are highly collaborative efforts, we
+encourage teams to work in shared localization branches - especially
+when starting out and the localization is not yet live.
 
 To collaborate on a localization branch:
 
@@ -288,16 +356,4 @@ For more information about working from forks or directly from the repository, s
 
 SIG Docs welcomes upstream contributions and corrections to the English source.
 
-## Help an existing localization
 
-You can also help add or improve content to an existing localization. Join the [Slack channel](https://kubernetes.slack.com/messages/C1J0BPD2M/) for the localization, and start opening PRs to help. Please limit pull requests to a single localization since pull requests that change content in multiple localizations could be difficult to review.
-
-
-
-## {{% heading "whatsnext" %}}
-
-
-Once a localization meets requirements for workflow and minimum output, SIG docs will:
-
-- Enable language selection on the website
-- Publicize the localization's availability through [Cloud Native Computing Foundation](https://www.cncf.io/about/) (CNCF) channels, including the [Kubernetes blog](https://kubernetes.io/blog/).

From abc537afe555caa99f569fa8ecacad466e332e01 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 25 Apr 2021 22:20:40 +0900
Subject: [PATCH 635/788] Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../docs/tasks/job/automated-tasks-with-cron-jobs.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
index b53474f6a2..a23a6c73b1 100644
--- a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -9,13 +9,13 @@ weight: 10
 
 CronJobは、Kubernetes v1.21で一般利用(GA)に昇格しました。古いバージョンのKubernetesを使用している場合、正確な情報を参照できるように、使用しているバージョンのKubernetesのドキュメントを参照してください。古いKubernetesのバージョンでは、`batch/v1` CronJob APIはサポートされていません。
 
-{{< glossary_tooltip text="CronJob" term_id="cronjob" >}}を使用すると、{{< glossary_tooltip text="Job" term_id="job" >}}を時間ベースのスケジュールで実行できるようになります。この自動化されたJobは、LinuxまたはUNIXシステム上の[Cron](https://en.wikipedia.org/wiki/Cron)のように実行されます。
+{{< glossary_tooltip text="CronJob" term_id="cronjob" >}}を使用すると、{{< glossary_tooltip text="Job" term_id="job" >}}を時間ベースのスケジュールで実行できるようになります。この自動化されたJobは、LinuxまたはUNIXシステム上の[Cron](https://ja.wikipedia.org/wiki/Cron)のように実行されます。
 
 CronJobは、バックアップやメールの送信など、定期的なタスクや繰り返しのタスクを作成する時に便利です。CronJobはそれぞれのタスクを、たとえばアクティビティが少ない期間など、特定の時間にスケジューリングすることもできます。
 
 CronJobには制限と特性があります。たとえば、特定の状況下では、1つのCronJobが複数のJobを作成する可能性があるため、Jobは冪等性を持つようにしなければいけません。
 
-制限に関する詳しい情報については、[CronJob](/ja/docs/concepts/workloads/controllers/cron-jobs)を参照してください。
+制限に関する詳しい情報については、[CronJob](/ja/docs/concepts/workloads/controllers/cron-jobs/)を参照してください。
 
 ## {{% heading "prerequisites" %}}
 
@@ -118,7 +118,7 @@ kubectl delete cronjob hello
 
 CronJobを削除すると、すべてのJobと、そのJobが作成したPodが削除され、追加のJobの作成が停止されます。Jobの削除について詳しく知りたい場合は、[ガベージコレクション](/ja/docs/concepts/workloads/controllers/garbage-collection/)を読んでください。
 
-## CronJobのSpecを書く
+## CronJobのspecを書く{#writing-a-cron-job-spec}
 
 すべてのKubernetesの設定と同じように、CronJobにも`apiVersion`、`kind`、`metadata`のフィールドが必要です。設定ファイルの扱い方についての一般的な情報については、[アプリケーションのデプロイ](/ja/docs/tasks/run-application/run-stateless-application-deployment/)と[kubectlを使用してリソースを管理する](/ja/docs/concepts/overview/working-with-objects/object-management/)を読んでください。
 
@@ -130,9 +130,9 @@ CronJobの特に`spec`へのすべての修正は、それ以降の実行にの
 
 ### Schedule
 
-`.spec.schedule`は、`.spec`には必須のフィールドです。`0 * * * *`や`@hourly`などの[Cron](https://en.wikipedia.org/wiki/Cron)形式の文字列を取り、Jobの作成と実行のスケジュール時間を指定します。
+`.spec.schedule`は、`.spec`には必須のフィールドです。`0 * * * *`や`@hourly`などの[Cron](https://ja.wikipedia.org/wiki/Cron)形式の文字列を取り、Jobの作成と実行のスケジュール時間を指定します。
 
-フォーマットには`vixie cron`のステップ値(step value)も指定できます。[FreeBSDのマニュアル](https://www.freebsd.org/cgi/man.cgi?crontab%285%29)では次のように説明されています。
+フォーマットにはVixie cronのステップ値(step value)も指定できます。[FreeBSDのマニュアル](https://www.freebsd.org/cgi/man.cgi?crontab%285%29)では次のように説明されています。
 
 > ステップ値は範囲指定と組み合わせて使用できます。範囲の後ろに`/<number>`を付けると、範囲全体で指定したnumberの値ごとにスキップすることを意味します。たとえば、`0-23/2`をhoursフィールドに指定すると、2時間毎にコマンド実行を指定することになります(V7標準では代わりに`0,2,4,6,8,10,12,14,16,18,20,22`と指定する必要があります)。ステップはアスタリスクの後ろにつけることもできます。そのため、「2時間毎に実行」したい場合は、単純に`*/2`と指定できます。
 
@@ -160,7 +160,7 @@ CronJobの特に`spec`へのすべての修正は、それ以降の実行にの
 * `Forbid`: CronJobの並列実行を禁止します。もし新しいJobの実行時に過去のJobがまだ完了していなかった場合、CronJobは新しいJobの実行をスキップします。
 * `Replace`: もし新しいJobの実行の時間になっても過去のJobの実行が完了していなかった場合、CronJobは現在の実行中のJobを新しいJobで置換します。
 
-concurrent policyは、同じCronJobが作成したJobにのみ適用されます。もし複数のCronJobがある場合、それぞれのJobの並列実行は常に許可されます。
+Concurrency policyは、同じCronJobが作成したJobにのみ適用されます。もし複数のCronJobがある場合、それぞれのJobの並列実行は常に許可されます。
 
 ### Suspend
 

From 678bb72c3552675ffbf8ffbf13cbaed98fb434ba Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 25 Apr 2021 22:21:46 +0900
Subject: [PATCH 636/788] Update automated-tasks-with-cron-jobs.md

---
 content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
index a23a6c73b1..6562b9d6af 100644
--- a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -118,7 +118,7 @@ kubectl delete cronjob hello
 
 CronJobを削除すると、すべてのJobと、そのJobが作成したPodが削除され、追加のJobの作成が停止されます。Jobの削除について詳しく知りたい場合は、[ガベージコレクション](/ja/docs/concepts/workloads/controllers/garbage-collection/)を読んでください。
 
-## CronJobのspecを書く{#writing-a-cron-job-spec}
+## CronJobのspecを書く {#writing-a-cron-job-spec}
 
 すべてのKubernetesの設定と同じように、CronJobにも`apiVersion`、`kind`、`metadata`のフィールドが必要です。設定ファイルの扱い方についての一般的な情報については、[アプリケーションのデプロイ](/ja/docs/tasks/run-application/run-stateless-application-deployment/)と[kubectlを使用してリソースを管理する](/ja/docs/concepts/overview/working-with-objects/object-management/)を読んでください。
 
@@ -160,7 +160,7 @@ CronJobの特に`spec`へのすべての修正は、それ以降の実行にの
 * `Forbid`: CronJobの並列実行を禁止します。もし新しいJobの実行時に過去のJobがまだ完了していなかった場合、CronJobは新しいJobの実行をスキップします。
 * `Replace`: もし新しいJobの実行の時間になっても過去のJobの実行が完了していなかった場合、CronJobは現在の実行中のJobを新しいJobで置換します。
 
-Concurrency policyは、同じCronJobが作成したJobにのみ適用されます。もし複数のCronJobがある場合、それぞれのJobの並列実行は常に許可されます。
+concurrency policyは、同じCronJobが作成したJobにのみ適用されます。もし複数のCronJobがある場合、それぞれのJobの並列実行は常に許可されます。
 
 ### Suspend
 

From 18695739270498f4ec974b21c28247715ca22818 Mon Sep 17 00:00:00 2001
From: Ricardo Katz <rikatz@users.noreply.github.com>
Date: Sun, 25 Apr 2021 12:29:00 -0300
Subject: [PATCH 637/788] Add spell check script (#26228)

* Add spell check script

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Add instructions on how to run the spelling verification script

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
---
 scripts/verify-spelling.sh | 69 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100755 scripts/verify-spelling.sh

diff --git a/scripts/verify-spelling.sh b/scripts/verify-spelling.sh
new file mode 100755
index 0000000000..c259d65ddb
--- /dev/null
+++ b/scripts/verify-spelling.sh
@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+
+# Copyright 2019 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+##########
+# This script verifies mispellings in location. Today it only supports
+# verifying English locale but can be modified in a future to support 
+# also other locales.
+# You need to run this script inside the root directory of "website" git repo.
+# 
+# Syntax: verify-spelling.sh LOCALE
+# Example: verify-spelling.sh en
+# If no locale is passed, it will assume "en"
+# 
+# Requirements:
+# - go v1.14 or superior version
+
+
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+TOOL_VERSION="v0.3.4"
+
+LANGUAGE="${1:-en}"
+# cd to the root path
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd -P)"
+cd "${ROOT}"
+
+# create a temporary directory
+TMP_DIR=$(mktemp -d)
+
+# cleanup
+exitHandler() (
+  echo "Cleaning up..."
+  rm -rf "${TMP_DIR}"
+)
+trap exitHandler EXIT
+
+# perform go get in a temp dir as we are not tracking this version in a go module
+# if we do the go get in the repo, it will create / update a go.mod and go.sum
+cd "${TMP_DIR}"
+GO111MODULE=on GOBIN="${TMP_DIR}" go get "github.com/client9/misspell/cmd/misspell@${TOOL_VERSION}"
+export PATH="${TMP_DIR}:${PATH}"
+cd "${ROOT}"
+
+# check spelling
+RES=0
+echo "Checking spelling..."
+ERROR_LOG="${TMP_DIR}/errors.log"
+git ls-files | grep content/${LANGUAGE} | xargs misspell > "${ERROR_LOG}"
+if [[ -s "${ERROR_LOG}" ]]; then
+  sed 's/^/error: /' "${ERROR_LOG}" # add 'error' to each line to highlight in e2e status
+  echo "Found spelling errors!"
+  RES=1
+fi
+exit "${RES}"

From 539836d023fc43aeb7c97662998977a7fdaa7c55 Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Fri, 31 Jul 2020 17:06:38 +0200
Subject: [PATCH 638/788] Translation

---
 .../workloads/controllers/statefulset.md      | 278 ++++++++++++++++++
 .../fr/docs/reference/glossary/statefulset.md |  22 ++
 2 files changed, 300 insertions(+)
 create mode 100644 content/fr/docs/concepts/workloads/controllers/statefulset.md
 create mode 100755 content/fr/docs/reference/glossary/statefulset.md

diff --git a/content/fr/docs/concepts/workloads/controllers/statefulset.md b/content/fr/docs/concepts/workloads/controllers/statefulset.md
new file mode 100644
index 0000000000..637be79db7
--- /dev/null
+++ b/content/fr/docs/concepts/workloads/controllers/statefulset.md
@@ -0,0 +1,278 @@
+---
+title: StatefulSets
+content_type: concept
+weight: 30
+---
+
+<!-- overview -->
+
+StatefulSet est l'objet de l'API de charge de travail utilisé pour gérer des applications avec état (*stateful*).
+
+{{< glossary_definition term_id="statefulset" length="all" >}}
+
+
+<!-- body -->
+
+## Utiliser des StatefulSets
+
+Les StatefulSets sont utiles pour des applications qui nécessitent une ou plusieurs des choses suivantes :
+
+* Des identifiants réseau stables et uniques.
+* Un stockage persistant stable.
+* Un déploiement et une mise à l'échelle ordonnés et contrôlés.
+* Des mises à jour continues (*rolling update*) ordonnées et automatisées.
+
+Ci-dessus, stable est synonyme de persistance suite au (re)scheduling de Pods.
+Si une application ne nécessite aucun identifiant stable ou de déploiement, suppression ou
+mise à l'échelle stables, vous devriez déployer votre application en utilisant un objet de charge de travail
+fournissant un ensemble de réplicas sans état (*stateless*).
+
+Un [Deployment](/fr/docs/concepts/workloads/controllers/deployment/) ou
+[ReplicaSet](/fr/docs/concepts/workloads/controllers/replicaset/) peut être mieux adapté pour vos applications sans état.
+
+## Limitations
+
+* Le stockage pour un Pod donné doit être provisionné soit par un [approvisionneur de PersistentVolume](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/staging/persistent-volume-provisioning/README.md) basé sur un `storage class` donné, soit pré-provisionné par un admin.
+* Supprimer et/ou réduire l'échelle d'un StatefulSet à zéro ne supprimera *pas* les volumes associés avec le StatefulSet. Ceci est fait pour garantir la sécurité des données, ce qui a généralement plus de valeur qu'une purge automatique de toutes les ressources relatives à un StatefulSet.
+* Les StatefulSets nécessitent actuellement un [Service Headless](/fr/docs/concepts/services-networking/service/#headless-services) qui est responsable de l'identité réseau des Pods. Vous êtes responsable de la création de ce Service.
+* Les StatefulSets ne fournissent aucune garantie de la terminaison des pods lorsqu'un StatefulSet est supprimé. Pour avoir une terminaison ordonnée et maîtrisée des pods du StatefulSet, il est possible de réduire l'échelle du StatefulSet à 0 avant de le supprimer.
+* Lors de l'utilisation de [Rolling Updates](#rolling-updates) avec la
+  [Politique de gestion des Pods](#politiques-de-gestion-dun-pod) par défaut (`OrderedReady`),
+  il est possible de tomber dans un état indéfini nécessitant une
+  [intervention manuelle pour réparer](#rollback-forcé).
+
+## Composants
+
+L'exemple ci-dessous décrit les composants d'un StatefulSet.
+
+```yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx
+  labels:
+    app: nginx
+spec:
+  ports:
+  - port: 80
+    name: web
+  clusterIP: None
+  selector:
+    app: nginx
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: web
+spec:
+  selector:
+    matchLabels:
+      app: nginx # doit correspondre à .spec.template.metadata.labels
+  serviceName: "nginx"
+  replicas: 3 # est 1 par défaut
+  template:
+    metadata:
+      labels:
+        app: nginx # doit correspondre à .spec.selector.matchLabels
+    spec:
+      terminationGracePeriodSeconds: 10
+      containers:
+      - name: nginx
+        image: k8s.gcr.io/nginx-slim:0.8
+        ports:
+        - containerPort: 80
+          name: web
+        volumeMounts:
+        - name: www
+          mountPath: /usr/share/nginx/html
+  volumeClaimTemplates:
+  - metadata:
+      name: www
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      storageClassName: "my-storage-class"
+      resources:
+        requests:
+          storage: 1Gi
+```
+
+Dans l'exemple ci-dessus :
+
+* Un Service Headless, appelé `nginx`, est utilisé pour contrôler le domaine réseau.
+* Le StatefulSet, appelé `web`, a une Spec indiquant que 3 réplicas du container nginx seront démarrés dans des Pods.
+* Le `volumeClaimTemplates` fournira un stockage stable utilisant des [PersistentVolumes](/docs/concepts/storage/persistent-volumes/) provisionnés par un approvisionneur de PersistentVolume.
+
+Le nom d'un objet StatefulSet doit être un
+[nom de sous-domaine DNS](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names) valide.
+
+## Sélecteur de Pod
+
+Vous devez renseigner le champ `.spec.selector` d'un StatefulSet pour qu'il corresponde aux labels de son `.spec.template.metadata.labels`. Avant Kubernetes 1.8, le champ `.spec.selector` était mis par défaut s'il était omis. Pour les versions 1.8 et ultérieures, ne pas spécifier de sélecteur de Pod résulte en une erreur de validation lors de la création du StatefulSet.
+
+## Identité du Pod
+
+Les Pods d'un StatefulSet ont une identité unique comprenant un ordinal, une identité réseau stable et un stockage stable.
+L'identité est accrochée au Pod, indépendamment du noeud sur lequel il est (re)programmé.
+
+### Index Ordinal
+
+Pour un StatefulSet avec N réplicas, chaque Pod du StatefulSet se verra assigné un ordinal entier, de 0 à N-1,
+unique sur l'ensemble des pods.
+
+### ID réseau stable
+
+Chaque Pod dans un StatefulSet dérive son nom d'hôte du nom du StatefulSet
+et de l'ordinal du Pod. Le modèle pour le nom d'hôte généré est
+`$(nom statefulset)-$(ordinal)`. L'exemple ci-dessus créera trois Pods
+nommés `web-0,web-1,web-2`.
+Un StatefulSet peut utiliser un [Service Headless](/docs/concepts/services-networking/service/#headless-services)
+pour contrôler le domaine de ses Pods. Le domaine pris en charge par ce Service prend la forme :
+`$(nom service).$(namespace).svc.cluster.local`, où "cluster.local" est le domaine du cluster.
+Chaque fois qu'un Pod est créé, il obtient un sous-domaine DNS correspondant, prenant la forme :
+`$(nom pod).$(domaine du service gouvernant)`, où le service gouvernant est défini par par le
+champ `serviceName` du StatefulSet.
+
+En fonction de la façon dont est configuré le DNS dans votre cluster, vous ne pourrez peut-être pas rechercher immédiatement
+le nom DNS d'un pod nouvellement exécuté. Ce problème peut se produire lorsque d'autres clients dans le
+cluster ont déjà envoyé des requêtes pour le nom d'hôte du Pod avant sa création.
+La mise en cache négative (normale pour le DNS) signifie que les résultats des recherches précédentes ayant échoué sont
+mémorisés et réutilisés, même après que le Pod ait démarré, pendant au moins quelques secondes.
+
+Si vous avez besoin de découvrir les Pods rapidement après leur création, vous avez plusieurs options :
+
+- Interrogez directement l'API Kubernetes (par exemple, à l'aide d'un watch) plutôt que de vous fier aux recherches DNS.
+- Réduisez le temps de mise en cache dans votre fournisseur de DNS Kubernetes (cela signifie généralement modifier le ConfigMap de CoreDNS, qui met actuellement en cache pendant 30 secondes).
+
+Comme mentionné dans la section [limitations](#limitations), vous êtes responsable de
+créer le [Service Headless](/docs/concepts/services-networking/service/#headless-services)
+responsable de l'identité réseau des Pods.
+
+Voici quelques exemples de choix pour le domaine du cluster, le nom du service,
+le nom du StatefulSet et comment cela affecte les noms DNS des pods du StatefulSet.
+
+Domaine Cluster | Service (ns/nom)  | StatefulSet (ns/nom) | Domaine StatefulSet             | DNS Pod                                      | Nom d'hôte   |
+--------------- | ----------------- | -------------------- | ------------------------------- | -------------------------------------------- | ------------ |
+ cluster.local  | default/nginx     | default/web          | nginx.default.svc.cluster.local | web-{0..N-1}.nginx.default.svc.cluster.local | web-{0..N-1} |
+ cluster.local  | foo/nginx         | foo/web              | nginx.foo.svc.cluster.local     | web-{0..N-1}.nginx.foo.svc.cluster.local     | web-{0..N-1} |
+ kube.local     | foo/nginx         | foo/web              | nginx.foo.svc.kube.local        | web-{0..N-1}.nginx.foo.svc.kube.local        | web-{0..N-1} |
+
+{{< note >}}
+Le domaine cluster sera `cluster.local` à moins qu'il soit
+[configuré autrement](/docs/concepts/services-networking/dns-pod-service/).
+{{< /note >}}
+
+### Stockage stable
+
+Kubernetes crée un [PersistentVolume](/docs/concepts/storage/persistent-volumes/) pour chaque
+VolumeClaimTemplate. Dans l'exemple nginx ci-dessus, chaque Pod se verra affecter un unique PersistentVolume
+avec un StorageClass de `my-storage-class` et 1 Gib de stockage provisionné. Si aucun StorageClass
+n'est spécifié, alors le StorageClass par défaut sera utilié. Lorsqu'un Pod est (re)schedulé
+sur un noeud, ses `volumeMounts` montent les PersistentVolumes associés aux  
+PersistentVolumeClaims. Notez que les PersistentVolumes associés avec les PersistentVolumeClaims des Pods
+ne sont pas supprimés lorsque les Pods, ou le StatefulSet, sont supprimés.
+Ceci doit être fait manuellement.
+
+### Étiquette du nom de Pod
+
+Lorsque le StatefulSet {{< glossary_tooltip term_id="controller" >}} crée un Pod,
+il ajoute une étiquette, `statefulset.kubernetes.io/pod-name`, renseignée avec le nom du Pod.
+Cette étiquette vous permet d'attacher un Service à un Pod spécifique du StatefulSet.
+
+## Garanties de déploiment et de mise à l'échelle
+
+* Pour un StatefulSet avec N réplicas, lorsque les Pods sont déployés, ils sont créés de manière séquentielle, dans l'ordre {0..N-1}.
+* Lorsque les Pods sont supprimés, ils sont terminés dans l'ordre inverse, {N-1..0}.
+* Avant qu'une opération de mise à l'échelle soit appliquée à un Pod, tous ses prédécesseurs doivent être Running et Ready.
+* Avant qu'un Pod soit terminé, tous ses successeurs doivent être complètement arrêtés.
+
+Le StatefulSet ne devrait pas spécifier un `pod.Spec.TerminationGracePeriodSeconds` à 0. Cette pratique
+est dangereuse et fortement déconseillée. Pour plus d'explications, veuillez vous référer à [forcer la suppression  de Pods de StatefulSet](/docs/tasks/run-application/force-delete-stateful-set-pod/).
+
+Lorsque l'exemple nginx ci-dessus est créé, trois Pods seront déployés dans l'ordre
+web-0, web-1, web-2. web-1 ne sera pas déployé avant que web-0 soit
+[Running et Ready](/fr/docs/concepts/workloads/pods/pod-lifecycle/), et web-2 ne sera pas déployé avant que
+web-1 soit Running et Ready. Si web-0 venait à échouer, après que web-1 soit Running et Ready, mais avant que
+web-2 soit lancé, web-2 ne serait pas lancé avant que web-0 soit correctement relancé et redevienne Running et Ready.
+
+Si un utilisateur venait à mettre à l'échelle l'exemple déployé en patchant le StatefulSet pour que
+`replicas=1`, web-2 serait terminé en premier. web-1 ne serait pas terminé avant que web-2
+ne soit complètement arrêté et supprimé. Si web-0 venait à échouer après que web-2 soit terminé et complètement arrêté,
+mais avant que web-1 soit terminé, web-1 ne serait pas terminé avant que web-0 soit Running et Ready.
+
+### Politiques de gestion d'un Pod
+
+Dans Kubernetes 1.7 et ultérieurs, le StatefulSet vous permet d'assouplir ses garanties d'ordre,
+tout en préservant ses garanties d'unicité et d'identité via son champ `.spec.podManagementPolicy`.
+
+#### Gestion de Pod OrderedReady
+
+La gestion de Pod `OrderedReady` est la valeur par défaut pour les StatefulSets. Il implémente le comportement décrit [ci-dessus](#garanties-de-déploiment-et-de-mise-à-l-échelle).
+
+#### Gestion de Pod Parallel
+
+La gestion de Pod `Parallel` indique au contrôleur de StatefulSet de lancer ou
+terminer tous les Pods en parallèle, et de ne pas attendre que les Pods deviennent Running
+et Ready ou complètement terminés avant de lancer ou terminer un autre
+Pod. Cette option affecte seulement le comportement pour les opérations de mise à l'échelle.
+Les mises à jour ne sont pas affectées.
+
+## Stratégies de mise à jour
+
+Dans Kubernetes 1.7 et ultérieurs, le champ `.spec.updateStrategy` d'un StatefulSet vous permet
+de configurer et désactiver les rolling updates automatisés pour les conteneurs, étiquettes,
+requête/limites de ressources, et annotations pour les Pods d'un StatefulSet.
+
+### On Delete
+
+La stratégie de mise à jour `OnDelete` implémente l'ancien comportement (1.6 et précédents). Lorsque
+`.spec.updateStrategy.type` d'un StatefulSet est mis à `OnDelete`, le contrôleur de StatefulSet
+ne mettra pas à jour automatiquement les Pods dans un StatefulSet.
+Les utilisateurs doivent supprimer manuellement les Pods pour forcer le contrôleur à créer de nouveaux
+Pods qui réflètent les modifications faites à un `.spec.template` d'un StatefulSet.
+
+### Rolling Updates
+
+La stratégie de mise à jour `RollingUpdate` implémente le rolling update automatisé pour les Pods d'un
+StatefulSet. C'est la stratégie par défaut lorsque `.spec.updateStrategy` n'est pas spécifié.
+Lorsqu'un `.spec.updateStrategy.type` d'un StatefulSet est mis à `RollingUpdate`, le contrôleur de
+StatefulSet va supprimer et recréer chaque Pod d'un StatefulSet. Il va procéder dans le même ordre
+que pour la terminaison d'un Pod (de l'ordinal le plus grand au plus petit), mettant à jour chaque Pod,
+un seul à la fois. Il va attendre qu'un Pod mis à jour soit Running et Ready avant de mettre à jour
+son prédécesseur.
+
+#### Partitions
+
+La stratégie de mise à jour `RollingUpdate` peut être partitionnée, en spécifiant une
+`.spec.updateStrategy.rollingUpdate.partition`. Si une partition est spécifiée, tous les Pods ayant un
+ordinal plus grand ou égal à la partition seront mis à jour lorsque le
+`.spec.template` du StatefulSet sera mis à jour. Tous les Pods ayant un ordinal inférieur à la partition
+ne sera pas mis à jour, et, même s'ils sont supprimés, ils seront recréés avec l'ancienne version. Si une
+`.spec.updateStrategy.rollingUpdate.partition` d'un StatefulSet est plus grand que son `.spec.replicas`,
+les mises à jour de son `.spec.template` ne seront pas propagés à ses Pods.
+Dans la plupart des cas vous n'aurez pas à utiliser de partition, mais elles sont utiles si vous désirez
+organiser une mise à jour, déployer une version canari, ou effectuer un déploiement par étapes.
+
+#### Rollback forcé
+
+En utilisant des [Rolling Updates](#rolling-updates) avec la
+[politique de gestion d'un Pod](#politiques-de-gestion-dun-pod) par défaut (`OrderedReady`),
+il est possible de se retrouver dans un état inconsistant nécessitant une intervention manuelle pour réparation.
+
+Si vous mettez à jour le template de Pod dans une configuration qui ne devient jamais Running et
+Ready (par exemple, du fait d'un mauvais binaire ou d'une erreur de configuration au niveau de l'application),
+le StatefulSet va arrêter le rollout et attendre.
+
+Dans cet état, il n'est pas suffisant de revenir à une bonne configuration du template de Pod.
+En raison d'une [erreur connue](https://github.com/kubernetes/kubernetes/issues/67250),
+le StatefulSet va continuer à attendre que le Pod en échec Pod devienne Ready
+(ce qui n'arrive jamais) avant qu'il tente de revenir à la bonne configuration.
+
+Après être revenu au bon template, vous devez aussi supprimer tous les Pods que le StatefulSet
+avait déjà essayé de démarrer avec la mauvaise configuration.
+Le StatefulSet va alors commencer à recréer les Pods en utilisant le bon template.
+
+## {{% heading "whatsnext" %}}
+
+* Suivre un exemple de [déploiement d'une application stateful](/docs/tutorials/stateful-application/basic-stateful-set/).
+* Suivre un exemple de [déploiement de Cassandra avec des Stateful Sets](/docs/tutorials/stateful-application/cassandra/).
+* Suivre un exemple d'[exécution d'une application stateful redondante](/docs/tasks/run-application/run-replicated-stateful-application/).
diff --git a/content/fr/docs/reference/glossary/statefulset.md b/content/fr/docs/reference/glossary/statefulset.md
new file mode 100755
index 0000000000..2acf3370a1
--- /dev/null
+++ b/content/fr/docs/reference/glossary/statefulset.md
@@ -0,0 +1,22 @@
+---
+title: StatefulSet
+id: statefulset
+date: 2018-04-12
+full_link: /fr/docs/concepts/workloads/controllers/statefulset/
+short_description: >
+  Gère le déploiement et la mise à l'échelle d'un ensemble de Pods, avec un stockage durable et des identifiants persistants pour chaque Pod.
+
+aka: 
+tags:
+- fundamental
+- core-object
+- workload
+- storage
+---
+ Gère le déploiement et la mise à l'échelle d'un ensemble de {{< glossary_tooltip text="Pods" term_id="pod" >}}, *et fournit des garanties sur l'ordre et l'unicité* de ces Pods.
+
+<!--more--> 
+
+Comme un {{< glossary_tooltip term_id="deployment" >}}, un StatefulSet gère des Pods qui sont basés sur une même spécification de conteneur. Contrairement à un Deployment, un StatefulSet maintient une identité pour chacun de ces Pods. Ces Pods sont créés à partir de la même spec, mais ne sont pas interchangeables : chacun a un identifiant persistant qu'il garde à travers tous ses re-scheduling.
+
+Si vous voulez utiliser des volumes de stockage pour fournir de la persistance à votre charge de travail, vous pouvez utiliser un StatefulSet comme partie de la solution. Même si des Pods individuels d'un StatefulSet sont susceptibles d'échouer, les identifiants persistants des Pods rendent plus facile de faire correspondre les volumes existants aux nouveaux Pods remplaçant ceux ayant échoué.

From 6a38fb4f2d82daa58c9533122b4c0c509ed6179c Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Wed, 14 Apr 2021 15:09:48 +0900
Subject: [PATCH 639/788] [ko] Update outdated files in dev-1.21-ko.1 (p2)

---
 .../access-cluster.md                         | 88 +++++++++---------
 ...port-forward-access-application-cluster.md | 89 ++++++++++---------
 .../access-cluster-services.md                | 24 ++---
 .../docs/tasks/administer-cluster/coredns.md  | 27 +-----
 .../dns-custom-nameservers.md                 | 14 +--
 .../kubeadm/kubeadm-certs.md                  |  2 +-
 .../kubeadm/kubeadm-upgrade.md                |  4 +-
 .../calico-network-policy.md                  |  2 +-
 .../configure-pod-container/static-pod.md     | 28 +++---
 .../debug-pod-replication-controller.md       |  2 +-
 .../job/automated-tasks-with-cron-jobs.md     | 16 ++--
 .../coarse-parallel-processing-work-queue.md  |  9 +-
 .../fine-parallel-processing-work-queue.md    |  4 +-
 13 files changed, 138 insertions(+), 171 deletions(-)

diff --git a/content/ko/docs/tasks/access-application-cluster/access-cluster.md b/content/ko/docs/tasks/access-application-cluster/access-cluster.md
index 43a6a82343..9e7c9b4fc7 100644
--- a/content/ko/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/ko/docs/tasks/access-application-cluster/access-cluster.md
@@ -26,9 +26,9 @@ kubectl이 인지하는 위치정보와 인증정보는 다음 커맨드로 확
 kubectl config view
 ```
 
-많은 [예제들](/ko/docs/reference/kubectl/cheatsheet/)에서
-kubectl을 사용하는 것을 소개하고 있으며 완전한 문서는
-[kubectl 매뉴얼](/ko/docs/reference/kubectl/overview/)에서 찾아볼 수 있다.
+[여기](/ko/docs/reference/kubectl/cheatsheet/)에서 
+kubectl 사용 예시를 볼 수 있으며, 완전한 문서는
+[kubectl 매뉴얼](/ko/docs/reference/kubectl/overview/)에서 확인할 수 있다.
 
 ## REST API에 직접 접근
 
@@ -44,12 +44,12 @@ REST API에 직접 접근하려고 한다면 위치 파악과 인증을 하는 
     - 앞으로는 클라이언트 측의 지능형 load balancing과 failover가 될 것이다.
   - 직접적으로 http 클라이언트에 위치정보와 인증정보를 제공.
     - 대안적인 접근 방식.
-    - proxy 사용과 혼동되는 몇 가지 타입의 클라이언트 code들과 같이 동작한다.
-    - MITM로부터 보호를 위해 root 인증서를 당신의 브라우저로 import해야 한다.
+    - proxy 사용과 혼동되는 몇 가지 타입의 클라이언트 코드와 같이 동작한다.
+    - MITM로부터 보호를 위해 root 인증서를 당신의 브라우저로 임포트해야 한다.
 
 ### kubectl proxy 사용
 
-다음 커맨드는 kubectl을 reverse proxy처럼 동작하는 모드를 실행한다. 이는
+다음 커맨드는 kubectl을 리버스 프록시(reverse proxy)처럼 동작하는 모드를 실행한다. 이는
 apiserver의 위치지정과 인증을 처리한다.
 다음과 같이 실행한다.
 
@@ -205,7 +205,7 @@ apiserver의 인증서 제공을 검증하는데 사용되어야 한다.
 
   - 파드의 sidecar 컨테이너 내에서 `kubectl proxy`를 실행하거나,
     컨테이너 내부에서 백그라운드 프로세스로 실행한다.
-    이는 쿠버네티스 API를 파드의 localhost 인터페이스로 proxy하여
+    이는 쿠버네티스 API를 파드의 localhost 인터페이스로 프록시하여
     해당 파드의 컨테이너 내에 다른 프로세스가 API에 접속할 수 있게 해준다.
   - Go 클라이언트 라이브러리를 이용하여 `rest.InClusterConfig()`와 `kubernetes.NewForConfig()` 함수들을 사용하도록 클라이언트를 만든다.
     이는 apiserver의 위치지정과 인증을 처리한다. [예제](https://git.k8s.io/client-go/examples/in-cluster-client-configuration/main.go)
@@ -215,47 +215,47 @@ apiserver의 인증서 제공을 검증하는데 사용되어야 한다.
 ## 클러스터에서 실행되는 서비스로 접근
 
 이전 장은 쿠버네티스 API server 접속에 대한 내용을 다루었다. 이번 장은
-쿠버네티스 클러스터 상에서 실행되는 다른 서비스로의 연결을 다룰 것이다. 쿠버네티스에서
-[노드들](/ko/docs/concepts/architecture/nodes/),
-[파드들](/ko/docs/concepts/workloads/pods/),
-[서비스들](/ko/docs/concepts/services-networking/service/)은
-모두 자신의 IP들을 가진다. 당신의 데스크탑 PC와 같은 클러스터 외부 장비에서는
-클러스터 상의 노드 IP들, 파드 IP들, 서비스 IP들로 라우팅되지 않아서 접근을
+쿠버네티스 클러스터 상에서 실행되는 다른 서비스로의 연결을 다룰 것이다. 
+
+쿠버네티스에서, [노드](/ko/docs/concepts/architecture/nodes/),
+[파드](/ko/docs/concepts/workloads/pods/) 및 [서비스](/ko/docs/concepts/services-networking/service/)는 모두
+고유한 IP를 가진다. 당신의 데스크탑 PC와 같은 클러스터 외부 장비에서는
+클러스터 상의 노드 IP, 파드 IP, 서비스 IP로 라우팅되지 않아서 접근을
 할 수 없을 것이다.
 
 ### 통신을 위한 방식들
 
-클러스터 외부에서 노드들, 파드들, 서비스들에 접속하는 데는 몇 가지 선택지들이 있다.
+클러스터 외부에서 노드, 파드 및 서비스에 접속하기 위한 몇 가지 옵션이 있다.
 
   - 공인 IP를 통해 서비스에 접근.
     - 클러스터 외부에서 접근할 수 있도록 `NodePort` 또는 `LoadBalancer` 타입의
       서비스를 사용한다. [서비스](/ko/docs/concepts/services-networking/service/)와
       [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) 문서를 참조한다.
-    - 당신의 클러스터 환경에 따라 회사 네트워크에만 서비스를 노출하거나
-      인터넷으로 노출할 수 있다. 이 경우 노출되는 서비스의 보안 여부를 고려해야 한다.
+    - 클러스터 환경에 따라, 서비스는 회사 네트워크에만 노출되기도 하며,
+      인터넷에 노출되는 경우도 있다. 이 경우 노출되는 서비스의 보안 여부를 고려해야 한다.
       해당 서비스는 자체적으로 인증을 수행하는가?
-    - 파드들은 서비스 뒤에 위치시킨다. 레플리카들의 집합에서 특정 파드 하나에 debugging 같은 목적으로 접근하려면
-      해당 파드에 고유의 레이블을 붙이고 셀렉터에 해당 레이블을 선택한 신규 서비스를 생성한다.
+    - 파드는 서비스 뒤에 위치시킨다. 레플리카들의 집합에서 특정 파드 하나에 debugging 같은 목적으로 접근하려면
+      해당 파드에 고유의 레이블을 붙이고 셀렉터에 해당 레이블을 선택하는 신규 서비스를 생성한다.
     - 대부분의 경우에는 애플리케이션 개발자가 노드 IP를 통해 직접 노드에
       접근할 필요는 없다.
   - Proxy Verb를 사용하여 서비스, 노드, 파드에 접근.
     - 원격 서비스에 접근하기에 앞서 apiserver의 인증과 인가를 받아야 한다.
-      서비스가 인터넷에 노출하기에 보안이 충분하지 않거나 노드 IP 상의 port에
+      서비스가 인터넷에 노출하기에 보안이 충분하지 않거나 노드 IP 상의 포트에
       접근을 하려고 하거나 debugging을 하려면 이를 사용한다.
-    - 어떤 web 애플리케이션에서는 proxy가 문제를 일으킬 수 있다.
+    - 어떤 web 애플리케이션에서는 프록시가 문제를 일으킬 수 있다.
     - HTTP/HTTPS에서만 동작한다.
     - [여기](#수작업으로-apiserver-proxy-url들을-구축)에서 설명하고 있다.
   - 클러스터 내 노드 또는 파드에서 접근.
-    - 파드를 Running시킨 다음 [kubectl exec](/docs/reference/generated/kubectl/kubectl-commands/#exec)를 사용하여 해당 파드의 셸로 접속한다.
-      해당 셸에서 다른 노드들, 파드들, 서비스들에 연결한다.
+    - 파드를 실행한 다음, [kubectl exec](/docs/reference/generated/kubectl/kubectl-commands/#exec)를 사용하여 해당 파드의 셸로 접속한다.
+      해당 셸에서 다른 노드, 파드, 서비스에 연결한다.
     - 어떤 클러스터는 클러스터 내의 노드에 ssh 접속을 허용하기도 한다. 이런 클러스터에서는
       클러스터 서비스에 접근도 가능하다. 이는 비표준 방식으로 특정 클러스터에서는 동작하지만
       다른 클러스터에서는 동작하지 않을 수 있다. 브라우저와 다른 도구들이 설치되지 않았거나 설치되었을 수 있다. 클러스터 DNS가 동작하지 않을 수도 있다.
 
-### 빌트인 서비스들의 발견
+### 빌트인 서비스 검색
 
-일반적으로 kube-system에 의해 클러스터 상에서 start되는 몇 가지 서비스들이 존재한다.
-`kubectl cluster-info` 커맨드로 이 서비스들의 리스트를 볼 수 있다.
+일반적으로 kube-system에 의해 클러스터에 실행되는 몇 가지 서비스가 있다. 
+`kubectl cluster-info` 커맨드로 이 서비스의 리스트를 볼 수 있다.
 
 ```shell
 kubectl cluster-info
@@ -280,20 +280,20 @@ heapster is running at https://104.197.5.247/api/v1/namespaces/kube-system/servi
 
 #### 수작업으로 apiserver proxy URL을 구축
 
-위에서 언급한 것처럼 서비스의 proxy URL을 검색하는데 `kubectl cluster-info` 커맨드를 사용할 수 있다. 서비스 endpoint, 접미사, 매개변수를 포함하는 proxy URL을 생성하려면 해당 서비스에
+위에서 언급한 것처럼 서비스의 proxy URL을 검색하는 데 `kubectl cluster-info` 커맨드를 사용할 수 있다. 서비스 endpoint, 접미사, 매개변수를 포함하는 proxy URL을 생성하려면 해당 서비스에
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`service_name[:port_name]`*`/proxy` 형식의 proxy URL을 덧붙인다.
 
-당신이 port에 이름을 지정하지 않았다면 URL에 *port_name* 을 지정할 필요는 없다.
+당신이 포트에 이름을 지정하지 않았다면 URL에 *port_name* 을 지정할 필요는 없다. 이름이 있는 포트와 이름이 없는 포트 모두에 대하여, *port_name* 이 들어갈 자리에 포트 번호를 기재할 수도 있다.
 
-기본적으로 API server는 http를 사용하여 서비스를 proxy한다. https를 사용하려면 다음과 같이 서비스 네임의 접두사에 `https:`를 붙인다.
+기본적으로 API server는 http를 사용하여 서비스를 프록시한다. https를 사용하려면 다음과 같이 서비스 네임의 접두사에 `https:`를 붙인다.
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`https:service_name:[port_name]`*`/proxy`
 
 URL의 네임 부분에 지원되는 양식은 다음과 같다.
 
-* `<service_name>` - http를 사용하여 기본값 또는 이름이 없는 port로 proxy한다
-* `<service_name>:<port_name>` - http를 사용하여 지정된 port로 proxy한다
-* `https:<service_name>:` - https를 사용하여 기본값 또는 이름이 없는 port로 proxy한다(마지막 콜론:에 주의)
-* `https:<service_name>:<port_name>` - https를 사용하여 지정된 port로 proxy한다
+* `<service_name>` - http를 사용하여 기본값 또는 이름이 없는 포트로 프록시한다.
+* `<service_name>:<port_name>` - http를 사용하여 지정된 포트 이름 또는 포트 번호로 프록시한다.
+* `https:<service_name>:` - https를 사용하여 기본값 또는 이름이 없는 포트로 프록시한다. (마지막 콜론:에 주의)
+* `https:<service_name>:<port_name>` - https를 사용하여 지정된 포트 이름 또는 포트 번호로 프록시한다.
 
 ##### 예제들
 
@@ -326,38 +326,38 @@ URL의 네임 부분에 지원되는 양식은 다음과 같다.
 
 ## 요청 redirect
 
-redirect 기능은 deprecated되고 제거 되었다. 대신 (아래의) proxy를 사용하기를 바란다.
+redirect 기능은 deprecated되고 제거 되었다. 대신 (아래의) 프록시를 사용하기를 바란다.
 
-## 다양한 Proxy들
+## 다양한 프록시들
 
-쿠버네티스를 사용하면서 당신이 접할 수 있는 몇 가지 다른 proxy들이 존재한다.
+쿠버네티스를 사용하면서 당신이 접할 수 있는 몇 가지 다른 프록시들이 존재한다.
 
 1.  [kubectl proxy](#rest-api에-직접-접근):
 
     - 사용자의 데스크탑이나 파드 내에서 실행한다
-    - localhost 주소에서 쿠버네티스 apiserver로 proxy한다
-    - proxy하는 클라이언트는 HTTP를 사용한다
-    - apiserver의 proxy는 HTTPS를 사용한다
+    - localhost 주소에서 쿠버네티스 apiserver로 프록시한다
+    - 프록시하는 클라이언트는 HTTP를 사용한다
+    - apiserver의 프록시는 HTTPS를 사용한다
     - apiserver를 위치지정한다
     - 인증 header들을 추가한다
 
-1.  [apiserver proxy](#빌트인-서비스들의-발견):
+1.  [apiserver proxy](#빌트인-서비스-검색):
 
     - apiserver 내의 빌트인 bastion이다
-    - 다른 방식으로는 연결할 수 없는 클러스터 외부의 사용자를 클러스터 IP들로 연결한다
+    - 다른 방식으로는 연결할 수 없는 클러스터 외부의 사용자를 클러스터 IP로 연결한다
     - apiserver process들 내에서 실행된다
-    - proxy하는 클라이언트는 HTTPS를 사용한다(또는 apiserver가 http로 구성되었다면 http)
-    - 타겟으로의 proxy는 가용정보를 사용하는 proxy에 의해서 HTTP 또는 HTTPS를 사용할 수도 있다
+    - 프록시하는 클라이언트는 HTTPS를 사용한다(또는 apiserver가 http로 구성되었다면 http)
+    - 타겟으로의 프록시는 가용정보를 사용하는 프록시에 의해서 HTTP 또는 HTTPS를 사용할 수도 있다
     - 노드, 파드, 서비스에 접근하는 데 사용될 수 있다
     - 서비스에 접근하는 데 사용되면 load balacing한다
 
 1.  [kube proxy](/ko/docs/concepts/services-networking/service/#ips-and-vips):
 
     - 각 노드 상에서 실행된다
-    - UDP와 TCP를 proxy한다
+    - UDP와 TCP를 프록시한다
     - HTTP를 인지하지 않는다
     - load balancing을 제공한다
-    - 서비스에 접근하는 데만 사용된다
+    - 서비스에 접근하는 데에만 사용된다
 
 1.  apiserver(s) 전면의 Proxy/Load-balancer:
 
diff --git a/content/ko/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md b/content/ko/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
index a6739cc2ea..cc5f872cc5 100644
--- a/content/ko/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
+++ b/content/ko/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
@@ -8,7 +8,7 @@ min-kubernetes-server-version: v1.10
 <!-- overview -->
 
 이 페이지는 `kubectl port-forward` 를 사용해서 쿠버네티스 클러스터 내에서
-실행중인 Redis 서버에 연결하는 방법을 보여준다. 이 유형의 연결은 데이터베이스
+실행중인 MongoDB 서버에 연결하는 방법을 보여준다. 이 유형의 연결은 데이터베이스
 디버깅에 유용할 수 있다.
 
 
@@ -19,25 +19,25 @@ min-kubernetes-server-version: v1.10
 
 * {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-* [redis-cli](http://redis.io/topics/rediscli)를 설치한다.
+* [MongoDB Shell](https://www.mongodb.com/try/download/shell)을 설치한다.
 
 
 
 
 <!-- steps -->
 
-## Redis 디플로이먼트와 서비스 생성하기
+## MongoDB 디플로이먼트와 서비스 생성하기
 
-1. Redis를 실행하기 위해 디플로이먼트를 생성한다.
+1. MongoDB를 실행하기 위해 디플로이먼트를 생성한다.
 
     ```shell
-    kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-deployment.yaml
+    kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-deployment.yaml
     ```
 
     성공적인 명령어의 출력은 디플로이먼트가 생성됐다는 것을 확인해준다.
 
     ```
-    deployment.apps/redis-master created
+    deployment.apps/mongo created
     ```
 
     파드 상태를 조회하여 파드가 준비되었는지 확인한다.
@@ -49,8 +49,8 @@ min-kubernetes-server-version: v1.10
     출력은 파드가 생성되었다는 것을 보여준다.
 
     ```
-    NAME                            READY     STATUS    RESTARTS   AGE
-    redis-master-765d459796-258hz   1/1       Running   0          50s
+    NAME                     READY   STATUS    RESTARTS   AGE
+    mongo-75f59d57f4-4nd6q   1/1     Running   0          2m4s
     ```
 
     디플로이먼트 상태를 조회한다.
@@ -62,64 +62,65 @@ min-kubernetes-server-version: v1.10
     출력은 디플로이먼트가 생성되었다는 것을 보여준다.
 
     ```
-    NAME         READY   UP-TO-DATE   AVAILABLE   AGE
-    redis-master 1/1     1            1           55s
+    NAME    READY   UP-TO-DATE   AVAILABLE   AGE
+    mongo   1/1     1            1           2m21s
     ```
 
+    디플로이먼트는 자동으로 레플리카셋을 관리한다.
     아래의 명령어를 사용하여 레플리카셋 상태를 조회한다.
 
     ```shell
-    kubectl get rs
+    kubectl get replicaset
     ```
 
     출력은 레플리카셋이 생성되었다는 것을 보여준다.
 
     ```
-    NAME                      DESIRED   CURRENT   READY     AGE
-    redis-master-765d459796   1         1         1         1m
+    NAME               DESIRED   CURRENT   READY   AGE
+    mongo-75f59d57f4   1         1         1       3m12s
     ```
 
 
-2. Redis를 네트워크에 노출시키기 위해 서비스를 생성한다.
+2. MongoDB를 네트워크에 노출시키기 위해 서비스를 생성한다.
 
     ```shell
-    kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-service.yaml
+    kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
     ```
 
     성공적인 커맨드의 출력은 서비스가 생성되었다는 것을 확인해준다.
 
     ```
-    service/redis-master created
+    service/mongo created
     ```
 
     서비스가 생성되었는지 확인한다.
 
     ```shell
-    kubectl get svc | grep redis
+    kubectl get service mongo
     ```
 
     출력은 서비스가 생성되었다는 것을 보여준다.
 
     ```
-    NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
-    redis-master   ClusterIP   10.0.0.213   <none>        6379/TCP   27s
+    NAME    TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)     AGE
+    mongo   ClusterIP   10.96.41.183   <none>        27017/TCP   11s
     ```
 
-3. Redis 서버가 파드 안에서 실행되고 있고, 6379번 포트에서 수신하고 있는지 확인한다.
+3. MongoDB 서버가 파드 안에서 실행되고 있고, 27017번 포트에서 수신하고 있는지 확인한다.
 
     ```shell
-    # redis-master-765d459796-258hz 를 파드 이름으로 변경한다.
-    kubectl get pod redis-master-765d459796-258hz --template='{{(index (index .spec.containers 0).ports 0).containerPort}}{{"\n"}}'
+    # mongo-75f59d57f4-4nd6q 를 당신의 파드 이름으로 대체한다.
+    kubectl get pod mongo-75f59d57f4-4nd6q --template='{{(index (index .spec.containers 0).ports 0).containerPort}}{{"\n"}}'
 
     ```
 
-    출력은 파드 내 Redis 포트 번호를 보여준다.
+    출력은 파드 내 MongoDB 포트 번호를 보여준다.
 
     ```
-    6379
+    27017
     ```
 
-    (이 TCP 포트는 Redis가 인터넷에 할당된 것이다).
+    (이는 인터넷 상의 MongoDB에 할당된 TCP 포트이다.)
 
 ## 파드의 포트를 로컬 포트로 포워딩하기
 
@@ -127,39 +128,39 @@ min-kubernetes-server-version: v1.10
 
 
     ```shell
-    # redis-master-765d459796-258hz 를 파드 이름으로 변경한다.
-    kubectl port-forward redis-master-765d459796-258hz 7000:6379
+    # mongo-75f59d57f4-4nd6q 를 당신의 파드 이름으로 대체한다.
+    kubectl port-forward mongo-75f59d57f4-4nd6q 28015:27017
     ```
 
     이것은
 
     ```shell
-    kubectl port-forward pods/redis-master-765d459796-258hz 7000:6379
+    kubectl port-forward pods/mongo-75f59d57f4-4nd6q 28015:27017
     ```
 
     또는
 
     ```shell
-    kubectl port-forward deployment/redis-master 7000:6379
+    kubectl port-forward deployment/mongo 28015:27017
     ```
 
     또는
 
     ```shell
-    kubectl port-forward rs/redis-master 7000:6379
+    kubectl port-forward replicaset/mongo-75f59d57f4 28015:27017
     ```
 
     또는 다음과 같다.
 
     ```shell
-    kubectl port-forward service/redis-master 7000:redis
+    kubectl port-forward service/mongo 28015:27017
     ```
 
     위의 명령어들은 모두 동일하게 동작한다. 이와 유사하게 출력된다.
 
     ```
-    Forwarding from 127.0.0.1:7000 -> 6379
-    Forwarding from [::1]:7000 -> 6379
+    Forwarding from 127.0.0.1:28015 -> 27017
+    Forwarding from [::1]:28015 -> 27017
     ```
 
 {{< note >}}
@@ -168,22 +169,22 @@ min-kubernetes-server-version: v1.10
 
 {{< /note >}}
 
-2.  Redis 커맨드라인 인터페이스를 실행한다.
+2.  MongoDB 커맨드라인 인터페이스를 실행한다.
 
     ```shell
-    redis-cli -p 7000
+    mongosh --port 28015
     ```
 
-3.  Redis 커맨드라인 프롬프트에 `ping` 명령을 입력한다.
+3.  MongoDB 커맨드라인 프롬프트에 `ping` 명령을 입력한다.
 
     ```shell
-    ping
+    db.runCommand( { ping: 1 } )
     ```
 
     성공적인 핑 요청을 반환한다.
 
     ```
-    PONG
+    { ok: 1 }
     ```
 
 ### 선택적으로 _kubectl_ 이 로컬 포트를 선택하게 하기 {#let-kubectl-choose-local-port}
@@ -193,15 +194,15 @@ min-kubernetes-server-version: v1.10
 부담을 줄일 수 있다.
 
 ```shell
-kubectl port-forward deployment/redis-master :6379
+kubectl port-forward deployment/mongo :27017
 ```
 
-`kubectl` 도구는 사용 중이 아닌 로컬 포트 번호를 찾는다. (낮은 포트 번호는
-다른 애플리케이션에서 사용될 것이므로, 낮은 포트 번호를 피해서) 출력은 다음과 같을 것이다.
+`kubectl` 도구는 사용 중이 아닌 로컬 포트 번호를 찾는다 (낮은 포트 번호는
+다른 애플리케이션에서 사용될 것이므로, 낮은 포트 번호를 피해서). 출력은 다음과 같을 것이다.
 
 ```
-Forwarding from 127.0.0.1:62162 -> 6379
-Forwarding from [::1]:62162 -> 6379
+Forwarding from 127.0.0.1:63753 -> 27017
+Forwarding from [::1]:63753 -> 27017
 ```
 
 
@@ -209,7 +210,7 @@ Forwarding from [::1]:62162 -> 6379
 
 ## 토의
 
-로컬 7000 포트에 대한 연결은 Redis 서버가 실행중인 파드의 6379 포트로 포워딩된다.
+로컬 28015 포트에 대한 연결은 MongoDB 서버가 실행중인 파드의 27017 포트로 포워딩된다.
 이 연결로 로컬 워크스테이션에서 파드 안에서 실행 중인 데이터베이스를 디버깅하는데
 사용할 수 있다.
 
diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-services.md b/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
index 5dd7a627d0..8019e46c25 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
@@ -19,22 +19,22 @@ content_type: task
 
 쿠버네티스에서, [노드](/ko/docs/concepts/architecture/nodes/),
 [파드](/ko/docs/concepts/workloads/pods/) 및 [서비스](/ko/docs/concepts/services-networking/service/)는 모두
-고유한 IP를 가진다. 대부분의 경우, 클러스터의 노드 IP, 파드 IP 및 일부 서비스 IP는 라우팅할 수
-없으므로, 데스크톱 시스템과 같은 클러스터 외부 시스템에서
-도달할 수 없다.
+고유한 IP를 가진다. 당신의 데스크탑 PC와 같은 클러스터 외부 장비에서는
+클러스터 상의 노드 IP, 파드 IP, 서비스 IP로 라우팅되지 않아서 
+접근할 수 없을 것이다.
 
 ### 연결하는 방법
 
-클러스터 외부에서 노드, 파드 및 서비스에 연결하기 위한 몇 가지 옵션이 있다.
+클러스터 외부에서 노드, 파드 및 서비스에 접속하기 위한 몇 가지 옵션이 있다.
 
   - 퍼블릭 IP를 통해 서비스에 접근한다.
-    - `NodePort` 또는 `LoadBalancer` 타입의 서비스를 사용하여 해당 서비스를 클러스터 외부에서
-      접근할 수 있게 한다. [서비스](/ko/docs/concepts/services-networking/service/)와
+    - 클러스터 외부에서 접근할 수 있도록 `NodePort` 또는 `LoadBalancer` 타입의
+      서비스를 사용한다. [서비스](/ko/docs/concepts/services-networking/service/)와
       [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) 문서를 참고한다.
-    - 클러스터 환경에 따라, 서비스는 단지 회사 네트워크에 노출되기도 하며,
-      인터넷에 노출되는 경우도 있다. 노출되는 서비스가 안전한지 생각한다.
-      자체 인증을 수행하는가?
-    - 서비스 뒤에 파드를 배치한다. 디버깅과 같은 목적으로 레플리카 집합에서 특정 파드에 접근하려면,
+    - 클러스터 환경에 따라, 서비스는 회사 네트워크에만 노출되기도 하며,
+      인터넷에 노출되는 경우도 있다. 이 경우 노출되는 서비스의 보안 여부를 고려해야 한다.
+      해당 서비스는 자체적으로 인증을 수행하는가?
+    - 파드는 서비스 뒤에 위치시킨다. 디버깅과 같은 목적으로 레플리카 집합에서 특정 파드에 접근하려면,
       파드에 고유한 레이블을 배치하고 이 레이블을 선택하는 새 서비스를 생성한다.
     - 대부분의 경우, 애플리케이션 개발자가 nodeIP를 통해 노드에 직접
       접근할 필요는 없다.
@@ -54,8 +54,8 @@ content_type: task
 
 ### 빌트인 서비스 검색
 
-일반적으로, kube-system에 의해 클러스터에서 시작되는 몇 가지 서비스가 있다. `kubectl cluster-info` 명령을
-사용하여 이들의 목록을 얻는다.
+일반적으로 kube-system에 의해 클러스터에 실행되는 몇 가지 서비스가 있다. 
+`kubectl cluster-info` 커맨드로 이 서비스의 리스트를 볼 수 있다.
 
 ```shell
 kubectl cluster-info
diff --git a/content/ko/docs/tasks/administer-cluster/coredns.md b/content/ko/docs/tasks/administer-cluster/coredns.md
index 6f0caad9e4..414f681901 100644
--- a/content/ko/docs/tasks/administer-cluster/coredns.md
+++ b/content/ko/docs/tasks/administer-cluster/coredns.md
@@ -33,8 +33,8 @@ Kube-dns의 배포나 교체에 관한 매뉴얼은 [CoreDNS GitHub 프로젝트
 ### Kubeadm을 사용해 기존 클러스터 업그레이드하기
 
 쿠버네티스 버전 1.10 이상에서, `kube-dns` 를 사용하는 클러스터를 업그레이드하기 위하여
-`kubeadm` 을 사용할 때 CoreDNS로 이동할 수도 있다. 이 경우, `kubeadm` 은
-`kube-dns` 컨피그맵(ConfigMap)을 기반으로 패더레이션, 스텁 도메인(stub domain), 업스트림 네임 서버의
+`kubeadm` 을 사용할 때 CoreDNS로 전환할 수도 있다. 이 경우, `kubeadm` 은
+`kube-dns` 컨피그맵(ConfigMap)을 기반으로 스텁 도메인(stub domain), 업스트림 네임 서버의
 설정을 유지하며 CoreDNS 설정("Corefile")을 생성한다.
 
 만약 kube-dns에서 CoreDNS로 이동하는 경우, 업그레이드 과정에서 기능 게이트의 `CoreDNS` 값을 `true` 로 설정해야 한다.
@@ -44,8 +44,6 @@ kubeadm upgrade apply v1.11.0 --feature-gates=CoreDNS=true
 ```
 
 쿠버네티스 1.13 이상에서 기능 게이트의 `CoreDNS` 항목은 제거되었으며, CoreDNS가 기본적으로 사용된다.
-업그레이드된 클러스터에서 kube-dns를 사용하려는 경우, [여기](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase#cmd-phase-addon)에 
-설명된 지침 가이드를 참고하자.
 
 1.11 미만 버전일 경우 업그레이드 과정에서 만들어진 파일이 Corefile을 **덮어쓴다**.
 **만약 컨피그맵을 사용자 정의한 경우, 기존의 컨피그맵을 저장해야 한다.** 새 컨피그맵이
@@ -54,26 +52,7 @@ kubeadm upgrade apply v1.11.0 --feature-gates=CoreDNS=true
 만약 쿠버네티스 1.11 이상 버전에서 CoreDNS를 사용하는 경우, 업그레이드 과정에서,
 기존의 Corefile이 유지된다.
 
-
-### Kubeadm을 사용해 CoreDNS가 아닌 kube-dns 설치하기
-
-{{< note >}}
-쿠버네티스 1.11 버전에서, CoreDNS는 GA(General Availability) 되었으며,
-기본적으로 설치된다.
-{{< /note >}}
-
-{{< warning >}}
-쿠버네티스 1.18 버전에서, kubeadm을 통한 kube-dns는 사용 중단되었으며, 향후 버전에서 제거될 예정이다.
-{{< /warning >}}
-
-1.13 보다 이전 버전에서 kube-dns를 설치하는경우, 기능 게이트의 `CoreDNS` 
-값을 `false` 로 변경해야 한다.
-
-```
-kubeadm init --feature-gates=CoreDNS=false
-```
-
-1.13 이후 버전에서는, [여기](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase#cmd-phase-addon)에 설명된 지침 가이드를 참고하자.
+쿠버네티스 버전 1.21에서, kubeadm 의 `kube-dns` 지원 기능이 삭제되었다.
 
 ## CoreDNS 업그레이드하기
 
diff --git a/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md b/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md
index ad76009844..9521bb1ec6 100644
--- a/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md
+++ b/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md
@@ -31,7 +31,7 @@ DNS는 _애드온 관리자_ 인 [클러스터 애드온](http://releases.k8s.io
 CoreDNS 대신 `kube-dns` 를 계속 사용할 수도 있다.
 
 {{< note >}}
-CoreDNS와 kube-dns 서비스 모두 `metadata.name` 필드에 `kube-dns` 로 이름이 지정된다.
+CoreDNS 서비스는 `metadata.name` 필드에 `kube-dns` 로 이름이 지정된다.
 이를 통해, 기존의 `kube-dns` 서비스 이름을 사용하여 클러스터 내부의 주소를 확인하는 워크로드에 대한 상호 운용성이 증가된다. `kube-dns` 로 서비스 이름을 사용하면, 해당 DNS 공급자가 어떤 공통 이름으로 실행되고 있는지에 대한 구현 세부 정보를 추상화한다.
 {{< /note >}}
 
@@ -176,17 +176,14 @@ kube-dns는 스텁 도메인 및 네임서버(예: ns.foo.com)에 대한 FQDN을
 
 CoreDNS는 kube-dns 이상의 기능을 지원한다.
 `StubDomains` 과 `upstreamNameservers` 를 지원하도록 생성된 kube-dns의 컨피그맵은 CoreDNS의 `forward` 플러그인으로 변환된다.
-마찬가지로, kube-dns의 `Federations` 플러그인은 CoreDNS의 `federation` 플러그인으로 변환된다.
 
 ### 예시
 
-kube-dns에 대한 이 컨피그맵 예제는 federations, stubDomains 및 upstreamNameservers를 지정한다.
+kube-dns에 대한 이 컨피그맵 예제는 stubDomains 및 upstreamNameservers를 지정한다.
 
 ```yaml
 apiVersion: v1
 data:
-  federations: |
-    {"foo" : "foo.feddomain.com"}
   stubDomains: |
     {"abc.com" : ["1.2.3.4"], "my.cluster.local" : ["2.3.4.5"]}
   upstreamNameservers: |
@@ -196,13 +193,6 @@ kind: ConfigMap
 
 CoreDNS에서는 동등한 설정으로 Corefile을 생성한다.
 
-* federations 에 대응하는 설정:
-```
-federation cluster.local {
-    foo foo.feddomain.com
-}
-```
-
 * stubDomains 에 대응하는 설정:
 ```yaml
 abc.com:53 {
diff --git a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 487d89379e..3474aee3c2 100644
--- a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -168,7 +168,7 @@ controllerManager:
 
 ### 인증서 서명 요청(CSR) 생성
 
-쿠버네티스 API로 CSR을 작성하려면 [CertificateSigningRequest 생성](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest)을 본다.
+쿠버네티스 API로 CSR을 작성하려면 [CertificateSigningRequest 생성](/docs/reference/access-authn-authz/certificate-signing-requests/#create-certificatesigningrequest)을 본다.
 
 ## 외부 CA로 인증서 갱신
 
diff --git a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
index bf70b98e93..2227c49c9e 100644
--- a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
+++ b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
@@ -37,7 +37,7 @@ weight: 20
 
 ### 추가 정보
 
-- kubelet 마이너 버전을 업그레이드하기 전에 [노드 드레이닝(draining)](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/)이
+- kubelet 마이너 버전을 업그레이드하기 전에 [노드 드레이닝(draining)](/docs/tasks/administer-cluster/safely-drain-node/)이
   필요하다. 컨트롤 플레인 노드의 경우 CoreNDS 파드 또는 기타 중요한 워크로드를 실행할 수 있다.
 - 컨테이너 사양 해시 값이 변경되므로, 업그레이드 후 모든 컨테이너가 다시 시작된다.
 
@@ -328,7 +328,7 @@ etcd 업그레이드가 실패하고 자동 롤백이 작동하지 않으면, 
 - 컨트롤 플레인 이미지가 사용 가능한지 또는 머신으로 가져올 수 있는지 확인한다.
 - 컴포넌트 구성에 버전 업그레이드가 필요한 경우 대체 구성을 생성하거나 사용자가 제공한 것으로 덮어 쓰기한다.
 - 컨트롤 플레인 컴포넌트 또는 롤백 중 하나라도 나타나지 않으면 업그레이드한다.
-- 새로운 `kube-dns` 와 `kube-proxy` 매니페스트를 적용하고 필요한 모든 RBAC 규칙이 생성되도록 한다.
+- 새로운 `CoreDNS` 와 `kube-proxy` 매니페스트를 적용하고 필요한 모든 RBAC 규칙이 생성되도록 한다.
 - API 서버의 새 인증서와 키 파일을 작성하고 180일 후에 만료될 경우 이전 파일을 백업한다.
 
 `kubeadm upgrade node` 는 추가 컨트롤 플레인 노드에서 다음을 수행한다.
diff --git a/content/ko/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md b/content/ko/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md
index bee3c94069..25abb14314 100644
--- a/content/ko/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md
+++ b/content/ko/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy.md
@@ -18,7 +18,7 @@ weight: 10
 
 **사전요구사항**: [gcloud](https://cloud.google.com/sdk/docs/quickstarts).
 
-1.  캘리코로 GKE 클러스터를 시작하려면, `--enable-network-policy` 플래그를 추가하면 된다.
+1.  캘리코로 GKE 클러스터를 시작하려면, `--enable-network-policy` 플래그를 추가한다.
 
     **문법**
     ```shell
diff --git a/content/ko/docs/tasks/configure-pod-container/static-pod.md b/content/ko/docs/tasks/configure-pod-container/static-pod.md
index 4daf739c2f..aea2fcffa1 100644
--- a/content/ko/docs/tasks/configure-pod-container/static-pod.md
+++ b/content/ko/docs/tasks/configure-pod-container/static-pod.md
@@ -31,21 +31,14 @@ API 서버에서 제어될 수는 없다.
 을 사용하는 것이 바람직하다.
 {{< /note >}}
 
-
-
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 이 페이지는 파드를 실행하기 위해 {{< glossary_tooltip term_id="docker" >}}를 사용하며,
 노드에서 Fedora 운영 체제를 구동하고 있다고 가정한다.
 다른 배포판이나 쿠버네티스 설치 지침과는 다소 상이할 수 있다.
 
-
-
-
-
 <!-- steps -->
 
 ## 스태틱 파드 생성하기 {#static-pod-creation}
@@ -54,7 +47,9 @@ API 서버에서 제어될 수는 없다.
 
 ### 파일시스템이 호스팅 하는 스태틱 파드 매니페스트 {#configuration-files}
 
-매니페스트는 특정 디렉터리에 있는 JSON 이나 YAML 형식의 표준 파드 정의이다. [kubelet 구성 파일](/docs/tasks/administer-cluster/kubelet-config-file)의 `staticPodPath: <the directory>` 필드를 사용하자. 이 디렉터리를 정기적으로 스캔하여, 디렉터리 안의 YAML/JSON 파일이 생성되거나 삭제되었을 때 스태틱 파드를 생성하거나 삭제한다.
+매니페스트는 특정 디렉터리에 있는 JSON 이나 YAML 형식의 표준 파드 정의이다. 
+[kubelet 구성 파일](/docs/reference/config-api/kubelet-config.v1beta1/)의 `staticPodPath: <the directory>` 필드를 사용하자. 
+명시한 디렉터리를 정기적으로 스캔하여, 디렉터리 안의 YAML/JSON 파일이 생성되거나 삭제되었을 때 스태틱 파드를 생성하거나 삭제한다.
 Kubelet 이 특정 디렉터리를 스캔할 때 점(.)으로 시작하는 단어를 무시한다는 점을 유의하자.
 
 예를 들어, 다음은 스태틱 파드로 간단한 웹 서버를 구동하는 방법을 보여준다.
@@ -90,17 +85,18 @@ Kubelet 이 특정 디렉터리를 스캔할 때 점(.)으로 시작하는 단
 
 3. 노드에서 kubelet 실행 시에 `--pod-manifest-path=/etc/kubelet.d/` 와 같이 인자를 제공하여 해당 디렉터리를 사용하도록 구성한다. Fedora 의 경우 이 줄을 포함하기 위하여 `/etc/kubernetes/kubelet` 파일을 다음과 같이 수정한다.
 
-    ```
-    KUBELET_ARGS="--cluster-dns=10.254.0.10 --cluster-domain=kube.local --pod-manifest-path=/etc/kubelet.d/"
-    ```
-    혹은 [kubelet 구성 파일](/docs/tasks/administer-cluster/kubelet-config-file)에 `staticPodPath: <the directory>` 필드를 추가한다.
+   ```
+   KUBELET_ARGS="--cluster-dns=10.254.0.10 --cluster-domain=kube.local --pod-manifest-path=/etc/kubelet.d/"
+   ```
+   혹은 [kubelet 구성 파일](/docs/reference/config-api/kubelet-config.v1beta1/)에 
+   `staticPodPath: <the directory>` 필드를 추가한다.
 
 4. kubelet을 재시작한다. Fedora의 경우 아래와 같이 수행한다.
 
-    ```shell
-    # kubelet 이 동작하고 있는 노드에서 이 명령을 수행한다.
-    systemctl restart kubelet
-    ```
+   ```shell
+   # kubelet 이 동작하고 있는 노드에서 이 명령을 수행한다.
+   systemctl restart kubelet
+   ```
 
 ### 웹이 호스팅 하는 스태틱 파드 매니페스트 {#pods-created-via-http}
 
diff --git a/content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md b/content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
index 2c7a95a136..f8696993ff 100644
--- a/content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
+++ b/content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
@@ -57,7 +57,7 @@ kubectl describe pods ${POD_NAME}
   절대 스케줄 될 수 없다.
 
 	사용자는 `kubectl get nodes -o <format>` 명령으로 노드의
-	용량을 점검할 수 있다. 다음은 필요한 정보만을 추출하는 몇 가지
+	용량을 점검할 수 있다. 다음은 필요한 정보를 추출하는 몇 가지
 	명령의 예이다.
 
     ```shell
diff --git a/content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md
index e2b1435464..4addcdcfaf 100644
--- a/content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -1,12 +1,16 @@
 ---
 title: 크론잡(CronJob)으로 자동화된 작업 실행
-min-kubernetes-server-version: v1.8
+min-kubernetes-server-version: v1.21
 content_type: task
 weight: 10
 ---
 
 <!-- overview -->
 
+쿠버네티스 버전 1.21에서 {{< glossary_tooltip text="크론잡" term_id="cronjob" >}}이 GA (General Availability)로 승격되었다.
+이전 버전의 쿠버네티스를 사용하고 있다면, 해당 쿠버네티스 버전의 문서를 참고하여 정확한 정보를 확인할 수 있다.
+이전 버전의 쿠버네티스는 `batch/v1` 크론잡 API를 지원하지 않는다.
+
 시간 기반의 스케줄에 따라 {{< glossary_tooltip text="크론잡" term_id="cronjob" >}}을 이용해서 {{< glossary_tooltip text="잡(Job)" term_id="job" >}}을 실행할 수 있다.
 이러한 자동화된 잡은 리눅스 또는 유닉스 시스템에서 [크론](https://ko.wikipedia.org/wiki/Cron) 작업처럼 실행된다.
 
@@ -168,13 +172,11 @@ kubectl delete cronjob hello
 이러한 방식으로 기한을 맞추지 못한 잡은 실패한 작업으로 간주된다.
 이 필드를 지정하지 않으면, 잡에 기한이 없다.
 
-크론잡 컨트롤러는 크론 잡에 대해 얼마나 많은 스케줄이 누락되었는지를 계산한다. 누락된 스케줄이 100개를 초과 한다면, 크론 잡은 더이상 스케줄되지 않는다. `.spec.startingDeadlineSeconds` 이 설정되지 않았다면, 크론잡 컨트롤러는 `status.lastScheduleTime` 부터 지금까지 누락된 스케줄을 계산한다.
+`.spec.startingDeadlineSeconds` 필드가 (null이 아닌 값으로) 설정되어 있다면, 
+크론잡 컨트롤러는 잡 생성 완료 예상 시각과 현재 시각의 차이를 측정하고, 
+시각 차이가 설정한 값보다 커지면 잡 생성 동작을 스킵한다.
 
-예를 들어, 하나의 크론 잡이 1분마다 실행되도록 설정되어 있고, 크론잡의 `status.lastScheduleTime` 은 새벽 5:00시이지만, 지금은 오전 7:00시라고 가정하자. 즉 120개의 스케줄이 누락되었다는 것이고, 그래서 크론 잡은 더이상 스케줄되지 않는다.
-
-`.spec.startingDeadlineSeconds` 필드가 (null이 아닌) 값으로 설정되어 있다면, 크론잡 컨트롤러는 `.spec.startingDeadlineSeconds` 의 값으로부터 지금까지 얼마나 많은 잡이 누락되었는지를 계산한다.
-
-예를 들어, `200` 으로 설정되었다면, 지난 200초 동안 누락된 스케줄이 몇 번 발생했는지 계산한다. 이 경우, 지난 200초 동안 누락된 스케줄이 100개가 넘으면, 크론 잡이 더이상 스케줄되지 않는다.
+예를 들어, `200` 으로 설정되었다면, 잡 생성 완료 예상 시각으로부터 200초까지는 잡이 생성될 수 있다.
 
 ### 동시성 정책
 
diff --git a/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md b/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md
index fa765a7005..bd8bf38808 100644
--- a/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md
+++ b/content/ko/docs/tasks/job/coarse-parallel-processing-work-queue.md
@@ -2,7 +2,7 @@
 title: 작업 대기열을 사용한 거친 병렬 처리
 min-kubernetes-server-version: v1.8
 content_type: task
-weight: 30
+weight: 20
 ---
 
 
@@ -19,7 +19,7 @@ weight: 30
 1. **메시지 대기열 서비스를 시작한다.** 이 예에서는, RabbitMQ를 사용하지만, 다른 메시지 대기열을 이용해도
    된다. 실제로 사용할 때는, 한 번 메시지 대기열 서비스를 구축하고서 이를 여러 잡을 위해 재사용하기도 한다.
 1. **대기열을 만들고, 메시지로 채운다.** 각 메시지는 수행할 하나의 작업을 나타낸다. 
-   이 예제에서, 메시지는 긴 계산을 수행할 정수일 뿐이다.
+   이 예제에서, 메시지는 긴 계산을 수행할 정수다.
 1. **대기열에서 작업을 수행하는 잡을 시작한다.**  잡은 여러 파드를 시작한다. 각 파드는
    메시지 대기열에서 하나의 작업을 가져와서, 처리한 다음, 대기열이 비워질 때까지 반복한다.
 
@@ -141,13 +141,12 @@ root@temp-loe07:/#
 ```
 
 마지막 커맨드에서, `amqp-consume` 도구는 대기열로부터 하나의 메시지를
-받고(`-c 1`), 그 메시지를 임의의 명령 표준입력으로 전달한다. 이 경우에는, `cat` 프로그램이 표준입력으로부터
-받은 값을 바로 출력하고 있고,  echo가 캐리지 리턴을 더해주어
+받고(`-c 1`), 그 메시지를 임의의 명령 표준입력으로 전달한다. 이 경우에는, `cat` 프로그램이 표준입력으로부터 받은 값을 출력하고, echo가 캐리지 리턴을 더해주어
 출력 결과가 보여진다.
 
 ## 작업으로 대기열 채우기
 
-이제 몇 가지 "작업"으로 대기열을 채운다. 이 예제에서의 작업은 간단히 문자열을
+이제 몇 가지 "작업"으로 대기열을 채운다. 이 예제에서의 작업은 문자열을
 출력하는 것이다.
 
 실제로 사용할 때는, 메시지의 내용이 다음과 같을 수 있다. 
diff --git a/content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md b/content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md
index 8788477c17..b85f687df7 100644
--- a/content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md
+++ b/content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md
@@ -2,7 +2,7 @@
 title: 작업 대기열을 사용한 정밀 병렬 처리
 content_type: task
 min-kubernetes-server-version: v1.8
-weight: 40
+weight: 30
 ---
 
 <!-- overview -->
@@ -21,7 +21,7 @@ weight: 40
    않기 때문에 Redis 및 사용자 지정의 작업 대기열 클라이언트 라이브러리를 사용한다. 실제로는
    Redis와 같은 저장소를 한 번 설정하고 여러 작업과 다른 것들의 작업 대기열로 재사용한다.
 1. **대기열을 만들고, 메시지로 채운다.**  각 메시지는 수행할 하나의 작업을 나타낸다. 이
-   예에서, 메시지는 긴 계산을 수행할 정수일 뿐이다.
+   예에서, 메시지는 긴 계산을 수행할 정수다.
 1. **대기열에서 작업을 수행하는 잡을 시작한다.**  잡은 여러 파드를 시작한다. 각 파드는
    메시지 대기열에서 하나의 작업을 가져와서, 처리한 다음, 대기열이 비워질 때까지 반복한다.
 

From cb99b9d6c06d257f53f5e659d006f204112c5066 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Thu, 22 Apr 2021 14:57:52 +0800
Subject: [PATCH 640/788] [zh] Sync
 content/en/docs/reference/using-api/deprecation-policy.md and fix
 deprecation-policy typo

---
 .../reference/using-api/deprecation-policy.md | 82 ++++++++++++++++++-
 1 file changed, 79 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/reference/using-api/deprecation-policy.md b/content/zh/docs/reference/using-api/deprecation-policy.md
index 84e2137528..27c2a5b636 100644
--- a/content/zh/docs/reference/using-api/deprecation-policy.md
+++ b/content/zh/docs/reference/using-api/deprecation-policy.md
@@ -45,7 +45,7 @@ into 3 main tracks, each of which has different policies for deprecation:
 ## 弃用 API 的一部分  {#deprecating-parts-of-the-api}
 
 由于 Kubernetes 是一个 API 驱动的系统，API 会随着时间推移而演化，以反映
-人们对问题共建的认识的变化。Kubernetes API 实际上是一个 API 集合，其中每个
+人们对问题空间的认识的变化。Kubernetes API 实际上是一个 API 集合，其中每个
 成员称作“API 组（API Group）”，并且每个 API 组都是独立管理版本的。
 [API 版本](/zh/docs/reference/using-api/#api-versioning)会有
 三类，每类有不同的废弃策略：
@@ -448,7 +448,7 @@ Starting in Kubernetes v1.19, making an API request to a deprecated REST API end
 
 1. Returns a `Warning` header (as defined in [RFC7234, Section 5.5](https://tools.ietf.org/html/rfc7234#section-5.5)) in the API response.
 2. Adds a `"k8s.io/deprecated":"true"` annotation to the [audit event](/docs/tasks/debug-application-cluster/audit/) recorded for the request.
-3. Sets an `apiserver_requested_deprecated_apis` gauge metric to `1` in the `kube-apiserver` 
+3. Sets an `apiserver_requested_deprecated_apis` gauge metric to `1` in the `kube-apiserver`
    process. The metric has labels for `group`, `version`, `resource`, `subresource` that can be joined
    to the `apiserver_request_total` metric, and a `removed_release` label that indicates the
    Kubernetes release in which the API will no longer be served. The following Prometheus query
@@ -510,7 +510,7 @@ supported in API v1 must exist and function until API v1 is removed.
 <!--
 ### Component config structures
 
-Component configs are versioned and managed just like REST resources.
+Component configs are versioned and managed similar to REST resources.
 -->
 ### 组件配置结构  {#component-config-structures}
 
@@ -715,6 +715,82 @@ Both warnings and documentation must indicate whether a feature gate is non-oper
 弃用时，必须在发布说明和对应的 CLI 帮助信息中通过文档宣布。
 警告信息和文档都要标明是否某特性门控不再起作用。**
 
+<!--
+## Deprecating a metric
+
+Each component of the Kubernetes control-plane exposes metrics (usually the
+`/metrics` endpoint), which are typically ingested by cluster administrators.
+Not all metrics are the same: some metrics are commonly used as SLIs or used
+to determine SLOs, these tend to have greater import. Other metrics are more
+experimental in nature or are used primarily in the Kubernetes development
+process.
+
+Accordingly, metrics fall under two stability classes (`ALPHA` and `STABLE`);
+this impacts removal of a metric during a Kubernetes release. These classes
+are determined by the perceived importance of the metric. The rules for
+deprecating and removing a metric are as follows:
+-->
+
+### 弃用度量值    {#Deprecating a metric}
+
+Kubernetes 控制平面的每个组件都公开度量值（通常是 `/metrics` 端点），它们通常由集群管理员使用。
+并不是所有的度量值都是同样重要的：一些度量值通常用作 SLIs 或被使用来确定 SLOs，这些往往比较重要。
+其他度量值在本质上带有实验性，或者主要用于 Kubernetes 开发过程。
+
+因此，度量值分为两个稳定性类别（`ALPHA` 和 `STABLE`）;
+此分类会影响在 Kubernetes 发布版本中移除某度量值。
+所对应的分类取决于对该度量值重要性的预期。
+弃用和移除度量值的规则如下：
+
+<!--
+**Rule #9a: Metrics, for the corresponding stability class, must function for no less than:**
+
+   * **STABLE: 4 releases or 12 months (whichever is longer)**
+   * **ALPHA: 0 releases**
+
+**Rule #9b: Metrics, after their _announced deprecation_, must function for no less than:**
+
+   * **STABLE: 3 releases or 9 months (whichever is longer)**
+   * **ALPHA: 0 releases**
+-->
+**规则 #9a: 对于相应的稳定性类别，度量值起作用的周期必须不小于：**
+
+   * **STABLE: 4 个发布版本或者 12 个月 (取其较长者)**
+   * **ALPHA: 0 个发布版本**
+
+**规则 #9b: 在度量值被宣布启用之后，它起作用的周期必须不小于：**
+
+   * **STABLE: 3 个发布版本或者 9 个月 (取其较长者)**
+   * **ALPHA: 0 个发布版本**
+
+<!--
+Deprecated metrics will have their description text prefixed with a deprecation notice
+string '(Deprecated from x.y)' and a warning log will be emitted during metric
+registration. Like their stable undeprecated counterparts, deprecated metrics will
+be automatically registered to the metrics endpoint and therefore visible.
+
+On a subsequent release (when the metric's `deprecatedVersion` is equal to
+_current_kubernetes_version - 3_)), a deprecated metric will become a _hidden_ metric.
+**_Unlike_** their deprecated counterparts, hidden metrics will _no longer_ be
+automatically registered to the metrics endpoint (hence hidden). However, they
+can be explicitly enabled through a command line flag on the binary
+(`--show-hidden-metrics-for-version=`). This provides cluster admins an
+escape hatch to properly migrate off of a deprecated metric, if they were not
+able to react to the earlier deprecation warnings. Hidden metrics should be
+deleted after one release.
+-->
+已弃用的度量值将在其描述文本前加上一个已弃用通知字符串 '(Deprecated from x.y)'，
+并将在度量值被记录期间发出警告日志。就像稳定的、未被弃用的度量指标一样，
+被弃用的度量值将自动注册到 metrics 端点，因此被弃用的度量值也是可见的。
+
+在随后的版本中（当度量值 `deprecatedVersion` 等于_当前 Kubernetes 版本 - 3_），
+被弃用的度量值将变成 _隐藏（Hidden）_ metric 度量值。
+与被弃用的度量值不同，隐藏的度量值将不再被自动注册到 metrics 端点（因此被隐藏）。
+但是，它们可以通过可执行文件的命令行标志显式启用（`--show-hidden-metrics-for-version=`）。
+
+如果集群管理员不能对早期的弃用警告作出反应，这一设计就为他们提供了抓紧迁移弃用度量值的途径。
+隐藏的度量值应该在再过一个发行版本后被删除。
+
 <!--
 ## Exceptions
 

From e225ab37c5f19a209f627cc929b776db6a0af795 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Mon, 26 Apr 2021 11:26:16 +0800
Subject: [PATCH 641/788] [zh] Sync
 content/en/docs/concepts/configuration/overview.md

---
 .../zh/docs/concepts/configuration/overview.md   | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/zh/docs/concepts/configuration/overview.md b/content/zh/docs/concepts/configuration/overview.md
index 7f6cf8826a..a6c9811d20 100644
--- a/content/zh/docs/concepts/configuration/overview.md
+++ b/content/zh/docs/concepts/configuration/overview.md
@@ -151,7 +151,7 @@ DNS server watches the Kubernetes API for new `Services` and creates a set of DN
 
 <!--
 - Use [headless Services](/docs/concepts/services-networking/service/#headless-
-services) (which have a `ClusterIP` of `None`) for easy service discovery when you don't need `kube-proxy` load balancing.
+services) (which have a `ClusterIP` of `None`) for service discovery when you don't need `kube-proxy` load balancing.
 -->
 - 当您不需要 `kube-proxy` 负载均衡时，使用
   [无头服务](/zh/docs/concepts/services-networking/service/#headless-services)  
@@ -175,7 +175,7 @@ services) (which have a `ClusterIP` of `None`) for easy service discovery when y
 A Service can be made to span multiple Deployments by omitting release-specific labels from its selector. [Deployments](/docs/concepts/workloads/controllers/deployment/) make it easy to update a running service without downtime.
 -->
 通过从选择器中省略特定发行版的标签，可以使服务跨越多个 Deployment。
-[Deployment](/zh/docs/concepts/workloads/controllers/deployment/) 可以在不停机的情况下轻松更新正在运行的服务。
+当你需要不停机的情况下更新正在运行的服务，可以使用[Deployment](/zh/docs/concepts/workloads/controllers/deployment/)。
 
 <!--
 A desired state of an object is described by a Deployment, and if changes to that spec are _applied_, the deployment controller changes the actual state to the desired state at a controlled rate.
@@ -216,14 +216,14 @@ The [imagePullPolicy](/docs/concepts/containers/images/#updating-images) and the
 <!--
 - `imagePullPolicy: IfNotPresent`: the image is pulled only if it is not already present locally.
 - `imagePullPolicy: Always`: the image is pulled every time the pod is started.
-- `imagePullPolicy` is omitted and either the image tag is `:latest` or it is omitted: `Always` is applied.
-- `imagePullPolicy` is omitted and the image tag is present but not `:latest`: `IfNotPresent` is applied.
+- `imagePullPolicy` is omitted and either the image tag is `:latest` or it is omitted: `imagePullPolicy` is automatically set to `Always`. Note that this will _not_ be updated to `IfNotPresent` if the tag changes value.
+- `imagePullPolicy` is omitted and the image tag is present but not `:latest`: `imagePullPolicy` is automatically set to `IfNotPresent`. Note that this will _not_ be updated to `Always` if the tag is later removed or changed to `:latest`.
 - `imagePullPolicy: Never`: the image is assumed to exist locally. No attempt is made to pull the image.
 -->
 - `imagePullPolicy: IfNotPresent`：仅当镜像在本地不存在时才被拉取。
 - `imagePullPolicy: Always`：每次启动 Pod 的时候都会拉取镜像。
-- `imagePullPolicy` 省略时，镜像标签为 `:latest` 或不存在，使用 `Always` 值。
-- `imagePullPolicy` 省略时，指定镜像标签并且不是 `:latest`，使用 `IfNotPresent` 值。
+- `imagePullPolicy` 省略时，镜像标签为 `:latest` 或不存在，其值自动被设置为 `Always`。注意，如果镜像标签的值发生改变，`imagePullPolicy` 的值不会被更新为 `IfNotPresent`。
+- `imagePullPolicy` 省略时，指定镜像标签并且不是 `:latest`，其值自动被设置为 `IfNotPresent`。注意，如果镜像标签的值之后被移除或者修改为 `latest`，`imagePullPolicy` 的值不会被更新为 `Always`。
 - `imagePullPolicy: Never`：假设镜像已经存在本地，不会尝试拉取镜像。
 
 <!--
@@ -244,10 +244,10 @@ You should avoid using the `:latest` tag when deploying containers in production
 {{< /note >}}
 
 <!--
-The caching semantics of the underlying image provider make even `imagePullPolicy: Always` efficient. With Docker, for example, if the image already exists, the pull attempt is fast because all image layers are cached and no image download is needed.
+The caching semantics of the underlying image provider make even `imagePullPolicy: Always` efficient, as long as the registry is reliably accessible. With Docker, for example, if the image already exists, the pull attempt is fast because all image layers are cached and no image download is needed.
 -->
 {{< note >}}
-底层镜像驱动程序的缓存语义能够使即便 `imagePullPolicy: Always` 的配置也很高效。
+只要镜像仓库是可访问的，底层镜像驱动程序的缓存语义能够使即便 `imagePullPolicy: Always` 的配置也很高效。
 例如，对于 Docker，如果镜像已经存在，则拉取尝试很快，因为镜像层都被缓存并且不需要下载。
 {{< /note >}}
 

From f0f5efe4f437295f10b8518a8ddcbc873a458f5b Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Mon, 26 Apr 2021 12:11:00 +0800
Subject: [PATCH 642/788] [zh] Resync kubeadm files (2)

---
 .../config-api/kube-proxy-config.v1alpha1.md  |  601 ++++++
 .../config-api/kubelet-config.v1beta1.md      | 1604 +++++++++++++++++
 .../kubeadm/implementation-details.md         |   72 +-
 .../setup-tools/kubeadm/kubeadm-alpha.md      |   41 +-
 .../setup-tools/kubeadm/kubeadm-init-phase.md |   69 +-
 .../setup-tools/kubeadm/kubeadm-init.md       |   18 +-
 .../setup-tools/kubeadm/kubeadm-join.md       |  132 +-
 .../setup-tools/kubeadm/kubeadm-upgrade.md    |   34 +-
 8 files changed, 2368 insertions(+), 203 deletions(-)
 create mode 100644 content/zh/docs/reference/config-api/kube-proxy-config.v1alpha1.md
 create mode 100644 content/zh/docs/reference/config-api/kubelet-config.v1beta1.md

diff --git a/content/zh/docs/reference/config-api/kube-proxy-config.v1alpha1.md b/content/zh/docs/reference/config-api/kube-proxy-config.v1alpha1.md
new file mode 100644
index 0000000000..86315856b2
--- /dev/null
+++ b/content/zh/docs/reference/config-api/kube-proxy-config.v1alpha1.md
@@ -0,0 +1,601 @@
+---
+title: kube-proxy Configuration (v1alpha1)
+content_type: tool-reference
+package: kubeproxy.config.k8s.io/v1alpha1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+  
+    
+
+
+## `KubeProxyConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration}
+    
+
+
+
+
+KubeProxyConfiguration contains everything necessary to configure the
+Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubeproxy.config.k8s.io/v1alpha1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>KubeProxyConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td><code>featureGates</code> <B>[Required]</B><br/>
+<code>map[string]bool</code>
+</td>
+<td>
+   featureGates is a map of feature names to bools that enable or disable alpha/experimental features.</td>
+</tr>
+    
+  
+<tr><td><code>bindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   bindAddress is the IP address for the proxy server to serve on (set to 0.0.0.0
+for all interfaces)</td>
+</tr>
+    
+  
+<tr><td><code>healthzBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   healthzBindAddress is the IP address and port for the health check server to serve on,
+defaulting to 0.0.0.0:10256</td>
+</tr>
+    
+  
+<tr><td><code>metricsBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   metricsBindAddress is the IP address and port for the metrics server to serve on,
+defaulting to 127.0.0.1:10249 (set to 0.0.0.0 for all interfaces)</td>
+</tr>
+    
+  
+<tr><td><code>bindAddressHardFail</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   bindAddressHardFail, if true, kube-proxy will treat failure to bind to a port as fatal and exit</td>
+</tr>
+    
+  
+<tr><td><code>enableProfiling</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableProfiling enables profiling via web interface on /debug/pprof handler.
+Profiling handlers will be handled by metrics server.</td>
+</tr>
+    
+  
+<tr><td><code>clusterCIDR</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   clusterCIDR is the CIDR range of the pods in the cluster. It is used to
+bridge traffic coming from outside of the cluster. If not provided,
+no off-cluster bridging will be performed.</td>
+</tr>
+    
+  
+<tr><td><code>hostnameOverride</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   hostnameOverride, if non-empty, will be used as the identity instead of the actual hostname.</td>
+</tr>
+    
+  
+<tr><td><code>clientConnection</code> <B>[Required]</B><br/>
+<a href="#ClientConnectionConfiguration"><code>ClientConnectionConfiguration</code></a>
+</td>
+<td>
+   clientConnection specifies the kubeconfig file and client connection settings for the proxy
+server to use when communicating with the apiserver.</td>
+</tr>
+    
+  
+<tr><td><code>iptables</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPTablesConfiguration"><code>KubeProxyIPTablesConfiguration</code></a>
+</td>
+<td>
+   iptables contains iptables-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>ipvs</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPVSConfiguration"><code>KubeProxyIPVSConfiguration</code></a>
+</td>
+<td>
+   ipvs contains ipvs-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>oomScoreAdj</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   oomScoreAdj is the oom-score-adj value for kube-proxy process. Values must be within
+the range [-1000, 1000]</td>
+</tr>
+    
+  
+<tr><td><code>mode</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-ProxyMode"><code>ProxyMode</code></a>
+</td>
+<td>
+   mode specifies which proxy mode to use.</td>
+</tr>
+    
+  
+<tr><td><code>portRange</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   portRange is the range of host ports (beginPort-endPort, inclusive) that may be consumed
+in order to proxy service traffic. If unspecified (0-0) then ports will be randomly chosen.</td>
+</tr>
+    
+  
+<tr><td><code>udpIdleTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   udpIdleTimeout is how long an idle UDP connection will be kept open (e.g. '250ms', '2s').
+Must be greater than 0. Only applicable for proxyMode=userspace.</td>
+</tr>
+    
+  
+<tr><td><code>conntrack</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConntrackConfiguration"><code>KubeProxyConntrackConfiguration</code></a>
+</td>
+<td>
+   conntrack contains conntrack-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>configSyncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   configSyncPeriod is how often configuration from the apiserver is refreshed. Must be greater
+than 0.</td>
+</tr>
+    
+  
+<tr><td><code>nodePortAddresses</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   nodePortAddresses is the --nodeport-addresses value for kube-proxy process. Values must be valid
+IP blocks. These values are as a parameter to select the interfaces where nodeport works.
+In case someone would like to expose a service on localhost for local visit and some other interfaces for
+particular purpose, a list of IP blocks would do that.
+If set it to "127.0.0.0/8", kube-proxy will only select the loopback interface for NodePort.
+If set it to a non-zero IP block, kube-proxy will filter that down to just the IPs that applied to the node.
+An empty string slice is meant to select all network interfaces.</td>
+</tr>
+    
+  
+<tr><td><code>winkernel</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-KubeProxyWinkernelConfiguration"><code>KubeProxyWinkernelConfiguration</code></a>
+</td>
+<td>
+   winkernel contains winkernel-related configuration options.</td>
+</tr>
+    
+  
+<tr><td><code>showHiddenMetricsForVersion</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ShowHiddenMetricsForVersion is the version for which you want to show hidden metrics.</td>
+</tr>
+    
+  
+<tr><td><code>detectLocalMode</code> <B>[Required]</B><br/>
+<a href="#kubeproxy-config-k8s-io-v1alpha1-LocalMode"><code>LocalMode</code></a>
+</td>
+<td>
+   DetectLocalMode determines mode to use for detecting local traffic, defaults to LocalModeClusterCIDR</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyConntrackConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConntrackConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyConntrackConfiguration contains conntrack settings for
+the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>maxPerCore</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   maxPerCore is the maximum number of NAT connections to track
+per CPU core (0 to leave the limit as-is and ignore min).</td>
+</tr>
+    
+  
+<tr><td><code>min</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   min is the minimum value of connect-tracking records to allocate,
+regardless of conntrackMaxPerCore (set maxPerCore=0 to leave the limit as-is).</td>
+</tr>
+    
+  
+<tr><td><code>tcpEstablishedTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpEstablishedTimeout is how long an idle TCP connection will be kept open
+(e.g. '2s').  Must be greater than 0 to set.</td>
+</tr>
+    
+  
+<tr><td><code>tcpCloseWaitTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpCloseWaitTimeout is how long an idle conntrack entry
+in CLOSE_WAIT state will remain in the conntrack
+table. (e.g. '60s'). Must be greater than 0 to set.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyIPTablesConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPTablesConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyIPTablesConfiguration contains iptables-related configuration
+details for the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>masqueradeBit</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   masqueradeBit is the bit of the iptables fwmark space to use for SNAT if using
+the pure iptables proxy mode. Values must be within the range [0, 31].</td>
+</tr>
+    
+  
+<tr><td><code>masqueradeAll</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   masqueradeAll tells kube-proxy to SNAT everything if using the pure iptables proxy mode.</td>
+</tr>
+    
+  
+<tr><td><code>syncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   syncPeriod is the period that iptables rules are refreshed (e.g. '5s', '1m',
+'2h22m').  Must be greater than 0.</td>
+</tr>
+    
+  
+<tr><td><code>minSyncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   minSyncPeriod is the minimum period that iptables rules are refreshed (e.g. '5s', '1m',
+'2h22m').</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyIPVSConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyIPVSConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyIPVSConfiguration contains ipvs-related configuration
+details for the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>syncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   syncPeriod is the period that ipvs rules are refreshed (e.g. '5s', '1m',
+'2h22m').  Must be greater than 0.</td>
+</tr>
+    
+  
+<tr><td><code>minSyncPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   minSyncPeriod is the minimum period that ipvs rules are refreshed (e.g. '5s', '1m',
+'2h22m').</td>
+</tr>
+    
+  
+<tr><td><code>scheduler</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ipvs scheduler</td>
+</tr>
+    
+  
+<tr><td><code>excludeCIDRs</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   excludeCIDRs is a list of CIDR's which the ipvs proxier should not touch
+when cleaning up ipvs services.</td>
+</tr>
+    
+  
+<tr><td><code>strictARP</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   strict ARP configure arp_ignore and arp_announce to avoid answering ARP queries
+from kube-ipvs0 interface</td>
+</tr>
+    
+  
+<tr><td><code>tcpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpTimeout is the timeout value used for idle IPVS TCP sessions.
+The default value is 0, which preserves the current timeout value on the system.</td>
+</tr>
+    
+  
+<tr><td><code>tcpFinTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   tcpFinTimeout is the timeout value used for IPVS TCP sessions after receiving a FIN.
+The default value is 0, which preserves the current timeout value on the system.</td>
+</tr>
+    
+  
+<tr><td><code>udpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   udpTimeout is the timeout value used for IPVS UDP packets.
+The default value is 0, which preserves the current timeout value on the system.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeProxyWinkernelConfiguration`     {#kubeproxy-config-k8s-io-v1alpha1-KubeProxyWinkernelConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+KubeProxyWinkernelConfiguration contains Windows/HNS settings for
+the Kubernetes proxy server.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>networkName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   networkName is the name of the network kube-proxy will use
+to create endpoints and policies</td>
+</tr>
+    
+  
+<tr><td><code>sourceVip</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   sourceVip is the IP address of the source VIP endoint used for
+NAT when loadbalancing</td>
+</tr>
+    
+  
+<tr><td><code>enableDSR</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableDSR tells kube-proxy whether HNS policies should be created
+with DSR</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LocalMode`     {#kubeproxy-config-k8s-io-v1alpha1-LocalMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+LocalMode represents modes to detect local traffic from the node
+
+
+    
+
+
+## `ProxyMode`     {#kubeproxy-config-k8s-io-v1alpha1-ProxyMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+ProxyMode represents modes used by the Kubernetes proxy server.
+
+Currently, three modes of proxy are available in Linux platform: 'userspace' (older, going to be EOL), 'iptables'
+(newer, faster), 'ipvs'(newest, better in performance and scalability).
+
+Two modes of proxy are available in Windows platform: 'userspace'(older, stable) and 'kernelspace' (newer, faster).
+
+In Linux platform, if proxy mode is blank, use the best-available proxy (currently iptables, but may change in the
+future). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are
+insufficient, this always falls back to the userspace proxy. IPVS mode will be enabled when proxy mode is set to 'ipvs',
+and the fall back path is firstly iptables and then userspace.
+
+In Windows platform, if proxy mode is blank, use the best-available proxy (currently userspace, but may change in the
+future). If winkernel proxy is selected, regardless of how, but the Windows kernel can't support this mode of proxy,
+this always falls back to the userspace proxy.
+
+
+    
+  
+  
+    
+
+## `ClientConnectionConfiguration`     {#ClientConnectionConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeProxyConfiguration](#kubeproxy-config-k8s-io-v1alpha1-KubeProxyConfiguration)
+
+
+ClientConnectionConfiguration contains details for constructing a client.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>kubeconfig</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   kubeconfig is the path to a KubeConfig file.</td>
+</tr>
+    
+  
+<tr><td><code>acceptContentTypes</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the
+default value of 'application/json'. This field will control all connections to the server used by a particular
+client.</td>
+</tr>
+    
+  
+<tr><td><code>contentType</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   contentType is the content type used when sending data to the server from this client.</td>
+</tr>
+    
+  
+<tr><td><code>qps</code> <B>[Required]</B><br/>
+<code>float32</code>
+</td>
+<td>
+   qps controls the number of queries per second allowed for this connection.</td>
+</tr>
+    
+  
+<tr><td><code>burst</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   burst allows extra queries to accumulate when a client is exceeding its rate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
diff --git a/content/zh/docs/reference/config-api/kubelet-config.v1beta1.md b/content/zh/docs/reference/config-api/kubelet-config.v1beta1.md
new file mode 100644
index 0000000000..bee05b68db
--- /dev/null
+++ b/content/zh/docs/reference/config-api/kubelet-config.v1beta1.md
@@ -0,0 +1,1604 @@
+---
+title: Kubelet Configuration (v1beta1)
+content_type: tool-reference
+package: kubelet.config.k8s.io/v1beta1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+- [SerializedNodeConfigSource](#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource)
+  
+    
+
+
+## `KubeletConfiguration`     {#kubelet-config-k8s-io-v1beta1-KubeletConfiguration}
+    
+
+
+
+
+KubeletConfiguration contains the configuration for the Kubelet
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>KubeletConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td><code>enableServer</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableServer enables Kubelet's secured server.
+Note: Kubelet's insecure port is controlled by the readOnlyPort option.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>staticPodPath</code><br/>
+<code>string</code>
+</td>
+<td>
+   staticPodPath is the path to the directory containing local (static) pods to
+run, or the path to a single static pod file.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new path may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>syncFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   syncFrequency is the max period between synchronizing running
+containers and config.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening this duration may have a negative performance impact, especially
+as the number of Pods on the node increases. Alternatively, increasing this
+duration will result in longer refresh times for ConfigMaps and Secrets.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>fileCheckFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   fileCheckFrequency is the duration between checking config files for
+new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to reload local Static Pod
+configurations more frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td><code>httpCheckFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   httpCheckFrequency is the duration between checking http for new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to poll staticPodURL more
+frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td><code>staticPodURL</code><br/>
+<code>string</code>
+</td>
+<td>
+   staticPodURL is the URL for accessing static pods to run
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new URL may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>staticPodURLHeader</code><br/>
+<code>map[string][]string</code>
+</td>
+<td>
+   staticPodURLHeader is a map of slices with HTTP headers to use when accessing the podURL
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt the ability to read the latest set of static pods from StaticPodURL.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>address</code><br/>
+<code>string</code>
+</td>
+<td>
+   address is the IP address for the Kubelet to serve on (set to 0.0.0.0
+for all interfaces).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "0.0.0.0"</td>
+</tr>
+    
+  
+<tr><td><code>port</code><br/>
+<code>int32</code>
+</td>
+<td>
+   port is the port for the Kubelet to serve on.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 10250</td>
+</tr>
+    
+  
+<tr><td><code>readOnlyPort</code><br/>
+<code>int32</code>
+</td>
+<td>
+   readOnlyPort is the read-only port for the Kubelet to serve on with
+no authentication/authorization.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 0 (disabled)</td>
+</tr>
+    
+  
+<tr><td><code>tlsCertFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   tlsCertFile is the file containing x509 Certificate for HTTPS. (CA cert,
+if any, concatenated after server cert). If tlsCertFile and
+tlsPrivateKeyFile are not provided, a self-signed certificate
+and key are generated for the public address and saved to the directory
+passed to the Kubelet's --cert-dir flag.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>tlsPrivateKeyFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>tlsCipherSuites</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   TLSCipherSuites is the list of allowed cipher suites for the server.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>tlsMinVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   TLSMinVersion is the minimum TLS version supported.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>rotateCertificates</code><br/>
+<code>bool</code>
+</td>
+<td>
+   rotateCertificates enables client certificate rotation. The Kubelet will request a
+new certificate from the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt the Kubelet's ability to authenticate with the API server
+after the current certificate expires.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>serverTLSBootstrap</code><br/>
+<code>bool</code>
+</td>
+<td>
+   serverTLSBootstrap enables server certificate bootstrap. Instead of self
+signing a serving certificate, the Kubelet will request a certificate from
+the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests. The RotateKubeletServerCertificate feature
+must be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will stop the renewal of Kubelet server certificates, which can
+disrupt components that interact with the Kubelet server in the long term,
+due to certificate expiration.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>authentication</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthentication"><code>KubeletAuthentication</code></a>
+</td>
+<td>
+   authentication specifies how requests to the Kubelet's server are authenticated
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  anonymous:
+    enabled: false
+  webhook:
+    enabled: true
+    cacheTTL: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>authorization</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorization"><code>KubeletAuthorization</code></a>
+</td>
+<td>
+   authorization specifies how requests to the Kubelet's server are authorized
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  mode: Webhook
+  webhook:
+    cacheAuthorizedTTL: "5m"
+    cacheUnauthorizedTTL: "30s"</td>
+</tr>
+    
+  
+<tr><td><code>registryPullQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   registryPullQPS is the limit of registry pulls per second.
+Set to 0 for no limit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>registryBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   registryBurst is the maximum size of bursty pulls, temporarily allows
+pulls to burst to this number, while still not exceeding registryPullQPS.
+Only used if registryPullQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>eventRecordQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   eventRecordQPS is the maximum event creations per second. If 0, there
+is no limit enforced.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>eventBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   eventBurst is the maximum size of a burst of event creations, temporarily
+allows event creations to burst to this number, while still not exceeding
+eventRecordQPS. Only used if eventRecordQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>enableDebuggingHandlers</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableDebuggingHandlers enables server endpoints for log access
+and local running of containers and commands, including the exec,
+attach, logs, and portforward features.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>enableContentionProfiling</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableContentionProfiling enables lock contention profiling, if enableDebuggingHandlers is true.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may carry a performance impact.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>healthzPort</code><br/>
+<code>int32</code>
+</td>
+<td>
+   healthzPort is the port of the localhost healthz endpoint (set to 0 to disable)
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: 10248</td>
+</tr>
+    
+  
+<tr><td><code>healthzBindAddress</code><br/>
+<code>string</code>
+</td>
+<td>
+   healthzBindAddress is the IP address for the healthz server to serve on
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: "127.0.0.1"</td>
+</tr>
+    
+  
+<tr><td><code>oomScoreAdj</code><br/>
+<code>int32</code>
+</td>
+<td>
+   oomScoreAdj is The oom-score-adj value for kubelet process. Values
+must be within the range [-1000, 1000].
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the stability of nodes under memory pressure.
+Default: -999</td>
+</tr>
+    
+  
+<tr><td><code>clusterDomain</code><br/>
+<code>string</code>
+</td>
+<td>
+   clusterDomain is the DNS domain for this cluster. If set, kubelet will
+configure all containers to search this domain in addition to the
+host's search domains.
+Dynamic Kubelet Config (beta): Dynamically updating this field is not recommended,
+as it should be kept in sync with the rest of the cluster.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>clusterDNS</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   clusterDNS is a list of IP addresses for the cluster DNS server. If set,
+kubelet will configure all containers to use this for DNS resolution
+instead of the host's DNS servers.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>streamingConnectionIdleTimeout</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   streamingConnectionIdleTimeout is the maximum time a streaming connection
+can be idle before the connection is automatically closed.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact components that rely on infrequent updates over streaming
+connections to the Kubelet server.
+Default: "4h"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusUpdateFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   nodeStatusUpdateFrequency is the frequency that kubelet computes node
+status. If node lease feature is not enabled, it is also the frequency that
+kubelet posts node status to master.
+Note: When node lease feature is not enabled, be cautious when changing the
+constant, it must work with nodeMonitorGracePeriod in nodecontroller.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact node scalability, and also that the node controller's
+nodeMonitorGracePeriod must be set to N&lowast;NodeStatusUpdateFrequency,
+where N is the number of retries before the node controller marks
+the node unhealthy.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusReportFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   nodeStatusReportFrequency is the frequency that kubelet posts node
+status to master if node status does not change. Kubelet will ignore this
+frequency and post node status immediately if any change is detected. It is
+only used when node lease feature is enabled. nodeStatusReportFrequency's
+default value is 1m. But if nodeStatusUpdateFrequency is set explicitly,
+nodeStatusReportFrequency's default value will be set to
+nodeStatusUpdateFrequency for backward compatibility.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>nodeLeaseDurationSeconds</code><br/>
+<code>int32</code>
+</td>
+<td>
+   nodeLeaseDurationSeconds is the duration the Kubelet will set on its corresponding Lease,
+when the NodeLease feature is enabled. This feature provides an indicator of node
+health by having the Kubelet create and periodically renew a lease, named after the node,
+in the kube-node-lease namespace. If the lease expires, the node can be considered unhealthy.
+The lease is currently renewed every 10s, per KEP-0009. In the future, the lease renewal interval
+may be set based on the lease duration.
+Requires the NodeLease feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+decreasing the duration may reduce tolerance for issues that temporarily prevent
+the Kubelet from renewing the lease (e.g. a short-lived network issue).
+Default: 40</td>
+</tr>
+    
+  
+<tr><td><code>imageMinimumGCAge</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   imageMinimumGCAge is the minimum age for an unused image before it is
+garbage collected.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>imageGCHighThresholdPercent</code><br/>
+<code>int32</code>
+</td>
+<td>
+   imageGCHighThresholdPercent is the percent of disk usage after which
+image garbage collection is always run. The percent is calculated as
+this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 85</td>
+</tr>
+    
+  
+<tr><td><code>imageGCLowThresholdPercent</code><br/>
+<code>int32</code>
+</td>
+<td>
+   imageGCLowThresholdPercent is the percent of disk usage before which
+image garbage collection is never run. Lowest disk usage to garbage
+collect to. The percent is calculated as this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 80</td>
+</tr>
+    
+  
+<tr><td><code>volumeStatsAggPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   How frequently to calculate and cache volume disk usage for all pods
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>kubeletCgroups</code><br/>
+<code>string</code>
+</td>
+<td>
+   kubeletCgroups is the absolute name of cgroups to isolate the kubelet in
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>systemCgroups</code><br/>
+<code>string</code>
+</td>
+<td>
+   systemCgroups is absolute name of cgroups in which to place
+all non-kernel processes that are not already in a container. Empty
+for no container. Rolling back the flag requires a reboot.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>cgroupRoot</code><br/>
+<code>string</code>
+</td>
+<td>
+   cgroupRoot is the root cgroup to use for pods. This is handled by the
+container runtime on a best effort basis.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>cgroupsPerQOS</code><br/>
+<code>bool</code>
+</td>
+<td>
+   Enable QoS based Cgroup hierarchy: top level cgroups for QoS Classes
+And all Burstable and BestEffort pods are brought up under their
+specific top level QoS cgroup.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>cgroupDriver</code><br/>
+<code>string</code>
+</td>
+<td>
+   driver that the kubelet uses to manipulate cgroups on the host (cgroupfs or systemd)
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "cgroupfs"</td>
+</tr>
+    
+  
+<tr><td><code>cpuManagerPolicy</code><br/>
+<code>string</code>
+</td>
+<td>
+   CPUManagerPolicy is the name of the policy to use.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td><code>cpuManagerReconcilePeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   CPU Manager reconciliation period.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td><code>topologyManagerPolicy</code><br/>
+<code>string</code>
+</td>
+<td>
+   TopologyManagerPolicy is the name of the policy to use.
+Policies other than "none" require the TopologyManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td><code>topologyManagerScope</code><br/>
+<code>string</code>
+</td>
+<td>
+   TopologyManagerScope represents the scope of topology hint generation
+that topology manager requests and hint providers generate.
+"pod" scope requires the TopologyManager feature gate to be enabled.
+Default: "container"</td>
+</tr>
+    
+  
+<tr><td><code>qosReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   qosReserved is a set of resource name to percentage pairs that specify
+the minimum percentage of a resource reserved for exclusive use by the
+guaranteed QoS tier.
+Currently supported resources: "memory"
+Requires the QOSReserved feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>runtimeRequestTimeout</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   runtimeRequestTimeout is the timeout for all runtime requests except long running
+requests - pull, logs, exec and attach.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>hairpinMode</code><br/>
+<code>string</code>
+</td>
+<td>
+   hairpinMode specifies how the Kubelet should configure the container
+bridge for hairpin packets.
+Setting this flag allows endpoints in a Service to loadbalance back to
+themselves if they should try to access their own Service. Values:
+  "promiscuous-bridge": make the container bridge promiscuous.
+  "hairpin-veth":       set the hairpin flag on container veth interfaces.
+  "none":               do nothing.
+Generally, one must set --hairpin-mode=hairpin-veth to achieve hairpin NAT,
+because promiscuous-bridge assumes the existence of a container bridge named cbr0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may require a node reboot, depending on the network plugin.
+Default: "promiscuous-bridge"</td>
+</tr>
+    
+  
+<tr><td><code>maxPods</code><br/>
+<code>int32</code>
+</td>
+<td>
+   maxPods is the number of pods that can run on this Kubelet.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 110</td>
+</tr>
+    
+  
+<tr><td><code>podCIDR</code><br/>
+<code>string</code>
+</td>
+<td>
+   The CIDR to use for pod IP addresses, only used in standalone mode.
+In cluster mode, this is obtained from the master.
+Dynamic Kubelet Config (beta): This field should always be set to the empty default.
+It should only set for standalone Kubelets, which cannot use Dynamic Kubelet Config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>podPidsLimit</code><br/>
+<code>int64</code>
+</td>
+<td>
+   PodPidsLimit is the maximum number of pids in any pod.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may prevent container processes from forking after the change.
+Default: -1</td>
+</tr>
+    
+  
+<tr><td><code>resolvConf</code><br/>
+<code>string</code>
+</td>
+<td>
+   ResolverConfig is the resolver configuration file used as the basis
+for the container DNS resolution configuration.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: "/etc/resolv.conf"</td>
+</tr>
+    
+  
+<tr><td><code>runOnce</code><br/>
+<code>bool</code>
+</td>
+<td>
+   RunOnce causes the Kubelet to check the API server once for pods,
+run those in addition to the pods specified by static pod files, and exit.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>cpuCFSQuota</code><br/>
+<code>bool</code>
+</td>
+<td>
+   cpuCFSQuota enables CPU CFS quota enforcement for containers that
+specify CPU limits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may reduce node stability.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>cpuCFSQuotaPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   CPUCFSQuotaPeriod is the CPU CFS quota period value, cpu.cfs_period_us.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+limits set for containers will result in different cpu.cfs_quota settings. This
+will trigger container restarts on the node being reconfigured.
+Default: "100ms"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusMaxImages</code><br/>
+<code>int32</code>
+</td>
+<td>
+   nodeStatusMaxImages caps the number of images reported in Node.Status.Images.
+Note: If -1 is specified, no cap will be applied. If 0 is specified, no image is returned.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+different values can be reported on node status.
+Default: 50</td>
+</tr>
+    
+  
+<tr><td><code>maxOpenFiles</code><br/>
+<code>int64</code>
+</td>
+<td>
+   maxOpenFiles is Number of files that can be opened by Kubelet process.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with the node's filesystem.
+Default: 1000000</td>
+</tr>
+    
+  
+<tr><td><code>contentType</code><br/>
+<code>string</code>
+</td>
+<td>
+   contentType is contentType of requests sent to apiserver.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability for the Kubelet to communicate with the API server.
+If the Kubelet loses contact with the API server due to a change to this field,
+the change cannot be reverted via dynamic Kubelet config.
+Default: "application/vnd.kubernetes.protobuf"</td>
+</tr>
+    
+  
+<tr><td><code>kubeAPIQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   kubeAPIQPS is the QPS to use while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>kubeAPIBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   kubeAPIBurst is the burst to allow while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>serializeImagePulls</code><br/>
+<code>bool</code>
+</td>
+<td>
+   serializeImagePulls when enabled, tells the Kubelet to pull images one
+at a time. We recommend &lowast;not&lowast; changing the default value on nodes that
+run docker daemon with version  < 1.9 or an Aufs storage backend.
+Issue #10959 has more details.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the performance of image pulls.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>evictionHard</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines hard eviction thresholds. For example: {"memory.available": "300Mi"}.
+To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default:
+  memory.available:  "100Mi"
+  nodefs.available:  "10%"
+  nodefs.inodesFree: "5%"
+  imagefs.available: "15%"</td>
+</tr>
+    
+  
+<tr><td><code>evictionSoft</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines soft eviction thresholds.
+For example: {"memory.available": "300Mi"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions, and may change the allocatable reported
+by the node.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>evictionSoftGracePeriod</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines grace periods for each soft eviction signal.
+For example: {"memory.available": "30s"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>evictionPressureTransitionPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may decrease the stability of the node when the node is overcommitted.
+Default: "5m"</td>
+</tr>
+    
+  
+<tr><td><code>evictionMaxPodGracePeriod</code><br/>
+<code>int32</code>
+</td>
+<td>
+   Maximum allowed grace period (in seconds) to use when terminating pods in
+response to a soft eviction threshold being met. This value effectively caps
+the Pod's TerminationGracePeriodSeconds value during soft evictions.
+Note: Due to issue #64530, the behavior has a bug where this value currently just
+overrides the grace period during soft eviction, which can increase the grace
+period from what is set on the Pod. This bug will be fixed in a future release.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it decreases the amount of time Pods will have to gracefully clean
+up before being killed during a soft eviction.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td><code>evictionMinimumReclaim</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines minimum reclaims, which describe the minimum
+amount of a given resource the kubelet will reclaim when performing a pod eviction while
+that resource is under pressure. For example: {"imagefs.available": "2Gi"}
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may change how well eviction can manage resource pressure.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>podsPerCore</code><br/>
+<code>int32</code>
+</td>
+<td>
+   podsPerCore is the maximum number of pods per core. Cannot exceed MaxPods.
+If 0, this field is ignored.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td><code>enableControllerAttachDetach</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableControllerAttachDetach enables the Attach/Detach controller to
+manage attachment/detachment of volumes scheduled to this node, and
+disables kubelet from executing any attach/detach operations
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changing which component is responsible for volume management on a live node
+may result in volumes refusing to detach if the node is not drained prior to
+the update, and if Pods are scheduled to the node before the
+volumes.kubernetes.io/controller-managed-attach-detach annotation is updated by the
+Kubelet. In general, it is safest to leave this value set the same as local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>protectKernelDefaults</code><br/>
+<code>bool</code>
+</td>
+<td>
+   protectKernelDefaults, if true, causes the Kubelet to error if kernel
+flags are not as it expects. Otherwise the Kubelet will attempt to modify
+kernel flags to match its expectation.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may cause the Kubelet to crash-loop if the Kernel is not configured as
+Kubelet expects.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>makeIPTablesUtilChains</code><br/>
+<code>bool</code>
+</td>
+<td>
+   If true, Kubelet ensures a set of iptables rules are present on host.
+These rules will serve as utility rules for various components, e.g. KubeProxy.
+The rules will be created based on IPTablesMasqueradeBit and IPTablesDropBit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will prevent the Kubelet from healing locally misconfigured iptables rules.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>iptablesMasqueradeBit</code><br/>
+<code>int32</code>
+</td>
+<td>
+   iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Warning: Please match the value of the corresponding parameter in kube-proxy.
+TODO: clean up IPTablesMasqueradeBit in kube-proxy
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 14</td>
+</tr>
+    
+  
+<tr><td><code>iptablesDropBit</code><br/>
+<code>int32</code>
+</td>
+<td>
+   iptablesDropBit is the bit of the iptables fwmark space to mark for dropping packets.
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 15</td>
+</tr>
+    
+  
+<tr><td><code>featureGates</code><br/>
+<code>map[string]bool</code>
+</td>
+<td>
+   featureGates is a map of feature names to bools that enable or disable alpha/experimental
+features. This field modifies piecemeal the built-in default values from
+"k8s.io/kubernetes/pkg/features/kube_features.go".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider the
+documentation for the features you are enabling or disabling. While we
+encourage feature developers to make it possible to dynamically enable
+and disable features, some changes may require node reboots, and some
+features may require careful coordination to retroactively disable.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>failSwapOn</code><br/>
+<code>bool</code>
+</td>
+<td>
+   failSwapOn tells the Kubelet to fail to start if swap is enabled on the node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+setting it to true will cause the Kubelet to crash-loop if swap is enabled.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>containerLogMaxSize</code><br/>
+<code>string</code>
+</td>
+<td>
+   A quantity defines the maximum size of the container log file before it is rotated.
+For example: "5Mi" or "256Ki".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger log rotation.
+Default: "10Mi"</td>
+</tr>
+    
+  
+<tr><td><code>containerLogMaxFiles</code><br/>
+<code>int32</code>
+</td>
+<td>
+   Maximum number of container log files that can be present for a container.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may cause log files to be deleted.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>configMapAndSecretChangeDetectionStrategy</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy"><code>ResourceChangeDetectionStrategy</code></a>
+</td>
+<td>
+   ConfigMapAndSecretChangeDetectionStrategy is a mode in which
+config map and secret managers are running.
+Default: "Watch"</td>
+</tr>
+    
+  
+<tr><td><code>systemReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   systemReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G)
+pairs that describe resources reserved for non-kubernetes components.
+Currently only cpu and memory are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>kubeReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
+that describe resources reserved for kubernetes system components.
+Currently cpu, memory and local storage for root file system are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>reservedSystemCPUs</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   This ReservedSystemCPUs option specifies the cpu list reserved for the host level system threads and kubernetes related threads.
+This provide a "static" CPU list rather than the "dynamic" list by system-reserved and kube-reserved.
+This option overwrites CPUs provided by system-reserved and kube-reserved.</td>
+</tr>
+    
+  
+<tr><td><code>showHiddenMetricsForVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   The previous version for which you want to show hidden metrics.
+Only the previous minor version is meaningful, other values will not be allowed.
+The format is <major>.<minor>, e.g.: '1.16'.
+The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics,
+rather than being surprised when they are permanently removed in the release after that.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>systemReservedCgroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   This flag helps kubelet identify absolute name of top level cgroup used to enforce `SystemReserved` compute resource reservation for OS system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>kubeReservedCgroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   This flag helps kubelet identify absolute name of top level cgroup used to enforce `KubeReserved` compute resource reservation for Kubernetes node system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>enforceNodeAllocatable</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform.
+This flag accepts a list of options. Acceptable options are `none`, `pods`, `system-reserved` & `kube-reserved`.
+If `none` is specified, no other options may be specified.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+removing enforcements may reduce the stability of the node. Alternatively, adding
+enforcements may reduce the stability of components which were using more than
+the reserved amount of resources; for example, enforcing kube-reserved may cause
+Kubelets to OOM if it uses more than the reserved resources, and enforcing system-reserved
+may cause system daemons to OOM if they use more than the reserved resources.
+Default: ["pods"]</td>
+</tr>
+    
+  
+<tr><td><code>allowedUnsafeSysctls</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in &lowast;).
+Unsafe sysctl groups are kernel.shm&lowast;, kernel.msg&lowast;, kernel.sem, fs.mqueue.&lowast;, and net.&lowast;.
+These sysctls are namespaced but not allowed by default.  For example: "kernel.msg&lowast;,net.ipv4.route.min_pmtu"
+Default: []</td>
+</tr>
+    
+  
+<tr><td><code>volumePluginDir</code><br/>
+<code>string</code>
+</td>
+<td>
+   volumePluginDir is the full path of the directory in which to search
+for additional third party volume plugins.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that changing
+the volumePluginDir may disrupt workloads relying on third party volume plugins.
+Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"</td>
+</tr>
+    
+  
+<tr><td><code>providerID</code><br/>
+<code>string</code>
+</td>
+<td>
+   providerID, if set, sets the unique id of the instance that an external provider (i.e. cloudprovider)
+can use to identify a specific node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with cloud providers.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>kernelMemcgNotification</code><br/>
+<code>bool</code>
+</td>
+<td>
+   kernelMemcgNotification, if set, the kubelet will integrate with the kernel memcg notification
+to determine if memory eviction thresholds are crossed rather than polling.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the way Kubelet interacts with the kernel.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>logging</code> <B>[Required]</B><br/>
+<a href="#LoggingConfiguration"><code>LoggingConfiguration</code></a>
+</td>
+<td>
+   Logging specifies the options of logging.
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+Defaults:
+  Format: text</td>
+</tr>
+    
+  
+<tr><td><code>enableSystemLogHandler</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableSystemLogHandler enables system logs via web interface host:port/logs/
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>shutdownGracePeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   ShutdownGracePeriod specifies the total duration that the node should delay the shutdown and total grace period for pod termination during a node shutdown.
+Default: "30s"</td>
+</tr>
+    
+  
+<tr><td><code>shutdownGracePeriodCriticalPods</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   ShutdownGracePeriodCriticalPods specifies the duration used to terminate critical pods during a node shutdown. This should be less than ShutdownGracePeriod.
+For example, if ShutdownGracePeriod=30s, and ShutdownGracePeriodCriticalPods=10s, during a node shutdown the first 20 seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating critical pods.
+Default: "10s"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `SerializedNodeConfigSource`     {#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource}
+    
+
+
+
+
+SerializedNodeConfigSource allows us to serialize v1.NodeConfigSource.
+This type is used internally by the Kubelet for tracking checkpointed dynamic configs.
+It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>SerializedNodeConfigSource</code></td></tr>
+    
+
+  
+  
+<tr><td><code>source</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#nodeconfigsource-v1-core"><code>core/v1.NodeConfigSource</code></a>
+</td>
+<td>
+   Source is the source that we are serializing</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `HairpinMode`     {#kubelet-config-k8s-io-v1beta1-HairpinMode}
+    
+(Alias of `string`)
+
+
+
+HairpinMode denotes how the kubelet should configure networking to handle
+hairpin packets.
+
+
+    
+
+
+## `KubeletAnonymousAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enabled allows anonymous requests to the kubelet server.
+Requests that are not rejected by another authentication method are treated as anonymous requests.
+Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>x509</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication"><code>KubeletX509Authentication</code></a>
+</td>
+<td>
+   x509 contains settings related to x509 client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>webhook</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication"><code>KubeletWebhookAuthentication</code></a>
+</td>
+<td>
+   webhook contains settings related to webhook bearer token authentication</td>
+</tr>
+    
+  
+<tr><td><code>anonymous</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication"><code>KubeletAnonymousAuthentication</code></a>
+</td>
+<td>
+   anonymous contains settings related to anonymous authentication</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>mode</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode"><code>KubeletAuthorizationMode</code></a>
+</td>
+<td>
+   mode is the authorization mode to apply to requests to the kubelet server.
+Valid values are AlwaysAllow and Webhook.
+Webhook mode uses the SubjectAccessReview API to determine authorization.</td>
+</tr>
+    
+  
+<tr><td><code>webhook</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization"><code>KubeletWebhookAuthorization</code></a>
+</td>
+<td>
+   webhook contains settings related to Webhook authorization.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthorizationMode`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+
+    
+
+
+## `KubeletWebhookAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API</td>
+</tr>
+    
+  
+<tr><td><code>cacheTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheTTL enables caching of authentication results</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletWebhookAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>cacheAuthorizedTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheAuthorizedTTL is the duration to cache 'authorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+<tr><td><code>cacheUnauthorizedTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletX509Authentication`     {#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>clientCAFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate
+signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName,
+and groups corresponding to the Organization in the client certificate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ResourceChangeDetectionStrategy`     {#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+ResourceChangeDetectionStrategy denotes a mode in which internal
+managers (secret, configmap) are discovering object changes.
+
+
+    
+  
+  
+    
+
+## `LoggingConfiguration`     {#LoggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+LoggingConfiguration contains logging options
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>format</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Format Flag specifies the structure of log messages.
+default value of format is `text`</td>
+</tr>
+    
+  
+<tr><td><code>sanitization</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   [Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).
+Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`)</td>
+</tr>
+    
+  
+</tbody>
+</table>
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/implementation-details.md b/content/zh/docs/reference/setup-tools/kubeadm/implementation-details.md
index ee17bb699a..3e3fe80b89 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/implementation-details.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/implementation-details.md
@@ -46,7 +46,7 @@ with the aim of sharing knowledge on Kubernetes cluster best practices.
    - lock-down the kubelet API
    - locking down access to the API for system components like the kube-proxy and CoreDNS
    - locking down what a Bootstrap Token can access
- - **Easy to use**: The user should not have to run anything more than a couple of commands:
+ - **User-friendly**: The user should not have to run anything more than a couple of commands:
    - `kubeadm init`
    - `export KUBECONFIG=/etc/kubernetes/admin.conf`
    - `kubectl apply -f <network-of-choice.yaml>`
@@ -63,7 +63,7 @@ with the aim of sharing knowledge on Kubernetes cluster best practices.
   - 锁定 kubelet API
   - 锁定对系统组件（例如 kube-proxy 和 CoreDNS）的 API 的访问
   - 锁定启动引导令牌（Bootstrap Token）可以访问的内容
-- **易用的**：用户只需要运行几个命令即可：
+- **用户友好**：用户只需要运行几个命令即可：
   - `kubeadm init`
   - `export KUBECONFIG=/etc/kubernetes/admin.conf`
   - `kubectl apply -f <所选网络.yaml>`
@@ -558,7 +558,7 @@ API 服务器的静态 Pod 清单会受到用户提供的以下参数的影响:
     - `--requestheader-client-ca-file` to`front-proxy-ca.crt`
     - `--proxy-client-cert-file` to `front-proxy-client.crt`
     - `--proxy-client-key-file` to `front-proxy-client.key`
- - Other flags for securing the front proxy ([API Aggregation](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md)) communications:
+ - Other flags for securing the front proxy ([API Aggregation](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)) communications:
     - `--requestheader-username-headers=X-Remote-User`
     - `--requestheader-group-headers=X-Remote-Group`
     - `--requestheader-extra-headers-prefix=X-Remote-Extra-`
@@ -580,7 +580,7 @@ API 服务器的静态 Pod 清单会受到用户提供的以下参数的影响:
   - `--proxy-client-key-file` 设为 `front-proxy-client.key`
 
 - 其他用于保护前端代理（
-  [API 聚合层](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md)）
+  [API 聚合层](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)）
   通信的标志:
 
   - `--requestheader-username-headers=X-Remote-User`
@@ -697,7 +697,7 @@ into `/var/lib/kubelet/config/init/kubelet` file.
 <!--  
 The init configuration is used for starting the kubelet on this specific node, providing an alternative for the kubelet drop-in file;
 such configuration will be replaced by the kubelet base configuration as described in following steps.
-See [set Kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file) for additional info.
+See [set Kubelet parameters via a config file](/docs/tasks/administer-cluster/kubelet-config-file) for additional information.
 -->
 初始化配置用于在这个特定节点上启动 kubelet，从而为 kubelet 插件文件提供了
 一种替代方法。如以下步骤中所述，这种配置将由 kubelet 基本配置所替代。
@@ -710,17 +710,24 @@ See [set Kubelet parameters via a config file](/docs/tasks/administer-cluster/ku
 <!--  
 1. To make dynamic kubelet configuration work, flag `--dynamic-config-dir=/var/lib/kubelet/config/dynamic` should be specified
    in `/etc/systemd/system/kubelet.service.d/10-kubeadm.conf`
-2. The kubelet configuration can be changed by passing a `KubeletConfiguration` object to `kubeadm init` or `kubeadm join` by using
+1. The kubelet configuration can be changed by passing a `KubeletConfiguration` object to `kubeadm init` or `kubeadm join` by using
    a configuration file `--config some-file.yaml`. The `KubeletConfiguration` object can be separated from other objects such
    as `InitConfiguration` using the `---` separator. For more details have a look at the `kubeadm config print-default` command.
 -->
 1. 要使动态 kubelet 配置生效，应在 `/etc/systemd/system/kubelet.service.d/10-kubeadm.conf`
    中指定 `--dynamic-config-dir=/var/lib/kubelet/config/dynamic` 标志。
-2. 通过使用配置文件 `--config some-file.yaml` 将 `KubeletConfiguration` 对象传递给
+1. 通过使用配置文件 `--config some-file.yaml` 将 `KubeletConfiguration` 对象传递给
    `kubeadm init` 或 `kubeadm join` 来更改 kubelet 配置。
    可以使用 `---` 分隔符将 `KubeletConfiguration` 对象与其他对象（例如 `InitConfiguration`）
    分开。更多的详细信息，请查看 `kubeadm config print-default` 命令。
 
+<!--
+For more details about the `KubeletConfiguration` struct, take a look at the
+[`KubeletConfiguration` reference](/docs/reference/config-api/kubelet-config.v1beta1/).
+-->
+有关 `KubeletConfiguration` 结构的详细信息，可参阅
+[`KubeletConfiguration` 参考文档](/docs/reference/config-api/kubelet-config.v1beta1/)。
+
 <!--
 ### Wait for the control plane to come up
 -->
@@ -748,7 +755,7 @@ kubeadm 依靠 kubelet 拉取控制平面镜像并将其作为静态 Pod 正确
 -->
 ### （可选）编写基本 kubelet 配置  {#write-base-kubelet-configuration}
 
-{{< feature-state for_k8s_version="v1.9" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.11" state="beta" >}}
 
 <!--
 If kubeadm is invoked with `--feature-gates=DynamicKubeletConfig`:
@@ -1028,24 +1035,28 @@ A ServiceAccount for `kube-proxy` is created in the `kube-system` namespace; the
 - `kube-proxy` 的 ServiceAccount 绑定了 `system:node-proxier` ClusterRole
   中的特权
 
-#### DNS  {#dns}
+#### DNS
 
 <!--  
-- In Kubernetes version 1.18 kube-dns usage with kubeadm is deprecated and will be removed in a future release
 - The CoreDNS service is named `kube-dns`. This is done to prevent any interruption
-in service when the user is switching the cluster DNS from kube-dns to CoreDNS or vice-versa
-the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
-- A ServiceAccount for CoreDNS/kube-dns is created in the `kube-system` namespace.
-- The `kube-dns` ServiceAccount is bound to the privileges in the `system:kube-dns` ClusterRole
+  in service when the user is switching the cluster DNS from kube-dns to CoreDNS,
+  the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
+- A ServiceAccount for CoreDNS is created in the `kube-system` namespace.
+- The `coredns` ServiceAccount is bound to the privileges in the `system:coredns` ClusterRole
 -->
-- 在 Kubernetes 1.18 版本中，通过 kubeadm 部署 kube-dns 这一操作已经弃用，
-  将在未来的版本中删除。
 - CoreDNS 服务的名称为 `kube-dns`。这样做是为了防止当用户将集群 DNS 从 kube-dns
-  切换到 CoreDNS 或者反过来时，出现服务中断。`--config` 方法在
+  切换到 CoreDNS 时出现服务中断。`--config` 方法在
   [这里](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
   有描述。
-- 在 `kube-system` 名字空间中创建 CoreDNS/kube-dns 的 ServiceAccount
-- `kube-dns` 的 ServiceAccount 绑定了 `system:kube-dns` ClusterRole 中的特权
+- 在 `kube-system` 名字空间中创建 CoreDNS 的 ServiceAccount
+- `coredns` 的 ServiceAccount 绑定了 `system:coredns` ClusterRole 中的特权
+
+<!--
+In Kubernetes version 1.21, support for using `kube-dns` with kubeadm was removed.
+You can use CoreDNS with kubeadm even when the related Service is named `kube-dns`.
+-->
+在 Kubernetes 1.21 版本中，kubeadm 对 `kube-dns` 的支持被移除。
+你可以在 kubeadm 使用 CoreDNS，即使相关的 Service 名字仍然是 `kube-dns`。
 
 <!--
 ## kubeadm join phases internal design
@@ -1183,17 +1194,16 @@ when the connection with the cluster is established, kubeadm try to access the `
 ## TLS 引导  {#tls-boostrap}
 
 <!--  
-Once the cluster info are known, the file `bootstrap-kubelet.conf` is written, thus allowing kubelet to do TLS Bootstrapping
-(conversely until v.1.7 TLS bootstrapping were managed by kubeadm).
+Once the cluster info are known, the file `bootstrap-kubelet.conf` is written, thus allowing kubelet to do TLS Bootstrapping.
 -->
-知道集群信息后，将写入文件 `bootstrap-kubelet.conf`，从而允许 kubelet 执行
-TLS 引导（相反，在 v1.7 之前 TLS 引导都是由 kubeadm 管理）。
+知道集群信息后，kubeadm 将写入文件 `bootstrap-kubelet.conf`，从而允许 kubelet 执行
+TLS 引导。
 
 <!--  
-The TLS bootstrap mechanism uses the shared token to temporarily authenticate with the Kubernetes Master to submit a certificate
+The TLS bootstrap mechanism uses the shared token to temporarily authenticate with the Kubernetes API server to submit a certificate
 signing request (CSR) for a locally created key pair.
 -->
-TLS 引导机制使用共享令牌对 Kubernetes 主控节点进行临时身份验证，以便
+TLS 引导机制使用共享令牌对 Kubernetes API 服务器进行临时身份验证，以便
 为本地创建的密钥对提交证书签名请求（CSR）。
 
 <!--  
@@ -1209,7 +1219,7 @@ kubelet 加入集群，同时删除 `bootstrap-kubelet.conf`。
 <!--  
 - The temporary authentication is validated against the token saved during the `kubeadm init` process (or with additional tokens
   created with `kubeadm token`)
-- The temporary authentication resolve to a user member of  `system:bootstrappers:kubeadm:default-node-token` group which was granted
+- The temporary authentication resolve to a user member of `system:bootstrappers:kubeadm:default-node-token` group which was granted
   access to CSR api during the `kubeadm init` process
 - The automatic CSR approval is managed by the csrapprover controller, according with configuration done the `kubeadm init` process
 -->
@@ -1222,9 +1232,9 @@ kubelet 加入集群，同时删除 `bootstrap-kubelet.conf`。
 <!--
 ### (optional) Write init kubelet configuration
 -->
-### （可选）编写 init kubelet 配置  {#write-init-kubelet-configuration}
+### （可选）写入初始的 kubelet 配置  {#write-init-kubelet-configuration}
 
-{{< feature-state for_k8s_version="v1.9" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.11" state="beta" >}}
 
 <!--
 If kubeadm is invoked with `--feature-gates=DynamicKubeletConfig`:
@@ -1232,14 +1242,14 @@ If kubeadm is invoked with `--feature-gates=DynamicKubeletConfig`:
 如果带 `--feature-gates=DynamicKubeletConfig` 参数调用 kubeadm，则 kubeadm：
 
 <!--  
-1. Read the kubelet base configuration from the `kubelet-base-config-v1.9` ConfigMap in the `kube-system` namespace  using the
+1. Read the kubelet base configuration from the `kubelet-base-config-v1.x` ConfigMap in the `kube-system` namespace  using the
    Bootstrap Token credentials, and write it to disk as kubelet init configuration file  `/var/lib/kubelet/config/init/kubelet`
 2. As soon as kubelet starts with the Node's own credential (`/etc/kubernetes/kubelet.conf`), update current node configuration
    specifying that the source for the node/kubelet configuration is the above ConfigMap.
 -->
-1. 使用引导令牌凭证从 `kube-system` 名字空间中 ConfigMap `kubelet-base-config-v1.9`
+1. 使用引导令牌凭证从 `kube-system` 名字空间中 ConfigMap `kubelet-base-config-v1.x`
    中读取 kubelet 基本配置，
-   并将其作为 kubelet init 配置文件 `/var/lib/kubelet/config/init/kubelet` 写入磁盘。
+   并将其作为 kubelet 初始配置文件 `/var/lib/kubelet/config/init/kubelet` 写入磁盘。
 2. 一旦 kubelet 开始使用节点自己的凭据（`/etc/kubernetes/kubelet.conf`），
    就更新当前节点配置，指定该节点或 kubelet 配置来自上述 ConfigMap。
 
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
index 82d4f88024..3276fd9acc 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
@@ -18,47 +18,10 @@ weight: 90
 请试用这些功能并给我们提供反馈！
 {{< /caution >}}
 
-## kubeadm alpha kubeconfig user {#cmd-phase-kubeconfig}
-
 <!--
-The `user` subcommand can be used for the creation of kubeconfig files for additional users.
+Currently there are no experimental commands under `kubeadm alpha`.
 -->
-使用子命令 `user` 为其他用户创建 kubeconfig 文件。
-
-{{< tabs name="tab-kubeconfig" >}}
-{{< tab name="kubeconfig" include="generated/kubeadm_alpha_kubeconfig.md" />}}
-{{< tab name="user" include="generated/kubeadm_alpha_kubeconfig_user.md" />}}
-{{< /tabs >}}
-
-## kubeadm alpha kubelet config {#cmd-phase-kubelet}
-
-<!--
-Use the following command to enable the DynamicKubeletConfiguration feature.
--->
-使用以下命令启用 DynamicKubeletConfiguration 功能。
-
-{{< tabs name="tab-kubelet" >}}
-{{< tab name="kubelet" include="generated/kubeadm_alpha_kubelet.md" />}}
-{{< tab name="enable-dynamic" include="generated/kubeadm_alpha_kubelet_config_enable-dynamic.md" />}}
-{{< /tabs >}}
-
-## kubeadm alpha selfhosting pivot {#cmd-selfhosting}
-
-<!--
-The subcommand `pivot` can be used to convert a static Pod-hosted control plane into a self-hosted one.
--->
-子命令 `pivot` 可用于将 Pod 托管的静态控制平面转换为自托管的控制平面。
-有关 `pivot` 更多信息，请参见
-[文档](/zh/docs/setup/production-environment/tools/kubeadm/self-hosting/)。
-
-<!--
-[Documentation](/docs/setup/production-environment/tools/kubeadm/self-hosting/)
--->
-
-{{< tabs name="selfhosting" >}}
-{{< tab name="selfhosting" include="generated/kubeadm_alpha_selfhosting.md" />}}
-{{< tab name="pivot" include="generated/kubeadm_alpha_selfhosting_pivot.md" />}}
-{{< /tabs >}}
+目前在 `kubeadm alpha` 之下没有试验性质的命令。
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md
index 69cbc59b4c..86664ff8d6 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase.md
@@ -4,11 +4,9 @@ weight: 90
 content_type: concept
 ---
 <!--
----
 title: kubeadm init phase
 weight: 90
 content_type: concept
----
 -->
 
 <!--
@@ -16,14 +14,15 @@ content_type: concept
 Hence, you can let kubeadm do some of the work and you can fill in the gaps
 if you wish to apply customization.
 -->
-`kubeadm init phase` 能确保调用引导过程的原子步骤。因此，如果希望自定义应用，则可以让 kubeadm 做一些工作，然后填补空白。
-
+`kubeadm init phase` 能确保调用引导过程的原子步骤。
+因此，如果希望自定义应用，则可以让 kubeadm 做一些工作，然后填补空白。
 
 <!--
 `kubeadm init phase` is consistent with the [kubeadm init workflow](/docs/reference/setup-tools/kubeadm/kubeadm-init/#init-workflow),
 and behind the scene both use the same code.
 -->
-`kubeadm init phase` 与 [kubeadm init 工作流](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#init-workflow)一致，后台都使用相同的代码。
+`kubeadm init phase` 与 [kubeadm init 工作流](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#init-workflow)
+一致，后台都使用相同的代码。
 
 <!--
 ## kubeadm init phase preflight {#cmd-phase-preflight}
@@ -143,7 +142,8 @@ Use the following phase to create a local etcd instance based on a static Pod fi
 You can use this command to upload the kubeadm configuration to your cluster.
 Alternatively, you can use [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config/).
 -->
-可以使用此命令将 kubeadm 配置文件上传到集群。或者使用 [kubeadm config](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config/)。
+可以使用此命令将 kubeadm 配置文件上传到集群。或者使用
+[kubeadm config](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config/)。
 
 {{< tabs name="upload-config" >}}
 {{< tab name="upload-config" include="generated/kubeadm_init_phase_upload-config.md" />}}
@@ -177,7 +177,8 @@ By default the certs and encryption key expire after two hours.
 <!--
 Use the following phase to label and taint the node with the `node-role.kubernetes.io/master=""` key-value pair.
 -->
-使用以下阶段来给具有 `node-role.kubernetes.io/master=""` 键值对的节点打标签（label）和记录污点（taint）。
+使用以下阶段来给具有 `node-role.kubernetes.io/master=""` 键值对的节点
+打标签（label）和记录污点（taint）。
 
 {{< tabs name="tab-mark-control-plane" >}}
 {{< tab name="mark-control-plane" include="generated/kubeadm_init_phase_mark-control-plane.md" />}}
@@ -232,50 +233,12 @@ install them selectively.
 {{< tab name="kube-proxy" include="generated/kubeadm_init_phase_addon_kube-proxy.md" />}}
 {{< /tabs >}}
 
-<!--
-To use kube-dns instead of CoreDNS you have to pass a configuration file:
--->
-要使用 kube-dns 代替 CoreDNS，必须传递一个配置文件：
-
-<!--
-# for installing a DNS addon only
-# 仅用于安装 DNS 插件
-# for creating a complete control plane node
-# 用于创建完整的控制平面节点
-# for listing or pulling images
-# 用于列出或者拉取镜像
-# for upgrades
--->
-
-```bash
-# 仅用于安装 DNS 插件
-kubeadm init phase addon coredns --config=someconfig.yaml
-# 用于创建完整的控制平面节点
-kubeadm init --config=someconfig.yaml
-# 用于列出或者拉取镜像
-kubeadm config images list/pull --config=someconfig.yaml
-# 升级
-kubeadm upgrade apply --config=someconfig.yaml
-```
-
-<!--
-The file has to contain a [`DNS`](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2#DNS) field in[`ClusterConfiguration`](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2#ClusterConfiguration)
-and also a type for the addon - `kube-dns` (default value is `CoreDNS`).
--->
-该文件必须在 [`ClusterConfiguration`](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2#ClusterConfiguration) 中包含一个 [`DNS`](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2#DNS) 字段，以及包含一个插件的类型 - `kube-dns`（默认值为 `CoreDNS`）。
-
-```yaml
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: ClusterConfiguration
-dns:
-  type: "kube-dns"
-```
-
 <!--
 For more details on each field in the `v1beta2` configuration you can navigate to our
 [API reference pages.] (https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)
 -->
-有关 `v1beta2` 配置中每个字段的更多详细信息，可以访问 [API](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)。
+有关 `v1beta2` 配置中每个字段的更多详细信息，可以访问
+[API](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)。
 
 ## {{% heading "whatsnext" %}}
 
@@ -285,7 +248,11 @@ For more details on each field in the `v1beta2` configuration you can navigate t
 * [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset/) to revert any changes made to this host by `kubeadm init` or `kubeadm join`
 * [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/) to try experimental functionality
 -->
-* [kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/) 引导 Kubernetes 控制平面节点
-* [kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/) 将节点连接到集群
-* [kubeadm reset](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset/) 恢复通过 `kubeadm init` 或 `kubeadm join` 操作对主机所做的任何更改
-* [kubeadm alpha](/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha/) 尝试实验性功能
+* [kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/)
+  引导 Kubernetes 控制平面节点
+* [kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/)
+  将节点加入到集群
+* [kubeadm reset](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset/)
+  恢复通过 `kubeadm init` 或 `kubeadm join` 操作对主机所做的任何更改
+* [kubeadm alpha](/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha/)
+  尝试实验性功能
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
index f7e4bb9bf1..2c70fe93e9 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
@@ -129,22 +129,18 @@ following steps:
 <!-- 
 1. Installs a DNS server (CoreDNS) and the kube-proxy addon components via the API server.
    In Kubernetes version 1.11 and later CoreDNS is the default DNS server.
-   To install kube-dns instead of CoreDNS, the DNS addon has to be configured in the kubeadm `ClusterConfiguration`.
-   For more information about the configuration see the section `Using kubeadm init with a configuration file` below.
    Please note that although the DNS server is deployed, it will not be scheduled until CNI is installed.
 
    {{< warning >}}
-   kube-dns usage with kubeadm is deprecated as of v1.18 and will be removed in a future release.
+   kube-dns usage with kubeadm is deprecated as of v1.18 and is removed in v1.21.
    {{< /warning >}}
 -->
 8. 通过 API 服务器安装一个 DNS 服务器 (CoreDNS) 和 kube-proxy 附加组件。
    在 Kubernetes 版本 1.11 和更高版本中，CoreDNS 是默认的 DNS 服务器。
-   要安装 kube-dns 而不是 CoreDNS，必须在 kubeadm `ClusterConfiguration` 中配置 DNS 插件。
-   有关配置的更多信息，请参见下面的"带配置文件使用 kubeadm init" 一节。
    请注意，尽管已部署 DNS 服务器，但直到安装 CNI 时才调度它。
 
    {{< warning >}}
-   从 v1.18 开始，在 kubeadm 中使用 kube-dns 已废弃，并将在以后的版本中将其删除。
+   从 v1.18 开始，在 kubeadm 中使用 kube-dns 的支持已被废弃，并已在 v1.21 版本中删除。
    {{< /warning >}}
 
 <!--
@@ -244,7 +240,7 @@ If your configuration is not using the latest version it is **recommended** that
 the [kubeadm config migrate](/docs/reference/setup-tools/kubeadm/kubeadm-config/) command.
 
 For more information on the fields and usage of the configuration you can navigate to our API reference
-page and pick a version from [the list](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm#pkg-subdirectories).
+page and pick a version from [the list](https://pkg.go.dev/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm#section-directories).
 -->
 可以使用 [kubeadm config print](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config/)
 命令打印出默认配置。
@@ -255,7 +251,7 @@ page and pick a version from [the list](https://godoc.org/k8s.io/kubernetes/cmd/
 
 有关配置的字段和用法的更多信息，
 你可以访问 API 参考页面并从
-[列表](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm#pkg-subdirectories)
+[列表](https://pkg.go.dev/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm#section-directories)
 中选择一个版本。
 
 <!--
@@ -265,15 +261,17 @@ page and pick a version from [the list](https://godoc.org/k8s.io/kubernetes/cmd/
 
 <!--
 For information about kube-proxy parameters in the kubeadm configuration see:
-- [kube-proxy](https://godoc.org/k8s.io/kubernetes/pkg/proxy/apis/config#KubeProxyConfiguration)
+- [kube-proxy reference](/docs/reference/config-api/kube-proxy-config.v1alpha1/)
 
 For information about enabling IPVS mode with kubeadm see:
 - [IPVS](https://github.com/kubernetes/kubernetes/blob/master/pkg/proxy/ipvs/README.md)
 -->
 kubeadm 配置中有关 kube-proxy 的说明请查看：
-- [kube-proxy](https://godoc.org/k8s.io/kubernetes/pkg/proxy/apis/config#KubeProxyConfiguration)
+
+- [kube-proxy 参考](/zh/docs/reference/config-api/kube-proxy-config.v1alpha1/)
 
 使用 kubeadm 启用 IPVS 模式的说明请查看：
+
 - [IPVS](https://github.com/kubernetes/kubernetes/blob/master/pkg/proxy/ipvs/README.md)
 
 <!--
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-join.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-join.md
index edb4e56369..e01ff5eea0 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-join.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-join.md
@@ -47,7 +47,7 @@ This action consists of the following steps:
    with the Kubernetes API server to submit a certificate signing request (CSR); by
    default the control plane signs this CSR request automatically.
 -->
-1. 一旦知道集群信息，kubelet 就可以开始 TLS 引导过程。
+2. 一旦知道集群信息，kubelet 就可以开始 TLS 引导过程。
    
    TLS 引导程序使用共享令牌与 Kubernetes API 服务器进行临时的身份验证，以提交证书签名请求 (CSR)；
    默认情况下，控制平面自动对该 CSR 请求进行签名。
@@ -56,7 +56,7 @@ This action consists of the following steps:
 1. Finally, kubeadm configures the local kubelet to connect to the API
    server with the definitive identity assigned to the node.
 -->
-1. 最后，kubeadm 配置本地 kubelet 使用分配给节点的确定标识连接到 API 服务器。
+3. 最后，kubeadm 配置本地 kubelet 使用分配给节点的确定标识连接到 API 服务器。
 
 <!-- 
 For control-plane nodes additional steps are performed:
@@ -134,7 +134,8 @@ The right method for your environment depends on how you provision nodes and the
 security expectations you have about your network and node lifecycles.
 -->
 Kubeadm 的发现有几个选项，每个选项都有安全性上的优缺点。
-适合你的环境的正确方法取决于节点是如何准备的以及你对网络的安全性期望和节点的生命周期特点。
+适合你的环境的正确方法取决于节点是如何准备的以及你对网络的安全性期望
+和节点的生命周期特点。
 
 <!--
 #### Token-based discovery with CA pinning
@@ -171,14 +172,18 @@ openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outfor
 -->
 **`kubeadm join` 命令示例**
 
-<!-- For worker nodes: -->
+<!--
+For worker nodes:
+-->
 对于工作节点：
 
 ```shell
 kubeadm join --discovery-token abcdef.1234567890abcdef --discovery-token-ca-cert-hash sha256:1234..cdef 1.2.3.4:6443
 ```
 
-<!-- For control-plane nodes: -->
+<!--
+For control-plane nodes:
+-->
 对于控制面节点：
 
 ```shell
@@ -200,26 +205,28 @@ if the `kubeadm init` command was called with `--upload-certs`.
    master even if other worker nodes or the network are compromised.
 
  - Convenient to execute manually since all of the information required fits
-   into a single `kubeadm join` command that is easy to copy and paste.
+   into a single `kubeadm join` command.
 -->
 
 **优势：**
- - 允许引导节点安全地发现主节点的信任根，即使其他工作节点或网络受到损害。
 
- - 方便手动执行，因为所需的所有信息都适合于易于复制和粘贴的单个 `kubeadm join` 命令。
+- 允许引导节点安全地发现主节点的信任根，即使其他工作节点或网络受到损害。
+
+- 方便手动执行，因为所需的所有信息都可放到一个 `kubeadm join` 命令中。
 
 <!-- 
 **Disadvantages:**
 
- - The CA hash is not normally known until the master has been provisioned,
-   which can make it more difficult to build automated provisioning tools that
-   use kubeadm. By generating your CA in beforehand, you may workaround this
-   limitation though.
+- The CA hash is not normally known until the master has been provisioned,
+  which can make it more difficult to build automated provisioning tools that
+  use kubeadm. By generating your CA in beforehand, you may workaround this
+  limitation though.
 -->
 
 **劣势：**
- - CA 哈希通常在主节点被提供之前是不知道的，这使得构建使用 kubeadm 的自动化配置工具更加困难。
-   通过预先生成CA，你可以解除这个限制。
+
+- CA 哈希通常在主节点被提供之前是不知道的，这使得构建使用 kubeadm 的自动化配置工具更加困难。
+  通过预先生成CA，你可以解除这个限制。
 
 <!--   
 #### Token-based discovery without CA pinning
@@ -238,7 +245,8 @@ using one of the other modes if possible.
 -->
 _这是 Kubernetes 1.7 和早期版本_中的默认设置；使用时要注意一些重要的补充说明。
 此模式仅依赖于对称令牌来签名(HMAC-SHA256)发现信息，这些发现信息为主节点建立信任根。
-在 Kubernetes 1.8 及以上版本中仍然可以使用 `--discovery-token-unsafe-skip-ca-verification` 参数，但是如果可能的话，你应该考虑使用一种其他模式。
+在 Kubernetes 1.8 及以上版本中仍然可以使用 `--discovery-token-unsafe-skip-ca-verification`
+参数，但是如果可能的话，你应该考虑使用一种其他模式。
 
 **`kubeadm join` 命令示例**
 
@@ -249,33 +257,34 @@ kubeadm join --token abcdef.1234567890abcdef --discovery-token-unsafe-skip-ca-ve
 <!--
 **Advantages:**
 
- - Still protects against many network-level attacks.
+- Still protects against many network-level attacks.
 
- - The token can be generated ahead of time and shared with the master and
-   worker nodes, which can then bootstrap in parallel without coordination. This
-   allows it to be used in many provisioning scenarios.
+- The token can be generated ahead of time and shared with the master and
+  worker nodes, which can then bootstrap in parallel without coordination. This
+  allows it to be used in many provisioning scenarios.
 -->
 
 **优势**
 
- - 仍然可以防止许多网络级攻击。
+- 仍然可以防止许多网络级攻击。
 
- - 可以提前生成令牌并与主节点和工作节点共享，这样主节点和工作节点就可以并行引导而无需协调。
-   这允许它在许多配置场景中使用。
+- 可以提前生成令牌并与主节点和工作节点共享，这样主节点和工作节点就可以并行引导而无需协调。
+  这允许它在许多配置场景中使用。
 
 <!--
 **Disadvantages:**
 
- - If an attacker is able to steal a bootstrap token via some vulnerability,
-   they can use that token (along with network-level access) to impersonate the
-   master to other bootstrapping nodes. This may or may not be an appropriate
-   tradeoff in your environment.
+- If an attacker is able to steal a bootstrap token via some vulnerability,
+  they can use that token (along with network-level access) to impersonate the
+  master to other bootstrapping nodes. This may or may not be an appropriate
+  tradeoff in your environment.
 -->
 
 **劣势**
 
- - 如果攻击者能够通过某些漏洞窃取引导令牌，那么他们可以使用该令牌（连同网络级访问）为其它处于引导过程中的节点提供假冒的主节点。
-   在你的环境中，这可能是一个适当的折衷方法，也可能不是。
+- 如果攻击者能够通过某些漏洞窃取引导令牌，那么他们可以使用该令牌（连同网络级访问）
+  为其它处于引导过程中的节点提供假冒的主节点。
+  在你的环境中，这可能是一个适当的折衷方法，也可能不是。
 
 <!--
 #### File or HTTPS-based discovery
@@ -292,7 +301,8 @@ In case the discovery file does not contain credentials, the TLS discovery token
 -->
 这种方案提供了一种带外方式在主节点和引导节点之间建立信任根。
 如果使用 kubeadm 构建自动配置，请考虑使用此模式。
-发现文件的格式为常规的 Kubernetes [kubeconfig](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/) 文件。
+发现文件的格式为常规的 Kubernetes
+[kubeconfig](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/) 文件。
 
 如果发现文件不包含凭据，则将使用 TLS 发现令牌。
 
@@ -300,35 +310,36 @@ In case the discovery file does not contain credentials, the TLS discovery token
 **Example `kubeadm join` commands:**
 -->
 **`kubeadm join` 命令示例：**
- - `kubeadm join --discovery-file path/to/file.conf` （本地文件）
 
- - `kubeadm join --discovery-file https://url/file.conf` (远程 HTTPS URL)
+- `kubeadm join --discovery-file path/to/file.conf` （本地文件）
+
+- `kubeadm join --discovery-file https://url/file.conf` (远程 HTTPS URL)
 
 <!--
 **Advantages:**
 
- - Allows bootstrapping nodes to securely discover a root of trust for the
-   master even if the network or other worker nodes are compromised.
+- Allows bootstrapping nodes to securely discover a root of trust for the
+  master even if the network or other worker nodes are compromised.
 -->
 
 **优势：**
 
- - 允许引导节点安全地发现主节点的信任根，即使网络或其他工作节点受到损害。
+- 允许引导节点安全地发现主节点的信任根，即使网络或其他工作节点受到损害。
 
 <!--
 **Disadvantages:**
 
- - Requires that you have some way to carry the discovery information from
-   the master to the bootstrapping nodes. This might be possible, for example,
-   via your cloud provider or provisioning tool. The information in this file is
-   not secret, but HTTPS or equivalent is required to ensure its integrity.
+- Requires that you have some way to carry the discovery information from
+  the master to the bootstrapping nodes. This might be possible, for example,
+  via your cloud provider or provisioning tool. The information in this file is
+  not secret, but HTTPS or equivalent is required to ensure its integrity.
 -->
 
 **劣势：**
 
- - 要求你有某种方法将发现信息从主节点传送到引导节点。
-   例如，这可以通过云提供商或驱动工具实现。
-   该文件中的信息不是加密的，而是需要 HTTPS 或等效文件来保证其完整性。
+- 要求你有某种方法将发现信息从主节点传送到引导节点。
+  例如，这可以通过云提供商或驱动工具实现。
+  该文件中的信息不是加密的，而是需要 HTTPS 或等效文件来保证其完整性。
 
 <!--
 ### Securing your installation even more {#securing-more}
@@ -352,7 +363,8 @@ By default, there is a CSR auto-approver enabled that basically approves any cli
 for a kubelet when a Bootstrap Token was used when authenticating. If you don't want the cluster to
 automatically approve kubelet client certs, you can turn it off by executing this command:
 -->
-默认情况下，Kubernetes 启用了 CSR 自动批准器，如果在身份验证时使用 Bootstrap Token，它会批准对 kubelet 的任何客户端证书的请求。
+默认情况下，Kubernetes 启用了 CSR 自动批准器，如果在身份验证时使用启动引导令牌，
+它会批准对 kubelet 的任何客户端证书的请求。
 如果不希望集群自动批准kubelet客户端证书，可以通过执行以下命令关闭它：
 
 ```shell
@@ -362,13 +374,15 @@ kubectl delete clusterrolebinding kubeadm:node-autoapprove-bootstrap
 <!--
 After that, `kubeadm join` will block until the admin has manually approved the CSR in flight:
 -->
-关闭后，`kubeadm join` 操作将会被阻断，直到管理员已经手动批准了在途中的 CSR 才会继续：
+关闭后，`kubeadm join` 操作将会被阻塞，直到管理员已经手动批准了在途中的 CSR 才会继续：
 
 ```shell
 kubectl get csr
 ```
 
-<!-- The output is similar to this: -->
+<!--
+The output is similar to this:
+-->
 输出类似于：
 
 ```
@@ -380,7 +394,9 @@ node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ   18s       system:bootstra
 kubectl certificate approve node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ
 ```
 
-<!-- The output is similar to this: -->
+<!--
+The output is similar to this:
+-->
 输出类似于：
 
 ```
@@ -391,7 +407,9 @@ certificatesigningrequest "node-csr-c69HXe7aYcqkS1bKmH4faEnHAWxn6i2bHZ2mD04jZyQ"
 kubectl get csr
 ```
 
-<!-- The output is similar to this: -->
+<!--
+The output is similar to this:
+-->
 输出类似于：
 
 ```
@@ -416,7 +434,8 @@ default. While there is no private data in this ConfigMap, some users might wish
 it off regardless. Doing so will disable the ability to use the `--discovery-token` flag of the
 `kubeadm join` flow. Here are the steps to do so:
 -->
-为了实现使用令牌作为唯一验证信息的加入工作流，默认情况下会公开带有验证主节点标识所需数据的 ConfigMap。
+为了实现使用令牌作为唯一验证信息的加入工作流，默认情况下会公开带有验证主节点标识
+所需数据的 ConfigMap。
 虽然此 ConfigMap 中没有私有数据，但一些用户可能希望无论如何都关闭它。
 这样做需要禁用 `kubeadm join` 工作流的 `--discovery-token` 参数。
 以下是实现步骤：
@@ -430,7 +449,9 @@ it off regardless. Doing so will disable the ability to use the `--discovery-tok
 kubectl -n kube-public get cm cluster-info -o yaml | grep "kubeconfig:" -A11 | grep "apiVersion" -A10 | sed "s/    //" | tee cluster-info.yaml
 ```
 
-<!-- The output is similar to this: -->
+<!--
+The output is similar to this:
+-->
 输出类似于：
 
 ```
@@ -457,9 +478,9 @@ users: []
 
 * 关闭 `cluster-info` ConfigMap 的公开访问：
 
-```shell
-kubectl -n kube-public delete rolebinding kubeadm:bootstrap-signer-clusterinfo
-```
+  ```shell
+  kubectl -n kube-public delete rolebinding kubeadm:bootstrap-signer-clusterinfo
+  ```
 
 <!--
 These commands should be run after `kubeadm init` but before `kubeadm join`.
@@ -516,7 +537,10 @@ page and pick a version from [the list](https://godoc.org/k8s.io/kubernetes/cmd/
 * [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token/) to manage tokens for `kubeadm join`
 * [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset/) to revert any changes made to this host by `kubeadm init` or `kubeadm join`
 -->
-* [kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/) 初始化 Kubernetes 主节点
-* [kubeadm token](/zh/docs/reference/setup-tools/kubeadm/kubeadm-token/) 管理 `kubeadm join` 的令牌
-* [kubeadm reset](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset/) 将 `kubeadm init` 或 `kubeadm join` 对主机的更改恢复到之前状态
+* [kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/)
+  初始化 Kubernetes 主节点
+* [kubeadm token](/zh/docs/reference/setup-tools/kubeadm/kubeadm-token/)
+  管理 `kubeadm join` 的令牌
+* [kubeadm reset](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset/)
+  将 `kubeadm init` 或 `kubeadm join` 对主机的更改恢复到之前状态
 
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md
index 4388edcfe4..0faea8865c 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade.md
@@ -3,7 +3,7 @@ title: kubeadm upgrade
 content_type: concept
 weight: 40
 ---
-<!-- ---
+<!--
 reviewers:
 - mikedanese
 - luxas
@@ -11,7 +11,7 @@ reviewers:
 title: kubeadm upgrade
 content_type: concept
 weight: 40
---- -->
+-->
 
 <!-- overview -->
 <!--
@@ -19,30 +19,25 @@ weight: 40
 behind one command, with support for both planning an upgrade and actually performing it. -->
 `kubeadm upgrade` 是一个对用户友好的命令，它将复杂的升级逻辑包装在一个命令后面，支持升级的规划和实际执行。
 
-
 <!-- body -->
 
 <!--
 ## kubeadm upgrade guidance
 -->
-## kubeadm 升级指南
+## kubeadm upgrade 指南
 
 <!--
 The steps for performing a upgrade using kubeadm are outlined in [this document](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/).
 For older versions of kubeadm, please refer to older documentation sets of the Kubernetes website.
 -->
-[本文档](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)概述了使用 kubeadm 执行升级的步骤。
-有关 kubeadm 旧版本，请参阅 Kubernetes 网站的旧版文档。
+[本文档](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)概述
+使用 kubeadm 执行升级的步骤。
+与 kubeadm 旧版本相关的文档，请参阅 Kubernetes 网站的旧版文档。
 
 <!--
 You can use `kubeadm upgrade diff` to see the changes that would be applied to static pod manifests.
 -->
-你可以使用 `kubeadm upgrade diff` 来查看将应用于静态 pod 清单的更改。
-
-<!--
-To use kube-dns with upgrades in Kubernetes v1.13.0 and later please follow [this guide](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon).
--->
-要在 Kubernetes v1.13.0 及更高版本中使用 kube-dns 进行升级，请遵循[本指南](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)。
+你可以使用 `kubeadm upgrade diff` 来查看将应用于静态 Pod 清单的更改。
 
 <!--
 In Kubernetes v1.15.0 and later, `kubeadm upgrade apply` and `kubeadm upgrade node` will also
@@ -50,8 +45,10 @@ automatically renew the kubeadm managed certificates on this node, including tho
 To opt-out, it is possible to pass the flag `--certificate-renewal=false`. For more details about certificate
 renewal see the [certificate management documentation](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs).
 -->
-在 Kubernetes v1.15.0 和更高版本中，`kubeadm upgrade apply` 和 `kubeadm upgrade node` 也将自动续订该节点上的 kubeadm 托管证书，包括存储在 kubeconfig 文件中的证书。
-要选择退出，可以传递参数 `--certificate-renewal=false`。有关证书续订的更多详细信息请参见[证书管理文档](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs)。
+在 Kubernetes v1.15.0 和更高版本中，`kubeadm upgrade apply` 和 `kubeadm upgrade node`
+也将自动续订该节点上的 kubeadm 托管证书，包括存储在 kubeconfig 文件中的证书。
+要选择退出，可以传递参数 `--certificate-renewal=false`。
+有关证书续订的更多详细信息请参见[证书管理文档](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs)。
 
 
 {{< note >}}
@@ -78,11 +75,12 @@ reports of unexpected results.
 ## kubeadm upgrade node {#cmd-upgrade-node}
 {{< include "generated/kubeadm_upgrade_node.md" >}}
 
-
-
 ## {{% heading "whatsnext" %}}
 
 <!--
-* [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config/) if you initialized your cluster using kubeadm v1.7.x or lower, to configure your cluster for `kubeadm upgrade` -->
-* 如果你使用 kubeadm v1.7.x 或更低版本初始化集群，则可以参考[kubeadm 配置](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config/)配置集群用于 `kubeadm upgrade`。
+* [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config/) if you initialized your cluster using kubeadm v1.7.x or lower, to configure your cluster for `kubeadm upgrade`
+-->
+* 如果你使用 kubeadm v1.7.x 或更低版本初始化集群，则可以参考
+  [kubeadm 配置](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config/)
+  配置集群用于 `kubeadm upgrade`。
 

From 87364a0983ecf3af20540efa0289b5a4508f8d2c Mon Sep 17 00:00:00 2001
From: David Garvey <davegarvey@hotmail.com>
Date: Mon, 26 Apr 2021 13:53:16 +0800
Subject: [PATCH 643/788] Add missing word 'be'

---
 .../custom-resources/custom-resource-definition-versioning.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
index 671637c084..1e21306e5f 100644
--- a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
+++ b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
@@ -72,7 +72,7 @@ after upgrading the objects to a new stored version.
 Removing an old version:
 
 1. Ensure all clients are fully migrated to the new version. The kube-apiserver
-   logs can reviewed to help identify any clients that are still accessing via
+   logs can be reviewed to help identify any clients that are still accessing via
    the old version.
 1. Set `served` to `false` for the old version in the `spec.versions` list. If
    any clients are still unexpectedly using the old version they may begin reporting

From 544d3c2fb7fcfde09e10936f75255c52e786f817 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Mon, 26 Apr 2021 16:14:23 +0800
Subject: [PATCH 644/788] [zh] Resync setup section (2)

---
 .../zh/docs/reference/setup-tools/_index.md   |   5 +
 .../setup/best-practices/multiple-zones.md    | 726 +++++-------------
 .../docs/setup/learning-environment/_index.md |  47 ++
 .../container-runtimes.md                     | 177 ++---
 .../production-environment/tools/kops.md      | 214 ++++--
 .../production-environment/tools/kubespray.md |  64 +-
 .../docs/setup/release/version-skew-policy.md | 106 ++-
 7 files changed, 595 insertions(+), 744 deletions(-)

diff --git a/content/zh/docs/reference/setup-tools/_index.md b/content/zh/docs/reference/setup-tools/_index.md
index 9cd9d94f0d..08b4c38e46 100644
--- a/content/zh/docs/reference/setup-tools/_index.md
+++ b/content/zh/docs/reference/setup-tools/_index.md
@@ -2,3 +2,8 @@
 title: 安装工具
 weight: 50
 ---
+
+<!--
+title: Setup tools
+weight: 50
+-->
diff --git a/content/zh/docs/setup/best-practices/multiple-zones.md b/content/zh/docs/setup/best-practices/multiple-zones.md
index e0c1523a79..b36b607781 100644
--- a/content/zh/docs/setup/best-practices/multiple-zones.md
+++ b/content/zh/docs/setup/best-practices/multiple-zones.md
@@ -1,5 +1,5 @@
 ---
-title: 运行于多区环境
+title: 运行于多可用区环境
 weight: 10
 content_type: concept
 ---
@@ -16,591 +16,267 @@ content_type: concept
 <!-- overview -->
 
 <!--
-This page describes how to run a cluster in multiple zones.
+This page describes running a cluster across multiple zones.
 -->
-本页描述如何在多个区（Zone）中运行集群。
+本页描述如何跨多个区（Zone）中运行集群。
 
 <!-- body -->
 
 <!--
-## Introduction
+## Background
 
-Kubernetes 1.2 adds support for running a single cluster in multiple failure zones
-(GCE calls them simply "zones", AWS calls them "availability zones", here we'll refer to them as "zones").
-This is a lightweight version of a broader Cluster Federation feature (previously referred to by the affectionate
-nickname ["Ubernetes"](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/multicluster/federation.md)).
-Full Cluster Federation allows combining separate
-Kubernetes clusters running in different regions or cloud providers
-(or on-premises data centers).  However, many
-users simply want to run a more available Kubernetes cluster in multiple zones
-of their single cloud provider, and this is what the multizone support in 1.2 allows
-(this previously went by the nickname "Ubernetes Lite").
+Kubernetes is designed so that a single Kubernetes cluster can run
+across multiple failure zones, typically where these zones fit within
+a logical grouping called a _region_. Major cloud providers define a region
+as a set of failure zones (also called _availability zones_) that provide
+a consistent set of features: within a region, each zone offers the same
+APIs and services.
+
+Typical cloud architectures aim to minimize the chance that a failure in
+one zone also impairs services in another zone.
 -->
-## 介绍
+## 背景
 
-Kubernetes 1.2 添加了跨多个失效区（Failure Zone）运行同一集群的能力
-（GCE 把它们称作“区（Zones）”，AWS 把它们称作“可用区（Availability Zones）”，
-这里我们用“区（Zones）”指代它们）。
-此能力是更广泛的集群联邦（Cluster Federation）特性的一个轻量级版本。
-集群联邦之前有一个昵称
-["Ubernetes"](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/multicluster/federation.md))。
-完全的集群联邦可以将运行在多个区域（Region）或云供应商（或本地数据中心）的多个
-Kubernetes 集群组合起来。
-不过，很多用户仅仅是希望在同一云厂商平台的多个区域运行一个可用性更好的集群，
-而这恰恰是 1.2 引入的多区支持所带来的特性
-（此特性之前有一个昵称 “Ubernetes Lite”）。
+Kubernetes 从设计上允许同一个 Kubernetes 集群跨多个失效区来运行，
+通常这些去位于某个称作 _区域（region）_ 逻辑分组中。
+主要的云提供商都将区域定义为一组失效区的集合（也称作 _可用区（Availability Zones）_），
+能够提供一组一致的功能特性：每个区域内，各个可用区提供相同的 API 和服务。
+
+典型的云体系结构都会尝试降低某个区中的失效影响到其他区中服务的概率。
 
 <!--
-Multizone support is deliberately limited: a single Kubernetes cluster can run
-in multiple zones, but only within the same region (and cloud provider).  Only
-GCE and AWS are currently supported automatically (though it is easy to
-add similar support for other clouds or even bare metal, by simply arranging
-for the appropriate labels to be added to nodes and volumes).
+## Control plane behavior
+
+All [control plane components](/docs/concepts/overview/components/#control-plane-components)
+support running as a pool of interchangeable resources, replicated per
+component.
 -->
-多区支持有意实现的有局限性：可以在跨多个区域运行同一 Kubernetes 集群，但只能
-在同一区域（Region）和云厂商平台。目前仅自动支持 GCE 和 AWS，尽管为其他云平台
-或裸金属平台添加支持页相对容易，只需要确保节点和卷上添加合适的标签即可。
+## 控制面行为   {#control-plane-behavior}
+
+所有的[控制面组件](/zh/docs/concepts/overview/components/#control-plane-components)
+都支持以一组可相互替换的资源池的形式来运行，每个组件都有多个副本。
 
 <!--
-## Functionality
-
-When nodes are started, the kubelet automatically adds labels to them with
-zone information.
+When you deploy a cluster control plane, place replicas of
+control plane components across multiple failure zones. If availability is
+an important concern, select at least three failure zones and replicate
+each individual control plane component (API server, scheduler, etcd,
+cluster controller manager) across at least three failure zones.
+If you are running a cloud controller manager then you should
+also replicate this across all the failure zones you selected.
 -->
-## 功能
+当你部署集群控制面时，应将控制面组件的副本跨多个失效区来部署。
+如果可用性是一个很重要的指标，应该选择至少三个失效区，并将每个
+控制面组件（API 服务器、调度器、etcd、控制器管理器）复制多个副本，
+跨至少三个失效区来部署。如果你在运行云控制器管理器，则也应该将
+该组件跨所选的三个失效区来部署。
 
-节点启动时，`kubelet` 自动向其上添加区信息标签。
-
-<!--
-Kubernetes will automatically spread the pods in a replication controller
-or service across nodes in a single-zone cluster (to reduce the impact of
-failures.)  With multiple-zone clusters, this spreading behavior is
-extended across zones (to reduce the impact of zone failures.)  (This is
-achieved via `SelectorSpreadPriority`).  This is a best-effort
-placement, and so if the zones in your cluster are heterogeneous
-(e.g. different numbers of nodes, different types of nodes, or
-different pod resource requirements), this might prevent perfectly
-even spreading of your pods across zones. If desired, you can use
-homogeneous zones (same number and types of nodes) to reduce the
-probability of unequal spreading.
--->
-在单区（Single-Zone）集群中， Kubernetes 会自动将副本控制器或服务中的 Pod
-分布到不同节点，以降低节点失效的影响。
-在多区集群中，这一分布负载的行为被扩展到跨区分布，以降低区失效的影响，
-跨区分布的能力是通过 `SelectorSpreadPriority` 实现的。此放置策略亦仅仅是
-尽力而为，所以如果你的集群所跨区是异质的（例如，节点个数不同、节点类型
-不同或者 Pod 资源需求不同），放置策略都可能无法完美地跨区完成 Pod 的
-均衡分布。如果需要，你可以使用同质区（节点个数和类型相同）以降低不均衡
-分布的可能性。
-
-<!--
-When persistent volumes are created, the `PersistentVolumeLabel`
-admission controller automatically adds zone labels to them.  The scheduler (via the
-`VolumeZonePredicate` predicate) will then ensure that pods that claim a
-given volume are only placed into the same zone as that volume, as volumes
-cannot be attached across zones.
--->
-持久卷被创建时，`PersistentVolumeLabel` 准入控制器会自动为其添加区标签。
-调度器使用 `VolumeZonePredicate` 断言确保申领某给定卷的 Pod 只会被放到
-该卷所在的区。这是因为卷不可以跨区挂载。
-
-<!--
-## Limitations
-
-There are some important limitations of the multizone support:
-
-* We assume that the different zones are located close to each other in the
-network, so we don't perform any zone-aware routing.  In particular, traffic
-that goes via services might cross zones (even if some pods backing that service
-exist in the same zone as the client), and this may incur additional latency and cost.
--->
-## 局限性
-
-多区支持有一些很重要的局限性：
-
-* 我们假定不同的区之间在网络上彼此距离很近，所以我们不执行可感知区的路由。
-  尤其是，即使某些负责提供该服务的 Pod  与客户端位于同一区，通过服务末端
-  进入的流量可能会跨区，因而会导致一些额外的延迟和开销。
-
-<!--
-* Volume zone-affinity will only work with a `PersistentVolume`, and will not
-work if you directly specify an EBS volume in the pod spec (for example).
-
-* Clusters cannot span clouds or regions (this functionality will require full
-federation support).
--->
-* 卷与区之间的亲和性仅适用于 PV 持久卷。例如，如果你直接在 Pod 规约中指定某 EBS
-  卷，这种亲和性支持就无法工作。
-
-* 集群无法跨多个云平台或者地理区域运行。这类功能需要完整的联邦特性支持。
-
-<!--
-* Although your nodes are in multiple zones, kube-up currently builds
-a single master node by default.  While services are highly
-available and can tolerate the loss of a zone, the control plane is
-located in a single zone.  Users that want a highly available control
-plane should follow the [high availability](/docs/setup/production-environment/tools/kubeadm/high-availability/) instructions.
--->
-* 尽管你的节点位于多个区中，`kube-up` 脚本目前默认只能构造一个主控节点。
-  尽管服务是高可用的，能够忍受失去某个区的问题，控制面位于某一个区中。
-  希望运行高可用控制面的用户应该遵照
-  [高可用性](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)
-  中的指令构建。
-
-<!--
-### Volume limitations
-
-The following limitations are addressed with
-[topology-aware volume binding](/docs/concepts/storage/storage-classes/#volume-binding-mode).
-
-* StatefulSet volume zone spreading when using dynamic provisioning is currently not compatible with
-  pod affinity or anti-affinity policies.
--->
-### 卷局限性
-
-以下局限性通过
-[拓扑感知的卷绑定](/zh/docs/concepts/storage/storage-classes/#volume-binding-mode)解决：
-
-* 使用动态卷供应时，StatefulSet 卷的跨区分布目前与 Pod
-  亲和性和反亲和性策略不兼容。
-
-<!--
-* If the name of the StatefulSet contains dashes ("-"), volume zone spreading
-  may not provide a uniform distribution of storage across zones.
-
-* When specifying multiple PVCs in a Deployment or Pod spec, the StorageClass
-  needs to be configured for a specific single zone, or the PVs need to be
-  statically provisioned in a specific zone. Another workaround is to use a
-  StatefulSet, which will ensure that all the volumes for a replica are
-  provisioned in the same zone.
--->
-* 如果 StatefulSet 的名字中包含连字符（"-"），卷的跨区分布可能无法实现存储的
-  跨区同一分布。
-
-* 当在一个 Deployment 或 Pod 规约中指定多个 PVC 申领时，则需要为某特定区域
-  配置 StorageClass，或者在某一特定区域中需要静态供应 PV 卷。
-  另一种解决方案是使用 StatefulSet，确保给定副本的所有卷都从同一区中供应。
-
-<!--
-## Walkthrough
-
-We're now going to walk through setting up and using a multi-zone
-cluster on both GCE & AWS.  To do so, you bring up a full cluster
-(specifying `MULTIZONE=true`), and then you add nodes in additional zones
-by running `kube-up` again (specifying `KUBE_USE_EXISTING_MASTER=true`).
--->
-## 演练
-
-我们现在准备对在 GCE 和 AWS 上配置和使用多区集群进行演练。为了完成此演练，
-你需要设置 `MULTIZONE=true` 来启动一个完整的集群，之后指定
-`KUBE_USE_EXISTING_MASTER=true` 并再次运行 `kube-up` 添加其他区中的节点。
-
-<!--
-### Bringing up your cluster
-
-Create the cluster as normal, but pass MULTIZONE to tell the cluster to manage multiple zones; creating nodes in us-central1-a.
--->
-### 建立集群
-
-和往常一样创建集群，不过需要设置 MULTIZONE，以便告诉集群需要管理多个区。
-这里我们在 `us-central1-a` 创建节点。
-
-GCE:
-
-```shell
-curl -sS https://get.k8s.io | MULTIZONE=true KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-a NUM_NODES=3 bash
-```
-
-AWS:
-
-```shell
-curl -sS https://get.k8s.io | MULTIZONE=true KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2a NUM_NODES=3 bash
-```
-
-<!--
-This step brings up a cluster as normal, still running in a single zone
-(but `MULTIZONE=true` has enabled multi-zone capabilities).
--->
-这一步骤和往常一样启动一个集群，不过尽管 `MULTIZONE=true`
-标志已经启用了多区功能特性支持，集群仍然运行在一个区内。
-
-<!--
-### Nodes are labeled
-
-View the nodes; you can see that they are labeled with zone information.
-They are all in `us-central1-a` (GCE) or `us-west-2a` (AWS) so far.  The
-labels are `topology.kubernetes.io/region` for the region,
-and `topology.kubernetes.io/zone` for the zone:
--->
-### 节点已被打标签
-
-查看节点，你会看到节点上已经有了区信息标签。
-目前这些节点都在 `us-central1-a` (GCE) 或 `us-west-2a` (AWS)。
-对于区域（Region），标签为 `topology.kubernetes.io/region`，
-对于区（Zone），标签为 `topology.kubernetes.io/zone`：
-
-```shell
-kubectl get nodes --show-labels
-```
-
-<!--
-The output is similar to this:
--->
-输出类似于：
-
-```
-NAME                     STATUS                     ROLES    AGE   VERSION          LABELS
-kubernetes-master        Ready,SchedulingDisabled   <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-1,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-master
-kubernetes-minion-87j9   Ready                      <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-87j9
-kubernetes-minion-9vlv   Ready                      <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
-kubernetes-minion-a12q   Ready                      <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-a12q
-```
-<!--
-### Add more nodes in a second zone
-
-Let's add another set of nodes to the existing cluster, reusing the
-existing master, running in a different zone (us-central1-b or us-west-2b).
-We run kube-up again, but by specifying `KUBE_USE_EXISTING_MASTER=true`
-kube-up will not create a new master, but will reuse one that was previously
-created instead.
--->
-### 添加第二个区中的节点
-
-让我们向现有集群中添加另外一组节点，复用现有的主控节点，但运行在不同的区
-（`us-central1-b` 或 `us-west-2b`）。
-我们再次运行 `kube-up`，不过设置 `KUBE_USE_EXISTING_MASTER=true`。
-`kube-up` 不会创建新的主控节点，而会复用之前创建的主控节点。
-
-GCE:
-
-```shell
-KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-b NUM_NODES=3 kubernetes/cluster/kube-up.sh
-```
-
-<!--
-On AWS we also need to specify the network CIDR for the additional
-subnet, along with the master internal IP address:
--->
-在 AWS 上，我们还需要为额外的子网指定网络 CIDR，以及主控节点的内部 IP 地址：
-
-```shell
-KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2b NUM_NODES=3 KUBE_SUBNET_CIDR=172.20.1.0/24 MASTER_INTERNAL_IP=172.20.0.9 kubernetes/cluster/kube-up.sh
-```
-
-<!--
-View the nodes again; 3 more nodes should have launched and be tagged
-in us-central1-b:
--->
-再次查看节点，你会看到新启动了三个节点并且其标签表明运行在 `us-central1-b` 区：
-
-```shell
-kubectl get nodes --show-labels
-```
-
-<!--
-The output is similar to this:
--->
-输出类似于：
-
-```
-NAME                     STATUS                     ROLES    AGE   VERSION           LABELS
-kubernetes-master        Ready,SchedulingDisabled   <none>   16m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-1,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-master
-kubernetes-minion-281d   Ready                      <none>   2m    v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-281d
-kubernetes-minion-87j9   Ready                      <none>   16m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-87j9
-kubernetes-minion-9vlv   Ready                      <none>   16m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
-kubernetes-minion-a12q   Ready                      <none>   17m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-a12q
-kubernetes-minion-pp2f   Ready                      <none>   2m    v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-pp2f
-kubernetes-minion-wf8i   Ready                      <none>   2m    v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-wf8i
-```
-
-<!--
-### Volume affinity
-
-Create a volume using the dynamic volume creation (only PersistentVolumes are supported for zone affinity):
--->
-### 卷亲和性
-
-通过动态卷供应创建一个卷（只有 PV 持久卷支持区亲和性）：
-
-```bash
-kubectl apply -f - <<EOF
-{
-  "apiVersion": "v1",
-  "kind": "PersistentVolumeClaim",
-  "metadata": {
-    "name": "claim1",
-    "annotations": {
-        "volume.alpha.kubernetes.io/storage-class": "foo"
-    }
-  },
-  "spec": {
-    "accessModes": [
-      "ReadWriteOnce"
-    ],
-    "resources": {
-      "requests": {
-        "storage": "5Gi"
-      }
-    }
-  }
-}
-EOF
-```
-
-<!--
-For version 1.3+ Kubernetes will distribute dynamic PV claims across
-the configured zones. For version 1.2, dynamic persistent volumes were
-always created in the zone of the cluster master
-(here us-central1-a / us-west-2a); that issue
-([#23330](https://github.com/kubernetes/kubernetes/issues/23330))
-was addressed in 1.3+.
--->
 {{< note >}}
-Kubernetes 1.3 及以上版本会将动态 PV 申领散布到所配置的各个区。
-在 1.2 版本中，动态持久卷总是在集群主控节点所在的区
-（这里的 `us-central1-a` 或 `us-west-2a`），
-对应的 Issue ([#23330](https://github.com/kubernetes/kubernetes/issues/23330))
-在 1.3 及以上版本中已经解决。
+<!--
+Kubernetes does not provide cross-zone resilience for the API server
+endpoints. You can use various techniques to improve availability for
+the cluster API server, including DNS round-robin, SRV records, or
+a third-party load balancing solution with health checking.
+-->
+Kubernetes 并不会为 API 服务器端点提供跨失效区的弹性。
+你可以为集群 API 服务器使用多种技术来提升其可用性，包括使用
+DNS 轮转、SRV 记录或者带健康检查的第三方负载均衡解决方案等等。
 {{< /note >}}
 
 <!--
-Now let's validate that Kubernetes automatically labeled the zone & region the PV was created in.
--->
-现在我们来验证 Kubernetes 自动为 PV 打上了所在区或区域的标签：
+## Node behavior
 
-```shell
-kubectl get pv --show-labels
-```
+Kubernetes automatically spreads the Pods for
+workload resources (such as {{< glossary_tooltip text="Deployment" term_id="deployment" >}}
+or {{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}})
+across different nodes in a cluster. This spreading helps
+reduce the impact of failures.
+-->
+## 节点行为   {#node-behavior}
+
+Kubernetes 自动为负载资源（如{{< glossary_tooltip text="Deployment" term_id="deployment" >}}
+或 {{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}})）
+跨集群中不同节点来部署其 Pods。
+这种分布逻辑有助于降低失效带来的影响。
 
 <!--
-The output is similar to this:
+When nodes start up, the kubelet on each node automatically adds
+{{< glossary_tooltip text="labels" term_id="label" >}} to the Node object
+that represents that specific kubelet in the Kubernetes API.
+These labels can include
+[zone information](/docs/reference/labels-annotations-taints/#topologykubernetesiozone).
 -->
-输出类似于：
-
-```
-NAME           CAPACITY   ACCESSMODES   RECLAIM POLICY   STATUS    CLAIM            STORAGECLASS    REASON    AGE       LABELS
-pv-gce-mj4gm   5Gi        RWO           Retain           Bound     default/claim1   manual                    46s       topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a
-```
+节点启动时，每个节点上的 kubelet 会向 Kubernetes API 中代表该 kubelet 的 Node 对象
+添加 {{< glossary_tooltip text="标签" term_id="label" >}}。
+这些标签可能包含[区信息](/zh/docs/reference/labels-annotations-taints/#topologykubernetesiozone)。
 
 <!--
-So now we will create a pod that uses the persistent volume claim.
-Because GCE PDs / AWS EBS volumes cannot be attached across zones,
-this means that this pod can only be created in the same zone as the volume:
+If your cluster spans multiple zones or regions, you can use node labels
+in conjunction with
+[Pod topology spread constraints](/docs/concepts/workloads/pods/pod-topology-spread-constraints/)
+to control how Pods are spread across your cluster among fault domains:
+regions, zones, and even specific nodes.
+These hints enable the
+{{< glossary_tooltip text="scheduler" term_id="kube-scheduler" >}} to place
+Pods for better expected availability, reducing the risk that a correlated
+failure affects your whole workload.
 -->
-现在我们将创建一个使用 PVC 申领的 Pod。
-由于 GCE PD 或 AWS EBS 卷都不能跨区挂载，这意味着 Pod 只能创建在卷所在的区：
-
-```yaml
-kubectl apply -f - <<EOF
-apiVersion: v1
-kind: Pod
-metadata:
-  name: mypod
-spec:
-  containers:
-    - name: myfrontend
-      image: nginx
-      volumeMounts:
-      - mountPath: "/var/www/html"
-        name: mypd
-  volumes:
-    - name: mypd
-      persistentVolumeClaim:
-        claimName: claim1
-EOF
-```
+如果你的集群跨了多个可用区或者地理区域，你可以使用节点标签，结合
+[Pod 拓扑分布约束](/zh/docs/concepts/workloads/pods/pod-topology-spread-constraints/)
+来控制如何在你的集群中多个失效域之间分布 Pods。这里的失效域可以是
+地理区域、可用区甚至是特定节点。
+这些提示信息使得{{< glossary_tooltip text="调度器" term_id="kube-scheduler" >}}
+能够更好地分布 Pods，以实现更好的可用性，降低因为某种失效给整个工作负载
+带来的风险。
 
 <!--
-Note that the pod was automatically created in the same zone as the volume, as
-cross-zone attachments are not generally permitted by cloud providers:
+For example, you can set a constraint to make sure that the
+3 replicas of a StatefulSet are all running in different zones to each
+other, whenever that is feasible. You can define this declaratively
+without explicitly defining which availability zones are in use for
+each workload.
 -->
-注意 Pod 自动创建在卷所在的区，因为云平台提供商一般不允许跨区挂接存储卷。
-
-```shell
-kubectl describe pod mypod | grep Node
-```
-
-```
-Node:        kubernetes-minion-9vlv/10.240.0.5
-```
+例如，你可以设置一种约束，确保某个 StatefulSet 中的三个副本都运行在
+不同的可用区中，只要其他条件允许。你可以通过声明的方式来定义这种约束，
+而不需要显式指定每个工作负载使用哪些可用区。
 
 <!--
-And check node labels:
+### Distributing nodes across zones
+
+Kubernetes' core does not create nodes for you; you need to do that yourself,
+or use a tool such as the [Cluster API](https://cluster-api.sigs.k8s.io/) to
+manage nodes on your behalf.
+
+Using tools such as the Cluster API you can define sets of machines to run as
+worker nodes for your cluster across multiple failure domains, and rules to
+automatically heal the cluster in case of whole-zone service disruption.
 -->
-检查节点标签：
+### 跨多个区分布节点 {#distributing-nodes-across-zones}
 
-```shell
-kubectl get node kubernetes-minion-9vlv --show-labels
-```
-
-```
-NAME                     STATUS    AGE    VERSION          LABELS
-kubernetes-minion-9vlv   Ready     22m    v1.6.0+fff5156   beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
-```
+Kubernetes 的核心逻辑并不会帮你创建节点，你需要自行完成此操作，或者使用
+类似 [Cluster API](https://cluster-api.sigs.k8s.io/) 这类工具来替你管理节点。
 
 <!--
-### Pods are spread across zones
-
-Pods in a replication controller or service are automatically spread
-across zones.  First, let's launch more nodes in a third zone:
+Using tools such as the Cluster API you can define sets of machines to run as
+worker nodes for your cluster across multiple failure domains, and rules to
+automatically heal the cluster in case of whole-zone service disruption.
 -->
-### Pod 跨区分布
-
-同一副本控制器或服务的多个 Pod 会自动完成跨区分布。
-首先，我们现在第三个区启动一些节点：
-
-GCE:
-
-```shell
-KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-f NUM_NODES=3 kubernetes/cluster/kube-up.sh
-```
-
-AWS:
-
-```shell
-KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2c NUM_NODES=3 KUBE_SUBNET_CIDR=172.20.2.0/24 MASTER_INTERNAL_IP=172.20.0.9 kubernetes/cluster/kube-up.sh
-```
+使用类似 Cluster API 这类工具，你可以跨多个失效域来定义一组用做你的集群
+工作节点的机器，以及当整个区的服务出现中断时如何自动治愈集群的策略。
 
 <!--
-Verify that you now have nodes in 3 zones:
--->
-验证你现在有来自三个区的节点：
+## Manual zone assignment for Pods
 
-```shell
-kubectl get nodes --show-labels
-```
+You can apply [node selector constraints](/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)
+to Pods that you create, as well as to Pod templates in workload resources
+such as Deployment, StatefulSet, or Job.
+-->
+## 为 Pods 手动指定区
 
 <!--
-Create the guestbook-go example, which includes an RC of size 3, running a simple web app:
+You can apply [node selector constraints](/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)
+to Pods that you create, as well as to Pod templates in workload resources
+such as Deployment, StatefulSet, or Job.
 -->
-创建 `guestbook-go` 示例，其中包含副本个数为 3 的 RC，运行一个简单的 Web 应用：
-
-```shell
-find kubernetes/examples/guestbook-go/ -name '*.json' | xargs -I {} kubectl apply -f {}
-```
+你可以应用[节点选择算符约束](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)
+到你所创建的 Pods 上，或者为 Deployment、StatefulSet 或 Job 这类工作负载资源
+中的 Pod 模板设置此类约束。
 
 <!--
-The pods should be spread across all 3 zones:
+## Storage access for zones
+
+When persistent volumes are created, the `PersistentVolumeLabel`
+[admission controller](/docs/reference/access-authn-authz/admission-controllers/)
+automatically adds zone labels to any PersistentVolumes that are linked to a specific
+zone. The {{< glossary_tooltip text="scheduler" term_id="kube-scheduler" >}} then ensures,
+through its `NoVolumeZoneConflict` predicate, that pods which claim a given PersistentVolume
+are only placed into the same zone as that volume.
 -->
-Pod 应该跨三个区分布：
+## 跨区的存储访问
 
-```shell
-kubectl describe pod -l app=guestbook | grep Node
-```
-
-```
-Node:        kubernetes-minion-9vlv/10.240.0.5
-Node:        kubernetes-minion-281d/10.240.0.8
-Node:        kubernetes-minion-olsh/10.240.0.11
-```
-
-```shell
-kubectl get node kubernetes-minion-9vlv kubernetes-minion-281d kubernetes-minion-olsh --show-labels
-```
-
-```
-NAME                     STATUS    ROLES    AGE    VERSION          LABELS
-kubernetes-minion-9vlv   Ready     <none>   34m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
-kubernetes-minion-281d   Ready     <none>   20m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-281d
-kubernetes-minion-olsh   Ready     <none>   3m     v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,topology.kubernetes.io/region=us-central1,topology.kubernetes.io/zone=us-central1-f,kubernetes.io/hostname=kubernetes-minion-olsh
-```
+当创建持久卷时，`PersistentVolumeLabel` 
+[准入控制器](/zh/docs/reference/access-authn-authz/admission-controllers/)
+会自动向那些链接到特定区的 PersistentVolume 添加区标签。
+{{< glossary_tooltip text="调度器" term_id="kube-scheduler" >}}通过其
+`NoVolumeZoneConflict` 断言确保申领给定 PersistentVolume 的 Pods 只会
+被调度到该卷所在的可用区。
 
 <!--
-Load-balancers span all zones in a cluster; the guestbook-go example
-includes an example load-balanced service:
+You can specify a {{< glossary_tooltip text="StorageClass" term_id="storage-class" >}}
+for PersistentVolumeClaims that specifies the failure domains (zones) that the
+storage in that class may use.
+To learn about configuring a StorageClass that is aware of failure domains or zones,
+see [Allowed topologies](/docs/concepts/storage/storage-classes/#allowed-topologies).
 -->
-负载均衡器也会跨集群中的所有区；`guestbook-go` 示例中包含了一个负载均衡
-服务的例子：
-
-```shell
-kubectl describe service guestbook | grep LoadBalancer.Ingress
-```
+你可以为 PersistentVolumeClaim 指定{{< glossary_tooltip text="StorageClass" term_id="storage-class" >}}
+以设置该类中的存储可以使用的失效域（区）。
+要了解如何配置能够感知失效域或区的 StorageClass，请参阅
+[可用的拓扑逻辑](/zh/docs/concepts/storage/storage-classes/#allowed-topologies)。
 
 <!--
-The output is similar to this:
--->
-输出类似于：
+## Networking
 
-```
-LoadBalancer Ingress:   130.211.126.21
-```
+By itself, Kubernetes does not include zone-aware networking. You can use a
+[network plugin](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
+to configure cluster networking, and that network solution might have zone-specific
+elements. For example, if your cloud provider supports Services with
+`type=LoadBalancer`, the load balancer might only send traffic to Pods running in the
+same zone as the load balancer element processing a given connection.
+Check your cloud provider's documentation for details.
+-->
+## 网络  {#networking}
+
+Kubernetes 自身不提供与可用区相关的联网配置。
+你可以使用[网络插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
+来配置集群的联网，该网络解决方案可能拥有一些与可用区相关的元素。
+例如，如果你的云提供商支持 `type=LoadBalancer` 的 Service，则负载均衡器
+可能仅会将请求流量发送到运行在负责处理给定连接的负载均衡器组件所在的区。
+请查阅云提供商的文档了解详细信息。
 
 <!--
-Set the above IP:
+For custom or on-premises deployments, similar considerations apply.
+{{< glossary_tooltip text="Service" term_id="service" >}} and
+{{< glossary_tooltip text="Ingress" term_id="ingress" >}} behavior, including handling
+of different failure zones, does vary depending on exactly how your cluster is set up.
 -->
-设置上面的 IP 地址：
-
-```shell
-export IP=130.211.126.21
-```
+对于自定义的或本地集群部署，也可以考虑这些因素
+{{< glossary_tooltip text="Service" term_id="service" >}} 
+{{< glossary_tooltip text="Ingress" term_id="ingress" >}} 的行为，
+包括处理不同失效区的方法，在很大程度上取决于你的集群是如何搭建的。
 
 <!--
-Explore with curl via IP:
+## Fault recovery
+
+When you set up your cluster, you might also need to consider whether and how
+your setup can restore service if all the failure zones in a region go
+off-line at the same time. For example, do you rely on there being at least
+one node able to run Pods in a zone?  
+Make sure that any cluster-critical repair work does not rely
+on there being at least one healthy node in your cluster. For example: if all nodes
+are unhealthy, you might need to run a repair Job with a special
+{{< glossary_tooltip text="toleration" term_id="toleration" >}} so that the repair
+can complete enough to bring at least one node into service.
+
+Kubernetes doesn't come with an answer for this challenge; however, it's
+something to consider.
 -->
-使用 curl 访问该 IP：
+## 失效恢复    {#fault-recovery}
 
+在搭建集群时，你可能需要考虑当某区域中的所有失效区都同时掉线时，是否以及如何
+恢复服务。例如，你是否要求在某个区中至少有一个节点能够运行 Pod？
+请确保任何对集群很关键的修复工作都不要指望集群中至少有一个健康节点。
+例如：当所有节点都不健康时，你可能需要运行某个修复性的 Job，
+该 Job 要设置特定的{{< glossary_tooltip text="容忍度" term_id="toleration" >}}
+以便修复操作能够至少将一个节点恢复为可用状态。
 
-```shell
-curl -s http://${IP}:3000/env | grep HOSTNAME
-```
+Kubernetes 对这类问题没有现成的解决方案；不过这也是要考虑的因素之一。
+
+## {{% heading "whatsnext" %}}
 
 <!--
-The output is similar to this:
+To learn how the scheduler places Pods in a cluster, honoring the configured constraints,
+visit [Scheduling and Eviction](/docs/concepts/scheduling-eviction/).
 -->
-输出类似于：
-
-```
-  "HOSTNAME": "guestbook-44sep",
-```
-
-<!--
-Again, explore multiple times:
--->
-如果多次尝试该命令：
-
-```shell
-(for i in `seq 20`; do curl -s http://${IP}:3000/env | grep HOSTNAME; done)  | sort | uniq
-```
-
-<!--
-The output is similar to this:
--->
-输出类似于：
-
-```shell
-  "HOSTNAME": "guestbook-44sep",
-  "HOSTNAME": "guestbook-hum5n",
-  "HOSTNAME": "guestbook-ppm40",
-```
-
-<!--
-The load balancer correctly targets all the pods, even though they are in multiple zones.
--->
-负载均衡器正确地选择不同的 Pod，即使它们跨了多个区。
-
-<!--
-### Shutting down the cluster
-
-When you're done, clean up:
--->
-### 停止集群
-
-当完成以上工作之后，清理任务现场：
-
-GCE:
-
-```shell
-KUBERNETES_PROVIDER=gce KUBE_USE_EXISTING_MASTER=true KUBE_GCE_ZONE=us-central1-f kubernetes/cluster/kube-down.sh
-KUBERNETES_PROVIDER=gce KUBE_USE_EXISTING_MASTER=true KUBE_GCE_ZONE=us-central1-b kubernetes/cluster/kube-down.sh
-KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-a kubernetes/cluster/kube-down.sh
-```
-
-AWS:
-
-```shell
-KUBERNETES_PROVIDER=aws KUBE_USE_EXISTING_MASTER=true KUBE_AWS_ZONE=us-west-2c kubernetes/cluster/kube-down.sh
-KUBERNETES_PROVIDER=aws KUBE_USE_EXISTING_MASTER=true KUBE_AWS_ZONE=us-west-2b kubernetes/cluster/kube-down.sh
-KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2a kubernetes/cluster/kube-down.sh
-```
-
+要了解调度器如何在集群中放置 Pods 并遵从所配置的约束，可参阅
+[调度与驱逐](/zh/docs/concepts/scheduling-eviction/)。
 
diff --git a/content/zh/docs/setup/learning-environment/_index.md b/content/zh/docs/setup/learning-environment/_index.md
index 9923716978..f68e52a439 100644
--- a/content/zh/docs/setup/learning-environment/_index.md
+++ b/content/zh/docs/setup/learning-environment/_index.md
@@ -2,3 +2,50 @@
 title: 学习环境
 weight: 20
 ---
+
+<!--
+{{/* There is a Netlify redirect from this page to /docs/tasks/tools/ */}}
+{{/* This page content only exists to provide a navigation stub */}}
+{{/* and to protect in case that redirect is one day removed. */}}
+
+{{/* If you're localizing this page, you only need to copy the front matter */}}
+{{/* and add a redirect into "/static/_redirects", for YOUR localization. */}}
+-->
+
+## kind
+
+<!--
+[`kind`](https://kind.sigs.k8s.io/docs/) lets you run Kubernetes on
+your local computer. This tool requires that you have
+[Docker](https://docs.docker.com/get-docker/) installed and configured.
+
+The kind [Quick Start](https://kind.sigs.k8s.io/docs/user/quick-start/) page
+shows you what you need to do to get up and running with kind.
+-->
+你可以使用 [`kind`](https://kind.sigs.k8s.io/docs/) 来在本地计算机上运行 Kubernetes。
+此工具要求你已经安装并配置了 [Docker](https://docs.docker.com/get-docker/)。
+
+kind [快速入门](https://kind.sigs.k8s.io/docs/user/quick-start/)页面
+为你展示了如何开始使用 kind 的相关信息。 
+
+## minikube
+
+<!--
+Like `kind`, [`minikube`](https://minikube.sigs.k8s.io/) is a tool that lets you run Kubernetes
+locally. `minikube` runs a single-node Kubernetes cluster on your personal
+computer (including Windows, macOS and Linux PCs) so that you can try out
+Kubernetes, or for daily development work.
+
+You can follow the official
+[Get Started!](https://minikube.sigs.k8s.io/docs/start/) guide if your focus is
+on getting the tool installed.
+-->
+与 `kind` 类似，[`minikube`](https://minikube.sigs.k8s.io/) 是一个允许你在
+本地运行 Kubernetes 的工具。`minikube` 在你的个人计算机上运行一个单节点的
+Kubernetes 集群（包括 Windows、macOS 和 Linux PC 机），这样你可以尝试
+Kubernetes 或者执行每天的开发工作。
+
+如果你所关注的是如何安装该工具，可以查阅官方的
+[Get Started!](https://minikube.sigs.k8s.io/docs/start/)
+文档。
+
diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 943cbb2d17..c0a8a66b5e 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -20,7 +20,8 @@ You need to install a
 into each node in the cluster so that Pods can run there. This page outlines
 what is involved and describes related tasks for setting up nodes.
  -->
-你需要在集群内每个节点上安装一个{{< glossary_tooltip text="容器运行时" term_id="container-runtime" >}}
+你需要在集群内每个节点上安装一个
+{{< glossary_tooltip text="容器运行时" term_id="container-runtime" >}}
 以使 Pod 可以运行在上面。本文概述了所涉及的内容并描述了与节点设置相关的任务。
 
 <!-- body -->
@@ -59,7 +60,8 @@ systemd means that there will be two different cgroup managers.
 -->
 控制组用来约束分配给进程的资源。
 
-当某个 Linux 系统发行版使用 [systemd](https://www.freedesktop.org/wiki/Software/systemd/) 作为其初始化系统时，初始化进程会生成并使用一个 root 控制组 (`cgroup`), 并充当 cgroup 管理器。
+当某个 Linux 系统发行版使用 [systemd](https://www.freedesktop.org/wiki/Software/systemd/)
+作为其初始化系统时，初始化进程会生成并使用一个 root 控制组 (`cgroup`), 并充当 cgroup 管理器。
 Systemd 与 cgroup 集成紧密，并将为每个 systemd 单元分配一个 cgroup。
 你也可以配置容器运行时和 kubelet 使用 `cgroupfs`。
 连同 systemd 一起使用 `cgroupfs` 意味着将有两个不同的 cgroup 管理器。
@@ -72,9 +74,12 @@ In the field, people have reported cases where nodes that are configured to use
 for the kubelet and Docker, but `systemd` for the rest of the processes, become unstable under
 resource pressure.
 -->
-单个 cgroup 管理器将简化分配资源的视图，并且默认情况下将对可用资源和使用中的资源具有更一致的视图。
+单个 cgroup 管理器将简化分配资源的视图，并且默认情况下将对可用资源和使用
+中的资源具有更一致的视图。
 当有两个管理器共存于一个系统中时，最终将对这些资源产生两种视图。
-在此领域人们已经报告过一些案例，某些节点配置让 kubelet 和 docker 使用 `cgroupfs`，而节点上运行的其余进程则使用 systemd; 这类节点在资源压力下会变得不稳定。
+在此领域人们已经报告过一些案例，某些节点配置让 kubelet 和 docker 使用
+`cgroupfs`，而节点上运行的其余进程则使用 systemd; 这类节点在资源压力下
+会变得不稳定。
 
 <!--
 Changing the settings such that your container runtime and kubelet use `systemd` as the cgroup driver
@@ -95,8 +100,11 @@ configuration, or reinstall it using automation.
 {{< /caution >}}
 -->
 注意：更改已加入集群的节点的 cgroup 驱动是一项敏感的操作。
-如果 kubelet 已经使用某 cgroup 驱动的语义创建了 pod，更改运行时以使用别的 cgroup 驱动，当为现有 Pods 重新创建 PodSandbox 时会产生错误。重启 kubelet 也可能无法解决此类问题。
-如果你有切实可行的自动化方案，使用其他已更新配置的节点来替换该节点，或者使用自动化方案来重新安装。
+如果 kubelet 已经使用某 cgroup 驱动的语义创建了 pod，更改运行时以使用
+别的 cgroup 驱动，当为现有 Pods 重新创建 PodSandbox 时会产生错误。
+重启 kubelet 也可能无法解决此类问题。
+如果你有切实可行的自动化方案，使用其他已更新配置的节点来替换该节点，
+或者使用自动化方案来重新安装。
 
 <!-- 
 ### Migrating to the `systemd` driver in kubeadm managed clusters
@@ -104,7 +112,7 @@ configuration, or reinstall it using automation.
 ### 将 kubeadm 托管的集群迁移到 `systemd` 驱动
 
 <!-- 
-Follow this [Migration guide](docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
+Follow this [Migration guide](/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver)
 if you wish to migrate to the `systemd` cgroup driver in existing kubeadm managed clusters.
 -->
 如果你想迁移到现有 kubeadm 托管集群中的 `systemd` cgroup 驱动程序，
@@ -125,26 +133,6 @@ This section contains the necessary steps to use containerd as CRI runtime.
 Use the following commands to install Containerd on your system:
 
 Install and configure prerequisites:
-
-```shell
-cat <<EOF | sudo tee /etc/modules-load.d/containerd.conf
-overlay
-br_netfilter
-EOF
-
-sudo modprobe overlay
-sudo modprobe br_netfilter
-
-# Setup required sysctl params, these persist across reboots.
-cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf
-net.bridge.bridge-nf-call-iptables  = 1
-net.ipv4.ip_forward                 = 1
-net.bridge.bridge-nf-call-ip6tables = 1
-EOF
-
-# Apply sysctl params without reboot
-sudo sysctl --system
-```
 -->
 本节包含使用 containerd 作为 CRI 运行时的必要步骤。
 
@@ -183,7 +171,10 @@ Install containerd:
 <!--
 1. Install the `containerd.io` package from the official Docker repositories. Instructions for setting up the Docker repository for your respective Linux distribution and installing the `containerd.io` package can be found at [Install Docker Engine](https://docs.docker.com/engine/install/#server).
 -->
-1. 从官方Docker仓库安装 `containerd.io` 软件包。可以在 [安装 Docker 引擎](https://docs.docker.com/engine/install/#server) 中找到有关为各自的 Linux 发行版设置 Docker 存储库和安装 `containerd.io` 软件包的说明。
+1. 从官方Docker仓库安装 `containerd.io` 软件包。可以在
+   [安装 Docker 引擎](https://docs.docker.com/engine/install/#server)
+   中找到有关为各自的 Linux 发行版设置 Docker 存储库和安装 `containerd.io`
+   软件包的说明。
 
 <!--
 2. Configure containerd:
@@ -206,10 +197,12 @@ Install containerd:
 
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}
+
 <!--
 Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), and then run the following commands:
 -->
-启动 Powershell 会话，将 `$Version` 设置为所需的版本（例如：`$ Version=1.4.3`），然后运行以下命令：
+启动 Powershell 会话，将 `$Version` 设置为所需的版本（例如：`$ Version=1.4.3`），
+然后运行以下命令：
 
 <!--
 1. Download containerd:
@@ -230,18 +223,17 @@ Start a Powershell session, set `$Version` to the desired version (ex: `$Version
    cd $Env:ProgramFiles\containerd\
    .\containerd.exe config default | Out-File config.toml -Encoding ascii
 
-   # Review the configuration. Depending on setup you may want to adjust:
-   # - the sandbox_image (Kubernetes pause image)
-   # - cni bin_dir and conf_dir locations
+   # 检查配置。根据你的配置，可能需要调整：
+   # - sandbox_image (Kubernetes pause 镜像)
+   # - cni bin_dir 和 conf_dir 位置
    Get-Content config.toml
 
-   # (Optional - but highly recommended) Exclude containerd from Windows Defender Scans
+   # (可选 - 不过强烈建议) 禁止 Windows Defender 扫描 containerd
    Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe"
    ```
 <!--
 3. Start containerd:
 -->
-
 3. 启动 containerd:
 
    ```powershell
@@ -260,15 +252,7 @@ Start a Powershell session, set `$Version` to the desired version (ex: `$Version
 
 <!-- 
 To use the `systemd` cgroup driver in `/etc/containerd/config.toml` with `runc`, set
-
-```
-[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
-  ...
-  [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
-    SystemdCgroup = true
-```
 -->
-
 结合 `runc` 使用 `systemd` cgroup 驱动，在 `/etc/containerd/config.toml` 中设置 
 
 ```
@@ -292,7 +276,7 @@ When using kubeadm, manually configure the
 [cgroup driver for kubelet](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node).
 -->
 当使用 kubeadm 时，请手动配置
-[kubelet 的 cgroup 驱动](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node).
+[kubelet 的 cgroup 驱动](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node).
 
 ### CRI-O
 
@@ -300,47 +284,29 @@ When using kubeadm, manually configure the
 This section contains the necessary steps to install CRI-O as a container runtime.
 
 Use the following commands to install CRI-O on your system:
-
-{{< note >}}
-The CRI-O major and minor versions must match the Kubernetes major and minor versions.
-For more information, see the [CRI-O compatibility matrix](https://github.com/cri-o/cri-o#compatibility-matrix-cri-o--kubernetes).
-{{< /note >}}
-
-Install and configure prerequisites:
-
-```shell
-
-# Create the .conf file to load the modules at bootup
-cat <<EOF | sudo tee /etc/modules-load.d/crio.conf
-overlay
-br_netfilter
-EOF
-
-sudo modprobe overlay
-sudo modprobe br_netfilter
-
-# Set up required sysctl params, these persist across reboots.
-cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf
-net.bridge.bridge-nf-call-iptables  = 1
-net.ipv4.ip_forward                 = 1
-net.bridge.bridge-nf-call-ip6tables = 1
-EOF
-
-sudo sysctl --system
-```
 -->
 本节包含安装 CRI-O 作为容器运行时的必要步骤。
 
 使用以下命令在系统中安装 CRI-O：
 
-提示：CRI-O 的主要以及次要版本必须与 Kubernetes 的主要和次要版本相匹配。
-更多信息请查阅 [CRI-O 兼容性列表](https://github.com/cri-o/cri-o#compatibility-matrix-cri-o--kubernetes)。
+{{< note >}}
+<!--
+The CRI-O major and minor versions must match the Kubernetes major and minor versions.
+For more information, see the [CRI-O compatibility matrix](https://github.com/cri-o/cri-o#compatibility-matrix-cri-o--kubernetes).
+-->
+CRI-O 的主要以及次要版本必须与 Kubernetes 的主要和次要版本相匹配。
+更多信息请查阅
+[CRI-O 兼容性列表](https://github.com/cri-o/cri-o#compatibility-matrix-cri-o--kubernetes)。
+{{< /note >}}
 
-安装以及配置的先决条件：
+<!--
+Install and configure prerequisites:
+-->
+安装并配置前置环境：
 
 ```shell
 
-# 创建 .conf 文件，以便在系统启动时加载内核模块
+# 创建 .conf 文件以在启动时加载模块
 cat <<EOF | sudo tee /etc/modules-load.d/crio.conf
 overlay
 br_netfilter
@@ -349,7 +315,7 @@ EOF
 sudo modprobe overlay
 sudo modprobe br_netfilter
 
-# 设置必需的 sysctl 参数，这些参数在重新启动后仍然存在。
+# 配置 sysctl 参数，这些配置在重启之后仍然起作用
 cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf
 net.bridge.bridge-nf-call-iptables  = 1
 net.ipv4.ip_forward                 = 1
@@ -379,7 +345,7 @@ To install version 1.20.0, set `VERSION=1.20:1.20.0`.
 <br />
 
 Then run
- -->
+-->
 在下列操作系统上安装 CRI-O, 使用下表中合适的值设置环境变量 `OS`:
 
 | 操作系统          | `$OS`             |
@@ -395,6 +361,7 @@ Then run
 <br />
 
 然后执行
+
 ```shell
 cat <<EOF | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
 deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /
@@ -532,10 +499,6 @@ sudo dnf module list cri-o
 CRI-O does not support pinning to specific releases on Fedora.
 
 Then run
-```shell
-sudo dnf module enable cri-o:$VERSION
-sudo dnf install cri-o
-```
 -->
 将 `$VERSION` 设置为与你的 Kubernetes 相匹配的 CRI-O 版本。
 例如，如果要安装 CRI-O 1.20，请设置 `VERSION=1.20`。
@@ -544,9 +507,11 @@ sudo dnf install cri-o
 ```shell
 sudo dnf module list cri-o
 ```
+
 CRI-O 不支持在 Fedora 上固定到特定的版本。
 
 然后执行
+
 ```shell
 sudo dnf module enable cri-o:$VERSION
 sudo dnf install cri-o --now
@@ -557,24 +522,32 @@ sudo dnf install cri-o --now
 
 <!-- 
 Start CRI-O:
+-->
+启动 CRI-O：
 
 ```shell
 sudo systemctl daemon-reload
 sudo systemctl enable crio --no
 ```
 
+<!--
 Refer to the [CRI-O installation guide](https://github.com/cri-o/cri-o/blob/master/install.md)
 for more information.
  -->
+参阅[CRI-O 安装指南](https://github.com/cri-o/cri-o/blob/master/install.md)
+了解进一步的详细信息。
+
+<!--
 #### cgroup driver
-<!-- 
+
 CRI-O uses the systemd cgroup driver per default. To switch to the `cgroupfs`
 cgroup driver, either edit `/etc/crio/crio.conf` or place a drop-in
 configuration in `/etc/crio/crio.conf.d/02-cgroup-manager.conf`, for example:
- -->
-默认情况下，CRI-O 使用 systemd cgroup 驱动程序。切换到`
-`cgroupfs`
-cgroup 驱动程序，或者编辑 `/ etc / crio / crio.conf` 或放置一个插件
+-->
+#### cgroup 驱动
+
+默认情况下，CRI-O 使用 systemd cgroup 驱动程序。要切换到 `cgroupfs`
+驱动程序，或者编辑 `/ etc / crio / crio.conf` 或放置一个插件
 在 `/etc/crio/crio.conf.d/02-cgroup-manager.conf` 中的配置，例如：
 
 ```toml
@@ -582,27 +555,31 @@ cgroup 驱动程序，或者编辑 `/ etc / crio / crio.conf` 或放置一个插
 conmon_cgroup = "pod"
 cgroup_manager = "cgroupfs"
 ```
+
 <!-- 
 Please also note the changed `conmon_cgroup`, which has to be set to the value
 `pod` when using CRI-O with `cgroupfs`. It is generally necessary to keep the
 cgroup driver configuration of the kubelet (usually done via kubeadm) and CRI-O
 in sync.
  -->
-另请注意更改后的 `conmon_cgroup` ，必须将其设置为
-`pod`将 CRI-O 与 `cgroupfs` 一起使用时。通常有必要保持
-kubelet 的 cgroup 驱动程序配置（通常透过 kubeadm 完成）和CRI-O 同步中。
+另请注意更改后的 `conmon_cgroup`，将 CRI-O 与 `cgroupfs` 一起使用时，
+必须将其设置为 `pod`。通常有必要保持 kubelet 的 cgroup 驱动程序配置
+（通常透过 kubeadm 完成）和 CRI-O 一致。
 
 ### Docker
+
 <!--
 1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server). You can find the latest validated version of Docker in this [dependencies](https://git.k8s.io/kubernetes/build/dependencies.yaml) file.
  -->
-1. 在每个节点上，根据[安装 Docker 引擎](https://docs.docker.com/engine/install/#server) 为你的 Linux 发行版安装 Docker。
-   你可以在此文件中找到最新的经过验证的 Docker 版本[依赖关系](https://git.k8s.io/kubernetes/build/dependencies.yaml)。
+1. 在每个节点上，根据[安装 Docker 引擎](https://docs.docker.com/engine/install/#server)
+   为你的 Linux 发行版安装 Docker。
+   你可以在此文件中找到最新的经过验证的 Docker 版本
+   [依赖关系](https://git.k8s.io/kubernetes/build/dependencies.yaml)。
 
 <!--
 2. Configure the Docker daemon, in particular to use systemd for the management of the container’s cgroups.
  -->
-2. 配置 Docker 守护程序，尤其是使用 systemd 来管理容器的cgroup。
+2. 配置 Docker 守护程序，尤其是使用 systemd 来管理容器的 cgroup。
 
    ```shell
    sudo mkdir /etc/docker
@@ -621,14 +598,16 @@ kubelet 的 cgroup 驱动程序配置（通常透过 kubeadm 完成）和CRI-O 
    {{< note >}}
    <!--
    `overlay2` is the preferred storage driver for systems running Linux kernel version 4.0 or higher, or RHEL or CentOS using version 3.10.0-514 and above.
-    -->
-   
-   对于运行 Linux 内核版本 4.0 或更高版本，或使用 3.10.0-51 及更高版本的 RHEL 或 CentOS 的系统，`overlay2`是首选的存储驱动程序。
+   -->
+   对于运行 Linux 内核版本 4.0 或更高版本，或使用 3.10.0-51 及更高版本的 RHEL
+   或 CentOS 的系统，`overlay2`是首选的存储驱动程序。
    {{< /note >}}
+
 <!--
 3. Restart Docker and enable on boot:
 -->
 3. 重新启动 Docker 并在启动时启用：
+
    ```shell
    sudo systemctl enable docker
    sudo systemctl daemon-reload
@@ -641,9 +620,9 @@ For more information refer to
   - [Configure the Docker daemon](https://docs.docker.com/config/daemon/)
   - [Control Docker with systemd](https://docs.docker.com/config/daemon/systemd/)
 -->
+有关更多信息，请参阅
+
+- [配置 Docker 守护程序](https://docs.docker.com/config/daemon/)
+- [使用 systemd 控制 Docker](https://docs.docker.com/config/daemon/systemd/)
 {{< /note >}}
 
-
-有关更多信息，请参阅
-  - [配置 Docker 守护程序](https://docs.docker.com/config/daemon/)
-  - [使用 systemd 控制 Docker](https://docs.docker.com/config/daemon/systemd/)
diff --git a/content/zh/docs/setup/production-environment/tools/kops.md b/content/zh/docs/setup/production-environment/tools/kops.md
index 871158dc89..94b448361a 100644
--- a/content/zh/docs/setup/production-environment/tools/kops.md
+++ b/content/zh/docs/setup/production-environment/tools/kops.md
@@ -19,9 +19,9 @@ It uses a tool called [`kops`](https://github.com/kubernetes/kops).
 本篇使用了一个名为 [`kops`](https://github.com/kubernetes/kops) 的工具。
 
 <!--
-kops is an opinionated provisioning system:
+kops is an automated provisioning system:
 -->
-kops 是一个自用的供应系统：
+kops 是一个自动化的制备系统：
 
 <!--
 * Fully automated installation
@@ -33,80 +33,170 @@ kops 是一个自用的供应系统：
 -->
 * 全自动安装流程
 * 使用 DNS 识别集群
-* 自我修复：一切都在自动扩展组中运行
+* 自我修复：一切都在自动扩缩组中运行
 * 支持多种操作系统（如 Debian、Ubuntu 16.04、CentOS、RHEL、Amazon Linux 和 CoreOS） - 参考 [images.md](https://github.com/kubernetes/kops/blob/master/docs/operations/images.md)
 * 支持高可用 - 参考 [high_availability.md](https://github.com/kubernetes/kops/blob/master/docs/high_availability.md)
 * 可以直接提供或者生成 terraform 清单 - 参考 [terraform.md](https://github.com/kubernetes/kops/blob/master/docs/terraform.md)
 
-<!--
-If your opinions differ from these you may prefer to build your own cluster using [kubeadm](/docs/admin/kubeadm/) as
-a building block.  kops builds on the kubeadm work.
--->
-如果你有不同的观点，你可能更喜欢使用 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/)
-作为构建工具来构建自己的集群。kops 建立在 kubeadm 工作的基础上。
+## {{% heading "prerequisites" %}}
 
-<!-- body -->
+<!--
+* You must have [kubectl](/docs/tasks/tools/) installed.
+
+* You must [install](https://github.com/kubernetes/kops#installing) `kops` on a 64-bit (AMD64 and Intel 64) device architecture.
+
+* You must have an [AWS account](https://docs.aws.amazon.com/polly/latest/dg/setting-up.html), generate [IAM keys](https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys) and [configure](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html#cli-quick-configuration) them. The IAM user will need [adequate permissions](https://github.com/kubernetes/kops/blob/master/docs/getting_started/aws.md#setup-iam-user).
+-->
+* 你必须安装 [kubectl](/zh/docs/tasks/tools/)。 
+* 你必须安装[安装](https://github.com/kubernetes/kops#installing) `kops`
+  到 64 位的（AMD64 和 Intel 64）设备架构上。
+* 你必须拥有一个 [AWS 账户](https://docs.aws.amazon.com/polly/latest/dg/setting-up.html)，
+  生成 [IAM 秘钥](https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys)
+  并[配置](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html#cli-quick-configuration)
+  该秘钥。IAM 用户需要[足够的权限许可](https://github.com/kubernetes/kops/blob/master/docs/getting_started/aws.md#setup-iam-user)。
+
+<!-- steps -->
 
 <!--
 ## Creating a cluster
 
 ### (1/5) Install kops
 
-#### Requirements
+#### Installation
 
-You must have [kubectl](/docs/tasks/tools/install-kubectl/) installed in order for kops to work.
+Download kops from the [releases page](https://github.com/kubernetes/kops/releases) (it is also convenient to build from source):
 -->
 ## 创建集群
 
 ### (1/5) 安装 kops
 
-#### 前提条件
-
-你必须安装 [kubectl](/zh/docs/tasks/tools/install-kubectl/) 才能使 kops 工作。
-
-<!--
-#### Installation
-
-Download kops from the [releases page](https://github.com/kubernetes/kops/releases) (it is also easy to build from source):
--->
 #### 安装
 
-从[下载页面](https://github.com/kubernetes/kops/releases)下载 kops（从源代码构建也很容易）：
+从[下载页面](https://github.com/kubernetes/kops/releases)下载 kops
+（从源代码构建也很方便）：
+
+{{< tabs name="kops_installation" >}}
+{{% tab name="macOS" %}}
 
 <!--
-On macOS:
-# you can also install using Homebrew
+Download the latest release with the command:
 -->
-在 macOS 上：
+使用下面的命令下载最新发布版本：
+
+```shell
+curl -LO https://github.com/kubernetes/kops/releases/download/$(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)/kops-darwin-amd64
+```
+
+<!--
+To download a specific version, replace the following portion of the command with the specific kops version.
+-->
+要下载特定版本，使用特定的 kops 版本替换下面命令中的部分：
+
+```shell
+$(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)
+```
+
+<!--
+For example, to download kops version v1.20.0 type:
+-->
+例如，要下载 kops v1.20.0，输入：
+
+```shell
+curl -LO https://github.com/kubernetes/kops/releases/download/v1.20.0/kops-darwin-amd64
+```
+
+<!--
+Make the kops binary executable.
+-->
+令 kops 二进制文件可执行：
 
 ```shell
-curl -OL https://github.com/kubernetes/kops/releases/download/1.10.0/kops-darwin-amd64
 chmod +x kops-darwin-amd64
-mv kops-darwin-amd64 /usr/local/bin/kops
-# 你也可以使用 Homebrew 安装 kops
+```
+
+<!--
+Move the kops binary in to your PATH.
+-->
+将 kops 二进制文件移到你的 PATH 下：
+
+```shell
+sudo mv kops-darwin-amd64 /usr/local/bin/kops
+```
+
+你也可以使用 [Homebrew](https://brew.sh/) 安装 kops：
+
+```shell
+brew update && brew install kops
+```
+{{% /tab %}}
+{{% tab name="Linux" %}}
+
+<!--
+Download the latest release with the command:
+-->
+使用命令下载最新发布版本：
+
+```shell
+curl -LO https://github.com/kubernetes/kops/releases/download/$(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)/kops-linux-amd64
+```
+
+<!--
+To download a specific version of kops, replace the following portion of the command with the specific kops version.
+-->
+要下载 kops 的特定版本，用特定的 kops 版本替换下面命令中的部分：
+
+```shell
+$(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)
+```
+
+<!--
+For example, to download kops version v1.20.0 type:
+-->
+例如，要下载 kops v1.20 版本，输入：
+
+```shell
+curl -LO https://github.com/kubernetes/kops/releases/download/v1.20.0/kops-linux-amd64
+```
+
+<!--
+Make the kops binary executable
+-->
+令 kops 二进制文件可执行：
+
+```shell
+chmod +x kops-linux-amd64
+```
+
+<!--
+Move the kops binary in to your PATH.
+-->
+将 kops 二进制文件移到 PATH 下：
+
+
+```shell
+sudo mv kops-linux-amd64 /usr/local/bin/kops
+```
+
+你也可以使用 [Homebrew](https://docs.brew.sh/Homebrew-on-Linux)
+来安装 kops：
+
+```shell
 brew update && brew install kops
 ```
 
-<!--
-On Linux:
--->
-在 Linux 上：
-
-```shell
-wget https://github.com/kubernetes/kops/releases/download/1.10.0/kops-linux-amd64
-chmod +x kops-linux-amd64
-mv kops-linux-amd64 /usr/local/bin/kops
-```
+{{% /tab %}}
+{{< /tabs >}}
 
 <!--
 ### (2/5) Create a route53 domain for your cluster
 
-kops uses DNS for discovery, both inside the cluster and so that you can reach the kubernetes API server
+kops uses DNS for discovery, both inside the cluster and outside, so that you can reach the kubernetes API server
 from clients.
 -->
 ### (2/5) 为你的集群创建一个 route53 域名
 
-kops 在集群内部都使用 DNS 进行发现操作，因此你可以从客户端访问 kubernetes API 服务器。
+kops 在集群内部和外部都使用 DNS 进行发现操作，这样你可以从客户端访问
+kubernetes API 服务器。
 
 <!--
 kops has a strong opinion on the cluster name: it should be a valid DNS name.  By doing so you will
@@ -120,8 +210,8 @@ kops 对集群名称有明显的要求：它应该是有效的 DNS 名称。这
 You can, and probably should, use subdomains to divide your clusters.  As our example we will use
 `useast1.dev.example.com`.  The API server endpoint will then be `api.useast1.dev.example.com`.
 -->
-你应该使用子域名来划分集群。作为示例，我们将使用域名 `useast1.dev.example.com`。
-然后，API 服务器端点域名将为 `api.useast1.dev.example.com`。
+你可以，或许应该使用子域名来划分集群。作为示例，我们将使用域名 `useast1.dev.example.com`。
+这样，API 服务器端点域名将为 `api.useast1.dev.example.com`。
 
 <!--
 A Route53 hosted zone can serve subdomains.  Your hosted zone could be `useast1.dev.example.com`,
@@ -154,10 +244,10 @@ records at your domain registrar (e.g. `example.com` would need to be configured
 例如，你需要在购买 `example.com` 的地方配置 `example.com`。
 
 <!--
-This step is easy to mess up (it is the #1 cause of problems!)  You can double-check that
+Verify your route53 domain setup (it is the #1 cause of problems!). You can double-check that
 your cluster is configured correctly if you have the dig tool by running:
 -->
-这一步很容易搞砸（这是问题的第一大原因！）
+检查你的 route53 域已经被正确设置（这是导致问题的最常见原因！）。
 如果你安装了 dig 工具，则可以通过运行以下步骤再次检查集群是否配置正确：
 
 ```shell
@@ -187,8 +277,10 @@ administer the same clusters - this is much easier than passing around kubecfg f
 to the S3 bucket will have administrative access to all your clusters, so you don't want to share it beyond
 the operations team.
 -->
-多个集群可以使用同一 S3 存储桶，并且你可以在管理同一集群的同事之间共享一个 S3 存储桶 - 这比传递 kubecfg 文件容易得多。
-但是有权访问 S3 存储桶的任何人都将拥有对所有集群的管理访问权限，因此你不想在运营团队之外共享它。
+多个集群可以使用同一 S3 存储桶，并且你可以在管理同一集群的同事之间共享一个
+S3 存储桶 - 这比传递 kubecfg 文件容易得多。
+但是有权访问 S3 存储桶的任何人都将拥有对所有集群的管理访问权限，
+因此你不想在运营团队之外共享它。
 
 <!--
 So typically you have one S3 bucket for each ops team (and often the name will correspond
@@ -200,7 +292,8 @@ to the name of the hosted zone above!)
 In our example, we chose `dev.example.com` as our hosted zone, so let's pick `clusters.dev.example.com` as
 the S3 bucket name.
 -->
-在我们的示例中，我们选择 `dev.example.com` 作为托管区域，因此让我们选择 `clusters.dev.example.com` 作为 S3 存储桶名称。
+在我们的示例中，我们选择 `dev.example.com` 作为托管区域，因此我们选择
+`clusters.dev.example.com` 作为 S3 存储桶名称。
 
 <!--
 * Export `AWS_PROFILE` (if you need to select a profile for the AWS CLI to work)
@@ -210,17 +303,18 @@ the S3 bucket name.
 -->
 * 导出 `AWS_PROFILE` 文件（如果你需要选择一个配置文件用来使 AWS CLI 正常工作）
 * 使用 `aws s3 mb s3://clusters.dev.example.com` 创建 S3 存储桶
-* 你可以进行 `export KOPS_STATE_STORE=s3://clusters.dev.example.com` 操作，然后 kops 将默认使用此位置。
+* 你可以进行 `export KOPS_STATE_STORE=s3://clusters.dev.example.com` 操作，
+  然后 kops 将默认使用此位置。
   我们建议将其放入你的 bash profile 文件或类似文件中。
 
 <!--
 ### (4/5) Build your cluster configuration
 
-Run "kops create cluster" to create your cluster configuration:
+Run `kops create cluster` to create your cluster configuration:
 -->
 ### (4/5) 建立你的集群配置
 
-运行 "kops create cluster" 以创建你的集群配置：
+运行 `kops create cluster` 以创建你的集群配置：
 
 `kops create cluster --zones=us-east-1c useast1.dev.example.com`
 
@@ -229,7 +323,8 @@ kops will create the configuration for your cluster.  Note that it _only_ create
 not actually create the cloud resources - you'll do that in the next step with a `kops update cluster`.  This
 give you an opportunity to review the configuration or change it.
 -->
-kops 将为你的集群创建配置。请注意，它_仅_创建配置，实际上并没有创建云资源 - 你将在下一步中使用 `kops update cluster` 进行配置。
+kops 将为你的集群创建配置。请注意，它_仅_创建配置，实际上并没有创建云资源 - 
+你将在下一步中使用 `kops update cluster` 进行配置。
 这使你有机会查看配置或进行更改。
 
 <!--
@@ -312,18 +407,6 @@ See the [list of add-ons](/docs/concepts/cluster-administration/addons/) to expl
 
 * 删除集群：`kops delete cluster useast1.dev.example.com --yes`
 
-<!--
-## Feedback
--->
-## 反馈
-
-<!--
-* Slack Channel: [#kops-users](https://kubernetes.slack.com/messages/kops-users/)
-* [GitHub Issues](https://github.com/kubernetes/kops/issues)
--->
-* Slack 频道: [#kops-users](https://kubernetes.slack.com/messages/kops-users/)
-* [GitHub Issues](https://github.com/kubernetes/kops/issues)
-
 ## {{% heading "whatsnext" %}}
 
 <!--
@@ -332,7 +415,8 @@ See the [list of add-ons](/docs/concepts/cluster-administration/addons/) to expl
 * See the `kops` [docs](https://github.com/kubernetes/kops) section for tutorials, best practices and advanced configuration options.
 -->
 * 了解有关 Kubernetes 的[概念](/zh/docs/concepts/) 和
-  [`kubectl`](/zh/docs/reference/kubectl/overview/) 的更多信息。
+  [`kubectl`](/zh/docs/reference/kubectl/overview/) 有关的更多信息。
 * 了解 `kops` [高级用法](https://github.com/kubernetes/kops)。
-* 请参阅 `kops` [文档](https://github.com/kubernetes/kops) 获取教程、最佳做法和高级配置选项。
+* 请参阅 `kops` [文档](https://github.com/kubernetes/kops) 获取教程、
+  最佳做法和高级配置选项。
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubespray.md b/content/zh/docs/setup/production-environment/tools/kubespray.md
index eabd14c7f5..0120acd20c 100644
--- a/content/zh/docs/setup/production-environment/tools/kubespray.md
+++ b/content/zh/docs/setup/production-environment/tools/kubespray.md
@@ -14,12 +14,17 @@ weight: 30
 <!--
 This quickstart helps to install a Kubernetes cluster hosted on GCE, Azure, OpenStack, AWS, vSphere, Packet (bare metal), Oracle Cloud Infrastructure (Experimental) or Baremetal with [Kubespray](https://github.com/kubernetes-sigs/kubespray).
 -->
-此快速入门有助于使用 [Kubespray](https://github.com/kubernetes-sigs/kubespray) 安装在 GCE、Azure、OpenStack、AWS、vSphere、Packet（裸机）、Oracle Cloud Infrastructure（实验性）或 Baremetal 上托管的 Kubernetes 集群。
+此快速入门有助于使用 [Kubespray](https://github.com/kubernetes-sigs/kubespray)
+安装在 GCE、Azure、OpenStack、AWS、vSphere、Packet（裸机）、Oracle Cloud
+Infrastructure（实验性）或 Baremetal 上托管的 Kubernetes 集群。
 
 <!--
 Kubespray is a composition of [Ansible](https://docs.ansible.com/) playbooks, [inventory](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/ansible.md), provisioning tools, and domain knowledge for generic OS/Kubernetes clusters configuration management tasks. Kubespray provides:
 -->
-Kubespray 是一个由 [Ansible](https://docs.ansible.com/) playbooks、[清单（inventory）](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/ansible.md)、供应工具和通用 OS/Kubernetes 集群配置管理任务的领域知识组成的。 Kubespray 提供：
+Kubespray 是一个由 [Ansible](https://docs.ansible.com/) playbooks、
+[清单（inventory）](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/ansible.md)、
+制备工具和通用 OS/Kubernetes 集群配置管理任务的领域知识组成的。
+Kubespray 提供：
 
 <!--
 * a highly available cluster
@@ -50,17 +55,18 @@ Kubespray 是一个由 [Ansible](https://docs.ansible.com/) playbooks、[清单
 To choose a tool which best fits your use case, read [this comparison](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md) to
 [kubeadm](/docs/reference/setup-tools/kubeadm/) and [kops](/docs/setup/production-environment/tools/kops/).
 -->
-要选择最适合你的用例的工具，请阅读[此比较](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)以
- [kubeadm](/zh/docs/reference/setup-tools/kubeadm/) 和 [kops](/zh/docs/setup/production-environment/tools/kops/) 。
+要选择最适合你的用例的工具，请阅读
+[kubeadm](/zh/docs/reference/setup-tools/kubeadm/) 和
+[kops](/zh/docs/setup/production-environment/tools/kops/) 之间的
+[这份比较](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md)。
+ 。
 <!-- body -->
 
 <!--
 ## Creating a cluster
 
 ### (1/5) Meet the underlay requirements
-
 -->
-
 ## 创建集群
 
 ### （1/5）满足下层设施要求
@@ -81,11 +87,14 @@ Provision servers with the following [requirements](https://github.com/kubernete
 -->
 * 在将运行 Ansible 命令的计算机上安装 Ansible v2.9 和 python-netaddr
 * **运行 Ansible Playbook 需要 Jinja 2.11（或更高版本）**
-* 目标服务器必须有权访问 Internet 才能拉取 Docker 镜像。否则，需要其他配置（[请参见离线环境](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/offline-environment.md)）
+* 目标服务器必须有权访问 Internet 才能拉取 Docker 镜像。否则，
+  需要其他配置（[请参见离线环境](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/offline-environment.md)）
 * 目标服务器配置为允许 IPv4 转发
 * **你的 SSH 密钥必须复制**到清单中的所有服务器部分
-* 防火墙不受管理，你将需要按照以前的方式实施自己的规则。为了避免在部署过程中出现任何问题，你应该禁用防火墙
-* 如果从非 root 用户帐户运行 kubespray，则应在目标服务器中配置正确的特权升级方法。然后应指定“ansible_become” 标志或命令参数 “--become” 或 “-b”
+* 防火墙不受管理，你将需要按照以前的方式实施自己的规则。
+  为了避免在部署过程中出现任何问题，你应该禁用防火墙
+* 如果从非 root 用户帐户运行 kubespray，则应在目标服务器中配置正确的特权升级方法。
+  然后应指定“ansible_become” 标志或命令参数 “--become” 或 “-b”
 
 <!--
 Kubespray provides the following utilities to help provision your environment:
@@ -105,16 +114,18 @@ Kubespray 提供以下实用程序来帮助你设置环境：
 <!--
 ### (2/5) Compose an inventory file
 
-After you provision your servers, create an [inventory file for Ansible](https://docs.ansible.com/ansible/intro_inventory.html). You can do this manually or via a dynamic inventory script. For more information, see "[Building your own inventory](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)".
+After you provision your servers, create an [inventory file for Ansible](https://docs.ansible.com/ansible/latest/network/getting_started/first_inventory.html). You can do this manually or via a dynamic inventory script. For more information, see "[Building your own inventory](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)".
 
 ### (3/5) Plan your cluster deployment
 
 Kubespray provides the ability to customize many aspects of the deployment:
-
 -->
 ### （2/5）编写清单文件
 
-设置服务器后，请创建一个 [Ansible 的清单文件](https://docs.ansible.com/ansible/intro_inventory.html)。你可以手动执行此操作，也可以通过动态清单脚本执行此操作。有关更多信息，请参阅“[建立你自己的清单](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)”。
+设置服务器后，请创建一个
+[Ansible 的清单文件](https://docs.ansible.com/ansible/latest/network/getting_started/first_inventory.html)。
+你可以手动执行此操作，也可以通过动态清单脚本执行此操作。有关更多信息，请参阅
+“[建立你自己的清单](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)”。
 
 ### （3/5）规划集群部署
 
@@ -146,11 +157,12 @@ Kubespray 能够自定义部署的许多方面：
 * 证书生成方式
 
 <!--
-Kubespray customizations can be made to a [variable file](https://docs.ansible.com/ansible/playbooks_variables.html). If you are just getting started with Kubespray, consider using the Kubespray defaults to deploy your cluster and explore Kubernetes.
+Kubespray customizations can be made to a [variable file](https://docs.ansible.com/ansible/latest/user_guide/playbooks_variables.html). If you are just getting started with Kubespray, consider using the Kubespray defaults to deploy your cluster and explore Kubernetes.
 -->
-
-可以修改[变量文件](https://docs.ansible.com/ansible/playbooks_variables.html)以进行 Kubespray 定制。
-如果你刚刚开始使用 Kubespray，请考虑使用 Kubespray 默认设置来部署你的集群并探索 Kubernetes 。
+可以修改[变量文件](https://docs.ansible.com/ansible/latest/user_guide/playbooks_variables.html)
+以进行 Kubespray 定制。
+如果你刚刚开始使用 Kubespray，请考虑使用 Kubespray 默认设置来部署你的集群
+并探索 Kubernetes 。
 <!--
 ### (4/5) Deploy a Cluster
 
@@ -158,12 +170,12 @@ Next, deploy your cluster:
 
 Cluster deployment using [ansible-playbook](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#starting-custom-deployment).
 -->
-
 ### （4/5）部署集群
 
 接下来，部署你的集群：
 
-使用 [ansible-playbook](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#starting-custom-deployment) 进行j集群部署。
+使用 [ansible-playbook](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#starting-custom-deployment)
+进行集群部署。
 
 ```shell
 ansible-playbook -i your/inventory/inventory.ini cluster.yml -b -v \
@@ -172,7 +184,9 @@ ansible-playbook -i your/inventory/inventory.ini cluster.yml -b -v \
 <!--
 Large deployments (100+ nodes) may require [specific adjustments](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/large-deployments.md) for best results.
 -->
-大型部署（超过 100 个节点）可能需要[特定的调整](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/large-deployments.md)，以获得最佳效果。
+大型部署（超过 100 个节点）可能需要
+[特定的调整](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/large-deployments.md)，
+以获得最佳效果。
 
 <!--
 ### (5/5) Verify the deployment
@@ -181,7 +195,8 @@ Kubespray provides a way to verify inter-pod connectivity and DNS resolve with [
 -->
 ### （5/5）验证部署
 
-Kubespray 提供了一种使用 [Netchecker](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/netcheck.md)
+Kubespray 提供了一种使用
+[Netchecker](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/netcheck.md)
 验证 Pod 间连接和 DNS 解析的方法。
 Netchecker 确保 netchecker-agents pod 可以解析。
 DNS 请求并在默认名称空间内对每个请求执行 ping 操作。
@@ -241,16 +256,17 @@ When running the reset playbook, be sure not to accidentally target your product
 -->
 ## 反馈
 
-* Slack 频道：[#kubespray](https://kubernetes.slack.com/messages/kubespray/)（你可以在[此处](https://slack.k8s.io/)获得邀请）
+* Slack 频道：[#kubespray](https://kubernetes.slack.com/messages/kubespray/)
+  （你可以在[此处](https://slack.k8s.io/)获得邀请）
 * [GitHub 问题](https://github.com/kubernetes-sigs/kubespray/issues)
 
 <!--
 ## {{% heading "whatsnext" %}}
 
-
 Check out planned work on Kubespray's [roadmap](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/roadmap.md).
 -->
 ## {{% heading "whatsnext" %}}
 
-
-查看有关 Kubespray 的[路线图](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/roadmap.md)的计划工作。
+查看有关 Kubespray 的
+[路线图](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/roadmap.md)
+的计划工作。
diff --git a/content/zh/docs/setup/release/version-skew-policy.md b/content/zh/docs/setup/release/version-skew-policy.md
index 5ef5a44884..b2fbebfbd1 100644
--- a/content/zh/docs/setup/release/version-skew-policy.md
+++ b/content/zh/docs/setup/release/version-skew-policy.md
@@ -27,12 +27,14 @@ For more information, see [Kubernetes Release Versioning](https://github.com/kub
 -->
 Kubernetes 版本号格式为 **x.y.z**，其中 **x** 为大版本号，**y** 为小版本号，**z** 为补丁版本号。
 版本号格式遵循 [Semantic Versioning](https://semver.org/) 规则。
-更多信息，请参阅 [Kubernetes 发布版本](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/release/versioning.md#kubernetes-release-versioning)。
+更多信息，请参阅
+[Kubernetes 发布版本](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/release/versioning.md#kubernetes-release-versioning)。
 
 <!--
 The Kubernetes project maintains release branches for the most recent three minor releases ({{< skew latestVersion >}}, {{< skew prevMinorVersion >}}, {{< skew oldestMinorVersion >}}).  Kubernetes 1.19 and newer receive approximately 1 year of patch support. Kubernetes 1.18 and older received approximately 9 months of patch support.
 -->
-Kubernetes 项目会维护最近的三个小版本分支（{{< skew latestVersion >}}, {{< skew prevMinorVersion >}}, {{< skew oldestMinorVersion >}}）。
+Kubernetes 项目会维护最近的三个小版本分支（{{< skew latestVersion >}}, 
+{{< skew prevMinorVersion >}}, {{< skew oldestMinorVersion >}}）。
 Kubernetes 1.19 及更高的版本将获得大约1年的补丁支持。
 Kubernetes 1.18 及更早的版本获得大约9个月的补丁支持。
 
@@ -45,9 +47,13 @@ The [Release Managers](https://git.k8s.io/sig-release/release-managers.md) group
 For more information, see the Kubernetes [patch releases](https://git.k8s.io/sig-release/releases/patch-releases.md) page.
 -->
 一些 bug 修复，包括安全修复，取决于其严重性和可行性，有可能会反向合并到这三个发布分支。
-补丁版本会[定期](https://git.k8s.io/sig-release/releases/patch-releases.md#cadence)或根据需要从这些分支中发布。 
-最终是否发布是由[发布管理者](https://github.com/kubernetes/sig-release/blob/master/release-managers.md)来决定的。
-如需了解更多信息，请查看 Kubernetes [补丁发布](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md)。
+补丁版本会[定期](https://git.k8s.io/sig-release/releases/patch-releases.md#cadence)
+或根据需要从这些分支中发布。 
+最终是否发布是由
+[发布管理者](https://github.com/kubernetes/sig-release/blob/master/release-managers.md)
+来决定的。
+如需了解更多信息，请查看 Kubernetes
+[补丁发布](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md)。
 
 <!--
 ## Supported version skew
@@ -72,7 +78,8 @@ Example:
 * other `kube-apiserver` instances are supported at **{{< skew latestVersion >}}** and **{{< skew prevMinorVersion >}}**
 -->
 * 最新的 `kube-apiserver` 版本号如果是 **{{< skew latestVersion >}}**
-* 则受支持的 `kube-apiserver` 版本号包括 **{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}**
+* 其他受支持的 `kube-apiserver` 版本号包括 **{{< skew latestVersion >}}** 和
+  **{{< skew prevMinorVersion >}}**
 
 ### kubelet
 
@@ -90,7 +97,8 @@ Example:
 例如：
 
 * `kube-apiserver` 版本号如果是 **{{< skew latestVersion >}}**
-* 受支持的的 `kubelet` 版本将包括 **{{< skew latestVersion >}}**、**{{< skew prevMinorVersion >}}** 和 **{{< skew oldestMinorVersion >}}**
+* 受支持的的 `kubelet` 版本将包括 **{{< skew latestVersion >}}**、
+  **{{< skew prevMinorVersion >}}** 和 **{{< skew oldestMinorVersion >}}**
 
 <!--
 If version skew exists between `kube-apiserver` instances in an HA cluster, this narrows the allowed `kubelet` versions.
@@ -107,9 +115,12 @@ Example:
 -->
 例如：
 
-* 如果 `kube-apiserver` 实例同时存在 **{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}**
-* `kubelet` 的受支持版本将是 **{{< skew prevMinorVersion >}}** 和 **{{< skew oldestMinorVersion >}}**
-（**{{< skew latestVersion >}}** 不再支持，因为它比 **{{< skew prevMinorVersion >}}** 版本的 `kube-apiserver` 更新）
+* 如果 `kube-apiserver` 实例同时存在 **{{< skew latestVersion >}}** 和
+  **{{< skew prevMinorVersion >}}**
+* `kubelet` 的受支持版本将是 **{{< skew prevMinorVersion >}}** 和
+  **{{< skew oldestMinorVersion >}}**
+  （**{{< skew latestVersion >}}** 不再支持，因为它比
+  **{{< skew prevMinorVersion >}}** 版本的 `kube-apiserver` 更新）
 
 <!--
 ### kube-controller-manager, kube-scheduler, and cloud-controller-manager
@@ -119,8 +130,10 @@ Example:
 <!--
 `kube-controller-manager`, `kube-scheduler`, and `cloud-controller-manager` must not be newer than the `kube-apiserver` instances they communicate with. They are expected to match the `kube-apiserver` minor version, but may be up to one minor version older (to allow live upgrades).
 -->
-`kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 版本不能高于 `kube-apiserver` 版本号。
-最好它们的版本号与 `kube-apiserver` 保持一致，但允许比 `kube-apiserver` 低一个小版本（为了支持在线升级）。
+`kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager`
+版本不能高于 `kube-apiserver` 版本号。
+最好它们的版本号与 `kube-apiserver` 保持一致，但允许比 `kube-apiserver`
+低一个小版本（为了支持在线升级）。
 
 <!--
 Example:
@@ -131,14 +144,17 @@ Example:
 例如：
 
 * 如果 `kube-apiserver` 版本号为 **{{< skew latestVersion >}}**
-* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 版本支持 **{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}**
+* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager`
+  版本支持 **{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}**
 
 <!--
 If version skew exists between `kube-apiserver` instances in an HA cluster, and these components can communicate with any `kube-apiserver` instance in the cluster (for example, via a load balancer), this narrows the allowed versions of these components.
 -->
 {{< note >}}
-如果在 HA 集群中，多个 `kube-apiserver` 实例版本号不一致，他们也可以跟任意一个 `kube-apiserver` 实例通信（例如，通过 load balancer），
-但 `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 版本可用范围会相应的减小。
+如果在 HA 集群中，多个 `kube-apiserver` 实例版本号不一致，他们也可以跟
+任意一个 `kube-apiserver` 实例通信（例如，通过 load balancer），
+但 `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager`
+版本可用范围会相应的减小。
 {{< /note >}}
 
 <!--
@@ -150,10 +166,14 @@ Example:
 -->
 例如：
 
-* `kube-apiserver` 实例同时存在 **{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}** 版本
-* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 可以通过 load balancer 与所有的 `kube-apiserver` 通信
-* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 可选版本为 **{{< skew prevMinorVersion >}}**
-（**{{< skew latestVersion >}}** 不再支持，因为它比 **{{< skew prevMinorVersion >}}** 版本的 `kube-apiserver` 更新）
+* `kube-apiserver` 实例同时存在 **{{< skew latestVersion >}}** 和
+  **{{< skew prevMinorVersion >}}** 版本
+* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager`
+  可以通过 load balancer 与所有的 `kube-apiserver` 通信
+* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager`
+  可选版本为 **{{< skew prevMinorVersion >}}**
+  （**{{< skew latestVersion >}}** 不再支持，因为它比 **{{< skew prevMinorVersion >}}**
+  版本的 `kube-apiserver` 更新）
 
 ### kubectl
 
@@ -171,7 +191,8 @@ Example:
 例如：
 
 * 如果 `kube-apiserver` 当前是 **{{< skew latestVersion >}}** 版本
-* `kubectl` 则支持 **{{< skew nextMinorVersion >}}**、**{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}**
+* `kubectl` 则支持 **{{< skew nextMinorVersion >}}**、**{{< skew latestVersion >}}**
+  和 **{{< skew prevMinorVersion >}}**
 
 <!--
 If version skew exists between `kube-apiserver` instances in an HA cluster, this narrows the supported `kubectl` versions.
@@ -188,8 +209,11 @@ Example:
 -->
 例如：
 
-* `kube-apiserver` 多个实例同时存在 **{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}**
-* `kubectl` 可选的版本为 **{{< skew latestVersion >}}** 和 **{{< skew prevMinorVersion >}}**（其他版本不再支持，因为它会比其中某个 `kube-apiserver` 实例高或低一个小版本）
+* `kube-apiserver` 多个实例同时存在 **{{< skew latestVersion >}}** 和
+  **{{< skew prevMinorVersion >}}**
+* `kubectl` 可选的版本为 **{{< skew latestVersion >}}** 和
+  **{{< skew prevMinorVersion >}}**（其他版本不再支持，
+  因为它会比其中某个 `kube-apiserver` 实例高或低一个小版本）
 
 <!--
 ## Supported component upgrade order
@@ -201,7 +225,8 @@ The supported version skew between components has implications on the order in w
 This section describes the order in which components must be upgraded to transition an existing cluster from version **{{< skew prevMinorVersion >}}** to version **{{< skew latestVersion >}}**.
 -->
 组件之间支持的版本偏差会影响组件升级的顺序。
-本节描述组件从版本 **{{< skew prevMinorVersion >}}** 到 **{{< skew latestVersion >}}** 的升级次序。
+本节描述组件从版本 **{{< skew prevMinorVersion >}}** 到 **{{< skew latestVersion >}}**
+的升级次序。
 
 ### kube-apiserver
 
@@ -220,9 +245,14 @@ Pre-requisites:
   * The webhooks are able to handle any new versions of REST resources that will be sent to them, and any new fields added to existing versions in **{{< skew latestVersion >}}**
 -->
 * 单实例集群中，`kube-apiserver` 实例版本号须是 **{{< skew prevMinorVersion >}}**
-* 高可用（HA）集群中，所有的 `kube-apiserver` 实例版本号必须是 **{{< skew prevMinorVersion >}}** 或 **{{< skew latestVersion >}}**（确保满足最新和最旧的实例小版本号相差不大于1）
-* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 版本号必须为 **{{< skew prevMinorVersion >}}**（确保不高于 API server 的版本，且版本号相差不大于1）
-* `kubelet` 实例版本号必须是 **{{< skew prevMinorVersion >}}** 或 **{{< skew oldestMinorVersion >}}**（确保版本号不高于 API server，且版本号相差不大于2）
+* 高可用（HA）集群中，所有的 `kube-apiserver` 实例版本号必须是
+  **{{< skew prevMinorVersion >}}** 或 **{{< skew latestVersion >}}**
+  （确保满足最新和最旧的实例小版本号相差不大于1）
+* `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager`
+  版本号必须为 **{{< skew prevMinorVersion >}}**
+  （确保不高于 API server 的版本，且版本号相差不大于1）
+* `kubelet` 实例版本号必须是 **{{< skew prevMinorVersion >}}** 或
+  **{{< skew oldestMinorVersion >}}**（确保版本号不高于 API server，且版本号相差不大于2）
 * 注册的 admission 插件必须能够处理新的 `kube-apiserver` 实例发送过来的数据：
   * `ValidatingWebhookConfiguration` 和 `MutatingWebhookConfiguration` 对象必须升级到可以处理
     **{{< skew latestVersion >}}** 版本新加的 REST 资源（或使用 1.15 版本提供的
@@ -258,12 +288,14 @@ Pre-requisites:
 -->
 前提条件：
 
-* `kube-apiserver` 实例必须为 **{{< skew latestVersion >}}** （HA 集群中，所有的`kube-apiserver` 实例必须在组件升级前完成升级）
+* `kube-apiserver` 实例必须为 **{{< skew latestVersion >}}** 
+  （HA 集群中，所有的`kube-apiserver` 实例必须在组件升级前完成升级）
 
 <!--
 Upgrade `kube-controller-manager`, `kube-scheduler`, and `cloud-controller-manager` to **{{< skew latestVersion >}}**
 -->
-升级 `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 到 **{{< skew latestVersion >}}**
+升级 `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager`
+到 **{{< skew latestVersion >}}**
 
 ### kubelet
 
@@ -278,15 +310,26 @@ Optionally upgrade `kubelet` instances to **{{< skew latestVersion >}}** (or the
 
 * `kube-apiserver` 实例必须为 **{{< skew latestVersion >}}** 版本
 
-`kubelet` 可以升级到 **{{< skew latestVersion >}}**（或者停留在 **{{< skew prevMinorVersion >}}** 或 **{{< skew oldestMinorVersion >}}**）
+`kubelet` 可以升级到 **{{< skew latestVersion >}}**（或者停留在
+**{{< skew prevMinorVersion >}}** 或 **{{< skew oldestMinorVersion >}}**）
 
+{{< note >}}
+<!--
+Before performing a minor version `kubelet` upgrade, [drain](/docs/tasks/administer-cluster/safely-drain-node/) pods from that node.
+In-place minor version `kubelet` upgrades are not supported.
+-->
+在对 `kubelet` 执行次版本升级时，先[腾空](/zh/docs/tasks/administer-cluster/safely-drain-node/)
+节点上的 Pods。
+目前不支持原地升级 `kubelet` 的次版本。
+{{</ note >}}
+
+{{< warning >}}
 <!--
 Running a cluster with `kubelet` instances that are persistently two minor versions behind `kube-apiserver` is not recommended:
 
 * they must be upgraded within one minor version of `kube-apiserver` before the control plane can be upgraded
 * it increases the likelihood of running `kubelet` versions older than the three maintained minor releases
 -->
-{{< warning >}}
 集群中 `kubelet` 版本号不建议比 `kube-apiserver` 低两个版本号：
 
 * 它们必须升级到与 `kube-apiserver` 相差不超过 1 个小版本，才可以升级其他控制面组件
@@ -318,4 +361,5 @@ If `kube-proxy` version is **{{< skew oldestMinorVersion >}}**:
 如果 `kube-proxy` 的版本是 **{{< skew oldestMinorVersion >}}**：
 
 * `kubelet` 版本必须相同，也是 **{{< skew oldestMinorVersion >}}**
-* `kube-apiserver` 版本必须在 **{{< skew oldestMinorVersion >}}** 到 **{{< skew latestVersion >}}** 之间（闭区间）
\ No newline at end of file
+* `kube-apiserver` 版本必须在 **{{< skew oldestMinorVersion >}}** 到
+  **{{< skew latestVersion >}}** 之间（闭区间）

From 5deefdaa9d2667a08a92b3930b2d4343484bc1be Mon Sep 17 00:00:00 2001
From: Peter Sutter <peter.sutter@sap.com>
Date: Mon, 26 Apr 2021 12:01:56 +0200
Subject: [PATCH 645/788] Switch Do's and Don'ts

---
 content/en/docs/contribute/style/style-guide.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/contribute/style/style-guide.md b/content/en/docs/contribute/style/style-guide.md
index 5931422e95..26df0a85ac 100644
--- a/content/en/docs/contribute/style/style-guide.md
+++ b/content/en/docs/contribute/style/style-guide.md
@@ -596,8 +596,8 @@ Do | Don't
 :--| :-----
 Include one command in ... | Include just one command in ...
 Run the container ... | Simply run the container ...
-You can easily remove ... | You can remove ...
-These simple steps ... | These steps ...
+You can remove ... | You can easily remove ...
+These steps ... | These simple steps ...
 {{< /table >}}
 
 ## {{% heading "whatsnext" %}}

From e7545c97dca489530f495587d57b594f7afd3388 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Mon, 26 Apr 2021 20:26:22 +0900
Subject: [PATCH 646/788] Apply suggestions from code review

Co-authored-by: atoato88 <akihito-inou@nec.com>
---
 content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
index 6562b9d6af..17855a66d6 100644
--- a/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/ja/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -148,9 +148,9 @@ CronJobの特に`spec`へのすべての修正は、それ以降の実行にの
 
 `.spec.startingDeadlineSeconds`フィールドはオプションです。何かの理由でスケジュールに間に合わなかった場合に適用される、Jobの開始のデッドライン(締め切り)を秒数で指定します。デッドラインを過ぎると、CronJobはJobを開始しません。この場合にデッドラインに間に合わなかったJobは、失敗したJobとしてカウントされます。もしこのフィールドが指定されなかった場合、Jobはデッドラインを持ちません。
 
-`.spec.startingDeadlineSeconds`フィールドがnull以外に設定された場合、CronJobコントローラーはJobの作成が期待される時間と現在時刻との間の時間を計測します。もしその差が制限よりも大きかった場合、その実行はスキップされます。
+`.spec.startingDeadlineSeconds`フィールドがnull以外に設定された場合、CronJobコントローラーはJobの作成が期待される時間と現在時刻との間の時間を計測します。もしその差が制限よりも大きかった場合、その実行はスキップされます。
 
-たとえば、この値が`200`に設定された場合、実際のスケジュールの最大200秒後までに作成されるJobだけが許可されます。
+たとえば、この値が`200`に設定された場合、実際のスケジュールの最大200秒後までに作成されるJobだけが許可されます。
 
 ### Concurrency Policy
 

From 0e2b857282496b599c6ed5b6274a06d3b0b65a6d Mon Sep 17 00:00:00 2001
From: Jordan Liggitt <liggitt@google.com>
Date: Mon, 26 Apr 2021 08:12:34 -0400
Subject: [PATCH 647/788] 1.25 deprecations

---
 .../reference/using-api/deprecation-guide.md  | 25 ++++++++++++++++---
 1 file changed, 21 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/reference/using-api/deprecation-guide.md b/content/en/docs/reference/using-api/deprecation-guide.md
index 92fbfe5839..9f518143b3 100755
--- a/content/en/docs/reference/using-api/deprecation-guide.md
+++ b/content/en/docs/reference/using-api/deprecation-guide.md
@@ -25,6 +25,14 @@ deprecated API versions to newer and more stable API versions.
 
 The **v1.25** release will stop serving the following deprecated API versions:
 
+#### CronJob {#cronjob-v125}
+
+The **batch/v1beta1** API version of CronJob will no longer be served in v1.25.
+
+* Migrate manifests and API clients to use the **batch/v1** API version, available since v1.21.
+* All existing persisted objects are accessible via the new API
+* No notable changes
+
 #### EndpointSlice {#endpointslice-v125}
 
 The **discovery.k8s.io/v1beta1** API version of EndpointSlice will no longer be served in v1.25.
@@ -52,13 +60,14 @@ The **events.k8s.io/v1beta1** API version of Event will no longer be served in v
     * use `reportingComponent` instead of the deprecated `source.component` field (which is renamed to `deprecatedSource.component` and not permitted in new **events.k8s.io/v1** Events)
     * use `reportingInstance` instead of the deprecated `source.host` field (which is renamed to `deprecatedSource.host` and not permitted in new **events.k8s.io/v1** Events)
 
-#### RuntimeClass {#runtimeclass-v125}
+#### PodDisruptionBudget {#poddisruptionbudget-v125}
 
-RuntimeClass in the **node.k8s.io/v1beta1** API version will no longer be served in v1.25.
+The **policy/v1beta1** API version of PodDisruptionBudget will no longer be served in v1.25.
 
-* Migrate manifests and API clients to use the **node.k8s.io/v1** API version, available since v1.20.
+* Migrate manifests and API clients to use the **policy/v1** API version, available since v1.21.
 * All existing persisted objects are accessible via the new API
-* No notable changes
+* Notable changes in **policy/v1**:
+  * an empty `spec.selector` (`{}`) written to a `policy/v1` PodDisruptionBudget selects all pods in the namespace (in `policy/v1beta1` an empty `spec.selector` selected no pods). An unset `spec.selector` selects no pods in either API version.
 
 #### PodSecurityPolicy {#psp-v125}
 
@@ -67,6 +76,14 @@ PodSecurityPolicy in the **policy/v1beta1** API version will no longer be served
 PodSecurityPolicy replacements are still under discussion, but current use can be migrated to
 [3rd-party admission webhooks](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/) now.
 
+#### RuntimeClass {#runtimeclass-v125}
+
+RuntimeClass in the **node.k8s.io/v1beta1** API version will no longer be served in v1.25.
+
+* Migrate manifests and API clients to use the **node.k8s.io/v1** API version, available since v1.20.
+* All existing persisted objects are accessible via the new API
+* No notable changes
+
 ### v1.22
 
 The **v1.22** release will stop serving the following deprecated API versions:

From c942a7f2d2f289f81b89e3ac5609ada3d04c9a16 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 22 Apr 2021 17:43:04 +0800
Subject: [PATCH 648/788] [zh] Remove oudated files

This PR removes some files that no longer exist on the English site.
---
 .../extend-kubernetes/extend-cluster.md       |  434 -------
 .../reference/kubernetes-api/api-index.md     |    6 -
 .../generated/kubeadm_alpha_kubelet.md        |   69 --
 .../generated/kubeadm_alpha_kubelet_config.md |   67 --
 ...adm_alpha_kubelet_config_enable-dynamic.md |  134 ---
 .../generated/kubeadm_alpha_selfhosting.md    |   68 --
 .../kubeadm_alpha_selfhosting_pivot.md        |  171 ---
 .../kubeadm/generated/kubeadm_config_view.md  |   91 --
 .../setup-tools/kubeadm/kubeadm-config.md     |    3 -
 content/zh/docs/reference/tools.md            |  107 --
 .../tools/kubeadm/self-hosting.md             |  129 --
 .../enabling-endpointslices.md                |  161 ---
 .../zh/docs/tasks/tools/install-kubectl.md    | 1070 -----------------
 13 files changed, 2510 deletions(-)
 delete mode 100644 content/zh/docs/concepts/extend-kubernetes/extend-cluster.md
 delete mode 100644 content/zh/docs/reference/kubernetes-api/api-index.md
 delete mode 100644 content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md
 delete mode 100644 content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md
 delete mode 100644 content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md
 delete mode 100644 content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md
 delete mode 100644 content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md
 delete mode 100644 content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md
 delete mode 100644 content/zh/docs/reference/tools.md
 delete mode 100644 content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
 delete mode 100644 content/zh/docs/tasks/administer-cluster/enabling-endpointslices.md
 delete mode 100644 content/zh/docs/tasks/tools/install-kubectl.md

diff --git a/content/zh/docs/concepts/extend-kubernetes/extend-cluster.md b/content/zh/docs/concepts/extend-kubernetes/extend-cluster.md
deleted file mode 100644
index 05af5323d9..0000000000
--- a/content/zh/docs/concepts/extend-kubernetes/extend-cluster.md
+++ /dev/null
@@ -1,434 +0,0 @@
----
-title: 扩展 Kubernetes 集群
-content_type: concept
-weight: 10
----
-<!--
-title: Extending your Kubernetes Cluster
-reviewers:
-- erictune
-- lavalamp
-- cheftako
-- chenopis
-content_type: concept
-weight: 10
--->
-
-<!-- overview -->
-
-<!--
-Kubernetes is highly configurable and extensible. As a result,
-there is rarely a need to fork or submit patches to the Kubernetes
-project code.
-
-This guide describes the options for customizing a Kubernetes cluster. It is
-aimed at {{< glossary_tooltip text="cluster operators" term_id="cluster-operator" >}}
-who want to understand how to adapt their
-Kubernetes cluster to the needs of their work environment. Developers who are prospective
-{{< glossary_tooltip text="Platform Developers" term_id="platform-developer" >}}
-or Kubernetes Project {{< glossary_tooltip text="Contributors" term_id="contributor" >}}
-will also find it useful as an introduction to what extension points and
-patterns exist, and their trade-offs and limitations.
--->
-Kubernetes 是高度可配置和可扩展的。因此，极少需要分发或提交补丁代码给 Kubernetes 项目。
-
-本文档介绍自定义 Kubernetes 集群的选项。本文档的目标读者包括希望了解如何使
-Kubernetes 集群满足其业务环境需求的
-{{< glossary_tooltip text="集群运维人员" term_id="cluster-operator" >}}、
-Kubernetes 项目的{{< glossary_tooltip text="贡献者" term_id="contributor" >}}。
-或潜在的{{< glossary_tooltip text="平台开发人员" term_id="platform-developer" >}}
-也可以从本文找到有用的信息，如对已存在扩展点和模式的介绍，以及它们的权衡和限制。 
-
-<!-- body -->
-
-<!--
-## Overview
-
-Customization approaches can be broadly divided into *configuration*, which only involves changing flags, local configuration files, or API resources; and *extensions*, which involve running additional programs or services. This document is primarily about extensions.
--->
-## 概述
-
-定制方法可以大致分为 *配置（Configuration）* 和 *扩展（Extension）* 。
-*配置* 只涉及更改标志参数、本地配置文件或 API 资源；
-*扩展* 涉及运行额外的程序或服务。本文档主要内容是关于扩展。
-
-<!--
-## Configuration
-
-*Configuration files* and *flags* are documented in the Reference section of the online documentation, under each binary:
-
-* [kubelet](/docs/reference/command-line-tools-reference/kubelet/)
-* [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/)
-* [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/)
-* [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/).
--->
-## 配置  {#configuration}
-
-关于 *配置文件* 和 *标志* 的说明文档位于在线文档的"参考"部分，按照可执行文件组织：
-
-* [kubelet](/zh/docs/reference/command-line-tools-reference/kubelet/)
-* [kube-apiserver](/zh/docs/reference/command-line-tools-reference/kube-apiserver/)
-* [kube-controller-manager](/zh/docs/reference/command-line-tools-reference/kube-controller-manager/)
-* [kube-scheduler](/zh/docs/reference/command-line-tools-reference/kube-scheduler/).
-
-<!--
-Flags and configuration files may not always be changeable in a hosted Kubernetes service or a distribution with managed installation. When they are changeable, they are usually only changeable by the cluster administrator. Also, they are subject to change in future Kubernetes versions, and setting them may require restarting processes. For those reasons, they should be used only when there are no other options.
--->
-在托管的 Kubernetes 服务或受控安装的 Kubernetes 版本中，标志和配置文件可能并不总是可以更改的。而且当它们可以进行更改时，它们通常只能由集群管理员进行更改。此外，标志和配置文件在未来的 Kubernetes 版本中可能会发生变化，并且更改设置后它们可能需要重新启动进程。出于这些原因，只有在没有其他选择的情况下才使用它们。
-
-<!--
-*Built-in Policy APIs*, such as [ResourceQuota](/docs/concepts/policy/resource-quotas/), [PodSecurityPolicies](/docs/concepts/policy/pod-security-policy/), [NetworkPolicy](/docs/concepts/services-networking/network-policies/) and Role-based Access Control ([RBAC](/docs/reference/access-authn-authz/rbac/)), are built-in Kubernetes APIs. APIs are typically used with hosted Kubernetes services and with managed Kubernetes installations. They are declarative and use the same conventions as other Kubernetes resources like pods, so new cluster configuration can be repeatable and be managed the same way as applications. And, where they are stable, they enjoy a [defined support policy](/docs/reference/using-api/deprecation-policy/) like other Kubernetes APIs. For these reasons, they are preferred over *configuration files* and *flags* where suitable.
--->
-*内置策略 API* ，例如 [ResourceQuota](/zh/docs/concepts/policy/resource-quotas/)、
-[PodSecurityPolicy](/zh/docs/concepts/policy/pod-security-policy/)、
-[NetworkPolicy](/zh/docs/concepts/services-networking/network-policies/)
-和基于角色的权限控制 ([RBAC](/zh/docs/reference/access-authn-authz/rbac/))，
-是内置的 Kubernetes API。API 通常与托管的 Kubernetes 服务和受控的 Kubernetes 安装一起使用。
-它们是声明性的，并使用与其他 Kubernetes 资源（如 Pod ）相同的约定，所以新的集群配置可以重复使用，
-并以与应用程序相同的方式进行管理。
-而且，当它们变稳定后，也遵循和其他 Kubernetes API 一样的
-[支持政策](/zh/docs/reference/using-api/deprecation-policy/)。
-出于这些原因，在合适的情况下它们优先于 *配置文件* 和 *标志* 被使用。
-
-<!--
-## Extensions
-
-Extensions are software components that extend and deeply integrate with Kubernetes.
-They adapt it to support new types and new kinds of hardware.
-
-Most cluster administrators will use a hosted or distribution
-instance of Kubernetes. As a result, most Kubernetes users will not need to
-install extensions and fewer will need to author new ones.
--->
-## 扩展程序  {#extension}
-
-扩展程序是指对 Kubernetes 进行扩展和深度集成的软件组件。它们适合用于支持新的类型和新型硬件。
-
-大多数集群管理员会使用托管的或统一分发的 Kubernetes 实例。
-因此，大多数 Kubernetes 用户不需要安装扩展程序，而且还有少部分用户甚至需要编写新的扩展程序。
-
-<!--
-## Extension Patterns
--->
-## 扩展模式  {#extension-patterns}
-
-<!--
-Kubernetes is designed to be automated by writing client programs. Any
-program that reads and/or writes to the Kubernetes API can provide useful
-automation. *Automation* can run on the cluster or off it. By following
-the guidance in this doc you can write highly available and robust automation.
-Automation generally works with any Kubernetes cluster, including hosted
-clusters and managed installations.
--->
-Kubernetes 的设计是通过编写客户端程序来实现自动化的。
-任何读和（或）写 Kubernetes API 的程序都可以提供有用的自动化工作。
-*自动化* 程序可以运行在集群之中或之外。按照本文档的指导，你可以编写出高可用的和健壮的自动化程序。
-自动化程序通常适用于任何 Kubernetes 集群，包括托管集群和受管理安装的集群。
-
-<!--
-There is a specific pattern for writing client programs that work well with
-Kubernetes called the *Controller* pattern. Controllers typically read an
-object's `.spec`, possibly do things, and then update the object's `.status`.
-
-A controller is a client of Kubernetes. When Kubernetes is the client and
-calls out to a remote service, it is called a *Webhook*. The remote service
-is called a *Webhook Backend*. Like Controllers, Webhooks do add a point of
-failure.
--->
-*控制器（Controller）* 模式是编写适合 Kubernetes 的客户端程序的一种特定模式。
-控制器通常读取一个对象的 `.spec` 字段，可能做出一些处理，然后更新对象的 `.status` 字段。
-
-一个控制器是 Kubernetes 的一个客户端。
-当 Kubernetes 作为客户端调用远程服务时，它被称为 *Webhook* ，
-远程服务称为 *Webhook* 后端。 和控制器类似，Webhooks 增加了一个失败点。
-
-<!--
-In the webhook model, Kubernetes makes a network request to a remote service.
-In the *Binary Plugin* model, Kubernetes executes a binary (program).
-Binary plugins are used by the kubelet (e.g.
-[Flex Volume Plugins](/docs/concepts/storage/volumes/#flexvolume)
-and [Network Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/))
-and by kubectl.
--->
-在 webhook 模型里，Kubernetes 向远程服务发送一个网络请求。
-在 *可执行文件插件* 模型里，Kubernetes 执行一个可执行文件（程序）。
-可执行文件插件被 kubelet（如
-[Flex 卷插件](/zh/docs/concepts/storage/volumes/#flexvolume)
-和[网络插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
-和 `kubectl` 所使用。
-
-<!--
-Below is a diagram showing how the extension points interact with the
-Kubernetes control plane.
--->
-下图显示了扩展点如何与 Kubernetes 控制平面进行交互。
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vQBRWyXLVUlQPlp7BvxvV9S1mxyXSM6rAc_cbLANvKlu6kCCf-kGTporTMIeG5GZtUdxXz1xowN7RmL/pub?w=960&h=720">
-
-<!-- image source drawing https://docs.google.com/drawings/d/1muJ7Oxuj_7Gtv7HV9-2zJbOnkQJnjxq-v1ym_kZfB-4/edit?ts=5a01e054 -->
-
-<!--
-## Extension Points
-
-This diagram shows the extension points in a Kubernetes system.
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vSH5ZWUO2jH9f34YHenhnCd14baEb4vT-pzfxeFC7NzdNqRDgdz4DDAVqArtH4onOGqh0bhwMX0zGBb/pub?w=425&h=809">
--->
-## 扩展点   {#extension-points}
-
-下图显示了 Kubernetes 系统的扩展点。
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vSH5ZWUO2jH9f34YHenhnCd14baEb4vT-pzfxeFC7NzdNqRDgdz4DDAVqArtH4onOGqh0bhwMX0zGBb/pub?w=425&h=809">
-
-<!-- image source diagrams: https://docs.google.com/drawings/d/1k2YdJgNTtNfW7_A8moIIkij-DmVgEhNrn3y2OODwqQQ/view -->
-
-<!--
-1. Users often interact with the Kubernetes API using `kubectl`. [Kubectl plugins](/docs/tasks/extend-kubectl/kubectl-plugins/) extend the kubectl binary. They only affect the individual user's local environment, and so cannot enforce site-wide policies.
-2. The apiserver handles all requests. Several types of extension points in the apiserver allow authenticating requests, or blocking them based on their content, editing content, and handling deletion. These are described in the [API Access Extensions](/docs/concepts/extend-kubernetes/#api-access-extensions) section.
-3. The apiserver serves various kinds of *resources*. *Built-in resource kinds*, like `pods`, are defined by the Kubernetes project and can't be changed. You can also add resources that you define, or that other projects have defined, called *Custom Resources*, as explained in the [Custom Resources](/docs/concepts/extend-kubernetes/#user-defined-types) section. Custom Resources are often used with API Access Extensions.
-4. The Kubernetes scheduler decides which nodes to place pods on. There are several ways to extend scheduling. These are described in the [Scheduler Extensions](/docs/concepts/extend-kubernetes/#scheduler-extensions) section.
-5. Much of the behavior of Kubernetes is implemented by programs called Controllers which are clients of the API-Server. Controllers are often used in conjunction with Custom Resources.
-6. The kubelet runs on servers, and helps pods appear like virtual servers with their own IPs on the cluster network. [Network Plugins](/docs/concepts/extend-kubernetes/#network-plugins) allow for different implementations of pod networking.
-7. The kubelet also mounts and unmounts volumes for containers. New types of storage can be supported via [Storage Plugins](/docs/concepts/extend-kubernetes/#storage-plugins).
-
--->
-
-1. 用户通常使用 `kubectl` 与 Kubernetes API 进行交互。
-   [kubectl 插件](/zh/docs/tasks/extend-kubectl/kubectl-plugins/)扩展了 kubectl 可执行文件。
-   它们只影响个人用户的本地环境，因此不能执行站点范围的策略。
-2. API 服务器处理所有请求。API 服务器中的几种类型的扩展点允许对请求进行身份认证或根据其内容对其进行阻止、
-   编辑内容以及处理删除操作。这些内容在
-   [API 访问扩展](/zh/docs/concepts/extend-kubernetes/#api-access-extensions)小节中描述。
-3. API 服务器提供各种 *资源（Resource）* 。 *内置的资源种类（Resource Kinds）* ，如 `pods`，
-   由 Kubernetes 项目定义，不能更改。你还可以添加你自己定义的资源或其他项目已定义的资源，
-   称为 *自定义资源（Custom Resource）*，如[自定义资源](/zh/docs/concepts/extend-kubernetes/#user-defined-types)
-   部分所述。自定义资源通常与 API 访问扩展一起使用。
-4. Kubernetes 调度器决定将 Pod 放置到哪个节点。有几种方法可以扩展调度器。
-   这些内容在[调度器扩展](/zh/docs/concepts/extend-kubernetes/#scheduler-extensions)
-   小节中描述。
-5. Kubernetes 的大部分行为都是由称为控制器（Controllers）的程序实现的，这些程序是 API 服务器的客户端。
-   控制器通常与自定义资源一起使用。
-6. `kubelet` 在主机上运行，并帮助 Pod 看起来就像在集群网络上拥有自己的 IP 的虚拟服务器。
-   [网络插件](/zh/docs/concepts/extend-kubernetes/#network-plugins)让你可以实现不同的 pod 网络。
-7. `kubelet` 也负责为容器挂载和卸载卷。新的存储类型可以通过
-   [存储插件](/zh/docs/concepts/extend-kubernetes/#storage-plugins)支持。
-
-<!--
-If you are unsure where to start, this flowchart can help. Note that some solutions may involve several types of extensions.
--->
-如果你不确定从哪里开始扩展，下面流程图可以提供一些帮助。请注意，某些解决方案可能涉及多种类型的扩展。
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vRWXNNIVWFDqzDY0CsKZJY3AR8sDeFDXItdc5awYxVH8s0OLherMlEPVUpxPIB1CSUu7GPk7B2fEnzM/pub?w=1440&h=1080">
-
-<!-- image source drawing: https://docs.google.com/drawings/d/1sdviU6lDz4BpnzJNHfNpQrqI9F19QZ07KnhnxVrp2yg/edit -->
-
-<!--
-## API Extensions
-### User-Defined Types
-
-Consider adding a Custom Resource to Kubernetes if you want to define new controllers, application configuration objects or other declarative APIs, and to manage them using Kubernetes tools, such as `kubectl`.
-
-Do not use a Custom Resource as data storage for application, user, or monitoring data.
-
-For more about Custom Resources, see the [Custom Resources concept guide](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
--->
-## API 扩展  {#api-extensions}
-
-### 用户自定义类型  {#user-defined-types}
-
-如果你想定义新的控制器、应用程序配置对象或其他声明式 API，并使用 Kubernetes
-工具（如 `kubectl`）管理它们，请考虑为 Kubernetes 添加一个自定义资源。
-
-不要使用自定义资源作为应用、用户或者监控数据的数据存储。
-
-有关自定义资源的更多信息，请查看
-[自定义资源概念指南](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)。
-
-<!--
-### Combining New APIs with Automation
-
-The combination of a custom resource API and a control loop is called the [Operator pattern](/docs/concepts/extend-kubernetes/operator/). The Operator pattern is used to manage specific, usually stateful, applications. These custom APIs and control loops can also be used to control other resources, such as storage or policies.
--->
-### 将新的 API 与自动化相结合
-
-自定义资源 API 和控制循环的组合称为
-[操作者（Operator）模式](/zh/docs/concepts/extend-kubernetes/operator/)。
-操作者模式用于管理特定的，通常是有状态的应用程序。
-这些自定义 API 和控制循环还可用于控制其他资源，例如存储或策略。
-
-<!--
-### Changing Built-in Resources
-
-When you extend the Kubernetes API by adding custom resources, the added resources always fall into a new API Groups. You cannot replace or change existing API groups.
-Adding an API does not directly let you affect the behavior of existing APIs (e.g. Pods), but API Access Extensions do.
--->
-### 改变内置资源
-
-当你通过添加自定义资源来扩展 Kubernetes API 时，添加的资源始终属于新的 API 组。
-你不能替换或更改已有的 API 组。
-添加 API 不会直接影响现有 API（例如 Pod ）的行为，但是 API 访问扩展可以。
-
-<!--
-### API Access Extensions
-
-When a request reaches the Kubernetes API Server, it is first Authenticated, then Authorized, then subject to various types of Admission Control. See [Controlling Access to the Kubernetes API](/docs/concepts/security/controlling-access/) for more on this flow.
-
-Each of these steps offers extension points.
-
-Kubernetes has several built-in authentication methods that it supports. It can also sit behind an authenticating proxy, and it can send a token from an Authorization header to a remote service for verification (a webhook). All of these methods are covered in the [Authentication documentation](/docs/reference/access-authn-authz/authentication/).
--->
-### API 访问扩展  {#api-access-extensions}
-
-当请求到达 Kubernetes API Server 时，它首先被要求进行用户认证，然后要进行授权检查，
-接着受到各种类型的准入控制的检查。有关此流程的更多信息，请参阅
-[Kubernetes API 访问控制](/zh/docs/concepts/security/controlling-access/)。
-
-上述每个步骤都提供了扩展点。
-
-Kubernetes 有几个它支持的内置认证方法。它还可以位于身份验证代理之后，并将 Authorziation 头部
-中的令牌发送给远程服务（webhook）进行验证。所有这些方法都在
-[身份验证文档](/zh/docs/reference/access-authn-authz/authentication/)中介绍。
-
-<!--
-### Authentication
-
-[Authentication](/docs/reference/access-authn-authz/authentication/) maps headers or certificates in all requests to a username for the client making the request.
-
-Kubernetes provides several built-in authentication methods, and an [Authentication webhook](/docs/reference/access-authn-authz/authentication/#webhook-token-authentication) method if those don't meet your needs.
--->
-### 身份认证  {#authentication}
-
-[身份认证](/zh/docs/reference/access-authn-authz/authentication/)
-将所有请求中的头部字段或证书映射为发出请求的客户端的用户名。
-
-Kubernetes 提供了几种内置的身份认证方法，如果这些方法不符合你的需求，可以使用
-[身份认证 Webhook](/zh/docs/reference/access-authn-authz/authentication/#webhook-token-authentication) 方法。
-
-<!--
-### Authorization
-
- [Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It just works at the level of whole resources -- it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
--->
-### 鉴权  {#authorization}
-
-[鉴权组件](/zh/docs/reference/access-authn-authz/authorization/)决定特定用户是否可以对
-API 资源执行读取、写入以及其他操作。它只是在整个资源的层面上工作 --
-它不基于任意的对象字段进行区分。如果内置授权选项不能满足你的需求，
-[鉴权 Webhook](/zh/docs/reference/access-authn-authz/webhook/)
-允许调用用户提供的代码来作出授权决定。
-
-<!--
-### Dynamic Admission Control
-
-After a request is authorized, if it is a write operation, it also goes through [Admission Control](/docs/reference/access-authn-authz/admission-controllers/) steps. In addition to the built-in steps, there are several extensions:
-
-*   The [Image Policy webhook](/docs/reference/access-authn-authz/admission-controllers/#imagepolicywebhook) restricts what images can be run in containers.
-*   To make arbitrary admission control decisions, a general [Admission webhook](/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks) can be used. Admission Webhooks can reject creations or updates.
--->
-### 动态准入控制
-
-在请求被授权之后，如果是写入操作，它还将进入
-[准入控制](/zh/docs/reference/access-authn-authz/admission-controllers/)
-步骤。除了内置的步骤之外，还有几个扩展：
-
-* [镜像策略 Webhook](/zh/docs/reference/access-authn-authz/admission-controllers/#imagepolicywebhook)
-  限制哪些镜像可以在容器中运行。
-* 为了进行灵活的准入控制决策，可以使用通用的
-  [准入 Webhook](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks)。
-  准入 Webhooks 可以拒绝创建或更新操作。
-
-<!--
-## Infrastructure Extensions
-
-
-### Storage Plugins
-
-[Flex Volumes](/docs/concepts/storage/volumes/#flexvolume)
-allow users to mount volume types without built-in support by having the
-Kubelet call a Binary Plugin to mount the volume.
--->
-## 基础设施扩展
-
-### 存储插件
-
-[Flex Volumes](/zh/docs/concepts/storage/volumes/#flexvolume)
-允许用户挂载无内置插件支持的卷类型，它通过 Kubelet 调用一个可执行文件插件来挂载卷。
-
-<!--
-### Device Plugins
-
-Device plugins allow a node to discover new Node resources (in addition to the
-builtin ones like cpu and memory) via a
-[Device Plugin](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/).
--->
-### 设备插件   {#device-plugins}
-
-设备插件允许节点通过
-[设备插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/).
-发现新的节点资源（除了内置的 CPU 和内存之外）。
-
-<!--
-### Network Plugins
-
-Different networking fabrics can be supported via node-level
-[Network Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/).
--->
-### 网络插件   {#network-plugins}
-
-不同的网络结构可以通过节点级的
-[网络插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
-得到支持。
-
-<!--
-### Scheduler Extensions
-
-The scheduler is a special type of controller that watches pods, and assigns
-pods to nodes. The default scheduler can be replaced entirely, while
-continuing to use other Kubernetes components, or
-[multiple schedulers](/docs/tasks/extend-kubernetes/configure-multiple-schedulers/)
-can run at the same time.
-
-This is a significant undertaking, and almost all Kubernetes users find they
-do not need to modify the scheduler.
-
-The scheduler also supports a
-[webhook](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/scheduling/scheduler_extender.md)
-that permits a webhook backend (scheduler extension) to filter and prioritize
-the nodes chosen for a pod.
--->
-### 调度器扩展  {#scheduler-extensions}
-
-调度器是一种特殊类型的控制器，用于监视 pod 并将其分配到节点。
-默认的调度器可以完全被替换，而继续使用其他 Kubernetes 组件，或者可以同时运行
-[多个调度器](/zh/docs/tasks/extend-kubernetes/configure-multiple-schedulers/)。
-
-这是一个不太轻松的任务，几乎所有的 Kubernetes 用户都会意识到他们并不需要修改调度器。
-
-调度器也支持
-[Webhook](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/scheduling/scheduler_extender.md)，
-它允许使用一个 Webhook 后端（调度器扩展程序）为 Pod 筛选节点和确定节点的优先级。
-
-
-<!--
-## {{% heading "whatsnext" %}}
-
-* Learn more about [Custom Resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
-* Learn about [Dynamic admission control](/docs/reference/access-authn-authz/extensible-admission-controllers/)
-* Learn more about Infrastructure extensions
-  * [Network Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
-  * [Device Plugins](/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
-* Learn about [kubectl plugins](/docs/tasks/extend-kubectl/kubectl-plugins/)
-* Learn about the [Operator pattern](/docs/concepts/extend-kubernetes/operator/)
--->
-## {{% heading "whatsnext" %}}
-
-
-* 详细了解[自定义资源](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
-* 了解[动态准入控制](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/)
-* 详细了解基础设施扩展
-  * [网络插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
-  * [设备插件](/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
-* 了解 [kubectl 插件](/zh/docs/tasks/extend-kubectl/kubectl-plugins/)
-* 了解[操作者模式](/zh/docs/concepts/extend-kubernetes/operator/)
-
-
diff --git a/content/zh/docs/reference/kubernetes-api/api-index.md b/content/zh/docs/reference/kubernetes-api/api-index.md
deleted file mode 100644
index a9fca7e581..0000000000
--- a/content/zh/docs/reference/kubernetes-api/api-index.md
+++ /dev/null
@@ -1,6 +0,0 @@
----
-title: v1.20
-weight: 50
----
-
-[Kubernetes API v1.20](/docs/reference/generated/kubernetes-api/v1.20/)
\ No newline at end of file
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md
deleted file mode 100644
index ac949750b1..0000000000
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet.md
+++ /dev/null
@@ -1,69 +0,0 @@
-
-<!--
-### Synopsis
--->
-
-### 概要
-
-<!--
-This command is not meant to be run on its own. See list of available subcommands.
--->
-
-此命令并非设计用来单独运行。请参阅可用子命令列表。
-
-<!--
-### Options
--->
-
-### 选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-help for kubelet
--->
-kubelet 操作的帮助命令
-</td>
-</tr>
-
-</tbody>
-</table>
-
-<!--
-### Options inherited from parent commands
--->
-
-### 从父命令继承的选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-[EXPERIMENTAL] The path to the 'real' host root filesystem.
--->
-[实验] 指向 '真实' 宿主机的根目录。
-</td>
-</tr>
-
-</tbody>
-</table>
-
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md
deleted file mode 100644
index 51ab7eb85d..0000000000
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config.md
+++ /dev/null
@@ -1,67 +0,0 @@
-
-<!--
-### Synopsis
--->
-
-### 概要
-
-<!--
-This command is not meant to be run on its own. See list of available subcommands.
--->
-
-此命令并非设计用来单独运行。请参阅可用子命令列表。
-
-<!--
-### Options
--->
-
-### 选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!-- help for config -->
-config 操作的帮助命令
-</td>
-</tr>
-
-</tbody>
-</table>
-
-<!--
-### Options inherited from parent commands
--->
-
-### 从父命令继承的选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-[EXPERIMENTAL] The path to the 'real' host root filesystem.
--->
-[实验] 指向宿主机上的 '实际' 根文件系统的路径。
-</td>
-</tr>
-
-</tbody>
-</table>
-
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md
deleted file mode 100644
index 9c5bd03582..0000000000
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_enable-dynamic.md
+++ /dev/null
@@ -1,134 +0,0 @@
-
-<!--
-### Synopsis
--->
-### 概要
-
-
-<!--
-Enable or update dynamic kubelet configuration for a Node, against the kubelet-config-1.X ConfigMap in the cluster, where X is the minor version of the desired kubelet version.
--->
-针对集群中的 kubelet-config-1.X ConfigMap 启用或更新节点的动态 kubelet 配置，其中 X 是所需 kubelet 版本的次要版本。
-
-<!--
-WARNING: This feature is still experimental, and disabled by default. Enable only if you know what you are doing, as it may have surprising side-effects at this stage.
--->
-警告：此功能仍处于试验阶段，默认情况下处于禁用状态。仅当知道自己在做什么时才启用它，因为在此阶段它可能会产生令人惊讶的副作用。
-
-<!--
-Alpha Disclaimer: this command is currently alpha.
--->
-Alpha 免责声明：此命令当前为 Alpha 功能。
-
-```
-kubeadm alpha kubelet config enable-dynamic [flags]
-```
-
-<!--
-### Examples  # Enable dynamic kubelet configuration for a Node.
--->
-### 示例
-
-```
-  # 为节点启用动态 kubelet 配置。
-  kubeadm alpha phase kubelet enable-dynamic-config --node-name node-1 --kubelet-version 1.16.0
-
-  WARNING: This feature is still experimental, and disabled by default. Enable only if you know what you are doing, as it
-  may have surprising side-effects at this stage.
-```
-
-<!--
-### Options
--->
-### 选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-help for enable-dynamic
--->
-enable-dynamic 操作的帮助命令
-</td>
-</tr>
-
-<tr>
-<td colspan="2">
-<!--
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"
--->
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值: "/etc/kubernetes/admin.conf"
-</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.
--->
-与集群通信时使用的 kubeconfig 文件。如果未设置该标志，则可以在一组标准位置中搜索现有的 kubeconfig 文件。
-</td>
-</tr>
-
-<tr>
-<td colspan="2">--kubelet-version string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-The desired version for the kubelet
--->
-kubelet 所需版本
-</td>
-</tr>
-
-<tr>
-<td colspan="2">--node-name string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-Name of the node that should enable the dynamic kubelet configuration
--->
-应该启用动态 kubelet 配置节点的名称
-</td>
-</tr>
-
-</tbody>
-</table>
-
-<!--
-### Options inherited from parent commands
--->
-
-### 从父命令继承的选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-[EXPERIMENTAL] The path to the 'real' host root filesystem.
--->
-[实验] 指向 '真实' 宿主机的根目录。
-</td>
-</tr>
-
-</tbody>
-</table>
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md
deleted file mode 100644
index d2f4bd71f6..0000000000
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting.md
+++ /dev/null
@@ -1,68 +0,0 @@
-
-<!--
-### Synopsis
--->
-
-### 概要
-
-<!--
-This command is not meant to be run on its own. See list of available subcommands.
--->
-
-此命令并非设计用来单独运行。请参阅可用子命令列表。
-
-<!--
-### Options
--->
-
-### 选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-help for selfhosting
--->
-selfhosting 操作的帮助命令
-</td>
-</tr>
-
-</tbody>
-</table>
-
-<!--
-### Options inherited from parent commands
--->
-
-### 从父命令继承的选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-[EXPERIMENTAL] The path to the 'real' host root filesystem.
--->
-[实验] 指向 '真实' 宿主机的根目录。
-</td>
-</tr>
-
-</tbody>
-</table>
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md
deleted file mode 100644
index 7f1a6a9fd5..0000000000
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_selfhosting_pivot.md
+++ /dev/null
@@ -1,171 +0,0 @@
-
-<!--
-### Synopsis
--->
-
-### 概要
-
-<!--
-Convert static Pod files for control plane components into self-hosted DaemonSets configured via the Kubernetes API.
--->
-
-将用于控制平面组件的静态 Pod 文件转换为通过 Kubernetes API 配置的自托管 DaemonSet。
-
-<!--
-See the documentation for self-hosting limitations.
--->
-
-有关自托管的限制，请参阅相关文档。
-
-<!--
-Alpha Disclaimer: this command is currently alpha.
--->
-
-Alpha 免责声明：此命令当前为 alpha 功能。
-
-
-```
-kubeadm alpha selfhosting pivot [flags]
-```
-
-<!--
-### Examples
--->
-
-### 示例
-
-<!--
-# Convert a static Pod-hosted control plane into a self-hosted one.
--->
-
-```
-# 将静态 Pod 托管的控制平面转换为自托管的控制平面。
-
-kubeadm alpha phase self-hosting convert-from-staticpods
-```
-
-<!--
-### Options
--->
-
-### 选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">
-<!--
---cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/pki"
--->
---cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值："/etc/kubernetes/pki"
-</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-The path where certificates are stored
--->
-证书存储的路径
-</td>
-</tr>
-
-<tr>
-<td colspan="2">--config string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-Path to a kubeadm configuration file.
--->
-kubeadm 配置文件的路径。
-</td>
-</tr>
-
-<tr>
-<td colspan="2">-f, --force</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-Pivot the cluster without prompting for confirmation
--->
-在不提示确认的情况下转换集群
-</td>
-</tr>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-help for pivot
--->
-pivot 操作的帮助命令
-</td>
-</tr>
-
-<tr>
-<td colspan="2">
-<!--
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"
--->
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值："/etc/kubernetes/admin.conf"
-</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.
--->
-与集群通信时使用的 kubeconfig 文件。如果未设置该参数，则可以在一组标准位置中搜索现有的 kubeconfig 文件。
-</td>
-</tr>
-
-<tr>
-<td colspan="2">-s, --store-certs-in-secrets</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-Enable storing certs in secrets
--->
-启用 secret 存储证书
-</td>
-</tr>
-
-</tbody>
-</table>
-
-<!--
-### Options inherited from parent commands
--->
-
-### 从父命令继承的选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-[EXPERIMENTAL] The path to the 'real' host root filesystem.
--->
-[实验] 到 '真实' 主机根文件系统的路径。
-</td>
-</tr>
-
-</tbody>
-</table>
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md
deleted file mode 100644
index d3cc8d9041..0000000000
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_view.md
+++ /dev/null
@@ -1,91 +0,0 @@
-
-<!--
-### Synopsis
--->
-
-### 概要
-
-<!--
-Using this command, you can view the ConfigMap in the cluster where the configuration for kubeadm is located.
-The configuration is located in the "kube-system" namespace in the "kubeadm-config" ConfigMap.
--->
-
-使用此命令，可以查看 kubeadm 配置的集群中的 ConfigMap。
-该配置位于 "kube-system" 命名空间中的名为 "kubeadm-config" 的 ConfigMap 中。
-
-
-```
-kubeadm config view [flags]
-```
-
-<!--
-### Options
--->
-
-### 选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-help for view
--->
-view 操作的帮助命令
-</td>
-</tr>
-
-</tbody>
-</table>
-
-<!--
-### Options inherited from parent commands
--->
-
-### 继承于父命令的选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">
-<!--
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"
--->
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值："/etc/kubernetes/admin.conf"
-</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.
--->
-用于和集群通信的 KubeConfig 文件。如果未设置，那么 kubeadm 将会搜索一个已经存在于标准路径的 KubeConfig 文件。
-</td>
-</tr>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!-- [EXPERIMENTAL] The path to the 'real' host root filesystem.  -->
-[实验] 到 '真实' 主机根文件系统的路径。
-</td>
-</tr>
-
-</tbody>
-</table>
-
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md
index 6cb9305b6c..3c1425bfc1 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md
@@ -45,9 +45,6 @@ has to be used.
 <!-- body -->
 ## kubeadm config upload from-file {#cmd-config-from-file}
 
-## kubeadm config view {#cmd-config-view}
-{{< include "generated/kubeadm_config_view.md" >}}
-
 ## kubeadm config print init-defaults {#cmd-config-print-init-defaults}
 {{< include "generated/kubeadm_config_print_init-defaults.md" >}}
 
diff --git a/content/zh/docs/reference/tools.md b/content/zh/docs/reference/tools.md
deleted file mode 100644
index 1ad75ba98f..0000000000
--- a/content/zh/docs/reference/tools.md
+++ /dev/null
@@ -1,107 +0,0 @@
----
-reviewers:
-- janetkuo
-title: 工具
-content_type: concept
----
-
-<!--
-reviewers:
-- janetkuo
-title: Tools
-content_type: concept
--->
-
-<!--
-Kubernetes contains several built-in tools to help you work with the Kubernetes system.
--->
-<!-- overview -->
-Kubernetes 包含一些内置工具，可以帮助用户更好的使用 Kubernetes 系统。
-
-<!-- body -->
-## Kubectl
-
-<!--
-[`kubectl`](/docs/tasks/tools/install-kubectl/) is the command line tool for Kubernetes. It controls the Kubernetes cluster manager.
--->
-[`kubectl`](/zh/docs/tasks/tools/install-kubectl/) 是 Kubernetes 命令行工具，
-可以用来操控 Kubernetes 集群。
-
-## Kubeadm
-
-<!--
-[`kubeadm`](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/) is the command line tool for easily provisioning a secure Kubernetes cluster on top of physical or cloud servers or virtual machines (currently in alpha).
--->
-[`kubeadm`](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/) 是一个命令行工具，
-可以用来在物理机、云服务器或虚拟机（目前处于 alpha 阶段）
-上轻松部署一个安全可靠的 Kubernetes 集群。
-
-## Minikube
-
-<!--
-[`minikube`](https://minikube.sigs.k8s.io/docs/) is a tool that makes it
-easy to run a single-node Kubernetes cluster locally on your workstation for
-development and testing purposes.
--->
-[`minikube`](https://minikube.sigs.k8s.io/docs/) 是一个可以方便用户
-在其工作站点本地部署一个单节点 Kubernetes 集群的工具，用于开发和测试。
-
-## Dashboard
-
-<!--
-[`Dashboard`](/docs/tasks/access-application-cluster/web-ui-dashboard/), the web-based user interface of Kubernetes, allows you to deploy containerized applications
-to a Kubernetes cluster, troubleshoot them, and manage the cluster and its resources itself.
--->
-[`Dashboard`](/zh/docs/tasks/access-application-cluster/web-ui-dashboard/) 
-是 Kubernetes 基于 Web 的用户管理界面，允许用户部署容器化应用到 Kubernetes
-集群，进行故障排查以及管理集群和集群资源。
-
-## Helm
-
-<!--
-[`Kubernetes Helm`](https://github.com/kubernetes/helm) is a tool for managing packages of pre-configured
-Kubernetes resources, aka Kubernetes charts.
--->
-[`Kubernetes Helm`](https://github.com/kubernetes/helm) 是一个管理
-预先配置完毕的 Kubernetes 资源包的工具，这里的资源在 Helm 中也被称作
-Kubernetes charts。
-
-<!--
-Use Helm to:
-
-* Find and use popular software packaged as Kubernetes charts
-* Share your own applications as Kubernetes charts
-* Create reproducible builds of your Kubernetes applications
-* Intelligently manage your Kubernetes manifest files
-* Manage releases of Helm packages
--->
-使用 Helm：
-
-* 查找并使用已经打包为 Kubernetes charts 的流行软件
-* 分享您自己的应用作为 Kubernetes charts
-* 为 Kubernetes 应用创建可重复执行的构建
-* 为您的 Kubernetes 清单文件提供更智能化的管理
-* 管理 Helm 软件包的发布
-
-## Kompose
-
-<!--
-[`Kompose`](https://github.com/kubernetes/kompose) is a tool to help Docker Compose users move to Kubernetes.
--->
-[`Kompose`](https://github.com/kubernetes/kompose) 一个转换工具，
-用来帮助 Docker Compose 用户迁移至 Kubernetes。
-
-<!--
-Use Kompose to:
-
-* Translate a Docker Compose file into Kubernetes objects
-* Go from local Docker development to managing your application via Kubernetes
-* Convert v1 or v2 Docker Compose `yaml` files or [Distributed Application Bundles](https://docs.docker.com/compose/bundles/)
--->
-使用 Kompose:
-
-* 将一个 Docker Compose 文件解释成 Kubernetes 对象
-* 将本地 Docker 开发 转变成通过 Kubernetes 来管理
-* 转换 v1 或 v2 Docker Compose `yaml` 文件 或
-  [已发布的应用程序包](https://docs.docker.com/compose/bundles/)
-
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md b/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
deleted file mode 100644
index 97a366fd87..0000000000
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
+++ /dev/null
@@ -1,129 +0,0 @@
----
-title: 配置您的 kubernetes 集群以自托管控制平台
-content_type: concept
-weight: 100
----
-<!--
-title: Configuring your kubernetes cluster to self-host the control plane
-content_type: concept
-weight: 100
--->
-
-<!-- overview -->
-
-<!--
-### Self-hosting the Kubernetes control plane {#self-hosting}
--->
-### 自托管 Kubernetes 控制平台 {#self-hosting}
-
-<!--
-kubeadm allows you to experimentally create a _self-hosted_ Kubernetes control
-plane. This means that key components such as the API server, controller
-manager, and scheduler run as [DaemonSet pods](/docs/concepts/workloads/controllers/daemonset/)
-configured via the Kubernetes API instead of [static pods](/docs/tasks/administer-cluster/static-pod/)
-configured in the kubelet via static files.
--->
-kubeadm 允许您实验性地创建 _self-hosted_ Kubernetes 控制平面。
-这意味着 API 服务器，控制管理器和调度程序之类的关键组件将通过配置 Kubernetes API 以
-[DaemonSet Pods](/zh/docs/concepts/workloads/controllers/daemonset/) 的身份运行，
-而不是通过静态文件在 kubelet 中配置[静态 Pods](/zh/docs/tasks/configure-pod-container/static-pod/)。
-
-<!--
-To create a self-hosted cluster see the
-[kubeadm alpha selfhosting pivot](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/#cmd-selfhosting) command.
--->
-要创建自托管集群，请参见
-[kubeadm alpha selfhosting pivot](/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha/#cmd-selfhosting)
-命令。
-
-<!-- body -->
-
-<!--
-#### Caveats
--->
-#### 警告
-
-<!--
-This feature pivots your cluster into an unsupported state, rendering kubeadm unable
-to manage you cluster any longer. This includes `kubeadm upgrade`.
--->
-{{< caution >}}
-此功能将您的集群设置为不受支持的状态，从而使 kubeadm 无法再管理您的集群。
-这包括 `kubeadm 升级` 。
-{{< /caution >}}
-
-<!--
-1. Self-hosting in 1.8 and later has some important limitations. In particular, a
-  self-hosted cluster _cannot recover from a reboot of the control-plane node_
-  without manual intervention.
--->
-1. 1.8及更高版本中的自托管功能有一些重要限制。
-   特别是，自托管集群在没有人工干预的情况下_无法从控制平面节点的重新启动中恢复_ 。
-
-<!--
-1. By default, self-hosted control plane Pods rely on credentials loaded from
-  [`hostPath`](/docs/concepts/storage/volumes/#hostpath)
-  volumes. Except for initial creation, these credentials are not managed by
-  kubeadm.
--->
-2. 默认情况下，自托管的控制平面 Pod 依赖于从
-   [`hostPath`](/zh/docs/concepts/storage/volumes/#hostpath) 卷加载的凭据。
-   除初始创建外，这些凭据不由 kubeadm 管理。
-
-<!--
-1. The self-hosted portion of the control plane does not include etcd,
-  which still runs as a static Pod.
--->
-3. 控制平面的自托管部分不包括 etcd，后者仍作为静态 Pod 运行。
-
-<!--
-#### Process
-
-The self-hosting bootstrap process is documented in the [kubeadm design
-document](https://github.com/kubernetes/kubeadm/blob/master/docs/design/design_v1.9.md#optional-self-hosting).
--->
-#### 过程
-
-自托管引导过程描述于 [kubeadm 设计文档](https://github.com/kubernetes/kubeadm/blob/master/docs/design/design_v1.9.md#optional-self-hosting) 中。
-
-<!--
-In summary, `kubeadm alpha selfhosting` works as follows:
--->
-总体而言，`kubeadm alpha 自托管` 的工作原理如下：
-
-<!--
-  1. Waits for this bootstrap static control plane to be running and
-    healthy. This is identical to the `kubeadm init` process without self-hosting.
--->
-  1. 等待此引导静态控制平面运行且良好。
-     这与没有自我托管的 `kubeadm init` 过程相同。
-<!--
-  1. Uses the static control plane Pod manifests to construct a set of
-    DaemonSet manifests that will run the self-hosted control plane.
-    It also modifies these manifests where necessary, for example adding new volumes
-    for secrets.
--->
-  2. 使用静态控制平面 Pod 清单来构造一组 DaemonSet 清单，这些清单将运行自托管的控制平面。
-     它还会在必要时修改这些清单，例如添加新的 secrets 卷。
-
-<!--
-  1. Creates DaemonSets in the `kube-system` namespace and waits for the
-     resulting Pods to be running.
--->
-  3. 在 `kube-system` 名称空间中创建 DaemonSets ，并等待生成的 Pod 运行。
-
-<!--
-  1. Once self-hosted Pods are operational, their associated static Pods are deleted
-     and kubeadm moves on to install the next component. This triggers kubelet to
-     stop those static Pods.
--->
-  4. 自托管 Pod 运行后，将删除其关联的静态 Pod，然后 kubeadm 继续安装下一个组件。
-     这将触发 kubelet 停止那些静态 Pod 。
-
-<!--
-  1. When the original static control plane stops, the new self-hosted control
-    plane is able to bind to listening ports and become active.
--->
-  5. 当原始静态控制平面停止时，新的自托管控制平面能够绑定到侦听端口并变为活动状态。
-
-
diff --git a/content/zh/docs/tasks/administer-cluster/enabling-endpointslices.md b/content/zh/docs/tasks/administer-cluster/enabling-endpointslices.md
deleted file mode 100644
index 80ac9f50ce..0000000000
--- a/content/zh/docs/tasks/administer-cluster/enabling-endpointslices.md
+++ /dev/null
@@ -1,161 +0,0 @@
----
-reviewers:
-title: 启用 EndpointSlices
-content_type: task
----
-
-<!--
-reviewers:
-- bowei
-- freehan
-title: Enabling EndpointSlices
-content_type: task
--->
-
-<!-- overview -->
-
-<!--
-This page provides an overview of enabling EndpointSlices in Kubernetes.
--->
-本页提供启用 Kubernetes EndpointSlice 的总览。
-
-## {{% heading "prerequisites" %}}
-
-{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-
-<!-- steps -->
-
-<!--
-## Introduction
-
-EndpointSlices provide a scalable and extensible alternative to Endpoints in
-Kubernetes. They build on top of the base of functionality provided by Endpoints
-and extend that in a scalable way. When Services have a large number (>100) of
-network endpoints, they will be split into multiple smaller EndpointSlice
-resources instead of a single large Endpoints resource.
--->
-## 介绍
-
-EndpointSlice （端点切片）为 Kubernetes Endpoints 提供了可伸缩和可扩展的替代方案。
-它们建立在 Endpoints 提供的功能基础之上，并以可伸缩的方式进行扩展。
-当 Service 具有大量（>100）网络端点时，它们将被分成多个较小的 EndpointSlice 资源，
-而不是单个大型 Endpoints 资源。
-
-<!--
-## Enabling EndpointSlices
--->
-## 启用 EndpointSlice
-
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
-
-{{< note >}}
-<!--
-The EndpointSlice resource was designed to address shortcomings in a earlier
-resource: Endpoints. Some Kubernetes components and third-party applications
-continue to use and rely on Endpoints. Whilst that remains the case,
-EndpointSlices should be seen as an addition to Endpoints in a cluster, not as
-an outright replacement.
--->
-EndpointSlice 资源旨在解决较早资源：Endpoints 中的缺点。一些 Kubernetes 组件和第三方应用程序
-继续使用并依赖 Endpoints。既然情况如此，应该将 EndpointSlices 视为集群中 Endpoints 的补充，而不是
-彻底替代。
-{{< /note >}}
-
-<!--
-EndpointSlice functionality in Kubernetes is made up of several different
-components, most are enabled by default:
--->
-Kubernetes 中的 EndpointSlice 功能包含若干不同组件。它们中的大部分都是
-默认被启用的：
-
-<!--
-* _The EndpointSlice API_: EndpointSlices are part of the
-  `discovery.k8s.io/v1beta1` API. This is beta and enabled by default since
-  Kubernetes 1.17. All components listed below are dependent on this API being
-  enabled.
-* _The EndpointSlice Controller_: This {{< glossary_tooltip text="controller"
-  term_id="controller" >}} maintains EndpointSlices for Services and the Pods
-  they reference. This is controlled by the `EndpointSlice` feature gate. It has
-  been enabled by default since Kubernetes 1.18.
--->
-* _EndpointSlice API_：EndpointSlice 隶属于 `discovery.k8s.io/v1beta1` API。
-  此 API 处于 Beta 阶段，从 Kubernetes 1.17 开始默认被启用。
-  下面列举的所有组件都依赖于此 API 被启用。
-* _EndpointSlice 控制器_：此 {{< glossary_tooltip text="控制器" term_id="controller" >}}
-  为 Service  维护 EndpointSlice 及其引用的 Pods。
-  此控制器通过 `EndpointSlice` 特性门控控制。自从 Kubernetes 1.18 起，
-  该特性门控默认被启用。
-
-<!--
-* _The EndpointSliceMirroring Controller_: This {{< glossary_tooltip
-  text="controller" term_id="controller" >}} mirrors custom Endpoints to
-  EndpointSlices. This is controlled by the `EndpointSlice` feature gate. It has
-  been enabled by default since Kubernetes 1.19.
-* _Kube-Proxy_: When {{< glossary_tooltip text="kube-proxy" term_id="kube-proxy">}}
-  is configured to use EndpointSlices, it can support higher numbers of Service
-  endpoints. This is controlled by the `EndpointSliceProxying` feature gate on
-  Linux and `WindowsEndpointSliceProxying` on Windows. It has been enabled by
-  default on Linux since Kubernetes 1.19. It is not enabled by default for
-  Windows nodes. To configure kube-proxy to use EndpointSlices on Windows, you
-  can enable the `WindowsEndpointSliceProxying` [feature
-  gate](/docs/reference/command-line-tools-reference/feature-gates/) on
-  kube-proxy.
--->
-* _EndpointSliceMirroring 控制器_：此 {{< glossary_tooltip text="控制器" term_id="controller" >}}
-  将自定义的 Endpoints 映射为 EndpointSlice。
-  控制器受 `EndpointSlice` 特性门控控制。该特性门控自 1.19 开始被默认启用。
-* _kube-proxy_：当 {{< glossary_tooltip text="kube-proxy" term_id="kube-proxy">}}
-  被配置为使用 EndpointSlice 时，它会支持更大数量的 Service 端点。
-  此功能在 Linux 上受 `EndpointSliceProxying` 特性门控控制；在 Windows 上受
-  `WindowsEndpointSliceProxying` 特性门控控制。
-  在 Linux 上，从 Kubernetes 1.19 版本起自动启用。目前尚未在 Windows 节点
-  上默认启用。
-  要在 Windows 节点上配置 kube-proxy 使用 EndpointSlice，你需要为 kube-proxy 启用
-  `WindowsEndpointSliceProxying`
-  [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
-
-
-<!--
-## API fields
-
-Some fields in the EndpointSlice API are feature-gated.
-
-- The `EndpointSliceNodeName` feature gate controls access to the `nodeName`
-  field. This is an alpha feature that is disabled by default.
-- The `EndpointSliceTerminating` feature gate controls access to the `serving`
-  and `terminating` condition fields. This is an alpha feature that is disabled
-  by default.
--->
-## API 字段
-
-EndpointSlice API 中的某些字段有对应的特性门控控制。
-
-- `EndpointSliceNodeName` 特性门控控制对 `nodeName` 字段的访问。这是默认情况下禁用的 Alpha 功能。
-- `EndpointSliceTerminating` 特性门控控制对 `serving` 和 `terminating` 状况字段的访问。这是默认情况下禁用的 Alpha 功能。
-
-<!--
-## Using Endpoint Slices
-
-With EndpointSlices fully enabled in your cluster, you should see corresponding
-EndpointSlice resources for each Endpoints resource. In addition to supporting
-existing Endpoints functionality, EndpointSlices will allow for greater
-scalability and extensibility of network endpoints in your cluster.
--->
-## 使用 EndpointSlice
-
-在集群中完全启用 EndpointSlice 的情况下，你应该看到对应于每个
-Endpoints 资源的 EndpointSlice 资源。除了支持现有的 Endpoints 功能外，
-EndpointSlices 将允许集群中网络端点更好的可伸缩性和可扩展性。
-
-<!--
-## {{% heading "whatsnext" %}}
-
-
-* Read about [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/)
-* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
--->
-## {{% heading "whatsnext" %}}
-
-
-* 参阅 [EndpointSlices](/zh/docs/concepts/services-networking/endpoint-slices/)
-* 参阅[将应用程序与服务连接](/zh/docs/concepts/services-networking/connect-applications-service/)
diff --git a/content/zh/docs/tasks/tools/install-kubectl.md b/content/zh/docs/tasks/tools/install-kubectl.md
deleted file mode 100644
index e67a7dcb21..0000000000
--- a/content/zh/docs/tasks/tools/install-kubectl.md
+++ /dev/null
@@ -1,1070 +0,0 @@
----
-title: 安装并配置 kubectl
-content_type: task
-weight: 10
-card:
-  name: tasks
-  weight: 20
-  title: 安装 kubectl
----
-<!--
-reviewers:
-- mikedanese
-title: Install and Set Up kubectl
-content_type: task
-weight: 10
-card:
-  name: tasks
-  weight: 20
-  title: Install kubectl
--->
-
-<!-- overview -->
-<!--
-The Kubernetes command-line tool, [kubectl](/docs/reference/kubectl/kubectl/), allows
-you to run commands against Kubernetes clusters.
-You can use kubectl to deploy applications, inspect and manage cluster resources,
-and view logs. For a complete list of kubectl operations, see
-[Overview of kubectl](/docs/reference/kubectl/overview/).
- -->
-使用 Kubernetes 命令行工具 [kubectl](/zh/docs/reference/kubectl/kubectl/)，
-你可以在 Kubernetes 上运行命令。
-使用 kubectl，你可以部署应用、检视和管理集群资源、查看日志。
-要了解 kubectl 操作的完整列表，请参阅
-[kubectl 概览](/zh/docs/reference/kubectl/overview/)。
-
-## {{% heading "prerequisites" %}}
-
-<!--
-You must use a kubectl version that is within one minor version difference of your cluster.
-For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master.
-Using the latest version of kubectl helps avoid unforeseen issues.
--->
-你必须使用与集群小版本号差别为一的 kubectl 版本。
-例如，1.2 版本的客户端应该与 1.1 版本、1.2 版本和 1.3 版本的主节点一起使用。
-使用最新版本的 kubectl 有助于避免无法预料的问题。
-
-<!-- steps -->
-
-<!--
-## Install kubectl on Linux
-
-### Install kubectl binary with curl on Linux
--->
-## 在 Linux 上安装 kubectl  {#install-kubectl-on-linux}
-
-### 在 Linux 上使用 curl 安装 kubectl 可执行文件
-
-<!--
-1. Download the latest release with the command:
--->
-1. 使用下面命令下载最新的发行版本：
-
-   ```bash
-   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
-   ```
-
-   <!--
-   To download a specific version, replace the `$(curl -L -s https://dl.k8s.io/release/stable.txt)` portion of the command with the specific version.
-
-   For example, to download version {{< param "fullversion" >}} on Linux, type:
-   -->
-   要下载特定版本，将命令中的 `$(curl -L -s https://dl.k8s.io/release/stable.txt)`
-   部分替换为指定版本。
-
-   例如，要下载 Linux 上的版本 {{< param "fullversion" >}}，输入：
-    
-   ```
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
-   ```
-
-<!--
-1. Validate the binary (optional)
--->
-2. 验证可执行文件（可选步骤）：
-
-   <!--
-   Download the kubectl checksum file:
-   -->
-   下载 kubectl 校验和文件：
-
-   ```bash
-   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl.sha256"
-   ```
-
-   <!--
-   Validate the kubectl binary against the checksum file:
-   -->
-   使用校验和文件检查 kubectl 可执行二进制文件：
-
-   ```bash
-   echo "$(<kubectl.sha256) kubectl" | sha256sum --check
-   ```
-
-   <!--
-   If valid, the output is:
-   -->
-   如果合法，则输出为：
-
-   ```bash
-   kubectl: OK
-   ```
-
-   <!--
-   If the check fails, `sha256` exits with nonzero status and prints output similar to:
-   -->
-   如果检查失败，则 `sha256` 退出且状态值非 0 并打印类似如下输出：
-
-   ```bash
-   kubectl: FAILED
-   sha256sum: WARNING: 1 computed checksum did NOT match
-   ```
-
-   {{< note >}}
-   <!--
-   Download the same version of the binary and checksum.
-   -->
-   所下载的二进制可执行文件和校验和文件须是同一版本。
-   {{< /note >}}
-
-
-<!--
-1. Install kubectl
--->
-3. 安装 kubectl
-
-   ```bash
-   sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
-   ```
-
-   <!--
-   If you do not have root access on the target system, you can still install kubectl to the `~/.local/bin` directory:
-   -->
-   如果你并不拥有目标系统的 root 访问权限，你仍可以将 kubectl 安装到
-   `~/.local/bin` 目录下：
-
-   ```bash
-   mkdir -p ~/.local/bin/kubectl
-   mv ./kubectl ~/.local/bin/kubectl
-   # 之后将 ~/.local/bin/kubectl 添加到环境变量 $PATH 中
-   ```
-
-<!--
-1. Test to ensure the version you installed is up-to-date:
--->
-4. 测试你所安装的版本是最新的：
-
-   ```
-   kubectl version --client
-   ```
-
-<!--
-### Install using native package management
--->
-### 使用原生包管理器安装    {#install-using-native-package-management}
-
-{{< tabs name="kubectl_install" >}}
-{{< tab name="Ubuntu、Debian 或 HypriotOS" codelang="bash" >}}
-sudo apt-get update && sudo apt-get install -y apt-transport-https gnupg2 curl
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
-sudo apt-get update
-sudo apt-get install -y kubectl
-{{< /tab >}}
-
-{{< tab name="CentOS、RHEL 或 Fedora" codelang="bash" >}}
-cat <<EOF > /etc/yum.repos.d/kubernetes.repo
-[kubernetes]
-name=Kubernetes
-baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
-enabled=1
-gpgcheck=1
-repo_gpgcheck=1
-gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
-EOF
-yum install -y kubectl
-{{< /tab >}}
-{{< /tabs >}}
-
-<!--
-### Install using other package management
--->
-### 使用其他包管理器安装 {#install-using-other-package-management}
-
-{{< tabs name="other_kubectl_install" >}}
-{{% tab name="Snap" %}}
-<!--
-If you are on Ubuntu or another Linux distribution that support [snap](https://snapcraft.io/docs/core/install) package manager, kubectl is available as a [snap](https://snapcraft.io/) application.
--->
-如果你使用 Ubuntu 或者其他支持 [snap](https://snapcraft.io/docs/core/install)
-包管理器的 Linux 发行版，kubeclt 可以作为 [Snap](https://snapcraft.io)
-应用来安装：
-
-```shell
-snap install kubectl --classic
-
-kubectl version --client
-```
-
-{{% /tab %}}
-
-{{% tab name="Homebrew" %}}
-<!--
-If you are on Linux and using [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) package manager, kubectl is available for [installation](https://docs.brew.sh/Homebrew-on-Linux#install).
--->
-如果你在使用 Linux 且使用 [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) 包管理器，
-kubectl 也可以用这种方式[安装](https://docs.brew.sh/Homebrew-on-Linux#install)。
-
-```shell
-brew install kubectl
-
-kubectl version --client
-```
-
-{{% /tab %}}
-
-{{< /tabs >}}
-
-<!--
-## Install kubectl on macOS
-
-### Install kubectl binary with curl on macOS
--->
-## 在 macOS 上安装 kubectl
-
-### 在 macOS 上使用 curl 安装 kubectl 可执行文件
-
-<!--
-1. Download the latest release:
--->
-1. 下载最新发行版本：
-
-   ```bash
-   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl"
-   ```
-
-   <!--
-   To download a specific version, replace the `$(curl -L -s https://dl.k8s.io/release/stable.txt)` portion of the command with the specific version.
-
-   For example, to download version {{< param "fullversion" >}} on macOS, type:
-   -->
-   要下载特定版本，可将上面命令中的 `$(curl -L -s https://dl.k8s.io/release/stable.txt)`
-   部分替换成你想要的版本。
-
-   例如，要在 macOS 上安装版本 {{< param "fullversion" >}}，输入：
-
-   ```bash
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
-   ```
-
-<!--
-1. Validate the binary (optional)
--->
-2. 检查二进制可执行文件（可选操作）
-
-   <!--
-   Download the kubectl checksum file:
-   -->
-   下载 kubectl 校验和文件：
-
-   ```bash
-   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
-   ```
-
-   <!--
-   Validate the kubectl binary against the checksum file:
-   -->
-   使用校验和文件检查 kubectl 二进制可执行文件：
-
-   ```bash
-   echo "$(<kubectl.sha256)  kubectl" | shasum -a 256 --check
-   ```
-
-   <!--
-   If valid, the output is:
-   -->
-   如果合法，则输出为：
-
-   ```bash
-   kubectl: OK
-   ```
-
-   <!--
-   If the check fails, `shasum` exits with nonzero status and prints output similar to:
-   -->
-   如果检查失败，则 `shasum` 退出且状态值为非 0，并打印类似如下的输出：
-
-   ```bash
-   kubectl: FAILED
-   shasum: WARNING: 1 computed checksum did NOT match
-   ```
-
-   {{< note >}}
-   <!--
-   Download the same version of the binary and checksum.
-   -->
-   下载的二进制可执行文件和校验和文件须为同一版本。
-   {{< /note >}}
-
-<!--
-1. Make the kubectl binary executable.
--->
-3. 设置 kubectl 二进制文件为可执行模式
-
-   ```bash
-   chmod +x ./kubectl
-   ```
-
-<!--
-1. Move the kubectl binary to a file location on your system `PATH`.
--->
-4. 将 kubectl 二进制文件移动到系统 `PATH` 环境变量中的某个位置：
-
-   ```bash
-   sudo mv ./kubectl /usr/local/bin/kubectl && \
-   sudo chown root: /usr/local/bin/kubectl
-   ```
-
-<!--
-4. Test to ensure the version you installed is up-to-date:
--->
-5. 测试以确保所安装的版本是最新的：
-
-   ```bash
-   kubectl version --client
-   ```
-
-<!--
-### Install with Homebrew on macOS
-
-If you are on macOS and using [Homebrew](https://brew.sh/) package manager, you can install kubectl with Homebrew.
--->
-### 在 macOS 上使用 Homebrew 安装    {#install-with-homebrew-on-macos}
-
-如果你使用的是 macOS 系统且使用 [Homebrew](https://brew.sh/) 包管理器，
-你可以使用 Homebrew 来安装 kubectl。
-
-<!--
-1. Run the installation command:
--->
-1. 运行安装命令：
-
-   ```bash
-   brew install kubectl 
-   ```
-   
-   <!--
-   or
-   -->
-   或者
-   
-   ```bash
-   brew install kubernetes-cli
-   ```
-
-<!--
-1. Test to ensure the version you installed is sufficiently up-to-date:
--->
-2. 测试以确保你安装的版本是最新的：
-
-    ```bash
-    kubectl version --client
-    ```
-
-<!--
-### Install with Macports on macOS
-
-If you are on macOS and using [Macports](https://macports.org/) package manager, you can install kubectl with Macports.
--->
-### 在 macOS 上用 Macports 安装 kubectl
-
-如果你使用的是 macOS 系统并使用 [Macports](https://macports.org/) 包管理器，
-你可以通过 Macports 安装 kubectl。
-
-<!--
-1. Run the installation command:
--->
-1. 运行安装命令：
-
-   ```bash
-   sudo port selfupdate
-   sudo port install kubectl
-   ```
-
-<!--
-2. Test to ensure the version you installed is sufficiently up-to-date:
--->
-2. 测试以确保你安装的版本是最新的：
-
-   ```bash
-   kubectl version --client
-   ```
-
-<!--
-## Install kubectl on Windows   {#install-kubectl-on-windows}
-
-### Install kubectl binary with curl on Windows
--->
-## 在 Windows 上安装 kubectl   {#install-kubectl-on-windows}
-
-### 在 Windows 上使用 curl 安装 kubectl 二进制文件
-
-<!--
-1. Download the [latest release {{< param "fullversion" >}}](https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe).
-
-   Or if you have `curl` installed, use this command:
--->
-1. 下载[最新发行版本 {{< param "fullversion" >}}](https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe)。
-
-   或者如何你安装了 `curl`，使用下面的命令：
-
-   ```bash
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
-   ```
-
-   <!--
-   To find out the latest stable version (for example, for scripting), take a look at [https://dl.k8s.io/release/stable.txt](https://dl.k8s.io/release/stable.txt).
-   -->
-   要了解哪个是最新的稳定版本（例如，出于脚本编写目的），可查看
-   [https://dl.k8s.io/release/stable.txt](https://dl.k8s.io/release/stable.txt)。
-
-<!--
-1. Validate the binary (optional)
--->
-2. 验证二进制可执行文件（可选操作）
-
-   <!--
-   Download the kubectl checksum file:
-   -->
-   下载 kubectl 校验和文件：
-
-   ```powershell
-   curl -LO https://dl.k8s.io/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe.sha256
-   ```
-
-   <!--
-   Validate the kubectl binary against the checksum file:
-   -->
-   使用校验和文件验证 kubectl 可执行二进制文件：
-
-   <!--
-   - Using Command Prompt to manually compare `CertUtil`'s output to the checksum file downloaded:
-   -->
-   - 使用命令行提示符（Commmand Prompt）来手动比较 `CertUtil` 的输出与
-     所下载的校验和文件：
-
-     ```cmd
-     CertUtil -hashfile kubectl.exe SHA256
-     type kubectl.exe.sha256
-     ```
-
-   <!--
-   - Using PowerShell to automate the verification using the `-eq` operator to get a `True` or `False` result:
-   -->
-   - 使用 PowerShell 的 `-eq` 操作符来自动完成校验操作，获得 `True` 或 `False` 结果：
-
-     ```powershell
-     $($(CertUtil -hashfile .\kubectl.exe SHA256)[1] -replace " ", "") -eq $(type .\kubectl.exe.sha256)
-     ```
-
-<!--
-1. Add the binary in to your PATH.
--->
-3. 将可执行文件放到 PATH 目录下。
-
-<!--
-1. Test to ensure the version of `kubectl` is the same as downloaded:
--->
-4. 测试以确定所下载的 `kubectl` 版本是正确的的：
-
-   ```cmd
-   kubectl version --client
-   ```
-
-<!--
-[Docker Desktop for Windows](https://docs.docker.com/docker-for-windows/#kubernetes) adds its own version of `kubectl` to PATH.
-If you have installed Docker Desktop before, you may need to place your PATH entry before the one added by the Docker Desktop installer or remove the Docker Desktop's `kubectl`.
--->
-{{< note >}}
-[Docker Desktop for Windows](https://docs.docker.com/docker-for-windows/#kubernetes)
-会将自己的 `kubectl` 程序添加到 PATH 中。
-如果你之前安装过 Docker Desktop，你可能需要将新安装的 PATH 项放到 Docker Desktop
-安装程序所添加的目录之前，或者干脆删除 Docker Desktop 所安装的 `kubectl`。
-{{< /note >}}
-
-<!--
-## Install with PowerShell from PSGallery
-
-If you are on Windows and using [PowerShell Gallery](https://www.powershellgallery.com/) package manager, you can install and update kubectl with PowerShell.
--->
-## 使用 PowerShell 从 PSGallery 安装 kubectl
-
-如果你使用的是 Windows 系统并使用 [Powershell Gallery](https://www.powershellgallery.com/)
-软件包管理器，你可以使用 PowerShell 安装和更新 kubectl。
-
-<!--
-1. Run the installation commands (making sure to specify a `DownloadLocation`):
--->
-1. 运行安装命令（确保指定 `DownloadLocation`）：
-
-   ```powershell
-   Install-Script -Name 'install-kubectl' -Scope CurrentUser -Force
-   install-kubectl.ps1 [-DownloadLocation <路径名>]
-   ```
-
-   <!--
-   If you do not specify a `DownloadLocation`, `kubectl` will be installed in the user's `temp` Directory.
-   -->
-   {{< note >}}
-   如果你没有指定 `DownloadLocation`，那么 `kubectl` 将安装在用户的 `temp` 目录中。
-   {{< /note >}}
-
-   <!--
-   The installer creates `$HOME/.kube` and instructs it to create a config file
-   -->
-   安装程序创建 `$HOME/.kube` 目录，并指示它创建配置文件
-
-<!--
-2. Test to ensure the version you installed is up-to-date:
--->
-2. 测试以确保你安装的版本是最新的：
-
-   ```powershell
-   kubectl version --client
-   ```
-
-<!--
-Updating the installation is performed by rerunning the two commands listed in step 1.
--->
-{{< note >}}
-通过重新运行步骤 1 中列出的两个命令可以更新安装。
-{{< /note >}}
-
-<!--
-### Install on Windows using Chocolatey or Scoop
--->
-### 在 Windows 系统上用 Chocolatey 或者 Scoop 安装
-
-<!--
-1. To install kubectl on Windows you can use either [Chocolatey](https://chocolatey.org) package manager or [Scoop](https://scoop.sh) command-line installer.
--->
-1. 要在 Windows 上用 [Chocolatey](https://chocolatey.org) 或者
-   [Scoop](https://scoop.sh) 命令行安装程序安装 kubectl：
-
-   {{< tabs name="kubectl_win_install" >}}
-   {{% tab name="choco" %}}
-   ```powershell
-   choco install kubernetes-cli
-   ```
-   {{% /tab %}}
-   {{% tab name="scoop" %}}
-   ```powershell
-   scoop install kubectl
-   ```
-   {{% /tab %}}
-   {{< /tabs >}}
-
-<!--
-1. Test to ensure the version you installed is up-to-date:
--->
-2. 测试以确保你安装的版本是最新的：
-
-   ```
-   kubectl version --client
-   ```
-
-<!--
-1. Navigate to your home directory:
--->
-3. 切换到你的 HOME 目录：
-
-   ```powershell
-   # 如果你在使用 cmd.exe，运行 cd %USERPROFILE%
-   cd ~
-   ```
-
-<!--
-1. Create the `.kube` directory:
--->
-4. 创建 `.kube` 目录：
-
-   ```powershell
-   mkdir .kube
-   ```
-
-<!--
-1. Change to the `.kube` directory you just created:
--->
-5. 进入到刚刚创建的 `.kube` 目录：
-
-   ```powershell
-   cd .kube
-   ```
-
-<!--
-1. Configure kubectl to use a remote Kubernetes cluster:
--->
-6. 配置 kubectl 以使用远程 Kubernetes 集群：
-
-   ```powershell
-   New-Item config -type file
-   ```
-
-<!--
-Edit the config file with a text editor of your choice, such as Notepad.
--->
-{{< note >}}
-使用你喜欢的文本编辑器，例如 Notepad，编辑此配置文件。
-{{< /note >}}
-
-
-<!--
-## Download as part of the Google Cloud SDK
-
-You can install kubectl as part of the Google Cloud SDK.
--->
-## 将 kubectl 作为 Google Cloud SDK 的一部分下载
-
-kubectl 可以作为 Google Cloud SDK 的一部分进行安装。
-
-<!--
-1. Install the [Google Cloud SDK](https://cloud.google.com/sdk/).
-
-2. Run the `kubectl` installation command:
--->
-1. 安装 [Google Cloud SDK](https://cloud.google.com/sdk/)。
-
-2. 运行以下命令安装 `kubectl`：
-
-   ```shell
-   gcloud components install kubectl
-   ```
-
-<!--
-3. Test to ensure the version you installed is up-to-date:
--->
-3. 测试以确保你安装的版本是最新的：
-
-   ```shell
-   kubectl version --client
-   ```
-
-<!--
-## Verifying kubectl configuration
-
-In order for kubectl to find and access a Kubernetes cluster, it needs a
-[kubeconfig file](/docs/concepts/configuration/organize-cluster-access-kubeconfig/),
-which is created automatically when you create a cluster using
-[kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)
-or successfully deploy a Minikube cluster.
-By default, kubectl configuration is located at `~/.kube/config`.
--->
-## 验证 kubectl 配置   {#verifying-kubectl-configuration}
-
-kubectl 需要一个
-[kubeconfig 配置文件](/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
-使其找到并访问 Kubernetes 集群。当你使用
-[kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)
-创建 Kubernetes 集群或者使用已经部署好的 Minikube 集群时，
-会自动生成 kubeconfig 配置文件。
-默认情况下，kubectl 的配置文件位于 `~/.kube/config`。
-
-<!--
-Check that kubectl is properly configured by getting the cluster state:
--->
-通过获取集群状态检查 kubectl 是否被正确配置：
-
-```shell
-kubectl cluster-info
-```
-
-<!--
-If you see a URL response, kubectl is correctly configured to access your cluster.
-
-If you see a message similar to the following, kubectl is not configured correctly or is not able to connect to a Kubernetes cluster.
--->
-如果你看到一个 URL 被返回，那么 kubectl 已经被正确配置，
-能够正常访问你的 Kubernetes 集群。
-
-如果你看到类似以下的信息被返回，那么 kubectl 没有被正确配置，
-无法正常访问你的 Kubernetes 集群。
-
-```
-The connection to the server <server-name:port> was refused - did you specify the right host or port?
-```
-
-<!--
-For example, if you are intending to run a Kubernetes cluster on your laptop (locally), you will need a tool like Minikube to be installed first and then re-run the commands stated above.
-
-If kubectl cluster-info returns the url response but you can't access your cluster, to check whether it is configured properly, use:
--->
-例如，如果你打算在笔记本电脑（本地）上运行 Kubernetes 集群，则需要首先安装
-minikube 等工具，然后重新运行上述命令。
-
-如果 kubectl cluster-info 能够返回 URL 响应，但你无法访问你的集群，可以使用
-下面的命令检查配置是否正确：
-
-```shell
-kubectl cluster-info dump
-```
-
-<!--
-## Optional kubectl configurations
-
-### Enabling shell autocompletion
-
-kubectl provides autocompletion support for Bash and Zsh, which can save you a lot of typing.
-
-Below are the procedures to set up autocompletion for Bash (including the difference between Linux and macOS) and Zsh.
--->
-## 可选的 kubectl 配置
-
-### 启用 shell 自动补全功能
-
-kubectl 为 Bash 和 Zsh 支持自动补全功能，可以节省大量输入！
-
-下面是设置 Bash 与 Zsh 下自动补齐的过程（包括 Linux 与 macOS 的差异）。
-
-{{< tabs name="kubectl_autocompletion" >}}
-
-{{% tab name="Linux 上的 Bash" %}}
-
-<!--
-### Introduction
-
-The kubectl completion script for Bash can be generated with the command `kubectl completion bash`. Sourcing the completion script in your shell enables kubectl autocompletion.
-
-However, the completion script depends on [**bash-completion**](https://github.com/scop/bash-completion), which means that you have to install this software first (you can test if you have bash-completion already installed by running `type _init_completion`).
--->
-#### 介绍
-
-用于 Bash 的 kubectl 自动补齐脚本可以用 `kubectl completion bash` 命令生成。
-在 Shell 环境中引用自动补齐脚本就可以启用 kubectl 自动补齐。
-
-不过，补齐脚本依赖于 [**bash-completion**](https://github.com/scop/bash-completion) 软件包，
-这意味着你必须先安装 bash-completion（你可以通过运行 `type _init_completion`）来测试是否
-你已经安装了这个软件）。
-
-<!--
-### Install bash-completion
-
-bash-completion is provided by many package managers (see [here](https://github.com/scop/bash-completion#installation)). You can install it with `apt-get install bash-completion` or `yum install bash-completion`, etc.
-
-The above commands create `/usr/share/bash-completion/bash_completion`, which is the main script of bash-completion. Depending on your package manager, you have to manually source this file in your `~/.bashrc` file.
-
-To find out, reload your shell and run `type _init_completion`. If the command succeeds, you're already set, otherwise add the following to your `~/.bashrc` file:
--->
-### 安装 bash-completion
-
-很多包管理器都提供 bash-completion（参见[这里](https://github.com/scop/bash-completion#installation)）。
-你可以通过 `apt-get install bash-completion` 或 `yum install bash-completion` 来安装。
-
-上述命令会创建 `/usr/share/bash-completion/bash_completion`，也就是 bash-completion 的主脚本。
-取决于所用的包管理器，你可能必须在你的 `~/.bashrc` 中通过 `source` 源引此文件。
-
-要搞清楚这一点，可以重新加载你的 Shell 并运行 `type _init_completion`。
-如果命令成功，一切就绪；否则你就需要将下面的内容添加到你的 `~/.bashrc`
-文件中：
-
-```bash
-source /usr/share/bash-completion/bash_completion
-```
-
-之后，重新加载你的 Shell 并运行 `type _init_completion` 来检查 bash-completion 是否已
-正确安装。
-
-<!--
-### Enable kubectl autocompletion
-
-You now need to ensure that the kubectl completion script gets sourced in all your shell sessions. There are two ways in which you can do this:
--->
-### 启用 kubectl 自动补齐
-
-你现在需要确定在你的所有 Shell 会话中都源引了 kubectl 自动补齐脚本。
-实现这点有两种方式：
-
-<!--
-- Source the completion script in your `~/.bashrc` file:
--->
-- 在 `~/.bashrc` 文件中源引自动补齐脚本
-
-  ```bash
-  echo 'source <(kubectl completion bash)' >>~/.bashrc
-  ```
-
-<!--
-- Add the completion script to the `/etc/bash_completion.d` directory:
--->
-- 将自动补齐脚本添加到目录 `/etc/bash_completion.d`：
-
-  ```bash
-  kubectl completion bash >/etc/bash_completion.d/kubectl
-  ```
-
-<!--
-If you have an alias for kubectl, you can extend shell completion to work with that alias:
--->
-如果你为 kubectl 命令设置了别名（alias），你可以扩展 Shell 补齐，使之能够与别名一起使用：
-
-```bash
-echo 'alias k=kubectl' >>~/.bashrc
-echo 'complete -F __start_kubectl k' >>~/.bashrc
-```
-
-<!--
-- Source the completion script in your `~/.bashrc` file:
--->
-
-<!--
-bash-completion sources all completion scripts in `/etc/bash_completion.d`.
--->
-{{< note >}}
-bash-completion 会自动源引 `/etc/bash_completion.d` 下的所有自动补齐脚本。
-{{< /note >}}
-
-<!--
-Both approaches are equivalent. After reloading your shell, kubectl autocompletion should be working.
--->
-两种方法是等价的。重新加载 Shell 之后，kubectl 的自动补齐应该能够使用了。
-
-{{% /tab %}}
-
-{{% tab name="macOS 上的 Bash" %}}
-
-<!--
-### Introduction
-
-The kubectl completion script for Bash can be generated with `kubectl completion bash`. Sourcing this script in your shell enables kubectl completion.
-
-However, the kubectl completion script depends on [**bash-completion**](https://github.com/scop/bash-completion) which you thus have to previously install.
--->
-### 介绍
-
-用于 Bash 的 kubectl 自动补齐脚本可以用 `kubectl completion bash` 命令生成。
-在 Shell 环境中引用自动补齐脚本就可以启用 kubectl 自动补齐。
-不过，补齐脚本依赖于 [**bash-completion**](https://github.com/scop/bash-completion) 软件包，
-你必须预先安装。
-
-<!--
-There are two versions of bash-completion, v1 and v2. V1 is for Bash 3.2
-(which is the default on macOS), and v2 is for Bash 4.1+. The kubectl
-completion script **doesn't work** correctly with bash-completion v1 and Bash
-3.2. It requires **bash-completion v2** and **Bash 4.1+**. Thus, to be able to
-correctly use kubectl completion on macOS, you have to install and use Bash
-4.1+
-([*instructions*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba)).
-The following instructions assume that you use Bash 4.1+ (that is, any Bash
-version of 4.1 or newer).
--->
-{{< warning>}}
-`bash-completion` 有两个版本，v1 和 v2。
-v1 是用于 Bash 3.2 版本的（macOS 上的默认配置），v2 是用于 Bash 4.1 以上版本的。
-`kubectl` 补齐脚本 *无法* 在 v1 版本的 bash-completion 和 Bash 3.2 上使用，
-需要 **bash-completion v2** 和 **Bash 4.1 以上版本**。
-因此，为了在 macOS 上正常使用 kubectl 自动补齐，你需要安装并使用 Bash 4.1+
-版本（[*相关指南*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba)）。
-下面的指令假定你在使用 Bash 4.1+（也就是说 Bash 4.1 及以上版本）。
-{{< /warning >}}
-
-<!--
-### Upgrade Bash
-
-The instructions here assume you use Bash 4.1+. You can check your Bash's version by running:
--->
-### 升级 Bash  {#upgrade-bash}
-
-这里的命令假定你使用的是 Bash 4.1+。你可以通过下面的命令来检查 Bash 版本：
-
-```bash
-echo $BASH_VERSION
-```
-
-<!--
-If it is too old, you can install/upgrade it using Homebrew:
--->
-如果版本很老，你可以使用 Homebrew 来安装或升级：
-
-```bash
-brew install bash
-```
-
-<!--
-Reload your shell and verify that the desired version is being used:
--->
-重新加载 Shell 并验证你使用的版本是期望的版本：
-
-```bash
-echo $BASH_VERSION $SHELL
-```
-
-<!--
-Homebrew usually installs it at `/usr/local/bin/bash`.
--->
-Homebrew 通常安装 Bash 到 `/usr/local/bin/bash`。
-
-<!--
-### Install bash-completion
-
-{{< note >}}
-As mentioned, these instructions assume you use Bash 4.1+, which means you will install bash-completion v2 (in contrast to Bash 3.2 and bash-completion v1, in which case kubectl completion won't work).
-{{< /note >}}
-
-You can test if you have bash-completion v2 already installed with `type _init_completion`. If not, you can install it with Homebrew:
--->
-### 安装 bash-completion
-
-{{< note >}}
-如前所述，这里的指令假定你使用的是 Bash 4.1+，这意味着你会安装 bash-completion
-的 v2 版本（与此相对，在 Bash 3.2 版本中的 bash-completion v1 是 kubectl
-无法使用的。
-{{< /note >}}
-
-你可以通过输入 `type _init_completion` 来测试是否 bash-completion v2 已经安装。
-如果没有，可以用 Homebrew 来安装：
-
-```bash
-brew install bash-completion@2
-```
-
-<!--
-As stated in the output of this command, add the following to your `~/.bash_profile` file:
--->
-就像命令的输出所提示的，你应该将下面的内容添加到 `~/.bash_profile` 文件中：
-
-```bash
-export BASH_COMPLETION_COMPAT_DIR="/usr/local/etc/bash_completion.d"
-[[ -r "/usr/local/etc/profile.d/bash_completion.sh" ]] && . "/usr/local/etc/profile.d/bash_completion.sh"
-```
-
-<!--
-Reload your shell and verify that bash-completion v2 is correctly installed with `type _init_completion`.
--->
-重新加载你的 Shell 并运行 `type _init_completion`，验证 bash-completion v2
-被正确安装。
-
-<!--
-### Enable kubectl autocompletion
-
-You now have to ensure that the kubectl completion script gets sourced in all your shell sessions. There are multiple ways to achieve this:
--->
-### 启用 kubectl 自动补齐
-
-你现在需要确保在你的所有 Shell 会话中都源引了 kubectl 自动补齐脚本。
-实现这点有两种方式：
-
-<!--
-- Source the completion script in your `~/.bash_profile` file:
--->
-- 在 `~/.bash_profile` 文件中源引自动补齐脚本
-
-  ```bash
-  echo 'source <(kubectl completion bash)' >>~/.bash_profile
-  ```
-
-<!--
-- Add the completion script to the `/usr/local/etc/bash_completion.d` directory:
--->
-- 将自动补齐脚本添加到目录 `/usr/local/etc/bash_completion.d`：
-
-  ```bash
-  kubectl completion bash >/usr/local/etc/bash_completion.d/kubectl
-  ```
-
-<!--
-If you have an alias for kubectl, you can extend shell completion to work with that alias:
--->
-- 如果你为 kubectl 命令设置了别名（alias），你可以扩展 Shell 补齐，使之能够与别名一起使用：
-
-  ```bash
-  echo 'alias k=kubectl' >>~/.bash_profile
-  echo 'complete -F __start_kubectl k' >>~/.bash_profile
-  ```
-
-<!--
-- If you installed kubectl with Homebrew (as explained [above](#install-with-homebrew-on-macos)), then the kubectl completion script should already be in `/usr/local/etc/bash_completion.d/kubectl`. In that case, you don't need to do anything.
-
-  The Homebrew installation of bash-completion v2 sources all the files in the `BASH_COMPLETION_COMPAT_DIR` directory, that's why the latter two methods work.
-
-In any case, after reloading your shell, kubectl completion should be working.
--->
-- 如果你是所有 Homebrew 来安装 kubectl（如[前文](#install-with-homebrew-on-macos)所述）, 
-  kubectl 补齐脚本应该已经位于 `/usr/local/etc/bash_completion.d/kubectl` 目录下。
-  在这种情况下，你就不用做任何操作了。
-
-<!--
-The Homebrew installation of bash-completion v2 sources all the files in the
-`BASH_COMPLETION_COMPAT_DIR` directory, that's why the latter two methods work.
--->
-{{< note >}}
-Homebrew 安装 bash-completion v2 时会源引 `BASH_COMPLETION_COMPAT_DIR` 目录下的所有
-文件，这是为什么后面两种方法也可行的原因。
-{{< /note >}}
-
-<!--
-In any case, after reloading your shell, kubectl completion should be working.
--->
-在任何一种情况下，重新加载 Shell 之后，kubectl 的自动补齐应该可以工作了。
-
-{{% /tab %}}
-
-{{% tab name="Zsh" %}}
-
-<!--
-The kubectl completion script for Zsh can be generated with the command `kubectl completion zsh`. Sourcing the completion script in your shell enables kubectl autocompletion.
-
-To do so in all your shell sessions, add the following to your `~/.zshrc` file:
--->
-Zsh 的 kubectl 补齐脚本可通过 `kubectl completion zsh` 命令来生成。
-在 Shell 环境中引用自动补齐脚本就可以启用 kubectl 自动补齐。
-
-```zsh
-source <(kubectl completion zsh)
-```
-
-<!--
-If you have an alias for kubectl, you can extend shell completion to work with that alias:
--->
-如果你为 kubectl 命令设置了别名（alias），你可以扩展 Shell 补齐，使之能够与别名一起使用：
-
-```zsh
-echo 'alias k=kubectl' >>~/.zshrc
-echo 'complete -F __start_kubectl k' >>~/.zshrc
-```
-
-<!--
-After reloading your shell, kubectl autocompletion should be working.
--->
-重新加载 Shell 之后，kubectl 的自动补齐应该可以工作了。
-
-<!--
-If you get an error like `complete:13: command not found: compdef`, then add the following to the beginning of your `~/.zshrc` file:
--->
-如果你看到类似 `complete:13: command not found: compdef` 这种错误信息，
-可以将下面的命令添加到你的 `~/.zshrc` 文件的文件头：
-
-```zsh
-autoload -Uz compinit
-compinit
-```
-
-{{% /tab %}}
-
-{{< /tabs >}}
-
-## {{% heading "whatsnext" %}}
-
-<!--
-* [Install Minikube](https://minikube.sigs.k8s.io/docs/start/)
-* See the [getting started guides](/docs/setup/) for more about creating clusters.
-* [Learn how to launch and expose your application.](/docs/tasks/access-application-cluster/service-access-application-cluster/)
-* If you need access to a cluster you didn't create, see the
-  [Sharing Cluster Access document](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
-* Read the [kubectl reference docs](/docs/reference/kubectl/kubectl/)
--->
-* [安装 Minikube](https://minikube.sigs.k8s.io/docs/start/)
-* 参阅[入门指南](/zh/docs/setup/)，了解创建集群相关的信息
-* 了解如何[启动和暴露你的应用](/zh/docs/tasks/access-application-cluster/service-access-application-cluster/)
-* 如果你需要访问别人创建的集群，参考
-  [共享集群访问文档](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
-* 阅读 [kubectl 参考文档](/zh/docs/reference/kubectl/kubectl/)
-

From e28f3ce2ffd2a9e2ea73a8833a216704ca29d63d Mon Sep 17 00:00:00 2001
From: wangyysde <net_use@bzhy.com>
Date: Tue, 27 Apr 2021 00:20:51 +0800
Subject: [PATCH 649/788] 
 content/en/docs/reference/command-line-tools-reference/feature-gates.md

Signed-off-by: wangyysde <net_use@bzhy.com>
---
 .../reference/command-line-tools-reference/feature-gates.md     | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 849af9f00b..cdc8babff3 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -266,6 +266,7 @@ different Kubernetes components.
 | `EvenPodsSpread` | `true` | Beta | 1.18 | 1.18 |
 | `EvenPodsSpread` | `true` | GA | 1.19 | - |
 | `ExecProbeTimeout` | `true` | GA | 1.20 | - |
+| `ExternalPolicyForExternalIP` | `true` | GA | 1.18 | - |
 | `GCERegionalPersistentDisk` | `true` | Beta | 1.10 | 1.12 |
 | `GCERegionalPersistentDisk` | `true` | GA | 1.13 | - |
 | `HugePages` | `false` | Alpha | 1.8 | 1.9 |
@@ -635,6 +636,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
   host mounts, or containers that are privileged or using specific non-namespaced
   capabilities (e.g. `MKNODE`, `SYS_MODULE` etc.). This should only be enabled
   if user namespace remapping is enabled in the Docker daemon.
+- `ExternalPolicyForExternalIP`: Fix a bug where ExternalTrafficPolicy is not applied to Service ExternalIPs.
 - `GCERegionalPersistentDisk`: Enable the regional PD feature on GCE.
 - `GenericEphemeralVolume`: Enables ephemeral, inline volumes that support all features
   of normal volumes (can be provided by third-party storage vendors, storage capacity tracking,

From 6338d1b81144e58da8adbbc171ded636df390861 Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Sat, 17 Apr 2021 16:25:40 +0900
Subject: [PATCH 650/788] [ko] Update outdated files in dev-1.21-ko.1 (p5)

---
 .../concepts/architecture/cloud-controller.md |   2 +
 .../control-plane-node-communication.md       |  11 +-
 .../ko/docs/concepts/architecture/nodes.md    |  41 ++++-
 .../concepts/cluster-administration/addons.md |   1 +
 .../cluster-administration/logging.md         |   5 +-
 .../manage-deployment.md                      |   2 +-
 .../cluster-administration/proxies.md         |   6 +-
 .../cluster-administration/system-metrics.md  |  20 ++-
 .../docs/concepts/configuration/configmap.md  |   7 +-
 .../manage-resources-containers.md            |  27 +--
 .../ko/docs/concepts/configuration/secret.md  |  20 +--
 .../containers/container-lifecycle-hooks.md   |   3 +-
 .../api-extension/custom-resources.md         |   2 +-
 .../compute-storage-net/device-plugins.md     |  63 ++++++-
 .../ko/docs/concepts/overview/components.md   |   5 +-
 .../overview/working-with-objects/names.md    |   7 +-
 .../working-with-objects/namespaces.md        |  12 +-
 .../concepts/policy/pod-security-policy.md    |   4 +-
 .../docs/concepts/policy/resource-quotas.md   |  64 ++++++-
 .../scheduling-eviction/assign-pod-node.md    |  33 ++--
 .../scheduling-eviction/kube-scheduler.md     |   1 +
 .../scheduler-perf-tuning.md                  |  13 +-
 .../concepts/security/controlling-access.md   |   2 +-
 .../connect-applications-service.md           |   2 +-
 .../services-networking/dual-stack.md         |  32 ++--
 .../services-networking/endpoint-slices.md    |  63 +++----
 .../concepts/services-networking/ingress.md   |  16 +-
 .../services-networking/network-policies.md   |  60 ++++++-
 .../services-networking/service-topology.md   |  55 +++---
 .../concepts/services-networking/service.md   |  44 ++++-
 .../concepts/storage/persistent-volumes.md    |   2 +-
 content/ko/docs/concepts/storage/volumes.md   |  25 +--
 .../workloads/controllers/cron-jobs.md        |  13 +-
 .../workloads/controllers/deployment.md       |   2 +-
 .../concepts/workloads/controllers/job.md     | 168 ++++++++++++++++--
 .../service/networking/namespaced-params.yaml |  12 ++
 36 files changed, 644 insertions(+), 201 deletions(-)
 create mode 100644 content/ko/examples/service/networking/namespaced-params.yaml

diff --git a/content/ko/docs/concepts/architecture/cloud-controller.md b/content/ko/docs/concepts/architecture/cloud-controller.md
index f7666ef0c3..fe7fda364a 100644
--- a/content/ko/docs/concepts/architecture/cloud-controller.md
+++ b/content/ko/docs/concepts/architecture/cloud-controller.md
@@ -206,6 +206,8 @@ rules:
 [클라우드 컨트롤러 매니저 관리](/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager)에는
 클라우드 컨트롤러 매니저의 실행과 관리에 대한 지침이 있다.
 
+클라우드 컨트롤러 매니저를 사용하기 위해 HA 컨트롤 플레인을 업그레이드하려면, [클라우드 컨트롤러 매니저를 사용하기 위해 복제된 컨트롤 플레인 마이그레이션 하기](/docs/tasks/administer-cluster/controller-manager-leader-migration/)를 참고한다.
+
 자체 클라우드 컨트롤러 매니저를 구현하거나 기존 프로젝트를 확장하는 방법을 알고 싶은가?
 
 클라우드 컨트롤러 매니저는 Go 인터페이스를 사용해서 모든 클라우드 플러그인을 구현할 수 있다. 구체적으로, [kubernetes/cloud-provider](https://github.com/kubernetes/cloud-provider)의 [`cloud.go`](https://github.com/kubernetes/cloud-provider/blob/release-1.17/cloud.go#L42-L62)에 정의된 `CloudProvider` 인터페이스를 사용한다.
diff --git a/content/ko/docs/concepts/architecture/control-plane-node-communication.md b/content/ko/docs/concepts/architecture/control-plane-node-communication.md
index 1831692bdf..52fa728043 100644
--- a/content/ko/docs/concepts/architecture/control-plane-node-communication.md
+++ b/content/ko/docs/concepts/architecture/control-plane-node-communication.md
@@ -8,14 +8,15 @@ aliases:
 
 <!-- overview -->
 
-이 문서는 컨트롤 플레인(실제로는 API 서버)과 쿠버네티스 클러스터 사이에 대한 통신 경로의 목록을 작성한다. 이는 사용자가 신뢰할 수 없는 네트워크(또는 클라우드 공급자의 완전한 퍼블릭 IP)에서 클러스터를 실행할 수 있도록 네트워크 구성을 강화하기 위한 맞춤 설치를 할 수 있도록 한다.
+이 문서는 컨트롤 플레인(API 서버)과 쿠버네티스 클러스터 사이에 대한 통신 경로의 목록을 작성한다. 이는 사용자가 신뢰할 수 없는 네트워크(또는 클라우드 공급자의 완전한 퍼블릭 IP)에서 클러스터를 실행할 수 있도록 네트워크 구성을 강화하기 위한 맞춤 설치를 할 수 있도록 한다.
 
 
 
 <!-- body -->
 
 ## 노드에서 컨트롤 플레인으로의 통신
-쿠버네티스에는 "허브 앤 스포크(hub-and-spoke)" API 패턴을 가지고 있다. 노드(또는 노드에서 실행되는 파드들)의 모든 API 사용은 API 서버에서 종료된다(다른 컨트롤 플레인 컴포넌트 중 어느 것도 원격 서비스를 노출하도록 설계되지 않았다). API 서버는 하나 이상의 클라이언트 [인증](/docs/reference/access-authn-authz/authentication/) 형식이 활성화된 보안 HTTPS 포트(일반적으로 443)에서 원격 연결을 수신하도록 구성된다.
+쿠버네티스에는 "허브 앤 스포크(hub-and-spoke)" API 패턴을 가지고 있다. 노드(또는 노드에서 실행되는 파드들)의 모든 API 사용은 API 서버에서 종료된다. 다른 컨트롤 플레인 컴포넌트 중 어느 것도 원격 서비스를 노출하도록 설계되지 않았다. API 서버는 하나 이상의 클라이언트 [인증](/docs/reference/access-authn-authz/authentication/) 형식이 활성화된 보안 HTTPS 포트(일반적으로 443)에서 원격 연결을 수신하도록 구성된다.
+
 특히 [익명의 요청](/docs/reference/access-authn-authz/authentication/#anonymous-requests) 또는 [서비스 어카운트 토큰](/docs/reference/access-authn-authz/authentication/#service-account-tokens)이 허용되는 경우, 하나 이상의 [권한 부여](/ko/docs/reference/access-authn-authz/authorization/) 형식을 사용해야 한다.
 
 노드는 유효한 클라이언트 자격 증명과 함께 API 서버에 안전하게 연결할 수 있도록 클러스터에 대한 공개 루트 인증서로 프로비전해야 한다. 예를 들어, 기본 GKE 배포에서, kubelet에 제공되는 클라이언트 자격 증명은 클라이언트 인증서 형식이다. kubelet 클라이언트 인증서의 자동 프로비저닝은 [kubelet TLS 부트스트랩](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)을 참고한다.
@@ -50,20 +51,20 @@ API 서버에서 kubelet으로의 연결은 다음의 용도로 사용된다.
 
 ### API 서버에서 노드, 파드 및 서비스로의 통신
 
-API 서버에서 노드, 파드 또는 서비스로의 연결은 기본적으로 일반 HTTP 연결로 연결되므로 인증되거나 암호화되지 않는다. API URL에서 노드, 파드 또는 서비스 이름을 접두어 `https:` 로 사용하여 보안 HTTPS 연결을 통해 실행될 수 있지만, HTTPS 엔드포인트가 제공한 인증서의 유효성을 검증하지 않거나 클라이언트 자격 증명을 제공하지 않으므로 연결이 암호화되는 동안 무결성을 보장하지 않는다. 이러한 연결은 신뢰할 수 없는 네트워크 및/또는 공용 네트워크에서 실행하기에 **현재는 안전하지 않다** .
+API 서버에서 노드, 파드 또는 서비스로의 연결은 기본적으로 일반 HTTP 연결로 연결되므로 인증되거나 암호화되지 않는다. API URL에서 노드, 파드 또는 서비스 이름을 접두어 `https:` 로 사용하여 보안 HTTPS 연결을 통해 실행될 수 있지만, HTTPS 엔드포인트가 제공한 인증서의 유효성을 검증하지 않거나 클라이언트 자격 증명을 제공하지 않는다. 그래서 연결이 암호화되는 동안 무결성을 보장하지 않는다. 이러한 연결은 신뢰할 수 없는 네트워크 및/또는 공용 네트워크에서 실행하기에 **현재는 안전하지 않다** .
 
 ### SSH 터널
 
 쿠버네티스는 SSH 터널을 지원하여 컨트롤 플레인에서 노드로의 통신 경로를 보호한다. 이 구성에서, API 서버는 클러스터의 각 노드에 SSH 터널을 시작하고(포트 22에서 수신 대기하는 ssh 서버에 연결) 터널을 통해 kubelet, 노드, 파드 또는 서비스로 향하는 모든 트래픽을 전달한다.
 이 터널은 트래픽이 노드가 실행 중인 네트워크 외부에 노출되지 않도록 한다.
 
-SSH 터널은 현재 더 이상 사용되지 않으므로 수행 중인 작업이 어떤 것인지 모른다면 사용하면 안된다. Konnectivity 서비스는 이 통신 채널을 대체한다.
+SSH 터널은 현재 더 이상 사용되지 않으므로, 수행 중인 작업이 어떤 것인지 모른다면 사용하면 안된다. Konnectivity 서비스는 이 통신 채널을 대체한다.
 
 ### Konnectivity 서비스
 
 {{< feature-state for_k8s_version="v1.18" state="beta" >}}
 
-SSH 터널을 대체하는 Konnectivity 서비스는 컨트롤 플레인에서 클러스터 통신에 TCP 레벨 프록시를 제공한다. Konnectivity 서비스는 컨트롤 플레인 네트워크와 노드 네트워크에서 각각 실행되는 Konnectivity 서버와 Konnectivity 에이전트의 두 부분으로 구성된다. Konnectivity 에이전트는 Konnectivity 서버에 대한 연결을 시작하고 네트워크 연결을 유지한다.
+SSH 터널을 대체하는 Konnectivity 서비스는 컨트롤 플레인에서 클러스터 통신에 TCP 레벨 프록시를 제공한다. Konnectivity 서비스는 컨트롤 플레인 네트워크의 Konnectivity 서버와 노드 네트워크의 Konnectivity 에이전트, 두 부분으로 구성된다. Konnectivity 에이전트는 Konnectivity 서버에 대한 연결을 시작하고 네트워크 연결을 유지한다.
 Konnectivity 서비스를 활성화한 후, 모든 컨트롤 플레인에서 노드로의 트래픽은 이 연결을 통과한다.
 
 [Konnectivity 서비스 태스크](/docs/tasks/extend-kubernetes/setup-konnectivity/)에 따라 클러스터에서 Konnectivity 서비스를 설정한다.
diff --git a/content/ko/docs/concepts/architecture/nodes.md b/content/ko/docs/concepts/architecture/nodes.md
index cb65b2832a..291b7e82ce 100644
--- a/content/ko/docs/concepts/architecture/nodes.md
+++ b/content/ko/docs/concepts/architecture/nodes.md
@@ -63,6 +63,16 @@ kubelet이 노드의 `metadata.name` 필드와 일치하는 API 서버에 등록
 노드 오브젝트의 이름은 유효한
 [DNS 서브도메인 이름](/ko/docs/concepts/overview/working-with-objects/names/#dns-서브도메인-이름)이어야 한다.
 
+### 노드 이름 고유성
+
+[이름](/ko/docs/concepts/overview/working-with-objects/names#names)은 노드를 식별한다. 두 노드는
+동시에 같은 이름을 가질 수 없다. 쿠버네티스는 또한 같은 이름의 리소스가
+동일한 객체라고 가정한다. 노드의 경우, 동일한 이름을 사용하는 인스턴스가 동일한
+상태(예: 네트워크 설정, 루트 디스크 내용)를 갖는다고 암시적으로 가정한다. 인스턴스가
+이름을 변경하지 않고 수정된 경우 이로 인해 불일치가 발생할 수 있다. 노드를 대폭 교체하거나
+업데이트해야 하는 경우, 기존 노드 오브젝트를 먼저 API 서버에서 제거하고
+업데이트 후 다시 추가해야 한다.
+
 ### 노드에 대한 자체-등록
 
 kubelet 플래그 `--register-node`는 참(기본값)일 경우, kubelet 은 API 서버에
@@ -233,6 +243,7 @@ apiserver로부터 삭제되어 그 이름을 사용할 수 있는 결과를 낳
 - 노드가 계속 접근 불가할 경우 나중에 노드로부터 정상적인 종료를 이용해서 모든 파드를 축출 한다.
   ConditionUnknown을 알리기 시작하는 기본 타임아웃 값은 40초 이고,
   파드를 축출하기 시작하는 값은 5분이다.
+
 노드 컨트롤러는 매 `--node-monitor-period` 초 마다 각 노드의 상태를 체크한다.
 
 #### 하트비트
@@ -273,6 +284,7 @@ ConditionFalse 다.).
 - 클러스터가 작으면 (즉 `--large-cluster-size-threshold`
   노드 이하면 - 기본값 50) 축출은 중지되고, 그렇지 않으면 축출 비율은 초당
   `--secondary-node-eviction-rate`(기본값 0.01)로 감소된다.
+
 이 정책들이 가용성 영역 단위로 실행되어지는 이유는 나머지가 연결되어 있는 동안
 하나의 가용성 영역이 마스터로부터 분할되어 질 수도 있기 때문이다.
 만약 클러스터가 여러 클라우드 제공사업자의 가용성 영역에 걸쳐 있지 않으면,
@@ -329,14 +341,27 @@ ConditionFalse 다.).
 자세한 내용은
 [노드의 컨트롤 토폴로지 관리 정책](/docs/tasks/administer-cluster/topology-manager/)을 본다.
 
-## 그레이스풀(Graceful) 노드 셧다운
+## 그레이스풀(Graceful) 노드 셧다운 {#graceful-node-shutdown}
 
-{{< feature-state state="alpha" for_k8s_version="v1.20" >}}
+{{< feature-state state="beta" for_k8s_version="v1.21" >}}
+
+kubelet은 노드 시스템 셧다운을 감지하고 노드에서 실행 중인 파드를 종료하려고 시도한다.
 
-`GracefulNodeShutdown` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화한 경우 kubelet은 노드 시스템 종료를 감지하고 노드에서 실행 중인 파드를 종료한다.
 Kubelet은 노드가 종료되는 동안 파드가 일반 [파드 종료 프로세스](/ko/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)를 따르도록 한다.
 
-`GracefulNodeShutdown` 기능 게이트가 활성화되면 kubelet은 [systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/)를 사용하여 주어진 기간 동안 노드 종료를 지연시킨다. 종료 중에 kubelet은 두 단계로 파드를 종료시킨다.
+그레이스풀 노드 셧다운 기능은
+[systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/)를
+사용하여 주어진 기간 동안 노드 종료를 지연시키므로 systemd에 의존한다.
+
+그레이스풀 노드 셧다운은 1.21에서 기본적으로 활성화된 `GracefulNodeShutdown`
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)로 제어된다.
+
+기본적으로, 아래 설명된 두 구성 옵션,
+`ShutdownGracePeriod` 및 `ShutdownGracePeriodCriticalPods` 는 모두 0으로 설정되어 있으므로,
+그레이스풀 노드 셧다운 기능이 활성화되지 않는다.
+기능을 활성화하려면, 두 개의 kubelet 구성 설정을 적절하게 구성하고 0이 아닌 값으로 설정해야 한다.
+
+그레이스풀 셧다운 중에 kubelet은 다음의 두 단계로 파드를 종료한다.
 
 1. 노드에서 실행 중인 일반 파드를 종료시킨다.
 2. 노드에서 실행 중인 [중요(critical) 파드](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)를 종료시킨다.
@@ -345,9 +370,13 @@ Kubelet은 노드가 종료되는 동안 파드가 일반 [파드 종료 프로
 * `ShutdownGracePeriod`:
   * 노드가 종료를 지연해야 하는 총 기간을 지정한다. 이것은 모든 일반 및 [중요 파드](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)의 파드 종료에 필요한 총 유예 기간에 해당한다.
 * `ShutdownGracePeriodCriticalPods`:
-  * 노드 종료 중에 [중요 파드](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)를 종료하는 데 사용되는 기간을 지정한다. 이는 `ShutdownGracePeriod`보다 작아야 한다.
+  * 노드 종료 중에 [중요 파드](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)를 종료하는 데 사용되는 기간을 지정한다. 이 값은 `ShutdownGracePeriod` 보다 작아야 한다.
 
-예를 들어 `ShutdownGracePeriod=30s`, `ShutdownGracePeriodCriticalPods=10s` 인 경우 kubelet은 노드 종료를 30 초까지 지연시킨다. 종료하는 동안 처음 20(30-10) 초는 일반 파드의 유예 종료에 할당되고, 마지막 10 초는 [중요 파드](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)의 종료에 할당된다.
+예를 들어, `ShutdownGracePeriod=30s`,
+`ShutdownGracePeriodCriticalPods=10s` 인 경우, kubelet은 노드 종료를 30초까지
+지연시킨다. 종료하는 동안 처음 20(30-10)초는 일반 파드의
+유예 종료에 할당되고, 마지막 10초는
+[중요 파드](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)의 종료에 할당된다.
 
 
 ## {{% heading "whatsnext" %}}
diff --git a/content/ko/docs/concepts/cluster-administration/addons.md b/content/ko/docs/concepts/cluster-administration/addons.md
index 811f773626..7e67dd604f 100644
--- a/content/ko/docs/concepts/cluster-administration/addons.md
+++ b/content/ko/docs/concepts/cluster-administration/addons.md
@@ -16,6 +16,7 @@ content_type: concept
 ## 네트워킹과 네트워크 폴리시
 
 * [ACI](https://www.github.com/noironetworks/aci-containers)는 Cisco ACI로 통합 컨테이너 네트워킹 및 네트워크 보안을 제공한다.
+* [Antrea](https://antrea.io/)는 레이어 3/4에서 작동하여 쿠버네티스를 위한 네트워킹 및 보안 서비스를 제공하며, Open vSwitch를 네트워킹 데이터 플레인으로 활용한다.
 * [Calico](https://docs.projectcalico.org/latest/introduction/)는 네트워킹 및 네트워크 폴리시 제공자이다. Calico는 유연한 네트워킹 옵션을 지원하므로 BGP 유무에 관계없이 비-오버레이 및 오버레이 네트워크를 포함하여 가장 상황에 맞는 옵션을 선택할 수 있다. Calico는 동일한 엔진을 사용하여 서비스 메시 계층(service mesh layer)에서 호스트, 파드 및 (이스티오(istio)와 Envoy를 사용하는 경우) 애플리케이션에 대한 네트워크 폴리시를 적용한다.
 * [Canal](https://github.com/tigera/canal/tree/master/k8s-install)은 Flannel과 Calico를 통합하여 네트워킹 및 네트워크 폴리시를 제공한다.
 * [Cilium](https://github.com/cilium/cilium)은 L3 네트워크 및 네트워크 폴리시 플러그인으로 HTTP/API/L7 폴리시를 투명하게 시행할 수 있다. 라우팅 및 오버레이/캡슐화 모드를 모두 지원하며, 다른 CNI 플러그인 위에서 작동할 수 있다.
diff --git a/content/ko/docs/concepts/cluster-administration/logging.md b/content/ko/docs/concepts/cluster-administration/logging.md
index 695c747a5d..85f3e4efde 100644
--- a/content/ko/docs/concepts/cluster-administration/logging.md
+++ b/content/ko/docs/concepts/cluster-administration/logging.md
@@ -83,12 +83,15 @@ kubectl logs counter
 [`configure-helper` 스크립트](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh)를 통해
 자세히 알 수 있다.
 
+**CRI 컨테이너 런타임** 을 사용할 때, kubelet은 로그를 로테이션하고 로깅 디렉터리 구조를 관리한다. kubelet은
+이 정보를 CRI 컨테이너 런타임에 전송하고 런타임은 컨테이너 로그를 지정된 위치에 기록한다. 두 개의 kubelet 플래그 `container-log-max-size` 및 `container-log-max-files` 를 사용하여 각 로그 파일의 최대 크기와 각 컨테이너에 허용되는 최대 파일 수를 각각 구성할 수 있다.
+
 기본 로깅 예제에서와 같이 [`kubectl logs`](/docs/reference/generated/kubectl/kubectl-commands#logs)를
 실행하면, 노드의 kubelet이 요청을 처리하고
 로그 파일에서 직접 읽는다. kubelet은 로그 파일의 내용을 반환한다.
 
 {{< note >}}
-만약, 일부 외부 시스템이 로테이션을 수행한 경우,
+만약, 일부 외부 시스템이 로테이션을 수행했거나 CRI 컨테이너 런타임이 사용된 경우,
 `kubectl logs` 를 통해 최신 로그 파일의 내용만
 사용할 수 있다. 예를 들어, 10MB 파일이 있으면, `logrotate` 가
 로테이션을 수행하고 두 개의 파일이 생긴다. (크기가 10MB인 파일 하나와 비어있는 파일)
diff --git a/content/ko/docs/concepts/cluster-administration/manage-deployment.md b/content/ko/docs/concepts/cluster-administration/manage-deployment.md
index d61d111274..abcc4c2cd5 100644
--- a/content/ko/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/ko/docs/concepts/cluster-administration/manage-deployment.md
@@ -278,7 +278,7 @@ pod/my-nginx-2035384211-u3t6x labeled
 ```
 
 먼저 "app=nginx" 레이블이 있는 모든 파드를 필터링한 다음, "tier=fe" 레이블을 지정한다.
-방금 레이블을 지정한 파드를 보려면, 다음을 실행한다.
+레이블을 지정한 파드를 보려면, 다음을 실행한다.
 
 ```shell
 kubectl get pods -l app=nginx -L tier
diff --git a/content/ko/docs/concepts/cluster-administration/proxies.md b/content/ko/docs/concepts/cluster-administration/proxies.md
index df43157578..ab1f6611fd 100644
--- a/content/ko/docs/concepts/cluster-administration/proxies.md
+++ b/content/ko/docs/concepts/cluster-administration/proxies.md
@@ -39,7 +39,7 @@ weight: 90
     - UDP, TCP, SCTP를 이용하여 프락시 한다.
     - HTTP는 이해하지 못한다.
     - 로드 밸런싱을 제공한다.
-    - 단지 서비스에 도달하는데 사용한다.
+    - 서비스에 도달하는데만 사용한다.
 
 1.  API 서버 앞단의 프락시/로드밸런서
 
@@ -61,7 +61,3 @@ weight: 90
 ## 요청을 리다이렉트하기
 
 프락시는 리다이렉트 기능을 대체했다. 리다이렉트는 더 이상 사용하지 않는다.
-
-
-
-
diff --git a/content/ko/docs/concepts/cluster-administration/system-metrics.md b/content/ko/docs/concepts/cluster-administration/system-metrics.md
index 08b7b79d0d..737c1ded25 100644
--- a/content/ko/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/ko/docs/concepts/cluster-administration/system-metrics.md
@@ -130,7 +130,7 @@ cloudprovider_gce_api_request_duration_seconds { request = "list_disk"}
 
 ### kube-scheduler 메트릭
 
-{{< feature-state for_k8s_version="v1.20" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 스케줄러는 실행 중인 모든 파드의 요청(request)된 리소스와 요구되는 제한(limit)을 보고하는 선택적 메트릭을 노출한다. 이러한 메트릭은 용량 계획(capacity planning) 대시보드를 구축하고, 현재 또는 과거 스케줄링 제한을 평가하고, 리소스 부족으로 스케줄할 수 없는 워크로드를 빠르게 식별하고, 실제 사용량을 파드의 요청과 비교하는 데 사용할 수 있다.
 
@@ -148,6 +148,24 @@ kube-scheduler는 각 파드에 대해 구성된 리소스 [요청과 제한](/k
 메트릭은 HTTP 엔드포인트 `/metrics/resources`에 노출되며 스케줄러의 `/metrics` 엔드포인트
 와 동일한 인증이 필요하다. 이러한 알파 수준의 메트릭을 노출시키려면 `--show-hidden-metrics-for-version=1.20` 플래그를 사용해야 한다.
 
+## 메트릭 비활성화
+
+커맨드 라인 플래그 `--disabled-metrics` 를 통해 메트릭을 명시적으로 끌 수 있다. 이 방법이 필요한 이유는 메트릭이 성능 문제를 일으키는 경우을 예로 들 수 있다. 입력값은 비활성화되는 메트릭 목록이다(예: `--disabled-metrics=metric1,metric2`).
+
+## 메트릭 카디널리티(cardinality) 적용
+
+제한되지 않은 차원의 메트릭은 계측하는 컴포넌트에서 메모리 문제를 일으킬 수 있다. 리소스 사용을 제한하려면, `--allow-label-value` 커맨드 라인 옵션을 사용하여 메트릭 항목에 대한 레이블 값의 허용 목록(allow-list)을 동적으로 구성한다.
+
+알파 단계에서, 플래그는 메트릭 레이블 허용 목록으로 일련의 매핑만 가져올 수 있다.
+각 매핑은 `<metric_name>,<label_name>=<allowed_labels>` 형식이다. 여기서
+`<allowed_labels>` 는 허용되는 레이블 이름의 쉼표로 구분된 목록이다.
+
+전체 형식은 다음과 같다.
+`--allow-label-value <metric_name>,<label_name>='<allow_value1>, <allow_value2>...', <metric_name2>,<label_name>='<allow_value1>, <allow_value2>...', ...`.
+
+예시는 다음과 같다.
+`--allow-label-value number_count_metric,odd_number='1,3,5', number_count_metric,even_number='2,4,6', date_gauge_metric,weekend='Saturday,Sunday'`
+
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/ko/docs/concepts/configuration/configmap.md b/content/ko/docs/concepts/configuration/configmap.md
index 50ef8b3632..841feb8fb3 100644
--- a/content/ko/docs/concepts/configuration/configmap.md
+++ b/content/ko/docs/concepts/configuration/configmap.md
@@ -223,7 +223,7 @@ spec:
 현재 볼륨에서 사용된 컨피그맵이 업데이트되면, 프로젝션된 키도 마찬가지로 업데이트된다.
 kubelet은 모든 주기적인 동기화에서 마운트된 컨피그맵이 최신 상태인지 확인한다.
 그러나, kubelet은 로컬 캐시를 사용해서 컨피그맵의 현재 값을 가져온다.
-캐시 유형은 [KubeletConfiguration 구조체](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go)의
+캐시 유형은 [KubeletConfiguration 구조체](/docs/reference/config-api/kubelet-config.v1beta1/)의
 `ConfigMapAndSecretChangeDetectionStrategy` 필드를 사용해서 구성할 수 있다.
 컨피그맵은 watch(기본값), ttl 기반 또는 API 서버로 직접
 모든 요청을 리디렉션할 수 있다.
@@ -233,11 +233,12 @@ kubelet은 모든 주기적인 동기화에서 마운트된 컨피그맵이 최
 지연을 지켜보거나, 캐시의 ttl 또는 0에 상응함).
 
 환경 변수로 사용되는 컨피그맵은 자동으로 업데이트되지 않으며 파드를 다시 시작해야 한다.
+
 ## 변경할 수 없는(immutable) 컨피그맵 {#configmap-immutable}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
-쿠버네티스 베타 기능인 _변경할 수 없는 시크릿과 컨피그맵_ 은 개별 시크릿과
+쿠버네티스 기능인 _변경할 수 없는 시크릿과 컨피그맵_ 은 개별 시크릿과
 컨피그맵을 변경할 수 없는 것으로 설정하는 옵션을 제공한다. 컨피그맵을 광범위하게
 사용하는 클러스터(최소 수만 개의 고유한 컨피그맵이 파드에 마운트)의 경우
 데이터 변경을 방지하면 다음과 같은 이점이 있다.
diff --git a/content/ko/docs/concepts/configuration/manage-resources-containers.md b/content/ko/docs/concepts/configuration/manage-resources-containers.md
index 8f499fbc6a..ccd3ee9290 100644
--- a/content/ko/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/ko/docs/concepts/configuration/manage-resources-containers.md
@@ -21,9 +21,6 @@ feature:
 컨테이너가 사용할 수 있도록 해당 시스템 리소스의 최소 _요청_ 량을
 예약한다.
 
-
-
-
 <!-- body -->
 
 ## 요청 및 제한
@@ -72,7 +69,7 @@ Huge page는 노드 커널이 기본 페이지 크기보다 훨씬 큰 메모리
 이것은 `memory` 및 `cpu` 리소스와는 다르다.
 {{< /note >}}
 
-CPU와 메모리를 통칭하여 *컴퓨트 리소스* 또는 그냥 *리소스* 라고 한다. 컴퓨트
+CPU와 메모리를 통칭하여 *컴퓨트 리소스* 또는 *리소스* 라고 한다. 컴퓨트
 리소스는 요청, 할당 및 소비될 수 있는 측정 가능한
 수량이다. 이것은
 [API 리소스](/ko/docs/concepts/overview/kubernetes-api/)와는 다르다. 파드 및
@@ -441,7 +438,9 @@ kubelet은 각 `emptyDir` 볼륨, 컨테이너 로그 디렉터리 및 쓰기 
 
 프로젝트 쿼터를 사용하려면, 다음을 수행해야 한다.
 
-* kubelet 구성에서 `LocalStorageCapacityIsolationFSQuotaMonitoring=true`
+* [kubelet 구성](/docs/reference/config-api/kubelet-config.v1beta1/)의
+  `featureGates` 필드 또는 `--feature-gates` 커맨드 라인 플래그를 사용하여
+  `LocalStorageCapacityIsolationFSQuotaMonitoring=true`
   [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를
   활성화한다.
 
@@ -449,6 +448,7 @@ kubelet은 각 `emptyDir` 볼륨, 컨테이너 로그 디렉터리 및 쓰기 
   프로젝트 쿼터가 활성화되어 있는지 확인한다. 모든 XFS 파일시스템은 프로젝트 쿼터를 지원한다.
   ext4 파일시스템의 경우, 파일시스템이 마운트되지 않은 상태에서 프로젝트 쿼터
   추적 기능을 활성화해야 한다.
+
   ```bash
   # ext4인 /dev/block-device가 마운트되지 않은 경우
   sudo tune2fs -O project -Q prjquota /dev/block-device
@@ -518,9 +518,8 @@ JSON-Pointer로 해석된다. 더 자세한 내용은,
 클러스터-레벨의 확장된 리소스는 노드에 연결되지 않는다. 이들은 일반적으로
 리소스 소비와 리소스 쿼터를 처리하는 스케줄러 익스텐더(extender)에 의해 관리된다.
 
-[스케줄러 정책 구성](https://github.com/kubernetes/kubernetes/blob/release-1.10/pkg/scheduler/api/v1/types.go#L31)에서
-스케줄러 익스텐더가
-처리하는 확장된 리소스를 지정할 수 있다.
+[스케줄러 정책 구성](/docs/reference/config-api/kube-scheduler-policy-config.v1/)에서
+스케줄러 익스텐더가 처리하는 확장된 리소스를 지정할 수 있다.
 
 **예제:**
 
@@ -743,23 +742,13 @@ LastState: map[terminated:map[exitCode:137 reason:OOM Killed startedAt:2015-07-0
 
 컨테이너가 `reason:OOM Killed`(`OOM` 은 메모리 부족(Out Of Memory)의 약자) 때문에 종료된 것을 알 수 있다.
 
-
-
-
-
-
 ## {{% heading "whatsnext" %}}
 
-
 * [컨테이너와 파드에 메모리 리소스를 할당](/ko/docs/tasks/configure-pod-container/assign-memory-resource/)하는 핸즈온 경험을 해보자.
-
 * [컨테이너와 파드에 CPU 리소스를 할당](/docs/tasks/configure-pod-container/assign-cpu-resource/)하는 핸즈온 경험을 해보자.
-
 * 요청과 제한의 차이점에 대한 자세한 내용은,
   [리소스 QoS](https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md)를 참조한다.
-
 * [컨테이너](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core) API 레퍼런스 읽어보기
-
 * [ResourceRequirements](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#resourcerequirements-v1-core) API 레퍼런스 읽어보기
-
 * XFS의 [프로젝트 쿼터](https://xfs.org/docs/xfsdocs-xml-dev/XFS_User_Guide/tmp/en-US/html/xfs-quotas.html)에 대해 읽어보기
+* [kube-scheduler 정책 레퍼런스 (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)에 대해 더 읽어보기
diff --git a/content/ko/docs/concepts/configuration/secret.md b/content/ko/docs/concepts/configuration/secret.md
index 4637c1a63d..a4544397d7 100644
--- a/content/ko/docs/concepts/configuration/secret.md
+++ b/content/ko/docs/concepts/configuration/secret.md
@@ -109,7 +109,7 @@ empty-secret   Opaque   0      2m6s
 ```
 
 해당 `DATA` 열은 시크릿에 저장된 데이터 아이템의 수를 보여준다.
-이 경우, `0` 은 비어 있는 시크릿을 방금 하나 생성하였다는 것을 의미한다.
+이 경우, `0` 은 비어 있는 시크릿을 하나 생성하였다는 것을 의미한다.
 
 ###  서비스 어카운트 토큰 시크릿
 
@@ -667,7 +667,7 @@ cat /etc/foo/password
 볼륨에서 현재 사용되는 시크릿이 업데이트되면, 투영된 키도 결국 업데이트된다.
 kubelet은 마운트된 시크릿이 모든 주기적인 동기화에서 최신 상태인지 여부를 확인한다.
 그러나, kubelet은 시크릿의 현재 값을 가져 오기 위해 로컬 캐시를 사용한다.
-캐시의 유형은 [KubeletConfiguration 구조체](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go)의
+캐시의 유형은 [KubeletConfiguration 구조체](/docs/reference/config-api/kubelet-config.v1beta1/)의
 `ConfigMapAndSecretChangeDetectionStrategy` 필드를 사용하여 구성할 수 있다.
 시크릿은 watch(기본값), ttl 기반 또는 API 서버로 모든 요청을 직접
 리디렉션하여 전파할 수 있다.
@@ -749,9 +749,9 @@ echo $SECRET_PASSWORD
 
 ## 변경할 수 없는(immutable) 시크릿 {#secret-immutable}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
-쿠버네티스 베타 기능인 _변경할 수 없는 시크릿과 컨피그맵_ 은
+쿠버네티스 기능인 _변경할 수 없는 시크릿과 컨피그맵_ 은
 개별 시크릿과 컨피그맵을 변경할 수 없는 것으로 설정하는 옵션을 제공한다. 시크릿을 광범위하게 사용하는
 클러스터(최소 수만 개의 고유한 시크릿이 파드에 마운트)의 경우, 데이터 변경을 방지하면
 다음과 같은 이점이 있다.
@@ -760,8 +760,8 @@ echo $SECRET_PASSWORD
 - immutable로 표시된 시크릿에 대한 감시를 중단하여, kube-apiserver의 부하를
 크게 줄임으로써 클러스터의 성능을 향상시킴
 
-이 기능은 v1.19부터 기본적으로 활성화된 `ImmutableEphemeralVolumes` [기능
-게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)에
+이 기능은 v1.19부터 기본적으로 활성화된 `ImmutableEphemeralVolumes`
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)에
 의해 제어된다. `immutable` 필드를 `true` 로 설정하여
 변경할 수 없는 시크릿을 생성할 수 있다. 다음은 예시이다.
 ```yaml
@@ -865,6 +865,7 @@ LASTSEEN   FIRSTSEEN   COUNT     NAME            KIND      SUBOBJECT
 ### 사용 사례: 컨테이너 환경 변수로 사용하기
 
 시크릿 정의를 작성한다.
+
 ```yaml
 apiVersion: v1
 kind: Secret
@@ -877,6 +878,7 @@ data:
 ```
 
 시크릿을 생성한다.
+
 ```shell
 kubectl apply -f mysecret.yaml
 ```
@@ -1173,14 +1175,12 @@ HTTP 요청을 처리하고, 복잡한 비즈니스 로직을 수행한 다음,
 
 시크릿 API에 접근해야 하는 애플리케이션은 필요한 시크릿에 대한 `get` 요청을
 수행해야 한다. 이를 통해 관리자는 앱에 필요한
-[개별 인스턴스에 대한 접근을 허용 목록에 추가](
-/docs/reference/access-authn-authz/rbac/#referring-to-resources)하면서 모든 시크릿에 대한 접근을
+[개별 인스턴스에 대한 접근을 허용 목록에 추가](/docs/reference/access-authn-authz/rbac/#referring-to-resources)하면서 모든 시크릿에 대한 접근을
 제한할 수 있다.
 
 `get` 반복을 통한 성능 향상을 위해, 클라이언트는 시크릿을
 참조한 다음 리소스를 감시(`watch`)하고, 참조가 변경되면 시크릿을 다시 요청하는 리소스를
-설계할 수 있다. 덧붙여, 클라이언트에게 개별 리소스를 감시(`watch`)하도록 하는 ["대량 감시" API](
-https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/bulk_watch.md)도
+설계할 수 있다. 덧붙여, 클라이언트에게 개별 리소스를 감시(`watch`)하도록 하는 ["대량 감시" API](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/bulk_watch.md)도
 제안되었으며, 쿠버네티스의 후속 릴리스에서 사용할 수
 있을 것이다.
 
diff --git a/content/ko/docs/concepts/containers/container-lifecycle-hooks.md b/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
index d9a1137024..f2ef1f10a9 100644
--- a/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
@@ -50,10 +50,11 @@ terminated 또는 completed 상태인 경우에는 `PreStop` 훅 요청이 실
 ### 훅 핸들러 구현
 
 컨테이너는 훅의 핸들러를 구현하고 등록함으로써 해당 훅에 접근할 수 있다.
-구현될 수 있는 컨테이너의 훅 핸들러에는 두 가지 유형이 있다.
+구현될 수 있는 컨테이너의 훅 핸들러에는 세 가지 유형이 있다.
 
 * Exec - 컨테이너의 cgroups와 네임스페이스 안에서, `pre-stop.sh`와 같은, 특정 커맨드를 실행.
 커맨드에 의해 소비된 리소스는 해당 컨테이너에 대해 계산된다.
+* TCP - 컨테이너의 특정 포트에 대한 TCP 연결을 연다.
 * HTTP - 컨테이너의 특정 엔드포인트에 대해서 HTTP 요청을 실행.
 
 ### 훅 핸들러 실행
diff --git a/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md b/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
index d549060108..b543addee6 100644
--- a/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
+++ b/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
@@ -44,7 +44,7 @@ _선언_ 하거나 지정할 수 있게 해주며 쿠버네티스 오브젝트
 클러스터 라이프사이클과 관계없이 실행 중인 클러스터에 커스텀 컨트롤러를 배포하고
 업데이트할 수 있다. 커스텀 컨트롤러는 모든 종류의 리소스와 함께 작동할 수 있지만
 커스텀 리소스와 결합할 때 특히 효과적이다.
-[오퍼레이터 패턴](https://coreos.com/blog/introducing-operators.html)은 사용자 정의
+[오퍼레이터 패턴](/ko/docs/concepts/extend-kubernetes/operator/)은 사용자 정의
 리소스와 커스텀 컨트롤러를 결합한다. 커스텀 컨트롤러를 사용하여 특정 애플리케이션에 대한 도메인 지식을
 쿠버네티스 API의 익스텐션으로 인코딩할 수 있다.
 
diff --git a/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md b/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
index 5f58604cd7..3596c9f72e 100644
--- a/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
+++ b/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
@@ -192,10 +192,69 @@ kubelet은 gRPC 서비스를 제공하여 사용 중인 장치를 검색하고,
 // PodResourcesLister는 kubelet에서 제공하는 서비스로, 노드의 포드 및 컨테이너가
 // 사용한 노드 리소스에 대한 정보를 제공한다.
 service PodResourcesLister {
-    rpc List(ListPodResourcesRequest) returns (ListPodResourcesResponse) {}
+    rpc GetAllocatableResources(AllocatableResourcesRequest) returns (AllocatableResourcesResponse) {}
 }
 ```
 
+`List` 엔드포인트는 독점적으로 할당된 CPU의 ID, 장치 플러그인에 의해 보고된 장치 ID,
+이러한 장치가 할당된 NUMA 노드의 ID와 같은 세부 정보와 함께
+실행 중인 파드의 리소스에 대한 정보를 제공한다.
+
+```gRPC
+// ListPodResourcesResponse는 List 함수가 반환하는 응답이다
+message ListPodResourcesResponse {
+    repeated PodResources pod_resources = 1;
+}
+
+// PodResources에는 파드에 할당된 노드 리소스에 대한 정보가 포함된다
+message PodResources {
+    string name = 1;
+    string namespace = 2;
+    repeated ContainerResources containers = 3;
+}
+
+// ContainerResources는 컨테이너에 할당된 리소스에 대한 정보를 포함한다
+message ContainerResources {
+    string name = 1;
+    repeated ContainerDevices devices = 2;
+    repeated int64 cpu_ids = 3;
+}
+
+// 토폴로지는 리소스의 하드웨어 토폴로지를 설명한다
+message TopologyInfo {
+        repeated NUMANode nodes = 1;
+}
+
+// NUMA 노드의 NUMA 표현
+message NUMANode {
+        int64 ID = 1;
+}
+
+// ContainerDevices는 컨테이너에 할당된 장치에 대한 정보를 포함한다
+message ContainerDevices {
+    string resource_name = 1;
+    repeated string device_ids = 2;
+    TopologyInfo topology = 3;
+}
+```
+
+GetAllocatableResources는 워커 노드에서 처음 사용할 수 있는 리소스에 대한 정보를 제공한다.
+kubelet이 APIServer로 내보내는 것보다 더 많은 정보를 제공한다.
+
+```gRPC
+// AllocatableResourcesResponses에는 kubelet이 알고 있는 모든 장치에 대한 정보가 포함된다.
+message AllocatableResourcesResponse {
+    repeated ContainerDevices devices = 1;
+    repeated int64 cpu_ids = 2;
+}
+
+```
+
+`ContainerDevices` 는 장치가 어떤 NUMA 셀과 연관되는지를 선언하는 토폴로지 정보를 노출한다.
+NUMA 셀은 불분명한(opaque) 정수 ID를 사용하여 식별되며, 이 값은
+[kubelet에 등록할 때](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#device-plugin-integration-with-the-topology-manager) 장치 플러그인이 보고하는 것과 일치한다.
+
+
 gRPC 서비스는 `/var/lib/kubelet/pod-resources/kubelet.sock` 의 유닉스 소켓을 통해 제공된다.
 장치 플러그인 리소스에 대한 모니터링 에이전트는 데몬 또는 데몬셋으로 배포할 수 있다.
 표준 디렉터리 `/var/lib/kubelet/pod-resources` 에는 특권을 가진 접근이 필요하므로, 모니터링
@@ -204,7 +263,7 @@ gRPC 서비스는 `/var/lib/kubelet/pod-resources/kubelet.sock` 의 유닉스 
 `/var/lib/kubelet/pod-resources` 를
 {{< glossary_tooltip text="볼륨" term_id="volume" >}}으로 마운트해야 한다.
 
-"PodResources 서비스"를 지원하려면 `KubeletPodResources` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화해야 한다.
+`PodResourcesLister service` 를 지원하려면 `KubeletPodResources` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화해야 한다.
 
 ## 토폴로지 관리자와 장치 플러그인 통합
 
diff --git a/content/ko/docs/concepts/overview/components.md b/content/ko/docs/concepts/overview/components.md
index d4b77e9319..b4c6079213 100644
--- a/content/ko/docs/concepts/overview/components.md
+++ b/content/ko/docs/concepts/overview/components.md
@@ -30,8 +30,9 @@ card:
 
 컨트롤 플레인 컴포넌트는 클러스터 내 어떠한 머신에서든지 동작할 수 있다. 그러나
 간결성을 위하여, 구성 스크립트는 보통 동일 머신 상에 모든 컨트롤 플레인 컴포넌트를 구동시키고,
-사용자 컨테이너는 해당 머신 상에 동작시키지 않는다. 다중-마스터-VM 설치 예제를 보려면
-[고가용성 클러스터 구성하기](/docs/admin/high-availability/)를 확인해본다.
+사용자 컨테이너는 해당 머신 상에 동작시키지 않는다. 여러 VM에서
+실행되는 컨트롤 플레인 설정의 예제를 보려면
+[kubeadm을 사용하여 고가용성 클러스터 만들기](/docs/setup/production-environment/tools/kubeadm/high-availability/)를 확인해본다.
 
 ### kube-apiserver
 
diff --git a/content/ko/docs/concepts/overview/working-with-objects/names.md b/content/ko/docs/concepts/overview/working-with-objects/names.md
index 891ad4d07a..78b7addd43 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/names.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/names.md
@@ -21,11 +21,15 @@ weight: 20
 
 {{< glossary_definition term_id="name" length="all" >}}
 
+{{< note >}}
+물리적 호스트를 나타내는 노드와 같이 오브젝트가 물리적 엔티티를 나타내는 경우, 노드를 삭제한 후 다시 생성하지 않은 채 동일한 이름으로 호스트를 다시 생성하면, 쿠버네티스는 새 호스트를 불일치로 이어질 수 있는 이전 호스트로 취급한다.
+{{< /note >}}
+
 다음은 리소스에 일반적으로 사용되는 세 가지 유형의 이름 제한 조건이다.
 
 ### DNS 서브도메인 이름
 
-대부분의 리소스 유형에는 [RFC 1123](https://tools.ietf.org/html/rfc1123)에 정의된 대로 
+대부분의 리소스 유형에는 [RFC 1123](https://tools.ietf.org/html/rfc1123)에 정의된 대로
 DNS 서브도메인 이름으로 사용할 수 있는 이름이 필요하다.
 이것은 이름이 다음을 충족해야 한다는 것을 의미한다.
 
@@ -83,4 +87,3 @@ UUID는 ISO/IEC 9834-8 과 ITU-T X.667 로 표준화 되어 있다.
 
 * 쿠버네티스의 [레이블](/ko/docs/concepts/overview/working-with-objects/labels/)에 대해 읽기.
 * [쿠버네티스의 식별자와 이름](https://git.k8s.io/community/contributors/design-proposals/architecture/identifiers.md) 디자인 문서 읽기.
-
diff --git a/content/ko/docs/concepts/overview/working-with-objects/namespaces.md b/content/ko/docs/concepts/overview/working-with-objects/namespaces.md
index 905375bdc5..ef75f4f081 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/namespaces.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/namespaces.md
@@ -26,7 +26,7 @@ weight: 30
 
 동일한 소프트웨어의 다른 버전과 같이 약간 다른 리소스를 분리하기 위해
 여러 네임스페이스를 사용할 필요는 없다. 동일한 네임스페이스 내에서 리소스를
-구별하기 위해 [레이블](/ko/docs/concepts/overview/working-with-objects/labels/)을
+구별하기 위해 {{< glossary_tooltip text="레이블" term_id="label" >}}을
 사용한다.
 
 ## 네임스페이스 다루기
@@ -109,6 +109,16 @@ kubectl api-resources --namespaced=true
 kubectl api-resources --namespaced=false
 ```
 
+## 자동 레이블링
+
+{{< feature-state state="beta" for_k8s_version="1.21" >}}
+
+쿠버네티스 컨트롤 플레인은 `NamespaceDefaultLabelName` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가
+활성화된 경우 모든 네임스페이스에 변경할 수 없는(immutable) {{< glossary_tooltip text="레이블" term_id="label" >}}
+`kubernetes.io / metadata.name` 을 설정한다.
+레이블 값은 네임스페이스 이름이다.
+
+
 ## {{% heading "whatsnext" %}}
 
 * [신규 네임스페이스 생성](/docs/tasks/administer-cluster/namespaces/#creating-a-new-namespace)에 대해 더 배우기.
diff --git a/content/ko/docs/concepts/policy/pod-security-policy.md b/content/ko/docs/concepts/policy/pod-security-policy.md
index e3c67a4ff9..8afee5760b 100644
--- a/content/ko/docs/concepts/policy/pod-security-policy.md
+++ b/content/ko/docs/concepts/policy/pod-security-policy.md
@@ -9,7 +9,9 @@ weight: 30
 
 <!-- overview -->
 
-{{< feature-state state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
+
+파드시큐리티폴리시(PodSecurityPolicy)는 쿠버네티스 v1.21부터 더이상 사용되지 않으며, v1.25에서 제거된다.
 
 파드 시큐리티 폴리시를 사용하면 파드 생성 및 업데이트에 대한 세분화된 권한을
 부여할 수 있다.
diff --git a/content/ko/docs/concepts/policy/resource-quotas.md b/content/ko/docs/concepts/policy/resource-quotas.md
index df23da5d57..8e1d918ef4 100644
--- a/content/ko/docs/concepts/policy/resource-quotas.md
+++ b/content/ko/docs/concepts/policy/resource-quotas.md
@@ -124,6 +124,10 @@ GPU 리소스를 다음과 같이 쿼터를 정의할 수 있다.
 | `limits.ephemeral-storage` | 네임스페이스의 모든 파드에서 로컬 임시 스토리지 제한의 합은 이 값을 초과할 수 없음. |
 | `ephemeral-storage` | `requests.ephemeral-storage` 와 같음. |
 
+{{< note >}}
+CRI 컨테이너 런타임을 사용할 때, 컨테이너 로그는 임시 스토리지 쿼터에 포함된다. 이로 인해 스토리지 쿼터를 소진한 파드가 예기치 않게 축출될 수 있다. 자세한 내용은 [로깅 아키텍처](/ko/docs/concepts/cluster-administration/logging/)를 참조한다.
+{{< /note >}}
+
 ## 오브젝트 수 쿼터
 
 다음 구문을 사용하여 모든 표준 네임스페이스 처리된(namespaced) 리소스 유형에 대한
@@ -188,7 +192,8 @@ GPU 리소스를 다음과 같이 쿼터를 정의할 수 있다.
 | `NotTerminating` | `.spec.activeDeadlineSeconds is nil`에 일치하는 파드 |
 | `BestEffort` | 최상의 서비스 품질을 제공하는 파드 |
 | `NotBestEffort` | 서비스 품질이 나쁜 파드 |
-| `PriorityClass` | 지정된 [프라이올리티 클래스](/ko/docs/concepts/configuration/pod-priority-preemption)를 참조하여 일치하는 파드. |
+| `PriorityClass` | 지정된 [프라이어리티 클래스](/ko/docs/concepts/configuration/pod-priority-preemption)를 참조하여 일치하는 파드. |
+| `CrossNamespacePodAffinity` | 크로스-네임스페이스 파드 [(안티)어피니티 용어]가 있는 파드 |
 
 `BestEffort` 범위는 다음의 리소스를 추적하도록 쿼터를 제한한다.
 
@@ -429,6 +434,63 @@ memory      0     20Gi
 pods        0     10
 ```
 
+### 네임스페이스 간 파드 어피니티 쿼터
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+오퍼레이터는 네임스페이스를 교차하는 어피니티가 있는 파드를 가질 수 있는 네임스페이스를
+제한하기 위해 `CrossNamespacePodAffinity` 쿼터 범위를 사용할 수 있다. 특히, 파드 어피니티 용어의
+`namespaces` 또는 `namespaceSelector` 필드를 설정할 수 있는 파드를 제어한다.
+
+안티-어피니티 제약 조건이 있는 파드는 장애 도메인에서 다른 모든 네임스페이스의 파드가 예약되지 않도록
+차단할 수 있으므로 사용자가 네임스페이스 간 어피니티 용어를
+사용하지 못하도록 하는 것이 바람직할 수 있다.
+
+이 범위 오퍼레이터를 사용하면 `CrossNamespaceAffinity` 범위와 하드(hard) 제한이 0인
+네임스페이스에 리소스 쿼터 오브젝트를 생성하여 특정 네임스페이스(아래 예에서 `foo-ns`)가 네임스페이스 간 파드 어피니티를
+사용하는 파드를 사용하지 못하도록 방지할 수 있다.
+
+```yaml
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: disable-cross-namespace-affinity
+  namespace: foo-ns
+spec:
+  hard:
+    pods: "0"
+  scopeSelector:
+    matchExpressions:
+    - scopeName: CrossNamespaceAffinity
+```
+
+오퍼레이터가 기본적으로 `namespaces` 및 `namespaceSelector` 사용을 허용하지 않고,
+특정 네임스페이스에만 허용하려는 경우, kube-apiserver 플래그 --admission-control-config-file를
+다음의 구성 파일의 경로로 설정하여 `CrossNamespaceAffinity` 를
+제한된 리소스로 구성할 수 있다.
+
+```yaml
+apiVersion: apiserver.config.k8s.io/v1
+kind: AdmissionConfiguration
+plugins:
+- name: "ResourceQuota"
+  configuration:
+    apiVersion: apiserver.config.k8s.io/v1
+    kind: ResourceQuotaConfiguration
+    limitedResources:
+    - resource: pods
+      matchScopes:
+      - scopeName: CrossNamespaceAffinity
+```
+
+위의 구성을 사용하면, 파드는 생성된 네임스페이스에 `CrossNamespaceAffinity` 범위가 있는 리소스 쿼터 오브젝트가 있고,
+해당 필드를 사용하는 파드 수보다 크거나 같은 하드 제한이 있는 경우에만
+파드 어피니티에서 `namespaces` 및 `namespaceSelector` 를 사용할 수 있다.
+
+이 기능은 알파이며 기본적으로 비활성화되어 있다. kube-apiserver 및 kube-scheduler 모두에서
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)
+`PodAffinityNamespaceSelector` 를 설정하여 활성화할 수 있다.
+
 ## 요청과 제한의 비교 {#requests-vs-limits}
 
 컴퓨트 리소스를 할당할 때 각 컨테이너는 CPU 또는 메모리에 대한 요청과 제한값을 지정할 수 있다.
diff --git a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
index dba31a6c7f..8c095e4a27 100644
--- a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -11,18 +11,17 @@ weight: 20
 
 <!-- overview -->
 
-{{< glossary_tooltip text="파드" term_id="pod" >}}를 특정한 {{< glossary_tooltip text="노드(들)" term_id="node" >}}에서만 동작하도록 하거나,
-특정 노드들을 선호하도록 제한할 수 있다.
-이를 수행하는 방법에는 여러 가지가 있으며, 권장되는 접근 방식은 모두
-[레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/)를 사용하여 선택한다.
-보통 스케줄러가 자동으로 합리적인 배치(예: 노드들에 걸쳐 파드를 분배하거나,
-자원이 부족한 노드에 파드를 배치하지 않는 등)를 수행하기에 이런 제약 조건은 필요하지 않지만
-간혹 파드가 배치되는 노드에 대해 더 많은 제어를 원할 수 있는 상황이 있다.
+특정한 {{< glossary_tooltip text="노드(들)" term_id="node" >}} 집합에서만 동작하도록
+{{< glossary_tooltip text="파드" term_id="pod" >}}를 제한할 수 있다.
+이를 수행하는 방법에는 여러 가지가 있으며 권장되는 접근 방식은 모두
+[레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/)를 사용하여 선택을 용이하게 한다.
+보통 스케줄러가 자동으로 합리적인 배치(예: 자원이 부족한 노드에 파드를 배치하지 않도록
+노드 간에 파드를 분배하는 등)를 수행하기에 이러한 제약 조건은 필요하지 않지만
+간혹 파드가 배포할 노드를 제어해야 하는 경우가 있다.
 예를 들어 SSD가 장착된 머신에 파드가 연결되도록 하거나 또는 동일한 가용성 영역(availability zone)에서
 많은 것을 통신하는 두 개의 서로 다른 서비스의 파드를 같이 배치할 수 있다.
 
 
-
 <!-- body -->
 
 ## 노드 셀렉터(nodeSelector)
@@ -120,13 +119,13 @@ spec:
 
 여기에 현재 `requiredDuringSchedulingIgnoredDuringExecution` 와 `preferredDuringSchedulingIgnoredDuringExecution` 로 부르는
 두 가지 종류의 노드 어피니티가 있다. 전자는 파드가 노드에 스케줄되도록 *반드시*
-규칙을 만족해야 하는 것(`nodeSelector` 와 같으나 보다 표현적인 구문을 사용해서)을 지정하고,
+규칙을 만족해야 하는 것(`nodeSelector` 와 비슷하나 보다 표현적인 구문을 사용해서)을 지정하고,
 후자는 스케줄러가 시도하려고는 하지만, 보증하지 않는 *선호(preferences)* 를 지정한다는 점에서
 이를 각각 "엄격함(hard)" 과 "유연함(soft)" 으로 생각할 수 있다.
 이름의 "IgnoredDuringExecution" 부분은 `nodeSelector` 작동 방식과 유사하게 노드의
-레이블이 런타임 중에 변경되어 파드의 어피니티 규칙이 더 이상 충족되지 않으면 파드가 여전히 그 노드에서
+레이블이 런타임 중에 변경되어 파드의 어피니티 규칙이 더 이상 충족되지 않으면 파드가 그 노드에서
 동작한다는 의미이다. 향후에는 파드의 노드 어피니티 요구 사항을 충족하지 않는 노드에서 파드를 제거한다는
-점을 제외하고는 `preferredDuringSchedulingIgnoredDuringExecution` 와 같은 `requiredDuringSchedulingIgnoredDuringExecution` 를 제공할 계획이다.
+점을 제외하고는 `preferredDuringSchedulingIgnoredDuringExecution` 와 동일한 `requiredDuringSchedulingIgnoredDuringExecution` 를 제공할 계획이다.
 
 따라서 `requiredDuringSchedulingIgnoredDuringExecution` 의 예로는 "인텔 CPU가 있는 노드에서만 파드 실행"이
 될 수 있고, `preferredDuringSchedulingIgnoredDuringExecution` 의 예로는 "장애 조치 영역 XYZ에 파드 집합을 실행하려고
@@ -271,6 +270,18 @@ PodSpec에 지정된 NodeAffinity도 적용된다.
 파드를 노드에 스케줄하려면 `requiredDuringSchedulingIgnoredDuringExecution` 어피니티와 안티-어피니티와
 연관된 `matchExpressions` 가 모두 충족되어야 한다.
 
+#### 네임스페이스 셀렉터
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+사용자는 네임스페이스 집합에 대한 레이블 쿼리인 `namespaceSelector` 를 사용하여 일치하는 네임스페이스를 선택할 수도 있다.
+어피니티 용어는 `namespaceSelector` 에서 선택한 네임스페이스와 `namespaces` 필드에 나열된 네임스페이스의 결합에 적용된다.
+빈 `namespaceSelector` ({})는 모든 네임스페이스와 일치하는 반면, null 또는 빈 `namespaces` 목록과
+null `namespaceSelector` 는 "이 파드의 네임스페이스"를 의미한다.
+
+이 기능은 알파이며 기본적으로 비활성화되어 있다. kube-apiserver 및 kube-scheduler 모두에서
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)
+`PodAffinityNamespaceSelector` 를 설정하여 활성화할 수 있다.
+
 #### 더 실용적인 유스케이스
 
 파드간 어피니티와 안티-어피니티는 레플리카셋, 스테이트풀셋, 디플로이먼트 등과 같은
diff --git a/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
index 83059ba931..86e67978c2 100644
--- a/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -86,6 +86,7 @@ _스코어링_ 단계에서 스케줄러는 목록에 남아있는 노드의 순
 * [스케줄러 성능 튜닝](/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning/)에 대해 읽기
 * [파드 토폴로지 분배 제약 조건](/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints/)에 대해 읽기
 * kube-scheduler의 [레퍼런스 문서](/docs/reference/command-line-tools-reference/kube-scheduler/) 읽기
+* [kube-scheduler 구성(v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) 레퍼런스 읽기
 * [멀티 스케줄러 구성하기](/docs/tasks/extend-kubernetes/configure-multiple-schedulers/)에 대해 배우기
 * [토폴로지 관리 정책](/docs/tasks/administer-cluster/topology-manager/)에 대해 배우기
 * [파드 오버헤드](/ko/docs/concepts/scheduling-eviction/pod-overhead/)에 대해 배우기
diff --git a/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index 03eec40fae..9e049cd348 100644
--- a/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -24,8 +24,6 @@ API 서버에 해당 결정을 통지한다.
 본 페이지에서는 상대적으로 큰 규모의 쿠버네티스 클러스터에 대한 성능 튜닝
 최적화에 대해 설명한다.
 
-
-
 <!-- body -->
 
 큰 규모의 클러스터에서는 스케줄러의 동작을 튜닝하여 응답 시간
@@ -44,8 +42,10 @@ kube-scheduler 의 `percentageOfNodesToScore` 설정을 통해
 `percentageOfNodesToScore` 를 100 보다 높게 설정해도 kube-scheduler는
 마치 100을 설정한 것처럼 작동한다.
 
-값을 변경하려면, kube-scheduler 구성 파일(이 파일은 `/etc/kubernetes/config/kube-scheduler.yaml`
-일 수 있다)을 편집한 다음 스케줄러를 재시작 한다.
+값을 변경하려면,
+[kube-scheduler 구성 파일](/docs/reference/config-api/kube-scheduler-config.v1beta1/)을
+편집한 다음 스케줄러를 재시작한다.
+대부분의 경우, 구성 파일은 `/etc/kubernetes/config/kube-scheduler.yaml` 에서 찾을 수 있다.
 
 이를 변경한 후에 다음을 실행해서
 
@@ -99,7 +99,6 @@ algorithmSource:
 percentageOfNodesToScore: 50
 ```
 
-
 ### percentageOfNodesToScore 튜닝
 
 `percentageOfNodesToScore`는 1과 100 사이의 값이어야 하며
@@ -159,3 +158,7 @@ percentageOfNodesToScore: 50
 ```
 
 모든 노드를 검토한 후, 노드 1로 돌아간다.
+
+## {{% heading "whatsnext" %}}
+
+* [kube-scheduler 구성 레퍼런스(v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) 확인
diff --git a/content/ko/docs/concepts/security/controlling-access.md b/content/ko/docs/concepts/security/controlling-access.md
index 3b45be648c..9612159eb4 100644
--- a/content/ko/docs/concepts/security/controlling-access.md
+++ b/content/ko/docs/concepts/security/controlling-access.md
@@ -38,7 +38,7 @@ API 서버가 하나 이상의 인증기 모듈을 실행하도록 구성한다.
 인증기는 [여기](/docs/reference/access-authn-authz/authentication/)에서 더 자세히 서술한다.
 
 인증 단계로 들어가는 것은 온전한 HTTP 요청이지만
-일반적으로 헤더 그리고/또는 클라이언트 인증서만 검사한다.
+일반적으로 헤더 그리고/또는 클라이언트 인증서를 검사한다.
 
 인증 모듈은 클라이언트 인증서, 암호 및 일반 토큰, 부트스트랩 토큰,
 JWT 토큰(서비스 어카운트에 사용됨)을 포함한다.
diff --git a/content/ko/docs/concepts/services-networking/connect-applications-service.md b/content/ko/docs/concepts/services-networking/connect-applications-service.md
index 9002778ede..0848c35772 100644
--- a/content/ko/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/ko/docs/concepts/services-networking/connect-applications-service.md
@@ -383,7 +383,7 @@ $ curl https://<EXTERNAL-IP>:<NODE-PORT> -k
 <h1>Welcome to nginx!</h1>
 ```
 
-이제 클라우드 로드 밸런서를 사용하도록 서비스를 재생성하고, `my-nginx` 서비스의 `Type` 을  `NodePort` 에서 `LoadBalancer` 로 변경한다.
+이제 클라우드 로드 밸런서를 사용하도록 서비스를 재생성한다. `my-nginx` 서비스의 `Type` 을  `NodePort` 에서 `LoadBalancer` 로 변경한다.
 
 ```shell
 kubectl edit svc my-nginx
diff --git a/content/ko/docs/concepts/services-networking/dual-stack.md b/content/ko/docs/concepts/services-networking/dual-stack.md
index dcfb818650..821ca34989 100644
--- a/content/ko/docs/concepts/services-networking/dual-stack.md
+++ b/content/ko/docs/concepts/services-networking/dual-stack.md
@@ -11,11 +11,11 @@ weight: 70
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.16" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
- IPv4/IPv6 이중 스택을 사용하면 {{< glossary_tooltip text="파드" term_id="pod" >}} 와 {{< glossary_tooltip text="서비스" term_id="service" >}} 에 IPv4와 IPv6 주소를 모두 할당 할 수 있다.
+IPv4/IPv6 이중 스택 네트워킹을 사용하면 {{< glossary_tooltip text="파드" term_id="pod" >}}와 {{< glossary_tooltip text="서비스" term_id="service" >}}에 IPv4와 IPv6 주소를 모두 할당할 수 있다.
 
-만약 쿠버네티스 클러스터에서 IPv4/IPv6 이중 스택 네트워킹을 활성화하면, 클러스터는 IPv4와 IPv6 주소의 동시 할당을 지원하게 된다.
+IPv4/IPv6 이중 스택 네트워킹은 1.21부터 쿠버네티스 클러스터에 기본적으로 활성화되어 있고, IPv4 및 IPv6 주소를 동시에 할당할 수 있다.
 
 
 
@@ -23,7 +23,7 @@ weight: 70
 
 ## 지원되는 기능
 
-쿠버네티스 클러스터에서 IPv4/IPv6 이중 스택을 활성화하면 다음의 기능을 제공한다.
+쿠버네티스 클러스터의 IPv4/IPv6 이중 스택은 다음의 기능을 제공한다.
 
    * 이중 스택 파드 네트워킹(파드 당 단일 IPv4와 IPv6 주소 할당)
    * IPv4와 IPv6 지원 서비스
@@ -40,34 +40,34 @@ IPv4/IPv6 이중 스택 쿠버네티스 클러스터를 활용하려면 다음
    * 이중 스택 네트워킹을 위한 공급자의 지원(클라우드 공급자 또는 다른 방식으로 쿠버네티스 노드에 라우팅 가능한 IPv4/IPv6 네트워크 인터페이스를 제공할 수 있어야 한다.)
    * 이중 스택(예: Kubenet 또는 Calico)을 지원하는 네트워크 플러그인
 
-## IPv4/IPv6 이중 스택 활성화
+## IPv4/IPv6 이중 스택 구성
 
-IPv4/IPv6 이중 스택을 활성화 하려면, 클러스터의 관련 구성요소에 대해 `IPv6DualStack` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/) 를 활성화 하고, 이중 스택 클러스터 네트워크 할당을 설정한다.
+IPv4/IPv6 이중 스택을 사용하려면, 클러스터의 관련 구성 요소에 대해 `IPv6DualStack` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화한다. (1.21부터 IPv4/IPv6 이중 스택이 기본적으로 활성화된다.)
+
+IPv4/IPv6 이중 스택을 구성하려면, 이중 스택 클러스터 네트워크 할당을 설정한다.
 
    * kube-apiserver:
-      * `--feature-gates="IPv6DualStack=true"`
       * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
    * kube-controller-manager:
-      * `--feature-gates="IPv6DualStack=true"`
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
       * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
       * `--node-cidr-mask-size-ipv4|--node-cidr-mask-size-ipv6` IPv4의 기본값은 /24 이고 IPv6의 기본값은 /64 이다.
-   * kubelet:
-      * `--feature-gates="IPv6DualStack=true"`
    * kube-proxy:
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
-      * `--feature-gates="IPv6DualStack=true"`
 
 {{< note >}}
 IPv4 CIDR의 예: `10.244.0.0/16` (자신의 주소 범위를 제공하더라도)
 
 IPv6 CIDR의 예: `fdXY:IJKL:MNOP:15::/64` (이 형식으로 표시되지만, 유효한 주소는 아니다 - [RFC 4193](https://tools.ietf.org/html/rfc4193)을 본다.)
 
+1.21부터, IPv4/IPv6 이중 스택은 기본적으로 활성화된다.
+필요한 경우 kube-apiserver, kube-controller-manager, kubelet 및 kube-proxy 커맨드 라인에
+`--feature-gates="IPv6DualStack=false"` 를 지정하여 비활성화할 수 있다.
 {{< /note >}}
 
 ## 서비스
 
-클러스터에 이중 스택이 활성화된 경우 IPv4, IPv6 또는 둘 다를 사용할 수 있는 {{< glossary_tooltip text="서비스" term_id="service" >}}를 만들 수 있다.
+IPv4, IPv6 또는 둘 다를 사용할 수 있는 {{< glossary_tooltip text="서비스" term_id="service" >}}를 생성할 수 있다.
 
 서비스의 주소 계열은 기본적으로 첫 번째 서비스 클러스터 IP 범위의 주소 계열로 설정된다. (`--service-cluster-ip-range` 플래그를 통해 kube-apiserver에 구성)
 
@@ -76,11 +76,9 @@ IPv6 CIDR의 예: `fdXY:IJKL:MNOP:15::/64` (이 형식으로 표시되지만, 
 
 * `SingleStack`: 단일 스택 서비스. 컨트롤 플레인은 첫 번째로 구성된 서비스 클러스터 IP 범위를 사용하여 서비스에 대한 클러스터 IP를 할당한다.
 * `PreferDualStack`:
-  * 클러스터에 이중 스택이 활성화된 경우에만 사용된다. 서비스에 대해 IPv4 및 IPv6 클러스터 IP를 할당한다.
-  * 클러스터에 이중 스택이 활성화되지 않은 경우, 이 설정은 `SingleStack`과 동일한 동작을 따른다.
+  * 서비스에 IPv4 및 IPv6 클러스터 IP를 할당한다. (클러스터에 `--feature-gates="IPv6DualStack=false"` 가 있는 경우, 이 설정은 `SingleStack` 과 동일한 동작을 따른다.)
 * `RequireDualStack`: IPv4 및 IPv6 주소 범위 모두에서 서비스 `.spec.ClusterIPs`를 할당한다.
   * `.spec.ipFamilies` 배열의 첫 번째 요소의 주소 계열을 기반으로 `.spec.ClusterIPs` 목록에서 `.spec.ClusterIP`를 선택한다.
-  * 클러스터에는 이중 스택 네트워킹이 구성되어 있어야 한다.
 
 단일 스택에 사용할 IP 계열을 정의하거나 이중 스택에 대한 IP 군의 순서를 정의하려는 경우, 서비스에서 옵션 필드 `.spec.ipFamilies`를 설정하여 주소 군을 선택할 수 있다.
 
@@ -121,7 +119,7 @@ IPv6 CIDR의 예: `fdXY:IJKL:MNOP:15::/64` (이 형식으로 표시되지만, 
 
 #### 기존 서비스의 이중 스택 기본값
 
-이 예제는 서비스가 이미있는 클러스터에서 이중 스택이 새로 활성화된 경우의 기본 동작을 보여준다.
+이 예제는 서비스가 이미 있는 클러스터에서 이중 스택이 새로 활성화된 경우의 기본 동작을 보여준다. (`--feature-gates="IPv6DualStack=false"` 가 설정되지 않은 경우 기존 클러스터를 1.21로 업그레이드하면 이중 스택이 활성화된다.)
 
 1. 클러스터에서 이중 스택이 활성화된 경우 기존 서비스 (`IPv4` 또는 `IPv6`)는 컨트롤 플레인이 `.spec.ipFamilyPolicy`를 `SingleStack`으로 지정하고 `.spec.ipFamilies`를 기존 서비스의 주소 계열로 설정한다. 기존 서비스 클러스터 IP는 `.spec.ClusterIPs`에 저장한다.
 
@@ -237,3 +235,5 @@ spec:
 
 
 * [IPv4/IPv6 이중 스택 검증](/ko/docs/tasks/network/validate-dual-stack) 네트워킹
+* [kubeadm을 사용하여 이중 스택 네트워킹 활성화
+](/docs/setup/production-environment/tools/kubeadm/dual-stack-support/)
diff --git a/content/ko/docs/concepts/services-networking/endpoint-slices.md b/content/ko/docs/concepts/services-networking/endpoint-slices.md
index f75dc819c3..4e12cf9ff2 100644
--- a/content/ko/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/ko/docs/concepts/services-networking/endpoint-slices.md
@@ -1,13 +1,13 @@
 ---
 title: 엔드포인트슬라이스
 content_type: concept
-weight: 35
+weight: 45
 ---
 
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 _엔드포인트슬라이스_ 는 쿠버네티스 클러스터 내의 네트워크 엔드포인트를
 추적하는 간단한 방법을 제공한다. 이것은 엔드포인트를 더 확장하고, 확장 가능한
@@ -50,7 +50,7 @@ term_id="selector" >}}가 지정되면 컨트롤 플레인은 자동으로
 리소스 샘플이 있다.
 
 ```yaml
-apiVersion: discovery.k8s.io/v1beta1
+apiVersion: discovery.k8s.io/v1
 kind: EndpointSlice
 metadata:
   name: example-abc
@@ -67,13 +67,12 @@ endpoints:
     conditions:
       ready: true
     hostname: pod-1
-    topology:
-      kubernetes.io/hostname: node-1
-      topology.kubernetes.io/zone: us-west2-a
+    nodeName: node-1
+    zone: us-west2-a
 ```
 
 기본적으로, 컨트롤 플레인은 각각 100개 이하의 엔드포인트를
-갖도록 엔드포인트슬라이스를 
+갖도록 엔드포인트슬라이스를
 생성하고 관리한다. `--max-endpoints-per-slice`
 {{< glossary_tooltip text="kube-controller-manager" term_id="kube-controller-manager" >}}
 플래그를 사용하여, 최대 1000개까지 구성할 수 있다.
@@ -98,9 +97,9 @@ endpoints:
 
 #### 준비
 
-`ready`는 파드의 `Ready` 조건에 매핑되는 조건이다. `Ready` 조건이 `True`로 설정된 실행 중인 파드는 
-이 엔드포인트슬라이스 조건도 `true`로 설정되어야 한다. 호환성의 
-이유로, 파드가 종료될 때 `ready`는 절대 `true`가 되면 안 된다. 컨슈머는 `serving` 조건을 참조하여 
+`ready`는 파드의 `Ready` 조건에 매핑되는 조건이다. `Ready` 조건이 `True`로 설정된 실행 중인 파드는
+이 엔드포인트슬라이스 조건도 `true`로 설정되어야 한다. 호환성의
+이유로, 파드가 종료될 때 `ready`는 절대 `true`가 되면 안 된다. 컨슈머는 `serving` 조건을 참조하여
 파드 종료 준비 상태(readiness)를 검사해야 한다.
 이 규칙의 유일한 예외는 `spec.publishNotReadyAddresses`가 `true`로 설정된 서비스이다.
 이러한 서비스의 엔드 포인트는 항상 `ready`조건이 `true`로 설정된다.
@@ -110,16 +109,16 @@ endpoints:
 {{< feature-state for_k8s_version="v1.20" state="alpha" >}}
 
 `serving`은 종료 상태를 고려하지 않는다는 점을 제외하면 `ready` 조건과 동일하다.
-엔드포인트슬라이스 API 컨슈머는 파드가 종료되는 동안 파드 준비 상태에 관심이 있다면 
+엔드포인트슬라이스 API 컨슈머는 파드가 종료되는 동안 파드 준비 상태에 관심이 있다면
 이 조건을 확인해야 한다.
 
 {{< note >}}
 
 `serving`은 `ready`와 거의 동일하지만 `ready`의 기존 의미가 깨지는 것을 방지하기 위해 추가되었다.
-엔드포인트를 종료하기 위해 `ready`가 `true` 일 수 있다면 기존 클라이언트에게는 예상치 못한 일이 될 수 있다. 
+엔드포인트를 종료하기 위해 `ready`가 `true` 일 수 있다면 기존 클라이언트에게는 예상치 못한 일이 될 수 있다.
 역사적으로 종료된 엔드포인트는 처음부터 엔드포인트 또는 엔드포인트슬라이스 API에 포함되지 않았기 때문이다.
-이러한 이유로 `ready`는 엔드포인트 종료를 위해 _always_ `false`이며, 
-클라이언트가 `ready`에 대한 기존 의미와 관계없이 파드 종료 준비 상태를 
+이러한 이유로 `ready`는 엔드포인트 종료를 위해 _always_ `false`이며,
+클라이언트가 `ready`에 대한 기존 의미와 관계없이 파드 종료 준비 상태를
 추적 할 수 있도록 v1.20에 새로운 조건 `serving`이 추가되었다.
 
 {{< /note >}}
@@ -133,30 +132,26 @@ endpoints:
 
 ### 토폴로지 정보 {#토폴로지}
 
-{{< feature-state for_k8s_version="v1.20" state="deprecated" >}}
+엔드포인트슬라이스 내의 각 엔드 포인트는 관련 토폴로지 정보를 포함할 수 있다.
+토폴로지 정보에는 엔드 포인트의 위치와 해당 노드 및
+영역에 대한 정보가 포함된다. 엔드포인트슬라이스의 다음의 엔드 포인트별
+필드에서 사용할 수 있다.
+
+*`nodeName` - 이 엔드 포인트가 있는 노드의 이름이다.
+*`zone` - 이 엔드 포인트가 있는 영역이다.
 
 {{< note >}}
-엔드포인트슬라이스의 토폴로지 필드는 사용 중단되었으며 향후 릴리스에서 제거된다.
-토폴로지에서 `kubernetes.io/hostname`을 설정하는 대신 새로운 `nodeName` 필드가 
-사용된다. 영역 및 리전을 커버하는 다른 토폴로지 필드는 
-엔드포인트슬라이스 내의 모든 엔드포인트에 적용되는 
-엔드포인트슬라이스 레이블을 이용해 더 잘 표현될 수 있다.
+v1 API에서는, 전용 필드 `nodeName` 및 `zone` 을 위해 엔드 포인트별
+`topology` 가 효과적으로 제거되었다.
+
+`EndpointSlice` 리소스의 `endpoint` 필드에 임의의 토폴로지 필드를
+설정하는 것은 더 이상 사용되지 않으며, v1 API에서 지원되지 않는다. 대신,
+v1 API는 개별 `nodeName` 및 `zone` 필드 설정을 지원한다. 이러한
+필드는 API 버전 간에 자동으로 번역된다. 예를 들어,
+v1beta1 API의 `topology` 필드에 있는 `"topology.kubernetes.io/zone"`
+키 값은 v1 API의 `zone` 필드로 접근할 수 있다.
 {{< /note >}}
 
-엔드포인트슬라이스 내 각 엔드포인트는 연관된 토폴로지 정보를 포함할 수 있다.
-이는 해당 노드, 영역 그리고 지역에 대한 정보가 포함된
-엔드포인트가 있는 위치를 나타나는데 사용 한다. 값을 사용할 수 있으면,
-컨트롤 플레인은 엔드포인트슬라이스에 대해 다음의 토폴로지 레이블을 설정한다.
-
-* `kubernetes.io/hostname` - 이 엔드포인트가 있는 노드의 이름.
-* `topology.kubernetes.io/zone` - 이 엔드포인트가 있는 영역의 이름.
-* `topology.kubernetes.io/region` - 이 엔드포인트가 있는 지역의 이름.
-
-이런 레이블 값은 슬라이스의 각 엔드포인트와 연관된 리소스에서
-파생된다. 호스트 이름 레이블은 해당 파드의
-NodeName 필드 값을 나타낸다. 영역 및 지역 레이블은 해당
-노드에서 이름이 같은 값을 나타낸다.
-
 ### 관리
 
 대부분의 경우, 컨트롤 플레인(특히, 엔드포인트 슬라이스
diff --git a/content/ko/docs/concepts/services-networking/ingress.md b/content/ko/docs/concepts/services-networking/ingress.md
index ec705e6a7c..802cc486bf 100644
--- a/content/ko/docs/concepts/services-networking/ingress.md
+++ b/content/ko/docs/concepts/services-networking/ingress.md
@@ -218,7 +218,19 @@ Events:       <none>
 {{< codenew file="service/networking/external-lb.yaml" >}}
 
 IngressClass 리소스에는 선택적인 파라미터 필드가 있다. 이 클래스에 대한
-추가 구성을 참조하는데 사용할 수 있다.
+추가 구현 별 구성을 참조하는데 사용할 수 있다.
+
+#### 네임스페이스 범위의 파라미터
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+`Parameters` 필드에는 인그레스 클래스 구성을 위해 네임스페이스 별 리소스를 참조하는 데
+사용할 수 있는 `scope` 및 `namespace` 필드가 있다.
+`Scope` 필드의 기본값은 `Cluster` 이다. 즉, 기본값은 클러스터 범위의
+리소스이다. `Scope` 를 `Namespace` 로 설정하고 `Namespace` 필드를
+설정하면 특정 네임스페이스의 파라미터 리소스를 참조한다.
+
+{{< codenew file="service/networking/namespaced-params.yaml" >}}
 
 ### 사용중단(Deprecated) 어노테이션
 
@@ -257,7 +269,7 @@ IngressClass 리소스에는 선택적인 파라미터 필드가 있다. 이 클
 
 {{< codenew file="service/networking/test-ingress.yaml" >}}
 
-만약 `kubectl apply -f` 를 사용해서 생성한다면 방금 추가한 인그레스의
+만약 `kubectl apply -f` 를 사용해서 생성한다면 추가한 인그레스의
 상태를 볼 수 있어야 한다.
 
 ```bash
diff --git a/content/ko/docs/concepts/services-networking/network-policies.md b/content/ko/docs/concepts/services-networking/network-policies.md
index d7872b1d92..c68d6f2862 100644
--- a/content/ko/docs/concepts/services-networking/network-policies.md
+++ b/content/ko/docs/concepts/services-networking/network-policies.md
@@ -220,18 +220,72 @@ __ipBlock__: 인그레스 소스 또는 이그레스 대상으로 허용할 IP C
 SCTP 프로토콜 네트워크폴리시를 지원하는 {{< glossary_tooltip text="CNI" term_id="cni" >}} 플러그인을 사용하고 있어야 한다.
 {{< /note >}}
 
+## 포트 범위 지정
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+네트워크폴리시를 작성할 때, 단일 포트 대신 포트 범위를 대상으로 지정할 수 있다.
+
+다음 예와 같이 `endPort` 필드를 사용하면, 이 작업을 수행할 수 있다.
+
+```yaml
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: multi-port-egress
+  namespace: default
+spec:
+  podSelector:
+    matchLabels:
+      role: db
+  policyTypes:
+  - Egress
+  egress:
+  - to:
+    - ipBlock:
+        cidr: 10.0.0.0/24
+    ports:
+    - protocol: TCP
+      port: 32000
+      endPort: 32768
+```
+
+위 규칙은 대상 포트가 32000에서 32768 사이에 있는 경우, 네임스페이스 `default` 에 레이블이 `db` 인 모든 파드가 TCP를 통해 `10.0.0.0/24` 범위 내의 모든 IP와 통신하도록 허용한다.
+
+이 필드를 사용할 때 다음의 제한 사항이 적용된다.
+* 알파 기능으로, 기본적으로 비활성화되어 있다. 클러스터 수준에서 `endPort` 필드를 활성화하려면, 사용자(또는 클러스터 관리자)가 `--feature-gates=NetworkPolicyEndPort=true,…` 가 있는 API 서버에 대해 `NetworkPolicyEndPort` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화해야 한다.
+* `endPort` 필드는 `port` 필드보다 크거나 같아야 한다.
+* `endPort` 는 `port` 도 정의된 경우에만 정의할 수 있다.
+* 두 포트 모두 숫자여야 한다.
+
+{{< note >}}
+클러스터는 {{< glossary_tooltip text="CNI" term_id="cni" >}} 플러그인을 사용해야 한다.
+네트워크폴리시 명세에서 `endPort` 필드를 지원한다.
+{{< /note >}}
+
+## 이름으로 네임스페이스 지정
+
+{{< feature-state state="beta" for_k8s_version="1.21" >}}
+
+쿠버네티스 컨트롤 플레인은 `NamespaceDefaultLabelName`
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가 활성화된 경우
+모든 네임스페이스에 변경할 수 없는(immutable) 레이블 `kubernetes.io/metadata.name` 을 설정한다.
+레이블의 값은 네임스페이스 이름이다.
+
+네트워크폴리시는 일부 오브젝트 필드가 있는 이름으로 네임스페이스를 대상으로 지정할 수 없지만, 표준화된 레이블을 사용하여
+특정 네임스페이스를 대상으로 지정할 수 있다.
+
 ## 네트워크 정책으로 할 수 없는 것(적어도 아직은 할 수 없는)
 
-쿠버네티스 1.20부터 다음의 기능은 네트워크폴리시 API에 존재하지 않지만, 운영 체제 컴포넌트(예: SELinux, OpenVSwitch, IPTables 등) 또는 Layer 7 기술(인그레스 컨트롤러, 서비스 메시 구현) 또는 어드미션 컨트롤러를 사용하여 제2의 해결책을 구현할 수 있다. 쿠버네티스의 네트워크 보안을 처음 사용하는 경우, 네트워크폴리시 API를 사용하여 다음의 사용자 스토리를 (아직) 구현할 수 없다는 점에 유의할 가치가 있다. 이러한 사용자 스토리 중 일부(전부는 아님)가 네트워크폴리시 API의 향후 릴리스에서 활발히 논의되고 있다.
+쿠버네티스 {{< skew latestVersion >}}부터 다음의 기능은 네트워크폴리시 API에 존재하지 않지만, 운영 체제 컴포넌트(예: SELinux, OpenVSwitch, IPTables 등) 또는 Layer 7 기술(인그레스 컨트롤러, 서비스 메시 구현) 또는 어드미션 컨트롤러를 사용하여 제2의 해결책을 구현할 수 있다. 쿠버네티스의 네트워크 보안을 처음 사용하는 경우, 네트워크폴리시 API를 사용하여 다음의 사용자 스토리를 (아직) 구현할 수 없다는 점에 유의할 필요가 있다.
 
 - 내부 클러스터 트래픽이 공통 게이트웨이를 통과하도록 강제한다(서비스 메시나 기타 프록시와 함께 제공하는 것이 가장 좋을 수 있음).
 - TLS와 관련된 모든 것(이를 위해 서비스 메시나 인그레스 컨트롤러 사용).
 - 노드별 정책(이에 대해 CIDR 표기법을 사용할 수 있지만, 특히 쿠버네티스 ID로 노드를 대상으로 지정할 수 없음).
-- 이름으로 네임스페이스나 서비스를 타겟팅한다(그러나, {{< glossary_tooltip text="레이블" term_id="label" >}}로 파드나 네임스페이스를 타겟팅할 수 있으며, 이는 종종 실행할 수 있는 해결 방법임).
+- 이름으로 서비스를 타겟팅한다(그러나, {{< glossary_tooltip text="레이블" term_id="label" >}}로 파드나 네임스페이스를 타겟팅할 수 있으며, 이는 종종 실행할 수 있는 해결 방법임).
 - 타사 공급사가 이행한 "정책 요청"의 생성 또는 관리.
 - 모든 네임스페이스나 파드에 적용되는 기본 정책(이를 수행할 수 있는 타사 공급사의 쿠버네티스 배포본 및 프로젝트가 있음).
 - 고급 정책 쿼리 및 도달 가능성 도구.
-- 단일 정책 선언에서 포트 범위를 대상으로 하는 기능.
 - 네트워크 보안 이벤트를 기록하는 기능(예: 차단되거나 수락된 연결).
 - 명시적으로 정책을 거부하는 기능(현재 네트워크폴리시 모델은 기본적으로 거부하며, 허용 규칙을 추가하는 기능만 있음).
 - 루프백 또는 들어오는 호스트 트래픽을 방지하는 기능(파드는 현재 로컬 호스트 접근을 차단할 수 없으며, 상주 노드의 접근을 차단할 수 있는 기능도 없음).
diff --git a/content/ko/docs/concepts/services-networking/service-topology.md b/content/ko/docs/concepts/services-networking/service-topology.md
index 567b998791..47799ba9f7 100644
--- a/content/ko/docs/concepts/services-networking/service-topology.md
+++ b/content/ko/docs/concepts/services-networking/service-topology.md
@@ -1,10 +1,8 @@
 ---
-title: 서비스 토폴로지
-feature:
-  title: 서비스 토폴로지
-  description: >
-    클러스터 토폴로지를 기반으로 서비스 트래픽 라우팅.
 
+
+
+title: 토폴로지 키를 사용하여 토폴로지-인지 트래픽 라우팅
 content_type: concept
 weight: 10
 ---
@@ -12,7 +10,16 @@ weight: 10
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.17" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
+
+{{< note >}}
+
+이 기능, 특히 알파 `topologyKeys` API는 쿠버네티스 v1.21부터
+더 이상 사용되지 않는다.
+쿠버네티스 v1.21에 도입된 [토폴로지 인지 힌트](/docs/concepts/services-networking/topology-aware-hints/)는
+유사한 기능을 제공한다.
+
+{{</ note >}}
 
 _서비스 토폴로지_ 를 활성화 하면 서비스는 클러스터의 노드 토폴로지를
 기반으로 트래픽을 라우팅한다. 예를 들어, 서비스는 트래픽을
@@ -20,33 +27,33 @@ _서비스 토폴로지_ 를 활성화 하면 서비스는 클러스터의 노
 우선적으로 라우팅되도록 지정할 수 있다.
 
 
-
 <!-- body -->
 
 ## 소개
 
 기본적으로 `ClusterIP` 또는 `NodePort` 서비스로 전송된 트래픽은 서비스의
-모든 백엔드 주소로 라우팅 될 수 있다. 쿠버네티스 1.7부터는 "외부(external)"
-트래픽을 수신한 노드에서 실행중인 파드로 라우팅할 수 있었지만,
-`ClusterIP` 서비스에서는 지원되지 않으며 더 복잡한
-토폴로지 &mdash; 영역별 라우팅과 같은 &mdash; 에서는 불가능 했다.
-_서비스 토폴로지_ 기능은 서비스 생성자가 발신 노드와 수신 노드에 대해서
-노드 레이블에 기반한 트래픽 라우팅 정책을 정의할 수 있도록
-함으로써 이 문제를 해결한다.
+모든 백엔드 주소로 라우팅될 수 있다. 쿠버네티스 1.7을 사용하면 트래픽을 수신한
+동일한 노드에서 실행 중인 파드로 "외부(external)" 트래픽을 라우팅할 수
+있다. `ClusterIP` 서비스의 경우, 라우팅에 대한 동일한 노드 기본 설정이
+불가능했다. 또한 동일한 영역 내의 엔드 포인트에 대한 라우팅을 선호하도록
+클러스터를 구성할 수도 없다.
+서비스에 `topologyKeys` 를 설정하면, 출발 및 대상 노드에 대한
+노드 레이블을 기반으로 트래픽을 라우팅하는 정책을 정의할 수 있다.
 
-소스와 목적지의 노드 레이블 일치를 사용하여 운영자는 운영자의 요구 사항에
-적합한 메트릭에 대해서 서로 "근접(closer)" 하거나 "먼(farther)"
-노드 그룹을 지정할 수 있다. 공용 클라우드의 많은 운영자들이 서비스 트래픽을
-동일한 영역에서 유지하는 것을 선호하는 것을 필요성의 예제로 볼 수 있다. 그 이유는
-지역간의 트래픽에는 관련 비용이 발생하지만 지역 내의 트래픽은 발생하지 않기 때문이다.
-다른 일반적인 필요성으로는 DaemonSet이 관리하는 로컬 파드로
-트래픽을 라우팅 하거나, 대기시간을 최소화하기 위해 동일한 랙 상단(top-of-rack) 스위치에
-연결된 노드로 트래픽을 유지하는 것이 있다.
+소스와 목적지 사이의 레이블 일치를 통해 클러스터 운영자는
+서로 "근접(closer)"하거나 "먼(father)" 노드 그룹을 지정할 수 있다.
+자신의 요구 사항에 맞는 메트릭을 나타내는 레이블을 정의할 수 있다.
+예를 들어, 퍼블릭 클라우드에서는 지역 간의 트래픽에는 관련 비용이 발생(지역 내
+트래픽은 일반적으로 그렇지 않다)하기 때문에, 네트워크 트래픽을 동일한 지역 내에 유지하는 것을
+선호할 수 있다. 다른 일반적인 필요성으로는 데몬셋(DaemonSet)이 관리하는
+로컬 파드로 트래픽을 라우팅하거나, 대기 시간을 최소화하기 위해
+동일한 랙 상단(top-of-rack) 스위치에 연결된 노드로 트래픽을
+유지하는 것이 있다.
 
 
 ## 서비스 토폴로지 사용하기
 
-만약 클러스터에서 서비스 토폴로지가 활성화된 경우, 서비스 사양에서
+만약 클러스터에서 `ServiceTopology` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가 활성화된 경우, 서비스 사양에서
 `topologyKeys` 필드를 지정해서 서비스 트래픽 라우팅을 제어할 수 있다. 이 필드는
 이 서비스에 접근할 때 엔드포인트를 정렬하는데 사용되는 노드
 레이블의 우선 순위 목록이다. 트래픽은 첫 번째 레이블 값이 해당 레이블의
@@ -196,5 +203,3 @@ spec:
 
 * [서비스 토폴로지 활성화하기](/docs/tasks/administer-cluster/enabling-service-topology)를 읽어보기.
 * [서비스와 애플리케이션 연결하기](/ko/docs/concepts/services-networking/connect-applications-service/)를 읽어보기.
-
-
diff --git a/content/ko/docs/concepts/services-networking/service.md b/content/ko/docs/concepts/services-networking/service.md
index b01a971cff..e5aa794ae0 100644
--- a/content/ko/docs/concepts/services-networking/service.md
+++ b/content/ko/docs/concepts/services-networking/service.md
@@ -187,9 +187,14 @@ ExternalName 서비스는 셀렉터가 없고
 DNS명을 대신 사용하는 특수한 상황의 서비스이다. 자세한 내용은
 이 문서 뒷부분의 [ExternalName](#externalname) 섹션을 참조한다.
 
+### 초과 용량 엔드포인트
+엔드포인트 리소스에 1,000개가 넘는 엔드포인트가 있는 경우 쿠버네티스 v1.21(또는 그 이상)
+클러스터는 해당 엔드포인트에 `endpoints.kubernetes.io/over-capacity: warning` 어노테이션을 추가한다.
+이 어노테이션은 영향을 받는 엔드포인트 오브젝트가 용량을 초과했음을 나타낸다.
+
 ### 엔드포인트슬라이스
 
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 엔드포인트슬라이스는 엔드포인트에 보다 확장 가능한 대안을 제공할 수 있는
 API 리소스이다. 개념적으로 엔드포인트와 매우 유사하지만, 엔드포인트슬라이스를
@@ -513,8 +518,12 @@ API에서 `엔드포인트` 레코드를 생성하고, DNS 구성을 수정하
 각 노드는 해당 포트 (모든 노드에서 동일한 포트 번호)를 서비스로 프록시한다.
 서비스는 할당된 포트를 `.spec.ports[*].nodePort` 필드에 나타낸다.
 
-포트를 프록시하기 위해 특정 IP를 지정하려면 kube-proxy의 `--nodeport-addresses` 플래그를 특정 IP 블록으로 설정할 수 있다. 이것은 쿠버네티스 v1.10부터 지원된다.
-이 플래그는 쉼표로 구분된 IP 블록 목록 (예: 10.0.0.0/8, 192.0.2.0/25)을 사용하여 kube-proxy가 로컬 노드로 고려해야 하는 IP 주소 범위를 지정한다.
+포트를 프록시하기 위해 특정 IP를 지정하려면, kube-proxy에 대한
+`--nodeport-addresses` 플래그 또는
+[kube-proxy 구성 파일](/docs/reference/config-api/kube-proxy-config.v1alpha1/)의
+동등한 `nodePortAddresses` 필드를
+특정 IP 블록으로 설정할 수 있다.
+이 플래그는 쉼표로 구분된 IP 블록 목록(예: `10.0.0.0/8`, `192.0.2.0/25`)을 사용하여 kube-proxy가 로컬 노드로 고려해야 하는 IP 주소 범위를 지정한다.
 
 예를 들어, `--nodeport-addresses=127.0.0.0/8` 플래그로 kube-proxy를 시작하면, kube-proxy는 NodePort 서비스에 대하여 루프백(loopback) 인터페이스만 선택한다. `--nodeport-addresses`의 기본 값은 비어있는 목록이다. 이것은 kube-proxy가 NodePort에 대해 사용 가능한 모든 네트워크 인터페이스를 고려해야 한다는 것을 의미한다. (이는 이전 쿠버네티스 릴리스와도 호환된다).
 
@@ -530,7 +539,9 @@ NodePort를 사용하면 자유롭게 자체 로드 밸런싱 솔루션을 설
 하나 이상의 노드 IP를 직접 노출시킬 수 있다.
 
 이 서비스는 `<NodeIP>:spec.ports[*].nodePort`와
-`.spec.clusterIP:spec.ports[*].port`로 표기된다. (kube-proxy에서 `--nodeport-addresses` 플래그가 설정되면, <NodeIP>는 NodeIP를 필터링한다.)
+`.spec.clusterIP:spec.ports[*].port`로 표기된다.
+kube-proxy에 대한 `--nodeport-addresses` 플래그 또는 kube-proxy 구성 파일의
+동등한 필드가 설정된 경우, `<NodeIP>` 는 노드 IP를 필터링한다.
 
 예를 들면
 
@@ -628,6 +639,25 @@ v1.20부터는 `spec.allocateLoadBalancerNodePorts` 필드를 `false`로 설정
 이러한 노드 포트를 할당 해제하려면 모든 서비스 포트에서 `nodePorts` 항목을 명시적으로 제거해야 한다.
 이 필드를 사용하려면 `ServiceLBNodePortControl` 기능 게이트를 활성화해야 한다.
 
+#### 로드 밸런서 구현 클래스 지정 {#load-balancer-class}
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+v1.21부터는, `spec.loadBalancerClass` 필드를 설정하여 `LoadBalancer` 서비스 유형에
+대한 로드 밸런서 구현 클래스를 선택적으로 지정할 수 있다.
+기본적으로, `spec.loadBalancerClass` 는 `nil` 이고 `LoadBalancer` 유형의 서비스는
+클라우드 공급자의 기본 로드 밸런서 구현을 사용한다.
+`spec.loadBalancerClass` 가 지정되면, 지정된 클래스와 일치하는 로드 밸런서
+구현이 서비스를 감시하고 있다고 가정한다.
+모든 기본 로드 밸런서 구현(예: 클라우드 공급자가 제공하는
+로드 밸런서 구현)은 이 필드가 설정된 서비스를 무시한다.
+`spec.loadBalancerClass` 는 `LoadBalancer` 유형의 서비스에서만 설정할 수 있다.
+한 번 설정하면 변경할 수 없다.
+`spec.loadBalancerClass` 의 값은 "`internal-vip`" 또는
+"`example.com/internal-vip`" 와 같은 선택적 접두사가 있는 레이블 스타일 식별자여야 한다.
+접두사가 없는 이름은 최종 사용자를 위해 예약되어 있다.
+이 필드를 사용하려면 `ServiceLoadBalancerClass` 기능 게이트를 활성화해야 한다.
+
 #### 내부 로드 밸런서
 
 혼재된 환경에서는 서비스의 트래픽을 동일한 (가상) 네트워크 주소 블록 내로
@@ -785,8 +815,7 @@ TCP 및 SSL은 4 계층 프록시를 선택한다. ELB는 헤더를 수정하지
 ```
 
 위의 예에서, 서비스에 `80`, `443`, `8443`의 3개 포트가 포함된 경우,
-`443`, `8443`은 SSL 인증서를 사용하지만, `80`은 단순히
-프록시만 하는 HTTP이다.
+`443`, `8443`은 SSL 인증서를 사용하지만, `80`은 프록시하는 HTTP이다.
 
 쿠버네티스 v1.9부터는 서비스에 대한 HTTPS 또는 SSL 리스너와 함께 [사전에 정의된 AWS SSL 정책](https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html)을 사용할 수 있다.
 사용 가능한 정책을 확인하려면, `aws` 커맨드라인 툴을 사용한다.
@@ -958,7 +987,8 @@ NLB는 특정 인스턴스 클래스에서만 작동한다. 지원되는 인스
 
 | 규칙 | 프로토콜 | 포트 | IP 범위 | IP 범위 설명 |
 |------|----------|---------|------------|---------------------|
-| 헬스 체크 | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | VPC CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
+| 헬스 체크 | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | Subnet CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
+
 | 클라이언트 트래픽 | TCP | NodePort(s) | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/client=\<loadBalancerName\> |
 | MTU 탐색 | ICMP | 3,4 | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/mtu=\<loadBalancerName\> |
 
diff --git a/content/ko/docs/concepts/storage/persistent-volumes.md b/content/ko/docs/concepts/storage/persistent-volumes.md
index 05997eb0f3..3a85139cd2 100644
--- a/content/ko/docs/concepts/storage/persistent-volumes.md
+++ b/content/ko/docs/concepts/storage/persistent-volumes.md
@@ -29,7 +29,7 @@ _퍼시스턴트볼륨_ (PV)은 관리자가 프로비저닝하거나 [스토리
 
 _퍼시스턴트볼륨클레임_ (PVC)은 사용자의 스토리지에 대한 요청이다. 파드와 비슷하다. 파드는 노드 리소스를 사용하고 PVC는 PV 리소스를 사용한다. 파드는 특정 수준의 리소스(CPU 및 메모리)를 요청할 수 있다. 클레임은 특정 크기 및 접근 모드를 요청할 수 있다(예: ReadWriteOnce, ReadOnlyMany 또는 ReadWriteMany로 마운트 할 수 있음. [AccessModes](#접근-모드) 참고).
 
-퍼시스턴트볼륨클레임을 사용하면 사용자가 추상화된 스토리지 리소스를 사용할 수 있지만, 다른 문제들 때문에 성능과 같은 다양한 속성을 가진 퍼시스턴트볼륨이 필요한 경우가 일반적이다. 클러스터 관리자는 사용자에게 해당 볼륨의 구현 방법에 대한 세부 정보를 제공하지 않고 단순히 크기와 접근 모드와는 다른 방식으로 다양한 퍼시스턴트볼륨을 제공할 수 있어야 한다. 이러한 요구에는 _스토리지클래스_ 리소스가 있다.
+퍼시스턴트볼륨클레임을 사용하면 사용자가 추상화된 스토리지 리소스를 사용할 수 있지만, 다른 문제들 때문에 성능과 같은 다양한 속성을 가진 퍼시스턴트볼륨이 필요한 경우가 일반적이다. 클러스터 관리자는 사용자에게 해당 볼륨의 구현 방법에 대한 세부 정보를 제공하지 않고 크기와 접근 모드와는 다른 방식으로 다양한 퍼시스턴트볼륨을 제공할 수 있어야 한다. 이러한 요구에는 _스토리지클래스_ 리소스가 있다.
 
 [실습 예제와 함께 상세한 내용](/ko/docs/tasks/configure-pod-container/configure-persistent-volume-storage/)을 참고하길 바란다.
 
diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index 5323182966..698ee14e72 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -34,7 +34,7 @@ weight: 10
 더 이상 존재하지 않으면, 쿠버네티스는 임시(ephemeral) 볼륨을 삭제하지만,
 퍼시스턴트(persistent) 볼륨은 삭제하지 않는다.
 
-기본적으로 볼륨은 디렉터리일 뿐이며, 일부 데이터가 있을 수 있으며, 파드
+기본적으로 볼륨은 디렉터리이며, 일부 데이터가 있을 수 있으며, 파드
 내 컨테이너에서 접근할 수 있다. 디렉터리의 생성 방식, 이를 지원하는
 매체와 내용은 사용된 특정 볼륨의 유형에 따라
 결정된다.
@@ -149,14 +149,16 @@ EBS 볼륨이 파티션된 경우, 선택적 필드인 `partition: "<partition n
 
 #### azureFile CSI 마이그레이션
 
-{{< feature-state for_k8s_version="v1.15" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 `azureFile` 의 `CSIMigration` 기능이 활성화된 경우, 기존 트리 내 플러그인에서
 `file.csi.azure.com` 컨테이너 스토리지 인터페이스(CSI)
 드라이버로 모든 플러그인 작업을 수행한다. 이 기능을 사용하려면, 클러스터에 [Azure 파일 CSI
 드라이버](https://github.com/kubernetes-sigs/azurefile-csi-driver)
 를 설치하고 `CSIMigration` 과 `CSIMigrationAzureFile`
-알파 기능을 활성화해야 한다.
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화해야 한다.
+
+Azure File CSI 드라이버는 동일한 볼륨을 다른 fsgroup에서 사용하는 것을 지원하지 않는다. Azurefile CSI 마이그레이션이 활성화된 경우, 다른 fsgroup에서 동일한 볼륨을 사용하는 것은 전혀 지원되지 않는다.
 
 ### cephfs
 
@@ -205,14 +207,17 @@ spec:
 
 #### 오픈스택 CSI 마이그레이션
 
-{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
-Cinder의 `CSIMigration` 기능이 활성화된 경우, 기존 트리 내 플러그인에서
-`cinder.csi.openstack.org` 컨테이너 스토리지 인터페이스(CSI)
-드라이버로 모든 플러그인 작업을 수행한다. 이 기능을 사용하려면, 클러스터에 [오픈스택 Cinder CSI
-드라이버](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)를
-설치하고 `CSIMigration` 과 `CSIMigrationOpenStack`
-베타 기능을 활성화해야 한다.
+Cinder의`CSIMigration` 기능은 Kubernetes 1.21에서 기본적으로 활성화됩니다.
+기존 트리 내 플러그인에서 `cinder.csi.openstack.org` 컨테이너 스토리지 인터페이스(CSI)
+드라이버로 모든 플러그인 작업을 수행한다.
+[오픈스택 Cinder CSI 드라이버](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)가
+클러스터에 설치되어 있어야 한다.
+`CSIMigrationOpenStack` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를
+`false` 로 설정하여 클러스터에 대한 Cinder CSI 마이그레이션을 비활성화할 수 있다.
+`CSIMigrationOpenStack` 기능을 비활성화하면, 트리 내 Cinder 볼륨 플러그인이
+Cinder 볼륨 스토리지 관리의 모든 측면을 담당한다.
 
 ### 컨피그맵(configMap) {#configmap}
 
diff --git a/content/ko/docs/concepts/workloads/controllers/cron-jobs.md b/content/ko/docs/concepts/workloads/controllers/cron-jobs.md
index 7756c93cb0..6935cf8fb4 100644
--- a/content/ko/docs/concepts/workloads/controllers/cron-jobs.md
+++ b/content/ko/docs/concepts/workloads/controllers/cron-jobs.md
@@ -10,7 +10,7 @@ weight: 80
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.8" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 _크론잡은_ 반복 일정에 따라 {{< glossary_tooltip term_id="job" text="잡" >}}을 만든다.
 
@@ -115,12 +115,17 @@ Cannot determine if job needs to be started. Too many missed start time (> 100).
 크론잡은 오직 그 일정에 맞는 잡 생성에 책임이 있고,
 잡은 그 잡이 대표하는 파드 관리에 책임이 있다.
 
-## 새 컨트롤러
+## 컨트롤러 버전 {#new-controller}
 
-쿠버네티스 1.20부터 알파 기능으로 사용할 수 있는 크론잡 컨트롤러의 대체 구현이 있다. 크론잡 컨트롤러의 버전 2를 선택하려면, 다음의 [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/) 플래그를 {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}에 전달한다.
+쿠버네티스 v1.21부터 크론잡 컨트롤러의 두 번째 버전이
+기본 구현이다. 기본 크론잡 컨트롤러를 비활성화하고
+대신 원래 크론잡 컨트롤러를 사용하려면, `CronJobControllerV2`
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)
+플래그를 {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}에 전달하고,
+이 플래그를 `false` 로 설정한다. 예를 들면, 다음과 같다.
 
 ```
---feature-gates="CronJobControllerV2=true"
+--feature-gates="CronJobControllerV2=false"
 ```
 
 
diff --git a/content/ko/docs/concepts/workloads/controllers/deployment.md b/content/ko/docs/concepts/workloads/controllers/deployment.md
index e19720491d..ac782e7008 100644
--- a/content/ko/docs/concepts/workloads/controllers/deployment.md
+++ b/content/ko/docs/concepts/workloads/controllers/deployment.md
@@ -706,7 +706,7 @@ nginx-deployment-618515232    11        11        11        7m
 하나 이상의 업데이트를 트리거하기 전에 디플로이먼트를 일시 중지한 다음 다시 시작할 수 있다.
 이렇게 하면 불필요한 롤아웃을 트리거하지 않고 일시 중지와 재개 사이에 여러 수정 사항을 적용할 수 있다.
 
-* 예를 들어, 방금 생성된 디플로이먼트의 경우
+* 예를 들어, 생성된 디플로이먼트의 경우
   디플로이먼트 상세 정보를 가져온다.
   ```shell
   kubectl get deploy
diff --git a/content/ko/docs/concepts/workloads/controllers/job.md b/content/ko/docs/concepts/workloads/controllers/job.md
index 64b5d3879d..b9411ecc31 100644
--- a/content/ko/docs/concepts/workloads/controllers/job.md
+++ b/content/ko/docs/concepts/workloads/controllers/job.md
@@ -16,7 +16,8 @@ weight: 50
 잡에서 하나 이상의 파드를 생성하고 지정된 수의 파드가 성공적으로 종료될 때까지 계속해서 파드의 실행을 재시도한다.
 파드가 성공적으로 완료되면, 성공적으로 완료된 잡을 추적한다.  지정된 수의
 성공 완료에 도달하면, 작업(즉, 잡)이 완료된다.  잡을 삭제하면 잡이 생성한
-파드가 정리된다.
+파드가 정리된다. 작업을 일시 중지하면 작업이 다시 재개될 때까지 활성 파드가
+삭제된다.
 
 간단한 사례는 잡 오브젝트를 하나 생성해서 파드 하나를 안정적으로 실행하고 완료하는 것이다.
 첫 번째 파드가 실패 또는 삭제된 경우(예로는 노드 하드웨어의 실패 또는
@@ -98,8 +99,8 @@ echo $pods
 pi-5rwd7
 ```
 
-여기서 셀렉터는 잡의 셀렉터와 동일하다.  `--output=jsonpath` 옵션은 반환된 목록의
-각각의 파드에서 이름을 가져와서 표현하는 방식을 지정한다.
+여기서 셀렉터는 잡의 셀렉터와 동일하다. `--output = jsonpath` 옵션은 반환된
+목록에 있는 각 파드의 이름으로 표현식을 지정한다.
 
 파드 중 하나를 표준 출력으로 본다.
 
@@ -145,8 +146,8 @@ kubectl logs $pods
   - 파드가 성공적으로 종료하자마자 즉시 잡이 완료된다.
 1. *고정적(fixed)인 완료 횟수* 를 가진 병렬 잡:
   - `.spec.completions` 에 0이 아닌 양수 값을 지정한다.
-  - 잡은 전체 작업을 나타내며 1에서 `.spec.completions` 까지의 범위의 각 값에 대해 한 개씩 성공한 파드가 있으면 완료된다.
-  - **아직 구현되지 않음:** 각 파드에게는 1부터 `.spec.completions` 까지의 범위 내의 서로 다른 인덱스가 전달된다.
+  - 잡은 전체 작업을 나타내며, `.spec.completions` 성공한 파드가 있을 때 완료된다.
+  - `.spec.completionMode="Indexed"` 를 사용할 때, 각 파드는 0에서 `.spec.completions-1` 범위 내의 서로 다른 인덱스를 가져온다.
 1. *작업 큐(queue)* 가 있는 병렬 잡:
   - `.spec.completions` 를 지정하지 않고, `.spec.parallelism` 를 기본으로 한다.
   - 파드는 각자 또는 외부 서비스 간에 조정을 통해 각각의 작업을 결정해야 한다. 예를 들어 파드는 작업 큐에서 최대 N 개의 항목을 일괄로 가져올(fetch) 수 있다.
@@ -166,7 +167,6 @@ _작업 큐_ 잡은 `.spec.completions` 를 설정하지 않은 상태로 두고
 
 다른 유형의 잡을 사용하는 방법에 대한 더 자세한 정보는 [잡 패턴](#잡-패턴) 섹션을 본다.
 
-
 #### 병렬 처리 제어하기
 
 요청된 병렬 처리(`.spec.parallelism`)는 음수가 아닌 값으로 설정할 수 있다.
@@ -185,6 +185,33 @@ _작업 큐_ 잡은 `.spec.completions` 를 설정하지 않은 상태로 두고
 - 잡 컨트롤러는 동일한 잡에서 과도하게 실패한 이전 파드들로 인해 새로운 파드의 생성을 조절할 수 있다.
 - 파드가 정상적으로(gracefully) 종료되면, 중지하는데 시간이 소요된다.
 
+### 완료 모드
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+{{< note >}}
+인덱싱된 잡을 생성하려면, [API 서버](/docs/reference/command-line-tools-reference/kube-apiserver/)
+및 [컨트롤러 관리자](/docs/reference/command-line-tools-reference/kube-controller-manager/)에서
+`IndexedJob` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를
+활성화해야 한다.
+{{< /note >}}
+
+완료 횟수가 _고정적인 완료 횟수_ 즉, null이 아닌 `.spec.completions` 가 있는 잡은
+`.spec.completionMode` 에 지정된 완료 모드를 가질 수 있다.
+
+- `NonIndexed` (기본값): `.spec.completions` 가 성공적으로
+  완료된 파드가 있는 경우 작업이 완료된 것으로 간주된다. 즉, 각 파드
+  완료는 서로 상동하다(homologous). null `.spec.completions` 가 있는
+  잡은 암시적으로 `NonIndexed` 이다.
+- `Indexed`: 잡의 파드는 `batch.kubernetes.io/job-completion-index`
+  어노테이션에서 사용할 수 있는 0에서 `.spec.completions-1` 까지 연결된 완료 인덱스를 가져온다.
+  각 인덱스에 대해 성공적으로 완료된 파드가 하나 있으면 작업이 완료된 것으로
+  간주된다. 이 모드를 사용하는 방법에 대한 자세한 내용은
+  [정적 작업 할당을 사용한 병렬 처리를 위해 인덱싱된 잡](/docs/tasks/job/indexed-parallel-processing-static/)을 참고한다.
+  참고로, 드물기는 하지만, 동일한 인덱스에 대해 둘 이상의 파드를 시작할 수
+  있지만, 그 중 하나만 완료 횟수에 포함된다.
+
+
 ## 파드와 컨테이너 장애 처리하기
 
 파드내 컨테이너의 프로세스가 0이 아닌 종료 코드로 종료되었거나 컨테이너 메모리 제한을
@@ -348,12 +375,12 @@ spec:
 여기에 트레이드오프가 요약되어있고, 2열에서 4열까지가 위의 트레이드오프에 해당한다.
 패턴 이름은 예시와 더 자세한 설명을 위한 링크이다.
 
-|                            패턴                                   | 단일 잡 오브젝트 | 작업 항목보다 파드가 적은가? | 수정하지 않은 앱을 사용하는가? |  Kube 1.1에서 작동하는가? |
-| -------------------------------------------------------------------- |:-----------------:|:---------------------------:|:-------------------:|:-------------------:|
-| [잡 템플릿 확장](/ko/docs/tasks/job/parallel-processing-expansion/)            |                   |                             |          ✓          |          ✓          |
-| [작업 항목 당 파드가 있는 큐](/docs/tasks/job/coarse-parallel-processing-work-queue/)   |         ✓         |                             |      때때로      |          ✓          |
-| [가변 파드 수를 가진 큐](/ko/docs/tasks/job/fine-parallel-processing-work-queue/)  |         ✓         |             ✓               |                     |          ✓          |
-| 정적 작업이 할당된 단일 잡                               |         ✓         |                             |          ✓          |                     |
+|                  패턴                      | 단일 잡 오브젝트      | 작업 항목보다 파드가 적은가?       | 수정되지 않은 앱을 사용하는가? |
+| ----------------------------------------- |:-----------------:|:---------------------------:|:-------------------:|
+| [작업 항목 당 파드가 있는 큐]                   |         ✓         |                             |      때때로           |
+| [가변 파드 수를 가진 큐]                       |         ✓         |             ✓               |                     |
+| [정적 작업 할당을 사용한 인덱싱된 잡]             |         ✓         |                             |          ✓          |
+| [잡 템플릿 확장]                             |                   |                             |          ✓          |
 
 `.spec.completions` 로 완료를 지정할 때, 잡 컨트롤러에 의해 생성된 각 파드는
 동일한 [`사양`](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)을 갖는다.  이 의미는
@@ -364,16 +391,121 @@ spec:
 이 표는 각 패턴에 필요한 `.spec.parallelism` 그리고 `.spec.completions` 설정을 보여준다.
 여기서 `W` 는 작업 항목의 수이다.
 
-|                             패턴                                  | `.spec.completions` |  `.spec.parallelism` |
-| -------------------------------------------------------------------- |:-------------------:|:--------------------:|
-| [잡 템플릿 확장](/ko/docs/tasks/job/parallel-processing-expansion/)           |          1          |     1이어야 함      |
-| [작업 항목 당 파드가 있는 큐](/docs/tasks/job/coarse-parallel-processing-work-queue/)   |          W          |        any           |
-| [가변 파드 수를 가진 큐](/ko/docs/tasks/job/fine-parallel-processing-work-queue/)  |          1          |        any           |
-| 정적 작업이 할당된 단일 잡                               |          W          |        any           |
+|             패턴                           | `.spec.completions` |  `.spec.parallelism` |
+| ----------------------------------------- |:-------------------:|:--------------------:|
+| [작업 항목 당 파드가 있는 큐]                   |          W          |        any           |
+| [가변 파드 수를 가진 큐]                       |         null        |        any           |
+| [정적 작업 할당을 사용한 인덱싱된 잡]             |          W          |        any           |
+| [잡 템플릿 확장]                             |          1          |     1이어야 함         |
 
+[작업 항목 당 파드가 있는 큐]: /docs/tasks/job/coarse-parallel-processing-work-queue/
+[가변 파드 수를 가진 큐]: /docs/tasks/job/fine-parallel-processing-work-queue/
+[정적 작업 할당을 사용한 인덱싱된 잡]: /docs/tasks/job/indexed-parallel-processing-static/
+[잡 템플릿 확장]: /docs/tasks/job/parallel-processing-expansion/
 
 ## 고급 사용법
 
+### 잡 일시 중지
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+{{< note >}}
+잡 일시 중지는 쿠버네티스 버전 1.21 이상에서 사용할 수 있다. 이 기능을
+사용하려면 [API 서버](/docs/reference/command-line-tools-reference/kube-apiserver/)
+및 [컨트롤러 관리자](/docs/reference/command-line-tools-reference/kube-controller-manager/)에서
+`SuspendJob` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를
+활성화해야 한다.
+{{< /note >}}
+
+잡이 생성되면, 잡 컨트롤러는 잡의 요구 사항을 충족하기 위해
+즉시 파드 생성을 시작하고 잡이 완료될 때까지
+계속한다. 그러나, 잡의 실행을 일시적으로 중단하고 나중에
+다시 시작할 수도 있다. 잡을 일시 중지하려면, 잡의 `.spec.suspend` 필드를 true로
+업데이트할 수 있다. 나중에, 다시 재개하려면, false로 업데이트한다.
+`.spec.suspend` 로 설정된 잡을 생성하면 일시 중지된 상태로
+생성된다.
+
+잡이 일시 중지에서 재개되면, 해당 `.status.startTime` 필드가
+현재 시간으로 재설정된다. 즉, 잡이 일시 중지 및 재개되면 `.spec.activeDeadlineSeconds`
+타이머가 중지되고 재설정된다.
+
+잡을 일시 중지하면 모든 활성 파드가 삭제된다. 잡이
+일시 중지되면, SIGTERM 시그널로 [파드가 종료된다](/ko/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination).
+파드의 정상 종료 기간이 적용되며 사용자의 파드는 이 기간 동안에
+이 시그널을 처리해야 한다. 나중에 진행 상황을 저장하거나
+변경 사항을 취소하는 작업이 포함될 수 있다. 이 방법으로 종료된 파드는
+잡의 `completions` 수에 포함되지 않는다.
+
+일시 중지된 상태의 잡 정의 예시는 다음과 같다.
+
+```shell
+kubectl get job myjob -o yaml
+```
+
+```yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: myjob
+spec:
+  suspend: true
+  parallelism: 1
+  completions: 5
+  template:
+    spec:
+      ...
+```
+
+잡의 상태를 사용하여 잡이 일시 중지되었는지 또는 과거에 일시 중지되었는지
+확인할 수 있다.
+
+```shell
+kubectl get jobs/myjob -o yaml
+```
+
+```json
+apiVersion: batch/v1
+kind: Job
+# .metadata and .spec omitted
+status:
+  conditions:
+  - lastProbeTime: "2021-02-05T13:14:33Z"
+    lastTransitionTime: "2021-02-05T13:14:33Z"
+    status: "True"
+    type: Suspended
+  startTime: "2021-02-05T13:13:48Z"
+```
+
+"True" 상태인 "Suspended" 유형의 잡의 컨디션은 잡이
+일시 중지되었음을 의미한다. 이 `lastTransitionTime` 필드는 잡이 일시 중지된
+기간을 결정하는 데 사용할 수 있다. 해당 컨디션의 상태가 "False"이면, 잡이
+이전에 일시 중지되었다가 현재 실행 중이다. 이러한 컨디션이
+잡의 상태에 없으면, 잡이 중지되지 않은 것이다.
+
+잡이 일시 중지 및 재개될 때에도 이벤트가 생성된다.
+
+```shell
+kubectl describe jobs/myjob
+```
+
+```
+Name:           myjob
+...
+Events:
+  Type    Reason            Age   From            Message
+  ----    ------            ----  ----            -------
+  Normal  SuccessfulCreate  12m   job-controller  Created pod: myjob-hlrpl
+  Normal  SuccessfulDelete  11m   job-controller  Deleted pod: myjob-hlrpl
+  Normal  Suspended         11m   job-controller  Job suspended
+  Normal  SuccessfulCreate  3s    job-controller  Created pod: myjob-jvb44
+  Normal  Resumed           3s    job-controller  Job resumed
+```
+
+마지막 4개의 이벤트, 특히 "Suspended" 및 "Resumed" 이벤트는
+`.spec.suspend` 필드를 전환한 결과이다. 이 두 이벤트 사이의 시간동안
+파드가 생성되지 않았지만, 잡이 재개되자마자 파드 생성이 다시
+시작되었음을 알 수 있다.
+
 ### 자신의 파드 셀렉터를 지정하기
 
 일반적으로 잡 오브젝트를 생성할 때 `.spec.selector` 를 지정하지 않는다.
diff --git a/content/ko/examples/service/networking/namespaced-params.yaml b/content/ko/examples/service/networking/namespaced-params.yaml
new file mode 100644
index 0000000000..dd56724787
--- /dev/null
+++ b/content/ko/examples/service/networking/namespaced-params.yaml
@@ -0,0 +1,12 @@
+apiVersion: networking.k8s.io/v1
+kind: IngressClass
+metadata:
+  name: external-lb
+spec:
+  controller: example.com/ingress-controller
+  parameters:
+    apiGroup: k8s.example.com
+    kind: IngressParameters
+    name: external-lb
+    namespace: external-configuration
+    scope: Namespace

From c4438bdce2cbb34881803cc06c1e0e13e4cf50cc Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Mon, 26 Apr 2021 10:34:43 +0800
Subject: [PATCH 651/788] [zh] Resync kubeadm files (1)

---
 .../config-api/kubelet-config.v1beta1.md      | 1604 +++++++++++++++++
 .../tools/kubeadm/create-cluster-kubeadm.md   |   25 +-
 .../tools/kubeadm/high-availability.md        |  618 +++----
 .../tools/kubeadm/install-kubeadm.md          |   62 +-
 .../tools/kubeadm/kubelet-integration.md      |   54 +-
 .../kubeadm/setup-ha-etcd-with-kubeadm.md     |  528 +++---
 .../tools/kubeadm/troubleshooting-kubeadm.md  |  186 +-
 7 files changed, 2348 insertions(+), 729 deletions(-)
 create mode 100644 content/zh/docs/reference/config-api/kubelet-config.v1beta1.md

diff --git a/content/zh/docs/reference/config-api/kubelet-config.v1beta1.md b/content/zh/docs/reference/config-api/kubelet-config.v1beta1.md
new file mode 100644
index 0000000000..bee05b68db
--- /dev/null
+++ b/content/zh/docs/reference/config-api/kubelet-config.v1beta1.md
@@ -0,0 +1,1604 @@
+---
+title: Kubelet Configuration (v1beta1)
+content_type: tool-reference
+package: kubelet.config.k8s.io/v1beta1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+- [SerializedNodeConfigSource](#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource)
+  
+    
+
+
+## `KubeletConfiguration`     {#kubelet-config-k8s-io-v1beta1-KubeletConfiguration}
+    
+
+
+
+
+KubeletConfiguration contains the configuration for the Kubelet
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>KubeletConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td><code>enableServer</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableServer enables Kubelet's secured server.
+Note: Kubelet's insecure port is controlled by the readOnlyPort option.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>staticPodPath</code><br/>
+<code>string</code>
+</td>
+<td>
+   staticPodPath is the path to the directory containing local (static) pods to
+run, or the path to a single static pod file.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new path may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>syncFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   syncFrequency is the max period between synchronizing running
+containers and config.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening this duration may have a negative performance impact, especially
+as the number of Pods on the node increases. Alternatively, increasing this
+duration will result in longer refresh times for ConfigMaps and Secrets.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>fileCheckFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   fileCheckFrequency is the duration between checking config files for
+new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to reload local Static Pod
+configurations more frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td><code>httpCheckFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   httpCheckFrequency is the duration between checking http for new data
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the duration will cause the Kubelet to poll staticPodURL more
+frequently, which may have a negative performance impact.
+Default: "20s"</td>
+</tr>
+    
+  
+<tr><td><code>staticPodURL</code><br/>
+<code>string</code>
+</td>
+<td>
+   staticPodURL is the URL for accessing static pods to run
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+the set of static pods specified at the new URL may be different than the
+ones the Kubelet initially started with, and this may disrupt your node.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>staticPodURLHeader</code><br/>
+<code>map[string][]string</code>
+</td>
+<td>
+   staticPodURLHeader is a map of slices with HTTP headers to use when accessing the podURL
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt the ability to read the latest set of static pods from StaticPodURL.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>address</code><br/>
+<code>string</code>
+</td>
+<td>
+   address is the IP address for the Kubelet to serve on (set to 0.0.0.0
+for all interfaces).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "0.0.0.0"</td>
+</tr>
+    
+  
+<tr><td><code>port</code><br/>
+<code>int32</code>
+</td>
+<td>
+   port is the port for the Kubelet to serve on.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 10250</td>
+</tr>
+    
+  
+<tr><td><code>readOnlyPort</code><br/>
+<code>int32</code>
+</td>
+<td>
+   readOnlyPort is the read-only port for the Kubelet to serve on with
+no authentication/authorization.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: 0 (disabled)</td>
+</tr>
+    
+  
+<tr><td><code>tlsCertFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   tlsCertFile is the file containing x509 Certificate for HTTPS. (CA cert,
+if any, concatenated after server cert). If tlsCertFile and
+tlsPrivateKeyFile are not provided, a self-signed certificate
+and key are generated for the public address and saved to the directory
+passed to the Kubelet's --cert-dir flag.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>tlsPrivateKeyFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>tlsCipherSuites</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   TLSCipherSuites is the list of allowed cipher suites for the server.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>tlsMinVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   TLSMinVersion is the minimum TLS version supported.
+Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>rotateCertificates</code><br/>
+<code>bool</code>
+</td>
+<td>
+   rotateCertificates enables client certificate rotation. The Kubelet will request a
+new certificate from the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt the Kubelet's ability to authenticate with the API server
+after the current certificate expires.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>serverTLSBootstrap</code><br/>
+<code>bool</code>
+</td>
+<td>
+   serverTLSBootstrap enables server certificate bootstrap. Instead of self
+signing a serving certificate, the Kubelet will request a certificate from
+the certificates.k8s.io API. This requires an approver to approve the
+certificate signing requests. The RotateKubeletServerCertificate feature
+must be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will stop the renewal of Kubelet server certificates, which can
+disrupt components that interact with the Kubelet server in the long term,
+due to certificate expiration.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>authentication</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthentication"><code>KubeletAuthentication</code></a>
+</td>
+<td>
+   authentication specifies how requests to the Kubelet's server are authenticated
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  anonymous:
+    enabled: false
+  webhook:
+    enabled: true
+    cacheTTL: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>authorization</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorization"><code>KubeletAuthorization</code></a>
+</td>
+<td>
+   authorization specifies how requests to the Kubelet's server are authorized
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Defaults:
+  mode: Webhook
+  webhook:
+    cacheAuthorizedTTL: "5m"
+    cacheUnauthorizedTTL: "30s"</td>
+</tr>
+    
+  
+<tr><td><code>registryPullQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   registryPullQPS is the limit of registry pulls per second.
+Set to 0 for no limit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>registryBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   registryBurst is the maximum size of bursty pulls, temporarily allows
+pulls to burst to this number, while still not exceeding registryPullQPS.
+Only used if registryPullQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced
+by image pulls.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>eventRecordQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   eventRecordQPS is the maximum event creations per second. If 0, there
+is no limit enforced.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>eventBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   eventBurst is the maximum size of a burst of event creations, temporarily
+allows event creations to burst to this number, while still not exceeding
+eventRecordQPS. Only used if eventRecordQPS > 0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic produced by
+event creations.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>enableDebuggingHandlers</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableDebuggingHandlers enables server endpoints for log access
+and local running of containers and commands, including the exec,
+attach, logs, and portforward features.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may disrupt components that interact with the Kubelet server.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>enableContentionProfiling</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableContentionProfiling enables lock contention profiling, if enableDebuggingHandlers is true.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may carry a performance impact.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>healthzPort</code><br/>
+<code>int32</code>
+</td>
+<td>
+   healthzPort is the port of the localhost healthz endpoint (set to 0 to disable)
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: 10248</td>
+</tr>
+    
+  
+<tr><td><code>healthzBindAddress</code><br/>
+<code>string</code>
+</td>
+<td>
+   healthzBindAddress is the IP address for the healthz server to serve on
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that monitor Kubelet health.
+Default: "127.0.0.1"</td>
+</tr>
+    
+  
+<tr><td><code>oomScoreAdj</code><br/>
+<code>int32</code>
+</td>
+<td>
+   oomScoreAdj is The oom-score-adj value for kubelet process. Values
+must be within the range [-1000, 1000].
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the stability of nodes under memory pressure.
+Default: -999</td>
+</tr>
+    
+  
+<tr><td><code>clusterDomain</code><br/>
+<code>string</code>
+</td>
+<td>
+   clusterDomain is the DNS domain for this cluster. If set, kubelet will
+configure all containers to search this domain in addition to the
+host's search domains.
+Dynamic Kubelet Config (beta): Dynamically updating this field is not recommended,
+as it should be kept in sync with the rest of the cluster.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>clusterDNS</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   clusterDNS is a list of IP addresses for the cluster DNS server. If set,
+kubelet will configure all containers to use this for DNS resolution
+instead of the host's DNS servers.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>streamingConnectionIdleTimeout</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   streamingConnectionIdleTimeout is the maximum time a streaming connection
+can be idle before the connection is automatically closed.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact components that rely on infrequent updates over streaming
+connections to the Kubelet server.
+Default: "4h"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusUpdateFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   nodeStatusUpdateFrequency is the frequency that kubelet computes node
+status. If node lease feature is not enabled, it is also the frequency that
+kubelet posts node status to master.
+Note: When node lease feature is not enabled, be cautious when changing the
+constant, it must work with nodeMonitorGracePeriod in nodecontroller.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact node scalability, and also that the node controller's
+nodeMonitorGracePeriod must be set to N&lowast;NodeStatusUpdateFrequency,
+where N is the number of retries before the node controller marks
+the node unhealthy.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusReportFrequency</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   nodeStatusReportFrequency is the frequency that kubelet posts node
+status to master if node status does not change. Kubelet will ignore this
+frequency and post node status immediately if any change is detected. It is
+only used when node lease feature is enabled. nodeStatusReportFrequency's
+default value is 1m. But if nodeStatusUpdateFrequency is set explicitly,
+nodeStatusReportFrequency's default value will be set to
+nodeStatusUpdateFrequency for backward compatibility.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>nodeLeaseDurationSeconds</code><br/>
+<code>int32</code>
+</td>
+<td>
+   nodeLeaseDurationSeconds is the duration the Kubelet will set on its corresponding Lease,
+when the NodeLease feature is enabled. This feature provides an indicator of node
+health by having the Kubelet create and periodically renew a lease, named after the node,
+in the kube-node-lease namespace. If the lease expires, the node can be considered unhealthy.
+The lease is currently renewed every 10s, per KEP-0009. In the future, the lease renewal interval
+may be set based on the lease duration.
+Requires the NodeLease feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+decreasing the duration may reduce tolerance for issues that temporarily prevent
+the Kubelet from renewing the lease (e.g. a short-lived network issue).
+Default: 40</td>
+</tr>
+    
+  
+<tr><td><code>imageMinimumGCAge</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   imageMinimumGCAge is the minimum age for an unused image before it is
+garbage collected.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>imageGCHighThresholdPercent</code><br/>
+<code>int32</code>
+</td>
+<td>
+   imageGCHighThresholdPercent is the percent of disk usage after which
+image garbage collection is always run. The percent is calculated as
+this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 85</td>
+</tr>
+    
+  
+<tr><td><code>imageGCLowThresholdPercent</code><br/>
+<code>int32</code>
+</td>
+<td>
+   imageGCLowThresholdPercent is the percent of disk usage before which
+image garbage collection is never run. Lowest disk usage to garbage
+collect to. The percent is calculated as this field value out of 100.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay garbage collection, and may change the image overhead
+on the node.
+Default: 80</td>
+</tr>
+    
+  
+<tr><td><code>volumeStatsAggPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   How frequently to calculate and cache volume disk usage for all pods
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "1m"</td>
+</tr>
+    
+  
+<tr><td><code>kubeletCgroups</code><br/>
+<code>string</code>
+</td>
+<td>
+   kubeletCgroups is the absolute name of cgroups to isolate the kubelet in
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>systemCgroups</code><br/>
+<code>string</code>
+</td>
+<td>
+   systemCgroups is absolute name of cgroups in which to place
+all non-kernel processes that are not already in a container. Empty
+for no container. Rolling back the flag requires a reboot.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>cgroupRoot</code><br/>
+<code>string</code>
+</td>
+<td>
+   cgroupRoot is the root cgroup to use for pods. This is handled by the
+container runtime on a best effort basis.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>cgroupsPerQOS</code><br/>
+<code>bool</code>
+</td>
+<td>
+   Enable QoS based Cgroup hierarchy: top level cgroups for QoS Classes
+And all Burstable and BestEffort pods are brought up under their
+specific top level QoS cgroup.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>cgroupDriver</code><br/>
+<code>string</code>
+</td>
+<td>
+   driver that the kubelet uses to manipulate cgroups on the host (cgroupfs or systemd)
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "cgroupfs"</td>
+</tr>
+    
+  
+<tr><td><code>cpuManagerPolicy</code><br/>
+<code>string</code>
+</td>
+<td>
+   CPUManagerPolicy is the name of the policy to use.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td><code>cpuManagerReconcilePeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   CPU Manager reconciliation period.
+Requires the CPUManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+shortening the period may carry a performance impact.
+Default: "10s"</td>
+</tr>
+    
+  
+<tr><td><code>topologyManagerPolicy</code><br/>
+<code>string</code>
+</td>
+<td>
+   TopologyManagerPolicy is the name of the policy to use.
+Policies other than "none" require the TopologyManager feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: "none"</td>
+</tr>
+    
+  
+<tr><td><code>topologyManagerScope</code><br/>
+<code>string</code>
+</td>
+<td>
+   TopologyManagerScope represents the scope of topology hint generation
+that topology manager requests and hint providers generate.
+"pod" scope requires the TopologyManager feature gate to be enabled.
+Default: "container"</td>
+</tr>
+    
+  
+<tr><td><code>qosReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   qosReserved is a set of resource name to percentage pairs that specify
+the minimum percentage of a resource reserved for exclusive use by the
+guaranteed QoS tier.
+Currently supported resources: "memory"
+Requires the QOSReserved feature gate to be enabled.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>runtimeRequestTimeout</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   runtimeRequestTimeout is the timeout for all runtime requests except long running
+requests - pull, logs, exec and attach.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may disrupt components that interact with the Kubelet server.
+Default: "2m"</td>
+</tr>
+    
+  
+<tr><td><code>hairpinMode</code><br/>
+<code>string</code>
+</td>
+<td>
+   hairpinMode specifies how the Kubelet should configure the container
+bridge for hairpin packets.
+Setting this flag allows endpoints in a Service to loadbalance back to
+themselves if they should try to access their own Service. Values:
+  "promiscuous-bridge": make the container bridge promiscuous.
+  "hairpin-veth":       set the hairpin flag on container veth interfaces.
+  "none":               do nothing.
+Generally, one must set --hairpin-mode=hairpin-veth to achieve hairpin NAT,
+because promiscuous-bridge assumes the existence of a container bridge named cbr0.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may require a node reboot, depending on the network plugin.
+Default: "promiscuous-bridge"</td>
+</tr>
+    
+  
+<tr><td><code>maxPods</code><br/>
+<code>int32</code>
+</td>
+<td>
+   maxPods is the number of pods that can run on this Kubelet.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 110</td>
+</tr>
+    
+  
+<tr><td><code>podCIDR</code><br/>
+<code>string</code>
+</td>
+<td>
+   The CIDR to use for pod IP addresses, only used in standalone mode.
+In cluster mode, this is obtained from the master.
+Dynamic Kubelet Config (beta): This field should always be set to the empty default.
+It should only set for standalone Kubelets, which cannot use Dynamic Kubelet Config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>podPidsLimit</code><br/>
+<code>int64</code>
+</td>
+<td>
+   PodPidsLimit is the maximum number of pids in any pod.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may prevent container processes from forking after the change.
+Default: -1</td>
+</tr>
+    
+  
+<tr><td><code>resolvConf</code><br/>
+<code>string</code>
+</td>
+<td>
+   ResolverConfig is the resolver configuration file used as the basis
+for the container DNS resolution configuration.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes will only take effect on Pods created after the update. Draining
+the node is recommended before changing this field.
+Default: "/etc/resolv.conf"</td>
+</tr>
+    
+  
+<tr><td><code>runOnce</code><br/>
+<code>bool</code>
+</td>
+<td>
+   RunOnce causes the Kubelet to check the API server once for pods,
+run those in addition to the pods specified by static pod files, and exit.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>cpuCFSQuota</code><br/>
+<code>bool</code>
+</td>
+<td>
+   cpuCFSQuota enables CPU CFS quota enforcement for containers that
+specify CPU limits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it may reduce node stability.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>cpuCFSQuotaPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   CPUCFSQuotaPeriod is the CPU CFS quota period value, cpu.cfs_period_us.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+limits set for containers will result in different cpu.cfs_quota settings. This
+will trigger container restarts on the node being reconfigured.
+Default: "100ms"</td>
+</tr>
+    
+  
+<tr><td><code>nodeStatusMaxImages</code><br/>
+<code>int32</code>
+</td>
+<td>
+   nodeStatusMaxImages caps the number of images reported in Node.Status.Images.
+Note: If -1 is specified, no cap will be applied. If 0 is specified, no image is returned.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+different values can be reported on node status.
+Default: 50</td>
+</tr>
+    
+  
+<tr><td><code>maxOpenFiles</code><br/>
+<code>int64</code>
+</td>
+<td>
+   maxOpenFiles is Number of files that can be opened by Kubelet process.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with the node's filesystem.
+Default: 1000000</td>
+</tr>
+    
+  
+<tr><td><code>contentType</code><br/>
+<code>string</code>
+</td>
+<td>
+   contentType is contentType of requests sent to apiserver.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability for the Kubelet to communicate with the API server.
+If the Kubelet loses contact with the API server due to a change to this field,
+the change cannot be reverted via dynamic Kubelet config.
+Default: "application/vnd.kubernetes.protobuf"</td>
+</tr>
+    
+  
+<tr><td><code>kubeAPIQPS</code><br/>
+<code>int32</code>
+</td>
+<td>
+   kubeAPIQPS is the QPS to use while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>kubeAPIBurst</code><br/>
+<code>int32</code>
+</td>
+<td>
+   kubeAPIBurst is the burst to allow while talking with kubernetes apiserver
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact scalability by changing the amount of traffic the Kubelet
+sends to the API server.
+Default: 10</td>
+</tr>
+    
+  
+<tr><td><code>serializeImagePulls</code><br/>
+<code>bool</code>
+</td>
+<td>
+   serializeImagePulls when enabled, tells the Kubelet to pull images one
+at a time. We recommend &lowast;not&lowast; changing the default value on nodes that
+run docker daemon with version  < 1.9 or an Aufs storage backend.
+Issue #10959 has more details.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the performance of image pulls.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>evictionHard</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines hard eviction thresholds. For example: {"memory.available": "300Mi"}.
+To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default:
+  memory.available:  "100Mi"
+  nodefs.available:  "10%"
+  nodefs.inodesFree: "5%"
+  imagefs.available: "15%"</td>
+</tr>
+    
+  
+<tr><td><code>evictionSoft</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines soft eviction thresholds.
+For example: {"memory.available": "300Mi"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions, and may change the allocatable reported
+by the node.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>evictionSoftGracePeriod</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines grace periods for each soft eviction signal.
+For example: {"memory.available": "30s"}.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger or delay Pod evictions.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>evictionPressureTransitionPeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may decrease the stability of the node when the node is overcommitted.
+Default: "5m"</td>
+</tr>
+    
+  
+<tr><td><code>evictionMaxPodGracePeriod</code><br/>
+<code>int32</code>
+</td>
+<td>
+   Maximum allowed grace period (in seconds) to use when terminating pods in
+response to a soft eviction threshold being met. This value effectively caps
+the Pod's TerminationGracePeriodSeconds value during soft evictions.
+Note: Due to issue #64530, the behavior has a bug where this value currently just
+overrides the grace period during soft eviction, which can increase the grace
+period from what is set on the Pod. This bug will be fixed in a future release.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it decreases the amount of time Pods will have to gracefully clean
+up before being killed during a soft eviction.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td><code>evictionMinimumReclaim</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Map of signal names to quantities that defines minimum reclaims, which describe the minimum
+amount of a given resource the kubelet will reclaim when performing a pod eviction while
+that resource is under pressure. For example: {"imagefs.available": "2Gi"}
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may change how well eviction can manage resource pressure.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>podsPerCore</code><br/>
+<code>int32</code>
+</td>
+<td>
+   podsPerCore is the maximum number of pods per core. Cannot exceed MaxPods.
+If 0, this field is ignored.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changes may cause Pods to fail admission on Kubelet restart, and may change
+the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
+future scheduling decisions. Increasing this value may also decrease performance,
+as more Pods can be packed into a single node.
+Default: 0</td>
+</tr>
+    
+  
+<tr><td><code>enableControllerAttachDetach</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableControllerAttachDetach enables the Attach/Detach controller to
+manage attachment/detachment of volumes scheduled to this node, and
+disables kubelet from executing any attach/detach operations
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+changing which component is responsible for volume management on a live node
+may result in volumes refusing to detach if the node is not drained prior to
+the update, and if Pods are scheduled to the node before the
+volumes.kubernetes.io/controller-managed-attach-detach annotation is updated by the
+Kubelet. In general, it is safest to leave this value set the same as local config.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>protectKernelDefaults</code><br/>
+<code>bool</code>
+</td>
+<td>
+   protectKernelDefaults, if true, causes the Kubelet to error if kernel
+flags are not as it expects. Otherwise the Kubelet will attempt to modify
+kernel flags to match its expectation.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+enabling it may cause the Kubelet to crash-loop if the Kernel is not configured as
+Kubelet expects.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>makeIPTablesUtilChains</code><br/>
+<code>bool</code>
+</td>
+<td>
+   If true, Kubelet ensures a set of iptables rules are present on host.
+These rules will serve as utility rules for various components, e.g. KubeProxy.
+The rules will be created based on IPTablesMasqueradeBit and IPTablesDropBit.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+disabling it will prevent the Kubelet from healing locally misconfigured iptables rules.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>iptablesMasqueradeBit</code><br/>
+<code>int32</code>
+</td>
+<td>
+   iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Warning: Please match the value of the corresponding parameter in kube-proxy.
+TODO: clean up IPTablesMasqueradeBit in kube-proxy
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 14</td>
+</tr>
+    
+  
+<tr><td><code>iptablesDropBit</code><br/>
+<code>int32</code>
+</td>
+<td>
+   iptablesDropBit is the bit of the iptables fwmark space to mark for dropping packets.
+Values must be within the range [0, 31]. Must be different from other mark bits.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it needs to be coordinated with other components, like kube-proxy, and the update
+will only be effective if MakeIPTablesUtilChains is enabled.
+Default: 15</td>
+</tr>
+    
+  
+<tr><td><code>featureGates</code><br/>
+<code>map[string]bool</code>
+</td>
+<td>
+   featureGates is a map of feature names to bools that enable or disable alpha/experimental
+features. This field modifies piecemeal the built-in default values from
+"k8s.io/kubernetes/pkg/features/kube_features.go".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider the
+documentation for the features you are enabling or disabling. While we
+encourage feature developers to make it possible to dynamically enable
+and disable features, some changes may require node reboots, and some
+features may require careful coordination to retroactively disable.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>failSwapOn</code><br/>
+<code>bool</code>
+</td>
+<td>
+   failSwapOn tells the Kubelet to fail to start if swap is enabled on the node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+setting it to true will cause the Kubelet to crash-loop if swap is enabled.
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>containerLogMaxSize</code><br/>
+<code>string</code>
+</td>
+<td>
+   A quantity defines the maximum size of the container log file before it is rotated.
+For example: "5Mi" or "256Ki".
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may trigger log rotation.
+Default: "10Mi"</td>
+</tr>
+    
+  
+<tr><td><code>containerLogMaxFiles</code><br/>
+<code>int32</code>
+</td>
+<td>
+   Maximum number of container log files that can be present for a container.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+lowering it may cause log files to be deleted.
+Default: 5</td>
+</tr>
+    
+  
+<tr><td><code>configMapAndSecretChangeDetectionStrategy</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy"><code>ResourceChangeDetectionStrategy</code></a>
+</td>
+<td>
+   ConfigMapAndSecretChangeDetectionStrategy is a mode in which
+config map and secret managers are running.
+Default: "Watch"</td>
+</tr>
+    
+  
+<tr><td><code>systemReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   systemReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G)
+pairs that describe resources reserved for non-kubernetes components.
+Currently only cpu and memory are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>kubeReserved</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
+that describe resources reserved for kubernetes system components.
+Currently cpu, memory and local storage for root file system are supported.
+See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may not be possible to increase the reserved resources, because this
+requires resizing cgroups. Always look for a NodeAllocatableEnforced event
+after updating this field to ensure that the update was successful.
+Default: nil</td>
+</tr>
+    
+  
+<tr><td><code>reservedSystemCPUs</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   This ReservedSystemCPUs option specifies the cpu list reserved for the host level system threads and kubernetes related threads.
+This provide a "static" CPU list rather than the "dynamic" list by system-reserved and kube-reserved.
+This option overwrites CPUs provided by system-reserved and kube-reserved.</td>
+</tr>
+    
+  
+<tr><td><code>showHiddenMetricsForVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   The previous version for which you want to show hidden metrics.
+Only the previous minor version is meaningful, other values will not be allowed.
+The format is <major>.<minor>, e.g.: '1.16'.
+The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics,
+rather than being surprised when they are permanently removed in the release after that.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>systemReservedCgroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   This flag helps kubelet identify absolute name of top level cgroup used to enforce `SystemReserved` compute resource reservation for OS system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>kubeReservedCgroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   This flag helps kubelet identify absolute name of top level cgroup used to enforce `KubeReserved` compute resource reservation for Kubernetes node system daemons.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): This field should not be updated without a full node
+reboot. It is safest to keep this value the same as the local config.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>enforceNodeAllocatable</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform.
+This flag accepts a list of options. Acceptable options are `none`, `pods`, `system-reserved` & `kube-reserved`.
+If `none` is specified, no other options may be specified.
+Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+removing enforcements may reduce the stability of the node. Alternatively, adding
+enforcements may reduce the stability of components which were using more than
+the reserved amount of resources; for example, enforcing kube-reserved may cause
+Kubelets to OOM if it uses more than the reserved resources, and enforcing system-reserved
+may cause system daemons to OOM if they use more than the reserved resources.
+Default: ["pods"]</td>
+</tr>
+    
+  
+<tr><td><code>allowedUnsafeSysctls</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in &lowast;).
+Unsafe sysctl groups are kernel.shm&lowast;, kernel.msg&lowast;, kernel.sem, fs.mqueue.&lowast;, and net.&lowast;.
+These sysctls are namespaced but not allowed by default.  For example: "kernel.msg&lowast;,net.ipv4.route.min_pmtu"
+Default: []</td>
+</tr>
+    
+  
+<tr><td><code>volumePluginDir</code><br/>
+<code>string</code>
+</td>
+<td>
+   volumePluginDir is the full path of the directory in which to search
+for additional third party volume plugins.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that changing
+the volumePluginDir may disrupt workloads relying on third party volume plugins.
+Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"</td>
+</tr>
+    
+  
+<tr><td><code>providerID</code><br/>
+<code>string</code>
+</td>
+<td>
+   providerID, if set, sets the unique id of the instance that an external provider (i.e. cloudprovider)
+can use to identify a specific node.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the ability of the Kubelet to interact with cloud providers.
+Default: ""</td>
+</tr>
+    
+  
+<tr><td><code>kernelMemcgNotification</code><br/>
+<code>bool</code>
+</td>
+<td>
+   kernelMemcgNotification, if set, the kubelet will integrate with the kernel memcg notification
+to determine if memory eviction thresholds are crossed rather than polling.
+Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
+it may impact the way Kubelet interacts with the kernel.
+Default: false</td>
+</tr>
+    
+  
+<tr><td><code>logging</code> <B>[Required]</B><br/>
+<a href="#LoggingConfiguration"><code>LoggingConfiguration</code></a>
+</td>
+<td>
+   Logging specifies the options of logging.
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+Defaults:
+  Format: text</td>
+</tr>
+    
+  
+<tr><td><code>enableSystemLogHandler</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enableSystemLogHandler enables system logs via web interface host:port/logs/
+Default: true</td>
+</tr>
+    
+  
+<tr><td><code>shutdownGracePeriod</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   ShutdownGracePeriod specifies the total duration that the node should delay the shutdown and total grace period for pod termination during a node shutdown.
+Default: "30s"</td>
+</tr>
+    
+  
+<tr><td><code>shutdownGracePeriodCriticalPods</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   ShutdownGracePeriodCriticalPods specifies the duration used to terminate critical pods during a node shutdown. This should be less than ShutdownGracePeriod.
+For example, if ShutdownGracePeriod=30s, and ShutdownGracePeriodCriticalPods=10s, during a node shutdown the first 20 seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating critical pods.
+Default: "10s"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `SerializedNodeConfigSource`     {#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource}
+    
+
+
+
+
+SerializedNodeConfigSource allows us to serialize v1.NodeConfigSource.
+This type is used internally by the Kubelet for tracking checkpointed dynamic configs.
+It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>SerializedNodeConfigSource</code></td></tr>
+    
+
+  
+  
+<tr><td><code>source</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#nodeconfigsource-v1-core"><code>core/v1.NodeConfigSource</code></a>
+</td>
+<td>
+   Source is the source that we are serializing</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `HairpinMode`     {#kubelet-config-k8s-io-v1beta1-HairpinMode}
+    
+(Alias of `string`)
+
+
+
+HairpinMode denotes how the kubelet should configure networking to handle
+hairpin packets.
+
+
+    
+
+
+## `KubeletAnonymousAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enabled allows anonymous requests to the kubelet server.
+Requests that are not rejected by another authentication method are treated as anonymous requests.
+Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>x509</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication"><code>KubeletX509Authentication</code></a>
+</td>
+<td>
+   x509 contains settings related to x509 client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>webhook</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication"><code>KubeletWebhookAuthentication</code></a>
+</td>
+<td>
+   webhook contains settings related to webhook bearer token authentication</td>
+</tr>
+    
+  
+<tr><td><code>anonymous</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication"><code>KubeletAnonymousAuthentication</code></a>
+</td>
+<td>
+   anonymous contains settings related to anonymous authentication</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>mode</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode"><code>KubeletAuthorizationMode</code></a>
+</td>
+<td>
+   mode is the authorization mode to apply to requests to the kubelet server.
+Valid values are AlwaysAllow and Webhook.
+Webhook mode uses the SubjectAccessReview API to determine authorization.</td>
+</tr>
+    
+  
+<tr><td><code>webhook</code><br/>
+<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization"><code>KubeletWebhookAuthorization</code></a>
+</td>
+<td>
+   webhook contains settings related to Webhook authorization.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletAuthorizationMode`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+
+    
+
+
+## `KubeletWebhookAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code><br/>
+<code>bool</code>
+</td>
+<td>
+   enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API</td>
+</tr>
+    
+  
+<tr><td><code>cacheTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheTTL enables caching of authentication results</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletWebhookAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>cacheAuthorizedTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheAuthorizedTTL is the duration to cache 'authorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+<tr><td><code>cacheUnauthorizedTTL</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from the webhook authorizer.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeletX509Authentication`     {#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication}
+    
+
+
+
+**Appears in:**
+
+- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
+
+
+
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>clientCAFile</code><br/>
+<code>string</code>
+</td>
+<td>
+   clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate
+signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName,
+and groups corresponding to the Organization in the client certificate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ResourceChangeDetectionStrategy`     {#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+ResourceChangeDetectionStrategy denotes a mode in which internal
+managers (secret, configmap) are discovering object changes.
+
+
+    
+  
+  
+    
+
+## `LoggingConfiguration`     {#LoggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+LoggingConfiguration contains logging options
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>format</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Format Flag specifies the structure of log messages.
+default value of format is `text`</td>
+</tr>
+    
+  
+<tr><td><code>sanitization</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   [Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).
+Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`)</td>
+</tr>
+    
+  
+</tbody>
+</table>
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index eabdd1bc1f..9f7ac07584 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -6,13 +6,13 @@ content_type: task
 weight: 30
 ---
 
-<!-- ---
+<!--
 reviewers:
 - sig-cluster-lifecycle
 title: Creating a cluster with kubeadm
 content_type: task
 weight: 30
---- -->
+-->
 
 <!-- overview -->
 
@@ -346,6 +346,20 @@ Alternatively, if you are the `root` user, you can run:
 export KUBECONFIG=/etc/kubernetes/admin.conf
 ```
 
+{{< warning >}}
+<!--
+Kubeadm signs the certificate in the `admin.conf` to have `Subject: O = system:masters, CN = kubernetes-admin`.
+`system:masters` is a break-glass, super user group that bypasses the authorization layer (e.g. RBAC).
+Do not share the `admin.conf` file with anyone and instead grant users custom permissions by generating
+them a kubeconfig file using the `kubeadm kubeconfig user` command.
+-->
+kubeadm 对 `admin.conf` 中的证书进行签名时，将其配置为
+`Subject: O = system:masters, CN = kubernetes-admin`。
+`system:masters` 是一个例外的、超级用户组，可以绕过鉴权层（例如 RBAC）。
+不要将 `admin.conf` 文件与任何人共享，应该使用 `kubeadm kubeconfig user`
+命令为其他用户生成 kubeconfig 文件，完成对他们的定制授权。
+{{< /warning >}}
+
 <!--
 Make a record of the `kubeadm join` command that `kubeadm init` outputs. You
 need this command to [join nodes to your cluster](#join-nodes).
@@ -428,13 +442,14 @@ Cluster DNS (CoreDNS) will not start up before a network is installed.**
 {{< /caution >}}
 
 <!--
-Currently Calico is the only CNI plugin that the kubeadm project performs e2e tests against.
+Kubeadm should be CNI agnostic and the validation of CNI providers is out of the scope of our current e2e testing.
 If you find an issue related to a CNI plugin you should log a ticket in its respective issue
 tracker instead of the kubeadm or kubernetes issue trackers.
 -->
 {{< note >}}
-目前 Calico 是 kubeadm 项目中执行 e2e 测试的唯一 CNI 插件。
-如果你发现与 CNI 插件相关的问题，应在其各自的问题跟踪器中记录而不是在 kubeadm 或 kubernetes 问题跟踪器中记录。
+kubeadm 应该是与 CNI 无关的，对 CNI 驱动进行验证目前不在我们的端到端测试范畴之内。
+如果你发现与 CNI 插件相关的问题，应在其各自的问题跟踪器中记录而不是在 kubeadm
+或 kubernetes 问题跟踪器中记录。
 {{< /note >}}
 
 <!--
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
index b0247ec776..5ef25cbc90 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
@@ -1,19 +1,15 @@
 ---
-reviewers:
-- sig-cluster-lifecycle
 title: 利用 kubeadm 创建高可用集群
 content_type: task
 weight: 60
 ---
 
 <!--
----
 reviewers:
 - sig-cluster-lifecycle
 title: Creating Highly Available clusters with kubeadm
 content_type: task
 weight: 60
----
 -->
 
 <!-- overview -->
@@ -42,12 +38,12 @@ in the kubeadm [issue tracker](https://github.com/kubernetes/kubeadm/issues/new)
 
 See also [The upgrade documentation](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-15).
 -->
-在下一步之前，您应该仔细考虑哪种方法更好的满足您的应用程序和环境的需求。 
+在下一步之前，你应该仔细考虑哪种方法更好的满足你的应用程序和环境的需求。 
 [这是对比文档](/zh/docs/setup/production-environment/tools/kubeadm/ha-topology/) 讲述了每种方法的优缺点。
 
-如果您在安装 HA 集群时遇到问题，请在 kubeadm [问题跟踪](https://github.com/kubernetes/kubeadm/issues/new)里向我们提供反馈。
+如果你在安装 HA 集群时遇到问题，请在 kubeadm [问题跟踪](https://github.com/kubernetes/kubeadm/issues/new)里向我们提供反馈。
 
-您也可以阅读 [升级文件](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
+你也可以阅读 [升级文件](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
 <!--
 This page does not address running your cluster on a cloud provider. In a cloud
 environment, neither approach documented here works with Service objects of type
@@ -66,7 +62,7 @@ LoadBalancer, or with dynamic PersistentVolumes.
 For both methods you need this infrastructure:
 
 - Three machines that meet [kubeadm's minimum requirements](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) for
-  the masters
+  the control-plane nodes
 - Three machines that meet [kubeadm's minimum
   requirements](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) for the workers
 - Full network connectivity between all machines in the cluster (public or
@@ -75,44 +71,47 @@ For both methods you need this infrastructure:
 - SSH access from one device to all nodes in the system
 - `kubeadm` and `kubelet` installed on all machines. `kubectl` is optional.
 -->
-对于这两种方法，您都需要以下基础设施：
+对于这两种方法，你都需要以下基础设施：
 
-- 配置三台机器 [kubeadm 的最低要求](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) 给主节点
-- 配置三台机器 [kubeadm 的最低要求](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) 给工作节点
-- 在集群中，所有计算机之间的完全网络连接（公网或私网）
-- 所有机器上的 sudo 权限
-- 每台设备对系统中所有节点的 SSH 访问
-- 在所有机器上安装 `kubeadm` 和 `kubelet`，`kubectl` 是可选的。
+- 配置满足 [kubeadm 的最低要求](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin)
+  的三台机器作为控制面节点
+- 配置满足 [kubeadm 的最低要求](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin)
+  的三台机器作为工作节点
+- 在集群中，确保所有计算机之间存在全网络连接（公网或私网）
+- 在所有机器上具有 sudo 权限
+- 从某台设备通过 SSH 访问系统中所有节点的能力
+- 所有机器上已经安装 `kubeadm` 和 `kubelet`，`kubectl` 是可选的。
 
 <!--
 For the external etcd cluster only, you also need:
 
 - Three additional machines for etcd members
 -->
-仅对于外部 etcd 集群来说，您还需要：
+仅对于外部 etcd 集群来说，你还需要：
 
 - 给 etcd 成员使用的另外三台机器
 
-
-
 <!-- steps -->
 
-<!-- ## First steps for both methods -->
+<!--
+## First steps for both methods
+
+### Create load balancer for kube-apiserver
+-->
 ## 这两种方法的第一步
 
-<!-- ### Create load balancer for kube-apiserver -->
 ### 为 kube-apiserver 创建负载均衡器
 
+{{< note >}}
 <!--
 There are many configurations for load balancers. The following example is only one
 option. Your cluster requirements may need a different configuration.
 -->
-{{< note >}}
-使用负载均衡器需要许多配置。您的集群搭建可能需要不同的配置。下面的例子只是其中的一方面配置。
+使用负载均衡器需要许多配置。你的集群搭建可能需要不同的配置。
+下面的例子只是其中的一方面配置。
 {{< /note >}}
 
 <!--
-
 1.  Create a kube-apiserver load balancer with a name that resolves to DNS.
 
     - In a cloud environment you should place your control plane nodes behind a TCP
@@ -135,15 +134,20 @@ option. Your cluster requirements may need a different configuration.
 -->
 1.  创建一个名为 kube-apiserver 的负载均衡器解析 DNS。
 
-    - 在云环境中，应该将控制平面节点放置在 TCP 后面转发负载平衡。 该负载均衡器将流量分配给目标列表中所有运行状况良好的控制平面节点。健康检查 apiserver 是在 kube-apiserver 监听端口(默认值 `:6443`)上的一个 TCP 检查。
+    - 在云环境中，应该将控制平面节点放置在 TCP 后面转发负载平衡。
+      该负载均衡器将流量分配给目标列表中所有运行状况良好的控制平面节点。
+      API 服务器的健康检查是在 kube-apiserver 的监听端口（默认值 `:6443`）
+      上进行的一个 TCP 检查。
 
     - 不建议在云环境中直接使用 IP 地址。
 
-    - 负载均衡器必须能够在 apiserver 端口上与所有控制平面节点通信。它还必须允许其监听端口的传入流量。
+    - 负载均衡器必须能够在 API 服务器端口上与所有控制平面节点通信。
+      它还必须允许其监听端口的入站流量。
 
     - 确保负载均衡器的地址始终匹配 kubeadm 的 `ControlPlaneEndpoint` 地址。
 
-    - 阅读[软件负载平衡选项指南](https://github.com/kubernetes/kubeadm/blob/master/docs/ha-considerations.md#options-for-software-load-balancing)以获取更多详细信息。
+    - 阅读[软件负载平衡选项指南](https://github.com/kubernetes/kubeadm/blob/master/docs/ha-considerations.md#options-for-software-load-balancing)
+      以获取更多详细信息。
 
 <!--
 1.  Add the first control plane nodes to the load balancer and test the
@@ -166,15 +170,19 @@ option. Your cluster requirements may need a different configuration.
     nc -v LOAD_BALANCER_IP PORT
     ```
 
-    - 由于 apiserver 尚未运行，预期会出现一个连接拒绝错误。然而超时意味着负载均衡器不能和控制平面节点通信。
-   如果发生超时，请重新配置负载均衡器与控制平面节点进行通信。
+    - 由于 apiserver 尚未运行，预期会出现一个连接拒绝错误。
+      然而超时意味着负载均衡器不能和控制平面节点通信。
+      如果发生超时，请重新配置负载均衡器与控制平面节点进行通信。
 
 3.  将其余控制平面节点添加到负载均衡器目标组。
 
-<!-- ## Stacked control plane and etcd nodes -->
+<!--
+## Stacked control plane and etcd nodes
+
+### Steps for the first control plane node
+-->
 ## 使用堆控制平面和 etcd 节点
 
-<!-- ### Steps for the first control plane node -->
 ### 控制平面节点的第一步
 
 <!--
@@ -183,8 +191,6 @@ option. Your cluster requirements may need a different configuration.
     ```sh
     sudo kubeadm init --control-plane-endpoint "LOAD_BALANCER_DNS:LOAD_BALANCER_PORT" --upload-certs
     ```
-
-
     - You can use the `--kubernetes-version` flag to set the Kubernetes version to use.
     It is recommended that the versions of kubeadm, kubelet, kubectl and Kubernetes match.
     - The `--control-plane-endpoint` flag should be set to the address or DNS and port of the load balancer.
@@ -196,142 +202,122 @@ option. Your cluster requirements may need a different configuration.
 -->
 1.  初始化控制平面：
 
-    ```sh
+    ```shell
     sudo kubeadm init --control-plane-endpoint "LOAD_BALANCER_DNS:LOAD_BALANCER_PORT" --upload-certs
     ```
 
-    - 您可以使用 `--kubernetes-version` 标志来设置要使用的 Kubernetes 版本。建议将 kubeadm、kebelet、kubectl 和 Kubernetes 的版本匹配。
+    - 你可以使用 `--kubernetes-version` 标志来设置要使用的 Kubernetes 版本。
+      建议将 kubeadm、kebelet、kubectl 和 Kubernetes 的版本匹配。
     - 这个 `--control-plane-endpoint` 标志应该被设置成负载均衡器的地址或 DNS 和端口。
-    - 这个 `--upload-certs` 标志用来将在所有控制平面实例之间的共享证书上传到集群。如果正好相反，你更喜欢手动地通过控制平面节点或者使用自动化
-   工具复制证书，请删除此标志并参考如下部分[证书分配手册](#manual-certs)。
+    - 这个 `--upload-certs` 标志用来将在所有控制平面实例之间的共享证书上传到集群。
+      如果正好相反，你更喜欢手动地通过控制平面节点或者使用自动化
+      工具复制证书，请删除此标志并参考如下部分[证书分配手册](#manual-certs)。
 
-<!--
-The `kubeadm init` flags `--config` and `--certificate-key` cannot be mixed, therefore if you want
-to use the [kubeadm configuration](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2) you must add the `certificateKey` field in the appropriate config locations (under `InitConfiguration` and `JoinConfiguration: controlPlane`).
--->
-{{< note >}}
-标志 `kubeadm init`、`--config` 和 `--certificate-key` 不能混合使用，因此如果您要使用[kubeadm 配置](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)，您必须在相应的配置文件（位于 `InitConfiguration` 和 `JoinConfiguration: controlPlane`）添加 `certificateKey` 字段。
-{{< /note >}}
+    {{< note >}}
+    <!--
+    The `kubeadm init` flags `--config` and `--certificate-key` cannot be mixed, therefore if you want
+    to use the [kubeadm configuration](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2) you must add the `certificateKey` field in the appropriate config locations (under `InitConfiguration` and `JoinConfiguration: controlPlane`).
+    -->
+    标志 `kubeadm init`、`--config` 和 `--certificate-key` 不能混合使用，
+    因此如果你要使用
+    [kubeadm 配置](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)，
+    你必须在相应的配置文件
+    （位于 `InitConfiguration` 和 `JoinConfiguration: controlPlane`）添加 `certificateKey` 字段。
+    {{< /note >}}
 
-<!--
-Some CNI network plugins like Calico require a CIDR such as `192.168.0.0/16` and
-some like Weave do not. See the [CNI network documentation](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network).
-To add a pod CIDR pass the flag `--pod-network-cidr`, or if you are using a kubeadm configuration file
-set the `podSubnet` field under the `networking` object of `ClusterConfiguration`.
--->
-{{< note >}}
-一些 CNI 网络插件如 Calico 需要 CIDR 例如 `192.168.0.0/16` 和一些像 Weave 没有。参考
-[CNI 网络文档](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network)。
-通过传递 `--pod-network-cidr` 标志添加 pod CIDR，或者您可以使用 kubeadm 配置文件，在 `ClusterConfiguration` 的 `networking` 对象下设置 `podSubnet` 字段。
-{{< /note >}}
+    {{< note >}}
+    <!--
+    Some CNI network plugins like Calico require a CIDR such as `192.168.0.0/16` and
+    some like Weave do not. See the [CNI network documentation](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network).
+    To add a pod CIDR pass the flag `--pod-network-cidr`, or if you are using a kubeadm configuration file
+    set the `podSubnet` field under the `networking` object of `ClusterConfiguration`.
+    -->
+    一些 CNI 网络插件如 Calico 需要 CIDR 例如 `192.168.0.0/16` 和一些像 Weave 没有。参考
+    [CNI 网络文档](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network)。
+    通过传递 `--pod-network-cidr` 标志添加 pod CIDR，或者你可以使用 kubeadm
+    配置文件，在 `ClusterConfiguration` 的 `networking` 对象下设置 `podSubnet` 字段。
+    {{< /note >}}
 
-<!--
-    After the command completes you should see something like so:
+    <!--
+    - The output looks similar to:
+    -->
+    - 输出类似于：
 
-    ```sh
-    ...
-    You can now join any number of control-plane node by running the following command on each as a root:
-    kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866 --control-plane --certificate-key f8902e114ef118304e561c3ecd4d0b543adc226b7a07f675f56564185ffe0c07
+      ```sh
+      ...
+      You can now join any number of control-plane node by running the following command on each as a root:
+      kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866 --control-plane --certificate-key f8902e114ef118304e561c3ecd4d0b543adc226b7a07f675f56564185ffe0c07
 
-    Please note that the certificate-key gives access to cluster sensitive data, keep it secret!
-    As a safeguard, uploaded-certs will be deleted in two hours; If necessary, you can use kubeadm init phase upload-certs to reload certs afterward.
+      Please note that the certificate-key gives access to cluster sensitive data, keep it secret!
+      As a safeguard, uploaded-certs will be deleted in two hours; If necessary, you can use kubeadm init phase upload-certs to reload certs afterward.
 
-    Then you can join any number of worker nodes by running the following on each as root:
-    kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866
-    ```
+      Then you can join any number of worker nodes by running the following on each as root:
+        kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866
+      ```
 
+    <!--
     - Copy this output to a text file. You will need it later to join control plane and worker nodes to the cluster.
     - When `--upload-certs` is used with `kubeadm init`, the certificates of the primary control plane
     are encrypted and uploaded in the `kubeadm-certs` Secret.
     - To re-upload the certificates and generate a new decryption key, use the following command on a control plane
     node that is already joined to the cluster:
-
-      ```sh
-      sudo kubeadm init phase upload-certs --upload-certs
-      ```
-
-    - You can also specify a custom `--certificate-key` during `init` that can later be used by `join`.
-    To generate such a key you can use the following command:
-
-      ```sh
-      kubeadm alpha certs certificate-key
-      ```
-
--->
-
-- 命令完成后，您应该会看到类似以下内容：
-
-    ```sh
-    ...
-    现在，您可以通过在根目录上运行以下命令来加入任意数量的控制平面节点：
-    kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866 --control-plane --certificate-key f8902e114ef118304e561c3ecd4d0b543adc226b7a07f675f56564185ffe0c07
-
-    请注意，证书密钥可以访问集群内敏感数据，请保密！
-    为了安全起见，将在两个小时内删除上传的证书； 如有必要，您可以使用 kubeadm 初始化上传证书阶段，之后重新加载证书。
-
-    然后，您可以通过在根目录上运行以下命令来加入任意数量的工作节点：
-    kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866
-    ```
-
-    - 将此输出复制到文本文件。 稍后您将需要它来将控制平面节点和辅助节点加入集群。
-    - 当 `--upload-certs` 与 `kubeadm init` 一起使用时，主控制平面的证书被加密并上传到 `kubeadm-certs` 密钥中。
+    -->
+    - 将此输出复制到文本文件。 稍后你将需要它来将控制平面节点和工作节点加入集群。
+    - 当 `--upload-certs` 与 `kubeadm init` 一起使用时，主控制平面的证书
+      被加密并上传到 `kubeadm-certs` Secret 中。
     - 要重新上传证书并生成新的解密密钥，请在已加入集群节点的控制平面上使用以下命令：
 
-      ```sh
+      ```shell
       sudo kubeadm init phase upload-certs --upload-certs
       ```
+    <!--
+    - You can also specify a custom `--certificate-key` during `init` that can later be used by `join`.
+      To generate such a key you can use the following command:
+    -->
+    - 你还可以在 `init` 期间指定自定义的 `--certificate-key`，以后可以由 `join` 使用。
+      要生成这样的密钥，可以使用以下命令：
 
-    - 您还可以在 `init` 期间指定自定义的 `--certificate-key`，以后可以由 `join` 使用。
-    要生成这样的密钥，可以使用以下命令：
-
-      ```sh
-      kubeadm alpha certs certificate-key
+      ```shell
+      kubeadm certs certificate-key
       ```
 
-<!--
-The `kubeadm-certs` Secret and decryption key expire after two hours.
--->
-{{< note >}}
-`kubeadm-certs` 密钥和解密密钥会在两个小时后失效。
-{{< /note >}}
+    {{< note >}}
+    <!--
+    The `kubeadm-certs` Secret and decryption key expire after two hours.
+    -->
+    `kubeadm-certs` 密钥和解密密钥会在两个小时后失效。
+    {{< /note >}}
 
-<!--
-As stated in the command output, the certificate key gives access to cluster sensitive data, keep it secret!
--->
-{{< caution >}}
-正如命令输出中所述，证书密钥可访问群集敏感数据，并将其保密！
-{{< /caution >}}
+    {{< caution >}}
+    <!--
+    As stated in the command output, the certificate key gives access to cluster sensitive data, keep it secret!
+    -->
+    正如命令输出中所述，证书密钥可访问群集敏感数据。请妥善保管！
+    {{< /caution >}}
 
 <!--
 1.  Apply the CNI plugin of your choice:
     [Follow these instructions](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network) to install the CNI provider. Make sure the configuration corresponds to the Pod CIDR specified in the kubeadm configuration file if applicable.
 
     In this example we are using Weave Net:
-
-    ```sh
-    kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
-    ```
-
-1.  Type the following and watch the pods of the control plane components get started:
-
-    ```sh
-    kubectl get pod -n kube-system -w
-    ```
-
 -->
-1.  应用您选择的 CNI 插件：
+2.  应用你所选择的 CNI 插件：
     [请遵循以下指示](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network)
-    安装 CNI 提供程序。如果适用，请确保配置与 kubeadm 配置文件中指定的 Pod CIDR 相对应。
+    安装 CNI 提供程序。如果适用，请确保配置与 kubeadm 配置文件中指定的 Pod
+    CIDR 相对应。
 
     在此示例中，我们使用 Weave Net：
 
-    ```sh
+    ```shell
     kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
     ```
 
-1.  输入以下内容，并查看 pods 的控制平面组件启动：
+<!--
+1.  Type the following and watch the pods of the control plane components get started:
+-->
+3.  输入以下内容，并查看控制平面组件的 Pods 启动：
 
-    ```sh
+    ```shell
     kubectl get pod -n kube-system -w
     ```
 
@@ -340,14 +326,14 @@ As stated in the command output, the certificate key gives access to cluster sen
 -->
 ### 其余控制平面节点的步骤
 
+{{< note >}}
 <!--
 Since kubeadm version 1.15 you can join multiple control-plane nodes in parallel.
 Prior to this version, you must join new control plane nodes sequentially, only after
 the first node has finished initializing.
 -->
-{{< note >}}
-从 kubeadm 1.15 版本开始，您可以并行加入多个控制平面节点。
-在此版本之前，您必须在第一个节点初始化后才能依序的增加新的控制平面节点。
+从 kubeadm 1.15 版本开始，你可以并行加入多个控制平面节点。
+在此版本之前，你必须在第一个节点初始化后才能依序的增加新的控制平面节点。
 {{< /note >}}
 
 <!--
@@ -365,9 +351,9 @@ For each additional control plane node you should:
     from the `kubeadm-certs` Secret in the cluster and be decrypted using the given key.
 
 -->
-对于每个其他控制平面节点，您应该：
+对于每个其他控制平面节点，你应该：
 
-1.  执行先前由第一个节点上的 `kubeadm init` 输出提供给您的 join 命令。
+1.  执行先前由第一个节点上的 `kubeadm init` 输出提供给你的 join 命令。
     它看起来应该像这样：
 
     ```sh
@@ -375,7 +361,8 @@ For each additional control plane node you should:
     ```
 
     - 这个 `--control-plane` 命令通知 `kubeadm join` 创建一个新的控制平面。
-    - `--certificate-key ...` 将导致从集群中的 `kubeadm-certs` 秘钥下载控制平面证书并使用给定的密钥进行解密。
+    - `--certificate-key ...` 将导致从集群中的 `kubeadm-certs` Secret 下载
+      控制平面证书并使用给定的密钥进行解密。
 
 <!--
 ## External etcd nodes
@@ -384,11 +371,10 @@ Setting up a cluster with external etcd nodes is similar to the procedure used f
 with the exception that you should setup etcd first, and you should pass the etcd information
 in the kubeadm config file.
 -->
-
 ## 外部 etcd 节点
 
 使用外部 etcd 节点设置集群类似于用于堆叠 etcd 的过程，
-不同之处在于您应该首先设置 etcd，并在 kubeadm 配置文件中传递 etcd 信息。
+不同之处在于你应该首先设置 etcd，并在 kubeadm 配置文件中传递 etcd 信息。
 
 <!--
 ### Set up the etcd cluster
@@ -406,19 +392,18 @@ in the kubeadm config file.
     scp /etc/kubernetes/pki/apiserver-etcd-client.key "${CONTROL_PLANE}":
     ```
 
-    - Replace the value of `CONTROL_PLANE` with the `user@host` of the first control plane machine.
-
+    - Replace the value of `CONTROL_PLANE` with the `user@host` of the first control-plane machine.
 -->
-
 ### 设置 ectd 集群
 
-1.  按照 [这些指示](/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/) 去设置 etcd 集群。
+1.  按照 [这些指示](/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/) 
+    去设置 etcd 集群。
 
-1.  设置 SSH 在 [这](#manual-certs)描述。
+1.  根据[这里](#manual-certs)的描述配置 SSH。
 
 1.  将以下文件从集群中的任何 etcd 节点复制到第一个控制平面节点：
 
-    ```sh
+    ```shell
     export CONTROL_PLANE="ubuntu@10.0.0.7"
     scp /etc/kubernetes/pki/etcd/ca.crt "${CONTROL_PLANE}":
     scp /etc/kubernetes/pki/apiserver-etcd-client.crt "${CONTROL_PLANE}":
@@ -432,93 +417,86 @@ in the kubeadm config file.
 
 1.  Create a file called `kubeadm-config.yaml` with the following contents:
 
-        apiVersion: kubeadm.k8s.io/v1beta2
-        kind: ClusterConfiguration
-        kubernetesVersion: stable
-        controlPlaneEndpoint: "LOAD_BALANCER_DNS:LOAD_BALANCER_PORT"
-        etcd:
-            external:
-                endpoints:
-                - https://ETCD_0_IP:2379
-                - https://ETCD_1_IP:2379
-                - https://ETCD_2_IP:2379
-                caFile: /etc/kubernetes/pki/etcd/ca.crt
-                certFile: /etc/kubernetes/pki/apiserver-etcd-client.crt
-                keyFile: /etc/kubernetes/pki/apiserver-etcd-client.key
-
+    ```yaml
+    apiVersion: kubeadm.k8s.io/v1beta2
+    kind: ClusterConfiguration
+    kubernetesVersion: stable
+    controlPlaneEndpoint: "LOAD_BALANCER_DNS:LOAD_BALANCER_PORT"
+    etcd:
+        external:
+            endpoints:
+            - https://ETCD_0_IP:2379
+            - https://ETCD_1_IP:2379
+            - https://ETCD_2_IP:2379
+            caFile: /etc/kubernetes/pki/etcd/ca.crt
+            certFile: /etc/kubernetes/pki/apiserver-etcd-client.crt
+            keyFile: /etc/kubernetes/pki/apiserver-etcd-client.key
+    ```
 -->
 
 ### 设置第一个控制平面节点
 
 1.  用以下内容创建一个名为 `kubeadm-config.yaml` 的文件：
 
-        apiVersion: kubeadm.k8s.io/v1beta2
-        kind: ClusterConfiguration
-        kubernetesVersion: stable
-        controlPlaneEndpoint: "LOAD_BALANCER_DNS:LOAD_BALANCER_PORT"
-        etcd:
-            external:
-                endpoints:
-                - https://ETCD_0_IP:2379
-                - https://ETCD_1_IP:2379
-                - https://ETCD_2_IP:2379
-                caFile: /etc/kubernetes/pki/etcd/ca.crt
-                certFile: /etc/kubernetes/pki/apiserver-etcd-client.crt
-                keyFile: /etc/kubernetes/pki/apiserver-etcd-client.key
+    ```yaml
+    apiVersion: kubeadm.k8s.io/v1beta2
+    kind: ClusterConfiguration
+    kubernetesVersion: stable
+    controlPlaneEndpoint: "LOAD_BALANCER_DNS:LOAD_BALANCER_PORT"
+    etcd:
+        external:
+            endpoints:
+            - https://ETCD_0_IP:2379
+            - https://ETCD_1_IP:2379
+            - https://ETCD_2_IP:2379
+            caFile: /etc/kubernetes/pki/etcd/ca.crt
+            certFile: /etc/kubernetes/pki/apiserver-etcd-client.crt
+            keyFile: /etc/kubernetes/pki/apiserver-etcd-client.key
+    ```
 
-<!--
-The difference between stacked etcd and external etcd here is that the external etcd setup requires
-a configuration file with the etcd endpoints under the `external` object for `etcd`.
-In the case of the stacked etcd topology this is managed automatically.
--->
-{{< note >}}
-这里堆 etcd 和外部 etcd 之前的区别在于设置外部 etcd 需要一个 `etcd` 的 `external` 对象下带有 etcd 端点的配置文件。
-如果是堆 etcd 技术，是自动管理的。
-{{< /note >}}
-
-<!--
+    {{< note >}}
+    <!--
+    The difference between stacked etcd and external etcd here is that the external etcd setup requires
+    a configuration file with the etcd endpoints under the `external` object for `etcd`.
+    In the case of the stacked etcd topology this is managed automatically.
+    -->
+    这里的内部（stacked） etcd 和外部 etcd 之前的区别在于设置外部 etcd
+    需要一个 `etcd` 的 `external` 对象下带有 etcd 端点的配置文件。
+    如果是内部 etcd，是自动管理的。
+    {{< /note >}}
 
+    <!--
     -  Replace the following variables in the config template with the appropriate values for your cluster:
+    -->
+    - 在你的集群中，将配置模板中的以下变量替换为适当值：
 
-        - `LOAD_BALANCER_DNS`
-        - `LOAD_BALANCER_PORT`
-        - `ETCD_0_IP`
-        - `ETCD_1_IP`
-        - `ETCD_2_IP`
+      - `LOAD_BALANCER_DNS`
+      - `LOAD_BALANCER_PORT`
+      - `ETCD_0_IP`
+      - `ETCD_1_IP`
+      - `ETCD_2_IP`
 
+<!--
 The following steps are similar to the stacked etcd setup:
+-->
+以下的步骤与设置内置 etcd 的集群是相似的：
 
+<!--
 1.  Run `sudo kubeadm init --config kubeadm-config.yaml --upload-certs` on this node.
 
 1.  Write the output join commands that are returned to a text file for later use.
 
 1.  Apply the CNI plugin of your choice. The given example is for Weave Net:
-
-    ```sh
-    kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
-    ```
-
 -->
+1. 在节点上运行 `sudo kubeadm init --config kubeadm-config.yaml --upload-certs` 命令。
 
--  在您的集群中，将配置模板中的以下变量替换为适当值：
+1. 记下输出的 join 命令，这些命令将在以后使用。
 
-    - `LOAD_BALANCER_DNS`
-    - `LOAD_BALANCER_PORT`
-    - `ETCD_0_IP`
-    - `ETCD_1_IP`
-    - `ETCD_2_IP`
+1. 应用你选择的 CNI 插件。以下示例适用于 Weave Net：
 
-以下的步骤与设置堆集群是相似的：
-
-1.  在节点上运行 `sudo kubeadm init --config kubeadm-config.yaml --upload-certs` 命令。
-
-1.  编写输出联接命令，这些命令将返回到文本文件以供以后使用。
-
-1.  应用您选择的 CNI 插件。 给定以下示例适用于 Weave Net：
-
-    ```sh
-    kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
-    ```
+   ```shell
+   kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
+   ```
 
 <!--
 ### Steps for the rest of the control plane nodes
@@ -529,34 +507,30 @@ The steps are the same as for the stacked etcd setup:
 - Join each control plane node with the join command you saved to a text file. It's recommended
 to join the control plane nodes one at a time.
 - Don't forget that the decryption key from `--certificate-key` expires after two hours, by default.
-
 -->
-
 ### 其他控制平面节点的步骤
 
-步骤与设置堆 etcd 相同：
+步骤与设置内置 etcd 相同：
 
 - 确保第一个控制平面节点已完全初始化。
-- 使用保存到文本文件的连接命令将每个控制平面节点连接在一起。建议一次加入一个控制平面节点。
+- 使用保存到文本文件的 join 命令将每个控制平面节点连接在一起。
+  建议一次加入一个控制平面节点。
 - 不要忘记默认情况下，`--certificate-key` 中的解密秘钥会在两个小时后过期。
 
-<!-- ## Common tasks after bootstrapping control plane -->
+<!--
+## Common tasks after bootstrapping control plane
+
+### Install workers
+-->
 ## 列举控制平面之后的常见任务
 
-<!-- ### Install workers -->
 ### 安装工作节点
 
 <!--
 Worker nodes can be joined to the cluster with the command you stored previously
 as the output from the `kubeadm init` command:
-
-```sh
-sudo kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866
-```
-
 -->
-您可以使用之前存储的命令将工作节点加入集群中
-作为 `kubeadm init` 命令的输出：
+你可以使用之前存储的 `kubeadm init` 命令的输出将工作节点加入集群中：
 
 ```sh
 sudo kubeadm join 192.168.0.200:6443 --token 9vr73a.a8uxyaju799qwdjv --discovery-token-ca-cert-hash sha256:7c2e69131a36ae2a042a339b33381c6d0d43887e2de83720eff5359e26aec866
@@ -573,11 +547,10 @@ There are many ways to do this. In the following example we are using `ssh` and
 
 SSH is required if you want to control all nodes from a single machine.
 -->
-
 ## 手动证书分发 {#manual-certs}
 
-如果您选择不将 `kubeadm init` 与 `--upload-certs` 命令一起使用，
-则意味着您将必须手动将证书从主控制平面节点复制到
+如果你选择不将 `kubeadm init` 与 `--upload-certs` 命令一起使用，
+则意味着你将必须手动将证书从主控制平面节点复制到
 将要加入的控制平面节点上。
 
 有许多方法可以实现这种操作。在下面的例子中我们使用 `ssh` 和 `scp`：
@@ -585,147 +558,106 @@ SSH is required if you want to control all nodes from a single machine.
 如果要在单独的一台计算机控制所有节点，则需要 SSH。
 
 <!--
-1.  Enable ssh-agent on your main device that has access to all other nodes in
-    the system:
-
-    ```
-    eval $(ssh-agent)
-    ```
-
-1.  Add your SSH identity to the session:
-
-    ```
-    ssh-add ~/.ssh/path_to_private_key
-    ```
-
-1.  SSH between nodes to check that the connection is working correctly.
-
-    - When you SSH to any node, make sure to add the `-A` flag:
-
-        ```
-        ssh -A 10.0.0.7
-        ```
-
-    - When using sudo on any node, make sure to preserve the environment so SSH
-      forwarding works:
-
-        ```
-        sudo -E -s
-        ```
-
+1. Enable ssh-agent on your main device that has access to all other nodes in
+   the system:
 -->
+1. 在你的主设备上启用 ssh-agent，要求该设备能访问系统中的所有其他节点：
 
-1.  在您的主设备上启动 ssh-agent，要求该设备能访问系统中的所有其他节点：
+   ```shell
+   eval $(ssh-agent)
+   ```
 
-    ```
-    eval $(ssh-agent)
-    ```
+<!--
+1. Add your SSH identity to the session:
+-->
+2. 将 SSH 身份添加到会话中：
 
-1.  将 SSH 身份添加到会话中：
+   ```shell
+   ssh-add ~/.ssh/path_to_private_key
+   ```
 
-    ```
-    ssh-add ~/.ssh/path_to_private_key
-    ```
+<!--
+1. SSH between nodes to check that the connection is working correctly.
+-->
+3. 检查节点间的 SSH 以确保连接是正常运行的
 
-1.  检查节点间的 SSH 以确保连接是正常运行的
+   <!--
+   - When you SSH to any node, make sure to add the `-A` flag:
+   -->
+   - SSH 到任何节点时，请确保添加 `-A` 标志：
 
-    - SSH 到任何节点时，请确保添加 `-A` 标志：
+     ```shell
+     ssh -A 10.0.0.7
+     ```
 
-        ```
-        ssh -A 10.0.0.7
-        ```
-
-    - 当在任何节点上使用 sudo 时，请确保环境完善，以便使用 SSH
-      转发任务：
-
-        ```
-        sudo -E -s
-        ```
+   <!--
+   - When using sudo on any node, make sure to preserve the environment so SSH
+     forwarding works:
+   -->
+   - 当在任何节点上使用 sudo 时，请确保保持环境变量设置，以便 SSH
+     转发能够正常工作：
 
+     ```shell
+     sudo -E -s
+     ```
 <!--
 1. After configuring SSH on all the nodes you should run the following script on the first control plane node after
    running `kubeadm init`. This script will copy the certificates from the first control plane node to the other
    control plane nodes:
-
-    In the following example, replace `CONTROL_PLANE_IPS` with the IP addresses of the
-    other control plane nodes.
-    ```sh
-    USER=ubuntu # customizable
-    CONTROL_PLANE_IPS="10.0.0.7 10.0.0.8"
-    for host in ${CONTROL_PLANE_IPS}; do
-        scp /etc/kubernetes/pki/ca.crt "${USER}"@$host:
-        scp /etc/kubernetes/pki/ca.key "${USER}"@$host:
-        scp /etc/kubernetes/pki/sa.key "${USER}"@$host:
-        scp /etc/kubernetes/pki/sa.pub "${USER}"@$host:
-        scp /etc/kubernetes/pki/front-proxy-ca.crt "${USER}"@$host:
-        scp /etc/kubernetes/pki/front-proxy-ca.key "${USER}"@$host:
-        scp /etc/kubernetes/pki/etcd/ca.crt "${USER}"@$host:etcd-ca.crt
-        scp /etc/kubernetes/pki/etcd/ca.key "${USER}"@$host:etcd-ca.key
-    done
-    ```
-
 -->
-
-1. 在所有节点上配置 SSH 之后，您应该在运行过 `kubeadm init` 命令的第一个控制平面节点上运行以下脚本。
+4. 在所有节点上配置 SSH 之后，你应该在运行过 `kubeadm init` 命令的第一个
+   控制平面节点上运行以下脚本。
    该脚本会将证书从第一个控制平面节点复制到另一个控制平面节点：
 
-    在以下示例中，用其他控制平面节点的 IP 地址替换 `CONTROL_PLANE_IPS`。
+   <!--
+   In the following example, replace `CONTROL_PLANE_IPS` with the IP addresses of the
+   other control plane nodes.
+   -->
+   在以下示例中，用其他控制平面节点的 IP 地址替换 `CONTROL_PLANE_IPS`。
 
-    ```sh
-    USER=ubuntu # 可自己设置
-    CONTROL_PLANE_IPS="10.0.0.7 10.0.0.8"
-    for host in ${CONTROL_PLANE_IPS}; do
-        scp /etc/kubernetes/pki/ca.crt "${USER}"@$host:
-        scp /etc/kubernetes/pki/ca.key "${USER}"@$host:
-        scp /etc/kubernetes/pki/sa.key "${USER}"@$host:
-        scp /etc/kubernetes/pki/sa.pub "${USER}"@$host:
-        scp /etc/kubernetes/pki/front-proxy-ca.crt "${USER}"@$host:
-        scp /etc/kubernetes/pki/front-proxy-ca.key "${USER}"@$host:
-        scp /etc/kubernetes/pki/etcd/ca.crt "${USER}"@$host:etcd-ca.crt
-        scp /etc/kubernetes/pki/etcd/ca.key "${USER}"@$host:etcd-ca.key
-    done
-    ```
+   ```sh
+   USER=ubuntu # 可定制
+   CONTROL_PLANE_IPS="10.0.0.7 10.0.0.8"
+   for host in ${CONTROL_PLANE_IPS}; do
+       scp /etc/kubernetes/pki/ca.crt "${USER}"@$host:
+       scp /etc/kubernetes/pki/ca.key "${USER}"@$host:
+       scp /etc/kubernetes/pki/sa.key "${USER}"@$host:
+       scp /etc/kubernetes/pki/sa.pub "${USER}"@$host:
+       scp /etc/kubernetes/pki/front-proxy-ca.crt "${USER}"@$host:
+       scp /etc/kubernetes/pki/front-proxy-ca.key "${USER}"@$host:
+       scp /etc/kubernetes/pki/etcd/ca.crt "${USER}"@$host:etcd-ca.crt
+       scp /etc/kubernetes/pki/etcd/ca.key "${USER}"@$host:etcd-ca.key
+   done
+   ```
 
-<!--
-Copy only the certificates in the above list. kubeadm will take care of generating the rest of the certificates
-with the required SANs for the joining control-plane instances. If you copy all the certificates by mistake,
-the creation of additional nodes could fail due to a lack of required SANs.
--->
-{{< caution >}}
-只需要复制上面列表中的证书。kubeadm 将负责生成其余证书以及加入控制平面实例所需的 SAN。
-如果您错误地复制了所有证书，由于缺少所需的 SAN，创建其他节点可能会失败。
-{{< /caution >}}
+   {{< caution >}}
+   <!--
+   Copy only the certificates in the above list. kubeadm will take care of generating the rest of the certificates
+   with the required SANs for the joining control-plane instances. If you copy all the certificates by mistake,
+   the creation of additional nodes could fail due to a lack of required SANs.
+   -->
+   只需要复制上面列表中的证书。kubeadm 将负责生成其余证书以及加入控制平面实例所需的 SAN。
+   如果你错误地复制了所有证书，由于缺少所需的 SAN，创建其他节点可能会失败。
+   {{< /caution >}}
 
 <!--
 1. Then on each joining control plane node you have to run the following script before running `kubeadm join`.
    This script will move the previously copied certificates from the home directory to `/etc/kubernetes/pki`:
-
-    ```sh
-    USER=ubuntu # customizable
-    mkdir -p /etc/kubernetes/pki/etcd
-    mv /home/${USER}/ca.crt /etc/kubernetes/pki/
-    mv /home/${USER}/ca.key /etc/kubernetes/pki/
-    mv /home/${USER}/sa.pub /etc/kubernetes/pki/
-    mv /home/${USER}/sa.key /etc/kubernetes/pki/
-    mv /home/${USER}/front-proxy-ca.crt /etc/kubernetes/pki/
-    mv /home/${USER}/front-proxy-ca.key /etc/kubernetes/pki/
-    mv /home/${USER}/etcd-ca.crt /etc/kubernetes/pki/etcd/ca.crt
-    mv /home/${USER}/etcd-ca.key /etc/kubernetes/pki/etcd/ca.key
-    ```
 -->
-
-1. 然后，在每个连接控制平面节点上，您必须先运行以下脚本，然后再运行 `kubeadm join`。
+5. 然后，在每个即将加入集群的控制平面节点上，你必须先运行以下脚本，然后
+   再运行 `kubeadm join`。
    该脚本会将先前复制的证书从主目录移动到 `/etc/kubernetes/pki`：
 
-    ```sh
-    USER=ubuntu # 可自己设置
-    mkdir -p /etc/kubernetes/pki/etcd
-    mv /home/${USER}/ca.crt /etc/kubernetes/pki/
-    mv /home/${USER}/ca.key /etc/kubernetes/pki/
-    mv /home/${USER}/sa.pub /etc/kubernetes/pki/
-    mv /home/${USER}/sa.key /etc/kubernetes/pki/
-    mv /home/${USER}/front-proxy-ca.crt /etc/kubernetes/pki/
-    mv /home/${USER}/front-proxy-ca.key /etc/kubernetes/pki/
-    mv /home/${USER}/etcd-ca.crt /etc/kubernetes/pki/etcd/ca.crt
-    mv /home/${USER}/etcd-ca.key /etc/kubernetes/pki/etcd/ca.key
-    ```
+   ```shell
+   USER=ubuntu # 可定制
+   mkdir -p /etc/kubernetes/pki/etcd
+   mv /home/${USER}/ca.crt /etc/kubernetes/pki/
+   mv /home/${USER}/ca.key /etc/kubernetes/pki/
+   mv /home/${USER}/sa.pub /etc/kubernetes/pki/
+   mv /home/${USER}/sa.key /etc/kubernetes/pki/
+   mv /home/${USER}/front-proxy-ca.crt /etc/kubernetes/pki/
+   mv /home/${USER}/front-proxy-ca.key /etc/kubernetes/pki/
+   mv /home/${USER}/etcd-ca.crt /etc/kubernetes/pki/etcd/ca.crt
+   mv /home/${USER}/etcd-ca.key /etc/kubernetes/pki/etcd/ca.key
+   ```
+
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index c584a05623..e2640977be 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -495,66 +495,36 @@ kubeadm to tell it what to do.
 kubelet 现在每隔几秒就会重启，因为它陷入了一个等待 kubeadm 指令的死循环。
 
 <!--
-## Configure cgroup driver used by kubelet on control-plane node
+## Configure cgroup driver
 
-When using Docker, kubeadm will automatically detect the cgroup driver for the kubelet
-and set it in the `/var/lib/kubelet/kubeadm-flags.env` file during runtime.
-
-If you are using a different CRI, you must pass your `cgroupDriver` value to `kubeadm init`, like so:
+Both the container runtime and the kubelet have a property called
+["cgroup driver"](/docs/setup/production-environment/container-runtimes/), which is important
+for the management of cgroups on Linux machines.
 -->
-## 在控制平面节点上配置 kubelet 使用的 cgroup 驱动程序  {#configure-cgroup-driver-used-by-kubelet-on-contol-plane-node}
+## 配置 cgroup 驱动程序  {#configure-cgroup-driver}
 
-使用 Docker 时，kubeadm 会自动为其检测 cgroup 驱动并在运行时对
-`/var/lib/kubelet/kubeadm-flags.env` 文件进行配置。
-
-如果你在使用不同的 CRI，你必须为 `kubeadm init` 传递 `cgroupDriver`
-值，像这样：
-
-```yaml
-apiVersion: kubelet.config.k8s.io/v1beta1
-kind: KubeletConfiguration
-cgroupDriver: <value>
-```
+容器运行时和 kubelet 都具有名字为 
+["cgroup driver"](/zh/docs/setup/production-environment/container-runtimes/)
+的属性，该属性对于在 Linux 机器上管理 CGroups 而言非常重要。
 
+{{< warning >}}
 <!--
-For further details, please read [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)
-and the [`KubeletConfiguration` reference](/docs/reference/config-api/kubelet-config.v1beta1/)
+Matching the container runtime and kubelet cgroup drivers is required or otherwise the kubelet process will fail.
 
-Please mind, that you **only** have to do that if the cgroup driver of your CRI
-is not `cgroupfs`, because that is the default value in the kubelet already.
+See [Configuring a cgroup driver](/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/) for more details.
 -->
-进一步的相关细节，可参阅
-[使用配置文件来执行 kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file) 以及 [KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/)。
+你需要确保容器运行时和 kubelet 所使用的是相同的 cgroup 驱动，否则 kubelet
+进程会失败。
 
-请注意，你只需要在你的 cgroup 驱动程序不是 `cgroupfs` 时这么做，
-因为它已经是 kubelet 中的默认值。
-
-{{< note >}}
-<!--
-Since `--cgroup-driver` flag has been deprecated by the kubelet, if you have that in `/var/lib/kubelet/kubeadm-flags.env`
-or `/etc/default/kubelet`(`/etc/sysconfig/kubelet` for RPMs), please remove it and use the KubeletConfiguration instead
-(stored in `/var/lib/kubelet/config.yaml` by default).
--->
-由于 kubelet 已经弃用了 `--cgroup-driver` 标志，如果你在配置文件
-`/var/lib/kubelet/kubeadm-flags.env` 或者 `/etc/default/kubelet`
-（对于 RPM 而言是 `/etc/sysconfig/kubelet`）包含此设置，请将其删除
-并使用 KubeletConfiguration 作为替代（默认存储于
-`/var/lib/kubelet/config.yaml` 文件中）。
-{{< /note >}}
-
-<!--
-The automatic detection of cgroup driver for other container runtimes
-like CRI-O and containerd is work in progress.
--->
-自动检测其他容器运行时（例如 CRI-O 和 containerd）的 cgroup 驱动的相关
-工作扔在进行中。
+相关细节可参见[配置 cgroup 驱动](/zh/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/)。
+{{< /warning >}}
 
 <!--
 ## Troubleshooting
 
 If you are running into difficulties with kubeadm, please consult our [troubleshooting docs](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/).
 -->
-## 故障排查
+## 故障排查   {#troubleshooting}
 
 如果你在使用 kubeadm 时遇到困难，请参阅我们的
 [故障排查文档](/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/)。
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
index 4dd6304c6d..08e17cc1b3 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
@@ -6,13 +6,11 @@ content_type: concept
 weight: 80
 ---
 <!--
----
 reviewers:
 - sig-cluster-lifecycle
 title: Configuring each kubelet in your cluster using kubeadm
 content_type: concept
 weight: 80
----
 -->
 
 <!-- overview -->
@@ -33,10 +31,11 @@ manager instead, but you need to configure it manually.
 Some kubelet configuration details need to be the same across all kubelets involved in the cluster, while
 other configuration aspects need to be set on a per-kubelet basis to accommodate the different
 characteristics of a given machine (such as OS, storage, and networking). You can manage the configuration
-of your kubelets manually, but kubeadm now provides a `KubeletConfiguration` API type for [managing your
-kubelet configurations centrally](#configure-kubelets-using-kubeadm).
+of your kubelets manually, but kubeadm now provides a `KubeletConfiguration` API type for
+[managing your kubelet configurations centrally](#configure-kubelets-using-kubeadm).
 -->
-kubeadm CLI 工具的生命周期与 [kubelet](/zh/docs/reference/command-line-tools-reference/kubelet)解耦，它是一个守护程序，在 Kubernetes 集群中的每个节点上运行。
+kubeadm CLI 工具的生命周期与 [kubelet](/zh/docs/reference/command-line-tools-reference/kubelet)
+解耦；kubelet 是一个守护程序，在 Kubernetes 集群中的每个节点上运行。
 当 Kubernetes 初始化或升级时，kubeadm CLI 工具由用户执行，而 kubelet 始终在后台运行。
 
 由于kubelet是守护程序，因此需要通过某种初始化系统或服务管理器进行维护。
@@ -48,8 +47,6 @@ kubeadm CLI 工具的生命周期与 [kubelet](/zh/docs/reference/command-line-t
 你可以手动地管理 kubelet 的配置，但是 kubeadm 现在提供一种 `KubeletConfiguration` API 类型
 用于[集中管理 kubelet 的配置](#configure-kubelets-using-kubeadm)。
 
-
-
 <!-- body -->
 
 <!--
@@ -80,8 +77,9 @@ Virtual IPs for services are now allocated from this subnet. You also need to se
 by the kubelet, using the `--cluster-dns` flag. This setting needs to be the same for every kubelet
 on every manager and Node in the cluster. The kubelet provides a versioned, structured API object
 that can configure most parameters in the kubelet and push out this configuration to each running
-kubelet in the cluster. This object is called **the kubelet's ComponentConfig**.
-The ComponentConfig allows the user to specify flags such as the cluster DNS IP addresses expressed as
+kubelet in the cluster. This object is called
+[`KubeletConfiguration`](/docs/reference/config-api/kubelet-config.v1beta1/). 
+The `KubeletConfiguration` allows the user to specify flags such as the cluster DNS IP addresses expressed as
 a list of values to a camelCased key, illustrated by the following example:
 
 ```yaml
@@ -90,6 +88,8 @@ kind: KubeletConfiguration
 clusterDNS:
 - 10.96.0.10
 ```
+
+For more details on the `KubeletConfiguration` have a look at [this section](#configure-kubelets-using-kubeadm).
 -->
 ### 将集群级配置传播到每个 kubelet 中
 
@@ -106,8 +106,8 @@ kubeadm init --service-cidr 10.96.0.0/12
 你还需要通过 kubelet 使用 `--cluster-dns` 标志设置 DNS 地址。
 在集群中的每个管理器和节点上的 kubelet 的设置需要相同。
 kubelet 提供了一个版本化的结构化 API 对象，该对象可以配置 kubelet 中的大多数参数，并将此配置推送到集群中正在运行的每个 kubelet 上。
-此对象被称为 **kubelet 的配置组件**。
-该配置组件允许用户指定标志，例如用骆峰值代表集群的 DNS IP 地址，如下所示：
+此对象被称为 [`KubeletConfiguration`](/zh/docs/reference/config-api/kubelet-config.v1beta1/)。
+`KubeletConfiguration` 允许用户指定标志，例如用骆峰值代表集群的 DNS IP 地址，如下所示：
 
 ```yaml
 apiVersion: kubelet.config.k8s.io/v1beta1
@@ -116,7 +116,7 @@ clusterDNS:
 - 10.96.0.10
 ```
 
-有关组件配置的更多详细信息，亲参阅 [本节](#configure-kubelets-using-kubeadm)。
+有关 `KubeletConfiguration` 的更多详细信息，亲参阅[本节](#configure-kubelets-using-kubeadm)。
 
 <!--
 ### Providing instance-specific configuration details
@@ -175,8 +175,8 @@ API object is passed with a configuration file like so `kubeadm ... --config som
 By calling `kubeadm config print init-defaults --component-configs KubeletConfiguration` you can
 see all the default values for this structure.
 
-Also have a look at the [API reference for the
-kubelet ComponentConfig](https://godoc.org/k8s.io/kubernetes/pkg/kubelet/apis/config#KubeletConfiguration)
+Also have a look at the
+[reference for the KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/)
 for more information on the individual fields.
 -->
 ## 使用 kubeadm 配置 kubelet
@@ -186,7 +186,8 @@ for more information on the individual fields.
 通过调用 `kubeadm config print init-defaults --component-configs KubeletConfiguration`，
 你可以看到此结构中的所有默认值。
 
-也可以阅读 [kubelet 配置组件的 API 参考](https://godoc.org/k8s.io/kubernetes/pkg/kubelet/apis/config#KubeletConfiguration)来获取有关各个字段的更多信息。
+也可以阅读 [KubeletConfiguration 参考](/docs/reference/config-api/kubelet-config.v1beta1/)
+来获取有关各个字段的更多信息。
 
 <!--
 ### Workflow when using `kubeadm init`
@@ -291,9 +292,13 @@ kubelet 使用这些证书执行 TLS 引导程序并获取唯一的凭据，该
 `kubeadm` ships with configuration for how systemd should run the kubelet.
 Note that the kubeadm CLI command never touches this drop-in file.
 
-This configuration file installed by the `kubeadm` [DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf) or [RPM package](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubeadm/10-kubeadm.conf) is written to
+This configuration file installed by the `kubeadm`
+[DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf) or
+[RPM package](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubeadm/10-kubeadm.conf) is written to
 `/etc/systemd/system/kubelet.service.d/10-kubeadm.conf` and is used by systemd.
-It augments the basic [`kubelet.service` for RPM](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubelet/kubelet.service) or [`kubelet.service` for DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service):
+It augments the basic
+[`kubelet.service` for RPM](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/rpm/kubelet/kubelet.service) or
+[`kubelet.service` for DEB](https://github.com/kubernetes/release/blob/master/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service):
 
 ```none
 [Service]
@@ -365,14 +370,14 @@ ExecStart=/usr/bin/kubelet $KUBELET_KUBECONFIG_ARGS $KUBELET_CONFIG_ARGS $KUBELE
 
 The DEB and RPM packages shipped with the Kubernetes releases are:
 
-| Package name | Description |
-|--------------|-------------|
-| `kubeadm`    | Installs the `/usr/bin/kubeadm` CLI tool and the [kubelet drop-in file](#the-kubelet-drop-in-file-for-systemd) for the kubelet. |
-| `kubelet`    | Installs the kubelet binary in `/usr/bin` and CNI binaries in `/opt/cni/bin`. |
-| `kubectl`    | Installs the `/usr/bin/kubectl` binary. |
-| `cri-tools` | Installs the `/usr/bin/crictl` binary from the [cri-tools git repository](https://github.com/kubernetes-sigs/cri-tools). |
+| Package name   | Description |
+|----------------|-------------|
+| `kubeadm`      | Installs the `/usr/bin/kubeadm` CLI tool and the [kubelet drop-in file](#the-kubelet-drop-in-file-for-systemd) for the kubelet. |
+| `kubelet`      | Installs the kubelet binary in `/usr/bin` and CNI binaries in `/opt/cni/bin`. |
+| `kubectl`      | Installs the `/usr/bin/kubectl` binary. |
+| `cri-tools`    | Installs the `/usr/bin/crictl` binary from the [cri-tools git repository](https://github.com/kubernetes-sigs/cri-tools). |
 -->
-## Kubernetes 二进制文件和软件包内容
+## Kubernetes 可执行文件和软件包内容
 
 Kubernetes 版本对应的 DEB 和 RPM 软件包是：
 
@@ -383,4 +388,3 @@ Kubernetes 版本对应的 DEB 和 RPM 软件包是：
 | `kubectl`    | 安装 `/usr/bin/kubectl` 可执行文件。 |
 | `cri-tools` | 从 [cri-tools git 仓库](https://github.com/kubernetes-sigs/cri-tools)中安装 `/usr/bin/crictl` 可执行文件。 |
 
-
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
index b29cf2215c..38602913d3 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
@@ -5,13 +5,11 @@ weight: 70
 ---
 
 <!--
----
 reviewers:
 - sig-cluster-lifecycle
 title: Set up a High Availability etcd cluster with kubeadm
 content_type: task
 weight: 70
----
 -->
 
 <!-- overview -->
@@ -35,7 +33,7 @@ becoming unavailable. This task walks through the process of creating a high
 availability etcd cluster of three members that can be used as an external etcd
 when using kubeadm to set up a kubernetes cluster.
 -->
-默认情况下，kubeadm 运行单成员的 etcd 集群，该集群由控制面节点上的 kubelet 以静态 Pod 的方式进行管理。由于 etcd 集群只包含一个成员且不能在任一成员不可用时保持运行，所以这不是一种高可用设置。本任务，将告诉您如何在使用 kubeadm 创建一个 kubernetes 集群时创建一个外部 etcd：有三个成员的高可用 etcd 集群。
+默认情况下，kubeadm 运行单成员的 etcd 集群，该集群由控制面节点上的 kubelet 以静态 Pod 的方式进行管理。由于 etcd 集群只包含一个成员且不能在任一成员不可用时保持运行，所以这不是一种高可用设置。本任务，将告诉你如何在使用 kubeadm 创建一个 kubernetes 集群时创建一个外部 etcd：有三个成员的高可用 etcd 集群。
 
 
 
@@ -85,334 +83,287 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具；在这
 
 <!--
 1. Configure the kubelet to be a service manager for etcd.
-
-    Since etcd was created first, you must override the service priority by creating a new unit file
-    that has higher precedence than the kubeadm-provided kubelet unit file.
+ 
+   {{< note >}}You must do this on every host where etcd should be running.{{< /note >}}
+   Since etcd was created first, you must override the service priority by creating a new unit file
+   that has higher precedence than the kubeadm-provided kubelet unit file.
 -->
 1. 将 kubelet 配置为 etcd 的服务管理器。
 
-    由于 etcd 是首先创建的，因此您必须通过创建具有更高优先级的新文件来覆盖 kubeadm 提供的 kubelet 单元文件。
+   {{< note >}}
+   你必须在要运行 etcd 的所有主机上执行此操作。
+   {{< /note >}}
+   由于 etcd 是首先创建的，因此你必须通过创建具有更高优先级的新文件来覆盖
+   kubeadm 提供的 kubelet 单元文件。
 
-    ```sh
-    cat << EOF > /etc/systemd/system/kubelet.service.d/20-etcd-service-manager.conf
-    [Service]
-    ExecStart=
-    #  Replace "systemd" with the cgroup driver of your container runtime. The default value in the kubelet is "cgroupfs".
-    ExecStart=/usr/bin/kubelet --address=127.0.0.1 --pod-manifest-path=/etc/kubernetes/manifests --cgroup-driver=systemd
-    Restart=always
-    EOF
+   ```sh
+   cat << EOF > /etc/systemd/system/kubelet.service.d/20-etcd-service-manager.conf
+   [Service]
+   ExecStart=
+   # 将下面的 "systemd" 替换为你的容器运行时所使用的 cgroup 驱动。
+   # kubelet 的默认值为 "cgroupfs"。
+   ExecStart=/usr/bin/kubelet --address=127.0.0.1 --pod-manifest-path=/etc/kubernetes/manifests --cgroup-driver=systemd
+   Restart=always
+   EOF
 
-    systemctl daemon-reload
-    systemctl restart kubelet
-    ```
+   systemctl daemon-reload
+   systemctl restart kubelet
+   ```
 
-    <!--
-    1.Create configuration files for kubeadm.
+   <!--
+   Check the kubelet status to ensure it is running.
+   -->
+   检查 kubelet 的状态以确保其处于运行状态：
 
-        Generate one kubeadm configuration file for each host that will have an etcd
-        member running on it using the following script.
-    -->
 
-1. 为 kubeadm 创建配置文件。
+   ```shell
+   systemctl status kubelet
+   ```
 
-    使用以下脚本为每个将要运行 etcd 成员的主机生成一个 kubeadm 配置文件。
+<!--
+1. Create configuration files for kubeadm.
 
-    <!--
-    ```sh
-    # Update HOST0, HOST1, and HOST2 with the IPs or resolvable names of your hosts
-    export HOST0=10.0.0.6
-    export HOST1=10.0.0.7
-    export HOST2=10.0.0.8
+   Generate one kubeadm configuration file for each host that will have an etcd
+   member running on it using the following script.
+-->
+2. 为 kubeadm 创建配置文件。
 
-    # Create temp directories to store files that will end up on other hosts.
-    mkdir -p /tmp/${HOST0}/ /tmp/${HOST1}/ /tmp/${HOST2}/
+   使用以下脚本为每个将要运行 etcd 成员的主机生成一个 kubeadm 配置文件。
 
-    ETCDHOSTS=(${HOST0} ${HOST1} ${HOST2})
-    NAMES=("infra0" "infra1" "infra2")
+   ```sh
+   # 使用 IP 或可解析的主机名替换 HOST0、HOST1 和 HOST2
+   export HOST0=10.0.0.6
+   export HOST1=10.0.0.7
+   export HOST2=10.0.0.8
 
-    for i in "${!ETCDHOSTS[@]}"; do
-    HOST=${ETCDHOSTS[$i]}
-    NAME=${NAMES[$i]}
-    cat << EOF > /tmp/${HOST}/kubeadmcfg.yaml
-    apiVersion: "kubeadm.k8s.io/v1beta2"
-    kind: ClusterConfiguration
-    etcd:
-        local:
-            serverCertSANs:
-            - "${HOST}"
-            peerCertSANs:
-            - "${HOST}"
-            extraArgs:
-                initial-cluster: infra0=https://${ETCDHOSTS[0]}:2380,infra1=https://${ETCDHOSTS[1]}:2380,infra2=https://${ETCDHOSTS[2]}:2380
-                initial-cluster-state: new
-                name: ${NAME}
-                listen-peer-urls: https://${HOST}:2380
-                listen-client-urls: https://${HOST}:2379
-                advertise-client-urls: https://${HOST}:2379
-                initial-advertise-peer-urls: https://${HOST}:2380
-    EOF
-    done
-    ```
-    -->
-    ```sh
-    # 使用 IP 或可解析的主机名替换 HOST0、HOST1 和 HOST2
-    export HOST0=10.0.0.6
-    export HOST1=10.0.0.7
-    export HOST2=10.0.0.8
+   # 创建临时目录来存储将被分发到其它主机上的文件
+   mkdir -p /tmp/${HOST0}/ /tmp/${HOST1}/ /tmp/${HOST2}/
 
-    # 创建临时目录来存储将被分发到其它主机上的文件
-    mkdir -p /tmp/${HOST0}/ /tmp/${HOST1}/ /tmp/${HOST2}/
+   ETCDHOSTS=(${HOST0} ${HOST1} ${HOST2})
+   NAMES=("infra0" "infra1" "infra2")
 
-    ETCDHOSTS=(${HOST0} ${HOST1} ${HOST2})
-    NAMES=("infra0" "infra1" "infra2")
+   for i in "${!ETCDHOSTS[@]}"; do
+   HOST=${ETCDHOSTS[$i]}
+   NAME=${NAMES[$i]}
+   cat << EOF > /tmp/${HOST}/kubeadmcfg.yaml
+   apiVersion: "kubeadm.k8s.io/v1beta2"
+   kind: ClusterConfiguration
+   etcd:
+       local:
+           serverCertSANs:
+           - "${HOST}"
+           peerCertSANs:
+           - "${HOST}"
+           extraArgs:
+               initial-cluster: infra0=https://${ETCDHOSTS[0]}:2380,infra1=https://${ETCDHOSTS[1]}:2380,infra2=https://${ETCDHOSTS[2]}:2380
+               initial-cluster-state: new
+               name: ${NAME}
+               listen-peer-urls: https://${HOST}:2380
+               listen-client-urls: https://${HOST}:2379
+               advertise-client-urls: https://${HOST}:2379
+               initial-advertise-peer-urls: https://${HOST}:2380
+   EOF
+   done
+   ```
 
-    for i in "${!ETCDHOSTS[@]}"; do
-    HOST=${ETCDHOSTS[$i]}
-    NAME=${NAMES[$i]}
-    cat << EOF > /tmp/${HOST}/kubeadmcfg.yaml
-    apiVersion: "kubeadm.k8s.io/v1beta2"
-    kind: ClusterConfiguration
-    etcd:
-        local:
-            serverCertSANs:
-            - "${HOST}"
-            peerCertSANs:
-            - "${HOST}"
-            extraArgs:
-                initial-cluster: infra0=https://${ETCDHOSTS[0]}:2380,infra1=https://${ETCDHOSTS[1]}:2380,infra2=https://${ETCDHOSTS[2]}:2380
-                initial-cluster-state: new
-                name: ${NAME}
-                listen-peer-urls: https://${HOST}:2380
-                listen-client-urls: https://${HOST}:2379
-                advertise-client-urls: https://${HOST}:2379
-                initial-advertise-peer-urls: https://${HOST}:2380
-    EOF
-    done
-    ```
+<!--
+1. Generate the certificate authority
 
-    <!--
-    1.Generate the certificate authority
+   If you already have a CA then the only action that is copying the CA's `crt` and
+   `key` file to `/etc/kubernetes/pki/etcd/ca.crt` and
+   `/etc/kubernetes/pki/etcd/ca.key`. After those files have been copied,
+   proceed to the next step, "Create certificates for each member".
+-->
+3. 生成证书颁发机构
 
-        If you already have a CA then the only action that is copying the CA's `crt` and
-        `key` file to `/etc/kubernetes/pki/etcd/ca.crt` and
-        `/etc/kubernetes/pki/etcd/ca.key`. After those files have been copied,
-        proceed to the next step, "Create certificates for each member".
-    -->
-1. 生成证书颁发机构
+   如果你已经拥有 CA，那么唯一的操作是复制 CA 的 `crt` 和 `key` 文件到
+   `etc/kubernetes/pki/etcd/ca.crt` 和 `/etc/kubernetes/pki/etcd/ca.key`。
+   复制完这些文件后继续下一步，“为每个成员创建证书”。
 
-    如果您已经拥有 CA，那么唯一的操作是复制 CA 的 `crt` 和 `key` 文件到 `etc/kubernetes/pki/etcd/ca.crt` 和 `/etc/kubernetes/pki/etcd/ca.key`。复制完这些文件后继续下一步，“为每个成员创建证书”。
+   <!--
+   If you do not already have a CA then run this command on `$HOST0` (where you generated the configuration files for kubeadm).
+   -->
+   如果你还没有 CA，则在 `$HOST0`（你为 kubeadm 生成配置文件的位置）上运行此命令。
 
-    <!--
-    If you do not already have a CA then run this command on `$HOST0` (where you generated the configuration files for kubeadm).
-    -->
-    如果您还没有 CA，则在 `$HOST0`（您为 kubeadm 生成配置文件的位置）上运行此命令。
+   ```
+   kubeadm init phase certs etcd-ca
+   ```
 
-    ```
-    kubeadm init phase certs etcd-ca
-    ```
+   <!--
+   This creates two files
+   -->
+   这一操作创建如下两个文件
 
-    <!--
-    This creates two files
-    -->
-    创建了如下两个文件
+   - `/etc/kubernetes/pki/etcd/ca.crt`
+   - `/etc/kubernetes/pki/etcd/ca.key`
 
-    - `/etc/kubernetes/pki/etcd/ca.crt`
-    - `/etc/kubernetes/pki/etcd/ca.key`
+<!--
+1. Create certificates for each member
+-->
+4. 为每个成员创建证书
 
-    <!--
-    1. Create certificates for each member
-    -->
-1. 为每个成员创建证书
+   ```shell
+   kubeadm init phase certs etcd-server --config=/tmp/${HOST2}/kubeadmcfg.yaml
+   kubeadm init phase certs etcd-peer --config=/tmp/${HOST2}/kubeadmcfg.yaml
+   kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
+   kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
+   cp -R /etc/kubernetes/pki /tmp/${HOST2}/
+   # 清理不可重复使用的证书
+   find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
 
-    <!--
-    ```sh
-    kubeadm init phase certs etcd-server --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-peer --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    cp -R /etc/kubernetes/pki /tmp/${HOST2}/
-    # cleanup non-reusable certificates
-    find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
+   kubeadm init phase certs etcd-server --config=/tmp/${HOST1}/kubeadmcfg.yaml
+   kubeadm init phase certs etcd-peer --config=/tmp/${HOST1}/kubeadmcfg.yaml
+   kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
+   kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
+   cp -R /etc/kubernetes/pki /tmp/${HOST1}/
+   find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
 
-    kubeadm init phase certs etcd-server --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-peer --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    cp -R /etc/kubernetes/pki /tmp/${HOST1}/
-    find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
+   kubeadm init phase certs etcd-server --config=/tmp/${HOST0}/kubeadmcfg.yaml
+   kubeadm init phase certs etcd-peer --config=/tmp/${HOST0}/kubeadmcfg.yaml
+   kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
+   kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
+   # 不需要移动 certs 因为它们是给 HOST0 使用的
 
-    kubeadm init phase certs etcd-server --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-peer --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    # No need to move the certs because they are for HOST0
+   # 清理不应从此主机复制的证书
+   find /tmp/${HOST2} -name ca.key -type f -delete
+   find /tmp/${HOST1} -name ca.key -type f -delete
+   ```
 
-    # clean up certs that should not be copied off this host
-    find /tmp/${HOST2} -name ca.key -type f -delete
-    find /tmp/${HOST1} -name ca.key -type f -delete
-    ```
-    -->
-    ```sh
-    kubeadm init phase certs etcd-server --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-peer --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
-    cp -R /etc/kubernetes/pki /tmp/${HOST2}/
-    # 清理不可重复使用的证书
-    find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
+<!--
+1. Copy certificates and kubeadm configs
+   The certificates have been generated and now they must be moved to their
+   respective hosts.
+-->
+5. 复制证书和 kubeadm 配置
 
-    kubeadm init phase certs etcd-server --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-peer --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
-    cp -R /etc/kubernetes/pki /tmp/${HOST1}/
-    find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
+   证书已生成，现在必须将它们移动到对应的主机。
 
-    kubeadm init phase certs etcd-server --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-peer --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    # 不需要移动 certs 因为它们是给 HOST0 使用的
+   ```shell
+   USER=ubuntu
+   HOST=${HOST1}
+   scp -r /tmp/${HOST}/* ${USER}@${HOST}:
+   ssh ${USER}@${HOST}
+   USER@HOST $ sudo -Es
+   root@HOST $ chown -R root:root pki
+   root@HOST $ mv pki /etc/kubernetes/
+   ```
 
-    # 清理不应从此主机复制的证书
-    find /tmp/${HOST2} -name ca.key -type f -delete
-    find /tmp/${HOST1} -name ca.key -type f -delete
-    ```
+<!--
+1. Ensure all expected files exist
 
-    <!--
-    1.Copy certificates and kubeadm configs
+   The complete list of required files on `$HOST0` is:
+-->
+6. 确保已经所有预期的文件都存在
 
-        The certificates have been generated and now they must be moved to their
-        respective hosts.
-    -->
-1. 复制证书和 kubeadm 配置
+   `$HOST0` 所需文件的完整列表如下：
 
-    证书已生成，现在必须将它们移动到对应的主机。
+   ```none
+   /tmp/${HOST0}
+   └── kubeadmcfg.yaml
+   ---
+   /etc/kubernetes/pki
+   ├── apiserver-etcd-client.crt
+   ├── apiserver-etcd-client.key
+   └── etcd
+       ├── ca.crt
+       ├── ca.key
+       ├── healthcheck-client.crt
+       ├── healthcheck-client.key
+       ├── peer.crt
+       ├── peer.key
+       ├── server.crt
+       └── server.key
+   ```
 
-    ```sh
-    USER=ubuntu
-    HOST=${HOST1}
-    scp -r /tmp/${HOST}/* ${USER}@${HOST}:
-    ssh ${USER}@${HOST}
-    USER@HOST $ sudo -Es
-    root@HOST $ chown -R root:root pki
-    root@HOST $ mv pki /etc/kubernetes/
-    ```
+   <!--
+   On `$HOST1`:
+   -->
+   在 `$HOST1` 上：
 
-    <!--
-    1.Ensure all expected files exist
+   ```
+   $HOME
+   └── kubeadmcfg.yaml
+   ---
+   /etc/kubernetes/pki
+   ├── apiserver-etcd-client.crt
+   ├── apiserver-etcd-client.key
+   └── etcd
+       ├── ca.crt
+       ├── healthcheck-client.crt
+       ├── healthcheck-client.key
+       ├── peer.crt
+       ├── peer.key
+       ├── server.crt
+       └── server.key
+   ```
 
-        The complete list of required files on `$HOST0` is:
-    -->
-1. 确保已经所有预期的文件都存在
+   <!--
+   On `$HOST2`
+   -->
+   在 `$HOST2` 上：
 
-    `$HOST0` 所需文件的完整列表如下：
+   ```
+   $HOME
+   └── kubeadmcfg.yaml
+   ---
+   /etc/kubernetes/pki
+   ├── apiserver-etcd-client.crt
+   ├── apiserver-etcd-client.key
+   └── etcd
+       ├── ca.crt
+       ├── healthcheck-client.crt
+       ├── healthcheck-client.key
+       ├── peer.crt
+       ├── peer.key
+       ├── server.crt
+       └── server.key
+   ```
 
-    ```
-    /tmp/${HOST0}
-    └── kubeadmcfg.yaml
-    ---
-    /etc/kubernetes/pki
-    ├── apiserver-etcd-client.crt
-    ├── apiserver-etcd-client.key
-    └── etcd
-        ├── ca.crt
-        ├── ca.key
-        ├── healthcheck-client.crt
-        ├── healthcheck-client.key
-        ├── peer.crt
-        ├── peer.key
-        ├── server.crt
-        └── server.key
-    ```
+<!--
+1. Create the static pod manifests
 
-    <!--
-    On `$HOST1`:
-    -->
-    在 `$HOST1`:
+   Now that the certificates and configs are in place it's time to create the
+   manifests. On each host run the `kubeadm` command to generate a static manifest
+   for etcd.
+-->
+7. 创建静态 Pod 清单
 
-    ```
-    $HOME
-    └── kubeadmcfg.yaml
-    ---
-    /etc/kubernetes/pki
-    ├── apiserver-etcd-client.crt
-    ├── apiserver-etcd-client.key
-    └── etcd
-        ├── ca.crt
-        ├── healthcheck-client.crt
-        ├── healthcheck-client.key
-        ├── peer.crt
-        ├── peer.key
-        ├── server.crt
-        └── server.key
-    ```
+   既然证书和配置已经就绪，是时候去创建清单了。
+   在每台主机上运行 `kubeadm` 命令来生成 etcd 使用的静态清单。
 
-    <!--
-    On `$HOST2`
-    -->
-    在 `$HOST2`
+   ```shell
+   root@HOST0 $ kubeadm init phase etcd local --config=/tmp/${HOST0}/kubeadmcfg.yaml
+   root@HOST1 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
+   root@HOST2 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
+   ```
 
-    ```
-    $HOME
-    └── kubeadmcfg.yaml
-    ---
-    /etc/kubernetes/pki
-    ├── apiserver-etcd-client.crt
-    ├── apiserver-etcd-client.key
-    └── etcd
-        ├── ca.crt
-        ├── healthcheck-client.crt
-        ├── healthcheck-client.key
-        ├── peer.crt
-        ├── peer.key
-        ├── server.crt
-        └── server.key
-    ```
+<!--
+1. Optional: Check the cluster health
+-->
+8. 可选：检查群集运行状况
 
-    <!--
-    1.Create the static pod manifests
-
-        Now that the certificates and configs are in place it's time to create the
-        manifests. On each host run the `kubeadm` command to generate a static manifest
-        for etcd.
-    -->
-1. 创建静态 Pod 清单
-
-    既然证书和配置已经就绪，是时候去创建清单了。在每台主机上运行 `kubeadm` 命令来生成 etcd 使用的静态清单。
-
-    ```sh
-    root@HOST0 $ kubeadm init phase etcd local --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    root@HOST1 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
-    root@HOST2 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
-    ```
-
-    <!--
-    1.Optional: Check the cluster health
-    -->
-1. 可选：检查群集运行状况
-
-    ```sh
-    docker run --rm -it \
-    --net host \
-    -v /etc/kubernetes:/etc/kubernetes k8s.gcr.io/etcd:${ETCD_TAG} etcdctl \
-    --cert /etc/kubernetes/pki/etcd/peer.crt \
-    --key /etc/kubernetes/pki/etcd/peer.key \
-    --cacert /etc/kubernetes/pki/etcd/ca.crt \
-    --endpoints https://${HOST0}:2379 endpoint health --cluster
-    ...
-    https://[HOST0 IP]:2379 is healthy: successfully committed proposal: took = 16.283339ms
-    https://[HOST1 IP]:2379 is healthy: successfully committed proposal: took = 19.44402ms
-    https://[HOST2 IP]:2379 is healthy: successfully committed proposal: took = 35.926451ms
-    ```
-    <!--
-    Set ${ETCD_TAG} to the version tag of your etcd image. For example 3.4.3-0. To see the etcd image and tag that             kubeadm uses execute kubeadm config images list --kubernetes-version ${K8S_VERSION}, where ${K8S_VERSION} is for           example v1.17.0
-    --> 
-    - 将 `${ETCD_TAG}` 设置为你的 etcd 镜像的版本标签，例如 `3.4.3-0`。要查看 kubeadm 使用的 etcd 镜像和标签，请执行 `kubeadm config images list --kubernetes-version ${K8S_VERSION}`，其中 `${K8S_VERSION}` 是 `v1.17.0` 作为例子。
-    <!--
-    Set ${HOST0}to the IP address of the host you are testing.
-    -->
-    - 将 `${HOST0}` 设置为要测试的主机的 IP 地址
+   ```shell
+   docker run --rm -it \
+   --net host \
+   -v /etc/kubernetes:/etc/kubernetes k8s.gcr.io/etcd:${ETCD_TAG} etcdctl \
+   --cert /etc/kubernetes/pki/etcd/peer.crt \
+   --key /etc/kubernetes/pki/etcd/peer.key \
+   --cacert /etc/kubernetes/pki/etcd/ca.crt \
+   --endpoints https://${HOST0}:2379 endpoint health --cluster
+   ...
+   https://[HOST0 IP]:2379 is healthy: successfully committed proposal: took = 16.283339ms
+   https://[HOST1 IP]:2379 is healthy: successfully committed proposal: took = 19.44402ms
+   https://[HOST2 IP]:2379 is healthy: successfully committed proposal: took = 35.926451ms
+   ```
+   <!--
+   Set ${ETCD_TAG} to the version tag of your etcd image. For example 3.4.3-0. To see the etcd image and tag that             kubeadm uses execute kubeadm config images list --kubernetes-version ${K8S_VERSION}, where ${K8S_VERSION} is for           example v1.17.0
+   Set ${HOST0}to the IP address of the host you are testing.
+   -->
+   - 将 `${ETCD_TAG}` 设置为你的 etcd 镜像的版本标签，例如 `3.4.3-0`。
+     要查看 kubeadm 使用的 etcd 镜像和标签，请执行
+     `kubeadm config images list --kubernetes-version ${K8S_VERSION}`，
+     例如，其中的 `${K8S_VERSION}` 可以是 `v1.17.0`。
+   - 将 `${HOST0}` 设置为要测试的主机的 IP 地址。
 
 ## {{% heading "whatsnext" %}}
 
@@ -422,7 +373,6 @@ highly available control plane using the [external etcd method with
 kubeadm](/docs/setup/independent/high-availability/).
 -->
 一旦拥有了一个正常工作的 3 成员的 etcd 集群，你就可以基于
-[使用 kubeadm 的外部 etcd 方法](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)，
+[使用 kubeadm 外部 etcd 的方法](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)，
 继续部署一个高可用的控制平面。
 
-
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
index 1eda24253f..38a04c2d94 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
@@ -101,11 +101,11 @@ This may be caused by a number of problems. The most common are:
 
   There are two common ways to fix the cgroup driver problem:
 
- 1. Install Docker again following instructions
+  1. Install Docker again following instructions
   [here](/docs/setup/production-environment/container-runtimes/#docker).
 
- 1. Change the kubelet config to match the Docker cgroup driver manually, you can refer to
-    [Configure cgroup driver used by kubelet on control-plane node](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)
+  1. Change the kubelet config to match the Docker cgroup driver manually, you can refer to
+     [Configure cgroup driver used by kubelet on control-plane node](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)
 
 - control plane Docker containers are crashlooping or hanging. You can check this by running `docker ps` and investigating each container by running `docker logs`.
 -->
@@ -122,7 +122,8 @@ This may be caused by a number of problems. The most common are:
 
   有两种常见方法可解决 cgroup 驱动程序问题：
 
-  1. 按照 [此处](/zh/docs/setup/production-environment/container-runtimes/#docker) 的说明再次安装 Docker。
+  1. 按照[此处](/zh/docs/setup/production-environment/container-runtimes/#docker) 的说明
+     重新安装 Docker。
 
   1. 更改 kubelet 配置以手动匹配 Docker cgroup 驱动程序，你可以参考
      [在主节点上配置 kubelet 要使用的 cgroup 驱动程序](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)
@@ -134,8 +135,11 @@ This may be caused by a number of problems. The most common are:
 
 The following could happen if Docker halts and does not remove any Kubernetes-managed containers:
 
-```bash
+```shell
 sudo kubeadm reset
+```
+
+```console
 [preflight] Running pre-flight checks
 [reset] Stopping the kubelet service
 [reset] Unmounting mounted directories in "/var/lib/kubelet"
@@ -145,14 +149,14 @@ sudo kubeadm reset
 
 A possible solution is to restart the Docker service and then re-run `kubeadm reset`:
 
-```bash
+```shell
 sudo systemctl restart docker.service
 sudo kubeadm reset
 ```
 
 Inspecting the logs for docker may also be useful:
 
-```sh
+```shell
 journalctl -ul docker
 ```
 -->
@@ -160,8 +164,11 @@ journalctl -ul docker
 
 如果 Docker 停止并且不删除 Kubernetes 所管理的所有容器，可能发生以下情况：
 
-```bash
+```shell
 sudo kubeadm reset
+```
+
+```none
 [preflight] Running pre-flight checks
 [reset] Stopping the kubelet service
 [reset] Unmounting mounted directories in "/var/lib/kubelet"
@@ -171,7 +178,7 @@ sudo kubeadm reset
 
 一个可行的解决方案是重新启动 Docker 服务，然后重新运行 `kubeadm reset`：
 
-```bash
+```shell
 sudo systemctl restart docker.service
 sudo kubeadm reset
 ```
@@ -189,10 +196,10 @@ Right after `kubeadm init` there should not be any pods in these states.
 
 - If there are pods in one of these states _right after_ `kubeadm init`, please open an
   issue in the kubeadm repo. `coredns` (or `kube-dns`) should be in the `Pending` state
-  until you have deployed the network solution.
+  until you have deployed the network add-on.
 - If you see Pods in the `RunContainerError`, `CrashLoopBackOff` or `Error` state
-  after deploying the network solution and nothing happens to `coredns` (or `kube-dns`),
-  it's very likely that the Pod Network solution that you installed is somehow broken.
+  after deploying the network add-on and nothing happens to `coredns` (or `kube-dns`),
+  it's very likely that the Pod Network add-on that you installed is somehow broken.
   You might have to grant it more RBAC privileges or use a newer version. Please file
   an issue in the Pod Network providers' issue tracker and get the issue triaged there.
 - If you install a version of Docker older than 1.12.1, remove the `MountFlags=slave` option
@@ -206,11 +213,11 @@ Right after `kubeadm init` there should not be any pods in these states.
 
 - 在 `kubeadm init` 命令执行完后，如果有 pods 处于这些状态之一，请在 kubeadm
   仓库提起一个 issue。`coredns` (或者 `kube-dns`) 应该处于 `Pending` 状态，
-  直到你部署了网络解决方案为止。
+  直到你部署了网络插件为止。
 
-- 如果在部署完网络解决方案之后，有 Pods 处于 `RunContainerError`、`CrashLoopBackOff`
+- 如果在部署完网络插件之后，有 Pods 处于 `RunContainerError`、`CrashLoopBackOff`
   或 `Error` 状态之一，并且`coredns` （或者 `kube-dns`）仍处于 `Pending` 状态，
-  那很可能是你安装的网络解决方案由于某种原因无法工作。你或许需要授予它更多的
+  那很可能是你安装的网络插件由于某种原因无法工作。你或许需要授予它更多的
   RBAC 特权或使用较新的版本。请在 Pod Network 提供商的问题跟踪器中提交问题，
   然后在此处分类问题。
 
@@ -221,17 +228,18 @@ Right after `kubeadm init` there should not be any pods in these states.
   当 Kubernetes 不能找到 `var/run/secrets/kubernetes.io/serviceaccount` 文件时会发生错误。
 
 <!--
-## `coredns` (or `kube-dns`) is stuck in the `Pending` state
+## `coredns` is stuck in the `Pending` state
 
 This is **expected** and part of the design. kubeadm is network provider-agnostic, so the admin
-should [install the pod network solution](/docs/concepts/cluster-administration/addons/)
+should [install the pod network add-on](/docs/concepts/cluster-administration/addons/)
 of choice. You have to install a Pod Network
 before CoreDNS may be deployed fully. Hence the `Pending` state before the network is set up.
 -->
-## `coredns` （或 `kube-dns`）停滞在 `Pending` 状态
+## `coredns` 停滞在 `Pending` 状态
 
 这一行为是 **预期之中** 的，因为系统就是这么设计的。
-kubeadm 的网络供应商是中立的，因此管理员应该选择 [安装 pod 的网络解决方案](/zh/docs/concepts/cluster-administration/addons/)。
+kubeadm 的网络供应商是中立的，因此管理员应该选择
+[安装 pod 的网络插件](/zh/docs/concepts/cluster-administration/addons/)。
 你必须完成 Pod 的网络配置，然后才能完全部署 CoreDNS。
 在网络被配置好之前，DNS 组件会一直处于 `Pending` 状态。
 
@@ -239,7 +247,7 @@ kubeadm 的网络供应商是中立的，因此管理员应该选择 [安装 pod
 ## `HostPort` services do not work
 
 The `HostPort` and `HostIP` functionality is available depending on your Pod Network
-provider. Please contact the author of the Pod Network solution to find out whether
+provider. Please contact the author of the Pod Network add-on to find out whether
 `HostPort` and `HostIP` functionality are available.
 
 Calico, Canal, and Flannel CNI providers are verified to support HostPort.
@@ -251,7 +259,7 @@ services](/docs/concepts/services-networking/service/#nodeport) or use `HostNetw
 -->
 ## `HostPort` 服务无法工作
 
-此 `HostPort` 和 `HostIP` 功能是否可用取决于你的 Pod 网络配置。请联系 Pod 解决方案的作者，
+此 `HostPort` 和 `HostIP` 功能是否可用取决于你的 Pod 网络配置。请联系 Pod 网络插件的作者，
 以确认 `HostPort` 和 `HostIP` 功能是否可用。
 
 已验证 Calico、Canal 和 Flannel CNI 驱动程序支持 HostPort。
@@ -663,3 +671,139 @@ kubectl taint nodes NODE_NAME node-role.kubernetes.io/master:NoSchedule-
    kubectl taint nodes NODE_NAME node-role.kubernetes.io/master:NoSchedule-
    ```
 
+<!--
+## `/usr` is mounted read-only on nodes {#usr-mounted-read-only}
+
+On Linux distributions such as Fedora CoreOS or Flatcar Container Linux, the directory `/usr` is mounted as a read-only filesystem.
+For [flex-volume support](https://github.com/kubernetes/community/blob/ab55d85/contributors/devel/sig-storage/flexvolume.md),
+Kubernetes components like the kubelet and kube-controller-manager use the default path of
+`/usr/libexec/kubernetes/kubelet-plugins/volume/exec/`, yet the flex-volume directory _must be writeable_
+for the feature to work.
+-->
+## 节点上的 `/usr` 被以只读方式挂载 {#usr-mounted-read-only}
+
+在类似 Fedora CoreOS 或者 Flatcar Container Linux 这类 Linux 发行版本中，
+目录 `/usr` 是以只读文件系统的形式挂载的。 
+在支持 [FlexVolume](https://github.com/kubernetes/community/blob/ab55d85/contributors/devel/sig-storage/flexvolume.md)时，
+类似 kubelet 和 kube-controller-manager 这类 Kubernetes 组件使用默认路径
+`/usr/libexec/kubernetes/kubelet-plugins/volume/exec/`，
+而 FlexVolume 的目录 _必须是可写入的_，该功能特性才能正常工作。
+
+<!--
+To workaround this issue you can configure the flex-volume directory using the kubeadm
+[configuration file](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2).
+
+On the primary control-plane Node (created using `kubeadm init`) pass the following
+file using `--config`:
+-->
+为了解决这个问题，你可以使用 kubeadm 的[配置文件](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)
+来配置 FlexVolume 的目录。
+
+在（使用 `kubeadm init` 创建的）主控制节点上，使用 `-config`
+参数传入如下文件：
+
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: InitConfiguration
+nodeRegistration:
+  kubeletExtraArgs:
+    volume-plugin-dir: "/opt/libexec/kubernetes/kubelet-plugins/volume/exec/"
+---
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: ClusterConfiguration
+controllerManager:
+  extraArgs:
+    flex-volume-plugin-dir: "/opt/libexec/kubernetes/kubelet-plugins/volume/exec/"
+```
+
+<!--
+On joining Nodes:
+-->
+在加入到集群中的节点上，使用下面的文件：
+
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: JoinConfiguration
+nodeRegistration:
+  kubeletExtraArgs:
+    volume-plugin-dir: "/opt/libexec/kubernetes/kubelet-plugins/volume/exec/"
+```
+
+<!--
+Alternatively, you can modify `/etc/fstab` to make the `/usr` mount writeable, but please
+be advised that this is modifying a design principle of the Linux distribution.
+-->
+或者，你要可以更改 `/etc/fstab` 使得 `/usr` 目录能够以可写入的方式挂载，不过
+请注意这样做本质上是在更改 Linux 发行版的某种设计原则。
+
+<!--
+## `kubeadm upgrade plan` prints out `context deadline exceeded` error message
+
+This error message is shown when upgrading a Kubernetes cluster with `kubeadm` in the case of running an external etcd. This is not a critical bug and happens because older versions of kubeadm perform a version check on the external etcd cluster. You can proceed with `kubeadm upgrade apply ...`.
+
+This issue is fixed as of version 1.19.
+-->
+## `kubeadm upgrade plan` 输出错误信息 `context deadline exceeded`
+
+在使用 `kubeadm` 来升级某运行外部 etcd 的 Kubernetes 集群时可能显示这一错误信息。
+这并不是一个非常严重的一个缺陷，之所以出现此错误信息，原因是老的 kubeadm
+版本会对外部 etcd 集群执行版本检查。你可以继续执行 `kubeadm upgrade apply ...`。
+
+这一问题已经在 1.19 版本中得到修复。
+
+<!--
+## `kubeadm reset` unmounts `/var/lib/kubelet`
+
+If `/var/lib/kubelet` is being mounted, performing a `kubeadm reset` will effectively unmount it.
+
+To workaround the issue, re-mount the `/var/lib/kubelet` directory after performing the `kubeadm reset` operation.
+
+This is a regression introduced in kubeadm 1.15. The issue is fixed in 1.20.
+-->
+## `kubeadm reset` 会卸载 `/var/lib/kubelet`
+
+如果已经挂载了 `/var/lib/kubelet` 目录，执行 `kubeadm reset` 操作的时候
+会将其卸载。
+
+要解决这一问题，可以在执行了 `kubeadm reset` 操作之后重新挂载
+`/var/lib/kubelet` 目录。
+
+这是一个在 1.15 中引入的故障，已经在 1.20 版本中修复。
+
+<!--
+## Cannot use the metrics-server securely in a kubeadm cluster
+
+In a kubeadm cluster, the [metrics-server](https://github.com/kubernetes-sigs/metrics-server)
+can be used insecurely by passing the `--kubelet-insecure-tls` to it. This is not recommended for production clusters.
+-->
+## 无法在 kubeadm 集群中安全地使用 metrics-server
+
+在 kubeadm 集群中可以通过为 [metrics-server](https://github.com/kubernetes-sigs/metrics-server)
+设置 `--kubelet-insecure-tls` 来以不安全的形式使用该服务。
+建议不要在生产环境集群中这样使用。
+
+<!--
+If you want to use TLS between the metrics-server and the kubelet there is a problem,
+since kubeadm deploys a self-signed serving certificate for the kubelet. This can cause the following errors
+on the side of the metrics-server:
+-->
+如果你需要在 metrics-server 和 kubelt 之间使用 TLS，会有一个问题，
+kubeadm 为 kubelt 部署的是自签名的服务证书。这可能会导致 metrics-server
+端报告下面的错误信息：
+
+```
+x509: certificate signed by unknown authority
+x509: certificate is valid for IP-foo not IP-bar
+```
+
+<!--
+See [Enabling signed kubelet serving certificates](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#kubelet-serving-certs)
+to understand how to configure the kubelets in a kubeadm cluster to have properly signed serving certificates.
+
+Also see [How to run the metrics-server securely](https://github.com/kubernetes-sigs/metrics-server/blob/master/FAQ.md#how-to-run-metrics-server-securely).
+-->
+参见[为 kubelet 启用签名的服务证书](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#kubelet-serving-certs)
+以进一步了解如何在 kubeadm 集群中配置 kubelet 使用正确签名了的服务证书。
+
+另请参阅[How to run the metrics-server securely](https://github.com/kubernetes-sigs/metrics-server/blob/master/FAQ.md#how-to-run-metrics-server-securely)。
+

From 2644caf717bed03a4603df9e9369ea2eb4a768b0 Mon Sep 17 00:00:00 2001
From: ydFu <ader.ydfu@gmail.com>
Date: Tue, 27 Apr 2021 14:56:50 +0800
Subject: [PATCH 652/788] [zh] Sync storage pages for ephemeral-volumes.md

* Sync with english version in '[en] Remove redundant feature gate introductions'(#27663)

Signed-off-by: ydFu <ader.ydfu@gmail.com>
---
 .../concepts/storage/ephemeral-volumes.md     | 43 ++++++++++++-------
 1 file changed, 27 insertions(+), 16 deletions(-)

diff --git a/content/zh/docs/concepts/storage/ephemeral-volumes.md b/content/zh/docs/concepts/storage/ephemeral-volumes.md
index 47eab07777..c5195ac56d 100644
--- a/content/zh/docs/concepts/storage/ephemeral-volumes.md
+++ b/content/zh/docs/concepts/storage/ephemeral-volumes.md
@@ -141,6 +141,7 @@ CSI ephemeral volumes are only supported by a subset of CSI drivers.
 The Kubernetes CSI [Drivers list](https://kubernetes-csi.github.io/docs/drivers.html)
 shows which drivers support ephemeral volumes.
 -->
+
 该特性需要启用参数 `CSIInlineVolume` 
 [特性门控（feature gate）](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
 该参数从 Kubernetes 1.16 开始默认启用。
@@ -158,7 +159,7 @@ Conceptually, CSI ephemeral volumes are similar to `configMap`,
 scheduled onto a node. Kubernetes has no concept of rescheduling Pods
 anymore at this stage. Volume creation has to be unlikely to fail,
 otherwise Pod startup gets stuck. In particular, [storage capacity
-aware Pod scheduling](/docs/concepts/storage-capacity/) is *not*
+aware Pod scheduling](/docs/concepts/storage/storage-capacity/) is *not*
 supported for these volumes. They are currently also not covered by
 the storage resource usage limits of a Pod, because that is something
 that kubelet can only enforce for storage that it manages itself.
@@ -218,19 +219,22 @@ As a cluster administrator, you can use a [PodSecurityPolicy](/docs/concepts/pol
 -->
 ### 通用临时卷 {#generic-ephemeral-volumes}
 
-{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 <!--
 This feature requires the `GenericEphemeralVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be
-enabled. Because this is an alpha feature, it is disabled by default.
+enabled. Because this is a beta feature, it is enabled by default.
 -->
 这个特性需要启用 `GenericEphemeralVolume` 
 [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
-因为这是一个alpha特性，默认禁用。
+因为这是一个 beta 特性，默认情况下启用。
 
 <!--
-Generic ephemeral volumes are similar to `emptyDir` volumes, just more
-flexible:
+Generic ephemeral volumes are similar to `emptyDir` volumes in the
+sense that they provide a per-pod directory for scratch data that is
+usually empty after provisioning. But they may also have additional
+features:
+
 - Storage can be local or network-attached.
 - Volumes can have a fixed size that Pods are not able to exceed.
 - Volumes may have some initial data, depending on the driver and
@@ -240,11 +244,13 @@ flexible:
   ([snapshotting](/docs/concepts/storage/volume-snapshots/),
   [cloning](/docs/concepts/storage/volume-pvc-datasource/),
   [resizing](/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims),
-  and [storage capacity tracking](/docs/concepts/storage-capacity/).
+  and [storage capacity tracking](/docs/concepts/storage/storage-capacity/).
 
 Example:
 -->
-通用临时卷类似于 `emptyDir` 卷，但更加灵活：
+通用临时卷与 `emptyDir` 卷类似，因为它们为暂存数据提供了一个 per-pod 的目录，该目录通常在置备后为空。
+但他们可能还会有其他特征：
+
 - 存储可以是本地的，也可以是网络连接的。
 - 卷可以有固定的大小，pod不能超量使用。
 - 卷可能有一些初始数据，这取决于驱动程序和参数。
@@ -408,23 +414,28 @@ two choices:
 集群管理员必须意识到这一点。
 如果这不符合他们的安全模型，他们有两种选择：
 <!--
-- Explicitly disable the feature through the feature gate, to avoid
-  being surprised when some future Kubernetes version enables it
-  by default.
+- Explicitly disable the feature through the feature gate.
 - Use a [Pod Security
   Policy](/docs/concepts/policy/pod-security-policy/) where the
-  `volumes` list does not contain the `ephemeral` volume type.
+  `volumes` list does not contain the `ephemeral` volume type
+  (deprecated in Kubernetes 1.21).
+- Use an [admission webhook](/docs/reference/access-authn-authz/extensible-admission-controllers/)
+  which rejects objects like Pods that have a generic ephemeral
+  volume.
 -->
-- 通过特性门控显式禁用该特性，可以避免将来的 Kubernetes 版本默认启用时带来混乱。
+- 通过特性门控显式禁用该特性。
 - 当`卷`列表不包含 `ephemeral` 卷类型时，使用
-  [Pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/)。
+  [Pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/)
+  （在 Kubernetes 1.21 中已弃用）。
+- 使用[准入 Webhook](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/)
+  拒绝像 Pod 这样具有通用临时卷。
 
 <!--
-The normal namespace quota for PVCs in a namespace still applies, so
+The normal [namespace quota for PVCs](/docs/concepts/policy/resource-quotas/#storage-resource-quota) still applies, so
 even if users are allowed to use this new mechanism, they cannot use
 it to circumvent other policies.
 -->
-在一个命名空间中，用于 PVCs 的常规命名空间配额仍然适用，
+在一个命名空间中，用于 PVCs 的常规命名空间配额[用于 PVCs 的常规命名空间配额](/zh/docs/concepts/policy/resource-quotas/#storage-resource-quota)仍然适用，
 因此即使允许用户使用这种新机制，他们也不能使用它来规避其他策略。
 
 ## {{% heading "whatsnext" %}}

From cdbad092a46039786d07fdbf979e50734547965c Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Mon, 26 Apr 2021 16:43:32 +0800
Subject: [PATCH 653/788] [zh]Resync Tutorials (1)

---
 content/zh/docs/tutorials/_index.md           |   4 +
 .../zh/docs/tutorials/clusters/apparmor.md    |  32 +-
 content/zh/docs/tutorials/clusters/seccomp.md |  12 +-
 content/zh/docs/tutorials/hello-minikube.md   |  12 +-
 .../basic-stateful-set.md                     | 305 ++++++++++++++----
 .../expose-external-ip-address.md             |   4 +-
 6 files changed, 281 insertions(+), 88 deletions(-)

diff --git a/content/zh/docs/tutorials/_index.md b/content/zh/docs/tutorials/_index.md
index 42415cafe2..821855b712 100644
--- a/content/zh/docs/tutorials/_index.md
+++ b/content/zh/docs/tutorials/_index.md
@@ -51,10 +51,14 @@ Kubernetes 文档的这一部分包含教程。每个教程展示了如何完成
 <!--
 ## Configuration
 
+* [Example: Configuring a Java Microservice](/docs/tutorials/configuration/configure-java-microservice/)
+
 * [Configuring Redis Using a ConfigMap](/docs/tutorials/configuration/configure-redis-using-configmap/)
 -->
 ## 配置
 
+* [示例：配置 Java 微服务](/zh/docs/tutorials/configuration/configure-java-microservice/)
+
 * [使用一个 ConfigMap 配置 Redis](/zh/docs/tutorials/configuration/configure-redis-using-configmap/)
 
 <!--
diff --git a/content/zh/docs/tutorials/clusters/apparmor.md b/content/zh/docs/tutorials/clusters/apparmor.md
index 5dcee5fac7..8d64c4cb74 100644
--- a/content/zh/docs/tutorials/clusters/apparmor.md
+++ b/content/zh/docs/tutorials/clusters/apparmor.md
@@ -1,12 +1,14 @@
 ---
-title: AppArmor
+title: 使用 AppArmor 限制容器对资源的访问
 content_type: tutorial
+weight: 10
 ---
 <!-- ---
 reviewers:
 - stclair
-title: AppArmor
+title: Restrict a Container's Access to Resources with AppArmor
 content_type: tutorial
+weight: 10
 --- -->
 
 <!-- overview -->
@@ -17,11 +19,15 @@ content_type: tutorial
 <!-- AppArmor is a Linux kernel security module that supplements the standard Linux user and group based
 permissions to confine programs to a limited set of resources. AppArmor can be configured for any
 application to reduce its potential attack surface and provide greater in-depth defense. It is
-configured through profiles tuned to whitelist the access needed by a specific program or container,
+configured through profiles tuned to allow the access needed by a specific program or container,
 such as Linux capabilities, network access, file permissions, etc. Each profile can be run in either
 *enforcing* mode, which blocks access to disallowed resources, or *complain* mode, which only reports
 violations. -->
-Apparmor 是一个 Linux 内核安全模块，它补充了标准的基于 Linux 用户和组的安全模块将程序限制为有限资源集的权限。AppArmor 可以配置为任何应用程序减少潜在的攻击面，并且提供更加深入的防御。AppArmor 是通过配置文件进行配置的，这些配置文件被调整为报名单，列出了特定程序或者容器所需要的访问权限，如 Linux 功能、网络访问、文件权限等。每个配置文件都可以在*强制*模式(阻止访问不允许的资源)或*投诉*模式(仅报告冲突)下运行。
+Apparmor 是一个 Linux 内核安全模块，它补充了标准的基于 Linux 用户和组的安全模块将程序限制为有限资源集的权限。
+AppArmor 可以配置为任何应用程序减少潜在的攻击面，并且提供更加深入的防御。
+AppArmor 是通过配置文件进行配置的，这些配置文件被调整为允许特定程序或者容器访问，如 Linux 功能、网络访问、文件权限等。
+每个配置文件都可以在*强制（enforcing）*模式（阻止访问不允许的资源）或*投诉（complain）*模式
+（仅报告冲突）下运行。
 
 
 
@@ -244,9 +250,8 @@ k8s-apparmor-example-deny-write (enforce)
 <!-- *This example assumes you have already set up a cluster with AppArmor support.* -->
 *本例假设您已经使用 AppArmor 支持设置了一个集群。*
 
-<!-- First, we need to load the profile we want to use onto our nodes. The profile we'll use simply
-denies all file writes: -->
-首先，我们需要将要使用的配置文件加载到节点上。我们将使用的配置文件仅拒绝所有文件写入：
+<!-- First, we need to load the profile we want to use onto our nodes. This profile denies all file writes: -->
+首先，我们需要将要使用的配置文件加载到节点上。配置文件拒绝所有文件写入：
 
 ```shell
 #include <tunables/global>
@@ -259,9 +264,12 @@ profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
 ```
 
 <!-- Since we don't know where the Pod will be scheduled, we'll need to load the profile on all our
-nodes. For this example we'll just use SSH to install the profiles, but other approaches are
-discussed in [Setting up nodes with profiles](#setting-up-nodes-with-profiles). -->
-由于我们不知道 Pod 将被安排在那里，我们需要在所有节点上加载配置文件。在本例中，我们将只使用 SSH 来安装概要文件，但是在[使用配置文件设置节点](#setting-up-nodes-with-profiles)中讨论了其他方法。
+nodes. For this example we'll use SSH to install the profiles, but other approaches are
+discussed in [Setting up nodes with profiles](#setting-up-nodes-with-profiles). 
+-->
+由于我们不知道 Pod 将被调度到哪里，我们需要在所有节点上加载配置文件。
+在本例中，我们将使用 SSH 来安装概要文件，但是在[使用配置文件设置节点](#setting-up-nodes-with-profiles)
+中讨论了其他方法。
 
 ```shell
 NODES=(
@@ -403,9 +411,9 @@ Events:
   23s          23s         1        {kubelet e2e-test-stclair-node-pool-t1f5}             Warning        AppArmor    Cannot enforce AppArmor: profile "k8s-apparmor-example-allow-write" is not loaded
 ```
 
-<!-- Note the pod status is Failed, with a helpful error message: `Pod Cannot enforce AppArmor: profile
+<!-- Note the pod status is Pending, with a helpful error message: `Pod Cannot enforce AppArmor: profile
 "k8s-apparmor-example-allow-write" is not loaded`. An event was also recorded with the same message. -->
-注意 pod 呈现失败状态，并且显示一条有用的错误信息：`Pod Cannot enforce AppArmor: profile
+注意 pod 呈现 Pending 状态，并且显示一条有用的错误信息：`Pod Cannot enforce AppArmor: profile
 "k8s-apparmor-example-allow-write" 未加载`。还用相同的消息记录了一个事件。
 
 <!-- ## Administration -->
diff --git a/content/zh/docs/tutorials/clusters/seccomp.md b/content/zh/docs/tutorials/clusters/seccomp.md
index 693eb57645..9f8d7dc2f3 100644
--- a/content/zh/docs/tutorials/clusters/seccomp.md
+++ b/content/zh/docs/tutorials/clusters/seccomp.md
@@ -52,14 +52,14 @@ Kubernetes 允许你将加载到节点上的 seccomp 配置文件自动应用于
 <!--
 In order to complete all steps in this tutorial, you must install
 [kind](https://kind.sigs.k8s.io/docs/user/quick-start/) and
-[kubectl](/docs/tasks/tools/install-kubectl/). This tutorial will show examples
+[kubectl](/docs/tasks/tools/). This tutorial will show examples
 with both alpha (pre-v1.19) and generally available seccomp functionality, so
 make sure that your cluster is [configured
 correctly](https://kind.sigs.k8s.io/docs/user/quick-start/#setting-kubernetes-version)
 for the version you are using.
 -->
 为了完成本教程中的所有步骤，你必须安装 [kind](https://kind.sigs.k8s.io/docs/user/quick-start/) 
-和 [kubectl](/zh/docs/tasks/tools/install-kubectl/)。本教程将显示同时具有 alpha（v1.19 之前的版本）
+和 [kubectl](/zh/docs/tasks/tools/)。本教程将显示同时具有 alpha（v1.19 之前的版本）
 和通常可用的 seccomp 功能的示例，因此请确保为所使用的版本[正确配置](https://kind.sigs.k8s.io/docs/user/quick-start/#setting-kubernetes-version)了集群。
 
 <!-- steps -->
@@ -91,8 +91,8 @@ into the cluster.
 
 For simplicity, [kind](https://kind.sigs.k8s.io/) can be used to create a single
 node cluster with the seccomp profiles loaded. Kind runs Kubernetes in Docker,
-so each node of the cluster is actually just a container. This allows for files
-to be mounted in the filesystem of each container just as one might load files
+so each node of the cluster is a container. This allows for files
+to be mounted in the filesystem of each container similar to loading files
 onto a node.
 
 Download the example above, and save it to a file named `kind.yaml`. Then create
@@ -101,8 +101,8 @@ the cluster with the configuration.
 ## 使用 Kind 创建一个本地 Kubernetes 集群
 
 为简单起见，可以使用 [kind](https://kind.sigs.k8s.io/) 创建一个已经加载 seccomp 配置文件的单节点集群。
-Kind 在 Docker 中运行 Kubernetes，因此集群的每个节点实际上只是一个容器。这允许将文件挂载到每个容器的文件系统中，
-就像将文件挂载到节点上一样。
+Kind 在 Docker 中运行 Kubernetes，因此集群的每个节点都是一个容器。这允许将文件挂载到每个容器的文件系统中，
+类似于将文件挂载到节点上。
 
 {{< codenew file="pods/security/seccomp/kind.yaml" >}}
 <br>
diff --git a/content/zh/docs/tutorials/hello-minikube.md b/content/zh/docs/tutorials/hello-minikube.md
index c07f99998b..0fc6b828d7 100644
--- a/content/zh/docs/tutorials/hello-minikube.md
+++ b/content/zh/docs/tutorials/hello-minikube.md
@@ -112,7 +112,7 @@ This tutorial provides a container image that uses NGINX to echo back all the re
 <!--
 The `dashboard` command enables the dashboard add-on and opens the proxy in the default web browser. You can create Kubernetes resources on the dashboard such as Deployment and Service.
 
-If you are running in an environment as root, see [Open Dashboard with URL](/docs/tutorials/hello-minikube#open-dashboard-with-url).
+If you are running in an environment as root, see [Open Dashboard with URL](#open-dashboard-with-url).
 
 To stop the proxy, run `Ctrl+C` to exit the process. The dashboard remains running.
 -->
@@ -120,7 +120,7 @@ To stop the proxy, run `Ctrl+C` to exit the process. The dashboard remains runni
 `dashboard` 命令启用仪表板插件，并在默认的 Web 浏览器中打开代理。你可以在仪表板上创建 Kubernetes 资源，例如 Deployment 和 Service。
 
 如果你以 root 用户身份在环境中运行，
-请参见[使用 URL 打开仪表板](/zh/docs/tutorials/hello-minikube#open-dashboard-with-url)。
+请参见[使用 URL 打开仪表板](#open-dashboard-with-url)。
 
 要停止代理，请运行 `Ctrl+C` 退出该进程。仪表板仍在运行中。
 {{< /note >}}
@@ -273,9 +273,9 @@ Kubernetes [*Service*](/docs/concepts/services-networking/service/).
    如果你用 `kubectl expose` 暴露了其它的端口，客户端将不能访问其它端口。
 
 <!--
-2. View the Service you just created:
+2. View the Service you created:
 -->
-2. 查看你刚刚创建的 Service：
+2. 查看你创建的 Service：
 
    ```shell
    kubectl get services
@@ -391,9 +391,9 @@ Minikube 有一组内置的 {{< glossary_tooltip text="插件" term_id="addons"
    ```
 
 <!--
-3. View the Pod and Service you just created:
+3. View the Pod and Service you created:
 -->
-3. 查看刚才创建的 Pod 和 Service：
+3. 查看创建的 Pod 和 Service：
 
    ```shell
    kubectl get pod,svc -n kube-system
diff --git a/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md b/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
index 0dd5ddcf1a..4fe30daece 100644
--- a/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -120,6 +120,8 @@ Headless Service and StatefulSet defined in `web.yaml`.
 
 ```shell
 kubectl apply -f web.yaml
+```
+```
 service/nginx created
 statefulset.apps/web created
 ```
@@ -134,10 +136,19 @@ The command above creates two Pods, each running an
 
 ```shell
 kubectl get service nginx
+```
+```
 NAME      TYPE         CLUSTER-IP   EXTERNAL-IP   PORT(S)   AGE
 nginx     ClusterIP    None         <none>        80/TCP    12s
-
+```
+<!--
+...then get the `web` StatefulSet, to verify that both were created successfully:
+-->
+...然后获取 `web` StatefulSet，以验证两者均已成功创建：
+```shell
 kubectl get statefulset web
+```
+```
 NAME      DESIRED   CURRENT   AGE
 web       2         1         20s
 ```
@@ -159,6 +170,8 @@ look like the example below.
 
 ```shell
 kubectl get pods -w -l app=nginx
+```
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     0/1       Pending   0          0s
 web-0     0/1       Pending   0         0s
@@ -200,10 +213,11 @@ StatefulSet 中的 Pod 拥有一个唯一的顺序索引和稳定的网络身份
 
 ```shell
 kubectl get pods -l app=nginx
+```
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     1/1       Running   0          1m
 web-1     1/1       Running   0          1m
-
 ```
 
 <!--
@@ -228,7 +242,9 @@ Each Pod has a stable hostname based on its ordinal index. Use
 每个 Pod 都拥有一个基于其顺序索引的稳定的主机名。使用[`kubectl exec`](/zh/docs/reference/generated/kubectl/kubectl-commands/#exec)在每个 Pod 中执行`hostname`。
 
 ```shell
-for i in 0 1; do kubectl exec web-$i -- sh -c 'hostname'; done
+for i in 0 1; do kubectl exec "web-$i" -- sh -c 'hostname'; done
+```
+```
 web-0
 web-1
 ```
@@ -244,7 +260,20 @@ addresses.
 
 ```shell
 kubectl run -i --tty --image busybox:1.28 dns-test --restart=Never --rm
+```
+<!--
+which starts a new shell. In that new shell, run:
+-->
+这将启动一个新的 shell。在新 shell 中，运行：
+```shell
+# Run this in the dns-test container shell
 nslookup web-0.nginx
+```
+<!--
+The output is similar to:
+-->
+输出类似于：
+```
 Server:    10.0.0.10
 Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
 
@@ -284,6 +313,8 @@ the Pods in the StatefulSet.
 
 ```shell
 kubectl delete pod -l app=nginx
+```
+```
 pod "web-0" deleted
 pod "web-1" deleted
 ```
@@ -297,6 +328,8 @@ Running and Ready.
 
 ```shell
 kubectl get pod -w -l app=nginx
+```
+```
 NAME      READY     STATUS              RESTARTS   AGE
 web-0     0/1       ContainerCreating   0          0s
 NAME      READY     STATUS    RESTARTS   AGE
@@ -316,11 +349,32 @@ DNS entries.
 
 ```shell
 for i in 0 1; do kubectl exec web-$i -- sh -c 'hostname'; done
+```
+```
 web-0
 web-1
-
+```
+<!--
+then, run:
+-->
+然后，运行：
+```
 kubectl run -i --tty --image busybox:1.28 dns-test --restart=Never --rm /bin/sh
+```
+<!--
+which starts a new shell.  
+In that new shell, run:
+-->
+这将启动一个新的 shell。在新 shell 中，运行：
+```shell
+# Run this in the dns-test container shell
 nslookup web-0.nginx
+```
+<!--
+The output is similar to:
+-->
+输出类似于：
+```
 Server:    10.0.0.10
 Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
 
@@ -377,6 +431,12 @@ Get the PersistentVolumeClaims for `web-0` and `web-1`.
 
 ```shell
 kubectl get pvc -l app=nginx
+```
+<!--
+The output is similar to:
+-->
+输出类似于：
+```
 NAME        STATUS    VOLUME                                     CAPACITY   ACCESSMODES   AGE
 www-web-0   Bound     pvc-15c268c7-b507-11e6-932f-42010a800002   1Gi        RWO           48s
 www-web-1   Bound     pvc-15c79307-b507-11e6-932f-42010a800002   1Gi        RWO           48s
@@ -405,30 +465,35 @@ NGINX web 服务器默认会加载位于 `/usr/share/nginx/html/index.html` 的
 将 Pod 的主机名写入它们的`index.html`文件并验证 NGINX web 服务器使用该主机名提供服务。
 
 ```shell
-for i in 0 1; do kubectl exec web-$i -- sh -c 'echo $(hostname) > /usr/share/nginx/html/index.html'; done
+for i in 0 1; do kubectl exec "web-$i" -- sh -c 'echo "$(hostname)" > /usr/share/nginx/html/index.html'; done
 
-for i in 0 1; do kubectl exec -it web-$i -- curl localhost; done
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+```
 web-0
 web-1
 ```
 
 {{< note >}}
 <!--
-If you instead see 403 Forbidden responses for the above curl command,
+If you instead see **403 Forbidden** responses for the above curl command,
 you will need to fix the permissions of the directory mounted by the `volumeMounts`
-(due to a [bug when using hostPath volumes](https://github.com/kubernetes/kubernetes/issues/2630)) with:
+(due to a [bug when using hostPath volumes](https://github.com/kubernetes/kubernetes/issues/2630)),
+by running:
 -->
 
-请注意，如果你看见上面的 curl 命令返回了 403 Forbidden 的响应，你需要像这样修复使用 `volumeMounts`（due to a [bug when using hostPath volumes](https://github.com/kubernetes/kubernetes/issues/2630)）挂载的目录的权限：
+请注意，如果你看见上面的 curl 命令返回了 **403 Forbidden** 的响应，你需要像这样修复使用 `volumeMounts`
+（原因归咎于[使用 hostPath 卷时存在的缺陷](https://github.com/kubernetes/kubernetes/issues/2630)）
+挂载的目录的权限
+运行：
+
+`for i in 0 1; do kubectl exec web-$i -- chmod 755 /usr/share/nginx/html; done`
 
-```shell
-for i in 0 1; do kubectl exec web-$i -- chmod 755 /usr/share/nginx/html; done
-```
 <!--
-before retrying the curl command above.
+before retrying the `curl` command above.
 -->
 
-在你重新尝试上面的 curl 命令之前。
+在你重新尝试上面的 `curl` 命令之前。
 {{< /note >}}
 
 <!--
@@ -449,6 +514,8 @@ In a second terminal, delete all of the StatefulSet's Pods.
 
 ```shell
 kubectl delete pod -l app=nginx
+```
+```
 pod "web-0" deleted
 pod "web-1" deleted
 ```
@@ -461,6 +528,8 @@ for all of the Pods to transition to Running and Ready.
 
 ```shell
 kubectl get pod -w -l app=nginx
+```
+```
 NAME      READY     STATUS              RESTARTS   AGE
 web-0     0/1       ContainerCreating   0          0s
 NAME      READY     STATUS    RESTARTS   AGE
@@ -478,7 +547,9 @@ Verify the web servers continue to serve their hostnames.
 验证所有 web 服务器在继续使用它们的主机名提供服务。
 
 ```
-for i in 0 1; do kubectl exec -it web-$i -- curl localhost; done
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+```
 web-0
 web-1
 ```
@@ -526,6 +597,8 @@ to 5.-->
 
 ```shell
 kubectl scale sts web --replicas=5
+```
+```
 statefulset.apps/web scaled
 ```
 <!--
@@ -537,6 +610,8 @@ for the three additional Pods to transition to Running and Ready.
 
 ```shell
 kubectl get pods -w -l app=nginx
+```
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     1/1       Running   0          2h
 web-1     1/1       Running   0          2h
@@ -587,8 +662,9 @@ three replicas.
 
 ```shell
 kubectl patch sts web -p '{"spec":{"replicas":3}}'
+```
+```
 statefulset.apps/web patched
-
 ```
 
 <!--
@@ -597,8 +673,10 @@ Wait for `web-4` and `web-3` to transition to Terminating.
 
 等待 `web-4` 和 `web-3` 状态变为 Terminating。
 
-```
+```shell
 kubectl get pods -w -l app=nginx
+```
+```
 NAME      READY     STATUS              RESTARTS   AGE
 web-0     1/1       Running             0          3h
 web-1     1/1       Running             0          3h
@@ -633,6 +711,8 @@ Get the StatefulSet's PersistentVolumeClaims.
 
 ```shell
 kubectl get pvc -l app=nginx
+```
+```
 NAME        STATUS    VOLUME                                     CAPACITY   ACCESSMODES   AGE
 www-web-0   Bound     pvc-15c268c7-b507-11e6-932f-42010a800002   1Gi        RWO           13h
 www-web-1   Bound     pvc-15c79307-b507-11e6-932f-42010a800002   1Gi        RWO           13h
@@ -684,6 +764,8 @@ Patch `web` StatefulSet 来执行 `RollingUpdate` 更新策略。
 
 ```shell
 kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate"}}}'
+```
+```
 statefulset.apps/web patched
 ```
 <!--
@@ -695,8 +777,9 @@ image again.
 
 ```shell
 kubectl patch statefulset web --type='json' -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/image", "value":"gcr.io/google_containers/nginx-slim:0.8"}]'
+```
+```
 statefulset.apps/web patched
-
 ```
 
 <!--
@@ -707,6 +790,12 @@ In another terminal, watch the Pods in the StatefulSet.
 
 ```shell
 kubectl get po -l app=nginx -w
+```
+<!--
+The output is similar to:
+-->
+输出类似于：
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     1/1       Running   0          7m
 web-1     1/1       Running   0          7m
@@ -761,7 +850,9 @@ StatefulSet 里的 Pod 采用和序号相反的顺序更新。在更新下一个
 获取 Pod 来查看他们的容器镜像。
 
 ```shell
-for p in 0 1 2; do kubectl get po web-$p --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'; echo; done
+for p in 0 1 2; do kubectl get pod "web-$p" --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'; echo; done
+```
+```
 k8s.gcr.io/nginx-slim:0.8
 k8s.gcr.io/nginx-slim:0.8
 k8s.gcr.io/nginx-slim:0.8
@@ -798,6 +889,8 @@ Patch `web` StatefulSet 来对 `updateStrategy` 字段添加一个分区。
 
 ```shell
 kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate","rollingUpdate":{"partition":3}}}}'
+```
+```
 statefulset.apps/web patched
 ```
 
@@ -809,6 +902,8 @@ Patch the StatefulSet again to change the container's image.
 
 ```shell
 kubectl patch statefulset web --type='json' -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/image", "value":"k8s.gcr.io/nginx-slim:0.7"}]'
+```
+```
 statefulset.apps/web patched
 ```
 
@@ -819,7 +914,9 @@ Delete a Pod in the StatefulSet.
 删除 StatefulSet 中的 Pod。
 
 ```shell
-kubectl delete po web-2
+kubectl delete pod web-2
+```
+```
 pod "web-2" deleted
 ```
 
@@ -830,7 +927,9 @@ Wait for the Pod to be Running and Ready.
 等待 Pod 变成 Running 和 Ready。
 
 ```shell
-kubectl get po -lapp=nginx -w
+kubectl get pod -l app=nginx -w
+```
+```
 NAME      READY     STATUS              RESTARTS   AGE
 web-0     1/1       Running             0          4m
 web-1     1/1       Running             0          4m
@@ -845,10 +944,10 @@ Get the Pod's container.
 获取 Pod 的容器。
 
 ```shell
-kubectl get po web-2 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+kubectl get pod web-2 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+```
+```
 k8s.gcr.io/nginx-slim:0.8
-
-
 ```
 
 <!--
@@ -876,6 +975,8 @@ Patch the StatefulSet to decrement the partition.
 
 ```shell
 kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate","rollingUpdate":{"partition":2}}}}'
+```
+```
 statefulset.apps/web patched
 ```
 
@@ -886,7 +987,9 @@ Wait for `web-2` to be Running and Ready.
 等待 `web-2` 变成 Running 和 Ready。
 
 ```shell
-kubectl get po -lapp=nginx -w
+kubectl get pod -l app=nginx -w
+```
+```
 NAME      READY     STATUS              RESTARTS   AGE
 web-0     1/1       Running             0          4m
 web-1     1/1       Running             0          4m
@@ -901,7 +1004,9 @@ Get the Pod's container.
 获取 Pod 的容器。
 
 ```shell
-kubectl get po web-2 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+kubectl get pod web-2 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+```
+```
 k8s.gcr.io/nginx-slim:0.7
 
 ```
@@ -920,7 +1025,9 @@ Delete the `web-1` Pod.
 删除 `web-1` Pod。
 
 ```shell
-kubectl delete po web-1
+kubectl delete pod web-1
+```
+```
 pod "web-1" deleted
 ```
 
@@ -931,7 +1038,13 @@ Wait for the `web-1` Pod to be Running and Ready.
 等待 `web-1` 变成 Running 和 Ready。
 
 ```shell
-kubectl get po -lapp=nginx -w
+kubectl get pod -l app=nginx -w
+```
+<!--
+The output is similar to:
+-->
+输出类似于：
+```
 NAME      READY     STATUS        RESTARTS   AGE
 web-0     1/1       Running       0          6m
 web-1     0/1       Terminating   0          6m
@@ -952,7 +1065,9 @@ Get the `web-1` Pods container.
 获取 `web-1` Pod 的容器。
 
 ```shell
-kubectl get po web-1 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+kubectl get pod web-1 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+```
+```
 k8s.gcr.io/nginx-slim:0.8
 ```
 
@@ -986,6 +1101,8 @@ The partition is currently set to `2`. Set the partition to `0`.
 
 ```shell
 kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate","rollingUpdate":{"partition":0}}}}'
+```
+```
 statefulset.apps/web patched
 ```
 
@@ -996,7 +1113,13 @@ Wait for all of the Pods in the StatefulSet to become Running and Ready.
 等待 StatefulSet 中的所有 Pod 变成 Running 和 Ready。
 
 ```shell
-kubectl get po -lapp=nginx -w
+kubectl get pod -l app=nginx -w
+```
+<!--
+The output is similar to:
+-->
+输出类似于：
+```
 NAME      READY     STATUS              RESTARTS   AGE
 web-0     1/1       Running             0          3m
 web-1     0/1       ContainerCreating   0          11s
@@ -1020,11 +1143,12 @@ Get the Pod's containers.
 获取 Pod 的容器。
 
 ```shell
-for p in 0 1 2; do kubectl get po web-$p --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'; echo; done
+for p in 0 1 2; do kubectl get pod "web-$p" --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'; echo; done
+```
+```
 k8s.gcr.io/nginx-slim:0.7
 k8s.gcr.io/nginx-slim:0.7
 k8s.gcr.io/nginx-slim:0.7
-
 ```
 
 <!--
@@ -1083,6 +1207,8 @@ not delete any of its Pods.
 
 ```shell
 kubectl delete statefulset web --cascade=false
+```
+```
 statefulset.apps "web" deleted
 ```
 
@@ -1094,6 +1220,8 @@ Get the Pods to examine their status.
 
 ```shell
 kubectl get pods -l app=nginx
+```
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     1/1       Running   0          6m
 web-1     1/1       Running   0          7m
@@ -1110,6 +1238,8 @@ Delete `web-0`.
 
 ```shell
 kubectl delete pod web-0
+```
+```
 pod "web-0" deleted
 ```
 
@@ -1121,6 +1251,8 @@ Get the StatefulSet's Pods.
 
 ```shell
 kubectl get pods -l app=nginx
+```
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-1     1/1       Running   0          10m
 web-2     1/1       Running   0          7m
@@ -1150,9 +1282,10 @@ an error indicating that the Service already exists.
 
 ```shell
 kubectl apply -f web.yaml
+```
+```
 statefulset.apps/web created
 service/nginx unchanged
-
 ```
 <!--
 Ignore the error. It only indicates that an attempt was made to create the nginx
@@ -1168,6 +1301,8 @@ Examine the output of the `kubectl get` command running in the first terminal.
 
 ```shell
 kubectl get pods -w -l app=nginx
+```
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-1     1/1       Running   0          16m
 web-2     1/1       Running   0          2m
@@ -1185,22 +1320,28 @@ web-2     0/1       Terminating   0         3m
 <!--
 When the `web` StatefulSet was recreated, it first relaunched `web-0`.
 Since `web-1` was already Running and Ready, when `web-0` transitioned to
- Running and Ready, it simply adopted this Pod. Since you recreated the StatefulSet
- with `replicas` equal to 2, once `web-0` had been recreated, and once
- `web-1` had been determined to already be Running and Ready, `web-2` was
- terminated.
+Running and Ready, it adopted this Pod. Since you recreated the StatefulSet
+with `replicas` equal to 2, once `web-0` had been recreated, and once
+`web-1` had been determined to already be Running and Ready, `web-2` was
+terminated.
 
 Let's take another look at the contents of the `index.html` file served by the
-Pods' webservers.
+Pods' webservers:
 -->
 
-当重新创建 `web` StatefulSet 时，`web-0`被第一个重新启动。由于 `web-1` 已经处于 Running 和 Ready 状态，当 `web-0` 变成 Running 和 Ready 时，StatefulSet 会直接接收这个 Pod。由于你重新创建的 StatefulSet 的 `replicas` 等于 2，一旦 `web-0` 被重新创建并且 `web-1` 被认为已经处于 Running 和 Ready 状态时，`web-2`将会被终止。
+当重新创建 `web` StatefulSet 时，`web-0` 被第一个重新启动。
+由于 `web-1` 已经处于 Running 和 Ready 状态，当 `web-0` 变成 Running 和 Ready 时，
+StatefulSet 会接收这个 Pod。由于你重新创建的 StatefulSet 的 `replicas` 等于 2，
+一旦 `web-0` 被重新创建并且 `web-1` 被认为已经处于 Running 和 Ready 状态时，`web-2` 将会被终止。
 
 
-让我们再看看被 Pod 的 web 服务器加载的 `index.html` 的内容。
+让我们再看看被 Pod 的 web 服务器加载的 `index.html` 的内容：
 
 ```shell
-for i in 0 1; do kubectl exec -it web-$i -- curl localhost; done
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+
+```
 web-0
 web-1
 ```
@@ -1229,11 +1370,17 @@ In one terminal window, watch the Pods in the StatefulSet.
 kubectl get pods -w -l app=nginx
 ```
 
+<!--
+In another terminal, delete the StatefulSet again. This time, omit the
+-->
 
 在另一个窗口中再次删除这个 StatefulSet。这次省略 `--cascade=false` 参数。
 
 ```shell
 kubectl delete statefulset web
+```
+
+```
 statefulset.apps "web" deleted
 ```
 
@@ -1246,6 +1393,9 @@ and wait for all of the Pods to transition to Terminating.
 
 ```shell
 kubectl get pods -w -l app=nginx
+```
+
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     1/1       Running   0          11m
 web-1     1/1       Running   0          27m
@@ -1279,6 +1429,9 @@ must delete the `nginx` Service manually.
 
 ```shell
 kubectl delete service nginx
+```
+
+```
 service "nginx" deleted
 ```
 
@@ -1290,9 +1443,11 @@ Recreate the StatefulSet and Headless Service one more time.
 
 ```shell
 kubectl apply -f web.yaml
+```
+
+```
 service/nginx created
 statefulset.apps/web created
-
 ```
 
 <!--
@@ -1303,7 +1458,10 @@ the contents of their `index.html` files.
 当 StatefulSet 所有的 Pod 变成 Running 和 Ready 时，获取它们的 `index.html` 文件的内容。
 
 ```shell
-for i in 0 1; do kubectl exec -it web-$i -- curl localhost; done
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+
+```
 web-0
 web-1
 ```
@@ -1324,13 +1482,17 @@ Finally delete the `web` StatefulSet and the `nginx` service.
 ```shell
 kubectl delete service nginx
 ```
+
 ```
 service "nginx" deleted
 ```
+
 ... 并且删除 `web` StatefulSet:
+
 ```shell
 kubectl delete statefulset web
 ```
+
 ```
 statefulset "web" deleted
 ```
@@ -1354,14 +1516,16 @@ above.
 `Parallel` pod management tells the StatefulSet controller to launch or
 terminate all Pods in parallel, and not to wait for Pods to become Running
 and Ready or completely terminated prior to launching or terminating another
-Pod.
+Pod. This option only affects the behavior for scaling operations. Updates are not affected.
 -->
 
 ## Pod 管理策略
 
 
-对于某些分布式系统来说，StatefulSet 的顺序性保证是不必要和/或者不应该的。这些系统仅仅要求唯一性和身份标志。为了解决这个问题，在 Kubernetes 1.7 中我们针对 StatefulSet API Object 引入了 `.spec.podManagementPolicy`。
-
+对于某些分布式系统来说，StatefulSet 的顺序性保证是不必要和/或者不应该的。
+这些系统仅仅要求唯一性和身份标志。为了解决这个问题，在 Kubernetes 1.7 中
+我们针对 StatefulSet API 对象引入了 `.spec.podManagementPolicy`。
+此选项仅影响扩缩操作的行为。更新不受影响。
 
 ### OrderedReady Pod 管理策略
 
@@ -1372,7 +1536,8 @@ Pod.
 ### Parallel Pod 管理策略
 
 
-`Parallel` pod 管理策略告诉 StatefulSet 控制器并行的终止所有 Pod，在启动或终止另一个 Pod 前，不必等待这些 Pod 变成 Running 和 Ready 或者完全终止状态。
+`Parallel` pod 管理策略告诉 StatefulSet 控制器并行的终止所有 Pod，
+在启动或终止另一个 Pod 前，不必等待这些 Pod 变成 Running 和 Ready 或者完全终止状态。
 
 {{< codenew file="application/web/web-parallel.yaml" >}}
 
@@ -1398,16 +1563,17 @@ kubectl get po -lapp=nginx -w
 ```
 
 <!--
-In another terminal, create the StatefulSet and Service in the manifest.
+In another terminal, create the StatefulSet and Service in the manifest:
 -->
 
-在另一个终端窗口创建清单中的 StatefulSet 和 Service。
+在另一个终端窗口创建清单中的 StatefulSet 和 Service：
 
 ```shell
 kubectl apply -f web-parallel.yaml
+```
+```
 service/nginx created
 statefulset.apps/web created
-
 ```
 
 <!--
@@ -1417,7 +1583,9 @@ Examine the output of the `kubectl get` command that you executed in the first t
 查看你在第一个终端中运行的 `kubectl get` 命令的输出。
 
 ```shell
-kubectl get po -lapp=nginx -w
+kubectl get pod -l app=nginx -w
+```
+```
 NAME      READY     STATUS    RESTARTS   AGE
 web-0     0/1       Pending   0          0s
 web-0     0/1       Pending   0         0s
@@ -1442,6 +1610,8 @@ StatefulSet 控制器同时启动了 `web-0` 和 `web-1`。
 
 ```shell
 kubectl scale statefulset/web --replicas=4
+```
+```
 statefulset.apps/web scaled
 ```
 
@@ -1451,7 +1621,7 @@ Examine the output of the terminal where the `kubectl get` command is running.
 
 在 `kubectl get` 命令运行的终端里检查它的输出。
 
-```shell
+```
 web-3     0/1       Pending   0         0s
 web-3     0/1       Pending   0         0s
 web-3     0/1       Pending   0         7s
@@ -1461,27 +1631,36 @@ web-3     1/1       Running   0         26s
 ```
 
 <!--
-The StatefulSet controller launched two new Pods, and it did not wait for
+The StatefulSet launched two new Pods, and it did not wait for
 the first to become Running and Ready prior to launching the second.
 
-Keep this terminal open, and in another terminal delete the `web` StatefulSet.
+## {{% heading "cleanup" %}}
+
+You should have two terminals open, ready for you to run `kubectl` commands as
+part of cleanup.
 -->
 
-StatefulSet 控制器启动了两个新的 Pod，而且在启动第二个之前并没有等待第一个变成 Running 和 Ready 状态。
+StatefulSet 启动了两个新的 Pod，而且在启动第二个之前并没有等待第一个变成 Running 和 Ready 状态。
 
-保持这个终端打开，并在另一个终端删除 `web` StatefulSet。
+## {{% heading "cleanup" %}}
+
+您应该打开两个终端，准备在清理过程中运行 `kubectl` 命令。
 
 ```shell
 kubectl delete sts web
+# sts is an abbreviation for statefulset
 ```
 
 <!--
-Again, examine the output of the `kubectl get` command running in the other terminal.
+You can watch `kubectl get` to see those Pods being deleted.
 -->
 
-在另一个终端里再次检查 `kubectl get` 命令的输出。
+你可以监测 `kubectl get` 来查看那些 Pod 被删除
 
 ```shell
+kubectl get pod -l app=nginx -w
+```
+```
 web-3     1/1       Terminating   0         9m
 web-2     1/1       Terminating   0         9m
 web-3     1/1       Terminating   0         9m
@@ -1530,10 +1709,12 @@ kubectl delete svc nginx
 
 
 <!--
-You will need to delete the persistent storage media for the PersistentVolumes
-used in this tutorial. Follow the necessary steps, based on your environment,
-storage configuration, and provisioning method, to ensure that all storage is
-reclaimed.
+You also need to delete the persistent storage media for the PersistentVolumes
+used in this tutorial.
+
+
+Follow the necessary steps, based on your environment, storage configuration,
+and provisioning method, to ensure that all storage is reclaimed.
 -->
 
 你需要删除本教程中用到的 PersistentVolumes 的持久化存储介质。基于你的环境、存储配置和提供方式，按照必须的步骤保证回收所有的存储。
diff --git a/content/zh/docs/tutorials/stateless-application/expose-external-ip-address.md b/content/zh/docs/tutorials/stateless-application/expose-external-ip-address.md
index 0e38afc1d6..8fe79a9a5d 100644
--- a/content/zh/docs/tutorials/stateless-application/expose-external-ip-address.md
+++ b/content/zh/docs/tutorials/stateless-application/expose-external-ip-address.md
@@ -20,7 +20,7 @@ external IP address.
 ## {{% heading "prerequisites" %}}
 
 <!--
-* Install [kubectl](/docs/tasks/tools/install-kubectl/).
+* Install [kubectl](/docs/tasks/tools/).
 * Use a cloud provider like Google Kubernetes Engine or Amazon Web Services to
   create a Kubernetes cluster. This tutorial creates an
   [external load balancer](/docs/tasks/access-application-cluster/create-external-load-balancer/),
@@ -28,7 +28,7 @@ external IP address.
 * Configure `kubectl` to communicate with your Kubernetes API server. For instructions, see the
   documentation for your cloud provider.
 -->
- * 安装 [kubectl](/zh/docs/tasks/tools/install-kubectl/).
+ * 安装 [kubectl](/zh/docs/tasks/tools/).
  * 使用 Google Kubernetes Engine 或 Amazon Web Services 等云供应商创建 Kubernetes 集群。
    本教程创建了一个[外部负载均衡器](/zh/docs/tasks/access-application-cluster/create-external-load-balancer/)，
    需要云供应商。

From 7499d8de034bf4068fc1f04e91fd7562a854dcc0 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Tue, 27 Apr 2021 19:35:21 +0800
Subject: [PATCH 654/788] [zh] Resync concepts section (4)

---
 .../services-networking/dual-stack.md         | 188 ++++++++++--------
 .../services-networking/endpoint-slices.md    |  95 ++++-----
 .../services-networking/network-policies.md   | 110 +++++++++-
 3 files changed, 249 insertions(+), 144 deletions(-)

diff --git a/content/zh/docs/concepts/services-networking/dual-stack.md b/content/zh/docs/concepts/services-networking/dual-stack.md
index f01bd78038..e1d5516bec 100644
--- a/content/zh/docs/concepts/services-networking/dual-stack.md
+++ b/content/zh/docs/concepts/services-networking/dual-stack.md
@@ -26,46 +26,46 @@ weight: 70
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.16" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 <!--
- IPv4/IPv6 dual-stack enables the allocation of both IPv4 and IPv6 addresses to {{< glossary_tooltip text="Pods" term_id="pod" >}} and {{< glossary_tooltip text="Services" term_id="service" >}}.
+ IPv4/IPv6 dual-stack networking enables the allocation of both IPv4 and IPv6 addresses to {{< glossary_tooltip text="Pods" term_id="pod" >}} and {{< glossary_tooltip text="Services" term_id="service" >}}.
 -->
-IPv4/IPv6 双协议栈能够将 IPv4 和 IPv6 地址分配给
+IPv4/IPv6 双协议栈网络能够将 IPv4 和 IPv6 地址分配给
 {{< glossary_tooltip text="Pod" term_id="pod" >}} 和
 {{< glossary_tooltip text="Service" term_id="service" >}}。
 
 <!--
-If you enable IPv4/IPv6 dual-stack networking for your Kubernetes cluster, the cluster will support the simultaneous assignment of both IPv4 and IPv6 addresses.
+IPv4/IPv6 dual-stack networking is enabled by default for your Kubernetes cluster starting in 1.21, allowing the simultaneous assignment of both IPv4 and IPv6 addresses.
 -->
-如果你为 Kubernetes 集群启用了 IPv4/IPv6 双协议栈网络，
-则该集群将支持同时分配 IPv4 和 IPv6 地址。
+从 1.21 版本开始，Kubernetes 集群默认启用 IPv4/IPv6 双协议栈网络，
+以支持同时分配 IPv4 和 IPv6 地址。
 
 <!-- body -->
 
 <!--
 ## Supported Features
 -->
-## 支持的功能
+## 支持的功能  {#supported-features}
 
 <!--
-Enabling IPv4/IPv6 dual-stack on your Kubernetes cluster provides the following features:
+IPv4/IPv6 dual-stack on your Kubernetes cluster provides the following features:
 -->
-在 Kubernetes 集群上启用 IPv4/IPv6 双协议栈可提供下面的功能：
+Kubernetes 集群的 IPv4/IPv6 双协议栈可提供下面的功能：
 
 <!--
    * Dual-stack Pod networking (a single IPv4 and IPv6 address assignment per Pod)
    * IPv4 and IPv6 enabled Services
    * Pod off-cluster egress routing (eg. the Internet) via both IPv4 and IPv6 interfaces
 -->
-   * 双协议栈 pod 网络 (每个 pod 分配一个 IPv4 和 IPv6 地址)
-   * IPv4 和 IPv6 启用的服务
-   * Pod 的集群外出口通过 IPv4 和 IPv6 路由
+* 双协议栈 pod 网络 (每个 pod 分配一个 IPv4 和 IPv6 地址)
+* IPv4 和 IPv6 启用的服务
+* Pod 的集群外出口通过 IPv4 和 IPv6 路由
 
 <!--
 ## Prerequisites
 -->
-## 先决条件
+## 先决条件  {#prerequisites}
 
 <!--
 The following prerequisites are needed in order to utilize IPv4/IPv6 dual-stack Kubernetes clusters:
@@ -80,61 +80,62 @@ The following prerequisites are needed in order to utilize IPv4/IPv6 dual-stack
    * Provider support for dual-stack networking (Cloud provider or otherwise must be able to provide Kubernetes nodes with routable IPv4/IPv6 network interfaces)
    * A network plugin that supports dual-stack (such as Kubenet or Calico)
 -->
-   * Kubernetes 1.20 版本及更高版本，有关更早 Kubernetes 版本的使用双栈服务的信息，请参考那个版本的 Kubernetes 文档。
-   * 提供商支持双协议栈网络（云提供商或其他提供商必须能够为 Kubernetes 节点提供可路由的 IPv4/IPv6 网络接口）
-   * 支持双协议栈的网络插件（如 Kubenet 或 Calico）
+* Kubernetes 1.20 版本或更高版本，有关更早 Kubernetes 版本的使用双栈服务的信息，
+  请参考对应版本的 Kubernetes 文档。
+* 提供商支持双协议栈网络（云提供商或其他提供商必须能够为 Kubernetes
+  节点提供可路由的 IPv4/IPv6 网络接口）
+* 支持双协议栈的网络插件（如 Kubenet 或 Calico）
 
 <!--
-## Enable IPv4/IPv6 dual-stack
+## Configure IPv4/IPv6 dual-stack
 -->
-## 启用 IPv4/IPv6 双协议栈
+## 配置 IPv4/IPv6 双协议栈
 
 <!--
-To enable IPv4/IPv6 dual-stack, enable the `IPv6DualStack` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for the relevant components of your cluster, and set dual-stack cluster network assignments:
+To use IPv4/IPv6 dual-stack, ensure the `IPv6DualStack` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled for the relevant components of your cluster. (Starting in 1.21, IPv4/IPv6 dual-stack defaults to enabled.)
+-->
+要使用 IPv4/IPv6 双协议栈，确保为集群的相关组件启用 `IPv6DualStack`
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)，
+（从 1.21 版本开始，IPv4/IPv6 双协议栈默认是被启用的）。
 
+<!--
    * kube-apiserver:
-      * `--feature-gates="IPv6DualStack=true"`
       * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
    * kube-controller-manager:
-      * `--feature-gates="IPv6DualStack=true"`
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
       * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
       * `--node-cidr-mask-size-ipv4|--node-cidr-mask-size-ipv6` defaults to /24 for IPv4 and /64 for IPv6
-   * kubelet:
-      * `--feature-gates="IPv6DualStack=true"`
    * kube-proxy:
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
-      * `--feature-gates="IPv6DualStack=true"`
 -->
-要启用 IPv4/IPv6 双协议栈，为集群的相关组件启用 `IPv6DualStack`
-[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)，
-并且设置双协议栈的集群网络分配：
-
-   * kube-apiserver:
-      * `--feature-gates="IPv6DualStack=true"`
-      * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
-   * kube-controller-manager:
-      * `--feature-gates="IPv6DualStack=true"`
-      * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>` 
-      * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
-      * `--node-cidr-mask-size-ipv4|--node-cidr-mask-size-ipv6` 对于 IPv4 默认为 /24，对于 IPv6 默认为 /64
-   * kubelet:
-      * `--feature-gates="IPv6DualStack=true"`
-   * kube-proxy:
-      * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
-      * `--feature-gates="IPv6DualStack=true"`
+* kube-apiserver:
+  * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
+* kube-controller-manager:
+  * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>` 
+  * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
+  * `--node-cidr-mask-size-ipv4|--node-cidr-mask-size-ipv6` 对于 IPv4 默认为 /24，对于 IPv6 默认为 /64
+* kube-proxy:
+  * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
 
+{{< note >}}
 <!--
 An example of an IPv4 CIDR: `10.244.0.0/16` (though you would supply your own address range)
 
 An example of an IPv6 CIDR: `fdXY:IJKL:MNOP:15::/64` (this shows the format but is not a valid address - see [RFC 4193](https://tools.ietf.org/html/rfc4193))
 -->
-{{< note >}}
-
-IPv4 CIDR 的一个例子：`10.244.0.0/16`（尽管你会提供你自己的地址范围）
-
-IPv6 CIDR 的一个例子：`fdXY:IJKL:MNOP:15::/64`（这里演示的是格式而非有效地址 - 请看 [RFC 4193](https://tools.ietf.org/html/rfc4193)）
+IPv4 CIDR 的一个例子：`10.244.0.0/16`（尽管你会提供你自己的地址范围）。
 
+IPv6 CIDR 的一个例子：`fdXY:IJKL:MNOP:15::/64`
+（这里演示的是格式而非有效地址 - 请看 [RFC 4193](https://tools.ietf.org/html/rfc4193)）。
+<!--
+Starting in 1.21, IPv4/IPv6 dual-stack defaults to enabled.
+You can disable it when necessary by specifying `--feature-gates="IPv6DualStack=false"`
+on the kube-apiserver, kube-controller-manager, kubelet, and kube-proxy command line.
+-->
+从 1.21 开始 IPv4/IPv6 双协议栈默认为启用状态。
+你可以在必要的时候通过为 kube-apiserver、kube-controller-manager、kubelet
+和 kube-proxy 命令行设置 `--feature-gates="IPv6DualStack=false"` 来禁用
+此特性。
 {{< /note >}}
 
 <!--
@@ -143,47 +144,49 @@ IPv6 CIDR 的一个例子：`fdXY:IJKL:MNOP:15::/64`（这里演示的是格式
 ## 服务
 
 <!--
-If your cluster has dual-stack enabled, you can create {{< glossary_tooltip text="Services" term_id="service" >}} which can use IPv4, IPv6, or both. 
+You can create {{< glossary_tooltip text="Services" term_id="service" >}} which can use IPv4, IPv6, or both. 
 
 The address family of a Service defaults to the address family of the first service cluster IP range (configured via the `--service-cluster-ip-range` flag to the kube-apiserver).
 
 When you define a Service you can optionally configure it as dual stack. To specify the behavior you want, you
 set the `.spec.ipFamilyPolicy` field to one of the following values:
 -->
-如果你的集群启用了 IPv4/IPv6 双协议栈网络，则可以使用 IPv4 或 IPv6 地址来创建
+你可以使用 IPv4 或 IPv6 地址来创建
 {{< glossary_tooltip text="Service" term_id="service" >}}。
-服务的地址族默认为第一个服务集群 IP 范围的地址族（通过 kube-apiserver 的 `--service-cluster-ip-range` 参数配置）。
-当你定义服务时，可以选择将其配置为双栈。若要指定所需的行为，你可以设置 `.spec.ipFamilyPolicy` 字段为以下值之一：
+服务的地址族默认为第一个服务集群 IP 范围的地址族（通过 kube-apiserver 的
+`--service-cluster-ip-range` 参数配置）。
+当你定义服务时，可以选择将其配置为双栈。若要指定所需的行为，你可以设置
+`.spec.ipFamilyPolicy` 字段为以下值之一：
 
 <!--
 * `SingleStack`: Single-stack service. The control plane allocates a cluster IP for the Service, using the first configured service cluster IP range.
 * `PreferDualStack`:
-  * Only used if the cluster has dual-stack enabled. Allocates IPv4 and IPv6 cluster IPs for the Service
-  * If the cluster does not have dual-stack enabled, this setting follows the same behavior as `SingleStack`.
+  * Allocates IPv4 and IPv6 cluster IPs for the Service. (If the cluster has `--feature-gates="IPv6DualStack=false"`, this setting follows the same behavior as `SingleStack`.)
 * `RequireDualStack`: Allocates Service `.spec.ClusterIPs` from both IPv4 and IPv6 address ranges.
   * Selects the `.spec.ClusterIP` from the list of `.spec.ClusterIPs` based on the address family of the first element in the `.spec.ipFamilies` array.
-  * The cluster must have dual-stack networking configured.
 -->
 
 * `SingleStack`：单栈服务。控制面使用第一个配置的服务集群 IP 范围为服务分配集群 IP。
 * `PreferDualStack`：
-  * 仅当集群启用了双栈时使用。为服务分配 IPv4 和 IPv6 集群 IP。
-  * 如果集群没有启用双堆栈，则此设置与 `SingleStack` 行为相同。
+  * 为服务分配 IPv4 和 IPv6 集群 IP 地址。
+    （如果集群设置了 `--feature-gates="IPv6DualStack=false"`，则此设置的行为与
+    `SingleStack` 设置相同。）
 * `RequireDualStack`：从 IPv4 和 IPv6 的地址范围分配服务的 `.spec.ClusterIPs`
-  * 从基于在 `.spec.ipFamilies` 数组中第一个元素的地址族的 `.spec.ClusterIPs` 列表中选择 `.spec.ClusterIP` 
-  * 集群必须配置双栈网络
-  
+  * 从基于在 `.spec.ipFamilies` 数组中第一个元素的地址族的 `.spec.ClusterIPs`
+    列表中选择 `.spec.ClusterIP` 
+
 <!--
 If you would like to define which IP family to use for single stack or define the order of IP families for dual-stack, you can choose the address families by setting an optional field, `.spec.ipFamilies`, on the Service. 
 -->
-如果你想要定义哪个 IP 族用于单栈或定义双栈 IP 族的顺序，可以通过设置服务上的可选字段 `.spec.ipFamilies` 来选择地址族。
+如果你想要定义哪个 IP 族用于单栈或定义双栈 IP 族的顺序，可以通过设置
+服务上的可选字段 `.spec.ipFamilies` 来选择地址族。
 
+{{< note >}}
 <!--
 The `.spec.ipFamilies` field is immutable because the `.spec.ClusterIP` cannot be reallocated on a Service that already exists. If you want to change `.spec.ipFamilies`, delete and recreate the Service.
 -->
-{{< note >}}
-`.spec.ipFamilies` 字段是不可变的，因为系统无法为已经存在的服务重新分配 `.spec.ClusterIP`。
-如果你想改变 `.spec.ipFamilies`，则需要删除并重新创建服务。
+`.spec.ipFamilies` 字段是不可变的，因为系统无法为已经存在的服务重新分配
+`.spec.ClusterIP`。如果你想改变 `.spec.ipFamilies`，则需要删除并重新创建服务。
 {{< /note >}}
 
 <!--
@@ -206,7 +209,6 @@ You can set `.spec.ipFamilies` to any of the following array values:
 <!--
 The first family you list is used for the legacy `.spec.ClusterIP` field.
 -->
-
 你所列出的第一个地址族用于原来的 `.spec.ClusterIP` 字段。
 
 <!--
@@ -214,7 +216,6 @@ The first family you list is used for the legacy `.spec.ClusterIP` field.
 
 These examples demonstrate the behavior of various dual-stack Service configuration scenarios.
 -->
-
 ### 双栈服务配置场景
 
 以下示例演示多种双栈服务配置场景下的行为。
@@ -231,8 +232,8 @@ These examples demonstrate the behavior of various dual-stack Service configurat
 1. 此服务规约中没有显式设定 `.spec.ipFamilyPolicy`。当你创建此服务时，Kubernetes
    从所配置的第一个 `service-cluster-ip-range` 种为服务分配一个集群IP，并设置
    `.spec.ipFamilyPolicy` 为 `SingleStack`。
-   （[无选择算符的服务](/zh/docs/concepts/services-networking/service/#services-without-selectors)和
-   [无头服务](/zh/docs/concepts/services-networking/service/#headless-services)的行为方式
+   （[无选择算符的服务](/zh/docs/concepts/services-networking/service/#services-without-selectors)
+   和[无头服务](/zh/docs/concepts/services-networking/service/#headless-services)的行为方式
    与此相同。）
    
    {{< codenew file="service/networking/dual-stack-default-svc.yaml" >}}
@@ -251,6 +252,13 @@ These examples demonstrate the behavior of various dual-stack Service configurat
    字段 `.spec.ClusterIPs` 是主要字段，包含两个分配的 IP 地址；`.spec.ClusterIP` 是次要字段，
    其取值从 `.spec.ClusterIPs` 计算而来。
 
+   * 对于 `.spec.ClusterIP` 字段，控制面记录来自第一个服务集群 IP 范围
+     对应的地址族的 IP 地址。
+   * 对于单协议栈的集群，`.spec.ClusterIPs` 和 `.spec.ClusterIP` 字段都
+     仅仅列出一个地址。
+   * 对于启用了双协议栈的集群，将 `.spec.ipFamilyPolicy` 设置为
+     `RequireDualStack` 时，其行为与 `PreferDualStack` 相同。
+
    {{< codenew file="service/networking/dual-stack-preferred-svc.yaml" >}}
 
 <!--
@@ -270,15 +278,18 @@ These examples demonstrate the behavior of various dual-stack Service configurat
 #### 现有服务的双栈默认值
 
 <!--
-These examples demonstrate the default behavior when dual-stack is newly enabled on a cluster where Services already exist.
+These examples demonstrate the default behavior when dual-stack is newly enabled on a cluster where Services already exist.  (Upgrading an existing cluster to 1.21 will enable dual-stack unless `--feature-gates="IPv6DualStack=false"` is set.)
 -->
 下面示例演示了在服务已经存在的集群上新启用双栈时的默认行为。
+（将现有集群升级到 1.21 会启用双协议栈支持，除非设置了
+`--feature-gates="IPv6DualStack=false"`）
 
 <!--
 1. When dual-stack is enabled on a cluster, existing Services (whether `IPv4` or `IPv6`) are configured by the control plane to set `.spec.ipFamilyPolicy` to `SingleStack` and set `.spec.ipFamilies` to the address family of the existing Service. The existing Service cluster IP will be stored in `.spec.ClusterIPs`.
 -->
-1. 在集群上启用双栈时，控制面会将现有服务（无论是 `IPv4` 还是 `IPv6`）配置 `.spec.ipFamilyPolicy`
-   设置为 `SingleStack` 并设置 `.spec.ipFamilies` 为服务的当前地址族。
+1. 在集群上启用双栈时，控制面会将现有服务（无论是 `IPv4` 还是 `IPv6`）配置
+   `.spec.ipFamilyPolicy` 为 `SingleStack` 并设置 `.spec.ipFamilies`
+   为服务的当前地址族。
 
    {{< codenew file="service/networking/dual-stack-default-svc.yaml" >}}
 
@@ -322,7 +333,7 @@ These examples demonstrate the default behavior when dual-stack is newly enabled
 2. 在集群上启用双栈时，带有选择算符的现有
    [无头服务](/zh/docs/concepts/services-networking/service/#headless-services)
    由控制面设置 `.spec.ipFamilyPolicy` 为 `SingleStack`
-   并设置 `.spec.ipFamilies` 为第一个服务群集 IP 范围的地址族（通过配置 kube-apiserver 的
+   并设置 `.spec.ipFamilies` 为第一个服务集群 IP 范围的地址族（通过配置 kube-apiserver 的
    `--service-cluster-ip-range` 参数），即使 `.spec.ClusterIP` 的设置值为 `None` 也如此。
 
    {{< codenew file="service/networking/dual-stack-default-svc.yaml" >}}
@@ -375,21 +386,25 @@ Services can be changed from single-stack to dual-stack and from dual-stack to s
 -->
 1. 要将服务从单栈更改为双栈，根据需要将 `.spec.ipFamilyPolicy` 从 `SingleStack` 改为
    `PreferDualStack` 或 `RequireDualStack`。
-   当你将此服务从单栈更改为双栈时，Kubernetes 将分配缺失的地址族，以便现在该服务具有 IPv4 和 IPv6 地址。
+   当你将此服务从单栈更改为双栈时，Kubernetes 将分配缺失的地址族，以便现在
+   该服务具有 IPv4 和 IPv6 地址。
    编辑服务规约将 `.spec.ipFamilyPolicy` 从 `SingleStack` 改为 `PreferDualStack`。
 
    <!--
    Before:
    -->
    之前：
+
    ```yaml
    spec:
      ipFamilyPolicy: SingleStack
    ```
+
    <!--
    After:
    -->
    之后：
+
    ```yaml
    spec:
      ipFamilyPolicy: PreferDualStack
@@ -399,9 +414,10 @@ Services can be changed from single-stack to dual-stack and from dual-stack to s
 1. To change a Service from dual-stack to single-stack, change `.spec.ipFamilyPolicy` from `PreferDualStack` or `RequireDualStack` to `SingleStack`. When you change this Service from dual-stack to single-stack, Kubernetes retains only the first element in the `.spec.ClusterIPs` array, and sets `.spec.ClusterIP` to that IP address and sets `.spec.ipFamilies` to the address family of `.spec.ClusterIPs`.
 -->
 
-2. 要将服务从双栈更改为单栈，请将 `.spec.ipFamilyPolicy` 从 `PreferDualStack` 或 `RequireDualStack`
-   改为 `SingleStack`。
-   当你将此服务从双栈更改为单栈时，Kubernetes 只保留 `.spec.ClusterIPs` 数组中的第一个元素，并设置 `.spec.ClusterIP` 为那个 IP 地址，
+2. 要将服务从双栈更改为单栈，请将 `.spec.ipFamilyPolicy` 从 `PreferDualStack` 或
+   `RequireDualStack` 改为 `SingleStack`。
+   当你将此服务从双栈更改为单栈时，Kubernetes 只保留 `.spec.ClusterIPs`
+   数组中的第一个元素，并设置 `.spec.ClusterIP` 为那个 IP 地址，
    并设置 `.spec.ipFamilies` 为 `.spec.ClusterIPs` 地址族。
 
 <!--
@@ -413,7 +429,8 @@ Services can be changed from single-stack to dual-stack and from dual-stack to s
 For [Headless Services without selectors](/docs/concepts/services-networking/service/#without-selectors) and without `.spec.ipFamilyPolicy` explicitly set, the `.spec.ipFamilyPolicy` field defaults to `RequireDualStack`.
 -->
 对于[不带选择算符的无头服务](/zh/docs/concepts/services-networking/service/#without-selectors)，
-若没有显式设置 `.spec.ipFamilyPolicy`，则 `.spec.ipFamilyPolicy` 字段默认设置为 `RequireDualStack`。
+若没有显式设置 `.spec.ipFamilyPolicy`，则 `.spec.ipFamilyPolicy`
+字段默认设置为 `RequireDualStack`。
 
 <!--
 ### Service type LoadBalancer
@@ -425,15 +442,15 @@ To provision a dual-stack load balancer for your Service:
    * Set the `.spec.type` field to `LoadBalancer`
    * Set `.spec.ipFamilyPolicy` field to `PreferDualStack` or `RequireDualStack`
 -->
-
 要为你的服务提供双栈负载均衡器：
-   * 将 `.spec.type` 字段设置为 `LoadBalancer` 
-   * 将 `.spec.ipFamilyPolicy` 字段设置为 `PreferDualStack` 或者 `RequireDualStack`
 
+* 将 `.spec.type` 字段设置为 `LoadBalancer` 
+* 将 `.spec.ipFamilyPolicy` 字段设置为 `PreferDualStack` 或者 `RequireDualStack`
+
+{{< note >}}
 <!--
 To use a dual-stack `LoadBalancer` type Service, your cloud provider must support IPv4 and IPv6 load balancers.
 -->
-{{< note >}}
 为了使用双栈的负载均衡器类型服务，你的云驱动必须支持 IPv4 和 IPv6 的负载均衡器。
 {{< /note >}}
 
@@ -445,13 +462,16 @@ To use a dual-stack `LoadBalancer` type Service, your cloud provider must suppor
 <!--
 If you want to enable egress traffic in order to reach off-cluster destinations (eg. the public Internet) from a Pod that uses non-publicly routable IPv6 addresses, you need to enable the Pod to use a publicly routed IPv6 address via a mechanism such as transparent proxying or IP masquerading. The [ip-masq-agent](https://github.com/kubernetes-sigs/ip-masq-agent) project supports IP masquerading on dual-stack clusters.
 -->
-如果你要启用出口流量，以便使用非公开路由 IPv6 地址的 Pod 到达集群外地址（例如公网），则需要通过透明代理或 IP 伪装等机制使 Pod 使用公共路由的 IPv6 地址。
-[ip-masq-agent](https://github.com/kubernetes-sigs/ip-masq-agent)项目支持在双栈集群上进行 IP 伪装。
+如果你要启用出站流量，以便使用非公开路由 IPv6 地址的 Pod 到达集群外地址
+（例如公网），则需要通过透明代理或 IP 伪装等机制使 Pod 使用公共路由的
+IPv6 地址。
+[ip-masq-agent](https://github.com/kubernetes-sigs/ip-masq-agent)项目
+支持在双栈集群上进行 IP 伪装。
 
+{{< note >}}
 <!--
 Ensure your {{< glossary_tooltip text="CNI" term_id="cni" >}} provider supports IPv6.
 -->
-{{< note >}}
 确认你的 {{< glossary_tooltip text="CNI" term_id="cni" >}} 驱动支持 IPv6。
 {{< /note >}}
 
@@ -459,5 +479,7 @@ Ensure your {{< glossary_tooltip text="CNI" term_id="cni" >}} provider supports
 
 <!--
 * [Validate IPv4/IPv6 dual-stack](/docs/tasks/network/validate-dual-stack) networking
+* [Enable dual-stack networking using kubeadm ](/docs/setup/production-environment/tools/kubeadm/dual-stack-support/)
 -->
-* [验证 IPv4/IPv6 双协议栈](/zh/docs/tasks/network/validate-dual-stack)网络
\ No newline at end of file
+* [验证 IPv4/IPv6 双协议栈](/zh/docs/tasks/network/validate-dual-stack)网络
+* [使用 kubeadm 启用双协议栈网络](/zh/docs/setup/production-environment/tools/kubeadm/dual-stack-support/)
diff --git a/content/zh/docs/concepts/services-networking/endpoint-slices.md b/content/zh/docs/concepts/services-networking/endpoint-slices.md
index bfd8019d3c..54d086ddb5 100644
--- a/content/zh/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/zh/docs/concepts/services-networking/endpoint-slices.md
@@ -1,25 +1,27 @@
 ---
 title: 端点切片（Endpoint Slices）
 content_type: concept
-weight: 35
+weight: 45
 ---
 
 <!--
+reviewers:
+- freehan
 title: Endpoint Slices
 content_type: concept
-weight: 35
+weight: 45
 -->
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 <!--
-_Endpoint Slices_ provide a simple way to track network endpoints within a
+_EndpointSlices_ provide a simple way to track network endpoints within a
 Kubernetes cluster. They offer a more scalable and extensible alternative to
 Endpoints.
 -->
-_端点切片（Endpoint Slices）_ 提供了一种简单的方法来跟踪 Kubernetes 集群中的网络端点
+_端点切片（EndpointSlices）_ 提供了一种简单的方法来跟踪 Kubernetes 集群中的网络端点
 （network endpoints）。它们为 Endpoints 提供了一种可伸缩和可拓展的替代方案。
 
 <!-- body -->
@@ -85,7 +87,7 @@ EndpointSlice 的名称必须是合法的
 例如，下面是 Kubernetes 服务 `example` 的 EndpointSlice 资源示例。
 
 ```yaml
-apiVersion: discovery.k8s.io/v1beta1
+apiVersion: discovery.k8s.io/v1
 kind: EndpointSlice
 metadata:
   name: example-abc
@@ -102,9 +104,8 @@ endpoints:
     conditions:
       ready: true
     hostname: pod-1
-    topology:
-      kubernetes.io/hostname: node-1
-      topology.kubernetes.io/zone: us-west2-a
+    nodeName: node-1
+    zone: us-west2-a
 ```
 
 <!--
@@ -228,55 +229,47 @@ For pods, this is any pod that has a deletion timestamp set.
 <!--
 ### Topology information {#topology}
 
-{{< feature-state for_k8s_version="v1.20" state="deprecated" >}}
-
-{{< note >}}
-The topology field in EndpointSlices has been deprecated and will be removed in
-a future release. A new `nodeName` field will be used instead of setting
-`kubernetes.io/hostname` in topology. It was determined that other topology
-fields covering zone and region would be better represented as EndpointSlice
-labels that would apply to all endpoints within the EndpointSlice.
-{{< /note >}}
-
 Each endpoint within an EndpointSlice can contain relevant topology information.
-This is used to indicate where an endpoint is, containing information about the
-corresponding Node, zone, and region. When the values are available, the
-control plane sets the following Topology labels for EndpointSlices:
+The topology information includes the location of the endpoint and information
+about the corresponding Node and zone. These are available in the following
+per endpoint fields on EndpointSlices:
 -->
 ### 拓扑信息   {#topology}
 
-{{< feature-state for_k8s_version="v1.20" state="deprecated" >}}
+EndpointSlice 中的每个端点都可以包含一定的拓扑信息。
+拓扑信息包括端点的位置，对应节点、可用区的信息。
+这些信息体现为 EndpointSlices 的如下端点字段：
+
+<!--
+* `nodeName` - The name of the Node this endpoint is on.
+* `zone` - The zone this endpoint is in.
+-->
+* `nodeName` - 端点所在的 Node 名称；
+* `zone` - 端点所处的可用区。
 
 {{< note >}}
-EndpointSlices 中的 topology 字段已被弃用，并将在以后的版本中删除。
-将使用新的 `nodeName` 字段代替在 topology 中设置 `kubernetes.io/hostname`。
-可以确定的是，其他覆盖区和域的拓扑字段用 EndpointSlice 标签来表达更合适，
-该标签将应用于 EndpointSlice 内的所有端点。
+<!--
+In the v1 API, the per endpoint `topology` was effectively removed in favor of
+the dedicated fields `nodeName` and `zone`.
+-->
+在 v1 API 中，逐个端点设置的 `topology` 实际上被去除，以鼓励使用专用
+的字段 `nodeName` 和 `zone`。
+
+<!--
+Setting arbitrary topology fields on the `endpoint` field of an `EndpointSlice`
+resource has been deprecated and is not be supported in the v1 API. Instead,
+the v1 API supports setting individual `nodeName` and `zone` fields. These
+fields are automatically translated between API versions. For example, the
+value of the `"topology.kubernetes.io/zone"` key in the `topology` field in
+the v1beta1 API is accessible as the `zone` field in the v1 API.
+-->
+对 `EndpointSlice` 对象的 `endpoint` 字段设置任意的拓扑结构信息这一操作已被
+废弃，不再被 v1 API 所支持。取而代之的是 v1 API 所支持的 `nodeName` 和 `zone`
+这些独立的字段。这些字段可以在不同的 API 版本之间自动完成转译。
+例如，v1beta1 API 中 `topology` 字段的 `topology.kubernetes.io/zone` 取值可以
+在 v1 API 中通过 `zone` 字段访问。
 {{< /note >}}
 
-EndpointSlice 中的每个端点都可以包含一定的拓扑信息。
-这一信息用来标明端点的位置，包含对应节点、可用区、区域的信息。
-当这些值可用时，控制面会为 EndpointSlice 设置如下拓扑标签：
-
-<!--
-* `kubernetes.io/hostname` - The name of the Node this endpoint is on.
-* `topology.kubernetes.io/zone` - The zone this endpoint is in.
-* `topology.kubernetes.io/region` - The region this endpoint is in.
--->
-* `kubernetes.io/hostname` - 端点所在的节点名称
-* `topology.kubernetes.io/zone` - 端点所处的可用区
-* `topology.kubernetes.io/region` - 端点所处的区域
-
-<!--
-The values of these labels are derived from resources associated with each
-endpoint in a slice. The hostname label represents the value of the NodeName
-field on the corresponding Pod. The zone and region labels represent the value
-of the labels with the same names on the corresponding Node.
--->
-这些标签的值时根据与切片中各个端点相关联的资源来生成的。
-标签 `hostname` 代表的是对应的 Pod 的 NodeName 字段的取值。
-`zone` 和 `region` 标签则代表的是对应的节点所拥有的同名标签的值。
-
 <!--
 ### Management
 
@@ -288,7 +281,7 @@ entities or controllers managing additional sets of EndpointSlices.
 -->
 ### 管理   {#management}
 
-通常，控制面（尤其是端点切片的 {{< glossary_tooltip text="controller" term_id="controller" >}}）
+通常，控制面（尤其是端点切片的 {{< glossary_tooltip text="控制器" term_id="controller" >}}）
 会创建和管理 EndpointSlice 对象。EndpointSlice 对象还有一些其他使用场景，
 例如作为服务网格（Service Mesh）的实现。这些场景都会导致有其他实体
 或者控制器负责管理额外的 EndpointSlice 集合。
diff --git a/content/zh/docs/concepts/services-networking/network-policies.md b/content/zh/docs/concepts/services-networking/network-policies.md
index 8b38fa25d4..75631fb241 100644
--- a/content/zh/docs/concepts/services-networking/network-policies.md
+++ b/content/zh/docs/concepts/services-networking/network-policies.md
@@ -427,47 +427,138 @@ When the feature gate is enabled, you can set the `protocol` field of a NetworkP
 来禁用 `SCTPSupport` [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
 启用该特性门控后，用户可以将 NetworkPolicy 的 `protocol` 字段设置为 `SCTP`。
 
+{{< note >}}
 <!-- 
 You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that supports SCTP protocol NetworkPolicies.
  -->
-{{< note >}}
 你必须使用支持 SCTP 协议网络策略的 {{< glossary_tooltip text="CNI" term_id="cni" >}} 插件。
 {{< /note >}}
 
+<!--
+## Targeting a range of Ports
+-->
+## 针对某个端口范围   {#targeting-a-range-of-ports}
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!--
+When writing a NetworkPolicy, you can target a range of ports instead of a single port.
+
+This is achievable with the usage of the `endPort` field, as the following example:
+-->
+在编写 NetworkPolicy 时，你可以针对一个端口范围而不是某个固定端口。
+
+这一目的可以通过使用 `endPort` 字段来实现，如下例所示：
+
+```yaml
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: multi-port-egress
+  namespace: default
+spec:
+  podSelector:
+    matchLabels:
+      role: db
+  policyTypes:
+  - Egress
+  egress:
+  - to:
+    - ipBlock:
+        cidr: 10.0.0.0/24
+    ports:
+    - protocol: TCP
+      port: 32000
+      endPort: 32768
+```
+
+<!--
+The above rule allows any Pod with label `db` on the namespace `default` to communicate with any IP within the range `10.0.0.0/24` over TCP, provided that the target port is between the range 32000 and 32768.
+-->
+上面的规则允许名字空间 `default` 中所有带有标签 `db` 的 Pod 使用 TCP 协议
+与 `10.0.0.0/24` 范围内的 IP 通信，只要目标端口介于 32000 和 32768 之间就可以。
+
+<!--
+The following restrictions apply when using this field:
+* As an alpha feature, this is disabled by default. To enable the `endPort` field at a cluster level, you (or your cluster administrator) need to enable the `NetworkPolicyEndPort` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) for the API server with `-feature-gates=NetworkPolicyEndPort=true,…`.
+* The `endPort` field must be equal than or greater to the `port` field.
+* `endPort` can only be defined if `port` is also defined.
+* Both ports must be numeric.
+-->
+使用此字段时存在以下限制：
+
+* 作为一种 Alpha 阶段的特性，端口范围设定默认是被禁用的。要在整个集群
+  范围内允许使用 `endPort` 字段，你（或者你的集群管理员）需要为 API
+  服务器设置 `-feature-gates=NetworkPolicyEndPort=true,...` 以启用
+  `NetworkPolicyEndPort` 
+  [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
+* `endPort` 字段必须等于或者大于 `port` 字段的值。
+* 两个字段的设置值都只能是数字。
+
+{{< note >}}
+<!--
+Your cluster must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that
+supports the `endPort` field in NetworkPolicy specifications.
+-->
+你的集群所使用的 {{< glossary_tooltip text="CNI" term_id="cni" >}} 插件
+必须支持在 NetworkPolicy 规约中使用 `endPort` 字段。
+{{< /note >}}
+
+<!--
+## Targeting a Namespace by its name
+-->
+## 基于名字指向某名字空间   {#targeting-a-namespace-by-its-name}
+
+{{< feature-state state="beta" for_k8s_version="1.21" >}}
+
+<!--
+The Kubernetes control plane sets an immutable label `kubernetes.io/metadata.name` on all
+namespaces, provided that the `NamespaceDefaultLabelName`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is enabled.
+The value of the label is the namespace name.
+
+While NetworkPolicy cannot target a namespace by its name with some object field, you can use the
+standardized label to target a specific namespace.
+-->
+只要 `NamespaceDefaultLabelName`
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
+被启用，Kubernetes 控制面会在所有名字空间上设置一个不可变更的标签
+`kubernetes.io/metadata.name`。该标签的值是名字空间的名称。
+
+如果 NetworkPolicy 无法在某些对象字段中指向某名字空间，你可以使用标准的
+标签方式来指向特定名字空间。
+
 <!--
 ## What you can't do with network policies (at least, not yet)
 
-As of Kubernetes 1.20, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
+As of Kubernetes {{< skew latestVersion >}}, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.
 -->
-## 你通过网络策略（至少目前还）无法完成的工作
+## 通过网络策略（至少目前还）无法完成的工作
 
-到 Kubernetes v1.20 为止，NetworkPolicy API 还不支持以下功能，不过
+到 Kubernetes {{< skew latestVersion >}} 为止，NetworkPolicy API 还不支持以下功能，不过
 你可能可以使用操作系统组件（如 SELinux、OpenVSwitch、IPTables 等等）
 或者第七层技术（Ingress 控制器、服务网格实现）或准入控制器来实现一些
 替代方案。
 如果你对 Kubernetes 中的网络安全性还不太了解，了解使用 NetworkPolicy API
 还无法实现下面的用户场景是很值得的。
-对这些用户场景中的一部分（而非全部）的讨论扔在进行，或许在将来 NetworkPolicy
-API 中会给出一定支持。
 
 <!--
 - Forcing internal cluster traffic to go through a common gateway (this might be best served with a service mesh or other proxy).
 - Anything TLS related (use a service mesh or ingress controller for this).
 - Node specific policies (you can use CIDR notation for these, but you cannot target nodes by their Kubernetes identities specifically).
-- Targeting of namespaces or services by name (you can, however, target pods or namespaces by their {{< glossary_tooltip text="labels" term_id="label" >}}, which is often a viable workaround).
+- Targeting of services by name (you can, however, target pods or namespaces by their {{< glossary_tooltip text="labels" term_id="label" >}}, which is often a viable workaround).
 - Creation or management of "Policy requests" that are fulfilled by a third party.
 -->
 - 强制集群内部流量经过某公用网关（这种场景最好通过服务网格或其他代理来实现）；
 - 与 TLS 相关的场景（考虑使用服务网格或者 Ingress 控制器）；
 - 特定于节点的策略（你可以使用 CIDR 来表达这一需求不过你无法使用节点在
   Kubernetes 中的其他标识信息来辩识目标节点）；
-- 基于名字来选择名字空间或者服务（不过，你可以使用 {{< glossary_tooltip text="标签" term_id="label" >}}
+- 基于名字来选择服务（不过，你可以使用 {{< glossary_tooltip text="标签" term_id="label" >}}
   来选择目标 Pod 或名字空间，这也通常是一种可靠的替代方案）；
 - 创建或管理由第三方来实际完成的“策略请求”；
 <!--
 - Default policies which are applied to all namespaces or pods (there are some third party Kubernetes distributions and projects which can do this).
 - Advanced policy querying and reachability tooling.
-- The ability to target ranges of Ports in a single policy declaration.
 - The ability to log network security events (for example connections that are blocked or accepted).
 - The ability to explicitly deny policies (currently the model for NetworkPolicies are deny by default, with only the ability to add allow rules).
 - The ability to prevent loopback or incoming host traffic (Pods cannot currently block localhost access, nor do they have the ability to block access from their resident node).
@@ -475,7 +566,6 @@ API 中会给出一定支持。
 - 实现适用于所有名字空间或 Pods 的默认策略（某些第三方 Kubernetes 发行版本
   或项目可以做到这点）；
 - 高级的策略查询或者可达性相关工具；
-- 在同一策略声明中选择目标端口范围的能力；
 - 生成网络安全事件日志的能力（例如，被阻塞或接收的连接请求）；
 - 显式地拒绝策略的能力（目前，NetworkPolicy 的模型默认采用拒绝操作，
   其唯一的能力是添加允许策略）；

From 37ea6e0bf550d2d77376ff352a1c70dd615e1d62 Mon Sep 17 00:00:00 2001
From: Jai Govindani <jai@honestbank.com>
Date: Tue, 27 Apr 2021 20:31:32 +0700
Subject: [PATCH 655/788] docs(probes): add version req info

Signed-off-by: Jai Govindani <jai@honestbank.com>
---
 .../configure-liveness-readiness-startup-probes.md              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
index f8ebea0963..77a9ac7647 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
@@ -30,7 +30,7 @@ getting killed by the kubelet before they are up and running.
 ## {{% heading "prerequisites" %}}
 
 
-{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+{{< include "task-tutorial-prereqs.md" >}}
 
 
 

From 37b120d0b91bf4db9638e0e944db5a8edb0249b8 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Tue, 27 Apr 2021 22:18:18 +0800
Subject: [PATCH 656/788] [zh] Resync concepts section (5)

---
 .../services-networking/service-topology.md   | 141 +++++++++---------
 .../concepts/services-networking/service.md   | 107 ++++++++++---
 2 files changed, 161 insertions(+), 87 deletions(-)

diff --git a/content/zh/docs/concepts/services-networking/service-topology.md b/content/zh/docs/concepts/services-networking/service-topology.md
index 1791e45f7e..4ab71cee41 100644
--- a/content/zh/docs/concepts/services-networking/service-topology.md
+++ b/content/zh/docs/concepts/services-networking/service-topology.md
@@ -1,10 +1,5 @@
 ---
-title: 服务拓扑（Service Topology）
-feature:
-  title: 服务拓扑（Service Topology）
-  description: >
-    基于集群拓扑的服务流量路由。
-
+title: 使用拓扑键实现拓扑感知的流量路由
 content_type: concept
 weight: 10
 ---
@@ -12,19 +7,27 @@ weight: 10
 reviewers:
 - johnbelamaric
 - imroc
-title: Service Topology
-feature:
-  title: Service Topology
-  description: >
-    Routing of service traffic based upon cluster topology.
-
+title: Topology-aware traffic routing with topology keys
 content_type: concept
 weight: 10
 -->
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.17" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
+
+{{< note >}}
+<!--
+This feature, specifically the alpha `topologyKeys` API, is deprecated since
+Kubernetes v1.21.
+[Topology Aware Hints](/docs/concepts/services-networking/topology-aware-hints/),
+introduced in Kubernetes v1.21, provide similar functionality.
+-->
+此功能特性，尤其是 Alpha 阶段的 `topologyKeys` API，在 Kubernetes v1.21
+版本中已被废弃。Kubernetes v1.21 版本中引入的
+[拓扑感知的提示](/zh/docs/concepts/services-networking/topology-aware-hints/),
+提供类似的功能。
+{{</ note >}}
 
 <!--
 _Service Topology_ enables a service to route traffic based upon the Node
@@ -38,45 +41,50 @@ in the same availability zone.
 <!-- body -->
 
 <!--
-## Introduction
+## Topology-aware traffic routing
 
 By default, traffic sent to a `ClusterIP` or `NodePort` Service may be routed to
-any backend address for the Service. Since Kubernetes 1.7 it has been possible
-to route "external" traffic to the Pods running on the Node that received the
-traffic, but this is not supported for `ClusterIP` Services, and more complex
-topologies &mdash; such as routing zonally &mdash; have not been possible. The
-_Service Topology_ feature resolves this by allowing the Service creator to
-define a policy for routing traffic based upon the Node labels for the
-originating and destination Nodes.
-
-By using Node label matching between the source and destination, the operator
-may designate groups of Nodes that are "closer" and "farther" from one another,
-using whatever metric makes sense for that operator's requirements. For many
-operators in public clouds, for example, there is a preference to keep service
-traffic within the same zone, because interzonal traffic has a cost associated
-with it, while intrazonal traffic does not. Other common needs include being able
-to route traffic to a local Pod managed by a DaemonSet, or keeping traffic to
-Nodes connected to the same top-of-rack switch for the lowest latency.
+any backend address for the Service. Kubernetes 1.7 made it possible to
+route "external" traffic to the Pods running on the same Node that received the
+traffic. For `ClusterIP` Services, the equivalent same-node preference for
+routing wasn't possible; nor could you configure your cluster to favor routing
+to endpoints within the same zone.
+By setting `topologyKeys` on a Service, you're able to define a policy for routing
+traffic based upon the Node labels for the originating and destination Nodes.
 -->
-## 介绍 {#introduction}
+## 拓扑感知的流量路由 
 
-默认情况下，发往 `ClusterIP` 或者 `NodePort` 服务的流量可能会被路由到任意一个服务后端的地址上。
-从 Kubernetes 1.7 开始，可以将“外部”流量路由到节点上运行的 Pod 上，但不支持 `ClusterIP` 服务，
-更复杂的拓扑 &mdash; 比如分区路由 &mdash; 也还不支持。
-通过允许 `Service` 创建者根据源 `Node` 和目的 `Node` 的标签来定义流量路由策略，
-服务拓扑特性实现了服务流量的路由。
+默认情况下，发往 `ClusterIP` 或者 `NodePort` 服务的流量可能会被路由到
+服务的任一后端的地址。Kubernetes 1.7 允许将“外部”流量路由到接收到流量的
+节点上的 Pod。对于 `ClusterIP` 服务，无法完成同节点优先的路由，你也无法
+配置集群优选路由到同一可用区中的端点。
+通过在 Service 上配置 `topologyKeys`，你可以基于来源节点和目标节点的
+标签来定义流量路由策略。
 
-通过对源 `Node` 和目的 `Node` 标签的匹配，运营者可以使用任何符合运营者要求的度量值
-来指定彼此“较近”和“较远”的节点组。
-例如，对于在公有云上的运营者来说，更偏向于把流量控制在同一区域内，
-因为区域间的流量是有费用成本的，而区域内的流量没有。
-其它常用需求还包括把流量路由到由 `DaemonSet` 管理的本地 Pod 上，或者
-把保持流量在连接同一机架交换机的 `Node` 上，以获得低延时。
+<!--
+The label matching between the source and destination lets you, as a cluster
+operator, designate sets of Nodes that are "closer" and "farther" from one another.
+You can define labels to represent whatever metric makes sense for your own
+requirements.
+In public clouds, for example, you might prefer to keep network traffic within the
+same zone, because interzonal traffic has a cost associated with it (and intrazonal
+traffic typically does not). Other common needs include being able to route traffic
+to a local Pod managed by a DaemonSet, or directing traffic to Nodes connected to the
+same top-of-rack switch for the lowest latency.
+-->
+通过对源和目的之间的标签匹配，作为集群操作者的你可以根据节点间彼此“较近”和“较远”
+来定义节点集合。你可以基于符合自身需求的任何度量值来定义标签。
+例如，在公有云上，你可能更偏向于把流量控制在同一区内，因为区间流量是有费用成本的，
+而区内流量则没有。
+其它常见需求还包括把流量路由到由 `DaemonSet` 管理的本地 Pod 上，或者
+把将流量转发到连接在同一机架交换机的节点上，以获得低延时。
 
 <!--
 ## Using Service Topology
 
-If your cluster has Service Topology enabled, you can control Service traffic
+If your cluster has the `ServiceTopology`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+enabled, you can control Service traffic
 routing by specifying the `topologyKeys` field on the Service spec. This field
 is a preference-order list of Node labels which will be used to sort endpoints
 when accessing this Service. Traffic will be directed to a Node whose value for
@@ -84,7 +92,7 @@ the first label matches the originating Node's value for that label. If there is
 no backend for the Service on a matching Node, then the second label will be
 considered, and so forth, until no labels remain.
 
-If no match is found, the traffic will be rejected, just as if there were no
+If no match is found, the traffic will be rejected, as if there were no
 backends for the Service at all. That is, endpoints are chosen based on the first
 topology key with available backends. If this field is specified and all entries
 have no backends that match the topology of the client, the service has no
@@ -95,8 +103,9 @@ as the last value in the list.
 
 ## 使用服务拓扑 {#using-service-topology}
 
-如果集群启用了服务拓扑功能后，就可以在 `Service` 配置中指定 `topologyKeys` 字段，
-从而控制 `Service` 的流量路由。
+如果集群启用了 `ServiceTopology`
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)，
+你就可以在 Service 规约中设定 `topologyKeys` 字段，从而控制其流量路由。
 此字段是 `Node` 标签的优先顺序字段，将用于在访问这个 `Service` 时对端点进行排序。
 流量会被定向到第一个标签值和源 `Node` 标签值相匹配的 `Node`。
 如果这个 `Service` 没有匹配的后端 `Node`，那么第二个标签会被使用做匹配，
@@ -144,7 +153,7 @@ traffic as follows.
 
 * Service topology is not compatible with `externalTrafficPolicy=Local`, and
   therefore a Service cannot use both of these features. It is possible to use
-  both features in the same cluster on different Services, just not on the same
+  both features in the same cluster on different Services, only not on the same
   Service.
 
 * Valid topology keys are currently limited to `kubernetes.io/hostname`,
@@ -156,11 +165,11 @@ traffic as follows.
 * The catch-all value, `"*"`, must be the last value in the topology keys, if
   it is used.
 -->
-
 ## 约束条件 {#constraints}
 
 * 服务拓扑和 `externalTrafficPolicy=Local` 是不兼容的，所以 `Service` 不能同时使用这两种特性。
-  但是在同一个集群的不同 `Service` 上是可以分别使用这两种特性的，只要不在同一个 `Service` 上就可以。
+  但是在同一个集群的不同 `Service` 上是可以分别使用这两种特性的，只要不在同一个
+  `Service` 上就可以。
 
 * 有效的拓扑键目前只有：`kubernetes.io/hostname`、`topology.kubernetes.io/zone` 和
   `topology.kubernetes.io/region`，但是未来会推广到其它的 `Node` 标签。
@@ -171,23 +180,21 @@ traffic as follows.
 
 <!--
 ## Examples
+
+The following are common examples of using the Service Topology feature.
 -->
 ## 示例
 
-<!--
-The following are common examples of using the Service Topology feature.
--->
 以下是使用服务拓扑功能的常见示例。
 
 <!--
 ### Only Node Local Endpoints
+
+A Service that only routes to node local endpoints. If no endpoints exist on the node, traffic is dropped:
 -->
 ### 仅节点本地端点
 
-<!--
-A Service that only routes to node local endpoints. If no endpoints exist on the node, traffic is dropped:
--->
-仅路由到节点本地端点的一种服务。 如果节点上不存在端点，流量则被丢弃：
+仅路由到节点本地端点的一种服务。如果节点上不存在端点，流量则被丢弃：
 
 ```yaml
 apiVersion: v1
@@ -207,12 +214,11 @@ spec:
 
 <!--
 ### Prefer Node Local Endpoints
+
+A Service that prefers node local Endpoints but falls back to cluster wide endpoints if node local endpoints do not exist:
 -->
 ### 首选节点本地端点
 
-<!--
-A Service that prefers node local Endpoints but falls back to cluster wide endpoints if node local endpoints do not exist:
--->
 首选节点本地端点，如果节点本地端点不存在，则回退到集群范围端点的一种服务：
 
 ```yaml
@@ -234,13 +240,13 @@ spec:
 
 <!--
 ### Only Zonal or Regional Endpoints
--->
-### 仅地域或区域端点
-<!--
+
 A Service that prefers zonal then regional endpoints. If no endpoints exist in either, traffic is dropped.
 -->
-首选地域端点而不是区域端点的一种服务。 如果以上两种范围内均不存在端点，流量则被丢弃。
+### 仅地域或区域端点
 
+首选地域端点而不是区域端点的一种服务。 如果以上两种范围内均不存在端点，
+流量则被丢弃。
 
 ```yaml
 apiVersion: v1
@@ -261,13 +267,13 @@ spec:
 
 <!--
 ### Prefer Node Local, Zonal, then Regional Endpoints
--->
-### 优先选择节点本地端点，地域端点，然后是区域端点
 
-<!--
 A Service that prefers node local, zonal, then regional endpoints but falls back to cluster wide endpoints.
 -->
-优先选择节点本地端点，地域端点，然后是区域端点，然后才是集群范围端点的一种服务。
+### 优先选择节点本地端点、地域端点，然后是区域端点
+
+优先选择节点本地端点，地域端点，然后是区域端点，最后才是集群范围端点的
+一种服务。
 
 ```yaml
 apiVersion: v1
@@ -296,3 +302,4 @@ spec:
 -->
 * 阅读关于[启用服务拓扑](/zh/docs/tasks/administer-cluster/enabling-service-topology/)
 * 阅读[用服务连接应用程序](/zh/docs/concepts/services-networking/connect-applications-service/)
+
diff --git a/content/zh/docs/concepts/services-networking/service.md b/content/zh/docs/concepts/services-networking/service.md
index 3497dd817d..78b16d6e13 100644
--- a/content/zh/docs/concepts/services-networking/service.md
+++ b/content/zh/docs/concepts/services-networking/service.md
@@ -312,12 +312,26 @@ selectors and uses DNS names instead. For more information, see the
 ExternalName Service 是 Service 的特例，它没有选择算符，但是使用 DNS 名称。
 有关更多信息，请参阅本文档后面的[ExternalName](#externalname)。
 
+<!--
+### Over Capacity Endpoints
+
+If an Endpoints resource has more than 1000 endpoints then a Kubernetes v1.21 (or later)
+cluster annotates that Endpoints with `endpoints.kubernetes.io/over-capacity: warning`.
+This annotation indicates that the affected Endpoints object is over capacity.
+-->
+### 超出容量的 Endpoints    {#over-capacity-endpoints}
+
+如果某个 Endpoints 资源中包含的端点个数超过 1000，则 Kubernetes v1.21 版本
+（及更新版本）的集群会将为该 Endpoints 添加注解
+`endpoints.kubernetes.io/over-capacity: warning`。
+这一注解表明所影响到的 Endpoints 对象已经超出容量。
+
 <!--
 ### EndpointSlices
 -->
 ### EndpointSlice
 
-{{< feature-state for_k8s_version="v1.17" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 <!--
 Endpoint Slices are an API resource that can provide a more scalable alternative
@@ -351,9 +365,10 @@ This field follows standard Kubernetes label syntax. Values should either be
 [IANA standard service names](https://www.iana.org/assignments/service-names) or
 domain prefixed names such as `mycompany.com/my-custom-protocol`.
 -->
-### 应用程序协议   {#application-protocol}
+### 应用协议   {#application-protocol}
 
 {{< feature-state for_k8s_version="v1.20" state="stable" >}}
+
 `appProtocol` 字段提供了一种为每个 Service 端口指定应用协议的方式。
 此字段的取值会被映射到对应的 Endpoints 和 EndpointSlices 对象。
 
@@ -1077,11 +1092,15 @@ The set of protocols that can be used for LoadBalancer type of Services is still
 {{< note >}}
 可用于 LoadBalancer 类型服务的协议集仍然由云提供商决定。
 {{< /note >}}
+
 <!--
 #### Disabling load balancer NodePort allocation {#load-balancer-nodeport-allocation}
+-->
+### 禁用负载均衡器节点端口分配 {#load-balancer-nodeport-allocation}
 
 {{< feature-state for_k8s_version="v1.20" state="alpha" >}}
 
+<!--
 Starting in v1.20, you can optionally disable node port allocation for a Service Type=LoadBalancer by setting
 the field `spec.allocateLoadBalancerNodePorts` to `false`. This should only be used for load balancer implementations
 that route traffic directly to pods as opposed to using node ports. By default, `spec.allocateLoadBalancerNodePorts`
@@ -1090,19 +1109,56 @@ is set to `false` on an existing Service with allocated node ports, those node p
 You must explicitly remove the `nodePorts` entry in every Service port to de-allocate those node ports.
 You must enable the `ServiceLBNodePortControl` feature gate to use this field.
 -->
-### 禁用负载均衡器节点端口分配 {#load-balancer-nodeport-allocation}
-
-{{< feature-state for_k8s_version="v1.20" state="alpha" >}}
-
 从 v1.20 版本开始， 你可以通过设置 `spec.allocateLoadBalancerNodePorts` 为 `false` 
 对类型为 LoadBalancer 的服务禁用节点端口分配。
 这仅适用于直接将流量路由到 Pod 而不是使用节点端口的负载均衡器实现。
 默认情况下，`spec.allocateLoadBalancerNodePorts` 为 `true`，
 LoadBalancer 类型的服务继续分配节点端口。
-如果现有服务已被分配节点端口，将参数 `spec.allocateLoadBalancerNodePorts` 设置为 `false` 时，
-这些服务上已分配置的节点端口不会被自动释放。
+如果现有服务已被分配节点端口，将参数 `spec.allocateLoadBalancerNodePorts`
+设置为 `false` 时，这些服务上已分配置的节点端口不会被自动释放。
 你必须显式地在每个服务端口中删除 `nodePorts` 项以释放对应端口。
 你必须启用 `ServiceLBNodePortControl` 特性门控才能使用该字段。
+
+<!--
+#### Specifying class of load balancer implementation {#load-balancer-class}
+-->
+#### 设置负载均衡器实现的类别 {#load-balancer-class}
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!--
+Starting in v1.21, you can optionally specify the class of a load balancer implementation for
+`LoadBalancer` type of Service by setting the field `spec.loadBalancerClass`.
+By default, `spec.loadBalancerClass` is `nil` and a `LoadBalancer` type of Service uses
+the cloud provider's default load balancer implementation. 
+If `spec.loadBalancerClass` is specified, it is assumed that a load balancer
+implementation that matches the specified class is watching for Services.
+Any default load balancer implementation (for example, the one provided by
+the cloud provider) will ignore Services that have this field set.
+`spec.loadBalancerClass` can be set on a Service of type `LoadBalancer` only.
+Once set, it cannot be changed. 
+-->
+从 v1.21 开始，你可以有选择地为 `LoadBalancer` 类型的服务设置字段
+`.spec.loadBalancerClass`，以指定其负载均衡器实现的类别。
+默认情况下，`.spec.loadBalancerClass` 的取值是 `nil`，`LoadBalancer` 类型
+服务会使用云提供商的默认负载均衡器实现。
+如果设置了 `.spec.loadBalancerClass`，则假定存在某个与所指定的类相匹配的
+负载均衡器实现在监视服务变化。
+所有默认的负载均衡器实现（例如，由云提供商所提供的）都会忽略设置了此字段
+的服务。`.spec.loadBalancerClass` 只能设置到类型为 `LoadBalancer` 的 Service
+之上，而且一旦设置之后不可变更。
+
+<!--
+The value of `spec.loadBalancerClass` must be a label-style identifier,
+with an optional prefix such as "`internal-vip`" or "`example.com/internal-vip`".
+Unprefixed names are reserved for end-users.
+You must enable the `ServiceLoadBalancerClass` feature gate to use this field.
+-->
+`.spec.loadBalancerClass` 的值必须是一个标签风格的标识符，
+可以有选择地带有类似 "`internal-vip`" 或 "`example.com/internal-vip`" 这类
+前缀。没有前缀的名字是保留给最终用户的。
+你必须启用 `ServiceLoadBalancerClass` 特性门控才能使用此字段。
+
 <!--
 #### Internal load balancer
 
@@ -1435,43 +1491,54 @@ There are other annotations to manage Classic Elastic Load Balancers that are de
     metadata:
       name: my-service
       annotations:
-        service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "60"
         # 按秒计的时间，表示负载均衡器关闭连接之前连接可以保持空闲
         # （连接上无数据传输）的时间长度
+        service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "60"
 
-        service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: "true"
         # 指定该负载均衡器上是否启用跨区的负载均衡能力
+        service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: "true"
 
-        service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "environment=prod,owner=devops"
         # 逗号分隔列表值，每一项都是一个键-值耦对，会作为额外的标签记录于 ELB 中
+        service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "environment=prod,owner=devops"
 
-        service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold: ""
         # 将某后端视为健康、可接收请求之前需要达到的连续成功健康检查次数。
         # 默认为 2，必须介于 2 和 10 之间
+        service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold: ""
 
-        service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold: "3"
         # 将某后端视为不健康、不可接收请求之前需要达到的连续不成功健康检查次数。
         # 默认为 6，必须介于 2 和 10 之间
+        service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold: "3"
 
-        service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval: "20"
         # 对每个实例进行健康检查时，连续两次检查之间的大致间隔秒数
         # 默认为 10，必须介于 5 和 300 之间
+        service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval: "20"
 
-        service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout: "5"
         # 时长秒数，在此期间没有响应意味着健康检查失败
         # 此值必须小于 service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval
         # 默认值为 5，必须介于 2 和 60 之间
+        service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout: "5"
 
+        # 由已有的安全组所构成的列表，可以配置到所创建的 ELB 之上。
+        # 与注解 service.beta.kubernetes.io/aws-load-balancer-extra-security-groups 不同，
+        # 这一设置会替代掉之前指定给该 ELB 的所有其他安全组，也会覆盖掉为此
+        # ELB 所唯一创建的安全组。 
+        # 此列表中的第一个安全组 ID 被用来作为决策源，以允许入站流量流入目标工作节点
+        # (包括服务流量和健康检查）。
+        # 如果多个 ELB 配置了相同的安全组 ID，为工作节点安全组添加的允许规则行只有一个，
+        # 这意味着如果你删除了这些 ELB 中的任何一个，都会导致该规则记录被删除，
+        # 以至于所有共享该安全组 ID 的其他 ELB 都无法访问该节点。
+        # 此注解如果使用不当，会导致跨服务的不可用状况。
         service.beta.kubernetes.io/aws-load-balancer-security-groups: "sg-53fae93f"
-        # 要添加到所创建的 ELB 之上的已有安全组列表。与注解
-        # service.beta.kubernetes.io/aws-load-balancer-extra-security-groups 不同，此
-        # 注解会替换掉之前指派给 ELB 的所有其他安全组
 
+        # 额外的安全组列表，将被添加到所创建的 ELB 之上。
+        # 添加时，会保留为 ELB 所专门创建的安全组。
+        # 这样会确保每个 ELB 都有一个唯一的安全组 ID 和与之对应的允许规则记录，
+        # 允许请求（服务流量和健康检查）发送到目标工作节点。
+        # 这里顶一个安全组可以被多个服务共享。
         service.beta.kubernetes.io/aws-load-balancer-extra-security-groups: "sg-53fae93f,sg-42efd82e"
-        # 要添加到 ELB 上的额外安全组列表
 
-        service.beta.kubernetes.io/aws-load-balancer-target-node-labels: "ingress-gw,gw-name=public-api"
         # 用逗号分隔的一个键-值偶对列表，用来为负载均衡器选择目标节点
+        service.beta.kubernetes.io/aws-load-balancer-target-node-labels: "ingress-gw,gw-name=public-api"
 ```
 
 <!--

From 78fe45c35a71705b0d60197635ade230257e932e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <remy.leone@gmail.com>
Date: Tue, 27 Apr 2021 16:19:52 +0200
Subject: [PATCH 657/788] Apply suggestions from code review

---
 content/fr/docs/concepts/workloads/controllers/statefulset.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/fr/docs/concepts/workloads/controllers/statefulset.md b/content/fr/docs/concepts/workloads/controllers/statefulset.md
index 637be79db7..87286aeaa4 100644
--- a/content/fr/docs/concepts/workloads/controllers/statefulset.md
+++ b/content/fr/docs/concepts/workloads/controllers/statefulset.md
@@ -129,7 +129,7 @@ Un StatefulSet peut utiliser un [Service Headless](/docs/concepts/services-netwo
 pour contrôler le domaine de ses Pods. Le domaine pris en charge par ce Service prend la forme :
 `$(nom service).$(namespace).svc.cluster.local`, où "cluster.local" est le domaine du cluster.
 Chaque fois qu'un Pod est créé, il obtient un sous-domaine DNS correspondant, prenant la forme :
-`$(nom pod).$(domaine du service gouvernant)`, où le service gouvernant est défini par par le
+`$(nom pod).$(domaine du service gouvernant)`, où le service gouvernant est défini par le
 champ `serviceName` du StatefulSet.
 
 En fonction de la façon dont est configuré le DNS dans votre cluster, vous ne pourrez peut-être pas rechercher immédiatement
@@ -166,7 +166,7 @@ Le domaine cluster sera `cluster.local` à moins qu'il soit
 Kubernetes crée un [PersistentVolume](/docs/concepts/storage/persistent-volumes/) pour chaque
 VolumeClaimTemplate. Dans l'exemple nginx ci-dessus, chaque Pod se verra affecter un unique PersistentVolume
 avec un StorageClass de `my-storage-class` et 1 Gib de stockage provisionné. Si aucun StorageClass
-n'est spécifié, alors le StorageClass par défaut sera utilié. Lorsqu'un Pod est (re)schedulé
+n'est spécifié, alors le StorageClass par défaut sera utilisé. Lorsqu'un Pod est (re)schedulé
 sur un noeud, ses `volumeMounts` montent les PersistentVolumes associés aux  
 PersistentVolumeClaims. Notez que les PersistentVolumes associés avec les PersistentVolumeClaims des Pods
 ne sont pas supprimés lorsque les Pods, ou le StatefulSet, sont supprimés.

From 979ffdf355a4e9404db84b799961db5e65af5473 Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <shannduin@google.com>
Date: Tue, 27 Apr 2021 21:03:51 +0000
Subject: [PATCH 658/788] Clarify use of QoS in eviction ranking

---
 .../configuration/pod-priority-preemption.md    | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/content/en/docs/concepts/configuration/pod-priority-preemption.md b/content/en/docs/concepts/configuration/pod-priority-preemption.md
index d6acc80a71..5e75674d73 100644
--- a/content/en/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/en/docs/concepts/configuration/pod-priority-preemption.md
@@ -353,13 +353,15 @@ the removal of the lowest priority Pods is not sufficient to allow the scheduler
 to schedule the preemptor Pod, or if the lowest priority Pods are protected by
 `PodDisruptionBudget`.
 
-The only component that considers both QoS and Pod priority is
-[kubelet out-of-resource eviction](/docs/tasks/administer-cluster/out-of-resource/).
-The kubelet ranks Pods for eviction first by whether or not their usage of the
-starved resource exceeds requests, then by Priority, and then by the consumption
-of the starved compute resource relative to the Pods' scheduling requests.
-See
-[evicting end-user pods](/docs/tasks/administer-cluster/out-of-resource/#evicting-end-user-pods)
+The kubelet uses Priority to determine pod order for [out-of-resource eviction](/docs/tasks/administer-cluster/out-of-resource/).
+You can use the QoS class to estimate the order in which pods are most likely
+to get evicted. The kubelet ranks pods for eviction based on the following factors:
+
+  1. Whether the starved resource usage exceeds requests
+  1. Pod Priority
+  1. Amount of resource usage relative to requests 
+
+See [evicting end-user pods](/docs/tasks/administer-cluster/out-of-resource/#evicting-end-user-pods)
 for more details.
 
 kubelet out-of-resource eviction does not evict Pods when their
@@ -367,7 +369,6 @@ usage does not exceed their requests. If a Pod with lower priority is not
 exceeding its requests, it won't be evicted. Another Pod with higher priority
 that exceeds its requests may be evicted.
 
-
 ## {{% heading "whatsnext" %}}
 
 * Read about using ResourceQuotas in connection with PriorityClasses: [limit Priority Class consumption by default](/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)

From fa520b399cb214523d4852f4716171fb12a0209e Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Wed, 28 Apr 2021 09:22:50 +0800
Subject: [PATCH 659/788] Append .git to upstream URLs

---
 content/zh/docs/contribute/new-content/open-a-pr.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/contribute/new-content/open-a-pr.md b/content/zh/docs/contribute/new-content/open-a-pr.md
index 53334aec6b..ee5a2fa503 100644
--- a/content/zh/docs/contribute/new-content/open-a-pr.md
+++ b/content/zh/docs/contribute/new-content/open-a-pr.md
@@ -218,8 +218,8 @@ Make sure you have [git](https://git-scm.com/book/en/v2/Getting-Started-Installi
     ```bash
     origin	git@github.com:<github_username>/website.git (fetch)
     origin	git@github.com:<github_username>/website.git (push)
-    upstream	https://github.com/kubernetes/website (fetch)
-    upstream	https://github.com/kubernetes/website (push)
+    upstream	https://github.com/kubernetes/website.git (fetch)
+    upstream	https://github.com/kubernetes/website.git (push)
     ```
 <!--
 6. Fetch commits from your fork's `origin/master` and `kubernetes/website`'s `upstream/master`:

From 9511387ffbd2d50aadb14b6f26be18eb60a0ca76 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Wed, 28 Apr 2021 11:25:34 +0800
Subject: [PATCH 660/788] Append .git to upstream URLs

---
 content/ru/docs/contribute/intermediate.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ru/docs/contribute/intermediate.md b/content/ru/docs/contribute/intermediate.md
index ba3b06511f..303a0877e5 100644
--- a/content/ru/docs/contribute/intermediate.md
+++ b/content/ru/docs/contribute/intermediate.md
@@ -217,8 +217,8 @@ PR объединяется, когда у него есть комментар
     ```bash
     origin	git@github.com:<github_username>/website.git (fetch)
     origin	git@github.com:<github_username>/website.git (push)
-    upstream	https://github.com/kubernetes/website (fetch)
-    upstream	https://github.com/kubernetes/website (push)
+    upstream	https://github.com/kubernetes/website.git (fetch)
+    upstream	https://github.com/kubernetes/website.git (push)
     ```
 
 ### Работа в локальном репозитории

From 68f40a267f4c8fa28b97c91479f16efe35f2ac1d Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Wed, 28 Apr 2021 13:59:56 +0800
Subject: [PATCH 661/788] [zh] translate concepts/Volume Health Monitoring

---
 .../storage/volume-health-monitoring.md       | 71 +++++++++++++++++++
 1 file changed, 71 insertions(+)
 create mode 100644 content/zh/docs/concepts/storage/volume-health-monitoring.md

diff --git a/content/zh/docs/concepts/storage/volume-health-monitoring.md b/content/zh/docs/concepts/storage/volume-health-monitoring.md
new file mode 100644
index 0000000000..4684d4353f
--- /dev/null
+++ b/content/zh/docs/concepts/storage/volume-health-monitoring.md
@@ -0,0 +1,71 @@
+---
+title: 卷健康监测
+content_type: concept
+---
+<!-- 
+---
+reviewers:
+- jsafrane
+- saad-ali
+- msau42
+- xing-yang
+title: Volume Health Monitoring
+content_type: concept
+---
+-->
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!-- 
+{{< glossary_tooltip text="CSI" term_id="csi" >}} volume health monitoring allows CSI Drivers to detect abnormal volume conditions from the underlying storage systems and report them as events on {{< glossary_tooltip text="PVCs" term_id="persistent-volume-claim" >}} or {{< glossary_tooltip text="Pods" term_id="pod" >}}.
+-->
+{{< glossary_tooltip text="CSI" term_id="csi" >}} 卷健康监测支持 CSI 驱动从底层的存储系统着手，探测异常的卷状态，并以事件的形式上报到 {{< glossary_tooltip text="PVCs" term_id="persistent-volume-claim" >}} 或 {{< glossary_tooltip text="Pods" term_id="pod" >}}.
+
+<!-- body -->
+
+<!-- 
+## Volume health monitoring
+-->
+## 卷健康监测 {#volume-health-monitoring}
+
+<!-- 
+Kubernetes _volume health monitoring_ is part of how Kubernetes implements the Container Storage Interface (CSI). Volume health monitoring feature is implemented in two components: an External Health Monitor controller, and the {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}.
+
+If a CSI Driver supports Volume Health Monitoring feature from the controller side, an event will be reported on the related {{< glossary_tooltip text="PersistentVolumeClaim" term_id="persistent-volume-claim" >}} (PVC) when an abnormal volume condition is detected on a CSI volume.
+-->
+Kubernetes _卷健康监测_ 是 Kubernetes 容器存储接口（CSI）实现的一部分。
+卷健康监测特性由两个组件实现：外部健康监测控制器和 {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}。
+
+如果 CSI 驱动器通过控制器的方式支持卷健康监测特性，那么只要在 CSI 卷上监测到异常卷状态，就会在
+{{< glossary_tooltip text="PersistentVolumeClaim" term_id="persistent-volume-claim" >}} (PVC)
+中上报一个事件。
+
+<!-- The External Health Monitor {{< glossary_tooltip text="controller" term_id="controller" >}} also watches for node failure events. You can enable node failure monitoring by setting the `enable-node-watcher` flag to true. When the external health monitor detects a node failure event, the controller reports an Event will be reported on the PVC to indicate that pods using this PVC are on a failed node.
+
+If a CSI Driver supports Volume Health Monitoring feature from the node side, an Event will be reported on every Pod using the PVC when an abnormal volume condition is detected on a CSI volume.
+-->
+外部健康监测  {{< glossary_tooltip text="控制器" term_id="controller" >}} 也会监测节点失效事件。
+如果要启动节点失效监测功能，你可以设置标志 `enable-node-watcher` 为 `true`。
+当外部健康监测器检测到一个节点失效事件，控制器会报送一个事件，该事件会在 PVC 上继续上报，
+以表明使用此 PVC 的 Pod 正位于一个失效的节点上。
+
+如果 CSI 驱动程序支持节点测的卷健康检测，那当在 CSI 卷上检测到异常卷时，会在使用该 PVC 的每个Pod 上触发一个事件。
+
+<!-- 
+You need to enable the `CSIVolumeHealth` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to use this feature from the node side.
+-->
+{{< note >}}
+你需要启用 
+`CSIVolumeHealth` [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
+，才能从节点测使用此特性。
+{{< /note >}}
+
+## {{% heading "whatsnext" %}}
+
+<!-- 
+See the [CSI driver documentation](https://kubernetes-csi.github.io/docs/drivers.html) to find out which CSI drivers have implemented this feature.
+-->
+参阅 [CSI 驱动程序文档](https://kubernetes-csi.github.io/docs/drivers.html)，
+可以找出有那些 CSI 驱动程序已实现了此特性。
\ No newline at end of file

From f465af8de00922001168244943651c60441a5ac9 Mon Sep 17 00:00:00 2001
From: huyuqing <huyuqing@inspur.com>
Date: Wed, 28 Apr 2021 15:04:57 +0800
Subject: [PATCH 662/788] Optimize document translation of
 content/zh/docs/tutorials/stateful-application/basic-stateful-set.md

---
 .../basic-stateful-set.md                     | 95 +++++++++++++------
 1 file changed, 66 insertions(+), 29 deletions(-)

diff --git a/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md b/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
index 0dd5ddcf1a..2b7c5f580f 100644
--- a/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -19,7 +19,8 @@ This tutorial provides an introduction to managing applications with
 demonstrates how to create, delete, scale, and update the Pods of StatefulSets.
 -->
 
-本教程介绍如何了使用 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 来管理应用。演示了如何创建、删除、扩容/缩容和更新 StatefulSets 的 Pods。
+本教程介绍如何了使用 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 来管理应用。
+演示了如何创建、删除、扩容/缩容和更新 StatefulSets 的 Pods。
 
 
 
@@ -71,7 +72,8 @@ After this tutorial, you will be familiar with the following.
 * How to update a StatefulSet's Pods
 -->
 
-StatefulSets 旨在与有状态的应用及分布式系统一起使用。然而在 Kubernetes 上管理有状态应用和分布式系统是一个宽泛而复杂的话题。为了演示 StatefulSet 的基本特性，并且不使前后的主题混淆，你将会使用 StatefulSet 部署一个简单的 web 应用。
+StatefulSets 旨在与有状态的应用及分布式系统一起使用。然而在 Kubernetes 上管理有状态应用和分布式系统是一个宽泛而复杂的话题。
+为了演示 StatefulSet 的基本特性，并且不使前后的主题混淆，你将会使用 StatefulSet 部署一个简单的 web 应用。
 
 在阅读本教程后，你将熟悉以下内容：
 
@@ -89,7 +91,8 @@ StatefulSets 旨在与有状态的应用及分布式系统一起使用。然而
 ## 创建 StatefulSet
 
 
-作为开始，使用如下示例创建一个 StatefulSet。它和 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 概念中的示例相似。它创建了一个 [Headless Service](/zh/docs/user-guide/services/#headless-services) `nginx` 用来发布 StatefulSet `web` 中的 Pod 的 IP 地址。
+作为开始，使用如下示例创建一个 StatefulSet。它和 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 概念中的示例相似。
+它创建了一个 [Headless Service](/zh/docs/user-guide/services/#headless-services) `nginx` 用来发布 StatefulSet `web` 中的 Pod 的 IP 地址。
 
 {{< codenew file="application/web/web.yaml" >}}
 
@@ -104,7 +107,8 @@ of the StatefulSet's Pods.
 下载上面的例子并保存为文件 `web.yaml`。
 
 
-你需要使用两个终端窗口。在第一个终端中，使用 [`kubectl get`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#get)  来查看 StatefulSet 的 Pods 的创建情况。
+你需要使用两个终端窗口。
+在第一个终端中，使用 [`kubectl get`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#get)  来查看 StatefulSet 的 Pods 的创建情况。
 
 ```shell
 kubectl get pods -w -l app=nginx
@@ -130,7 +134,8 @@ The command above creates two Pods, each running an
 `web` StatefulSet to verify that they were created successfully.
 -->
 
-上面的命令创建了两个 Pod，每个都运行了一个 [NGINX](https://www.nginx.com) web 服务器。获取 `nginx` Service 和 `web` StatefulSet 来验证是否成功的创建了它们。
+上面的命令创建了两个 Pod，每个都运行了一个 [NGINX](https://www.nginx.com) web 服务器。
+获取 `nginx` Service 和 `web` StatefulSet 来验证是否成功的创建了它们。
 
 ```shell
 kubectl get service nginx
@@ -155,7 +160,8 @@ look like the example below.
 ### 顺序创建 Pod
 
 
-对于一个拥有 N 个副本的 StatefulSet，Pod 被部署时是按照 {0 …… N-1} 的序号顺序创建的。在第一个终端中使用 `kubectl get` 检查输出。这个输出最终将看起来像下面的样子。
+对于一个拥有 N 个副本的 StatefulSet，Pod 被部署时是按照 {0 …… N-1} 的序号顺序创建的。
+在第一个终端中使用 `kubectl get` 检查输出。这个输出最终将看起来像下面的样子。
 
 ```shell
 kubectl get pods -w -l app=nginx
@@ -221,7 +227,9 @@ Each Pod has a stable hostname based on its ordinal index. Use
 `hostname` command in each Pod.
 -->
 
-如同 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 概念中所提到的，StatefulSet 中的 Pod 拥有一个具有黏性的、独一无二的身份标志。这个标志基于 StatefulSet 控制器分配给每个 Pod 的唯一顺序索引。Pod 的名称的形式为`<statefulset name>-<ordinal index>`。`web`StatefulSet 拥有两个副本，所以它创建了两个 Pod：`web-0`和`web-1`。
+如同 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 概念中所提到的， StatefulSet 中的 Pod 拥有一个具有黏性的、独一无二的身份标志。
+这个标志基于 StatefulSet 控制器分配给每个 Pod 的唯一顺序索引。Pod 的名称的形式为`<statefulset name>-<ordinal index>`。
+`web`StatefulSet 拥有两个副本，所以它创建了两个 Pod：`web-0`和`web-1`。
 
 ### 使用稳定的网络身份标识
 
@@ -240,7 +248,8 @@ Using `nslookup` on the Pods' hostnames, you can examine their in-cluster DNS
 addresses.
 -->
 
-使用 [`kubectl run`](/zh/docs/reference/generated/kubectl/kubectl-commands/#run) 运行一个提供 `nslookup` 命令的容器，该命令来自于 `dnsutils` 包。通过对 Pod 的主机名执行 `nslookup`，你可以检查他们在集群内部的 DNS 地址。
+使用 [`kubectl run`](/zh/docs/reference/generated/kubectl/kubectl-commands/#run) 运行一个提供 `nslookup` 命令的容器，该命令来自于 `dnsutils` 包。
+通过对 Pod 的主机名执行 `nslookup`，你可以检查他们在集群内部的 DNS 地址。
 
 ```shell
 kubectl run -i --tty --image busybox:1.28 dns-test --restart=Never --rm
@@ -267,7 +276,8 @@ contain the Pods' IP addresses.
 In one terminal, watch the StatefulSet's Pods.
 -->
 
-headless service 的 CNAME 指向 SRV 记录（记录每个 Running 和 Ready 状态的 Pod）。SRV 记录指向一个包含 Pod IP 地址的记录表项。
+headless service 的 CNAME 指向 SRV 记录（记录每个 Running 和 Ready 状态的 Pod）。
+SRV 记录指向一个包含 Pod IP 地址的记录表项。
 
 在一个终端中查看 StatefulSet 的 Pod。
 
@@ -355,10 +365,12 @@ application will be able to discover the Pods' addresses when they transition
 to Running and Ready.
 -->
 
-Pod 的序号、主机名、SRV 条目和记录名称没有改变，但和 Pod 相关联的 IP 地址可能发生了改变。在本教程中使用的集群中它们就改变了。这就是为什么不要在其他应用中使用 StatefulSet 中的 Pod 的 IP 地址进行连接，这点很重要。
+Pod 的序号、主机名、SRV 条目和记录名称没有改变，但和 Pod 相关联的 IP 地址可能发生了改变。
+在本教程中使用的集群中它们就改变了。这就是为什么不要在其他应用中使用 StatefulSet 中的 Pod 的 IP 地址进行连接，这点很重要。
 
 
-如果你需要查找并连接一个 StatefulSet 的活动成员，你应该查询 Headless Service 的 CNAME。和 CNAME 相关联的 SRV 记录只会包含 StatefulSet 中处于 Running 和 Ready 状态的 Pod。
+如果你需要查找并连接一个 StatefulSet 的活动成员，你应该查询 Headless Service 的 CNAME。
+和 CNAME 相关联的 SRV 记录只会包含 StatefulSet 中处于 Running 和 Ready 状态的 Pod。
 
 
 如果你的应用已经实现了用于测试 liveness 和 readiness 的连接逻辑，你可以使用 Pod 的 SRV 记录（`web-0.nginx.default.svc.cluster.local`，
@@ -399,7 +411,8 @@ webservers serve the hostnames.
 StatefulSet 控制器创建了两个 PersistentVolumeClaims，绑定到两个 [PersistentVolumes](/zh/docs/concepts/storage/volumes/)。由于本教程使用的集群配置为动态提供 PersistentVolume，所有的 PersistentVolume 都是自动创建和绑定的。
 
 
-NGINX web 服务器默认会加载位于 `/usr/share/nginx/html/index.html` 的 index 文件。StatefulSets `spec` 中的 `volumeMounts` 字段保证了 `/usr/share/nginx/html` 文件夹由一个 PersistentVolume 支持。
+NGINX web 服务器默认会加载位于 `/usr/share/nginx/html/index.html` 的 index 文件。
+StatefulSets `spec` 中的 `volumeMounts` 字段保证了 `/usr/share/nginx/html` 文件夹由一个 PersistentVolume 支持。
 
 
 将 Pod 的主机名写入它们的`index.html`文件并验证 NGINX web 服务器使用该主机名提供服务。
@@ -419,7 +432,8 @@ you will need to fix the permissions of the directory mounted by the `volumeMoun
 (due to a [bug when using hostPath volumes](https://github.com/kubernetes/kubernetes/issues/2630)) with:
 -->
 
-请注意，如果你看见上面的 curl 命令返回了 403 Forbidden 的响应，你需要像这样修复使用 `volumeMounts`（due to a [bug when using hostPath volumes](https://github.com/kubernetes/kubernetes/issues/2630)）挂载的目录的权限：
+请注意，如果你看见上面的 curl 命令返回了 403 Forbidden 的响应，
+你需要像这样修复使用 `volumeMounts`（due to a [bug when using hostPath volumes](https://github.com/kubernetes/kubernetes/issues/2630)）挂载的目录的权限：
 
 ```shell
 for i in 0 1; do kubectl exec web-$i -- chmod 755 /usr/share/nginx/html; done
@@ -501,12 +515,15 @@ This is accomplished by updating the `replicas` field. You can use either
 In one terminal window, watch the Pods in the StatefulSet.
 -->
 
-虽然 `web-0` 和 `web-1` 被重新调度了，但它们仍然继续监听各自的主机名，因为和它们的 PersistentVolumeClaim 相关联的 PersistentVolume 被重新挂载到了各自的 `volumeMount` 上。不管 `web-0` 和 `web-1` 被调度到了哪个节点上，它们的 PersistentVolumes 将会被挂载到合适的挂载点上。
+虽然 `web-0` 和 `web-1` 被重新调度了，但它们仍然继续监听各自的主机名，因为和它们的 PersistentVolumeClaim 相关联的 PersistentVolume 被重新挂载到了各自的 `volumeMount` 上。
+不管 `web-0` 和 `web-1` 被调度到了哪个节点上，它们的 PersistentVolumes 将会被挂载到合适的挂载点上。
 
 
 ## 扩容/缩容 StatefulSet
 
-扩容/缩容 StatefulSet 指增加或减少它的副本数。这通过更新 `replicas` 字段完成。你可以使用[`kubectl scale`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#scale) 或者[`kubectl patch`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#patch)来扩容/缩容一个 StatefulSet。
+扩容/缩容 StatefulSet 指增加或减少它的副本数。这通过更新 `replicas` 字段完成。
+你可以使用[`kubectl scale`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#scale) 
+或者[`kubectl patch`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#patch)来扩容/缩容一个 StatefulSet。
 
 
 ### 扩容
@@ -567,7 +584,8 @@ subsequent Pod.
 In one terminal, watch the StatefulSet's Pods.
 -->
 
-StatefulSet 控制器扩展了副本的数量。如同[创建 StatefulSet](#顺序创建pod) 所述，StatefulSet 按序号索引顺序的创建每个 Pod，并且会等待前一个 Pod 变为 Running 和 Ready 才会启动下一个 Pod。
+StatefulSet 控制器扩展了副本的数量。
+如同[创建 StatefulSet](#顺序创建pod) 所述，StatefulSet 按序号索引顺序的创建每个 Pod，并且会等待前一个 Pod 变为 Running 和 Ready 才会启动下一个 Pod。
 
 ### 缩容
 
@@ -658,13 +676,17 @@ StatefulSet. There are two valid update strategies, `RollingUpdate` and
 `RollingUpdate` update strategy is the default for StatefulSets.
 -->
 
-五个 PersistentVolumeClaims 和五个 PersistentVolumes 仍然存在。查看 Pod 的 [稳定存储](#stable-storage)，我们发现当删除 StatefulSet 的 Pod 时，挂载到 StatefulSet 的 Pod 的 PersistentVolumes 不会被删除。当这种删除行为是由 StatefulSet 缩容引起时也是一样的。
+五个 PersistentVolumeClaims 和五个 PersistentVolumes 仍然存在。
+查看 Pod 的 [稳定存储](#stable-storage)，我们发现当删除 StatefulSet 的 Pod 时，挂载到 StatefulSet 的 Pod 的 PersistentVolumes 不会被删除。
+当这种删除行为是由 StatefulSet 缩容引起时也是一样的。
 
 
 ## 更新 StatefulSet
 
 
-Kubernetes 1.7 版本的 StatefulSet 控制器支持自动更新。更新策略由 StatefulSet API Object 的`spec.updateStrategy` 字段决定。这个特性能够用来更新一个 StatefulSet 中的 Pod 的 container images，resource requests，以及 limits，labels 和 annotations。`RollingUpdate`滚动更新是 StatefulSets 默认策略。
+Kubernetes 1.7 版本的 StatefulSet 控制器支持自动更新。
+更新策略由 StatefulSet API Object 的`spec.updateStrategy` 字段决定。这个特性能够用来更新一个 StatefulSet 中的 Pod 的 container images，resource requests，以及 limits，labels 和 annotations。
+`RollingUpdate`滚动更新是 StatefulSets 默认策略。
 
 
 <!--
@@ -756,7 +778,10 @@ in the presence of intermittent failures.
 Get the Pods to view their container images.
 -->
 
-StatefulSet 里的 Pod 采用和序号相反的顺序更新。在更新下一个 Pod 前，StatefulSet 控制器终止每个 Pod 并等待它们变成 Running 和 Ready。请注意，虽然在顺序后继者变成 Running 和 Ready 之前 StatefulSet 控制器不会更新下一个 Pod，但它仍然会重建任何在更新过程中发生故障的 Pod，使用的是它们当前的版本。已经接收到更新请求的 Pod 将会被恢复为更新的版本，没有收到请求的 Pod 则会被恢复为之前的版本。像这样，控制器尝试继续使应用保持健康并在出现间歇性故障时保持更新的一致性。
+StatefulSet 里的 Pod 采用和序号相反的顺序更新。在更新下一个 Pod 前，StatefulSet 控制器终止每个 Pod 并等待它们变成 Running 和 Ready。
+请注意，虽然在顺序后继者变成 Running 和 Ready 之前 StatefulSet 控制器不会更新下一个 Pod，但它仍然会重建任何在更新过程中发生故障的 Pod，使用的是它们当前的版本。
+已经接收到更新请求的 Pod 将会被恢复为更新的版本，没有收到请求的 Pod 则会被恢复为之前的版本。
+像这样，控制器尝试继续使应用保持健康并在出现间歇性故障时保持更新的一致性。
 
 获取 Pod 来查看他们的容器镜像。
 
@@ -791,7 +816,8 @@ StatefulSet 中的所有 Pod 现在都在运行之前的容器镜像。
 
 #### 分段更新
 
-你可以使用 `RollingUpdate` 更新策略的 `partition` 参数来分段更新一个 StatefulSet。分段的更新将会使 StatefulSet 中的其余所有 Pod 保持当前版本的同时仅允许改变 StatefulSet 的  `.spec.template`。
+你可以使用 `RollingUpdate` 更新策略的 `partition` 参数来分段更新一个 StatefulSet。
+分段的更新将会使 StatefulSet 中的其余所有 Pod 保持当前版本的同时仅允许改变 StatefulSet 的  `.spec.template`。
 
 
 Patch `web` StatefulSet 来对 `updateStrategy` 字段添加一个分区。
@@ -864,7 +890,8 @@ you specified [above](#staging-an-update).
 Patch the StatefulSet to decrement the partition.
 -->
 
-请注意，虽然更新策略是 `RollingUpdate`，StatefulSet 控制器还是会使用原始的容器恢复 Pod。这是因为 Pod 的序号比 `updateStrategy` 指定的 `partition` 更小。
+请注意，虽然更新策略是 `RollingUpdate`，StatefulSet 控制器还是会使用原始的容器恢复 Pod。
+这是因为 Pod 的序号比 `updateStrategy` 指定的 `partition` 更小。
 
 
 #### 灰度发布
@@ -974,12 +1001,14 @@ update.
 The partition is currently set to `2`. Set the partition to `0`.
 -->
 
-`web-1` 被按照原来的配置恢复，因为 Pod 的序号小于分区。当指定了分区时，如果更新了 StatefulSet 的 `.spec.template`，则所有序号大于或等于分区的 Pod 都将被更新。如果一个序号小于分区的 Pod 被删除或者终止，它将被按照原来的配置恢复。
+`web-1` 被按照原来的配置恢复，因为 Pod 的序号小于分区。当指定了分区时，如果更新了 StatefulSet 的 `.spec.template`，则所有序号大于或等于分区的 Pod 都将被更新。
+如果一个序号小于分区的 Pod 被删除或者终止，它将被按照原来的配置恢复。
 
 
 #### 分阶段的发布
 
-你可以使用类似[灰度发布](#灰度发布)的方法执行一次分阶段的发布（例如一次线性的、等比的或者指数形式的发布）。要执行一次分阶段的发布，你需要设置 `partition` 为希望控制器暂停更新的序号。
+你可以使用类似[灰度发布](#灰度发布)的方法执行一次分阶段的发布（例如一次线性的、等比的或者指数形式的发布）。
+要执行一次分阶段的发布，你需要设置 `partition` 为希望控制器暂停更新的序号。
 
 
 分区当前为`2`。请将分区设置为`0`。
@@ -1055,7 +1084,8 @@ In one terminal window, watch the Pods in the StatefulSet.
 
 ### On Delete 策略
 
-`OnDelete` 更新策略实现了传统（1.7 之前）行为，它也是默认的更新策略。当你选择这个更新策略并修改 StatefulSet 的 `.spec.template` 字段时，StatefulSet 控制器将不会自动的更新 Pod。
+`OnDelete` 更新策略实现了传统（1.7 之前）行为，它也是默认的更新策略。
+当你选择这个更新策略并修改 StatefulSet 的 `.spec.template` 字段时，StatefulSet 控制器将不会自动的更新 Pod。
 
 ## 删除 StatefulSet
 
@@ -1079,7 +1109,8 @@ command. This parameter tells Kubernetes to only delete the StatefulSet, and to
 not delete any of its Pods.
 -->
 
-使用 [`kubectl delete`](/zh/docs/reference/generated/kubectl/kubectl-commands/#delete) 删除 StatefulSet。请确保提供了 `--cascade=false` 参数给命令。这个参数告诉 Kubernetes 只删除 StatefulSet 而不要删除它的任何 Pod。
+使用 [`kubectl delete`](/zh/docs/reference/generated/kubectl/kubectl-commands/#delete) 删除 StatefulSet。
+请确保提供了 `--cascade=false` 参数给命令。这个参数告诉 Kubernetes 只删除 StatefulSet 而不要删除它的任何 Pod。
 
 ```shell
 kubectl delete statefulset web --cascade=false
@@ -1194,7 +1225,9 @@ Let's take another look at the contents of the `index.html` file served by the
 Pods' webservers.
 -->
 
-当重新创建 `web` StatefulSet 时，`web-0`被第一个重新启动。由于 `web-1` 已经处于 Running 和 Ready 状态，当 `web-0` 变成 Running 和 Ready 时，StatefulSet 会直接接收这个 Pod。由于你重新创建的 StatefulSet 的 `replicas` 等于 2，一旦 `web-0` 被重新创建并且 `web-1` 被认为已经处于 Running 和 Ready 状态时，`web-2`将会被终止。
+当重新创建 `web` StatefulSet 时，`web-0`被第一个重新启动。
+由于 `web-1` 已经处于 Running 和 Ready 状态，当 `web-0` 变成 Running 和 Ready 时，StatefulSet 会直接接收这个 Pod。
+由于你重新创建的 StatefulSet 的 `replicas` 等于 2，一旦 `web-0` 被重新创建并且 `web-1` 被认为已经处于 Running 和 Ready 状态时，`web-2`将会被终止。
 
 
 让我们再看看被 Pod 的 web 服务器加载的 `index.html` 的内容。
@@ -1217,7 +1250,9 @@ PersistentVolume was remounted.
 In one terminal window, watch the Pods in the StatefulSet.
 -->
 
-尽管你同时删除了 StatefulSet 和 `web-0` Pod，但它仍然使用最初写入 `index.html` 文件的主机名进行服务。这是因为 StatefulSet 永远不会删除和一个 Pod 相关联的 PersistentVolumes。当你重建这个 StatefulSet 并且重新启动了 `web-0` 时，它原本的 PersistentVolume 会被重新挂载。
+尽管你同时删除了 StatefulSet 和 `web-0` Pod，但它仍然使用最初写入 `index.html` 文件的主机名进行服务。
+这是因为 StatefulSet 永远不会删除和一个 Pod 相关联的 PersistentVolumes。
+当你重建这个 StatefulSet 并且重新启动了 `web-0` 时，它原本的 PersistentVolume 会被重新挂载。
 
 
 ### 级联删除
@@ -1272,7 +1307,8 @@ it will not delete the Headless Service associated with the StatefulSet. You
 must delete the `nginx` Service manually.
 -->
 
-如同你在[缩容](#ordered-pod-termination)一节看到的，Pod 按照和他们序号索引相反的顺序每次终止一个。在终止一个 Pod 前，StatefulSet 控制器会等待 Pod 后继者被完全终止。
+如同你在[缩容](#ordered-pod-termination)一节看到的，Pod 按照和他们序号索引相反的顺序每次终止一个。
+在终止一个 Pod 前，StatefulSet 控制器会等待 Pod 后继者被完全终止。
 
 
 请注意，虽然级联删除会删除 StatefulSet 和它的 Pod，但它并不会删除和 StatefulSet 关联的 Headless Service。你必须手动删除`nginx` Service。
@@ -1360,7 +1396,8 @@ Pod.
 ## Pod 管理策略
 
 
-对于某些分布式系统来说，StatefulSet 的顺序性保证是不必要和/或者不应该的。这些系统仅仅要求唯一性和身份标志。为了解决这个问题，在 Kubernetes 1.7 中我们针对 StatefulSet API Object 引入了 `.spec.podManagementPolicy`。
+对于某些分布式系统来说，StatefulSet 的顺序性保证是不必要和/或者不应该的。这些系统仅仅要求唯一性和身份标志。
+为了解决这个问题，在 Kubernetes 1.7 中我们针对 StatefulSet API Object 引入了 `.spec.podManagementPolicy`。
 
 
 ### OrderedReady Pod 管理策略

From 628a4d0d8422ee0c2ebd7cd5c8ce2bb2d31d62b0 Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Wed, 28 Apr 2021 14:28:47 +0800
Subject: [PATCH 663/788] [zh]Resync Tutorials (2)

---
 .../stateful-application/cassandra.md         | 1132 ++++++-----------
 .../stateless-application/guestbook.md        |   58 +-
 2 files changed, 411 insertions(+), 779 deletions(-)

diff --git a/content/zh/docs/tutorials/stateful-application/cassandra.md b/content/zh/docs/tutorials/stateful-application/cassandra.md
index 98d0d6ab44..461e3d1632 100644
--- a/content/zh/docs/tutorials/stateful-application/cassandra.md
+++ b/content/zh/docs/tutorials/stateful-application/cassandra.md
@@ -1,807 +1,439 @@
 ---
-title: "示例：使用 Stateful Sets 部署 Cassandra"
+title: "示例：使用 StatefulSet 部署 Cassandra"
+content_type: tutorial
+weight: 30
 ---
 
 <!--
-title: "Example: Deploying Cassandra with Stateful Sets"
+title: "Example: Deploying Cassandra with a StatefulSet"
+reviewers:
+- ahmetb
+content_type: tutorial
+weight: 30
 -->
 
-## 目录
+<!-- overview -->
+<!--
+This tutorial shows you how to run [Apache Cassandra](https://cassandra.apache.org/) on Kubernetes.
+Cassandra, a database, needs persistent storage to provide data durability (application _state_).
+In this example, a custom Cassandra seed provider lets the database discover new Cassandra instances as they join the Cassandra cluster.
+-->
+本教程描述拉如何在 Kubernetes 上运行 [Apache Cassandra](https://cassandra.apache.org/)。
+数据库 Cassandra 需要永久性存储提供数据持久性（应用 _状态_）。
+在此示例中，自定义 Cassandra seed provider 使数据库在加入 Cassandra 集群时发现新的 Cassandra 实例。
 
-  - [准备工作](#prerequisites)
-  - [Cassandra docker 镜像](#cassandra-docker)
-  - [快速入门](#quickstart)
-  - [步骤1：创建 Cassandra Headless Service](#step-1-create-a-cassandra-headless-service)
-  - [步骤2：使用 StatefulSet 创建 Cassandra Ring 环](#step-2-use-a-statefulset-to-create-cassandra-ring)
-  - [步骤3：验证并修改 Cassandra StatefulSet](#step-3-validate-and-modify-the-cassandra-statefulset)
-  - [步骤4：删除 Cassandra StatefulSet](#step-4-delete-cassandra-statefulset)
-  - [步骤5：使用 Replication Controller 创建 Cassandra 节点 pods](#step-5-use-a-replication-controller-to-create-cassandra-node-pods)
-  - [步骤6：Cassandra 集群扩容](#step-6-scale-up-the-cassandra-cluster)
-  - [步骤7：删除 Replication Controller](#step-7-delete-the-replication-controller)
-  - [步骤8：使用 DaemonSet 替换 Replication Controller](#step-8-use-a-daemonset-instead-of-a-replication-controller)
-  - [步骤9：资源清理](#step-9-resource-cleanup)
-  - [Seed Provider Source](#seed-provider-source)
+<!--
+*StatefulSets* make it easier to deploy stateful applications into your Kubernetes cluster.
+For more information on the features used in this tutorial, see
+[StatefulSet](/docs/concepts/workloads/controllers/statefulset/).
+-->
+使用 *StatefulSets* 可以更轻松地将有状态的应用程序部署到你的 Kubernetes 集群中。
+有关本教程中使用的功能的更多信息，
+参阅 [StatefulSet](/zh/docs/concepts/workloads/controllers/statefulset/)。
+
+<!--
+Cassandra and Kubernetes both use the term _node_ to mean a member of a cluster. In this
+tutorial, the Pods that belong to the StatefulSet are Cassandra nodes and are members
+of the Cassandra cluster (called a _ring_). When those Pods run in your Kubernetes cluster,
+the Kubernetes control plane schedules those Pods onto Kubernetes
+{{< glossary_tooltip text="Nodes" term_id="node" >}}.
+-->
+{{< note >}}
+Cassandra 和 Kubernetes 都使用术语 _node_ 来表示集群的成员。
+在本教程中，属于 StatefulSet 的 Pod 是 Cassandra 节点，并且是 Cassandra 集群的成员（称为 _ring_）。
+当这些 Pod 在你的 Kubernetes 集群中运行时，Kubernetes 控制平面会将这些 Pod 调度到 Kubernetes 的
+{{< glossary_tooltip text="节点" term_id="node" >}}上。
+
+<!--
+When a Cassandra node starts, it uses a _seed list_ to bootstrap discovery of other
+nodes in the ring.
+This tutorial deploys a custom Cassandra seed provider that lets the database discover
+new Cassandra Pods as they appear inside your Kubernetes cluster.
+-->
+当 Cassandra 节点启动时，使用 _seed列表_ 来引导发现 ring 中其他节点。
+本教程部署了一个自定义的 Cassandra seed provider，使数据库可以发现新的 Cassandra Pod 出现在 Kubernetes 集群中。
+{{< /note >}}
+
+## {{% heading "objectives" %}}
+
+<!--
+* Create and validate a Cassandra headless {{< glossary_tooltip text="Service" term_id="service" >}}.
+* Use a {{< glossary_tooltip term_id="StatefulSet" >}} to create a Cassandra ring.
+* Validate the StatefulSet.
+* Modify the StatefulSet.
+* Delete the StatefulSet and its {{< glossary_tooltip text="Pods" term_id="pod" >}}.
+-->
+* 创建并验证 Cassandra 无头（headless）{{< glossary_tooltip text="Service" term_id="service" >}}..
+* 使用 {{< glossary_tooltip term_id="StatefulSet" >}} 创建一个 Cassandra ring。
+* 验证 StatefulSet。
+* 修改 StatefulSet。
+* 删除 StatefulSet 及其 {{< glossary_tooltip text="Pod" term_id="pod" >}}.
 
 
-下文描述了在 Kubernetes 上部署一个_云原生_ [Cassandra](http://cassandra.apache.org/) 的过程。当我们说_云原生_时，指的是一个应用能够理解它运行在一个集群管理器内部，并且使用这个集群的管理基础设施来帮助实现这个应用。特别的，本例使用了一个自定义的 Cassandra `SeedProvider` 帮助 Cassandra 发现新加入集群 Cassandra 节点。
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!--
+To complete this tutorial, you should already have a basic familiarity with
+{{< glossary_tooltip text="Pods" term_id="pod" >}},
+{{< glossary_tooltip text="Services" term_id="service" >}}, and
+{{< glossary_tooltip text="StatefulSets" term_id="StatefulSet" >}}.
+-->
+要完成本教程，你应该已经熟悉 {{< glossary_tooltip text="Pod" term_id="pod" >}}，
+{{< glossary_tooltip text="Service" term_id="service" >}}和 {{< glossary_tooltip text="StatefulSet" term_id="StatefulSet" >}}。
+
+<!--
+### Additional Minikube setup instructions
+
+{{< caution >}}
+[Minikube](https://minikube.sigs.k8s.io/docs/) defaults to 1024MiB of memory and 1 CPU.
+Running Minikube with the default resource configuration results in insufficient resource
+errors during this tutorial. To avoid these errors, start Minikube with the following settings:
+-->
+### 额外的 Minikube 设置说明
+
+{{< caution >}}
+[Minikube](https://minikube.sigs.k8s.io/docs/)默认为 1024MiB 内存和 1 个 CPU。
+在本教程中，使用默认资源配置运行 Minikube 会导致资源不足的错误。为避免这些错误，请使用以下设置启动 Minikube：
+
+```shell
+minikube start --memory 5120 --cpus=4
+```
+{{< /caution >}}
 
 
-本示例也使用了Kubernetes的一些核心组件：
+<!-- lessoncontent -->
+<!--
+## Creating a headless Service for Cassandra {#creating-a-cassandra-headless-service}
 
-- [_Pods_](/zh/docs/user-guide/pods)
-- [ _Services_](/zh/docs/user-guide/services)
-- [_Replication Controllers_](/zh/docs/user-guide/replication-controller)
-- [_Stateful Sets_](/zh/docs/concepts/workloads/controllers/statefulset/)
-- [_Daemon Sets_](/zh/docs/admin/daemons)
+In Kubernetes, a {{< glossary_tooltip text="Service" term_id="service" >}} describes a set of
+{{< glossary_tooltip text="Pods" term_id="pod" >}} that perform the same task.
 
+The following Service is used for DNS lookups between Cassandra Pods and clients within your cluster:
 
+Create a Service to track all Cassandra StatefulSet members from the `cassandra-service.yaml` file:
+-->
+## 为 Cassandra 创建无头（headless） Services {#creating-a-cassandra-headless-service}
 
-## 准备工作
-
-
-本示例假设你已经安装运行了一个 Kubernetes集群（版本 >=1.2），并且还在某个路径下安装了  [`kubectl`](/zh/docs/tasks/tools/install-kubectl/) 命令行工具。请查看 [getting started guides](/zh/docs/getting-started-guides/) 获取关于你的平台的安装说明。
-
-
-本示例还需要一些代码和配置文件。为了避免手动输入，你可以 `git clone` Kubernetes 源到你本地。
-
-
-## Cassandra Docker 镜像
-
-
-Pod 使用来自 Google [容器仓库](https://cloud.google.com/container-registry/docs/) 的 [```gcr.io/google-samples/cassandra:v12```](https://github.com/kubernetes/examples/blob/master/cassandra/image/Dockerfile) 镜像。这个 docker 镜像基于 `debian:jessie` 并包含 OpenJDK 8。该镜像包含一个从 Apache Debian 源中安装的标准 Cassandra。你可以通过使用环境变量改变插入到 `cassandra.yaml` 文件中的参数值。
-
-| ENV VAR                | DEFAULT VALUE  |
-| ---------------------- | :------------: |
-| CASSANDRA_CLUSTER_NAME | 'Test Cluster' |
-| CASSANDRA_NUM_TOKENS   |       32       |
-| CASSANDRA_RPC_ADDRESS  |    0.0.0.0     |
-
-
-## 快速入门
+在 Kubernetes 中，一个 {{< glossary_tooltip text="Service" term_id="service" >}}
+描述了一组执行相同任务的 {{< glossary_tooltip text="Pod" term_id="pod" >}}。
 
+以下 Service 用于在 Cassandra Pod 和集群中的客户端之间进行 DNS 查找：
 
 {{< codenew file="application/cassandra/cassandra-service.yaml" >}}
 
-如果你希望直接跳到我们使用的命令，以下是全部步骤：
-
-<!--
-# clone the example repository
-# create a service to track all cassandra statefulset nodes
-# create a statefulset
-# validate the Cassandra cluster. Substitute the name of one of your pods.
-# cleanup
--->
-
-```sh
+创建一个 Service 来跟踪 `cassandra-service.yaml` 文件中的所有 Cassandra StatefulSet：
 
+```shell
 kubectl apply -f https://k8s.io/examples/application/cassandra/cassandra-service.yaml
 ```
 
+<!--
+### Validating (optional) {#validating}
+
+Get the Cassandra Service.
+-->
+### 验证(可选) {#validating}
+
+获取 Cassandra Service。
+
+```shell
+kubectl get svc cassandra
+```
+
+<!-- 
+The response is 
+-->
+响应是：
+
+```
+NAME        TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
+cassandra   ClusterIP   None         <none>        9042/TCP   45s
+```
+
+<!--
+If you don't see a Service named `cassandra`, that means creation failed. Read
+[Debug Services](/docs/tasks/debug-application-cluster/debug-service/)
+for help troubleshooting common issues.
+-->
+如果没有看到名为 `cassandra` 的服务，则表示创建失败。
+请阅读[Debug Services](/zh/docs/tasks/debug-application-cluster/debug-service/)，以解决常见问题。
+
+<!--
+## Using a StatefulSet to create a Cassandra ring
+
+The StatefulSet manifest, included below, creates a Cassandra ring that consists of three Pods.
+
+{{< note >}}
+This example uses the default provisioner for Minikube.
+Please update the following StatefulSet for the cloud you are working with.
+{{< /note >}}
+-->
+## 使用 StatefulSet 创建 Cassandra Ring
+
+下面包含的 StatefulSet 清单创建了一个由三个 Pod 组成的 Cassandra ring。
+
+{{< note >}}
+本示例使用 Minikube 的默认配置程序。
+请为正在使用的云更新以下 StatefulSet。
+{{< /note >}}
+
 {{< codenew file="application/cassandra/cassandra-statefulset.yaml" >}}
 
-```
-# 创建 statefulset
+<!--
+Create the Cassandra StatefulSet from the `cassandra-statefulset.yaml` file:
+-->
+使用 `cassandra-statefulset.yaml` 文件创建 Cassandra StatefulSet ：
+
+```shell
+# 如果你能未经修改地 apply cassandra-statefulset.yaml，请使用此命令
 kubectl apply -f https://k8s.io/examples/application/cassandra/cassandra-statefulset.yaml
-
-# 验证 Cassandra 集群。替换一个 pod 的名称。
-kubectl exec -ti cassandra-0 -- nodetool status
-
-# 清理
-grace=$(kubectl get po cassandra-0 -o=jsonpath='{.spec.terminationGracePeriodSeconds}') \
-  && kubectl delete statefulset,po -l app=cassandra \
-  && echo "Sleeping $grace" \
-  && sleep $grace \
-  && kubectl delete pvc -l app=cassandra
-
-#
-# 资源控制器示例
-#
-
-# 创建一个副本控制器来复制 cassandra 节点
-kubectl create -f cassandra/cassandra-controller.yaml
-
-# 验证 Cassandra 集群。替换一个 pod 的名称。
-kubectl exec -ti cassandra-xxxxx -- nodetool status
-
-# 扩大 Cassandra 集群
-kubectl scale rc cassandra --replicas=4
-
-# 删除副本控制器
-kubectl delete rc cassandra
-
-#
-# 创建一个 DaemonSet，在每个 kubernetes 节点上放置一个 cassandra 节点
-#
-
-kubectl create -f cassandra/cassandra-daemonset.yaml --validate=false
-
-# 资源清理
-kubectl delete service -l app=cassandra
-kubectl delete daemonset cassandra
 ```
 
 <!--
-# Resource Controller Example
-# create a replication controller to replicate cassandra nodes
-# validate the Cassandra cluster. Substitute the name of one of your pods.
-# scale up the Cassandra cluster
-# delete the replication controller
-# Create a DaemonSet to place a cassandra node on each kubernetes node
-# resource cleanup
+If you need to modify `cassandra-statefulset.yaml` to suit your cluster, download
+https://k8s.io/examples/application/cassandra/cassandra-statefulset.yaml and then apply
+that manifest, from the folder you saved the modified version into:
 -->
+如果你为了适合你的集群需要修改 `cassandra-statefulset.yaml`，
+下载 https://k8s.io/examples/application/cassandra/cassandra-statefulset.yaml，
+然后 apply 修改后的清单。
 
-## 步骤 1：创建 Cassandra Headless Service
-
-
-Kubernetes _[Service](/zh/docs/user-guide/services)_ 描述一组执行同样任务的 [_Pod_](/zh/docs/user-guide/pods)。在 Kubernetes 中，一个应用的原子调度单位是一个 Pod：一个或多个_必须_调度到相同主机上的容器。
-
-这个 Service 用于在 Kubernetes 集群内部进行 Cassandra 客户端和 Cassandra Pod 之间的 DNS 查找。
-
-以下为这个 service 的描述：
-
-```yaml
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app: cassandra
-  name: cassandra
-spec:
-  clusterIP: None
-  ports:
-    - port: 9042
-  selector:
-    app: cassandra
+```shell
+# 如果使用本地的 cassandra-statefulset.yaml ，请使用此命令
+kubectl apply -f cassandra-statefulset.yaml
 ```
 
+<!--
+## Validating the Cassandra StatefulSet
 
-Download [`cassandra-service.yaml`](/examples/application/cassandra/cassandra-service.yaml)
-and [`cassandra-statefulset.yaml`](/examples/application/cassandra/cassandra-statefulset.yaml)
+1. Get the Cassandra StatefulSet:
+-->
+## 验证 Cassandra StatefulSet
 
-为 StatefulSet 创建 service
+1.获取 Cassandra StatefulSet:
 
-```console
-kubectl apply -f https://k8s.io/examples/application/cassandra/cassandra-service.yaml
-```
+    ```shell
+    kubectl get statefulset cassandra
+    ```
+   
+<!--
+   The response should be similar to:
+-->
+   响应应该与此类似：
 
-以下命令显示了 service 是否被成功创建。
+    ```
+    NAME        DESIRED   CURRENT   AGE
+    cassandra   3         0         13s
+    ```
 
-```console
-$ kubectl get svc cassandra
-```
+<!--
+   The `StatefulSet` resource deploys Pods sequentially.
 
+1. Get the Pods to see the ordered creation status:
+-->
+   `StatefulSet` 资源会按顺序部署 Pod。
 
-命令的响应应该像这样：
+2.获取 Pod 查看已排序的创建状态：
+   
+    ```shell
+    kubectl get pods -l="app=cassandra"
+    ```
 
-```console
-NAME        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
-cassandra   None         <none>        9042/TCP   45s
-```
+<!--
+   The response should be similar to:
+-->
+   响应应该与此类似：
 
-如果返回错误则表示 service 创建失败。
+    ```shell
+    NAME          READY     STATUS              RESTARTS   AGE
+    cassandra-0   1/1       Running             0          1m
+    cassandra-1   0/1       ContainerCreating   0          8s
+    ```
 
-## 步骤 2：使用 StatefulSet 创建 Cassandra Ring环
+<!--
+   It can take several minutes for all three Pods to deploy. Once they are deployed, the same command
+   returns output similar to:
+-->
+   这三个 Pod 要花几分钟的时间才能部署。部署之后，相同的命令将返回类似于以下的输出：
 
-StatefulSets（以前叫做 PetSets）特性在 Kubernetes 1.5 中升级为一个 <i>Beta</i> 组件。在集群环境中部署类似于 Cassandra 的有状态分布式应用是一项具有挑战性的工作。我们实现了 StatefulSet，极大的简化了这个过程。本示例使用了 StatefulSet 的多个特性，但其本身超出了本文的范围。[请参考 StatefulSet 文档](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/)。
+    ```
+    NAME          READY     STATUS    RESTARTS   AGE
+    cassandra-0   1/1       Running   0          10m
+    cassandra-1   1/1       Running   0          9m
+    cassandra-2   1/1       Running   0          8m
+    ```
+<!--
+3. Run the Cassandra [nodetool](https://cwiki.apache.org/confluence/display/CASSANDRA2/NodeTool) inside the first Pod, to
+   display the status of the ring.
+-->
+3.运行第一个 Pod 中的 Cassandra [nodetool](https://cwiki.apache.org/confluence/display/CASSANDRA2/NodeTool)，以显示 ring 的状态。
 
-以下是 StatefulSet 的清单文件，用于创建一个由三个 pod 组成的 Cassandra ring 环。
+    ```shell
+    kubectl exec -it cassandra-0 -- nodetool status
+    ```
 
+<!--
+   The response should be similar to:
+-->
+   响应应该与此类似：
 
-本示例使用了 GCE Storage Class，请根据你运行的云平台做适当的修改。
+    ```
+    Datacenter: DC1-K8Demo
+    ======================
+    Status=Up/Down
+    |/ State=Normal/Leaving/Joining/Moving
+    --  Address     Load       Tokens       Owns (effective)  Host ID                               Rack
+    UN  172.17.0.5  83.57 KiB  32           74.0%             e2dd09e6-d9d3-477e-96c5-45094c08db0f  Rack1-K8Demo
+    UN  172.17.0.4  101.04 KiB  32           58.8%             f89d6835-3a42-4419-92b3-0e62cae1479c  Rack1-K8Demo
+    UN  172.17.0.6  84.74 KiB  32           67.1%             a6a1e8c2-3dc5-4417-b1a0-26507af2aaad  Rack1-K8Demo
+    ```
 
-```yaml
-apiVersion: "apps/v1beta1"
-kind: StatefulSet
-metadata:
-  name: cassandra
-spec:
-  serviceName: cassandra
-  replicas: 3
-  template:
+<!--
+## Modifying the Cassandra StatefulSet
+
+Use `kubectl edit` to modify the size of a Cassandra StatefulSet.
+
+1. Run the following command:
+-->
+## 修改 Cassandra StatefulSet
+
+使用 `kubectl edit` 修改 Cassandra StatefulSet 的大小。
+
+1.运行以下命令：
+
+    ```shell
+    kubectl edit statefulset cassandra
+    ```
+
+<!--
+   This command opens an editor in your terminal. The line you need to change is the `replicas` field.
+   The following sample is an excerpt of the StatefulSet file:
+-->
+   此命令你的终端中打开一个编辑器。需要更改的是 `replicas` 字段。下面是 StatefulSet 文件的片段示例：
+
+    ```yaml
+    # Please edit the object below. Lines beginning with a '#' will be ignored,
+    # and an empty file will abort the edit. If an error occurs while saving this file will be
+    # reopened with the relevant failures.
+    #
+    apiVersion: apps/v1
+    kind: StatefulSet
     metadata:
+      creationTimestamp: 2016-08-13T18:40:58Z
+      generation: 1
       labels:
-        app: cassandra
-    spec:
-      containers:
-      - name: cassandra
-        image: gcr.io/google-samples/cassandra:v12
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 7000
-          name: intra-node
-        - containerPort: 7001
-          name: tls-intra-node
-        - containerPort: 7199
-          name: jmx
-        - containerPort: 9042
-          name: cql
-        resources:
-          limits:
-            cpu: "500m"
-            memory: 1Gi
-          requests:
-           cpu: "500m"
-           memory: 1Gi
-        securityContext:
-          capabilities:
-            add:
-              - IPC_LOCK
-        lifecycle:
-          preStop:
-            exec:
-              command: ["/bin/sh", "-c", "PID=$(pidof java) && kill $PID && while ps -p $PID > /dev/null; do sleep 1; done"]
-        env:
-          - name: MAX_HEAP_SIZE
-            value: 512M
-          - name: HEAP_NEWSIZE
-            value: 100M
-          - name: CASSANDRA_SEEDS
-            value: "cassandra-0.cassandra.default.svc.cluster.local"
-          - name: CASSANDRA_CLUSTER_NAME
-            value: "K8Demo"
-          - name: CASSANDRA_DC
-            value: "DC1-K8Demo"
-          - name: CASSANDRA_RACK
-            value: "Rack1-K8Demo"
-          - name: CASSANDRA_AUTO_BOOTSTRAP
-            value: "false"
-          - name: POD_IP
-            valueFrom:
-              fieldRef:
-                fieldPath: status.podIP
-        readinessProbe:
-          exec:
-            command:
-            - /bin/bash
-            - -c
-            - /ready-probe.sh
-          initialDelaySeconds: 15
-          timeoutSeconds: 5
-        # These volume mounts are persistent. They are like inline claims,
-        # but not exactly because the names need to match exactly one of
-        # the stateful pod volumes.
-        volumeMounts:
-        - name: cassandra-data
-          mountPath: /cassandra_data
-  # These are converted to volume claims by the controller
-  # and mounted at the paths mentioned above.
-  # do not use these in production until ssd GCEPersistentDisk or other ssd pd
-  volumeClaimTemplates:
-  - metadata:
-      name: cassandra-data
-      annotations:
-        volume.beta.kubernetes.io/storage-class: fast
-    spec:
-      accessModes: [ "ReadWriteOnce" ]
-      resources:
-        requests:
-          storage: 1Gi
----
-kind: StorageClass
-apiVersion: storage.k8s.io/v1beta1
-metadata:
-  name: fast
-provisioner: kubernetes.io/gce-pd
-parameters:
-  type: pd-ssd
-```
-
-创建 Cassandra StatefulSet 如下：
-
-```console
-kubectl apply -f https://k8s.io/examples/application/cassandra/cassandra-statefulset.yaml
-```
-
-## 步骤 3：验证和修改 Cassandra StatefulSet
-
-这个 StatefulSet 的部署展示了 StatefulSets 提供的两个新特性：
-
-1. Pod 的名称已知
-2. Pod 以递增顺序部署
-
-
-首先，运行下面的 `kubectl` 命令，验证 StatefulSet 已经被成功部署。
-
-```console
-$ kubectl get statefulset cassandra
-```
-
-这个命令的响应应该像这样：
-
-```console
-NAME        DESIRED   CURRENT   AGE
-cassandra   3         3         13s
-```
-
-接下来观察 Cassandra pod 以一个接一个的形式部署。StatefulSet 资源按照数字序号的模式部署 pod：1, 2, 3 等。如果在 pod 部署前执行下面的命令，你就能够看到这种顺序的创建过程。
-
-```console
-$ kubectl get pods -l="app=cassandra"
-NAME          READY     STATUS              RESTARTS   AGE
-cassandra-0   1/1       Running             0          1m
-cassandra-1   0/1       ContainerCreating   0          8s
-```
-
-上面的示例显示了三个 Cassandra StatefulSet pod 中的两个已经部署。一旦所有的 pod 都部署成功，相同的命令会显示一个完整的 StatefulSet。
-
-```console
-$ kubectl get pods -l="app=cassandra"
-NAME          READY     STATUS    RESTARTS   AGE
-cassandra-0   1/1       Running   0          10m
-cassandra-1   1/1       Running   0          9m
-cassandra-2   1/1       Running   0          8m
-```
-
-运行 Cassandra 工具 `nodetool` 将显示 ring 环的状态。
-
-```console
-$ kubectl exec cassandra-0 -- nodetool status
-Datacenter: DC1-K8Demo
-======================
-Status=Up/Down
-|/ State=Normal/Leaving/Joining/Moving
---  Address   Load       Tokens       Owns (effective)  Host ID                               Rack
-UN  10.4.2.4  65.26 KiB  32           63.7%             a9d27f81-6783-461d-8583-87de2589133e  Rack1-K8Demo
-UN  10.4.0.4  102.04 KiB  32           66.7%             5559a58c-8b03-47ad-bc32-c621708dc2e4  Rack1-K8Demo
-UN  10.4.1.4  83.06 KiB  32           69.6%             9dce943c-581d-4c0e-9543-f519969cc805  Rack1-K8Demo
-```
-
-你也可以运行 `cqlsh` 来显示集群的 keyspaces。
-
-```console
-$ kubectl exec cassandra-0 -- cqlsh -e 'desc keyspaces'
-
-system_traces  system_schema  system_auth  system  system_distributed
-```
-
-你需要使用 `kubectl edit` 来增加或减小 Cassandra StatefulSet 的大小。你可以在[文档](/zh/docs/user-guide/kubectl/kubectl_edit) 中找到更多关于 `edit` 命令的信息。
-
-使用以下命令编辑 StatefulSet。
-
-```console
-$ kubectl edit statefulset cassandra
-```
-
-这会在你的命令行中创建一个编辑器。你需要修改的行是 `replicas`。这个例子没有包含终端窗口的所有内容，下面示例中的最后一行就是你希望改变的 replicas 行。
-
-```console
-# Please edit the object below. Lines beginning with a '#' will be ignored,
-# and an empty file will abort the edit. If an error occurs while saving this file will be
-# reopened with the relevant failures.
-#
-apiVersion: apps/v1beta1
-kind: StatefulSet
-metadata:
-  creationTimestamp: 2016-08-13T18:40:58Z
-  generation: 1
-  labels:
-    app: cassandra
-  name: cassandra
-  namespace: default
-  resourceVersion: "323"
-  uid: 7a219483-6185-11e6-a910-42010a8a0fc0
-spec:
-  replicas: 3
-```
-
-
-按下面的示例修改清单文件并保存。
-
-```console
-spec:
-  replicas: 4
-```
-
-这个 StatefulSet 现在将包含四个 pod。
-
-```console
-$ kubectl get statefulset cassandra
-```
-
-这个command的响应应该像这样：
-
-```console
-NAME        DESIRED   CURRENT   AGE
-cassandra   4         4         36m
-```
-
-
-对于 Kubernetes 1.5 发布版，beta StatefulSet 资源没有像 Deployment, ReplicaSet, Replication Controller 或者 Job 一样，包含 `kubectl scale` 功能，
-
-
-## 步骤 4：删除 Cassandra StatefulSet
-
-
-删除或者缩容 StatefulSet 时不会删除与之关联的 volumes。这样做是为了优先保证安全。你的数据比其它会被自动清除的 StatefulSet 关联资源更宝贵。删除 Persistent Volume Claims 可能会导致关联的 volumes 被删除，这种行为依赖 storage class 和 reclaim policy。永远不要期望能在 claim 删除后访问一个 volume。
-
-
-使用如下命令删除 StatefulSet。
-
-```console
-$ grace=$(kubectl get po cassandra-0 -o=jsonpath='{.spec.terminationGracePeriodSeconds}') \
-  && kubectl delete statefulset -l app=cassandra \
-  && echo "Sleeping $grace" \
-  && sleep $grace \
-  && kubectl delete pvc -l app=cassandra
-```
-
-
-## 步骤 5：使用 Replication Controller 创建 Cassandra 节点 pod
-
-
-Kubernetes _[Replication Controller](/zh/docs/user-guide/replication-controller)_ 负责复制一个完全相同的 pod 集合。像 Service 一样，它具有一个 selector query，用来识别它的集合成员。和 Service 不一样的是，它还具有一个期望的副本数，并且会通过创建或删除 Pod 来保证 Pod 的数量满足它期望的状态。
-
-和我们刚才定义的 Service 一起，Replication Controller 能够让我们轻松的构建一个复制的、可扩展的 Cassandra 集群。
-
-让我们创建一个具有两个初始副本的  replication controller。
-
-```yaml
-apiVersion: v1
-kind: ReplicationController
-metadata:
-  name: cassandra
-  # The labels will be applied automatically
-  # from the labels in the pod template, if not set
-  # labels:
-    # app: cassandra
-spec:
-  replicas: 2
-  # The selector will be applied automatically
-  # from the labels in the pod template, if not set.
-  # selector:
-      # app: cassandra
-  template:
-    metadata:
-      labels:
-        app: cassandra
-    spec:
-      containers:
-        - command:
-            - /run.sh
-          resources:
-            limits:
-              cpu: 0.5
-          env:
-            - name: MAX_HEAP_SIZE
-              value: 512M
-            - name: HEAP_NEWSIZE
-              value: 100M
-            - name: CASSANDRA_SEED_PROVIDER
-              value: "io.k8s.cassandra.KubernetesSeedProvider"
-            - name: POD_NAMESPACE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace
-            - name: POD_IP
-              valueFrom:
-                fieldRef:
-                  fieldPath: status.podIP
-          image: gcr.io/google-samples/cassandra:v12
-          name: cassandra
-          ports:
-            - containerPort: 7000
-              name: intra-node
-            - containerPort: 7001
-              name: tls-intra-node
-            - containerPort: 7199
-              name: jmx
-            - containerPort: 9042
-              name: cql
-          volumeMounts:
-            - mountPath: /cassandra_data
-              name: data
-      volumes:
-        - name: data
-          emptyDir: {}
-```
-
-[下载示例](https://raw.githubusercontent.com/kubernetes/examples/master/cassandra-controller.yaml)
-
-在这个描述中需要注意几件事情。
-
-`selector` 属性包含了控制器的  selector query。它能够被显式指定，或者在没有设置时，像此处一样从 pod 模板中的 labels 中自动应用。
-
-Pod 模板的标签 `app:cassandra` 匹配步骤1中的 Service selector。这就是 Service  如何选择 replication controller 创建的 pod 的原理。
-
-`replicas` 属性指明了期望的副本数量，在本例中最开始为 2。我们很快将要扩容更多数量。
-
-创建 Replication Controller：
-
-```console
-
-$ kubectl create -f cassandra/cassandra-controller.yaml
-
-```
-
-你可以列出新建的 controller：
-
-```console
-
-$ kubectl get rc -o wide
-NAME        DESIRED   CURRENT   AGE       CONTAINER(S)   IMAGE(S)                             SELECTOR
-cassandra   2         2         11s       cassandra      gcr.io/google-samples/cassandra:v12   app=cassandra
-
-```
-
-现在，如果你列出集群中的 pod，并且使用 `app=cassandra` 标签过滤，你应该能够看到两个 Cassandra pod。（`wide` 参数使你能够看到 pod 被调度到了哪个 Kubernetes 节点上）
-
-```console
-$ kubectl get pods -l="app=cassandra" -o wide
-NAME              READY     STATUS    RESTARTS   AGE       NODE
-cassandra-21qyy   1/1       Running   0          1m        kubernetes-minion-b286
-cassandra-q6sz7   1/1       Running   0          1m        kubernetes-minion-9ye5
-```
-
-
-因为这些 pod 拥有 `app=cassandra` 标签，它们被映射给了我们在步骤 1 中创建的 service。
-
-你可以使用下面的 service endpoint 查询命令来检查 Pod 是否对 Service 可用。
-
-```console
-
-$ kubectl get endpoints cassandra -o yaml
-apiVersion: v1
-kind: Endpoints
-metadata:
-  creationTimestamp: 2015-06-21T22:34:12Z
-  labels:
-    app: cassandra
-  name: cassandra
-  namespace: default
-  resourceVersion: "944373"
-  uid: a3d6c25f-1865-11e5-a34e-42010af01bcc
-subsets:
-- addresses:
-  - ip: 10.244.3.15
-    targetRef:
-      kind: Pod
+      app: cassandra
       name: cassandra
       namespace: default
-      resourceVersion: "944372"
-      uid: 9ef9895d-1865-11e5-a34e-42010af01bcc
-  ports:
-  - port: 9042
-    protocol: TCP
-
-```
-
-
-为了显示 `SeedProvider` 逻辑是按设想在运行，你可以使用 `nodetool` 命令来检查  Cassandra 集群的状态。为此，请使用 `kubectl exec` 命令，这样你就能在一个 Cassandra pod 上运行 `nodetool`。同样的，请替换 `cassandra-xxxxx` 为任意一个 pods的真实名字。
-
-```console
-
-$ kubectl exec -ti cassandra-xxxxx -- nodetool status
-Datacenter: datacenter1
-=======================
-Status=Up/Down
-|/ State=Normal/Leaving/Joining/Moving
---  Address     Load       Tokens  Owns (effective)  Host ID                               Rack
-UN  10.244.0.5  74.09 KB   256     100.0%            86feda0f-f070-4a5b-bda1-2eeb0ad08b77  rack1
-UN  10.244.3.3  51.28 KB   256     100.0%            dafe3154-1d67-42e1-ac1d-78e7e80dce2b  rack1
-
-```
-
-
-## 步骤 6：Cassandra 集群扩容
-
-
-现在，让我们把 Cassandra 集群扩展到 4 个 pod。我们通过告诉 Replication Controller 现在我们需要 4 个副本来完成。
-
-```sh
-
-$ kubectl scale rc cassandra --replicas=4
-
-```
-
-你可以看到列出了新的 pod：
-
-```console
-
-$ kubectl get pods -l="app=cassandra" -o wide
-NAME              READY     STATUS    RESTARTS   AGE       NODE
-cassandra-21qyy   1/1       Running   0          6m        kubernetes-minion-b286
-cassandra-81m2l   1/1       Running   0          47s       kubernetes-minion-b286
-cassandra-8qoyp   1/1       Running   0          47s       kubernetes-minion-9ye5
-cassandra-q6sz7   1/1       Running   0          6m        kubernetes-minion-9ye5
-
-```
-
-
-一会儿你就能再次检查 Cassandra 集群的状态，你可以看到新的 pod 已经被自定义的 `SeedProvider` 检测到：
-
-```console
-
-$ kubectl exec -ti cassandra-xxxxx -- nodetool status
-Datacenter: datacenter1
-=======================
-Status=Up/Down
-|/ State=Normal/Leaving/Joining/Moving
---  Address     Load       Tokens  Owns (effective)  Host ID                               Rack
-UN  10.244.0.6  51.67 KB   256     48.9%             d07b23a5-56a1-4b0b-952d-68ab95869163  rack1
-UN  10.244.1.5  84.71 KB   256     50.7%             e060df1f-faa2-470c-923d-ca049b0f3f38  rack1
-UN  10.244.1.6  84.71 KB   256     47.0%             83ca1580-4f3c-4ec5-9b38-75036b7a297f  rack1
-UN  10.244.0.5  68.2 KB    256     53.4%             72ca27e2-c72c-402a-9313-1e4b61c2f839  rack1
-
-```
-
-
-## 步骤 7：删除 Replication Controller
-
-
-在你开始步骤 5 之前， __删除__你在上面创建的 __replication controller__。
-
-```sh
-
-$ kubectl delete rc cassandra
-
-```
-
-## 步骤 8：使用 DaemonSet 替换 Replication Controller
-
-
-在 Kubernetes中，[_DaemonSet_](/zh/docs/admin/daemons) 能够将 pod 一对一的分布到 Kubernetes 节点上。和  _ReplicationController_ 相同的是它也有一个用于识别它的集合成员的 selector query。但和 _ReplicationController_ 不同的是，它拥有一个节点 selector，用于限制基于模板的 pod 可以调度的节点。并且 pod 的复制不是基于一个设置的数量，而是为每一个节点分配一个 pod。
-
-示范用例：当部署到云平台时，预期情况是实例是短暂的并且随时可能终止。Cassandra 被搭建成为在各个节点间复制数据以便于实现数据冗余。这样的话，即使一个实例终止了，存储在它上面的数据却没有，并且集群会通过重新复制数据到其它运行节点来作为响应。
-
-`DaemonSet` 设计为在 Kubernetes 集群中的每个节点上放置一个 pod。那样就会给我们带来数据冗余度。让我们创建一个 DaemonSet 来启动我们的存储集群：
-
-
-```yaml
-apiVersion: extensions/v1beta1
-kind: DaemonSet
-metadata:
-  labels:
-    name: cassandra
-  name: cassandra
-spec:
-  template:
-    metadata:
-      labels:
-        app: cassandra
+      resourceVersion: "323"
+      uid: 7a219483-6185-11e6-a910-42010a8a0fc0
     spec:
-      # Filter to specific nodes:
-      # nodeSelector:
-      #  app: cassandra
-      containers:
-        - command:
-            - /run.sh
-          env:
-            - name: MAX_HEAP_SIZE
-              value: 512M
-            - name: HEAP_NEWSIZE
-              value: 100M
-            - name: CASSANDRA_SEED_PROVIDER
-              value: "io.k8s.cassandra.KubernetesSeedProvider"
-            - name: POD_NAMESPACE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace
-            - name: POD_IP
-              valueFrom:
-                fieldRef:
-                  fieldPath: status.podIP
-          image: gcr.io/google-samples/cassandra:v12
-          name: cassandra
-          ports:
-            - containerPort: 7000
-              name: intra-node
-            - containerPort: 7001
-              name: tls-intra-node
-            - containerPort: 7199
-              name: jmx
-            - containerPort: 9042
-              name: cql
-              # If you need it, it will go away in C* 4.0.
-              #- containerPort: 9160
-              #  name: thrift
-          resources:
-            requests:
-              cpu: 0.5
-          volumeMounts:
-            - mountPath: /cassandra_data
-              name: data
-      volumes:
-        - name: data
-          emptyDir: {}
-```
+      replicas: 3
+    ```
+
+<!--
+1. Change the number of replicas to 4, and then save the manifest.
+
+   The StatefulSet now scales to run with 4 Pods.
+
+1. Get the Cassandra StatefulSet to verify your change:
+-->
+2.将副本数 (replicas) 更改为 4，然后保存清单。
+
+   StatefulSet 现在可以扩展到运行 4 个 Pod。
+
+3.获取 Cassandra StatefulSet 验证更改：
+
+    ```shell
+    kubectl get statefulset cassandra
+    ```
+
+<!--
+   The response should be similar to:
+-->
+   响应应该与此类似：
+
+    ```
+    NAME        DESIRED   CURRENT   AGE
+    cassandra   4         4         36m
+    ```
+
+## {{% heading "cleanup" %}}
+
+<!--
+Deleting or scaling a StatefulSet down does not delete the volumes associated with the StatefulSet.
+This setting is for your safety because your data is more valuable than automatically purging all related StatefulSet resources.
+
+{{< warning >}}
+Depending on the storage class and reclaim policy, deleting the *PersistentVolumeClaims* may cause the associated volumes
+to also be deleted. Never assume you'll be able to access data if its volume claims are deleted.
+{{< /warning >}}
+
+1. Run the following commands (chained together into a single command) to delete everything in the Cassandra StatefulSet:
+-->
+删除或缩小 StatefulSet 不会删除与 StatefulSet 关联的卷。
+这个设置是出于安全考虑，因为你的数据比自动清除所有相关的 StatefulSet 资源更有价值。
+
+{{< warning >}}
+根据存储类和回收策略，删除 *PersistentVolumeClaims* 可能导致关联的卷也被删除。
+千万不要认为其容量声明被删除，你就能访问数据。
+{{< /warning >}}
+
+1.运行以下命令（连在一起成为一个单独的命令）删除 Cassandra StatefulSet 中的所有内容：
+
+    ```shell
+    grace=$(kubectl get pod cassandra-0 -o=jsonpath='{.spec.terminationGracePeriodSeconds}') \
+      && kubectl delete statefulset -l app=cassandra \
+      && echo "Sleeping ${grace} seconds" 1>&2 \
+      && sleep $grace \
+      && kubectl delete persistentvolumeclaim -l app=cassandra
+    ```
+
+<!--
+1. Run the following command to delete the Service you set up for Cassandra:
+-->
+2.运行以下命令，删除你为 Cassandra 设置的 Service：
+
+    ```shell
+    kubectl delete service -l app=cassandra
+    ```
+
+<!--
+## Cassandra container environment variables
+
+The Pods in this tutorial use the [`gcr.io/google-samples/cassandra:v13`](https://github.com/kubernetes/examples/blob/master/cassandra/image/Dockerfile)
+image from Google's [container registry](https://cloud.google.com/container-registry/docs/).
+The Docker image above is based on [debian-base](https://github.com/kubernetes/kubernetes/tree/master/build/debian-base)
+and includes OpenJDK 8.
+
+This image includes a standard Cassandra installation from the Apache Debian repo.
+By using environment variables you can change values that are inserted into `cassandra.yaml`.
+-->
+## Cassandra 容器环境变量
+本教程中的 Pod 使用来自 Google [container registry](https://cloud.google.com/container-registry/docs/)
+的 [`gcr.io/google-samples/cassandra:v13`](https://github.com/kubernetes/examples/blob/master/cassandra/image/Dockerfile) 镜像。
+上面的 Docker 镜像基于 [debian-base](https://github.com/kubernetes/kubernetes/tree/master/build/debian-base)，并且包含 OpenJDK 8。
+
+该映像包括来自 Apache Debian 存储库的标准 Cassandra 安装。
+通过使用环境变量，您可以更改插入到 `cassandra.yaml` 中的值。
+
+| Environment variable     | Default value    |
+| ------------------------ |:---------------: |
+| `CASSANDRA_CLUSTER_NAME` | `'Test Cluster'` |
+| `CASSANDRA_NUM_TOKENS`   | `32`             |
+| `CASSANDRA_RPC_ADDRESS`  | `0.0.0.0`        |
 
 
-[下载示例](https://raw.githubusercontent.com/kubernetes/examples/master/cassandra-daemonset.yaml)
 
+## {{% heading "whatsnext" %}}
 
-这个 DaemonSet 绝大部分的定义和上面的 ReplicationController 完全相同；它只是简单的给 daemonset 一个创建新的 Cassandra pod 的方法，并且以集群中所有的 Cassandra 节点为目标。
-
-
-不同之处在于 `nodeSelector` 属性，它允许 DaemonSet 以全部节点的一个子集为目标（你可以向其他资源一样标记节点），并且没有 `replicas` 属性，因为它使用1对1的 node-pod 关系。
-
-
-创建这个 DaemonSet：
-
-```console
-
-$ kubectl create -f cassandra/cassandra-daemonset.yaml
-
-```
-
-
-你可能需要禁用配置文件检查，像这样：
-
-```console
-
-$ kubectl create -f cassandra/cassandra-daemonset.yaml --validate=false
-
-```
-
-
-你可以看到 DaemonSet 已经在运行：
-
-```console
-
-$ kubectl get daemonset
-NAME        DESIRED   CURRENT   NODE-SELECTOR
-cassandra   3         3         <none>
-
-```
-
-
-现在，如果你列出集群中的 pods，并且使用 `app=cassandra` 标签过滤，你应该能够看到你的网络中的每一个节点上都有一个（且只有一个）新的 cassandra pod。
-
-```console
-
-$ kubectl get pods -l="app=cassandra" -o wide
-NAME              READY     STATUS    RESTARTS   AGE       NODE
-cassandra-ico4r   1/1       Running   0          4s        kubernetes-minion-rpo1
-cassandra-kitfh   1/1       Running   0          1s        kubernetes-minion-9ye5
-cassandra-tzw89   1/1       Running   0          2s        kubernetes-minion-b286
-
-```
-
-
-为了证明这是按设想的在工作，你可以再次使用 `nodetool` 命令来检查集群的状态。为此，请使用 `kubectl exec` 命令在任何一个新建的 cassandra pod 上运行 `nodetool`。
-
-```console
-
-$ kubectl exec -ti cassandra-xxxxx -- nodetool status
-Datacenter: datacenter1
-=======================
-Status=Up/Down
-|/ State=Normal/Leaving/Joining/Moving
---  Address     Load       Tokens  Owns (effective)  Host ID                               Rack
-UN  10.244.0.5  74.09 KB   256     100.0%            86feda0f-f070-4a5b-bda1-2eeb0ad08b77  rack1
-UN  10.244.4.2  32.45 KB   256     100.0%            0b1be71a-6ffb-4895-ac3e-b9791299c141  rack1
-UN  10.244.3.3  51.28 KB   256     100.0%            dafe3154-1d67-42e1-ac1d-78e7e80dce2b  rack1
-
-```
-
-
-**注意**：这个示例让你在创建 DaemonSet 前删除了 cassandra 的 Replication Controller。这是因为为了保持示例的简单，RC 和 DaemonSet 使用了相同的 `app=cassandra` 标签（如此它们的 pod 映射到了我们创建的 service，这样 SeedProvider 就能识别它们）。
-
-
-如果我们没有预先删除 RC，这两个资源在需要运行多少 pod 上将会发生冲突。如果希望的话，我们可以使用额外的标签和 selectors 来支持同时运行它们。
-
-
-## 步骤 9：资源清理
-
-
-当你准备删除你的资源时，按以下执行：
-
-```console
-
-$ kubectl delete service -l app=cassandra
-$ kubectl delete daemonset cassandra
-
-```
-
-
-### Seed Provider Source
-
-
-我们使用了一个自定义的 [`SeedProvider`](https://gitbox.apache.org/repos/asf?p=cassandra.git;a=blob;f=src/java/org/apache/cassandra/locator/SeedProvider.java;h=7efa9e050a4604c2cffcb953c3c023a2095524fe;hb=c2e11bd4224b2110abe6aa84c8882e85980e3491) 来在 Kubernetes 之上运行 Cassandra。仅当你通过 replication control 或者 daemonset 部署 Cassandra 时才需要使用自定义的 seed provider。在 Cassandra 中，`SeedProvider` 引导 Cassandra 使用 gossip 协议来查找其它 Cassandra 节点。Seed 地址是被视为连接端点的主机。Cassandra 实例使用 seed 列表来查找彼此并学习 ring 环拓扑。[`KubernetesSeedProvider`](https://github.com/kubernetes/examples/blob/master/cassandra/java/src/main/java/io/k8s/cassandra/KubernetesSeedProvider.java) 通过 Kubernetes API 发现 Cassandra seeds IP 地址，那些 Cassandra 实例在 Cassandra Service 中定义。
-
-请查阅自定义 seed provider 的 [README](https://git.k8s.io/examples/cassandra/java/README.md) 文档，获取 `KubernetesSeedProvider` 进阶配置。对于本示例来说，你应该不需要自定义 Seed Provider 的配置。
-
-查看本示例的 [image](https://github.com/kubernetes/examples/tree/master/cassandra/image) 目录，了解如何构建容器的 docker 镜像及其内容。
-
-你可能还注意到我们设置了一些 Cassandra 参数（`MAX_HEAP_SIZE`和`HEAP_NEWSIZE`），并且增加了关于 [namespace](/zh/docs/user-guide/namespaces) 的信息。我们还告诉 Kubernetes 容器暴露了 `CQL` 和 `Thrift` API 端口。最后，我们告诉集群管理器我们需要 0.1 cpu（0.1 核）。
-
-[!Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/cassandra/README.md?pixel)]()
+<!--
+* Learn how to [Scale a StatefulSet](/docs/tasks/run-application/scale-stateful-set/).
+* Learn more about the [*KubernetesSeedProvider*](https://github.com/kubernetes/examples/blob/master/cassandra/java/src/main/java/io/k8s/cassandra/KubernetesSeedProvider.java)
+* See more custom [Seed Provider Configurations](https://git.k8s.io/examples/cassandra/java/README.md)
+-->
+* 了解如何[扩缩 StatefulSet](/docs/tasks/run-application/scale-stateful-set/)。
+* 了解有关 [*KubernetesSeedProvider*](https://github.com/kubernetes/examples/blob/master/cassandra/java/src/main/java/io/k8s/cassandra/KubernetesSeedProvider.java) 的更多信息
+* 查看更多自定义 [Seed Provider Configurations](https://git.k8s.io/examples/cassandra/java/README.md)
diff --git a/content/zh/docs/tutorials/stateless-application/guestbook.md b/content/zh/docs/tutorials/stateless-application/guestbook.md
index b7ef978490..cae93e2ff9 100644
--- a/content/zh/docs/tutorials/stateless-application/guestbook.md
+++ b/content/zh/docs/tutorials/stateless-application/guestbook.md
@@ -100,16 +100,15 @@ The manifest file, included below, specifies a Deployment controller that runs a
 1. 在下载清单文件的目录中启动终端窗口。
 2. 从 `mongo-deployment.yaml` 文件中应用 MongoDB Deployment：
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.yaml
+      -->
+
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-deployment.yaml
       ```
 
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/mongo-deployment.yaml
--->
-
-
 <!--
 1. Query the list of Pods to verify that the MongoDB Pod is running:
 -->
@@ -156,15 +155,15 @@ The guestbook application needs to communicate to the MongoDB to write its data.
 -->
 1. 使用下面的 `mongo-service.yaml` 文件创建 MongoDB 的服务：
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
+      -->
+   
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
       ```
 
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
--->
-
 <!--
 1. Query the list of Services to verify that the MongoDB Service is running:
 -->
@@ -182,7 +181,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/mongo-service.yaml
       ```shell
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP    1m
-      mongo          ClusterIP   10.0.0.151   <none>        6379/TCP   8s
+      mongo          ClusterIP   10.0.0.151   <none>        27017/TCP   8s
       ```
 
 <!--
@@ -216,15 +215,15 @@ The guestbook application has a web frontend serving the HTTP requests written i
 -->
 1. 从 `frontend-deployment.yaml` 应用前端 Deployment 文件：
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment.yaml
+      -->
+   
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-deployment.yaml
       ```
 
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment.yaml
--->
-
 <!--
 1. Query the list of Pods to verify that the three frontend replicas are running:
 -->
@@ -253,10 +252,11 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-deployment
 ### 创建前端服务
 
 <!--
-The `mongo` Services you applied is only accessible within the Kubernetes cluster because the default type for a Service is [ClusterIP](/docs/concepts/services-networking/service/#publishing-services---service-types). `ClusterIP` provides a single IP address for the set of Pods the Service is pointing to. This IP address is accessible only within the cluster.
+The `mongo` Services you applied is only accessible within the Kubernetes cluster because the default type for a Service is [ClusterIP](/docs/concepts/services-networking/service/#publishing-services-service-types). `ClusterIP` provides a single IP address for the set of Pods the Service is pointing to. This IP address is accessible only within the cluster.
 -->
 应用的 `mongo` 服务只能在 Kubernetes 集群中访问，因为服务的默认类型是
-[ClusterIP](/zh/docs/concepts/services-networking/service/#publishing-services---service-types)。`ClusterIP` 为服务指向的 Pod 集提供一个 IP 地址。这个 IP 地址只能在集群中访问。
+[ClusterIP](/zh/docs/concepts/services-networking/service/#publishing-services-service-types)。
+`ClusterIP` 为服务指向的 Pod 集提供一个 IP 地址。这个 IP 地址只能在集群中访问。
 
 <!--
 If you want guests to be able to access your guestbook, you must configure the frontend Service to be externally visible, so a client can request the Service from outside the Kubernetes cluster. However a Kubernetes user you can use `kubectl port-forward` to access the service even though it uses a `ClusterIP`.
@@ -278,15 +278,15 @@ Some cloud providers, like Google Compute Engine or Google Kubernetes Engine, su
 -->
 1. 从 `frontend-service.yaml` 文件中应用前端服务：
 
+      <!---
+      for local testing of the content via relative file path
+      kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.yaml
+      -->
+   
       ```shell
       kubectl apply -f https://k8s.io/examples/application/guestbook/frontend-service.yaml
       ```
 
-<!---
-for local testing of the content via relative file path
-kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.yaml
--->
-
 <!--
 1. Query the list of Services to verify that the frontend Service is running:
 -->
@@ -303,7 +303,7 @@ kubectl apply -f ./content/en/examples/application/guestbook/frontend-service.ya
 
       ```
       NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)        AGE
-      frontend       ClusterIP   10.0.0.112   <none>       80/TCP   6s
+      frontend       ClusterIP   10.0.0.112   <none>        80/TCP         6s
       kubernetes     ClusterIP   10.0.0.1     <none>        443/TCP        4m
       mongo          ClusterIP   10.0.0.151   <none>        6379/TCP       2m
       ```
@@ -364,8 +364,8 @@ If you deployed the `frontend-service.yaml` manifest with type: `LoadBalancer` y
       响应应该与此类似：
 
       ```
-      NAME       TYPE        CLUSTER-IP      EXTERNAL-IP        PORT(S)        AGE
-      frontend   ClusterIP   10.51.242.136   109.197.92.229     80:32372/TCP   1m
+      NAME       TYPE           CLUSTER-IP      EXTERNAL-IP        PORT(S)        AGE
+      frontend   LoadBalancer   10.51.242.136   109.197.92.229     80:32372/TCP   1m
       ```
 
 <!--
@@ -414,7 +414,7 @@ Scaling up or down is easy because your servers are defined as a Service that us
       frontend-3823415956-k22zn       1/1       Running   0          54m
       frontend-3823415956-w9gbt       1/1       Running   0          54m
       frontend-3823415956-x2pld       1/1       Running   0          5s
-      mongo-1068406935-3lswp   1/1       Running   0          56m
+      mongo-1068406935-3lswp          1/1       Running   0          56m
       ```
 
 <!--
@@ -444,7 +444,7 @@ Scaling up or down is easy because your servers are defined as a Service that us
       NAME                            READY     STATUS    RESTARTS   AGE
       frontend-3823415956-k22zn       1/1       Running   0          1h
       frontend-3823415956-w9gbt       1/1       Running   0          1h
-      mongo-1068406935-3lswp   1/1       Running   0          1h
+      mongo-1068406935-3lswp          1/1       Running   0          1h
       ```
 
 

From 7703a4a738d12e8d9a0319b6e46ffb24f65abc3c Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 28 Apr 2021 17:42:43 +0800
Subject: [PATCH 664/788] [zh] Resync concepts section (11)

---
 .../docs/concepts/extend-kubernetes/_index.md | 29 +++++--
 .../api-extension/apiserver-aggregation.md    |  7 +-
 .../api-extension/custom-resources.md         |  8 +-
 .../compute-storage-net/device-plugins.md     | 85 +++++++++++++++++--
 .../compute-storage-net/network-plugins.md    |  2 +-
 5 files changed, 108 insertions(+), 23 deletions(-)

diff --git a/content/zh/docs/concepts/extend-kubernetes/_index.md b/content/zh/docs/concepts/extend-kubernetes/_index.md
index 2d48a28e24..22d9c7dac2 100644
--- a/content/zh/docs/concepts/extend-kubernetes/_index.md
+++ b/content/zh/docs/concepts/extend-kubernetes/_index.md
@@ -2,6 +2,10 @@
 title: 扩展 Kubernetes
 weight: 110
 description: 改变你的 Kubernetes 集群的行为的若干方法。
+feature:
+  title: 为扩展性设计
+  description: >
+    无需更改上游源码即可扩展你的 Kubernetes 集群。
 content_type: concept
 no_list: true
 ---
@@ -14,6 +18,10 @@ reviewers:
 - lavalamp
 - cheftako
 - chenopis
+feature:
+  title: Designed for extensibility
+  description: >
+    Add features to your Kubernetes cluster without changing upstream source code.
 content_type: concept
 no_list: true
 -->
@@ -176,9 +184,11 @@ Kubernetes control plane.
 
 下面的示意图中展示了这些扩展点如何与 Kubernetes 控制面交互。
 
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vQBRWyXLVUlQPlp7BvxvV9S1mxyXSM6rAc_cbLANvKlu6kCCf-kGTporTMIeG5GZtUdxXz1xowN7RmL/pub?w=960&h=720">
-
 <!-- image source drawing https://docs.google.com/drawings/d/1muJ7Oxuj_7Gtv7HV9-2zJbOnkQJnjxq-v1ym_kZfB-4/edit?ts=5a01e054 -->
+<!--
+![Extension Points and the Control Plane](/docs/concepts/extend-kubernetes/control-plane.png)
+-->
+![扩展点与控制面](/docs/concepts/extend-kubernetes/control-plane.png)
 
 <!--
 ## Extension Points
@@ -189,9 +199,11 @@ This diagram shows the extension points in a Kubernetes system.
 
 此示意图显示的是 Kubernetes 系统中的扩展点。
 
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vSH5ZWUO2jH9f34YHenhnCd14baEb4vT-pzfxeFC7NzdNqRDgdz4DDAVqArtH4onOGqh0bhwMX0zGBb/pub?w=425&h=809">
-
 <!-- image source diagrams: https://docs.google.com/drawings/d/1k2YdJgNTtNfW7_A8moIIkij-DmVgEhNrn3y2OODwqQQ/view -->
+<!--
+![Extension Points](/docs/concepts/extend-kubernetes/extension-points.png)
+-->
+![扩展点](/docs/concepts/extend-kubernetes/extension-points.png)
 
 <!--
 1.   Users often interact with the Kubernetes API using `kubectl`. [Kubectl plugins](/docs/tasks/extend-kubectl/kubectl-plugins/) extend the kubectl binary. They only affect the individual user's local environment, and so cannot enforce site-wide policies.
@@ -236,12 +248,15 @@ If you are unsure where to start, this flowchart can help. Note that some soluti
 如果你无法确定从何处入手，下面的流程图可能对你有些帮助。
 注意，某些方案可能需要同时采用几种类型的扩展。
 
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vRWXNNIVWFDqzDY0CsKZJY3AR8sDeFDXItdc5awYxVH8s0OLherMlEPVUpxPIB1CSUu7GPk7B2fEnzM/pub?w=1440&h=1080">
-
 <!-- image source drawing: https://docs.google.com/drawings/d/1sdviU6lDz4BpnzJNHfNpQrqI9F19QZ07KnhnxVrp2yg/edit -->
+<!--
+![Flowchart for Extension](/docs/concepts/extend-kubernetes/flowchart.png)
+-->
+![扩展流程图](/docs/concepts/extend-kubernetes/flowchart.png)
 
 <!--
 ## API Extensions
+
 ### User-Defined Types
 
 Consider adding a Custom Resource to Kubernetes if you want to define new controllers, application configuration objects or other declarative APIs, and to manage them using Kubernetes tools, such as `kubectl`.
@@ -329,7 +344,7 @@ Kubernetes 提供若干种内置的认证方法，以及
 <!--
 ### Authorization
 
-[Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It just works at the level of whole resources - it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
+[Authorization](/docs/reference/access-authn-authz/webhook/) determines whether specific users can read, write, and do other operations on API resources. It works at the level of whole resources - it doesn't discriminate based on arbitrary object fields. If the built-in authorization options don't meet your needs, and [Authorization webhook](/docs/reference/access-authn-authz/webhook/) allows calling out to user-provided code to make an authorization decision.
 -->
 ### 鉴权    {#authorization}
 
diff --git a/content/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md b/content/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
index e08fa7690d..f11620acf2 100644
--- a/content/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
+++ b/content/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
@@ -64,9 +64,7 @@ apiserver-builder 库同时提供构造扩展 API 服务器和控制器框架代
 Extension API servers should have low latency networking to and from the kube-apiserver.
 Discovery requests are required to round-trip from the kube-apiserver in five seconds or less.
 
-If your extension API server cannot achieve that latency requirement, consider making changes that let you meet it. You can also set the
-`EnableAggregatedDiscoveryTimeout=false` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) on the kube-apiserver
-to disable the timeout restriction. This deprecated feature gate will be removed in a future release.
+If your extension API server cannot achieve that latency requirement, consider making changes that let you meet it.
 -->
 ### 反应延迟  {#response-latency}
 
@@ -74,9 +72,6 @@ to disable the timeout restriction. This deprecated feature gate will be removed
 发现请求需要在五秒钟或更短的时间内完成到 kube-apiserver 的往返。
 
 如果你的扩展 API 服务器无法满足这一延迟要求，应考虑如何更改配置已满足需要。
-你也可以为 kube-apiserver 设置 `EnableAggregatedDiscoveryTimeout=false`
-[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
-来禁用超时限制。此特性门控已经废弃，将在未来版本中被删除。
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md b/content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
index a893ef8765..5094d8910b 100644
--- a/content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
+++ b/content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
@@ -67,7 +67,7 @@ Kubernetes 安装中就可用。定制资源所代表的是对特定 Kubernetes
 <!--
 ## Custom controllers
 
-On their own, custom resources simply let you store and retrieve structured data.
+On their own, custom resources let you store and retrieve structured data.
 When you combine a custom resource with a *custom controller*, custom resources
 provide a true _declarative API_.
 -->
@@ -93,13 +93,13 @@ desired state, and continually maintains this state.
 You can deploy and update a custom controller on a running cluster, independently
 of the cluster's lifecycle. Custom controllers can work with any kind of resource,
 but they are especially effective when combined with custom resources. The
-[Operator pattern](https://coreos.com/blog/introducing-operators.html) combines custom
+[Operator pattern](/docs/concepts/extend-kubernetes/operator/) combines custom
 resources and custom controllers. You can use custom controllers to encode domain knowledge
 for specific applications into an extension of the Kubernetes API.
 -->
 你可以在一个运行中的集群上部署和更新定制控制器，这类操作与集群的生命周期无关。
 定制控制器可以用于任何类别的资源，不过它们与定制资源结合起来时最为有效。
-[Operator 模式](https://coreos.com/blog/introducing-operators.html)就是将定制资源
+[Operator 模式](/zh/docs/concepts/extend-kubernetes/operator/)就是将定制资源
 与定制控制器相结合的。你可以使用定制控制器来将特定于某应用的领域知识组织
 起来，以编码的形式构造对 Kubernetes API 的扩展。
 
@@ -257,7 +257,7 @@ Kubernetes 提供了两种方式供你向集群中添加定制资源：
 <!--
 Kubernetes provides these two options to meet the needs of different users, so that neither ease of use nor flexibility is compromised.
 
-Aggregated APIs are subordinate API servers that sit behind the primary API server, which acts as a proxy. This arrangement is called [API Aggregation](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) (AA). To users, it simply appears that the Kubernetes API is extended.
+Aggregated APIs are subordinate API servers that sit behind the primary API server, which acts as a proxy. This arrangement is called [API Aggregation](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) (AA). To users, the Kubernetes API is extended.
 
 CRDs allow users to create new types of resources without adding another API server. You do not need to understand API Aggregation to use CRDs.
 
diff --git a/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md b/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
index 9f2c0db5e5..a25019b3a0 100644
--- a/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
+++ b/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
@@ -323,13 +323,87 @@ for these devices:
 kubelet 提供了 gRPC 服务来使得正在使用中的设备被发现，并且还未这些设备提供了元数据：
 
 ```gRPC
-// PodResourcesLister is a service provided by the kubelet that provides information about the
-// node resources consumed by pods and containers on the node
+// PodResourcesLister 是一个由 kubelet 提供的服务，用来提供供节点上 
+// Pods 和容器使用的节点资源的信息
 service PodResourcesLister {
     rpc List(ListPodResourcesRequest) returns (ListPodResourcesResponse) {}
+    rpc GetAllocatableResources(AllocatableResourcesRequest) returns (AllocatableResourcesResponse) {}
 }
 ```
 
+<!--
+The `List` endpoint provides information on resources of running pods, with details such as the
+id of exclusively allocated CPUs, device id as it was reported by device plugins and id of
+the NUMA node where these devices are allocated.
+-->
+这一 `List` 端点提供运行中 Pods 的资源信息，包括类似独占式分配的
+CPU ID、设备插件所报告的设备 ID 以及这些设备分配所处的 NUMA 节点 ID。
+
+```gRPC
+// ListPodResourcesResponse 是 List 函数的响应
+message ListPodResourcesResponse {
+    repeated PodResources pod_resources = 1;
+}
+
+// PodResources 包含关于分配给 Pod 的节点资源的信息
+message PodResources {
+    string name = 1;
+    string namespace = 2;
+    repeated ContainerResources containers = 3;
+}
+
+// ContainerResources 包含分配给容器的资源的信息
+message ContainerResources {
+    string name = 1;
+    repeated ContainerDevices devices = 2;
+    repeated int64 cpu_ids = 3;
+}
+
+// Topology 描述资源的硬件拓扑结构
+message TopologyInfo {
+        repeated NUMANode nodes = 1;
+}
+
+// NUMA 代表的是 NUMA 节点
+message NUMANode {
+        int64 ID = 1;
+}
+
+// ContainerDevices 包含分配给容器的设备信息
+message ContainerDevices {
+    string resource_name = 1;
+    repeated string device_ids = 2;
+    TopologyInfo topology = 3;
+}
+```
+
+<!--
+GetAllocatableResources provides information on resources initially available on the worker node.
+It provides more information than kubelet exports to APIServer.
+-->
+端点 `GetAllocatableResources` 提供最初在工作节点上可用的资源的信息。
+此端点所提供的信息比导出给 API 服务器的信息更丰富。
+
+
+```gRPC
+// AllocatableResourcesResponses 包含 kubelet 所了解到的所有设备的信息
+message AllocatableResourcesResponse {
+    repeated ContainerDevices devices = 1;
+    repeated int64 cpu_ids = 2;
+}
+
+```
+
+<!--
+`ContainerDevices` do expose the topology information declaring to which NUMA cells the device is affine.
+The NUMA cells are identified using a opaque integer ID, which value is consistent to what device
+plugins report [when they register themselves to the kubelet](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#device-plugin-integration-with-the-topology-manager).
+-->
+`ContainerDevices` 会向外提供各个设备所隶属的 NUMA 单元这类拓扑信息。
+NUMA 单元通过一个整数 ID 来标识，其取值与设备插件所报告的一致。
+[设备插件注册到 kubelet 时](/zh/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
+会报告这类信息。
+
 <!--
 The gRPC service is served over a unix socket at `/var/lib/kubelet/pod-resources/kubelet.sock`.
 Monitoring agents for device plugin resources can be deployed as a daemon, or as a DaemonSet.
@@ -338,7 +412,8 @@ agents must run in a privileged security context.  If a device monitoring agent
 DaemonSet, `/var/lib/kubelet/pod-resources` must be mounted as a
 {{< glossary_tooltip term_id="volume" >}} in the device monitoring agent's
 [PodSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core).
-Support for the "PodResources service" requires `KubeletPodResources` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be enabled.
+
+Support for the "PodResourcesLister service" requires `KubeletPodResources` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be enabled.
 It is enabled by default starting with Kubernetes 1.15 and is v1 since Kubernetes 1.20.
 -->
 gRPC 服务通过 `/var/lib/kubelet/pod-resources/kubelet.sock` 的 UNIX 套接字来提供服务。
@@ -350,9 +425,9 @@ gRPC 服务通过 `/var/lib/kubelet/pod-resources/kubelet.sock` 的 UNIX 套接
 中声明将 `/var/lib/kubelet/pod-resources` 目录以
 {{< glossary_tooltip text="卷" term_id="volume" >}}的形式被挂载到设备监控代理中。
 
-对“PodResources 服务”的支持要求启用 `KubeletPodResources`
+对“PodResourcesLister 服务”的支持要求启用 `KubeletPodResources`
 [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
-从 Kubernetes 1.15 开始默认启用，自从 Kubernetes 1.20开始为 v1。
+从 Kubernetes 1.15 开始默认启用，自从 Kubernetes 1.20 开始为 v1。
 
 <!--
 ## Device Plugin integration with the Topology Manager
diff --git a/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md b/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
index be0a4deb23..c06b1c54d7 100644
--- a/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
+++ b/content/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins.md
@@ -36,7 +36,7 @@ Kubernetes中的网络插件有几种类型：
 The kubelet has a single default network plugin, and a default network common to the entire cluster. It probes for plugins when it starts up, remembers what it finds, and executes the selected plugin at appropriate times in the pod lifecycle (this is only true for Docker, as CRI manages its own CNI plugins). There are two Kubelet command line parameters to keep in mind when using plugins:
 
 * `cni-bin-dir`: Kubelet probes this directory for plugins on startup
-* `network-plugin`: The network plugin to use from `cni-bin-dir`.  It must match the name reported by a plugin probed from the plugin directory.  For CNI plugins, this is simply "cni".
+* `network-plugin`: The network plugin to use from `cni-bin-dir`.  It must match the name reported by a plugin probed from the plugin directory.  For CNI plugins, this is "cni".
 -->
 ## 安装
 

From af860986bd703cba3044e5f258354c71b8892bc2 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Fri, 23 Apr 2021 12:45:20 +0000
Subject: [PATCH 665/788] Add the search box and the toggle section navigation
 (for mobile)

---
 assets/scss/_custom.scss           | 6 +-----
 layouts/partials/blog-sidebar.html | 7 +++++++
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index 29a8e1ecf8..e7f0902346 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -444,7 +444,7 @@ body.cid-community > #deprecation-warning > .deprecation-warning > * {
 .td-sidebar__inner {
   form.td-sidebar__search {
 
-    button.td-sidebar__toggle {
+    .td-sidebar__toggle {
       &:hover {
         color: #000000;
       }
@@ -482,10 +482,6 @@ main.content {
 
 .td-blog {
 
-  .td-sidebar-nav {
-    max-height: calc(100vh - 8rem);
-  }
-
   .widget-link {
     margin-bottom: 1rem;
 
diff --git a/layouts/partials/blog-sidebar.html b/layouts/partials/blog-sidebar.html
index f1d7b1aac0..bbdbd82330 100644
--- a/layouts/partials/blog-sidebar.html
+++ b/layouts/partials/blog-sidebar.html
@@ -5,6 +5,13 @@ sidebar-tree in use elsewhere on the site. */}}
 {{ $shouldDelayActive := ge (len .Site.Pages) 2000 }}
 
 <div id="td-sidebar-menu" class="td-sidebar__inner{{ if $shouldDelayActive }} d-none{{ end }}">
+
+  <form class="td-sidebar__search d-flex align-items-center">
+    {{ partial "search-input.html" . }}
+    <button class="btn btn-link td-sidebar__toggle d-md-none p-0 ml-3 fas fa-bars" type="button" data-toggle="collapse" data-target="#td-section-nav" aria-controls="td-docs-nav" aria-expanded="false" aria-label="Toggle section navigation">
+    </button>
+  </form>
+  
   <nav class="collapse td-sidebar-nav pt-2 pl-4" id="td-section-nav">
     <!-- {{ if  (gt (len .Site.Home.Translations) 0) }}
     <div class="nav-item dropdown d-block d-lg-none">

From 68298d18715cf2d2bda57b9b989579fc8cff03ec Mon Sep 17 00:00:00 2001
From: Bridget Kromhout <bridget@kromhout.org>
Date: Wed, 28 Apr 2021 14:25:45 -0500
Subject: [PATCH 666/788] Fixes sidebar link for blog posts

Signed-off-by: Bridget Kromhout <bridget@kromhout.org>
---
 layouts/partials/blog-meta-links.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/layouts/partials/blog-meta-links.html b/layouts/partials/blog-meta-links.html
index 20e6e5ddb1..f9a6c71c3f 100644
--- a/layouts/partials/blog-meta-links.html
+++ b/layouts/partials/blog-meta-links.html
@@ -3,7 +3,7 @@
   <link rel="{{ .Rel }}" type="{{ .MediaType.Type }}" href="{{ .Permalink | safeURL }}" title="{{ site.Title }}">
   <a class="widget-link" href="{{ .Permalink | safeURL }}"><div> <i class="fas fa-rss fab-icon"> </i> <span class="widget-link-text">RSS Feed</span></div> </a>
   {{ end -}}
-  <a class="widget-link" href="https://kubernetes.io/docs/contribute/start/#write-a-blog-post"><div> <i class="fa fa-edit fab-icon"></i> <span class="widget-link-text">Submit a Post</span></div></a>
+  <a class="widget-link" href="https://kubernetes.io/docs/contribute/new-content/blogs-case-studies/"><div> <i class="fa fa-edit fab-icon"></i> <span class="widget-link-text">Submit a Post</span></div></a>
   <a class="widget-link" href="https://twitter.com/kubernetesio"><div> <i class="fab fa-twitter-square fab-icon"> </i> <span class="widget-link-text"> @Kubernetesio</span></div></a>
   <a class="widget-link" href="https://github.com/kubernetes/kubernetes"><div> <i class="fab fa-github-square fab-icon"></i> <span class="widget-link-text"> on GitHub </span></div></a>
   <a class="widget-link" href="http://slack.k8s.io"><div><i class="fab fa-slack fab-icon"> </i> <span class="widget-link-text">#kubernetes-users </span></div></a>

From 1f28ec096141a5aa5f6fcb5df1144ff3fefb372e Mon Sep 17 00:00:00 2001
From: Smuu <samuel.enderwitz@mailbox.org>
Date: Thu, 29 Apr 2021 02:06:50 +0200
Subject: [PATCH 667/788] Fix syntax errors (#27735)

* Fix syntax errors

- fix wrong placed line breaks
- fix command mode start and end

* remove word 'simple'
---
 .../docs/reference/access-authn-authz/authentication.md   | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md
index d09ffa23a2..2e223b023a 100644
--- a/content/en/docs/reference/access-authn-authz/authentication.md
+++ b/content/en/docs/reference/access-authn-authz/authentication.md
@@ -205,12 +205,10 @@ spec:
 ```
 
 Service account bearer tokens are perfectly valid to use outside the cluster and
-
 can be used to create identities for long standing jobs that wish to talk to the
-Kubernetes API. To manually create a service account, simply use the `kubectl`
-
-create serviceaccount (NAME)` command. This creates a service account in the
-current namespace and an associated secret.
+Kubernetes API. To manually create a service account, use the `kubectl create
+serviceaccount (NAME)` command. This creates a service account in the current
+namespace and an associated secret.
 
 ```bash
 kubectl create serviceaccount jenkins

From ef94e12887bb1944dbcce04dffef81a9f9286135 Mon Sep 17 00:00:00 2001
From: eatjeff <dabeige@gmail.com>
Date: Thu, 29 Apr 2021 10:20:33 +0800
Subject: [PATCH 668/788] optimize doc translation

---
 .../blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md b/content/zh/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
index 788b28420d..e6a7cd2426 100644
--- a/content/zh/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
+++ b/content/zh/blog/_posts/2020-12-02-dont-panic-kubernetes-and-docker.md
@@ -45,7 +45,7 @@ tool for building containers, and the images that result from running `docker
 build` can still run in your Kubernetes cluster. 
 --> 
 如果你是 Kubernetes 的终端用户，这对你不会有太大影响。
-这事并不意味着 Dockder 已死、也不意味着你不能或不该继续把 Docker 用作开发工具。
+这事并不意味着 Docker 已死、也不意味着你不能或不该继续把 Docker 用作开发工具。
 Docker 仍然是构建容器的利器，使用命令 `docker build` 构建的镜像在 Kubernetes 集群中仍然可以运行。
 
 <!-- 

From af1879144e50d62563f8b5372a3bf9fbb1ca4841 Mon Sep 17 00:00:00 2001
From: huyuqing <huyuqing@inspur.com>
Date: Thu, 29 Apr 2021 10:21:18 +0800
Subject: [PATCH 669/788] fix the wrong links

---
 .../basic-stateful-set.md                     | 28 +++++++++++++------
 1 file changed, 20 insertions(+), 8 deletions(-)

diff --git a/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md b/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
index 2b7c5f580f..cbe6c3d837 100644
--- a/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/zh/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -19,7 +19,7 @@ This tutorial provides an introduction to managing applications with
 demonstrates how to create, delete, scale, and update the Pods of StatefulSets.
 -->
 
-本教程介绍如何了使用 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 来管理应用。
+本教程介绍如何了使用 [StatefulSets](/zh/docs/concepts/workloads/controllers/statefulset/) 来管理应用。
 演示了如何创建、删除、扩容/缩容和更新 StatefulSets 的 Pods。
 
 
@@ -88,11 +88,21 @@ StatefulSets 旨在与有状态的应用及分布式系统一起使用。然而
 
 <!-- lessoncontent -->
 
+<!--
+## Creating a StatefulSet
+
+Begin by creating a StatefulSet using the example below. It is similar to the
+example presented in the
+[StatefulSets](/docs/concepts/workloads/controllers/statefulset/) concept.
+It creates a [headless Service](/docs/concepts/services-networking/service/#headless-services),
+`nginx`, to publish the IP addresses of Pods in the StatefulSet, `web`.
+-->
+
 ## 创建 StatefulSet
 
 
-作为开始，使用如下示例创建一个 StatefulSet。它和 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 概念中的示例相似。
-它创建了一个 [Headless Service](/zh/docs/user-guide/services/#headless-services) `nginx` 用来发布 StatefulSet `web` 中的 Pod 的 IP 地址。
+作为开始，使用如下示例创建一个 StatefulSet。它和 [StatefulSets](/zh/docs/concepts/workloads/controllers/statefulset/) 概念中的示例相似。
+它创建了一个 [Headless Service](/zh/docs/concepts/services-networking/service/#headless-services) `nginx` 用来发布 StatefulSet `web` 中的 Pod 的 IP 地址。
 
 {{< codenew file="application/web/web.yaml" >}}
 
@@ -107,8 +117,7 @@ of the StatefulSet's Pods.
 下载上面的例子并保存为文件 `web.yaml`。
 
 
-你需要使用两个终端窗口。
-在第一个终端中，使用 [`kubectl get`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#get)  来查看 StatefulSet 的 Pods 的创建情况。
+你需要使用两个终端窗口。 在第一个终端中，使用 [`kubectl get`](/zh/docs/user-guide/kubectl/{{< param "version" >}}/#get)  来查看 StatefulSet 的 Pods 的创建情况。
 
 ```shell
 kubectl get pods -w -l app=nginx
@@ -227,8 +236,10 @@ Each Pod has a stable hostname based on its ordinal index. Use
 `hostname` command in each Pod.
 -->
 
-如同 [StatefulSets](/zh/docs/concepts/abstractions/controllers/statefulsets/) 概念中所提到的， StatefulSet 中的 Pod 拥有一个具有黏性的、独一无二的身份标志。
-这个标志基于 StatefulSet 控制器分配给每个 Pod 的唯一顺序索引。Pod 的名称的形式为`<statefulset name>-<ordinal index>`。
+如同 [StatefulSets](/zh/docs/concepts/workloads/controllers/statefulset/) 概念中所提到的， 
+StatefulSet 中的 Pod 拥有一个具有黏性的、独一无二的身份标志。
+这个标志基于 StatefulSet 控制器分配给每个 Pod 的唯一顺序索引。
+Pod 的名称的形式为`<statefulset name>-<ordinal index>`。
 `web`StatefulSet 拥有两个副本，所以它创建了两个 Pod：`web-0`和`web-1`。
 
 ### 使用稳定的网络身份标识
@@ -248,7 +259,8 @@ Using `nslookup` on the Pods' hostnames, you can examine their in-cluster DNS
 addresses.
 -->
 
-使用 [`kubectl run`](/zh/docs/reference/generated/kubectl/kubectl-commands/#run) 运行一个提供 `nslookup` 命令的容器，该命令来自于 `dnsutils` 包。
+使用 [`kubectl run`](/zh/docs/reference/generated/kubectl/kubectl-commands/#run) 
+运行一个提供 `nslookup` 命令的容器，该命令来自于 `dnsutils` 包。
 通过对 Pod 的主机名执行 `nslookup`，你可以检查他们在集群内部的 DNS 地址。
 
 ```shell

From 1490968ef149b55cb60ecb2dbfab6e7916261a53 Mon Sep 17 00:00:00 2001
From: yaohaoyun <dabeige@gmail.com>
Date: Thu, 29 Apr 2021 10:58:21 +0800
Subject: [PATCH 670/788] optimize doc translation

---
 ...-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md b/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md
index f05fb58efa..28cb247e7a 100644
--- a/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md
+++ b/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md
@@ -133,4 +133,4 @@ Your feedback is always welcome!
 -->
 随时欢迎您提供反馈!
 - SIG-Auth [定期开会](https://github.com/kubernetes/community/tree/master/sig-auth#meetings)，可以通过 [Slack 和邮件列表](https://github.com/kubernetes/community/tree/master/sig-auth＃contact)加入
-- SIG-Storage [定期开会](https://github.com/kubernetes/community/tree/master/sig-storage#meetings)，可以通过 [Slack 和邮件列表](https://github.com/kubernetes/community/tree/master/sig-storage＃contact)加入
+- SIG-Storage [定期开会](https://github.com/kubernetes/community/tree/master/sig-storage#meetings)，可以通过 [Slack 和邮件列表](https://github.com/kubernetes/community/tree/master/sig-storage#contact)加入

From e0fbc55dd6fb23cc6f1bb2c50e6bbaadce886d83 Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Wed, 28 Apr 2021 17:08:12 +0800
Subject: [PATCH 671/788] [zh]Resync Tutorials (3)

---
 .../configure-redis-using-configmap.md        | 326 ++++++++++++++----
 .../pods/config/example-redis-config.yaml     |   8 +
 2 files changed, 272 insertions(+), 62 deletions(-)
 create mode 100644 content/zh/examples/pods/config/example-redis-config.yaml

diff --git a/content/zh/docs/tutorials/configuration/configure-redis-using-configmap.md b/content/zh/docs/tutorials/configuration/configure-redis-using-configmap.md
index f57514b47e..027771a28c 100644
--- a/content/zh/docs/tutorials/configuration/configure-redis-using-configmap.md
+++ b/content/zh/docs/tutorials/configuration/configure-redis-using-configmap.md
@@ -19,17 +19,13 @@ This page provides a real world example of how to configure Redis using a Config
 
 
 <!--
-* * Create a `kustomization.yaml` file containing:
-  * a ConfigMap generator
-  * a Pod resource config using the ConfigMap
-* Apply the directory by running `kubectl apply -k ./`
+* Create a ConfigMap with Redis configuration values
+* Create a Redis Pod that mounts and uses the created ConfigMap
 * Verify that the configuration was correctly applied.
 -->
 
-* * 创建一个包含以下内容的 `kustomization.yaml` 文件：
-  * 一个 ConfigMap 生成器
-  * 一个使用 ConfigMap 的 Pod 资源配置
-* 使用 `kubectl apply -k ./` 应用整个路径的配置
+* 使用 Redis 配置的值创建一个 ConfigMap
+* 创建一个 Redis Pod，挂载并使用创建的 ConfigMap
 * 验证配置已经被正确应用。
 
 
@@ -55,106 +51,312 @@ This page provides a real world example of how to configure Redis using a Config
 <!--
 ## Real World Example: Configuring Redis using a ConfigMap
 
-You can follow the steps below to configure a Redis cache using data stored in a ConfigMap.
+Follow the steps below to configure a Redis cache using data stored in a ConfigMap.
 
-First create a `kustomization.yaml` containing a ConfigMap from the `redis-config` file:
+First create a ConfigMap with an empty configuration block:
 -->
 ## 真实世界的案例：使用 ConfigMap 来配置 Redis
 
-按照下面的步骤，您可以使用ConfigMap中的数据来配置Redis缓存。
+按照下面的步骤，使用 ConfigMap 中的数据来配置 Redis 缓存。
 
-1. 根据`docs/user-guide/configmap/redis/redis-config`来创建一个ConfigMap：
-
-
-{{< codenew file="pods/config/redis-config" >}}
+首先创建一个配置模块为空的 ConfigMap：
 
 ```shell
-curl -OL https://k8s.io/examples/pods/config/redis-config
-
-cat <<EOF >./kustomization.yaml
-configMapGenerator:
-- name: example-redis-config
-  files:
-  - redis-config
+cat <<EOF >./example-redis-config.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-redis-config
+data:
+  redis-config: ""
 EOF
 ```
 
 <!--
-Add the pod resource config to the `kustomization.yaml`:
+Apply the ConfigMap created above, along with a Redis pod manifest:
 -->
-将 pod 的资源配置添加到 `kustomization.yaml` 文件中：
+应用上面创建的 ConfigMap 以及 Redis pod 清单：
+
+```shell
+kubectl apply -f example-redis-config.yaml
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+```
+
+<!--
+Examine the contents of the Redis pod manifest and note the following:
+
+* A volume named `config` is created by `spec.volumes[1]`
+* The `key` and `path` under `spec.volumes[1].items[0]` exposes the `redis-config` key from the 
+  `example-redis-config` ConfigMap as a file named `redis.conf` on the `config` volume.
+* The `config` volume is then mounted at `/redis-master` by `spec.containers[0].volumeMounts[1]`.
+
+This has the net effect of exposing the data in `data.redis-config` from the `example-redis-config`
+ConfigMap above as `/redis-master/redis.conf` inside the Pod.
+-->
+检查 Redis pod 清单的内容，并注意以下几点：
+
+* 由 `spec.volumes[1]` 创建一个名为 `config` 的卷。
+* `spec.volumes[1].items[0]` 下的 `key` 和 `path` 会将来自 `example-redis-config`
+  ConfigMap 中的 `redis-config` 密钥公开在 `config` 卷上一个名为 `redis-config` 的文件中。
+* 然后 `config` 卷被 `spec.containers[0].volumeMounts[1]` 挂载在 `/redis-master`。
+
+这样做的最终效果是将上面 `example-redis-config` 配置中 `data.redis-config` 的数据作为 Pod 中的 `/redis-master/redis.conf` 公开。
 
 {{< codenew file="pods/config/redis-pod.yaml" >}}
 
-```shell
-curl -OL https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+<!-- 
+Examine the created objects: 
+-->
+检查创建的对象：
 
-cat <<EOF >>./kustomization.yaml
-resources:
-- redis-pod.yaml
-EOF
+```shell
+kubectl get pod/redis configmap/example-redis-config 
 ```
 
 <!--
-Apply the kustomization directory to create both the ConfigMap and Pod objects:
+You should see the following output:
 -->
-应用整个 kustomization 文件夹以创建 ConfigMap 和 Pod 对象：
+你应该可以看到以下输出：
 
 ```shell
-kubectl apply -k .
-```
-
-<!--
-Examine the created objects by
--->
-使用以下命令检查创建的对象
-
-```shell
-> kubectl get -k .
-NAME                                        DATA   AGE
-configmap/example-redis-config-dgh9dg555m   1      52s
-
 NAME        READY   STATUS    RESTARTS   AGE
-pod/redis   1/1     Running   0          52s
+pod/redis   1/1     Running   0          8s
+
+NAME                             DATA   AGE
+configmap/example-redis-config   1      14s
 ```
 
 <!--
-In the example, the config volume is mounted at `/redis-master`.
-It uses `path` to add the `redis-config` key to a file named `redis.conf`.
-The file path for the redis config, therefore, is `/redis-master/redis.conf`.
-This is where the image will look for the config file for the redis master.
+Recall that we left `redis-config` key in the `example-redis-config` ConfigMap blank: 
 -->
-在示例中，配置卷挂载在 `/redis-master` 下。
-它使用 `path` 将 `redis-config` 密钥添加到名为 `redis.conf` 的文件中。
-因此，redis配置的文件路径为 `/redis-master/redis.conf`。
-这是镜像将在其中查找 redis master 的配置文件的位置。
+回顾一下，我们在 `example-redis-config` ConfigMap 保留了空的 `redis-config` 键：
+
+```shell
+kubectl describe configmap/example-redis-config
+```
 
 <!--
-Use `kubectl exec` to enter the pod and run the `redis-cli` tool to verify that
-the configuration was correctly applied:
+You should see an empty `redis-config` key:
 -->
-使用 `kubectl exec` 进入 pod 并运行 `redis-cli` 工具来验证配置已正确应用：
+你应该可以看到一个空的 `redis-config` 键：
+
+```shell
+Name:         example-redis-config
+Namespace:    default
+Labels:       <none>
+Annotations:  <none>
+
+Data
+====
+redis-config:
+```
+
+<!--
+Use `kubectl exec` to enter the pod and run the `redis-cli` tool to check the current configuration:
+-->
+使用 `kubectl exec` 进入 pod，运行 `redis-cli` 工具检查当前配置：
 
 ```shell
 kubectl exec -it redis -- redis-cli
+```
+
+<!--
+Check `maxmemory`:
+-->
+查看 `maxmemory`：
+
+```shell
 127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+<!--
+It should show the default value of 0:
+-->
+它应该显示默认值 0：
+
+```shell
+1) "maxmemory"
+2) "0"
+```
+
+<!--
+Similarly, check `maxmemory-policy`:
+-->
+同样，查看 `maxmemory-policy`：
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+<!--
+Which should also yield its default value of `noeviction`:
+-->
+它也应该显示默认值 `noeviction`：
+
+```shell
+1) "maxmemory-policy"
+2) "noeviction"
+```
+
+<!--
+Now let's add some configuration values to the `example-redis-config` ConfigMap:
+-->
+现在，向 `example-redis-config` ConfigMap 添加一些配置：
+
+{{< codenew file="pods/config/example-redis-config.yaml" >}}
+
+<!--
+Apply the updated ConfigMap:
+-->
+应用更新的 ConfigMap:
+
+```shell
+kubectl apply -f example-redis-config.yaml
+```
+
+<!--
+Confirm that the ConfigMap was updated:
+-->
+确认 ConfigMap 已更新：
+
+```shell
+kubectl describe configmap/example-redis-config
+```
+
+<!--
+You should see the configuration values we just added:
+-->
+你应该可以看到我们刚刚添加的配置：
+
+```shell
+Name:         example-redis-config
+Namespace:    default
+Labels:       <none>
+Annotations:  <none>
+
+Data
+====
+redis-config:
+----
+maxmemory 2mb
+maxmemory-policy allkeys-lru
+```
+
+<!--
+Check the Redis Pod again using `redis-cli` via `kubectl exec` to see if the configuration was applied:
+-->
+通过 `kubectl exec` 使用 `redis-cli` 再次检查 Redis Pod，查看是否已应用配置：
+
+```shell
+kubectl exec -it redis -- redis-cli
+```
+
+<!--
+Check `maxmemory`:
+-->
+查看 `maxmemory`：
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+<!--
+It remains at the default value of 0:
+-->
+它保持默认值 0：
+
+```shell
+1) "maxmemory"
+2) "0"
+```
+
+<!--
+Similarly, `maxmemory-policy` remains at the `noeviction` default setting:
+-->
+同样，`maxmemory-policy` 保留为默认设置 `noeviction`：
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+<!--
+Returns:
+-->
+返回：
+
+```shell
+1) "maxmemory-policy"
+2) "noeviction"
+```
+
+<!--
+The configuration values have not changed because the Pod needs to be restarted to grab updated
+values from associated ConfigMaps. Let's delete and recreate the Pod:
+-->
+配置值未更改，因为需要重新启动 Pod 才能从关联的 ConfigMap 中获取更新的值。
+让我们删除并重新创建 Pod：
+
+```shell
+kubectl delete pod redis
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/pods/config/redis-pod.yaml
+```
+
+<!--
+Now re-check the configuration values one last time:
+-->
+现在，最后一次重新检查配置值：
+
+```shell
+kubectl exec -it redis -- redis-cli
+```
+
+<!--
+Check `maxmemory`:
+-->
+查看 `maxmemory`：
+
+```shell
+127.0.0.1:6379> CONFIG GET maxmemory
+```
+
+<!--
+It should now return the updated value of 2097152:
+-->
+现在，它应该返回更新后的值 2097152：
+
+```shell
 1) "maxmemory"
 2) "2097152"
+```
+
+<!--
+Similarly, `maxmemory-policy` has also been updated:
+-->
+同样，`maxmemory-policy` 也已更新：
+
+```shell
 127.0.0.1:6379> CONFIG GET maxmemory-policy
+```
+
+<!--
+It now reflects the desired value of `allkeys-lru`:
+-->
+现在它反映了期望值 `allkeys-lru`：
+
+```shell
 1) "maxmemory-policy"
 2) "allkeys-lru"
 ```
 
 <!--
-Delete the created pod:
+Clean up your work by deleting the created resources:
 -->
-删除创建的 pod：
+删除创建的资源，清理你的工作：
+
 ```shell
-kubectl delete pod redis
+kubectl delete pod/redis configmap/example-redis-config
 ```
 
-
-
 ## {{% heading "whatsnext" %}}
 
 
diff --git a/content/zh/examples/pods/config/example-redis-config.yaml b/content/zh/examples/pods/config/example-redis-config.yaml
new file mode 100644
index 0000000000..5b093b1213
--- /dev/null
+++ b/content/zh/examples/pods/config/example-redis-config.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: example-redis-config
+data:
+  redis-config: |
+    maxmemory 2mb
+    maxmemory-policy allkeys-lru

From 341a7a0913543771ff0414b4b517509d4a9b7430 Mon Sep 17 00:00:00 2001
From: yaohaoyun <dabeige@gmail.com>
Date: Thu, 29 Apr 2021 11:40:24 +0800
Subject: [PATCH 672/788] optimize doc translation

---
 content/zh/blog/_posts/2020-12-02-dockershim-faq.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/blog/_posts/2020-12-02-dockershim-faq.md b/content/zh/blog/_posts/2020-12-02-dockershim-faq.md
index 8552f9fd48..b910cfdfd2 100644
--- a/content/zh/blog/_posts/2020-12-02-dockershim-faq.md
+++ b/content/zh/blog/_posts/2020-12-02-dockershim-faq.md
@@ -21,7 +21,7 @@ what that means, check out the blog post
 -->
 本文回顾了自 Kubernetes v1.20 版宣布弃用 Dockershim 以来所引发的一些常见问题。
 关于 Kubernetes kubelets 从容器运行时的角度弃用 Docker 的细节以及这些细节背后的含义，请参考博文
-[别慌: Kubernetes 和 Docker](/blog/2020/12/02/dont-panic-kubernetes-and-docker/)
+[别慌: Kubernetes 和 Docker](/blog/2020/12/02/dont-panic-kubernetes-and-docker/)。
 
 <!-- 
 ### Why is dockershim being deprecated?

From 8b7b499e0be6dc4a759e4daa5898b7a61a6f25b2 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 29 Apr 2021 11:48:42 +0800
Subject: [PATCH 673/788] [zh] Resync concepts section (12)

---
 .../containers/container-environment.md       |  5 +-
 .../containers/container-lifecycle-hooks.md   | 39 ++++++++---
 content/zh/docs/concepts/containers/images.md | 64 ++++++++++++++-----
 .../docs/concepts/containers/runtime-class.md |  8 ++-
 4 files changed, 86 insertions(+), 30 deletions(-)

diff --git a/content/zh/docs/concepts/containers/container-environment.md b/content/zh/docs/concepts/containers/container-environment.md
index 543260c95a..79170508e6 100644
--- a/content/zh/docs/concepts/containers/container-environment.md
+++ b/content/zh/docs/concepts/containers/container-environment.md
@@ -68,6 +68,7 @@ Pod 定义中的用户所定义的环境变量也可在容器中使用，就像
 ### Cluster information
 
 A list of all services that were running when a Container was created is available to that Container as environment variables.
+This list is limited to services within the same namespace as the new Container's Pod and Kubernetes control plane services.
 Those environment variables match the syntax of Docker links.
 
 For a service named *foo* that maps to a Container named *bar*,
@@ -75,7 +76,9 @@ the following variables are defined:
 -->
 ### 集群信息
 
-创建容器时正在运行的所有服务的列表都可用作该容器的环境变量。这些环境变量与 Docker 链接的语法匹配。
+创建容器时正在运行的所有服务都可用作该容器的环境变量。
+这里的服务仅限于新容器的 Pod 所在的名字空间中的服务，以及 Kubernetes 控制面的服务。
+这些环境变量与 Docker 链接的语法相同。
 
 对于名为 *foo* 的服务，当映射到名为 *bar* 的容器时，以下变量是被定义了的：
 
diff --git a/content/zh/docs/concepts/containers/container-lifecycle-hooks.md b/content/zh/docs/concepts/containers/container-lifecycle-hooks.md
index 1f2d2b25e7..cb4a1d613a 100644
--- a/content/zh/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/zh/docs/concepts/containers/container-lifecycle-hooks.md
@@ -59,16 +59,21 @@ No parameters are passed to the handler.
 `PreStop`
 
 <!--
-This hook is called immediately before a container is terminated due to an API request or management event such as liveness probe failure, preemption, resource contention and others. A call to the preStop hook fails if the container is already in terminated or completed state.
-It is blocking, meaning it is synchronous,
-so it must complete before the signal to stop the container can be sent.
-No parameters are passed to the handler.
+This hook is called immediately before a container is terminated due to an API request or management
+event such as a liveness/startup probe failure, preemption, resource contention and others. A call
+to the `PreStop` hook fails if the container is already in a terminated or completed state and the
+hook must complete before the TERM signal to stop the container can be sent. The Pod's termination
+grace period countdown begins before the `PreStop` hook is executed, so regardless of the outcome of
+the handler, the container will eventually terminate within the Pod's termination grace period. No
+parameters are passed to the handler.
 -->
-在容器因 API 请求或者管理事件（诸如存活态探针失败、资源抢占、资源竞争等）而被终止之前，
-此回调会被调用。
-如果容器已经处于终止或者完成状态，则对 preStop 回调的调用将失败。
-此调用是阻塞的，也是同步调用，因此必须在发出删除容器的信号之前完成。
-没有参数传递给处理程序。
+在容器因 API 请求或者管理事件（诸如存活态探针、启动探针失败、资源抢占、资源竞争等）
+而被终止之前，此回调会被调用。
+如果容器已经处于已终止或者已完成状态，则对 preStop 回调的调用将失败。
+在用来停止容器的 TERM 信号被发出之前，回调必须执行结束。
+Pod 的终止宽限周期在 `PreStop` 回调被执行之前即开始计数，所以无论
+回调函数的执行结果如何，容器最终都会在 Pod 的终止宽限期内被终止。
+没有参数会被传递给处理程序。
 
 <!--
 A more detailed description of the termination behavior can be found in
@@ -122,6 +127,20 @@ the Container cannot reach a `running` state.
 但是，如果回调运行或挂起的时间太长，则容器无法达到 `running` 状态。
 
 <!--
+`PreStop` hooks are not executed asynchronously from the signal
+to stop the Container; the hook must complete its execution before
+the TERM signal can be sent.
+If a `PreStop` hook hangs during execution,
+the Pod's phase will be `Terminating` and remain there until the Pod is
+killed after its `terminationGracePeriodSeconds` expires.
+This grace period applies to the total time it takes for both
+the `PreStop` hook to execute and for the Container to stop normally.
+If, for example, `terminationGracePeriodSeconds` is 60, and the hook
+takes 55 seconds to complete, and the Container takes 10 seconds to stop
+normally after receiving the signal, then the Container will be killed
+before it can stop normally, since `terminationGracePeriodSeconds` is
+less than the total time (55+10) it takes for these two things to happen.
+
 `PreStop` hooks are not executed asynchronously from the signal
 to stop the Container; the hook must complete its execution before
 the signal can be sent.
@@ -145,7 +164,7 @@ less than the total time (55+10) it takes for these two things to happen.
 例如，如果 `terminationGracePeriodSeconds` 是 60，回调函数花了 55 秒钟
 完成执行，而容器在收到信号之后花了 10 秒钟来正常结束，那么容器会在其
 能够正常结束之前即被杀死，因为 `terminationGracePeriodSeconds` 的值
-小于后面两件事情所花费的总时间（55 + 10）。
+小于后面两件事情所花费的总时间（55+10）。
 
 <!--
 If either a `PostStart` or `PreStop` hook fails,
diff --git a/content/zh/docs/concepts/containers/images.md b/content/zh/docs/concepts/containers/images.md
index 08b70bdbaf..0a629be864 100644
--- a/content/zh/docs/concepts/containers/images.md
+++ b/content/zh/docs/concepts/containers/images.md
@@ -89,30 +89,62 @@ Instead, specify a meaningful tag such as `v1.42.0`.
 <!--
 ## Updating images
 
-The default pull policy is `IfNotPresent` which causes the
-{{< glossary_tooltip text="kubelet" term_id="kubelet" >}} to skip
-pulling an image if it already exists. If you would like to always force a pull,
-you can do one of the following:
-
-- set the `imagePullPolicy` of the container to `Always`.
-- omit the `imagePullPolicy` and use `:latest` as the tag for the image to use.
-- omit the `imagePullPolicy` and the tag for the image to use.
-- enable the [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) admission controller.
-
-When `imagePullPolicy` is defined without a specific value, it is also set to `Always`.
+When you first create a {{< glossary_tooltip text="Deployment" term_id="deployment" >}},
+{{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}, Pod, or other
+object that includes a Pod template, then by default the pull policy of all
+containers in that pod will be set to `IfNotPresent` if it is not explicitly
+specified. This policy causes the
+{{< glossary_tooltip text="kubelet" term_id="kubelet" >}} to skip pulling an
+image if it already exists.
 -->
 ## 更新镜像  {#updating-images}
 
-默认的镜像拉取策略是 `IfNotPresent`：在镜像已经存在的情况下，
-{{< glossary_tooltip text="kubelet" term_id="kubelet" >}} 将不再去拉取镜像。
-如果希望强制总是拉取镜像，你可以执行以下操作之一：
+当你最初创建一个 {{< glossary_tooltip text="Deployment" term_id="deployment" >}}、
+{{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}、Pod
+或者其他包含 Pod 模板的对象时，如果没有显式设定的话，Pod 中所有容器的默认镜像
+拉取策略是 `IfNotPresent`。这一策略会使得
+{{< glossary_tooltip text="kubelet" term_id="kubelet" >}}
+在镜像已经存在的情况下直接略过拉取镜像的操作。
+
+<!--
+If you would like to always force a pull, you can do one of the following:
+
+- set the `imagePullPolicy` of the container to `Always`.
+- omit the `imagePullPolicy` and use `:latest` as the tag for the image to use;
+  Kubernetes will set the policy to `Always`.
+- omit the `imagePullPolicy` and the tag for the image to use.
+- enable the [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages) admission controller.
+-->
+如果你希望强制总是拉取镜像，你可以执行以下操作之一：
 
 - 设置容器的 `imagePullPolicy` 为 `Always`。
-- 省略 `imagePullPolicy`，并使用 `:latest` 作为要使用的镜像的标签。
+- 省略 `imagePullPolicy`，并使用 `:latest` 作为要使用的镜像的标签；
+  Kubernetes 会将策略设置为 `Always`。
 - 省略 `imagePullPolicy` 和要使用的镜像标签。
 - 启用 [AlwaysPullImages](/zh/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)
   准入控制器（Admission Controller）。
 
+{{< note >}}
+<!--
+The value of `imagePullPolicy` of the container is always set when the object is
+first _created_, and is not updated if the image's tag later changes.
+
+For example, if you create a Deployment with an image whose tag is _not_
+`:latest`, and later update that Deployment's image to a `:latest` tag, the
+`imagePullPolicy` field will _not_ change to `Always`. You must manually change
+the pull policy of any object after its initial creation.
+-->
+对象被 *创建* 时，容器的 `imagePullPolicy` 总是被设置为某值，如果镜像的标签
+后来发生改变，镜像拉取策略也不会被改变。
+
+例如，如果你创建了一个 Deployment 对象，其中的镜像标签不是 `:latest`，
+后来 Deployment 的镜像被改为 `:latest`，则 `imagePullPolicy` 不会被改变为
+`Always`。你必须在对象被初始创建之后手动改变拉取策略。
+{{< /note >}}
+
+<!--
+When `imagePullPolicy` is defined without a specific value, it is also set to `Always`.
+-->
 如果 `imagePullPolicy` 未被定义为特定的值，也会被设置为 `Always`。
 
 <!--
@@ -245,7 +277,7 @@ example, run these on your desktop/laptop:
 
 <!--
 1. Run `docker login [server]` for each set of credentials you want to use.  This updates `$HOME/.docker/config.json` on your PC.
-1. View `$HOME/.docker/config.json` in an editor to ensure it contains just the credentials you want to use.
+1. View `$HOME/.docker/config.json` in an editor to ensure it contains only the credentials you want to use.
 1. Get a list of your nodes; for example:
       - if you want the names: `nodes=$( kubectl get nodes -o jsonpath='{range.items[*].metadata}{.name} {end}' )`
       - if you want to get the IP addresses: `nodes=$( kubectl get nodes -o jsonpath='{range .items[*].status.addresses[?(@.type=="ExternalIP")]}{.address} {end}' )`
diff --git a/content/zh/docs/concepts/containers/runtime-class.md b/content/zh/docs/concepts/containers/runtime-class.md
index 70f5dce756..316b9c6968 100644
--- a/content/zh/docs/concepts/containers/runtime-class.md
+++ b/content/zh/docs/concepts/containers/runtime-class.md
@@ -1,5 +1,5 @@
 ---
-title: 容器运行时类(Runtime Class)
+title: 容器运行时类（Runtime Class）
 content_type: concept
 weight: 20
 ---
@@ -184,9 +184,11 @@ For more details on setting up CRI runtimes, see [CRI installation](/docs/setup/
 #### dockershim
 
 <!--
-Kubernetes built-in dockershim CRI does not support runtime handlers.
+RuntimeClasses with dockershim must set the runtime handler to `docker`. Dockershim does not support
+custom configurable runtime handlers.
 -->
-Kubernetes 内置的 dockershim CRI 不支持配置运行时 handler。
+为 dockershim 设置 RuntimeClass 时，必须将运行时处理程序设置为 `docker`。
+Dockershim 不支持自定义的可配置的运行时处理程序。
 
 #### [containerd](https://containerd.io/)
 

From d82bfa76395eff1390e4e8da25c58528a9f3833e Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Mon, 26 Apr 2021 10:15:54 +0800
Subject: [PATCH 674/788] [zh] translate
 administer-cluster/controller-manager-leader-migration.md

---
 .../controller-manager-leader-migration.md    | 293 ++++++++++++++++++
 1 file changed, 293 insertions(+)
 create mode 100644 content/zh/docs/tasks/administer-cluster/controller-manager-leader-migration.md

diff --git a/content/zh/docs/tasks/administer-cluster/controller-manager-leader-migration.md b/content/zh/docs/tasks/administer-cluster/controller-manager-leader-migration.md
new file mode 100644
index 0000000000..f8ed2cdb4a
--- /dev/null
+++ b/content/zh/docs/tasks/administer-cluster/controller-manager-leader-migration.md
@@ -0,0 +1,293 @@
+---
+title: "将重复的控制平面迁至云控制器管理器"
+linkTitle: "将重复的控制平面迁至云控制器管理器"
+content_type: task
+---
+
+<!--
+---
+reviewers:
+- jpbetz
+- cheftako
+title: "Migrate Replicated Control Plane To Use Cloud Controller Manager"
+linkTitle: "Migrate Replicated Control Plane To Use Cloud Controller Manager"
+content_type: task
+---
+-->
+
+<!-- overview -->
+
+{{< feature-state state="alpha" for_k8s_version="v1.21" >}}
+
+{{< glossary_definition term_id="cloud-controller-manager" length="all" prepend="云管理控制器是">}}
+
+<!--
+## Background
+
+As part of the [cloud provider extraction effort](https://kubernetes.io/blog/2019/04/17/the-future-of-cloud-providers-in-kubernetes/),
+all cloud specific controllers must be moved out of the `kube-controller-manager`. 
+All existing clusters that run cloud controllers in the `kube-controller-manager` must migrate to instead run the controllers in a cloud provider specific `cloud-controller-manager`.
+
+Leader Migration provides a mechanism in which HA clusters can safely migrate "cloud specific" controllers between 
+the `kube-controller-manager` and the `cloud-controller-manager` via a shared resource lock between the two components while upgrading the replicated control plane. 
+For a single-node control plane, or if unavailability of controller managers can be tolerated during the upgrade, Leader Migration is not needed and this guide can be ignored.
+-->
+## 背景
+作为[云驱动提取工作](https://kubernetes.io/blog/2019/04/17/the-future-of-cloud-providers-in-kubernetes/)
+的一部分，所有特定于云的控制器都必须移出 `kube-controller-manager`。
+所有在 `kube-controller-manager` 中运行云控制器的现有集群必须迁移到云驱动特定的 `cloud-controller-manager` 中运行控制器。
+
+领导者迁移提供了一种机制，使得 HA 集群可以通过两个组件之间的共享资源锁定，
+安全地将“特定于云”的控制器从 `kube-controller-manager` 和迁移到`cloud-controller-manager`，
+同时升级复制的控制平面。
+对于单节点控制平面，或者在升级过程中可以容忍控制器管理器不可用的情况，则不需要领导者迁移，并且可以忽略本指南。
+
+<!--
+Leader Migration is an alpha feature that is disabled by default and it requires `--enable-leader-migration` to be set on controller managers. 
+It can be enabled by setting the feature gate `ControllerManagerLeaderMigration` plus `--enable-leader-migration` on `kube-controller-manager` or `cloud-controller-manager`.
+Leader Migration only applies during the upgrade and can be safely disabled or left enabled after the upgrade is complete.
+
+This guide walks you through the manual process of upgrading the control plane from `kube-controller-manager` with 
+built-in cloud provider to running both `kube-controller-manager` and `cloud-controller-manager`. 
+If you use a tool to administrator the cluster, please refer to the documentation of the tool and the cloud provider for more details.
+-->
+领导者迁移是一项 Alpha 阶段功能，默认情况下处于禁用状态，它需要设置控制器管理器的 `--enable-leader-migration` 参数。
+可以通过在 `kube-controller-manager` 或 `cloud-controller-manager` 上设置特性门控 
+`ControllerManagerLeaderMigration` 和 `--enable-leader-migration` 来启用。
+领导者迁移仅在升级期间适用，并且可以安全地禁用，也可以在升级完成后保持启用状态。
+
+本指南将引导你手动将控制平面从内置的云驱动的 `kube-controller-manager` 升级为
+同时运行 `kube-controller-manager` 和 `cloud-controller-manager`。
+如果使用工具来管理群集，请参阅对应工具和云驱动的文档以获取更多详细信息。
+
+## {{% heading "prerequisites" %}}
+
+<!--
+It is assumed that the control plane is running Kubernetes version N and to be upgraded to version N + 1. 
+Although it is possible to migrate within the same version, ideally the migration should be performed as part of a upgrade so that changes of configuration can be aligned to releases. 
+The exact versions of N and N + 1 depend on each cloud provider. For example, if a cloud provider builds a `cloud-controller-manager` to work with Kubernetes 1.22, then N can be 1.21 and N + 1 can be 1.22.
+
+The control plane nodes should run `kube-controller-manager` with Leader Election enabled through `--leader-elect=true`. 
+As of version N, an in-tree cloud privider must be set with `--cloud-provider` flag and `cloud-controller-manager` should not yet be deployed.
+-->
+假定控制平面正在运行 Kubernetes N 版本，并且要升级到 N+1 版本。
+尽管可以在同一版本中进行迁移，但理想情况下，迁移应作为升级的一部分执行，以便可以更改配置与发布保持一致。
+N 和 N+1的确切版本取决于各个云驱动。例如，如果云驱动构建了一个可与 Kubernetes 1.22 配合使用的 `cloud-controller-manager`，
+则 N 可以为 1.21，N+1 可以为 1.22。
+
+控制平面节点应运行 `kube-controller-manager`，并通过 `--leader-elect=true` 启用领导者选举。
+从版本 N 开始，树内云驱动必须设置 `--cloud-provider` 标志，而且 `cloud-controller-manager` 尚未部署。
+
+<!--
+The out-of-tree cloud provider must have built a `cloud-controller-manager` with Leader Migration implementation. 
+If the cloud provider imports `k8s.io/cloud-provider` and `k8s.io/controller-manager` of version v0.21.0 or later, Leader Migration will be avaliable.
+
+This guide assumes that kubelet of each control plane node starts `kube-controller-manager` 
+and `cloud-controller-manager` as static pods defined by their manifests. 
+If the components run in a different setting, please adjust the steps accordingly.
+
+For authorization, this guide assumes that the cluser uses RBAC. 
+If another authorization mode grants permissions to `kube-controller-manager` and `cloud-controller-manager` components, 
+please grant the needed access in a way that matches the mode.
+-->
+树外云驱动必须已经构建了一个实现领导者迁移的 `cloud-controller-manager`。
+如果云驱动导入了 v0.21.0 或更高版本的 `k8s.io/cloud-provider` 和 `k8s.io/controller-manager`，
+则可以进行领导者迁移。
+
+本指南假定每个控制平面节点的 kubelet 以静态 pod 的形式启动 `kube-controller-manager`
+和 `cloud-controller-manager`，静态 pod 的定义在清单文件中。
+如果组件以其他设置运行，请相应地调整步骤。
+
+为了获得授权，本指南假定集群使用 RBAC。
+如果其他授权模式授予 `kube-controller-manager` 和 `cloud-controller-manager` 组件权限，
+请以与该模式匹配的方式授予所需的访问权限。
+
+<!-- steps -->
+
+<!--
+### Grant access to Migration Lease
+
+The default permissions of the controller manager allow only accesses to their main Lease.
+In order for the migration to work, accesses to another Lease are required.
+
+You can grant `kube-controller-manager` full access to the leases API by modifying 
+the `system::leader-locking-kube-controller-manager` role. 
+This task guide assumes that the name of the migration lease is `cloud-provider-extraction-migration`.
+
+`kubectl patch -n kube-system role 'system::leader-locking-kube-controller-manager' -p '{"rules": [ {"apiGroups":[ "coordination.k8s.io"], "resources": ["leases"], "resourceNames": ["cloud-provider-extraction-migration"], "verbs": ["create", "list", "get", "update"] } ]}' --type=merge`
+
+Do the same to the `system::leader-locking-cloud-controller-manager` role.
+
+`kubectl patch -n kube-system role 'system::leader-locking-cloud-controller-manager' -p '{"rules": [ {"apiGroups":[ "coordination.k8s.io"], "resources": ["leases"], "resourceNames": ["cloud-provider-extraction-migration"], "verbs": ["create", "list", "get", "update"] } ]}' --type=merge`
+-->
+### 授予访问迁移 Lease 的权限
+
+控制器管理器的默认权限仅允许访问其主 Lease 对象。为了使迁移正常进行，需要访问其他 Lease 对象。
+
+你可以通过修改 `system::leader-locking-kube-controller-manager` 角色来授予
+`kube-controller-manager` 对 Lease API 的完全访问权限。
+本任务指南假定迁移 Lease 的名称为 `cloud-provider-extraction-migration`。
+
+`kubectl patch -n kube-system role 'system::leader-locking-kube-controller-manager' -p '{"rules": [ {"apiGroups":[ "coordination.k8s.io"], "resources": ["leases"], "resourceNames": ["cloud-provider-extraction-migration"], "verbs": ["create", "list", "get", "update"] } ]}' --type=merge`
+
+对 `system::leader-locking-cloud-controller-manager` 角色执行相同的操作。
+
+`kubectl patch -n kube-system role 'system::leader-locking-cloud-controller-manager' -p '{"rules": [ {"apiGroups":[ "coordination.k8s.io"], "resources": ["leases"], "resourceNames": ["cloud-provider-extraction-migration"], "verbs": ["create", "list", "get", "update"] } ]}' --type=merge`
+
+<!--
+### Initial Leader Migration configuration
+
+Leader Migration requires a configuration file representing the state of controller-to-manager assignment. 
+At this moment, with in-tree cloud provider, `kube-controller-manager` runs `route`, `service`, and `cloud-node-lifecycle`. 
+The following example configuration shows the assignment.
+-->
+### 初始领导者迁移配置
+
+领导者迁移需要一个表示控制器到管理器分配状态的配置文件。
+目前，对于树内云驱动，`kube-controller-manager` 运行 `route`、`service` 和 `cloud-node-lifecycle`。
+以下示例配置显示了分配。
+
+```yaml
+kind: LeaderMigrationConfiguration
+apiVersion: controllermanager.config.k8s.io/v1alpha1
+leaderName: cloud-provider-extraction-migration
+resourceLock: leases
+controllerLeaders:
+  - name: route
+    component: kube-controller-manager
+  - name: service
+    component: kube-controller-manager
+  - name: cloud-node-lifecycle
+    component: kube-controller-manager
+```
+
+<!--
+On each control plane node, save the content to `/etc/leadermigration.conf`, 
+and update the manifest of `kube-controller-manager` so that the file is mounted inside the container at the same location. 
+Also, update the same manifest to add the following arguments:
+
+- `--feature-gates=ControllerManagerLeaderMigration=true` to enable Leader Migration which is an alpha feature
+- `--enable-leader-migration` to enable Leader Migration on the controller manager
+- `--leader-migration-config=/etc/leadermigration.conf` to set configuration file
+
+Restart `kube-controller-manager` on each node. At this moment, `kube-controller-manager` has leader migration enabled and is ready for the migration.
+-->
+在每个控制平面节点上，将内容保存到 `/etc/leadermigration.conf` 中，
+并更新 `kube-controller-manager` 清单，以便将文件安装在容器内的同一位置。
+另外，更新相同的清单，添加以下参数：
+
+- `--feature-gates=ControllerManagerLeaderMigration=true` 启用领导者迁移（这是 Alpha 版功能）
+- `--enable-leader-migration` 在控制器管理器上启用领导者迁移
+- `--leader-migration-config=/etc/leadermigration.conf` 设置配置文件
+
+在每个节点上重新启动 `kube-controller-manager`。这时，`kube-controller-manager`
+已启用领导者迁移，并准备进行迁移。
+
+<!--
+### Deploy Cloud Controller Manager
+
+In version N + 1, the desired state of controller-to-manager assignment can be represented by a new configuration file, shown as follows. 
+Please note `component` field of each `controllerLeaders` changing from `kube-controller-manager` to `cloud-controller-manager`.
+-->
+### 部署云控制器管理器
+
+在 N+1 版本中，控制器到管理器分配的期望状态可以由新的配置文件表示，如下所示。
+请注意，每个 `controllerLeaders` 的 `component` 字段从 `kube-controller-manager` 更改为 `cloud-controller-manager`。
+
+```yaml
+kind: LeaderMigrationConfiguration
+apiVersion: controllermanager.config.k8s.io/v1alpha1
+leaderName: cloud-provider-extraction-migration
+resourceLock: leases
+controllerLeaders:
+  - name: route
+    component: cloud-controller-manager
+  - name: service
+    component: cloud-controller-manager
+  - name: cloud-node-lifecycle
+    component: cloud-controller-manager
+```
+
+<!--
+When creating control plane nodes of version N + 1, the content should be deploy to `/etc/leadermigration.conf`. 
+The manifest of `cloud-controller-manager` should be updated to mount the configuration file in 
+the same manner as `kube-controller-manager` of version N. Similarly, add `--feature-gates=ControllerManagerLeaderMigration=true`,
+`--enable-leader-migration`, and `--leader-migration-config=/etc/leadermigration.conf` to the arguments of `cloud-controller-manager`.
+
+Create a new control plane node of version N + 1 with the updated `cloud-controller-manager` manifest, 
+and with the `--cloud-provider` flag unset for `kube-controller-manager`.
+`kube-controller-manager` of version N + 1 MUST NOT have Leader Migration enabled because, 
+with an external cloud provider, it does not run the migrated controllers anymore and thus it is not involved in the migration.
+
+Please refer to [Cloud Controller Manager Administration](/docs/tasks/administer-cluster/running-cloud-controller/)
+for more detail on how to deploy `cloud-controller-manager`.
+-->
+
+当创建 N+1 版本的控制平面节点时，应将内容部署到 `/etc/leadermigration.conf`。
+应该更新 `cloud-controller-manager` 清单，以与 N 版本的 `kube-controller-manager` 相同的方式挂载配置文件。
+类似地，添加 `--feature-gates=ControllerManagerLeaderMigration=true`、`--enable-leader-migration` 
+和 `--leader-migration-config=/etc/leadermigration.conf` 到 `cloud-controller-manager` 的参数中。
+
+使用已更新的 `cloud-controller-manager` 清单创建一个新的 N+1 版本的控制平面节点。
+并且没有设置 `kube-controller-manager` 的 `--cloud-provider` 标志。
+N+1 版本的 `kube-controller-manager` 不能启用领导者迁移，
+因为在使用外部云驱动的情况下，它不再运行已迁移的控制器，因此不参与迁移。
+
+请参阅[云控制器管理器管理](/zh/docs/tasks/administer-cluster/running-cloud-controller/) 
+了解有关如何部署 `cloud-controller-manager` 的更多细节。
+
+<!--
+### Upgrade Control Plane
+
+The control plane now contains nodes of both version N and N + 1. 
+The nodes of version N run `kube-controller-manager` only, 
+and these of version N + 1 run both `kube-controller-manager` and `cloud-controller-manager`. 
+The migrated controllers, as specified in the configuration, are running under either `kube-controller-manager` of 
+version N or `cloud-controller-manager` of version N + 1 depending on which controller manager holds the migration lease.
+No controller will ever be running under both controller managers at any time.
+
+In a rolling manner, create a new control plane node of version N + 1 and bring down one of version N + 1 until the control plane contains only nodes of version N + 1.
+If a rollback from version N + 1 to N is required, add nodes of version N with Leader Migration enabled for `kube-controller-manager` back to the control plane, replacing one of version N + 1 each time until there are only nodes of version N.
+-->
+### 升级控制平面
+
+现在，控制平面包含 N 和 N+1 版本的节点。
+N 版本的节点仅运行 `kube-controller-manager`，而 N+1 版本的节点同时运行
+`kube-controller-manager` 和 `cloud-controller-manager`。
+根据配置所指定，已迁移的控制器在 N 版本的 `kube-controller-manager` 或 N+1 版本的
+`cloud-controller-manager` 下运行，
+具体取决于哪个控制器管理器拥有迁移  Lease 对象。任何时候都不存在一个控制器在两个控制器管理器下运行。
+
+以滚动的方式创建一个新的版本为 N+1 的控制平面节点，并将 N+1 版本中的一个关闭，
+直到控制平面仅包含版本为 N+1 的节点。
+如果需要从 N+1 版本回滚到 N 版本，则将启用了领导者迁移的 `kube-controller-manager`
+且版本为 N 的节点添加回控制平面，每次替换 N+1 版本的一个，直到只有 N 版本的节点为止。
+
+<!--
+### (Optional) Disable Leader Migration {#disable-leader-migration}
+
+Now that the control plane has been upgraded to run both `kube-controller-manager` and `cloud-controller-manager` of version N + 1, 
+Leader Migration has finished its job and can be safely disabled to save one Lease resource. 
+It is safe to re-enable Leader Migration for the rollback in the future.
+
+In a rolling manager, update manifest of `cloud-controller-manager` to unset both 
+`--enable-leader-migration` and `--leader-migration-config=` flag, 
+also remove the mount of `/etc/leadermigration.conf`, and finally remove `/etc/leadermigration.conf`. 
+To re-enable Leader Migration, recreate the configuration file and add its mount and the flags that enable Leader Migration back to `cloud-controller-manager`.
+-->
+### （可选）禁用领导者迁移 {#disable-leader-migration}
+
+现在，控制平面已经升级，可以同时运行 N+1 版本的 `kube-controller-manager` 和 `cloud-controller-manager` 了。
+领导者迁移已经完成工作，可以安全地禁用以节省一个 Lease 资源。
+在将来可以安全地重新启用领导者迁移以完成回滚。
+
+在滚动管理器中，更新 `cloud-controller-manager` 的清单以同时取消设置 `--enable-leader-migration`
+和 `--leader-migration-config=` 标志，并删除 `/etc/leadermigration.conf` 的挂载。 
+最后删除 `/etc/leadermigration.conf`。
+要重新启用领导者迁移，请重新创建配置文件，并将其挂载和启用领导者迁移的标志添加回到 `cloud-controller-manager`。
+
+## {{% heading "whatsnext" %}}
+<!--
+- Read the [Controller Manager Leader Migration](https://github.com/kubernetes/enhancements/tree/master/keps/sig-cloud-provider/2436-controller-manager-leader-migration) enhancement proposal
+-->
+- 阅读[领导者迁移控制器管理器](https://github.com/kubernetes/enhancements/tree/master/keps/sig-cloud-provider/2436-controller-manager-leader-migration)改进建议
\ No newline at end of file

From 411b1dd73df62fb85335e6a93834cdb815071e2d Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Thu, 29 Apr 2021 12:53:37 +0800
Subject: [PATCH 675/788] [zh] Resync concepts section (15)

---
 .../concepts/cluster-administration/addons.md |  4 +-
 .../cluster-administration/logging.md         | 15 +++++-
 .../cluster-administration/system-metrics.md  | 47 ++++++++++++++++---
 3 files changed, 57 insertions(+), 9 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/addons.md b/content/zh/docs/concepts/cluster-administration/addons.md
index aaed1402d0..c5295d9518 100644
--- a/content/zh/docs/concepts/cluster-administration/addons.md
+++ b/content/zh/docs/concepts/cluster-administration/addons.md
@@ -25,8 +25,8 @@ Add-ons 扩展了 Kubernetes 的功能。
 <!--
 ## Networking and Network Policy
 
-
 * [ACI](https://www.github.com/noironetworks/aci-containers) provides integrated container networking and network security with Cisco ACI.
+* [Antrea](https://antrea.io/) operates at Layer 3/4 to provide networking and security services for Kubernetes, leveraging Open vSwitch as the networking data plane.
 * [Calico](https://docs.projectcalico.org/latest/getting-started/kubernetes/) is a secure L3 networking and network policy provider.
 * [Canal](https://github.com/tigera/canal/tree/master/k8s-install) unites Flannel and Calico, providing networking and network policy.
 * [Cilium](https://github.com/cilium/cilium) is a L3 network and network policy plugin that can enforce HTTP/API/L7 policies transparently. Both routing and overlay/encapsulation mode are supported.
@@ -46,6 +46,8 @@ Add-ons 扩展了 Kubernetes 的功能。
 ## 网络和网络策略
 
 * [ACI](https://www.github.com/noironetworks/aci-containers) 通过 Cisco ACI 提供集成的容器网络和安全网络。
+* [Antrea](https://antrea.io/) 在第 3/4 层执行操作，为 Kubernetes 
+  提供网络连接和安全服务。Antrea 利用 Open vSwitch 作为网络的数据面。
 * [Calico](https://docs.projectcalico.org/v3.11/getting-started/kubernetes/installation/calico)
   是一个安全的 L3 网络和网络策略驱动。
 * [Canal](https://github.com/tigera/canal/tree/master/k8s-install) 结合 Flannel 和 Calico，提供网络和网络策略。
diff --git a/content/zh/docs/concepts/cluster-administration/logging.md b/content/zh/docs/concepts/cluster-administration/logging.md
index 62881a2415..5844a91901 100644
--- a/content/zh/docs/concepts/cluster-administration/logging.md
+++ b/content/zh/docs/concepts/cluster-administration/logging.md
@@ -157,6 +157,16 @@ up logging for COS image on GCP in the corresponding
 脚本为
 [`configure-helper` 脚本](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh)。
 
+<!--
+When using a **CRI container runtime**, the kubelet is responsible for rotating the logs and managing the logging directory structure. The kubelet
+sends this information to the CRI container runtime and the runtime writes the container logs to the given location. The two kubelet flags `container-log-max-size` and `container-log-max-files` can be used to configure the maximum size for each log file and the maximum number of files allowed for each container respectively.
+-->
+当使用某 *CRI 容器运行时* 时，kubelet 要负责对日志进行轮换，并
+管理日志目录的结构。kubelet 将此信息发送给 CRI 容器运行时，后者
+将容器日志写入到指定的位置。kubelet 标志 `container-log-max-size`
+和 `container-log-max-files` 可以用来配置每个日志文件的最大长度
+和每个容器可以生成的日志文件个数上限。
+
 <!--
 When you run [`kubectl logs`](/docs/reference/generated/kubectl/kubectl-commands#logs) as in
 the basic logging example, the kubelet on the node handles the request and
@@ -166,14 +176,15 @@ reads directly from the log file. The kubelet returns the content of the log fil
 节点上的 kubelet 处理该请求并直接读取日志文件，同时在响应中返回日志文件内容。
 
 <!--
-If an external system has performed the rotation,
+If an external system has performed the rotation or a CRI container runtime is used,
 only the contents of the latest log file will be available through
 `kubectl logs`. For example, if there's a 10MB file, `logrotate` performs
 the rotation and there are two files: one file that is 10MB in size and a second file that is empty.
 `kubectl logs` returns the latest log file which in this example is an empty response.
 -->
 {{< note >}}
-如果有外部系统执行日志轮转，那么 `kubectl logs` 仅可查询到最新的日志内容。
+如果有外部系统执行日志轮转或者使用了 CRI 容器运行时，那么 `kubectl logs` 
+仅可查询到最新的日志内容。
 比如，对于一个 10MB 大小的文件，通过 `logrotate` 执行轮转后生成两个文件，
 一个 10MB 大小，一个为空，`kubectl logs` 返回最新的日志文件，而该日志文件
 在这个例子中为空。
diff --git a/content/zh/docs/concepts/cluster-administration/system-metrics.md b/content/zh/docs/concepts/cluster-administration/system-metrics.md
index 033dabb95e..3e62921679 100644
--- a/content/zh/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/zh/docs/concepts/cluster-administration/system-metrics.md
@@ -247,15 +247,14 @@ cloudprovider_gce_api_request_duration_seconds { request = "list_disk"}
 
 <!--
 ### kube-scheduler metrics
-
-{{< feature-state for_k8s_version="v1.20" state="alpha" >}}
-
-The scheduler exposes optional metrics that reports the requested resources and the desired limits of all running pods. These metrics can be used to build capacity planning dashboards, assess current or historical scheduling limits, quickly identify workloads that cannot schedule due to lack of resources, and compare actual usage to the pod's request.
 -->
 ### kube-scheduler 指标   {#kube-scheduler-metrics}
 
-{{< feature-state for_k8s_version="v1.20" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
+<!--
+The scheduler exposes optional metrics that reports the requested resources and the desired limits of all running pods. These metrics can be used to build capacity planning dashboards, assess current or historical scheduling limits, quickly identify workloads that cannot schedule due to lack of resources, and compare actual usage to the pod's request.
+-->
 调度器会暴露一些可选的指标，报告所有运行中 Pods 所请求的资源和期望的约束值。
 这些指标可用来构造容量规划监控面板、访问调度约束的当前或历史数据、
 快速发现因为缺少资源而无法被调度的负载，或者将 Pod 的实际资源用量
@@ -287,7 +286,7 @@ kube-scheduler 组件能够辩识各个 Pod 所配置的资源
 Once a pod reaches completion (has a `restartPolicy` of `Never` or `OnFailure` and is in the `Succeeded` or `Failed` pod phase, or has been deleted and all containers have a terminated state) the series is no longer reported since the scheduler is now free to schedule other pods to run. The two metrics are called `kube_pod_resource_request` and `kube_pod_resource_limit`.
 
 The metrics are exposed at the HTTP endpoint `/metrics/resources` and require the same authorization as the `/metrics`
-endpoint on the scheduler. You must use the `--show-hidden-metrics-for-version=1.20` flag to expose these alpha stability metrics.
+endpoint on the scheduler. You must use the `-show-hidden-metrics-for-version=1.20` flag to expose these alpha stability metrics.
 -->
 一旦 Pod 进入完成状态（其 `restartPolicy` 为 `Never` 或 `OnFailure`，且
 其处于 `Succeeded` 或 `Failed` Pod 阶段，或者已经被删除且所有容器都具有
@@ -299,6 +298,42 @@ endpoint on the scheduler. You must use the `--show-hidden-metrics-for-version=1
 `--show-hidden-metrics-for-version=1.20` 标志才能暴露那些稳定性为 Alpha
 的指标。
 
+<!--
+## Disabling metrics
+
+You can explicitly turn off metrics via command line flag `--disabled-metrics`. This may be desired if, for example, a metric is causing a performance problem. The input is a list of disabled metrics (i.e. `--disabled-metrics=metric1,metric2`).
+-->
+## 禁用指标 {#disabling-metrics}
+
+你可以通过命令行标志 `--disabled-metrics` 来关闭某指标。
+在例如某指标会带来性能问题的情况下，这一操作可能是有用的。
+标志的参数值是一组被禁止的指标（例如：`--disabled-metrics=metric1,metric2`）。
+
+<!--
+## Metric cardinality enforcement
+
+Metrics with unbounded dimensions could cause memory issues in the components they instrument. To limit resource use, you can use the `--allow-label-value` command line option to dynamically configure an allow-list of label values for a metric.
+-->
+## 指标顺序性保证    {#metric-cardinality-enforcement}
+
+在 Alpha 阶段，标志只能接受一组映射值作为可以使用的指标标签。
+每个映射值的格式为`<指标名称>,<标签名称>=<可用标签列表>`，其中
+`<可用标签列表>` 是一个用逗号分隔的、可接受的标签名的列表。
+
+<!--
+The overall format looks like:
+`--allow-label-value <metric_name>,<label_name>='<allow_value1>, <allow_value2>...', <metric_name2>,<label_name>='<allow_value1>, <allow_value2>...', ...`.
+-->
+最终的格式看起来会是这样：
+`--allow-label-value <指标名称>,<标签名称>='<可用值1>,<可用值2>...', <指标名称2>,<标签名称>='<可用值1>, <可用值2>...', ...`.
+
+<!--
+Here is an example:
+-->
+下面是一个例子：
+
+`--allow-label-value number_count_metric,odd_number='1,3,5', number_count_metric,even_number='2,4,6', date_gauge_metric,weekend='Saturday,Sunday'`
+
 ## {{% heading "whatsnext" %}}
 
 <!--

From 8e23b3860856c3990aaf25ac4420a2fd2d77c147 Mon Sep 17 00:00:00 2001
From: Jerry <dabeige@gmail.com>
Date: Thu, 29 Apr 2021 13:02:50 +0800
Subject: [PATCH 676/788] optimize doc translation (#27792)

---
 ...Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md b/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md
index 28cb247e7a..68ea884661 100644
--- a/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md
+++ b/content/zh/blog/_posts/2020-12-10-Pod-Impersonation-and-Short-lived-Volumes-in-CSI-Drivers.md
@@ -132,5 +132,6 @@ Your feedback is always welcome!
 - SIG-Storage [meets regularly](https://github.com/kubernetes/community/tree/master/sig-storage#meetings) and can be reached via [Slack and the mailing list](https://github.com/kubernetes/community/tree/master/sig-storage#contact).
 -->
 随时欢迎您提供反馈!
-- SIG-Auth [定期开会](https://github.com/kubernetes/community/tree/master/sig-auth#meetings)，可以通过 [Slack 和邮件列表](https://github.com/kubernetes/community/tree/master/sig-auth＃contact)加入
+- SIG-Auth [定期开会](https://github.com/kubernetes/community/tree/master/sig-auth#meetings)，可以通过 [Slack 和邮件列表](https://github.com/kubernetes/community/tree/master/sig-auth#contact)加入
 - SIG-Storage [定期开会](https://github.com/kubernetes/community/tree/master/sig-storage#meetings)，可以通过 [Slack 和邮件列表](https://github.com/kubernetes/community/tree/master/sig-storage#contact)加入
+

From e97efe5fd954ed9eac00cd54e9c4d64475bc0518 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Tue, 27 Apr 2021 15:02:27 +0800
Subject: [PATCH 677/788] [zh] Sync
 content/en/docs/concepts/configuration/manage-resources-containers.md

---
 .../manage-resources-containers.md            |  25 +-
 .../kube-scheduler-policy-config.v1.md        | 799 ++++++++++++++++++
 2 files changed, 810 insertions(+), 14 deletions(-)
 create mode 100644 content/zh/docs/reference/config-api/kube-scheduler-policy-config.v1.md

diff --git a/content/zh/docs/concepts/configuration/manage-resources-containers.md b/content/zh/docs/concepts/configuration/manage-resources-containers.md
index 8ce9ef3f71..e019c5180a 100644
--- a/content/zh/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/zh/docs/concepts/configuration/manage-resources-containers.md
@@ -134,8 +134,7 @@ This is different from the `memory` and `cpu` resources.
 {{< /note >}}
 
 <!--
-CPU and memory are collectively referred to as *compute resources*, or just
-*resources*. Compute
+CPU and memory are collectively referred to as *compute resources*, or *resources*. Compute
 resources are measurable quantities that can be requested, allocated, and
 consumed. They are distinct from
 [API resources](/docs/concepts/overview/kubernetes-api/). API resources, such as Pods and
@@ -810,7 +809,9 @@ If you want to use project quotas, you should:
 
 * Enable the `LocalStorageCapacityIsolationFSQuotaMonitoring=true`
   [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
-  in the kubelet configuration.
+  using the `featureGates` field in the
+  [kubelet configuration](/docs/reference/config-api/kubelet-config.v1beta1/)
+  or the `--feature-gates` command line flag.
 
 * Ensure that the root filesystem (or optional runtime filesystem)
   has project quotas enabled. All XFS filesystems support project quotas.
@@ -828,8 +829,8 @@ If you want to use project quotas, you should:
 
 如果你希望使用项目配额，你需要：
 
-* 在 kubelet 配置中启用 `LocalStorageCapacityIsolationFSQuotaMonitoring=true`
-  [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
+* 在 [kubelet 配置](/zh/docs/reference/config-api/kubelet-config.v1beta1/)中使用 `featureGates` 字段 或者使用 `--feature-gates` 命令行参数
+启用 `LocalStorageCapacityIsolationFSQuotaMonitoring=true` [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/) 。
 
 * 确保根文件系统（或者可选的运行时文件系统）启用了项目配额。所有 XFS
   文件系统都支持项目配额。
@@ -952,15 +953,14 @@ Cluster-level extended resources are not tied to nodes. They are usually managed
 by scheduler extenders, which handle the resource consumption and resource quota.
 
 You can specify the extended resources that are handled by scheduler extenders
-in [scheduler policy
-configuration](https://github.com/kubernetes/kubernetes/blob/release-1.10/pkg/scheduler/api/v1/types.go#L31).
+in [scheduler policy configuration](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
 -->
 #### 集群层面的扩展资源   {#cluster-level-extended-resources}
 
 集群层面的扩展资源并不绑定到具体节点。
 它们通常由调度器扩展程序（Scheduler Extenders）管理，这些程序处理资源消耗和资源配额。
 
-你可以在[调度器策略配置](https://github.com/kubernetes/kubernetes/blob/release-1.10/pkg/scheduler/api/v1/types.go#L31)
+你可以在[调度器策略配置](/zh/docs/reference/config-api/kube-scheduler-policy-config.v1/)
 中指定由调度器扩展程序处理的扩展资源。
 
 <!--
@@ -1005,7 +1005,7 @@ extender.
 <!--
 ### Consuming extended resources
 
-Users can consume extended resources in Pod specs just like CPU and memory.
+Users can consume extended resources in Pod specs like CPU and memory.
 The scheduler takes care of the resource accounting so that no more than the
 available amount is simultaneously allocated to Pods.
 
@@ -1281,17 +1281,13 @@ You can see that the Container was terminated because of `reason:OOM Killed`, wh
 
 <!--
 * Get hands-on experience [assigning Memory resources to Containers and Pods](/docs/tasks/configure-pod-container/assign-memory-resource/).
-
 * Get hands-on experience [assigning CPU resources to Containers and Pods](/docs/tasks/configure-pod-container/assign-cpu-resource/).
-
 * For more details about the difference between requests and limits, see
   [Resource QoS](https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md).
-
 * Read the [Container](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core) API reference
-
 * Read the [ResourceRequirements](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#resourcerequirements-v1-core) API reference
-
 * Read about [project quotas](http://xfs.org/docs/xfsdocs-xml-dev/XFS_User_Guide/tmp/en-US/html/xfs-quotas.html) in XFS
+* Read more about the [kube-scheduler Policy reference (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
 -->
 
 * 获取[分配内存资源给容器和 Pod ](/zh/docs/tasks/configure-pod-container/assign-memory-resource/) 的实践经验
@@ -1300,4 +1296,5 @@ You can see that the Container was terminated because of `reason:OOM Killed`, wh
 * 阅读 API 参考文档中 [Container](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core) 部分。
 * 阅读 API 参考文档中 [ResourceRequirements](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#resourcerequirements-v1-core) 部分。
 * 阅读 XFS 中关于[项目配额](https://xfs.org/docs/xfsdocs-xml-dev/XFS_User_Guide/tmp/en-US/html/xfs-quotas.html) 的文档。
+* 阅读更多关于[kube-scheduler 策略参考 (v1)](/zh/docs/reference/config-api/kube-scheduler-policy-config.v1/) 的文档。
 
diff --git a/content/zh/docs/reference/config-api/kube-scheduler-policy-config.v1.md b/content/zh/docs/reference/config-api/kube-scheduler-policy-config.v1.md
new file mode 100644
index 0000000000..e694f7ecbc
--- /dev/null
+++ b/content/zh/docs/reference/config-api/kube-scheduler-policy-config.v1.md
@@ -0,0 +1,799 @@
+---
+title: kube-scheduler Policy Configuration (v1)
+content_type: tool-reference
+package: kubescheduler.config.k8s.io/v1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+  
+    
+
+
+## `Policy`     {#kubescheduler-config-k8s-io-v1-Policy}
+    
+
+
+
+
+Policy describes a struct for a policy resource used in api.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Policy</code></td></tr>
+    
+
+  
+  
+<tr><td><code>predicates</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicatePolicy"><code>[]PredicatePolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the fit predicate functions</td>
+</tr>
+    
+  
+<tr><td><code>priorities</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityPolicy"><code>[]PriorityPolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the priority functions</td>
+</tr>
+    
+  
+<tr><td><code>extenders</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LegacyExtender"><code>[]LegacyExtender</code></a>
+</td>
+<td>
+   Holds the information to communicate with the extender(s)</td>
+</tr>
+    
+  
+<tr><td><code>hardPodAffinitySymmetricWeight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule
+corresponding to every RequiredDuringScheduling affinity rule.
+HardPodAffinitySymmetricWeight represents the weight of implicit PreferredDuringScheduling affinity rule, in the range 1-100.</td>
+</tr>
+    
+  
+<tr><td><code>alwaysCheckAllPredicates</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   When AlwaysCheckAllPredicates is set to true, scheduler checks all
+the configured predicates even after one or more of them fails.
+When the flag is set to false, scheduler skips checking the rest
+of the predicates after it finds one predicate that failed.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderManagedResource`     {#kubescheduler-config-k8s-io-v1-ExtenderManagedResource}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderManagedResource describes the arguments of extended resources
+managed by an extender.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name is the extended resource name.</td>
+</tr>
+    
+  
+<tr><td><code>ignoredByScheduler</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   IgnoredByScheduler indicates whether kube-scheduler should ignore this
+resource when applying predicates.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderTLSConfig`     {#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderTLSConfig contains settings to enable TLS with extender
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>insecure</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Server should be accessed without verifying the TLS certificate. For testing only.</td>
+</tr>
+    
+  
+<tr><td><code>serverName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ServerName is passed to the server for SNI and is used in the client to check server
+certificates against. If ServerName is empty, the hostname used to contact the
+server is used.</td>
+</tr>
+    
+  
+<tr><td><code>certFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>keyFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>caFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Trusted root certificates for server</td>
+</tr>
+    
+  
+<tr><td><code>certData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CertData holds PEM-encoded bytes (typically read from a client certificate file).
+CertData takes precedence over CertFile</td>
+</tr>
+    
+  
+<tr><td><code>keyData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   KeyData holds PEM-encoded bytes (typically read from a client certificate key file).
+KeyData takes precedence over KeyFile</td>
+</tr>
+    
+  
+<tr><td><code>caData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CAData holds PEM-encoded bytes (typically read from a root certificates bundle).
+CAData takes precedence over CAFile</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelPreference`     {#kubescheduler-config-k8s-io-v1-LabelPreference}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+LabelPreference holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   This is a boolean flag
+If true, higher priority is given to nodes that have the label
+If false, higher priority is given to nodes that do not have the label</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelsPresence`     {#kubescheduler-config-k8s-io-v1-LabelsPresence}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+LabelsPresence holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should be either present (or absent) for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   The boolean flag that indicates whether the labels should be present or absent from the node</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LegacyExtender`     {#kubescheduler-config-k8s-io-v1-LegacyExtender}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+LegacyExtender holds the parameters used to communicate with the extender. If a verb is unspecified/empty,
+it is assumed that the extender chose not to provide that extension.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>urlPrefix</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   URLPrefix at which the extender is available</td>
+</tr>
+    
+  
+<tr><td><code>filterVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the filter call, empty if not supported. This verb is appended to the URLPrefix when issuing the filter call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>preemptVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the preempt call, empty if not supported. This verb is appended to the URLPrefix when issuing the preempt call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>prioritizeVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the prioritize call, empty if not supported. This verb is appended to the URLPrefix when issuing the prioritize call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the prioritize call generates.
+The weight should be a positive integer</td>
+</tr>
+    
+  
+<tr><td><code>bindVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the bind call, empty if not supported. This verb is appended to the URLPrefix when issuing the bind call to extender.
+If this method is implemented by the extender, it is the extender's responsibility to bind the pod to apiserver. Only one extender
+can implement this function.</td>
+</tr>
+    
+  
+<tr><td><code>enableHttps</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   EnableHTTPS specifies whether https should be used to communicate with the extender</td>
+</tr>
+    
+  
+<tr><td><code>tlsConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig"><code>ExtenderTLSConfig</code></a>
+</td>
+<td>
+   TLSConfig specifies the transport layer security config</td>
+</tr>
+    
+  
+<tr><td><code>httpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/time#Duration"><code>time.Duration</code></a>
+</td>
+<td>
+   HTTPTimeout specifies the timeout duration for a call to the extender. Filter timeout fails the scheduling of the pod. Prioritize
+timeout is ignored, k8s/other extenders priorities are used to select the node.</td>
+</tr>
+    
+  
+<tr><td><code>nodeCacheCapable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   NodeCacheCapable specifies that the extender is capable of caching node information,
+so the scheduler should only send minimal information about the eligible nodes
+assuming that the extender already cached full details of all nodes in the cluster</td>
+</tr>
+    
+  
+<tr><td><code>managedResources</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderManagedResource"><code>[]ExtenderManagedResource</code></a>
+</td>
+<td>
+   ManagedResources is a list of extended resources that are managed by
+this extender.
+- A pod will be sent to the extender on the Filter, Prioritize and Bind
+  (if the extender is the binder) phases iff the pod requests at least
+  one of the extended resources in this list. If empty or unspecified,
+  all pods will be sent to this extender.
+- If IgnoredByScheduler is set to true for a resource, kube-scheduler
+  will skip checking the resource in predicates.</td>
+</tr>
+    
+  
+<tr><td><code>ignorable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Ignorable specifies if the extender is ignorable, i.e. scheduling should not
+fail when the extender returns an error or is not reachable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicateArgument`     {#kubescheduler-config-k8s-io-v1-PredicateArgument}
+    
+
+
+
+**Appears in:**
+
+- [PredicatePolicy](#kubescheduler-config-k8s-io-v1-PredicatePolicy)
+
+
+PredicateArgument represents the arguments to configure predicate functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAffinity"><code>ServiceAffinity</code></a>
+</td>
+<td>
+   The predicate that provides affinity for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelsPresence</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelsPresence"><code>LabelsPresence</code></a>
+</td>
+<td>
+   The predicate that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicatePolicy`     {#kubescheduler-config-k8s-io-v1-PredicatePolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PredicatePolicy describes a struct of a predicate policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the predicate policy
+For a custom predicate, the name can be user-defined
+For the Kubernetes provided predicates, the name is the identifier of the pre-defined predicate</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicateArgument"><code>PredicateArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given predicate</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityArgument`     {#kubescheduler-config-k8s-io-v1-PriorityArgument}
+    
+
+
+
+**Appears in:**
+
+- [PriorityPolicy](#kubescheduler-config-k8s-io-v1-PriorityPolicy)
+
+
+PriorityArgument represents the arguments to configure priority functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAntiAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity"><code>ServiceAntiAffinity</code></a>
+</td>
+<td>
+   The priority function that ensures a good spread (anti-affinity) for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelPreference</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelPreference"><code>LabelPreference</code></a>
+</td>
+<td>
+   The priority function that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+<tr><td><code>requestedToCapacityRatioArguments</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments"><code>RequestedToCapacityRatioArguments</code></a>
+</td>
+<td>
+   The RequestedToCapacityRatio priority function is parametrized with function shape.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityPolicy`     {#kubescheduler-config-k8s-io-v1-PriorityPolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PriorityPolicy describes a struct of a priority policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the priority policy
+For a custom priority, the name can be user-defined
+For the Kubernetes provided priority functions, the name is the identifier of the pre-defined priority function</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the priority function generates
+The weight should be non-zero and can be a positive or a negative integer</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityArgument"><code>PriorityArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given priority function</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `RequestedToCapacityRatioArguments`     {#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+RequestedToCapacityRatioArguments holds arguments specific to RequestedToCapacityRatio priority function.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>shape</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-UtilizationShapePoint"><code>[]UtilizationShapePoint</code></a>
+</td>
+<td>
+   Array of point defining priority function shape.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ResourceSpec`     {#kubescheduler-config-k8s-io-v1-ResourceSpec}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+ResourceSpec represents single resource and weight for bin packing of priority RequestedToCapacityRatioArguments.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name of the resource to be managed by RequestedToCapacityRatio function.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   Weight of the resource.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+ServiceAffinity holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should match for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAntiAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+ServiceAntiAffinity holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `UtilizationShapePoint`     {#kubescheduler-config-k8s-io-v1-UtilizationShapePoint}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+UtilizationShapePoint represents single point of priority function shape.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>utilization</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Utilization (x axis). Valid values are 0 to 100. Fully utilized node maps to 100.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Score assigned to given utilization (y axis). Valid values are 0 to 10.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  

From 7746f7935efb7cce35cad814daa2e01a72d49795 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Thu, 29 Apr 2021 14:47:18 +0800
Subject: [PATCH 678/788] [zh] Sync content secret file

---
 .../zh/docs/concepts/configuration/secret.md  | 47 +++++++------------
 1 file changed, 17 insertions(+), 30 deletions(-)

diff --git a/content/zh/docs/concepts/configuration/secret.md b/content/zh/docs/concepts/configuration/secret.md
index f1f950ac3e..53a301f03e 100644
--- a/content/zh/docs/concepts/configuration/secret.md
+++ b/content/zh/docs/concepts/configuration/secret.md
@@ -50,10 +50,10 @@ Secret 是一种包含少量敏感信息例如密码、令牌或密钥的对象
 Kubernetes Secrets are, by default, stored as unencrypted base64-encoded
 strings. By default they can be retrieved - as plain text - by anyone with API
 access, or anyone with access to Kubernetes' underlying data store, etcd. In
-order to safely use Secrets, we recommend you (at a minimum):
+order to safely use Secrets, it is recommended you (at a minimum):
 
-1. [Enable Encryption at Rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/) for Secrets.
-2. [Enable RBAC rules that restrict reading and writing the Secret](https://kubernetes.io/docs/reference/access-authn-authz/authorization/). Be aware that secrets can be obtained implicitly by anyone with the permission to create a Pod.
+1. [Enable Encryption at Rest](/zh/docs/tasks/administer-cluster/encrypt-data/) for Secrets.
+2. [Enable or configure RBAC rules](/docs/reference/access-authn-authz/authorization/) that restrict reading and writing the Secret. Be aware that secrets can be obtained implicitly by anyone with the permission to create a Pod.
 -->
 Kubernetes Secret 默认情况下存储为 base64-编码的、非加密的字符串。
 默认情况下，能够访问 API 的任何人，或者能够访问 Kubernetes 下层数据存储（etcd）
@@ -61,7 +61,7 @@ Kubernetes Secret 默认情况下存储为 base64-编码的、非加密的字符
 为了能够安全地使用 Secret，我们建议你（至少）：
 
 1. 为 Secret [启用静态加密](/zh/docs/tasks/administer-cluster/encrypt-data/)；
-2. [启用 RBAC 规则来限制对 Secret 的读写操作](/zh/docs/reference/access-authn-authz/authorization/)。
+2. [启用 或配置 RBAC 规则](/zh/docs/reference/access-authn-authz/authorization/)来限制对 Secret 的读写操作。
    要注意，任何被允许创建 Pod 的人都默认地具有读取 Secret 的权限。
 {{< /caution >}}
 
@@ -193,7 +193,7 @@ empty-secret   Opaque   0      2m6s
 
 <!--
 The `DATA` column shows the number of data items stored in the Secret.
-In this case, `0` means we have just created an empty Secret.
+In this case, `0` means we have created an empty Secret.
 -->
 `DATA` 列显示 Secret 中保存的数据条目个数。
 在这个例子种，`0` 意味着我们刚刚创建了一个空的 Secret。
@@ -204,7 +204,7 @@ In this case, `0` means we have just created an empty Secret.
 A `kubernetes.io/service-account-token` type of Secret is used to store a
 token that identifies a service account. When using this Secret type, you need
 to ensure that the `kubernetes.io/service-account.name` annotation is set to an
-existing service account name. An Kubernetes controller fills in some other
+existing service account name. A Kubernetes controller fills in some other
 fields such as the `kubernetes.io/service-account.uid` annotation and the
 `token` key in the `data` field set to actual token content.
 
@@ -1068,8 +1068,8 @@ Kubelet is checking whether the mounted secret is fresh on every periodic sync.
 However, it is using its local cache for getting the current value of the Secret.
 
 The type of the cache is configurable using the  (`ConfigMapAndSecretChangeDetectionStrategy` field in
-[KubeletConfiguration struct](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go)).
-It can be either propagated via watch (default), ttl-based, or simply redirecting
+the [KubeletConfiguration struct](/docs/reference/config-api/kubelet-config.v1beta1/).
+A Secret can be either propagated by watch (default), ttl-based, or by redirecting
 all requests to directly kube-apiserver.
 As a result, the total delay from the moment when the Secret is updated to the moment
 when new keys are projected to the Pod can be as long as kubelet sync period + cache
@@ -1082,7 +1082,7 @@ propagation delay, where cache propagation delay depends on the chosen cache typ
 组件 kubelet 在周期性同步时检查被挂载的 Secret 是不是最新的。
 但是，它会使用其本地缓存的数值作为 Secret 的当前值。
 
-缓存的类型可以使用 [KubeletConfiguration 结构](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go)
+缓存的类型可以使用 [KubeletConfiguration 结构](/zh/docs/reference/config-api/kubelet-config.v1beta1/)
 中的 `ConfigMapAndSecretChangeDetectionStrategy` 字段来配置。
 它可以通过 watch 操作来传播（默认），基于 TTL 来刷新，也可以
 将所有请求直接重定向到 API 服务器。
@@ -1151,7 +1151,7 @@ spec:
 <!--
 #### Consuming Secret Values from environment variables
 
-Inside a container that consumes a secret in an environment variables, the secret keys appear as
+Inside a container that consumes a secret in the environment variables, the secret keys appear as
 normal environment variables containing the base64 decoded values of the secret data.
 This is the result of commands executed inside the container from the example above:
 -->
@@ -1203,10 +1203,10 @@ There are third party solutions for triggering restarts when secrets change.
 -->
 ## 不可更改的 Secret {#secret-immutable}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 <!--
-The Kubernetes beta feature _Immutable Secrets and ConfigMaps_ provides an option to set
+The Kubernetes feature _Immutable Secrets and ConfigMaps_ provides an option to set
 individual Secrets and ConfigMaps as immutable. For clusters that extensively use Secrets
 (at least tens of thousands of unique Secret to Pod mounts), preventing changes to their
 data has the following advantages:
@@ -1215,7 +1215,7 @@ data has the following advantages:
 - improves performance of your cluster by significantly reducing load on kube-apiserver, by
 closing watches for secrets marked as immutable.
 -->
-Kubernetes 的 alpha 特性 _不可变的 Secret 和 ConfigMap_ 提供了一种可选配置，
+Kubernetes 的特性 _不可变的 Secret 和 ConfigMap_ 提供了一种可选配置，
 可以设置各个 Secret 和 ConfigMap 为不可变的。
 对于大量使用 Secret 的集群（至少有成千上万各不相同的 Secret 供 Pod 挂载），
 禁止变更它们的数据有下列好处：
@@ -1225,8 +1225,8 @@ Kubernetes 的 alpha 特性 _不可变的 Secret 和 ConfigMap_ 提供了一种
   kube-apiserver 的负载，提升集群性能。
 
 <!--
-This feature is controlled by the `ImmutableEphemeralVolumes` [feature
-gate](/docs/reference/command-line-tools-reference/feature-gates/),
+This feature is controlled by the `ImmutableEphemeralVolumes`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/),
 which is enabled by default since v1.19. You can create an immutable
 Secret by setting the `immutable` field to `true`. For example,
 -->
@@ -1300,17 +1300,6 @@ Pod 将会将其的 imagePullSecret 字段设置为服务帐户的 imagePullSecr
 有关该过程的详细说明，请参阅
 [将 ImagePullSecrets 添加到服务帐户](/zh/docs/tasks/configure-pod-container/configure-service-account/#adding-imagepullsecrets-to-a-service-account)。
 
-<!--
-### Automatic Mounting of Manually Created Secrets
-
-Manually created secrets (e.g. one containing a token for accessing a github account)
-can be automatically attached to pods based on their service account.
--->
-
-#### 自动挂载手动创建的 Secret
-
-手动创建的 Secret（例如包含用于访问 GitHub 帐户令牌的 Secret）可以
-根据其服务帐户自动附加到 Pod。
 
 <!--
 ## Details
@@ -1863,14 +1852,12 @@ Secret 中的值对于不同的环境来说重要性可能不同。
 <!--
 Applications that need to access the secrets API should perform `get` requests on
 the secrets they need. This lets administrators restrict access to all secrets
-while [white-listing access to individual instances](
-/docs/reference/access-authn-authz/rbac/#referring-to-resources) that
+while [white-listing access to individual instances](/docs/reference/access-authn-authz/rbac/#referring-to-resources) that
 the app needs.
 
 For improved performance over a looping `get`, clients can design resources that
 reference a secret then `watch` the resource, re-requesting the secret when the
-reference changes. Additionally, a ["bulk watch" API](
-https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/bulk_watch.md)
+reference changes. Additionally, a ["bulk watch" API](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/bulk_watch.md)
 to let clients `watch` individual resources has also been proposed, and will likely
 be available in future releases of Kubernetes.
 -->

From fa884fbe5054a1d9d1894654b4159618a4e2c0db Mon Sep 17 00:00:00 2001
From: howieyuen <haoyuan@mail.ustc.edu.cn>
Date: Thu, 29 Apr 2021 16:06:52 +0800
Subject: [PATCH 679/788] resync setup section [3]

---
 .../setup/best-practices/cluster-large.md     | 363 ++++++++----------
 1 file changed, 164 insertions(+), 199 deletions(-)

diff --git a/content/zh/docs/setup/best-practices/cluster-large.md b/content/zh/docs/setup/best-practices/cluster-large.md
index 4a27b867e1..d2c6d8fcb9 100644
--- a/content/zh/docs/setup/best-practices/cluster-large.md
+++ b/content/zh/docs/setup/best-practices/cluster-large.md
@@ -1,173 +1,136 @@
 ---
-title: 创建大型集群
+title: 大规模集群的注意事项
 weight: 20
 ---
 
-<!--
-## Support
+<!-- 
+reviewers:
+- davidopp
+- lavalamp
+title: Considerations for large clusters
+weight: 20
 -->
-## 支持
 
 <!--
-At {{< param "version" >}}, Kubernetes supports clusters with up to 5000 nodes. More specifically, we support configurations that meet *all* of the following criteria:
+A cluster is a set of {{< glossary_tooltip text="nodes" term_id="node" >}} (physical
+or virtual machines) running Kubernetes agents, managed by the
+{{< glossary_tooltip text="control plane" term_id="control-plane" >}}.
+Kubernetes {{< param "version" >}} supports clusters with up to 5000 nodes. More specifically,
+Kubernetes is designed to accommodate configurations that meet *all* of the following criteria:
 -->
-在 {{< param "version" >}} 版本中， Kubernetes 支持的最大节点数为 5000。更具体地说，我们支持满足以下*所有*条件的配置：
+集群是运行 Kubernetes 代理的、
+由{{< glossary_tooltip text="控制平面" term_id="control-plane" >}}管理的一组
+{{< glossary_tooltip text="节点" term_id="node" >}}（物理机或虚拟机）。
+Kubernetes {{< param "version" >}} 支持的最大节点数为 5000。
+更具体地说，Kubernetes旨在适应满足以下*所有*标准的配置：
 
 <!--
+* No more than 100 pods per node
 * No more than 5000 nodes
 * No more than 150000 total pods
 * No more than 300000 total containers
-* No more than 100 pods per node
 -->
-
+* 每个节点的 Pod 数量不超过 100
 * 节点数不超过 5000
 * Pod 总数不超过 150000
 * 容器总数不超过 300000
-* 每个节点的 pod 数量不超过 100
 
-<br>
-
-{{< toc >}}
-
-<!--
-## Setup
+<!-- 
+You can scale your cluster by adding or removing nodes. The way you do this depends
+on how your cluster is deployed.
 -->
-## 设定
+你可以通过添加或删除节点来扩展集群。集群扩缩的方式取决于集群的部署方式。
 
-<!--
-A cluster is a set of nodes (physical or virtual machines) running Kubernetes agents, managed by a "master" (the cluster-level control plane).
--->
-集群是一组运行着 Kubernetes 代理的节点（物理机或者虚拟机），这些节点由主控节点（集群级控制面）控制。
+<!--  
+## Cloud provider resource quotas {#quota-issues}
 
-<!--
-Normally the number of nodes in a cluster is controlled by the value `NUM_NODES` in the platform-specific `config-default.sh` file (for example, see [GCE's `config-default.sh`](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/gce/config-default.sh)).
--->
-通常，集群中的节点数由特定于云平台的配置文件 `config-default.sh`
-（可以参考 [GCE 平台的 `config-default.sh`](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/gce/config-default.sh)）
-中的 `NUM_NODES` 参数控制。
-
-<!--
-Simply changing that value to something very large, however, may cause the setup script to fail for many cloud providers. A GCE deployment, for example, will run in to quota issues and fail to bring the cluster up.
--->
-但是，在许多云供应商的平台上，仅将该值更改为非常大的值，可能会导致安装脚本运行失败。例如，在 GCE，由于配额问题，集群会启动失败。
-
-<!--
-When setting up a large Kubernetes cluster, the following issues must be considered.
--->
-因此，在创建大型 Kubernetes 集群时，必须考虑以下问题。
-
-<!--
-### Quota Issues
--->
-### 配额问题
-
-<!--
-To avoid running into cloud provider quota issues, when creating a cluster with many nodes, consider:
--->
-为了避免遇到云供应商配额问题，在创建具有大规模节点的集群时，请考虑：
-
-<!--
-* Increase the quota for things like CPU, IPs, etc.
-  * In [GCE, for example,](https://cloud.google.com/compute/docs/resource-quotas) you'll want to increase the quota for:
+To avoid running into cloud provider quota issues, when creating a cluster with many nodes,
+consider:
+* Request a quota increase for cloud resources such as:
+    * Computer instances
     * CPUs
-    * VM instances
-    * Total persistent disk reserved
+    * Storage volumes
     * In-use IP addresses
-    * Firewall Rules
-    * Forwarding rules
-    * Routes
-    * Target pools
-* Gating the setup script so that it brings up new node VMs in smaller batches with waits in between, because some cloud providers rate limit the creation of VMs.
+    * Packet filtering rule sets
+    * Number of load balancers
+    * Network subnets
+    * Log streams
+* Gate the cluster scaling actions to brings up new nodes in batches, with a pause
+  between batches, because some cloud providers rate limit the creation of new instances.
 -->
-* 增加诸如 CPU，IP 等资源的配额。
-  * 例如，在 [GCE](https://cloud.google.com/compute/docs/resource-quotas)，您需要增加以下资源的配额：
+## 云供应商资源配额 {#quota-issues}
+
+为避免遇到云供应商配额问题，在创建具有大规模节点的集群时，请考虑以下事项：
+* 请求增加云资源的配额，例如：
+    * 计算实例
     * CPUs
-    * VM 实例
-    * 永久磁盘总量
+    * 存储卷
     * 使用中的 IP 地址
-    * 防火墙规则
-    * 转发规则
-    * 路由
-    * 目标池
-* 由于某些云供应商会对虚拟机的创建进行流控，因此需要对设置脚本进行更改，使其以较小的批次启动新的节点，并且之间有等待时间。
+    * 数据包过滤规则集
+    * 负载均衡数量
+    * 网络子网
+    * 日志流
+* 由于某些云供应商限制了创建新实例的速度，因此通过分批启动新节点来控制集群扩展操作，并在各批之间有一个暂停。
 
-<!--
-### Etcd storage
+<!--  
+## Control plane components
+
+For a large cluster, you need a control plane with sufficient compute and other
+resources.
+
+Typically you would run one or two control plane instances per failure zone,
+scaling those instances vertically first and then scaling horizontally after reaching
+the point of falling returns to (vertical) scale.
 -->
-### Etcd 存储
+## 控制面组件
 
-<!--
-To improve performance of large clusters, we store events in a separate dedicated etcd instance.
+对于大型集群，你需要一个具有足够计算能力和其他资源的控制平面。
+
+通常，你将在每个故障区域运行一个或两个控制平面实例，
+先垂直缩放这些实例，然后在到达下降点（垂直）后再水平缩放。
+
+<!-- 
+You should run at least one instance per failure zone to provide fault-tolerance. Kubernetes
+nodes do not automatically steer traffic towards control-plane endpoints that are in the
+same failure zone; however, your cloud provider might have its own mechanisms to do this.
+
+For example, using a managed load balancer, you configure the load balancer to send traffic
+that originates from the kubelet and Pods in failure zone _A_, and direct that traffic only
+to the control plane hosts that are also in zone _A_. If a single control-plane host or
+endpoint failure zone _A_ goes offline, that means that all the control-plane traffic for
+nodes in zone _A_ is now being sent between zones. Running multiple control plane hosts in
+each zone makes that outcome less likely.
 -->
-为了提高大规模集群的性能，我们将事件存储在专用的 etcd 实例中。
+你应该在每个故障区域至少应运行一个实例，以提供容错能力。 
+Kubernetes 节点不会自动将流量引向相同故障区域中的控制平面端点。 
+但是，你的云供应商可能有自己的机制来执行此操作。
+
+例如，使用托管的负载均衡器时，你可以配置负载均衡器发送源自故障区域 _A_ 中的 kubelet 和 Pod 的流量，
+并将该流量仅定向到也位于区域 _A_ 中的控制平面主机。 
+如果单个控制平面主机或端点故障区域 _A_ 脱机，则意味着区域 _A_ 中的节点的所有控制平面流量现在都在区域之间发送。
+在每个区域中运行多个控制平面主机能降低出现这种结果的可能性。
 
 <!--
-When creating a cluster, existing salt scripts:
+### etcd storage
+-->
+### etcd 存储
+
+<!--
+To improve performance of large clusters, you can store Event objects in a separate
+dedicated etcd instance.
+-->
+为了提高大规模集群的性能，你可以将事件对象存储在单独的专用 etcd 实例中。
+
+<!--
+When creating a cluster, you can (using custom tooling):
 
 * start and configure additional etcd instance
-* configure api-server to use it for storing events
+* configure the {{< glossary_tooltip term_id="kube-apiserver" text="API server" >}} to use it for storing events
 -->
-在创建集群时，现有 salt 脚本可以：
+在创建集群时，你可以（使用自定义工具）：
 
-* 启动并配置其它 etcd 实例
-* 配置 API 服务器以使用 etcd 存储事件
-
-<!--
-### Size of master and master components
--->
-### 主控节点大小和主控组件
-
-<!--
-On GCE/Google Kubernetes Engine, and AWS, `kube-up` automatically configures the proper VM size for your master depending on the number of nodes
-in your cluster. On other providers, you will need to configure it manually. For reference, the sizes we use on GCE are
--->
-在 GCE/Google Kubernetes Engine 和 AWS 上，`kube-up` 会根据节点数量自动为您集群中的 master 节点配置适当的虚拟机大小。在其它云供应商的平台上，您将需要手动配置它。作为参考，我们在 GCE 上使用的规格为：
-
-<!--
-* 1-5 nodes: n1-standard-1
-* 6-10 nodes: n1-standard-2
-* 11-100 nodes: n1-standard-4
-* 101-250 nodes: n1-standard-8
-* 251-500 nodes: n1-standard-16
-* more than 500 nodes: n1-standard-32
--->
-* 1-5 个节点：n1-standard-1
-* 6-10 个节点：n1-standard-2
-* 11-100 个节点：n1-standard-4
-* 101-250 个节点：n1-standard-8
-* 251-500 个节点：n1-standard-16
-* 超过 500 节点：n1-standard-32
-
-<!--
-And the sizes we use on AWS are
-
-* 1-5 nodes: m3.medium
-* 6-10 nodes: m3.large
-* 11-100 nodes: m3.xlarge
-* 101-250 nodes: m3.2xlarge
-* 251-500 nodes: c4.4xlarge
-* more than 500 nodes: c4.8xlarge
--->
-在 AWS 上使用的规格为
-
-* 1-5 个节点：m3.medium
-* 6-10 个节点：m3.large
-* 11-100 个节点：m3.xlarge
-* 101-250 个节点：m3.2xlarge
-* 251-500 个节点：c4.4xlarge
-* 超过 500 节点：c4.8xlarge
-
-{{< note >}}
-<!--
-On Google Kubernetes Engine, the size of the master node adjusts automatically based on the size of your cluster. For more information, see [this blog post](https://cloudplatform.googleblog.com/2017/11/Cutting-Cluster-Management-Fees-on-Google-Kubernetes-Engine.html).
--->
-在 Google Kubernetes Engine 上，主控节点的大小会根据集群的大小自动调整。更多有关信息，请参阅 [此博客文章](https://cloudplatform.googleblog.com/2017/11/Cutting-Cluster-Management-Fees-on-Google-Kubernetes-Engine.html)。
-
-<!--
-On AWS, master node sizes are currently set at cluster startup time and do not change, even if you later scale your cluster up or down by manually removing or adding nodes or using a cluster autoscaler.
--->
-在 AWS 上，主控节点的规格是在集群启动时设置的，并且，即使以后通过手动删除或添加节点的方式使集群缩容或扩容，主控节点的大小也不会更改。
-{{< /note >}}
+* 启动并配置额外的 etcd 实例
+* 配置 {{< glossary_tooltip term_id="kube-apiserver" text="API 服务器" >}}，将它用于存储事件
 
 <!--
 ### Addon Resources
@@ -175,90 +138,92 @@ On AWS, master node sizes are currently set at cluster startup time and do not c
 ### 插件资源   {#addon-resources}
 
 <!--
-To prevent memory leaks or other resource issues in [cluster addons](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons) from consuming all the resources available on a node, Kubernetes sets resource limits on addon containers to limit the CPU and Memory resources they can consume (See PR [#10653](http://pr.k8s.io/10653/files) and [#10778](http://pr.k8s.io/10778/files)).
--->
-为了防止内存泄漏或 [集群插件](https://releases.k8s.io/{{<param "githubbranch" >}}/cluster/addons)
-中的其它资源问题导致节点上所有可用资源被消耗，Kubernetes 限制了插件容器可以消耗的 CPU 和内存资源
-（请参阅 PR [#10653](http://pr.k8s.io/10653/files) 和 [#10778](http://pr.k8s.io/10778/files)）。
+Kubernetes [resource limits](/docs/concepts/configuration/manage-resources-containers/)
+help to minimize the impact of memory leaks and other ways that pods and containers can
+impact on other components. These resource limits apply to
+{{< glossary_tooltip text="addon" term_id="addons" >}} resources just as they apply to application workloads.
 
-例如：
+  For example, you can set CPU and memory limits for a logging component:
+-->
+Kubernetes [资源限制](/zh/docs/concepts/configuration/manage-resources-containers/)
+有助于最大程度地减少内存泄漏的影响以及 Pod 和容器可能对其他组件的其他方式的影响。
+这些资源限制适用于{{< glossary_tooltip text="插件" term_id="addons" >}}资源，
+就像它们适用于应用程序工作负载一样。
+
+例如，你可以对日志组件设置 CPU 和内存限制
 
 ```yaml
+  ...
   containers:
   - name: fluentd-cloud-logging
-    image: k8s.gcr.io/fluentd-gcp:1.16
+    image: fluent/fluentd-kubernetes-daemonset:v1
     resources:
       limits:
         cpu: 100m
         memory: 200Mi
 ```
 
-<!--
-Except for Heapster, these limits are static and are based on data we collected from addons running on 4-node clusters (see [#10335](http://issue.k8s.io/10335#issuecomment-117861225)). The addons consume a lot more resources when running on large deployment clusters (see [#5880](http://issue.k8s.io/5880#issuecomment-113984085)). So, if a large cluster is deployed without adjusting these values, the addons may continuously get killed because they keep hitting the limits.
+<!-- 
+Addons' default limits are typically based on data collected from experience running
+each addon on small or medium Kubernetes clusters. When running on large
+clusters, addons often consume more of some resources than their default limits.
+If a large cluster is deployed without adjusting these values, the addon(s)
+may continuously get killed because they keep hitting the memory limit.
+Alternatively, the addon may run but with poor performance due to CPU time
+slice restrictions.
 -->
-除了 Heapster 之外，这些限制都是静态的，并且限制是基于 4 节点集群上运行的插件数据得出的（请参阅 [#10335](http://issue.k8s.io/10335#issuecomment-117861225)）。在大规模集群上运行时，插件会消耗大量资源（请参阅 [#5880](http://issue.k8s.io/5880#issuecomment-113984085)）。因此，如果在不调整这些值的情况下部署了大规模集群，插件容器可能会由于达到限制而不断被杀死。
+插件的默认限制通常基于从中小规模 Kubernetes 集群上运行每个插件的经验收集的数据。
+插件在大规模集群上运行时，某些资源消耗常常比其默认限制更多。
+如果在不调整这些值的情况下部署了大规模集群，则插件可能会不断被杀死，因为它们不断达到内存限制。
+或者，插件可能会运行，但由于 CPU 时间片的限制而导致性能不佳。
 
-<!--
-To avoid running into cluster addon resource issues, when creating a cluster with many nodes, consider the following:
+<!--  
+To avoid running into cluster addon resource issues, when creating a cluster with
+many nodes, consider the following:
+
+* Some addons scale vertically - there is one replica of the addon for the cluster
+  or serving a whole failure zone. For these addons, increase requests and limits
+  as you scale out your cluster.
+* Many addons scale horizontally - you add capacity by running more pods - but with
+  a very large cluster you may also need to raise CPU or memory limits slightly.
+  The VerticalPodAutoscaler can run in _recommender_ mode to provide suggested
+  figures for requests and limits.
+* Some addons run as one copy per node, controlled by a {{< glossary_tooltip text="DaemonSet"
+  term_id="daemonset" >}}: for example, a node-level log aggregator. Similar to
+  the case with horizontally-scaled addons, you may also need to raise CPU or memory
+  limits slightly.
 -->
 为避免遇到集群插件资源问题，在创建大规模集群时，请考虑以下事项：
 
-<!--
-* Scale memory and CPU limits for each of the following addons, if used, as you scale up the size of cluster (there is one replica of each handling the entire cluster so memory and CPU usage tends to grow proportionally with size/load on cluster):
-  * [InfluxDB and Grafana](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/cluster-monitoring/influxdb/influxdb-grafana-controller.yaml)
-  * [kubedns, dnsmasq, and sidecar](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/dns/kube-dns/kube-dns.yaml.in)
-  * [Kibana](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/kibana-deployment.yaml)
-* Scale number of replicas for the following addons, if used, along with the size of cluster (there are multiple replicas of each so increasing replicas should help handle increased load, but, since load per replica also increases slightly, also consider increasing CPU/memory limits):
-  * [elasticsearch](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/es-statefulset.yaml)
-* Increase memory and CPU limits slightly for each of the following addons, if used, along with the size of cluster (there is one replica per node but CPU/memory usage increases slightly along with cluster load/size as well):
-  * [FluentD with ElasticSearch Plugin](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml)
-  * [FluentD with GCP Plugin](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml)
--->
-* 根据集群的规模，如果使用了以下插件，提高其内存和 CPU 上限（每个插件都有一个副本处理整个群集，因此内存和 CPU 使用率往往与集群的规模/负载成比例增长） ：
-  * [InfluxDB 和 Grafana](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/cluster-monitoring/influxdb/influxdb-grafana-controller.yaml)
-  * [kubedns、dnsmasq 和 sidecar](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/dns/kube-dns/kube-dns.yaml.in)
-  * [Kibana](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/kibana-deployment.yaml)
-* 根据集群的规模，如果使用了以下插件，调整其副本数量（每个插件都有多个副本，增加副本数量有助于处理增加的负载，但是，由于每个副本的负载也略有增加，因此也请考虑增加 CPU/内存限制）：
-  * [elasticsearch](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/es-statefulset.yaml)
-* 根据集群的规模，如果使用了以下插件，限制其内存和 CPU 上限（这些插件在每个节点上都有一个副本，但是 CPU/内存使用量也会随集群负载/规模而略有增加）：
-  * [FluentD 和 ElasticSearch 插件](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml)
-  * [FluentD 和 GCP 插件](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml)
+* 部分垂直扩展插件 —— 总有一个插件副本服务于整个集群或服务于整个故障区域。
+  对于这些附加组件，请在扩大集群时加大资源请求和资源限制。
+* 许多水平扩展插件 —— 你可以通过运行更多的 Pod 来增加容量——但是在大规模集群下，
+  可能还需要稍微提高 CPU 或内存限制。
+  VerticalPodAutoscaler 可以在 _recommender_ 模式下运行，
+  以提供有关请求和限制的建议数字。
+* 一些插件在每个节点上运行一个副本，并由 DaemonSet 控制：
+  例如，节点级日志聚合器。与水平扩展插件的情况类似，
+  你可能还需要稍微提高 CPU 或内存限制。
 
-<!--
-Heapster's resource limits are set dynamically based on the initial size of your cluster (see [#16185](http://issue.k8s.io/16185)
-and [#22940](http://issue.k8s.io/22940)). If you find that Heapster is running
-out of resources, you should adjust the formulas that compute heapster memory request (see those PRs for details).
--->
-Heapster 的资源限制与您集群的初始大小有关（请参阅 [#16185](https://issue.k8s.io/16185)
-和 [#22940](http://issue.k8s.io/22940)）。如果您发现 Heapster 资源不足，您应该调整堆内存请求的计算公式（有关详细信息，请参阅相关 PR）。
+<!-- 
+## {{% heading "whatsnext" %}}
 
-<!--
-For directions on how to detect if addon containers are hitting resource limits, see the [Troubleshooting section of Compute Resources](/docs/concepts/configuration/manage-compute-resources-container/#troubleshooting).
--->
-关于如何检测插件容器是否达到资源限制，参见
-[计算资源的故障排除](/zh/docs/concepts/configuration/manage-resources-containers/#troubleshooting) 部分。
+`VerticalPodAutoscaler` is a custom resource that you can deploy into your cluster
+to help you manage resource requests and limits for pods.  
+Visit [Vertical Pod Autoscaler](https://github.com/kubernetes/autoscaler/tree/master/vertical-pod-autoscaler#readme)
+to learn more about `VerticalPodAutoscaler` and how you can use it to scale cluster
+components, including cluster-critical addons.
 
-<!--
-In the [future](http://issue.k8s.io/13048), we anticipate to set all cluster addon resource limits based on cluster size, and to dynamically adjust them if you grow or shrink your cluster.
-We welcome PRs that implement those features.
+The [cluster autoscaler](https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler#readme)
+integrates with a number of cloud providers to help you run the right number of
+nodes for the level of resource demand in your cluster.
 -->
-[未来](https://issue.k8s.io/13048)，我们期望根据集群规模大小来设置所有群集附加资源限制，并在集群扩缩容时动态调整它们。
-我们欢迎您来实现这些功能。
+## {{% heading "whatsnext" %}}
 
-<!--
-### Allowing minor node failure at startup
--->
-### 允许启动时次要节点失败
+`VerticalPodAutoscaler` 是一种自定义资源，你可以将其部署到集群中，帮助你管理资源请求和 Pod 的限制。
+访问 [Vertical Pod Autoscaler](https://github.com/kubernetes/autoscaler/tree/master/vertical-pod-autoscaler#readme)
+以了解有关 `VerticalPodAutoscaler` 的更多信息，
+以及如何使用它来扩展集群组件（包括对集群至关重要的插件）的信息。
 
-<!--
-For various reasons (see [#18969](https://github.com/kubernetes/kubernetes/issues/18969) for more details) running
-`kube-up.sh` with a very large `NUM_NODES` may fail due to a very small number of nodes not coming up properly.
-Currently you have two choices: restart the cluster (`kube-down.sh` and then `kube-up.sh` again), or before
-running `kube-up.sh` set the environment variable `ALLOWED_NOTREADY_NODES` to whatever value you feel comfortable
-with. This will allow `kube-up.sh` to succeed with fewer than `NUM_NODES` coming up. Depending on the
-reason for the failure, those additional nodes may join later or the cluster may remain at a size of
-`NUM_NODES - ALLOWED_NOTREADY_NODES`.
--->
-出于各种原因（更多详细信息，请参见 [#18969](https://github.com/kubernetes/kubernetes/issues/18969)），
-在 `kube-up.sh` 中设置很大的 `NUM_NODES` 时，可能会由于少数节点无法正常启动而失败。
-此时，您有两个选择：重新启动集群（运行 `kube-down.sh`，然后再运行 `kube-up.sh`），或者在运行 `kube-up.sh` 之前将环境变量 `ALLOWED_NOTREADY_NODES` 设置为您认为合适的任何值。采取后者时，即使运行成功的节点数量少于 `NUM_NODES`，`kube-up.sh` 仍可以运行成功。根据失败的原因，这些节点可能会稍后加入集群，又或者群集的大小保持在 `NUM_NODES-ALLOWED_NOTREADY_NODES`。
+[集群自动扩缩器](https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler#readme)
+与许多云供应商集成在一起，帮助你在你的集群中，按照资源需求级别运行正确数量的节点。
\ No newline at end of file

From 94e88298ea35531c8596ffaaa71a5bf49db025c7 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Thu, 29 Apr 2021 15:31:09 +0800
Subject: [PATCH 680/788] [zh] translate concepts/Topology Aware Hints

Update content/zh/docs/concepts/services-networking/topology-aware-hints.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Update content/zh/docs/concepts/services-networking/topology-aware-hints.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Update content/zh/docs/concepts/services-networking/topology-aware-hints.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Update content/zh/docs/concepts/services-networking/topology-aware-hints.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Update content/zh/docs/concepts/services-networking/topology-aware-hints.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Update content/zh/docs/concepts/services-networking/topology-aware-hints.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>

Update content/zh/docs/concepts/services-networking/topology-aware-hints.md

Co-authored-by: Qiming Teng <tengqm@outlook.com>
---
 .../topology-aware-hints.md                   | 285 ++++++++++++++++++
 1 file changed, 285 insertions(+)
 create mode 100644 content/zh/docs/concepts/services-networking/topology-aware-hints.md

diff --git a/content/zh/docs/concepts/services-networking/topology-aware-hints.md b/content/zh/docs/concepts/services-networking/topology-aware-hints.md
new file mode 100644
index 0000000000..63aedfd938
--- /dev/null
+++ b/content/zh/docs/concepts/services-networking/topology-aware-hints.md
@@ -0,0 +1,285 @@
+---
+title: 拓扑感知提示
+content_type: concept
+weight: 45
+---
+<!-- 
+---
+reviewers:
+- robscott
+title: Topology Aware Hints
+content_type: concept
+weight: 45
+---
+-->
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!-- 
+_Topology Aware Hints_ enable topology aware routing by including suggestions
+for how clients should consume endpoints. This approach adds metadata to enable
+consumers of EndpointSlice and / or and Endpoints objects, so that traffic to
+those network endpoints can be routed closer to where it originated.
+
+For example, you can route traffic within a locality to reduce
+costs, or to improve network performance.
+-->
+_拓扑感知提示_ 包含客户怎么使用服务端点的建议，从而实现了拓扑感知的路由功能。
+这种方法添加了元数据，以启用 EndpointSlice 和/或 Endpoints 对象的调用者，
+这样，访问这些网络端点的请求流量就可以在它的发起点附近就近路由。
+
+例如，你可以在一个地域内路由流量，以降低通信成本，或提高网络性能。
+
+<!-- body -->
+
+<!-- 
+## Motivation
+-->
+## 动机 {#motivation}
+
+<!-- 
+Kubernetes clusters are increasingly deployed in multi-zone environments.
+_Topology Aware Hints_ provides a mechanism to help keep traffic within the zone
+it originated from. This concept is commonly referred to as "Topology Aware
+Routing". When calculating the endpoints for a {{< glossary_tooltip term_id="Service" >}},
+the EndpointSlice controller considers the topology (region and zone) of each endpoint
+and populates the hints field to allocate it to a zone.
+Cluster components such as the {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}
+can then consume those hints, and use them to influence how traffic to is routed
+(favoring topologically closer endpoints).
+-->
+Kubernetes 集群越来越多的部署到多区域环境中。
+_拓扑感知提示_ 提供了一种把流量限制在它的发起区域之内的机制。
+这个概念一般被称之为 “拓扑感知路由”。
+在计算 {{< glossary_tooltip term_id="Service" >}} 的端点时，
+EndpointSlice 控制器会评估每一个端点的拓扑（地域和区域），填充提示字段，并将其分配到某个区域。
+集群组件，例如{{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}
+就可以使用这些提示信息，并用他们来影响流量的路由（倾向于拓扑上相邻的端点）。
+
+<!-- 
+## Using Topology Aware Hints
+-->
+## 使用拓扑感知提示 {#using-topology-aware-hints}
+
+<!-- 
+If you have [enabled](/docs/tasks/administer-cluster/enabling-topology-aware-hints) the
+overall feature, you can activate Topology Aware Hints for a Service by setting the
+`service.kubernetes.io/topology-aware-hints` annotation to `auto`. This tells
+the EndpointSlice controller to set topology hints if it is deemed safe.
+Importantly, this does not guarantee that hints will always be set.
+-->
+如果你已经[启用](/zh/docs/tasks/administer-cluster/enabling-topology-aware-hints)了整个特性，
+就可以通过把注解 `service.kubernetes.io/topology-aware-hints` 的值设置为 `auto`，
+来激活服务的拓扑感知提示功能。
+这告诉 EndpointSlice 控制器在它认为安全的时候来设置拓扑提示。
+重要的是，这并不能保证总会设置提示（hints）。
+
+<!-- 
+## How it works {#implementation}
+-->
+## 工作原理 {#implementation}
+
+<!-- 
+The functionality enabling this feature is split into two components: The
+EndpointSlice controller and the kube-proxy. This section provides a high level overview
+of how each component implements this feature.
+-->
+此特性启用的功能分为两个组件：EndpointSlice 控制器和 kube-proxy。
+本节概述每个组件如何实现此特性。
+
+<!-- 
+### EndpointSlice controller {#implementation-control-plane}
+-->
+### EndpointSlice 控制器 {#implementation-control-plane}
+
+<!-- 
+The EndpointSlice controller is responsible for setting hints on EndpointSlices
+when this feature is enabled. The controller allocates a proportional amount of
+endpoints to each zone. This proportion is based on the
+[allocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)
+CPU cores for nodes running in that zone. For example, if one zone had 2 CPU
+cores and another zone only had 1 CPU core, the controller would allocated twice
+as many endpoints to the zone with 2 CPU cores.
+-->
+此特性开启后，EndpointSlice 控制器负责在 EndpointSlice 上设置提示信息。
+控制器按比例给每个区域分配一定比例数量的端点。
+这个比例来源于此区域中运行节点的
+[可分配](/zh/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)
+CPU 核心数。
+例如，如果一个区域拥有 2 CPU 核心，而另一个区域只有 1 CPU 核心，
+那控制器将给那个有 2 CPU 的区域分配两倍数量的端点。
+
+<!-- 
+The following example shows what an EndpointSlice looks like when hints have
+been populated:
+-->
+以下示例展示了提供提示信息后 EndpointSlice 的样子：
+
+```yaml
+apiVersion: discovery.k8s.io/v1
+kind: EndpointSlice
+metadata:
+  name: example-hints
+  labels:
+    kubernetes.io/service-name: example-svc
+addressType: IPv4
+ports:
+  - name: http
+    protocol: TCP
+    port: 80
+endpoints:
+  - addresses:
+      - "10.1.2.3"
+    conditions:
+      ready: true
+    hostname: pod-1
+    zone: zone-a
+    hints:
+      forZones:
+        - name: "zone-a"
+```
+
+### kube-proxy {#implementation-kube-proxy}
+
+<!-- 
+The kube-proxy component filters the endpoints it routes to based on the hints set by
+the EndpointSlice controller. In most cases, this means that the kube-proxy is able
+to route traffic to endpoints in the same zone. Sometimes the controller allocates endpoints
+from a different zone to ensure more even distribution of endpoints between zones.
+This would result in some traffic being routed to other zones.
+-->
+kube-proxy 组件依据 EndpointSlice 控制器设置的提示，过滤由它负责路由的端点。
+在大多数场合，这意味着 kube-proxy 可以把流量路由到同一个区域的端点。
+有时，控制器从某个不同的区域分配端点，以确保在多个区域之间更平均的分配端点。
+这会导致部分流量被路由到其他区域。
+
+<!-- 
+## Safeguards
+-->
+## 保护措施 {#safeguards}
+
+<!-- 
+The Kubernetes control plane and the kube-proxy on each node apply some
+safeguard rules before using Topology Aware Hints. If these don't check out,
+the kube-proxy selects endpoints from anywhere in your cluster, regardless of the
+zone.
+-->
+Kubernetes 控制平面和每个节点上的 kube-proxy，在使用拓扑感知提示功能前，会应用一些保护措施规则。
+如果没有检出，kube-proxy 将无视区域限制，从集群中的任意节点上选择端点。
+
+<!-- 
+1. **Insufficient number of endpoints:** If there are less endpoints than zones
+   in a cluster, the controller will not assign any hints.
+-->
+1. **端点数量不足：** 如果一个集群中，端点数量少于区域数量，控制器不创建任何提示。
+
+<!-- 
+2. **Impossible to achieve balanced allocation:** In some cases, it will be
+   impossible to achieve a balanced allocation of endpoints among zones. For
+   example, if zone-a is twice as large as zone-b, but there are only 2
+   endpoints, an endpoint allocated to zone-a may receive twice as much traffic
+   as zone-b. The controller does not assign hints if it can't get this "expected
+   overload" value below an acceptable threshold for each zone. Importantly this
+   is not based on real-time feedback. It is still possible for individual
+   endpoints to become overloaded.
+-->
+2. **不可能实现均衡分配：** 在一些场合中，不可能实现端点在区域中的平衡分配。
+   例如，假设 zone-a 比 zone-b 大两倍，但只有 2 个端点，
+   那分配到 zone-a 的端点可能收到比 zone-b多两倍的流量。
+   如果控制器不能确定此“期望的过载”值低于每一个区域可接受的阈值，控制器将不指派提示信息。
+   重要的是，这不是基于实时反馈。所以对于单独的端点仍有可能超载。
+
+<!-- 
+3. **One or more Nodes has insufficient information:** If any node does not have
+   a `topology.kubernetes.io/zone` label or is not reporting a value for
+   allocatable CPU, the control plane does not set any topology-aware endpoint
+   hints and so kube-proxy does not filter endpoints by zone.
+-->
+3. **一个或多个节点信息不足：** 如果任一节点没有设置标签 `topology.kubernetes.io/zone`，
+   或没有上报可分配的 CPU 数据，控制平面将不会设置任何拓扑感知提示，
+   继而 kube-proxy 也就不能通过区域过滤端点。
+
+<!-- 
+4. **One or more endpoints does not have a zone hint:** When this happens,
+   the kube-proxy assumes that a transition from or to Topology Aware Hints is
+   underway. Filtering endpoints for a Service in this state would be dangerous
+   so the kube-proxy falls back to using all endpoints.
+-->
+4. **一个或多个端点没有设置区域提示：** 当这类事情发生时，
+   kube-proxy 会假设这是正在执行一个从/到拓扑感知提示的转移。
+   在这种场合下过滤Service 的端点是有风险的，所以 kube-proxy 回撤为使用所有的端点。
+
+<!-- 
+5. **A zone is not represented in hints:** If the kube-proxy is unable to find
+   at least one endpoint with a hint targeting the zone it is running in, it falls
+   to using endpoints from all zones. This is most likely to happen as you add
+   a new zone into your existing cluster.
+-->
+5. **不在提示中的区域：** 如果 kube-proxy 不能根据一个指示在它所在的区域中发现一个端点，
+   它回撤为使用所有节点的端点。当你的集群新增一个新的区域时，这种情况发生概率很高。
+
+<!-- 
+## Constraints
+-->
+## 限制 {#constraints}
+
+<!-- 
+* Topology Aware Hints are not used when either `externalTrafficPolicy` or
+  `internalTrafficPolicy` is set to `Local` on a Service. It is possible to use
+  both features in the same cluster on different Services, just not on the same
+  Service.
+-->
+* 当 Service 的 `externalTrafficPolicy` 或 `internalTrafficPolicy` 设置值为 `Local` 时，
+  拓扑感知提示功能不可用。
+  你可以在一个集群的不同服务中使用这两个特性，但不能在同一个服务中这么做。
+
+<!-- 
+* This approach will not work well for Services that have a large proportion of
+  traffic originating from a subset of zones. Instead this assumes that incoming
+  traffic will be roughly proportional to the capacity of the Nodes in each
+  zone.
+-->
+* 这种方法不适用于大部分流量来自于一部分区域的服务。
+  相反的，这里假设入站流量将根据每个区域中节点的服务能力按比例的分配。
+
+<!-- 
+* The EndpointSlice controller ignores unready nodes as it calculates the
+  proportions of each zone. This could have unintended consequences if a large
+  portion of nodes are unready.
+-->
+* EndpointSlice 控制器在计算每一个区域的容量比例时，会忽略未就绪的节点。
+  在大量节点未就绪的场景下，这样做会带来非预期的结果。
+
+<!-- 
+* The EndpointSlice controller does not take into account {{< glossary_tooltip
+  text="tolerations" term_id="toleration" >}} when deploying calculating the
+  proportions of each zone. If the Pods backing a Service are limited to a
+  subset of Nodes in the cluster, this will not be taken into account.
+-->
+* EndpointSlice 控制器在计算每一个区域的部署比例时，并不会考虑
+  {{< glossary_tooltip text="容忍度" term_id="toleration" >}}。
+  如果服务后台的 Pod 被限制只能运行在集群节点的一个子集上，这些信息并不会被使用。
+
+<!-- 
+* This may not work well with autoscaling. For example, if a lot of traffic is
+  originating from a single zone, only the endpoints allocated to that zone will
+  be handling that traffic. That could result in {{< glossary_tooltip
+  text="Horizontal Pod Autoscaler" term_id="horizontal-pod-autoscaler" >}}
+  either not picking up on this event, or newly added pods starting in a
+  different zone.
+-->
+* 这种方法和自动扩展机制之间不能很好的协同工作。例如，如果大量流量来源于一个区域，
+  那只有分配到该区域的端点才可用来处理流量。这会导致
+  {{< glossary_tooltip text="Pod 自动水平扩展" term_id="horizontal-pod-autoscaler" >}}
+  要么不能拾取此事件，要么新增 Pod 被启动到其他区域。
+
+## {{% heading "whatsnext" %}}
+
+<!-- 
+* Read about [enabling Topology Aware Hints](/docs/tasks/administer-cluster/enabling-topology-aware-hints/)
+* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
+-->
+* 参阅[启用拓扑感知提示](/zh/docs/tasks/administer-cluster/enabling-topology-aware-hints/)
+* 参阅[通过服务连通应用](/zh/docs/concepts/services-networking/connect-applications-service/)

From bd89e378651d925648da1b8c84c9bcf5f16b25d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Daniel=20Fern=C3=A1ndez?= <daferoes@gmail.com>
Date: Thu, 29 Apr 2021 13:33:10 +0200
Subject: [PATCH 681/788] Add missing --type merge in retainkeys examples

---
 .../update-api-object-kubectl-patch.md                    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md b/content/en/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md
index b4d7b11a7e..759eaf76cd 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md
@@ -310,10 +310,10 @@ Patch your Deployment:
 
 {{< tabs name="kubectl_retainkeys_example" >}}
 {{{< tab name="Bash" codelang="bash" >}}
-kubectl patch deployment retainkeys-demo --patch "$(cat patch-file-no-retainkeys.yaml)"
+kubectl patch deployment retainkeys-demo --type merge --patch "$(cat patch-file-no-retainkeys.yaml)"
 {{< /tab >}}
 {{< tab name="PowerShell" codelang="posh" >}}
-kubectl patch deployment retainkeys-demo --patch $(Get-Content patch-file-no-retainkeys.yaml -Raw)
+kubectl patch deployment retainkeys-demo --type merge --patch $(Get-Content patch-file-no-retainkeys.yaml -Raw)
 {{< /tab >}}}
 {{< /tabs >}}
 
@@ -341,10 +341,10 @@ Patch your Deployment again with this new patch:
 
 {{< tabs name="kubectl_retainkeys2_example" >}}
 {{{< tab name="Bash" codelang="bash" >}}
-kubectl patch deployment retainkeys-demo --patch "$(cat patch-file-retainkeys.yaml)"
+kubectl patch deployment retainkeys-demo --type merge --patch "$(cat patch-file-retainkeys.yaml)"
 {{< /tab >}}
 {{< tab name="PowerShell" codelang="posh" >}}
-kubectl patch deployment retainkeys-demo --patch $(Get-Content patch-file-retainkeys.yaml -Raw)
+kubectl patch deployment retainkeys-demo --type merge --patch $(Get-Content patch-file-retainkeys.yaml -Raw)
 {{< /tab >}}}
 {{< /tabs >}}
 

From 9d84de7fe45f2b7ab74a33870ece6e72f5ae6e4d Mon Sep 17 00:00:00 2001
From: prameshj <pavithrar@google.com>
Date: Thu, 29 Apr 2021 15:01:26 -0700
Subject: [PATCH 682/788] Fix sed command for IPVS mode.

Verified that the new sed command generates -        `args: [ "-localip", "169.254.20.10", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream" ]`
---
 content/en/docs/tasks/administer-cluster/nodelocaldns.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/nodelocaldns.md b/content/en/docs/tasks/administer-cluster/nodelocaldns.md
index b0f0596599..33417b00ad 100644
--- a/content/en/docs/tasks/administer-cluster/nodelocaldns.md
+++ b/content/en/docs/tasks/administer-cluster/nodelocaldns.md
@@ -79,7 +79,7 @@ If you are using the sample manifest from the previous point, this will require
   * If kube-proxy is running in IPVS mode:
 
     ``` bash
-     sed -i "s/__PILLAR__LOCAL__DNS__/$localdns/g; s/__PILLAR__DNS__DOMAIN__/$domain/g; s/__PILLAR__DNS__SERVER__//g; s/__PILLAR__CLUSTER__DNS__/$kubedns/g" nodelocaldns.yaml
+     sed -i "s/__PILLAR__LOCAL__DNS__/$localdns/g; s/__PILLAR__DNS__DOMAIN__/$domain/g; s/,__PILLAR__DNS__SERVER__//g; s/__PILLAR__CLUSTER__DNS__/$kubedns/g" nodelocaldns.yaml
     ```
      In this mode, node-local-dns pods listen only on `<node-local-address>`. The node-local-dns interface cannot bind the kube-dns cluster IP since the interface used for IPVS loadbalancing already uses this address.
      `__PILLAR__UPSTREAM__SERVERS__` will be populated by the node-local-dns pods.

From 4657f11dbf87e720b4f22627b2a1fa2de649ebba Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Tue, 27 Apr 2021 17:43:20 +0800
Subject: [PATCH 683/788] [zh] Resync concepts section (3)

---
 .../concepts/storage/ephemeral-volumes.md     | 35 +++++----
 .../docs/concepts/storage/storage-capacity.md | 66 +++--------------
 .../docs/concepts/storage/storage-classes.md  | 73 +++++++++++--------
 .../concepts/storage/volume-pvc-datasource.md | 27 ++++---
 content/zh/docs/concepts/storage/volumes.md   | 72 +++++++++++-------
 5 files changed, 133 insertions(+), 140 deletions(-)

diff --git a/content/zh/docs/concepts/storage/ephemeral-volumes.md b/content/zh/docs/concepts/storage/ephemeral-volumes.md
index c5195ac56d..7dee7ecab5 100644
--- a/content/zh/docs/concepts/storage/ephemeral-volumes.md
+++ b/content/zh/docs/concepts/storage/ephemeral-volumes.md
@@ -248,13 +248,17 @@ features:
 
 Example:
 -->
-通用临时卷与 `emptyDir` 卷类似，因为它们为暂存数据提供了一个 per-pod 的目录，该目录通常在置备后为空。
-但他们可能还会有其他特征：
+通用临时卷类似于 `emptyDir` 卷，因为它为每个 Pod 提供临时数据存放目录，
+在最初制备完毕时一般为空。不过通用临时卷也有一些额外的功能特性：
 
 - 存储可以是本地的，也可以是网络连接的。
 - 卷可以有固定的大小，pod不能超量使用。
 - 卷可能有一些初始数据，这取决于驱动程序和参数。
-- 当驱动程序支持，卷上的典型操作将被支持，包括（[快照](/zh/docs/concepts/storage/volume-snapshots/)、[克隆](/zh/docs/concepts/storage/volume-pvc-datasource/)、[调整大小](/zh/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims)和[存储容量跟踪](/zh/docs/concepts/storage/storage-capacity/)）。
+- 当驱动程序支持，卷上的典型操作将被支持，包括
+  （[快照](/zh/docs/concepts/storage/volume-snapshots/)、
+  [克隆](/zh/docs/concepts/storage/volume-pvc-datasource/)、
+  [调整大小](/zh/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims)和
+  [存储容量跟踪](/zh/docs/concepts/storage/storage-capacity/)）。
 
 示例：
 
@@ -375,8 +379,8 @@ Pods (a Pod "pod-a" with volume "scratch" and another Pod with name
 -->
 这种确定性命名方式也引入了潜在的冲突，
 比如在不同的 Pod 之间（名为 “Pod-a” 的 Pod 挂载名为 "scratch" 的卷，
-名为 "pod" 的 Pod 挂载名为 “a-scratch” 的卷，这两者均会生成名为 "pod-a-scratch" 的PVC），
-或者在 Pod 和手工创建的 PVC 之间。
+和名为 "pod" 的 Pod 挂载名为 “a-scratch” 的卷，这两者均会生成名为
+"pod-a-scratch" 的PVC），或者在 Pod 和手工创建的 PVC 之间。
 
 <!--
 Such conflicts are detected: a PVC is only used for an ephemeral
@@ -412,7 +416,8 @@ two choices:
 启用 GenericEphemeralVolume 特性会导致那些没有 PVCs 创建权限的用户，
 在创建 Pods 时，被允许间接的创建 PVCs。
 集群管理员必须意识到这一点。
-如果这不符合他们的安全模型，他们有两种选择：
+如果这不符合他们的安全模型，他们有如下选择：
+
 <!--
 - Explicitly disable the feature through the feature gate.
 - Use a [Pod Security
@@ -424,19 +429,19 @@ two choices:
   volume.
 -->
 - 通过特性门控显式禁用该特性。
-- 当`卷`列表不包含 `ephemeral` 卷类型时，使用
-  [Pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/)
-  （在 Kubernetes 1.21 中已弃用）。
-- 使用[准入 Webhook](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/)
-  拒绝像 Pod 这样具有通用临时卷。
+- 当 `volumes` 列表不包含 `ephemeral` 卷类型时，使用
+  [Pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/)。
+  （这一方式在 Kubernetes 1.21 版本已经弃用）
+- 使用一个[准入 Webhook](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/)
+  拒绝包含通用临时卷的 Pods。
 
 <!--
 The normal [namespace quota for PVCs](/docs/concepts/policy/resource-quotas/#storage-resource-quota) still applies, so
 even if users are allowed to use this new mechanism, they cannot use
 it to circumvent other policies.
 -->
-在一个命名空间中，用于 PVCs 的常规命名空间配额[用于 PVCs 的常规命名空间配额](/zh/docs/concepts/policy/resource-quotas/#storage-resource-quota)仍然适用，
-因此即使允许用户使用这种新机制，他们也不能使用它来规避其他策略。
+[为 PVC 卷所设置的逐名字空间的配额](/zh/docs/concepts/policy/resource-quotas/#storage-resource-quota)
+仍然有效，因此即使允许用户使用这种新机制，他们也不能使用它来规避其他策略。
 
 ## {{% heading "whatsnext" %}}
 
@@ -474,5 +479,5 @@ See [local ephemeral storage](/docs/concepts/configuration/manage-resources-cont
 
 - 有关设计的更多信息，参阅
   [Generic ephemeral inline volumes KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/1698-generic-ephemeral-volumes/README.md)。
-- 本特性下一步开发的更多信息，参阅
-  [enhancement tracking issue #1698](https://github.com/kubernetes/enhancements/issues/1698).
+- 关于本特性下一步开发的更多信息，参阅
+  [enhancement tracking issue #1698](https://github.com/kubernetes/enhancements/issues/1698)。
diff --git a/content/zh/docs/concepts/storage/storage-capacity.md b/content/zh/docs/concepts/storage/storage-capacity.md
index b22847c24b..edb448babd 100644
--- a/content/zh/docs/concepts/storage/storage-capacity.md
+++ b/content/zh/docs/concepts/storage/storage-capacity.md
@@ -11,6 +11,7 @@ which a pod runs: network-attached storage might not be accessible by
 all nodes, or storage is local to a node to begin with.
 
 {{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 This page describes how Kubernetes keeps track of storage capacity and
 how the scheduler uses that information to schedule Pods onto nodes
@@ -27,6 +28,7 @@ text="Container Storage Interface" term_id="csi" >}} (CSI) drivers and
 网络存储可能并非所有节点都能够访问，或者对于某个节点存储是本地的。
 
 {{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 本页面描述了 Kubernetes 如何跟踪存储容量以及调度程序如何为了余下的尚未挂载的卷使用该信息将
 Pod 调度到能够访问到足够存储容量的节点上。
@@ -156,64 +158,16 @@ to handle this automatically.
 <!--
 ## Enabling storage capacity tracking
 
-Storage capacity tracking is an *alpha feature* and only enabled when
-the `CSIStorageCapacity` [feature
-gate](/docs/reference/command-line-tools-reference/feature-gates/) and
-the `storage.k8s.io/v1alpha1` {{< glossary_tooltip text="API group" term_id="api-group" >}} are enabled. For details on
-that, see the `--feature-gates` and `--runtime-config` [kube-apiserver
-parameters](/docs/reference/command-line-tools-reference/kube-apiserver/).
+Storage capacity tracking is a beta feature and enabled by default in 
+a Kubernetes cluster since Kubernetes 1.21. In addition to having the
+feature enabled in the cluster, a CSI driver also has to support
+it. Please refer to the driver's documentation for details.
 -->
 ## 开启存储容量跟踪
 
-存储容量跟踪是一个 *alpha 特性*，只有当 `CSIStorageCapacity`
-[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
-和 `storage.k8s.io/v1alpha1` {{< glossary_tooltip text="API 组" term_id="api-group" >}}启用时才能启用。
-更多详细信息，可以查看`--feature-gates` 和 `--runtime-config`
-[kube-apiserver 参数](/zh/docs/reference/command-line-tools-reference/kube-apiserver/)。
-
-<!--
-A quick check
-whether a Kubernetes cluster supports the feature is to list
-CSIStorageCapacity objects with:
-```shell
-kubectl get csistoragecapacities --all-namespaces
-```
-
-If your cluster supports CSIStorageCapacity, the response is either a list of CSIStorageCapacity objects or:
-```
-No resources found
-```
--->
-快速检查 Kubernetes 集群是否支持这个特性，可以通过下面命令列出 CSIStorageCapacity 对象：
-
-```shell
-kubectl get csistoragecapacities --all-namespaces
-```
-
-如果集群支持 CSIStorageCapacity，就会返回 CSIStorageCapacity 的对象列表或者：
-```
-No resources found
-```
-
-<!--
-If not supported, this error is printed instead:
-```
-error: the server doesn't have a resource type "csistoragecapacities"
-```
-
-In addition to enabling the feature in the cluster, a CSI
-driver also has to
-support it. Please refer to the driver's documentation for
-details.
--->
-如果不支持，下面这个错误就会被打印出来：
-
-```
-error: the server doesn't have a resource type "csistoragecapacities"
-```
-
-除了在集群中启用该功能外，CSI 驱动程序还必须支持它。有关详细信息，请参阅驱动程序的文档。
-
+存储容量跟踪是一个 Beta 特性，从 Kubernetes 1.21 版本起在 Kubernetes 集群
+中默认被启用。除了在集群中启用此功能特性之外，还要求 CSI 驱动支持此特性。
+请参阅驱动的文档了解详细信息。
 
 ## {{% heading "whatsnext" %}}
 
@@ -225,6 +179,6 @@ error: the server doesn't have a resource type "csistoragecapacities"
 -->
 - 想要获得更多该设计的信息，查看
   [Storage Capacity Constraints for Pod Scheduling KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/1472-storage-capacity-tracking/README.md)。
-- 有关此功能的进一步开发信息，查看
+- 有关此功能的下一步开发信息，查看
   [enhancement tracking issue #1472](https://github.com/kubernetes/enhancements/issues/1472)。
 - 学习 [Kubernetes 调度器](/zh/docs/concepts/scheduling-eviction/kube-scheduler/)。
diff --git a/content/zh/docs/concepts/storage/storage-classes.md b/content/zh/docs/concepts/storage/storage-classes.md
index 57b58006b3..24d38d14a5 100644
--- a/content/zh/docs/concepts/storage/storage-classes.md
+++ b/content/zh/docs/concepts/storage/storage-classes.md
@@ -5,6 +5,11 @@ weight: 30
 ---
 
 <!--
+reviewers:
+- jsafrane
+- saad-ali
+- thockin
+- msau42
 title: Storage Classes
 content_type: concept
 weight: 30
@@ -17,8 +22,9 @@ This document describes the concept of a StorageClass in Kubernetes. Familiarity
 with [volumes](/docs/concepts/storage/volumes/) and
 [persistent volumes](/docs/concepts/storage/persistent-volumes) is suggested.
 -->
-本文描述了 Kubernetes 中 StorageClass 的概念。建议先熟悉 [卷](/zh/docs/concepts/storage/volumes/) 和
-[持久卷](/zh/docs/concepts/storage/persistent-volumes) 的概念。
+本文描述了 Kubernetes 中 StorageClass 的概念。建议先熟悉
+[卷](/zh/docs/concepts/storage/volumes/)和
+[持久卷](/zh/docs/concepts/storage/persistent-volumes)的概念。
 
 <!-- body -->
 
@@ -45,7 +51,7 @@ Each StorageClass contains the fields `provisioner`, `parameters`, and
 `reclaimPolicy`, which are used when a PersistentVolume belonging to the
 class needs to be dynamically provisioned.
 
- -->
+-->
 ## StorageClass 资源
 
 每个 StorageClass 都包含 `provisioner`、`parameters` 和 `reclaimPolicy` 字段，
@@ -61,12 +67,12 @@ StorageClass 对象的命名很重要，用户使用这个命名来请求生成
 当创建 StorageClass 对象时，管理员设置 StorageClass 对象的命名和其他参数，一旦创建了对象就不能再对其更新。
 
 <!--
-Administrators can specify a default StorageClass just for PVCs that don't
+Administrators can specify a default StorageClass only for PVCs that don't
 request any particular class to bind to: see the
 [PersistentVolumeClaim section](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)
 for details.
  -->
-管理员可以为没有申请绑定到特定 StorageClass 的 PVC 指定一个默认的存储类 ：
+管理员可以为没有申请绑定到特定 StorageClass 的 PVC 指定一个默认的存储类：
 更多详情请参阅
 [PersistentVolumeClaim 章节](/zh/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)。
 
@@ -928,20 +934,19 @@ parameters:
   `"http(s)://api-server:7860"`
 * `registry`: Quobyte registry to use to mount the volume. You can specify the
   registry as ``<host>:<port>`` pair or if you want to specify multiple
-  registries you just have to put a comma between them e.q.
+  registries, put a comma between them.
   ``<host1>:<port>,<host2>:<port>,<host3>:<port>``.
   The host can be an IP address or if you have a working DNS you can also
   provide the DNS names.
 * `adminSecretNamespace`: The namespace for `adminSecretName`.
   Default is "default".
 -->
-* `quobyteAPIServer`：Quobyte API 服务器的格式是
-  `"http(s)://api-server:7860"`
-* `registry`：用于挂载卷的 Quobyte registry。你可以指定 registry 为 ``<host>:<port>``
-  或者如果你想指定多个 registry，你只需要在他们之间添加逗号，例如
-  ``<host1>:<port>,<host2>:<port>,<host3>:<port>``。
+* `quobyteAPIServer`：Quobyte API 服务器的格式是 `"http(s)://api-server:7860"`
+* `registry`：用于挂载卷的 Quobyte 仓库。你可以指定仓库为 `<host>:<port>`
+  或者如果你想指定多个 registry，在它们之间添加逗号，例如
+  `<host1>:<port>,<host2>:<port>,<host3>:<port>`。
   主机可以是一个 IP 地址，或者如果你有正在运行的 DNS，你也可以提供 DNS 名称。
-* `adminSecretNamespace`：`adminSecretName`的 namespace。
+* `adminSecretNamespace`：`adminSecretName` 的名字空间。
   默认值是 "default"。
 
 <!--
@@ -957,15 +962,16 @@ parameters:
     ```
 -->
 
-* `adminSecretName`：保存关于 Quobyte 用户和密码的 secret，用于对 API 服务器进行身份验证。
-  提供的 secret 必须有值为 "kubernetes.io/quobyte" 的 type 参数 和 `user` 与 `password` 的键值，
+* `adminSecretName`：保存关于 Quobyte 用户和密码的 Secret，用于对 API 服务器进行身份验证。
+  提供的 secret 必须有值为 "kubernetes.io/quobyte" 的 type 参数和 `user`
+  与 `password` 的键值，
   例如以这种方式创建：
 
-    ```shell
-    kubectl create secret generic quobyte-admin-secret \
-      --type="kubernetes.io/quobyte" --from-literal=key='opensesame' \
-      --namespace=kube-system
-    ```
+  ```shell
+  kubectl create secret generic quobyte-admin-secret \
+    --type="kubernetes.io/quobyte" --from-literal=key='opensesame' \
+    --namespace=kube-system
+  ```
 <!--
 * `user`: maps all access to this user. Default is "root".
 * `group`: maps all access to this group. Default is "nfsnobody".
@@ -978,10 +984,10 @@ parameters:
 -->
 * `user`：对这个用户映射的所有访问权限。默认是 "root"。
 * `group`：对这个组映射的所有访问权限。默认是 "nfsnobody"。
-* `quobyteConfig`：使用指定的配置来创建卷。你可以创建一个新的配置，或者，可以修改 Web console 或
-  quobyte CLI 中现有的配置。默认是 "BASE"。
-* `quobyteTenant`：使用指定的租户 ID 创建/删除卷。这个 Quobyte 租户必须已经于 Quobyte。
-  默认是 "DEFAULT"。
+* `quobyteConfig`：使用指定的配置来创建卷。你可以创建一个新的配置，
+  或者，可以修改 Web 控制台或 quobyte CLI 中现有的配置。默认是 "BASE"。
+* `quobyteTenant`：使用指定的租户 ID 创建/删除卷。这个 Quobyte 租户必须
+  已经于 Quobyte 中存在。默认是 "DEFAULT"。
 
 <!--
 ### Azure Disk
@@ -1015,7 +1021,9 @@ parameters:
 -->
 * `skuName`：Azure 存储帐户 Sku 层。默认为空。
 * `location`：Azure 存储帐户位置。默认为空。
-* `storageAccount`：Azure 存储帐户名称。如果提供存储帐户，它必须位于与集群相同的资源组中，并且 `location` 是被忽略的。如果未提供存储帐户，则会在与群集相同的资源组中创建新的存储帐户。
+* `storageAccount`：Azure 存储帐户名称。
+  如果提供存储帐户，它必须位于与集群相同的资源组中，并且 `location`
+  是被忽略的。如果未提供存储帐户，则会在与群集相同的资源组中创建新的存储帐户。
 
 <!--
 #### Azure Disk Storage Class (starting from v1.7.2) {#azure-disk-storage-class}
@@ -1058,7 +1066,8 @@ parameters:
 - Managed VM can only attach managed disks and unmanaged VM can only attach
   unmanaged disks.
 -->
-- Premium VM 可以同时添加 Standard_LRS 和 Premium_LRS 磁盘，而 Standard 虚拟机只能添加 Standard_LRS 磁盘。
+- Premium VM 可以同时添加 Standard_LRS 和 Premium_LRS 磁盘，而 Standard
+  虚拟机只能添加 Standard_LRS 磁盘。
 - 托管虚拟机只能连接托管磁盘，非托管虚拟机只能连接非托管磁盘。
 
 <!--
@@ -1097,11 +1106,15 @@ parameters:
 * `skuName`：Azure 存储帐户 Sku 层。默认为空。
 * `location`：Azure 存储帐户位置。默认为空。
 * `storageAccount`：Azure 存储帐户名称。默认为空。
-  如果不提供存储帐户，会搜索所有与资源相关的存储帐户，以找到一个匹配 `skuName` 和 `location` 的账号。
+  如果不提供存储帐户，会搜索所有与资源相关的存储帐户，以找到一个匹配
+  `skuName` 和 `location` 的账号。
   如果提供存储帐户，它必须存在于与集群相同的资源组中，`skuName` 和 `location` 会被忽略。
-* `secretNamespace`：包含 Azure 存储帐户名称和密钥的密钥的名称空间。 默认值与 Pod 相同。
-* `secretName`：包含 Azure 存储帐户名称和密钥的密钥的名称。 默认值为 `azure-storage-account-<accountName>-secret`
-* `readOnly`：指示是否将存储安装为只读的标志。默认为 false，表示 读/写 挂载。 该设置也会影响VolumeMounts中的 `ReadOnly` 设置。
+* `secretNamespace`：包含 Azure 存储帐户名称和密钥的密钥的名称空间。
+  默认值与 Pod 相同。
+* `secretName`：包含 Azure 存储帐户名称和密钥的密钥的名称。
+  默认值为 `azure-storage-account-<accountName>-secret`
+* `readOnly`：指示是否将存储安装为只读的标志。默认为 false，表示"读/写"挂载。
+  该设置也会影响VolumeMounts中的 `ReadOnly` 设置。
 
 <!--
 During storage provisioning, a secret named by `secretName` is created for the
@@ -1305,7 +1318,7 @@ kubectl create secret generic storageos-secret \
 -->
 StorageOS Kubernetes 卷插件可以使 Secret 对象来指定用于访问 StorageOS API 的端点和凭据。
 只有当默认值已被更改时，这才是必须的。
-secret 必须使用 `kubernetes.io/storageos` 类型创建，如以下命令：
+Secret 必须使用 `kubernetes.io/storageos` 类型创建，如以下命令：
 
 ```shell
 kubectl create secret generic storageos-secret \
diff --git a/content/zh/docs/concepts/storage/volume-pvc-datasource.md b/content/zh/docs/concepts/storage/volume-pvc-datasource.md
index 96838d402e..00571f1511 100644
--- a/content/zh/docs/concepts/storage/volume-pvc-datasource.md
+++ b/content/zh/docs/concepts/storage/volume-pvc-datasource.md
@@ -5,6 +5,11 @@ weight: 30
 ---
 
 <!--
+reviewers:
+- jsafrane
+- saad-ali
+- thockin
+- msau42
 title: CSI Volume Cloning
 content_type: concept
 weight: 30
@@ -15,7 +20,8 @@ weight: 30
 <!--
 This document describes the concept of cloning existing CSI Volumes in Kubernetes.  Familiarity with [Volumes](/docs/concepts/storage/volumes) is suggested.
 -->
-本文档介绍 Kubernetes 中克隆现有 CSI 卷的概念。阅读前建议先熟悉[卷](/zh/docs/concepts/storage/volumes)。
+本文档介绍 Kubernetes 中克隆现有 CSI 卷的概念。阅读前建议先熟悉
+[卷](/zh/docs/concepts/storage/volumes)。
 
 <!-- body -->
 
@@ -24,7 +30,6 @@ This document describes the concept of cloning existing CSI Volumes in Kubernete
 
 The {{< glossary_tooltip text="CSI" term_id="csi" >}} Volume Cloning feature adds support for specifying existing {{< glossary_tooltip text="PVC" term_id="persistent-volume-claim" >}}s in the `dataSource` field to indicate a user would like to clone a {{< glossary_tooltip term_id="volume" >}}.
 -->
-
 ## 介绍
 
 {{< glossary_tooltip text="CSI" term_id="csi" >}} 卷克隆功能增加了通过在
@@ -35,16 +40,14 @@ The {{< glossary_tooltip text="CSI" term_id="csi" >}} Volume Cloning feature add
 <!--
 A Clone is defined as a duplicate of an existing Kubernetes Volume that can be consumed as any standard Volume would be.  The only difference is that upon provisioning, rather than creating a "new" empty Volume, the back end device creates an exact duplicate of the specified Volume.
 -->
-
-克隆，意思是为已有的 Kubernetes 卷创建副本，它可以像任何其它标准卷一样被使用。
+克隆（Clone），意思是为已有的 Kubernetes 卷创建副本，它可以像任何其它标准卷一样被使用。
 唯一的区别就是配置后，后端设备将创建指定完全相同的副本，而不是创建一个“新的”空卷。
 
 <!--
-The implementation of cloning, from the perspective of the Kubernetes API, simply adds the ability to specify an existing PVC as a dataSource during new PVC creation. The source PVC must be bound and available (not in use).
+The implementation of cloning, from the perspective of the Kubernetes API, adds the ability to specify an existing PVC as a dataSource during new PVC creation. The source PVC must be bound and available (not in use).
 
 Users need to be aware of the following when using this feature:
 -->
-
 从 Kubernetes API 的角度看，克隆的实现只是在创建新的 PVC 时，
 增加了指定一个现有 PVC 作为数据源的能力。源 PVC 必须是 bound
 状态且可用的（不在使用中）。
@@ -61,7 +64,6 @@ Users need to be aware of the following when using this feature:
     - Default storage class can be used and storageClassName omitted in the spec
 * Cloning can only be performed between two volumes that use the same VolumeMode setting (if you request a block mode volume, the source MUST also be block mode)
 -->
-
 * 克隆支持（`VolumePVCDataSource`）仅适用于 CSI 驱动。
 * 克隆支持仅适用于 动态供应器。
 * CSI 驱动可能实现，也可能未实现卷克隆功能。
@@ -75,9 +77,9 @@ Users need to be aware of the following when using this feature:
 <!--
 ## Provisioning
 
-Clones are provisioned just like any other PVC with the exception of adding a dataSource that references an existing PVC in the same namespace.
+Clones are provisioned like any other PVC with the exception of adding a dataSource that references an existing PVC in the same namespace.
 -->
-## 供应
+## 制备
 
 克隆卷与其他任何 PVC 一样配置，除了需要增加 dataSource 来引用同一命名空间中现有的 PVC。
 
@@ -99,19 +101,17 @@ spec:
     name: pvc-1
 ```
 
+{{< note >}}
 <!--
 You must specify a capacity value for `spec.resources.requests.storage`, 
 and the value you specify must be the same or larger than the capacity of the source volume.
 -->
-
-{{< note >}}
 你必须为 `spec.resources.requests.storage` 指定一个值，并且你指定的值必须大于或等于源卷的值。
 {{< /note >}}
 
 <!--
 The result is a new PVC with the name `clone-of-pvc-1` that has the exact same content as the specified source `pvc-1`.
 -->
-
 结果是一个名称为 `clone-of-pvc-1` 的新 PVC 与指定的源 `pvc-1` 拥有相同的内容。
 
 <!--
@@ -119,8 +119,7 @@ The result is a new PVC with the name `clone-of-pvc-1` that has the exact same c
 
 Upon availability of the new PVC, the cloned PVC is consumed the same as other PVC.  It's also expected at this point that the newly created PVC is an independent object.  It can be consumed, cloned, snapshotted, or deleted independently and without consideration for it's original dataSource PVC.  This also implies that the source is not linked in any way to the newly created clone, it may also be modified or deleted without affecting the newly created clone.
 -->
-
-## 用法
+## 使用
 
 一旦新的 PVC 可用，被克隆的 PVC 像其他 PVC 一样被使用。
 可以预期的是，新创建的 PVC 是一个独立的对象。
diff --git a/content/zh/docs/concepts/storage/volumes.md b/content/zh/docs/concepts/storage/volumes.md
index cd2c09bcb2..81e4ebf738 100644
--- a/content/zh/docs/concepts/storage/volumes.md
+++ b/content/zh/docs/concepts/storage/volumes.md
@@ -5,6 +5,11 @@ weight: 10
 ---
 
 <!--
+reviewers:
+- jsafrane
+- saad-ali
+- thockin
+- msau42
 title: Volumes
 content_type: concept
 weight: 10
@@ -54,24 +59,23 @@ Docker 提供卷驱动程序，但是其功能非常有限。
 Kubernetes supports many types of volumes. A {{< glossary_tooltip term_id="pod" text="Pod" >}}
 can use any number of volume types simultaneously.
 Ephemeral volume types have a lifetime of a pod, but persistent volumes exist beyond
-the lifetime of a pod. Consequently, a volume outlives any containers
-that run within the pod, and data is preserved across container restarts. When a
-pod ceases to exist, Kubernetes destroys ephemeral volumes; however, Kubernetes does not
-destroy persistent volumes.
+the lifetime of a pod. When a pod ceases to exist, Kubernetes destroys ephemeral volumes; 
+however, Kubernetes does not destroy persistent volumes. 
+For any kind of volume in a given pod, data is preserved across container restarts.
 -->
 Kubernetes 支持很多类型的卷。
 {{< glossary_tooltip term_id="pod" text="Pod" >}} 可以同时使用任意数目的卷类型。
 临时卷类型的生命周期与 Pod 相同，但持久卷可以比 Pod 的存活期长。
-因此，卷的存在时间会超出 Pod 中运行的所有容器，并且在容器重新启动时数据也会得到保留。
-当 Pod 不再存在时，临时卷也将不再存在。但是持久卷会继续存在。
+当 Pod 不再存在时，Kubernetes 也会销毁临时卷；不过 Kubernetes 不会销毁
+持久卷。对于给定 Pod 中任何类型的卷，在容器重启期间数据都不会丢失。
 
 <!--
 At its core, a volume is just a directory, possibly with some data in it, which
-is accessible to the Containers in a Pod.  How that directory comes to be, the
+is accessible to the containers in a pod. How that directory comes to be, the
 medium that backs it, and the contents of it are determined by the particular
 volume type used.
 -->
-卷的核心是包含一些数据的一个目录，Pod 中的容器可以访问该目录。
+卷的核心是一个目录，其中可能存有数据，Pod 中的容器可以访问该目录中的数据。
 所采用的特定的卷类型将决定该目录如何形成的、使用何种介质保存数据以及目录中存放
 的内容。
 
@@ -269,9 +273,9 @@ For more details, see the [`azureFile` volume plugin](https://github.com/kuberne
 <!--
 #### azureFile CSI migration
 -->
-#### CSI 迁移  {#azurefile-csi-migration}
+#### azureFile CSI 迁移  {#azurefile-csi-migration}
 
-{{< feature-state for_k8s_version="v1.15" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 <!--
 The CSI Migration feature for azureFile, when enabled, redirects all plugin operations
@@ -279,12 +283,20 @@ from the existing in-tree plugin to the `file.csi.azure.com` Container
 Storage Interface (CSI) Driver. In order to use this feature, the [Azure File CSI
 Driver](https://github.com/kubernetes-sigs/azurefile-csi-driver)
 must be installed on the cluster and the `CSIMigration` and `CSIMigrationAzureFile`
-Alpha features must be enabled.
+[feature gates](/docs/reference/command-line-tools-reference/feature-gates/) must be enabled.
 -->
 启用 `azureFile` 的 `CSIMigration` 功能后，所有插件操作将从现有的树内插件重定向到
-`file.csi.azure.com` 容器存储接口（CSI）驱动程序。
-要使用此功能，必须在集群中安装 [Azure 文件 CSI 驱动程序](https://github.com/kubernetes-sigs/azurefile-csi-driver)，
-并且 `CSIMigration` 和 `CSIMigrationAzureFile` Alpha 功能特性必须被启用。
+`file.csi.azure.com` 容器存储接口（CSI）驱动程序。要使用此功能，必须在集群中安装
+[Azure 文件 CSI 驱动程序](https://github.com/kubernetes-sigs/azurefile-csi-driver)，
+并且 `CSIMigration` 和 `CSIMigrationAzureFile`
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
+必须被启用。
+
+<!--
+Azure File CSI driver does not support using same volume with different fsgroups, if Azurefile CSI migration is enabled, using same volume with different fsgroups won't be supported at all.
+-->
+Azure 文件 CSI 驱动尚不支持为同一卷设置不同的 fsgroup。
+如果 AzureFile CSI 迁移被启用，用不同的 fsgroup 来使用同一卷也是不被支持的。
 
 ### cephfs {#cephfs}
 
@@ -356,20 +368,29 @@ spec:
 -->
 #### OpenStack CSI 迁移
 
-{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
 <!--
-The `CSIMigration` feature for Cinder, when enabled, redirects all plugin operations
-from the existing in-tree plugin to the `cinder.csi.openstack.org` Container
-Storage Interface (CSI) Driver. In order to use this feature, the [OpenStack Cinder CSI
-Driver](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)
-must be installed on the cluster and the `CSIMigration` and `CSIMigrationOpenStack`
-beta features must be enabled.
+The `CSIMigration` feature for Cinder is enabled by default in Kubernetes 1.21.
+It redirects all plugin operations from the existing in-tree plugin to the
+`cinder.csi.openstack.org` Container Storage Interface (CSI) Driver.
+[OpenStack Cinder CSI Driver](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)
+must be installed on the cluster.
+You can disable Cinder CSI migration for your cluster by setting the `CSIMigrationOpenStack` 
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to `false`.
+If you disable the `CSIMigrationOpenStack` feature, the in-tree Cinder volume plugin takes responsibility
+for all aspects of Cinder volume storage management.
 -->
-启用 Cinder 的 `CSIMigration` 功能后，所有插件操作会从现有的树内插件重定向到
+Cinder 的 `CSIMigration` 功能在 Kubernetes 1.21 版本中是默认被启用的。
+此特性会将插件的所有操作从现有的树内插件重定向到
 `cinder.csi.openstack.org` 容器存储接口（CSI）驱动程序。
-为了使用此功能，必须在集群中安装 [OpenStack Cinder CSI 驱动程序](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)，
-并且 `CSIMigration` 和 `CSIMigrationOpenStack` Beta 功能必须被启用。
+为了使用此功能，必须在集群中安装
+[OpenStack Cinder CSI 驱动程序](https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/cinder-csi-plugin/using-cinder-csi-plugin.md)，
+你可以通过设置 `CSIMigrationOpenStack`
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
+为 `false` 来禁止 Cinder CSI 迁移。
+如果你禁用了 `CSIMigrationOpenStack` 功能特性，则树内的 Cinder 卷插件
+会负责 Cinder 卷存储管理的方方面面。
 
 ### configMap
 
@@ -1516,7 +1537,8 @@ RBD 的一个特性是它可以同时被多个用户以只读方式挂载。
 这意味着你可以用数据集预先填充卷，然后根据需要在尽可能多的 Pod 中并行地使用卷。
 不幸的是，RBD 卷只能由单个使用者以读写模式安装。不允许同时写入。
 
-更多详情请参考 [RBD 示例](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/volumes/rbd)。
+更多详情请参考
+[RBD 示例](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/volumes/rbd)。
 
 <!--
 ### scaleIO (deprecated) {#scaleio}

From 11f1b6b8e965043bb38bef0e63e592a0b2def428 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Fri, 30 Apr 2021 10:40:27 +0800
Subject: [PATCH 684/788] Update component reference

This PR updates the component reference generated for 1.21. A bug was
found where the upstream source code is now applying a normalization
function to all flags.

This PR also removes the dangling kubelet-config API file.
---
 .../kube-apiserver.md                         |   66 +-
 .../kube-controller-manager.md                |   80 +-
 .../kube-proxy.md                             |  133 ++
 .../kube-scheduler.md                         |   66 +-
 .../kubelet-config.v1beta1.md                 | 1501 -----------------
 5 files changed, 239 insertions(+), 1607 deletions(-)
 delete mode 100644 content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md

diff --git a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
index 77fe552879..c502c77d16 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-apiserver.md
@@ -40,7 +40,7 @@ kube-apiserver [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--add_dir_header</td>
+<td colspan="2">--add-dir-header</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
@@ -732,6 +732,34 @@ kube-apiserver [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>This option represents the maximum amount of time it should take for apiserver to complete its startup sequence and become live. From apiserver's start time to when this amount of time has elapsed, /livez will assume that unfinished post-start hooks will complete successfully and therefore return true.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-dir string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
@@ -739,39 +767,11 @@ kube-apiserver [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
-<tr>
-<td colspan="2">--log_backtrace_at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_dir string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_file string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_file_max_size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
-</tr>
-
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add-dir-header, --alsologtostderr, --log-backtrace-at, --log-dir, --log-file, --log-file-max-size, --logtostderr, --one-output, --skip-headers, --skip-log-headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
 </tr>
 
 <tr>
@@ -880,7 +880,7 @@ kube-apiserver [flags]
 </tr>
 
 <tr>
-<td colspan="2">--one_output</td>
+<td colspan="2">--one-output</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level)</p></td>
@@ -1055,14 +1055,14 @@ kube-apiserver [flags]
 </tr>
 
 <tr>
-<td colspan="2">--skip_headers</td>
+<td colspan="2">--skip-headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip_log_headers</td>
+<td colspan="2">--skip-log-headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md b/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
index ae6df0502d..df8f76baed 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-controller-manager.md
@@ -44,7 +44,7 @@ kube-controller-manager [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--add_dir_header</td>
+<td colspan="2">--add-dir-header</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
@@ -302,6 +302,13 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of namespace objects that are allowed to sync concurrently. Larger number = more responsive namespace termination, but more CPU (and network) load</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--concurrent-rc-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--concurrent-replicaset-syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
@@ -351,13 +358,6 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of TTL-after-finished controller workers that are allowed to sync concurrently.</p></td>
 </tr>
 
-<tr>
-<td colspan="2">--concurrent_rc_syncs int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load</p></td>
-</tr>
-
 <tr>
 <td colspan="2">--configure-cloud-routes&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
@@ -624,6 +624,34 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to the config file for controller leader migration, or empty to use the value that reflects default configuration of the controller manager. The config file should be of type LeaderMigrationConfiguration, group controllermanager.config.k8s.io, version v1alpha1.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-dir string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
@@ -631,39 +659,11 @@ kube-controller-manager [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
-<tr>
-<td colspan="2">--log_backtrace_at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_dir string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_file string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_file_max_size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
-</tr>
-
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add-dir-header, --alsologtostderr, --log-backtrace-at, --log-dir, --log-file, --log-file-max-size, --logtostderr, --one-output, --skip-headers, --skip-log-headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
 </tr>
 
 <tr>
@@ -772,7 +772,7 @@ kube-controller-manager [flags]
 </tr>
 
 <tr>
-<td colspan="2">--one_output</td>
+<td colspan="2">--one-output</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level)</p></td>
@@ -947,14 +947,14 @@ kube-controller-manager [flags]
 </tr>
 
 <tr>
-<td colspan="2">--skip_headers</td>
+<td colspan="2">--skip-headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip_log_headers</td>
+<td colspan="2">--skip-log-headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-proxy.md b/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
index ffe104c22e..8313be8ebb 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-proxy.md
@@ -42,6 +42,20 @@ kube-proxy [flags]
 </colgroup>
 <tbody>
 
+<tr>
+<td colspan="2">--add-dir-header</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--alsologtostderr</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error as well as files</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--azure-container-registry-config string</td>
 </tr>
@@ -63,6 +77,13 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true kube-proxy will treat failure to bind to a port as fatal and exit</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--boot-id-file string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/proc/sys/kernel/random/boot_id"</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Comma-separated list of files to check for boot-id. Use the first one that exists.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--cleanup</td>
 </tr>
@@ -70,6 +91,20 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true cleanup iptables and ipvs rules and exit.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--cloud-provider-gce-l7lb-src-cidrs cidrs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 130.211.0.0/22,35.191.0.0/16</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>CIDRs opened in GCE firewall for L7 LB traffic proxy &amp; health checks</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--cloud-provider-gce-lb-src-cidrs cidrs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>CIDRs opened in GCE firewall for L4 LB traffic proxy &amp; health checks</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--cluster-cidr string</td>
 </tr>
@@ -119,6 +154,20 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Idle timeout for established TCP connections (0 to leave as-is)</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--default-not-ready-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 300</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--default-unreachable-toleration-seconds int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 300</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--detect-local-mode LocalMode</td>
 </tr>
@@ -259,6 +308,34 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Path to kubeconfig file with authorization information (the master location can be overridden by the master flag).</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-dir string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
@@ -266,6 +343,20 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--logtostderr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>log to standard error instead of files</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--machine-id-file string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/machine-id,/var/lib/dbus/machine-id"</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Comma-separated list of files to check for machine-id. Use the first one that exists.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--masquerade-all</td>
 </tr>
@@ -294,6 +385,13 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A string slice of values which specify the addresses to use for NodePorts. Values may be valid IP blocks (e.g. 1.2.3.0/24, 1.2.3.4/32). The default empty string slice ([]) means to use all local addresses.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--one-output</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level)</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--oom-score-adj int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: -999</td>
 </tr>
@@ -329,6 +427,27 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The previous version for which you want to show hidden metrics. Only the previous minor version is meaningful, other values will not be allowed. The format is <!-- raw HTML omitted -->.<!-- raw HTML omitted -->, e.g.: '1.16'. The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics, rather than being surprised when they are permanently removed in the release after that.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--skip-headers</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--skip-log-headers</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--stderrthreshold int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>logs at or above this threshold go to stderr</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--udp-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 250ms</td>
 </tr>
@@ -336,6 +455,13 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>How long an idle UDP connection will be kept open (e.g. '250ms', '2s').  Must be greater than 0. Only applicable for proxy-mode=userspace</p></td>
 </tr>
 
+<tr>
+<td colspan="2">-v, --v int</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>number for the log level verbosity</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--version version[=true]</td>
 </tr>
@@ -343,6 +469,13 @@ kube-proxy [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Print version information and quit</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--vmodule &lt;comma-separated 'pattern=N' settings&gt;</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>comma-separated list of pattern=N settings for file-filtered logging</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--write-config-to string</td>
 </tr>
diff --git a/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md b/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
index 811dc417e0..885e997ed7 100644
--- a/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
+++ b/content/en/docs/reference/command-line-tools-reference/kube-scheduler.md
@@ -44,7 +44,7 @@ kube-scheduler [flags]
 <tbody>
 
 <tr>
-<td colspan="2">--add_dir_header</td>
+<td colspan="2">--add-dir-header</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, adds the file directory to the header of the log messages</p></td>
@@ -309,6 +309,34 @@ kube-scheduler [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>DEPRECATED: define the namespace of the lock object. Will be removed in favor of leader-elect-resource-namespace. This parameter is ignored if a config file is specified in --config.</p></td>
 </tr>
 
+<tr>
+<td colspan="2">--log-backtrace-at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-dir string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file string</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
+</tr>
+
+<tr>
+<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
+</tr>
+
 <tr>
 <td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5s</td>
 </tr>
@@ -316,39 +344,11 @@ kube-scheduler [flags]
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Maximum number of seconds between log flushes</p></td>
 </tr>
 
-<tr>
-<td colspan="2">--log_backtrace_at &lt;a string in the form 'file:N'&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: :0</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>when logging hits line file:N, emit a stack trace</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_dir string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, write log files in this directory</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_file string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If non-empty, use this log file</p></td>
-</tr>
-
-<tr>
-<td colspan="2">--log_file_max_size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</p></td>
-</tr>
-
 <tr>
 <td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "text"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add_dir_header, --alsologtostderr, --log_backtrace_at, --log_dir, --log_file, --log_file_max_size, --logtostderr, --one_output, --skip_headers, --skip_log_headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>Sets the log format. Permitted formats: &quot;json&quot;, &quot;text&quot;.<br/>Non-default formats don't honor these flags: --add-dir-header, --alsologtostderr, --log-backtrace-at, --log-dir, --log-file, --log-file-max-size, --logtostderr, --one-output, --skip-headers, --skip-log-headers, --stderrthreshold, --vmodule, --log-flush-frequency.<br/>Non-default choices are currently alpha and subject to change without warning.</p></td>
 </tr>
 
 <tr>
@@ -366,7 +366,7 @@ kube-scheduler [flags]
 </tr>
 
 <tr>
-<td colspan="2">--one_output</td>
+<td colspan="2">--one-output</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, only write logs to their native severity level (vs also writing to each lower severity level)</p></td>
@@ -478,14 +478,14 @@ kube-scheduler [flags]
 </tr>
 
 <tr>
-<td colspan="2">--skip_headers</td>
+<td colspan="2">--skip-headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid header prefixes in the log messages</p></td>
 </tr>
 
 <tr>
-<td colspan="2">--skip_log_headers</td>
+<td colspan="2">--skip-log-headers</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><p>If true, avoid headers when opening log files</p></td>
diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md b/content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md
deleted file mode 100644
index a5e28a1043..0000000000
--- a/content/en/docs/reference/command-line-tools-reference/kubelet-config.v1beta1.md
+++ /dev/null
@@ -1,1501 +0,0 @@
-
-
-
-
-
----
-title: kubelet.config.k8s.io/v1beta1
-content_type: tool-reference
----
-
-
-## Resource Types 
-
-
-  
-- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
-- [SerializedNodeConfigSource](#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource)
-  
-  
-    
-
-
-### `KubeletConfiguration`     {#kubelet-config-k8s-io-v1beta1-KubeletConfiguration}
-    
-
-
-
-
-KubeletConfiguration contains the configuration for the Kubelet
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-<tr><td><code>apiVersion</code></br>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
-<tr><td><code>kind</code></br>string</td><td><code>KubeletConfiguration</code></td></tr>
-    
-
-  
-  
-<tr><td style="white-space: pre"><code>enableServer</code><span style="color:blue;">&ast;</span></br>
-<code>bool</code>
-</td>
-<td>enableServer enables Kubelet's secured server.
-Note: Kubelet's insecure port is controlled by the readOnlyPort option.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>staticPodPath</code></br>
-<code>string</code>
-</td>
-<td>staticPodPath is the path to the directory containing local (static) pods to
-run, or the path to a single static pod file.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-the set of static pods specified at the new path may be different than the
-ones the Kubelet initially started with, and this may disrupt your node.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>syncFrequency</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>syncFrequency is the max period between synchronizing running
-containers and config.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-shortening this duration may have a negative performance impact, especially
-as the number of Pods on the node increases. Alternatively, increasing this
-duration will result in longer refresh times for ConfigMaps and Secrets.
-Default: "1m"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>fileCheckFrequency</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>fileCheckFrequency is the duration between checking config files for
-new data
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-shortening the duration will cause the Kubelet to reload local Static Pod
-configurations more frequently, which may have a negative performance impact.
-Default: "20s"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>httpCheckFrequency</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>httpCheckFrequency is the duration between checking http for new data
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-shortening the duration will cause the Kubelet to poll staticPodURL more
-frequently, which may have a negative performance impact.
-Default: "20s"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>staticPodURL</code></br>
-<code>string</code>
-</td>
-<td>staticPodURL is the URL for accessing static pods to run
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-the set of static pods specified at the new URL may be different than the
-ones the Kubelet initially started with, and this may disrupt your node.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>staticPodURLHeader</code></br>
-<code>map[string][]string</code>
-</td>
-<td>staticPodURLHeader is a map of slices with HTTP headers to use when accessing the podURL
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt the ability to read the latest set of static pods from StaticPodURL.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>address</code></br>
-<code>string</code>
-</td>
-<td>address is the IP address for the Kubelet to serve on (set to 0.0.0.0
-for all interfaces).
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: "0.0.0.0"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>port</code></br>
-<code>int32</code>
-</td>
-<td>port is the port for the Kubelet to serve on.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: 10250</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>readOnlyPort</code></br>
-<code>int32</code>
-</td>
-<td>readOnlyPort is the read-only port for the Kubelet to serve on with
-no authentication/authorization.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: 0 (disabled)</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>tlsCertFile</code></br>
-<code>string</code>
-</td>
-<td>tlsCertFile is the file containing x509 Certificate for HTTPS. (CA cert,
-if any, concatenated after server cert). If tlsCertFile and
-tlsPrivateKeyFile are not provided, a self-signed certificate
-and key are generated for the public address and saved to the directory
-passed to the Kubelet's --cert-dir flag.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>tlsPrivateKeyFile</code></br>
-<code>string</code>
-</td>
-<td>tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>tlsCipherSuites</code></br>
-<code>[]string</code>
-</td>
-<td>TLSCipherSuites is the list of allowed cipher suites for the server.
-Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>tlsMinVersion</code></br>
-<code>string</code>
-</td>
-<td>TLSMinVersion is the minimum TLS version supported.
-Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>rotateCertificates</code></br>
-<code>bool</code>
-</td>
-<td>rotateCertificates enables client certificate rotation. The Kubelet will request a
-new certificate from the certificates.k8s.io API. This requires an approver to approve the
-certificate signing requests.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-disabling it may disrupt the Kubelet's ability to authenticate with the API server
-after the current certificate expires.
-Default: false</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>serverTLSBootstrap</code></br>
-<code>bool</code>
-</td>
-<td>serverTLSBootstrap enables server certificate bootstrap. Instead of self
-signing a serving certificate, the Kubelet will request a certificate from
-the certificates.k8s.io API. This requires an approver to approve the
-certificate signing requests. The RotateKubeletServerCertificate feature
-must be enabled.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-disabling it will stop the renewal of Kubelet server certificates, which can
-disrupt components that interact with the Kubelet server in the long term,
-due to certificate expiration.
-Default: false</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>authentication</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthentication"><code>KubeletAuthentication</code></a>
-</td>
-<td>authentication specifies how requests to the Kubelet's server are authenticated
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Defaults:
-  anonymous:
-    enabled: false
-  webhook:
-    enabled: true
-    cacheTTL: "2m"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>authorization</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorization"><code>KubeletAuthorization</code></a>
-</td>
-<td>authorization specifies how requests to the Kubelet's server are authorized
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Defaults:
-  mode: Webhook
-  webhook:
-    cacheAuthorizedTTL: "5m"
-    cacheUnauthorizedTTL: "30s"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>registryPullQPS</code></br>
-<code>int32</code>
-</td>
-<td>registryPullQPS is the limit of registry pulls per second.
-Set to 0 for no limit.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact scalability by changing the amount of traffic produced
-by image pulls.
-Default: 5</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>registryBurst</code></br>
-<code>int32</code>
-</td>
-<td>registryBurst is the maximum size of bursty pulls, temporarily allows
-pulls to burst to this number, while still not exceeding registryPullQPS.
-Only used if registryPullQPS > 0.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact scalability by changing the amount of traffic produced
-by image pulls.
-Default: 10</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>eventRecordQPS</code></br>
-<code>int32</code>
-</td>
-<td>eventRecordQPS is the maximum event creations per second. If 0, there
-is no limit enforced.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact scalability by changing the amount of traffic produced by
-event creations.
-Default: 5</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>eventBurst</code></br>
-<code>int32</code>
-</td>
-<td>eventBurst is the maximum size of a burst of event creations, temporarily
-allows event creations to burst to this number, while still not exceeding
-eventRecordQPS. Only used if eventRecordQPS > 0.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact scalability by changing the amount of traffic produced by
-event creations.
-Default: 10</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>enableDebuggingHandlers</code></br>
-<code>bool</code>
-</td>
-<td>enableDebuggingHandlers enables server endpoints for log access
-and local running of containers and commands, including the exec,
-attach, logs, and portforward features.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-disabling it may disrupt components that interact with the Kubelet server.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>enableContentionProfiling</code></br>
-<code>bool</code>
-</td>
-<td>enableContentionProfiling enables lock contention profiling, if enableDebuggingHandlers is true.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-enabling it may carry a performance impact.
-Default: false</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>healthzPort</code></br>
-<code>int32</code>
-</td>
-<td>healthzPort is the port of the localhost healthz endpoint (set to 0 to disable)
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that monitor Kubelet health.
-Default: 10248</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>healthzBindAddress</code></br>
-<code>string</code>
-</td>
-<td>healthzBindAddress is the IP address for the healthz server to serve on
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that monitor Kubelet health.
-Default: "127.0.0.1"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>oomScoreAdj</code></br>
-<code>int32</code>
-</td>
-<td>oomScoreAdj is The oom-score-adj value for kubelet process. Values
-must be within the range [-1000, 1000].
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact the stability of nodes under memory pressure.
-Default: -999</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>clusterDomain</code></br>
-<code>string</code>
-</td>
-<td>clusterDomain is the DNS domain for this cluster. If set, kubelet will
-configure all containers to search this domain in addition to the
-host's search domains.
-Dynamic Kubelet Config (beta): Dynamically updating this field is not recommended,
-as it should be kept in sync with the rest of the cluster.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>clusterDNS</code></br>
-<code>[]string</code>
-</td>
-<td>clusterDNS is a list of IP addresses for the cluster DNS server. If set,
-kubelet will configure all containers to use this for DNS resolution
-instead of the host's DNS servers.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-changes will only take effect on Pods created after the update. Draining
-the node is recommended before changing this field.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>streamingConnectionIdleTimeout</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>streamingConnectionIdleTimeout is the maximum time a streaming connection
-can be idle before the connection is automatically closed.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact components that rely on infrequent updates over streaming
-connections to the Kubelet server.
-Default: "4h"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>nodeStatusUpdateFrequency</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>nodeStatusUpdateFrequency is the frequency that kubelet computes node
-status. If node lease feature is not enabled, it is also the frequency that
-kubelet posts node status to master.
-Note: When node lease feature is not enabled, be cautious when changing the
-constant, it must work with nodeMonitorGracePeriod in nodecontroller.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact node scalability, and also that the node controller's
-nodeMonitorGracePeriod must be set to N&lowast;NodeStatusUpdateFrequency,
-where N is the number of retries before the node controller marks
-the node unhealthy.
-Default: "10s"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>nodeStatusReportFrequency</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>nodeStatusReportFrequency is the frequency that kubelet posts node
-status to master if node status does not change. Kubelet will ignore this
-frequency and post node status immediately if any change is detected. It is
-only used when node lease feature is enabled. nodeStatusReportFrequency's
-default value is 1m. But if nodeStatusUpdateFrequency is set explicitly,
-nodeStatusReportFrequency's default value will be set to
-nodeStatusUpdateFrequency for backward compatibility.
-Default: "1m"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>nodeLeaseDurationSeconds</code></br>
-<code>int32</code>
-</td>
-<td>nodeLeaseDurationSeconds is the duration the Kubelet will set on its corresponding Lease,
-when the NodeLease feature is enabled. This feature provides an indicator of node
-health by having the Kubelet create and periodically renew a lease, named after the node,
-in the kube-node-lease namespace. If the lease expires, the node can be considered unhealthy.
-The lease is currently renewed every 10s, per KEP-0009. In the future, the lease renewal interval
-may be set based on the lease duration.
-Requires the NodeLease feature gate to be enabled.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-decreasing the duration may reduce tolerance for issues that temporarily prevent
-the Kubelet from renewing the lease (e.g. a short-lived network issue).
-Default: 40</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>imageMinimumGCAge</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>imageMinimumGCAge is the minimum age for an unused image before it is
-garbage collected.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may trigger or delay garbage collection, and may change the image overhead
-on the node.
-Default: "2m"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>imageGCHighThresholdPercent</code></br>
-<code>int32</code>
-</td>
-<td>imageGCHighThresholdPercent is the percent of disk usage after which
-image garbage collection is always run. The percent is calculated as
-this field value out of 100.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may trigger or delay garbage collection, and may change the image overhead
-on the node.
-Default: 85</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>imageGCLowThresholdPercent</code></br>
-<code>int32</code>
-</td>
-<td>imageGCLowThresholdPercent is the percent of disk usage before which
-image garbage collection is never run. Lowest disk usage to garbage
-collect to. The percent is calculated as this field value out of 100.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may trigger or delay garbage collection, and may change the image overhead
-on the node.
-Default: 80</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>volumeStatsAggPeriod</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>How frequently to calculate and cache volume disk usage for all pods
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-shortening the period may carry a performance impact.
-Default: "1m"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>kubeletCgroups</code></br>
-<code>string</code>
-</td>
-<td>kubeletCgroups is the absolute name of cgroups to isolate the kubelet in
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>systemCgroups</code></br>
-<code>string</code>
-</td>
-<td>systemCgroups is absolute name of cgroups in which to place
-all non-kernel processes that are not already in a container. Empty
-for no container. Rolling back the flag requires a reboot.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cgroupRoot</code></br>
-<code>string</code>
-</td>
-<td>cgroupRoot is the root cgroup to use for pods. This is handled by the
-container runtime on a best effort basis.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cgroupsPerQOS</code></br>
-<code>bool</code>
-</td>
-<td>Enable QoS based Cgroup hierarchy: top level cgroups for QoS Classes
-And all Burstable and BestEffort pods are brought up under their
-specific top level QoS cgroup.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cgroupDriver</code></br>
-<code>string</code>
-</td>
-<td>driver that the kubelet uses to manipulate cgroups on the host (cgroupfs or systemd)
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: "cgroupfs"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cpuManagerPolicy</code></br>
-<code>string</code>
-</td>
-<td>CPUManagerPolicy is the name of the policy to use.
-Requires the CPUManager feature gate to be enabled.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: "none"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cpuManagerReconcilePeriod</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>CPU Manager reconciliation period.
-Requires the CPUManager feature gate to be enabled.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-shortening the period may carry a performance impact.
-Default: "10s"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>topologyManagerPolicy</code></br>
-<code>string</code>
-</td>
-<td>TopologyManagerPolicy is the name of the policy to use.
-Policies other than "none" require the TopologyManager feature gate to be enabled.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: "none"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>topologyManagerScope</code></br>
-<code>string</code>
-</td>
-<td>TopologyManagerScope represents the scope of topology hint generation
-that topology manager requests and hint providers generate.
-"pod" scope requires the TopologyManager feature gate to be enabled.
-Default: "container"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>qosReserved</code></br>
-<code>map[string]string</code>
-</td>
-<td>qosReserved is a set of resource name to percentage pairs that specify
-the minimum percentage of a resource reserved for exclusive use by the
-guaranteed QoS tier.
-Currently supported resources: "memory"
-Requires the QOSReserved feature gate to be enabled.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>runtimeRequestTimeout</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>runtimeRequestTimeout is the timeout for all runtime requests except long running
-requests - pull, logs, exec and attach.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may disrupt components that interact with the Kubelet server.
-Default: "2m"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>hairpinMode</code></br>
-<code>string</code>
-</td>
-<td>hairpinMode specifies how the Kubelet should configure the container
-bridge for hairpin packets.
-Setting this flag allows endpoints in a Service to loadbalance back to
-themselves if they should try to access their own Service. Values:
-  "promiscuous-bridge": make the container bridge promiscuous.
-  "hairpin-veth":       set the hairpin flag on container veth interfaces.
-  "none":               do nothing.
-Generally, one must set --hairpin-mode=hairpin-veth to achieve hairpin NAT,
-because promiscuous-bridge assumes the existence of a container bridge named cbr0.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may require a node reboot, depending on the network plugin.
-Default: "promiscuous-bridge"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>maxPods</code></br>
-<code>int32</code>
-</td>
-<td>maxPods is the number of pods that can run on this Kubelet.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-changes may cause Pods to fail admission on Kubelet restart, and may change
-the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
-future scheduling decisions. Increasing this value may also decrease performance,
-as more Pods can be packed into a single node.
-Default: 110</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>podCIDR</code></br>
-<code>string</code>
-</td>
-<td>The CIDR to use for pod IP addresses, only used in standalone mode.
-In cluster mode, this is obtained from the master.
-Dynamic Kubelet Config (beta): This field should always be set to the empty default.
-It should only set for standalone Kubelets, which cannot use Dynamic Kubelet Config.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>podPidsLimit</code></br>
-<code>int64</code>
-</td>
-<td>PodPidsLimit is the maximum number of pids in any pod.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-lowering it may prevent container processes from forking after the change.
-Default: -1</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>resolvConf</code></br>
-<code>string</code>
-</td>
-<td>ResolverConfig is the resolver configuration file used as the basis
-for the container DNS resolution configuration.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-changes will only take effect on Pods created after the update. Draining
-the node is recommended before changing this field.
-Default: "/etc/resolv.conf"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>runOnce</code></br>
-<code>bool</code>
-</td>
-<td>RunOnce causes the Kubelet to check the API server once for pods,
-run those in addition to the pods specified by static pod files, and exit.
-Default: false</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cpuCFSQuota</code></br>
-<code>bool</code>
-</td>
-<td>cpuCFSQuota enables CPU CFS quota enforcement for containers that
-specify CPU limits.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-disabling it may reduce node stability.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cpuCFSQuotaPeriod</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>CPUCFSQuotaPeriod is the CPU CFS quota period value, cpu.cfs_period_us.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-limits set for containers will result in different cpu.cfs_quota settings. This
-will trigger container restarts on the node being reconfigured.
-Default: "100ms"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>nodeStatusMaxImages</code></br>
-<code>int32</code>
-</td>
-<td>nodeStatusMaxImages caps the number of images reported in Node.Status.Images.
-Note: If -1 is specified, no cap will be applied. If 0 is specified, no image is returned.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-different values can be reported on node status.
-Default: 50</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>maxOpenFiles</code></br>
-<code>int64</code>
-</td>
-<td>maxOpenFiles is Number of files that can be opened by Kubelet process.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact the ability of the Kubelet to interact with the node's filesystem.
-Default: 1000000</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>contentType</code></br>
-<code>string</code>
-</td>
-<td>contentType is contentType of requests sent to apiserver.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact the ability for the Kubelet to communicate with the API server.
-If the Kubelet loses contact with the API server due to a change to this field,
-the change cannot be reverted via dynamic Kubelet config.
-Default: "application/vnd.kubernetes.protobuf"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>kubeAPIQPS</code></br>
-<code>int32</code>
-</td>
-<td>kubeAPIQPS is the QPS to use while talking with kubernetes apiserver
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact scalability by changing the amount of traffic the Kubelet
-sends to the API server.
-Default: 5</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>kubeAPIBurst</code></br>
-<code>int32</code>
-</td>
-<td>kubeAPIBurst is the burst to allow while talking with kubernetes apiserver
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact scalability by changing the amount of traffic the Kubelet
-sends to the API server.
-Default: 10</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>serializeImagePulls</code></br>
-<code>bool</code>
-</td>
-<td>serializeImagePulls when enabled, tells the Kubelet to pull images one
-at a time. We recommend &lowast;not&lowast; changing the default value on nodes that
-run docker daemon with version  < 1.9 or an Aufs storage backend.
-Issue #10959 has more details.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact the performance of image pulls.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>evictionHard</code></br>
-<code>map[string]string</code>
-</td>
-<td>Map of signal names to quantities that defines hard eviction thresholds. For example: {"memory.available": "300Mi"}.
-To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may trigger or delay Pod evictions.
-Default:
-  memory.available:  "100Mi"
-  nodefs.available:  "10%"
-  nodefs.inodesFree: "5%"
-  imagefs.available: "15%"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>evictionSoft</code></br>
-<code>map[string]string</code>
-</td>
-<td>Map of signal names to quantities that defines soft eviction thresholds.
-For example: {"memory.available": "300Mi"}.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may trigger or delay Pod evictions, and may change the allocatable reported
-by the node.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>evictionSoftGracePeriod</code></br>
-<code>map[string]string</code>
-</td>
-<td>Map of signal names to quantities that defines grace periods for each soft eviction signal.
-For example: {"memory.available": "30s"}.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may trigger or delay Pod evictions.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>evictionPressureTransitionPeriod</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-lowering it may decrease the stability of the node when the node is overcommitted.
-Default: "5m"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>evictionMaxPodGracePeriod</code></br>
-<code>int32</code>
-</td>
-<td>Maximum allowed grace period (in seconds) to use when terminating pods in
-response to a soft eviction threshold being met. This value effectively caps
-the Pod's TerminationGracePeriodSeconds value during soft evictions.
-Note: Due to issue #64530, the behavior has a bug where this value currently just
-overrides the grace period during soft eviction, which can increase the grace
-period from what is set on the Pod. This bug will be fixed in a future release.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-lowering it decreases the amount of time Pods will have to gracefully clean
-up before being killed during a soft eviction.
-Default: 0</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>evictionMinimumReclaim</code></br>
-<code>map[string]string</code>
-</td>
-<td>Map of signal names to quantities that defines minimum reclaims, which describe the minimum
-amount of a given resource the kubelet will reclaim when performing a pod eviction while
-that resource is under pressure. For example: {"imagefs.available": "2Gi"}
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may change how well eviction can manage resource pressure.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>podsPerCore</code></br>
-<code>int32</code>
-</td>
-<td>podsPerCore is the maximum number of pods per core. Cannot exceed MaxPods.
-If 0, this field is ignored.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-changes may cause Pods to fail admission on Kubelet restart, and may change
-the value reported in Node.Status.Capacity[v1.ResourcePods], thus affecting
-future scheduling decisions. Increasing this value may also decrease performance,
-as more Pods can be packed into a single node.
-Default: 0</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>enableControllerAttachDetach</code></br>
-<code>bool</code>
-</td>
-<td>enableControllerAttachDetach enables the Attach/Detach controller to
-manage attachment/detachment of volumes scheduled to this node, and
-disables kubelet from executing any attach/detach operations
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-changing which component is responsible for volume management on a live node
-may result in volumes refusing to detach if the node is not drained prior to
-the update, and if Pods are scheduled to the node before the
-volumes.kubernetes.io/controller-managed-attach-detach annotation is updated by the
-Kubelet. In general, it is safest to leave this value set the same as local config.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>protectKernelDefaults</code></br>
-<code>bool</code>
-</td>
-<td>protectKernelDefaults, if true, causes the Kubelet to error if kernel
-flags are not as it expects. Otherwise the Kubelet will attempt to modify
-kernel flags to match its expectation.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-enabling it may cause the Kubelet to crash-loop if the Kernel is not configured as
-Kubelet expects.
-Default: false</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>makeIPTablesUtilChains</code></br>
-<code>bool</code>
-</td>
-<td>If true, Kubelet ensures a set of iptables rules are present on host.
-These rules will serve as utility rules for various components, e.g. KubeProxy.
-The rules will be created based on IPTablesMasqueradeBit and IPTablesDropBit.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-disabling it will prevent the Kubelet from healing locally misconfigured iptables rules.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>iptablesMasqueradeBit</code></br>
-<code>int32</code>
-</td>
-<td>iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT
-Values must be within the range [0, 31]. Must be different from other mark bits.
-Warning: Please match the value of the corresponding parameter in kube-proxy.
-TODO: clean up IPTablesMasqueradeBit in kube-proxy
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it needs to be coordinated with other components, like kube-proxy, and the update
-will only be effective if MakeIPTablesUtilChains is enabled.
-Default: 14</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>iptablesDropBit</code></br>
-<code>int32</code>
-</td>
-<td>iptablesDropBit is the bit of the iptables fwmark space to mark for dropping packets.
-Values must be within the range [0, 31]. Must be different from other mark bits.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it needs to be coordinated with other components, like kube-proxy, and the update
-will only be effective if MakeIPTablesUtilChains is enabled.
-Default: 15</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>featureGates</code></br>
-<code>map[string]bool</code>
-</td>
-<td>featureGates is a map of feature names to bools that enable or disable alpha/experimental
-features. This field modifies piecemeal the built-in default values from
-"k8s.io/kubernetes/pkg/features/kube_features.go".
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider the
-documentation for the features you are enabling or disabling. While we
-encourage feature developers to make it possible to dynamically enable
-and disable features, some changes may require node reboots, and some
-features may require careful coordination to retroactively disable.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>failSwapOn</code></br>
-<code>bool</code>
-</td>
-<td>failSwapOn tells the Kubelet to fail to start if swap is enabled on the node.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-setting it to true will cause the Kubelet to crash-loop if swap is enabled.
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>containerLogMaxSize</code></br>
-<code>string</code>
-</td>
-<td>A quantity defines the maximum size of the container log file before it is rotated.
-For example: "5Mi" or "256Ki".
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may trigger log rotation.
-Default: "10Mi"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>containerLogMaxFiles</code></br>
-<code>int32</code>
-</td>
-<td>Maximum number of container log files that can be present for a container.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-lowering it may cause log files to be deleted.
-Default: 5</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>configMapAndSecretChangeDetectionStrategy</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy"><code>ResourceChangeDetectionStrategy</code></a>
-</td>
-<td>ConfigMapAndSecretChangeDetectionStrategy is a mode in which
-config map and secret managers are running.
-Default: "Watch"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>systemReserved</code></br>
-<code>map[string]string</code>
-</td>
-<td>systemReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G)
-pairs that describe resources reserved for non-kubernetes components.
-Currently only cpu and memory are supported.
-See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may not be possible to increase the reserved resources, because this
-requires resizing cgroups. Always look for a NodeAllocatableEnforced event
-after updating this field to ensure that the update was successful.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>kubeReserved</code></br>
-<code>map[string]string</code>
-</td>
-<td>A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
-that describe resources reserved for kubernetes system components.
-Currently cpu, memory and local storage for root file system are supported.
-See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may not be possible to increase the reserved resources, because this
-requires resizing cgroups. Always look for a NodeAllocatableEnforced event
-after updating this field to ensure that the update was successful.
-Default: nil</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>reservedSystemCPUs</code><span style="color:blue;">&ast;</span></br>
-<code>string</code>
-</td>
-<td>This ReservedSystemCPUs option specifies the cpu list reserved for the host level system threads and kubernetes related threads.
-This provide a "static" CPU list rather than the "dynamic" list by system-reserved and kube-reserved.
-This option overwrites CPUs provided by system-reserved and kube-reserved.</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>showHiddenMetricsForVersion</code></br>
-<code>string</code>
-</td>
-<td>The previous version for which you want to show hidden metrics.
-Only the previous minor version is meaningful, other values will not be allowed.
-The format is <major>.<minor>, e.g.: '1.16'.
-The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics,
-rather than being surprised when they are permanently removed in the release after that.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>systemReservedCgroup</code></br>
-<code>string</code>
-</td>
-<td>This flag helps kubelet identify absolute name of top level cgroup used to enforce `SystemReserved` compute resource reservation for OS system daemons.
-Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>kubeReservedCgroup</code></br>
-<code>string</code>
-</td>
-<td>This flag helps kubelet identify absolute name of top level cgroup used to enforce `KubeReserved` compute resource reservation for Kubernetes node system daemons.
-Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
-Dynamic Kubelet Config (beta): This field should not be updated without a full node
-reboot. It is safest to keep this value the same as the local config.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>enforceNodeAllocatable</code></br>
-<code>[]string</code>
-</td>
-<td>This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform.
-This flag accepts a list of options. Acceptable options are `none`, `pods`, `system-reserved` & `kube-reserved`.
-If `none` is specified, no other options may be specified.
-Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md) doc for more information.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-removing enforcements may reduce the stability of the node. Alternatively, adding
-enforcements may reduce the stability of components which were using more than
-the reserved amount of resources; for example, enforcing kube-reserved may cause
-Kubelets to OOM if it uses more than the reserved resources, and enforcing system-reserved
-may cause system daemons to OOM if they use more than the reserved resources.
-Default: ["pods"]</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>allowedUnsafeSysctls</code></br>
-<code>[]string</code>
-</td>
-<td>A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in &lowast;).
-Unsafe sysctl groups are kernel.shm&lowast;, kernel.msg&lowast;, kernel.sem, fs.mqueue.&lowast;, and net.&lowast;.
-These sysctls are namespaced but not allowed by default.  For example: "kernel.msg&lowast;,net.ipv4.route.min_pmtu"
-Default: []</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>volumePluginDir</code></br>
-<code>string</code>
-</td>
-<td>volumePluginDir is the full path of the directory in which to search
-for additional third party volume plugins.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that changing
-the volumePluginDir may disrupt workloads relying on third party volume plugins.
-Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>providerID</code></br>
-<code>string</code>
-</td>
-<td>providerID, if set, sets the unique id of the instance that an external provider (i.e. cloudprovider)
-can use to identify a specific node.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact the ability of the Kubelet to interact with cloud providers.
-Default: ""</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>kernelMemcgNotification</code></br>
-<code>bool</code>
-</td>
-<td>kernelMemcgNotification, if set, the kubelet will integrate with the kernel memcg notification
-to determine if memory eviction thresholds are crossed rather than polling.
-Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
-it may impact the way Kubelet interacts with the kernel.
-Default: false</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>logging</code><span style="color:blue;">&ast;</span></br>
-<a href="#LoggingConfiguration"><code>LoggingConfiguration</code></a>
-</td>
-<td>Logging specifies the options of logging.
-Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
-Defaults:
-  Format: text</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>enableSystemLogHandler</code></br>
-<code>bool</code>
-</td>
-<td>enableSystemLogHandler enables system logs via web interface host:port/logs/
-Default: true</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>shutdownGracePeriod</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>ShutdownGracePeriod specifies the total duration that the node should delay the shutdown and total grace period for pod termination during a node shutdown.
-Default: "30s"</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>shutdownGracePeriodCriticalPods</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>ShutdownGracePeriodCriticalPods specifies the duration used to terminate critical pods during a node shutdown. This should be less than ShutdownGracePeriod.
-For example, if ShutdownGracePeriod=30s, and ShutdownGracePeriodCriticalPods=10s, during a node shutdown the first 20 seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating critical pods.
-Default: "10s"</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `SerializedNodeConfigSource`     {#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource}
-    
-
-
-
-
-SerializedNodeConfigSource allows us to serialize v1.NodeConfigSource.
-This type is used internally by the Kubelet for tracking checkpointed dynamic configs.
-It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-<tr><td><code>apiVersion</code></br>string</td><td><code>kubelet.config.k8s.io/v1beta1</code></td></tr>
-<tr><td><code>kind</code></br>string</td><td><code>SerializedNodeConfigSource</code></td></tr>
-    
-
-  
-  
-<tr><td style="white-space: pre"><code>source</code></br>
-<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#nodeconfigsource-v1-core"><code>core/v1.NodeConfigSource</code></a>
-</td>
-<td>Source is the source that we are serializing</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `HairpinMode`     {#kubelet-config-k8s-io-v1beta1-HairpinMode}
-    
-(Alias of `string`)
-
-
-
-HairpinMode denotes how the kubelet should configure networking to handle
-hairpin packets.
-
-
-    
-
-
-### `KubeletAnonymousAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication}
-    
-
-
-
-**Appears in:**
-
-- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
-
-
-
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-
-  
-<tr><td style="white-space: pre"><code>enabled</code></br>
-<code>bool</code>
-</td>
-<td>enabled allows anonymous requests to the kubelet server.
-Requests that are not rejected by another authentication method are treated as anonymous requests.
-Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `KubeletAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthentication}
-    
-
-
-
-**Appears in:**
-
-- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
-
-
-
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-
-  
-<tr><td style="white-space: pre"><code>x509</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication"><code>KubeletX509Authentication</code></a>
-</td>
-<td>x509 contains settings related to x509 client certificate authentication</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>webhook</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication"><code>KubeletWebhookAuthentication</code></a>
-</td>
-<td>webhook contains settings related to webhook bearer token authentication</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>anonymous</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication"><code>KubeletAnonymousAuthentication</code></a>
-</td>
-<td>anonymous contains settings related to anonymous authentication</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `KubeletAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorization}
-    
-
-
-
-**Appears in:**
-
-- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
-
-
-
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-
-  
-<tr><td style="white-space: pre"><code>mode</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode"><code>KubeletAuthorizationMode</code></a>
-</td>
-<td>mode is the authorization mode to apply to requests to the kubelet server.
-Valid values are AlwaysAllow and Webhook.
-Webhook mode uses the SubjectAccessReview API to determine authorization.</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>webhook</code></br>
-<a href="#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization"><code>KubeletWebhookAuthorization</code></a>
-</td>
-<td>webhook contains settings related to Webhook authorization.</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `KubeletAuthorizationMode`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode}
-    
-(Alias of `string`)
-
-
-**Appears in:**
-
-- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
-
-
-
-
-
-    
-
-
-### `KubeletWebhookAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication}
-    
-
-
-
-**Appears in:**
-
-- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
-
-
-
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-
-  
-<tr><td style="white-space: pre"><code>enabled</code></br>
-<code>bool</code>
-</td>
-<td>enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cacheTTL</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>cacheTTL enables caching of authentication results</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `KubeletWebhookAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization}
-    
-
-
-
-**Appears in:**
-
-- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)
-
-
-
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-
-  
-<tr><td style="white-space: pre"><code>cacheAuthorizedTTL</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>cacheAuthorizedTTL is the duration to cache 'authorized' responses from the webhook authorizer.</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>cacheUnauthorizedTTL</code></br>
-<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
-</td>
-<td>cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from the webhook authorizer.</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `KubeletX509Authentication`     {#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication}
-    
-
-
-
-**Appears in:**
-
-- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)
-
-
-
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-
-  
-<tr><td style="white-space: pre"><code>clientCAFile</code></br>
-<code>string</code>
-</td>
-<td>clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate
-signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName,
-and groups corresponding to the Organization in the client certificate.</td>
-</tr>
-    
-  
-</tbody>
-</table>
-    
-
-
-### `ResourceChangeDetectionStrategy`     {#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy}
-    
-(Alias of `string`)
-
-
-**Appears in:**
-
-- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
-
-
-ResourceChangeDetectionStrategy denotes a mode in which internal
-managers (secret, configmap) are discovering object changes.
-
-
-    
-  
-  
-    
-
-### `LoggingConfiguration`     {#LoggingConfiguration}
-    
-
-
-
-**Appears in:**
-
-- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
-
-
-LoggingConfiguration contains logging options
-Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
-
-<table class="table table-striped">
-<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
-<tbody>
-    
-
-  
-<tr><td style="white-space: pre"><code>format</code><span style="color:blue;">&ast;</span></br>
-<code>string</code>
-</td>
-<td>Format Flag specifies the structure of log messages.
-default value of format is `text`</td>
-</tr>
-    
-  
-<tr><td style="white-space: pre"><code>sanitization</code><span style="color:blue;">&ast;</span></br>
-<code>bool</code>
-</td>
-<td>[Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).
-Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`)</td>
-</tr>
-    
-  
-</tbody>
-</table>

From 3525da7f7626b92ec26fa4c9d75f70e29400e71f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E8=8C=83=E6=88=90=E5=9F=8E?= <fancc24@vip.qq.com>
Date: Fri, 30 Apr 2021 11:06:49 +0800
Subject: [PATCH 685/788] Fix some formatting errors

---
 .../cluster-administration/flow-control.md    | 34 +++++++++----------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/flow-control.md b/content/zh/docs/concepts/cluster-administration/flow-control.md
index dd994b358b..c7805402f5 100644
--- a/content/zh/docs/concepts/cluster-administration/flow-control.md
+++ b/content/zh/docs/concepts/cluster-administration/flow-control.md
@@ -34,7 +34,7 @@ fair queuing technique so that, for example, a poorly-behaved
 {{< glossary_tooltip text="controller" term_id="controller" >}} need not
 starve others (even at the same priority level).
 -->
-API 优先级和公平性（ APF ）是一种替代方案，可提升上述最大并发限制。
+API 优先级和公平性（APF）是一种替代方案，可提升上述最大并发限制。
 APF 以更细粒度的方式对请求进行分类和隔离。
 它还引入了空间有限的排队机制，因此在非常短暂的突发情况下，API 服务器不会拒绝任何请求。
 通过使用公平排队技术从队列中分发请求，这样，
@@ -50,7 +50,7 @@ Fairness feature enabled.
 {{< /caution >}}
 -->
 {{< caution >}}
-属于“长时间运行”类型的请求（主要是 watch ）不受 API 优先级和公平性过滤器的约束。
+属于“长时间运行”类型的请求（主要是 watch）不受 API 优先级和公平性过滤器的约束。
 如果未启用 APF 特性，即便设置 `--max-requests-inflight` 标志，该类请求也不受约束。
 {{< /caution >}}
 
@@ -233,7 +233,7 @@ APF 特性附带推荐配置，该配置对实验场景应该足够；
   i.e. Kubelets, which must be able to contact the API server in order for
   workloads to be able to schedule on them.
 -->
-* `system` 优先级用于 `system:nodes` 组（即 Kubelets ）的请求；
+* `system` 优先级用于 `system:nodes` 组（即 Kubelets）的请求；
   kubelets 必须能连上 API 服务器，以便工作负载能够调度到其上。
 
 <!--
@@ -555,7 +555,7 @@ depends on the resource and your particular environment.
 FlowSchema 的 `distinguisherMethod.type` 字段决定了如何把与该模式匹配的请求分散到各个流中。
 可能是 `ByUser` ，在这种情况下，一个请求用户将无法饿死其他容量的用户；
 或者是 `ByNamespace` ，在这种情况下，一个名称空间中的资源请求将无法饿死其它名称空间的资源请求；
-或者它可以为空（或者可以完全省略 `distinguisherMethod` ），
+或者它可以为空（或者可以完全省略 `distinguisherMethod`），
 在这种情况下，与此 FlowSchema 匹配的请求将被视为单个流的一部分。
 资源和你的特定环境决定了如何选择正确一个 FlowSchema。
 
@@ -638,7 +638,7 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_rejected_requests_total` 是一个计数器向量，
   记录被拒绝的请求数量（自服务器启动以来累计值），
-  由标签 `flow_chema` （表示与请求匹配的 FlowSchema ），`priority_evel` 
+  由标签 `flow_chema`（表示与请求匹配的 FlowSchema），`priority_evel` 
   （表示分配给请该求的优先级）和 `reason` 来区分。
   `reason` 标签将具有以下值之一：
 
@@ -655,7 +655,7 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_dispatched_requests_total` 是一个计数器向量，
   记录开始执行的请求数量（自服务器启动以来的累积值），
-  由标签 `flow_schema` （表示与请求匹配的 FlowSchema ）和
+  由标签 `flow_schema`（表示与请求匹配的 FlowSchema）和
   `priority_level`（表示分配给该请求的优先级）来区分。
 
 <!--
@@ -685,8 +685,8 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_read_vs_write_request_count_samples` 是一个直方图向量，
   记录当前请求数量的观察值，
-  由标签 `phase` （取值为 `waiting` 和 `executing` ）和 `request_kind`
-  （取值 `mutating` 和 `readOnly` ）拆分。定期以高速率观察该值。
+  由标签 `phase`（取值为 `waiting` 和 `executing`）和 `request_kind`
+  （取值 `mutating` 和 `readOnly`）拆分。定期以高速率观察该值。
 
 <!--
 * `apiserver_flowcontrol_read_vs_write_request_count_watermarks` is a
@@ -701,8 +701,8 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_read_vs_write_request_count_watermarks` 是一个直方图向量，
   记录请求数量的高/低水位线，
-  由标签 `phase` （取值为 `waiting` 和 `executing` ）和 `request_kind`
-  （取值为 `mutating` 和 `readOnly` ）拆分；标签 `mark` 取值为 `high` 和 `low` 。
+  由标签 `phase`（取值为 `waiting` 和 `executing`）和 `request_kind`
+  （取值为 `mutating` 和 `readOnly`）拆分；标签 `mark` 取值为 `high` 和 `low` 。
   `apiserver_flowcontrol_read_vs_write_request_count_samples` 向量观察到有值新增，
   则该向量累积。这些水位线显示了样本值的范围。
 
@@ -735,7 +735,7 @@ poorly-behaved workloads that may be harming system health.
   rate.
 -->
 * `apiserver_flowcontrol_priority_level_request_count_samples` 是一个直方图向量，
-  记录当前请求的观测值，由标签 `phase` （取值为`waiting` 和 `executing`）和
+  记录当前请求的观测值，由标签 `phase`（取值为`waiting` 和 `executing`）和
   `priority_level` 进一步区分。
   每个直方图都会定期进行观察，直到相关类别的最后活动为止。观察频率高。
 
@@ -751,7 +751,7 @@ poorly-behaved workloads that may be harming system health.
   water marks show the range of values that occurred between samples.
 -->
 * `apiserver_flowcontrol_priority_level_request_count_watermarks` 是一个直方图向量，
-  记录请求数的高/低水位线，由标签 `phase` （取值为 `waiting` 和 `executing` ）和
+  记录请求数的高/低水位线，由标签 `phase`（取值为 `waiting` 和 `executing`）和
   `priority_level` 拆分；
   标签 `mark` 取值为 `high` 和 `low` 。
   `apiserver_flowcontrol_priority_level_request_count_samples` 向量观察到有值新增，
@@ -805,9 +805,9 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_request_wait_duration_seconds` 是一个直方图向量，
   记录请求排队的时间，
-  由标签 `flow_schema` （表示与请求匹配的 FlowSchema ），
-  `priority_level`  （表示分配该请求的优先级）
-  和 `execute` （表示请求是否开始执行）进一步区分。
+  由标签 `flow_schema`（表示与请求匹配的 FlowSchema ），
+  `priority_level`（表示分配该请求的优先级）
+  和 `execute`（表示请求是否开始执行）进一步区分。
   <!--
   Since each FlowSchema always assigns requests to a single
   PriorityLevelConfiguration, you can add the histograms for all the
@@ -829,8 +829,8 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_request_execution_seconds` 是一个直方图向量，
   记录请求实际执行需要花费的时间，
-  由标签 `flow_schema` （表示与请求匹配的 FlowSchema ）和
-  `priority_level` （表示分配给该请求的优先级）进一步区分。
+  由标签 `flow_schema`（表示与请求匹配的 FlowSchema ）和
+  `priority_level`（表示分配给该请求的优先级）进一步区分。
 
 <!--
 ### Debug endpoints

From a6ab6dca21919866beab7107ec8acd2f6fef049c Mon Sep 17 00:00:00 2001
From: Jai Govindani <jai@honestbank.com>
Date: Fri, 30 Apr 2021 13:21:19 +0700
Subject: [PATCH 686/788] docs(admission-controllers): update release status of
 TaintNodesByCondition

Signed-off-by: Jai Govindani <jai@honestbank.com>
---
 .../docs/reference/access-authn-authz/admission-controllers.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md
index 581c218755..324de2e0dd 100644
--- a/content/en/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md
@@ -789,7 +789,7 @@ for more detailed information.
 
 ### TaintNodesByCondition {#taintnodesbycondition}
 
-{{< feature-state for_k8s_version="v1.12" state="beta" >}}
+{{< feature-state for_k8s_version="v1.17" state="stable" >}}
 
 This admission controller {{< glossary_tooltip text="taints" term_id="taint" >}} newly created Nodes as `NotReady` and `NoSchedule`. That tainting avoids a race condition that could cause Pods to be scheduled on new Nodes before their taints were updated to accurately reflect their reported conditions.
 

From c4f1225b26d6b3d0ea0aae41156697c88be77d0f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Le=C3=A3o=20da=20Cruz?= <pedro.cruz@canonical.com>
Date: Fri, 30 Apr 2021 09:40:48 +0100
Subject: [PATCH 687/788] Adds COF to the list of operators frameworks

Adds the Charmed Operator Framework to #heading-writing-operator
---
 content/en/docs/concepts/extend-kubernetes/operator.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/concepts/extend-kubernetes/operator.md b/content/en/docs/concepts/extend-kubernetes/operator.md
index 323200ec3a..baf73909d7 100644
--- a/content/en/docs/concepts/extend-kubernetes/operator.md
+++ b/content/en/docs/concepts/extend-kubernetes/operator.md
@@ -113,6 +113,7 @@ Operator.
 
 {{% thirdparty-content %}}
 
+* [Charmed Operator Framework](https://juju.is/)
 * [kubebuilder](https://book.kubebuilder.io/)
 * [KUDO](https://kudo.dev/) (Kubernetes Universal Declarative Operator)
 * [Metacontroller](https://metacontroller.app/) along with WebHooks that

From f575864cdc345f26868023af91a32602a2ce99eb Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Fri, 30 Apr 2021 02:43:55 -0700
Subject: [PATCH 688/788] Correct Chinese translation in page
 persistent-volumes

---
 content/zh/docs/concepts/storage/persistent-volumes.md | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/content/zh/docs/concepts/storage/persistent-volumes.md b/content/zh/docs/concepts/storage/persistent-volumes.md
index 1160dd0e4a..739540c002 100644
--- a/content/zh/docs/concepts/storage/persistent-volumes.md
+++ b/content/zh/docs/concepts/storage/persistent-volumes.md
@@ -312,7 +312,7 @@ For volume plugins that support the `Delete` reclaim policy, deletion removes bo
 
 对于支持 `Delete` 回收策略的卷插件，删除动作会将 PersistentVolume 对象从
 Kubernetes 中移除，同时也会从外部基础设施（如 AWS EBS、GCE PD、Azure Disk 或
-Cinder 卷）中移除所关联的存储资产。 
+Cinder 卷）中移除所关联的存储资产。
 动态供应的卷会继承[其 StorageClass 中设置的回收策略](#reclaim-policy)，该策略默认
 为 `Delete`。
 管理员需要根据用户的期望来配置 StorageClass；否则 PV 卷被创建之后必须要被
@@ -726,7 +726,7 @@ Currently, storage size is the only resource that can be set or requested.  Futu
 一般而言，每个 PV 卷都有确定的存储容量。
 容量属性是使用 PV 对象的 `capacity` 属性来设置的。
 参考 Kubernetes
-[资源模型（Resource Model）](https://git.k8s.io/community/contributors/design-proposals/scheduling/resources.md) 
+[资源模型（Resource Model）](https://git.k8s.io/community/contributors/design-proposals/scheduling/resources.md)
 设计提案，了解 `capacity` 字段可以接受的单位。
 
 目前，存储大小是可以设置和请求的唯一资源。
@@ -1491,8 +1491,8 @@ and need persistent storage, it is recommended that you use the following patter
   config requiring PVCs).
 -->
 - 在你的工具链中，监测经过一段时间后仍未被绑定的 PVC 对象，要让用户知道这些对象，
-  因为这可能意味着集群没有动态存储支持（因而用户必须先创建一个匹配的 PV），或者
-  集群没有配置存储系统（因而用户无法配置需要 PVC 的工作负载配置）。 
+  因为这可能意味着集群不支持动态存储（因而用户必须先创建一个匹配的 PV），或者
+  集群没有配置存储系统（因而用户无法配置需要 PVC 的工作负载配置）。
 
 ## {{% heading "whatsnext" %}}
 
@@ -1519,4 +1519,3 @@ and need persistent storage, it is recommended that you use the following patter
 * [PersistentVolumeSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumespec-v1-core)
 * [PersistentVolumeClaim](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaim-v1-core)
 * [PersistentVolumeClaimSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaimspec-v1-core)
-

From 03a7aae773975d3d715159b33cf74ccbe920d81c Mon Sep 17 00:00:00 2001
From: Victor Palade <victor@cloudflavor.io>
Date: Fri, 30 Apr 2021 12:00:22 +0200
Subject: [PATCH 689/788] OWNERS_ALIASES: add pi-victor as part of
 sig-docs-en-owners.

As Docs RT lead, this is a request for approval rights for
1.22 release.

Signed-off-by: Victor Palade <victor@cloudflavor.io>
---
 OWNERS_ALIASES | 1 +
 1 file changed, 1 insertion(+)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index b958f84bac..042e2f4b15 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -27,6 +27,7 @@ aliases:
     - kbarnard10
     - kbhawkey
     - onlydole
+    - pi-victor
     - reylejano
     - savitharaghunathan
     - sftim

From 170304e2824d7f6fdfad2101ccc7e71bd904e9d4 Mon Sep 17 00:00:00 2001
From: Jai Govindani <jai@honestbank.com>
Date: Fri, 30 Apr 2021 21:43:56 +0700
Subject: [PATCH 690/788] docs(overview): add info on k8s abbreviation

Signed-off-by: Jai Govindani <jai@honestbank.com>
---
 content/en/docs/concepts/overview/what-is-kubernetes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/overview/what-is-kubernetes.md b/content/en/docs/concepts/overview/what-is-kubernetes.md
index b19c4155ce..1ace280139 100644
--- a/content/en/docs/concepts/overview/what-is-kubernetes.md
+++ b/content/en/docs/concepts/overview/what-is-kubernetes.md
@@ -21,7 +21,7 @@ This page is an overview of Kubernetes.
 <!-- body -->
 Kubernetes is a portable, extensible, open-source platform for managing containerized workloads and services, that facilitates both declarative configuration and automation. It has a large, rapidly growing ecosystem. Kubernetes services, support, and tools are widely available.
 
-The name Kubernetes originates from Greek, meaning helmsman or pilot. Google open-sourced the Kubernetes project in 2014. Kubernetes combines [over 15 years of Google's experience](/blog/2015/04/borg-predecessor-to-kubernetes/) running production workloads at scale with best-of-breed ideas and practices from the community.
+The name Kubernetes originates from Greek, meaning helmsman or pilot. K8s as an abbreviation results from counting the eight letters between the "K" and the "s". Google open-sourced the Kubernetes project in 2014. Kubernetes combines [over 15 years of Google's experience](/blog/2015/04/borg-predecessor-to-kubernetes/) running production workloads at scale with best-of-breed ideas and practices from the community.
 
 ## Going back in time
 

From cf43ee61f561abd5e243e38bc731b36383d6229b Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Fri, 30 Apr 2021 16:01:08 -0700
Subject: [PATCH 691/788] Add KubeCon 2021 banner, April 30 - May 7 2021

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 data/announcements/scheduled.yaml                     | 11 +++++++++++
 static/images/announcements/kubecon-eu-2021-white.svg |  1 +
 2 files changed, 12 insertions(+)
 create mode 100644 static/images/announcements/kubecon-eu-2021-white.svg

diff --git a/data/announcements/scheduled.yaml b/data/announcements/scheduled.yaml
index 1d5b330ac4..3515b11527 100644
--- a/data/announcements/scheduled.yaml
+++ b/data/announcements/scheduled.yaml
@@ -61,3 +61,14 @@ announcements:
     We stand in solidarity with the Black community.<br/>
     Racism is unacceptable.<br/>
     It conflicts with the [core values of the Kubernetes project](https://git.k8s.io/community/values.md) and our community does not tolerate it.
+
+- name: Kubecon 2021 EU
+  startTime: 2021-04-30T00:00:00 
+  endTime: 2021-05-07T00:00:00 
+  style: "background-image: linear-gradient(90deg, rgb(249, 145, 6) 0%, rgb(252, 29, 68) 100%)"
+  title: |
+    <img src="/images/announcements/kubecon-eu-2021-white.svg" style="float: right; height: 80px;" />
+    <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/">KubeCon + CloudNativeCon EU 2021</a> <em>virtual</em>.
+  message: |
+    4 days of incredible opportunities to collaborate, learn + share with the entire community!<br />
+    May 4 - May 7, 2021.
\ No newline at end of file
diff --git a/static/images/announcements/kubecon-eu-2021-white.svg b/static/images/announcements/kubecon-eu-2021-white.svg
new file mode 100644
index 0000000000..1aede5f4cc
--- /dev/null
+++ b/static/images/announcements/kubecon-eu-2021-white.svg
@@ -0,0 +1 @@
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 439 360"><defs><style>.cls-1,.cls-2{fill:#fff;}.cls-2{fill-rule:evenodd;}.cls-3{opacity:0.8;isolation:isolate;}.cls-4{clip-path:url(#clip-path);}.cls-5{clip-path:url(#clip-path-2);}.cls-6{clip-path:url(#clip-path-3);}.cls-7{clip-path:url(#clip-path-4);}</style><clipPath id="clip-path"><rect class="cls-1" x="169.35788" y="3.55559" width="0.69695" height="141.82998"/></clipPath><clipPath id="clip-path-2"><rect class="cls-1" x="341.22653" y="172.74096" width="88.16455" height="0.69695"/></clipPath><clipPath id="clip-path-3"><rect class="cls-1" x="313.55748" y="172.74096" width="118.06433" height="0.69695"/></clipPath><clipPath id="clip-path-4"><rect class="cls-1" x="5.85237" y="172.74096" width="118.06433" height="0.69695"/></clipPath></defs><path class="cls-1" d="M196.989,347.02043c-3.41084,1.02363-7.04029.02242-10.50448,1.42975-2.149.873-4.75716.58873-7.1501.89494a64.11282,64.11282,0,0,0-13.56292,2.77042c-1.73155.61653-3.828.13911-5.42493,1.46627l-1.41589.09772c-2.76809.57067-5.54815,1.08976-8.3,1.73018a14.88475,14.88475,0,0,1-5.46232.27709c-3.17384-.45016-6.15068-2.14308-6.60335-5.82642a15.45657,15.45657,0,0,1,.69678-3.2624c.6969-1.56309,1.7946-2.7756,3.82136-2.23895a27.53268,27.53268,0,0,0,17.69911-1.08143,19.00008,19.00008,0,0,1,4.47551-.64988c6.27787-.83005,12.49293-2.06249,18.745-3.00187,2.24859-.33785,4.41061-1.58377,6.79376-1.03665a.98927.98927,0,0,0,1.30014-.009l.18219.01421,1.19162-.43334c2.99557-.22855,5.97379-.88,8.99967-.3686-.12578.19947-.23751.56276-.37933.5749-6.58774.56349-13.16126,1.57262-19.64865,2.574-5.44276.84015-11.31195.8096-16.12563,3.61952,3.03886.72265,6.07823-1.29914,9.38828-.93266a14.55807,14.55807,0,0,0,6.5535-1.11255,5.12769,5.12769,0,0,1,1.86832-.36827,41.49925,41.49925,0,0,0,9.49812-.43591c2.30362-.447,4.85117.13074,7.05743-.52749,2.79178-.83292,5.7173-.23208,8.37828-1.19553,2.695-.97576,5.47625-.79195,8.21515-1.05667,3.67871-.35554,7.54133.17063,11.04447-.74946,5.76546-1.51425,11.5608.07239,17.33484-1.04195,3.70536-.71511,7.70673.12255,11.57632.2336,5.34841.15352,10.70558.14327,16.04409.45667a72.49253,72.49253,0,0,1,13.49261,2.36457c-.04376-.62974-.08785-1.06416-.58737-1.258-3.05609-1.186-6.35233-1.33935-9.5011-2.26919-4.19785-1.23967-8.68994-1.1356-13.104-1.24663-4.26638-.10732-8.51685-.743-12.78378-.96383-3.46-.17911-6.88391.63551-10.39455.48773-1.38835-.05845-3.04136.55974-4.64132.60485-2.53609.07151-5.13172-.38076-7.55129-.17717-3.42769.2884-6.77307,1.46223-10.33074,1.48469-4.33589.02735-8.60885,1.17524-12.972,1.04505-.78085-.02331-1.61419,1.10692-2.34633-.08416.36457-.86558,1.02972-.92051,1.91353-1.03184,4.28587-.5399,8.60283-1.0607,12.87867-1.37861,4.36755-.3247,8.75829-.6442,13.13515-.96521a208.26962,208.26962,0,0,1,22.06019-.65486c5.13852.16688,10.32171.09754,15.463.37786,6.55817.35759,12.92684,2.02133,19.32161,3.47445,2.75924.627,5.41258,1.69324,6.83647,3.877,2.31643,3.55273,5.58645,6.89976,4.54632,11.89889-.32215,1.54821-1.72973,2.134-2.2025,3.45006a1.61484,1.61484,0,0,1-1.32136-.01256c-.76488-.55246-.48541-1.34879-.23124-2.12571.95688-2.92475.45933-5.12409-1.8158-6.25017-1.48455-.73479-2.91682-1.8708-4.45425-2.15408-3.12182-.57519-6.07609-1.86559-9.33861-1.89614-4.07447-.03811-7.90928-1.81483-11.99956-1.95147-8.14893-.27224-16.334-.98946-24.43541.05476-6.75825.87111-13.59857-.07053-20.25894,1.13846-6.03661,1.09575-12.18183,1.07862-18.21626,2.34362C202.08254,346.50651,199.45513,346.47536,196.989,347.02043Zm42.76665-7.2924c-1.67391-.32844-3.35384-.76892-5.0468.22283C236.51383,341.04313,238.138,340.4457,239.75568,339.728Zm-27.62988,2.188c-2.231-1.31868-3.38289-.015-5.35144.83443Zm56.48487-1.78308c-.98907-.61855-1.95063-1.50125-3.2575-.58515C266.57186,339.22621,267.40112,340.41761,268.61067,340.133Z"/><g id="_45W0Vf" data-name="45W0Vf"><path class="cls-1" d="M51.00592,308.46515c1.45962-1.25591,1.81008-3.0354,2.25182-4.77159a17.48359,17.48359,0,0,1,.53169-2.02339c.20862-.53806.24423-1.575,1.01955-1.32531.796.2563.12027,1.10187.08259,1.68931-.0207.32265-.41167.60343-.05779,1.0411.95187-1.18093.55835-2.89555,1.66046-3.96876.27968-.27234.419-.81743.90062-.65178.61289.21079.42238.78665.26418,1.19571a14.24942,14.24942,0,0,0-1.17449,5.02663,111.08571,111.08571,0,0,0,3.83807-12.99662c-.47818.24975-.62844,1.12089-1.3037.705-.47952-.29529-.375-.81317-.2507-1.26847.3674-1.34534.72848-2.69339,1.145-4.02381.15257-.48739.43994-1.12923,1.08578-.78717.51374.27208.21941.81214-.037,1.22342-.27891.44729-.58863.89564-.09683,1.52469,5.065-13.019,11.10225-25.54877,16.3704-38.43468a39.60946,39.60946,0,0,0-5.69882,7.86318,2.00881,2.00881,0,0,0-.24461,1.67518c.1751.4668.20383.997-.29089,1.23989a1.64027,1.64027,0,0,0-1.02176,2.23964c.05609.16667-.10679.58539-.21.60034-1.37161.19868-1.70234,1.61256-2.66159,2.38986-.41241-.85279.03868-1.45437.24549-2.08267,3.70633-11.25957,9.42513-21.66912,13.80093-32.647,1.05723-2.65234,4.5021-5.54191,8.36808-4.07025,3.76755,1.43418,5.56032,4.40051,2.715,8.82328a115.34927,115.34927,0,0,0-6.23989,10.29109q-6.32859,12.54087-12.22056,25.29517a105.58306,105.58306,0,0,0-4.53968,10.71946c-1.27676,3.80794-2.83467,7.54486-3.8961,11.46849-1.349,4.98659-2.48454,10.04138-3.99826,14.98886-.273.89242-1.01725,2.22479-.161,2.75078.90821.55791,1.603-.81354,2.32617-1.41731a288.3631,288.3631,0,0,0,22.4106-20.24279,254.64024,254.64024,0,0,0,24.19365-28.66363c4.8754-6.78363,10.0803-13.39819,13.32157-21.224.2671-.64489.60895-1.26007.8559-1.91186,1.43332-3.78316,1.2702-7.4003-1.16314-10.77144-.60474-.83781-1.52876-1.70634-.70646-2.7854a2.329,2.329,0,0,1,3.04774-.95353.71861.71861,0,0,0,.50523.09041,4.18951,4.18951,0,0,1,4.82284.89972,10.4319,10.4319,0,0,1,3.68553,6.169,11.57959,11.57959,0,0,1-.11917,4.16388c-1.16772,5.899-4.22022,10.97763-7.29915,15.956a195.81531,195.81531,0,0,1-14.06789,19.47642c-3.69867,4.60592-7.26782,9.3376-11.117,13.81479a202.595,202.595,0,0,1-30.92828,29.657A17.80015,17.80015,0,0,1,59.82926,318.277a6.79019,6.79019,0,0,1-4.10144-1.52249,10.54092,10.54092,0,0,1-3.65235-6.15507,6.75784,6.75784,0,0,0-1.06955-1.78488Zm75.19171-61.6889a452.00172,452.00172,0,0,1-31.761,41.04174A218.04345,218.04345,0,0,0,126.19763,246.77625Z"/><path class="cls-1" d="M275.67665,298.63441a9.42507,9.42507,0,0,0,6.80478-3.50881c2.70661-3.72872,6.13867-6.97436,7.87513-11.39237a7.98377,7.98377,0,0,1,1.67558-2.42662c2.5774-2.73282,5.15171-5.47464,7.85252-8.08332a45.60543,45.60543,0,0,1,9.41945-6.88689c2.59549-1.45711,7.47067-.65819,8.98043,2.90576.18448.43553.31765.89758.84922,1.01979,1.83212.42122,2.80564,2.10138,4.37884,2.97675,1.98071,1.10212,2.58022,4.88322,1.619,6.96258-2.02626,4.38329-4.00351,8.78919-6.01075,13.1813-1.49882,3.27963-3.01611,6.55092-4.2008,9.96278-.2065.59471-.64357,1.22194-.182,1.81541.51372.66059,1.28155.42832,1.94616.25087a25.52705,25.52705,0,0,0,6.16283-2.84574c1.71123-.99425,3.36734-2.09155,5.123-2.99772.86668-.44734,1.86394-1.40573,2.89505-.1528.17514.21282.42218.12922.63749.02246.84459-.41882,1.48528-1.23523,2.56109.04982.46451.55484,1.62342-.40668,1.61365-1.58849-.01731-2.09152-.3733-4.23089.22626-6.26074,2.15844-7.30754,4.25942-14.65185,7.968-21.37456,1.26867-2.29973,2.12188-4.81692,3.53045-7.01127a135.24415,135.24415,0,0,1,8.9094-12.84435c1.68471-2.05828,3.43914-4.109,4.96349-6.32777.82636-1.2028,2.4843-1.71012,3.17889-3.156-.24311-.32344-.94586.27446-.93856-.37817a1.49713,1.49713,0,0,1,1.20678-1.3471,5.31784,5.31784,0,0,0,3.6749-3.236c.59344-1.86031,1.85658-3.02022,2.95805-4.40056a20.87655,20.87655,0,0,1,3.02559-2.89059c2.7012-2.26261,5.92091-2.74368,8.56523-1.27171,2.30524,1.28322,3.95107,5.22985,3.42349,8.27791a22.129,22.129,0,0,1-2.291,6.19271c-6.32376,12.49714-15.02024,23.23391-24.58261,33.33827a53.12749,53.12749,0,0,1-5.51811,5.58349c-1.38936,1.09057-2.82361,2.08532-4.771,1.36485-.8673-.32087-1.0988.43946-1.3326,1.01933a48.38371,48.38371,0,0,0-1.89741,5.80172c-1.10667,4.20806-2.27667,8.38188-2.42332,12.79216-.08481,2.55055,1.29761,4.37638,3.87469,4.54226a20.76549,20.76549,0,0,0,10.40685-2.467,66.90788,66.90788,0,0,0,13.66227-9.33681c.69937-.58121,1.57975-2.01988,2.5422-.85025.88,1.06946-.31089,1.95806-1.18109,2.683-2.37519,1.97891-4.94534,3.68811-7.46771,5.46421a3.37885,3.37885,0,0,0-1.76678,2.3014,7.91048,7.91048,0,0,0,3.77408-1.4013c2.82539-1.983,5.84431-3.86821,7.65451-7.00414.17-.29443.374-.73292.76784-.5201.55977.30251.23743.81935.08579,1.23245a22.21338,22.21338,0,0,1-11.24121,12.289,32.44633,32.44633,0,0,0-4.34323,2.91824c-3.81223,2.82213-8.13255,3.28037-12.64123,2.78676a5.75149,5.75149,0,0,1-4.764-3.12453c-1.52825-2.96023-4.037-5.25067-5.59481-8.18925-.63056-1.18946-1.09138-.98015-2.00447-.10187-4.4978,4.32641-9.17463,8.3187-15.26145,10.48355-3.80773,1.35426-6.77324.22337-9.218-2.195a17.05065,17.05065,0,0,1-4.173-6.73772,10.29884,10.29884,0,0,1,.42124-7.186c-.98589.17394-1.29577.8385-1.69692,1.31063a140.27706,140.27706,0,0,1-12.52383,13.10923c-5.95029,5.40572-11.1715,1.89442-13.51436-4.06236-1.17467-2.9866-.92944-3.08305-.15225-5.048-.23677-.21157-.46159-.05907-.6013.093-2.71753,2.95729-6.311,4.75147-9.46362,7.12959a24.04,24.04,0,0,1-5.7079,2.991c-4.79666,1.90548-8.22211.72943-11.52808-3.22957-2.83991-3.40088-3.37251-7.23084-3.29378-11.35658.00947-.49618.29428-1.14875-.30651-1.41823-.59337-.26614-.91.36643-1.27357.7028-5.64395,5.22153-11.53227,10.159-17.5073,14.992-2.977,2.408-6.06113,2.62891-8.24835.58721a18.443,18.443,0,0,1-3.07135-4.63432c-.63889-1.12543-.87278-1.00236-1.81709-.27328-3.29021,2.54032-6.4363,5.3803-10.79447,6.07261a12.57425,12.57425,0,0,1-13.477-6.54862c-1.38953-2.5409-3.31228-4.82287-3.89348-7.76312-.82068-4.15168.18222-8.14772,1.47178-11.993a125.18718,125.18718,0,0,1,9.21214-19.943,107.45974,107.45974,0,0,1,7.3447-12.28023c.35411-.48353.955-1.05008.55082-1.71079-.39069-.63872-1.17162-.41989-1.77849-.37-2.20117.18112-4.394.46617-6.59569.63762a15.38756,15.38756,0,0,1-4.51505-.27723,6.22185,6.22185,0,0,1-4.86521-6.03819c.01956-.66928.35417-1.31967,1.06813-.758,3.30479,2.6,7.13114,1.5035,10.76084,1.53892,2.49482.02434,4.99686-.27434,7.49534-.00263a3.607,3.607,0,0,0,3.415-1.60174c2.7387-3.33808,4.10935-7.40564,6.14865-11.11225a32.31266,32.31266,0,0,1,4.32778-6.5334c1.73367-1.87839,2.26837-4.43291,3.85-6.40255,1.71867-2.14035,3.38511-2.0057,5.86511-.83126,2.00391.949,2.27353,2.62431,3.07773,4.07091,1.05347,1.895.58638,3.65509-.856,5.43266-2.74593,3.38395-5.19382,7.00831-7.81263,10.49746-1.28085,1.70654-2.22451,3.7054-4.16773,4.86333-.67254.40075-.47612.87613.15275,1.1437a2.87128,2.87128,0,0,0,1.18041.2416c4.13513-.14065,8.2538.2625,12.38159.34415a6.11159,6.11159,0,0,0,1.38949-.08833c2.16536-.46387,3.44162.28367,4.05834,2.43526.09574.33411.125.68674.19754,1.02815.56808,2.67515.20261,2.86439-2.43485,2.57175a84.4177,84.4177,0,0,0-10.72048-.78954c-3.23762.05377-6.482-.06273-9.717-.228a2.011,2.011,0,0,0-2.02488.97783,71.281,71.281,0,0,1-5.59882,7.31987c-.93905,1.05818-2.12737,2.33646-1.77051,4.10235.07238.35815-.053.56386-.43406.56315-.30218-.00056-.74673.04576-.72679.3266.18364,2.58673-2.92356,3.24817-3.2267,5.56393-.04893.37383-.34873.70159-.06954,1.10366a.91807.91807,0,0,1-.19071,1.26228c-2.17833,2.14452-2.9521,5.15862-4.70282,7.568a1.20605,1.20605,0,0,0-.30426,1.281,4.5107,4.5107,0,0,1-1.17874,5.46416,1.85265,1.85265,0,0,0-.708,1.90618c.26415,2.64511-.81283,5.14234-1.09286,7.74323a44.52619,44.52619,0,0,0-.268,5.048q.02505,4.10187,4.15263,3.49332a15.706,15.706,0,0,0,4.31917-1.35436,82.81455,82.81455,0,0,0,14.22331-8.48245,15.08743,15.08743,0,0,0,4.50565-6.10178,17.42158,17.42158,0,0,1,2.24785-3.65171,13.593,13.593,0,0,0,2.03878-3.4405,58.63023,58.63023,0,0,1,7.61679-12.90741c1.96593-2.66035,4.606-3.07329,7.316-1.21214,2.13943,1.46931,2.5906,4.82741.88012,7.53856a44.35,44.35,0,0,1-6.75609,8.65675c-4.14538,3.93679-6.58644,8.9794-9.38772,13.79743-.81807,1.407-1.50962,2.8876-2.25969,4.3342-.15593.30072-.49087.62607-.25173.94311.29586.39223.757.20733,1.12078.03237a11.9908,11.9908,0,0,0,1.36158-.77907,42.40986,42.40986,0,0,0,7.69454-6.28782c5.02763-5.32806,10.236-10.47925,15.17049-15.90265a174.635,174.635,0,0,1,13.60264-13.6849c1.16587-1.02672,2.3922-1.91453,4.08105-1.267.4355.167,1.13876.433,1.03495.80814-.4705,1.7001.73176,1.58594,1.7478,1.96773,1.28475.48277,1.59677,1.77628,1.68631,3.02559a9.53,9.53,0,0,1-2.06656,6.83768,152.00422,152.00422,0,0,0-10.93521,15.96083,73.38283,73.38283,0,0,0-3.34354,6.9092c-.235.50591-.57825,1.12583-.11874,1.64431.5001.56427,1.2212.34709,1.8072.15362a28.07815,28.07815,0,0,0,5.85823-2.69814c3.8218-2.33775,7.821-4.388,11.44848-7.04238.41143-.301.91415-.78958,1.39527-.408.59326.47061-.10929.75308-.35786,1.08674a.45893.45893,0,0,0-.06724.302C277.97727,297.32172,276.14963,297.67677,275.67665,298.63441Zm39.94545-24.33965a7.19639,7.19639,0,0,0-3.9015,1.49925c-4.7764,3.09883-8.69193,7.125-12.597,11.22708a93.20587,93.20587,0,0,0-11.97443,15.62267,20.67422,20.67422,0,0,0-1.501,3.14244c-.21565.539-.81156,1.265-.09617,1.72931.68944.44742,1.37092-.12733,1.83178-.63227,2.9996-3.28621,6.82795-5.71522,9.49927-9.3623a12.63585,12.63585,0,0,1,3.82321-3.03641c1.26519-.76853,1.249-3.44445,2.6697-4.09687,1.75942-.80794,1.94746-2.58217,3.15555-3.51257,1.65984-1.27831,2.25995-3.79764,4.75834-4.06681.06042-.00651.16429-.20479.143-.28613-.3363-1.28291.23291-1.539,1.37523-1.31234.25723.051.50871-.37784.41354-.65673-.344-1.008.37064-1.49659.936-2.06106a9.30977,9.30977,0,0,0,1.82911-2.937C316.40984,274.60382,316.24082,274.24616,315.6221,274.29476Zm35.39882,1.65825a4.46279,4.46279,0,0,0,1.73781-1.4501c2.299-2.54885,4.56224-5.12991,6.86122-7.67876a133.64362,133.64362,0,0,0,20.51877-29.18c.3353-.6644,1.20282-1.55845.41627-2.12015-.57633-.41161-1.23389.627-1.78137,1.10936-4.79037,4.22051-8.292,9.55266-12.32037,14.42538a88.157,88.157,0,0,0-5.913,8.47062c-3.02635,4.68663-5.82375,9.51372-8.8238,14.21358A3.16672,3.16672,0,0,0,351.02092,275.953ZM237.99707,301.46792a77.78628,77.78628,0,0,0,20.266-19.10711c-.69594-.00692-1.0384.4744-1.43785.85217-2.695,2.54875-5.2648,5.24573-8.103,7.62268-2.64653,2.21648-4.54,5.47784-8.27466,6.27038a.34567.34567,0,0,0-.21337.25269C240.30913,299.17105,238.835,300.13759,237.99707,301.46792Zm-46.837-9.8311c4.23259-13.54191,11.30918-25.6562,18.843-37.541A121.70163,121.70163,0,0,0,191.16008,291.63682Zm158.55906-25.61847c5.84849-9.99482,12.97869-19.05695,20.51148-27.92445-1.23837-.0643-2.27223.01574-2.60931,1.06065a13.20813,13.20813,0,0,1-2.75748,4.18822c-3.13342,3.83118-6.02572,7.83633-8.75924,11.95439A91.11717,91.11717,0,0,0,349.71914,266.01835Z"/><path class="cls-1" d="M173.41483,270.121c1.83306-1.28634,3.67039-2.56666,5.498-3.86069a20.85776,20.85776,0,0,1,6.08341-3.36563c1.69952-.49513,3.43329-.85254,4.81551.80583a2.0333,2.0333,0,0,0,.76238.39115c2.05054.88943,2.7222,2.09861,2.06418,4.30071-1.29408,4.33079-3.41836,8.15966-7.21953,10.83006a33.76771,33.76771,0,0,1-3.83544,2.41424c-.5726.29641-1.5174,1.40165-2.03839-.22187-.0378-.11777-.63344-.05461-.96947-.07908-.42391-.03087-.94063.54543-1.24711-.04653-.22442-.43348.13745-.88862.36854-1.29048,1.41834-2.46636,3.45122-4.55477,4.47159-7.26553.15679-.41653.56611-.75211.40528-1.35689a60.46514,60.46514,0,0,0-9.50828,7.03538,86.75217,86.75217,0,0,0-11.99858,12.64853,9.35,9.35,0,0,1-3.26616,3.0912,2.07678,2.07678,0,0,0-.73262.71917c-2.70394,4.07153-5.41789,8.1368-8.07411,12.2394a13.70707,13.70707,0,0,0-2.23664,5.26494,5.42329,5.42329,0,0,1-1.30206,2.4458c-.7278.90031-1.4272.99133-1.92071-.24262-.10073-.25186.02661-.73711-.32415-.72376-2.16322.08228-2.50331-1.82109-3.38226-3.09213-.49466-.71529-.91214-.82171-1.51927-.243-3.10978,2.96443-7.39154,3.39114-11.1272,4.92745-3.80941,1.56663-8.94219-1.11621-10.69785-4.822-.39948-.8432-.6951-1.74259-1.87575-1.80372-.45763-.02369-.62561-.48121-.7478-.87582a13.85826,13.85826,0,0,1,.11912-9.86424,206.91031,206.91031,0,0,1,13.76962-26.23577,31.32063,31.32063,0,0,0,2.2763-4.32025,3.45779,3.45779,0,0,1,4.53095-1.97262c3.725,1.30556,5.74077,6.9309,3.554,10.2545-4.09207,6.2194-8.47352,12.26856-12.03151,18.81634-1.86843,3.43847-4.075,6.807-4.469,10.88134a2.87623,2.87623,0,0,1-.15372.49707c-.19575.67234-1.21511,1.23344-.5145,2.00466.64076.70533,1.5394.25348,2.31174.06559a69.79528,69.79528,0,0,0,18.4043-7.843,3.78129,3.78129,0,0,0,1.427-1.71551c1.49945-2.97211,3.48651-5.63725,5.25868-8.43875,3.42035-5.407,6.55949-10.99212,9.986-16.3951a92.74924,92.74924,0,0,0,5.45494-9.53292c1.22062-2.54611,2.96935-3.346,5.71563-2.90116a5.489,5.489,0,0,1,4.85838,4.766C174.60123,267.50262,173.5092,268.57978,173.41483,270.121Zm-18.58964,22.94058c-.5009-.05845-.74885.2849-.9812.59523-3.13489,4.187-5.67942,8.75321-8.44241,13.179-.252.40377-.46486.95429.0242,1.24909.69675.42.90071-.31253,1.09972-.728a35.30477,35.30477,0,0,1,2.84114-4.97764c1.69021-2.42613,3.2996-4.90975,4.89352-7.40081C154.60574,294.43837,155.17342,293.88552,154.82519,293.06159Zm-7.11082,3.59627c3.80616-4.38522,6.24575-9.63557,9.17962-14.573A88.30192,88.30192,0,0,0,147.71437,296.65786Zm-24.58385-10.14712a55.29379,55.29379,0,0,0-6.60354,14.77964,1.16913,1.16913,0,0,0,.69137,1.59616C118.19257,296.97971,120.61725,291.75456,123.13052,286.51074Z"/><path class="cls-1" d="M146.24173,237.84934c3.11436.06795,7.05929,3.41353,7.519,6.17525a3.84046,3.84046,0,0,1-1.23842,3.30291q-3.60093,3.8988-7.2661,7.73812a3.23115,3.23115,0,0,1-4.52771.609,5.88149,5.88149,0,0,1-2.68843-5.928A20.33727,20.33727,0,0,1,142.88092,239.69,5.42909,5.42909,0,0,1,146.24173,237.84934Z"/><path class="cls-1" d="M60.68937,283.84893c1.53069-3.32934,1.8244-7.388,3.96575-10.78335.30487-.4834.72488-1.10093,1.35937-.834.78808.33154.27747.99865.08677,1.48839q-2.07432,5.32691-4.20445,10.63192c-.14727.36645-.14716,1.056-.824.8491C60.60582,285.0582,60.71809,284.53775,60.68937,283.84893Z"/></g><g id="SVGID"><path class="cls-1" d="M6.27084,172.741H94.43542v.69695H6.27084Z"/></g><rect class="cls-1" x="6.27084" y="172.74096" width="88.16458" height="0.69695"/><path class="cls-1" d="M126.84374,124.75574c.76665-.20909,1.67268-.41818,2.85751-.62725a20.63523,20.63523,0,0,1,3.62415-.27878,8.385,8.385,0,0,1,3.206.48786,4.89985,4.89985,0,0,1,2.02116,1.46361,5.51526,5.51526,0,0,1,1.04543,2.23025,12.34008,12.34008,0,0,1,.34848,2.85751v8.64222H135.695v-8.15435a5.81912,5.81912,0,0,0-.55756-2.92721,2.28169,2.28169,0,0,0-2.09086-.83634,4.93717,4.93717,0,0,0-.97573.0697c-.34848,0-.62726.0697-.906.0697v11.77851h-4.32111V124.75574Zm-7.94526,7.03923a5.79054,5.79054,0,0,0-.76666-3.13629,2.9294,2.9294,0,0,0-4.59989,0,5.23363,5.23363,0,0,0-.83634,3.13629,5.61676,5.61676,0,0,0,.83634,3.206,2.82473,2.82473,0,0,0,4.59989,0,6.05346,6.05346,0,0,0,.76666-3.206m4.3908,0a9.79574,9.79574,0,0,1-.48786,3.27568,7.45909,7.45909,0,0,1-1.5333,2.57872,6.97455,6.97455,0,0,1-5.43623,2.23025,8.57724,8.57724,0,0,1-3.06659-.55756,6.99555,6.99555,0,0,1-2.36964-1.67269,7.24965,7.24965,0,0,1-1.53329-2.57872,9.90092,9.90092,0,0,1,0-6.55136,7.58807,7.58807,0,0,1,1.53329-2.509,6.79918,6.79918,0,0,1,2.36964-1.603,7.17456,7.17456,0,0,1,2.9969-.55756,8.195,8.195,0,0,1,2.9969.55756,7.90345,7.90345,0,0,1,2.36964,1.603,7.5879,7.5879,0,0,1,1.53329,2.509,8.31685,8.31685,0,0,1,.62725,3.27568M99.802,139.87963c-3.27567,0-5.78471-.906-7.45739-2.71811-1.74238-1.81208-2.57873-4.39081-2.57873-7.73619a12.72594,12.72594,0,0,1,.76666-4.46049,9.00781,9.00781,0,0,1,5.43623-5.29685,11.329,11.329,0,0,1,4.112-.697,11.74839,11.74839,0,0,1,2.3.20909c.697.13938,1.32421.27877,1.81208.41817a13.71415,13.71415,0,0,1,1.32421.48787,2.49521,2.49521,0,0,1,.76665.41817l-1.32421,3.62416a8.72664,8.72664,0,0,0-2.16055-.83634,11.2896,11.2896,0,0,0-2.78782-.34848,6.475,6.475,0,0,0-2.02116.34848,4.1695,4.1695,0,0,0-1.74238,1.11512,6.72721,6.72721,0,0,0-1.25452,1.95148,9.17961,9.17961,0,0,0-.48786,2.9272,10.09328,10.09328,0,0,0,.27877,2.57872,6.43165,6.43165,0,0,0,.97573,2.09086,5.24791,5.24791,0,0,0,1.81209,1.39391,6.20074,6.20074,0,0,0,2.64842.48786,12.61062,12.61062,0,0,0,1.74238-.13939,7.029,7.029,0,0,0,1.39391-.27877,9.11642,9.11642,0,0,0,1.04543-.34848,4.26349,4.26349,0,0,1,.83634-.34848l1.25452,3.62416a8.49809,8.49809,0,0,1-2.71811,1.04543,13.4654,13.4654,0,0,1-3.97263.48786m-17.21474-9.54825a2.79649,2.79649,0,0,0-.20909-1.04543,3.75521,3.75521,0,0,0-.48787-.906,2.78876,2.78876,0,0,0-.83634-.697,3.32907,3.32907,0,0,0-1.25452-.27877,2.38681,2.38681,0,0,0-1.25452.27877,1.90272,1.90272,0,0,0-.83634.62726,3.26,3.26,0,0,0-.55756.97573,5.22055,5.22055,0,0,0-.27878,1.11513h5.715Zm-10.10583,1.603a9.50513,9.50513,0,0,1,.62726-3.55446,6.6059,6.6059,0,0,1,1.67269-2.509,7.00048,7.00048,0,0,1,2.3-1.53329,7.47352,7.47352,0,0,1,2.71812-.48787,6.77744,6.77744,0,0,1,5.15745,1.95147q1.88176,1.98633,1.88177,5.8544v.83634c0,.27878-.0697.55757-.0697.76666h-9.827a2.59074,2.59074,0,0,0,1.25451,2.09086,5.36526,5.36526,0,0,0,2.9272.76665,12.27235,12.27235,0,0,0,2.3-.20909,8.74193,8.74193,0,0,0,1.88177-.55756l.55757,3.48476a6.22379,6.22379,0,0,1-.906.34848,7.40279,7.40279,0,0,1-1.32422.27878c-.48786.0697-.97573.13938-1.53329.20908a12.87782,12.87782,0,0,1-1.603.0697,9.01045,9.01045,0,0,1-3.55446-.62725,6.60584,6.60584,0,0,1-2.509-1.67268,5.69981,5.69981,0,0,1-1.46361-2.509,7.95567,7.95567,0,0,1-.48786-2.9969m-2.85751-.0697a9.7808,9.7808,0,0,1-.55756,3.27568,7.58783,7.58783,0,0,1-1.5333,2.509,6.74117,6.74117,0,0,1-2.509,1.603,9.89266,9.89266,0,0,1-3.34537.55756,14.58553,14.58553,0,0,1-1.67269-.0697l-1.67269-.20908a12.86622,12.86622,0,0,1-1.603-.27878c-.48786-.13939-.97573-.20909-1.32421-.34848V117.57714l4.32111-.697V124.477a9.87007,9.87007,0,0,1,1.53329-.48786,6.5136,6.5136,0,0,1,1.67269-.13939,7.19987,7.19987,0,0,1,2.85751.55756,5.26947,5.26947,0,0,1,2.09086,1.603,7.07557,7.07557,0,0,1,1.25452,2.509,10.21788,10.21788,0,0,1,.48786,3.34538m-4.3908-.13939c0-2.78781-1.04543-4.18172-3.0666-4.18172a8.542,8.542,0,0,0-1.32421.13939,8.11465,8.11465,0,0,0-1.04543.41818v7.87557a2.8714,2.8714,0,0,0,.83634.0697c.34848,0,.697.0697,1.04543.0697a3.10284,3.10284,0,0,0,2.64842-1.18482,5.46668,5.46668,0,0,0,.906-3.206m-14.07846,7.24831c-.76664.20909-1.67268.41818-2.8575.62726a20.6363,20.6363,0,0,1-3.62416.27877,8.385,8.385,0,0,1-3.206-.48786,4.89995,4.89995,0,0,1-2.02117-1.46361,5.989,5.989,0,0,1-1.04543-2.23025,11.87936,11.87936,0,0,1-.34847-2.85751V124.3376h4.25141v7.94526a6.32615,6.32615,0,0,0,.55757,2.9969,2.16134,2.16134,0,0,0,2.09085.906,4.93727,4.93727,0,0,0,.97574-.0697c.34848,0,.62726-.0697.906-.0697V124.2679h4.32111v14.70571Zm-19.93286.48787c-.41817-.62726-.906-1.39391-1.4636-2.16056a26.10837,26.10837,0,0,0-1.81207-2.29995c-.62726-.76665-1.32422-1.4636-2.02117-2.23025a25.46151,25.46151,0,0,0-2.09086-1.88177v8.50283H19.30386V119.31954h4.5302v7.59678c1.18482-1.25452,2.36964-2.509,3.55446-3.90294,1.18482-1.32421,2.29995-2.57873,3.34538-3.69386h5.36653c-1.3939,1.603-2.71811,3.206-4.112,4.66959-1.39391,1.53329-2.85751,2.9969-4.3908,4.53019a37.66691,37.66691,0,0,1,4.66958,4.73929,61.71207,61.71207,0,0,1,4.32111,6.06349H31.22176Z"/><path class="cls-2" d="M67.46333,50.809l-2.509.55757c0-.34848-.0697-.697-.0697-1.04543a14.43237,14.43237,0,0,1,2.09086-7.5271l4.87867,4.32111a.96237.96237,0,0,0,.27879.20909,7.94775,7.94775,0,0,0-.55757,2.29994c-.13939.0697-.34848.0697-.48786.13939ZM76.94189,36.0336v6.83014a6.04246,6.04246,0,0,0-1.88177.97574c-.20909-.13939-.41817-.34848-.62726-.48786l-4.94837-3.48477a13.74931,13.74931,0,0,1,7.4574-3.83324M43.00027,51.78475c2.36964-10.38461,4.39081-19.16621,6.76045-29.55082,1.04543-4.66958,1.74238-5.9241,5.99379-8.36344,5.85441-3.41507,10.24521-5.8544,16.51779-9.47856,3.90294-2.23025,4.66959-2.09086,4.66959,2.71812V31.22463a18.84113,18.84113,0,0,0-11.43,5.78471L63.421,35.54574a1.00737,1.00737,0,0,1-.48787-.697A3.39456,3.39456,0,0,0,61.818,33.17609a2.28033,2.28033,0,0,0-2.85751,3.55446,2.41493,2.41493,0,0,0,1.11512.55757c.27879.06969.55757.06969.83635.13939a1.722,1.722,0,0,1,.62725.27878l1.95148,1.74238A19.08151,19.08151,0,0,0,60.215,50.18175c0,.697.06969,1.39391.13939,2.09086l-4.25142.906a4.28691,4.28691,0,0,0-.906.0697l-.62726.20909c-2.78781.55756-5.57562,1.18481-8.43313,1.81207-3.83324.906-3.97263.13939-3.13629-3.48476m38.89-8.921V36.0336a14.65542,14.65542,0,0,1,7.4574,3.76355l-5.36654,3.83324c-.06969.0697-.13939.13939-.20909.13939a7.745,7.745,0,0,0-1.88177-.906m11.98759,8.015L87.1871,49.34541a6.59927,6.59927,0,0,0-.55757-2.09086c.0697-.0697.13939-.13939.20909-.13939L91.787,42.72435a14.56211,14.56211,0,0,1,2.16056,7.59679,1.3586,1.3586,0,0,0-.0697.55757M85.16594,14.00988c3.62415,1.74239,6.20288,2.9969,9.827,4.73928,5.01806,2.43934,10.03612,4.87868,15.12388,7.24832,1.25452,5.43623,2.509,10.87246,3.69386,16.3087.76665,3.27568,1.11513,5.01806,1.88177,8.22405,1.18482,5.08776,1.04543,5.50593-4.18172,4.32111l-12.89363-2.9272a13.42848,13.42848,0,0,0,.0697-1.67269,18.68285,18.68285,0,0,0-3.34538-10.80278L97.15354,37.776a1.54711,1.54711,0,0,1,.76665-.34847,3.64775,3.64775,0,0,0,1.88177-.697,2.28033,2.28033,0,1,0-2.85751-3.55446h0a2.83777,2.83777,0,0,0-.83634.97574c-.13939.27878-.20909.48787-.34848.76665a1.08387,1.08387,0,0,1-.41817.55756l-2.09086,1.4636a19.02968,19.02968,0,0,0-11.43-5.78471V16.44922c.06969-3.41507.34847-3.83324,3.34537-2.43934m-4.4605,43.908a7.71941,7.71941,0,0,1-1.32421.13939,7.57516,7.57516,0,0,1-1.25452-.06969l-.20909.41817L74.851,64.05112a14.47214,14.47214,0,0,0,4.59989.76664,15.24173,15.24173,0,0,0,4.66958-.76664l-3.06659-5.57563a2.44512,2.44512,0,0,1-.34848-.55756m5.43624-3.69386,6.69075,1.5333a14.4567,14.4567,0,0,1-5.43623,6.621l-2.64843-6.412a10.919,10.919,0,0,0,1.39391-1.74239m-20.142,1.4636,6.69075-1.53329a9.2632,9.2632,0,0,0,1.4636,1.81208l-.20909.41817-2.43933,5.99379a14.35611,14.35611,0,0,1-5.50593-6.69075m54.78052,11.77851c-3.206,3.97263-4.66959,5.85441-7.87558,9.827-3.62415,4.5302-6.55135,8.224-10.17552,12.75424-2.57872,3.27568-4.46049,3.34538-8.71191,3.34538H64.7452c-5.57563,0-5.9938,0-9.40887-4.32111-3.41507-4.25142-6.06349-7.59679-9.40887-11.8482-2.64842-3.34538-3.34537-4.18172-5.99379-7.5271-4.112-5.15745-4.809-7.03923,1.603-8.43313l19.79347-4.4605a19.57137,19.57137,0,0,0,8.29374,10.03612l-.906,2.09086a1.22979,1.22979,0,0,1-.55757.62726,3.16078,3.16078,0,0,0-1.3939,1.4636,2.291,2.291,0,1,0,4.10925,2.0268l.00277-.00563a3.722,3.722,0,0,0,.34848-1.25452,3.39253,3.39253,0,0,0-.0697-.83634,1.25668,1.25668,0,0,1,.13939-.697l1.11513-2.02117a19.496,19.496,0,0,0,6.89983,1.25452A18.48355,18.48355,0,0,0,86.281,68.16314l1.11513,2.02116a1.14057,1.14057,0,0,1,.13938.83634,3.13582,3.13582,0,0,0,.27878,1.95147,2.291,2.291,0,1,0,4.116-2.013l-.004-.00818a2.91136,2.91136,0,0,0-.76665-1.04543,4.23022,4.23022,0,0,0-.697-.48787.86561.86561,0,0,1-.41817-.55756l-.906-2.23025a19.11566,19.11566,0,0,0,8.224-10.03613l21.81463,4.94837c4.39081,1.18482,4.112,2.71812,1.603,5.9241"/><path class="cls-2" d="M81.89025,42.86374V36.0336a14.65542,14.65542,0,0,1,7.45741,3.76355l-5.36654,3.83324c-.06969.0697-.13939.13939-.20909.13939a7.745,7.745,0,0,0-1.88177-.906m11.98759,8.015L87.1871,49.34541a6.59927,6.59927,0,0,0-.55757-2.09086c.0697-.0697.13939-.13939.20909-.13939L91.787,42.72435a14.56211,14.56211,0,0,1,2.16056,7.59679,1.3586,1.3586,0,0,0-.0697.55757M85.16594,14.00988c3.62415,1.74239,6.20288,2.9969,9.827,4.73928,5.01806,2.43934,10.03612,4.87868,15.12388,7.24832,1.25452,5.43623,2.509,10.87246,3.69386,16.3087.76665,3.27568,1.11513,5.01806,1.88177,8.22405,1.18482,5.08776,1.04543,5.50593-4.18172,4.32111l-12.89363-2.9272a13.42848,13.42848,0,0,0,.0697-1.67269,18.68285,18.68285,0,0,0-3.34538-10.80278L97.15354,37.776a1.54711,1.54711,0,0,1,.76665-.34847,3.64775,3.64775,0,0,0,1.88177-.697,2.28033,2.28033,0,1,0-2.85751-3.55446h0a2.83777,2.83777,0,0,0-.83634.97574c-.13939.27878-.20909.48787-.34848.76665a1.08387,1.08387,0,0,1-.41817.55756l-2.09086,1.4636a19.02968,19.02968,0,0,0-11.43-5.78471V16.44922c.06969-3.41507.34847-3.83324,3.34537-2.43934m.97574,40.2142,6.69075,1.5333a14.45665,14.45665,0,0,1-5.43623,6.62105l-2.64843-6.412a10.919,10.919,0,0,0,1.39391-1.74239m-6.76044,10.524V58.05733a8.53982,8.53982,0,0,0,1.32421-.13939,1.74659,1.74659,0,0,0,.27878.48786l3.06659,5.57563a15.24173,15.24173,0,0,1-4.66958.76664m41.399,2.71812c-3.206,3.97263-4.66959,5.85441-7.87557,9.827-3.62416,4.5302-6.55136,8.22405-10.17552,12.75424-2.57873,3.27568-4.4605,3.34538-8.71192,3.34538H79.45093V69.48735a18.48311,18.48311,0,0,0,6.96953-1.32421l1.11512,2.02117a1.14051,1.14051,0,0,1,.13939.83634,3.13577,3.13577,0,0,0,.27878,1.95147,2.291,2.291,0,0,0,4.112-2.02117,2.91112,2.91112,0,0,0-.76665-1.04543,4.23119,4.23119,0,0,0-.697-.48786.86563.86563,0,0,1-.41817-.55757l-.906-2.23024a19.11574,19.11574,0,0,0,8.224-10.03613l21.81463,4.94837c4.25142,1.18481,3.97263,2.71811,1.46361,5.9241"/><path class="cls-1" d="M282.47337,66.62985H270.90394V93.67163H297.876V82.1022H282.47337Zm57.91681.06969V82.1022h-15.333l-.1394-.13938V93.67163h27.04178V66.62984H340.32046ZM270.904,39.58806h11.63913l-.0697-.06969V24.1157h15.333l.0697.13939V12.54628H270.904Zm54.01387-27.04178V24.1157H340.3902V39.58807h11.56943V12.54628Z"/><g class="cls-3"><path class="cls-1" d="M323.52391,39.58806,308.05154,24.1157h16.86627V12.54628H297.876V24.25509l15.40267,15.333ZM309.58484,66.62984H299.33962l12.82394,12.82394L314.812,82.1022H297.876V93.67163h27.04177V81.96281l-7.66648-7.66648Zm30.80534-27.04178V56.45432l-2.64841-2.64842L324.91783,41.05165V51.29686l7.73619,7.66649,7.66648,7.66648h11.63913V39.58806ZM297.876,54.921l-15.333-15.333H270.83426V66.62984h11.63913V49.76358l15.40267,15.40267Z"/></g><path class="cls-1" d="M214.31136,123.15275l-2.92721,3.48476a6.85163,6.85163,0,0,0-5.01807-2.57872,5.59708,5.59708,0,0,0-5.57873,5.61541q.00025.08467.0031.1693a5.57359,5.57359,0,0,0,5.57563,5.8544,7.37016,7.37016,0,0,0,5.01807-2.36963l2.99689,3.13629a12.20262,12.20262,0,0,1-8.224,3.62415,10.09616,10.09616,0,0,1-10.4543-10.24521c0-5.78471,4.5999-10.10582,10.66338-10.10582a11.99471,11.99471,0,0,1,7.94526,3.41507Zm2.43933,16.72687V118.76194h4.94838v21.11768Zm24.53276-7.66648c0,4.73928-3.34536,7.87557-8.36343,7.87557s-8.43314-3.13629-8.43314-7.87557,3.34537-7.80588,8.43314-7.80588c5.01805,0,8.36341,3.06659,8.36341,7.80588Zm-11.8482.0697c0,2.36963,1.39391,3.97263,3.41507,3.97263s3.41506-1.603,3.41506-3.97263-1.3939-3.97263-3.41506-3.97263-3.41509,1.603-3.41509,3.97263Zm29.48111,7.59678H253.968v-2.509a5.43374,5.43374,0,0,1-5.01807,2.71811c-3.34537,0-5.50593-2.29995-5.50593-5.8544v-9.68765h4.94837v8.29374c0,1.81208.97573,2.9272,2.57874,2.9272,1.88178,0,2.99689-1.53329,2.99689-3.62415v-7.59679h4.94837Zm19.37529,0h-4.94837v-2.02116a5.68149,5.68149,0,0,1-4.5999,2.23025c-4.32111,0-7.17861-3.206-7.17861-7.94526,0-4.66959,2.78782-7.80588,7.03924-7.80588a5.66455,5.66455,0,0,1,4.73927,2.23025V118.762h4.94837v21.11767Zm-4.94837-7.59678c0-2.36964-1.39391-3.97263-3.41507-3.97263s-3.41506,1.603-3.41506,3.97263,1.3939,4.04233,3.41506,4.04233C272.01907,136.25547,273.34328,134.65247,273.34328,132.28284Z"/><path class="cls-1" d="M296.34273,139.87962l-9.19979-12.26638v12.26638h-4.73927V119.94676h4.4605l9.19979,12.33607V119.94676h4.73927v19.93286Zm22.02373-10.03612v10.03612h-4.809v-1.74238a5.57927,5.57927,0,0,1-4.66959,2.02116c-3.27569,0-5.29685-2.02116-5.29685-4.809,0-2.92721,2.09086-4.5999,5.9241-4.66959h4.04232v-.20909c0-1.53329-.97573-2.43933-2.99689-2.43933a11.73428,11.73428,0,0,0-4.59989,1.25452l-1.39391-3.27568a15.97514,15.97514,0,0,1,7.10893-1.74239C315.92712,124.33756,318.36646,126.42842,318.36646,129.8435Zm-4.809,4.87867v-1.3939h-3.13629c-1.4636,0-2.23025.48786-2.23025,1.67268,0,1.11513.76665,1.81208,2.16055,1.81208A3.186,3.186,0,0,0,313.55748,134.72217Zm18.12079,4.39081a8.77035,8.77035,0,0,1-4.112,1.04543c-2.99689,0-5.08775-1.67268-5.08775-4.87867v-6.76045h-2.16056v-3.206h2.16056v-4.25141h4.87867v4.25141h4.04232V128.589h-4.04232v5.9938c0,1.18482.48787,1.74239,1.3939,1.67269a5.77256,5.77256,0,0,0,1.88179-.48787Zm7.52708-18.95712a2.547,2.547,0,0,1-2.44329,2.64661q-.0677.00272-.13544.00181a2.6138,2.6138,0,0,1,0-5.22715,2.45048,2.45048,0,0,1,2.57873,2.57871Zm-5.08775,19.72377v-15.333h4.87867v15.333Zm12.54516,0-5.7847-15.333h5.08775l3.27568,10.87248,3.34537-10.87248h4.87869l-5.7847,15.333Zm27.11147-6.34228H362.97146a3.5857,3.5857,0,0,0,3.62416,2.85752,5.47593,5.47593,0,0,0,3.69385-1.5333l2.57873,2.509a8.70247,8.70247,0,0,1-6.69073,2.71811c-5.01807,0-8.15436-3.13629-8.15436-7.80587,0-4.73929,3.27569-7.87558,8.015-7.87558,5.36655,0,8.015,3.55447,7.73616,9.13009Zm-4.73927-2.64842a2.892,2.892,0,0,0-2.99689-3.13629c-1.74238,0-2.85749,1.25452-3.206,3.13629H369.035Z"/><path class="cls-1" d="M393.84647,123.15275l-2.92721,3.48476a6.85156,6.85156,0,0,0-5.01807-2.57872,5.59708,5.59708,0,0,0-5.57873,5.61541q.00026.08467.00311.1693a5.57359,5.57359,0,0,0,5.57562,5.8544,7.37,7.37,0,0,0,5.01807-2.36963l2.99689,3.13629a12.20251,12.20251,0,0,1-8.224,3.62415,10.09617,10.09617,0,0,1-10.45429-10.24521c0-5.78471,4.59987-10.10582,10.66337-10.10582A12.14027,12.14027,0,0,1,393.84647,123.15275Zm17.21476,9.06039c0,4.73928-3.34537,7.87557-8.36344,7.87557s-8.43312-3.13629-8.43312-7.87557,3.34537-7.80588,8.43312-7.80588C407.71586,124.40726,411.06123,127.47385,411.06123,132.21314Zm-11.77853.0697c0,2.36963,1.39391,3.97263,3.41509,3.97263s3.41508-1.603,3.41508-3.97263-1.3939-3.97263-3.41508-3.97263-3.41505,1.603-3.41505,3.97263Zm30.10838-2.09086v9.68764h-4.87867v-8.29374a2.62248,2.62248,0,0,0-2.71813-2.9272c-1.81206,0-2.92721,1.25452-3.13629,3.13629v8.15435h-4.94835v-15.333H418.658v2.509a5.65705,5.65705,0,0,1,5.15747-2.71812c3.34537-.0697,5.57562,2.23025,5.57562,5.78472Z"/><g id="SVGID-2"><path class="cls-1" d="M169.35788,3.55559h.697v141.83h-.697Z"/></g><rect class="cls-1" x="169.35788" y="3.55559" width="0.69695" height="141.82998"/><rect class="cls-1" x="169.35788" y="3.55559" width="0.69695" height="141.82998"/><g class="cls-4"><path class="cls-1" d="M169.35788,3.55559h.697v141.83h-.697Z"/></g><g id="SVGID-3"><path class="cls-1" d="M341.22653,172.741h88.16455v.69695H341.22653Z"/></g><rect class="cls-1" x="341.22653" y="172.74096" width="88.16455" height="0.69695"/><rect class="cls-1" x="341.22653" y="172.74096" width="88.16455" height="0.69695"/><g class="cls-5"><path class="cls-1" d="M341.22653,172.741h88.16455v.69695H341.22653Z"/></g><path class="cls-1" d="M149.12265,182.84205H137.64181V162.9072h11.48084v3.46352h-7.254v4.37691h6.74936v3.46325h-6.74936v5.14053h7.254Z"/><path class="cls-1" d="M163.753,182.84205l-.55883-1.95h-.21848a4.38667,4.38667,0,0,1-1.89495,1.64319,6.47259,6.47259,0,0,1-2.79519.57949,5.3218,5.3218,0,0,1-4.04973-1.43839,5.78686,5.78686,0,0,1-1.3635-4.1383v-9.94019H157.031v8.90387a4.27708,4.27708,0,0,0,.5862,2.47471,2.133,2.133,0,0,0,1.86812.82481,2.80822,2.80822,0,0,0,2.52248-1.16569,7.23121,7.23121,0,0,0,.77731-3.86559v-7.17211h4.1587v15.24418Z"/><path class="cls-1" d="M179.81552,167.31148a6.70051,6.70051,0,0,1,1.40431.12267l-.3135,3.89968a4.77479,4.77479,0,0,0-1.22716-.13635,4.41008,4.41008,0,0,0-3.10225,1.02263,3.69678,3.69678,0,0,0-1.1112,2.86337v7.75857H171.307V167.59787h3.15l.61357,2.56329h.20453a5.732,5.732,0,0,1,1.91535-2.06566A4.72593,4.72593,0,0,1,179.81552,167.31148Z"/><path class="cls-1" d="M197.84119,175.19272a8.19013,8.19013,0,0,1-1.96366,5.82228,7.11859,7.11859,0,0,1-5.46745,2.09975,7.65025,7.65025,0,0,1-3.87258-.96117,6.39789,6.39789,0,0,1-2.57724-2.76137,9.28109,9.28109,0,0,1-.8997-4.19949,8.14579,8.14579,0,0,1,1.94971-5.8086,7.15984,7.15984,0,0,1,5.48141-2.07264,7.6952,7.6952,0,0,1,3.87257.95446,6.3688,6.3688,0,0,1,2.57671,2.7407A9.18979,9.18979,0,0,1,197.84119,175.19272Zm-10.54034,0a6.39684,6.39684,0,0,0,.74349,3.42245,2.65632,2.65632,0,0,0,2.42,1.159,2.61545,2.61545,0,0,0,2.39311-1.15228,6.48868,6.48868,0,0,0,.72953-3.42916,6.29492,6.29492,0,0,0-.7365-3.39535,3.13069,3.13069,0,0,0-4.81308-.00671A6.29306,6.29306,0,0,0,187.30085,175.19272Z"/><path class="cls-1" d="M209.64949,183.11475A5.05544,5.05544,0,0,1,205.436,181.165h-.218q.21741,1.90878.218,2.20872v6.17685h-4.1587V167.59787h3.38139l.58674,1.97709h.19057a4.8117,4.8117,0,0,1,4.32242-2.26348,4.94681,4.94681,0,0,1,4.22687,2.08633,9.65009,9.65009,0,0,1,1.52724,5.79491,11.443,11.443,0,0,1-.71557,4.24056,5.95538,5.95538,0,0,1-2.03882,2.7407A5.22372,5.22372,0,0,1,209.64949,183.11475Zm-1.22716-12.47636a2.62571,2.62571,0,0,0-2.24978.94774,5.44022,5.44022,0,0,0-.73651,3.12936v.44985a6.42269,6.42269,0,0,0,.72953,3.518,2.60381,2.60381,0,0,0,2.311,1.06343q2.79573,0,2.79573-4.60855a6.58288,6.58288,0,0,0-.68873-3.37495A2.35011,2.35011,0,0,0,208.42233,170.63839Z"/><path class="cls-1" d="M225.84838,183.11475a7.86769,7.86769,0,0,1-5.7541-2.03157,7.69229,7.69229,0,0,1-2.07264-5.75411,8.45878,8.45878,0,0,1,1.91589-5.92455,6.8208,6.8208,0,0,1,5.29728-2.093,6.71352,6.71352,0,0,1,5.031,1.84074,6.96266,6.96266,0,0,1,1.79993,5.086v2.01789h-9.83067a4.00174,4.00174,0,0,0,1.04947,2.76808,3.69555,3.69555,0,0,0,2.75439.99525,11.42531,11.42531,0,0,0,2.60462-.28639,13.02981,13.02981,0,0,0,2.56329-.91339v3.21793a9.765,9.765,0,0,1-2.33138.81113A14.6952,14.6952,0,0,1,225.84838,183.11475Zm-.58673-12.84435a2.63675,2.63675,0,0,0-2.0721.83851,3.881,3.881,0,0,0-.85944,2.37942h5.83624a3.46789,3.46789,0,0,0-.80469-2.37942A2.72349,2.72349,0,0,0,225.26165,170.2704Z"/><path class="cls-1" d="M255.57284,182.84205H241.63769v-2.93154l5.00418-5.05867q2.22241-2.27716,2.90416-3.15673a6.94108,6.94108,0,0,0,.98184-1.62923,4.15366,4.15366,0,0,0,.30007-1.55462,2.26532,2.26532,0,0,0-.66135-1.786,2.56593,2.56593,0,0,0-1.76612-.58647,5.0815,5.0815,0,0,0-2.24978.53172,11.62531,11.62531,0,0,0-2.27717,1.51355l-2.29058-2.71333a14.92811,14.92811,0,0,1,2.44089-1.77256,8.96818,8.96818,0,0,1,2.11343-.7977,10.83066,10.83066,0,0,1,2.56329-.27942,7.59152,7.59152,0,0,1,3.2998.68176,5.26288,5.26288,0,0,1,2.22241,1.90891,5.0717,5.0717,0,0,1,.79126,2.80888,6.87487,6.87487,0,0,1-.48421,2.58368,9.92576,9.92576,0,0,1-1.49986,2.475,36.68787,36.68787,0,0,1-3.57947,3.6133l-2.56329,2.41351v.19084h8.68565Z"/><path class="cls-1" d="M271.40348,172.87476q0,5.22225-1.71136,7.73119a5.93742,5.93742,0,0,1-5.2699,2.5088,5.86809,5.86809,0,0,1-5.20173-2.59067q-1.753-2.5904-1.75216-7.64932,0-5.277,1.70439-7.779a6.6276,6.6276,0,0,1,10.46465.11595Q271.40322,167.82951,271.40348,172.87476Zm-9.74907,0a15.50035,15.50035,0,0,0,.634,5.25621,2.19539,2.19539,0,0,0,2.13384,1.5887,2.21783,2.21783,0,0,0,2.12686-1.6091,21.30984,21.30984,0,0,0-.00645-10.506,2.20886,2.20886,0,0,0-4.2478,0A15.48478,15.48478,0,0,0,261.65441,172.87476Z"/><path class="cls-1" d="M287.45207,182.84205H273.51692v-2.93154l5.00418-5.05867q2.2224-2.27716,2.90416-3.15673a6.94067,6.94067,0,0,0,.98183-1.62923,4.15347,4.15347,0,0,0,.30008-1.55462,2.26532,2.26532,0,0,0-.66135-1.786,2.56593,2.56593,0,0,0-1.76612-.58647,5.08157,5.08157,0,0,0-2.24979.53172,11.62556,11.62556,0,0,0-2.27716,1.51355l-2.29059-2.71333a14.92854,14.92854,0,0,1,2.4409-1.77256,8.968,8.968,0,0,1,2.11343-.7977,10.83066,10.83066,0,0,1,2.56329-.27942,7.59144,7.59144,0,0,1,3.29979.68176,5.26276,5.26276,0,0,1,2.22241,1.90891,5.07162,5.07162,0,0,1,.79127,2.80888,6.87487,6.87487,0,0,1-.48421,2.58368,9.92576,9.92576,0,0,1-1.49986,2.475,36.69018,36.69018,0,0,1-3.57947,3.6133l-2.56329,2.41351v.19084h8.68565Z"/><path class="cls-1" d="M299.87394,182.84205h-4.21345V171.30672l.0408-1.89549.06817-2.07237q-1.05,1.05-1.45906,1.37693l-2.29058,1.841-2.03184-2.53617,6.42244-5.11342h3.46352Z"/><rect class="cls-1" x="313.55748" y="172.74096" width="118.06433" height="0.69695"/><g class="cls-6"><path class="cls-1" d="M313.55748,172.741H431.62181v.69695H313.55748Z"/></g><rect class="cls-1" x="5.85237" y="172.74096" width="118.06433" height="0.69695"/><g class="cls-7"><path class="cls-1" d="M5.85237,172.741H123.91669v.69695H5.85237Z"/></g></svg>
\ No newline at end of file

From 27e7aace35bf02968f9e6603488f61afca3ecb36 Mon Sep 17 00:00:00 2001
From: Kwang Hun <mm9139@naver.com>
Date: Sun, 2 May 2021 20:04:04 +0900
Subject: [PATCH 692/788] Update managing-tls-in-a-cluster.md

fix typo
---
 content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md b/content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md
index f814db9919..d6f29e780d 100644
--- a/content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md
+++ b/content/ko/docs/tasks/tls/managing-tls-in-a-cluster.md
@@ -88,7 +88,7 @@ EOF
 
 여기서 `192.0.2.24`는 서비스의 클러스터 IP, 
 `my-svc.my-namespace.svc.cluster.local`은 서비스의 DNS 이름, 
-`10.0.34.2`는 파드의 IP,`my-pod.my- namespace.pod.cluster.local`은 
+`10.0.34.2`는 파드의 IP,`my-pod.my-namespace.pod.cluster.local`은 
 파드의 DNS 이름이다. 다음 출력이 표시되어야 한다.
 
 ```

From d17a261c0e72678777bbafad2afb4f45f96efba8 Mon Sep 17 00:00:00 2001
From: James Wilson <jmboby@gmail.com>
Date: Mon, 3 May 2021 16:20:49 +1200
Subject: [PATCH 693/788] Fix spelling mistake of the word 'kubernetes' in line
 390

A volume with `volumeMode: Filesystem` is *mounted* into Pods into a directory. If the volume
is backed by a block device and the device is empty, Kubernetes creates a filesystem
on the device before mounting it for the first time.
---
 content/en/docs/concepts/storage/persistent-volumes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/storage/persistent-volumes.md b/content/en/docs/concepts/storage/persistent-volumes.md
index 54e42bae9e..88e468ebfa 100644
--- a/content/en/docs/concepts/storage/persistent-volumes.md
+++ b/content/en/docs/concepts/storage/persistent-volumes.md
@@ -387,7 +387,7 @@ Kubernetes supports two `volumeModes` of PersistentVolumes: `Filesystem` and `Bl
 `Filesystem` is the default mode used when `volumeMode` parameter is omitted.
 
 A volume with `volumeMode: Filesystem` is *mounted* into Pods into a directory. If the volume
-is backed by a block device and the device is empty, Kuberneretes creates a filesystem
+is backed by a block device and the device is empty, Kubernetes creates a filesystem
 on the device before mounting it for the first time.
 
 You can set the value of `volumeMode` to `Block` to use a volume as a raw block device.

From f174e793e981bf2a829932c5cd29d3d8d7c15c38 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 3 May 2021 18:44:25 +0900
Subject: [PATCH 694/788] [ko] Fix wrong custom heading ID

---
 content/ko/docs/concepts/services-networking/dns-pod-service.md | 2 +-
 .../reference/command-line-tools-reference/feature-gates.md     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ko/docs/concepts/services-networking/dns-pod-service.md b/content/ko/docs/concepts/services-networking/dns-pod-service.md
index 006ffba99c..e3254d3ba8 100644
--- a/content/ko/docs/concepts/services-networking/dns-pod-service.md
+++ b/content/ko/docs/concepts/services-networking/dns-pod-service.md
@@ -194,7 +194,7 @@ A 또는 AAAA 레코드만 생성할 수 있다. (`default-subdomain.my-namespac
 또한 서비스에서 `publishNotReadyAddresses=True` 를 설정하지 않았다면, 파드가 준비 상태가 되어야 레코드를 가질 수 있다.
 {{< /note >}}
 
-### 파드의 setHostnameAsFQDN 필드 {# pod-sethostnameasfqdn-field}
+### 파드의 setHostnameAsFQDN 필드 {#pod-sethostnameasfqdn-field}
 
 {{< feature-state for_k8s_version="v1.20" state="beta" >}}
 
diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index a0f970d7c4..e8e1699803 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -785,7 +785,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   참고한다.
 - `SetHostnameAsFQDN`: 전체 주소 도메인 이름(FQDN)을 파드의 호스트 이름으로
   설정하는 기능을 활성화한다.
-  [파드의 `setHostnameAsFQDN` 필드](/ko/docs/concepts/services-networking/dns-pod-service/#파드의-sethostnameasfqdn-필드)를 참고한다.
+  [파드의 `setHostnameAsFQDN` 필드](/ko/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field)를 참고한다.
 - `StartupProbe`: kubelet에서
   [스타트업](/ko/docs/concepts/workloads/pods/pod-lifecycle/#언제-스타트업-프로브를-사용해야-하는가)
   프로브를 활성화한다.

From 115dfd288a96eef77737cbef745342f8ba8f3f24 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Mon, 3 May 2021 22:32:44 +0800
Subject: [PATCH 695/788] [zh] translate task/tools Included

---
 content/zh/docs/tasks/tools/included/_index.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 content/zh/docs/tasks/tools/included/_index.md

diff --git a/content/zh/docs/tasks/tools/included/_index.md b/content/zh/docs/tasks/tools/included/_index.md
new file mode 100644
index 0000000000..0b1291134b
--- /dev/null
+++ b/content/zh/docs/tasks/tools/included/_index.md
@@ -0,0 +1,14 @@
+---
+title: "内含的工具"
+description: "在页面 kubectl-installs-*.md 中包含的代码片段"
+headless: true
+toc_hide: true
+---
+<!-- 
+---
+title: "Tools Included"
+description: "Snippets to be included in the main kubectl-installs-*.md pages."
+headless: true
+toc_hide: true
+---
+-->

From a80c2fc05f6178da77ad61ad6cfa16e57597b63e Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Tue, 4 May 2021 18:35:22 +0900
Subject: [PATCH 696/788] [ko] Update outdated files in dev-1.21-ko.2 (p2)

---
 .../feature-gates.md                          |  99 +++++-----
 .../kube-proxy.md                             |   8 +-
 .../reference/using-api/client-libraries.md   |  17 +-
 .../production-environment/tools/kops.md      |   8 +-
 .../production-environment/tools/kubespray.md |   2 +-
 .../windows/intro-windows-in-kubernetes.md    |  15 +-
 content/ko/docs/setup/release/notes.md        | 171 +++++-------------
 7 files changed, 118 insertions(+), 202 deletions(-)

diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index a0f970d7c4..5f640165a5 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -53,7 +53,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `APIPriorityAndFairness` | `false` | 알파 | 1.17 | 1.19 |
 | `APIPriorityAndFairness` | `true` | 베타 | 1.20 | |
 | `APIResponseCompression` | `false` | 알파 | 1.7 | 1.15 |
-| `APIResponseCompression` | `false` | 베타 | 1.16 | |
+| `APIResponseCompression` | `true` | 베타 | 1.16 | |
 | `APIServerIdentity` | `false` | 알파 | 1.20 | |
 | `AllowInsecureBackendProxy` | `true` | 베타 | 1.17 | |
 | `AnyVolumeDataSource` | `false` | 알파 | 1.18 | |
@@ -90,6 +90,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CSIStorageCapacity` | `true` | 베타 | 1.21 | |
 | `CSIVolumeFSGroupPolicy` | `false` | 알파 | 1.19 | 1.19 |
 | `CSIVolumeFSGroupPolicy` | `true` | 베타 | 1.20 | |
+| `CSIVolumeHealth` | `false` | 알파 | 1.21 | |
 | `ConfigurableFSGroupPolicy` | `false` | 알파 | 1.18 | 1.19 |
 | `ConfigurableFSGroupPolicy` | `true` | 베타 | 1.20 | |
 | `CronJobControllerV2` | `false` | 알파 | 1.20 | 1.20 |
@@ -125,14 +126,13 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `HPAScaleToZero` | `false` | 알파 | 1.16 | |
 | `HugePageStorageMediumSize` | `false` | 알파 | 1.18 | 1.18 |
 | `HugePageStorageMediumSize` | `true` | 베타 | 1.19 | |
+| `IndexedJob` | `false` | 알파 | 1.21 | |
 | `IngressClassNamespacedParams` | `false` | 알파 | 1.21 | |
 | `IPv6DualStack` | `false` | 알파 | 1.15 | 1.20 |
 | `IPv6DualStack` | `true` | 베타 | 1.21 | |
 | `KubeletCredentialProviders` | `false` | 알파 | 1.20 | |
-| `KubeletPodResources` | `true` | 알파 | 1.13 | 1.14 |
-| `KubeletPodResources` | `true` | 베타 | 1.15 | |
 | `LegacyNodeRoleBehavior` | `false` | 알파 | 1.16 | 1.18 |
-| `LegacyNodeRoleBehavior` | `true` | True | 1.19 |  |
+| `LegacyNodeRoleBehavior` | `true` | 베타 | 1.19 |  |
 | `LocalStorageCapacityIsolation` | `false` | 알파 | 1.7 | 1.9 |
 | `LocalStorageCapacityIsolation` | `true` | 베타 | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | 알파 | 1.15 | |
@@ -158,8 +158,6 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `RotateKubeletServerCertificate` | `false` | 알파 | 1.7 | 1.11 |
 | `RotateKubeletServerCertificate` | `true` | 베타 | 1.12 | |
 | `RunAsGroup` | `true` | 베타 | 1.14 | |
-| `SCTPSupport` | `false` | 알파 | 1.12 | 1.18 |
-| `SCTPSupport` | `true` | 베타 | 1.19 | |
 | `ServerSideApply` | `false` | 알파 | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | 베타 | 1.16 | |
 | `ServiceInternalTrafficPolicy` | `false` | 알파 | 1.21 | |
@@ -181,12 +179,13 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `TopologyManager` | `true` | 베타 | 1.18 | |
 | `ValidateProxyRedirects` | `false` | 알파 | 1.12 | 1.13 |
 | `ValidateProxyRedirects` | `true` | 베타 | 1.14 | |
+| `VolumeCapacityPriority` | `false` | 알파 | 1.21 | - |
 | `WarningHeaders` | `true` | 베타 | 1.19 | |
 | `WinDSR` | `false` | 알파 | 1.14 | |
 | `WinOverlay` | `false` | 알파 | 1.14 | 1.19 |
 | `WinOverlay` | `true` | 베타 | 1.20 | |
 | `WindowsEndpointSliceProxying` | `false` | 알파 | 1.19 | 1.20 |
-| `WindowsEndpointSliceProxying` | `true` | beta | 1.21 | |
+| `WindowsEndpointSliceProxying` | `true` | 베타 | 1.21 | |
 {{< /table >}}
 
 ### GA 또는 사용 중단된 기능을 위한 기능 게이트
@@ -225,7 +224,6 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CSIPersistentVolume` | `false` | 알파 | 1.9 | 1.9 |
 | `CSIPersistentVolume` | `true` | 베타 | 1.10 | 1.12 |
 | `CSIPersistentVolume` | `true` | GA | 1.13 | - |
-| `CSIVolumeHealth` | `false` | 알파 | 1.21 | - |
 | `CustomPodDNS` | `false` | 알파 | 1.9 | 1.9 |
 | `CustomPodDNS` | `true` | 베타| 1.10 | 1.13 |
 | `CustomPodDNS` | `true` | GA | 1.14 | - |
@@ -258,9 +256,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `EnableEquivalenceClassCache` | - | 사용중단 | 1.15 | - |
 | `EndpointSlice` | `false` | 알파 | 1.16 | 1.16 |
 | `EndpointSlice` | `false` | 베타 | 1.17 | 1.17 |
-| `EndpointSlice` | `true` | 베타 | 1.18 | 1.21 |
+| `EndpointSlice` | `true` | 베타 | 1.18 | 1.20 |
 | `EndpointSlice` | `true` | GA | 1.21 | -  |
-| `EndpointSliceNodeName` | `false` | 알파 | 1.20 | 1.21 |
+| `EndpointSliceNodeName` | `false` | 알파 | 1.20 | 1.20 |
 | `EndpointSliceNodeName` | `true` | GA | 1.21 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | 알파 | 1.5 | 1.12 |
 | `ExperimentalCriticalPodAnnotation` | `false` | 사용중단 | 1.13 | - |
@@ -278,7 +276,6 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `ImmutableEphemeralVolumes` | `false` | 알파 | 1.18 | 1.18 |
 | `ImmutableEphemeralVolumes` | `true` | 베타 | 1.19 | 1.20 |
 | `ImmutableEphemeralVolumes` | `true` | GA | 1.21 | |
-| `IndexedJob` | `false` | 알파 | 1.21 | |
 | `Initializers` | `false` | 알파 | 1.7 | 1.13 |
 | `Initializers` | - | 사용중단 | 1.14 | - |
 | `KubeletConfigFile` | `false` | 알파 | 1.8 | 1.9 |
@@ -315,6 +312,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `PodShareProcessNamespace` | `true` | 베타 | 1.12 | 1.16 |
 | `PodShareProcessNamespace` | `true` | GA | 1.17 | - |
 | `RequestManagement` | `false` | 알파 | 1.15 | 1.16 |
+| `RequestManagement` | - | 사용중단 | 1.17 | - |
 | `ResourceLimitsPriorityFunction` | `false` | 알파 | 1.9 | 1.18 |
 | `ResourceLimitsPriorityFunction` | - | 사용중단 | 1.19 | - |
 | `ResourceQuotaScopeSelectors` | `false` | 알파 | 1.11 | 1.11 |
@@ -338,7 +336,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `ServiceAccountIssuerDiscovery` | `true` | 베타 | 1.20 | 1.20 |
 | `ServiceAccountIssuerDiscovery` | `true` | GA | 1.21 | - |
 | `ServiceAppProtocol` | `false` | 알파 | 1.18 | 1.18 |
-| `ServiceAppProtocol` | `true` | 베타 | 1.19 | |
+| `ServiceAppProtocol` | `true` | 베타 | 1.19 | 1.19 |
 | `ServiceAppProtocol` | `true` | GA | 1.20 | - |
 | `ServiceLoadBalancerFinalizer` | `false` | 알파 | 1.15 | 1.15 |
 | `ServiceLoadBalancerFinalizer` | `true` | 베타 | 1.16 | 1.16 |
@@ -350,7 +348,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `StorageObjectInUseProtection` | `true` | GA | 1.11 | - |
 | `StreamingProxyRedirects` | `false` | 베타 | 1.5 | 1.5 |
 | `StreamingProxyRedirects` | `true` | 베타 | 1.6 | 1.18 |
-| `StreamingProxyRedirects` | - | 사용중단| 1.19 | - |
+| `StreamingProxyRedirects` | - | GA | 1.19 | - |
 | `SupportIPVSProxyMode` | `false` | 알파 | 1.8 | 1.8 |
 | `SupportIPVSProxyMode` | `false` | 베타 | 1.9 | 1.9 |
 | `SupportIPVSProxyMode` | `true` | 베타 | 1.10 | 1.10 |
@@ -376,15 +374,15 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `TokenRequestProjection` | `true` | 베타 | 1.12 | 1.19 |
 | `TokenRequestProjection` | `true` | GA | 1.20 | - |
 | `VolumeCapacityPriority` | `false` | 알파 | 1.21 | - |
-| `VolumeSnapshotDataSource` | `false` | 알파 | 1.12 | 1.16 |
-| `VolumeSnapshotDataSource` | `true` | 베타 | 1.17 | 1.19 |
-| `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
 | `VolumePVCDataSource` | `false` | 알파 | 1.15 | 1.15 |
 | `VolumePVCDataSource` | `true` | 베타 | 1.16 | 1.17 |
 | `VolumePVCDataSource` | `true` | GA | 1.18 | - |
 | `VolumeScheduling` | `false` | 알파 | 1.9 | 1.9 |
 | `VolumeScheduling` | `true` | 베타 | 1.10 | 1.12 |
 | `VolumeScheduling` | `true` | GA | 1.13 | - |
+| `VolumeSnapshotDataSource` | `false` | 알파 | 1.12 | 1.16 |
+| `VolumeSnapshotDataSource` | `true` | 베타 | 1.17 | 1.19 |
+| `VolumeSnapshotDataSource` | `true` | GA | 1.20 | - |
 | `VolumeSubpath` | `true` | GA | 1.10 | - |
 | `VolumeSubpathEnvExpansion` | `false` | 알파 | 1.14 | 1.14 |
 | `VolumeSubpathEnvExpansion` | `true` | 베타 | 1.15 | 1.16 |
@@ -451,7 +449,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `APIServerIdentity`: 클러스터의 각 API 서버에 ID를 할당한다.
 - `Accelerators`: 도커 사용 시 Nvidia GPU 지원 활성화한다.
 - `AdvancedAuditing`: [고급 감사](/docs/tasks/debug-application-cluster/audit/#advanced-audit) 기능을 활성화한다.
-- `AffinityInAnnotations`(*사용 중단됨*): [파드 어피니티 또는 안티-어피니티](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#어피니티-affinity-와-안티-어피니티-anti-affinity)
+- `AffinityInAnnotations`: [파드 어피니티 또는 안티-어피니티](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#어피니티-affinity-와-안티-어피니티-anti-affinity)
   설정을 활성화한다.
 - `AllowExtTrafficLocalEndpoints`: 서비스가 외부 요청을 노드의 로컬 엔드포인트로 라우팅할 수 있도록 한다.
 - `AllowInsecureBackendProxy`: 사용자가 파드 로그 요청에서 kubelet의
@@ -477,8 +475,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   확인한다.
 - `CPUManager`: 컨테이너 수준의 CPU 어피니티 지원을 활성화한다.
   [CPU 관리 정책](/docs/tasks/administer-cluster/cpu-management-policies/)을 참고한다.
-- `CRIContainerLogRotation`: cri 컨테이너 런타임에 컨테이너 로그 로테이션을 활성화한다. 로그 파일 사이즈 기본값은 10MB이며, 
-컨테이너 당 최대 로그 파일 수 기본값은 5이다. 이 값은 kubelet 환경설정으로 변경할 수 있다. 
+- `CRIContainerLogRotation`: cri 컨테이너 런타임에 컨테이너 로그 로테이션을 활성화한다. 로그 파일 사이즈 기본값은 10MB이며,
+컨테이너 당 최대 로그 파일 수 기본값은 5이다. 이 값은 kubelet 환경설정으로 변경할 수 있다.
 더 자세한 내용은 [노드 레벨에서의 로깅](/ko/docs/concepts/cluster-administration/logging/#노드-레벨에서의-로깅)을 참고한다.
 - `CSIBlockVolume`: 외부 CSI 볼륨 드라이버가 블록 스토리지를 지원할 수 있게 한다.
   자세한 내용은 [`csi` 원시 블록 볼륨 지원](/ko/docs/concepts/storage/volumes/#csi-원시-raw-블록-볼륨-지원)
@@ -592,18 +590,18 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   hugepages 사용을 활성화한다.
 - `DryRun`: 서버 측의 [dry run](/docs/reference/using-api/api-concepts/#dry-run) 요청을
   요청을 활성화하여 커밋하지 않고 유효성 검사, 병합 및 변화를 테스트할 수 있다.
-- `DynamicAuditing`(*사용 중단됨*): v1.19 이전의 버전에서 동적 감사를 활성화하는 데 사용된다.
+- `DynamicAuditing`: v1.19 이전의 버전에서 동적 감사를 활성화하는 데 사용된다.
 - `DynamicKubeletConfig`: kubelet의 동적 구성을 활성화한다.
   [kubelet 재구성](/docs/tasks/administer-cluster/reconfigure-kubelet/)을 참고한다.
 - `DynamicProvisioningScheduling`: 볼륨 토폴로지를 인식하고 PV 프로비저닝을 처리하도록
   기본 스케줄러를 확장한다.
   이 기능은 v1.12의 `VolumeScheduling` 기능으로 대체되었다.
-- `DynamicVolumeProvisioning`(*사용 중단됨*): 파드에 퍼시스턴트 볼륨의
+- `DynamicVolumeProvisioning`: 파드에 퍼시스턴트 볼륨의
   [동적 프로비저닝](/ko/docs/concepts/storage/dynamic-provisioning/)을 활성화한다.
 - `EfficientWatchResumption`: 스토리지에서 생성된 북마크(진행
   알림) 이벤트를 사용자에게 전달할 수 있다. 이것은 감시 작업에만
   적용된다.
-- `EnableAggregatedDiscoveryTimeout` (*사용 중단됨*): 수집된 검색 호출에서 5초
+- `EnableAggregatedDiscoveryTimeout`: 수집된 검색 호출에서 5초
   시간 초과를 활성화한다.
 - `EnableEquivalenceClassCache`: 스케줄러가 파드를 스케줄링할 때 노드의
   동등성을 캐시할 수 있게 한다.
@@ -661,11 +659,13 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   기능을 활성화한다.
 - `ImmutableEphemeralVolumes`: 안정성과 성능 향상을 위해 개별 시크릿(Secret)과 컨피그맵(ConfigMap)을
   변경할 수 없는(immutable) 것으로 표시할 수 있다.
-- `IndexedJob`: [잡](/ko/docs/concepts/workloads/controllers/job/) 컨트롤러가 
+- `IndexedJob`: [잡](/ko/docs/concepts/workloads/controllers/job/) 컨트롤러가
   완료 횟수를 기반으로 파드 완료를 관리할 수 있도록 한다.
-- `IngressClassNamespacedParams`: `IngressClass` 리소스가 네임스페이스 범위로 
-  한정된 파라미터를 이용할 수 있도록 한다. 이 기능은 `IngressClass.spec.parameters` 에 
+- `IngressClassNamespacedParams`: `IngressClass` 리소스가 네임스페이스 범위로
+  한정된 파라미터를 이용할 수 있도록 한다. 이 기능은 `IngressClass.spec.parameters` 에
   `Scope` 와 `Namespace` 2개의 필드를 추가한다.
+- `Initializers`: Initializers 어드미션 플러그인을 사용하여 오브젝트 생성의
+  비동기 조정을 허용한다.
 - `IPv6DualStack`: IPv6을 위한 [이중 스택](/ko/docs/concepts/services-networking/dual-stack/)
   기능을 활성화한다.
 - `KubeletConfigFile`: 구성 파일을 사용하여 지정된 파일에서
@@ -679,12 +679,12 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   [장치 모니터링 지원](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/606-compute-device-assignment/README.md)을
   참고한다.
 - `KubeletPodResourcesGetAllocatable`: kubelet의 파드 리소스 `GetAllocatableResources` 기능을 활성화한다.
-  이 API는 클라이언트가 노드의 여유 컴퓨팅 자원을 잘 파악할 수 있도록, 할당 가능 자원에 대한 정보를 
+  이 API는 클라이언트가 노드의 여유 컴퓨팅 자원을 잘 파악할 수 있도록, 할당 가능 자원에 대한 정보를
   [자원 할당 보고](/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/#장치-플러그인-리소스-모니터링)한다.
 - `LegacyNodeRoleBehavior`: 비활성화되면, 서비스 로드 밸런서 및 노드 중단의 레거시 동작은
   `NodeDisruptionExclusion` 과 `ServiceNodeExclusion` 에 의해 제공된 기능별 레이블을 대신하여
   `node-role.kubernetes.io/master` 레이블을 무시한다.
-- `LocalStorageCapacityIsolation`: 
+- `LocalStorageCapacityIsolation`:
   [로컬 임시 스토리지](/ko/docs/concepts/configuration/manage-resources-containers/)와
   [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir)의
   `sizeLimit` 속성을 사용할 수 있게 한다.
@@ -695,15 +695,14 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   프로젝트 쿼터를 사용하여 [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir)
   스토리지 사용을 모니터링하여 성능과 정확성을
   향상시킨다.
-- `LogarithmicScaleDown`: 컨트롤러 스케일 다운 시에 파드 타임스탬프를 로그 스케일로 버켓화하여 
+- `LogarithmicScaleDown`: 컨트롤러 스케일 다운 시에 파드 타임스탬프를 로그 스케일로 버켓화하여
   축출할 파드를 반-랜덤하게 선택하는 기법을 활성화한다.
 - `MixedProtocolLBService`: 동일한 로드밸런서 유형 서비스 인스턴스에서 다른 프로토콜
   사용을 활성화한다.
-- `MountContainers` (*사용 중단됨*): 호스트의 유틸리티 컨테이너를 볼륨 마운터로
-  사용할 수 있다.
+- `MountContainers`: 호스트의 유틸리티 컨테이너를 볼륨 마운터로 사용할 수 있다.
 - `MountPropagation`: 한 컨테이너에서 다른 컨테이너 또는 파드로 마운트된 볼륨을 공유할 수 있다.
   자세한 내용은 [마운트 전파(propagation)](/ko/docs/concepts/storage/volumes/#마운트-전파-propagation)을 참고한다.
-- `NamespaceDefaultLabelName`: API 서버로 하여금 모든 네임스페이스에 대해 변경할 수 없는 (immutable) 
+- `NamespaceDefaultLabelName`: API 서버로 하여금 모든 네임스페이스에 대해 변경할 수 없는 (immutable)
   {{< glossary_tooltip text="레이블" term_id="label" >}} `kubernetes.io/metadata.name`을 설정하도록 한다. (네임스페이스의 이름도 변경 불가)
 - `NetworkPolicyEndPort`: 네트워크폴리시(NetworkPolicy)	오브젝트에서 단일 포트를 지정하는 것 대신에 포트 범위를 지정할 수 있도록, `endPort` 필드의 사용을 활성화한다.
 - `NodeDisruptionExclusion`: 영역(zone) 장애 시 노드가 제외되지 않도록 노드 레이블 `node.kubernetes.io/exclude-disruption`
@@ -712,12 +711,12 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `NonPreemptingPriority`: 프라이어리티클래스(PriorityClass)와 파드에 `preemptionPolicy` 필드를 활성화한다.
 - `PVCProtection`: 파드에서 사용 중일 때 퍼시스턴트볼륨클레임(PVC)이
   삭제되지 않도록 한다.
-- `PodDeletionCost`: 레플리카셋 다운스케일 시 삭제될 파드의 우선순위를 사용자가 조절할 수 있도록, 
+- `PodDeletionCost`: 레플리카셋 다운스케일 시 삭제될 파드의 우선순위를 사용자가 조절할 수 있도록,
    [파드 삭제 비용](/ko/docs/concepts/workloads/controllers/replicaset/#파드-삭제-비용) 기능을 활성화한다.
 - `PersistentLocalVolumes`: 파드에서 `local` 볼륨 유형의 사용을 활성화한다.
   `local` 볼륨을 요청하는 경우 파드 어피니티를 지정해야 한다.
 - `PodDisruptionBudget`: [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) 기능을 활성화한다.
-- `PodAffinityNamespaceSelector`: [파드 어피니티 네임스페이스 셀렉터](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#네임스페이스-셀렉터) 기능과 
+- `PodAffinityNamespaceSelector`: [파드 어피니티 네임스페이스 셀렉터](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#네임스페이스-셀렉터) 기능과
   [CrossNamespacePodAffinity](/ko/docs/concepts/policy/resource-quotas/#네임스페이스-간-파드-어피니티-쿼터) 쿼터 범위 기능을 활성화한다.
 - `PodOverhead`: 파드 오버헤드를 판단하기 위해 [파드오버헤드(PodOverhead)](/ko/docs/concepts/scheduling-eviction/pod-overhead/)
   기능을 활성화한다.
@@ -729,8 +728,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `PodShareProcessNamespace`: 파드에서 실행되는 컨테이너 간에 단일 프로세스 네임스페이스를
   공유하기 위해 파드에서 `shareProcessNamespace` 설정을 활성화한다. 자세한 내용은
   [파드의 컨테이너 간 프로세스 네임스페이스 공유](/docs/tasks/configure-pod-container/share-process-namespace/)에서 확인할 수 있다.
-- `ProbeTerminationGracePeriod`: 파드의 [프로브-수준 
-  `terminationGracePeriodSeconds` 설정하기](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationgraceperiodseconds) 기능을 활성화한다. 
+- `ProbeTerminationGracePeriod`: 파드의 [프로브-수준
+  `terminationGracePeriodSeconds` 설정하기](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#probe-level-terminationgraceperiodseconds) 기능을 활성화한다.
   더 자세한 사항은 [기능개선 제안](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2238-liveness-probe-grace-period)을 참고한다.
 - `ProcMountType`: SecurityContext의 `procMount` 필드를 설정하여
   컨테이너의 proc 타입의 마운트를 제어할 수 있다.
@@ -742,7 +741,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   응답에서 남은 항목 수를 표시하도록 허용한다.
 - `RemoveSelfLink`: ObjectMeta 및 ListMeta에서 `selfLink` 를 사용하지 않고
   제거한다.
-- `ResourceLimitsPriorityFunction` (*사용 중단됨*): 입력 파드의 CPU 및 메모리 한도 중
+- `RequestManagement`: 각 API 서버에서 우선 순위 및 공정성으로 요청 동시성을
+  관리할 수 있다. 1.17 이후 `APIPriorityAndFairness` 에서 사용 중단되었다.
+- `ResourceLimitsPriorityFunction`: 입력 파드의 CPU 및 메모리 한도 중
   하나 이상을 만족하는 노드에 가능한 최저 점수 1을 할당하는
   스케줄러 우선 순위 기능을 활성화한다. 의도는 동일한 점수를 가진
   노드 사이의 관계를 끊는 것이다.
@@ -770,11 +771,11 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   JWKS URL)를 활성화한다. 자세한 내용은
   [파드의 서비스 어카운트 구성](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery)을
   참고한다.
-- `ServiceAppProtocol`: 서비스와 엔드포인트에서 `AppProtocol` 필드를 활성화한다.
-- `ServiceInternalTrafficPolicy`: 서비스에서 `InternalTrafficPolicy` 필드를 활성화한다.
-- `ServiceLBNodePortControl`: 서비스에서`spec.allocateLoadBalancerNodePorts` 필드를
-  활성화한다.
-- `ServiceLoadBalancerClass`: 서비스에서 `LoadBalancerClass` 필드를 활성화한다. 자세한 내용은 [로드밸런서 구현체의 종류 확인하기](/ko/docs/concepts/services-networking/service/#load-balancer-class)를 참고한다.
+- `ServiceAppProtocol`: 서비스와 엔드포인트에서 `appProtocol` 필드를 활성화한다.
+- `ServiceInternalTrafficPolicy`: 서비스에서 `internalTrafficPolicy` 필드를 활성화한다.
+- `ServiceLBNodePortControl`: 서비스에서 `allocateLoadBalancerNodePorts` 필드를 활성화한다.
+- `ServiceLoadBalancerClass`: 서비스에서 `loadBalancerClass` 필드를 활성화한다. 자세한 내용은
+  [로드밸런서 구현체의 종류 확인하기](/ko/docs/concepts/services-networking/service/#load-balancer-class)를 참고한다.
 - `ServiceLoadBalancerFinalizer`: 서비스 로드 밸런서에 대한 Finalizer 보호를 활성화한다.
 - `ServiceNodeExclusion`: 클라우드 제공자가 생성한 로드 밸런서에서 노드를
   제외할 수 있다. "`node.kubernetes.io/exclude-from-external-load-balancers`"로
@@ -800,14 +801,14 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   스트리밍 요청의 예로는 `exec`, `attach` 및 `port-forward` 요청이 있다.
 - `SupportIPVSProxyMode`: IPVS를 사용하여 클러스터 내 서비스 로드 밸런싱을 제공한다.
   자세한 내용은 [서비스 프록시](/ko/docs/concepts/services-networking/service/#가상-ip와-서비스-프록시)를 참고한다.
-- `SupportPodPidsLimit`: 파드의 PID 제한을 지원한다.
 - `SupportNodePidsLimit`: 노드에서 PID 제한 지원을 활성화한다.
   `--system-reserved` 및 `--kube-reserved` 옵션의 `pid=<number>`
   파라미터를 지정하여 지정된 수의 프로세스 ID가
   시스템 전체와 각각 쿠버네티스 시스템 데몬에 대해 예약되도록
   할 수 있다.
-- `SuspendJob`: 잡 중지/재시작 기능을 활성화한다. 
-  자세한 내용은 [잡 문서](/ko/docs/concepts/workloads/controllers/job/)를 
+- `SupportPodPidsLimit`: 파드의 PID 제한에 대한 지원을 활성화한다.
+- `SuspendJob`: 잡 중지/재시작 기능을 활성화한다.
+  자세한 내용은 [잡 문서](/ko/docs/concepts/workloads/controllers/job/)를
   참고한다.
 - `Sysctls`: 각 파드에 설정할 수 있는 네임스페이스 커널
   파라미터(sysctl)를 지원한다. 자세한 내용은
@@ -824,14 +825,17 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `TokenRequest`: 서비스 어카운트 리소스에서 `TokenRequest` 엔드포인트를 활성화한다.
 - `TokenRequestProjection`: [`projected` 볼륨](/ko/docs/concepts/storage/volumes/#projected)을 통해
   서비스 어카운트 토큰을 파드에 주입할 수 있다.
-- `TopologyAwareHints`: 엔드포인트슬라이스(EndpointSlices)에서 토폴로지 힌트 기반 
-  토폴로지-어웨어 라우팅을 활성화한다. 자세한 내용은 
+- `TopologyAwareHints`: 엔드포인트슬라이스(EndpointSlices)에서 토폴로지 힌트 기반
+  토폴로지-어웨어 라우팅을 활성화한다. 자세한 내용은
   [토폴로지 어웨어 힌트](/docs/concepts/services-networking/topology-aware-hints/)
   를 참고한다.
 - `TopologyManager`: 쿠버네티스의 다른 컴포넌트에 대한 세분화된 하드웨어 리소스
   할당을 조정하는 메커니즘을 활성화한다.
   [노드의 토폴로지 관리 정책 제어](/docs/tasks/administer-cluster/topology-manager/)를 참고한다.
-- `VolumeCapacityPriority`: 가용 PV 용량을 기반으로 
+- `ValidateProxyRedirects`: 이 플래그는 API 서버가 동일한 호스트로만 리디렉션되는가를
+  확인해야 하는지 여부를 제어한다. `StreamingProxyRedirects`
+  플래그가 활성화된 경우에만 사용된다.
+- `VolumeCapacityPriority`: 가용 PV 용량을 기반으로
   여러 토폴로지에 있는 노드들의 우선순위를 정하는 기능을 활성화한다.
 - `VolumePVCDataSource`: 기존 PVC를 데이터 소스로 지정하는 기능을 지원한다.
 - `VolumeScheduling`: 볼륨 토폴로지 인식 스케줄링을 활성화하고
@@ -839,6 +843,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   `PersistentLocalVolumes` 기능 게이트와 함께 사용될 때
   [`local`](/ko/docs/concepts/storage/volumes/#local) 볼륨 유형을 사용할 수 있다.
 - `VolumeSnapshotDataSource`: 볼륨 스냅샷 데이터 소스 지원을 활성화한다.
+- `VolumeSubpath`: 컨테이너에 볼륨의 하위 경로(subpath)를 마운트할 수 있다.
 - `VolumeSubpathEnvExpansion`: 환경 변수를 `subPath`로 확장하기 위해
   `subPathExpr` 필드를 활성화한다.
 - `WarningHeaders`: API 응답에서 경고 헤더를 보낼 수 있다.
diff --git a/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md b/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md
index e4c790c491..bd930180cd 100644
--- a/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md
+++ b/content/ko/docs/reference/command-line-tools-reference/kube-proxy.md
@@ -5,6 +5,7 @@ weight: 30
 auto_generated: true
 ---
 
+
 <!--
 파일은 일반 [생성기](https://github.com/kubernetes-sigs/reference-docs/)를
 사용해서 컴포넌트의 Go 소스 코드를 통해 자동 생성된다.
@@ -22,7 +23,7 @@ auto_generated: true
 
 쿠버네티스 네트워크 프록시는 각 노드에서 실행된다.
 이는 각 노드의 쿠버네티스 API에 정의된 서비스를 반영하며 단순한
-TCP, UDP 및 SCTP 스트림 포워딩 또는 라운드 로빈 TCP, UDP 및 SCTP 포워딩을 백엔드 셋에서 수행 할 수 있다. 
+TCP, UDP 및 SCTP 스트림 포워딩 또는 라운드 로빈 TCP, UDP 및 SCTP 포워딩을 백엔드 셋에서 수행 할 수 있다.
 서비스 클러스트 IP 및 포트는 현재 서비스 프록시에 의해 열린 포트를 지정하는
 Docker-links-compatible 환경 변수를 통해 찾을 수 있다.
 이러한 클러스터 IP에 클러스터 DNS를 제공하는 선택적 애드온이 있다. 유저는 apiserver API로
@@ -129,7 +130,7 @@ kube-proxy [flags]
 <td colspan="2">--feature-gates mapStringBool</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>알파/실험 기능에 대한 기능 게이트를 설명하는 키=값 쌍 집합. 옵션은 다음과 같다.<br/>APIListChunking=true|false (BETA - 기본값=true)<br/>APIPriorityAndFairness=true|false (ALPHA - 기본값=false)<br/>APIResponseCompression=true|false (BETA - 기본값=true)<br/>AllAlpha=true|false (ALPHA - 기본값=false)<br/>AllBeta=true|false (BETA - 기본값=false)<br/>AllowInsecureBackendProxy=true|false (BETA - 기본값=true)<br/>AnyVolumeDataSource=true|false (ALPHA - 기본값=false)<br/>AppArmor=true|false (BETA - 기본값=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - 기본값=false)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - 기본값=false)<br/>CPUManager=true|false (BETA - 기본값=true)<br/>CRIContainerLogRotation=true|false (BETA - 기본값=true)<br/>CSIInlineVolume=true|false (BETA - 기본값=true)<br/>CSIMigration=true|false (BETA - 기본값=true)<br/>CSIMigrationAWS=true|false (BETA - 기본값=false)<br/>CSIMigrationAWSComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureDisk=true|false (BETA - 기본값=false)<br/>CSIMigrationAzureDiskComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - 기본값=false)<br/>CSIMigrationAzureFileComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationGCE=true|false (BETA - 기본값=false)<br/>CSIMigrationGCEComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationOpenStack=true|false (BETA - 기본값=false)<br/>CSIMigrationOpenStackComplete=true|false (ALPHA - 기본값=false)<br/>CSIMigrationvSphere=true|false (BETA - 기본값=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - 기본값=false)<br/>CSIStorageCapacity=true|false (ALPHA - 기본값=false)<br/>CSIVolumeFSGroupPolicy=true|false (ALPHA - 기본값=false)<br/>ConfigurableFSGroupPolicy=true|false (ALPHA - 기본값=false)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - 기본값=false)<br/>DefaultPodTopologySpread=true|false (ALPHA - 기본값=false)<br/>DevicePlugins=true|false (BETA - 기본값=true)<br/>DisableAcceleratorUsageMetrics=true|false (ALPHA - 기본값=false)<br/>DynamicKubeletConfig=true|false (BETA - 기본값=true)<br/>EndpointSlice=true|false (BETA - 기본값=true)<br/>EndpointSliceProxying=true|false (BETA - 기본값=true)<br/>EphemeralContainers=true|false (ALPHA - 기본값=false)<br/>ExpandCSIVolumes=true|false (BETA - 기본값=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - 기본값=true)<br/>ExpandPersistentVolumes=true|false (BETA - 기본값=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - 기본값=false)<br/>GenericEphemeralVolume=true|false (ALPHA - 기본값=false)<br/>HPAScaleToZero=true|false (ALPHA - 기본값=false)<br/>HugePageStorageMediumSize=true|false (BETA - 기본값=true)<br/>HyperVContainer=true|false (ALPHA - 기본값=false)<br/>IPv6DualStack=true|false (ALPHA - 기본값=false)<br/>ImmutableEphemeralVolumes=true|false (BETA - 기본값=true)<br/>KubeletPodResources=true|false (BETA - 기본값=true)<br/>LegacyNodeRoleBehavior=true|false (BETA - 기본값=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - 기본값=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - 기본값=false)<br/>NodeDisruptionExclusion=true|false (BETA - 기본값=true)<br/>NonPreemptingPriority=true|false (BETA - 기본값=true)<br/>PodDisruptionBudget=true|false (BETA - 기본값=true)<br/>PodOverhead=true|false (BETA - 기본값=true)<br/>ProcMountType=true|false (ALPHA - 기본값=false)<br/>QOSReserved=true|false (ALPHA - 기본값=false)<br/>RemainingItemCount=true|false (BETA - 기본값=true)<br/>RemoveSelfLink=true|false (ALPHA - 기본값=false)<br/>RotateKubeletServerCertificate=true|false (BETA - 기본값=true)<br/>RunAsGroup=true|false (BETA - 기본값=true)<br/>RuntimeClass=true|false (BETA - 기본값=true)<br/>SCTPSupport=true|false (BETA - 기본값=true)<br/>SelectorIndex=true|false (BETA - 기본값=true)<br/>ServerSideApply=true|false (BETA - 기본값=true)<br/>ServiceAccountIssuerDiscovery=true|false (ALPHA - 기본값=false)<br/>ServiceAppProtocol=true|false (BETA - 기본값=true)<br/>ServiceNodeExclusion=true|false (BETA - 기본값=true)<br/>ServiceTopology=true|false (ALPHA - 기본값=false)<br/>SetHostnameAsFQDN=true|false (ALPHA - 기본값=false)<br/>StartupProbe=true|false (BETA - 기본값=true)<br/>StorageVersionHash=true|false (BETA - 기본값=true)<br/>SupportNodePidsLimit=true|false (BETA - 기본값=true)<br/>SupportPodPidsLimit=true|false (BETA - 기본값=true)<br/>Sysctls=true|false (BETA - 기본값=true)<br/>TTLAfterFinished=true|false (ALPHA - 기본값=false)<br/>TokenRequest=true|false (BETA - 기본값=true)<br/>TokenRequestProjection=true|false (BETA - 기본값=true)<br/>TopologyManager=true|false (BETA - 기본값=true)<br/>ValidateProxyRedirects=true|false (BETA - 기본값=true)<br/>VolumeSnapshotDataSource=true|false (BETA - 기본값=true)<br/>WarningHeaders=true|false (BETA - 기본값=true)<br/>WinDSR=true|false (ALPHA - 기본값=false)<br/>WinOverlay=true|false (ALPHA - 기본값=false)<br/>WindowsEndpointSliceProxying=true|false (ALPHA - 기본값=false)</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>알파/실험 기능에 대한 기능 게이트를 설명하는 키=값 쌍 집합. 옵션은 다음과 같다.<br/>APIListChunking=true|false (BETA - 기본값=true)<br/>APIPriorityAndFairness=true|false (BETA - 기본값=true)<br/>APIResponseCompression=true|false (BETA - 기본값=true)<br/>APIServerIdentity=true|false (ALPHA - 기본값=false)<br/>AllAlpha=true|false (ALPHA - 기본값=false)<br/>AllBeta=true|false (BETA - 기본값=false)<br/>AnyVolumeDataSource=true|false (ALPHA - 기본값=false)<br/>AppArmor=true|false (BETA - 기본값=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - 기본값=false)<br/>BoundServiceAccountTokenVolume=true|false (BETA - 기본값=true)<br/>CPUManager=true|false (BETA - 기본값=true)<br/>CSIInlineVolume=true|false (BETA - 기본값=true)<br/>CSIMigration=true|false (BETA - 기본값=true)<br/>CSIMigrationAWS=true|false (BETA - 기본값=false)<br/>CSIMigrationAzureDisk=true|false (BETA - 기본값=false)<br/>CSIMigrationAzureFile=true|false (BETA - 기본값=false)<br/>CSIMigrationGCE=true|false (BETA - 기본값=false)<br/>CSIMigrationOpenStack=true|false (BETA - 기본값=true)<br/>CSIMigrationvSphere=true|false (BETA - 기본값=false)<br/>CSIMigrationvSphereComplete=true|false (BETA - 기본값=false)<br/>CSIServiceAccountToken=true|false (BETA - 기본값=true)<br/>CSIStorageCapacity=true|false (BETA - 기본값=true)<br/>CSIVolumeFSGroupPolicy=true|false (BETA - 기본값=true)<br/>CSIVolumeHealth=true|false (ALPHA - 기본값=false)<br/>ConfigurableFSGroupPolicy=true|false (BETA - 기본값=true)<br/>ControllerManagerLeaderMigration=true|false (ALPHA - 기본값=false)<br/>CronJobControllerV2=true|false (BETA - 기본값=true)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - 기본값=false)<br/>DaemonSetUpdateSurge=true|false (ALPHA - 기본값=false)<br/>DefaultPodTopologySpread=true|false (BETA - 기본값=true)<br/>DevicePlugins=true|false (BETA - 기본값=true)<br/>DisableAcceleratorUsageMetrics=true|false (BETA - 기본값=true)<br/>DownwardAPIHugePages=true|false (BETA - 기본값=false)<br/>DynamicKubeletConfig=true|false (BETA - 기본값=true)<br/>EfficientWatchResumption=true|false (BETA - 기본값=true)<br/>EndpointSliceProxying=true|false (BETA - 기본값=true)<br/>EndpointSliceTerminatingCondition=true|false (ALPHA - 기본값=false)<br/>EphemeralContainers=true|false (ALPHA - 기본값=false)<br/>ExpandCSIVolumes=true|false (BETA - 기본값=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - 기본값=true)<br/>ExpandPersistentVolumes=true|false (BETA - 기본값=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - 기본값=false)<br/>GenericEphemeralVolume=true|false (BETA - 기본값=true)<br/>GracefulNodeShutdown=true|false (BETA - 기본값=true)<br/>HPAContainerMetrics=true|false (ALPHA - 기본값=false)<br/>HPAScaleToZero=true|false (ALPHA - 기본값=false)<br/>HugePageStorageMediumSize=true|false (BETA - 기본값=true)<br/>IPv6DualStack=true|false (BETA - 기본값=true)<br/>InTreePluginAWSUnregister=true|false (ALPHA - 기본값=false)<br/>InTreePluginAzureDiskUnregister=true|false (ALPHA - 기본값=false)<br/>InTreePluginAzureFileUnregister=true|false (ALPHA - 기본값=false)<br/>InTreePluginGCEUnregister=true|false (ALPHA - 기본값=false)<br/>InTreePluginOpenStackUnregister=true|false (ALPHA - 기본값=false)<br/>InTreePluginvSphereUnregister=true|false (ALPHA - 기본값=false)<br/>IndexedJob=true|false (ALPHA - 기본값=false)<br/>IngressClassNamespacedParams=true|false (ALPHA - 기본값=false)<br/>KubeletCredentialProviders=true|false (ALPHA - 기본값=false)<br/>KubeletPodResources=true|false (BETA - 기본값=true)<br/>KubeletPodResourcesGetAllocatable=true|false (ALPHA - 기본값=false)<br/>LocalStorageCapacityIsolation=true|false (BETA - 기본값=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - 기본값=false)<br/>LogarithmicScaleDown=true|false (ALPHA - 기본값=false)<br/>MemoryManager=true|false (ALPHA - 기본값=false)<br/>MixedProtocolLBService=true|false (ALPHA - 기본값=false)<br/>NamespaceDefaultLabelName=true|false (BETA - 기본값=true)<br/>NetworkPolicyEndPort=true|false (ALPHA - 기본값=false)<br/>NonPreemptingPriority=true|false (BETA - 기본값=true)<br/>PodAffinityNamespaceSelector=true|false (ALPHA - 기본값=false)<br/>PodDeletionCost=true|false (ALPHA - 기본값=false)<br/>PodOverhead=true|false (BETA - 기본값=true)<br/>PreferNominatedNode=true|false (ALPHA - 기본값=false)<br/>ProbeTerminationGracePeriod=true|false (ALPHA - 기본값=false)<br/>ProcMountType=true|false (ALPHA - 기본값=false)<br/>QOSReserved=true|false (ALPHA - 기본값=false)<br/>RemainingItemCount=true|false (BETA - 기본값=true)<br/>RemoveSelfLink=true|false (BETA - 기본값=true)<br/>RotateKubeletServerCertificate=true|false (BETA - 기본값=true)<br/>ServerSideApply=true|false (BETA - 기본값=true)<br/>ServiceInternalTrafficPolicy=true|false (ALPHA - 기본값=false)<br/>ServiceLBNodePortControl=true|false (ALPHA - 기본값=false)<br/>ServiceLoadBalancerClass=true|false (ALPHA - 기본값=false)<br/>ServiceTopology=true|false (ALPHA - 기본값=false)<br/>SetHostnameAsFQDN=true|false (BETA - 기본값=true)<br/>SizeMemoryBackedVolumes=true|false (ALPHA - 기본값=false)<br/>StorageVersionAPI=true|false (ALPHA - 기본값=false)<br/>StorageVersionHash=true|false (BETA - 기본값=true)<br/>SuspendJob=true|false (ALPHA - 기본값=false)<br/>TTLAfterFinished=true|false (BETA - 기본값=true)<br/>TopologyAwareHints=true|false (ALPHA - 기본값=false)<br/>TopologyManager=true|false (BETA - 기본값=true)<br/>ValidateProxyRedirects=true|false (BETA - 기본값=true)<br/>VolumeCapacityPriority=true|false (ALPHA - 기본값=false)<br/>WarningHeaders=true|false (BETA - 기본값=true)<br/>WinDSR=true|false (ALPHA - 기본값=false)<br/>WinOverlay=true|false (BETA - 기본값=true)<br/>WindowsEndpointSliceProxying=true|false (BETA - 기본값=true)</p></td>
 </tr>
 
 <tr>
@@ -351,6 +352,3 @@ kube-proxy [flags]
 
 </tbody>
 </table>
-
-
-
diff --git a/content/ko/docs/reference/using-api/client-libraries.md b/content/ko/docs/reference/using-api/client-libraries.md
index f8c1cb91c8..639c10ac34 100644
--- a/content/ko/docs/reference/using-api/client-libraries.md
+++ b/content/ko/docs/reference/using-api/client-libraries.md
@@ -28,12 +28,12 @@ API 호출 또는 요청/응답 타입을 직접 구현할 필요는 없다.
 
 | 언어      | 클라이언트 라이브러리 | 예제 프로그램 |
 |----------|----------------|-----------------|
-| Go       | [github.com/kubernetes/client-go/](https://github.com/kubernetes/client-go/) | [둘러보기](https://github.com/kubernetes/client-go/tree/master/examples)
-| Python       | [github.com/kubernetes-client/python/](https://github.com/kubernetes-client/python/) | [둘러보기](https://github.com/kubernetes-client/python/tree/master/examples)
-| Java     | [github.com/kubernetes-client/java](https://github.com/kubernetes-client/java/) | [둘러보기](https://github.com/kubernetes-client/java#installation)
 | dotnet   | [github.com/kubernetes-client/csharp](https://github.com/kubernetes-client/csharp) | [둘러보기](https://github.com/kubernetes-client/csharp/tree/master/examples/simple)
-| JavaScript   | [github.com/kubernetes-client/javascript](https://github.com/kubernetes-client/javascript) | [둘러보기](https://github.com/kubernetes-client/javascript/tree/master/examples)
+| Go       | [github.com/kubernetes/client-go/](https://github.com/kubernetes/client-go/) | [둘러보기](https://github.com/kubernetes/client-go/tree/master/examples)
 | Haskell  | [github.com/kubernetes-client/haskell](https://github.com/kubernetes-client/haskell) | [둘러보기](https://github.com/kubernetes-client/haskell/tree/master/kubernetes-client/example)
+| Java     | [github.com/kubernetes-client/java](https://github.com/kubernetes-client/java/) | [둘러보기](https://github.com/kubernetes-client/java#installation)
+| JavaScript   | [github.com/kubernetes-client/javascript](https://github.com/kubernetes-client/javascript) | [둘러보기](https://github.com/kubernetes-client/javascript/tree/master/examples)
+| Python   | [github.com/kubernetes-client/python/](https://github.com/kubernetes-client/python/) | [둘러보기](https://github.com/kubernetes-client/python/tree/master/examples)
 
 
 ## 커뮤니티에 의해 관리되는 클라이언트 라이브러리
@@ -46,6 +46,10 @@ API 호출 또는 요청/응답 타입을 직접 구현할 필요는 없다.
 | 언어                  | 클라이언트 라이브러리                          |
 | -------------------- | ---------------------------------------- |
 | Clojure              | [github.com/yanatan16/clj-kubernetes-api](https://github.com/yanatan16/clj-kubernetes-api) |
+| DotNet               | [github.com/tonnyeremin/kubernetes_gen](https://github.com/tonnyeremin/kubernetes_gen) |
+| DotNet (RestSharp)   | [github.com/masroorhasan/Kubernetes.DotNet](https://github.com/masroorhasan/Kubernetes.DotNet) |
+| Elixir               | [github.com/obmarg/kazan](https://github.com/obmarg/kazan/) |
+| Elixir               | [github.com/coryodaniel/k8s](https://github.com/coryodaniel/k8s) |
 | Go                   | [github.com/ericchiang/k8s](https://github.com/ericchiang/k8s) |
 | Java (OSGi)          | [bitbucket.org/amdatulabs/amdatu-kubernetes](https://bitbucket.org/amdatulabs/amdatu-kubernetes) |
 | Java (Fabric8, OSGi) | [github.com/fabric8io/kubernetes-client](https://github.com/fabric8io/kubernetes-client) |
@@ -68,13 +72,10 @@ API 호출 또는 요청/응답 타입을 직접 구현할 필요는 없다.
 | Python               | [github.com/Frankkkkk/pykorm](https://github.com/Frankkkkk/pykorm) |
 | Ruby                 | [github.com/abonas/kubeclient](https://github.com/abonas/kubeclient) |
 | Ruby                 | [github.com/Ch00k/kuber](https://github.com/Ch00k/kuber) |
+| Ruby                 | [github.com/k8s-ruby/k8s-ruby](https://github.com/k8s-ruby/k8s-ruby) |
 | Ruby                 | [github.com/kontena/k8s-client](https://github.com/kontena/k8s-client) |
 | Rust                 | [github.com/clux/kube-rs](https://github.com/clux/kube-rs) |
 | Rust                 | [github.com/ynqa/kubernetes-rust](https://github.com/ynqa/kubernetes-rust) |
 | Scala                | [github.com/hagay3/skuber](https://github.com/hagay3/skuber) |
 | Scala                | [github.com/joan38/kubernetes-client](https://github.com/joan38/kubernetes-client) |
-| DotNet               | [github.com/tonnyeremin/kubernetes_gen](https://github.com/tonnyeremin/kubernetes_gen) |
 | Swift                | [github.com/swiftkube/client](https://github.com/swiftkube/client) |
-| DotNet (RestSharp)   | [github.com/masroorhasan/Kubernetes.DotNet](https://github.com/masroorhasan/Kubernetes.DotNet) |
-| Elixir               | [github.com/obmarg/kazan](https://github.com/obmarg/kazan/) |
-| Elixir               | [github.com/coryodaniel/k8s](https://github.com/coryodaniel/k8s) |
diff --git a/content/ko/docs/setup/production-environment/tools/kops.md b/content/ko/docs/setup/production-environment/tools/kops.md
index 9c241e496f..3bfb49380e 100644
--- a/content/ko/docs/setup/production-environment/tools/kops.md
+++ b/content/ko/docs/setup/production-environment/tools/kops.md
@@ -57,10 +57,10 @@ curl -LO https://github.com/kubernetes/kops/releases/download/$(curl -s https://
 $(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)
 ```
 
-예를 들어 kops 버전을 v1.15.0을 다운로드 하려면 다음을 입력한다.
+예를 들어 kops 버전을 v1.20.0을 다운로드 하려면 다음을 입력한다.
 
 ```shell
-curl -LO  https://github.com/kubernetes/kops/releases/download/1.15.0/kops-darwin-amd64
+curl -LO https://github.com/kubernetes/kops/releases/download/v1.20.0/kops-darwin-amd64
 ```
 
 kops 바이너리를 실행 가능하게 만든다.
@@ -94,10 +94,10 @@ curl -LO https://github.com/kubernetes/kops/releases/download/$(curl -s https://
 ```shell
 $(curl -s https://api.github.com/repos/kubernetes/kops/releases/latest | grep tag_name | cut -d '"' -f 4)
 ```
-예를 들어 kops 버전을 v1.15.0을 다운로드 하려면 다음을 입력한다.
+예를 들어 kops 버전을 v1.20.0을 다운로드 하려면 다음을 입력한다.
 
 ```shell
-curl -LO  https://github.com/kubernetes/kops/releases/download/1.15.0/kops-linux-amd64
+curl -LO https://github.com/kubernetes/kops/releases/download/v1.20.0/kops-linux-amd64
 ```
 
 kops 바이너리를 실행 가능하게 만든다.
diff --git a/content/ko/docs/setup/production-environment/tools/kubespray.md b/content/ko/docs/setup/production-environment/tools/kubespray.md
index 301c724927..6e7d9c8185 100644
--- a/content/ko/docs/setup/production-environment/tools/kubespray.md
+++ b/content/ko/docs/setup/production-environment/tools/kubespray.md
@@ -50,7 +50,7 @@ Kubespray는 환경에 맞는 프로비저닝을 돕기 위해 아래와 같은
 
 ### (2/5) 인벤토리 파일 구성하기
 
-서버들을 프로비저닝 한 후, [Ansible의 인벤토리 파일](https://docs.ansible.com/ansible/intro_inventory.html)을 만들어야 한다. 수동으로 만들 수도 있고, 동적인 인벤토리 스크립트를 통해 만들 수도 있다. 더 많이 알고싶다면 " [나만의 인벤토리 만들기](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)" 글을 확인하자.
+서버들을 프로비저닝 한 후, [Ansible의 인벤토리 파일](https://docs.ansible.com/ansible/latest/network/getting_started/first_inventory.html)을 만들어야 한다. 수동으로 만들 수도 있고, 동적인 인벤토리 스크립트를 통해 만들 수도 있다. 더 많이 알고싶다면 " [나만의 인벤토리 만들기](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/getting-started.md#building-your-own-inventory)" 글을 확인하자.
 
 ### (3/5) 클러스터 디플로이먼트 계획하기
 
diff --git a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index cbe02c49e2..2a7826c414 100644
--- a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -210,10 +210,11 @@ CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템
 {{< table caption="윈도우 서비스 구성" >}}
 | 기능 | 설명 | 지원되는 쿠버네티스 버전 | 지원되는 윈도우 OS 빌드 | 활성화하는 방법 |
 | ------- | ----------- | ----------------------------- | -------------------------- | ------------- |
-| 세션 어피니티 | 특정 클라이언트의 연결이 매번 동일한 파드로 전달되도록 한다. | v1.19 이상 | [윈도우 서버 vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) 이상 | `service.spec.sessionAffinity`를 "ClientIP"로 설정 |
-| 직접 서버 반환 | IP 주소 수정 및 LBNAT가 컨테이너 vSwitch 포트에서 직접 발생하는 로드 밸런싱 모드. 서비스 트래픽은 소스 IP가 원래 파드 IP로 설정된 상태로 도착한다. 낮은 지연 시간과 확장성을 약속한다. | v1.15 이상 | 윈도우 서버, 버전 2004 | kube-proxy에서 다음 플래그를 설정한다. `--feature-gates="WinDSR=true" --enable-dsr=true` |
-| 대상 보존(Preserve-Destination) | 서비스 트래픽의 DNAT를 스킵하여, 백엔드 파드에 도달하는 패킷에서 대상 서비스의 가상 IP를 보존한다. 이 설정은 또한 수신 패킷의 클라이언트 IP가 보존되도록 한다. | v1.15 이상 | 윈도우 서버, 버전 1903 (이상) | 서비스 어느테이션에서 `"preserve-destination": "true"`를 설정하고 kube-proxy에서 DSR 플래그를 활성화한다. |
-| IPv4/IPv6 이중 스택 네트워킹 | 클러스터 내/외부 기본 IPv4-to-IPv4 통신과 함께 IPv6-to-IPv6 통신 | v1.19 이상 | 윈도우 서버 vNext Insider Preview Build 19603(또는 그 이상) | [IPv4/IPv6 이중 스택](#ipv4ipv6-이중-스택)을 참고한다. |
+| 세션 어피니티 | 특정 클라이언트의 연결이 매번 동일한 파드로 전달되도록 한다. | v1.20 이상 | [윈도우 서버 vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) 이상 | `service.spec.sessionAffinity`를 "ClientIP"로 설정 |
+| 직접 서버 반환 (DSR) | IP 주소 수정 및 LBNAT가 컨테이너 vSwitch 포트에서 직접 발생하는 로드 밸런싱 모드. 서비스 트래픽은 소스 IP가 원래 파드 IP로 설정된 상태로 도착한다. | v1.20 이상 | 윈도우 서버 2019 | kube-proxy에서 다음 플래그를 설정한다. `--feature-gates="WinDSR=true" --enable-dsr=true` |
+| 대상 보존(Preserve-Destination) | 서비스 트래픽의 DNAT를 스킵하여, 백엔드 파드에 도달하는 패킷에서 대상 서비스의 가상 IP를 보존한다. 또한 노드-노드 전달을 비활성화한다. | v1.20 이상 | 윈도우 서버, 버전 1903 (또는 그 이상) | 서비스 어노테이션에서 `"preserve-destination": "true"`를 설정하고 kube-proxy에서 DSR을 활성화한다. |
+| IPv4/IPv6 이중 스택 네트워킹 | 클러스터 내/외부 기본 IPv4-to-IPv4 통신과 함께 IPv6-to-IPv6 통신 | v1.19 이상 | 윈도우 서버, 버전 2004 (또는 그 이상) | [IPv4/IPv6 이중 스택](#ipv4ipv6-이중-스택)을 참고한다. |
+| 클라이언트 IP 보존 | 인그레스 트래픽의 소스 IP가 유지되도록 한다. 또한 노드-노드 전달을 비활성화한다. | v1.20 이상 | 윈도우 서버, 버전 2019 (또는 그 이상) | `service.spec.externalTrafficPolicy` 를 "Local"로 설정하고 kube-proxy에서 DSR을 활성화한다. |
 {{< /table >}}
 
 #### IPv4/IPv6 이중 스택
@@ -308,9 +309,9 @@ kubelet 파라미터 `--kubelet-reserve` 를 사용하여 CPU 사용량을 합
 * 노드 자체에서 로컬 NodePort 접근은 실패한다. (다른 노드 또는 외부 클라이언트에서는 가능)
 * 노드에서 서비스 VIP에 접근하는 것은 향후 윈도우 서버 릴리스에서 사용할 수 있다.
 * 한 서비스는 최대 64개의 백엔드 파드 또는 고유한 목적지 IP를 지원할 수 있다.
-* kube-proxy의 오버레이 네트워킹 지원은 알파 릴리스이다. 또한 윈도우 서버 2019에 [KB4482887](https://support.microsoft.com/ko-kr/help/4482887/windows-10-update-kb4482887)을 설치해야 한다.
-* 로컬 트래픽 정책 및 DSR 모드
-* l2bridge, l2tunnel 또는 오버레이 네트워크에 연결된 윈도우 컨테이너는 IPv6 스택을 통한 통신을 지원하지 않는다. 이러한 네트워크 드라이버가 IPv6 주소를 사용하고 kubelet, kube-proxy 및 CNI 플러그인에서 후속 쿠버네티스 작업을 사용할 수 있도록 하는데 필요한 뛰어난 윈도우 플랫폼 작업이 있다.
+* kube-proxy의 오버레이 네트워킹 지원은 베타 기능이다. 또한 윈도우 서버 2019에 [KB4482887](https://support.microsoft.com/ko-kr/help/4482887/windows-10-update-kb4482887)을 설치해야 한다.
+* 비-DSR 모드의 로컬 트래픽 정책
+* 오버레이 네트워크에 연결된 윈도우 컨테이너는 IPv6 스택을 통한 통신을 지원하지 않는다. 이 네트워크 드라이버가 IPv6 주소를 사용하고 kubelet, kube-proxy 및 CNI 플러그인에서 후속 쿠버네티스 작업을 사용할 수 있도록 하는데 필요한 뛰어난 윈도우 플랫폼 작업이 있다.
 * win-overlay, win-bridge, Azure-CNI 플러그인을 통해 ICMP 프로토콜을 사용하는 아웃바운드 통신. 특히, 윈도우 데이터 플레인([VFP](https://www.microsoft.com/en-us/research/project/azure-virtual-filtering-platform/))은 ICMP 패킷 치환을 지원하지 않는다. 이것은 다음을 의미한다.
   * 동일한 네트워크(예: ping을 통한 파드 간 통신) 내의 목적지로 전달되는 ICMP 패킷은 예상대로 제한 없이 작동한다.
   * TCP/UDP 패킷은 예상대로 제한 없이 작동한다.
diff --git a/content/ko/docs/setup/release/notes.md b/content/ko/docs/setup/release/notes.md
index 05de7fb440..ada4903931 100644
--- a/content/ko/docs/setup/release/notes.md
+++ b/content/ko/docs/setup/release/notes.md
@@ -19,6 +19,8 @@ card:
 
 ## v1.21.0 다운로드
 
+### 소스 코드
+
 파일명 | sha512 해시
 -------- | -----------
 [kubernetes.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes.tar.gz) | `19bb76a3fa5ce4b9f043b2a3a77c32365ab1fcb902d8dd6678427fb8be8f49f64a5a03dc46aaef9c7dadee05501cf83412eda46f0edacbb8fc1ed0bf5fb79142`
@@ -62,12 +64,6 @@ card:
 
 ## v1.20.0 이후 변경로그 (Changelog)
 
-# v1.21.0-rc.0 릴리스 노트
-
-[문서](https://docs.k8s.io/docs/home)
-
-# v1.20.0 이후 변경로그 (Changelog)
-
 ## 새로운 소식 (주요 테마)
 
 ### Deprecation of PodSecurityPolicy
@@ -157,18 +153,18 @@ The feature gate currently falls back to the default behavior in most cases. Ena
 - `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
 - `discovery.k8s.io/v1beta1` EndpointSlices are deprecated in favor of `discovery.k8s.io/v1`, and will no longer be served in Kubernetes v1.25. ([#100472](https://github.com/kubernetes/kubernetes/pull/100472), [@liggitt](https://github.com/liggitt))
 - `diskformat` storage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
-  
+
   vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
-  
+
   VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
-  
+
   Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
-  
+
   Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel))
 
 ### API 변경
 
-- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
+- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels.
   2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
 - Add Probe-level terminationGracePeriodSeconds field ([#99375](https://github.com/kubernetes/kubernetes/pull/99375), [@ehashman](https://github.com/ehashman)) [SIG API Machinery, Apps, Node and Testing]
 - Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed`. This is an alpha field and is only honored by servers with the `IndexedJob` feature gate enabled. ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
@@ -182,8 +178,8 @@ The feature gate currently falls back to the default behavior in most cases. Ena
 - Generic ephemeral volumes are beta. ([#99643](https://github.com/kubernetes/kubernetes/pull/99643), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Node, Storage and Testing]
 - Hugepages request values are limited to integer multiples of the page size. ([#98515](https://github.com/kubernetes/kubernetes/pull/98515), [@lala123912](https://github.com/lala123912)) [SIG Apps]
 - Implement the GetAvailableResources in the podresources API. ([#95734](https://github.com/kubernetes/kubernetes/pull/95734), [@fromanirh](https://github.com/fromanirh)) [SIG Instrumentation, Node and Testing]
-- IngressClass resource can now reference a resource in a specific namespace 
-  for implementation-specific configuration (previously only Cluster-level resources were allowed). 
+- IngressClass resource can now reference a resource in a specific namespace
+  for implementation-specific configuration (previously only Cluster-level resources were allowed).
   This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi))
 - Jobs API has a new `.spec.suspend` field that can be used to suspend and resume Jobs. This is an alpha field which is only honored by servers with the `SuspendJob` feature gate enabled. ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac))
 - Kubelet Graceful Node Shutdown feature graduates to Beta and enabled by default. ([#99735](https://github.com/kubernetes/kubernetes/pull/99735), [@bobbypage](https://github.com/bobbypage))
@@ -275,7 +271,7 @@ The feature gate currently falls back to the default behavior in most cases. Ena
 - The Kubernetes pause image manifest list now contains an image for Windows Server 20H2. ([#97322](https://github.com/kubernetes/kubernetes/pull/97322), [@claudiubelu](https://github.com/claudiubelu)) [SIG Windows]
 - The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
 - The `CronJobControllerV2` feature flag graduates to Beta and set to be enabled by default. ([#98878](https://github.com/kubernetes/kubernetes/pull/98878), [@soltysh](https://github.com/soltysh))
-- The `EndpointSlice` mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
+- The `EndpointSlice` mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored.
   The well-known annotation `endpoints.kubernetes.io/last-change-trigger-time` is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea))
 - The `RunAsGroup` feature has been promoted to GA in this release. ([#94641](https://github.com/kubernetes/kubernetes/pull/94641), [@krmayankk](https://github.com/krmayankk)) [SIG Auth and Node]
 - The `ServiceAccountIssuerDiscovery` feature has graduated to GA, and is unconditionally enabled. The `ServiceAccountIssuerDiscovery` feature-gate will be removed in 1.22. ([#98553](https://github.com/kubernetes/kubernetes/pull/98553), [@mtaufen](https://github.com/mtaufen)) [SIG API Machinery, Auth and Testing]
@@ -554,91 +550,6 @@ The feature gate currently falls back to the default behavior in most cases. Ena
 - sigs.k8s.io/kustomize: v2.0.3+incompatible
 
 
-## 의존성
-
-### 추가
-- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
-- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
-- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
-- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
-- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
-- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
-- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
-- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
-- go.starlark.net: 8dd3e2e
-- golang.org/x/term: 6a3ed07
-- sigs.k8s.io/kustomize/api: v0.8.5
-- sigs.k8s.io/kustomize/cmd/config: v0.9.7
-- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
-- sigs.k8s.io/kustomize/kyaml: v0.10.15
-
-### 변경
-- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
-- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
-- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
-- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
-- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
-- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
-- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
-- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
-- github.com/creack/pty: [v1.1.7 → v1.1.11](https://github.com/creack/pty/compare/v1.1.7...v1.1.11)
-- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
-- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
-- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
-- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
-- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
-- github.com/google/cadvisor: [v0.38.5 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.5...v0.39.0)
-- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
-- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
-- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
-- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
-- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
-- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
-- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
-- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
-- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
-- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
-- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
-- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
-- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
-- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
-- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
-- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
-- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
-- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
-- golang.org/x/crypto: 7f63de1 → 5ea612d
-- golang.org/x/exp: 6cc2880 → 85be41e
-- golang.org/x/mobile: d2bd2a2 → e6ae53a
-- golang.org/x/mod: v0.3.0 → ce943fd
-- golang.org/x/net: 69a7880 → 3d97a24
-- golang.org/x/sync: cd5d95a → 67f06af
-- golang.org/x/sys: 5cba982 → a50acf3
-- golang.org/x/time: 3af7569 → f8bda1e
-- golang.org/x/tools: c1934b7 → v0.1.0
-- gopkg.in/check.v1: 41f04d3 → 8fa4692
-- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
-- gotest.tools/v3: v3.0.2 → v3.0.3
-- k8s.io/gengo: 83324d8 → b6c5ce2
-- k8s.io/klog/v2: v2.4.0 → v2.8.0
-- k8s.io/kube-openapi: d219536 → 591a79e
-- k8s.io/system-validators: v1.2.0 → v1.4.0
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.1.0
-
-### 제거
-- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
-- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
-- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
-- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
-- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
-- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
-- sigs.k8s.io/kustomize: v2.0.3+incompatible
-
-
 
 # v1.21.0-rc.0
 
@@ -695,7 +606,7 @@ filename | sha512 hash
 ### (No, really, you MUST read this before you upgrade)
 
  - Migrated pkg/kubelet/cm/cpuset/cpuset.go to structured logging. Exit code changed from 255 to 1. ([#100007](https://github.com/kubernetes/kubernetes/pull/100007), [@utsavoza](https://github.com/utsavoza)) [SIG Instrumentation and Node]
- 
+
 ## Changes by Kind
 
 ### API Change
@@ -865,7 +776,7 @@ filename | sha512 hash
   Exit code changed from 255 to 1 ([#99838](https://github.com/kubernetes/kubernetes/pull/99838), [@adisky](https://github.com/adisky)) [SIG Node]
   - Pkg/kubelet/kuberuntime/kuberuntime_manager.go migrated to structured logging
   Exit code changed from 255 to 1 ([#99841](https://github.com/kubernetes/kubernetes/pull/99841), [@adisky](https://github.com/adisky)) [SIG Instrumentation and Node]
- 
+
 ## Changes by Kind
 
 ### Deprecation
@@ -875,18 +786,18 @@ filename | sha512 hash
   Deprecate --serviceaccount --hostport --requests --limits in kubectl run ([#99732](https://github.com/kubernetes/kubernetes/pull/99732), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
 - `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
 - `diskformat` stroage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
-  
+
   vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
-  
+
   VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
-  
+
   Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
-  
+
   Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
 
 ### API Change
 
-- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
+- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels.
   2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
 - Add a default metadata name labels for selecting any namespace by its name. ([#96968](https://github.com/kubernetes/kubernetes/pull/96968), [@jayunit100](https://github.com/jayunit100)) [SIG API Machinery, Apps, Cloud Provider, Storage and Testing]
 - Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed` ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
@@ -894,8 +805,8 @@ filename | sha512 hash
 - DaemonSets accept a MaxSurge integer or percent on their rolling update strategy that will launch the updated pod on nodes and wait for those pods to go ready before marking the old out-of-date pods as deleted. This allows workloads to avoid downtime during upgrades when deployed using DaemonSets. This feature is alpha and is behind the DaemonSetUpdateSurge feature gate. ([#96441](https://github.com/kubernetes/kubernetes/pull/96441), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps and Testing]
 - EndpointSlice API is now GA. The EndpointSlice topology field has been removed from the GA API and will be replaced by a new per Endpoint Zone field. If the topology field was previously used, it will be converted into an annotation in the v1 Resource. The discovery.k8s.io/v1alpha1 API is removed. ([#99662](https://github.com/kubernetes/kubernetes/pull/99662), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network and Testing]
 - EndpointSlice Controllers are now GA. The EndpointSlice Controller will not populate the `deprecatedTopology` field and will only provide topology information through the `zone` and `nodeName` fields. ([#99870](https://github.com/kubernetes/kubernetes/pull/99870), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, Apps, Auth, Network and Testing]
-- IngressClass resource can now reference a resource in a specific namespace 
-  for implementation-specific configuration(previously only Cluster-level resources were allowed). 
+- IngressClass resource can now reference a resource in a specific namespace
+  for implementation-specific configuration(previously only Cluster-level resources were allowed).
   This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi)) [SIG API Machinery, CLI and Network]
 - Introduce conditions for PodDisruptionBudget ([#98127](https://github.com/kubernetes/kubernetes/pull/98127), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
 - Jobs API has a new .spec.suspend field that can be used to suspend and resume Jobs ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
@@ -909,7 +820,7 @@ filename | sha512 hash
 - PodSecurityPolicy only stores "generic" as allowed volume type if the GenericEphemeralVolume feature gate is enabled ([#98918](https://github.com/kubernetes/kubernetes/pull/98918), [@pohly](https://github.com/pohly)) [SIG Auth and Security]
 - Promote CronJobs to batch/v1 ([#99423](https://github.com/kubernetes/kubernetes/pull/99423), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
 - Remove support for building Kubernetes with bazel. ([#99561](https://github.com/kubernetes/kubernetes/pull/99561), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Scheduling, Storage, Testing and Windows]
-- Setting loadBalancerClass in load balancer type of service is available with this PR. 
+- Setting loadBalancerClass in load balancer type of service is available with this PR.
   Users who want to use a custom load balancer can specify loadBalancerClass to achieve it. ([#98277](https://github.com/kubernetes/kubernetes/pull/98277), [@XudongLiuHarold](https://github.com/XudongLiuHarold)) [SIG API Machinery, Apps, Cloud Provider and Network]
 - Storage capacity tracking (= the CSIStorageCapacity feature) is beta, storage.k8s.io/v1alpha1/VolumeAttachment and storage.k8s.io/v1alpha1/CSIStorageCapacity objects are deprecated ([#99641](https://github.com/kubernetes/kubernetes/pull/99641), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, Scheduling, Storage and Testing]
 - Support for Indexed Job: a Job that is considered completed when Pods associated to indexes from 0 to (.spec.completions-1) have succeeded. ([#98812](https://github.com/kubernetes/kubernetes/pull/98812), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
@@ -942,7 +853,7 @@ filename | sha512 hash
 - Remove cAdvisor json metrics api collected by Kubelet ([#99236](https://github.com/kubernetes/kubernetes/pull/99236), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
 - Sysctls is now GA and locked to default ([#99158](https://github.com/kubernetes/kubernetes/pull/99158), [@wgahnagl](https://github.com/wgahnagl)) [SIG Node]
 - The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
-- The endpointslice mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
+- The endpointslice mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored.
   The well-known annotation endpoints.kubernetes.io/last-change-trigger-time is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea)) [SIG Apps, Network and Testing]
 - Update the latest validated version of Docker to 20.10 ([#98977](https://github.com/kubernetes/kubernetes/pull/98977), [@neolit123](https://github.com/neolit123)) [SIG CLI, Cluster Lifecycle and Node]
 - Upgrade node local dns to 1.17.0 for better IPv6 support ([#99749](https://github.com/kubernetes/kubernetes/pull/99749), [@pacoxu](https://github.com/pacoxu)) [SIG Cloud Provider and Network]
@@ -973,7 +884,7 @@ filename | sha512 hash
 - Return zero time (midnight on Jan. 1, 1970) instead of negative number when reporting startedAt and finishedAt of the not started or a running Pod when using dockershim as a runtime. ([#99585](https://github.com/kubernetes/kubernetes/pull/99585), [@Iceber](https://github.com/Iceber)) [SIG Node]
 - Stdin is now only passed to client-go exec credential plugins when it is detected to be an interactive terminal. Previously, it was passed to client-go exec plugins when **stdout*- was detected to be an interactive terminal. ([#99654](https://github.com/kubernetes/kubernetes/pull/99654), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
 - The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 ([#99795](https://github.com/kubernetes/kubernetes/pull/99795), [@robscott](https://github.com/robscott)) [SIG Network]
-- Updates the commands 
+- Updates the commands
    - kubectl kustomize {arg}
    - kubectl apply -k {arg}
   to use same code as kustomize CLI v4.0.5
@@ -1115,7 +1026,7 @@ filename | sha512 hash
 ### (No, really, you MUST read this before you upgrade)
 
  - The metric `storage_operation_errors_total` is not removed, but is marked deprecated, and the metric `storage_operation_status_count` is marked deprecated. In both cases the storage_operation_duration_seconds metric can be used to recover equivalent counts (using `status=fail-unknown` in the case of `storage_operations_errors_total`). ([#99045](https://github.com/kubernetes/kubernetes/pull/99045), [@mattcary](https://github.com/mattcary)) [SIG Instrumentation and Storage]
- 
+
 ## Changes by Kind
 
 ### Deprecation
@@ -1248,7 +1159,7 @@ filename | sha512 hash
 
  - Newly provisioned PVs by gce-pd will no longer have the beta FailureDomain label. gce-pd volume plugin will start to have GA topology label instead. ([#98700](https://github.com/kubernetes/kubernetes/pull/98700), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider, Storage and Testing]
   - Remove alpha CSIMigrationXXComplete flag and add alpha InTreePluginXXUnregister flag. Deprecate CSIMigrationvSphereComplete flag and it will be removed in 1.22. ([#98243](https://github.com/kubernetes/kubernetes/pull/98243), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Node and Storage]
- 
+
 ## Changes by Kind
 
 ### API Change
@@ -1395,7 +1306,7 @@ filename | sha512 hash
 ### (No, really, you MUST read this before you upgrade)
 
  - Remove storage metrics `storage_operation_errors_total`, since we already have `storage_operation_status_count`.And add new field `status` for `storage_operation_duration_seconds`, so that we can know about all status storage operation latency. ([#98332](https://github.com/kubernetes/kubernetes/pull/98332), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
- 
+
 ## Changes by Kind
 
 ### Deprecation
@@ -1516,7 +1427,7 @@ filename | sha512 hash
 ### (No, really, you MUST read this before you upgrade)
 
  - Kube-proxy's IPVS proxy mode no longer sets the net.ipv4.conf.all.route_localnet sysctl parameter. Nodes upgrading will have net.ipv4.conf.all.route_localnet set to 1 but new nodes will inherit the system default (usually 0). If you relied on any behavior requiring net.ipv4.conf.all.route_localnet, you must set ensure it is enabled as kube-proxy will no longer set it automatically. This change helps to further mitigate CVE-2020-8558. ([#92938](https://github.com/kubernetes/kubernetes/pull/92938), [@lbernail](https://github.com/lbernail)) [SIG Network and Release]
- 
+
 ## Changes by Kind
 
 ### Deprecation
@@ -1552,7 +1463,7 @@ filename | sha512 hash
 ### Bug or Regression
 
 - ## Changelog
-  
+
   ### General
   - Fix priority expander falling back to a random choice even though there is a higher priority option to choose
   - Clone `kubernetes/kubernetes` in `update-vendor.sh` shallowly, instead of fetching all revisions
@@ -1571,17 +1482,17 @@ filename | sha512 hash
   - Fix `update-vendor.sh` to work on OSX and zsh
   - Add best-effort eviction for DaemonSet pods while scaling down non-empty nodes
   - Add build support for ARM64
-  
+
   ### AliCloud
   - Add missing daemonsets and replicasets to ALI example cluster role
-  
+
   ### Apache CloudStack
   - Add support for Apache CloudStack
-  
+
   ### AWS
   - Regenerate list of EC2 instances
   - Fix pricing endpoint in AWS China Region
-  
+
   ### Azure
   - Add optional jitter on initial VMSS VM cache refresh, keep the refreshes spread over time
   - Serve from cache for the whole period of ongoing throttling
@@ -1591,17 +1502,17 @@ filename | sha512 hash
   - Support allocatable resources overrides via VMSS tags
   - Add missing stable labels in template nodes
   - Proactively set instance status to deleting on node deletions
-  
+
   ### Cluster API
   - Migrate interaction with the API from using internal types to using Unstructured
   - Improve tests to work better with constrained resources
   - Add support for node autodiscovery
   - Add support for `--cloud-config`
   - Update group identifier to use for Cluster API annotations
-  
+
   ### Exoscale
   - Add support for Exoscale
-  
+
   ### GCE
   - Decrease the number of GCE Read Requests made while deleting nodes
   - Base pricing of custom instances on their instance family type
@@ -1609,7 +1520,7 @@ filename | sha512 hash
   - Add pricing information for different GPU types
   - Ignore the new `topology.gke.io/zone` label when comparing groups
   - Add missing stable labels to template nodes
-  
+
   ### HuaweiCloud
   - Add auto scaling group support
   - Implement node group by AS
@@ -1617,21 +1528,21 @@ filename | sha512 hash
   - Implement increasing node group size
   - Implement TemplateNodeInfo
   - Implement caching instances
-  
+
   ### IONOS
   - Add support for IONOS
-  
+
   ### Kubemark
   - Skip non-kubemark nodes while computing node infos for node groups.
-  
+
   ### Magnum
   - Add Magnum support in the Cluster Autoscaler helm chart
-  
+
   ### Packet
   - Allow empty nodepools
   - Add support for multiple nodepools
   - Add pricing support
-  
+
   ## Image
   Image: `k8s.gcr.io/autoscaling/cluster-autoscaler:v1.20.0` ([#97011](https://github.com/kubernetes/kubernetes/pull/97011), [@towca](https://github.com/towca)) [SIG Cloud Provider]
 - AcceleratorStats will be available in the Summary API of kubelet when cri_stats_provider is used. ([#96873](https://github.com/kubernetes/kubernetes/pull/96873), [@ruiwen-zhao](https://github.com/ruiwen-zhao)) [SIG Node]
@@ -1689,7 +1600,7 @@ filename | sha512 hash
 - The `AttachVolumeLimit` feature gate that is GA since v1.17 is now removed. ([#96539](https://github.com/kubernetes/kubernetes/pull/96539), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Storage]
 - The `CSINodeInfo` feature gate that is GA since v1.17 is unconditionally enabled, and can no longer be specified via the `--feature-gates` argument. ([#96561](https://github.com/kubernetes/kubernetes/pull/96561), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps, Auth, Scheduling, Storage and Testing]
 - The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavinfish](https://github.com/gavinfish)) [SIG Node, Scheduling and Storage]
-- `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior`(locked to false) features have been promoted to GA. 
+- `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior`(locked to false) features have been promoted to GA.
   To prevent control plane nodes being added to load balancers automatically, upgrade users need to add "node.kubernetes.io/exclude-from-external-load-balancers"  label to control plane nodes. ([#97543](https://github.com/kubernetes/kubernetes/pull/97543), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Apps, Cloud Provider and Network]
 
 ### Uncategorized

From f4981f1ad600a3a33fa5c0aae01352b037074249 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Mon, 3 May 2021 16:54:05 +0900
Subject: [PATCH 697/788] [ko] Update outdated files in dev-1.21-ko.2 (p1)

---
 .../ko/case-studies/ibm/ibm_featured_logo.svg |   2 +-
 .../ko/docs/concepts/architecture/nodes.md    |   7 -
 .../cluster-administration/system-metrics.md  |   1 +
 .../containers/container-lifecycle-hooks.md   |   3 +-
 .../docs/concepts/containers/runtime-class.md |   7 +-
 .../docs/concepts/extend-kubernetes/_index.md |  16 +-
 .../extend-kubernetes/control-plane.png       | Bin 0 -> 42721 bytes
 .../extend-kubernetes/extend-cluster.md       | 201 ------------------
 .../concepts/extend-kubernetes/flowchart.png  | Bin 0 -> 61775 bytes
 .../overview/working-with-objects/labels.md   |   6 +-
 .../scheduling-eviction/assign-pod-node.md    |   2 +-
 .../taint-and-toleration.md                   |   4 +-
 .../concepts/services-networking/service.md   |  14 +-
 content/ko/docs/concepts/storage/volumes.md   |   5 +-
 .../concepts/workloads/pods/disruptions.md    |   2 +-
 .../pods/pod-topology-spread-constraints.md   |   2 +-
 .../docs/contribute/new-content/open-a-pr.md  |   4 +-
 content/ko/docs/reference/_index.md           |   2 +-
 .../service-accounts-admin.md                 |  67 +++---
 19 files changed, 80 insertions(+), 265 deletions(-)
 create mode 100644 content/ko/docs/concepts/extend-kubernetes/control-plane.png
 delete mode 100644 content/ko/docs/concepts/extend-kubernetes/extend-cluster.md
 create mode 100644 content/ko/docs/concepts/extend-kubernetes/flowchart.png

diff --git a/content/ko/case-studies/ibm/ibm_featured_logo.svg b/content/ko/case-studies/ibm/ibm_featured_logo.svg
index 577d8e97d9..f79fd7847b 100644
--- a/content/ko/case-studies/ibm/ibm_featured_logo.svg
+++ b/content/ko/case-studies/ibm/ibm_featured_logo.svg
@@ -1 +1 @@
-<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215.9892 128.40633"><defs><style>.cls-1{fill:#f9f9f9;}.cls-2{fill:#4c81c2;}</style></defs><title>ibm_featured_logo</title><rect class="cls-1" x="-5.9997" y="-8.99955" width="229.48853" height="143.9928"/><polygon class="cls-2" points="190.441 33.693 162.454 33.693 164.178 28.868 190.441 28.868 190.441 33.693"/><path class="cls-2" d="M115.83346,28.867l25.98433-.003,1.7014,4.83715c.01251-.00687-27.677.00593-27.677,0C115.84224,33.69422,115.82554,28.867,115.83346,28.867Z"/><path class="cls-2" d="M95.19668,28.86593A18.6894,18.6894,0,0,1,106.37358,33.7s-47.10052.00489-47.10052,0V28.86488Z"/><rect class="cls-2" x="22.31176" y="28.86593" width="32.72063" height="4.82558"/><path class="cls-2" d="M190.44115,42.74673h-31.194s1.70142-4.79994,1.691-4.80193h29.50305Z"/><polygon class="cls-2" points="146.734 42.753 115.832 42.753 115.832 37.944 145.041 37.944 146.734 42.753"/><path class="cls-2" d="M110.04127,37.94271a12.47,12.47,0,0,1,1.35553,4.80214H59.28193V37.94271Z"/><rect class="cls-2" x="22.31176" y="37.94271" width="32.72063" height="4.80214"/><polygon class="cls-2" points="156.056 51.823 157.768 46.998 181.191 47.005 181.191 51.812 156.056 51.823"/><polygon class="cls-2" points="148.237 46.997 149.944 51.823 125.046 51.823 125.046 46.997 148.237 46.997"/><path class="cls-2" d="M111.81,46.99627a15.748,15.748,0,0,1-.68923,4.82641H96.85137V46.99627Z"/><rect class="cls-2" x="31.43162" y="47.01973" width="14.06406" height="4.8019"/><rect class="cls-2" x="68.7486" y="46.99627" width="14.03976" height="4.82537"/><path class="cls-2" d="M138.87572,57.03292s.004,3.65225.001,3.65913H125.04558V55.89h26.35583l1.637,4.4773c.00773.00292,1.57841-4.48815,1.58153-4.47835h26.56223V60.692h-13.763c-.00124-.00687-.00771-3.65819-.00771-3.65819l-1.273,3.65819-25.99183-.00687Z"/><path class="cls-2" d="M68.7486,55.889h40.30365v-.00188a18.13723,18.13723,0,0,1-3.99812,4.80494s-36.30647.00668-36.30647,0Z"/><rect class="cls-2" x="31.43162" y="55.88794" width="14.06406" height="4.80316"/><rect class="cls-2" x="167.41912" y="64.94348" width="13.76302" height="4.80212"/><path class="cls-2" d="M138.87572,64.94348H125.04558V69.7456c-.00688-.0025,13.83411.00167,13.83411,0C138.87969,69.7431,138.89532,64.94348,138.87572,64.94348Z"/><path class="cls-2" d="M164.63927,64.94348c-.06255-.007-1.61218,4.79962-1.67723,4.80212l-19.60378.00835c-.01543-.00751-1.72371-4.81745-1.725-4.81047Z"/><path class="cls-2" d="M68.74672,64.94233H104.985a23.7047,23.7047,0,0,1,4.32076,4.80327c.06609-.0025-40.5581.00167-40.5581,0Z"/><path class="cls-2" d="M45.49359,69.74436v-4.802H31.45487V69.7431Z"/><rect class="cls-2" x="167.41912" y="73.99693" width="13.76198" height="4.80295"/><rect class="cls-2" x="125.04474" y="73.99693" width="13.83097" height="4.80212"/><path class="cls-2" d="M159.74351,78.8224c.00376-.02169,1.69745-4.82964,1.72373-4.82547H144.80219c-.029-.00209,1.70848,4.80378,1.70848,4.80378S159.7404,78.84241,159.74351,78.8224Z"/><path class="cls-2" d="M68.74766,78.79905c0,.01919-.00094-4.80212,0-4.803H82.9958s.01272,4.80462,0,4.80462C82.98224,78.80072,68.74766,78.79489,68.74766,78.79905Z"/><path class="cls-2" d="M111.30529,73.9961a13.94783,13.94783,0,0,1,.89542,4.825H97.10364v-4.825Z"/><rect class="cls-2" x="31.45487" y="73.9961" width="14.03872" height="4.80171"/><rect class="cls-2" x="167.41912" y="82.86525" width="23.0212" height="4.80421"/><rect class="cls-2" x="115.83139" y="82.86525" width="23.04432" height="4.80421"/><polygon class="cls-2" points="156.647 87.669 149.618 87.669 147.931 82.865 158.272 82.865 156.647 87.669"/><path class="cls-2" d="M22.3099,82.86525v4.80212H55.008c.01366.00751-.01469-4.79919,0-4.79919Z"/><path class="cls-2" d="M111.60237,82.86525c-.3442,1.58445-.65962,3.5158-1.81732,4.80421l-.43175-.00209H59.28005V82.86525Z"/><polygon class="cls-2" points="153.461 96.733 152.814 96.733 151.171 91.92 155.147 91.92 153.461 96.733"/><rect class="cls-2" x="167.41788" y="91.91953" width="23.02244" height="4.82547"/><path class="cls-2" d="M59.27307,96.73333V91.92745s47.24073.00585,47.37623.00585A17.945,17.945,0,0,1,94.43864,96.745l-35.15859-.00959"/><rect class="cls-2" x="115.83139" y="91.91953" width="23.04432" height="4.82547"/><path class="cls-2" d="M55.008,91.94079s-.01469,4.79253,0,4.79253c.01366,0-32.6885.0196-32.69809.00961-.00888-.00961.00875-4.81548,0-4.81548S54.9933,91.95664,55.008,91.94079Z"/></svg>
\ No newline at end of file
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 215.9892 128.40633"><defs><style>.cls-1{fill:transparent;}.cls-2{fill:#4c81c2;}</style></defs><title>ibm_featured_logo</title><rect class="cls-1" x="-5.9997" y="-8.99955" width="229.48853" height="143.9928"/><polygon class="cls-2" points="190.441 33.693 162.454 33.693 164.178 28.868 190.441 28.868 190.441 33.693"/><path class="cls-2" d="M115.83346,28.867l25.98433-.003,1.7014,4.83715c.01251-.00687-27.677.00593-27.677,0C115.84224,33.69422,115.82554,28.867,115.83346,28.867Z"/><path class="cls-2" d="M95.19668,28.86593A18.6894,18.6894,0,0,1,106.37358,33.7s-47.10052.00489-47.10052,0V28.86488Z"/><rect class="cls-2" x="22.31176" y="28.86593" width="32.72063" height="4.82558"/><path class="cls-2" d="M190.44115,42.74673h-31.194s1.70142-4.79994,1.691-4.80193h29.50305Z"/><polygon class="cls-2" points="146.734 42.753 115.832 42.753 115.832 37.944 145.041 37.944 146.734 42.753"/><path class="cls-2" d="M110.04127,37.94271a12.47,12.47,0,0,1,1.35553,4.80214H59.28193V37.94271Z"/><rect class="cls-2" x="22.31176" y="37.94271" width="32.72063" height="4.80214"/><polygon class="cls-2" points="156.056 51.823 157.768 46.998 181.191 47.005 181.191 51.812 156.056 51.823"/><polygon class="cls-2" points="148.237 46.997 149.944 51.823 125.046 51.823 125.046 46.997 148.237 46.997"/><path class="cls-2" d="M111.81,46.99627a15.748,15.748,0,0,1-.68923,4.82641H96.85137V46.99627Z"/><rect class="cls-2" x="31.43162" y="47.01973" width="14.06406" height="4.8019"/><rect class="cls-2" x="68.7486" y="46.99627" width="14.03976" height="4.82537"/><path class="cls-2" d="M138.87572,57.03292s.004,3.65225.001,3.65913H125.04558V55.89h26.35583l1.637,4.4773c.00773.00292,1.57841-4.48815,1.58153-4.47835h26.56223V60.692h-13.763c-.00124-.00687-.00771-3.65819-.00771-3.65819l-1.273,3.65819-25.99183-.00687Z"/><path class="cls-2" d="M68.7486,55.889h40.30365v-.00188a18.13723,18.13723,0,0,1-3.99812,4.80494s-36.30647.00668-36.30647,0Z"/><rect class="cls-2" x="31.43162" y="55.88794" width="14.06406" height="4.80316"/><rect class="cls-2" x="167.41912" y="64.94348" width="13.76302" height="4.80212"/><path class="cls-2" d="M138.87572,64.94348H125.04558V69.7456c-.00688-.0025,13.83411.00167,13.83411,0C138.87969,69.7431,138.89532,64.94348,138.87572,64.94348Z"/><path class="cls-2" d="M164.63927,64.94348c-.06255-.007-1.61218,4.79962-1.67723,4.80212l-19.60378.00835c-.01543-.00751-1.72371-4.81745-1.725-4.81047Z"/><path class="cls-2" d="M68.74672,64.94233H104.985a23.7047,23.7047,0,0,1,4.32076,4.80327c.06609-.0025-40.5581.00167-40.5581,0Z"/><path class="cls-2" d="M45.49359,69.74436v-4.802H31.45487V69.7431Z"/><rect class="cls-2" x="167.41912" y="73.99693" width="13.76198" height="4.80295"/><rect class="cls-2" x="125.04474" y="73.99693" width="13.83097" height="4.80212"/><path class="cls-2" d="M159.74351,78.8224c.00376-.02169,1.69745-4.82964,1.72373-4.82547H144.80219c-.029-.00209,1.70848,4.80378,1.70848,4.80378S159.7404,78.84241,159.74351,78.8224Z"/><path class="cls-2" d="M68.74766,78.79905c0,.01919-.00094-4.80212,0-4.803H82.9958s.01272,4.80462,0,4.80462C82.98224,78.80072,68.74766,78.79489,68.74766,78.79905Z"/><path class="cls-2" d="M111.30529,73.9961a13.94783,13.94783,0,0,1,.89542,4.825H97.10364v-4.825Z"/><rect class="cls-2" x="31.45487" y="73.9961" width="14.03872" height="4.80171"/><rect class="cls-2" x="167.41912" y="82.86525" width="23.0212" height="4.80421"/><rect class="cls-2" x="115.83139" y="82.86525" width="23.04432" height="4.80421"/><polygon class="cls-2" points="156.647 87.669 149.618 87.669 147.931 82.865 158.272 82.865 156.647 87.669"/><path class="cls-2" d="M22.3099,82.86525v4.80212H55.008c.01366.00751-.01469-4.79919,0-4.79919Z"/><path class="cls-2" d="M111.60237,82.86525c-.3442,1.58445-.65962,3.5158-1.81732,4.80421l-.43175-.00209H59.28005V82.86525Z"/><polygon class="cls-2" points="153.461 96.733 152.814 96.733 151.171 91.92 155.147 91.92 153.461 96.733"/><rect class="cls-2" x="167.41788" y="91.91953" width="23.02244" height="4.82547"/><path class="cls-2" d="M59.27307,96.73333V91.92745s47.24073.00585,47.37623.00585A17.945,17.945,0,0,1,94.43864,96.745l-35.15859-.00959"/><rect class="cls-2" x="115.83139" y="91.91953" width="23.04432" height="4.82547"/><path class="cls-2" d="M55.008,91.94079s-.01469,4.79253,0,4.79253c.01366,0-32.6885.0196-32.69809.00961-.00888-.00961.00875-4.81548,0-4.81548S54.9933,91.95664,55.008,91.94079Z"/></svg>
\ No newline at end of file
diff --git a/content/ko/docs/concepts/architecture/nodes.md b/content/ko/docs/concepts/architecture/nodes.md
index 291b7e82ce..5bba08100e 100644
--- a/content/ko/docs/concepts/architecture/nodes.md
+++ b/content/ko/docs/concepts/architecture/nodes.md
@@ -304,13 +304,6 @@ ConditionFalse 다.).
 {{< glossary_tooltip text="테인트" term_id="taint" >}}를 추가한다.
 이는 스케줄러가 비정상적인 노드에 파드를 배치하지 않게 된다.
 
-
-{{< caution >}}
-`kubectl cordon` 은 노드를 'unschedulable'로 표기하는데, 이는
-서비스 컨트롤러가 이전에 자격 있는 로드밸런서 노드 대상 목록에서 해당 노드를 제거하기에
-사실상 cordon 된 노드에서 들어오는 로드 밸런서 트래픽을 제거하는 부작용을 갖는다.
-{{< /caution >}}
-
 ### 노드 용량
 
 노드 오브젝트는 노드 리소스 용량에 대한 정보: 예를 들어, 사용 가능한 메모리의
diff --git a/content/ko/docs/concepts/cluster-administration/system-metrics.md b/content/ko/docs/concepts/cluster-administration/system-metrics.md
index 737c1ded25..88ae6adacc 100644
--- a/content/ko/docs/concepts/cluster-administration/system-metrics.md
+++ b/content/ko/docs/concepts/cluster-administration/system-metrics.md
@@ -170,4 +170,5 @@ kube-scheduler는 각 파드에 대해 구성된 리소스 [요청과 제한](/k
 ## {{% heading "whatsnext" %}}
 
 * 메트릭에 대한 [프로메테우스 텍스트 형식](https://github.com/prometheus/docs/blob/master/content/docs/instrumenting/exposition_formats.md#text-based-format)에 대해 읽어본다
+* [안정 버전의 쿠버네티스 메트릭](https://github.com/kubernetes/kubernetes/blob/master/test/instrumentation/testdata/stable-metrics-list.yaml) 목록을 살펴본다
 * [쿠버네티스 사용 중단 정책](/docs/reference/using-api/deprecation-policy/#deprecating-a-feature-or-behavior)에 대해 읽어본다
diff --git a/content/ko/docs/concepts/containers/container-lifecycle-hooks.md b/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
index f2ef1f10a9..d9a1137024 100644
--- a/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
+++ b/content/ko/docs/concepts/containers/container-lifecycle-hooks.md
@@ -50,11 +50,10 @@ terminated 또는 completed 상태인 경우에는 `PreStop` 훅 요청이 실
 ### 훅 핸들러 구현
 
 컨테이너는 훅의 핸들러를 구현하고 등록함으로써 해당 훅에 접근할 수 있다.
-구현될 수 있는 컨테이너의 훅 핸들러에는 세 가지 유형이 있다.
+구현될 수 있는 컨테이너의 훅 핸들러에는 두 가지 유형이 있다.
 
 * Exec - 컨테이너의 cgroups와 네임스페이스 안에서, `pre-stop.sh`와 같은, 특정 커맨드를 실행.
 커맨드에 의해 소비된 리소스는 해당 컨테이너에 대해 계산된다.
-* TCP - 컨테이너의 특정 포트에 대한 TCP 연결을 연다.
 * HTTP - 컨테이너의 특정 엔드포인트에 대해서 HTTP 요청을 실행.
 
 ### 훅 핸들러 실행
diff --git a/content/ko/docs/concepts/containers/runtime-class.md b/content/ko/docs/concepts/containers/runtime-class.md
index 3d7c89b65c..2770b1e4b2 100644
--- a/content/ko/docs/concepts/containers/runtime-class.md
+++ b/content/ko/docs/concepts/containers/runtime-class.md
@@ -11,7 +11,7 @@ weight: 20
 이 페이지는 런타임클래스 리소스와 런타임 선택 메커니즘에 대해서 설명한다.
 
 런타임클래스는 컨테이너 런타임을 구성을 선택하는 기능이다. 컨테이너 런타임
-구성은 파드의 컨테이너를 실행하는데 사용된다.
+구성은 파드의 컨테이너를 실행하는 데 사용된다.
 
 
 
@@ -21,7 +21,7 @@ weight: 20
 ## 동기
 
 서로 다른 파드간에 런타임클래스를 설정하여
-성능대 보안의 균형을 유지할 수 있다.
+성능과 보안의 균형을 유지할 수 있다.
 예를 들어, 일부 작업에서 높은 수준의 정보 보안 보증이 요구되는 경우,
 하드웨어 가상화를 이용하는 컨테이너 런타임으로 파드를 실행하도록 예약하는 선택을 할 수 있다.
 그러면 몇가지 추가적인 오버헤드는 있지만
@@ -106,7 +106,8 @@ CRI 런타임 설치에 대한 자세한 내용은 [CRI 설치](/ko/docs/setup/p
 
 #### dockershim
 
-쿠버네티스의 내장 dockershim CRI는 런타임 핸들러를 지원하지 않는다.
+dockershim을 사용하는 경우 RuntimeClass는 런타임 핸들러를 `docker`로 고정한다.
+dockershim은 사용자 정의 런타임 핸들러를 지원하지 않는다.
 
 #### {{< glossary_tooltip term_id="containerd" >}}
 
diff --git a/content/ko/docs/concepts/extend-kubernetes/_index.md b/content/ko/docs/concepts/extend-kubernetes/_index.md
index 81cc38337f..f93537bf62 100644
--- a/content/ko/docs/concepts/extend-kubernetes/_index.md
+++ b/content/ko/docs/concepts/extend-kubernetes/_index.md
@@ -2,6 +2,10 @@
 title: 쿠버네티스 확장
 weight: 110
 description: 쿠버네티스 클러스터의 동작을 변경하는 다양한 방법
+feature:
+  title: 확장성을 고려하여 설계됨
+  description: >
+    쿠버네티스 업스트림 소스 코드 수정 없이 쿠버네티스 클러스터에 기능을 추가할 수 있다.
 content_type: concept
 no_list: true
 ---
@@ -76,19 +80,18 @@ kubectl에서
 아래는 익스텐션 포인트가 쿠버네티스 컨트롤 플레인과 상호 작용하는 방법을
 보여주는 다이어그램이다.
 
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vQBRWyXLVUlQPlp7BvxvV9S1mxyXSM6rAc_cbLANvKlu6kCCf-kGTporTMIeG5GZtUdxXz1xowN7RmL/pub?w=960&h=720">
-
 <!-- image source drawing https://docs.google.com/drawings/d/1muJ7Oxuj_7Gtv7HV9-2zJbOnkQJnjxq-v1ym_kZfB-4/edit?ts=5a01e054 -->
 
+![익스텐션 포인트와 컨트롤 플레인](/ko/docs/concepts/extend-kubernetes/control-plane.png)
 
 ## 익스텐션 포인트
 
 이 다이어그램은 쿠버네티스 시스템의 익스텐션 포인트를 보여준다.
 
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vSH5ZWUO2jH9f34YHenhnCd14baEb4vT-pzfxeFC7NzdNqRDgdz4DDAVqArtH4onOGqh0bhwMX0zGBb/pub?w=425&h=809">
-
 <!-- image source diagrams: https://docs.google.com/drawings/d/1k2YdJgNTtNfW7_A8moIIkij-DmVgEhNrn3y2OODwqQQ/view -->
 
+![익스텐션 포인트](/docs/concepts/extend-kubernetes/extension-points.png)
+
 1.   사용자는 종종 `kubectl`을 사용하여 쿠버네티스 API와 상호 작용한다. [Kubectl 플러그인](/ko/docs/tasks/extend-kubectl/kubectl-plugins/)은 kubectl 바이너리를 확장한다. 개별 사용자의 로컬 환경에만 영향을 미치므로 사이트 전체 정책을 적용할 수는 없다.
 2.   apiserver는 모든 요청을 처리한다. apiserver의 여러 유형의 익스텐션 포인트는 요청을 인증하거나, 콘텐츠를 기반으로 요청을 차단하거나, 콘텐츠를 편집하고, 삭제 처리를 허용한다. 이 내용은 [API 접근 익스텐션](#api-접근-익스텐션) 섹션에 설명되어 있다.
 3.   apiserver는 다양한 종류의 *리소스* 를 제공한다. `pods`와 같은 *빌트인 리소스 종류* 는 쿠버네티스 프로젝트에 의해 정의되며 변경할 수 없다. 직접 정의한 리소스를 추가할 수도 있고, [커스텀 리소스](#사용자-정의-유형) 섹션에 설명된 대로 *커스텀 리소스* 라고 부르는 다른 프로젝트에서 정의한 리소스를 추가할 수도 있다. 커스텀 리소스는 종종 API 접근 익스텐션과 함께 사용된다.
@@ -99,11 +102,10 @@ kubectl에서
 
 어디서부터 시작해야 할지 모르겠다면, 이 플로우 차트가 도움이 될 수 있다. 일부 솔루션에는 여러 유형의 익스텐션이 포함될 수 있다.
 
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vRWXNNIVWFDqzDY0CsKZJY3AR8sDeFDXItdc5awYxVH8s0OLherMlEPVUpxPIB1CSUu7GPk7B2fEnzM/pub?w=1440&h=1080">
-
 <!-- image source drawing: https://docs.google.com/drawings/d/1sdviU6lDz4BpnzJNHfNpQrqI9F19QZ07KnhnxVrp2yg/edit -->
 
+![익스텐션 플로우차트](/ko/docs/concepts/extend-kubernetes/flowchart.png)
+
 ## API 익스텐션
 ### 사용자 정의 유형
 
diff --git a/content/ko/docs/concepts/extend-kubernetes/control-plane.png b/content/ko/docs/concepts/extend-kubernetes/control-plane.png
new file mode 100644
index 0000000000000000000000000000000000000000..df95778fdb15eeb44140b8b021158f215dcd41d0
GIT binary patch
literal 42721
zcmeFZ_g_=nw=NtDqM(S<K><ai3IZy<sC1+Tqz8;3BGN)9G)3vXE4}v;dJBjUdQo}}
z9i+yD5<2e+dw;k4yyx8W2i(u~Hy3NoIp!G8DD#<P#$QcE?ivX_2?zwbrXVk^0RmlU
z27%5YFJA(l@O{rH0)f0h3erzCogwRq#Br3UVJW3=pu6%>+`{Z1O;DEu*!`f=524bO
zeB>=&S1uCWP`^kNmEm{pBGpyq%j^*sDc-0j&wgo!pLSt}jH=AwZ))E)cW<s+;d_Or
zog_v#zoIwLbybIs+S(jMz>I(WBPZ&N=E4W=%dyC!a8#T}S${na@I#*r8IiN3w-nrN
z`Rmcj93_L_tC!GWGU(X@FMHd7Yb_7C_$-L|&K^kB3ZX7R<D%m#ylKxKFdHU7FYt9M
zc8@>3diEfUM+NbL_6_Ts4Q9fcK_GdW>`|$!WjD(l$uFEe$Or_#XZF$c*A?|UclMwk
z#qor^x#0ha@&B~(e-}1nb==Lj<PJUyqE$N{B%jW?q45<?ry0`+xa(#$)$b;<drL`+
zt5vK|*3Han_6~?W9b;JQjQ91#XHVqjj3kd*NL|M#vlAT~CK~pp#%QJslTYcb*$$nW
z7Pa9U8<q>pc5Bl=Rgt9~x{R#<)!{CuYaBUjctmZw{klOkzB{8*JM7_rJl~HF8AVLI
zI{4tyC)9-^p>iBykUWt1?Y>A`=(;A5UFfXV#sm3a!Hd7`K5=iVZrU7M>}z1>EpeE}
zmEbtnLd-a%g)hund;B&k|GC`cE$h17#NztowVqH<o65-K*sDy1s<-Vwl!+;Jdg$~0
z9S@$UAk?YFw%cEC_fTM*Vgfb3sU((->hf$>PFT4%_hROZXf&@@Nt7Uy8jN$xCIu6r
zd*5~wx1)3e6BcW9N1=NQ0)0PycZ7O@MVdAi(*7M)7_vv%Ng0RoLmOTlA$wtb1t^;V
z>cTDe&V=``0$#1q^QgvI3>GAsRbklK4=qs-&wNX2TnHsg8|~y`_5gCjX=%P|X9N7E
z6}g**g`~O+&)hkv@A6q=2^EG+J1=XRi9#!>o1OaNFyd4amOp01LX|0_jw_*m2R_RL
zC`(YMXaifKZRPy_b00WSmUCAI@lJK_^|dzbf|1*Gjw2M=eGZi@ihORUcEpFd@u~vq
zX8t{$W1qt{HX{#kW9bgXl=10(*Ztb6L`QYC-HCu#XJUGl+Xe)e8V|i2+Ub96E!-u;
z;S*ma@{P_}DQaFl3aWEyW7T!^CwAlUyMFFMX!Z1pSz91{BHG%6+&W%`uO2q9V(p1Z
zc*54Oo+{I~(%Pf9%35sYFz#zOhB3bUcMuK*zn7j8R&6vPK~nd^ra#syT)*Y!VoYf!
zESpQ+JmGkpwajBk<=M|YRjHIu8{?2}Ri{6aJ0dl`^?Sb8b$@?#&^m{=?oE(~!y%8E
zyH50fRm}S$IL0Dd)Xu|Ea#hE@^V=5kloxL4TZa4?Fq<YuSNWjOs=qDS%|}o<(w<e7
zC(UwXeec<Ip;HY*a|{y6Hl|Liqx4_ZQ6jusM4YhM-OxYeG`;#bVX>j6CpZ2Ys-#}<
z_{?*b7qe77216T50HDbJSD^Ss@JHB(qS-{cwgeagW=jj!tEhmqO!#L$PsyMj0ge0H
zswocvfJAY>;F~N0j~Ea~MKl#>(5h@g4Al7CeucOFdX;XyBO6X_`nw>W4PAVg!2fN{
zF+qiIGEG@ud>&!i3sd)~Y)kS~zK-0y@7^^vz~LkCTztM__u1KG?PLIE6sfalV}7PB
zaukT0A?jaqcSTN6YhG1q;zCsfiA)ukGE8M2h93mk@$P!?&;@ZOLUklYDh}1LKhsT(
zxyA%t4h#xqm8~~TbQ|n@D%}EKaeQ4oq-ovn8Wx%$jW3;kc{RIPqLnl#Kj`%F32zDY
z*~F!nvPb<QK6Cg~xnt`*7QVzLs^`ei)rizsK1JC)%>rNT!qa<BzjxocHeY`n;qt*u
zvPPq^e4i!T(gRiEHq5gP-f6vp7yf$!nij^^$e_SrPcWkIP~++upiDSa5I0zv^tKZk
z7V^}4aWD3VV?BTECf2S5Gr405lu(Du5*t+CPDV6xLK@sl2Y3tx-47x+e=MpMAC@DF
z3J4{JE#ob#gjYujM5M-lJA$7hU(i@Kp)gP==L-?o)UcY3kEi_0bh-h5ml0e(#~(^6
z7Ymf+{`$)6a!D)#fk0y4&eOGS1q;$y3rgfcF)~F88YG_#V>~q!h&~ts706gZbp`Qv
zMIM`h9Sf?75c}MiwAxTaE+XMPL1$jj>;Oa|_TqeIt7wp&Rzb?~<ev2+q{U3Sj!@1B
z+a3nqZbL0pwQjV=YOcSDJTiosi-A#A@{gaq)I3vq81GQ<RB$X^Hm%Xa28$!*8k$+w
ztiLDjS%{o{vFD2gQ`NaV9&s+S4a1VZwmd7@!dTlygOI`6blD6e^qy*)ME12OU{tMe
zV>*;(N;Q9UAP?J$;2btR;HH8@7vUuV;z-4p9uiD{S6K>JF3O$6S=rVk&fONLueP7D
zkp|<`s7Bi9Cp?c;o{&9ew0>`1ka8yBUB7yL=h^_nnTB^qhBY+bbN4)3uLl>?F4J18
zBiM}Eaz=^D>Uj-r0Y0HXNLPeR=G1MOmjWcBJl^V~ch(-paKlorC$$q@N?*RVpVU{s
zT6RKj%jJp?oZ$)1ZfCbI(UNlEbzkGsdpWm_DM_MTj;fll#p?ZmXX3RBRO04K=d*)1
zy7VP>D`O{awWhrgbl7BV#)<i$3eU`L;`(UCr&Wb>mk~?Ex$Cr_f~A{xr8<;=MRuaC
zYBwM8s3REk`-$ojZJo}vM}BkR%3uelBjSN-sK?7q8B327EmRUj{7pUDIRN2}@Zl6s
zfTmYZm2Bxx<tPXk7C&Wa>pax_DX3D-`vVdnu`fKm_Yhy>QRQ|LXa%=nBgE(0tyH;;
z1wumF@UxiS?~JDrqT;QEeM09$S;ala=*>i3H~=@<EwyO<#fVh3uUvuuolD@Su{BW}
z8-8rtk^(mC?}m%g^~=rkM;cF+>y>L@i`$*SqR3Mt_*UXU)Q4r!32fr&dVa0U+69NH
zgW&pk-3mPi_mi;M-fICp$;a!*5++9LmQkN@$U@rQz=#AhXQS6#^9at}-c#xM$kxKV
z-x$Huw!Nf)9Z-!H%BuGETkhgBGY8PEK;0?=94wDiYH0FZIB2Ge^G82dyFo6Y#*IEx
z0EtvNTLPD1HLyGLtrQ5*Y)0cb_*{*OZ)|N}UM5v5&I-9VX_y&4?KI=k92HlqzR&d;
z7wn|s5VM>uhA0FVfAHAzr<v>0c;J%^sTkw(z$6|^yM4KZe;z6(o9xjm^P%zvr;q#Y
z!=wx-OW~<9(dkP8t*bQBk6)Wn!B@Eizcao>;1e6wtWMb5J#$C%Z*B!OYZd$|F8E7$
zFR{$%xgFj4;!fn{9%UDidJR;qU?+Hf0dJe`1%4lu)gN8ul7HcR7YV0NCWCFT-l1?8
z>3l7|VK+%nd#dW|)}V;s_0>_CV)sKOGtu19av6)`9~6C}U8r$~)y$oiu`1g#>JOG#
zdRLk3zAGHyEUfKgx)8Ap*SbcKw~eTqph9%;nZgK8pRMPR4`B?}7qr&>OBa$uqvI_|
zaPIT-trkJzL0VJ<VWk-5v0OAExzvp~iQn{8a7mq7?#{#S>TMiP0`y(z5B36fT!-hV
z4w8JCMg)TzN8nWz%h=;>x@Aa#sG}(N4~b}~PJs3pB(LG5DLHY&Z!4y#SLc;s7+ca4
zc_a5`A+wtLvbw`fIOS^M<ag?3t-Q@O@mE!`fpSbE+M&p`4|^jwczq(V#Ap((=%Cxd
z%k-Eh64@G_G~?O<tJy&;ngvoZmW1FYMSWNG^QD~8LAGfw{P&-`3{>z&ZS*-Ysc2<_
zb3|`8;?P#Hn{um>y+RXkLC5Wl$erzdrR`jAp5K?uBAi|xXBRuH3T}Ha?Nc?wH?@9F
zyv&oRbF3@7t$ryaVzUb;QFQ#JKI;59S_LAp(|O<euv9YF6<ZSC>xe5YL6sc6;0Jv{
z8bqZX*CHt9jAB!vLV5DBZ@-k9$6;^GlSLnhE%c*YBe9IHJzp!IxwR=Z-JonzK)ZY&
z?9N-GTld#!8e?-tFZYfS5D?SXc#<^2>a_CJ(zPdqcP{;27lqQk@D`Vk!2ToPY1MYi
zirobk5huyoSP5L*d}4SKs-Kg@bf&}>Y=$D9ss%EZE2c9VnZ0pB@mmu}scB4c_@FWa
zu@u9$Z*?t{&8gD0dR;jq{H6oXIiIK*<)s^V8YdJ&r`qDV2zK}5hSS68FajP~lcbF%
zjavS5RiE92NP!}*UyY=aP=8ri(*sE`Gv5Awz${Rw&Ddw}if^`n9g@M9gu2`_!>X#x
zxMYxq^4afTe5>$bqSzI0QKp-;pIv*wysIp(yCI=pkrP&RnVMIP9F8p^aQMPo7d_r|
zP3wb&wmtrU*>+~IKu11v#I%VB`<La>-VZhVW>gGKdP@q{g#-zi2j$Okr=xftoygSC
zICV6b-^z!w)P3Zfg6ha>F*;04)w%}j)lh$jK1KbuV?YnV*K1<&CIdVgTN+Cgl~s1f
zxA8)TDPV_%LMP#gvgov_q-Pvj)?c<$%EVo&4vL7Eg}Wk^cREVMOgB9S5w#Zh^!o4m
zAwPetS>Zf*ai<HFl+EF?mxfj?5{wPZj_P1`85=a5yXCsIS_1DL1M*2-4$EfbH~nca
zZ{3OX+B$xYS~{%%R-JsFQ07}D>z{@Q8pnt=6_n%A5d6Fhm!Qyw8!4xc42MbGZFKV&
zRUuvse4E3JA&v4g&VGm|$qp>r&|8?pBk$5SihgO;>jBFY#2}7crb7(t))WM2gaC0X
zXsJ!#<zewXy8(ykA>vQ3GrC$9sn&D&bWy@sun*_i=V4mEr9R^FI_Rn58S{_?&+)pM
zUXRt8zeN?_-`=3M6@5d~)GIED^W~%GXdp@2a@mbT_+SMM>tFd?hbmPQcPeu!o4>%u
zEJPE&3-e~uMytmiLj|Y=*N<K@!K78q^j$bGpgzOe&asfV6{vGZzCQBV2*gT>&tS>i
z;#L||@P_F{chScCT=U%R%n<&Evkkbj9YQ-dZULHwC0>LC?R&hdZ+2GeHDi7Z_-;nj
zz8jOvlBrqE#&DnK(6WJBCVrtGqCMVe(1e2&BE`VFzuePCf+rz7Z)$0+9E?T939-Fq
zL*M9R_E<uLBO&lPftX1h4PyxN&DXJ-N}H^YU-#5p&qZ9F)6$kW+thtd4+(IXI#jEn
zF>I&{qR@KJqr!d**yd?G8Ey0*VI6}&zA83}+x%Yar5K-F2WmX)?KS(PtAWjJle6!+
zcrzJl?At1<?sN`nQZP9`Dp?=esH=C0Z&P+3JrqfVR?Ea!x`eRbzE9ZF`rJ&f4CsM#
z&kG#oOeU-!O3qtwKDn&zj)^3|I*gY}^F4EcnHGA0**z0#m{Pasb}7IIhzU{G7zB6F
z!4<LD^K&%QHnI?vq5Zyw)%O@I&F~763zN>|F-Np~8$B7tGr9W&2S)S7yp}K>zH6pm
zvyY1jO|;zWy!?ZoHKKl=OEt{&k=07&6n?O5n}W*-Kb`@;S|v8aEN;0u(2FbKXzL?`
zvQs&N5n|jIZZ;G_Red(xHtL$3gAw6)1%i}*EOzInO$o_YJ?(1P<L9W_wWn`@;1E&j
z)HqQ8GjJn3atjCS)PyH~6T5K+@&AfJigWmIVZbty)xUMKANDAHp%?=~sUjcu!0jpV
z*9~Qf_1&0`va7AEL<QwtmL>W20kbC;dUt9e6K&$WN^2aYgxZOm#Kh~nQZTR)cxlCm
zpL%=C{QbH+fth3`4Of5B2S%`6+C@cR=;wu71B8=5bOSpf*2Q?H(-gMJQ@^d2C%nhm
ziKyKA>s%M$W1sCjI>9Dz(S44oIDmM_zQqD($mL{tU+j6xfH?&(a}Tpvefd?6jdt>4
zQ%PRCg|9c*o76L7U`;)fMC2VkFMmS;ZgX*-rZtu!zfFR$i&v`*|Da_h=utdL%7V3+
z7kUjoy`Wa`hhTgbOj+w4%oTL1Y1K<}`pRv5RF&^+vk~>QmX--zV|2BHzlMA@9hx5d
ztYh{c=F;z~mR5mWShqPhQHeVb`J(KK=4;=CK7u8rZ`L$>#$c5fA;0~M@<!`kR~%iJ
z@&^|FH|gnjZ%DHsu-rbnvhP|0hE|R}>mA_rUYGBnHk4bfqu{nIoly+goJr?>&;3Jc
zK3_05zf}w^BN|;MRhP|+u^P_K9W6MMGd2A~fP?j6JdF3viB-aDF(EYlcOYT?O@5|!
zGY>r8dDJU#qE)keL*1$rofp?gAQzrJvzzCRK0N#en}vC&aoOwqAz`BwIO+NXi=LdQ
z)+|$hX)yQ43Z0%!#j2n`KhHV*xu-#G?A@&tTDnK;e-zm%c1>&D+y+vNc6(p{l23*L
zm?R3s&%a&9iLcwiN!Vbd!Iy>q;ca~io}y`D@IFTBn>BJ#Besl>9d{%N>I>r_6Kp7$
zBqdkBBpAL!{@@SwtE<2@k8CxHf=k@Ybm|`qKofwkCOuA<ti6e9_0)RrVZ7uW^oJVu
zDacC0KAV5Dn3OI}m#SB*rj7k;29lm2QlR)#Zm16Xpkz|s_ryPoT>Z~HVb9Ix-$x$?
zU23Fb<B&}SP~>$!$HMK$9xqjWT-b-wCHnXl{bz%J6z28$Y6fc=ty}hFnoh3;Y0$=e
zA%S$hIuztYf2vwTL#`A|eDCWsx~4xAv`a~LfJ3T>QO)ur_1163-{gQvxaD|gi?nO5
zOXKno`e__deE$;Zyt~%A+neP1ma1Uypv5`D_{>~FLwhwaUb0GBIBSJ>ssBGlKi8j<
zZW|sD?EWelFYzepH8+#>H9#KIh|1O>PJG}8fr#;^W37LL`E2Y-75{bR`eG8XB!5yq
zdjK$c=Pmw{_6wazt`l#p2C74H!sZ{6Uh2l^h|tT$ldnJ8fUPgpU&2Jlhl>vGm60T^
zo0=%si1N@}40Hbj4(1D*kI@B_b{TvAwk2uofJ*)Di3edg@fS}c5Dprm?Gpc5>(e}1
z>qjRUlXgpHt${&xZTbNCq~7KhLN9zCWwWp8n&Qp9ZNmExk}k1d+T{!3JIR@}%dt<E
z5co+6to6H3ci~$ne8h)mvJ80ncf@1Cf3y=2-pT2R?k;3Un}~^^Zvt;CCQ`RP?i4rg
z6Bt%_N6h?3?v#t86GDnLf?rTnoKKz;oFM8Zj%?ssYh(V5f?lmO{>3}uu%JIfE0WW_
zhke9ab2=9t7uyyg)azLZ-&~#w!sN{O>&p7aP&lG896<nI`JeL(cA`~=W!ls9kIQIJ
zTFjG|N{@hI)N4-a(q3E^)F~rUwH3z*J_NpT`4fG-G!{VfFe)+PKz?gPy+yrQ8V4|q
zNkDUOa{f#Qp0{<j6{fHO!ZrV~@tv8=^9-F20wf<NMGcYxZwGh<U38Cy)x8lfcGkYq
z4{RU)b3AfqPIKNDcvYKT|9%CqX0J!W?bXkTR7?0v7j-*=LH*zU^=|q{TR$utm6*{f
z7=>nw(M|w{W|qmA*t$%`5XZ9La*&3AXo&v%j7Lg7*D9fCGRa_?zE9~LG4Q_2kI}ua
zBuVn8ea<o(3|`;=91wYh4XD&C+hQGFX9F4lf<ue(JciR57Zsl7g1OB9`H$xBewUh0
z*8H8oQ}$HseL*;3iOl)ocz^2LnJeI>YmE6&%-wS)B>zOz3(|hb;Q6S-@yL3k7bE5%
zP`hh}XtemvMdH?8V2%8r{x!6`K=k2J3ok?bnL66(d7hjo6R8FX1W`pYoHHT+*O+k>
zL4XBZj9Q84a(`U`V6OYoKK^U*N4923O7Q)s*gsjo%MaWk)UjtxRZr%u#P<!L(4uU~
z9&KtiQKWRUb~Ed$-TW5{gMR$1RwgPY&X7tffD#D+?(k*qJk=UmwA);K<}d1NtiFGw
z?IiDi?D`2-d@X}(#})tq2z0lLv2~2oIqfhIo3J1YV*QgH&UG>?YrcP2xUhB+0PDLn
zI$-4T(Z1@ZM5<O8`iXmj=h^T4aZEKIVQo~Fp<=_Ez5Y>_nj65&l)sFR6l<JZTxc#U
zlK#;{l<hlun!K5cX3t<eJzkMuWOBV;%_b)=6Sbh(57Z!5fEoVJ@m%RAaFAq<u{!q!
z8~(XRAke3nsURoX)9jmU#YREM2!?Y}H~)A```rbt{6$V3^3yKoGAINJ0$rwy4pxeW
z(^Sd8SiCe^{y<Z=U8Yr1^Y;NX5~?Q)ymy8F=7K1o2EA7W5tElwqW;8hshIxJY89el
zfdz*GuE=pfWl=(gLDTs&S5~cF*8nQJ^Do5f1{r9#*SDOiHCd3YC>o0A-UjsGZ}Smb
z%xU}Vpe{f;7(_1nM`@r{=6OddZa-6!tmnX5Kp;vsZ>{%HZ%?J~rAxr>eth@`5}@Cs
zQ$h+v#OqN_6$>4}S*R2OmQI2WKYqcdM*ZnO+#7JhDdpAB3Sj-~g0M^#fL!)VoeX9<
zGYV$;0m_~ra>sv7PIfK0IDe+X-#%XA(V4;2b8;qgBOw|Hj%ZNYzktB3ZGxVyi<+=>
z&9JRHb2W38so*C$#&^Vw_*TTF|7BdMhHZ7Ls+DD`sjPFLlrVXkUrt)TTlm#&v#IXN
z0)&%?dXtds)rv(f%{}FFQnioNHm|wSO=MWYSb$LSF~{skidE(Qsrn0>>!7C|n*O(%
z253N+FZA0fTTQY##h(OXqX3NqLE&fnp1)#(v<ZFYIRG&rMfZ%GE+5qw&oRG9cza~X
z3X7s_t73PpItP-Hc*M7<;UC#18GL-<0SE-GPrX_5v8MGL^ZRl>kAj;nif*!eAa)RF
z;iK5tz9Op%t*17^<p>0VJ?G&(cC&4$AOkU9UAJ&kCnBA5(p+Bxsst}Ni}@-}+q6B&
zd0WElPi1qZd!0x1h(YAkoeXTb#!tCfRPisYE`mT~9Zy>^T5}igTu{E1I0=Lu8ZvGF
zdTbJ5)b|PLP$c@Op7nLwRnl@`*n(#yvkNy~nU?rBp9e&Rneom`YH~Xrjf_65rUx<G
z+w*x8epL0x2*xN8#x_k}YQ<>InK0WS90}jIC(~%&^__$kUI1NYanP~>NvXF=g)z7R
zk&&pKB7s+P?%wZw#B10EkQZfGjp(r$E^}^$1SIV(9!#oL!i-Ld6SxgZ=>|{ir7GS#
zZKS_`4H#5Dn1pk*d0~6z9mwm)T|2Vr%#TD^;?`CLOAsjK>K*Xa_uBp$yqLq=3~$eY
z!Wf-$q*e9@tL1DSgQRl8pO&Ab-*kELW<*Hn2T;b|?L%|!g#-nqIm1$jKvD;q>P<IR
z<SuDn0DVdV17yCx*sd=^8~77Qn%YHhi7Hwi$B)Z@0f0U1icgNTN4WY*JQ3k-#xFdZ
zX3_1Yr~FBTX+h!7(JT5{H#-cYNVP#;FVxX{A&LuemYj|hfSMJ{p8x<b*p;03lOhFb
z3(D)c0B}VJ8f9s(U+kE=%5=Ht63Fi&|BeQ3k8`evU{dlcvbo0mOiTvXKw;`UT1^Rd
zT7)It8*QuBv%N+HBG)wupl}f!Rh_fDU~vu<;M=Bo7b8#8OnM&pUs@BSl?n($s$>MK
zs=@q79JSrF_@=IaqORhKY;Y7*UrHAW0Aak|GLNYA<rzP9YYga72X?l1GIFuR(emS>
zK)w13<Q0)tY8$DzaAzeGrcBV-qp%P1$(l_c_g<Yv9+29BrhrGv%?`b#llM0PMX2!)
zKHOAmB5mggAe9ICG4exCo>6t1ZNXwL5D1PUF$>MR3QB@2R)i(8Drr%{m09-BYoMDV
zpV0w|Y7ed#=8Ws3&K-?>4MYyp1+vWKgiNJ5^QIvXDD&fFP9$mT0%?13&=io`K++%=
z?Y*bK@T8RD5WoegzBJqu<`Z}-2KscR#;abLNUr)c7JCT=rUE1ZYyGaZa0OHdilX$*
zAC<{W4l`9F26;W~*C!(0qo|^vU==(M@&obb*~55VGeQBLBdZ9jA1&X)Km}$$Csl23
zJel&5Cj9gfIuAO)56pgU1sib`@KuPPfUE%EoMTPv?zyh^pRn*NK$tVRIJ~B5BVmsf
zm{%a=x$i*>r3)^8r)Kq!&ffpLfY&;)6cYiCr<jk*A2k$xBtlg8kBR^RTS_OK@j<@k
zUC-k-A!fqM{GC!%^)@EoxIuoL{3L6Ot;t#si#wDXbXyPnvp}HKj8d#}bh{CMj8ZZI
zVC|QQ=}z-*Ucq+|d`AAR-Ss|AL^fxK48lG$$+#fqEeVKRB#&WQy=l@xngDi6fA^r|
z9O*Q7Bh;qsc~BIU2)&V3(?^}79%tVGL!0xUPvIh*&WXE`2${3jzt(Vu8+&TkgNZ?=
zG+%to>tKO%lA7;HBEO!Alj@JPh;G+q;&815#{MFp_4}h*!zB=VSNkBVx8^#upC=%b
zbnZgy5_T8_nw4^`zSr1)A8BYpO%B-nBEM-rFK4(W(>1^)*azCTS<M(E)vVOHF|?Ae
z*QtT6g4)5h;E6UXY-k-=9!Q>u&iwKIvG5mPF#7f-Q2Ud6Oi7s^y$A0B^h0TYxH>S1
zCE!UR^mKqHfr#$-52&W`54EQf5T)y14?Ze|kwUT0=S^FYgsp<2uP|qL{DJ~PjPDW<
zrGNs$SMlCYeS(XnAZ;74$w1|4dT*pI_>fTeM{(nde$z*{E8%z$^<cn#_SJq?gIOb%
zWnX_LSmJlCbwUOd{BTSLQLkM;I4Xdq2c;~8am+>#pO5;PwML`|q){((&hSU3oZ)W>
zB88FiXMKO%+83=)8Hl0xrRCaZ0+e#jq+vE$>n;s43+jF0JjhGNiR#t|8yf<eDZQ>%
zIz(Vu7pYs)f_``cr+264fRno{-+<uLx#iR=gh81xG3}A0lIlF9fKI(0nOoLR@6jw$
zqhRy4HP}&S3!tEXT~4x;+(3AFtS6W={9Y!!yqnOzAd?+{<)m_R;?=FW;o=Xad<SBe
zFj=iyCIp+26<LBC>ju=T;+&%8!<s+lp93*JPe_5%WONi~?49I5r)W&ocz}S&a^anO
z>P=y}OA66RAAnDK-bKp?#cQr73IeN>_{x9*Ba(z1)sJ}RDO#-vu=w&6r-+NP!4qP$
z2@Oro3{hNn;uRofc-yBojPHGc1wye7^ZtZaWz4F9SbIvRN<d6I**iK<4gXI<d_Z^w
zDPCR)w<{&t9aPx0oYxKDPzNy!h!x)4mswIU<5UK<i!9|!-#r@C`RnBmj;&*@p6pfZ
zF$V6rwxI;QZ0F`d_gnfNFi;kEoRgxq^$Tza#zq<!6OhMlx=PEIJ2}mDGVEN4fYk%h
z+0|aN3Gd6A4Fnk%6X#<=&Aa;@Qa~alS24Lbir{=QUT#R)mCy4!2u?sxMz1nwxa!H9
z_XKFF?b4>)^jFQ&e0NI+K+Y>^5(wS<H4DH>)A^$Yt?*Xh1Iiaf^Dm>@S#c$wHv2(p
zZ^pW+l~^N^y3GN_`~(P#hS5C);EKgT%UnEf&M`ZT=grU(v3LVk=_E_n`mONs#Tt;S
zem+n7W$^asS&a-<zm*Xi1EAK<TXEs~%Hz?qoOCew<fQ0k$7U&Ek$%j$j6IThCjj=b
z4DoDV&w~~MUQAT#vclT35=?;-z=w`Ad;zU>PZ;D?`l%l576??DI^;_Dwh7Jk$8;dC
zdLb!P63JoB`~fhW*DqKKcA7JM#+4Ybs}x;ok!=W8l2eD$^NrXYAo6)B<JRmoXaxzD
z^t<1eBMs9x2Z{-=QaNI(1lc~P4+uRCQ4ok}<uSWq#<3gX5g~`VmJ6Jyq9VpUgNX^b
zS&B|(DLOVh+f-t1;o}~|>qbJoD3PeO?)tNj21$Tu8VbxA{$t@3@HWH2hrQrU@Z4By
z03k?UbQ${IM}c8*x=s+_62DV|r;}<DSr-_n<l9wLfGGOCg9uB8@*4n=OTS^>S7ybv
z3=y2>r!hkD9>0q<z+IKb17rwtcHyH=)|4nKP}Z7=kK{>*><#H~5u}}LC*SW-{d}E_
z;ELQ!&*rB!=b+lXG$R-FKvGXw4AY%}m*c1aM37rCYWrW@EdVMtAogG>sN59A?f~ha
zl<rG_z`l=eHbJ2_{d%lRaZ%adZxhT663e3>0kS!_s+Y+<;IBYbVHnn51Nbxr9J^On
zp#xC4O32aYGsNZqDc>5XdE52A(wzbY>Fns)Xm`MG?==z+KOi^{vkEH}!+Z6m6xD`s
zPDt_~5AQFRi)y<rQdoOh(B1Fs(egUhdcfGA_v5sUf)HbajGN2kE<H>2(gMV~PKiiz
zfTg*n`FrIzA3;O2DG9c*iudyE&g6v2kmw6rcMBBt?l-cF2b=V|GH|4vzPn{y4D#ad
zu#avhT`K^DO`W+HEw2fS_3R^H(M!xl8r93hpV%oUd`dH|jo2KNz@6e@!w#x?WFXU6
zAI?4dYBNHWw6ayIcrO<_ECPIVB+mm|^#46=cfzZfx;{_S0~`@70>rC}8tcifQQ7c0
zP!wmO=K3*@g4*dzgs3yHpp_XX&s|>UNO3T0EjW<>v(e|#Hh?k?i#Iw2b_6!|#t%SJ
z9Q?|x5d#8eQ)nviI7c2&?RhE~d2V<D5b*iJ8Gd0{2T+b8(aQL4yyCrVMuHMR=HZi6
zBD`M^Am+o8WHKib00itV8EapYqfBN1O42JW?C8V>B5@l?b7L(A(d`$?yz_xUl2|#z
zqpZpSSwWOOM`$K$jPfHQFYdH>#f5V&4$x_W?IO|xNJ93;#0aKK`LVEbQsQg~I7>SZ
z8mK*Oq5%}8w8#V0D4{wBv2(g0CB>Kt=%k9xk>;795(lwAhN$_QJo*moB0y@II9JbV
zH~}D>yDyuX^h3!Ch=4ql$8eenRghnzePi_s7=;W5_tcS%Ch}Te^oVXJ4kQ2!r2?ag
z-Z|6Di-;q=Ue6#Z!0DK~fH=U|Dz6geE8swI!hqNzPTN<oOai)@2lg=6JuLy-7nl?(
z8U%)1DLPNcGqms;0nBvjvehkM-GV2F&DP^w0I^7yaTE31(E=!x5Vl_x?<ETopaMdD
zu9p<+gIosbDwq<S>T9_<0SefMVAh*`mS^(JW%wWg>%^FH+A4Q;-&ZR*%DCA?T?Ivn
z?<B!DXSw?vohB>=4RiY;uGZ;DGQNpNp4TPw{WK67nT`1dyH^ke`liW9hhx_Yhu~GM
zL<d?sj3Sl8hTf1v#XGG82jCbOdrC>k1=lKwI?^QPvnbH9<u$BQQ8q-<?+f#?N@BF@
ze2TQnzLxPUkMme=?-rk=5zfJqMSh((OqadpKJ>$GCvWlkYO$n2>JF1WU&rZDtuAH~
z7nQ_6t2dQld%^v?zxz&}WwLAA!%iL}yrWncCvZe!eSD;yeJ#yWrCXZH%#*yUv`Xb`
zk;QO9Y9GU(YOw)-u$`O4$w`mJ!G<99itlFKQ>RV0604sFAmqYOA=)--@)a9JyO7Ee
z)Ny~j&a<D2bA9s|+2NfN`^0mhoI?rCzw#7k7jS=hnI~~#ErzbW@8HXjzWuRJ@b(WS
z;+5$J$eJ6td&={qTz&e{>RrR)O%K<fq!x+aLLy$bD*Mwki@PTODv;~$Nr?03>^)(Q
z(IPhTsIZ#K`{E=pA`$zlNrK-lp-4SH#;J+5rdj2Fm~8@W>-yFYmQa7ActWRCSwn&I
zhmO8Ny~k{lH2rdK(5V*Ge3ENG@51VS*?l2~wn2ji=YS%u{8~sk6iG3oj{P-%&`J?P
z*}Ci6GTH6_C1-B^I#gFPNvQoZwP0P~(k(D~)mwMt!7YfU%^Yo6U;KTQK%;oa6_1Rv
z25$EK8q<90h2^`PM2PK~4*%Hl(ViSktzA$VaAIVt`r_vf!{9)%=WjE%AI(Mf{^&ZK
z1ojh)Vb;bIznU);0_vzSrk2trp!s6>@w?##|K~pIgEi03rh?Ly^=VnVXLUvMVvc({
z8jG!_7t8%iJv=--y9QK>nzp00_3ph~H_;$J&VQL(aEd>qHuH{aSiUBvZY2JufMWd>
z{wHg33+e2oV0zKD8(aKrR%rocl76N=Ypp6j%&v=}gpFR!Cb&#1*FO79qTUNvZ}K<o
zRuR1ob3USXm>l#?+);mt+xqq)Tg2rOX?Fc{0~d^<`SLPrtid-0esGZ?wq$cO*PAfU
zDnl!ZqKD%`pVKhQlBvq%U%>imSjUuV<m~#@uHpN44)4nLx08<iAA;sv_}^q}ht#rq
z1iOx>H1!^^a~U=!!w=4}^%>7b9VG~mIO(nH;rrj4z19)(JRYDo>^Zu*ZhXB?JQPEt
z`UtoA5y{BMYd3d4Pw3EFXShHME_pn~#w)zc#hrkIOhXXnY^lz+fc6H2RgtufvX;Z8
z!DSMi!+D0jM+r|^CA$W{Ir4M(d7kdn?ew;m*qq?2dTI@7U@9fPQ+kI(!EE$&x|5L5
zxL9FZ3ay0Wr`#4XyhiBwn?ED~bwzE}zu1DFIRN)-$AhId$zM}Wcq=KFkx@dUlR1S}
zN8gu<lKrtUa%yGaEXNYxv1kUTR?=DbJk23OQ?j`?FfiipffW-bmN~e;!d`5coTqC8
zv=5nZSfy`#iNyTOPS{b`+HLFQ)p=w$cke+$u<_5R*YAkoaf$pE>S9gyqV>LIjC_)I
zP`1C+5G7RA2iAGC7&qQ=kw1i@D-N0DH1>P1Vs$2UL}V>JZ#^{8sO0TZi-MjILsJ?@
z+aTHQL(%Qp__-@flS;*~;jYLz%Q_Fc7?yzlMLI&C(ve=p^VsJAHvUKHHiqy~&L3;s
zJG;M$aC|CmoM&7X@N4*Ah6LJJzkAYXVi3y^*MV$FVav3fzeMfitAHtd_#^B@wQiR)
z-x1Iegk99QjF(&!6SrFB{@+KpiY(S<GQ<UxNd$B@jP4T!zEKIv_*{15Oy$Pcy}6z=
z6bpK6yBm)Ir}?Q}+Bq}F-Tcp{fwtJ~n8VLD8zMW~F@2u4m7jlcAzm*=vCk3$19)yy
zLiH8F8vlU-yq^x}C!S?!on9*lO)KSf^k_=^LcwA_`~G5J)-AB;X!A^7mBhe<@$zdg
z63c;xKWvMJOEM>#zmYt~RNK%qzU+33iQU})$&yo@k8@i-I|E&Q046kdQD>Nd{tFX2
z>;1>_hCtfct82myYI{Hs&puCG_*_!XrDRw03L8fu`B#|9YN>Hg`c5$ZS=iKRU3bKF
zf5uu21I-*wx=b>rM(al(Wdzt{`@fG}{u{nBD=+U#CbLf|XH1k!GJmLA@3xyemE5XV
zO6X%5Uusd(wB04<qp%v?FGL^g7x&`&)&84$>h@5Ab0ay*U#nola_VC=qK(EsyZyt<
zZJua^O?w=rLAJg>Kd34OU`jF{GQu=sUEtcH3(+~<T6=?8K6F03X=bRvP5^8PyJ02}
z4VhH$_vlq((Nr;~Y&59S_k?DVGhtp3ghAv;oF2drBJyR0yOfmt?GDAX!m2`QH1VrH
zdw@|xCDI}pB^`6h>Pw0|%`2;VD!3ROhcoA5MUzJwPt1eM#I*kS&=jGq>;j9TlC^A|
z@?exZVoT|%#6y>;*i(Kj-$X~4s(TNWcf#W5oo35EXUXXS(oMopszwFF({APcx=DGk
z7lj5I%)PQCxLI>S*Xg%Yfn^B}pRsZ2b*rup7C_tGno)!P^08a2ky~w95p!l(17`Dv
zYg55QqC+m{^aS9e9EO>TX5D@1t~<68zH#xwe1C<GfURVAt&tpEeaZcPSu;a(4qL0_
zY!X~I7``HopKR8J&=T?i#!LubAkka<{a`%}UT;ag1YO(D&RRusX>Ie2t`nvZjZ;ja
zwSm$h-fW0qEwt!phapUlO(oZlG{Q8hJC{8sD>`+xX)`aaxoFauxxAXHcWl6KDTtdE
zbG0j5EUl~#<^3A!>#-Tme5c|DcvkpF?k?2tm=S2>w-tO4po}~>G_Z&-lUgFYzzu>~
zH!?m!JLq4LTL<H6lZ3V_4mgODU=v+a1pj3#(;C_&=ZS}yGN6eJ2#GBrQ)Gcg`4Z*7
zgw5OsqmD}e6T~b+br@wk%{Y7l*-<tp<A#}*6XoKg`&Xfmr55Eg5IiJfaL*rcSB3Ch
z834ahCt#Aw#0vGh(Zd6bakZ{FdACf89)T4_7oTG189q3k9+{_C9pSAZTMd<gvxRHa
z&NLz?jxcZ~!gePeQa2eed=xOti}vh2OfX14n#MDnU-Q^Iq7py&x`pghjQ{S4itHoi
zzd}i@!p*YFWMg&Yde;BFmY%iln`lJBUj^N3Y_#0P6|oEBt*09|k57v|AxwJ(+g{O&
zjcz;d+;m}lN9Zgzq_(o8`=Rdg;eAiu+}MmMQHErj;brZsr~3o3$UgrQ;qUlmUZWxK
zeS<akU4-yFPF!xm>~Ga~7t+Syt$D=o_r&M&?2r`c2{t@Jb;%Ii=)L8w=e)wtr$w>j
zdm|ovM@_@oJ1GJoBey52hS_$6HF)9BfGu5YhYJOAhq%fjH&n8+E=hRj(lN&932J0n
z>#FDREQ$M6iQV=q-|`Vd5yli=iN;2}`0)-dP#C+%Qs2kezsQVPj<p<{Ze(8E0@7a3
zQLSQVyhxY%pG5jXj_w}U{v7vv)z32fHS1fNPsdRul-cfZrlPJ`-t1+`Tkznw!^eUy
z6CRePzmbNgS-8QvqOFGAz*&j5+e?X_$FEt*B$n@4Pjn>5+PM{e9Xh`eB2u3&2=Sl3
zUj^0S**r*gwx6-n+8vvyll?uBfIf};c0jhFPt@R)x8%kcK*JVuW3e^8#mAY@BYcp<
zarkOE_G5YAs}2NBqEl(rdeKBNE~e1=%~$+Rn%w49x7|8b2+-Sf%LC%}WzbjyFK@ZX
zq_5s^GCyH_yZqh0cdc!@>jy`TD);S|(1fhXfL9#7i)Pzx95)wlMT*6=3_X8+xTs(E
za_1XfWhkL9o8TYifwPkCCC>yc4UB;LzSaZZgF=_~p>>xk=-|h!z03H*+E8u#10y9q
zZVaX!_Zn_LBp6&PUnQB7iQm6c1)<wp&-7N^iDB~i)r78G%(NCRDHX2)-?4;o`7HLz
z^w1x=PCpN@y>fov^krUktoB8v`1e33?kcBYor<`1Eo+@P!AVrk!nW235?`@7ew^cc
z!rcv?RZc$2F>;=FCv<3IcA`YHd$3sz3?g%H#23CYYy)+KE6Zsh@-Q(=l*#pz*@U;~
zit9D{#dlWXo&;Oor)kDX>+l3{YO)t6J3q306>Y`G-I-zl`+4s|#-8fi#q;f_>s?)0
z@HRwScp|dt@#1+!s~{!Y$s$Wqj9Iv&BOmwle0#IVDsp%Hd0(|t5WZ!0%PAJFnx2_>
zYPV$~q#@+V>sO_cbfb?A#?t>!nCd{4EHo(b2%*-#L>;B@0sWaV4x2V!=t_@N!G|ML
zP6msMP+^+AjeBfeE>D4|@vW_YYbn|kF;}hbErLCV1oYM?ax7#G*Es6zdr*<y$b_GC
z2_Cs$s_L_7Zn2eh&0$L9@dZ`gfd@XB8#(zDjkGTPTwPAn$Y)2!?N`*t4dIJpA2vD+
z-|3#rM6Dr<?EpIzeWq-N!M0-+L^*0128(Yu3M5{e%0SiEDt3KZa@21*>h@1O+huTe
z`u*gu@NEgR#(`haEozR-f8atDQdVXsyQfMVR5u)?kR>A19Pm?k8<>r)IS}Ied3`eX
zqOuENJRWael_<e#Q6-ZPtE?a5C6?3-5pzk{O&E+tFX__gM#isb%XXp&H%ppkuGkiy
zqoeG*4X{XqfL}2^45(OauZ@Y#$tF1_=|&gtoGn|@YC-7NQYJ?a4*5pEsCf8u9+4id
zPaCzYfI@LLFbspb>rrRr@wft`ROdCh!~1EJt)<EwDT@|$v@ygHxSf)&OBW^BI)$Y!
zb>r4b+K~eF&YKr87g<ml;=$^GkYcG7hZT(nM=z`yPOj_>M!LGPnH}Ea=rr_yURSww
zVolS0!aM78gGMA7Zr}O<T^pO^{_RjiKj78RO-`V+VMPKL=Mo(K_P_jH%zTWxk)A)|
zH>H4&7Db2hxX6UoZdetMJ}^psX6$Zm0cc7iU{-v0bgFJIyl>jE*;FOoKJeAbT{G+F
zwGX>QT<&rcA#Ta7+}vmcFLAL*u~|3s_$*RA*w^b_*){7ETGX*l6!Q-wbm2DbPds-s
zMhjr;9i98o|AdY0z*jC6nkUhaGDpJ59Euy3+(x(HmxY~{3eh84`I^JTmFBApI_d!{
z6s`{V@i9OLh?ruwV1`XMm3NPI@k{x3$jWdoAAGJs$Dwx8)d_FS4E?KJk@|Is_URFp
z29B@RW4S+9Q8x2CMHjvYM*$vkw8t`!EY`0Wo!(CnTa9(_82Jb|_eN2_S(20gz$FCp
z-$i6x@`>Nio1$OT2xR2kg>i@NT1mXbihZ%twv2Yj@1*-m*0)_sxm6M*M&SM2JUR`-
zYY@x$2~8H9JHeHKw#np3(pxTR`i&4vGnFp;z}a{?qjfi?#vDVTLo(q0k-OXbV+-Os
z+Ff3fEwBfVxf0(kx&$5Bgf07mI0{n}bNGK!^#Q6RXqNf<y-fLvI?8Ndd0^wi!@U{<
z*U9z^N~hJ!nUa^h4S~y4r4!?dDzOB0#6LEl5x*IGdcD!jI7Jz_O?A}24y}e)je@64
zj?;!4DJDyrJZfck^3ZklH7iwRfwRH`ZLUULc!cCUmy=|M<rAvr4xnhVIw~D;6tW~I
z)tGBjy?>(x*k{*o%LT<$E1*Pn=zozJk`1}5(9KX)jZE8yCW+al;xFowj0j4eH0?8@
zQjfTIUGkVSX=AoNUX7WPyd7p|3S(%bh1A{Ex!QQ5SkRSVc$KY@WN~e}Acph~-K^#b
zFOBI*PEIBN&0M!$07_<&#nT?I!?);+JO?d+cJrAQ{yCr*HgtKk^x>iZSy2GE^5SE4
z4zW!3%H(xGQK#?xi-Rh8yEdSE>jJ7a4WX02qAE2gI=BR2Cy^h>HzrrtoRWd+gh3AS
z%l(14*LvUH!F4Sb?W<i18VxbuU#fiVNLT6#QHbXoxkl#p5=|6i^wsdH;8<hQmb;^s
zOXoyu;cK3qh8UW<MY4*i-eDe}<4vs-QPlnyWmL&8r)Y^hZ6>qZP)^08mNJEHn_c3c
z!;E~j%=+=9kLbv|&?@E}l9BF7obvET=5$BWm0RBj@TgdY5n<i?%cBc@2Si1NR}T$;
zMeOjdE_{8Obri;EW+;05S9xR-l>c|9PwcX@(FEWFH6@-BM&>Nb_NQ9hf9nP3VBKbC
znSQ?q*x!J6n|pbQ%tP-#c+Jr<0`u;-X8D}W4gb~9^7bIjXl5M1Q=zeEa>sn}?l_@<
z$2$bR39kQ8dUP((eNlG4I^MU{NVo#<^!?YTZVfm)w4_Va$w}F0aBn++i*$vqZK95;
zOw)i1<^nV2^XHSJ)!R&J00fq9Ffd*(-@)8#4;;f)OlrjxZ$u_u^iGgEuDc7Qru0Y!
zZC<*#<`W`C1P`xw*I@^)A}H;Ca^e$nlN3V{*TV><Z@%h{`Q`R?Wg~a8(ppqic>M1I
z^woWfP};;i7_s4{L08<OV4`JAIc{roIhRm&)To6&WzVeJF80)$e-O#`y>w&2>BAz@
zsK)jI00JGWPhFx=5B-|i2g_D;!sABwy_@9qPj5dq@*F2`>`DfN-VVWql+_<ZO(ss9
zGFs|A#(I$HE``42R4s{YloMGxN;)G#Y=Or5d6!C{!v80D0h8w<O<pqPqVCajmZ~~(
z?~J!c8c5<5esY5QJ7GXfH|;1RY6nAfd5Yr>Dh4(L$*|+Bs=oKo{7V|vHT4wS1Y0K1
z<ZbB7V5Uo~jKg?N;qC9w@!NTEM`Cjp%J@+b9A3UHVNagajD^UYraA3}DRWm5J?y31
zmr2vG8|;J~SIHJ*Z4ZNko`)`=VK#*o#|JXGlXqgAoK5L{J=kv1S+fzVskHWM>231M
z*8$rN7nveAOlGL+E+Lryq8a87^O+7-RPn=!FSwi5usql}+MJTJ$IK)KZ8)WZ)g`Qn
z;X2Vp{lt}+1#Y<)TK;%x5&v6&O%9fxK<#UNQrTmYn}K~nhT+w~liTpdy7KL9T-#LG
zIqt<3M9{^Jz8wpiX5!nUlM`79zNVcl92$$y<a_H*@L|s;rn6o&+hg~S9b!Web9x^4
zPtyRWM~z*dTsKr294qz_^hDIlaSuG{#AAugZY=uLy1j&qb#71<YIg4*Kf}%e(SU);
zgQ>3=u3fbLPv)(orOvD>O0W)DbCGxZa%42Fpc0+HRUF^xtPpXy4j_V7(L<sJqmJ&8
z^AyqZEFe-3Ft2gpn26%AGM(WWOLBW~dcg7wunc?gM0>Lwov@w<b;nPQz7FN?<)nH+
zv`UtB#Bol&6Dvlc{Fq#T%5IJYV3sI>jZukYTe5xZF7d!<t<{H-W8Lupm_|f6%OVJH
zxCHskFcl9bC6$8R%LDwO2v6vC^aU;q(cxLmY25iXj{ltl&TP@VwEjg>J=2Ln^IYpt
z=%ofv&d%j^V_tKBVL?L5Vcvo>otfH3m}~8K!LIF~2RO2LNv1^z)obsRj>eNx;GPM5
zBjdQkENTAQ4F7&=+cvoPeSf^<;n+STZffbMkU%PytaGZmn9k$^*N|3#9|Gv@3iQ40
zP_XINK3i+(%Y(gDy_^JJT0jNVLXH#a-{P{$*M8=QZhHE31g57)(g6GhA-h#UIixoh
z`MJD-)LNM4_5hV1bnPyUJZzR#uyygH!nizM@YD{s6VZ0x1%v1ie#w)t0PV)m$F5I%
zIycw(qpR?<kUH?e&TlKP!_Ot`$ZC`L4w`p!`fE&ENjzQ43uY1OS&`YA+tC&`IARu$
z7Zx_M@@|2-Vx^V<R<f(IL--&q^}bwkQbPJ`aQ~3t%XYfL#_yYTY(<84F#A6AvHht)
z-w<%~BQ?8QFC(`89S&7Aoq(aD{%c!~;|y4kggf4*Yg346tXfgPSh%DJ&JJ_!AjE4|
zljIz*5Vr6mx5Z2|S5@QVz77M7hMa=a+b>V0aLYfGdVe$C8lToj-;Pl~G~IMDXS@Dj
z@v){SnX@{q$eoOQu_?!m*OUD9KBLCS*z|K(&^0k+mG+}U@$i22klbh`l9n;~`_Yj>
z2?ZH8m7eA`9O<bFf}C*8NBT99+#4nnCn>bK>}<L#^sLD{*}Cn@!atSB+Y_zfz)eWL
z3U8#4J8++M1-MM~>nRP{&{XJV=Gvh3uVBaVJY{|N$t%Y@VW}+Ji4@suD+4sEE_Sgi
zZ8Qxj+KuHsTN@9IRzuPI=))1CN}CfqNF6bwP6~$BGr8ec|Lj5ByvksYUO6_4bga?b
z&V7NeZH<(tQBT#VWUx-j?DR#PxMKZ;0_!t?FE)Knr?p=Rf8%O*$T+!AZdmB5YzR<s
z2j41**BabahP1CUq_c&@XPNcsWYBc$=F#vPq#C)~<}ZutHv}xpc#h3)#lSZh>#dU-
zwkqK}tTbc;$dHxvctPvJuGr!f20^Q$&{dauMzMQtE@!O6zlp*zbr^6lP&tJ0k&e?Z
z%C4V>akr+17k*KYhNm+Lj1=};9SqjEP8Nc<QQpNr#NoG!;~!bR3Rs?U5QxmrREtqR
zAY4?k=DvJr#(9mkcLU(+z#+MbFG&7j>&!G<Ru5;sn<1g)Jx_0Mqv6`aa=St*p|vMu
z$3ME+wz;^foE6f9j*Q!!To-ZIvPvK+zSo%2>+D4*4^MFAx=B)fz`ZZ@_KIq6Uy!M`
zzmsUL^kp;8hhH0jA6{@@E*CzCI=8$6oF}Y(t#}9MOLgeAb-fa=vq`Rpdk<ViqALml
zF{pgn7x%>IdLy)abA0h3FR$YxnLShOV4j_Nb^=LN@)p2C<Q0=!Y%zSbmtgkKBhxL0
zpU7Z14q_PCsNo?Vr-j8kTS|}tysC?|k?T(_NYex11HUBXj-USh)og7`M-Oy_#@r-<
z1tl<b8O;B1<Lc4pb(X$FeK1(K?cX~^HlPi0K;omEmUpcaB#$CAH@n3}mg(GA!Yu6T
zyhY(xWM#8svWGHV&iS#Xx6~zS-u+Z2Nqbw{YBIO@mP4QwdKF|?@$Rwvr0wx`kKl_R
zyxfMEh1`gjxVcGP)wMe`*GD!coN&0gpKS>#Y(4Dz|9yFSuEMShI#czg@j4-!4rz=G
z5x0=0&2p~e;$=Ht0=)yl^pCMtDP;9C{Ko*T-RnV_eRG+>9iI`jME|hIr1?R(Nz8WH
zj)Yd;Dr4L3&w;F-A<;^=*&}t|j;bdfS!^oKQcV5FZw-O#&&Ba+-TCGihL~%t=#7k<
zcM^`9Z0Z2Y`Czz1z<&98$d94Cp&u8BAvwu$r}dG(-?J7_b*<CIbxg1fH1IPK2SFda
zl_73pV~unFjmX^#Ui?LjO!6M;ems*>c1iB8Trs3Z#^|wql+}-vaI3KcDe<|bE3Ska
z?8jZ@|Km~y)O~_udD<M-1p5oG3(1Ev3P2hWn-`X^3z8J+S3Ea@Z}il<1P((+P+i4H
z^~PHF*s?xa!#^t#aa!S=I?NbAGI--I?tM61TESPkZ!9FRv%A=~3<<6*_2|1y5&1&g
zpCguJ2z=t_zg&cQUI-C1s|DM}9;*Z{{(`W%Vm4(T%PCcDfK?^9cA0_7SKR&NrkSTe
zW=jp>poD-?g{S|VK4`iTewL=7>AC%od;UsUU)>AI!)^NI>yJ8lTyRw4zt;opqw@}3
zz1@-3E6<l{jklwmt0EOY0X1~<Vo+O*OZtT1`$6eY<O)x*MSP-u+Ij@4_*YpUaEm9m
zv{>Ts;~i844dBsRlxM8_Ux#EqsvSRZl-26Zt?0u>Qw}-I=+Wnft=-&O)2=56DZmfD
z9EVD5tb3|Q3sr5A{`DQlWiysDuV_k2=1)VfEE_C1a5Vgy%inGtN!zCs(lRnSOltU*
z_R7_$tTFqlm=UiLzS8c+Ly>>t<E&a%i%^NX+|+l2PcIrQe9$%X`fRaLtfs%?0*Q@Q
z98x7Vy0^CNicNWV|Nn<qS3|*!kc^2+0pVI13vn0dSnp4!hGR49--W}4WP_Gu?~5^s
z$aZ1I&szVZ^I8?TZCxm)ovhNk<~|l?v6HpKB;x61s#^nhMp32P@6cClW7(3Qs{enC
zeRV*SU(~;ff+(RNB2p@)g2d<=V$q<2gruZM=U|kAf+*ccDJh7w(jd*~&W#bHV{~nU
z_Zd3A`o6zEe*Ynk=iYnnx#xV&=X~xnh9}4F(Brhgq5>r{WE}eGGf4BC``!}#NmOKo
z$kKW!P#}IPQ>pF+{a?FARjD#-Eg@1Z-NtM5H0CT@yFry>CrOHWzmGDcGRJ6day0xu
zeK$O^v^}SCPr1@&>*^T8FOy6Kxfk$*nc4j^izcY>8I<lkzIYThy`uNu1lRTkksC8S
zHY3?-iINWa;T#1@u#f9{`DAxldiiPCc!18L-XYL`>?l2VK7*mve%kq?{n*EI%3MbC
zw?v-<P<x;#Es=kNl*7y<jvuZ6HBJD?FQO~;H!8>Od3I#yV|BQfu~@VhwxoOb%H<9~
z05E*oS(IbQW0prdMVrYsWX01(1-Jg8y@OdpsN8dFv`hu5>IA$_$4$j=$;fX)?FpID
z#Rzj>V*|-j(VM~z#$Z`-VdKIuS_~6XU-)HSb(Kwr;p}dj;r9{DJR0l@!?%nhj7n9e
z<^ME{xm+t5Jle^}=5Y2tK@16xiO+_YPEQX7Fo-{~8QqF=z@7`k#%oP$s(*hfx{R%`
z=>6o1Z@RYdeChD~5pSTsGd75Sb<4ny#lHR>MQHP$PwiU=GpUp~0gEreV%w+D%Bdb)
zd^)#3yx>ahrRC}eZmITHLU(#C^v70ErxZmxQ4Q%z&*xIym~xYlA$odC@bBe%Kd{oX
z?(g2I2AL$_UOf;+KRm+`m2aE?_R6#_@=`^V5Bj6#+}-!~ge%QAMi{!3rMBVEXGLbr
zGOYdPHKICg*U2s`!#V@64#<g1@sv6biQ=c61MtG&rPcdBuzH=<{*l}qCXu-tm0N)-
z@lrP&BgKP3Y~hXxOdc3x4p##gwM%s|>2ct_?l>=<NADAHU52x0W(SS+WTeyn{wTX>
zlOT^@P>B{LJv0&D9d`x#NawatCwm(GO}OYP86;ok3EvaYO;*()ruwE^9#m!9+&{({
zx^3641nbn$@vI6r%d?gDwAS>hF4}N7d@lHH{t#EyFnlc?ea393*T}lE?)<8iK6a&&
zs9Zk*3Z1B!?qDXryp%;-yg)>`@Y#(Cse-?W%HeM?|LvwPA9-|+t3t7*L&(Y~+7UO<
z*co5#$~Dvvzy+Vd=JHpWs0N^my>M0V)f`^G5nsqFIeldyTT61mmFG4PSsQXubL!tm
z7d$<bS!8Hy+ZUyJWEkzTSBCZ;<M4Nbrz|-4O2zg>SsK?J1c7V$^TG3Zaqe@8{weW+
zhR_v2vI6K_d<WU^xx;C&E@;4y0h;P*w2bLsKA)Z=K`y#e(dt-99JpC4P@ZJ4_AS}t
z$=nj<<)o?fj`c^u)l=JU3DpjYDzJ~U2_F7A`bbp6^qJWPRTACLetKffqBbv}dalD-
z`vHZWfl&PMVlY}08*A+r+$zz|5D_I&)p#^iwVg#@kx@^1M`wn?OdHmDpIdSiCLEJk
z$4&p4B;G^$%SPc?uCi{W?Y4_qUCbwY;bf)7^!*^%&LZ$isMMWr+WM4?V)wlAro?B1
zPoJM9>YZ_;?HLSA7-yy8l4SE5B0Ykiv5+Yl<RWnMxL+x*xTo`u?kv{IXd==aY<xBS
zqA+5fVaFIR@ezJmRGlb=QJ%%V%Ph6+a6#lfVL@xkujC!!rl5S6P5aH*St!dxscMuU
zUN)h_YnGW)s4pqGxj<hrmb`7Z6B+*$iJEl<1TU^6svAJ3$PthXeT+!j;{R4WM@&u+
zg-E)pB_#rs{ke&ceiXeaHgTyI10%sZ;~!vxJe6sqjBu?T;O2XD#qwKkwp<jY_?IIn
zSXc!lW$<TR8IPxjg`3;$<?+?#TxDUjqs5D<ZrclSHhO?W0=`@2hJC3QD1Tp6eMj-i
z1f#g9uRRwVWavnnP#5FMCeyn35{F61gjn8?F&i1w_t1bWLSw*7?~N3{Y$rHiJ=lty
zua#3b>8p4u0}oMU*UMP!`>u+@E_rBX&GUDFJKdNc>D`UGSXy;p`)(u9?i)l$ojW$Y
zli4v@R8J6q+2}#w?P|+`-dwco+ss6!9SNh=fT%)Dws^7cS+2({C&w29*zLVK<(n64
zhnd^rL08=Y0&0_{?vc1xQ;ZfHPvU^rXKUmag(}yzQgZYHo-bUc1Z#H2duAM95wr0d
z^o{VXF?-3y8oT{*isecp_NET0pfK^JBPoY|TXtB=jtyLqvfMp2T$R^h1-|y3Nx&cv
zoM%OXp7FuCt!`~Nh=(VcDJFfEa@%p`;CZ14>nt>bzgTw=N8~SFr-OCA(f6%rle9#U
zmuVO0lv(TAJm4<M*3JzAr((W9QA6UD=Y#n>%j?gt3lDmXV=o%4xvVv4%%|UZPHSG^
zz*Q#dMUC(Kw*`FEcdv8PMMY_|i+h!8y6f3b@FKEZzqxNr;$;tL*Ihdg#ia1c{3|H*
z3Ek<TX1*{ZwkEE<D>FrJCL8>9+v4?ta#U52&|ZWxQ_bXBORLNryV9pc8hRweler2t
z+s74zUBZHR1@Z3y0w1LIIt^O;@h|Aza>31sI|6U!+3XP<jYpD41%yd0y*<LD$>JDT
z<QN9myArpEZ8uyKH$^R%=~eoo8VuF!{Sp)bz}CdbKefc6;X-7Bkea^8;bpJ}-G~u)
zN)X!ueArMI%C~_(5OTLg=xe<rA%zr+-3rWZmioAr0V&aw!E93qNc-woZ(_A&;D&hZ
zq{g~m!eczb*A&R;(8>nhboYI>Qx~8W3}K?KwLWF(Sf)fap38oJHc)g$(=nq%NVM$H
zoyzghH07~hVRkJD%7*ogp8gIr$;TWNg?MbLcj5Imeb*cA%@-v%Z)K2ej-AOPVpJIL
zGXqaZ`hO~SjNB-%oqTpYvdgr8-lf`3iPDxm`i3ybcEH0j=+-Cbg#EcmMb1B3wyB_p
z4jq#;de<wA*Ep4{euX&&m0Cx}p15pV2bwxwa7AR*yvIIeS0yx|xliu8eMfdi#rZW3
z^{N$YN8WA(_60}8SwO6ES=sea@!(*l!((7?w7$n-z$e&E<yxX{Ibtv2#YE(9C0~bK
zQ!OSHcs<Gu2|te77f-A;<vsQGZ|kP>XC5zdbi<EqFhPtt3pu<VNj;=lHs*CGp<C$8
z$c>eM3}be_=YOH&z+k`SeJYU0dv}zk7$<n4gS!|fA7ad+#!t^l><W;te#fub5~GO-
zhDxNTldFu#+ZN6{pvL>2K1_zt<JG|#T^Du7WD~T7+)<|meCyUAW4ZJz$Orfr63y=T
z#UAfvOyaj<uN-<I>nxi}j}IHg?<ed~g2IdVRJ4Wmn!-}>dHe}F4shT{8R3!Y%qkBq
z7L4CBy3NP0K4Q}w>iY0z2v@TedYc206j2%cK6p3R!?m2c`3g5r<<eC|z6GRmuP`YA
z$zrO0ywZiLy*0`*rBR=)ya}WDYH6~h*(8U|m7ZnW%K6@;cqChT2Htje8|{L`(=(z|
zC@pjS^lNm`FEr8{!d)j#Z1pfZ@8@sf_dIjl@~jW{^U@mn&-0~b17arwCN}Dd53}8p
zYzx49Z4SW0{vH?*7vzBFBMRfIrN}Y>oR-+7zazP)I1BOr{Ww4lITbYT+Cn!wcYy0~
zv_I+F+q+NMC+W83G}GR&iC1qPEtV9>Gs<XWYH1ZZQA>H;&;^li9&HUTdRJxA<I{n@
z#Gi2-@&%ie64K&?Y|<c>W7F8>7cP<c+|P@}9wY5{h=5P3Y8)R}RY(P_yZzJ8&75~j
z60avVam7^wj1()$xuq}SH!$`8nVJ-nD0Vl=wb50%%WzkBz3)|}N@UiUZ1FalhChWc
zaGpVQ&T#s-{;!!y`aj3^;_6n*?T3kVE1~4LwpWjM?_?jJ)tFCVDbqICy|l&nYA>?l
z_1ozIytuir=maEZdOE?016(l?v4_YpH$S;&CX0uIc8$DLth4dq@)zVj+|(+ddT{aL
z6X{D2E=flOyk~tF_WGv5iHOhF<W8S_c=}{v5WpX<v{gb(s~m8+s>2+cYWi=Pdf&1z
zY7S-P%F8<*iJd7+Vn52a!4}oC+0@%n(5<Vm3=U7wNrmK^RJp=b^@RNu1YM;UY>()$
z%a`hU>~;veMkH%6&%f;xCZ5iMRje%z7vJ|C`MxSfWt?$D@oSgKegZ0RV{SjtWF?@%
z6dwNaHCr^VOt)Lcp}{r}jNZjhDEu0T=Aw?4I9r;0bfoU6%MMG+xMZnC?jqNH^i`v6
zK2fi6=8?xYSbLem#Bnx^+?5z|p{ale!Bv$cE$#Px<2)4CiO0UQzdfg$j+7fCyW;Lg
zKMJh~f5`{!b1{c3ldr>q4}~x>D2j^vadH=8Ke&?=UKq6LQ#9RZdH!g%<_iyezmBJ(
zs&&c2-t(7K(U%9Z>5{CXtphertvA;sC)&n0Wu#==KRFp66hyaIv6m8|yG-xB<L*VX
zLZT`wo@Hs|Htf9Rf1TTbefC@*p||4Yk~Q4P3c)YmyIBn-PN|%DD?!YOzeX;(HETLo
zzW?eE)Gp-EYFij4wMuDq^J17er5st*l=O`X=$0w}Pg%#|{eAF`=g0)lf#tTS9Dd%U
zG-Zm_;iz9Jp=Wb-OJM;HQ~&|DtJo58iz9Bw!+2Zx=u=0lGwocnflqalI4AMGkxN#}
zpocbpwF_?pbL^2Ed?9DM2U@=FUyA;6tLKNA6o0zxCY_k^TR5~y(liNpzIajW<1ek7
z;&L5xYr%3mIUa4h?A@jVMelklOz63bBTlVSSg}hR-(HW+sU&V5;tP&>&Dw2-><C5`
z7&e$-zVw<_hhtCv@r?_uqcUKJLK$W;+s1%fR36F<xB&#?SjA4v@D3{<{z+<cAe=H4
zQE=l@HySNv)hO&Q6tk25aAN@EG*$>asvbX~)1jHo8tRqXKh?gg_kM5qN)%>H%pwE6
z##p{7fJsDA?)nKuoP`znX^ub^Zc}r#3mEwuQ<Px3CKrC1B7Z;P_nO*%Fp9UPP^ZV*
zDS><vw2{$0CM~cxy;3nADqMthg;GmlRbLHSUE@qbzC0CbOpy`f!DG_;EaZpHk|5vR
zr^hxF)!ME7_O#g3Xm4Rtzg_c2Y~7&Qf$AqgD{hA*T_eNSn#b<1dHFl^;X=Pv%yhRG
z-_$2#ik$%W$Ixwh<87&Y!un*`CHOSNbUWn=-3>ajXH&H{)Y*w;7YOc%VsMekRK`6j
zfVN-e_m!Q=--|>%t-8myw;ER+r+H2E4df;NmwVCkkT7Z&M@066m~c}Quo?K^NtXKe
znrBZ=od8^x>OuMq<gXjk(=8gPPqm4!A-q=wEN^$_j2argNhQYKr<Z?gJaWI|O?j<S
zuBCY+B}@nExX2l-=r&S+3PyVDgYn}zt29d5F?Ncea5LKMC{FDnA-lWwrwAj&NVtVM
zuDFMjN`#fRB^B%By!8Cxe<tiI!P7-$rZ}HB7nrzP)pPu`9^r|+t>KhQKJRjE_Vw{1
z!r7JLT0hJV!~ug)!<%cuPqYeK3+LbMIQeIkB$2(k>Qwvwh4sd7Zc5{!ZPTr)UQr(+
zvr6Q89Th{ykL||QDr6bHPaaq1lglK|T4+8vBNqF^CDNbNo&tzG)VCdDJvnAIt32Zb
zz9M6omgzpuR$tTj@yclOO*|10Q&`_CJ_Nt<@f`ihsPrqeZMNGlL!mq<LFu0%?mRCJ
zH@lo8WaMiMUep`90q}y8Wl^Pgn;(S<6vG|uACV6?G-B5jK=g{vn&rwKT6+uH?Ci~2
zgdlNVWN0vF@UfoWMmniT*j_w#Rs5D-a_W-HVSqn56&b<Bv0N6#OQBbPEVgKviTD)d
z3Yfd6NfcWb`jgvVK3<R68=1lECw@%Jx6UW&&2wummRvK#I|%6w)leP-?-<UU@zZ=@
z{>ctL&}I%FyO1m|A-=8`Ixcz?N{D)Vq2sJ)=6!O0kWu-+=u_y37QLIUl3>$#XN?HX
znDeZh$t+6w6d|g9soT=sjq#slfV;`d>*>h{dF>$C!Lnn7y{K|PwN{s8uz|tb3HZm`
zHf6f+eQ<xpPI?>(JlEzX*{17Bs`;m)cI(>A&!@I3;gsA%u$aQkW|A?<t;z^4EqSoy
zS~w|al6Fw1S9<1-8?62;jQ)>-njq=z`s}*UO+ll#yG^U3=ukdNB|g4;H_&cRLgyjt
zg^EeVYGqFIR*jr%A63BE%7~k;r40K^!R(LRNeKJRYd0c6*LA2)ZBQ>|DzO*fIM>(y
z&lt~jdi4_ZJEkL=ktVI*+~6rLVvl4|9z3^!VCEU6u2DQ?FJIqX-gzxnz~PPmMI^!a
zlmgbyG#ni_f`Tc$?$GMH=QD`leEg}y#Q&U);LfG}RfSu+>GAHa3p}O)7o;-vDx)g)
zJ1$alRvl-Zs=`Gdo;1bz0&8<wNp*j(ilP~E^S(`aYL27N0LMI8(QMI;Bkf*8%L<z#
zqfWibNHH44bg@7Go;@Lat;O<DCxv{0z>OM-*P{7$ltU&`m;~}C#R+?{B5uT?82REp
zT4*X_mvkT|M<?x*<(OMr{fEv!G3#b8ov3p%++$FaTC-k%rcH-y5HW<PKL=wZY=&80
z8$4aft$pa)!FtDb3UH-}CPy^;_?ROzRWshWc}NGVPVyKvO57+8tU&(#_)K+R@mr13
z)N1wmK<ZHcK*Pz+?2Z$r=3x~jSS)u*d`<k;v$E{+p6n*#wYV}T`esgXq%hwU|M5!r
zG2nxQ2<~UTOiK27HnV)U^z#e+X_Nl!$`kgDj(napozipcpU;{j$|@yxdg$3rW$g)v
zLO*t6>1xLfB`W*TkaFY6DF?;2T{1#A#I&h?)Nr_L9u|_-Z&5ZV<<z!&?$3b$#nPSE
zXi<_Ri7{v~4r16<tJ*~^y*-c5C(O)y1C}W@sZY_%qOl<<Bw+qgvr|SZ9-6*^S1k;E
zS&w%q($mKe)@Q!a9&=N1T#1<hTN~ly;|8`<kgGqyO?=^*P7I~|v`l5UUWbOKylbNL
zG6H|(oANh9ZIPENii&Kk1+Ns(uNy0RSO!^ocqH8-`6`1k4|o7^PnQr=_-W-i7(vUf
zkmxFHJ!c>8Pj_UJqcoB<@6~DrT3&NCb*BQ^uG+>5Owm#ESN#d{$%^TN?e|S)ir%ru
zB)7~5dxqHUsD!Zx=0@C({3be5v~tbCjH?4&T9)qQrX_KBX6JB<Ife^DQ9jt0Qo6HZ
z*R#LiOgcX-$&bGFUAI*3s=%vP|1A1;|EuPlVkrTmWL{VM7S*1N!8_>;n=7JsXB740
zap>hZ%G1zVGx$(bYTtBPg3SvzMes&{Z1tyQ>$#zRw)!##MHkx-WQ-EE5gaM^%NI>n
z+St+=6qELg)>I#Ve?@NIpBy+`<@C+Dz+mj0s$R_aq*>-ulie{}hW}jVS)qjCPEZQ4
z`~sKm=kr5p8UA$o#~$MYySu%NZ9c84RzrFztd~)H%%OLgMRcshx?E>C`&~fk?Db-D
z<*%2)l|48qs#$SsdXt5de%lFA<QBzg^@+t`-mM2T@E?0yxn3-2uLBNhVE_*OMuNe?
z26AckG`C~d9uG-?&3|q#bR#2(B03YRZeozqVJ}!aw-$sPA)#w%{-(om?n_|a{fmWG
z)-YZPht)fEimo7g1>jY%!~Rk&XJ~cCR}7n?Gwy@PUJZO@(cWej&Y$8uUL$8Y7<;cJ
zI`?HG+x77j7NqPN727n5@(`3i#e)A3fbv?@#>B9h3cgO)9@504CQhFt%{#EH`#74a
zybN7A^kJ{-&FBz@aIG7n5{wijpQOu$bDHcmF0(t!8WK(qb8MBtyUnHW-5|>sRHh*8
z9!#pVQ`pL#LuRk0G9%R`pK2y_K3UoKWCa8DUPE-60?57f^%s!I%sp!HBY!(ep;aJ<
z1JI6R08{ka`j_y{+gim=)&7jkgbhhwudhh!$weDbKX`Ixk##UjOQSI;ac+gHzGbb-
zX0SsT){gTl^CD65H5y;3?|H~mCPPMoa4#pD6KAD|Ka<vVq15u?p)LU^SmU<(%zx%T
z@3m;_YQKMq|MIyw-tY-QPQ7rb)72PzTPqB`y@Wk^4B2c)uS1l4r=D=!&>9UP3-3h6
zkx)1Yb8eQfvNkq9nKEvxlYpE#w(CCmRd)U)uKn;TURSR}b4aqw-gH_4lCDv1@@qL$
zvvP>4oUfUZ_Dw*62^sz6o)lZog$aFG0SO3~g_Ae>&*;|4#Gz#pW-sT2D#vrN^B#Lo
z(MyE#Ky^i3z`I&v*y=Nlq6pW*B>vA5k;YeO&-#&7)I|`vTw8H$jHYn{1?(~EfUq@a
z`-lt$P{5$=g78a2!zK*^a7Ac5|7kguxZOJy7IH-)s^X^b_MDMnlguB?5|Jrj)32`Q
znmMPkf9?b27)Hn0T71cr9Z_apU9r7BngfivyAWk%(pE`bV3wqOS{Z&>;)jlWL<!ve
zvXirw_zi$%5zfC)MJOeAW#>WDsJWWXcFmiXA!Jkcbg<z!`5q_AgW%Pj2EuER+$1Hf
z!#V9vqAly;WJc<q*-AkoJ**18e7SXXQ%u6ki!N4XgO4Or9LreiT#)-c3SO;pMV=GU
zI7OOl#cGUvY>x>*8R31%MSKxn?Of^0?(Ba0Puh=_zjZ}EEKNLFHrUz&fp|N_IB}i_
z`$H{9t)a4Yw8~1R)Tzrhx-UJ9Y$`!4K7Qgsp=afz8O90rz?_f*lU9XUdT7a8Z7->X
zaqIntXq_8L*j*cHsrplYYN1_X_K%$E6>sTC9!h5g%SGSR17SM&+&MknvYY((9VJhw
zcnMS&JPRtovev<xmpgbzy1u?pb(nQ)=piSKu26_JzA_$@w=-p<M7DSKIQukDbRM8)
zM7yR!LtJ=O8i8?J<cbbryu5^HOm6srF)49YN+gfj->}kf`0sjgU8gEve7*h|W-Foj
zbSh9|$5e_Px4)k-lgdw>shR(w!eL2)`u=}YZro=iNrTbcX}fas+*2iAp7QLNxVjT_
zTFaPirkm7FDuP=lD)!$@&rG(S<D_Gfd{qJWT$EK!3~-e9UF+)_Q9{RDS-*IEAVSGU
zk>RFFxuB`g3rbr+IXzmV%I@n<fZ4Il&@1wv;x}nd%Rc2Pn@e7bO+&gb>rj29u8dZ%
zo@hz>w3RI(WaqngfRZu&RQ^kvw7}Xfq9omkL~Cnb`JZWLH+)OgKuVjET{@G=URNr~
z?tw&1g|R2ND3<D@<E^;cfU|Jh$raRdi>~o)K=14wK|a(`$itVTD=ZF|vlYt@#ICP7
zR(vVvdXD?#e;tVjEdYLg!VYqH67^+ME;zg@uZA(CJ$FfYU(-M$*Jg;#LZiyMh0pH%
zm>}Tl<9Si}+`(U>Z~2Q6k-)iCB(~!HuN%JcdU@YJMA6ON2sPxt{;Q-OJ#bm*1$$j<
zR0XS29BWlv&vawrIw~T=K7x;~gTBH?a=mH|uo2!zkLV2#<GwjkYZFRICem)W;DWU4
zYChfHHax4m-zdd9d|HM5HH>D=b0g%I$^+|Qxv2!AggNio%ikk2gWLJ0OO*;}Ol<95
zoL1RCMX1$xA9Wu1m>ggWb01$41f~?TnrRGcMZEQ1o7Qxu2-llWn*cJ49sC!SLzx5<
zwsPpuFO<v+I?1tv1hzZ>)7@ewoZ{cEDVsY+gm{|<m7q$F6~$=H3%kVpZO5KM<mUjv
zORRN6!P0V3WHvg*2#He(0gdEwa_`n7LH53NY@HR?bluiddCpeXtEricOwlun?}X5_
z>hl?WzIhh}ue4xRr6_Y+i8QhruLygwI``JRC+lI{65C83w|Jth9LlSdt*+$Cd)R3s
z{;jEg>b9EKkVw8Kv{>PT4kc^Ys*e#<<QpPu{^^pu_ZiMiP}>iE-$r>c7tz3a26N!7
zjAC#D!{(!Chi9=6GGa~(?3~fo0#o^4YxW#1JAALWAglrWZ*RE+^Q(q{v#Xhjgzar>
zo(x95uR|yDArBYY^bsR#`wW5?OD_0Nz0M(0p_;E2#KS5Cgv;bZ?BUi<@4MOPoM`&8
z9U(pxJs~|ju<eNs@}(kvfuK{SQCxUU{ZN<5$+l;3rHo#Q?Be-9wfYqO_Ypl#p6Vh*
zz?<X~;ae}Ba(SHc@sIPwjJ6uj4(t>blLNsjmBfO)Dazv2<LZ332V%~Hf{F037kxfX
zqej&vFz$uA@}^E6Jq~83eNfXjV6d3C7a-|VDr2`bau!Aq*sO2UD;JF%xDKP0VZ2cb
z7TpDb{@0K4?h#I8#slW^6B$iLPYR)X-%Qo9^QuYC)IXVqJZ`v&?-~t*rrUN-R{U_x
z1g+PjO4D;5;452I5|Ql#jTzWOa!+c{rW(nl7<66q7P7X23M#pe5D$`17};tAEaSvu
z9XYU^EBv=*p8uE+i2_VR!>Q&RoHt*SbXL*ZesHxrJqX*C>}mm_eHJalc*V#ear4Zn
zKXlhxV53G+h_G-*CzW~0I#b*(4^x{ZbG2@Wu}I@su~bCbN4<#RF_D+xkD=P2_}hRH
zu2luTlu2fbG)z?mRT#Cp_2j)!rM?fw!`~w~0`4iAe^#)y<zXt3&ROD6HqqcPI|BS2
zfbG%Trx(`MYDU(e%g##ZIBRFG^BYrhXpU3D53QH_BxSV9IO?>8mLt<OehB=%uB$R_
zkDs0luj$Kq#^Y8w0sn>Y`wR))I0dl;t#$A!?_XU_<+(t}@-}_hsw&${5~huJ%Y0BJ
zUP(3S64eIwUw5fXHcq0?G$9d^%#HAkkaDA(){ow}@*st+g&+T(&hO8i5N9MMnR?H_
zBO4w{O0fB)UQ#KqcT<<<sQWq<_K_#liN}(U_KBeX$~g{}53p5n8?S3W7KC{Jp7blz
zGqz&%@|S9iIATToqr~UGJsGXPkbhk9Kgqe5mR%3p7{hQ(Y}C~7z*$1X{*Gp;00A%q
zi%BL{8SeY4*NQNxq4w4lN22uBeo^zSzMof}HA9A0X1Z1DgioCJa{A&b$WG_a6y9jT
z6Rl^T8BhxGc13IWK*F~y?!ev~f&%=nw`yct8a4|PAc}v)w-8U?dp*>EI~*5Pfvq2C
zTJ_@ML*TyxhFu`qO(DSq-m^S-yu(~g0@{*Nm<s7UY2A}O^v%`f27j^ft~;8HNO2?$
zxrYN#yHQJ6B_se6t-*x|F%oB8htj-pRPojIy3A?)_vjB`k7c`S!>f+@s4BaOT(4!*
zsXn9E7sw}1L+l*?4w=pGXdl(3@YyH@F8pXe$8u&bMj)ysPHNUQe03&@j0nE^K9>X%
z$d~y7tBca=y<Aqmm)371`y)#bu4|k9IjjSgw=tJ(R2KACx}u`FfBj)Ff5ds$9@^7{
zx?I>LH01OdyU9s5X@))GV=y6G<|YvJcCq_=u1<GRDL~`2xF>3Z7~+(!wl2)S6}$+P
zm*G>G64h_a?<l+zg-H~4zC*$2e$yUY2e0HlfkAC~(1Um^yMOmSDaCP|GDFhMEV8iL
zT;Oo=dh(CCQ>Vo1VnXTAtCLOz&Q>|$087TEQ%#GCBJ<H54Jr|waH`F!xw`DXKLHSY
z&WnYM%hYe=es1oZ44a^hsx)j7oKGZUc180;6bJuy%-s%N(sL^N-pA1Lk(yaJ`#VbZ
z&)LrkbN-27H8BcJFnvD$4FFcmh~DR?nr(^9idoOwo$0NH6`og*D{uakVJgYV_95D_
zP=8Sj#6~w(xN-k~4G6LmGFMc#ota`TJPdr3RZM!0jMEeM1A^QevYa~qKK#><mp7$f
z6ViXmlfs$xne<I9Gm&OSZ<kfQ=p3SPU4hC*F<GJTxy?+K*7QJh%=(p>(~o$1L(fWp
zt~fHb0x87~DO!Xs+T&_up_II?-D`aKnevlBX;1y%4s6htwpj3au*e!Mp%`sJ#rFAy
zccfAgtp%^Nx<6HP+|E1cV(!XtFneH`K0r2N4gtSK!Yh!By-s9DzJTu`fI``|PKM?9
zhP}6nLpl`>H$+!f9~L>j9K3}=E{{4p24~bCcyvFcjfLDc9ABVQ-W4k<*DHe$^(vja
za44GIP;Ie0w`9drGVYxk969xNeL%Xdy=Vtkg6Y60G0q2w&!>Dj{a<uex5|y&T3iRm
z-r_O^m;Pca9ds(`b`4YZJc&)+Q4%gcZ0h&aC2=ub0ZrXM0U@UHnDq_PHEE>ojIn<$
zdRk0xbht0_Y<8s{@a7q<O6)UL6*9P7jdM)M8Dys3_w*u5&p?HNt)Jhue}tdeP>)$p
zKEV<3y-?W`Snq#8`fQ_4$lJo3XFrkAvTBYM0%hq+$>(62PXGupsG?k{bc@$6X0oc$
zHHNP-xwrCWY7~DFcr~PEs-lnjsjy?bI}Lo72A^(Ihz)@pqc-nPzaL6DqV|i0Ug@fS
zY>Fk2krBp3`Ci552x)*B0AY|Zl03sSCE|XFMdj=~=MjhVgR*HKB2A`y95iYljfpl|
z`5ZQtGrvEt7@WI!5&{>J-`{3>nFGAJRKK37uHL3<{}Tnf@B1@$$wytCwZNbRx8@Ji
zu2M|uL*vPeRL^xOLW*v<_D@U4Y_2*+%Py|N!zR>f%B}nlh<}}Vl-((6hgE}g^Qi|R
z-`RVd1SN#MVBi5jj_E(Bhj(VOv%kk5TxlKp#YZMaCXD(^Qj4nxPT7Hv?`#<l?-c)x
zOHFUUzT7pXf(+Z$w`>w3Q35P`4G05VgbI-CM53l*a*X~8$=B{~UXwQqA&chG;A?tz
zCq~&bYywD8<>EI0T1=>Xso_~1!f`F1x<D;#qC<Ey#5}l@e>(QmWa?BP0*`(s9~^Zm
zrsyRxlu>&dy)45YNHiAgx|O1Rw28@_JioU3tO8iWno&`g$rL29l`q=!V?!yO!C*j5
zQ6#1H<O+CdW48bRd9*+^3f*FQ`M;LSyS?e6NV3X0iLWUk2Gn27Y$>SYs~1v5>1H>?
zCPIml$~N?M6S>=xs(b#|sY%2Ur+xpzdZW#F7j{bp7MM^rd-Fb(JHE6h2U4i$1rFgY
zMq|VGnin{JH#Ct~017pLUbq23aHjLgv}r)=E1d!8MTiVGg*c>q4S!J)Cp6uymCi6O
zc-fsvKS~+4x=X^|`W3_eZ*BEtM-tVT$Q1ncB@@G8iFo?rm34BU^1`=PO>V5D+AJBd
zyYxhU21)@0e}y)g=hioUHbq~V;HzjVb6ve^y%fzZkr=Y1Gj{enIDv?3SSs-+k><fR
zZ8}9yp*xJmjd!2C*)hx4_x7&W91NwGRr?5{YeXQ8!#&%RHYzX@Ra}7cR9xl9%ufU5
z2r7Cv<(zst(&Mxdg^^0I%sm01W$WDJ$auf%PXi}e(Rg6;Sr5lOUn&8*#s}*85D+)E
z{~c-g1SzF*sAuIeDG$4?>+*Cl;&7v5Rdkh!Z1Q2#h5T#Ezq_+l`JNcJo~4#3Q!?XI
zG0f6ZS%XEeXDgG}z)kpP!AA5PtiG_;)!9_b_>xzS0+dIdr+`F4*aYV%q3A%HDvN)%
zT&SuP83;fj((ZB1pnub6foGGn`3RSoZ-Mjl;><%2)|}~<XUzwYuBKEz2Z5E6dX*u2
zTlB5c%`k;R4of*Uy2cdueZ)`2WUYZWBx}h=f9<r$<}h=bi+>nUl?pL49*ihSq=gS&
z8^3r@F_}uA8C!U7PhRxreVk@6Rbg<gf*l_(aYY_)*aQGf=c0DH6b7&JHCb@(N>l;M
zc+n=lc90<z`%iUUXXfen+t~l-#8n*bC8cVvQ2{PM6Az#0;2on6O2~^Wt0;<F<Nn$H
zW7)=*1CsBh51qG}uJ3jTH*UCV|8ahTPgmjq*FRrf68=MT{rpoo-!<hsp3#Xh*XZ^=
zrX4d})Z?$|IsSDZS<+e}luEV@U!2PAE(|7~o)=Y^?xmKR{)!GIRY~7``64D*&gfn&
z{6Hu%OFB6S`Tob9iFrJZcMzYm>Sd#Q<UXFs%J?_y=bf+7$E4IlUr!P=E%rB6gC~l7
zcEG~Ym!9z!GOpOy9|V@4hsIrTxpX0TMD6=i1Y5s|76yw-Dv(lPqa(iJ0wql|wnP*m
z-KBJ;-LEM-E``(+oC(~6UHDnBHeKANdGp-r?f2Wk#+I&5!F!$oGEC6g@AR3i;TM58
zG8u#^7_?L&UO8dJXwtTI0*$EJdp%5?ssO^aD2S(;e6&zpI^zD1TJ@N7jZBT7@l?|<
zK87ZHM)9NK;ixy0*3iFfT=%hC%cA6(2y~pk(D|yYAYF&r1?D?1Z@!U^|3eX^BFA5V
zjG&Wp3Fqh~)*0e1@bauK$P}a&-VC4Ewh}KZ?=O>Re1qVCH^}KGzIO!ZLU8F_Vz_&p
zKjRTmeN><6*9_HN>BIAP{OLUQ|IWkYSI7hi=fB7Pz9%vffthj1y(7%a@3_P__h3A0
z^1IK9z%<|LOJ??w+QTV?p<*MAThb5*(Ej5gBBuO@wri%|h>}No)=)P&zHlC>VfN49
zCV3c1=H<H3`LsflbhvmUW{-=QTVir0pIhZL6H({)oZ3^=yvlKv_4Pry$Iv@hvGb~%
zKf5#=>m#J+eR#f3Q_vAE2ipHPRgYNY1*byNWXCh;!$wo__VW_Xey6wF)}&&fCxAJE
z6w4&&#ETh)Ou(;AG%j$6{mntUF0N+ayHEU=KX{uc=-Kmw7e9LV-|fLCKvj}otm=|w
zTY}Rrw@m@E%^skiMNJneIqCFvYA<I#sf@Z6OadvKnzeX;D)P2^R54|O&_6V~IAx-<
z(c@r+dxqmzf{aRo{-UJ|7VCJ@fEtJWJ?Ncrp`4Fe_zQi4`yCfaPxI}c0XAacXF3<B
zerKeFLv6F6>cMy<B@TB517U=OcNir9qFBy>jA{I|bQRV=MWwH(_pT|@Xp}?2cOnB?
zn*;y#_6_5RQ_BGa8&AQvQnle(`1YxoPsvxc{11P3b!_(L&7#RNd}P8mjgUFPa6Wi_
zU<LuOgl9he?z=Q**LPZ#JwzK6koIUbh_OvANsXN-7~3%TMy`;%JX@2i>**v=9LizJ
z+uwh@{mddJ<~nT8<nYn6bjhlo#hEW4hsGQH?C0pYX#L86ioq0#SLzqU4Bg#Pqf4-#
zW5b>TgM;8OwmQvIay-+QE>#?6o0Sp+{KG7j1CGKG1d#SG7j7z=0>rlmhC=9{Cf*gF
zD<7fmRNh9yK@(!8?q>+Jtzxxwo$<(&N}NH<Y3{PQ8={`O^r{rRw+6auSW-;`#b)g4
zjO%$uQAC>SsmRZxN^K#iW7C6-CgkU1iE~2?)J@u~K2z5k2QUea^@TErl-w{Mm_Bnx
z&!XGk17v$$)vKC!zCWe9%@Z2?w?&g;ahn^~TnlS*XM+$TzKbzO4S=Jp3vx)*WkHl}
z3)MuB8fa1JKJxY{iHW0O7W=!k=sG(T{gm5B|N8a444?y9Fgr)fZt6~aO!pBRT`+nQ
zta7i#l(F27Y>@AF`v%{cG2TwtO^CRyJJ24JP4r>+{NxwMc@Q_)@vr59Rlh&FGrTq<
z%`f!6dYnQ?FSq-j2Je-RSHhw3R9>!&f%l&ZE)IP+YA_=d&hveM8sTR}S<`8nHQM_7
z31#Gp*&*;_{?ZiSFG2PwB2&u?UZrmJnsiR+`|RpRE%e_!<!oYh{(HX6rdw;Y425<}
z1NoCj{aF0W9UB$h?^#zbTjTq>Kzi233#R;O{_28TdZ1I)zG@D)^L%b1S);6%Za5cd
zGI|iKl)ZbbM!<CZ^k_oFq{>jg7Wu_T-(=0m3C6d`k3uYo!fXV$YDZg?BKEZ1<1$Ar
z?#u{ELPrW|-j`ikQ8A;$|LDEfHHy5;g+UjoT#+9?00OI|qbIIDRc8QN^^t$K?u#rD
zdg>CzW2b5H6KWk;RtyNKIJSq`WRYu+*RRL;N5bJ~^;iLuApgIgT0hh`6}c;O$Sm5e
zf8qptyxaq6wK%^rqn|;4$paMQs=18JBH1(Fh{OmTx>5rb^YNrzclvgouCG5O9c*Gd
zc#YF9KuxcY!H{uRu7~baer?_q-xIY^^qg&EmmIN)moa1fX4f{r_q&~smutOY(LZ?j
zA^PSm4)AUQAfBKcI($!5?-O(}O!yC}M7gJh*H4{K(lTj0x8?^F;xMPdv6qHE@%W>5
zw5u>JULn3mTP45*j0A%E#e`%JaKmb-^9U${t2YB|<Q=eEx0$(-=9YW%UsVa0`^2--
zNdT^8U+^j^&^oVG;O_IUWJRmM(uY0;3a9e=#do#o6(c?C;eqAt^>;tCxAD?D)Hi-F
z!8eaU%uA3ZulhGZ|43poJoojBu?+09U3djfOnioQ0<o6estq+g>WGv$5}A2UG<lWt
zwfGldPh%LHUNU@BvJ7#@%St$&>mZabuiH`c)EGUwlVfdR=zW?%6<s&Oi-n4;2D=03
z!uE<R91_}MtKs#hMM(&xNw@>>o7%u<lAdxiK1TdO-C}=<dZ_W@BVzJT&B93s?WY-F
zI(gOfeKt$m)j_0G41dTNzj%DlHLT^?w^sVx6+t6EW9}j3vn;i6m8!#xe`QJ{d${UU
z`RP}iFFS|AepK68Hu61hIxTu0n9GsyFGa3!M#mJ!pI4oabm9u>BhU@aqU@b|tO@0C
z<3<XY4p646rYpNO{wwM-$Tn<S0Mu5r4B>W`1Ai&4kiQh>+C}KzXy}Cgs21J(^`G$5
z!F{v*Fsxvjv!!EMrfv6nY*UVvOezq??6IRj6Zy9!?6*#mqp2EKPG5MX94ZmsMueej
zGG>SaX6W!I_cRNyQb7}-fyT=%O6<F`GjDJ@(czSDPZ2a}_Mi#>(w<CJ2wwVTcfToT
zy%{ykPW=AZG5x2zVTJIa{;61FCO~QF&}7U=#LDr9O<%tVXUmR`yx`@u&%=H~Zss*k
zn}_qF-fk`D-wHcc4i3-VjJ~YVyXxTT?f|wh(QKWvCkuT!JRH@Be*Py7@xA6FOl2s#
zhLb`JHC!3MYxzWor!)hM3W81o%Ddn7)}FlIVtI24r3$~aEXYrWL(u`Fg?0;*A{=Ey
zt*w#Kr$3%6?Jd<ax4YcvCc*r8-hZ_KT1QccmNUdh;3L&6t7-fGvNc(63P1Id27`|s
z*8nE*NK}Xym2%oJ?<vYha&zKklir~Zn3o27(ppP!**lUjX2OY<QykPIGG4+3f8u+X
z+)0$e9J(U8AM2qUcC0006_qU8aWK*fwxRN{U25RdL_36CA*`d#gHkDK1+gDvz}lVR
zHVC#y?!o|(D3(B~h14&J0=WCJi@^>le~zqU%>kEgR=|?@_K)FNK%qmBcZT`!1>`FR
zcW~uN+5Mj(){uw6YPnD1!p%*t3?&Wa4pl?{9swmG;>ym^+rrDc)^VRYBi2L79xv1S
zE%jYdjM-&9`cL!AL6uPb-||(wS`-rX9eKO|+h7==kuW$F{(y2xW=Um9qcRt^N9cEj
zpxm)IsZ`GtQ;=JuA%COnW(>bazJO)d1Lf6IFIotwR2-HN>~%;foX+=i%Y~zxsOdR_
zgWXa;<`XMHE`~Cr<25eXT$b!Q&Ed~96pTm5n3(uuWiKqjibSPU=4VNcNm0!~9ZTdW
zWxN2OMkYTFAr-@+g240VySq(iw^>#+KN{tXH681RA9y-{d_HK=^<bt0Mf39}KcsOo
z8#fg5F@l!R4xog^#eP&TGnvB+<LGQyaW$Ub0DcO<Dy754tXGaV!uw5rAfIw@5PL_;
zqOg6_^GX}Ju|Fs9eZ0wNjS4(6Her+^&VX&6a+}^XxY4r@6ZMvea0<QcR1dF%UUo5>
zwuNq*0b-L>NRqT^QrP&htw@#8U?PO(;8aqol*rF90fYC$8NbH|QqYarm`dXxeL1>G
zXi6EfB_6H^QXCeC^B(fGL<CuKjmUn#mwe!JClgq$py^WR=JfEHZ)v9OV%GT2dH?6N
zBFx5tb^%TSuFFKM9yNS4P3lm`gFj-Bi!eC=5vJ-VNwdF{+waNUxmJwatYV!YG~z?X
zD}G|W0`Nc?-yfy(V#WRPyscW6Z8_pvzoY=@R0)3j)Tnn<1|E|kBjZ#2lgYkGjX`^>
zinZo=7}7CeD?oPVYP-ZrUBQaG0y$(g??cH~ap;^S08CcFM7@IowJe=y6wBgPjo0Ov
z^So|9%ev7iQQWa~KTPbuu}F-n><5N2WHN+1QVN68MA8>LWS<gR<MsCAo0QfGBeA`g
zW3I8!*R^rbmf+sv(sr(sG858BY6nYiQj{1VfAdd4ep-|Lz_b)y=Csh7nyC`&A+!Ep
z!osd;4h;E`bfxrCFVQmGx8v%^1f}9(6+VZ^8ajKfzKh6xEEmNM?LN(a3!0~&=arYV
zS;cbZ*b&y7Rxyoot?E{&LTWF8sjy3oL(Jcw7lmGgNEvL?0h)G#1=lGhPUzhYR_4i*
zdj9j(V$c_8QYe-n;SGydasx+zOj=>SKSmWFhbI$ZQWRtDtq<os9-X5gEDIH^Duv74
zToTqSbDU?>Puf%A2g^<P;JN@xujkv&-D0mzFw5S5G2!41$>xH`$BolaN9b$ZYa{lc
zgw46tKi&I_umr(4NO`@*Vmgk!1pk=VxP0dgaZ~+J?=u7^+?%bZJd6+;bPhYf`8I2q
z9lUD1bxWe_kZ7MG)ETJ4Fb~n3z&!ziP+n9@+4E3kmUNXE>e%glfJS<~7dP!msUy@U
ztTs{E2ozNwInO$U-4pMFCQr=*)9_)L)NulMY~Hh58m(5qESAg9b_l~}IS!2*Id8di
zp>?g7ZVl=UY6W?0KnjDK_m2G^g?%GaM?ZdXb1wNLF389j$TuapFFO}SrT)P82i|YQ
z>tl!$&=+XQ=XQX^&@!S_!J?x^@Jkf7=Glt1hjpk$&ipl?X$dHLZ;5mvfu;eEr1jNb
z<>Y6MnelMj*TTP8#%VU^Y8zY~2l6jA$wD1#2zqiVhKiKuUkpuR!A@1A(5JSatGm(e
zG9@nwYm*gmU!STr>0(StmFxY6N~zP2TT`ed!NCE#4utv{nsc}XzCM9>iQhm$V*KLj
zITvEdGTXaS!sa7zM*8{gGkD)Ua?V!<+mlxX7n_NUnD}Z`YG>bc2g?RtbrP{~yn2Fg
z9mSST&^oLyOIL+rMbe~^kCbxLX8HLRYAiqalgHiK{~To(F1~$nmT_~=`wZ@*(e)sI
zD07G{;cUw#>?j{fe-g0Z#_f|GB@yCNqF!COI4GsP#y}Sm_-ySlMx5X`Z{&aaQ|F9U
zp?x@AFAA$wzV38O`)7rOP@sj{<;%y%;T*9GiNtBWWZb)Wsg9J^NJ!H?#15-FVb9h{
z^xmR{U&i!h>gqdNdmzcqhIw@*%?)}I+04ErGCxg-!{>Z~s|ZfHf^aG5jp(hjq?=Q?
z9Z4>l+iFoxagaDL$C15$-xu+oYG`*$HH?b>r8?I=@!FFi+^MZDpR(yLVm8%)a41Bj
zOnJ2Kq_svw4)@Z=)<{1k!D*&DYQ+}1{Ft|RT14=f)Nv8peG+rT0o1&ATWoK&E7~+Z
zeEjnvo@-Utca9*+@Z|MSI`^Lp{Y>kdUZl8}Z*f;jC*>ydK2?(h1IAH5+?x>AP}pJT
z)d+!?eQMCHirB)fY3faFbRtozbX|ImloNA!^0A4}oM$I5HNzUM$nP~qkAaL5QSF>O
z%eD~P6*mJaju*FX9D}Ay604V7&Px#MrQrNf?Tyh$`z8^F#kuZxlmsUdVK`i=o{sv$
zk_!Ft$(@$vVVC|~@tfixTijPnR4NGpJKbW4vKnHazO5FfZBwbB?75pjcUbT3c~#8i
zZ3K`0lc-$etNn;eO#f|e@bqG_XzrWYt`wg)p0#}BO+pM)j!9v)C;t!?tUA0mvj)H3
z(G}kbyN^+hJNcmF&B1(Bze>MFUzo|FIr}`JUwZ#saGgF@i<qKZyTvR)ge$(f#pR@E
zQ*!n}=Hsd`vNEgGMPWpA>XEk|A=0NMzbuFm&e0o8E+N}&_7t0xK_(*U-6<dOn}H`I
zLRUo(Fo$?8eCX4(mgf33Rs4MkAs?7o7xP^7(=_?km^D=$uX!-*Jjt<}C2fgQ$m1Th
zr|M#q3%myHrpUoQ2XkF3(4DO2{bdp*WN0#eZNITtci#0@w{hv^!ix7y3Dlb;LAoNo
z6PoFmpi5x9iSYUV49P&_vdevlFh7Vn0epV{3m_ux$yXH~c8#zgks&2S{7d8<Uc1qX
zE`~WedRYMhRp=L@cAMH$)ZjPU!9c^mTtsATO*F^LF)1_|??``!KS}9LTS|XfYwSUA
z$2!mirwP&$aqdp(B_UYA+YC0+{xsK<#e4*HTk9u^Z4c=0#@0l^K3BdJ9?{R$V{vtE
zXYZ9^#U014?gC6oE}kV_A^n6|@sJH-K4^52VfWb%0!X3+TMFQ!*&-!ECUp)UHhyo!
zrU)=RyUV4D7MbA2d{Q~vLv6p_l->)3S=1V>ozIo)HEl1Xs`bUokM{tHQ2Tf*YZthv
zP!HjogZQZL(y&SDPeJfQIm$87?KHSOMz$2Y-h<~{?3Zx40nx@(FOdkA#<FdSie>IW
zPXq_6$FZ<J4E!r)70f4ber(!DW=iwz_T<omU}b$mpgEUBLl0^0A9S?kzp3KpuGc8(
z?Y;e3_a(CbyLfX;_Vxn!TK6#~n{OBku8zFUvJxH^9Ub<fI5-SYJM)iGnRF!rvSv0m
zg{UxXKjh-bH_Yo)=Ht`QL+LWm#fA3vt7!#wr`Rpk@SSbC0d?H}!_eG#>R3@^RlPYU
zc=rP>&%Eg~;C06O?o{otpR46-m~M(9l4YptqGzuul`f%b3QMfOz|e?KfssIM>>KzA
zhLS71;l^>Q+6}MOcv6@CRP>wVPEZ_bBx6*uhZZpS@5?>&=OqAAGgwr`r?_S+d8s>`
zqusgbDuaXV(ia(-WA8|wozpnH#h<9PvT}I}L6*I>4ag!*yV6;96Lu?i5gNtTJp3~}
z4$IwEtlh^^X})to2`!7(who_UlW!px-VRAq&<o>dK78qZGvOE7&2vqxG+!06Q;va4
z^!>PB9Qc6fcv{^j#)yM`25UCPJwjLK*cRb@XR7I&u0S0Hj&l%?Gc!h>DSkIK?&Z1Q
z<Z<Q2aMi>xKok*kQuoq0WPE2F63OLSib<dZW8Y#BWp`K$2?f8bqsaC$(qtw%vZqW}
zrgW*maHV#X$cQ;|P|s7lN(@IkrTUKa0PNX>m%x3?wVw6VU;H^(iu{QDK6)?t%yD7z
z@?>t@8Ni{zv)x*HXH^tAf*bjWnkayOHBmtwH;-qkznz3tPJ}vtC%Yn|n5F*hx=CwP
zw4UUC`Hr1%MTrtvWcMB2<_qurHOT7DDr9Zvn+c8ro0t)m?Od&LXc|^ZNHMIR#!-0v
zxc%(hT2IOFvz7YvsV!aO9v1%TcP6>b<!In*%()aFOC59=QJXbyF_xE9BTMF=+0S}R
zA<&bsXQuxFi85n1$0&|k`UDyM!3I~;7f^v9QV}8Gbc(5u$4CRkDB&<96PXsp?X}s{
ziJ+9t$0o1d(k%<P#G_t&N9(Pz6P764WNc~Hxc$SRaovbjf%%m9`dDIkP^U7sJNEPe
zJ!jqQ5XI<}+b(!P+T$zj))bnI0d&u_UB82FOXAp1Vrwu-hjNKprP97*f{#W_5_a(w
z0e2OO%DgKt({XWZ@Vg0_m-ZSQItwYee_`X7iV7Cxe(^9ca>BvVZ+WefZwJhUDBpr*
z<@$f4-6}>84dW!Sx>yffob1f;Ei+b!_pX~(T8X4+iP>(Y_~Kfl&Zd-!wN<E#XIqLL
z*Jl~C<4D{+vr6j~6(~*tgFobHM(jwk;)uy2DF(;pn9h{0x2OXN!KtZ%R)5Kx_`gX!
z(L%~d(nA;=w-%}&Vu{yMeqSYxJ)eWE1`4V+?d`C*3u&FdMp66R!gAk)2IV)@t<r!i
zdO-@@m3<9@fVC{fvI0ks?NyO7&itP8&mB+@{Zw~xy_;j4ghbi0R`7~^@HS(;@9(R@
z_hc^+qQJegu=B@f=xs;^0mEE>d-@~+!2kL6Q9%Cl`J)@g{~wRJB?jJGLl(HSFQ!Y}
z9HmT%YR7<E4t8cLn^52Dl0Gdzot{D;hUOyQ$(^fxZsdaWN0uIRPp8fi4qkI-!DJ+(
zwX6R%F0Jxg^D*%KF*#R{9g=hg{H3Dx6^`o8C(f-_5LnjWn9!&<BRVM*AO~XCudMoB
z{yu7Q=mr$wsj9_#rsY>`m_)7@Ud{zApN!EG@El$7AZckGrHB!;Cn{VBzA6lhnDsMR
zEN)R%&=;8Ao4`|u?|3R+jl>6RjUxG-LYgspYR3BsSgysNE5cI(bTKy<fU-uw>2)Qu
z7bj0uX=j8F{zB_)An<MUS~K9{0ZaOCoUwyGQ`Lve=3S@{OGx{<-lWvMeyet8zA^BA
zDMq_Y(x7``(B9GwgD_Ik(mP`Rv}FQ>ruSapf_&C@;cS2iQQ~ktF1;P52}rUxJi_og
z^w2_|AJ5xIhIwXZ8v-Two7d0>qkTj<){q2ozP@SveXdN+wC6#f_-lqqtl~BGmM-E_
zyR{Kbzfw>7_#wk_=<AR%&K;@s)L{yPYl4+oY32$6w;V2;*?bJ|R`9}TtIFuXh1NaI
zlFKBd)N-FS#TIdQQqFN8#^B>}FAOhy`z^FsFKlyl4utP?McnNJ-e>Yi#RcAXGK8$r
z?TN&)n6tB-mOGuh{dQQtsWz|S=6#T5A5pplaTt<{ji>WqM`3g<a%Ai3r{xo2t-#fs
zQaN?1FSx8Vnmal@xr;Dz)-97(4g4;wkT8XwypINce9`<KliDD--0rFPC~JB9%(2f(
zl><!?b5Mxwn1tioOd^SczCt;kE8FxEitOz!>@vejM83^F;bxz#PX1gTz?iBs5eYxY
zlQN>#dO;Ir*q{)ze1g5=wpLcr+VmBXi~uRA#<yB)vsu!=)+RNo_an<izDg<3V3#R`
z9r>sCP6CBZ)>tr1*12MnvHsI<B-r<>KL>w*v~clfOy^zTDmuJhLO19wCix?G#}i-i
zb3+_S*oniKW$A{NXVZ}h=(zPOnXGkA3&Qpg8E21OlY5h1L@Oe*9CR!8s)wnj@c^CC
zAJQK;#y6emeV$@&=YA5d+x^i~qWrAi@gbAXeCAZ?7dIPKiXK6_s;MzM5Vp!LU4m{;
z&etwuT!U6G#))cIV?!(JZ7f;J9axYmtH?2ocxqIWr2!|W)W!d8qKH-E=A3YI1P6;0
zaNX%bHHon6rdcL%sVLy5LG_${*wvxp7KKwVwFggUTcQS=u{4WHqOya=C62N7D}1kj
zCOL4m0^cjhe4P2A&#G(4J&L&&xT)|SWzz5=&OS`+{j)!J@dKMo?*!<80>sZl5QllU
zR2~5erR{{WG7hc0BEJK!XSIsHYhQ0LJsF&46+EsyQi++EgPw!1T~mdH2Ls=KuMmS2
zgYRwpPkUz{&-C8Lamizc$T~5FI@pp<W;jectvclxqx&f0Xv2s)g@xKIPs8z)r#u|;
zSQ0l!llvSc&oivqG7m*3IwLe9OlY#@{;H<?@B6>|^}1iL{k7Ncb?x{1es^8p>vvt(
z`}2#1zsln|8G@;x=T+3Q?yKEdnNJQ^onHqEwxJXi?lyZT$!TDre}BsiUajj2InEit
z#eHp07~bzsZ(=MtXr)2TppF>nUzxw&3i>O}Gle?;)7ymS7CP40-|r9BAA^i-o4as%
z_AlO(&0!94!iY<E>s5WmhT_jGgf^$WGzAu<_xggIj_bt0u5#Y!2aC)ykRmhP+Ky>F
zIaPPAyCvlN)<GYwIsGxTwt!}3$(l~0=AZIJ7DVhG_=w^sh-c_pQ}1lNkfw-=EnG!k
zGtfk>016OSH5~>whvDMXB87exZskS!XJnKwW*WQ0!pp7q;^O+%+ABYD`YbYucoRNF
zp{{TOhBp~d>vkt7|9(&Ms0LEVnxx8PcnxRw%%L`MS?P)Fc|hk|wWK}vk7~)Di9Y;~
zT$S>TBy;v4#V~L=Lo-NZM!0-!<!#>MhC+<~U+v48ekOK#^WQ+}ZspBF-=2HyZ0HS@
zNYP_{p<-vinbE*eV!*#p)aX_pD~WU$u&OGhe8QC*W_u*iR`xd7$zHYvjAzaF(JIpj
zBz`*-Vrv8~TIMcX)PL%!F!k&{a0$dAajNj7uV2pS14b4PzQ=cciCk(wsYh5mCy>4S
zpf=Z49t1=-Vd<L)g_MOUL9j^Gu@wx`TylyD*U|?_*55lLFPZ5|x?OsFL@8v<6?l%7
z8#wmq2wnX-%kiz`Z^~LAa%V=`e?5&a((7U2;&{a##MFJRfLgDh9c&Z|yo9X+ZHuNZ
zididHtcJ@gVipUtJod2>8pmdslxP_9Y}ap=&AWam<|#PDk@Z%)USvTnLtRpXhVeh@
ztQ7vBz&3twlOs@sF-Pa^8}IBtxecp|JCT;T8?UQheUMqVptp09@=j~j;2bj9`lW+P
zj5WCHS2rIkcn<u6cGMX9?i^CwHr+6+AB`}VKz+}5=q!q1f7Wr#mwV5@s#!WVdDi_U
zL!jvqRFOaH5&0i+fx*x+CY1Q}VM`XMIBl}un4XX+&jcfX6sIP$;Xl?qgM}uYKqMsH
zdlkSPXnf3BYZ48@ahl?dPKYF;u(l_thjfK>rQtV6hNyg^pNm6#*J(cTa(gSp0e@8$
z0dHZq{(hi-tF*H_;<>V$+f^_Fb0DN)nf))r<pnih7lox%KP^qSS`*eYN$())KF=81
zY2aqX>Xh&Cv41ieNQ~H7m7G4L5s}zxXL|0dRHNtDAhZd3h>j`Zq5gAvxE0iki@lyG
z^^H;mUtFgOr5<fVU?X&mQVlOrcq;3QS7nq0M#g>`$c-<rZ`fMbmwWMzbri&cOH7G{
zlCLcZ9@3f_So2x+>4q6?bV-Uatv*!?amVRwSKgeVKKJrCQd#Ofe)9<?jYl!a9F^pb
zXI2pa0Gb^)Zf<VO7{yU=+VJFgvjPKH!(R2x(=B5Lkmk(S^&OyB#QmO5KM|*KYfv#o
z@F*wp`j2H8|K+pDpo8p1sPu4p2W@PVE$;O;hgz8&kB(o9uO16C+ptWg3GKFuby=2@
zQ1ra(uIjGSRRtH?@{|lFzj6sMCln-ra;`Z)jRuGJ?r1W}ynZoKw3X=aS#agFUysSk
zrfJpb_X~D$V;rY&+|MVsvk?)-86B#DI>=(f%@QF%ILpw^o|P3vt{L+p!`a*W`gMyL
z9s1$-QcP!x6elcO9zFtT0c0l#6k3N2n8)QE^U`CdgPg3S#n=Yk`lMU(TxT#tUel`h
z$%G6UtyZ*R`eXR|<;q3%?I{QFj$3r4XW{sWsU?m>=LGBbXO5Q0VXbr}{S&36!&Se0
zq_k{_2rrk)v0^rf0emgN1D$;vqc5-ao*-3Y*$uU6tKwubeCj+I=%ZIt0TzH|#JGaT
zRv@*Ju?xmr{-Y$8P3nzyefmi&r+s@U673u9-igg&c_MLJAd5|(A5+;zeLj>|vX+{(
z18EGO-0iRgi%(S(w$W=4jVC)!^hHC9J@^tDT0DL-;As9SFa`K5XK3{+1pSUl)1K;C
zYpzeOft>W%O=O=yCWp$AWbbfHSDWn-PsefVaL+9$+kd9Xxbb!}<U6h^=}KSb2*7$`
z?6OL|@B4A>)!kF&%qmL?*ofYnbG4t9U>qyi2p0{S;B`<>O|V*~CqNOZso~`f;Kehe
zJlk`MFHF1clEdEiY%?-svVQ}@m*v%O4!!<hlNJ#(oFtcfw-{KH`iB7=!zN8%(RuN+
z@B8D_0<LqlGn{ol)R0Nx?cm6IIl;NjRJR&p-#^`g$%ArmTi~ItAC%Jch;fI8?=S+}
zl=lz(*{-}BMy2(RyagPS*1e*~sJ#d*zF0w_vPE;V|1==AjnZzFb6EWTAvweB%_$}u
zLD>|f91mtN2hMgmBRE}N3cnOQntWFQsJ82ez1hkX*sGA%t0XYBGxi&nDFDAr(N;Lo
z(eB&L>aYvbY*FRVZbt0KY<J&c<c3T}X)NMy9bqIA2^ZXFB_j7hf&?Fxd8EDiKpM^a
zlsFcZyUQjJvVE7@V)KH|mtDqMKy6Cm*tVm;3O|H}P9dEt>@JhLAuZtnY($hElT7MX
zj_m9UwIvAMKn#c7Zfp0b(^8I%OB=H!5{(P&)tW9O=i}4`4bKjNn{X?w&5@tDC|kT5
zn{W<tzn`BXoc37jbRd>-j_{8>5V$(a5DK}|Z)N%YW*1kb-e?;H=vijSJ>UGICo+lf
z46exktzFzEdivCjP2Qy$D$E&@(~g~|C~!4$u4Warqwq{;U_RhL++7SXH`PMIwYd>s
zski4khT&a<PXt1;+yfdo;_vuJHrxi-FSiR|lL)|CjOZHC)_O@G1e|V-TxN4CG|O+$
z-*oAGdh%_|A~_~1^Z2ku;?rN3U-~!)YR0Y@4+yB}FVrZU4VKI?8$`EZTQJD^Y%80{
zz5U7Bb?&P{Orc=nQjNxkq&s=Q7UJE*TGT)x3ngh34BmJX9mT&1ul|zyj*q-hY78#p
zFlBw?SjG#hqMc<KdJ+7(naHsNiW-zAeC0^&HgaePN+^{Ri8oMCoIZ9TKAycOZybc*
zvDflm)yYPl7j!*CG#{E!M5i!WFKp2p32R17zV6ERfhw{A86(*!ysn&>F5)Y;bgF*S
zgpW9^kysmX86{jVPJOJ(4x@xjjDuTl0nb@C*Fo$YCLU;{ljP+&p_9m$8*@2(V#ha1
zGLWOTg!O0#n%oKMN28@(5B1Mqf0Q};eEoXIL}`zKlC+Tce=|VV>c3o@ukk@sfopS-
z1rkZDx<>9bP`g=MRjWL_WUrUs43AA8t`lY0udS^;ivJ+MXq>W9+7o&S96{nS%-*Du
h|E149$<mrklDtZJ6p3;QykA-dd))CD{itX3zX7zp8^Ztq

literal 0
HcmV?d00001

diff --git a/content/ko/docs/concepts/extend-kubernetes/extend-cluster.md b/content/ko/docs/concepts/extend-kubernetes/extend-cluster.md
deleted file mode 100644
index ee9763a769..0000000000
--- a/content/ko/docs/concepts/extend-kubernetes/extend-cluster.md
+++ /dev/null
@@ -1,201 +0,0 @@
----
-title: 쿠버네티스 클러스터 확장
-content_type: concept
-weight: 10
----
-
-<!-- overview -->
-
-쿠버네티스는 매우 유연하게 구성할 수 있고 확장 가능하다. 결과적으로
-쿠버네티스 프로젝트를 포크하거나 코드에 패치를 제출할 필요가
-거의 없다.
-
-이 가이드는 쿠버네티스 클러스터를 사용자 정의하기 위한 옵션을 설명한다.
-쿠버네티스 클러스터를 업무 환경의 요구에 맞게
-조정하는 방법을 이해하려는 {{< glossary_tooltip text="클러스터 운영자" term_id="cluster-operator" >}}를
-대상으로 한다.
-잠재적인 {{< glossary_tooltip text="플랫폼 개발자" term_id="platform-developer" >}} 또는
-쿠버네티스 프로젝트 {{< glossary_tooltip text="컨트리뷰터" term_id="contributor" >}}인 개발자에게도
-어떤 익스텐션 포인트와 패턴이 있는지,
-그리고 그것들의 트레이드오프와 제약에 대한 소개 자료로 유용할 것이다.
-
-
-<!-- body -->
-
-## 개요
-
-사용자 정의 방식은 크게 플래그, 로컬 구성 파일 또는 API 리소스 변경만 포함하는 *구성* 과 추가 프로그램이나 서비스 실행과 관련된 *익스텐션* 으로 나눌 수 있다. 이 문서는 주로 익스텐션에 관한 것이다.
-
-## 구성
-
-*구성 파일* 및 *플래그* 는 온라인 문서의 레퍼런스 섹션에 각 바이너리 별로 문서화되어 있다.
-
-* [kubelet](/docs/reference/command-line-tools-reference/kubelet/)
-* [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/)
-* [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/)
-* [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/).
-
-호스팅된 쿠버네티스 서비스 또는 매니지드 설치 환경의 배포판에서 플래그 및 구성 파일을 항상 변경할 수 있는 것은 아니다. 변경 가능한 경우 일반적으로 클러스터 관리자만 변경할 수 있다. 또한 향후 쿠버네티스 버전에서 변경될 수 있으며, 이를 설정하려면 프로세스를 다시 시작해야 할 수도 있다. 이러한 이유로 다른 옵션이 없는 경우에만 사용해야 한다.
-
-[리소스쿼터](/ko/docs/concepts/policy/resource-quotas/), [PodSecurityPolicy](/ko/docs/concepts/policy/pod-security-policy/), [네트워크폴리시](/ko/docs/concepts/services-networking/network-policies/) 및 역할 기반 접근 제어([RBAC](/docs/reference/access-authn-authz/rbac/))와 같은 *빌트인 정책 API(built-in Policy API)* 는 기본적으로 제공되는 쿠버네티스 API이다. API는 일반적으로 호스팅된 쿠버네티스 서비스 및 매니지드 쿠버네티스 설치 환경과 함께 사용된다. 그것들은 선언적이며 파드와 같은 다른 쿠버네티스 리소스와 동일한 규칙을 사용하므로, 새로운 클러스터 구성을 반복할 수 있고 애플리케이션과 동일한 방식으로 관리할 수 ​​있다. 또한, 이들 API가 안정적인 경우, 다른 쿠버네티스 API와 같이 [정의된 지원 정책](/docs/reference/using-api/deprecation-policy/)을 사용할 수 있다. 이러한 이유로 인해 구성 파일과 플래그보다 선호된다.
-
-## 익스텐션(Extension) {#익스텐션}
-
-익스텐션은 쿠버네티스를 확장하고 쿠버네티스와 긴밀하게 통합되는 소프트웨어 컴포넌트이다.
-이들 컴포넌트는 쿠버네티스가 새로운 유형과 새로운 종류의 하드웨어를 지원할 수 있게 해준다.
-
-대부분의 클러스터 관리자는 쿠버네티스의 호스팅 또는 배포판 인스턴스를 사용한다.
-결과적으로 대부분의 쿠버네티스 사용자는 익스텐션 기능을 설치할 필요가 없고
-새로운 익스텐션 기능을 작성할 필요가 있는 사람은 더 적다.
-
-## 익스텐션 패턴
-
-쿠버네티스는 클라이언트 프로그램을 작성하여 자동화 되도록 설계되었다.
-쿠버네티스 API를 읽고 쓰는 프로그램은 유용한 자동화를 제공할 수 있다.
-*자동화* 는 클러스터 상에서 또는 클러스터 밖에서 실행할 수 있다. 이 문서의 지침에 따라
-고가용성과 강력한 자동화를 작성할 수 있다.
-자동화는 일반적으로 호스트 클러스터 및 매니지드 설치 환경을 포함한 모든
-쿠버네티스 클러스터에서 작동한다.
-
-쿠버네티스와 잘 작동하는 클라이언트 프로그램을 작성하기 위한 특정 패턴은 *컨트롤러* 패턴이라고 한다.
-컨트롤러는 일반적으로 오브젝트의 `.spec`을 읽고, 가능한 경우 수행한 다음
-오브젝트의 `.status`를 업데이트 한다.
-
-컨트롤러는 쿠버네티스의 클라이언트이다. 쿠버네티스가 클라이언트이고
-원격 서비스를 호출할 때 이를 *웹훅(Webhook)* 이라고 한다. 원격 서비스를
-*웹훅 백엔드* 라고 한다. 컨트롤러와 마찬가지로 웹훅은 장애 지점을
-추가한다.
-
-웹훅 모델에서 쿠버네티스는 원격 서비스에 네트워크 요청을 한다.
-*바이너리 플러그인* 모델에서 쿠버네티스는 바이너리(프로그램)를 실행한다.
-바이너리 플러그인은 kubelet(예:
-[Flex 볼륨 플러그인](/ko/docs/concepts/storage/volumes/#flexvolume)과
-[네트워크 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/))과
-kubectl에서
-사용한다.
-
-아래는 익스텐션 포인트가 쿠버네티스 컨트롤 플레인과 상호 작용하는 방법을
-보여주는 다이어그램이다.
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vQBRWyXLVUlQPlp7BvxvV9S1mxyXSM6rAc_cbLANvKlu6kCCf-kGTporTMIeG5GZtUdxXz1xowN7RmL/pub?w=960&h=720">
-
-<!-- image source drawing https://docs.google.com/drawings/d/1muJ7Oxuj_7Gtv7HV9-2zJbOnkQJnjxq-v1ym_kZfB-4/edit?ts=5a01e054 -->
-
-
-## 익스텐션 포인트
-
-이 다이어그램은 쿠버네티스 시스템의 익스텐션 포인트를 보여준다.
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vSH5ZWUO2jH9f34YHenhnCd14baEb4vT-pzfxeFC7NzdNqRDgdz4DDAVqArtH4onOGqh0bhwMX0zGBb/pub?w=425&h=809">
-
-<!-- image source diagrams: https://docs.google.com/drawings/d/1k2YdJgNTtNfW7_A8moIIkij-DmVgEhNrn3y2OODwqQQ/view -->
-
-1. 사용자는 종종 `kubectl`을 사용하여 쿠버네티스 API와 상호 작용한다. [Kubectl 플러그인](/ko/docs/tasks/extend-kubectl/kubectl-plugins/)은 kubectl 바이너리를 확장한다. 개별 사용자의 로컬 환경에만 영향을 미치므로 사이트 전체 정책을 적용할 수는 없다.
-2. apiserver는 모든 요청을 처리한다. apiserver의 여러 유형의 익스텐션 포인트는 요청을 인증하거나, 콘텐츠를 기반으로 요청을 차단하거나, 콘텐츠를 편집하고, 삭제 처리를 허용한다. 이 내용은 [API 접근 익스텐션](/ko/docs/concepts/extend-kubernetes/extend-cluster/#api-접근-익스텐션) 섹션에 설명되어 있다.
-3. apiserver는 다양한 종류의 *리소스* 를 제공한다. `pods`와 같은 *빌트인 리소스 종류* 는 쿠버네티스 프로젝트에 의해 정의되며 변경할 수 없다. 직접 정의한 리소스를 추가할 수도 있고, [커스텀 리소스](/ko/docs/concepts/extend-kubernetes/extend-cluster/#사용자-정의-유형) 섹션에 설명된 대로 *커스텀 리소스* 라고 부르는 다른 프로젝트에서 정의한 리소스를 추가할 수도 있다. 커스텀 리소스는 종종 API 접근 익스텐션과 함께 사용된다.
-4. 쿠버네티스 스케줄러는 파드를 배치할 노드를 결정한다. 스케줄링을 확장하는 몇 가지 방법이 있다. 이들은 [스케줄러 익스텐션](/ko/docs/concepts/extend-kubernetes/#스케줄러-익스텐션) 섹션에 설명되어 있다.
-5. 쿠버네티스의 많은 동작은 API-Server의 클라이언트인 컨트롤러(Controller)라는 프로그램으로 구현된다. 컨트롤러는 종종 커스텀 리소스와 함께 사용된다.
-6. kubelet은 서버에서 실행되며 파드가 클러스터 네트워크에서 자체 IP를 가진 가상 서버처럼 보이도록 한다. [네트워크 플러그인](/ko/docs/concepts/extend-kubernetes/extend-cluster/#네트워크-플러그인)을 사용하면 다양한 파드 네트워킹 구현이 가능하다.
-7. kubelet은 컨테이너의 볼륨을 마운트 및 마운트 해제한다. 새로운 유형의 스토리지는 [스토리지 플러그인](/ko/docs/concepts/extend-kubernetes/extend-cluster/#스토리지-플러그인)을 통해 지원될 수 있다.
-
-어디서부터 시작해야 할지 모르겠다면, 이 플로우 차트가 도움이 될 수 있다. 일부 솔루션에는 여러 유형의 익스텐션이 포함될 수 있다.
-
-
-<img src="https://docs.google.com/drawings/d/e/2PACX-1vRWXNNIVWFDqzDY0CsKZJY3AR8sDeFDXItdc5awYxVH8s0OLherMlEPVUpxPIB1CSUu7GPk7B2fEnzM/pub?w=1440&h=1080">
-
-<!-- image source drawing: https://docs.google.com/drawings/d/1sdviU6lDz4BpnzJNHfNpQrqI9F19QZ07KnhnxVrp2yg/edit -->
-
-## API 익스텐션
-### 사용자 정의 유형
-
-새 컨트롤러, 애플리케이션 구성 오브젝트 또는 기타 선언적 API를 정의하고 `kubectl`과 같은 쿠버네티스 도구를 사용하여 관리하려면 쿠버네티스에 커스텀 리소스를 추가하자.
-
-애플리케이션, 사용자 또는 모니터링 데이터의 데이터 저장소로 커스텀 리소스를 사용하지 않는다.
-
-커스텀 리소스에 대한 자세한 내용은 [커스텀 리소스 개념 가이드](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)를 참고하길 바란다.
-
-
-### 새로운 API와 자동화의 결합
-
-사용자 정의 리소스 API와 컨트롤 루프의 조합을 [오퍼레이터(operator) 패턴](/ko/docs/concepts/extend-kubernetes/operator/)이라고 한다. 오퍼레이터 패턴은 특정 애플리케이션, 일반적으로 스테이트풀(stateful) 애플리케이션을 관리하는 데 사용된다. 이러한 사용자 정의 API 및 컨트롤 루프를 사용하여 스토리지나 정책과 같은 다른 리소스를 제어할 수도 있다.
-
-### 빌트인 리소스 변경
-
-사용자 정의 리소스를 추가하여 쿠버네티스 API를 확장하면 추가된 리소스는 항상 새로운 API 그룹에 속한다. 기존 API 그룹을 바꾸거나 변경할 수 없다.
-API를 추가해도 기존 API(예: 파드)의 동작에 직접 영향을 미치지는 않지만 API 접근 익스텐션은 영향을 준다.
-
-
-### API 접근 익스텐션
-
-요청이 쿠버네티스 API 서버에 도달하면 먼저 인증이 되고, 그런 다음 승인된 후 다양한 유형의 어드미션 컨트롤이 적용된다. 이 흐름에 대한 자세한 내용은 [쿠버네티스 API에 대한 접근 제어](/ko/docs/concepts/security/controlling-access/)를 참고하길 바란다.
-
-이러한 각 단계는 익스텐션 포인트를 제공한다.
-
-쿠버네티스에는 이를 지원하는 몇 가지 빌트인 인증 방법이 있다. 또한 인증 프록시 뒤에 있을 수 있으며 인증 헤더에서 원격 서비스로 토큰을 전송하여 확인할 수 있다(웹훅). 이러한 방법은 모두 [인증 설명서](/docs/reference/access-authn-authz/authentication/)에 설명되어 있다.
-
-### 인증
-
-[인증](/docs/reference/access-authn-authz/authentication/)은 모든 요청의 헤더 또는 인증서를 요청하는 클라이언트의 사용자 이름에 매핑한다.
-
-쿠버네티스는 몇 가지 빌트인 인증 방법과 필요에 맞지 않는 경우 [인증 웹훅](/docs/reference/access-authn-authz/authentication/#webhook-token-authentication) 방법을 제공한다.
-
-
-### 승인
-
-[승인](/docs/reference/access-authn-authz/webhook/)은 특정 사용자가 API 리소스에서 읽고, 쓰고, 다른 작업을 수행할 수 있는지를 결정한다. 전체 리소스 레벨에서 작동하며 임의의 오브젝트 필드를 기준으로 구별하지 않는다. 빌트인 인증 옵션이 사용자의 요구를 충족시키지 못하면 [인증 웹훅](/docs/reference/access-authn-authz/webhook/)을 통해 사용자가 제공한 코드를 호출하여 인증 결정을 내릴 수 있다.
-
-
-### 동적 어드미션 컨트롤
-
-요청이 승인된 후, 쓰기 작업인 경우 [어드미션 컨트롤](/docs/reference/access-authn-authz/admission-controllers/) 단계도 수행된다. 빌트인 단계 외에도 몇 가지 익스텐션이 있다.
-
-*   [이미지 정책 웹훅](/docs/reference/access-authn-authz/admission-controllers/#imagepolicywebhook)은 컨테이너에서 실행할 수 있는 이미지를 제한한다.
-*   임의의 어드미션 컨트롤 결정을 내리기 위해 일반적인 [어드미션 웹훅](/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks)을 사용할 수 있다. 어드미션 웹훅은 생성 또는 업데이트를 거부할 수 있다.
-
-## 인프라스트럭처 익스텐션
-
-
-### 스토리지 플러그인
-
-[Flex 볼륨](/ko/docs/concepts/storage/volumes/#flexvolume)을 사용하면
-Kubelet이 바이너리 플러그인을 호출하여 볼륨을 마운트하도록 함으로써
-빌트인 지원 없이 볼륨 유형을 마운트 할 수 있다.
-
-
-### 장치 플러그인
-
-장치 플러그인은 노드가 [장치 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)을
-통해 새로운 노드 리소스(CPU 및 메모리와 같은 빌트인 자원 외에)를
-발견할 수 있게 해준다.
-
-### 네트워크 플러그인
-
-노드-레벨의 [네트워크 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)을 통해
-다양한 네트워킹 패브릭을 지원할 수 있다.
-
-### 스케줄러 익스텐션
-
-스케줄러는 파드를 감시하고 파드를 노드에 할당하는 특수한 유형의
-컨트롤러이다. 다른 쿠버네티스 컴포넌트를 계속 사용하면서
-기본 스케줄러를 완전히 교체하거나,
-[여러 스케줄러](/docs/tasks/extend-kubernetes/configure-multiple-schedulers/)를
-동시에 실행할 수 있다.
-
-이것은 중요한 부분이며, 거의 모든 쿠버네티스 사용자는 스케줄러를 수정할
-필요가 없다는 것을 알게 된다.
-
-스케줄러는 또한 웹훅 백엔드(스케줄러 익스텐션)가
-파드에 대해 선택된 노드를 필터링하고 우선 순위를 지정할 수 있도록 하는
-[웹훅](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/scheduling/scheduler_extender.md)을
-지원한다.
-
-
-## {{% heading "whatsnext" %}}
-
-* [커스텀 리소스](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)에 대해 더 알아보기
-* [동적 어드미션 컨트롤](/docs/reference/access-authn-authz/extensible-admission-controllers/)에 대해 알아보기
-* 인프라스트럭처 익스텐션에 대해 더 알아보기
-  * [네트워크 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
-  * [장치 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
-* [kubectl 플러그인](/ko/docs/tasks/extend-kubectl/kubectl-plugins/)에 대해 알아보기
-* [오퍼레이터 패턴](/ko/docs/concepts/extend-kubernetes/operator/)에 대해 알아보기
diff --git a/content/ko/docs/concepts/extend-kubernetes/flowchart.png b/content/ko/docs/concepts/extend-kubernetes/flowchart.png
new file mode 100644
index 0000000000000000000000000000000000000000..1415903a8357dfca70b7538224f52ba7640e568d
GIT binary patch
literal 61775
zcmdSBWk6Kh7dJeh7^H#HDIG(Dv<L{2N;lFC0z(Wjpa_Gc#LyvK0@Bh7QZv91(k<Z7
zF?2tNd+&4qAMX2pdB45qlfv0&uf6x$D}L*@`1ndqfe4=x9|Qssy;PLb0D*3N2Z3-0
z?%V=?V(LXv4FUy%UdqX6d7Es^-1Z|KnY^_Vx5+Je&nITqHzs@EB=>06Hx8^F78n>P
zh;#p*TuPXd?x)$*z(Asy*|=vbX}+@zjb2B+EDyR_QkPBwS~0Qd=`-ocy|B10y9gX$
zlK;=o_tb6%e%+<AZi$$*GW8pOe}~C=JJb)exafW{qh!^3^`}5PpxSnBqsgSa^+`wo
zkA@5--QO?L4-SM0J{Bz;ak#P_DLRQ}<)Lly*y=2w&M@VnS!kD{_G70XxQb=#>gxE$
zEx%vp^3MeG>5h#4a+kHI1|-obf__sI>#TI5WTsxpRggb3b(PkqvN?lBkIHG79;}?!
z{<F4OhRANFnABB){J9#)4CeN7>>0<&7Dgyq3Bm2ERx%Ru@hF8ow&TF!pZ6cUfW<IN
zNlAHyH5)G#l-`D&%Ytjl<0K1e_gG3P&x^*^w?7`4a%w1@8vQ*Y(EGKjWtC1zvremi
zb0%@doVy{o!Zqe08Oh#}!hZ9{I>uKuek16&098dIhU}k}ct^<OmUh3an(!;T+L>)s
zGZj131D9rW11mb|mDk+1>W*J{uTxUbmY-D~T8{el&tWw&G|-RSi{UKND3IW{82q*9
zCKHMNGEs?jt<aFaB9%|tVm+@=^cm~H`&+iq^j=1RmGjvqJhyGbI;R7?`Un<FPwFY;
zoP)-ZOS*{yS?{S*Zm8hJKa1z%09P913{Dptl?=6{v%(rU6V+XigRO^qQnEfKH7AqK
zb~Tg6=9BAT$BKJ5{~q*tAhe0K5@joBvNm3Ik+m2=6Op**yU1ZvmNBo1fsrN%`=_7`
zO8=<y@kq+`mQ~&Tdsq+RWo~2lN#N%|cZ-53DOGt5aN<X9PMF?l?yKGRWYuDuG<+_L
z@*4I1!ha87B4d~DJUu?1?vA}EeW*MNKGy}uyksyWah|WC`t_}Fc%AX*IqZkYY#sUE
z17hD9F=pBcrhKh@q(n2*badwHW~UM+3W1Sq@508`AD1j==#<Q`B*=I`fBZe-+0ZLB
z%VxFm#+h8zoVc@qsS`Qy#~y|P9=gScHh$!^DPsF6dXH^7_*dD?A;wyN5BfB|0$e=m
z+LOskny1-wCx8mSMzk%Z@QiYKr?kFm38)d<<gSQ#5tjSb*zfNl^P7J1rzgk9Mk<L6
zn<o?m1tu{lI_#C>bXA6Kx$$x=AOTOp6mYeMu>Wi_Pn?cr*o&Nc&2M^HbEA$X6yQWj
zrqhixC)Vv>B^Rny6QpIsb|Rrx`Z6Zp{}Jmeewbg;h~4%`vF^o2l!aj?a+w%<FktpO
zht>aH48LH9YO_p$64z7$qmNzk-)i|xqIh9(aW8Jdv0<dt6w^v_RiUo^=aUHP{83fr
zA7tWQ7$6x#!V!JUvy;TXrvYWi=yExi58C#B$h~vvb-vFhvV!b%bCvxqyzcd7`B4d?
zmC{3cA(>G>caGq%A&M)-O~G;vp(+pbnccd(x-fK+qZrfOJ@@-+S3?$I(In#3LbQ?U
z<vC-+XV0(?nD|vnMrON{S-Ubb10=6njE3%^ZO}!VO->k{I#m{n4{8M$I_GLiJ*{k@
z9en4yI?7J4J%#(k?9gJN89ckQ{qQjeG*3kOn1Z{~kaR{du5U;E^qgJ&(HF$BQLu9`
zScv?ne^IB3!(Hj9d=0zBxz2Gl2^XTi0+;{F>27ZGs50)=d%CZ#{CPDjx)YNXJ!)h6
z>ul&uc1Yfr(#FnXa>q@3_F}!ucup!#nc~5fsOv5--QmLgZJ8f3UW6~&`F6$anX(Zu
zFVMZ#_{~xh3tzdxNJ7%QS|$q{1A)UX^3F2u`&M4fY|W&DkduYNfX()Vun4OS9jeYt
zaL4$`n@(`}5tOZE+;`PKXZG5FP6MV_n{+lH^6|_F^>(hbCMIa;NZkMRp4AWk_JOls
zH2Nu+l9ZE%3G`dTk};zkboi-}BIWGkb+lN}k9(up{=>??YTK_6yi5!3ho>*4e0w5n
zCfux>!C^aAyT0ovli3h_&~JEU^CRYi%H!Y0CGF#x?i9Y&0>$$!b}RmWKK`D57H=2O
z>AXhX_&k&BpdOH^$HbqGuGW}zNW7lI`sv(xoDzBoyY{jAIQIdM9;d^%*)QP(6xI8t
z#p|etw?4jqk=vqHAU;nw@8vL1h*KAR<*umRaBsV}q11HGizB{1Yizw;h?3~yU7E=y
z-i>EzMLbH|Jl36CLJyW9>8Zen2QY#*8wtS`ypk4;wqi?n0sU1ZUIVN{TJ^2etD>RC
z?({O$dZCiN-v_BW`&M%v+~Jd1p`_~8VMxzIe3O^w+#Npl2a^O8{CTbX7C(M<&y}UW
zdc?)#YS~p$+5~N6@rr!0=$|fAXK?Nu-rf2Z<n83)5s|Kh8b?HvhfB=o=XNTrxU=#d
z3f`~~iHx{-G0d#a1_C|Ph*uz;YaXQ^US7Kq2JZ<LWYBbf`;zw4<YVWrYw80K<U?W;
z1})1p;2s%%v0PB*3^01UzUK>%rfc&h+9*>hFxfn5ne!Cuoceku-r_vP(Y2_Zny|-x
z8>R)L6|iEO^R&%DeVaSqzj9@NXzf=>c(uC2B6Ya<I%=UB-rz8&2F`4rFR4em=M+TD
z1E%pUlnz5kdm$z5v07;Vt&v)+6;AiG4rN6?bGV9ml1d}$?OeAg>N7Xfdb#1PawTIn
zUwGMM*xHX=x7CAhIUxcX_g4!gcmn>U{#h|SJDGodL3e!nbWR{y^=twq{mDPq0|YWr
zrG4#pRA9YvD%eSj0+uY0UV&MqXtc22xT9Jiu>h#YOPrZ7>-R4T>J9UqTBxGJb)kko
zA&7OY`QRU4d~K`O3KUdDn3|?3OaHh7Myb_#adOO@<70X1gtGMxU>?P2d5lC811je&
zx)#~pS+G`fU>z9kj*RJLdzni%O(OqBy9|<{MeF_Ts0|GH<;fa4{wP*@ZsrWhexUZU
z#TD%{^45!8zxF0NnHBEVU+S-Swczia0<rVn9qNeBRZ9&UbJo+OfaeRTznhM7l}-^-
zWB*g_RqKBwjQlD_<iLI<?D#q}v!3z@Z=BZ0r9vXp3K_eb&|}%a2D<{B8deDh<jg*0
zxGTL7MA7Kd>W!!i&UYZUQ12i+Yk61E^Lm&F1p35exjT5ArWhxFJXgC{Qlwl!7LqUE
zKKLtIRj1ul@B&LH(^OO_up*pX`e$eBqH)?|*5X7gtGQfjgH20#)A!Akr&H+$PE<7R
zhO?3H(ve4h!i6-OuZ1tkT9%I*@x|@;&*cer+z@jM%46Jagax=NzL}fRcID-4$$lrN
z%*D8lJe~Vh&BvX(IG+7Ty2M?L?Sv+IGLd0h!G}M^Vw6l?g1$3^v&9uC@q0Rirw*+~
zX038@Dt$#%xL*qgL?BGU+ji9{;&}$k&CH3tKR<biEn$4Bz(a3Fhqw*tVJq?mp>6IQ
zg4#$!IyIVuoiSwvt&SCs=kQH2I$XacbRzsv<Ao|^zpjhHg13r%jdxLY6KuFaDJ+4j
z7vq0Ygl&kDoKi3hw4>%2u|g(B)q+GErhdNu$*$$RTEBwNOOv8fp0&*DbZL3HJN>fQ
zHEp;#fNXikin7iiog-?&4JUtzGd__=zwwoJV98kN+Ht*pY9|ts$gZmdrOpISj^iNG
zK=2#uX!vcPpiAY7sHH?*>Ojja$=9%LB1<j}aPminAPQe=bFSwoJxORMptldgx5VNO
zJ=^bYOCiFo%$0KPZo5@w?p6p5Na$tAglb+g-q`oKIG8?hGs$fAJ9MwV3FVJ86oQDB
zYtL#b`v#s7ZWYB()u9qXYe7>FhiT_y=!o3ee|KF<eU@M)n>S_+(2y!W3j`x)9nN;p
zI=u_3Q-T`AQ=XS9_<gdI`*!hT8Rtj5B>2QjzG_ao89BHr^0O_NR3)E`^ZMgeRF@Xs
zw@%*?YU#SIX^rGRZ5;&c(GRmhQ?eN0BdSU9p)s^bo1^eH>AH#sR329`q+yDj!0=DL
z9!vhf{_Rj)7wa$45<$Q+XPt9<@>?g|be757vQ#4Mgi832RL!8~%4QdG8Lz!9R)xg+
zAk8v#CRz3;hI5xq2HHNqIke2vd880^Z)mMtiuQQVf^(KMQt!c^4b!g4wr*=j+K?cO
zpybW1nXTm(XpdsStS0oQ45YhOAW9cHR)I-A)R{UeL*ae1ZeEMZT=g$xV*SZ5Fc_R~
zgWb4`9<ovK8gmrBU?0tiBE;N#&Yx@M2>Hs^x;{gS{7Ie?{p$65e~MH#G$)WD)lpg!
z@fy1v>HmH@ccd-5_b_Sns3?GAoe3JUP(v!566v7AvKXX8lM3IK$O5}(5O2yyZtd9D
z7hdY(WL!>=CXRK<<G|7fvQST0E(1sejJr8h8-6L7d3fEamIRclx#iHk>>-wVUiU6d
zn{ks?h4`(Yg)+4Q3hvQTQY`Y;C(@5taV8>*qX(#ymU7CJ%!mldYCd6&3>#o)U51fw
z24|cF3W|%Lu>=qJO}y__zj*G{yhH)l)j^r_ZSRrnlh6s;e}B?&5NTxlo0IR+8;%d#
zLS>8NhDw;BNmP-M)+)6zW!=m55GB`KER`|NrSlo(>}ROtvgE3#l9u8s2MR*KbmAW{
zenMn=*oWZ@A$G5gR`)IMaPy$na8f@snmC@$6R^+@Tuo4qG!T9TCKmRZ;Ic}pd;G?C
z1%Kio<rfi|{L`T~{9F&#4b-5^Hx!>6;PF0g`Jwtw1wZQq|3340Vg)fa0&ub3;SUU&
z|2XdzJ<3FN@UiDjREJG3Ie6PEoB1f1fbMaN3D(51wUF^QBX+l{PvT6|>fMaA-~1LY
z6|Z?koQHr<$##skuzH|ZX`&W_UXaYE9yK?;)rMp>e+6PiZSY$m%id>+7~#!}jDTj>
zdTdL7`>Ow{=$VC2vyu1m(@ZLrW#~}BqV{m5cOPyZXm}*U&ZX#FBKXh939N%u?B*2g
zk~bKi?_w(3Um$w=_S3TGNA6ovpHZ?UeW%~;Yn&gho8Uo%Zz?V+B~gUyE#^OE$@_Bu
zKHl;DzVasEtUwP^T3@WYR{-I{(Q;c7siyxkS7)rihhaYy0j|-96~czW7dg8oJ(V5X
zug&66`0u?rs=cn-i*hmxUS^7^#4qfb`#biSm{?KM^X-Z7ds^XJps&BPR}mUnVJJ9<
zeGkl`$V*9N7}M++vhMa;1=(ZBEI^`SF~!Y8@XE4EkDFli)vu$JUoGlz9Mtknnco5s
zFeJ+yZ#%g!UtBERI#f^L#xmkDJs+<?Z9c69$x?Pw{P3p=8-@s{_(UM(d-j}N0dwJL
zVxX-3AkNJe=Jex_4Xo(g9!bDN!RfSD<y0~GCC2#7)2H&Nm#3KVJ^ft@u`f-3d`B1~
zURdPzn5VFgPH<tB2<JPHc>Iqmx>R4PAhS+Xe~dq&u~=Tl!v%rv%~eyTqmw!O!=yeD
zn7b*Cz&gGO4fw?+1U0>hy`ORv0=tCSJlBNJ(uvxQ6JQ7g7(zut`kl6bB*h|p<bmBm
z%}_?31~!an-m03V6PDRKPEb$J0uMdO_q}PFy-d#o<Zgk-zc_eHH)D+m<1~ks@L~7k
zXUj8z&*PNL7H&J#=$B)9GR4ggV<}Ah&6s>wIC>!?Rt*@JF4|3Mvh=l~f*h3hRJ60}
zG*uG#)bc91%s^Gwan|Q;5bBsy#BY_{=J=Q)YGJDrAz;=Ck1F9n>x;#epSx0AxsKH#
z5!vZoR40SHiN24gWQV~#XWIe#UE&azl3vc4t~x8Yb(7QB==q{3U6GWuDCTEJJLE?t
zhFvo+;_JzzTKGZ3{dT(X`E-M2^Nq4=@$q>N$A9XH|CL|<q@s&Nf20gjmWo$4b5km1
zV6Nx>>1S*r{8G<8HPfj9NV-h34C=c_QgsTIg6l$*oECM65JR%js~lZ5RHIs3Udqg`
zY3DL1x3%4&Tytfi_+@?`)(yY00A`@Q*g!C2655%UDV-tyvff@`CLy$pi9327tmT$o
zKB__%P^{IA`&STX#IYnmrm9V(zLmACeznWs@=js_NQFaQ6s+=$dYD3&Z!5A{clP%~
zH1Xp!Z7*+7oGF-GXW+YeO%rJE<}=+jjifJ(f24UMH|t#rUAUn*%zV(G_cunvexH4n
zhg+)$h&8>`W^9s#@PRqP54)<z;<xM?*O$}>AHSJgOyy8zE0_{4ovGBA;54i`yxP92
zl68hg;w3%bzT&`3QmVheB;oVUAQflNl-UnG@59d9WV*by{@B7;&>5dMUe?Yb?G}*r
z$cr%7*Of`Ks1~<AB@)2E-w5yHSN?Lgy3BLqnFJ>ta=cmAS;@=|zc1i4u};3N{yPwW
z(LW}2iQfw=zQ@uY@0^|px5UnYc|J2`yS+uu-+;Y?k(`li@BJP)kt}Zel*Au!;+Xe#
z$i(<`4Cau}A;ihPoPhkgckCaszXTvuxl04vz6i#N3L9VTqP+Hm)LOgTY0kQ?Gh;-X
zO1o(uD3ML`9B~NJ+)Xg0(p-73E~tLUWgwKfc)p>F2C{MJ6ae=masPqCaA0%c+t2Tx
zpm6Td?MHBLp~fxh@3D04lfCR27lTp&ahG>Wr^2Fp)p9Sgm_LbH7WKn+WH<mZ+D*U_
zGnD!z-xEg$=gJZpySnf*d2yOnEj39NPBWY}P<@nuWTC-VT}~jT%f}RbBBl^{C2E;O
zdqguCend5D$X@GKl-K-o-{%bat-8QtW&9lyjs51fBEYG`iB?d*d<Ip)`{tZ8*#!8W
zVq6vGi~VJb;-gQp7*dq)$K`>AIqdqqqpZ2@fr_9Ec<vq8y?f+ujr^q7!j8L5DM2KI
z<m8Qwv#Jy-QCZ7x%r>OB$)GaVi_u_L4&>7}Jy%kDd#e@0lDcXPm0{+`$=;8uocv<O
zj3V`wlUD=Z_$Uelk$Lg0KqSm|MNB<n%AN-K!FF<QML)b?uO4MxPnaY7srA&XsQA~=
zNy|eiigkW4Lhn?UR+kvz*l>@`IM;s8MciWghQu~Xod!?X<%a|~SU6vHXc;PN!UM^w
z1o8?jb$#Vr-N|H`{eFsxim1@T?>S0&W*fCeH{;y-`5wPS$(y_aR6pYvru26ax`&xp
zl+|>kSAwbP$`X+I0flD%%ah;<bC_1a>rxxY%9r!50F96S=r7a_ZIu!cWhq=FIb8aU
zpRO~mUGJ%^$R;2`i|W#{Os#V$KBv|MVvG9ff<)MC<<;#5ZuJPfaZ#d_X3SH^Nn;>R
z-uf$kEyl!%5YS*v%CO=w5Wc6Trt4a}G)l|?MWEk`nUfJSvC41U)GRtPs3@rDd4LQQ
zq;6o8uR8lw{HjhR)ekA@kq#HSETrbqVoi06DN0-B-$~nU=#+xNgGZoQllsufX$A@R
zL9M3F?+=QPqNC&2jXuFG_otY7*m!gWof>|LJGRtzK}<^gE*&%oX->IF!ofo8+PXyH
zV6DKSjUn1Lq!0%OTzGgV34iDF;Enhx{t3Ea(H_VGhZkN_r+dryQSnEpLU6;fpSK`Q
zEO!9ygQG0Yz&hKp{f}&I(YWt%N5i(YU?<AAc31%Ar|BOTsK43btP?7DUvys3F;Y>w
zpet3*AdK{W5f^{^s;Eo%ZANx-LmnO=@&loF&EQl~zL<I=TvHKMmP8DT=?xdj#xU%+
zb?hWWu_C7z00ef#+Ld=3o+yi(OJ6;eeHY(k8${jI!HPKc%|Y%23JRMztV|W7cOXBp
z^DXRLy36v*!G68M?iX4`ni)i@G^gIj-+r8r&)wDv7-t=cNam0AqT9jVvlUG}x|rt&
zr=Lxin%azblTO}XYZWmzP9}y+U7{Jfcsc41eTh&piQ?%2=RNPE5&X)*W3Wp;tC?Eu
z;x^7M*d>23e!WEBq2Jyx$4E83%j1Tp(`Qdkn|DaC0p!#VAc}tIVw9;w;Fy{D#;*q=
z%sU<e#&S*E+kXTdTNH~5Getsk&3Jf(4@$dj80+PI#3M5YvX<|6kDFpE0XMxv{#x<M
zPKeW)Cs4b|6`WD=su1g55h4mL!&1<oU*l|@S~-n4uvtq#ak*GU{Z=XB4s+Wy+cgce
zgC?C5E?_IMjQR0J8pL-9@tcyxP0Luds#nrpoRC0o%9u!3lfjT_AJ0o2lb>AN@VgqJ
zIxzm}g=Pz&z%fDSLCZRq@xB&<hBId38BOJh+`-?8k{v|z9Utw6pX$O|KiuIap|Yr3
zwgSSHdA{sVAs%{Kvf8+FOvZ_03+%J_^USHs`DbfbwQvV9Am1@+QI;{OFf>z`>@Uxk
zIP%<^p8oB!RL^PsTl<uBnI_$YEHi64OT<328-*mu?M@QCC=fO^v<xoZmb$_=@@NHA
zKe+>FoO=f<p7UV9kx$|H^h_;xJNtb3<}r_0=a!3?CZIc7ft(*z9`rC&X4XHRuaiq?
zfEvGyVRsH;m9vGCll!v$Uu{Ddenm3xs18Gvpm`fZS-t)3c6x)SqVbaLht;S1SH7PO
zdkcRm*YxI46RW~Ch8KpgzP@7B5`KbG$SkW_(#RJN^F>xN{TsYb1x`pHH)SL;?e_BJ
zY&|9mexG^kUcwl=13KXK8RcjB6=ZKtll!+fdyNQqX)c>4`_?%^{Z_2KpMOYzhg4t)
zK_L1TZ*!8bk_OEoUIrQ{D?JGOSzWRwB5_-z+e+`?NO?!F{=N314=_FC#ij*RANuZI
z3`w=YW+Zie)z!g7*u>GY^uYa_AJ2OA1UEH8R94ZUS6A|5x5#M^jBkcM;<mUyH531R
zEYck(Up8g+m95y^m`NZiOy!e_yCPG1x0{{!^WX&d!gA>+;3oe5NYZ$33<Ko2skqa-
zdz468(*_X2U$0&b51R16P79C&Df+!7gctf6dVlu_*CA)nR_zwvZDSff*YUo%D_Wh4
z!HjrWvVvG1;+pxA#3QkM!+Sl8Xj3V}dVcp|;mG5CbpF$j;f|t}wbuScScPX6mKL(k
z<TH0TGqnTu7sI}La<+SA(0_*BS|Umr)7%<UcJ;clYPkBk2N{-(*hJT-dW!v;k=k16
zp_3B_r&n>9GNCg1o5gn)$%u<*sXj_oM;*`%tv8KWH#4=k{C4pe<zH*Oy<-p&Vf=C3
zJ#Z5UP~gu~C$0!~jA95kmOH*~EJAE}&{PR?oLSFN?Z|O%sQ$Hg8~Sm}0u=(d3h)DC
zoI|3D0qq2u9^-{&`AU0YaE}v%HEn#qZaprfctb{s0x>r>ob|w&i2sTcu(#SWT*KQ$
zx7wRWX;Mw6-F@I|BqzB^Xx)H(qtA-8YFWQm&y$>ue-&G}cQtz!-P5?6m$__6b>X>r
zbLOGWK}I~(6jp2mHK0`!bzgqEEm;UJ_MY6^M3-onSHQzIwoC(bU<n23W!BuL43kou
z*l&DRKr%&h^$zq=w3T}5Fjwbdt>C)svU`y|#ej%ug@DRs(c=~0TJWm@B^byWIK)*+
z?lwu7f6tgKR~&lI)Xc&li)zoT*!$b&<f7-CGcaF_a3AtJVYC-F$+UEdqRR&|Y_5Kd
z_F>;+-6rIvM(l;mwzW9U#=NG+q!3qM)s?a&OCSdh(5Ld?5Fn4`=soO`-Z&2-0b-RC
zeem~q*Wnj?#4}SI6=dVW#s<5dGX{J9t(#i@8PpAoUM<g|2t)QBbiMM?rSUOOR~@@F
zYWQ-o%taf|d!jBJ!Os&-rD?1G`duRY$rV~x8r;YVbFmSmBziPg#F%W<Y7TPQ*!vL?
zjAG`Ms+6}ZPhGg1zMxXiaWIB`e{Dr`XDJBsCBTW_m(rTF`P~h_uHLxz`!b9{^7mU(
zm=zKTsuFt@V=;F%ahykM?_SxCK2@mQ2!L*z){_r0^j~M&#P{<hn;?o+7nk*0_&e(#
zW)tywHtkAhK8I*%*qz#z?_5LP56N<*At{GybQcb-*eZ!lQjTWGig2H7CW9mb9p*f}
z@*M7;11gdA-D2%0_Z79W4QuuH^SdOSOP^(I8S=uXFWWC`8<(%Y$%6Ui3&pcNods0!
zXX=An;g|1?aO2$1H4W(o-D1eJ7<0(%$_8ztZrwaFrQ^4rk4#e1Gbea-4NEOb(@ku2
zSG1C_p|uMQ)FvF1+cy@=XRF_PZ49d2eWY}@^ExhM&j~IpMmuaaf?Ytl5ob)5rqFWy
zf`GS&Ji?8(dQ^s=!By2WBxMdLeb<Ce0%Eugvm&q*;_BzQ68Y$C%qH9gZ6Gn@N?t2b
z=B{)3ErQ2DXl^&D-=mgJEV9X{EZwK}tlg4-hIB42Q+_SX)~NM4$hAz4*J5nxK~h>=
zScPx3(GuRZ<9I3c`>ISZRfj<X{Jw{;uRwR{Ru%ZUKKP}AJ{?`A3*jwUJ-}%2Ork|p
zdq4Iu3>@w*o5h!lfHCm?ZC46mzw>+At9b+RU!%_J)emS%#kzDo3M=EUD|gLN#IE_x
zKM%XG)jX#@w3)&Im8h=`k@k%=W1^X*NsCx9A61Q068iGg$i`M*jS7R4DoAnQu?g2>
zcKQH)kVLlvYW%>%IqZ!aA@}Wv77(P2#^fw6=ourQxamP141s#%rqYvNzuIP0vWyom
z*Tl>(TQVGi@HyIS9do)68_Zy(p29U+Y_>0ct_*E-ygR}$0AaSlNTLo2DJ28Z=YA<`
z&Fs~;$LlwA3Uw}}33xZ5`Q~eWR(8-yyUA0+tyOOo4F2#)(M;qzH3nCuBk>S~T4XBd
zHI)+QGA#Sj>L8dx^;?|Rfa%vk3C=wi>pGi_5Tjdh77YT2TBP%MSX@BwLrFSnZuN~^
z7f|r8Q>a$v?{aWyvP8014;Fd&pOuUlA=8+LJM_cz6~@t=s$3@kBDL%(3)$kKd7x4!
zm+kIbv{KI*a-Fmi<?PeVDrg7Jm1^l|$Fuvx4}Zg9b0t0`UUsAT74}Jz5ORT;*dn0f
z5ak}Q=_;}b*)9E%GpF0XSPCSpa~{}b1|TP?R@tyh1yBU3&*8-%hM@!4GuDxT06lUs
z&jG~u&w(hQT+jMbY%Yr3D;r1gRfki=jMRMoJ(hxj^V|F{6bzXUHn{=QTwyx9skOsX
zPs&oDwWa;R@P?|*5?<VgRXIwas2v2mY!SH?wc`7PZ-&!zcy=2ho0N_|$os~bd7Xz$
zJ1c@~hzx(}(u}HfXwaf*8$Kh>XSbf~Mkc_Um8Mn2gOyIhwiCZ?a3^#b*Y$buR5y0}
zX2qGW+`D2arMk!yS=kOdI1`V-4*8IL`dl5cNsAiyzm_DzW+OPbLKa&I+}Kccp~%M<
z(mftLynQ0Z=SuNECb92dvM7ap8CpLu1Ke8Ux5aTC?TTmjT>4YEIqArFj5kP1b!5p#
zk{M#P4Z3ie<ooV*ma&dCe;1r9qR83XaX=CPToU>gCvFYtE@(Y93;a6qHN=fjSjLMb
zv?5I|1`5OoHsk%a;z(3xxBLy6CT2*-=4z%tbpnItX?XUr3F*3Xz#;Zt0H{3QYNH?{
zVkQA)=B6m!nUO*Pz*Y|dxaPyBb|5`1=u0bBUw#h&Qr6De4cI-4lmO^ECJPA9FDZl4
z!{?_Ft30Zi(#&lqhf;T9KZ%}qNzMAcMLP(aPH|U6ZQWnD_s@sm2g*HxXH<NRbjCN=
zAnq&wSaDnM3X2PDjUrq7g@(c9MlB<h8eerUnZtM9BCg!*eG~mNnWGn_3d}*s7js$7
zF5Q@3Mnyj>)H^!p=BW^PWxwHVg$ayZL(aey=Rw?p3!mra=hW;ZQrW%a@QSxLES@am
z0bl?0sc^>;sSR$YbJJG|W7lGxA_#9?ee=stwl^&7%K+8>0)WW6ziv6!dj4T6hjVT*
zvFv8^!Tha6Gsqcz!<;h!J;jIXA9%NxxOprCZg`D<c1@Mj2<#)T`%%jGA{R?-EQgxG
z0O8BqXk)Z>&t!1)9$EiUv`#@Y_vnvZ#-corhxB|ywiHv7NfoKrGT3#DKM}BK9k_-b
zfdkA6J_gtVY%^kWR`t9rdGYI7pQyMR3<X=UxPjz(kCK^?-RW)2_{Mq_FuV8ZtP;+X
zwj2uJ_Laxa`s;+VaSdy9tY9nWv?J@%Nxbm^ryZ=t3x}`lY7^}+Q^bS5IwhLHiKVYX
zL|n$=3(!eXF48GGS2FbM!DV`qhl??00KV0fKfK-_=22D^`qF?5=RxB=8jCApYc3;j
z#7p*ea$lB~CS5z&@-^#Zp1bnc)~`%w#pF1|h&t|h@jkl}=3>Y!UjG{Nw!Xib1+acp
zQl$<M>{YCCe<8${63N9iB|DQu_TS>sEBHGZnp4Im${0Zs>WS#<5b&VoaDaBc?+o?|
z<_Z2@UGUVm%rUCD9TNS<%QrM;+y=mtoBZp9#{f1!62RzS8?7kDhTZ=3({fP2(}LO}
z#?4g)Ke>CHK)}MwR%)5zHsINXPvq{l>^j5G>y~hnlQgpo8OlV~w}#Jq1PIGJ6mo0X
zIK{biQ0W=lUX5GME)GUEZLAh2Kn%)8CReOq-e93#Y81$R2Ae91*Am-ECU(mIt57;k
zr3*8~yei6j{z6)u?2RZ80L;sF5o-}Cm`Kh!nYMFkv3tEN7?Te@u&Y&6vy;4`h{S$;
z;OBeOf@B#GLm;dIlb={8(RNK)ctF&^zaRX*rqU!X+|pbHNZw469DT&1@9BQtk9g0h
zT=?^s^Q%Qh<7!2)m}|^+RTN+wxl81?8JG8<-iz4}y=~bXcroH&!rGr#_k6@n37UZR
z&u28QFo42Nv3w)zF-dz<H4h<oP8S_Tt4toR_X<^P5k9yZJIWro#0Y;^5irFZ)1D>H
zfB3VF+`qh{84naF$C?*Cig~k^_Cr^k>q{92;v<9L3<UvPO6ZINJ$&9RaK{yl=ziK@
z`}zmt$(4Sk^Xs$>)+PXJ_B$KoM$#I2O$2xrSQv4j`pIhD5`!?FB~n33kg=9@>gbtG
z9FtZHZnP%7Nc6UB>qFnD%bH9QN+J4b>4B?Swibn-4MTErtfjJ`p4UoGEEK{8JhyE`
z^7#2a<TnahkT^x8XP?B_+ym}P#Xz{qs3FA5frJN9xb@Ho6QnWy;EkU-0Y7(W3Q4Fm
zWH1|?y_80xO5@`JoNBweu~;#OT=_$e@0u7@4Pwb!vN-^A+R0mg%np|jkDh99R~}in
zz;E_S52-l@;-jY_^_<@w>b@++*{HuFQkaGxW{B90tmOZA6FOjDQ_|7!`nic2C~&nS
z#J*VC;=cPdsfr7+s>=WhD<1wwHiHkam_G|+fm(Q4(c5A}r$1WS2vrw+RnuAxyG*Lm
z)5aIlP9D$~^s^)P@@z^v%v;9t)C<;c_it)E${n{xUDCz7`))>W!evlJGhg%VlNtw{
zVkqnE3)9YgSB{#&Xh1k1j&6vpmY{Ye;x71|7j8VVesJ{DhgY8|y~zy}sKorxVhkD1
z*z`knVjn03YFlqqASw*SIyq1RfUWs7o-9P!r&nt7@O8Dxp`wd8S4w_?UOV;ln?dPa
zWxJF3eBBJd$wK8HukAOSjjU<ae*^04+Gak8h;v)=?a^|9@~Ohw#aDj-oLciTz1cDZ
z^-c1&rzXvzBZ={#KFsBB&p%!#U9JQE$xNaETdpn$82YjsJ)E!Z+x|xIoEe6hnLu&E
zZ+tHipdzQ@3EK&ZijX|0ZO^vz5epCHIeZe(3CN8U0IbcYc*`NG>Tr)+n?bljm2$Ni
zn)2E&76tZCg4Zl_rl=(EDq3A+<f~`A+2MdVkF%Ak`Emk)HyN3~q_i6P;fn_>kV}tf
z9OEZngaM99Az1)jRSK4e7G%yH$76w#YxEn}AYJ${`$Q#kE~SDj`&f$D%<++Gro<0m
z>X-Tkr6%Iaqzh+7?ziB>lAhu`rFk5M8F&1N{Y_5&*fZAq8Wi5yIda<hEZx0XZcS=e
z4%pCKLRDA)-uU}wttMjG96F(1aA!&F5|aZ%pd|fHr^J{IRsdZx6$CX^RA=8o=Sa56
z%Tr{~hpo_x;Eg=YLT8~l`^O)?{`o|c{}4|#TH+lbNYC9z$(<~w?IxurdrzG*K6O`a
zV)ybjktJd4sUK#eXA_mm`wRWo5|KWWBHh2hYkLf?C0xkiTX8+)qb&-l>yR3odRvBB
z#0ko#wcC_!j_9?Y%g4F7w=wrl67fN<{e@OvJ|0)nJfLb}?I8D+P>dfgpCKI+x!X+F
z>~gm=<KxhUppZpZX++IubRz2=;0D%Lef(8*lYA`6FLF$t0Y;g^z4Q7VrM`Ev@QL>U
zP6ssS<Fa>&J_5QvQ3h8VwxCo)4|@wrHG@5(K4Zj!4wHqxLs*{%%?WFME`t8TJR6GB
zv;?QK8ddn51OQde$YO7XyNQce)W4sw5c|h6T6G)8^~lwU*|D2{g26%eq#d&f$JE=$
zPoH%<hw=O#KF=l%Ct{+b$5wPFGOo+R;_<<f`3w6JkqV2$>-eE<oRnKtZ#tcAEFFW!
z2ZZy{G1Axk!E6kx#_WSP<oA<0Ymw5we8wql8yvAhA5zZ=k2>6^X??gJm=W-qlBhU{
zGa$FTWGK#AsUlxAR5CS_Fwy<q<`GsY8J_J%h+y(gP}2TfiF{0#Sk$gllSe_qQJ?j&
z|E_=T-Uh0>l^3M=7I`SlY>^|tS1WwOLP3+)Q$Bt%6x3-{TeqJS0_XQsjqsHqu$T)C
zU>#b|nFYKTNFr3Y8?-er+o2=Yyk+@TaXylSg^)=6WZO(zMph#3nla?XiD;HR+6JzE
zCa=-XE&7VTcyQkd-UJbrXQu&*<|0VhZs6q%^#{0g#cd%?(0(IPwK{K~U7b-CuU_k6
ztBPsg@MB~vAxJU)D`5OVJGkTYvW}LIl8XSQB~sf5^I#@U7woFI;l4BNJR9Jh$$E(c
zyZ<=cDpRl1Ltb#G@^;`)qA5c_T%JH8{-&sBG4HbPn4%H{)|W+<Z6vPaqT+D|KAXji
zgQnNvrx0hC+zERVh6FntsLYLLvG1;9_CT`lw<u;msO1*1wJF?qkLyfKBhDL9ro%-h
z`BNyoC8I06*?2#Lt>p+JHltTTD7%bD0D4JWTL(;P0-~}E<;(*RFR|BaZ2;o#W`X&b
zsnx+F3J22*17Qu%khS7N=e?Q>h6J*$9HLK6Z+roQ;ym70nUHS@FD)C?$_Y3%TYfFq
z80xfq0@5}lfS~+I_x12LuhD<v1gmx0ST0oq(VzUd_SS!GY{v7Ws*M7H6|hx*%E?+U
zx<K-BbMmgXj7qV7-GPHisVCw#P(XgyVV&G%V)Bd-6wBl20z{upAmQ$LJA;^8z+nak
z1kP;&SQeZHfC7qnS%TB*ecl5}bNY47v(3C_dVs>?Mn}^bir^+Fmigb|_cFsAY9_UB
z1u<m1mV}7Z(#?F~i229|zZ&nl9SyyLDu&J9zQnm?{pmMq!xJtI3Z(gWj}-5$%I5=d
zvM)0#{@eLM=kiCa!~(!KTjHJ+@ipg9r9H(v_UHUl6e^Je0=@p9COoeU+aIFZC*!wN
z3UHdV(WFhkF7^vHa|7(7-&Ux^D8W?K`z<Y_Mdq{`D1lob`v2|I?6W5tx&>pKhX;Gj
zQ!d`yykcMUz!`UwugTv4sjXYUs%QVZ^!FpvNRwf0m8zE+_d$WS|DMh*7frpA5%Adh
z!Tp2OW-ouBu2RfTnK|L^bNiatO9muz(eE{GZax~;)y{YW3e*k!SCg6^(dbCX6pYPq
z>lCjbcv{bX*BhxxCU4i4FL+Rm`Irl*(&E8yf*%gYYGynG1?qkO_h@JPxrX`x--HmB
zO<4yVzaIpMp|s5+!w3AsFkI<9;qh$y1AiPEF&K=9hM(sr2^kQm9Oqx{XJV<@e{n%v
z(&tltG*4@G8@;K67$3Vkljsc;qb0Oc2H@`)-nCK@PFnx2f?(k{KutLRp6w^{<uUsj
z(-orAvjfVpmI~+`NwEgNVL$1%o~?CQ$7H{fR-;I9OZA?6fW3_a`g#9<Ba?!|A_iAI
zyzt3*ARavp^5qceg-3Hd3jixOz`VkMQC1_Q_u+Po8q5L|_%!6-ZHmQhpn0tj^y96R
z$E21>R{;OvLXon9u@aAD2EPp>I!64=;)?!i9R~;JqQij;ON9gSzVknQvM*kXJT0{@
z5pD8q1)EWM26UYfZ+6_ky+K=`_RweA_Sa~FDL^D3`JXCjAPjRxxCT}|j)rrUFCx9u
z6lifk^t5LG_dWtC?2g30s{-zJ2K--HfvdOo@0YGADzyJf0=$U+pVb4dHgp_7VnE(F
zj-P;ACqeS>=>T>H^VejwUg6Et^Yq;gU2k|l0O3WTi0l+8@R{h}AeXSwC(w>-aD>@W
z8JKi&34G(8Lp5y=Cvf|pahVwczoKRJq6pN>IZ!mI00x=goq7NW{<Izi`bk-;fDHp|
z=so4}1mLq>J;t}_M{Olzb-955>9y4YEN=<5Eq+kNi}jc$b3nSE4{DhKiCx_iaYBU*
zqL&^4rinh`D>v|~=(tA0XI}<=n9B8lSt>p_0fc(*v}r4ldE|dYjGJ$3Z$Fs}xGG&*
z8!5pK^ZD$r+>efkh`-(VDAl!RrqOFzrhH?f$_D8-*n0o|eeAGvaB%Q02AzotYJTt^
zp*y)bELhdj=Fg6{G3uF89)xqvz9Mrq4vE7_X>^i4@d3LXWKn*5eIn-z?Qo>~Sh*>N
zO4#u&g=wvIAElJfzAZBy>^KXBnNUsQ{lTX;*W!;r(*x2;nl^ft3JPNuJ0smA0#5hs
ztdbgCbA0E>cuaOiOAW<4Q~4}zNxLnD@&^pA4rB!_VgzjZcY5Mj_u^R9v3A4xqLBwf
z<*k=UGA_M&e#edRiu3c6J#hQhOk)?EkfQDEV7+Uq&IRpzwAI(>xmkQ}V(E_Q_vj6G
zrxdikSMvLc<G*L&97!jgVcG!sc(gX6%pUaNvM*Cw8XfZluKe<1K8VCS82=G<aEbFw
zgM?{|-}&xhmy$kMGe5$@$VU3=ylPP>=r+k8r^#wp2~S<hO<S?a8i#^&u0#Wl2sfPE
z0Z8{EGHosq<~&l2SQJeuh@=w1TKA=hhV<B;r;4~>H>c`2<&*JwFBEQi?N!>3aI`qj
zh+S^CUWw&b_?=+Sr|aFpi#4``@2~dI(%^R639t3h$g9IC7jS!y0A%IWh;I}7f3zmT
zuv%n4PF-q2IJM99&UUTSly`dw5j2iPH6ClNfR}XmO)Mw7$)YQYoZxHK%Q%)@KxJBo
z7TO?su3b?yh)fHP8WHE|SDiKCc1FL?TikGH`OH7Kg$i$4dB6|5AM==`@#t5|vA6Ei
z-81L--j^zZK_zf&BEMYhY+qiSHIlv&vup&mU9J4I^~P=D9YE_E33KLtbjLi=Ud~jK
zY}Pf({?FBE;^%Ox#$dbX0+zIkwOk1k33w6Xkkuh}I8K*V;OYRt{jRq{C7iF9xBdyZ
zI3U{|$_v+MX+6g(FY`Kjl^HkYZ}72fDRFPs=iBA+D=xdN4&@C-t@obzFXK`_oE%oo
zR2WtcKKNCni8LD<d<2M?hA;F;k7Jr|6DR*_{O#GHQ=*yWz-Jlc+0&e5a?}6nN%;rx
z9fX*Ny_GuSCcA1J3(?iZ(HsI(2(sx<OHSm}ReSmN?N_&cj*ms4?J0oieuBxwzR6Pr
zR8wR!{MFzr#-;T_=Oh_m`*cPknu|Ok<H87iaWSuiS=7w8{<Jv}VLb2OKR+r>utK)>
zzUWuQqYJKHy<J8=YOxz;>H3z)WBNxmRoEjf?hN=cr&ZE`=y!m$82-Nb>hcU(->MaR
zo0z(g`mzbSXPvmKm@eiK-@FgGQ=4X3=iHOidjCIK(#x4FU=yX`v&k$X8$zhW_e3l3
zHX-@^)A+<Pm?N1nPX6watjF>=kK%GfS*(h$*d~U)ajImh*2yrjOS3?28Bi5>@v`*u
zmJ0UoOKrgfQ72weep{QrJHlzM7QQ=U`qPoETljAsjheg%Uwf~nSz-A7F#R;peUaz?
zv3*cx`S8ac^``>Hf$U67aubW}bhw*b4Y*u6*cX_-&JSR6d0+Q*k_!)A`=SW(ZT)<L
zmxE>#Tb;~Xv%t0`Aq8lxH~p9$eM5+-{ye=o6-Aur2}imZrI#qf&4;rlGX6W`i8_SV
zAzvk#S~sYc)3~8pV@tv~aCOH@EH|Zp)kCT}`5R{qq@QahHk6nuzdbVGc;R;4V(0$#
zV)<OXh<Ry3HvL@7Rt72&M`5U}5|f7w#|e8ojPhY@aGgdf5%9o&%=YC&V=W{sszji{
zb_BQ*h=A35Z@da2J!B4UaHVx5f^+%D)yJ}sCL1&@^s8Y7MdCo#uuB;6y9AQueD};{
zMh6nfMDqWB_W#Kn{QtmV{a3{Q7ncmUzCb1tyz5jAcw+HL-~9CtkmBQ4fq;_)9(w&}
zIM<Do*DrF{jo2G!kJxA448G|vAH974ub%@TTUBujtVJA%=5IIOKJsobJMwBm&u8$Q
zpZn9@Dj=LyN27TDc~y~1g^{MTW%RmbgyamU^ugAKUc-Q<#i#)b$_!D5e8nr!T)@E#
z|HQ(vzXbq!H@^z{!P{>u7}9K9D>oinLtw1r0?FD%Ch%MgSPIKua}lzSV&?u?#CNKt
zI)gq=x!p*|>Ea(j*LWvlTK8^qnO$S2I*>Ewe4hU-wBK?a<o)$9eJ}vfbCWAj>)8eT
z2<ii*VcJFh=>unk$Dg;uzkmJ?mtl~BuevXh{JjmJ9l<I^k?;|$%bzdFZBiNHA2VD0
zRJ6?(8TVWEFZJE6q4PkmqP)wmqlnXg8r4A2FP(VFStueqclei;gSkyx<+SxADNdV!
zHUp@waO&0>-mz-IY78p?yj?%@s-(4gTqOVyYgtvR%2-D;S;$eaOL2Psm?lM1$gnpW
zH|R!7&T1U%KTDq1wv$^k@Gpe}L?Fgnk(4|8J9KASR)P$&!veOwfn+}zWMbaQ;B?vf
z<m6NRGljIiypKNDAC$hkWxa^Sf)?x#(pCH98p#@j{OOHbeAhST*=H+w7@0!y_XrST
z-=`VYz!rUfTL;Fvu^x%imKV6j4K)t%AsIV2q@`Qc?OK*7uF-2iS(b{vb(o*%kal(_
z(4;CjOE>6ib3C-Lm70Xuy~Ny=CM3k4ezwPse){*vnf!so4d74ey;Xd5e9eTTy-wWZ
zuDRYsR3a<#VFRQjxVRT;gMJEq(*F!GgE3wJ8Fmddv}*2RKV1FTWlXJ5$wGs$kG0Qb
z78kl@=ro!NWQrGs%l{npOGTDu6KUo6mNP`L?j6HMtGr_R>++UvsrE@$kEP%I`nq^@
zLUhyjzh|I#Ww)x(gYg>nl1zF!J*waPsSYp)(_~ROveClorNZm&K-(pEb<+|a0M}eU
zv&yVPzwB$$l<uc6ZUo(x&7`@)d@4R?xFX@sysixw4SkqBBH0mFK=Ig%0+BB81d`$Z
zvK0(cVHxgg!oyA{H#$C+zE0^k7zW`9WZZS{<q4+i^tinUZ?(TND8s)0=PG`P8L|C^
zzHhZD1LUi1Ef>%l00gKY;qFQ~D3KPVjEre%sl}^KTgLn6@OE?3I?N}&0JNDU_D^Sa
zo415ckVK|p_(pr4s>b*<>D#9OyGmO=njh$aLT<iKgZtO{M`E{s3lVsizng&q*s}Lj
zSt%k@L7gH?VhkXLkN6T%N<O2o0cc&w#cK{A&`k6PK#~@LZmCz1E+nd%eualX1>yv)
zAT0h{BJw(iCb?+QJ&<yxNeKa{CPUD+7$BFH9&}3#_{WaiJ0fH(?X})>$+COCtzD$Q
zda}VR5TES{<cOChi(=;hr4+dc^bysQ*3)_UqvpVd&)Eyy@E>u1Kgu}i-~&HG0rih>
zO&R#Et!B-}Aw8KD0CeB7k&33t8WOYWmus;d@yjE>`npb)xVs5p=&VNsJBy{_br1@Z
zLOq!b)&Q_c6NHbMf&Kjnz;9tgA5cuk9Rby-wPpzfK(6^?ksq;SH(XG^joCiBeL<TI
zyKW=A#yVDL3zoTYLhj?(IXRqb>PPDZ_3Em?Lhi(z{T6j50bnwK5+@SGf1IwC%>35E
zHX%^`Ttnaf1%PpVc@z0UU>Ydav%eC&+5}oxUMuMbS#Q^G2+{Cc)0?(hlwzxl)QUhy
z*X7?0w#|kbPxkKs@z`Tyxdwi?H0q>fcmf>-C@neqi{8m@c}ATTWb>7ekUxt-Bxi5$
zZO^t6sHY1*l6KwwYVq{ZJVF}mE;0MfMiO9a#=CngHiE?A2>~&&!B4mz?@0nyHWnt0
z<pF3>z$1ZT(Lisw7+7J2OvcuP)Mcyiq&QwZA>bKip(~gA{M1FTg4zXWaRI1;_}eX&
zWlsQ@ZFo=cy603mT_9;aViGg@Y_FNr1#d$oX0TNjfFRGi?F84zLSrB4H_AkQrSoif
ztjGZe%E6ctk<wR6?1<Ux_Q8xef}MBnjq&Cj+ZTCFniYgs2SfL}zU^m7)66b;`vLC4
zq}9%Nw%+UZbz@)4*;ppR&9F3T-NfA2ex!Wi_(U83ZPfI{Nq+Mjr|(x*KmJiZBk=eA
z`o|^AKM1}`?w=J-<qD^>o)3(To#I`zESb{(wcMXHIf@o>s;vs7vt4#>a0#|4u(XR<
zUX$_<|KWkN!82>NPqFKflQ!>G{Q^kTw&%D30C-Cq$N{G0CK~5}HeW?dbCnxRv_+LY
zxmp+7i&%_W=$GfO1^VSaEZT7N0}UeDNKS+$N1c0Ozg9+^a;+qVfX%DRJjq6cgH}WZ
zsC=d}mW(aU^aQ%vATME>)f5FpznT;Uv9kbGDT7`4g~IAV2(BZ^1<a>qZnLOw>;>lT
z)$>;A6SC{Sd;s7iJf%7%$?QrlazJ6p?3&k?o;a%UNLT%X6kLkO|1zG3(0XPOIF2ti
z)(L7E&q9Sxqwj744sqLVIImtDcA8|<?`t&^+<)c-a0)8Dbci3xVO#;wVYzaw4rng|
zN5i9N3L_MJg$%vy7rbc@dXrNQ0V>SC0QQ2!E1G^Z4<JF$*}t#X!b&AB%O$_}O$ske
zxLaxFCm(_w1S#`Khk>@G>s(_x#ay~6^|va}OLpo%7~rj#$!GkbJac<)|19FP`7gWp
z-JzRFX`3<T?4+dCqxFD#Og4E@{I7Dv;){|?eZ?17PAqY&+|c(6(s`tLF4aHYd;=Om
zW2Q38FIBX^m?Mu`zqr@$#7l1LaFkGviE2GvHY4RIK6H;@ha3wSU+B|D^RwEkf0YEf
z>t7Lv&$`Vk<h>dG3Q*?Lx2Z^}3wwhul+fuuHM)nVLwi_;f&Sf2+zske$rd00`OsrY
z_^@?~Wc7&a>i1uc<-256H~DM7c7oPK$?W#FwPOC1Pg$$%qrA5tEfoAn#(k`y%JY+}
zeD?Fz`~L0HvD_`mhVOAk*_WJJ^sCRc+)nZwXODvH{V;O6fhcWQ*K(Ty<X~~76Cqn?
zlHH!PiiyUkWl!Di&<nIn!`DXD6HdV(1a*^Nkch&E?l`q@Sb3zuFWvr!wG)o0)gy5E
z-_B?!03m45mluI2TV9i_sjV&5%r59Zp;VAlqNH#$cdwKceTU6Hsqc@e--X}y5$&%h
zvHcYY<>8VLVudn;lFGGgokMDgIzxbiG(FRv2nGwiwUi#&iISXTx6*_K;Lo&mOVQ4t
z#!ft{6}(PuG~+c?j__tH=W61IgBx|649ZR=8gPY-Yf^|=XI&jj)}Z(^hDl*964QpV
zt(X>BAISrfoyh&YqbcR}cTMJhDKL|bPfU*w&?mULkVlKO8cqc|vNfhDZG9fc&$`I}
z@?-L1i2(zrUcOH;Jd?b?`oRWbTVWLYDVOfF8K6tOv+0jzpSG_u$vt4S|NAd7DAsBK
z)MaW#1ouvM9nIExan@?T7SjlUVQBJYw|W^yI)BJkaPgWe_#iKQPD#a=>pmJj3g=%|
z8ickju*5AqF)&?v^w)mU7oixC+jH0IC<8`(<m;gPvt%7$@$H9oH#ge$fzB(J0UolB
zBbl7XL|cRMSxeX;`on?K!7om6@a#Lo(6$oWix^$D>vaa^vSqThj?LL6Ud0+QJ#^=Q
zaLSQ&`&jPQktWzYy}NtA$caDo@c85`goJz+vyiptt7UatCYzv?XFFhETmRXs?>9`P
z=Yp!G<V$t`+P9Z#k6**e0m?b=%Z(F+>=Ci>Bw@^p9KKYE#gA$7x$qv#Q`TWa3K#WM
zkrN8zG$pV|Mt8`}+%CWeY%q!s1JlZ9&b9bbCAzLYmWRA68BI6Dc9v2$82N>j&2j;3
z?7*<j8q;*2pFhozh&;P*dl%m6dozbZ;NdFFKJje6GUp{w06z!99fV|h|Dt-DXg^=s
z#i%kQz^vh@{CxJ15FjCXpe-5(9!s*Cj)#|7tD<CRGoSDMk=U9QXx+KhH>(+`kVO#L
zGrZ6<u<bH=-Xo!WSl0#+2bd#Y3=7yx0(c}qU3u_4iRA2T^G`kcuckSpg7=W%6<#aY
z!`ABTBo$$DLbE(%vp;9U)PXlYB$eR=i6U(n(1;r)G7fo-Q!`h01oT}rdA6sVcW0i(
zcX?2bx=|dZX6o#|%Q@xT)~tK&WJNBS|6AM#d)x0I|4}hIw|eVW+iu3;fTVwsAF56!
z`~A`27gw<U{(*!Qk1gbgrWT(6V+M`&`*IAsODABJyLPbkyv~>MaDjeAyNo?J?D4Be
zI@7F!wHc-D0chL(7dbGFQZH=SU+VNJ$yQF-iW6~|WJDfkjz7}V3Gi~%<@>zMwSK)3
z{31*lc?7h=P`{`<jZs$i%d<cqA~Tes-x_g^%3uB;*4{IqsjUeYMyv-EJc=OFR8)Eq
zL8Jswn$mkGNbkJ~A%GR>(mO~CB|zv%Ab=vh386?!5D1}#P=kc_?Qq`v{k}i0zc9%v
zd#zbBvu2)Wwt3;-DGuFxusl`SzK$w@_8PSI{aWu3KuFWs7&rvjKcqJHR*zo*migkF
zeS|DutRnz`R@6N+hz+iRNdSWxmk4vcBN3d8fA5wg3ZPuZ)@DEUirjj05ZsIK(!~9}
zQf@CWEe-*$Cih*RPK(#F_wqfWY=WGXFmNCx(XNVY`T)Ep_dqS{$=?9EJJV_b&)+=e
zUE2fv*zcijp_R|`FG(lv`#e$rOjw*RCQ=2BtDr)&8zPy6j@1-v0CUm{)(qrlQl64>
zk&QY8*nfXFx8xJ^m{WjwgJaFp=!2+_x=D@@geMzr)0MZawyO?Xi7DN02<w$59Dpf#
zpj?vx3`C1Q_-`z<^x(7lIaqt)%5~2GqEI1l^*o}mrV+0`|04Qtrtaqe>4@2egUOiT
zK<2vOGXwJmgq+_YJoPU9)Tj8Er)XfN)JMClD15H>SId29l+r?BnMCzWdZWYC6JBpG
zo>#?M=U_KpLM{_>SMsSdi{#u2n}-h?NL%(oX}Os<RT0yGj<bG)$FP}U8qTQ1x+Sn}
z@}rBXG|rfJ0cJEF6b!0kgDecymLS8%vA{kD6t<C4S(zIq@+}BiwEpz`EtZwDE`0*H
z%t@#YuiUyWney7^;>F$}sjw6IP-)OV%w!ONTf7704WzQTg4FYeccTF`7G+nO$H(7^
zRkJ2in1n0i0V`U|HQUr%H<%T3QvslSJGR`2WZ?5rDEDTD{8t{@mUQ?XrL@+d`abKa
zC#n#=6@0Gs<!#?-aQ4k3<i+2!?60Q|XZ#(6aFy1)I8NC+u*5yUE`Ah@S0wUS6i2+k
zZ}u*<I#C=Q{XjzQ>6N>&MD<*(a)%R+bGb4ofAXcWflZ>J17%{N9}INeM^A=*6$wmU
z5^8iS$YwfvwY9^3q3H6G=GQm0UcDdQjP9{%##YPM2;)%&nAG2la{#g)uEP1y5R)mm
zFq}O`L2e(Z*(T7PLbIsV5c&K5hM|t`8^y2M^@-2%Jm`+f#Xp0&F9dUnRR4XbCFbVx
zBJ7hCQN5vPRO%ss+_!dsx}qC#@--c-j&&w2MSI5J?`NxaqgSZV6c2j9)V`S5i;D1Q
z)#?MdrQ!CHaZ13Y(MZc<ZZ>z}5-5J(D$v;hu>!D4cp%&WwXI!h&k3;(Dg>c60C!=U
zkKS86lQcMTP`isEp-K@tp(_&PBLHB{2Z?hex+SG2%`naZRBoJr)Hh81vi=MF$%t$C
z;<oAmP;#Q{&2HNEj@P)G@yhMfLyPgPZGDVB;kfXZMDMoG8*hhWHkshf8U`NuAHZ!B
zQ5&pWj;E|E)jxUP0E%tN^tR*>PA4_<1>`M-quTOzNo1Qk;xa&|SJ*-&b83=U0ATf-
zji446tAETvX(Sz;+*<m4TBDx*#=>8qz!jRIL0k+wnvl5Y=_s^ak#O4DapRUHnIBoq
zFiSLK$Fd_+6L%H>&Nm-GO}hB4e%&9HE^^DJ(M4xD&%hp$qlXgzIJjR(&EML|e)tgu
zE~Jvmd9Q|R1PTe1?$?BojQY^?gj}3PLrbse-62rTqz_P8s+pq>bEeUM!Y3PhZGS&x
z`mvZAukO9WkajHIN89}#GvXjtvwI1u0Em?P@Sj>QPq{Azj3z_y@lpmi(K{Ts)jK72
zL0?+`3w~tJae6hbbm4@0ZG|OZ2fGnIip$-_xcOJM*Oc1#A0<4_1E{8!J{%^E5AMFy
zp)cQO3#`rG`M_aRo*cc4`T~@@q5ShK`7r+V*c^aCO8^djPR4oP>}OX^ghpl@L{IL-
z-~T)KIb5FOVW+(DzYi+pvG3y&KFQLmv#9_cxDqy@m<Xhm0OgpunkA`xoi4;r1;d*b
zuxj=^r<->5+J*3|<1BmP+lxa`D5lzY2uB@yx4W<Za9bDr_2o&EUCl~8z=FTCcYG$5
zpKs<cmFGYkC|oRp47^i{zx0pf5gge(R@U3A2%G9JDLq<e4UC4G1-j106$Ttv*#@N8
z*69;DICv&X?rNq@h9H{1g5~|94W1~w|H2{+nzq%EPE|);!8*Ow?o5144ta1MbgR!=
z-oH1)wt(o^96<Vmo7GJQ9L3^;7QYqWG-nO}G<>mUS*Cd#(z^N$Et@fa8v!{L>|I+Q
z>M;z+u6u)Ay>C2>61s7kyH{w3y7TAK`?rHPvo*0?2Nawvke@TXycWanZ6Np-kx>eb
z^gPuwzyvr7bXEFGG0Zu7hi$r9jA>`9rip0<xM*&5N+fMjSRGJ#e(5f$6$;bkn}rIW
zyG(iB>J#a#PYako!MWos+wUSi(p<{7%%60LSRRE#e`lkm^g?F1aKBJ~1X*SOro6OB
z7;l5B*WeMZW)}10%@_<<%J(P)V1_j;^p;F4o}yng=y(MS*6#}dh^5`*m8k|aClJS@
zaM}xrDMugAr1Fh^NJFaj3d{^3QyF75`e?@nOOIyAXkH)ZdpL_gfXittTKH6-boT_)
zJrdJpJGHbRfl)`?8A9ixM(jcs0BXbW<@YaH@`wMLI;{Shww7hz>JFyOTx7(LFq@yl
zcsog9fub}gK)i)w;|@AOYX>JaQnSfJ;yi7GwyYPQd4{!U0$}N5X?60br2+gv8j8(p
z@u#dS6=K~jOi_%z2VhUV2op7>R%_lW@RFAQt_7}wSax|ozBT7kh~8SaMeo>g7;1q4
zR#$uF-lJLFfai*w3XA7~qA*QzaX}M|P!RFsQ5eKa_0RmrMES^);-{|YZr5`sfeT)k
zZ~F2;Q2@(6J-t>StfV8e!_Zwm1DQCG>82Qinf4U0e3&k}(vYWgw}oO%)-45rD{h}R
zcU!plJfssy;Rj7Ph+@W8L^<<Y!p^3By26u{!I#n|u6{;z?=E2NU6;<J5xxeL$MF2n
zS%{YutmvT~?=8Iw;GF`pRnp7`>0=PTwqMJve>8e})Cz>0+Z7L>8ezM=Aq8Arzrd2R
zAr>tF8Tv8f+&$|{+qkuqXY3*MR&*R7+Yi&*ukeiYcR+1h-zdJ(z!HMhHf?a<SFn%t
z8yiWNdkkd!!2pss1#ivU_828J56UHGeSiJNvMLq3n0OYwe5thIXQsCR5F!`u>-n*S
z=xK=YBSCG0ip?ESD!pT==%s(Oqwy=;kkA37Js_7#FEP}OOc5jdl`bDegdBzvkCX$w
zdV%28o3%lKgVBJ5#I9jBYA6uL0suZ77^E&OCKqBV1C-l2>L0u52CxsV!Kj@>j*f-a
z68C+@E4({3Iog>J#&d6?<i93pEJH{d9U{_qh38)Nh&*iR&6Kb$KI%9tY36|^CO_c|
zJ0nV^c6MfH@DN3S%+8GCD*?CK)qtW7F}C(8q2h}5f0DcQe3n^XZ#Bkkza!IsG7Ip&
zs+RS1Y=D0f8z=*~fVS?%fJErf5d_KsWUkI#p!7?rnYsj$TFurU;53)+KLf&&UXS_l
zmOg*Ce<XRc#ja#ps;DU@(dYoxmVjv6#c$q3x?YUsp*0yQ0MK>arD`8f?JM38+&#=C
z>W{M;gA4k;Y-~*1szw0|ex!Id|Ia<Sfz~P(0R7f%F@#c`@#fxX*Os$^Ke7)4NkRdI
z8M`sM+Hy9ZkEr&kSVO<QJAZ4RQQPAycivZSy3tnC=W@21Z%HTn5*evMLW*(@8H;<n
zTfw!BW`h1Hw6QIyB;9ir<1LBc22Dlx^ypsU95|*VDjO_0-0bAj=PA~YYORALHmL1e
zDOXTuX$iX_ka>d!CDnz<Bms-1zJkSq{=SMkM8oPA5<1*C58DHCI(K&Aqj*-@%Jp*_
zps!)Jci!GtY;Y!OECsabq&JaPG8ZuOubyzF6Cs2n3A;2BR70T6i`{F##eC0l;Zte@
z=ni!9%1+Q?Y%A6#O|Yk_dtbRlxrgVKaT45sToH_xJRT#m0*A(<p1lm)I{&op0{F8i
zOPZxbSi{PuQ!s9#fl77J;H7V1k~rf2tYaXwPt==JpmY2et^Ugs1#@jYui(Q9oupO$
z@y?E}tmNt<%w_S>Z4wva5EP6@i}%ZCSU^r~y@zHa*K)QXU^-~B)k32?!oA=w938T;
z$2CA}8^GSjZYMEg!X{MIebBvHDJL<p5+8Z<prw2N5r!?rxac{-A3j>FBYzx2F<E#g
zohm2CjIkTH2jf7a51kl|ax02Y?@Hv`byoje{AqnHV|)mSAAXoDOZw+th;j=@bh_9V
zP)mrI8)hyJ$ZUFlv<G@I6OO)bZ7y5<P&hNeMC7@Ufk0ssGEb1oJ}F8iA(BC;xkzE<
zMw*w=X1&FaHEGKi)QT;ax1rp|Fa?9H_zu!j$6<&1Ad68UN(N=qVzTy%>(HE{YYbdb
znDxmUZBvlQpzny85R-PA$U~__xZcLj&w`)*o(W28MCeI!A;a|>t8oNy{VA~HWxQg%
zrxx$+d?6*+TR?AfFHFI3NaN6$$n6+M>Dp58H>+OdRT`wxjN^uvzLTEuO(qV16~U3+
z85T`r73zDrjFW@55Pz<p_T#QbctVsUv;G*7VirBBYNMh&j{;W~#$Vhvc$_R-;?NAP
zHF^7Xm8SRNKV#1NrkR=XLA7q}Q^u+sU>l6VO98qA39pL|jiF<OhA~eNW&Eu}Eh|nt
zc{*N6wpdTuW5*hd`%8|#4#Wd5tVKYyWQ*Ckz`4&SnEs4Y*&UT%Eek!?jlcB~C$q;R
z_F6*6A>u>T{oWcYQr{YEQ@OliO4W2L)Mo2-op<~ji>jo>ZFc4Q{)!7Bzc;z;gX%|F
z>-WOw`}Y>5FjMMqfgM8HzN0tH2*%<PM=-8m3yfY}c3dgpy3^pW`+94>BVkmCa<TH*
zQgq1i$ux0KDP;JhjqG>%%Ej<`7EzIIwp1Liy)rWYFoM8qkmmqnc*zsul-4~Iceva;
zmIaDEKU=Y!<Ztn-s2}-bdrEF=#_-MFC;agz*{UV&ou^8xgcz@g8JSmXjNHx`h_;Yf
zZRN?Ze+K{1!BSdX?4dxB0%~mJCPF$-cKhgja2%Y){h&3P4BRON(EU7KVvDa)h+3D{
zYBnYzV}7{JWPHd|=P{d4F8I|?lnlut?B15+Ft)T%I8*1FS1GtTkX*MK(Zg5Rm*Qrg
ztMXCvX8a8iT=Mf(*H7EdU~IEetIw(|MEv}%Ie%G*t~<IaDY$Q*g<6U9C9pFI)F+Pd
zEXP3~=-O*O?W-jU^O&xJZ6$_kp(*vr6Y$AOf_jZhZ+S)_{kkKgzAvlhqk+`o1}E%~
zW?S@(DdI6!ndC-}@y?~GTpy#WKmGUqG~A^j{8hLyb6qKPwjkhr#p+W!%A{{KG3G)s
zc2<PS8QPg(74z9FM#wKS`UADM)c+Jdak6b@CB{gNl_+06UYTI8NsK;XkZAQ@PJNE)
zdP`HeSROkOsA{?MRQ*^bkC;24Q><+9^v8B!IIGg}A8}$Jhw59l$A8u%3%T|ykkis?
zrX-b+?S-(V%4mx+aoS8)x8qS~c=JMUZnMrCT&2w<?M$P+GEuRA6x4P@!pC$xjA8Yn
zs{7-xEa!8{d;2Rxru^+Y);5QUgwd?)A;{o`K=<(q^YT2TI>qZccuuQa0Nwu`)?`Fu
z#jTtyE+h5`ZZuY_I(jR9=;uVS{xPX`ca&3XO>f9#w~at1nI90P|FF2_*l*14Nhgb#
z76#gS)0g0zmrPS;mK(Yn{Ekh6V~J)hZSLtJCtu^v_d8<ita5`XI{Cny)NR$eRq(mj
zgJ;62fEB*88eX(}DIzm=9n!=rp=>;k!f%nwod*IE9E&f$IauiHuU-$}|7b#oOQv=S
z`a~{ByD32Ait{2su8<m8SF@Pn2wLN>29RRAyYE)I((B!j(h?Gr<!)`jgUJQgl=`54
zoE9bj)Y2I9E8MNs2{#?P6&E{MI#&F&USVZkiiSxbkq2^H_T;1=4_~rdyl%zQv?deO
z5ya|1U&+e8#sjNn(kGE+_Q?qtORvwhlIA>lUVkg2n#i+wZ~hNDUqN9qhCRiL$L76D
zcqy6sC?T9WojnO;V?tUb%h36p6X0nU8Om-?x1I8e<HCA&n#t&dgd9p?x~jPX1_f$P
zeCaFKqcMMR(@R91mNBa=i~G}AE+HQy83%cFTXwUT$}=o@ri+l@DaZRj|Am6WPfb@r
z#7)Mq7yg+hnz65<q)Q*(IlY*xgHsWM>y^)UZ7BG|%mR#i^G$TTp6sMxTsBZi@3@$<
z;=P!Qsro9n61tXe!lK6P`<r_C%d01JKdEOv{qxTJoM}Z~8J$$d(ezru@80IVAfYEJ
zh@-?kA>6osb3ntuI0tm=9?_avldeG~h5G0yLo*G31HQ0mYa^9_Q-7(_U8>zgPEj`z
zUHR&kL0S9CV)vS95}nbn)o&)Z<$2D#xtA+<G-(v2sJkI5LSO5C^U&E^t%J)FH9pJo
zFhP1Fe>`Y-7>_E<?utbO8xcp~2>~$`CZUF?+L0OWVh#EGOl5(-3#yndox5YSuMU(d
zE@h#=shf)Rc+Nb*sa-Vcb=DX<WG4&6p&Gno%F0-H$lH>W-sOz1nIAD7Zub|N?FIJ8
z`;!NnhymRJw<arW4n-n}D@p@*%HZZrPRzch6qo4T@O24}H_Ib_MWge#X_)J4QS2!<
zppq!F5g*_0@6FVr1I64_g;IlyouYY-8?cZJTsD%4?=29#mruiK{Q+V*hu2a-?FopM
znVAJXrt<iCepzKrR!5#rrxN|0MffR0yEpT`TAX*_m}N`jO2yg$=xcS6!IF6}9lMxZ
z>uCu@U_qr3>Nk6H$#Nvy(kp4L$}no1MLEk*%&YjDBw^;Wi)=NUKHOMeNUvaSIN3F0
zR`;viTO;3g%0YfNyIX8DA;h^sNG)OPem(g4P;$9Pap4JC<$<6M)3Xl>dT@PLg_Y{U
z;HSMFOSO%L*;~mnABy7$iuD=PA4h6<^#ohtzK4tnHcdL>qCkgt6Z<_CrGi<SiwPD^
zaaTL98qXN`7j<Q8@Xmu_f)2&Jx>aiVrDCNnG5%e)bj+Y%5KmsfIjE<f)R_5a%eZcB
zf?Vd<2P+?QrDVyj*rrTn)ng&p-|JsYxZm?Y-JJxPnkAEr9&CiHQh$0sIy(A8Y;Ek#
zRMxW0BvM{=r_!YE=*wob3w^cugGUdu-A3~Mq^FBHCu=p_qfE|h_j9G<(PU)^j$_P<
z`KsenUU`2-shF-uir4g*_^&FCm09e--hHHHEz_&B8h7=_+JKXc1r#3aa^^Gzog~5a
zM<N;cf(mR88C7i#wZthAjk~N#!}n`7NBSNFKRLqC6^+HGaai{kfsx=`-Qj=YWHWZ?
zW%Zp6?&wrlrE%z@bwnrzv)QV~Bz{m#r&zjSbIS&B0g|^C-|2fjv}wGaY{q6B+}lyG
zh(We2%z9#jh{tb)P+plWuU7<?JQ|-RL=mMbW+L~iQVi3Xn&N3)ONg&dVuA*@1Bzfp
zcKW3Tj`nLL0YTjcp!OyeRXU^N;-d_Zm3#hk{g&2UPv@0>rpHV0j?_CyzRrOAl8?PS
zNkN>K0lQg|p$(rp^xX1HJO62Kr|H^oBMgGAu={t9ZM<BQskI9(F6|E9Gp-0;moigv
z#ePSf2Ww9yWTzZKY47iy{9tJ{LZt9mOi736Z#*}HgVjkcd~rkiGT1l%W(KpLeCq++
zWpyJGAU9A^RhC*Uq8$7eH3>zd#{)WYJHlD^qQ4R%esY9IcthhrInPub9UU*OjUx8G
zNev$xM%EAPUe0bA(#ac4RJU;b#UkeXI{CL|2xgwGf^lv_95H-&ZN(aMzsLXYk~`)}
zA6!j2tDY+xvRQi3$SvnV!=r6!KoH_u=EH51C&H{3y%UF?Jm%Tb+Zk5}mjZym$9pvt
zddVgcsjT2Iop<wotFu%U39(@4Tf;Ci^SRkQjBjnFr(@=_`S2jowq=yLLn6Fvx^k&b
zF@h0eQ32pIGB%nAs|^jK*9VebkjJ~6_v$hX*0KV9Hj`i1QK^Cf4}Ry19Z$KA6KH?b
zyw$hd)(pF-7YgMhn%2KyZiNs(nJ(_c50wWMdIeV9P^51ljFL4D%*N>N0Mlw~T(eyi
zXlf_ff3)kUzt)_;_qeVA9Ca006Ai9$Zse?R==#^bcH#Z{LEFVdZLa)~kG!~6RgG7@
ziSNiKB!7NeRgpKNRL5~l?7K3-f69yY_z-C}Co-f6?cjx8i61(N-YOc9P^c>62n<-|
z8qtut!<-#x;n8@7g=!8IJq9e9{NhfWZ+v`urhZ*ulEsvdi<r`}8s#owcKcQo|LFZ%
z3o~sJ8}81ngM#U?Yx_|F#WjV^*_t+zvv|>Qc%9HOq;|S)VxyJ-q&yq!TZIJkyl^Vx
z#o9%kO<vg^InPo3J8z(o6Upw_2@A8+r~s)fxwst&XaT5?Ce2h&lj!W0YRTgl&qDlW
z5VDzuTOvvj&SeJ>M1ge5k9*qz-T3?X{c(34ch%__R~C2<<*0{77A408C}Ez^Yz=oC
zO~fje7C_U7OZxEwU1NV+CiVtM^nhkcc_Rd~J=(px=56hb8nCS+jje)Dif+`=1TiHr
z?3sQLn1AyDWTi{;u_brgZf$Lq?6FKh9{{o=Br!y4=}IOi3G-B{vLn%^LAFH1Ix}fj
zwP~Z>us^Rf`P&oR2^Vp=%S>kE@L3VHbjZp8xn?c9@+$pUH#ueKp2Wiyy-2@-9Ke+L
z-P?OYQN~}ISe2aaFxxL0aB4D7S}iK)kDgc^^^4~9X=Z@tCq93^(&!o|Ews?{cUv+5
zrFQw?J^Xn-vL-T_8`<E~sAD`an3EquT2m(P(c)JDlla^8m$acPX&`+cEV@q(Z$EE4
z(jQI^{gbjR0>#3W@Oq)RV-O@<UaUIX7TT?kP)!!}tTaz~+R%f~4VD8YM71r%({|;B
z*xJOpIZy+Yn3tEo*sQywWj1+J+H>jx%6lkgiP*wa5Kqlz7-2vUB|Rwe2BbPnkDg8H
zx5&{(lK+Y(s=il5n&Ey!V7jnv**amM6wJ3!L}xB_)ll{<3j6&nHR~d;KCf<_-*Nid
z!u*29{_?~?^Yvtt`R+#L@%*wOK!eyVFkX{!z!pM5zO$5-x+2Ihcm0oFQv!=<`Kg?W
z(?~d3eRZXe-FV&qugJlEH#vUq(VCE$0L~^uqdePbI8X7pulZR+4Tia23l6^uzDLa$
zMjUJB`Gl8AH1uy{SW+*<lyMkq0(78XswsTFU#<5^;=O@-6siJM=$z6yI!j-cQG&_C
z{9Z%Aw@=IGiWwDmfuMCxen?cy*q|Of<gy(r);&HHgi2l0n>Z7}U(e6coxgR}_s(cw
zJH?4sMQB+1_T|aN;ZpYIG<@uzI!-!Rce%0QoX)ZYFMwEL^EZ|ThgxX?(4G;2T-Oh|
ze2C$DmdM%1)5q6m{#EO3>y)3{j!|TVfX>)0iuZBXM?17V0rebxNf&srLtT->)_voN
z8DV)Wx&3nT$ZeW9Ts)4?Ag>tQqB99K5A;pv>O)kVp%!yvsacoqJT05Pm#<VOwCFMS
z@6AuEYYi23iQTWG_`~=$U+BCr0E!8;5*~kbmi3*a9QO}QG{S00e1?Li2<@yorGI5+
zb4{g=dkhVYRcwV7mQ0th+%0JXCSsGn%KaOz`cf(bQGMW|5!R~$ye_Z-F#r59XWM1}
za-(ARQ-ZGQaKC2ULBc`efq+@<uW&l^Y0yZ(Yy1P>??5}M58^b!URKVd&BHibzT`>$
z;+Nmcn0G2hWXWy`g+WWUHo-P6Q6q4}GMzs|Zct=@@__-<S&Zt!#oMQ)uM#e~I*ktg
zUefqH#42g`<)ky&P{3AHoRcWD^9NY_F;_kO8u&eOUk}er8BLGjb!MGP5^s{jui6v7
zf5JC(U8U;ADXyfBhLGLj@gnqQ!i^`U^{y=~_%GQ>qXCqmLNm2OJ!SGT>Yb3^wBp_=
zm+B$PgpB;)C%8dP{*QYv6kvSllzkqZvhFPn(3I?NPc7vJNqNd}o9^6ge>KzVokVkA
z6mCn6(8BD^_gZ<#fc>gT{Jj&drVKOus)Ymt`W6cTkNCpK7)mn_LGHG1chjG`{%-a|
znV16pLE3vIx?dA+Cayen_BR8vnlV||bH*wi-xE@<63~j!GZ^nP4u;oeTKaGUf$?tv
z`AopwSfkDf`@-U2okq3i8UwRtr>2TVugh#MZVePh;zwwlVNOqIX@muni<4c`vEYI?
zf8=k$^?tb<2faV(h$#;)G-U7d2xxiJW7UP+-3YR1h?|`s`-igMZ6D>%bt+DjLU$em
z{u242n7~74irN8`&?wH{DX<ib@~fLgUD{18Z8=Lm2#Nyxtd34rXPIy{vajjG^*YVu
z4dc&;?K&f3C})<6iT2{{fVTw79a^p;|MOj;%2~=t-M$R}E?%scqWq*W=Kj0pHb06P
zzdNC=@P+C32Ib>L$%rf4)YELhpP^>T|2_x5Zld(~WsUoOH?7NAjNXe)@xuSp&IN0W
zi;Fp@upurty}+K0W?`a7Om3V4(PqpD$G!wH0^33nJKQnkjx4={%$f;%m*W&hLH&?N
zAB_<Umbr`Q3kEbhFvm9L<+hM}(_fI<f1;x3;CoRcwPDfmP3?t_Tzt1X>RVyQVq-=r
zv{BMdiw`*ww-36xwv9gZ?TBPY$;zQM3`c6)McDH1o+f{FjP2X4!BV;mrLP;J!YkC@
z^UZ&!SP&OHoKC9O*3-0cm}+rMPd+Hn@i=w12}DPa9yMLh@o=6}3c#-KQyTurp0W@1
zzE7FVclc*{^oD5fa;{T42|tjYT=!Vc6LmXozwy<RzRl+g$Mh^XNO*s&<a?l<+%xS%
zwd^+lHDoW0J+ND7Z2}>l1KDWAA9c<)dKVp-eLW(tA%Yi5We(S$v^qkhclw_M$3kuG
z?9z8q5&$YuAolb<y^L^Jz|uis3RuJfLEi2Y+A9MBYnJxuVMl6bk76)V;n){FAFy~s
zU8?et-1C8f?nC<V+MC+xe*8*k_V@$cB_?1pS7@Dbs{WoF5(i#zb$AjnD9oQoCZX{#
zI=0m(u!`30UcSIcMuFy)-&Of1-JG$hL&sZP9DzA9(4)@%zW~Q*fI6U0pkW!HV2OsD
zuEG)h_)GNc>*5;#+ot)Wu6l}~`BCTI!<~=;v5C}&z6aa5rNcMH#6PMu`)zN}k9`N{
zE60vclo?yMv=(tgU;w4)+40Ztn=Sbnm#*Ia3Jf#F|06qqIDyF74=~o$l-~M)fvL0P
z7~(Xmua&Uq-;R9hRldH(=Ei_+piUfaj_M!c&cC93r(-79al(Fxa?Y<m9hI@J@>$V2
z?%~Q2rJc$KLHaFqFuVq3#p140dZ)|zvCRvZkke!G!xXc;)4vO`b{Gf|gwo1=L0%fj
z*khCO1AyBMTQMx%K$v$AUV-dAGLNW99A^gwa$DnEepgzq-W5s{vdCA89?{H_v^@!i
zQS<kWq9Fdq01HhgN8}oZ%*<hvnr3p7{ZRJOLMBb6J-A@;GH+W0CJ;^`?m&Nh_y=Qo
zkmMr2s&orBb-U0@*;;)%X#x^-Dj*UfAV&DA{lUK{2u`W~LiK^SZpf(2v_Zq7&M8R-
zLUJMA>#Xjo@h4))5x4mIL0{Q*7z>Ta0GI8H1g7=Y954ry*7fSX-4flRRp39!1F+5`
zfU}2)NzZ?BYwn)>r{yqu4w4Kh%T43r-xQ1B;Ue`6SjhgYKe=uK43}|@e<%3RXnVb8
zXmw|401Y=pxXCaTQ?>34N-bfw0JE3Arr(+Jm+_bh{N_2f!9B+~YDa4F(`Ynr|Fh^B
zM!4hQ1|W4#ll?=+PCv^X!=mO}?m{Gh2MPTGBc;`hG`L&rR60nUiU|m)%X-X(O3e7v
zZ_>*iy=MGDeUT;=A~~cNifG!9tl?LAo`mZ2Ug{t2isf+6=2|n=h-H&nntf8HMAt*%
z&Yg^#x*w<=aCoKGC62D3i!#F8S`U^oF!)jGprgN@JJ)TPCv;x}B37)KEp3cN`ogi_
zS|FhyFUbogFupYn(j%-t7P{mGDc-rxZ^NP^UMd{#Hc>k;Cg!RfEH!iB!ntE^h$bmJ
zO&J)o`<?@oZKzfrDJ|q7ej7RK1|>|@EwT4LQcqt74va`n0yTe_G-U8xviw_I^J`BS
z^%20%%dnlA$dwQ4&*2C;s`5`|wQ9C(zeKcbe>*SX|JSUW9c)2CtYQs%q<atAu|Yf0
z{;7#pJlJX`e}KkFCK0C3Grm6HfwbFdHguW$&*DJJ>C~(~yuU>WMbFbo8792%A9IQk
zDz)GFcYBr4Qep)kXzGTJ;8Mh9UH8fA!u?<75-yEixZWl2w{&kw&vefvw?l1*icRbu
zw%|Ky8a+nwIUyV3>n<;I_gG8II{n=@8{>EKZ0UCaiW;iDqJ`|VQ&g4#5G~VNRnH~E
zwOWr!)0nNGS8;So{~gF;yF@J3{*HE}jW9kW-S0=C<Dt#L=tYW6d+~P4{zP9%=@ZuV
z?V>Plq);`ZV<U)mGbiMvq``H1+{?)OYvgOx-}y)~T2q!FzTPT{*3UkTPMl(KZ`NjW
z**3H3TTolL#CIlLKa(E!5-S4INns{;<?o3*O<BZsR`+<7(oziK1*y8B%sAGT>0)h8
z-^zf!B|b#+NV7?8rZ~&z^?R<rzP^?G?X$bAz4OJf?x;7Q+N<xbg%=Cwq%%BbEj&{`
zs3M47Hd($I1ZnV&Fl+9Wck6o)76{+@6Hd(j6T%|?3-tbfGX9~k*K)}4Q@7=ige?rl
z=6wu(=2MEKoYT<PfOt#q91>e0?m3GrJYA*O;KKotY%aVtz=T}=>U|$lId-tAfTF3L
zQ8i}kN_hQ%Vo5%7n|^?m6D%2C*9m{Jy5unRya<Nk=_{|G0PgM@l|U~&<2qaE&q!FY
zcCh$m?#SHR#)I4G^%D-QHDk9ZF2Du8|KFm~JioP`UVo~uE>+Ihp%qirj8sL_^=-rX
zD300{C8wNogW+dt$LYQ(A=)#Y6lrq3{hp!2)bLAnh_X2s@GCiCox^@+=-)qK7%Z-I
z5MZQ^haBLTS|NLZ-5_tAgoT&p+(K9E;kBDy*@ziKBf$%MfT(9MMbao#$dqFqz4DR)
zYHoi#Guj_h2gB3r7uu<C!mRiE%r}XqoW2Hz6r}!jmr)sSrT3SvZJ!A4kD0dwH3l5!
zU*-tf%!#W;ZT_GoTgQUzz;}Cf^>E-;uPQzZFV*}i>#kKH)NZ`QAkuej*SN-R1z?o!
zv1qzX)%NHFKLj*)t(gl=qddhP(meb(z24I8GiH0)#rr)hD`upYe$1ER_FQ188(MTY
zJvk0+4L<IF$J=mkb+iP{Oj|i4=x|6PEa}I3^R@v*Ml{7H?v#e`8(06#tQVSumw_dW
z0U>7cHtB|*ZON4qrhLcNur-W@rp>`kQNq_UdS6OKF{<whgeMZntxlE!P|db(rXxLt
zuDs_*m|6k!ZDZraxcBJ{KuaXwdd<@XFmSg6aI%Y9%l0|Yare|jw>?Z_yrBhj%w2ks
z{Y>;f%z)I;!3MOJ&+Oj8vOJuoP^&Z)k$V?DWlv28_{h5ecQB(>cC+m~8Q=^K8HFNH
zBoipWDJ4%>gp}`Z%udfh_yJ<0mBfX>sai*Jeyq%@|CJgw@42?O$tWb?VvrzF&0J^l
z`1wi(j1a7Wt{w$4hmXhKoBbPzC}Z+fJbSJegeT{E0+4BGX_zjGx(Z(G{uc`LPX;L8
z$0~$s+rHf<V$1a5UpS&=1R!5qov;^E(Mm{@OW_qFs-(r9gn<|QkU0IDkJN<eTa$f=
znAyW71;O5rGyfZ$42X-az`H-0)amsW<B`Zb;4wpA=aSMw7kdW)soUqv%vQ^hF+W|1
zm2F-K27Iby`4rIN4+DVcs&zSsDZqUZbhc&+X2T}vU@g_x&x)F0Y;k*e6%@$SU87>?
zQYPwzytZ_2xP`n=B<}yU`bveT|L=&sd7TbBE=g{i>E=_y&<jf=yrbic)FEc(+CW>m
zO0C0w30fbz%1k%}7}!+M;Nbz_5up}ly@x;;S{oe05cK_+C%}<UUHH}wI_r|#!(nPX
ziD~l)+ay{ey$XkZnzb*;9a_kUVt5>HS@0!}q=eZHkU?0N(a)AUVvE<#;=PPcITH3>
zIoO<Fa*une*)J88ejJzAhVYB9v$IQMmR`S8NcC_ti1XsJsh3br)9SDT#yMN12<KCV
z#Q~+x+a(#t&tw(G!?fp5^(H9k;OqROGUqdIo-GZ-Z!y9q`M>7hlHw$l>}=_G1lk6o
z%!-<oBC6N_1s7f&f_IZW9H$=pn*X1DZ<B~~eK}kF;`s+y)`_s(KhoGYK&nqsec)up
zG&J%~fOOm1qL|a;L7-u!qX`UI@xPs8p3CfhTHvOa+m`F7EZE8Z`T&X~?dJ~cJDoDj
zi72ttZ6Y5jx&0$7EfkNs{P){`?Y>@TV)Fm-_YcqG51HP1`T4O<_qcV?e&);Gp`eRK
zbgs$rxzm*Ps!>t;;GO!o3!Dg^_8s18nR!uH#90?qRL}WU&@Er!>~LV67ED7Q>O8Wp
z4WZeTBoKF?MRv0LU*gi!>lpC1HqZyoQ?aXON}TG#<02TyD;j27N?Bd}esAtjOZ#HI
zasrfH^&fW2g6z0)B}VQAysw?J-7Aay3O?W|spLE|M%B@z5&#8&9(vgf8_+VO6po;}
z`%R4Z#W|9yqk4k#B~hLK^Wmgfy5HOj@D;w)1n6M3*=9fNOg5?HzC@1HCINS&T9Zrd
zj}4ucP!WdkHHsaex_-xmakN(6Yx;iO^-sDs2a(QGJYldp1H-c*#$AP<j#CYh)QLYl
zBKSi}VFbO2v#|Hw+N&jbj$vauw>3&i9E;FmuFXg*N_SMb9l+&F7Q^`U_9uCpMqM%2
zhO*1P9cN#?(2QhImqI?4dwvzyy$y4oD!HKUT=ZYGMDBCML@m>y!_=#~2cNvij!Q{7
z6Yw>PDx$hRb;C-Guz&GfgcY~l+c*VvDenInF)F!bxO?K9_0R?GsN6*RsBdBfn|PR*
z_J1^hyK2wGT;D`!zni$g9g}<ASWtr4Pz+PoOQGCWsjl1Qi4xMS(*1nQL#dhj<8VB#
ziP#_Mev!z2%GaU7x8RQAw|>=H3ti-n|9;yz=6<^02zRT0N#7Z}=!$n-x}Rd6_B)P$
zw1B*c$Z3z#ff&uPnlI(W3RG0WlVauei7>Y8T*ox0s;i%FM;peD)h?8zk6V~OrTl<O
z&o=7DfjauGq>#~4O(85xWwbWO=46cWG8ABYx#EV?>+g1Qf3FcG>?TtcK9N;eTD!yP
zneKOA5uM!qKL?(wZL-)ZajyKKC}A$^9E}55X{o3d#-=)2D`X=xMkz=Lpf!SgV#jMw
z`2g?9{YeBq>>Q1wn*zoV)0zom^8}<*#9}q-Y)p@PyCM;ru-ocV(m%Vs&#A0-d~P1{
zP?usZa#RK^kaZfpZzrWgs&BV>pNSG;UaC(g<T)N*zTG&%UBW`0IB^zK5jR4|6go{k
z&-XdCY@WCuVBxED)~H*cE~+08!r1k6zr0Y`F~$V#7cCyKHlP#^{oSoPxn-uN8XWkk
zXGa8cL0xKUoEv#jjG&pOQ3iurp=+IMiq3eOaxL@1I_U0aoDFvrNz5tQZk*9C_``qI
z@>_oslm)d%%^!W-%EQ|ntxxo<*-D-beBqY)*?v>WapzH;MLU4Yz!_5ZIwN-*<tL$)
z|08sNxJV;R`QR@9|G3_kZ>i6ye^+Q3UQ@o1Gy3{}+eLxCaCLw8)_TtN*;t`phWooC
z>58n058KJX2fa-~ne38wzcd9?oI`;8vFhZ|+0?Elt}Bt5FZ!#R1<ecs;F6=ilL(F#
z?9oZ1`1aq`wW8DP)Xd5*w}y}h3-+xP@02PuNNBM8LB;^ddw5>4rPaIR2euWnlV-7{
z&p9L%ycxq;*qiuwY@_m&7crE5)`IFl!;-UMick*~TO0q|T4Vt^DmL*MdNfo9nb$)p
z`366Y*bGhslYGtux!apr$>7e%z1JyVwpQrcLS50A4n)QnNU>mQLiV#Xigqdo>>$q$
zp_Iu05hJ$y_wSD@Dk~E*gl*S_Ok1E>9V;OP8>FFHtBbpuOaHmB_N`CN2uaSf-<vrI
za<;S4O{bJN@<_RVgJLj3{=rr}<xHI0GUBto$HPFX@MObBqBZ`YJNrL!sbJ~@&L;%F
z>Ffx7-XovWn|(1Q7sbSP+I07`D-3E@1;fx=Vf}`rqqEt2U{shJRR@W#nEJ^fA@?_e
zx&rwDX=5ze6VtwKI}lR9kH~5~C3Zm-T4ONe)*!p))ksHo$FrwmUnZmvfO_iMoP3IA
z3%bk8yIt9idjnpwFu!{?b7>c)z-O5;>Ode9g~qFcHdiz=1Z<zkDlhE=`@{jn`$T#@
zM(vEV*Kud3OD<Bxs|1ZZs(RBi-$ZP7{~k_gsy7B8+KNl36}M<LQv?mY5ZWI?;&6Rn
z4ax{|w^hWwvVa#LPB<DJHgti5pIKyKA-RAUgzW(t@^$Y<v&$||r}rlNC<=M*zW41C
zN1Mzz(`ad1o5(m0PM3eHQ+Uyz1!ZeEPE(JYqqr9O))x0f*ye)ttEUNknHu<EH)zvQ
z%f|aLAdVdohg$~~<L~8P;fRa~4}3ZP{y%koBn}+gC);2^MyraSO$>F2jI?$yo7q9&
zTVf#_Q2828dB%pZhbb}`^VZ$)jU~;YN*QrcDYvM7=RHB&7C{4n<34WxMIjM3ibUCx
z+a?|UMEIcYu-$~d`H}cIOy+Ok`@#nlOTh&e`=j7uwyw?T-W{lYX3#=w48M2(xMKP<
zru%kR1<gQY$e63&0;e_m>XHBV<Jh<rpPbocBb-4;YiyM7M)H2#eqXRfTMDbdFIisR
z)yUd+j)zMFr&x;|;@{soH0_V8*(*$i#cO~-a@hR*LQC>qBC3V5)R`Z_K#d}IDKpZs
z{#5dj=Ui5K&FFUEW0B>-r-5~Th5pa(6E5Fh|CiVuRQ%*q<xO{+2w-3IN=>$6A?)Vy
zg^Y6Bno)cChH(A8*J^6J98besok(QLfxa&1pTRjF`L{MTi@-Go5)IZDSA8`Q-F;Y}
zqqF}_3gnmaSk|I9sN_k+7sH<`K9~(a{2E-aR#<O$X<Hu11AI5xX`*ppxVX4G|FP%e
zNE>J=A4Q*BG1Om=`Ak2rlke}JZg84v@^VL{^C(l4=78u|WWMpyL@~?rL*|{~;bBcx
zPZnvXwzvk_fLWc5?n&iwY-QDZO{Fdc4u3AB#TOt7<pFef*G%C~W6wq{o6A#?g)jT_
z`Ue7?L1G+9o-_YC%9c&mX4K$Watn0<wFLW6@PQM(WEQZUPkd_J%PMi&P0o~Yce2y*
z8mU@L{26Nlg`b_&>%G0dfy+&VUBRggkhdQnNu%f7F>Y2O2Z#05n^O+b1-1hYW=?A>
z>tKFk<j?OH``miSUU;tLZ6!f7n`1$vz(_FCtR(-R@U2$K{7ma=S&BisYqM7=<$5`t
z4&kRDkoNrxj8o(!9yMOgy87-O_k$+0ic>)Quoq*$ZF~>QHn-$)TAWuNhb$~zi&gGY
z;_%`^B2tDFkG}#vg}(ML;p_CQB&rVxbcm$h-{D|hleVgvd{j#NIS8(1W;V0k-Q8^s
zBKv|!fWkIXVeUEZ#{Ytc#Oe+YYjf$Kb=i}LfTB&5uD)6)b_7&~$6XHNcXQ@Rr1%TJ
z7mGP#xWm>_FHXjU?>)9O2ZVbI09fWs0m!1{8%o<U+l^5<(vSEAWi}K7zl%0rGnU_b
zPq|FLd#4?2{|#+L7xhi(+2B5Cx_kQp!)MUEheU;T3UffOU4fyF*AEf^u2Mer-{C(-
z=QJ3pF!hAQ4ZV^<yilaceyOf{AZu6)cPHT~Z^gdw@t(HZM6RXkv?+}Zw?Z<X<h||U
zSvL-t;4?3CH5;47#czMVfq-O!B=YZfsa=GhdrcyL{3&NnMo_T6v)%#Uz2Ref9hDKE
zgP<{b3Kq9pb5)9y5O#S6Go`~S&r=-)q{tr|gMBaFHDq|H=7VKtWAiQ0KV;;}HrgpJ
z)QX#n4$5|wte0fF$>Lq6RrNv@w__j<^h0$Q@$k2KJyueqJf(!OQ!A<}6ZvFntBJn>
zdEaALPeW4^Vj%cc)I;GEjc^BB^JqTsxt~J>&}-FE_k*edO^WEoBityCs$8~*!c<Pl
z4DzRT9rq`%(pny05fRK@JW|l(d!3+GWn0*W!hSeUO~o(qke%#8{<vS!L744EE&#&9
zZ<5!|RkiV(w0eo6sTX04z+(NWqW7;#{HYbg@2+N5z)Caw!u;Ofq0FkPs`dokgb+bM
zUc&)Qg2ri3S68x^!Vj+PgFZhkKw5QIE{^yy^6EHbx^S(2qUZoKH9z~r<0g{ss$I#&
z$E;TT4eZQoWMhhk^#I=hqzK>Hv_KC)V-FFB?50jUFFthpX}7*Y^?y*<|1)B%in%`>
zjl4%OXH4y1YDdB^k6PW<;L#F1xNZ3HWGLbmkAZ_NU|7Q|P*V0So8#!@5&6$|CN+?x
zm9nnRjuZV{tHvT*DIIZ2o^|e>r=mp5ib%~{0F0_@qgOZq$eSn4D~0EJ2l?{=+Ia1f
zeW5{BydpLxGFD1rb>t8EldHRl%HYRA03JQua7rrK-||Mtt{fkeAnr9$rvT(}*OU?a
zx`zVgX~b@JVckbkWSU=w*bx?j+s~`-TPX^%?{)9czuDP!j!kP%k!?{sT?7hWbSCY2
z5KEf|Z~+tm*`I9*Y0|bzU#;xXlDT(!HQlM}%uH1Odl%WQjc>X@)yK(1ox30TYJv5f
zd*{rYbHjUcq^rD8xXg;bRSL9JOo@)%tNi)%Cm2BKktNIJrh4Fr44C`zpYy6EjYiBM
z&jRB>Ecs1&+8{_OFlTMNC=&Y($i<?Y_6e(o+|V5$<%aRZ9_(K8Hrbc;1u`aV6RXyO
z9BB(a(4D>Pp~ZSx@<629CX3+53h)9F<Fh=j5ps})@5gVLwaDd&pN1qm_8j||*19f<
z$7YKJuOuz>2kf%7?uW9I+4cv-X$e3Hm%Uq>{7=GU4_0}h0Lt*FGl?4X`tQS~XA=Uc
z@O`$K>7Z7*g(ZC(sdz$(T<$LVp$g+^i%;Xo`7u|D@B2*1ujn{e={-EVn&F4A+Cr}W
zo<qahD_^$nnl^D(iZB@L;i-0sQ-^M~;i$i+i<=_N=6Xg2X``onqBv$>qOQ1QdxMs|
z+^6)WuiAYSHKt=^`wd^k@LKbaUeQ`cSWc6L`#3V(Y^I05J^N2|hWIF62sL>a?Cp+H
z5&~DJN(@E?7^V@6G}dY?WJfMvU9)Ev)TXUGlGz@y#B_<6^ZeX~eAR&qwx7CX7s`_7
z<<E5utabZ6oHoQcC5fPEU<9}hs+V>0Wb_(Py^!je>C+~(-|Nl1`eYy$6t_3`xt1fI
z5=n6=DeO%)xd9-^%WRwM(y9%01o#`7dD>W7gQgF^4SfY;uw(ID7r$Ae$z&W_uuj2k
zU<XJBH!qM@v9s>6m5J+kY!L6950rCAAaKqP^(s<{d|nfaXA`{m_q%;Egrg5*5QfeT
zA)}XQbwY6-4%maKza4?zLX}7C#iJwu8Q~sadyoTJC<$FyD(WVUmqKZ00c=5@5+N$g
z2BIgfML9-TQLmzo4c*As&$z0zW-N_`RwHPvalMAT4U&(ZF6p)2gYJqEQ4Ty@0das4
z%B5#}(rs!}cpZ|xvwm(*VaYfmTQXWM4iwWM*f@M-PLlIm8S8<p!7^z!m9efPXj)jt
zf&h@_#sE-sqBoFOD0GO)5H&%7`Pzdv0Kyf3bPQHB@2!*O0wNalBoIDe>%IRn>N06G
zESklNedOr-1WW&)w<_g{0TQf1<9p~m0DF**9(0^Jx_!WJD-{(T3CaS{Xc--mOo%+U
zO5l;?G#=?Y8C$iQP`69yPbW({0(KD2$2-Ho{bi&Sz`o=>0#s#-&+4<|V*=5r_a#`V
zx5TVX1y!8%vw>B`#vPt0GuZ@J>aAul!fqiNJz)Xewd=2-D+GH~I}r2)kTced=98*C
z_}@xON`ds{$w0ACz0K_N{DsE^O|W>5l<qkhH2Z5FIOWP9r6xFkYgyQ*F?E8)6kK;T
zr8{7_1@CfM^&Cl|UU^b5AwEHb&!Bu$Kl+Zo6nt8kvL#&`wX#!IYSFY_MC=wExiTi1
zI4;y!UWnb)K(DT;e=<Y^rWtPN0-lL)5pNLgVyP}D2cvYEQE&Eqyd}>w)>k(xyA^c&
zz7y#4V$pjQNpq7Va;q<j$E3M?(CT4CcJhvXVN?mg|5X_Dh0Z4_^E1`PcV8?R-5Pr6
z<;m-t`asJ#$!4^4sX^Q%V&kXd&3^o-{8y-V%S9v9mE<4|ug3zupl;y+jVz_F7fgZY
z7*FE24%g|ZiCQngev3I8;@iMe9C<#&L~BS6OS-Yj+(9QdI?!ZAq2_Ae!k>M=U)Blv
z{UXzN*izt&??$M@%+6ru#^!vPli>=a6v)6`rWA?6cP<64{ZqG_`tv39FNh#O^sM4s
z<K)HcWg#nGn7IHf7`Ioi)MfPG;DNFxLyT=UyfiubC=s}dq=nsq<9AgGj7k@BRD%%Q
z$L_|cKLIGC@VsEAmUvUfTil6m8%dxXYJNll3cY<;Zy_T>e`xM=`T}~i_;~5wsMERR
zd0vS880e2kf5T{RQjYC$x2O$S2Zj?~{<9F49`^aNHD&t@C*7PU5QRmzUP?^?V2Q$N
zb2tm-rv4+9bEL(T)DJ|*S__PnkQk5GwmbVGd$bvl5S%|xTgk(l{0pj=gq-rb3YFGw
zvY$3RQ%#TV7w)T++~|lYqX!Ur^uFdF^HNh&e=v)|K?DH9JlWzbMMT-Xzo&B*fRI>C
zuC0Vi6Pf)-qQaBo*E7;4G<GuT%?6C!-WD*bgyWA)G+_g2d74?ENs*Afj8U|qOw$i(
z7s;Z-HE^qkTMYhDU*k^zr!9up9K4s@j>OIDza>!#HRBDSo5kmn1Cmf9+nJICxqrq%
zZEx>SSGf#PP%hWfM=f+qbP8{*)&puhRM@6wIwlI)noxM*B;_iqDT_Vfwk;zzZ)~Lh
za18+9x9ND<5-Z#vNskY(7AXu++dZ$CXvo8OgKrYoyrimS)-|Sq$mz%U`3~B#3KP^e
z?2Z47BhM@M;NA2>g$weF!APgAy~S2mqyYXZyg_yQ=RQquK-?HnhQot>+`VoPo{5LY
zr06b6FJ}%i(T#We2~0Og-IJ;DL#5}`I*pa3k<BUE;92-D4G5iK%NNJTFyuyr-?Ds4
z{SF-^5h*r7&>a@S?2FU5H%vzF-ZAf8eWkcC@G{My2wKItbMxPS<4P(@wZ2e*l8q6#
z7EN{4o<vl#>4|%Oq3HD+PH_aY`u)+}(X!q#-jgYqHT?0aKgCV5oU>X#m%Q6l_c7ZA
z&>@!gk{6JtN6CQ`#@CKNz52IevOLpvCNk^#%=vYfU&R~ic^#4Ke1=sn;}pBxG$e5E
z&yC3q+e0CXl1wwvHLb7;!cyP9{P7Q<>$?h*<|K0_GVALe;5~fo-Wki`9~b&*tpYyv
zBz<MsJv}s=pHVB$JfHdH%a_qg<M(0l@d+nR0H8JC+=II7*KbtB5#I+1>F6YA)~$^!
zr2&;=nY3EvfsU^{rb{8z&<5Oc(DdSMdm5%5s~NeaivE{*X=jhDKbk)q7x+ho$BsGK
z`(2mx?@19tB%3iuT-6|A%=Z?*(?o?q6*yngz2^W0+%a~VVqLivD_YhegTziDEJ?=y
z5Y=!Heb^Jrk&YiMMStnOm_VJS%NOTZ%9I>GgIrXC5@2J=TZMW7opF&W0iWPIoN=_q
zJ&Kh<LY;L0miY|o6s0N%UOc>qz3HDP1viF2;@D;T-B3@?0z6&0&y|xd^iMg=k3X1D
z@9<i4Y*=l)W%IPS+~?hRt1&6zN$*K2vSPbwsr-(Af3ZFR4iLo3hHomb5`#%FT<oz{
z1cQm@0d#rtR$$i#0X5W<lmhL7;%1q4Ti!!V1rr~x{3_2np#WsjDcv7)N4G$6e2VZ6
zW11Q~wO)&&K^6y(xri(Rby~eodgb+|;%dr4?gf1C;^BQP%fZR0qt;=V>L-g4i!)N)
z-M{AAEw8F(o&LFs*K;yHs-)zNaJv7xO4eoq!0$;Ag`I(1`oz41(b$VU^!SW#X}nSA
zk?np?M)wlntbhfkc7OmH%-9XF*myBcQr63Nz5*(_wl9rT2-%1(>i=;>ab=qf_(h4&
z*QLzko8pMEL9r1Gd}W5ECY~0pxzLIPVj8&v5LG#kQjUz<drcHmxyAGN&=yt9$17U`
zz)aPqHC&UKLkc+H1~sL@`0a}TFK3!Rq(4kIkbe2kvAIBIHCF=wQp8wE0@N}hQ74q*
zQQHQdG6u9F{7!2IDef<Hw6J|IE`{#Nli=;!$H<G`16E*^!6)2ab=Q8lA^R4)h(MTZ
zA1W9G`S1#()S|hKiYFQZpyt!nfL9I5T$<UL#lcL#b>X_%{dKx&j`KtZSDtr&ZX46n
zr9gAemhE!6WF7Btsd=Q>tDaXyroIj(6o)NYcBWm-e(F4ss-M{jXRwfPANBujYZ$#R
zCG_{CXk!cr&t)Gp5szM0r3dZdl2IKkY5vnLeUSL($e^Lc!{p5P#K{u-E`PxcPvcvA
zO~A!7bk5U%R^}F6sjV=pF2Y@L)~;ctQ?e(;^BG%MrXYT$gMP+S=a>_e$qCW0H<z6~
zG!ke_u+!M(OZ7^vB3erX8E3&5#-4LtPPLs(xKS8!2+9_<&htM?!3Jm$177(<r!slS
ziN=P@&`WzF_*XEC220mdN6H<=%u<ZvM~DbL2(bYeCU!mhLw`KF9d9HP?PYp%D4=gI
zJt2|7#*m{@x8xVMHR5owUQKj8WGzE2nRq9g`T@IX-FmA@cOulMCwMP**CR5sW)kIY
z*!ur5_11AsM(zK&A_k(MAf*B#C5#XdkycU$f`p7lTBMYQF)&a<8b*i2z)_<|4OF_D
z(I_>##x`KY@5bl%d7kh8@Y?RP`&{RG*LCo=BNS)d)jzxZ?u1)U67g=A*<W}c04xEs
zs_RWqO?Awcm5&*wtb!L9tG+1Lb0E;gZcc<O=EMD~q}N@c731TxO-CBwv#!O}^2mbZ
zpAu5J+cWYVf8R+Mm9`k>>Zp%>A-5<hDscb4rLm>!T(2RvZ)^u(f(=jJ(JmJHY$+d4
z9JqDwlK-Vx^B7;(Tp5L9HOe&RP22#((3-hW1%ih5)_B)i9q+h=YjN3DO$(RH{R~{H
zaj|4nOmf-e-*<jOv*`6L(}({E?W1qKrD_8KU)RiD8*Tz*)#oy{VFr3iBNm^I757c{
zCt0)T22#`YMFD_NzPt6lkny!4FCZ9sxD@c7)pa2A>k51>qSC&A=kSG>nO#zYl2FVd
z3xp;i{@WWQB!{?wXJt3e)pF%6E4s!mZw&!Bhi7%u4N_z>gX2FE{<L*7*kJbEOL)^;
z$!kH6ZtD<o#5#A<Yc)S<_;9L+$xqNecAi;IVVd<_3OsCsRVz6Q=Fr48eILO)$x2QZ
zJZ(G!z7`GRXRcg(Xx5C_eu#LaQ7DS{E=3yIXJ^As6mXXE1W9(;-%u}W)cO^AM(n?1
z<R43`YHEtFMBh4t`Y6spf4z8fQ;ui+<L%b~PTd$;#@%SX+n;6;kp7TE(q^UUn<kKz
zB{F62Z^m!EAd+~;v_Ak_tvB>VN}A5pF)py}_x#H@hP``(AwiBblXpE{1)j@`{s^#(
z>~-{WUN17FJ#ha|UbnnBqd{JTd&g_O?li<ttE^Et^V7dC7Vqd8blkJb+7;O16#dqn
z5Bi&B(OWg%*z_hxE;1SikhdR!A`2q{Q=SdM=Q%Rj#y2lVt~Yiqx&nuZuyug2!p$>{
z<Imlk3Dc^y9#xyW5NfLjh?eEsd92Yy)3W;2t5+-#;Zru~Nt$67y{*%9*l|bWaLf$>
z9~l02V*z(#?GE?W)>)crwmPzY`}^!g<fyaJ2F!Wjm|AeiAIJ#Iyl02{AS5+r90o3+
z$>F?ARXW0++%+B@;r{qo-G%#Rt0Q$IJ_+pyO|EzHfUw%*Es)<Cs@AIC4YrX<O5dt!
zcAY7|mf#i&@CEIn{?!XL*o<z+iL%nWO9D)_bs#eIM(4kG1NS3r+Mb-fu~?~<-y(8r
zkQgdu81aBCXQ=7%t4ZloH1cuE29}Qd+o?A;^b7gZ#;CNb%QOkyI1gKg0?`@%ew}#O
zHw&_m6XI4<qlC-Qu&7f~F>dZvdVz#`NWJwN_QstBw&vA~g);Ud4PRz4Ar}y*B@OZK
zhkX(X=)5+D3>&vf5i>q9i#2Ws6nMs$4NTZw!Jj&Fb;M0;nuJLqU><9;^bAnx_XZNe
z`wOt0{RN{xEX{zSFX-2ij(zHE_4u<%lwQm&UU`mN<CCx_|2AD}&|A+uSO5^ZSInnG
z-!>N;x@o^jm7gp0j@gxY<<8BUI~D-lx(RSrW0{O)N4NQYra?XTX5`U&<1vRG)Jw_G
z=MJMtXO>wBS>Y9DM)0`t<ac{mBd)l{;;ZEK+2_x$>3!&n1AyNlgS)uv;)*Ln*D5I8
zU`fJ6@MjrLBJUGFw?5`_nTrhCNr$?mkeBa7l(sCP`g!SZe`w2R$+BZj;B5`C)cKu3
z69oI_I6FS+^Ca_3{z}ce>X`tuOEX(koO`!iivgv&sw6?6*Wn;J^XJ#YWES5^(d;c_
zH>9%-Y><oh<rhte=g2BFK@F<`y7f>W8<!HP-ov7`y%l`!s@Re#qLDnFvQ$EC3ZPu|
znl#b1t7p}%z6p4FWRrm7U^pm}eN}LQKJP_;P#D_}^Tv0@Hnk1Wz%AHXmFK$BEoT)g
z*2Ie)ikS$6U$+j}&mVu?1F|i&%1TNyX&Bic(3z(9Gaza+%+nF1FMHhngMn2LA<BFo
zZ<=NMalY69$5bY>O7UBZijx|Ul};uI4*ulfg2=@#GF2qTGOhuLo76{26P5uN;Zx{`
z3_lNe4c6`KjCOENMFwDSVz8N`(~EZ@LUCL}F$&yJWk6c8V!I@G(I7NyU7W_fdOtrw
zKRHMV%0_!z^6BY5`9=H=m#bWHJsP*eFeE(0B<~$`P-g_hI+XRn<UDzoQW>TP4Hv5c
z=3=R)WA({dXgY(sLgQCdo*7i2{Mpc9;{+@5LfN#fOXJ^&vvRS`F3B1lA)P%{oIPzT
zQFg2Q=x)+15dYd~XU5SP(s=xe%J$}rUH2qwDTgwg`23YcZ^pW*j!?uvqIcJziDg?Y
z*~4@PXZ;Uk2KI~W-F51;cOn#YlN<qp!pwoZ5NT(=fPEA<;~Q@Hp>A*0n(^iAj%>|(
z{>~u)&k1tz??>LtBsK2Yc0KH48<&vx?UB|PCH=g4j0y6&92#fmVMNEbpmTVJ;sB1~
z5y_DZ$dYybvA*%t?-xn!zBLX9pXRy245vLSt|#{=?TN(D#(#BHDC%+V1M-&5?OSqk
zj`mRX@v}GsXtJbT4H9OBTI!$3r~XvVgAQJ00d|WSz^}7Ix~tt)HKC8)q+K~4cqA$j
z_wt)^?sZuJLs}$z1-j>XBL{*aSgg~j*QIAFBz2EEcZX22xxf&C)c{$_3G_Mn(<NO=
zMqMpuGxyIm2?l03z8%-Z^7>v<z$3>o;*unL`VkPa@20kfHOyP#OMS0Y@B;4}RephD
zm#5d_x*B<YdI!p?*~T+2RF2l#&pz8PCQk>V2a1i;v?Jy{d?D?fE<ws&N5dPs&%9Km
zHI?c(7o*zWc$|MXv&!t#{eb;)-QMQWu`xTUX9yp-c;5gRHxVtHD!CEuG>NR7ohKM$
zR{^vjMr${7)C2Vma^C1}%IZU$%Wx{Lw~aZOAPYm;Ni4%%qP;*C>R}&~e$eI4Rj&*z
zZc4N(HDDGh3xtwvj$T*uR;+t$O*i6%^16K5ZOdiTF|7CP&Q$IX-@aSBD-6>E;S=p_
zhw<)A^-06dH_j?Ejkai49lz61^$>skC9O0IlZVP-Q*Y6e#L*vVJJb0I5H^Uqx^s@<
z8qbpK`w{XsScdeIphUwR@A}}2&Q<tbMp>s#_+hnLw&0K{KrOhr>;Rl7=A!t^^Z&ZK
zt)g2ReKR&%#SP9tFgvD5-tTp9_T6{^Xx1VL$hGHT9rW6crb!PS0N1Ha-BSD_UMY8x
zg#>7)JwA|GVITkokf~>6EBacWu#X?1Daqr`=*-`DQp7G|JZAdu?0?><tox-M+O$tN
zH`+q=U&xL->#)Msn@j~R5-gQwRA*3cR3_}lIX5&TVM<G?Y0pd^iKqybPj1XI2$*bR
zfhc{omUB@yW70Q<n#FM3O!Zs8t;n?ylVR}Hj9aRF-x_d}=`YN@*X+AW@F92S3VTs5
zRmXDynwz<(#|EuC3y!^A@zf?A@Qjha2O?$1-R8bsr2x0I?pd2E-%f;M(*Cah`<AZH
zazLYU4}`>*bX9YX<KhMZk!$Y+Z)_C077(JLm1|sRlswf((o^tV$7z@La_pY0UgN+j
zF|XXdd9zebipO^=5Y)D@jp@I|amqMuR-EWF-T+8E7XbgkXGg8^Nrqn5v-aR#LQBou
z`Z3+rmf{e#;EA<&<62At8Gg0Cd7{3t79)ERx@#*i7w62gARoIg`ZROs{}K?wD3Bh9
zq;4*K3Uj4!O(L0KfOhy$A9>i??j{~qSRuV0Bt=->KCY!T@6hX_;Ye>Esjnlg@#9Er
zr2yu%bCKT%;yFP7>(gB%S)t$2LbsF`@7@@v$8}O(J-jRn2rw2kl`%vTyQA$w>9t6$
z@B`VJH%B;o1RW$V-c>jZxM>C?S$E9)&9Cr#^qqCj$&8V=ddC)v<)GaK8H*Ts{5GC8
zwfI%zl4j6Qsa93&`o=}3OaC7E`F4=;a)_vC?@|dYR{x$8?z)#rotDr81mk_W!|1-_
z+`3|UBOnPStC@f|9v3P@)0!9@NduOj8(jNMf)yU2!NCShtgJNw>&?;9asXUYSG%9d
zbdU-ph^HD7#}Yr&<jubrry0I}f$7$11OT%ssZQQe)4mEXECE(!5(t+yC5H<Gq0B2w
zBjLgwm}D;&1f+KhBTsf~YiVoD1{USnC;6%0>b21|o^>0M;1T{~?|&`_?odi|Ht*G$
zA@R2ma?gVX=pw%7BsChk?*%x*?wviCcZ{(?xcd`F^W2==qsOGGaj5+4PAS45`smI<
zeX;Qq(wmP87f;^RrkZ!)l8$TclXkWM=i<|-KeQ4R;laV)+@hkpKY<A$UiFQ~tm@<U
z4**pwtj2G+VR`w7B2B`)_`%UI?X8-K09Byp{X`j1{VO{w+6H)*F3+9-Kc6PIRNmCc
zGT$b=FS*#s%PwOUszt<oIr{kDzkdd|w2q&4p482Bt;tA`txd!S;vbTVja>7=DmFDG
zBka31)&X+u=Kp=9JFau0qRoFxoYXbcreHk;F`_>Zzl{H+BIIW++gIZ=I#96}C!Z#S
z!|h612e7qg{O><|RlWrW2Q!%pVL$%jByWuYB)_^n=c#O&8PHGE3Im3YsA-D;!_m6K
zXZOtKW&s=KhkL)+ou4q-gbRpvj%Vf;-9Fv>ouZYYuYOmOR1e?_-vXlG;?Ydg;}oa&
zL|>KdKmYqDb~Tk;7G-Y;(B=iykTdHd{DHney_8c@brf5s%9v4XP*Z<vcDhWi91HqH
z```DXDd6wJ!C3%|rAEbVlf!Bt#|LL~L2M$A=ndroaPa<-B)1O=aE&O9niGAMw*U7v
zt6$zeYjDo&DrTY;TfNsOXDZ?v-$fKg{>r}Gd4LIGr6J?X8ipByzqkDNrFxeMf8-i8
zZ6V(e<kvDX3`yPw8N5g9wY+<_MJem=Yg2=)G1e&dK*keRVCvTux}(2ezqL34W{1E4
zLG9Z82xXA7{Nc!^Q~akhzle$7DQjM5oG_-1VP%4EjROk1_vn8wl!>D!Cx(@#?eb>e
zzI<M9`W|kSU9Kdq^<}UCcF#vQl8c9T(@VLgs@>I2SYF}If0snjIp3~)Jl$O?E$Hyt
zdX3xhXk|PdOIY+G^TWc~20)MJqzO8<KWqJO4*u`Q-c=Cc#Bb1$Pk<pjN4pEjs#-{(
z#oJvdDA;T5xdW`nWgDNe1nR#*|9urXgj;UcOl?-28dN9^%reeEC!;qSVQ=}85BNj_
zyrv{h^^l_6C&6K1N6Jg`P{|t&|IdeANQvI037Ve<N-7L!P>=BcoDg<^`_67vJT{Vx
ztCqGl%VewT$hJ@7=fBlIFj=giKx#>u_Qq<9Xw!CDc~IVq94;GojFd|2ZJH)~Odk9<
zJ~?am8if%`SPK@>itIQ-iiMS^p4~Uno;Q)l`24sZ7{nlA-`ZRV=u1D$<u(TCOLt0D
zEv>S#UHDb%4>CIK?JqooVCEaX;sK_FImH^^^lhO3Tm^E~u|QYc?q}Ucd*jN#QV0wK
z2n)HJkr-E!4M2)E=l_cy2CR3@r!Y-N85SxHTo@1;kY`4*2%>a(DHlGz;iO;JBzpm)
ze5X7n=k7%M)!^yXEigBtS9;BT@oMwXZ94$kNA5O^Z_%bw{pV92M8(BDntf2Anq2wT
z)e<Pt0s-5XL&G4AYSYIm=byZB8!Jv&`9Xha_c>Eg(}_MHWuJ8AMx0vVCAJK!W&u;7
z9guERotxeX3fnkg^<gK3e-!%%pcXR2;wl#Gva_-^uQ3m74WA8V3fRtgvETu_OptTD
z^~tKWf(^cs??Sn7bDWX=9l$!(5m)Q+jgIpep%o6`F!GQ}1C{4dr~bnTPuZ4%1pe-O
zz{j$KEa$Z|ZO2$adXx7Oq&ZIB0k$6KuH5RK3qDE_n$@G5C0oE9t@GHRbVGlA995S#
zP34{8!|4^*%>=BS*5xPW|2ioXI#w1IpBimVFL;3gaqN=~IvFRDAFyp6-0sdKP{&<v
zy+TLM&d&B9eIieH5R{6NoA~SQca}nym6-A0i2i`9ne{kE-fy|OCEg%5+X<KfFP!`b
z&nW9Z5E+2k>A4R_$8RKOM1e;0zYr`{W>DJruVfP;?6aVz_utM!f=}7(x899mTbq?w
z?@HV6vAZJh!0JlV(KB%d;Tt*n3WU#{aQ=fx$~qu!@kPXP;xheb)$1~8?3>ZP9sLbD
z0ui@uj?|LmJ-&XFxlgKUz-|H;6#xrY#(sh6!r4#!hoX#SB|SB{LXcbhU<{CnSJ+|b
z4jmP|sHi+(6gq$?=={!1OkAe5@dsQ)=M?_+9)Bo;!^6T->9!(fbxYrVvHEXh`QWU_
z7h4i5a6cF%1O9AJ=B{@&0ztK}&)rb?4^{N6G?0=st@2T3B3E~fUaO(DQ|HlV4$)a4
z7affcq?NoI@ukdU^%KR@EB`;v_U%Bbp<0_;Q<)z-ZzF*Y+6YKftHfLN|2PTC&bl9|
zqM|Ct+l3T*0(i8~mg0)^Vi*_lLb<pOTf#$80cp-KfydyjUT?1>b1R;RVf4xNM}*Q+
z95DBZ1g(c*A0MC5vUjQ$Pahx35~tV=XdwRUi>W9!%tk_F_ijFo{A{~xPrdVmIWX4l
zvXx~P`gYg!Wbm|C%ekjF&OE6fO5Bp77gd%nwXey|Q}K1C0Z>gAs1ujf;etMvXW8CP
z+$I(<7ufPe*n!b<rblcp2SnJJ>g3-949!|0RnMNHz1UxC>X}|>6P|?HtY8ulBpwXY
zicXGK^QYkZKfYUDWO#P|=EaM*$OTzr3@xG8*Bek7rX?I;;W|=^SXc7`4|QEv71!x3
z9ykR=le(v-0#h+g-TjUv4_dVd;o2iV)P~({^YwA$mO-OHIWW#QKt)-3qpH)gih)Xn
z<@|@nduLVZncY_g*6wg#**~6jq3}JY%9vUDMgBPHff`j+S?}iY;%Z|27c;7Pq(b_<
z|13nuVN+~<ier3pjV-}MauP1Uq$flCZ983K$IHSipgtmyu=^eaI=6k93+NW_EytBw
zeqmTE^llD~)SQWDeyuziH=M&{HE&7lwKl|^t=^}3cvK^XvHazMua9Y7x5P$nt+}=O
z^89FsnV>P9Si1ue@ND_+Rz_!OPL|?WBd2?HxWjNT^xCUC`rfkXvpa{q34}2uZZk3>
zLh1$!%RyXRLV@-9@7|pMo{js(v2-rPGJ-+NKx7~kJ|Lo92h5wHHTRhJJ8tDgEnnA~
zf_8c@g`awJ2RF>ksE#h%7A3Dj<h*C#Pqi?wV<0+{MP5vi^Rz6I{WIyN6!ohoi@v))
z^d{;;rkDkO*nzkkp=}m}t90>iYn$EbhnUE38FW+(Hv-$h%WzTRcj!Zi+Jy&icYPc!
zTONU&L-khWMZhrI<2vK4K%JyfPr*~E$-=0<-KMhB4qONR!iw9AGk)MxD1qF&S-Yl`
zT~bn#l5Lem8gVfo_0LTfkGcfx)TaGWD=6a1ERX<Za1z%xqZ7gEMMvb{b$#C4UmGmf
z;|30Q64*v{doz|NmO#j!7fj2N5R)9Nv)LlSNXrFkqE+{<%%4;sQO^bn-rvQV`Vzh}
zBoS^8A9Dizq(p%RE`Obu<-*I7WR(Y%Pt1^M`lG%T^*R9ry|-IFqZ@Y$7q<LC=~67x
zh2EzNjlGY3Oo%COW%J5)<l}W#u{RJj#%+FmQpEd`4LiOkUnzlt1Na8ddqKUG_Agsl
zWVShs6#4iySO4{GT}KuRwP`*V9Y;Xyri-oaMD8@cFn&CMFHT>BUpoxN%J~k+RZYdm
zFV;Ptwx1=!hnINH3q|Z?K-i+?8P_X2iBG+~_tW$xu@9-)pEeYv{TN;~K%7+2jUHRU
zr92bh%NT#rU$R3{^X)rd4LjbI5pG9=H%iTPN2yUx>A~#(*#HP#1<NC8eOJ%lU_UYP
zwe`j5F)7oCw5UK2eEA&=oovX7BDvOCJz-u#9@^u;9&&U3YfZdFj3K;^wDNXq3xt$~
z8U$dS#<58Z6W9jH>xP5NX~N}3mDC{XjyyHoi!pXqdcpZX;EorG*(>Mlc=V8&Nbm;u
z<?6N)LX?dZUC*f0z7|$SX94<q(gyyDHqH|rlR;aC{ad*D;Qs#p(hxPO**KKJ=F`Ss
zFaiN>ZWY-kuE^u<s<lvT?irq5w{3|kZ4}Lg&>7k_PL2wc)+wii{HcmGA0)~6CA3wk
zrbC~)_#9JZsBHlMT##q}sD+JF#{bX&v(rH!db-U5MA3wUj*!@<&znjNifd<yPU8#1
zV7TAk9>`sFP;8Y1;Ldeh!!UDh1sz;E-(K?u@s$fiuyR5~OgVD9Zyi3@q2^rhD8kBX
zYa?e1X)FC2`X2XHGT#R_;k^VpI&kZrpsB3AA#$~&FINw|FCZtlMEVgJe5`->rQvDK
z1P3X5j`JksMZ}?Gsr!0FvuJ4wrzNKlnoYVZ^hsoP*1a4fHLL>5>}0)1`2`0y1AAVZ
zEm-BWRjv&wN@-N~BY7Pcxz07L@qwGG#)C*+$fMm`Fg%Ue>QQTNeznGinRKW_wf8jG
z`fc}2`YyE$)mJfjK0lCf9Q=a@5Qlsb$+n?he(BDodr<wDr1ae300({#$E3)>iU&<n
z8T5<r!}$e+zlTdTOq^#`Emg&&BR@nJ{7T)I^Rc9_xq<Z?m2oL#t#-z0?Q!*`T2gAf
z@7VRUy+np-!k9F4IVq*j^UGAi#;&)pL!+nFkVn(Zh`Z59jv|KzM_V@i{eY^N1#%&F
z*+Mz);CFku)DG1SNm)gOjqQow&zts6;<2SiG=`yX$h;_TCt(^6u~+JYF3!UFQKamx
zpEIJG`>%mLaNDP`TjIt+s}<vGxOm-G1RWU0ls_Cfx^WE-zhT{ed;`&t(5AJ?^rQS7
zIlDa+JRSR*yMcPRF&4srj=}>j$fnT%TXIpY`{z`&4@b*6D&SC+Q_6j%B_&^@a1_wQ
zsi>v*RuAlz*#9!pU~ruCmuzg}&YyF#N4c7{JwJSF-NP3yWd7w)y+6-cWq_LQkzrXd
zAOVv|vGeqEG#L_hhaqUW*(JE&%@*E;<0SvTw^(@V<$+>z(dV>V;+D_-*m}V-%Q|@A
zU2s{<ggzMNTdV_UVlh(${ZFp7h96M+tLXP&*wCo2W~h#Q$NR#ZgQD0r0?F{hF}Pl*
z63kaw_f02Bc>lT7H>-A^D($x@__4pOse%VSIh6VASt6DfmcfVuUYC$yDtR6?mq_ZA
zH6)3I2b)pf=b0W-%@9XsY6`J8%F9TtqoYcq)EDBq-2xNZfz78z6+$)pDqm;kL)bWc
zv)#5#`POU{$zi7m!VWTS=+21Njy6XYiYI-u>e7DCQ@%4}$(=9XV%VW0k7zJJ4F5Vx
zz35%3({>p|P|VV44B{hvtDot>DxWXC>J?LQ*o)su-&ZtAuJjw69YtJwgetlc4Kx^0
ziOhzwMQ;ZSqD%ksCSUu3Y%AVd?=%?`Icn9c1(%Cn{(WD8WEiq-6S_Ij5EmK}Vsw|4
zm7uj&Zp0d;hU{)$)hopZkqDy_8D(}>p0h$$(CMwN1>GejL(RmHs&2n^86GQ7n-sAS
zI39(Hf|>hm8KO3RG4IMfb{bzmZ*Om7MxpgDXYBCdK|#MV!5CX^7HHAJUJ7qq=cCxD
zPr<R}=T2{0aZCIKV>oaY>CC+vvWQ|3ayaC=T<2_tLa)3Kh$`LQ%<3iwPy#3`mvzKr
zB%aSrTE20TwRdtsSyw!;S{M{E40)%w?7U_IP2pwF8Jwq^V+#%ql@VQ^`lZShA|Cr=
zs3p5k{!L$~K&)AZsN$WI@?Jusr137ju>88Xc6{@kF_X_m-P@+C<Wgk`a|>bEg1?L#
z%$yYEz%1buhV|r~IbOXEoY963H0G|0j?e(NjNdeB6L!6P)ghG&w=dJIk#HUFf3GdT
zBtQyL($Y#utxkTxdZ+KI9anyC7I2Dz!N+XK;RIK+rI7oiRZwN|CmohS?r8zHfNM1o
zdIjlUtvxb@-vUM9!=E^P&iCH#mJ1(~H~5#|gP^|L87+L5Oa}DZ5K0@7!Bnv#zdM#H
zDMRE!I;dQDd0N<O-^?8Fa`8Qi%}rIAeTLZ>Pg^7=G;Z!1^kFsLYBA(ZV0{F5skTSd
ziwA+xFxwNG&HV$PH$n;*JONe%V}$(1FJ$^iRk#tyh}t+{*_F$X_geZ`z5j%T_b7k(
zLb)Yn(joA}nSzn#&f2RVlHT015zyry0#6WCK!lH}c|LRPNteJy#ha@0Ft^*TvNrI;
zF7PJ=L|6N)YE!0dSLBC8HuI>aMKup<JpSgOF*{~1vHWV|oq^smYE-=9kud*L<u8GO
z8t9k|c0fL>JzbJUVKYwlG9fW>lgkp-k!{BuoR@2zGx(9>^Lk_{HNpzr>y^i{_DkM%
z3`RzgJ#FUXW##F@SGrgj@A;E`GAl9p*SB~Rdv<c@ny}XfzJK(E?^uoEUUSm?-Y(Q-
zL<>Vq^d~go2pbMArC7#z9IOGFXI8Q=O0Hot@lA)x_!M(ZaJF4XcPSZF*rdqt6k!0N
zgj&em<2YWeaPSV6B!&BQ#b?&V<o)!{Re0yA1^4gSABE!~pY7j#2n%VDQ$WJpiny|#
z^ijx|Bj@$${C-MdQ?$}0Tz@3#K;pFd=MC9y?p)!(!V^bWjYcmB^Pm0j_vi}1ZFwz6
zdI-a$?zz!v$-DtOXAmnJgXhCXkK8}`_?*wtuy$W~p{*T#>b^X+`P3in4gR(&ZQkHK
zd$N5x(}AYk&+6*K>Ix@XqiUo#es_5OHpugLB8!+)ZNnmqMy&F}s@gcaju9Z2VYlMy
zb~dl|b+^Uqc-h+9(p1}%=Jmx*oWBW24#JhOqZ5R;D}>P<t^q+vW~%?674n`eZPDls
z)qCQ5?q3n%-$q2$#+K|JFL&Txl+*=ujaf;$<Xx;)*;w@jTAd9<Xg)SS*L?P%EZu+L
zmb6-YY0rfq+7jc!G(2+lM>>Ww&d2E@i|euA#3S-Z?MY){ZJEL9H^Yw<8ia=k&&ro?
z(Tx>=cg?dT=FbyELp)wW_{vN&XoPnh?9WcnPXBl-(&#2)SbmfnE!y=xDheobpA=18
zO?-h}bHb>&=FJU1Va#@3%g>IzPy1Clutx$l)F&Ph83}C$`_V?GK0Iot-jbV#A1$cX
zm#*2sddD(7sgXyZkTiT^(r`L|H|%oSeA<F7mZJVot&eX@?PNVM;BT7XS)1wEg_=qz
zZ5Evw^O=%8FJxL3=TKL1-yGVdQ1{Afw=kr5BW7Ki3ZO*=O(u2KbH_T$E2L&i{7NGt
zBFgCBtG!v2+Vp=1pCMT3TMDW9eCAp4+;uGWn96pMfMIi`WvdwUpC2=ey7p%P#sN`H
z@9bgra)pZ@KK=zCi>o3Vdz5~&&xwLEV@LnIL|jT@`Wo;`hrcFACn)~#LDSPPZZPXN
zy;ZxlLHeGu2b5<o)z5^NBDu<XCd~svV#(gzu_w3Z^$Eiv2rF8ZW+f9BGgJnjh4N`&
zb090=2f8d=<4O!+HE&#juP@j=-`!s)@?xsgpBMb7>4CH}Tax0fsKh$p?Ly~!?c4G3
z)0kn8S=sZ&CPifq<TyO<szba`1#d?Tqp4jTSF0w)R3*d?OKfj{UWYitW~Ms>=&e=K
zDX9vUDkLktQZZ=nNwOagAhb&FZHp*w<V+?-bxF#bhxl219Znd>3qQG$apM&2VLFMB
zODlw&INKKLkRKbU<s?1b*KHU0*#Ty)Dqg&gr-(*0=&;k0v^_uGwKMjRHbDk;|KHOy
zva_2@^UKYZ6s|b%M4zzHkM0eY@@WVC=2Q&r+NG<xNl!;73VJL=#NDneICWbym8grS
z;a`rT9K_r~L7&80r3sD7`l6@ruQt4>z1-C(YO7DDvI6$Yr7Gb<4jQdb$(vFL%m<`Y
zym5>if^(<89VuE7J0A~QxVu>8?zTCTR{&gd5-HZ}yRh#DFv^T$rr!~h6^^maldd$q
z?<c&R^Voeh&({$QTE$Xu=7}5xT>OXxYk^+n+?M|RqqJ9Ty|KPah8stU!8+7MIqzNW
z^-!3!f<Mv2YX|B_Ut__@n>O%HzaiC{i>~bio(J4b%u-1<IzOKS&Xn^4nh0fHmG!Mh
zh*HQd^8=AXqO+9f<D++P-u!43h}DymdVE*~gv*Z8YQ1FsaOr<x8O-O4RZ_ce|1~Vl
zg9s%wG07M`pH{4;Qise-j|#hOG@fDBz2<1*zR?P!fLbPs(x6r%rA@3!vN$!i+h{|E
z<W5yG)$ndcz!VsEX{ZH}a2|abqX7I_=XcwU+nyB0<(k)_WdgVw*G9zzB5}bO=)Fzl
zs~7#DGTVlxlao}HT&HCyjht6Vu(I?{oOP|wS^)1F|7w))NUkCXX!QE>-6Yg7VjxQq
zPb6I6WJUNtCk`Ag6{9B;|C>)pp^J||>XGXNG5<b%&GxO`NDeeCkVv5fK;bI}9BPYm
z4R1xi=RyXV--x`kfU>f&R?XHf4cc<t;_R89pFg2zVD(s@Qsa!Qj;s?5-R}cMdUH40
zQlzq%dgA%Xvrx8%uC>zCK!Ks*ANGoM(6WO>R8;Y_*Nj))ntxq{(_Skt7P^58<QiP6
z5+<%!B(RI3Q^?>LVbj9Js*2RE#J6}!WmcWOuaPW=XJqNe?d^9f&f`;si7nlUN(kb`
zU4ftW`gD$_^Vay^pS3}V;<u~Wsh{}rL6xcun}z-VHnd*;+g($ewH(`C@7Et7znOyv
z{N5FHCpQ0JwUxY8dINN+g}WIRXC%7#v%UcL52%=_U46eA#bwk=OrC^&;VKrzR|qr>
zml|KL8-dUnxiubLNjle+^upMvD=nlh)ap5=ymR|0;5};y{t@hjFiS7YXi)<tv68ge
z)fDcvWa~E@tG%n%De9rP^0>@-*OlGomPV-taLk$RHw&cvXRT#A5SDjTTEAvQg=BRr
ziM&*#JB|ZWwPnR*wWcg;Q_eLtDcZI*x2~7Qlm_HLi`)~$W9jbWIMi8_Cd;T-VvhEz
z+GK6fy<1Tttrx}By`Fs?Zkoi-xYiqm=QpY-DIL8T8KFirBr{ZB;p!}`7L_hex<_d#
z@QS$KhjE>@eMb3B1$-TquV?$-bf~68p|~+er_oq>a9kjpLgDOHkWsUlZ?u<qJPlI2
zwii|0AN~GsfU)uon|L)2<Xu*Jj6!XS=i2n*2aO18o_mzqCJL)|b(&73K-Ivm<Q(+#
zV{wqXMaaulizEiD1`UPeS3bBl7>VmCyTW)q&X;V-zDO4)A_h9&F!_HUC}2Ml+sX|I
z?n`Xodr~WxqFtms9@e~D`UUeyXKjCfOi+Ip`sS!YL^ae6Vn8J+Z_nyMYe&Sr&^lnd
zaI|EH@^Ok4X<B;Bo5MhCA*B;0HUqmW)=v&M#U7BQicxOyW5gYGHgbp5?{Ps+8_g%g
z)u6t~wR7aFb_dz7ukcMq)AvTd|4nZCt-v08=%~L<F{;*jd}&_br#^+>BQUbq_9NxT
zD9W{o3pVjvV%PbCULsDSTt%q!&z&8u6zV$T)$DZ{v)v$(Yw^sr`vR=+8ytd07mpS1
zcZXU4Q;jp?`O~USL)VsU+RLPEUA6C8b#&gTr<1c2C=hcfXDM4kNya~}gK<|i9K^Bx
zr=hlHe47MZvvdrwZ`RPMMbea|)<c{0@<5rThOJi;z351%UVgy=V&Nzo8Jy*)NwK7q
zw`u2-=Jq{kc-9BoEgO{@Q!gQN|L6j8mUqqP+0}5p)q*>4DQBLGzix<<--qfnK9@|q
zNZ+2%KZ1$ZNwW2!bc+K{#)3B!$u_Ufoz=&WoRzMY3Dq$J&n6Gol#sVOSkxBjTay=K
zwdjC#S^`qCr|C1*C$pd}^G!H2BPnWhyi`|Z5^dvYYe#jDO6<V>H&&`)d;`R>c8zqq
zzsZ4&jKBr@n5ezAftkC>o0l#xfy$g(Hvjdn;<SasvSbf*UrU&SONWsTAG6{ro^>sO
z6=jHSO%HAlp4Lyx;3Ui(-CKwi5r-d6Yh3!ociXt55l*QkLd_E;uCq$~E7y4+^}c}N
zbD{V2m{7Sh2|dS(c5*S~Fhvz<=t`7lp&3BoI0j|+SE~+iah}HSXYh|gHOYu?(kSu=
z4u0d3v3vTcQl7rrludjeOFkn5eI-ADoWH}zSiO%BK^VHr0aR-5QYrP~uNjqYKE_(v
z?ydwDB0(YL<f?Tde6zbuCaMqvDymqTryIPzmj13&M_E(d>69ZqB%kZ&;C%-kB;6U|
zMwq~9-nN$?Ef1hImB2(em>cGe!OUxjau=XJmABLds-4rZl9#QX%Wh3!vcu@(ZCafZ
z`aT}~dO{x!hE>V58&lXYF6bew70SMAYazXgx3w94!jn2RSFKGd+lWD$&Ivh?&BnLN
zPN26&94MDpZ)68TnL#Rd`UKajmG};<hNQB8T%`cO`n}h2!J&~)L|3bd&8RF&S^~u}
z)~0{xJJXGEVIINZ-(W&OVyl0_kUqlkbb$fI^^0Ax_EA@3*QVK9-ml}_8FZqPI{;K7
zq=JNY$2Nieyj5E1xwhNOK7-y8HucFqu4g@kby>;to+mLZy?2`c{I`3xUXcxs1KhR7
zTS9D;siPK>?B$c?EHz0!QvHgn$JNN})3DI8HY$0(3~K!6n9FJE`~=?eb0AYgq?HBO
zLxlRlOStYTmh2a&Y^F%}XRwn^wE$A%Btie@qyD3Jbz99C{lFhtPE=+ny{{g{UrOWH
z&z|#Pj^2xvbR7=4A&pC)#XE<=1B<J<X;$&NG+&HGI>CO84@|4}<f&bZqW*HZf231X
zxn6dPu{f|i{u56&o$OiAwIm)<uT$l5J@Yg_Y@31@y_hzRO^XUa+IFX}mTGQ(ck8XH
zGoSUv_7DyJ@Zq#7P6-|+_G<A;qmIY$sCg-J$Dq;@m!a(wt2D3U{f4xK;u-It>FX1+
zI~)B7%rOeMX<M(KBjdsvOfCvInfkVax6^hdB@cW$#6f=zpdWQEcPrgvR;*o!hpgI{
zhf%yL(;?&CC<N3#Ak^^&pu&ZT5rzrb^YOtYmLZWib@!^QgvgCA3_5J1c5~43!mDR2
z)4hj!Z%uq(_(tZNg}g3NnfDiWUu;FNKkQn0q@(a#K?vaW56ji?tpVz;);#Av(rHp}
z15k(XX5~?=RuZ#X?X51Sq(^V}6Env*Q&OT9bXwQIyMiGr0FZW-UE;#|P_2|Xc-qBB
zDH+B%lVCPQe}phnYo4r=-drPt)068)FTC6G!$A?)7pOXE0hx8kTDe=2pMN*)Fkhg7
zA%5ma<I|C3&RxqmsRxUejC%J%^;Z+!RUdb8p#F0Gj9JjHv~2I#*reKCiba<fxG@=M
zH?<LeU*)4+>q)RVx_bNH1I87>4=wWe!ZCEe>YJPEppzEP>`*&eS;C3G?~y6yj3<<}
zJX%dJKF*!NYS9`E&(PF3vE@C?S_{h^yn2*ms5$<F0oe6Cz^;D@1Qls0o9LcsGA$sP
zG|K9pb$J`qxbRdC38k)=rbc(K3s4oHU~cq-zxnBHk|w!Rxs!J3gg3_WRbMdw9nlf^
z%XO^z9J|`n=e#HNRp~SnhN-&QpeQFiedr#o<Q?$*d3)NfkEr}>xeCGTVHaDv8{OJ3
zkeoU~w$Bcd<O@sadvukl5TdgL?Mpt_dC$jB4pth~DyVzek|@3BJ0^``GUju1ApV0f
zGXsvr%(B{NP&h=cjs5Dm4^N}?gq%?V=dF1@`Gow!y7vP&0T2z0?2JzjoGJ*nJr#^I
zpCxM+#eMI>f>y5P5q$Q;)7<@x!ivX>Ke4{&&fZWO^9%nJVS)7;2HF5?$sFAkIwmHv
z4xm2&S}D)FOQ;-m`rcB&-tb*D;*K-#=Rr|^!JneBm0~JbStRT<zy&HO#x<SD?l0sZ
zQ%r6sn|AaNpN}APnUK{7xw;sV=AF6Oybos$Qy2Yu<`e(=PbsSxS0wm|*2$^YH{fj|
z9cui?#eFw_f5Vuao(V;puv*`B^;Ee9yx2<p4nV_Z^q2J8E#PhZ|4f;T86(ZRx$Y$@
z+A3@6uez3hKMLbA$YVeZ4?tjX&&-;DO~LG<YzP;x!um=|pZ8a`3CCk5+wj~uN7Iqo
zV;qax02g5k42%BY*vzHO8Xa#ScC*{zIn&&2r_M=qUg25+y?Wb(!+Ix7?E~3#rgcq{
zu5tp>Z)*GK{q&X?8ZKnV-M-|1k=1HzIkQMq(l$P}Gnv`JM8l*zpzD<YnN*1u=#1L=
zz7%=zIvmPov{5NoXHe$@$5u@>2blRZgAN|i|Cwrqnmdt<Kw}|*qOdatF-o=}+T#h_
zRj{KNY-vd97r*r4hJ((}_J|>W+Q=&jX3X=N{+m-p<)RoxTe>K$cXw!Jr<*J1$|`?I
zw3|8IcRu}!imbd&BdInSP3^DUU=vMbk&5I&%3bcCYT)BoQ^-PnVA45t*&nvb^aK|Q
zfyqhZfu1(JdBy#K&@Xaqph9mWq{f;_qxji8Cu>Dp*>ra;c9haXl!%jJK$?k=CJ9qm
zIbC~3GGeXrz#md*fKyOh$O-*3Ig-IvqX8Y+O({6tahF^1w?c6!;1enES+ga(#xCEa
zj7C>O@%i)DlXFh#7}<zH1eSUQxu9K(in70H2a?p=x8d+*jdzn(zd}`bT^b9^YSFzf
z4Lf#C`5hkrK{}I}Jf8dH@DtJ|z2fCNwJB0_hiMNEPEx2!nveMlKotbnV#<9gpdK32
zmdsgzstO7Xvu)O0bm1e{$7MV%T4W8o?qTfWfzfR3D$n0g$-;)tp_H~YEZgVG-A&$B
z2$_nF&yU5NYvWRxFilH)BVYXScx*5H*rUtB!`(8;fR%+Q)4}V<k3Q4%0Kp;2>yqYt
z^aXF$uh7!UGXvQ^d(Rc_D_MUO<-Gph{L8|T$ssE6ET~|em$Os-IYnx5SuI8?1P-MT
z2q~@UEpV5FTfg~Mius|?$!Uhfv_k3{JG3cGw2?T*{Rf}xTM_zu_)=JMXEMXYI!k|3
z=o2_0;IoX7>;*2C#~J2{B8te!B76;202qZ96&}1?5_aTx-cuoF+RV+!*Qu-c;+SmC
z9oKJ}h8^48moe<Z?NN-c3p8@nlZw>pcowDHok?%bhLV)mR`tDtn18yr%eX7K){lVM
z0t($<U&7iHLbK{z5Pzk-eA@>w#Z+tP<f~DEpE29jyg#qQx5Ulr3`*PEh*?+oBHIf?
zN{$R8fU_7Z$h?$&?USUDZP9tZkB0hyEPV%Xl&a$0u9eUarq%Qzie#$N_|HeEh3-1;
zRMO41kG+Eu-?+_wx~A3uY#!(MSne!9sFu(NG=Qz-N{8hZv`|@_K(hQ4)u(pjcAT0V
z1i1OE>w#|Zo=fGbUIu4|G>O)N3Zc1R=cRjABadH=`j%``y%PkDlD*U2zog-;pxS|P
zs?UM%ej=bsRf2fMji5=fxzT;IXjtN`)}C#Au7t=_-bUMxo{{Txe~ei9CyMGcE7-LA
z{0pbY+>>C28RDgxm|NO}(M9*3D#KWN2HSS#g@xVsWyQ8tQY0A%$72;j!wa<+y)s)d
zD@1`RV6#6B^J?@}H1~foDuuS<iQF~df78prv;th@_m_}5)qKV!+V!OUt(>MZ#6x&~
zilT8`atA9HpwpH~tiDHkrDl<++JG8t_lRcwb}u7z)WHqvAE@zz+oOGoO@kwYo$oUs
z`OuFz=#wjS5a8qPzSQjRMjsZ54*GH0hSQd50P|4a$)&r5U;R<I^K<Fn4|N5^_o%D0
zZ{g8-p_>K6@{!~RL9fG9;|{0!V>1vY-JdAVog05(-nf8E%U$Y|`nfsaq%S55w1#Yx
zwdvSl&I1pv58Ri898oE>#fUq5`MGt5<X-Q40c|`uuG(J5{4T6kY~zm%{kCFO;|fRY
zT+x1D^)*Ab2mRRdY*M}@X-b_=paXQmvzVmFt$-u8X+Z9mwI05Q!Y%N~0a-u{pe~>`
zG^a>oM$<rJjM|V4@qzS>Fq!%{q$xoPO@4u*HC;^1<qwZOoAt#;jU%K<%gdFrjdODs
znI>%PooV-?`o8%&Th3cXVjW)EIlO&qVu}~Dy{fyKcf@vKo$DvvAcK_3amu+a*C(Q*
zczZN#$yj?blr&YvU_&{?{2BnLmu>ms_VJ1jTc09kN<)=K`vKF2<SUHF!R0%9-A3OM
zo)}B4m@8u6n4Z{|r)qLzUiq$QPD?pz3MRQ0ZWtC3R>Qr#kH<))D1vWF<=fR-VXBgf
zF)0#v64InH24)<8E7|o#sm^Bq>*BW!r;M!`dsHQKB}?**H9c%Pg{o>bz6r(jO%>Qq
z3T8?-`0JXNyJuof<0aDDjl9Od`DwdxgaC)(;!SXj4Xe3NL&dU`17QZgZR$In?X`B6
zJ_Yph@wRBZ{VcM`c{&sBzff~|?+e~`MNO=&uGf@^)NQPSk;gZ*Ci>vk=A#6-6VOk6
zT3cF4lehMOCEz4+o+IIS0-yj?_SyY?LA~DA%OXAOpBC8&?VC~Ud^c4gLX_L2+PYI`
zHX5EH?mi8yxv0ZX<||uZ08ZxN_0<^*SfEaKpPr{e+~J=FKMntGN&|&j1!<r>)4|2*
zD+I!IO>G22@P#|6S=W;4L6QY`3gx@rQ#jfi>L8mA#u;YVn`%!q4n9Z41sOgC+*7w!
zJ&PYzS;Lip!^a@oF-^}D?FJvWm0W!34Oo4Oi*$;1&4DRA1K*q*e!~S0pe8;|ezI=8
zkFYQj<$jv5IXbo<09E6Hh1XLam&8uvW@oaXdmFY1pWUBD1P7PY)q*KNWc4}nF1c@|
z;j`~r%4W4@V}(^g@oY&ktb4UGe<i5OdGO500Rir?asfaPtZOx;LPLqiwA95M`ptQ!
z7Mb=2JjXX*#vPLW#4WWLVDG1sLGx;hL|mhvBk$yHBG*irzDvzj8v+y5a{?uPP)|i9
zbP#tLy2jP^tb`q_%ppeTY5LdpvhjgN&RvqvV?b#2T*QQ0V?|UKJ4KGN$;pHMfamOW
z<ccsCxD-cUv|GHJm&-=6DN6q-ibEjd0`f92o~ZW$q;x$!neaAUID-j)A?^anEDPu=
zMPD+Pj)XeNRWW(A7q%n8vd)Zg867Vu3JU{IW7hx>_3#Tpa=)EF)X8=naQO~VhX8m`
z`<6Nl13Iyy3N3rVy~cLYvRk3Es2C#^UPAZFB}O+!EYI}GxaObkoSzvAM!MXY?wjfW
z6v^QVgXim2&|@UzVI!KGgW$Xsz*AJENH>!!m@-E7&fPr@v=X=RB3Yu$I5<sY7%0=z
zds3dHu{w5>#bifEj4{)4#I)3MscxSKCW5Pg*12X@(-l>H;tFL~^P`WY-<V7gtZm+;
z*hp=ZF^}LC9Eus<+}|?x{KV7eMXcGZD%fCLPUZRu@bpBH1y8`gVKN`WU7BERZYv%?
z>VWg>OM5hU^7$j)$kk7+K8^g5PG<{oV!YK9l3ZD^RcL^))WVm?s57~1uig=3xw6EZ
zHN0~JAtXu-luZ8fG_Uf_l@T--9Y7@>(=6KH<39e-hJR~z_ecNtVO~)xcoIM$v{x?<
zipMlcbm25oN63XdMU!YhP7V<{tDpV;XI3F1nC^%pXL7TwE}?ca#q@jH*irW-(<(m}
z*vV8<an$Com~-kNWO+u#Ep>_4D{oEmHTdc#OMsrCV*!vS%jgx=exU150#zvlrc1e>
zc?PiBzmKOR9@=25%{V#uel<Ap`~;0o+nUF6joHzzxwynKu22i7EKcBh$<FB5ao~J2
z-l`qvJRfgu<V<3pfS`O{BVbT~jammtXiX#JbRP*27rij?N9Q@BYJ1gX6Asycc{BC?
zpKFZ=2kG7>XN1eVg%=JB+bRHf#SD4;AG~71{qz1aq?d4S+vfJkt?WVvbm$-Dat**h
zPcyQq_ukj_%f5oS8@l>Sw~lG0&3KFL!9tL2S~7fnDto9^2cgd9G+tGcb|hJpd2&Nc
zINdffz+=-c;hg$hvXN-Z$lRIovyqh6Luo)a(q``0UKv@@E=5)1p0F`dP=2zPN4wF6
zAQ;A2tVB#<v>?#QF}`fma^5cgGe*f=td7#a78Rc}<O5p~5(GxlF?i0$u5CDpdK%R7
zNQV^G7l#>oYJC9mf);4kE+>}Rlp)IfFJ2j?#@#kq!s9}Mv%5j(aemf*fErH5v8$#=
z9SRU?l~Zh!_>g>;hwfmFZC@QL;mhBB1qVK;#O>UB;ny8C9%U6b!3zLcV7GZtI3k@)
z$rdZg&hhH^+Qh)eHn2-4acdIPz<{X*1%Ny}K3=LMg0Ft&R+*W2rP`u;SGTn``{KPq
zyVFg`tAbY^s4xcjW^FH*T8pH0l^sjL+Eky=`FMlcU6nd@S90%$JLZzdnFC=L{DC_O
z{=Pvp7p*^?>`Ave1H3r-Tq&;C)W9~M1Xwsh9fbBB+}QkwA|-X;6462bhN0RNK%v12
zPiLlW4)iv-rf=eert=rQ2c3*th1E$8Bw)?ouMh=sT#L~|lm^aS2Cvm>ZL%IoHsDn$
zR`La>+mBah?{9JtAf1(#i&t3~_#yiUPv4CdoxYyXjL6NqdBc&mmN&xQr|Ym#fr})l
z+i4fM&+7xcsz<HP<!@bKQx{oBJ#2Fy5Re`#)ZJx3#-m2B-1K0wa|E;kXTGF9yk(}G
zP>^sKXee|MX?N<Zcw53@uM#d}19r&jrgP+BYT@QeavZM6EVzhw=OA}27%X{;%^dor
zU?1~xal|QMr#9IJS;y66@E~j1d0o>ynRKjpB=@*S>s4tE(;}M~A-CB%HXU=s3=bD~
z>JL-Ys48&V!lvWs4#l9TK63W6$59@=>oHP)mv_;EF^auYm%@=M1oD>5jEG2Cqz@i=
zg=8HSm*>SgF#<nlJEp&Ru=KKTuk&B{-Ale<wUq@CVb|r^n3xi58Nn9IqqxFLPSRE5
zw%l}py#W%xDiRw$cf&yfHF)OnbdZiFMakc44;vW#?IfpfqPUtjJOnuDt*+n328fD?
zl;#`eQ5*fxaS_m26&8DTB{#}2ioVR2f`-!P#Ruh%HwdD@Oa3N-?5Ckg;0^xFVYDm8
z7Ko#KkjWp&ooe2X5lPbB+QPxPF1hMCnW^wJ8d=1vS~&DKJafgGrC}5JAcxOm8N)Xg
zVY_u6cn!t)0}=F1AKDem<2h)buamGd2jS(aRqRr@C~!b+YPrNT4Cj~a*s=;K!F1y$
zSPP4Ox=u61N!?p~%@~#;6-#NLhmQG!k)T{2dk3mH?F9P=#IHRP28QINW{LuL#cOS8
zj{y3@a1`TKVsm?Ap?c(_uB<Cx_HOsj?;3eHoN&y)u%XDKZSa`{@o@xyqCtA;oOZr?
zka9N3i`^j)o6bcTDlAdv&_gEJ@e>M?1Sl0v3iVX#bzD+x=GuB6ooBqB6?X`=_)tmN
zr@iX1c7ar2lHv0UKqc&P1+R*&9bJc`X8^Rs{p};;JcJY%f{IY(RYgm5WmYeXe<y#i
z6}%IWl$e?*={&)F+<CbV%FPF8fUh97PM)LXaKwjH!{~DAaww`iEXw_KdOO2|EwV!t
zENTI7Zt8O?YwMOGcUtRhlBIyt$*c9QIt%9TFSQx&9w0G^O+MOjd0z7zrv5xkUYi#~
zBr_D~ufHDcvHb3ts6+nb1dJ^(OFA|vo)x$uAJ0xz5|xxm(x8eG`K1_lSRbf!%8Ruz
z1L8^Ts;`n0q@|@eL=|mS9>=ym4OvM!Tr2a?jpU7s;M*<klN`tn$dlTrtAMtE1GU;?
z<YOKrtEoQ=;%X38-vulW9^8>-anS-Roa&d7$kHM}J03}HYP0T16$r^YNaPyUbQN^C
z(6#Uq<-cF=4+#8b<YcN6F%SV@=2rk^!h0QrTe*vsEymbnV$w^<4ZrT{pmO{TL$*pU
zy%=KGQd2{|8Evt&ea3+Br^zz>aJJ=bh*stIj!gWye`e{`>ts~DTI~nPb@sE**&sw$
z9}p_xM-7}<E3<p&&OJECFsLpR24YDQakkMyEr{I6@@xy`wT#K0dD)U9ZKqkeI?bO6
z&FFRLf(Uq3KZ|vjws1F6qn5H(%b*6trnW*U)B&Iktq}ATrhpC#b)5DFTN;ijjHWNk
zi8_)7`b1RDsO-$??BwCP#WCSaLeK65#0WYaxe{1GM+Se;Vz}^?h@W88;MhV8XYaKV
z#MI%M<T~y0OA`FhFD#8W=<<iDo8l&{cy4}V7M(2Z_7woCKww5!AEiNH8(*c&IQSFf
z@Il+$T@Y}&26EVCRD4PRYhec1bRRsmS<9VD(-Glt`<-lNMwKJ4isz^l%bL4?l6Qnt
zZ4l-@ytXQicJ|$v?TiBz;e_hP3JTso3oKlL0)`Y*DjeXp8TOK|1_u!Fs%B&<5x_sr
zMhZ%kZa%?6s7s*jYlYCgP2Ek9X_`v|-WSShVRwh>U9ZCGx8W2W8?cRDk=bIM)b+Kn
zSYI3cNAfQR!Jh)E^#CSJ^yYIBb7Xg7Vd?jePpIGd^Ztx*F0<B`K+wpqWovxXb*!A3
zT>``CEk|r5UGNIP3D3c2D!4KOR6Q0eeRmR=>sSPE(fK^OFJ%%R^T5fhpm9|q2a>_)
zlnjfHV$P7X-F<NU&p$0~ciYAPFdss)5Sxm9Nn(ED_o3}L{TMoCnrl-B)d86%XF%8N
zrG4N8o5jSKoa?NzV-Dt2KA7nFuWJCQIt&r6>GY3qOrZ1zxcR-INj8!c6V(dMhQIt6
z-D@PfjutS-R&&_FfRx7nsuTTqEsi~(&6Ydp8(iu&597xhSP*myr7?Qu(`3@45XdUx
z+UH@BkTpcow-gyyr1rf*_($)o^A|WkD|~<&`aSCZYwtXxn#{UA4%kL<bc6vF1w={)
zLQxQqZUL3hl->dggdmYFp$4pj3erMC2M0k!N(7_@0*q1;LT{l3RGL8Ogciy@@tu3G
zGi%-V^ZoGhEo+gi^PK0LefHV=zxOZ8%)s_E_E%qrKBgdv2NnwU+Wv1uxRmgVXNOor
z#7xs=fjyUNM7CYg(;bTdp_<7H5ArQ-tWTmC*<B@4lCakk3rA}_0yK=SH1xMt`6tmG
zq#XmZ>Mcu?^NCBrx`A1zidD|zKAcNeP(m?4z@&&Vylv9}(aV?<t7R*)XcafgAyvW{
zRsqdxk7B0g4blx@J_gFIUWYk2I5Z{slG_yD$3D~I2S;{Q`yr_4=JkTMs?Qw8(FfnZ
zhGiHh=M|}|H^82R6Ll=@LZ2B|ekvXwtQ^~lSOyhsI+8iTTjk`wh1W;}*Kasmkk6AH
zy4w@Gb13{Urk@zMcX@!zAWG<GM{s|tCIW0+*tFtXl;1HW-lnR$Q8^8U;)J;axX1>!
ztEACW=%X*;a;$qe{8*30l4O1bFEY|cFm&K4cDAlRalHRvF^Z`ZpYBn1CcS|B1MqJ3
zwl321_M9KX#IM!32c|Z6j>G0rLsefKa$jgC`bs?Lj=VYDxCq;JlQ_L|!UWg!tVQ6c
zz&G&bu5mGb^AP{&XC?gTaSKjWEPuvh^EVdIo~6#jshY2i@Q>Jx2RHMAleu0e^WCxJ
z(@dWdJVK#iWL$Xk5lhY`Nd2r*aQdObO8mZoy7SpRLAU3_r<L={)bj5q(WN%$EIj<h
zbyZ%*qwn>+mWX)IYouVPh%NfC4&!llk3ZLVWMsMBm2`U%VaKBAw|CO}G0743zSh_g
z;D2ZYErJ{0gcN6MLC?U*)nQ~n4LCNPyWhe`cc&HK`4w0xb6HA45AM9mG7jY{n=1hE
z#CbGKu!IK?5d)jK4_|tk$f0)jDozz*ma~?(>1`VOMK6EZpWMjuk`QUEtb+x1;WlM}
zpxC_1iL~kox|2Ks+i~&Nlkoy2Fzd%^26yw2n%`3I^M@sX@GTr<)af85sbw`eM6Y^w
zTfwF8!5p}r4DhA@5-<5YQ{NdOVUQipj>RJ%Dg70T2PV_sWkv!sml;zq{$l8pZL6;J
z3&gc4h+T+f=u+2#)zbKp(AKnjde*<w*Kkg2ojN`Y-IB3&0%j$HMAv_S=yhG=pZT8G
zbRd9~7cGG0NM=dRd)NlsUVGdy<zfELv^3G`_#<uq1Y<qkxJ@Ju<f4s@Q?5G8l*Sf`
zQegS9Gw0-_FY)PcF=Sg`TsE)JihbKH1QpRVH_F-bI&V42vECS}WW5;2*LGq)o~`{Z
zXFyo#j^ad+CGHAbj%@gi`ItGcs<K0&fo&Y}E(B=cj!W`=J<0?zYzr=HQ+7<7?(I+4
z0IKRv5(8a-^vF?6*h+qH1u{FIB1wU$`fBNou*d=gF{w)b`P^AMUV9a<!6b1zR%O`z
zbS11kNGqUU)2f$LV_noJQy`!+E_Ekf%-TA)W%l9eCCw&QVsxD62VH7IvV)`J9_QFH
zg>IQ9n2V~-bI)5*8|rZK29s<(;X=Swt(}t-tK|b1hS)#kQ?JG)If~cMbj1y%Wp?{{
znH!%<@A0*2r5&k|Q!ubGT5lMbG=qMDySdd^riCtD1b$6zir~ppi*Bx2b$dv%?stup
z5E5BWkD2r`d-AV!Z%ax`twiyN!_?hVEi{(37YRGt$@MELm6L+FTys^+Tz3P^b`i=}
zrr=5FlPdeA>Yh9k(PG=DMM23*9#uCx@;l?d{glN|O=zQ-Ke8Gk>QFcIOFqIfBCVhI
z%B$Efb3MA`r3Z8a9EK=QZT<Bi^V9d_UroexP>BKJIs1-X<xls059^XofBFQ!KByWN
zmgnN0cET`!BwBM)(RE;9GWKo`Iy^TbTM;XhvHqk=Ye_RJQv%uj&SJS{%Al+5{D{fA
zskmLv&+^<073ODcyJbEuZ93veRUIAPFb$DOWSZwMYzZ_+NG|$@CAp}5A==(C_Ux`}
zU**7XF~K!EJ8ymlS2ZCnL72&9*$%iG^*AHY6x3UuY3Ph1;eAF#z*%zYAENuwpsV<7
zqr9PI?=XF7lh=-N{MLPu`LHUvLa#!IfU-w<zH86Bm(6Rxs2C5!o>-)(>|6J|(*}A!
z0<{@$k*wRkETyK61jvaeY!St!OD?YU86aQfr}rf8;^}0bl5C(U-=*EVoiD6r;FcF=
zN4phe)j>Z(bF%KOX)XPemQq4k?rs>l@C`nT_4YN^jEp$A+Y0kPYS|cE|6)UGA%4Fk
zk4Ed<t-|Z+1xDF;eU*-C6C2XRL!8j_1brAn0@<IhvNe_)H9$Q~sWUCAo)6nyi==7F
z2jCPE@y)A@d-2apoVcJqySKR|Lj#0)u)I+hJh~W~e6MCKk8=j`e~yLCJ~N%R<j#uZ
z@0PChwuMf$ypNq5HSc8QF!x7dY05^wJ!2~;9z5U$=_BYHD=%!*=AXr)Vjt?FczS0e
zu!Hi3!@IpN)=bUICQjuiIOsU?J<&VKhcir7)nT6ML|XL-n5|h5%v#c(27oHGAZgLD
zClv+~`2zB;(HfWW3SWBQ$#dNx3@}mB+|g;KTp`hw6gr!QUbE|$)jL~ZR8Ybe+&8Oq
z-3KC4Mq-MO!g+kn)41X|zmg;~1*(PA?sWk496zdgY$E7MFfUU4(_^4|Gc5uVr+t{J
z7`}kieU@oR4Xsa2o<^3Gx#4LT$whoXblkW3`0p>jmjbDWEUd>o6y2}y24J93pfXWa
zQN~Pb`FG@+ivnkwqTlZtr-~E%bjkA9CzRHreV>loD{u;FVe;tvEG0tO(hzusHG(j?
z8C10~mCFwAs;Y>qyfzG+l{=+q5T9jobDd%JfC}|>Q_K<~<aJ-qiW_hfZ)9QP=-l;+
zfQS`8i-_ASd1qYdYNLDKAPcW8*)u!l<r%mY3a-aoLR$V?H?KH+e6#=MOemj_(3?u;
zT*mHllPLPDvqWttZX>1eDs$-R@j;o&vb<_tdmz2lKu=e!ViXpAzAn?%X2mSrlMgN!
z_}ONcfehnJ$Q9#9ZL&Q(CyXP32sxS=WOM<PCX5Rxx^^p5h3XHD*l&a{ffJN7N?3gd
z8NoM6d0Fa~Y-VI=up_RhIPMQb^0V#~`yC<`S{O7*r7?l-8R$6K-dj4Wypf$KZmV=6
zVr+PBSICS$YuT1)IZZf_itRCG5JV7#Anq?S9v_?JU5=>4qw+HhR;9gvH3<$Kmuun$
z^=#~SaXb+b6k8#qu3oiR`(+Q_{H^KEZQL}D34~CzwwmP#jmS0A!lj*YyMuoK&z<UI
z<vpnTAl-lCP8257tYWQSg9(DM3}$fXGmwC}6K?|AE-OIIa~5pE&0Az|Svih<(OTbW
zvX6s+`d0s~&x=MD)?P39xL+oyIyApuY_V3}))ZH?Ix2MjrWR?|i!e5CDl#+JRA<$S
zDdzsb3(EOQY+kg?)@wMK&rpgbrh)Hwct$`I)tl#KzxL><{TCKA^i~?M&z~0`H-_q3
zz_05-W&J7%*Yr<xymMtrjnvoIBUVohUDpEjodl<Ljm+c^5!`qRVVLDwi3&m=Twq@)
zAs^+-j?<!N;=S2!Uq_}6_V_!qTyrX^>T~?xMz58X_syxEA4*KC!c_C=84jcEY4`O_
zO}k6XKbFY=^tXRLQIW~c3$TQ08ijZnVqx>U^KO{MN8FeK(G)nB?Hk*>q;cOitGD4c
z!G*|d(yCXnxq+{BPHdQUiARO?c~Q?Ze|x6giw8Z?U(z_Jfh~egL6(-5H2(bLd+#iB
zK0Y+g>RKt!nVfK0bxzc^mS_dfFd01)>l+C*l}fh)gkg>RfwJ;;smC|Vyf5GW{KHH^
zetMa5ZfOYbW*wXymy!u-K7oQ%IP*+JiO@u7*yy<EnBnqah>VTW>|HxGuD`9)%lEp+
zZnY3s7%P#upOC8p?N_xv_+l-Lr;dtD%1ow5p9rnenR#P_>VA8RUS+;lth#3D_&8|F
z$lhA7-WUp6741e>AH{((K$q8Ver8ueNUl;(Q8p+6O&fSAlj%#z#n$vYa9Cb|+fOb(
zuGCsM87Q?0`LtJa!`^&N(^P)AgHbd>B3<XCx2CrpXx2{2v&-FVGyfWt#xDQ*>CoT4
zo!x=Gp5FBaL){gZfJ_55-3)L%nXqfz3S-Q1bsnBk1p!6f-M0Y2m)hcUt^LP$a3K3a
zKttc}bk_a;w78VG4iE<=P35qvV!Iw44$ugo12V;^%wVZM(R$kz*X*O+{`H5cKA<A+
z*bp&R9L5|pE%bi+nt7_HOV5Iysm0n5B|K5ox)KR(jHgM0wChf3>VRyqp~!$bWUt1L
z(-w^qZ8&P*{YrOJIE#vBN3(2d)_TwcF(o;X#+Xr@l!;WaIVnl2R3&%(!g2|x@{bRG
zrmew1%kKuu(5=Ss2CSWpH*c#U)q{dsUGnnS2B@kyX<&UJqy`uW!Dbp)@Q=&n0P<c_
z!07ZEW5m(M8|Hm2J}q?xL^hZ(Z_HER2|^?wLLT($@li#A-nX}fPF>vhw^4h%F-%Rm
z=s)&~_0BXmIMZ-@V6%ZQoSChK`4+R%gz1-!iYMHhO9utgGKFaZ2qA7V=a1jNdFGmt
zP{k{+<!d!KX)|N{iyrt8Gz+_0lXEvG(YI?Rm{#q>dOqRv!1iy`z0b8N@A)28G-_9e
z?FcXTwhX)V6quoWgwI6%xRp6S6aJrl44FHMV+yNY9#gq;_3ExM#|zPoh_kylfpJ?`
z`8h>0=elz}*G=h#{^sw-G^Di|@xT@v=wvR<QO}j$vZWKi#qoKv*>*o!@%z6Xx(Z}a
zc8L2F$g?3JTdvcRLOOvn?sH?at%OCSuvP&Zff?lnIJz|Zkd3UyQc}>`v`5W$FLH}X
zvln7HPln4?w*z9NymBQQ{EAL#ViQ#DMrbO*0IgflI5s4B;Hc0FQAq^xnGyQ6?qE<d
zg9W~NDrmpNzee!fO7P+LA?Dp1yRXH;aZ^9BW>4@YU@WfyF6Jv?%*w6Qn3y{rK@*9{
z6~Ihpvhl><I$kpY<k!_>1dybw0sWSqULYL!O$0NJvzXQi=MShevw&v_hpgYBg?KYi
z1X3?^y|2)bS=^?H(n4=DX@iq7sV&LMGX}{@iOFz&IlDYS*fb{iM4xNBv%SeI_%>2g
zvjZMzwlNr<YzZ)(GnS!Si(#Y|%m_d^PqQJz$L)h}c?^|zZ0B%Zo{q69d~n6V{Q4PM
zrcfdu^ppx6G}QjpWMZBpeWE2fJ9Kjjq5+`KtZK36SHq6@YOsHM2FzVwbt*j8zfsWd
zTa@M|*>@Lfq}c(usXl|B1_4nrmyL`b(S&oUhwcQcf$JDiEJH;kzlBh}`A!f(M7>Mq
z-08%gnSn7PfCbMV)7n~id|l<V8d~3PcEF6yE=F7J7x;JcY)!nM6S6s#?K|0;>g(+M
zX1Ev`1<=u@jhcW}`F^)WmNSG=*to)Lr2d6igP`(*?76Afon~DwAih%%0Z8n=GEB@~
zOY686C$lTorF15vzYE7PKTx8#3mB1T)cX&HETWPZpneAq`N<ua;+F~K@Sn*qTZt4@
zQ(xuYYaG@5V&AVk#j0Et5=?TQWj}c;1O$5$<U<dPJrnzLPNsGwbeEK-=2w7GtK7Rz
zS{p8|Jfvn`V4DLtoCakYMSzM)$0an)?(VGBtfF;2?E}X7qRv-*-Iz?L#oKy6Pj!M(
zR}k^=H|c@XlAv>%J5Xs1WY(|k?#%D50DvVDLO5HA;_Wn+ChU%3jnb5?j$HV6gX*Ko
z)!c*NxcQ~q0m4*u{9->?rR|3L;yJzzO|bC72#R9kY?Eg74X)tPm&yb5jHmjw;*D{5
z1op#)wj@RBTp*(yv^!vE_n+Q{-YM0t0Z>jfwOFi3-hFLtB($uIs;ElvcxRrUM9;Ue
z4lkaO6@1HHQry3ZIs5MQHej!`qL{925NSA%*f~Nj+})lJ)kMPaVxE*(@rjAkYGzz1
z@Z;Z7Vzqluw#^6uwCi%;Jm9A<CHzEv{_`oNzGB<tOtrFzS<<(RaNEJ)ZILrKbv5Ln
z{5NkjPyaNQ)Gb=<fDp}Q0b!0q)0SYgBOBk{)_Zg61p}(vEQ!pJ5upm{mQ9{=FBh@r
z`JCcy?bQ;E|2pVVLw6jB(%P|1_i0r@uOZiZop^4)x|z_^0XbPJG6E@5PmG?IEQUO*
z1MFq@Q1_Pkb5nQEYQUQ}_K0Pcg;k1PkNk!zsA%xjM-J7Trft0bqiP5IoQvF_&a$5-
z<_aq3yy+pIA0A*VW3}owtQ`!hp$INbKQ>vm5hFrEW?DpU{b|^0w1ZO-(g&#TQY1l{
zVDXWmI6D82E&1RyR@fP8p66-6KQ6Q++9IM`v?1DcIFZpL;)onSfWM!QCSDZ2=vfQp
zY^8Xm?$v;>i0N0+&6(!C+<2>3slq*1c*d>^1=OKNE`49LmqgCzzBZD-oEB_{IPrv%
zQtRHDqEay4e7dOH#_&d`ONcOxjH(p2;OT+kr2463IELBNaI5G>QSflUWX0S_z+~#G
z?V%;X<u75v#Mwlh-{Z)_(@yUDCWG=ZtW_b_jU^~;=_9vXU+AyD$eU{8A0?~!ylJe?
zmiHdJ;e)kj+xH)hr?-B{1<F9Bv+|vTi3w6Q6iZtluDp*DGN0sERUqEQgqrUM!mDWT
zYO>EeHuPaf72SvWg2~VdCXRzDJU*sI*1soSy|tuA3+dcMY08T5?js6YSU*5~tu@lx
z?%ru#(TVM(U?DRlDB1vFgy=hCB2h~x`YtD|T}q&kQo>KS9k+^yOYHbSd@dw}O2?fz
zcl$wO$d2JZ7B9!Ymh*SRnJ(6`H6Cxj0^r{*VE~Xzn#J3Mfy%6jqtQ=HW6ct`=3hVy
zJh%UBV`!Y6N!9x(m0x+>*7G5XKVWSXmLZMG)eFx*oPJJMZ+79!r&+vpcF(4%OszLu
z!MXW8FGeMs0ftX*_*x&XQL2);&vM6eGCC6;dH2Y^nCQ8&huZ)5$Qo^P;gzMSma1a6
zaC3EorEbOZdbw|dPz7R{6AMxFO25i9x#bh(aupJ5SqSq;C_D_2H#bFYKV<dTmh5kH
zvKacwP^<#4ZOIcDCe|Z*E#kfXD8Lh!*dRl9Hju3I#rrJD?S~UT7&XXJE2!)Cy4@{!
z7v1}a6R>m9fpMSKN1aHZPiF|&iX8vioSaYV@**qF>K2GSiCs`_=D&USpsx`c^OUtC
ze?glE5J-3}DB8v!)#q}8ms^x4-rUng6=N3;owS$MEn2{Fa3}ifS;vb{VP;Ec>J#TZ
z$tUjIl|f5XgS!lVru4(%WP1K~BHIW615oR<bL657(!f?kMpRzb0<XOZIN$WurnB_1
zOlW!~uva6a)oRGZ43n2kT%t+KoIg)B@mPlEjsLbM367mG=xC^T4Az|9rpam^o`c@P
z&CB#(cQ!*4kL$%kNBuG4xkdSojgja_v-(QoGv)m;y2Z_j@u|_hc58{R$JZ_F0<s2+
zcM+x2X$J#lFNw2H32>D=2fPGBDoN)~OOoPh#A~QU!AgZ#C*V{wfj$0Q*kTc02dsNG
zL_gtn+wW3ZeNOvbHVT=&HXZ>Ch?XS+@8WZX|2bgP2QtDxin4!`y@?$o$(FQRudh`Q
zPf~?v#?-W{+k(a4EhP}NigeFPjlhpsX;L;`57j>0!vw7MJ5ii?{t3XK4iZ$BYd&8K
zYUj1>`eW(_wnqO5BA1VWk`#HeyL~9+$06(DMPi*yh|RhgQo7SQpiF$T%wt3o;N?9k
zd3u!G2K*VKS{W&_kLFT@eOrl%*`lb$4440%Pf@UFvNh~_Q$Osb3NtdzXpE<4M-d3!
zvx$;c4PRl$M>m!y2jLItyJQH9vX-*7XjCnl9x!pTlDlNVcc?0Qv9YK*NiDIq>7FF|
zV`3l7`o(<Zye7elMZbzq^;sqD?yyKgYb73MqQ5(h9KR$qk8oy-@n+x1eZI92v*^}o
z91HXc#qW9v_9J$I+QdDoj^mpvQ=^6H(tKiCZ-QflV+^@pMtiw-zH`{A#afaAO9mBg
zCH&73rtUbWa3vX-n7f=UvnTpY1eKMSW-hMB|FGi7_=tzt0t#sI;;e`>e`(_T5RbT$
zi5M##bnoiQHfmGi)b#xPfHV}=FCa>v2XlZqTv+wy1M!uA413UQ!*=X1|CWQ}AqAXa
zGADzAfbYpFjR?Y0;F+h=q<2O1e98&J74CFZ(!G9p+O~}c$xP0^dZ>C9b@;tljr{ZQ
zh!||ItreHHoe|Nf5<Az<HgE#FP_Gt6S|19PvGC7B^RN9v#*39toHz$@8cME&qz88z
zzM!iBFpHpCuVawA?wVFMcgBa)YGw3z&dXn7|F7}hh2toMl!E5D^Qd0ws6yfu{PaRS
zW+PI8k4*Jm=lzFACk;A)vfop{S1|SnrXnu_;-n&a9ZeNb5pjH0JV;|4nXQ&P6!m?M
z+1BGy!S}&~Xp8>D`~&rv=kG(l`}swNS^Z`M2dy6MeR%aBE-g0*1xYOXaYUp3=^g#G
z8UMOxygC>6+pVugIJ4cK&bA#B5ZH_dvewIg{_i~mM9_XSchL}85(S;3j!J=#|M~mR
j4E$#X{{0M`3EL5_&KlYOtQqOV{!d*UL+yeqw;%l%d}i#w

literal 0
HcmV?d00001

diff --git a/content/ko/docs/concepts/overview/working-with-objects/labels.md b/content/ko/docs/concepts/overview/working-with-objects/labels.md
index da3cff2a89..0583ae0fe3 100644
--- a/content/ko/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/ko/docs/concepts/overview/working-with-objects/labels.md
@@ -53,9 +53,9 @@ _레이블_ 은 키와 값의 쌍이다. 유효한 레이블 키에는 슬래시
 `kubernetes.io/`와 `k8s.io/` 접두사는 쿠버네티스의 핵심 컴포넌트로 예약되어있다.
 
 유효한 레이블 값은 다음과 같다.
-* 63 자 이하 여야 하고(공백이면 안 됨),
-* 시작과 끝은 알파벳과 숫자(`[a-z0-9A-Z]`)이며,
-* 알파벳과 숫자, 대시(`-`), 밑줄(`_`), 점(`.`)를 중간에 포함할 수 있다.
+* 63 자 이하여야 하고 (공백일 수도 있음),
+* (공백이 아니라면) 시작과 끝은 알파벳과 숫자(`[a-z0-9A-Z]`)이며,
+* 알파벳과 숫자, 대시(`-`), 밑줄(`_`), 점(`.`)을 중간에 포함할 수 있다.
 
 유효한 레이블 값은 63자 미만 또는 공백이며 시작과 끝은 알파벳과 숫자(`[a-z0-9A-Z]`)이며, 대시(`-`), 밑줄(`_`), 점(`.`)과 함께 사용할 수 있다.
 
diff --git a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
index 8c095e4a27..da30c01ab2 100644
--- a/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/ko/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -72,7 +72,7 @@ spec:
 ## 넘어가기 전에: 내장 노드 레이블들 {#built-in-node-labels}
 
 [붙인](#1-단계-노드에-레이블-붙이기) 레이블뿐만 아니라, 노드에는
-표준 레이블 셋이 미리 채워져 있다. 이들 목록은 [잘 알려진 레이블, 어노테이션 및 테인트](/docs/reference/kubernetes-api/labels-annotations-taints/)를 참고한다.
+표준 레이블 셋이 미리 채워져 있다. 이들 목록은 [잘 알려진 레이블, 어노테이션 및 테인트](/docs/reference/labels-annotations-taints/)를 참고한다.
 
 {{< note >}}
 이 레이블들의 값은 클라우드 공급자에 따라 다르고 신뢰성이 보장되지 않는다.
diff --git a/content/ko/docs/concepts/scheduling-eviction/taint-and-toleration.md b/content/ko/docs/concepts/scheduling-eviction/taint-and-toleration.md
index bab0803b99..588adee0f7 100644
--- a/content/ko/docs/concepts/scheduling-eviction/taint-and-toleration.md
+++ b/content/ko/docs/concepts/scheduling-eviction/taint-and-toleration.md
@@ -206,9 +206,9 @@ tolerations:
    `Ready` 가 "`False`"로 됨에 해당한다.
  * `node.kubernetes.io/unreachable`: 노드가 노드 컨트롤러에서 도달할 수 없다. 이는
    NodeCondition `Ready` 가 "`Unknown`"로 됨에 해당한다.
- * `node.kubernetes.io/out-of-disk`: 노드에 디스크가 부족하다.
  * `node.kubernetes.io/memory-pressure`: 노드에 메모리 할당 압박이 있다.
  * `node.kubernetes.io/disk-pressure`: 노드에 디스크 할당 압박이 있다.
+ * `node.kubernetes.io/pid-pressure`: 노드에 PID 할당 압박이 있다.
  * `node.kubernetes.io/network-unavailable`: 노드의 네트워크를 사용할 수 없다.
  * `node.kubernetes.io/unschedulable`: 노드를 스케줄할 수 없다.
  * `node.cloudprovider.kubernetes.io/uninitialized`: "외부" 클라우드 공급자로
@@ -271,7 +271,7 @@ tolerations:
 
   * `node.kubernetes.io/memory-pressure`
   * `node.kubernetes.io/disk-pressure`
-  * `node.kubernetes.io/out-of-disk` (*중요한 파드에만 해당*)
+  * `node.kubernetes.io/pid-pressure` (1.14 이상)
   * `node.kubernetes.io/unschedulable` (1.10 이상)
   * `node.kubernetes.io/network-unavailable` (*호스트 네트워크만 해당*)
 
diff --git a/content/ko/docs/concepts/services-networking/service.md b/content/ko/docs/concepts/services-networking/service.md
index e5aa794ae0..7bbb4f6f63 100644
--- a/content/ko/docs/concepts/services-networking/service.md
+++ b/content/ko/docs/concepts/services-networking/service.md
@@ -935,11 +935,18 @@ Classic ELB의 연결 드레이닝은
         # 값 보다 작아야한다. 기본값은 5이며, 2와 60 사이여야 한다.
 
         service.beta.kubernetes.io/aws-load-balancer-security-groups: "sg-53fae93f"
-        # 생성된 ELB에 추가할 기존 보안 그룹 목록.
-        # service.beta.kubernetes.io/aws-load-balancer-extra-security-groups 어노테이션과 달리, 이는 이전에 ELB에 할당된 다른 모든 보안 그룹을 대체한다.
+        # 생성된 ELB에 설정할 기존 보안 그룹(security group) 목록.
+        # service.beta.kubernetes.io/aws-load-balancer-extra-security-groups 어노테이션과 달리, 이는 이전에 ELB에 할당된 다른 모든 보안 그룹을 대체하며,
+        # '해당 ELB를 위한 고유 보안 그룹 생성'을 오버라이드한다.
+        # 목록의 첫 번째 보안 그룹 ID는 인바운드 트래픽(서비스 트래픽과 헬스 체크)이 워커 노드로 향하도록 하는 규칙으로 사용된다.
+        # 여러 ELB가 하나의 보안 그룹 ID와 연결되면, 1줄의 허가 규칙만이 워커 노드 보안 그룹에 추가된다.
+        # 즉, 만약 여러 ELB 중 하나를 지우면, 1줄의 허가 규칙이 삭제되어, 같은 보안 그룹 ID와 연결된 모든 ELB에 대한 접속이 막힌다.
+        # 적절하게 사용되지 않으면 이는 다수의 서비스가 중단되는 상황을 유발할 수 있다.
 
         service.beta.kubernetes.io/aws-load-balancer-extra-security-groups: "sg-53fae93f,sg-42efd82e"
-        # ELB에 추가될 추가 보안 그룹(security group) 목록
+        # 생성된 ELB에 추가할 추가 보안 그룹 목록
+        # 이 방법을 사용하면 이전에 생성된 고유 보안 그룹이 그대로 유지되므로, 각 ELB가 고유 보안 그룹 ID와 그에 매칭되는 허가 규칙 라인을 소유하여
+        # 트래픽(서비스 트래픽과 헬스 체크)이 워커 노드로 향할 수 있도록 한다. 여기에 기재되는 보안 그룹은 여러 서비스 간 공유될 수 있다.
 
         service.beta.kubernetes.io/aws-load-balancer-target-node-labels: "ingress-gw,gw-name=public-api"
         # 로드 밸런서의 대상 노드를 선택하는 데
@@ -988,7 +995,6 @@ NLB는 특정 인스턴스 클래스에서만 작동한다. 지원되는 인스
 | 규칙 | 프로토콜 | 포트 | IP 범위 | IP 범위 설명 |
 |------|----------|---------|------------|---------------------|
 | 헬스 체크 | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | Subnet CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
-
 | 클라이언트 트래픽 | TCP | NodePort(s) | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/client=\<loadBalancerName\> |
 | MTU 탐색 | ICMP | 3,4 | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/mtu=\<loadBalancerName\> |
 
diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index 698ee14e72..6156a4704b 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -29,10 +29,9 @@ weight: 10
 쿠버네티스는 다양한 유형의 볼륨을 지원한다. {{< glossary_tooltip term_id="pod" text="파드" >}}는
 여러 볼륨 유형을 동시에 사용할 수 있다.
 임시 볼륨 유형은 파드의 수명을 갖지만, 퍼시스턴트 볼륨은
-파드의 수명을 넘어 존재한다. 결과적으로, 볼륨은 파드 내에서
-실행되는 모든 컨테이너보다 오래 지속되며, 컨테이너를 다시 시작해도 데이터가 보존된다. 파드가
-더 이상 존재하지 않으면, 쿠버네티스는 임시(ephemeral) 볼륨을 삭제하지만,
+파드의 수명을 넘어 존재한다. 파드가 더 이상 존재하지 않으면, 쿠버네티스는 임시(ephemeral) 볼륨을 삭제하지만,
 퍼시스턴트(persistent) 볼륨은 삭제하지 않는다.
+볼륨의 종류와 상관없이, 파드 내의 컨테이너가 재시작되어도 데이터는 보존된다.
 
 기본적으로 볼륨은 디렉터리이며, 일부 데이터가 있을 수 있으며, 파드
 내 컨테이너에서 접근할 수 있다. 디렉터리의 생성 방식, 이를 지원하는
diff --git a/content/ko/docs/concepts/workloads/pods/disruptions.md b/content/ko/docs/concepts/workloads/pods/disruptions.md
index 9d2319ae6a..56244fae26 100644
--- a/content/ko/docs/concepts/workloads/pods/disruptions.md
+++ b/content/ko/docs/concepts/workloads/pods/disruptions.md
@@ -135,7 +135,7 @@ PDB는 [비자발적 중단](#자발적-중단과-비자발적-중단)이 발생
 
 Eviction API를 사용하여 파드를 축출하면,
 [PodSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core)의
-`terminationGracePeriodSeconds` 설정을 준수하여 정상적으로 [종료됨](/ko/docs/concepts/workloads/pods/pod-lifecycle/#파드의-종료) 상태가 된다.)
+`terminationGracePeriodSeconds` 설정을 준수하여 정상적으로 [종료됨](/ko/docs/concepts/workloads/pods/pod-lifecycle/#파드의-종료) 상태가 된다.
 
 ## PodDisruptionBudget 예시 {#pdb-example}
 
diff --git a/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
index b927895575..9bb8cfba78 100644
--- a/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
+++ b/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -58,7 +58,7 @@ graph TB
     class zoneA,zoneB cluster;
 {{< /mermaid >}}
 
-레이블을 수동으로 적용하는 대신에, 사용자는 대부분의 클러스터에서 자동으로 생성되고 채워지는 [잘-알려진 레이블](/docs/reference/kubernetes-api/labels-annotations-taints/)을 재사용할 수 있다.
+레이블을 수동으로 적용하는 대신에, 사용자는 대부분의 클러스터에서 자동으로 생성되고 채워지는 [잘-알려진 레이블](/docs/reference/labels-annotations-taints/)을 재사용할 수 있다.
 
 ## 파드의 분배 제약 조건
 
diff --git a/content/ko/docs/contribute/new-content/open-a-pr.md b/content/ko/docs/contribute/new-content/open-a-pr.md
index 8697159261..552a6e1a0c 100644
--- a/content/ko/docs/contribute/new-content/open-a-pr.md
+++ b/content/ko/docs/contribute/new-content/open-a-pr.md
@@ -123,8 +123,8 @@ git에 익숙하거나, 변경 사항이 몇 줄보다 클 경우,
     ```bash
     origin	git@github.com:<github_username>/website.git (fetch)
     origin	git@github.com:<github_username>/website.git (push)
-    upstream	https://github.com/kubernetes/website (fetch)
-    upstream	https://github.com/kubernetes/website (push)
+    upstream	https://github.com/kubernetes/website.git (fetch)
+    upstream	https://github.com/kubernetes/website.git (push)
     ```
 
 6. 포크의 `origin/master` 와 `kubernetes/website` 의 `upstream/master` 에서 커밋을 가져온다.
diff --git a/content/ko/docs/reference/_index.md b/content/ko/docs/reference/_index.md
index 4c0b0b8177..a441e80783 100644
--- a/content/ko/docs/reference/_index.md
+++ b/content/ko/docs/reference/_index.md
@@ -25,7 +25,7 @@ no_list: true
 * [쿠버네티스 {{< param "version" >}}용 원페이지(One-page) API 레퍼런스](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 * [쿠버네티스 API 사용](/ko/docs/reference/using-api/) - 쿠버네티스 API에 대한 개요
 * [API 접근 제어](/ko/docs/reference/access-authn-authz/) - 쿠버네티스가 API 접근을 제어하는 방법에 대한 세부사항
-* [잘 알려진 레이블, 어노테이션과 테인트](/docs/reference/kubernetes-api/labels-annotations-taints/)
+* [잘 알려진 레이블, 어노테이션과 테인트](/docs/reference/labels-annotations-taints/)
 
 ## 공식적으로 지원되는 클라이언트 라이브러리
 
diff --git a/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md b/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
index a64633ed52..c5a13a5608 100644
--- a/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
+++ b/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
@@ -5,14 +5,15 @@ weight: 50
 ---
 
 <!-- overview -->
+
 이것은 서비스 어카운트에 대한 클러스터 관리자 안내서다.
 독자는 [쿠버네티스 서비스 어카운트 설정](/docs/tasks/configure-pod-container/configure-service-account/)에 익숙하다고 가정한다.
 
 인증 및 사용자 어카운트에 대한 지원은 아직 준비 중이다.
-가끔은 서비스 어카운트를 더 잘 설명하기 위해 준비 중인 기능을 참조한다.
-
+서비스 어카운트를 더 잘 설명하기 위해, 때때로 미완성 기능이 언급될 수 있다.
 
 <!-- body -->
+
 ## 사용자 어카운트와 서비스 어카운트 비교
 
 쿠버네티스는 여러 가지 이유로 사용자 어카운트와 서비스 어카운트의 개념을
@@ -48,37 +49,51 @@ weight: 50
 파드가 생성되거나 수정될 때 파드를 수정하기 위해 동기적으로 동작한다.
 이 플러그인이 활성 상태(대부분의 배포에서 기본값)인 경우 파드 생성 또는 수정 시 다음 작업을 수행한다.
 
- 1. 파드에 `ServiceAccount` 가 없다면, `ServiceAccount` 를 `default` 로 설정한다.
- 1. 파드에 참조되는 `ServiceAccount` 가 있도록 하고, 그렇지 않으면 이를 거부한다.
- 1. 파드에 `ImagePullSecrets` 이 없는 경우, `ServiceAccount` 의 `ImagePullSecrets` 이 파드에 추가된다.
- 1. 파드에 API 접근을 위한 토큰이 포함된 `volume` 을 추가한다.
- 1. `/var/run/secrets/kubernetes.io/serviceaccount` 에 마운트된 파드의 각 컨테이너에 `volumeSource` 를 추가한다.
+1. 파드에 `ServiceAccount` 가 없다면, `ServiceAccount` 를 `default` 로 설정한다.
+1. 이전 단계는 파드에 참조되는 `ServiceAccount` 가 있도록 하고, 그렇지 않으면 이를 거부한다.
+1. 서비스어카운트 `automountServiceAccountToken` 와 파드의 `automountServiceAccountToken` 중 어느 것도 `false` 로 설정되어 있지 않다면, API 접근을 위한 토큰이 포함된 `volume` 을 파드에 추가한다.
+1. 이전 단계에서 서비스어카운트 토큰을 위한 볼륨이 만들어졌다면, `/var/run/secrets/kubernetes.io/serviceaccount` 에 마운트된 파드의 각 컨테이너에 `volumeSource` 를 추가한다.
+1. 파드에 `ImagePullSecrets` 이 없는 경우, `ServiceAccount` 의 `ImagePullSecrets` 이 파드에 추가된다.
 
 #### 바인딩된 서비스 어카운트 토큰 볼륨
+
 {{< feature-state for_k8s_version="v1.21" state="beta" >}}
 
-`BoundServiceAccountTokenVolume` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가 활성화되면, 서비스 어카운트 어드미션 컨트롤러가
-시크릿 볼륨 대신 프로젝티드 서비스 어카운트 토큰 볼륨을 추가한다. 서비스 어카운트 토큰은 기본적으로 1시간 후에 만료되거나 파드가 삭제된다. [프로젝티드 볼륨](/docs/tasks/configure-pod-container/configure-projected-volume-storage/)에 대한 자세한 내용을 참고한다.
+`BoundServiceAccountTokenVolume` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가 활성화되면, 
+토큰 컨트롤러에 의해 생성된 무기한 서비스 어카운트 토큰을 위해, 서비스 어카운트 어드미션 컨트롤러가 시크릿 기반 볼륨 대신 다음과 같은 프로젝티드 볼륨을 추가한다.
 
-이 기능은 모든 네임스페이스에 "kube-root-ca.crt" 컨피그맵을 게시하는 활성화된 `RootCAConfigMap` 기능 게이트에 따라 다르다. 이 컨피그맵에는 kube-apiserver에 대한 연결을 확인하는 데 사용되는 CA 번들이 포함되어 있다.
+```yaml
+- name: kube-api-access-<random-suffix>
+  projected:
+    defaultMode: 420 # 0644
+    sources:
+      - serviceAccountToken:
+          expirationSeconds: 3600
+          path: token
+      - configMap:
+          items:
+            - key: ca.crt
+              path: ca.crt
+          name: kube-root-ca.crt
+      - downwardAPI:
+          items:
+            - fieldRef:
+                apiVersion: v1
+                fieldPath: metadata.namespace
+              path: namespace
+```
 
-1. 파드에 `serviceAccountName`가 없다면, `serviceAccountName`를
-   `default`로 설정한다.
-1. 파드에 참조되는 `serviceAccountName`가 있도록 하고, 그렇지 않으면
-   이를 거부한다.
-1. 파드에 `imagePullSecrets`이 없는 경우, 서비스어카운트의
-   `imagePullSecrets`이 파드에 추가된다.
-1. 서비스어카운트 `automountServiceAccountToken` 또는 파드의
-   `automountServiceAccountToken` 이 `false` 로 설정되지 않은 경우
-   파드에 API 접근 토큰이 포함된 `volume`을 추가한다.
-1. 이전 단계에서 서비스어카운트 토큰에 대한 볼륨을 생성한 경우,
-   `/var/run/secrets/kubernetes.io/serviceaccount`에 마운트된
-   파드의 각 컨테이너에 `volumeSource`를 추가한다.
+프로젝티드 볼륨은 세 가지로 구성된다.
 
-`BoundServiceAccountTokenVolume` 기능 게이트가 활성화되면 서비스 어카운트 볼륨을 프로젝티드 볼륨으로 마이그레이션할 수 있다.
-서비스 어카운트 토큰은 1시간 후에 만료되거나 파드가 삭제된다.
-[프로젝티드 볼륨](/docs/tasks/configure-pod-container/configure-projected-volume-storage/)에 대한
-자세한 내용을 참조한다.
+1. kube-apiserver로부터 TokenRequest API를 통해 얻은 서비스어카운트토큰(ServiceAccountToken). 서비스어카운트토큰은 기본적으로 1시간 뒤에, 또는 파드가 삭제될 때 만료된다. 서비스어카운트토큰은 파드에 연결되며 kube-apiserver를 위해 존재한다.
+1. kube-apiserver에 대한 연결을 확인하는 데 사용되는 CA 번들을 포함하는 컨피그맵(ConfigMap). 이 기능은 모든 네임스페이스에 "kube-root-ca.crt" 컨피그맵을 게시하는 기능 게이트인 `RootCAConfigMap`이 활성화되어 있어야 동작한다. `RootCAConfigMap`은 1.20에서 기본적으로 활성화되어 있으며, 1.21 이상에서는 항상 활성화된 상태이다.
+1. 파드의 네임스페이스를 참조하는 DownwardAPI.
+
+상세 사항은 [프로젝티드 볼륨](/docs/tasks/configure-pod-container/configure-projected-volume-storage/)을 참고한다.
+
+`BoundServiceAccountTokenVolume` 기능 게이트가 활성화되어 있지 않은 경우, 
+위의 프로젝티드 볼륨을 파드 스펙에 추가하여 시크릿 기반 서비스 어카운트 볼륨을 프로젝티드 볼륨으로 수동으로 옮길 수 있다.
+그러나, `RootCAConfigMap`은 활성화되어 있어야 한다.
 
 ### 토큰 컨트롤러
 

From 2117217f62045a83f2f83d6dd4a4c7feb44fa163 Mon Sep 17 00:00:00 2001
From: Christopher Negus <striker57@gmail.com>
Date: Thu, 8 Apr 2021 13:58:17 +0000
Subject: [PATCH 698/788] Adding new Production Environment section

Review comments resolved

Small edits

Edits from reylejano comments

Edits from a-mcarthy and kbhawkey comments

More edits from sftim comments

Moved index.md to _index.md to pick up directory links
---
 .../setup/production-environment/_index.md    | 291 +++++++++++++++++-
 1 file changed, 290 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/_index.md b/content/en/docs/setup/production-environment/_index.md
index 346280893e..27308495be 100644
--- a/content/en/docs/setup/production-environment/_index.md
+++ b/content/en/docs/setup/production-environment/_index.md
@@ -1,4 +1,293 @@
 ---
-title: Production environment
+title: "Production environment"
+description: Create a production-quality Kubernetes cluster
 weight: 30
+no_list: true
 ---
+<!-- overview -->
+
+A production-quality Kubernetes cluster requires planning and preparation.
+If your Kubernetes cluster is to run critical workloads, it must be configured to be resilient.
+This page explains steps you can take to set up a production-ready cluster,
+or to uprate an existing cluster for production use.
+If you're already familiar with production setup and want the links, skip to
+[What's next](#what-s-next).
+
+<!-- body -->
+
+## Production considerations
+
+Typically, a production Kubernetes cluster environment has more requirements than a
+personal learning, development, or test environment Kubernetes. A production environment may require
+secure access by many users, consistent availability, and the resources to adapt
+to changing demands.
+
+As you decide where you want your production Kubernetes environment to live
+(on premises or in a cloud) and the amount of management you want to take
+on or hand to others, consider how your requirements for a Kubernetes cluster
+are influenced by the following issues:
+
+- *Availability*: A single-machine Kubernetes [learning environment](/docs/setup/#learning-environment)
+has a single point of failure. Creating a highly available cluster means considering:
+  - Separating the control plane from the worker nodes.
+  - Replicating the control plane components on multiple nodes.
+  - Load balancing traffic to the cluster’s {{< glossary_tooltip term_id="kube-apiserver" text="API server" >}}.
+  - Having enough worker nodes available, or able to quickly become available, as changing workloads warrant it.
+
+- *Scale*: If you expect your production Kubernetes environment to receive a stable amount of
+demand, you might be able to set up for the capacity you need and be done. However,
+if you expect demand to grow over time or change dramatically based on things like
+season or special events, you need to plan how to scale to relieve increased
+pressure from more requests to the control plane and worker nodes or scale down to reduce unused
+resources.
+
+- *Security and access management*: You have full admin privileges on your own
+Kubernetes learning cluster. But shared clusters with important workloads, and
+more than one or two users, require a more refined approach to who and what can
+access cluster resources. You can use role-based access control
+([RBAC](/docs/reference/access-authn-authz/rbac/)) and other
+security mechanisms to make sure that users and workloads can get access to the
+resources they need, while keeping workloads, and the cluster itself, secure.
+You can set limits on the resources that users and workloads can access
+by managing [policies](https://kubernetes.io/docs/concepts/policy/) and
+[container resources](/docs/concepts/configuration/manage-resources-containers/).
+
+Before building a Kubernetes production environment on your own, consider
+handing off some or all of this job to 
+[Turnkey Cloud Solutions](/docs/setup/production-environment/turnkey-solutions/) 
+providers or other [Kubernetes Partners](https://kubernetes.io/partners/).
+Options include:
+
+- *Serverless*: Just run workloads on third-party equipment without managing
+a cluster at all. You will be charged for things like CPU usage, memory, and
+disk requests.
+- *Managed control plane*: Let the provider manage the scale and availability
+of the cluster's control plane, as well as handle patches and upgrades.
+- *Managed worker nodes*: Configure pools of nodes to meet your needs,
+then the provider makes sure those nodes are available and ready to implement
+upgrades when needed.
+- *Integration*: There are providers that integrate Kubernetes with other
+services you may need, such as storage, container registries, authentication
+methods, and development tools.
+
+Whether you build a production Kubernetes cluster yourself or work with
+partners, review the following sections to evaluate your needs as they relate
+to your cluster’s *control plane*, *worker nodes*, *user access*, and
+*workload resources*.
+
+## Production cluster setup
+
+In a production-quality Kubernetes cluster, the control plane manages the
+cluster from services that can be spread across multiple computers
+in different ways. Each worker node, however, represents a single entity that
+is configured to run Kubernetes pods.
+
+### Production control plane
+
+The simplest Kubernetes cluster has the entire control plane and worker node
+services running on the same machine. You can grow that environment by adding
+worker nodes, as reflected in the diagram illustrated in
+[Kubernetes Components](/docs/concepts/overview/components/).
+If the cluster is meant to be available for a short period of time, or can be
+discarded if something goes seriously wrong, this might meet your needs.
+
+If you need a more permanent, highly available cluster, however, you should
+consider ways of extending the control plane. By design, one-machine control
+plane services running on a single machine are not highly available.
+If keeping the cluster up and running
+and ensuring that it can be repaired if something goes wrong is important,
+consider these steps:
+
+- *Choose deployment tools*: You can deploy a control plane using tools such
+as kubeadm, kops, and kubespray. See
+[Installing Kubernetes with deployment tools](/docs/setup/production-environment/tools/)
+to learn tips for production-quality deployments using each of those deployment
+methods. Different [Container Runtimes](/docs/setup/production-environment/container-runtimes/)
+are available to use with your deployments.
+- *Manage certificates*: Secure communications between control plane services
+are implemented using certificates. Certificates are automatically generated
+during deployment or you can generate them using your own certificate authority.
+See [PKI certificates and requirements](/docs/setup/best-practices/certificates/) for details.
+- *Configure load balancer for apiserver*: Configure a load balancer
+to distribute external API requests to the apiserver service instances running on different nodes. See 
+[Create an External Load Balancer](/docs/tasks/access-application-cluster/create-external-load-balancer/)
+for details.
+- *Separate and backup etcd service*: The etcd services can either run on the
+same machines as other control plane services or run on separate machines, for
+extra security and availability. Because etcd stores cluster configuration data,
+backing up the etcd database should be done regularly to ensure that you can
+repair that database if needed.
+See the [etcd FAQ](https://etcd.io/docs/v3.4/faq/) for details on configuring and using etcd.
+See [Operating etcd clusters for Kubernetes](/docs/tasks/administer-cluster/configure-upgrade-etcd/)
+and [Set up a High Availability etcd cluster with kubeadm](/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/)
+for details.
+- *Create multiple control plane systems*: For high availability, the
+control plane should not be limited to a single machine. If the control plane
+services are run by an init service (such as systemd), each service should run on at
+least three machines. However, running control plane services as pods in
+Kubernetes ensures that the replicated number of services that you request
+will always be available.
+The scheduler should be fault tolerant,
+but not highly available. Some deployment tools set up [Raft](https://raft.github.io/)
+consensus algorithm to do leader election of Kubernetes services. If the
+primary goes away, another service elects itself and take over. 
+- *Span multiple zones*: If keeping your cluster available at all times is
+critical, consider creating a cluster that runs across multiple data centers,
+referred to as zones in cloud environments. Groups of zones are referred to as regions.
+By spreading a cluster across
+multiple zones in the same region, it can improve the chances that your
+cluster will continue to function even if one zone becomes unavailable.
+See [Running in multiple zones](/docs/setup/best-practices/multiple-zones/) for details.
+- *Manage on-going features*: If you plan to keep your cluster over time,
+there are tasks you need to do to maintain its health and security. For example,
+if you installed with kubeadm, there are instructions to help you with
+[Certificate Management](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/)
+and [Upgrading kubeadm clusters](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/).
+See [Administer a Cluster](/docs/tasks/administer-cluster/)
+for a longer list of Kubernetes administrative tasks.
+
+To learn about available options when you run control plane services, see
+[kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/),
+[kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/),
+and [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/)
+component pages. For highly available control plane examples, see
+[Options for Highly Available topology](/docs/setup/production-environment/tools/kubeadm/ha-topology/),
+[Creating Highly Available clusters with kubeadm](/docs/setup/production-environment/tools/kubeadm/high-availability/),
+and [Operating etcd clusters for Kubernetes](/docs/tasks/administer-cluster/configure-upgrade-etcd/).
+See [Backing up an etcd cluster](/docs/tasks/administer-cluster/configure-upgrade-etcd/#backing-up-an-etcd-cluster)
+for information on making an etcd backup plan.
+
+### Production worker nodes
+
+Production-quality workloads need to be resilient and anything they rely
+on needs to be resilient (such as CoreDNS). Whether you manage your own
+control plane or have a cloud provider do it for you, you still need to
+consider how you want to manage your worker nodes (also referred to
+simply as *nodes*).  
+
+- *Configure nodes*: Nodes can be physical or virtual machines. If you want to
+create and manage your own nodes, you can install a supported operating system,
+then add and run the appropriate
+[Node services](/docs/concepts/overview/components/#node-components). Consider:
+  - The demands of your workloads when you set up nodes by having appropriate memory, CPU, and disk speed and storage capacity available.
+  - Whether generic computer systems will do or you have workloads that need GPU processors, Windows nodes, or VM isolation.
+- *Validate nodes*: See [Valid node setup](/docs/setup/best-practices/node-conformance/)
+for information on how to ensure that a node meets the requirements to join
+a Kubernetes cluster.
+- *Add nodes to the cluster*: If you are managing your own cluster you can
+add nodes by setting up your own machines and either adding them manually or
+having them register themselves to the cluster’s apiserver. See the
+[Nodes](/docs/concepts/architecture/nodes/) section for information on how to set up Kubernetes to add nodes in these ways.
+- *Add Windows nodes to the cluster*: Kubernetes offers support for Windows
+worker nodes, allowing you to run workloads implemented in Windows containers. See
+[Windows in Kubernetes](/docs/setup/production-environment/windows/) for details.
+- *Scale nodes*: Have a plan for expanding the capacity your cluster will
+eventually need. See [Considerations for large clusters](/docs/setup/best-practices/cluster-large/)
+to help determine how many nodes you need, based on the number of pods and
+containers you need to run. If you are managing nodes yourself, this can mean
+purchasing and installing your own physical equipment.
+- *Autoscale nodes*: Most cloud providers support
+[Cluster Autoscaler](https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler#readme)
+to replace unhealthy nodes or grow and shrink the number of nodes as demand requires. See the
+[Frequently Asked Questions](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/FAQ.md)
+for how the autoscaler works and
+[Deployment](https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler#deployment)
+for how it is implemented by different cloud providers. For on-premises, there
+are some virtualization platforms that can be scripted to spin up new nodes
+based on demand.
+- *Set up node health checks*: For important workloads, you want to make sure
+that the nodes and pods running on those nodes are healthy. Using the
+[Node Problem Detector](/docs/tasks/debug-application-cluster/monitor-node-health/)
+daemon, you can ensure your nodes are healthy.
+
+## Production user management
+
+In production, you may be moving from a model where you or a small group of
+people are accessing the cluster to where there may potentially be dozens or
+hundreds of people. In a learning environment or platform prototype, you might have a single
+administrative account for everything you do. In production, you will want
+more accounts with different levels of access to different namespaces.
+
+Taking on a production-quality cluster means deciding how you
+want to selectively allow access by other users. In particular, you need to
+select strategies for validating the identities of those who try to access your
+cluster (authentication) and deciding if they have permissions to do what they
+are asking (authorization):
+
+- *Authentication*: The apiserver can authenticate users using client
+certificates, bearer tokens, an authenticating proxy, or HTTP basic auth.
+You can choose which authentication methods you want to use.
+Using plugins, the apiserver can leverage your organization’s existing
+authentication methods, such as LDAP or Kerberos. See
+[Authentication](/docs/reference/access-authn-authz/authentication/)
+for a description of these different methods of authenticating Kubernetes users.
+- *Authorization*: When you set out to authorize your regular users, you will probably choose between RBAC and ABAC authorization. See [Authorization Overview](/docs/reference/access-authn-authz/authorization/) to review different modes for authorizing user accounts (as well as service account access to your cluster):
+  - *Role-based access control* ([RBAC](/docs/reference/access-authn-authz/rbac/)): Lets you assign access to your cluster by allowing specific sets of permissions to authenticated users. Permissions can be assigned for a specific namespace (Role) or across the entire cluster (ClusterRole). Then using RoleBindings and ClusterRoleBindings, those permissions can be attached to particular users.
+  - *Attribute-based access control* ([ABAC](/docs/reference/access-authn-authz/abac/)): Lets you create policies based on resource attributes in the cluster and will allow or deny access based on those attributes. Each line of a policy file identifies versioning properties (apiVersion and kind) and a map of spec properties to match the subject (user or group), resource property, non-resource property (/version or /apis), and readonly. See [Examples](/docs/reference/access-authn-authz/abac/#examples) for details.
+
+As someone setting up authentication and authorization on your production Kubernetes cluster, here are some things to consider:
+
+- *Set the authorization mode*: When the Kubernetes API server
+([kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/))
+starts, the supported authentication modes must be set using the *--authorization-mode*
+flag. For example, that flag in the *kube-adminserver.yaml* file (in */etc/kubernetes/manifests*)
+could be set to Node,RBAC. This would allow Node and RBAC authorization for authenticated requests.
+- *Create user certificates and role bindings (RBAC)*: If you are using RBAC
+authorization, users can create a CertificateSigningRequest (CSR) that can be
+signed by the cluster CA. Then you can bind Roles and ClusterRoles to each user.
+See [Certificate Signing Requests](/docs/reference/access-authn-authz/certificate-signing-requests/)
+for details.
+- *Create policies that combine attributes (ABAC)*: If you are using ABAC
+authorization, you can assign combinations of attributes to form policies to
+authorize selected users or groups to access particular resources (such as a
+pod), namespace, or apiGroup. For more information, see
+[Examples](/docs/reference/access-authn-authz/abac/#examples).
+- *Consider Admission Controllers*: Additional forms of authorization for
+requests that can come in through the API server include
+[Webhook Token Authentication](/docs/reference/access-authn-authz/authentication/#webhook-token-authentication).
+Webhooks and other special authorization types need to be enabled by adding
+[Admission Controllers](/docs/reference/access-authn-authz/admission-controllers/)
+to the API server.
+
+## Set limits on workload resources
+
+Demands from production workloads can cause pressure both inside and outside
+of the Kubernetes control plane. Consider these items when setting up for the
+needs of your cluster's workloads:
+
+- *Set namespace limits*: Set per-namespace quotas on things like memory and CPU. See
+[Manage Memory, CPU, and API Resources](/docs/tasks/administer-cluster/manage-resources/)
+for details. You can also set
+[Hierarchical Namespaces](/blog/2020/08/14/introducing-hierarchical-namespaces/)
+for inheriting limits.
+- *Prepare for DNS demand*: If you expect workloads to massively scale up,
+your DNS service must be ready to scale up as well. See
+[Autoscale the DNS service in a Cluster](/docs/tasks/administer-cluster/dns-horizontal-autoscaling/).
+- *Create additional service accounts*: User accounts determine what users can
+do on a cluster, while a service account defines pod access within a particular
+namespace. By default, a pod takes on the default service account from its namespace.
+See [Managing Service Accounts](/docs/reference/access-authn-authz/service-accounts-admin/)
+for information on creating a new service account. For example, you might want to:
+  - Add secrets that a pod could use to pull images from a particular container registry. See [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/) for an example.
+  - Assign RBAC permissions to a service account. See [ServiceAccount permissions](/docs/reference/access-authn-authz/rbac/#service-account-permissions) for details.
+
+## What's next {#what-s-next}
+
+- Decide if you want to build your own production Kubernetes or obtain one from
+available [Turnkey Cloud Solutions](/docs/setup/production-environment/turnkey-solutions/)
+or [Kubernetes Partners](https://kubernetes.io/partners/).
+- If you choose to build your own cluster, plan how you want to
+handle [certificates](/docs/setup/best-practices/certificates/)
+and set up high availability for features such as
+[etcd](/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/)
+and the
+[API server](/docs/setup/production-environment/tools/kubeadm/ha-topology/).
+- Choose from [kubeadm](/docs/setup/production-environment/tools/kubeadm/), [kops](/docs/setup/production-environment/tools/kops/) or [Kubespray](/docs/setup/production-environment/tools/kubespray/)
+deployment methods.
+- Configure user management by determining your
+[Authentication](/docs/reference/access-authn-authz/authentication/) and
+[Authorization](docs/reference/access-authn-authz/authorization/) methods.
+- Prepare for application workloads by setting up
+[resource limits](docs/tasks/administer-cluster/manage-resources/),
+[DNS autoscaling](/docs/tasks/administer-cluster/dns-horizontal-autoscaling/)
+and [service accounts](/docs/reference/access-authn-authz/service-accounts-admin/).

From 040720a46561c442cf6a94210fae9ecec6a73d5d Mon Sep 17 00:00:00 2001
From: Carlos Santana <csantana23@gmail.com>
Date: Tue, 4 May 2021 21:02:59 -0400
Subject: [PATCH 699/788] [es] Fix broken links for concepts index page

Signed-off-by: Carlos Santana <csantana23@gmail.com>
---
 content/es/docs/concepts/_index.md | 20 +++++++++-----------
 1 file changed, 9 insertions(+), 11 deletions(-)

diff --git a/content/es/docs/concepts/_index.md b/content/es/docs/concepts/_index.md
index 7dd7709bae..075da20ad6 100644
--- a/content/es/docs/concepts/_index.md
+++ b/content/es/docs/concepts/_index.md
@@ -31,18 +31,18 @@ Kubernetes tiene diferentes abstracciones que representan el estado de tu sistem
 
 Los objetos básicos de Kubernetes incluyen:
 
-* [Pod](/docs/concepts/workloads/pods/pod-overview/)
+* [Pod](/es/docs/concepts/workloads/pods/pod/)
 * [Service](/docs/concepts/services-networking/service/)
 * [Volume](/docs/concepts/storage/volumes/)
-* [Namespace](/docs/concepts/overview/working-with-objects/namespaces/)
+* [Namespace](/es/docs/concepts/overview/working-with-objects/namespaces/)
 
 Además, Kubernetes contiene abstracciónes de nivel superior llamadas Controladores. Los Controladores se basan en los objetos básicos y proporcionan funcionalidades adicionales sobre ellos. Incluyen:
 
-* [ReplicaSet](/docs/concepts/workloads/controllers/replicaset/)
-* [Deployment](/docs/concepts/workloads/controllers/deployment/)
-* [StatefulSet](/docs/concepts/workloads/controllers/statefulset/)
-* [DaemonSet](/docs/concepts/workloads/controllers/daemonset/)
-* [Job](/docs/concepts/workloads/controllers/jobs-run-to-completion/)
+* [ReplicaSet](/es/docs/concepts/workloads/controllers/replicaset/)
+* [Deployment](/es/docs/concepts/workloads/controllers/deployment/)
+* [StatefulSet](/es/docs/concepts/workloads/controllers/statefulset/)
+* [DaemonSet](/es/docs/concepts/workloads/controllers/daemonset/)
+* [Job](/es/docs/concepts/workloads/controllers/jobs-run-to-completion/)
 
 
 ## Plano de Control de Kubernetes
@@ -64,15 +64,13 @@ En un clúster de Kubernetes, los nodos son las máquinas (máquinas virtuales,
 #### Metadatos de los Objectos
 
 
-* [Annotations](/docs/concepts/overview/working-with-objects/annotations/)
+* [Annotations](/es/docs/concepts/overview/working-with-objects/annotations/)
 
 
 
 ## {{% heading "whatsnext" %}}
 
 
-Si estás interesado en escribir una página sobre conceptos,
-revisa [Usando Templates de Páginas](/docs/home/contribute/page-templates/)
-para obtener información sobre el tipo de página conceptos y la plantilla conceptos.
+Si quieres empezar a contribuir a la documentación de Kubernetes accede la pagina [Empieza a contribuir](/es/docs/contribute/start/).
 
 

From c186321f604c9946289df87fc7f99d5c1932b0eb Mon Sep 17 00:00:00 2001
From: Carlos Santana <csantana23@gmail.com>
Date: Wed, 5 May 2021 10:55:49 -0400
Subject: [PATCH 700/788] =?UTF-8?q?fix=20acento=20la=20p=C3=A1gina?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Carlos Santana <csantana23@gmail.com>
---
 content/es/docs/concepts/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/concepts/_index.md b/content/es/docs/concepts/_index.md
index 075da20ad6..9929ce62c7 100644
--- a/content/es/docs/concepts/_index.md
+++ b/content/es/docs/concepts/_index.md
@@ -71,6 +71,6 @@ En un clúster de Kubernetes, los nodos son las máquinas (máquinas virtuales,
 ## {{% heading "whatsnext" %}}
 
 
-Si quieres empezar a contribuir a la documentación de Kubernetes accede la pagina [Empieza a contribuir](/es/docs/contribute/start/).
+Si quieres empezar a contribuir a la documentación de Kubernetes accede la página [Empieza a contribuir](/es/docs/contribute/start/).
 
 

From e2dfeef40aa5968702dfcf0263346edc2b4830d2 Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Thu, 6 May 2021 09:50:40 +0900
Subject: [PATCH 701/788] Remove duplicate code block

---
 .../port-forward-access-application-cluster.md             | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md b/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
index 0a6d352d2c..a0b4d78dab 100644
--- a/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
+++ b/content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
@@ -196,13 +196,6 @@ the slightly simpler syntax:
 kubectl port-forward deployment/mongo :27017
 ```
 
-The output is similar to this:
-
-```
-Forwarding from 127.0.0.1:63753 -> 27017
-Forwarding from [::1]:63753 -> 27017
-```
-
 The `kubectl` tool finds a local port number that is not in use (avoiding low ports numbers,
 because these might be used by other applications). The output is similar to:
 

From 3a31285ac6a39f896cd9df4dcede65ba5f940423 Mon Sep 17 00:00:00 2001
From: Brandon Mitchell <git@bmitch.net>
Date: Wed, 5 May 2021 21:17:00 -0400
Subject: [PATCH 702/788] Updating dockershim FAQ with Mirantis announcement

Signed-off-by: Brandon Mitchell <git@bmitch.net>
---
 content/en/blog/_posts/2020-12-02-dockershim-faq.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/content/en/blog/_posts/2020-12-02-dockershim-faq.md b/content/en/blog/_posts/2020-12-02-dockershim-faq.md
index 918a969e51..5fe65fce53 100644
--- a/content/en/blog/_posts/2020-12-02-dockershim-faq.md
+++ b/content/en/blog/_posts/2020-12-02-dockershim-faq.md
@@ -47,6 +47,15 @@ and other ecosystem groups to ensure a smooth transition and will evaluate thing
 as the situation evolves.
 
 
+### Can I still use dockershim after it is removed from Kubernetes?
+
+Update:
+[Mirantis and Docker have committed to maintaining the dockershim][mirantis] after
+it is removed from Kubernetes.
+
+[mirantis]: https://www.mirantis.com/blog/mirantis-to-take-over-support-of-kubernetes-dockershim-2/
+
+
 ### Will my existing Docker images still work?
 
 Yes, the images produced from `docker build` will work with all CRI implementations.

From e567d3c82500c7c917c0c0fa7192cd989c1d050e Mon Sep 17 00:00:00 2001
From: josny <1336836243@qq.com>
Date: Thu, 6 May 2021 15:29:50 +0800
Subject: [PATCH 703/788] Update multiple-zones.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

错别字修改
---
 content/zh/docs/setup/best-practices/multiple-zones.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/best-practices/multiple-zones.md b/content/zh/docs/setup/best-practices/multiple-zones.md
index b36b607781..76dac538fc 100644
--- a/content/zh/docs/setup/best-practices/multiple-zones.md
+++ b/content/zh/docs/setup/best-practices/multiple-zones.md
@@ -38,7 +38,7 @@ one zone also impairs services in another zone.
 ## 背景
 
 Kubernetes 从设计上允许同一个 Kubernetes 集群跨多个失效区来运行，
-通常这些去位于某个称作 _区域（region）_ 逻辑分组中。
+通常这些区位于某个称作 _区域（region）_ 逻辑分组中。
 主要的云提供商都将区域定义为一组失效区的集合（也称作 _可用区（Availability Zones）_），
 能够提供一组一致的功能特性：每个区域内，各个可用区提供相同的 API 和服务。
 

From 8819bdc0ac3158968f5c43fc45393138fea027d3 Mon Sep 17 00:00:00 2001
From: seokho-son <shsongist@gmail.com>
Date: Wed, 5 May 2021 19:37:00 +0900
Subject: [PATCH 704/788] Update task tookls and network in dev-1.21-ko.2

---
 .../docs/tasks/network/validate-dual-stack.md | 16 ++++++--
 .../docs/tasks/tools/install-kubectl-linux.md | 21 +++--------
 .../docs/tasks/tools/install-kubectl-macos.md | 33 ++++++++++++-----
 .../tasks/tools/install-kubectl-windows.md    | 37 ++-----------------
 4 files changed, 46 insertions(+), 61 deletions(-)

diff --git a/content/ko/docs/tasks/network/validate-dual-stack.md b/content/ko/docs/tasks/network/validate-dual-stack.md
index a9f15956a0..5a3fdc477e 100644
--- a/content/ko/docs/tasks/network/validate-dual-stack.md
+++ b/content/ko/docs/tasks/network/validate-dual-stack.md
@@ -1,4 +1,8 @@
 ---
+
+
+
+
 min-kubernetes-server-version: v1.20
 title: IPv4/IPv6 이중 스택 검증
 content_type: task
@@ -36,9 +40,10 @@ a00:100::/24
 ```
 단일 IPv4 블록과 단일 IPv6 블록이 할당되어야 한다.
 
-노드가 IPv4 및 IPv6 인터페이스를 가지고 있는지 검증한다. (노드 이름을 클러스터의 검증된 노드로 대체한다. 본 예제에서 노드 이름은 k8s-linuxpool1-34450317-0) 이다.
+노드가 IPv4 및 IPv6 인터페이스를 가지고 있는지 검증한다. 노드 이름을 클러스터의 검증된 노드로 대체한다. 본 예제에서 노드 이름은 `k8s-linuxpool1-34450317-0` 이다.
+
 ```shell
-kubectl get nodes k8s-linuxpool1-34450317-0 -o go-template --template='{{range .status.addresses}}{{printf "%s: %s \n" .type .address}}{{end}}'
+kubectl get nodes k8s-linuxpool1-34450317-0 -o go-template --template='{{range .status.addresses}}{{printf "%s: %s\n" .type .address}}{{end}}'
 ```
 ```
 Hostname: k8s-linuxpool1-34450317-0
@@ -48,9 +53,10 @@ InternalIP: 2001:1234:5678:9abc::5
 
 ### 파드 어드레싱 검증
 
-파드가 IPv4 및 IPv6 주소를 할당받았는지 검증한다. (파드 이름을 클러스터에서 검증된 파드로 대체한다. 본 예제에서 파드 이름은 pod01 이다.)
+파드가 IPv4 및 IPv6 주소를 할당받았는지 검증한다. 파드 이름을 클러스터에서 검증된 파드로 대체한다. 본 예제에서 파드 이름은 `pod01` 이다.
+
 ```shell
-kubectl get pods pod01 -o go-template --template='{{range .status.podIPs}}{{printf "%s \n" .ip}}{{end}}'
+kubectl get pods pod01 -o go-template --template='{{range .status.podIPs}}{{printf "%s\n" .ip}}{{end}}'
 ```
 ```
 10.244.1.4
@@ -68,6 +74,7 @@ a00:100::4
 ```
 
 다음 커맨드는 컨테이너 내 `MY_POD_IPS` 환경 변수의 값을 출력한다. 해당 값은 파드의 IPv4 및 IPv6 주소를 나타내는 쉼표로 구분된 목록이다.
+
 ```shell
 kubectl exec -it pod01 -- set | grep MY_POD_IPS
 ```
@@ -225,3 +232,4 @@ kubectl get svc -l app=MyApp
 ```shell
 NAME         TYPE           CLUSTER-IP   EXTERNAL-IP        PORT(S)        AGE
 my-service   LoadBalancer   fd00::7ebc   2603:1030:805::5   80:30790/TCP   35s
+```
diff --git a/content/ko/docs/tasks/tools/install-kubectl-linux.md b/content/ko/docs/tasks/tools/install-kubectl-linux.md
index 96ab0a4024..39c442c939 100644
--- a/content/ko/docs/tasks/tools/install-kubectl-linux.md
+++ b/content/ko/docs/tasks/tools/install-kubectl-linux.md
@@ -12,24 +12,17 @@ card:
 
 ## {{% heading "prerequisites" %}}
 
-클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
-예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
+클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다. 예를 들어, v{{< skew latestVersion >}} 클라이언트는 v{{< skew prevMinorVersion >}}, v{{< skew latestVersion >}}, v{{< skew nextMinorVersion >}}의 컨트롤 플레인과 연동될 수 있다.
 최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
 
 ## 리눅스에 kubectl 설치
 
 다음과 같은 방법으로 리눅스에 kubectl을 설치할 수 있다.
 
-- [{{% heading "prerequisites" %}}](#시작하기-전에)
-- [리눅스에 kubectl 설치](#리눅스에-kubectl-설치)
-  - [리눅스에서 curl을 사용하여 kubectl 바이너리 설치]{#install-kubectl-binary-with-curl-on-linux}
-  - [기본 패키지 관리 도구를 사용하여 설치]{#install-using-native-package-management}
-  - [다른 패키지 관리 도구를 사용하여 설치]{#install-using-other-package-management}
-  - [Google Cloud SDK를 사용하여 설치]{#install-on-linux-as-part-of-the-google-cloud-sdk}
-- [kubectl 구성 확인](#kubectl-구성-확인)
-- [선택적 kubectl 구성](#선택적-kubectl-구성)
-  - [셸 자동 완성 활성화](#셸-자동-완성-활성화)
-- [{{% heading "whatsnext" %}}](#다음-내용)
+- [리눅스에 curl을 사용하여 kubectl 바이너리 설치](#install-kubectl-binary-with-curl-on-linux)
+- [기본 패키지 관리 도구를 사용하여 설치](#install-using-native-package-management)
+- [다른 패키지 관리 도구를 사용하여 설치](#install-using-other-package-management)
+- [리눅스에 Google Cloud SDK를 사용하여 설치](#install-on-linux-as-part-of-the-google-cloud-sdk)
 
 ### 리눅스에서 curl을 사용하여 kubectl 바이너리 설치 {#install-kubectl-binary-with-curl-on-linux}
 
@@ -158,7 +151,6 @@ yum install -y kubectl
 
 ```shell
 snap install kubectl --classic
-
 kubectl version --client
 ```
 
@@ -169,7 +161,6 @@ kubectl version --client
 
 ```shell
 brew install kubectl
-
 kubectl version --client
 ```
 
@@ -177,7 +168,7 @@ kubectl version --client
 
 {{< /tabs >}}
 
-### Google Cloud SDK를 사용하여 설치 {#install-on-linux-as-part-of-the-google-cloud-sdk}
+### 리눅스에 Google Cloud SDK를 사용하여 설치 {#install-on-linux-as-part-of-the-google-cloud-sdk}
 
 {{< include "included/install-kubectl-gcloud.md" >}}
 
diff --git a/content/ko/docs/tasks/tools/install-kubectl-macos.md b/content/ko/docs/tasks/tools/install-kubectl-macos.md
index 1fd37151a6..614134da8a 100644
--- a/content/ko/docs/tasks/tools/install-kubectl-macos.md
+++ b/content/ko/docs/tasks/tools/install-kubectl-macos.md
@@ -12,8 +12,7 @@ card:
 
 ## {{% heading "prerequisites" %}}
 
-클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
-예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
+클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다. 예를 들어, v{{< skew latestVersion >}} 클라이언트는 v{{< skew prevMinorVersion >}}, v{{< skew latestVersion >}}, v{{< skew nextMinorVersion >}}의 컨트롤 플레인과 연동될 수 있다.
 최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
 
 ## macOS에 kubectl 설치
@@ -29,17 +28,28 @@ card:
 
 1. 최신 릴리스를 다운로드한다.
 
-   ```bash
+   {{< tabs name="download_binary_macos" >}}
+   {{< tab name="Intel" codelang="bash" >}}
    curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl"
-   ```
+   {{< /tab >}}
+   {{< tab name="Apple Silicon" codelang="bash" >}}
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/arm64/kubectl"
+   {{< /tab >}}
+   {{< /tabs >}}
 
    {{< note >}}
    특정 버전을 다운로드하려면, `$(curl -L -s https://dl.k8s.io/release/stable.txt)` 명령 부분을 특정 버전으로 바꾼다.
 
-   예를 들어, macOS에서 버전 {{< param "fullversion" >}}을 다운로드하려면, 다음을 입력한다.
+   예를 들어, Intel macOS에 버전 {{< param "fullversion" >}}을 다운로드하려면, 다음을 입력한다.
 
    ```bash
-   curl -LO https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
+   curl -LO "https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl"
+   ```
+
+   Apple Silicon의 macOS라면, 다음을 입력한다.
+
+   ```bash
+   curl -LO "https://dl.k8s.io/release/{{< param "fullversion" >}}/bin/darwin/arm64/kubectl"
    ```
 
    {{< /note >}}
@@ -48,9 +58,14 @@ card:
 
    kubectl 체크섬 파일을 다운로드한다.
 
-   ```bash
-   curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
-   ```
+   {{< tabs name="download_checksum_macos" >}}
+   {{< tab name="Intel" codelang="bash" >}}
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/amd64/kubectl.sha256"
+   {{< /tab >}}
+   {{< tab name="Apple Silicon" codelang="bash" >}}
+   curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/darwin/arm64/kubectl.sha256"
+   {{< /tab >}}
+   {{< /tabs >}}
 
    kubectl 바이너리를 체크섬 파일을 통해 검증한다.
 
diff --git a/content/ko/docs/tasks/tools/install-kubectl-windows.md b/content/ko/docs/tasks/tools/install-kubectl-windows.md
index e1c67af9ce..23b16e3da6 100644
--- a/content/ko/docs/tasks/tools/install-kubectl-windows.md
+++ b/content/ko/docs/tasks/tools/install-kubectl-windows.md
@@ -12,8 +12,7 @@ card:
 
 ## {{% heading "prerequisites" %}}
 
-클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
-예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
+클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다. 예를 들어, v{{< skew latestVersion >}} 클라이언트는 v{{< skew prevMinorVersion >}}, v{{< skew latestVersion >}}, v{{< skew nextMinorVersion >}}의 컨트롤 플레인과 연동될 수 있다.
 최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
 
 ## 윈도우에 kubectl 설치
@@ -21,9 +20,8 @@ card:
 다음과 같은 방법으로 윈도우에 kubectl을 설치할 수 있다.
 
 - [윈도우에서 curl을 사용하여 kubectl 바이너리 설치](#install-kubectl-binary-with-curl-on-windows)
-- [PSGallery에서 PowerShell로 설치](#install-with-powershell-from-psgallery)
 - [Chocolatey 또는 Scoop을 사용하여 윈도우에 설치](#install-on-windows-using-chocolatey-or-scoop)
-- [Google Cloud SDK를 사용하여 설치](#install-on-windows-as-part-of-the-google-cloud-sdk)
+- [윈도우에서 Google Cloud SDK를 사용하여 설치](#install-on-windows-as-part-of-the-google-cloud-sdk)
 
 
 ### 윈도우에서 curl을 사용하여 kubectl 바이너리 설치 {#install-kubectl-binary-with-curl-on-windows}
@@ -76,33 +74,6 @@ card:
 도커 데스크톱을 이전에 설치한 경우, 도커 데스크톱 설치 프로그램에서 추가한 `PATH` 항목 앞에 `PATH` 항목을 배치하거나 도커 데스크톱의 `kubectl` 을 제거해야 할 수도 있다.
 {{< /note >}}
 
-### PSGallery에서 PowerShell로 설치 {#install-with-powershell-from-psgallery}
-
-윈도우에서 [Powershell Gallery](https://www.powershellgallery.com/) 패키지 관리자를 사용하는 경우, Powershell로 kubectl을 설치하고 업데이트할 수 있다.
-
-1. 설치 명령을 실행한다(`DownloadLocation` 을 지정해야 한다).
-
-   ```powershell
-   Install-Script -Name install-kubectl -Scope CurrentUser -Force
-   install-kubectl.ps1 [-DownloadLocation <path>]
-   ```
-
-   {{< note >}}
-   `DownloadLocation` 을 지정하지 않으면, `kubectl` 은 사용자의 `temp` 디렉터리에 설치된다.
-   {{< /note >}}
-
-   설치 프로그램은 `$HOME/.kube` 를 생성하고 구성 파일을 작성하도록 지시한다.
-
-1. 설치한 버전이 최신 버전인지 확인한다.
-
-   ```powershell
-   kubectl version --client
-   ```
-
-{{< note >}}
-설치 업데이트는 1 단계에서 나열한 두 명령을 다시 실행하여 수행한다.
-{{< /note >}}
-
 ### Chocolatey 또는 Scoop을 사용하여 윈도우에 설치 {#install-on-windows-using-chocolatey-or-scoop}
 
 1. 윈도우에 kubectl을 설치하기 위해서 [Chocolatey](https://chocolatey.org) 패키지 관리자나 [Scoop](https://scoop.sh) 커맨드 라인 설치 프로그램을 사용할 수 있다.
@@ -156,7 +127,7 @@ card:
 메모장과 같은 텍스트 편집기를 선택하여 구성 파일을 편집한다.
 {{< /note >}}
 
-### Google Cloud SDK를 사용하여 설치 {#install-on-windows-as-part-of-the-google-cloud-sdk}
+### 윈도우에서 Google Cloud SDK를 사용하여 설치 {#install-on-windows-as-part-of-the-google-cloud-sdk}
 
 {{< include "included/install-kubectl-gcloud.md" >}}
 
@@ -176,4 +147,4 @@ kubectl은 Bash 및 Zsh에 대한 자동 완성 지원을 제공하므로 입력
 
 ## {{% heading "whatsnext" %}}
 
-{{< include "included/kubectl-whats-next.md" >}}
\ No newline at end of file
+{{< include "included/kubectl-whats-next.md" >}}

From 38374a03b0ee19a784901b45a46b5786324cb863 Mon Sep 17 00:00:00 2001
From: Jeffrey van den Hondel
 <15087173+jeffreyvdhondel@users.noreply.github.com>
Date: Thu, 6 May 2021 15:40:45 +0200
Subject: [PATCH 705/788] Operator: Exists missing

The Operator Exists is missing without this operator there will be no pod deployed on the master node.
---
 content/en/examples/controllers/daemonset.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/examples/controllers/daemonset.yaml b/content/en/examples/controllers/daemonset.yaml
index f291b750c1..685a137244 100644
--- a/content/en/examples/controllers/daemonset.yaml
+++ b/content/en/examples/controllers/daemonset.yaml
@@ -18,6 +18,7 @@ spec:
       # this toleration is to have the daemonset runnable on master nodes
       # remove it if your masters can't run pods
       - key: node-role.kubernetes.io/master
+        operator: Exists
         effect: NoSchedule
       containers:
       - name: fluentd-elasticsearch

From 38371d43e6563d7b09c099979c0ecfc98f257ed4 Mon Sep 17 00:00:00 2001
From: Rojo <rojo@rojo.dev>
Date: Thu, 6 May 2021 18:51:40 +0200
Subject: [PATCH 706/788] Added example to use configMapGenerator from .env
 file

---
 .../kustomization.md                          | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
index a41bab6736..2ac0143934 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -86,6 +86,41 @@ metadata:
   name: example-configmap-1-8mbdf7882g
 ```
 
+To generate a ConfigMap from an env file, add an entry to the `envs` list in `configMapGenerator`. Here is an example of generating a ConfigMap with a data item from a `.env` file:
+
+```shell
+# Create a .env file
+cat <<EOF >.env
+FOO=Bar
+EOF
+
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: example-configmap-1
+  envs:
+  - .env
+EOF
+```
+
+The generated ConfigMap can be examined with the following command:
+
+```shell
+kubectl kustomize ./
+```
+
+The generated ConfigMap is:
+
+```yaml
+apiVersion: v1
+data:
+    FOO=Bar
+kind: ConfigMap
+metadata:
+  name: example-configmap-1-8mbdf7882g
+```
+
+**Note:** They variables are added as top level keys in the ConfigMap, instead of nested within the name of the file, like the previous example does.
+
 ConfigMaps can also be generated from literal key-value pairs. To generate a ConfigMap from a literal key-value pair, add an entry to the `literals` list in configMapGenerator. Here is an example of generating a ConfigMap with a data item from a key-value pair:
 
 ```shell

From bca8c4b6e51094a23f4127c5f770cd501636ae02 Mon Sep 17 00:00:00 2001
From: Quentin Bisson <quentin.bisson@gmail.com>
Date: Thu, 6 May 2021 19:10:00 +0200
Subject: [PATCH 707/788] Add created by label (#27612)

* Add created by label

* Update content/en/docs/concepts/overview/working-with-objects/common-labels.md
---
 .../concepts/overview/working-with-objects/common-labels.md  | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/overview/working-with-objects/common-labels.md b/content/en/docs/concepts/overview/working-with-objects/common-labels.md
index 29af899b4e..3053544cd2 100644
--- a/content/en/docs/concepts/overview/working-with-objects/common-labels.md
+++ b/content/en/docs/concepts/overview/working-with-objects/common-labels.md
@@ -39,7 +39,8 @@ on every resource object.
 | `app.kubernetes.io/version`         | The current version of the application (e.g., a semantic version, revision hash, etc.) | `5.7.21` | string |
 | `app.kubernetes.io/component`       | The component within the architecture | `database` | string |
 | `app.kubernetes.io/part-of`         | The name of a higher level application this one is part of | `wordpress` | string |
-| `app.kubernetes.io/managed-by`  | The tool being used to manage the operation of an application | `helm` | string |
+| `app.kubernetes.io/managed-by`      | The tool being used to manage the operation of an application | `helm` | string |
+| `app.kubernetes.io/created-by`      | The controller/user who created this resource | `controller-manager` | string |
 
 To illustrate these labels in action, consider the following StatefulSet object:
 
@@ -54,6 +55,7 @@ metadata:
     app.kubernetes.io/component: database
     app.kubernetes.io/part-of: wordpress
     app.kubernetes.io/managed-by: helm
+    app.kubernetes.io/created-by: controller-manager
 ```
 
 ## Applications And Instances Of Applications
@@ -170,4 +172,3 @@ metadata:
 
 With the MySQL `StatefulSet` and `Service` you'll notice information about both MySQL and WordPress, the broader application, are included.
 
-

From 377d27d0ffefe712e231ca99b5009100d251a346 Mon Sep 17 00:00:00 2001
From: Carlos Santana <csantana23@gmail.com>
Date: Thu, 6 May 2021 15:04:30 -0400
Subject: [PATCH 708/788] =?UTF-8?q?a=C3=B1adir=20la=20preposici=C3=B3n?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Carlos Santana <csantana23@gmail.com>
---
 content/es/docs/concepts/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/es/docs/concepts/_index.md b/content/es/docs/concepts/_index.md
index 9929ce62c7..50da027886 100644
--- a/content/es/docs/concepts/_index.md
+++ b/content/es/docs/concepts/_index.md
@@ -71,6 +71,6 @@ En un clúster de Kubernetes, los nodos son las máquinas (máquinas virtuales,
 ## {{% heading "whatsnext" %}}
 
 
-Si quieres empezar a contribuir a la documentación de Kubernetes accede la página [Empieza a contribuir](/es/docs/contribute/start/).
+Si quieres empezar a contribuir a la documentación de Kubernetes accede a la página [Empieza a contribuir](/es/docs/contribute/start/).
 
 

From 7a2baf6865704b6007ee7dc102519a5dcd16113f Mon Sep 17 00:00:00 2001
From: Rojo <rojo@rojo.dev>
Date: Thu, 6 May 2021 21:12:33 +0200
Subject: [PATCH 709/788] Update
 content/en/docs/tasks/manage-kubernetes-objects/kustomization.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../en/docs/tasks/manage-kubernetes-objects/kustomization.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
index 2ac0143934..27f3762988 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -119,7 +119,9 @@ metadata:
   name: example-configmap-1-8mbdf7882g
 ```
 
-**Note:** They variables are added as top level keys in the ConfigMap, instead of nested within the name of the file, like the previous example does.
+{{< note >}}
+Each variable in the `.env` file becomes a separate key in the ConfigMap that you generate. This is different from the previous example which embeds a file named `.properties` (and all its entries) as the value for a single key.
+{{< /note >}}
 
 ConfigMaps can also be generated from literal key-value pairs. To generate a ConfigMap from a literal key-value pair, add an entry to the `literals` list in configMapGenerator. Here is an example of generating a ConfigMap with a data item from a key-value pair:
 
@@ -1010,4 +1012,3 @@ deployment.apps "dev-my-nginx" deleted
 * [Kubectl Command Reference](/docs/reference/generated/kubectl/kubectl-commands/)
 * [Kubernetes API Reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 
-

From e5c2404c19e34deb4ba162725b39e1b45d80013e Mon Sep 17 00:00:00 2001
From: Brandon Mitchell <git@bmitch.net>
Date: Thu, 6 May 2021 16:48:45 -0400
Subject: [PATCH 710/788] Update
 content/en/blog/_posts/2020-12-02-dockershim-faq.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/blog/_posts/2020-12-02-dockershim-faq.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/blog/_posts/2020-12-02-dockershim-faq.md b/content/en/blog/_posts/2020-12-02-dockershim-faq.md
index 5fe65fce53..edcab9fe53 100644
--- a/content/en/blog/_posts/2020-12-02-dockershim-faq.md
+++ b/content/en/blog/_posts/2020-12-02-dockershim-faq.md
@@ -50,7 +50,7 @@ as the situation evolves.
 ### Can I still use dockershim after it is removed from Kubernetes?
 
 Update:
-[Mirantis and Docker have committed to maintaining the dockershim][mirantis] after
+Mirantis and Docker have [committed][mirantis] to maintaining the dockershim after
 it is removed from Kubernetes.
 
 [mirantis]: https://www.mirantis.com/blog/mirantis-to-take-over-support-of-kubernetes-dockershim-2/
@@ -187,4 +187,3 @@ discussion of the changes.
 
 Always and whenever you want!  🤗🤗
 
-

From e7d3e273f22795b357c2ade71d3927201736758e Mon Sep 17 00:00:00 2001
From: Jing Xu <jinxu@google.com>
Date: Wed, 5 May 2021 17:36:16 -0700
Subject: [PATCH 711/788] Update note for waitForFirstConsumer binding mode
 with example

Update binding mode related to nodeName
---
 .../docs/concepts/storage/storage-classes.md  | 34 +++++++++++++++++--
 1 file changed, 32 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/storage/storage-classes.md b/content/en/docs/concepts/storage/storage-classes.md
index 0abdf6b545..5e6851d94a 100644
--- a/content/en/docs/concepts/storage/storage-classes.md
+++ b/content/en/docs/concepts/storage/storage-classes.md
@@ -154,9 +154,9 @@ the class or PV. If a mount option is invalid, the PV mount fails.
 ### Volume Binding Mode
 
 The `volumeBindingMode` field controls when [volume binding and dynamic
-provisioning](/docs/concepts/storage/persistent-volumes/#provisioning) should occur.
+provisioning](/docs/concepts/storage/persistent-volumes/#provisioning) should occur. When unset, "Immediate" mode is used by default.
 
-By default, the `Immediate` mode indicates that volume binding and dynamic
+The `Immediate` mode indicates that volume binding and dynamic
 provisioning occurs once the PersistentVolumeClaim is created. For storage
 backends that are topology-constrained and not globally accessible from all Nodes
 in the cluster, PersistentVolumes will be bound or provisioned without knowledge of the Pod's scheduling
@@ -188,6 +188,36 @@ The following plugins support `WaitForFirstConsumer` with pre-created Persistent
 and pre-created PVs, but you'll need to look at the documentation for a specific CSI driver
 to see its supported topology keys and examples.
 
+{{< note >}}
+   If you choose to use `waitForFirstConsumer`, do not use `nodeName` in the Pod spec
+   to specify node affinity. If `nodeName` is used in this case, the scheduler will be bypassed and PVC will remain in `pending` state.
+
+   Instead, you can use node selector for hostname in this case as shown below.
+{{< /note >}}
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: task-pv-pod
+spec:
+  nodeSelector:
+    kubernetes.io/hostname: kube-01
+  volumes:
+    - name: task-pv-storage
+      persistentVolumeClaim:
+        claimName: task-pv-claim
+  containers:
+    - name: task-pv-container
+      image: nginx
+      ports:
+        - containerPort: 80
+          name: "http-server"
+      volumeMounts:
+        - mountPath: "/usr/share/nginx/html"
+          name: task-pv-storage
+```
+
 ### Allowed Topologies
 
 When a cluster operator specifies the `WaitForFirstConsumer` volume binding mode, it is no longer necessary

From f9cf8c9fffea52693fddb62e12400de21f18f892 Mon Sep 17 00:00:00 2001
From: josny <1336836243@qq.com>
Date: Fri, 7 May 2021 10:26:15 +0800
Subject: [PATCH 712/788] Update overview.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

错别字
---
 content/zh/docs/concepts/security/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/security/overview.md b/content/zh/docs/concepts/security/overview.md
index 68ef8ba63d..8f7f030e7f 100644
--- a/content/zh/docs/concepts/security/overview.md
+++ b/content/zh/docs/concepts/security/overview.md
@@ -74,7 +74,7 @@ Here are links to some of the popular cloud providers' security documentation:
 -->
 ### 云提供商安全性
 
-如果您是在您自己的硬件或者其他不通的云提供商上运行 Kubernetes 集群，
+如果您是在您自己的硬件或者其他不同的云提供商上运行 Kubernetes 集群，
 请查阅相关文档来获取最好的安全实践。
 
 下面是一些比较流行的云提供商的安全性文档链接：

From 41b62a9305effb91911da4b231497d68ec6dbc55 Mon Sep 17 00:00:00 2001
From: Draven <i@draveness.me>
Date: Fri, 7 May 2021 18:33:27 +0800
Subject: [PATCH 713/788] doc: remove deprecated predicates in scheduler

---
 content/en/docs/reference/scheduling/policies.md | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/content/en/docs/reference/scheduling/policies.md b/content/en/docs/reference/scheduling/policies.md
index fc9a740266..1cd80273d9 100644
--- a/content/en/docs/reference/scheduling/policies.md
+++ b/content/en/docs/reference/scheduling/policies.md
@@ -43,21 +43,6 @@ The following *predicates* implement filtering:
 - `MaxCSIVolumeCount`: Decides how many {{< glossary_tooltip text="CSI" term_id="csi" >}}
   volumes should be attached, and whether that's over a configured limit.
 
-- `CheckNodeMemoryPressure`: If a Node is reporting memory pressure, and there's no
-  configured exception, the Pod won't be scheduled there.
-
-- `CheckNodePIDPressure`: If a Node is reporting that process IDs are scarce, and
-  there's no configured exception, the Pod won't be scheduled there.
-
-- `CheckNodeDiskPressure`: If a Node is reporting storage pressure (a filesystem that
-   is full or nearly full), and there's no configured exception, the Pod won't be
-   scheduled there.
-
-- `CheckNodeCondition`: Nodes can report that they have a completely full filesystem,
-  that networking isn't available or that kubelet is otherwise not ready to run Pods.
-  If such a condition is set for a Node, and there's no configured exception, the Pod
-  won't be scheduled there.
-
 - `PodToleratesNodeTaints`: checks if a Pod's {{< glossary_tooltip text="tolerations" term_id="toleration" >}}
   can tolerate the Node's {{< glossary_tooltip text="taints" term_id="taint" >}}.
 

From f0dbc2bc12376848e7a552db7fe3da6cd5d34571 Mon Sep 17 00:00:00 2001
From: Marcelo Feitoza Parisi <41125128+feitnomore@users.noreply.github.com>
Date: Fri, 7 May 2021 11:37:08 -0300
Subject: [PATCH 714/788] Fix static pod manifests generation

There was an URL problem with HOST1 and HOST2
---
 .../tools/kubeadm/setup-ha-etcd-with-kubeadm.md               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
index 6f62a051ad..9e95a69f47 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
@@ -246,8 +246,8 @@ this example.
 
     ```sh
     root@HOST0 $ kubeadm init phase etcd local --config=/tmp/${HOST0}/kubeadmcfg.yaml
-    root@HOST1 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
-    root@HOST2 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
+    root@HOST1 $ kubeadm init phase etcd local --config=/tmp/${HOST1}/kubeadmcfg.yaml
+    root@HOST2 $ kubeadm init phase etcd local --config=/tmp/${HOST2}/kubeadmcfg.yaml
     ```
 
 1. Optional: Check the cluster health

From 50a5dbb21d3908f082096e5883029ac224871434 Mon Sep 17 00:00:00 2001
From: toshokan <toshokan@shojigate.net>
Date: Fri, 7 May 2021 16:08:57 -0400
Subject: [PATCH 715/788] Fixes grammar typo

---
 .../docs/concepts/overview/working-with-objects/namespaces.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/overview/working-with-objects/namespaces.md b/content/en/docs/concepts/overview/working-with-objects/namespaces.md
index 8f740c866b..45f454516c 100644
--- a/content/en/docs/concepts/overview/working-with-objects/namespaces.md
+++ b/content/en/docs/concepts/overview/working-with-objects/namespaces.md
@@ -39,7 +39,7 @@ Creation and deletion of namespaces are described in the
 [Admin Guide documentation for namespaces](/docs/tasks/administer-cluster/namespaces).
 
 {{< note >}}
-    Avoid creating namespace with prefix `kube-`, since it is reserved for Kubernetes system namespaces.
+    Avoid creating namespaces with the prefix `kube-`, since it is reserved for Kubernetes system namespaces.
 {{< /note >}}
 
 ### Viewing namespaces

From e084eefad62134bf32f815f0017d1648585f8875 Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <shannduin@google.com>
Date: Mon, 26 Apr 2021 19:35:56 +0000
Subject: [PATCH 716/788] Update formatting and style

---
 .../managing-secret-using-kubectl.md          | 34 +++++++++----------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 293915736e..fe63c2434d 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -1,5 +1,5 @@
 ---
-title: Managing Secret using kubectl
+title: Managing Secrets using kubectl
 content_type: task
 weight: 10
 description: Creating Secret objects using kubectl command line.
@@ -15,7 +15,7 @@ description: Creating Secret objects using kubectl command line.
 
 ## Create a Secret
 
-A `Secret` can contain user credentials required by Pods to access a database.
+A `Secret` can contain user credentials required by pods to access a database.
 For example, a database connection string consists of a username and password.
 You can store the username in a file `./username.txt` and the password in a
 file `./password.txt` on your local machine.
@@ -24,11 +24,10 @@ file `./password.txt` on your local machine.
 echo -n 'admin' > ./username.txt
 echo -n '1f2d1e2e67df' > ./password.txt
 ```
-
-The `-n` flag in the above two commands ensures that the generated files will
-not contain an extra newline character at the end of the text. This is
-important because when `kubectl` reads a file and encode the content into
-base64 string, the extra newline character gets encoded too.
+In these commands, the `-n` flag ensures that the generated files do not have
+an extra newline character at the end of the text. This is important because
+when `kubectl` reads a file and encodes the content into a base64 string, the
+extra newline character gets encoded too.
 
 The `kubectl create secret` command packages these files into a Secret and creates
 the object on the API server.
@@ -45,7 +44,7 @@ The output is similar to:
 secret/db-user-pass created
 ```
 
-Default key name is the filename. You may optionally set the key name using
+The default key name is the filename. You can optionally set the key name using
 `--from-file=[key=]source`. For example:
 
 ```shell
@@ -54,17 +53,18 @@ kubectl create secret generic db-user-pass \
   --from-file=password=./password.txt
 ```
 
-You do not need to escape special characters in passwords from files
-(`--from-file`).
+You do not need to escape special characters in password strings that you 
+include in a file.
 
 You can also provide Secret data using the `--from-literal=<key>=<value>` tag.
 This tag can be specified more than once to provide multiple key-value pairs.
 Note that special characters such as `$`, `\`, `*`, `=`, and `!` will be
 interpreted by your [shell](https://en.wikipedia.org/wiki/Shell_(computing))
 and require escaping.
+
 In most shells, the easiest way to escape the password is to surround it with
-single quotes (`'`).  For example, if your actual password is `S!B\*d$zDsb=`,
-you should execute the command this way:
+single quotes (`'`). For example, if your password is `S!B\*d$zDsb=`,
+run the following command:
 
 ```shell
 kubectl create secret generic dev-db-secret \
@@ -74,7 +74,7 @@ kubectl create secret generic dev-db-secret \
 
 ## Verify the Secret
 
-You can check that the secret was created:
+Check that the Secret was created:
 
 ```shell
 kubectl get secrets
@@ -111,7 +111,7 @@ username:    5 bytes
 
 The commands `kubectl get` and `kubectl describe` avoid showing the contents
 of a `Secret` by default. This is to protect the `Secret` from being exposed
-accidentally to an onlooker, or from being stored in a terminal log.
+accidentally, or from being stored in a terminal log.
 
 ## Decoding the Secret  {#decoding-secret}
 
@@ -141,7 +141,7 @@ The output is similar to:
 
 ## Clean Up
 
-To delete the Secret you have created:
+Delete the Secret you created:
 
 ```shell
 kubectl delete secret db-user-pass
@@ -152,5 +152,5 @@ kubectl delete secret db-user-pass
 ## {{% heading "whatsnext" %}}
 
 - Read more about the [Secret concept](/docs/concepts/configuration/secret/)
-- Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
-- Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+- Learn how to [manage Secrets using config files](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- Learn how to [manage Secrets using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)

From 3976df3d126279b68c9d70fd9840e5a32e9ea588 Mon Sep 17 00:00:00 2001
From: Cheng Xing <cxing@google.com>
Date: Fri, 7 May 2021 19:11:56 -0700
Subject: [PATCH 717/788] Link PVC volume mode and access mode sections to
 corresponding sections in PV

---
 content/en/docs/concepts/storage/persistent-volumes.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/storage/persistent-volumes.md b/content/en/docs/concepts/storage/persistent-volumes.md
index 88e468ebfa..f45d17ff54 100644
--- a/content/en/docs/concepts/storage/persistent-volumes.md
+++ b/content/en/docs/concepts/storage/persistent-volumes.md
@@ -540,11 +540,11 @@ spec:
 
 ### Access Modes
 
-Claims use the same conventions as volumes when requesting storage with specific access modes.
+Claims use [the same conventions as volumes](#access-modes) when requesting storage with specific access modes.
 
 ### Volume Modes
 
-Claims use the same convention as volumes to indicate the consumption of the volume as either a filesystem or block device.
+Claims use [the same convention as volumes](#volume-mode) to indicate the consumption of the volume as either a filesystem or block device.
 
 ### Resources
 

From d05cbcad6345c7d8130ea190ddd2d702dee15ae2 Mon Sep 17 00:00:00 2001
From: seokho-son <shsongist@gmail.com>
Date: Wed, 5 May 2021 17:03:48 +0900
Subject: [PATCH 718/788] Update kustomization.md in dev-1.21-ko.2

---
 .../kustomization.md                          | 183 +++++++++++++++---
 1 file changed, 161 insertions(+), 22 deletions(-)

diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
index e420acbed9..feff78ce25 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -47,12 +47,12 @@ Kustomize는 쿠버네티스 구성을 사용자 정의화하는 도구이다. 
 
 ### 리소스 생성
 
-컨피그 맵과 시크릿은 파드와 같은 다른 쿠버네티스 오브젝트에서 사용되는 설정이나 민감한 데이터를 가지고 있다. 컨피그 맵이나 시크릿의 실질적인 소스는 일반적으로 `.properties` 파일이나 ssh key 파일과 같은 것들은 클러스터 외부에 있다.
-Kustomize는 시크릿과 컨피그 맵을 파일이나 문자열에서 생성하는 `secretGenerator`와 `configMapGenerator`를 가지고 있다.
+컨피그맵과 시크릿은 파드와 같은 다른 쿠버네티스 오브젝트에서 사용되는 설정이나 민감한 데이터를 가지고 있다. 컨피그맵이나 시크릿의 실질적인 소스는 일반적으로 `.properties` 파일이나 ssh key 파일과 같은 것들은 클러스터 외부에 있다.
+Kustomize는 시크릿과 컨피그맵을 파일이나 문자열에서 생성하는 `secretGenerator`와 `configMapGenerator`를 가지고 있다.
 
 #### configMapGenerator
 
-파일에서 컨피그 맵을 생성하려면 `configMapGenerator` 내의 `files` 리스트에 항목을 추가한다. 다음은 하나의 `.properties` 파일에서 데이터 항목으로 컨피그 맵을 생성하는 예제이다.
+파일에서 컨피그맵을 생성하려면 `configMapGenerator` 내의 `files` 리스트에 항목을 추가한다. 다음은 하나의 `.properties` 파일에서 데이터 항목으로 컨피그맵을 생성하는 예제이다.
 
 ```shell
 # application.properties 파일을 생성
@@ -68,13 +68,13 @@ configMapGenerator:
 EOF
 ```
 
-생성된 컨피그 맵은 다음 명령어로 검사할 수 있다.
+생성된 컨피그맵은 다음 명령어로 검사할 수 있다.
 
 ```shell
 kubectl kustomize ./
 ```
 
-생성된 컨피그 맵은 다음과 같다.
+생성된 컨피그맵은 다음과 같다.
 
 ```yaml
 apiVersion: v1
@@ -86,7 +86,7 @@ metadata:
   name: example-configmap-1-8mbdf7882g
 ```
 
-컨피그 맵은 문자로된 키-값 쌍들로도 생성할 수 있다. 문자로된 키-값 쌍에서 컨피그 맵을 생성하려면, configMapGenerator 내의 `literals` 리스트에 항목을 추가한다. 다음은 키-값 쌍을 데이터 항목으로 받는 컨피그 맵을 생성하는 예제이다.
+컨피그맵은 문자로된 키-값 쌍들로도 생성할 수 있다. 문자로된 키-값 쌍에서 컨피그맵을 생성하려면, configMapGenerator 내의 `literals` 리스트에 항목을 추가한다. 다음은 키-값 쌍을 데이터 항목으로 받는 컨피그맵을 생성하는 예제이다.
 
 ```shell
 cat <<EOF >./kustomization.yaml
@@ -97,13 +97,13 @@ configMapGenerator:
 EOF
 ```
 
-생성된 컨피그 맵은 다음 명령어로 확인할 수 있다.
+생성된 컨피그맵은 다음 명령어로 확인할 수 있다.
 
 ```shell
 kubectl kustomize ./
 ```
 
-생성된 컨피그 맵은 다음과 같다.
+생성된 컨피그맵은 다음과 같다.
 
 ```yaml
 apiVersion: v1
@@ -114,6 +114,98 @@ metadata:
   name: example-configmap-2-g2hdhfc6tk
 ```
 
+디플로이먼트에서 생성된 컨피그맵을 사용하기 위해서는, configMapGenerator의 이름을 참조한다. Kustomize는 자동으로 해당 이름을 생성된 이름으로 교체할 것이다.
+
+다음은 생성된 컨피그맵을 사용하는 디플로이먼트의 예시다.
+
+```yaml
+# application.properties 파일을 생성한다.
+cat <<EOF >application.properties
+FOO=Bar
+EOF
+
+cat <<EOF >deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-app
+  labels:
+    app: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - name: app
+        image: my-app
+        volumeMount:
+        - name: config
+          mountPath: /config
+      volumes:
+      - name: config
+        configMap:
+          name: example-configmap-1
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+configMapGenerator:
+- name: example-configmap-1
+  files:
+  - application.properties
+EOF
+```
+
+컨피그맵과 디플로이먼트를 생성한다.
+
+```shell
+kubectl kustomize ./
+```
+
+생성된 디플로이먼트는 이름을 통해서 생성된 컨피그맵을 참조한다.
+
+```yaml
+apiVersion: v1
+data:
+  application.properties: |
+    FOO=Bar
+kind: ConfigMap
+metadata:
+  name: example-configmap-1-g4hk9g2ff8
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: my-app
+  name: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - image: my-app
+        name: app
+        volumeMount:
+        - mountPath: /config
+          name: config
+      volumes:
+      - configMap:
+          name: example-configmap-1-g4hk9g2ff8
+        name: config
+```
+
 #### secretGenerator
 
 파일 또는 문자로된 키-값 쌍들로 시크릿을 생성할 수 있다. 파일에서 시크릿을 생성하려면 `secretGenerator` 내의 `files` 리스트에 항목을 추가한다. 다음은 파일을 데이터 항목으로 받는 시크릿을 생성하는 예제이다.
@@ -170,9 +262,56 @@ metadata:
 type: Opaque
 ```
 
+컨피그맵과 유사하게, 생성된 시크릿도 secretGenerator의 이름을 참조함으로써 디플로이먼트에서 사용될 수 있다.
+
+```shell
+# password.txt 파일을 생성한다.
+cat <<EOF >./password.txt
+username=admin
+password=secret
+EOF
+
+cat <<EOF >deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-app
+  labels:
+    app: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - name: app
+        image: my-app
+        volumeMount:
+        - name: password
+          mountPath: /secrets
+      volumes:
+      - name: password
+        secret:
+          secretName: example-secret-1
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+secretGenerator:
+- name: example-secret-1
+  files:
+  - password.txt
+EOF
+```
+
 #### generatorOptions
 
-생성된 컨피그 맵과 시크릿은 콘텐츠 해시 접미사가 추가된다. 이는 콘텐츠가 변경될 때 새로운 컨피그 맵 이나 시크릿이 생성되는 것을 보장한다. 접미사를 추가하는 동작을 비활성화하는 방법으로 `generatorOptions`를 사용할 수 있다. 그밖에, 생성된 컨피그 맵과 시크릿에 교차 편집 옵션들을 지정해주는 것도 가능하다.
+생성된 컨피그맵과 시크릿은 콘텐츠 해시 접미사가 추가된다. 이는 콘텐츠가 변경될 때 새로운 컨피그맵 이나 시크릿이 생성되는 것을 보장한다. 접미사를 추가하는 동작을 비활성화하는 방법으로 `generatorOptions`를 사용할 수 있다. 그밖에, 생성된 컨피그맵과 시크릿에 교차 편집 옵션들을 지정해주는 것도 가능하다.
 
 ```shell
 cat <<EOF >./kustomization.yaml
@@ -189,7 +328,7 @@ generatorOptions:
 EOF
 ```
 
-생성된 컨피그 맵을 보려면 `kubectl kustomize ./`를 실행한다.
+생성된 컨피그맵을 보려면 `kubectl kustomize ./`를 실행한다.
 
 ```yaml
 apiVersion: v1
@@ -814,17 +953,17 @@ deployment.apps "dev-my-nginx" deleted
 | nameSuffix            | string                                                                                                       | 모든 리소스 네임에 이 필드의 값이 접미사로 추가된다                                            |
 | commonLabels          | map[string]string                                                                                            | 모든 리소스와 셀렉터에 추가될 레이블                                                        |
 | commonAnnotations     | map[string]string                                                                                            | 모든 리소스에 추가될 어노테이션                                                            |
-| resources             | []string                                                                                                     | 이 리스트 내 각각의 항목은 반드시 존재하는 리소스 구성 파일로 해석되어져야 한다                       |
-| configmapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L99)  | 이 리스트 내 각각의 항목은 컨피그 맵을 생성한다                                               |
-| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L106)     | 이 리스트 내 각각의 항목은 시크릿을 생성한다                                                  |
-| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L109) | 모든 configMapGenerator와 secretGenerator의 동작을 변경                                 |
-| bases                 | []string                                                                                                     | 이 리스트 내 각각의 항목은 kustomization.yaml 파일을 가지는 디렉터리로 해석되어져야 한다            |
-| patchesStrategicMerge | []string                                                                                                     | 이 리스트 내 각각의 항목은 쿠버네티스 오브젝트의 전략적 병합 패치로 해석되어져야 한다                   |
-| patchesJson6902       | [][Json6902](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/patchjson6902.go#L8)             | 이 리스트 내 각각의 항목은 쿠버네티스 오브젝트와 Json 패치로 해석되어져야 한다                       |
-| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L31)                       | 각각의 항목은 한 리소스의 필드에서 텍스트를 캡쳐한다                                            |
-| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go#L23)                   | 각각의 항목은 패치를 생성하지 않고 한 이미지의 name, tags 그리고/또는 digest를 수정한다             |
-| configurations        | []string                                                                                                     | 이 리스트 내 각각의 항목은 [Kustomize 변환 설정](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs)을 포함하는 파일로 해석되어져야 한다 |
-| crds                  | []string                                                                                                     | 이 리스트 내 각각의 항목은 쿠버네티스 타입에 대한 OpenAPI 정의 파일로 해석되어져야 한다               |
+| resources             | []string                                                                                                     | 이 리스트 내 각각의 항목은 반드시 존재하는 리소스 구성 파일로 해석되어야 한다.                       |
+| configMapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/configmapargs.go#L7)    | 이 리스트의 각 항목은 컨피그맵을 생성한다.                                       |
+| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/secretargs.go#L7)          | 이 리스트의 각 항목은 시크릿을 생성한다.                                         |
+| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/generatoroptions.go#L7) | 모든 컨피그맵 및 시크릿 생성자(generator)의 동작을 수정한다.                             |
+| bases                 | []string                                                                                                     | 이 리스트 내 각각의 항목은 kustomization.yaml 파일을 가지는 디렉터리로 해석되어야 한다.            |
+| patchesStrategicMerge | []string                                                                                                     | 이 리스트 내 각각의 항목은 쿠버네티스 오브젝트의 전략적 병합 패치로 해석되어야 한다.                   |
+| patchesJson6902       | [][Patch](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/patch.go#L10)                   | 이 리스트 내 각각의 항목은 쿠버네티스 오브젝트와 Json 패치로 해석되어야 한다.                       |
+| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L19)                       | 각각의 항목은 한 리소스의 필드에서 텍스트를 캡쳐한다.                                            |
+| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/image.go#L8)                    | 각각의 항목은 패치를 생성하지 않고 하나의 이미지에 대한 name, tags 그리고/또는 digest를 수정한다.             |
+| configurations        | []string                                                                                                     | 이 리스트 내 각각의 항목은 [Kustomize 변환 설정](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs)을 포함하는 파일로 해석되어야 한다. |
+| crds                  | []string                                                                                                     | 이 리스트 내 각각의 항목은 쿠버네티스 타입에 대한 OpenAPI 정의 파일로 해석되어야 한다.               |
 
 
 
@@ -832,6 +971,6 @@ deployment.apps "dev-my-nginx" deleted
 
 
 * [Kustomize](https://github.com/kubernetes-sigs/kustomize)
-* [Kubectl 북](https://kubectl.docs.kubernetes.io)
+* [Kubectl 문서](https://kubectl.docs.kubernetes.io)
 * [Kubectl 커맨드 참조](/docs/reference/generated/kubectl/kubectl-commands/)
 * [쿠버네티스 API 참조](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)

From 6f498cfeb921959db7e4a6203cfd79598e55f262 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 28 Apr 2021 10:55:54 +0800
Subject: [PATCH 719/788] [zh] Sync concepts section (6)

---
 .../services-networking/dns-pod-service.md    | 116 ++++++++++++++----
 .../ingress-controllers.md                    |  23 ++--
 .../concepts/services-networking/ingress.md   |  29 ++++-
 .../service/networking/namespaced-params.yaml |  12 ++
 4 files changed, 144 insertions(+), 36 deletions(-)
 create mode 100644 content/zh/examples/service/networking/namespaced-params.yaml

diff --git a/content/zh/docs/concepts/services-networking/dns-pod-service.md b/content/zh/docs/concepts/services-networking/dns-pod-service.md
index 2672d4e7d0..50a6c47d86 100644
--- a/content/zh/docs/concepts/services-networking/dns-pod-service.md
+++ b/content/zh/docs/concepts/services-networking/dns-pod-service.md
@@ -3,12 +3,23 @@ title: Pod 与 Service 的 DNS
 content_type: concept
 weight: 20
 ---
+<!--
+reviewers:
+- davidopp
+- thockin
+title: DNS for Services and Pods
+content_type: concept
+weight: 20
+-->
+
 <!-- overview -->
 
 <!--
-This page provides an overview of DNS support by Kubernetes.
+Kubernetes creates DNS records for services and pods. You can contact
+services with consistent DNS names instead of IP addresses.
 -->
-本页面提供 Kubernetes 对 DNS 的支持的概述。
+Kubernetes 为服务和 Pods 创建 DNS 记录。
+你可以使用一致的 DNS 名称而非 IP 地址来访问服务。
 
 <!-- body -->
 
@@ -21,40 +32,93 @@ resolve DNS names.
 -->
 ## 介绍
 
-Kubernetes DNS 在群集上调度 DNS Pod 和服务，并配置 kubelet 以告知各个容器使用 DNS 服务的 IP 来解析 DNS 名称。
+Kubernetes DNS 在集群上调度 DNS Pod 和服务，并配置 kubelet 以告知各个容器
+使用 DNS 服务的 IP 来解析 DNS 名称。
 
 <!--
-### What things get DNS names?
-
 Every Service defined in the cluster (including the DNS server itself) is
-assigned a DNS name.  By default, a client Pod's DNS search list will
-include the Pod's own namespace and the cluster's default domain.  This is best
-illustrated by example:
+assigned a DNS name. By default, a client Pod's DNS search list includes the
+Pod's own namespace and the cluster's default domain.
+-->
+集群中定义的每个 Service （包括 DNS 服务器自身）都被赋予一个 DNS 名称。
+默认情况下，客户端 Pod 的 DNS 搜索列表会包含 Pod 自身的名字空间和集群
+的默认域。
 
-Assume a Service named `foo` in the Kubernetes namespace `bar`.  A Pod running
-in namespace `bar` can look up this service by simply doing a DNS query for
-`foo`.  A Pod running in namespace `quux` can look up this service by doing a
-DNS query for `foo.bar`.
+<!--
+### Namespaces of Services
 
-The following sections detail the supported record types and layout that is
+A DNS query may return different results based on the namespace of the pod making
+it. DNS queries that don't specify a namespace are limited to the pod's
+namespace. Access services in other namespaces by specifying it in the DNS query.
+
+For example, consider a pod in a `test` namespace. A `data` service is in
+the `prod` namespace.
+
+A query for `data` returns no results, because it uses the pod's `test` namespace.
+
+A query for `data.prod` returns the intended result, because it specifies the
+namespace.
+-->
+### Service 的名字空间
+
+DNS 查询可能因为执行查询的 Pod 所在的名字空间而返回不同的结果。
+不指定名字空间的 DNS 查询会被限制在 Pod 所在的名字空间内。
+要访问其他名字空间中的服务，需要在 DNS 查询中给出名字空间。
+
+例如，假定名字空间 `test` 中存在一个 Pod，`prod` 名字空间中存在一个服务
+`data`。
+
+Pod 查询 `data` 时没有返回结果，因为使用的是 Pod 的名字空间 `test`。
+
+Pod 查询 `data.prod` 时则会返回预期的结果，因为查询中指定了名字空间。
+
+<!--
+DNS queries may be expanded using the pod's `/etc/resolv.conf`. Kubelet
+sets this file for each pod. For example, a query for just `data` may be
+expanded to `data.test.cluster.local`. The values of the `search` option
+are used to expand queries. To learn more about DNS queries, see
+[the `resolv.conf` manual page.](https://www.man7.org/linux/man-pages/man5/resolv.conf.5.html)
+-->
+DNS 查询可以使用 Pod 中的 `/etc/resolv.conf` 展开。kubelet 会为每个 Pod
+生成此文件。例如，对 `data` 的查询可能被展开为 `data.test.cluster.local`。
+`search` 选项的取值会被用来展开查询。要进一步了解 DNS 查询，可参阅
+[`resolv.conf` 手册页面](https://www.man7.org/linux/man-pages/man5/resolv.conf.5.html)。
+
+```
+nameserver 10.32.0.10
+search <namespace>.svc.cluster.local svc.cluster.local cluster.local
+options ndots:5
+```
+
+<!--
+In summary, a pod in the _test_ namespace can successfully resolve either
+`data.prod` or `data.prod.cluster.local`.
+-->
+概括起来，名字空间 `test` 中的 Pod 可以成功地解析 `data.prod` 或者
+`data.prod.cluster.local`。
+
+<!--
+### DNS Records
+
+What objects get DNS records?
+-->
+### DNS 记录  {#dns-records}
+
+哪些对象会获得 DNS 记录呢？
+
+1. Services
+2. Pods
+
+<!--
+The following sections detail the supported DNS record types and layout that is
 supported.  Any other layout or names or queries that happen to work are
 considered implementation details and are subject to change without warning.
 For more up-to-date specification, see
 [Kubernetes DNS-Based Service Discovery](https://github.com/kubernetes/dns/blob/master/docs/specification.md).
 -->
-## 哪些对象会有 DNS 名字?     {#what-things-get-dns-names}
-
-在集群中定义的每个 Service（包括 DNS 服务器自身）都会被指派一个 DNS 名称。
-默认，一个客户端 Pod 的 DNS 搜索列表将包含该 Pod 自己的名字空间和集群默认域。
-如下示例是一个很好的说明：
-
-假设在 Kubernetes 集群的名字空间 `bar` 中，定义了一个服务 `foo`。
-运行在名字空间 `bar` 中的 Pod 可以简单地通过 DNS 查询 `foo` 来找到该服务。
-运行在名字空间 `quux` 中的 Pod 可以通过 DNS 查询 `foo.bar` 找到该服务。
-
-以下各节详细介绍了受支持的记录类型和支持的布局。
+以下各节详细介绍了被支持的 DNS 记录类型和被支持的布局。
 其它布局、名称或者查询即使碰巧可以工作，也应视为实现细节，
-将来很可能被更改而且不会因此出现警告。
+将来很可能被更改而且不会因此发出警告。
 有关最新规范请查看
 [Kubernetes 基于 DNS 的服务发现](https://github.com/kubernetes/dns/blob/master/docs/specification.md)。
 
@@ -301,7 +365,7 @@ If a Pod enables this feature and its FQDN is longer than 64 character, it will
 
 如果 Pod 启用这一特性，而其 FQDN 超出 64 字符，Pod 的启动会失败。
 Pod 会一直出于 `Pending` 状态（通过 `kubectl` 所看到的 `ContainerCreating`），
-并产生错误事件，例如 
+并产生错误事件，例如
 "Failed to construct FQDN from pod hostname and cluster domain, FQDN
 `long-FQDN` is too long (64 characters is the max, 70 characters requested)."
 （无法基于 Pod 主机名和集群域名构造 FQDN，FQDN `long-FQDN` 过长，至多 64
diff --git a/content/zh/docs/concepts/services-networking/ingress-controllers.md b/content/zh/docs/concepts/services-networking/ingress-controllers.md
index a50312b63d..a2c9eaaae3 100644
--- a/content/zh/docs/concepts/services-networking/ingress-controllers.md
+++ b/content/zh/docs/concepts/services-networking/ingress-controllers.md
@@ -24,7 +24,8 @@ Kubernetes as a project supports and maintains [AWS](https://github.com/kubernet
 -->
 为了让 Ingress 资源工作，集群必须有一个正在运行的 Ingress 控制器。
 
-与作为 `kube-controller-manager` 可执行文件的一部分运行的其他类型的控制器不同，Ingress 控制器不是随集群自动启动的。
+与作为 `kube-controller-manager` 可执行文件的一部分运行的其他类型的控制器不同，
+Ingress 控制器不是随集群自动启动的。
 基于此页面，你可选择最适合你的集群的 ingress 控制器实现。
 
 Kubernetes 作为一个项目，目前支持和维护
@@ -54,15 +55,18 @@ Kubernetes 作为一个项目，目前支持和维护
 * [AKS 应用程序网关 Ingress 控制器](https://azure.github.io/application-gateway-kubernetes-ingress/)
   是一个配置 [Azure 应用程序网关](https://docs.microsoft.com/azure/application-gateway/overview)
   的 Ingress 控制器。
-* [Ambassador](https://www.getambassador.io/) API 网关是一个基于 [Envoy](https://www.envoyproxy.io) 的 Ingress
+* [Ambassador](https://www.getambassador.io/) API 网关是一个基于
+  [Envoy](https://www.envoyproxy.io) 的 Ingress
   控制器。
-* [Apache APISIX Ingress 控制器](https://github.com/apache/apisix-ingress-controller) 是一个基于 [Apache APISIX 网关](https://github.com/apache/apisix) 的 Ingress 控制器。
+* [Apache APISIX Ingress 控制器](https://github.com/apache/apisix-ingress-controller)
+  是一个基于 [Apache APISIX 网关](https://github.com/apache/apisix) 的 Ingress 控制器。
 * [Avi Kubernetes Operator](https://github.com/vmware/load-balancer-and-ingress-services-for-kubernetes)
   使用 [VMware NSX Advanced Load Balancer](https://avinetworks.com/)
   提供第 4 到第 7 层的负载均衡。
 * [Citrix Ingress 控制器](https://github.com/citrix/citrix-k8s-ingress-controller#readme)
   可以用来与 Citrix Application Delivery Controller 一起使用。
-* [Contour](https://projectcontour.io/) 是一个基于 [Envoy](https://www.envoyproxy.io/) 的 Ingress 控制器。
+* [Contour](https://projectcontour.io/) 是一个基于 [Envoy](https://www.envoyproxy.io/)
+  的 Ingress 控制器。
 * [EnRoute](https://getenroute.io/) 是一个基于 [Envoy](https://www.envoyproxy.io) API 网关，
   可以作为 Ingress 控制器来执行。
 <!--
@@ -82,7 +86,8 @@ Kubernetes 作为一个项目，目前支持和维护
   让你能够使用 Ingress 来配置 F5 BIG-IP 虚拟服务器。
 * [Gloo](https://gloo.solo.io) 是一个开源的、基于 [Envoy](https://www.envoyproxy.io) 的
   Ingress 控制器，能够提供 API 网关功能，
-* [HAProxy Ingress](https://haproxy-ingress.github.io/) 针对 [HAProxy](https://www.haproxy.org/#desc)
+* [HAProxy Ingress](https://haproxy-ingress.github.io/) 针对
+  [HAProxy](https://www.haproxy.org/#desc)
   的 Ingress 控制器。
 * [用于 Kubernetes 的 HAProxy Ingress 控制器](https://github.com/haproxytech/kubernetes-ingress#readme)
   也是一个针对 [HAProxy](https://www.haproxy.org/#desc) 的 Ingress 控制器。
@@ -96,6 +101,7 @@ Kubernetes 作为一个项目，目前支持和维护
 * [Skipper](https://opensource.zalando.com/skipper/kubernetes/ingress-controller/) HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress, designed as a library to build your custom proxy.
 * The [Traefik Kubernetes Ingress provider](https://doc.traefik.io/traefik/providers/kubernetes-ingress/) is an
   ingress controller for the [Traefik](https://traefik.io/traefik/) proxy.
+* [Tyk Operator](https://github.com/TykTechnologies/tyk-operator) extends Ingress with Custom Resources to bring API Management capabilities to Ingress. Tyk Operator works with the Open Source Tyk Gateway & Tyk Cloud control plane.
 * [Voyager](https://appscode.com/products/voyager) is an ingress controller for
   [HAProxy](https://www.haproxy.org/#desc).
 -->
@@ -109,8 +115,11 @@ Kubernetes 作为一个项目，目前支持和维护
   设计用来作为构造你自己的定制代理的库。
 * [Traefik Kubernetes Ingress 提供程序](https://doc.traefik.io/traefik/providers/kubernetes-ingress/)
   是一个用于 [Traefik](https://traefik.io/traefik/) 代理的 Ingress 控制器。
-* [Voyager](https://appscode.com/products/voyager) 是一个针对 [HAProxy](https://www.haproxy.org/#desc)
-  的 Ingress 控制器。
+* [Tyk Operator](https://github.com/TykTechnologies/tyk-operator)
+  使用自定义资源扩展 Ingress，为之带来 API 管理能力。Tyk Operator
+  使用开源的 Tyk Gateway & Tyk Cloud 控制面。
+* [Voyager](https://appscode.com/products/voyager) 是一个针对
+  [HAProxy](https://www.haproxy.org/#desc) 的 Ingress 控制器。
 
 <!--
 ## Using multiple Ingress controllers
diff --git a/content/zh/docs/concepts/services-networking/ingress.md b/content/zh/docs/concepts/services-networking/ingress.md
index 90bd23d2d7..2364096a53 100644
--- a/content/zh/docs/concepts/services-networking/ingress.md
+++ b/content/zh/docs/concepts/services-networking/ingress.md
@@ -411,9 +411,32 @@ IngressClass 资源包含额外的配置，其中包括应当实现该类的控
 
 <!-- 
 IngressClass resources contain an optional parameters field. This can be used to
-reference additional configuration for this class.
+reference additional implementation-specific configuration for this class.
  -->
-IngressClass 资源包含一个可选的 `parameters` 字段，可用于为该类引用额外配置。
+IngressClass 资源包含一个可选的 `parameters` 字段，可用于为该类引用额外的、
+特定于具体实现的配置。
+
+<!--
+#### Namespace-scoped parameters
+-->
+#### 名字空间域的参数
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!--
+`Parameters` field has a `scope` and `namespace` field that can be used to
+reference a namespace-specific resource for configuration of an Ingress class.
+`Scope` field defaults to `Cluster`, meaning, the default is cluster-scoped
+resource. Setting `Scope` to `Namespace` and setting the `Namespace` field
+will reference a parameters resource in a specific namespace:
+-->
+`parameters` 字段有一个 `scope` 和 `namespace` 字段，可用来引用特定
+于名字空间的资源，对 Ingress 类进行配置。
+`scope` 字段默认为 `Cluster`，表示默认是集群作用域的资源。
+将 `scope` 设置为 `Namespace` 并设置 `namespace` 字段就可以引用某特定
+名字空间中的参数资源。
+
+{{< codenew file="service/networking/namespaced-params.yaml" >}}
 
 <!-- 
 ### Deprecated Annotation
@@ -488,7 +511,7 @@ There are existing Kubernetes concepts that allow you to expose a single Service
 
 <!-- 
 If you create it using `kubectl apply -f` you should be able to view the state
-of the Ingress you just added:
+of the Ingress you added:
 -->
 如果使用 `kubectl apply -f` 创建此 Ingress，则应该能够查看刚刚添加的 Ingress 的状态：
 
diff --git a/content/zh/examples/service/networking/namespaced-params.yaml b/content/zh/examples/service/networking/namespaced-params.yaml
new file mode 100644
index 0000000000..dd56724787
--- /dev/null
+++ b/content/zh/examples/service/networking/namespaced-params.yaml
@@ -0,0 +1,12 @@
+apiVersion: networking.k8s.io/v1
+kind: IngressClass
+metadata:
+  name: external-lb
+spec:
+  controller: example.com/ingress-controller
+  parameters:
+    apiGroup: k8s.example.com
+    kind: IngressParameters
+    name: external-lb
+    namespace: external-configuration
+    scope: Namespace

From 9ba6ac61679cab7ee9f81106c62c29793456e4cb Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Mon, 26 Apr 2021 13:03:09 +0800
Subject: [PATCH 720/788] [zh] Resync kubeadm files (3)

---
 .../reference/setup-tools/kubeadm/_index.md   |  49 ++++--
 .../kubeadm/generated/kubeadm_config_print.md |  57 +++----
 .../setup-tools/kubeadm/kubeadm-config.md     |  36 ++--
 .../kubeadm/kubeadm-certs.md                  | 154 ++++++++++++++++--
 .../kubeadm/kubeadm-upgrade.md                |   6 +-
 5 files changed, 229 insertions(+), 73 deletions(-)

diff --git a/content/zh/docs/reference/setup-tools/kubeadm/_index.md b/content/zh/docs/reference/setup-tools/kubeadm/_index.md
index 60204dfa6d..7b8c2ac158 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/_index.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/_index.md
@@ -13,19 +13,23 @@ card:
 <!-- 
 Kubeadm is a tool built to provide `kubeadm init` and `kubeadm join` as best-practice "fast paths" for creating Kubernetes clusters.
  -->
-Kubeadm 是一个提供了 `kubeadm init` 和 `kubeadm join` 的工具，作为创建 Kubernetes 集群的 “快捷途径” 的最佳实践。
+Kubeadm 是一个提供了 `kubeadm init` 和 `kubeadm join` 的工具，
+作为创建 Kubernetes 集群的 “快捷途径” 的最佳实践。
 
 <!-- 
 kubeadm performs the actions necessary to get a minimum viable cluster up and running. By design, it cares only about bootstrapping,
 not about provisioning machines. Likewise, installing various nice-to-have addons, like the Kubernetes Dashboard, monitoring solutions, and cloud-specific addons, is not in scope.
  -->
-kubeadm 通过执行必要的操作来启动和运行最小可用集群。按照设计，它只关注启动引导，而非配置机器。同样的，安装各种 “锦上添花” 的扩展，例如 Kubernetes Dashboard,
-监控方案，以及特定云平台的扩展，都不在讨论范围内。
+kubeadm 通过执行必要的操作来启动和运行最小可用集群。
+按照设计，它只关注启动引导，而非配置机器。同样的，
+安装各种 “锦上添花” 的扩展，例如 Kubernetes Dashboard、
+监控方案、以及特定云平台的扩展，都不在讨论范围内。
 
 <!-- 
 Instead, we expect higher-level and more tailored tooling to be built on top of kubeadm, and ideally, using kubeadm as the basis of all deployments will make it easier to create conformant clusters.
  -->
-相反，我们希望在 kubeadm 之上构建更高级别以及更加合规的工具，理想情况下，使用 kubeadm 作为所有部署工作的基准将会更加易于创建一致性集群。
+相反，我们希望在 kubeadm 之上构建更高级别以及更加合规的工具，
+理想情况下，使用 kubeadm 作为所有部署工作的基准将会更加易于创建一致性集群。
 
 <!-- 
 ## How to install
@@ -34,8 +38,9 @@ Instead, we expect higher-level and more tailored tooling to be built on top of
 
 <!-- 
 To install kubeadm, see the [installation guide](/docs/setup/production-environment/tools/kubeadm/install-kubeadm).
- -->
-要安装 kubeadm, 请查阅[安装指南](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/).
+-->
+要安装 kubeadm, 请查阅
+[安装指南](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/).
 
 ## {{% heading "whatsnext" %}}
 
@@ -46,14 +51,30 @@ To install kubeadm, see the [installation guide](/docs/setup/production-environm
 * [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config) if you initialized your cluster using kubeadm v1.7.x or lower, to configure your cluster for `kubeadm upgrade`
 * [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token) to manage tokens for `kubeadm join`
 * [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset) to revert any changes made to this host by `kubeadm init` or `kubeadm join`
+* [kubeadm certs](/docs/reference/setup-tools/kubeadm/kubeadm-certs) to manage Kubernetes certificates
+* [kubeadm kubeconfig](/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig) to manage kubeconfig files
 * [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version) to print the kubeadm version
 * [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha) to preview a set of features made available for gathering feedback from the community
  -->
-* [kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init) 用于搭建控制平面节点
-* [kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join) 用于搭建工作节点并将其加入到集群中
-* [kubeadm upgrade](/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade) 用于升级 Kubernetes 集群到新版本
-* [kubeadm config](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config) 如果你使用了 v1.7.x 或更低版本的 kubeadm 版本初始化你的集群，则使用 `kubeadm upgrade` 来配置你的集群
-* [kubeadm token](/zh/docs/reference/setup-tools/kubeadm/kubeadm-token) 用于管理 `kubeadm join` 使用的令牌
-* [kubeadm reset](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset) 用于恢复通过 `kubeadm init` 或者 `kubeadm join` 命令对节点进行的任何变更
-* [kubeadm version](/zh/docs/reference/setup-tools/kubeadm/kubeadm-version) 用于打印 kubeadm 的版本信息
-* [kubeadm alpha](/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha) 用于预览一组可用于收集社区反馈的特性
+* [kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init)
+  用于搭建控制平面节点
+* [kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join)
+  用于搭建工作节点并将其加入到集群中
+* [kubeadm upgrade](/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade)
+  用于升级 Kubernetes 集群到新版本
+* [kubeadm config](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config)
+  如果你使用了 v1.7.x 或更低版本的 kubeadm 版本初始化你的集群，则使用
+  `kubeadm upgrade` 来配置你的集群
+* [kubeadm token](/zh/docs/reference/setup-tools/kubeadm/kubeadm-token)
+  用于管理 `kubeadm join` 使用的令牌
+* [kubeadm reset](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset)
+  用于恢复通过 `kubeadm init` 或者 `kubeadm join` 命令对节点进行的任何变更
+* [kubeadm certs](/docs/reference/setup-tools/kubeadm/kubeadm-certs)
+  用于管理 Kubernetes 证书
+* [kubeadm kubeconfig](/docs/reference/setup-tools/kubeadm/kubeadm-kubeconfig)
+  用于管理 kubeconfig 文件
+* [kubeadm version](/zh/docs/reference/setup-tools/kubeadm/kubeadm-version)
+  用于打印 kubeadm 的版本信息
+* [kubeadm alpha](/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha)
+  用于预览一组可用于收集社区反馈的特性
+
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md
index a0ef1a5e1a..9132e3a04b 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_config_print.md
@@ -1,17 +1,30 @@
+<!--
+The file is auto-generated from the Go source code of the component using a generic
+[generator](https://github.com/kubernetes-sigs/reference-docs/). To learn how
+to generate the reference documentation, please read
+[Contributing to the reference documentation](/docs/contribute/generate-ref-docs/).
+To update the reference conent, please follow the 
+[Contributing upstream](/docs/contribute/generate-ref-docs/contribute-upstream/)
+guide. You can file document formatting bugs against the
+[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
+-->
+
+<!--
+Print configuration
+-->
+打印配置
 
 <!--
 ### Synopsis
 -->
-
 ### 概要
 
 <!--
 This command prints configurations for subcommands provided.
 For details, see: https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2
 -->
-
-此命令显示所提供子命令的配置。
-有关详细信息，请参阅：https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2
+此命令打印子命令所提供的配置信息。
+相关细节可参阅 https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2
 
 ```
 kubeadm config print [flags]
@@ -20,7 +33,6 @@ kubeadm config print [flags]
 <!--
 ### Options
 -->
-
 ### 选项
 
    <table style="width: 100%; table-layout: fixed;">
@@ -34,22 +46,17 @@ kubeadm config print [flags]
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!-- help for print -->
-print 操作的帮助命令
-</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p><!--help for print-->print 命令的帮助信息</p></td>
 </tr>
 
 </tbody>
 </table>
 
 
-
 <!--
 ### Options inherited from parent commands
 -->
-
-### 从父命令继承的选项
+### 从父命令继承而来的选项
 
    <table style="width: 100%; table-layout: fixed;">
 <colgroup>
@@ -59,33 +66,23 @@ print 操作的帮助命令
 <tbody>
 
 <tr>
-<td colspan="2">
-<!--
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"
--->
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值："/etc/kubernetes/admin.conf"
-</td>
+<td colspan="2">--kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<!--Default:-->默认值："/etc/kubernetes/admin.conf"</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.
--->
-用于和集群通信的 kubeconfig 文件。如果它没有被设置，那么 kubeadm 将会搜索一个已经存在于标准路径的 kubeconfig 文件。
-</td>
+<!--td></td><td style="line-height: 130%; word-wrap: break-word;"><p>The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.</p></td -->
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>与集群通信时使用的 kubeconfig 文件。如此标志未设置，将在一组标准位置中搜索现有的kubeconfig 文件。</p></td>
 </tr>
 
 <tr>
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-[EXPERIMENTAL] The path to the 'real' host root filesystem.
--->
-[实验] 到 '真实' 主机根文件系统的路径。
-</td>
+<!--td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[EXPERIMENTAL] The path to the 'real' host root filesystem.</p></td-->
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>[试验性] 指向“真实”宿主根文件系统的路径。</p></td>
 </tr>
 
 </tbody>
 </table>
+
+
+
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md
index 3c1425bfc1..363335f25c 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-config.md
@@ -10,8 +10,8 @@ During `kubeadm init`, kubeadm uploads the `ClusterConfiguration` object to your
 in a ConfigMap called `kubeadm-config` in the `kube-system` namespace. This configuration is then read during
 `kubeadm join`, `kubeadm reset` and `kubeadm upgrade`. To view this ConfigMap call `kubeadm config view`.
 -->
-在 `kubeadm init` 执行期间，kubeadm 将 `ClusterConfiguration` 对象上传到你的集群的 `kube-system` 名字空间下
-名为 `kubeadm-config` 的 ConfigMap 对象中。
+在 `kubeadm init` 执行期间，kubeadm 将 `ClusterConfiguration` 对象上传
+到你的集群的 `kube-system` 名字空间下名为 `kubeadm-config` 的 ConfigMap 对象中。
 然后在 `kubeadm join`、`kubeadm reset` 和 `kubeadm upgrade` 执行期间读取此配置。 
 要查看此 ConfigMap，请调用 `kubeadm config view`。
 
@@ -29,22 +29,34 @@ convert your old configuration files to a newer version. `kubeadm config images
 For more information navigate to
 [Using kubeadm init with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)
 or [Using kubeadm join with a configuration file](/docs/reference/setup-tools/kubeadm/kubeadm-join/#config-file).
-
-In Kubernetes v1.13.0 and later to list/pull kube-dns images instead of the CoreDNS image
-the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
-has to be used.
 -->
 更多信息请浏览[使用带配置文件的 kubeadm init](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)
 或[使用带配置文件的 kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/#config-file).
 
+<!--
+You can also configure several kubelet-configuration options with `kubeadm init`. These options will be the same on any node in your cluster. 
+See [Configuring each kubelet in your cluster using kubeadm](/docs/setup/production-environment/tools/kubeadm/kubelet-integration/) for details.
+-->
+你也可以在使用 `kubeadm init` 命令时配置若干 kubelet 配置选项。
+这些选项对于集群中所有节点而言都是相同的。
+参阅[使用 kubeadm 来配置集群中的各个 kubelet](/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration/)
+了解详细信息。
+ 
+<!--
+In Kubernetes v1.13.0 and later to list/pull kube-dns images instead of the CoreDNS image
+the `--config` method described [here](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
+has to be used.
+-->
 在 Kubernetes v1.13.0 及更高版本中，要列出/拉取 kube-dns 镜像而不是 CoreDNS 镜像，
-必须使用[这里](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)所描述的 `--config` 方法。
-
-
+必须使用[这里](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/#cmd-phase-addon)
+所描述的 `--config` 方法。
 
 <!-- body -->
 ## kubeadm config upload from-file {#cmd-config-from-file}
 
+## kubeadm config print{#cmd-config-view}
+{{< include "generated/kubeadm_config_print.md" >}}
+
 ## kubeadm config print init-defaults {#cmd-config-print-init-defaults}
 {{< include "generated/kubeadm_config_print_init-defaults.md" >}}
 
@@ -60,15 +72,13 @@ has to be used.
 ## kubeadm config images pull {#cmd-config-images-pull}
 {{< include "generated/kubeadm_config_images_pull.md" >}}
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
 <!--
 * [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/) to upgrade a Kubernetes cluster to a newer version
 -->
 
-*  [kubeadm upgrade](/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/) 将 Kubernetes 集群升级到更新版本 [kubeadm upgrade]
+* [kubeadm upgrade](/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)
+  将 Kubernetes 集群升级到更新版本 [kubeadm upgrade]
 
 
diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 4a2006bfa5..ab0372b1a9 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -61,10 +61,9 @@ and kubeadm will use this CA for signing the rest of the certificates.
 `/etc/kubernetes/pki/ca.key` 中，而 kubeadm 将使用此 CA 对其余证书进行签名。
 
 <!--
-
 ## External CA mode {#external-ca-mode}
 
-It is also possible to provide just the `ca.crt` file and not the
+It is also possible to provide only the `ca.crt` file and not the
 `ca.key` file (this is only available for the root CA file, not other cert pairs).
 If all other certificates and kubeconfig files are in place, kubeadm recognizes
 this condition and activates the "External CA" mode. kubeadm will proceed without the CA key on disk.
@@ -72,27 +71,23 @@ this condition and activates the "External CA" mode. kubeadm will proceed withou
 
 ## 外部 CA 模式 {#external-ca-mode}
 
-只提供了 `ca.crt` 文件但是不提供 `ca.key` 文件也是可以的（这只对 CA 根证书可用，其它证书不可用）。
-如果所有的其它证书和 kubeconfig 文件已就绪， kubeadm 检测到满足以上条件就会激活
+只提供了 `ca.crt` 文件但是不提供 `ca.key` 文件也是可以的
+（这只对 CA 根证书可用，其它证书不可用）。
+如果所有的其它证书和 kubeconfig 文件已就绪，kubeadm 检测到满足以上条件就会激活
 "外部 CA" 模式。kubeadm 将会在没有 CA 密钥文件的情况下继续执行。
 
 <!--
 Instead, run the controller-manager standalone with `--controllers=csrsigner` and
 point to the CA certificate and key.
 -->
-否则, kubeadm 将独立运行 controller-manager，附加一个 `--controllers=csrsigner` 的参数，并且指明 CA 证书和密钥。
+否则, kubeadm 将独立运行 controller-manager，附加一个
+`--controllers=csrsigner` 的参数，并且指明 CA 证书和密钥。
 
 <!--
 [PKI certificates and requirements](/docs/setup/best-practices/certificates/) includes guidance on
 setting up a cluster to use an external CA.
 -->
-[PKI证书和要求](/zh/docs/setup/best-practices/certificates/)包括集群使用外部CA的设置指南。
-
-<!--
-[PKI certificates and requirements](/docs/setup/best-practices/certificates/) includes guidance on
-setting up a cluster to use an external CA.
--->
-[PKI 证书和要求](/zh/docs/setup/best-practices/certificates/)包括关于用外部 CA 设置集群的指南。
+[PKI 证书和要求](/zh/docs/setup/best-practices/certificates/)包括集群使用外部 CA 的设置指南。
 
 <!-- 
 ## Check certificate expiration 
@@ -415,4 +410,137 @@ For more information about manual rotation or replacement of CA, see [manual rot
 kubeadm 并不直接支持对 CA 证书的轮换或者替换。
 
 关于手动轮换或者置换 CA 的更多信息，可参阅
-[手动轮换 CA 证书](/zh/docs/tasks/tls/manual-rotation-of-ca-certificates/)。
\ No newline at end of file
+[手动轮换 CA 证书](/zh/docs/tasks/tls/manual-rotation-of-ca-certificates/)。
+
+<!--
+## Enabling signed kubelet serving certificates {#kubelet-serving-certs}
+
+By default the kubelet serving certificate deployed by kubeadm is self-signed.
+This means a connection from external services like the
+[metrics-server](https://github.com/kubernetes-sigs/metrics-server) to a
+kubelet cannot be secured with TLS.
+
+To configure the kubelets in a new kubeadm cluster to obtain properly signed serving
+certificates you must pass the following minimal configuration to `kubeadm init`:
+-->
+## 启用已签名的 kubelet 服务证书   {#kubelet-serving-certs}
+
+默认情况下，kubeadm 所部署的 kubelet 服务证书是自签名（Self-Signed））。
+这意味着从 [metrics-server](https://github.com/kubernetes-sigs/metrics-server)
+这类外部服务发起向 kubelet 的链接时无法使用 TLS 来完成保护。
+
+要在新的 kubeadm 集群中配置 kubelet 以使用被正确签名的服务证书，
+你必须向 `kubeadm init` 传递如下最小配置数据：
+
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: ClusterConfiguration
+---
+apiVersion: kubelet.config.k8s.io/v1beta1
+kind: KubeletConfiguration
+serverTLSBootstrap: true
+```
+
+<!--
+If you have already created the cluster you must adapt it by doing the following:
+ - Find and edit the `kubelet-config-{{< skew latestVersion >}}` ConfigMap in the `kube-system` namespace.
+In that ConfigMap, the `config` key has a
+[KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+document as its value. Edit the KubeletConfiguration document to set `serverTLSBootstrap: true`.
+- On each node, add the `serverTLSBootstrap: true` field in `/var/lib/kubelet/config.yaml`
+and restart the kubelet with `systemctl restart kubelet`
+-->
+如果你已经创建了集群，你必须通过执行下面的操作来完成适配：
+
+- 找到 `kube-system` 名字空间中名为 `kubelet-config-{{< skew latestVersion >}}`
+  的 ConfigMap 并编辑之。
+  在该 ConfigMap 中，`config` 键下面有一个
+  [KubeletConfiguration](/zh/docs/reference/config-api/kubelet-config.v1beta1/#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+  文档作为其取值。编辑该 KubeletConfiguration 文档以设置
+  `serverTLSBootstrap: true`。
+- 在每个节点上，在 `/var/lib/kubelet/config.yaml` 文件中添加
+  `serverTLSBootstrap: true` 字段，并使用 `systemctl restart kubelet`
+  来重启 kubelet。
+
+<!--
+The field `serverTLSBootstrap: true` will enable the bootstrap of kubelet serving
+certificates by requesting them from the `certificates.k8s.io` API. One known limitation
+is that the CSRs (Certificate Signing Requests) for these certificates cannot be automatically
+approved by the default signer in the kube-controller-manager -
+[`kubernetes.io/kubelet-serving`](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers).
+This will require action from the user or a third party controller.
+
+These CSRs can be viewed using:
+-->
+字段 `serverTLSBootstrap` 将允许启动引导 kubelet 的服务证书，方式
+是从 `certificates.k8s.io` API 处读取。这种方式的一种局限在于这些
+证书的 CSR（证书签名请求）不能被 kube-controller-manager 中默认的
+签名组件 
+[`kubernetes.io/kubelet-serving`](/zh/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers)
+批准。需要用户或者第三方控制器来执行此操作。
+
+可以使用下面的命令来查看 CSR：
+
+```shell
+kubectl get csr
+```
+
+```none
+NAME        AGE     SIGNERNAME                        REQUESTOR                      CONDITION
+csr-9wvgt   112s    kubernetes.io/kubelet-serving     system:node:worker-1           Pending
+csr-lz97v   1m58s   kubernetes.io/kubelet-serving     system:node:control-plane-1    Pending
+```
+
+<!--
+To approve them you can do the following:
+-->
+你可以执行下面的操作来批准这些请求：
+
+```shell
+kubectl certificate approve <CSR-名称>
+```
+
+<!--
+By default, these serving certificate will expire after one year. Kubeadm sets the
+`KubeletConfiguration` field `rotateCertificates` to `true`, which means that close
+to expiration a new set of CSRs for the serving certificates will be created and must
+be approved to complete the rotation. To understand more see
+[Certificate Rotation](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#certificate-rotation).
+-->
+默认情况下，这些服务证书上会在一年后过期。
+kubeadm 将 `KubeletConfiguration` 的 `rotateCertificates` 字段设置为
+`true`；这意味着证书快要过期时，会生成一组针对服务证书的新的 CSR，而
+这些 CSR 也要被批准才能完成证书轮换。
+要进一步了解这里的细节，可参阅
+[证书轮换](/zh/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#certificate-rotation)
+文档。
+
+<!--
+If you are looking for a solution for automatic approval of these CSRs it is recommended
+that you contact your cloud provider and ask if they have a CSR signer that verifies
+the node identity with an out of band mechanism.
+-->
+如果你在寻找一种能够自动批准这些 CSR 的解决方案，建议你与你的云提供商
+联系，询问他们是否有 CSR 签名组件，用来以带外（out-of-band）的方式检查
+节点的标识符。
+
+{{% thirdparty-content %}}
+
+<!--
+Third party custom controllers can be used:
+- [kubelet-rubber-stamp](https://github.com/kontena/kubelet-rubber-stamp)
+
+Such a controller is not a secure mechanism unless it not only verifies the CommonName
+in the CSR but also verifies the requested IPs and domain names. This would prevent
+a malicious actor that has access to a kubelet client certificate to create
+CSRs requesting serving certificates for any IP or domain name.
+-->
+也可以使用第三方定制的控制器：
+
+- [kubelet-rubber-stamp](https://github.com/kontena/kubelet-rubber-stamp)
+
+除非既能够验证 CSR 中的 CommonName，也能检查请求的 IP 和域名，
+这类控制器还算不得安全的机制。
+只有完成彻底的检查，才有可能避免有恶意的、能够访问 kubelet 客户端证书的第三方
+为任何 IP 或域名请求服务证书。
+
diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
index c90700aec1..81623a6b4c 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
@@ -585,10 +585,10 @@ and post-upgrade manifest file for a certain component, a backup file for it wil
 - Makes sure the control plane images are available or available to pull to the machine.
 - Generates replacements and/or uses user supplied overwrites if component configs require version upgrades.
 - Upgrades the control plane components or rollbacks if any of them fails to come up.
-- Applies the new `kube-dns` and `kube-proxy` manifests and makes sure that all necessary RBAC rules are created.
+- Applies the new `CoreDNS` and `kube-proxy` manifests and makes sure that all necessary RBAC rules are created.
 - Creates new certificate and key files of the API server and backs up old files if they're about to expire in 180 days.
 -->
-## 工作原理
+## 工作原理   {#how-it-works}
 
 `kubeadm upgrade apply` 做了以下工作：
 
@@ -600,7 +600,7 @@ and post-upgrade manifest file for a certain component, a backup file for it wil
 - 确保控制面的镜像是可用的或可拉取到服务器上。
 - 如果组件配置要求版本升级，则生成替代配置与/或使用用户提供的覆盖版本配置。
 - 升级控制面组件或回滚（如果其中任何一个组件无法启动）。
-- 应用新的 `kube-dns` 和 `kube-proxy` 清单，并强制创建所有必需的 RBAC 规则。
+- 应用新的 `CoreDNS` 和 `kube-proxy` 清单，并强制创建所有必需的 RBAC 规则。
 - 如果旧文件在 180 天后过期，将创建 API 服务器的新证书和密钥文件并备份旧文件。
 
 <!--

From 677bee3bd4f1b1257964e7f79498474f60689f1b Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Wed, 28 Apr 2021 17:21:11 +0800
Subject: [PATCH 721/788] [zh] Resync concepts section (10)

---
 .../concepts/architecture/cloud-controller.md |  4 +-
 .../control-plane-node-communication.md       | 14 +--
 .../zh/docs/concepts/architecture/nodes.md    | 95 ++++++++++++-------
 .../zh/docs/concepts/overview/components.md   | 16 ++--
 4 files changed, 80 insertions(+), 49 deletions(-)

diff --git a/content/zh/docs/concepts/architecture/cloud-controller.md b/content/zh/docs/concepts/architecture/cloud-controller.md
index 33d660b243..c962b5f5f0 100644
--- a/content/zh/docs/concepts/architecture/cloud-controller.md
+++ b/content/zh/docs/concepts/architecture/cloud-controller.md
@@ -1,11 +1,11 @@
 ---
-title: 云控制器管理器的基础概念
+title: 云控制器管理器
 content_type: concept
 weight: 40
 ---
 
 <!--
-title: Concepts Underlying the Cloud Controller Manager
+title: Cloud Controller Manager
 content_type: concept
 weight: 40
 -->
diff --git a/content/zh/docs/concepts/architecture/control-plane-node-communication.md b/content/zh/docs/concepts/architecture/control-plane-node-communication.md
index 0501507898..3e2beaafd9 100644
--- a/content/zh/docs/concepts/architecture/control-plane-node-communication.md
+++ b/content/zh/docs/concepts/architecture/control-plane-node-communication.md
@@ -15,7 +15,7 @@ aliases:
 <!-- overview -->
 
 <!--
-This document catalogs the communication paths between the control plane (really the apiserver) and the Kubernetes cluster. The intent is to allow users to customize their installation to harden the network configuration such that the cluster can be run on an untrusted network (or on fully public IPs on a cloud provider).
+This document catalogs the communication paths between the control plane (apiserver) and the Kubernetes cluster. The intent is to allow users to customize their installation to harden the network configuration such that the cluster can be run on an untrusted network (or on fully public IPs on a cloud provider).
 -->
 本文列举控制面节点（确切说是 API 服务器）和 Kubernetes 集群之间的通信路径。
 目的是为了让用户能够自定义他们的安装，以实现对网络配置的加固，使得集群能够在不可信的网络上
@@ -24,14 +24,15 @@ This document catalogs the communication paths between the control plane (really
 <!-- body -->
 <!--
 ## Node to Control Plane
-Kubernetes has a "hub-and-spoke" API pattern. All API usage from nodes (or the pods they run) terminate at the apiserver (none of the other control plane components are designed to expose remote services). The apiserver is configured to listen for remote connections on a secure HTTPS port (typically 443) with one or more forms of client [authentication](/docs/reference/access-authn-authz/authentication/) enabled.
+Kubernetes has a "hub-and-spoke" API pattern. All API usage from nodes (or the pods they run) terminate at the apiserver. None of the other control plane components are designed to expose remote services. The apiserver is configured to listen for remote connections on a secure HTTPS port (typically 443) with one or more forms of client [authentication](/docs/reference/access-authn-authz/authentication/) enabled.
 One or more forms of [authorization](/docs/reference/access-authn-authz/authorization/) should be enabled, especially if [anonymous requests](/docs/reference/access-authn-authz/authentication/#anonymous-requests) or [service account tokens](/docs/reference/access-authn-authz/authentication/#service-account-tokens) are allowed.
 -->
 ## 节点到控制面
 
 Kubernetes 采用的是中心辐射型（Hub-and-Spoke）API 模式。
-所有从集群（或所运行的 Pods）发出的 API 调用都终止于 apiserver（其它控制面组件都没有被设计为可暴露远程服务）。
-apiserver 被配置为在一个安全的 HTTPS 端口（443）上监听远程连接请求，
+所有从集群（或所运行的 Pods）发出的 API 调用都终止于 apiserver。
+其它控制面组件都没有被设计为可暴露远程服务。
+apiserver 被配置为在一个安全的 HTTPS 端口（通常为 443）上监听远程连接请求，
 并启用一种或多种形式的客户端[身份认证](/zh/docs/reference/access-authn-authz/authentication/)机制。
 一种或多种客户端[鉴权机制](/zh/docs/reference/access-authn-authz/authorization/)应该被启用，
 特别是在允许使用[匿名请求](/zh/docs/reference/access-authn-authz/authentication/#anonymous-requests)
@@ -84,7 +85,7 @@ The connections from the apiserver to the kubelet are used for:
 * Attaching (through kubectl) to running pods.
 * Providing the kubelet's port-forwarding functionality.
 
-These connections terminate at the kubelet's HTTPS endpoint. By default, the apiserver does not verify the kubelet's serving certificate, which makes the connection subject to man-in-the-middle attacks, and **unsafe** to run over untrusted and/or public networks.
+These connections terminate at the kubelet's HTTPS endpoint. By default, the apiserver does not verify the kubelet's serving certificate, which makes the connection subject to man-in-the-middle attacks and **unsafe** to run over untrusted and/or public networks.
 -->
 ### API 服务器到 kubelet
 
@@ -121,7 +122,6 @@ kubelet 之间使用 [SSH 隧道](#ssh-tunnels)。
 
 The connections from the apiserver to a node, pod, or service default to plain HTTP connections and are therefore neither authenticated nor encrypted. They can be run over a secure HTTPS connection by prefixing `https:` to the node, pod, or service name in the API URL, but they will not validate the certificate provided by the HTTPS endpoint nor provide client credentials so while the connection will be encrypted, it will not provide any guarantees of integrity. These connections **are not currently safe** to run over untrusted and/or public networks.
 -->
-
 ### apiserver 到节点、Pod 和服务
 
 从 apiserver 到节点、Pod 或服务的连接默认为纯 HTTP 方式，因此既没有认证，也没有加密。
@@ -153,7 +153,7 @@ Konnectivity 服务是对此通信通道的替代品。
 
 {{< feature-state for_k8s_version="v1.18" state="beta" >}}
 
-As a replacement to the SSH tunnels, the Konnectivity service provides TCP level proxy for the control plane to cluster communication. The Konnectivity service consists of two parts: the Konnectivity server and the Konnectivity agents, running in the control plane network and the nodes network respectively. The Konnectivity agents initiate connections to the Konnectivity server and maintain the network connections.
+As a replacement to the SSH tunnels, the Konnectivity service provides TCP level proxy for the control plane to cluster communication. The Konnectivity service consists of two parts: the Konnectivity server in the control plane network and the Konnectivity agents in the nodes network. The Konnectivity agents initiate connections to the Konnectivity server and maintain the network connections.
 After enabling the Konnectivity service, all control plane to nodes traffic goes through these connections.
 
 Follow the [Konnectivity service task](/docs/tasks/extend-kubernetes/setup-konnectivity/) to set up the Konnectivity service in your cluster.
diff --git a/content/zh/docs/concepts/architecture/nodes.md b/content/zh/docs/concepts/architecture/nodes.md
index 8536916268..280b705e84 100644
--- a/content/zh/docs/concepts/architecture/nodes.md
+++ b/content/zh/docs/concepts/architecture/nodes.md
@@ -17,9 +17,10 @@ weight: 10
 <!--
 Kubernetes runs your workload by placing containers into Pods to run on _Nodes_.
 A node may be a virtual or physical machine, depending on the cluster. Each node
-contains the services necessary to run
-{{< glossary_tooltip text="Pods" term_id="pod" >}}, managed by the
-{{< glossary_tooltip text="control plane" term_id="control-plane" >}}.
+is managed by the 
+{{< glossary_tooltip text="control plane" term_id="control-plane" >}}
+and contains the services necessary to run
+{{< glossary_tooltip text="Pods" term_id="pod" >}}.
 
 Typically you have several nodes in a cluster; in a learning or resource-limited
 environment, you might have just one.
@@ -31,8 +32,8 @@ The [components](/docs/concepts/overview/components/#node-components) on a node
 -->
 Kubernetes 通过将容器放入在节点（Node）上运行的 Pod 中来执行你的工作负载。
 节点可以是一个虚拟机或者物理机器，取决于所在的集群配置。
-每个节点包含运行 {{< glossary_tooltip text="Pods" term_id="pod" >}} 所需的服务，
-这些 Pods 由 {{< glossary_tooltip text="控制面" term_id="control-plane" >}} 负责管理。
+每个节点包含运行 {{< glossary_tooltip text="Pods" term_id="pod" >}} 所需的服务；
+这些节点由 {{< glossary_tooltip text="控制面" term_id="control-plane" >}} 负责管理。
 
 通常集群中会有若干个节点；而在一个学习用或者资源受限的环境中，你的集群中也可能
 只有一个节点。
@@ -556,17 +557,6 @@ that the scheduler won't place Pods onto unhealthy nodes.
 {{< glossary_tooltip text="污点" term_id="taint" >}}。
 这意味着调度器不会将 Pod 调度到不健康的节点上。
 
-<!--
-`kubectl cordon` marks a node as 'unschedulable', which has the side effect of the service
-controller removing the node from any LoadBalancer node target lists it was previously 
-eligible for, effectively removing incoming load balancer traffic from the cordoned node(s).
--->
-{{< caution>}}
-`kubectl cordon` 会将节点标记为“不可调度（Unschedulable）”。
-此操作的副作用是，服务控制器会将该节点从负载均衡器中之前的目标节点列表中移除，
-从而使得来自负载均衡器的网络请求不会到达被保护起来的节点。
-{{< /caution>}}
-
 <!--
 ### Node capacity
 
@@ -625,31 +615,58 @@ for more information.
 了解详细信息。
 
 <!-- 
-## Graceful Node Shutdown {#graceful-node-shutdown}
+## Graceful node shutdown {#graceful-node-shutdown}
 -->
 ## 节点体面关闭 {#graceful-node-shutdown}
 
-{{< feature-state state="alpha" for_k8s_version="v1.20" >}}
+{{< feature-state state="beta" for_k8s_version="v1.21" >}}
 
 <!-- 
-If you have enabled the `GracefulNodeShutdown` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/), then the kubelet attempts to detect the node system shutdown and terminates pods running on the node.
+The kubelet attempts to detect node system shutdown and terminates pods running on the node.
+
 Kubelet ensures that pods follow the normal [pod termination process](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination) during the node shutdown.
 -->
-如果你启用了 `GracefulNodeShutdown` [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)，
-那么 kubelet 尝试检测节点的系统关闭事件并终止在节点上运行的 Pod。
+kubelet 会尝试检测节点系统关闭事件并终止在节点上运行的 Pods。
+
 在节点终止期间，kubelet 保证 Pod 遵从常规的 [Pod 终止流程](/zh/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)。
 
 <!-- 
-When the `GracefulNodeShutdown` feature gate is enabled, kubelet uses [systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/) to delay the node shutdown with a given duration. During a shutdown kubelet terminates pods in two phases:
+The graceful node shutdown feature depends on systemd since it takes advantage of
+[systemd inhibitor locks](https://www.freedesktop.org/wiki/Software/systemd/inhibit/) to
+delay the node shutdown with a given duration.
 -->
-当启用了 `GracefulNodeShutdown` 特性门控时，
-kubelet 使用 [systemd 抑制器锁](https://www.freedesktop.org/wiki/Software/systemd/inhibit/)
-在给定的期限内延迟节点关闭。在关闭过程中，kubelet 分两个阶段终止 Pod：
+体面节点关闭特性依赖于 systemd，因为它要利用
+[systemd 抑制器锁](https://www.freedesktop.org/wiki/Software/systemd/inhibit/)
+在给定的期限内延迟节点关闭。
+
+<!--
+Graceful node shutdown is controlled with the `GracefulNodeShutdown`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) which is
+enabled by default in 1.21.
+-->
+体面节点关闭特性受 `GracefulNodeShutdown`
+[特性门控](/docs/reference/command-line-tools-reference/feature-gates/)
+控制，在 1.21 版本中是默认启用的。
+
+<!--
+Note that by default, both configuration options described below,
+`ShutdownGracePeriod` and `ShutdownGracePeriodCriticalPods` are set to zero,
+thus not activating Graceful node shutdown functionality.
+To activate the feature, the two kubelet config settings should be configured appropriately and set to non-zero values.
+-->
+注意，默认情况下，下面描述的两个配置选项，`ShutdownGracePeriod` 和
+`ShutdownGracePeriodCriticalPods` 都是被设置为 0 的，因此不会激活
+体面节点关闭功能。
+要激活此功能特性，这两个 kubelet 配置选项要适当配置，并设置为非零值。
 
 <!-- 
+During a graceful shutdown, kubelet terminates pods in two phases:
+
 1. Terminate regular pods running on the node.
 2. Terminate [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) running on the node.
 -->
+在体面关闭节点过程中，kubelet 分两个阶段来终止 Pods：
+
 1. 终止在节点上运行的常规 Pod。
 2. 终止在节点上运行的[关键 Pod](/zh/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)。
 
@@ -658,9 +675,11 @@ Graceful Node Shutdown feature is configured with two [`KubeletConfiguration`](/
 * `ShutdownGracePeriod`:
   * Specifies the total duration that the node should delay the shutdown by. This is the total grace period for pod termination for both regular and [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical).
 * `ShutdownGracePeriodCriticalPods`:
-  * Specifies the duration used to terminate [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) during a node shutdown. This should be less than `ShutdownGracePeriod`.
+  * Specifies the duration used to terminate [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical) during a node shutdown. This value should be less than `ShutdownGracePeriod`.
 -->
-节点体面关闭的特性对应两个 [`KubeletConfiguration`](/zh/docs/tasks/administer-cluster/kubelet-config-file/) 选项：
+节点体面关闭的特性对应两个
+[`KubeletConfiguration`](/zh/docs/tasks/administer-cluster/kubelet-config-file/) 选项：
+
 * `ShutdownGracePeriod`：
   * 指定节点应延迟关闭的总持续时间。此时间是 Pod 体面终止的时间总和，不区分常规 Pod 还是
     [关键 Pod](/zh/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)。
@@ -670,10 +689,16 @@ Graceful Node Shutdown feature is configured with two [`KubeletConfiguration`](/
     的持续时间。该值应小于 `ShutdownGracePeriod`。
 
 <!--  
-For example, if `ShutdownGracePeriod=30s`, and `ShutdownGracePeriodCriticalPods=10s`, kubelet will delay the node shutdown by 30 seconds. During the shutdown, the first 20 (30-10) seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical).
+For example, if `ShutdownGracePeriod=30s`, and
+`ShutdownGracePeriodCriticalPods=10s`, kubelet will delay the node shutdown by
+30 seconds. During the shutdown, the first 20 (30-10) seconds would be reserved
+for gracefully terminating normal pods, and the last 10 seconds would be
+reserved for terminating [critical pods](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical).
 -->
-例如，如果设置了 `ShutdownGracePeriod=30s` 和 `ShutdownGracePeriodCriticalPods=10s`，则 kubelet 将延迟 30 秒关闭节点。
-在关闭期间，将保留前 20（30 - 10）秒用于体面终止常规 Pod，而保留最后 10 秒用于终止
+例如，如果设置了 `ShutdownGracePeriod=30s` 和 `ShutdownGracePeriodCriticalPods=10s`，
+则 kubelet 将延迟 30 秒关闭节点。
+在关闭期间，将保留前 20（30 - 10）秒用于体面终止常规 Pod，
+而保留最后 10 秒用于终止
 [关键 Pod](/zh/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical)。
 
 ## {{% heading "whatsnext" %}}
@@ -685,8 +710,10 @@ For example, if `ShutdownGracePeriod=30s`, and `ShutdownGracePeriodCriticalPods=
   section of the architecture design document.
 * Read about [taints and tolerations](/docs/concepts/scheduling-eviction/taint-and-toleration/).
 -->
-* 了解有关节点[组件](/zh/docs/concepts/overview/components/#node-components)
-* 阅读[节点的 API 定义](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#node-v1-core)
-* 阅读架构设计文档中有关[节点](https://git.k8s.io/community/contributors/design-proposals/architecture/architecture.md#the-kubernetes-node)的章节
-* 了解[污点和容忍度](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)
+* 了解有关节点[组件](/zh/docs/concepts/overview/components/#node-components)。
+* 阅读 [Node 的 API 定义](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#node-v1-core)。
+* 阅读架构设计文档中有关
+  [节点](https://git.k8s.io/community/contributors/design-proposals/architecture/architecture.md#the-kubernetes-node)
+  的章节。
+* 了解[污点和容忍度](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)。
 
diff --git a/content/zh/docs/concepts/overview/components.md b/content/zh/docs/concepts/overview/components.md
index 6d3c0d7281..6f1051d142 100644
--- a/content/zh/docs/concepts/overview/components.md
+++ b/content/zh/docs/concepts/overview/components.md
@@ -52,18 +52,21 @@ The control plane's components make global decisions about the cluster (for exam
  -->
 ## 控制平面组件（Control Plane Components）    {#control-plane-components}
 
-控制平面的组件对集群做出全局决策(比如调度)，以及检测和响应集群事件（例如，当不满足部署的 `replicas` 字段时，启动新的 {{< glossary_tooltip text="pod" term_id="pod">}}）。
+控制平面的组件对集群做出全局决策(比如调度)，以及检测和响应集群事件（例如，当不满足部署的
+`replicas` 字段时，启动新的 {{< glossary_tooltip text="pod" term_id="pod">}}）。
 
 <!--
 Control plane components can be run on any machine in the cluster. However,
 for simplicity, set up scripts typically start all control plane components on
 the same machine, and do not run user containers on this machine. See
-[Building High-Availability Clusters](/docs/admin/high-availability/) for an example multi-master-VM setup.
+[Creating Highly Available clusters with kubeadm](/docs/setup/production-environment/tools/kubeadm/high-availability/)
+for an example control plane setup that runs across multiple VMs.
  -->
 控制平面组件可以在集群中的任何节点上运行。
-然而，为了简单起见，设置脚本通常会在同一个计算机上启动所有控制平面组件，并且不会在此计算机上运行用户容器。
-请参阅[构建高可用性集群](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)
-中对于多主机 VM 的设置示例。
+然而，为了简单起见，设置脚本通常会在同一个计算机上启动所有控制平面组件，
+并且不会在此计算机上运行用户容器。
+请参阅[使用 kubeadm 构建高可用性集群](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)
+中关于多 VM 控制平面设置的示例。
 
 ### kube-apiserver
 
@@ -203,7 +206,8 @@ Kubernetes 启动的容器自动将此 DNS 服务器包含在其 DNS 搜索列
 -->
 ### Web 界面（仪表盘）   
 
-[Dashboard](/zh/docs/tasks/access-application-cluster/web-ui-dashboard/) 是Kubernetes 集群的通用的、基于 Web 的用户界面。
+[Dashboard](/zh/docs/tasks/access-application-cluster/web-ui-dashboard/)
+是Kubernetes 集群的通用的、基于 Web 的用户界面。
 它使用户可以管理集群中运行的应用程序以及集群本身并进行故障排除。
 
 <!--

From 578e65eeb49c3c7d5446fd75e40f9d6086f6b715 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Fri, 30 Apr 2021 14:42:44 +0800
Subject: [PATCH 722/788] [zh] Sync Reference scheduling files

---
 .../docs/reference/kubernetes-api/_index.md   |  6 +++-
 .../zh/docs/reference/scheduling/config.md    | 32 +++++++++++--------
 .../zh/docs/reference/scheduling/policies.md  | 10 ++++--
 3 files changed, 31 insertions(+), 17 deletions(-)

diff --git a/content/zh/docs/reference/kubernetes-api/_index.md b/content/zh/docs/reference/kubernetes-api/_index.md
index 3e7c037a66..4b22d72710 100644
--- a/content/zh/docs/reference/kubernetes-api/_index.md
+++ b/content/zh/docs/reference/kubernetes-api/_index.md
@@ -1,4 +1,8 @@
 ---
-title: API 参考
+title: Kubernetes API
 weight: 30
 ---
+
+<!-- overview -->
+
+{{< glossary_definition term_id="kubernetes-api" length="all" >}}
diff --git a/content/zh/docs/reference/scheduling/config.md b/content/zh/docs/reference/scheduling/config.md
index d817a74401..99c9557e57 100644
--- a/content/zh/docs/reference/scheduling/config.md
+++ b/content/zh/docs/reference/scheduling/config.md
@@ -30,11 +30,12 @@ by implementing one or more of these extension points.
 
 <!--
 You can specify scheduling profiles by running `kube-scheduler --config <filename>`,
-using the component config APIs
-([`v1beta1`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.19.0/config/v1beta1?tab=doc#KubeSchedulerConfiguration)).
+using the 
+[KubeSchedulerConfiguration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/)
+struct.
 -->
 你可以通过运行 `kube-scheduler --config <filename>` 来设置调度模板，
-配置文件使用组件配置的 API ([`v1alpha1`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.19.0/config/v1beta1?tab=doc#KubeSchedulerConfiguration))。
+使用 [KubeSchedulerConfiguration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) 结构体。
 
 <!-- A minimal configuration looks as follows: -->
 最简单的配置如下：
@@ -285,11 +286,20 @@ extension points:
 <!--  
 - `VolumeBinding`: Checks if the node has or if it can bind the requested
   {{< glossary_tooltip text="volumes" term_id="volume" >}}.
-  Extension points: `PreFilter`, `Filter`, `Reserve`, `PreBind`.
+  Extension points: `PreFilter`, `Filter`, `Reserve`, `PreBind`, `Score`.
+  {{< note >}}
+  `Score` extension point is enabled when `VolumeCapacityPriority` feature is
+  enabled. It prioritizes the smallest PVs that can fit the requested volume
+  size.
+  {{< /note >}}
 -->
 - `VolumeBinding`：检查节点是否有请求的卷，或是否可以绑定请求的卷。
-
-  实现的扩展点: `PreFilter`，`Filter`，`Reserve`，`PreBind`。
+  实现的扩展点: `PreFilter`、`Filter`、`Reserve`、`PreBind` 和 `Score`。
+  {{< note >}}
+  当 `VolumeCapacityPriority` 特性被启用时，`Score` 扩展点也被启用。
+  它优先考虑可以满足所需卷大小的最小 PV。
+  {{< /note >}}
+  
 <!--
 - `VolumeRestrictions`: Checks that volumes mounted in the node satisfy
   restrictions that are specific to the volume provider.
@@ -389,13 +399,6 @@ that are not enabled by default:
 
   实现的扩展点：`Score`。
 <!--  
-- `NodeResourceLimits`: Favors nodes that satisfy the Pod resource limits.
-  Extension points: `PreScore`, `Score`.
--->
-- `NodeResourceLimits`：选择满足 Pod 资源限制的节点。
-
-  实现的扩展点：`PreScore`，`Score`。
-<!--  
 - `CinderVolume`: Checks that OpenStack Cinder volume limits can be satisfied
   for the node.
   Extension points: `Filter`.
@@ -507,6 +510,9 @@ only has one pending pods queue.
 <!--  
 * Read the [kube-scheduler reference](https://kubernetes.io/docs/reference/command-line-tools-reference/kube-scheduler/)
 * Learn about [scheduling](/docs/concepts/scheduling-eviction/kube-scheduler/)
+* Read the [kube-scheduler configuration (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1/) reference
 -->
 * 阅读 [kube-scheduler 参考](/zh/docs/reference/command-line-tools-reference/kube-scheduler/)
 * 了解[调度](/zh/docs/concepts/scheduling-eviction/kube-scheduler/)
+* 阅读 [kube-scheduler 配置 (v1beta1)](/zh/docs/reference/config-api/kube-scheduler-config.v1beta1/) 参考
+
diff --git a/content/zh/docs/reference/scheduling/policies.md b/content/zh/docs/reference/scheduling/policies.md
index 248e3a7f84..20a7ca04bf 100644
--- a/content/zh/docs/reference/scheduling/policies.md
+++ b/content/zh/docs/reference/scheduling/policies.md
@@ -25,11 +25,11 @@ respectively.
 You can set a scheduling policy by running
 `kube-scheduler --policy-config-file <filename>` or
 `kube-scheduler --policy-configmap <ConfigMap>`
-and using the [Policy type](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy).
+and using the [Policy type](/zh/docs/reference/config-api/kube-scheduler-policy-config.v1/).
 -->
 你可以通过执行 `kube-scheduler --policy-config-file <filename>` 或
 `kube-scheduler --policy-configmap <ConfigMap>` 
-设置并使用[调度策略](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy)。
+设置并使用[调度策略](/zh/docs/reference/config-api/kube-scheduler-policy-config.v1/)。
 
 
 <!-- body -->
@@ -228,6 +228,10 @@ and using the [Policy type](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/con
 <!--  
 * Learn about [scheduling](/docs/concepts/scheduling-eviction/kube-scheduler/)
 * Learn about [kube-scheduler Configuration](/docs/reference/scheduling/config/)
+* Read the [kube-scheduler configuration reference (v1beta1)](/docs/reference/config-api/kube-scheduler-config.v1beta1)
+* Read the [kube-scheduler Policy reference (v1)](/docs/reference/config-api/kube-scheduler-policy-config.v1/)
 -->
 * 了解[调度](/zh/docs/concepts/scheduling-eviction/kube-scheduler/)
-* 了解 [kube-scheduler 配置](/zh/docs/reference/scheduling/config/)
\ No newline at end of file
+* 了解 [kube-scheduler 配置](/zh/docs/reference/scheduling/config/)
+* 阅读 [kube-scheduler 配置参考 (v1beta1)](/zh/docs/reference/config-api/kube-scheduler-config.v1beta1)
+* 阅读 [kube-scheduler 策略参考 (v1)](/zh/docs/reference/config-api/kube-scheduler-policy-config.v1/)

From ed0efa8b3e6ff95dd2352ec9c09dcf18bf8a690a Mon Sep 17 00:00:00 2001
From: Zhang Zhanpeng <zhanpeng.zhang@daocloud.io>
Date: Mon, 10 May 2021 12:18:26 +0800
Subject: [PATCH 723/788] Added 2 spaces in kubeadm-init.md

Signed-off-by: Zhang Zhanpeng <zhanpeng.zhang@daocloud.io>
---
 content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
index 2c70fe93e9..637024a9cd 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
@@ -301,7 +301,7 @@ requested Kubernetes version is a CI label (such as `ci/latest`)
 <!--
 You can override this behavior by using [kubeadm with a configuration file](#config-file).
 -->
-你可以通过使用[带有配置文件的 kubeadm](#config-file)来重写此操作。
+你可以通过使用[带有配置文件的 kubeadm](#config-file) 来重写此操作。
 
 <!--
 Allowed customization are:
@@ -513,7 +513,7 @@ provisioned). For details, see the [kubeadm join](/docs/reference/setup-tools/ku
 -->
 注意这种搭建集群的方式在安全保证上会有一些宽松，因为这种方式不允许使用 `--discovery-token-ca-cert-hash` 
 来验证根 CA 的哈希值（因为当配置节点的时候，它还没有被生成）。
-更多信息请参阅 [kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/)文档。
+更多信息请参阅 [kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/) 文档。
 
 ## {{% heading "whatsnext" %}}
 

From 78300a5ca355ae741d228e2cae2a555825dd8bb7 Mon Sep 17 00:00:00 2001
From: Mengjiao Liu <mengjiao.liu@daocloud.io>
Date: Fri, 30 Apr 2021 14:57:00 +0800
Subject: [PATCH 724/788] [zh] Sync reference config-api file

---
 .../zh/docs/reference/config-api/_index.md    |    5 +
 .../config-api/apiserver-audit.v1.md          |  616 +++++
 .../apiserver-webhookadmission.v1.md          |   46 +
 .../client-authentication.v1beta1.md          |  252 ++
 .../kube-scheduler-config.v1beta1.md          | 2156 +++++++++++++++++
 5 files changed, 3075 insertions(+)
 create mode 100644 content/zh/docs/reference/config-api/_index.md
 create mode 100644 content/zh/docs/reference/config-api/apiserver-audit.v1.md
 create mode 100644 content/zh/docs/reference/config-api/apiserver-webhookadmission.v1.md
 create mode 100644 content/zh/docs/reference/config-api/client-authentication.v1beta1.md
 create mode 100644 content/zh/docs/reference/config-api/kube-scheduler-config.v1beta1.md

diff --git a/content/zh/docs/reference/config-api/_index.md b/content/zh/docs/reference/config-api/_index.md
new file mode 100644
index 0000000000..9e72af1b50
--- /dev/null
+++ b/content/zh/docs/reference/config-api/_index.md
@@ -0,0 +1,5 @@
+---
+title: 配置 API 
+weight: 65
+---
+
diff --git a/content/zh/docs/reference/config-api/apiserver-audit.v1.md b/content/zh/docs/reference/config-api/apiserver-audit.v1.md
new file mode 100644
index 0000000000..c2e4a37704
--- /dev/null
+++ b/content/zh/docs/reference/config-api/apiserver-audit.v1.md
@@ -0,0 +1,616 @@
+---
+title: kube-apiserver Audit Configuration (v1)
+content_type: tool-reference
+package: audit.k8s.io/v1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [Event](#audit-k8s-io-v1-Event)
+- [EventList](#audit-k8s-io-v1-EventList)
+- [Policy](#audit-k8s-io-v1-Policy)
+- [PolicyList](#audit-k8s-io-v1-PolicyList)
+  
+    
+
+
+## `Event`     {#audit-k8s-io-v1-Event}
+    
+
+
+
+**Appears in:**
+
+- [EventList](#audit-k8s-io-v1-EventList)
+
+
+Event captures all the information that can be included in an API audit log.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Event</code></td></tr>
+    
+
+  
+  
+<tr><td><code>level</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Level"><code>Level</code></a>
+</td>
+<td>
+   AuditLevel at which event was generated</td>
+</tr>
+    
+  
+<tr><td><code>auditID</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/types#UID"><code>k8s.io/apimachinery/pkg/types.UID</code></a>
+</td>
+<td>
+   Unique audit ID, generated for each request.</td>
+</tr>
+    
+  
+<tr><td><code>stage</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Stage"><code>Stage</code></a>
+</td>
+<td>
+   Stage of the request handling when this event instance was generated.</td>
+</tr>
+    
+  
+<tr><td><code>requestURI</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   RequestURI is the request URI as sent by the client to a server.</td>
+</tr>
+    
+  
+<tr><td><code>verb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb is the kubernetes verb associated with the request.
+For non-resource requests, this is the lower-cased HTTP method.</td>
+</tr>
+    
+  
+<tr><td><code>user</code> <B>[Required]</B><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#userinfo-v1-authentication"><code>authentication/v1.UserInfo</code></a>
+</td>
+<td>
+   Authenticated user information.</td>
+</tr>
+    
+  
+<tr><td><code>impersonatedUser</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#userinfo-v1-authentication"><code>authentication/v1.UserInfo</code></a>
+</td>
+<td>
+   Impersonated user information.</td>
+</tr>
+    
+  
+<tr><td><code>sourceIPs</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   Source IPs, from where the request originated and intermediate proxies.</td>
+</tr>
+    
+  
+<tr><td><code>userAgent</code><br/>
+<code>string</code>
+</td>
+<td>
+   UserAgent records the user agent string reported by the client.
+Note that the UserAgent is provided by the client, and must not be trusted.</td>
+</tr>
+    
+  
+<tr><td><code>objectRef</code><br/>
+<a href="#audit-k8s-io-v1-ObjectReference"><code>ObjectReference</code></a>
+</td>
+<td>
+   Object reference this request is targeted at.
+Does not apply for List-type requests, or non-resource requests.</td>
+</tr>
+    
+  
+<tr><td><code>responseStatus</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#status-v1-meta"><code>meta/v1.Status</code></a>
+</td>
+<td>
+   The response status, populated even when the ResponseObject is not a Status type.
+For successful responses, this will only include the Code and StatusSuccess.
+For non-status type error responses, this will be auto-populated with the error Message.</td>
+</tr>
+    
+  
+<tr><td><code>requestObject</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime#Unknown"><code>k8s.io/apimachinery/pkg/runtime.Unknown</code></a>
+</td>
+<td>
+   API object from the request, in JSON format. The RequestObject is recorded as-is in the request
+(possibly re-encoded as JSON), prior to version conversion, defaulting, admission or
+merging. It is an external versioned object type, and may not be a valid object on its own.
+Omitted for non-resource requests.  Only logged at Request Level and higher.</td>
+</tr>
+    
+  
+<tr><td><code>responseObject</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime#Unknown"><code>k8s.io/apimachinery/pkg/runtime.Unknown</code></a>
+</td>
+<td>
+   API object returned in the response, in JSON. The ResponseObject is recorded after conversion
+to the external type, and serialized as JSON.  Omitted for non-resource requests.  Only logged
+at Response Level.</td>
+</tr>
+    
+  
+<tr><td><code>requestReceivedTimestamp</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#microtime-v1-meta"><code>meta/v1.MicroTime</code></a>
+</td>
+<td>
+   Time the request reached the apiserver.</td>
+</tr>
+    
+  
+<tr><td><code>stageTimestamp</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#microtime-v1-meta"><code>meta/v1.MicroTime</code></a>
+</td>
+<td>
+   Time the request reached current audit stage.</td>
+</tr>
+    
+  
+<tr><td><code>annotations</code><br/>
+<code>map[string]string</code>
+</td>
+<td>
+   Annotations is an unstructured key value map stored with an audit event that may be set by
+plugins invoked in the request serving chain, including authentication, authorization and
+admission plugins. Note that these annotations are for the audit event, and do not correspond
+to the metadata.annotations of the submitted object. Keys should uniquely identify the informing
+component to avoid name collisions (e.g. podsecuritypolicy.admission.k8s.io/policy). Values
+should be short. Annotations are included in the Metadata level.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `EventList`     {#audit-k8s-io-v1-EventList}
+    
+
+
+
+
+EventList is a list of audit Events.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>EventList</code></td></tr>
+    
+
+  
+  
+<tr><td><code>metadata</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#listmeta-v1-meta"><code>meta/v1.ListMeta</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>items</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Event"><code>[]Event</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Policy`     {#audit-k8s-io-v1-Policy}
+    
+
+
+
+**Appears in:**
+
+- [PolicyList](#audit-k8s-io-v1-PolicyList)
+
+
+Policy defines the configuration of audit logging, and the rules for how different request
+categories are logged.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Policy</code></td></tr>
+    
+
+  
+  
+<tr><td><code>metadata</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#objectmeta-v1-meta"><code>meta/v1.ObjectMeta</code></a>
+</td>
+<td>
+   ObjectMeta is included for interoperability with API infrastructure.Refer to the Kubernetes API documentation for the fields of the <code>metadata</code> field.</td>
+</tr>
+    
+  
+<tr><td><code>rules</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-PolicyRule"><code>[]PolicyRule</code></a>
+</td>
+<td>
+   Rules specify the audit Level a request should be recorded at.
+A request may match multiple rules, in which case the FIRST matching rule is used.
+The default audit level is None, but can be overridden by a catch-all rule at the end of the list.
+PolicyRules are strictly ordered.</td>
+</tr>
+    
+  
+<tr><td><code>omitStages</code><br/>
+<a href="#audit-k8s-io-v1-Stage"><code>[]Stage</code></a>
+</td>
+<td>
+   OmitStages is a list of stages for which no events are created. Note that this can also
+be specified per rule in which case the union of both are omitted.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PolicyList`     {#audit-k8s-io-v1-PolicyList}
+    
+
+
+
+
+PolicyList is a list of audit Policies.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>audit.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>PolicyList</code></td></tr>
+    
+
+  
+  
+<tr><td><code>metadata</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#listmeta-v1-meta"><code>meta/v1.ListMeta</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>items</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Policy"><code>[]Policy</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `GroupResources`     {#audit-k8s-io-v1-GroupResources}
+    
+
+
+
+**Appears in:**
+
+- [PolicyRule](#audit-k8s-io-v1-PolicyRule)
+
+
+GroupResources represents resource kinds in an API group.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>group</code><br/>
+<code>string</code>
+</td>
+<td>
+   Group is the name of the API group that contains the resources.
+The empty string represents the core API group.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   Resources is a list of resources this rule applies to.
+
+For example:
+'pods' matches pods.
+'pods/log' matches the log subresource of pods.
+'&lowast;' matches all resources and their subresources.
+'pods/&lowast;' matches all subresources of pods.
+'&lowast;/scale' matches all scale subresources.
+
+If wildcard is present, the validation rule will ensure resources do not
+overlap with each other.
+
+An empty list implies all resources and subresources in this API groups apply.</td>
+</tr>
+    
+  
+<tr><td><code>resourceNames</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   ResourceNames is a list of resource instance names that the policy matches.
+Using this field requires Resources to be specified.
+An empty list implies that every instance of the resource is matched.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Level`     {#audit-k8s-io-v1-Level}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [Event](#audit-k8s-io-v1-Event)
+
+- [PolicyRule](#audit-k8s-io-v1-PolicyRule)
+
+
+Level defines the amount of information logged during auditing
+
+
+    
+
+
+## `ObjectReference`     {#audit-k8s-io-v1-ObjectReference}
+    
+
+
+
+**Appears in:**
+
+- [Event](#audit-k8s-io-v1-Event)
+
+
+ObjectReference contains enough information to let you inspect or modify the referred object.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>resource</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>namespace</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>name</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>uid</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/types#UID"><code>k8s.io/apimachinery/pkg/types.UID</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>apiGroup</code><br/>
+<code>string</code>
+</td>
+<td>
+   APIGroup is the name of the API group that contains the referred object.
+The empty string represents the core API group.</td>
+</tr>
+    
+  
+<tr><td><code>apiVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   APIVersion is the version of the API group that contains the referred object.</td>
+</tr>
+    
+  
+<tr><td><code>resourceVersion</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+<tr><td><code>subresource</code><br/>
+<code>string</code>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PolicyRule`     {#audit-k8s-io-v1-PolicyRule}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#audit-k8s-io-v1-Policy)
+
+
+PolicyRule maps requests based off metadata to an audit Level.
+Requests must match the rules of every field (an intersection of rules).
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>level</code> <B>[Required]</B><br/>
+<a href="#audit-k8s-io-v1-Level"><code>Level</code></a>
+</td>
+<td>
+   The Level that requests matching this rule are recorded at.</td>
+</tr>
+    
+  
+<tr><td><code>users</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   The users (by authenticated user name) this rule applies to.
+An empty list implies every user.</td>
+</tr>
+    
+  
+<tr><td><code>userGroups</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   The user groups this rule applies to. A user is considered matching
+if it is a member of any of the UserGroups.
+An empty list implies every user group.</td>
+</tr>
+    
+  
+<tr><td><code>verbs</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   The verbs that match this rule.
+An empty list implies every verb.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code><br/>
+<a href="#audit-k8s-io-v1-GroupResources"><code>[]GroupResources</code></a>
+</td>
+<td>
+   Resources that this rule matches. An empty list implies all kinds in all API groups.</td>
+</tr>
+    
+  
+<tr><td><code>namespaces</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   Namespaces that this rule matches.
+The empty string "" matches non-namespaced resources.
+An empty list implies every namespace.</td>
+</tr>
+    
+  
+<tr><td><code>nonResourceURLs</code><br/>
+<code>[]string</code>
+</td>
+<td>
+   NonResourceURLs is a set of URL paths that should be audited.
+&lowast;s are allowed, but only as the full, final step in the path.
+Examples:
+ "/metrics" - Log requests for apiserver metrics
+ "/healthz&lowast;" - Log all health checks</td>
+</tr>
+    
+  
+<tr><td><code>omitStages</code><br/>
+<a href="#audit-k8s-io-v1-Stage"><code>[]Stage</code></a>
+</td>
+<td>
+   OmitStages is a list of stages for which no events are created. Note that this can also
+be specified policy wide in which case the union of both are omitted.
+An empty list means no restrictions will apply.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Stage`     {#audit-k8s-io-v1-Stage}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [Event](#audit-k8s-io-v1-Event)
+
+- [Policy](#audit-k8s-io-v1-Policy)
+
+- [PolicyRule](#audit-k8s-io-v1-PolicyRule)
+
+
+Stage defines the stages in request handling that audit events may be generated.
diff --git a/content/zh/docs/reference/config-api/apiserver-webhookadmission.v1.md b/content/zh/docs/reference/config-api/apiserver-webhookadmission.v1.md
new file mode 100644
index 0000000000..fb45ca7b1a
--- /dev/null
+++ b/content/zh/docs/reference/config-api/apiserver-webhookadmission.v1.md
@@ -0,0 +1,46 @@
+---
+title: WebhookAdmission Configuration (v1)
+content_type: tool-reference
+package: apiserver.config.k8s.io/v1
+auto_generated: true
+---
+Package v1 is the v1 version of the API.
+
+## Resource Types 
+
+
+- [WebhookAdmission](#apiserver-config-k8s-io-v1-WebhookAdmission)
+  
+    
+
+
+## `WebhookAdmission`     {#apiserver-config-k8s-io-v1-WebhookAdmission}
+    
+
+
+
+
+WebhookAdmission provides configuration for the webhook admission controller.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>apiserver.config.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>WebhookAdmission</code></td></tr>
+    
+
+  
+  
+<tr><td><code>kubeConfigFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   KubeConfigFile is the path to the kubeconfig file.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  
diff --git a/content/zh/docs/reference/config-api/client-authentication.v1beta1.md b/content/zh/docs/reference/config-api/client-authentication.v1beta1.md
new file mode 100644
index 0000000000..e78edd23f6
--- /dev/null
+++ b/content/zh/docs/reference/config-api/client-authentication.v1beta1.md
@@ -0,0 +1,252 @@
+---
+title: Client Authentication (v1beta1)
+content_type: tool-reference
+package: client.authentication.k8s.io/v1beta1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [ExecCredential](#client-authentication-k8s-io-v1beta1-ExecCredential)
+  
+    
+
+
+## `ExecCredential`     {#client-authentication-k8s-io-v1beta1-ExecCredential}
+    
+
+
+
+
+ExecCredential is used by exec-based plugins to communicate credentials to
+HTTP transports.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>client.authentication.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>ExecCredential</code></td></tr>
+    
+
+  
+  
+<tr><td><code>spec</code> <B>[Required]</B><br/>
+<a href="#client-authentication-k8s-io-v1beta1-ExecCredentialSpec"><code>ExecCredentialSpec</code></a>
+</td>
+<td>
+   Spec holds information passed to the plugin by the transport.</td>
+</tr>
+    
+  
+<tr><td><code>status</code><br/>
+<a href="#client-authentication-k8s-io-v1beta1-ExecCredentialStatus"><code>ExecCredentialStatus</code></a>
+</td>
+<td>
+   Status is filled in by the plugin and holds the credentials that the transport
+should use to contact the API.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Cluster`     {#client-authentication-k8s-io-v1beta1-Cluster}
+    
+
+
+
+**Appears in:**
+
+- [ExecCredentialSpec](#client-authentication-k8s-io-v1beta1-ExecCredentialSpec)
+
+
+Cluster contains information to allow an exec plugin to communicate
+with the kubernetes cluster being authenticated to.
+
+To ensure that this struct contains everything someone would need to communicate
+with a kubernetes cluster (just like they would via a kubeconfig), the fields
+should shadow "k8s.io/client-go/tools/clientcmd/api/v1".Cluster, with the exception
+of CertificateAuthority, since CA data will always be passed to the plugin as bytes.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>server</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server is the address of the kubernetes cluster (https://hostname:port).</td>
+</tr>
+    
+  
+<tr><td><code>tls-server-name</code><br/>
+<code>string</code>
+</td>
+<td>
+   TLSServerName is passed to the server for SNI and is used in the client to
+check server certificates against. If ServerName is empty, the hostname
+used to contact the server is used.</td>
+</tr>
+    
+  
+<tr><td><code>insecure-skip-tls-verify</code><br/>
+<code>bool</code>
+</td>
+<td>
+   InsecureSkipTLSVerify skips the validity check for the server's certificate.
+This will make your HTTPS connections insecure.</td>
+</tr>
+    
+  
+<tr><td><code>certificate-authority-data</code><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CAData contains PEM-encoded certificate authority certificates.
+If empty, system roots should be used.</td>
+</tr>
+    
+  
+<tr><td><code>proxy-url</code><br/>
+<code>string</code>
+</td>
+<td>
+   ProxyURL is the URL to the proxy to be used for all requests to this
+cluster.</td>
+</tr>
+    
+  
+<tr><td><code>config</code><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime/#RawExtension"><code>k8s.io/apimachinery/pkg/runtime.RawExtension</code></a>
+</td>
+<td>
+   Config holds additional config data that is specific to the exec
+plugin with regards to the cluster being authenticated to.
+
+This data is sourced from the clientcmd Cluster object's
+extensions[client.authentication.k8s.io/exec] field:
+
+clusters:
+- name: my-cluster
+  cluster:
+    ...
+    extensions:
+    - name: client.authentication.k8s.io/exec  # reserved extension name for per cluster exec config
+      extension:
+        audience: 06e3fbd18de8  # arbitrary config
+
+In some environments, the user config may be exactly the same across many clusters
+(i.e. call this exec plugin) minus some details that are specific to each cluster
+such as the audience.  This field allows the per cluster config to be directly
+specified with the cluster info.  Using this field to store secret data is not
+recommended as one of the prime benefits of exec plugins is that no secrets need
+to be stored directly in the kubeconfig.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExecCredentialSpec`     {#client-authentication-k8s-io-v1beta1-ExecCredentialSpec}
+    
+
+
+
+**Appears in:**
+
+- [ExecCredential](#client-authentication-k8s-io-v1beta1-ExecCredential)
+
+
+ExecCredentialSpec holds request and runtime specific information provided by
+the transport.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>cluster</code><br/>
+<a href="#client-authentication-k8s-io-v1beta1-Cluster"><code>Cluster</code></a>
+</td>
+<td>
+   Cluster contains information to allow an exec plugin to communicate with the
+kubernetes cluster being authenticated to. Note that Cluster is non-nil only
+when provideClusterInfo is set to true in the exec provider config (i.e.,
+ExecConfig.ProvideClusterInfo).</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExecCredentialStatus`     {#client-authentication-k8s-io-v1beta1-ExecCredentialStatus}
+    
+
+
+
+**Appears in:**
+
+- [ExecCredential](#client-authentication-k8s-io-v1beta1-ExecCredential)
+
+
+ExecCredentialStatus holds credentials for the transport to use.
+
+Token and ClientKeyData are sensitive fields. This data should only be
+transmitted in-memory between client and exec plugin process. Exec plugin
+itself should at least be protected via file permissions.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>expirationTimestamp</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#time-v1-meta"><code>meta/v1.Time</code></a>
+</td>
+<td>
+   ExpirationTimestamp indicates a time when the provided credentials expire.</td>
+</tr>
+    
+  
+<tr><td><code>token</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Token is a bearer token used by the client for request authentication.</td>
+</tr>
+    
+  
+<tr><td><code>clientCertificateData</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   PEM-encoded client TLS certificates (including intermediates, if any).</td>
+</tr>
+    
+  
+<tr><td><code>clientKeyData</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   PEM-encoded private key for the above certificate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  
diff --git a/content/zh/docs/reference/config-api/kube-scheduler-config.v1beta1.md b/content/zh/docs/reference/config-api/kube-scheduler-config.v1beta1.md
new file mode 100644
index 0000000000..ac32e65674
--- /dev/null
+++ b/content/zh/docs/reference/config-api/kube-scheduler-config.v1beta1.md
@@ -0,0 +1,2156 @@
+---
+title: kube-scheduler Configuration (v1beta1)
+content_type: tool-reference
+package: kubescheduler.config.k8s.io/v1
+auto_generated: true
+---
+
+
+## Resource Types 
+
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+- [DefaultPreemptionArgs](#kubescheduler-config-k8s-io-v1beta1-DefaultPreemptionArgs)
+- [InterPodAffinityArgs](#kubescheduler-config-k8s-io-v1beta1-InterPodAffinityArgs)
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+- [NodeAffinityArgs](#kubescheduler-config-k8s-io-v1beta1-NodeAffinityArgs)
+- [NodeLabelArgs](#kubescheduler-config-k8s-io-v1beta1-NodeLabelArgs)
+- [NodeResourcesFitArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesFitArgs)
+- [NodeResourcesLeastAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesLeastAllocatedArgs)
+- [NodeResourcesMostAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesMostAllocatedArgs)
+- [PodTopologySpreadArgs](#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadArgs)
+- [RequestedToCapacityRatioArgs](#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs)
+- [ServiceAffinityArgs](#kubescheduler-config-k8s-io-v1beta1-ServiceAffinityArgs)
+- [VolumeBindingArgs](#kubescheduler-config-k8s-io-v1beta1-VolumeBindingArgs)
+  
+    
+
+
+## `Policy`     {#kubescheduler-config-k8s-io-v1-Policy}
+    
+
+
+
+
+Policy describes a struct for a policy resource used in api.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>Policy</code></td></tr>
+    
+
+  
+  
+<tr><td><code>predicates</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicatePolicy"><code>[]PredicatePolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the fit predicate functions</td>
+</tr>
+    
+  
+<tr><td><code>priorities</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityPolicy"><code>[]PriorityPolicy</code></a>
+</td>
+<td>
+   Holds the information to configure the priority functions</td>
+</tr>
+    
+  
+<tr><td><code>extenders</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LegacyExtender"><code>[]LegacyExtender</code></a>
+</td>
+<td>
+   Holds the information to communicate with the extender(s)</td>
+</tr>
+    
+  
+<tr><td><code>hardPodAffinitySymmetricWeight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule
+corresponding to every RequiredDuringScheduling affinity rule.
+HardPodAffinitySymmetricWeight represents the weight of implicit PreferredDuringScheduling affinity rule, in the range 1-100.</td>
+</tr>
+    
+  
+<tr><td><code>alwaysCheckAllPredicates</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   When AlwaysCheckAllPredicates is set to true, scheduler checks all
+the configured predicates even after one or more of them fails.
+When the flag is set to false, scheduler skips checking the rest
+of the predicates after it finds one predicate that failed.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderManagedResource`     {#kubescheduler-config-k8s-io-v1-ExtenderManagedResource}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderManagedResource describes the arguments of extended resources
+managed by an extender.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name is the extended resource name.</td>
+</tr>
+    
+  
+<tr><td><code>ignoredByScheduler</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   IgnoredByScheduler indicates whether kube-scheduler should ignore this
+resource when applying predicates.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ExtenderTLSConfig`     {#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig}
+    
+
+
+
+**Appears in:**
+
+- [Extender](#kubescheduler-config-k8s-io-v1beta1-Extender)
+
+- [LegacyExtender](#kubescheduler-config-k8s-io-v1-LegacyExtender)
+
+
+ExtenderTLSConfig contains settings to enable TLS with extender
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>insecure</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Server should be accessed without verifying the TLS certificate. For testing only.</td>
+</tr>
+    
+  
+<tr><td><code>serverName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   ServerName is passed to the server for SNI and is used in the client to check server
+certificates against. If ServerName is empty, the hostname used to contact the
+server is used.</td>
+</tr>
+    
+  
+<tr><td><code>certFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>keyFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Server requires TLS client certificate authentication</td>
+</tr>
+    
+  
+<tr><td><code>caFile</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Trusted root certificates for server</td>
+</tr>
+    
+  
+<tr><td><code>certData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CertData holds PEM-encoded bytes (typically read from a client certificate file).
+CertData takes precedence over CertFile</td>
+</tr>
+    
+  
+<tr><td><code>keyData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   KeyData holds PEM-encoded bytes (typically read from a client certificate key file).
+KeyData takes precedence over KeyFile</td>
+</tr>
+    
+  
+<tr><td><code>caData</code> <B>[Required]</B><br/>
+<code>[]byte</code>
+</td>
+<td>
+   CAData holds PEM-encoded bytes (typically read from a root certificates bundle).
+CAData takes precedence over CAFile</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelPreference`     {#kubescheduler-config-k8s-io-v1-LabelPreference}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+LabelPreference holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   This is a boolean flag
+If true, higher priority is given to nodes that have the label
+If false, higher priority is given to nodes that do not have the label</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LabelsPresence`     {#kubescheduler-config-k8s-io-v1-LabelsPresence}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+LabelsPresence holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should be either present (or absent) for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>presence</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   The boolean flag that indicates whether the labels should be present or absent from the node</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `LegacyExtender`     {#kubescheduler-config-k8s-io-v1-LegacyExtender}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+LegacyExtender holds the parameters used to communicate with the extender. If a verb is unspecified/empty,
+it is assumed that the extender chose not to provide that extension.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>urlPrefix</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   URLPrefix at which the extender is available</td>
+</tr>
+    
+  
+<tr><td><code>filterVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the filter call, empty if not supported. This verb is appended to the URLPrefix when issuing the filter call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>preemptVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the preempt call, empty if not supported. This verb is appended to the URLPrefix when issuing the preempt call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>prioritizeVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the prioritize call, empty if not supported. This verb is appended to the URLPrefix when issuing the prioritize call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the prioritize call generates.
+The weight should be a positive integer</td>
+</tr>
+    
+  
+<tr><td><code>bindVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the bind call, empty if not supported. This verb is appended to the URLPrefix when issuing the bind call to extender.
+If this method is implemented by the extender, it is the extender's responsibility to bind the pod to apiserver. Only one extender
+can implement this function.</td>
+</tr>
+    
+  
+<tr><td><code>enableHttps</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   EnableHTTPS specifies whether https should be used to communicate with the extender</td>
+</tr>
+    
+  
+<tr><td><code>tlsConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig"><code>ExtenderTLSConfig</code></a>
+</td>
+<td>
+   TLSConfig specifies the transport layer security config</td>
+</tr>
+    
+  
+<tr><td><code>httpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/time#Duration"><code>time.Duration</code></a>
+</td>
+<td>
+   HTTPTimeout specifies the timeout duration for a call to the extender. Filter timeout fails the scheduling of the pod. Prioritize
+timeout is ignored, k8s/other extenders priorities are used to select the node.</td>
+</tr>
+    
+  
+<tr><td><code>nodeCacheCapable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   NodeCacheCapable specifies that the extender is capable of caching node information,
+so the scheduler should only send minimal information about the eligible nodes
+assuming that the extender already cached full details of all nodes in the cluster</td>
+</tr>
+    
+  
+<tr><td><code>managedResources</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderManagedResource"><code>[]ExtenderManagedResource</code></a>
+</td>
+<td>
+   ManagedResources is a list of extended resources that are managed by
+this extender.
+- A pod will be sent to the extender on the Filter, Prioritize and Bind
+  (if the extender is the binder) phases iff the pod requests at least
+  one of the extended resources in this list. If empty or unspecified,
+  all pods will be sent to this extender.
+- If IgnoredByScheduler is set to true for a resource, kube-scheduler
+  will skip checking the resource in predicates.</td>
+</tr>
+    
+  
+<tr><td><code>ignorable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Ignorable specifies if the extender is ignorable, i.e. scheduling should not
+fail when the extender returns an error or is not reachable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicateArgument`     {#kubescheduler-config-k8s-io-v1-PredicateArgument}
+    
+
+
+
+**Appears in:**
+
+- [PredicatePolicy](#kubescheduler-config-k8s-io-v1-PredicatePolicy)
+
+
+PredicateArgument represents the arguments to configure predicate functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAffinity"><code>ServiceAffinity</code></a>
+</td>
+<td>
+   The predicate that provides affinity for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelsPresence</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelsPresence"><code>LabelsPresence</code></a>
+</td>
+<td>
+   The predicate that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PredicatePolicy`     {#kubescheduler-config-k8s-io-v1-PredicatePolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PredicatePolicy describes a struct of a predicate policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the predicate policy
+For a custom predicate, the name can be user-defined
+For the Kubernetes provided predicates, the name is the identifier of the pre-defined predicate</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PredicateArgument"><code>PredicateArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given predicate</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityArgument`     {#kubescheduler-config-k8s-io-v1-PriorityArgument}
+    
+
+
+
+**Appears in:**
+
+- [PriorityPolicy](#kubescheduler-config-k8s-io-v1-PriorityPolicy)
+
+
+PriorityArgument represents the arguments to configure priority functions in scheduler policy configuration.
+Only one of its members may be specified
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>serviceAntiAffinity</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity"><code>ServiceAntiAffinity</code></a>
+</td>
+<td>
+   The priority function that ensures a good spread (anti-affinity) for pods belonging to a service
+It uses a label to identify nodes that belong to the same "group"</td>
+</tr>
+    
+  
+<tr><td><code>labelPreference</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-LabelPreference"><code>LabelPreference</code></a>
+</td>
+<td>
+   The priority function that checks whether a particular node has a certain label
+defined or not, regardless of value</td>
+</tr>
+    
+  
+<tr><td><code>requestedToCapacityRatioArguments</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments"><code>RequestedToCapacityRatioArguments</code></a>
+</td>
+<td>
+   The RequestedToCapacityRatio priority function is parametrized with function shape.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PriorityPolicy`     {#kubescheduler-config-k8s-io-v1-PriorityPolicy}
+    
+
+
+
+**Appears in:**
+
+- [Policy](#kubescheduler-config-k8s-io-v1-Policy)
+
+
+PriorityPolicy describes a struct of a priority policy.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Identifier of the priority policy
+For a custom priority, the name can be user-defined
+For the Kubernetes provided priority functions, the name is the identifier of the pre-defined priority function</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the priority function generates
+The weight should be non-zero and can be a positive or a negative integer</td>
+</tr>
+    
+  
+<tr><td><code>argument</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-PriorityArgument"><code>PriorityArgument</code></a>
+</td>
+<td>
+   Holds the parameters to configure the given priority function</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `RequestedToCapacityRatioArguments`     {#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+RequestedToCapacityRatioArguments holds arguments specific to RequestedToCapacityRatio priority function.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>shape</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-UtilizationShapePoint"><code>[]UtilizationShapePoint</code></a>
+</td>
+<td>
+   Array of point defining priority function shape.</td>
+</tr>
+    
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   <span class="text-muted">No description provided.</span>
+   </td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ResourceSpec`     {#kubescheduler-config-k8s-io-v1-ResourceSpec}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+ResourceSpec represents single resource and weight for bin packing of priority RequestedToCapacityRatioArguments.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name of the resource to be managed by RequestedToCapacityRatio function.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   Weight of the resource.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PredicateArgument](#kubescheduler-config-k8s-io-v1-PredicateArgument)
+
+
+ServiceAffinity holds the parameters that are used to configure the corresponding predicate in scheduler policy configuration.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>labels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   The list of labels that identify node "groups"
+All of the labels should match for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAntiAffinity`     {#kubescheduler-config-k8s-io-v1-ServiceAntiAffinity}
+    
+
+
+
+**Appears in:**
+
+- [PriorityArgument](#kubescheduler-config-k8s-io-v1-PriorityArgument)
+
+
+ServiceAntiAffinity holds the parameters that are used to configure the corresponding priority function
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>label</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Used to identify node "groups"</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `UtilizationShapePoint`     {#kubescheduler-config-k8s-io-v1-UtilizationShapePoint}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArguments](#kubescheduler-config-k8s-io-v1-RequestedToCapacityRatioArguments)
+
+
+UtilizationShapePoint represents single point of priority function shape.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>utilization</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Utilization (x axis). Valid values are 0 to 100. Fully utilized node maps to 100.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Score assigned to given utilization (y axis). Valid values are 0 to 10.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  
+  
+    
+
+## `ClientConnectionConfiguration`     {#ClientConnectionConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+ClientConnectionConfiguration contains details for constructing a client.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>kubeconfig</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   kubeconfig is the path to a KubeConfig file.</td>
+</tr>
+    
+  
+<tr><td><code>acceptContentTypes</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the
+default value of 'application/json'. This field will control all connections to the server used by a particular
+client.</td>
+</tr>
+    
+  
+<tr><td><code>contentType</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   contentType is the content type used when sending data to the server from this client.</td>
+</tr>
+    
+  
+<tr><td><code>qps</code> <B>[Required]</B><br/>
+<code>float32</code>
+</td>
+<td>
+   qps controls the number of queries per second allowed for this connection.</td>
+</tr>
+    
+  
+<tr><td><code>burst</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   burst allows extra queries to accumulate when a client is exceeding its rate.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+
+## `DebuggingConfiguration`     {#DebuggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+DebuggingConfiguration holds configuration for Debugging related features.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enableProfiling</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableProfiling enables profiling via web interface host:port/debug/pprof/</td>
+</tr>
+    
+  
+<tr><td><code>enableContentionProfiling</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   enableContentionProfiling enables lock contention profiling, if
+enableProfiling is true.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+
+## `LeaderElectionConfiguration`     {#LeaderElectionConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+LeaderElectionConfiguration defines the configuration of leader election
+clients for components that can run with leader election enabled.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>leaderElect</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   leaderElect enables a leader election client to gain leadership
+before executing the main loop. Enable this when running replicated
+components for high availability.</td>
+</tr>
+    
+  
+<tr><td><code>leaseDuration</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   leaseDuration is the duration that non-leader candidates will wait
+after observing a leadership renewal until attempting to acquire
+leadership of a led but unrenewed leader slot. This is effectively the
+maximum duration that a leader can be stopped before it is replaced
+by another candidate. This is only applicable if leader election is
+enabled.</td>
+</tr>
+    
+  
+<tr><td><code>renewDeadline</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   renewDeadline is the interval between attempts by the acting master to
+renew a leadership slot before it stops leading. This must be less
+than or equal to the lease duration. This is only applicable if leader
+election is enabled.</td>
+</tr>
+    
+  
+<tr><td><code>retryPeriod</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   retryPeriod is the duration the clients should wait between attempting
+acquisition and renewal of a leadership. This is only applicable if
+leader election is enabled.</td>
+</tr>
+    
+  
+<tr><td><code>resourceLock</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   resourceLock indicates the resource object type that will be used to lock
+during leader election cycles.</td>
+</tr>
+    
+  
+<tr><td><code>resourceName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   resourceName indicates the name of resource object that will be used to lock
+during leader election cycles.</td>
+</tr>
+    
+  
+<tr><td><code>resourceNamespace</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   resourceName indicates the namespace of resource object that will be used to lock
+during leader election cycles.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+
+## `LoggingConfiguration`     {#LoggingConfiguration}
+    
+
+
+
+**Appears in:**
+
+- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+
+
+LoggingConfiguration contains logging options
+Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go) for more information.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>format</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Format Flag specifies the structure of log messages.
+default value of format is `text`</td>
+</tr>
+    
+  
+<tr><td><code>sanitization</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   [Experimental] When enabled prevents logging of fields tagged as sensitive (passwords, keys, tokens).
+Runtime log sanitization may introduce significant computation overhead and therefore should not be enabled in production.`)</td>
+</tr>
+    
+  
+</tbody>
+</table>
+  
+    
+
+
+## `DefaultPreemptionArgs`     {#kubescheduler-config-k8s-io-v1beta1-DefaultPreemptionArgs}
+    
+
+
+
+
+DefaultPreemptionArgs holds arguments used to configure the
+DefaultPreemption plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>DefaultPreemptionArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>minCandidateNodesPercentage</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   MinCandidateNodesPercentage is the minimum number of candidates to
+shortlist when dry running preemption as a percentage of number of nodes.
+Must be in the range [0, 100]. Defaults to 10% of the cluster size if
+unspecified.</td>
+</tr>
+    
+  
+<tr><td><code>minCandidateNodesAbsolute</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   MinCandidateNodesAbsolute is the absolute minimum number of candidates to
+shortlist. The likely number of candidates enumerated for dry running
+preemption is given by the formula:
+numCandidates = max(numNodes &lowast; minCandidateNodesPercentage, minCandidateNodesAbsolute)
+We say "likely" because there are other factors such as PDB violations
+that play a role in the number of candidates shortlisted. Must be at least
+0 nodes. Defaults to 100 nodes if unspecified.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `InterPodAffinityArgs`     {#kubescheduler-config-k8s-io-v1beta1-InterPodAffinityArgs}
+    
+
+
+
+
+InterPodAffinityArgs holds arguments used to configure the InterPodAffinity plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>InterPodAffinityArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>hardPodAffinityWeight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   HardPodAffinityWeight is the scoring weight for existing pods with a
+matching hard affinity to the incoming pod.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeSchedulerConfiguration`     {#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration}
+    
+
+
+
+
+KubeSchedulerConfiguration configures a scheduler
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>KubeSchedulerConfiguration</code></td></tr>
+    
+
+  
+  
+<tr><td><code>parallelism</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Parallelism defines the amount of parallelism in algorithms for scheduling a Pods. Must be greater than 0. Defaults to 16</td>
+</tr>
+    
+  
+<tr><td><code>leaderElection</code> <B>[Required]</B><br/>
+<a href="#LeaderElectionConfiguration"><code>LeaderElectionConfiguration</code></a>
+</td>
+<td>
+   LeaderElection defines the configuration of leader election client.</td>
+</tr>
+    
+  
+<tr><td><code>clientConnection</code> <B>[Required]</B><br/>
+<a href="#ClientConnectionConfiguration"><code>ClientConnectionConfiguration</code></a>
+</td>
+<td>
+   ClientConnection specifies the kubeconfig file and client connection
+settings for the proxy server to use when communicating with the apiserver.</td>
+</tr>
+    
+  
+<tr><td><code>healthzBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   HealthzBindAddress is the IP address and port for the health check server to serve on,
+defaulting to 0.0.0.0:10251</td>
+</tr>
+    
+  
+<tr><td><code>metricsBindAddress</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   MetricsBindAddress is the IP address and port for the metrics server to
+serve on, defaulting to 0.0.0.0:10251.</td>
+</tr>
+    
+  
+<tr><td><code>DebuggingConfiguration</code> <B>[Required]</B><br/>
+<a href="#DebuggingConfiguration"><code>DebuggingConfiguration</code></a>
+</td>
+<td>(Members of <code>DebuggingConfiguration</code> are embedded into this type.)
+   DebuggingConfiguration holds configuration for Debugging related features
+TODO: We might wanna make this a substruct like Debugging componentbaseconfigv1alpha1.DebuggingConfiguration</td>
+</tr>
+    
+  
+<tr><td><code>percentageOfNodesToScore</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   PercentageOfNodesToScore is the percentage of all nodes that once found feasible
+for running a pod, the scheduler stops its search for more feasible nodes in
+the cluster. This helps improve scheduler's performance. Scheduler always tries to find
+at least "minFeasibleNodesToFind" feasible nodes no matter what the value of this flag is.
+Example: if the cluster size is 500 nodes and the value of this flag is 30,
+then scheduler stops finding further feasible nodes once it finds 150 feasible ones.
+When the value is 0, default percentage (5%--50% based on the size of the cluster) of the
+nodes will be scored.</td>
+</tr>
+    
+  
+<tr><td><code>podInitialBackoffSeconds</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   PodInitialBackoffSeconds is the initial backoff for unschedulable pods.
+If specified, it must be greater than 0. If this value is null, the default value (1s)
+will be used.</td>
+</tr>
+    
+  
+<tr><td><code>podMaxBackoffSeconds</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   PodMaxBackoffSeconds is the max backoff for unschedulable pods.
+If specified, it must be greater than podInitialBackoffSeconds. If this value is null,
+the default value (10s) will be used.</td>
+</tr>
+    
+  
+<tr><td><code>profiles</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile"><code>[]KubeSchedulerProfile</code></a>
+</td>
+<td>
+   Profiles are scheduling profiles that kube-scheduler supports. Pods can
+choose to be scheduled under a particular profile by setting its associated
+scheduler name. Pods that don't specify any scheduler name are scheduled
+with the "default-scheduler" profile, if present here.</td>
+</tr>
+    
+  
+<tr><td><code>extenders</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Extender"><code>[]Extender</code></a>
+</td>
+<td>
+   Extenders are the list of scheduler extenders, each holding the values of how to communicate
+with the extender. These extenders are shared by all scheduler profiles.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeAffinityArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeAffinityArgs}
+    
+
+
+
+
+NodeAffinityArgs holds arguments to configure the NodeAffinity plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeAffinityArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>addedAffinity</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#nodeaffinity-v1-core"><code>core/v1.NodeAffinity</code></a>
+</td>
+<td>
+   AddedAffinity is applied to all Pods additionally to the NodeAffinity
+specified in the PodSpec. That is, Nodes need to satisfy AddedAffinity
+AND .spec.NodeAffinity. AddedAffinity is empty by default (all Nodes
+match).
+When AddedAffinity is used, some Pods with affinity requirements that match
+a specific Node (such as Daemonset Pods) might remain unschedulable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeLabelArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeLabelArgs}
+    
+
+
+
+
+NodeLabelArgs holds arguments used to configure the NodeLabel plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeLabelArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>presentLabels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   PresentLabels should be present for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>absentLabels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   AbsentLabels should be absent for the node to be considered a fit for hosting the pod</td>
+</tr>
+    
+  
+<tr><td><code>presentLabelsPreference</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   Nodes that have labels in the list will get a higher score.</td>
+</tr>
+    
+  
+<tr><td><code>absentLabelsPreference</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   Nodes that don't have labels in the list will get a higher score.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeResourcesFitArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeResourcesFitArgs}
+    
+
+
+
+
+NodeResourcesFitArgs holds arguments used to configure the NodeResourcesFit plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeResourcesFitArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>ignoredResources</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   IgnoredResources is the list of resources that NodeResources fit filter
+should ignore.</td>
+</tr>
+    
+  
+<tr><td><code>ignoredResourceGroups</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   IgnoredResourceGroups defines the list of resource groups that NodeResources fit filter should ignore.
+e.g. if group is ["example.com"], it will ignore all resource names that begin
+with "example.com", such as "example.com/aaa" and "example.com/bbb".
+A resource group name can't contain '/'.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeResourcesLeastAllocatedArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeResourcesLeastAllocatedArgs}
+    
+
+
+
+
+NodeResourcesLeastAllocatedArgs holds arguments used to configure NodeResourcesLeastAllocated plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeResourcesLeastAllocatedArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   Resources to be managed, if no resource is provided, default resource set with both
+the weight of "cpu" and "memory" set to "1" will be applied.
+Resource with "0" weight will not accountable for the final score.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `NodeResourcesMostAllocatedArgs`     {#kubescheduler-config-k8s-io-v1beta1-NodeResourcesMostAllocatedArgs}
+    
+
+
+
+
+NodeResourcesMostAllocatedArgs holds arguments used to configure NodeResourcesMostAllocated plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>NodeResourcesMostAllocatedArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   Resources to be managed, if no resource is provided, default resource set with both
+the weight of "cpu" and "memory" set to "1" will be applied.
+Resource with "0" weight will not accountable for the final score.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PodTopologySpreadArgs`     {#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadArgs}
+    
+
+
+
+
+PodTopologySpreadArgs holds arguments used to configure the PodTopologySpread plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>PodTopologySpreadArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>defaultConstraints</code><br/>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#topologyspreadconstraint-v1-core"><code>[]core/v1.TopologySpreadConstraint</code></a>
+</td>
+<td>
+   DefaultConstraints defines topology spread constraints to be applied to
+Pods that don't define any in `pod.spec.topologySpreadConstraints`.
+`.defaultConstraints[&lowast;].labelSelectors` must be empty, as they are
+deduced from the Pod's membership to Services, ReplicationControllers,
+ReplicaSets or StatefulSets.
+When not empty, .defaultingType must be "List".</td>
+</tr>
+    
+  
+<tr><td><code>defaultingType</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadConstraintsDefaulting"><code>PodTopologySpreadConstraintsDefaulting</code></a>
+</td>
+<td>
+   DefaultingType determines how .defaultConstraints are deduced. Can be one
+of "System" or "List".
+
+- "System": Use kubernetes defined constraints that spread Pods among
+  Nodes and Zones.
+- "List": Use constraints defined in .defaultConstraints.
+
+Defaults to "List" if feature gate DefaultPodTopologySpread is disabled
+and to "System" if enabled.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `RequestedToCapacityRatioArgs`     {#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs}
+    
+
+
+
+
+RequestedToCapacityRatioArgs holds arguments used to configure RequestedToCapacityRatio plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>RequestedToCapacityRatioArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>shape</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-UtilizationShapePoint"><code>[]UtilizationShapePoint</code></a>
+</td>
+<td>
+   Points defining priority function shape</td>
+</tr>
+    
+  
+<tr><td><code>resources</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-ResourceSpec"><code>[]ResourceSpec</code></a>
+</td>
+<td>
+   Resources to be managed</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `ServiceAffinityArgs`     {#kubescheduler-config-k8s-io-v1beta1-ServiceAffinityArgs}
+    
+
+
+
+
+ServiceAffinityArgs holds arguments used to configure the ServiceAffinity plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>ServiceAffinityArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>affinityLabels</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   AffinityLabels are homogeneous for pods that are scheduled to a node.
+(i.e. it returns true IFF this pod can be added to this node such that all other pods in
+the same service are running on nodes with the exact same values for Labels).</td>
+</tr>
+    
+  
+<tr><td><code>antiAffinityLabelsPreference</code> <B>[Required]</B><br/>
+<code>[]string</code>
+</td>
+<td>
+   AntiAffinityLabelsPreference are the labels to consider for service anti affinity scoring.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `VolumeBindingArgs`     {#kubescheduler-config-k8s-io-v1beta1-VolumeBindingArgs}
+    
+
+
+
+
+VolumeBindingArgs holds arguments used to configure the VolumeBinding plugin.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+<tr><td><code>apiVersion</code><br/>string</td><td><code>kubescheduler.config.k8s.io/v1beta1</code></td></tr>
+<tr><td><code>kind</code><br/>string</td><td><code>VolumeBindingArgs</code></td></tr>
+    
+
+  
+  
+<tr><td><code>bindTimeoutSeconds</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   BindTimeoutSeconds is the timeout in seconds in volume binding operation.
+Value must be non-negative integer. The value zero indicates no waiting.
+If this value is nil, the default value (600) will be used.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Extender`     {#kubescheduler-config-k8s-io-v1beta1-Extender}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+Extender holds the parameters used to communicate with the extender. If a verb is unspecified/empty,
+it is assumed that the extender chose not to provide that extension.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>urlPrefix</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   URLPrefix at which the extender is available</td>
+</tr>
+    
+  
+<tr><td><code>filterVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the filter call, empty if not supported. This verb is appended to the URLPrefix when issuing the filter call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>preemptVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the preempt call, empty if not supported. This verb is appended to the URLPrefix when issuing the preempt call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>prioritizeVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the prioritize call, empty if not supported. This verb is appended to the URLPrefix when issuing the prioritize call to extender.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   The numeric multiplier for the node scores that the prioritize call generates.
+The weight should be a positive integer</td>
+</tr>
+    
+  
+<tr><td><code>bindVerb</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Verb for the bind call, empty if not supported. This verb is appended to the URLPrefix when issuing the bind call to extender.
+If this method is implemented by the extender, it is the extender's responsibility to bind the pod to apiserver. Only one extender
+can implement this function.</td>
+</tr>
+    
+  
+<tr><td><code>enableHTTPS</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   EnableHTTPS specifies whether https should be used to communicate with the extender</td>
+</tr>
+    
+  
+<tr><td><code>tlsConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderTLSConfig"><code>ExtenderTLSConfig</code></a>
+</td>
+<td>
+   TLSConfig specifies the transport layer security config</td>
+</tr>
+    
+  
+<tr><td><code>httpTimeout</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1#Duration"><code>meta/v1.Duration</code></a>
+</td>
+<td>
+   HTTPTimeout specifies the timeout duration for a call to the extender. Filter timeout fails the scheduling of the pod. Prioritize
+timeout is ignored, k8s/other extenders priorities are used to select the node.</td>
+</tr>
+    
+  
+<tr><td><code>nodeCacheCapable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   NodeCacheCapable specifies that the extender is capable of caching node information,
+so the scheduler should only send minimal information about the eligible nodes
+assuming that the extender already cached full details of all nodes in the cluster</td>
+</tr>
+    
+  
+<tr><td><code>managedResources</code><br/>
+<a href="#kubescheduler-config-k8s-io-v1-ExtenderManagedResource"><code>[]ExtenderManagedResource</code></a>
+</td>
+<td>
+   ManagedResources is a list of extended resources that are managed by
+this extender.
+- A pod will be sent to the extender on the Filter, Prioritize and Bind
+  (if the extender is the binder) phases iff the pod requests at least
+  one of the extended resources in this list. If empty or unspecified,
+  all pods will be sent to this extender.
+- If IgnoredByScheduler is set to true for a resource, kube-scheduler
+  will skip checking the resource in predicates.</td>
+</tr>
+    
+  
+<tr><td><code>ignorable</code> <B>[Required]</B><br/>
+<code>bool</code>
+</td>
+<td>
+   Ignorable specifies if the extender is ignorable, i.e. scheduling should not
+fail when the extender returns an error or is not reachable.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `KubeSchedulerProfile`     {#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerConfiguration](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerConfiguration)
+
+
+KubeSchedulerProfile is a scheduling profile.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>schedulerName</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   SchedulerName is the name of the scheduler associated to this profile.
+If SchedulerName matches with the pod's "spec.schedulerName", then the pod
+is scheduled with this profile.</td>
+</tr>
+    
+  
+<tr><td><code>plugins</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Plugins"><code>Plugins</code></a>
+</td>
+<td>
+   Plugins specify the set of plugins that should be enabled or disabled.
+Enabled plugins are the ones that should be enabled in addition to the
+default plugins. Disabled plugins are any of the default plugins that
+should be disabled.
+When no enabled or disabled plugin is specified for an extension point,
+default plugins for that extension point will be used if there is any.
+If a QueueSort plugin is specified, the same QueueSort Plugin and
+PluginConfig must be specified for all profiles.</td>
+</tr>
+    
+  
+<tr><td><code>pluginConfig</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginConfig"><code>[]PluginConfig</code></a>
+</td>
+<td>
+   PluginConfig is an optional set of custom plugin arguments for each plugin.
+Omitting config args for a plugin is equivalent to using the default config
+for that plugin.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Plugin`     {#kubescheduler-config-k8s-io-v1beta1-Plugin}
+    
+
+
+
+**Appears in:**
+
+- [PluginSet](#kubescheduler-config-k8s-io-v1beta1-PluginSet)
+
+
+Plugin specifies a plugin name and its weight when applicable. Weight is used only for Score plugins.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name defines the name of plugin</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Weight defines the weight of plugin, only used for Score plugins.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PluginConfig`     {#kubescheduler-config-k8s-io-v1beta1-PluginConfig}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerProfile](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile)
+
+
+PluginConfig specifies arguments that should be passed to a plugin at the time of initialization.
+A plugin that is invoked at multiple extension points is initialized once. Args can have arbitrary structure.
+It is up to the plugin to process these Args.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name defines the name of plugin being configured</td>
+</tr>
+    
+  
+<tr><td><code>args</code> <B>[Required]</B><br/>
+<a href="https://godoc.org/k8s.io/apimachinery/pkg/runtime/#RawExtension"><code>k8s.io/apimachinery/pkg/runtime.RawExtension</code></a>
+</td>
+<td>
+   Args defines the arguments passed to the plugins at the time of initialization. Args can have arbitrary structure.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PluginSet`     {#kubescheduler-config-k8s-io-v1beta1-PluginSet}
+    
+
+
+
+**Appears in:**
+
+- [Plugins](#kubescheduler-config-k8s-io-v1beta1-Plugins)
+
+
+PluginSet specifies enabled and disabled plugins for an extension point.
+If an array is empty, missing, or nil, default plugins at that extension point will be used.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>enabled</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Plugin"><code>[]Plugin</code></a>
+</td>
+<td>
+   Enabled specifies plugins that should be enabled in addition to default plugins.
+These are called after default plugins and in the same order specified here.</td>
+</tr>
+    
+  
+<tr><td><code>disabled</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-Plugin"><code>[]Plugin</code></a>
+</td>
+<td>
+   Disabled specifies default plugins that should be disabled.
+When all default plugins need to be disabled, an array containing only one "&lowast;" should be provided.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `Plugins`     {#kubescheduler-config-k8s-io-v1beta1-Plugins}
+    
+
+
+
+**Appears in:**
+
+- [KubeSchedulerProfile](#kubescheduler-config-k8s-io-v1beta1-KubeSchedulerProfile)
+
+
+Plugins include multiple extension points. When specified, the list of plugins for
+a particular extension point are the only ones enabled. If an extension point is
+omitted from the config, then the default set of plugins is used for that extension point.
+Enabled plugins are called in the order specified here, after default plugins. If they need to
+be invoked before default plugins, default plugins must be disabled and re-enabled here in desired order.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>queueSort</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   QueueSort is a list of plugins that should be invoked when sorting pods in the scheduling queue.</td>
+</tr>
+    
+  
+<tr><td><code>preFilter</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PreFilter is a list of plugins that should be invoked at "PreFilter" extension point of the scheduling framework.</td>
+</tr>
+    
+  
+<tr><td><code>filter</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Filter is a list of plugins that should be invoked when filtering out nodes that cannot run the Pod.</td>
+</tr>
+    
+  
+<tr><td><code>postFilter</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PostFilter is a list of plugins that are invoked after filtering phase, no matter whether filtering succeeds or not.</td>
+</tr>
+    
+  
+<tr><td><code>preScore</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PreScore is a list of plugins that are invoked before scoring.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Score is a list of plugins that should be invoked when ranking nodes that have passed the filtering phase.</td>
+</tr>
+    
+  
+<tr><td><code>reserve</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Reserve is a list of plugins invoked when reserving/unreserving resources
+after a node is assigned to run the pod.</td>
+</tr>
+    
+  
+<tr><td><code>permit</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Permit is a list of plugins that control binding of a Pod. These plugins can prevent or delay binding of a Pod.</td>
+</tr>
+    
+  
+<tr><td><code>preBind</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PreBind is a list of plugins that should be invoked before a pod is bound.</td>
+</tr>
+    
+  
+<tr><td><code>bind</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   Bind is a list of plugins that should be invoked at "Bind" extension point of the scheduling framework.
+The scheduler call these plugins in order. Scheduler skips the rest of these plugins as soon as one returns success.</td>
+</tr>
+    
+  
+<tr><td><code>postBind</code> <B>[Required]</B><br/>
+<a href="#kubescheduler-config-k8s-io-v1beta1-PluginSet"><code>PluginSet</code></a>
+</td>
+<td>
+   PostBind is a list of plugins that should be invoked after a pod is successfully bound.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `PodTopologySpreadConstraintsDefaulting`     {#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadConstraintsDefaulting}
+    
+(Alias of `string`)
+
+
+**Appears in:**
+
+- [PodTopologySpreadArgs](#kubescheduler-config-k8s-io-v1beta1-PodTopologySpreadArgs)
+
+
+PodTopologySpreadConstraintsDefaulting defines how to set default constraints
+for the PodTopologySpread plugin.
+
+
+    
+
+
+## `ResourceSpec`     {#kubescheduler-config-k8s-io-v1beta1-ResourceSpec}
+    
+
+
+
+**Appears in:**
+
+- [NodeResourcesLeastAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesLeastAllocatedArgs)
+
+- [NodeResourcesMostAllocatedArgs](#kubescheduler-config-k8s-io-v1beta1-NodeResourcesMostAllocatedArgs)
+
+- [RequestedToCapacityRatioArgs](#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs)
+
+
+ResourceSpec represents single resource and weight for bin packing of priority RequestedToCapacityRatioArguments.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>name</code> <B>[Required]</B><br/>
+<code>string</code>
+</td>
+<td>
+   Name of the resource to be managed by RequestedToCapacityRatio function.</td>
+</tr>
+    
+  
+<tr><td><code>weight</code> <B>[Required]</B><br/>
+<code>int64</code>
+</td>
+<td>
+   Weight of the resource.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+
+
+## `UtilizationShapePoint`     {#kubescheduler-config-k8s-io-v1beta1-UtilizationShapePoint}
+    
+
+
+
+**Appears in:**
+
+- [RequestedToCapacityRatioArgs](#kubescheduler-config-k8s-io-v1beta1-RequestedToCapacityRatioArgs)
+
+
+UtilizationShapePoint represents single point of priority function shape.
+
+<table class="table">
+<thead><tr><th width="30%">Field</th><th>Description</th></tr></thead>
+<tbody>
+    
+
+  
+<tr><td><code>utilization</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Utilization (x axis). Valid values are 0 to 100. Fully utilized node maps to 100.</td>
+</tr>
+    
+  
+<tr><td><code>score</code> <B>[Required]</B><br/>
+<code>int32</code>
+</td>
+<td>
+   Score assigned to given utilization (y axis). Valid values are 0 to 10.</td>
+</tr>
+    
+  
+</tbody>
+</table>
+    
+  

From dc89e82de6f3b1b21ef35d0ba8d64b7978f7d3c3 Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Thu, 6 May 2021 18:06:44 +0800
Subject: [PATCH 725/788] [zh]Resync Extend Kubernetes files

---
 .../tasks/extend-kubectl/kubectl-plugins.md   |  35 ++---
 .../configure-multiple-schedulers.md          | 130 +++++++++++-------
 .../custom-resource-definition-versioning.md  |  14 +-
 .../custom-resource-definitions.md            |   4 +-
 .../setup-extension-api-server.md             |   4 +-
 5 files changed, 111 insertions(+), 76 deletions(-)

diff --git a/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md b/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md
index cf671cdf50..72235b1601 100644
--- a/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md
+++ b/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md
@@ -16,7 +16,7 @@ content_type: task
 <!-- overview -->
 <!--
 This guide demonstrates how to install and write extensions for [kubectl](/docs/reference/kubectl/kubectl/). By thinking of core `kubectl` commands as essential building blocks for interacting with a Kubernetes cluster, a cluster administrator can think
-  of plugins as a means of utilizing these building blocks to create more complex behavior. Plugins extend `kubectl` with new sub-commands, allowing for new and custom features not included in the main distribution of `kubectl`.
+of plugins as a means of utilizing these building blocks to create more complex behavior. Plugins extend `kubectl` with new sub-commands, allowing for new and custom features not included in the main distribution of `kubectl`.
 -->
 本指南演示了如何为 [kubectl](/zh/docs/reference/kubectl/kubectl/) 安装和编写扩展。
 通过将核心 `kubectl` 命令看作与 Kubernetes 集群交互的基本构建块，
@@ -35,12 +35,12 @@ You need to have a working `kubectl` binary installed.
 <!--
 ## Installing kubectl plugins
 
-A plugin is nothing more than a standalone executable file, whose name begins with `kubectl-`. To install a plugin, simply move this executable file to anywhere on your PATH.
+A plugin is a standalone executable file, whose name begins with `kubectl-`. To install a plugin, move its executable file to anywhere on your `PATH`.
 -->
 ## 安装 kubectl 插件
 
-插件只不过是一个独立的可执行文件，名称以 `kubectl-` 开头。
-要安装插件，只需将此可执行文件移动到 PATH 中的任何位置。
+插件是一个独立的可执行文件，名称以 `kubectl-` 开头。
+要安装插件，将其可执行文件移动到 `PATH` 中的任何位置。
 
 <!--
 You can also discover and install kubectl plugins available in the open source
@@ -112,14 +112,14 @@ You can write a plugin in any programming language or script that allows you to
 <!--
 There is no plugin installation or pre-loading required. Plugin executables receive
 the inherited environment from the `kubectl` binary.
-A plugin determines which command path it wishes to implement based on its name. For
-example, a plugin wanting to provide a new command `kubectl foo`, would simply be named
-`kubectl-foo`, and live somewhere in the user's PATH.
+A plugin determines which command path it wishes to implement based on its name.
+For example, a plugin named `kubectl-foo` provides a command `kubectl foo`. You must
+install the plugin executable somewhere in your `PATH`.
 -->
 不需要安装插件或预加载，插件可执行程序从 `kubectl` 二进制文件接收继承的环境，
 插件根据其名称确定它希望实现的命令路径。
-例如，一个插件想要提供一个新的命令 `kubectl foo`，它将被简单地命名为 `kubectl-foo`，
-并且位于用户 PATH 的某个位置。
+例如，名为 `kubectl-foo` 的插件提供了命令 `kubectl foo`。
+必须将插件的可执行文件安装在 `PATH` 中的某个位置。
 
 <!--
 ### Example plugin
@@ -152,11 +152,11 @@ echo "I am a plugin named kubectl-foo"
 ### 使用插件
 
 <!--
-To use the above plugin, simply make it executable:
+To use a plugin, make the plugin executable:
 -->
-要使用上面的插件，只需使其可执行：
+要使用某插件，先要使其可执行：
 
-```
+```shell
 sudo chmod +x ./kubectl-foo
 ```
 
@@ -165,7 +165,7 @@ and place it anywhere in your PATH:
 -->
 并将它放在你的 PATH 中的任何地方：
 
-```
+```shell
 sudo mv ./kubectl-foo /usr/local/bin
 ```
 
@@ -174,9 +174,10 @@ You may now invoke your plugin as a `kubectl` command:
 -->
 你现在可以调用你的插件作为 `kubectl` 命令：
 
-```
+```shell
 kubectl foo
 ```
+
 ```
 I am a plugin named kubectl-foo
 ```
@@ -186,9 +187,10 @@ All args and flags are passed as-is to the executable:
 -->
 所有参数和标记按原样传递给可执行文件：
 
-```
+```shell
 kubectl foo version
 ```
+
 ```
 1.0.0
 ```
@@ -202,6 +204,7 @@ All environment variables are also passed as-is to the executable:
 export KUBECONFIG=~/.kube/config
 kubectl foo config
 ```
+
 ```
 /home/<user>/.kube/config
 ```
@@ -209,6 +212,7 @@ kubectl foo config
 ```shell
 KUBECONFIG=/etc/kube/config kubectl foo config
 ```
+
 ```
 /etc/kube/config
 ```
@@ -584,7 +588,6 @@ installs easier.
 * In case of any questions, feel free to reach out to the [CLI SIG team](https://github.com/kubernetes/community/tree/master/sig-cli).
 * Read about [Krew](https://krew.dev/), a package manager for kubectl plugins.
 -->
-
 * 查看 CLI 插件库示例，查看用 Go 编写的插件的[详细示例](https://github.com/kubernetes/sample-cli-plugin)
 * 如有任何问题，请随时联系 [SIG CLI ](https://github.com/kubernetes/community/tree/master/sig-cli)
 * 了解 [Krew](https://krew.dev/)，一个 kubectl 插件管理器。
diff --git a/content/zh/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md b/content/zh/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
index 8c4a150ffd..37f0beb2e5 100644
--- a/content/zh/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
+++ b/content/zh/docs/tasks/extend-kubernetes/configure-multiple-schedulers.md
@@ -15,26 +15,25 @@ weight: 20
 <!-- overview -->
 
 <!--
-Kubernetes ships with a default scheduler that is described [here](/docs/admin/kube-scheduler/).
+Kubernetes ships with a default scheduler that is described
+[here](/docs/reference/command-line-tools-reference/kube-scheduler/).
 If the default scheduler does not suit your needs you can implement your own scheduler.
-Not just that, you can even run multiple schedulers simultaneously alongside
-the default scheduler and instruct Kubernetes what scheduler to use for each
-of your pods. Let's learn how to run multiple schedulers in Kubernetes with an
-example.
+Moreover, you can even run multiple schedulers simultaneously alongside the default
+scheduler and instruct Kubernetes what scheduler to use for each of your pods. Let's
+learn how to run multiple schedulers in Kubernetes with an example.
 -->
 Kubernetes 自带了一个默认调度器，其详细描述请查阅
 [这里](/zh/docs/reference/command-line-tools-reference/kube-scheduler/)。
 如果默认调度器不适合你的需求，你可以实现自己的调度器。
-不仅如此，你甚至可以和默认调度器一起同时运行多个调度器，并告诉 Kubernetes 为每个
+而且，你甚至可以和默认调度器一起同时运行多个调度器，并告诉 Kubernetes 为每个
 Pod 使用哪个调度器。
 让我们通过一个例子讲述如何在 Kubernetes 中运行多个调度器。
 
 <!--
-A detailed description of how to implement a scheduler is outside the scope of
-this document. Please refer to the kube-scheduler implementation
-in[pkg/scheduler](https://github.com/kubernetes/kubernetes/tree/{{< param
-"githubbranch" >}}/pkg/scheduler)in the Kubernetes source directory for a
-canonical example.
+A detailed description of how to implement a scheduler is outside the scope of this
+document. Please refer to the kube-scheduler implementation in
+[pkg/scheduler](https://github.com/kubernetes/kubernetes/tree/{{< param "githubbranch" >}}/pkg/scheduler)
+in the Kubernetes source directory for a canonical example.
 -->
 关于实现调度器的具体细节描述超出了本文范围。
 请参考 kube-scheduler 的实现，规范示例代码位于
@@ -50,15 +49,15 @@ canonical example.
 ## Package the scheduler
 
 Package your scheduler binary into a container image. For the purposes of this example,
-let's just use the default scheduler (kube-scheduler) as our second scheduler as well.
-Clone the [Kubernetes source code from Github](https://github.com/kubernetes/kubernetes)
+you can use the default scheduler (kube-scheduler) as your second scheduler.
+Clone the [Kubernetes source code from GitHub](https://github.com/kubernetes/kubernetes)
 and build the source.
 -->
 ## 打包调度器
 
-将调度器可执行文件打包到容器镜像中。出于示例目的，我们就使用默认调度器
-（kube-scheduler）作为我们的第二个调度器。
-克隆 [Github 上 Kubernetes 源代码](https://github.com/kubernetes/kubernetes)，
+将调度器可执行文件打包到容器镜像中。出于示例目的，可以使用默认调度器
+（kube-scheduler）作为第二个调度器。
+克隆 [GitHub 上 Kubernetes 源代码](https://github.com/kubernetes/kubernetes)，
 并编译构建源代码。
 
 ```shell
@@ -68,13 +67,14 @@ make
 ```
 
 <!--
-Create a container image containing the kube-scheduler binary. Here is the `Dockerfile`to build the image:
+Create a container image containing the kube-scheduler binary. Here is the `Dockerfile`
+to build the image:
 -->
 创建一个包含 kube-scheduler 二进制文件的容器镜像。用于构建镜像的 `Dockerfile` 内容如下：
 
 ```docker
 FROM busybox
-ADD ./_output/dockerized/bin/linux/amd64/kube-scheduler /usr/local/bin/kube-scheduler
+ADD ./_output/local/bin/linux/amd64/kube-scheduler /usr/local/bin/kube-scheduler
 ```
 
 <!--
@@ -96,9 +96,9 @@ gcloud docker -- push gcr.io/my-gcp-project/my-kube-scheduler:1.0
 <!--
 ## Define a Kubernetes Deployment for the scheduler
 
-Now that we have our scheduler in a container image, we can just create a pod
-config for it and run it in our Kubernetes cluster. But instead of creating a pod
-directly in the cluster, let's use a [Deployment](/docs/concepts/workloads/controllers/deployment/)
+Now that you have your scheduler in a container image, create a pod
+configuration for it and run it in your Kubernetes cluster. But instead of creating a pod
+directly in the cluster, you can use a [Deployment](/docs/concepts/workloads/controllers/deployment/)
 for this example. A [Deployment](/docs/concepts/workloads/controllers/deployment/) manages a
 [Replica Set](/docs/concepts/workloads/controllers/replicaset/) which in turn manages the pods,
 thereby making the scheduler resilient to failures. Here is the deployment
@@ -106,7 +106,7 @@ config. Save it as `my-scheduler.yaml`:
 -->
 ## 为调度器定义 Kubernetes Deployment
 
-现在我们将调度器放在容器镜像中，我们可以为它创建一个 Pod 配置，并在我们的 Kubernetes 集群中
+现在将调度器放在容器镜像中，为它创建一个 Pod 配置，并在 Kubernetes 集群中
 运行它。但是与其在集群中直接创建一个 Pod，不如使用
 [Deployment](/zh/docs/concepts/workloads/controllers/deployment/)。
 Deployment 管理一个 [ReplicaSet](/zh/docs/concepts/workloads/controllers/replicaset/)，
@@ -134,18 +134,22 @@ Note also that we created a dedicated service account `my-scheduler` and bind th
 绑定到它，以便它可以获得与 `kube-scheduler` 相同的权限。
 
 <!--
-Please see the[kube-scheduler documentation](/docs/admin/kube-scheduler/) for detailed description of other command line arguments.
+Please see the
+[kube-scheduler documentation](/docs/reference/command-line-tools-reference/kube-scheduler/) for
+detailed description of other command line arguments.
 -->
-请参阅 [kube-scheduler 文档](/docs/reference/command-line-tools-reference/kube-scheduler/)以获取其他命令行参数的详细说明。
+请参阅 [kube-scheduler 文档](/docs/reference/command-line-tools-reference/kube-scheduler/)
+以获取其他命令行参数的详细说明。
 
 <!--
 ## Run the second scheduler in the cluster
 
-In order to run your scheduler in a Kubernetes cluster, just create the deployment specified in the config above in a Kubernetes cluster:
+In order to run your scheduler in a Kubernetes cluster, create the deployment
+specified in the config above in a Kubernetes cluster:
 -->
 ## 在集群中运行第二个调度器
 
-为了在 Kubernetes 集群中运行我们的第二个调度器，只需在 Kubernetes 集群中创建上面配置中指定的 Deployment：
+为了在 Kubernetes 集群中运行我们的第二个调度器，在 Kubernetes 集群中创建上面配置中指定的 Deployment：
 
 ```shell
 kubectl create -f my-scheduler.yaml
@@ -170,7 +174,8 @@ my-scheduler-lnf4s-4744f                       1/1       Running   0          2m
 ```
 
 <!--
-You should see a "Running" my-scheduler pod, in addition to the default kube-scheduler pod in this list.
+You should see a "Running" my-scheduler pod, in addition to the default kube-scheduler
+pod in this list.
 -->
 此列表中，除了默认的 `kube-scheduler` Pod 之外，你应该还能看到处于 “Running” 状态的
 `my-scheduler` Pod。
@@ -190,14 +195,24 @@ First, update the following fields in your YAML file:
 首先，更新上述 Deployment YAML（my-scheduler.yaml）文件中的以下字段：
 
 * `--leader-elect=true`
-* `--lock-object-namespace=lock-object-namespace`
-* `--lock-object-name=lock-object-name`
+* `--lock-object-namespace=<lock-object-namespace>`
+* `--lock-object-name=<lock-object-name>`
+
+{{< note >}}
+<!--
+The control plane creates the lock objects for you, but the namespace must already exist.
+You can use the `kube-system` namespace.
+-->
+控制平面会为你创建锁对象，但是命名空间必须已经存在。
+你可以使用 `kube-system` 命名空间。
+{{< /note >}}
 
 <!--
-If RBAC is enabled on your cluster, you must update the `system:kube-scheduler` cluster role. Add you scheduler name to the resourceNames of the rule applied for endpoints resources, as in the following example:
+If RBAC is enabled on your cluster, you must update the `system:kube-scheduler` cluster role.
+Add your scheduler name to the resourceNames of the rule applied for `endpoints` and `leases` resources, as in the following example:
 -->
 如果在集群上启用了 RBAC，则必须更新 `system：kube-scheduler` 集群角色。
-将调度器名称添加到应用于端点资源的规则的 resourceNames，如以下示例所示：
+将调度器名称添加到应用了 `endpoints` 和 `leases` 资源的规则的 resourceNames 中，如以下示例所示：
 
 ```shell
 kubectl edit clusterrole system:kube-scheduler
@@ -211,11 +226,13 @@ kubectl edit clusterrole system:kube-scheduler
 ## 为 Pod 指定调度器
 
 <!--
-Now that our second scheduler is running, let's create some pods, and direct them to be scheduled by either the default scheduler or the one we just deployed. In order to schedule a given pod using a specific scheduler, we specify the name of the scheduler in that pod spec. Let's look at three examples.
+Now that your second scheduler is running, create some pods, and direct them
+to be scheduled by either the default scheduler or the one you deployed.
+In order to schedule a given pod using a specific scheduler, specify the name of the
+scheduler in that pod spec. Let's look at three examples.
 -->
-现在我们的第二个调度器正在运行，让我们创建一些 Pod，并指定它们由默认调度器或我们刚部署的
-调度器进行调度。
-为了使用特定的调度器调度给定的 Pod，我们在那个 Pod 的规约中指定调度器的名称。让我们看看三个例子。
+现在第二个调度器正在运行，创建一些 Pod，并指定它们由默认调度器或部署的调度器进行调度。
+为了使用特定的调度器调度给定的 Pod，在那个 Pod 的 spec 中指定调度器的名称。让我们看看三个例子。
 
 <!--
 - Pod spec without any scheduler name
@@ -225,7 +242,8 @@ Now that our second scheduler is running, let's create some pods, and direct the
   {{< codenew file="admin/sched/pod1.yaml" >}}
 
   <!--
-  When no scheduler name is supplied, the pod is automatically scheduled using the  default-scheduler.
+  When no scheduler name is supplied, the pod is automatically scheduled using the
+  default-scheduler.
   -->
   如果未提供调度器名称，则会使用 default-scheduler 自动调度 pod。
 
@@ -246,7 +264,8 @@ Now that our second scheduler is running, let's create some pods, and direct the
   {{< codenew file="admin/sched/pod2.yaml" >}}
 
   <!--
-  A scheduler is specified by supplying the scheduler name as a value to `spec.schedulerName`. In this case, we supply the name of the  default scheduler which is `default-scheduler`.
+  A scheduler is specified by supplying the scheduler name as a value to `spec.schedulerName`. In this case, we supply the name of the
+  default scheduler which is `default-scheduler`.
   -->
   通过将调度器名称作为 `spec.schedulerName` 参数的值来指定调度器。
   在这种情况下，我们提供默认调度器的名称，即 `default-scheduler`。
@@ -268,10 +287,9 @@ Now that our second scheduler is running, let's create some pods, and direct the
   {{< codenew file="admin/sched/pod3.yaml" >}}
 
   <!--
-  In this case, we specify that this pod should be scheduled using the
-  scheduler that we  deployed - `my-scheduler`. Note that the value of
-  `spec.schedulerName` should match the name supplied to the scheduler  command
-  as an argument in the deployment config for the scheduler.
+  In this case, we specify that this pod should be scheduled using the scheduler that we
+  deployed - `my-scheduler`. Note that the value of `spec.schedulerName` should match the name supplied to the scheduler
+  command as an argument in the deployment config for the scheduler.
   -->
   在这种情况下，我们指定此 pod 使用我们部署的 `my-scheduler` 来调度。
   请注意，`spec.schedulerName` 参数的值应该与 Deployment 中配置的提供给
@@ -287,13 +305,13 @@ Now that our second scheduler is running, let's create some pods, and direct the
   ```
 
 <!--
-Verify that all three pods are running.
+  Verify that all three pods are running.
 -->
-确认所有三个 pod 都在运行。
+  确认所有三个 pod 都在运行。
 
-```shell
-kubectl get pods
-```
+  ```shell
+  kubectl get pods
+  ```
 
 <!-- discussion -->
 
@@ -303,7 +321,14 @@ kubectl get pods
 ### 验证是否使用所需的调度器调度了 pod
 
 <!--
-In order to make it easier to work through these examples, we did not verify that the pods were actually scheduled using the desired schedulers. We can verify that by changing the order of pod and deployment config submissions above. If we submit all the pod configs to a Kubernetes cluster before submitting the scheduler deployment config,we see that the pod `annotation-second-scheduler` remains in "Pending" state forever while the other two pods get scheduled. Once we submit the scheduler deployment config and our new scheduler starts running, the `annotation-second-scheduler` pod gets scheduled as well.
+In order to make it easier to work through these examples, we did not verify that the
+pods were actually scheduled using the desired schedulers. We can verify that by
+changing the order of pod and deployment config submissions above. If we submit all the
+pod configs to a Kubernetes cluster before submitting the scheduler deployment config,
+we see that the pod `annotation-second-scheduler` remains in "Pending" state forever
+while the other two pods get scheduled. Once we submit the scheduler deployment config
+and our new scheduler starts running, the `annotation-second-scheduler` pod gets
+scheduled as well.
 -->
 为了更容易地完成这些示例，我们没有验证 Pod 实际上是使用所需的调度程序调度的。
 我们可以通过更改 Pod 的顺序和上面的部署配置提交来验证这一点。
@@ -313,7 +338,8 @@ In order to make it easier to work through these examples, we did not verify tha
 一旦我们提交调度器部署配置并且我们的新调度器开始运行，注解了
 `annotation-second-scheduler` 的 pod 就能被调度。
 <!--
-Alternatively, one could just look at the "Scheduled" entries in the event logs to verify that the pods were scheduled by the desired schedulers.
+Alternatively, you can look at the "Scheduled" entries in the event logs to
+verify that the pods were scheduled by the desired schedulers.
 -->
 或者，可以查看事件日志中的 “Scheduled” 条目，以验证是否由所需的调度器调度了 Pod。
 
@@ -321,3 +347,11 @@ Alternatively, one could just look at the "Scheduled" entries in the event logs
 kubectl get events
 ```
 
+<!--
+You can also use a [custom scheduler configuration](/docs/reference/scheduling/config/#multiple-profiles)
+or a custom container image for the cluster's main scheduler by modifying its static pod manifest
+on the relevant control plane nodes.
+-->
+你也可以使用[自定义调度器配置](/zh/docs/reference/scheduling/config/#multiple-profiles)
+或自定义容器镜像，用于集群的主调度器，方法是在相关控制平面节点上修改其静态 pod 清单。
+
diff --git a/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
index 9a03e0f89e..a575bc57cf 100644
--- a/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
+++ b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning.md
@@ -131,7 +131,7 @@ after upgrading the objects to a new stored version.
 Removing an old version:
 
 1. Ensure all clients are fully migrated to the new version. The kube-apiserver
-   logs can reviewed to help identify any clients that are still accessing via
+   logs can be reviewed to help identify any clients that are still accessing via
    the old version.
 1. Set `served` to `false` for the old version in the `spec.versions` list. If
    any clients are still unexpectedly using the old version they may begin reporting
@@ -608,14 +608,14 @@ how to [authenticate API servers](/docs/reference/access-authn-authz/extensible-
 A conversion webhook must not mutate anything inside of `metadata` of the converted object
 other than `labels` and `annotations`.
 Attempted changes to `name`, `UID` and `namespace` are rejected and fail the request
-which caused the conversion. All other changes are just ignored.  
+which caused the conversion. All other changes are ignored. 
 -->
 #### 被允许的变更
 
 转换 Webhook 不可以更改被转换对象的 `metadata` 中除 `labels` 和 `annotations`
 之外的任何属性。
 尝试更改 `name`、`UID` 和 `namespace` 时都会导致引起转换的请求失败。
-所有其他变更只是被忽略而已。
+所有其他变更都被忽略。
 
 <!--
 ### Deploy the conversion webhook service
@@ -833,14 +833,13 @@ API 服务器一旦确定请求应发送到转换 Webhook，它需要知道如
 The `host` should not refer to a service running in the cluster; use
 a service reference by specifying the `service` field instead.
 The host might be resolved via external DNS in some apiservers
-(i.e., `kube-apiserver` cannot resolve in-cluster DNS as that would 
+(i.e., `kube-apiserver` cannot resolve in-cluster DNS as that would
 be a layering violation). `host` may also be an IP address.
 
 Please note that using `localhost` or `127.0.0.1` as a `host` is
 risky unless you take great care to run this webhook on all hosts
 which run an apiserver which might need to make calls to this
-webhook. Such installs are likely to be non-portable, i.e., not easy
-to turn up in a new cluster.
+webhook. Such installations are likely to be non-portable or not readily run in a new cluster.
 -->
 url 以标准 URL 形式给出 Webhook 的位置（`scheme://host:port/path`）。
 `host` 不应引用集群中运行的服务，而应通过指定 `service` 字段来提供
@@ -851,8 +850,7 @@ url 以标准 URL 形式给出 Webhook 的位置（`scheme://host:port/path`）
 
 请注意，除非你非常小心地在所有运行着可能调用 Webhook 的 API 服务器的
 主机上运行此 Webhook，否则将 `localhost` 或 `127.0.0.1` 用作 `host`
-是风险很大的。这样的安装很可能是不可移植的，即很难在新集群中启用。
-
+是风险很大的。这样的安装可能是不可移植的，或者不容易在一个新的集群中运行。
 <!--
 The scheme must be "https"; the URL must begin with "https://".
 
diff --git a/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
index daa4f8829e..1f6dfcbf6b 100644
--- a/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
+++ b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
@@ -842,12 +842,12 @@ CustomResourceDefinition and migrating your objects from one version to another.
 
 <!--
 *Finalizers* allow controllers to implement asynchronous pre-delete hooks.
-Custom objects support finalizers just like built-in objects.
+Custom objects support finalizers similar to built-in objects.
 
 You can add a finalizer to a custom object like this:
 -->
 *Finalizer* 能够让控制器实现异步的删除前（Pre-delete）回调。
-定制对象和内置对象一样支持 Finalizer。
+与内置对象类似，定制对象也支持 Finalizer。
 
 你可以像下面一样为定制对象添加 Finalizer：
 
diff --git a/content/zh/docs/tasks/extend-kubernetes/setup-extension-api-server.md b/content/zh/docs/tasks/extend-kubernetes/setup-extension-api-server.md
index 6071bf45fe..21ef9ae2f9 100644
--- a/content/zh/docs/tasks/extend-kubernetes/setup-extension-api-server.md
+++ b/content/zh/docs/tasks/extend-kubernetes/setup-extension-api-server.md
@@ -77,14 +77,14 @@ Alternatively, you can use an existing 3rd party solution, such as [apiserver-bu
 1. Make sure that your extension-apiserver loads those certs from that volume and that they are used in the HTTPS handshake.
 1. Create a Kubernetes service account in your namespace.
 1. Create a Kubernetes cluster role for the operations you want to allow on your resources.
-1. Create a Kubernetes cluster role binding from the service account in your namespace to the cluster role you just created.
+1. Create a Kubernetes cluster role binding from the service account in your namespace to the cluster role you created.
 1. Create a Kubernetes cluster role binding from the service account in your namespace to the `system:auth-delegator` cluster role to delegate auth decisions to the Kubernetes core API server.
 1. Create a Kubernetes role binding from the service account in your namespace to the `extension-apiserver-authentication-reader` role. This allows your extension api-server to access the `extension-apiserver-authentication` configmap.
 -->
 8.  确保你的扩展 apiserver 从该卷中加载了那些证书，并在 HTTPS 握手过程中使用它们。
 9.  在你的命令空间中创建一个 Kubernetes 服务账号。
 10. 为资源允许的操作创建 Kubernetes 集群角色。
-11. 用你命令空间中的服务账号创建一个 Kubernetes 集群角色绑定，绑定到你刚创建的角色上。
+11. 用你命令空间中的服务账号创建一个 Kubernetes 集群角色绑定，绑定到你创建的角色上。
 12. 用你命令空间中的服务账号创建一个 Kubernetes 集群角色绑定，绑定到 `system:auth-delegator`
     集群角色，以将 auth 决策委派给 Kubernetes 核心 API 服务器。
 13. 以你命令空间中的服务账号创建一个 Kubernetes 集群角色绑定，绑定到

From a71c8e7943cc95e2cca9bd3cfe3741202b7489f2 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 27 Apr 2021 10:16:09 +0100
Subject: [PATCH 726/788] Write Vixie in title case

The surname Vixie should be in title case as it is a proper noun, even
as part of the name of Vixie cron.

"vixie cron" (with a space in it) is not the name of any scheduling
tool; there are tools named vixie-cron but that is different from the
existing text.
---
 content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md
index 26c7c91134..e37e5b6569 100644
--- a/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md
+++ b/content/en/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -146,7 +146,7 @@ All modifications to a cron job, especially its `.spec`, are applied only to the
 The `.spec.schedule` is a required field of the `.spec`.
 It takes a [Cron](https://en.wikipedia.org/wiki/Cron) format string, such as `0 * * * *` or `@hourly`, as schedule time of its jobs to be created and executed.
 
-The format also includes extended `vixie cron` step values. As explained in the
+The format also includes extended "Vixie cron" step values. As explained in the
 [FreeBSD manual](https://www.freebsd.org/cgi/man.cgi?crontab%285%29):
 
 > Step values can be	used in	conjunction with ranges.  Following a range

From 134054fbaef7b55669b3fca451aad437a12d4f63 Mon Sep 17 00:00:00 2001
From: Aaron Alpar <55999015+aaron-kasten@users.noreply.github.com>
Date: Mon, 10 May 2021 16:13:36 -0700
Subject: [PATCH 727/788] Add blog post: Using Finalizers to Control Deletion
 (#26997)

* blog post for using finalizers for deletion

* Update content/en/blog/_posts/2021-03-03-using-finalizers-to-control-deletion.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* update create dates

* fixup for mv mess

* Update content/en/blog/_posts/2021-04-28-using-finalizers-to-control-deletion.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* fixup grammer

* update dates

* fixup format

* fixup JSON

* remove command prompts s/^$ //

* Update article publication date

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 ...14-using-finalizers-to-control-deletion.md | 268 ++++++++++++++++++
 .../state-diagram-delete.png                  | Bin 0 -> 35880 bytes
 .../state-diagram-finalize.png                | Bin 0 -> 56817 bytes
 3 files changed, 268 insertions(+)
 create mode 100644 content/en/blog/_posts/2021-05-14-using-finalizers-to-control-deletion.md
 create mode 100644 static/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-delete.png
 create mode 100644 static/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-finalize.png

diff --git a/content/en/blog/_posts/2021-05-14-using-finalizers-to-control-deletion.md b/content/en/blog/_posts/2021-05-14-using-finalizers-to-control-deletion.md
new file mode 100644
index 0000000000..1f6403b301
--- /dev/null
+++ b/content/en/blog/_posts/2021-05-14-using-finalizers-to-control-deletion.md
@@ -0,0 +1,268 @@
+---
+layout: blog
+title: 'Using Finalizers to Control Deletion'
+date: 2021-05-14
+slug: using-finalizers-to-control-deletion
+---
+
+**Authors:** Aaron Alpar (Kasten)
+
+Deleting objects in Kubernetes can be challenging. You may think you’ve deleted something, only to find it still persists. While issuing a `kubectl delete` command and hoping for the best might work for day-to-day operations, understanding how Kubernetes `delete` commands operate will help you understand why some objects linger after deletion. 
+
+In this post, I’ll look at:
+
+- What properties of a resource govern deletion
+- How finalizers and owner references impact object deletion
+- How the propagation policy can be used to change the order of deletions
+- How deletion works, with examples
+
+For simplicity, all examples will use ConfigMaps and basic shell commands to demonstrate the process. We’ll explore how the commands work and discuss repercussions and results from using them in practice.
+
+## The basic `delete`
+
+Kubernetes has several different commands you can use that allow you to create, read, update, and delete objects. For the purpose of this blog post, we’ll focus on four `kubectl` commands: `create`, `get`, `patch`, and `delete`. 
+
+Here are examples of the basic `kubectl delete` command:
+
+```
+kubectl create configmap mymap
+configmap/mymap created
+```
+
+```
+kubectl get configmap/mymap
+NAME    DATA   AGE
+mymap   0      12s
+```
+
+```
+kubectl delete configmap/mymap
+configmap "mymap" deleted
+```
+
+```
+kubectl get configmap/mymap
+Error from server (NotFound): configmaps "mymap" not found
+```
+
+Shell commands preceded by `$` are followed by their output. You can see that we begin with a `kubectl create configmap mymap`, which will create the empty configmap `mymap`. Next, we need to `get` the configmap to prove it exists. We can then delete that configmap. Attempting to `get` it again produces an HTTP 404 error, which means the configmap is not found.
+
+The state diagram for the basic `delete` command is very simple:
+
+
+{{<figure width="495" src="/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-delete.png" caption="State diagram for delete">}}
+
+Although this operation is straightforward, other factors may interfere with the deletion, including finalizers and owner references.
+
+## Understanding Finalizers
+
+When it comes to understanding resource deletion in Kubernetes, knowledge of how finalizers work is helpful and can help you understand why some objects don’t get deleted. 
+
+Finalizers are keys on resources that signal pre-delete operations. They control the garbage collection on resources, and are designed to alert controllers what cleanup operations to perform prior to removing a resource. However, they don’t necessarily name code that should be executed; finalizers on resources are basically just lists of keys much like annotations. Like annotations, they can be manipulated.
+
+Some common finalizers you’ve likely encountered are:
+
+- `kubernetes.io/pv-protection`
+- `kubernetes.io/pvc-protection`
+
+The finalizers above are used on volumes to prevent accidental deletion. Similarly, some finalizers can be used to prevent deletion of any resource but are not managed by any controller.
+
+Below with a custom configmap, which has no properties but contains a finalizer:
+
+```
+cat <<EOF | kubectl create -f -
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mymap
+  finalizers:
+  - kubernetes
+EOF
+```
+
+The configmap resource controller doesn't understand what to do with the `kubernetes` finalizer key. I term these “dead” finalizers for configmaps as it is normally used on namespaces. Here’s what happen upon attempting to delete the configmap:
+
+```
+kubectl delete configmap/mymap &
+configmap "mymap" deleted
+jobs
+[1]+  Running kubectl delete configmap/mymap
+```
+
+Kubernetes will report back that the object has been deleted, however, it hasn’t been deleted in a traditional sense. Rather, it’s in the process of deletion. When we attempt to `get` that object again, we discover the object has been modified to include the deletion timestamp. 
+
+```
+kubectl get configmap/mymap -o yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: "2020-10-22T21:30:18Z"
+  deletionGracePeriodSeconds: 0
+  deletionTimestamp: "2020-10-22T21:30:34Z"
+  finalizers:
+  - kubernetes
+  name: mymap
+  namespace: default
+  resourceVersion: "311456"
+  selfLink: /api/v1/namespaces/default/configmaps/mymap
+  uid: 93a37fed-23e3-45e8-b6ee-b2521db81638
+```
+
+In short, what’s happened is that the object was updated, not deleted. That’s because Kubernetes saw that the object contained finalizers and put it into a read-only state. The deletion timestamp signals that the object can only be read, with the exception of removing the finalizer key updates. In other words, the deletion will not be complete until we edit the object and remove the finalizer.
+
+Here's a demonstration of using the `patch` command to remove finalizers. If we want to delete an object, we can simply patch it on the command line to remove the finalizers. In this way, the deletion that was running in the background will complete and the object will be deleted. When we attempt to `get` that configmap, it will be gone. 
+
+```
+kubectl patch configmap/mymap \
+    --type json \
+    --patch='[ { "op": "remove", "path": "/metadata/finalizers" } ]'
+configmap/mymap patched
+[1]+  Done  kubectl delete configmap/mymap
+
+kubectl get configmap/mymap -o yaml
+Error from server (NotFound): configmaps "mymap" not found
+```
+
+Here's a state diagram for finalization: 
+
+{{<figure width="617" src="/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-finalize.png" caption="State diagram for finalize">}}
+
+So, if you attempt to delete an object that has a finalizer on it, it will remain in finalization until the controller has removed the finalizer keys or the finalizers are removed using Kubectl. Once that finalizer list is empty, the object can actually be reclaimed by Kubernetes and put into a queue to be deleted from the registry.
+
+## Owner References
+
+Owner references describe how groups of objects are related. They are properties on resources that specify the relationship to one another, so entire trees of resources can be deleted.
+
+Finalizer rules are processed when there are owner references. An owner reference consists of a name and a UID. Owner references link resources within the same namespace, and it also needs a UID for that reference to work. Pods typically have owner references to the owning replica set. So, when deployments or stateful sets are deleted, then the child replica sets and pods are deleted in the process. 
+
+Here are some examples of owner references and how they work. In the first example, we create a parent object first, then the child. The result is a very simple configmap that contains an owner reference to its parent:
+
+```
+cat <<EOF | kubectl create -f -
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mymap-parent
+EOF
+CM_UID=$(kubectl get configmap mymap-parent -o jsonpath="{.metadata.uid}")
+
+cat <<EOF | kubectl create -f -
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mymap-child
+  ownerReferences:
+  - apiVersion: v1
+    kind: ConfigMap
+    name: mymap-parent
+    uid: $CM_UID
+EOF
+```
+
+Deleting the child object when an owner reference is involved does not delete the parent:
+
+```
+kubectl get configmap
+NAME           DATA   AGE
+mymap-child    0      12m4s
+mymap-parent   0      12m4s
+
+kubectl delete configmap/mymap-child
+configmap "mymap-child" deleted
+
+kubectl get configmap
+NAME           DATA   AGE
+mymap-parent   0      12m10s
+```
+
+In this example, we re-created the parent-child configmaps from above. Now, when deleting from the parent (instead of the child) with an owner reference from the child to the parent, when we `get` the configmaps, none are in the namespace:
+
+```
+kubectl get configmap
+NAME           DATA   AGE
+mymap-child    0      10m2s
+mymap-parent   0      10m2s
+
+kubectl delete configmap/mymap-parent
+configmap "mymap-parent" deleted
+
+kubectl get configmap
+No resources found in default namespace.
+```
+
+To sum things up, when there's an override owner reference from a child to a parent, deleting the parent deletes the children automatically. This is called `cascade`. The default for cascade is `true`, however, you can use the --cascade=false option for `kubectl delete` to delete an object and orphan its children. 
+
+In the following example, there is a parent and a child. Notice the owner references are still included. If I delete the parent using --cascade=false, the parent is deleted but the child still exists:
+
+```
+kubectl get configmap
+NAME           DATA   AGE
+mymap-child    0      13m8s
+mymap-parent   0      13m8s
+
+kubectl delete --cascade=false configmap/mymap-parent
+configmap "mymap-parent" deleted
+
+kubectl get configmap
+NAME          DATA   AGE
+mymap-child   0      13m21s
+```
+
+The --cascade option links to the propagation policy in the API, which allows you to change the order in which objects are deleted within a tree. In the following example uses API access to craft a custom delete API call with the background propagation policy:
+
+```
+kubectl proxy --port=8080 &
+Starting to serve on 127.0.0.1:8080
+
+curl -X DELETE \
+  localhost:8080/api/v1/namespaces/default/configmaps/mymap-parent \
+  -d '{ "kind":"DeleteOptions", "apiVersion":"v1", "propagationPolicy":"Background" }' \
+  -H "Content-Type: application/json"
+{
+  "kind": "Status",
+  "apiVersion": "v1",
+  "metadata": {},
+  "status": "Success",
+  "details": { ... }
+}
+```
+
+Note that the propagation policy cannot be specified on the command line using kubectl. You have to specify it using a custom API call. Simply create a proxy, so you have access to the API server from the client, and execute a `curl` command with just a URL to execute that `delete` command. 
+
+There are three different options for the propagation policy:
+
+- `Foreground`: Children are deleted before the parent (post-order)
+- `Background`: Parent is deleted before the children (pre-order)
+- `Orphan`: Owner references are ignored
+
+Keep in mind that when you delete an object and owner references have been specified, finalizers will be honored in the process. This can result in trees of objects persisting, and you end up with a partial deletion. At that point, you have to look at any existing owner references on your objects, as well as any finalizers, to understand what’s happening. 
+
+## Forcing a Deletion of a Namespace
+
+There's one situation that may require forcing finalization for a namespace. If you've deleted a namespace and you've cleaned out all of the objects under it, but the namespace still exists, deletion can be forced by updating the namespace subresource, `finalize`. This informs the namespace controller that it needs to remove the finalizer from the namespace and perform any cleanup:
+
+```
+cat <<EOF | curl -X PUT \
+  localhost:8080/api/v1/namespaces/test/finalize \
+  -H "Content-Type: application/json" \
+  --data-binary @-
+{
+  "kind": "Namespace",
+  "apiVersion": "v1",
+  "metadata": {
+    "name": "test"
+  },
+  "spec": {
+    "finalizers": null
+  }
+}
+EOF
+```
+
+This should be done with caution as it may delete the namespace only and leave orphan objects within the, now non-exiting, namespace - a confusing state for Kubernetes. If this happens, the namespace can be re-created manually and sometimes the orphaned objects will re-appear under the just-created namespace which will allow manual cleanup and recovery.
+
+## Key Takeaways
+
+As these examples demonstrate, finalizers can get in the way of deleting resources in Kubernetes, especially when there are parent-child relationships between objects. Often, there is a reason for adding a finalizer into the code, so you should always investigate before manually deleting it. Owner references allow you to specify and remove trees of resources, although finalizers will be honored in the process. Finally, the propagation policy can be used to specify the order of deletion via a custom API call, giving you control over how objects are deleted. Now that you know a little more about how deletions work in Kubernetes, we recommend you try it out on your own, using a test cluster. 
+
+{{< youtube class="youtube-quote-sm" id="F7-ZxWwf4sY" title="Clean Up Your Room! What Does It Mean to Delete Something in K8s">}}
diff --git a/static/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-delete.png b/static/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-delete.png
new file mode 100644
index 0000000000000000000000000000000000000000..dc76d0c20cb95304b8453a15c2671f1f87192f58
GIT binary patch
literal 35880
zcmZ5|1z1#D_cshf*Nl|J(9(h;(!$UnEz(^AQqmzc<VX%JT_Q+GNP~dVAdMg)4MR7=
zkl%3c`@Z-7Kb~`*b2!gFXUAIWw{p)r4K)Q~0vZAg3=Co=McEe^7=S$t3`{FL9Q2dG
z`PNPJ1=H<?f;7hGA-cPNysh<=Ua6{LaG~$<Fo2je7}$4B(5D0@?f>rOF*z`>{(26;
zz=*KJ0RE?q8v1(omx4a;-ue5Am5ceG*63%sfd94z?B!zp_a4*g?zP!B#(3xp{u@Po
zHw+A_dv_<MP0kp4*iZ~5S*e%am^)e6zkbX9={{V3VPr^vP3dKN{wAWZp{|`diibDK
z0k*uyGqYT`@tt?x0z0M4n4A1z(hH6ktG9s*uIeIL>+>0_22MxWNT0Sel~-&}+Gs`6
zRE|^y;#GjM(0?6_$3V6rKf<5w@}R|i3E~O-bmoy&y&Gy8vOMSbKisTjm|)O<4_kgr
zkv&zM`NcuixQk}!ak6wbGU!#fC~i9WfYR=*h8e2>;G&wG|AtzCoaV*76;mkxKQDt|
zqF}^|2|GfyEWAx$*Y>gP;fvn$tC468ogFa&t4Aj|C!!|?oPJbH3MbagjDY_g_;|f8
z>KLVR`c&<ny1aIBq3&ZMgN4R1T5smVvqQ3B*<l+K_5>u1z5mQBmkvG9wcZ-Gta06q
z%nIVPFA~bcs!N$C=7^k0i^B@U4Ga0x)U4yVj>dhXY|Nu^Cmso^F%b&(@~W)$UQ*~4
z{>EEHwtt4etijCK^Yye@+DpLvYr>?oB2xIX%Mc0#*U}V@9Bg=Z{6plnMPKltAo);*
z&BA%8nUpO*$LGWFWu=Y01QXfb*8YEutrEz_>o9CM<q}(R3*N$XBpIEKu`GyxS1>j#
zBWQD_+9_g?<*{OW%?!%&eobxr0M7EqC7Q442Db^~i*bRO@Gb}s{=WnI8~@E#U-$^c
z2oj_aSNcxP$JEx@mJ?1AI3LY&)C{GPX<<U)mvn~-an(!DN{vhXn<ALt;<WaXV%U(V
zWS-t2(>0#YXP9UBIeriG%*n<H<%k@p=;ozmcf42ZcV~hJX^|m2|9%^mPxhV`;|53D
zO&q1vsgM`KsKyYlsu;9Tuz=NswTyhgEpn7&cAbXM0|ft@=@`@7Sryk653fh~G(>QZ
z70Q}P^Ph+kvPP+!(OCVaX#!u+aP_?3ybbI1e*S-mzz867d5x>^V<DnnB!NyJ8I>$1
z^@Fc83(Eeo3f~>;r5$U4@MI3rAt(Ib-Q@-W&tI%zk8l)ccHB@-La_VnfT1`uM8$9U
zHtdS$oDaz+e*?>beg9Ah3M7D<xtttQ7SFlg52!vQfb$jhr>h6$WQr3nE4~$Bzj<7?
zBH8eN2(gO5knA~E-_YggXIhmM6TMfm))tZ9P^JbHuJ`xau;$o0vzQ?p@kRW5XpFeP
z^SI!>(0-AftNrX*=mj|wqt(Qubn{+t|FZ|wa1UCmn%&na|0XvD;Mn5YLqjCu+N5mU
zZ<7o3q|O(!2FV3K{#_uy#2_W=JYn@e$wA*ZLW6GKC7Lp!=p$YC_M|Rc5oP}P?sDUN
z5#7)w=O3D=0E7t#4lwPXKCI%~KiE!4jM!*w{BW7b8n+gpA;c4@MvbH@GX)q*UJarW
z4&RN`{NIVN0EO2I=ai!}J3ezhrbgw_Ohh{spXqS8&o^FyYbgFNiZEdY++JG1$62I{
zcAtIdGsg-AOml76H#&d2CEOO4=KKF3CjfullEeL%0^_ckErFtr3Sc&WmI1oddiZdR
zBuu#c`M>3K#0=oKc_6{z-rq1sl}?@T4$96bj2W4Jd&4}IO3D0hH0lN~Dsm}I$P`^a
z{NRBGDm?rH$*LpC^6*O{$OTKD663$t1P;x@d&7Hqs<GjB9aJ+9QqZ+#)`)HI)T<IZ
zc|g7=6US2if042{zTJRBlAHj-+Zx*NCdQ-Gy9)0|<la0W>~f6b!)fsUp%EwE0rqz-
z#(<FDVg^?gX+2WD-#{R%Pk1}gFIbq`Odk)aKR;sd{yz+Aaqm4b>U@7&rYF*EIyFu|
zqWT^50pLo&Dv;wfgJI1Jsq%j>;&}{4Th}up0!T>|Lhz@v{)sMdOFGDH0p+9E%Dr?Z
z6d>q|`+p=&BfK3`kpatxJyMHCkT21+k6D8hFp!&2yx(dXbket7h53`|A9VC#YOnY%
z>;H89!3RD>s#*y{8rvf>gPz;ZTh27pfdtFS<^O^W4spzzjt}g)Bj#HX0;(~XK>cyN
zH(Ng*kMJQD7({4>_rDGNBZ;|{z@`G^zVy7(vfs*A0%cjqFaYK;3SUAj@U?yCmsI8Y
zXPU6@U_Gp7B)3dMNJYciH>?v&Joh#t<-d~nAhY&OPyW5+8utNWc|}*L$Mc-aMfA-S
z;X$G^B*1fqw+z8o0sY=Np0+JB9RJL(_TD)m*Ez+}kVYWS@ftJ@&nl+f%623fv0zHw
zc7Hk3`(K>0n$W(qp}m1|Dw8hJm^zRnrkf>7@D<-#xI${?L*rJVD9b<JWqiX-F1nlU
znrmE;g?Es{e@(vAbK6<%BtE;T`_fSEzgn8>o-ma?noZ%64{BZjtCfOoiFmHmOK;`V
zC5+Pt7nIBI{Z~ILLKp9?o~nrz(e7mAwp2$#C-Dy4;tS9`BpGQfvaf$xI6?nk5rF*y
z4oR!+&s{~YWmhS47vNc?w!gNWQS9Acp!1okN!z)3_4<GFf>Hx|SbmE=y~6o3X??_{
z51ff_ceOpCLM#l6AdUIT>Q*W~2}b>`l%P`hbddpXZNgc0XDO4ynzEb$?(-e-UIC8s
zIgvlk_CL@6M}a|k@pfWNyo<8jX1oUEh9~gBaJF{4Crg=L0Z8M233b|oN@9aQgsYG<
zEdE)8rz*fLg&@ANaMO%Yq}q0m?$iJ2!-@Fz{^ISoy<)q8rIyzv&w<ryK{=5`ZO8N6
z+c7$q|6{92IkN!wGdFa*A__v7FE_vve+S-nBUyG-xKrCH|BrE04K<S&SXM<h6f)Q6
zLs~CQY0?@<Epj+aFp#oTwkUGbB!oErk!FYun*3D7=a#f(Zv16ZFE#SND`9wVQK%FZ
zXVa2+#F`>jYwbK?3od4Wacd?^^3L~E({-=<N%Fe1F#3!hK6iLg64BOoZ>4-R_&-=o
z9@<W^QRJmI-*Lo)z1iHv2}s5}`1r@Xmw}<>(@#m;5?ROZ9{TQcC|X|Qu_Q7<ea`;?
zKjImnxj<>2bICm@ta?hNRuO0*Z-(Q5^5|t?N7k1;Jrq<aa(@kXM5><u02Otp;y%t&
zAAet@ueDUY(QrI_{U_tdUi!Zx3s*I({w1=V>O%d}qpCFa*6b7RNvyKgOJJnhqCLhU
zc?^>A?Y&do&YW<k@GVDisyCuT4&dcKMSSnngjXnCC%g$bHXB28+URyqj5&v>e%8bO
z!9Gmb2dddz?`65z*29ISONCAa3m=R-U2#9B-Hhi*`N^3~B2-`~Fc8}}gb+V^tr_||
z?{lGWs;V241n0}X^Df$Xjp)!;Sh$RPJBm{`oV+d6lBFLW8|9XiMIzA^@72FN&N!42
z;-q1aL53~Dalm;()9Ly0NuAwe+kg!+_}Z@sf$k#0C>g)%11<rgqwdxr;Nadp$Fy12
zsgaVO)az5#|DnZ13<h7qZSYS1&_P|(&(D#vjBUVJxv49c4!*~#h98?-sEe=~pSg>7
zj-pZ-V{I=*d4@Fir}83lw{xH5$uQ18DkFY~?Ew?M4(oX{8Lf6kh&YX4f|&n-4GE|6
z1xas10hhZ2hnouz5Da?l%fHweQuzEtlC=VP!vaEiNIRrJx7?qnmEh;65<?5UhI69+
z)Ls9<huqJ=bJFCiuC0eW$1cri>mrvQQ}oA~^v!uA_5fY23CRpu{_#1_$+Okt$2Sj7
zSUah{#|3XpQ~(D_YQH>$cauhxwYg_2G*~N>Le3t<+q~plP{&&c>FqsAOm0(}?kp#S
zoCP>RW{)sCX)z|dnuNk_S0%`o$uMV0im)H=TJ#!9^5|th_qgEyAKU-N<B3c627ief
zt%vjJ)X!+g<E`dk6lsre)>y*Lg(HVXk6|Flw>Btb#6iO(MjbC&!MW3iMJ6Ic9e+OD
zA<JtHDSHu7=uyGAgEK0ux<S<2@6geiknA=W*Wo)5cz=0)=lC5i#P#z^O_~zplX+YH
zG>?a)VRl>YT@)05V<Bt?PbF-b&bU5`LPjDy6%7%rER{Ufw;0n^o#1uuJY&Xrym1sy
z<X}|nOs`;$MCc?oJ{=<?_kIJzi|3Z25Lf3+=8nd7qq9&$@LI#T64EGe-G6AUc4OiB
zc0&L}Syr#lMcuHd)I{??cv>9OF2^wxmAct9Q=(-D<`BS)-I=NCJb2t2w?T<bQj~i?
z;^~0<#mWo%{f6;An?@-O^7??n(;Oy&DA&2$pyayi-#i6`NU!bN<uPuNJ-co9pWIx3
zsS1P*An|E~8*T2*^_<}Oxp!cFSuq|Q$`3#?UVcP~l-e_@*<_E4M_T<hvRQa@_*!#l
zw`dU4MO4-H>WCsnEBa%&Fod(ejQ+D2zNjcO8RTtj{`k8%%b4OPL!QYBe}P@DDxScY
zOAa;Bg(yi2{4_XU;_Z4hC%StL7=~nD1NR9*C*RkR3n(d+&n=Hpuyh+q#cRUZ|LKwO
zbL#u1l`meEt-QrvqdSu`nr<`_=j!)e)??X<{$jia{)-y6WPlj=xnb-O5eRN9`5&)=
z$jBhP4=nBMy13A(l*nV+r4}U<%!|ULl(V35vmc@?-z&bqeA3F$?z2BGEhG~_KupPA
zxkUEiDtpnHQaIxJazR%WbUg0Frnh;IM)O}pfU{K!CWw4@@}+PIIFv%G5DiH{eIA!s
z_kDV!wvs2N<G!Ew?UU^sC+N<Q&)4XAwAi?O5?@gB*9}Wu)MytFBrBB)^gMISvKB0~
z`irix7O-t6Tnus&D6HXE(<XLOaEE-dxt@T_e1dsax6U+A<`eY|8Q#@7;fHXRjm#rg
z&;-L#9T8=8l=>|nWlF@x`7PKNaMbOy>z8)&qIgb#dL1cQyUgx{8cyi-H|D50jc?~$
z5Z}@nK?zyTel08?pUP`MlXnGQC0O+h0p0Lp6Y;<UeA^^%-uq-s7xFAjH>3n)IgI@_
z0HD4b-T`xWRN`jvx`U1(7$$x17uMH0%b2C#*!k^lQK#3;ox5RUF`)WU&(CK_#@3|%
zDAsY2r`F20V+q1PH}v7#Ei(HG-yJ(4`fQ?KlTuO6uvZbb4n0yJ$Xk=L&Grn{Fg#~G
zy>%}5kQm?5E4!_lY63Lsyk>95RBhFm$2|1UU&-ZWk|=yjnC~`-sYKrqGhsU+Nlt_J
z8+bU^{*5L(&YM1+1Z{*50x6}4Ta;_EP%NEA6^%ODX!l+t7NgDJNZ6`}PDZpq?vd!y
zzI5xprptaq;(!`RVf!H;#BRvH-a6J3#n+PLHdiFoYGWjl!a&b+*1_*g)bcw5dzMmR
z@n%KmWBIst-knGg0mON!!hNCcL(bvC<*7X%AUXP^5qagLP$aZjM%=kC4;QHK2f#x7
z+}|+l;w#BS>q}1jE6lYk;wS3s?if*KPYM#xq+4%u%zSKmoot8X#cR6a+fQ5RAfBQ>
zqon5rzXfMaefOZt5~Exed^pSpZv%`{FUDxwLKGM4cy6zy!Ua5Vv~4wkvW$$Cj43|j
z0Zb=!tIqSgdSy1fnm*a4tuXJFV<iS${B!cp*|YCT>_K(kXyZfjv~$%EJnX=HUM{=l
zZp~IPBXbiKA-BKeL?9N*@KP0bY)4kscUBtnJLhOm7o%Ey9vNgxSmCQO=kX<;4_L)M
zlUars=3VvK%3=RIh;Nwzx*(&O@?og>=s6jT`QD<-SN@t;oU4i_JQ_4BkNc;wWSHn@
z#oI=}$Rz6i9+9tI>s4+gMj|V=l106m?j<(CqB3-FGuuOba1QCRNaRwD290HgNiaIt
z5=<W^tgSH_4%}L6IA-*LY?)ZJi%rWh?yaIN23R*)F3UOFL~RXc?9PGr2Nv!-`yAFn
zwwTy+`g{xezO!#li+>(E9+&6MTX-vNbIk(Z{$l37G58Ki29yw44Z^<6{?JC3>kalT
z{!j!Ob55jyx5GBLy@2DNu(z6<xB&W0mCtA_dKf!Ozl=SqEwBcDN1Z;jhYRumJlGyl
zY+aH~P|@I^+)N9F7i>03vv6FtevE-|C1$3D@n$KOYg$=y4VmWMUoJ0Bx#S|H;H`8D
zf2>8=AF*8YD9F{3`Nf`}i0pr9Vh8B6wkMuFK|rGD9vE;%5o>3p%P%@PY`PX>E#EMa
z!93ZZ3l_K=f^d?CtnL1=Hs)bk4RquMj_hFm{bMNX=1-7X1bv9S%$gqR<d%6sb3_`!
z6M?q4bFN5Rok=d=pYk3C|G-LmE*8hP?f>#}8LUS<eRbHYkXOBYuYugS{(4EKb2!NT
ziSFEW9^~y1C*!lcw@hlt%Iij>-uU%WMhRFZMZ&e3nXBwn&;^uk_1$s)PHC?fU;>h`
z7S!Id5pv6gg$z54!mD1txA<;Q%>s)>a8Lne%siHyqz<^1t#=4CYcP>${$$d{+OGM;
z#Csvcq0O7vCAN4Ft525E9w>ajmTiKxM6h~D(@H{rhQZ)|LKk~GH5pwzlK94~cZhWD
zJ9|8G81YIQL%MmU%eLVbc1n>pd6ke%cQ#+R0FNV@a#lUA`N>A6hcQcwHC@%0Sgrz8
z49W>#@p&uUc^xwTi9X0PRM<w34N%THLP3jsx{cL4WU9F|r5A`LTjcgyQHKFAke9BN
zTc69Zm(rb4xSi|4IB(TA6WTs!TNLQf)x%po2`XM~xE!5otNrLR^O_LPDBN*IDTPVB
zk{|pCkjPTa+1dDAQhH8dgUA@ur72kjm@XF-yAVDS$Vl=Cb(|6x2=maDrj^lxR(Idi
zBmc>O`xS^<V2VCw+XmU<D5kgosB-;pa96*v+7rW`$6n6Zjva%LqF#1)Gou7;L^@t*
zp7j`v;5b%4!#kKA#f9=gJ=FqfT>`Q!JkcI?4C5nWuHRH80!^1>lM7fbR>ni3j5WO}
z?ViIhiI5#SaCqjJJNU!q^B{y=23gDneKo^gBadJ;)Ujl>feJ6Ai3YT|kpw9q5(_>x
zAcrB^6BLE1F6fpeIx^a3^I~%Ef)o?abGf;M32E?A$BA*rVZAbWp3N?+wceDryv5u#
zpc>&Co*JT>`xB5Yz-ZhSkt%*|)FGsMFi(t0^3iIbn8eeiaWV<HcxyO@`p!+n43CT>
zw}qC$W`i5K71)-uSPQ&l(=hydL@-uwy6VC<e75AHbreR?m;?4RjOmlGJa`VqVF8dI
ztoS^L#9p#DCvj)46QSjNDLo*g&)<6a&3^7;Bzr^&G~36H=@$sk$+#ltLiS!rq(mKy
zZ81pm$y_td^O)j5uyz6Em>#eVVVka3axx?lI5KM&r_7UwcKAgyeFlnVYz`T5vO5vW
zE86<@_%B`O)aAy{nenZUGi_ut+nC002$P@0dh1OW1gp4Nrm-|hO4song#I8SRX|!z
zGmcOVRxU&=5lq{r7>vpToAS%ubtJ+YNUw>06T8T&790dImMR9R?R$XEXajkxh0nN$
z3fDb8C3k}lJo2#e2J&EtXFk<+b)u{tOd#iC5f5upTWee2Vr@ZA!5<k{J$bHvCf}MI
z8AT3)MhL{{Xip_c_CH#cKhWrNkt9_8vJl0B^J<vIVv`R4U9}Cu*2nwk>B``22BMr$
zCU(TdN^Q~?aOD^X+YxGNJym@{IFp2-aCrl~rmgnh!s?6*eHCWKyomqCpjQ>K%k4>0
zjR=t!lS-5s6jb{*4Onj13EWWbo%#8hDF^-=+XYdMwJZi4th28C768i0mUZ!iY>Gjf
zmT*IBQcm_Fyma<ujGxoeMZdv>$EKHg05=)}wPvoy@pL^@^Hzr9-DYq`LM$!GRNX<}
z-IQG<V#Nx{>&@t8y_pv!q}dnfP1Rt++j?aAj|1>Kv6Agts#dVG>*zkP^IK}xoRBhX
zI_bQ|%!xcWzy45D1_h3R7A0y(JHe8oyOz1Ld4x>aAy!=v+U<M#MtC)n;tn~+)I;e*
z(ygN`WVWHD(sX%y1cgscwk1MagXE#^7u4yk3YqHpJ}Ta$`fI08$SW3}$Yd#33p?|!
z2eXBZ-FJR(5+aOo#(MJTgmZ!@1B+G!FhiRzY7yeTxXFFRZjqI+rDDcCaTcf+G0_;H
zof?Zl>UU|3gQGp-Qtz?d>><v1P(?fCLT_M;%lNH-v`<Kk7OdPxd3ezI159o>95153
zjeihq-G<*GQSO{zfFJ{8jl^X!iEh`$U6USWgQof-Wz0m~lSwYU5W9pDexS`#nZZXU
z3!b4D(jANovBEB*4RO#G@H6rm8UwJ!*QKYVO2kh{f<0i9LEbE#Qgx+FqALZt!v2Ro
zCQ{TU9YR6*bgx;be!h}%w1H-(Z_k<^Mj%?rS?w8NJ(~5Hw>XE?Gz|~6AvsW*o~+tq
zr>THp?BGFSj`9Mx;bt2eb!Jm2Psc(I3sAGW*>8Ob63C6#LA9SY>?#03*ONIcyhSA&
zZ)LA9hkI6ar3;w$?B|9zdeMM?q#VTZ{Svw+LD7pz7walCL)nAli?#rkc`(Elv<XC*
zhboqh0oU01A>vOaNV;j^yd&Kpg^G%h`7o~2sfv|Eta+8g`Y-n4`NUQF8rz>VCI)e?
zf%DNnu=~&i(4RmCo<wb-O>kv(#`2XRF#e@#oNETsm>=T#c}4lrD{f{Bln+0zjjmbP
znqj38TcJ>Ld-k5tlJgfst@_U~6z?z=V0kQ$fy=Fb$lSSW2v`TGFeSSDv8s>1lIBSJ
z76cwsR1%AZ?kCxWIFqi>`L_{^k{b}G-|Npf?6xF>tLrcXw}wlTEb(U{*>gkkcr^;5
z9mPm#u)-V{i36QE;@a?=e$rgx3fkxT2sLZir{|T+gA}(L)MJ`jVdu>f`&*}K^bEsk
zr_jznnBn5*`Kt<IleOOo44(((2z)7eaJ8H5WM^M<$P8Lk+?fPH0AkMKA?I~y?wCo%
zD2krLo8I5*I719AeAVp!mYc}f{P<*+WX0WJKm1Qb<klCJ@YZ9T5+Sr}PP>WFYPjM#
zI>7H#(O`*gTiVrVFy?I|EGO)H&Dt)O8;_6*sO-LY+0qIe6Ww!=lk5$ca#9JJCa0Ol
z{NnUvf5b5DH51=hwF5|)Z1A9Miun%jG%)~v76V=u0ig|~W1GvxMIQ|T(zMf^w%hX~
zx(LbCM?<MkL@dOxUplW`p?)(3lHGS&NHLXfC1Z>&9=A)5Q4it~ir|Gwghv~`?A;U)
zlA)DOgq{lC$PYs`XItqvzx;d~B3I%Zfx(k%J<X&MwK61TC}tZA^^@<VxBLxqk5_A0
zTZ2D@pk7yJz;d}B)&;fa|N3|xK%{OjMO)KnLAGc#BQZh+I+Kz(6r)NfO|Z^rzh^rS
z?ah(7kF4oG&XbQG;*ImYlv<Ep@^nm7_ZE@<u{{-x;E}+bhnEv%5fcYT+r1Pf+Ex!<
z58kqK==cNLCaoXH_$DdygGE^}h-C*SiDh4lji+KK=E2?Ynr+3*&J%`)5Z9A_n_aZ(
zb9J%DK<izFAS&TYVv(7APQu+Y+V#Ay%#Za9opuy+45;%PUt3Pal!t)C0ugqptC*cR
zbEXPvzw{UC8AQpBSkJJhJ@da)Ro*~t>F<n|tB2|l62bZJpTuCj6_VzbIu($>UnFKk
z&PL3xC#GOC>Z<^bnR9Ua8uzLlz{OoIHtIt`J5Zl0@>?P%_1t;yj#ro8IXaOi+#%jY
zX8KXnj0aQ#9Rc>?ON07?2A_1u!!U43>VmHn_ptO#ia0R%=ZED+TaiqGLuQ%C+cxRb
zOo>tIQwTnB*!SJ(BcxsryFk-7tWX>pTzA1>r!ZmT?(+zyqQ*BhnL=Kt{1VphW{~IZ
zPQ$*Atox^QAtV<J_G>L(4aAqar7Nvg2eij$t+_<F^LDd0Z`hZ$WLH;;uct<wz}ra^
z27pY0(`Qy~OzJ=Q!My-XiE5-smx&XyD`Wh4Ym+WtRG$ctnf``xb(q3)r~$I+)>F*l
zlroJtB)Uti?U9~I8%m$LgEX^va4_dJ4mW=dAa=3Lh3{{l@5v-d2Ca5>(?*0aif%8}
z?Mcy`QR`y^DlD>KZ@)-Ol)r|+3?N>0;^G{-JmXm+h@s6Fb?OH$Yn~%xpauU8!s)Ox
zvd&G8{%X0!R{}i&ZTp}cHp4+JdjhpZ(v3h#c-(4ZPAl;)NuM27DBJy_Y;mG#k?+zH
zVZZZZXOXq54sZskO2_jz<YOX1HH@qSII!B0=w`;ZM|**M-KZKX(_$0#IgynWCXP9D
zwxJZ+3g0@i{5?uRy3=sw{!sVXr-+q+_m|}hpQLTH%5KNj&Mx6y3q2Q3+FPSrlb~O8
z8MO=Vn2?G6cZT-5Ovq5gkE%<MODsU0xQ|9A2pL?#7#Lu7<y34^keO-WL*FSC@<z;P
zy>^As)>kn_70^<bL+DQ|cOBk=2*7wrikqz-ctarf?7H#Zrj``H!XiiKbzJp(!y;Qx
zyf;19)XUDN-XmpN&o_<gJu8R!jz*DupySg&-2I(CM_-9)@T;OXpLJHigwvS^*f3j5
z7a64HlLlXvXfr=bY3DhA%Pas`_IV}T$(i{CT73ap948XB@T9LtAm2$&*^pW0?3~IQ
zuYK%n3HE4ldH+FeR_kdD`y+^;lw^F*hutR<bfG7^Ori_5G&!BmNKqHmNC(Vk$(X<|
zx6BrZ`D)oPW)Ns2c<m{ZiJA4T)FP$8c&wvD!snh|#kVI$<qo<4ziMyb33aD`DoY1D
z^odmU32<F{l$}Y8LGPS=tf{cV(@05lxmkumMyH<CRN9xcn0^RS5?>qCF7Ru82?5Et
zIkUdfw|!cyvqHSCgdl!7<0%|;USz;MEaM~bQGkO;eMqKg0vGM2Rsrj}OauMgE)rFM
zGqCoTwyRPj3ZOG{iO<MWyH|=S(d`Dk^rD7-M>Dj`gu%5lO~pYh`8P(EF0t88n0@BB
zp_%uKsvrP=g6aL8jzDIAOmvs37)3*<CTdAYNl!r3>zQ$HixZ6$`(dZzpXk^F7%1$!
zi6r_H(_6p_?&ZgncrZgn12{D3vV*j|nX=~<Ea@*F)n6x%c(Zy$_@Uf1!o+QBZ5MII
z#3ONk^9li@^Mv+(asl3W_s*+VEo3jnjo@pPtNYl<K}cm<ow_e&zQ}~tM2y&D@i!oV
z6L#QUAz1V1GqG-wt&fCut%3V3e`4c?&w|chu$<Y5652ppDhJqD+r5mOU^~C+5A;7A
zD!qN!ZTA=#ni*hoYS6n$q##`@>QF2_$p#cA-hSOXpYz2Zwlq63qw%o&I!1jqAk6PK
zU5qIKSJGkop8^*us*<y<GCcB-c9V^dlG7A>vbxbZjgP)&5<M%#lEhmM7))hU4-*K(
z0X^@|NP{6H_o&-|>41{16e;stlT61I_7A4OO-Ql9MxB?wiQ$!5<t{Bz1?=^2A>p6L
z+`Ur+>~Cmg!m3V3v`C?eH-yLIr3Ki`j{@IhGU(*CmX@L(w1dx|<$VKHSkhhZVhsW*
zrf-6V0x?kbmtK1Fjq)6HQj%l@MZe#OwJ7P)CA`DHcfj@sqWlpqYNI6{lB=gXUAazs
ziI-Agk0f3RRPLM;g>BS|ass+o4(OX4dM>cKwp)EOEdg{=^SCqwE)2+*G4mSWHqs$Z
z{3SSRQBOJWr-gFffjuHihG(_zPq@G}3CL;%ym;uvME=x&UFU-rJ)c)~m|gs}DPlK*
zGCM**t+cQ9D|}u*!l#D^9XIJ^hbfOf6q^*e=(cl311uS)=)tA5;8@S-Gj!sQfGc=6
zTx}*Wuh#O~<AX<e-m!adY|wdr-cP$FRmBV}bkywufZL+*?5X4Jl1r0RVX*e3%YryV
z^#xB0uAQHqU~0F>n}GaV{KlO^(FXu#DBu~RSk+^rh<E6&m@q}R+<&2cK+~d-b}*_h
zuZ8AvJI=XVWXe07Ms$wCnjzx5Z=V|r+QoIjKln=CT1hvLF^0QV?DtS;>asxGCi?vP
zgp+5gdcVM1(9vFCz{~yAK~U>1Q(24!qt=X&Y;@tRQ~@5TpsnZ6LMKl<?ICUQUkH=x
z6*lSIkEdL_D}pw73TquTMjB8}_F2n_x@TOeqyXhS+6w7_9E&SrTTPB~$Kc=vXsgN1
zZIJ$$&ikLPHjQdGLBb4A?uu=Wl-nggui9p+03)GhuiTG_;98yD=7GdBMExOIA!^<>
zVTT3w8~3xWi$ziM?L$u|O7oe`faeLv(}<kIZ`XeeZQpW~Ka2^^k-qU>B*v7~PNRK$
z?^zXzL{^5$Cl<8uuHl{g?9r(X%=TI~25=h#70uM(J?-kC3V(I9BeQEO?#UOiLo<Yk
z1r-s0czVP{X3D;Dork(}*c00giXAw}_nb59vpo%FrNJIYN`|_{yD=ILC$Nzr$4mN8
zSm+*p;+@Fi1SS}j8DN%E!RYR7#7emIN5q`}4)cB(x0w+GFIX0mzR_D35T;+Sb5tcK
zQs72CMXWIWUc?G6V*<XCE<ckFFnyKjHh~Nu)1xByB|Y*W={RDx;~IF8wic}Bm|EEV
z=^?r!Vy4PRuTR;(Jfo?m(B=Z{N}2fx9E0IKK*$1jo=+|hZPrExQy^X3x1-6Y0v8n=
z12>nVZJkHqPbWU*GlNpwJA1u(I%(zFNCU#xYScT=Pc~|ETh%LnWc;an8c;lswKZ1v
zOtS+WIbOcEi0=xt>X9%tOMC|%#dpBK_;Z81a3+eGE*hfYePu#CeK>$n9~uu>vVM{D
zm9aR^Lju<WoiH3x0c@LFb}+RC2F9(`U=8@yuLVl^%T&(QjkjJj4ju5y-Ua)K0A~dm
zo)&(e?i=gy$>nlkigpEt?{xo>>GUcyC~2gYX3tQ&G~mp5^sxV$u-Xk4mdaGF)i0{8
z0(|}85g(T~W%YGDQ&A0sxUgzdbHlE8>Wnu9si>u2I&j{M2&`{<JkyGfGLPeBMn0TY
ziY|zv^GHM|magQ3783V}W5T^Ni9&Tk4IGPdF+Jz_ufQ{m)&;^|=h(edJ)ih5KbEO?
z$>wGQy;r=kR?pPYR)n1^$EQI!;E(L!)~WzaY;S#xi`6%^=R2Kgj^nOR@6rr9=rRR>
zn9t)?!}Gh~>LLD{&th4)v41qDpl(v-k75NcEdQ|cIHy%JDd*FfP8^@ce0QDM6y(gv
zvtZUpZhzOibf(pfQX^0pO{BS9+Mq>L#9{q<!dhOejcUe@+5cG*ZrhBezbbpX^Y4p9
zs@sARbp8-sp4G2dr*O8w96%&s?LHa)!IgZDp~4RqC$wPa@PM2K6Llf{!1j|s@~3D#
z0a*LzUpP6uDE|}^uk=yZdG9uciBn*T$oCwd70K)aP|C1h)K4gS@V?;O@o!OWSy-{9
zx?Lp-K-cF%>Yp~De!#;9YT%({l;DiuH=OSkUw4vS3m_b4#8y4eI*@rf&*a)aS~G*9
zpt!DKLYbLc39qt!b(2;GOC(90zVpW&s?08oh}sJ<V5%i<PL{Z!XLHJSK*Ckyh9UWo
z9Sx$zYC%)|iHrf8!9By4Bm8KuO1)cJ;S!NVyDV_OwfA+8cn2<%@g=6zBqcgW!QH`W
zvd`?;N?vYy-&!K#>hO(gq;I;xs=?GEX?l~j<K6NQ0{3KDc0Qawr=<BH2#3;wH-hWt
z2@dZskC$@iP3QSe&lPjHzZg>1N9k|~;Z(0=Eg5SVs*pm(tkD3|#C%W9gF3QiFNH~}
zm-CG$mQzpn9)7>jGj8OGo(zNS#bm7%da-oKgt3S#-7rj5&~gICpAgl(jtlDEWD`&E
zrh{OrV*a$aQdv<(Kyrxo!`Wa7Gb9`!wc19oUE+gsMU)&Px*DsN+pq70?1KyWvrmpO
zfJ_gI9vbI2Q%VL(Uyev!h`+Yz)Bf~C!z90qnPg3;nhp`lxd>g-BmgkY>j=pUl(CVb
zb6HU|O5jr+$(zTzAYZOJp+8~gh*6D{K9jonwHoDZ_p!zS<|>KpVGLUn5W?VKBZK__
zEmB#S1YNltF{Lz1E5!)Swr0ocnF!cDh#49da}2}{P$>{9zCZ&3zk-=oO>a(F%8(J^
zPe!mU52k2``!8IXfQi9aLN#q4kSHnI$lCBN<kMG)I4zQrgqE#<ZSgtYq1esKEI9;h
z5(u9AOv%{pR^C)Hqy=K~$(d?@cn^FfTb~o|aQmv)PJk|6{WV?tpVOA8HCCa0rTSFi
zz|>q=GwWw5Z1l8evM?Y7f%!8nzr{ZMiGmUXH#(2EUpGs;x9-D)U2h0i<H))tLoQ^f
zWc*xfDOZv8UL8kSpkr6W&I?=0;`CD}PFs0JRp!JYQcwpS<ZtDz(`Ezsut1UN>L0FJ
zhwKDgVugl-v1T#__qLZ#YJSXZd<F}|4%`W`1$YsEIOhWihtAngLoi$}$ZZiN@LFMm
zb%SI>b%VW^K{7fJ{~4w+4g@cYz@NnBx9-TdkyVYP!<^hv&3aK3Fi5>CVaAnXaogPg
zI`@Y#qiqzrB1S1l{hLY1&M$NH)LXhAJYEmPJvzO5sDvH!quFhwk~e1V{T3zKq~L+Y
z+oolG82aJB{qqsHmmae<sOf$U@dRxXwlBp6xZ0A7%a3ro<6HG7Wo!Q%2}R}CSJmBA
zhzg`2kK269UkY2zJ$Bsis&zPHLk(Z-tMJifk+z>jo#%H^nuKf6#Fm)uHthki-3Kmo
zCf-&UQ{qL9+qYWcg>*qi0E)d`VUJM8P`U>y1m%-nkn${Zgf|GSS9uUIgt8q{TXc$S
z-H)Z5kErRhOwy(V_hP|#H##+X8I-SrUyK#0ieY;ke3};5P~Nq2_$~TJRoO5<23=}X
zlYpVXx?}XlnVUA>F$y|_KLR$zm?2umYo<o_&OYvagO}tUz>B*;PrBtpG?2N@g3gG6
z_3*N4H|;!)PL(hhnUkuHh*0+&l%0c7`O!~pA1(hysCx~xzw6w-wWG1LLN3=Dc&;}e
zhzc8b&`}vp-`4DowG4Nbc~V%cAScU63e=HeZ;iNmJo?1E$NPzj&F`siQu`^?$Yp&?
zVVLQia#8{Kk2;D`9a!9zH`<b5isJA|d0su9WAFN?j)$JMb?nZ7Y;G^GP7a9*u7{Xf
zg7$+F?ickOcvp)GFZkE8QcOJA@A%9VeODeAskF%BKCAXzT<WeWFkNPm$e}y-S-987
zUps%KAaq}y(=6ljueq23F{}qdFZbfAz<O%FTFpKhxNT&TkO}t{j%JVb$&b#)wB%@}
zAb=H&g2bra2rz9bi|cPj%rF6VWzAFtCIcC6$avVZrdsd!`w^m5^QfHY(cRK4;2VV%
zLs*DVN%kcRx;>G`Fr!wI$!Yhuq=q%}M)N1-_918>MrZ06Xe^L`@Nug`^Vbo0t4ZxA
z8&hVz3|_SCJKPFa^8{PxZ@-Hs8KX_KAiktOXt<peGVdvp3)mO>@>%jhS;6|wjhl#{
zo6g_s7bstUjjzgAL*XW=QIVmrn7;VFnYHVqGvU@bRmy1%54Iu&ClEG0GGLBqo7_#S
zMEWfys~48XF2RShD`V5E1GfYN)Ks5-szfVsF|uD2G4*8Nj*r>!8S2a#UH~VaLlFOs
z_X^>X7JC`{l_XE5o0#R_qmwt&c7M-TJagD{CY7R$w<N2ZeL9y}>8Coa&=8ZOqovBl
z17IE*0t&NFs#y^s9g#!DyUYl4K&GxT`)sUG?0h+*@~hwB3A)}v(x+bK?~guTtk`IP
z1QOv&DLMI~hJW5rO;j<ZWLVsUQO--<m9j@F<>EH&s#_^7H1M%KJv9I(kO@=BT~(!=
z*a;zP13?p2Z;xIThvJc^V<_}pyLekl)3j**(R$^r!sh=v#Wu0UF!%7X>Xo0nhVynP
zfseGEt<BbN+n?+JYPJKynQpQlNDn7V@2g8UnJl5gEm?G_WeRkd)Z;5dr1w~=5+5`T
zWem|}QM+TXWwOP$#>!GrNs&822lQ|ff4aBew4sn4@Ab#iw4(Q37hgxt?8dGX<2cwk
z>b5y5Ebag3lI9uP!NL_<)LXNZSfCWWf5$f$;6>#EET+Ir$CS#8hapG%7W$?^&+#;;
z<#J`s^g{z$#fsvF6N5<NzA_;o<C(2>R>4Q_s%PM0LKZCcS1;ARmP>LOVU5Axe(fu1
z&A+z@za%5x@bkVpo@2aI^$f7DniOq{=AO9BR|G0X8CcYOUTHqOzp!a`$H>ue1Xo|g
zwt7Y{+W69nE%Z9~lu>l$XLQee00Po;QqC8m6SkbBP`CPrIPzDPbk1s*wlrGXvjgko
zC3lS4D-G2y3Z39kO1y)vdOk+6?pArfy-?!j;bfa<?02z6G{ckKdrz*UF6HUKFaGAc
z1BI3oVgJ6tW3L$QHg{UFuiZ^AjnFooKf2cN<0YAHLQmN4tbMJ~o%HfJbTgRZvd%dS
z=U%z#)v+V-OJ8`R*DDAEx8w@?$4gI*-}@=mQC#rO{aeuChudTdx#j7e-dD7uLMGrf
zv{Ti~1T)!4%p$yh#Grl0JFnTHxQhzCu@ypK^=0?r=&KH6A5jWInZJqf3rl<YasR<h
zs5S#6Nm9@p^=lfpnb?@FIf)-#n6ny#_SX@Tb`MY=9q09mC7CtU0rmO(few!8l}D{o
zD3*IEx_5)~2GYw529_P&W^_J{tt1UA6IVDunLPi!3z@K`ZLHp_EtN*M@?>gPIP>H+
z`&HTFw+oQnC5MTE^e8;eSGM9qJw8(>1yT<v$#0W6siApb1V|~nj~f25^ZuIrkTpb4
zthu^ug`jw^+sAdXeRkWVnG20pwp4&X1({u=M<0!8$~_~Y-T2}mf2Li!D%yFna=%_J
z&l*ahlF5>Eb<mx!0)@M}V)ess6*aIWQCrtrIaMvP!ADiq^KnL#?Kf4=ITF!WK#!jp
zp*GzZR6umMJTrKq3r71Hl}#&%g;=HVRMx*~+lPM;jw0@jeRk7Uz$*0P3fPov-5a>|
zQnwjgJB?%V$$s$8cFxVhGm7e-X<R(@eBCg^1)zS=ep_bSLvG5UdW7l`iN7_}y|L`H
z3A!tRjA1`ea0n)8hP0`(&#h*C=Gk79^exFS4oxpJ@7U5Q<wDcdRtRuIJE~q|xbo8k
z+<PDPaD=|Oj$fSJ{PHtF|Ni^RmTI*An~=|Ch`hA)o(29qY%B6b*IfgxOJ6<16e%;O
z10&EL3V9-i0y$bidOZdgPcdr<0fr0M#In5|vsk1CTQ=MzT9R-1mNUifYBg->F(sI2
ziKku8F_*LMIoy!wrl|QPoEdUCtwVJm(-!e5z3ePZW=0qSZV0t>k#(tC@9_k(F(l7y
zsosYB1+u<-2LI72&M<qYq|((FWgW&Cq9PvH0w5leTWShuI|=goFlNgn)j<0ldgYtJ
z2P}j||Ct>K^Hv)_z##Vc=gN$H??y%6#f+hm>*mp+Qn%5A!Fw+??Tit%kD|tt_2Tst
zMv<P_0uO0!@U769Ech`)e%DjA_^N96Wt2eqtCfsu9nKDq*Pk^h&>LlHXfaJHuYAmM
zJhy{pxB=8ml}s~BafO8UYNBG9+s2*NdKicHpAXO|1jVKu(%*OZIM&2yZ%(Q1(IUvH
zSaIg=zuxMq6C7|{_;R-G{(M5N!*m%P{z3AdiC~cq`tz&F?XDZ|B}v~*sH4>sBC{Qf
z!=h)56wZ!HP&r5Se$aAAsMmSGC4x+zq)0XbL(Y^AE!zmDT?UKBzdZPbx#wbyGCo7y
zOM>uivlc!Gs7UiVePzs(uYqQ!N5JnZ0gC3npJOAT*LYW$+U5Ht&6tOAbFSz*L}Q%R
zkrGaO5_rBPK3!-VJ5*`ifY8_xc%JX=tlKpKXV^+9l^cFT?M+tMW~c`7Cw;K1mT$Uc
z@bd1<#`p&oW=M>1I=j0~EUYXCq*iA=nhB_~3|#ABr8>JcHKp9KV&6g!P9a^lDyd@F
z<u9S9Q%RqLnPVFg$&0GK0;UhIA1*J6ffc#zZ@9Hs5K%*c7GJ<#lqUuDpCS&(>Y;aL
zcC~bFls%q0mpJF&T4W=-thr(58jK8+_>3C$RI55HaCh0(kU)!FHz>DbzDN5R@p44N
z+G|b8T}L*nJ^ga%gztU>sVg<5i;EoEZ-|sKGoKnHH8Mh%U7`W#9FV~vCnjl9Rn>T&
zz_9S-aWfrQ&GKQjOQ;)(Ep{>Osy`)<PEB8xCnnq)MUnLC7x^!|>!QM3HGDxmWyuw%
z@Z+k!VAEhF3wO2Dh*zpFIC^|gVMRhlx58^-LObY9SA`dr7ZrNz&N(wA@=Ein@4bcY
z6b%OnEN`O(a(f*)?s)nVy_Ld@e_}Z<@2o1bbJULxwR^r|`}PGcp`5E_CYB%T36qt|
zeb=E|RgJ<_e-X<?E_lvjO?4ad4T(FTbAhww`M5b(`4`_`+1z;yOtb6i@HQfC-#$qt
zNp)%C0%eOp2eA}+Ud=j|dz-cf0pT4?{3Y%(Uq~j~@DAmkbBhtV+$`j18PhlmN4=UY
z=;#hzs=~)OA?bHQ<n93VQT#E^y<23f8t9sGs0qGGTr6tk_MpY{<@G%n4)_<{>4hbH
zKf1Hl8ZnysmDTB6=6bX6;?ne^p~m0b@+bZ}AHEWXp{|dhWjR6|hJ7LxHL*Y6AdXdg
zojZCqt&YQ)`V&qP$3OagHNT356Ypph66t%yanuWqd9Q$-I#RBim__$mn2<5Khl>M9
zzwcx{uVmQf-y2Sgt&nr2+BoTgxmQW=oOBKxSn{Z<Sp1{8hWo$oLN`u8Z_GN&4Y5w2
zCv;O6Oa;k>1@&*{f<=DxNMTt%2Dl6{nUKu@XfURmNI^N6{43;zHjIY1rk!u4crJA}
zEPE$U73K^dAX~<oI5qk(dbieWpwnux`Pl#;TrYi|x5_i>YTxn_Rs3;WGUkSP2Gzev
zAN_J`h)Ie2eq;_(7_AR82`(G-V%c-V<T>{|RvIxGAsHz|Czh(KiJ~?d3TDv~ydrYY
zCvVhDLS4Rdztg89ZKhRPsdOiJqP95qFJ$|LMO<f@W1jjq>O5p^C*<R6_ar*}PB--(
z+z{CF@O_8hRnkXQEEM1nJ4C`&;-HOjr6t2KFip9Q>X7rds5}yO#bHNU-<sfNV)uKx
zxMRlk;j%+ceO9H}_VvDjvZVfP?u)N}M<8oArugj!$Jjky9G~sbuqj6S+2>BylBofN
z%S#jar-=0;AjMA?WWeLGDqqUOhB`rhnz!M&JrD0E?<?s}7idx^-2s;}0GY4r$-IOw
z*@CfFJ-(HMH}MXmsO#5Z2ZCz7VUm{GUq5z|@~5XlPYiaW?DVo?jks<K|A-Q@n15WP
z|A*!Z$1K4+oj-P|dFb&vK_D}H&rc6Cr>B1+3)UHLgJm<+;_GsB_8Db=kva+WU)}V^
z-*U{-yz9<a=j<TIbF9fS7cMMLa?C#lRaMJ*%=LX=Xo$znG3t42Vu~x%eUL01*1v{|
zD1{g7H+iSB6uN_ZsbD>$5V3dXga)m?pXT9EOT3oo*SqJ`(cW|R?2tlrBmJS|SVKyE
zH=E2zbGnXE&ut#m0sc}pLUq%S%!M1NP!}(rUA3ct_UmgV$}-)CPS+;O;T|q^K4Akk
z{?BLC>mmg4mg@#Y_N>etEyW5PoLCLAx0R`znrkl6wZda+9;nEjhG9~Y7N#e$LdoZy
z__1DVdI8hIVfjZplrKAbMDFYfKeEN%QQKZM2_&+)c`FNVA{m3P!E@)4IFr<Fz(k_;
zEn1_{f4L#eV#ZZVT~bvwngvtu3N6~cd9dOD7!Z5QX(@utEFCD{UfMGE&*Y+bka5u=
zzAar-bA46r?$MLQ(lDvuBw1pNF4Xf=PvM$xPj3E@L`l)>a+}qk6-!+N8a%oziF_=2
z9k9?)Y2j4wdXLH`iO<tJN^EC;fP)w9xR{^~e>apxs=haUrF+<4cI?Jl!UpivZQy4<
z9nX_X%6NOnyxct1!9}t_(F_+yw$wvqs<=oJuXlCNQpv?c-4JfBJPLLesTFRVPP3{r
z>blxp#m=<#3_p2Ee!bUk-jNUAym=S8rX|dT85q)$F$iJ*aW9P@?^9gkQ=XoMPbDaZ
z*t7+7iN>o%Ky>Weg{sHb=)&<{ZrA~iaqL@@K)ch@dEf@Q;~Ljm(i0QJ%CF4cPO#b+
zL-0~!1@mmt#+AcJH0YXaNH@-sp;2YL!TV*>+@QQZtDK@~Uo`SZsbijWZ@j0$Ou&s!
z(}iiB<L4K3*C1E-uL)_1L!N1>*5EJ-eDUB~25HYHb+pS=FL@3x`vc&fNt8avH6-qV
zb|RVwjIM4ILB1lIO4jHoimd`*DtFZLN8n^EL?c5kR}QH2&2#sc`FpF90kG7xWL+_-
z{>;v9tkM*a_%ejMN3@^Xxn^T^*16m6QH|>z+^-})FGUKzQZci;w9B|3idTOf^8lDv
z5m;qrT-ddzXXoEkDlM;?OwB-Iy7$zHD3vDAWBLI}f}3wl^4cXx`(Y+m2cX4GV1?94
ztgevr&WESMlw976yY)ML@f8faAUi17&8#r!o5ru7A9&CbaZcvcSUl=w+*9x3!mw5(
zg!1=Ndr}oYcm}T5TvG+*&_-6P#@n)t4zmnxD%r(2t~sl%B$7!cND7W#Z>}y!f84dv
zP@V3opG!C4rI$y&?6`!<R63}O{9>25hF9C=-y_VN<l7Ka_`PyJCt7@m-wAg9!AZo^
zon=*EKW8btN|~$RFHl_U>Sovvw67;A{>nTe4PY>v^}G^K%Y|?^y7B}%1XueE^~bx3
zE?OPoldlEk7#a+V&q}{SGFh}?7eT^~!$kHozTokY-f|}Dr-QvxzJjYS_GHDk!e+AK
z)o=&J+-gtAv{g?8J9m$|nYOGINt$9g*UTGe$Z3jRy~*(>O7AFdp>f&PGVT0oIqa}4
zts``ND6b?qDjSCt>_Qvs-Ef<1SrftCa|BuA*Lj{p!oAyW{=i1Jzsv(I6ppH9x;67^
zf<&7dcOF&=nI5J7Rh8SDQ|1-d%$5F|;D*6CNNQetd=!LMbU!d$Cv-B%DLfiQ1y{#U
z8-(LQ*bEmK4(UhuLBnqQ(sg^3o$TR1&{aI{-U`w>`-E_3+=s-w7^h(YVGY^-=Cp%6
z)VH$#{Vjm8KZ$D$p$-{SEUol4Y^%HOJbLsO?(8yF4WjPkCnQ$ejSiE<;C-z5xHU-L
z!@T2MO+>OKM-K#K*7Eq+Xqm+KxO>}1_m6a^7B$1PK9-4+b_fC5?yJFqZI395O`<kL
zep)tpZWN<8J$kUcxwrMjGQvC+cuMMNEwapcnFY0xWe69aeRP94={6x+L&7>DMRI&;
zeY6MkQQmI&604fW$J7?{Xy}u;JN)a<v0;Br&4w7vR@Y8cVWn8^Bhv;y@uSc>(t9mW
zs8gt8PE*)=u7!NZS<XjY8kg%=^#U1O*20<goVhHu+f@Q1b`;Eeo1de%9zt*M&ZFjb
zQQO(RtN>z`1De-$+pBK)b=56s65+CO7$%h^<`yVO%P?C0K&TDYf{=}=Plg88Us99E
zo>$XxuEVPsPP>=&G6(_(HT_$XUP%>tq}Zs*I)%tf2W0G<qiBjVNt5exGQ+?5Uf1E6
ziS&C)F&9l<0rYR2!3-F?IOvMf`)%0z)Zra@mU+g;O>|!E9Mk@IF;hr*4+M|Uxl^Z-
zAThMGA?6EMjGeQr<&I0F%<yZ*)cA=+`kC)S5^83=R);+#S!oTP1pF7($K4P0M*N=S
zEhtMJ7i|RUCh3zH;6<hf#;!IQQcX0lb#j7~cvK~QWGZ<&-9!|AaZ^vZ&47-(Jvj6k
z7Kj%GYjP6gt!J@Hud9A*id;6-9s}26sq5LKLM2Pu+*To<@A4C-KoTjhE2UR3KM!>@
z7KDR0-lbnxC9eJk#ReEm-wKw6mFS^efN7xjmp@Oedb|=)TNTZ&SRi%l04H*WIMzlP
z<yt9<JLi)NcJnJe%S_njCE7p$#bKD@)mYj9mt892qR{d>yvcZ{->yL3K;tSm8T4l|
zyRFv(Wc|_w6ot?FxXc@L(x1OX@1|r-1PUum#1S2QVETJWEUZxE)!QqQrBu|ZD|ouG
zYt3<n1#mRM>G5_V)P6O>mc|~7)hcN?t-N3B9_aQ_y-9>p#ncPZ5@vqsZVV@1*l<i4
zd`JBBZAQ!<EuVZh|K?nae7)-FR8D(#@mP-0WbrNA%K|*~R@{V*WJ%9IY9j*?M$=yR
zlC<uE0)H4sC<afE5gnF-8K#0XEB)EDU*>?*^q$Fnp~6|sJo>mamO;F>FFH0Be+drT
zjR|H{r9IE-c-{S{HfH_aIjNw{<)IDycpK+#_FF&_IZ83l`<|sHRt_WqS*ve*`%UP+
zWLDpa7ZuEF)JW|AF?H2(QEgqDl1@QDi6Nv*Lb@AKIwTa7?rs=56iEqb6p-$2L`rJt
z?iy(rI_Ep%z25ixcjh<e>=pZ2vDbcP81!=FwAWB**ej;Sn#>07B^cdPMyaP<`7rIw
z+`F=%sD9|_GkX5I==qg55%8TP#1%GX)$E_8Yt6J;lm=8O-(4RIU2_7e>jNSC+ro(!
zPkR0Gmad&6=}b2E!mXo4xPG_TJe%*Q!=8^ug6d_cjXB#*UvCKrLR$DyRlpcCgUi_l
zsfcEbB~Z2VsLEP=c=-mBcOUfkDj68l6C+(k#9?lIW?kz0MDV8SH#!O!)HS8S0fI5_
z(Dxq0y0-4QP0?VJecC>s_V;`n0nl04_d=d^;=&%A+lBqwQ>0Xz-XYAcR^sKiV(K<>
z*^OwV9b3S0M1yM3Q2Rzd{!29#J)nM@i|oL)EQ4SE+~!V$IPBjzGsz_u^REr_2s8zy
zb5^$*=pc?gTQLWNw_sc2d;GHCst1US<PlZ~y)i^<@b0GnG0~=SsX177c#H(mtP1X!
z{@vqJ#zqBPNV}%eX<Oq7fu>a!uL&Lq&@#2NSWOMkVfWHM6H7`87mi8R_X~8{A`86C
zS{2rYh`+^e+v}=IzwX?(_+f2DYy^IbyY`@Lq3xHyMJq~IT3>EYJ~sROBUW7roxD2z
zxg_r#ES!Unw{3@ae_CM7JjnjERCt8tJt04~pNqDqh}jb%7TfrACB{jmHEMVH>PNsM
z^<krO;=rZ{jr+$d1Q91jC+0tdM=))4C$v(AD#0XO#C!FG$yT^2@>HmDv+_Vzolap-
zs**U1&$bkH>6}%&`KIe4h;?@1wHHHI8XemO@fw%Rf;+>yiX&N<SG-Qr>dnY-?Bfi}
z-QeY6^5iy87MD^@v$eWkb3JL4HWdEB!~i(&LT)2`=813|B<nI)9e=Z03KygwkB)m0
z4tT%aaH8S^nI?rKC%*eqXV(^O-o5-I?9-~j&|E<sJ&F)*hdQ4K_?qdrrh{%Y^y@Zp
zg7%+HL|?&>Y74~<EAHAu!I<_HIvIUW3KyFXlajl+Z!5~H#Gfu3aWcZ#_5Az}>9*y7
zn)A-HE5}yzss5~{A^Ks1kHsSFIu_p~;kXC-st<bRG_~tM>PtoW4y68-eYY`BD<Ha{
zT!6LBl*NG~+9#erkzc^QDXcaezonbwH2OxIXqN*dv&8HcE^R=LMM-qx^;1wU^&~SS
z*^bR_zQmXJ=VS%<GCU`>(aBC3Z7#hd!BPT4Y>!;{xs?C?dVe=i9jLWd0sdq9sl(7R
zCWDQfnzGst=fUPZB?1dBrCE($*2>>H1W}eM{dTm2Mc))DLNS|bFHE~yCkLD??nL93
zG57J0Rkrc_>IPy32$#NhbRzY^L<25KN6<%D2o)CX7ONtB*0nwn&=^3}FYK}>zvj>`
zLs2URm+d~sUvm4i^~Qmf>qmELqJ75r-;J9LEhFhQ&(yaO`YX3BNX?U9KYpL7KJtz*
z#U7^>O>efDh+yCA>CAOt1PHAZD+A3d`obh7DTM4~dW=8Gq3(D)<d{Y?^EINec#O#&
zZtH&gY$HOSGL1at)_CBN6E;f>fUon!<R7VLgnpuH6}x?eMwS~kMixCPsL9O1nL-L<
z)9qi#b)%YzuKh4fZD-ZzaUEY-xDMYAlw<R_y)5qG=zi>ELFE(0cI>n9QnvJ7!C#e{
zLS(+QnbhfCaml?iDDke|DDd)?{i4?oVNRI(C!u?ppfj;b+q3I@f+UX8^~^fpf&sYU
zc~___dwbxFy||bjE^G=5r(9}^YncAI$y;TA6er=$rKFCaQfN)e(EzL1;x+Tz+M1#I
z9KGY=nGugN)z!Ai5_d}xx{)$8ce$VY=|3EQe4)}4WUf~jbnXYD)W{N=z1+!uI?=Uh
zqW5_N+jP4|kM-`B0=k647kq=_QdGQW%&rSUX6r7=?(}P)CBFjJgvLBH)1)7bsTkDj
z=X>1AMN^l8&yrEd%xjU*(kf%+;XofJ?x!V{dq>Q}c+wy$_QpGbK6T1Tb)NCCVR?6M
zJBO0CzU|0LHo-1Rc3`~M>=JeDCb8z5@`bttU3-I3pyzWy296mmO;RC_9zpJf78Zj^
zd083>v|&lzJ@U0zjuW*EMfD=h&g`H}n{WNhuK)<V!=eo0oDm9ME#Yo<Eo2iAWtUOl
zDZ`WQ@yV7*#2$GkjJrmX%09zxiKak=hr2HJ)#$7IYz5DwlUy)aje(V)Zb+8ofHbcR
zUo^^iV@y?kTpy9iTk<B!L#b++6X_bCuj;@RkNdB|1KR?8D&dy7lf|!q>G_Ro&J59<
zPbGt%E>`D^bO{2(@1R42u6eQt&9|>CGr&0S;iY+Yl>!?1pG1efh)vGL=@!EOxE$6|
zx^0h(@`6nyS1(ies@Ja_Er38HmJ5XoeR1`b51fX>`q(X5aoL?eB6!S%<HPze3RGsR
zA&uAZbS70FZV{f1rC^*gF0XGEyco9aJN_eg+_H{{&cv1$^X_o$(eCet@)ekt_XZ3F
zran|5U;pdG8=dM}=$j^Sb4?ki{pbTCA+)(CRcXQoy2`I(>L#o1o|^g4R687ozK-5?
zeL5Qr`zV=-<%zLi^t$+LHra<F<?1PLWKS3CkFx3&1P#iK7GbGe5bPB@$Pp*a#S3_A
zo@?quyTNQuS_*pdTn>kVf6mS)T4O<e-tJNU57}QLIT^|+K+_^JD``xhim&NaCRvJX
zB}_o5r@!G;I)tphU2>~t{M{YOHTgC53!B<Hj(zv>1d)+P*XYM>_Iil+<qq0qg1vb1
z{&TW&(lbqy_=IAe@+qL5Z<>abVRuboe$Tix_O0_sbQMBN?3K?{<ft|GK(VE$CTMt|
zY{V>YQwO7^`RfTkQ;les&<6~u(u(ax`Tg*lxjZMdE9-hg&g=Fu?86d>2B*vCaf(Go
z*qU;7&0V&&s+xTC(A9iaD50ao<`7H9*?6|iR}bX@%pT#2R&u3xfU9<IX^`nXX3%xZ
z+pdXm{&Ndei>ZRS>JmB8@oA|co~DVMZat5^kghC34t_>Srk0$E`(w%@Y`-VbZV7mT
z(a@uOrv(RDGuNOJ>9$jOjG9!<P<Fi9dNm)68q6*QqCE<QCm52OTM8!HMQLP7#pZ7e
z!=&;WvgQSGt#lhiC%+vw;<ni*FPvKD%*(#@XFl8E4pHLtZl;yUaG&EQyqNXY=ddfb
z5Gk5;OCRW<_=2-o_3aPxx#CnEdlUDL3Ew*H=m1<NfqTT+%VX-+Tb}ryiQi8sO~B`#
zP>_plQ3A-}jNrBKbe^l6uWtQ9(QlcVX9{&$A<=G8E3f2!{{|mS%}10eKcUEAd>Qe2
zs}Gz|xkqXrDs*s27d1?5hgx9hRYqWx<O{Nb_dcq4MH9UtJFBO7i@g?E4u0#RwWL4(
zWRcO|X;1rWWs4Hd#pVOUd)+q+3Rj&9`o(#6R`n@0lv%=dd)SL%4ehhe#fam{0?7^|
z8Bgl_3hB4)AETS=p9T}OrLO^E?JISFPI$lKRQK-n5GF&i{0*I}n4vd*SjTAcqk%am
z6Slh@=%sk+ohJO;bQe-}2amgiB<4O1H<jL?9kbZUvFruKx@2=eSnThbI5T!H9Cz9K
zZ*|-Q7?L_E7Mnzfvglqzx-)21x>pJ+>nSRX&oY1OCakrvRWENw8Q<Z*uB*ySG)tQ*
z1zCRJ?yRwcQ9@X%GrD8N(cd>eE<+FPDO6XLj*)U{NZiXgyC6-r9~HM3J1Mngd-3jH
z<oii_C^gg*An?hy8d0GL1uCm`Md!slB!M?05}MD9%*7=LIaNDugw@;R8>urxfExo>
zZHC`-w<#y<UOYa3p)W-R^T@`xk@@|}`TkC=K9hdb+;wkzMqf|ZPb}N+>-blx*isWk
zg$4FoqTg!gq3$7dK`kc3RlAZ)zYU!^>n0&w9kxJ;J*sE=#<i*;Q{WM=wD}2bCupSq
zZKR;WL2~GMka(Ew;%bDC!6Tfy1I;ctt`i>sS4n@69#WaUKJ0#cQQ>~l>A_QjUh`k!
zE&n~~9%l_6G-I*#7-?1*=dO=WCnkf;e)pRvx9VJ7rEN~sO-OAPt-`z+AmTRWWngwb
zv6j;#*qoCfvy_k-VE8_az=Pjm8K~rAkWVJ3+dwikxt73@X5n43nt)sUWn3~<EOlhH
z4kUc=`uWt=w`vQ!g@g|b^ORrnba7NGr7>H7DutJ6%$~dv0-1@}nzk5viFdDHdRw+g
zU6QiuMsM44IjFR_bq2M^Rl=z9URqIkkgAR|LMr3e#h>rAqgI_K;lwCVJM6(*)f#VK
zUfdjhZF{yh>B;RgSN9;zx{oev>-Dl1eS@h?-M1HV+2m-KK`B(K0!+VQGGz+^XqySz
zfK5SY-(>|n@#;<#1Pk=bk|`5vd2n@^lew+D53|?AKI^ENfF(Zqnx`~j{t{NT@Dfgr
z85RNg%z1}Vj<!A0hvX%@EL=!ZN3Vt9A3w|8$I#{(c7QS$fc&86LKs(1BIr*xZD~t9
z(VpPx&HKyx(sWtzZ`!^pxkRht!4;vI(;9&gj#G!n>yPnwyDgMbHPgWOPjO85p?HHx
zmIBQEzh7rz`e6W-d@$|OnLUA?FxBG7l&rMSTXBcfx+~aOba@DNsS&Q%Iz3QkDXJQi
ze4OL%X0me{k|1i~x2N4i6km^!CHj2S2QxW>eBFoNHMk8rYgaox2?y2Ye*PIZ?_S+F
zYOKPMeUfrs_@jh*fQ9lzQmGUNy98?}zGCHR9|Yuq6%p-0nTC=gc->zpwC5qn6O)_D
z{wgirHg@=uhwz5-qCOSZi!7|~OS|Sn<xaL&^YJwd_Df80aTvngB7XN%h<ei%?NS<0
zKJG=79v-ArqM^#~eUc_W@P#jtC+T9POP?5bv%G(2|1;62=8dms1-m<R%RXze+x7z;
z6xxmp_S@qE^|ml$oxBHh9mrJvFV7-oFJ^<C{iF3%W`V92OfI0BZI2S>98~7F-=C41
zZ8%v%8F$;EJ#2+V`7049YWb3pV&qh6tBBEJy1mlo(d=HKIV%{Oo%ThugxU1$(Pr6R
zJ5%(s=i36#ensa<-DCnq8GiY}W~shy5Zg&#rj#H35#=W9YC_cKe=vIpSQaa(W12A8
zF~L8d{K6WfBza84o@}s3SrTEu$^2ao5oVZHV(yMw)Cz6d3_Yofv^dY30{g5yNPGhw
z8)q020nP<rT-H}22&0iIIE(hcsH?0NoJbZ3Oo<FY-3_@v-N>eBTKhI0$UP_kM@s&{
z+Kairagkc^kOH}GQa=wnBX_EA!mq`Yo*H;}r}QQj5l*7$9T|(ZlwHkRiLQD`5#?qs
zBVlx`-{b1<73m<cNWD-*nZFSr={bxE!P{*5JrKpFsoHyIWqT!G?-t!~!YPADNnfK-
z6|^PKcd<nnt^TR*0S7bJO~}I8N`Algg{yb8F7Ds_`~WjVVE=wWt+2Xnp@HYjb)oTC
zhQ{A{CwP-DOTqNbKMe<A+5rhee(=2$SH$=vBKfK%K2oi^4Xx21T9@yOjWY@#;ns`#
zG8HK)juisM^S3XUFfp=U@G4k}7J*JuZ|naMsv~PKLma2>C<kzbaqSi55<?t%5L5Fz
zG65jNXY0wSYjdZZIiL~eUkIuek^m%!h1OAlXp>u}H1qXgnKSo=Mr84C{{3|!j>?uU
z{}9snVX}u<-)|MIS$vOn|C2OKs2F4GK4||&Iz5&YY0wTs^h7WMLBZzNE;1F?Epq;C
zU)#mcTSw&u57Gzf1x`QDiz*=Z4ndr@|0Re)Z2)x@@|a`LJzScd7e>_90DeZ=dLox;
z<#0i{IuiRWGye1mLwegK1hjVSOdEk`*>>%Y=#@Qpp*w)CHfjHP6ir9mxwc`WKm9O#
zm=V#0;zIV1!{f?LtV^gf%oDCvL8RQ6fVL!7bP5IDHC93s<b@7w`>;le%j68`+lv1*
zCTOSvH`VqI%YN%d9B%%xBrtMRgYP-#d}h;VjTpm02~@-omH$aM@QO6Yc#hpSw}JPR
z(v+zJhsYoI2@2v6Jf3(3hjm)!bMrTUsayJgG<SzNa~AnLjBM<Mfs#R)M#gHBUF<Xe
zF9l|R+fM)tk<s_bO|Gs#j#^eBc%uwp<tX-P#omlGzX!sk!ofJt+RXg%YWTY#Q-7XM
zv{G3U!RCy*R{z(=9m`K|JnD<=x{Zwd%aVk;y{G)CNG>XUKE5i5z$A(8@E=)^+FjT^
zx&+<CTYa)a^iQC4{_j7iD-^L?<V-M*q~?v`#)PS`a<BnRun`Kzyr%OIv%6=n-Tz5j
zh>`tA&s2PCckV3p;+-dVYR_z^$3{exvJsO8<|veoW%Z%G{=Z|B=ij~_&Wh|$EHv;Y
zo9HTka}>!-0w?NjLQqN4PzT!g^)&7QC!`-H^^ZTYCIg1WLpzYs6FHz(R)g%9E%0LX
zvlIiLwqZKfeaMg@hYdtJm5}jVIagPz(Hp6l-I>b}9^-AgI|Oaj;v$G@`X8>exC<lm
zHc{r&FD-K*_>@M-QNSCb2MbztPwg6ePNi!B_pbRU>A7?S4SQktk$sxIHv_Nv@!CM4
zc{NQZWI7bD`V8?XFufxdiugl;oS)zl4ras{5;NdIubf+77?gd@P~QYx^A!_eTlg9T
zFYyU+rbADX&G+@;9x80Hef`FVYtVme(Zf{1MC#L+8$+~Az2?e`=y9)O9pPA+uZB*H
z<w*NGsc3K(apocR30L6J<pr>&R$xuGy&1%?`p~fEB$!$A+kdKuWy~WG`&GV{DERWK
z9^!9M+KyNP%?el5YG}>amR}<ao7sdg;6R4Nm<kJb#*%r_Hz#<@HWW9`*40!V{Ep-#
z(d2KV`C2U%gn5WAqdIOe55jJd{RNXS?(6jZ0g+Q>JB&=P+LR0_wt22EG!6e`*biu)
zX^tp>OBkZBPKFvz)YvFJ_>({l5_7ewSuLvr9``pB_O;*W)R<9P`rs6)lV{iRU66kW
zpZLO&+P6$e-v)4qu~M!+%$E_ptw}Q|EdZ1djpd4ey#>MhQFKgtcV!M>m3Fj<L684a
zms%S-iav<Fmqm9e&>F;+qS;|QXF2t~kUo8zK@zw}bVN35H7W|fY|^mt6WYSzT1xD<
zMnD1>Go<%EnY)?4dO+a7ckD%P#{MjZch~b0iZu_JRD$2x%=*kI$zSVjnyK4kF0-<o
zVty?MBOvjKs`0{u>YBnMI>WLDtKCBOjm~E*ZvaOY1FFY#F-!={ruQb~@p^yFoD+1w
z-9XBrL8m<E5>IWxA8Yp`D=TnLw1QRx7MMmAe=?7D-I<4=(Hb#Cv7$P1BAe52`5Ecq
z;`6l>Vd9Sg9v$rp^x%kD!aw*t87(q@|6CT@<<F9Xk#r+X42<hBqXhmO`PJSW4T~f(
zkalS1L##0sxJ8eeS!a0SQ@{cEFJF8>yA=o;&^wdO1qd7epf|$~glmT%6*lNDwej8n
zFoqCg2aAbC)BUj#<sq`z)}LueOT54%>0N~%thK*C8*eWBs3HX(4Gh>&PY<cSY0;m^
zvgr{zn8beWbJsLO1EL*q;yz~3NkPmz4gV%@hgjc;{JcAv(>nwDYq3c1fqDt?ix(r|
z>ScS||L#*TW=llbjL=3FcXN00N~?pT=b$skue!%|{f&oHN@2aVxeRj!n0!e{`60(3
z)=R&;f*yN~TA%{Xr8%PNpK<bb4uX|8Itwr{=Oe0vE831xXA%E&;%Wn&CLZ<yxPO9`
z395f!Ne=F2i^VmQ=K8~jE6TI!y$2V^Pw}NXhgg~cN5Df{lGYQ^DF-0LuWX^?f7z;x
zz}~`-qmD0&Ytx&)Lf{65lOCbAdv0WrY%AUr`0PXnInZIsbj-cGCErYt103Kv8g-ZX
zKHarv5ToHvzh6RjI--FHG@#!Dxw{BC>}1&KlhK!x&ABbA$HQlM85hd2-^+)(u4WUN
zBGJy}aytF4d2+3?hS$pT_&;<wpp{7)la111WjpSqC9XSxF0up|W<vh-B)@d@Sf&Bx
z04GItX>YT$uW(jk%&#tMafPLyR=m?Rc4M#e5|z-ZWL7Zwx<MVEveGiP3K;+mnPE~!
zx{A18)vzC&Sr`E4Dni$YU<ZsV$&6@=csxtzHlMy}az5;3|6FLBenQ<=(J$a~2GZd@
z<1OTVgqa@VcE4iQq8fUu58MZgr9x@WX1TxIe^_m`Y69E;n`aU>U@um<D8z3&$22&{
z)UjcMp?4V5L_wa|Yxzy4bg|kfzI<RYQ;f1uN<Ree9uV;-M_-D#KQ1Gyp8ZUp<&SmO
z^<^^wXmSBHL#7nM3La)_bI(j`oL%qdr>5iv+CxitahHQh!+@tfN68qaY3tj%&>eQ!
z6!kzL<_+OW<zCEs@I$^kH{J8|e=G_#%sxqz?JW>_SnuJM;SNyG9gyotV~FDjcRQH6
z1MI%Qko$wtSPvQz<HxWMMEQP*SUDGi1Sc+{g81q^FI)WhN#~%nAv8f1F!esxU^w+m
zB_#IHwx?1%?pN~sGnKC;&=e4!Fa7VCnAZm>XJN&Dp)^Mdr!bs8kmt|J7JXXpa+Qxj
z$|V|NKg)gR8pL_-zIplHCLhf#5vY%VvELA*1U(^h-E&!Sk?CjYOy-S)7VBw^U|5?Q
z3?<j)?bnxR0JUiOOhMLo{~gTEGEj$4ejW%k1r&iNYM<X&w5h1s5CAs4ng9rs5PhrO
zuaWM<D|~wQyx#?T;JfcP<I`={CKh3$t|R5{R5j7gd`|^Dm^t!G(7R}#;qfe@&5B#D
zBIP=POAv#qtym#B#wR^{_~ml$;>P3`5==cMZxJN`&x;N?)U<8);WV|pyokldxdbOD
zRONn6xF6pizZBqx${s}{{egaqW9i;;{9Oa?m^XT=-Hr*MJAAW&Y99BBT(s<pOZEsI
zaq9tCCb)l38>{Jt1vb~X1w-4M<78_W{OQ#-r57e4qabr#o)AD|gNb|}oajK)zI+$3
z+4`jFIdBP)ZiE%ZcW@sg!kftw6Mh(xL66Sx4-V`rWs9WR^@_@fS4Ntw;*{R>vP=wn
zT`G?G^NweWeRS=N{UF&25aTV8Rrw8e{!lcajtAUuBc`MHcRbZDTxq2BC%_|@B_^eZ
zsJ$&E05|{TUS`~2I>;FUw`(N4N6Tk4BtfFDi5pP?G81ctBL%Hzm@o{6^_Ey0aS?!K
zo+cmd^0A`G!PVon22~eb#Ly28f<8Ic2!$-i#=UGs^GfNx`x&L~flt>Jr^P#4g;Q4&
z(-roX2UgBy*wqvhwK**;qIj^Ffkq>z7gJ7Z3#i0;i0*(LK%V}t&IU`SZTVsEcWFj=
zEz8?<#1~f#M^Bo}p&u0<y1HbuU6=+rH~yM?B!&fdVUPl&*<k~WU7UetamR9f__8?5
zQgbhy*whhIm3532<oXW1;y>SFd9Rntr8^_)Ti{-C;|Pa;rXat$fRJFH$41GX9{0c|
zCxwDkOvoicDsEV)@4JYAKMdD3uYZhkM;Fb5O;#mhdmxgCBH^P{z%(&fcQy-k?L1v|
zvxM@e&^oEspV!fi5SO0ydN2HFeH83$P_JE1F*1{<p6~DaPR;A#5@-!ej}axaW9v0J
z_H5gGT8YV;50C-`+u=LROL%sw>4vWvVU-K!&o|gIFR2~@SEU-L7i&%Y(AGZp?A_Cr
zQ4T<es}0MlUwv3|iiWAiO4S0F)JGeWKOhk#iO|do_<GWhSv&$rz5_cSDvCG{M_%a0
zW~i2NuuHiaqQPDT1pBzByO=8&-VpHUHxjIovc70z7*W6X&_*>~<x*_M9;1IL$(-$^
z{}N=$XL=J7dPr}Fim<DiElTaD^c&<r)sIo?tz?0Q4_`lQ<!KLGUE=onb+x~A(ZFur
zC~dZG(Q=P+%o|6|v%W0dN;_nP9)d!y(0K_V@}$MPcmT#)BZ)8yMGRy|AVJ9Po8ka@
zK?!HjFONbr0W{P_i<WY@<zC`2Kb*que*^~mFxa~oZw?_p3%=(b^9W}QG`)ISLEE$m
zFZ_6Sj(f%Oz58U=?(7AynbA?K6o!TH4t4v6dGjYn&=E(-ebj+uBTq%zj8sQN@d@>X
zhVMr#2245(sJsLriyc=-9Jz-mPPuYP1Sq>-DO?Bd4sD%=IoAET5La3wBuS9POKVRa
z$f&e`vVqX#ByK`Yt1W$PAzWqZ;{ug|>EGw}?D(5}e48BDEecP1E<r7&2P$qw&2jss
zn#8;YL${VG02Zje92tWe&cYd)buUX6-gyL|%TTv<FUxtWTJk7PWuggoiW62XPlWqA
z?LCVi<M=~2oj_kfqjTwk(T+|u9W5zu#Q$L&xG+?^wd-itl0DV`KFR2(-AVcvvpHId
z<&3K3wCPOmxx#|MowDiV;U}|8-sfVGZd5y9f_qLU2~Qqgm~+A+c;GV;mrW`PkN6Ym
zW-NU)VIWk|wH});5_nV0p%zV3aTditk419m;}5=+4Rx?9NAX(M4fAwbJM<ytLr0)T
zgrpG4;k#~{`gmw^gS$^`r9y?_gdE-%lCxxpYWrQ~Akzg`_udnSrWT2NW8fr;RLYn!
z_gFpLpXk>?1UXnoAL0e8+9Udc|4JCi8w1v!*1er=gzpB>dI3b3u^}B-eYVi}ETXLE
zQme^tW_2GX*yv2*PmAMQ^ZlIamj7fS64l_Mbruqz6p1w1N3`co;UrPe^+C1n#N6ep
z%>7*=??cxk`;A&ZxN;YhvYL+G0O1#+?N(Yi-rL~8BZc3>mR^bg#n|FVh|AY<TDXW_
zdi!+Vh%ch<LQr%aX^ME-uO=6+%`L}`4lCd$e=?|0x)QFSvdN;n=pXSB)=6h2N~OG5
z{(vi;a5E{;&a}zs?pf&IzEDD0ZLuKH=3#cD!v+oCD&FLPc>{fq=q9!<V$Q>emSdvj
zVL~I$l}H62DS$j=i)h86;<+oR%Y(?%0@S8;hC0R>MjCMGJgbJ-XEZ2Qn4%w~eRr(u
z66M~92%vkp<0RDr=SaYaqBjsd;BAi9_LTGFh=~XXkK?`q$_qtyGh(5jd5l!DISOwo
zY&(XhhUk7Mi%7@ES%Rq2!M1u6KD4q+^-`jk(n}!PsAZka!#W8*+<$D!fd-aaZ8m&h
zLqD8f?exiIWBW2~KcsJ?F56KQg)(4ud~bL?ugBmE-mFf5U=;0#SD}Nx({@74lt?c$
zRK-qIg8Td4O(i6LH&eHAp?pS<7%WfZ`EEG<`&yIVCg?pIotb*FH{KehSB%Mh7@UH{
zlUap!voH#Y>cn44^us)T{4>fRw|wc;7pRzS6$b^uTm<bXp(S@bS>QdS?I27{M8Btr
z_%-PHwaYLkR$YaU+PNxLKfka|xQ)TT;{$w8u1VK;qG-pN@sni#j1Mq1;I<?^8E_$7
z#`mUxO;34LwvcHJxyyzL&=kk~J^bg0derjx<^jxXxtAxaC~dT|UfgjfZ<A_$jEu{y
z%&llpxBw~_ai~7yE_mrmBir6N#xEt>A72$QzSLOxm5p}!BCBH1L*VkpTLcTIryrh_
z<o+3A_>rkl;+yCAXU-p_`yR$1XyhzPbj`S4eU&=<d!0O6D@^tXX$z?=>2rG7P}em`
z=sjjA{ZGaCMA{0pv6%28p<PkTvarhyMAHmtzCG=b3M7in*gaIL;1-T`eOtnAq&D!;
zEt_@<m@LSr|78_kcdynp<W2K_yVu}7q5TdleQm0AcdRwo;_T{3RG0J9!TQdz8M_KJ
zD_G(yM-Up^KpzZR(qNVCUCdYLPG;YXTE|STQX$-nA`$LVKjR%L2dJ3GD+;ETQYsb&
z*lIqsXSCC<E2nPGK~6<z9F%r1%nXRK9#Y(4SBZ<KXA>DTIkUIB1y%LyE1-P-S~iqD
zPrKwdAM^MT_~RKR@=9MPd+eSEiZ6Q~F%f{lqw>eqe3{JGGGeqz|6pu2=4p4>o}sM5
zN6m+8bI<#J4-8Y+8wa1bHMo2A`f2C7ge=ba@~kZZM61={w-OE^m!|J^Bk(irl4%`i
zq}R2SC{n0HFW(WK*dZnau8tT#w9jJLizzJD2kL}Jhxuj^bii^6%T-A*)=J(+OB)C~
z3|dZ7t}Z*jy7WMP>eYMe#C~Fhnnh=XeZ}u|vrtxF!_Hdkfo*GyWP0a^bj*>Bm#s;&
zyku7Savd*@`wG`7>25fWBfLQ`^}5uyxO2bq-TDv5d^EgOu%($7vBWDt6LT~u)!9p^
zUoB{blh0A*LJi@fu1~s%@eY4SnzpR!5ebue;}*G(%Y->d^~#(euA>1N*n>cP+lj34
zJ51Nw^O8pi`)^7mKTmlyxTmbQ@r~W~tuYYU73QzE>B`<&G`WjCDapba@LlU)4pK!U
z4F--iI&EU_bl4gb)4v&SQ?g^*J$m{@Q~2rYS>gd5{+;^r4NMH}sQMYmqz}$oi@di1
z0S>qbJHw<}|FxF&;p|Mn*_nP9QypHCv~X$N{W37QfX`YAJtQ%!odRiF<cw!_qL)C7
z=&7eY((t_Ovfg{a63jkzv{*unzV>Dt(cF9;2z52g3g!&)e0FpoqRP)C{Igd!U&eF|
z^f=k1(=|HvmI_<7U-2Kn8OIv&x<aZtnJUK8@2GNUs>-4nR`1m@z<6SO2XHT{k3-(f
zMMbEhgz9kh-c41kjlm``6(pzl-zp5^OLvW_R(8=W%x!M3PvLRo#mEY_DqoEHC&3&k
zP8uEoQwgn<9tWsf6WqCQLbH}%72-a<t)!%zlpafhzUp(-RENWA39~~)cj>=^af2%c
z&#Qbb&k7_;sz(O~Oi+8WR<E%5Jr&j5OB>97iZnEACU6M_5~znTNq+Ru_YdL^7N((Q
z{^}GCRgu~^(*G44mIEsnX$|z8kP6s%Nv<H|IhLPer;mPol`Yuwc}nuPctp&L<v+6l
zbg_?6T8xcQsf?^g)-b)6?v1P(HH^u8RQ$4sknJ$u^oD){<`^&(R4q7a!;dpZ%JVkm
z(SG)8T~m!62D!799)64!5UDxy$LYB@%VhSMV;DC22#Fq{T=yXYZNe^@9nh(n8E*G<
z`Dm6NxTX4^W3HWozU|!<$mZsmsef;({57z4IGBg4O0$8dl@P~We%4ZHBC!;__Bv-b
zW;`s{OE9PNQ!gyEj*z~_?~5LW3~Kgka}oKH!G0|P6w1bimZ!qMizRmxyNK^|fm`@!
zO;SpAnIbp}I7?w+30-E9{vn?9syw2CUX@?zhl3NUJUzO|Li*1zis_;R=n13<fRj<m
zC`2I~A*q997#wyM#>n~HQ6R*L(!;!+^qZz2F`2O|dKm@9Ku;D`kU3?b8Gb=cKYBCX
ziMPpc1L%Q2`nLMC*p1(7Io<of(j$Xs=ZA!31UXzZf!1MeE)-WC-Rtt>RRvn@<u3H5
z8zlkECtx#OQ%^2dO<8?F!Wq+7N~b<`ZqFSZx$TX%p~vXUB_KMu1<s^2L4*F=QU_e*
zOe7H3wqOXaw2h?e7LfO7q@c4}h!P!d$R$>nR|a|XP9*0!KJ5h2Q2V~MCAf%WL2>JZ
z;i^I7J)uK_^U6@MQm1(?DbZ1l7%9-dTbc|dcy#1`WG)YVd{zwYy0XTQWrZ1*II^1e
za)8zl&%3B5y*3;4r0X2u^nbFrG-{9PnmK68_hq1kQ^lUGKcodbYFm?Wta=57&x;T{
zDiy(SG0;pgq}0q`qpOkE5s}1AHrf)%swFT-AcuPyO3QYWlab(}JtBODO!82YT$WIJ
z#_$<h>|;`*xRoH>0i>TD6@B<sT&ag?3-tcclYTc^9?SEK7k63Ev?5KnVWa$|d9l0c
z!giIjfGbW(9=J}j{u|PvXkx#nB}LyiOx)+!ic@xQda8C;IMYOjlSWlMU&?l2ToV3F
zJ4HWz*~5mI2+Ik!OXcgI@2*y;OV1Nif-i@1qjJx3^YV0tkn3yBi}9MYAn?&;#yj91
z@rL9gJ$dPEL*Wy2WK79y3#>skh{npns0+qnzH;ddR?&u}#A3#+Lg|IZ3b^`uoyPXj
zubfZ?rL4G~&Llhxzo#WW0oI+4Uj7_nn3IDVl9a)2%aaEWBK@q--u2ELHnD$;@m&=E
zd{uu_qh(pu^7U66Fyn9s?X}6@v*0+#!N0w05KTxc<;=<O3CFIk0edjVG`v_5r~AfT
ze)Q4%DD7Pa-vUJpqi4vXmnr_vbn;Yu%Mjct4}M!Kyt7r@yR3Yn=#ppf6l3S!_=bOM
z;2}Z^;}OjCa$;eX7df9)yoBCZcW)Jrg^t~Xv$g9g6O1kJ8Bz~)mkM9T^690r2-zPs
z4#jiEKhdjS!+{SooH)GXflqm=4Y=oRET`)Xwk!Yoc35M_o^;%@gWE7^Ho9lH&pYc|
znjVi$rSCrPAKuj15fyx%7$oC=Xi&RdM9w9yYG3=VXu6b32L`DULA!ri??JG;wnuoM
zrjl?Aigg(hlU@ToTn>Zrl=`48)qAC*tmkbS7~v@K$LM&5h;Bb9g-d<h=C`_|waa1>
zdR=cw7L0^O^DGlnH2?Ei%u(P^rq;?N%{;d70eX&Ttx%GN8~D3?l^)8uxH%6SxS8`_
z+`dh2FvG?87SXhk(tW!`ia$>LD@C^1D!m<xqMhYZR+st3&S>(LYZUs~HvKDKR#RoT
z{JqobCAa*IWi8%iIhbY9c(SvIJcT%2;{l0P+XM%%CV_Kfxrh>*a$M<0oD!meCieK{
zqD@LWzWPvxi(mdZ7`d!2hUx&V<GjDN#IEfLRqW+#lj<g~zN@Kw7Pi~sd5fC)Ba~Xq
zO9^aT6v6-`w0^9TB1Y;{M@Ne{G>J1YT0*sMu{B_&b^Ix+`0@#$r)GpvPtE?~rfj?k
z!#7^&wdxJ!1V^SjF4y!349qeqB)YduYkL6(m@6B>)*@{4je-5tmM}0^eZ2EY$K>;|
z#4(DW!__sJx74I{`IEIZu-}duvsUXz&gHB7_8`4HYvu5}>F-e-?0)YOuK8qk@vpz7
z=n5N6pU5dxxxePyJ-l!Wn8?SeZF?<j{Q98OEx+|8!Ti{coxYQge_iod{M=bq^!U&w
zvU4W6=VR34xagaMlKo_P>kcrcB+?%Vo0L~58&xItRNT_F92@Gx>&~6rrRG(1sN$<#
z@x7kyG}m8*+);l}+3Hvdw6oqt^761E*rpgWWZ6G~IkM<cH;6E2(E2G}Q?Q`B**CW)
zq{YPD-k|L4j)~-zGAv^?zIk!;My0Mv$G7+CzKG1Oh>}C1IOif)o}W{Vb{gDzpyE)f
z)L+Xxc|+aVpjz@0Zmk91jSTf9^8C<mek{KIdYgsi?AHK!LvcfZ$DC2;H$8v9%9D_U
z+oggtF^1(gum^*<zoZ&3ZaVF}SmyFrbL%Xu{S>UM3r5P|D@AO@<%!cbxvu#4h8tx0
zL-@X4mNz9+cW*jrkbn&cD1clB#o+hMcKG6e1L^rD)7Ms1_^;4?5p_RBl`)}>z~(!V
z*HKcNWlMs#hod~TR90S|*12Z53sgt~HuKE+Ggh2!1EVFS7gVg9TiKUZg?a`T(_~De
zl!M(kDHCAJ290V-!Rtc(WmO8Jq<Dz$)ytV=i~~2lPZLJ)((%Rc7Ky^WQ+gxMjdLtJ
zMYl0$9i2idcuH|JnFLEr;qqJX_Z3VEb30W|OJ(i<%%!;EeWfCCq(afBK%GYAeKIm7
zK5V1YsC+~DCI23@xI#|trQ$}}$3eU!<QYT%xeQ9Q@4^sM_1!%R#UuZh=Y}vr1k`5!
zeoV10hE<T`CmEn({C*3i@jUsuX!l#KkI2V3tVV1?4|3yPP2$Hq%Qx{7dODj<oDp<b
zOlr$=V_~7)uKlqMq;qAw{qvm<b%V_`3Y*#J3xC}>C_EuE_I>+-+EsJB!f>&zy4~sh
zjJb|nchfzap_}cv28;yW)7HROth4W`{R!GCRg71N@sAk-Bt5Y97%q+#u17k5zKO40
zE~@Y=*UBo07F_H?KDM!Tw`QnyX&NYcKIb#xMQlZ1xN(V7e7~{kUW#rJS$I!kW%3J}
z5i@9`X|Pp;U2RzUJ-LZpUU=b2(KGF$em#eYslZl9w?ElMamwWJ@}SY8AG{>&SmbUN
zMZu=nzD35(O3I)}`k(zkGh&8<|Ii_MjNoov->7Wmi-Y>2p#CjRq6ifxscU!<A^9{K
z<L|xoH(wfAMdXUKMYJD{!ymj=v8$y$`_HSWP{v)qT$<b^cK+OwI0v!Ys=5JDix<tj
z@6|2mP2hr#-7D=+Is4W6c8X$uEh`_>K_{Hx0v;#0H_<n$TREcMj3iJV)^0RSC|^<2
z3PnPDLg=`o*>dCdCfGZQKkFOSHXMno-cBoSAAwYecYopt+!pq|9ThLA5D7QmC;0ch
zVko)=UbpxTdMoyLlYZPa?M>Mn+O&UnfEfz4Tf6cLiQ7!Syr<KPym||uIT46^e25eh
z$|6%mJ$_tU^ILDmjE4gX^B&ArFW>yP;H(Y>x4z4Df30_9YYG16E>7=!ie!*bHqms{
zK8NR?E}r3hPA^|7@>)7i&YQTmDCN(k{<BPA<C!RQxacl3=7El&wc<*wmACG9)C^ID
zILMeJ#Fx?fxrZgmc~;iRru+G%7Xj%1$%hrV=sH1;maaL20|`C|khpTZeyP;|YIU^$
zKhWuwF-685DDTv-S!uTo$zjr6qkCd%AoBm~*gLr6r5pYI7l*eqr7~6LOaSN#13`-i
zxn0qwE}^X$e?^&E@l1r0@^}6@Sa6bTiTv+^{bV~FK7Pva%o8fl#D?jxJU~0I%|NIq
zgWfU3Fz@h7GSj1```1(Vm!0QY;s2OJGFt&N{VTXDJ9|TpQ#_QG1s#4-(9(kV)jsiz
zKIdBcK0%Qo><;GhggSQ2<JPIPocY~fSx;#LwI?kgDskYMjN-R24aTf0g(D3gE(lB>
z2u+re9X!^4$t3Lthn%OE`z3c!?0HS9KY&hy6i7|)7;#M;988RTQy;Rk9Dl`3)yO6K
zbdvVj5t_>Q<DSFKU!fK)DLcKR-jJu8zFz;tI^c)mjIq$7o8Golsmc1nSHAS?CakJ^
zCXB9BC?-lPt-_wTbI^jl<g8k2@aSB5-fxq69STi?zi(Y)e3pCA4Z2z`*aN{IiYO-L
z#H6tL$m1ZEo6%uibRCh<rVO?kBP|s$Qad^M+IpAXX3PfvHxAJ}dxmEI`=v(3$|e~$
zWKgQf;`;~jHuc}ZJA~vAwDf)$4huNEO&`-Ven*1X_mXbq>`xMf*t8u;L`Sy71j;Oy
zM=|iZP$*Ql!e{H_#!uzt^IkxxIIQ#n*5hV?r)W&X2%dN~qign`z{pRJ-eqXwQkH2q
z@-3R_)_%~G6)%LPF(B6b(%51D<8teAvEg-kA2=l@C5oVz`mgh&2X^EMe;}8nG+fVZ
zOS-x&?N^>Uk|D<Ygn>e_{nW%e@?=gK#CX>2bh>Kwb~^6af4}<@pl~J1_7ZzZ%wX_)
zD73j^$B5K-W_or^8X-^13*!f+!*OF5Lj$Nri;H8a<5sYR%R2*WC5FFGxXuiKzKaR$
zDrMzT_tar4yl+j(8pGJfCQx$2JOxJXK6xjSwA+vs8hQu%SZ@9FI{43r*CRSogr~{X
zE;&Bso#Q|ERQU-0o+$iP91T4|@}BDC0n9lRx^p<AtZ^OfMVg|G?WgviM~O47Aid8_
zKtbVBHfpp-^HDs0r=7oqt3;00!y72$20L!ve4O#Z!U^Va8a)U(U^V&c#-C(RWQ3vQ
zu0BP*wbqW8@pD}?-9o3ke{_Y566ojp@c8DarQhID=9h6R&cWOCw+M^>i)Xmxf%I<T
z+<ljc{drdh^3K*<P|idqPYm=xCs|{Kj9na!Yn7|c%i!n3@W>zGepkrTX4aQqvHtE^
zRN0P`21tTN_Uh)RC(!zWIm67Wl+r5D`)-<N)R?xVpFe5xUpKp|MG-IS*om5%UaQPO
z6P|!AQT`1|9Y_yf>p@+!5>Os+N$9MLChMl9@kj_1?d_AJp{E4oYn=`Bt$Fl$e0^c}
z?aAfl%h4E3hyM&sb7X;HU_C^T^gZB*S7Y8u^ZYCY!}63WxaE{WKRNyxCN5ndo|{JI
zJ_C3QqCM+T{bJCg^!CjMunN1A<bN33LlCICt7S6cSl;gjo6yy5_Te#-(Drh|3htmG
z^8Bo_h0FqW;MAFw@+{nhe7MY0&cvZc<l+B-dm`E``UH81;H24hf9jAxn_e?0;aj<~
z_S-5i-gD_}2Taec+$)XSPexyzGjJw+%^6iejj0HD`o{o)VQA@NYsO;e^b$Iar*-WF
zD<nY*dB1m`Bqk?5!#w2;tS>n6;=G2`mJZ7uWLiUKEygaoSZrke+n7jb@=sSz$@72Z
zN_Gx7M9ma61)XewK7T8x(0W_hBy2!Ca)NftKVAfJ%?PikPbi1xUfz9~IzjtQ^H%~f
zIpdGsCkZ5|A5pE(E392%9<c7>c^j0x*)K%oV{ver?!)d$*6GH`nz}h52F7dQm;dc;
zL@1fj<5=?@D=#p-NZcL97*;qIyBSP<h#m;0sVEk{Dj`ALZ-Ure-l5l<wGC@L{-5G%
zvG($lxYdpgXg!Ly?c(PaS>*f)3R@aOq_UH-d^Iv6$tv%0jh?pF$>(QitP7Cz9{$jN
z?l&nY`s%+Fz!XJccjJBRs(P=-l;}Gs1TuUp)O&&Y{B9H%W$|eRFb>Jq4QZcl=i;DC
zOa;9?lPMX^QdsiZ%1L;7_BS>cJgtbW+j4m+0{5%#pQCs1Z7uS2Pa$vd)QLh>uz!Jv
z`RNHVq~cVD1+3C~Ai0F>SLl`6m!fehpt?D!Or;L`*N(`TeDo`lo0Kf*RGE4|2`Z<!
z^U2dW<ow^lqqU%$&#l9xvQ5x@Eq?pwUS7Et4c<SGS%K6T4U*i6Wy8{}uX7&%wFaT(
zi;hC%E6iMIRpvsC_Id{OFL)|R@Z<8E+CyRhGfkw7i}0_rNhFdpmCTb<GmbB|S_YTt
zSsm2IK|_Bv6CkOKCaM8WAqjqhahM6KEZZ**<9g8u+20Y)r9!iQc-b<yN$_=ex-QD*
z`s8Ahjs;worFCWZM{$3FfrQBM;PANyu6#QGI@$O{t=;6&JC<u#B!GrLX3&K2HzP9S
zCpeHq0uV7z>*4?sZ@s%smjlVyUV8Cg>L1WiK;)SH8RJle$r0)8w2tP_-CXkDo_82y
zFu+6X3BS<g*DGH^50-0(=(pT#g`O8(gK;OF<SG6FG0g~PU=fj=>VAVVMKqb_JaMjQ
z1Z*I!&fzE5E81A%ql|RO3yAXZ$=0??zLMKeHRC2ho%naV{e`%qd9u0x?J^1Cg8o&v
zwrgttGIfVdhsnLiEa+O9JTRlYZa}B|ghz`RY=C88*HrNeE4y=O&s+39g6I9vbM1{R
z|K`s~X!k)KbaQLdwY|pOQgxtHn_hmc^;@%7;ys7CO$0b~<DfZwbYvqEaoTQ3@iZhk
zeNAKfHlXehSFWA2++dn^|9|EY!1T<#_?$~#<GDCbIWt|$FmdGhiwtG-0*4j!lpESi
zW6VM18El;a_;1{FR{VG6{h8*88SpoUm?c#J*Z#)yk<Vz+YUS^b*4!W^tKoX{l~j|S
zZ3#E$zeTEDYh>Jy=7p2**2mU0?ynm4=cf|pD(@x*v!r42b_RJ=`87bg`|pZ!q*myK
zBTg1fVmFX{qWB5!g=^t4gXJ-+qnDo<4tr?`v23%Y#hW7~c-u_Y3+4Ut3(6YzmDF$Y
zk&tk>m1L!~Dm8A?eeM*-#{M5JT?ciX@0f{qZr7{3zjyWJx;jSn_v+ZN0|5ef_T>D`
zyG0qxN}<Sg&x&*8Y(YJ}<@HRjt99Yd-uf?^5|aC&>~6<;C~-G9(YQ%sG_8%EY37Pv
zEcQ0(%t?3lfRHhU#&e5mSfSZB)fZ0+sZL6GU2-oQ-HQhE=bT;`{HLgAQ)oIm7+}tB
zn%-R%uWec3A5*Z;s_n_qn<h1B?d)W)vj}HY?p*D?u5WrbL+9G8F@{Z2eE}Q&p68;r
zfi6Cv`c2CDKl52&dM=%f=aTPv-jQ1Q6}~wc<iSw#lH4>AOuizw^1`BciPBcBnOL{h
z4i~km$4{?Y)^&_e@DFnUcAW4Ei0tnklg!S?^wnxTPSZ9yI;rU&);kRGl09qI(7yfz
z-4}nkhO8q+PMB75BB<${`r`Jb*P<1-QIha+RhbfOz2)+joXm2*>i=mRJ-)-hO~-4g
z8TA`)uF3<cw7%&_8q}7Jx4EZoR&rRoswkN(TejPeSl|>Q5paQDEczK01Op!=c#j3e
z<(s+4c4e23kpB(LNN7ze9XU%9N$;O+xaB{`Rm!OH7>FBpf~_~~wQSJm3A}jiPk8ho
z#VA|LO`+R=JTgxu_wBEtAe`otnn4K>0?T<V-H!h>*5OH85vwv$h|8tKEeK;Sav96e
zT);ZPrMpqAS2`B7S`<23{>-0Pu|&VpzI-s2sBxXPIRKw(<H%E)H5wSb(*UQZ%+<Zf
z#}5MiXVVb}G=9zS;-H;n>l*`MPad3s>G0fH4eHpuDu8tw*@_5@!T<&Q<<ezrQRDh%
zV<5|Nc}pXI(4{?#d9(MpJ44gt_VNEiss_fDfNeAuf-i3;>gaPBa#d1-%f<52a&J8g
zeap}NwDk=-<&!)3g%=9rLHa8GF%7P%pDbd%nkSTelGBG0*D6~MaQayOpEYO*G51Q&
zibz65Y8P*W?L_*&y6jVIz7%n6ev!(_!SQa9wjy<bnthY&`A4Z5R4=22QZ~0S#=hA`
z4bh}&qqyiK;lwHi-T${2*ika~^H^h@pSeX(M1?CYv$yvugN>gPtZ2*zu0J00$?aw+
z5kp}sY|O`Ked!#VE(jfHu03?o$cL_8WF+6^`Sy^5{LA>X|0gsOnm)}6(iJre!G<X4
zhUuw9&5YHFYeH5Mm|?Rw$_(QY%(hGYkp4Jm<l8H)R#he5yrRZwVw1z>*WOtZQSB$+
zVK+D|R9qZ)*{AAb@&8|THA!QZ$-D1bk2V%d_M1sASxcKLpHQ-ivFCM^S#OiQ5Q5Gj
zZ<}KIBnE(Bi!X$=npCWl;!W$oj+ZzZ_2%|YFNQC2i@?C2fIa<NM*x1AjfaB&tvtC1
z1v&tzwAn1Ozfu9rl|Y%Rdq!*Dtm~%o`8<A!CQ9I>dw?kqq^PO{^jEGAwR?FRTV!^U
zu2lM0H71u2vFzYJzY2N(r`P~V3{1faXUWSi2^ayxapG^BS>*+WJdng`GB|1<CNyPv
zys%IL{?zQH{>vvM1}aQdIj4_)6>`KVUM+tw+9N4g&-Hk*i2Frs?J)b6mgO*9VX>Xd
zZ9N66vHL&&M?!ncga)Vcvfmda_tBY8Us_9%ZnDd?>vAv`(}pqoEG5ftLba!@9xun;
zOF6HIJh_{EXPtI3I32gdB%~;zkjkN*m#&pjzk8=ItO4teG-{iC<<iks&Zkhc1DTv#
z8X^KWf+%;-K{k$xPK<xyg^#YH&Rvku*I(`d#u@&nR)28!y}fNJdp>?=DXrDx!mjix
zr$|0sSj1_|JFi6;YULtNuX%a0PVy9{a(Ow!)xwK>xfWGBPKu=Q6w#eUI|D6@FN}VA
z`qgX39+vZDc{r@+m4(R2C>Q9)Gq``dOx%GSlbr+=I;~PCa&{80oRJPCJ!=M$a}|;n
z1uh0sX=+W{$emJS&n#biEY(4Hlh--&H#cApy0OPT{!}i%;S5ul+?~ssIMUgM##`7N
zN7Qji%MbWQkLPhIwaxSm4dQ=RNqF1up%M09^dcmGgVMb1D4>W>=OR=frs>_xr&E`T
zzju3S@-#+vnQQZIFC50UbFm)}nsS@_bofkg+K+vZ41_=Br<?aN1NB@ccN0;K{#y}A
zX7^%xepHOP)_LH(<X&2nzajd&l0U}XfqtLKPq|6f`QVaQBj-M5$~|UhnOR6uLVC_%
zPFCOWiOswsl_P7yA-~qK<1#^fQep)^RxIl{qhu=3vHA1#XLNxX+Ur@l98V@rnM*a9
zRN_P_UX<$%3S|`xd$|gIulHPJ;l$59aV5{+5zHPMw=e|jz!YnO4Y<ae9xt#7<@E`j
zsVcXcs%*|`3ro(`N%i{TFDJBdoaw_UTvLYrlK=_jLx;QmRon(iOwp(wG&+k*h<Ptm
z-O~*f2aVC@PO(tWdX#b>UbC?+%>5sp0<8(ABgQkhVBzfTE`c?ido1iBzdKs`=X;Ma
zH;u_|ojLcE^P8YZTYRbi2khBIujQFGM)hLGz9Uswdj+5SOF4JMxMg*W33pMCHEQH6
zxWO~h;r{V8ZU3u!fHoQ`3eGO27=6E9{7GAJ&_&I@z?^?XmtqTz>&UI+0pE7GMz!&x
zKZb<kUVS!?%qJS-|AaGcd3fX+21*uPe~CRs!6Ei&Z8Sdkp5bZ9rw;U@`^UemIJuOf
z1buE$$J8I@>;?t=mjxnY-uk2L7I`*oAhqhLZTnF(oEu2BGq-BfP3sf#7|3n<<?`m5
z6MSKu0;8|m{u=kLJJDc%-YYB>K;Xv2yoUO(hXmRa&nRNd_`TND7o4FlI^q3Apshdr
z8KgS?Q25SLjHQ)hO4G?Z#P6w()}wSzm%xoUPsnNT878n#sIO#3@ct@XpK&Ezi>m98
zu~o*}jBiF$ZHZkd!Xx_p)tK!sg4gHGLW)Mp&P(v`@hP^99Bj4kPqen*|N3#A2pnxq
z1*2gu_#DMZC;vql%aj0@wfe+#Xj^bi^hA*m!-oAYWWTXeeGi(O*opreaNx~q%dRKf
z;{Ef~D^qF<SB6#xiKctW1#W-l5g{+2Q1HIlUMRK&nxhr~M`v?nkN8iWBNtT8<@x-~
z^6k^DChT`Fiu;j#xX8;hsy^;@>Dh8_8|%|tK{e8^Pig&*S!3Gv^l#~#LepJwMXx3>
ze~tIr$K3c;66j~U-^~}{eeEs|iyNh{JWhQr<LY#OX`RXUX>QTyMNj4w=ueKjw5$2^
zQ7zyc#q!N1Msmdt?@WM8T2+^}S8wHfoz67(&w?+;?7#S6;|4zz9^6Rx)m%EW;^mzW
zCnqt#tTSBx^UUO+F8?U2{QKfUHyDHz3gi#iYb|F%luTb5p5MxPd1cCsMUTFAUQ)W0
zG3#=n%p7aq<EOXOZNE0R`+Z<tj*K8spL>0dpC~N8Z?VjI_sHhUiW!sNi93WYJzO#S
za`>uC8FRuOv%AjKmM?x5`>kZ!+b8E%TY{z>VLf}S%n#F9{)syTWOujB*VkeI0#8>z
Jmvv4FO#s6pDw6;J

literal 0
HcmV?d00001

diff --git a/static/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-finalize.png b/static/images/blog/2021-05-14-using-finalizers-to-control-deletion/state-diagram-finalize.png
new file mode 100644
index 0000000000000000000000000000000000000000..125a8055fca649bedf12d3eb3390ad042f5d6362
GIT binary patch
literal 56817
zcmZU51z1!4+dqs61Emy1rKMY?b08w!C5@sWAYH<!fr^6E=my#7Qc`k=fHaQo8sM08
z!+`&Me((GK@cDaPyUt;|&-a{j=jV>EA9S>o$;s}J5fBiNtExQGBOoBkCm;Z5f{5|o
z^i>hD;17fzddd$8%K8~F_&;91c%o{nsY$?#KL-&23GWbG`9p&L$Pv>2-}z%gZUUlz
zz6THxgxM1S|A$5kfBf?=5&!vf&3}$W*@XW?jsGqi@W0eV`PoGOdk)b2bJ@crQF{D=
z)K$gAgMfhU`kxP>T^0)e*zyFbj}#1E6aLO1sbg0fd6(1+^PuQ~O>l$)yG-P%4X%N1
zAwS-|rNVg)c;$OAnF^I^ICpnB=*L|a06?w30?x783pk&vol=f)TbWJyDl5!5yDKxd
zzP7eer0)_om0w(MH_UwvKov{?WFa5~$rJqFDO$z)PJ*aY)Uqzk-#<Z{sa)@c(ncev
z-R(*3yEGzRN|lRfKk)La60!N@8PuGIGe#JH!3d|yvC5`&VLIUu;hB6)C<=R>_^%tt
zXO{y})_LW$`V;X?{ht@_l_~V61<3m|3`)s28P==T-%pz@!R-EjS8)MBT9A-x`<w_K
zpP5IF-0PVG55`-T(K9I84`up(U*0JE_a*+k&#n7}Aw$$`uS|l&mYsQ=Se>{9c&i<m
zq985koEj!??A{VA44tRwVKvw|rn&!aWhkdvYk<9vqkVAx7E@!zj*O?oJ1U5TTf@N@
zqejz{2v4Xd0-b66FQ&<N;vY-;@u+)fO7-{FUq%z2$BB;TKG0B2$}CN<v=wI9wAqBq
zuInNKe#=2dP90LPU4_y)D7k6LFR3GIoXY+5Uox1yEAKjaGcS>^FOOqNRa$jQEz{-2
zhJB-vT3AQDa@94lh;(y(wJ;8$2OpQ5u`cjRgjtwLQv1JFVHsp4q>P<0IceI1p_%$^
zcZ}V+R7g~?D#9v;U)o2KEf7{Jad6vfcL!wKtl~OUZv8E5LeR%xr0L{ACoF97@!*KW
zzH(?3Y&t@!*nn%7YJNbSPVHPrkBxrdG+;b}ouqmrvi)CLB%e(VV9IMq@(dm3A9tS>
zK-I!U*<bMz2EE3#p_thz?VLOMHw&2fO8Ni&{w#xUg27~-@V%;G{)(N3PjiVz@fA6w
zM{MfM@zc3$nM1ZRGifIj_I1&M_O$;N#y;t*Y|e8nKMRLzpKyT~46LO?or(iwF%Fwt
zDMnf7u~`jBUwB+s47@@Z`j_UfDO=l!PBi(H0ytaLF>|EtJFN5Nk6bvb{iwFyCkE&i
zO+gwQ9{jDy!?D3c@CbyhLSg6#BfFpKm7Fj!qZg-adIKtvrwjL&*SW~|Z^)W{{Fh#G
za}i$Ht^y11-`a7V)khezm$U$J&TF%%P`#x<UvuBAgrWlv8Ha!A|8OjF(P2*rE)EwV
z@Du2<vebW70kk#R&x&P=K?R`q)=|<N|K<h{X`OMu)mVV88W9r-f=jhW<;iDIFT0N%
z&vDNWjGV_wIV{NM=HHB9(YXVV?jEvjat+cuuR~RRYL1FB8lsHBH5Ay#tg()Fs(7gV
zOIe`bu5VGzdcZ}p-A??vz$Bpw5lDdhVLlAfFccuAx+|^z?+YGMCu_|f<y&ROp;$VY
zM<x^(u?-<Q&&*VttymDJqZqK74g0@d28kr)7oZeOx<ix{7cZXm#xM*?GD35~<WOIJ
zCcl_FVt-cv`j<qzRjjooXU5I^(sslIY;3l^3IKLrmM$SW%7q{jhd8GMq}so1#{KTR
z4|R|bLiS~#&~_TE<tW@R3;E7rF+<PqTAi`i>6&=P&4+*a7$ug9ujwxtCVj(pMg>AV
zjs}eZl|?l+2oZU&6J^xLe~D0@#Ro7{@coSAFeb0{$AHKt%avjwXl*ejl9InnC$nYt
z-<t9x5^2s`=yq!}x7!9}=lovXDkjYDLP3q$Tqf^WKyB{9oxfc-O$f4R=hODgw-!E^
z&ktXR-B7waSmJZ$CHdMqHvK!@WiKzE?GLPp>xr~lS`PTOv)&m9X-whu9Ppcr@GDw5
zeqz*e2;9G{x7h%oT&@^=GfA%en9?BILL>(aylE&J*%AaP+*w)I-X8}1<>cctkW~)I
zLqydWHn6W;@8I1+&>U%R_8sjQluehFw`I*{rVi_0K1YWakh|=(6c$~kJ9`)5aHaod
zWbmA1fMPhyJ}F|(RD^4r<o{ySANS5p44qi+Xx9T$WlHHR+dTsk(%*+37QRVBNHkmO
z`1MdHsS*AqV0i?nw{+B;M`?Z@^Ai?!^o;691oDLU2UzGvXA0hecX-p?|MFr`_ZwTA
z`j%Wu$a##yvh(#>x@2Vd&bk6mRBe}9OAGRR@y=gwFh~N3D2g&efM{f98YuVml$uCC
z8t!h!F4pb3<OEjDs=SoFOuwdX9VmKslZTw@pg@Sibk+_KQP{lK`krW*@?e6b=x?(m
z*02^FxzOeT=)W_fcpWxeb<)AQd~Pwr=-3@%t9VH%v%P_~`Vkj`O4e&k#TE|AP-42b
z!H_MN#KqVCN|@4!MTWpj!5)9w#CoqXyh$Zo9yt_!n8&O3R(=YIldktsbu(`+*n8~c
z(ii?W8w)`iY%W0pN(A$mW`qM_zflTO&taNKk0DE&uSqX~USsMq7j=vQVTB8BOPiRn
zHL?(Ix<n+|&Tn0ws3A!F0i^J6$Dl(EfD|#hwQXXw`A~wXy0QSrVpSm(w?@mHy<cmh
zaX0_c$UtC?LEM?>Y~2J{8-u}yL2o9#4{jO9QhK%Dha{qy5~D7Y6970kDjIQtkHgb&
z*o4enxKr!8ANAJhpxd<HNrs<j*63x^&Xxk&8tOa47KwvkD0PE;-zqpUFz}OD$M)$v
zl=N_Rp9uA3WlUgmO*N$vKM>+u_c^`?ivJKCmSx4=?)F>gNKikIc%JVsxocSq5x%GQ
z(*_&)uvE2F0aub%57pgdF4XPiVhko{J}h10x7Xc@%sZz=G~&BlBZb>l)i9t$9^Y3p
z`%BnNK7sVeM)?K;q=9)+v@=^~JatEz=(lP4%8==0i;s^$3Zb2Wd4XUTjQiK<TB=(x
zB*rwAY0iJ%QN^79%_ZlFv<5YrjdVmd<TqUFAa{5xKL8Smx|W=snzwG^M04#gL-*9M
ze(JRShNcyh!kC04rs5`nMxs}+dJI@A?y#xXq?d@HepE+sskg<kl)SRqvZ<PUj%xGw
zs->fRE;LZxqRaA?te4!G4maTZp2l=ROU|Cr+Z_r!mKZSfwjmsRK-+mnt0vqi9@HNX
zy1aM|X<gW!E{`)R+8&~A^hW+GX<e<zSr=S8p+WLB<z-6u8%JNKqmjdHzGtnst^vGQ
zUEkli)7jFZweC}X|1!(uvj>2<r?)7VBGWvAO6fx7Ge94WY&Kzw3`d3;ceKs^dR`!4
zsOLi(qK*e#3({I30uswxJC595h2~FPLy{C-X0N;x>2E}0C;9PJH6atT>mm$*+{YP$
zAUC<AoIX$azoVF+wzZbwb~26l63IccnnSQW9tl|tts*42<V;?=xKUizLRwbWx=CvB
zg+spe!;O2O;SA&$kflFDIX<&#L;fZBvJU#GT7M)9G6_%Hn(;Ha{X#MO5zscF{QQ|$
zI{h3^>}DO=WqzTkB{Z2j`wm6bwDs$6(hMwocDJ{(XYNwW`@D1g=)HOL?h*%rj?YDZ
zi{bL)v~yH^GKW}%r)_G6V;u@*rUai#$!+@wBF?10bgEpV)<n`sNS6AaCef_^h$j2Z
zS9aN4v#Wqw39D{H0SfkJx-y++SMnj8jdNx)wc7<(ptW45eTwsR_Me$1E}05dusj_w
zaY)R*97Ajo-^$rXT1BR1JhpaT(N6>mJAby!>RM_ZNg}D7)afMi_L92GZ<FF43U>4z
zD7E|48Zgz6Y0ZExEc3#`pDo|r()voj8ZjqpQDDBYBygF9;i}g5U-wgK#HZ-#hWb!`
zBfJtBx&o;}`Xc?z8t${^u|My5vCvORR5(?AO<1tpEM<R}CWh*AnPnzx&<gihd5;Uv
zW529z!%4wm937emR@jIfI{_Ek^t|JxFO#_>r#yWFgWq#Y6X;IYoVwi0Pi=V4ZnKp8
z<X4rwS=OGP;eBw>F08hzTa3G{fA_ynC?5&x&8d;&Yu7wD5OsjGq^1(*V8;B?mh)Rz
zYcv^T#HNh39o90(DsCja4>+nr-9Wq!d;J9^NY|4T4EfB6BRL#cF_S_3B@|1bT>eT&
z-#(+-ZbRPj=7p_7funumW==h&>MR$RN}+EGI2-)}tbUUrep&M3s^0H5!}w;f*-94p
zgFnaTbdc*g8VGxKDLkxcW`AC_EB9OaWr9t+l2cY<cphuIB0toWiy54atn?R}()l7e
z?{DfpYp9otfMPi#uck2Hhe{d%*eD-=j0Id?N{i*J>G5m|cIM|GFUTpOrQY1F!rm#a
zZa<XY<x}3ztM$(kSG~aeqLZlZ_g~~j>tc@0LGaC2yQj#nEC{OqN&;F$<r@7`y2kDc
zEG$MYsW*;+0UA`amiA@s>?dPd=ugIc_~S?^Lw%C;8m~O9Je=&4AQzXxED>g`py&&M
zbF}7s80k`9!aI-IH$0U8HHd5!@TLJ4my`a>(1Vg;lpav(r((7|6(OWPD}G-0a}O3e
zIBv|x!{}XbJr+E@m;af1XqwbK`FB|Ps-@JGzk(AS$k2Puj(M2u^K1eh1x^$5Z}LHh
z45nC7jVN0f1pR8mu*p}=VU3xj{HYoDwqCDD%Ipw(bcsJGz2Mn1=Jm2Yadt32@)Gk{
z2%t|v)7i_-zBO|9d+Yg`ZbOY^;iWsdH4*V!=aO1GN%0x8%4z}vHcg&{nC9!ZN+)r%
z-s$>j2i4xZmywFRDrpHv%M$0LtdmDV72^vxX>yjZ(~O}iP3BRJ-(1>f4T!7xeB4b1
zdqwDFI+ecO7PorU$}8w)HI~58(bGk=xq9Bc|H^_8WDt*}b}$CY<{MW<DmfU{wiX8E
zq1&HZRg=k4s*g%4Vy>{K<wMlt5M%6=r|o{q)&aDPs|jF1G5yV=PtX5aDHJK|@Ob*s
z>FV=}+3UZ=B&v-m#B8kAXTSBCBy1kOvys(ic1%7TOU{qO|DIg1Xajb2-cJ-oT!L5e
z>Bu`fVCT%424Rn`DShI@TD9czWQl2Bu*nMpV9ka?hOEV4%t2>q^Ici~_VfLF^H>BC
zM+q1hWgyym0Y5iT6}arNxVfM%J?nM8-sKENvH+(3hEx%QduB~Wbh%0{3G{A(vW1@h
z)D5?07q0x*t_gr-kC5QoH^c{|>3#^AL*;2f8pV$_@Ih(n3t8kR^2_W0NJH-M-g8bp
zOPHP5DGT1gi&?kxy+XPjIE3W#ifbCkCh<Q0_4br(+Dw<4>%LUM$oC+e+{EN2t<B{H
zgXM{!9wN-LQdurfI{1MsF_cgfgI+$pbVv0SeSXAcWSM;jA3GE65Oq(Pj3aG-l7VPo
zNTnU#{%Tn=46D{(ZiNz<N{+Qq-tQPQW7a##lRHwNr7GZqUWL8OZ^OjBf?a-s0y(H{
ztG!=n`mBU;7O}t^`3q9`>i9}gVCs2;eB@<HZcga#ve7l+>851CMOq-QB9iibCTua?
zEa!nhF6(8=U%~P=1BDQ$S=g(KLw3#U0IDBZNP6C#BKWvhoQUdWB^rJwZ{u43$yCm6
z^n^>asY#6eB{z^*c|IKO5HbWLzC;T>p?Y~uYlwb{4;u<id}y7GuM?4kXLVl!4dL?E
z1@j_JPX$BDj|iYe*SA7hT09)+h5Dp8+L`~l>-#@<wMBXRY2CQR&N`?FV0sv2XLRnF
zS~l5M&wb~=UWNehmOX|zUkh(?6<D@b8UWQVN$8$G{n+kg!KEyL0C0s3Po~~g`!glz
z+&&_VY=v(_KD!&}taeA)H5JKn3AgD`0_<H=XQ}eVyZ2cX_*m~f0f=*soHptIm7!PP
z9pshJbcuJo@}}dVwLB0-@(>gHiSVmp^<SJ8f{I93@Dxfl>1usZ#XB|GyRKo~8R-d4
zF?k+`1x(?8#bs7fcx&ODBzc5TSci;0NItt3$dEjnW^kWVHSRA!wTvgkTvv4*N<*`!
zu>)D~48r)<KBvUyyu8dtnkac-{<%}T()G;^brd@*0rZ?oC3I--scw)%{>{sj*J6-+
zCNozZ)(A!p-t2vgrwPKFPT+Msaht*R0;>3fr7B8@@9Y!WV`RvnA5!x+Q}=ubmVc4>
zm+ztp!QbyH*DPH8hpHG}HL^Q_DC(={@+e=F2I}L7XMwiMeRq#rVflqPNc)hA;sn<8
z7t4MZ@$tfNuE1XU&R<}3?+t#jT`mMT2L6X}XKXQ<5DH++@QV=&4ZEb3A0l=z@5~mU
zjCLsQ?R)~<7cl|1U74K>gR7>Xs&<*;8LS)V=>Brm%D}r4`+bhd5H0*uXI}tO9s{j5
zwJQtt_e*Ni9!&4n%U?a7@r<r|qB&`lYUm(R+orH~HZg3EWx_aP+(<94g-ioIa+NZM
zVV?%#Q@X(*0OqSWY~B-|*#Za1G`3{0o^O2cLOKX=3J4zCXpKHV<-s6s`X1#KL?a+0
z#)^~GVwrf~PiWT8O9`QTAAZf$gY-P{AEIpv9<29t0KWU_2bI)66(Lxvgp-9a7)lQ{
z{=7aNWu_h&B-Yz<xMn>9U0a{n6Vr4_WQx5c3uyTDmpA{cMC&Bh7b4F}DkD_Rklx2~
zJndNy4{iC925x+AF$QNH;vQ&wlhlU}7DbtHXAqZZ+n*;s3hG6rdcI()|4rf{Seus9
zu`zQXT|eVou6ap5(8mC<K}U=5`gC24FP@t&KqeziH^KVa&;4ShcU*`!EN0B4jOq>C
zS?nJxtFwJxs`}g``Kjk2MSl&rv}b+dk}a{YQpx5EbNU9(UBk1OSdm5c0%h6O`dWD0
zbWUeKaC79uBb4v_TOA~^$9coo%WV3zyJGpvrY0`ze=x1}BjB{~)7^XDDvbZ*0i>aO
zICbVb`!lg2#z)DxhT?g-nx)zNDp(jVWRL8>MNJ3I;Q6Z2hO7>{7=l)NLLYpgX{Vv~
zzal9Rh1$0H4W%uaw&iS7-6Fs*o4YE~!dQ_PKKa=6@lMj)3l{Ph!uAV!u%MoOQH&L;
z9N{@$ZEH5^I^~irFn6~!E1@Di?^K0SrKNl4*#n~wwd%!c2WJm4rkAuS;VxCHy;R9z
zLb~ZMp{M7M?qulu(hxyEU6(M7GV#6DYR^P7XWn5a3W1AQz|P1KS*j~TXtmVsuq2%5
z>~M2I3M0n_Cst>)|6r;x_zd>YNOzLi*1gHzb<Ob?7kn5eU11g1oM8)l_kStC3oiT}
zg(ep)v#xN23|S5$dhb#v7pwHo_oRX9d>%BfK{8QXD(9e|nW#H@xdQNyU^NPjfkd2=
zl~r3aPh?V5f>@lXNyAiD0YEU(JJvfvFs_+Hmi?{dYcJ~)xM#3uSQTQAqYEn))AZ=u
z|Di5<jz2adX|HLiNXo2}!c_kb9~9Sbs0_4J(N&*ae<IAWHS)?fByXd1k1p8BP9;g5
z&yVwSIbRdpGj30ir?&|)rp~n1Q0Dn|xVO2i*SogG0xR{pMwTC8#eU$@64-h5Ifafa
zeB3*>D!nQW9h@+4K=qGFTw%Ev>c3SDp|&UNqI_8T74Iob;3ga`2lq=wGSHjkM@%y4
zIq4uRKck(^P%y773=^o?#1JZvAl-W)Q7R&FhXl$*%_7l9_uH&;F$yID(6>9zI-i4g
z%nw8J``YaF8x({oo^+}P9#$H<N}<*b_h`(Ng93&YGl%CiyN)-rh7vqo9l-xF&tJ^Y
z3BwUG*oDuL!om~#LJbO)fEj0zi%nnFSZ0~i{cG4cSg2{w#RcQ{dJ2+?zFszaPPIU5
zKgT?J(IzE7&2KC^egI%TV(zU-_A`8l-JQw_G-XsQV>G9*3;eX6(@;~cekv84>>~53
zncCi#ZAMODsI{<9d%-0QcCyJl_kH{(?6JC#FY!O_3~ElwUxpfuHyWr)&FjDFF^HM%
zZ9rVa$vks~?Pa59wMbyvDg!DM52f$VT|Ej)zS!jFKK5&QgN~IPHG})8Z$PV?_$5`E
zOzX{0(w?{AOF>b1OTu{HrZ7&&p9D&eYiG6jd)!MG$fK3%?Ow?)-|nh*d6XF^<Mhv?
zd1yQkwt_{$&$je^PE}m*7$pAz{=cGvH^Ug;J9C$EmGb$%F6$e^O>vO;GbwmPcvhlk
zd-kd&`c`Z=EWCmpX9hnRTx6MQnJR@7_|YNGc;BzHVuVmvP;XJ}q@nT)q>o%r)D{aV
zz3~p`)-`BKoWs!WgD%bqPQnYeK+PSme(j7b*t-W{!owja%ATE=i3YgVEBI8t*Gy6$
zPH)I!=nDKF0Au|fxG2?<pf+hRDZdkAI`s&1y{p{CoZ}cm#FS_zvK!ikeUJf@T+K8f
zDaNYPt4^sf$G;j=TU7}({O*L8nF@e9{e;JVd^*+|Uu)RQkoP+$r_<P<`3f`qh1|2W
zx3`CMX*cNacJk;!bcHF%WS_5Pps4j6np3vhLXBh-@Nz8W^Pe$KX@2S_XHifUMn$)6
zTiB{;%X*Iruv<L(7UBD#FHJKbU|&+kCe+`#A)hyand0Qm@0^sxFgw4s%#tt;@Q-iZ
zO4eFmvDQw~T?&{G*t$^{CEy~pOE&6-=;6*e-_ZTklW|LnNz+M%llnb!j2Na$!^a_9
zA=?$$%pdKaQ+>df?jr%j*R@=c)T=o}d>8tyj~^q)goOh%c1|BY4K!Z$>gqwUcwX>t
z-qt)Dmh9d1Jy}_Hwny;qT5C2nU9^UIeQByau0ucY7ml4YPu<q6NXigIu$hVtHoC-9
zCg6)WvB8kA#905zb&riF7@00gFWg|qs;1EXm+ltDotUm0@N%`ySbwKv%WvU|*3@5j
zZg(k~oo%&tzAewPQ(;cLnXvZ!YVqf+c){4&nBFD5E;dipg>Y&+3m(O}g`z|E8bZC^
zPO|El0V0Z*-4vIt$>=2s52a?=Qm}lmFwtWkH`fCZaxKO;mT>|;TWdj+L9pr2MK2fF
zqHUgu>txpfuS0jI=r=mb%AL54ij0IUMKYlvos$f-Pqe?{({;9|R0UFmhwf!;0a_<-
z(Yr&rG>eTqlf#5D1NtQ3z^#_gXp-nB7a)Fk(E$ua@Y}oZ^xRv~UWzpB1j+$MMqYe4
z2irYXCm;cYvQudvO{-I_JiYfHgu&!@^WYJCa@70au(p$q(WbOC6{cBq@a7>(7UuF=
zmRZc?L#^6eq8zUi%S0o%A0`)z5Iv5T)VYTBJUy+>fykc)yT0fmbQ>>^-`Ziu$02DI
z%MF$T5QYYCCnKOErsu+4tC<5cqU<CE8RP1v6O^9*vw4c{83zwYVhS1N>!S>W9cP>0
zJbPKetaY4Y%(qKaw4E}WR*K#oCB)LAmQhx4)$57OgkXZ#`BlYLZ$&aZBRnh6j+nmd
z2eyDi`_YRaia7uNfQKiIRkeHc7%GeuX(&=2)TmkAF{BL6=)^<L^BY^>FbT>4qR?e^
zq<B09LBP;NnLr_JXH|oH-2UXuY+GSsg6V!m@23}hYKk*7j`xY7C~8;vy23q13^R=A
zYaIoJsMoyjhrJv2%oq!lDGH!h-baXafHB_+Fp@H@*YQ)i)4l3B5ovnJZEsdM;#;mX
zeh)Z0w3DSipt=GnN88w^zwy$t{wOA?hmQxLV{>Yb_-65m*1SN`eZf@Y{U&c-JQUYJ
zYWpwA$k4M>{eU8wcx~)Hq|Gr{>pgM?uIQ+4CiTN)>RHPmrFj$*{qYQM>WzEb#3CFv
zp3bP8RP9~uYEw0<=G!^zZp~uPD&JKf9|W!pFAk_uZ1oLx4t_v!qC~EXxdS|k--jad
zIY<iaRBZ6A&H%QGWQXtwG+RJ%LO7mP@koW#54(ff!}mcS<B<!z$j;#iSeU&eOR~i`
zmO&SQN8vY0^;Na=Y#np#o&09%=Epmq8*-~E47@$Giy<ljl|d=!g^S4bsN=D!S0Q`1
z3x6ooO=BBMKivu9Y$u8g;$Anti>n~Qk`sbKTaJR~%!@f&%4%CTfhC8)JY!mn&K=78
zZGS{|UBYOjoxFSX)J(M6Fg_SUEtU`!`|QVpy4vY}B&FK)a}Z!u7%)_XE`<+qF#EU#
zIHu1QzvxuoOjwC4at@T=qrilrO7+;HlYO#JNH7+#F!0z<fAT5IRF;&8=-e9!QI3)z
zAg-)BO#5^p_9E#uoQ@cpd1I@SXfdSDe84dmfXAP)$gBkF)p;#^y(|m~B9+kDa#ft8
z>fAr4MFi|NG@vsDt^s_hwzj~BHAkVAZkmqiCp}{us^*$S4FY@wR*5)ML$>_nAoHF;
zmQvo4R$D!`!+7V|-g&~Vk1Gikt<+D<3>!KpPtgzUKfY1OwgU<pcezndf3d69xrfL9
z;qoWIfKnsASV|}Zs7`#b6m^IIvB*5fMx&J3TU_v0=mXO1Lp|W0>_*eZul;g8gR2_f
zh;mibeL0g`o<qc2q&7e4kwN>K7CNjPE}c1Vvv)b2=c9F*gjJs02OZT-srxDHP&u|(
zMJi--0k!lC-L_AkYdd7?;9s4VFz7%ofU=lEamw^FOG^uop`eV9kySGu7lf28vQyv0
zdoZZNAF{KPT-3hav?6?nE8)WC1Br9UU`}cFK4k(^yk1^xv)M5P8fR%e(WjU}37b~@
zePF@=Q}-_DO3gBQiWYX5#QaK-<tf#V1f;Qnsrgo5yki#)9!p<SM$#QiTrkl)zerTf
z4g=19`VyUpbCY3?(^l<NrB|nTejk*K<VVrL!w_}eh@lqlAiED?^da{i?zZ*Rss>u4
z4|VkWwZLov>by%a#)t76TuM48L2BhfPnTKdZH6dmWp+Bo0MVI9mKb_yhJl{>7AM+>
z_sSpeNHvdh47-lqiwky<s)-Hckrg_=XbV8)pk9*}b3rGDe+#KbtGNwO=?9f`P(Cn9
zteB;`mHVuPOIF~@VX|C)qayqm{%Pu?yQ>RNR4$ljoy6veBx#9Y?OEW~bByrvD}W_k
zEON)4SJ1Wji8a37egV4Yo)c73Sm*)Rm>E~vA%DI%ZJxhJhiGRnIl)gS+-TvK6>M*M
zsKLcEun9~2ysG7#gu=xjH&13*+XLShGIKI=_Hoem;hGoA@NWC8N##?%0Tr*cM*;b&
z+H85JS|b-fX#5B0h{yM&e+tLO7gdT++9^QkIbKU0AwJF01f4|zTou_4xDw9<w9SE6
zmv}OBEN=FekpO_H`-~7{$y26#f4?C{?j}RsvryJ~h&TzPR_(LZvo#V@h^i9lbs6-o
zRZ7<R;Lp+P_-g`>=6{OH5evn>=fJm<Z$s-|9%WDZKUexJidSkvXj+x?w9e7093Iv|
zgXa>?-+AVvm&RnpxYX!Xo*a|DD&YLC_`Xig*RKU_DLu<Y`z9ng6aaoyXQFnPFjT9)
z8BhG8r)Y6b^`M<nQiiOJQnq64`qt+on27Gq1?e?_#SIBvvkoPvi!$}6ig-o70bn9q
zn&rxZWco3M%1?kwgu;RZkDJ7qdp5eZ8$N8<x8vap_19BJo(+;`CvSER5^>EeMj8ML
zJ)eY)xMwZxo*_F%F()sW{QT?i<yP!B==G-GAv!nA%+~iDLnu}GM&NxSl_Ws9vIk3d
zy|pO2^Ho6d^FgGqa!MpNopE#RX!&ddpuggYF2=p9bN_i)6Q@g(43L^nkdQ<yD;Bpu
zR>$ePmUUC=VXE1;ZUyVAX&HGxBZuiEru9Lr<>p~w6bXJ@B@X_Uqa+Z>5HBU+6;tnU
zmZ}}G%Q8>ICHO2Ft;_NPUovdFE}`Q1-PZ?K;aCX(b}L#deLa!wy3qFjs12itmFcDA
zy9pgZ_Z#Y&M?70&8vfkwPU|AYQV~3QR=Af+b2>aUh3JDf_9;r7QPg9%APB7blP1!m
z<gHM$=*B0Nv)nHO#DO@2sm*KcS6&r5lRc%!^Og;;?IoS%1M#fl;8V<I0OAyGUYMgU
zRNdn6Q*1tQwy}60m#k}e3RU=>baWAvzf;4IZZ@1QOh|IYSp9R5jbF%)?Ldwov$9pJ
zW#aVih7asE4=ZS#1`vo8)%7!7<O&56Vm~5*rA&0Cl%6#_j`$)n<Ml0NR;IW`e2;D6
zpo9YYh5CsB#pz6C13U9!v&k_OZE1ub1?ni2I&^N|?;J8lxTrVMbAxDwNg^QX+m^3?
zA41}57eJG1vp<ih;;cw_C8HGZjvm%sXSPE%hoGl>KncwO9cAg6S47b}C?(=O0vl&V
zxZ3;OK5<Oo>eWzrM$l1fZyw4XHfO)*JHHUT3Cl~Wn5Di4A>lbswKWftY0_{<h8w0K
zpE=BK!ae6&%6u<??;-M2qS1a5YCAPd^%s_SjG}{YvpuBTY|>1%E1)$YhQ<fG+*}M1
zy>B6puSEXHKsNK<@2{=&5Xu0s>QDgAKb1rDH{<-}WVizi7uk42Vk%QGZ}rT5WcJ$#
zgG^GwY(jL{rZk<La7PIc)YS2(&Bvyj6kVMIUDu)SSgf6>U4@#$f~<J^hDUFf7(f7W
zI+ihu%wu1wxc~&9y(pwFuT+1v_CeVlwRiG7px5II(uiGzIJ^s04v*w`g$6R{$gsDI
zb`H_Q4LM3Ofr$o{7rcnh@0F=R+E*ExmG_kU{R6e)Yw)EzPqq28No40B2Bz$8O?4{~
znN{`Jyg*L$_hbpaGwrE}yg*yUFPfX>r9B)c2GDZMFIX`>IEqJmd<R#eqf5}++c#<T
zrFXf>Nlx9Gwj&o}VdaW=RjlirmR;RYh+b;bXJ*DwLBQX)+O7#nTc+ZZ*Fga&QB_Vf
zqTI`jU}_`+Dd$i|d8=oW<BxYe2a4&(x@FG91#QQJplVcG5GUq@vIPHT87@Y)ZD%-3
z)l-U<0obDHQsLaOU)mc57LJNUTTV61=f#{PCbIJ@U9H8@85#IVDqkuIrME{J%bGjf
zA0HHHTE7q#64Yv@o-Ym<nVqY0z6YG<qgkE!9O?!&WyR0oV7txcdXEA)vZR^L8zR3~
z+*5e@%qGDnf@bWtc6nlA{5_Be+q{qR&`%FJ+eQD~hVBTFsrND<PgP{oX01A<%C5Hw
zaoWgx<cxzOPH`&d@p@h%)h{|I#85ZgX6mq5Zw)Gc1=O1_c0{B`sVW!doOlrbI))dN
zQksv+)ibw|*;l;xZkr4s#!g7NdzOl3DwPPFc3eAby$?cbT9ecMTEZUs(rNgPux-hT
z@(8MN(PjHWdcp!YF51=;jtd*HN3Y9ye?9#g_|SRoFm~nlQ(2k}N<zx4@LjA4;_K7i
zFh0a^L~zi-Garl<Y#_fA9?B7PR@+}wdFKK~Gj?n4D4?!i{w2g1h-<-!@<g$b6lZM~
zv5SQu2Z8?P#}cQ%2a7*fZ2(8<g6mjh3-_)O5ibUn9jq41?k#1PPy~s5dR3Fb5OpTn
z{HlL!aBh?R6uWn)CW}*%#RZU7i1gqH`qkM+r5%F{SDSeS79GE~cmcf#axoVNRf*F9
z)C=QB5Fhjyv@=gKHZgx>N1gom%2^iLQT(vNSGUw!QceeF=HaF=>40=%mtYii_;}FD
zi$ZB0C}o5U{k%<5nOsU5@!<IkC)d)npU-WE4rNgM8|2Q;E*B~SHt_i>dl0VkVyNg9
zo;QfPve$n3&zWukA3sF0QJ29`Hdyi0!yi}vxvSL`SwRb4!!y4Ox=Pc;U7Knt!N-AQ
zvMOv68IyeTXA3uKf3DG_=P5oDcLC~#_<}z~?RJX~Rwg3t%-`Un)zQ+OKp`&}dUxFx
zW1~kqr@k*8(y8udvAySl^1n_Dl>r^)R1l%|Zk@)hWJD{l2mv4kEX+2{-No|Vg-lTL
zVR#+B4!XzU@`+T7RBP!PAH?+}6y11YC=$+tkH$Cfh+{(YBp-cY7p=l{Vw&KydnO$p
zD9Unf3^|du=fo#*nLr#BT3OGp#G>SQ0-rJX;`_RoWt0s{#+OFr_6WOcSSl^urx}v*
z?>Qm*R=3XHjECnC+|N1>_N)V2#O*hgY-i{vRhLwiiWoU`u8gWttkuFM&(J3TQy;}H
z#eu|F93@Nj%bw%zz2>@y;WD-DVz5koVN(-#>9GXUnJT4>pSu-RqX7+71;a0ATwT9n
zRm{{^X6rU_uHWTev9{koF5@pB0e3p%bYf+N=eQx`YDb#^e}<OMSSwPBw(nVG1!=2?
zsW5$cV&p;K7ezC6Lt8uUPI*T6w?D{F(NNE?*P_t(qP(3Yh6HM8_`?y_B8ZO&JcN`H
z;Sq!Fnq$ATZHwnUWeqPHpEGl*UR9-V|F){lGxM^Cn=P@0%_NyPpQ0Xz<{aG}-kf)4
z7p=S<k9j&6m?Ay1qSYro?`YecoF#zBay+a#RHdkYWp9RZXKTU@kJM9WfwR{wtm0P-
z!Fg^lbhf0Z6@Md68dYsFxhwbhTm8cP*|xF$m-rL6=#|h=Sniz*);w(H2JLlhNA&aE
zOpck%ty2ZW(!#?5Ubyui$N?%TOs{0Of>^-<*&}1SpEq|L6Ww)_-QJTZ++N80au0;o
zV%bPqJZg9>TIE-f0a>Pb;tNnNeA`Ut<aJ^0OCaL<5)k3&2Go|*>7Z!x8%Pwps%5P2
zq^;U4A;%h-^vYiT@N1!o%Sjq>zWr95<*ON^q|*?Z*78-Wgc{hL^+zvWe_hV}{6Wvv
zW3ak9e)41L*C*jlnYxp0ea~ixqE&=dDWC6X8u0sMhIT7)n2F2g&vF8^Y7aA?&+bp(
z{aX8gf0Ug0nV)q@Hs*sKy0-19P3b1n$MF?iM3a!sY@n0i#6i;ZMtt01^lmdB!uyl$
zr;pw^mD=?eCzKzoC~EL+1Z!7dqVWiqN^{w%R6w|h7H|D=&S*KjuETdN?dvT`IQu^t
z-kISv-|?+R4YkeNej5a|28qbu4ikznX+gY0=5TFxU&_jc^btReY{ihde}jHJbKk0q
zqDfSCUCSOLM1-o$fqwHUmH!%1%TFY(wi*nnQ`j1NzM1rUsRicGp`5`lIVb)oE3q*$
z>$MBp45x1jQF+zj&NTmpo+iDM^o!T@j{ZyEICuH@ghDp(*>D(DjS{>K&W&y8@8u`g
zI{O|-V$WkA^~zVAL2$UHtOt770lTds<iwW}nRKS9<|NSfCMYfc>K9M(KoK6!!;*G`
zMMu4(4VznknjG55v6fBs=9LrMDa98NC*Nl;__X2|r4})Vcn=uLvc+SV$`nEOa+Y%B
zpX}bwFgUu@_RyD2AZ?vb-rBC3RZwo@t^3xPi+bqL{UVtVxmA~+^BPR87$fo*eg{}R
z*YUyI59YWZ4a^zpyU*gd$m7MjZbpuZ0Lq!0eD`@gHiza4xYj57geA_rjlzxvq!6PQ
z=Wc1viND*(FZ#~4t(U#U&UZ2ILPH04;iM=zy<8<oK-;fu(N_iYRrKIb)0Wzlx>r71
z31Pin#N&s}@KbSePHq)@aD0PsEYJ4hYP{^d(;SB=?E8E$V=|Y)HE1EQ8LsN5ak3C~
z(PBe&i<EHAPL4&?TjwKOqo$OK(CWE=@b`ARXu>Li5Pk4Wv+Qnrla93L_6vMRl&I6T
zrs6?pD_140k;abP^z&Rq+%j`dVtE!i((y~5XZJ3hMG&V`B7d~?I*MHgmT{2&*yX4^
zH~1Z9N@VjST4N`7Y!iw9VaD~n6McR&OW)mfp(`!}VdS*wD;VYBq)yK&GSx7?7Ov=r
zJVf~NGbwb!V2uv03M*HrRh3o?6(i|))7;ym>7qp616@l+iZ9DAeU^NgRnUS1%4IMb
zD?wDA1b(5lSGdD%4h|M;f-z=e+BZvX2JZ1nczF%j1~Md$oaMZl4V)2@baggpj9bVQ
zPMaIrI_dXe87*7Bo&I<r7@{*(of9%dSr{`ezV80sZ^i>shhFM#E6h#zoOE_Q$$5UN
zbvBqMD-2G4e=wb2#eDP!GJPgJI{EE!NZqx%NsCHEvApszyfa3nJ&>43|AuXt6nYaF
zr5EV;F)+8?@3~^O1whzAX-@cfGC~3GgL;e8=@4~Wa9O{LN_WZ!saNvLi!=MuhDUnl
z_gF{lh`FBcGo|*CB<1AY$E`I?h%r%2e^{nXuQz7FO*ascyd%?USeP%G<80!83$|UP
zyl=rVlZLLPPxr=#6|EJ{6rge=tv2j6X($N)z!+lMBhoI)Mt`OY!%3C3B&VWq%Y?-{
zJ9LPEp?3<|D!{y0VJ=m-biexIHwxD5K>zjq&sBXYWKXAdsD8l@I~1>LCp=Rr50kMF
z$<8}}vcJK3>}YvlZ`h?>bNbZ7E<q+$^NhlI{HEGbn_TJd%vY_U6P^^BXU}J$KHzm<
z!-J0^`Bm~-v_5T5tJdU{9uQR?zelIZS-p7$QDvH){@}Hw%(d)OSw^(wHt|kQE()7R
zRf8W)Bz}x6_d8lx`~Y)_KZx@$t(QLu_e2cynJHYkc$~^wjHKMe2>?inZvn#}Auk#Z
z;}c_W^6lP@=uDw3p<BRuR@V?QDV0fMsq!?yc-|z?KlJP!`f5yd;;>Leram*g=1^^+
z^R1dTwzn6jErY{pJ?9*H5g+ArrY+Y?(y|-ChU!JF%Vm~UWaR0N`t^x9z-j}&^zmvY
zN;{fiGEm`}UBAsWEyfVBu^Rf|4zA-;n6V?YXJ@d&R?H}+Y%Z14Y(Z4BsSi5gFQtlg
zNoq4P@fEC`xN)B(-_o{v%40H;nYTIrz$bxe{YX{Y@sle)QDg@C%btANOGbN~Qli%M
zX2r6|8r8$Goos4C2|gV0B+zuyBi3f-Pv6~6-=KPy%}LtvD4x)vEIQwN!v(AKZd8kP
zo~zESbsLNhGy&#YY4XZE#%#4~m+Pm&Zwoc>_VuCycNnKcuWB{*wz}jp7JeLeUVpXl
zDYe6u53J;3YsTjh_gtaA@3U$kJ7a;8th7>I-pV>Ih}}0<BlL^6)~vO-$rb+FZ`p@H
z1vsXc<2tSOlX>2fzY9WgGk&r$dqo;8E<Qhg^;v#MG|s<Py4o2Zcm|}K5M&?4P9$!}
z`CN%7!Pl%lB7YZ6P>P<FH8Q`?<cN&hxd(RLuNEm|4lK3JkRi*v2HJxLGrNL$+qWTc
zsLF#J%c25KLT~{@)xmqfyzk~vQ52{ouR7NlMVBEeHCca}kai_sxUkNV<8%ROZ^QH3
zpCkREeoxX~(4G_%hkD-CQ)1Lws2wtc@I^?%g;WH4rZi&oq&0;5Yx`rK6_ns7y2=L5
zeaBtK4->Xd1b5}_ZM$Tfr_^iJEDzu!xikml9O;`Zc1m61LQgY@^CKME=-881gYHld
zo)qF1Oq!Ddbjj#>CHAE<+@F|E)lp!*yPOVh7?bP<#Xd{P=Tm)J$-Qv4gj?dMR5$Tl
z3lrN+vB-nvG9J+4gHe$(^1`Z_N0#q6HLyqomHEk~_+y>-QP2hiAB$exo!2!GQg>s>
zGU8m_u66}##VZe}R?_whGw=eTb6pX2;}SEJjyKcmEh(!59)AH-s_m-RXu`ML3hayL
zhY7Q5cQqC6d~7JIRVh5SpHI*;9k3za<$4(?#q)}Z!#U;|JxPTe=Gm;c<dj-rX=%!n
zjlz_p05h}v*23CjI1OQb55!ch2dup7Z1$uCYh9n>)wV!G8$UY1o3X()b{5p-J!{<J
zWotWgL_M`4IivAb3DOwUxnd&m0*@=-vd!n82G$*hps|SZ)0t~+`=RxF7yUV@oh&+!
z0nBkj+d+f+EoGq!+4KOHk;iiH?kG=s>EE0(hzW+MFFjid%BD#5bD~b)n1g>h<QBq7
zN}HS$BAB%keKXA1FP5VBhq70*`RA~&xWAGJJ5$Mc39Y{_OwlawEmxsb*R9FQwi2o)
zTbW)uB<k9<`7YL6_*KVL$)U<VK9-{RK#ZE(1>qV0`PtGt#a@@}7Z)&pHrlDV!o5~h
zm7c?At>S~%Gg^{$bi=Y4m?6W%@Jx0m-nZITMpB|e>R-?9TNHTa2a3GP?D@US%Yg&m
zPrA+n#D^{tLaUx=n4HjY(3|qgtE$b!wKkTAFT2J>!7`_XRmsCq$E>6Jdgjuc+!=D?
zukx>rLgiyY>FjokuMdtZEMwE#lJuzSOlB>0d86HG%7N3xH|f&UPfYP1_Sp8>M>K&S
zMWKG0I{oV@N$GJ{!czPIAB1Fzzs!qqZ(y(k-{Z*eg1?=5QafY#*imUL%Pu9uHCfk7
zy1>%J-FhNQvQB)}4R+@8BID?1(MPS_Arj8G>g@*^H<2g!0X!rKrz_gR-F{J*-2ADr
z0S`O6P_^ub*PPgnrG{Vk`N*#!hsDtp28<Pg?9~sfF3Mv+$wd>JR*ZC`6|>oaxQhwO
z)}^{;D~zw&qO|kP2qfKdR5aU0VR*F_*-|9YhhM6@&@VPmW!k7g*Ajz?oaT@n;Ae+X
z_<2A1W6<m5GUmx9{YmwcGS57;E;Xe}xw>0s=WtWznChxpr^=}+iK>r^<?59##UKms
zT*glyxjPBh&FGD-nf`3FsKN!BhA&O6QWHb9NbA@-*>1O>Fz-sNm;vXV^mM6H3C{Ur
z<#L`c?JY=u7r*QDT?p#vbAE{Je&?;2t%h%>*d)e_#e2sxyg#}4L^Om&c)oTvzwzwk
zV`Bc;J93dM;)clb2QTrxF1;Hn$~4C^TatL4)dwUwgr-T)yx+$vS`&)yoA8`Z1eVEZ
z<|C+Hs#!BF=ZV9aLPGFnu+K4{)6BGk&1qo*{LVo#UH1>CS@GIPTns9-O0f4|1&_WU
zgFd)%^fo<uX`0ey<_10>-vDHxy5l&a=fATI#v{+WBd<ofbo+wycsL(8KAg96uuG>r
z<X+E`{%5@7n$kQ_;3M`O#Gvz9^@AQ3oo4`#?n4MdVpd4cFZFsY$r!$h4Zv3e@uLiG
zIg+Kpa*Nl2Ckn{Tuw#q&5_H}h%7|e?LQs4vata+_E-W+CG+f&13%aIlZBq)PczUt7
zl~zHFpWlS`gI?v23<Z^$dDTcdDrWBian1YWdg&yq3C&6(e+CCc2`}P}q|(LDc&aSN
zG>@rnu|qctcaDNEKLNhydPtTjr5U`qp&*=T^Y^zaf(T{0AL96t(sELG+mw~T3mb?9
z>oUG_iQsZAFr~T>KRch%0SoJ&bf5@8cuW%g3(_ue9zgj4&(uGCkh{En+AWI@m$Vmc
zs0xS(gYM1|+B2M<KjZo{Vr0z?;B(9YuThUhYX65T3IMZWO*b55P51Sm86*7cg}*7H
z{cT4JwBET4p^pa<%GOd}JyU2po5Buu;?&xwv|j_Ecd55XtZ`<AZZk&>D1Vwf6$r@c
zL}}jBkY=^@5khvD@y{Sf3_W4c$+?T3`O6I*ztL&6d=?N*G?LJrC(4KE2aU_cJT)*}
z#o9-bc8vTmv!0F?Um7JnqGLj3S)D#+WF54{2mV@oi*3e354R*+Q#+z7g~vYD<RiEu
zn$8n(k`+=~JXc<@&ikx0#Vpou&wP=H%A)#34b?81mSDEjnJoYC&$d=~j*2j~h^vwL
zQ>&&@ZxyV!fVdlK;_7bcR;40sz9cPHTLb_lF4q`_kJt_ywNoGF`=H^JV5{h_s^Poe
zT23SW;cEs`lJ~x#NHlj}T*WlC{yYIGLvH=j(Lra7(XDJD19H5gga(J*%VUd>)2FE2
zz7CM(+7cU~y3jwPFDO1}e9VjA<L#hqO;|myU~m2k_cIyeh~E`v9E%imFkl$VbPqLY
zZ_-Hnv%e;*@JF5ZbdhJuIhUYN&<yr8LZf-3RDj(5`+F<4N#jZ7Pb8*PYR+^&E+oL|
z9e)Oy&|1hW(!(1Sb>j>P5ONw2zWaHrd=00i!7#+ciZm8GZJ;b52fSdPm+xi<hdXvk
zs|~*&=o&M=K9@_L$s~jHewB2DcJvs>so~6bKuHs9l`KPdPsLt7+7Qs(ye)paN^uyU
zO&P=?jYmrMm?t1b6B?$5L;#P1$XZo5nYls{ZLDL(lKowvJIlN^PZ?v<ijHMV_!A3S
zgu;Gg>O}(Dae*GCg~~25bgj>4ARFCe4EC@wSp8EkTVtwn(KP2Z8135OJeYa&(D$7%
z-V|Pd>WnebdU!rH_k}0eGm;lxC1mbwiCvU9faC>s|09uGQOH}RF~qOUuGK0)6PY=!
z7VB#RLajXP1M}WB2KM9kk1*<-R(~R4KYVgH)o=LLcJw#v_v`?yc!U<#%!vNTZelTc
zs$vN6q{S2HPrm)@+MJEWT}GaXX7)3c$!=kyid=(y?4cxm4FZrLFz~<s7r^!YQ}^fb
z)_3GitFQ61-it;Zs<?f2iyrdta)(iIOF><_S|tKyXPSOdEHMLFbZ!C8Rjca)%`I=0
zPkNxIdwobCLp8OkbE6Kl>63&(gx)&m#Fe(KnCt+LGo@Oq?p6saLH_#6Bk^Ydu*yO0
z;i;y{2V=YAFuUEe%*OPQ7Bju=K$F=SRm-1oh+W?kIqCqt{YJBTjU8>**9AS2s1=xx
z95M9njiZ=!>3eR2%%a<aY=4Ftk@(8SAQ`io(aB?&pgXGRQ?qiiw8zd(&9m%@6>6P8
zl98UgILjDI*tfgj(KOwwMsemVrKkXuYfYWe6BECO^@=+Ij~Z4^R(==-%1jhwge`6?
z1mfqFG$~f~<2O&7gjHe><5A`6rT#;o#8bfX)$z}*%948PQkGlmO}>Wqo+k1JwV=bU
zHfx(()ti4SQnuC-#k84J3jW0Bud=I3q9g-P+CfJF`YpNFwZHf4_@#zd$F3MeAoCph
zi}e^P1H-ZO6n|bsUK%JP!e7R0TvMr_FzR-XDo|W&NmlF7_4R}hy}$ST8cthfE(u2^
zC9ovZC&VwBx=A7vKhRW#IiXn7ieE|6a~$zVU5Qo~Q`rQgc7{CfJckT<2ke9%R;71T
zg=(7d&E*N=tGU7)&he=AnezyC@UNFu&L-lC`c=n6%R2WY@?Z8ZXgdSNG!Ay}kRwhO
zhU@hzmztlBWcGG=Io85GtwMhft^JYDX_rElx)0sVPlXe@n8i=K>k3keGgP-ikYuJS
z`7>@MCy#rz@w*i9ows$WWKF)Wt9)gw(p8nZ3ZusvxYzRG^PNsxjn!|TN6haH7gk;z
zV>2nsnZ<py8t6nNUi;O=r-mZu)ILWMJvdBmjzwF*s~|()Q1UMR&mAUt!2*11_UR`O
zz|)K)^x;ZKG|@EonD3!#gj$VJv+qPIYFF<Sc71x6e)l}6Dl^_xykuxSBGuda`uf4=
zdo{sPe(dtXyDvk2eRZj6G|YsI*x6U>9Pg@Ow!z<v^lyIU2a8~;kDCi_wCDwip)`K4
zzC~SO%#$t3jjKtGR2F@0RsE$daDCL_EyHfZi(eP_+q{w=O?w@JaO(%jObQ8Sb9=81
zZ<FNaXRWnd9R@*JN%`{-HxLq9XY4`vIR<<bdzpl^G`(NO>cca$PHx_?zyGW$!mwb<
zH8Ad57(PXtF@Z7fNe+5g?+fuHA4$>IK(EJc<^<el@ODEm{^<B3kU-%``>VQJ{K8hs
z<XHDSKi5^WVY@3Wi|=cry6lj3slS;XR+itl0fMNqTbW4>Vm0&5$itBDJDN1tIwn;c
z3A{a1vaGil)g{__%`*aV$}<t&r&_YY_eo|43Ip_nlT>Go1F04l#=-Iaxcn7)-tKfO
zjJC>be{0O)swk=q=2U{VM3ZoMY^exFJB({M*sAjltqusFu&}VgITl7C0e*xx-1c|p
zTiC#Wt@rx}P5mzPH=}+wGOJ0>f40(AZAqF=^nOKOigtHNdd57Zz1lAMT2JgkQnRf&
z`^}i7$_^28R>MN*)QL7v)8m&1;F?4|TYO^T<p=)S7_AyP$}e#iW3+Q($Hf;U+v9Pr
zGkJfaqwBt2!!^p0dO--YJu#*j7EM$;v3{o;Uoi=2H0S;Ln-9K>7@m~Os~sf%xe<wq
zjH?R$74#gto`R<1m27JKDz8QvHFI^DwSPDT8RCF*!f!PWgf(krKnK0?f!YSpJfZH=
zc(76T=GiOP&(mAgTR6^*Yjo-77E`^$6&80Y^2NuSZ)dR_Kb{c(U3k30SJv75lk6Wk
zMX#eU8>t_@1SJUS)YE5~fBy>W+0(Sjt=@48D!mn0GEo=10#4<h6EHb9O`IdeKHq)F
zH5XgmXD$PHdO-NP;n`wnv?9sV&smLGP6s_u6STP2nJXlnW(D%`$?8XTM&C@SUq^5D
ztRt2w(v9Nurc8tf)a)hgPjm&QcqitEy6Ul<$FZJNd(Uh7pT-tqC{RNtfu@1*p!kw0
z-s5xDnhT?vpCc1eVO(!<>^-NId6)px;q^kIekb^_f2psM+L)t;xMgnNI2OK|Ru1lO
zFe8)J{m}6xweOUH0vo@OGCBByiH9)`kxRjxq-Y|X)zlolF43H6EF~)@C7HMSvqnhu
zV3oZvB|tu9p&Tnv(#JYb7W>V_%6iV?iHlo_AaKP<@$9)&l=?;J7FgvUH^>D<v3wW*
zc%EhaxZ#P`so%J!tDkio@oCrpqw2ilsrvs19&S;Jgi2=FTUptpj4LC1Q?kk4^X3yR
z>)Km!35l$%>s}SI>)P|)vbwfwT=%-J-{CX9{r=OV$35qL-sAOt&F3rJ+AheoMzKHJ
zRI>JQsGgBm#_YS2*In)w<`pD!jv*g#V@B`7?DhKE#Mo`^4u9s{{GzqhF3^?lU)cl{
zc|!6E_<Ff-vkR^ifBVeSPt@!7Y}kVmJ=>BKh@9V0V{W0Tb@0c2lPke?x2u8tR%2o{
z;FNJp)LK`nfwh-q*zn2)<J4KuUd50Cs&cAgUf44jP+HgN3xDX4_8ij-=`4laMAe|k
zs0!$(5OB6xO~|z=HaXs<{-}mgkKqNsj>W)^rr;tJoy#gd8)aem{)iVAcgw4`a(+&x
zfncBhDYK-Zf>&H;kU*oCw~_x-o#&w8^?c0@t>(Mf;q{@{pPI~w&+DGfpXyUq6bZ?4
zfDTVy&@=m?Ay)dJMR;(*(rJO{F(aX9G}V;5Ig-bRNDcSs<G<k8|8&TtzP$+A8*Xi>
z39cM+AToKb){qcS{4EXA6IQ0sIU>T=>H6n4BxJwgy65s<so7ryh5u|cd^z{yN*n&d
zXNF}U{|>B=v99O(z^fwQ<1RKZ=@XeEGo31`Q2#K?3pEpn7Lm#J>U;XiOT#F~RB|Jg
zETWsrr}Od2eR?z7@j&oh^8UBsI+Mtno_7|~jO2sZz<U3O(Dh+{uWJWwDfvd!;!kw0
zc{jcv7W@8stVy7IH9f%a?wgeL{+AKq+ou$5ZkC}V!)<Uk85S3Oawo?${4kdwKRG5o
zpO%i7nJL-%EuzAw-09Fn^-81V4vX#jHqYvP-rS{w^iOx4Zbh`99xUQhNa)7|y!-MG
zjxzRA7B4?fC^q^VaBDDl@V?S~#%Y`H3m(%RVs+&sSqj(`?s&Jm)}Gpb{a%q;`=O37
zL%?m!lR9ysFTD|Bu)P|mTovm<*Jj;fXX9U&x~CNOS%seke358uZk>WL7gfuYD95(i
z?CcTugKzb2M|z3$Zs&0fu{td@<>$eM7g6^WK@*ZT2J<_geb@E6FVv9q-%hj_d7P(I
z;>Nss@5S@$cDOn=aqqp%IiP-^{66w%?1syxv?Jk??A{~7y3CIJ?L3QseJ6zv?TbsS
z*66Etyr&0SpAMy%I1TUmz;Y~Pm78+)VumK_boYG?BsFVV8@KlQUCq7aByK^mZ^4>P
zocD3Psk!O{ZJBjNALB~LJh$RQCH$+0T@D1k^cEypo_2@~o(m8If?D2_tK)tWOaWrb
zj;~~o2q6umUm{bx#Mz0dT<C&yj&)|G<V}nH1d+k14+Zo3r8^E2HB!F=zXL_E{L+&6
z;n<CJ6ZQca)VYt5{O#E7$tNXz&k#VO7JZ?IGQD!DYh6iMe_<BQ<uy$=?z4J{W@=)C
zYO^J-Z@@ucHt&00$(@}wnDwr8^>&+maAX6PRcLFLD_Q%}4~-zfoi80!qXweX-1bzt
zEdtzpiAUYos802AUq7s2cM@q3c_FM|#|jA1R-NrDIyaCqswYHjMUknakFVh0smKqL
zNZFtUgw7{j?JZ{k$}rc5(|wU<uD!Bd58DX%dU^VT=jVJ**(=x(CsK!x$k+`1wjYs}
zzVtC8J*4kn($AC{`IR5wEu_~xTr=LkX!`-brGpRq6<zeB(~*TPm5n4_n^xP$oGs!J
z=;>|16d1(=#R_Xrb~gqE5^o&2KD1ptSTjfOlC*IlGKhJODw;xB(@<rsbobKp{;7Ut
zUTL>sj_ma$n3eAItP_2`WhGjh%x>9~9P<gEG*{htM&;e>l$t)6l#RZnHm+^^OTsgl
zVt+eHvzC(mtG?DbPQfp6CZn8CoV<4P+AO;EF>46A+3eGgW~GuuBQ;I%lokieihIKv
z+=#y@veLCVs%G^lkLfy4uZjm-X({_$PIF3)<c-jhHv#fTgehsuF|@_|OFu*RG7<tQ
zkFDSDry=ybQ@NSN+6{cw4h`QRT^W{DGQW7|Og<;p7_!Yrcs##!u#jTYsEdooW#_v-
zk`x|nn>xdst6K>_ii)6HgPN=)(4tAD6xI#zmQr5mx?Rm#=r6~X=%$xiL~dg8n}^AH
z1COz;+4C3D77i9As2^2&JZeBHRqALdllgT@wdvl@iW1seBYY<pF}P&GGFf`vc!!%-
z!~Qj@L(}263f8ML`|H{?ZKU$;yaYD11*@p-tSa7bXg3sqyY6cr;`Q0Y2e7ek=3vR0
zR72XR8z^4@AQb@{{@kUP;L53qNTN$76?Q6(KS6MY?n9oh{Z*Fo^XM|~?fOz>ZJAW^
z4N=|+Sy_J>tTT{k(0X?NY<ht|5mZljx*8R#vU&d49Z^V2Nhe|2*AS*XB-tWRl#sKp
z@omxeJU+N}J*#i_12)$pbn@Hkqh<L>(fIUMuW+i}*5RJ!T|r7Z>eRJKyZX0@dAh{`
zFyZ3iz3=y@RqfKm-l<KpUjZWJ@50&k->B^@3Qov|z0=mEe;g9zLfqx+JxFF&GX5Z(
zknFT8mibr%iG82KOI=Fmix#pG>xjuRN~L?%5K5N763xE@>4{?ZB&ds*z{(r!!_9C&
z>vK*}QmiAKcP(ycJ$Ks(x7)k4?F`dk1-23^?W*@IIYKL&iy%K2Hd_lrXg~bvP})_O
z_yw)SnWQWrcRM0O3hrO(|6({jB<9A1l5ZzPIaMq(&k>{V++tcAkfaZgaBeg2Xm%g1
zdU$Dtf%$_^%3;3qLTpmjNcu+;kMke9Q?~uExrdV`7-0FKUbuz~x^7f9X(@ZnzjX27
zEZS<kjc-Q0e=Y0G_J#LUeNQ5qO{XR|Okm8s=;DK@K7&P>$h+D40FEpYd!rlg+V(@?
zPK}L_&FbCwzJt#c9cDE$2W$#TI(R>n2j?tQ4ukAco*2`x0<$>qpj-9RaSbgd7<Xu5
zT79u3P}k_#pjqr(Qd~kNl=8`H3F|263~2%0-M~EVXEQ}#dx0>K4a(K9h|m_n-R*e0
zQSd2&v_%fNXQ}S1VCcs`uGK%5tfCbe{0oN`m7W^ocHD37SsUeZRi{o+PKc=7iY(BU
ze}JoB=Ixe&IuOl0H{?e%I<+=ZJoxYDr5;qZKrXDIUrbkb{=5j}Vtl^|5v{*B9ln1x
z%p}yS3sy~W?97s7+`N$Gb?R5t*r=DSbx+f)+Pz%#*MpoI$5I)Q?f4oNw(+EmiF+{2
zTux{87PwWQqsG(-eK*dt^zQqmwJ+HV2Tls3>`$5<Obuj}Lx$>EmvOouy~rN@;W^EZ
z-MmI<v(Fx}vF*p+T=X)Xlx;5y_#!{kCW3WbaPi(eT5TfEH*$*Ih11Pm^Q3b8>Z@Yl
zQb#l2nh<kk>Zzee?N(~8?9tYtmPph#w9K#Taj&@EWn1V1VSh_*)MZa8Ax)C?id&>z
zcL0&N`$go?PnUJ=jw4W0@hUQS*d<JeJKV0;=V3|+b<M}N!5_mPMqg)y+<r2ypXxpP
z*Eg5UCn=(MdB4ZKpPe(tT-uxtCKq=rhuNMhczxpWLx^mw^9<6T7W;-P7?Oft=B+s7
zXCeE4{(jKcMp{&X)fKob)_zh}eHqA^#`H-IieA5&=b^kj>T$s7zHCpFc4a8@+-6L;
zG3nszW`wQz+C(oLkw08TYiKCleU4#V-IGux<vdz)MS2E^Onn?MeRzzeDioz$ajkq-
zD_wxvdE3w+)CEq7^WKiXo-QqhiwB!qF2?svgPX-JI~k!tPlOMz=h*S(ghHPb><LKq
z;&okGWE>hE0gC|qZ_Ais-$GN|=h41TWjZC1AQaq+PRcgfDT8gg(bHMGZEMeG<U{?V
znf1MUKn|mvU&P|~^Vv`AE-r-^5SRKg=A?I(V)0r1UCTdE=7ZlN<pNMC2)iEeuEMh`
zI&GIH!lw_eXKfU)-zV-X7`REP*yDT_SH_%co*}-KVCM@xI@JzNL#JF=Md7;gUnOr*
z3yj^@zCcdY)Ee*9&bggD@hH1_#!4f$WSa*Yn4;;{AzG7$c!y<#%E<`zh@DfXK0HeG
zC`gmZgl1n0JCxJmtio~_@^|g{Of(dr{4Kj3b$f6^H@7-SQi3<a^bd<43IbO&KPVic
zYz$6>#Yt_jQk<9o9H0b)>pt;va*34gmYtMtc&lOp?J)UCxTP_<ikrY!Z{&BX;bmQo
zlvOFKng3x`xs6ZcVS~P>|HaDzp>|TW%&8$&Oe?yk#Gj963C>z=^dEQME)6emh!E5s
z>~9sL26?vkgemoTkGjbEav#_3!oHw8nGrefmv%WbY{58y?&Vp=KBXmmFOOE*!#kj%
zPtDjINXpsx-uWP|bk-~psGX%@?o}!uP@b?&&qd@o-<r}lTAIo0KbTJNjLWf2@|@Ey
zJwMpDOwcvdXzA7{7+NzOdYwpn5E&=+>ha1>W`6U?Fk;*F(yH}(3+kDP_QCvqN$R?P
z0gaUj3{qFL1X4V|Y%Qo1O9BPH$RE3Z8t@L~(M%V0b_R6H-UWQwNt}=^A)$e)D{1-C
zh__bh^ZD)XhGbVO`|vF5&-}a@SHg&Y`4`R)q)XrnJLFe1oo>wtTI4@I;t#pspm-th
z(VLC<s+1cTZ>1`*nf3};ePY1!YGj1_JLY;1O{{4*yz*mw>0Vh%9C?LzO1#+LZEwPn
zBmZ$AV{YiSzD^>ztZG)4?)OYlxMz)rJIs^g?aJ;D#vd&r4y2OQfqU76W*QOl5BGcD
zbEwS!9=;awWLi1?BkFLr`{s;!NsLQv@O@lNL(k;8Tb6$H_?GhZwj1@KHAVM;G{H)-
zGi}em`pjWNP;4i3J0NYZZS*Vf+0v3rCK3yPPwD8ocaEV?K72)`sRJy+8zckm1k;6|
zdDuq2t>r&B{#wZ&Nl!DHJes<={7@-`$&+sVEZQ8GG&`(F+7U%va&;;|Iogk7Z$`w7
z6BLzd^v_dU#?!w8Y9%B>mLJk2tly-O0-!^;P;dB@Z4=T<ysVRfdTSulnWq}jka(nv
z;CN`^0i;++@q1_1%qc2-APCI^HI!65m>{z`Hg;K66{2N5V&C5a<xSP7dF@H#Q`2_0
zJN7d5+aN(bI{ku-S^g8(eW)7d2J^MCT&2(l6pp|HiewmLZV&Q(2J&G9Kos;|krj1s
z{9n!c?F<@L_RVD=#5+#+42=P)q@f+4H=T?4E9<E!hcEm+U}>j2LqNC(Ad1}UK!|h%
zICsyQYGN<G6Qw}3VCmPtHZ^#7YJc~pVTx0ov|9GtX6{ypySr|fR1~EAy0L&&DPG`x
zZwn$JKZ^$(T)!8pNCI!yo&XggwhZGMr@I1{_H0e=Gy$GgCQ9;?ySZKkPtSt5B)lof
zi%;inqGQlJp8O+|>82}3d>zkvhOWQ{wIbVDDwHV_T@jYxM2Z3)&dSIkR{+LmaEem%
zTU;ZV)Od=Fp#+Q@dpl{dflrZ##rM-fP%<?0_o5Sr`FIYc>!@Hm?rm+}hc=e?K9_4F
z?TQW>h8xj`dbn{nnJiO4i9gMgq|6rPOmX;ym&W)-^u`K68W@BC89D&HM8{q?<g)m$
z&S&m5I8uNtg7KK;nC=FiYk|=j0-(w2zjau8$|4hOVzdW2(iqHs@!d@d{D7ipN5rhJ
zw3FKLgkHM18UOhWGzQh^9TJ+j6L?lw7IJT%TxQtpmDdKg1ahl^_{2_%D)IXB7NW(?
z0JXwS(16+0oU;9=Ykq}T;K;t9c`srop7HA!vr*JKT6`VAJxNqdAI7Fe!Uhj^SYF^?
zolrv0+`-V6OOp}%?JR)exRZ~RHMy4?)V0$l?{-YjO#)Jj5BL8{r90Z}SPj7PxIQ>5
zEJG1B+`}o8&C{XsHZvclh%bJ0{OM=zA;;b{@~ue=@V~o4Db0<kf^>!idG=50`2inv
z?xMMt=WRV-gKJkL^=D|8@DD;XwJx4>imcug!-fjZIP0N#;D3J>kaGq1<@)fzoqm#K
zIZjm<$XyET3|Sg$Bth<;NN6lg@VkuySYu(wu-bAE>@+U`3!OG1a$wI0?&;s>d@$R^
zs~pTj1BfbMqxgM`X;dcQXPmAzYTiBta7(l}&u{g=Ag<z_M0bUm&7`bUIY2#k>{;a|
zMfSHgiZ}#CP19qIzYStX((yX$%<(z!%uqzQRW?v)2h2IsGi0bQ&j+JVmpcSW(ZJwH
z57u69du3$TWjV?4W4!wAyR<#Grb&&94*P9+TAkyDZ*$#~kZdDM{iWok18uy{mOftz
z9XJts`EQ!WJ?`o_wwEg-UN0Bf$f||EK#IRa2M`;^t(8(<E<hdSmY{moXT#&?#SG`c
zoRrGie%lB}sAj8u#&Jv7-eVV*I~5-#c5_!^WkdUX?PU-!K>{KaDvGaGMrF^f@B$gL
z*`PqP+FzuD2<aTHib*caL2!@|JF2t!Jtf4D;W_=L)B%CTj>M7DCcb5>j&BLj^IQ(n
zIJ8wIscV-e3ZwN^mNHJ<=|CtC!uHxdlhYSiZlE~oJ*@l}X-+owpbPFIO)z5(XA5t3
zN%%<*!trcgW?sywuuJ>(IYaNLj5G+Q)dI>MNn3A$qQK&e;#7xXFJp2(%H@QMU~ri-
zsP{)>LZ#v5(k(_x=IatUlMG7*Dq4$PX7;<>n6N-jYK7q{Y+Yjlh$OX`gW?esi^dMC
z==yz}M>ouIgP$f%yv_zR8*AT0za9}3$5Wq#x@RZ;ZUI&bdR`q)`_RWU$D2DNTGP5C
zq62zZnLT;#j(zFsRr6XdGUg13cn1lOn$kw3+a~|Ilc|R`Xp5^@7bk$W;&t-+;NLit
zrsqhnQ){$`)_D(~emy9DdTh$WcrnyaAJ4Gnx=N%EO==FZ-dAPdOMK4^Q|ks4xm4>A
zZT7ht^v!93U!p1-lW$1<mQHK#?fC88p;k%WsD7W<#?m?WE=+=nA9loD1ul~#P@FpM
zf6G3hi{^Im&sWF+CN38}qgBtIC7CLBh3vOqA}027^LyvM41P4<VE_m*HKhK);X1Yh
z0Dg9!u9@(MrWc4tXyb;IsDm797Uox<pl(77j6=<z)COwIMp#DH%{PozUa`;x!kdtn
zjGOw&9lPuF%wEF%F{%&F?yINyaB!F#^KVs@0ws^wjGekO=Qe~XY&ket)~V|V^tVFH
zSEgW<uzud7NM|>4<p8^+9J+mV4W)abS$&(1bjFdk>{nXx7OL^CpP*7|laiUv5>S+S
zltiMZI=0*m?oncc&X6SNfPWD6xs>oIznY_bgSkSQ{ruh6Y9@Mc0wX|PNW>Ni^>Ci5
znKo*St#d31koF{9ssy5lH-}oJFKlm)$MM*CZ}j^kN;vpPkNN2Byosl~)qWZ*7JSRn
z_VvbI@21NZEoGMw7ZgptuYmm#z;$>9ONqUKb^Uw0QB$_X#uA8$z!DzvZ<-q}gllI%
zR-zFpcOp9Yum5frx&v@RWED^pC1DJe>O6k7Cca76EH$uBi^x&_oO;_@=4&|Xv5FUp
zDh_X3_qJ+<wuQPkCS$M8iC+aIj)4xq6IzaY2K;#fidmxGFo)B;PnFKV)ZIByszSo<
zXoaFu$BdVyvm$dxF!_D{;~vFI?;9BXBozEg^cvjjKSaISk?H0q#!n1m!+2t`=O~X&
zdH_1a`g7+D%k7iHSG;5!s<$^t<#vq+vSqO#OOHCcJdgoE7}^vS1pC$PkJ1Ha2EIgP
zBq>hI#7;L~srS+PApTiWYb`UT#~F5&ZuM2u5XZ~QU*a5kHl@_sk0slAbuKuA6H~WD
zwfT7ffuS`B_m@&nEH4^=%CPD3l^PaDyLe^&b@ZurEDdJYW$1U4|Hgv%BHnc9daGUw
ze?ZO7OQtUoO2^X*j1Vv$Sbx^x`4HCx&H^lk1l7=W82#(msf2|QF3cF3RBwAM$$>oq
zym&YpY2yahgqf2Y*^iHDLA1*L)ulIxCdf!!G-6;i;)p<$YT^(L5NAD}h?D0#gA@&U
z`-+SK$@Dkd2ch?UeMRpOpL%VZ4`XY@s#IzuXS^uh?&=uGd*OsS2~obpb$gB5qx`8V
zE#<o0wkH1<)b=f0rfCY2=r-DmQmL3|B{sao)U_Str=L*KRPi8G4yF!Ya&Tz^z-Il9
z1vn0{B}ZAukGdf=w{OEW!1$<;)~=y+&_0);j+Dqh-&4nvGz(e^@RNGwHf4+J0$`QK
zY0+T{;;9^iWf0|~@bz)jwyzsqRD~9j6Je=C)MI8f!^<$_jvmq!9-d6f_Y07nBWL;d
z)j2hfay-*+OFCuVDf|p-d*8sGZ*+j#7FQDY6Uu*dPRm}HF#n?<N~qAQQR)t5?pJQm
zx5bku0NarK;=^xP_X@X&b6MX4Z>XMoh}KBSk99e?WY=iP5~oUD2KPASm0cOaUaG$%
zB;u>|-&1?+VUwjKN8Cd{wxY#XnhHHV1-f>&_1){+SC-tYzlAT*>{s;B>o^;KaFlX6
zN1^=uD+E}><5l^cixlqW`w^4<I2mx-6Ym0OA6)2Bi~a{A-7BEc?=rOD^Vl^?TNat?
zw?)6$e%3tsk-#;`4&QCKoLF|jJ{3fWaWle0{=Bl1c*XR({3lNZ=~<<Pr4g1pX;XUM
zmJ4v5zv;V$X28PO12CHhCDt_Ob?r+YZ?S?)IW@tTliy#2<c*{Y7i$U)^JPOXa^2Ro
zPx^<ZRi}+<dJLC4VV)I60YE5mCH{jYAeSlyDOB!}>u;$d4EsPn-X!8)ZpZTK6vXY~
zCUx>>Qcl>v$2lWE<q-eZwF5QGVflOjcI@!oYxy(k(HMV;=`!Y%9o?ggdGYmd=Zsu8
zAAlL#$pm&jL+;+yK#G@91>ucakF>lf0yV0vfwwSQ^qc^}fUnl_`fI7uSKXBrbngDK
zT%^`G9mq1)%u}7;z{-8I_>)ew<HT!Bok-X@l@mY-kV1{ZNUgyIp^5vHka7U41K-Jg
zAKJ1q-ZnGra`e}j*UI?5e0>(CPA@E{;h3@#t!fM6&^d?mS_ce(6Rh0q++h_!-@R)e
zI8ys+K1jC!Ym{d!$pzqMs3`US=9(F}QR4Y$#k2lla#i0o9EkvgWj)Pm`QmL=r4q~j
zx6=JI7jtEb?r@wOWmS7XXW@G_#QG1Z%z+Xc^JXV^)u)~b?Mzu<7;%(Jo?Qwp`ybgg
z^(m4PheK!C3Owt&eHOCJ(D*?2<+k_CvUK9*7f6i><yoq0{|X9VlT`vc@t%)^qTR}f
zIpF-*d5)|Vk{xJ&7G_M{L6?rqDklrNrnfh%t^N0#!g0`(v@jos*1(T89SStY3DHp+
zd;=;`9Rb-r^+{*qnV*gobE`h!q-^!GEQrw6IhkKBJIYV|9hIpk9}efQeq`9e4puPe
zD8FYPCEeAIO&)Q(T*>khkc9^R=KlyK7hO!r;~$MDguUNNkS%RyY*Xgr6p@>dj)j(}
zshzvn_Di3r#uRvf4hYvJO#k6oJq85jqo+o6w19e|8ae=5dK3jOY_Mh6hn@?}^);^&
zDzyIZTpI9FR#e>F8kqVjB>lQUwGadngC_cr;T0hAuSW-<%cyd3?RDutn-xrQNz{&p
z*x)YUSfNoo9LM*rI)=f75vZX#EQ4AS?_yj==7MxH){G*Iss53zr$9n#T!)V~I@4Sj
z;-dk4?0&>on)`<-dP7&xj*1>B(Nrii*xaOb!HAGXbda8KgSso-$>Q&%A=9)ySNL23
zq@n5tP4UvCba^M-!(5t%?Ss>PDWuIXe)0QDy|Wi{1HrF%Pv#jgsCm6RqEd=btcxdX
zyCg}-j<wEUdv3*>MrFp$-zh<0G7aiW#D|>a<E!Ft;g3CA%y}>L-A?5jien-(qPzd<
zXm3|i&&R>oZQpB^-u3<nsnEtW3&2o5`2ld0H-Rn$AEsyxrv=0bh>9fOTY*j>XVMnL
zn>yt_xg<Cm4P$7+d8Pn<-k;#VLLJJekwBlKR`(3YY8F5+azH-0)!#->_r|6bASvBG
zGeX0@&cwVN$vm}@I~u$+<bU$QZ_ki_6{m`x2pTSc7AKdUA4V9v`{MA%CY6a)PF?9d
zH9a6u{`;N`5Gp@c+a|r;37EJr&~(dXrP9~NE{PV&W0PW21$N>!Df|E4e5U|g1-X%@
z%-wNed;cUcPk;p?H^1>%aG?H~&Z5eCTNZLP8?N81oxRonD)U5){Ue^!k#ds~Pcl`|
zp4UB&)8e)5sYT<rS7Wb_J$}eSLo(KDyIyH`#(C?1@bA=TNauN%X{n<o5xqHn5Lg4l
zkCPp!<<?nLIDU`bL>p-~r#9=4ms}Nud=%n(l5J-a`XTx9w>`jc&!O4p&L@lhygk?u
zJY?w9bJyNS?x5H|{;T)wtu?vuf0>AdQXn#~{#<7h4Ppd;nNaIhVtZ#t!fCA5S6mqT
zV1lzR9L-mXQ^`tm-s8ThvMMnYQ7orvXz;9IM%DAhcCU)UuORqG9MF0}%<hH~zo?Zm
ze(UOgDn@Dy(rn&oTJh+^DY1<L!dy^usB2Z3_ooA-ttqOg<|vsEX{xuNlA9JZOw;>H
zJTqIEb3FUp(3jvjlDyAf;S=Ei6DfVIYleD>Qu<0(bez_Sv46aRuXB+T+6-30N>;b@
zeI-B|6_X~nMgpRYpFz+M&g%@;e{--5r{s9EX@Zr)&i`t86&J&$>Mc*RJp4C<(u4<7
zpx!9zKHitzjHhK4f%ue@oA0ljA5DXd*q%P){%RJ=qDD`x6lE_})@Vi9>;6Tum=%^7
zWJNP&QUIuXyZD=;C)XQ<%%Bw)cgv$PYPzg!61d#3*3!FaZnB?zE4QhCMT!$--46X!
z2Lbyc`x3?xS7QF{pIg!Y9#Vbe*Gz9^s_otEVH0im%r{QnEQN|+yt;NtPHBpuVLR4H
zQ@6T_w3{hAHB!U<3v8Bc**jiXz@tj<IOOv4CF&~nI@Zax5%UEvKFile40(kb)Oz^i
zGMXt)PN`tNX68V~(8}QSd$DJOZCe}z&93ehx8j5=SkEZ)O%KVx@-H&}%VDf*`T$m)
z!rflS1PZV8NyHig1x|PW;O1TY%?Rl=PNb4t>5V9_wU9n=R+fsq*e&}C(UU%*iJ)>)
zFvgLJfM_4WI6p%Hb6-^XxqsuW8NXFxYyN^Gzc!sj_C#lo|3#*iuw||dYQqXo<w8fi
zHdf}tHV;6GyX>hw_F@NXWR``)a}rlbbzKS;(^7I8O=da|@=NJ9RfLst7i15(P@R^e
zPpm%m_V`T9!8F`U-v_cZuCf$!>HvX5dG#P6_y;MiutXvHsCBdK2T?K8ta)P*{tZXU
zvxE{4AnEyEaU@|#$!S92BN?%xMa$a0*Z<TA-;kHIkFPBz(KzLUaj3_jQrY4xu%`Dl
z&%K?Sf_VjnA!B*jQK6miJljFXY0;+j@%1XOY<5h;yFm)9Qg`boKl<hO&?$2C&U2=P
zChD;eblPX~o4+!E5-qXH0QOeRtSW&+|681d_;%M)&j5v@_nnx!nVLz*!g7tg%wha7
zB73Y>QAK3j@>=TQ17_-18|Qn@F0Z{rQcM6rUcUdS>#FvrK#HUhh{3c$mC7kjYgi29
z0ftMgPxi&nu`F;Y+#m#0%3t2cThntHHB8|&jNcPMr#$1uKMk4Kg~ljP`2(agkJ=PT
zNk4<V)_F%dA*JH6hUfm7OjE_}OP1Q?MX;=8X*>3)Hi*N!hRNh0{XEof5qeLR;j|jB
zwE^^L__^QwTwGBP7>q$o40rFIKL7mO)2k1j3cP(=_<WuRn(`dnIG-ECLm+R^`t3|R
zg_ec}1_lK#$sy2TEzLyZfDy@|uoZt3JX_JZUy299N-6V&Q@vqFf*l{(as!9PnlW`b
z&GI+LW$VNAVRL++-P79O0juSyRrBvA-pU(Izm}L<&|K@wb!h}C8Z8g51`8hLu{?pN
z{>!HXbS)PxOero=b;0>U?_Ll5T5hCZJ(eCECg|Mo^GxZ|yBe(DGw|T`j@92;*zt8R
zb-}07aDL}xj+Af`o8W3M`1S@%x0;R&wQ;2BNY{4XlTze+ZSQ6K+myW2dnQ24P+$9r
zI-On%*4@T?QrAZPro^XA0{kwvd;uBYyNeN6?Q(una^>}B!tHxrG_9H=!HYAsvm*#e
zxExjeeRIm`?#yaV(UUy#Q;?fH-of(tbg)@WnSZb`wB@(RLEV7=n+7Yb!TP<hdP0hj
z?`C?x+Tz*D*R6^`wbd+>r@lMPVQxuQ|H;~XR?Uc22x4S!z*Js_&UP=UjlYSV`(b|5
zZr_Ks=NU3ahheYwrqSgALt}32AJM(d)=TG5xs^SM9-iBLX!GuZdwVQpJALK*>Sefa
zU6=<nLc^ZBzDxK#S%lzaS9LV-4(xG*@!jmt+;0&uufG*K$d4Nsi+8Vh5%)Wf#v+X;
zHLuZbua3(Oy$CX#lngI&jPlBJq3~1^UdBj1eSbRb3Ep~ry601fYjsR&DQtviO2u}v
zbrr25&~;7FO5P+q0vrTBUUT^{i;O{rUAc(p`H8)9xlMe~H_0zWu2a7sZ`bSn&S8KJ
zo=$XPl^YudDb7Vf=iNh%T&0c%e*2H#J(lJS%J+zWU*?Be7%R8o?8?}XGrwO!W8QzP
zCLJ9H4M%^{CRhw7d!!T~F8D=<R!Nnm{j?8gGHsseRQq9#Vl)IWTc7;cp0yH&<VdK(
zOMdn<byfIb<LTb!UrfSx?@V<VHrw3V|D+&uDWpIvjpL1ffT=P&-vl+N_1YK7HCt1}
zoB4%bS3%bpza3dfi{1ZE(72rqE?HVZy@fhQ&x%LbU88Mzzz;W^1Y7D)>QCBTyU?rF
zA0hvS%AY!?R@?UN0dv_v{t$#_l*43F$ABG^@N6beZ&_I>b#DbavsZ5u0e>&NJgC;-
zWlj>NtD6X&z`0CV1>6uXYG^{+eu&={hj@<E74cSGow$puf2md|4A>Gj4~s7Tt?CqV
zQw;6|r{j?6OSY3_^J}kIxajwk9IzHWW7-8N18D>4pWoWhU2{&uy>{OBueE71`KIOs
zQjryaXU|U{Ulm_!d7$T&g!8ZyTXOsq`Q`oEW9*Ub{oVC~93vCD+`g)>&A^F(!{7HV
z?OVwwXV??v+9RtYjJOj_<f(sPFLo<)VN9-Tf|s;&fJo+vd+;B7edjubxb`kih8jG&
zhjOvl^@J;L)Igo3r!NnJ7A>^sZx!WvnaSrki?ClMG-j+h`WdW{dW+2#slYAdQeI9K
zlXD7pUfdqDOwMYcOTZ_!uF8t^1j_^%J}#-G5*`cD?eUXfUE13AHfb?tQ6~2;Lu3w`
z#1XE3q}`tFoWE?)Z?M62Qv_H<fK|~9!*ol}ljUnKA<nx6o_Q<!%4)1rS|KS@^NGfz
zljXOG>l>pu?tmN1?3XFTn~rMc2bZM;?J6e!)cJ|Y(RNadF`kG%=jI1)k6SRqrICqD
zYjQSN*F3?nS|&pN>5y0RS-M_>$-m5PyqD)nwelGPIF(w0>zNitP2@eU^WJbl*kSv5
zGd`MTv?_jI7)buirWGPHMu<wg;bH~GRyE)vR*eiZV;l!Z<&UVL2aJa%xDJ4U@ezs{
zCZp3=y#Vl)IDyT!=eNB|!U7;r+eS~9&J2&dXg4!#(Knb>YwVwzDPH2Ceqp<(a4j%a
z?-HAm`^#NU3Oh}e43Zq78E|j^ryidIby7f@MmoESuX=kafIUCZ>O~MYiuYDiCjA0?
z68B6$1+<sNWNrpXFuHoN?-+ZsI)1%h6p^3W$|KRERJgNj*pOGBvXXF0wkKF_<9$;!
zsub)qUHcb8uS?vMT^PVWvdxYQF$NIvY~1WqY`M#u!r6QEVz<{y#4=c3LP8Gjy=({z
zi*h{DoaBtp5h9#<(e#1q;o&``tf*Kz=}tYISm9cC=08<aweT-hAoBoubjFnkz4K*f
z!e}8vnL64eN1G)>M|s`e%cQ%ZaGtk<Bbb=EP`E{dZK*tL#`uS^tAImW7nW-1IOtPx
z9<ab8hkTn|5l=cp&f&J0GBceu4^c;3-UY4^ia83ymhJbY;bSa^1UTy96~Uk3gOq8L
zt-k&TzBx+n&Gr6}d185cS&eP3w%FQAY-OmmnF5_|(}fPC=QjSw;B_?jX@2TB+Z%aa
zwk|<;*ZfB~mX0Q#=fCJ_xnBM9+{_InUe6!8r&Isv)p9kAlFr5Vd&Bm)tn0VSeI-R+
zN$F{mr^D5m8xYQ|A}SfCk8Cgh=IUD#uD6)~y`*?WOhBSG+?KzRr^#BpFChCtH({Fq
zoKLZWA>CymM@-hu+H9o)7bX-dmW?4(USiMr*)BaKZ<t9u8KD#Ea3u9A{a;lH5Ul>{
z_A1OT+wl?L!5_N3sSqTH2gCbi4D1s@dQ7?J(;C>_+m`4WArplfl@&jURs3^V_~;?U
zOPY*cQtYeEwW>&QQo@1Tqp4A>^|Aj)Ta)`rUv6L~R#tciA8&|D+uVC|<4>auacMvL
z+T|E;@noyFcC6qQE(tKG^{?r{)y{yejtBDMrDgmWuALO97t^%xKY^=%hRk=Bf}Tja
zRdDrrfkZn|GYF`ui?+*T9{ZvMRxt1AOhEd|@1BOLFdj)64>^~cfc`X}#6gO*3^6`l
zhc|%UJuzDL_W~wWHW<gg#GPTdQ?N53I}n(nXhp29ga0YO&YyzVy-U2wh0w;@!qoy#
zegDyM_72j^SK0363g!|lq{PQV*&4A+d^_s=vq0O@-y^%-;ve(-c%nL=MrZUW33VWI
zGq~eBN|AD1P$cyb9*wYADX41K$Uuh6&pd$I1^X9#^(f=|&+<{Vzj!v>I4=P+tix)?
zahGN%gzKzGp{)u}2mUAtQY;aex2KN}zmLPsEERic`)U6%xya~Co0mFY!LAmDS<LNF
z^*nt-e;Hy|-m(Qpn7AIL^U2^qt*N23*eWQYK#;KX=#Mp}plN-?d~>t!-uYp~DMp(6
z-jq|N8!ZTYj@~ADPX|9+7Hch-MYsTsG5$kiJw<86Fm4tGKzS!xq)X&`=s<jQ5bb4f
z<S0>7X?^l_`5=P5wWQ8GafPF5#Pe;eoe;t6wOv~SeBKfM$FNU<Y&DQn9l=H=)JaE4
z=8OBc?mvF*M`_y``C)#eF`!ne#rRR12I<mAS*;vx&UCt@NUlR$oEP=MGi7nD2S*%W
z`tttw2^#`7+*xrMdIzVC6=k?+%%d1LC;k2%EaW3^^=rMTdL}h2K6URDTMY8<_38|H
zU+)S@x*KC@VyUFg@q6+vYV1`5dvd><?V2kz=*+z`&UE*6i(5`vWZO0C5lj4E&u4r%
ziSz#}L<MeCr?fsA?V9p@3H}L!kol_{vNH=R+td&8`@=MP&;+dm-8Q=SdKn4nZ6a$o
z;5xV(d<Tq$XBCEyol)gVNa-7bAfhUEJpW(QKgfr(Buie0XmT-%)OvqRKyaKNblFe=
zs5K2+TjDs%+soUKH908NO;2m(VP3g!f4XTOpUnO{=S|e*MFms^P;mbDIXzKVzVJzu
zx-~v{2_d1=@*T$O4JkmKvB({H&&YutwKZ|Ueo?rU{2g47V%rA2z#%PG9h%YXV8m#y
z*AfQ4qT{r9<sBhw3J(VDo&@Lqeeg~?;M-jn6g;!azuOS%7K41pu-`nugmw^@-OX{B
z%0j<yfzLa0Z=}BMV}c!`ityTz`M%%#He$DO;*``w;Y`+~aAGL{`TKuk<pv|EcCS7U
zZP|F9AK!ERdl+S;lYCSh;yZ?^D!nR$K-LJo`!e){3DKY%5ij2&#n2yd^xXfcf8u;w
zSnQ66tE?-Kd-Qkk<3wg4-(9*5c7CPS<eaA%1`sh6FK*H%<){BTIM9S08r_;1_ZOPa
z-~y1gMlVATpTcN)kBa-6p;2@GtrH$@n>jEWUUBC(Ga#5wyS0TnfQ9`3nRU=W#;k1@
zUwt2HKu*8uet|z$m4!m(3L%;aJ%tdS>BaO6ni6&EY?njJn8eL+v|q)bZPy7J1FQhP
zAX37vck!2Ff0&L+Mqh_)-qRF24}So-4ggKn?77Yciz@u<m{N_pw22`OLa7^M=!u8t
zCv|7rxxPDtI)5E3X9(-2&kA|+igG!I87s8ezMtYbl39*$Wp$<gq}yNHOxJp7RhfRU
zv33WAf@WYsSDf8S(>_lp2*WBYtxEIa)a)^U(~yp2cIwp0x_(~*I%UYK##<Cd3Bc3m
z)nv{<BCkuly7mjryBjpL_j*2h>(0jOxBcaQa$MFWZyoCq&*!to0vB2Cf0__xs%Z@m
zj!jpjTCV$)K4>DFzISQHsyHWwjmwUo5M&MDiV814nrX}9g)RQwM6Vej^#QXg+LHAH
z8!Q>SJP469F-UVp@4~>EI-iQ`bUOfzbaZl~G~TXweqw|$H0r8yghkd1Q5Vq}6zE!&
zR(A1LIR#hO$JaSK6hQx<FuSisxnWdA7VVI9yCS$oA$<n&kp}~-<k#MU?*wjq^tib6
zKal_Na5VCfaRD#cK)Gdy&5kd*(bonfeuG*mH%bl3dK`+s4SxT>MrdcAAvu;^=+5Z<
zXv;8pbn&V#CEb05@WRHgAdOmzT-ra6-$mexKd3k>C$L|%XD7GU|MoQ19ec~&ZB0Wm
z9Y<xvtmBR2e2RZvmO!>gJaTO0CmUOC>7m@23zUcK0hEzyNl~SeQTWI=5h`IXPvU_8
z?QtqFMs-(#`fP?98qx9`V7}1o6Bg0h1cjjYd!?K&QXcUC`EV|YHk$qZcXH;98V6)0
z&GVFSz)fbqMcarAS`%0cdm;Ysru*mln0u6*LkMv#hTGF0cHHe0KdW54stoBcdFB=R
z72i9h9&0Bm{f9mQ{K=S%OjsV?2Ks9z3c|bZt_nn4GokeQKCuq{6}GT;MWg<7?*BXS
z7q13^X5U;^5xd6)SZ+%`W3<<%#X-Prqj<dokClU|42#DXvH!baPTr*&#TcBI9Tdkz
z@$3^CN=i35PYDAli*`lnY$=5rV=w5?&H-N7KZk_`T~7OudZT)C@6L-Wyl0OQfk$jV
zs)|W7O(qAz^cF8;{@)9L!e^Sk64LTu<a9;rt{bU47U}*MhSQMl{?XgRXR816=btQ_
z{cTXmgP()iAt5CN>N7gHo98KkAQo6rZ~?iawKm8^=kbS1aQut&8PNsI;i^55E|y6<
zk49#r$Z5t*9i`j0J?Qw-I>b!l1`GQ?7Sul<L4+bNxus>eEOO01TtifeTj>;O#2|_C
zFQOP_qxi{X5s}<MQosG^{`~0k5)hUVyn6AKVz#8<#Xd=war=vz7Bi$+<3kR%(pEWY
zDhl{<G%@+qV9w55>75)d2^kP6wlkzS1mK1&r7J$)ik9hB(f;W?p6`jxO5Gd0peUd;
z3<bbu9H8S+SJcJL*AqWbzslr-gb&YRzou&X{$j{{FBV}IYO<W|{9Q#TFA1l093s0K
z0NATV3Av1S?E7f;OL=WYMFm4b(8YDTe$I5aHG6>WJODXtX40_u(CJ$a4|NN0AS6No
zFA$O4b)`ozs_M|DSTHR-uuB#~7$#NeOqn(RbWRLPT7N%ZOZ(qS$Lb=f20nrFDG2%g
zZ|1XlTmPy;qmB#@KBOk3?WNBO%4HrWXC(7)+UEUI7Cf@qw6ap+)fIm@SAe8jzO(zx
zJW+UK?h+&O$u)PV7OkRnxFz@f9F4z@y*#tEg{8V>EsVKtZE-SEZvkgGt)<}odZFcG
zeHC?ONLkeoxtl`#^d1zGlyP?OMu0=myYC%PyI;T77NAoxz=?(PVpeu5Pzi?Q1D}{Z
z_Tu~-59bn*IU|o%99EAwYYt5nTELMkCrUt}7tQ=pG_mA?6hI;Yx^2FcZ-(s1xYkJJ
z7(dECOURk$t@~KKH=4Rv`<C00PVdlTsyO|T#g^e@P!t<7Ju~K)PO(b;{LV=y^qpAb
zWci{%cjBqX3OWj5VB4S3yDAXa$k!NHrI79}%4RT~Tn-%+`%gv)+`u?CTj^-(<ZJio
zY)rxqR~PG1`Y?F0E-y9YFkI42t==mF>j1SI_DP;+K?NT6hS0r>;wBJoQ@0+kS~#Wc
z>5qv!f2CH*9(l@HX7fBe)J6`bg_aD9m-QCpnZenF`o;dIK@~DU2n+C(9qR6wmx|xs
zm23?8i2oqIpFidG_Pnx_ft_gvTQvv&43Eiy?F_<Lxga_HIAzK{7<Acmi&KjZyj{PD
z&_-v357DmBQ_{X;u}dqLWg;~lT3YJ;&(2l7Ng?jJE2+AqHPUX+aaH-l93rJvs-k&E
z&w_DM(R@}<UIRC1`&evbCqSNj+STG%gJ|a8yvBT3WDM_Y?IUZVZe5a*0m6W;^vR@g
zjot07{^o!`Q~@T2Oj}#qzyqDK=JUezQXfXQsEX@(2L&F9Gi(+TQcxDq0;T>wUt&1>
zK@@8Bc#-`z?YWt^Uv=Z^7wW3uc3NKP)jzIR*XYentOO>iSXYto+J_{8xa_!ph5dJN
zkg0)s8{bGj8D8kX0gAMIw5WgaT;HIj+$klKa@rlG7L2pc7|{AbwNQbQwS4@Up|sX+
zoAZkNN2Y;)SpW@bq-mj1D*z(j+z-@41g^p@=i$)9|J|DsJQV1T*}L+(zMB(Iyno6*
zjJ#uc|8q0HMBK|KqFDhmm$2^seeJ7#$Dbg@ziG-WXXb|g)F(SjmzthY{SyEaci_{X
zq)vWp0~4&keW`yZ*c=DR0SKzo&`+CU*5W`aTEzEnUJtDAeGb(}Qnd_f1&}tzK8ow?
z9b@npL9>N7y0ij>FDv#E)w*Tlt8Y=Zxh`6KZ)Wvq!vbnS+lhUaDFJHim3gQPmPf^b
zNJV=sIxS#7)5#^Sk(h)HZQEF4uGHnl1v^?D9iUx3ffte4?fEG;a0-66N@$Qwtjyy`
z3UwzCO5>m$9<Yt!JyW1ZhmY&~RbBay)ZJD(BP>HpX?RJj4oc;Cm0dLKuQzRoMBK$q
zIaKVW-Xh`Gd9ZktIa%~O_F%xt@RdwbLlRjNH~8FS?WQBiT>gG@S!hzkf5O;+7vs!H
z4^`YOA4rwo@Wz^;T(V;Zx}nbAiAg|<gK8gD3(q;N4TWI1A@0=fsqR{;$fmd$^p9In
z8U<<VN#%#TufO`B3gKrhY&wq#rgSw8P&Pn7=<i<JCJ&*!U~9Z~i7{@q6?0Z#l@zw%
z28V^#?P7M`s;?*MM}Oa$nv}HP=G*~~Xh5`2EiN#lT=HGda#MfBHME%Arh-kgS$RV#
zCtfLxWCqmfINO<~m858(O3W6HgbyvsZ}}t<{kkENfA3rd<|!Rw4sbLcp~og2QEDh6
zG-m3B8#!l@ne9M(Nr&8Wg{^#Q%D+!oF8z2z0%_E0(T;Gct(!yL41Am55k%>ZtLtb_
z6ZuU9y;wqq;wjd%+n7O}cExwwh0bziF9=T}M4I4MSo4=FEPAD!$vD)EbG=tcl8Mdo
z3VCn{8uPeRNw}s_N*m{wr%O3dI=`V-LG2R-WxGq9=6<+RjvCZiF%iP!795HriWP*r
z#(_|1&)NOhq06Wi*c(&6{jF$P9=nYzI#J0ayo+MCvpia$asnkkNf(fUqQF-1REacc
z;n1A_Q&jwUBq|k^x#aB2X1CgGL#%Z6u=V|K&nZcUzMIeLTyC0L3p+bA0t}4WA~N5V
zxok#Kw}<1VpMCRRbqzae-4VBK+`6i5R1}3H%Ik8ZhB2mbEe-X?D9`eIGz52rmtN)=
z<{1nMKU^2K5h8Tj?1omXAK56Yr0pfiq=$d0Kzpc3|E@%J!8UZpw0I-7(OXo2)BSjS
zNL5DrMgKyTNO_g>lwL*?RXTK=H8X{IgF1-R(2%Y$x)D5GcP(9xR(@rrq{>`C<va^@
zZww+zi-Tvkw!gA7%ehY?c%^;TV3EST@0PW4s>7A8a57c#1tG_c5ppDo9v10r=_=oH
z@wX1;cDV`Na(E@7Gt0~>b=<)h7mthr+a5lg8J(PcvzB5g?&)OG@D5lOT^X-R$Ko^|
ze9>2u?EHDGzUYjJA<ao|!WdN`r{|)wBXL}Zk|Q(R3RhF-fp>R~!iGU(zSxexFaO&9
zJB)|=OTgemLO9(WrSEc@04+oWeYcu-<b|xxI)eJcEA4<qNEy|L159{1xA_~|+_8<X
z(poSqZBIqS#<1J@3Xn0C5M8zF2Qw;0Yen8~mwgewrpqrat&*^rl*(zc3H|9TOjKDL
zG*71b5dvik9=IVbJ+_wPLT2@};j!VD<NTiqX~VFIn@-eeGulwQ_l+u#3c$|UPFR+I
ztMwi6>yU%P9}pYrvZPw11R9>o6K`UJpcBq~a%;SO1pvAu^dZO94W1d%h3(+Q9q+P?
z0z~;2AaNSRMiV-^?d19ayb)3K#KtuUs|oac>4Jre?x{~kr2y(mvNE?PaOJ%f`C|j>
zV|Il?%Z%AcY*mWlYs=3<Sf-p|QQ(p7uWbc7xLZTZhL0RC6o(+2)BK+r%Np#S@2-Ny
z!))I(W$EtjO9orM9PF4<fQcTP+b(*@u@bM_AtiphpMQx-YERxJzVol%k?fXCY2$#u
z<*_S*YaKYHX3U4ye|>?v4)wBZGqTjf>E8c)H~`k_N=*I3-2Ar}f4fskmIc^B6{#{Z
zQbR_4ow4U#8}}?tHqW}cyDrM4%@ns5Xd#kXrOvzSBMU}iQ4Ij_1z+J5neQnx$X`Lt
zx*o<wv~fKIHyPC-QvCIK3v7V<D<3&4KhG@CqKz&Oa`*o_mm|kJ_-$Zna-g#EXkfrR
zIif-*f?YsGL@9Ot@X8<8@M|H6iGPDTEd0|<Oqw`&?WvaIl^p6jIXccdO=PXG%bQ&&
zd1%B(Cy?T)-TUB{i6@eKr?%Zuzfj(5hvgV$L1hIm&ZJq<W8K!7vaM{MrMn;~umh;v
z_(vH(4}=DKiFNa;Qq*iqu16y%?><OL#v5Dig=X%EG+a<>t2Hyw=LMm)pa95O?}SQ~
zxgr24@H5ldDU$0R{G*a(h#$}dhwFPj(y%Ae02i-HUaxn)`=9bf1-94TJ+KyhO6zs_
zlonvZ+D}x<VGixE@`7V)b<XD_MRn7wlesY&(ADcRH%wHh#FzZMo9d+4rp%vhKz$F5
z>NZ%sfi=p^j*fYNP71qg8Mv&z`mY9Y3ewJpxndcdluGqVxE_I$_}FNBL}&M5%=Kuv
zSC)5>&AvzzIY<}Qy=GUu?2OCBwTX-J1h{XPV_q13n3Cn%16mWusCV3?xqp?i?IB(P
z8-iV9EHU#3l+=IcCnY*2Ertg%e}nQIHRHgxj%0KFSOsRnaG1pk@x03`*xKN8XL_`=
zyg2k%?TfX!o`c*SaG6yY;+&~hU~ajh3jHfJ`|oGNbxwuD*W`b5{b6#`P|^zcq%*0#
z_!Ok&u01pPNNAr?kh<l=*q~yh2~O@K`9?J)+Yge8px&|>S0m&vU^~+d-q6CVH$*3+
z)Me8ioS|g=E1JsCj*-sbkM@fc48gDbOH--hB<oZV!|}RRcM8%KC9_v{YU($%zgP&B
z{~8y#IDUU=KPOd1rBpoGmOsEj@?BDf*OGj}C|PgDSc8QI@KbIW930C2&<SmUV<iU|
zzK8#J^GirW*6MQ5ohudt;yQ#+_e;fY?#yP(hu5c4T`bj4AvKtLkS=cO#wLRC+Jx<$
zXyOWBGoa$(X3tu!Z;xTKik=|+X6hifE?(84toS|OcIHEp6Kij*_mltL0O*Bu2I{`i
z7<B7&U2kW9nXjhS2ybhYNq$rdJu8r##VBEyOyWb6A^=NwCen^%ba%{bdHeh&ssJ@4
zpA_WYaLW|0ip<B~f2|AV{ZH(j201|ow+!i|TL1FPdRnt)En`qZZQ0Zo<r>A=tt0pG
zg&N>Mp9>d^8qnhu?&p=3rhdz>)1-`G&ZY=6g6=0?p(L|o+<6DH16vd$TX)g|PckKs
zoeGcy&|*s0X+t`if#FEm_6`xDrG?Cq36zSUm&Mtf;Nt;DYV2GWjEZ|QL=H7H+O7?Z
z12>7Gf7@ebQ+ddTdiH_R-v>Po<W@fIhB>$b%&LD}Cs$o5U#)<mGJLr<xz~auTd)Oj
zWn#VI1|d^g<6rr!qnm@DrXqCOw0{<y!S#g$&#jD1mtNlPGn8$AGPM1R9`b_=!y2*#
z9@NfB>^v*?zedNuohkFXTTNcJBdA^s22Nn~%dB?^>WIy6gN6@d?qMR9*S{EsSGB@5
zLeqwaWgbAfir@9>d^ywr^4;dLqNBKp^e6<Zvdd4?Md81}{yq&!GwGf&JWpgdmw)Ht
z7I|}^s`y>kRB5pd%$3JO0sss>DY(9{@hqlKv<3O`WzTfVGA<~fLTvdB4TuPIkx`8R
zg5_U&fBtVXOMC~J8f|bU-SFP@7%s877!uz@;vShJie;E4Nzm*setiNhD1Eh&{mFJw
z0Y3aSJ*BqbVSH%oG@eRV2ziAvLKQjoRi8I1F=!)Z?>p$f4JJ_nv?8ii5$fPNItv@y
zczbWEyf3AUV+?Oomg7uoay|zM3YUERk_j#6HJEZaJ$w9;FS(RyH<*PecJf>YEhGfM
zaYsd|sKl;ehX0ins)gb-x3#`O$_i-1jlQIZL<b}>Q9S)*+u4!_w0TNED#~M=S8@1G
z#L92p7G00)atF?`Z#k&n9aU+c-oImio+en(t1pv7@yyav>i?cuMYGQ`L=C$-jIQz@
zDp<_4aEwe|_O{9I4y^>9$_Q~?s7B0ZAiv_jdtoA4hQBVRZ95tc|0Fht*fw{|Z9P*3
z=zWXZc3^T_WZM*2;D25uzH<~RRT*{yb1Xw9tbtD=2}c$$qmff8U_UUB_jPe|Dv&+3
zGpKtoQN|{JC2PFG2)L)??Cm2ok+M5_X(StT(T1gF%)eVT8Y#e-S-d^NcaIBGSco;8
zH7o1uFQXd^NFCmR$p}4F1Ke)511pYjz*o7)3eAYmn0)Hns`gTz^b2+Y40yL7415w5
z%PK}V)OMcczO^v`yZhHul#dK|dl(6MjqYi&{bCx1-H0#*o#JqbD1XS_s9wkpxtAL9
zj0r936?KC^Xf?FDpYTcRL7W|`Uc>bviA&-RsP*mqo$d<C2G0MZ?Y{z=>Y6rSSc(Lc
zqM`y)rAlu~ucFe6bfjA7AiXyu3St8xG$}zLG-*ncmVgLIjfP%>(mNzT2$1C4-1qY+
zKL7t7d<WlIPO|sfYi7;NnwjgGcYa2qzx9<_ma;LkCpwq8>Y(;=hRS$tepfJ!_rOmk
zPS4AC&n#X5n7)5(<n6r<Sy{k3L3BJ_<);L1vg3rBOphM>9pGB3lhVFp_qM4cz=ZwJ
zQ-dfQuVN?#saCSr!o6DUf@21CALY^`=7QE@0;cJ~=g2vF!rHIG-KU6lZ*K}!UzpoV
zI3HkBzHI}0y7k9c9m)SzOf$GxhH7bQeQ@(?_T8Ox(}k^G_#NbTU?7ViIsBdPlYcZc
zMXB<RThiR(1@hamP+Z1e#c;qjNpe->_OV3!c_GjhbgbXd;wf<o>*k?z|E%UAP58}|
zGYt!Cqlu}7sbjmoJ#$euch0E(ckBO=ZVvECt1?KotTF<>*MO}qG4h=r?K&X^JqH9T
zx!Tiy3RdBurX53{tLbFQImX#c!8At*s{cq2Si%qPiUfmMt3Kud`+{vYIs+mVe!mWN
zC8_`w`GXcnVslkM4KAT?dKp6AHn!nDn@)M@Wr_SrsQh!+re@q+T?{d%ohQ6pOf)Vk
z<?R6FU5P@VB3q80z`J=ZO9`Gd#UY9x9XOYvZIG&Uo5%rU5)^#K@LM!TF8#YQSi|%x
z)z3)j4Su>}%*Kt-l&f8;@3)KTx@Jy+-|%|p3B_;Z*V0?+deX?xXNWPmMa7`L?EMZn
z{`st4Y7ar2QZO2!?t`G&DK;h2z|a#pN@ZsNdz~#vD1snnI3IeW=;jVKOo`TXUB7_2
zp1*ekKn0$&ycHR*E$K~)M)hAz*};ZI{?LQ$_=T`CrL@rjJKBskBdxoJTR=@hbE)VG
z;SR1Zs2qL%+xvR79VaLi&TKv+a08_(6G*nEP<87ZvttuM%T*mvcq&S#VfpfuUy3WK
zK~4D;?AZ~@e91e;=%=T<e;t<#kh0;bD1Y6dHd&eN9=M5&Rn6|Ie_g&1op<?r0c9~#
z6I~oAW;9}s{@jT)hnic`%Tf=V-F&f_;$Gz6rc*7JYHz+=6JD*d`#TrhT*zpt@4Ss_
zr#3)*&pGLC)<x7gpnZAi#Mb~lnnpWkT;-3gNmX6fa_%dVs!_{KF*iqTbx-~5mnOF^
z;xGT6c10X^$21~tBhh&`<1K0Z7Je?{Vms&WU~HQLY&GzVHII2<Z$T;?g!p<9(r;@F
zX}Z2-k#hbkh&<wkgI_ftC><p0GG05!iY666?B1zc*)#}9Af8j<_>reAkc-G}p{C2X
zMbX`aNE(BKIBjvfG1GrlWag0?hmC3xkXiM?Ijpk@Qaxi3Y=Rus*v{>Jy2Orl1Qi3C
z(IXpFmim4bri0VSF+uHat=?}h&`s5C#W#%xV|`T*>HQFt1%$5;l%h0Uf4fIInv%;T
z=4Zj)O@7fB`(!WLZ^~&=n$e#=U(Z2P2W!u=7>5@S4jLl^%fB{W-Ln$xTDLQ%hQhhd
zM3KywqldPwy~h~z_NVW^qdAg3zYG{Pm&lkw-n0TDCyGTHK3~v4n(lx564PWG3DtpT
z2Pj-yOM22A%rng@vH@fUC&hK%n(WujGDRx`Oj}}pIotS@ezGy5aeZmE>Kob0B0oiK
z`o3Ow*3OpwEfgoL0+u|YcjqSNJ|+CD1Hi%_;P~(ge!dyaOY%&=eaEogSi$;Jgy~zW
z{g2xfklr}~UHZNCM6tw3fzkXofp2UI`fJu;VR?*v!)C(;_<$bq-g-;ltkJ1LcGYN7
z+IDn!j(({5oTnh3>Zdfy5tzwqH1y<dLuiZ;I<9lA=nIgUcm7ENWv3pF56$n2A1i;_
zp53d`A=vA3m<DrM-oth-JrwN9F59l+JGljJmIIhiuOc6FSdKU`j9@Fr5uzfpQ<LWA
zpkH1s_9mgwfsZ^Uk$Vb-ohm=qtrpUHY0(AA3v&%qs(PRBUIuLT#J0>-;+B4GQvb)z
ztzDbW?h1m{++n7jeMii4|Hsl#Wgpy#J+{L>gA~bxwyKS0CFt-HtBKvtQ!PH)m9)Y!
zCNCv(WU6Ykfu2pQ=glScqC3OYUBU#_8)bj0VSD0WzT|M@=Va}0lJbCLfU!^z6m>dK
z1WZBM&IE26nD{KicBKhcflo4#Pes44m<SH+24_aIBYoG!PgWwYcwVG;Q4x{fQ`CBX
z!k-=1I+b_B8&|Rt#;fX<Kv8GVvQ%&<KnYeFjn>aA*Cr*};ADA0KCIQVEPe}7h1Db-
z&)DVucG0NXsLO&q((im;>+@7P9fZvtWX9`;>1+T)=6b~URU1%uVYDlc`x7x)X`e;c
zH_mr@Zj&gSe%9Cv$Zv=o6UQr>uhZWsP9Xz(EG=8<F)vz@YDp$XhT^3FIY%K>ye){p
z4|5h?ZH_mtQ%ugz1wJRB8$8h=oMmZwaQ4vCOn!d4J={<iUr>eVnG#nzm0=yX!gmk^
z@W!%@Z^RncXjIRHi>vouRLAHD`W33w+1e3T>I1bM+4AH!)LmmB_WEV{v<Fspmoj?E
zeA!-1SJAWvwzwu?exwBIg|9Z0?#eUw?gC?N8isp7TL0km{t4I(D8nsOsm^i8l?@iD
zt?VU^?OPRJv1UK4o)}ScxPHb`r)hEiK&8BEQoJnylT4$Y3uiq0Eo7+N4Ibi1AEZ6_
z$g_LsV?#BapMx_=l$*zsM*^7t#4%MobI~)^a4v$P?}O63PKZIx>8~-%N!>ScGE#Sm
zH}DS|pfj9ZD(|9q8ya8rzc0P7!qMW&7_;`cpMNe_do68m#4K?<CE9mkoULMiB(~|O
z$ntL>2!suh9KudqN(q}HhD9OiS>2Yhx{|@h=c1dR@K!{JUO<O<q0L9S8S;D$g_Vnd
zZT4psN>IGwvx$CLGTtw#3R-5FcgTv?aYVQP6oJla%J<m=LL8q(cV5d291=UjT5MQ0
zLzlP`H2RbmnGYldy_8+A9Hh{XZ7j+d9IcOb{A7WCmuAwKWV#vX{^&<9_$(5&B*2SX
zarjpqz&^m3ix40(5hmwE#o13P;FHGo(@V~UK{I7M<U>z<%GwTghtg5<3xRV7KPH(h
zyfzJ;ud+|w78y$}jh1#*ETq`wv!-oKFMlszy@9wKujTaMX-Ip$wVy=&+u5U0rHACu
z$-EaZ>AaA<pKqO&N&I*cRy3~~7QzSJuyMWeA|sT3UdN+zb|CJqFTv3F^IY!xHpnyB
z5Io(;v-@-xc40~MkM~nJx7qW=-eGncHD)OEv2NBs{`{O0Fbmbeh&otCSbT$U?{3F%
zs=bXgN5ydO#0B%=+J_pwQlZ+FENmv<LqVa)szdwnc7*?Y)tv#^ncYMV$V7_0&gfY0
zIr_nZD+gA5HfZ@oXQ!;)nxr*x&;haW)%}L_{(M^7+UoER#Q%u<CJ>`EtUG>r^Cu`>
z1ab*p_ojb2dU1F_MsE8)_oX*xF9E9YyyTn~&NG+1Ps}|k_!=o(a3x4x8|<?vZOT=v
z@qv_mJF`?D-DrAsoNi3Ayvff=c<sb+2fh26Vj5k|*=KmKB<K247|bJExtf$KZ?Y5!
z9x;k|{woRMT``Zzmh_+epqu4kEk81>d*8W8PJCElenzsjUPHM2$z4T${jL>L@jHtA
zDiSw+$9EHoWnM`Y6N>gL{zT|@ywi#p5|H+<2u#pf?e%@$FeipX@IBoGy6<?V)k!d8
z8`XsiyIv>p%Bfuh!@G4`vofY!3l3XT=A@{6PkOr{6x>-lqF-dSUngyg0=2?pGA;_E
zP6KFBZNGMV+ID<QgnndrF{+PF>kh09T!pG;yxWI#?}wd1$FX9;mr<2VX$K3w@GaS_
z2Yxw`Z_e-B^d18o%5;@>NNwxT>o{ygfAgB(BgE_TGSTPeBPwSd2mY93=EO%Jf62u<
zV^@ZI3h5h9?745&^($PMmZRjC0GkcgF2Fu>)CjGv1R1l~hcWglob=te9UGlN0dR^9
z>%f;B*TkO6duMQ`e{?P+iO4UWo}UUlWl)=Hn7MHm79}q4@?4=9I?iC-!7;q6*V$dJ
zxT7s5K4!2lyG*zzT>hX^S12e01>f2-?efbyn<<3<wb6778gp+%OwQAI3SJYa2aNaF
z_U&B5_CChK0HTA{MuZOh?4Oni@E!6Oi(1*&BAiPX20%4K4`~~fjBK2iTUUWr80y&!
zCD|gJ^u;rayZge0_2M=<<aM$|FbgeumqXb$@Q@kM0#qzo_);21-QGyZn&s+uM2L?1
za@DNrT9NQUJg~A9Oi4AT_9kYvI3#A5T#z{AS>~?|wLwl4+4QrtG8C^8iW<ikk_Fex
zqXUt7PQrKP&L<^eeBgn4zeaj=*tnIsPga5;D!1QS{3%~HCs4wRawVT#$*S8r@jyoi
zM+cLnrd1$gfMavQ<F9kYc8Zs^bf4<hyCJK(Ky-7hdE7VZEZ?aMX7|UZ>q<|U2wfww
zhn3E<Qrgi-K|<QSe2S9n%VtE!d@|UmgWTy$nB0v%1Fm3DMi7W7c(WWj0|hQK{0=0m
zcq$U4u)ZIIs{P!OYEv=yBnSzp?90u-UB#mDm&xNZ!!fDSeI_T`q7Ms9>hw={(Y}8X
zO*#$R5z4}OI7yUqeE9r&tSovY_|^a#m{$9*jRs=;911dIaC=T)5KcK~`2mqouL-+?
z>ohn?HNDrjoD0z1$o0U*CX1beJQvuUY|nGDl1ndD)oS@fu-zGXxsfN8dOn5aYVF#c
zm)ZThyh|rKky%vks%W{Pc|<%EXnCI~i_*d0H2kZ9yO?s`xSi3McD1HZVPKUL(lt@&
z-{}`{%}hVdLzThlH4Lm}+kyU3+!0V}voMf*h&Mwrz<BZweUmxNRKE}IjW&NSJ5<7b
zIeE45!FIaoLtpiDb^k52VEGU={G+l#2t94b82<;dAN=JyTPlC-C)aoIBj^2lX9A*8
ze3kij@Ara*7E-zImIvQNP!;Gdw{A%X07!%CB+LvpsvKpxLA`gU-uM(evaI22cqLcY
zVSZloqy0S=6LjO2-m(+Q*cg$<nLMKDJN|j8UmSXB?dYy{lmyEur_n1In&fU%+sl1g
zN-!3}2EmlIzV6G)Dc|ILt$Lr7r!i=5*4~6-N1+CzR~a&z8%#B9?6cMVzN0$Bc`kPy
zTDz*G8hn*I2Je(ur)jiSex|<Js$&tAl4A>6FrUvYnm8Djr*pAG^kvdt$lTAx=%0Eh
z@v<j%sItI9*C&hJIQVU)ar#d&MsX#+hkpdFOh)y5tuA5QnjES%NKji6=#RAZm1R%M
z4fu|H%VEDD*Mem-CCQ|izj1Q;ZUMr%YqRPQm!3cDRYyKYjl<0N5RVGnB6s_qFMuce
zzWJ%SVI^x_3u`;~>mHDZ?~sG8OL;38`S;3YXz^#h07C;+FB>FMGGL!a=Rh89kdk_0
z<BD@iOdxl=&z~D6*hhCdz%8U_Ua5RL?{RjI2=u_Dj{Q`Z-qlpT!FSzx4hyCBfmk2c
z!gLc*OeEt<zp>cLi70(R>jEb3QsIS_Jezp5&AzAL<Lgo8_~2^<A@<riztU~vp(tX2
zLkMJ+IEP_yjbbXwYU>VXdm`Ulyo<X!Cpu9!P1%Qi_2e*Q&EmTSI%hkG=kvxLBPymp
z3j+X<y5zA%gOZy-hyo&sCvQnV*LR{lZTMsOVRvBwPP?TSJi_CuiWwJeJ@mnZsVxa6
zLIwO;Kq;)+cjX<nPuqWLx}_MeBesxnN>-Plb~h`i?15jxGV)tj3k>I#bTQc@V8K@{
zpmA0~ba;!QbKzwpBc$vO8&cghG9;y&SbWFj#BQwxXY}}_j^gIVgNDw_T{eTA=`+9O
z3B+5>@svsukw(wK8|_cCKJzDUdF|1?WzVGtRT7c|Pb_lvb-NwGzudg*fx+ShD6#ut
zrTz`GzVs^G2r-B4m-qJ$D!nT_G7J=MJjWu&(>o1rk9G7JhP)|J9BwI<62s96KD^PB
zTji`eV`D9p1&p-gB*6f#<j5v%U(Vc#dpZn>_=aChhBryIqKl1I2UJ>+EgbFf#8C4S
z?uz74MhZJ*p8V&f2P?ow1Yh)o8=T}H*=ievQa46U<$LK0BE9Zk%Vo<{kO<35j*6=>
z8@FI-3GiKUux<VvhS|YFN1cB3-A`Om(CiwzDwk#VlyLZQW#6-`FgY-1nZ=qDCu1$K
zUn#|&;CPT0_`ZB)fr28Dczu}!dm2H!DTFQkBK5iHhJ(51VNkbf>Rg8F#+!>tf0`~%
zfK|A?i^tBXe*r&T+t(MuMt_lF?CfoEkg%@JzmKa5_x0XiHeILi><ZbHUM3i=1OwQT
zoDq1fRwVyNw~i~V9UH}LE|)SxW5mX)9>U5-cBB)2RvJBUV{KVd5fo1>H|Fm0U`(f|
zx>lgXxS#SEzOa#%8jZ9xa{6w|Pt*J}(d&K4QX|FT@SjF<TOi^)Nd<nxH4S^m3VR-J
zuvDLi7HV)+kb5RAr&~a@hoZ6)-FagvAXAEKnkcdiXUo**FW-6&ROh@#e{XkQH_wjF
zNrx4T??E1vre`*uug$VemrAu51BVENam#;3L_0anveIs0b>S>NcR|!q13qYv&1-Vy
zRq6hTPnt5Db-MN;v#gx({MX5FZo<C=QAb%JW-4%CC3kD#>-T5&00OOvdn_9_bx1R+
zn#+tFdYUW@`Q@cSSrwY|hRRr4^P<uOwx&GqI+^EcqK~^xXH~U98QEt)^>SB#aE3F*
z!_P1F4eA6{Zh4gTRvN^^(?ap84EZ7{I{eJ+iD><fTBFdKDzw-VvRV4q-SL}`*IoeQ
z^gOt;#B2pZmdaSfh1af}P5a&9!YoGSWDu*HfC-?i(E~-kMQQK_X@P*9Q`ecwQdr?a
zsTLUDlTV1qI2BxUH*3;3NDY7s?eyeEvmD(w-YJ9`fOMRsR=Utr3e&9TRG>)f>Zc~R
zI_X}|s(kPKe7UOe%3it_$V7En?d$N8ohX#9y7WL#!BqMkJ;J!jCx=MWDf=iqBGSOu
z;cdD6+P!0^l%VBs``Yr!PTeUbp2|l9okNglf+&L5ncnqGue!RoWi8bsit7in&IVX)
zu2-?3MQ@*@xdBMrY;1=lIhV|9=$fpEc;(mN=Q)AF)h+MuFQvpsud(D+yvvr~!65_g
zjNby2O{`DebD#&pR?@!deA81${`VOO4Ul$roh(8)52q^)WXb=N{N}mgFm|>$)eQuA
zpFx7<^-wShcVT)@4TDccMe?k2y@fV~=MQcf){t$6&Q)8dtoUYkR<UoQ<{e4<EYqFh
z-4P)%(Iy!bbJccw`UGUj*iMFa)2eI+XsagOe$4+6=Nqzj>q#%zbkNDTy~8@aF3L=G
zcbsvr=u<?}x0;$+zQU}YVY{?c3Wm2$x7k(f-g4vHzl8v!<%Y9Tl~sk0XHsXLHOsqw
zptvCX_%xq;uk<|z?b}X-JIEHf&9$$;Bwz%#;#8*n^x6j4G{o5;negk}gk0d`T_*4R
zp7BXuP<gh`_9uJmhEcr*ab9Kay0Qa+-buWv+B{Y4P53IC;5bv&OgO`|y{NwM)4?ov
zPWc-dO{@N8=3u_60Eg-O53x?hG7I>$ZVS)bjyJN#%^B!Nh^}#MktZYUui?Ye1D0OJ
zJT5*MYU@r_<+Z(x51V1VkA|fD%YF8*^ua!Q&0teX`s`|}k{t2ucP|`%8NlujRp%@|
z@%Ql#&ONW!xPw`2-0;69xASt|UMP}Y%ugQlh+fJwfGjuOlP82qwktHIzeQ*DAVd*V
zJle?F(G-9;yF(8+j!nOm^K*w;K9e6e)->~q+kyZR6&<JL2=SYADHetig@GIMrtPx)
z{Kfc&ki1!kftO{;fywhgA?kN-7fhqp-0gQ?BHZV0)N36_dT|lyACvQDAj4$eM~hbd
zrF`PaGBa-8#U&Pc;t>Y*n$M9f;I(VU*AlvAPb&3WRS#cjtxT<>i=;xXxh-sDoC3yP
z+IcnUp=1W?lv<Z-@a;Fm6mK46|8R5GI9YJISZzT18&dymhVy&nBzC0~A1Ba3{p(nS
zm($Cb-uFoWFS`IHBrt&}QWtNi+X2*=e=97|VnfNZDZL{=RWs;NXlucqHj&X)g6?yD
zgjK5CqjLQz#tfj}R`Nz0u4KFj9<7f4k?4HU_Tg<;x}tHJhSgt*2-cBJnps#ARIKnJ
zJO1mn@GvmR+cw4GWcJ_=iYOmzZKaP-hHSv<8Fbgj(XdHAH07V*A4p$vks&kjbDEMB
zudFKH)xQOOvFnqcH0omm{M;qR5pBL-Z$+$nr!&sR7f8V+C5?9x#UtHr$~+q|bW>G`
z>8O~o63-gTEL3;m1S932_*>7P9PcQUeG<U*?8hA5n?7ufqkl$JKdP)zP3ks8WHoV#
zatC}enLRT+*P$pM<P*-HEdM@$Ui_o&`xgph7q&j__U75^d}N!{9m6H`kR9{7%xB1<
z=BoGAR$A`H5zGv3&u8(S+ypRhml&TdKq5*#?Tz*sF>x!Hpp!&>o0K=$xzhazzb@(O
z)@n0T@XB*d%5{r<Yt+hdWQfBFnnUe~*JPfPFFd3!BB!5_{B#&_qu*>~U4cQ+2+Ca(
zsj}+(qzv1PJCgXYI4^N>EvU!orL&#L$cJKd9f!D?Bvf+Z!MtMwB88~AY!+sA;aGew
zF-09Lu?IO%F%3JVP!WMqMKp5)p%~Ce>1F)!vkZaXS(S6Db3H)=;)DM=@=|CuU2iz3
zs48#ZRd4xqMSzIS?)~b%(&-gg2llw$0H~%zmS@c0rmViTO3U4DmsSLnN<xbA@Vz9`
zvVCWF>~Vi)!lAOpXsKw?<1OR&t&qT+v9I%q*w;W(d5`8DD`d+4QfKP5qR>BLQv=fL
zBWAB&gT0op`PnUTQmt9(Eb%=q(v-K79;G(6@6>3v#03Fmr*2Q#U4sjuTA`+6pVUuQ
zb_TgG)uN;m$0J?<tv(9J(vm>8izry>biH%wa1?_`!2?<dr^#Dr0$!Ze7?>|iPP9t?
zJkM4bC`Fp`*h7zX*7=5qu0=JO5l?v%&gB`@q_L@p*j`Z<#ZTBh^(maK`GaBu-1QZ1
z@7%_FTn*;xah^#emXpNK!0~V8nU)=HzZM##Ze|zBs{X!P)W)b??1e6qwwPbuEcBJD
zGqFezlw}VogS__)x<U|kWiOgtD4dP?o#6xSI@5gQk=oj{B7~tyt5eNv*<Im9|Huqz
zqEpHM2FnaD=RICNWX=0YDkCS=b}x{1dhJEnvy$W?3v*4Hx;UM(aYRcfxT<#h(%*YA
zOetgB$=tl(o6Z-Qp838f|6kpW(VtctJTp8QcG~U03B$R}pO`ww$&06}AJ!^Q{L=UY
zjVup+`Xp+-Z6V4Mb2_#0@jbi0pKD0HHzy=HP4H2Fm2I^{>kirK5e8K7r4qP&`Ml3$
zMDDbIr0&DLVda8lH0!GzT&zx5puh6cnWYV52q^<)pEQ)L^x~g6V*gzCz(v#&YH6oH
zinix01(O@ZU@M6q7S+OW4~_SU3Yr*z7c~3aXSu<eJ37OB*qugS)&e?6Q06SFp0iG+
zZmqVTPB!1p#v6{yS={(L9lz_+z(rExJtgt|*!{o<GmoVsB=Atv>G;z?DUg*s(*2>$
z2Zjr#@)_Zcro)Z^vIaZbFBG9BEWV80<p6rv8u&oP$E+q$lYP~ERUyef@*KrL+v&b=
z7YyzM6JRE80gRhn1$m$Cbf=mX`S9h%Ri5fgcRRr=b10@fSsh~7KjR$!d#QEMqZTQu
zY*)km_;N8by9?3?fmPg@0Fn>n<n;VAZzHV1q@qr=xWuW9k|$8vKX7d|V8g`}sK7tZ
zSgKrrtH5G)=ABJR3J@OPYr)x!-;i(S-9N71z+dY1`l+mWa=lpihRT0q6kzZpz*HzG
zdH8{nANEpE&^9$w7j&;?E(Au9F$B&cvog8-hzN~AL0<mcin3$Ue+XZWbXx#mEeMZ^
zw$tD!nYwf0e$lMo3lveC<=;P%v<kY0?{{SjrI)Yp<tu#om)+^eBQ9Phd)&|Qh3$JW
z#^D;ny%q0Shus<lfg?Gd<w+>-4_6+_swj%GRi6Emm%n@j-HMBiK1qq0mI40rTxO^I
zLoCpI1lTQnege8oSwGed6VQ|vUa&Hay!+epe!l>`tE}Som9yVkoH(}mQ;QPyo$nL~
z^#IF}@E~U>juEh~?kQO#XLs8+ys3=Bq}z=LJ2h%Z(*Jq46D74l#@3gEIZBM$&TcAa
zq?JLx!>;3n1b~W#HbX6&u6Ou>Z5w{9Z#X<l75_UJ&5;CN-Tv)L0(DQ>Hf?DHVx(|3
z$N<|c!w_sz&3p8*{N9?ys`g2OVa2l)u3l4+BdWLmgbbm#0HHWv0eyNOVqDH?u=Fl5
z#32LJsFC~=(7Nx|<oL1f;Rlme96BIO0Q8ggpN^xSXSw9qIS}gNS)l63*QH-ENAJ_^
z`UT*4wqw-byO?WM7GZEWHo$(t@R$zh0k4ykI>k#KVw3@D=yWX3L!VLz>Jk)8nmBs6
zGIv6BZ#es~8MJ)x9H~C^+aI2iYG8NVe|YBr71F%<mWQ@K<O8@OV}7x~W?sDuARdX3
zM}rHL!6*H0RMj5G)34z6-+DEG`~!qK+c8yXfJ}CK4t=X-C9W&wzAwf5Kn*wvvkubs
zsR6G#k&pv^#y<`$)BsrOf)=Rw3yX=DGUHgMlQz8}?5Z}<Q|wPOyCM$!r}Wz}PA|aV
znELz#DE!#zmAmGrw@1m@^a-bnzn%mX@v$1*4jW))VP^7we$&8wi@WWQd}6>(0+80G
zjsMR--2Y$wLpNo~i4@MxP<{dO2Z$Hfye+7Ij$EH+R^5%GacHoA08y6hM!eNEQu4M_
zg%ZGjs|tiZ+P=ZCpA5a+JM3sXh~F36`d90LQ*>lAjC6s$xJU;&Mg0}|Wn>3^k{FUt
zd`eC-P7Rp-tY0J@d4{=wk}Z=%aEDutfcV;sP@U++>|~W67|b2Zdp!rla54AGM>_C=
z@f0m!0N9E~QzQJZp9bt#7xnBYGTe43xo<cKzP@tU`A6`tXlBz(+MfzaY*J!!WEcWh
zny>!nOaguhv-7sRyZ%nb{_vp2A2loFQ}e#_B8CDu#lS!8{+#0fFaI$w`y}Ns{N}&r
zq!lnQ2tbhs-x9C^Hvj*R05Aqf*rZ+z@1h_Pq;q8NZl$Whi5!A*J0hI|_Bg=|-ru&9
znFBcEKet%7Q4D-1uzCKrQU^$}f<vnB^-@RL*CdcoJ`C($mf(S^&B8I8%S?atzwfyo
z97p=ap1u$;{n5W7PtRB2i0$#&(K!vUv55G;l&m?rQ-HzFWVbspgv;j6ykqh|rszd;
zW061nwaKn&XFk#7f)nU>{uu(Ozv#OshU{QA7vOza2&^B=<NkMAKD6XKnq2l___rmB
z_y4b#sc{VS36hphbxmZ1U(`OL<!fF%`)znC;$%T@i)*KzyL$3br1PI^SP`I12EEZu
zPLzj9=M1Z!>*cN;o^12dRng7+=ZtPs&$@36J?<Av3+K=}df0#Sxz2zc35)S{5O%xd
zF%RC%1H)v9itx1hiZ@ktRg292&hlA)R&j{Cy+03}?_PAd5T-t^s9^e&)$oM?bll|a
zADIA8+>dGI97rU&yMB0V?wNFGD7M)FLs0K6M8Sm#*3XfX)*v}yt=zi+lk!A&0i%M$
zly0bJ7Z2W-yxiD)vjIC7YoAhSgo!$I)a?B4`i^X1bBRX08ol>5edp^L`wS9eWew}8
zCh|r-x{?iLCB~c5W2A~%1UpU(k*btbQ(<~;@tfyY53j-S3jcv;S$FT5PWWqY<PEHi
z8y{Qkq9C9N*}vGnb@^7LgPH;)K9P(8)5Y+jS<`Ia3w5`(7#8t!?anBAcu0IOBz6`#
ziDZr6DH%(5Yt=`U^Oa;bOD!3}IgW(RmYK3=XqLwQUmwC{q~ow}ta->~q`}2tj^(Op
zC$!B$BjZpWD7M7Zdx4?z`eK$$l=(~VdyH-#;_fY_v~G=sy1H0K`uWYi+TFEKc=wb}
z-=WQaF9uSkJD*{I4=u+E{OP*!zX@0$VUP2`FzUSRPk`O<SMzJyZcl0L8hc$k?ayBw
zqP(<*!lKMjaVSKd1Sb|XrmAE2uHxft&h)J%ktJl}S}&?T5lXS$jBXhm1ejp<vUovJ
zh=eJgCUxJeRGq#T*fLmEUA;jDv}3|n3f;|zXk0wmDP0`tbalL=dIkY1&?bf#&pSUQ
z{K~cT{0K&sr%o{8NIWQE*!{c%SRH^1Lgo|ILJPL}T~#{CelWmdVa4fhLP~^`Me9V%
zu-ZjQb;?P6!=y0Rz|Pf}PwoMmh8JRC)rj<}=d<;F31taieo2RzvjC{|_JzRabz}qD
z6E@I{$OjI({jkY$<}p7A91BavG;2EVX4jAkmFR)aNZ!~hm6`$zDvImVod_)RT6}4A
zrqVMU%9yjkQYv*5J4E&?5LGLTR{;pj90Yn=8nEoM^3**$auMlO&mJgh6?5Q-At>La
zG>R1u`jYoHku65MKHjV<Ar0=`g8Pd(sEccnI!g|3x+jYcpRSI4a;=)Q_9az9`*(Xi
z3iMU#nm|<;cHXg+gyH}*9J`#eqOqbGXRRxA_IyMoG`e9EsnXfBkw`54=~C&H<Npae
zcZNtm_NT`dsIqK}l7Sc`gL^Bb0_XzOE)nTXJ6_1Az2&Z36VT44i%9j)nr*Dit6)nY
z7^H8c?n1uE?njkj0u$NN@bb48&;lVB`%@?`g9@RkGO2K0Wr0z2WsnTWja6GUIddcD
z%Rzav2R$S!>Pb-IO`{;It`GdmD@)B^=SmrL%fiSy&6$8nc`aGda8fc`g6d^?607k@
zSh9Dvvp<5nNq@}tEw{XCr6`?&vuPcB9=ouD)j?UmZ^jpu+$UI|>W<ifMf28n;#ah4
z4%0t-73du3dcE17oHwD!-9TPpM_0ZZBNz!)ZX3NmN-q4q6#zn%v!#1RRv!J*U_M9e
zP<&~2LbC%g?p90D<5B*@VB5KO2uy8&93c94j)L#)O<Bs<1S-_ne9)tR!Y1PA_kFIO
zO-VF~KD;bB>Ry+hZ>l*_dCXwtWr}TS>B^RV^g9nH_Lnsa*t#C0mZh>}od}IDJDE@n
zB6oW-F?z&f+`R)%pU37gHnHmxOM$7NfOr$P-u!TC$ir}?tOh~O*HoMn*XlzHNm*N?
zpLr8qO9_YR;f=|%b}~tWM!2^6Tgwk#e7k%IH64?l_;W#FK1&|*NP$}*2L<NZ93JRS
zOg9lXq_e&mmwvARS$j6voTAWuaNS{=_&`xZk)ETK?Tnu5TDazT_$v2WSl~d-h;9by
z&>f)^wn(A+W<4>S9bvcp0O&mRSb2=97hQl=y?P|?<X{~e`pKt(p?u)H`qX<tG`N!D
zYnI8Bh>j-I*)(*@za%4X#ha6$R6>C<)Vk|_<!5s@8ODpdvYKG!ZcXr*to5=8KZwA+
zDgxsb^hQm9tK6Y1yHC!sg7(?Vz>S035>$qw?wQz9N-L%KnciS+4Puulxw9~$iLWdc
z&6ccO6Q8vCkvLW>KeF<`j^7oF`Qbqy*f={luU3>asybr0JX<oupcUnT_Z%F1I5ie}
z5&POaG*33Z+Q5i#Ff;mVLkHj&=EH{!jsx%~3$r)T(&!W3BxuSPw#+d$E|P5*bmN^0
zm$jB}vr@Ka@4(&*AXs2Qhj5mcF&7FSi*^>Dt94>;*_!FS19MNOw^k&wC>?}4u#qK$
zdiW?DQ(1+vdh`CJNs4MkeY@}+C6Mye>wM*Yh0)BX0?Ou*89Ey&fyqS8Pi?Eyx?#Db
za=e{T9Vbo)k+h!5)*N}`Qdu1W>SFfGIh_53v$fP(Pb%uow)08`*&tH+b$qI4|MXRR
zBxS+OoJoGxe|)nKaMSb8jP#Be@(^d(mX6InX={w3?N>$_%{y#2iN-29a1{4gax~Zq
z;1X{kUCOv8d3U1QPRFf_c=UM9;nJ#dw#8gU0W8c7SCO?VSrg!*=mmCO&|{eeI$1f}
zI{}B^k~?1~G*;ERNouTM5s1)=PaA5XN@M5Ts+?myv(w@8Z3Ev)z$|kmWlk0Ua=HI@
zzpB}v+bp33uCM1dS8XFBMHyUHmIJ*nng8O1->>e~)w^FKS=*+*q9u+m5!>16cDtv&
z-CHNAk;e|%JE<xI^2nxBu`L#pG#@G)v$l3tR3E3-%erPLj2PEfa$e@bopQy!eNG(e
z3Q}}(pP6x-oSDP~1g0y@WSr9&ZB+Q|(cJ<UJJwNkmIqL>doG}|U->Qb$=v64jhh;S
zihR_1D#L0Bc>#8MP1{J?F*X1Oj=W&swTws5b2AuLD=hBU%=)1(A5B*q))8T1NiKB;
zdHOY0v0(X{9=1=G)`Y8#TPmz<v<a4md$9q-bTmvIt}WeOQZ^1>fMj+><|_MHTkgXl
zURO(C5y%n_kyp+cnU_clN3PdlsImmE{(r2oDEi6ib1*vNdix}Mi&mwB`J8o+rSK(&
z#OSx4yht4d>PvzLg+g#M1*`prs;3Xe?J=L0E6}y)KDeyp{CXz$eJne-l;Tdt`09T9
z*z1Sanj@qPRT&j--no4$EP(e^t#GH;a7wweN|YczUn@mbbDRg&!HXOtmiy<<KH9mn
zq~!XrbL|o`rTnAxX@$h-{_qH<^KHQ8>QCTwU$a>nN*YEnj)mrzC#~_tUXdO`Dh0Z^
zvq7zBknQqmaW$$rRpT3u33n0ZUpjEFUse%xS4IMXa$ZpN>$aZNu2KS16(Mii#T^}h
z7GLA4u8fA@6CS97?wcLtONFm84N_>VhSdzUWOVBn@5##r5`{_+U4j~5xvaIo>4?D}
zU>rMJKCOIQhtxpwwWdf_53u^xn^wC=ZJqKt$x$A{8#|?hP0!k<f;rX<S;3#IXMPyg
zl7yBB#y~sNX=voQSP|7t64YD)NjqG<V_2lO9(DYxf0Wc<B@g<*CwXF*3z0N8-GWql
zU7LQW?S@UvQjqVN8B}w5J0#B}S~yJh%{S4R?!!fJM?*2FJs3^4i89tE-TG8iZaSA;
zl;z25DD^yGBhRm`I^<SMh;t$`sYnk_V`Rkkcez}Y3>e9NA{g;FU+z0*)gEHil+%+_
zXBypax2@_V7NOCsPA#)V6C9&dCS7j1cvK5MEb#Z8m;3GL08q}BjLF~&6_bu{XE&|w
zTV<YoJ!8!fiPY;rXQOz-3>{3&Lh}6eKDdDdkyR)Uelal1Ky|os=ul&lXBwN%VUi+n
z<^FHj59Icg0eIDuG|v!&rP0%GtMr9tQgIF@jEi$UOY+4EDo~RG6}m9SG_@YcK_x;1
z^ZcnnU^?5c228d=AKRZhC6J$0J@?t*)pPYV#nYGM3c{7bm>g4tuSjc&(Qo$pRC4(5
zPZr;|cOB#yxOrhFwi!1t@EJ}o>{4UDdO`dNMh3C?AxBQ^AKg17Z6%yI!M3h_L*4X0
zsHsH;^4MY)$ulaA723q5q$?&EC7Zj|pO1)v_C&wow0$D<#keq2vl}db(|*k)s@Yu+
zZU{B{^kg#{=w-$7&3qcZdWoE%?O=ONxJ(og-qYeHpr}rNdtNsyQ~p>-$q8^I-!zoG
z6G2vgOI>3jH9pEvit4NG1xO2wg)B<UPO9lf<-Oo|KXT1Nf{$$kB1b$j412$*hxJs~
z^wCtl|L!js&Np4#(*9`g!_(4jR`uK-;!{U&VS$SGHoe2hGxws^o5AxM#x@rCS4{zw
zhaP@=hDCnde<F3@IWte28wS2JPfuBnES8$2TSLUG=xr>oJ>=eW6I5Y*1Yji&R~J2(
zeLD?f*+mh1+2QvkB!1`~TS1(j!^MDg8bPYMa^c02?%BEKm7~wd1n8sXKg9jQg93QV
zS`wW#3sR%9T_d`0kg2Qw4ypj6pN!_X<w)9>3?estOog!hK$k!=kf{=#xq7?tqM7Ee
z1&45UG3)Oi^=BD}S8a7FL*Jda^sgNMl^wy*LHL>^RehwpS7+iES(ucekaFsioftKs
zJ)pKW^2V4g2DR)F>GZ?Po(R-Ev&Xe7weF4!{q*$$tVzWEl@X9hb`q-&+-i$)iK~bS
zfi8BdI7LRv_Oyvwuy{SVMpR1Pa(;b0=?--JdOKiq&Qr|30t{h<P^I%-mI(z$7pBZm
zr&X6u=o>F8peIh;s0(Tz{(4wQ)#>MJvoZXFj@dyeV3Ix$ftRY4>ynuQ+J@%*zK;ui
z$=4;9E}Y0R-kf}wlU+B5^%uhKKbHD)a|WdCFmXoCM)VaK26@W5$xlf7rYmywZmYm|
zF*#+u!F_DVtu9%Hizwpx&JKe_rLg5x8vwq&A<{V?z7d8m?0(W){1w5=IbM~FFB&46
zjIHx{a!2T&QniEgFe`t;6>(J79**Zr1O1##@;A~yD9Zb>9k<dmuK@U-Bvm8*b)A$Y
zg^Esb#}Hibia)fb7U;HcEmdU&rPw{rT5A~Fk_6?B+T~{LDGi&B$<nX8&dGnK@#At=
zMK*?BL<SbmHgbjvjK0%RBozZJIl+`-=39H2a8t`cSW(YIKyCkuwm)-EJLX6l?UuO2
z;cIW__JjZxh$Ss9VCJjJ;|<U_#6M?oMt+*MHcgq}EzI+{yRix<P>MmnxIWe{vM;J5
z4#fbWrMhbwMDtS^xqG2YcnwmhNlV>K*rKb){(pOn6v-Ptv`JdR^DB0eW^v&{wRi5y
zPb|~SPG23d`_VorJ?wKB3G*sjq**(_Dp>-7SFp(1j>j@ZV#H9=7jt87RS@1{O|c?C
z;_1%oW^q$98?TNF<_B4(^TYo?pT#2qy|c>KB<Wy>r~nD%O96<3XlrFKTV}iS&$Y5-
z?s8NlTM*a2<*P;!IT5>i)i0#@b;UN+s`g{%pC$)stypHZjsp$NydD5Zl;wb5y~4IB
zM*(TsK?h15|C~d6{AiqEuBC*Rr*u5R&wjCM6ifCQH9Ot?b0}Ml-k`~2Od2}BU$q@7
zxSFif$b}z~dNX?WU^Im!Kh`c~?-eUm>nz@hgzeiPAONF@oLyTlN};KuSlJ{UA*iem
z?9Q<x%q1a4GwVF2RB3W)TQ1>Mi%d6NEbhm`^uRTIfo)%E5AK#Ly`abQbA4zYDb!F)
zw}>mcQ#+C3PE<|2u2_cinv&uI5_RWJS4~FXD#@jfcQWmfb0fB7$@-Mr=DAhDM7*`)
zKXa>on>~IdGV#fm>YK8s!&s5h^_kJo;fpD)YjczUE2;9u<U^YxJkjRVxHZj!yn~H^
zRP|0qP<-;k6m!U@tb(k)aQ0R6-b!DUbqxK>)_eJb-H$%5)3D{fZz1)3ajVgCJdE)`
zzP*1eOgWRbNhxE(aDQ_($GPtd2Q;yZkY7RjQ2glpRi{EF{iipO^E`>Y>Wg!USS8j4
zmLXLw2Hiev_e-`Br*Un?EqtUTrwgohco&}%zk+X?<&y34fL$G8CyT0S8B)U1J$>ia
zXatHzq=x?WT4rkUNclch7&C1Yykgi(&+#p7<LM8a%(eB?11AoBc`6C1RhbVmtT5d#
zINtn{###px-WP|!ihE06Zhq)1j@h`SV<W1Z8oqIRf9BkfGB})KVfBmKP^x{n9Z@Oe
zibyQ$Z>JB$Wc-w1Qi0vqM<bQac=?WZ3VSb1*NtHzuH8mep-~=*#WtTbs=a>rMAgu%
zD5g``i~rd5^2S&NzQ4A;#r7bSN=bD^(X`XgU!tsylVR@LU)ch^8{~Fkp)bxy|B5)R
zSXXtJtvy#GC=xrqc*grt$eUT@j!CYcP9Hb9-79a{`Qd(_r=~;tj*V==qhEYK|805C
zj%YW<wNypjda(OtDndEA!ORs2zk6TTK_zQSmB+7U7P$>YiJX&BpbY%(`s)rRaaH>%
zz><=D;0oC2zf|@ob@1*$iz96@`vfEn>gq4SI;Ua};HS>=Nmx~PENnqgQysTrn==)9
zZH+foKW|pK7f5AavxQf%J^V{G5-3$l?Amh1kl8h1Ed~v*58C8!ue-unENgSGhK8J8
zGCj~5*M><?=MLA$MdWW3hWUt2eDGhwjx*)?60MGrs{pQ;Lf_%m4$(=FY8Wk)Cz*9v
zrZv~7bT+y<=d7g$`>x^P*PTkw%a24&(ib4}^9GmYj(-t=@4^*_Nq&wrUz$7Buu}VG
z9*p08I_C{Ad~!)NDflFxAMRs$nuVczmtkDjdaC>9pTY@H3Is0y&O1_6qlky!XS@o0
zal&g%SOA$pNgm1SYa<;=W4x3R7-TqiI9_cd{TBhI8W(k=b{w-ySc3uEV#N;jRgl*0
z-LLdSwiw{O74H>(KDr9W9b61_<G?FJy0-jOpH3gQ^UNaT2&16;6>AIH1RK{lLVV`?
z%-Tpn1}bozPP12CAJW>sAVPdl^y48W&)U=>Kk@qB@6hMSFMg*MDWyN?Z8+-^ioaV#
zuzY=c{WeS>`Qldw@|l;-U^lPuVd(AsfTwHaaHUS<-^c5b8XcIB%t^5!0I_@DUj9}&
zR_fuK_p9<chCu&Qnic@~?wd`0v}QIUk5F226D*5Ir3zdykN^A7aFB^h1DIs>Z7)`T
zA5Z)|_`vxRr0oJZfY3L%w&^5T_6iFTYa;7k>rUFwqFMXP#XUQhRx)<~#QNGry1qbf
zp@T+L66-(z)p59VZS{d**^3T{ow3kIzPatZ^Nzaq*`~&_Dt{^8CS_y^N4vwm0c=5N
z^`kwlpSDm~JnF^yBTy(or}@K)U!j|U8B}!2qRE60D44jRoA)W3-`Gnaxh3I4)AOMW
zAEbL<Eiyd1Y+rs5WITErvMU|LOxex@-WhZ$Cx7PN;x!>!oi)ci2MiA`MLqr>Y%2+f
zK;zn*$Hs94oKeR>4CWgW$}#qllK#x1D*20IZJdq|yG@DzQqKYg)7u@wFnqiz90=n4
zwWsBhUx4wgI^sh)*#u*&;g9!^P>v2IG(E*sHezi!v@p#@aSw>asoA-;$j%Xwr;a|y
zH}VAK*qP1B{90{EHB}Q=1Y7>s)u7_@j!?7x(tkjH%#3N~3rKM_%%>^3OI1rJ@a;IF
zJj}w~=%U4+Fc#3JoS5d&E*#cZa%3vEz1+4YinLvCx_cI8;jy5_LAn3zQR=%6+~j!t
zHJ9;>xeVy-$yxv@dVDuefaxjWWiyhNIKA(8*blKkwa2!s!*UOSa3q0UOCu+qdi8zH
z*Py|1uWK$Dh~c0-43nU;Z8YZd?<(y-E{>hLCvV0=OVS0QyL3_!(iv+p+-G78!C`|d
zok6HGixlJ=#;ll<1+VH2J~-bz*Fg8wjN-Z(xo+war1iLhxZH9OtOFR6rw`a*8HYDs
zf{1uJ_<|cW^(!^`5EIbjA)Ni@*TGtbWTc>R5j$_kl@-U$4H402fA}PhF6-Yjn-xuY
zRipN+W6btOo0yx!!rq$h_p{L%K2@ZAPE*2zRH}?h+GP?HBRse85JQLCvW?`3lpSBl
zBehgYc%iR+^F;Ao<pa|$lForr>hKxvb!DDuzJ+-0t*l+?TsuA^xAMf?)XiIXX~_J6
zjSj<KsB+rqN6?mo-1E^sNV(D<74Sw%)XpBxl;ykZlV=ANG$qBCI3T|o!pl*@R|^AF
z@Kb4B=(6p@Bb4^<z~RUP&?YrE3Pn{yKs)+Q8R7e_CLzN!ET$=Yr^sc5fYOwBNIUlK
zS~+UEN4gt#U9b!sB{;dwuOHq2^Y6z1xMtdZ4P)BAa*NP1g#{UW{}ljz2*C{@b1;d#
z>dm(x&DLfIjK<+O4zqe~hoy~mnxaOitY>|r?agETe@AL(K{;e{6R9Kl4QJ@u^F7Cx
z0mGm>XN#;mrz*`uJ@V|#h-r0biZr|u;3bZUamJjEf8SUOb+zOO`b&EqD5*Wl6|iaq
z<~7Adk9&j8Mg+ye(^rd5*i)ZBGh(iScj~eovoFfA3B*4O#NY@AcrKu8?7#O&U>yz~
zG;BHj3uFgxY_AsVUqoA*c09Ko&^Sw7#j_dWIKQ!YeocJ5&*xbqZpD(=nbu#8o~@0H
zEqtr-x1hzTgY&mt1R01KM5^NPpJ;VLP;rNN$rcvOOj*x2o$3)HqZ%da^_}>OPI%%v
z5m^vgW)#|Y#4Yfbm|l{Dm;7Hd!q_Oo;V-aoUB_%afKFrn^*<}>;h~I-k&hBU{vb{m
zGmhWrLu%cQw<pd)-~8cvJ4)SyRe%=)-92qwQ{&1FK=M$?&k&aF<%a0&PN|m@y~%$D
zJX{RSF47{{9>xu9FFfb}@G`1f7Tzx_*!1i;1v;=#5e5!U)f*y$R9Jvr;bw+FQBOc}
zsMvQEusV|jsN`GVvKRdo0{cYyX)4x2z3euG?SXFKZHAl2gARaNfm<S@FYFD3Vn96L
zM+z`OazIBp`}PraLE*VHZ5DJg2G`dzcToKL<UvOFf~(*%2KNyE*!Qo?Ah48M&EhY%
z^qgten+PehsRGv|55k6o5m!3J^S8Wo4FLBg0fzCBC~p(t1dW68H*d#=gf=tJ2TT@S
z^?LnK=WNt*xo@8ZTNH~H=mP4u8*419J{Kc|Q-hWHRjX=$0WRkx6C7tM2DfT4hU*D4
z8P`6Ed6i%dAeoPPn2vp0yF8hA_2DakM9AJPDn)F+`bn3ma|ef6HdOK}RebZ|vhPmA
zoYjtDK-@jA<ZiSHX}0H{?a<A?!bG(k1{%F`8Fqm=FsW_KKIcWvzUK#!Zb)GFj>7cZ
zf->b@H4o{Xek6E)1A^{5$QRpJjqW<kF&;J>+n7HXZCesNo*4l$PyA%!bIRAdTE2>o
zZR}dXtIdELcZA(;L-Z4U8}id1+*MOC3+vlB*l1q9OzNr3%X9mOB~{qJ*W^IXxVe!%
zZ-vyXBGrf;C^mEvEW5x@`<->m6D#60nq_4JQw}3Kp}3~8sDgo4qOj}3x^-}<D_Zx*
z|2*gfb)$8}wqf`UqiNY(h0VpG!%9vdT7uRRSrP~^D_)QABSK%2vtSh50Lm56upP*r
z9N>_#a+tWA0oT9tKUTv*iP6&b6~el!rNyv%L-sK6e)i2B!@*fAtKo=@s?r<ZFH_I-
zT)Z6?#cQV8pOIX<C9(f0wrd{xJjDE9oFP}``QJWgCKKS+C0#S7H)=vmNbFa??XtUF
z)W2iTUn+bTNU@k-^NA8fmK{j@t1YG84NzoVho;DDccE)R)v8v<`*eXbM<y_>Hft#e
zq9ukfixbv{@=aRewIkJ0B(II0`|E{Way{lH>KDlbU36cZ3sjeBqkeXd_|A=vjQmN(
zrJH=;&z$0RcwqndC+Fj<bX=qpV_e_h{Q8!!&ZHQf(aYhiX6}NUv8L=Deq)zQ*Xv#j
zS{PrCn40a(RK)dVrZ438;-;|K(sLpGMAlWx_C4u@<TR5hg46(_Hf*Gpf>zdd)z2tf
zR@JiSga*Z>?~kai=8)03r~yBl3#cM*y30d4HM;x-qW0s=ydJa->gGgF#g7Itu9CNp
zuzn-Ifrx1{iX^#;KOwwJ-IE6mYu;V>gnSww`f>T=@rNzmr$GOllG3cwGy3$_tz7$o
zxg)`Etr4iPR;Xg_U;U6xz)UbY(3qk%t0SI9bg18IiDfmBlR$d~^m(MVym9zvL4Vd}
zSp<F+f-|_n_*}#iYrV*K`{$-%;`h)`#yfth8=NE8IhQ&t>%c{g5o8bG&U1({co)3i
z!FG`^va3bjB4Ek`3ev6r--k}JeCw)DmwtP@OsXz8Vc7b5`I|Q*ke&R-TBWEl4G9pO
z_ErNGynCrE))zL>MKa!nlBY*c=sx(7`yofctD3-b5YuqZUwnAxuMhvO#>qSq6ZY->
zHM7TWJkJfid~fjBZpJ!uT72^|B*K*N;9Y*i<<3u%N)+}#D@Hdd2iO;O?tRO(9n)fy
z#@LFV?VEYN3;G|ys2NfvKFOxoq4d3cu)Dg{17*+D9J8VHQZpe>{xMMblhq*{4zAw&
zW;k7*khscUz;aTR88d2kUqRsWg=NA-GaM4fdR#bw(C<hmv?XRgmLk)(T32%UKq;FW
zWc5TK&TG_gv`_2d{Edfn?aox6Fl+HY-GbS5oXrlRR*^2->)&tje$1lS&=}OL(f#Qy
z@mqENmDI~;U|ybr>&h&hUt~KpSaZEI=aaOg!cR7ybo^yf1D$WG<bv8VQi)0lg;3jo
zHq@5#Jp|q%ag~>=E(i|VQah^RKmO8jspK?p{vYwX$W)wc05UR?+6VG!Cq3IA7zAFK
zIJtxR^@$`KqUxB(60$aoLBD*xewyja{e%Y<{zf&V*088YUe`0;gnYqWAGH`mHc$Pp
zQZWZmq*s1sUXJS`-(92f?6{S=$^4lvMWYFg2`F<{dGHasp`JJqcd`HTbTpT?)BH0c
zQ&(6?Ez=eemQdI1u9mTN%^>hvIHe<k<)$k85Y_)ktvQWlk6Rf^wsAeZ>VfG7)i<qi
zts5LxzRWhK%hg7MOcYO3C{qnL3raBNw=PQzy{W5d_;S`;k{4fA9y;!CsC}M9w(v#k
zkh$5_Vw^T{Q!E;D357G;G&{cQcdkls5Y;@l0+o`fZcR3y5AAtg-|^*b^_16oW9qCo
zFE=SN=rKWIwXJ6S4eI4#6Sc;sv2#XX*S*S6?_l;%Y2S-)mAO-VW9vzff8Wog?K9F?
z*$WS^$*}wyyT0VjIc|g2`f6$rDs)J@EY?rz+&s^GOpioa7k3$2QyO;sFD)ukjQeS(
zGvae&6uX~IhirPchIy{*#JS$`z+D-6-$8F|d~h)@Q!ck+aF=3C@SQ%CZ)H>A12fLp
zF5`(D4T0w*DPKA9tf3#5s?=;`mzLB%>*w4FSL^>VP{A?@QvDh4L{65DML9?5_zJYR
zwDJ2x-VBaPFmODseOI6VaU!2`|K#VBVvkxccka0CkH!)oK8ep+|K+pGeuDTcmhz8~
zURIHj7B9KBW=9#(t@gYk(L1RV&{jIm;<0s`LN9MVFqoqS#-kMkjcGf{u2ztZ|9t((
zX}eN{!S2h-<tw_+n6?!B6f_l$%Q84=44$yFDj*BjMiV$$X#X{)M<)V&Tgr%(8v?1X
zW~HNj3FcKzZw)>(ph;=MopHNCRefICiPuNz=DB{}!j)F091*m>V(u%!9Z~I1c>b3+
zQQEb_uU>ZjKa*pXTzHq`)y4+d=?<qh@FENc7uvO%3d&QT9|&48z5iM1vygfG(Tx}9
zHR>FjB6#We!jsj{uEcTrDzA8BhL%ykEN|>_kmJ?%nl{P7mPh>{k3ra72eA|@rl4uF
z1Me<dVq(uWhtD$(-8SZ2g>Lm&w#pQ5V8K&6^ZyK$ENO$VoCL1?zfAAi_!pc^Kegid
zVV@QD-`Zo_5cLW;C=QxUxOnA^=h>L!{0lWVp4#_Z@#Gtw2!1w8qvv0L7wDykK3R6P
zOuN7T)4z`sTIV4JBBXM9ap=IZnrG7|uucjyVVbc-`@Jp4{&x8T(-+KF?)H4kwOP^g
zPj!ImeBawseCKoCZdwSf(%?0St;7kB`+*alH$1zj<Leo*RbP3X|Dl)@bFRHj*wNqk
z@Pc7~X3W9H30I5d8+2kq?q**$)0VYoQ9peBAW{uEBY`b!e!}(FPqPvNc-I{6eb4*5
z^u|JNLC=i&t*xeQ6?2VlZ0!5<fAYjfDwl3wKcSpsr@v`MpxcbYwG*aJKnl!8&a4AZ
zN}B2l<Gvk`_6VBp^0j>fdk*j2f7O0TyI3YIX`61Pva_0blSA+}Mb3Atjz!5#2)y5A
z6I_yfBICs~gT0%5tBp#e^*<kUPheD0{Hu<fDQlA!+_q2q{iJL!FYlMNjW%{qZ%=SB
zeZ%L;Roy$~a+}Shr7Fd7lUvdf7fsT6cjefh>#1|pKf6ut2}@aW1<9)~f|=Ep*Zw+M
z6)kn(z_I}S>1UZ7A7@^@^?m2O`h%APrpfO=@%oIeDN?#(JJN9SWkb!yd&}6km?dxe
zWafs(&3+r=@iJHFde4ru*_HDT|FwS<+qc%Md9~5QDMHIzDpok(THlBqRgH=NAFj0G
z%~<fCcg;cFb^J5Mqo%!EX3J?*zE$gMY}}Un%jRy1N916%S^~-W=*-4-ynp07gJk1`
S!fTZofWXt$&t;ucLK6UbRVD)f

literal 0
HcmV?d00001


From 743b5d5db88c3f6203cce25b885970683f1a5592 Mon Sep 17 00:00:00 2001
From: Marcelo Feitoza Parisi <41125128+feitnomore@users.noreply.github.com>
Date: Mon, 10 May 2021 21:12:44 -0300
Subject: [PATCH 728/788] Updating --cascade=false to --cascade=orphan

Cascade=false is deprecated in kubectl 1.21, according to Bug #27920
---
 .../en/docs/tasks/run-application/delete-stateful-set.md    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/tasks/run-application/delete-stateful-set.md b/content/en/docs/tasks/run-application/delete-stateful-set.md
index 94b3c583eb..eff3aaee17 100644
--- a/content/en/docs/tasks/run-application/delete-stateful-set.md
+++ b/content/en/docs/tasks/run-application/delete-stateful-set.md
@@ -43,14 +43,14 @@ You may need to delete the associated headless service separately after the Stat
 kubectl delete service <service-name>
 ```
 
-When deleting a StatefulSet through `kubectl`, the StatefulSet scales down to 0. All Pods that are part of this workload are also deleted. If you want to delete only the StatefulSet and not the Pods, use `--cascade=false`.
+When deleting a StatefulSet through `kubectl`, the StatefulSet scales down to 0. All Pods that are part of this workload are also deleted. If you want to delete only the StatefulSet and not the Pods, use `--cascade=orphan`.
 For example:
 
 ```shell
-kubectl delete -f <file.yaml> --cascade=false
+kubectl delete -f <file.yaml> --cascade=orphan
 ```
 
-By passing `--cascade=false` to `kubectl delete`, the Pods managed by the StatefulSet are left behind even after the StatefulSet object itself is deleted. If the pods have a label `app=myapp`, you can then delete them as follows:
+By passing `--cascade=orphan` to `kubectl delete`, the Pods managed by the StatefulSet are left behind even after the StatefulSet object itself is deleted. If the pods have a label `app=myapp`, you can then delete them as follows:
 
 ```shell
 kubectl delete pods -l app=myapp

From d31ac9b884dea4185167487e5b1502c183379711 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Fri, 30 Apr 2021 10:44:21 +0800
Subject: [PATCH 729/788] Regenerated reference for kubeadm

The upstream source code now applies normalization function to all
command line flags. The PR captures such a change for all references
impacted.
---
 .../generated/kubeadm_init_phase_control-plane_all.md       | 6 +++---
 .../generated/kubeadm_init_phase_control-plane_apiserver.md | 2 +-
 .../kubeadm_init_phase_control-plane_controller-manager.md  | 2 +-
 .../generated/kubeadm_init_phase_control-plane_scheduler.md | 2 +-
 .../reference/setup-tools/kubeadm/generated/kubeadm_join.md | 2 +-
 .../kubeadm_join_phase_control-plane-prepare_all.md         | 2 +-
 .../kubeadm_join_phase_control-plane-prepare_certs.md       | 2 +-
 ...beadm_join_phase_control-plane-prepare_download-certs.md | 2 +-
 .../kubeadm_join_phase_control-plane-prepare_kubeconfig.md  | 2 +-
 .../kubeadm/generated/kubeadm_join_phase_kubelet-start.md   | 2 +-
 .../kubeadm/generated/kubeadm_join_phase_preflight.md       | 2 +-
 11 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md
index daad2e9a39..45fa4a29c4 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_all.md
@@ -59,7 +59,7 @@ kubeadm init phase control-plane all [flags]
 <td colspan="2">--apiserver-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the API Server or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the API Server or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</p></td>
 </tr>
 
 <tr>
@@ -87,7 +87,7 @@ kubeadm init phase control-plane all [flags]
 <td colspan="2">--controller-manager-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Controller Manager or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Controller Manager or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</p></td>
 </tr>
 
 <tr>
@@ -136,7 +136,7 @@ kubeadm init phase control-plane all [flags]
 <td colspan="2">--scheduler-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Scheduler or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Scheduler or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md
index f95da1c6d2..d073ed89f0 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_apiserver.md
@@ -48,7 +48,7 @@ kubeadm init phase control-plane apiserver [flags]
 <td colspan="2">--apiserver-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the API Server or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the API Server or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md
index 0931956c54..4a7f1e0fe0 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_controller-manager.md
@@ -48,7 +48,7 @@ kubeadm init phase control-plane controller-manager [flags]
 <td colspan="2">--controller-manager-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Controller Manager or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Controller Manager or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md
index 5fe483282a..c8ccb8c37a 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_init_phase_control-plane_scheduler.md
@@ -76,7 +76,7 @@ kubeadm init phase control-plane scheduler [flags]
 <td colspan="2">--scheduler-extra-args &lt;comma-separated 'key=value' pairs&gt;</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Scheduler or override default ones in form of <!-- raw HTML omitted -->=<!-- raw HTML omitted --></p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>A set of extra flags to pass to the Scheduler or override default ones in form of &lt;flagname&gt;=&lt;value&gt;</p></td>
 </tr>
 
 </tbody>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md
index ae528a44df..3f39346c96 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join.md
@@ -147,7 +147,7 @@ kubeadm join [api-server-endpoint] [flags]
 <td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;&lt;type&gt;:&lt;value&gt;&quot;).</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md
index cfc54c9bb4..02864ace82 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_all.md
@@ -83,7 +83,7 @@ kubeadm join phase control-plane-prepare all [api-server-endpoint] [flags]
 <td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;&lt;type&gt;:&lt;value&gt;&quot;).</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md
index d26c5e1adb..6475115940 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_certs.md
@@ -69,7 +69,7 @@ kubeadm join phase control-plane-prepare certs [api-server-endpoint] [flags]
 <td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;&lt;type&gt;:&lt;value&gt;&quot;).</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md
index e45e23cf7d..1cfac530cd 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_download-certs.md
@@ -69,7 +69,7 @@ kubeadm join phase control-plane-prepare download-certs [api-server-endpoint] [f
 <td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;&lt;type&gt;:&lt;value&gt;&quot;).</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md
index 995c6290c4..027837aeee 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_control-plane-prepare_kubeconfig.md
@@ -69,7 +69,7 @@ kubeadm join phase control-plane-prepare kubeconfig [api-server-endpoint] [flags
 <td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;&lt;type&gt;:&lt;value&gt;&quot;).</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md
index 9c1cef31c0..5896b25337 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_kubelet-start.md
@@ -62,7 +62,7 @@ kubeadm join phase kubelet-start [api-server-endpoint] [flags]
 <td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;&lt;type&gt;:&lt;value&gt;&quot;).</p></td>
 </tr>
 
 <tr>
diff --git a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md
index 5d8e10522b..0f4b7c50cd 100644
--- a/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/generated/kubeadm_join_phase_preflight.md
@@ -97,7 +97,7 @@ kubeadm join phase preflight [api-server-endpoint] [flags]
 <td colspan="2">--discovery-token-ca-cert-hash strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;<!-- raw HTML omitted -->:<!-- raw HTML omitted -->&quot;).</p></td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"><p>For token-based discovery, validate that the root CA public key matches this hash (format: &quot;&lt;type&gt;:&lt;value&gt;&quot;).</p></td>
 </tr>
 
 <tr>

From add60400f85fe380a0011e508c3d30662ef7aba1 Mon Sep 17 00:00:00 2001
From: Regan Chan <illianthe@gmail.com>
Date: Tue, 11 May 2021 06:37:53 -0400
Subject: [PATCH 730/788] Update feature gate info for ServiceNodeExclusion,
 NodeDisruptionExclusion, and LegacyNodeRoleBehavior

---
 .../command-line-tools-reference/feature-gates.md        | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 849af9f00b..ecf937ff15 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -132,7 +132,7 @@ different Kubernetes components.
 | `IPv6DualStack` | `true` | Beta | 1.21 | |
 | `KubeletCredentialProviders` | `false` | Alpha | 1.20 | |
 | `LegacyNodeRoleBehavior` | `false` | Alpha | 1.16 | 1.18 |
-| `LegacyNodeRoleBehavior` | `true` | Beta | 1.19 |  |
+| `LegacyNodeRoleBehavior` | `true` | Beta | 1.19 | 1.20 |
 | `LocalStorageCapacityIsolation` | `false` | Alpha | 1.7 | 1.9 |
 | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | |
@@ -142,7 +142,7 @@ different Kubernetes components.
 | `NamespaceDefaultLabelName` | `true` | Beta | 1.21 | |
 | `NetworkPolicyEndPort` | `false` | Alpha | 1.21 |  |
 | `NodeDisruptionExclusion` | `false` | Alpha | 1.16 | 1.18 |
-| `NodeDisruptionExclusion` | `true` | Beta | 1.19 | |
+| `NodeDisruptionExclusion` | `true` | Beta | 1.19 | 1.20 |
 | `NonPreemptingPriority` | `false` | Alpha | 1.15 | 1.18 |
 | `NonPreemptingPriority` | `true` | Beta | 1.19 | |
 | `PodDeletionCost` | `false` | Alpha | 1.21 | |
@@ -164,7 +164,7 @@ different Kubernetes components.
 | `ServiceLBNodePortControl` | `false` | Alpha | 1.20 | |
 | `ServiceLoadBalancerClass` | `false` | Alpha | 1.21 | |
 | `ServiceNodeExclusion` | `false` | Alpha | 1.8 | 1.18 |
-| `ServiceNodeExclusion` | `true` | Beta | 1.19 | |
+| `ServiceNodeExclusion` | `true` | Beta | 1.19 | 1.20 |
 | `ServiceTopology` | `false` | Alpha | 1.17 | |
 | `SetHostnameAsFQDN` | `false` | Alpha | 1.19 | 1.19 |
 | `SetHostnameAsFQDN` | `true` | Beta | 1.20 | |
@@ -286,11 +286,13 @@ different Kubernetes components.
 | `KubeletPodResources` | `false` | Alpha | 1.13 | 1.14 |
 | `KubeletPodResources` | `true` | Beta | 1.15 | |
 | `KubeletPodResources` | `true` | GA | 1.20 | |
+| `LegacyNodeRoleBehavior` | `false` | GA | 1.21 | - |
 | `MountContainers` | `false` | Alpha | 1.9 | 1.16 |
 | `MountContainers` | `false` | Deprecated | 1.17 | - |
 | `MountPropagation` | `false` | Alpha | 1.8 | 1.9 |
 | `MountPropagation` | `true` | Beta | 1.10 | 1.11 |
 | `MountPropagation` | `true` | GA | 1.12 | - |
+| `NodeDisruptionExclusion` | `true` | GA | 1.21 | - |
 | `NodeLease` | `false` | Alpha | 1.12 | 1.13 |
 | `NodeLease` | `true` | Beta | 1.14 | 1.16 |
 | `NodeLease` | `true` | GA | 1.17 | - |
@@ -341,6 +343,7 @@ different Kubernetes components.
 | `ServiceLoadBalancerFinalizer` | `false` | Alpha | 1.15 | 1.15 |
 | `ServiceLoadBalancerFinalizer` | `true` | Beta | 1.16 | 1.16 |
 | `ServiceLoadBalancerFinalizer` | `true` | GA | 1.17 | - |
+| `ServiceNodeExclusion` | `true` | GA | 1.21 | - |
 | `StartupProbe` | `false` | Alpha | 1.16 | 1.17 |
 | `StartupProbe` | `true` | Beta | 1.18 | 1.19 |
 | `StartupProbe` | `true` | GA | 1.20 | - |

From c7ed3bcef3159e37ba0f3796c7cdadd7dc4ca2f0 Mon Sep 17 00:00:00 2001
From: wangyysde <net_use@bzhy.com>
Date: Tue, 11 May 2021 21:31:35 +0800
Subject: [PATCH 731/788] fix example for customizing the control plane with
 scheduler flags

Signed-off-by: wangyysde <net_use@bzhy.com>
---
 .../tools/kubeadm/control-plane-flags.md               | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md b/content/en/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
index 1dd44e9b0b..8a9828a7ad 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
@@ -78,9 +78,13 @@ kind: ClusterConfiguration
 kubernetesVersion: v1.16.0
 scheduler:
   extraArgs:
-    bind-address: 0.0.0.0
-    config: /home/johndoe/schedconfig.yaml
-    kubeconfig: /home/johndoe/kubeconfig.yaml
+    config: /etc/kubernetes/scheduler-config.yaml
+  extraVolumes:
+    - name: schedulerconfig
+      hostPath: /home/johndoe/schedconfig.yaml
+      mountPath: /etc/kubernetes/scheduler-config.yaml
+      readOnly: true
+      pathType: "File"
 ```
 
 

From 8b0f2648e2d2c3e89a6376b6d1e3a35c97385277 Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <shannduin@google.com>
Date: Tue, 11 May 2021 14:50:35 +0000
Subject: [PATCH 732/788] Move Priority and Preemption to Scheduling section

---
 content/en/docs/concepts/scheduling-eviction/_index.md   | 9 ++++++---
 .../pod-priority-preemption.md                           | 0
 static/_redirects                                        | 1 +
 3 files changed, 7 insertions(+), 3 deletions(-)
 rename content/en/docs/concepts/{configuration => scheduling-eviction}/pod-priority-preemption.md (100%)

diff --git a/content/en/docs/concepts/scheduling-eviction/_index.md b/content/en/docs/concepts/scheduling-eviction/_index.md
index 3a2bf9359f..79fca8e597 100644
--- a/content/en/docs/concepts/scheduling-eviction/_index.md
+++ b/content/en/docs/concepts/scheduling-eviction/_index.md
@@ -1,8 +1,11 @@
 ---
-title: "Scheduling and Eviction"
+title: "Scheduling, Preemption and Eviction"
 weight: 90
 description: >
-  In Kubernetes, scheduling refers to making sure that Pods are matched to Nodes so that the kubelet can run them.
-  Eviction is the process of proactively failing one or more Pods on resource-starved Nodes.
+  In Kubernetes, scheduling refers to making sure that Pods are matched to Nodes
+  so that the kubelet can run them. Preemption is the process of terminating 
+  Pods with lower Priority so that Pods with higher Priority can schedule on 
+  Nodes. Eviction is the process of proactively terminating one or more Pods on
+  resource-starved Nodes.
 ---
 
diff --git a/content/en/docs/concepts/configuration/pod-priority-preemption.md b/content/en/docs/concepts/scheduling-eviction/pod-priority-preemption.md
similarity index 100%
rename from content/en/docs/concepts/configuration/pod-priority-preemption.md
rename to content/en/docs/concepts/scheduling-eviction/pod-priority-preemption.md
diff --git a/static/_redirects b/static/_redirects
index 1f6e9f29bc..2961c5229a 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -111,6 +111,7 @@
 /id/docs/concepts/configuration/scheduling-framework/     /id/docs/concepts/scheduling-eviction/scheduling-framework/    301
 /docs/concepts/configuration/taint-and-toleration/     /docs/concepts/scheduling-eviction/taint-and-toleration/ 301
 /id/docs/concepts/configuration/taint-and-toleration/     /id/docs/concepts/scheduling-eviction/taint-and-toleration/ 301
+/docs/concepts/configuration/pod-priority-preemption/    /docs/concepts/scheduling-eviction/pod-priority-preemption/ 301
 /docs/concepts/extend-kubernetes/extend-cluster/      /docs/concepts/extend-kubernetes/ 301
 /docs/concepts/jobs/cron-jobs/     /docs/concepts/workloads/controllers/cron-jobs/ 301
 /docs/concepts/jobs/run-to-completion-finite-workloads/      /docs/concepts/workloads/controllers/job/ 301

From ee1361dc0db1932e4f8f8e52925efbd17f96893e Mon Sep 17 00:00:00 2001
From: joostas <justas.narbutas@gmail.com>
Date: Mon, 5 Apr 2021 20:48:16 +0300
Subject: [PATCH 733/788] [en] Fix label selector in "kubectl for Docker Users"

Before
```sh
kubectl get po -l
run=nginx-app
No resources found in default namespace.
```
Because:
```sh
kubectl get po --show-labels
NAME                         READY   STATUS    RESTARTS   AGE   LABELS
nginx-app-58cfd4c468-jx6qp   1/1     Running   0          17m app=nginx-app,pod-template-hash=58cfd4c468
```
After:
```sh
kubectl get po -l app=nginx-app
NAME                         READY   STATUS    RESTARTS   AGE
nginx-app-58cfd4c468-jx6qp   1/1     Running   0          18m
```
---
 content/en/docs/reference/kubectl/docker-cli-to-kubectl.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md b/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md
index ac7b7a49f9..9c148702b5 100644
--- a/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md
+++ b/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md
@@ -265,7 +265,7 @@ nginx-app    1/1     1            1           2m
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 ```
 ```
 NAME                         READY     STATUS    RESTARTS   AGE
@@ -279,7 +279,7 @@ deployment "nginx-app" deleted
 ```
 
 ```shell
-kubectl get po -l run=nginx-app
+kubectl get po -l app=nginx-app
 # Return nothing
 ```
 

From 7edf8903737573a419aace58c517b1a09b672667 Mon Sep 17 00:00:00 2001
From: Jim Angel <jameswangel@gmail.com>
Date: Thu, 6 May 2021 17:46:08 -0600
Subject: [PATCH 734/788] Adding a release page under "Release Information"

---
 OWNERS_ALIASES                                |   17 +
 content/en/community/_index.html              |    3 +-
 content/en/docs/setup/release/_index.md       |    4 -
 content/en/docs/setup/release/notes.md        | 1626 -----------------
 content/en/releases/OWNERS                    |   15 +
 content/en/releases/_index.md                 |   27 +
 content/en/releases/download.md               |   26 +
 content/en/releases/notes.md                  |   13 +
 content/en/releases/patch-releases.md         |  195 ++
 content/en/releases/release.md                |  364 ++++
 .../version-skew-policy.md                    |   11 +-
 data/i18n/en/en.toml                          |   14 +-
 data/releases/OWNERS                          |   15 +
 data/releases/schedule.yaml                   |   67 +
 layouts/partials/navbar-version-selector.html |    1 +
 layouts/shortcodes/release-data.html          |   34 +
 scripts/update-release-info.sh                |   43 +
 static/_redirects                             |    5 +-
 18 files changed, 841 insertions(+), 1639 deletions(-)
 delete mode 100755 content/en/docs/setup/release/_index.md
 delete mode 100644 content/en/docs/setup/release/notes.md
 create mode 100644 content/en/releases/OWNERS
 create mode 100644 content/en/releases/_index.md
 create mode 100644 content/en/releases/download.md
 create mode 100644 content/en/releases/notes.md
 create mode 100644 content/en/releases/patch-releases.md
 create mode 100644 content/en/releases/release.md
 rename content/en/{docs/setup/release => releases}/version-skew-policy.md (96%)
 create mode 100644 data/releases/OWNERS
 create mode 100644 data/releases/schedule.yaml
 create mode 100644 layouts/shortcodes/release-data.html
 create mode 100755 scripts/update-release-info.sh

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 042e2f4b15..c2cf44f242 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -233,3 +233,20 @@ aliases:
     - mrbobbytables
     - nikhita
     - parispittman
+  # authoritative source: git.k8s.io/release/OWNERS_ALIASES
+  release-engineering-approvers:
+    - cpanato # Release Manager
+    - hasheddan # subproject owner / Release Manager
+    - puerco # Release Manager
+    - saschagrunert # subproject owner / Release Manager
+    - justaugustus # subproject owner / Release Manager
+    - xmudrii # Release Manager
+  release-engineering-reviewers:
+    - ameukam # Release Manager Associate
+    - jimangel # Release Manager Associate
+    - markyjackson-taulia # Release Manager Associate
+    - mkorbi # Release Manager Associate
+    - onlydole # Release Manager Associate
+    - sethmccombs # Release Manager Associate
+    - verolop # Release Manager Associate
+    - wilsonehusin # Release Manager Associate
\ No newline at end of file
diff --git a/content/en/community/_index.html b/content/en/community/_index.html
index ad9cab5d94..5b65292ea7 100644
--- a/content/en/community/_index.html
+++ b/content/en/community/_index.html
@@ -24,7 +24,8 @@ cid: community
 <a href="#videos">Videos</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 <a href="#discuss">Discussions</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 <a href="#events">Events and meetups</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-<a href="#news">News</a>
+<a href="#news">News</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+<a href="/releases">Releases</a>
 
 </div>
 <br class="mobile"><br class="mobile">
diff --git a/content/en/docs/setup/release/_index.md b/content/en/docs/setup/release/_index.md
deleted file mode 100755
index e6d5944331..0000000000
--- a/content/en/docs/setup/release/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: "Release notes and version skew"
-weight: 10
----
diff --git a/content/en/docs/setup/release/notes.md b/content/en/docs/setup/release/notes.md
deleted file mode 100644
index 2741de7e50..0000000000
--- a/content/en/docs/setup/release/notes.md
+++ /dev/null
@@ -1,1626 +0,0 @@
----
-title: v1.21 Release Notes
-weight: 10
-card:
-  name: release-notes
-  weight: 20
-  anchors:
-  - anchor: "#"
-    title: Current Release Notes
-  - anchor: "#urgent-upgrade-notes"
-    title: Urgent Upgrade Notes
----
-
-<!-- NEW RELEASE NOTES ENTRY -->
-
-# v1.21.0
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.21.0
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes.tar.gz) | `19bb76a3fa5ce4b9f043b2a3a77c32365ab1fcb902d8dd6678427fb8be8f49f64a5a03dc46aaef9c7dadee05501cf83412eda46f0edacbb8fc1ed0bf5fb79142`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-src.tar.gz) | `f942e6d6c10007a6e9ce21e94df597015ae646a7bc3e515caf1a3b79f1354efb9aff59c40f2553a8e3d43fe4a01742241f5af18b69666244906ed11a22e3bc49`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-darwin-amd64.tar.gz) | `be9d1440e418e5253fb8a3d8aba705ca8160746a9bd17325ad626a986b6da9f733af864155a651a32b7bca94b533b8d596005ddbe5248bdeea85db47a1b957ed`
-[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-darwin-arm64.tar.gz) | `eed0ddc81d104bb2d41ace13f737c490423d5df4ebddc7376e45c18ed66af35933c9376b912c1c3da105945b04056f6ca0870c156bee8a307cf4189ca5eb1dd1`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-386.tar.gz) | `8a2f30c4434199762f2a96141dab4241c1cce2711bea9ea39cc63c2c5e7d31719ed7f076efac1931604e3a94578d3bbf0cfa454965708c96f3cfb91789868746`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-amd64.tar.gz) | `cd3cfa645fa31de3716f1f63506e31b73d2aa8d37bb558bb3b3e8c151f35b3d74d44e03cbd05be67e380f9a5d015aba460222afdac6677815cd99a85c2325cf0`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-arm.tar.gz) | `936042aa11cea0f6dfd2c30fc5dbe655420b34799bede036b1299a92d6831f589ca10290b73b9c9741560b603ae31e450ad024e273f2b4df5354bfac272691d8`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-arm64.tar.gz) | `42beb75364d7bf4bf526804b8a35bd0ab3e124b712e9d1f45c1b914e6be0166619b30695feb24b3eecef134991dacb9ab3597e788bd9e45cf35addddf20dd7f6`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-ppc64le.tar.gz) | `4baba2ed7046b28370eccc22e2378ae79e3ce58220d6f4f1b6791e8233bec8379e30200bb20b971456b83f2b791ea166fdfcf1ea56908bc1eea03590c0eda468`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-linux-s390x.tar.gz) | `37fa0c4d703aef09ce68c10ef3e7362b0313c8f251ce38eea579cd18fae4023d3d2b70e0f31577cabe6958ab9cfc30e98d25a7c64e69048b423057c3cf728339`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-windows-386.tar.gz) | `6900db36c1e3340edfd6dfd8d720575a904c932d39a8a7fa36401595e971a0235bd42111dbcc1cbb77e7374e47f1380a68c637997c18f96a0d9cdc9f3714c4c9`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-client-windows-amd64.tar.gz) | `90de67f6f79fc63bcfdf35066e3d84501cc85433265ffad36fd1a7a428a31b446249f0644a1e97495ea8b2a08e6944df6ef30363003750339edaa2aceffe937c`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-amd64.tar.gz) | `3941dcc2309ac19ec185603a79f5a086d8a198f98c04efa23f15a177e5e1f34946ea9392ba9f5d24d0d727839438f067fef1001fc6e88b27b8b01e35bbd962ca`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-arm.tar.gz) | `6507abf6c2ec2b336901dc23269f6c577ec0049b8bad3c9dd6ad63f21aa10f09bfbbfa6e064c2466d250411d3e10f8672791a9e10942e38de7bfbaf7a8bcc9da`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-arm64.tar.gz) | `5abe76f867ca6865344e957bf166b81766c049ec4eb183a8a5580c22a7f8474db1edf90fd901a5833e56128b6825811653a1d27f72fd34ce5b1287a8c10da05c`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-ppc64le.tar.gz) | `62507b182ca25396a285d91241536860e58f54fac937e97cbdf91948c83bb41be97d33277400489bf50e85164d560205540b76e94e5d519892312bdc63df1067`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-server-linux-s390x.tar.gz) | `04f2a1f7d1388e4a7d7d9f597f872a3da36f26839cfed16aad6df07021c03f4dca1df06b19cfda56df09d1c2d9a13ebd0af40ca1b9b6aecfaf427ab7712d88f3`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-amd64.tar.gz) | `c1831c708109c31b3878e5a9327ea4b9e546504d0b6b00f3d43db78b5dd7d5114d32ac24a9a505f9cadbe61521f0419933348d2cd309ed8cfe3987d9ca8a7e2c`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-arm.tar.gz) | `b68dd5bcfc7f9ce2781952df40c8c3a64c29701beff6ac22f042d6f31d4de220e9200b7e8272ddf608114327770acdaf3cb9a34a0a5206e784bda717ea080e0f`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-arm64.tar.gz) | `7fa84fc500c28774ed25ca34b6f7b208a2bea29d6e8379f84b9f57bd024aa8fe574418cee7ee26edd55310716d43d65ae7b9cbe11e40c995fe2eac7f66bdb423`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-ppc64le.tar.gz) | `a4278b3f8e458e9581e01f0c5ba8443303c987988ee136075a8f2f25515d70ca549fbd2e4d10eefca816c75c381d62d71494bd70c47034ab47f8315bbef4ae37`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-linux-s390x.tar.gz) | `8de2bc6f22f232ff534b45012986eac23893581ccb6c45bd637e40dbe808ce31d5a92375c00dc578bdbadec342b6e5b70c1b9f3d3a7bb26ccfde97d71f9bf84a`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0/kubernetes-node-windows-amd64.tar.gz) | `b82e94663d330cff7a117f99a7544f27d0bc92b36b5a283b3c23725d5b33e6f15e0ebf784627638f22f2d58c58c0c2b618ddfd226a64ae779693a0861475d355`
-
-## Changelog since v1.20.0
-
-## What's New (Major Themes)
-
-### Deprecation of PodSecurityPolicy
-
-PSP as an admission controller resource is being deprecated. Deployed PodSecurityPolicy's will keep working until version 1.25, their target removal from the codebase. A new feature, with a working title of "PSP replacement policy", is being developed in [KEP-2579](https://features.k8s.io/2579). To learn more, read [PodSecurityPolicy Deprecation: Past, Present, and Future](https://blog.k8s.io/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/).
-
-### Kubernetes API Reference Documentation
-
-The API reference is now generated with [`gen-resourcesdocs`](https://github.com/kubernetes-sigs/reference-docs/tree/c96658d89fb21037b7d00d27e6dbbe6b32375837/gen-resourcesdocs) and it is moving to [Kubernetes API](https://docs.k8s.io/reference/kubernetes-api/)
-
-### Kustomize Updates in Kubectl
-
-[Kustomize](https://github.com/kubernetes-sigs/kustomize) version in kubectl had a jump from v2.0.3 to [v4.0.5](https://github.com/kubernetes/kubernetes/pull/98946). Kustomize is now treated as a library and future updates will be less sporadic.
-
-### Default Container Labels
-
-Pod with multiple containers can use `kubectl.kubernetes.io/default-container` label to have a container preselected for kubectl commands. More can be read in [KEP-2227](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/2227-kubectl-default-container/README.md).
-
-### Immutable Secrets and ConfigMaps
-
-Immutable Secrets and ConfigMaps graduates to GA. This feature allows users to specify that the contents of a particular Secret or ConfigMap is immutable for its object lifetime. For such instances, Kubelet will not watch/poll for changes and therefore reducing apiserver load.
-
-### Structured Logging in Kubelet
-
-Kubelet has adopted structured logging, thanks to community effort in accomplishing this within the release timeline. Structured logging in the project remains an ongoing effort -- for folks interested in participating, [keep an eye / chime in to the mailing list discussion](https://groups.google.com/g/kubernetes-dev/c/y4WIw-ntUR8).
-
-### Storage Capacity Tracking
-
-Traditionally, the Kubernetes scheduler was based on the assumptions that additional persistent storage is available everywhere in the cluster and has infinite capacity. Topology constraints addressed the first point, but up to now pod scheduling was still done without considering that the remaining storage capacity may not be enough to start a new pod. [Storage capacity tracking](https://docs.k8s.io/concepts/storage/storage-capacity/) addresses that by adding an API for a CSI driver to report storage capacity and uses that information in the Kubernetes scheduler when choosing a node for a pod. This feature serves as a stepping stone for supporting dynamic provisioning for local volumes and other volume types that are more capacity constrained.
-
-### Generic Ephemeral Volumes
-
-[Generic ephermeral volumes](https://docs.k8s.io/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes) feature allows any existing storage driver that supports dynamic provisioning to be used as an ephemeral volume with the volume’s lifecycle bound to the Pod. It can be used to provide scratch storage that is different from the root disk, for example persistent memory, or a separate local disk on that node. All StorageClass parameters for volume provisioning are supported. All features supported with PersistentVolumeClaims are supported, such as storage capacity tracking, snapshots and restore, and volume resizing.
-
-### CSI Service Account Token
-
-CSI Service Account Token feature moves to Beta in 1.21. This feature improves the security posture and allows CSI drivers to receive pods' [bound service account tokens](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md). This feature also provides a knob to re-publish volumes so that short-lived volumes can be refreshed.
-
-### CSI Health Monitoring
-
-The CSI health monitoring feature is being released as a second Alpha in Kubernetes 1.21. This feature enables CSI Drivers to share abnormal volume conditions from the underlying storage systems with Kubernetes so that they can be reported as events on PVCs or Pods. This feature serves as a stepping stone towards programmatic detection and resolution of individual volume health issues by Kubernetes.
-
-## Known Issues
-
-### `TopologyAwareHints` feature falls back to default behavior
-
-The feature gate currently falls back to the default behavior in most cases. Enabling the feature gate will add hints to `EndpointSlices`, but functional differences are only observed in non-dual stack kube-proxy implementation. [The fix will be available in coming releases](https://github.com/kubernetes/kubernetes/pull/100804).
-
-## Urgent Upgrade Notes 
-
-### (No, really, you MUST read this before you upgrade)
-
-- Kube-proxy's IPVS proxy mode no longer sets the net.ipv4.conf.all.route_localnet sysctl parameter. Nodes upgrading will have net.ipv4.conf.all.route_localnet set to 1 but new nodes will inherit the system default (usually 0). If you relied on any behavior requiring net.ipv4.conf.all.route_localnet, you must set ensure it is enabled as kube-proxy will no longer set it automatically. This change helps to further mitigate CVE-2020-8558. ([#92938](https://github.com/kubernetes/kubernetes/pull/92938), [@lbernail](https://github.com/lbernail)) [SIG Network and Release]
- - Kubeadm: during "init" an empty cgroupDriver value in the KubeletConfiguration is now always set to "systemd" unless the user is explicit about it. This requires existing machine setups to configure the container runtime to use the "systemd" driver. Documentation on this topic can be found here: https://kubernetes.io/docs/setup/production-environment/container-runtimes/. When upgrading existing clusters / nodes using "kubeadm upgrade" the old cgroupDriver value is preserved, but in 1.22 this change will also apply to "upgrade". For more information on migrating to the "systemd" driver or remaining on the "cgroupfs" driver see: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/. ([#99471](https://github.com/kubernetes/kubernetes/pull/99471), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
- - Newly provisioned PVs by EBS plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99130](https://github.com/kubernetes/kubernetes/pull/99130), [@ayberk](https://github.com/ayberk)) [SIG Cloud Provider, Storage and Testing]
- - Newly provisioned PVs by OpenStack Cinder plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99719](https://github.com/kubernetes/kubernetes/pull/99719), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider and Storage]
- - Newly provisioned PVs by gce-pd will no longer have the beta FailureDomain label. gce-pd volume plugin will start to have GA topology label instead. ([#98700](https://github.com/kubernetes/kubernetes/pull/98700), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider, Storage and Testing]
- - OpenStack Cinder CSI migration is on by default, Clinder CSI driver must be installed on clusters on OpenStack for Cinder volumes to work. ([#98538](https://github.com/kubernetes/kubernetes/pull/98538), [@dims](https://github.com/dims)) [SIG Storage]
- - Remove alpha `CSIMigrationXXComplete` flag and add alpha `InTreePluginXXUnregister` flag. Deprecate `CSIMigrationvSphereComplete` flag and it will be removed in v1.22. ([#98243](https://github.com/kubernetes/kubernetes/pull/98243), [@Jiawei0227](https://github.com/Jiawei0227))
- - Remove storage metrics `storage_operation_errors_total`, since we already have `storage_operation_status_count`.And add new field `status` for `storage_operation_duration_seconds`, so that we can know about all status storage operation latency. ([#98332](https://github.com/kubernetes/kubernetes/pull/98332), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
- - The metric `storage_operation_errors_total` is not removed, but is marked deprecated, and the metric `storage_operation_status_count` is marked deprecated. In both cases the `storage_operation_duration_seconds` metric can be used to recover equivalent counts (using `status=fail-unknown` in the case of `storage_operations_errors_total`). ([#99045](https://github.com/kubernetes/kubernetes/pull/99045), [@mattcary](https://github.com/mattcary))
- - `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior` features have been promoted to GA. `ServiceNodeExclusion` and `NodeDisruptionExclusion` are now unconditionally enabled, while `LegacyNodeRoleBehavior` is unconditionally disabled. To prevent control plane nodes from being added to load balancers automatically, upgrade users need to add "node.kubernetes.io/exclude-from-external-load-balancers" label to control plane nodes. ([#97543](https://github.com/kubernetes/kubernetes/pull/97543), [@pacoxu](https://github.com/pacoxu))
- 
-## Changes by Kind
-
-### Deprecation
-
-- Aborting the drain command in a list of nodes will be deprecated. The new behavior will make the drain command go through all nodes even if one or more nodes failed during the drain. For now, users can try such experience by enabling --ignore-errors flag. ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan))
-- Delete deprecated `service.beta.kubernetes.io/azure-load-balancer-mixed-protocols` mixed procotol annotation in favor of the MixedProtocolLBService feature ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Deprecate the `topologyKeys` field in Service. This capability will be replaced with upcoming work around Topology Aware Subsetting and Service Internal Traffic Policy. ([#96736](https://github.com/kubernetes/kubernetes/pull/96736), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
-- Kube-proxy: remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
-- Kubeadm: deprecated command "alpha selfhosting pivot" is now removed. ([#97627](https://github.com/kubernetes/kubernetes/pull/97627), [@knight42](https://github.com/knight42))
-- Kubeadm: graduate the command `kubeadm alpha kubeconfig user` to `kubeadm kubeconfig user`. The `kubeadm alpha kubeconfig user` command is deprecated now. ([#97583](https://github.com/kubernetes/kubernetes/pull/97583), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubeadm: the "kubeadm alpha certs" command is removed now, please use "kubeadm certs" instead. ([#97706](https://github.com/kubernetes/kubernetes/pull/97706), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubeadm: the deprecated kube-dns is no longer supported as an option. If "ClusterConfiguration.dns.type" is set to "kube-dns" kubeadm will now throw an error. ([#99646](https://github.com/kubernetes/kubernetes/pull/99646), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
-- Kubectl: The deprecated `kubectl alpha debug` command is removed. Use `kubectl debug` instead. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
-- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
-- Remove deprecated `--generator, --replicas, --service-generator, --service-overrides, --schedule` from `kubectl run`
-  Deprecate `--serviceaccount, --hostport, --requests, --limits` in `kubectl run` ([#99732](https://github.com/kubernetes/kubernetes/pull/99732), [@soltysh](https://github.com/soltysh))
-- Remove the deprecated metrics "scheduling_algorithm_preemption_evaluation_seconds" and "binding_duration_seconds", suggest to use "scheduler_framework_extension_point_duration_seconds" instead. ([#96447](https://github.com/kubernetes/kubernetes/pull/96447), [@chendave](https://github.com/chendave)) [SIG Cluster Lifecycle, Instrumentation, Scheduling and Testing]
-- Removing experimental windows container hyper-v support with Docker ([#97141](https://github.com/kubernetes/kubernetes/pull/97141), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
-- The GA TokenRequest and TokenRequestProjection feature gates have been removed and are unconditionally enabled. Remove explicit use of those feature gates in CLI invocations. ([#97148](https://github.com/kubernetes/kubernetes/pull/97148), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
-- The PodSecurityPolicy API is deprecated in 1.21, and will no longer be served starting in 1.25. ([#97171](https://github.com/kubernetes/kubernetes/pull/97171), [@deads2k](https://github.com/deads2k)) [SIG Auth and CLI]
-- The `batch/v2alpha1` CronJob type definitions and clients are deprecated and removed. ([#96987](https://github.com/kubernetes/kubernetes/pull/96987), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
-- The `export` query parameter (inconsistently supported by API resources and deprecated in v1.14) is fully removed.  Requests setting this query parameter will now receive a 400 status response. ([#98312](https://github.com/kubernetes/kubernetes/pull/98312), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
-- `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
-- `discovery.k8s.io/v1beta1` EndpointSlices are deprecated in favor of `discovery.k8s.io/v1`, and will no longer be served in Kubernetes v1.25. ([#100472](https://github.com/kubernetes/kubernetes/pull/100472), [@liggitt](https://github.com/liggitt))
-- `diskformat` storage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
-  
-  vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
-  
-  VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
-  
-  Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
-  
-  Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel))
-
-### API Change
-
-- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
-  2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
-- Add Probe-level terminationGracePeriodSeconds field ([#99375](https://github.com/kubernetes/kubernetes/pull/99375), [@ehashman](https://github.com/ehashman)) [SIG API Machinery, Apps, Node and Testing]
-- Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed`. This is an alpha field and is only honored by servers with the `IndexedJob` feature gate enabled. ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
-- Adds support for endPort field in NetworkPolicy ([#97058](https://github.com/kubernetes/kubernetes/pull/97058), [@rikatz](https://github.com/rikatz)) [SIG Apps and Network]
-- CSIServiceAccountToken graduates to Beta and enabled by default. ([#99298](https://github.com/kubernetes/kubernetes/pull/99298), [@zshihang](https://github.com/zshihang))
-- Cluster admins can now turn off `/debug/pprof` and `/debug/flags/v` endpoint in kubelet by setting `enableProfilingHandler` and `enableDebugFlagsHandler` to `false` in the Kubelet configuration file. Options `enableProfilingHandler` and `enableDebugFlagsHandler` can be set to `true` only when `enableDebuggingHandlers` is also set to `true`. ([#98458](https://github.com/kubernetes/kubernetes/pull/98458), [@SaranBalaji90](https://github.com/SaranBalaji90))
-- DaemonSets accept a MaxSurge integer or percent on their rolling update strategy that will launch the updated pod on nodes and wait for those pods to go ready before marking the old out-of-date pods as deleted. This allows workloads to avoid downtime during upgrades when deployed using DaemonSets. This feature is alpha and is behind the DaemonSetUpdateSurge feature gate. ([#96441](https://github.com/kubernetes/kubernetes/pull/96441), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps and Testing]
-- Enable SPDY pings to keep connections alive, so that `kubectl exec` and `kubectl portforward` won't be interrupted. ([#97083](https://github.com/kubernetes/kubernetes/pull/97083), [@knight42](https://github.com/knight42)) [SIG API Machinery and CLI]
-- FieldManager no longer owns fields that get reset before the object is persisted (e.g. "status wiping"). ([#99661](https://github.com/kubernetes/kubernetes/pull/99661), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Auth and Testing]
-- Fixes server-side apply for APIService resources. ([#98576](https://github.com/kubernetes/kubernetes/pull/98576), [@kevindelgado](https://github.com/kevindelgado))
-- Generic ephemeral volumes are beta. ([#99643](https://github.com/kubernetes/kubernetes/pull/99643), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Node, Storage and Testing]
-- Hugepages request values are limited to integer multiples of the page size. ([#98515](https://github.com/kubernetes/kubernetes/pull/98515), [@lala123912](https://github.com/lala123912)) [SIG Apps]
-- Implement the GetAvailableResources in the podresources API. ([#95734](https://github.com/kubernetes/kubernetes/pull/95734), [@fromanirh](https://github.com/fromanirh)) [SIG Instrumentation, Node and Testing]
-- IngressClass resource can now reference a resource in a specific namespace 
-  for implementation-specific configuration (previously only Cluster-level resources were allowed). 
-  This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi))
-- Jobs API has a new `.spec.suspend` field that can be used to suspend and resume Jobs. This is an alpha field which is only honored by servers with the `SuspendJob` feature gate enabled. ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac))
-- Kubelet Graceful Node Shutdown feature graduates to Beta and enabled by default. ([#99735](https://github.com/kubernetes/kubernetes/pull/99735), [@bobbypage](https://github.com/bobbypage))
-- Kubernetes is now built using go1.15.7 ([#98363](https://github.com/kubernetes/kubernetes/pull/98363), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Node, Release and Testing]
-- Namespace API objects now have a `kubernetes.io/metadata.name` label matching their metadata.name field to allow selecting any namespace by its name using a label selector. ([#96968](https://github.com/kubernetes/kubernetes/pull/96968), [@jayunit100](https://github.com/jayunit100)) [SIG API Machinery, Apps, Cloud Provider, Storage and Testing]
-- One new field "InternalTrafficPolicy" in Service is added.
-  It specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only.
-  "Cluster" routes internal traffic to a Service to all endpoints.
-  "Local" routes traffic to node-local endpoints only, and traffic is dropped if no node-local endpoints are ready.
-  The default value is "Cluster". ([#96600](https://github.com/kubernetes/kubernetes/pull/96600), [@maplain](https://github.com/maplain)) [SIG API Machinery, Apps and Network]
-- PodDisruptionBudget API objects can now contain conditions in status. ([#98127](https://github.com/kubernetes/kubernetes/pull/98127), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
-- PodSecurityPolicy only stores "generic" as allowed volume type if the GenericEphemeralVolume feature gate is enabled ([#98918](https://github.com/kubernetes/kubernetes/pull/98918), [@pohly](https://github.com/pohly)) [SIG Auth and Security]
-- Promote CronJobs to batch/v1 ([#99423](https://github.com/kubernetes/kubernetes/pull/99423), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
-- Promote Immutable Secrets/ConfigMaps feature to Stable. This allows to set `immutable` field in Secret or ConfigMap object to mark their contents as immutable. ([#97615](https://github.com/kubernetes/kubernetes/pull/97615), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Architecture, Node and Testing]
-- Remove support for building Kubernetes with bazel. ([#99561](https://github.com/kubernetes/kubernetes/pull/99561), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Scheduling, Storage, Testing and Windows]
-- Scheduler extender filter interface now can report unresolvable failed nodes in the new field `FailedAndUnresolvableNodes` of  `ExtenderFilterResult` struct. Nodes in this map will be skipped in the preemption phase. ([#92866](https://github.com/kubernetes/kubernetes/pull/92866), [@cofyc](https://github.com/cofyc)) [SIG Scheduling]
-- Services can specify loadBalancerClass to use a custom load balancer ([#98277](https://github.com/kubernetes/kubernetes/pull/98277), [@XudongLiuHarold](https://github.com/XudongLiuHarold))
-- Storage capacity tracking (= the CSIStorageCapacity feature) graduates to Beta and enabled by default, storage.k8s.io/v1alpha1/VolumeAttachment and storage.k8s.io/v1alpha1/CSIStorageCapacity objects are deprecated ([#99641](https://github.com/kubernetes/kubernetes/pull/99641), [@pohly](https://github.com/pohly))
-- Support for Indexed Job: a Job that is considered completed when Pods associated to indexes from 0 to (.spec.completions-1) have succeeded. ([#98812](https://github.com/kubernetes/kubernetes/pull/98812), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
-- The BoundServiceAccountTokenVolume feature has been promoted to beta, and enabled by default.
-  - This changes the tokens provided to containers at `/var/run/secrets/kubernetes.io/serviceaccount/token` to be time-limited, auto-refreshed, and invalidated when the containing pod is deleted.
-  - Clients should reload the token from disk periodically (once per minute is recommended) to ensure they continue to use a valid token. `k8s.io/client-go` version v11.0.0+ and v0.15.0+ reload tokens automatically.
-  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be shortened to 1 hour by starting `kube-apiserver` with `--service-account-extend-token-expiration=false`. ([#95667](https://github.com/kubernetes/kubernetes/pull/95667), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle and Testing]
-- The EndpointSlice Controllers are now GA. The `EndpointSliceController` will not populate the `deprecatedTopology` field and will only provide topology information through the `zone` and `nodeName` fields. ([#99870](https://github.com/kubernetes/kubernetes/pull/99870), [@swetharepakula](https://github.com/swetharepakula))
-- The Endpoints controller will now set the `endpoints.kubernetes.io/over-capacity` annotation to "warning" when an Endpoints resource contains more than 1000 addresses. In a future release, the controller will truncate Endpoints that exceed this limit. The EndpointSlice API can be used to support significantly larger number of addresses. ([#99975](https://github.com/kubernetes/kubernetes/pull/99975), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- The PodDisruptionBudget API has been promoted to policy/v1 with no schema changes. The only functional change is that an empty selector (`{}`) written to a policy/v1 PodDisruptionBudget now selects all pods in the namespace. The behavior of the policy/v1beta1 API remains unchanged. The policy/v1beta1 PodDisruptionBudget API is deprecated and will no longer be served in 1.25+. ([#99290](https://github.com/kubernetes/kubernetes/pull/99290), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Scheduling and Testing]
-- The `EndpointSlice` API is now GA. The `EndpointSlice` topology field has been removed from the GA API and will be replaced by a new per Endpoint Zone field. If the topology field was previously used, it will be converted into an annotation in the v1 Resource. The `discovery.k8s.io/v1alpha1` API is removed. ([#99662](https://github.com/kubernetes/kubernetes/pull/99662), [@swetharepakula](https://github.com/swetharepakula))
-- The `controller.kubernetes.io/pod-deletion-cost` annotation can be set to offer a hint on the cost of deleting a `Pod` compared to other pods belonging to the same ReplicaSet. Pods with lower deletion cost are deleted first. This is an alpha feature. ([#99163](https://github.com/kubernetes/kubernetes/pull/99163), [@ahg-g](https://github.com/ahg-g))
-- The kube-apiserver now resets `managedFields` that got corrupted by a mutating admission controller. ([#98074](https://github.com/kubernetes/kubernetes/pull/98074), [@kwiesmueller](https://github.com/kwiesmueller))
-- Topology Aware Hints are now available in alpha and can be enabled with the `TopologyAwareHints` feature gate. ([#99522](https://github.com/kubernetes/kubernetes/pull/99522), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Instrumentation, Network and Testing]
-- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#97099](https://github.com/kubernetes/kubernetes/pull/97099), [@pacoxu](https://github.com/pacoxu)) [SIG CLI]
-
-### Feature
-
-- A client-go metric, rest_client_exec_plugin_call_total, has been added to track total calls to client-go credential plugins. ([#98892](https://github.com/kubernetes/kubernetes/pull/98892), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation]
-- A new histogram metric to track the time it took to delete a job by the `TTLAfterFinished` controller ([#98676](https://github.com/kubernetes/kubernetes/pull/98676), [@ahg-g](https://github.com/ahg-g))
-- AWS cloud provider supports auto-discovering subnets without any `kubernetes.io/cluster/<clusterName>` tags. It also supports additional service annotation `service.beta.kubernetes.io/aws-load-balancer-subnets` to manually configure the subnets. ([#97431](https://github.com/kubernetes/kubernetes/pull/97431), [@kishorj](https://github.com/kishorj))
-- Aborting the drain command in a list of nodes will be deprecated. The new behavior will make the drain command go through all nodes even if one or more nodes failed during the drain. For now, users can try such experience by enabling --ignore-errors flag. ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan))
-- Add --permit-address-sharing flag to `kube-apiserver` to listen with `SO_REUSEADDR`. While allowing to listen on wildcard IPs like 0.0.0.0 and specific IPs in parallel, it avoids waiting for the kernel to release socket in `TIME_WAIT` state, and hence, considerably reducing `kube-apiserver` restart times under certain conditions. ([#93861](https://github.com/kubernetes/kubernetes/pull/93861), [@sttts](https://github.com/sttts))
-- Add `csi_operations_seconds` metric on kubelet that exposes CSI operations duration and status for node CSI operations. ([#98979](https://github.com/kubernetes/kubernetes/pull/98979), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Instrumentation and Storage]
-- Add `migrated` field into `storage_operation_duration_seconds` metric ([#99050](https://github.com/kubernetes/kubernetes/pull/99050), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Instrumentation and Storage]
-- Add flag --lease-reuse-duration-seconds for kube-apiserver to config etcd lease reuse duration. ([#97009](https://github.com/kubernetes/kubernetes/pull/97009), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery and Scalability]
-- Add metric etcd_lease_object_counts for kube-apiserver to observe max objects attached to a single etcd lease. ([#97480](https://github.com/kubernetes/kubernetes/pull/97480), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery, Instrumentation and Scalability]
-- Add support to generate client-side binaries for new darwin/arm64 platform ([#97743](https://github.com/kubernetes/kubernetes/pull/97743), [@dims](https://github.com/dims)) [SIG Release and Testing]
-- Added `ephemeral_volume_controller_create[_failures]_total` counters to kube-controller-manager metrics ([#99115](https://github.com/kubernetes/kubernetes/pull/99115), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Storage]
-- Added support for installing `arm64` node artifacts. ([#99242](https://github.com/kubernetes/kubernetes/pull/99242), [@liu-cong](https://github.com/liu-cong))
-- Adds alpha feature `VolumeCapacityPriority` which makes the scheduler prioritize nodes based on the best matching size of statically provisioned PVs across multiple topologies. ([#96347](https://github.com/kubernetes/kubernetes/pull/96347), [@cofyc](https://github.com/cofyc)) [SIG Apps, Network, Scheduling, Storage and Testing]
-- Adds the ability to pass --strict-transport-security-directives to the kube-apiserver to set the HSTS header appropriately.  Be sure you understand the consequences to browsers before setting this field. ([#96502](https://github.com/kubernetes/kubernetes/pull/96502), [@249043822](https://github.com/249043822)) [SIG Auth]
-- Adds two new metrics to cronjobs, a histogram to track the time difference when a job is created and the expected time when it should be created, as well as a gauge for the missed schedules of a cronjob ([#99341](https://github.com/kubernetes/kubernetes/pull/99341), [@alaypatel07](https://github.com/alaypatel07))
-- Alpha implementation of Kubectl Command Headers: SIG CLI KEP 859 enabled when KUBECTL_COMMAND_HEADERS environment variable set on the client command line. ([#98952](https://github.com/kubernetes/kubernetes/pull/98952), [@seans3](https://github.com/seans3))
-- Base-images: Update to debian-iptables:buster-v1.4.0
-  - Uses iptables 1.8.5
-  - base-images: Update to debian-base:buster-v1.3.0
-  - cluster/images/etcd: Build etcd:3.4.13-2 image
-    - Uses debian-base:buster-v1.3.0 ([#98401](https://github.com/kubernetes/kubernetes/pull/98401), [@pacoxu](https://github.com/pacoxu)) [SIG Testing]
-- CRIContainerLogRotation graduates to GA and unconditionally enabled. ([#99651](https://github.com/kubernetes/kubernetes/pull/99651), [@umohnani8](https://github.com/umohnani8))
-- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99385](https://github.com/kubernetes/kubernetes/pull/99385), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Release]
-- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99738](https://github.com/kubernetes/kubernetes/pull/99738), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- EmptyDir memory backed volumes are sized as the the minimum of pod allocatable memory on a host and an optional explicit user provided value. ([#100319](https://github.com/kubernetes/kubernetes/pull/100319), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
-- Enables Kubelet to check volume condition and log events to corresponding pods. ([#99284](https://github.com/kubernetes/kubernetes/pull/99284), [@fengzixu](https://github.com/fengzixu)) [SIG Apps, Instrumentation, Node and Storage]
-- EndpointSliceNodeName graduates to GA and thus will be unconditionally enabled -- NodeName will always be available in the v1beta1 API. ([#99746](https://github.com/kubernetes/kubernetes/pull/99746), [@swetharepakula](https://github.com/swetharepakula))
-- Export `NewDebuggingRoundTripper` function and `DebugLevel` options in the k8s.io/client-go/transport package. ([#98324](https://github.com/kubernetes/kubernetes/pull/98324), [@atosatto](https://github.com/atosatto))
-- Kube-proxy iptables: new metric sync_proxy_rules_iptables_total that exposes the number of rules programmed per table in each iteration ([#99653](https://github.com/kubernetes/kubernetes/pull/99653), [@aojea](https://github.com/aojea)) [SIG Instrumentation and Network]
-- Kube-scheduler now logs plugin scoring summaries at --v=4 ([#99411](https://github.com/kubernetes/kubernetes/pull/99411), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Kubeadm now includes CoreDNS v1.8.0. ([#96429](https://github.com/kubernetes/kubernetes/pull/96429), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
-- Kubeadm: IPv6DualStack feature gate graduates to Beta and enabled by default ([#99294](https://github.com/kubernetes/kubernetes/pull/99294), [@pacoxu](https://github.com/pacoxu))
-- Kubeadm: a warning to user as ipv6 site-local is deprecated ([#99574](https://github.com/kubernetes/kubernetes/pull/99574), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle and Network]
-- Kubeadm: add support for certificate chain validation. When using kubeadm in external CA mode, this allows an intermediate CA to be used to sign the certificates. The intermediate CA certificate must be appended to each signed certificate for this to work correctly. ([#97266](https://github.com/kubernetes/kubernetes/pull/97266), [@robbiemcmichael](https://github.com/robbiemcmichael)) [SIG Cluster Lifecycle]
-- Kubeadm: amend the node kernel validation to treat CGROUP_PIDS, FAIR_GROUP_SCHED as required and CFS_BANDWIDTH, CGROUP_HUGETLB as optional ([#96378](https://github.com/kubernetes/kubernetes/pull/96378), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
-- Kubeadm: apply the "node.kubernetes.io/exclude-from-external-load-balancers" label on control plane nodes during "init", "join" and "upgrade" to preserve backwards compatibility with the lagacy LB mode where nodes labeled as "master" where excluded. To opt-out you can remove the label from a node. See #97543 and the linked KEP for more details. ([#98269](https://github.com/kubernetes/kubernetes/pull/98269), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: if the user has customized their image repository via the kubeadm configuration, pass the custom pause image repository and tag to the kubelet via --pod-infra-container-image not only for Docker but for all container runtimes. This flag tells the kubelet that it should not garbage collect the image. ([#99476](https://github.com/kubernetes/kubernetes/pull/99476), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: perform pre-flight validation on host/node name upon `kubeadm init` and `kubeadm join`, showing warnings on non-compliant names ([#99194](https://github.com/kubernetes/kubernetes/pull/99194), [@pacoxu](https://github.com/pacoxu))
-- Kubectl version changed to write a warning message to stderr if the client and server version difference exceeds the supported version skew of +/-1 minor version. ([#98250](https://github.com/kubernetes/kubernetes/pull/98250), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Kubectl: Add `--use-protocol-buffers` flag to kubectl top pods and nodes. ([#96655](https://github.com/kubernetes/kubernetes/pull/96655), [@serathius](https://github.com/serathius))
-- Kubectl: `kubectl get` will omit managed fields by default now. Users could set `--show-managed-fields` to true to show managedFields when the output format is either `json` or `yaml`. ([#96878](https://github.com/kubernetes/kubernetes/pull/96878), [@knight42](https://github.com/knight42)) [SIG CLI and Testing]
-- Kubectl: a Pod can be preselected as default container using `kubectl.kubernetes.io/default-container` annotation ([#99833](https://github.com/kubernetes/kubernetes/pull/99833), [@mengjiao-liu](https://github.com/mengjiao-liu))
-- Kubectl: add bash-completion for comma separated list on `kubectl get` ([#98301](https://github.com/kubernetes/kubernetes/pull/98301), [@phil9909](https://github.com/phil9909))
-- Kubernetes is now built using go1.15.8 ([#98834](https://github.com/kubernetes/kubernetes/pull/98834), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Release and Testing]
-- Kubernetes is now built with Golang 1.16 ([#98572](https://github.com/kubernetes/kubernetes/pull/98572), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
-- Kubernetes is now built with Golang 1.16.1 ([#100106](https://github.com/kubernetes/kubernetes/pull/100106), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
-- Metrics can now be disabled explicitly via a command line flag (i.e. '--disabled-metrics=metric1,metric2') ([#99217](https://github.com/kubernetes/kubernetes/pull/99217), [@logicalhan](https://github.com/logicalhan))
-- New admission controller `DenyServiceExternalIPs` is available.  Clusters which do not *need* the Service `externalIPs` feature should enable this controller and be more secure. ([#97395](https://github.com/kubernetes/kubernetes/pull/97395), [@thockin](https://github.com/thockin))
-- Overall, enable the feature of `PreferNominatedNode` will  improve the performance of scheduling where preemption might frequently happen, but in theory, enable the feature of `PreferNominatedNode`, the pod might not be scheduled to the best candidate node in the cluster. ([#93179](https://github.com/kubernetes/kubernetes/pull/93179), [@chendave](https://github.com/chendave)) [SIG Scheduling and Testing]
-- Persistent Volumes formatted with the btrfs filesystem will now automatically resize when expanded. ([#99361](https://github.com/kubernetes/kubernetes/pull/99361), [@Novex](https://github.com/Novex)) [SIG Storage]
-- Port the devicemanager to Windows node to allow device plugins like directx ([#93285](https://github.com/kubernetes/kubernetes/pull/93285), [@aarnaud](https://github.com/aarnaud)) [SIG Node, Testing and Windows]
-- Removes cAdvisor JSON metrics (/stats/container, /stats/<podname>/<containername>, /stats/<namespace>/<podname>/<poduid>/<containername>) from the kubelet. ([#99236](https://github.com/kubernetes/kubernetes/pull/99236), [@pacoxu](https://github.com/pacoxu))
-- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
-- Sysctls graduates to General Availability and thus unconditionally enabled. ([#99158](https://github.com/kubernetes/kubernetes/pull/99158), [@wgahnagl](https://github.com/wgahnagl))
-- The Kubernetes pause image manifest list now contains an image for Windows Server 20H2. ([#97322](https://github.com/kubernetes/kubernetes/pull/97322), [@claudiubelu](https://github.com/claudiubelu)) [SIG Windows]
-- The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
-- The `CronJobControllerV2` feature flag graduates to Beta and set to be enabled by default. ([#98878](https://github.com/kubernetes/kubernetes/pull/98878), [@soltysh](https://github.com/soltysh))
-- The `EndpointSlice` mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
-  The well-known annotation `endpoints.kubernetes.io/last-change-trigger-time` is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea))
-- The `RunAsGroup` feature has been promoted to GA in this release. ([#94641](https://github.com/kubernetes/kubernetes/pull/94641), [@krmayankk](https://github.com/krmayankk)) [SIG Auth and Node]
-- The `ServiceAccountIssuerDiscovery` feature has graduated to GA, and is unconditionally enabled. The `ServiceAccountIssuerDiscovery` feature-gate will be removed in 1.22. ([#98553](https://github.com/kubernetes/kubernetes/pull/98553), [@mtaufen](https://github.com/mtaufen)) [SIG API Machinery, Auth and Testing]
-- The `TTLAfterFinished` feature flag is now beta and enabled by default ([#98678](https://github.com/kubernetes/kubernetes/pull/98678), [@ahg-g](https://github.com/ahg-g))
-- The apimachinery util/net function used to detect the bind address `ResolveBindAddress()` takes into consideration global IP addresses on loopback interfaces when 1) the host has default routes, or 2) there are no global IPs on those interfaces in order to support more complex network scenarios like BGP Unnumbered RFC 5549 ([#95790](https://github.com/kubernetes/kubernetes/pull/95790), [@aojea](https://github.com/aojea)) [SIG Network]
-- The feature gate `RootCAConfigMap` graduated to GA in v1.21 and therefore will be unconditionally enabled. This flag will be removed in v1.22 release. ([#98033](https://github.com/kubernetes/kubernetes/pull/98033), [@zshihang](https://github.com/zshihang))
-- The pause image upgraded to `v3.4.1` in kubelet and kubeadm for both Linux and Windows. ([#98205](https://github.com/kubernetes/kubernetes/pull/98205), [@pacoxu](https://github.com/pacoxu))
-- Update pause container to run as pseudo user and group `65535:65535`. This implies the release of version 3.5 of the container images. ([#97963](https://github.com/kubernetes/kubernetes/pull/97963), [@saschagrunert](https://github.com/saschagrunert)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Release, Security and Testing]
-- Update the latest validated version of Docker to 20.10 ([#98977](https://github.com/kubernetes/kubernetes/pull/98977), [@neolit123](https://github.com/neolit123)) [SIG CLI, Cluster Lifecycle and Node]
-- Upgrade node local dns to 1.17.0 for better IPv6 support ([#99749](https://github.com/kubernetes/kubernetes/pull/99749), [@pacoxu](https://github.com/pacoxu)) [SIG Cloud Provider and Network]
-- Upgrades `IPv6Dualstack` to `Beta` and turns it on by default. New clusters or existing clusters are not be affected until an actor starts adding secondary Pods and service CIDRS CLI flags as described here: [IPv4/IPv6 Dual-stack](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/563-dual-stack) ([#98969](https://github.com/kubernetes/kubernetes/pull/98969), [@khenidak](https://github.com/khenidak))
-- Users might specify the `kubectl.kubernetes.io/default-container` annotation in a Pod to preselect container for kubectl commands. ([#99581](https://github.com/kubernetes/kubernetes/pull/99581), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
-- When downscaling ReplicaSets, ready and creation timestamps are compared in a logarithmic scale. ([#99212](https://github.com/kubernetes/kubernetes/pull/99212), [@damemi](https://github.com/damemi)) [SIG Apps and Testing]
-- When the kubelet is watching a ConfigMap or Secret purely in the context of setting environment variables
-  for containers, only hold that watch for a defined duration before cancelling it. This change reduces the CPU
-  and memory usage of the kube-apiserver in large clusters. ([#99393](https://github.com/kubernetes/kubernetes/pull/99393), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery, Node and Testing]
-- WindowsEndpointSliceProxying feature gate has graduated to beta and is enabled by default. This means kube-proxy will  read from EndpointSlices instead of Endpoints on Windows by default. ([#99794](https://github.com/kubernetes/kubernetes/pull/99794), [@robscott](https://github.com/robscott)) [SIG Network]
-- `kubectl wait` ensures that observedGeneration >= generation to prevent stale state reporting. An example scenario can be found on CRD updates. ([#97408](https://github.com/kubernetes/kubernetes/pull/97408), [@KnicKnic](https://github.com/KnicKnic))
-
-### Documentation
-
-- Azure file migration graduates to beta, with CSIMigrationAzureFile flag off by default
-  as it requires installation of AzureFile CSI Driver. Users should enable CSIMigration and
-  CSIMigrationAzureFile features and install the [AzureFile CSI Driver](https://github.com/kubernetes-sigs/azurefile-csi-driver)
-  to avoid disruption to existing Pod and PVC objects at that time. Azure File CSI driver does not support using same persistent
-  volume with different fsgroups. When CSI migration is enabled for azurefile driver, such case is not supported.
-  (there is a case we support where volume is mounted with 0777 and then it readable/writable by everyone) ([#96293](https://github.com/kubernetes/kubernetes/pull/96293), [@andyzhangx](https://github.com/andyzhangx))
-- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
-- Set kubelet option `--volume-stats-agg-period` to negative value to disable volume calculations. ([#96675](https://github.com/kubernetes/kubernetes/pull/96675), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
-
-### Failing Test
-
-- Escape the special characters like `[`, `]` and ` ` that exist in vsphere windows path ([#98830](https://github.com/kubernetes/kubernetes/pull/98830), [@liyanhui1228](https://github.com/liyanhui1228)) [SIG Storage and Windows]
-- Kube-proxy: fix a bug on UDP `NodePort` Services where stale connection tracking entries may blackhole the traffic directed to the `NodePort` ([#98305](https://github.com/kubernetes/kubernetes/pull/98305), [@aojea](https://github.com/aojea))
-- Kubelet: fixes a bug in the HostPort dockershim implementation that caused the conformance test "HostPort validates that there is no conflict between pods with same hostPort but different hostIP and protocol" to fail. ([#98755](https://github.com/kubernetes/kubernetes/pull/98755), [@aojea](https://github.com/aojea)) [SIG Cloud Provider, Network and Node]
-
-### Bug or Regression
-
-- AcceleratorStats will be available in the Summary API of kubelet when cri_stats_provider is used. ([#96873](https://github.com/kubernetes/kubernetes/pull/96873), [@ruiwen-zhao](https://github.com/ruiwen-zhao)) [SIG Node]
-- All data is no longer automatically deleted when a failure is detected during creation of the volume data file on a CSI volume. Now only the data file and volume path is removed. ([#96021](https://github.com/kubernetes/kubernetes/pull/96021), [@huffmanca](https://github.com/huffmanca))
-- Clean ReplicaSet by revision instead of creation timestamp in deployment controller ([#97407](https://github.com/kubernetes/kubernetes/pull/97407), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
-- Cleanup subnet in frontend IP configs to prevent huge subnet request bodies in some scenarios. ([#98133](https://github.com/kubernetes/kubernetes/pull/98133), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Client-go exec credential plugins will pass stdin only when interactive terminal is detected on stdin. This fixes a bug where previously it was checking if **stdout** is an interactive terminal. ([#99654](https://github.com/kubernetes/kubernetes/pull/99654), [@ankeesler](https://github.com/ankeesler))
-- Cloud-controller-manager: routes controller should not depend on --allocate-node-cidrs ([#97029](https://github.com/kubernetes/kubernetes/pull/97029), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider and Testing]
-- Cluster Autoscaler version bump to v1.20.0 ([#97011](https://github.com/kubernetes/kubernetes/pull/97011), [@towca](https://github.com/towca))
-- Creating a PVC with DataSource should fail for non-CSI plugins. ([#97086](https://github.com/kubernetes/kubernetes/pull/97086), [@xing-yang](https://github.com/xing-yang)) [SIG Apps and Storage]
-- EndpointSlice controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99345](https://github.com/kubernetes/kubernetes/pull/99345), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- EndpointSlice controllers are less likely to create duplicate EndpointSlices. ([#100103](https://github.com/kubernetes/kubernetes/pull/100103), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- EndpointSliceMirroring controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99756](https://github.com/kubernetes/kubernetes/pull/99756), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Ensure all vSphere nodes are are tracked by volume attach-detach controller ([#96689](https://github.com/kubernetes/kubernetes/pull/96689), [@gnufied](https://github.com/gnufied))
-- Ensure empty string annotations are copied over in rollbacks. ([#94858](https://github.com/kubernetes/kubernetes/pull/94858), [@waynepeking348](https://github.com/waynepeking348))
-- Ensure only one LoadBalancer rule is created when HA mode is enabled ([#99825](https://github.com/kubernetes/kubernetes/pull/99825), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Ensure that client-go's EventBroadcaster is safe (non-racy) during shutdown. ([#95664](https://github.com/kubernetes/kubernetes/pull/95664), [@DirectXMan12](https://github.com/DirectXMan12)) [SIG API Machinery]
-- Explicitly pass `KUBE_BUILD_CONFORMANCE=y` in `package-tarballs` to reenable building the conformance tarballs. ([#100571](https://github.com/kubernetes/kubernetes/pull/100571), [@puerco](https://github.com/puerco))
-- Fix Azure file migration e2e test failure when CSIMigration is turned on. ([#97877](https://github.com/kubernetes/kubernetes/pull/97877), [@andyzhangx](https://github.com/andyzhangx))
-- Fix CSI-migrated inline EBS volumes failing to mount if their volumeID is prefixed by aws:// ([#96821](https://github.com/kubernetes/kubernetes/pull/96821), [@wongma7](https://github.com/wongma7)) [SIG Storage]
-- Fix CVE-2020-8555 for Gluster client connections. ([#97922](https://github.com/kubernetes/kubernetes/pull/97922), [@liggitt](https://github.com/liggitt)) [SIG Storage]
-- Fix NPE in ephemeral storage eviction ([#98261](https://github.com/kubernetes/kubernetes/pull/98261), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Fix PermissionDenied issue on SMB mount for Windows ([#99550](https://github.com/kubernetes/kubernetes/pull/99550), [@andyzhangx](https://github.com/andyzhangx))
-- Fix bug that would let the Horizontal Pod Autoscaler scale down despite at least one metric being unavailable/invalid ([#99514](https://github.com/kubernetes/kubernetes/pull/99514), [@mikkeloscar](https://github.com/mikkeloscar)) [SIG Apps and Autoscaling]
-- Fix cgroup handling for systemd with cgroup v2 ([#98365](https://github.com/kubernetes/kubernetes/pull/98365), [@odinuge](https://github.com/odinuge)) [SIG Node]
-- Fix counting error in service/nodeport/loadbalancer quota check ([#97451](https://github.com/kubernetes/kubernetes/pull/97451), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Network and Testing]
-- Fix errors when accessing Windows container stats for Dockershim ([#98510](https://github.com/kubernetes/kubernetes/pull/98510), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node and Windows]
-- Fix kube-proxy container image architecture for non amd64 images. ([#98526](https://github.com/kubernetes/kubernetes/pull/98526), [@saschagrunert](https://github.com/saschagrunert))
-- Fix missing cadvisor machine metrics. ([#97006](https://github.com/kubernetes/kubernetes/pull/97006), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node]
-- Fix nil VMSS name when setting service to auto mode ([#97366](https://github.com/kubernetes/kubernetes/pull/97366), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix privileged config of Pod Sandbox which was previously ignored. ([#96877](https://github.com/kubernetes/kubernetes/pull/96877), [@xeniumlee](https://github.com/xeniumlee))
-- Fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable ([#95269](https://github.com/kubernetes/kubernetes/pull/95269), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
-- Fix the regression with the slow pods termination. Before this fix pods may take an additional time to terminate - up to one minute. Reversing the change that ensured that CNI resources cleaned up when the pod is removed on API server. ([#97980](https://github.com/kubernetes/kubernetes/pull/97980), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Node]
-- Fix to recover CSI volumes from certain dangling attachments ([#96617](https://github.com/kubernetes/kubernetes/pull/96617), [@yuga711](https://github.com/yuga711)) [SIG Apps and Storage]
-- Fix: azure file latency issue for metadata-heavy workloads ([#97082](https://github.com/kubernetes/kubernetes/pull/97082), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fixed Cinder volume IDs on OpenStack Train ([#96673](https://github.com/kubernetes/kubernetes/pull/96673), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider]
-- Fixed FibreChannel volume plugin corrupting filesystems on detach of multipath volumes. ([#97013](https://github.com/kubernetes/kubernetes/pull/97013), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Fixed a bug in kubelet that will saturate CPU utilization after containerd got restarted. ([#97174](https://github.com/kubernetes/kubernetes/pull/97174), [@hanlins](https://github.com/hanlins)) [SIG Node]
-- Fixed a bug that causes smaller number of conntrack-max being used under CPU static policy. (#99225, @xh4n3) ([#99613](https://github.com/kubernetes/kubernetes/pull/99613), [@xh4n3](https://github.com/xh4n3)) [SIG Network]
-- Fixed a bug that on k8s nodes, when the policy of INPUT chain in filter table is not ACCEPT, healthcheck nodeport would not work.
-  Added iptables rules to allow healthcheck nodeport traffic. ([#97824](https://github.com/kubernetes/kubernetes/pull/97824), [@hanlins](https://github.com/hanlins)) [SIG Network]
-- Fixed a bug that the kubelet cannot start on BtrfS. ([#98042](https://github.com/kubernetes/kubernetes/pull/98042), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
-- Fixed a race condition on API server startup ensuring previously created webhook configurations are effective before the first write request is admitted. ([#95783](https://github.com/kubernetes/kubernetes/pull/95783), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Fixed an issue with garbage collection failing to clean up namespaced children of an object also referenced incorrectly by cluster-scoped children ([#98068](https://github.com/kubernetes/kubernetes/pull/98068), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
-- Fixed authentication_duration_seconds metric scope. Previously, it included whole apiserver request duration which yields inaccurate results. ([#99944](https://github.com/kubernetes/kubernetes/pull/99944), [@marseel](https://github.com/marseel))
-- Fixed bug in CPUManager with race on container map access ([#97427](https://github.com/kubernetes/kubernetes/pull/97427), [@klueska](https://github.com/klueska)) [SIG Node]
-- Fixed bug that caused cAdvisor to incorrectly detect single-socket multi-NUMA topology. ([#99315](https://github.com/kubernetes/kubernetes/pull/99315), [@iwankgb](https://github.com/iwankgb)) [SIG Node]
-- Fixed cleanup of block devices when /var/lib/kubelet is a symlink. ([#96889](https://github.com/kubernetes/kubernetes/pull/96889), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Fixed no effect namespace when exposing deployment with --dry-run=client. ([#97492](https://github.com/kubernetes/kubernetes/pull/97492), [@masap](https://github.com/masap)) [SIG CLI]
-- Fixed provisioning of Cinder volumes migrated to CSI when StorageClass with AllowedTopologies was used. ([#98311](https://github.com/kubernetes/kubernetes/pull/98311), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Fixes a bug of identifying the correct containerd process. ([#97888](https://github.com/kubernetes/kubernetes/pull/97888), [@pacoxu](https://github.com/pacoxu))
-- Fixes add-on manager leader election to use leases instead of endpoints, similar to what kube-controller-manager does in 1.20 ([#98968](https://github.com/kubernetes/kubernetes/pull/98968), [@liggitt](https://github.com/liggitt))
-- Fixes connection errors when using `--volume-host-cidr-denylist` or `--volume-host-allow-local-loopback` ([#98436](https://github.com/kubernetes/kubernetes/pull/98436), [@liggitt](https://github.com/liggitt)) [SIG Network and Storage]
-- Fixes problem where invalid selector on `PodDisruptionBudget` leads to a nil pointer dereference that causes the Controller manager to crash loop. ([#98750](https://github.com/kubernetes/kubernetes/pull/98750), [@mortent](https://github.com/mortent))
-- Fixes spurious errors about IPv6 in `kube-proxy` logs on nodes with IPv6 disabled. ([#99127](https://github.com/kubernetes/kubernetes/pull/99127), [@danwinship](https://github.com/danwinship))
-- Fixing a bug where a failed node may not have the NoExecute taint set correctly ([#96876](https://github.com/kubernetes/kubernetes/pull/96876), [@howieyuen](https://github.com/howieyuen)) [SIG Apps and Node]
-- GCE Internal LoadBalancer sync loop will now release the ILB IP address upon sync failure. An error in ILB forwarding rule creation will no longer leak IP addresses. ([#97740](https://github.com/kubernetes/kubernetes/pull/97740), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider and Network]
-- Ignore update pod with no new images in alwaysPullImages admission controller ([#96668](https://github.com/kubernetes/kubernetes/pull/96668), [@pacoxu](https://github.com/pacoxu)) [SIG Apps, Auth and Node]
-- Improve speed of vSphere PV provisioning and reduce number of API calls ([#100054](https://github.com/kubernetes/kubernetes/pull/100054), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- KUBECTL_EXTERNAL_DIFF now accepts equal sign for additional parameters. ([#98158](https://github.com/kubernetes/kubernetes/pull/98158), [@dougsland](https://github.com/dougsland)) [SIG CLI]
-- Kube-apiserver: an update of a pod with a generic ephemeral volume dropped that volume if the feature had been disabled since creating the pod with such a volume ([#99446](https://github.com/kubernetes/kubernetes/pull/99446), [@pohly](https://github.com/pohly)) [SIG Apps, Node and Storage]
-- Kube-proxy: remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
-- Kubeadm installs etcd v3.4.13 when creating cluster v1.19 ([#97244](https://github.com/kubernetes/kubernetes/pull/97244), [@pacoxu](https://github.com/pacoxu))
-- Kubeadm: Fixes a kubeadm upgrade bug that could cause a custom CoreDNS configuration to be replaced with the default. ([#97016](https://github.com/kubernetes/kubernetes/pull/97016), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
-- Kubeadm: Some text in the `kubeadm upgrade plan` output has changed. If you have scripts or other automation that parses this output, please review these changes and update your scripts to account for the new output. ([#98728](https://github.com/kubernetes/kubernetes/pull/98728), [@stmcginnis](https://github.com/stmcginnis)) [SIG Cluster Lifecycle]
-- Kubeadm: fix a bug in the host memory detection code on 32bit Linux platforms ([#97403](https://github.com/kubernetes/kubernetes/pull/97403), [@abelbarrera15](https://github.com/abelbarrera15)) [SIG Cluster Lifecycle]
-- Kubeadm: fix a bug where "kubeadm join" would not properly handle missing names for existing etcd members. ([#97372](https://github.com/kubernetes/kubernetes/pull/97372), [@ihgann](https://github.com/ihgann)) [SIG Cluster Lifecycle]
-- Kubeadm: fix a bug where "kubeadm upgrade" commands can fail if CoreDNS v1.8.0 is installed. ([#97919](https://github.com/kubernetes/kubernetes/pull/97919), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: fix a bug where external credentials in an existing admin.conf prevented the CA certificate to be written in the cluster-info ConfigMap. ([#98882](https://github.com/kubernetes/kubernetes/pull/98882), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
-- Kubeadm: get k8s CI version markers from k8s infra bucket ([#98836](https://github.com/kubernetes/kubernetes/pull/98836), [@hasheddan](https://github.com/hasheddan)) [SIG Cluster Lifecycle and Release]
-- Kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false ([#98984](https://github.com/kubernetes/kubernetes/pull/98984), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubectl logs: `--ignore-errors` is now honored by all containers, maintaining consistency with parallelConsumeRequest behavior. ([#97686](https://github.com/kubernetes/kubernetes/pull/97686), [@wzshiming](https://github.com/wzshiming))
-- Kubectl-convert: Fix `no kind "Ingress" is registered for version` error ([#97754](https://github.com/kubernetes/kubernetes/pull/97754), [@wzshiming](https://github.com/wzshiming))
-- Kubectl: Fixed panic when describing an ingress backend without an API Group ([#100505](https://github.com/kubernetes/kubernetes/pull/100505), [@lauchokyip](https://github.com/lauchokyip)) [SIG CLI]
-- Kubelet now cleans up orphaned volume directories automatically ([#95301](https://github.com/kubernetes/kubernetes/pull/95301), [@lorenz](https://github.com/lorenz)) [SIG Node and Storage]
-- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]
-- Kubelet: Fix kubelet from panic after getting the wrong signal ([#98200](https://github.com/kubernetes/kubernetes/pull/98200), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Kubelet: Fix repeatedly acquiring the inhibit lock ([#98088](https://github.com/kubernetes/kubernetes/pull/98088), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Kubelet: Fixed the bug of getting the number of cpu when the number of cpu logical processors is more than 64 in windows ([#97378](https://github.com/kubernetes/kubernetes/pull/97378), [@hwdef](https://github.com/hwdef)) [SIG Node and Windows]
-- Limits lease to have 1000 maximum attached objects. ([#98257](https://github.com/kubernetes/kubernetes/pull/98257), [@lingsamuel](https://github.com/lingsamuel))
-- Mitigate CVE-2020-8555 for kube-up using GCE by preventing local loopback folume hosts. ([#97934](https://github.com/kubernetes/kubernetes/pull/97934), [@mattcary](https://github.com/mattcary)) [SIG Cloud Provider and Storage]
-- On single-stack configured (IPv4 or IPv6, but not both) clusters, Services which are both headless (no clusterIP) and selectorless (empty or undefined selector) will report `ipFamilyPolicy RequireDualStack` and will have entries in `ipFamilies[]` for both IPv4 and IPv6.  This is a change from alpha, but does not have any impact on the manually-specified Endpoints and EndpointSlices for the Service. ([#99555](https://github.com/kubernetes/kubernetes/pull/99555), [@thockin](https://github.com/thockin)) [SIG Apps and Network]
-- Performance regression #97685 has been fixed. ([#97860](https://github.com/kubernetes/kubernetes/pull/97860), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
-- Pod Log stats for windows now reports metrics ([#99221](https://github.com/kubernetes/kubernetes/pull/99221), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node, Storage, Testing and Windows]
-- Pod status updates faster when reacting on probe results. The first readiness probe will be called faster when startup probes succeeded, which will make Pod status as ready faster. ([#98376](https://github.com/kubernetes/kubernetes/pull/98376), [@matthyx](https://github.com/matthyx))
-- Readjust `kubelet_containers_per_pod_count` buckets to only show metrics greater than 1. ([#98169](https://github.com/kubernetes/kubernetes/pull/98169), [@wawa0210](https://github.com/wawa0210))
-- Remove CSI topology from migrated in-tree gcepd volume. ([#97823](https://github.com/kubernetes/kubernetes/pull/97823), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider and Storage]
-- Requests with invalid timeout parameters in the request URL now appear in the audit log correctly. ([#96901](https://github.com/kubernetes/kubernetes/pull/96901), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]
-- Resolve a "concurrent map read and map write" crashing error in the kubelet ([#95111](https://github.com/kubernetes/kubernetes/pull/95111), [@choury](https://github.com/choury)) [SIG Node]
-- Resolves spurious `Failed to list *v1.Secret` or `Failed to list *v1.ConfigMap` messages in kubelet logs. ([#99538](https://github.com/kubernetes/kubernetes/pull/99538), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
-- ResourceQuota of an entity now inclusively calculate Pod overhead ([#99600](https://github.com/kubernetes/kubernetes/pull/99600), [@gjkim42](https://github.com/gjkim42))
-- Return zero time (midnight on Jan. 1, 1970) instead of negative number when reporting startedAt and finishedAt of the not started or a running Pod when using `dockershim` as a runtime. ([#99585](https://github.com/kubernetes/kubernetes/pull/99585), [@Iceber](https://github.com/Iceber))
-- Reverts breaking change to inline AzureFile volumes; referenced secrets are now searched for in the same namespace as the pod as in previous releases. ([#100563](https://github.com/kubernetes/kubernetes/pull/100563), [@msau42](https://github.com/msau42))
-- Scores from InterPodAffinity have stronger differentiation. ([#98096](https://github.com/kubernetes/kubernetes/pull/98096), [@leileiwan](https://github.com/leileiwan)) [SIG Scheduling]
-- Specifying the KUBE_TEST_REPO environment variable when e2e tests are executed will instruct the test infrastructure to load that image from a location within the specified repo, using a predefined pattern. ([#93510](https://github.com/kubernetes/kubernetes/pull/93510), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
-- Static pods will be deleted gracefully. ([#98103](https://github.com/kubernetes/kubernetes/pull/98103), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
-- Sync node status during kubelet node shutdown.
-  Adds an pod admission handler that rejects new pods when the node is in progress of shutting down. ([#98005](https://github.com/kubernetes/kubernetes/pull/98005), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- The calculation of pod UIDs for static pods has changed to ensure each static pod gets a unique value - this will cause all static pod containers to be recreated/restarted if an in-place kubelet upgrade from 1.20 to 1.21 is performed. Note that draining pods before upgrading the kubelet across minor versions is the supported upgrade path. ([#87461](https://github.com/kubernetes/kubernetes/pull/87461), [@bboreham](https://github.com/bboreham)) [SIG Node]
-- The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 ([#99795](https://github.com/kubernetes/kubernetes/pull/99795), [@robscott](https://github.com/robscott)) [SIG Network]
-- Truncates a message if it hits the `NoteLengthLimit` when the scheduler records an event for the pod that indicates the pod has failed to schedule. ([#98715](https://github.com/kubernetes/kubernetes/pull/98715), [@carlory](https://github.com/carlory))
-- Updated k8s.gcr.io/ingress-gce-404-server-with-metrics-amd64 to a version that serves /metrics endpoint on a non-default port. ([#97621](https://github.com/kubernetes/kubernetes/pull/97621), [@vbannai](https://github.com/vbannai)) [SIG Cloud Provider]
-- Updates the commands `
-   - kubectl kustomize {arg}
-   - kubectl apply -k {arg}
-  `to use same code as kustomize CLI [v4.0.5](https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.0.5) ([#98946](https://github.com/kubernetes/kubernetes/pull/98946), [@monopole](https://github.com/monopole))
-- Use force unmount for NFS volumes if regular mount fails after 1 minute timeout ([#96844](https://github.com/kubernetes/kubernetes/pull/96844), [@gnufied](https://github.com/gnufied)) [SIG Storage]
-- Use network.Interface.VirtualMachine.ID to get the binded VM
-  Skip standalone VM when reconciling LoadBalancer ([#97635](https://github.com/kubernetes/kubernetes/pull/97635), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Using exec auth plugins with kubectl no longer results in warnings about constructing many client instances from the same exec auth config. ([#97857](https://github.com/kubernetes/kubernetes/pull/97857), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Auth]
-- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
-  "primary IP family" of the cluster by picking a primary pod IP of the same family
-  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
-  in the order the administrator wanted (since some CNI plugins don't allow
-  configuring this). ([#97979](https://github.com/kubernetes/kubernetes/pull/97979), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- When dynamically provisioning Azure File volumes for a premium account, the requested size will be set to 100GB if the request is initially lower than this value to accommodate Azure File requirements. ([#99122](https://github.com/kubernetes/kubernetes/pull/99122), [@huffmanca](https://github.com/huffmanca)) [SIG Cloud Provider and Storage]
-- When using `Containerd` on Windows, the `C:\Windows\System32\drivers\etc\hosts` file will now be managed by kubelet. ([#83730](https://github.com/kubernetes/kubernetes/pull/83730), [@claudiubelu](https://github.com/claudiubelu))
-- `VolumeBindingArgs` now allow `BindTimeoutSeconds` to be set as zero, while the value zero indicates no waiting for the checking of volume binding operation. ([#99835](https://github.com/kubernetes/kubernetes/pull/99835), [@chendave](https://github.com/chendave)) [SIG Scheduling and Storage]
-- `kubectl exec` and `kubectl attach` now honor the `--quiet` flag which suppresses output from the local binary that could be confused by a script with the remote command output (all non-failure output is hidden). In addition, print inline with exec and attach the list of alternate containers when we default to the first spec.container. ([#99004](https://github.com/kubernetes/kubernetes/pull/99004), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
-
-### Other (Cleanup or Flake)
-
-- APIs for kubelet annotations and labels from `k8s.io/kubernetes/pkg/kubelet/apis` are now moved under `k8s.io/kubelet/pkg/apis/` ([#98931](https://github.com/kubernetes/kubernetes/pull/98931), [@michaelbeaumont](https://github.com/michaelbeaumont))
-- Apiserver_request_duration_seconds is promoted to stable status. ([#99925](https://github.com/kubernetes/kubernetes/pull/99925), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
-- Bump github.com/Azure/go-autorest/autorest to v0.11.12 ([#97033](https://github.com/kubernetes/kubernetes/pull/97033), [@patrickshan](https://github.com/patrickshan)) [SIG API Machinery, CLI, Cloud Provider and Cluster Lifecycle]
-- Clients required to use go1.15.8+ or go1.16+ if kube-apiserver has the goaway feature enabled to avoid unexpected data race condition. ([#98809](https://github.com/kubernetes/kubernetes/pull/98809), [@answer1991](https://github.com/answer1991))
-- Delete deprecated `service.beta.kubernetes.io/azure-load-balancer-mixed-protocols` mixed procotol annotation in favor of the MixedProtocolLBService feature ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- EndpointSlice generation is now incremented when labels change. ([#99750](https://github.com/kubernetes/kubernetes/pull/99750), [@robscott](https://github.com/robscott)) [SIG Network]
-- Featuregate AllowInsecureBackendProxy graduates to GA and unconditionally enabled. ([#99658](https://github.com/kubernetes/kubernetes/pull/99658), [@deads2k](https://github.com/deads2k))
-- Increase timeout for pod lifecycle test to reach pod status=ready ([#96691](https://github.com/kubernetes/kubernetes/pull/96691), [@hh](https://github.com/hh))
-- Increased `CSINodeIDMaxLength` from 128 bytes to 192 bytes. ([#98753](https://github.com/kubernetes/kubernetes/pull/98753), [@Jiawei0227](https://github.com/Jiawei0227))
-- Kube-apiserver: The OIDC authenticator no longer waits 10 seconds before attempting to fetch the metadata required to verify tokens. ([#97693](https://github.com/kubernetes/kubernetes/pull/97693), [@enj](https://github.com/enj)) [SIG API Machinery and Auth]
-- Kube-proxy: Traffic from the cluster directed to ExternalIPs is always sent directly to the Service. ([#96296](https://github.com/kubernetes/kubernetes/pull/96296), [@aojea](https://github.com/aojea)) [SIG Network and Testing]
-- Kubeadm: change the default image repository for CI images from 'gcr.io/kubernetes-ci-images' to 'gcr.io/k8s-staging-ci-images' ([#97087](https://github.com/kubernetes/kubernetes/pull/97087), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubectl: The deprecated `kubectl alpha debug` command is removed. Use `kubectl debug` instead. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
-- Kubelet command line flags related to dockershim are now showing deprecation message as they will be removed along with dockershim in future release. ([#98730](https://github.com/kubernetes/kubernetes/pull/98730), [@dims](https://github.com/dims))
-- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97618](https://github.com/kubernetes/kubernetes/pull/97618), [@jherrera123](https://github.com/jherrera123)) [SIG Release and Testing]
-- Process start time on Windows now uses current process information ([#97491](https://github.com/kubernetes/kubernetes/pull/97491), [@jsturtevant](https://github.com/jsturtevant)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Windows]
-- Resolves flakes in the Ingress conformance tests due to conflicts with controllers updating the Ingress object ([#98430](https://github.com/kubernetes/kubernetes/pull/98430), [@liggitt](https://github.com/liggitt)) [SIG Network and Testing]
-- The `AttachVolumeLimit` feature gate (GA since v1.17) has been removed and now unconditionally enabled. ([#96539](https://github.com/kubernetes/kubernetes/pull/96539), [@ialidzhikov](https://github.com/ialidzhikov))
-- The `CSINodeInfo` feature gate that is GA since v1.17 is unconditionally enabled, and can no longer be specified via the `--feature-gates` argument. ([#96561](https://github.com/kubernetes/kubernetes/pull/96561), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps, Auth, Scheduling, Storage and Testing]
-- The `apiserver_request_total` metric is promoted to stable status and no longer has a content-type dimensions, so any alerts/charts which presume the existence of this will fail. This is however, unlikely to be the case since it was effectively an unbounded dimension in the first place. ([#99788](https://github.com/kubernetes/kubernetes/pull/99788), [@logicalhan](https://github.com/logicalhan))
-- The default delegating authorization options now allow unauthenticated access to healthz, readyz, and livez.  A system:masters user connecting to an authz delegator will not perform an authz check. ([#98325](https://github.com/kubernetes/kubernetes/pull/98325), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth, Cloud Provider and Scheduling]
-- The deprecated feature gates `CSIDriverRegistry`, `BlockVolume` and `CSIBlockVolume` are now unconditionally enabled and can no longer be specified in component invocations. ([#98021](https://github.com/kubernetes/kubernetes/pull/98021), [@gavinfish](https://github.com/gavinfish)) [SIG Storage]
-- The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavinfish](https://github.com/gavinfish)) [SIG Node, Scheduling and Storage]
-- The e2e suite can be instructed not to wait for pods in kube-system to be ready or for all nodes to be ready by passing `--allowed-not-ready-nodes=-1` when invoking the e2e.test program. This allows callers to run subsets of the e2e suite in scenarios other than perfectly healthy clusters. ([#98781](https://github.com/kubernetes/kubernetes/pull/98781), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
-- The feature gates `WindowsGMSA` and `WindowsRunAsUserName` that are GA since v1.18 are now removed. ([#96531](https://github.com/kubernetes/kubernetes/pull/96531), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Node and Windows]
-- The new `-gce-zones` flag on the `e2e.test` binary instructs tests that check for information about how the cluster interacts with the cloud to limit their queries to the provided zone list. If not specified, the current behavior of asking the cloud provider for all available zones in multi zone clusters is preserved. ([#98787](https://github.com/kubernetes/kubernetes/pull/98787), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Cluster Lifecycle and Testing]
-- Update cri-tools to [v1.20.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.20.0) ([#97967](https://github.com/kubernetes/kubernetes/pull/97967), [@rajibmitra](https://github.com/rajibmitra)) [SIG Cloud Provider]
-- Windows nodes on GCE will take longer to start due to dependencies installed at node creation time. ([#98284](https://github.com/kubernetes/kubernetes/pull/98284), [@pjh](https://github.com/pjh)) [SIG Cloud Provider]
-- `apiserver_storage_objects` (a newer version of `etcd_object_counts`) is promoted and marked as stable. ([#100082](https://github.com/kubernetes/kubernetes/pull/100082), [@logicalhan](https://github.com/logicalhan))
-
-### Uncategorized
-
-- GCE L4 Loadbalancers now handle > 5 ports in service spec correctly. ([#99595](https://github.com/kubernetes/kubernetes/pull/99595), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider]
-- The DownwardAPIHugePages feature is beta.  Users may use the feature if all workers in their cluster are min 1.20 version.  The feature will be enabled by default in all installations in 1.22. ([#99610](https://github.com/kubernetes/kubernetes/pull/99610), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
-
-## Dependencies
-
-### Added
-- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
-- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
-- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
-- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
-- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
-- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
-- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
-- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
-- go.starlark.net: 8dd3e2e
-- golang.org/x/term: 6a3ed07
-- sigs.k8s.io/kustomize/api: v0.8.5
-- sigs.k8s.io/kustomize/cmd/config: v0.9.7
-- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
-- sigs.k8s.io/kustomize/kyaml: v0.10.15
-
-### Changed
-- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
-- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
-- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
-- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
-- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
-- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
-- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
-- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
-- github.com/creack/pty: [v1.1.7 → v1.1.11](https://github.com/creack/pty/compare/v1.1.7...v1.1.11)
-- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
-- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
-- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
-- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
-- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
-- github.com/google/cadvisor: [v0.38.5 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.5...v0.39.0)
-- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
-- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
-- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
-- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
-- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
-- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
-- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
-- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
-- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
-- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
-- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
-- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
-- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
-- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
-- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
-- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
-- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
-- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
-- golang.org/x/crypto: 7f63de1 → 5ea612d
-- golang.org/x/exp: 6cc2880 → 85be41e
-- golang.org/x/mobile: d2bd2a2 → e6ae53a
-- golang.org/x/mod: v0.3.0 → ce943fd
-- golang.org/x/net: 69a7880 → 3d97a24
-- golang.org/x/sync: cd5d95a → 67f06af
-- golang.org/x/sys: 5cba982 → a50acf3
-- golang.org/x/time: 3af7569 → f8bda1e
-- golang.org/x/tools: c1934b7 → v0.1.0
-- gopkg.in/check.v1: 41f04d3 → 8fa4692
-- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
-- gotest.tools/v3: v3.0.2 → v3.0.3
-- k8s.io/gengo: 83324d8 → b6c5ce2
-- k8s.io/klog/v2: v2.4.0 → v2.8.0
-- k8s.io/kube-openapi: d219536 → 591a79e
-- k8s.io/system-validators: v1.2.0 → v1.4.0
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.1.0
-
-### Removed
-- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
-- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
-- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
-- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
-- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
-- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
-- sigs.k8s.io/kustomize: v2.0.3+incompatible
-
-
-
-# v1.21.0-rc.0
-
-
-## Downloads for v1.21.0-rc.0
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes.tar.gz) | ef53a41955d6f8a8d2a94636af98b55d633fb8a5081517559039e019b3dd65c9d10d4e7fa297ab88a7865d772f3eecf72e7b0eeba5e87accb4000c91da33e148
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-src.tar.gz) | 9335a01b50d351776d3b8d00c07a5233844c51d307e361fa7e55a0620c1cb8b699e43eacf45ae9cafd8cbc44752e6987450c528a5bede8204706b7673000b5fc
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-darwin-amd64.tar.gz) | 964135e43234cee275c452f5f06fb6d2bcd3cff3211a0d50fa35fff1cc4446bc5a0ac5125405dadcfb6596cb152afe29fabf7aad5b35b100e1288db890b70f8e
-[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-darwin-arm64.tar.gz) | 50d782abaa4ded5e706b3192d87effa953ceabbd7d91e3d48b0c1fa2206a1963a909c14b923560f5d09cac2c7392edc5f38a13fbf1e9a40bc94e3afe8de10622
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-386.tar.gz) | 72af5562f24184a2d7c27f95fa260470da979fbdcacce39a372f8f3add2991d7af8bc78f4e1dbe7a0f97e3f559b149b72a51491d3b13008da81872ee50f02f37
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-amd64.tar.gz) | 1eddb8f6b51e005bc6f7b519d036cbe3d2f6d97dbf7d212dd933fb56354c29f222d050519115a9bcf94555aef095db7cf763469e47bb4ae3c6c07f97edf437cb
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-arm.tar.gz) | 670f8ca60ea3cf0bb3262a772715e0ea735fccda6a92f3186299361dc455b304ae177d4017e0b67bbfa4a95e36f4cc3f7eb335e2a5130c93ac3fba2aff4519bf
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-arm64.tar.gz) | a69a47907cff138ba393d8c87044fd95d97f3ca8f35d301b50742e2801ad7c229d99d6667971091f65825eb51854d585be0dd7421670110b1aa567e67e7ab4b3
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-ppc64le.tar.gz) | b929feade94b71c81908abdcd4343b1e1e20098fd65e10d4d02585ad649d292d06f52c7ddc349efa188ce5b093e703c7aa9582c6ae5a69699adb87bbf5350243
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-linux-s390x.tar.gz) | 899d1470e412282cf289d8e24806d1a08c62ec0151f345ae3c9e497cc7bc0feab76498de4dd897d6adcdfa0c422e6b1a37e25d928669030f53457fd69d6e7df7
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-windows-386.tar.gz) | 9f0bc90a269eabd06fe4f637b5172a3a6a7d3de26de0d66504c2e1f2093083c584ea39031db6075a7da7a86b98c48bed25aa88d4ac09060b38692c6a5b637078
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-client-windows-amd64.tar.gz) | 05c8cc10188a1294b0d51d052942742a9b26411a08ec73494bf0e728a8a167e0a7863bdfc8864e76a371b584380098381805341e18b4b283b5d0cf298d5f7c7c
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-amd64.tar.gz) | 355f278728ef7ac7eb2f5568c99c1429543c6302bbd0ed3bd0378c08116075e56ae850a49241313f078e2392702672ec6c9b70c8d97b4f2f5f4bee36828a63ba
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-arm.tar.gz) | 9ac02c2825e2fd4e92f0c0f67180c67c24e32841ccbabc82284bf6293727ffecfae65e8a42b527c2a7ca482752384928eb65c2a1706144ae7819a6b3a1ab291c
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-arm64.tar.gz) | eb412453da03c82a9248412c8ccf4d4baa1fbfa81edd8d4f81d28969b40a3727e18934accc68f643d253446c58ffd2623292402495480b3d4b2a837b5318b957
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-ppc64le.tar.gz) | 07da2812c35bbc427ee5b4a0b601c3ae271e0d50ab0dd4c5c25399f43506fa2a187642eb9d4d2085df7b90264d48ea2f31088af87d9efa7eb2e87f91e1fdbde4
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-server-linux-s390x.tar.gz) | 3b79442a3d6e389c4ff105922a8e49994c0b6c088d2c501bd8c78d9f9e814902f5bb72c8f9c89380b750fda9b3a336759b9b68f11d70bef4f0e984564a95c29e
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-amd64.tar.gz) | f12edf1faf5f07de1ebc5a8626601c12927902e10aca3f11e398637382fdf55365dbd9a0ef38858553fb7569495ae2cf68f155dd2e49b85b27d76fb599bb92e4
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-arm.tar.gz) | 4fba8fc4e2102f07fb778aab597ec7231ea65c35e1aa618fe98b707b64a931237bd842c173e9120326e4d9deb983bb3917176762bba2212612bbc09d6e2105c4
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-arm64.tar.gz) | a2e1be5459a8346839970faf4e7ebdb8ab9f3273e02babf1f3199b06bdb67434a2d18fcd1628cf1b989756e99d8dad6624a455b9db11d50f51f509f4df5c27da
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-ppc64le.tar.gz) | 16d2c1cc295474fc49fe9a827ddd73e81bdd6b76af7074987b90250023f99b6d70bf474e204c7d556802111984fcb3a330740b150bdc7970d0e3634eb94a1665
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-linux-s390x.tar.gz) | 9dc6faa6cd007b13dfce703f3e271f80adcc4e029c90a4a9b4f2f143b9756f2893f8af3d7c2cf813f2bd6731cffd87d15d4229456c1685939f65bf467820ec6e
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-rc.0/kubernetes-node-windows-amd64.tar.gz) | f8bac2974c9142bfb80cd5eadeda79f79f27b78899a4e6e71809b795c708824ba442be83fdbadb98e01c3823dd8350776358258a205e851ed045572923cacba7
-
-## Changelog since v1.21.0-beta.1
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - Migrated pkg/kubelet/cm/cpuset/cpuset.go to structured logging. Exit code changed from 255 to 1. ([#100007](https://github.com/kubernetes/kubernetes/pull/100007), [@utsavoza](https://github.com/utsavoza)) [SIG Instrumentation and Node]
- 
-## Changes by Kind
-
-### API Change
-
-- Add Probe-level terminationGracePeriodSeconds field ([#99375](https://github.com/kubernetes/kubernetes/pull/99375), [@ehashman](https://github.com/ehashman)) [SIG API Machinery, Apps, Node and Testing]
-- CSIServiceAccountToken is Beta now ([#99298](https://github.com/kubernetes/kubernetes/pull/99298), [@zshihang](https://github.com/zshihang)) [SIG Auth, Storage and Testing]
-- Discovery.k8s.io/v1beta1 EndpointSlices are deprecated in favor of discovery.k8s.io/v1, and will no longer be served in Kubernetes v1.25. ([#100472](https://github.com/kubernetes/kubernetes/pull/100472), [@liggitt](https://github.com/liggitt)) [SIG Network]
-- FieldManager no longer owns fields that get reset before the object is persisted (e.g. "status wiping"). ([#99661](https://github.com/kubernetes/kubernetes/pull/99661), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Auth and Testing]
-- Generic ephemeral volumes are beta. ([#99643](https://github.com/kubernetes/kubernetes/pull/99643), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Node, Storage and Testing]
-- Implement the GetAvailableResources in the podresources API. ([#95734](https://github.com/kubernetes/kubernetes/pull/95734), [@fromanirh](https://github.com/fromanirh)) [SIG Instrumentation, Node and Testing]
-- The Endpoints controller will now set the `endpoints.kubernetes.io/over-capacity` annotation to "warning" when an Endpoints resource contains more than 1000 addresses. In a future release, the controller will truncate Endpoints that exceed this limit. The EndpointSlice API can be used to support significantly larger number of addresses. ([#99975](https://github.com/kubernetes/kubernetes/pull/99975), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- The PodDisruptionBudget API has been promoted to policy/v1 with no schema changes. The only functional change is that an empty selector (`{}`) written to a policy/v1 PodDisruptionBudget now selects all pods in the namespace. The behavior of the policy/v1beta1 API remains unchanged. The policy/v1beta1 PodDisruptionBudget API is deprecated and will no longer be served in 1.25+. ([#99290](https://github.com/kubernetes/kubernetes/pull/99290), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Scheduling and Testing]
-- Topology Aware Hints are now available in alpha and can be enabled with the `TopologyAwareHints` feature gate. ([#99522](https://github.com/kubernetes/kubernetes/pull/99522), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Instrumentation, Network and Testing]
-
-### Feature
-
-- Add e2e test to validate performance metrics of volume lifecycle operations ([#94334](https://github.com/kubernetes/kubernetes/pull/94334), [@RaunakShah](https://github.com/RaunakShah)) [SIG Storage and Testing]
-- EmptyDir memory backed volumes are sized as the the minimum of pod allocatable memory on a host and an optional explicit user provided value. ([#100319](https://github.com/kubernetes/kubernetes/pull/100319), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
-- Enables Kubelet to check volume condition and log events to corresponding pods. ([#99284](https://github.com/kubernetes/kubernetes/pull/99284), [@fengzixu](https://github.com/fengzixu)) [SIG Apps, Instrumentation, Node and Storage]
-- Introduce a churn operator to scheduler perf testing framework. ([#98900](https://github.com/kubernetes/kubernetes/pull/98900), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
-- Kubernetes is now built with Golang 1.16.1 ([#100106](https://github.com/kubernetes/kubernetes/pull/100106), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Instrumentation, Release and Testing]
-- Migrated pkg/kubelet/cm/devicemanager to structured logging ([#99976](https://github.com/kubernetes/kubernetes/pull/99976), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
-- Migrated pkg/kubelet/cm/memorymanager to structured logging ([#99974](https://github.com/kubernetes/kubernetes/pull/99974), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
-- Migrated pkg/kubelet/cm/topologymanager to structure logging ([#99969](https://github.com/kubernetes/kubernetes/pull/99969), [@knabben](https://github.com/knabben)) [SIG Instrumentation and Node]
-- Rename metrics `etcd_object_counts` to `apiserver_storage_object_counts` and mark it as stable. The original `etcd_object_counts` metrics name is marked as "Deprecated" and will be removed in the future. ([#99785](https://github.com/kubernetes/kubernetes/pull/99785), [@erain](https://github.com/erain)) [SIG API Machinery, Instrumentation and Testing]
-- Update pause container to run as pseudo user and group `65535:65535`. This implies the release of version 3.5 of the container images. ([#97963](https://github.com/kubernetes/kubernetes/pull/97963), [@saschagrunert](https://github.com/saschagrunert)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Release, Security and Testing]
-- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#99833](https://github.com/kubernetes/kubernetes/pull/99833), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
-
-### Bug or Regression
-
-- Add ability to skip OpenAPI handler installation to the GenericAPIServer ([#100341](https://github.com/kubernetes/kubernetes/pull/100341), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery]
-- Count pod overhead against an entity's ResourceQuota ([#99600](https://github.com/kubernetes/kubernetes/pull/99600), [@gjkim42](https://github.com/gjkim42)) [SIG API Machinery and Node]
-- EndpointSlice controllers are less likely to create duplicate EndpointSlices. ([#100103](https://github.com/kubernetes/kubernetes/pull/100103), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Ensure only one LoadBalancer rule is created when HA mode is enabled ([#99825](https://github.com/kubernetes/kubernetes/pull/99825), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fixed a race condition on API server startup ensuring previously created webhook configurations are effective before the first write request is admitted. ([#95783](https://github.com/kubernetes/kubernetes/pull/95783), [@roycaihw](https://github.com/roycaihw)) [SIG API Machinery]
-- Fixed authentication_duration_seconds metric. Previously it included whole apiserver request duration. ([#99944](https://github.com/kubernetes/kubernetes/pull/99944), [@marseel](https://github.com/marseel)) [SIG API Machinery, Instrumentation and Scalability]
-- Fixes issue where inline AzueFile secrets could not be accessed from the pod's namespace. ([#100563](https://github.com/kubernetes/kubernetes/pull/100563), [@msau42](https://github.com/msau42)) [SIG Storage]
-- Improve speed of vSphere PV provisioning and reduce number of API calls ([#100054](https://github.com/kubernetes/kubernetes/pull/100054), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Kubectl: Fixed panic when describing an ingress backend without an API Group ([#100505](https://github.com/kubernetes/kubernetes/pull/100505), [@lauchokyip](https://github.com/lauchokyip)) [SIG CLI]
-- Kubectl: fix case of age column in describe node (#96963, @bl-ue) ([#96963](https://github.com/kubernetes/kubernetes/pull/96963), [@bl-ue](https://github.com/bl-ue)) [SIG CLI]
-- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]
-- Kubelet: Fixed the bug of getting the number of cpu when the number of cpu logical processors is more than 64 in windows ([#97378](https://github.com/kubernetes/kubernetes/pull/97378), [@hwdef](https://github.com/hwdef)) [SIG Node and Windows]
-- Pass `KUBE_BUILD_CONFORMANCE=y` to the package-tarballs to reenable building the conformance tarballs. ([#100571](https://github.com/kubernetes/kubernetes/pull/100571), [@puerco](https://github.com/puerco)) [SIG Release]
-- Pod Log stats for windows now reports metrics ([#99221](https://github.com/kubernetes/kubernetes/pull/99221), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node, Storage, Testing and Windows]
-
-### Other (Cleanup or Flake)
-
-- A new storage E2E testsuite covers CSIStorageCapacity publishing if a driver opts into the test. ([#100537](https://github.com/kubernetes/kubernetes/pull/100537), [@pohly](https://github.com/pohly)) [SIG Storage and Testing]
-- Convert cmd/kubelet/app/server.go to structured logging ([#98334](https://github.com/kubernetes/kubernetes/pull/98334), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
-- If kube-apiserver enabled goaway feature, clients required golang 1.15.8 or 1.16+ version to avoid un-expected data race issue. ([#98809](https://github.com/kubernetes/kubernetes/pull/98809), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
-- Increased CSINodeIDMaxLength from 128  bytes to 192 bytes. ([#98753](https://github.com/kubernetes/kubernetes/pull/98753), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps and Storage]
-- Migrate  `pkg/kubelet/pluginmanager`  to structured logging ([#99885](https://github.com/kubernetes/kubernetes/pull/99885), [@qingwave](https://github.com/qingwave)) [SIG Node]
-- Migrate  `pkg/kubelet/preemption/preemption.go` and `pkg/kubelet/logs/container_log_manager.go` to structured logging ([#99848](https://github.com/kubernetes/kubernetes/pull/99848), [@qingwave](https://github.com/qingwave)) [SIG Node]
-- Migrate `pkg/kubelet/(cri)` to structured logging ([#99006](https://github.com/kubernetes/kubernetes/pull/99006), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
-- Migrate `pkg/kubelet/(node, pod)` to structured logging ([#98847](https://github.com/kubernetes/kubernetes/pull/98847), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
-- Migrate `pkg/kubelet/(volume,container)` to structured logging ([#98850](https://github.com/kubernetes/kubernetes/pull/98850), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
-- Migrate `pkg/kubelet/kubelet_node_status.go` to structured logging ([#98154](https://github.com/kubernetes/kubernetes/pull/98154), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node and Release]
-- Migrate `pkg/kubelet/lifecycle,oom` to structured logging ([#99479](https://github.com/kubernetes/kubernetes/pull/99479), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG Instrumentation and Node]
-- Migrate cmd/kubelet/+ pkg/kubelet/cadvisor/cadvisor_linux.go + pkg/kubelet/cri/remote/util/util_unix.go + pkg/kubelet/images/image_manager.go to structured logging ([#99994](https://github.com/kubernetes/kubernetes/pull/99994), [@AfrouzMashayekhi](https://github.com/AfrouzMashayekhi)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/cm/container_manager_linux.go and pkg/kubelet/cm/container_manager_stub.go to structured logging ([#100001](https://github.com/kubernetes/kubernetes/pull/100001), [@shiyajuan123](https://github.com/shiyajuan123)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/cm/cpumanage/{topology/togit pology.go, policy_none.go, cpu_assignment.go} to structured logging ([#100163](https://github.com/kubernetes/kubernetes/pull/100163), [@lala123912](https://github.com/lala123912)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/cm/cpumanager/state to structured logging ([#99563](https://github.com/kubernetes/kubernetes/pull/99563), [@jmguzik](https://github.com/jmguzik)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/config to structured logging ([#100002](https://github.com/kubernetes/kubernetes/pull/100002), [@AfrouzMashayekhi](https://github.com/AfrouzMashayekhi)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/kubelet.go to structured logging ([#99861](https://github.com/kubernetes/kubernetes/pull/99861), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/kubeletconfig to structured logging ([#100265](https://github.com/kubernetes/kubernetes/pull/100265), [@ehashman](https://github.com/ehashman)) [SIG Node]
-- Migrate pkg/kubelet/kuberuntime to structured logging ([#99970](https://github.com/kubernetes/kubernetes/pull/99970), [@krzysiekg](https://github.com/krzysiekg)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/prober to structured logging ([#99830](https://github.com/kubernetes/kubernetes/pull/99830), [@krzysiekg](https://github.com/krzysiekg)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/winstats to structured logging ([#99855](https://github.com/kubernetes/kubernetes/pull/99855), [@hexxdump](https://github.com/hexxdump)) [SIG Instrumentation and Node]
-- Migrate probe log messages to structured logging ([#97093](https://github.com/kubernetes/kubernetes/pull/97093), [@aldudko](https://github.com/aldudko)) [SIG Instrumentation and Node]
-- Migrate remaining kubelet files to structured logging ([#100196](https://github.com/kubernetes/kubernetes/pull/100196), [@ehashman](https://github.com/ehashman)) [SIG Instrumentation and Node]
-- `apiserver_storage_objects` (a newer version of `etcd_object_counts) is promoted and marked as stable. ([#100082](https://github.com/kubernetes/kubernetes/pull/100082), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-- github.com/cilium/ebpf: [1c8d4c9 → v0.2.0](https://github.com/cilium/ebpf/compare/1c8d4c9...v0.2.0)
-- github.com/containerd/console: [v1.0.0 → v1.0.1](https://github.com/containerd/console/compare/v1.0.0...v1.0.1)
-- github.com/containerd/containerd: [v1.4.1 → v1.4.4](https://github.com/containerd/containerd/compare/v1.4.1...v1.4.4)
-- github.com/creack/pty: [v1.1.9 → v1.1.11](https://github.com/creack/pty/compare/v1.1.9...v1.1.11)
-- github.com/docker/docker: [bd33bbf → v20.10.2+incompatible](https://github.com/docker/docker/compare/bd33bbf...v20.10.2)
-- github.com/google/cadvisor: [v0.38.8 → v0.39.0](https://github.com/google/cadvisor/compare/v0.38.8...v0.39.0)
-- github.com/konsorten/go-windows-terminal-sequences: [v1.0.3 → v1.0.2](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.3...v1.0.2)
-- github.com/moby/sys/mountinfo: [v0.1.3 → v0.4.0](https://github.com/moby/sys/mountinfo/compare/v0.1.3...v0.4.0)
-- github.com/moby/term: [672ec06 → df9cb8a](https://github.com/moby/term/compare/672ec06...df9cb8a)
-- github.com/mrunalp/fileutils: [abd8a0e → v0.5.0](https://github.com/mrunalp/fileutils/compare/abd8a0e...v0.5.0)
-- github.com/opencontainers/runc: [v1.0.0-rc92 → v1.0.0-rc93](https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93)
-- github.com/opencontainers/runtime-spec: [4d89ac9 → e6143ca](https://github.com/opencontainers/runtime-spec/compare/4d89ac9...e6143ca)
-- github.com/opencontainers/selinux: [v1.6.0 → v1.8.0](https://github.com/opencontainers/selinux/compare/v1.6.0...v1.8.0)
-- github.com/sirupsen/logrus: [v1.6.0 → v1.7.0](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)
-- github.com/syndtr/gocapability: [d983527 → 42c35b4](https://github.com/syndtr/gocapability/compare/d983527...42c35b4)
-- github.com/willf/bitset: [d5bec33 → v1.1.11](https://github.com/willf/bitset/compare/d5bec33...v1.1.11)
-- gotest.tools/v3: v3.0.2 → v3.0.3
-- k8s.io/klog/v2: v2.5.0 → v2.8.0
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.3 → v4.1.0
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.21.0-beta.1
-
-
-## Downloads for v1.21.0-beta.1
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes.tar.gz) | c9f4f25242e319e5d90f49d26f239a930aad69677c0f3c2387c56bb13482648a26ed234be2bfe2352508f35010e3eb6d3b127c31a9f24fa1e53ac99c38520fe4
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-src.tar.gz) | 255357db8fa160cab2187658906b674a8b0d9b9a5b5f688cc7b69dc124f5da00362c6cc18ae9b80f7ddb3da6f64c2ab2f12fb9b63a4e063c7366a5375b175cda
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | 02efd389c8126456416fd2c7ea25c3cc30f612649ad91f631f068d6c0e5e539484d3763cb9a8645ad6b8077e4fcd1552a659d7516ebc4ce6828cf823b65c3016
-[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-darwin-arm64.tar.gz) | ac90dcd1699d1d7ff9c8342d481f6d0d97ccdc3ec501a56dc7c9e1898a8f77f712bf66942d304bfe581b5494f13e3efa211865de88f89749780e9e26e673dbdb
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-386.tar.gz) | cce5fb84cc7a1ee664f89d8ad3064307c51c044e9ddd2ae5a004939b69d3b3ef6f29acc5782e27d0c8f0d6d3d9c96e922f5d1b99d210ca3e754666d775df9f0c
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | 2e93bbd2e60ad7cd8fe495115e96c55b1dc8facd100a827ef9c197a732679b60cceb9ea7bf92a1f5e328c3b8adfa8d3922cbc5d8370e374f3381b83f5b877b4f
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-arm.tar.gz) | 23f03b6a8fa9decce9b89a2c1bd3dae6d0b2f9e533e35a79e2c5a29326a165259677594ae83c877219a21bdb95557a284e55f4eec12954742794579c89a7d7e5
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | 3acf3101b46568b0ded6b90f13df0e918870d6812dc1a584903ddb8ba146484a204b9e442f863df47c7d4dab043fd9f7294c5510d3eb09004993d6d3b1e9e13c
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | f749198df69577f62872d3096138a1b8969ec6b1636eb68eb56640bf33cf5f97a11df4363462749a1c0dc3ccbb8ae76c5d66864bf1c5cf7e52599caaf498e504
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | 3f6c0189d59fca22cdded3a02c672ef703d17e6ab0831e173a870e14ccec436c142600e9fc35b403571b6906f2be8d18d38d33330f7caada971bbe1187b388f6
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-windows-386.tar.gz) | 03d92371c425cf331c80807c0ac56f953be304fc6719057258a363d527d186d610e1d4b4d401b34128062983265c2e21f2d2389231aa66a6f5787eee78142cf6
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | 489ece0c886a025ca3a25d28518637a5a824ea6544e7ef8778321036f13c8909a978ad4ceca966cec1e1cda99f25ca78bfd37460d1231c77436d216d43c872ad
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | 2e95cb31d5afcb6842c41d25b7d0c18dd7e65693b2d93c8aa44e5275f9c6201e1a67685c7a8ddefa334babb04cb559d26e39b6a18497695a07dc270568cae108
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-arm.tar.gz) | 2927e82b98404c077196ce3968f3afd51a7576aa56d516019bd3976771c0213ba01e78da5b77478528e770da0d334e9457995fafb98820ed68b2ee34beb68856
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | e0f7aea3ea598214a9817bc04949389cb7e4e7b9503141a590ef48c0b681fe44a4243ebc6280752fa41aa1093149b3ee1bcef7664edb746097a342281825430b
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | c011f7eb01294e9ba5d5ced719068466f88ed595dcb8d554a36a4dd5118fb6b3d6bafe8bf89aa2d42988e69793ed777ba77b8876c6ec74f898a43cfce1f61bf4
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | 15f6683e7f16caab7eebead2b7c15799460abbf035a43de0b75f96b0be19908f58add98a777a0cca916230d60cf6bfe3fee92b9dcff50274b1e37c243c157969
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | ed58679561197110f366b9109f7afd62c227bfc271918ccf3eea203bb2ab6428eb5db4dd6c965f202a8a636f66da199470269b863815809b99d53d2fa47af2ea
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-arm.tar.gz) | 7e6c7f1957fcdecec8fef689c5019edbc0d0c11d22dafbfef0a07121d10d8f6273644f73511bd06a9a88b04d81a940bd6645ffb5711422af64af547a45c76273
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | a3618f29967e7a1574917a67f0296e65780321eda484b99aa32bfd4dc9b35acdefce33da952ac52dfb509fbac5bf700cf177431fad2ab4adcab0544538939faa
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | 326d3eb521b41bdf489912177f70b8cdd7cd828bb9b3d847ed3694eb27e457f24e0a88b8e51b726eee39800a3c5a40c1b30e3a8ec4a34d8041b3d8ef05d1b749
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | 022d05ebaa66a0332c4fe18cdaf23d14c2c7e4d1f2af7f27baaf1eb042e6890dc3434b4ac8ba58c35d590717956f8c3458112685aff4938b94b18e263c3f4256
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | fa691ed93f07af6bc1cf57e20a30580d6c528f88e5fea3c14f39c1820969dc5a0eb476c5b87b288593d0c086c4dd93aff6165082393283c3f46c210f9bb66d61
-
-## Changelog since v1.21.0-beta.0
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - Kubeadm: during "init" an empty cgroupDriver value in the KubeletConfiguration is now always set to "systemd" unless the user is explicit about it. This requires existing machine setups to configure the container runtime to use the "systemd" driver. Documentation on this topic can be found here: https://kubernetes.io/docs/setup/production-environment/container-runtimes/. When upgrading existing clusters / nodes using "kubeadm upgrade" the old cgroupDriver value is preserved, but in 1.22 this change will also apply to "upgrade". For more information on migrating to the "systemd" driver or remaining on the "cgroupfs" driver see: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver/. ([#99471](https://github.com/kubernetes/kubernetes/pull/99471), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-  - Migrate `pkg/kubelet/(dockershim, network)` to structured logging
-  Exit code changed from 255 to 1 ([#98939](https://github.com/kubernetes/kubernetes/pull/98939), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Network and Node]
-  - Migrate `pkg/kubelet/certificate` to structured logging
-  Exit code changed from 255 to 1 ([#98993](https://github.com/kubernetes/kubernetes/pull/98993), [@SataQiu](https://github.com/SataQiu)) [SIG Auth and Node]
-  - Newly provisioned PVs by EBS plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99130](https://github.com/kubernetes/kubernetes/pull/99130), [@ayberk](https://github.com/ayberk)) [SIG Cloud Provider, Storage and Testing]
-  - Newly provisioned PVs by OpenStack Cinder plugin will no longer use the deprecated "failure-domain.beta.kubernetes.io/zone" and "failure-domain.beta.kubernetes.io/region" labels. It will use "topology.kubernetes.io/zone" and "topology.kubernetes.io/region" labels instead. ([#99719](https://github.com/kubernetes/kubernetes/pull/99719), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider and Storage]
-  - OpenStack Cinder CSI migration is on by default, Clinder CSI driver must be installed on clusters on OpenStack for Cinder volumes to work. ([#98538](https://github.com/kubernetes/kubernetes/pull/98538), [@dims](https://github.com/dims)) [SIG Storage]
-  - Package pkg/kubelet/server migrated to structured logging
-  Exit code changed from 255 to 1 ([#99838](https://github.com/kubernetes/kubernetes/pull/99838), [@adisky](https://github.com/adisky)) [SIG Node]
-  - Pkg/kubelet/kuberuntime/kuberuntime_manager.go migrated to structured logging
-  Exit code changed from 255 to 1 ([#99841](https://github.com/kubernetes/kubernetes/pull/99841), [@adisky](https://github.com/adisky)) [SIG Instrumentation and Node]
- 
-## Changes by Kind
-
-### Deprecation
-
-- Kubeadm: the deprecated kube-dns is no longer supported as an option. If "ClusterConfiguration.dns.type" is set to "kube-dns" kubeadm will now throw an error. ([#99646](https://github.com/kubernetes/kubernetes/pull/99646), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
-- Remove deprecated --generator --replicas --service-generator --service-overrides --schedule from kubectl run
-  Deprecate --serviceaccount --hostport --requests --limits in kubectl run ([#99732](https://github.com/kubernetes/kubernetes/pull/99732), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- `audit.k8s.io/v1beta1` and `audit.k8s.io/v1alpha1` audit policy configuration and audit events are deprecated in favor of `audit.k8s.io/v1`, available since v1.13. kube-apiserver invocations that specify alpha or beta policy configurations with `--audit-policy-file`, or explicitly request alpha or beta audit events with `--audit-log-version` / `--audit-webhook-version` must update to use `audit.k8s.io/v1` and accept `audit.k8s.io/v1` events prior to v1.24. ([#98858](https://github.com/kubernetes/kubernetes/pull/98858), [@carlory](https://github.com/carlory)) [SIG Auth]
-- `diskformat` stroage class parameter for in-tree vSphere volume plugin is deprecated as of v1.21 release. Please consider updating storageclass and remove `diskformat` parameter. vSphere CSI Driver does not support diskformat storageclass parameter.
-  
-  vSphere releases less than 67u3 are deprecated as of v1.21. Please consider upgrading vSphere to 67u3 or above. vSphere CSI Driver requires minimum vSphere 67u3.
-  
-  VM Hardware version less than 15 is deprecated as of v1.21. Please consider upgrading the Node VM Hardware version to 15 or above. vSphere CSI Driver recommends Node VM's Hardware version set to at least vmx-15.
-  
-  Multi vCenter support is deprecated as of v1.21. If you have a Kubernetes cluster spanning across multiple vCenter servers, please consider moving all k8s nodes to a single vCenter Server. vSphere CSI Driver does not support Kubernetes deployment spanning across multiple vCenter servers.
-  
-  Support for these deprecations will be available till Kubernetes v1.24. ([#98546](https://github.com/kubernetes/kubernetes/pull/98546), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
-
-### API Change
-
-- 1. PodAffinityTerm includes a namespaceSelector field to allow selecting eligible namespaces based on their labels. 
-  2. A new CrossNamespacePodAffinity quota scope API that allows restricting which namespaces allowed to use PodAffinityTerm with corss-namespace reference via namespaceSelector or namespaces fields. ([#98582](https://github.com/kubernetes/kubernetes/pull/98582), [@ahg-g](https://github.com/ahg-g)) [SIG API Machinery, Apps, Auth and Testing]
-- Add a default metadata name labels for selecting any namespace by its name. ([#96968](https://github.com/kubernetes/kubernetes/pull/96968), [@jayunit100](https://github.com/jayunit100)) [SIG API Machinery, Apps, Cloud Provider, Storage and Testing]
-- Added `.spec.completionMode` field to Job, with accepted values `NonIndexed` (default) and `Indexed` ([#98441](https://github.com/kubernetes/kubernetes/pull/98441), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
-- Clarified NetworkPolicy policyTypes documentation ([#97216](https://github.com/kubernetes/kubernetes/pull/97216), [@joejulian](https://github.com/joejulian)) [SIG Network]
-- DaemonSets accept a MaxSurge integer or percent on their rolling update strategy that will launch the updated pod on nodes and wait for those pods to go ready before marking the old out-of-date pods as deleted. This allows workloads to avoid downtime during upgrades when deployed using DaemonSets. This feature is alpha and is behind the DaemonSetUpdateSurge feature gate. ([#96441](https://github.com/kubernetes/kubernetes/pull/96441), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps and Testing]
-- EndpointSlice API is now GA. The EndpointSlice topology field has been removed from the GA API and will be replaced by a new per Endpoint Zone field. If the topology field was previously used, it will be converted into an annotation in the v1 Resource. The discovery.k8s.io/v1alpha1 API is removed. ([#99662](https://github.com/kubernetes/kubernetes/pull/99662), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network and Testing]
-- EndpointSlice Controllers are now GA. The EndpointSlice Controller will not populate the `deprecatedTopology` field and will only provide topology information through the `zone` and `nodeName` fields. ([#99870](https://github.com/kubernetes/kubernetes/pull/99870), [@swetharepakula](https://github.com/swetharepakula)) [SIG API Machinery, Apps, Auth, Network and Testing]
-- IngressClass resource can now reference a resource in a specific namespace 
-  for implementation-specific configuration(previously only Cluster-level resources were allowed). 
-  This feature can be enabled using the IngressClassNamespacedParams feature gate. ([#99275](https://github.com/kubernetes/kubernetes/pull/99275), [@hbagdi](https://github.com/hbagdi)) [SIG API Machinery, CLI and Network]
-- Introduce conditions for PodDisruptionBudget ([#98127](https://github.com/kubernetes/kubernetes/pull/98127), [@mortent](https://github.com/mortent)) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
-- Jobs API has a new .spec.suspend field that can be used to suspend and resume Jobs ([#98727](https://github.com/kubernetes/kubernetes/pull/98727), [@adtac](https://github.com/adtac)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
-- Kubelet Graceful Node Shutdown feature is now beta. ([#99735](https://github.com/kubernetes/kubernetes/pull/99735), [@bobbypage](https://github.com/bobbypage)) [SIG Node]
-- Limit the quest value of hugepage to integer multiple of page size. ([#98515](https://github.com/kubernetes/kubernetes/pull/98515), [@lala123912](https://github.com/lala123912)) [SIG Apps]
-- One new field "InternalTrafficPolicy" in Service is added.
-  It specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only.
-  "Cluster" routes internal traffic to a Service to all endpoints.
-  "Local" routes traffic to node-local endpoints only, and traffic is dropped if no node-local endpoints are ready.
-  The default value is "Cluster". ([#96600](https://github.com/kubernetes/kubernetes/pull/96600), [@maplain](https://github.com/maplain)) [SIG API Machinery, Apps and Network]
-- PodSecurityPolicy only stores "generic" as allowed volume type if the GenericEphemeralVolume feature gate is enabled ([#98918](https://github.com/kubernetes/kubernetes/pull/98918), [@pohly](https://github.com/pohly)) [SIG Auth and Security]
-- Promote CronJobs to batch/v1 ([#99423](https://github.com/kubernetes/kubernetes/pull/99423), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
-- Remove support for building Kubernetes with bazel. ([#99561](https://github.com/kubernetes/kubernetes/pull/99561), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Scheduling, Storage, Testing and Windows]
-- Setting loadBalancerClass in load balancer type of service is available with this PR. 
-  Users who want to use a custom load balancer can specify loadBalancerClass to achieve it. ([#98277](https://github.com/kubernetes/kubernetes/pull/98277), [@XudongLiuHarold](https://github.com/XudongLiuHarold)) [SIG API Machinery, Apps, Cloud Provider and Network]
-- Storage capacity tracking (= the CSIStorageCapacity feature) is beta, storage.k8s.io/v1alpha1/VolumeAttachment and storage.k8s.io/v1alpha1/CSIStorageCapacity objects are deprecated ([#99641](https://github.com/kubernetes/kubernetes/pull/99641), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, Scheduling, Storage and Testing]
-- Support for Indexed Job: a Job that is considered completed when Pods associated to indexes from 0 to (.spec.completions-1) have succeeded. ([#98812](https://github.com/kubernetes/kubernetes/pull/98812), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps and CLI]
-- The apiserver now resets managedFields that got corrupted by a mutating admission controller. ([#98074](https://github.com/kubernetes/kubernetes/pull/98074), [@kwiesmueller](https://github.com/kwiesmueller)) [SIG API Machinery and Testing]
-- `controller.kubernetes.io/pod-deletion-cost` annotation can be set to offer a hint on the cost of deleting a pod compared to other pods belonging to the same ReplicaSet. Pods with lower deletion cost are deleted first. This is an alpha feature. ([#99163](https://github.com/kubernetes/kubernetes/pull/99163), [@ahg-g](https://github.com/ahg-g)) [SIG Apps]
-
-### Feature
-
-- A client-go metric, rest_client_exec_plugin_call_total, has been added to track total calls to client-go credential plugins. ([#98892](https://github.com/kubernetes/kubernetes/pull/98892), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation]
-- Add --use-protocol-buffers flag to kubectl top pods and nodes ([#96655](https://github.com/kubernetes/kubernetes/pull/96655), [@serathius](https://github.com/serathius)) [SIG CLI]
-- Add support to generate client-side binaries for new darwin/arm64 platform ([#97743](https://github.com/kubernetes/kubernetes/pull/97743), [@dims](https://github.com/dims)) [SIG Release and Testing]
-- Added `ephemeral_volume_controller_create[_failures]_total` counters to kube-controller-manager metrics ([#99115](https://github.com/kubernetes/kubernetes/pull/99115), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Storage]
-- Adds alpha feature `VolumeCapacityPriority` which makes the scheduler prioritize nodes based on the best matching size of statically provisioned PVs across multiple topologies. ([#96347](https://github.com/kubernetes/kubernetes/pull/96347), [@cofyc](https://github.com/cofyc)) [SIG Apps, Network, Scheduling, Storage and Testing]
-- Adds two new metrics to cronjobs, a  histogram to track the time difference when a job is created and the expected time when it should be created, and a gauge for the missed schedules of a cronjob ([#99341](https://github.com/kubernetes/kubernetes/pull/99341), [@alaypatel07](https://github.com/alaypatel07)) [SIG Apps and Instrumentation]
-- Alpha implementation of Kubectl Command Headers: SIG CLI KEP 859 enabled when KUBECTL_COMMAND_HEADERS environment variable set on the client command line.
-  - To enable: export KUBECTL_COMMAND_HEADERS=1; kubectl ... ([#98952](https://github.com/kubernetes/kubernetes/pull/98952), [@seans3](https://github.com/seans3)) [SIG API Machinery and CLI]
-- Component owner can configure the allowlist of metric label with flag '--allow-metric-labels'. ([#99738](https://github.com/kubernetes/kubernetes/pull/99738), [@YoyinZyc](https://github.com/YoyinZyc)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Disruption controller only sends one event per PodDisruptionBudget if scale can't be computed ([#98128](https://github.com/kubernetes/kubernetes/pull/98128), [@mortent](https://github.com/mortent)) [SIG Apps]
-- EndpointSliceNodeName will always be enabled, so NodeName will always be available in the v1beta1 API. ([#99746](https://github.com/kubernetes/kubernetes/pull/99746), [@swetharepakula](https://github.com/swetharepakula)) [SIG Apps and Network]
-- Graduate CRIContainerLogRotation feature gate to GA. ([#99651](https://github.com/kubernetes/kubernetes/pull/99651), [@umohnani8](https://github.com/umohnani8)) [SIG Node and Testing]
-- Kube-proxy iptables: new metric sync_proxy_rules_iptables_total that exposes the number of rules programmed per table in each iteration ([#99653](https://github.com/kubernetes/kubernetes/pull/99653), [@aojea](https://github.com/aojea)) [SIG Instrumentation and Network]
-- Kube-scheduler now logs plugin scoring summaries at --v=4 ([#99411](https://github.com/kubernetes/kubernetes/pull/99411), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Kubeadm: a warning to user as ipv6 site-local is deprecated ([#99574](https://github.com/kubernetes/kubernetes/pull/99574), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle and Network]
-- Kubeadm: apply the "node.kubernetes.io/exclude-from-external-load-balancers" label on control plane nodes during "init", "join" and "upgrade" to preserve backwards compatibility with the lagacy LB mode where nodes labeled as "master" where excluded. To opt-out you can remove the label from a node. See #97543 and the linked KEP for more details. ([#98269](https://github.com/kubernetes/kubernetes/pull/98269), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: if the user has customized their image repository via the kubeadm configuration, pass the custom pause image repository and tag to the kubelet via --pod-infra-container-image not only for Docker but for all container runtimes. This flag tells the kubelet that it should not garbage collect the image. ([#99476](https://github.com/kubernetes/kubernetes/pull/99476), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: promote IPv6DualStack feature gate to Beta ([#99294](https://github.com/kubernetes/kubernetes/pull/99294), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Kubectl version changed to write a warning message to stderr if the client and server version difference exceeds the supported version skew of +/-1 minor version. ([#98250](https://github.com/kubernetes/kubernetes/pull/98250), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Kubernetes is now built with Golang 1.16 ([#98572](https://github.com/kubernetes/kubernetes/pull/98572), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node, Release and Testing]
-- Persistent Volumes formatted with the btrfs filesystem will now automatically resize when expanded. ([#99361](https://github.com/kubernetes/kubernetes/pull/99361), [@Novex](https://github.com/Novex)) [SIG Storage]
-- Remove cAdvisor json metrics api collected by Kubelet ([#99236](https://github.com/kubernetes/kubernetes/pull/99236), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
-- Sysctls is now GA and locked to default ([#99158](https://github.com/kubernetes/kubernetes/pull/99158), [@wgahnagl](https://github.com/wgahnagl)) [SIG Node]
-- The NodeAffinity plugin implements the PreFilter extension, offering enhanced performance for Filter. ([#99213](https://github.com/kubernetes/kubernetes/pull/99213), [@AliceZhang2016](https://github.com/AliceZhang2016)) [SIG Scheduling]
-- The endpointslice mirroring controller mirrors endpoints annotations and labels to the generated endpoint slices, it also ensures that updates on any of these fields are mirrored. 
-  The well-known annotation endpoints.kubernetes.io/last-change-trigger-time is skipped and not mirrored. ([#98116](https://github.com/kubernetes/kubernetes/pull/98116), [@aojea](https://github.com/aojea)) [SIG Apps, Network and Testing]
-- Update the latest validated version of Docker to 20.10 ([#98977](https://github.com/kubernetes/kubernetes/pull/98977), [@neolit123](https://github.com/neolit123)) [SIG CLI, Cluster Lifecycle and Node]
-- Upgrade node local dns to 1.17.0 for better IPv6 support ([#99749](https://github.com/kubernetes/kubernetes/pull/99749), [@pacoxu](https://github.com/pacoxu)) [SIG Cloud Provider and Network]
-- Users might specify the `kubectl.kubernetes.io/default-exec-container` annotation in a Pod to preselect container for kubectl commands. ([#99581](https://github.com/kubernetes/kubernetes/pull/99581), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG CLI]
-- When downscaling ReplicaSets, ready and creation timestamps are compared in a logarithmic scale. ([#99212](https://github.com/kubernetes/kubernetes/pull/99212), [@damemi](https://github.com/damemi)) [SIG Apps and Testing]
-- When the kubelet is watching a ConfigMap or Secret purely in the context of setting environment variables
-  for containers, only hold that watch for a defined duration before cancelling it. This change reduces the CPU
-  and memory usage of the kube-apiserver in large clusters. ([#99393](https://github.com/kubernetes/kubernetes/pull/99393), [@chenyw1990](https://github.com/chenyw1990)) [SIG API Machinery, Node and Testing]
-- WindowsEndpointSliceProxying feature gate has graduated to beta and is enabled by default. This means kube-proxy will  read from EndpointSlices instead of Endpoints on Windows by default. ([#99794](https://github.com/kubernetes/kubernetes/pull/99794), [@robscott](https://github.com/robscott)) [SIG Network]
-
-### Bug or Regression
-
-- Creating a PVC with DataSource should fail for non-CSI plugins. ([#97086](https://github.com/kubernetes/kubernetes/pull/97086), [@xing-yang](https://github.com/xing-yang)) [SIG Apps and Storage]
-- EndpointSlice controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99345](https://github.com/kubernetes/kubernetes/pull/99345), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- EndpointSliceMirroring controller is now less likely to emit FailedToUpdateEndpointSlices events. ([#99756](https://github.com/kubernetes/kubernetes/pull/99756), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Fix --ignore-errors does not take effect if multiple logs are printed and unfollowed ([#97686](https://github.com/kubernetes/kubernetes/pull/97686), [@wzshiming](https://github.com/wzshiming)) [SIG CLI]
-- Fix bug that would let the Horizontal Pod Autoscaler scale down despite at least one metric being unavailable/invalid ([#99514](https://github.com/kubernetes/kubernetes/pull/99514), [@mikkeloscar](https://github.com/mikkeloscar)) [SIG Apps and Autoscaling]
-- Fix cgroup handling for systemd with cgroup v2 ([#98365](https://github.com/kubernetes/kubernetes/pull/98365), [@odinuge](https://github.com/odinuge)) [SIG Node]
-- Fix smb mount PermissionDenied issue on Windows ([#99550](https://github.com/kubernetes/kubernetes/pull/99550), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider, Storage and Windows]
-- Fixed a bug that causes smaller number of conntrack-max being used under CPU static policy. (#99225, @xh4n3) ([#99613](https://github.com/kubernetes/kubernetes/pull/99613), [@xh4n3](https://github.com/xh4n3)) [SIG Network]
-- Fixed bug that caused cAdvisor to incorrectly detect single-socket multi-NUMA topology. ([#99315](https://github.com/kubernetes/kubernetes/pull/99315), [@iwankgb](https://github.com/iwankgb)) [SIG Node]
-- Fixes add-on manager leader election ([#98968](https://github.com/kubernetes/kubernetes/pull/98968), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider]
-- Improved update time of pod statuses following new probe results. ([#98376](https://github.com/kubernetes/kubernetes/pull/98376), [@matthyx](https://github.com/matthyx)) [SIG Node and Testing]
-- Kube-apiserver: an update of a pod with a generic ephemeral volume dropped that volume if the feature had been disabled since creating the pod with such a volume ([#99446](https://github.com/kubernetes/kubernetes/pull/99446), [@pohly](https://github.com/pohly)) [SIG Apps, Node and Storage]
-- Kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false ([#98984](https://github.com/kubernetes/kubernetes/pull/98984), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- On single-stack configured (IPv4 or IPv6, but not both) clusters, Services which are both headless (no clusterIP) and selectorless (empty or undefined selector) will report `ipFamilyPolicy RequireDualStack` and will have entries in `ipFamilies[]` for both IPv4 and IPv6.  This is a change from alpha, but does not have any impact on the manually-specified Endpoints and EndpointSlices for the Service. ([#99555](https://github.com/kubernetes/kubernetes/pull/99555), [@thockin](https://github.com/thockin)) [SIG Apps and Network]
-- Resolves spurious `Failed to list *v1.Secret` or `Failed to list *v1.ConfigMap` messages in kubelet logs. ([#99538](https://github.com/kubernetes/kubernetes/pull/99538), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
-- Return zero time (midnight on Jan. 1, 1970) instead of negative number when reporting startedAt and finishedAt of the not started or a running Pod when using dockershim as a runtime. ([#99585](https://github.com/kubernetes/kubernetes/pull/99585), [@Iceber](https://github.com/Iceber)) [SIG Node]
-- Stdin is now only passed to client-go exec credential plugins when it is detected to be an interactive terminal. Previously, it was passed to client-go exec plugins when **stdout*- was detected to be an interactive terminal. ([#99654](https://github.com/kubernetes/kubernetes/pull/99654), [@ankeesler](https://github.com/ankeesler)) [SIG API Machinery and Auth]
-- The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 ([#99795](https://github.com/kubernetes/kubernetes/pull/99795), [@robscott](https://github.com/robscott)) [SIG Network]
-- Updates the commands 
-   - kubectl kustomize {arg}
-   - kubectl apply -k {arg}
-  to use same code as kustomize CLI v4.0.5
-   - [v4.0.5]: https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.0.5 ([#98946](https://github.com/kubernetes/kubernetes/pull/98946), [@monopole](https://github.com/monopole)) [SIG API Machinery, Architecture, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Storage]
-- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
-  "primary IP family" of the cluster by picking a primary pod IP of the same family
-  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
-  in the order the administrator wanted (since some CNI plugins don't allow
-  configuring this). ([#97979](https://github.com/kubernetes/kubernetes/pull/97979), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- When using Containerd on Windows, the "C:\Windows\System32\drivers\etc\hosts" file will now be managed by kubelet. ([#83730](https://github.com/kubernetes/kubernetes/pull/83730), [@claudiubelu](https://github.com/claudiubelu)) [SIG Node and Windows]
-- `VolumeBindingArgs` now allow `BindTimeoutSeconds` to be set as zero, while the value zero indicates no waiting for the checking of volume binding operation. ([#99835](https://github.com/kubernetes/kubernetes/pull/99835), [@chendave](https://github.com/chendave)) [SIG Scheduling and Storage]
-- `kubectl exec` and `kubectl attach` now honor the `--quiet` flag which suppresses output from the local binary that could be confused by a script with the remote command output (all non-failure output is hidden). In addition, print inline with exec and attach the list of alternate containers when we default to the first spec.container. ([#99004](https://github.com/kubernetes/kubernetes/pull/99004), [@smarterclayton](https://github.com/smarterclayton)) [SIG CLI]
-
-### Other (Cleanup or Flake)
-
-- Apiserver_request_duration_seconds is promoted to stable status. ([#99925](https://github.com/kubernetes/kubernetes/pull/99925), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
-- Apiserver_request_total is promoted to stable status and no longer has a content-type dimensions, so any alerts/charts which presume the existence of this will fail. This is however, unlikely to be the case since it was effectively an unbounded dimension in the first place. ([#99788](https://github.com/kubernetes/kubernetes/pull/99788), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Instrumentation and Testing]
-- EndpointSlice generation is now incremented when labels change. ([#99750](https://github.com/kubernetes/kubernetes/pull/99750), [@robscott](https://github.com/robscott)) [SIG Network]
-- Featuregate AllowInsecureBackendProxy is promoted to GA ([#99658](https://github.com/kubernetes/kubernetes/pull/99658), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
-- Migrate `pkg/kubelet/(eviction)` to structured logging ([#99032](https://github.com/kubernetes/kubernetes/pull/99032), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Node]
-- Migrate deployment controller log messages to structured logging ([#97507](https://github.com/kubernetes/kubernetes/pull/97507), [@aldudko](https://github.com/aldudko)) [SIG Apps]
-- Migrate pkg/kubelet/cloudresource to structured logging ([#98999](https://github.com/kubernetes/kubernetes/pull/98999), [@sladyn98](https://github.com/sladyn98)) [SIG Node]
-- Migrate pkg/kubelet/cri/remote logs to structured logging ([#98589](https://github.com/kubernetes/kubernetes/pull/98589), [@chenyw1990](https://github.com/chenyw1990)) [SIG Node]
-- Migrate pkg/kubelet/kuberuntime/kuberuntime_container.go logs to structured logging ([#96973](https://github.com/kubernetes/kubernetes/pull/96973), [@chenyw1990](https://github.com/chenyw1990)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/status to structured logging ([#99836](https://github.com/kubernetes/kubernetes/pull/99836), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/token to structured logging ([#99264](https://github.com/kubernetes/kubernetes/pull/99264), [@palnabarun](https://github.com/palnabarun)) [SIG Auth, Instrumentation and Node]
-- Migrate pkg/kubelet/util to structured logging ([#99823](https://github.com/kubernetes/kubernetes/pull/99823), [@navidshaikh](https://github.com/navidshaikh)) [SIG Instrumentation and Node]
-- Migrate proxy/userspace/proxier.go logs to structured logging ([#97837](https://github.com/kubernetes/kubernetes/pull/97837), [@JornShen](https://github.com/JornShen)) [SIG Network]
-- Migrate some kubelet/metrics log messages to structured logging ([#98627](https://github.com/kubernetes/kubernetes/pull/98627), [@jialaijun](https://github.com/jialaijun)) [SIG Instrumentation and Node]
-- Process start time on Windows now uses current process information ([#97491](https://github.com/kubernetes/kubernetes/pull/97491), [@jsturtevant](https://github.com/jsturtevant)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Windows]
-
-### Uncategorized
-
-- Migrate pkg/kubelet/stats to structured logging ([#99607](https://github.com/kubernetes/kubernetes/pull/99607), [@krzysiekg](https://github.com/krzysiekg)) [SIG Node]
-- The DownwardAPIHugePages feature is beta.  Users may use the feature if all workers in their cluster are min 1.20 version.  The feature will be enabled by default in all installations in 1.22. ([#99610](https://github.com/kubernetes/kubernetes/pull/99610), [@derekwaynecarr](https://github.com/derekwaynecarr)) [SIG Node]
-
-## Dependencies
-
-### Added
-- github.com/go-errors/errors: [v1.0.1](https://github.com/go-errors/errors/tree/v1.0.1)
-- github.com/gobuffalo/here: [v0.6.0](https://github.com/gobuffalo/here/tree/v0.6.0)
-- github.com/google/shlex: [e7afc7f](https://github.com/google/shlex/tree/e7afc7f)
-- github.com/markbates/pkger: [v0.17.1](https://github.com/markbates/pkger/tree/v0.17.1)
-- github.com/monochromegane/go-gitignore: [205db1a](https://github.com/monochromegane/go-gitignore/tree/205db1a)
-- github.com/niemeyer/pretty: [a10e7ca](https://github.com/niemeyer/pretty/tree/a10e7ca)
-- github.com/xlab/treeprint: [a009c39](https://github.com/xlab/treeprint/tree/a009c39)
-- go.starlark.net: 8dd3e2e
-- golang.org/x/term: 6a3ed07
-- sigs.k8s.io/kustomize/api: v0.8.5
-- sigs.k8s.io/kustomize/cmd/config: v0.9.7
-- sigs.k8s.io/kustomize/kustomize/v4: v4.0.5
-- sigs.k8s.io/kustomize/kyaml: v0.10.15
-
-### Changed
-- dmitri.shuralyov.com/gpu/mtl: 666a987 → 28db891
-- github.com/creack/pty: [v1.1.7 → v1.1.9](https://github.com/creack/pty/compare/v1.1.7...v1.1.9)
-- github.com/go-openapi/spec: [v0.19.3 → v0.19.5](https://github.com/go-openapi/spec/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/strfmt: [v0.19.3 → v0.19.5](https://github.com/go-openapi/strfmt/compare/v0.19.3...v0.19.5)
-- github.com/go-openapi/validate: [v0.19.5 → v0.19.8](https://github.com/go-openapi/validate/compare/v0.19.5...v0.19.8)
-- github.com/google/cadvisor: [v0.38.7 → v0.38.8](https://github.com/google/cadvisor/compare/v0.38.7...v0.38.8)
-- github.com/kr/text: [v0.1.0 → v0.2.0](https://github.com/kr/text/compare/v0.1.0...v0.2.0)
-- github.com/mattn/go-runewidth: [v0.0.2 → v0.0.7](https://github.com/mattn/go-runewidth/compare/v0.0.2...v0.0.7)
-- github.com/olekukonko/tablewriter: [a0225b3 → v0.0.4](https://github.com/olekukonko/tablewriter/compare/a0225b3...v0.0.4)
-- github.com/sergi/go-diff: [v1.0.0 → v1.1.0](https://github.com/sergi/go-diff/compare/v1.0.0...v1.1.0)
-- golang.org/x/crypto: 7f63de1 → 5ea612d
-- golang.org/x/exp: 6cc2880 → 85be41e
-- golang.org/x/mobile: d2bd2a2 → e6ae53a
-- golang.org/x/mod: v0.3.0 → ce943fd
-- golang.org/x/net: 69a7880 → 3d97a24
-- golang.org/x/sys: 5cba982 → a50acf3
-- golang.org/x/time: 3af7569 → f8bda1e
-- golang.org/x/tools: 113979e → v0.1.0
-- gopkg.in/check.v1: 41f04d3 → 8fa4692
-- gopkg.in/yaml.v2: v2.2.8 → v2.4.0
-- k8s.io/kube-openapi: d219536 → 591a79e
-- k8s.io/system-validators: v1.3.0 → v1.4.0
-
-### Removed
-- github.com/codegangsta/negroni: [v1.0.0](https://github.com/codegangsta/negroni/tree/v1.0.0)
-- github.com/golangplus/bytes: [45c989f](https://github.com/golangplus/bytes/tree/45c989f)
-- github.com/golangplus/fmt: [2a5d6d7](https://github.com/golangplus/fmt/tree/2a5d6d7)
-- github.com/gorilla/context: [v1.1.1](https://github.com/gorilla/context/tree/v1.1.1)
-- github.com/kr/pty: [v1.1.5](https://github.com/kr/pty/tree/v1.1.5)
-- sigs.k8s.io/kustomize: v2.0.3+incompatible
-
-
-
-# v1.21.0-beta.0
-
-
-## Downloads for v1.21.0-beta.0
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes.tar.gz) | 69b73a03b70b0ed006e9fef3f5b9bc68f0eb8dc40db6cc04777c03a2cb83a008c783012ca186b1c48357fb192403dbcf6960f120924785e2076e215b9012d546
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-src.tar.gz) | 9620fb6d37634271bdd423c09f33f3bd29e74298aa82c47dffc8cb6bd2ff44fa8987a53c53bc529db4ca96ec41503aa81cc8d0c3ac106f3b06c4720de933a8e6
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-darwin-amd64.tar.gz) | 2a6f3fcd6b571f5ccde56b91e6e179a01899244be496dae16a2a16e0405c9437b75c6dc853b56f9a4876a7c0a60ec624ccd28400bf8fb960258263172f6860ba
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-386.tar.gz) | 78fe9ad9f9a9bc043293327223f0038a2c087ca65e87187a6dcae7a24aef9565fe498d295a4639b0b90524469a04930022fcecd815d0afc742eb87ddd8eb7ef5
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-amd64.tar.gz) | c025f5e5bd132355e7dd1296cf2ec752264e7f754c4d95fc34b076bd75bef2f571d30872bcb3d138ce95c592111353d275a80eb31f82c07000874b4c56282dbd
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-arm.tar.gz) | 9975cd2f08fbc202575fb15ba6fc51dab23155ca4d294ebb48516a81efa51f58bab3a87d41c865103756189b554c020371d729ad42880ba788f25047ffc46910
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-arm64.tar.gz) | 56a6836e24471e42e9d9a8488453f2d55598d70c8aca0a307d5116139c930c25c469fd0d1ab5060fbe88dad75a9b5209a08dc11d644af5f3ebebfbcb6c16266c
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-ppc64le.tar.gz) | b6a6cc9baad0ad85ed079ee80e6d6acc905095cfb440998bbc0f553b94fa80077bd58b8692754de477517663d51161705e6e89a1b6d04aa74819800db3517722
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-linux-s390x.tar.gz) | 7b743481b340f510bf9ae28ea8ea91150aa1e8c37fe104b66d7b3aff62f5e6db3c590d2c13d14dbb5c928de31c7613372def2496075853611d10d6b5fa5b60bd
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-windows-386.tar.gz) | df06c7a524ce84c1f8d7836aa960c550c88dbca0ec4854df4dd0a85b3c84b8ecbc41b54e8c4669ce28ac670659ff0fad795deb1bc539f3c3b3aa885381265f5a
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-client-windows-amd64.tar.gz) | 4568497b684564f2a94fbea6cbfd778b891231470d9a6956c3b7a3268643d13b855c0fc5ebea5f769300cc0c7719c2c331c387f468816f182f63e515adeaa7a0
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-amd64.tar.gz) | 42883cca2d312153baf693fc6024a295359a421e74fd70eefc927413be4e0353debe634e7cca6b9a8f7d8a0cee3717e03ba5d29a306e93139b1c2f3027535a6d
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-arm.tar.gz) | e0042215e84c769ba4fc4d159ccf67b2c4a26206bfffb0ec5152723dc813ff9c1426aa0e9b963d7bfa2efb266ca43561b596b459152882ebb42102ccf60bd8eb
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-arm64.tar.gz) | bfad29d43e14152cb9bc7c4df6aa77929c6eca64a294bb832215bdba9fa0ee2195a2b709c0267dc7426bb371b547ee80bb8461a8c678c9bffa0819aa7db96289
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-ppc64le.tar.gz) | ca67674c01c6cebdc8160c85b449eab1a23bb0557418665246e0208543fa2eaaf97679685c7b49bee3a4300904c0399c3d762ae34dc3e279fd69ce792c4b07ff
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-server-linux-s390x.tar.gz) | 285352b628ec754b01b8ad4ef1427223a142d58ebcb46f6861df14d68643133b32330460b213b1ba5bc5362ff2b6dacd8e0c2d20cce6e760fa1954af8a60df8b
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-amd64.tar.gz) | d92d9b30e7e44134a0cd9db4c01924d365991ea16b3131200b02a82cff89c8701f618cd90e7f1c65427bd4bb5f78b10d540b2262de2c143b401fa44e5b25627b
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-arm.tar.gz) | 551092f23c27fdea4bb2d0547f6075892534892a96fc2be7786f82b58c93bffdb5e1c20f8f11beb8bed46c24f36d4c18ec5ac9755435489efa28e6ae775739bd
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-arm64.tar.gz) | 26ae7f4163e527349b8818ee38b9ee062314ab417f307afa49c146df8f5a2bd689509b128bd4a1efd3896fd89571149a9955ada91f8ca0c2f599cd863d613c86
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-ppc64le.tar.gz) | 821fa953f6cebc69d2d481e489f3e90899813d20e2eefbabbcadd019d004108e7540f741fabe60e8e7c6adbb1053ac97898bbdddec3ca19f34a71aa3312e0d4e
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-linux-s390x.tar.gz) | 22197d4f66205d5aa9de83dfddcc4f2bb3195fd7067cdb5c21e61dbeae217bc112fb7ecff8a539579b60ad92298c2b4c87b9b7c7e6ec1ee1ffa0c6e4bc4412c1
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-beta.0/kubernetes-node-windows-amd64.tar.gz) | 7e22e0d9603562a04dee16a513579f06b1ff6354d97d669bd68f8777ec7f89f6ef027fb23ab0445d7bba0bb689352f0cc748ce90e3f597c6ebe495464a96b860
-
-## Changelog since v1.21.0-alpha.3
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - The metric `storage_operation_errors_total` is not removed, but is marked deprecated, and the metric `storage_operation_status_count` is marked deprecated. In both cases the storage_operation_duration_seconds metric can be used to recover equivalent counts (using `status=fail-unknown` in the case of `storage_operations_errors_total`). ([#99045](https://github.com/kubernetes/kubernetes/pull/99045), [@mattcary](https://github.com/mattcary)) [SIG Instrumentation and Storage]
- 
-## Changes by Kind
-
-### Deprecation
-
-- The `batch/v2alpha1` CronJob type definitions and clients are deprecated and removed. ([#96987](https://github.com/kubernetes/kubernetes/pull/96987), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, Apps, CLI and Testing]
-
-### API Change
-
-- Cluster admins can now turn off /debug/pprof and /debug/flags/v endpoint in kubelet by setting enableProfilingHandler and enableDebugFlagsHandler to false in their kubelet configuration file. enableProfilingHandler and enableDebugFlagsHandler can be set to true only when enableDebuggingHandlers is also set to true. ([#98458](https://github.com/kubernetes/kubernetes/pull/98458), [@SaranBalaji90](https://github.com/SaranBalaji90)) [SIG Node]
-- The BoundServiceAccountTokenVolume feature has been promoted to beta, and enabled by default.
-  - This changes the tokens provided to containers at `/var/run/secrets/kubernetes.io/serviceaccount/token` to be time-limited, auto-refreshed, and invalidated when the containing pod is deleted.
-  - Clients should reload the token from disk periodically (once per minute is recommended) to ensure they continue to use a valid token. `k8s.io/client-go` version v11.0.0+ and v0.15.0+ reload tokens automatically.
-  - By default, injected tokens are given an extended lifetime so they remain valid even after a new refreshed token is provided. The metric `serviceaccount_stale_tokens_total` can be used to monitor for workloads that are depending on the extended lifetime and are continuing to use tokens even after a refreshed token is provided to the container. If that metric indicates no existing workloads are depending on extended lifetimes, injected token lifetime can be shortened to 1 hour by starting `kube-apiserver` with `--service-account-extend-token-expiration=false`. ([#95667](https://github.com/kubernetes/kubernetes/pull/95667), [@zshihang](https://github.com/zshihang)) [SIG API Machinery, Auth, Cluster Lifecycle and Testing]
-
-### Feature
-
-- A new histogram metric to track the time it took to delete a job by the ttl-after-finished controller ([#98676](https://github.com/kubernetes/kubernetes/pull/98676), [@ahg-g](https://github.com/ahg-g)) [SIG Apps and Instrumentation]
-- AWS cloudprovider supports auto-discovering subnets without any kubernetes.io/cluster/<clusterName> tags. It also supports additional service annotation service.beta.kubernetes.io/aws-load-balancer-subnets to manually configure the subnets. ([#97431](https://github.com/kubernetes/kubernetes/pull/97431), [@kishorj](https://github.com/kishorj)) [SIG Cloud Provider]
-- Add --permit-address-sharing flag to kube-apiserver to listen with SO_REUSEADDR. While allowing to listen on wildcard IPs like 0.0.0.0 and specific IPs in parallel, it avoid waiting for the kernel to release socket in TIME_WAIT state, and hence, considably reducing kube-apiserver restart times under certain conditions. ([#93861](https://github.com/kubernetes/kubernetes/pull/93861), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Add `csi_operations_seconds` metric on kubelet that exposes CSI operations duration and status for node CSI operations. ([#98979](https://github.com/kubernetes/kubernetes/pull/98979), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Instrumentation and Storage]
-- Add `migrated` field into `storage_operation_duration_seconds` metric ([#99050](https://github.com/kubernetes/kubernetes/pull/99050), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Apps, Instrumentation and Storage]
-- Add bash-completion for comma separated list on `kubectl get` ([#98301](https://github.com/kubernetes/kubernetes/pull/98301), [@phil9909](https://github.com/phil9909)) [SIG CLI]
-- Added support for installing arm64 node artifacts. ([#99242](https://github.com/kubernetes/kubernetes/pull/99242), [@liu-cong](https://github.com/liu-cong)) [SIG Cloud Provider]
-- Feature gate RootCAConfigMap is graduated to GA in 1.21 and will be removed in 1.22. ([#98033](https://github.com/kubernetes/kubernetes/pull/98033), [@zshihang](https://github.com/zshihang)) [SIG API Machinery and Auth]
-- Kubeadm: during "init" and "join" perform preflight validation on the host / node name and throw warnings if a name is not compliant ([#99194](https://github.com/kubernetes/kubernetes/pull/99194), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Kubectl: `kubectl get` will omit managed fields by default now. Users could set `--show-managed-fields` to true to show managedFields when the output format is either `json` or `yaml`. ([#96878](https://github.com/kubernetes/kubernetes/pull/96878), [@knight42](https://github.com/knight42)) [SIG CLI and Testing]
-- Metrics can now be disabled explicitly via a command line flag (i.e. '--disabled-metrics=bad_metric1,bad_metric2') ([#99217](https://github.com/kubernetes/kubernetes/pull/99217), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- TTLAfterFinished is now beta and enabled by default ([#98678](https://github.com/kubernetes/kubernetes/pull/98678), [@ahg-g](https://github.com/ahg-g)) [SIG Apps and Auth]
-- The `RunAsGroup` feature has been promoted to GA in this release. ([#94641](https://github.com/kubernetes/kubernetes/pull/94641), [@krmayankk](https://github.com/krmayankk)) [SIG Auth and Node]
-- Turn CronJobControllerV2 on by default. ([#98878](https://github.com/kubernetes/kubernetes/pull/98878), [@soltysh](https://github.com/soltysh)) [SIG Apps]
-- UDP protocol support for Agnhost connect subcommand ([#98639](https://github.com/kubernetes/kubernetes/pull/98639), [@knabben](https://github.com/knabben)) [SIG Testing]
-- Upgrades `IPv6Dualstack` to `Beta` and turns it on by default. Clusters new and existing will not be affected until user starting adding secondary pod and service cidrs cli flags as described here: https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/563-dual-stack ([#98969](https://github.com/kubernetes/kubernetes/pull/98969), [@khenidak](https://github.com/khenidak)) [SIG API Machinery, Apps, Cloud Provider, Network and Node]
-
-### Documentation
-
-- Fix ALPHA stability level reference link ([#98641](https://github.com/kubernetes/kubernetes/pull/98641), [@Jeffwan](https://github.com/Jeffwan)) [SIG Auth, Cloud Provider, Instrumentation and Storage]
-
-### Failing Test
-
-- Escape the special characters like `[`, `]` and ` ` that exist in vsphere windows path ([#98830](https://github.com/kubernetes/kubernetes/pull/98830), [@liyanhui1228](https://github.com/liyanhui1228)) [SIG Storage and Windows]
-- Kube-proxy: fix a bug on UDP NodePort Services where stale conntrack entries may blackhole the traffic directed to the NodePort. ([#98305](https://github.com/kubernetes/kubernetes/pull/98305), [@aojea](https://github.com/aojea)) [SIG Network]
-
-### Bug or Regression
-
-- Add missing --kube-api-content-type in kubemark hollow template ([#98911](https://github.com/kubernetes/kubernetes/pull/98911), [@Jeffwan](https://github.com/Jeffwan)) [SIG Scalability and Testing]
-- Avoid duplicate error messages when runing kubectl edit quota ([#98201](https://github.com/kubernetes/kubernetes/pull/98201), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery and Apps]
-- Cleanup subnet in frontend IP configs to prevent huge subnet request bodies in some scenarios. ([#98133](https://github.com/kubernetes/kubernetes/pull/98133), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix errors when accessing Windows container stats for Dockershim ([#98510](https://github.com/kubernetes/kubernetes/pull/98510), [@jsturtevant](https://github.com/jsturtevant)) [SIG Node and Windows]
-- Fixes spurious errors about IPv6 in kube-proxy logs on nodes with IPv6 disabled. ([#99127](https://github.com/kubernetes/kubernetes/pull/99127), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
-- In the method that ensures that the docker and containerd are in the correct containers with the proper OOM score set up, fixed the bug of identifying containerd process. ([#97888](https://github.com/kubernetes/kubernetes/pull/97888), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
-- Kubelet now cleans up orphaned volume directories automatically ([#95301](https://github.com/kubernetes/kubernetes/pull/95301), [@lorenz](https://github.com/lorenz)) [SIG Node and Storage]
-- When dynamically provisioning Azure File volumes for a premium account, the requested size will be set to 100GB if the request is initially lower than this value to accommodate Azure File requirements. ([#99122](https://github.com/kubernetes/kubernetes/pull/99122), [@huffmanca](https://github.com/huffmanca)) [SIG Cloud Provider and Storage]
-
-### Other (Cleanup or Flake)
-
-- APIs for kubelet annotations and labels from k8s.io/kubernetes/pkg/kubelet/apis are now available under k8s.io/kubelet/pkg/apis/ ([#98931](https://github.com/kubernetes/kubernetes/pull/98931), [@michaelbeaumont](https://github.com/michaelbeaumont)) [SIG Apps, Auth and Node]
-- Migrate `pkg/kubelet/(pod, pleg)` to structured logging ([#98990](https://github.com/kubernetes/kubernetes/pull/98990), [@gjkim42](https://github.com/gjkim42)) [SIG Instrumentation and Node]
-- Migrate pkg/kubelet/nodestatus to structured logging ([#99001](https://github.com/kubernetes/kubernetes/pull/99001), [@QiWang19](https://github.com/QiWang19)) [SIG Node]
-- Migrate pkg/kubelet/server logs to structured logging ([#98643](https://github.com/kubernetes/kubernetes/pull/98643), [@chenyw1990](https://github.com/chenyw1990)) [SIG Node]
-- Migrate proxy/winkernel/proxier.go logs to structured logging ([#98001](https://github.com/kubernetes/kubernetes/pull/98001), [@JornShen](https://github.com/JornShen)) [SIG Network and Windows]
-- Migrate scheduling_queue.go to structured logging ([#98358](https://github.com/kubernetes/kubernetes/pull/98358), [@tanjing2020](https://github.com/tanjing2020)) [SIG Scheduling]
-- Several flags related to the deprecated dockershim which are present in the kubelet command line are now deprecated. ([#98730](https://github.com/kubernetes/kubernetes/pull/98730), [@dims](https://github.com/dims)) [SIG Node]
-- The deprecated feature gates `CSIDriverRegistry`, `BlockVolume` and `CSIBlockVolume` are now unconditionally enabled and can no longer be specified in component invocations. ([#98021](https://github.com/kubernetes/kubernetes/pull/98021), [@gavinfish](https://github.com/gavinfish)) [SIG Storage]
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-- sigs.k8s.io/structured-merge-diff/v4: v4.0.2 → v4.0.3
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.21.0-alpha.3
-
-
-## Downloads for v1.21.0-alpha.3
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes.tar.gz) | 704ec916a1dbd134c54184d2652671f80ae09274f9d23dbbed312944ebeccbc173e2e6b6949b38bdbbfdaf8aa032844deead5efeda1b3150f9751386d9184bc8
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-src.tar.gz) | 57db9e7560cfc9c10e7059cb5faf9c4bd5eb8f9b7964f44f000a417021cf80873184b774e7c66c80d4aba84c14080c6bc335618db3d2e5f276436ae065e25408
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | e2706efda92d5cf4f8b69503bb2f7703a8754407eff7f199bb77847838070e720e5f572126c14daa4c0c03b59bb1a63c1dfdeb6e936a40eff1d5497e871e3409
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-386.tar.gz) | 007bb23c576356ed0890bdfd25a0f98d552599e0ffec19fb982591183c7c1f216d8a3ffa3abf15216be12ae5c4b91fdcd48a7306a2d26b007b86a6abd553fc61
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | 39504b0c610348beba60e8866fff265bad58034f74504951cd894c151a248db718d10f77ebc83f2c38b2d517f8513a46325b38889eefa261ca6dbffeceba50ff
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | 30bc2c40d0c759365422ad1651a6fb35909be771f463c5b971caf401f9209525d05256ab70c807e88628dd357c2896745eecf13eda0b748464da97d0a5ef2066
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | 085cdf574dc8fd33ece667130b8c45830b522a07860e03a2384283b1adea73a9652ef3dfaa566e69ee00aea1a6461608814b3ce7a3f703e4a934304f7ae12f97
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | b34b845037d83ea7b3e2d80a9ede4f889b71b17b93b1445f0d936a36e98c13ed6ada125630a68d9243a5fcd311ee37cdcc0c05da484da8488ea5060bc529dbfc
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | c4758adc7a404b776556efaa79655db2a70777c562145d6ea6887f3335988367a0c2fcd4383e469340f2a768b22e786951de212805ca1cb91104d41c21e0c9ce
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-windows-386.tar.gz) | f51edc79702bbd1d9cb3a672852a405e11b20feeab64c5411a7e85c9af304960663eb6b23ef96e0f8c44a722fecf58cb6d700ea2c42c05b3269d8efd5ad803f2
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | 6a3507ce4ac40a0dc7e4720538863fa15f8faf025085a032f34b8fa0f6fa4e8c26849baf649b5b32829b9182e04f82721b13950d31cf218c35be6bf1c05d6abf
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | 19181d162dfb0b30236e2bf1111000e037eece87c037ca2b24622ca94cb88db86aa4da4ca533522518b209bc9983bbfd6b880a7898e0da96b33f3f6c4690539b
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | 42a02f9e08a78ad5da6e5fa1ab12bf1e3c967c472fdbdadbd8746586da74dc8093682ba8513ff2a5301393c47ee9021b860e88ada56b13da386ef485708e46ca
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | 3c8ba8eb02f70061689bd7fab7813542005efe2edc6cfc6b7aecd03ffedf0b81819ad91d69fff588e83023d595eefbfe636aa55e1856add8733bf42fff3c748f
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | cd9e6537450411c39a06fd0b5819db3d16b668d403fb3627ec32c0e32dd1c4860e942934578ca0e1d1b8e6f21f450ff81e37e0cd46ff5c5faf7847ab074aefc5
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | ada3f65e53bc0e0c0229694dd48c425388089d6d77111a62476d1b08f6ad1d8ab3d60b9ed7d95ac1b42c2c6be8dc0618f40679717160769743c43583d8452362
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | ae0fec6aa59e49624b55d9a11c12fdf717ddfe04bdfd4f69965d03004a34e52ee4a3e83f7b61d0c6a86f43b72c99f3decb195b39ae529ef30526d18ec5f58f83
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | 9a48c140ab53b7ed8ecec6903988a1a474efc16d2538e5974bc9a12f0c9190be78c4f9e326bf4e982d0b7045a80b99dd0fda7e9b650663be5b89bfd991596746
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | 6912adbc9300344bea470d6435f7b387bfce59767078c11728ce59faf47cd3f72b41b9604fcc5cda45e9816fe939fbe2fb33e52a773e6ff2dfa9a615b4df6141
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | d66dccfe3e6ed6d81567c70703f15375a53992b3a5e2814b98c32e581b861ad95912e03ed2562415d087624c008038bb4a816611fa255442ae752968ea15856b
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | ad8c69a28f1fbafa3f1cb54909bfd3fc22b104bed63d7ca2b296208c9d43eb5f2943a0ff267da4c185186cdd9f7f77b315cd7f5f1bf9858c0bf42eceb9ac3c58
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | 91d723aa848a9cb028f5bcb41090ca346fb973961521d025c4399164de2c8029b57ca2c4daca560d3c782c05265d2eb0edb0abcce6f23d3efbecf2316a54d650
-
-## Changelog since v1.21.0-alpha.2
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - Newly provisioned PVs by gce-pd will no longer have the beta FailureDomain label. gce-pd volume plugin will start to have GA topology label instead. ([#98700](https://github.com/kubernetes/kubernetes/pull/98700), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider, Storage and Testing]
-  - Remove alpha CSIMigrationXXComplete flag and add alpha InTreePluginXXUnregister flag. Deprecate CSIMigrationvSphereComplete flag and it will be removed in 1.22. ([#98243](https://github.com/kubernetes/kubernetes/pull/98243), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Node and Storage]
- 
-## Changes by Kind
-
-### API Change
-
-- Adds support for portRange / EndPort in Network Policy ([#97058](https://github.com/kubernetes/kubernetes/pull/97058), [@rikatz](https://github.com/rikatz)) [SIG Apps and Network]
-- Fixes using server-side apply with APIService resources ([#98576](https://github.com/kubernetes/kubernetes/pull/98576), [@kevindelgado](https://github.com/kevindelgado)) [SIG API Machinery, Apps and Testing]
-- Kubernetes is now built using go1.15.7 ([#98363](https://github.com/kubernetes/kubernetes/pull/98363), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Node, Release and Testing]
-- Scheduler extender filter interface now can report unresolvable failed nodes in the new field `FailedAndUnresolvableNodes` of  `ExtenderFilterResult` struct. Nodes in this map will be skipped in the preemption phase. ([#92866](https://github.com/kubernetes/kubernetes/pull/92866), [@cofyc](https://github.com/cofyc)) [SIG Scheduling]
-
-### Feature
-
-- A lease can only attach up to 10k objects. ([#98257](https://github.com/kubernetes/kubernetes/pull/98257), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery]
-- Add ignore-errors flag for drain, support none-break drain in group ([#98203](https://github.com/kubernetes/kubernetes/pull/98203), [@yuzhiquan](https://github.com/yuzhiquan)) [SIG CLI]
-- Base-images: Update to debian-iptables:buster-v1.4.0
-  - Uses iptables 1.8.5
-  - base-images: Update to debian-base:buster-v1.3.0
-  - cluster/images/etcd: Build etcd:3.4.13-2 image
-    - Uses debian-base:buster-v1.3.0 ([#98401](https://github.com/kubernetes/kubernetes/pull/98401), [@pacoxu](https://github.com/pacoxu)) [SIG Testing]
-- Export NewDebuggingRoundTripper function and DebugLevel options in the k8s.io/client-go/transport package. ([#98324](https://github.com/kubernetes/kubernetes/pull/98324), [@atosatto](https://github.com/atosatto)) [SIG API Machinery]
-- Kubectl wait ensures that observedGeneration >= generation if applicable ([#97408](https://github.com/kubernetes/kubernetes/pull/97408), [@KnicKnic](https://github.com/KnicKnic)) [SIG CLI]
-- Kubernetes is now built using go1.15.8 ([#98834](https://github.com/kubernetes/kubernetes/pull/98834), [@cpanato](https://github.com/cpanato)) [SIG Cloud Provider, Instrumentation, Release and Testing]
-- New admission controller "denyserviceexternalips" is available.  Clusters which do not *need- the Service "externalIPs" feature should enable this controller and be more secure. ([#97395](https://github.com/kubernetes/kubernetes/pull/97395), [@thockin](https://github.com/thockin)) [SIG API Machinery]
-- Overall, enable the feature of `PreferNominatedNode` will  improve the performance of scheduling where preemption might frequently happen, but in theory, enable the feature of `PreferNominatedNode`, the pod might not be scheduled to the best candidate node in the cluster. ([#93179](https://github.com/kubernetes/kubernetes/pull/93179), [@chendave](https://github.com/chendave)) [SIG Scheduling and Testing]
-- Pause image upgraded to 3.4.1 in kubelet and kubeadm for both Linux and Windows. ([#98205](https://github.com/kubernetes/kubernetes/pull/98205), [@pacoxu](https://github.com/pacoxu)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Node, Testing and Windows]
-- The `ServiceAccountIssuerDiscovery` feature has graduated to GA, and is unconditionally enabled. The `ServiceAccountIssuerDiscovery` feature-gate will be removed in 1.22. ([#98553](https://github.com/kubernetes/kubernetes/pull/98553), [@mtaufen](https://github.com/mtaufen)) [SIG API Machinery, Auth and Testing]
-
-### Documentation
-
-- Feat: azure file migration go beta in 1.21. Feature gates CSIMigration to Beta (on by default) and CSIMigrationAzureFile to Beta (off by default since it requires installation of the AzureFile CSI Driver)
-  The in-tree AzureFile plugin "kubernetes.io/azure-file" is now deprecated and will be removed in 1.23. Users should enable CSIMigration + CSIMigrationAzureFile features and install the AzureFile CSI Driver (https://github.com/kubernetes-sigs/azurefile-csi-driver) to avoid disruption to existing Pod and PVC objects at that time.
-  Users should start using the AzureFile CSI Driver directly for any new volumes. ([#96293](https://github.com/kubernetes/kubernetes/pull/96293), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-
-### Failing Test
-
-- Kubelet: the HostPort implementation in dockershim was not taking into consideration the HostIP field, causing that the same HostPort can not be used with different IP addresses.
-  This bug causes the conformance test "HostPort validates that there is no conflict between pods with same hostPort but different hostIP and protocol" to fail. ([#98755](https://github.com/kubernetes/kubernetes/pull/98755), [@aojea](https://github.com/aojea)) [SIG Cloud Provider, Network and Node]
-
-### Bug or Regression
-
-- Fix NPE in ephemeral storage eviction ([#98261](https://github.com/kubernetes/kubernetes/pull/98261), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Fixed a bug that on k8s nodes, when the policy of INPUT chain in filter table is not ACCEPT, healthcheck nodeport would not work.
-  Added iptables rules to allow healthcheck nodeport traffic. ([#97824](https://github.com/kubernetes/kubernetes/pull/97824), [@hanlins](https://github.com/hanlins)) [SIG Network]
-- Fixed kube-proxy container image architecture for non amd64 images. ([#98526](https://github.com/kubernetes/kubernetes/pull/98526), [@saschagrunert](https://github.com/saschagrunert)) [SIG API Machinery, Release and Testing]
-- Fixed provisioning of Cinder volumes migrated to CSI when StorageClass with AllowedTopologies was used. ([#98311](https://github.com/kubernetes/kubernetes/pull/98311), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Fixes a panic in the disruption budget controller for PDB objects with invalid selectors ([#98750](https://github.com/kubernetes/kubernetes/pull/98750), [@mortent](https://github.com/mortent)) [SIG Apps]
-- Fixes connection errors when using `--volume-host-cidr-denylist` or `--volume-host-allow-local-loopback` ([#98436](https://github.com/kubernetes/kubernetes/pull/98436), [@liggitt](https://github.com/liggitt)) [SIG Network and Storage]
-- If the user specifies an invalid timeout in the request URL, the request will be aborted with an HTTP 400.
-  - in cases where the client specifies a timeout in the request URL, the overall request deadline is shortened now since the deadline is setup as soon as the request is received by the apiserver. ([#96901](https://github.com/kubernetes/kubernetes/pull/96901), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]
-- Kubeadm: Some text in the `kubeadm upgrade plan` output has changed. If you have scripts or other automation that parses this output, please review these changes and update your scripts to account for the new output. ([#98728](https://github.com/kubernetes/kubernetes/pull/98728), [@stmcginnis](https://github.com/stmcginnis)) [SIG Cluster Lifecycle]
-- Kubeadm: fix a bug where external credentials in an existing admin.conf prevented the CA certificate to be written in the cluster-info ConfigMap. ([#98882](https://github.com/kubernetes/kubernetes/pull/98882), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
-- Kubeadm: fix bad token placeholder text in "config print *-defaults --help" ([#98839](https://github.com/kubernetes/kubernetes/pull/98839), [@Mattias-](https://github.com/Mattias-)) [SIG Cluster Lifecycle]
-- Kubeadm: get k8s CI version markers from k8s infra bucket ([#98836](https://github.com/kubernetes/kubernetes/pull/98836), [@hasheddan](https://github.com/hasheddan)) [SIG Cluster Lifecycle and Release]
-- Mitigate CVE-2020-8555 for kube-up using GCE by preventing local loopback folume hosts. ([#97934](https://github.com/kubernetes/kubernetes/pull/97934), [@mattcary](https://github.com/mattcary)) [SIG Cloud Provider and Storage]
-- Remove CSI topology from migrated in-tree gcepd volume. ([#97823](https://github.com/kubernetes/kubernetes/pull/97823), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Cloud Provider and Storage]
-- Sync node status during kubelet node shutdown.
-  Adds an pod admission handler that rejects new pods when the node is in progress of shutting down. ([#98005](https://github.com/kubernetes/kubernetes/pull/98005), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Truncates a message if it hits the NoteLengthLimit when the scheduler records an event for the pod that indicates the pod has failed to schedule. ([#98715](https://github.com/kubernetes/kubernetes/pull/98715), [@carlory](https://github.com/carlory)) [SIG Scheduling]
-- We will no longer automatically delete all data when a failure is detected during creation of the volume data file on a CSI volume. Now we will only remove the data file and volume path. ([#96021](https://github.com/kubernetes/kubernetes/pull/96021), [@huffmanca](https://github.com/huffmanca)) [SIG Storage]
-
-### Other (Cleanup or Flake)
-
-- Fix the description of command line flags that can override --config ([#98254](https://github.com/kubernetes/kubernetes/pull/98254), [@changshuchao](https://github.com/changshuchao)) [SIG Scheduling]
-- Migrate scheduler/taint_manager.go structured logging ([#98259](https://github.com/kubernetes/kubernetes/pull/98259), [@tanjing2020](https://github.com/tanjing2020)) [SIG Apps]
-- Migrate staging/src/k8s.io/apiserver/pkg/admission logs to  structured logging ([#98138](https://github.com/kubernetes/kubernetes/pull/98138), [@lala123912](https://github.com/lala123912)) [SIG API Machinery]
-- Resolves flakes in the Ingress conformance tests due to conflicts with controllers updating the Ingress object ([#98430](https://github.com/kubernetes/kubernetes/pull/98430), [@liggitt](https://github.com/liggitt)) [SIG Network and Testing]
-- The default delegating authorization options now allow unauthenticated access to healthz, readyz, and livez.  A system:masters user connecting to an authz delegator will not perform an authz check. ([#98325](https://github.com/kubernetes/kubernetes/pull/98325), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth, Cloud Provider and Scheduling]
-- The e2e suite can be instructed not to wait for pods in kube-system to be ready or for all nodes to be ready by passing `--allowed-not-ready-nodes=-1` when invoking the e2e.test program. This allows callers to run subsets of the e2e suite in scenarios other than perfectly healthy clusters. ([#98781](https://github.com/kubernetes/kubernetes/pull/98781), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
-- The feature gates `WindowsGMSA` and `WindowsRunAsUserName` that are GA since v1.18 are now removed. ([#96531](https://github.com/kubernetes/kubernetes/pull/96531), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Node and Windows]
-- The new `-gce-zones` flag on the `e2e.test` binary instructs tests that check for information about how the cluster interacts with the cloud to limit their queries to the provided zone list. If not specified, the current behavior of asking the cloud provider for all available zones in multi zone clusters is preserved. ([#98787](https://github.com/kubernetes/kubernetes/pull/98787), [@smarterclayton](https://github.com/smarterclayton)) [SIG API Machinery, Cluster Lifecycle and Testing]
-
-## Dependencies
-
-### Added
-- github.com/moby/spdystream: [v0.2.0](https://github.com/moby/spdystream/tree/v0.2.0)
-
-### Changed
-- github.com/NYTimes/gziphandler: [56545f4 → v1.1.1](https://github.com/NYTimes/gziphandler/compare/56545f4...v1.1.1)
-- github.com/container-storage-interface/spec: [v1.2.0 → v1.3.0](https://github.com/container-storage-interface/spec/compare/v1.2.0...v1.3.0)
-- github.com/go-logr/logr: [v0.2.0 → v0.4.0](https://github.com/go-logr/logr/compare/v0.2.0...v0.4.0)
-- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
-- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
-- github.com/yuin/goldmark: [v1.1.27 → v1.2.1](https://github.com/yuin/goldmark/compare/v1.1.27...v1.2.1)
-- golang.org/x/sync: cd5d95a → 67f06af
-- golang.org/x/tools: c1934b7 → 113979e
-- k8s.io/klog/v2: v2.4.0 → v2.5.0
-- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.14 → v0.0.15
-
-### Removed
-- github.com/docker/spdystream: [449fdfc](https://github.com/docker/spdystream/tree/449fdfc)
-
-
-
-# v1.21.0-alpha.2
-
-
-## Downloads for v1.21.0-alpha.2
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes.tar.gz) | 6836f6c8514253fe0831fd171fc4ed92eb6d9a773491c8dc82b90d171a1b10076bd6bfaea56ec1e199c5f46c273265bdb9f174f0b2d99c5af1de4c99b862329e
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-src.tar.gz) | d137694804741a05ab09e5f9a418448b66aba0146c028eafce61bcd9d7c276521e345ce9223ffbc703e8172041d58dfc56a3242a4df3686f24905a4541fcd306
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | 9478b047a97717953f365c13a098feb7e3cb30a3df22e1b82aa945f2208dcc5cb90afc441ba059a3ae7aafb4ee000ec3a52dc65a8c043a5ac7255a391c875330
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-386.tar.gz) | 44c8dd4b1ddfc256d35786c8abf45b0eb5f0794f5e310d2efc865748adddc50e8bf38aa71295ae8a82884cb65f2e0b9b0737b000f96fd8f2d5c19971d7c4d8e8
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | e1291989892769de6b978c17b8612b94da6f3b735a4d895100af622ca9ebb968c75548afea7ab00445869625dd0da3afec979e333afbb445805f5d31c1c13cc7
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | 3c4bcb8cbe73822d68a2f62553a364e20bec56b638c71d0f58679b4f4b277d809142346f18506914e694f6122a3e0f767eab20b7b1c4dbb79e4c5089981ae0f1
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | 9389974a790268522e187f5ba5237f3ee4684118c7db76bc3d4164de71d8208702747ec333b204c7a78073ab42553cbbce13a1883fab4fec617e093b05fab332
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | 63399e53a083b5af3816c28ff162c9de6b64c75da4647f0d6bbaf97afdf896823cb1e556f2abac75c6516072293026d3ff9f30676fd75143ac6ca3f4d21f4327
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | 50898f197a9d923971ff9046c9f02779b57f7b3cea7da02f3ea9bab8c08d65a9c4a7531a2470fa14783460f52111a52b96ebf916c0a1d8215b4070e4e861c1b0
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-windows-386.tar.gz) | a7743e839e1aa19f5ee20b6ee5000ac8ef9e624ac5be63bb574fad6992e4b9167193ed07e03c9bc524e88bfeed66c95341a38a03bff1b10bc9910345f33019f0
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | 5f1d19c230bd3542866d16051808d184e9dd3e2f8c001ed4cee7b5df91f872380c2bf56a3add8c9413ead9d8c369efce2bcab4412174df9b823d3592677bf74e
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | ef2cac10febde231aeb6f131e589450c560eeaab8046b49504127a091cddc17bc518c2ad56894a6a033033ab6fc6e121b1cc23691683bc36f45fe6b1dd8e0510
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | d11c9730307f08e80b2b8a7c64c3e9a9e43c622002e377dfe3a386f4541e24adc79a199a6f280f40298bb36793194fd44ed45defe8a3ee54a9cb1386bc26e905
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | 28f8c32bf98ee1add7edf5d341c3bac1afc0085f90dcbbfb8b27a92087f13e2b53c327c8935ee29bf1dc3160655b32bbe3e29d5741a8124a3848a777e7d42933
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | 99ae8d44b0de3518c27fa8bbddd2ecf053dfb789fb9d65f8a4ecf4c8331cf63d2f09a41c2bcd5573247d5f66a1b2e51944379df1715017d920d521b98589508a
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | f8c0e954a2dfc6845614488dadeed069cc7f3f08e33c351d7a77c6ef97867af590932e8576d12998a820a0e4d35d2eee797c764e2810f09ab1e90a5acaeaad33
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | c5456d50bfbe0d75fb150b3662ed7468a0abd3970792c447824f326894382c47bbd3a2cc5a290f691c8c09585ff6fe505ab86b4aff2b7e5ccee11b5e6354ae6c
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | 335b5cd8672e053302fd94d932fb2fa2e48eeeb1799650b3f93acdfa635e03a8453637569ab710c46885c8317759f4c60aaaf24dca9817d9fa47500fe4a3ca53
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | 3ee87dbeed8ace9351ac89bdaf7274dd10b4faec3ceba0825f690ec7a2bb7eb7c634274a1065a0939eec8ff3e43f72385f058f4ec141841550109e775bc5eff9
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | 6956f965b8d719b164214ec9195fdb2c776b907fe6d2c524082f00c27872a73475927fd7d2a994045ce78f6ad2aa5aeaf1eb5514df1810d2cfe342fd4e5ce4a1
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | 3b643aa905c709c57083c28dd9e8ffd88cb64466cda1499da7fc54176b775003e08b9c7a07b0964064df67c8142f6f1e6c13bfc261bd65fb064049920bfa57d0
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | b2e6d6fb0091f2541f9925018c2bdbb0138a95bab06b4c6b38abf4b7144b2575422263b78fb3c6fd09e76d90a25a8d35a6d4720dc169794d42c95aa22ecc6d5f
-
-## Changelog since v1.21.0-alpha.1
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - Remove storage metrics `storage_operation_errors_total`, since we already have `storage_operation_status_count`.And add new field `status` for `storage_operation_duration_seconds`, so that we can know about all status storage operation latency. ([#98332](https://github.com/kubernetes/kubernetes/pull/98332), [@JornShen](https://github.com/JornShen)) [SIG Instrumentation and Storage]
- 
-## Changes by Kind
-
-### Deprecation
-
-- Remove the TokenRequest and TokenRequestProjection feature gates ([#97148](https://github.com/kubernetes/kubernetes/pull/97148), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
-- Removing experimental windows container hyper-v support with Docker ([#97141](https://github.com/kubernetes/kubernetes/pull/97141), [@wawa0210](https://github.com/wawa0210)) [SIG Node and Windows]
-- The `export` query parameter (inconsistently supported by API resources and deprecated in v1.14) is fully removed.  Requests setting this query parameter will now receive a 400 status response. ([#98312](https://github.com/kubernetes/kubernetes/pull/98312), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
-
-### API Change
-
-- Enable SPDY pings to keep connections alive, so that `kubectl exec` and `kubectl port-forward` won't be interrupted. ([#97083](https://github.com/kubernetes/kubernetes/pull/97083), [@knight42](https://github.com/knight42)) [SIG API Machinery and CLI]
-
-### Documentation
-
-- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97935](https://github.com/kubernetes/kubernetes/pull/97935), [@adeniyistephen](https://github.com/adeniyistephen)) [SIG Release and Testing]
-- Set kubelet option `--volume-stats-agg-period` to negative value to disable volume calculations. ([#96675](https://github.com/kubernetes/kubernetes/pull/96675), [@pacoxu](https://github.com/pacoxu)) [SIG Node]
-
-### Bug or Regression
-
-- Clean ReplicaSet by revision instead of creation timestamp in deployment controller ([#97407](https://github.com/kubernetes/kubernetes/pull/97407), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
-- Ensure that client-go's EventBroadcaster is safe (non-racy) during shutdown. ([#95664](https://github.com/kubernetes/kubernetes/pull/95664), [@DirectXMan12](https://github.com/DirectXMan12)) [SIG API Machinery]
-- Fix azure file migration issue ([#97877](https://github.com/kubernetes/kubernetes/pull/97877), [@andyzhangx](https://github.com/andyzhangx)) [SIG Auth, Cloud Provider and Storage]
-- Fix kubelet from panic after getting the wrong signal ([#98200](https://github.com/kubernetes/kubernetes/pull/98200), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Fix repeatedly acquire the inhibit lock ([#98088](https://github.com/kubernetes/kubernetes/pull/98088), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Fixed a bug that the kubelet cannot start on BtrfS. ([#98042](https://github.com/kubernetes/kubernetes/pull/98042), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
-- Fixed an issue with garbage collection failing to clean up namespaced children of an object also referenced incorrectly by cluster-scoped children ([#98068](https://github.com/kubernetes/kubernetes/pull/98068), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Apps]
-- Fixed no effect namespace when exposing deployment with --dry-run=client. ([#97492](https://github.com/kubernetes/kubernetes/pull/97492), [@masap](https://github.com/masap)) [SIG CLI]
-- Fixing a bug where a failed node may not have the NoExecute taint set correctly ([#96876](https://github.com/kubernetes/kubernetes/pull/96876), [@howieyuen](https://github.com/howieyuen)) [SIG Apps and Node]
-- Indentation of `Resource Quota` block in kubectl describe namespaces output gets correct. ([#97946](https://github.com/kubernetes/kubernetes/pull/97946), [@dty1er](https://github.com/dty1er)) [SIG CLI]
-- KUBECTL_EXTERNAL_DIFF now accepts equal sign for additional parameters. ([#98158](https://github.com/kubernetes/kubernetes/pull/98158), [@dougsland](https://github.com/dougsland)) [SIG CLI]
-- Kubeadm: fix a bug where "kubeadm join" would not properly handle missing names for existing etcd members. ([#97372](https://github.com/kubernetes/kubernetes/pull/97372), [@ihgann](https://github.com/ihgann)) [SIG Cluster Lifecycle]
-- Kubelet should ignore cgroup driver check on Windows node. ([#97764](https://github.com/kubernetes/kubernetes/pull/97764), [@pacoxu](https://github.com/pacoxu)) [SIG Node and Windows]
-- Make podTopologyHints protected by lock ([#95111](https://github.com/kubernetes/kubernetes/pull/95111), [@choury](https://github.com/choury)) [SIG Node]
-- Readjust kubelet_containers_per_pod_count bucket ([#98169](https://github.com/kubernetes/kubernetes/pull/98169), [@wawa0210](https://github.com/wawa0210)) [SIG Instrumentation and Node]
-- Scores from InterPodAffinity have stronger differentiation. ([#98096](https://github.com/kubernetes/kubernetes/pull/98096), [@leileiwan](https://github.com/leileiwan)) [SIG Scheduling]
-- Specifying the KUBE_TEST_REPO environment variable when e2e tests are executed will instruct the test infrastructure to load that image from a location within the specified repo, using a predefined pattern. ([#93510](https://github.com/kubernetes/kubernetes/pull/93510), [@smarterclayton](https://github.com/smarterclayton)) [SIG Testing]
-- Static pods will be deleted gracefully. ([#98103](https://github.com/kubernetes/kubernetes/pull/98103), [@gjkim42](https://github.com/gjkim42)) [SIG Node]
-- Use network.Interface.VirtualMachine.ID to get the binded VM
-  Skip standalone VM when reconciling LoadBalancer ([#97635](https://github.com/kubernetes/kubernetes/pull/97635), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-
-### Other (Cleanup or Flake)
-
-- Kubeadm: change the default image repository for CI images from 'gcr.io/kubernetes-ci-images' to 'gcr.io/k8s-staging-ci-images' ([#97087](https://github.com/kubernetes/kubernetes/pull/97087), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Migrate generic_scheduler.go and types.go to structured logging. ([#98134](https://github.com/kubernetes/kubernetes/pull/98134), [@tanjing2020](https://github.com/tanjing2020)) [SIG Scheduling]
-- Migrate proxy/winuserspace/proxier.go logs to structured logging ([#97941](https://github.com/kubernetes/kubernetes/pull/97941), [@JornShen](https://github.com/JornShen)) [SIG Network]
-- Migrate staging/src/k8s.io/apiserver/pkg/audit/policy/reader.go logs to structured logging. ([#98252](https://github.com/kubernetes/kubernetes/pull/98252), [@lala123912](https://github.com/lala123912)) [SIG API Machinery and Auth]
-- Migrate staging\src\k8s.io\apiserver\pkg\endpoints logs to  structured logging ([#98093](https://github.com/kubernetes/kubernetes/pull/98093), [@lala123912](https://github.com/lala123912)) [SIG API Machinery]
-- Node ([#96552](https://github.com/kubernetes/kubernetes/pull/96552), [@pandaamanda](https://github.com/pandaamanda)) [SIG Apps, Cloud Provider, Node and Scheduling]
-- The kubectl alpha debug command was scheduled to be removed in v1.21. ([#98111](https://github.com/kubernetes/kubernetes/pull/98111), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
-- Update cri-tools to [v1.20.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.20.0) ([#97967](https://github.com/kubernetes/kubernetes/pull/97967), [@rajibmitra](https://github.com/rajibmitra)) [SIG Cloud Provider]
-- Windows nodes on GCE will take longer to start due to dependencies installed at node creation time. ([#98284](https://github.com/kubernetes/kubernetes/pull/98284), [@pjh](https://github.com/pjh)) [SIG Cloud Provider]
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-- github.com/google/cadvisor: [v0.38.6 → v0.38.7](https://github.com/google/cadvisor/compare/v0.38.6...v0.38.7)
-- k8s.io/gengo: 83324d8 → b6c5ce2
-
-### Removed
-_Nothing has changed._
-
-
-
-# v1.21.0-alpha.1
-
-
-## Downloads for v1.21.0-alpha.1
-
-### Source Code
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes.tar.gz) | b2bacd5c3fc9f829e6269b7d2006b0c6e464ff848bb0a2a8f2fe52ad2d7c4438f099bd8be847d8d49ac6e4087f4d74d5c3a967acd798e0b0cb4d7a2bdb122997
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-src.tar.gz) | 518ac5acbcf23902fb1b902b69dbf3e86deca5d8a9b5f57488a15f185176d5a109558f3e4df062366af874eca1bcd61751ee8098b0beb9bcdc025d9a1c9be693
-
-### Client binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | eaa7aea84a5ed954df5ec710cbeb6ec88b46465f43cb3d09aabe2f714b84a050a50bf5736089f09dbf1090f2e19b44823d656c917e3c8c877630756c3026f2b6
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-386.tar.gz) | 47f74b8d46ad1779c5b0b5f15aa15d5513a504eeb6f53db4201fbe9ff8956cb986b7c1b0e9d50a99f78e9e2a7f304f3fc1cc2fa239296d9a0dd408eb6069e975
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | 1a148e282628b008c8abd03dd12ec177ced17584b5115d92cd33dd251e607097d42e9da8c7089bd947134b900f85eb75a4740b6a5dd580c105455b843559df39
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | d13d2feb73bd032dc01f7e2955b98d8215a39fe1107d037a73fa1f7d06c3b93ebaa53ed4952d845c64454ef3cca533edb97132d234d50b6fb3bcbd8a8ad990eb
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | 8252105a17b09a78e9ad2c024e4e401a69764ac869708a071aaa06f81714c17b9e7c5b2eb8efde33f24d0b59f75c5da607d5e1e72bdf12adfbb8c829205cd1c1
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | 297a9082df4988389dc4be30eb636dff49f36f5d87047bab44745884e610f46a17ae3a08401e2cab155b7c439f38057bfd8288418215f7dd3bf6a49dbe61ea0e
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | 04c06490dd17cd5dccfd92bafa14acf64280ceaea370d9635f23aeb6984d1beae6d0d1d1506edc6f30f927deeb149b989d3e482b47fbe74008b371f629656e79
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-windows-386.tar.gz) | ec6e9e87a7d685f8751d7e58f24f417753cff5554a7229218cb3a08195d461b2e12409344950228e9fbbc92a8a06d35dd86242da6ff1e6652ec1fae0365a88c1
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | 51039e6221d3126b5d15e797002ae01d4f0b10789c5d2056532f27ef13f35c5a2e51be27764fda68e8303219963126559023aed9421313bec275c0827fbcaf8a
-
-### Server binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | 4edf820930c88716263560275e3bd7fadb8dc3700b9f8e1d266562e356e0abeb1a913f536377dab91218e3940b447d6bf1da343b85da25c2256dc4dcde5798dd
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | b15213e53a8ab4ba512ce6ef9ad42dd197d419c61615cd23de344227fd846c90448d8f3d98e555b63ba5b565afa627cca6b7e3990ebbbba359c96f2391302df1
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | 5be29cca9a9358fc68351ee63e99d57dc2ffce6e42fc3345753dbbf7542ff2d770c4852424158540435fa6e097ce3afa9b13affc40c8b3b69fe8406798f8068f
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | 89fd99ab9ce85db0b94b86709932105efc883cc93959cf7ea9a39e79a4acea23064d7010eeb577450cccabe521c04b7ba47bbec212ed37edeed7cb04bad34518
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | 2fbc30862c77d247aa8d96ab9d1a144599505287b0033a3a2d0988958e7bb2f2e8b67f52c1fec74b4ec47d74ba22cd0f6cb5c4228acbaa72b1678d5fece0254d
-
-### Node binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | 95658d321a0a371c0900b401d1469d96915310afbc4e4b9b11f031438bb188513b57d5a60b5316c3b0c18f541cda6f0ac42f59a76495f8abc743a067115da23a
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | f375acfb42aad6c65b833c270e7e3acfe9cd1d6b2441c33874e77faae263957f7acfe86f1b71f14298118595e4cc6952c7dea0c832f7f2e72428336f13034362
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | 43b4baccd58d74e7f48d096ab92f2bbbcdf47e30e7a3d2b56c6cc9f90002cfd4fefaac894f69bd5f9f4dbdb09a4749a77eb76b1b97d91746bd96fe94457879ab
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | e7962b522c6c7c14b9ee4c1d254d8bdd9846b2b33b0443fc9c4a41be6c40e5e6981798b720f0148f36263d5cc45d5a2bb1dd2f9ab2838e3d002e45b9bddeb7bf
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | 49ebc97f01829e65f7de15be00b882513c44782eaadd1b1825a227e3bd3c73cc6aca8345af05b303d8c43aa2cb944a069755b2709effb8cc22eae621d25d4ba5
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.21.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | 6e0fd7724b09e6befbcb53b33574e97f2db089f2eee4bbf391abb7f043103a5e6e32e3014c0531b88f9a3ca88887bbc68625752c44326f98dd53adb3a6d1bed8
-
-## Changelog since v1.20.0
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
- - Kube-proxy's IPVS proxy mode no longer sets the net.ipv4.conf.all.route_localnet sysctl parameter. Nodes upgrading will have net.ipv4.conf.all.route_localnet set to 1 but new nodes will inherit the system default (usually 0). If you relied on any behavior requiring net.ipv4.conf.all.route_localnet, you must set ensure it is enabled as kube-proxy will no longer set it automatically. This change helps to further mitigate CVE-2020-8558. ([#92938](https://github.com/kubernetes/kubernetes/pull/92938), [@lbernail](https://github.com/lbernail)) [SIG Network and Release]
- 
-## Changes by Kind
-
-### Deprecation
-
-- Deprecate the `topologyKeys` field in Service. This capability will be replaced with upcoming work around Topology Aware Subsetting and Service Internal Traffic Policy. ([#96736](https://github.com/kubernetes/kubernetes/pull/96736), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps]
-- Kubeadm: deprecated command "alpha selfhosting pivot" is removed now. ([#97627](https://github.com/kubernetes/kubernetes/pull/97627), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubeadm: graduate the command `kubeadm alpha kubeconfig user` to `kubeadm kubeconfig user`. The `kubeadm alpha kubeconfig user` command is deprecated now. ([#97583](https://github.com/kubernetes/kubernetes/pull/97583), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Kubeadm: the "kubeadm alpha certs" command is removed now, please use "kubeadm certs" instead. ([#97706](https://github.com/kubernetes/kubernetes/pull/97706), [@knight42](https://github.com/knight42)) [SIG Cluster Lifecycle]
-- Remove the deprecated metrics "scheduling_algorithm_preemption_evaluation_seconds" and "binding_duration_seconds", suggest to use "scheduler_framework_extension_point_duration_seconds" instead. ([#96447](https://github.com/kubernetes/kubernetes/pull/96447), [@chendave](https://github.com/chendave)) [SIG Cluster Lifecycle, Instrumentation, Scheduling and Testing]
-- The PodSecurityPolicy API is deprecated in 1.21, and will no longer be served starting in 1.25. ([#97171](https://github.com/kubernetes/kubernetes/pull/97171), [@deads2k](https://github.com/deads2k)) [SIG Auth and CLI]
-
-### API Change
-
-- Change the APIVersion proto name of BoundObjectRef from aPIVersion to apiVersion. ([#97379](https://github.com/kubernetes/kubernetes/pull/97379), [@kebe7jun](https://github.com/kebe7jun)) [SIG Auth]
-- Promote Immutable Secrets/ConfigMaps feature to Stable.
-  This allows to set `Immutable` field in Secrets or ConfigMap object to mark their contents as immutable. ([#97615](https://github.com/kubernetes/kubernetes/pull/97615), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Architecture, Node and Testing]
-
-### Feature
-
-- Add flag --lease-max-object-size and metric etcd_lease_object_counts for kube-apiserver to config and observe max objects attached to a single etcd lease. ([#97480](https://github.com/kubernetes/kubernetes/pull/97480), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery, Instrumentation and Scalability]
-- Add flag --lease-reuse-duration-seconds for kube-apiserver to config etcd lease reuse duration. ([#97009](https://github.com/kubernetes/kubernetes/pull/97009), [@lingsamuel](https://github.com/lingsamuel)) [SIG API Machinery and Scalability]
-- Adds the ability to pass --strict-transport-security-directives to the kube-apiserver to set the HSTS header appropriately.  Be sure you understand the consequences to browsers before setting this field. ([#96502](https://github.com/kubernetes/kubernetes/pull/96502), [@249043822](https://github.com/249043822)) [SIG Auth]
-- Kubeadm now includes CoreDNS v1.8.0. ([#96429](https://github.com/kubernetes/kubernetes/pull/96429), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
-- Kubeadm: add support for certificate chain validation. When using kubeadm in external CA mode, this allows an intermediate CA to be used to sign the certificates. The intermediate CA certificate must be appended to each signed certificate for this to work correctly. ([#97266](https://github.com/kubernetes/kubernetes/pull/97266), [@robbiemcmichael](https://github.com/robbiemcmichael)) [SIG Cluster Lifecycle]
-- Kubeadm: amend the node kernel validation to treat CGROUP_PIDS, FAIR_GROUP_SCHED as required and CFS_BANDWIDTH, CGROUP_HUGETLB as optional ([#96378](https://github.com/kubernetes/kubernetes/pull/96378), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
-- The Kubernetes pause image manifest list now contains an image for Windows Server 20H2. ([#97322](https://github.com/kubernetes/kubernetes/pull/97322), [@claudiubelu](https://github.com/claudiubelu)) [SIG Windows]
-- The apimachinery util/net function used to detect the bind address `ResolveBindAddress()`
-  takes into consideration global ip addresses on loopback interfaces when:
-      - the host has default routes
-      - there are no global IPs on those interfaces.
-  in order to support more complex network scenarios like BGP Unnumbered RFC 5549 ([#95790](https://github.com/kubernetes/kubernetes/pull/95790), [@aojea](https://github.com/aojea)) [SIG Network]
-
-### Bug or Regression
-
-- ## Changelog
-  
-  ### General
-  - Fix priority expander falling back to a random choice even though there is a higher priority option to choose
-  - Clone `kubernetes/kubernetes` in `update-vendor.sh` shallowly, instead of fetching all revisions
-  - Speed up binpacking by reducing the number of PreFilter calls (call once per pod instead of #pods*#nodes times)
-  - Speed up finding unneeded nodes by 5x+ in very large clusters by reducing the number of PreFilter calls
-  - Expose `--max-nodes-total` as a metric
-  - Errors in `IncreaseSize` changed from type `apiError` to `cloudProviderError`
-  - Make `build-in-docker` and `test-in-docker` work on Linux systems with SELinux enabled
-  - Fix an error where existing nodes were not considered as destinations while finding place for pods in scale-down simulations
-  - Remove redundant log lines and reduce severity around parsing kubeEnv
-  - Don't treat nodes created by virtual kubelet as nodes from non-autoscaled node groups
-  - Remove redundant logging around calculating node utilization
-  - Add configurable `--network` and `--rm` flags for docker in `Makefile`
-  - Subtract DaemonSet pods' requests from node allocatable in the denominator while computing node utilization
-  - Include taints by condition when determining if a node is unready/still starting
-  - Fix `update-vendor.sh` to work on OSX and zsh
-  - Add best-effort eviction for DaemonSet pods while scaling down non-empty nodes
-  - Add build support for ARM64
-  
-  ### AliCloud
-  - Add missing daemonsets and replicasets to ALI example cluster role
-  
-  ### Apache CloudStack
-  - Add support for Apache CloudStack
-  
-  ### AWS
-  - Regenerate list of EC2 instances
-  - Fix pricing endpoint in AWS China Region
-  
-  ### Azure
-  - Add optional jitter on initial VMSS VM cache refresh, keep the refreshes spread over time
-  - Serve from cache for the whole period of ongoing throttling
-  - Fix unwanted VMSS VMs cache invalidations
-  - Enforce setting the number of retries if cloud provider backoff is enabled
-  - Don't update capacity if VMSS provisioning state is updating
-  - Support allocatable resources overrides via VMSS tags
-  - Add missing stable labels in template nodes
-  - Proactively set instance status to deleting on node deletions
-  
-  ### Cluster API
-  - Migrate interaction with the API from using internal types to using Unstructured
-  - Improve tests to work better with constrained resources
-  - Add support for node autodiscovery
-  - Add support for `--cloud-config`
-  - Update group identifier to use for Cluster API annotations
-  
-  ### Exoscale
-  - Add support for Exoscale
-  
-  ### GCE
-  - Decrease the number of GCE Read Requests made while deleting nodes
-  - Base pricing of custom instances on their instance family type
-  - Add pricing information for missing machine types
-  - Add pricing information for different GPU types
-  - Ignore the new `topology.gke.io/zone` label when comparing groups
-  - Add missing stable labels to template nodes
-  
-  ### HuaweiCloud
-  - Add auto scaling group support
-  - Implement node group by AS
-  - Implement getting desired instance number of node group
-  - Implement increasing node group size
-  - Implement TemplateNodeInfo
-  - Implement caching instances
-  
-  ### IONOS
-  - Add support for IONOS
-  
-  ### Kubemark
-  - Skip non-kubemark nodes while computing node infos for node groups.
-  
-  ### Magnum
-  - Add Magnum support in the Cluster Autoscaler helm chart
-  
-  ### Packet
-  - Allow empty nodepools
-  - Add support for multiple nodepools
-  - Add pricing support
-  
-  ## Image
-  Image: `k8s.gcr.io/autoscaling/cluster-autoscaler:v1.20.0` ([#97011](https://github.com/kubernetes/kubernetes/pull/97011), [@towca](https://github.com/towca)) [SIG Cloud Provider]
-- AcceleratorStats will be available in the Summary API of kubelet when cri_stats_provider is used. ([#96873](https://github.com/kubernetes/kubernetes/pull/96873), [@ruiwen-zhao](https://github.com/ruiwen-zhao)) [SIG Node]
-- Add limited lines to log when having tail option ([#93920](https://github.com/kubernetes/kubernetes/pull/93920), [@zhouya0](https://github.com/zhouya0)) [SIG Node]
-- Avoid systemd-logind loading configuration warning ([#97950](https://github.com/kubernetes/kubernetes/pull/97950), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
-- Cloud-controller-manager: routes controller should not depend on --allocate-node-cidrs ([#97029](https://github.com/kubernetes/kubernetes/pull/97029), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cloud Provider and Testing]
-- Copy annotations with empty value when deployment rolls back ([#94858](https://github.com/kubernetes/kubernetes/pull/94858), [@waynepeking348](https://github.com/waynepeking348)) [SIG Apps]
-- Detach volumes from vSphere nodes not tracked by attach-detach controller ([#96689](https://github.com/kubernetes/kubernetes/pull/96689), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
-- Fix kubectl label error when local=true is set. ([#97440](https://github.com/kubernetes/kubernetes/pull/97440), [@pandaamanda](https://github.com/pandaamanda)) [SIG CLI]
-- Fix Azure file share not deleted issue when the namespace is deleted ([#97417](https://github.com/kubernetes/kubernetes/pull/97417), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix CVE-2020-8555 for Gluster client connections. ([#97922](https://github.com/kubernetes/kubernetes/pull/97922), [@liggitt](https://github.com/liggitt)) [SIG Storage]
-- Fix counting error in service/nodeport/loadbalancer quota check ([#97451](https://github.com/kubernetes/kubernetes/pull/97451), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Network and Testing]
-- Fix kubectl-convert import known versions ([#97754](https://github.com/kubernetes/kubernetes/pull/97754), [@wzshiming](https://github.com/wzshiming)) [SIG CLI and Testing]
-- Fix missing cadvisor machine metrics. ([#97006](https://github.com/kubernetes/kubernetes/pull/97006), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node]
-- Fix nil VMSS name when setting service to auto mode ([#97366](https://github.com/kubernetes/kubernetes/pull/97366), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable ([#95269](https://github.com/kubernetes/kubernetes/pull/95269), [@SataQiu](https://github.com/SataQiu)) [SIG Node]
-- Fix the regression with the slow pods termination. Before this fix pods may take an additional time to terminate - up to one minute. Reversing the change that ensured that CNI resources cleaned up when the pod is removed on API server. ([#97980](https://github.com/kubernetes/kubernetes/pull/97980), [@SergeyKanzhelev](https://github.com/SergeyKanzhelev)) [SIG Node]
-- Fix to recover CSI volumes from certain dangling attachments ([#96617](https://github.com/kubernetes/kubernetes/pull/96617), [@yuga711](https://github.com/yuga711)) [SIG Apps and Storage]
-- Fix: azure file latency issue for metadata-heavy workloads ([#97082](https://github.com/kubernetes/kubernetes/pull/97082), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fixed Cinder volume IDs on OpenStack Train ([#96673](https://github.com/kubernetes/kubernetes/pull/96673), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider]
-- Fixed FibreChannel volume plugin corrupting filesystems on detach of multipath volumes. ([#97013](https://github.com/kubernetes/kubernetes/pull/97013), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Fixed a bug in kubelet that will saturate CPU utilization after containerd got restarted. ([#97174](https://github.com/kubernetes/kubernetes/pull/97174), [@hanlins](https://github.com/hanlins)) [SIG Node]
-- Fixed bug in CPUManager with race on container map access ([#97427](https://github.com/kubernetes/kubernetes/pull/97427), [@klueska](https://github.com/klueska)) [SIG Node]
-- Fixed cleanup of block devices when /var/lib/kubelet is a symlink. ([#96889](https://github.com/kubernetes/kubernetes/pull/96889), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- GCE Internal LoadBalancer sync loop will now release the ILB IP address upon sync failure. An error in ILB forwarding rule creation will no longer leak IP addresses. ([#97740](https://github.com/kubernetes/kubernetes/pull/97740), [@prameshj](https://github.com/prameshj)) [SIG Cloud Provider and Network]
-- Ignore update pod with no new images in alwaysPullImages admission controller ([#96668](https://github.com/kubernetes/kubernetes/pull/96668), [@pacoxu](https://github.com/pacoxu)) [SIG Apps, Auth and Node]
-- Kubeadm now installs version 3.4.13 of etcd when creating a cluster with v1.19 ([#97244](https://github.com/kubernetes/kubernetes/pull/97244), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Kubeadm: avoid detection of the container runtime for commands that do not need it ([#97625](https://github.com/kubernetes/kubernetes/pull/97625), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]
-- Kubeadm: fix a bug in the host memory detection code on 32bit Linux platforms ([#97403](https://github.com/kubernetes/kubernetes/pull/97403), [@abelbarrera15](https://github.com/abelbarrera15)) [SIG Cluster Lifecycle]
-- Kubeadm: fix a bug where "kubeadm upgrade" commands can fail if CoreDNS v1.8.0 is installed. ([#97919](https://github.com/kubernetes/kubernetes/pull/97919), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Performance regression [#97685](https://github.com/kubernetes/kubernetes/issues/97685) has been fixed. ([#97860](https://github.com/kubernetes/kubernetes/pull/97860), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery]
-- Remove deprecated --cleanup-ipvs flag of kube-proxy, and make --cleanup flag always to flush IPVS ([#97336](https://github.com/kubernetes/kubernetes/pull/97336), [@maaoBit](https://github.com/maaoBit)) [SIG Network]
-- The current version of the container image publicly exposed IP serving a /metrics endpoint to the Internet. The new version of the container image serves /metrics endpoint on a different port. ([#97621](https://github.com/kubernetes/kubernetes/pull/97621), [@vbannai](https://github.com/vbannai)) [SIG Cloud Provider]
-- Use force unmount for NFS volumes if regular mount fails after 1 minute timeout ([#96844](https://github.com/kubernetes/kubernetes/pull/96844), [@gnufied](https://github.com/gnufied)) [SIG Storage]
-- Users will see increase in time for deletion of pods and also guarantee that removal of pod from api server  would mean deletion of all the resources from container runtime. ([#92817](https://github.com/kubernetes/kubernetes/pull/92817), [@kmala](https://github.com/kmala)) [SIG Node]
-- Using exec auth plugins with kubectl no longer results in warnings about constructing many client instances from the same exec auth config. ([#97857](https://github.com/kubernetes/kubernetes/pull/97857), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Auth]
-- Warning about using a deprecated volume plugin is logged only once. ([#96751](https://github.com/kubernetes/kubernetes/pull/96751), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-
-### Other (Cleanup or Flake)
-
-- Bump github.com/Azure/go-autorest/autorest to v0.11.12 ([#97033](https://github.com/kubernetes/kubernetes/pull/97033), [@patrickshan](https://github.com/patrickshan)) [SIG API Machinery, CLI, Cloud Provider and Cluster Lifecycle]
-- Delete deprecated mixed protocol annotation ([#97096](https://github.com/kubernetes/kubernetes/pull/97096), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Kube-proxy: Traffic from the cluster directed to ExternalIPs is always sent directly to the Service. ([#96296](https://github.com/kubernetes/kubernetes/pull/96296), [@aojea](https://github.com/aojea)) [SIG Network and Testing]
-- Kubeadm: fix a whitespace issue in the output of the "kubeadm join" command shown as the output of "kubeadm init" and "kubeadm token create --print-join-command" ([#97413](https://github.com/kubernetes/kubernetes/pull/97413), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: improve the error messaging when the user provides an invalid discovery token CA certificate hash. ([#97290](https://github.com/kubernetes/kubernetes/pull/97290), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Migrate log messages in pkg/scheduler/{scheduler.go,factory.go} to structured logging ([#97509](https://github.com/kubernetes/kubernetes/pull/97509), [@aldudko](https://github.com/aldudko)) [SIG Scheduling]
-- Migrate proxy/iptables/proxier.go logs to structured logging ([#97678](https://github.com/kubernetes/kubernetes/pull/97678), [@JornShen](https://github.com/JornShen)) [SIG Network]
-- Migrate some scheduler log messages to structured logging ([#97349](https://github.com/kubernetes/kubernetes/pull/97349), [@aldudko](https://github.com/aldudko)) [SIG Scheduling]
-- NONE ([#97167](https://github.com/kubernetes/kubernetes/pull/97167), [@geegeea](https://github.com/geegeea)) [SIG Node]
-- NetworkPolicy validation framework optimizations for rapidly verifying CNI's work correctly across several pods and namespaces ([#91592](https://github.com/kubernetes/kubernetes/pull/91592), [@jayunit100](https://github.com/jayunit100)) [SIG Network, Storage and Testing]
-- Official support to build kubernetes with docker-machine / remote docker is removed. This change does not affect building kubernetes with docker locally. ([#97618](https://github.com/kubernetes/kubernetes/pull/97618), [@jherrera123](https://github.com/jherrera123)) [SIG Release and Testing]
-- Scheduler plugin validation now provides all errors detected instead of the first one. ([#96745](https://github.com/kubernetes/kubernetes/pull/96745), [@lingsamuel](https://github.com/lingsamuel)) [SIG Node, Scheduling and Testing]
-- Storage related e2e testsuite redesign & cleanup ([#96573](https://github.com/kubernetes/kubernetes/pull/96573), [@Jiawei0227](https://github.com/Jiawei0227)) [SIG Storage and Testing]
-- The OIDC authenticator no longer waits 10 seconds before attempting to fetch the metadata required to verify tokens. ([#97693](https://github.com/kubernetes/kubernetes/pull/97693), [@enj](https://github.com/enj)) [SIG API Machinery and Auth]
-- The `AttachVolumeLimit` feature gate that is GA since v1.17 is now removed. ([#96539](https://github.com/kubernetes/kubernetes/pull/96539), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Storage]
-- The `CSINodeInfo` feature gate that is GA since v1.17 is unconditionally enabled, and can no longer be specified via the `--feature-gates` argument. ([#96561](https://github.com/kubernetes/kubernetes/pull/96561), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps, Auth, Scheduling, Storage and Testing]
-- The deprecated feature gates `RotateKubeletClientCertificate`, `AttachVolumeLimit`, `VolumePVCDataSource` and `EvenPodsSpread` are now unconditionally enabled and can no longer be specified in component invocations. ([#97306](https://github.com/kubernetes/kubernetes/pull/97306), [@gavinfish](https://github.com/gavinfish)) [SIG Node, Scheduling and Storage]
-- `ServiceNodeExclusion`, `NodeDisruptionExclusion` and `LegacyNodeRoleBehavior`(locked to false) features have been promoted to GA. 
-  To prevent control plane nodes being added to load balancers automatically, upgrade users need to add "node.kubernetes.io/exclude-from-external-load-balancers"  label to control plane nodes. ([#97543](https://github.com/kubernetes/kubernetes/pull/97543), [@pacoxu](https://github.com/pacoxu)) [SIG API Machinery, Apps, Cloud Provider and Network]
-
-### Uncategorized
-
-- Adding Brazilian Portuguese translation for kubectl ([#61595](https://github.com/kubernetes/kubernetes/pull/61595), [@cpanato](https://github.com/cpanato)) [SIG CLI]
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-- github.com/Azure/go-autorest/autorest: [v0.11.1 → v0.11.12](https://github.com/Azure/go-autorest/autorest/compare/v0.11.1...v0.11.12)
-- github.com/coredns/corefile-migration: [v1.0.10 → v1.0.11](https://github.com/coredns/corefile-migration/compare/v1.0.10...v1.0.11)
-- github.com/golang/mock: [v1.4.1 → v1.4.4](https://github.com/golang/mock/compare/v1.4.1...v1.4.4)
-- github.com/google/cadvisor: [v0.38.5 → v0.38.6](https://github.com/google/cadvisor/compare/v0.38.5...v0.38.6)
-- github.com/heketi/heketi: [c2e2a4a → v10.2.0+incompatible](https://github.com/heketi/heketi/compare/c2e2a4a...v10.2.0)
-- github.com/miekg/dns: [v1.1.4 → v1.1.35](https://github.com/miekg/dns/compare/v1.1.4...v1.1.35)
-- k8s.io/system-validators: v1.2.0 → v1.3.0
-
-### Removed
-- rsc.io/quote/v3: v3.1.0
-- rsc.io/sampler: v1.3.0
diff --git a/content/en/releases/OWNERS b/content/en/releases/OWNERS
new file mode 100644
index 0000000000..bf258efe7c
--- /dev/null
+++ b/content/en/releases/OWNERS
@@ -0,0 +1,15 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# This is the directory for English source content.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+  - sig-docs-en-reviews
+  - release-engineering-reviewers
+
+approvers:
+  - sig-docs-en-owners
+  - release-engineering-approvers
+
+labels:
+- sig/release
\ No newline at end of file
diff --git a/content/en/releases/_index.md b/content/en/releases/_index.md
new file mode 100644
index 0000000000..af7819a0c1
--- /dev/null
+++ b/content/en/releases/_index.md
@@ -0,0 +1,27 @@
+---
+linktitle: Release History
+title: Releases
+type: docs
+---
+
+
+<!-- overview -->
+
+The Kubernetes project maintains release branches for the most recent three minor releases ({{< skew latestVersion >}}, {{< skew prevMinorVersion >}}, {{< skew oldestMinorVersion >}}).  Kubernetes 1.19 and newer receive approximately 1 year of patch support. Kubernetes 1.18 and older received approximately 9 months of patch support.
+
+Kubernetes versions are expressed as **x.y.z**,
+where **x** is the major version, **y** is the minor version, and **z** is the patch version, following [Semantic Versioning](https://semver.org/) terminology.
+
+More information in the [version skew policy](/releases/version-skew-policy/) document.
+
+<!-- body -->
+
+## Release History
+
+{{< release-data >}}
+
+## Upcoming Release
+
+Check out the [schedule](https://github.com/kubernetes/sig-release/tree/master/releases/release-{{< skew nextMinorVersion >}}) for the upcoming **{{< skew nextMinorVersion >}}** Kubernetes release!
+
+## Helpful Resources
\ No newline at end of file
diff --git a/content/en/releases/download.md b/content/en/releases/download.md
new file mode 100644
index 0000000000..aa1fca98a4
--- /dev/null
+++ b/content/en/releases/download.md
@@ -0,0 +1,26 @@
+---
+title: Download Kubernetes
+type: docs
+---
+## Core Kubernetes components
+
+Find links to download Kubernetes components (and their checksums) in the [CHANGELOG](https://github.com/kubernetes/kubernetes/tree/master/CHANGELOG) files.
+
+Alternately, use [downloadkubernetes.com](https://www.downloadkubernetes.com/) to filter by version and architecture.
+
+## kubectl
+
+<!-- overview -->
+The Kubernetes command-line tool, [kubectl](/docs/reference/kubectl/kubectl/), allows
+you to run commands against Kubernetes clusters.
+
+You can use kubectl to deploy applications, inspect and manage cluster resources,
+and view logs. For more information including a complete list of kubectl operations, see the
+[`kubectl` reference documentation](/docs/reference/kubectl/).
+
+kubectl is installable on a variety of Linux platforms, macOS and Windows. 
+Find your preferred operating system below.
+
+- [Install kubectl on Linux](/docs/tasks/tools/install-kubectl-linux)
+- [Install kubectl on macOS](/docs/tasks/tools/install-kubectl-macos)
+- [Install kubectl on Windows](/docs/tasks/tools/install-kubectl-windows)
\ No newline at end of file
diff --git a/content/en/releases/notes.md b/content/en/releases/notes.md
new file mode 100644
index 0000000000..300b5395ab
--- /dev/null
+++ b/content/en/releases/notes.md
@@ -0,0 +1,13 @@
+---
+linktitle: Release Notes
+title: Notes
+type: docs
+description: >
+  Kubernetes release notes.
+sitemap:
+  priority: 0.5
+---
+
+Release notes can be found by reading the [Changelog](https://github.com/kubernetes/kubernetes/tree/master/CHANGELOG) that matches your Kubernetes version. View the changelog for {{< skew latestVersion >}} on [GitHub](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-{{< skew latestVersion >}}.md).
+
+Alternately, release notes can be searched and filtered online at: [relnotes.k8s.io](relnotes.k8s.io). View filtered release notes for {{< skew latestVersion >}} on [relnotes.k8s.io](https://relnotes.k8s.io/?releaseVersions={{< skew latestVersion >}}.0).
\ No newline at end of file
diff --git a/content/en/releases/patch-releases.md b/content/en/releases/patch-releases.md
new file mode 100644
index 0000000000..4c4770377a
--- /dev/null
+++ b/content/en/releases/patch-releases.md
@@ -0,0 +1,195 @@
+---
+title: Patch Releases
+type: docs
+auto_generated: true
+---
+<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
+
+{{< warning >}}
+This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md).
+{{< /warning >}}
+
+# Kubernetes Patch Releases
+
+Schedule and team contact information for Kubernetes patch releases.
+
+For general information about Kubernetes release cycle, see the
+[release process description].
+
+## Cadence
+
+Our typical patch release cadence is monthly.  It is
+commonly a bit faster (1 to 2 weeks) for the earliest patch releases
+after a 1.X minor release.  Critical bug fixes may cause a more
+immediate release outside of the normal cadence.  We also aim to not make
+releases during major holiday periods.
+
+## Contact
+
+See the [Release Managers page][release-managers] for full contact details on the Patch Release Team.
+
+Please give us a business day to respond - we may be in a different timezone!
+
+In between releases the team is looking at incoming cherry-pick
+requests on a weekly basis.  The team will get in touch with
+submitters via GitHub PR, SIG channels in Slack, and direct messages
+in Slack and [email](mailto:release-managers-private@kubernetes.io)
+if there are questions on the PR.
+
+## Cherry-Picks
+
+Please follow the [cherry-pick process].
+
+Cherry-picks must be merge-ready in GitHub with proper labels (eg:
+approved, lgtm, release note) and passing CI tests ahead of the
+cherry-pick deadline.  This is typically two days before the target
+release, but may be more.  Earlier PR readiness is better, as we
+need time to get CI signal after merging your cherry-picks ahead
+of the actual release.
+
+Cherry-pick PRs which miss merge criteria will be carried over and tracked
+for the next patch release.
+
+## Support Period
+
+In accordance with the [yearly support KEP][yearly-support], the Kubernetes
+Community will support active patch release series for a period of roughly
+fourteen (14) months.
+
+The first twelve months of this timeframe will be considered the standard
+period.
+
+Towards the end of the twelve month, the following will happen:
+
+- [Release Managers][release-managers] will cut a release
+- The patch release series will enter maintenance mode
+
+During the two-month maintenance mode period, Release Managers may cut
+additional maintenance releases to resolve:
+
+- CVEs (under the advisement of the Product Security Committee)
+- dependency issues (including base image updates)
+- critical core component issues
+
+At the end of the two-month maintenance mode period, the patch release series
+will be considered EOL (end of life) and cherry picks to the associated branch
+are to be closed soon afterwards.
+
+Note that the 28th of the month was chosen for maintenance mode and EOL target
+dates for simplicity (every month has it).
+
+## Upcoming Monthly Releases
+
+Timelines may vary with the severity of bug fixes, but for easier planning we
+will target the following monthly release points.  Unplanned, critical
+releases may also occur in between these.
+
+| Monthly Patch Release | Target date |
+| --- | --- |
+| May 2021 | 2021-05-12 |
+| June 2021 | 2021-06-16 |
+| July 2021 | 2021-07-14 |
+
+## Detailed Release History for Active Branches
+
+### 1.21
+
+**1.21** enters maintenance mode on **2022-04-28**
+
+End of Life for **1.21** is **2022-06-28**
+
+| PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
+|--- |--- |--- |
+| 1.21.1        | 2021-05-07           | 2021-05-12  |
+
+### 1.20
+
+**1.20** enters maintenance mode on **2021-12-28**
+
+End of Life for **1.20** is **2022-02-28**
+
+| PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
+|--- |--- |--- |
+| 1.20.7        | 2021-05-07           | 2021-05-12  |
+| 1.20.6        | 2021-04-09           | 2021-04-14  |
+| 1.20.5        | 2021-03-12           | 2021-03-17  |
+| 1.20.4        | 2021-02-12           | 2021-02-18  |
+| 1.20.3        | [Conformance Tests Issue](https://groups.google.com/g/kubernetes-dev/c/oUpY9vWgzJo) | 2021-02-17  |
+| 1.20.2        | 2021-01-08           | 2021-01-13  |
+| 1.20.1        | [Tagging Issue](https://groups.google.com/g/kubernetes-dev/c/dNH2yknlCBA) | 2020-12-18  |
+
+### 1.19
+
+**1.19** enters maintenance mode on **2021-08-28**
+
+End of Life for **1.19** is **2021-10-28**
+
+| PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
+|--- |--- |--- |
+| 1.19.11       | 2021-05-07           | 2021-05-12  |
+| 1.19.10       | 2021-04-09           | 2021-04-14  |
+| 1.19.9        | 2021-03-12           | 2021-03-17  |
+| 1.19.8        | 2021-02-12           | 2021-02-17  |
+| 1.19.7        | 2021-01-08           | 2021-01-13  |
+| 1.19.6        | [Tagging Issue](https://groups.google.com/g/kubernetes-dev/c/dNH2yknlCBA) | 2020-12-18  |
+| 1.19.5        | 2020-12-04           | 2020-12-09  |
+| 1.19.4        | 2020-11-06           | 2020-11-11  |
+| 1.19.3        | 2020-10-09           | 2020-10-14  |
+| 1.19.2        | 2020-09-11           | 2020-09-16  |
+| 1.19.1        | 2020-09-04           | 2020-09-09  |
+
+### 1.18
+
+**1.18** enters maintenance mode on **2021-04-28**
+
+End of Life for **1.18** is **2021-05-12**
+
+| PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
+|--- |--- |--- |
+| 1.18.19       | 2021-05-07           | 2021-05-12  |
+| 1.18.18       | 2021-04-09           | 2021-04-14  |
+| 1.18.17       | 2021-03-12           | 2021-03-17  |
+| 1.18.16       | 2021-02-12           | 2021-02-17  |
+| 1.18.15       | 2021-01-08           | 2021-01-13  |
+| 1.18.14       | [Tagging Issue](https://groups.google.com/g/kubernetes-dev/c/dNH2yknlCBA) | 2020-12-18  |
+| 1.18.13       | 2020-12-04           | 2020-12-09  |
+| 1.18.12       | N/A                  | 2020-11-12  |
+| 1.18.11       | [No-op release](https://groups.google.com/g/kubernetes-dev/c/nJix1xLQvZE) | 2020-11-11  |
+| 1.18.10       | 2020-10-09           | 2020-10-14  |
+| 1.18.9        | 2020-09-11           | 2020-09-16  |
+| 1.18.8        | N/A                  | 2020-08-13  |
+| 1.18.7        | 2020-08-07           | 2020-08-12  |
+| 1.18.6        | 2020-07-10           | 2020-07-15  |
+| 1.18.5        | 2020-06-25           | 2020-06-26  |
+| 1.18.4        | 2020-06-12           | 2020-06-17  |
+| 1.18.3        | 2020-05-15           | 2020-05-20  |
+| 1.18.2        | 2020-04-13           | 2020-04-16  |
+| 1.18.1        | 2020-04-06           | 2020-04-08  |
+
+## Non-Active Branch History
+
+These releases are no longer supported.
+
+| Minor Version | Final Patch Release | EOL date |
+| --- | --- | --- |
+| 1.17 | 1.17.17 | 2021-01-13 |
+| 1.16 | 1.16.15 | 2020-09-02 |
+| 1.15 | 1.15.12 | 2020-05-06 |
+| 1.14 | 1.14.10 | 2019-12-11 |
+| 1.13 | 1.13.12 | 2019-10-15 |
+| 1.12 | 1.12.10 | 2019-07-08 |
+| 1.11 | 1.11.10 | 2019-05-01 |
+| 1.10 | 1.10.13 | 2019-02-13 |
+| 1.9  | 1.9.11  | 2018-09-29 |
+| 1.8  | 1.8.15  | 2018-07-12 |
+| 1.7  | 1.7.16  | 2018-04-04 |
+| 1.6  | 1.6.13  | 2017-11-23 |
+| 1.5  | 1.5.8   | 2017-10-01 |
+| 1.4  | 1.4.12  | 2017-04-21 |
+| 1.3  | 1.3.10  | 2016-11-01 |
+| 1.2  | 1.2.7   | 2016-10-23 |
+
+[cherry-pick process]: https://git.k8s.io/community/contributors/devel/sig-release/cherry-picks.md
+[release-managers]: /release-managers.md
+[release process description]: https://git.k8s.io/community/contributors/devel/sig-release/release.md
+[yearly-support]: https://git.k8s.io/enhancements/keps/sig-release/1498-kubernetes-yearly-support-period/README.md
diff --git a/content/en/releases/release.md b/content/en/releases/release.md
new file mode 100644
index 0000000000..1632a20473
--- /dev/null
+++ b/content/en/releases/release.md
@@ -0,0 +1,364 @@
+---
+title: The Release Cycle
+type: docs
+auto_generated: true
+---
+<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
+
+{{< warning >}}
+This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-release/release.md).
+{{< /warning >}}
+
+# Targeting enhancements, Issues and PRs to Release Milestones
+
+This document is focused on Kubernetes developers and contributors who need to
+create an enhancement, issue, or pull request which targets a specific release
+milestone.
+
+- [TL;DR](#tldr)
+  - [Normal Dev (Weeks 1-8)](#normal-dev-weeks-1-8)
+  - [Code Freeze (Weeks 9-11)](#code-freeze-weeks-9-11)
+  - [Post-Release (Weeks 11+)](#post-release-weeks-11)
+- [Definitions](#definitions)
+- [The Release Cycle](#the-release-cycle)
+- [Removal Of Items From The Milestone](#removal-of-items-from-the-milestone)
+- [Adding An Item To The Milestone](#adding-an-item-to-the-milestone)
+  - [Milestone Maintainers](#milestone-maintainers)
+  - [Feature additions](#feature-additions)
+  - [Issue additions](#issue-additions)
+  - [PR Additions](#pr-additions)
+- [Other Required Labels](#other-required-labels)
+  - [SIG Owner Label](#sig-owner-label)
+  - [Priority Label](#priority-label)
+  - [Issue/PR Kind Label](#issuepr-kind-label)
+
+The process for shepherding enhancements, issues, and pull requests into a
+Kubernetes release spans multiple stakeholders:
+
+- the enhancement, issue, and pull request owner(s)
+- SIG leadership
+- the [Release Team][release-team]
+
+Information on workflows and interactions are described below.
+
+As the owner of an enhancement, issue, or pull request (PR), it is your
+responsibility to ensure release milestone requirements are met. Automation and
+the Release Team will be in contact with you if updates are required, but
+inaction can result in your work being removed from the milestone. Additional
+requirements exist when the target milestone is a prior release (see
+[cherry pick process][cherry-picks] for more information).
+
+## TL;DR
+
+If you want your PR to get merged, it needs the following required labels and
+milestones, represented here by the Prow /commands it would take to add them:
+
+### Normal Dev (Weeks 1-8)
+
+- /sig {name}
+- /kind {type}
+- /lgtm
+- /approved
+
+### [Code Freeze][code-freeze] (Weeks 9-11)
+
+- /milestone {v1.y}
+- /sig {name}
+- /kind {bug, failing-test}
+- /lgtm
+- /approved
+
+### Post-Release (Weeks 11+)
+
+Return to 'Normal Dev' phase requirements:
+
+- /sig {name}
+- /kind {type}
+- /lgtm
+- /approved
+
+Merges into the 1.y branch are now [via cherry picks][cherry-picks], approved
+by [Release Managers][release-managers].
+
+In the past, there was a requirement for a milestone-targeted pull requests to
+have an associated GitHub issue opened, but this is no longer the case.
+Features or enhancements are effectively GitHub issues or [KEPs][keps] which
+lead to subsequent PRs.
+
+The general labeling process should be consistent across artifact types.
+
+## Definitions
+
+- *issue owners*: Creator, assignees, and user who moved the issue into a
+  release milestone
+
+- *Release Team*: Each Kubernetes release has a team doing project management
+  tasks described [here][release-team].
+
+  The contact info for the team associated with any given release can be found
+  [here](https://git.k8s.io/sig-release/releases/).
+
+- *Y days*: Refers to business days
+
+- *enhancement*: see "[Is My Thing an Enhancement?](https://git.k8s.io/enhancements/README.md#is-my-thing-an-enhancement)"
+
+- *[Enhancements Freeze][enhancements-freeze]*:
+  the deadline by which [KEPs][keps] have to be completed in order for
+  enhancements to be part of the current release
+
+- *[Exception Request][exceptions]*:
+  The process of requesting an extension on the deadline for a particular
+  Enhancement
+
+- *[Code Freeze][code-freeze]*:
+  The period of ~4 weeks before the final release date, during which only
+  critical bug fixes are merged into the release.
+
+- *[Pruning](https://git.k8s.io/sig-release/releases/release_phases.md#pruning)*:
+  The process of removing an Enhancement from a release milestone if it is not
+  fully implemented or is otherwise considered not stable.
+
+- *release milestone*: semantic version string or
+  [GitHub milestone](https://help.github.com/en/github/managing-your-work-on-github/associating-milestones-with-issues-and-pull-requests)
+  referring to a release MAJOR.MINOR `vX.Y` version.
+
+  See also
+  [release versioning](/contributors/design-proposals/release/versioning.md).
+
+- *release branch*: Git branch `release-X.Y` created for the `vX.Y` milestone.
+
+  Created at the time of the `vX.Y-rc.0` release and maintained after the
+  release for approximately 12 months with `vX.Y.Z` patch releases.
+
+  Note: releases 1.19 and newer receive 1 year of patch release support, and
+  releases 1.18 and earlier received 9 months of patch release support.
+
+## The Release Cycle
+
+![Image of one Kubernetes release cycle](release-cycle.png)
+
+Kubernetes releases currently happen approximately four times per year.
+
+The release process can be thought of as having three main phases:
+
+- Enhancement Definition
+- Implementation
+- Stabilization
+
+But in reality, this is an open source and agile project, with feature planning
+and implementation happening at all times. Given the project scale and globally
+distributed developer base, it is critical to project velocity to not rely on a
+trailing stabilization phase and rather have continuous integration testing
+which ensures the project is always stable so that individual commits can be
+flagged as having broken something.
+
+With ongoing feature definition through the year, some set of items will bubble
+up as targeting a given release. **[Enhancements Freeze][enhancements-freeze]**
+starts ~4 weeks into release cycle. By this point all intended feature work for
+the given release has been defined in suitable planning artifacts in
+conjunction with the Release Team's [Enhancements Lead](https://git.k8s.io/sig-release/release-team/role-handbooks/enhancements/README.md).
+
+After Enhancements Freeze, tracking milestones on PRs and issues is important.
+Items within the milestone are used as a punchdown list to complete the
+release. *On issues*, milestones must be applied correctly, via triage by the
+SIG, so that [Release Team][release-team] can track bugs and enhancements (any
+enhancement-related issue needs a milestone).
+
+There is some automation in place to help automatically assign milestones to
+PRs.
+
+This automation currently applies to the following repos:
+
+- `kubernetes/enhancements`
+- `kubernetes/kubernetes`
+- `kubernetes/release`
+- `kubernetes/sig-release`
+- `kubernetes/test-infra`
+
+At creation time, PRs against the `master` branch need humans to hint at which
+milestone they might want the PR to target. Once merged, PRs against the
+`master` branch have milestones auto-applied so from that time onward human
+management of that PR's milestone is less necessary. On PRs against release
+branches, milestones are auto-applied when the PR is created so no human
+management of the milestone is ever necessary.
+
+Any other effort that should be tracked by the Release Team that doesn't fall
+under that automation umbrella should be have a milestone applied.
+
+Implementation and bug fixing is ongoing across the cycle, but culminates in a
+code freeze period.
+
+**[Code Freeze][code-freeze]** starts in week ~10 and continues for ~2 weeks.
+Only critical bug fixes are accepted into the release codebase during this
+time.
+
+There are approximately two weeks following Code Freeze, and preceding release,
+during which all remaining critical issues must be resolved before release.
+This also gives time for documentation finalization.
+
+When the code base is sufficiently stable, the master branch re-opens for
+general development and work begins there for the next release milestone. Any
+remaining modifications for the current release are cherry picked from master
+back to the release branch. The release is built from the release branch.
+
+Each release is part of a broader Kubernetes lifecycle:
+
+![Image of Kubernetes release lifecycle spanning three releases](release-lifecycle.png)
+
+## Removal Of Items From The Milestone
+
+Before getting too far into the process for adding an item to the milestone,
+please note:
+
+Members of the [Release Team][release-team] may remove issues from the
+milestone if they or the responsible SIG determine that the issue is not
+actually blocking the release and is unlikely to be resolved in a timely
+fashion.
+
+Members of the Release Team may remove PRs from the milestone for any of the
+following, or similar, reasons:
+
+- PR is potentially de-stabilizing and is not needed to resolve a blocking
+  issue
+- PR is a new, late feature PR and has not gone through the enhancements
+  process or the [exception process][exceptions]
+- There is no responsible SIG willing to take ownership of the PR and resolve
+  any follow-up issues with it
+- PR is not correctly labelled
+- Work has visibly halted on the PR and delivery dates are uncertain or late
+
+While members of the Release Team will help with labelling and contacting
+SIG(s), it is the responsibility of the submitter to categorize PRs, and to
+secure support from the relevant SIG to guarantee that any breakage caused by
+the PR will be rapidly resolved.
+
+Where additional action is required, an attempt at human to human escalation
+will be made by the Release Team through the following channels:
+
+- Comment in GitHub mentioning the SIG team and SIG members as appropriate for
+  the issue type
+- Emailing the SIG mailing list
+  - bootstrapped with group email addresses from the
+    [community sig list][sig-list]
+  - optionally also directly addressing SIG leadership or other SIG members
+- Messaging the SIG's Slack channel
+  - bootstrapped with the slackchannel and SIG leadership from the
+    [community sig list][sig-list]
+  - optionally directly "@" mentioning SIG leadership or others by handle
+
+## Adding An Item To The Milestone
+
+### Milestone Maintainers
+
+The members of the [`milestone-maintainers`](https://github.com/orgs/kubernetes/teams/milestone-maintainers/members)
+GitHub team are entrusted with the responsibility of specifying the release
+milestone on GitHub artifacts.
+
+This group is [maintained](https://git.k8s.io/sig-release/release-team/README.md#milestone-maintainers)
+by SIG Release and has representation from the various SIGs' leadership.
+
+### Feature additions
+
+Feature planning and definition takes many forms today, but a typical example
+might be a large piece of work described in a [KEP][keps], with associated task
+issues in GitHub. When the plan has reached an implementable state and work is
+underway, the enhancement or parts thereof are targeted for an upcoming milestone
+by creating GitHub issues and marking them with the Prow "/milestone" command.
+
+For the first ~4 weeks into the release cycle, the Release Team's Enhancements
+Lead will interact with SIGs and feature owners via GitHub, Slack, and SIG
+meetings to capture all required planning artifacts.
+
+If you have an enhancement to target for an upcoming release milestone, begin a
+conversation with your SIG leadership and with that release's Enhancements
+Lead.
+
+### Issue additions
+
+Issues are marked as targeting a milestone via the Prow "/milestone" command.
+
+The Release Team's [Bug Triage Lead](https://git.k8s.io/sig-release/release-team/role-handbooks/bug-triage/README.md)
+and overall community watch incoming issues and triage them, as described in
+the contributor guide section on
+[issue triage](/contributors/guide/issue-triage.md).
+
+Marking issues with the milestone provides the community better visibility
+regarding when an issue was observed and by when the community feels it must be
+resolved. During [Code Freeze][code-freeze], a milestone must be set to merge
+a PR.
+
+An open issue is no longer required for a PR, but open issues and associated
+PRs should have synchronized labels. For example a high priority bug issue
+might not have its associated PR merged if the PR is only marked as lower
+priority.
+
+### PR Additions
+
+PRs are marked as targeting a milestone via the Prow "/milestone" command.
+
+This is a blocking requirement during Code Freeze as described above.
+
+## Other Required Labels
+
+[Here is the list of labels and their use and purpose.](https://git.k8s.io/test-infra/label_sync/labels.md#labels-that-apply-to-all-repos-for-both-issues-and-prs)
+
+### SIG Owner Label
+
+The SIG owner label defines the SIG to which we escalate if a milestone issue
+is languishing or needs additional attention. If there are no updates after
+escalation, the issue may be automatically removed from the milestone.
+
+These are added with the Prow "/sig" command. For example to add the label
+indicating SIG Storage is responsible, comment with `/sig storage`.
+
+### Priority Label
+
+Priority labels are used to determine an escalation path before moving issues
+out of the release milestone. They are also used to determine whether or not a
+release should be blocked on the resolution of the issue.
+
+- `priority/critical-urgent`: Never automatically move out of a release
+  milestone; continually escalate to contributor and SIG through all available
+  channels.
+  - considered a release blocking issue
+  - requires daily updates from issue owners during [Code Freeze][code-freeze]
+  - would require a patch release if left undiscovered until after the minor
+    release
+- `priority/important-soon`: Escalate to the issue owners and SIG owner; move
+  out of milestone after several unsuccessful escalation attempts.
+  - not considered a release blocking issue
+  - would not require a patch release
+  - will automatically be moved out of the release milestone at Code Freeze
+    after a 4 day grace period
+- `priority/important-longterm`: Escalate to the issue owners; move out of the
+  milestone after 1 attempt.
+  - even less urgent / critical than `priority/important-soon`
+  - moved out of milestone more aggressively than `priority/important-soon`
+
+### Issue/PR Kind Label
+
+The issue kind is used to help identify the types of changes going into the
+release over time. This may allow the Release Team to develop a better
+understanding of what sorts of issues we would miss with a faster release
+cadence.
+
+For release targeted issues, including pull requests, one of the following
+issue kind labels must be set:
+
+- `kind/api-change`: Adds, removes, or changes an API
+- `kind/bug`: Fixes a newly discovered bug.
+- `kind/cleanup`: Adding tests, refactoring, fixing old bugs.
+- `kind/design`: Related to design
+- `kind/documentation`: Adds documentation
+- `kind/failing-test`: CI test case is failing consistently.
+- `kind/feature`: New functionality.
+- `kind/flake`: CI test case is showing intermittent failures.
+
+[cherry-picks]: /contributors/devel/sig-release/cherry-picks.md
+[code-freeze]: https://git.k8s.io/sig-release/releases/release_phases.md#code-freeze
+[enhancements-freeze]: https://git.k8s.io/sig-release/releases/release_phases.md#enhancements-freeze
+[exceptions]: https://git.k8s.io/sig-release/releases/release_phases.md#exceptions
+[keps]: https://git.k8s.io/enhancements/keps
+[release-managers]: https://git.k8s.io/sig-release/release-managers.md
+[release-team]: https://git.k8s.io/sig-release/release-team
+[sig-list]: /sig-list.md
diff --git a/content/en/docs/setup/release/version-skew-policy.md b/content/en/releases/version-skew-policy.md
similarity index 96%
rename from content/en/docs/setup/release/version-skew-policy.md
rename to content/en/releases/version-skew-policy.md
index 68ea7aef8a..56a7afda10 100644
--- a/content/en/docs/setup/release/version-skew-policy.md
+++ b/content/en/releases/version-skew-policy.md
@@ -6,22 +6,21 @@ reviewers:
 - sig-cluster-lifecycle
 - sig-node
 - sig-release
-title: Kubernetes version and version skew support policy
-content_type: concept
-weight: 30
+title: Version Skew Policy
+type: docs
+description: >
+  The maximum version skew supported between various Kubernetes components.
 ---
 
 <!-- overview -->
 This document describes the maximum version skew supported between various Kubernetes components.
 Specific cluster deployment tools may place additional restrictions on version skew.
 
-
 <!-- body -->
 
 ## Supported versions
 
-Kubernetes versions are expressed as **x.y.z**,
-where **x** is the major version, **y** is the minor version, and **z** is the patch version, following [Semantic Versioning](https://semver.org/) terminology.
+Kubernetes versions are expressed as **x.y.z**, where **x** is the major version, **y** is the minor version, and **z** is the patch version, following [Semantic Versioning](https://semver.org/) terminology.
 For more information, see [Kubernetes Release Versioning](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/release/versioning.md#kubernetes-release-versioning).
 
 The Kubernetes project maintains release branches for the most recent three minor releases ({{< skew latestVersion >}}, {{< skew prevMinorVersion >}}, {{< skew oldestMinorVersion >}}).  Kubernetes 1.19 and newer receive approximately 1 year of patch support. Kubernetes 1.18 and older received approximately 9 months of patch support.
diff --git a/data/i18n/en/en.toml b/data/i18n/en/en.toml
index c6f24f8e2e..3eebea4ebb 100644
--- a/data/i18n/en/en.toml
+++ b/data/i18n/en/en.toml
@@ -57,6 +57,9 @@ other = "Latest version"
 [docs_version_other_heading]
 other = "Older versions"
 
+[end_of_life]
+other = "End of Life:"
+
 [error_404_were_you_looking_for]
 other = "Were you looking for:"
 
@@ -75,9 +78,15 @@ other = "Was this page helpful?"
 [feedback_yes]
 other = "Yes"
 
+[inline_list_separator]
+other = ","
+
 [input_placeholder_email_address]
 other = "email address"
 
+[latest_release]
+other = "Latest Release:"
+
 [latest_version]
 other = "latest version."
 
@@ -192,6 +201,9 @@ other = "Create an issue"
 [prerequisites_heading]
 other = "Before you begin"
 
+[previous_patches]
+other = "Patch Releases:"
+
 [seealso_heading]
 other = "See Also"
 
@@ -223,4 +235,4 @@ other = "Versions"
 other = "Warning:"
 
 [whatsnext_heading]
-other = "What's next"
+other = "What's next"
\ No newline at end of file
diff --git a/data/releases/OWNERS b/data/releases/OWNERS
new file mode 100644
index 0000000000..bf258efe7c
--- /dev/null
+++ b/data/releases/OWNERS
@@ -0,0 +1,15 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# This is the directory for English source content.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+  - sig-docs-en-reviews
+  - release-engineering-reviewers
+
+approvers:
+  - sig-docs-en-owners
+  - release-engineering-approvers
+
+labels:
+- sig/release
\ No newline at end of file
diff --git a/data/releases/schedule.yaml b/data/releases/schedule.yaml
new file mode 100644
index 0000000000..aa0d0ae546
--- /dev/null
+++ b/data/releases/schedule.yaml
@@ -0,0 +1,67 @@
+schedules:
+- release: 1.21
+  next: 1.21.1
+  cherryPickDeadline: 2021-05-07
+  targetDate: 2021-05-12
+  endOfLifeDate: 2022-04-30
+  previousPatches:
+- release: 1.20
+  next: 1.20.7
+  cherryPickDeadline: 2021-05-07
+  targetDate: 2021-05-12
+  endOfLifeDate: 2021-12-30
+  previousPatches:
+    - release: 1.20.6
+      cherryPickDeadline: 2021-04-09
+      targetDate: 2021-04-14
+    - release: 1.20.5
+      cherryPickDeadline: 2021-03-12
+      targetDate: 2021-03-17
+    - release: 1.20.4
+      cherryPickDeadline: 2021-02-12
+      targetDate: 2021-02-18
+    - release: 1.20.3
+      cherryPickDeadline: "Conformance Tests Issue https://groups.google.com/g/kubernetes-dev/c/oUpY9vWgzJo"
+      targetDate: 2021-02-17
+    - release: 1.20.2
+      cherryPickDeadline: 2021-01-08
+      targetDate: 2021-01-13
+    - release: 1.20.1
+      cherryPickDeadline: "Tagging Issue https://groups.google.com/g/kubernetes-dev/c/dNH2yknlCBA"
+      targetDate: 2020-12-18
+- release: 1.19
+  next: 1.19.11
+  cherryPickDeadline: 2021-05-07
+  targetDate: 2021-05-12
+  endOfLifeDate: 2021-09-30
+  previousPatches:
+    - release: 1.19.10
+      cherryPickDeadline: 2021-04-09
+      targetDate: 2021-04-14
+    - release: 1.19.9
+      cherryPickDeadline: 2021-03-12
+      targetDate: 2021-03-17
+    - release: 1.19.8
+      cherryPickDeadline: 2021-02-12
+      targetDate: 2021-02-17
+    - release: 1.19.7
+      cherryPickDeadline: 2021-01-08
+      targetDate: 2021-01-13
+    - release: 1.19.6
+      cherryPickDeadline: "Tagging Issue https://groups.google.com/g/kubernetes-dev/c/dNH2yknlCBA"
+      targetDate: 2020-12-18
+    - release: 1.19.5
+      cherryPickDeadline: 2020-12-04
+      targetDate: 2020-12-09
+    - release: 1.19.4
+      cherryPickDeadline: 2020-11-06
+      targetDate: 2020-11-11
+    - release: 1.19.3
+      cherryPickDeadline: 2020-10-09
+      targetDate: 2020-10-14
+    - release: 1.19.2
+      cherryPickDeadline: 2020-09-11
+      targetDate: 2020-09-16
+    - release: 1.19.1
+      cherryPickDeadline: 2020-09-04
+      targetDate: 2020-09-09
diff --git a/layouts/partials/navbar-version-selector.html b/layouts/partials/navbar-version-selector.html
index ce38b96d9e..4842405695 100644
--- a/layouts/partials/navbar-version-selector.html
+++ b/layouts/partials/navbar-version-selector.html
@@ -3,6 +3,7 @@
 </a>
 <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink">
 	{{ $p := . }}
+	<a class="dropdown-item" href="/releases">Release Information</a>
 	{{ range .Site.Params.versions }}
 	<a class="dropdown-item" href="{{ .url }}{{ $p.RelPermalink }}">{{ .version }}</a>
 	{{ end }}
diff --git a/layouts/shortcodes/release-data.html b/layouts/shortcodes/release-data.html
new file mode 100644
index 0000000000..d998847dfc
--- /dev/null
+++ b/layouts/shortcodes/release-data.html
@@ -0,0 +1,34 @@
+{{ range $data := .Site.Data.releases.schedule.schedules }}
+{{- $dataVersion := printf "%.2f" $data.release  -}}
+<h2>{{ $dataVersion }}</h2>
+
+<br>
+
+{{ if not $data.previousPatches }}
+<b>{{ T "latest_release" }}</b> {{ printf "%s.0" $dataVersion }}
+<br>
+<b>{{ T "end_of_life" }}</b> {{ printf "%s" $data.endOfLifeDate }}
+<br>
+<b>{{ T "previous_patches" }}</b> n/a
+{{ end }}
+
+{{ if $data.previousPatches }}
+<b>{{ T "latest_release" }}</b> {{ index $data.previousPatches 0 "release" }} (released: {{ index $data.previousPatches 0 "targetDate" }})
+<br>
+<b>{{ T "end_of_life" }}</b> {{ printf "%s" $data.endOfLifeDate }}
+<br>
+<b>{{ T "previous_patches" }}</b>
+    {{ range $previousPatchesList := $data.previousPatches }}
+        {{range $previous_patches_key, $previous_patches_value := $previousPatchesList }}
+            {{ if eq $previous_patches_key "release" }}<a href="https://git.k8s.io/kubernetes/CHANGELOG/CHANGELOG-{{ $dataVersion }}.md#v{{ replace $previous_patches_value `.` `` }}">{{ printf "%s" $previous_patches_value }}{{ T "inline_list_separator" }} </a>
+            {{ end }}
+        {{ end }}
+    {{ end }}
+{{ end }}
+
+
+<br>
+Complete {{ $dataVersion }} <a href="/releases/patch-releases/#{{ replace $dataVersion `.` `-` }}">Schedule</a> and <a href="https://git.k8s.io/kubernetes/CHANGELOG/CHANGELOG-{{ $dataVersion }}.md">Changelog</a>
+
+
+{{ end }}
diff --git a/scripts/update-release-info.sh b/scripts/update-release-info.sh
new file mode 100755
index 0000000000..96846a3cf4
--- /dev/null
+++ b/scripts/update-release-info.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+# patch-releases.md
+####################################
+cat << EOF > content/en/releases/patch-releases.md
+---
+title: Patch Releases
+type: docs
+auto_generated: true
+---
+<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
+
+{{< warning >}}
+This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md).
+{{< /warning >}}
+
+EOF
+
+curl --retry 3 https://raw.githubusercontent.com/kubernetes/sig-release/master/releases/patch-releases.md >> content/en/releases/patch-releases.md
+
+
+# release.md
+####################################
+cat << EOF > content/en/releases/release.md
+---
+title: The Release Cycle
+type: docs
+auto_generated: true
+---
+<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
+
+{{< warning >}}
+This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-release/release.md).
+{{< /warning >}}
+
+EOF
+
+curl --retry 3 https://raw.githubusercontent.com/kubernetes/community/master/contributors/devel/sig-release/release.md >> content/en/releases/release.md
+
+
+# schedule.yaml
+####################################
+curl --retry 3 https://raw.githubusercontent.com/kubernetes/sig-release/master/releases/schedule.yaml > data/releases/schedule.yaml
diff --git a/static/_redirects b/static/_redirects
index 1f6e9f29bc..9aa58f9ec7 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -483,7 +483,10 @@
 /code-of-conduct/     /community/code-of-conduct/   301
 /values/     /community/values/   302
 
-/docs/setup/version-skew-policy/     /docs/setup/release/version-skew-policy/   301
+/docs/setup/release/notes/     /releases/notes/   302
+/docs/setup/release/                 /releases/   301
+/docs/setup/version-skew-policy/     /releases/version-skew-policy/   301
+/docs/setup/release/version-skew-policy/     /releases/version-skew-policy/   301
 
 /docs/setup/minikube/     /docs/tasks/tools/ 302
 /id/docs/setup/minikube/     /id/docs/tasks/tools/ 302

From ebb393c74e3b1ece0c1e34b929185dbc73bf2d64 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqm@outlook.com>
Date: Tue, 11 May 2021 19:06:02 +0800
Subject: [PATCH 735/788] Reformat windows introduction

The current markdown text for the Windows introduction page is very
difficult for tracking changes. There are many paragraphs shown as a
single line. We need line breaks to ease the change tracking, especially
for localization teams. There are other nits related to indentation and
numbered lists. This PR is an attempt to reformat the page so that
future revisions can use it as an example.
---
 .../windows/intro-windows-in-kubernetes.md    | 1333 +++++++++++++----
 1 file changed, 1010 insertions(+), 323 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 0cf09f0ad9..813ff54b5b 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -1,33 +1,58 @@
 ---
+title: Intro to Windows support in Kubernetes
+content_type: concept
+weight: 65
 reviewers:
 - jayunit100
 - jsturtevant
 - marosset
 - perithompson
-title: Intro to Windows support in Kubernetes
-content_type: concept
-weight: 65
 ---
 
 <!-- overview -->
 
-Windows applications constitute a large portion of the services and applications that run in many organizations. [Windows containers](https://aka.ms/windowscontainers) provide a modern way to encapsulate processes and package dependencies, making it easier to use DevOps practices and follow cloud native patterns for Windows applications. Kubernetes has become the defacto standard container orchestrator, and the release of Kubernetes 1.14 includes production support for scheduling Windows containers on Windows nodes in a Kubernetes cluster, enabling a vast ecosystem of Windows applications to leverage the power of Kubernetes. Organizations with investments in Windows-based applications and Linux-based applications don't have to look for separate orchestrators to manage their workloads, leading to increased operational efficiencies across their deployments, regardless of operating system.
+Windows applications constitute a large portion of the services and
+applications that run in many organizations.
+[Windows containers](https://aka.ms/windowscontainers) provide a modern way to
+encapsulate processes and package dependencies, making it easier to use DevOps
+practices and follow cloud native patterns for Windows applications.
+Kubernetes has become the defacto standard container orchestrator, and the
+release of Kubernetes 1.14 includes production support for scheduling Windows
+containers on Windows nodes in a Kubernetes cluster, enabling a vast ecosystem
+of Windows applications to leverage the power of Kubernetes. Organizations
+with investments in Windows-based applications and Linux-based applications
+don't have to look for separate orchestrators to manage their workloads,
+leading to increased operational efficiencies across their deployments,
+regardless of operating system.
 
 <!-- body -->
 
 ## Windows containers in Kubernetes
 
-To enable the orchestration of Windows containers in Kubernetes, include Windows nodes in your existing Linux cluster. Scheduling Windows containers in {{< glossary_tooltip text="Pods" term_id="pod" >}} on Kubernetes is similar to scheduling Linux-based containers.
+To enable the orchestration of Windows containers in Kubernetes, include
+Windows nodes in your existing Linux cluster. Scheduling Windows containers in
+{{< glossary_tooltip text="Pods" term_id="pod" >}} on Kubernetes is similar to
+scheduling Linux-based containers.
 
-In order to run Windows containers, your Kubernetes cluster must include multiple operating systems, with control plane nodes running Linux and workers running either Windows or Linux depending on your workload needs. Windows Server 2019 is the only Windows operating system supported, enabling [Kubernetes Node](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/architecture.md#the-kubernetes-node) on Windows (including kubelet, [container runtime](https://docs.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/containerd), and kube-proxy). For a detailed explanation of Windows distribution channels see the [Microsoft documentation](https://docs.microsoft.com/en-us/windows-server/get-started-19/servicing-channels-19).
+In order to run Windows containers, your Kubernetes cluster must include
+multiple operating systems, with control plane nodes running Linux and workers
+running either Windows or Linux depending on your workload needs. Windows
+Server 2019 is the only Windows operating system supported, enabling
+[Kubernetes Node](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/architecture.md#the-kubernetes-node)
+on Windows (including kubelet,
+[container runtime](https://docs.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/containerd),
+and kube-proxy). For a detailed explanation of Windows distribution channels
+see the [Microsoft documentation](https://docs.microsoft.com/en-us/windows-server/get-started-19/servicing-channels-19).
 
-{{< note >}}
-The Kubernetes control plane, including the [master components](/docs/concepts/overview/components/), continues to run on Linux. There are no plans to have a Windows-only Kubernetes cluster.
-{{< /note >}}
+The Kubernetes control plane, including the
+[master components](/docs/concepts/overview/components/),
+continues to run on Linux.
+There are no plans to have a Windows-only Kubernetes cluster.
 
-{{< note >}}
-In this document, when we talk about Windows containers we mean Windows containers with process isolation. Windows containers with [Hyper-V isolation](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container) is planned for a future release.
-{{< /note >}}
+In this document, when we talk about Windows containers we mean Windows
+containers with process isolation. Windows containers with
+[Hyper-V isolation](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container)
+is planned for a future release.
 
 ## Supported Functionality and Limitations
 
@@ -35,7 +60,10 @@ In this document, when we talk about Windows containers we mean Windows containe
 
 #### Windows OS Version Support
 
-Refer to the following table for Windows operating system support in Kubernetes. A single heterogeneous Kubernetes cluster can have both Windows and Linux worker nodes. Windows containers have to be scheduled on Windows nodes and Linux containers on Linux nodes.
+Refer to the following table for Windows operating system support in
+Kubernetes. A single heterogeneous Kubernetes cluster can have both Windows
+and Linux worker nodes. Windows containers have to be scheduled on Windows
+nodes and Linux containers on Linux nodes.
 
 | Kubernetes version | Windows Server LTSC releases | Windows Server SAC releases |
 | --- | --- | --- | --- |
@@ -43,32 +71,57 @@ Refer to the following table for Windows operating system support in Kubernetes.
 | *Kubernetes v1.20* | Windows Server 2019 | Windows Server ver 1909, Windows Server ver 2004 |
 | *Kubernetes v1.21* | Windows Server 2019 | Windows Server ver 2004, Windows Server ver 20H2 |
 
-{{< note >}}
-Information on the different Windows Server servicing channels including their support models can be found at [Windows Server servicing channels](https://docs.microsoft.com/en-us/windows-server/get-started-19/servicing-channels-19).
-{{< /note >}}
-{{< note >}}
-We don't expect all Windows customers to update the operating system for their apps frequently. Upgrading your applications is what dictates and necessitates upgrading or introducing new nodes to the cluster. For the customers that chose to upgrade their operating system for containers running on Kubernetes, we will offer guidance and step-by-step instructions when we add support for a new operating system version. This guidance will include recommended upgrade procedures for upgrading user applications together with cluster nodes. Windows nodes adhere to Kubernetes [version-skew policy](/docs/setup/release/version-skew-policy/) (node to control plane versioning) the same way as Linux nodes do today.
-{{< /note >}}
-{{< note >}}
-The Windows Server Host Operating System is subject to the [Windows Server ](https://www.microsoft.com/en-us/cloud-platform/windows-server-pricing) licensing. The Windows Container images are subject to the [Supplemental License Terms for Windows containers](https://docs.microsoft.com/en-us/virtualization/windowscontainers/images-eula).
-{{< /note >}}
-{{< note >}}
-Windows containers with process isolation have strict compatibility rules, [where the host OS version must match the container base image OS version](https://docs.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/version-compatibility). Once we support Windows containers with Hyper-V isolation in Kubernetes, the limitation and compatibility rules will change.
-{{< /note >}}
+
+Information on the different Windows Server servicing channels including their
+support models can be found at
+[Windows Server servicing channels](https://docs.microsoft.com/en-us/windows-server/get-started-19/servicing-channels-19).
+
+We don't expect all Windows customers to update the operating system for their
+apps frequently. Upgrading your applications is what dictates and necessitates
+upgrading or introducing new nodes to the cluster. For the customers that
+chose to upgrade their operating system for containers running on Kubernetes,
+we will offer guidance and step-by-step instructions when we add support for a
+new operating system version. This guidance will include recommended upgrade
+procedures for upgrading user applications together with cluster nodes.
+Windows nodes adhere to Kubernetes
+[version-skew policy](/docs/setup/release/version-skew-policy/) (node to control plane
+versioning) the same way as Linux nodes do today.
+
+
+The Windows Server Host Operating System is subject to the
+[Windows Server ](https://www.microsoft.com/en-us/cloud-platform/windows-server-pricing)
+licensing. The Windows Container images are subject to the
+[Supplemental License Terms for Windows containers](https://docs.microsoft.com/en-us/virtualization/windowscontainers/images-eula).
+
+Windows containers with process isolation have strict compatibility rules,
+[where the host OS version must match the container base image OS version](https://docs.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/version-compatibility).
+Once we support Windows containers with Hyper-V isolation in Kubernetes, the
+limitation and compatibility rules will change.
 
 #### Pause Image
 
-Microsoft maintains a Windows pause infrastructure container at `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`.
+Microsoft maintains a Windows pause infrastructure container at
+`mcr.microsoft.com/oss/kubernetes/pause:3.4.1`.
 
 #### Compute
 
-From an API and kubectl perspective, Windows containers behave in much the same way as Linux-based containers. However, there are some notable differences in key functionality which are outlined in the [limitation section](#limitations).
+From an API and kubectl perspective, Windows containers behave in much the
+same way as Linux-based containers. However, there are some notable
+differences in key functionality which are outlined in the
+[limitation section](#limitations).
 
-Key Kubernetes elements work the same way in Windows as they do in Linux. In this section, we talk about some of the key workload enablers and how they map to Windows.
+Key Kubernetes elements work the same way in Windows as they do in Linux. In
+this section, we talk about some of the key workload enablers and how they map
+to Windows.
 
 * [Pods](/docs/concepts/workloads/pods/)
 
-    A Pod is the basic building block of Kubernetes–the smallest and simplest unit in the Kubernetes object model that you create or deploy. You may not deploy Windows and Linux containers in the same Pod. All containers in a Pod are scheduled onto a single Node where each Node represents a specific platform and architecture. The following Pod capabilities, properties and events are supported with Windows containers:
+  A Pod is the basic building block of Kubernetes–the smallest and simplest
+  unit in the Kubernetes object model that you create or deploy. You may not
+  deploy Windows and Linux containers in the same Pod. All containers in a Pod
+  are scheduled onto a single Node where each Node represents a specific
+  platform and architecture. The following Pod capabilities, properties and
+  events are supported with Windows containers:
 
   * Single or multiple containers per Pod with process isolation and volume sharing
   * Pod status fields
@@ -80,7 +133,8 @@ Key Kubernetes elements work the same way in Windows as they do in Linux. In thi
   * Resource limits
 * [Controllers](/docs/concepts/workloads/controllers/)
 
-    Kubernetes controllers handle the desired state of Pods. The following workload controllers are supported with Windows containers:
+  Kubernetes controllers handle the desired state of Pods. The following
+  workload controllers are supported with Windows containers:
 
   * ReplicaSet
   * ReplicationController
@@ -89,9 +143,13 @@ Key Kubernetes elements work the same way in Windows as they do in Linux. In thi
   * DaemonSet
   * Job
   * CronJob
+
 * [Services](/docs/concepts/services-networking/service/)
 
-    A Kubernetes Service is an abstraction which defines a logical set of Pods and a policy by which to access them - sometimes called a micro-service. You can use services for cross-operating system connectivity. In Windows, services can utilize the following types, properties and capabilities:
+  A Kubernetes Service is an abstraction which defines a logical set of Pods
+  and a policy by which to access them - sometimes called a micro-service. You
+  can use services for cross-operating system connectivity. In Windows, services
+  can utilize the following types, properties and capabilities:
 
   * Service Environment variables
   * NodePort
@@ -100,7 +158,10 @@ Key Kubernetes elements work the same way in Windows as they do in Linux. In thi
   * ExternalName
   * Headless services
 
-Pods, Controllers and Services are critical elements to managing Windows workloads on Kubernetes. However, on their own they are not enough to enable the proper lifecycle management of Windows workloads in a dynamic cloud native environment. We added support for the following features:
+Pods, Controllers and Services are critical elements to managing Windows
+workloads on Kubernetes. However, on their own they are not enough to enable
+the proper lifecycle management of Windows workloads in a dynamic cloud native
+environment. We added support for the following features:
 
 * Pod and container metrics
 * Horizontal Pod Autoscaler support
@@ -114,27 +175,51 @@ Pods, Controllers and Services are critical elements to managing Windows workloa
 
 {{< feature-state for_k8s_version="v1.14" state="stable" >}}
 
-Docker EE-basic 19.03+ is the recommended container runtime for all Windows Server versions. This works with the dockershim code included in the kubelet.
+Docker EE-basic 19.03+ is the recommended container runtime for all Windows
+Server versions. This works with the dockershim code included in the kubelet.
 
 ##### CRI-ContainerD
 
 {{< feature-state for_k8s_version="v1.20" state="stable" >}}
 
-{{< glossary_tooltip term_id="containerd" text="ContainerD" >}} 1.4.0+ can also be used as the container runtime for Windows Kubernetes nodes.
+{{< glossary_tooltip term_id="containerd" text="ContainerD" >}} 1.4.0+ can
+also be used as the container runtime for Windows Kubernetes nodes.
 
-Learn how to [install ContainerD on a Windows](/docs/setup/production-environment/container-runtimes/#install-containerd).
+Learn how to
+[install ContainerD on a Windows](/docs/setup/production-environment/container-runtimes/#install-containerd).
 
 {{< caution >}}
-There is a [known limitation](/docs/tasks/configure-pod-container/configure-gmsa/#gmsa-limitations) when using GMSA with ContainerD to access Windows network shares which requires a kernel patch. Updates to address this limitation are currently available for Windows Server, Version 2004 and will be available for Windows Server 2019 in early 2021. Check for updates on the [Microsoft Windows Containers issue tracker](https://github.com/microsoft/Windows-Containers/issues/44).
+There is a [known limitation](/docs/tasks/configure-pod-container/configure-gmsa/#gmsa-limitations)
+when using GMSA with ContainerD to access Windows network shares which
+requires a kernel patch. Updates to address this limitation are currently
+available for Windows Server, Version 2004 and will be available for Windows
+Server 2019 in early 2021. Check for updates on the
+[Microsoft Windows Containers issue tracker](https://github.com/microsoft/Windows-Containers/issues/44).
 {{< /caution >}}
 
 #### Persistent Storage
 
-Kubernetes [volumes](/docs/concepts/storage/volumes/) enable complex applications, with data persistence and Pod volume sharing requirements, to be deployed on Kubernetes. Management of persistent volumes associated with a specific storage back-end or protocol includes actions such as: provisioning/de-provisioning/resizing of volumes, attaching/detaching a volume to/from a Kubernetes node and mounting/dismounting a volume to/from individual containers in a pod that needs to persist data. The code implementing these volume management actions for a specific storage back-end or protocol is shipped in the form of a Kubernetes volume [plugin](/docs/concepts/storage/volumes/#types-of-volumes). The following broad classes of Kubernetes volume plugins are supported on Windows:
+Kubernetes [volumes](/docs/concepts/storage/volumes/) enable complex
+applications, with data persistence and Pod volume sharing requirements, to be
+deployed on Kubernetes. Management of persistent volumes associated with a
+specific storage back-end or protocol includes actions such as:
+provisioning/de-provisioning/resizing of volumes, attaching/detaching a volume
+to/from a Kubernetes node and mounting/dismounting a volume to/from individual
+containers in a pod that needs to persist data. The code implementing these
+volume management actions for a specific storage back-end or protocol is
+shipped in the form of a Kubernetes volume
+[plugin](/docs/concepts/storage/volumes/#types-of-volumes). The following
+broad classes of Kubernetes volume plugins are supported on Windows:
 
 ##### In-tree Volume Plugins
 
-Code associated with in-tree volume plugins ship as part of the core Kubernetes code base. Deployment of in-tree volume plugins do not require installation of additional scripts or deployment of separate containerized plugin components. These plugins can handle: provisioning/de-provisioning and resizing of volumes in the storage backend, attaching/detaching of volumes to/from a Kubernetes node and mounting/dismounting a volume to/from individual containers in a pod. The following in-tree plugins support Windows nodes:
+Code associated with in-tree volume plugins ship as part of the core
+Kubernetes code base. Deployment of in-tree volume plugins do not require
+installation of additional scripts or deployment of separate containerized
+plugin components. These plugins can handle: provisioning/de-provisioning and
+resizing of volumes in the storage backend, attaching/detaching of volumes
+to/from a Kubernetes node and mounting/dismounting a volume to/from individual
+containers in a pod. The following in-tree plugins support Windows nodes:
 
 * [awsElasticBlockStore](/docs/concepts/storage/volumes/#awselasticblockstore)
 * [azureDisk](/docs/concepts/storage/volumes/#azuredisk)
@@ -144,7 +229,16 @@ Code associated with in-tree volume plugins ship as part of the core Kubernetes
 
 ##### FlexVolume Plugins
 
-Code associated with [FlexVolume](/docs/concepts/storage/volumes/#flexVolume) plugins ship as out-of-tree scripts or binaries that need to be deployed directly on the host. FlexVolume plugins handle attaching/detaching of volumes to/from a Kubernetes node and mounting/dismounting a volume to/from individual containers in a pod. Provisioning/De-provisioning of persistent volumes associated with FlexVolume plugins may be handled through an external provisioner that is typically separate from the FlexVolume plugins. The following FlexVolume [plugins](https://github.com/Microsoft/K8s-Storage-Plugins/tree/master/flexvolume/windows), deployed as powershell scripts on the host, support Windows nodes:
+Code associated with [FlexVolume](/docs/concepts/storage/volumes/#flexVolume)
+plugins ship as out-of-tree scripts or binaries that need to be deployed
+directly on the host. FlexVolume plugins handle attaching/detaching of volumes
+to/from a Kubernetes node and mounting/dismounting a volume to/from individual
+containers in a pod. Provisioning/De-provisioning of persistent volumes
+associated with FlexVolume plugins may be handled through an external
+provisioner that is typically separate from the FlexVolume plugins. The
+following FlexVolume
+[plugins](https://github.com/Microsoft/K8s-Storage-Plugins/tree/master/flexvolume/windows),
+deployed as powershell scripts on the host, support Windows nodes:
 
 * [SMB](https://github.com/microsoft/K8s-Storage-Plugins/tree/master/flexvolume/windows/plugins/microsoft.com~smb.cmd)
 * [iSCSI](https://github.com/microsoft/K8s-Storage-Plugins/tree/master/flexvolume/windows/plugins/microsoft.com~iscsi.cmd)
@@ -153,13 +247,40 @@ Code associated with [FlexVolume](/docs/concepts/storage/volumes/#flexVolume) pl
 
 {{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
-Code associated with {{< glossary_tooltip text="CSI" term_id="csi" >}} plugins ship as out-of-tree scripts and binaries that are typically distributed as container images and deployed using standard Kubernetes constructs like DaemonSets and StatefulSets. CSI plugins handle a wide range of volume management actions in Kubernetes: provisioning/de-provisioning/resizing of volumes, attaching/detaching of volumes to/from a Kubernetes node and mounting/dismounting a volume to/from individual containers in a pod, backup/restore of persistent data using snapshots and cloning. CSI plugins typically consist of node plugins (that run on each node as a DaemonSet) and controller plugins.
+Code associated with {{< glossary_tooltip text="CSI" term_id="csi" >}} plugins
+ship as out-of-tree scripts and binaries that are typically distributed as
+container images and deployed using standard Kubernetes constructs like
+DaemonSets and StatefulSets. CSI plugins handle a wide range of volume
+management actions in Kubernetes: provisioning/de-provisioning/resizing of
+volumes, attaching/detaching of volumes to/from a Kubernetes node and
+mounting/dismounting a volume to/from individual containers in a pod,
+backup/restore of persistent data using snapshots and cloning. CSI plugins
+typically consist of node plugins (that run on each node as a DaemonSet) and
+controller plugins.
 
-CSI node plugins (especially those associated with persistent volumes exposed as either block devices or over a shared file-system) need to perform various privileged operations like scanning of disk devices, mounting of file systems, etc. These operations differ for each host operating system. For Linux worker nodes, containerized CSI node plugins are typically deployed as privileged containers. For Windows worker nodes, privileged operations for containerized CSI node plugins is supported using [csi-proxy](https://github.com/kubernetes-csi/csi-proxy), a community-managed, stand-alone binary that needs to be pre-installed on each Windows node. Please refer to the deployment guide of the CSI plugin you wish to deploy for further details.
+CSI node plugins (especially those associated with persistent volumes exposed
+as either block devices or over a shared file-system) need to perform various
+privileged operations like scanning of disk devices, mounting of file systems,
+etc. These operations differ for each host operating system. For Linux worker
+nodes, containerized CSI node plugins are typically deployed as privileged
+containers. For Windows worker nodes, privileged operations for containerized
+CSI node plugins is supported using
+[csi-proxy](https://github.com/kubernetes-csi/csi-proxy), a community-managed,
+stand-alone binary that needs to be pre-installed on each Windows node. Please
+refer to the deployment guide of the CSI plugin you wish to deploy for further
+details.
 
 #### Networking
 
-Networking for Windows containers is exposed through [CNI plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/). Windows containers function similarly to virtual machines in regards to networking. Each container has a virtual network adapter (vNIC) which is connected to a Hyper-V virtual switch (vSwitch). The Host Networking Service (HNS) and the Host Compute Service (HCS) work together to create containers and attach container vNICs to networks. HCS is responsible for the management of containers whereas HNS is responsible for the management of networking resources such as:
+Networking for Windows containers is exposed through
+[CNI plugins](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/).
+Windows containers function similarly to virtual machines in regards to
+networking. Each container has a virtual network adapter (vNIC) which is
+connected to a Hyper-V virtual switch (vSwitch). The Host Networking Service
+(HNS) and the Host Compute Service (HCS) work together to create containers
+and attach container vNICs to networks. HCS is responsible for the management
+of containers whereas HNS is responsible for the management of networking
+resources such as:
 
 * Virtual networks (including creation of vSwitches)
 * Endpoints / vNICs
@@ -175,19 +296,155 @@ The following service spec types are supported:
 
 ##### Network modes
 
-Windows supports five different networking drivers/modes: L2bridge, L2tunnel, Overlay, Transparent, and NAT. In a heterogeneous cluster with Windows and Linux worker nodes, you need to select a networking solution that is compatible on both Windows and Linux. The following out-of-tree plugins are supported on Windows, with recommendations on when to use each CNI:
+Windows supports five different networking drivers/modes: L2bridge, L2tunnel,
+Overlay, Transparent, and NAT. In a heterogeneous cluster with Windows and
+Linux worker nodes, you need to select a networking solution that is
+compatible on both Windows and Linux. The following out-of-tree plugins are
+supported on Windows, with recommendations on when to use each CNI:
 
-| Network Driver | Description | Container Packet Modifications | Network Plugins | Network Plugin Characteristics |
-| -------------- | ----------- | ------------------------------ | --------------- | ------------------------------ |
-| L2bridge       | Containers are attached to an external vSwitch. Containers are attached to the underlay network, although the physical network doesn't need to learn the container MACs because they are rewritten on ingress/egress. | MAC is rewritten to host MAC, IP may be rewritten to host IP using HNS OutboundNAT policy. | [win-bridge](https://github.com/containernetworking/plugins/tree/master/plugins/main/windows/win-bridge), [Azure-CNI](https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md), Flannel host-gateway uses win-bridge | win-bridge uses L2bridge network mode, connects containers to the underlay of hosts, offering best performance. Requires user-defined routes (UDR) for inter-node connectivity. |
-| L2Tunnel | This is a special case of l2bridge, but only used on Azure. All packets are sent to the virtualization host where SDN policy is applied. | MAC rewritten, IP visible on the underlay network | [Azure-CNI](https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md) | Azure-CNI allows integration of containers with Azure vNET, and allows them to leverage the set of capabilities that [Azure Virtual Network provides](https://azure.microsoft.com/en-us/services/virtual-network/). For example, securely connect to Azure services or use Azure NSGs. See [azure-cni for some examples](https://docs.microsoft.com/en-us/azure/aks/concepts-network#azure-cni-advanced-networking) |
-| Overlay (Overlay networking for Windows in Kubernetes is in *alpha* stage) | Containers are given a vNIC connected to an external vSwitch. Each overlay network gets its own IP subnet, defined by a custom IP prefix.The overlay network driver uses VXLAN encapsulation. | Encapsulated with an outer header. | [Win-overlay](https://github.com/containernetworking/plugins/tree/master/plugins/main/windows/win-overlay), Flannel VXLAN (uses win-overlay) | win-overlay should be used when virtual container networks are desired to be isolated from underlay of hosts (e.g. for security reasons). Allows for IPs to be re-used for different overlay networks (which have different VNID tags)  if you are restricted on IPs in your datacenter.  This option requires [KB4489899](https://support.microsoft.com/help/4489899) on Windows Server 2019. |
-| Transparent (special use case for [ovn-kubernetes](https://github.com/openvswitch/ovn-kubernetes)) | Requires an external vSwitch. Containers are attached to an external vSwitch which enables intra-pod communication via logical networks (logical switches and routers). | Packet is encapsulated either via [GENEVE](https://datatracker.ietf.org/doc/draft-gross-geneve/) or [STT](https://datatracker.ietf.org/doc/draft-davie-stt/) tunneling to reach pods which are not on the same host.  <br/> Packets are forwarded or dropped via the tunnel metadata information supplied by the ovn network controller. <br/> NAT is done for north-south communication. | [ovn-kubernetes](https://github.com/openvswitch/ovn-kubernetes) | [Deploy via ansible](https://github.com/openvswitch/ovn-kubernetes/tree/master/contrib). Distributed ACLs can be applied via Kubernetes policies. IPAM support. Load-balancing can be achieved without kube-proxy. NATing is done without using iptables/netsh. |
-| NAT (*not used in Kubernetes*) | Containers are given a vNIC connected to an internal vSwitch. DNS/DHCP is provided using an internal component called [WinNAT](https://blogs.technet.microsoft.com/virtualization/2016/05/25/windows-nat-winnat-capabilities-and-limitations/) | MAC and IP is rewritten to host MAC/IP. | [nat](https://github.com/Microsoft/windows-container-networking/tree/master/plugins/nat) | Included here for completeness |
+<table>
+ <thead>
+  <tr>
+   <th>Network Driver</th>
+   <th>Description</th>
+   <th>Container Packet Modifications</th>
+   <th>Network Plugins</th>
+   <th>Network Plugin Characteristics</th>
+  </tr>
+ </thead>
+ <tbody>
+  <tr>
+   <td>L2bridge</td>
+   <td>Containers are attached to an external vSwitch. Containers are attached
+      to the underlay network, although the physical network doesn't need to learn
+      the container. MACs because they are rewritten on ingress/egress.
+   </td>
+   <td>
+      MAC is rewritten to host MAC, IP may be rewritten to host IP using HNS
+      OutboundNAT policy.
+   </td>
+   <td>
+    <a href="https://github.com/containernetworking/plugins/tree/master/plugins/main/windows/win-bridge">win-bridge<a>,
+    <a href="https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md">Azure-CNI</a>,
+    Flannel host-gateway uses win-bridge
+   </td>
+   <td>
+    win-bridge uses L2bridge network mode,
+    connects containers to the underlay of hosts, offering best performance.
+    Requires user-defined routes (UDR) for inter-node connectivity.
+   </td>
+  </tr>
+  <tr>
+   <td>L2Tunnel</td>
+   <td>
+    This is a special case of l2bridge, but only used on Azure. All packets
+    are sent to the virtualization host where SDN policy is applied.
+   </td>
+   <td>
+    MAC rewritten, IP visible on the underlay network
+   </td>
+   <td>
+    <a href="https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md">Azure-CNI</a>
+   </td>
+   <td>
+      Azure-CNI allows integration of containers with Azure vNET, and allows them
+      to leverage the set of capabilities that
+      <a href="https://azure.microsoft.com/en-us/services/virtual-network/">Azure Virtual Network</a>
+      provides. For example, securely connect to Azure services or use Azure NSGs.
+      See <a href="https://docs.microsoft.com/en-us/azure/aks/concepts-network#azure-cni-advanced-networking">azure-cni</a>
+      for some examples.
+   </td>
+  </tr>
+  <tr>
+   <td>Overlay (Overlay networking for Windows in Kubernetes is in <B>Alpha</B> stage)</td>
+   <td>
+    Containers are given a vNIC connected to an external vSwitch. Each overlay
+    network gets its own IP subnet, defined by a custom IP prefix.The overlay
+    network driver uses VXLAN encapsulation.
+   </td>
+   <td>
+    Encapsulated with an outer header.
+   </td>
+   <td>
+    <a href="https://github.com/containernetworking/plugins/tree/master/plugins/main/windows/win-overlay">Win-overlay</a>,
+    Flannel VXLAN (uses win-overlay)
+   </td>
+   <td>
+    win-overlay should be used when virtual container networks are desired to
+    be isolated from underlay of hosts (e.g. for security reasons). Allows for IPs
+    to be re-used for different overlay networks (which have different VNID tags)
+    if you are restricted on IPs in your datacenter.  This option requires
+    <a href="https://support.microsoft.com/help/4489899">KB4489899</a> on Windows Server
+    2019.
+   </td>
+  </tr>
+  <tr>
+   <td>
+    Transparent (special use case for <a href="https://github.com/openvswitch/ovn-kubernetes">ovn-kubernetes</a>)
+   </td>
+   <td>
+    Requires an external vSwitch. Containers are attached to an external
+    vSwitch which enables intra-pod communication via logical networks (logical
+    switches and routers).
+   </td>
+   <td>
+    Packet is encapsulated either via
+    <a href="https://datatracker.ietf.org/doc/draft-gross-geneve/">GENEVE</a>,
+    <a href="https://datatracker.ietf.org/doc/draft-davie-stt/">STT</a> tunneling to reach
+    pods which are not on the same host.<br/> Packets are forwarded or dropped
+    via the tunnel metadata information supplied by the ovn network controller.
+    <br/>
+    NAT is done for north-south communication.
+   </td>
+   <td>
+    <a href="https://github.com/openvswitch/ovn-kubernetes">ovn-kubernetes</a>
+   </td>
+   <td>
+     Deploy via <a href="https://github.com/openvswitch/ovn-kubernetes/tree/master/contrib">Ansible</a>.
+     Distributed ACLs can be applied via Kubernetes policies. IPAM support.
+     Load-balancing can be achieved without kube-proxy. NATing is done without
+     using iptables/netsh.
+   </td>
+  </tr>
+  <tr>
+   <td>NAT (<B>not used in Kubernetes</B>)</td>
+   <td>
+    Containers are given a vNIC connected to an internal vSwitch. DNS/DHCP is
+    provided using an internal component called
+    <a href="https://blogs.technet.microsoft.com/virtualization/2016/05/25/windows-nat-winnat-capabilities-and-limitations">WinNAT</a>.
+   </td>
+   <td>
+    MAC and IP is rewritten to host MAC/IP.
+   </td>
+   <td>
+    <a href="https://github.com/Microsoft/windows-container-networking/tree/master/plugins/nat">nat</a>
+   </td>
+   <td>
+    Included here for completeness
+   </td>
+  </tr>
+ </tbody>
+</table>
 
-As outlined above, the [Flannel](https://github.com/coreos/flannel) CNI [meta plugin](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel) is also supported on [Windows](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel#windows-support-experimental) via the [VXLAN network backend](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan) (**alpha support** ; delegates to win-overlay) and [host-gateway network backend](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#host-gw) (stable support; delegates to win-bridge). This plugin supports delegating to one of the reference CNI plugins (win-overlay, win-bridge), to work in conjunction with Flannel daemon on Windows (Flanneld) for automatic node subnet lease assignment and HNS network creation. This plugin reads in its own configuration file (cni.conf), and aggregates it with the environment variables from the FlannelD generated subnet.env file. It then delegates to one of the reference CNI plugins for network plumbing, and sends the correct configuration containing the node-assigned subnet to the IPAM plugin (e.g. host-local).
+As outlined above, the [Flannel](https://github.com/coreos/flannel) CNI
+[meta plugin](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel)
+is also supported on
+[Windows](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel#windows-support-experimental)
+via the [VXLAN network backend](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan)
+(**alpha support** ; delegates to win-overlay) and
+[host-gateway network backend](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#host-gw)
+(stable support; delegates to win-bridge). This plugin supports delegating to
+one of the reference CNI plugins (win-overlay, win-bridge), to work in
+conjunction with Flannel daemon on Windows (Flanneld) for automatic node
+subnet lease assignment and HNS network creation. This plugin reads in its own
+configuration file (cni.conf), and aggregates it with the environment
+variables from the FlannelD generated subnet.env file. It then delegates to
+one of the reference CNI plugins for network plumbing, and sends the correct
+configuration containing the node-assigned subnet to the IPAM plugin (e.g.
+host-local).
 
-For the node, pod, and service objects, the following network flows are supported for TCP/UDP traffic:
+For the node, pod, and service objects, the following network flows are
+supported for TCP/UDP traffic:
 
 * Pod -> Pod (IP)
 * Pod -> Pod (Name)
@@ -209,87 +466,229 @@ The following IPAM options are supported on Windows:
 
 ##### Load balancing and Services
 
-On Windows, you can use the following settings to configure Services and load balancing behavior:
+On Windows, you can use the following settings to configure Services and load
+balancing behavior:
 
 {{< table caption="Windows Service Settings" >}}
-| Feature | Description | Supported Kubernetes version  | Supported Windows OS build | How to enable |
-| ------- | ----------- | ----------------------------- | -------------------------- | ------------- |
-| Session affinity | Ensures that connections from a particular client are passed to the same Pod each time. | v1.20+ | [Windows Server vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) (or higher) | Set `service.spec.sessionAffinity` to "ClientIP" |
-| Direct Server Return (DSR) | Load balancing mode where the IP address fixups and the LBNAT occurs at the container vSwitch port directly; service traffic arrives with the source IP set as the originating pod IP. | v1.20+ | Windows Server 2019 | Set the following flags in kube-proxy: `--feature-gates="WinDSR=true" --enable-dsr=true` |
-| Preserve-Destination | Skips DNAT of service traffic, thereby preserving the virtual IP of the target service in packets reaching the backend Pod. Also disables node-node forwarding. | v1.20+ | Windows Server, version 1903 (or higher) | Set `"preserve-destination": "true"` in service annotations and enable DSR in kube-proxy. |
-| IPv4/IPv6 dual-stack networking | Native IPv4-to-IPv4 in parallel with IPv6-to-IPv6 communications to, from, and within a cluster | v1.19+ | Windows Server, version 2004 (or higher) | See [IPv4/IPv6 dual-stack](#ipv4ipv6-dual-stack) |
-| Client IP preservation | Ensures that source IP of incoming ingress traffic gets preserved. Also disables node-node forwarding. | v1.20+ | Windows Server, version 2019 (or higher) | Set `service.spec.externalTrafficPolicy` to "Local" and enable DSR in kube-proxy |
+
+<table>
+ <thead>
+  <tr>
+   <th>Feature</th>
+   <th>Description</th>
+   <th>Supported Kubernetes version</th>
+   <th>Supported Windows OS build</th>
+   <th>How to enable</th>
+  </tr>
+ <thead>
+ <tbody>
+  <tr>
+   <td>Session affinity</td>
+   <td>
+    Ensures that connections from a particular client are passed to the same
+    Pod each time.
+   </td>
+   <td>v1.20+</td>
+   <td>
+    <a href="https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/">Windows Server vNext Insider Preview Build 19551</a> (or higher)
+   </td>
+   <td>
+    Set <code>service.spec.sessionAffinity</code> to "ClientIP"
+   </td>
+  </tr>
+  <tr>
+   <td>Direct Server Return (DSR) </td>
+   <td>
+    Load balancing mode where the IP address fixups and the LBNAT occurs at
+    the container vSwitch port directly; service traffic arrives with the source
+    IP set as the originating pod IP.
+   </td>
+   <td>v1.20+</td>
+   <td>
+    Windows Server 2019
+   </td>
+   <td>
+    Set the following flags in kube-proxy:
+    <code>--feature-gates="WinDSR=true" --enable-dsr=true</code>
+   </td>
+  </tr>
+  <tr>
+   <td>Preserve-Destination</td>
+   <td>
+    Skips DNAT of service traffic, thereby preserving the virtual IP of the target
+    service in packets reaching the backend Pod. Also disables node-node forwarding.
+   </td>
+   <td>v1.20+</td>
+   <td>Windows Server, version 1903 (or higher)</td>
+   <td>
+    Set <code>"preserve-destination": "true"</code> in service annotations
+    and enable DSR in kube-proxy.
+   </td>
+  </tr>
+  <tr>
+   <td>IPv4/IPv6 dual-stack networking</td>
+   <td>
+    Native IPv4-to-IPv4 in parallel with IPv6-to-IPv6 communications to, from,
+    and within a cluster
+   </td>
+   <td>v1.19+</td>
+   <td>Windows Server, version 2004 (or higher)</td>
+   <td>
+    See <a href="#ipv4ipv6-dual-stack">IPv4/IPv6 dual-stack</a>
+   </td>
+  </tr>
+  <tr>
+   <td>Client IP preservation</td>
+   <td>
+    Ensures that source IP of incoming ingress traffic gets preserved. Also
+    disables node-node forwarding.
+   </td>
+   <td>v1.20+</td>
+   <td>Windows Server, version 2019 (or higher)</td>
+   <td>
+    Set <code>service.spec.externalTrafficPolicy</code> to "Local" and enable
+    DSR in kube-proxy.
+   </td>
+  </tr>
+ </tbody>
+</table>
+
 {{< /table >}}
 
 #### IPv4/IPv6 dual-stack
 
-You can enable IPv4/IPv6 dual-stack networking for `l2bridge` networks using the `IPv6DualStack` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/). See [enable IPv4/IPv6 dual stack](/docs/concepts/services-networking/dual-stack#enable-ipv4ipv6-dual-stack) for more details.
+You can enable IPv4/IPv6 dual-stack networking for `l2bridge` networks using
+the `IPv6DualStack` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/). See
+[enable IPv4/IPv6 dual stack](/docs/concepts/services-networking/dual-stack#enable-ipv4ipv6-dual-stack)
+for more details.
 
-{{< note >}}
-On Windows, using IPv6 with Kubernetes require Windows Server, version 2004 (kernel version 10.0.19041.610) or later.
-{{< /note >}}
+On Windows, using IPv6 with Kubernetes require Windows Server, version 2004
+(kernel version 10.0.19041.610) or later.
 
-{{< note >}}
 Overlay (VXLAN) networks on Windows do not support dual-stack networking today.
-{{< /note >}}
 
 ### Limitations
 
-Windows is only supported as a worker node in the Kubernetes architecture and component matrix. This means that a Kubernetes cluster must always include Linux master nodes, zero or more Linux worker nodes, and zero or more Windows worker nodes.
-
+Windows is only supported as a worker node in the Kubernetes architecture and
+component matrix. This means that a Kubernetes cluster must always include
+Linux master nodes, zero or more Linux worker nodes, and zero or more Windows
+worker nodes.
 
 #### Resource Handling
 
- Linux cgroups are used as a pod boundary for resource controls in Linux. Containers are created within that boundary for network, process and file system isolation. The cgroups APIs can be used to gather cpu/io/memory stats. In contrast, Windows uses a Job object per container with a system namespace filter to contain all processes in a container and provide logical isolation from the host. There is no way to run a Windows container without the namespace filtering in place. This means that system privileges cannot be asserted in the context of the host, and thus privileged containers are not available on Windows. Containers cannot assume an identity from the host because the Security Account Manager (SAM) is separate.
+Linux cgroups are used as a pod boundary for resource controls in Linux.
+Containers are created within that boundary for network, process and file
+system isolation. The cgroups APIs can be used to gather cpu/io/memory stats.
+In contrast, Windows uses a Job object per container with a system namespace
+filter to contain all processes in a container and provide logical isolation
+from the host. There is no way to run a Windows container without the
+namespace filtering in place. This means that system privileges cannot be
+asserted in the context of the host, and thus privileged containers are not
+available on Windows. Containers cannot assume an identity from the host
+because the Security Account Manager (SAM) is separate.
 
 #### Resource Reservations
 
 ##### Memory Reservations
-Windows does not have an out-of-memory process killer as Linux does. Windows always treats all user-mode memory allocations as virtual, and pagefiles are mandatory. The net effect is that Windows won't reach out of memory conditions the same way Linux does, and processes page to disk instead of being subject to out of memory (OOM) termination. If memory is over-provisioned and all physical memory is exhausted, then paging can slow down performance.
 
-Keeping memory usage within reasonable bounds is possible using the kubelet parameters `--kubelet-reserve` and/or `--system-reserve` to account for memory usage on the node (outside of containers). This reduces [NodeAllocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable). 
+Windows does not have an out-of-memory process killer as Linux does. Windows
+always treats all user-mode memory allocations as virtual, and pagefiles are
+mandatory. The net effect is that Windows won't reach out of memory conditions
+the same way Linux does, and processes page to disk instead of being subject
+to out of memory (OOM) termination. If memory is over-provisioned and all
+physical memory is exhausted, then paging can slow down performance.
 
-{{< note >}}
-As you deploy workloads, use resource limits (must set only limits or limits must equal requests) on containers. This also subtracts from NodeAllocatable and prevents the scheduler from adding more pods once a node is full.
-{{< /note >}}
+Keeping memory usage within reasonable bounds is possible using the kubelet
+parameters `--kubelet-reserve` and/or `--system-reserve` to account for memory
+usage on the node (outside of containers). This reduces
+[NodeAllocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable). 
 
-A best practice to avoid over-provisioning is to configure the kubelet with a system reserved memory of at least 2GB to account for Windows, Docker, and Kubernetes processes.
+As you deploy workloads, use resource limits (must set only limits or limits
+must equal requests) on containers. This also subtracts from NodeAllocatable
+and prevents the scheduler from adding more pods once a node is full.
+
+A best practice to avoid over-provisioning is to configure the kubelet with a
+system reserved memory of at least 2GB to account for Windows, Docker, and
+Kubernetes processes.
 
 ##### CPU Reservations
-To account for Windows, Docker and other Kubernetes host processes it is recommended to reserve a percentage of CPU so they are able to respond to events. This value needs to be scaled based on the number of CPU cores available on the Windows node.To determine this percentage a user should identify the maximum pod density for each of their nodes and monitor the CPU usage of the system services choosing a value that meets their workload needs.
 
-Keeping CPU usage within reasonable bounds is possible using the kubelet parameters `--kubelet-reserve` and/or `--system-reserve` to account for CPU usage on the node (outside of containers). This reduces [NodeAllocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable). 
+To account for Windows, Docker and other Kubernetes host processes it is
+recommended to reserve a percentage of CPU so they are able to respond to
+events. This value needs to be scaled based on the number of CPU cores
+available on the Windows node.To determine this percentage a user should
+identify the maximum pod density for each of their nodes and monitor the CPU
+usage of the system services choosing a value that meets their workload needs.
+
+Keeping CPU usage within reasonable bounds is possible using the kubelet
+parameters `--kubelet-reserve` and/or `--system-reserve` to account for CPU
+usage on the node (outside of containers). This reduces
+[NodeAllocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable). 
 
 #### Feature Restrictions
+
 * TerminationGracePeriod: not implemented
 * Single file mapping: to be implemented with CRI-ContainerD
 * Termination message: to be implemented with CRI-ContainerD
 * Privileged Containers: not currently supported in Windows containers
 * HugePages: not currently supported in Windows containers
-* The existing node problem detector is Linux-only and requires privileged containers. In general, we don't expect this to be used on Windows because privileged containers are not supported
-* Not all features of shared namespaces are supported (see API section for more details)
+* The existing node problem detector is Linux-only and requires privileged
+  containers. In general, we don't expect this to be used on Windows because
+  privileged containers are not supported
+* Not all features of shared namespaces are supported (see API section for
+  more details)
 
 #### Difference in behavior of flags when compared to Linux
+
 The behavior of the following kubelet flags is different on Windows nodes as described below:
 
-* `--kubelet-reserve`, `--system-reserve` , and `--eviction-hard` flags update Node Allocatable
-* Eviction by using `--enforce-node-allocable` is not implemented
-* Eviction by using `--eviction-hard` and `--eviction-soft` are not implemented
-* MemoryPressure Condition is not implemented
-* There are no OOM eviction actions taken by the kubelet
-* Kubelet running on the windows node does not have memory restrictions. `--kubelet-reserve` and `--system-reserve` do not set limits on kubelet or processes running on the host. This means kubelet or a process on the host could cause memory resource starvation outside the node-allocatable and scheduler
-* An additional flag to set the priority of the kubelet process is available on the Windows nodes called `--windows-priorityclass`. This flag allows kubelet process to get more CPU time slices when compared to other processes running on the Windows host. More information on the allowable values and their meaning is available at [Windows Priority Classes](https://docs.microsoft.com/en-us/windows/win32/procthread/scheduling-priorities#priority-class). In order for kubelet to always have enough CPU cycles it is recommended to set this flag to `ABOVE_NORMAL_PRIORITY_CLASS` and above
+* `--kubelet-reserve`, `--system-reserve` , and `--eviction-hard` flags update
+  Node Allocatable
+
+* Eviction by using `--enforce-node-allocable` is not implemented.
+
+* Eviction by using `--eviction-hard` and `--eviction-soft` are not implemented.
+
+* `MemoryPressure` Condition is not implemented.
+
+* There are no OOM eviction actions taken by the kubelet.
+
+* Kubelet running on the windows node does not have memory restrictions.
+  `--kubelet-reserve` and `--system-reserve` do not set limits on kubelet or
+  processes running on the host. This means kubelet or a process on the host
+  could cause memory resource starvation outside the node-allocatable and
+  scheduler
+
+* An additional flag to set the priority of the kubelet process is available
+  on the Windows nodes called `--windows-priorityclass`. This flag allows
+  kubelet process to get more CPU time slices when compared to other processes
+  running on the Windows host. More information on the allowable values and
+  their meaning is available at
+  [Windows Priority Classes](https://docs.microsoft.com/en-us/windows/win32/procthread/scheduling-priorities#priority-class).
+  In order for kubelet to always have enough CPU cycles it is recommended to set
+  this flag to `ABOVE_NORMAL_PRIORITY_CLASS` and above.
 
 #### Storage
 
-Windows has a layered filesystem driver to mount container layers and create a copy filesystem based on NTFS. All file paths in the container are resolved only within the context of that container.
+Windows has a layered filesystem driver to mount container layers and create a
+copy filesystem based on NTFS. All file paths in the container are resolved
+only within the context of that container.
 
-* With Docker Volume mounts can only target a directory in the container, and not an individual file. This limitation does not exist with CRI-containerD.
-* Volume mounts cannot project files or directories back to the host filesystem
-* Read-only filesystems are not supported because write access is always required for the Windows registry and SAM database. However, read-only volumes are supported
-* Volume user-masks and permissions are not available. Because the SAM is not shared between the host & container, there's no mapping between them. All permissions are resolved within the context of the container
+* With Docker Volume mounts can only target a directory in the container, and
+  not an individual file. This limitation does not exist with CRI-containerD.
 
-As a result, the following storage functionality is not supported on Windows nodes
+* Volume mounts cannot project files or directories back to the host
+  filesystem
+
+* Read-only filesystems are not supported because write access is always
+  required for the Windows registry and SAM database. However, read-only
+  volumes are supported
+
+* Volume user-masks and permissions are not available. Because the SAM is not
+  shared between the host & container, there's no mapping between them. All
+  permissions are resolved within the context of the container
+
+As a result, the following storage functionality is not supported on Windows nodes:
 
 * Volume subpath mounts. Only the entire volume can be mounted in a Windows container.
 * Subpath volume mounting for Secrets
@@ -304,24 +703,61 @@ As a result, the following storage functionality is not supported on Windows nod
 
 #### Networking {#networking-limitations}
 
-Windows Container Networking differs in some important ways from Linux networking. The [Microsoft documentation for Windows Container Networking](https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/architecture) contains additional details and background.
+Windows Container Networking differs in some important ways from Linux
+networking. The [Microsoft documentation for Windows Container Networking](https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/architecture)
+contains additional details and background.
 
-The Windows host networking service and virtual switch implement namespacing and can create virtual NICs as needed for a pod or container. However, many configurations such as DNS, routes, and metrics are stored in the Windows registry database rather than /etc/... files as they are on Linux. The Windows registry for the container is separate from that of the host, so concepts like mapping /etc/resolv.conf from the host into a container don't have the same effect they would on Linux. These must be configured using Windows APIs run in the context of that container. Therefore CNI implementations need to call the HNS instead of relying on file mappings to pass network details into the pod or container.
+The Windows host networking service and virtual switch implement namespacing
+and can create virtual NICs as needed for a pod or container. However, many
+configurations such as DNS, routes, and metrics are stored in the Windows
+registry database rather than /etc/... files as they are on Linux. The Windows
+registry for the container is separate from that of the host, so concepts like
+mapping /etc/resolv.conf from the host into a container don't have the same
+effect they would on Linux. These must be configured using Windows APIs run in
+the context of that container. Therefore CNI implementations need to call the
+HNS instead of relying on file mappings to pass network details into the pod
+or container.
 
 The following networking functionality is not supported on Windows nodes
 
-* Host networking mode is not available for Windows pods
-* Local NodePort access from the node itself fails (works for other nodes or external clients)
-* Accessing service VIPs from nodes will be available with a future release of Windows Server
-* A single service can only support up to 64 backend pods / unique destination IPs
-* Overlay networking support in kube-proxy is a beta feature. In addition, it requires [KB4482887](https://support.microsoft.com/en-us/help/4482887/windows-10-update-kb4482887) to be installed on Windows Server 2019
-* Local Traffic Policy in non-DSR mode
-* Windows containers connected to overlay networks do not support communicating over the IPv6 stack. There is outstanding Windows platform work required to enable this network driver to consume IPv6 addresses and subsequent Kubernetes work in kubelet, kube-proxy, and CNI plugins.
-* Outbound communication using the ICMP protocol via the win-overlay, win-bridge, and Azure-CNI plugin. Specifically, the Windows data plane ([VFP](https://www.microsoft.com/en-us/research/project/azure-virtual-filtering-platform/)) doesn't support ICMP packet transpositions. This means:
-  * ICMP packets directed to destinations within the same network (e.g. pod to pod communication via ping) work as expected and without any limitations
+* Host networking mode is not available for Windows pods.
+
+* Local NodePort access from the node itself fails (works for other nodes or
+  external clients).
+
+* Accessing service VIPs from nodes will be available with a future release of
+  Windows Server.
+
+* A single service can only support up to 64 backend pods / unique destination IPs.
+
+* Overlay networking support in kube-proxy is a beta feature. In addition, it
+  requires [KB4482887](https://support.microsoft.com/en-us/help/4482887/windows-10-update-kb4482887)
+  to be installed on Windows Server 2019.
+
+* Local Traffic Policy in non-DSR mode.
+
+* Windows containers connected to overlay networks do not support
+  communicating over the IPv6 stack. There is outstanding Windows platform
+  work required to enable this network driver to consume IPv6 addresses and
+  subsequent Kubernetes work in kubelet, kube-proxy, and CNI plugins.
+
+* Outbound communication using the ICMP protocol via the win-overlay,
+  win-bridge, and Azure-CNI plugin. Specifically, the Windows data plane
+  ([VFP](https://www.microsoft.com/en-us/research/project/azure-virtual-filtering-platform/))
+  doesn't support ICMP packet transpositions. This means:
+
+  * ICMP packets directed to destinations within the same network (e.g. pod to
+    pod communication via ping) work as expected and without any limitations
+
   * TCP/UDP packets work as expected and without any limitations
-  * ICMP packets directed to pass through a remote network (e.g. pod to external internet communication via ping) cannot be transposed and thus will not be routed back to their source
-  * Since TCP/UDP packets can still be transposed, one can substitute `ping <destination>` with `curl <destination>` to be able to debug connectivity to the outside world.
+
+  * ICMP packets directed to pass through a remote network (e.g. pod to
+    external internet communication via ping) cannot be transposed and thus
+    will not be routed back to their source
+
+  * Since TCP/UDP packets can still be transposed, one can substitute
+    `ping <destination>` with `curl <destination>` to be able to debug connectivity
+    to the outside world.
 
 These features were added in Kubernetes v1.15:
 
@@ -329,334 +765,585 @@ These features were added in Kubernetes v1.15:
 
 ##### CNI Plugins
 
-* Windows reference network plugins win-bridge and win-overlay do not currently implement [CNI spec](https://github.com/containernetworking/cni/blob/master/SPEC.md) v0.4.0 due to missing "CHECK" implementation.
+* Windows reference network plugins `win-bridge` and `win-overlay` do not
+  currently implement [CNI spec](https://github.com/containernetworking/cni/blob/master/SPEC.md)
+  v0.4.0 due to missing "CHECK" implementation.
+
 * The Flannel VXLAN CNI has the following limitations on Windows:
 
-1. Node-pod connectivity isn't possible by design. It's only possible for local pods with Flannel v0.12.0 (or higher).
-2. We are restricted to using VNI 4096 and UDP port 4789. The VNI limitation is being worked on and will be overcome in a future release (open-source flannel changes). See the official [Flannel VXLAN](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan) backend docs for more details on these parameters.
+  1. Node-pod connectivity isn't possible by design. It's only possible for
+     local pods with Flannel v0.12.0 (or higher).
+
+  1. We are restricted to using VNI 4096 and UDP port 4789. The VNI limitation
+     is being worked on and will be overcome in a future release (open-source
+     flannel changes). See the official
+     [Flannel VXLAN](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan)
+     backend docs for more details on these parameters.
 
 ##### DNS {#dns-limitations}
 
-* ClusterFirstWithHostNet is not supported for DNS. Windows treats all names with a '.' as a FQDN and skips PQDN resolution
-* On Linux, you have a DNS suffix list, which is used when trying to resolve PQDNs. On Windows, we only have 1 DNS suffix, which is the DNS suffix associated with that pod's namespace (mydns.svc.cluster.local for example). Windows can resolve FQDNs and services or names resolvable with only that suffix. For example, a pod spawned in the default namespace, will have the DNS suffix **default.svc.cluster.local**. On a Windows pod, you can resolve both **kubernetes.default.svc.cluster.local** and **kubernetes**, but not the in-betweens, like **kubernetes.default** or **kubernetes.default.svc**.
-* On Windows, there are multiple DNS resolvers that can be used. As these come with slightly different behaviors, using the `Resolve-DNSName` utility for name query resolutions is recommended.
+* ClusterFirstWithHostNet is not supported for DNS. Windows treats all names
+  with a '.' as a FQDN and skips PQDN resolution
+
+* On Linux, you have a DNS suffix list, which is used when trying to resolve
+  PQDNs. On Windows, we only have 1 DNS suffix, which is the DNS suffix
+  associated with that pod's namespace (mydns.svc.cluster.local for example).
+  Windows can resolve FQDNs and services or names resolvable with only that
+  suffix. For example, a pod spawned in the default namespace, will have the DNS
+  suffix `default.svc.cluster.local`. On a Windows pod, you can resolve both
+  `kubernetes.default.svc.cluster.local` and `kubernetes`, but not the
+  in-betweens, like `kubernetes.default` or `kubernetes.default.svc`.
+
+* On Windows, there are multiple DNS resolvers that can be used. As these come
+  with slightly different behaviors, using the `Resolve-DNSName` utility for
+  name query resolutions is recommended.
 
 ##### IPv6
 
-Kubernetes on Windows does not support single-stack "IPv6-only" networking. However,dual-stack IPv4/IPv6 networking for pods and nodes with single-family services is supported. See [IPv4/IPv6 dual-stack networking](#ipv4ipv6-dual-stack) for more details.
+Kubernetes on Windows does not support single-stack "IPv6-only" networking.
+However,dual-stack IPv4/IPv6 networking for pods and nodes with single-family
+services is supported.
+See [IPv4/IPv6 dual-stack networking](#ipv4ipv6-dual-stack) for more details.
 
 ##### Session affinity
 
-Setting the maximum session sticky time for Windows services using `service.spec.sessionAffinityConfig.clientIP.timeoutSeconds` is not supported.
+Setting the maximum session sticky time for Windows services using
+`service.spec.sessionAffinityConfig.clientIP.timeoutSeconds` is not supported.
 
 ##### Security
 
-Secrets are written in clear text on the node's volume (as compared to tmpfs/in-memory on linux). This means customers have to do two things
+Secrets are written in clear text on the node's volume (as compared to
+tmpfs/in-memory on linux). This means customers have to do two things:
 
 1. Use file ACLs to secure the secrets file location
-2. Use volume-level encryption using [BitLocker](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server)
+1. Use volume-level encryption using
+   [BitLocker](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server)
 
-[RunAsUsername](/docs/tasks/configure-pod-container/configure-runasusername) can be specified for Windows Pod's or Container's to execute the Container processes as a node-default user. This is roughly equivalent to [RunAsUser](/docs/concepts/policy/pod-security-policy/#users-and-groups).
+[RunAsUsername](/docs/tasks/configure-pod-container/configure-runasusername)
+can be specified for Windows Pod's or Container's to execute the Container
+processes as a node-default user. This is roughly equivalent to
+[RunAsUser](/docs/concepts/policy/pod-security-policy/#users-and-groups).
 
-Linux specific pod security context privileges such as SELinux, AppArmor, Seccomp, Capabilities (POSIX Capabilities), and others are not supported.
+Linux specific pod security context privileges such as SELinux, AppArmor,
+Seccomp, Capabilities (POSIX Capabilities), and others are not supported.
 
-In addition, as mentioned already, privileged containers are not supported on Windows.
+In addition, as mentioned already, privileged containers are not supported on
+Windows.
 
 #### API
 
-There are no differences in how most of the Kubernetes APIs work for Windows. The subtleties around what's different come down to differences in the OS and container runtime. In certain situations, some properties on workload APIs such as Pod or Container were designed with an assumption that they are implemented on Linux, failing to run on Windows.
+There are no differences in how most of the Kubernetes APIs work for Windows.
+The subtleties around what's different come down to differences in the OS and
+container runtime. In certain situations, some properties on workload APIs
+such as Pod or Container were designed with an assumption that they are
+implemented on Linux, failing to run on Windows.
 
 At a high level, these OS concepts are different:
 
-* Identity - Linux uses userID (UID) and groupID (GID) which are represented as integer types. User and group names are not canonical - they are an alias in `/etc/groups` or `/etc/passwd` back to UID+GID. Windows uses a larger binary security identifier (SID) which is stored in the Windows Security Access Manager (SAM) database. This database is not shared between the host and containers, or between containers.
-* File permissions - Windows uses an access control list based on SIDs, rather than a bitmask of permissions and UID+GID
-* File paths - convention on Windows is to use `\` instead of `/`. The Go IO libraries accept both types of file path separators. However, when you're setting a path or command line that's interpreted inside a container, `\` may be needed.
-* Signals - Windows interactive apps handle termination differently, and can implement one or more of these:
-  * A UI thread handles well-defined messages including WM_CLOSE
-  * Console apps handle ctrl-c or ctrl-break using a Control Handler
-  * Services register a Service Control Handler function that can accept SERVICE_CONTROL_STOP control codes
+* Identity - Linux uses userID (UID) and groupID (GID) which are represented
+  as integer types. User and group names are not canonical - they are an alias
+  in `/etc/groups` or `/etc/passwd` back to UID+GID. Windows uses a larger
+  binary security identifier (SID) which is stored in the Windows Security
+  Access Manager (SAM) database. This database is not shared between the host
+  and containers, or between containers.
 
-Exit Codes follow the same convention where 0 is success, nonzero is failure. The specific error codes may differ across Windows and Linux. However, exit codes passed from the Kubernetes components (kubelet, kube-proxy) are unchanged.
+* File permissions - Windows uses an access control list based on SIDs, rather
+  than a bitmask of permissions and UID+GID
+
+* File paths - convention on Windows is to use `\` instead of `/`. The Go IO
+  libraries accept both types of file path separators. However, when you're
+  setting a path or command line that's interpreted inside a container, `\` may
+  be needed.
+
+* Signals - Windows interactive apps handle termination differently, and can
+  implement one or more of these:
+
+  * A UI thread handles well-defined messages including `WM_CLOSE`
+
+  * Console apps handle ctrl-c or ctrl-break using a Control Handler
+
+  * Services register a Service Control Handler function that can accept
+    `SERVICE_CONTROL_STOP` control codes
+
+Exit Codes follow the same convention where 0 is success, nonzero is failure.
+The specific error codes may differ across Windows and Linux. However, exit
+codes passed from the Kubernetes components (kubelet, kube-proxy) are
+unchanged.
 
 ##### V1.Container
 
-* V1.Container.ResourceRequirements.limits.cpu and V1.Container.ResourceRequirements.limits.memory - Windows doesn't use hard limits for CPU allocations. Instead, a share system is used. The existing fields based on millicores are scaled into relative shares that are followed by the Windows scheduler. [see: kuberuntime/helpers_windows.go](https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/kuberuntime/helpers_windows.go), [see: resource controls in Microsoft docs](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/resource-controls)
-  * Huge pages are not implemented in the Windows container runtime, and are not available. They require [asserting a user privilege](https://docs.microsoft.com/en-us/windows/desktop/Memory/large-page-support) that's not configurable for containers.
-* V1.Container.ResourceRequirements.requests.cpu and V1.Container.ResourceRequirements.requests.memory - Requests are subtracted from node available resources, so they can be used to avoid overprovisioning a node. However, they cannot be used to guarantee resources in an overprovisioned node. They should be applied to all containers as a best practice if the operator wants to avoid overprovisioning entirely.
-* V1.Container.SecurityContext.allowPrivilegeEscalation - not possible on Windows, none of the capabilities are hooked up
-* V1.Container.SecurityContext.Capabilities - POSIX capabilities are not implemented on Windows
-* V1.Container.SecurityContext.privileged - Windows doesn't support privileged containers
+* V1.Container.ResourceRequirements.limits.cpu and
+  V1.Container.ResourceRequirements.limits.memory - Windows doesn't use hard
+  limits for CPU allocations. Instead, a share system is used. The existing
+  fields based on millicores are scaled into relative shares that are followed
+  by the Windows scheduler.
+  See [kuberuntime/helpers_windows.go](https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/kuberuntime/helpers_windows.go),
+  and [resource controls in Microsoft docs](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/resource-controls)
+
+  * Huge pages are not implemented in the Windows container runtime, and are
+    not available. They require
+    [asserting a user privilege](https://docs.microsoft.com/en-us/windows/desktop/Memory/large-page-support)
+    that's not configurable for containers.
+
+* V1.Container.ResourceRequirements.requests.cpu and
+  V1.Container.ResourceRequirements.requests.memory - Requests are subtracted
+  from node available resources, so they can be used to avoid overprovisioning a
+  node. However, they cannot be used to guarantee resources in an
+  overprovisioned node. They should be applied to all containers as a best
+  practice if the operator wants to avoid overprovisioning entirely.
+
+* V1.Container.SecurityContext.allowPrivilegeEscalation - not possible on
+  Windows, none of the capabilities are hooked up
+
+* V1.Container.SecurityContext.Capabilities - POSIX capabilities are not
+  implemented on Windows
+
+* V1.Container.SecurityContext.privileged - Windows doesn't support privileged
+  containers
+
 * V1.Container.SecurityContext.procMount - Windows doesn't have a /proc filesystem
-* V1.Container.SecurityContext.readOnlyRootFilesystem - not possible on Windows, write access is required for registry & system processes to run inside the container
+
+* V1.Container.SecurityContext.readOnlyRootFilesystem - not possible on
+  Windows, write access is required for registry & system processes to run
+  inside the container
+
 * V1.Container.SecurityContext.runAsGroup - not possible on Windows, no GID support
-* V1.Container.SecurityContext.runAsNonRoot - Windows does not have a root user. The closest equivalent is ContainerAdministrator which is an identity that doesn't exist on the node.
-* V1.Container.SecurityContext.runAsUser - not possible on Windows, no UID support as int.
+
+* V1.Container.SecurityContext.runAsNonRoot - Windows does not have a root
+  user. The closest equivalent is ContainerAdministrator which is an identity
+  that doesn't exist on the node.
+
+* V1.Container.SecurityContext.runAsUser - not possible on Windows, no UID
+  support as int.
+
 * V1.Container.SecurityContext.seLinuxOptions - not possible on Windows, no SELinux
-* V1.Container.terminationMessagePath - this has some limitations in that Windows doesn't support mapping single files. The default value is /dev/termination-log, which does work because it does not exist on Windows by default.
+
+* V1.Container.terminationMessagePath - this has some limitations in that
+  Windows doesn't support mapping single files. The default value is
+  `/dev/termination-log`, which does work because it does not exist on Windows by
+  default.
 
 ##### V1.Pod
 
 * V1.Pod.hostIPC, v1.pod.hostpid - host namespace sharing is not possible on Windows
+
 * V1.Pod.hostNetwork - There is no Windows OS support to share the host network
-* V1.Pod.dnsPolicy - ClusterFirstWithHostNet - is not supported because Host Networking is not supported on Windows.
+
+* V1.Pod.dnsPolicy - `ClusterFirstWithHostNet` is not supported because Host
+  Networking is not supported on Windows.
+
 * V1.Pod.podSecurityContext - see V1.PodSecurityContext below
-* V1.Pod.shareProcessNamespace - this is a beta feature, and depends on Linux namespaces which are not implemented on Windows. Windows cannot share process namespaces or the container's root filesystem. Only the network can be shared.
-* V1.Pod.terminationGracePeriodSeconds - this is not fully implemented in Docker on Windows, see: [reference](https://github.com/moby/moby/issues/25982). The behavior today is that the ENTRYPOINT process is sent CTRL_SHUTDOWN_EVENT, then Windows waits 5 seconds by default, and finally shuts down all processes using the normal Windows shutdown behavior. The 5 second default is actually in the Windows registry [inside the container](https://github.com/moby/moby/issues/25982#issuecomment-426441183), so it can be overridden when the container is built.
-* V1.Pod.volumeDevices - this is a beta feature, and is not implemented on Windows. Windows cannot attach raw block devices to pods.
-* V1.Pod.volumes - EmptyDir, Secret, ConfigMap, HostPath - all work and have tests in TestGrid
-  * V1.emptyDirVolumeSource - the Node default medium is disk on Windows. Memory is not supported, as Windows does not have a built-in RAM disk.
+
+* V1.Pod.shareProcessNamespace - this is a beta feature, and depends on Linux
+  namespaces which are not implemented on Windows. Windows cannot share
+  process namespaces or the container's root filesystem. Only the network can be
+  shared.
+
+* V1.Pod.terminationGracePeriodSeconds - this is not fully implemented in
+  Docker on Windows, see:
+  [reference](https://github.com/moby/moby/issues/25982). The behavior today is
+  that the `ENTRYPOINT` process is sent `CTRL_SHUTDOWN_EVENT`, then Windows waits 5
+  seconds by default, and finally shuts down all processes using the normal
+  Windows shutdown behavior. The 5 second default is actually in the Windows
+  registry [inside the container](https://github.com/moby/moby/issues/25982#issuecomment-426441183),
+  so it can be overridden when the container is built.
+
+* V1.Pod.volumeDevices - this is a beta feature, and is not implemented on
+  Windows. Windows cannot attach raw block devices to pods.
+
+* V1.Pod.volumes - EmptyDir, Secret, ConfigMap, HostPath - all work and have
+  tests in TestGrid
+
+  * V1.emptyDirVolumeSource - the Node default medium is disk on Windows.
+    Memory is not supported, as Windows does not have a built-in RAM disk.
+
 * V1.VolumeMount.mountPropagation - mount propagation is not supported on Windows.
 
 ##### V1.PodSecurityContext
 
-None of the PodSecurityContext fields work on Windows. They're listed here for reference.
+None of the PodSecurityContext fields work on Windows. They're listed here for
+reference.
 
 * V1.PodSecurityContext.SELinuxOptions - SELinux is not available on Windows
+
 * V1.PodSecurityContext.RunAsUser - provides a UID, not available on Windows
+
 * V1.PodSecurityContext.RunAsGroup - provides a GID, not available on Windows
-* V1.PodSecurityContext.RunAsNonRoot - Windows does not have a root user. The closest equivalent is ContainerAdministrator which is an identity that doesn't exist on the node.
+
+* V1.PodSecurityContext.RunAsNonRoot - Windows does not have a root user. The
+  closest equivalent is ContainerAdministrator which is an identity that
+  doesn't exist on the node.
+
 * V1.PodSecurityContext.SupplementalGroups - provides GID, not available on Windows
-* V1.PodSecurityContext.Sysctls - these are part of the Linux sysctl interface. There's no equivalent on Windows.
+
+* V1.PodSecurityContext.Sysctls - these are part of the Linux sysctl
+  interface. There's no equivalent on Windows.
 
 #### Operating System Version Restrictions
 
-Windows has strict compatibility rules, where the host OS version must match the container base image OS version. Only Windows containers with a container operating system of Windows Server 2019 are supported. Hyper-V isolation of containers, enabling some backward compatibility of Windows container image versions, is planned for a future release.
+Windows has strict compatibility rules, where the host OS version must match
+the container base image OS version. Only Windows containers with a container
+operating system of Windows Server 2019 are supported. Hyper-V isolation of
+containers, enabling some backward compatibility of Windows container image
+versions, is planned for a future release.
 
 ## Getting Help and Troubleshooting {#troubleshooting}
 
-Your main source of help for troubleshooting your Kubernetes cluster should start with this [section](/docs/tasks/debug-application-cluster/troubleshooting/). Some additional, Windows-specific troubleshooting help is included in this section. Logs are an important element of troubleshooting issues in Kubernetes. Make sure to include them any time you seek troubleshooting assistance from other contributors. Follow the instructions in the SIG-Windows [contributing guide on gathering logs](https://github.com/kubernetes/community/blob/master/sig-windows/CONTRIBUTING.md#gathering-logs).
+Your main source of help for troubleshooting your Kubernetes cluster should
+start with this
+[section](/docs/tasks/debug-application-cluster/troubleshooting/). Some
+additional, Windows-specific troubleshooting help is included in this section.
+Logs are an important element of troubleshooting issues in Kubernetes. Make
+sure to include them any time you seek troubleshooting assistance from other
+contributors. Follow the instructions in the SIG-Windows
+[contributing guide on gathering logs](https://github.com/kubernetes/community/blob/master/sig-windows/CONTRIBUTING.md#gathering-logs).
 
-1. How do I know start.ps1 completed successfully?
+* How do I know start.ps1 completed successfully?
 
-    You should see kubelet, kube-proxy, and (if you chose Flannel as your networking solution) flanneld host-agent processes running on your node, with running logs being displayed in separate PowerShell windows. In addition to this, your Windows node should be listed as "Ready" in your Kubernetes cluster.
+  You should see kubelet, kube-proxy, and (if you chose Flannel as your
+  networking solution) flanneld host-agent processes running on your node, with
+  running logs being displayed in separate PowerShell windows. In addition to
+  this, your Windows node should be listed as "Ready" in your Kubernetes
+  cluster.
 
-1. Can I configure the Kubernetes node processes to run in the background as services?
+* Can I configure the Kubernetes node processes to run in the background as services?
 
-    Kubelet and kube-proxy are already configured to run as native Windows Services, offering resiliency by re-starting the services automatically in the event of failure (for example a process crash). You have two options for configuring these node components as services.
+  Kubelet and kube-proxy are already configured to run as native Windows
+  Services, offering resiliency by re-starting the services automatically in the
+  event of failure (for example a process crash). You have two options for
+  configuring these node components as services.
 
-    1. As native Windows Services
+  * As native Windows Services
 
-        Kubelet & kube-proxy can be run as native Windows Services using `sc.exe`.
-
-        ```powershell
-        # Create the services for kubelet and kube-proxy in two separate commands
-        sc.exe create <component_name> binPath= "<path_to_binary> --service <other_args>"
-
-        # Please note that if the arguments contain spaces, they must be escaped.
-        sc.exe create kubelet binPath= "C:\kubelet.exe --service --hostname-override 'minion' <other_args>"
-
-        # Start the services
-        Start-Service kubelet
-        Start-Service kube-proxy
-
-        # Stop the service
-        Stop-Service kubelet (-Force)
-        Stop-Service kube-proxy (-Force)
-
-        # Query the service status
-        Get-Service kubelet
-        Get-Service kube-proxy
-        ```
-
-    1. Using nssm.exe
-
-        You can also always use alternative service managers like [nssm.exe](https://nssm.cc/) to run these processes (flanneld, kubelet & kube-proxy) in the background for you. You can use this [sample script](https://github.com/Microsoft/SDN/tree/master/Kubernetes/flannel/register-svc.ps1), leveraging nssm.exe to register kubelet, kube-proxy, and flanneld.exe to run as Windows services in the background.
-
-        ```powershell
-        register-svc.ps1 -NetworkMode <Network mode> -ManagementIP <Windows Node IP> -ClusterCIDR <Cluster subnet> -KubeDnsServiceIP <Kube-dns Service IP> -LogDir <Directory to place logs>
-
-        # NetworkMode      = The network mode l2bridge (flannel host-gw, also the default value) or overlay (flannel vxlan) chosen as a network solution
-        # ManagementIP     = The IP address assigned to the Windows node. You can use ipconfig to find this
-        # ClusterCIDR      = The cluster subnet range. (Default value 10.244.0.0/16)
-        # KubeDnsServiceIP = The Kubernetes DNS service IP (Default value 10.96.0.10)
-        # LogDir           = The directory where kubelet and kube-proxy logs are redirected into their respective output files (Default value C:\k)
-        ```
-
-        If the above referenced script is not suitable, you can manually configure nssm.exe using the following examples.
-
-        ```powershell
-        # Register flanneld.exe
-        nssm install flanneld C:\flannel\flanneld.exe
-        nssm set flanneld AppParameters --kubeconfig-file=c:\k\config --iface=<ManagementIP> --ip-masq=1 --kube-subnet-mgr=1
-        nssm set flanneld AppEnvironmentExtra NODE_NAME=<hostname>
-        nssm set flanneld AppDirectory C:\flannel
-        nssm start flanneld
-
-        # Register kubelet.exe
-        # Microsoft releases the pause infrastructure container at mcr.microsoft.com/oss/kubernetes/pause:3.4.1
-        nssm install kubelet C:\k\kubelet.exe
-        nssm set kubelet AppParameters --hostname-override=<hostname> --v=6 --pod-infra-container-image=mcr.microsoft.com/oss/kubernetes/pause:3.4.1 --resolv-conf="" --allow-privileged=true --enable-debugging-handlers --cluster-dns=<DNS-service-IP> --cluster-domain=cluster.local --kubeconfig=c:\k\config --hairpin-mode=promiscuous-bridge --image-pull-progress-deadline=20m --cgroups-per-qos=false  --log-dir=<log directory> --logtostderr=false --enforce-node-allocatable="" --network-plugin=cni --cni-bin-dir=c:\k\cni --cni-conf-dir=c:\k\cni\config
-        nssm set kubelet AppDirectory C:\k
-        nssm start kubelet
-
-        # Register kube-proxy.exe (l2bridge / host-gw)
-        nssm install kube-proxy C:\k\kube-proxy.exe
-        nssm set kube-proxy AppDirectory c:\k
-        nssm set kube-proxy AppParameters --v=4 --proxy-mode=kernelspace --hostname-override=<hostname>--kubeconfig=c:\k\config --enable-dsr=false --log-dir=<log directory> --logtostderr=false
-        nssm.exe set kube-proxy AppEnvironmentExtra KUBE_NETWORK=cbr0
-        nssm set kube-proxy DependOnService kubelet
-        nssm start kube-proxy
-
-        # Register kube-proxy.exe (overlay / vxlan)
-        nssm install kube-proxy C:\k\kube-proxy.exe
-        nssm set kube-proxy AppDirectory c:\k
-        nssm set kube-proxy AppParameters --v=4 --proxy-mode=kernelspace --feature-gates="WinOverlay=true" --hostname-override=<hostname> --kubeconfig=c:\k\config --network-name=vxlan0 --source-vip=<source-vip> --enable-dsr=false --log-dir=<log directory> --logtostderr=false
-        nssm set kube-proxy DependOnService kubelet
-        nssm start kube-proxy
-        ```
-
-        For initial troubleshooting, you can use the following flags in [nssm.exe](https://nssm.cc/) to redirect stdout and stderr to a output file:
-
-        ```powershell
-        nssm set <Service Name> AppStdout C:\k\mysvc.log
-        nssm set <Service Name> AppStderr C:\k\mysvc.log
-        ```
-
-        For additional details, see official [nssm usage](https://nssm.cc/usage) docs.
-
-1. My Windows Pods do not have network connectivity
-
-    If you are using virtual machines, ensure that MAC spoofing is enabled on all the VM network adapter(s).
-
-1. My Windows Pods cannot ping external resources
-
-    Windows Pods do not have outbound rules programmed for the ICMP protocol today. However, TCP/UDP is supported. When trying to demonstrate connectivity to resources outside of the cluster, please substitute `ping <IP>` with corresponding `curl <IP>` commands.
-
-    If you are still facing problems, most likely your network configuration in [cni.conf](https://github.com/Microsoft/SDN/blob/master/Kubernetes/flannel/l2bridge/cni/config/cni.conf) deserves some extra attention. You can always edit this static file. The configuration update will apply to any newly created Kubernetes resources.
-
-    One of the Kubernetes networking requirements (see [Kubernetes model](/docs/concepts/cluster-administration/networking/)) is for cluster communication to occur without NAT internally. To honor this requirement, there is an [ExceptionList](https://github.com/Microsoft/SDN/blob/master/Kubernetes/flannel/l2bridge/cni/config/cni.conf#L20) for all the communication where we do not want outbound NAT to occur. However, this also means that you need to exclude the external IP you are trying to query from the ExceptionList. Only then will the traffic originating from your Windows pods be SNAT'ed correctly to receive a response from the outside world. In this regard, your ExceptionList in `cni.conf` should look as follows:
-
-    ```conf
-    "ExceptionList": [
-                    "10.244.0.0/16",  # Cluster subnet
-                    "10.96.0.0/12",   # Service subnet
-                    "10.127.130.0/24" # Management (host) subnet
-                ]
-    ```
-
-1. My Windows node cannot access NodePort service
-
-    Local NodePort access from the node itself fails. This is a known limitation. NodePort access works from other nodes or external clients.
-
-1. vNICs and HNS endpoints of containers are being deleted
-
-    This issue can be caused when the `hostname-override` parameter is not passed to [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/). To resolve it, users need to pass the hostname to kube-proxy as follows:
+    Kubelet & kube-proxy can be run as native Windows Services using `sc.exe`.
 
     ```powershell
-    C:\k\kube-proxy.exe --hostname-override=$(hostname)
+    # Create the services for kubelet and kube-proxy in two separate commands
+    sc.exe create <component_name> binPath= "<path_to_binary> --service <other_args>"
+
+    # Please note that if the arguments contain spaces, they must be escaped.
+    sc.exe create kubelet binPath= "C:\kubelet.exe --service --hostname-override 'minion' <other_args>"
+
+    # Start the services
+    Start-Service kubelet
+    Start-Service kube-proxy
+
+    # Stop the service
+    Stop-Service kubelet (-Force)
+    Stop-Service kube-proxy (-Force)
+
+    # Query the service status
+    Get-Service kubelet
+    Get-Service kube-proxy
     ```
 
-1. With flannel my nodes are having issues after rejoining a cluster
+  * Using nssm.exe
 
-    Whenever a previously deleted node is being re-joined to the cluster, flannelD tries to assign a new pod subnet to the node. Users should remove the old pod subnet configuration files in the following paths:
+    You can also always use alternative service managers like
+    [`nssm.exe`](https://nssm.cc/) to run these processes (flanneld, kubelet &
+    kube-proxy) in the background for you. You can use this
+    [sample script](https://github.com/Microsoft/SDN/tree/master/Kubernetes/flannel/register-svc.ps1),
+    leveraging `nssm.exe` to register kubelet, kube-proxy, and `flanneld.exe`
+    to run as Windows services in the background.
 
     ```powershell
-    Remove-Item C:\k\SourceVip.json
-    Remove-Item C:\k\SourceVipRequest.json
+    register-svc.ps1 -NetworkMode <Network mode> -ManagementIP <Windows Node IP> -ClusterCIDR <Cluster subnet> -KubeDnsServiceIP <Kube-dns Service IP> -LogDir <Directory to place logs>
     ```
 
-1. After launching `start.ps1`, flanneld is stuck in "Waiting for the Network to be created"
+    The parameters are explained below:
 
-    There are numerous reports of this [issue](https://github.com/coreos/flannel/issues/1066); most likely it is a timing issue for when the management IP of the flannel network is set. A workaround is to relaunch start.ps1 or relaunch it manually as follows:
+    - `NetworkMode`: The network mode l2bridge (flannel host-gw, also the
+      default value) or overlay (flannel vxlan) chosen as a network solution
+    - `ManagementIP`: The IP address assigned to the Windows node. You can use
+      `ipconfig` to find this.
+    - `ClusterCIDR`: The cluster subnet range. (Default: 10.244.0.0/16)
+    - `KubeDnsServiceIP`: The Kubernetes DNS service IP. (Default: 10.96.0.10)
+    - `LogDir`: The directory where kubelet and kube-proxy logs are redirected
+      into their respective output files. (Default value C:\k)
+
+    If the above referenced script is not suitable, you can manually configure
+    `nssm.exe` using the following examples.
+
+    Register flanneld.exe:
 
     ```powershell
-    PS C:> [Environment]::SetEnvironmentVariable("NODE_NAME", "<Windows_Worker_Hostname>")
-    PS C:> C:\flannel\flanneld.exe --kubeconfig-file=c:\k\config --iface=<Windows_Worker_Node_IP> --ip-masq=1 --kube-subnet-mgr=1
+    nssm install flanneld C:\flannel\flanneld.exe
+    nssm set flanneld AppParameters --kubeconfig-file=c:\k\config --iface=<ManagementIP> --ip-masq=1 --kube-subnet-mgr=1
+    nssm set flanneld AppEnvironmentExtra NODE_NAME=<hostname>
+    nssm set flanneld AppDirectory C:\flannel
+    nssm start flanneld
     ```
 
-1. My Windows Pods cannot launch because of missing `/run/flannel/subnet.env`
-
-    This indicates that Flannel didn't launch correctly. You can either try to restart flanneld.exe or you can copy the files over manually from `/run/flannel/subnet.env` on the Kubernetes master to `C:\run\flannel\subnet.env` on the Windows worker node and modify the `FLANNEL_SUBNET` row to a different number. For example, if node subnet 10.244.4.1/24 is desired:
-
-    ```env
-    FLANNEL_NETWORK=10.244.0.0/16
-    FLANNEL_SUBNET=10.244.4.1/24
-    FLANNEL_MTU=1500
-    FLANNEL_IPMASQ=true
-    ```
-
-1. My Windows node cannot access my services using the service IP
-
-    This is a known limitation of the current networking stack on Windows. Windows Pods are able to access the service IP however.
-
-1. No network adapter is found when starting kubelet
-
-    The Windows networking stack needs a virtual adapter for Kubernetes networking to work. If the following commands return no results (in an admin shell), virtual network creation — a necessary prerequisite for Kubelet to work — has failed:
+    Register kubelet.exe:
 
     ```powershell
-    Get-HnsNetwork | ? Name -ieq "cbr0"
-    Get-NetAdapter | ? Name -Like "vEthernet (Ethernet*"
+    # Microsoft releases the pause infrastructure container at mcr.microsoft.com/oss/kubernetes/pause:3.4.1
+    nssm install kubelet C:\k\kubelet.exe
+    nssm set kubelet AppParameters --hostname-override=<hostname> --v=6 --pod-infra-container-image=mcr.microsoft.com/oss/kubernetes/pause:3.4.1 --resolv-conf="" --allow-privileged=true --enable-debugging-handlers --cluster-dns=<DNS-service-IP> --cluster-domain=cluster.local --kubeconfig=c:\k\config --hairpin-mode=promiscuous-bridge --image-pull-progress-deadline=20m --cgroups-per-qos=false  --log-dir=<log directory> --logtostderr=false --enforce-node-allocatable="" --network-plugin=cni --cni-bin-dir=c:\k\cni --cni-conf-dir=c:\k\cni\config
+    nssm set kubelet AppDirectory C:\k
+    nssm start kubelet
     ```
 
-    Often it is worthwhile to modify the [InterfaceName](https://github.com/microsoft/SDN/blob/master/Kubernetes/flannel/start.ps1#L7) parameter of the start.ps1 script, in cases where the host's network adapter isn't "Ethernet". Otherwise, consult the output of the `start-kubelet.ps1` script to see if there are errors during virtual network creation.
+    Register kube-proxy.exe (l2bridge / host-gw):
 
-1. My Pods are stuck at "Container Creating" or restarting over and over
-
-    Check that your pause image is compatible with your OS version. The [instructions](https://docs.microsoft.com/en-us/virtualization/windowscontainers/kubernetes/deploying-resources) assume that both the OS and the containers are version 1803. If you have a later version of Windows, such as an Insider build, you need to adjust the images accordingly. Please refer to the Microsoft's [Docker repository](https://hub.docker.com/u/microsoft/) for images. Regardless, both the pause image Dockerfile and the sample service expect the image to be tagged as :latest.
-
-1. DNS resolution is not properly working
-
-    Check the DNS limitations for Windows in this [section](#dns-limitations).
-
-1. `kubectl port-forward` fails with "unable to do port forwarding: wincat not found"
-
-    This was implemented in Kubernetes 1.15 by including wincat.exe in the pause infrastructure container `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`. Be sure to use these versions or newer ones.
-    If you would like to build your own pause infrastructure container be sure to include [wincat](https://github.com/kubernetes-sigs/sig-windows-tools/tree/master/cmd/wincat).
-
-1. My Kubernetes installation is failing because my Windows Server node is behind a proxy
-
-    If you are behind a proxy, the following PowerShell environment variables must be defined:
-
-    ```PowerShell
-    [Environment]::SetEnvironmentVariable("HTTP_PROXY", "http://proxy.example.com:80/", [EnvironmentVariableTarget]::Machine)
-    [Environment]::SetEnvironmentVariable("HTTPS_PROXY", "http://proxy.example.com:443/", [EnvironmentVariableTarget]::Machine)
+    ```powershell
+    nssm install kube-proxy C:\k\kube-proxy.exe
+    nssm set kube-proxy AppDirectory c:\k
+    nssm set kube-proxy AppParameters --v=4 --proxy-mode=kernelspace --hostname-override=<hostname>--kubeconfig=c:\k\config --enable-dsr=false --log-dir=<log directory> --logtostderr=false
+    nssm.exe set kube-proxy AppEnvironmentExtra KUBE_NETWORK=cbr0
+    nssm set kube-proxy DependOnService kubelet
+    nssm start kube-proxy
     ```
 
-1. What is a `pause` container?
+    Register kube-proxy.exe (overlay / vxlan):
 
-    In a Kubernetes Pod, an infrastructure or "pause" container is first created to host the container endpoint. Containers that belong to the same pod, including infrastructure and worker containers, share a common network namespace and endpoint (same IP and port space). Pause containers are needed to accommodate worker containers crashing or restarting without losing any of the networking configuration.
+    ```powershell
+    nssm install kube-proxy C:\k\kube-proxy.exe
+    nssm set kube-proxy AppDirectory c:\k
+    nssm set kube-proxy AppParameters --v=4 --proxy-mode=kernelspace --feature-gates="WinOverlay=true" --hostname-override=<hostname> --kubeconfig=c:\k\config --network-name=vxlan0 --source-vip=<source-vip> --enable-dsr=false --log-dir=<log directory> --logtostderr=false
+    nssm set kube-proxy DependOnService kubelet
+    nssm start kube-proxy
+    ```
 
-    The "pause" (infrastructure) image is hosted on Microsoft Container Registry (MCR). You can access it using `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`. For more details, see the [DOCKERFILE](https://github.com/kubernetes-sigs/windows-testing/blob/master/images/pause/Dockerfile).
+    For initial troubleshooting, you can use the following flags in
+    [`nssm.exe`](https://nssm.cc/) to redirect stdout and stderr to a output file:
+
+    ```powershell
+    nssm set <Service Name> AppStdout C:\k\mysvc.log
+    nssm set <Service Name> AppStderr C:\k\mysvc.log
+    ```
+
+    For additional details, see official [nssm usage](https://nssm.cc/usage) docs.
+
+* My Windows Pods do not have network connectivity
+
+  If you are using virtual machines, ensure that MAC spoofing is enabled on
+  all the VM network adapter(s).
+
+* My Windows Pods cannot ping external resources
+
+  Windows Pods do not have outbound rules programmed for the ICMP protocol
+  today. However, TCP/UDP is supported. When trying to demonstrate connectivity
+  to resources outside of the cluster, please substitute `ping <IP>` with
+  corresponding `curl <IP>` commands.
+
+  If you are still facing problems, most likely your network configuration in
+  [cni.conf](https://github.com/Microsoft/SDN/blob/master/Kubernetes/flannel/l2bridge/cni/config/cni.conf)
+  deserves some extra attention. You can always edit this static file. The
+  configuration update will apply to any newly created Kubernetes resources.
+
+  One of the Kubernetes networking requirements (see
+  [Kubernetes network model](/docs/concepts/cluster-administration/networking/))
+  is for cluster communication to occur without NAT internally. To honor this
+  requirement, there is an
+  [ExceptionList](https://github.com/Microsoft/SDN/blob/master/Kubernetes/flannel/l2bridge/cni/config/cni.conf#L20)
+  for all the communication where we do not want outbound NAT to occur. However,
+  this also means that you need to exclude the external IP you are trying to
+  query from the ExceptionList. Only then will the traffic originating from your
+  Windows pods be SNAT'ed correctly to receive a response from the outside
+  world. In this regard, your ExceptionList in `cni.conf` should look as
+  follows:
+
+  ```conf
+  "ExceptionList": [
+      "10.244.0.0/16",  # Cluster subnet
+      "10.96.0.0/12",   # Service subnet
+      "10.127.130.0/24" # Management (host) subnet
+  ]
+  ```
+
+* My Windows node cannot access NodePort service
+
+  Local NodePort access from the node itself fails. This is a known
+  limitation. NodePort access works from other nodes or external clients.
+
+* vNICs and HNS endpoints of containers are being deleted
+
+  This issue can be caused when the `hostname-override` parameter is not
+  passed to
+  [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/).
+  To resolve it, users need to pass the hostname to kube-proxy as follows:
+
+  ```powershell
+  C:\k\kube-proxy.exe --hostname-override=$(hostname)
+  ```
+
+* With flannel my nodes are having issues after rejoining a cluster
+
+  Whenever a previously deleted node is being re-joined to the cluster,
+  flannelD tries to assign a new pod subnet to the node. Users should remove the
+  old pod subnet configuration files in the following paths:
+
+  ```powershell
+  Remove-Item C:\k\SourceVip.json
+  Remove-Item C:\k\SourceVipRequest.json
+  ```
+
+* After launching `start.ps1`, flanneld is stuck in "Waiting for the Network
+  to be created"
+
+  There are numerous reports of this
+  [issue](https://github.com/coreos/flannel/issues/1066); most likely it is a
+  timing issue for when the management IP of the flannel network is set. A
+  workaround is to relaunch start.ps1 or relaunch it manually as follows:
+
+  ```powershell
+  PS C:> [Environment]::SetEnvironmentVariable("NODE_NAME", "<Windows_Worker_Hostname>")
+  PS C:> C:\flannel\flanneld.exe --kubeconfig-file=c:\k\config --iface=<Windows_Worker_Node_IP> --ip-masq=1 --kube-subnet-mgr=1
+  ```
+
+* My Windows Pods cannot launch because of missing `/run/flannel/subnet.env`
+
+  This indicates that Flannel didn't launch correctly. You can either try to
+  restart flanneld.exe or you can copy the files over manually from
+  `/run/flannel/subnet.env` on the Kubernetes master to
+  `C:\run\flannel\subnet.env` on the Windows worker node and modify the
+  `FLANNEL_SUBNET` row to a different number. For example, if node subnet
+  10.244.4.1/24 is desired:
+
+  ```none
+  FLANNEL_NETWORK=10.244.0.0/16
+  FLANNEL_SUBNET=10.244.4.1/24
+  FLANNEL_MTU=1500
+  FLANNEL_IPMASQ=true
+  ```
+
+* My Windows node cannot access my services using the service IP
+
+  This is a known limitation of the current networking stack on Windows.
+  Windows Pods are able to access the service IP however.
+
+* No network adapter is found when starting kubelet
+
+  The Windows networking stack needs a virtual adapter for Kubernetes
+  networking to work. If the following commands return no results (in an admin
+  shell), virtual network creation — a necessary prerequisite for Kubelet to
+  work — has failed:
+
+  ```powershell
+  Get-HnsNetwork | ? Name -ieq "cbr0"
+  Get-NetAdapter | ? Name -Like "vEthernet (Ethernet*"
+  ```
+
+  Often it is worthwhile to modify the
+  [InterfaceName](https://github.com/microsoft/SDN/blob/master/Kubernetes/flannel/start.ps1#L7)
+  parameter of the start.ps1 script, in cases where the host's network adapter
+  isn't "Ethernet". Otherwise, consult the output of the `start-kubelet.ps1`
+  script to see if there are errors during virtual network creation.
+
+* My Pods are stuck at "Container Creating" or restarting over and over
+
+  Check that your pause image is compatible with your OS version. The
+  [instructions](https://docs.microsoft.com/en-us/virtualization/windowscontainers/kubernetes/deploying-resources)
+  assume that both the OS and the containers are version 1803. If you have a
+  later version of Windows, such as an Insider build, you need to adjust the
+  images accordingly. Please refer to the Microsoft's
+  [Docker repository](https://hub.docker.com/u/microsoft/) for images.
+  Regardless, both the pause image Dockerfile and the sample service expect
+  the image to be tagged as :latest.
+
+* DNS resolution is not properly working
+
+  Check the [DNS limitations for Windows](#dns-limitations).
+
+* `kubectl port-forward` fails with "unable to do port forwarding: wincat not found"
+
+  This was implemented in Kubernetes 1.15 by including wincat.exe in the
+  pause infrastructure container `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`.
+  Be sure to use these versions or newer ones.  If you would like to build your
+  own pause infrastructure container be sure to include
+  [wincat](https://github.com/kubernetes-sigs/sig-windows-tools/tree/master/cmd/wincat).
+
+* My Kubernetes installation is failing because my Windows Server node is
+  behind a proxy
+
+  If you are behind a proxy, the following PowerShell environment variables
+  must be defined:
+
+  ```PowerShell
+  [Environment]::SetEnvironmentVariable("HTTP_PROXY", "http://proxy.example.com:80/", [EnvironmentVariableTarget]::Machine)
+  [Environment]::SetEnvironmentVariable("HTTPS_PROXY", "http://proxy.example.com:443/", [EnvironmentVariableTarget]::Machine)
+  ```
+
+* What is a `pause` container?
+
+  In a Kubernetes Pod, an infrastructure or "pause" container is first created
+  to host the container endpoint. Containers that belong to the same pod,
+  including infrastructure and worker containers, share a common network
+  namespace and endpoint (same IP and port space). Pause containers are needed
+  to accommodate worker containers crashing or restarting without losing any of
+  the networking configuration.
+
+  The "pause" (infrastructure) image is hosted on Microsoft Container Registry
+  (MCR). You can access it using `mcr.microsoft.com/oss/kubernetes/pause:3.4.1`.
+  For more details, see the
+  [DOCKERFILE](https://github.com/kubernetes-sigs/windows-testing/blob/master/images/pause/Dockerfile).
 
 ### Further investigation
 
-If these steps don't resolve your problem, you can get help running Windows containers on Windows nodes in Kubernetes through:
+If these steps don't resolve your problem, you can get help running Windows
+containers on Windows nodes in Kubernetes through:
 
 * StackOverflow [Windows Server Container](https://stackoverflow.com/questions/tagged/windows-server-container) topic
+
 * Kubernetes Official Forum [discuss.kubernetes.io](https://discuss.kubernetes.io/)
+
 * Kubernetes Slack [#SIG-Windows Channel](https://kubernetes.slack.com/messages/sig-windows)
 
 ## Reporting Issues and Feature Requests
 
-If you have what looks like a bug, or you would like to make a feature request, please use the [GitHub issue tracking system](https://github.com/kubernetes/kubernetes/issues). You can open issues on [GitHub](https://github.com/kubernetes/kubernetes/issues/new/choose) and assign them to SIG-Windows. You should first search the list of issues in case it was reported previously and comment with your experience on the issue and add additional logs. SIG-Windows Slack is also a great avenue to get some initial support and troubleshooting ideas prior to creating a ticket.
+If you have what looks like a bug, or you would like to make a feature
+request, please use the
+[GitHub issue tracking system](https://github.com/kubernetes/kubernetes/issues).
+You can open issues on
+[GitHub](https://github.com/kubernetes/kubernetes/issues/new/choose) and
+assign them to SIG-Windows. You should first search the list of issues in case
+it was reported previously and comment with your experience on the issue and
+add additional logs. SIG-Windows Slack is also a great avenue to get some
+initial support and troubleshooting ideas prior to creating a ticket.
 
-If filing a bug, please include detailed information about how to reproduce the problem, such as:
+If filing a bug, please include detailed information about how to reproduce
+the problem, such as:
 
 * Kubernetes version: kubectl version
-* Environment details: Cloud provider, OS distro, networking choice and configuration, and Docker version
+* Environment details: Cloud provider, OS distro, networking choice and
+  configuration, and Docker version
 * Detailed steps to reproduce the problem
 * [Relevant logs](https://github.com/kubernetes/community/blob/master/sig-windows/CONTRIBUTING.md#gathering-logs)
-* Tag the issue sig/windows by commenting on the issue with `/sig windows` to bring it to a SIG-Windows member's attention
+* Tag the issue sig/windows by commenting on the issue with `/sig windows` to
+  bring it to a SIG-Windows member's attention
 
 ## {{% heading "whatsnext" %}}
 
-We have a lot of features in our roadmap. An abbreviated high level list is included below, but we encourage you to view our [roadmap project](https://github.com/orgs/kubernetes/projects/8) and help us make Windows support better by [contributing](https://github.com/kubernetes/community/blob/master/sig-windows/).
+We have a lot of features in our roadmap. An abbreviated high level list is
+included below, but we encourage you to view our
+[roadmap project](https://github.com/orgs/kubernetes/projects/8) and help us make
+Windows support better by
+[contributing](https://github.com/kubernetes/community/blob/master/sig-windows/).
 
 ### Hyper-V isolation
 
-Hyper-V isolation is required to enable the following use cases for Windows containers in Kubernetes:
+Hyper-V isolation is required to enable the following use cases for Windows
+containers in Kubernetes:
 
 * Hypervisor-based isolation between pods for additional security
-* Backwards compatibility allowing a node to run a newer Windows Server version without requiring containers to be rebuilt
+
+* Backwards compatibility allowing a node to run a newer Windows Server
+  version without requiring containers to be rebuilt
+
 * Specific CPU/NUMA settings for a pod
+
 * Memory isolation and reservations
 
-Hyper-V isolation support will be added in a later release and will require CRI-Containerd.
+Hyper-V isolation support will be added in a later release and will require
+CRI-Containerd.
 
 ### Deployment with kubeadm and cluster API
 
 Kubeadm is becoming the de facto standard for users to deploy a Kubernetes
 cluster. Windows node support in kubeadm is currently a work-in-progress but a
-guide is available [here](/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes/).
-We are also making investments in cluster API to ensure Windows nodes are
-properly provisioned.
+guide is available
+[here](/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes/). We are
+also making investments in cluster API to ensure Windows nodes are properly
+provisioned.
+

From d299e40f1ee50d19d28dfeb333af307b9561d7c9 Mon Sep 17 00:00:00 2001
From: Stoned Elipot <stoned.elipot@gmail.com>
Date: Wed, 12 May 2021 15:08:09 +0200
Subject: [PATCH 736/788] Fix link to nodeport Service type

---
 .../reference/kubernetes-api/service-resources/service-v1.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
index 8d643c688a..7b9fd5f32c 100644
--- a/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
+++ b/content/en/docs/reference/kubernetes-api/service-resources/service-v1.md
@@ -96,7 +96,7 @@ ServiceSpec describes the attributes that a user creates on a service.
 
   - **ports.nodePort** (int32)
 
-    The port on each node on which this service is exposed when type is NodePort or LoadBalancer.  Usually assigned by the system. If a value is specified, in-range, and not in use it will be used, otherwise the operation will fail.  If not specified, a port will be allocated if this Service requires one.  If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
+    The port on each node on which this service is exposed when type is NodePort or LoadBalancer.  Usually assigned by the system. If a value is specified, in-range, and not in use it will be used, otherwise the operation will fail.  If not specified, a port will be allocated if this Service requires one.  If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#nodeport
 
   - **ports.appProtocol** (string)
 

From 61b73cede43528a022fbf06db1617da4e8c0a94d Mon Sep 17 00:00:00 2001
From: Ludovit Scholtz <ludko2@gmail.com>
Date: Wed, 12 May 2021 16:35:26 +0200
Subject: [PATCH 737/788] update dashboard version to 2.2.0

---
 .../docs/tasks/access-application-cluster/web-ui-dashboard.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md b/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md
index 47cec90f26..5c402e0304 100644
--- a/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md
+++ b/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md
@@ -34,7 +34,7 @@ Dashboard also provides information on the state of Kubernetes resources in your
 The Dashboard UI is not deployed by default. To deploy it, run the following command:
 
 ```
-kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0/aio/deploy/recommended.yaml
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.2.0/aio/deploy/recommended.yaml
 ```
 
 ## Accessing the Dashboard UI

From af94b0a118f702d208ca09b12ff4722f9e0d78f6 Mon Sep 17 00:00:00 2001
From: ztaylor797 <ztaylor797@gmail.com>
Date: Wed, 12 May 2021 10:22:56 -0500
Subject: [PATCH 738/788] Fix typo in images.md

---
 content/en/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/containers/images.md b/content/en/docs/concepts/containers/images.md
index 6d0db16fe8..1cd678e4a8 100644
--- a/content/en/docs/concepts/containers/images.md
+++ b/content/en/docs/concepts/containers/images.md
@@ -25,7 +25,7 @@ This page provides an outline of the container image concept.
 
 Container images are usually given a name such as `pause`, `example/mycontainer`, or `kube-apiserver`.
 Images can also include a registry hostname; for example: `fictional.registry.example/imagename`,
-and possible a port number as well; for example: `fictional.registry.example:10443/imagename`.
+and possibly a port number as well; for example: `fictional.registry.example:10443/imagename`.
 
 If you don't specify a registry hostname, Kubernetes assumes that you mean the Docker public registry.
 

From b0e4cecea40fa1656fcc22aa421dd4b6fdfe034c Mon Sep 17 00:00:00 2001
From: Tim Allclair <timallclair@gmail.com>
Date: Wed, 12 May 2021 10:42:03 -0700
Subject: [PATCH 739/788] Fix relnotes.k8s.io link

It was pointing to `https://kubernetes.io/releases/notes/relnotes.k8s.io`. I'm assuming that adding the scheme will fix it.
---
 content/en/releases/notes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/releases/notes.md b/content/en/releases/notes.md
index 300b5395ab..3ad20944b2 100644
--- a/content/en/releases/notes.md
+++ b/content/en/releases/notes.md
@@ -10,4 +10,4 @@ sitemap:
 
 Release notes can be found by reading the [Changelog](https://github.com/kubernetes/kubernetes/tree/master/CHANGELOG) that matches your Kubernetes version. View the changelog for {{< skew latestVersion >}} on [GitHub](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-{{< skew latestVersion >}}.md).
 
-Alternately, release notes can be searched and filtered online at: [relnotes.k8s.io](relnotes.k8s.io). View filtered release notes for {{< skew latestVersion >}} on [relnotes.k8s.io](https://relnotes.k8s.io/?releaseVersions={{< skew latestVersion >}}.0).
\ No newline at end of file
+Alternately, release notes can be searched and filtered online at: [relnotes.k8s.io](https://relnotes.k8s.io). View filtered release notes for {{< skew latestVersion >}} on [relnotes.k8s.io](https://relnotes.k8s.io/?releaseVersions={{< skew latestVersion >}}.0).

From bd64e3170babbf5b8e1be24d490fbb633fcbc5ec Mon Sep 17 00:00:00 2001
From: Marc Power <marcpow@hotmail.com>
Date: Wed, 12 May 2021 11:39:54 -0700
Subject: [PATCH 740/788] Correct version numbers related to the EvenPodsSpread
 feature gate

---
 .../concepts/workloads/pods/pod-topology-spread-constraints.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
index 8e588da111..e591d2bf45 100644
--- a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
+++ b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -13,7 +13,7 @@ obsolete -->
 You can use _topology spread constraints_ to control how {{< glossary_tooltip text="Pods" term_id="Pod" >}} are spread across your cluster among failure-domains such as regions, zones, nodes, and other user-defined topology domains. This can help to achieve high availability as well as efficient resource utilization.
 
 {{< note >}}
-In versions of Kubernetes before v1.19, you must enable the `EvenPodsSpread`
+In versions of Kubernetes before v1.18, you must enable the `EvenPodsSpread`
 [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) on
 the [API server](/docs/concepts/overview/components/#kube-apiserver) and the
 [scheduler](/docs/reference/generated/kube-scheduler/) in order to use Pod

From e3c8fb1313c82d49ddfad7426f265294eb32a686 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Thu, 13 May 2021 00:34:06 +0300
Subject: [PATCH 741/788] [ja] fix invalid location

---
 content/ja/docs/tutorials/stateless-application/guestbook.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tutorials/stateless-application/guestbook.md b/content/ja/docs/tutorials/stateless-application/guestbook.md
index aff86a2289..82e38a56d2 100644
--- a/content/ja/docs/tutorials/stateless-application/guestbook.md
+++ b/content/ja/docs/tutorials/stateless-application/guestbook.md
@@ -199,7 +199,7 @@ Deploymentはマニフェストファイル内に書かれた設定に基づい
 
 ### フロントエンドのServiceを作成する
 
-適用した`redis-slave`および`redis-master` Serviceは、コンテナクラスター内部からのみアクセス可能です。これは、デフォルトのServiceのtypeが[ClusterIP](/docs/concepts/services-networking/service/#publishing-services---service-types)であるためです。`ClusterIP`は、Serviceが指している一連のPodに対して1つのIPアドレスを提供します。このIPアドレスはクラスター内部からのみアクセスできます。
+適用した`redis-slave`および`redis-master` Serviceは、コンテナクラスター内部からのみアクセス可能です。これは、デフォルトのServiceのtypeが[ClusterIP](/docs/concepts/services-networking/service/#publishing-services-service-types)であるためです。`ClusterIP`は、Serviceが指している一連のPodに対して1つのIPアドレスを提供します。このIPアドレスはクラスター内部からのみアクセスできます。
 
 もしゲストの人にゲストブックにアクセスしてほしいのなら、フロントエンドServiceを外部から見えるように設定しなければなりません。そうすれば、クライアントはコンテナクラスターの外部からServiceにリクエストを送れるようになります。Minikubeでは、Serviceを`NodePort`でのみ公開できます。
 

From eb0fbf236bf8ccf619237cbecec1f08c602519b1 Mon Sep 17 00:00:00 2001
From: Brett Nekolny <brett.nekolny@brandfolder.com>
Date: Wed, 12 May 2021 17:29:17 -0600
Subject: [PATCH 742/788] Add envs example for secretGenerator.

---
 .../managing-secret-using-kustomize.md             | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
index fb257a6026..4e78a4c5f0 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
@@ -48,7 +48,19 @@ secretGenerator:
   - password=1f2d1e2e67df
 ```
 
-Note that in both cases, you don't need to base64 encode the values.
+You can also define the `secretGenerator` in the `kustomization.yaml`
+file by providing `.env` files.
+For example, the following `kustomization.yaml` file pulls in data from
+`.env.secret` file:
+
+```yaml
+secretGenerator:
+- name: db-user-pass
+  envs:
+  - .env.secret
+```
+
+Note that in all cases, you don't need to base64 encode the values.
 
 ## Create the Secret
 

From 285db949a4c39d1d5ff618c883e4ef88b70713c8 Mon Sep 17 00:00:00 2001
From: Dmitry Shurupov <dmitry.shurupov@flant.com>
Date: Thu, 13 May 2021 12:14:39 +0700
Subject: [PATCH 743/788] Adding shell-operator as another way to create
 operators

---
 content/en/docs/concepts/extend-kubernetes/operator.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/concepts/extend-kubernetes/operator.md b/content/en/docs/concepts/extend-kubernetes/operator.md
index baf73909d7..feb40163fc 100644
--- a/content/en/docs/concepts/extend-kubernetes/operator.md
+++ b/content/en/docs/concepts/extend-kubernetes/operator.md
@@ -119,6 +119,7 @@ Operator.
 * [Metacontroller](https://metacontroller.app/) along with WebHooks that
   you implement yourself
 * [Operator Framework](https://operatorframework.io)
+* [shell-operator](https://github.com/flant/shell-operator)
 
 ## {{% heading "whatsnext" %}}
 

From faa06b802a9a61f217e53630e237c34482214428 Mon Sep 17 00:00:00 2001
From: Martin Kanters <mkanters93@gmail.com>
Date: Thu, 13 May 2021 10:46:55 +0200
Subject: [PATCH 744/788] Fixed variable substitution typo

---
 .../en/docs/contribute/generate-ref-docs/kubernetes-api.md    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md b/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md
index acc55b2807..67d8acc0b5 100644
--- a/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md
+++ b/content/en/docs/contribute/generate-ref-docs/kubernetes-api.md
@@ -90,8 +90,8 @@ This section shows how to generate the
 For example:
 
 ```shell
-export K8S_WEBROOT=$(GOPATH)/src/github.com/<your-username>/website
-export K8S_ROOT=$(GOPATH)/src/k8s.io/kubernetes
+export K8S_WEBROOT=${GOPATH}/src/github.com/<your-username>/website
+export K8S_ROOT=${GOPATH}/src/k8s.io/kubernetes
 export K8S_RELEASE=1.17.0
 ```
 

From 1c846aa427c71579ceb0c8aa57244e7b141de609 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Wed, 12 May 2021 21:28:07 +0800
Subject: [PATCH 745/788] [zh] translate Tasks/Configuring a cgroup driver

---
 .../kubeadm/configure-cgroup-driver.md        | 240 ++++++++++++++++++
 1 file changed, 240 insertions(+)
 create mode 100644 content/zh/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md

diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md b/content/zh/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
new file mode 100644
index 0000000000..3d55a4f2ee
--- /dev/null
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/configure-cgroup-driver.md
@@ -0,0 +1,240 @@
+---
+title: 配置 cgroup 驱动
+content_type: task
+weight: 10
+---
+<!-- 
+---
+title: Configuring a cgroup driver
+content_type: task
+weight: 10
+---
+-->
+
+<!-- overview -->
+
+<!-- 
+This page explains how to configure the kubelet cgroup driver to match the container
+runtime cgroup driver for kubeadm clusters.
+-->
+本页阐述如何配置 kubelet 的 cgroup 驱动以匹配 kubeadm 集群中的容器运行时的 cgroup 驱动。
+
+## {{% heading "prerequisites" %}}
+
+<!-- 
+You should be familiar with the Kubernetes
+[container runtime requirements](/docs/setup/production-environment/container-runtimes).
+-->
+你应该熟悉 Kubernetes 的[容器运行时需求](/zh/docs/setup/production-environment/container-runtimes)。
+<!-- steps -->
+
+<!-- 
+## Configuring the container runtime cgroup driver
+-->
+## 配置容器运行时 cgroup 驱动 {#configuring-the-container-runtime-cgroup-driver}
+
+<!-- 
+The [Container runtimes](/docs/setup/production-environment/container-runtimes) page
+explains that the `systemd` driver is recommended for kubeadm based setups instead
+of the `cgroupfs` driver, because kubeadm manages the kubelet as a systemd service.
+-->
+[容器运行时](/zh/docs/setup/production-environment/container-runtimes)页面提到：
+由于 kubeadm 把 kubelet 视为一个系统服务来管理，所以对基于 kubeadm 的安装，
+我们推荐使用 `systemd` 驱动，不推荐 `cgroupfs` 驱动。
+
+<!-- 
+The page also provides details on how to setup a number of different container runtimes with the
+`systemd` driver by default.
+-->
+此页还详述了如何安装若干不同的容器运行时，并将 `systemd` 设为其默认驱动。
+
+<!-- 
+## Configuring the kubelet cgroup driver
+-->
+## 配置 kubelet 的 cgroup 驱动
+
+<!-- 
+kubeadm allows you to pass a `KubeletConfiguration` structure during `kubeadm init`.
+This `KubeletConfiguration` can include the `cgroupDriver` field which controls the cgroup
+driver of the kubelet.
+-->
+kubeadm 支持在执行 `kubeadm init` 时，传递一个 `KubeletConfiguration` 结构体。
+`KubeletConfiguration` 包含 `cgroupDriver` 字段，可用于控制 kubelet 的 cgroup 驱动。
+
+<!-- 
+If the user is not setting the `cgroupDriver` field under `KubeletConfiguration`,
+`kubeadm init` will default it to `systemd`.
+-->
+
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
+
+{{< note >}}
+如果用户没有在 `KubeletConfiguration` 中设置 `cgroupDriver` 字段，
+`kubeadm init` 会将它设置为默认值 `systemd`。
+{{< /note >}}
+
+<!-- 
+A minimal example of configuring the field explicitly:
+-->
+这是一个最小化的示例，其中显式的配置了此字段：
+
+```yaml
+# kubeadm-config.yaml
+kind: ClusterConfiguration
+apiVersion: kubeadm.k8s.io/v1beta2
+kubernetesVersion: v1.21.0
+---
+kind: KubeletConfiguration
+apiVersion: kubelet.config.k8s.io/v1beta1
+cgroupDriver: systemd
+```
+
+<!-- 
+Such a configuration file can then be passed to the kubeadm command:
+-->
+这样一个配置文件就可以传递给 kubeadm 命令了：
+
+```shell
+kubeadm init --config kubeadm-config.yaml
+```
+
+<!-- 
+Kubeadm uses the same `KubeletConfiguration` for all nodes in the cluster.
+The `KubeletConfiguration` is stored in a [ConfigMap](/docs/concepts/configuration/configmap)
+object under the `kube-system` namespace.
+
+Executing the sub commands `init`, `join` and `upgrade` would result in kubeadm
+writing the `KubeletConfiguration` as a file under `/var/lib/kubelet/config.yaml`
+and passing it to the local node kubelet.
+-->
+{{< note >}}
+Kubeadm 对集群所有的节点，使用相同的 `KubeletConfiguration`。
+`KubeletConfiguration` 存放于 `kube-system` 命名空间下的某个 
+[ConfigMap](/zh/docs/concepts/configuration/configmap) 对象中。
+
+执行 `init`、`join` 和 `upgrade` 等子命令会促使 kubeadm 
+将 `KubeletConfiguration` 写入到文件 `/var/lib/kubelet/config.yaml` 中，
+继而把它传递给本地节点的 kubelet。
+
+{{< /note >}}
+
+<!-- 
+## Using the `cgroupfs` driver
+-->
+# 使用 `cgroupfs` 驱动
+
+<!-- 
+As this guide explains using the `cgroupfs` driver with kubeadm is not recommended.
+
+To continue using `cgroupfs` and to prevent `kubeadm upgrade` from modifying the
+`KubeletConfiguration` cgroup driver on existing setups, you must be explicit
+about its value. This applies to a case where you do not wish future versions
+of kubeadm to apply the `systemd` driver by default.
+-->
+正如本指南阐述的：不推荐与 kubeadm 一起使用 `cgroupfs` 驱动。
+
+如仍需使用 `cgroupfs`，
+且要防止 `kubeadm upgrade` 修改现有系统中 `KubeletConfiguration` 的 cgroup 驱动，
+你必须显式声明它的值。
+此方法应对的场景为：在将来某个版本的 kubeadm 中，你不想使用默认的 `systemd` 驱动。
+
+<!-- 
+See the below section on "Modify the kubelet ConfigMap" for details on
+how to be explicit about the value.
+
+If you wish to configure a container runtime to use the `cgroupfs` driver,
+you must refer to the documentation of the container runtime of your choice.
+-->
+参阅以下章节“修改 kubelet 的 ConfigMap”，了解显式设置该值的方法。
+
+如果你希望配置容器运行时来使用 `cgroupfs` 驱动，
+则必须参考所选容器运行时的文档。
+
+<!-- 
+## Migrating to the `systemd` driver
+-->
+## 迁移到 `systemd` 驱动
+
+<!-- 
+To change the cgroup driver of an existing kubeadm cluster to `systemd` in-place,
+a similar procedure to a kubelet upgrade is required. This must include both
+steps outlined below.
+-->
+要将现有 kubeadm 集群的 cgroup 驱动就地升级为 `systemd`，
+需要执行一个与 kubelet 升级类似的过程。
+该过程必须包含下面两个步骤：
+
+<!-- 
+Alternatively, it is possible to replace the old nodes in the cluster with new ones
+that use the `systemd` driver. This requires executing only the first step below
+before joining the new nodes and ensuring the workloads can safely move to the new
+nodes before deleting the old nodes.
+-->
+{{< note >}}
+还有一种方法，可以用已配置了 `systemd` 的新节点替换掉集群中的老节点。
+按这种方法，在加入新节点、确保工作负载可以安全迁移到新节点、及至删除旧节点这一系列操作之前，
+只需执行以下第一个步骤。
+{{< /note >}}
+
+<!-- 
+### Modify the kubelet ConfigMap
+-->
+### 修改 kubelet 的 ConfigMap
+
+<!-- 
+- Find the kubelet ConfigMap name using `kubectl get cm -n kube-system | grep kubelet-config`.
+- Call `kubectl edit cm kubelet-config-x.yy -n kube-system` (replace `x.yy` with
+the Kubernetes version).
+- Either modify the existing `cgroupDriver` value or add a new field that looks like this:
+-->
+- 用命令 `kubectl get cm -n kube-system | grep kubelet-config` 找到 kubelet 的 ConfigMap 名称。
+- 运行 `kubectl edit cm kubelet-config-x.yy -n kube-system` （把 `x.yy` 替换为 Kubernetes 版本）。
+- 修改现有 `cgroupDriver` 的值，或者新增如下式样的字段：
+
+  ```yaml
+  cgroupDriver: systemd
+  ```
+  <!-- 
+  This field must be present under the `kubelet:` section of the ConfigMap.
+  -->
+  该字段必须出现在 ConfigMap 的 `kubelet:` 小节下。
+
+<!-- 
+### Update the cgroup driver on all nodes
+-->
+### 更新所有节点的 cgroup 驱动
+
+<!-- 
+For each node in the cluster:
+
+- [Drain the node](/docs/tasks/administer-cluster/safely-drain-node) using `kubectl drain <node-name> --ignore-daemonsets`
+- Stop the kubelet using `systemctl stop kubelet`
+- Stop the container runtime
+- Modify the container runtime cgroup driver to `systemd`
+- Set `cgroupDriver: systemd` in `/var/lib/kubelet/config.yaml`
+- Start the container runtime
+- Start the kubelet using `systemctl start kubelet`
+- [Uncordon the node](/docs/tasks/administer-cluster/safely-drain-node) using `kubectl uncordon <node-name>`
+-->
+对于集群中的每一个节点：
+
+- 执行命令 `kubectl drain <node-name> --ignore-daemonsets`，以
+  [腾空节点](/zh/docs/tasks/administer-cluster/safely-drain-node)
+- 执行命令 `systemctl stop kubelet`，以停止 kubelet
+- 停止容器运行时
+- 修改容器运行时 cgroup 驱动为 `systemd`
+- 在文件 `/var/lib/kubelet/config.yaml` 中添加设置 `cgroupDriver: systemd`
+- 启动容器运行时
+- 执行命令 `systemctl start kubelet`，以启动 kubelet
+- 执行命令 `kubectl uncordon <node-name>`，以
+  [取消节点隔离](/zh/docs/tasks/administer-cluster/safely-drain-node)
+
+<!-- 
+Execute these steps on nodes one at a time to ensure workloads
+have sufficient time to schedule on different nodes.
+
+Once the process is complete ensure that all nodes and workloads are healthy.
+-->
+在节点上依次执行上述步骤，确保工作负载有充足的时间被调度到其他节点。
+
+流程完成后，确认所有节点和工作负载均健康如常。

From c184f20f76eaf58ece0ef14e025da1a4fa9d4f0d Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <shannduin@google.com>
Date: Mon, 26 Apr 2021 21:46:50 +0000
Subject: [PATCH 746/788] Create pod eviction concept and glossary entries

  - Created glossary entries for manual and kubelet eviction
  - Created node-pressure-eviction.md and api-eviction.md
  - Merged content from eviction-policy.md and out-of-resource.md
  - Added note to kube-scheduler about node conditions
  - Deleted eviction-policy and out-of-resource.md
  - Redirected old topics
  - Change topic weights
---
 .../concepts/scheduling-eviction/_index.md    |  26 ++
 .../scheduling-eviction/api-eviction.md       |  19 +
 .../scheduling-eviction/eviction-policy.md    |  24 -
 .../scheduling-eviction/kube-scheduler.md     |   2 -
 .../node-pressure-eviction.md                 | 411 ++++++++++++++++++
 .../scheduling-eviction/pod-overhead.md       |   2 +-
 .../pod-priority-preemption.md                |   6 +-
 .../resource-bin-packing.md                   |   2 +-
 .../scheduler-perf-tuning.md                  |   2 +-
 .../scheduling-framework.md                   |   2 +-
 .../docs/reference/glossary/api-eviction.md   |  22 +
 .../glossary/node-pressure-eviction.md        |  23 +
 .../docs/reference/glossary/pod-disruption.md |  19 +
 .../administer-cluster/out-of-resource.md     | 354 ---------------
 static/_redirects                             |   4 +-
 15 files changed, 531 insertions(+), 387 deletions(-)
 create mode 100644 content/en/docs/concepts/scheduling-eviction/api-eviction.md
 delete mode 100644 content/en/docs/concepts/scheduling-eviction/eviction-policy.md
 create mode 100644 content/en/docs/concepts/scheduling-eviction/node-pressure-eviction.md
 create mode 100644 content/en/docs/reference/glossary/api-eviction.md
 create mode 100644 content/en/docs/reference/glossary/node-pressure-eviction.md
 create mode 100644 content/en/docs/reference/glossary/pod-disruption.md
 delete mode 100644 content/en/docs/tasks/administer-cluster/out-of-resource.md

diff --git a/content/en/docs/concepts/scheduling-eviction/_index.md b/content/en/docs/concepts/scheduling-eviction/_index.md
index 79fca8e597..21e9371f03 100644
--- a/content/en/docs/concepts/scheduling-eviction/_index.md
+++ b/content/en/docs/concepts/scheduling-eviction/_index.md
@@ -1,11 +1,37 @@
 ---
 title: "Scheduling, Preemption and Eviction"
 weight: 90
+content_type: concept
 description: >
   In Kubernetes, scheduling refers to making sure that Pods are matched to Nodes
   so that the kubelet can run them. Preemption is the process of terminating 
   Pods with lower Priority so that Pods with higher Priority can schedule on 
   Nodes. Eviction is the process of proactively terminating one or more Pods on
   resource-starved Nodes.
+no_list: true
 ---
 
+In Kubernetes, scheduling refers to making sure that {{<glossary_tooltip text="Pods" term_id="pod">}}
+are matched to {{<glossary_tooltip text="Nodes" term_id="node">}} so that the
+{{<glossary_tooltip text="kubelet" term_id="kubelet">}} can run them. Preemption
+is the process of terminating Pods with lower {{<glossary_tooltip text="Priority" term_id="pod-priority">}}
+so that Pods with higher Priority can schedule on Nodes. Eviction is the process
+of terminating one or more Pods on Nodes.
+
+## Scheduling
+
+* [Kubernetes Scheduler](/docs/concepts/scheduling-eviction/kube-scheduler/)
+* [Assigning Pods to Nodes](/docs/concepts/scheduling-eviction/assign-pod-node/)
+* [Pod Overhead](/docs/concepts/scheduling-eviction/pod-overhead/)
+* [Taints and Tolerations](/docs/concepts/scheduling-eviction/taint-and-toleration/)
+* [Scheduling Framework](/docs/concepts/scheduling-eviction/scheduling-framework)
+* [Scheduler Performance Tuning](/docs/concepts/scheduling-eviction/scheduler-perf-tuning/)
+* [Resource Bin Packing for Extended Resources](/docs/concepts/scheduling-eviction/resource-bin-packing/)
+
+## Pod Disruption
+
+{{<glossary_definition term_id="pod-disruption" length="all">}}
+
+* [Pod Priority and Preemption](/docs/concepts/scheduling-eviction/pod-priority-preemption/)
+* [Node-pressure Eviction](/docs/concepts/scheduling-eviction/node-pressure-eviction/)
+* [API-initiated Eviction](/docs/concepts/scheduling-eviction/api-eviction/)
diff --git a/content/en/docs/concepts/scheduling-eviction/api-eviction.md b/content/en/docs/concepts/scheduling-eviction/api-eviction.md
new file mode 100644
index 0000000000..e7f1942df2
--- /dev/null
+++ b/content/en/docs/concepts/scheduling-eviction/api-eviction.md
@@ -0,0 +1,19 @@
+---
+title: API-initiated Eviction
+content_type: concept
+weight: 70
+---
+
+{{< glossary_definition term_id="api-eviction" length="short" >}} </br>
+
+You can request eviction by directly calling the Eviction API 
+using a client of the kube-apiserver, like the `kubectl drain` command. 
+This creates an `Eviction` object, which causes the API server to terminate the Pod. 
+
+API-initiated evictions respect your configured [`PodDisruptionBudgets`](/docs/tasks/run-application/configure-pdb/)
+and [`terminationGracePeriodSeconds`](/docs/concepts/workloads/pods/pod-lifecycle#pod-termination). 
+
+## {{% heading "whatsnext" %}}
+
+* Learn about [Node-pressure Eviction](/docs/concepts/scheduling-eviction/node-pressure-eviction/)
+* Learn about [Pod Priority and Preemption](/docs/concepts/scheduling-eviction/pod-priority-preemption/)
diff --git a/content/en/docs/concepts/scheduling-eviction/eviction-policy.md b/content/en/docs/concepts/scheduling-eviction/eviction-policy.md
deleted file mode 100644
index b63c729696..0000000000
--- a/content/en/docs/concepts/scheduling-eviction/eviction-policy.md
+++ /dev/null
@@ -1,24 +0,0 @@
----
-title: Eviction Policy
-content_type: concept
-weight: 60
----
-
-<!-- overview -->
-
-This page is an overview of Kubernetes' policy for eviction.
-
-<!-- body -->
-
-## Eviction Policy
-
-The {{< glossary_tooltip text="kubelet" term_id="kubelet" >}} proactively monitors for
-and prevents total starvation of a compute resource. In those cases, the `kubelet` can reclaim
-the starved resource by failing one or more Pods. When the `kubelet` fails
-a Pod, it terminates all of its containers and transitions its `PodPhase` to `Failed`.
-If the evicted Pod is managed by a Deployment, the Deployment creates another Pod
-to be scheduled by Kubernetes.
-
-## {{% heading "whatsnext" %}}
-
-- Learn how to [configure out of resource handling](/docs/tasks/administer-cluster/out-of-resource/) with eviction signals and thresholds.
diff --git a/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
index 0944ecc768..52c8fd417e 100644
--- a/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -77,11 +77,9 @@ one of these at random.
 There are two supported ways to configure the filtering and scoring behavior
 of the scheduler:
 
-
 1. [Scheduling Policies](/docs/reference/scheduling/policies) allow you to configure _Predicates_ for filtering and _Priorities_ for scoring.
 1. [Scheduling Profiles](/docs/reference/scheduling/config/#profiles) allow you to configure Plugins that implement different scheduling stages, including: `QueueSort`, `Filter`, `Score`, `Bind`, `Reserve`, `Permit`, and others. You can also configure the kube-scheduler to run different profiles.
 
-
 ## {{% heading "whatsnext" %}}
 
 * Read about [scheduler performance tuning](/docs/concepts/scheduling-eviction/scheduler-perf-tuning/)
diff --git a/content/en/docs/concepts/scheduling-eviction/node-pressure-eviction.md b/content/en/docs/concepts/scheduling-eviction/node-pressure-eviction.md
new file mode 100644
index 0000000000..1f1fcd9991
--- /dev/null
+++ b/content/en/docs/concepts/scheduling-eviction/node-pressure-eviction.md
@@ -0,0 +1,411 @@
+---
+title: Node-pressure Eviction
+content_type: concept
+weight: 60
+---
+
+{{<glossary_definition term_id="node-pressure-eviction" length="short">}}</br>
+
+The {{<glossary_tooltip term_id="kubelet" text="kubelet">}} monitors resources 
+like CPU, memory, disk space, and filesystem inodes on your cluster's nodes. 
+When one or more of these resources reach specific consumption levels, the 
+kubelet can proactively fail one or more pods on the node to reclaim resources
+and prevent starvation. 
+
+During a node-pressure eviction, the kubelet sets the `PodPhase` for the
+selected pods to `Failed`. This terminates the pods. 
+
+Node-pressure eviction is not the same as 
+[API-initiated eviction](/docs/concepts/scheduling-eviction/eviction/#api-eviction).
+
+The kubelet does not respect your configured `PodDisruptionBudget` or the pod's
+`terminationGracePeriodSeconds`. If you use [soft eviction thresholds](#soft-eviction-thresholds),
+the kubelet respects your configured `eviction-max-pod-grace-period`. If you use
+[hard eviction thresholds](#hard-eviction-thresholds), it uses a `0s` grace period for termination.
+
+If the pods are managed by a {{< glossary_tooltip text="workload" term_id="workload" >}}
+resource (such as {{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}
+or {{< glossary_tooltip text="Deployment" term_id="deployment" >}}) that
+replaces failed pods, the control plane or `kube-controller-manager` creates new 
+pods in place of the evicted pods.
+
+{{<note>}}
+The kubelet attempts to [reclaim node-level resources](#reclaim-node-resources)
+before it terminates end-user pods. For example, it removes unused container
+images when disk resources are starved.
+{{</note>}}
+
+The kubelet uses various parameters to make eviction decisions, like the following:
+
+  * Eviction signals
+  * Eviction thresholds
+  * Monitoring intervals
+
+### Eviction signals {#eviction-signals}
+
+Eviction signals are the current state of a particular resource at a specific
+point in time. Kubelet uses eviction signals to make eviction decisions by
+comparing the signals to eviction thresholds, which are the minimum amount of 
+the resource that should be available on the node. 
+
+Kubelet uses the following eviction signals:
+
+| Eviction Signal      | Description                                                                           |
+|----------------------|---------------------------------------------------------------------------------------|
+| `memory.available`   | `memory.available` := `node.status.capacity[memory]` - `node.stats.memory.workingSet` |
+| `nodefs.available`   | `nodefs.available` := `node.stats.fs.available`                                       |
+| `nodefs.inodesFree`  | `nodefs.inodesFree` := `node.stats.fs.inodesFree`                                     |
+| `imagefs.available`  | `imagefs.available` := `node.stats.runtime.imagefs.available`                         |
+| `imagefs.inodesFree` | `imagefs.inodesFree` := `node.stats.runtime.imagefs.inodesFree`                       |
+| `pid.available`      | `pid.available` := `node.stats.rlimit.maxpid` - `node.stats.rlimit.curproc`           |
+
+In this table, the `Description` column shows how kubelet gets the value of the
+signal. Each signal supports either a percentage or a literal value. Kubelet 
+calculates the percentage value relative to the total capacity associated with
+the signal. 
+
+The value for `memory.available` is derived from the cgroupfs instead of tools
+like `free -m`. This is important because `free -m` does not work in a
+container, and if users use the [node
+allocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable) feature, out of resource decisions
+are made local to the end user Pod part of the cgroup hierarchy as well as the
+root node. This [script](/examples/admin/resource/memory-available.sh)
+reproduces the same set of steps that the kubelet performs to calculate
+`memory.available`. The kubelet excludes inactive_file (i.e. # of bytes of
+file-backed memory on inactive LRU list) from its calculation as it assumes that
+memory is reclaimable under pressure.
+
+The kubelet supports the following filesystem partitions:
+
+1. `nodefs`: The node's main filesystem, used for local disk volumes, emptyDir,
+   log storage, and more. For example, `nodefs` contains `/var/lib/kubelet/`. 
+1. `imagefs`: An optional filesystem that container runtimes use to store container
+   images and container writable layers.
+
+Kubelet auto-discovers these filesystems and ignores other filesystems. Kubelet
+does not support other configurations.
+
+{{<note>}}
+Some kubelet garbage collection features are deprecated in favor of eviction.
+For a list of the deprecated features, see [kubelet garbage collection deprecation](/docs/concepts/cluster-administration/kubelet-garbage-collection/#deprecation).
+{{</note>}}
+
+### Eviction thresholds
+
+You can specify custom eviction thresholds for the kubelet to use when it makes
+eviction decisions.
+
+Eviction thresholds have the form `[eviction-signal][operator][quantity]`, where:
+
+* `eviction-signal` is the [eviction signal](#eviction-signals) to use.
+* `operator` is the [relational operator](https://en.wikipedia.org/wiki/Relational_operator#Standard_relational_operators)
+  you want, such as `<` (less than).
+* `quantity` is the eviction threshold amount, such as `1Gi`. The value of `quantity`
+  must match the quantity representation used by Kubernetes. You can use either
+  literal values or percentages (`%`).
+
+For example, if a node has `10Gi` of total memory and you want trigger eviction if
+the available memory falls below `1Gi`, you can define the eviction threshold as
+either `memory.available<10%` or `memory.available<1Gi`. You cannot use both.
+
+You can configure soft and hard eviction thresholds.
+
+#### Soft eviction thresholds {#soft-eviction-thresholds}
+
+A soft eviction threshold pairs an eviction threshold with a required
+administrator-specified grace period. The kubelet does not evict pods until the
+grace period is exceeded. The kubelet returns an error on startup if there is no
+specified grace period. 
+
+You can specify both a soft eviction threshold grace period and a maximum
+allowed pod termination grace period for kubelet to use during evictions. If you
+specify a maximum allowed grace period and the soft eviction threshold is met, 
+the kubelet uses the lesser of the two grace periods. If you do not specify a
+maximum allowed grace period, the kubelet kills evicted pods immediately without
+graceful termination.
+
+You can use the following flags to configure soft eviction thresholds:
+
+* `eviction-soft`: A set of eviction thresholds like `memory.available<1.5Gi`
+  that can trigger pod eviction if held over the specified grace period.
+* `eviction-soft-grace-period`: A set of eviction grace periods like `memory.available=1m30s`
+  that define how long a soft eviction threshold must hold before triggering a Pod eviction.
+* `eviction-max-pod-grace-period`: The maximum allowed grace period (in seconds)
+  to use when terminating pods in response to a soft eviction threshold being met.
+
+#### Hard eviction thresholds {#hard-eviction-thresholds}
+
+A hard eviction threshold has no grace period. When a hard eviction threshold is
+met, the kubelet kills pods immediately without graceful termination to reclaim
+the starved resource.
+
+You can use the `eviction-hard` flag to configure a set of hard eviction 
+thresholds like `memory.available<1Gi`. 
+
+The kubelet has the following default hard eviction thresholds:
+
+* `memory.available<100Mi`
+* `nodefs.available<10%`
+* `imagefs.available<15%`
+* `nodefs.inodesFree<5%` (Linux nodes)
+
+### Eviction monitoring interval
+
+The kubelet evaluates eviction thresholds based on its configured `housekeeping-interval`
+which defaults to `10s`.
+
+### Node conditions {#node-conditions}
+
+The kubelet reports node conditions to reflect that the node is under pressure
+because hard or soft eviction threshold is met, independent of configured grace
+periods.  
+
+The kubelet maps eviction signals to node conditions as follows: 
+
+| Node Condition    | Eviction Signal                                                                       | Description                                                                                                                  |
+|-------------------|---------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------|
+| `MemoryPressure`  | `memory.available`                                                                    | Available memory on the node has satisfied an eviction threshold                                                             |
+| `DiskPressure`    | `nodefs.available`, `nodefs.inodesFree`, `imagefs.available`, or `imagefs.inodesFree` | Available disk space and inodes on either the node's root filesystem or image filesystem has satisfied an eviction threshold |
+| `PIDPressure`     | `pid.available`                                                                       | Available processes identifiers on the (Linux) node has fallen below an eviction threshold                                   |
+
+The kubelet updates the node conditions based on the configured 
+`--node-status-update-frequency`, which defaults to `10s`.
+
+#### Node condition oscillation
+
+In some cases, nodes oscillate above and below soft eviction thresholds without
+holding for the defined grace periods. This causes the reported node condition
+to constantly switch between `true` and `false`, leading to bad eviction decisions.
+
+To protect against oscillation, you can use the `eviction-pressure-transition-period`
+flag, which controls how long the kubelet must wait before transitioning a node
+condition to a different state. The transition period has a default value of `5m`.
+
+### Reclaiming node level resources {#reclaim-node-resources}
+
+The kubelet tries to reclaim node-level resources before it evicts end-user pods.
+
+When a `DiskPressure` node condition is reported, the kubelet reclaims node-level
+resources based on the filesystems on the node. 
+
+#### With `imagefs`
+
+If the node has a dedicated `imagefs` filesystem for container runtimes to use,
+the kubelet does the following:
+
+  * If the `nodefs` filesystem meets the eviction threshlds, the kubelet garbage collects
+    dead pods and containers. 
+  * If the `imagefs` filesystem meets the eviction thresholds, the kubelet
+    deletes all unused images. 
+
+#### Without `imagefs`
+
+If the node only has a `nodefs` filesystem that meets eviction thresholds,
+the kubelet frees up disk space in the following order:
+
+1. Garbage collect dead pods and containers
+1. Delete unused images
+
+### Pod selection for kubelet eviction
+
+If the kubelet's attempts to reclaim node-level resources don't bring the eviction
+signal below the threshold, the kubelet begins to evict end-user pods. 
+
+The kubelet uses the following parameters to determine pod eviction order:
+
+1. Whether the pod's resource usage exceeds requests
+1. [Pod Priority](/docs/concepts/configuration/pod-priority-preemption/)
+1. The pod's resource usage relative to requests
+
+As a result, kubelet ranks and evicts pods in the following order:
+
+1. `BestEffort` or `Burstable` pods where the usage exceeds requests. These pods
+   are evicted based on their Priority and then by how much their usage level
+   exceeds the request.
+1. `Guaranteed` pods and `Burstable` pods where the usage is less than requests
+   are evicted last, based on their Priority.
+
+{{<note>}}
+The kubelet does not use the pod's QoS class to determine the eviction order.
+You can use the QoS class to estimate the most likely pod eviction order when 
+reclaiming resources like memory. QoS does not apply to EphemeralStorage requests,
+so the above scenario will not apply if the node is, for example, under `DiskPressure`.
+{{</note>}}
+
+`Guaranteed` pods are guaranteed only when requests and limits are specified for
+all the containers and they are equal. These pods will never be evicted because
+of another pod's resource consumption. If a system daemon (such as `kubelet`,
+`docker`, and `journald`) is consuming more resources than were reserved via 
+`system-reserved` or `kube-reserved` allocations, and the node only has
+`Guaranteed` or `Burstable` pods using less resources than requests left on it,
+then the kubelet must choose to evict one of these pods to preserve node stability
+and to limit the impact of resource starvation on other pods. In this case, it
+will choose to evict pods of lowest Priority first.
+
+When the kubelet evicts pods in response to `inode` or `PID` starvation, it uses
+the Priority to determine the eviction order, because `inodes` and `PIDs` have no
+requests.
+
+The kubelet sorts pods differently based on whether the node has a dedicated
+`imagefs` filesystem:
+
+#### With `imagefs`
+
+If `nodefs` is triggering evictions, the kubelet sorts pods based on `nodefs`
+usage (`local volumes + logs of all containers`).
+
+If `imagefs` is triggering evictions, the kubelet sorts pods based on the
+writable layer usage of all containers.
+
+#### Without `imagefs`
+
+If `nodefs` is triggering evictions, the kubelet sorts pods based on their total
+disk usage (`local volumes + logs & writable layer of all containers`)
+
+### Minimum eviction reclaim
+
+In some cases, pod eviction only reclaims a small amount of the starved resource.
+This can lead to the kubelet repeatedly hitting the configured eviction thresholds
+and triggering multiple evictions. 
+
+You can use the `--eviction-minimum-reclaim` flag or a [kubelet config file](/docs/tasks/administer-cluster/kubelet-config-file/)
+to configure a minimum reclaim amount for each resource. When the kubelet notices
+that a resource is starved, it continues to reclaim that resource until it
+reclaims the quantity you specify. 
+
+For example, the following configuration sets minimum reclaim amounts: 
+
+```yaml
+apiVersion: kubelet.config.k8s.io/v1beta1
+kind: KubeletConfiguration
+evictionHard:
+  memory.available: "500Mi"
+  nodefs.available: "1Gi"
+  imagefs.available: "100Gi"
+evictionMinimumReclaim:
+  memory.available: "0Mi"
+  nodefs.available: "500Mi"
+  imagefs.available: "2Gi"
+```
+
+In this example, if the `nodefs.available` signal meets the eviction threshold,
+the kubelet reclaims the resource until the signal reaches the threshold of `1Gi`,
+and then continues to reclaim the minimum amount of `500Mi` it until the signal
+reaches `1.5Gi`. 
+
+Similarly, the kubelet reclaims the `imagefs` resource until the `imagefs.available`
+signal reaches `102Gi`. 
+
+The default `eviction-minimum-reclaim` is `0` for all resources.
+
+### Node out of memory behavior
+
+If the node experiences an out of memory (OOM) event prior to the kubelet
+being able to reclaim memory, the node depends on the [oom_killer](https://lwn.net/Articles/391222/)
+to respond.
+
+The kubelet sets an `oom_score_adj` value for each container based on the QoS for the pod.
+
+| Quality of Service | oom_score_adj                                                                     |
+|--------------------|-----------------------------------------------------------------------------------|
+| `Guaranteed`       | -997                                                                              |
+| `BestEffort`       | 1000                                                                              |
+| `Burstable`        | min(max(2, 1000 - (1000 * memoryRequestBytes) / machineMemoryCapacityBytes), 999) |
+
+{{<note>}}
+The kubelet also sets an `oom_score_adj` value of `-997` for containers in Pods that have
+`system-node-critical` {{<glossary_tooltip text="Priority" term_id="pod-priority">}}
+{{</note>}}
+
+If the kubelet can't reclaim memory before a node experiences OOM, the
+`oom_killer` calculates an `oom_score` based on the percentage of memory it's
+using on the node, and then adds the `oom_score_adj` to get an effective `oom_score`
+for each container. It then kills the container with the highest score.
+
+This means that containers in low QoS pods that consume a large amount of memory
+relative to their scheduling requests are killed first.
+
+Unlike pod eviction, if a container is OOM killed, the `kubelet` can restart it 
+based on its `RestartPolicy`.
+
+### Best practices {#node-pressure-eviction-good-practices}
+
+The following sections describe best practices for eviction configuration.
+
+#### Schedulable resources and eviction policies
+
+When you configure the kubelet with an eviction policy, you should make sure that
+the scheduler will not schedule pods if they will trigger eviction because they
+immediately induce memory pressure.
+
+Consider the following scenario:
+
+* Node memory capacity: `10Gi`
+* Operator wants to reserve 10% of memory capacity for system daemons (kernel, `kubelet`, etc.)
+* Operator wants to evict Pods at 95% memory utilization to reduce incidence of system OOM.
+
+For this to work, the kubelet is launched as follows:
+
+```
+--eviction-hard=memory.available<500Mi
+--system-reserved=memory=1.5Gi
+```
+
+In this configuration, the `--system-reserved` flag reserves `1.5Gi` of memory
+for the system, which is `10% of the total memory + the eviction threshold amount`. 
+
+The node can reach the eviction threshold if a pod is using more than its request,
+or if the system is using more than `1Gi` of memory, which makes the `memory.available`
+signal fall below `500Mi` and triggers the threshold. 
+
+#### DaemonSet
+
+Pod Priority is a major factor in making eviction decisions. If you do not want
+the kubelet to evict pods that belong to a `DaemonSet`, give those pods a high
+enough `priorityClass` in the pod spec. You can also use a lower `priorityClass`
+or the default to only allow `DaemonSet` pods to run when there are enough 
+resources.
+
+### Known issues
+
+The following sections describe known issues related to out of resource handling.
+
+#### kubelet may not observe memory pressure right away
+
+By default, the kubelet polls `cAdvisor` to collect memory usage stats at a
+regular interval. If memory usage increases within that window rapidly, the
+kubelet may not observe `MemoryPressure` fast enough, and the `OOMKiller`
+will still be invoked. 
+
+You can use the `--kernel-memcg-notification` flag to enable the `memcg`
+notification API on the kubelet to get notified immediately when a threshold
+is crossed.
+
+If you are not trying to achieve extreme utilization, but a sensible measure of
+overcommit, a viable workaround for this issue is to use the `--kube-reserved`
+and `--system-reserved` flags to allocate memory for the system. 
+
+#### active_file memory is not considered as available memory
+
+On Linux, the kernel tracks the number of bytes of file-backed memory on active 
+LRU list as the `active_file` statistic. The kubelet treats `active_file` memory
+areas as not reclaimable. For workloads that make intensive use of block-backed 
+local storage, including ephemeral local storage, kernel-level caches of file 
+and block data means that many recently accessed cache pages are likely to be 
+counted as `active_file`. If enough of these kernel block buffers are on the 
+active LRU list, the kubelet is liable to observe this as high resource use and 
+taint the node as experiencing memory pressure - triggering pod eviction.
+
+For more more details, see [https://github.com/kubernetes/kubernetes/issues/43916](https://github.com/kubernetes/kubernetes/issues/43916)
+
+You can work around that behavior by setting the memory limit and memory request
+the same for containers likely to perform intensive I/O activity. You will need 
+to estimate or measure an optimal memory limit value for that container.
+
+## {{% heading "whatsnext" %}}
+
+* Learn about [API-initiated Eviction](/docs/concepts/scheduling-eviction/api-eviction/)
+* Learn about [Pod Priority and Preemption](/docs/concepts/scheduling-eviction/pod-priority-preemption/)
+* Learn about [PodDisruptionBudgets](/docs/tasks/run-application/configure-pdb/)
+* Learn about [Quality of Service](/docs/tasks/configure-pod-container/quality-service-pod/) (QoS)
+* Check out the [Eviction API](/docs/reference/generated/kubernetes-api/{{<param "version">}}/#create-eviction-pod-v1-core)
\ No newline at end of file
diff --git a/content/en/docs/concepts/scheduling-eviction/pod-overhead.md b/content/en/docs/concepts/scheduling-eviction/pod-overhead.md
index 15992126f9..eebc235084 100644
--- a/content/en/docs/concepts/scheduling-eviction/pod-overhead.md
+++ b/content/en/docs/concepts/scheduling-eviction/pod-overhead.md
@@ -5,7 +5,7 @@ reviewers:
 - tallclair
 title: Pod Overhead
 content_type: concept
-weight: 50
+weight: 30
 ---
 
 <!-- overview -->
diff --git a/content/en/docs/concepts/scheduling-eviction/pod-priority-preemption.md b/content/en/docs/concepts/scheduling-eviction/pod-priority-preemption.md
index 5e75674d73..112e244f46 100644
--- a/content/en/docs/concepts/scheduling-eviction/pod-priority-preemption.md
+++ b/content/en/docs/concepts/scheduling-eviction/pod-priority-preemption.md
@@ -4,7 +4,7 @@ reviewers:
 - wojtek-t
 title: Pod Priority and Preemption
 content_type: concept
-weight: 70
+weight: 50
 ---
 
 <!-- overview -->
@@ -372,4 +372,6 @@ that exceeds its requests may be evicted.
 ## {{% heading "whatsnext" %}}
 
 * Read about using ResourceQuotas in connection with PriorityClasses: [limit Priority Class consumption by default](/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
-
+* Learn about [Pod Disruption](/docs/concepts/workloads/pods/disruptions/)
+* Learn about [API-initiated Eviction](/docs/concepts/scheduling-eviction/api-eviction/)
+* Learn about [Node-pressure Eviction](/docs/concepts/scheduling-eviction/node-pressure-eviction/)
diff --git a/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md b/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md
index 94bfaa1280..a7b3639366 100644
--- a/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md
+++ b/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md
@@ -5,7 +5,7 @@ reviewers:
 - ahg-g
 title: Resource Bin Packing for Extended Resources
 content_type: concept
-weight: 30
+weight: 80
 ---
 
 <!-- overview -->
diff --git a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index 24283f2efa..b110dc63e5 100644
--- a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -3,7 +3,7 @@ reviewers:
 - bsalamat
 title: Scheduler Performance Tuning
 content_type: concept
-weight: 80
+weight: 100
 ---
 
 <!-- overview -->
diff --git a/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md b/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
index 06ed901c2a..3be7adf430 100644
--- a/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
+++ b/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
@@ -3,7 +3,7 @@ reviewers:
 - ahg-g
 title: Scheduling Framework
 content_type: concept
-weight: 70
+weight: 90
 ---
 
 <!-- overview -->
diff --git a/content/en/docs/reference/glossary/api-eviction.md b/content/en/docs/reference/glossary/api-eviction.md
new file mode 100644
index 0000000000..b13238c955
--- /dev/null
+++ b/content/en/docs/reference/glossary/api-eviction.md
@@ -0,0 +1,22 @@
+---
+title: API-initiated eviction
+id: api-eviction
+date: 2021-04-27
+full_link: /docs/concepts/scheduling-eviction/pod-eviction/#api-eviction
+short_description: >
+  API-initiated eviction is the process by which you use the Eviction API to create an
+  Eviction object that triggers graceful pod termination.
+aka:
+tags:
+- operation
+---
+API-initiated eviction is the process by which you use the [Eviction API](/docs/reference/generated/kubernetes-api/{{<param "version">}}/#create-eviction-pod-v1-core)
+to create an `Eviction` object that triggers graceful pod termination.
+
+<!--more-->
+
+You can request eviction either by directly calling the Eviction API 
+using a client of the kube-apiserver, like the `kubectl drain` command. 
+When an `Eviction` object is created, the API server terminates the Pod. 
+
+API-initiated eviction is not the same as [node-pressure eviction](/docs/concepts/scheduling-eviction/eviction/#kubelet-eviction).
diff --git a/content/en/docs/reference/glossary/node-pressure-eviction.md b/content/en/docs/reference/glossary/node-pressure-eviction.md
new file mode 100644
index 0000000000..742ee3fe0c
--- /dev/null
+++ b/content/en/docs/reference/glossary/node-pressure-eviction.md
@@ -0,0 +1,23 @@
+---
+title: Node-pressure eviction
+id: node-pressure-eviction
+date: 2021-05-13
+full_link: /docs/concepts/scheduling-eviction/node-pressure-eviction/
+short_description: >
+  Node-pressure eviction is the process by which the kubelet proactively fails
+  pods to reclaim resources on nodes.
+aka: kubelet eviction
+tags:
+- operation
+---
+Node-pressure eviction is the process by which the {{<glossary_tooltip term_id="kubelet" text="kubelet">}} proactively terminates
+pods to reclaim resources on nodes.
+
+<!--more-->
+
+The kubelet monitors resources like CPU, memory, disk space, and filesystem 
+inodes on your cluster's nodes. When one or more of these resources reach
+specific consumption levels, the kubelet can proactively fail one or more pods
+on the node to reclaim resources and prevent starvation. 
+
+Node-pressure eviction is not the same as [API-initiated eviction](/docs/concepts/scheduling-eviction/api-eviction/).
diff --git a/content/en/docs/reference/glossary/pod-disruption.md b/content/en/docs/reference/glossary/pod-disruption.md
new file mode 100644
index 0000000000..1efd69dd4c
--- /dev/null
+++ b/content/en/docs/reference/glossary/pod-disruption.md
@@ -0,0 +1,19 @@
+---
+id: pod-disruption
+title: Pod Disruption
+full_link: /docs/concepts/workloads/pods/disruptions/
+date: 2021-05-12
+short_description: >
+  The process by which Pods on Nodes are terminated either voluntarily or involuntarily.
+
+aka:
+related:
+ - pod
+ - container
+tags:
+ - operation
+---
+
+[Pod disruption](/docs/concepts/workloads/pods/disruptions/) is the process by which Pods on Nodes are terminated either voluntarily or involuntarily. 
+
+Voluntary disruptions are started intentionally by application owners or cluster administrators. Involuntary disruptions are unintentional and can be triggered by unavoidable issues like Nodes running out of resources, or by accidental deletions. 
diff --git a/content/en/docs/tasks/administer-cluster/out-of-resource.md b/content/en/docs/tasks/administer-cluster/out-of-resource.md
deleted file mode 100644
index f750dd2585..0000000000
--- a/content/en/docs/tasks/administer-cluster/out-of-resource.md
+++ /dev/null
@@ -1,354 +0,0 @@
----
-reviewers:
-- derekwaynecarr
-- vishh
-- timstclair
-title: Configure Out of Resource Handling
-content_type: concept
----
-
-<!-- overview -->
-
-This page explains how to configure out of resource handling with `kubelet`.
-
-The `kubelet` needs to preserve node stability when available compute resources
-are low. This is especially important when dealing with incompressible
-compute resources, such as memory or disk space. If such resources are exhausted,
-nodes become unstable.
-
-<!-- body -->
-
-### Eviction Signals
-
-The `kubelet` supports eviction decisions based on the signals described in the following
-table. The value of each signal is described in the Description column, which is based on
-the `kubelet` summary API.
-
-| Eviction Signal      | Description                                                                           |
-|----------------------|---------------------------------------------------------------------------------------|
-| `memory.available`   | `memory.available` := `node.status.capacity[memory]` - `node.stats.memory.workingSet` |
-| `nodefs.available`   | `nodefs.available` := `node.stats.fs.available`                                       |
-| `nodefs.inodesFree`  | `nodefs.inodesFree` := `node.stats.fs.inodesFree`                                     |
-| `imagefs.available`  | `imagefs.available` := `node.stats.runtime.imagefs.available`                         |
-| `imagefs.inodesFree` | `imagefs.inodesFree` := `node.stats.runtime.imagefs.inodesFree`                       |
-| `pid.available`      | `pid.available` := `node.stats.rlimit.maxpid` - `node.stats.rlimit.curproc`           |
-
-Each of the above signals supports either a literal or percentage based value.
-The percentage based value is calculated relative to the total capacity
-associated with each signal.
-
-The value for `memory.available` is derived from the cgroupfs instead of tools
-like `free -m`. This is important because `free -m` does not work in a
-container, and if users use the [node
-allocatable](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable) feature, out of resource decisions
-are made local to the end user Pod part of the cgroup hierarchy as well as the
-root node. This [script](/examples/admin/resource/memory-available.sh)
-reproduces the same set of steps that the `kubelet` performs to calculate
-`memory.available`. The `kubelet` excludes inactive_file (i.e. # of bytes of
-file-backed memory on inactive LRU list) from its calculation as it assumes that
-memory is reclaimable under pressure.
-
-`kubelet` supports only two filesystem partitions.
-
-1. The `nodefs` filesystem that kubelet uses for volumes, daemon logs, etc.
-1. The `imagefs` filesystem that container runtimes uses for storing images and
-   container writable layers.
-
-`imagefs` is optional. `kubelet` auto-discovers these filesystems using
-cAdvisor. `kubelet` does not care about any other filesystems. Any other types
-of configurations are not currently supported by the kubelet. For example, it is
-_not OK_ to store volumes and logs in a dedicated `filesystem`.
-
-In future releases, the `kubelet` will deprecate the existing [garbage
-collection](/docs/concepts/cluster-administration/kubelet-garbage-collection/)
-support in favor of eviction in response to disk pressure.
-
-### Eviction Thresholds
-
-The `kubelet` supports the ability to specify eviction thresholds that trigger the `kubelet` to reclaim resources.
-
-Each threshold has the following form:
-
-`[eviction-signal][operator][quantity]`
-
-where:
-
-* `eviction-signal` is an eviction signal token as defined in the previous table.
-* `operator` is the desired relational operator, such as `<` (less than).
-* `quantity` is the eviction threshold quantity, such as `1Gi`. These tokens must match the quantity representation used by Kubernetes. An eviction threshold can also be expressed as a percentage using the `%` token.
-
-For example, if a node has `10Gi` of total memory and you want trigger eviction if
-the available memory falls below `1Gi`, you can define the eviction threshold as
-either `memory.available<10%` or `memory.available<1Gi`. You cannot use both.
-
-#### Soft Eviction Thresholds
-
-A soft eviction threshold pairs an eviction threshold with a required
-administrator-specified grace period. No action is taken by the `kubelet`
-to reclaim resources associated with the eviction signal until that grace
-period has been exceeded. If no grace period is provided, the `kubelet`
-returns an error on startup.
-
-In addition, if a soft eviction threshold has been met, an operator can
-specify a maximum allowed Pod termination grace period to use when evicting
-pods from the node. If specified, the `kubelet` uses the lesser value among
-the `pod.Spec.TerminationGracePeriodSeconds` and the max allowed grace period.
-If not specified, the `kubelet` kills Pods immediately with no graceful
-termination.
-
-To configure soft eviction thresholds, the following flags are supported:
-
-* `eviction-soft` describes a set of eviction thresholds (e.g. `memory.available<1.5Gi`) that if met over a corresponding grace period would trigger a Pod eviction.
-* `eviction-soft-grace-period` describes a set of eviction grace periods (e.g. `memory.available=1m30s`) that correspond to how long a soft eviction threshold must hold before triggering a Pod eviction.
-* `eviction-max-pod-grace-period` describes the maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met.
-
-#### Hard Eviction Thresholds
-
-A hard eviction threshold has no grace period, and if observed, the `kubelet`
-will take immediate action to reclaim the associated starved resource. If a
-hard eviction threshold is met, the `kubelet` kills the Pod immediately
-with no graceful termination.
-
-To configure hard eviction thresholds, the following flag is supported:
-
-* `eviction-hard` describes a set of eviction thresholds (e.g. `memory.available<1Gi`) that if met would trigger a Pod eviction.
-
-The `kubelet` has the following default hard eviction threshold:
-
-* `memory.available<100Mi`
-* `nodefs.available<10%`
-* `imagefs.available<15%`
-
-On a Linux node, the default value also includes `nodefs.inodesFree<5%`.
-
-### Eviction Monitoring Interval
-
-The `kubelet` evaluates eviction thresholds per its configured housekeeping interval.
-
-* `housekeeping-interval` is the interval between container housekeepings which defaults to `10s`.
-
-### Node Conditions
-
-The `kubelet` maps one or more eviction signals to a corresponding node condition.
-
-If a hard eviction threshold has been met, or a soft eviction threshold has been met
-independent of its associated grace period, the `kubelet` reports a condition that
-reflects the node is under pressure.
-
-The following node conditions are defined that correspond to the specified eviction signal.
-
-| Node Condition    | Eviction Signal                                                                       | Description                                                                                                                  |
-|-------------------|---------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------|
-| `MemoryPressure`  | `memory.available`                                                                    | Available memory on the node has satisfied an eviction threshold                                                             |
-| `DiskPressure`    | `nodefs.available`, `nodefs.inodesFree`, `imagefs.available`, or `imagefs.inodesFree` | Available disk space and inodes on either the node's root filesystem or image filesystem has satisfied an eviction threshold |
-| `PIDPressure`     | `pid.available`                                                                       | Available processes identifiers on the (Linux) node has fallen below an eviction threshold                                   |                                                         |
-
-The `kubelet` continues to report node status updates at the frequency specified by
-`--node-status-update-frequency` which defaults to `10s`.
-
-### Oscillation of node conditions
-
-If a node is oscillating above and below a soft eviction threshold, but not exceeding
-its associated grace period, it would cause the corresponding node condition to
-constantly oscillate between true and false, and could cause poor scheduling decisions
-as a consequence.
-
-To protect against this oscillation, the following flag is defined to control how
-long the `kubelet` must wait before transitioning out of a pressure condition.
-
-* `eviction-pressure-transition-period` is the duration for which the `kubelet` has to wait before transitioning out of an eviction pressure condition.
-
-The `kubelet` would ensure that it has not observed an eviction threshold being met
-for the specified pressure condition for the period specified before toggling the
-condition back to `false`.
-
-### Reclaiming node level resources
-
-If an eviction threshold has been met and the grace period has passed,
-the `kubelet` initiates the process of reclaiming the pressured resource
-until it has observed the signal has gone below its defined threshold.
-
-The `kubelet` attempts to reclaim node level resources prior to evicting end-user Pods. If
-disk pressure is observed, the `kubelet` reclaims node level resources differently if the
-machine has a dedicated `imagefs` configured for the container runtime.
-
-#### With `imagefs`
-
-If `nodefs` filesystem has met eviction thresholds, `kubelet` frees up disk space by deleting the dead Pods and their containers.
-
-If `imagefs` filesystem has met eviction thresholds, `kubelet` frees up disk space by deleting all unused images.
-
-#### Without `imagefs`
-
-If `nodefs` filesystem has met eviction thresholds, `kubelet` frees up disk space in the following order:
-
-1. Delete dead Pods and their containers
-1. Delete all unused images
-
-### Evicting end-user Pods
-
-If the `kubelet` is unable to reclaim sufficient resource on the node, `kubelet` begins evicting Pods.
-
-The `kubelet` ranks Pods for eviction first by whether or not their usage of the starved resource exceeds requests,
-then by [Priority](/docs/concepts/configuration/pod-priority-preemption/), and then by the consumption of the starved compute resource relative to the Pods' scheduling requests.
-
-As a result, `kubelet` ranks and evicts Pods in the following order:
-
-* `BestEffort` or `Burstable` Pods whose usage of a starved resource exceeds its request. Such pods are ranked by Priority, and then usage above request.
-* `Guaranteed` pods and `Burstable` pods whose usage is beneath requests are evicted last. `Guaranteed` Pods are guaranteed only when requests and limits are specified for all the containers and they are equal. Such pods are guaranteed to never be evicted because of another Pod's resource consumption. If a system daemon (such as `kubelet`, `docker`, and `journald`) is consuming more resources than were reserved via `system-reserved` or `kube-reserved` allocations, and the node only has `Guaranteed` or `Burstable` Pods using less than requests remaining, then the node must choose to evict such a Pod in order to preserve node stability and to limit the impact of the unexpected consumption to other Pods. In this case, it will choose to evict pods of Lowest Priority first.
-
-If necessary, `kubelet` evicts Pods one at a time to reclaim disk when `DiskPressure`
-is encountered. If the `kubelet` is responding to `inode` starvation, it reclaims
-`inodes` by evicting Pods with the lowest quality of service first. If the `kubelet`
-is responding to lack of available disk, it ranks Pods within a quality of service
-that consumes the largest amount of disk and kills those first.
-
-#### With `imagefs`
-
-If `nodefs` is triggering evictions, `kubelet` sorts Pods based on the usage on `nodefs`
-
-- local volumes + logs of all its containers.
-
-If `imagefs` is triggering evictions, `kubelet` sorts Pods based on the writable layer usage of all its containers.
-
-#### Without `imagefs`
-
-If `nodefs` is triggering evictions, `kubelet` sorts Pods based on their total disk usage
-
-- local volumes + logs & writable layer of all its containers.
-
-### Minimum eviction reclaim
-
-In certain scenarios, eviction of Pods could result in reclamation of small amount of resources. This can result in
-`kubelet` hitting eviction thresholds in repeated successions. In addition to that, eviction of resources like `disk`, is time consuming.
-
-To mitigate these issues, `kubelet` can have a per-resource `minimum-reclaim`. Whenever `kubelet` observes
-resource pressure, `kubelet` attempts to reclaim at least `minimum-reclaim` amount of resource below
-the configured eviction threshold.
-
-For example, with the following configuration:
-
-```
---eviction-hard=memory.available<500Mi,nodefs.available<1Gi,imagefs.available<100Gi
---eviction-minimum-reclaim="memory.available=0Mi,nodefs.available=500Mi,imagefs.available=2Gi"`
-```
-
-If an eviction threshold is triggered for `memory.available`, the `kubelet` works to ensure
-that `memory.available` is at least `500Mi`. For `nodefs.available`, the `kubelet` works
-to ensure that `nodefs.available` is at least `1.5Gi`, and for `imagefs.available` it
-works to ensure that `imagefs.available` is at least `102Gi` before no longer reporting pressure
-on their associated resources.
-
-The default `eviction-minimum-reclaim` is `0` for all resources.
-
-### Scheduler
-
-The node reports a condition when a compute resource is under pressure. The
-scheduler views that condition as a signal to dissuade placing additional
-pods on the node.
-
-| Node Condition    | Scheduler Behavior                                  |
-| ------------------| ----------------------------------------------------|
-| `MemoryPressure`  | No new `BestEffort` Pods are scheduled to the node. |
-| `DiskPressure`    | No new Pods are scheduled to the node.              |
-
-## Node OOM Behavior
-
-If the node experiences a system OOM (out of memory) event prior to the `kubelet` being able to reclaim memory,
-the node depends on the [oom_killer](https://lwn.net/Articles/391222/) to respond.
-
-The `kubelet` sets a `oom_score_adj` value for each container based on the quality of service for the Pod.
-
-| Quality of Service | oom_score_adj                                                                     |
-|--------------------|-----------------------------------------------------------------------------------|
-| `Guaranteed`       | -998                                                                              |
-| `BestEffort`       | 1000                                                                              |
-| `Burstable`        | min(max(2, 1000 - (1000 * memoryRequestBytes) / machineMemoryCapacityBytes), 999) |
-
-If the `kubelet` is unable to reclaim memory prior to a node experiencing system OOM, the `oom_killer` calculates
-an `oom_score` based on the percentage of memory it's using on the node, and then add the `oom_score_adj` to get an
-effective `oom_score` for the container, and then kills the container with the highest score.
-
-The intended behavior should be that containers with the lowest quality of service that
-are consuming the largest amount of memory relative to the scheduling request should be killed first in order
-to reclaim memory.
-
-Unlike Pod eviction, if a Pod container is OOM killed, it may be restarted by the `kubelet` based on its `RestartPolicy`.
-
-## Best Practices
-
-The following sections describe best practices for out of resource handling.
-
-### Schedulable resources and eviction policies
-
-Consider the following scenario:
-
-* Node memory capacity: `10Gi`
-* Operator wants to reserve 10% of memory capacity for system daemons (kernel, `kubelet`, etc.)
-* Operator wants to evict Pods at 95% memory utilization to reduce incidence of system OOM.
-
-To facilitate this scenario, the `kubelet` would be launched as follows:
-
-```
---eviction-hard=memory.available<500Mi
---system-reserved=memory=1.5Gi
-```
-
-Implicit in this configuration is the understanding that "System reserved" should include the amount of memory
-covered by the eviction threshold.
-
-To reach that capacity, either some Pod is using more than its request, or the system is using more than `1.5Gi - 500Mi = 1Gi`.
-
-This configuration ensures that the scheduler does not place Pods on a node that immediately induce memory pressure
-and trigger eviction assuming those Pods use less than their configured request.
-
-### DaemonSet
-
-As `Priority` is a key factor in the eviction strategy, if you do not want pods belonging to a `DaemonSet` to be evicted, specify a sufficiently high priorityClass in the pod spec template. If you want pods belonging to a `DaemonSet` to run only if there are sufficient resources, specify a lower or default priorityClass.
-
-
-## Deprecation of existing feature flags to reclaim disk
-
-`kubelet` has been freeing up disk space on demand to keep the node stable.
-
-As disk based eviction matures, the following `kubelet` flags are marked for deprecation
-in favor of the simpler configuration supported around eviction.
-
-| Existing Flag                              | New Flag                                |
-| ------------------------------------------ | ----------------------------------------|
-| `--image-gc-high-threshold`                | `--eviction-hard` or `eviction-soft`    |
-| `--image-gc-low-threshold`                 | `--eviction-minimum-reclaim`            |
-| `--maximum-dead-containers`                | deprecated                              |
-| `--maximum-dead-containers-per-container`  | deprecated                              |
-| `--minimum-container-ttl-duration`         | deprecated                              |
-| `--low-diskspace-threshold-mb`             | `--eviction-hard` or `eviction-soft`    |
-| `--outofdisk-transition-frequency`         | `--eviction-pressure-transition-period` |
-
-## Known issues
-
-The following sections describe known issues related to out of resource handling.
-
-### kubelet may not observe memory pressure right away
-
-The `kubelet` currently polls `cAdvisor` to collect memory usage stats at a regular interval. If memory usage
-increases within that window rapidly, the `kubelet` may not observe `MemoryPressure` fast enough, and the `OOMKiller`
-will still be invoked. We intend to integrate with the `memcg` notification API in a future release to reduce this
-latency, and instead have the kernel tell us when a threshold has been crossed immediately.
-
-If you are not trying to achieve extreme utilization, but a sensible measure of overcommit, a viable workaround for
-this issue is to set eviction thresholds at approximately 75% capacity. This increases the ability of this feature
-to prevent system OOMs, and promote eviction of workloads so cluster state can rebalance.
-
-### kubelet may evict more Pods than needed
-
-The Pod eviction may evict more Pods than needed due to stats collection timing gap. This can be mitigated by adding
-the ability to get root container stats on an on-demand basis [(https://github.com/google/cadvisor/issues/1247)](https://github.com/google/cadvisor/issues/1247) in the future.
-
-### active_file memory is not considered as available memory
-
-On Linux, the kernel tracks the number of bytes of file-backed memory on active LRU list as the `active_file` statistic. The kubelet treats `active_file` memory areas as not reclaimable. For workloads that make intensive use of block-backed local storage, including ephemeral local storage, kernel-level caches of file and block data means that many recently accessed cache pages are likely to be counted as `active_file`. If enough of these kernel block buffers are on the active LRU list, the kubelet is liable to observe this as high resource use and taint the node as experiencing memory pressure - triggering Pod eviction.
-
-For more more details, see [https://github.com/kubernetes/kubernetes/issues/43916](https://github.com/kubernetes/kubernetes/issues/43916)
-
-You can work around that behavior by setting the memory limit and memory request the same for containers likely to perform intensive I/O activity. You will need to estimate or measure an optimal memory limit value for that container.
-
diff --git a/static/_redirects b/static/_redirects
index 2961c5229a..399ee1604c 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -91,7 +91,7 @@
 /docs/concepts/cluster-administration/guaranteed-scheduling-critical-addon-pods/     /docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/ 301
 /docs/concepts/cluster-administration/master-node-communication/     /docs/concepts/architecture/master-node-communication/ 301
 /docs/concepts/cluster-administration/network-plugins/     /docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/ 301
-/docs/concepts/cluster-administration/out-of-resource/     /docs/tasks/administer-cluster/out-of-resource/ 301
+/docs/concepts/cluster-administration/out-of-resource/     /docs/concepts/scheduling-eviction/node-pressure-eviction/ 301   
 /docs/concepts/cluster-administration/resource-usage-monitoring /docs/tasks/debug-application-cluster/resource-usage-monitoring/ 301
 /docs/concepts/cluster-administration/monitoring/ /docs/concepts/cluster-administration/system-metrics/ 301
 /docs/concepts/cluster-administration/controller-metrics/ /docs/concepts/cluster-administration/system-metrics/ 301
@@ -127,6 +127,7 @@
 /id/docs/concepts/scheduling/scheduler-perf-tuning/     /id/docs/concepts/scheduling-eviction/scheduler-perf-tuning/ 301
 /docs/concepts/scheduling/scheduling-framework/     /docs/concepts/scheduling-eviction/scheduling-framework/ 301
 /id/docs/concepts/scheduling/scheduling-framework/     /id/docs/concepts/scheduling-eviction/scheduling-framework/ 301
+/docs/concepts/scheduling-eviction/eviction-policy/     /docs/concepts/scheduling-eviction/node-pressure-eviction/ 301
 /docs/concepts/service-catalog/     /docs/concepts/extend-kubernetes/service-catalog/ 301
 /docs/concepts/services-networking/networkpolicies/     /docs/concepts/services-networking/network-policies/ 301
 /docs/concepts/storage/etcd-store-api-object/     /docs/tasks/administer-cluster/configure-upgrade-etcd/ 301
@@ -261,6 +262,7 @@
 /docs/tasks/administer-cluster/quota-memory-cpu-namespace/     /docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/ 301
 /docs/tasks/administer-cluster/quota-pod-namespace/     /docs/tasks/administer-cluster/manage-resources/quota-pod-namespace/ 301
 /docs/tasks/administer-cluster/reserve-compute-resources/out-of-resource.md     /docs/tasks/administer-cluster/out-of-resource/ 301
+/docs/tasks/administer-cluster/out-of-resource/     /docs/concepts/scheduling-eviction/pod-eviction/ 301
 /docs/tasks/administer-cluster/romana-network-policy/     /docs/tasks/administer-cluster/network-policy-provider/romana-network-policy/ 301
 /docs/tasks/administer-cluster/running-cloud-controller.md     /docs/tasks/administer-cluster/running-cloud-controller/ 301
 /docs/tasks/administer-cluster/share-configuration/     /docs/tasks/access-application-cluster/configure-access-multiple-clusters/ 301

From 2c959326a69cd4f1094390e37edf9bb8bd4fea01 Mon Sep 17 00:00:00 2001
From: howieyuen <haoyuan@mail.ustc.edu.cn>
Date: Sat, 8 May 2021 15:18:33 +0800
Subject: [PATCH 747/788] [zh] resync task files [2]

---
 .../tasks/debug-application-cluster/audit.md  | 38 +++++++++++++------
 .../debug-application-introspection.md        |  3 +-
 .../debug-application.md                      | 28 +-------------
 .../debug-pod-replication-controller.md       |  2 +-
 .../debug-running-pod.md                      |  4 +-
 .../debug-service.md                          | 23 ++++++-----
 .../logging-stackdriver.md                    |  8 ++--
 7 files changed, 48 insertions(+), 58 deletions(-)

diff --git a/content/zh/docs/tasks/debug-application-cluster/audit.md b/content/zh/docs/tasks/debug-application-cluster/audit.md
index 1e8f12388c..595d4d66e2 100644
--- a/content/zh/docs/tasks/debug-application-cluster/audit.md
+++ b/content/zh/docs/tasks/debug-application-cluster/audit.md
@@ -82,22 +82,34 @@ Each request can be recorded with an associated _stage_. The defined stages are:
 - `ResponseComplete` - 当响应消息体完成并且没有更多数据需要传输的时候。
 - `Panic` - 当 panic 发生时生成。
 
+<!-- 
+The configuration of an
+[Audit Event configuration](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Event)
+is different from the
+[Event](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#event-v1-core)
+API object.
+-->
+{{< note >}}
+[审计事件配置](/zh/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Event)
+的配置与 [Event](/zh/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#event-v1-core)
+API 对象不同。
+{{< /note >}}
+
 <!--
 The audit logging feature increases the memory consumption of the API server
 because some context required for auditing is stored for each request.
 Additionally, memory consumption depends on the audit logging configuration.
 -->
-{{< note >}}
 审计日志记录功能会增加 API server 的内存消耗，因为需要为每个请求存储审计所需的某些上下文。
 此外，内存消耗取决于审计日志记录的配置。
-{{< /note >}}
 
 <!--
 ## Audit Policy
 
 Audit policy defines rules about what events should be recorded and what data
 they should include. The audit policy object structure is defined in the
-[`audit.k8s.io` API group][auditing-api]. When an event is processed, it's
+[`audit.k8s.io` API group](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Policy).
+When an event is processed, it's
 compared against the list of rules in order. The first matching rule sets the
 _audit level_ of the event. The defined audit levels are:
 -->
@@ -105,7 +117,7 @@ _audit level_ of the event. The defined audit levels are:
 
 审计政策定义了关于应记录哪些事件以及应包含哪些数据的规则。
 审计策略对象结构定义在
-[`audit.k8s.io` API 组](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/pkg/apis/audit/v1/types.go)
+[`audit.k8s.io` API 组](/zh/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Policy)
 处理事件时，将按顺序与规则列表进行比较。第一个匹配规则设置事件的
 _审计级别（Audit Level）_。已定义的审计级别有：
 
@@ -158,12 +170,18 @@ rules:
 If you're crafting your own audit profile, you can use the audit profile for Google Container-Optimized OS as a starting point. You can check the
 [configure-helper.sh](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh)
 script, which generates the audit policy file. You can see most of the audit policy file by looking directly at the script.
+
+You can also refer to the [`Policy` configuration reference](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Policy)
+for details about the fields defined.
 -->
 如果你在打磨自己的审计配置文件，你可以使用为 Google Container-Optimized OS
 设计的审计配置作为出发点。你可以参考
 [configure-helper.sh](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh)
 脚本，该脚本能够生成审计策略文件。你可以直接在脚本中看到审计策略的绝大部份内容。
 
+你也可以参考 [`Policy` 配置参考](/zh/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Policy)
+以获取有关已定义字段的详细信息。
+
 <!--
 ## Audit backends
 
@@ -173,10 +191,8 @@ Out of the box, the kube-apiserver provides two backends:
 - Log backend, which writes events into the filesystem
 - Webhook backend, which sends events to an external HTTP API
 
-In both cases, audit events structure is defined by the API in the
-`audit.k8s.io` API group. For Kubernetes {{< param "fullversion" >}}, that
-API is at version
-[`v1`](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/pkg/apis/audit/v1/types.go).
+In all cases, audit events follow a structure defined by the Kubernetes API in the
+[`audit.k8s.io` API group](/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Event).
 -->
 
 ## 审计后端   {#audit-backends}
@@ -186,9 +202,9 @@ API is at version
 - Log 后端，将事件写入到文件系统
 - Webhook 后端，将事件发送到外部 HTTP API
 
-在这两种情况下，审计事件结构均由 `audit.k8s.io` API 组中的 API 定义。
-对于 Kubernetes {{< param "fullversion" >}}，该 API 的当前版本是
-[`v1`](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/pkg/apis/audit/v1/types.go).
+在这所有情况下，审计事件均遵循 Kubernetes API 在
+[`audit.k8s.io` API 组](/zh/docs/reference/config-api/apiserver-audit.v1/#audit-k8s-io-v1-Event)
+中定义的结构。
 
 <!--
 In case of patches, request body is a JSON array with patch operations, not a JSON object
diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-application-introspection.md b/content/zh/docs/tasks/debug-application-cluster/debug-application-introspection.md
index 51e1f353b8..7210356959 100644
--- a/content/zh/docs/tasks/debug-application-cluster/debug-application-introspection.md
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-application-introspection.md
@@ -257,8 +257,7 @@ The message tells us that there were not enough resources for the Pod on any of
 其 message 部分表明没有任何节点拥有足够多的资源。
 
 <!--
-To correct this situation, you can use `kubectl scale` to update your Deployment to specify four or fewer replicas. 
-(Or you could just leave the one Pod pending, which is harmless.)
+To correct this situation, you can use `kubectl scale` to update your Deployment to specify four or fewer replicas. (Or you could leave the one Pod pending, which is harmless.)
 -->
 要纠正这种情况，可以使用 `kubectl scale` 更新 Deployment，以指定 4 个或更少的副本。
 (或者你可以让 Pod 继续保持这个状态，这是无害的。)
diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-application.md b/content/zh/docs/tasks/debug-application-cluster/debug-application.md
index 10c7264e4f..d2e95ab2b4 100644
--- a/content/zh/docs/tasks/debug-application-cluster/debug-application.md
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-application.md
@@ -265,42 +265,18 @@ kubectl get pods --selector=name=nginx,type=frontend
 ```
 
 <!--
-If the list of pods matches expectations, but your endpoints are still empty, it's possible that you don't
-have the right ports exposed.  If your service has a `containerPort` specified, but the Pods that are
-selected don't have that port listed, then they won't be added to the endpoints list.
-
 Verify that the pod's `containerPort` matches up with the Service's `targetPort`
 -->
-如果 Pod 列表符合预期，但是 Endpoints 仍然为空，那么可能暴露的端口不正确。
-如果服务指定了 `containerPort`，但是所选中的 Pod 没有列出该端口，这些 Pod
-不会被添加到 Endpoints 列表。
-
 验证 Pod 的 `containerPort` 与服务的 `targetPort` 是否匹配。
 
 <!--
 #### Network traffic is not forwarded
 
-If you can connect to the service, but the connection is immediately dropped, and there are endpoints
-in the endpoints list, it's likely that the proxy can't contact your pods.
-
-There are three things to
-check:
-
-   * Are your pods working correctly?  Look for restart count, and [debug pods](#debugging-pods).
-   * Can you connect to your pods directly?  Get the IP address for the Pod, and try to connect directly to that IP.
-   * Is your application serving on the port that you configured?  Kubernetes doesn't do port remapping, so if your application serves on 8080, the `containerPort` field needs to be 8080.
+Please see [debugging service](/docs/tasks/debug-application-cluster/debug-service/) for more information.
 -->
 #### 网络流量未被转发
 
-如果你可以连接到服务上，但是连接立即被断开了，并且在 Endpoints 列表中有末端表项，
-可能是代理无法连接到 Pod。
-
-要检查的有以下三项：
-
-* Pod 工作是否正常？ 看一下重启计数，并参阅[调试 Pod](#debugging-pods)；
-* 是否可以直接连接到 Pod？获取 Pod 的 IP 地址，然后尝试直接连接到该 IP；
-* 应用是否在配置的端口上进行服务？Kubernetes 不进行端口重映射，所以如果应用在
-  8080 端口上服务，那么 `containerPort` 字段就要设定为 8080。
+请参阅[调试 service](/zh/docs/tasks/debug-application-cluster/debug-service/) 了解更多信息。
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md b/content/zh/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
index 8792bf89fb..d3de42728c 100644
--- a/content/zh/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
@@ -87,7 +87,7 @@ case you can try several things:
   will never be scheduled.
 
     You can check node capacities with the `kubectl get nodes -o <format>`
-    command. Here are some example command lines that extract just the necessary
+    command. Here are some example command lines that extract the necessary
     information: 
 -->
 #### 资源不足
diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md b/content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md
index 8029504a80..3889cdf701 100644
--- a/content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md
@@ -143,7 +143,7 @@ kubectl run ephemeral-demo --image=k8s.gcr.io/pause:3.1 --restart=Never
 ```
 
 This section use the `pause` container image in examples because it does not
-contain userland debugging utilities, but this method works with all container
+contain debugging utilities, but this method works with all container
 images.
 -->
 ## 使用临时容器来调试的例子 {#ephemeral-container-example}
@@ -162,7 +162,7 @@ kubectl run ephemeral-demo --image=k8s.gcr.io/pause:3.1 --restart=Never
 ```
 
 {{< note >}}
-本节示例中使用 `pause` 容器镜像，因为它不包含任何用户级调试程序，但是这个方法适用于所有容器镜像。
+本节示例中使用 `pause` 容器镜像，因为它不包含调试程序，但是这个方法适用于所有容器镜像。
 {{< /note >}}
 
 <!--
diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-service.md b/content/zh/docs/tasks/debug-application-cluster/debug-service.md
index 9c2ef902e7..469e004a5c 100644
--- a/content/zh/docs/tasks/debug-application-cluster/debug-service.md
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-service.md
@@ -29,15 +29,15 @@ Deployment（或其他工作负载控制器）运行了 Pod，并创建 Service
 ## Running commands in a Pod
 
 For many steps here you will want to see what a Pod running in the cluster
-sees.  The simplest way to do this is to run an interactive alpine Pod:
+sees.  The simplest way to do this is to run an interactive busybox Pod:
 -->
 ## 在 Pod 中运行命令
 
 对于这里的许多步骤，你可能希望知道运行在集群中的 Pod 看起来是什么样的。
-最简单的方法是运行一个交互式的 alpine Pod：
+最简单的方法是运行一个交互式的 busybox Pod：
 
 ```none
-$ kubectl run -it --rm --restart=Never alpine --image=alpine sh
+kubectl run -it --rm --restart=Never busybox --image=gcr.io/google-containers/busybox sh
 ```
 
 <!--
@@ -161,13 +161,13 @@ kubectl get pods -l app=hostnames \
 ```
 
 <!--
-The example container used for this walk-through simply serves its own hostname
+The example container used for this walk-through serves its own hostname
 via HTTP on port 9376, but if you are debugging your own app, you'll want to
 use whatever port number your Pods are listening on.
 
 From within a pod:
 -->
-用于本教程的示例容器仅通过 HTTP 在端口 9376 上提供其自己的主机名，
+用于本教程的示例容器通过 HTTP 在端口 9376 上提供其自己的主机名，
 但是如果要调试自己的应用程序，则需要使用你的 Pod 正在侦听的端口号。
 
 在 Pod 内运行：
@@ -260,9 +260,9 @@ service/hostnames exposed
 ```
 
 <!--
-And read it back, just to be sure:
+And read it back:
 -->
-重新运行查询命令，确认没有问题：
+重新运行查询命令：
 
 ```shell
 kubectl get svc hostnames
@@ -608,14 +608,13 @@ Earlier you saw that the Pods were running.  You can re-check that:
 kubectl get pods -l app=hostnames
 ```
 ```none
-NAME              READY     STATUS    RESTARTS   AGE
+NAME                        READY     STATUS    RESTARTS   AGE
 hostnames-632524106-bbpiw   1/1       Running   0          1h
 hostnames-632524106-ly40y   1/1       Running   0          1h
 hostnames-632524106-tlaok   1/1       Running   0          1h
 ```
 <!--
-The `-l app=hostnames` argument is a label selector - just like our Service
-has.
+The `-l app=hostnames` argument is a label selector configured on the Service.
 
 The "AGE" column says that these Pods are about an hour old, which implies that
 they are running fine and not crashing.
@@ -627,7 +626,7 @@ If the restart count is high, read more about how to [debug pods](/docs/tasks/de
 Inside the Kubernetes system is a control loop which evaluates the selector of
 every Service and saves the results into a corresponding Endpoints object.
 -->
-`-l app=hostnames` 参数是一个标签选择算符 - 和我们 Service 中定义的一样。
+`-l app=hostnames` 参数是在 Service 上配置的标签选择器。
 
 "AGE" 列表明这些 Pod 已经启动一个小时了，这意味着它们运行良好，而未崩溃。
 
@@ -899,7 +898,7 @@ iptables-save | grep hostnames
 ```
 
 <!--
-There should be 2 rules for each port of your Service (just one in this
+There should be 2 rules for each port of your Service (only one in this
 example) - a "KUBE-PORTALS-CONTAINER" and a "KUBE-PORTALS-HOST".
 
 Almost nobody should be using the "userspace" mode any more, so you won't spend
diff --git a/content/zh/docs/tasks/debug-application-cluster/logging-stackdriver.md b/content/zh/docs/tasks/debug-application-cluster/logging-stackdriver.md
index fbc87d25f1..aacac3e5f0 100644
--- a/content/zh/docs/tasks/debug-application-cluster/logging-stackdriver.md
+++ b/content/zh/docs/tasks/debug-application-cluster/logging-stackdriver.md
@@ -493,13 +493,13 @@ a running cluster in the [Deploying section](#deploying).
 ### 更改 `DaemonSet` 参数    {#changing-daemonset-parameters}
 
 <!--
-When you have the Stackdriver Logging `DaemonSet` in your cluster, you can just modify the
-`template` field in its spec, daemonset controller will update the pods for you. For example,
-let's assume you've just installed the Stackdriver Logging as described above. Now you want to
+When you have the Stackdriver Logging `DaemonSet` in your cluster, you can modify the
+`template` field in its spec. The DaemonSet controller manages the pods for you.
+For example, assume you've installed the Stackdriver Logging as described above. Now you want to
 change the memory limit to give fluentd more memory to safely process more logs.
 -->
 当集群中有 Stackdriver 日志机制的 `DaemonSet` 时，你只需修改其 spec 中的
-`template` 字段，daemonset 控制器将为你更新 Pod。
+`template` 字段，DaemonSet 控制器将为你管理 Pod。
 例如，假设你按照上面的描述已经安装了 Stackdriver 日志机制。
 现在，你想更改内存限制，来给 fluentd 提供的更多内存，从而安全地处理更多日志。
 

From 3ca030c235cb148e82d915b1db042c5922e75480 Mon Sep 17 00:00:00 2001
From: howieyuen <haoyuan@mail.ustc.edu.cn>
Date: Thu, 6 May 2021 11:59:12 +0800
Subject: [PATCH 748/788] [zh] Resync tasks files[3]

---
 .../monitor-node-health.md                    | 360 +++++++++---------
 1 file changed, 181 insertions(+), 179 deletions(-)

diff --git a/content/zh/docs/tasks/debug-application-cluster/monitor-node-health.md b/content/zh/docs/tasks/debug-application-cluster/monitor-node-health.md
index b34d1040d9..4e81fd8567 100644
--- a/content/zh/docs/tasks/debug-application-cluster/monitor-node-health.md
+++ b/content/zh/docs/tasks/debug-application-cluster/monitor-node-health.md
@@ -3,159 +3,131 @@ content_type: task
 title: 节点健康监测
 ---
 <!-- 
+title: Monitor Node Health
+content_type: task
 reviewers:
 - Random-Liu
 - dchen1107
-content_type: task
-title: Monitor Node Health
 -->
 
 <!-- overview -->
 <!-- 
-*Node problem detector* is a [DaemonSet](/docs/concepts/workloads/controllers/daemonset/) monitoring the
-node health. It collects node problems from various daemons and reports them
-to the apiserver as [NodeCondition](/docs/concepts/architecture/nodes/#condition)
+*Node Problem Detector* is a daemon for monitoring and reporting about a node's health.
+You can run Node Problem Detector as a `DaemonSet` or as a standalone daemon.
+Node Problem Detector collects information about node problems from various daemons
+and reports these conditions to the API server as [NodeCondition](/docs/concepts/architecture/nodes/#condition)
 and [Event](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#event-v1-core). 
+
+To learn how to install and use Node Problem Detector, see
+[Node Problem Detector project documentation](https://github.com/kubernetes/node-problem-detector).
 -->
 
-*节点问题探测器* 是一个 [DaemonSet](/zh/docs/concepts/workloads/controllers/daemonset/)，
-用来监控节点健康。它从各种守护进程收集节点问题，并以
+*节点问题检测器（Node Problem Detector）*是一个守护程序，用于监视和报告节点的健康状况。
+你可以将节点问题探测器以 `DaemonSet` 或独立守护程序运行。
+节点问题检测器从各种守护进程收集节点问题，并以
 [NodeCondition](/zh/docs/concepts/architecture/nodes/#condition) 和
 [Event](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#event-v1-core)
 的形式报告给 API 服务器。 
 
-<!-- 
-It supports some known kernel issue detection now, and will detect more and
-more node problems over time. 
--->
-它现在支持一些已知的内核问题检测，并将随着时间的推移，检测更多节点问题。
-
-<!-- 
-Currently Kubernetes won't take any action on the node conditions and events
-generated by node problem detector. In the future, a remedy system could be
-introduced to deal with node problems. 
--->
-目前，Kubernetes 不会对节点问题检测器监测到的节点状态和事件采取任何操作。
-将来可能会引入一个补救系统来处理这些节点问题。
-
-<!-- 
-See more information
-[here](https://github.com/kubernetes/node-problem-detector). 
--->
-更多信息请参阅 [这里](https://github.com/kubernetes/node-problem-detector)。
+要了解如何安装和使用节点问题检测器，请参阅
+[节点问题探测器项目文档](https://github.com/kubernetes/node-problem-detector)。
 
 ## {{% heading "prerequisites" %}}
 
-{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+{{< include "task-tutorial-prereqs.md" >}}
 
 <!-- steps -->
 
 <!-- 
 ## Limitations 
 
-* The kernel issue detection of node problem detector only supports file based
-kernel log now. It doesn't support log tools like journald. 
+* Node Problem Detector only supports file based kernel log.
+  Log tools such as `journald` are not supported.
+
+* Node Problem Detector uses the kernel log format for reporting kernel issues.
+  To learn how to extend the kernel log format, see [Add support for another log format](#support-other-log-format).
 -->
 ## 局限性  {#limitations}
 
-* 节点问题检测器的内核问题检测现在只支持基于文件类型的内核日志。
+* 节点问题检测器只支持基于文件类型的内核日志。
   它不支持像 journald 这样的命令行日志工具。
+* 节点问题检测器使用内核日志格式来报告内核问题。
+  要了解如何扩展内核日志格式，请参阅[添加对另一个日志格式的支持](#support-other-log-format)。
 
 <!-- 
-* The kernel issue detection of node problem detector has assumption on kernel
-  log format, and now it only works on Ubuntu and Debian. However, it is easy to extend
-  it to [support other log format](/docs/tasks/debug-application-cluster/monitor-node-health/#support-other-log-format). 
+## Enabling Node Problem Detector
+
+Some cloud providers enable Node Problem Detector as an {{< glossary_tooltip text="Addon" term_id="addons" >}}.
+You can also enable Node Problem Detector with `kubectl` or by creating an Addon pod.
 -->
-* 节点问题检测器的内核问题检测对内核日志格式有一定要求，现在它只适用于 Ubuntu 和 Debian。
-  不过将其扩展为[支持其它日志格式](#support-other-log-format) 也很容易。
+## 启用节点问题检测器
+
+一些云供应商将节点问题检测器以{{< glossary_tooltip text="插件" term_id="addons" >}}形式启用。
+你还可以使用 `kubectl` 或创建插件 Pod 来启用节点问题探测器。
 
 <!-- 
-## Enable/Disable in GCE cluster 
+## Using kubectl to enable Node Problem Detector {#using-kubectl}
 
-Node problem detector is [running as a cluster addon](/docs/setup/cluster-large/#addon-resources) enabled by default in the
-gce cluster. 
+`kubectl` provides the most flexible management of Node Problem Detector.
+You can overwrite the default configuration to fit it into your environment or
+to detect customized node problems. For example:
 -->
-## 在 GCE 集群中启用/禁用
+## 使用 kubectl 启用节点问题检测器 {#using-kubectl}
 
-节点问题检测器在 gce 集群中以
-[集群插件的形式](/zh/docs/setup/best-practices/cluster-large/#addon-resources)
-默认启用。
+`kubectl` 提供了节点问题探测器最灵活的管理。
+你可以覆盖默认配置使其适合你的环境或检测自定义节点问题。例如：
 
 <!-- 
-You can enable/disable it by setting the environment variable
-`KUBE_ENABLE_NODE_PROBLEM_DETECTOR` before `kube-up.sh`. 
+1. Create a Node Problem Detector configuration similar to `node-problem-detector.yaml`:
+
+   {{< codenew file="debug/node-problem-detector.yaml" >}}
+
+   {{< note >}}
+   You should verify that the system log directory is right for your operating system distribution.
+   {{< /note >}}
+
+1. Start node problem detector with `kubectl`:
+
+   ```shell
+   kubectl apply -f https://k8s.io/examples/debug/node-problem-detector.yaml
+   ```
 -->
-你可以在运行 `kube-up.sh` 之前，以设置环境变量 `KUBE_ENABLE_NODE_PROBLEM_DETECTOR` 的形式启用/禁用它。
+1. 创建类似于 `node-strought-detector.yaml` 的节点问题检测器配置：
+   {{< codenew file="debug/node-problem-detector.yaml" >}}
+
+   {{< note >}}
+   你应该检查系统日志目录是否适用于操作系统发行版本。
+   {{< /note >}}
+
+1. 使用 `kubectl` 启动节点问题检测器：
+
+   ```shell
+   kubectl apply -f https://k8s.io/examples/debug/node-problem-detector.yaml
+   ```
 
 <!-- 
-## Use in Other Environment 
+### Using an Addon pod to enable Node Problem Detector {#using-addon-pod}
 
-To enable node problem detector in other environment outside of GCE, you can use
-either `kubectl` or addon pod. 
+If you are using a custom cluster bootstrap solution and don't need
+to overwrite the default configuration, you can leverage the Addon pod to
+further automate the deployment.
+
+Create `node-problem-detector.yaml`, and save the configuration in the Addon pod's
+directory `/etc/kubernetes/addons/node-problem-detector` on a control plane node.
 -->
-## 在其它环境中使用  {#use-in-other-environment}
+### 使用插件 pod 启用节点问题检测器 {#using-addon-pod}
 
-要在 GCE 之外的其他环境中启用节点问题检测器，你可以使用 `kubectl` 或插件 pod。
+如果你使用的是自定义集群引导解决方案，不需要覆盖默认配置，
+可以利用插件 Pod 进一步自动化部署。
 
-<!-- 
-### Kubectl 
-
-This is the recommended way to start node problem detector outside of GCE. It
-provides more flexible management, such as overwriting the default
-configuration to fit it into your environment or detect
-customized node problems. 
--->
-### Kubectl
-
-这是在 GCE 之外启动节点问题检测器的推荐方法。
-它的管理更加灵活，例如覆盖默认配置以使其适合你的环境或检测自定义节点问题。
-
-<!-- 
-* **Step 1:** `node-problem-detector.yaml`: 
--->
-* **步骤 1:** `node-problem-detector.yaml`:
-
-{{< codenew file="debug/node-problem-detector.yaml" >}}
-
-<!-- 
-***Notice that you should make sure the system log directory is right for your
-OS distro.*** 
--->
-***请注意保证你的系统日志路径与你的 OS 发行版相对应。***
-
-<!-- 
-* **Step 2:** Start node problem detector with `kubectl`: 
--->
-* **步骤 2:** 执行 `kubectl` 来启动节点问题检测器：
-
-```shell
- kubectl create -f https://k8s.io/examples/debug/node-problem-detector.yaml
-```
-
-<!-- 
-### Addon Pod 
-
-This is for those who have their own cluster bootstrap solution, and don't need
-to overwrite the default configuration. They could leverage the addon pod to
-further automate the deployment. 
--->
-### 插件 Pod  {#addon-pod}
-
-这适用于拥有自己的集群引导程序解决方案的用户，并且不需要覆盖默认配置。
-他们可以利用插件 Pod 进一步自动化部署。
-
-<!-- 
-Just create `node-problem-detector.yaml`, and put it under the addon pods directory
-`/etc/kubernetes/addons/node-problem-detector` on master node. 
--->
-只需创建 `node-problem-detector.yaml`，并将其放在主节点上的插件 pod 目录
-`/etc/kubernetes/addons/node-problem-detector` 下。
+创建 `node-strick-detector.yaml`，并在控制平面节点上保存配置到插件 Pod 的目录
+`/etc/kubernetes/addons/node-problem-detector`。
 
 <!-- 
 ## Overwrite the Configuration 
 
 The [default configuration](https://github.com/kubernetes/node-problem-detector/tree/v0.1/config)
-is embedded when building the docker image of node problem detector. 
+is embedded when building the Docker image of Node Problem Detector.
 -->
 ## 覆盖配置文件
 
@@ -163,73 +135,97 @@ is embedded when building the docker image of node problem detector.
 [默认配置](https://github.com/kubernetes/node-problem-detector/tree/v0.1/config)。
 
 <!-- 
-However, you can use [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) to overwrite it
-following the steps: 
+However, you can use a [`ConfigMap`](/docs/tasks/configure-pod-container/configure-pod-configmap/)
+to overwrite the configuration:
 -->
-不过，你可以像下面这样使用 [ConfigMap](/zh/docs/tasks/configure-pod-container/configure-pod-configmap/)
+不过，你可以像下面这样使用 [`ConfigMap`](/zh/docs/tasks/configure-pod-container/configure-pod-configmap/)
 将其覆盖：
 
 <!-- 
-* **Step 1:** Change the config files in `config/`.
-* **Step 2:** Create the ConfigMap `node-problem-detector-config` with `kubectl create configmap
-node-problem-detector-config --from-file=config/`.
-* **Step 3:** Change the `node-problem-detector.yaml` to use the ConfigMap:
+1. Change the configuration files in `config/`
+1. Create the `ConfigMap` `node-problem-detector-config`:
+
+   ```shell
+   kubectl create configmap node-problem-detector-config --from-file=config/
+   ```
+
+1. Change the `node-problem-detector.yaml` to use the `ConfigMap`:
+
+   {{< codenew file="debug/node-problem-detector-configmap.yaml" >}}
+
+1. Recreate the Node Problem Detector with the new configuration file:
+
+   ```shell
+   # If you have a node-problem-detector running, delete before recreating
+   kubectl delete -f https://k8s.io/examples/debug/node-problem-detector.yaml
+   kubectl apply -f https://k8s.io/examples/debug/node-problem-detector-configmap.yaml
+   ```
  -->
-* **步骤 1:** 在 `config/` 中更改配置文件。
-* **步骤 2:** 使用 `kubectl create configmap node-problem-detector-config --from-file=config/` 创建 `node-problem-detector-config` 。
-* **步骤 3:** 更改 `node-problem-detector.yaml` 以使用 ConfigMap:
+1. 更改 `config/` 中的配置文件
+1. 创建 `ConfigMap` `node-strick-detector-config`：
+   
+   ```shell
+   kubectl create configmap node-problem-detector-config --from-file=config/
+   ```
 
-{{< codenew file="debug/node-problem-detector-configmap.yaml" >}}
+1. 更改 `node-problem-detector.yaml` 以使用 ConfigMap:
+   
+   {{< codenew file="debug/node-problem-detector-configmap.yaml" >}}
 
-<!-- 
-* **Step 4:** Re-create the node problem detector with the new yaml file: 
+1. 使用新的配置文件重新创建节点问题检测器：
+
+    ```shell
+   # 如果你正在运行节点问题检测器，请先删除，然后再重新创建
+   kubectl delete -f https://k8s.io/examples/debug/node-problem-detector.yaml
+   kubectl apply -f https://k8s.io/examples/debug/node-problem-detector-configmap.yaml
+   ```
+
+<!--  
+{{< note >}}
+This approach only applies to a Node Problem Detector started with `kubectl`.
+{{< /note >}}
+
+Overwriting a configuration is not supported if a Node Problem Detector runs as a cluster Addon.
+The Addon manager does not support `ConfigMap`.
 -->
-* **步骤 4:** 使用新的 yaml 文件重新创建节点问题检测器：
+{{< note >}}
+此方法仅适用于通过 `kubectl` 启动的节点问题检测器。
+{{< /note >}}
 
-```shell
- kubectl delete -f https://k8s.io/examples/debug/node-problem-detector.yaml # If you have a node-problem-detector running
- kubectl create -f https://k8s.io/examples/debug/node-problem-detector-configmap.yaml
-```
-
-<!-- 
-***Notice that this approach only applies to node problem detector started with `kubectl`.*** 
--->
-***请注意，此方法仅适用于通过 `kubectl` 启动的节点问题检测器。***
-
-<!-- 
-For node problem detector running as cluster addon, because addon manager doesn't support
-ConfigMap, configuration overwriting is not supported now. 
--->
-由于插件管理器不支持ConfigMap，因此现在不支持对于作为集群插件运行的节点问题检测器的配置进行覆盖。
+如果节点问题检测器作为集群插件运行，则不支持覆盖配置。
+插件管理器不支持 `ConfigMap`。
 
 <!-- 
 ## Kernel Monitor 
 
-*Kernel Monitor* is a problem daemon in node problem detector. It monitors kernel log
-and detects known kernel issues following predefined rules. 
+*Kernel Monitor* is a system log monitor daemon supported in the Node Problem Detector.
+Kernel monitor watches the kernel log and detects known kernel issues following predefined rules.
 -->
 ## 内核监视器
 
-*内核监视器* 是节点问题检测器中的问题守护进程。它监视内核日志并按照预定义规则检测已知内核问题。
+*内核监视器（Kernel Monitor）*是节点问题检测器中支持的系统日志监视器守护进程。
+内核监视器观察内核日志并根据预定义规则检测已知的内核问题。
 
 <!-- 
 The Kernel Monitor matches kernel issues according to a set of predefined rule list in
-[`config/kernel-monitor.json`](https://github.com/kubernetes/node-problem-detector/blob/v0.1/config/kernel-monitor.json).
-The rule list is extensible, and you can always extend it by overwriting the
-configuration. 
+[`config/kernel-monitor.json`](https://github.com/kubernetes/node-problem-detector/blob/v0.1/config/kernel-monitor.json). The rule list is extensible. You can expand the rule list by overwriting the
+configuration.
 -->
-内核监视器根据 [`config/kernel-monitor.json`](https://github.com/kubernetes/node-problem-detector/blob/v0.1/config/kernel-monitor.json) 中的一组预定义规则列表匹配内核问题。
+内核监视器根据 [`config/kernel-monitor.json`](https://github.com/kubernetes/node-problem-detector/blob/v0.1/config/kernel-monitor.json)
+中的一组预定义规则列表匹配内核问题。
 规则列表是可扩展的，你始终可以通过覆盖配置来扩展它。
 
 <!-- 
-### Add New NodeConditions 
+### Add new NodeConditions 
 
-To support new node conditions, you can extend the `conditions` field in
-`config/kernel-monitor.json` with new condition definition: 
+To support a new `NodeCondition`, create a condition definition within the `conditions` field in
+`config/kernel-monitor.json`, for example:
+```
 -->
 ### 添加新的 NodeCondition
 
-你可以使用新的状态描述来扩展 `config/kernel-monitor.json` 中的 `conditions` 字段以支持新的节点状态。
+要支持新的 `NodeCondition`，请在 `config/kernel-monitor.json` 中的
+`conditions` 字段中创建一个条件定义：
 
 ```json
 {
@@ -240,14 +236,14 @@ To support new node conditions, you can extend the `conditions` field in
 ```
 
 <!-- 
-### Detect New Problems 
+### Detect new problems 
 
 To detect new problems, you can extend the `rules` field in `config/kernel-monitor.json`
-with new rule definition: 
+with a new rule definition:
 -->
 ### 检测新的问题
 
-你可以使用新的规则描述来扩展 `config/kernel-monitor.json` 中的 `rules` 字段以检测新问题。
+你可以使用新的规则描述来扩展 `config/kernel-monitor.json` 中的 `rules` 字段以检测新问题：
 
 ```json
 {
@@ -259,51 +255,57 @@ with new rule definition:
 ```
 
 <!-- 
-### Change Log Path 
+### Configure path for the kernel log device {#kernel-log-device-path}
 
-Kernel log in different OS distros may locate in different path. The `log`
-field in `config/kernel-monitor.json` is the log path inside the container.
-You can always configure it to match your OS distro. 
+Check your kernel log path location in your operating system (OS) distribution.
+The Linux kernel [log device](https://www.kernel.org/doc/Documentation/ABI/testing/dev-kmsg) is usually presented as `/dev/kmsg`. However, the log path location varies by OS distribution.
+The `log` field in `config/kernel-monitor.json` represents the log path inside the container.
+You can configure the `log` field to match the device path as seen by the Node Problem Detector.
 -->
-### 更改日志路径
+### 配置内核日志设备的路径 {#kernel-log-device-path}
 
-不同操作系统发行版的内核日志的可能不同。 `config/kernel-monitor.json` 中的 `log` 字段是容器内的日志路径。你始终可以修改配置使其与你的 OS 发行版匹配。
+检查你的操作系统（OS）发行版本中的内核日志路径位置。
+Linux 内核[日志设备](https://www.kernel.org/doc/documentation/abi/testing/dev-kmsg)
+通常呈现为 `/dev/kmsg`。
+但是，日志路径位置因 OS 发行版本而异。
+`config/kernel-monitor.json` 中的 `log` 字段表示容器内的日志路径。
+你可以配置 `log` 字段以匹配节点问题检测器所示的设备路径。
 
 <!-- 
-### Support Other Log Format 
+### Add support for another log format {#support-other-log-format}
 
-Kernel monitor uses [`Translator`](https://github.com/kubernetes/node-problem-detector/blob/v0.1/pkg/kernelmonitor/translator/translator.go)
-plugin to translate kernel log the internal data structure. It is easy to
-implement a new translator for a new log format. 
+Kernel monitor uses the
+[`Translator`](https://github.com/kubernetes/node-problem-detector/blob/v0.1/pkg/kernelmonitor/translator/translator.go) plugin to translate the internal data structure of the kernel log.
+You can implement a new translator for a new log format.
 -->
-### 支持其它日志格式  {#support-other-log-format}
+### 添加对其它日志格式的支持  {#support-other-log-format}
 
-内核监视器使用 [`Translator`] 插件将内核日志转换为内部数据结构。
-我们可以很容易为新的日志格式实现新的翻译器。
+内核监视器使用 
+[`Translator`](https://github.com/kubernetes/node-problem-detector/blob/v0.1/pkg/kernelmonitor/translator.go)
+插件转换内核日志的内部数据结构。
+你可以为新的日志格式实现新的转换器。
 
 <!-- discussion -->
 
 <!-- 
-## Caveats 
+## Recommendations and restrictions
 
-It is recommended to run the node problem detector in your cluster to monitor
-the node health. However, you should be aware that this will introduce extra
-resource overhead on each node. Usually this is fine, because: 
+It is recommended to run the Node Problem Detector in your cluster to monitor node health.
+When running the Node Problem Detector, you can expect extra resource overhead on each node.
+Usually this is fine, because:
+
+* The kernel log grows relatively slowly.
+* A resource limit is set for the Node Problem Detector.
+* Even under high load, the resource usage is acceptable. For more information, see the Node Problem Detector
+[benchmark result](https://github.com/kubernetes/node-problem-detector/issues/2#issuecomment-220255629).
 -->
-## 注意事项   {#caveats}
-
-我们建议在集群中运行节点问题检测器来监视节点运行状况。
-但是，你应该知道这将在每个节点上引入额外的资源开销。一般情况下没有影响，因为：
-
-<!-- 
-* The kernel log is generated relatively slowly.
-* Resource limit is set for node problem detector.
-* Even under high load, the resource usage is acceptable.
-(see [benchmark result](https://github.com/kubernetes/node-problem-detector/issues/2#issuecomment-220255629)) 
--->
-* 内核日志生成相对较慢。
-* 节点问题检测器有资源限制。
-* 即使在高负载下，资源使用也是可以接受的。
-(参阅 [基准测试结果](https://github.com/kubernetes/node-problem-detector/issues/2#issuecomment-220255629)) 
+## 建议和限制
 
+建议在集群中运行节点问题检测器以监控节点运行状况。
+运行节点问题检测器时，你可以预期每个节点上的额外资源开销。
+通常这是可接受的，因为：
 
+* 内核日志增长相对缓慢。
+* 已经为节点问题检测器设置了资源限制。
+* 即使在高负载下，资源使用也是可接受的。有关更多信息，请参阅节点问题检测器
+  [基准结果](https://github.com/kubernetes/node-problem-detector/issues/2.suecomment-220255629)。

From e43de9ad161713013c0ab510cfaf3d1d3e187a1f Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Wed, 12 May 2021 18:00:38 +0800
Subject: [PATCH 749/788] [zh]Resync tasks files[11]

---
 .../managing-secret-using-config-file.md      | 14 ++---
 .../managing-secret-using-kubectl.md          | 52 ++++++++++---------
 .../managing-secret-using-kustomize.md        |  6 +--
 .../define-environment-variable-container.md  | 49 +++++++++++------
 .../manage-daemon/rollback-daemon-set.md      |  2 +-
 .../tasks/manage-daemon/update-daemon-set.md  |  6 +--
 .../declarative-config.md                     |  4 +-
 .../imperative-command.md                     |  4 +-
 .../imperative-config.md                      |  4 +-
 .../install-service-catalog-using-helm.md     |  6 +--
 .../install-service-catalog-using-sc.md       | 32 +++++++-----
 11 files changed, 104 insertions(+), 75 deletions(-)

diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
index 06047e93dd..cce9f50f4f 100644
--- a/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -183,6 +183,8 @@ kubectl get secret mysecret -o yaml
 
 ```yaml
 apiVersion: v1
+data:
+  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
 kind: Secret
 metadata:
   creationTimestamp: 2018-11-15T20:40:59Z
@@ -191,8 +193,6 @@ metadata:
   resourceVersion: "7225"
   uid: c280ad2e-e916-11e8-98f2-025000000001
 type: Opaque
-data:
-  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
 ```
 
 <!--  
@@ -230,6 +230,8 @@ stringData:
 
 ```yaml
 apiVersion: v1
+data:
+  username: YWRtaW5pc3RyYXRvcg==
 kind: Secret
 metadata:
   creationTimestamp: 2018-11-15T20:46:46Z
@@ -238,8 +240,6 @@ metadata:
   resourceVersion: "7579"
   uid: 91460ecb-e917-11e8-98f2-025000000001
 type: Opaque
-data:
-  username: YWRtaW5pc3RyYXRvcg==
 ```
 
 <!-- Where `YWRtaW5pc3RyYXRvcg==` decodes to `administrator`. -->
@@ -248,8 +248,8 @@ data:
 <!-- ## Clean Up -->
 ## 清理    {#clean-up}
 
-<!-- To delete the Secret you have just created: -->
-删除你刚才创建的 Secret：
+<!-- To delete the Secret you have created: -->
+删除你创建的 Secret：
 
 ```shell
 kubectl delete secret mysecret
@@ -260,7 +260,7 @@ kubectl delete secret mysecret
 <!-- 
 - Read more about the [Secret concept](/docs/concepts/configuration/secret/)
 - Learn how to [manage Secret with the `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
-- Learn how to [manage Secret using kustomizae](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+- Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 -->
 - 进一步阅读 [Secret 概念](/zh/docs/concepts/configuration/secret/)
 - 了解如何[使用 `kubectl` 命令管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 7aaf473337..a4be3c9d04 100644
--- a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -5,7 +5,7 @@ weight: 10
 description: 使用 kubectl 命令行创建 Secret 对象。
 ---
 <!--
-title: Managing Secret using kubectl
+title: Managing Secrets using kubectl
 content_type: task
 weight: 10
 description: Creating Secret objects using kubectl command line.
@@ -23,7 +23,7 @@ description: Creating Secret objects using kubectl command line.
 ## 创建 Secret    {#create-a-secret}
 
 <!--
-A `Secret` can contain user credentials required by Pods to access a database.
+A `Secret` can contain user credentials required by pods to access a database.
 For example, a database connection string consists of a username and password.
 You can store the username in a file `./username.txt` and the password in a
 file `./password.txt` on your local machine.
@@ -38,12 +38,12 @@ echo -n '1f2d1e2e67df' > ./password.txt
 ```
 
 <!--
-The `-n` flag in the above two commands ensures that the generated files will
-not contain an extra newline character at the end of the text. This is
-important because when `kubectl` reads a file and encode the content into
-base64 string, the extra newline character gets encoded too.
+In these commands, the `-n` flag ensures that the generated files do not have
+an extra newline character at the end of the text. This is important because
+when `kubectl` reads a file and encodes the content into a base64 string, the
+extra newline character gets encoded too.
 -->
-上面两个命令中的 `-n` 标志确保生成的文件在文本末尾不包含额外的换行符。
+在这些命令中，`-n` 标志确保生成的文件在文本末尾不包含额外的换行符。
 这一点很重要，因为当 `kubectl` 读取文件并将内容编码为 base64 字符串时，多余的换行符也会被编码。
 
 <!--
@@ -66,7 +66,7 @@ secret/db-user-pass created
 ```
 
 <!--
-Default key name is the filename. You may optionally set the key name using
+The default key name is the filename. You can optionally set the key name using
 `--from-file=[key=]source`. For example:
 -->
 默认密钥名称是文件名。 你可以选择使用 `--from-file=[key=]source` 来设置密钥名称。例如：
@@ -78,10 +78,10 @@ kubectl create secret generic db-user-pass \
 ```
 
 <!--
-You do not need to escape special characters in passwords from files
-().
+You do not need to escape special characters in password strings that you 
+include in a file.
 -->
-你无需转义文件（`--from-file`）中的密码的特殊字符。
+你不需要对文件中包含的密码字符串中的特殊字符进行转义。
 
 <!--
 You can also provide Secret data using the `--from-literal=<key>=<value>` tag.
@@ -89,13 +89,16 @@ This tag can be specified more than once to provide multiple key-value pairs.
 Note that special characters such as `$`, `\`, `*`, `=`, and `!` will be
 interpreted by your [shell](https://en.wikipedia.org/wiki/Shell_(computing))
 and require escaping.
+
 In most shells, the easiest way to escape the password is to surround it with
-single quotes (`'`).  For example, if your actual password is `S!B\*d$zDsb=`,
-you should execute the command this way:
+single quotes (`'`). For example, if your password is `S!B\*d$zDsb=`,
+run the following command:
 -->
 你还可以使用 `--from-literal=<key>=<value>` 标签提供 Secret 数据。
 可以多次使用此标签，提供多个键值对。
-请注意，特殊字符（例如：`$`，`\`，`*`，`=` 和 `!`）由你的 [shell](https://en.wikipedia.org/wiki/Shell_(computing)) 解释执行，而且需要转义。
+请注意，特殊字符（例如：`$`，`\`，`*`，`=` 和 `!`）由你的 [shell](https://en.wikipedia.org/wiki/Shell_(computing))
+解释执行，而且需要转义。
+
 在大多数 shell 中，转义密码最简便的方法是用单引号括起来。
 比如，如果你的密码是 `S!B\*d$zDsb=`， 
 可以像下面一样执行命令：
@@ -109,8 +112,8 @@ kubectl create secret generic dev-db-secret \
 <!-- ## Verify the Secret -->
 ## 验证 Secret    {#verify-the-secret}
 
-<!-- You can check that the secret was created: -->
-你可以检查 secret 是否已创建：
+<!-- Check that the Secret was created: -->
+检查 secret 是否已创建：
 
 ```shell
 kubectl get secrets
@@ -151,19 +154,18 @@ username:    5 bytes
 <!--
 The commands `kubectl get` and `kubectl describe` avoid showing the contents
 of a `Secret` by default. This is to protect the `Secret` from being exposed
-accidentally to an onlooker, or from being stored in a terminal log.
+accidentally, or from being stored in a terminal log.
 -->
 `kubectl get` 和 `kubectl describe` 命令默认不显示 `Secret` 的内容。
-这是为了防止 `Secret` 被意外暴露给旁观者或存储在终端日志中。
+这是为了防止 `Secret` 被意外暴露或存储在终端日志中。
 
 <!-- ## Decoding the Secret  {#decoding-secret} -->
 ## 解码 Secret  {#decoding-secret}
 
 <!--
-To view the contents of the Secret we just created, you can run the following
-command:
+To view the contents of the Secret you created, run the following command:
 -->
-要查看我们刚刚创建的 Secret 的内容，可以运行以下命令：
+要查看创建的 Secret 的内容，运行以下命令：
 
 ```shell
 kubectl get secret db-user-pass -o jsonpath='{.data}'
@@ -195,8 +197,8 @@ echo 'MWYyZDFlMmU2N2Rm' | base64 --decode
 <!-- ## Clean Up -->
 ## 清理    {#clean-up}
 
-<!-- To delete the Secret you have just created: -->
-删除刚刚创建的 Secret：
+<!-- Delete the Secret you created: -->
+删除创建的 Secret：
 
 ```shell
 kubectl delete secret db-user-pass
@@ -208,8 +210,8 @@ kubectl delete secret db-user-pass
 
 <!--
 - Read more about the [Secret concept](/docs/concepts/configuration/secret/)
-- Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
-- Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+- Learn how to [manage Secrets using config files](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- Learn how to [manage Secrets using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 -->
 - 进一步阅读 [Secret 概念](/zh/docs/concepts/configuration/secret/)
 - 了解如何[使用配置文件管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-config-file/)
diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
index d1a17280ed..d3527510eb 100644
--- a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
@@ -125,7 +125,7 @@ kubectl describe secrets/db-user-pass-96mffmfh4k
 输出类似于：
 
 ```
-Name:            db-user-pass
+Name:            db-user-pass-96mffmfh4k
 Namespace:       default
 Labels:          <none>
 Annotations:     <none>
@@ -154,8 +154,8 @@ To check the actual content of the encoded data, please refer to
 <!-- ## Clean Up -->
 ## 清理    {#clean-up}
 
-<!-- To delete the Secret you have just created: -->
-删除你刚才创建的 Secret：
+<!-- To delete the Secret you have created: -->
+删除你创建的 Secret：
 
 ```shell
 kubectl delete secret db-user-pass-96mffmfh4k
diff --git a/content/zh/docs/tasks/inject-data-application/define-environment-variable-container.md b/content/zh/docs/tasks/inject-data-application/define-environment-variable-container.md
index de9f1e8a53..2103b34cf2 100644
--- a/content/zh/docs/tasks/inject-data-application/define-environment-variable-container.md
+++ b/content/zh/docs/tasks/inject-data-application/define-environment-variable-container.md
@@ -39,18 +39,18 @@ that run in the Pod. To set environment variables, include the `env` or
 <!--
 In this exercise, you create a Pod that runs one container. The configuration
 file for the Pod defines an environment variable with name `DEMO_GREETING` and
-value `"Hello from the environment"`. Here is the configuration file for the
+value `"Hello from the environment"`. Here is the configuration manifest for the
 Pod:
 -->
 本示例中，将创建一个只包含单个容器的 Pod。Pod 的配置文件中设置环境变量的名称为 `DEMO_GREETING`，
-其值为 `"Hello from the environment"`。下面是 Pod 的配置文件内容：
+其值为 `"Hello from the environment"`。下面是 Pod 的配置清单：
 
 {{< codenew file="pods/inject/envars.yaml" >}}
 
 <!--
-1. Create a Pod based on the YAML configuration file:
+1. Create a Pod based on that manifest:
 -->
-1. 基于 YAML 文件创建一个 Pod：
+1. 基于配置清单创建一个 Pod：
 
     ```shell
     kubectl apply -f https://k8s.io/examples/pods/inject/envars.yaml
@@ -59,7 +59,7 @@ Pod:
 <!--
 1. List the running Pods:
 -->
-1. 获取一下当前正在运行的 Pods 信息：
+2. 获取一下当前正在运行的 Pods 信息：
 
     ```shell
     kubectl get pods -l purpose=demonstrate-envars
@@ -69,8 +69,8 @@ Pod:
     The output is similar to this:
     -->
     查询结果应为：
-    
-    ```shell
+
+    ```
     NAME            READY     STATUS    RESTARTS   AGE
     envar-demo      1/1       Running   0          9s
     ```
@@ -78,8 +78,8 @@ Pod:
 <!--
 1. List the Pod's container environment variables:
 -->
-1. 列出 Pod 容器的环境变量：
-    
+3. 列出 Pod 容器的环境变量：
+
     ```shell
     kubectl exec envar-demo -- printenv
     ```
@@ -88,8 +88,8 @@ Pod:
     The output is similar to this:
     -->
     打印结果应为：
-    
-    ```shell
+
+    ```
     NODE_VERSION=4.4.2
     EXAMPLE_SERVICE_PORT_8080_TCP_ADDR=10.3.245.237
     HOSTNAME=envar-demo
@@ -101,25 +101,44 @@ Pod:
 <!--
 {{< note >}}
 The environment variables set using the `env` or `envFrom` field
-will override any environment variables specified in the container image.
+override any environment variables specified in the container image.
 {{< /note >}}
 -->
 {{< note >}}
 通过 `env` 或 `envFrom` 字段设置的环境变量将覆盖容器镜像中指定的所有环境变量。
 {{< /note >}}
 
+<!--
 {{< note >}}
-环境变量之间可能出现互相依赖或者循环引用的情况，使用之前需注意引用顺序
+Environment variables may reference each other, however ordering is important.
+Variables making use of others defined in the same context must come later in
+the list. Similarly, avoid circular references.
+{{< /note >}}
+-->
+{{< note >}}
+环境变量可以互相引用，但是顺序很重要。
+使用在相同上下文中定义的其他变量的变量必须在列表的后面。
+同样，请避免使用循环引用。
 {{< /note >}}
 
 <!--
 ## Using environment variables inside of your config
 
-Environment variables that you define in a Pod's configuration can be used elsewhere in the configuration, for example in commands and arguments that you set for the Pod's containers. In the example configuration below, the `GREETING`, `HONORIFIC`, and `NAME` environment variables are set to `Warm greetings to`, `The Most Honorable`, and `Kubernetes`, respectively. Those environment variables are then used in the CLI arguments passed to the `env-print-demo` container.
+Environment variables that you define in a Pod's configuration can be used
+elsewhere in the configuration, for example in commands and arguments that
+you set for the Pod's containers.
+In the example configuration below, the `GREETING`, `HONORIFIC`, and
+`NAME` environment variables are set to `Warm greetings to`, `The Most
+Honorable`, and `Kubernetes`, respectively. Those environment variables
+are then used in the CLI arguments passed to the `env-print-demo`
+container.
 -->
 ## 在配置中使用环境变量
 
-您在 Pod 的配置中定义的环境变量可以在配置的其他地方使用，例如可用在为 Pod 的容器设置的命令和参数中。在下面的示例配置中，环境变量 `GREETING` ，`HONORIFIC` 和 `NAME` 分别设置为 `Warm greetings to` ，`The Most Honorable` 和 `Kubernetes`。然后这些环境变量在传递给容器 `env-print-demo` 的 CLI 参数中使用。
+您在 Pod 的配置中定义的环境变量可以在配置的其他地方使用，
+例如可用在为 Pod 的容器设置的命令和参数中。
+在下面的示例配置中，环境变量 `GREETING` ，`HONORIFIC` 和 `NAME` 分别设置为 `Warm greetings to` ，
+`The Most Honorable` 和 `Kubernetes`。然后这些环境变量在传递给容器 `env-print-demo` 的 CLI 参数中使用。
 
 ```yaml
 apiVersion: v1
diff --git a/content/zh/docs/tasks/manage-daemon/rollback-daemon-set.md b/content/zh/docs/tasks/manage-daemon/rollback-daemon-set.md
index b3efaa83d1..da87cb6015 100644
--- a/content/zh/docs/tasks/manage-daemon/rollback-daemon-set.md
+++ b/content/zh/docs/tasks/manage-daemon/rollback-daemon-set.md
@@ -38,7 +38,7 @@ You should already know how to [perform a rolling update on a
 
 ### Step 1: Find the DaemonSet revision you want to roll back to
 
-You can skip this step if you just want to roll back to the last revision.
+You can skip this step if you only want to roll back to the last revision.
 
 List all revisions of a DaemonSet:
 -->
diff --git a/content/zh/docs/tasks/manage-daemon/update-daemon-set.md b/content/zh/docs/tasks/manage-daemon/update-daemon-set.md
index 15631cf688..1b889c0aa6 100644
--- a/content/zh/docs/tasks/manage-daemon/update-daemon-set.md
+++ b/content/zh/docs/tasks/manage-daemon/update-daemon-set.md
@@ -191,7 +191,7 @@ kubectl edit ds/fluentd-elasticsearch -n kube-system
 <!--
 ##### Updating only the container image
 
-If you just need to update the container image in the DaemonSet template, i.e.
+If you only need to update the container image in the DaemonSet template, i.e.
 `.spec.template.spec.containers[*].image`, use `kubectl set image`:
 --->
 ##### 只更新容器镜像
@@ -295,10 +295,10 @@ DaemonSet rollout won't progress.
 （通常由于拼写错误），就会发生 DaemonSet 滚动更新中断。
 
 <!--
-To fix this, just update the DaemonSet template again. New rollout won't be
+To fix this, update the DaemonSet template again. New rollout won't be
 blocked by previous unhealthy rollouts.
 -->
-要解决此问题，只需再次更新 DaemonSet 模板即可。以前不健康的滚动更新不会阻止新的滚动更新。
+要解决此问题，需再次更新 DaemonSet 模板。新的滚动更新不会被以前的不健康的滚动更新阻止。
 
 <!--
 #### Clock skew
diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/zh/docs/tasks/manage-kubernetes-objects/declarative-config.md
index 2cda8a7ef8..b02e7aab6e 100644
--- a/content/zh/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -26,9 +26,9 @@ preview of what changes `apply` will make.
 ## {{% heading "prerequisites" %}}
 
 <!--
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 -->
-安装 [`kubectl`](/zh/docs/tasks/tools/install-kubectl/)。
+安装 [`kubectl`](/zh/docs/tasks/tools/)。
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
index 4b3c73ebd2..f84ab15b2e 100644
--- a/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
@@ -21,9 +21,9 @@ Kubernetes 对象。本文档解释这些命令的组织方式以及如何使用
 ## {{% heading "prerequisites" %}}
 
 <!--
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 -->
-安装[`kubectl`](/zh/docs/tasks/tools/install-kubectl/)。
+安装[`kubectl`](/zh/docs/tasks/tools/)。
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/imperative-config.md b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-config.md
index 89ac905101..654ea24d64 100644
--- a/content/zh/docs/tasks/manage-kubernetes-objects/imperative-config.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-config.md
@@ -21,9 +21,9 @@ This document explains how to define and manage objects using configuration file
 ## {{% heading "prerequisites" %}}
 
 <!--
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 -->
-安装 [`kubectl`](/zh/docs/tasks/tools/install-kubectl/) 。
+安装 [`kubectl`](/zh/docs/tasks/tools/) 。
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
diff --git a/content/zh/docs/tasks/service-catalog/install-service-catalog-using-helm.md b/content/zh/docs/tasks/service-catalog/install-service-catalog-using-helm.md
index 66f0dd1e1e..a8c6988d83 100644
--- a/content/zh/docs/tasks/service-catalog/install-service-catalog-using-helm.md
+++ b/content/zh/docs/tasks/service-catalog/install-service-catalog-using-helm.md
@@ -27,7 +27,7 @@ Use [Helm](https://helm.sh/) to install Service Catalog on your Kubernetes clust
 * You must have a Kubernetes cluster with cluster DNS enabled.
     * If you are using a cloud-based Kubernetes cluster or {{< glossary_tooltip text="Minikube" term_id="minikube" >}}, you may already have cluster DNS enabled.
     * If you are using `hack/local-up-cluster.sh`, ensure that the `KUBE_ENABLE_CLUSTER_DNS` environment variable is set, then run the install script.
-* [Install and setup kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/) v1.7 or higher. Make sure it is configured to connect to the Kubernetes cluster.
+* [Install and setup kubectl](/docs/tasks/tools/) v1.7 or higher. Make sure it is configured to connect to the Kubernetes cluster.
 * Install [Helm](http://helm.sh/) v2.7.0 or newer.
     * Follow the [Helm install instructions](https://github.com/kubernetes/helm/blob/master/docs/install.md).
     * If you already have an appropriate version of Helm installed, execute `helm init` to install Tiller, the server-side component of Helm.
@@ -37,7 +37,7 @@ Use [Helm](https://helm.sh/) to install Service Catalog on your Kubernetes clust
 * 你必须启用 Kubernetes 集群的 DNS 功能。
     * 如果使用基于云的 Kubernetes 集群或 {{< glossary_tooltip text="Minikube" term_id="minikube" >}}，则可能已经启用了集群 DNS。
     * 如果你正在使用 `hack/local-up-cluster.sh`，请确保设置了 `KUBE_ENABLE_CLUSTER_DNS` 环境变量，然后运行安装脚本。
-* [安装和设置 v1.7 或更高版本的 kubectl](/zh/docs/tasks/tools/install-kubectl/)，确保将其配置为连接到 Kubernetes 集群。
+* [安装和设置 v1.7 或更高版本的 kubectl](/zh/docs/tasks/tools/)，确保将其配置为连接到 Kubernetes 集群。
 * 安装 v2.7.0 或更高版本的 [Helm](https://helm.sh/)。
     * 遵照 [Helm 安装说明](https://helm.sh/docs/intro/install/)。
     * 如果已经安装了适当版本的 Helm，请执行 `helm init` 来安装 Helm 的服务器端组件 Tiller。
@@ -53,7 +53,7 @@ Once Helm is installed, add the *service-catalog* Helm repository to your local
 安装 Helm 后，通过执行以下命令将 *service-catalog* Helm 存储库添加到本地计算机：
 
 ```shell
-helm repo add svc-cat https://svc-catalog-charts.storage.googleapis.com
+helm repo add svc-cat https://kubernetes-sigs.github.io/service-catalog
 ```
 
 <!--
diff --git a/content/zh/docs/tasks/service-catalog/install-service-catalog-using-sc.md b/content/zh/docs/tasks/service-catalog/install-service-catalog-using-sc.md
index f5b8644fe1..4602fc56d8 100644
--- a/content/zh/docs/tasks/service-catalog/install-service-catalog-using-sc.md
+++ b/content/zh/docs/tasks/service-catalog/install-service-catalog-using-sc.md
@@ -16,12 +16,16 @@ content_type: task
 {{< glossary_definition term_id="service-catalog" length="all" prepend="服务目录（Service Catalog）是" >}}
 
 <!--
-Use the [Service Catalog Installer](https://github.com/GoogleCloudPlatform/k8s-service-catalog#installation) tool to easily install or uninstall Service Catalog on your Kubernetes cluster. This CLI tool is installed as `sc` in your local environment.
--->
-使用[服务目录安装程序](https://github.com/GoogleCloudPlatform/k8s-service-catalog#installation)
-工具可以轻松地在 Kubernetes 集群上安装或卸载服务目录。
-这个 CLI 工具以 `sc` 命令形式被安装在您的本地环境中。
+You can use the GCP [Service Catalog Installer](https://github.com/GoogleCloudPlatform/k8s-service-catalog#installation)
+tool to easily install or uninstall Service Catalog on your Kubernetes cluster, linking it to
+Google Cloud projects.
 
+Service Catalog can work with any kind of managed service, not only Google Cloud.
+-->
+使用 GCP [服务目录安装程序](https://github.com/GoogleCloudPlatform/k8s-service-catalog#installation)
+工具可以轻松地在 Kubernetes 集群上安装或卸载服务目录，并将其链接到 Google Cloud 项目。
+
+服务目录不仅可以与 Google Cloud 一起使用，还可以与任何类型的托管服务一起使用。
 
 ## {{% heading "prerequisites" %}}
 
@@ -30,7 +34,7 @@ Use the [Service Catalog Installer](https://github.com/GoogleCloudPlatform/k8s-s
 * Install [Go 1.6+](https://golang.org/dl/) and set the `GOPATH`.
 * Install the [cfssl](https://github.com/cloudflare/cfssl) tool needed for generating SSL artifacts.
 * Service Catalog requires Kubernetes version 1.7+.
-* [Install and setup kubectl](/docs/tasks/tools/install-kubectl/) so that it is configured to connect to a Kubernetes v1.7+ cluster.
+* [Install and setup kubectl](/docs/tasks/tools/) so that it is configured to connect to a Kubernetes v1.7+ cluster.
 * The kubectl user must be bound to the *cluster-admin* role for it to install Service Catalog. To ensure that this is true, run the following command:
 
         kubectl create clusterrolebinding cluster-admin-binding --clusterrole=cluster-admin --user=<user-name>
@@ -40,7 +44,7 @@ Use the [Service Catalog Installer](https://github.com/GoogleCloudPlatform/k8s-s
 * 安装 [Go 1.6+](https://golang.org/dl/) 以及设置 `GOPATH`。
 * 安装生成 SSL 工件所需的 [cfssl](https://github.com/cloudflare/cfssl) 工具。
 * 服务目录需要 Kubernetes 1.7+ 版本。
-* [安装和设置 kubectl](/zh/docs/tasks/tools/install-kubectl/)，
+* [安装和设置 kubectl](/zh/docs/tasks/tools/)，
   以便将其配置为连接到 Kubernetes v1.7+ 集群。
 * 要安装服务目录，kubectl 用户必须绑定到 *cluster-admin* 角色。
   为了确保这是正确的，请运行以下命令：
@@ -53,20 +57,24 @@ Use the [Service Catalog Installer](https://github.com/GoogleCloudPlatform/k8s-s
 <!--
 ## Install `sc` in your local environment
 
-Install the `sc` CLI tool using the `go get` command:
+The installer runs on your local computer as a CLI tool named `sc`.
+
+Install using `go get`:
 -->
 ## 在本地环境中安装 `sc`
 
-使用 `go get` 命令安装 `sc` CLI 工具：
+安装程序在你的本地计算机上以 CLI 工具的形式运行，名为 `sc`。
 
-```Go
+使用 `go get` 安装：
+
+```shell
 go get github.com/GoogleCloudPlatform/k8s-service-catalog/installer/cmd/sc
 ```
 
 <!--
-After running the above command, `sc` should be installed in your `GOPATH/bin` directory.
+`sc` should now be installed in your `GOPATH/bin` directory.
 -->
-执行上述命令后，`sc` 应被安装在 `GOPATH/bin` 目录中了。
+现在，`sc` 应该已经被安装在 `GOPATH/bin` 目录中了。
 
 <!--
 ## Install Service Catalog in your Kubernetes cluster

From df00b046cd5ae0f0e36b6eb55759a1f9f121aefc Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Thu, 13 May 2021 11:25:53 +0800
Subject: [PATCH 750/788] [zh]Resync tasks files[10]

---
 .../coarse-parallel-processing-work-queue.md   | 18 +++++++++---------
 .../job/fine-parallel-processing-work-queue.md | 12 ++++++------
 .../tasks/job/parallel-processing-expansion.md |  9 +++++----
 3 files changed, 20 insertions(+), 19 deletions(-)

diff --git a/content/zh/docs/tasks/job/coarse-parallel-processing-work-queue.md b/content/zh/docs/tasks/job/coarse-parallel-processing-work-queue.md
index 0259283757..33690a938e 100644
--- a/content/zh/docs/tasks/job/coarse-parallel-processing-work-queue.md
+++ b/content/zh/docs/tasks/job/coarse-parallel-processing-work-queue.md
@@ -2,7 +2,7 @@
 title: 使用工作队列进行粗粒度并行处理
 min-kubernetes-server-version: v1.8
 content_type: task
-weight: 30
+weight: 20
 ---
 
 <!--
@@ -10,7 +10,7 @@ weight: 30
 title: Coarse Parallel Processing Using a Work Queue
 min-kubernetes-server-version: v1.8
 content_type: task
-weight: 30
+weight: 20
 ---
 -->
 
@@ -28,7 +28,7 @@ Here is an overview of the steps in this example:
 1. **Start a message queue service.**  In this example, we use RabbitMQ, but you could use another
   one.  In practice you would set up a message queue service once and reuse it for many jobs.
 1. **Create a queue, and fill it with messages.**  Each message represents one task to be done.  In
-  this example, a message is just an integer that we will do a lengthy computation on.
+   this example, a message is an integer that we will do a lengthy computation on.
 1. **Start a Job that works on tasks from the queue**.  The Job starts several pods.  Each pod takes
   one task from the message queue, processes it, and repeats until the end of the queue is reached.
 -->
@@ -63,7 +63,7 @@ non-parallel, use of [Job](/docs/concepts/jobs/run-to-completion-finite-workload
 <!--
 ## Starting a message queue service
 
-This example uses RabbitMQ, but it should be easy to adapt to another AMQP-type message service.
+This example uses RabbitMQ, however, you can adapt the example to use another AMQP-type message service.
 
 In practice you could set up a message queue service once in a
 cluster and reuse it for many jobs, as well as for long-running services.
@@ -72,7 +72,7 @@ Start RabbitMQ as follows:
 -->
 ## 启动消息队列服务
 
-本例使用了 RabbitMQ，使用其他 AMQP 类型的消息服务应该比较容易。
+本例使用了 RabbitMQ，但你可以更改该示例，使用其他 AMQP 类型的消息服务。
 
 在实际工作中，在集群中一次性部署某个消息队列服务，之后在很多 Job 中复用，包括需要长期运行的服务。
 
@@ -225,17 +225,17 @@ root@temp-loe07:/#
 
 <!--
 In the last command, the `amqp-consume` tool takes one message (`-c 1`)
-from the queue, and passes that message to the standard input of an arbitrary command.  In this case, the program `cat` is just printing
-out what it gets on the standard input, and the echo is just to add a carriage
+from the queue, and passes that message to the standard input of an arbitrary command.  In this case, the program `cat` prints out the characters read from standard input, and the echo adds a carriage
 return so the example is readable.
 -->
 
-最后一个命令中， `amqp-consume` 工具从队列中取走了一个消息，并把该消息传递给了随机命令的标准输出。在这种情况下，`cat` 只会打印它从标准输入或得的内容，echo 只会添加回车符以便示例可读。
+最后一个命令中， `amqp-consume` 工具从队列中取走了一个消息，并把该消息传递给了随机命令的标准输出。
+在这种情况下，`cat` 会打印它从标准输入中读取的字符，echo 会添加回车符以便示例可读。
 
 <!--
 ## Filling the Queue with tasks
 
-Now lets fill the queue with some "tasks".  In our example, our tasks are just strings to be
+Now let's fill the queue with some "tasks".  In our example, our tasks are strings to be
 printed.
 
 In a practice, the content of the messages might be:
diff --git a/content/zh/docs/tasks/job/fine-parallel-processing-work-queue.md b/content/zh/docs/tasks/job/fine-parallel-processing-work-queue.md
index ee6f71ea69..fb0c6faf0f 100644
--- a/content/zh/docs/tasks/job/fine-parallel-processing-work-queue.md
+++ b/content/zh/docs/tasks/job/fine-parallel-processing-work-queue.md
@@ -2,12 +2,12 @@
 title: 使用工作队列进行精细的并行处理
 content_type: task
 min-kubernetes-server-version: v1.8
-weight: 40
+weight: 30
 ---
 <!--
 title: Fine Parallel Processing Using a Work Queue
 content_type: task
-weight: 40
+weight: 30
 min-kubernetes-server-version: v1.8
 -->
 
@@ -45,10 +45,10 @@ Here is an overview of the steps in this example:
 
 <!--
 1. **Create a queue, and fill it with messages.**  Each message represents one task to be done.  In
-  this example, a message is just an integer that we will do a lengthy computation on.
+   this example, a message is an integer that we will do a lengthy computation on.
 -->
 2. **创建一个队列，然后向其中填充消息。** 每个消息表示一个将要被处理的工作任务。
-   在这个例子中，消息只是一个我们将用于进行长度计算的整数。
+   在这个例子中，消息是一个我们将用于进行长度计算的整数。
 
 <!--
 1. **Start a Job that works on tasks from the queue**.  The Job starts several pods.  Each pod takes
@@ -97,14 +97,14 @@ You could also download the following files directly:
 <!--
 ## Filling the Queue with tasks
 
-Now let's fill the queue with some "tasks".  In our example, our tasks are just strings to be
+Now let's fill the queue with some "tasks".  In our example, our tasks are strings to be
 printed.
 
 Start a temporary interactive pod for running the Redis CLI.
 -->
 ## 使用任务填充队列
 
-现在，让我们往队列里添加一些“任务”。在这个例子中，我们的任务只是一些将被打印出来的字符串。
+现在，让我们往队列里添加一些“任务”。在这个例子中，我们的任务是一些将被打印出来的字符串。
 
 启动一个临时的可交互的 pod 用于运行 Redis 命令行界面。
 
diff --git a/content/zh/docs/tasks/job/parallel-processing-expansion.md b/content/zh/docs/tasks/job/parallel-processing-expansion.md
index 071fca97cb..7dd67cb239 100644
--- a/content/zh/docs/tasks/job/parallel-processing-expansion.md
+++ b/content/zh/docs/tasks/job/parallel-processing-expansion.md
@@ -2,13 +2,13 @@
 title: 使用展开的方式进行并行处理
 content_type: task
 min-kubernetes-server-version: v1.8
-weight: 20
+weight: 50
 ---
 <!--
 title: Parallel Processing using Expansions
 content_type: task
 min-kubernetes-server-version: v1.8
-weight: 20
+weight: 50
 -->
 
 <!-- overview -->
@@ -19,7 +19,7 @@ based on a common template. You can use this approach to process batches of work
 parallel.
 
 For this example there are only three items: _apple_, _banana_, and _cherry_.
-The sample Jobs process each item simply by printing a string then pausing.
+The sample Jobs process each item by printing a string then pausing.
 
 See [using Jobs in real workloads](#using-jobs-in-real-workloads) to learn about how
 this pattern fits more realistic use cases.
@@ -29,7 +29,8 @@ this pattern fits more realistic use cases.
 你可以用这种方法来并行执行批处理任务。
 
 在本任务示例中，只有三个工作条目：_apple_、_banana_ 和 _cherry_。
-示例任务处理每个条目时仅仅是打印一个字符串之后结束。
+示例任务处理每个条目时打印一个字符串之后结束。
+
 参考[在真实负载中使用 Job](#using-jobs-in-real-workloads)了解更适用于真实使用场景的模式。
 
 ## {{% heading "prerequisites" %}}

From 4795d7fe35e39dbeb8b62245f61c3760417a479e Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Thu, 13 May 2021 15:21:10 +0800
Subject: [PATCH 751/788] [zh]Resync tasks files[9]

---
 .../access-cluster.md                         |  19 +-
 ...port-forward-access-application-cluster.md | 178 ++++++++++--------
 2 files changed, 110 insertions(+), 87 deletions(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/access-cluster.md b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
index be848efce8..52099d3a2a 100644
--- a/content/zh/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
@@ -381,7 +381,7 @@ You have several options for connecting to nodes, pods and services from outside
     - Use a service with type `NodePort` or `LoadBalancer` to make the service reachable outside
       the cluster.  See the [services](/docs/user-guide/services) and
       [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) documentation.
-    - Depending on your cluster environment, this may just expose the service to your corporate network,
+    - Depending on your cluster environment, this may only expose the service to your corporate network,
       or it may expose it to the internet.  Think about whether the service being exposed is secure.
       Does it do its own authentication?
     - Place pods behind services.  To access one specific pod from a set of replicas, such as for debugging,
@@ -482,10 +482,10 @@ at `https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-l
 <!--
 #### Manually constructing apiserver proxy URLs
 
-As mentioned above, you use the `kubectl cluster-info` command to retrieve the service's proxy URL. To create proxy URLs that include service endpoints, suffixes, and parameters, you simply append to the service's proxy URL:
+As mentioned above, you use the `kubectl cluster-info` command to retrieve the service's proxy URL. To create proxy URLs that include service endpoints, suffixes, and parameters, you append to the service's proxy URL:
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`service_name[:port_name]`*`/proxy`
 
-If you haven't specified a name for your port, you don't have to specify *port_name* in the URL.
+If you haven't specified a name for your port, you don't have to specify *port_name* in the URL. You can also use the port number in place of the *port_name* for both named and unnamed ports.
 
 By default, the API server proxies to your service using http. To use https, prefix the service name with `https:`:
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`https:service_name:[port_name]`*`/proxy`
@@ -493,17 +493,18 @@ By default, the API server proxies to your service using http. To use https, pre
 The supported formats for the name segment of the URL are:
 
 * `<service_name>` - proxies to the default or unnamed port using http
-* `<service_name>:<port_name>` - proxies to the specified port using http
+* `<service_name>:<port_name>` - proxies to the specified port name or port number using http
 * `https:<service_name>:` - proxies to the default or unnamed port using https (note the trailing colon)
-* `https:<service_name>:<port_name>` - proxies to the specified port using https
+* `https:<service_name>:<port_name>` - proxies to the specified port name or port number using https
 -->
 #### 手动构建 apiserver 代理 URL {#manually-constructing-apiserver-proxy-urls}
 
 如上所述，你可以使用 `kubectl cluster-info` 命令来获得服务的代理 URL。
-要创建包含服务端点、后缀和参数的代理 URL，只需添加到服务的代理 URL：
+要创建包含服务端点、后缀和参数的代理 URL，需添加到服务的代理 URL：
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`service_name[:port_name]`*`/proxy`
 
 如果尚未为端口指定名称，则不必在 URL 中指定 *port_name*。
+对于已命名和未命名的端口，也可以使用端口号代替 *port_name*。
 
 默认情况下，API server 使用 HTTP 代理你的服务。
 要使用 HTTPS，请在服务名称前加上 `https:`：
@@ -512,9 +513,9 @@ The supported formats for the name segment of the URL are:
 URL 名称段支持的格式为：
 
 * `<service_name>` - 使用 http 代理到默认或未命名的端口
-* `<service_name>:<port_name>` - 使用 http 代理到指定的端口
+* `<service_name>:<port_name>` - 使用 http 代理到指定的端口名称或端口号
 * `https:<service_name>:` - 使用 https 代理到默认或未命名的端口（注意后面的冒号）
-* `https:<service_name>:<port_name>` - 使用 https 代理到指定的端口
+* `https:<service_name>:<port_name>` - 使用 https 代理到指定的端口名称或端口号
 
 <!--
 ##### Examples
@@ -628,7 +629,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - proxies UDP and TCP
     - does not understand HTTP
     - provides load balancing
-    - is just used to reach services
+    - is only used to reach services
 -->
 3. [kube proxy](/zh/docs/concepts/services-networking/service/#ips-and-vips)：
 
diff --git a/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md b/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
index 4219ca4f20..d52d2e5233 100644
--- a/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
@@ -12,35 +12,35 @@ weight: 40
 
 <!-- overview -->
 <!--
-This page shows how to use `kubectl port-forward` to connect to a Redis
+This page shows how to use `kubectl port-forward` to connect to a MongoDB
 server running in a Kubernetes cluster. This type of connection can be useful
 for database debugging.
 -->
 本文展示如何使用 `kubectl port-forward` 连接到在 Kubernetes 集群中
-运行的 Redis 服务。这种类型的连接对数据库调试很有用。
+运行的 MongoDB 服务。这种类型的连接对数据库调试很有用。
 
 ## {{% heading "prerequisites" %}}
 
 * {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 <!--
-* Install [redis-cli](http://redis.io/topics/rediscli).
+* Install [MongoDB Shell](https://www.mongodb.com/try/download/shell).
 -->
-* 安装 [redis-cli](http://redis.io/topics/rediscli)。
+* 安装 [MongoDB Shell](https://www.mongodb.com/try/download/shell)。
 
 <!-- steps -->
 
 <!--
-## Creating Redis deployment and service
+## Creating MongoDB deployment and service
 
-1. Create a Redis deployment:
+1. Create a Deployment that runs MongoDB:
 -->
-## 创建 Redis deployment 和服务
+## 创建 MongoDB deployment 和服务
 
-1. 创建一个 Redis deployment：
+1. 创建一个运行 MongoDB 的 deployment：
 
    ```shell
-   kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-deployment.yaml
+   kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-deployment.yaml
    ```
 
    <!--
@@ -49,7 +49,7 @@ for database debugging.
    查看输出是否成功，以验证是否成功创建 deployment：
 
    ```
-   deployment.apps/redis-master created
+   deployment.apps/mongo created
    ```
 
    <!--
@@ -67,144 +67,154 @@ for database debugging.
    输出显示创建的 pod：
 
    ```
-   NAME                            READY     STATUS    RESTARTS   AGE
-   redis-master-765d459796-258hz   1/1       Running   0          50s
+   NAME                     READY   STATUS    RESTARTS   AGE
+   mongo-75f59d57f4-4nd6q   1/1     Running   0          2m4s
    ```
 
    <!--
-   View the deployment status:
+   View the Deployment's status:
    -->
-   查看 deployment 状态：
+   查看 Deployment 状态：
 
    ```shell
    kubectl get deployment
    ```
 
    <!--
-   The output displays that the deployment was created:
+   The output displays that the Deployment was created:
    -->
-   输出显示创建的 deployment：
+   输出显示创建的 Deployment：
 
    ```
-   NAME         DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
-   redis-master 1         1         1            1           55s
+   NAME    READY   UP-TO-DATE   AVAILABLE   AGE
+   mongo   1/1     1            1           2m21s
    ```
 
    <!--
-   View the replicaset status using:
+   The Deployment automatically manages a ReplicaSet.
+   View the ReplicaSet status using:
    -->
-   查看 replicaset 状态：
+   Deployment 自动管理 ReplicaSet。
+   查看 ReplicaSet 状态：
 
    ```shell
-   kubectl get rs
+   kubectl get replicaset
    ```
 
    <!--
-   The output displays that the replicaset was created:
+   The output displays that the ReplicaSet was created:
    -->
-   输出显示创建的 replicaset：
+   输出显示创建的 ReplicaSet：
 
    ```
-   NAME                      DESIRED   CURRENT   READY     AGE
-   redis-master-765d459796   1         1         1         1m
+   NAME               DESIRED   CURRENT   READY   AGE
+   mongo-75f59d57f4   1         1         1       3m12s
    ```
 
 <!--
-2. Create a Redis service:
+2. Create a Service to expose MongoDB on the network:
 -->
-2. 创建一个 Redis 服务：
+2. 创建一个在网络上公开的 MongoDB 服务：
 
    ```shell
-   kubectl apply -f https://k8s.io/examples/application/guestbook/redis-master-service.yaml
+   kubectl apply -f https://k8s.io/examples/application/guestbook/mongo-service.yaml
    ```
 
    <!--
-   The output of a successful command verifies that the service was created:
+   The output of a successful command verifies that the Service was created:
    -->
-   查看输出是否成功，以验证是否成功创建 service：
+   查看输出是否成功，以验证是否成功创建 Service：
 
    ```
-   service/redis-master created
+   service/mongo created
    ```
 
    <!--
-   Check the service created:
+   Check the Service created:
    -->
-   检查 service 是否创建：
+   检查 Service 是否创建：
 
    ```shell
-   kubectl get svc | grep redis
+   kubectl get service mongo
    ```
 
    <!--   
    The output displays the service created:
    -->
-   输出显示创建的 service：
+   输出显示创建的 Service：
 
    ```
-   NAME           TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
-   redis-master   ClusterIP   10.0.0.213   <none>        6379/TCP   27s
+   NAME    TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)     AGE
+   mongo   ClusterIP   10.96.41.183   <none>        27017/TCP   11s
    ```
 
 <!--
-3. Verify that the Redis server is running in the pod and listening on port 6379:
+3. Verify that the MongoDB server is running in the Pod, and listening on port 27017:
 -->
-3. 验证 Redis 服务是否运行在 pod 中并且监听 6379 端口：
+3. 验证 MongoDB 服务是否运行在 Pod 中并且监听 27017 端口：
 
    ```shell
-   kubectl get pods redis-master-765d459796-258hz \
-     --template='{{(index (index .spec.containers 0).ports 0).containerPort}}{{"\n"}}'
+   # Change mongo-75f59d57f4-4nd6q to the name of the Pod
+   kubectl get pod mongo-75f59d57f4-4nd6q --template='{{(index (index .spec.containers 0).ports 0).containerPort}}{{"\n"}}'
    ```
+
    <!--
-   The output displays the port:
+   The output displays the port for MongoDB in that Pod:
    -->
-   输出应该显示端口：
+   输出应该显示 Pod 中 MongoDB 的端口：
 
    ```
-   6379
+   27017
    ```
 
+   <!--
+   (this is the TCP port allocated to MongoDB on the internet).
+   -->
+   （这是 Internet 分配给 MongoDB 的 TCP 端口）。
+
 <!--
-## Forward a local port to a port on the pod
+## Forward a local port to a port on the Pod
 
-1. `kubectl port-forward` allows using resource name, such as a pod name, to select a matching pod to port forward to since Kubernetes v1.10.
+1.  `kubectl port-forward` allows using resource name, such as a pod name, to select a matching pod to port forward to.
 -->
-## 转发一个本地端口到 pod 端口
+## 转发一个本地端口到 Pod 端口
 
-1. 从 Kubernetes v1.10 开始，`kubectl port-forward` 允许使用资源名称
+1. `kubectl port-forward` 允许使用资源名称
    （例如 pod 名称）来选择匹配的 pod 来进行端口转发。
 
    ```shell
-   kubectl port-forward redis-master-765d459796-258hz 7000:6379 
+   # Change mongo-75f59d57f4-4nd6q to the name of the Pod
+   kubectl port-forward mongo-75f59d57f4-4nd6q 28015:27017
    ```
+
    <!--
    which is the same as
    -->
    这相当于
 
    ```shell
-   kubectl port-forward pods/redis-master-765d459796-258hz 7000:6379
+   kubectl port-forward pods/mongo-75f59d57f4-4nd6q 28015:27017
    ```
 
    <!-- or -->
    或者
 
    ```shell
-   kubectl port-forward deployment/redis-master 7000:6379 
+   kubectl port-forward deployment/mongo 28015:27017
    ```
 
    <!-- or -->
    或者
 
    ```shell
-   kubectl port-forward rs/redis-master 7000:6379
+   kubectl port-forward replicaset/mongo-75f59d57f4 28015:27017
    ```
 
    <!-- or -->
    或者
 
-   ```
-   kubectl port-forward svc/redis-master 7000:redis
+   ```shell
+   kubectl port-forward service/mongo 28015:27017
    ```
 
    <!--
@@ -213,9 +223,9 @@ for database debugging.
    以上所有命令都应该有效。输出应该类似于：
 
    ```
-   Forwarding from 127.0.0.1:7000 -> 6379
-   Forwarding from [::1]:7000 -> 6379  
-   ```
+   Forwarding from 127.0.0.1:28015 -> 27017
+   Forwarding from [::1]:28015 -> 27017
+    ```
 <!--
 {{< note >}}
 
@@ -231,21 +241,21 @@ for database debugging.
 
 
 <!--
-2. Start the Redis command line interface:
+2.  Start the MongoDB command line interface:
 -->
-2. 启动 Redis 命令行接口：
+2.  启动 MongoDB 命令行接口：
 
    ```shell
-   redis-cli -p 7000
+   mongosh --port 28015
    ```
 
 <!--
-3.  At the Redis command line prompt, enter the `ping` command:
+3.  At the MongoDB command line prompt, enter the `ping` command:
 -->
-3. 在 Redis 命令行提示符下，输入 `ping` 命令：
+3. 在 MongoDB 命令行提示符下，输入 `ping` 命令：
 
    ```
-   ping
+   db.runCommand( { ping: 1 } )
    ```
 
    <!--
@@ -254,8 +264,9 @@ for database debugging.
    成功的 ping 请求应该返回：
 
    ```
-   PONG
+   { ok: 1 }
    ```
+
 <!--
 ### Optionally let _kubectl_ choose the local port {#let-kubectl-choose-local-port}
 -->
@@ -270,43 +281,54 @@ the slightly simpler syntax:
 以便你不需要管理本地端口冲突。该命令使用稍微不同的语法：
 
 ```shell
-kubectl port-forward deployment/redis-master :6379
+kubectl port-forward deployment/mongo :27017
 ```
+
+<!--
+The output is similar to this:
+-->
+输出应该类似于：
+
+```
+Forwarding from 127.0.0.1:63753 -> 27017
+Forwarding from [::1]:63753 -> 27017
+```
+
 <!--
 The `kubectl` tool finds a local port number that is not in use (avoiding low ports numbers,
 because these might be used by other applications). The output is similar to:
 -->
-`kubectl` 工具会找到一个未被使用的本地端口号（避免使用低段位的端口号，因为他们可能会被其他应用程序使用）。输出应该类似于：
+`kubectl` 工具会找到一个未被使用的本地端口号（避免使用低段位的端口号，因为他们可能会被其他应用程序使用）。
+输出应该类似于：
 
 ```
-Forwarding from 127.0.0.1:62162 -> 6379
-Forwarding from [::1]:62162 -> 6379
+Forwarding from 127.0.0.1:63753 -> 27017
+Forwarding from [::1]:63753 -> 27017
 ```
 
-
 <!-- discussion -->
 
 <!--
 ## Discussion
 
-Connections made to local port 7000 are forwarded to port 6379 of the pod that
-is running the Redis server. With this connection in place you can use your
-local workstation to debug the database that is running in the pod.
+Connections made to local port 28015 are forwarded to port 27017 of the Pod that
+is running the MongoDB server. With this connection in place, you can use your
+local workstation to debug the database that is running in the Pod.
 -->
 ## 讨论  {#discussion}
 
-与本地 7000 端口建立的连接将转发到运行 Redis 服务器的 pod 的 6379 端口。
-通过此连接，您可以使用本地工作站来调试在 pod 中运行的数据库。
+与本地 28015 端口建立的连接将转发到运行 MongoDB 服务器的 Pod 的 27017 端口。
+通过此连接，您可以使用本地工作站来调试在 Pod 中运行的数据库。
 
 <!--
-Due to known limitations, port forward today only works for TCP protocol.
-The support to UDP protocol is being tracked in
+`kubectl port-forward` is implemented for TCP ports only.
+The support for UDP protocol is tracked in
 [issue 47862](https://github.com/kubernetes/kubernetes/issues/47862).
 -->
 {{< warning >}}
-由于已知的限制，目前的端口转发仅适用于 TCP 协议。
+`kubectl port-forward` 仅适用于 TCP 端口。
 在 [issue 47862](https://github.com/kubernetes/kubernetes/issues/47862)
-中正在跟踪对 UDP 协议的支持。
+中跟踪了对 UDP 协议的支持。
 {{< /warning >}}
 
 ## {{% heading "whatsnext" %}}

From dcd2dd485288693057dacaf813458c6a0cb6a8ba Mon Sep 17 00:00:00 2001
From: Tim Allclair <timallclair@gmail.com>
Date: Fri, 14 May 2021 11:19:59 -0700
Subject: [PATCH 752/788] Update SELinux standards (#27653)

* Update SELinux standards

* address feedback
---
 .../security/pod-security-standards.md        | 26 ++++++++++++++-----
 1 file changed, 19 insertions(+), 7 deletions(-)

diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md
index a3c9ee138e..32635d6747 100644
--- a/content/en/docs/concepts/security/pod-security-standards.md
+++ b/content/en/docs/concepts/security/pod-security-standards.md
@@ -113,7 +113,7 @@ enforced/disallowed:
 			</td>
 		</tr>
 		<tr>
-			<td>AppArmor <em>(optional)</em></td>
+			<td>AppArmor</td>
 			<td>
 				On supported hosts, the 'runtime/default' AppArmor profile is applied by default.
 				The baseline policy should prevent overriding or disabling the default AppArmor
@@ -124,14 +124,26 @@ enforced/disallowed:
 			</td>
 		</tr>
 		<tr>
-			<td>SELinux <em>(optional)</em></td>
+			<td>SELinux</td>
 			<td>
-				Setting custom SELinux options should be disallowed.<br>
+				Setting the SELinux type is restricted, and setting a custom SELinux user or role option is forbidden.<br>
 				<br><b>Restricted Fields:</b><br>
-				spec.securityContext.seLinuxOptions<br>
-				spec.containers[*].securityContext.seLinuxOptions<br>
-				spec.initContainers[*].securityContext.seLinuxOptions<br>
-				<br><b>Allowed Values:</b> undefined/nil<br>
+				spec.securityContext.seLinuxOptions.type<br>
+				spec.containers[*].securityContext.seLinuxOptions.type<br>
+				spec.initContainers[*].securityContext.seLinuxOptions.type<br>
+				<br><b>Allowed Values:</b><br>
+				undefined/empty<br>
+				container_t<br>
+				container_init_t<br>
+				container_kvm_t<br>
+				<br><b>Restricted Fields:</b><br>
+				spec.securityContext.seLinuxOptions.user<br>
+				spec.containers[*].securityContext.seLinuxOptions.user<br>
+				spec.initContainers[*].securityContext.seLinuxOptions.user<br>
+				spec.securityContext.seLinuxOptions.role<br>
+				spec.containers[*].securityContext.seLinuxOptions.role<br>
+				spec.initContainers[*].securityContext.seLinuxOptions.role<br>
+				<br><b>Allowed Values:</b> undefined/empty<br>
 			</td>
 		</tr>
 		<tr>

From 0885df43c5ff918096bea861533921e57a30fdfb Mon Sep 17 00:00:00 2001
From: computerphilosopher <erlk0nig@naver.com>
Date: Sat, 15 May 2021 12:24:09 +0900
Subject: [PATCH 753/788] Fix typo of korean docs

---
 content/ko/docs/concepts/cluster-administration/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ko/docs/concepts/cluster-administration/_index.md b/content/ko/docs/concepts/cluster-administration/_index.md
index 9870704596..f5363a45c2 100755
--- a/content/ko/docs/concepts/cluster-administration/_index.md
+++ b/content/ko/docs/concepts/cluster-administration/_index.md
@@ -45,7 +45,7 @@ no_list: true
 
 ## 클러스터 보안
 
-* [인증서 생성](/ko/docs/tasks/administer-cluster/certificates/)는 다른 툴 체인을 사용하여 인증서를 생성하는 단계를 설명한다.
+* [인증서 생성](/ko/docs/tasks/administer-cluster/certificates/)은 다른 툴 체인을 사용하여 인증서를 생성하는 단계를 설명한다.
 
 * [쿠버네티스 컨테이너 환경](/ko/docs/concepts/containers/container-environment/)은 쿠버네티스 노드에서 Kubelet으로 관리하는 컨테이너에 대한 환경을 설명한다.
 

From 4bb87375681fda1d9d2f655365fcfd0be3694cd0 Mon Sep 17 00:00:00 2001
From: donghui <977675308@qq.com>
Date: Sun, 16 May 2021 00:53:25 +0800
Subject: [PATCH 754/788] [zh] Update anchor link

---
 content/zh/docs/concepts/storage/storage-classes.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/storage/storage-classes.md b/content/zh/docs/concepts/storage/storage-classes.md
index 24d38d14a5..addf5deee9 100644
--- a/content/zh/docs/concepts/storage/storage-classes.md
+++ b/content/zh/docs/concepts/storage/storage-classes.md
@@ -109,8 +109,8 @@ for provisioning PVs. This field must be specified.
 | 卷插件               | 内置制备器 |               配置例子                |
 |:---------------------|:----------:|:-------------------------------------:|
 | AWSElasticBlockStore |  &#x2713;  |          [AWS EBS](#aws-ebs)          |
-| AzureFile            |  &#x2713;  |       [Azure File](#azure-file)       |
-| AzureDisk            |  &#x2713;  |       [Azure Disk](#azure-disk)       |
+| AzureFile            |  &#x2713;  |       [Azure File](#azure-文件)       |
+| AzureDisk            |  &#x2713;  |       [Azure Disk](#azure-磁盘)       |
 | CephFS               |     -      |                   -                   |
 | Cinder               |  &#x2713;  | [OpenStack Cinder](#openstack-cinder) |
 | FC                   |     -      |                   -                   |
@@ -123,10 +123,10 @@ for provisioning PVs. This field must be specified.
 | NFS                  |     -      |                   -                   |
 | RBD                  |  &#x2713;  |         [Ceph RBD](#ceph-rbd)         |
 | VsphereVolume        |  &#x2713;  |          [vSphere](#vsphere)          |
-| PortworxVolume       |  &#x2713;  |  [Portworx Volume](#portworx-volume)  |
+| PortworxVolume       |  &#x2713;  |  [Portworx Volume](#portworx-卷)  |
 | ScaleIO              |  &#x2713;  |          [ScaleIO](#scaleio)          |
 | StorageOS            |  &#x2713;  |        [StorageOS](#storageos)        |
-| Local                |     -      |            [Local](#local)            |
+| Local                |     -      |            [Local](#本地)            |
 
 <!--
 You are not restricted to specifying the "internal" provisioners

From 1753d09792459b92014bd79323a3b104c56b0640 Mon Sep 17 00:00:00 2001
From: Zulai Wang <wangzl31@outlook.com>
Date: Sun, 16 May 2021 15:15:29 +0800
Subject: [PATCH 755/788] Fix typo in secret.md

---
 content/en/docs/concepts/configuration/secret.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 111a405a7a..40f76c18b8 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -328,7 +328,7 @@ kubectl create secret tls my-tls-secret \
   --key=path/to/key/file
 ```
 
-The public/private key pair must exist before hand. The public key certificate
+The public/private key pair must exist beforehand. The public key certificate
 for `--cert` must be .PEM encoded (Base64-encoded DER format), and match the
 given private key for `--key`.
 The private key must be in what is commonly called PEM private key format,

From d4146d2384a2bf887dd2c7e29460b4b7af8da618 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Mon, 17 May 2021 01:15:55 +0300
Subject: [PATCH 756/788] [ja] Add a missing feature gate entry

---
 .../docs/reference/command-line-tools-reference/feature-gates.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/ja/docs/reference/command-line-tools-reference/feature-gates.md b/content/ja/docs/reference/command-line-tools-reference/feature-gates.md
index 11334045fc..01a2c289e9 100644
--- a/content/ja/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ja/docs/reference/command-line-tools-reference/feature-gates.md
@@ -203,6 +203,7 @@ content_type: concept
 | `DynamicProvisioningScheduling` | - | Deprecated| 1.12 | - |
 | `DynamicVolumeProvisioning` | `true` | Alpha | 1.3 | 1.7 |
 | `DynamicVolumeProvisioning` | `true` | GA | 1.8 | - |
+| `EnableAggregatedDiscoveryTimeout` | `true` | Deprecated | 1.16 | - |
 | `EnableEquivalenceClassCache` | `false` | Alpha | 1.8 | 1.14 |
 | `EnableEquivalenceClassCache` | - | Deprecated | 1.15 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | Alpha | 1.5 | 1.12 |

From 11e20bc617042bdf239e5fa4705d29078ea66aa8 Mon Sep 17 00:00:00 2001
From: hzliangbin <hzliangbin@foxmail.com>
Date: Mon, 17 May 2021 17:44:07 +0800
Subject: [PATCH 757/788] update link to Flannel

---
 content/en/docs/concepts/cluster-administration/addons.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/cluster-administration/addons.md b/content/en/docs/concepts/cluster-administration/addons.md
index 726a714151..5ed93ad20b 100644
--- a/content/en/docs/concepts/cluster-administration/addons.md
+++ b/content/en/docs/concepts/cluster-administration/addons.md
@@ -23,7 +23,7 @@ This page lists some of the available add-ons and links to their respective inst
 * [CNI-Genie](https://github.com/Huawei-PaaS/CNI-Genie) enables Kubernetes to seamlessly connect to a choice of CNI plugins, such as Calico, Canal, Flannel, Romana, or Weave.
 * [Contiv](https://contiv.github.io) provides configurable networking (native L3 using BGP, overlay using vxlan, classic L2, and Cisco-SDN/ACI) for various use cases and a rich policy framework. Contiv project is fully [open sourced](https://github.com/contiv). The [installer](https://github.com/contiv/install) provides both kubeadm and non-kubeadm based installation options.
 * [Contrail](https://www.juniper.net/us/en/products-services/sdn/contrail/contrail-networking/), based on [Tungsten Fabric](https://tungsten.io), is an open source, multi-cloud network virtualization and policy management platform. Contrail and Tungsten Fabric are integrated with orchestration systems such as Kubernetes, OpenShift, OpenStack and Mesos, and provide isolation modes for virtual machines, containers/pods and bare metal workloads.
-* [Flannel](https://github.com/coreos/flannel/blob/master/Documentation/kubernetes.md) is an overlay network provider that can be used with Kubernetes.
+* [Flannel](https://github.com/flannel-io/flannel#deploying-flannel-manually) is an overlay network provider that can be used with Kubernetes.
 * [Knitter](https://github.com/ZTE/Knitter/) is a plugin to support multiple network interfaces in a Kubernetes pod.
 * [Multus](https://github.com/Intel-Corp/multus-cni) is a Multi plugin for multiple network support in Kubernetes to support all CNI plugins (e.g. Calico, Cilium, Contiv, Flannel), in addition to SRIOV, DPDK, OVS-DPDK and VPP based workloads in Kubernetes.
 * [OVN-Kubernetes](https://github.com/ovn-org/ovn-kubernetes/) is a networking provider for Kubernetes based on [OVN (Open Virtual Network)](https://github.com/ovn-org/ovn/), a virtual networking implementation that came out of the Open vSwitch (OVS) project. OVN-Kubernetes provides an overlay based networking implementation for Kubernetes, including an OVS based implementation of load balancing and network policy.

From 415468a1a3e6d5bb819b7c5e6b889055480f7495 Mon Sep 17 00:00:00 2001
From: Christopher Negus <striker57@gmail.com>
Date: Mon, 17 May 2021 14:25:45 +0000
Subject: [PATCH 758/788] Added links to etcd content

---
 content/en/docs/setup/best-practices/cluster-large.md | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/setup/best-practices/cluster-large.md b/content/en/docs/setup/best-practices/cluster-large.md
index a75499a811..81b6404f37 100644
--- a/content/en/docs/setup/best-practices/cluster-large.md
+++ b/content/en/docs/setup/best-practices/cluster-large.md
@@ -24,7 +24,7 @@ on how your cluster is deployed.
 
 To avoid running into cloud provider quota issues, when creating a cluster with many nodes,
 consider:
-* Request a quota increase for cloud resources such as:
+* Requesting a quota increase for cloud resources such as:
     * Computer instances
     * CPUs
     * Storage volumes
@@ -33,7 +33,7 @@ consider:
     * Number of load balancers
     * Network subnets
     * Log streams
-* Gate the cluster scaling actions to brings up new nodes in batches, with a pause
+* Gating the cluster scaling actions to bring up new nodes in batches, with a pause
   between batches, because some cloud providers rate limit the creation of new instances.
 
 ## Control plane components
@@ -66,6 +66,10 @@ When creating a cluster, you can (using custom tooling):
 * start and configure additional etcd instance
 * configure the {{< glossary_tooltip term_id="kube-apiserver" text="API server" >}} to use it for storing events
 
+See [Operating etcd clusters for Kubernetes](https://kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/) and
+[Set up a High Availability etcd cluster with kubeadm](docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/)
+for details on configuring and managing etcd for a large cluster.
+
 ## Addon resources
 
 Kubernetes [resource limits](/docs/concepts/configuration/manage-resources-containers/)

From 39e22bec23533c94cd71c022f5f4d14db8f690c7 Mon Sep 17 00:00:00 2001
From: Peri Thompson <perit@vmware.com>
Date: Fri, 9 Apr 2021 10:51:44 +0000
Subject: [PATCH 759/788] Added Windows Containerd GMSA Updates

---
 .../windows/intro-windows-in-kubernetes.md    |  9 --
 .../configure-pod-container/configure-gmsa.md | 89 +++++++++++++++----
 2 files changed, 71 insertions(+), 27 deletions(-)

diff --git a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
index 813ff54b5b..587b34b58f 100644
--- a/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
+++ b/content/en/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -188,15 +188,6 @@ also be used as the container runtime for Windows Kubernetes nodes.
 Learn how to
 [install ContainerD on a Windows](/docs/setup/production-environment/container-runtimes/#install-containerd).
 
-{{< caution >}}
-There is a [known limitation](/docs/tasks/configure-pod-container/configure-gmsa/#gmsa-limitations)
-when using GMSA with ContainerD to access Windows network shares which
-requires a kernel patch. Updates to address this limitation are currently
-available for Windows Server, Version 2004 and will be available for Windows
-Server 2019 in early 2021. Check for updates on the
-[Microsoft Windows Containers issue tracker](https://github.com/microsoft/Windows-Containers/issues/44).
-{{< /caution >}}
-
 #### Persistent Storage
 
 Kubernetes [volumes](/docs/concepts/storage/volumes/) enable complex
diff --git a/content/en/docs/tasks/configure-pod-container/configure-gmsa.md b/content/en/docs/tasks/configure-pod-container/configure-gmsa.md
index 360deada02..0073feea24 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-gmsa.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-gmsa.md
@@ -197,21 +197,70 @@ As Pod specs with GMSA fields populated (as described above) are applied in a cl
 
 1. The container runtime configures each Windows container with the specified GMSA credential spec so that the container can assume the identity of the GMSA in Active Directory and access services in the domain using that identity.
 
+## Containerd 
+
+On Windows Server 2019, in order to use GMSA with containerd, you must be running OS Build 17763.1817 (or later) which can be installed using the patch [KB5000822](https://support.microsoft.com/en-us/topic/march-9-2021-kb5000822-os-build-17763-1817-2eb6197f-e3b1-4f42-ab51-84345e063564). 
+
+There is also a known issue with containerd that occurs when trying to connect to SMB shares from Pods. Once you have configured GMSA, the pod will be unable to connect to the share using the hostname or FQDN, but connecting to the share using an IP address works as expected. 
+
+```PowerShell
+ping adserver.ad.local
+```
+and correctly resolves the hostname to an IPv4 address. The output is similar to:
+
+```
+Pinging adserver.ad.local [192.168.111.18] with 32 bytes of data:
+Reply from 192.168.111.18: bytes=32 time=6ms TTL=124
+Reply from 192.168.111.18: bytes=32 time=5ms TTL=124
+Reply from 192.168.111.18: bytes=32 time=5ms TTL=124
+Reply from 192.168.111.18: bytes=32 time=5ms TTL=124
+```
+
+However, when attempting to browse the directory using the hostname
+
+```PowerShell
+cd \\adserver.ad.local\test
+```
+
+you see an error that implies the target share doesn't exist:
+
+```
+cd : Cannot find path '\\adserver.ad.local\test' because it does not exist.
+At line:1 char:1
++ cd \\adserver.ad.local\test
++ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+    + CategoryInfo          : ObjectNotFound: (\\adserver.ad.local\test:String) [Set-Location], ItemNotFoundException
+    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.SetLocationCommand
+```
+
+but you notice that the error disappears if you browse to the share using its IPv4 address instead; for example:
+
+```PowerShell
+cd \\192.168.111.18\test
+```
+
+After you change into a directory within the share, you see a prompt similar to:
+
+```
+Microsoft.PowerShell.Core\FileSystem::\\192.168.111.18\test>
+```
+
+To correct the behaviour you must run the following on the node `reg add "HKLM\SYSTEM\CurrentControlSet\Services\hns\State" /v EnableCompartmentNamespace /t REG_DWORD /d 1` to add the required registry key. This node change will only take effect in newly created pods, meaning you must now recreate any running pods which require access to SMB shares.
+
 ## Troubleshooting
 
 If you are having difficulties getting GMSA to work in your environment, there are a few troubleshooting steps you can take.
 
-First, make sure the credspec has been passed to the Pod.  To do this you will need to `exec` into one of your Pods and check the output of the `nltest.exe /parentdomain` command.  In the example below the Pod did not get the credspec correctly:
+First, make sure the credspec has been passed to the Pod.  To do this you will need to `exec` into one of your Pods and check the output of the `nltest.exe /parentdomain` command.  
 
-```shell
+In the example below the Pod did not get the credspec correctly:
+
+```PowerShell
 kubectl exec -it iis-auth-7776966999-n5nzr powershell.exe
-
-Windows PowerShell
-Copyright (C) Microsoft Corporation. All rights reserved.
-
-PS C:\> nltest.exe /parentdomain
+```
+nltest.exe /parentdomain` results in the following error:
+```
 Getting parent domain failed: Status = 1722 0x6ba RPC_S_SERVER_UNAVAILABLE
-PS C:\>
 ```
 
 If your Pod did get the credspec correctly, then next check communication with the domain.  First, from inside of your Pod, quickly do an nslookup to find the root of your domain.
@@ -224,23 +273,30 @@ This will tell us 3 things:
 
 If the DNS and communication test passes, next you will need to check if the Pod has established secure channel communication with the domain.  To do this, again, `exec` into your Pod and run the `nltest.exe /query` command.
 
-```shell
-PS C:\> nltest.exe /query
+```PowerShell
+nltest.exe /query
+```
+
+Results in the following output:
+```
 I_NetLogonControl failed: Status = 1722 0x6ba RPC_S_SERVER_UNAVAILABLE
 ```
 
-This tells us that for some reason, the Pod was unable to logon to the domain using the account specified in the credspec.  You can try to repair the secure channel by running the `nltest.exe /sc_reset:domain.example` command.
+This tells us that for some reason, the Pod was unable to logon to the domain using the account specified in the credspec.  You can try to repair the secure channel by running the following:
 
-```shell
-PS C:\> nltest /sc_reset:domain.example
+```PowerShell
+nltest /sc_reset:domain.example
+```
+
+If the command is successful you will see and output similar to this:
+```
 Flags: 30 HAS_IP  HAS_TIMESERV
 Trusted DC Name \\dc10.domain.example
 Trusted DC Connection Status Status = 0 0x0 NERR_Success
 The command completed successfully
-PS C:\>
 ```
 
-If the above command corrects the error, you can automate the step by adding the following lifecycle hook to your Pod spec.  If it did not correct the error, you will need to examine your credspec again and confirm that it is correct and complete.
+If the above corrects the error, you can automate the step by adding the following lifecycle hook to your Pod spec.  If it did not correct the error, you will need to examine your credspec again and confirm that it is correct and complete.
 
 ```yaml
         image: registry.domain.example/iis-auth:1809v1
@@ -252,6 +308,3 @@ If the above command corrects the error, you can automate the step by adding the
 ```
 
 If you add the `lifecycle` section show above to your Pod spec, the Pod will execute the commands listed to restart the `netlogon` service until the `nltest.exe /query` command exits without error.
-
-## GMSA limitations
-When using the [ContainerD runtime for Windows](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#cri-containerd) accessing restricted network shares via the GMSA domain identity fails. The container will receive the identity of and calls from `nltest.exe /query` will work.  It is recommended to use the [Docker EE runtime](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#docker-ee) if access to network shares is required.  The Windows Server team is working on resolving the issue in the Windows Kernel and will release a patch to resolve this issue in the future. Look for updates on the [Microsoft Windows Containers issue tracker](https://github.com/microsoft/Windows-Containers/issues/44).

From 1f1c57cf8e5a07b8eafbe9cbe69456beec6f3deb Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Tue, 18 May 2021 00:44:08 +0300
Subject: [PATCH 760/788] [ja] Improvement: Managing Secret using kubectl

---
 .../tasks/configmap-secret/managing-secret-using-kubectl.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 9e498de8ac..fbc427469e 100644
--- a/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/ja/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -114,10 +114,10 @@ kubectl get secret db-user-pass -o jsonpath='{.data}'
 出力は次のようになります:
 
 ```json
-{"password.txt":"MWYyZDFlMmU2N2Rm","username.txt":"YWRtaW4="}
+{"password":"MWYyZDFlMmU2N2Rm","username":"YWRtaW4="}
 ```
 
-`password.txt`のデータをデコードします:
+`password`のデータをデコードします:
 
 ```shell
 echo 'MWYyZDFlMmU2N2Rm' | base64 --decode

From 9a7f807474d9302621b6b79ee34e6329d7383ed1 Mon Sep 17 00:00:00 2001
From: seokho-son <shsongist@gmail.com>
Date: Wed, 5 May 2021 18:38:29 +0900
Subject: [PATCH 761/788] Update administer-cluster in dev-1.21-ko.2

---
 .../declare-network-policy.md                 |  6 +-
 .../kubeadm/kubeadm-certs.md                  | 76 ++++++++++++++++++-
 2 files changed, 79 insertions(+), 3 deletions(-)

diff --git a/content/ko/docs/tasks/administer-cluster/declare-network-policy.md b/content/ko/docs/tasks/administer-cluster/declare-network-policy.md
index 7a7a97576d..2a476d520d 100644
--- a/content/ko/docs/tasks/administer-cluster/declare-network-policy.md
+++ b/content/ko/docs/tasks/administer-cluster/declare-network-policy.md
@@ -1,4 +1,7 @@
 ---
+
+
+
 title: 네트워크 폴리시(Network Policy) 선언하기
 min-kubernetes-server-version: v1.8
 content_type: task
@@ -13,8 +16,9 @@ content_type: task
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-네트워크 폴리시를 지원하는 네트워크 제공자를 구성하였는지 확인해야 한다. 다음과 같이 네트워크폴리시를 제공하는 많은 네트워크 제공자들이 있다.
+네트워크 폴리시를 지원하는 네트워크 제공자를 구성하였는지 확인해야 한다. 다음과 같이 네트워크폴리시를 지원하는 많은 네트워크 제공자들이 있다.
 
+* [Antrea](/docs/tasks/administer-cluster/network-policy-provider/antrea-network-policy/)
 * [캘리코(Calico)](/ko/docs/tasks/administer-cluster/network-policy-provider/calico-network-policy/)
 * [실리움(Cilium)](/ko/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy/)
 * [Kube-router](/ko/docs/tasks/administer-cluster/network-policy-provider/kube-router-network-policy/)
diff --git a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 3474aee3c2..78e2fa767b 100644
--- a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -1,4 +1,6 @@
 ---
+
+
 title: kubeadm을 사용한 인증서 관리
 content_type: task
 weight: 10
@@ -190,11 +192,13 @@ CSR과 함께 제공되는 개인 키가 모두 출력된다.
 `kubeadm init` 과 마찬가지로 출력 디렉터리를 `--csr-dir` 플래그로 지정할 수 있다.
 
 CSR에는 인증서 이름, 도메인 및 IP가 포함되지만, 용도를 지정하지는 않는다.
-인증서를 발행할 때 [올바른 인증서 용도](/ko/docs/setup/best-practices/certificates/#모든-인증서)를 지정하는 것은 CA의 책임이다.
+인증서를 발행할 때 [올바른 인증서 용도](/ko/docs/setup/best-practices/certificates/#모든-인증서)를
+지정하는 것은 CA의 책임이다.
 
 * `openssl` 의 경우
   [`openssl ca` 명령](https://superuser.com/questions/738612/openssl-ca-keyusage-extension)으로 수행한다.
-* `cfssl` 의 경우 [설정 파일에 용도](https://github.com/cloudflare/cfssl/blob/master/doc/cmd/cfssl.txt#L170)를 지정한다.
+* `cfssl` 의 경우
+  [설정 파일에 용도](https://github.com/cloudflare/cfssl/blob/master/doc/cmd/cfssl.txt#L170)를 지정한다.
 
 선호하는 방법으로 인증서에 서명한 후, 인증서와 개인 키를 PKI 디렉터리(기본적으로 `/etc/kubernetes/pki`)에 복사해야 한다.
 
@@ -203,3 +207,71 @@ CSR에는 인증서 이름, 도메인 및 IP가 포함되지만, 용도를 지
 Kubeadm은 CA 인증서의 순환이나 교체 기능을 기본적으로 지원하지 않는다.
 
 CA의 수동 순환이나 교체에 대한 보다 상세한 정보는 [CA 인증서 수동 순환](/docs/tasks/tls/manual-rotation-of-ca-certificates/) 문서를 참조한다.
+
+## 서명된 kubelet 인증서 활성화하기 {#kubelet-serving-certs}
+
+기본적으로 kubeadm에 의해서 배포된 kubelet 인증서는 자가 서명된(self-signed) 것이다.
+이것은 [metrics-server](https://github.com/kubernetes-sigs/metrics-server)와
+같은 외부 서비스의 kubelet에 대한 연결은
+TLS로 보안되지 않음을 의미한다.
+
+제대로 서명된 인증서를 얻기 위해서 신규 kubeadm 클러스터의 kubelet을 구성하려면
+다음의 최소 구성을 `kubeadm init` 에 전달해야 한다.
+
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: ClusterConfiguration
+---
+apiVersion: kubelet.config.k8s.io/v1beta1
+kind: KubeletConfiguration
+serverTLSBootstrap: true
+```
+
+만약 이미 클러스터를 생성했다면 다음을 따라 이를 조정해야 한다.
+ - `kube-system` 네임스페이스에서 `kubelet-config-{{< skew latestVersion >}}` 컨피그맵을 찾아서 수정한다.
+해당 컨피그맵에는 `config` 키가
+[KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
+문서를 값으로 가진다. `serverTLSBootstrap: true` 가 되도록 KubeletConfiguration 문서를 수정한다.
+- 각 노드에서, `serverTLSBootstrap: true` 필드를 `/var/lib/kubelet/config.yaml` 에 추가한다.
+그리고 `systemctl restart kubelet` 로 kubelet을 재시작한다.
+
+`serverTLSBootstrap: true` 필드는 kubelet 인증서를 이용한 부트스트랩을
+`certificates.k8s.io` API에 요청함으로써 활성화할 것이다. 한 가지 알려진 제약은
+이 인증서들에 대한 CSR(인증서 서명 요청)들이 kube-controller-manager -
+[`kubernetes.io/kubelet-serving`](https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers)의
+기본 서명자(default signer)에 의해서 자동으로 승인될 수 없다는 점이다.
+이것은 사용자나 제 3의 컨트롤러의 액션을 필요로 할 것이다.
+
+이 CSR들은 다음을 통해 볼 수 있다.
+
+```shell
+kubectl get csr
+NAME        AGE     SIGNERNAME                        REQUESTOR                      CONDITION
+csr-9wvgt   112s    kubernetes.io/kubelet-serving     system:node:worker-1           Pending
+csr-lz97v   1m58s   kubernetes.io/kubelet-serving     system:node:control-plane-1    Pending
+```
+
+이를 승인하기 위해서는 다음을 수행한다.
+```shell
+kubectl certificate approve <CSR-name>
+```
+
+기본적으로, 이 인증서는 1년 후에 만기될 것이다. Kubeadm은
+`KubeletConfiguration` 필드의 `rotateCertificates` 를 `true` 로 설정한다. 이것은 만기가
+다가오면 인증서를 위한 신규 CSR 세트가 생성되는 것을 의미하며,
+해당 순환(rotation)을 완료하기 위해서는 승인이 되어야 한다는 것을 의미한다. 더 상세한 이해를 위해서는
+[인증서 순환](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/#certificate-rotation)를 확인한다.
+
+만약 이 CSR들의 자동 승인을 위한 솔루션을 찾고 있다면 클라우드 제공자와
+연락하여 대역 외 메커니즘(out of band mechanism)을 통해 노드의 신분을 검증할 수 있는
+CSR 서명자를 가지고 있는지 문의하는 것을 추천한다.
+
+{{% thirdparty-content %}}
+
+제 3 자 커스텀 컨트롤러도 사용될 수 있다.
+- [kubelet-rubber-stamp](https://github.com/kontena/kubelet-rubber-stamp)
+
+이러한 컨트롤러는 CSR의 CommonName과 요청된 IPs 및 도메인 네임을
+모두 검증하지 않는 한, 보안이 되는 메커니즘이 아니다. 이것을 통해 악의적 행위자가
+kubelet 인증서(클라이언트 인증)를 사용하여 아무 IP나 도메인 네임에 대해 인증서를
+요청하는 CSR의 생성을 방지할 수 있을 것이다.

From 0e265010e5d61a820ecec565c5668bc96731542d Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Thu, 22 Apr 2021 15:11:13 +0900
Subject: [PATCH 762/788] Add line breaks in Markdown code

---
 .../container-runtimes.md                     | 22 +++--
 .../windows/user-guide-windows-containers.md  | 90 ++++++++++++++-----
 2 files changed, 84 insertions(+), 28 deletions(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index ebbd11f081..188a02673a 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -99,7 +99,10 @@ Install containerd:
 {{< tabs name="tab-cri-containerd-installation" >}}
 {{% tab name="Linux" %}}
 
-1. Install the `containerd.io` package from the official Docker repositories. Instructions for setting up the Docker repository for your respective Linux distribution and installing the `containerd.io` package can be found at [Install Docker Engine](https://docs.docker.com/engine/install/#server).
+1. Install the `containerd.io` package from the official Docker repositories. 
+Instructions for setting up the Docker repository for your respective Linux distribution and 
+installing the `containerd.io` package can be found at 
+[Install Docker Engine](https://docs.docker.com/engine/install/#server).
 
 2. Configure containerd:
 
@@ -117,7 +120,8 @@ Install containerd:
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}
 
-Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), and then run the following commands:
+Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), 
+and then run the following commands:
 
 1. Download containerd:
 
@@ -243,7 +247,8 @@ sudo apt-get install cri-o cri-o-runc
 
 {{% tab name="Ubuntu" %}}
 
-To install on the following operating systems, set the environment variable `OS` to the appropriate field in the following table:
+To install on the following operating systems, set the environment variable `OS` 
+to the appropriate field in the following table:
 
 | Operating system | `$OS`             |
 | ---------------- | ----------------- |
@@ -278,7 +283,8 @@ sudo apt-get install cri-o cri-o-runc
 
 {{% tab name="CentOS" %}}
 
-To install on the following operating systems, set the environment variable `OS` to the appropriate field in the following table:
+To install on the following operating systems, set the environment variable `OS` 
+to the appropriate field in the following table:
 
 | Operating system | `$OS`             |
 | ---------------- | ----------------- |
@@ -358,7 +364,10 @@ in sync.
 
 ### Docker
 
-1. On each of your nodes, install the Docker for your Linux distribution as per [Install Docker Engine](https://docs.docker.com/engine/install/#server). You can find the latest validated version of Docker in this [dependencies](https://git.k8s.io/kubernetes/build/dependencies.yaml) file.
+1. On each of your nodes, install the Docker for your Linux distribution as per 
+[Install Docker Engine](https://docs.docker.com/engine/install/#server). 
+You can find the latest validated version of Docker in this 
+[dependencies](https://git.k8s.io/kubernetes/build/dependencies.yaml) file.
 
 2. Configure the Docker daemon, in particular to use systemd for the management of the container’s cgroups.
 
@@ -377,7 +386,8 @@ in sync.
    ```
 
    {{< note >}}
-   `overlay2` is the preferred storage driver for systems running Linux kernel version 4.0 or higher, or RHEL or CentOS using version 3.10.0-514 and above.
+   `overlay2` is the preferred storage driver for systems running Linux kernel version 4.0 or higher, 
+   or RHEL or CentOS using version 3.10.0-514 and above.
    {{< /note >}}
 
 3. Restart Docker and enable on boot:
diff --git a/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md b/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md
index ce7aee8a89..7ddf5397ae 100644
--- a/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md
+++ b/content/en/docs/setup/production-environment/windows/user-guide-windows-containers.md
@@ -11,7 +11,8 @@ weight: 75
 
 <!-- overview -->
 
-Windows applications constitute a large portion of the services and applications that run in many organizations. This guide walks you through the steps to configure and deploy a Windows container in Kubernetes.
+Windows applications constitute a large portion of the services and applications that run in many organizations. 
+This guide walks you through the steps to configure and deploy a Windows container in Kubernetes.
 
 
 
@@ -24,12 +25,18 @@ Windows applications constitute a large portion of the services and applications
 
 ## Before you begin
 
-* Create a Kubernetes cluster that includes a [master and a worker node running Windows Server](/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes)
-* It is important to note that creating and deploying services and workloads on Kubernetes behaves in much the same way for Linux and Windows containers. [Kubectl commands](/docs/reference/kubectl/overview/) to interface with the cluster are identical. The example in the section below is provided to jumpstart your experience with Windows containers.
+* Create a Kubernetes cluster that includes a 
+[master and a worker node running Windows Server](/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes)
+* It is important to note that creating and deploying services and workloads on Kubernetes 
+behaves in much the same way for Linux and Windows containers. 
+[Kubectl commands](/docs/reference/kubectl/overview/) to interface with the cluster are identical. 
+The example in the section below is provided to jumpstart your experience with Windows containers.
 
 ## Getting Started: Deploying a Windows container
 
-To deploy a Windows container on Kubernetes, you must first create an example application. The example YAML file below creates a simple webserver application. Create a service spec named `win-webserver.yaml` with the contents below:
+To deploy a Windows container on Kubernetes, you must first create an example application. 
+The example YAML file below creates a simple webserver application. 
+Create a service spec named `win-webserver.yaml` with the contents below:
 
 ```yaml
 apiVersion: v1
@@ -76,7 +83,8 @@ spec:
 ```
 
 {{< note >}}
-Port mapping is also supported, but for simplicity in this example the container port 80 is exposed directly to the service.
+Port mapping is also supported, but for simplicity in this example 
+the container port 80 is exposed directly to the service.
 {{< /note >}}
 
 1. Check that all nodes are healthy:
@@ -98,51 +106,85 @@ Port mapping is also supported, but for simplicity in this example the container
 
     * Two containers per pod on the Windows node, use `docker ps` 
     * Two pods listed from the Linux master, use `kubectl get pods` 
-    * Node-to-pod communication across the network, `curl` port 80 of your pod IPs from the Linux master to check for a web server response
-    * Pod-to-pod communication, ping between pods (and across hosts, if you have more than one Windows node) using docker exec or kubectl exec
-    * Service-to-pod communication, `curl` the virtual service IP (seen under `kubectl get services`) from the Linux master and from individual pods
+    * Node-to-pod communication across the network, `curl` port 80 of your pod IPs from the Linux master 
+      to check for a web server response
+    * Pod-to-pod communication, ping between pods (and across hosts, if you have more than one Windows node) 
+      using docker exec or kubectl exec
+    * Service-to-pod communication, `curl` the virtual service IP (seen under `kubectl get services`) 
+      from the Linux master and from individual pods
     * Service discovery, `curl` the service name with the Kubernetes [default DNS suffix](/docs/concepts/services-networking/dns-pod-service/#services)
     * Inbound connectivity, `curl` the NodePort from the Linux master or machines outside of the cluster
     * Outbound connectivity, `curl` external IPs from inside the pod using kubectl exec
 
 {{< note >}}
-Windows container hosts are not able to access the IP of services scheduled on them due to current platform limitations of the Windows networking stack. Only Windows pods are able to access service IPs.
+Windows container hosts are not able to access the IP of services scheduled on them due to current platform limitations of the Windows networking stack. 
+Only Windows pods are able to access service IPs.
 {{< /note >}}
 
 ## Observability
 
 ### Capturing logs from workloads
 
-Logs are an important element of observability; they enable users to gain insights into the operational aspect of workloads and are a key ingredient to troubleshooting issues. Because Windows containers and workloads inside Windows containers behave differently from Linux containers, users had a hard time collecting logs, limiting operational visibility. Windows workloads for example are usually configured to log to ETW (Event Tracing for Windows) or push entries to the application event log. [LogMonitor](https://github.com/microsoft/windows-container-tools/tree/master/LogMonitor), an open source tool by Microsoft, is the recommended way to monitor configured log sources inside a Windows container. LogMonitor supports monitoring event logs, ETW providers, and custom application logs, piping them to STDOUT for consumption by `kubectl logs <pod>`.
+Logs are an important element of observability; they enable users to gain insights 
+into the operational aspect of workloads and are a key ingredient to troubleshooting issues. 
+Because Windows containers and workloads inside Windows containers behave differently from Linux containers, 
+users had a hard time collecting logs, limiting operational visibility. 
+Windows workloads for example are usually configured to log to ETW (Event Tracing for Windows) 
+or push entries to the application event log. 
+[LogMonitor](https://github.com/microsoft/windows-container-tools/tree/master/LogMonitor), an open source tool by Microsoft, 
+is the recommended way to monitor configured log sources inside a Windows container. 
+LogMonitor supports monitoring event logs, ETW providers, and custom application logs, 
+piping them to STDOUT for consumption by `kubectl logs <pod>`.
 
-Follow the instructions in the LogMonitor GitHub page to copy its binaries and configuration files to all your containers and add the necessary entrypoints for LogMonitor to push your logs to STDOUT.
+Follow the instructions in the LogMonitor GitHub page to copy its binaries and configuration files 
+to all your containers and add the necessary entrypoints for LogMonitor to push your logs to STDOUT.
 
 ## Using configurable Container usernames
 
-Starting with Kubernetes v1.16, Windows containers can be configured to run their entrypoints and processes with different usernames than the image defaults. The way this is achieved is a bit different from the way it is done for Linux containers. Learn more about it [here](/docs/tasks/configure-pod-container/configure-runasusername/).
+Starting with Kubernetes v1.16, Windows containers can be configured to run their entrypoints and processes 
+with different usernames than the image defaults. 
+The way this is achieved is a bit different from the way it is done for Linux containers. 
+Learn more about it [here](/docs/tasks/configure-pod-container/configure-runasusername/).
 
 ## Managing Workload Identity with Group Managed Service Accounts
 
-Starting with Kubernetes v1.14, Windows container workloads can be configured to use Group Managed Service Accounts (GMSA). Group Managed Service Accounts are a specific type of Active Directory account that provides automatic password management, simplified service principal name (SPN) management, and the ability to delegate the management to other administrators across multiple servers. Containers configured with a GMSA can access external Active Directory Domain resources while carrying the identity configured with the GMSA. Learn more about configuring and using GMSA for Windows containers [here](/docs/tasks/configure-pod-container/configure-gmsa/).
+Starting with Kubernetes v1.14, Windows container workloads can be configured to use Group Managed Service Accounts (GMSA). 
+Group Managed Service Accounts are a specific type of Active Directory account that provides automatic password management, 
+simplified service principal name (SPN) management, and the ability to delegate the management to other administrators across multiple servers. 
+Containers configured with a GMSA can access external Active Directory Domain resources while carrying the identity configured with the GMSA. 
+Learn more about configuring and using GMSA for Windows containers [here](/docs/tasks/configure-pod-container/configure-gmsa/).
 
 ## Taints and Tolerations
 
-Users today need to use some combination of taints and node selectors in order to keep Linux and Windows workloads on their respective OS-specific nodes. This likely imposes a burden only on Windows users. The recommended approach is outlined below, with one of its main goals being that this approach should not break compatibility for existing Linux workloads.
+Users today need to use some combination of taints and node selectors in order to 
+keep Linux and Windows workloads on their respective OS-specific nodes. 
+This likely imposes a burden only on Windows users. The recommended approach is outlined below, 
+with one of its main goals being that this approach should not break compatibility for existing Linux workloads.
 
 ### Ensuring OS-specific workloads land on the appropriate container host
 
-Users can ensure Windows containers can be scheduled on the appropriate host using Taints and Tolerations. All Kubernetes nodes today have the following default labels:
+Users can ensure Windows containers can be scheduled on the appropriate host using Taints and Tolerations. 
+All Kubernetes nodes today have the following default labels:
 
 * kubernetes.io/os = [windows|linux]
 * kubernetes.io/arch = [amd64|arm64|...]
 
-If a Pod specification does not specify a nodeSelector like `"kubernetes.io/os": windows`, it is possible the Pod can be scheduled on any host, Windows or Linux. This can be problematic since a Windows container can only run on Windows and a Linux container can only run on Linux. The best practice is to use a nodeSelector.
+If a Pod specification does not specify a nodeSelector like `"kubernetes.io/os": windows`, 
+it is possible the Pod can be scheduled on any host, Windows or Linux. 
+This can be problematic since a Windows container can only run on Windows and a Linux container can only run on Linux. 
+The best practice is to use a nodeSelector.
 
-However, we understand that in many cases users have a pre-existing large number of deployments for Linux containers, as well as an ecosystem of off-the-shelf configurations, such as community Helm charts, and programmatic Pod generation cases, such as with Operators. In those situations, you may be hesitant to make the configuration change to add nodeSelectors. The alternative is to use Taints. Because the kubelet can set Taints during registration, it could easily be modified to automatically add a taint when running on Windows only.
+However, we understand that in many cases users have a pre-existing large number of deployments for Linux containers, 
+as well as an ecosystem of off-the-shelf configurations, such as community Helm charts, and programmatic Pod generation cases, such as with Operators. 
+In those situations, you may be hesitant to make the configuration change to add nodeSelectors. 
+The alternative is to use Taints. Because the kubelet can set Taints during registration, 
+it could easily be modified to automatically add a taint when running on Windows only.
 
 For example:  `--register-with-taints='os=windows:NoSchedule'`
 
-By adding a taint to all Windows nodes, nothing will be scheduled on them (that includes existing Linux Pods). In order for a Windows Pod to be scheduled on a Windows node, it would need both the nodeSelector to choose Windows, and the appropriate matching toleration.
+By adding a taint to all Windows nodes, nothing will be scheduled on them (that includes existing Linux Pods). 
+In order for a Windows Pod to be scheduled on a Windows node, 
+it would need both the nodeSelector to choose Windows, and the appropriate matching toleration.
 
 ```yaml
 nodeSelector:
@@ -160,9 +202,11 @@ tolerations:
 The Windows Server version used by each pod must match that of the node. If you want to use multiple Windows
 Server versions in the same cluster, then you should set additional node labels and nodeSelectors.
 
-Kubernetes 1.17 automatically adds a new label `node.kubernetes.io/windows-build` to simplify this. If you're running an older version, then it's recommended to add this label manually to Windows nodes.
+Kubernetes 1.17 automatically adds a new label `node.kubernetes.io/windows-build` to simplify this. 
+If you're running an older version, then it's recommended to add this label manually to Windows nodes.
 
-This label reflects the Windows major, minor, and build number that need to match for compatibility. Here are values used today for each Windows Server version.
+This label reflects the Windows major, minor, and build number that need to match for compatibility. 
+Here are values used today for each Windows Server version.
 
 | Product Name                         |   Build Number(s)      |
 |--------------------------------------|------------------------|
@@ -173,10 +217,12 @@ This label reflects the Windows major, minor, and build number that need to matc
 
 ### Simplifying with RuntimeClass
 
-[RuntimeClass] can be used to simplify the process of using taints and tolerations. A cluster administrator can create a `RuntimeClass` object which is used to encapsulate these taints and tolerations.
+[RuntimeClass] can be used to simplify the process of using taints and tolerations. 
+A cluster administrator can create a `RuntimeClass` object which is used to encapsulate these taints and tolerations.
 
 
-1. Save this file to `runtimeClasses.yml`. It includes the appropriate `nodeSelector` for the Windows OS, architecture, and version.
+1. Save this file to `runtimeClasses.yml`. It includes the appropriate `nodeSelector` 
+for the Windows OS, architecture, and version.
 
 ```yaml
 apiVersion: node.k8s.io/v1

From cd80215e9b7a43e12da39cce6f5c4e9e08ee00ec Mon Sep 17 00:00:00 2001
From: Jihoon Seo <jihoon.seo@etri.re.kr>
Date: Tue, 18 May 2021 12:08:07 +0900
Subject: [PATCH 763/788] [ko] Resolve nits (#27899, #27902)

---
 content/ko/docs/concepts/services-networking/service.md | 1 -
 content/ko/docs/concepts/workloads/controllers/job.md   | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/ko/docs/concepts/services-networking/service.md b/content/ko/docs/concepts/services-networking/service.md
index e5aa794ae0..a88bb0e213 100644
--- a/content/ko/docs/concepts/services-networking/service.md
+++ b/content/ko/docs/concepts/services-networking/service.md
@@ -988,7 +988,6 @@ NLB는 특정 인스턴스 클래스에서만 작동한다. 지원되는 인스
 | 규칙 | 프로토콜 | 포트 | IP 범위 | IP 범위 설명 |
 |------|----------|---------|------------|---------------------|
 | 헬스 체크 | TCP | NodePort(s) (`.spec.healthCheckNodePort` for `.spec.externalTrafficPolicy = Local`) | Subnet CIDR | kubernetes.io/rule/nlb/health=\<loadBalancerName\> |
-
 | 클라이언트 트래픽 | TCP | NodePort(s) | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/client=\<loadBalancerName\> |
 | MTU 탐색 | ICMP | 3,4 | `.spec.loadBalancerSourceRanges` (defaults to `0.0.0.0/0`) | kubernetes.io/rule/nlb/mtu=\<loadBalancerName\> |
 
diff --git a/content/ko/docs/concepts/workloads/controllers/job.md b/content/ko/docs/concepts/workloads/controllers/job.md
index b9411ecc31..6cdab2d6c5 100644
--- a/content/ko/docs/concepts/workloads/controllers/job.md
+++ b/content/ko/docs/concepts/workloads/controllers/job.md
@@ -99,7 +99,7 @@ echo $pods
 pi-5rwd7
 ```
 
-여기서 셀렉터는 잡의 셀렉터와 동일하다. `--output = jsonpath` 옵션은 반환된
+여기서 셀렉터는 잡의 셀렉터와 동일하다. `--output=jsonpath` 옵션은 반환된
 목록에 있는 각 파드의 이름으로 표현식을 지정한다.
 
 파드 중 하나를 표준 출력으로 본다.

From b26563c314336d2398818d3da09f08d6a636f875 Mon Sep 17 00:00:00 2001
From: Seonggwon Yoon <keyakoto@gmail.com>
Date: Tue, 18 May 2021 12:23:42 +0900
Subject: [PATCH 764/788] Fix typo minikubue to minikube

---
 content/ko/docs/tutorials/hello-minikube.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ko/docs/tutorials/hello-minikube.md b/content/ko/docs/tutorials/hello-minikube.md
index e5831046df..eaa81c3809 100644
--- a/content/ko/docs/tutorials/hello-minikube.md
+++ b/content/ko/docs/tutorials/hello-minikube.md
@@ -41,7 +41,7 @@ Katacode는 무료로 브라우저에서 쿠버네티스 환경을 제공한다.
 
 <!-- lessoncontent -->
 
-## minikubue 클러스터 만들기
+## minikube 클러스터 만들기
 
 1. **Launch Terminal** 을 클릭
 

From 5bb726ba16b7e257c0f8e81482c8e8e3cc83382b Mon Sep 17 00:00:00 2001
From: Niko Felger <niko.felger@gmail.com>
Date: Tue, 18 May 2021 10:29:09 +0200
Subject: [PATCH 765/788] Fix typo

---
 content/en/docs/concepts/configuration/secret.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 40f76c18b8..48ac53ed47 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -334,7 +334,7 @@ given private key for `--key`.
 The private key must be in what is commonly called PEM private key format,
 unencrypted. In both cases, the initial and the last lines from PEM (for
 example, `--------BEGIN CERTIFICATE-----` and `-------END CERTIFICATE----` for
-a cetificate) are *not* included.
+a certificate) are *not* included.
 
 ### Bootstrap token Secrets
 

From 0bb7c6f713f9de2dd9e4c09bc0fbbd4d64adb9f2 Mon Sep 17 00:00:00 2001
From: Priyanka Saggu <priyankasaggu11929@gmail.com>
Date: Tue, 18 May 2021 15:04:48 +0530
Subject: [PATCH 766/788] fix the configmap key value from `config` to
 `kubelet`

---
 .../en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 62e66d1a8f..57aac35a7a 100644
--- a/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -229,7 +229,7 @@ serverTLSBootstrap: true
 
 If you have already created the cluster you must adapt it by doing the following:
  - Find and edit the `kubelet-config-{{< skew latestVersion >}}` ConfigMap in the `kube-system` namespace.
-In that ConfigMap, the `config` key has a
+In that ConfigMap, the `kubelet` key has a
 [KubeletConfiguration](/docs/reference/config-api/kubelet-config.v1beta1/#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
 document as its value. Edit the KubeletConfiguration document to set `serverTLSBootstrap: true`.
 - On each node, add the `serverTLSBootstrap: true` field in `/var/lib/kubelet/config.yaml`

From d541be6473276f8048b6fcdb5ba4dcc81fedde62 Mon Sep 17 00:00:00 2001
From: Abdullah Gharaibeh <ahg@google.com>
Date: Mon, 17 May 2021 14:42:30 -0400
Subject: [PATCH 767/788] updated TTLAfterFinished feature reference

---
 .../reference/command-line-tools-reference/feature-gates.md    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index d5a23d7ff0..3710988bdc 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -173,7 +173,8 @@ different Kubernetes components.
 | `StorageVersionHash` | `false` | Alpha | 1.14 | 1.14 |
 | `StorageVersionHash` | `true` | Beta | 1.15 | |
 | `SuspendJob` | `false` | Alpha | 1.21 | |
-| `TTLAfterFinished` | `false` | Alpha | 1.12 | |
+| `TTLAfterFinished` | `false` | Alpha | 1.12 | 1.20 |
+| `TTLAfterFinished` | `true` | Beta | 1.21 | |
 | `TopologyAwareHints` | `false` | Alpha | 1.21 | |
 | `TopologyManager` | `false` | Alpha | 1.16 | 1.17 |
 | `TopologyManager` | `true` | Beta | 1.18 | |

From 465b7860f89acea903754ebbdc6457c3abd8ecb5 Mon Sep 17 00:00:00 2001
From: Haardik Dharma <dharmahaardik08@gmail.com>
Date: Tue, 18 May 2021 20:43:24 +0530
Subject: [PATCH 768/788] Update task-tutorial-prereqs.md

---
 content/en/includes/task-tutorial-prereqs.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/includes/task-tutorial-prereqs.md b/content/en/includes/task-tutorial-prereqs.md
index 93195d8b9c..b5d3c0abf3 100644
--- a/content/en/includes/task-tutorial-prereqs.md
+++ b/content/en/includes/task-tutorial-prereqs.md
@@ -1,7 +1,7 @@
 You need to have a Kubernetes cluster, and the kubectl command-line tool must
-be configured to communicate with your cluster. If you do not already have a
+be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a
 cluster, you can create one by using
-[minikube](/docs/tasks/tools/#minikube)
+[minikube](https://minikube.sigs.k8s.io/docs/tutorials/multi_node/)
 or you can use one of these Kubernetes playgrounds:
 
 * [Katacoda](https://www.katacoda.com/courses/kubernetes/playground)

From a7e39ecdb00f0d4ea08ff301c4899ca6616374dc Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Tue, 18 May 2021 14:19:02 +0800
Subject: [PATCH 769/788] [zh]Resync tasks files[8]

---
 .../assign-cpu-resource.md                    |   4 +-
 ...igure-liveness-readiness-startup-probes.md | 145 +++++++++++++-----
 .../configure-pod-container/static-pod.md     |  32 ++--
 .../translate-compose-kubernetes.md           |   4 +-
 4 files changed, 131 insertions(+), 54 deletions(-)

diff --git a/content/zh/docs/tasks/configure-pod-container/assign-cpu-resource.md b/content/zh/docs/tasks/configure-pod-container/assign-cpu-resource.md
index cc8d90cc88..df1636c8dd 100644
--- a/content/zh/docs/tasks/configure-pod-container/assign-cpu-resource.md
+++ b/content/zh/docs/tasks/configure-pod-container/assign-cpu-resource.md
@@ -166,9 +166,9 @@ kubectl top pod cpu-demo --namespace=cpu-example
 
 <!-- 
 This example output shows that the Pod is using 974 milliCPU, which is
-just a bit less than the limit of 1 CPU specified in the Pod configuration.
+slightly less than the limit of 1 CPU specified in the Pod configuration.
 -->
-此示例输出显示 Pod 使用的是 974 milliCPU，即仅略低于 Pod 配置中指定的 1 个 CPU 的限制。
+此示例输出显示 Pod 使用的是 974 milliCPU，即略低于 Pod 配置中指定的 1 个 CPU 的限制。
 
 ```
 NAME                        CPU(cores)   MEMORY(bytes)
diff --git a/content/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md b/content/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
index a55821b51f..7355e5c11e 100644
--- a/content/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
+++ b/content/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
@@ -8,10 +8,10 @@ weight: 110
 <!--
 This page shows how to configure liveness, readiness and startup probes for Containers.
 
-The [kubelet](/docs/admin/kubelet/) uses liveness probes to know when to
-restart a Container. For example, liveness probes could catch a deadlock,
+The [kubelet](/docs/reference/command-line-tools-reference/kubelet/) uses liveness probes to know when to
+restart a container. For example, liveness probes could catch a deadlock,
 where an application is running, but unable to make progress. Restarting a
-Container in such a state can help to make the application more available
+container in such a state can help to make the application more available
 despite bugs.
 -->
 这篇文章介绍如何给容器配置存活、就绪和启动探测器。
@@ -22,12 +22,12 @@ despite bugs.
 这样的情况下重启容器有助于让应用程序在有问题的情况下更可用。
 
 <!--
-The kubelet uses readiness probes to know when a Container is ready to start
-accepting traffic. A Pod is considered ready when all of its Containers are ready.
+The kubelet uses readiness probes to know when a container is ready to start
+accepting traffic. A Pod is considered ready when all of its containers are ready.
 One use of this signal is to control which Pods are used as backends for Services.
 When a Pod is not ready, it is removed from Service load balancers.
 
-The kubelet uses startup probes to know when a Container application has started.
+The kubelet uses startup probes to know when a container application has started.
 If such a probe is configured, it disables liveness and readiness checks until
 it succeeds, making sure those probes don't interfere with the application startup.
 This can be used to adopt liveness checks on slow starting containers, avoiding them
@@ -45,7 +45,7 @@ kubelet 使用启动探测器可以知道应用程序容器什么时候启动了
 
 ## {{% heading "prerequisites" %}}
 
-{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+{{< include "task-tutorial-prereqs.md" >}}
 
 <!-- steps -->
 
@@ -56,7 +56,7 @@ Many applications running for long periods of time eventually transition to
 broken states, and cannot recover except by being restarted. Kubernetes provides
 liveness probes to detect and remedy such situations.
 
-In this exercise, you create a Pod that runs a Container based on the
+In this exercise, you create a Pod that runs a container based on the
 `k8s.gcr.io/busybox` image. Here is the configuration file for the Pod:
 -->
 ## 定义存活命令 {#define-a-liveness-command}
@@ -70,16 +70,16 @@ Kubernetes 提供了存活探测器来发现并补救这种情况。
 {{< codenew file="pods/probe/exec-liveness.yaml" >}}
 
 <!--
-In the configuration file, you can see that the Pod has a single Container.
+In the configuration file, you can see that the Pod has a single `Container`.
 The `periodSeconds` field specifies that the kubelet should perform a liveness
 probe every 5 seconds. The `initialDelaySeconds` field tells the kubelet that it
-should wait 5 second before performing the first probe. To perform a probe, the
-kubelet executes the command `cat /tmp/healthy` in the Container. If the
-command succeeds, it returns 0, and the kubelet considers the Container to be alive and
-healthy. If the command returns a non-zero value, the kubelet kills the Container
+should wait 5 seconds before performing the first probe. To perform a probe, the
+kubelet executes the command `cat /tmp/healthy` in the target container. If the
+command succeeds, it returns 0, and the kubelet considers the container to be alive and
+healthy. If the command returns a non-zero value, the kubelet kills the container
 and restarts it.
 
-When the Container starts, it executes this command:
+When the container starts, it executes this command:
 -->
 在这个配置文件中，可以看到 Pod 中只有一个容器。
 `periodSeconds` 字段指定了 kubelet 应该每 5 秒执行一次存活探测。
@@ -95,7 +95,7 @@ kubelet 在容器内执行命令 `cat /tmp/healthy` 来进行探测。
 ```
 
 <!--
-For the first 30 seconds of the Container's life, there is a `/tmp/healthy` file.
+For the first 30 seconds of the container's life, there is a `/tmp/healthy` file.
 So during the first 30 seconds, the command `cat /tmp/healthy` returns a success
 code. After 30 seconds, `cat /tmp/healthy` returns a failure code.
 
@@ -195,14 +195,14 @@ image.
 {{< codenew file="pods/probe/http-liveness.yaml" >}}
 
 <!--
-In the configuration file, you can see that the Pod has a single Container.
+In the configuration file, you can see that the Pod has a single container.
 The `periodSeconds` field specifies that the kubelet should perform a liveness
 probe every 3 seconds. The `initialDelaySeconds` field tells the kubelet that it
 should wait 3 seconds before performing the first probe. To perform a probe, the
-kubelet sends an HTTP GET request to the server that is running in the Container
+kubelet sends an HTTP GET request to the server that is running in the container
 and listening on port 8080. If the handler for the server's `/healthz` path
-returns a success code, the kubelet considers the Container to be alive and
-healthy. If the handler returns a failure code, the kubelet kills the Container
+returns a success code, the kubelet considers the container to be alive and
+healthy. If the handler returns a failure code, the kubelet kills the container
 and restarts it.
 -->
 在这个配置文件中，可以看到 Pod 也只有一个容器。
@@ -217,14 +217,14 @@ Any code greater than or equal to 200 and less than 400 indicates success. Any
 other code indicates failure.
 
 You can see the source code for the server in
-[server.go](https://github.com/kubernetes/kubernetes/blob/master/test/images/agnhost/liveness/server.go).
+[server.go](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/test/images/agnhost/liveness/server.go).
 
-For the first 10 seconds that the Container is alive, the `/healthz` handler
+For the first 10 seconds that the container is alive, the `/healthz` handler
 returns a status of 200. After that, the handler returns a status of 500.
 -->
 任何大于或等于 200 并且小于 400 的返回代码标示成功，其它返回代码都标示失败。
 
-可以在这里看服务的源码 [server.go](https://github.com/kubernetes/kubernetes/blob/master/test/images/agnhost/liveness/server.go)。
+可以在这里看服务的源码 [server.go](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/test/images/agnhost/liveness/server.go)。
 
 容器存活的最开始 10 秒中，`/healthz` 处理程序返回一个 200 的状态码。之后处理程序返回 500 的状态码。
 
@@ -242,9 +242,9 @@ http.HandleFunc("/healthz", func(w http.ResponseWriter, r *http.Request) {
 ```
 
 <!--
-The kubelet starts performing health checks 3 seconds after the Container starts.
+The kubelet starts performing health checks 3 seconds after the container starts.
 So the first couple of health checks will succeed. But after 10 seconds, the health
-checks will fail, and the kubelet will kill and restart the Container.
+checks will fail, and the kubelet will kill and restart the container.
 
 To try the HTTP liveness check, create a Pod:
 -->
@@ -259,7 +259,7 @@ kubectl apply -f https://k8s.io/examples/pods/probe/http-liveness.yaml
 
 <!--
 After 10 seconds, view Pod events to verify that liveness probes have failed and
-the Container has been restarted:
+the container has been restarted:
 -->
 10 秒之后，通过看 Pod 事件来检测存活探测器已经失败了并且容器被重新启动了。
 
@@ -269,7 +269,7 @@ kubectl describe pod liveness-http
 
 <!--
 In releases prior to v1.13 (including v1.13), if the environment variable
-`http_proxy` (or `HTTP_PROXY`) is set on the node where a pod is running,
+`http_proxy` (or `HTTP_PROXY`) is set on the node where a Pod is running,
 the HTTP liveness probe uses that proxy.
 In releases after v1.13, local HTTP proxy environment variable settings do not
 affect the HTTP liveness probe.
@@ -281,7 +281,7 @@ affect the HTTP liveness probe.
 <!--
 ## Define a TCP liveness probe
 
-A third type of liveness probe uses a TCP Socket. With this configuration, the
+A third type of liveness probe uses a TCP socket. With this configuration, the
 kubelet will attempt to open a socket to your container on the specified port.
 If it can establish a connection, the container is considered healthy, if it
 can't it is considered a failure.
@@ -298,13 +298,13 @@ can't it is considered a failure.
 As you can see, configuration for a TCP check is quite similar to an HTTP check.
 This example uses both readiness and liveness probes. The kubelet will send the
 first readiness probe 5 seconds after the container starts. This will attempt to
-connect to the `goproxy` container on port 8080. If the probe succeeds, the pod
+connect to the `goproxy` container on port 8080. If the probe succeeds, the Pod
 will be marked as ready. The kubelet will continue to run this check every 10
 seconds.
 
 In addition to the readiness probe, this configuration includes a liveness probe.
 The kubelet will run the first liveness probe 15 seconds after the container
-starts. Just like the readiness probe, this will attempt to connect to the
+starts. Similar to the readiness probe, this will attempt to connect to the
 `goproxy` container on port 8080. If the liveness probe fails, the container
 will be restarted.
 
@@ -317,7 +317,7 @@ To try the TCP liveness check, create a Pod:
 
 除了就绪探测，这个配置包括了一个存活探测。
 kubelet 会在容器启动 15 秒后进行第一次存活探测。
-就像就绪探测一样，会尝试连接 `goproxy` 容器的 8080 端口。
+与就绪探测类似，会尝试连接 `goproxy` 容器的 8080 端口。
 如果存活探测失败，这个容器会被重新启动。
 
 ```shell
@@ -439,6 +439,14 @@ Readiness probes runs on the container during its whole lifecycle.
 就绪探测器在容器的整个生命周期中保持运行状态。
 {{< /note >}}
 
+<!--
+Liveness probes *do not* wait for readiness probes to succeed. If you want to wait before executing a liveness probe you should use initialDelaySeconds or a startupProbe.
+-->
+{{< caution >}}
+活跃性探测器 *不等待* 就绪性探测器成功。
+如果要在执行活跃性探测器之前等待，应该使用 initialDelaySeconds 或 startupProbe。
+{{< /caution >}}
+
 <!--
 Readiness probes are configured similarly to liveness probes. The only difference
 is that you use the `readinessProbe` field instead of the `livenessProbe` field.
@@ -496,8 +504,8 @@ seconds. Minimum value is 1.
 * `timeoutSeconds`: Number of seconds after which the probe times out. Defaults
 to 1 second. Minimum value is 1.
 * `successThreshold`: Minimum consecutive successes for the probe to be
-considered successful after having failed. Defaults to 1. Must be 1 for
-liveness and startup Probes. Minimum value is 1.
+considered successful after having failed. Defaults to 1. Must be 1 for liveness
+and startup Probes. Minimum value is 1.
 * `failureThreshold`: When a probe fails, Kubernetes will
 try `failureThreshold` times before giving up. Giving up in case of liveness probe means restarting the container. In case of readiness probe the Pod will be marked Unready.
 Defaults to 3. Minimum value is 1.
@@ -511,6 +519,7 @@ Defaults to 3. Minimum value is 1.
   存活探测情况下的放弃就意味着重新启动容器。
   就绪探测情况下的放弃 Pod 会被打上未就绪的标签。默认值是 3。最小值是 1。
 
+{{< note >}}
 <!--
 Before Kubernetes 1.20, the field `timeoutSeconds` was not respected for exec probes:
 probes continued running indefinitely, even past their configured deadline,
@@ -545,7 +554,7 @@ the process inside the container may keep running even after probe returned fail
 当此缺陷被修复之后，在使用 `dockershim` 容器运行时的 Kubernetes `1.20+`
 版本中，对于 exec 探针而言，容器中的进程可能会因为超时值的设置保持持续运行，
 即使探针返回了失败状态。
-
+{{< /note >}}
 {{< caution >}}
 <!--
 Incorrect implementation of readiness probes may result in an ever growing number
@@ -586,7 +595,7 @@ port to perform the check. The kubelet sends the probe to the pod's IP address,
 unless the address is overridden by the optional `host` field in `httpGet`. If
 `scheme` field is set to `HTTPS`, the kubelet sends an HTTPS request skipping the
 certificate verification. In most scenarios, you do not want to set the `host` field.
-Here's one scenario where you would set it. Suppose the Container listens on 127.0.0.1
+Here's one scenario where you would set it. Suppose the container listens on 127.0.0.1
 and the Pod's `hostNetwork` field is true. Then `host`, under `httpGet`, should be set
 to 127.0.0.1. If your pod relies on virtual hosts, which is probably the more common
 case, you should not use `host`, but rather set the `Host` header in `httpHeaders`.
@@ -658,6 +667,70 @@ to resolve it.
 对于一次 TCP 探测，kubelet 在节点上（不是在 Pod 里面）建立探测连接，
 这意味着你不能在 `host` 参数上配置服务名称，因为 kubelet 不能解析服务名称。
 
+<!--
+### Probe-level `terminationGracePeriodSeconds`
+-->
+### 探测器级别 `terminationGracePeriodSeconds`
+
+{{< feature-state for_k8s_version="v1.21" state="alpha" >}}
+
+<!--
+Prior to release 1.21, the pod-level `terminationGracePeriodSeconds` was used
+for terminating a container that failed its liveness or startup probe. This
+coupling was unintended and may have resulted in failed containers taking an
+unusually long time to restart when a pod-level `terminationGracePeriodSeconds`
+was set.
+-->
+在 1.21 版之前，pod 级别的 `terminationGracePeriodSeconds` 被用来终止
+未能成功处理活跃性探测或启动探测的容器。
+这种耦合是意料之外的，可能会导致在设置了 pod 级别的 `terminationGracePeriodSeconds` 后，
+需要很长的时间来重新启动失败的容器。
+
+<!--
+In 1.21, when the feature flag `ProbeTerminationGracePeriod` is enabled, users
+can specify a probe-level `terminationGracePeriodSeconds` as part of the probe
+specification. When the feature flag is enabled, and both a pod- and
+probe-level `terminationGracePeriodSeconds` are set, the kubelet will use the
+probe-level value.
+
+For example,
+-->
+在1.21中，启用特性标志 `ProbeTerminationGracePeriod` 后，
+用户可以指定一个探测器级别的 `terminationGracePeriodSeconds` 作为探测器规格的一部分。
+当该特性标志被启用时，若同时设置了 Pod 级别和探测器级别的 `terminationGracePeriodSeconds`，
+kubelet 将使用探测器级的值。
+
+例如，
+
+```yaml
+spec:
+  terminationGracePeriodSeconds: 3600  # pod-level
+  containers:
+  - name: test
+    image: ...
+
+    ports:
+    - name: liveness-port
+      containerPort: 8080
+      hostPort: 8080
+
+    livenessProbe:
+      httpGet:
+        path: /healthz
+        port: liveness-port
+      failureThreshold: 1
+      periodSeconds: 60
+      # Override pod-level terminationGracePeriodSeconds #
+      terminationGracePeriodSeconds: 60
+```
+
+<!--
+Probe-level `terminationGracePeriodSeconds` cannot be set for readiness probes.
+It will be rejected by the API server.
+-->
+探测器级别的 `terminationGracePeriodSeconds` 不能用于设置就绪态探针。
+它将被 API 服务器拒绝。
+
 ## {{% heading "whatsnext" %}}
 
 <!--
@@ -667,13 +740,13 @@ to resolve it.
 * 进一步了解[容器探针](/zh/docs/concepts/workloads/pods/pod-lifecycle/#container-probes)。
 
 <!--
-### Reference
+You can also read the API references for:
 
 * [Pod](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core)
 * [Container](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core)
 * [Probe](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#probe-v1-core)
 -->
-### 参考 {#reference}
+你也可以阅读以下的 API 参考资料：
 
 * [Pod](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core)
 * [Container](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core)
diff --git a/content/zh/docs/tasks/configure-pod-container/static-pod.md b/content/zh/docs/tasks/configure-pod-container/static-pod.md
index 582e94616d..a202caf1b5 100644
--- a/content/zh/docs/tasks/configure-pod-container/static-pod.md
+++ b/content/zh/docs/tasks/configure-pod-container/static-pod.md
@@ -27,6 +27,7 @@ The kubelet automatically tries to create a {{< glossary_tooltip text="mirror Po
 on the Kubernetes API server for each static Pod.
 This means that the Pods running on a node are visible on the API server,
 but cannot be controlled from there.
+The Pod names will suffixed with the node hostname with a leading hyphen
 
 {{< note >}}
 If you are running clustered Kubernetes and are using static
@@ -40,6 +41,7 @@ instead.
 kubelet 会尝试通过 Kubernetes API 服务器为每个静态 Pod 自动创建一个
 {{< glossary_tooltip text="镜像 Pod" term_id="mirror-pod" >}}。
 这意味着节点上运行的静态 Pod 对 API 服务来说是可见的，但是不能通过 API 服务器来控制。
+Pod 名称将把以连字符开头的节点主机名作为后缀。
 
 {{< note >}}
 如果你在运行一个 Kubernetes 集群，并且在每个节点上都运行一个静态 Pod，
@@ -48,7 +50,6 @@ kubelet 会尝试通过 Kubernetes API 服务器为每个静态 Pod 自动创建
 
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 <!--
@@ -76,7 +77,9 @@ You can configure a static Pod with either a [file system hosted configuration f
 <!--
 ### Filesystem-hosted static Pod manifest {#configuration-files}
 
-Manifests are standard Pod definitions in JSON or YAML format in a specific directory. Use the `staticPodPath: <the directory>` field in the [KubeletConfiguration file](/docs/tasks/administer-cluster/kubelet-config-file), which periodically scans the directory and creates/deletes static Pods as YAML/JSON files appear/disappear there.
+Manifests are standard Pod definitions in JSON or YAML format in a specific directory. Use the `staticPodPath: <the directory>` field in the
+[kubelet configuration file](/docs/reference/config-api/kubelet-config.v1beta1/),
+which periodically scans the directory and creates/deletes static Pods as YAML/JSON files appear/disappear there.
 Note that the kubelet will ignore files starting with dots when scanning the specified directory.
 
 For example, this is how to start a simple web server as a static Pod:
@@ -84,7 +87,7 @@ For example, this is how to start a simple web server as a static Pod:
 ### 文件系统上的静态 Pod 声明文件 {#configuration-files}
 
 声明文件是标准的 Pod 定义文件，以 JSON 或者 YAML 格式存储在指定目录。路径设置在
-[Kubelet 配置文件](/zh/docs/tasks/administer-cluster/kubelet-config-file/)
+[Kubelet 配置文件](/zh/docs/reference/config-api/kubelet-config.v1beta1/)
 的 `staticPodPath: <目录>` 字段，kubelet 会定期的扫描这个文件夹下的 YAML/JSON
 文件来创建/删除静态 Pod。
 注意 kubelet 扫描目录的时候会忽略以点开头的文件。
@@ -148,12 +151,13 @@ For example, this is how to start a simple web server as a static Pod:
    ```
 
 <!--
-1. Configure your kubelet on the node to use this directory by running it with `--pod-manifest-path=/etc/kubelet.d/` argument. On Fedora edit `/etc/kubernetes/kubelet` to include this line:
+3. Configure your kubelet on the node to use this directory by running it with `--pod-manifest-path=/etc/kubelet.d/` argument. On Fedora edit `/etc/kubernetes/kubelet` to include this line:
 
-    ```
-    KUBELET_ARGS="--cluster-dns=10.254.0.10 --cluster-domain=kube.local --pod-manifest-path=/etc/kubelet.d/"
-    ```
-    or add the `staticPodPath: <the directory>` field in the [KubeletConfiguration file](/docs/tasks/administer-cluster/kubelet-config-file).
+   ```
+   KUBELET_ARGS="--cluster-dns=10.254.0.10 --cluster-domain=kube.local --pod-manifest-path=/etc/kubelet.d/"
+   ```
+   or add the `staticPodPath: <the directory>` field in the
+   [kubelet configuration file](/docs/reference/config-api/kubelet-config.v1beta1/).
 -->
 3. 配置这个节点上的 kubelet，使用这个参数执行 `--pod-manifest-path=/etc/kubelet.d/`。
 在 Fedora 上编辑 `/etc/kubernetes/kubelet` 以包含下行：
@@ -161,16 +165,16 @@ For example, this is how to start a simple web server as a static Pod:
    ```
    KUBELET_ARGS="--cluster-dns=10.254.0.10 --cluster-domain=kube.local --pod-manifest-path=/etc/kubelet.d/"
    ```
-   或者在 [Kubelet配置文件](/zh/docs/tasks/administer-cluster/kubelet-config-file/)
+   或者在 [Kubelet 配置文件](/zh/docs/reference/config-api/kubelet-config.v1beta1/)
    中添加 `staticPodPath: <目录>`字段。
 
 <!--
-1. Restart the kubelet. On Fedora, you would run:
+4. Restart the kubelet. On Fedora, you would run:
 
-    ```shell
-    # Run this command on the node where the kubelet is running
-    systemctl restart kubelet
-    ```
+   ```shell
+   # Run this command on the node where the kubelet is running
+   systemctl restart kubelet
+   ```
 -->
 4. 重启 kubelet。Fedora 上使用下面的命令：
 
diff --git a/content/zh/docs/tasks/configure-pod-container/translate-compose-kubernetes.md b/content/zh/docs/tasks/configure-pod-container/translate-compose-kubernetes.md
index 23577048b2..8c5bb67da5 100644
--- a/content/zh/docs/tasks/configure-pod-container/translate-compose-kubernetes.md
+++ b/content/zh/docs/tasks/configure-pod-container/translate-compose-kubernetes.md
@@ -106,7 +106,7 @@ sudo yum -y install kompose
 {{% tab name="Fedora package" %}}
 
 <!--
-Kompose is in Fedora 24, 25 and 26 repositories. You can install it just like any other package.
+Kompose is in Fedora 24, 25 and 26 repositories. You can install it like any other package.
 -->
 Kompose 位于 Fedora 24、25 和 26 的代码仓库。你可以像安装其他软件包一样安装 Kompose。
 
@@ -135,7 +135,7 @@ brew install kompose
 ## 使用 Kompose
 
 <!--
-In just a few steps, we'll take you from Docker Compose to Kubernetes. All
+In a few steps, we'll take you from Docker Compose to Kubernetes. All
 you need is an existing `docker-compose.yml` file.
 -->
 再需几步，我们就把你从 Docker Compose 带到 Kubernetes。

From ef49d6613974d6dfc9f078cd71121239a7df2e96 Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Tue, 18 May 2021 15:35:20 +0800
Subject: [PATCH 770/788] [zh]Resync tasks files[7]

---
 .../configure-pod-container/configure-gmsa.md |  2 +-
 .../configure-pod-configmap.md                |  9 +++++++
 .../configure-service-account.md              | 26 +++++++++----------
 .../pull-image-private-registry.md            | 10 ++++---
 4 files changed, 28 insertions(+), 19 deletions(-)

diff --git a/content/zh/docs/tasks/configure-pod-container/configure-gmsa.md b/content/zh/docs/tasks/configure-pod-container/configure-gmsa.md
index 95a80ea123..3687f9b918 100644
--- a/content/zh/docs/tasks/configure-pod-container/configure-gmsa.md
+++ b/content/zh/docs/tasks/configure-pod-container/configure-gmsa.md
@@ -479,7 +479,7 @@ If you add the `lifecycle` section show above to your Pod spec, the Pod will exe
 
 <!--
 ## GMSA limitations
-When using the [ContainerD runtime for Windows](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#cri-containerd) accessing restricted network shares via the GMSA domain identity fails. The container will recieve the identity of and calls from `nltest.exe /query` will work.  It is recommended to use the [Docker EE runtime](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#docker-ee) if access to network shares is required.  The Windows Server team is working on resolving the issue in the Windows Kernel and will release a patch to resolve this issue in the future. Look for updates on the [Microsoft Windows Containers issue tracker](https://github.com/microsoft/Windows-Containers/issues/44).
+When using the [ContainerD runtime for Windows](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#cri-containerd) accessing restricted network shares via the GMSA domain identity fails. The container will receive the identity of and calls from `nltest.exe /query` will work.  It is recommended to use the [Docker EE runtime](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#docker-ee) if access to network shares is required.  The Windows Server team is working on resolving the issue in the Windows Kernel and will release a patch to resolve this issue in the future. Look for updates on the [Microsoft Windows Containers issue tracker](https://github.com/microsoft/Windows-Containers/issues/44).
 -->
 ## GMSA 的局限  {#gmsa-limitations}
 
diff --git a/content/zh/docs/tasks/configure-pod-container/configure-pod-configmap.md b/content/zh/docs/tasks/configure-pod-container/configure-pod-configmap.md
index 2399e89ad7..ddbf118dbc 100644
--- a/content/zh/docs/tasks/configure-pod-container/configure-pod-configmap.md
+++ b/content/zh/docs/tasks/configure-pod-container/configure-pod-configmap.md
@@ -293,8 +293,17 @@ how.nice.to.look=fairlyNice
 ```
 
 <!--
+When `kubectl` creates a ConfigMap from inputs that are not ASCII or UTF-8, the tool puts these into the `binaryData` field of the ConfigMap, and not in `data`. Both text and binary data sources can be combined in one ConfigMap.
+If you want to view the `binaryData` keys (and their values) in a ConfigMap, you can run `kubectl get configmap -o jsonpath='{.binaryData}' <name>`.
+
 Use the option `--from-env-file` to create a ConfigMap from an env-file, for example:
 -->
+当 `kubectl` 基于非 ASCII 或 UTF-8 的输入创建 ConfigMap 时，
+该工具将这些输入放入 ConfigMap 的 `binaryData` 字段，而不是 `data` 中。
+同一个 ConfigMap 中可同时包含文本数据和二进制数据源。
+如果你想查看 ConfigMap 中的 `binaryData` 键（及其值），
+你可以运行 `kubectl get configmap -o jsonpath='{.binaryData}' <name>`。
+
 使用 `--from-env-file` 选项从环境文件创建 ConfigMap，例如：
 
 <!--
diff --git a/content/zh/docs/tasks/configure-pod-container/configure-service-account.md b/content/zh/docs/tasks/configure-pod-container/configure-service-account.md
index 4c33eee483..aba366f47e 100644
--- a/content/zh/docs/tasks/configure-pod-container/configure-service-account.md
+++ b/content/zh/docs/tasks/configure-pod-container/configure-service-account.md
@@ -190,7 +190,7 @@ then you will see that a token has automatically been created and is referenced
 
 You may use authorization plugins to [set permissions on service accounts](/docs/reference/access-authn-authz/rbac/#service-account-permissions).
 
-To use a non-default service account, simply set the `spec.serviceAccountName`
+To use a non-default service account, set the `spec.serviceAccountName`
 field of a pod to the name of the service account you wish to use.
 -->
 那么你就能看到系统已经自动创建了一个令牌并且被服务账户所引用。
@@ -198,7 +198,7 @@ field of a pod to the name of the service account you wish to use.
 你可以使用授权插件来
 [设置服务账户的访问许可](/zh/docs/reference/access-authn-authz/rbac/#service-account-permissions)。
 
-要使用非默认的服务账户，只需简单的将 Pod 的 `spec.serviceAccountName` 字段设置为你想用的服务账户名称。
+要使用非默认的服务账户，将 Pod 的 `spec.serviceAccountName` 字段设置为你想用的服务账户名称。
 
 <!--
 The service account has to exist at the time the pod is created, or it will be rejected.
@@ -489,18 +489,15 @@ The application is responsible for reloading the token when it rotates. Periodic
 -->
 ## 发现服务账号分发者
 
-{{< feature-state for_k8s_version="v1.20" state="beta" >}}
+{{< feature-state for_k8s_version="v1.21" state="stable" >}}
 
 <!--
-The Service Account Issuer Discovery feature is enabled by enabling the
-`ServiceAccountIssuerDiscovery` [feature gate](/docs/reference/command-line-tools-reference/feature-gates)
-and then enabling the Service Account Token Projection feature as described
+The Service Account Issuer Discovery feature is enabled when the Service Account
+Token Projection feature is enabled, as described
 [above](#service-account-token-volume-projection).
 -->
-通过启用 `ServiceAccountIssuerDiscovery`
-[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates)，
-并按[前文所述](#service-account-token-volume-projection)启用服务账号令牌投射，
-可以启用发现服务账号分发者（Service Account Issuer Discovery）这一功能特性。
+当启用服务账号令牌投射时启用发现服务账号分发者（Service Account Issuer Discovery）这一功能特性，
+如[上文所述](#service-account-token-volume-projection)。
 
 <!--
 The issuer URL must comply with the
@@ -542,14 +539,15 @@ JSON Web Key Set（JWKS）。
 这里的 OpenID 提供者配置有时候也被称作 _发现文档（Discovery Document）_。
 
 <!--
-When enabled, the cluster is also configured with a default RBAC ClusterRole
-called `system:service-account-issuer-discovery`. No role bindings are provided
+Clusters include a default RBAC ClusterRole called
+`system:service-account-issuer-discovery`. No role bindings are provided
 by default. Administrators may, for example, choose whether to bind the role to
 `system:authenticated` or `system:unauthenticated` depending on their security
 requirements and which external systems they intend to federate with.
 -->
-特性被启用时，集群也会配置名为 `system:service-account-issuer-discovery`
-的默认 RBAC ClusterRole，但默认情况下不提供角色绑定对象。
+集群包括一个默认的 RBAC ClusterRole，
+名为 `system:service-account-issuer-discovery`。
+默认情况下不提供角色绑定对象。
 举例而言，管理员可以根据其安全性需要以及期望集成的外部系统选择是否将该角色绑定到
 `system:authenticated` 或 `system:unauthenticated`。
 
diff --git a/content/zh/docs/tasks/configure-pod-container/pull-image-private-registry.md b/content/zh/docs/tasks/configure-pod-container/pull-image-private-registry.md
index f9e4389762..6ddd85537b 100644
--- a/content/zh/docs/tasks/configure-pod-container/pull-image-private-registry.md
+++ b/content/zh/docs/tasks/configure-pod-container/pull-image-private-registry.md
@@ -109,7 +109,8 @@ kubectl create secret docker-registry regcred \
 <!--
 where:
 
-* `<your-registry-server>` is your Private Docker Registry FQDN. (https://index.docker.io/v1/ for DockerHub)
+* `<your-registry-server>` is your Private Docker Registry FQDN.
+  Use `https://index.docker.io/v2/` for DockerHub.
 * `<your-name>` is your Docker username.
 * `<your-pword>` is your Docker password.
 * `<your-email>` is your Docker email.
@@ -119,7 +120,7 @@ You have successfully set your Docker credentials in the cluster as a Secret cal
 在这里：
 
 * `<your-registry-server>` 是你的私有 Docker 仓库全限定域名（FQDN）。
-  (参考 https://index.docker.io/v1/ 中关于 DockerHub 的部分)
+  DockerHub 使用 `https://index.docker.io/v2/`。
 * `<your-name>` 是你的 Docker 用户名。
 * `<your-pword>` 是你的 Docker 密码。
 * `<your-email>` 是你的 Docker 邮箱。
@@ -129,7 +130,7 @@ You have successfully set your Docker credentials in the cluster as a Secret cal
 <!--
 ## Inspecting the Secret `regcred`
 
-To understand the contents of the `regcred` Secret you just created, start by viewing the Secret in YAML format:
+To understand the contents of the `regcred` Secret you created, start by viewing the Secret in YAML format:
 -->
 ## 检查 Secret `regcred`
 
@@ -231,7 +232,8 @@ janedoe/jdoe-private:v1
 
 <!--
 To pull the image from the private registry, Kubernetes needs credentials.
-The `imagePullSecrets` field in the configuration file specifies that Kubernetes should get the credentials from a Secret named `regcred`.
+The `imagePullSecrets` field in the configuration file specifies that
+Kubernetes should get the credentials from a Secret named `regcred`.
 
 Create a Pod that uses your Secret, and verify that the Pod is running:
 -->

From 1b0151039eac13b81cae8511ee952e21ee3bd54f Mon Sep 17 00:00:00 2001
From: caodonghui <caodonghui_123@163.com>
Date: Tue, 18 May 2021 17:15:31 +0800
Subject: [PATCH 771/788] [zh]Resync tasks files[6]

---
 .../kustomization.md                          | 233 ++++++++++++++++--
 1 file changed, 219 insertions(+), 14 deletions(-)

diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
index 07cda09588..605e9113fe 100644
--- a/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -43,9 +43,9 @@ kubectl apply -k <kustomization_directory>
 ## {{% heading "prerequisites" %}}
 
 <!--
-Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+Install [`kubectl`](/docs/tasks/tools/).
 -->
-安装 [`kubectl`](/zh/docs/tasks/tools/install-kubectl/).
+安装 [`kubectl`](/zh/docs/tasks/tools/).
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
@@ -132,6 +132,57 @@ metadata:
   name: example-configmap-1-8mbdf7882g
 ```
 
+<!--
+To generate a ConfigMap from an env file, add an entry to the `envs` list in `configMapGenerator`. Here is an example of generating a ConfigMap with a data item from a `.env` file:
+-->
+要从 env 文件生成 ConfigMap，请在 `configMapGenerator` 中的 `envs` 列表中添加一个条目。
+下面是一个用来自 `.env` 文件的数据生成 ConfigMap 的例子：
+
+```shell
+# 创建一个 .env 文件
+cat <<EOF >.env
+FOO=Bar
+EOF
+
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: example-configmap-1
+  envs:
+  - .env
+EOF
+```
+
+<!--
+The generated ConfigMap can be examined with the following command:
+-->
+可以使用以下命令检查生成的 ConfigMap：
+
+```shell
+kubectl kustomize ./
+```
+
+<!--
+The generated ConfigMap is:
+-->
+生成的 ConfigMap 为：
+
+```yaml
+apiVersion: v1
+data:
+  FOO=Bar
+kind: ConfigMap
+metadata:
+  name: example-configmap-1-8mbdf7882g
+```
+
+<!--
+Each variable in the `.env` file becomes a separate key in the ConfigMap that you generate. This is different from the previous example which embeds a file named `.properties` (and all its entries) as the value for a single key.
+-->
+{{< note >}}
+`.env` 文件中的每个变量在生成的 ConfigMap 中成为一个单独的键。
+这与之前的示例不同，前一个示例将一个名为 `.properties` 的文件（及其所有条目）嵌入到同一个键的值中。
+{{< /note >}}
+
 <!--
 ConfigMaps can also be generated from literal key-value pairs. To generate a ConfigMap from a literal key-value pair, add an entry to the `literals` list in configMapGenerator. Here is an example of generating a ConfigMap with a data item from a key-value pair:
 -->
@@ -171,6 +222,110 @@ metadata:
   name: example-configmap-2-g2hdhfc6tk
 ```
 
+<!--
+To use a generated ConfigMap in a Deployment, reference it by the name of the configMapGenerator. Kustomize will automatically replace this name with the generated name.
+
+This is an example deployment that uses a generated ConfigMap:
+-->
+要在 Deployment 中使用生成的 ConfigMap，使用 configMapGenerator 的名称对其进行引用。
+Kustomize 将自动使用生成的名称替换该名称。
+
+这是使用生成的 ConfigMap 的 deployment 示例：
+
+```yaml
+# 创建一个 application.properties 文件
+cat <<EOF >application.properties
+FOO=Bar
+EOF
+
+cat <<EOF >deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-app
+  labels:
+    app: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - name: app
+        image: my-app
+        volumeMount:
+        - name: config
+          mountPath: /config
+      volumes:
+      - name: config
+        configMap:
+          name: example-configmap-1
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+configMapGenerator:
+- name: example-configmap-1
+  files:
+  - application.properties
+EOF
+```
+
+<!--
+Generate the ConfigMap and Deployment:
+-->
+生成 ConfigMap 和 Deployment：
+
+```shell
+kubectl kustomize ./
+```
+
+<!--
+The generated Deployment will refer to the generated ConfigMap by name:
+-->
+生成的 Deployment 将通过名称引用生成的 ConfigMap：
+
+```yaml
+apiVersion: v1
+data:
+  application.properties: |
+    FOO=Bar
+kind: ConfigMap
+metadata:
+  name: example-configmap-1-g4hk9g2ff8
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: my-app
+  name: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - image: my-app
+        name: app
+        volumeMount:
+        - mountPath: /config
+          name: config
+      volumes:
+      - configMap:
+          name: example-configmap-1-g4hk9g2ff8
+        name: config
+```
+
 #### secretGenerator
 
 <!--
@@ -242,6 +397,56 @@ metadata:
 type: Opaque
 ```
 
+<!--
+Like ConfigMaps, generated Secrets can be used in Deployments by refering to the name of the secretGenerator:
+-->
+与 ConfigMaps 一样，生成的 Secrets 可以通过引用 secretGenerator 的名称在部署中使用：
+
+```shell
+# 创建一个 password.txt 文件
+cat <<EOF >./password.txt
+username=admin
+password=secret
+EOF
+
+cat <<EOF >deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-app
+  labels:
+    app: my-app
+spec:
+  selector:
+    matchLabels:
+      app: my-app
+  template:
+    metadata:
+      labels:
+        app: my-app
+    spec:
+      containers:
+      - name: app
+        image: my-app
+        volumeMount:
+        - name: password
+          mountPath: /secrets
+      volumes:
+      - name: password
+        secret:
+          secretName: example-secret-1
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+secretGenerator:
+- name: example-secret-1
+  files:
+  - password.txt
+EOF
+```
+
 #### generatorOptions
 
 <!--
@@ -1023,14 +1228,14 @@ deployment.apps "dev-my-nginx" deleted
 | commonLabels          | map[string]string                                                                                            | labels to add to all resources and selectors                                       |
 | commonAnnotations     | map[string]string                                                                                            | annotations to add to all resources                                                |
 | resources             | []string                                                                                                     | each entry in this list must resolve to an existing resource configuration file    |
-| configmapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L99)  | Each entry in this list generates a ConfigMap                                      |
-| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L106)     | Each entry in this list generates a Secret                                         |
-| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L109) | Modify behaviors of all ConfigMap and Secret generator                             |
+| configMapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/configmapargs.go#L7)    | Each entry in this list generates a ConfigMap                                      |
+| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/secretargs.go#L7)          | Each entry in this list generates a Secret                                         |
+| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/generatoroptions.go#L7) | Modify behaviors of all ConfigMap and Secret generator                             |
 | bases                 | []string                                                                                                     | Each entry in this list should resolve to a directory containing a kustomization.yaml file |
 | patchesStrategicMerge | []string                                                                                                     | Each entry in this list should resolve a strategic merge patch of a Kubernetes object |
-| patchesJson6902       | [][Json6902](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/patchjson6902.go#L8)             | Each entry in this list should resolve to a Kubernetes object and a Json Patch     |
-| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L31)                       | Each entry is to capture text from one resource's field                            |
-| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go#L23)                   | Each entry is to modify the name, tags and/or digest for one image without creating patches |
+| patchesJson6902       | [][Patch](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/patch.go#L10)                   | Each entry in this list should resolve to a Kubernetes object and a Json Patch     |
+| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L19)                       | Each entry is to capture text from one resource's field                            |
+| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/image.go#L8)                    | Each entry is to modify the name, tags and/or digest for one image without creating patches |
 | configurations        | []string                                                                                                     | Each entry in this list should resolve to a file containing [Kustomize transformer configurations](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs) |
 | crds                  | []string                                                                                                     | Each entry in this list should resolve to an OpenAPI definition file for Kubernetes types |
 -->
@@ -1043,14 +1248,14 @@ deployment.apps "dev-my-nginx" deleted
 | commonLabels          | map[string]string                                                                                            | 要添加到所有资源和选择算符的标签                                       |
 | commonAnnotations     | map[string]string                                                                                            | 要添加到所有资源的注解                                                |
 | resources             | []string                                                                                                     | 列表中的每个条目都必须能够解析为现有的资源配置文件    |
-| configmapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L99)  | 列表中的每个条目都会生成一个 ConfigMap                                      |
-| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L106)     | 列表中的每个条目都会生成一个 Secret                                         |
-| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L109) | 更改所有 ConfigMap 和 Secret 生成器的行为 |
+| configMapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/configmapargs.go#L7)    | 列表中的每个条目都会生成一个 ConfigMap                                      |
+| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/secretargs.go#L7)          | 列表中的每个条目都会生成一个 Secret                                         |
+| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/generatoroptions.go#L7) | 更改所有 ConfigMap 和 Secret 生成器的行为 |
 | bases                 | []string                                                                                                     | 列表中每个条目都应能解析为一个包含 kustomization.yaml 文件的目录 |
 | patchesStrategicMerge | []string                                                                                                     | 列表中每个条目都能解析为某 Kubernetes 对象的策略性合并补丁 |
-| patchesJson6902       | [][Json6902](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/patchjson6902.go#L8)             | 列表中每个条目都能解析为一个 Kubernetes 对象和一个 JSON 补丁 |
-| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L31)                       | 每个条目用来从某资源的字段来析取文字                            |
-| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go#L23)                   | 每个条目都用来更改镜像的名称、标记与/或摘要，不必生成补丁 |
+| patchesJson6902       | [][Patch](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/patch.go#L10)                   | 列表中每个条目都能解析为一个 Kubernetes 对象和一个 JSON 补丁 |
+| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L19)                       | 每个条目用来从某资源的字段来析取文字                            |
+| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/image.go#L8)                    | 每个条目都用来更改镜像的名称、标记与/或摘要，不必生成补丁 |
 | configurations        | []string                                                                                                     | 列表中每个条目都应能解析为一个包含 [Kustomize 转换器配置](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs) 的文件 |
 | crds                  | []string                                                                                                     | 列表中每个条目都赢能够解析为 Kubernetes 类别的 OpenAPI 定义文件 |
 

From 5dee7af9de63689103a3fa52e420bb7ec84c6d34 Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Sat, 15 May 2021 15:22:43 -0400
Subject: [PATCH 772/788] OWNERS: Update SIG Release content
 reviewers/approvers

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 OWNERS_ALIASES             | 13 ++++++++++---
 content/en/releases/OWNERS |  4 +++-
 data/releases/OWNERS       |  4 +++-
 3 files changed, 16 insertions(+), 5 deletions(-)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index c2cf44f242..2feb3cdb2d 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -233,7 +233,13 @@ aliases:
     - mrbobbytables
     - nikhita
     - parispittman
-  # authoritative source: git.k8s.io/release/OWNERS_ALIASES
+  # authoritative source: https://git.k8s.io/sig-release/OWNERS_ALIASES
+  sig-release-leads:
+    - hasheddan # SIG Technical Lead
+    - jeremyrickard # SIG Technical Lead
+    - justaugustus # SIG Chair
+    - LappleApple # SIG Program Manager
+    - saschagrunert # SIG Chair
   release-engineering-approvers:
     - cpanato # Release Manager
     - hasheddan # subproject owner / Release Manager
@@ -244,9 +250,10 @@ aliases:
   release-engineering-reviewers:
     - ameukam # Release Manager Associate
     - jimangel # Release Manager Associate
-    - markyjackson-taulia # Release Manager Associate
     - mkorbi # Release Manager Associate
+    - palnabarun # Release Manager Associate
     - onlydole # Release Manager Associate
     - sethmccombs # Release Manager Associate
+    - thejoycekung # Release Manager Associate
     - verolop # Release Manager Associate
-    - wilsonehusin # Release Manager Associate
\ No newline at end of file
+    - wilsonehusin # Release Manager Associate
diff --git a/content/en/releases/OWNERS b/content/en/releases/OWNERS
index bf258efe7c..25d2d0a271 100644
--- a/content/en/releases/OWNERS
+++ b/content/en/releases/OWNERS
@@ -9,7 +9,9 @@ reviewers:
 
 approvers:
   - sig-docs-en-owners
+  - sig-release-leads
   - release-engineering-approvers
 
 labels:
-- sig/release
\ No newline at end of file
+- sig/release
+- area/release-eng
diff --git a/data/releases/OWNERS b/data/releases/OWNERS
index bf258efe7c..25d2d0a271 100644
--- a/data/releases/OWNERS
+++ b/data/releases/OWNERS
@@ -9,7 +9,9 @@ reviewers:
 
 approvers:
   - sig-docs-en-owners
+  - sig-release-leads
   - release-engineering-approvers
 
 labels:
-- sig/release
\ No newline at end of file
+- sig/release
+- area/release-eng

From 8bdc23cf82ecc4f47c55349381cf3b5c9b28685e Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Sat, 15 May 2021 15:35:35 -0400
Subject: [PATCH 773/788] scripts: Allow SIG Release to approve changes to
 update-release-info

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 scripts/releng/OWNERS                       | 17 +++++++++++++++++
 scripts/{ => releng}/update-release-info.sh |  0
 2 files changed, 17 insertions(+)
 create mode 100644 scripts/releng/OWNERS
 rename scripts/{ => releng}/update-release-info.sh (100%)

diff --git a/scripts/releng/OWNERS b/scripts/releng/OWNERS
new file mode 100644
index 0000000000..25d2d0a271
--- /dev/null
+++ b/scripts/releng/OWNERS
@@ -0,0 +1,17 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# This is the directory for English source content.
+# Teams and members are visible at https://github.com/orgs/kubernetes/teams.
+
+reviewers:
+  - sig-docs-en-reviews
+  - release-engineering-reviewers
+
+approvers:
+  - sig-docs-en-owners
+  - sig-release-leads
+  - release-engineering-approvers
+
+labels:
+- sig/release
+- area/release-eng
diff --git a/scripts/update-release-info.sh b/scripts/releng/update-release-info.sh
similarity index 100%
rename from scripts/update-release-info.sh
rename to scripts/releng/update-release-info.sh

From 39796d148141728307f3bcdd5f7e149a596b80a3 Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Sat, 15 May 2021 15:49:41 -0400
Subject: [PATCH 774/788] releases: Canonicalize patch release information on
 k/website

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 content/en/releases/patch-releases.md | 28 ++++++++++-----------------
 scripts/releng/update-release-info.sh | 24 -----------------------
 2 files changed, 10 insertions(+), 42 deletions(-)

diff --git a/content/en/releases/patch-releases.md b/content/en/releases/patch-releases.md
index 4c4770377a..2a83cc5031 100644
--- a/content/en/releases/patch-releases.md
+++ b/content/en/releases/patch-releases.md
@@ -1,15 +1,7 @@
 ---
 title: Patch Releases
 type: docs
-auto_generated: true
 ---
-<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
-
-{{< warning >}}
-This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md).
-{{< /warning >}}
-
-# Kubernetes Patch Releases
 
 Schedule and team contact information for Kubernetes patch releases.
 
@@ -30,24 +22,24 @@ See the [Release Managers page][release-managers] for full contact details on th
 
 Please give us a business day to respond - we may be in a different timezone!
 
-In between releases the team is looking at incoming cherry-pick
+In between releases the team is looking at incoming cherry pick
 requests on a weekly basis.  The team will get in touch with
 submitters via GitHub PR, SIG channels in Slack, and direct messages
 in Slack and [email](mailto:release-managers-private@kubernetes.io)
 if there are questions on the PR.
 
-## Cherry-Picks
+## Cherry picks
 
-Please follow the [cherry-pick process].
+Please follow the [cherry pick process][cherry-picks].
 
-Cherry-picks must be merge-ready in GitHub with proper labels (eg:
-approved, lgtm, release note) and passing CI tests ahead of the
-cherry-pick deadline.  This is typically two days before the target
+Cherry picks must be merge-ready in GitHub with proper labels (e.g.,
+`approved`, `lgtm`, `release-note`) and passing CI tests ahead of the
+cherry pick deadline.  This is typically two days before the target
 release, but may be more.  Earlier PR readiness is better, as we
-need time to get CI signal after merging your cherry-picks ahead
+need time to get CI signal after merging your cherry picks ahead
 of the actual release.
 
-Cherry-pick PRs which miss merge criteria will be carried over and tracked
+Cherry pick PRs which miss merge criteria will be carried over and tracked
 for the next patch release.
 
 ## Support Period
@@ -189,7 +181,7 @@ These releases are no longer supported.
 | 1.3  | 1.3.10  | 2016-11-01 |
 | 1.2  | 1.2.7   | 2016-10-23 |
 
-[cherry-pick process]: https://git.k8s.io/community/contributors/devel/sig-release/cherry-picks.md
+[cherry-picks]: https://git.k8s.io/community/contributors/devel/sig-release/cherry-picks.md
 [release-managers]: /release-managers.md
-[release process description]: https://git.k8s.io/community/contributors/devel/sig-release/release.md
+[release process description]: /release.md
 [yearly-support]: https://git.k8s.io/enhancements/keps/sig-release/1498-kubernetes-yearly-support-period/README.md
diff --git a/scripts/releng/update-release-info.sh b/scripts/releng/update-release-info.sh
index 96846a3cf4..ba403c2b5a 100755
--- a/scripts/releng/update-release-info.sh
+++ b/scripts/releng/update-release-info.sh
@@ -1,24 +1,5 @@
 #!/usr/bin/env bash
 
-# patch-releases.md
-####################################
-cat << EOF > content/en/releases/patch-releases.md
----
-title: Patch Releases
-type: docs
-auto_generated: true
----
-<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
-
-{{< warning >}}
-This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md).
-{{< /warning >}}
-
-EOF
-
-curl --retry 3 https://raw.githubusercontent.com/kubernetes/sig-release/master/releases/patch-releases.md >> content/en/releases/patch-releases.md
-
-
 # release.md
 ####################################
 cat << EOF > content/en/releases/release.md
@@ -36,8 +17,3 @@ This content is auto-generated and links may not function. The source of the doc
 EOF
 
 curl --retry 3 https://raw.githubusercontent.com/kubernetes/community/master/contributors/devel/sig-release/release.md >> content/en/releases/release.md
-
-
-# schedule.yaml
-####################################
-curl --retry 3 https://raw.githubusercontent.com/kubernetes/sig-release/master/releases/schedule.yaml > data/releases/schedule.yaml

From a2c1fd76177718239a9bae7033fee3c6242d31c2 Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Sat, 15 May 2021 16:01:02 -0400
Subject: [PATCH 775/788] releases: Canonicalize Release Managers page on
 k/website

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 content/en/releases/release-managers.md | 207 ++++++++++++++++++++++++
 1 file changed, 207 insertions(+)
 create mode 100644 content/en/releases/release-managers.md

diff --git a/content/en/releases/release-managers.md b/content/en/releases/release-managers.md
new file mode 100644
index 0000000000..a248c14b24
--- /dev/null
+++ b/content/en/releases/release-managers.md
@@ -0,0 +1,207 @@
+---
+title: Release Managers
+type: docs
+---
+
+"Release Managers" is an umbrella term that encompasses the set of Kubernetes
+contributors responsible for maintaining release branches, tagging releases,
+and building/packaging Kubernetes.
+
+The responsibilities of each role are described below.
+
+- [Contact](#contact)
+- [Handbooks](#handbooks)
+- [Release Managers](#release-managers)
+  - [Becoming a Release Manager](#becoming-a-release-manager)
+- [Release Manager Associates](#release-manager-associates)
+  - [Becoming a Release Manager Associate](#becoming-a-release-manager-associate)
+- [Build Admins](#build-admins)
+- [SIG Release Leads](#sig-release-leads)
+  - [Chairs](#chairs)
+  - [Technical Leads](#technical-leads)
+
+## Contact
+
+| Mailing List | Slack | Visibility | Usage | Membership |
+| --- | --- | --- | --- | --- |
+| [release-managers@kubernetes.io](mailto:release-managers@kubernetes.io) | [#release-management](https://kubernetes.slack.com/messages/CJH2GBF7Y) (channel) / @release-managers (user group) | Public | Public discussion for Release Managers | All Release Managers (including Associates, Build Admins, and SIG Chairs) |
+| [release-managers-private@kubernetes.io](mailto:release-managers-private@kubernetes.io) | [#release-private](https://kubernetes.slack.com/messages/GKEA5EL67) | Private | Private discussion for privileged Release Managers | Release Managers, SIG Release leadership |
+| [security-release-team@kubernetes.io](mailto:security-release-team@kubernetes.io) | N/A | Private | Security release coordination with the Product Security Committee | [security-discuss-private@kubernetes.io](mailto:security-discuss-private@kubernetes.io), [release-managers-private@kubernetes.io](mailto:release-managers-private@kubernetes.io) |
+
+## Handbooks
+
+**NOTE: The Patch Release Team and Branch Manager handbooks will be deduplicated at a later date.**
+
+- [Patch Release Team](/release-engineering/role-handbooks/patch-release-team.md)
+- [Branch Managers](/release-engineering/role-handbooks/branch-manager.md)
+- [Build Admins](/release-engineering/packaging.md)
+
+## Release Managers
+
+**Note:** The documentation might refer to the Patch Release Team and the
+Branch Management role. Those two roles were consolidated into the
+Release Managers role.
+
+Minimum requirements for Release Managers and Release Manager Associates are:
+
+- Familiarity with basic Unix commands and able to debug shell scripts.
+- Familiarity with branched source code workflows via `git` and associated
+  `git` command line invocations.
+- General knowledge of Google Cloud (Cloud Build and Cloud Storage).
+- Open to seeking help and communicating clearly.
+- [Kubernetes Community Membership](https://github.com/kubernetes/community/blob/master/community-membership.md#member)
+
+Release Managers are responsible for:
+
+- Coordinating and cutting Kubernetes releases:
+  - Patch releases (`x.y.z`, where `z` > 0)
+  - Minor releases (`x.y.z`, where `z` = 0)
+  - Pre-releases (alpha, beta, and release candidates)
+  - Working with the [Release Team](/release-team/README.md) through each
+  release cycle
+  - Setting the [schedule and cadence for patch releases](/releases/patch-releases.md)
+- Maintaining the release branches:
+  - Reviewing cherry picks
+  - Ensuring the release branch stays healthy and that no unintended patch
+    gets merged
+- Mentoring the [Release Manager Associates](#associates) group
+- Actively developing features and maintaining the code in k/release
+- Supporting Release Manager Associates and contributors through actively
+  participating in the Buddy program
+  - Check in monthly with Associates and delegate tasks, empower them to cut
+    releases, and mentor
+  - Being available to support Associates in onboarding new contributors e.g.,
+    answering questions and suggesting appropriate work for them to do
+
+This team at times works in close conjunction with the
+[Product Security Committee][psc] and therefore should abide by the guidelines
+set forth in the [Security Release Process][security-release-process].
+
+GitHub Access Controls: [@kubernetes/release-managers](https://github.com/orgs/kubernetes/teams/release-managers)
+
+GitHub Mentions: [@kubernetes/release-engineering](https://github.com/orgs/kubernetes/teams/release-engineering)
+
+- Adolfo García Veytia ([@puerco](https://github.com/puerco))
+- Carlos Panato ([@cpanato](https://github.com/cpanato))
+- Daniel Mangum ([@hasheddan](https://github.com/hasheddan))
+- Marko Mudrinić ([@xmudrii](https://github.com/xmudrii))
+- Sascha Grunert ([@saschagrunert](https://github.com/saschagrunert))
+- Stephen Augustus ([@justaugustus](https://github.com/justaugustus))
+
+### Becoming a Release Manager
+
+To become a Release Manager, one must first serve as a Release Manager
+Associate. Associates graduate to Release Manager by actively working on
+releases over several cycles and:
+
+- demonstrating the willingness to lead
+- tag-teaming with Release Managers on patches, to eventually cut a release
+  independently
+  - because releases have a limiting function, we also consider substantial
+    contributions to image promotion and other core Release Engineering tasks
+- questioning how Associates work, suggesting improvements, gathering feedback,
+  and driving change
+- being reliable and responsive
+- leaning into advanced work that requires Release Manager-level access and
+  privileges to complete
+
+## Release Manager Associates
+
+Release Manager Associates are apprentices to the Release Managers, formerly
+referred to as Release Manager shadows. They are responsible for:
+
+- Patch release work, cherry pick review
+- Contributing to k/release: updating dependencies and getting used to the
+  source codebase
+- Contributing to the documentation: maintaining the handbooks, ensuring that
+  release processes are documented
+- With help from a release manager: working with the Release Team during the
+  release cycle and cutting Kubernetes releases
+- Seeking opportunities to help with prioritization and communication
+  - Sending out pre-announcements and updates about patch releases
+  - Updating the calendar, helping with the release dates and milestones from
+  the [release cycle Timeline](https://github.com/kubernetes/sig-release/tree/master/releases)
+- Through the Buddy program, onboarding new contributors and pairing up with
+  them on tasks
+
+GitHub Mentions: @kubernetes/release-engineering
+
+- Arnaud Meukam ([@ameukam](https://github.com/ameukam))
+- Jim Angel ([@jimangel](https://github.com/jimangel))
+- Joyce Kung ([@thejoycekung](https://github.com/thejoycekung))
+- Marky Jackson ([@markyjackson-taulia](https://github.com/markyjackson-taulia))
+- Max Körbächer ([@mkorbi](https://github.com/mkorbi))
+- Nabarun Pal ([@palnabarun](https://github.com/palnabarun))
+- Seth McCombs ([@sethmccombs](https://github.com/sethmccombs))
+- Taylor Dolezal ([@onlydole](https://github.com/onlydole))
+- Verónica López ([@verolop](https://github.com/verolop))
+- Wilson Husin ([@wilsonehusin](https://github.com/wilsonehusin))
+
+### Becoming a Release Manager Associate
+
+Contributors can become Associates by demonstrating the following:
+
+- consistent participation, including 6-12 months of active release
+  engineering-related work
+- experience fulfilling a technical lead role on the Release Team during a
+  release cycle
+  - this experience provides a solid baseline for understanding how SIG Release
+    works overall—including our expectations regarding technical skills,
+    communications/responsiveness, and reliability
+- working on k/release items that improve our interactions with Testgrid,
+  cleaning up libraries, etc.
+  - these efforts require interacting and pairing with Release Managers and
+    Associates
+
+## Build Admins
+
+Build Admins are (currently) Google employees with the requisite access to
+Google build systems/tooling to publish deb/rpm packages on behalf of the
+Kubernetes project. They are responsible for:
+
+- Building, signing, and publishing the deb/rpm packages
+- Being the interlock with Release Managers (and Associates) on the final steps
+of each minor (1.Y) and patch (1.Y.Z) release
+
+GitHub team: [@kubernetes/build-admins](https://github.com/orgs/kubernetes/teams/build-admins)
+
+- Aaron Crickenberger ([@spiffxp](https://github.com/spiffxp))
+- Amit Watve ([@amwat](https://github.com/amwat))
+- Benjamin Elder ([@BenTheElder](https://github.com/BenTheElder))
+- Grant McCloskey ([@MushuEE](https://github.com/MushuEE))
+
+## SIG Release Leads
+
+SIG Release Chairs and Technical Leads are responsible for:
+
+- The governance of SIG Release
+- Leading knowledge exchange sessions for Release Managers and Associates
+- Coaching on leadership and prioritization
+
+They are mentioned explicitly here as they are owners of the various
+communications channels and permissions groups (GitHub teams, GCP access) for
+each role. As such, they are highly privileged community members and privy to
+some private communications, which can at times relate to Kubernetes security
+disclosures.
+
+GitHub team: [@kubernetes/sig-release-leads](https://github.com/orgs/kubernetes/teams/sig-release-leads)
+
+### Chairs
+
+- Sascha Grunert ([@saschagrunert](https://github.com/saschagrunert))
+- Stephen Augustus ([@justaugustus](https://github.com/justaugustus))
+
+### Technical Leads
+
+- Daniel Mangum ([@hasheddan](https://github.com/hasheddan))
+- Jeremy Rickard ([@jeremyrickard](https://github.com/jeremyrickard))
+- Jorge Alarcon ([@alejandrox1](https://github.com/alejandrox1))
+
+---
+
+Past Branch Managers, can be found in the [releases directory](/releases)
+within `release-x.y/release_team.md`.
+Example: [1.15 Release Team](/releases/release-1.15/release_team.md)
+
+[psc]: https://git.k8s.io/community/committee-product-security/README.md
+[security-release-process]: https://git.k8s.io/security/security-release-process.md

From 5da03f2aeecc727397d2cf73917b2e83372f9f7f Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Sat, 15 May 2021 16:08:11 -0400
Subject: [PATCH 776/788] release-managers: Update personnel

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 content/en/releases/release-managers.md | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/en/releases/release-managers.md b/content/en/releases/release-managers.md
index a248c14b24..56c4ab4b63 100644
--- a/content/en/releases/release-managers.md
+++ b/content/en/releases/release-managers.md
@@ -129,7 +129,6 @@ GitHub Mentions: @kubernetes/release-engineering
 - Arnaud Meukam ([@ameukam](https://github.com/ameukam))
 - Jim Angel ([@jimangel](https://github.com/jimangel))
 - Joyce Kung ([@thejoycekung](https://github.com/thejoycekung))
-- Marky Jackson ([@markyjackson-taulia](https://github.com/markyjackson-taulia))
 - Max Körbächer ([@mkorbi](https://github.com/mkorbi))
 - Nabarun Pal ([@palnabarun](https://github.com/palnabarun))
 - Seth McCombs ([@sethmccombs](https://github.com/sethmccombs))
@@ -195,7 +194,6 @@ GitHub team: [@kubernetes/sig-release-leads](https://github.com/orgs/kubernetes/
 
 - Daniel Mangum ([@hasheddan](https://github.com/hasheddan))
 - Jeremy Rickard ([@jeremyrickard](https://github.com/jeremyrickard))
-- Jorge Alarcon ([@alejandrox1](https://github.com/alejandrox1))
 
 ---
 

From a0ef54f24d3917e29ba344f0aaa594347795594a Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Sat, 15 May 2021 16:25:50 -0400
Subject: [PATCH 777/788] release-managers: Link cleanup

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 content/en/releases/release-managers.md | 30 ++++++++++++++++---------
 1 file changed, 19 insertions(+), 11 deletions(-)

diff --git a/content/en/releases/release-managers.md b/content/en/releases/release-managers.md
index 56c4ab4b63..a7a282ae87 100644
--- a/content/en/releases/release-managers.md
+++ b/content/en/releases/release-managers.md
@@ -30,11 +30,11 @@ The responsibilities of each role are described below.
 
 ## Handbooks
 
-**NOTE: The Patch Release Team and Branch Manager handbooks will be deduplicated at a later date.**
+**NOTE: The Patch Release Team and Branch Manager handbooks will be de-duplicated at a later date.**
 
-- [Patch Release Team](/release-engineering/role-handbooks/patch-release-team.md)
-- [Branch Managers](/release-engineering/role-handbooks/branch-manager.md)
-- [Build Admins](/release-engineering/packaging.md)
+- [Patch Release Team][handbook-patch-release]
+- [Branch Managers][handbook-branch-mgmt]
+- [Build Admins][handbook-packaging]
 
 ## Release Managers
 
@@ -49,7 +49,7 @@ Minimum requirements for Release Managers and Release Manager Associates are:
   `git` command line invocations.
 - General knowledge of Google Cloud (Cloud Build and Cloud Storage).
 - Open to seeking help and communicating clearly.
-- [Kubernetes Community Membership](https://github.com/kubernetes/community/blob/master/community-membership.md#member)
+- Kubernetes Community [membership][community-membership]
 
 Release Managers are responsible for:
 
@@ -57,9 +57,9 @@ Release Managers are responsible for:
   - Patch releases (`x.y.z`, where `z` > 0)
   - Minor releases (`x.y.z`, where `z` = 0)
   - Pre-releases (alpha, beta, and release candidates)
-  - Working with the [Release Team](/release-team/README.md) through each
+  - Working with the [Release Team][release-team] through each
   release cycle
-  - Setting the [schedule and cadence for patch releases](/releases/patch-releases.md)
+  - Setting the [schedule and cadence for patch releases][patches]
 - Maintaining the release branches:
   - Reviewing cherry picks
   - Ensuring the release branch stays healthy and that no unintended patch
@@ -120,7 +120,7 @@ referred to as Release Manager shadows. They are responsible for:
 - Seeking opportunities to help with prioritization and communication
   - Sending out pre-announcements and updates about patch releases
   - Updating the calendar, helping with the release dates and milestones from
-  the [release cycle Timeline](https://github.com/kubernetes/sig-release/tree/master/releases)
+    the [release cycle timeline][k-sig-release-releases]
 - Through the Buddy program, onboarding new contributors and pairing up with
   them on tasks
 
@@ -197,9 +197,17 @@ GitHub team: [@kubernetes/sig-release-leads](https://github.com/orgs/kubernetes/
 
 ---
 
-Past Branch Managers, can be found in the [releases directory](/releases)
-within `release-x.y/release_team.md`.
-Example: [1.15 Release Team](/releases/release-1.15/release_team.md)
+Past Branch Managers, can be found in the [releases directory][k-sig-release-releases]
+of the kubernetes/sig-release repository within `release-x.y/release_team.md`.
 
+Example: [1.15 Release Team](https://git.k8s.io/sig-release/releases/release-1.15/release_team.md)
+
+[community-membership]: https://git.k8s.io/community/community-membership.md#member
+[handbook-branch-mgmt]: https://git.k8s.io/sig-release/release-engineering/role-handbooks/branch-manager.md
+[handbook-packaging]: https://git.k8s.io/sig-release/release-engineering/packaging.md
+[handbook-patch-release]: https://git.k8s.io/sig-release/release-engineering/role-handbooks/patch-release-team.md
+[k-sig-release-releases]: https://git.k8s.io/sig-release/releases
+[patches]: /patch-releases.md
 [psc]: https://git.k8s.io/community/committee-product-security/README.md
+[release-team]: https://git.k8s.io/sig-release/release-team/README.md
 [security-release-process]: https://git.k8s.io/security/security-release-process.md

From 006fbf6486c8270ceacd3094e484889940085a09 Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Sat, 15 May 2021 16:32:57 -0400
Subject: [PATCH 778/788] patch-releases: Update cycle after May releases and
 EOL 1.18

Signed-off-by: Stephen Augustus <foo@auggie.dev>
Co-authored-by: Carlos Panato <ctadeu@gmail.com>
---
 content/en/releases/patch-releases.md | 35 +++++----------------------
 data/releases/schedule.yaml           | 27 ++++++++++++++-------
 2 files changed, 24 insertions(+), 38 deletions(-)

diff --git a/content/en/releases/patch-releases.md b/content/en/releases/patch-releases.md
index 2a83cc5031..85951742ab 100644
--- a/content/en/releases/patch-releases.md
+++ b/content/en/releases/patch-releases.md
@@ -78,9 +78,10 @@ releases may also occur in between these.
 
 | Monthly Patch Release | Target date |
 | --- | --- |
-| May 2021 | 2021-05-12 |
 | June 2021 | 2021-06-16 |
 | July 2021 | 2021-07-14 |
+| August 2021 | 2021-08-11 |
+| September 2021 | 2021-09-15 |
 
 ## Detailed Release History for Active Branches
 
@@ -92,6 +93,7 @@ End of Life for **1.21** is **2022-06-28**
 
 | PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
 |--- |--- |--- |
+| 1.21.2        | 2021-06-12           | 2021-06-16  |
 | 1.21.1        | 2021-05-07           | 2021-05-12  |
 
 ### 1.20
@@ -102,6 +104,7 @@ End of Life for **1.20** is **2022-02-28**
 
 | PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
 |--- |--- |--- |
+| 1.20.8        | 2021-06-12           | 2021-06-16  |
 | 1.20.7        | 2021-05-07           | 2021-05-12  |
 | 1.20.6        | 2021-04-09           | 2021-04-14  |
 | 1.20.5        | 2021-03-12           | 2021-03-17  |
@@ -118,6 +121,7 @@ End of Life for **1.19** is **2021-10-28**
 
 | PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
 |--- |--- |--- |
+| 1.19.12       | 2021-06-12           | 2021-06-16  |
 | 1.19.11       | 2021-05-07           | 2021-05-12  |
 | 1.19.10       | 2021-04-09           | 2021-04-14  |
 | 1.19.9        | 2021-03-12           | 2021-03-17  |
@@ -130,40 +134,13 @@ End of Life for **1.19** is **2021-10-28**
 | 1.19.2        | 2020-09-11           | 2020-09-16  |
 | 1.19.1        | 2020-09-04           | 2020-09-09  |
 
-### 1.18
-
-**1.18** enters maintenance mode on **2021-04-28**
-
-End of Life for **1.18** is **2021-05-12**
-
-| PATCH RELEASE | CHERRY PICK DEADLINE | TARGET DATE |
-|--- |--- |--- |
-| 1.18.19       | 2021-05-07           | 2021-05-12  |
-| 1.18.18       | 2021-04-09           | 2021-04-14  |
-| 1.18.17       | 2021-03-12           | 2021-03-17  |
-| 1.18.16       | 2021-02-12           | 2021-02-17  |
-| 1.18.15       | 2021-01-08           | 2021-01-13  |
-| 1.18.14       | [Tagging Issue](https://groups.google.com/g/kubernetes-dev/c/dNH2yknlCBA) | 2020-12-18  |
-| 1.18.13       | 2020-12-04           | 2020-12-09  |
-| 1.18.12       | N/A                  | 2020-11-12  |
-| 1.18.11       | [No-op release](https://groups.google.com/g/kubernetes-dev/c/nJix1xLQvZE) | 2020-11-11  |
-| 1.18.10       | 2020-10-09           | 2020-10-14  |
-| 1.18.9        | 2020-09-11           | 2020-09-16  |
-| 1.18.8        | N/A                  | 2020-08-13  |
-| 1.18.7        | 2020-08-07           | 2020-08-12  |
-| 1.18.6        | 2020-07-10           | 2020-07-15  |
-| 1.18.5        | 2020-06-25           | 2020-06-26  |
-| 1.18.4        | 2020-06-12           | 2020-06-17  |
-| 1.18.3        | 2020-05-15           | 2020-05-20  |
-| 1.18.2        | 2020-04-13           | 2020-04-16  |
-| 1.18.1        | 2020-04-06           | 2020-04-08  |
-
 ## Non-Active Branch History
 
 These releases are no longer supported.
 
 | Minor Version | Final Patch Release | EOL date |
 | --- | --- | --- |
+| 1.18 | 1.18.19 | 2021-05-12 |
 | 1.17 | 1.17.17 | 2021-01-13 |
 | 1.16 | 1.16.15 | 2020-09-02 |
 | 1.15 | 1.15.12 | 2020-05-06 |
diff --git a/data/releases/schedule.yaml b/data/releases/schedule.yaml
index aa0d0ae546..6b2c3c1a8f 100644
--- a/data/releases/schedule.yaml
+++ b/data/releases/schedule.yaml
@@ -1,16 +1,22 @@
 schedules:
 - release: 1.21
-  next: 1.21.1
-  cherryPickDeadline: 2021-05-07
-  targetDate: 2021-05-12
+  next: 1.21.2
+  cherryPickDeadline: 2021-06-12
+  targetDate: 2021-06-16
   endOfLifeDate: 2022-04-30
   previousPatches:
+    - release: 1.21.1
+      cherryPickDeadline: 2021-05-07
+      targetDate: 2021-05-12
 - release: 1.20
-  next: 1.20.7
-  cherryPickDeadline: 2021-05-07
-  targetDate: 2021-05-12
+  next: 1.20.8
+  cherryPickDeadline: 2021-06-12
+  targetDate: 2021-06-16
   endOfLifeDate: 2021-12-30
   previousPatches:
+    - release: 1.20.7
+      cherryPickDeadline: 2021-05-07
+      targetDate: 2021-05-12
     - release: 1.20.6
       cherryPickDeadline: 2021-04-09
       targetDate: 2021-04-14
@@ -30,11 +36,14 @@ schedules:
       cherryPickDeadline: "Tagging Issue https://groups.google.com/g/kubernetes-dev/c/dNH2yknlCBA"
       targetDate: 2020-12-18
 - release: 1.19
-  next: 1.19.11
-  cherryPickDeadline: 2021-05-07
-  targetDate: 2021-05-12
+  next: 1.19.12
+  cherryPickDeadline: 2021-06-12
+  targetDate: 2021-06-16
   endOfLifeDate: 2021-09-30
   previousPatches:
+    - release: 1.19.11
+      cherryPickDeadline: 2021-05-07
+      targetDate: 2021-05-12
     - release: 1.19.10
       cherryPickDeadline: 2021-04-09
       targetDate: 2021-04-14

From 5bcadad345bc88acf84be7bb89dcefeebfd9f13a Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Wed, 19 May 2021 17:12:28 -0400
Subject: [PATCH 779/788] release-managers: Add Security Release Team Slack
 contact methods

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 content/en/releases/release-managers.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/releases/release-managers.md b/content/en/releases/release-managers.md
index a7a282ae87..e8b895def6 100644
--- a/content/en/releases/release-managers.md
+++ b/content/en/releases/release-managers.md
@@ -25,8 +25,8 @@ The responsibilities of each role are described below.
 | Mailing List | Slack | Visibility | Usage | Membership |
 | --- | --- | --- | --- | --- |
 | [release-managers@kubernetes.io](mailto:release-managers@kubernetes.io) | [#release-management](https://kubernetes.slack.com/messages/CJH2GBF7Y) (channel) / @release-managers (user group) | Public | Public discussion for Release Managers | All Release Managers (including Associates, Build Admins, and SIG Chairs) |
-| [release-managers-private@kubernetes.io](mailto:release-managers-private@kubernetes.io) | [#release-private](https://kubernetes.slack.com/messages/GKEA5EL67) | Private | Private discussion for privileged Release Managers | Release Managers, SIG Release leadership |
-| [security-release-team@kubernetes.io](mailto:security-release-team@kubernetes.io) | N/A | Private | Security release coordination with the Product Security Committee | [security-discuss-private@kubernetes.io](mailto:security-discuss-private@kubernetes.io), [release-managers-private@kubernetes.io](mailto:release-managers-private@kubernetes.io) |
+| [release-managers-private@kubernetes.io](mailto:release-managers-private@kubernetes.io) | N/A | Private | Private discussion for privileged Release Managers | Release Managers, SIG Release leadership |
+| [security-release-team@kubernetes.io](mailto:security-release-team@kubernetes.io) | [#security-release-team](https://kubernetes.slack.com/archives/G0162T1RYHG) (channel) / @security-rel-team (user group) | Private | Security release coordination with the Product Security Committee | [security-discuss-private@kubernetes.io](mailto:security-discuss-private@kubernetes.io), [release-managers-private@kubernetes.io](mailto:release-managers-private@kubernetes.io) |
 
 ## Handbooks
 

From 2021adac4a9287d26ee45cc6e6ab6d63cd26e5d5 Mon Sep 17 00:00:00 2001
From: Stephen Augustus <foo@auggie.dev>
Date: Wed, 19 May 2021 17:30:51 -0400
Subject: [PATCH 780/788] releases: Update script reference and front matter
 for release.md

Signed-off-by: Stephen Augustus <foo@auggie.dev>
---
 content/en/releases/release.md        | 4 ++--
 scripts/releng/update-release-info.sh | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/releases/release.md b/content/en/releases/release.md
index 1632a20473..fa0f5e0b21 100644
--- a/content/en/releases/release.md
+++ b/content/en/releases/release.md
@@ -1,9 +1,9 @@
 ---
-title: The Release Cycle
+title: Kubernetes Release Cycle
 type: docs
 auto_generated: true
 ---
-<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
+<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/releng/update-release-info.sh in k/website -->
 
 {{< warning >}}
 This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-release/release.md).
diff --git a/scripts/releng/update-release-info.sh b/scripts/releng/update-release-info.sh
index ba403c2b5a..2cb601552e 100755
--- a/scripts/releng/update-release-info.sh
+++ b/scripts/releng/update-release-info.sh
@@ -4,11 +4,11 @@
 ####################################
 cat << EOF > content/en/releases/release.md
 ---
-title: The Release Cycle
+title: Kubernetes Release Cycle
 type: docs
 auto_generated: true
 ---
-<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/update-release-info.sh in k/website -->
+<!-- THIS CONTENT IS AUTO-GENERATED via ./scripts/releng/update-release-info.sh in k/website -->
 
 {{< warning >}}
 This content is auto-generated and links may not function. The source of the document is located [here](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-release/release.md).

From 46a0fb74a8ad6251b430cd6fd3a9d097327341aa Mon Sep 17 00:00:00 2001
From: Christopher Negus <striker57@gmail.com>
Date: Wed, 19 May 2021 21:50:18 +0000
Subject: [PATCH 781/788] Fixed broken Whats Next link

---
 content/en/docs/concepts/workloads/pods/init-containers.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/init-containers.md b/content/en/docs/concepts/workloads/pods/init-containers.md
index 1c67e357e5..6acd495d6e 100644
--- a/content/en/docs/concepts/workloads/pods/init-containers.md
+++ b/content/en/docs/concepts/workloads/pods/init-containers.md
@@ -324,7 +324,7 @@ init container completion record has been lost due to garbage collection. This
 applies for Kubernetes v1.20 and later. If you are using an earlier version of
 Kubernetes, consult the documentation for the version you are using.
 
-## {{% heading "whatsnext" %}}
+## What's next {#whats-next}
 
 
 * Read about [creating a Pod that has an init container](/docs/tasks/configure-pod-container/configure-pod-initialization/#create-a-pod-that-has-an-init-container)

From c1d5b91a1148980e9da22b4ce0be900273b42e85 Mon Sep 17 00:00:00 2001
From: 404_K <437292602@qq.com>
Date: Thu, 20 May 2021 12:55:43 +0800
Subject: [PATCH 782/788] Update overview.md

---
 content/zh/docs/reference/kubectl/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/reference/kubectl/overview.md b/content/zh/docs/reference/kubectl/overview.md
index aa3d13cdc6..cd740388d6 100644
--- a/content/zh/docs/reference/kubectl/overview.md
+++ b/content/zh/docs/reference/kubectl/overview.md
@@ -74,7 +74,7 @@ where `command`, `TYPE`, `NAME`, and `flags` are:
 -->
 * `command`：指定要对一个或多个资源执行的操作，例如 `create`、`get`、`describe`、`delete`。
 
-* `TYPE`：指定[资源类型](#resource-types)。资源类型不区分大小写，
+* `TYPE`：指定[资源类型](#资源类型)。资源类型不区分大小写，
   可以指定单数、复数或缩写形式。例如，以下命令输出相同的结果:
 
   ```shell

From 51e4200a674f17fc3bbfade4cdbe21e928463fff Mon Sep 17 00:00:00 2001
From: Christopher Negus <striker57@gmail.com>
Date: Thu, 20 May 2021 14:47:20 +0000
Subject: [PATCH 783/788] Fixed link to Whats next

---
 content/en/docs/concepts/workloads/pods/init-containers.md | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/concepts/workloads/pods/init-containers.md b/content/en/docs/concepts/workloads/pods/init-containers.md
index 6acd495d6e..c73bba5517 100644
--- a/content/en/docs/concepts/workloads/pods/init-containers.md
+++ b/content/en/docs/concepts/workloads/pods/init-containers.md
@@ -246,7 +246,7 @@ myapp-pod   1/1       Running   0          9m
 ```
 
 This simple example should provide some inspiration for you to create your own
-init containers. [What's next](#whats-next) contains a link to a more detailed example.
+init containers. [What's next](#what-s-next) contains a link to a more detailed example.
 
 ## Detailed behavior
 
@@ -324,8 +324,7 @@ init container completion record has been lost due to garbage collection. This
 applies for Kubernetes v1.20 and later. If you are using an earlier version of
 Kubernetes, consult the documentation for the version you are using.
 
-## What's next {#whats-next}
-
+## {{% heading "whatsnext" %}}
 
 * Read about [creating a Pod that has an init container](/docs/tasks/configure-pod-container/configure-pod-initialization/#create-a-pod-that-has-an-init-container)
 * Learn how to [debug init containers](/docs/tasks/debug-application-cluster/debug-init-containers/)

From 991bb00b59ec4118f546576d69a06775a1e387df Mon Sep 17 00:00:00 2001
From: Christopher Negus <striker57@gmail.com>
Date: Thu, 20 May 2021 19:23:16 +0000
Subject: [PATCH 784/788] Fixed link Whats next heading

---
 content/en/docs/setup/production-environment/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/_index.md b/content/en/docs/setup/production-environment/_index.md
index 27308495be..7b8eba7d6e 100644
--- a/content/en/docs/setup/production-environment/_index.md
+++ b/content/en/docs/setup/production-environment/_index.md
@@ -271,7 +271,7 @@ for information on creating a new service account. For example, you might want t
   - Add secrets that a pod could use to pull images from a particular container registry. See [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/) for an example.
   - Assign RBAC permissions to a service account. See [ServiceAccount permissions](/docs/reference/access-authn-authz/rbac/#service-account-permissions) for details.
 
-## What's next {#what-s-next}
+## {{% heading "whatsnext" %}}
 
 - Decide if you want to build your own production Kubernetes or obtain one from
 available [Turnkey Cloud Solutions](/docs/setup/production-environment/turnkey-solutions/)

From 4efbf939cc8a2b7a6f74d152cd7ed5419a5c163b Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 20 May 2021 20:55:38 +0100
Subject: [PATCH 785/788] Fix AKA for node-pressure eviction glossary item

---
 content/en/docs/reference/glossary/node-pressure-eviction.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/reference/glossary/node-pressure-eviction.md b/content/en/docs/reference/glossary/node-pressure-eviction.md
index 742ee3fe0c..05d641aeda 100644
--- a/content/en/docs/reference/glossary/node-pressure-eviction.md
+++ b/content/en/docs/reference/glossary/node-pressure-eviction.md
@@ -6,7 +6,8 @@ full_link: /docs/concepts/scheduling-eviction/node-pressure-eviction/
 short_description: >
   Node-pressure eviction is the process by which the kubelet proactively fails
   pods to reclaim resources on nodes.
-aka: kubelet eviction
+aka:
+- kubelet eviction
 tags:
 - operation
 ---

From c56839e403ab8f2994063785b46168d4310778cf Mon Sep 17 00:00:00 2001
From: Shannon Kularathna <shannduin@google.com>
Date: Fri, 21 May 2021 14:52:33 +0000
Subject: [PATCH 786/788] Update redirect destination

---
 static/_redirects | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/static/_redirects b/static/_redirects
index 399ee1604c..828413e411 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -262,7 +262,7 @@
 /docs/tasks/administer-cluster/quota-memory-cpu-namespace/     /docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/ 301
 /docs/tasks/administer-cluster/quota-pod-namespace/     /docs/tasks/administer-cluster/manage-resources/quota-pod-namespace/ 301
 /docs/tasks/administer-cluster/reserve-compute-resources/out-of-resource.md     /docs/tasks/administer-cluster/out-of-resource/ 301
-/docs/tasks/administer-cluster/out-of-resource/     /docs/concepts/scheduling-eviction/pod-eviction/ 301
+/docs/tasks/administer-cluster/out-of-resource/     /docs/concepts/scheduling-eviction/node-pressure-eviction/ 301
 /docs/tasks/administer-cluster/romana-network-policy/     /docs/tasks/administer-cluster/network-policy-provider/romana-network-policy/ 301
 /docs/tasks/administer-cluster/running-cloud-controller.md     /docs/tasks/administer-cluster/running-cloud-controller/ 301
 /docs/tasks/administer-cluster/share-configuration/     /docs/tasks/access-application-cluster/configure-access-multiple-clusters/ 301

From 5709cb1e6aefe52a1ea2d0d4a5637d5365c76001 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Mon, 24 May 2021 01:29:19 +0300
Subject: [PATCH 787/788] [fr] fix link replicaset.md

---
 content/fr/docs/concepts/workloads/controllers/replicaset.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/concepts/workloads/controllers/replicaset.md b/content/fr/docs/concepts/workloads/controllers/replicaset.md
index 81ccb6e7b3..820c8bb42d 100644
--- a/content/fr/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/fr/docs/concepts/workloads/controllers/replicaset.md
@@ -214,7 +214,7 @@ Un ReplicaSet a également besoin de [`.spec` section](https://git.k8s.io/commun
 L'attribut `.spec.template` est un [modèle de pod](/docs/concepts/workloads/Pods/pod-overview/#pod-templates) qui requiert d'avoir des labels. Dans notre exemple `frontend.yaml`, nous avons un label : `tier: frontend`.
 Il faut faire attention à ne pas avoir des selecteurs que d'autres controllers utilisent, afin d'éviter que le ReplicaSet n'adopte ce pod.
 
-Pour le champ [restart policy](/docs/concepts/workloads/Pods/pod-lifecycle/#restart-policy),
+Pour le champ [restart policy](/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy),
 `.spec.template.spec.restartPolicy`, la seule valeur autorisée est `Always`, qui est la valeur par défaut.
 
 ### Sélecteur de Pod

From e03702f13b10fde5f2f2034703b2efe1384b646f Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Tue, 25 May 2021 01:03:53 +0300
Subject: [PATCH 788/788] [ja] Update the link to install service catalog using
 Helm

---
 .../tasks/service-catalog/install-service-catalog-using-helm.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/service-catalog/install-service-catalog-using-helm.md b/content/ja/docs/tasks/service-catalog/install-service-catalog-using-helm.md
index eced279efc..ff894fba29 100644
--- a/content/ja/docs/tasks/service-catalog/install-service-catalog-using-helm.md
+++ b/content/ja/docs/tasks/service-catalog/install-service-catalog-using-helm.md
@@ -33,7 +33,7 @@ Helmをインストールし、以下のコマンドを実行することでロ
 
 
 ```shell
-helm repo add svc-cat https://svc-catalog-charts.storage.googleapis.com
+helm repo add svc-cat https://kubernetes-sigs.github.io/service-catalog
 ```
 
 以下のコマンドを実行し、インストールに成功していることを確認します。